VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.53 1.54 1.54 T:aes128gcmv1 1.66 1.67 1.69 aes256gcmv1 6.41 6.45 6.47 ascon128av12 9.37 9.38 9.40 ascon128v12 9.40 9.42 9.42 ascon80pqv12 11.13 11.19 11.42 ascon128abi32v12 16.96 17.03 17.14 ascon128bi32v12 17.90 17.96 18.77 T:xoodyakround3 19.46 19.51 19.60 T:schwaemm256128v2 23.66 23.74 24.34 T:schwaemm256256v2 25.68 25.74 25.82 T:schwaemm192192v2 26.90 27.18 27.20 T:grain128aeadv2 27.55 27.64 27.87 T:schwaemm128128v2 35.70 35.75 35.82 romulusn 36.37 36.41 36.47 T:isapa128av20 36.42 36.57 36.70 T:isapa128v20 40.44 40.48 40.52 T:giftcofb128v1 57.99 58.02 58.07 romulusm 61.63 61.63 61.68 T:tinyjambu128v2 64.97 65.19 65.28 T:isapk128av20 68.87 68.96 69.02 T:tinyjambu192v2 75.96 75.97 76.01 T:tinyjambu256v2 85.05 85.41 85.50 T:isapk128v20 118.77 118.79 118.82 romulust 139.02? 148.53? 157.96? T:isapxv20 229.77 229.82 230.06 T:elephant200v2 6451.37 6496.75 6502.86 T:elephant176v2 7140.50 7142.10 7158.96 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.67 1.69 1.70 T:aes128gcmv1 1.81 1.81 1.82 aes256gcmv1 6.29 6.32 6.32 ascon128av12 9.28 9.30 9.31 ascon128v12 9.38 9.39 9.39 ascon80pqv12 11.22 11.25 11.25 ascon128abi32v12 16.77 16.92 16.98 ascon128bi32v12 17.78 17.82 17.87 T:xoodyakround3 19.51 19.54 19.64 T:schwaemm256128v2 23.62 23.67 24.55 T:schwaemm256256v2 25.67 25.73 25.81 T:schwaemm192192v2 27.36 27.46 27.56 T:grain128aeadv2 27.56 27.61 27.78 T:schwaemm128128v2 35.81 35.85 35.87 romulusn 36.31 36.32 36.42 T:isapa128v20 36.40 36.44 36.46 T:isapa128av20 40.50 40.53 40.56 T:giftcofb128v1 58.16 58.17 58.26 romulusm 61.49 61.57 61.60 T:tinyjambu128v2 64.84 65.00 65.15 T:isapk128av20 68.68 68.70 68.72 T:tinyjambu192v2 76.03 76.11 76.17 T:tinyjambu256v2 84.66 84.76 85.50 T:isapk128v20 118.77 118.81 118.87 romulust 147.35 148.70 148.90 T:isapxv20 229.73 229.86 229.94 T:elephant200v2 6455.86 6499.34 6505.21 T:elephant176v2 7137.07 7139.26 7158.38 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.68 1.68 1.69 T:aes128gcmv1 1.79 1.81 1.82 aes256gcmv1 6.33 6.33 6.34 ascon128av12 9.25 9.29 9.31 ascon128v12 9.36 9.39 9.39 ascon80pqv12 11.23 11.25 11.26 ascon128abi32v12 16.77 16.91 16.99 ascon128bi32v12 17.83 17.85 17.91 T:xoodyakround3 18.02 18.04 18.13 T:isapa128v20 19.50 19.53 19.63 T:schwaemm256128v2 23.68 23.70 24.74 T:schwaemm256256v2 24.12 24.15 24.21 T:isapa128av20 25.69 25.81 25.88 T:schwaemm192192v2 27.35 27.46 27.54 T:grain128aeadv2 27.53 27.65 27.78 T:schwaemm128128v2 35.82 35.88 35.92 romulusn 39.74 39.81 39.84 romulust 40.49 40.51 40.54 T:giftcofb128v1 44.22 44.49 44.70 T:isapk128av20 54.59 54.62 54.65 T:isapk128v20 58.19 58.24 58.31 romulusm 61.50 61.54 61.56 T:tinyjambu128v2 68.67 68.74 68.74 T:tinyjambu192v2 76.07 76.08 76.12 T:tinyjambu256v2 86.38 86.88 87.45 T:isapxv20 229.63 229.85 230.11 T:elephant200v2 6453.08 6502.14 6507.36 T:elephant176v2 7139.88 7141.89 7158.32 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.01 1.02 1.03 T:aes128gcmv1 1.10 1.11 1.12 aes256gcmv1 6.37 6.41 6.43 ascon128av12 9.32 9.35 9.37 ascon80pqv12 9.32 9.36 9.37 ascon128v12 11.06 11.11 11.12 ascon128abi32v12 13.52 13.59 13.92 T:xoodyakround3 16.84 16.91 16.95 ascon128bi32v12 19.38 19.43 19.47 T:schwaemm256128v2 23.54 23.61 24.36 T:schwaemm256256v2 25.59 25.64 25.68 T:schwaemm192192v2 26.86 27.08 27.10 T:grain128aeadv2 27.26 27.33 27.43 T:isapa128v20 27.47 27.57 27.63 T:schwaemm128128v2 28.96 28.99 29.02 romulusn 30.30 30.30 30.32 T:isapa128av20 40.11 40.16 40.21 romulusm 40.39 40.39 40.45 T:giftcofb128v1 50.59 50.63 50.68 T:tinyjambu128v2 54.32 54.33 54.35 T:tinyjambu192v2 54.73 54.83 54.89 T:isapk128av20 57.92 57.99 58.04 T:tinyjambu256v2 69.74 70.07 70.10 T:isapk128v20 79.28 79.30 79.32 romulust 112.65 117.41 121.04 T:isapxv20 171.28 171.38 171.41 T:elephant200v2 4822.73 4854.91 4857.45 T:elephant176v2 5352.30 5353.74 5367.24 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.09 1.10 1.12 T:aes128gcmv1 1.14 1.16 1.18 aes256gcmv1 6.34 6.35 6.35 ascon128av12 9.27 9.31 9.34 ascon128v12 9.33 9.34 9.34 ascon80pqv12 11.09 11.11 11.11 ascon128abi32v12 13.44 13.46 13.52 T:xoodyakround3 16.69 16.74 16.78 ascon128bi32v12 19.37 19.41 19.47 T:schwaemm256128v2 23.54 23.60 24.40 T:schwaemm256256v2 25.59 25.63 25.69 T:schwaemm192192v2 27.18 27.24 27.49 T:isapa128v20 27.18 27.27 27.29 T:grain128aeadv2 27.42 27.52 27.57 T:schwaemm128128v2 29.00 29.03 29.06 romulusn 30.30 30.31 30.36 T:isapa128av20 40.15 40.19 40.25 romulusm 40.39 40.43 40.45 T:giftcofb128v1 50.62 50.62 50.63 T:tinyjambu128v2 54.20 54.23 54.24 T:tinyjambu192v2 54.68 54.74 54.81 T:isapk128av20 58.06 58.09 58.10 T:tinyjambu256v2 69.68 69.73 70.10 T:isapk128v20 79.26 79.29 79.30 romulust 116.70 117.36 117.83 T:isapxv20 171.36 171.38 171.39 T:elephant200v2 4822.96 4853.83 4866.56 T:elephant176v2 5353.77 5355.46 5367.88 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.10 1.10 1.12 T:aes128gcmv1 1.16 1.16 1.17 aes256gcmv1 6.31 6.32 6.32 ascon128av12 9.28 9.30 9.32 ascon128v12 9.34 9.35 9.35 ascon80pqv12 11.10 11.11 11.11 ascon128abi32v12 13.46 13.49 13.54 T:xoodyakround3 16.70 16.76 16.80 ascon128bi32v12 18.11 18.13 18.26 T:isapa128v20 19.37 19.40 19.46 T:schwaemm256128v2 23.53 23.60 24.38 T:schwaemm256256v2 24.16 24.19 24.21 T:isapa128av20 25.60 25.63 25.68 T:schwaemm192192v2 27.18 27.24 27.29 T:grain128aeadv2 27.50 27.58 27.69 T:schwaemm128128v2 28.99 29.03 29.07 romulusn 39.77 39.80 39.85 romulust 40.16 40.22 40.27 romulusm 40.40 40.42 40.44 T:giftcofb128v1 44.36 44.51 44.60 T:isapk128av20 50.61 50.64 50.66 T:tinyjambu128v2 54.19 54.23 54.26 T:tinyjambu192v2 54.63 54.66 54.67 T:isapk128v20 58.01 58.04 58.06 T:tinyjambu256v2 86.54 86.80 87.08 T:isapxv20 171.28 171.35 171.42 T:elephant200v2 4821.87 4854.49 4866.91 T:elephant176v2 5352.25 5353.87 5367.26 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.51 0.52 0.53 T:aes128gcmv1 0.51 0.53 0.55 aes256gcmv1 6.32 6.36 6.38 ascon128av12 9.07 9.11 9.13 T:xoodyakround3 9.25 9.27 9.29 ascon80pqv12 9.28 9.28 9.30 ascon128v12 10.92 10.95 10.95 ascon128abi32v12 16.59 16.73 16.79 ascon128bi32v12 18.23 18.25 18.25 T:isapa128v20 19.24 19.28 19.32 T:schwaemm256128v2 22.18 22.21 22.25 romulusn 22.25 22.26 22.26 romulusm 23.42 23.52 24.28 T:schwaemm256256v2 24.15 24.17 24.23 T:isapa128av20 25.41 25.49 25.60 T:schwaemm192192v2 26.81 27.02 27.04 T:grain128aeadv2 27.28 27.48 27.62 T:schwaemm128128v2 39.70 39.70 39.72 T:tinyjambu192v2 39.69 39.70 39.72 T:tinyjambu128v2 39.78 39.78 39.78 romulust 40.02 40.02 40.02 T:tinyjambu256v2 40.26 40.30 40.34 T:giftcofb128v1 44.30 44.55 44.76 T:isapk128av20 54.61 54.72 54.76 T:isapk128v20 77.50? 86.69? 95.43? T:isapxv20 113.14 113.18 113.29 T:elephant200v2 3187.60 3211.04 3213.87 T:elephant176v2 3564.63 3565.45 3573.23 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.50 0.52 0.53 T:aes128gcmv1 0.51 0.53 0.55 aes256gcmv1 6.37 6.38 6.39 ascon128av12 9.09 9.15 9.21 T:xoodyakround3 9.30 9.31 9.32 ascon128v12 9.27 9.31 9.31 ascon80pqv12 10.94 10.95 10.98 ascon128abi32v12 16.51 16.59 16.65 ascon128bi32v12 18.18 18.22 18.33 T:isapa128v20 19.26 19.27 19.35 T:schwaemm256128v2 22.19 22.22 22.25 romulusn 22.23 22.25 22.38 romulusm 23.42 23.48 24.21 T:schwaemm256256v2 24.16 24.19 24.22 T:isapa128av20 25.41 25.49 25.59 T:schwaemm192192v2 27.00 27.03 27.08 T:grain128aeadv2 27.26 27.46 27.57 T:schwaemm128128v2 39.67 39.68 39.68 T:tinyjambu128v2 39.69 39.70 39.70 T:tinyjambu192v2 39.73 39.76 39.81 romulust 40.08 40.13 40.14 T:tinyjambu256v2 40.28 40.34 40.37 T:giftcofb128v1 44.32 44.53 44.71 T:isapk128av20 54.63 54.69 54.72 T:isapk128v20 85.93 86.27 86.74 T:isapxv20 113.15 113.34 113.36 T:elephant200v2 3186.75 3209.78 3211.87 T:elephant176v2 3564.07 3565.73 3572.25 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.50 0.51 0.53 T:aes128gcmv1 0.51 0.52 0.53 aes256gcmv1 6.33 6.34 6.34 ascon128av12 9.06 9.11 9.18 T:xoodyakround3 9.28 9.28 9.29 ascon128v12 9.29 9.30 9.32 ascon80pqv12 10.95 10.97 11.04 ascon128abi32v12 16.52 16.59 16.67 ascon128bi32v12 18.20 18.24 18.28 T:isapa128v20 19.24 19.27 19.38 T:schwaemm256128v2 22.18 22.20 22.25 romulusn 22.22 22.24 22.25 romulusm 23.40 23.48 24.03 T:schwaemm256256v2 24.16 24.19 24.25 T:isapa128av20 25.47 25.53 25.56 T:schwaemm192192v2 27.00 27.06 27.09 T:grain128aeadv2 27.47 27.61 27.71 T:schwaemm128128v2 39.68 39.68 39.71 T:tinyjambu128v2 39.70 39.71 39.75 T:tinyjambu192v2 39.74 39.81 39.87 romulust 40.01 40.01 40.01 T:tinyjambu256v2 40.29 40.31 40.35 T:giftcofb128v1 44.28 44.52 44.69 T:isapk128av20 54.63 54.70 54.72 T:isapk128v20 85.89 86.24 86.47 T:isapxv20 113.16 113.27 113.31 T:elephant200v2 3189.07 3211.10 3214.46 T:elephant176v2 3564.43 3565.51 3573.17 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.14 1.15 1.16 T:aes128gcmv1 1.24 1.25 1.25 aes256gcmv1 6.54 6.58 6.60 ascon128av12 9.48 9.49 9.53 ascon128v12 9.49 9.50 9.52 ascon80pqv12 11.37 11.40 11.41 ascon128abi32v12 13.65 13.66 14.04 T:xoodyakround3 17.20 17.21 17.25 ascon128bi32v12 19.93 19.99 20.05 T:schwaemm256128v2 24.25 24.25 24.84 T:schwaemm256256v2 26.19 26.21 26.23 T:schwaemm192192v2 27.29 27.48 27.49 T:grain128aeadv2 27.89 27.97 28.06 T:schwaemm128128v2 29.25 29.26 29.28 romulusn 33.52 33.53 33.54 T:isapa128av20 39.97 40.12 40.15 T:isapa128v20 40.43 40.44 40.47 romulusm 40.79 40.80 40.83 T:giftcofb128v1 51.01 51.03 51.09 T:tinyjambu128v2 54.75 54.75 54.76 T:tinyjambu192v2 58.43 58.47 58.49 T:tinyjambu256v2 60.84 60.88 60.91 T:isapk128av20 80.47 80.50 80.52 romulust 121.54 121.82 121.85 T:isapk128v20 174.89 174.90 174.91 T:elephant200v2 190.04 190.56 195.25 T:isapxv20 4860.90 4891.38 4894.99 T:elephant176v2 5412.25 5413.00 5426.18 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.23 1.23 1.24 T:aes128gcmv1 1.30 1.31 1.31 aes256gcmv1 6.51 6.51 6.53 ascon128av12 9.45 9.46 9.47 ascon128v12 9.48 9.48 9.49 ascon80pqv12 11.41 11.46 11.46 ascon128abi32v12 13.60 13.61 13.62 T:xoodyakround3 17.10 17.11 17.12 ascon128bi32v12 19.97 19.99 20.02 T:schwaemm256128v2 24.21 24.24 25.00 T:schwaemm256256v2 26.19 26.23 26.25 T:schwaemm192192v2 27.58 27.59 27.68 T:grain128aeadv2 27.85 27.94 28.07 T:schwaemm128128v2 29.28 29.29 29.32 romulusn 33.51 33.54 33.56 T:isapa128av20 39.93 39.97 40.16 T:isapa128v20 40.52 40.55 40.60 romulusm 40.79 40.82 40.86 T:giftcofb128v1 50.99 51.00 51.04 T:tinyjambu128v2 54.63 54.66 54.67 T:tinyjambu192v2 58.51 58.56 58.58 T:tinyjambu256v2 60.88 60.92 60.94 T:isapk128av20 80.49 80.51 80.53 romulust 121.53 121.55 121.81 T:isapk128v20 174.78 174.87 174.89 T:elephant200v2 190.03 190.35 190.54 T:isapxv20 4862.02 4890.25 4891.45 T:elephant176v2 5412.34 5413.65 5425.44 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.22 1.23 1.23 T:aes128gcmv1 1.30 1.31 1.31 aes256gcmv1 6.49 6.49 6.49 ascon128av12 9.44 9.44 9.45 ascon128v12 9.49 9.49 9.50 ascon80pqv12 11.41 11.41 11.47 ascon128abi32v12 13.62 13.63 13.64 T:xoodyakround3 17.11 17.12 17.12 ascon128bi32v12 19.98 20.01 20.06 T:schwaemm256128v2 24.19 24.23 24.93 T:schwaemm256256v2 24.62 24.64 24.75 T:isapa128v20 25.98 26.00 26.03 T:isapa128av20 26.19 26.22 26.28 T:schwaemm192192v2 27.58 27.63 27.67 T:grain128aeadv2 27.82 27.92 27.97 T:schwaemm128128v2 29.29 29.31 29.33 romulusn 40.49 40.55 40.59 romulusm 40.79 40.80 40.82 T:giftcofb128v1 40.96 40.97 41.01 romulust 47.96 48.09 48.11 T:isapk128av20 51.01 51.03 51.05 T:tinyjambu128v2 54.63 54.64 54.65 T:tinyjambu192v2 58.50 58.51 58.53 T:tinyjambu256v2 81.13 81.14 81.16 T:isapk128v20 123.90 123.98 124.06 T:isapxv20 174.82 174.84 174.88 T:elephant200v2 4864.32 4891.52 4892.51 T:elephant176v2 5413.05 5413.73 5426.65 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.05 6.08 6.27 T:aes128gcmv1 6.48 6.51 6.69 aes256gcmv1 10.59 10.75 10.98 ascon128av12 12.61 12.61 13.34 ascon80pqv12 12.70 12.81 13.41 ascon128v12 17.93 18.26 18.62 ascon128abi32v12 20.40 20.60 20.95 T:xoodyakround3 24.31 24.45 26.26 ascon128bi32v12 32.57 32.86 33.31 T:schwaemm256128v2 35.09 35.34 35.83 romulusn 35.45 35.94 36.61 T:grain128aeadv2 35.73 36.30 37.09 T:schwaemm128128v2 38.77 38.80 39.33 T:schwaemm256256v2 42.12 42.94 43.48 T:schwaemm192192v2 46.33 46.44 46.88 romulusm 49.36 49.52 49.76 T:giftcofb128v1 59.99 60.15 60.27 T:tinyjambu128v2 64.26 64.49 64.74 T:tinyjambu192v2 68.09 68.60 68.78 T:tinyjambu256v2 106.88 107.16 107.73 T:isapa128av20 107.86 107.98 107.98 romulust 189.34 189.38 191.71 T:isapk128av20 245.71 246.04 246.70 T:elephant200v2 331.00 331.19 331.50 T:isapa128v20 1298.48 1298.69 1299.15 T:isapk128v20 1847.88 1851.80 1978.93 T:isapxv20 6056.86 6087.23 6091.95 T:elephant176v2 7243.09 7253.64 7258.30 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.74 5.78 5.86 T:aes128gcmv1 6.52 6.62 6.73 aes256gcmv1 10.30 10.57 10.77 ascon128av12 12.83 12.98 13.28 ascon80pqv12 12.80 12.99 13.39 ascon128v12 18.03 18.12 18.80 ascon128abi32v12 19.95 20.86 21.38 T:xoodyakround3 24.42 25.01 26.23 ascon128bi32v12 33.14 33.28 33.47 T:schwaemm256128v2 35.07 35.25 35.48 romulusn 35.75 36.48 36.77 T:grain128aeadv2 36.16 36.64 37.88 T:schwaemm128128v2 38.64 38.71 39.46 T:schwaemm256256v2 42.28 42.88 43.11 T:schwaemm192192v2 47.55 47.76 47.98 romulusm 49.56 49.59 50.07 T:giftcofb128v1 59.95 60.02 60.09 T:tinyjambu128v2 64.09 64.12 64.27 T:tinyjambu192v2 68.30 68.45 68.45 T:tinyjambu256v2 106.73 107.12 107.39 T:isapa128av20 108.22 108.55 108.97 romulust 190.82 191.64 192.02 T:isapk128av20 245.55 245.76 245.94 T:elephant200v2 329.23 331.23 332.57 T:isapa128v20 1298.73 1299.00 1299.61 T:isapk128v20 1855.77 1857.68 1860.02 T:isapxv20 6051.38 6089.55 6094.56 T:elephant176v2 7246.73 7253.49 7257.08 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.73 5.73 5.76 T:aes128gcmv1 6.51 6.54 6.60 aes256gcmv1 10.26 10.45 10.64 ascon128av12 12.70 12.71 13.15 ascon80pqv12 12.89 12.89 13.23 ascon128v12 18.00 18.17 18.48 ascon128abi32v12 19.83 20.48 20.52 T:xoodyakround3 25.03 25.59 25.92 ascon128bi32v12 32.85 33.16 33.47 T:schwaemm256128v2 35.11 35.21 35.58 romulusn 36.16 36.23 36.70 T:schwaemm128128v2 35.88 36.26 36.56 T:grain128aeadv2 38.63 38.69 39.49 T:schwaemm256256v2 42.13 42.73 43.12 T:schwaemm192192v2 47.47 47.74 47.85 romulusm 49.88 50.05 50.18 T:giftcofb128v1 59.92 60.22 60.22 T:tinyjambu128v2 64.29 64.29 64.29 T:tinyjambu192v2 66.66 66.79 67.19 T:isapa128av20 67.41 67.88 68.10 romulust 68.29 68.33 68.33 T:tinyjambu256v2 119.10 121.65 121.98 T:isapk128av20 172.63 173.34 173.78 T:isapa128v20 245.60 245.82 245.90 T:elephant200v2 679.03 679.34 679.58 T:isapk128v20 968.76 971.09 973.97 T:isapxv20 6047.86 6084.48 6091.12 T:elephant176v2 7246.07 7250.38 7256.34 T:elephant160v2