VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, LPE cores; 2 x 700MHz; meteor,tiny, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.91 0.92 0.92 T:aes128gcmv1 1.05 1.07 1.07 aes256gcmv1 6.19 6.21 6.22 ascon128av12 9.17 9.18 9.19 ascon128v12 9.26 9.28 9.29 ascon80pqv12 11.48 11.51 11.53 ascon128abi32v12 13.91 13.98 14.02 T:xoodyakround3 16.38 16.42 16.43 T:schwaemm256128v2 16.47 16.49 16.51 ascon128bi32v12 21.60 21.69 21.77 T:schwaemm192192v2 22.98 23.58 23.72 T:schwaemm128128v2 23.37 23.83 23.97 T:schwaemm256256v2 24.87 24.93 24.98 T:grain128aeadv2 31.50 31.77 31.79 T:giftcofb128v1 35.71 35.88 35.92 T:isapa128v20 35.90 35.95 35.99 T:isapa128av20 36.88 36.90 36.92 romulusn 53.70 53.73 53.75 T:tinyjambu128v2 58.02 58.37 58.55 T:isapk128av20 58.92 59.05 59.14 romulusm 68.55 68.58 68.67 T:tinyjambu192v2 69.15 69.17 69.26 T:tinyjambu256v2 76.72 77.13 78.07 T:isapk128v20 123.40 123.54 123.78 romulust 158.96 159.23 159.91 T:isapxv20 167.50 168.67 170.76 T:elephant200v2 6236.12 6262.92 6321.36 T:elephant176v2 7220.06 7226.36 7341.30 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.94 0.95 0.96 T:aes128gcmv1 1.14 1.15 1.16 aes256gcmv1 6.16 6.18 6.20 ascon128av12 9.18 9.20 9.22 ascon128v12 9.22 9.24 9.27 ascon80pqv12 11.34 11.41 11.44 ascon128abi32v12 13.93 14.01 14.04 T:xoodyakround3 16.32 16.35 16.42 T:schwaemm256128v2 16.49 16.51 16.59 ascon128bi32v12 21.55 21.61 21.78 T:schwaemm192192v2 23.15 23.53 23.70 T:schwaemm128128v2 23.44 23.81 23.90 T:schwaemm256256v2 25.18 25.23 25.25 T:grain128aeadv2 31.69 31.91 32.01 T:giftcofb128v1 35.66 35.78 35.84 T:isapa128v20 35.92 35.96 36.01 T:isapa128av20 36.52 36.54 36.55 romulusn 53.74 53.80 53.86 T:tinyjambu128v2 58.07 58.41 58.84 T:isapk128av20 59.03 59.06 59.24 romulusm 68.67 68.74 68.86 T:tinyjambu192v2 69.20 69.23 69.26 T:tinyjambu256v2 76.64 76.99 77.40 T:isapk128v20 123.51 123.62 123.78 romulust 157.97 160.44 170.55 T:isapxv20 168.26 168.62 170.27 T:elephant200v2 6209.02 6270.09 6308.43 T:elephant176v2 7220.27 7225.86 7332.02 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.95 0.96 0.96 T:aes128gcmv1 1.14 1.15 1.16 aes256gcmv1 6.17 6.19 6.20 ascon128av12 9.18 9.20 9.21 ascon128v12 9.21 9.23 9.25 ascon80pqv12 11.38 11.43 11.45 ascon128abi32v12 13.73 13.80 13.98 T:xoodyakround3 16.33 16.39 16.44 T:schwaemm256128v2 16.50 16.51 16.53 ascon128bi32v12 17.79 17.87 17.93 T:isapa128v20 21.65 21.66 21.77 T:schwaemm192192v2 23.09 23.57 23.76 T:schwaemm128128v2 23.36 23.73 23.98 T:schwaemm256256v2 24.17 24.23 24.29 T:isapa128av20 25.21 25.24 25.29 T:grain128aeadv2 31.41 31.90 32.00 T:giftcofb128v1 36.51 36.53 36.55 romulusn 38.84 38.97 39.18 T:isapk128av20 41.88 41.96 42.17 romulust 48.09 48.48 48.69 T:isapk128v20 53.74 53.79 53.84 T:tinyjambu128v2 59.02 59.07 59.12 romulusm 68.66 68.71 68.77 T:tinyjambu192v2 69.22 69.27 69.31 T:tinyjambu256v2 92.85 94.69 95.97 T:isapxv20 167.05 168.42 170.30 T:elephant200v2 6224.92 6288.01 6306.82 T:elephant176v2 7222.20 7226.40 7342.30 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.67 0.68 0.69 T:aes128gcmv1 0.72 0.74 0.75 aes256gcmv1 6.17 6.19 6.20 ascon128av12 9.19 9.21 9.23 ascon80pqv12 9.21 9.22 9.24 ascon128v12 10.59 10.63 10.71 T:xoodyakround3 11.31 11.32 11.35 ascon128abi32v12 16.29 16.31 16.33 T:schwaemm256128v2 16.53 16.55 16.57 ascon128bi32v12 21.46 21.59 21.70 T:schwaemm192192v2 23.63 23.72 23.80 T:schwaemm128128v2 23.83 23.87 23.94 T:schwaemm256256v2 24.82 24.85 24.88 T:grain128aeadv2 26.83 26.87 26.92 T:isapa128v20 29.67 29.68 29.70 romulusn 29.87 29.92 30.07 T:isapa128av20 31.82 31.84 31.96 T:giftcofb128v1 40.52 40.57 40.63 romulusm 43.83 43.85 43.88 T:tinyjambu128v2 48.66 48.79 48.85 T:isapk128av20 51.34 51.42 51.57 T:tinyjambu192v2 52.29 52.31 52.39 T:tinyjambu256v2 63.08 63.17 63.34 T:isapk128v20 82.58 82.66 82.75 romulust 125.94 126.30 127.31 T:elephant200v2 126.17 127.01 128.54 T:isapxv20 4571.18 4631.39 4662.84 T:elephant176v2 5423.72 5428.70 5509.76 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.67 0.69 0.70 T:aes128gcmv1 0.78 0.79 0.80 aes256gcmv1 6.15 6.16 6.17 ascon128av12 9.17 9.20 9.20 ascon128v12 9.20 9.25 9.25 ascon80pqv12 10.52 10.56 10.59 T:xoodyakround3 11.23 11.27 11.29 ascon128abi32v12 16.25 16.28 16.31 T:schwaemm256128v2 16.45 16.49 16.58 ascon128bi32v12 21.32 21.57 21.71 T:schwaemm192192v2 23.29 23.61 23.65 T:schwaemm128128v2 23.82 23.84 23.96 T:schwaemm256256v2 24.96 24.99 25.02 T:grain128aeadv2 26.83 26.87 26.90 T:isapa128v20 29.48 29.50 29.56 romulusn 29.96 30.10 30.19 T:isapa128av20 31.87 31.89 31.91 T:giftcofb128v1 40.52 40.56 40.75 romulusm 43.88 43.92 43.95 T:tinyjambu128v2 48.60 48.67 48.85 T:isapk128av20 51.12 51.15 51.26 T:tinyjambu192v2 52.32 52.35 52.41 T:tinyjambu256v2 62.97 63.15 63.37 T:isapk128v20 82.63 82.68 82.77 romulust 125.57 125.82 127.45 T:elephant200v2 126.37 126.91 129.05 T:isapxv20 4599.92 4636.69 4685.31 T:elephant176v2 5416.19 5423.19 5498.79 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.68 0.70 0.70 T:aes128gcmv1 0.78 0.79 0.80 aes256gcmv1 6.15 6.17 6.18 ascon128av12 9.19 9.20 9.22 ascon128v12 9.22 9.24 9.25 ascon80pqv12 10.58 10.62 10.65 T:xoodyakround3 11.23 11.25 11.29 ascon128abi32v12 16.27 16.31 16.32 T:schwaemm256128v2 16.46 16.48 16.54 ascon128bi32v12 17.85 17.90 17.93 T:isapa128v20 21.41 21.61 21.66 T:schwaemm192192v2 22.55 23.63 23.84 T:schwaemm128128v2 23.84 23.86 23.91 T:schwaemm256256v2 24.07 24.20 24.24 T:isapa128av20 24.99 25.01 25.05 T:grain128aeadv2 29.46 29.48 29.57 romulusn 31.63 31.88 31.90 T:giftcofb128v1 38.97 39.08 39.15 T:isapk128av20 40.54 40.57 40.78 romulusm 41.91 41.96 42.06 romulust 43.89 43.92 43.98 T:tinyjambu128v2 48.78 48.85 48.98 T:isapk128v20 51.11 51.16 51.21 T:tinyjambu192v2 52.32 52.34 52.41 T:tinyjambu256v2 93.97 94.45 94.92 T:isapxv20 125.58 126.43 127.28 T:elephant200v2 4570.42 4640.20 4671.58 T:elephant176v2 5419.79 5424.20 5495.13 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.42 0.43 0.43 T:aes128gcmv1 0.43 0.44 0.44 aes256gcmv1 6.14 6.15 6.16 ascon128av12 7.36 7.39 7.41 T:xoodyakround3 9.12 9.15 9.21 ascon80pqv12 9.21 9.22 9.24 ascon128v12 11.14 11.16 11.18 ascon128abi32v12 16.18 16.27 16.32 T:schwaemm256128v2 16.58 16.61 16.63 ascon128bi32v12 17.94 17.99 18.04 T:isapa128v20 21.42 21.53 21.57 T:schwaemm192192v2 22.19 22.24 22.34 romulusm 22.38 22.42 22.47 romulusn 22.69 22.75 23.93 T:schwaemm128128v2 23.74 23.76 23.82 T:schwaemm256256v2 24.18 24.22 24.26 T:isapa128av20 24.71 24.75 24.79 T:grain128aeadv2 31.80 31.83 31.86 T:giftcofb128v1 33.97 34.01 34.03 T:tinyjambu128v2 34.14 34.18 34.22 T:tinyjambu192v2 34.26 35.47 35.52 T:tinyjambu256v2 38.86 39.02 39.18 T:isapk128av20 41.88 41.91 41.95 romulust 48.52 49.02 49.31 T:isapk128v20 82.81 83.25 84.44 T:elephant200v2 93.56 94.08 94.21 T:isapxv20 3068.41 3110.75 3141.26 T:elephant176v2 3615.06 3618.87 3643.18 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.42 0.43 0.44 aes256gcmv1 0.43 0.44 0.44 T:aes128gcmv1 6.14 6.15 6.18 ascon128av12 7.25 7.37 7.41 T:xoodyakround3 9.19 9.21 9.24 ascon80pqv12 9.20 9.21 9.22 ascon128v12 11.10 11.14 11.16 ascon128abi32v12 16.21 16.27 16.29 T:schwaemm256128v2 16.43 16.45 16.49 ascon128bi32v12 17.94 18.03 18.12 T:isapa128v20 21.45 21.47 21.50 T:schwaemm192192v2 22.20 22.25 22.28 romulusm 22.33 22.39 22.42 romulusn 22.48 23.61 23.92 T:schwaemm128128v2 23.75 23.77 23.81 T:schwaemm256256v2 24.19 24.26 24.29 T:isapa128av20 24.75 24.78 24.84 T:grain128aeadv2 31.78 31.84 31.87 T:giftcofb128v1 33.56 33.58 33.65 T:tinyjambu192v2 33.98 34.00 34.04 T:tinyjambu128v2 34.27 35.45 35.53 T:tinyjambu256v2 38.81 38.93 39.10 T:isapk128av20 41.90 41.94 41.97 romulust 48.69 49.02 49.14 T:isapk128v20 82.84 83.74 84.46 T:elephant200v2 93.05 94.10 95.35 T:isapxv20 3089.48 3111.49 3140.95 T:elephant176v2 3611.69 3618.97 3675.23 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.42 0.43 0.43 aes256gcmv1 0.43 0.43 0.45 T:aes128gcmv1 6.14 6.16 6.17 ascon128av12 7.25 7.34 7.41 T:xoodyakround3 9.19 9.21 9.24 ascon80pqv12 9.21 9.22 9.22 ascon128v12 11.11 11.13 11.15 ascon128abi32v12 16.21 16.27 16.33 T:schwaemm256128v2 16.43 16.47 16.68 ascon128bi32v12 17.91 18.03 18.08 T:isapa128v20 21.42 21.44 21.53 T:schwaemm192192v2 22.22 22.23 22.30 romulusm 22.37 22.40 22.43 romulusn 22.61 23.61 23.90 T:schwaemm128128v2 23.73 23.77 23.82 T:schwaemm256256v2 24.17 24.22 24.27 T:isapa128av20 24.77 24.80 24.85 T:grain128aeadv2 31.79 31.81 31.87 T:giftcofb128v1 33.55 33.57 33.63 T:tinyjambu192v2 33.98 34.00 34.02 T:tinyjambu128v2 34.26 35.46 35.55 T:tinyjambu256v2 38.83 39.02 39.19 T:isapk128av20 41.87 41.90 41.96 romulust 48.74 48.95 49.10 T:isapk128v20 82.73 83.48 84.14 T:elephant200v2 92.38 93.86 94.94 T:isapxv20 3082.45 3107.58 3149.25 T:elephant176v2 3615.94 3621.97 3683.28 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.76 0.76 0.77 T:aes128gcmv1 0.85 0.85 0.86 aes256gcmv1 6.32 6.34 6.35 ascon128av12 9.35 9.35 9.37 ascon80pqv12 9.37 9.38 9.39 ascon128v12 10.66 10.68 10.71 T:xoodyakround3 11.63 11.64 11.66 ascon128abi32v12 16.83 16.84 16.84 ascon128bi32v12 16.82 16.85 16.87 T:schwaemm256128v2 21.98 22.00 22.04 T:schwaemm192192v2 22.87 23.97 24.06 T:schwaemm128128v2 24.21 24.46 24.47 T:schwaemm256256v2 25.16 25.18 25.21 T:grain128aeadv2 29.87 29.93 29.95 romulusn 32.05 32.07 32.10 T:isapa128av20 32.01 32.10 32.15 T:giftcofb128v1 39.16 39.18 39.21 T:isapa128v20 40.77 40.84 40.88 romulusm 44.19 44.20 44.22 T:tinyjambu128v2 51.69 51.71 51.72 T:tinyjambu192v2 51.71 52.71 52.73 T:tinyjambu256v2 55.91 56.02 56.16 T:isapk128av20 83.88 83.91 83.97 romulust 110.76 110.90 114.03 T:isapk128v20 128.18 129.17 130.13 T:elephant200v2 208.27 209.18 209.82 T:isapxv20 4631.39 4693.73 4725.93 T:elephant176v2 5471.00 5478.60 5582.73 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.78 0.79 0.79 T:aes128gcmv1 0.90 0.90 0.91 aes256gcmv1 6.31 6.32 6.33 ascon128av12 9.34 9.34 9.39 ascon128v12 9.35 9.37 9.39 ascon80pqv12 10.59 10.75 10.81 T:xoodyakround3 11.55 11.58 11.60 ascon128abi32v12 16.75 16.76 16.87 ascon128bi32v12 16.78 16.79 16.80 T:schwaemm256128v2 21.96 22.06 22.09 T:schwaemm192192v2 22.94 23.18 24.07 T:schwaemm128128v2 24.21 24.43 24.44 T:schwaemm256256v2 25.32 25.32 25.35 T:grain128aeadv2 29.72 29.74 29.77 romulusn 32.07 32.08 32.13 T:isapa128av20 31.84 32.16 32.21 T:giftcofb128v1 39.22 39.26 39.28 T:isapa128v20 40.92 40.94 41.15 romulusm 44.22 44.24 44.26 T:tinyjambu128v2 51.48 51.51 51.54 T:tinyjambu192v2 51.61 52.70 52.74 T:tinyjambu256v2 55.79 55.94 56.14 T:isapk128av20 83.84 83.99 84.07 romulust 110.64 110.80 114.69 T:isapk128v20 127.80 129.03 129.70 T:elephant200v2 209.40 210.86 211.17 T:isapxv20 4627.87 4683.82 4704.99 T:elephant176v2 5477.91 5490.72 5543.36 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.79 0.79 0.79 T:aes128gcmv1 0.90 0.90 0.91 aes256gcmv1 6.31 6.32 6.32 ascon128av12 9.33 9.35 9.36 ascon128v12 9.37 9.38 9.39 ascon80pqv12 10.67 10.79 10.82 T:xoodyakround3 11.55 11.57 11.59 ascon128abi32v12 16.75 16.77 16.80 ascon128bi32v12 16.75 16.77 16.85 T:schwaemm256128v2 21.82 22.00 22.08 T:schwaemm192192v2 23.23 23.99 24.09 T:schwaemm128128v2 24.16 24.17 24.23 T:isapa128v20 24.21 24.44 24.46 T:schwaemm256256v2 25.30 25.33 25.35 T:grain128aeadv2 25.34 25.36 25.41 T:isapa128av20 29.71 29.73 29.75 romulusn 32.05 32.17 32.22 T:giftcofb128v1 40.89 40.92 41.05 romulusm 43.05 43.11 43.19 romulust 43.63 43.75 43.80 T:isapk128av20 44.20 44.22 44.24 T:tinyjambu128v2 51.46 51.47 51.49 T:tinyjambu192v2 51.62 52.72 52.75 T:tinyjambu256v2 73.83 73.98 76.68 T:isapk128v20 127.89 129.10 129.57 T:elephant200v2 136.87 137.22 137.42 T:isapxv20 4631.98 4664.99 4707.52 T:elephant176v2 5480.01 5492.29 5574.21 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.37 4.39 4.42 T:aes128gcmv1 5.58 5.68 5.95 aes256gcmv1 9.80 9.96 10.45 ascon128av12 12.30 12.36 12.48 ascon80pqv12 12.62 12.73 12.85 ascon128v12 15.55 15.72 16.08 T:xoodyakround3 18.85 19.02 19.21 ascon128abi32v12 23.07 23.18 23.56 ascon128bi32v12 27.47 27.64 27.88 T:schwaemm256128v2 30.20 30.86 31.05 T:schwaemm128128v2 32.24 32.38 32.48 T:grain128aeadv2 35.27 35.45 35.82 T:schwaemm192192v2 35.74 35.80 35.84 romulusn 38.52 38.71 38.81 T:giftcofb128v1 38.77 38.95 39.24 T:schwaemm256256v2 46.92 46.98 47.22 romulusm 51.56 51.68 51.91 T:tinyjambu128v2 59.98 60.08 60.15 T:tinyjambu192v2 61.02 61.27 61.65 T:tinyjambu256v2 77.48 77.73 78.23 T:isapa128av20 111.65 111.76 112.01 romulust 180.71 181.79 182.52 T:elephant200v2 210.74 211.64 214.16 T:isapk128av20 322.22 322.60 323.66 T:isapa128v20 1189.26 1193.20 1196.02 T:isapk128v20 2066.30 2070.28 2086.52 T:isapxv20 5746.46 5773.82 5823.25 T:elephant176v2 7327.34 7331.21 7361.84 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.33 4.41 4.52 T:aes128gcmv1 5.80 5.90 6.01 aes256gcmv1 10.05 10.27 10.40 ascon128av12 12.33 12.42 12.64 ascon80pqv12 12.77 12.84 12.89 ascon128v12 15.46 15.59 16.18 T:xoodyakround3 18.69 18.83 19.05 ascon128abi32v12 22.91 23.02 23.13 ascon128bi32v12 27.42 27.51 27.58 T:schwaemm256128v2 30.32 30.81 31.12 T:schwaemm128128v2 32.44 32.53 32.63 T:grain128aeadv2 35.31 35.47 36.03 T:schwaemm192192v2 35.50 35.58 35.66 romulusn 38.84 38.89 39.09 T:giftcofb128v1 38.85 38.95 39.27 T:schwaemm256256v2 48.17 48.34 48.52 romulusm 51.71 51.86 52.14 T:tinyjambu128v2 59.77 59.90 59.98 T:tinyjambu192v2 60.95 61.48 61.65 T:tinyjambu256v2 77.33 77.47 77.58 T:isapa128av20 111.62 111.79 112.14 romulust 178.92 181.21 181.84 T:elephant200v2 211.59 212.78 214.59 T:isapk128av20 322.66 323.19 323.48 T:isapa128v20 1190.11 1190.79 1192.70 T:isapk128v20 2070.12 2099.50 2109.34 T:isapxv20 5771.54 5819.70 6261.98 T:elephant176v2 7325.65 7332.74 7370.59 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.30 4.35 4.41 T:aes128gcmv1 5.84 6.02 6.06 aes256gcmv1 9.86 9.98 10.07 ascon128av12 12.33 12.41 12.66 ascon80pqv12 12.52 12.66 12.82 ascon128v12 15.53 15.91 16.06 T:xoodyakround3 18.71 18.79 18.92 ascon128abi32v12 22.98 23.06 23.14 ascon128bi32v12 27.38 27.48 27.50 T:schwaemm256128v2 30.30 30.83 31.03 T:schwaemm128128v2 32.41 32.50 32.59 T:grain128aeadv2 35.25 35.38 35.46 T:schwaemm192192v2 35.46 35.56 35.66 romulusn 38.80 38.81 38.86 T:schwaemm256256v2 38.87 38.92 39.00 T:giftcofb128v1 48.20 48.34 48.41 romulusm 51.01 51.23 51.45 T:isapa128av20 51.63 51.73 51.82 T:tinyjambu128v2 59.69 59.79 59.88 T:tinyjambu192v2 60.91 61.42 61.52 T:tinyjambu256v2 69.95 70.06 70.25 romulust 139.25 140.09 141.46 T:isapk128av20 168.23 168.60 169.30 T:isapa128v20 179.18 181.27 182.02 T:elephant200v2 637.68 639.77 640.66 T:isapk128v20 1083.23 1102.39 1108.04 T:isapxv20 5763.68 5811.63 5828.42 T:elephant176v2 7326.38 7333.16 7373.41 T:elephant160v2