VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 3 1200; 4 x 3100MHz; rumba3, supercop-20221122

[Page version: 20241215 22:59:49]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.53 1.54 1.60 T:aes128gcmv1 1.75 1.76 1.77 aes256gcmv1 6.57 6.60 6.60 ascon128av12 9.02 9.03 9.05 ascon128v12 9.05 9.08 9.09 ascon80pqv12 11.47? 13.21? 13.30? ascon128abi32v12 15.12 15.20 15.53 T:xoodyakround3 16.50 16.61 16.63 ascon128bi32v12 19.40 19.41 19.42 T:schwaemm256128v2 24.07 24.12 24.16 T:schwaemm256256v2 25.81 25.84 25.85 T:schwaemm192192v2 27.72 27.75 27.76 T:schwaemm128128v2 28.02 28.05 28.08 T:grain128aeadv2 34.29 34.32 34.35 T:isapa128av20 34.49 34.71 34.71 T:isapa128v20 34.93 34.97 35.19 romulusn 40.53 40.55 40.59 T:giftcofb128v1 56.39 56.39 56.40 T:tinyjambu128v2 56.77 56.89 57.05 romulusm 66.51 66.52 66.64 T:tinyjambu192v2 66.48 66.84 69.36 T:isapk128av20 71.06 71.08 71.10 T:tinyjambu256v2 88.59 88.64 88.78 T:isapk128v20 115.57 115.59 115.60 romulust 147.81 147.98 148.23 T:elephant200v2 158.90 161.53 163.37 T:isapxv20 6938.00 6938.60 6939.30 T:elephant176v2 7819.53 7830.01 7958.96 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.68 1.69 1.70 T:aes128gcmv1 1.74 1.75 1.76 aes256gcmv1 6.04 6.06 6.07 ascon128av12 8.87 8.87 8.91 ascon80pqv12 9.07 9.10 9.10 ascon128v12 11.43 11.44 11.46 ascon128abi32v12 16.23 16.24 16.26 ascon128bi32v12 16.48 16.66 16.80 T:xoodyakround3 19.58 19.76 19.80 T:schwaemm256128v2 24.03 24.14 24.18 T:schwaemm256256v2 25.95 26.08 26.08 T:schwaemm192192v2 27.82 28.19 28.22 T:schwaemm128128v2 28.27 28.36 28.41 T:grain128aeadv2 34.29 34.31 34.33 T:isapa128av20 34.70 34.71 34.74 T:isapa128v20 34.96 35.14 35.36 romulusn 40.50 40.52 40.54 T:giftcofb128v1 56.51 56.53 56.55 T:tinyjambu128v2 56.49 56.80 57.25 romulusm 66.11 66.15 66.16 T:tinyjambu192v2 66.41 66.56 69.38 T:isapk128av20 71.15 71.19 71.20 T:tinyjambu256v2 88.68 88.73 88.79 T:isapk128v20 115.57 115.59 115.61 romulust 147.81 147.91 148.18 T:elephant200v2 159.93 161.66 162.17 T:isapxv20 6938.09 6938.79 6939.17 T:elephant176v2 7819.82 7847.39 7957.94 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.67 1.69 1.70 T:aes128gcmv1 1.74 1.74 1.76 aes256gcmv1 6.05 6.06 6.07 ascon128av12 8.91 8.91 8.92 ascon80pqv12 9.10 9.10 9.10 ascon128v12 11.43 11.45 11.45 ascon128abi32v12 16.23 16.25 16.28 ascon128bi32v12 16.43 16.74 16.87 T:xoodyakround3 17.41 17.47 17.47 T:isapa128v20 19.48 19.50 19.55 T:schwaemm256128v2 22.49 22.90 22.91 T:isapa128av20 24.02 24.12 24.16 T:schwaemm256256v2 25.93 26.07 26.08 T:schwaemm192192v2 27.84 27.88 28.20 T:schwaemm128128v2 28.16 28.35 28.48 T:grain128aeadv2 34.99 35.31 35.43 romulusn 38.83 38.86 38.88 romulust 40.49 40.54 40.56 T:giftcofb128v1 44.19 44.75 47.20 T:isapk128av20 55.46 55.71 55.80 T:isapk128v20 56.50 56.50 56.52 T:tinyjambu128v2 56.50 56.81 57.21 romulusm 66.11 66.13 66.17 T:tinyjambu192v2 71.18 71.22 71.24 T:tinyjambu256v2 94.40 94.79 95.45 T:isapxv20 147.91 148.04 148.28 T:elephant200v2 6938.11 6938.68 6939.02 T:elephant176v2 7819.74 7829.55 7958.09 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.03 1.03 1.06 T:aes128gcmv1 1.14 1.15 1.16 aes256gcmv1 6.27 6.29 6.30 ascon128av12 8.89 8.90 8.94 ascon80pqv12 8.90 8.99 9.00 ascon128v12 11.09 11.14 12.05 ascon128abi32v12 11.59 11.69 11.82 T:xoodyakround3 16.26? 16.42? 18.94? ascon128bi32v12 19.40 19.41 19.43 T:schwaemm256128v2 23.90 24.00 24.03 T:schwaemm256256v2 25.53 25.59 25.60 T:schwaemm192192v2 26.10 26.16 26.20 T:isapa128v20 27.71 27.74 27.77 T:schwaemm128128v2 28.05 28.11 28.12 T:grain128aeadv2 28.35 28.38 28.42 romulusn 28.60 28.67 28.69 T:isapa128av20 39.30 39.32 39.35 romulusm 40.48 40.52 40.54 T:giftcofb128v1 44.65 44.73 44.75 T:tinyjambu128v2 51.72 51.81 51.83 T:tinyjambu192v2 53.33 53.33 53.35 T:tinyjambu256v2 55.45 56.38 57.00 T:isapk128av20 72.00 72.10 72.14 T:isapk128v20 77.21 77.23 77.24 romulust 111.54 111.61 111.99 T:elephant200v2 128.59 129.25 129.79 T:isapxv20 5180.91 5181.26 5181.76 T:elephant176v2 5860.78 5869.10 5966.24 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.11 1.12 1.12 T:aes128gcmv1 1.14 1.15 1.15 aes256gcmv1 5.97 5.99 6.00 ascon128av12 8.88 8.88 8.88 ascon80pqv12 8.99 9.01 9.02 ascon128v12 11.23 11.25 11.26 ascon128abi32v12 12.24 12.42 12.53 T:xoodyakround3 16.32 16.34 16.38 ascon128bi32v12 19.43 19.46 19.47 T:schwaemm256128v2 23.91 23.98 24.01 T:schwaemm256256v2 25.70 25.74 25.76 T:schwaemm192192v2 26.16 26.16 26.17 T:isapa128v20 27.73 27.74 27.77 T:schwaemm128128v2 28.14 28.19 28.29 T:grain128aeadv2 28.40 28.42 28.59 romulusn 28.65 28.68 28.70 T:isapa128av20 39.19 39.45 39.55 romulusm 40.46 40.48 40.50 T:giftcofb128v1 44.73 44.73 44.74 T:tinyjambu128v2 51.41 51.44 51.49 T:tinyjambu192v2 53.40 53.42 53.43 T:tinyjambu256v2 55.48 56.13 57.04 T:isapk128av20 72.05 72.09 72.13 T:isapk128v20 77.22 77.24 77.24 romulust 111.56 111.68 111.84 T:elephant200v2 128.27 129.56 129.82 T:isapxv20 5181.41 5181.63 5181.98 T:elephant176v2 5862.44 5887.81 5969.97 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.10 1.11 1.12 T:aes128gcmv1 1.14 1.15 1.15 aes256gcmv1 5.98 5.99 6.00 ascon128av12 8.88 8.88 8.88 ascon80pqv12 9.00 9.00 9.00 ascon128v12 11.23 11.24 11.26 ascon128abi32v12 12.25 12.39 12.51 T:xoodyakround3 16.22 16.35 16.38 ascon128bi32v12 17.56 17.70 17.70 T:isapa128v20 19.44 19.47 19.48 T:schwaemm256128v2 22.97 22.98 22.99 T:isapa128av20 23.93 23.96 24.01 T:schwaemm256256v2 25.69 25.70 25.72 T:schwaemm192192v2 27.73 27.75 27.77 T:schwaemm128128v2 28.20 28.24 28.29 T:grain128aeadv2 28.39 28.46 28.59 romulusn 38.85 38.87 38.88 romulust 39.53 39.58 39.73 romulusm 40.47 40.50 40.52 T:giftcofb128v1 44.75 44.75 44.75 T:tinyjambu128v2 44.35 44.97 45.88 T:isapk128av20 51.44 51.45 51.51 T:tinyjambu192v2 53.41 53.41 53.44 T:tinyjambu256v2 55.38 55.41 55.43 T:isapk128v20 95.21 95.56 96.03 T:isapxv20 111.50 111.57 111.61 T:elephant200v2 5181.16 5181.59 5182.15 T:elephant176v2 5862.98 5882.75 5966.63 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.51 0.53 0.55 T:aes128gcmv1 0.53 0.54 0.55 aes256gcmv1 5.99 6.00 6.00 ascon128av12 8.05 8.09 8.36 T:xoodyakround3 8.76 8.79 8.80 ascon80pqv12 8.95 8.96 8.96 ascon128v12 10.87? 10.93? 12.27? ascon128abi32v12 16.04? 16.29? 21.29? ascon128bi32v12 17.60 17.60 17.61 T:isapa128v20 19.35 19.39 19.41 T:schwaemm256128v2 21.79 21.80 21.81 romulusn 21.80 21.81 21.81 romulusm 23.05 23.06 23.07 T:isapa128av20 23.77 23.81 23.83 T:schwaemm256256v2 25.32 25.34 25.36 T:schwaemm192192v2 27.70 27.72 27.74 T:schwaemm128128v2 27.93 27.99 28.13 T:grain128aeadv2 32.93 32.95 33.07 T:tinyjambu128v2 35.63 35.63 35.63 T:tinyjambu256v2 37.02 37.03 37.04 T:tinyjambu192v2 38.86 38.87 38.88 romulust 40.43 40.45 40.46 T:giftcofb128v1 44.49 44.55 44.69 T:isapk128av20 55.46 55.52 55.60 T:isapk128v20 75.76 75.80 75.89 T:elephant200v2 95.87 96.15 96.35 T:isapxv20 3424.93 3425.52 3426.07 T:elephant176v2 3902.93 3909.79 3976.49 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.51 0.54 0.56 T:aes128gcmv1 0.55 0.56 0.57 aes256gcmv1 5.90 5.91 5.92 ascon128av12 8.03 8.09 8.19 T:xoodyakround3 8.86 8.88 8.89 ascon80pqv12 8.91 8.91 8.92 ascon128v12 11.00 11.03 11.04 ascon128abi32v12 16.38 16.45 16.52 ascon128bi32v12 17.60 17.60 17.60 T:isapa128v20 19.40 19.42 19.42 T:schwaemm256128v2 21.79 21.80 21.81 romulusn 21.80 21.80 21.81 romulusm 22.96 23.03 23.08 T:isapa128av20 23.77 23.88 23.91 T:schwaemm256256v2 25.34 25.35 25.57 T:schwaemm192192v2 27.67 27.68 27.74 T:schwaemm128128v2 27.94 28.08 28.18 T:grain128aeadv2 32.94 32.94 32.97 T:tinyjambu128v2 35.68 35.68 35.68 T:tinyjambu256v2 36.81 36.84 36.88 T:tinyjambu192v2 38.87 38.87 38.89 romulust 40.41 40.48 40.51 T:giftcofb128v1 44.50 44.60 45.50 T:isapk128av20 55.42 55.47 55.53 T:isapk128v20 75.78 75.92 76.09 T:elephant200v2 95.54 96.11 96.39 T:isapxv20 3424.87 3425.39 3426.21 T:elephant176v2 3904.03 3908.75 3975.62 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.53 0.54 0.54 T:aes128gcmv1 0.55 0.56 0.57 aes256gcmv1 5.91 5.91 5.91 ascon128av12 7.97 8.06 8.50 T:xoodyakround3 8.87 8.87 8.88 ascon80pqv12 8.86 8.88 8.89 ascon128v12 11.01 11.03 11.05 ascon128abi32v12 16.38 16.45 16.51 ascon128bi32v12 17.60 17.60 17.60 T:isapa128v20 19.27 19.40 19.41 T:schwaemm256128v2 21.79 21.80 21.81 romulusm 21.80 21.80 21.81 romulusn 22.90 23.06 23.07 T:isapa128av20 23.79 23.83 23.87 T:schwaemm256256v2 25.35 25.36 25.37 T:schwaemm192192v2 27.67 27.68 27.71 T:schwaemm128128v2 28.09 28.11 28.14 T:grain128aeadv2 32.97 32.97 33.03 T:tinyjambu128v2 35.66 35.66 35.70 T:tinyjambu256v2 36.83 36.86 36.89 T:tinyjambu192v2 38.86 38.86 38.88 romulust 40.41 40.45 40.49 T:giftcofb128v1 44.48 44.57 45.47 T:isapk128av20 55.41 55.49 55.53 T:isapk128v20 75.78 75.89 76.10 T:elephant200v2 95.74 96.16 96.36 T:isapxv20 3425.82 3426.17 3426.45 T:elephant176v2 3903.14 3909.94 3976.10 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.15 1.16 1.17 T:aes128gcmv1 1.28 1.29 1.30 aes256gcmv1 6.45 6.46 6.47 ascon128av12 9.07 9.07 9.10 ascon80pqv12 9.08 9.14 9.14 ascon128v12 11.49 11.49 12.33 ascon128abi32v12 11.77 11.86 11.92 T:xoodyakround3 16.75? 16.79? 19.13? ascon128bi32v12 19.97 19.98 19.99 T:schwaemm256128v2 24.57 24.61 24.66 T:schwaemm256256v2 26.08 26.15 26.16 T:schwaemm192192v2 28.13 28.15 28.19 T:schwaemm128128v2 28.42 28.44 28.48 T:grain128aeadv2 28.64 28.66 29.03 romulusn 30.92 31.09 31.11 T:isapa128av20 38.38 38.38 38.39 T:isapa128v20 39.55 39.60 39.63 romulusm 40.87 40.89 40.90 T:giftcofb128v1 45.03 45.06 45.11 T:tinyjambu128v2 52.14 52.20 52.25 T:tinyjambu192v2 53.76 53.77 53.80 T:tinyjambu256v2 62.64 63.21 63.54 T:isapk128av20 78.40 78.41 78.44 romulust 113.95 114.00 114.05 T:elephant200v2 125.59 125.59 125.66 T:isapk128v20 207.88 208.58 208.78 T:isapxv20 5220.70 5221.24 5221.49 T:elephant176v2 5935.47 5935.72 6026.70 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.23 1.24 1.25 T:aes128gcmv1 1.28 1.28 1.29 aes256gcmv1 6.15 6.16 6.16 ascon128av12 9.05 9.05 9.05 ascon80pqv12 9.15 9.15 9.15 ascon128v12 11.54 11.54 11.55 ascon128abi32v12 12.45 12.49 12.62 T:xoodyakround3 16.68 16.69 16.72 ascon128bi32v12 20.01 20.03 20.08 T:schwaemm256128v2 24.54 24.63 24.65 T:schwaemm256256v2 26.11 26.27 26.28 T:schwaemm192192v2 28.18 28.20 28.34 T:schwaemm128128v2 28.49 28.54 28.57 T:grain128aeadv2 28.63 28.83 28.98 romulusn 31.08 31.12 31.13 T:isapa128av20 38.25 38.26 38.26 T:isapa128v20 39.66 39.84 40.01 romulusm 40.84 40.87 40.89 T:giftcofb128v1 45.10 45.11 45.13 T:tinyjambu128v2 51.88 51.89 51.91 T:tinyjambu192v2 53.86 53.86 53.90 T:tinyjambu256v2 62.61 63.12 63.52 T:isapk128av20 78.39 78.40 78.40 romulust 114.01 114.05 114.16 T:elephant200v2 125.60 125.64 126.10 T:isapk128v20 207.82 208.12 208.85 T:isapxv20 5220.61 5220.78 5220.95 T:elephant176v2 5935.11 5935.64 6026.56 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.23 1.23 1.23 T:aes128gcmv1 1.28 1.28 1.28 aes256gcmv1 6.15 6.15 6.15 ascon128av12 9.05 9.05 9.05 ascon80pqv12 9.15 9.15 9.15 ascon128v12 11.54 11.54 11.55 ascon128abi32v12 12.43 12.53 12.67 T:xoodyakround3 16.68 16.68 16.72 ascon128bi32v12 20.02 20.03 20.10 T:schwaemm256128v2 23.72 23.73 23.73 T:isapa128v20 24.31 24.36 24.36 T:isapa128av20 24.59 24.65 24.67 T:schwaemm256256v2 26.11 26.29 26.29 T:schwaemm192192v2 28.13 28.16 28.19 T:schwaemm128128v2 28.49 28.56 28.61 T:grain128aeadv2 28.67 28.82 28.97 romulusn 39.67 39.82 40.04 romulusm 39.99 39.99 40.01 romulust 40.84 40.85 40.88 T:giftcofb128v1 45.11 45.12 45.14 T:tinyjambu128v2 48.52 49.02 49.72 T:isapk128av20 51.88 51.89 51.94 T:tinyjambu192v2 53.85 53.88 53.89 T:tinyjambu256v2 82.79 82.82 83.03 T:isapk128v20 114.04 114.07 114.26 T:elephant200v2 135.93 136.03 136.21 T:isapxv20 5220.73 5220.88 5221.10 T:elephant176v2 5935.53 5949.66 6027.58 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.94 5.96 6.14 T:aes128gcmv1 5.95 6.13 6.35 aes256gcmv1 9.84 10.17 10.66 ascon128av12 12.35 12.47 12.95 ascon128v12 12.76 12.82 13.20 ascon80pqv12 17.89 17.99 18.12 T:xoodyakround3 18.98 19.50 19.66 ascon128abi32v12 24.46 25.39 26.12 ascon128bi32v12 32.62 32.75 32.95 T:schwaemm256128v2 34.88 34.99 35.13 romulusn 36.45 36.62 37.06 T:grain128aeadv2 37.09 37.30 37.41 T:schwaemm128128v2 39.19 39.32 39.45 T:schwaemm256256v2 42.84 42.88 43.39 T:schwaemm192192v2 46.38 46.55 46.80 romulusm 49.37 49.45 49.66 T:giftcofb128v1 53.29 53.33 53.50 T:tinyjambu128v2 61.43 61.62 62.07 T:tinyjambu192v2 63.11 63.11 63.55 T:tinyjambu256v2 86.61 86.83 87.15 T:isapa128av20 105.27 105.45 105.72 romulust 163.45 163.56 164.07 T:elephant200v2 213.06 213.32 213.90 T:isapk128av20 318.62 320.98 321.16 T:isapa128v20 1340.66 1341.01 1341.64 T:isapk128v20 2004.98 2024.72 2032.70 T:isapxv20 6499.66 6501.98 6504.75 T:elephant176v2 7949.36 7953.42 8081.34 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.83 5.85 5.91 T:aes128gcmv1 5.98 6.04 6.23 aes256gcmv1 9.83 10.16 10.59 ascon128av12 12.40 12.71 13.01 ascon80pqv12 12.56 12.83 13.34 ascon128v12 18.04 18.18 18.46 T:xoodyakround3 18.58 18.75 19.03 ascon128abi32v12 24.14 24.87 25.26 ascon128bi32v12 32.67 32.84 32.88 T:schwaemm256128v2 34.88 34.98 35.16 romulusn 36.47 36.71 36.93 T:grain128aeadv2 37.16 37.46 37.62 T:schwaemm128128v2 39.20 39.27 39.41 T:schwaemm256256v2 42.85 43.02 43.57 T:schwaemm192192v2 48.27 48.46 48.61 romulusm 49.48 49.72 49.99 T:giftcofb128v1 53.53 53.53 53.68 T:tinyjambu128v2 61.60 61.80 61.88 T:tinyjambu192v2 63.66 63.73 63.89 T:tinyjambu256v2 86.61 86.76 87.01 T:isapa128av20 105.23 105.25 105.55 romulust 162.97 163.19 163.30 T:elephant200v2 212.82 212.95 213.70 T:isapk128av20 314.31 317.91 319.10 T:isapa128v20 1339.99 1340.04 1341.04 T:isapk128v20 2010.77 2015.78 2017.02 T:isapxv20 6500.48 6501.28 6504.31 T:elephant176v2 7965.62 7975.35 8061.58 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.80 5.84 5.84 T:aes128gcmv1 5.95 5.99 6.05 aes256gcmv1 9.70 9.79 9.95 ascon128av12 12.40 12.40 12.66 ascon80pqv12 12.38 12.71 12.86 ascon128v12 17.95 18.00 18.25 T:xoodyakround3 18.15 18.18 18.54 ascon128abi32v12 23.84 24.03 24.87 ascon128bi32v12 32.58 32.63 32.81 T:schwaemm256128v2 34.79 34.81 34.89 romulusn 36.52 36.66 36.80 T:grain128aeadv2 37.16 37.20 37.39 T:schwaemm128128v2 39.19 39.24 39.40 T:schwaemm256256v2 42.92 43.02 43.27 T:schwaemm192192v2 47.91 48.18 48.24 romulusm 49.53 49.56 49.85 T:giftcofb128v1 53.45 53.45 53.45 T:tinyjambu128v2 55.73 55.81 55.99 T:isapa128av20 61.34 61.71 61.89 T:tinyjambu192v2 63.82 63.82 64.02 T:tinyjambu256v2 65.66 65.76 66.05 romulust 131.89 132.48 133.19 T:isapk128av20 162.98 163.15 163.70 T:elephant200v2 165.80 165.80 165.80 T:isapa128v20 700.70 700.83 700.97 T:isapk128v20 1049.29 1062.80 1069.89 T:isapxv20 6500.02 6501.56 6504.11 T:elephant176v2 7948.81 7953.85 8079.22 T:elephant160v2