VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, E cores; 8 x 700MHz; meteor,little, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.91 0.92 0.93 T:aes128gcmv1 1.07 1.08 1.09 aes256gcmv1 6.20 6.21 6.24 ascon128av12 9.23 9.24 9.25 ascon80pqv12 9.23 9.26 9.27 ascon128v12 11.48 11.50 11.53 ascon128abi32v12 13.97 14.01 14.12 T:xoodyakround3 16.34 16.36 16.46 T:schwaemm256128v2 16.46 16.49 16.52 ascon128bi32v12 21.66 21.70 21.78 T:schwaemm192192v2 22.86 22.92 23.04 T:schwaemm128128v2 23.35 23.70 23.82 T:schwaemm256256v2 24.83 24.91 24.96 T:grain128aeadv2 31.76 31.80 32.03 T:giftcofb128v1 35.78 35.83 35.90 T:isapa128v20 35.90 35.94 36.00 T:isapa128av20 36.89 36.91 36.94 romulusn 53.68 53.73 53.77 T:tinyjambu128v2 57.98 58.62 58.76 T:isapk128av20 58.72 59.00 59.18 romulusm 68.12 68.18 68.21 T:tinyjambu192v2 68.06 69.15 69.18 T:tinyjambu256v2 76.87 77.28 77.92 T:isapk128v20 123.51 123.55 123.70 romulust 156.10 158.93 162.71 T:isapxv20 164.07 167.46 170.56 T:elephant200v2 6133.25 6151.61 6156.99 T:elephant176v2 7208.51 7219.66 7237.10 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.96 0.97 0.99 T:aes128gcmv1 1.17 1.18 1.18 aes256gcmv1 6.18 6.20 6.21 ascon128av12 9.17 9.22 9.23 ascon128v12 9.20 9.24 9.25 ascon80pqv12 11.33 11.36 11.42 ascon128abi32v12 13.83 13.86 14.12 T:xoodyakround3 16.33 16.35 16.46 T:schwaemm256128v2 16.61 16.78 16.82 ascon128bi32v12 21.60 21.65 21.76 T:schwaemm192192v2 22.88 22.90 23.10 T:schwaemm128128v2 23.44 23.68 23.83 T:schwaemm256256v2 25.19 25.24 25.36 T:grain128aeadv2 31.66 31.91 32.16 T:giftcofb128v1 35.72 35.82 35.89 T:isapa128v20 35.90 35.95 36.01 T:isapa128av20 36.52 36.54 36.55 romulusn 53.75 53.77 53.82 T:tinyjambu128v2 58.09 58.68 58.82 T:isapk128av20 58.86 59.08 59.16 romulusm 68.19 68.22 68.27 T:tinyjambu192v2 68.27 69.21 69.27 T:tinyjambu256v2 76.76 77.09 77.59 T:isapk128v20 123.56 123.60 123.78 romulust 158.85 160.16 161.76 T:isapxv20 164.02 167.05 170.49 T:elephant200v2 6134.70 6155.48 6162.65 T:elephant176v2 7210.16 7218.98 7237.17 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.96 0.96 0.97 T:aes128gcmv1 1.17 1.17 1.18 aes256gcmv1 6.18 6.19 6.21 ascon128av12 9.19 9.21 9.22 ascon128v12 9.22 9.24 9.26 ascon80pqv12 11.31 11.36 11.43 ascon128abi32v12 13.80 13.91 14.13 T:xoodyakround3 16.35 16.37 16.47 T:schwaemm256128v2 16.64 16.78 16.83 ascon128bi32v12 17.76 17.83 17.88 T:isapa128v20 21.61 21.63 21.77 T:schwaemm192192v2 22.87 22.89 23.09 T:schwaemm128128v2 23.38 23.71 23.93 T:schwaemm256256v2 24.18 24.22 24.28 T:isapa128av20 25.24 25.30 25.37 T:grain128aeadv2 31.74 31.91 32.13 T:giftcofb128v1 36.53 36.54 36.56 romulusn 38.92 39.16 39.28 T:isapk128av20 41.85 41.92 42.13 romulust 48.11 48.44 48.69 T:isapk128v20 53.74 53.77 53.80 T:tinyjambu128v2 58.88 59.06 59.12 romulusm 68.18 68.24 68.28 T:tinyjambu192v2 68.33 69.21 69.25 T:tinyjambu256v2 94.70 95.29 96.30 T:isapxv20 164.07 167.08 170.47 T:elephant200v2 6132.28 6154.33 6162.46 T:elephant176v2 7206.49 7219.25 7238.04 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.67 0.68 0.69 T:aes128gcmv1 0.73 0.75 0.75 aes256gcmv1 6.17 6.19 6.20 ascon128av12 9.20 9.21 9.22 ascon128v12 9.19 9.22 9.23 ascon80pqv12 10.58 10.64 10.68 T:xoodyakround3 11.31 11.33 11.35 ascon128abi32v12 16.32 16.38 16.40 T:schwaemm256128v2 16.53 16.55 16.57 ascon128bi32v12 21.55 21.61 21.72 T:schwaemm192192v2 22.76 22.79 22.83 T:schwaemm128128v2 23.81 23.82 23.88 T:schwaemm256256v2 24.84 24.87 24.90 T:grain128aeadv2 26.85 26.88 26.93 T:isapa128v20 29.63 29.66 29.67 romulusn 30.05 30.07 30.15 T:isapa128av20 31.85 31.97 32.01 T:giftcofb128v1 40.45 40.53 40.67 romulusm 43.85 43.86 43.89 T:tinyjambu128v2 48.53 48.69 48.76 T:isapk128av20 51.11 51.20 51.50 T:tinyjambu192v2 51.76 52.28 52.32 T:tinyjambu256v2 63.00 63.20 63.51 T:isapk128v20 82.63 82.77 82.86 romulust 125.45 127.15 128.63 T:isapxv20 125.31 127.19 127.72 T:elephant200v2 4581.37 4587.99 4649.02 T:elephant176v2 5410.73 5427.92 5429.43 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.68 0.69 0.70 T:aes128gcmv1 0.78 0.80 0.81 aes256gcmv1 6.16 6.17 6.19 ascon128av12 9.19 9.21 9.23 ascon128v12 9.19 9.22 9.23 ascon80pqv12 10.51 10.61 10.78 T:xoodyakround3 11.21 11.25 11.29 ascon128abi32v12 16.35 16.37 16.39 T:schwaemm256128v2 16.63 16.71 16.76 ascon128bi32v12 21.36 21.49 21.58 T:schwaemm192192v2 22.77 22.81 22.92 T:schwaemm128128v2 23.82 23.87 23.88 T:schwaemm256256v2 25.00 25.02 25.07 T:grain128aeadv2 26.84 26.88 26.95 T:isapa128v20 29.46 29.48 29.52 romulusn 30.08 30.11 30.19 T:isapa128av20 31.86 31.91 31.99 T:giftcofb128v1 40.51 40.59 40.67 romulusm 43.87 43.89 43.91 T:tinyjambu128v2 48.57 48.70 48.86 T:isapk128av20 51.22 51.25 51.28 T:tinyjambu192v2 52.33 52.35 52.37 T:tinyjambu256v2 63.12 63.23 63.39 T:isapk128v20 82.65 82.73 82.82 romulust 125.40 126.76 127.19 T:elephant200v2 126.98 127.68 128.56 T:isapxv20 4586.79 4647.43 4652.45 T:elephant176v2 5407.15 5428.52 5431.22 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.69 0.69 0.70 T:aes128gcmv1 0.79 0.80 0.80 aes256gcmv1 6.16 6.17 6.19 ascon128av12 9.21 9.22 9.24 ascon80pqv12 9.20 9.22 9.24 ascon128v12 10.49 10.56 10.75 T:xoodyakround3 11.23 11.27 11.29 ascon128abi32v12 16.33 16.38 16.40 T:schwaemm256128v2 16.62 16.65 16.69 ascon128bi32v12 17.87 17.91 17.94 T:isapa128v20 21.44 21.45 21.57 T:schwaemm192192v2 22.77 22.81 22.88 T:schwaemm128128v2 23.80 23.83 23.85 T:schwaemm256256v2 24.19 24.23 24.27 T:isapa128av20 24.99 25.03 25.09 T:grain128aeadv2 29.46 29.49 29.52 romulusn 31.88 31.90 32.02 T:giftcofb128v1 39.00 39.07 39.13 T:isapk128av20 40.58 40.62 40.68 romulusm 41.90 41.94 42.03 romulust 43.86 43.88 43.90 T:tinyjambu128v2 48.75 48.90 48.97 T:isapk128v20 51.22 51.25 51.27 T:tinyjambu192v2 52.33 52.35 52.37 T:tinyjambu256v2 94.33 94.60 96.08 T:isapxv20 125.49 126.77 127.21 T:elephant200v2 4592.67 4647.66 4651.95 T:elephant176v2 5407.73 5429.03 5433.03 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.43 0.44 0.45 aes256gcmv1 0.43 0.45 0.46 T:aes128gcmv1 6.14 6.15 6.16 ascon128av12 7.26 7.38 7.41 T:xoodyakround3 9.14 9.16 9.16 ascon128v12 9.19 9.19 9.22 ascon80pqv12 11.12 11.15 11.17 ascon128abi32v12 16.19 16.28 16.33 T:schwaemm256128v2 16.59 16.62 16.63 ascon128bi32v12 17.89 18.00 18.07 T:isapa128v20 21.40 21.53 21.65 T:schwaemm192192v2 22.21 22.23 22.37 romulusm 22.39 22.43 22.47 romulusn 22.71 22.79 22.87 T:schwaemm128128v2 23.29 23.59 23.76 T:schwaemm256256v2 24.22 24.24 24.28 T:isapa128av20 24.80 24.84 24.87 T:grain128aeadv2 31.54 31.84 32.02 T:giftcofb128v1 32.78 32.81 33.99 T:tinyjambu128v2 34.06 34.09 34.12 T:tinyjambu192v2 35.45 35.48 35.50 T:tinyjambu256v2 38.97 39.04 39.32 T:isapk128av20 41.82 41.90 41.93 romulust 48.72 49.33 49.69 T:isapk128v20 83.37 84.20 84.37 T:elephant200v2 92.91 94.53 95.66 T:isapxv20 3029.36 3031.45 3037.40 T:elephant176v2 3599.53 3608.70 3620.63 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.43 0.44 0.45 aes256gcmv1 0.44 0.45 0.46 T:aes128gcmv1 6.14 6.16 6.17 ascon128av12 7.26 7.32 7.40 T:xoodyakround3 9.18 9.22 9.23 ascon128v12 9.21 9.22 9.22 ascon80pqv12 11.13 11.15 11.17 ascon128abi32v12 16.20 16.25 16.33 T:schwaemm256128v2 16.43 16.47 16.69 ascon128bi32v12 17.95 18.03 18.11 T:isapa128v20 21.40 21.46 21.55 T:schwaemm192192v2 22.20 22.23 22.39 romulusm 22.37 22.39 22.42 romulusn 22.81 22.87 22.90 T:schwaemm128128v2 23.31 23.54 23.75 T:schwaemm256256v2 24.20 24.23 24.28 T:isapa128av20 24.76 24.82 24.84 T:grain128aeadv2 31.85 31.96 32.00 T:giftcofb128v1 32.78 32.83 33.97 T:tinyjambu128v2 34.22 34.25 34.27 T:tinyjambu192v2 35.45 35.47 35.51 T:tinyjambu256v2 39.03 39.12 39.17 T:isapk128av20 41.89 41.96 42.00 romulust 48.71 49.22 49.52 T:isapk128v20 83.54 83.90 84.36 T:elephant200v2 94.19 94.60 95.62 T:isapxv20 3028.79 3031.27 3034.91 T:elephant176v2 3600.86 3607.82 3623.11 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.43 0.43 0.45 aes256gcmv1 0.44 0.45 0.45 T:aes128gcmv1 6.14 6.16 6.18 ascon128av12 7.27 7.30 7.43 T:xoodyakround3 9.18 9.21 9.22 ascon128v12 9.21 9.22 9.23 ascon80pqv12 11.12 11.14 11.16 ascon128abi32v12 16.24 16.26 16.34 T:schwaemm256128v2 16.43 16.46 16.67 ascon128bi32v12 17.98 18.04 18.11 T:isapa128v20 21.40 21.53 21.54 T:schwaemm192192v2 22.21 22.23 22.32 romulusm 22.39 22.44 22.48 romulusn 22.71 22.81 22.95 T:schwaemm128128v2 23.37 23.58 23.77 T:schwaemm256256v2 24.20 24.23 24.29 T:isapa128av20 24.77 24.83 24.85 T:grain128aeadv2 31.55 31.96 31.98 T:giftcofb128v1 32.68 32.78 33.96 T:tinyjambu128v2 34.25 34.28 34.32 T:tinyjambu192v2 35.46 35.48 35.50 T:tinyjambu256v2 38.95 39.09 39.18 T:isapk128av20 41.79 41.93 41.96 romulust 48.66 49.15 49.60 T:isapk128v20 83.01 83.82 84.24 T:elephant200v2 94.43 94.61 95.87 T:isapxv20 3028.56 3032.08 3033.67 T:elephant176v2 3600.03 3608.82 3621.56 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.77 0.77 0.78 T:aes128gcmv1 0.85 0.86 0.86 aes256gcmv1 6.33 6.33 6.34 ascon128av12 9.33 9.36 9.37 ascon128v12 9.36 9.38 9.38 ascon80pqv12 10.69 10.76 10.80 T:xoodyakround3 11.62 11.65 11.68 ascon128abi32v12 16.82 16.83 16.85 ascon128bi32v12 16.78 16.85 16.86 T:schwaemm256128v2 21.85 21.88 21.90 T:schwaemm192192v2 23.09 23.10 23.10 T:schwaemm128128v2 24.47 24.49 24.53 T:schwaemm256256v2 25.12 25.17 25.19 T:grain128aeadv2 29.87 29.93 29.94 romulusn 31.91 32.05 32.09 T:isapa128av20 32.11 32.14 32.28 T:giftcofb128v1 39.18 39.23 39.26 T:isapa128v20 40.78 40.83 40.96 romulusm 44.18 44.20 44.21 T:tinyjambu128v2 51.46 51.48 51.53 T:tinyjambu192v2 52.69 52.70 52.74 T:tinyjambu256v2 55.88 56.02 56.05 T:isapk128av20 83.87 83.90 84.06 romulust 110.65 110.68 110.86 T:isapk128v20 128.87 129.17 129.98 T:elephant200v2 208.82 209.29 210.67 T:isapxv20 4614.55 4629.46 4633.18 T:elephant176v2 5483.25 5492.59 5494.98 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.79 0.79 0.80 T:aes128gcmv1 0.90 0.91 0.92 aes256gcmv1 6.31 6.33 6.34 ascon128av12 9.33 9.34 9.36 ascon128v12 9.36 9.37 9.38 ascon80pqv12 10.64 10.68 10.76 T:xoodyakround3 11.54 11.56 11.58 ascon128abi32v12 16.77 16.82 16.86 T:schwaemm256128v2 16.94 17.01 17.02 ascon128bi32v12 21.88 21.89 21.91 T:schwaemm192192v2 23.09 23.09 23.11 T:schwaemm128128v2 24.45 24.45 24.46 T:schwaemm256256v2 25.30 25.35 25.39 T:grain128aeadv2 29.71 29.73 29.75 romulusn 32.07 32.12 32.15 T:isapa128av20 32.19 32.22 32.35 T:giftcofb128v1 39.21 39.23 39.26 T:isapa128v20 40.89 40.93 40.99 romulusm 44.21 44.22 44.25 T:tinyjambu128v2 51.58 51.60 51.63 T:tinyjambu192v2 52.71 52.74 52.76 T:tinyjambu256v2 55.86 56.01 56.06 T:isapk128av20 83.83 83.85 83.92 romulust 110.62 110.66 110.72 T:isapk128v20 128.71 129.00 129.76 T:elephant200v2 210.69 210.88 211.10 T:isapxv20 4615.89 4629.01 4630.83 T:elephant176v2 5482.58 5492.06 5493.72 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.79 0.79 0.80 T:aes128gcmv1 0.90 0.90 0.90 aes256gcmv1 6.31 6.32 6.33 ascon128av12 9.34 9.35 9.37 ascon128v12 9.35 9.36 9.37 ascon80pqv12 10.67 10.69 10.81 T:xoodyakround3 11.54 11.56 11.59 ascon128abi32v12 16.77 16.81 16.86 T:schwaemm256128v2 16.92 16.93 16.97 ascon128bi32v12 21.83 21.90 21.98 T:schwaemm192192v2 23.07 23.10 23.12 T:schwaemm128128v2 24.14 24.16 24.18 T:isapa128v20 24.46 24.49 24.51 T:schwaemm256256v2 25.33 25.36 25.39 T:grain128aeadv2 25.37 25.38 25.42 T:isapa128av20 29.73 29.75 29.78 romulusn 32.18 32.20 32.34 T:giftcofb128v1 40.86 40.92 40.98 romulusm 43.13 43.15 43.20 romulust 43.57 43.65 43.80 T:isapk128av20 44.20 44.21 44.22 T:tinyjambu128v2 51.59 51.60 51.62 T:tinyjambu192v2 52.70 52.72 52.74 T:tinyjambu256v2 73.68 73.87 73.92 T:isapk128v20 128.58 128.78 129.65 T:elephant200v2 137.35 137.52 138.44 T:isapxv20 4613.10 4627.61 4630.55 T:elephant176v2 5492.53 5493.03 5493.79 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.32 4.43 4.49 T:aes128gcmv1 4.75 4.80 4.95 aes256gcmv1 9.97 10.05 10.25 ascon128av12 12.28 12.41 12.64 ascon128v12 12.69 12.81 12.92 ascon80pqv12 15.48 15.79 16.16 T:xoodyakround3 18.84 18.98 19.48 ascon128abi32v12 23.20 23.25 23.57 ascon128bi32v12 27.30 27.41 27.73 T:schwaemm256128v2 29.76 29.82 30.16 T:schwaemm128128v2 32.02 32.14 32.34 T:grain128aeadv2 35.66 35.75 35.82 romulusn 35.49 35.86 36.18 T:schwaemm192192v2 38.42 38.59 38.94 T:schwaemm256256v2 38.51 38.61 38.93 T:giftcofb128v1 46.88 47.04 47.20 romulusm 51.62 51.82 52.26 T:tinyjambu128v2 59.88 60.04 60.09 T:tinyjambu192v2 61.34 61.51 61.71 T:tinyjambu256v2 77.57 77.95 78.66 T:isapa128av20 111.64 111.76 112.07 romulust 181.06 181.98 182.55 T:elephant200v2 211.72 213.23 215.24 T:isapk128av20 322.95 323.33 323.78 T:isapa128v20 1187.80 1190.03 1193.66 T:isapk128v20 2056.98 2085.68 2113.30 T:isapxv20 5747.74 5756.48 5785.29 T:elephant176v2 7321.52 7324.99 7361.64 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.30 4.41 4.55 T:aes128gcmv1 4.79 4.86 4.93 aes256gcmv1 9.88 10.05 10.43 ascon128av12 12.28 12.34 12.45 ascon128v12 12.58 12.79 13.02 ascon80pqv12 15.47 15.55 15.71 T:xoodyakround3 18.70 18.78 18.98 ascon128abi32v12 23.14 23.23 23.47 ascon128bi32v12 27.43 27.48 27.58 T:schwaemm256128v2 29.77 29.81 30.07 T:schwaemm128128v2 32.20 32.34 32.42 T:grain128aeadv2 35.48 35.60 35.70 romulusn 35.52 35.62 35.74 T:schwaemm192192v2 38.50 38.70 38.95 T:schwaemm256256v2 38.83 38.91 39.11 T:giftcofb128v1 48.30 48.38 48.70 romulusm 51.70 51.80 52.08 T:tinyjambu128v2 59.83 59.95 60.15 T:tinyjambu192v2 61.46 61.57 61.63 T:tinyjambu256v2 76.97 77.22 77.72 T:isapa128av20 111.59 111.76 112.60 romulust 179.48 181.58 182.52 T:elephant200v2 211.60 214.12 214.96 T:isapk128av20 322.95 323.65 324.05 T:isapa128v20 1190.41 1191.59 1194.42 T:isapk128v20 2093.92 2109.75 2120.21 T:isapxv20 5741.03 5746.16 5791.84 T:elephant176v2 7321.54 7324.05 7371.00 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.30 4.34 4.39 T:aes128gcmv1 4.72 4.80 4.84 aes256gcmv1 9.62 9.79 9.83 ascon128av12 12.25 12.37 12.41 ascon128v12 12.59 12.70 12.81 ascon80pqv12 15.46 15.77 16.08 T:xoodyakround3 18.73 18.84 18.90 ascon128abi32v12 23.21 23.27 23.36 ascon128bi32v12 27.39 27.45 27.50 T:schwaemm256128v2 29.77 29.81 29.84 T:schwaemm128128v2 32.03 32.31 32.43 T:grain128aeadv2 35.45 35.49 35.60 romulusn 35.43 35.55 35.59 T:schwaemm192192v2 38.39 38.52 38.82 T:schwaemm256256v2 38.82 38.95 39.01 T:giftcofb128v1 48.27 48.41 48.58 romulusm 51.07 51.16 51.69 T:isapa128av20 51.69 51.74 51.84 T:tinyjambu128v2 59.70 59.82 59.97 T:tinyjambu192v2 61.33 61.39 61.55 T:tinyjambu256v2 69.88 70.05 70.45 romulust 139.43 140.55 141.02 T:isapk128av20 168.32 168.39 169.51 T:isapa128v20 181.18 181.52 182.55 T:elephant200v2 637.27 637.97 641.11 T:isapk128v20 1095.62 1104.27 1107.09 T:isapxv20 5741.86 5744.63 5746.84 T:elephant176v2 7321.02 7323.57 7370.48 T:elephant160v2