VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 3 1200; 4 x 3100MHz; rumba3, supercop-20250415

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.52 1.54 1.54 T:aes128gcmv1 1.75 1.77 1.78 aes256gcmv1 6.58 6.60 6.61 ascon128av12 9.00 9.03 9.03 ascon128v12 9.02 9.03 9.07 ascon80pqv12 11.32? 11.40? 13.28? ascon128abi32v12 15.13 15.22 15.48 T:xoodyakround3 16.49 16.62 16.63 ascon128bi32v12 19.32 19.40 19.53 T:schwaemm256128v2 24.00 24.04 24.11 T:schwaemm256256v2 25.81 25.82 25.85 T:schwaemm192192v2 27.76 27.78 27.81 T:schwaemm128128v2 28.02 28.05 28.14 T:grain128aeadv2 34.28 34.31 34.33 T:isapa128av20 34.52 34.58 36.73 T:isapa128v20 35.00 35.31 35.33 romulusn 40.55 40.57 40.61 T:giftcofb128v1 56.39 56.39 56.41 T:tinyjambu128v2 56.67 56.81 57.03 romulusm 66.51 66.52 66.61 T:tinyjambu192v2 66.49 66.58 66.81 T:isapk128av20 71.04 71.09 71.11 T:tinyjambu256v2 88.88 89.08 90.99 T:isapk128v20 115.58 115.59 115.60 romulust 148.03 148.22 148.32 T:elephant200v2 160.85 163.07 164.72 T:isapxv20 6939.70 6946.34 6966.09 T:elephant176v2 7828.74 7829.52 7839.72 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.68 1.69 1.70 T:aes128gcmv1 1.73 1.75 1.76 aes256gcmv1 6.03 6.06 6.07 ascon128av12 8.89 8.90 8.91 ascon80pqv12 9.09 9.10 9.10 ascon128v12 11.42 11.45 11.46 ascon128abi32v12 16.24 16.24 16.25 ascon128bi32v12 16.29 16.49 16.68 T:xoodyakround3 19.47 19.58 19.63 T:schwaemm256128v2 24.09 24.12 24.14 T:schwaemm256256v2 25.85 25.87 25.89 T:schwaemm192192v2 27.89 28.17 28.22 T:schwaemm128128v2 28.18 28.29 28.43 T:grain128aeadv2 34.29 34.33 34.36 T:isapa128av20 34.37 34.68 36.76 T:isapa128v20 34.96 35.08 35.28 romulusn 40.50 40.51 40.53 T:giftcofb128v1 56.51 56.53 56.55 T:tinyjambu128v2 57.21 57.62 57.66 romulusm 66.11 66.13 66.16 T:tinyjambu192v2 66.50 66.65 66.79 T:isapk128av20 71.17 71.21 71.25 T:tinyjambu256v2 88.80 89.17 91.03 T:isapk128v20 115.56 115.59 115.62 romulust 148.02 148.27 148.37 T:elephant200v2 154.73 163.36 170.45 T:isapxv20 6939.13 6945.88 6964.47 T:elephant176v2 7828.34 7829.08 7829.58 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.67 1.68 1.69 T:aes128gcmv1 1.73 1.75 1.76 aes256gcmv1 6.04 6.06 6.08 ascon128av12 8.89 8.90 8.92 ascon80pqv12 9.09 9.12 9.12 ascon128v12 11.45 11.45 11.46 ascon128abi32v12 16.24 16.25 16.25 ascon128bi32v12 16.38 16.72 16.85 T:xoodyakround3 16.99? 17.37? 19.51? T:isapa128v20 19.48 19.58 19.63 T:schwaemm256128v2 22.88 22.91 22.92 T:isapa128av20 24.06 24.10 24.14 T:schwaemm256256v2 25.85 25.87 25.89 T:schwaemm192192v2 27.80 27.84 28.15 T:schwaemm128128v2 28.14 28.19 28.30 T:grain128aeadv2 34.95 34.96 35.33 romulusn 38.83 38.86 38.90 romulust 40.46 40.48 40.53 T:giftcofb128v1 44.36 44.38 44.40 T:isapk128av20 55.18 55.46 57.20 T:isapk128v20 56.50 56.50 56.54 T:tinyjambu128v2 56.56 56.80 57.28 romulusm 66.11 66.15 66.19 T:tinyjambu192v2 71.18 71.24 71.24 T:tinyjambu256v2 93.89 95.06 95.42 T:isapxv20 147.90 147.96 148.14 T:elephant200v2 6937.27 6944.54 6951.07 T:elephant176v2 7827.38 7829.61 7850.21 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.03 1.03 1.04 T:aes128gcmv1 1.15 1.16 1.16 aes256gcmv1 6.28 6.29 6.30 ascon128av12 8.83 8.88 8.91 ascon80pqv12 8.99 9.00 9.00 ascon128v12 11.13 11.16 12.12 ascon128abi32v12 11.59 11.67 11.81 T:xoodyakround3 16.44 16.45 16.47 ascon128bi32v12 19.40 19.42 19.43 T:schwaemm256128v2 23.91 23.99 24.04 T:schwaemm256256v2 25.57 25.59 25.63 T:schwaemm192192v2 26.02 26.10 27.17 T:isapa128v20 27.74 27.77 27.78 T:schwaemm128128v2 28.02 28.05 28.09 T:grain128aeadv2 28.31 28.58 28.73 romulusn 28.66 28.68 28.70 T:isapa128av20 39.32 39.42 39.43 romulusm 40.49 40.51 40.52 T:giftcofb128v1 44.66 44.67 44.74 T:tinyjambu128v2 51.72 51.74 51.79 T:tinyjambu192v2 53.32 53.33 53.37 T:tinyjambu256v2 55.47 55.65 56.59 T:isapk128av20 72.03 72.17 74.46 T:isapk128v20 77.21 77.23 77.33 romulust 111.48 111.52 111.59 T:elephant200v2 129.41 130.21 130.49 T:isapxv20 5181.89 5187.68 5189.36 T:elephant176v2 5867.45 5869.07 5869.43 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.10 1.10 1.11 T:aes128gcmv1 1.14 1.15 1.15 aes256gcmv1 5.99 6.00 6.01 ascon128av12 8.88 8.89 8.91 ascon80pqv12 8.93 9.00 9.00 ascon128v12 11.23 11.24 11.25 ascon128abi32v12 12.20 12.37 12.50 T:xoodyakround3 16.24 16.35 17.31 ascon128bi32v12 19.49 19.50 19.51 T:schwaemm256128v2 23.93 23.98 24.01 T:schwaemm256256v2 25.70 25.83 26.07 T:schwaemm192192v2 26.11 26.16 27.16 T:isapa128v20 27.74 27.76 27.78 T:schwaemm128128v2 28.12 28.20 28.28 T:grain128aeadv2 28.36 28.47 28.57 romulusn 28.65 28.70 28.71 T:isapa128av20 39.25 39.45 39.73 romulusm 40.45 40.47 40.51 T:giftcofb128v1 44.73 44.73 44.74 T:tinyjambu128v2 51.45 51.49 51.52 T:tinyjambu192v2 53.42 53.43 53.43 T:tinyjambu256v2 55.48 55.59 56.58 T:isapk128av20 71.98 72.25 75.10 T:isapk128v20 77.21 77.23 77.24 romulust 111.50 111.53 111.56 T:elephant200v2 125.13 130.66 134.18 T:isapxv20 5182.58 5187.34 5187.92 T:elephant176v2 5868.59 5869.09 5869.51 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.10 1.11 1.11 T:aes128gcmv1 1.14 1.14 1.15 aes256gcmv1 5.99 6.00 6.00 ascon128av12 8.89 8.89 8.91 ascon80pqv12 8.99 9.01 9.01 ascon128v12 11.24 11.25 11.25 ascon128abi32v12 12.20 12.30 12.42 T:xoodyakround3 16.32 16.35 17.31 ascon128bi32v12 17.30 17.54 18.55 T:isapa128v20 19.50 19.50 19.51 T:schwaemm256128v2 22.96 22.98 22.99 T:isapa128av20 23.93 23.98 24.01 T:schwaemm256256v2 25.74 25.98 26.08 T:schwaemm192192v2 27.74 27.76 28.14 T:schwaemm128128v2 28.10 28.16 28.21 T:grain128aeadv2 28.36 28.40 28.74 romulusn 38.85 38.87 38.88 romulust 39.52 39.56 39.74 romulusm 40.46 40.48 40.52 T:giftcofb128v1 44.40 44.45 45.42 T:isapk128av20 44.74 44.74 44.74 T:tinyjambu128v2 51.43 51.49 51.51 T:tinyjambu192v2 53.41 53.43 53.44 T:tinyjambu256v2 55.13 55.27 57.68 T:isapk128v20 94.68 95.54 95.79 T:isapxv20 111.45 111.55 111.68 T:elephant200v2 5181.34 5187.37 5188.08 T:elephant176v2 5868.93 5869.26 5873.16 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.52 0.53 0.56 T:aes128gcmv1 0.53 0.54 0.56 aes256gcmv1 6.00 6.00 6.01 ascon128av12 8.06 8.10 8.34 T:xoodyakround3 8.79 8.80 8.82 ascon80pqv12 8.95 8.95 8.96 ascon128v12 10.93 10.94 10.95 ascon128abi32v12 16.28 16.28 16.29 ascon128bi32v12 17.60 17.60 17.60 T:isapa128v20 19.39 19.41 19.42 T:schwaemm256128v2 21.74 21.75 21.77 romulusn 21.80 21.80 21.81 romulusm 23.05 23.06 23.08 T:isapa128av20 23.81 23.82 23.90 T:schwaemm256256v2 25.31 26.03 26.04 T:schwaemm192192v2 27.67 27.68 27.72 T:schwaemm128128v2 27.88 27.96 28.05 T:grain128aeadv2 32.94 32.95 33.09 T:tinyjambu128v2 35.63 35.63 35.64 T:tinyjambu256v2 37.02 37.04 37.05 T:tinyjambu192v2 38.86 38.87 38.88 romulust 40.45 40.45 40.48 T:giftcofb128v1 44.50 44.62 44.66 T:isapk128av20 55.08 55.30 58.08 T:isapk128v20 75.83 75.95 76.06 T:elephant200v2 94.92 95.34 96.33 T:isapxv20 3426.36 3428.64 3429.46 T:elephant176v2 3909.60 3910.19 3924.65 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.51 0.53 0.56 T:aes128gcmv1 0.54 0.56 0.58 aes256gcmv1 5.90 5.91 5.92 ascon128av12 8.04 8.09 8.15 T:xoodyakround3 8.86 8.86 8.89 ascon80pqv12 8.90 8.90 8.91 ascon128v12 11.00 11.01 11.04 ascon128abi32v12 16.25 16.44 16.45 ascon128bi32v12 17.60 17.60 17.60 T:isapa128v20 19.40 19.41 19.41 T:schwaemm256128v2 21.75 21.75 21.77 romulusn 21.79 21.80 21.81 romulusm 22.93 22.98 23.07 T:isapa128av20 23.81 23.85 23.91 T:schwaemm256256v2 25.53 26.02 26.06 T:schwaemm192192v2 27.66 27.68 28.06 T:schwaemm128128v2 27.97 28.08 28.12 T:grain128aeadv2 32.94 32.94 32.97 T:tinyjambu128v2 35.68 35.68 35.72 T:tinyjambu256v2 36.73 36.86 36.90 T:tinyjambu192v2 38.83 38.87 38.88 romulust 40.46 40.48 40.49 T:giftcofb128v1 44.55 44.60 44.71 T:isapk128av20 55.11 55.23 58.11 T:isapk128v20 75.91 76.06 76.22 T:elephant200v2 95.00 95.34 96.01 T:isapxv20 3427.76 3428.91 3429.49 T:elephant176v2 3908.33 3909.86 3910.46 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.52 0.55 0.56 T:aes128gcmv1 0.54 0.56 0.56 aes256gcmv1 5.90 5.91 5.92 ascon128av12 8.04 8.13 8.15 T:xoodyakround3 8.85 8.87 8.89 ascon80pqv12 8.87 8.88 8.88 ascon128v12 11.01 11.03 11.04 ascon128abi32v12 16.25 16.44 16.45 ascon128bi32v12 17.60 17.78 18.05 T:isapa128v20 19.41 19.41 19.42 T:schwaemm256128v2 21.77 21.78 21.78 romulusn 21.80 21.81 21.82 romulusm 22.92 22.99 23.08 T:isapa128av20 23.80 23.84 23.90 T:schwaemm256256v2 25.32 26.03 26.07 T:schwaemm192192v2 27.66 27.69 28.04 T:schwaemm128128v2 28.02 28.08 28.10 T:grain128aeadv2 32.96 32.97 32.97 T:tinyjambu128v2 35.65 35.66 35.66 T:tinyjambu256v2 36.83 36.86 36.90 T:tinyjambu192v2 38.82 38.86 38.87 romulust 40.39 40.40 40.43 T:giftcofb128v1 44.51 44.60 44.66 T:isapk128av20 55.05 55.24 58.10 T:isapk128v20 75.59 75.85 76.08 T:elephant200v2 95.36 96.02 96.64 T:isapxv20 3428.38 3429.10 3440.10 T:elephant176v2 3909.90 3910.35 3919.18 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.15 1.15 1.16 T:aes128gcmv1 1.28 1.29 1.29 aes256gcmv1 6.45 6.45 6.47 ascon128av12 9.02 9.05 9.07 ascon80pqv12 9.12 9.12 9.17 ascon128v12 11.48 11.48 11.51 ascon128abi32v12 11.74 11.77 11.91 T:xoodyakround3 16.79 16.79 16.86 ascon128bi32v12 19.98 19.98 20.00 T:schwaemm256128v2 24.56 24.60 24.65 T:schwaemm256256v2 26.16 26.17 26.48 T:schwaemm192192v2 28.12 28.14 28.16 T:schwaemm128128v2 28.40 28.42 28.45 T:grain128aeadv2 28.92 28.93 29.13 romulusn 30.92 31.10 31.11 T:isapa128av20 38.38 38.47 39.32 T:isapa128v20 39.44 39.56 39.62 romulusm 40.87 40.89 40.90 T:giftcofb128v1 45.03 45.07 45.11 T:tinyjambu128v2 52.14 52.14 52.21 T:tinyjambu192v2 53.76 53.77 53.78 T:tinyjambu256v2 62.63 62.66 63.57 T:isapk128av20 78.40 78.41 78.43 romulust 113.86 113.92 113.99 T:elephant200v2 125.69 125.77 127.06 T:isapk128v20 209.27 209.44 209.59 T:isapxv20 5220.36 5226.49 5228.96 T:elephant176v2 5935.28 5935.38 5935.72 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.22 1.23 1.25 T:aes128gcmv1 1.27 1.28 1.28 aes256gcmv1 6.16 6.16 6.16 ascon128av12 9.05 9.06 9.08 ascon80pqv12 9.08 9.11 9.14 ascon128v12 11.54 11.55 11.55 ascon128abi32v12 12.39 12.55 12.62 T:xoodyakround3 16.68 16.70 17.58 ascon128bi32v12 20.05 20.06 20.07 T:schwaemm256128v2 24.57 24.64 24.66 T:schwaemm256256v2 26.20 26.29 26.50 T:schwaemm192192v2 28.15 28.16 28.17 T:schwaemm128128v2 28.46 28.50 28.54 T:grain128aeadv2 28.73 28.85 29.09 romulusn 31.10 31.12 31.12 T:isapa128av20 38.26 38.33 39.20 T:isapa128v20 39.54 39.67 39.87 romulusm 40.86 40.87 40.89 T:giftcofb128v1 45.11 45.11 45.11 T:tinyjambu128v2 51.88 51.91 51.95 T:tinyjambu192v2 53.86 53.86 53.88 T:tinyjambu256v2 62.62 62.67 63.47 T:isapk128av20 78.39 78.40 78.42 romulust 113.87 113.88 113.93 T:elephant200v2 125.65 125.69 127.50 T:isapk128v20 208.93 210.08 214.74 T:isapxv20 5222.23 5226.87 5228.83 T:elephant176v2 5935.20 5935.50 5955.01 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.23 1.23 1.23 T:aes128gcmv1 1.28 1.28 1.28 aes256gcmv1 6.16 6.16 6.16 ascon128av12 9.05 9.05 9.07 ascon80pqv12 9.10 9.10 9.15 ascon128v12 11.54 11.55 11.55 ascon128abi32v12 12.37 12.43 12.56 T:xoodyakround3 16.60 16.68 17.58 ascon128bi32v12 20.05 20.05 20.06 T:schwaemm256128v2 23.73 23.73 24.67 T:isapa128v20 24.29 24.31 24.35 T:isapa128av20 24.58 24.65 24.69 T:schwaemm256256v2 26.20 26.29 26.51 T:schwaemm192192v2 28.13 28.17 28.54 T:schwaemm128128v2 28.50 28.56 28.58 T:grain128aeadv2 28.74 28.77 28.84 romulusn 39.67 39.87 40.06 romulusm 39.99 39.99 40.00 romulust 40.84 40.85 40.89 T:giftcofb128v1 45.11 45.12 45.14 T:tinyjambu128v2 48.50 48.52 49.42 T:isapk128av20 51.87 51.91 51.92 T:tinyjambu192v2 53.84 53.85 53.87 T:tinyjambu256v2 82.56 82.59 84.40 T:isapk128v20 113.91 113.92 113.95 T:elephant200v2 135.74 135.88 135.90 T:isapxv20 5221.89 5226.71 5241.43 T:elephant176v2 5935.38 5935.64 5946.04 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.90 5.92 5.94 T:aes128gcmv1 5.92 6.02 6.34 aes256gcmv1 9.84 10.14 10.62 ascon128av12 12.39 12.62 12.79 ascon128v12 12.81 13.05 13.20 ascon80pqv12 17.56 17.77 18.06 T:xoodyakround3 18.54 19.00 19.26 ascon128abi32v12 24.06 24.31 24.55 ascon128bi32v12 32.52 32.55 32.74 T:schwaemm256128v2 36.48 36.74 37.02 T:grain128aeadv2 36.83 36.96 37.12 romulusn 36.94 37.08 37.28 T:schwaemm128128v2 39.27 39.32 39.56 T:schwaemm256256v2 42.77 43.04 43.20 T:schwaemm192192v2 46.41 46.52 46.78 romulusm 49.22 49.41 49.66 T:giftcofb128v1 53.32 53.35 53.70 T:tinyjambu128v2 61.42 61.45 62.40 T:tinyjambu192v2 63.11 63.34 63.68 T:tinyjambu256v2 86.69 86.82 87.20 T:isapa128av20 105.37 105.55 105.62 romulust 162.88 163.09 163.45 T:elephant200v2 211.96 213.02 214.20 T:isapk128av20 321.01 323.56 324.26 T:isapa128v20 1342.45 1343.26 1344.44 T:isapk128v20 2008.30 2016.74 2039.19 T:isapxv20 6501.95 6508.88 6510.13 T:elephant176v2 7946.77 7948.70 7950.74 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.84 5.86 5.98 T:aes128gcmv1 5.98 6.05 6.11 aes256gcmv1 9.88 10.29 10.50 ascon128av12 12.50 12.65 12.95 ascon128v12 12.75 12.89 13.07 ascon80pqv12 17.83 17.91 18.24 T:xoodyakround3 18.36 18.84 19.27 ascon128abi32v12 23.98 24.20 24.56 ascon128bi32v12 32.48 32.55 32.55 T:schwaemm256128v2 36.54 36.67 36.87 T:grain128aeadv2 37.05 37.06 37.26 T:schwaemm128128v2 37.14 37.28 37.38 romulusn 39.15 39.23 39.33 T:schwaemm256256v2 42.86 42.90 43.04 T:schwaemm192192v2 47.93 48.18 48.70 romulusm 49.62 49.73 49.88 T:giftcofb128v1 53.53 53.53 53.66 T:tinyjambu128v2 61.54 61.62 61.79 T:tinyjambu192v2 63.66 63.69 63.95 T:tinyjambu256v2 86.53 86.67 86.85 T:isapa128av20 105.27 105.31 105.77 romulust 162.98 163.15 163.15 T:elephant200v2 211.72 212.40 212.73 T:isapk128av20 310.27 317.32 322.49 T:isapa128v20 1342.29 1342.57 1344.11 T:isapk128v20 2017.59 2021.16 2142.80 T:isapxv20 6504.96 6508.27 6524.87 T:elephant176v2 7947.41 7950.07 7952.13 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.83 5.84 5.88 T:aes128gcmv1 5.96 5.99 6.04 aes256gcmv1 9.80 9.82 10.16 ascon128av12 12.54 12.56 12.69 ascon128v12 12.49 12.66 12.92 ascon80pqv12 17.88 18.15 18.34 T:xoodyakround3 18.24 18.25 18.57 ascon128abi32v12 23.94 23.96 23.98 ascon128bi32v12 32.44 32.50 32.59 T:schwaemm256128v2 36.52 36.79 36.95 T:grain128aeadv2 36.91 36.92 37.16 T:schwaemm128128v2 37.00 37.13 37.28 romulusn 39.14 39.20 39.30 T:schwaemm256256v2 42.83 42.92 42.98 T:schwaemm192192v2 47.83 47.92 48.18 romulusm 49.53 49.55 49.63 T:giftcofb128v1 53.45 53.45 53.45 T:tinyjambu128v2 55.62 55.71 55.78 T:isapa128av20 61.34 61.41 61.63 T:tinyjambu192v2 63.79 63.79 63.91 T:tinyjambu256v2 65.66 65.77 66.43 romulust 131.20 132.82 133.24 T:isapk128av20 162.65 163.13 163.27 T:elephant200v2 165.80 166.27 172.36 T:isapa128v20 698.32 698.55 700.50 T:isapk128v20 1048.80 1050.57 1052.25 T:isapxv20 6503.77 6507.77 6509.12 T:elephant176v2 7946.40 7951.14 7970.25 T:elephant160v2