VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20260217

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.51 1.53 1.54 T:aes128gcmv1 1.73 1.75 1.75 aes256gcmv1 5.96 6.06 6.06 ascon128av12 8.99 9.00 9.00 ascon128v12 9.05 9.15 9.15 ascon80pqv12 11.16 11.24 11.24 ascon128abi32v12 15.19 15.29 15.35 T:xoodyakround3 16.32 16.33 16.33 ascon128bi32v12 17.72 17.75 17.80 T:schwaemm256128v2 23.26 23.29 23.38 T:schwaemm256256v2 23.25 23.30 23.33 T:schwaemm192192v2 26.09 26.13 26.17 T:schwaemm128128v2 26.90 26.92 27.01 T:grain128aeadv2 34.33 34.35 34.38 T:isapa128av20 35.14 35.15 35.15 T:isapa128v20 35.69 35.71 35.78 romulusn 40.66 40.70 40.72 T:giftcofb128v1 56.13 56.13 56.13 T:tinyjambu128v2 58.01 58.05 58.09 romulusm 66.04 66.04 66.04 T:tinyjambu192v2 68.42 68.47 68.53 T:isapk128av20 70.71 70.71 70.71 T:tinyjambu256v2 88.45 88.53 88.61 T:isapk128v20 118.44 118.47 118.49 romulust 147.35 150.15 153.31 T:isapxv20 156.31 156.46 156.51 T:elephant200v2 6480.67 6493.63 6524.19 T:elephant176v2 7290.99 7307.40 7314.47 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.66 1.66 1.67 T:aes128gcmv1 1.74 1.74 1.75 aes256gcmv1 6.04 6.05 6.05 ascon128av12 8.89 8.89 8.89 ascon128v12 8.91 8.93 8.93 ascon80pqv12 11.19 11.22 11.26 ascon128abi32v12 15.19 15.24 15.30 T:xoodyakround3 16.14 16.15 16.19 ascon128bi32v12 17.73 17.76 17.79 T:schwaemm256128v2 23.26 23.28 23.44 T:schwaemm256256v2 23.26 23.29 23.33 T:schwaemm192192v2 26.12 26.20 26.37 T:schwaemm128128v2 26.99 27.03 27.04 T:grain128aeadv2 34.31 34.36 34.38 T:isapa128av20 35.33 35.36 35.38 T:isapa128v20 35.77 35.81 35.86 romulusn 40.41 40.45 40.49 T:giftcofb128v1 56.07 56.08 56.08 T:tinyjambu128v2 57.94 58.07 58.24 romulusm 65.93 65.93 65.93 T:tinyjambu192v2 68.44 68.47 68.50 T:isapk128av20 70.56 70.56 70.57 T:tinyjambu256v2 88.37 88.51 88.60 T:isapk128v20 118.36 118.46 118.49 romulust 148.69 149.52 152.65 T:isapxv20 156.19 156.30 156.45 T:elephant200v2 6480.28 6494.32 6526.10 T:elephant176v2 7290.24 7307.31 7314.13 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.66 1.66 1.67 T:aes128gcmv1 1.74 1.74 1.75 aes256gcmv1 6.04 6.05 6.05 ascon128av12 8.88 8.89 8.89 ascon128v12 8.92 8.93 8.93 ascon80pqv12 11.21 11.26 11.27 ascon128abi32v12 15.22 15.25 15.27 T:xoodyakround3 16.17 16.28 16.32 ascon128bi32v12 17.53 17.53 17.70 T:isapa128v20 17.72 17.75 17.80 T:schwaemm256128v2 22.84 22.86 22.88 T:isapa128av20 23.26 23.29 23.42 T:schwaemm256256v2 23.26 23.33 23.42 T:schwaemm192192v2 26.14 26.18 26.24 T:schwaemm128128v2 26.99 27.02 27.04 T:grain128aeadv2 35.78 35.82 35.86 romulusn 39.66 39.77 39.78 romulust 40.42 40.45 40.48 T:giftcofb128v1 44.99 45.02 45.05 T:isapk128av20 56.09 56.10 56.10 T:tinyjambu128v2 56.07 56.18 56.24 T:isapk128v20 58.07 58.09 58.11 romulusm 65.93 65.93 65.93 T:tinyjambu192v2 70.64 70.64 70.64 T:tinyjambu256v2 86.39 86.94 88.82 T:isapxv20 156.27 156.34 156.40 T:elephant200v2 6478.79 6491.99 6522.53 T:elephant176v2 7291.43 7307.18 7313.91 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.02 1.02 1.03 T:aes128gcmv1 1.14 1.14 1.15 aes256gcmv1 6.03 6.04 6.05 ascon128av12 8.99 8.99 9.00 ascon128v12 9.04 9.04 9.04 ascon80pqv12 10.97 10.98 11.00 ascon128abi32v12 11.86 11.90 11.92 T:xoodyakround3 16.14 16.17 16.28 ascon128bi32v12 17.60 17.64 17.67 T:schwaemm256128v2 23.16 23.17 23.28 T:schwaemm256256v2 23.23 23.28 23.30 T:schwaemm192192v2 26.09 26.14 26.18 T:schwaemm128128v2 26.35 26.35 26.38 T:isapa128v20 27.14 27.17 27.20 T:grain128aeadv2 28.74 28.75 28.76 T:isapa128av20 28.97 29.00 29.04 romulusn 40.12 40.18 40.23 romulusm 40.56 40.59 40.60 T:giftcofb128v1 44.57 44.58 44.59 T:tinyjambu128v2 51.45 51.46 51.53 T:tinyjambu192v2 52.96 52.99 53.02 T:tinyjambu256v2 56.75 56.77 56.78 T:isapk128av20 72.32 72.36 72.45 T:isapk128v20 79.06 79.13 79.15 romulust 117.56 117.62 117.65 T:elephant200v2 117.42 119.02 120.43 T:isapxv20 4843.87 4851.15 4875.43 T:elephant176v2 5467.32 5480.69 5483.97 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.09 1.10 1.10 T:aes128gcmv1 1.14 1.14 1.14 aes256gcmv1 6.00 6.01 6.02 ascon128av12 8.87 8.88 8.88 ascon128v12 8.90 8.90 8.90 ascon80pqv12 11.07 11.08 11.08 ascon128abi32v12 11.81 11.85 11.90 T:xoodyakround3 16.39 16.40 16.40 ascon128bi32v12 17.62 17.65 17.67 T:schwaemm256128v2 23.15 23.16 23.31 T:schwaemm256256v2 23.27 23.30 23.32 T:schwaemm192192v2 26.06 26.09 26.17 T:schwaemm128128v2 26.36 26.37 26.38 T:isapa128v20 26.92 26.96 27.07 T:grain128aeadv2 28.71 28.74 28.75 T:isapa128av20 29.00 29.02 29.05 romulusn 40.11 40.18 40.29 romulusm 40.41 40.44 40.48 T:giftcofb128v1 44.50 44.51 44.53 T:tinyjambu128v2 51.27 51.28 51.28 T:tinyjambu192v2 52.95 52.95 52.95 T:tinyjambu256v2 56.67 56.75 56.78 T:isapk128av20 72.27 72.36 72.44 T:isapk128v20 79.08 79.11 79.19 romulust 117.54 117.64 117.71 T:elephant200v2 117.76 118.77 120.30 T:isapxv20 4840.11 4847.81 4875.54 T:elephant176v2 5467.56 5481.27 5484.80 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.09 1.10 1.10 T:aes128gcmv1 1.14 1.14 1.14 aes256gcmv1 6.02 6.02 6.03 ascon128av12 8.87 8.88 8.88 ascon128v12 8.88 8.88 8.88 ascon80pqv12 11.08 11.08 11.08 ascon128abi32v12 11.81 11.86 11.92 T:xoodyakround3 16.39 16.40 16.40 ascon128bi32v12 17.55 17.55 17.57 T:isapa128v20 17.62 17.64 17.67 T:schwaemm256128v2 22.98 23.00 23.01 T:isapa128av20 23.15 23.17 23.33 T:schwaemm256256v2 23.25 23.29 23.35 T:schwaemm192192v2 26.02 26.07 26.20 T:schwaemm128128v2 26.95 26.99 27.09 T:grain128aeadv2 29.00 29.02 29.04 romulusn 39.74 39.76 39.79 romulust 40.09 40.14 40.23 romulusm 40.41 40.45 40.47 T:giftcofb128v1 44.47 44.48 44.50 T:tinyjambu128v2 45.04 45.05 45.06 T:isapk128av20 51.31 51.31 51.32 T:tinyjambu192v2 53.01 53.01 53.02 T:tinyjambu256v2 56.10 56.14 56.17 T:isapk128v20 86.76 87.15 89.32 T:isapxv20 117.52 117.57 117.60 T:elephant200v2 4844.23 4851.55 4875.51 T:elephant176v2 5467.89 5481.14 5484.77 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.51 0.52 0.53 T:aes128gcmv1 0.53 0.54 0.55 aes256gcmv1 6.00 6.01 6.01 ascon128av12 8.41 8.43 8.52 T:xoodyakround3 8.96 8.97 8.98 ascon128v12 8.98 8.99 8.99 ascon80pqv12 10.82 10.82 10.82 ascon128abi32v12 16.27 16.28 16.28 ascon128bi32v12 17.51 17.54 17.56 T:schwaemm256128v2 17.58 17.58 17.58 T:isapa128v20 22.21 22.23 22.26 romulusn 22.24 22.26 22.37 romulusm 23.05 23.07 23.18 T:schwaemm256256v2 23.12 23.13 23.14 T:isapa128av20 23.21 23.24 23.32 T:schwaemm192192v2 25.96 26.04 26.09 T:schwaemm128128v2 27.30 27.34 27.40 T:grain128aeadv2 32.99 33.00 33.00 T:tinyjambu128v2 35.27 35.28 35.29 T:tinyjambu256v2 36.85 36.86 36.93 T:tinyjambu192v2 39.71 39.75 39.80 romulust 40.42 40.43 40.49 T:giftcofb128v1 45.08 45.09 45.12 T:isapk128av20 56.10 56.15 56.22 T:isapk128v20 79.01 79.04 79.06 T:elephant200v2 86.00 87.34 88.18 T:isapxv20 3193.29 3203.53 3219.05 T:elephant176v2 3639.87 3645.47 3651.08 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.51 0.52 0.53 T:aes128gcmv1 0.53 0.53 0.54 aes256gcmv1 5.95 5.98 5.98 ascon128av12 8.40 8.43 8.51 T:xoodyakround3 8.83 8.84 8.84 ascon128v12 8.99 9.00 9.00 ascon80pqv12 10.82 10.85 10.90 ascon128abi32v12 16.26 16.30 16.32 ascon128bi32v12 17.56 17.58 17.59 T:isapa128v20 17.54 17.60 17.62 T:schwaemm256128v2 22.24 22.24 22.25 romulusm 22.23 22.26 22.29 romulusn 23.06 23.09 23.18 T:schwaemm256256v2 23.09 23.11 23.14 T:isapa128av20 23.22 23.24 23.30 T:schwaemm192192v2 25.96 26.01 26.03 T:schwaemm128128v2 26.86 26.93 27.12 T:grain128aeadv2 32.97 32.98 32.98 T:tinyjambu128v2 35.36 35.36 35.36 T:tinyjambu256v2 36.75 36.76 36.77 T:tinyjambu192v2 39.71 39.78 39.80 romulust 40.42 40.45 40.50 T:giftcofb128v1 45.10 45.10 45.10 T:isapk128av20 56.11 56.21 56.26 T:isapk128v20 79.00 79.05 79.10 T:elephant200v2 85.95 86.41 87.68 T:isapxv20 3193.48 3203.44 3218.30 T:elephant176v2 3639.10 3644.32 3650.01 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.51 0.52 0.53 T:aes128gcmv1 0.53 0.54 0.54 aes256gcmv1 5.99 6.00 6.01 ascon128av12 8.39 8.43 8.52 T:xoodyakround3 8.83 8.84 8.84 ascon128v12 8.97 8.97 8.97 ascon80pqv12 10.90 10.91 10.91 ascon128abi32v12 16.29 16.30 16.32 ascon128bi32v12 17.49 17.52 17.59 T:schwaemm256128v2 17.56 17.58 17.59 T:isapa128v20 22.24 22.24 22.25 romulusm 22.23 22.25 22.28 romulusn 23.04 23.08 23.17 T:schwaemm256256v2 23.10 23.12 23.14 T:isapa128av20 23.23 23.27 23.32 T:schwaemm192192v2 25.92 25.94 26.04 T:schwaemm128128v2 26.87 26.94 27.01 T:grain128aeadv2 32.92 32.93 32.93 T:tinyjambu128v2 35.33 35.36 35.37 T:tinyjambu256v2 36.82 36.82 36.82 T:tinyjambu192v2 39.68 39.78 39.80 romulust 40.44 40.47 40.51 T:giftcofb128v1 45.08 45.09 45.10 T:isapk128av20 56.14 56.18 56.23 T:isapk128v20 79.00 79.03 79.07 T:elephant200v2 87.32 87.48 88.31 T:isapxv20 3193.03 3203.49 3218.25 T:elephant176v2 3640.10 3645.23 3651.64 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.14 1.15 1.15 T:aes128gcmv1 1.26 1.27 1.27 aes256gcmv1 6.17 6.18 6.18 ascon128av12 9.13 9.13 9.14 ascon128v12 9.19 9.19 9.19 ascon80pqv12 11.28 11.28 11.31 ascon128abi32v12 11.98 12.01 12.02 T:xoodyakround3 16.60 16.61 16.66 ascon128bi32v12 18.15 18.17 18.20 T:schwaemm256128v2 23.79 23.79 23.88 T:schwaemm256256v2 23.79 23.81 23.84 T:schwaemm192192v2 26.40 26.42 26.48 T:schwaemm128128v2 27.46 27.48 27.51 T:grain128aeadv2 29.21 29.23 29.25 romulusn 31.11 31.12 31.12 T:isapa128av20 38.73 38.73 38.75 T:isapa128v20 40.38 40.41 40.43 romulusm 40.94 40.96 40.97 T:giftcofb128v1 44.82 44.82 44.92 T:tinyjambu128v2 51.82 51.84 51.88 T:tinyjambu192v2 53.38 53.38 53.40 T:tinyjambu256v2 63.31 63.34 63.38 T:isapk128av20 80.28 80.33 80.38 romulust 120.07 120.09 120.13 T:elephant200v2 123.18 123.21 123.25 T:isapk128v20 192.29 192.84 194.04 T:isapxv20 4878.44 4885.98 4910.12 T:elephant176v2 5527.94 5540.13 5543.43 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.21 1.21 1.22 T:aes128gcmv1 1.28 1.28 1.28 aes256gcmv1 6.17 6.18 6.19 ascon128av12 9.01 9.01 9.01 ascon128v12 9.03 9.03 9.03 ascon80pqv12 11.37 11.39 11.39 ascon128abi32v12 11.93 11.94 11.95 T:xoodyakround3 16.91 17.00 17.01 ascon128bi32v12 18.14 18.15 18.19 T:schwaemm256128v2 23.78 23.78 23.91 T:schwaemm256256v2 23.77 23.79 23.82 T:schwaemm192192v2 26.42 26.46 26.53 T:schwaemm128128v2 27.29 27.32 27.40 T:grain128aeadv2 29.27 29.28 29.29 romulusn 31.08 31.09 31.09 T:isapa128av20 38.80 38.80 38.80 T:isapa128v20 40.49 40.54 40.55 romulusm 40.80 40.83 40.85 T:giftcofb128v1 44.86 44.87 44.88 T:tinyjambu128v2 51.72 51.72 51.72 T:tinyjambu192v2 53.39 53.39 53.43 T:tinyjambu256v2 63.31 63.36 63.38 T:isapk128av20 80.31 80.34 80.35 romulust 120.01 120.06 120.13 T:elephant200v2 123.15 123.22 123.25 T:isapk128v20 192.31 193.06 194.06 T:isapxv20 4880.83 4887.29 4909.66 T:elephant176v2 5528.26 5540.51 5543.18 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.21 1.21 1.22 T:aes128gcmv1 1.27 1.28 1.28 aes256gcmv1 6.18 6.19 6.19 ascon128av12 9.01 9.01 9.01 ascon128v12 9.03 9.03 9.03 ascon80pqv12 11.37 11.38 11.38 ascon128abi32v12 11.95 11.96 11.97 T:xoodyakround3 16.88 17.00 17.00 ascon128bi32v12 18.15 18.17 18.20 T:schwaemm256128v2 23.77 23.78 23.92 T:schwaemm256256v2 23.78 23.80 23.83 T:schwaemm192192v2 23.85 23.85 23.86 T:isapa128v20 24.31 24.31 24.33 T:isapa128av20 26.38 26.41 26.46 T:schwaemm128128v2 27.26 27.28 27.36 T:grain128aeadv2 29.26 29.29 29.31 romulusn 40.53 40.55 40.56 romulusm 40.79 40.81 40.87 T:giftcofb128v1 40.91 40.92 40.97 romulust 44.82 44.83 44.84 T:tinyjambu128v2 49.04 49.05 49.05 T:isapk128av20 51.79 51.79 51.79 T:tinyjambu192v2 53.37 53.37 53.38 T:tinyjambu256v2 81.80 81.84 81.88 T:isapk128v20 120.04 120.05 120.07 T:elephant200v2 125.36 125.37 126.08 T:isapxv20 4879.73 4886.12 4907.76 T:elephant176v2 5528.38 5540.43 5544.16 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.04 6.05 6.07 T:aes128gcmv1 6.06 6.25 6.27 aes256gcmv1 9.47 9.49 9.88 ascon128av12 12.16 12.16 12.23 ascon128v12 12.35 12.35 12.43 ascon80pqv12 17.31 17.34 17.42 T:xoodyakround3 18.04 18.04 18.40 ascon128abi32v12 26.70 26.73 27.00 ascon128bi32v12 29.48 29.59 29.89 T:schwaemm256128v2 33.66 33.79 34.13 T:schwaemm128128v2 34.68 34.80 35.11 T:grain128aeadv2 35.02 35.04 35.11 romulusn 37.94 37.99 38.12 T:schwaemm256256v2 38.42 38.53 38.96 T:schwaemm192192v2 46.21 46.35 46.53 romulusm 49.07 49.50 49.74 T:giftcofb128v1 52.63 52.63 52.96 T:tinyjambu128v2 60.83 60.83 61.00 T:tinyjambu192v2 62.53 62.53 62.76 T:tinyjambu256v2 84.80 85.19 85.44 T:isapa128av20 107.44 107.50 107.58 romulust 170.15 170.35 170.68 T:elephant200v2 203.75 203.86 203.99 T:isapk128av20 322.96 322.96 322.96 T:isapa128v20 1276.62 1276.98 1277.65 T:isapk128v20 1857.00 1870.24 1906.60 T:isapxv20 6062.12 6065.99 6099.72 T:elephant176v2 7390.76 7401.82 7404.15 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.74 5.74 5.77 T:aes128gcmv1 5.80 5.87 5.88 aes256gcmv1 9.67 9.71 10.14 ascon128av12 12.31 12.31 12.35 ascon80pqv12 12.35 12.35 12.46 ascon128v12 17.43 17.50 17.70 T:xoodyakround3 18.16 18.16 18.43 ascon128abi32v12 29.76 29.85 29.96 T:schwaemm256128v2 30.78 30.80 31.02 ascon128bi32v12 34.12 34.25 34.33 T:schwaemm128128v2 34.99 35.15 35.15 romulusn 34.95 35.31 35.38 T:grain128aeadv2 38.01 38.04 38.25 T:schwaemm256256v2 38.31 38.50 38.66 T:schwaemm192192v2 47.40 47.70 47.74 romulusm 49.47 49.66 49.76 T:giftcofb128v1 52.99 52.99 53.15 T:tinyjambu128v2 60.89 61.01 61.08 T:tinyjambu192v2 62.34 62.34 62.41 T:tinyjambu256v2 84.78 84.88 85.18 T:isapa128av20 107.74 107.99 108.03 romulust 170.04 170.48 170.87 T:elephant200v2 203.59 203.67 203.97 T:isapk128av20 323.70 324.45 324.73 T:isapa128v20 1276.83 1277.61 1277.91 T:isapk128v20 1867.11 1882.55 1888.94 T:isapxv20 6061.11 6067.35 6100.51 T:elephant176v2 7390.70 7400.44 7403.66 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.75 5.77 5.79 T:aes128gcmv1 5.86 5.87 5.88 aes256gcmv1 9.79 9.79 9.81 ascon128av12 12.30 12.30 12.34 ascon80pqv12 12.35 12.35 12.36 ascon128v12 17.37 17.40 17.70 T:xoodyakround3 18.21 18.21 18.32 ascon128abi32v12 29.85 29.91 29.94 T:schwaemm256128v2 30.67 30.75 30.79 ascon128bi32v12 33.87 33.94 34.38 T:schwaemm128128v2 34.82 34.94 35.02 T:grain128aeadv2 35.00 35.00 35.06 romulusn 38.01 38.03 38.19 T:schwaemm256256v2 38.51 38.70 38.85 T:schwaemm192192v2 47.40 47.58 47.73 romulusm 49.44 49.56 49.81 T:giftcofb128v1 52.82 52.82 52.84 T:tinyjambu128v2 54.41 54.47 54.70 T:isapa128av20 60.82 61.25 61.25 T:tinyjambu192v2 62.34 62.34 62.36 T:tinyjambu256v2 67.45 67.50 67.68 romulust 131.63 131.73 132.03 T:isapk128av20 168.71 168.89 169.12 T:isapa128v20 169.83 170.01 170.33 T:elephant200v2 660.49 661.01 661.49 T:isapk128v20 977.02 995.38 998.74 T:isapxv20 6062.22 6067.79 6098.07 T:elephant176v2 7391.55 7400.65 7403.80 T:elephant160v2