VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 4 (a70f41); 2023 AMD Ryzen 5 7640HS; 6 x 4300MHz; phoenix, supercop-20260217

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.57 0.58 0.59 aes256gcmv1 0.74? 0.80? 0.83? T:aes128gcmv1 5.31 5.31 5.31 ascon128av12 7.50 7.50 7.50 ascon80pqv12 7.75 7.75 7.75 ascon128v12 11.52 11.58 11.72 T:xoodyakround3 12.69 12.69 12.70 ascon128abi32v12 17.44 17.55 17.90 T:schwaemm256128v2 17.59 17.67 17.71 T:grain128aeadv2 18.62 18.63 18.63 ascon128bi32v12 23.34 23.40 23.50 T:schwaemm192192v2 24.51 24.57 24.67 T:schwaemm256256v2 25.24 25.26 25.41 T:isapa128av20 26.83 27.01 27.72 T:schwaemm128128v2 28.86 28.87 28.88 T:giftcofb128v1 32.62 32.62 32.64 T:isapa128v20 41.03 41.21 41.45 romulusn 48.88 49.02 50.14 T:isapk128av20 63.49 63.60 63.89 romulusm 66.25 66.25 66.25 T:tinyjambu128v2 75.90 76.14 76.69 T:isapk128v20 81.25 81.25 81.25 T:tinyjambu192v2 87.50 87.50 87.50 T:tinyjambu256v2 134.06 134.31 134.57 romulust 162.06 163.43 164.34 T:isapxv20 169.62 170.11 170.81 T:elephant200v2 5978.27 5994.95 6024.35 T:elephant176v2 7271.89 7272.22 7272.50 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.48 0.49 0.49 aes256gcmv1 0.76 0.76 0.76 T:aes128gcmv1 5.31 5.31 5.31 ascon128av12 7.63 7.64 7.64 ascon128v12 8.00 8.01 8.01 ascon80pqv12 11.50 11.58 11.67 T:xoodyakround3 12.53 12.53 12.54 ascon128abi32v12 17.32 17.61 18.00 T:schwaemm256128v2 17.60 17.63 17.65 T:grain128aeadv2 18.50 18.50 18.51 ascon128bi32v12 23.26 23.34 23.40 T:schwaemm192192v2 24.87 24.88 24.88 T:isapa128av20 24.79 24.96 25.12 T:schwaemm256256v2 26.93 27.03 27.16 T:schwaemm128128v2 28.87 28.88 28.88 T:giftcofb128v1 32.62 32.63 32.64 T:isapa128v20 41.32 41.44 41.72 romulusn 49.09 50.31 50.41 T:isapk128av20 63.64 63.73 63.90 romulusm 66.25 66.25 66.25 T:tinyjambu128v2 76.35 76.46 76.96 T:isapk128v20 81.25 81.25 81.25 T:tinyjambu192v2 87.37 87.37 87.38 T:tinyjambu256v2 134.02 134.38 134.58 romulust 162.51 162.98 163.31 T:isapxv20 170.04 170.22 170.69 T:elephant200v2 5981.45 5995.02 5996.75 T:elephant176v2 7272.48 7272.99 7278.68 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.48 0.48 0.49 aes256gcmv1 0.76 0.76 0.76 T:aes128gcmv1 5.31 5.31 5.31 ascon128av12 7.64 7.64 7.64 ascon128v12 8.00 8.01 8.01 ascon80pqv12 11.49 11.64 11.74 T:xoodyakround3 12.53 12.53 12.54 ascon128abi32v12 16.50 16.50 16.50 T:isapa128v20 16.75 16.75 16.76 T:isapa128av20 17.48 17.59 17.98 T:schwaemm256128v2 17.62 17.64 17.66 T:grain128aeadv2 18.50 18.50 18.51 ascon128bi32v12 23.35 23.42 23.47 T:schwaemm192192v2 24.74 24.85 24.93 T:schwaemm256256v2 26.93 27.05 27.17 T:schwaemm128128v2 28.87 28.88 28.88 T:giftcofb128v1 32.60 33.32 33.55 T:isapk128av20 41.31 41.35 41.72 romulusn 44.48 44.51 44.53 romulust 48.54 48.61 48.90 T:isapk128v20 63.63 63.70 63.82 romulusm 66.25 66.25 66.25 T:tinyjambu128v2 81.25 81.25 81.25 T:tinyjambu192v2 87.37 87.37 87.38 T:tinyjambu256v2 97.96 98.31 98.83 T:isapxv20 169.95 170.43 170.88 T:elephant200v2 5976.64 5981.71 5987.65 T:elephant176v2 7272.36 7275.40 7280.09 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.48 0.48 0.49 aes256gcmv1 0.59 0.59 0.59 T:aes128gcmv1 5.27 5.28 5.29 ascon128av12 7.50 7.50 7.50 ascon80pqv12 7.62 7.63 7.63 ascon128v12 8.73 8.76 8.80 T:xoodyakround3 12.62 12.62 12.63 ascon128abi32v12 16.83 16.90 17.46 T:schwaemm256128v2 17.55 17.59 17.63 T:grain128aeadv2 18.50 18.50 18.50 ascon128bi32v12 20.93 20.94 20.97 T:isapa128av20 23.27? 23.34? 26.62? T:schwaemm192192v2 24.56 24.57 24.58 T:isapa128v20 24.57 24.68 24.79 T:schwaemm256256v2 26.85 26.95 27.09 T:schwaemm128128v2 29.16 29.16 29.16 T:giftcofb128v1 31.80 31.83 31.89 romulusn 40.73 40.90 41.64 T:isapk128av20 43.01 43.10 43.15 romulusm 53.87 53.88 53.88 T:tinyjambu128v2 61.99 62.02 62.16 T:isapk128v20 63.25 63.25 63.25 T:tinyjambu192v2 66.37 66.37 66.38 T:tinyjambu256v2 89.26 89.39 89.48 romulust 126.89 127.34 127.67 T:elephant200v2 130.23 130.53 130.82 T:isapxv20 4463.23 4465.57 4478.95 T:elephant176v2 5452.96 5454.11 5455.06 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.43 0.44 0.44 aes256gcmv1 0.58 0.58 0.59 T:aes128gcmv1 5.28 5.28 5.28 ascon128av12 7.62 7.63 7.63 ascon128v12 7.81 7.81 7.82 ascon80pqv12 8.72 8.77 8.79 T:xoodyakround3 12.48 12.48 12.49 ascon128abi32v12 16.91 17.10 17.50 T:schwaemm256128v2 17.54 17.56 17.57 T:grain128aeadv2 18.31 18.31 18.31 ascon128bi32v12 20.75 20.75 20.75 T:isapa128av20 23.27? 23.33? 26.97? T:schwaemm192192v2 24.57 24.57 24.58 T:isapa128v20 24.75 24.85 24.97 T:schwaemm256256v2 26.92 26.98 27.08 T:schwaemm128128v2 29.16 29.16 29.16 T:giftcofb128v1 31.91 31.95 31.97 romulusn 40.56 40.70 41.59 T:isapk128av20 43.05 43.19 43.29 romulusm 53.88 53.88 53.88 T:tinyjambu128v2 61.59 61.77 61.96 T:isapk128v20 63.25 63.25 63.25 T:tinyjambu192v2 66.19 66.25 66.26 T:tinyjambu256v2 89.24 89.41 89.56 romulust 127.02 127.26 127.58 T:elephant200v2 130.44 130.87 131.49 T:isapxv20 4465.37 4466.99 4469.39 T:elephant176v2 5453.42 5453.98 5457.24 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.43 0.44 0.44 aes256gcmv1 0.58 0.58 0.59 T:aes128gcmv1 5.28 5.28 5.28 ascon128av12 7.62 7.62 7.62 ascon128v12 7.81 7.81 7.81 ascon80pqv12 8.69 8.77 8.84 T:xoodyakround3 12.48 12.48 12.49 ascon128abi32v12 16.50 16.50 16.50 T:isapa128v20 16.56 16.56 16.57 T:isapa128av20 16.90 17.00 17.51 T:schwaemm256128v2 17.54 17.55 17.58 T:grain128aeadv2 18.31 18.31 18.31 ascon128bi32v12 23.28? 23.36? 26.10? T:schwaemm192192v2 24.58 24.74 24.87 T:schwaemm256256v2 26.92 26.98 27.05 T:schwaemm128128v2 29.16 29.16 29.16 T:giftcofb128v1 31.91 31.95 31.96 romulusn 32.58 32.62 32.66 T:isapk128av20 43.19 43.25 43.30 romulusm 44.51 44.52 44.54 romulust 47.78 47.85 48.30 T:isapk128v20 53.88 53.88 53.88 T:tinyjambu128v2 63.25 63.25 63.25 T:tinyjambu192v2 66.17 66.23 66.28 T:tinyjambu256v2 98.24 98.63 99.09 T:isapxv20 126.82 127.08 127.57 T:elephant200v2 4462.87 4473.62 4500.72 T:elephant176v2 5453.04 5453.84 5458.26 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.39 0.40 0.41 aes256gcmv1 0.40 0.41 0.41 T:aes128gcmv1 5.25 5.25 5.25 ascon128av12 5.77 5.82 5.88 T:xoodyakround3 7.50 7.50 7.50 ascon128v12 7.50 7.50 7.50 ascon80pqv12 12.54 12.57 12.59 ascon128abi32v12 16.20 16.32 16.95 T:schwaemm256128v2 16.50 16.50 16.51 T:isapa128v20 16.62 16.63 16.64 T:isapa128av20 17.46 17.50 17.58 T:grain128aeadv2 18.35 18.37 18.39 ascon128bi32v12 22.25 22.54 22.62 romulusn 22.51 22.62 22.66 romulusm 23.22 23.29 23.35 T:schwaemm192192v2 24.57 24.64 24.77 T:schwaemm256256v2 26.78 26.90 27.03 T:schwaemm128128v2 29.44 29.44 29.44 T:giftcofb128v1 32.58 32.77 33.43 T:isapk128av20 41.50 41.50 41.51 T:tinyjambu128v2 44.53 44.53 44.55 romulust 45.25 45.25 45.25 T:tinyjambu192v2 45.25 45.25 45.25 T:tinyjambu256v2 46.70 47.11 47.29 T:isapk128v20 84.64 84.80 84.92 T:elephant200v2 98.09 98.59 99.01 T:isapxv20 2952.25 2952.92 2962.62 T:elephant176v2 3634.25 3634.62 3635.12 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.39 0.40 0.40 T:aes128gcmv1 0.39 0.40 0.41 aes256gcmv1 5.25 5.26 5.26 ascon128av12 5.81 5.86 5.95 T:xoodyakround3 7.62 7.63 7.63 ascon128v12 7.62 7.63 7.63 ascon80pqv12 12.43 12.44 12.44 ascon128abi32v12 16.23 16.32 16.95 T:schwaemm256128v2 16.37 16.38 16.38 T:isapa128av20 16.50 16.50 16.51 T:isapa128v20 17.44 17.47 17.50 T:grain128aeadv2 18.12 18.13 18.13 ascon128bi32v12 22.50 22.58 22.67 romulusn 22.49 22.60 22.65 romulusm 23.25 23.30 23.36 T:schwaemm192192v2 24.45 24.56 24.70 T:schwaemm256256v2 26.75 26.87 27.03 T:schwaemm128128v2 29.44 29.44 29.44 T:giftcofb128v1 32.40 32.58 33.26 T:isapk128av20 41.50 41.50 41.51 T:tinyjambu128v2 44.52 44.54 44.55 romulust 45.00 45.01 45.25 T:tinyjambu256v2 45.25 45.25 45.25 T:tinyjambu192v2 47.11 47.15 47.41 T:isapk128v20 84.71 84.77 84.91 T:elephant200v2 98.51 99.01 99.51 T:isapxv20 2951.82 2953.34 2962.16 T:elephant176v2 3634.56 3635.19 3638.25 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.40 0.40 0.40 T:aes128gcmv1 0.39 0.40 0.41 aes256gcmv1 5.26 5.26 5.26 ascon128av12 5.77 5.84 5.90 T:xoodyakround3 7.62 7.62 7.63 ascon128v12 7.62 7.63 7.63 ascon80pqv12 12.44 12.44 12.44 ascon128abi32v12 16.24 16.32 16.98 T:schwaemm256128v2 16.37 16.38 16.42 T:isapa128av20 16.49 16.50 16.51 T:isapa128v20 17.45 17.48 17.50 T:grain128aeadv2 18.12 18.13 18.13 ascon128bi32v12 22.57 22.59 22.68 romulusn 22.49 22.59 22.66 romulusm 23.24 23.31 23.35 T:schwaemm192192v2 24.58 24.71 24.80 T:schwaemm256256v2 26.78 26.91 27.04 T:schwaemm128128v2 29.44 29.44 29.44 T:giftcofb128v1 32.52 33.07 33.39 T:isapk128av20 41.50 41.50 41.51 T:tinyjambu128v2 44.51 44.54 44.55 romulust 45.00 45.01 45.01 T:tinyjambu256v2 45.25 45.25 45.25 T:tinyjambu192v2 46.82 47.06 47.18 T:isapk128v20 84.71 84.91 84.97 T:elephant200v2 98.29 98.56 98.96 T:isapxv20 2951.45 2953.12 2957.23 T:elephant176v2 3634.29 3634.58 3634.90 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.57 0.57 0.58 aes256gcmv1 0.68 0.68 0.69 T:aes128gcmv1 5.41 5.41 5.42 ascon128av12 7.62 7.62 7.62 ascon80pqv12 7.74 7.74 7.75 ascon128v12 8.78 8.83 8.88 T:xoodyakround3 12.93 12.93 12.94 ascon128abi32v12 17.44 17.51 17.97 T:schwaemm256128v2 17.87 17.89 17.95 T:grain128aeadv2 18.78 18.78 18.79 ascon128bi32v12 22.42 22.43 22.44 T:isapa128av20 23.79 23.83 23.87 T:schwaemm192192v2 25.21 25.26 25.31 T:schwaemm256256v2 27.46 27.51 27.58 T:schwaemm128128v2 29.43 29.43 29.43 T:giftcofb128v1 32.05 32.07 32.10 romulusn 35.86 35.86 35.87 T:isapa128v20 43.32 43.33 43.44 romulusm 46.33 46.37 46.43 T:isapk128av20 54.28 54.28 54.28 T:tinyjambu128v2 63.72 63.72 63.72 T:tinyjambu192v2 66.84 66.84 66.85 T:tinyjambu256v2 90.65 90.66 90.67 romulust 102.33 102.42 102.44 T:isapk128v20 129.72 129.85 130.22 T:elephant200v2 218.77 219.02 219.41 T:isapxv20 4496.82 4498.81 4505.21 T:elephant176v2 5514.93 5515.05 5515.16 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.52 0.52 0.53 aes256gcmv1 0.67 0.67 0.69 T:aes128gcmv1 5.41 5.41 5.41 ascon128av12 7.74 7.74 7.74 ascon128v12 7.93 7.93 7.93 ascon80pqv12 8.75 8.86 8.90 T:xoodyakround3 12.78 12.78 12.79 ascon128abi32v12 17.45 17.51 17.96 T:schwaemm256128v2 17.86 17.88 17.90 T:grain128aeadv2 18.59 18.59 18.59 ascon128bi32v12 22.17 22.18 22.18 T:isapa128av20 23.78 23.81 23.85 T:schwaemm192192v2 25.40 25.46 25.55 T:schwaemm256256v2 27.35 27.42 27.58 T:schwaemm128128v2 29.43 29.43 29.43 T:giftcofb128v1 32.16 32.20 32.20 romulusn 35.87 35.87 35.88 T:isapa128v20 43.38 43.54 43.55 romulusm 45.25 45.34 46.16 T:isapk128av20 54.28 54.28 54.28 T:tinyjambu128v2 63.72 63.72 63.72 T:tinyjambu192v2 66.66 66.72 66.74 T:tinyjambu256v2 90.81 90.84 90.85 romulust 102.25 102.26 102.30 T:isapk128v20 129.69 129.91 130.23 T:elephant200v2 218.57 218.95 219.81 T:isapxv20 4497.29 4499.79 4504.89 T:elephant176v2 5515.24 5515.41 5516.00 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.52 0.53 0.53 aes256gcmv1 0.67 0.67 0.68 T:aes128gcmv1 5.41 5.41 5.41 ascon128av12 7.74 7.74 7.74 ascon128v12 7.93 7.93 7.93 ascon80pqv12 8.77 8.85 8.89 T:xoodyakround3 12.78 12.78 12.78 ascon128abi32v12 17.37 17.37 17.37 T:isapa128av20 17.44 17.50 17.97 T:schwaemm256128v2 17.85 17.86 17.89 T:grain128aeadv2 18.59 18.59 18.59 ascon128bi32v12 22.25 22.25 22.26 T:isapa128v20 23.79 23.83 23.87 T:schwaemm192192v2 25.30 25.37 25.50 T:schwaemm256256v2 27.33 27.41 27.58 T:schwaemm128128v2 29.43 29.43 29.43 T:giftcofb128v1 32.17 32.19 32.20 romulusn 35.18 35.23 35.30 T:isapk128av20 43.49 43.55 43.58 romulusm 45.78 45.79 45.79 romulust 54.28 54.28 54.28 T:tinyjambu128v2 63.72 63.72 63.72 T:tinyjambu192v2 66.71 66.74 66.74 T:tinyjambu256v2 68.98 69.04 69.12 T:isapk128v20 129.52 129.84 130.22 T:elephant200v2 143.57 144.01 144.44 T:isapxv20 4498.16 4498.99 4504.87 T:elephant176v2 5514.74 5514.89 5515.06 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.64 4.68 4.72 aes256gcmv1 4.77 4.84 4.90 T:aes128gcmv1 8.37 8.38 8.60 ascon128av12 10.38 10.38 10.39 ascon80pqv12 10.48 10.49 10.49 ascon128v12 12.60 12.78 12.95 T:xoodyakround3 19.96 20.02 20.05 ascon128abi32v12 25.19 25.27 25.49 T:grain128aeadv2 25.27 25.29 25.32 ascon128bi32v12 30.11 30.61 31.10 T:schwaemm256128v2 34.76 35.28 35.74 T:schwaemm128128v2 35.59 35.60 35.61 T:giftcofb128v1 37.93 38.01 38.13 romulusn 38.53 38.77 39.10 T:schwaemm192192v2 40.09 40.35 40.64 T:schwaemm256256v2 50.02 50.15 50.72 romulusm 56.16 56.27 56.34 T:isapa128av20 63.52 63.55 63.56 T:tinyjambu128v2 74.41 74.42 74.45 T:tinyjambu192v2 77.61 77.62 77.83 T:tinyjambu256v2 120.13 120.36 120.45 romulust 139.94 140.38 140.70 T:isapk128av20 182.44 182.73 183.35 T:elephant200v2 295.76 295.76 295.81 T:isapa128v20 1019.83 1023.51 1024.34 T:isapk128v20 2219.32 2220.15 2222.56 T:isapxv20 5599.31 5601.99 5613.54 T:elephant176v2 7384.69 7385.47 7386.45 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.98 5.00 5.03 aes256gcmv1 5.10 5.10 5.10 T:aes128gcmv1 8.31 8.31 8.50 ascon128av12 10.42 10.42 10.45 ascon128v12 10.56 10.57 10.60 ascon80pqv12 12.89 13.07 13.22 T:xoodyakround3 19.66 19.67 19.69 ascon128abi32v12 25.02 25.02 25.03 ascon128bi32v12 25.14 25.22 25.33 T:grain128aeadv2 29.90 30.37 30.75 T:schwaemm256128v2 34.81 35.40 35.89 T:schwaemm128128v2 35.64 35.65 35.65 T:giftcofb128v1 37.85 37.86 37.88 romulusn 38.67 38.83 39.05 T:schwaemm192192v2 40.49 40.73 40.95 T:schwaemm256256v2 50.81 50.95 51.58 romulusm 55.12 55.13 55.14 T:isapa128av20 63.64 63.66 63.70 T:tinyjambu128v2 74.57 74.59 74.61 T:tinyjambu192v2 77.96 77.96 77.96 T:tinyjambu256v2 120.35 120.59 120.80 romulust 141.40 144.27 144.80 T:isapk128av20 182.75 183.15 183.32 T:elephant200v2 296.02 296.02 296.09 T:isapa128v20 1019.76 1021.41 1022.48 T:isapk128v20 2220.07 2220.70 2223.47 T:isapxv20 5600.85 5604.55 5610.52 T:elephant176v2 7384.15 7384.66 7385.10 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.95 4.99 5.01 aes256gcmv1 5.10 5.10 5.10 T:aes128gcmv1 8.31 8.31 8.31 ascon128av12 10.42 10.42 10.43 ascon128v12 10.56 10.56 10.60 ascon80pqv12 12.73 13.00 13.19 T:xoodyakround3 19.66 19.67 19.67 ascon128abi32v12 25.02 25.02 25.02 ascon128bi32v12 25.16 25.25 25.35 T:grain128aeadv2 29.85 30.23 30.70 T:schwaemm256128v2 34.89 35.32 35.98 T:schwaemm128128v2 35.64 35.65 35.65 T:giftcofb128v1 35.95 35.95 35.96 T:isapa128av20 37.85 37.86 37.87 romulusn 38.63 38.85 39.01 T:schwaemm192192v2 40.54 40.72 41.00 T:schwaemm256256v2 50.78 50.93 51.63 romulusm 63.60 63.60 63.60 T:tinyjambu128v2 74.54 74.54 74.54 T:tinyjambu192v2 74.60 74.76 74.97 romulust 77.96 77.96 77.96 T:tinyjambu256v2 89.61 90.95 91.60 T:isapk128av20 154.62 154.62 154.65 T:isapa128v20 182.40 182.54 182.98 T:elephant200v2 546.30 546.32 546.46 T:isapk128v20 1160.60 1161.48 1162.17 T:isapxv20 5600.27 5603.11 5605.75 T:elephant176v2 7384.90 7385.15 7385.62 T:elephant160v2