VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.48 1.48 1.49 T:aes128gcmv1 1.53 1.53 1.54 aes256gcmv1 7.39 7.43 7.47 ascon128av12 10.92 10.96 10.99 ascon80pqv12 10.95 10.97 11.02 ascon128v12 13.37 13.52 13.62 T:xoodyakround3 14.74 14.79 14.80 ascon128abi32v12 16.39 16.51 16.63 T:schwaemm256128v2 18.92 18.98 19.02 T:grain128aeadv2 19.88 20.02 20.35 T:schwaemm256256v2 21.75 21.85 22.08 T:schwaemm192192v2 22.41 22.44 22.47 ascon128bi32v12 25.15 25.29 25.37 T:schwaemm128128v2 26.82 26.89 26.94 T:isapa128av20 32.07 32.09 32.13 T:isapk128av20 37.33 37.38 37.41 romulusn 44.12 44.21 44.29 T:giftcofb128v1 45.17 45.25 45.32 T:isapa128v20 58.02 58.08 58.12 romulusm 70.62 70.65 70.68 T:tinyjambu128v2 85.90 86.11 86.17 T:tinyjambu192v2 91.03 91.16 91.42 T:tinyjambu256v2 90.27 91.34 92.06 T:isapk128v20 115.59 115.80 116.20 romulust 121.30 122.26 122.54 T:elephant200v2 136.44 137.62 139.20 T:isapxv20 7257.60 7278.89 7283.90 T:elephant176v2 8274.57 8276.58 8279.74 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.33 1.34 1.36 aes256gcmv1 1.44 1.46 1.47 T:aes128gcmv1 7.45 7.49 7.53 ascon128av12 10.80 10.83 10.84 ascon80pqv12 10.85 10.88 10.90 ascon128v12 13.32 13.38 13.41 T:xoodyakround3 14.84 14.89 14.91 ascon128abi32v12 16.43 16.52 16.60 T:schwaemm256128v2 19.19 19.26 19.31 T:grain128aeadv2 19.94 20.09 20.28 T:schwaemm256256v2 21.64 21.78 21.88 T:schwaemm192192v2 22.29 22.34 22.37 ascon128bi32v12 25.11 25.20 25.25 T:schwaemm128128v2 32.07 32.11 32.14 T:isapk128av20 34.29 34.33 34.41 T:isapa128av20 37.37 37.39 37.42 romulusn 44.29 44.34 44.41 T:giftcofb128v1 45.14 45.25 45.34 T:isapa128v20 57.96 58.05 58.08 romulusm 70.46 70.58 70.62 T:tinyjambu128v2 85.88 85.96 86.16 T:tinyjambu192v2 90.77 91.28 91.79 T:isapk128v20 91.59 91.66 91.74 T:tinyjambu256v2 115.80 116.02 116.50 romulust 121.50 122.04 122.52 T:elephant200v2 136.53 137.29 138.04 T:isapxv20 7253.47 7262.18 7286.98 T:elephant176v2 8270.64 8274.33 8276.90 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.34 1.35 1.36 aes256gcmv1 1.46 1.46 1.47 T:aes128gcmv1 7.44 7.48 7.50 ascon128av12 10.76 10.80 10.84 ascon80pqv12 10.84 10.88 10.92 ascon128v12 13.28 13.39 13.49 T:xoodyakround3 14.86 14.89 14.90 ascon128abi32v12 16.47 16.59 16.69 T:schwaemm256128v2 19.16 19.21 19.30 T:grain128aeadv2 19.99 20.14 20.23 T:schwaemm256256v2 21.38 21.41 21.44 T:isapk128av20 21.68 21.81 21.90 T:schwaemm192192v2 21.96 22.04 22.10 T:isapa128v20 22.30 22.34 22.39 ascon128bi32v12 22.76 22.84 22.90 T:isapa128av20 25.27 25.35 25.48 T:schwaemm128128v2 37.33 37.35 37.38 romulusn 39.55 39.63 39.76 romulust 44.26 44.33 44.42 T:giftcofb128v1 57.12 57.93 58.45 T:isapk128v20 58.07 58.10 58.15 romulusm 70.41 70.48 70.56 T:tinyjambu128v2 81.24 81.64 82.00 T:isapxv20 85.65 85.84 86.12 T:tinyjambu192v2 90.97 91.02 91.71 T:tinyjambu256v2 121.42 122.52 123.37 T:elephant200v2 7258.01 7273.57 7283.45 T:elephant176v2 8270.84 8273.61 8278.00 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.87 0.88 0.89 T:aes128gcmv1 0.94 0.94 0.95 aes256gcmv1 7.35 7.38 7.40 ascon128av12 10.28 10.32 10.35 T:xoodyakround3 10.88 10.90 10.92 ascon80pqv12 10.92 10.94 10.96 ascon128v12 14.49 14.52 14.54 ascon128abi32v12 16.27 16.39 16.49 T:schwaemm256128v2 18.89 18.91 19.00 T:grain128aeadv2 19.90 20.06 20.20 T:schwaemm256256v2 21.56 21.68 21.84 T:schwaemm192192v2 22.09 22.11 22.14 ascon128bi32v12 24.85 24.89 24.92 T:isapa128av20 25.15 25.23 25.28 T:schwaemm128128v2 26.73 26.74 26.75 T:isapk128av20 29.02 29.05 29.07 romulusn 33.61 33.68 33.73 T:isapa128v20 39.39 39.45 39.46 romulusm 44.10 44.16 44.22 T:giftcofb128v1 57.53 57.59 57.68 T:tinyjambu128v2 66.90 67.10 67.13 T:tinyjambu192v2 68.58 68.91 68.98 T:tinyjambu256v2 73.75 74.11 74.41 T:isapk128v20 77.34 77.51 77.65 romulust 90.97 91.40 91.59 T:elephant200v2 108.70 110.03 110.31 T:isapxv20 5425.14 5431.34 5442.06 T:elephant176v2 6200.12 6203.04 6205.73 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.85 0.85 0.86 aes256gcmv1 0.83 0.86 0.87 T:aes128gcmv1 7.35 7.38 7.41 ascon128av12 10.20 10.27 10.31 T:xoodyakround3 10.81 10.82 10.84 ascon80pqv12 10.84 10.87 10.89 ascon128v12 14.56 14.58 14.59 ascon128abi32v12 16.25 16.32 16.44 T:schwaemm256128v2 19.03 19.06 19.11 T:grain128aeadv2 19.82 19.95 20.10 T:schwaemm256256v2 21.55 21.62 21.72 T:schwaemm192192v2 22.06 22.09 22.13 ascon128bi32v12 25.16 25.24 25.30 T:schwaemm128128v2 26.71 26.73 26.76 T:isapk128av20 28.34 28.38 28.40 T:isapa128av20 29.03 29.05 29.07 romulusn 33.64 33.69 33.75 T:isapa128v20 39.41 39.47 39.50 romulusm 44.12 44.16 44.21 T:giftcofb128v1 57.52 57.57 57.64 T:tinyjambu128v2 67.02 67.09 67.32 T:tinyjambu192v2 69.05 69.10 69.13 T:tinyjambu256v2 73.78 74.16 74.57 T:isapk128v20 77.38 77.49 77.68 romulust 90.43 90.91 91.27 T:elephant200v2 109.24 109.45 109.88 T:isapxv20 5422.70 5432.29 5442.88 T:elephant176v2 6199.94 6203.74 6205.80 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.85 0.85 0.86 aes256gcmv1 0.86 0.87 0.87 T:aes128gcmv1 7.38 7.40 7.42 ascon128av12 10.23 10.28 10.35 T:xoodyakround3 10.79 10.82 10.84 ascon80pqv12 10.86 10.88 10.90 ascon128v12 14.55 14.58 14.60 ascon128abi32v12 16.28 16.39 16.47 T:schwaemm256128v2 19.06 19.13 19.16 T:grain128aeadv2 19.81 19.91 20.04 T:schwaemm256256v2 21.38 21.40 21.43 T:isapk128av20 21.55 21.66 21.73 T:schwaemm192192v2 22.06 22.09 22.12 ascon128bi32v12 22.06 22.11 22.13 T:isapa128v20 22.60 22.63 22.68 T:isapa128av20 25.21 25.27 25.37 T:schwaemm128128v2 29.03 29.06 29.09 romulusn 39.30 39.39 39.45 romulust 39.39 39.44 39.46 romulusm 44.16 44.22 44.30 T:giftcofb128v1 56.96 57.29 57.63 T:isapk128v20 57.61 57.63 57.66 T:tinyjambu128v2 66.95 67.21 67.38 T:tinyjambu192v2 68.69 68.88 69.06 T:tinyjambu256v2 81.02 81.55 81.76 T:isapxv20 90.86 91.28 91.80 T:elephant200v2 5426.88 5439.56 5445.43 T:elephant176v2 6201.48 6203.35 6207.68 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.25? 0.27? 0.29? T:aes128gcmv1 0.37 0.38 0.38 aes256gcmv1 7.16 7.27 7.30 T:xoodyakround3 7.30 7.32 7.36 ascon128av12 10.75 10.79 10.81 ascon80pqv12 10.82 10.87 10.88 ascon128v12 14.23 14.26 14.28 ascon128abi32v12 16.17 16.35 16.47 T:schwaemm256128v2 18.83 18.89 19.02 T:grain128aeadv2 19.91 20.17 20.30 T:schwaemm256256v2 20.73 20.76 20.80 romulusm 20.73 20.76 20.79 romulusn 21.38 21.41 21.44 T:isapk128av20 21.53 21.67 21.79 T:schwaemm192192v2 21.75 21.78 21.81 ascon128bi32v12 22.05 22.10 22.16 T:isapa128v20 22.84 22.88 22.94 T:isapa128av20 25.05 25.14 25.30 T:schwaemm128128v2 38.97 39.06 39.20 romulust 44.15 44.22 44.27 T:giftcofb128v1 44.56 44.60 44.70 T:tinyjambu128v2 46.21 46.40 46.54 T:tinyjambu256v2 48.44 48.49 48.57 T:tinyjambu192v2 57.13 57.73 58.04 T:isapk128v20 61.89 62.13 62.36 T:elephant200v2 81.29 82.09 83.03 T:isapxv20 3581.80 3606.93 3614.96 T:elephant176v2 4130.40 4135.43 4144.27 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.25? 0.27? 0.28? T:aes128gcmv1 0.37 0.38 0.39 aes256gcmv1 7.17 7.26 7.30 T:xoodyakround3 7.28 7.32 7.36 ascon128av12 10.79 10.84 10.86 ascon80pqv12 10.85 10.88 10.90 ascon128v12 14.22 14.27 14.30 ascon128abi32v12 16.08 16.18 16.36 T:schwaemm256128v2 18.89 18.96 19.06 T:grain128aeadv2 19.57 19.81 19.99 T:schwaemm256256v2 20.67 20.73 20.76 romulusn 20.75 20.78 20.84 romulusm 21.35 21.40 21.43 T:isapk128av20 21.47 21.62 21.87 T:schwaemm192192v2 21.75 21.79 21.82 ascon128bi32v12 22.04 22.14 22.19 T:isapa128v20 22.42 22.46 22.49 T:isapa128av20 24.99 25.07 25.18 T:schwaemm128128v2 38.94 39.05 39.20 romulust 44.11 44.23 44.31 T:giftcofb128v1 44.62 44.64 44.70 T:tinyjambu128v2 46.20 46.54 46.60 T:tinyjambu256v2 48.28 48.35 48.42 T:tinyjambu192v2 56.93 57.37 57.79 T:isapk128v20 61.62 61.91 62.11 T:elephant200v2 81.66 82.33 82.63 T:isapxv20 3577.78 3591.63 3600.62 T:elephant176v2 4133.41 4136.96 4140.50 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.27 0.27 0.28 T:aes128gcmv1 0.36? 0.37? 0.40? aes256gcmv1 7.13 7.23 7.29 T:xoodyakround3 7.29 7.32 7.36 ascon128av12 10.82 10.85 10.90 ascon80pqv12 10.83 10.85 10.89 ascon128v12 14.24 14.27 14.28 ascon128abi32v12 16.17 16.23 16.39 T:schwaemm256128v2 18.91 19.00 19.06 T:grain128aeadv2 19.69 19.91 20.05 T:schwaemm256256v2 20.72 20.75 20.78 romulusm 20.72 20.75 20.78 romulusn 21.36 21.40 21.45 T:isapk128av20 21.33 21.45 21.53 T:schwaemm192192v2 21.74 21.80 21.85 ascon128bi32v12 22.04 22.11 22.18 T:isapa128v20 22.38 22.44 22.47 T:isapa128av20 25.07 25.16 25.23 T:schwaemm128128v2 39.02 39.14 39.19 romulust 44.11 44.17 44.24 T:giftcofb128v1 44.58 44.61 44.66 T:tinyjambu128v2 46.25 46.52 46.59 T:tinyjambu256v2 48.29 48.36 48.40 T:tinyjambu192v2 57.04 57.48 58.11 T:isapk128v20 61.62 61.91 62.22 T:elephant200v2 81.71 82.04 82.49 T:isapxv20 3578.14 3585.93 3590.83 T:elephant176v2 4139.39 4143.34 4147.17 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.00 1.00 1.01 T:aes128gcmv1 1.09 1.09 1.09 aes256gcmv1 7.57 7.61 7.65 ascon128av12 10.48 10.50 10.51 T:xoodyakround3 11.03 11.05 11.07 ascon80pqv12 11.07 11.09 11.10 ascon128v12 14.84 14.85 14.87 ascon128abi32v12 16.80 16.85 16.92 T:schwaemm256128v2 19.35 19.38 19.38 T:grain128aeadv2 20.38 20.41 20.50 T:schwaemm256256v2 22.15 22.23 22.34 T:schwaemm192192v2 22.41 22.43 22.45 ascon128bi32v12 25.56 25.61 25.69 T:schwaemm128128v2 26.82 26.83 26.85 T:isapa128av20 29.30 29.31 29.34 romulusn 29.79 29.81 29.81 T:isapk128av20 39.71 39.75 39.78 romulusm 44.58 44.61 44.66 T:giftcofb128v1 48.69 48.72 48.78 T:isapa128v20 57.94 57.96 58.03 T:tinyjambu128v2 67.48 67.57 67.67 T:tinyjambu192v2 69.11 69.15 69.58 T:tinyjambu256v2 78.53 78.66 78.72 romulust 93.15 93.30 93.46 T:elephant200v2 128.47 128.76 128.94 T:isapk128v20 179.97 180.52 180.71 T:isapxv20 5466.18 5473.12 5478.59 T:elephant176v2 6272.69 6273.88 6276.10 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.97 0.97 0.97 aes256gcmv1 0.99 0.99 1.00 T:aes128gcmv1 7.56 7.60 7.64 ascon128av12 10.37 10.39 10.42 T:xoodyakround3 11.00 11.01 11.02 ascon80pqv12 11.03 11.04 11.06 ascon128v12 14.90 14.92 14.92 ascon128abi32v12 16.76 16.85 16.89 T:schwaemm256128v2 19.47 19.50 19.50 T:grain128aeadv2 20.34 20.41 20.47 T:schwaemm256256v2 22.01 22.13 22.21 T:schwaemm192192v2 22.42 22.44 22.46 ascon128bi32v12 25.45 25.55 25.62 T:schwaemm128128v2 29.30 29.32 29.34 romulusn 29.80 29.80 29.82 T:isapk128av20 30.26 30.31 30.33 T:isapa128av20 39.78 39.79 39.81 romulusm 44.67 44.69 44.72 T:giftcofb128v1 48.71 48.72 48.75 T:isapa128v20 57.93 57.97 58.05 T:tinyjambu128v2 67.41 67.48 67.55 T:tinyjambu192v2 69.56 69.59 69.61 T:tinyjambu256v2 78.65 78.72 78.86 romulust 93.08 93.25 93.91 T:elephant200v2 128.54 128.75 129.06 T:isapk128v20 179.52 179.76 180.03 T:isapxv20 5471.67 5480.06 5496.70 T:elephant176v2 6272.77 6274.30 6276.74 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.97 0.97 0.98 aes256gcmv1 0.99 0.99 1.00 T:aes128gcmv1 7.56 7.57 7.59 ascon128av12 10.39 10.42 10.45 T:xoodyakround3 10.95 10.96 10.97 ascon80pqv12 11.02 11.04 11.06 ascon128v12 14.89 14.91 14.93 ascon128abi32v12 16.78 16.88 16.94 T:schwaemm256128v2 19.47 19.50 19.52 T:grain128aeadv2 20.38 20.50 20.59 T:schwaemm256256v2 22.05 22.07 22.13 T:schwaemm192192v2 22.41 22.42 22.44 ascon128bi32v12 23.18 23.19 23.21 T:isapk128av20 23.71 23.72 23.74 T:isapa128av20 25.50 25.58 25.65 T:schwaemm128128v2 29.32 29.33 29.35 romulusn 29.71 29.76 29.78 T:isapa128v20 39.76 39.80 39.84 romulusm 40.42 40.55 40.63 romulust 44.60 44.64 44.69 T:giftcofb128v1 57.92 57.95 58.03 T:tinyjambu128v2 67.54 67.63 67.73 T:tinyjambu192v2 69.19 69.53 69.58 T:tinyjambu256v2 85.26 85.48 85.73 T:isapk128v20 93.19 93.40 93.85 T:elephant200v2 117.46 117.61 117.73 T:isapxv20 5475.84 5478.93 5494.62 T:elephant176v2 6273.52 6275.64 6279.34 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.98 6.02 6.08 T:aes128gcmv1 6.70 6.76 6.85 aes256gcmv1 11.45 11.78 12.05 ascon128av12 14.47 14.59 14.66 ascon80pqv12 14.46 14.60 14.80 ascon128v12 14.88 15.38 15.91 T:xoodyakround3 22.15 22.32 23.01 ascon128abi32v12 27.15 28.02 28.57 T:schwaemm256128v2 27.91 28.64 28.75 T:grain128aeadv2 29.96 30.09 30.59 ascon128bi32v12 32.70 33.35 33.91 T:schwaemm256256v2 33.10 33.77 34.07 T:schwaemm128128v2 35.44 35.54 35.73 romulusn 35.65 36.27 36.74 T:schwaemm192192v2 46.72 46.91 47.20 romulusm 53.34 53.60 53.98 T:giftcofb128v1 67.39 67.59 67.82 T:tinyjambu128v2 71.05 71.40 72.03 T:isapa128av20 78.12 78.33 78.55 T:tinyjambu192v2 80.05 80.39 80.75 T:tinyjambu256v2 95.09 95.38 95.52 T:isapk128av20 104.57 105.91 106.30 romulust 131.08 131.84 133.12 T:elephant200v2 394.75 395.03 395.38 T:isapa128v20 1348.25 1352.27 1357.48 T:isapk128v20 1773.66 1778.49 1791.23 T:isapxv20 6816.87 6835.27 6841.22 T:elephant176v2 8401.30 8418.91 8429.26 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.21 5.27 5.34 T:aes128gcmv1 6.73 6.78 6.84 aes256gcmv1 11.55 11.80 12.16 ascon128av12 14.41 14.50 14.77 ascon80pqv12 14.44 14.62 14.70 ascon128v12 14.87 15.02 16.17 T:xoodyakround3 22.43 22.62 23.13 ascon128abi32v12 27.43 28.07 28.67 T:schwaemm256128v2 27.87 28.40 28.73 T:grain128aeadv2 30.09 30.23 30.86 ascon128bi32v12 31.63 32.48 33.42 T:schwaemm256256v2 33.23 33.57 34.35 T:schwaemm128128v2 35.62 35.72 35.81 romulusn 35.50 36.59 37.25 T:schwaemm192192v2 48.09 48.37 48.53 romulusm 53.61 53.94 54.10 T:giftcofb128v1 67.61 67.75 67.94 T:tinyjambu128v2 74.23 74.37 74.63 T:isapa128av20 78.42 78.62 78.87 T:tinyjambu192v2 80.26 80.43 80.71 T:tinyjambu256v2 95.23 95.48 95.68 T:isapk128av20 104.67 105.03 105.49 romulust 131.21 133.30 133.68 T:elephant200v2 394.94 395.13 395.41 T:isapa128v20 1351.59 1354.34 1358.61 T:isapk128v20 1772.59 1774.36 1777.60 T:isapxv20 6823.65 6827.79 6837.02 T:elephant176v2 8405.59 8416.35 8428.36 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.18 5.24 5.28 T:aes128gcmv1 6.74 6.80 6.86 aes256gcmv1 11.42 11.59 11.80 ascon128av12 14.46 14.52 14.72 ascon80pqv12 14.46 14.66 14.92 ascon128v12 14.97 15.44 15.73 T:xoodyakround3 22.43 22.51 22.66 ascon128abi32v12 27.15 27.59 28.42 T:schwaemm256128v2 27.86 28.42 28.68 T:grain128aeadv2 30.12 30.33 30.80 ascon128bi32v12 32.46 32.78 33.67 T:schwaemm256256v2 33.09 33.54 33.80 T:schwaemm128128v2 35.66 35.80 35.91 romulusn 35.47 36.14 36.58 T:schwaemm192192v2 48.16 48.20 48.32 romulusm 48.44 48.73 49.52 T:isapa128av20 53.54 53.89 54.18 T:giftcofb128v1 59.98 60.27 60.57 T:isapk128av20 65.37 65.84 66.21 romulust 67.45 67.62 67.75 T:tinyjambu128v2 78.34 78.74 78.80 T:tinyjambu192v2 80.05 80.24 80.56 T:tinyjambu256v2 131.80 132.61 133.01 T:elephant200v2 206.02 206.12 206.88 T:isapa128v20 710.02 711.14 715.84 T:isapk128v20 927.05 929.01 931.96 T:isapxv20 6822.73 6839.44 6845.70 T:elephant176v2 8411.30 8416.59 8425.66 T:elephant160v2