VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.54 1.54 1.55 T:aes128gcmv1 1.74 1.77 1.78 aes256gcmv1 6.57 6.60 6.61 ascon128av12 9.01 9.02 9.03 ascon128v12 9.02 9.07 9.08 ascon80pqv12 11.40 11.42 11.43 ascon128abi32v12 15.25 15.52 15.63 T:xoodyakround3 16.61 16.63 16.63 ascon128bi32v12 19.39 19.41 19.42 T:schwaemm256128v2 24.09 24.11 24.14 T:schwaemm256256v2 25.81 25.83 25.85 T:schwaemm192192v2 26.93 27.23 27.38 T:grain128aeadv2 27.74 27.77 27.83 T:schwaemm128128v2 34.27 34.31 34.33 T:isapa128av20 34.29 34.71 34.72 T:isapa128v20 34.56 34.96 35.12 romulusn 40.53 40.56 40.60 T:giftcofb128v1 56.39 56.47 56.48 T:tinyjambu128v2 56.51 57.08 57.10 romulusm 66.43 66.49 66.55 T:tinyjambu192v2 66.58 66.72 68.28 T:isapk128av20 71.04 71.08 71.08 T:tinyjambu256v2 88.79 88.88 89.12 T:isapk128v20 115.58 115.60 115.78 romulust 147.86 147.93 148.15 T:elephant200v2 160.66 162.63 164.66 T:isapxv20 6937.90 6938.64 6943.36 T:elephant176v2 7827.99 7828.49 7829.09 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.70 1.72 1.74 T:aes128gcmv1 1.74 1.75 1.77 aes256gcmv1 6.05 6.06 6.07 ascon128av12 8.87 8.90 8.91 ascon80pqv12 9.09 9.10 9.11 ascon128v12 11.42 11.44 11.46 ascon128abi32v12 16.23 16.25 16.26 ascon128bi32v12 16.34 16.63 16.71 T:xoodyakround3 19.46 19.48 19.62 T:schwaemm256128v2 24.01 24.11 24.14 T:schwaemm256256v2 25.84 25.86 25.88 T:schwaemm192192v2 27.31 27.32 27.38 T:grain128aeadv2 27.79 27.82 27.87 T:schwaemm128128v2 34.30 34.32 34.35 T:isapa128av20 34.50 34.71 34.89 T:isapa128v20 34.98 35.32 35.43 romulusn 40.47 40.53 40.54 T:giftcofb128v1 56.51 56.52 56.54 T:tinyjambu128v2 56.63 56.66 57.05 romulusm 66.11 66.14 66.15 T:tinyjambu192v2 66.59 66.67 68.95 T:isapk128av20 71.14 71.18 71.22 T:tinyjambu256v2 88.79 88.89 88.92 T:isapk128v20 115.56 115.60 115.70 romulust 147.80 147.98 148.12 T:elephant200v2 161.58 162.81 163.99 T:isapxv20 6938.41 6939.10 6965.28 T:elephant176v2 7828.44 7829.43 7857.04 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.69 1.71 1.73 T:aes128gcmv1 1.74 1.75 1.76 aes256gcmv1 6.05 6.07 6.08 ascon128av12 8.88 8.90 8.92 ascon80pqv12 9.06 9.08 9.13 ascon128v12 11.43 11.45 11.46 ascon128abi32v12 16.25 16.25 16.25 ascon128bi32v12 16.45 16.64 16.77 T:xoodyakround3 17.24 17.74 17.74 T:isapa128v20 19.50 19.60 19.66 T:schwaemm256128v2 22.89 22.91 22.93 T:isapa128av20 24.05 24.09 24.13 T:schwaemm256256v2 25.85 25.87 25.89 T:schwaemm192192v2 27.30 27.31 27.32 T:grain128aeadv2 27.80 27.84 27.87 T:schwaemm128128v2 34.99 35.16 35.40 romulusn 38.83 38.88 38.94 romulust 40.49 40.54 40.56 T:giftcofb128v1 44.31 44.39 45.32 T:isapk128av20 55.33 55.36 55.42 T:isapk128v20 56.50 56.50 56.53 T:tinyjambu128v2 56.64 57.02 57.29 romulusm 66.11 66.13 66.16 T:tinyjambu192v2 71.17 71.24 71.24 T:tinyjambu256v2 94.64 95.21 96.19 T:isapxv20 147.86 148.22 148.51 T:elephant200v2 6939.57 6943.90 6945.42 T:elephant176v2 7827.36 7828.82 7856.20 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.04 1.04 1.04 T:aes128gcmv1 1.14 1.15 1.16 aes256gcmv1 6.28 6.29 6.30 ascon128av12 8.80 8.83 8.91 ascon80pqv12 8.99 9.00 9.01 ascon128v12 11.15 11.21 11.80 ascon128abi32v12 11.63 11.88 11.98 T:xoodyakround3 16.45 16.45 16.47 ascon128bi32v12 19.40 19.41 19.42 T:schwaemm256128v2 23.87 23.96 23.98 T:schwaemm256256v2 25.43 25.58 25.60 T:schwaemm192192v2 26.09 26.11 26.24 T:isapa128v20 27.14 27.17 27.20 T:grain128aeadv2 27.69 27.73 27.75 T:schwaemm128128v2 28.33 28.46 28.55 romulusn 28.49 28.67 28.69 T:isapa128av20 39.17 39.35 39.39 romulusm 40.49 40.52 40.54 T:giftcofb128v1 44.66 44.66 44.74 T:tinyjambu128v2 51.73 51.76 51.81 T:tinyjambu192v2 53.33 53.36 53.38 T:tinyjambu256v2 55.61 56.06 56.50 T:isapk128av20 72.14 72.21 72.68 T:isapk128v20 77.19 77.24 77.26 romulust 111.61 111.92 111.96 T:elephant200v2 129.63 129.89 130.78 T:isapxv20 5182.50 5185.56 5189.22 T:elephant176v2 5868.70 5869.12 5869.41 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.10 1.11 1.12 T:aes128gcmv1 1.14 1.14 1.15 aes256gcmv1 5.97 6.00 6.01 ascon128av12 8.89 8.89 8.89 ascon80pqv12 8.92 8.93 8.95 ascon128v12 11.21 11.24 11.26 ascon128abi32v12 12.24 12.35 12.56 T:xoodyakround3 16.24 16.34 16.35 ascon128bi32v12 19.42 19.45 19.54 T:schwaemm256128v2 23.93 23.99 24.02 T:schwaemm256256v2 25.64 25.68 25.72 T:schwaemm192192v2 26.15 26.16 26.36 T:isapa128v20 27.17 27.31 27.34 T:grain128aeadv2 27.72 27.75 27.76 T:schwaemm128128v2 28.34 28.56 28.82 romulusn 28.65 28.69 28.71 T:isapa128av20 39.17 39.39 39.47 romulusm 40.46 40.48 40.52 T:giftcofb128v1 44.73 44.73 44.73 T:tinyjambu128v2 51.46 51.47 51.50 T:tinyjambu192v2 53.42 53.44 53.46 T:tinyjambu256v2 55.53 55.62 56.53 T:isapk128av20 72.65 72.69 72.73 T:isapk128v20 77.23 77.24 77.26 romulust 111.62 111.79 111.94 T:elephant200v2 129.25 130.52 130.93 T:isapxv20 5182.01 5182.50 5189.11 T:elephant176v2 5869.02 5869.43 5869.65 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.10 1.11 1.12 T:aes128gcmv1 1.13 1.14 1.15 aes256gcmv1 5.99 6.00 6.01 ascon128av12 8.89 8.89 8.90 ascon80pqv12 8.93 8.94 8.95 ascon128v12 11.24 11.25 11.25 ascon128abi32v12 12.27 12.32 12.55 T:xoodyakround3 16.25 16.35 16.36 ascon128bi32v12 17.54 17.55 17.70 T:isapa128v20 19.46 19.48 19.53 T:schwaemm256128v2 22.92 22.97 22.99 T:isapa128av20 23.89 23.98 24.00 T:schwaemm256256v2 25.60 25.70 25.71 T:schwaemm192192v2 27.31 27.35 27.49 T:grain128aeadv2 27.74 27.76 27.78 T:schwaemm128128v2 28.39 28.54 28.62 romulusn 38.87 38.88 38.90 romulust 39.17 39.25 39.46 romulusm 40.46 40.50 40.52 T:giftcofb128v1 44.45 44.50 44.90 T:isapk128av20 44.74 44.74 44.75 T:tinyjambu128v2 51.43 51.46 51.51 T:tinyjambu192v2 53.42 53.42 53.43 T:tinyjambu256v2 55.44 55.83 56.07 T:isapk128v20 94.95 95.67 96.08 T:isapxv20 111.63 111.89 112.20 T:elephant200v2 5181.95 5182.41 5188.11 T:elephant176v2 5868.76 5869.07 5869.29 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.52 0.53 0.55 T:aes128gcmv1 0.53 0.55 0.57 aes256gcmv1 5.98 6.00 6.01 ascon128av12 7.97 8.12 8.29 T:xoodyakround3 8.76 8.80 8.81 ascon80pqv12 8.95 8.95 8.97 ascon128v12 10.90 10.94 12.06 ascon128abi32v12 16.28 16.29 16.29 ascon128bi32v12 17.60 17.60 17.63 T:isapa128v20 19.38 19.40 19.44 T:schwaemm256128v2 21.76 21.77 21.77 romulusm 21.80 21.81 21.82 romulusn 23.05 23.06 23.07 T:isapa128av20 23.78 23.88 23.89 T:schwaemm256256v2 25.33 25.36 25.37 T:schwaemm192192v2 26.96 26.98 27.07 T:grain128aeadv2 27.72 27.79 28.07 T:schwaemm128128v2 32.93 32.95 32.98 T:tinyjambu128v2 35.63 35.63 35.68 T:tinyjambu256v2 37.01 37.02 37.03 T:tinyjambu192v2 38.86 38.87 38.90 romulust 40.43 40.45 40.46 T:giftcofb128v1 44.51 44.57 45.41 T:isapk128av20 55.46 55.53 56.06 T:isapk128v20 75.51 75.67 75.82 T:elephant200v2 94.42 95.22 96.66 T:isapxv20 3425.19 3426.21 3428.02 T:elephant176v2 3908.95 3909.31 3909.77 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.53 0.54 0.55 T:aes128gcmv1 0.54 0.57 0.58 aes256gcmv1 5.90 5.92 5.94 ascon128av12 7.95 8.07 8.25 T:xoodyakround3 8.85 8.86 8.88 ascon80pqv12 8.86 8.88 8.91 ascon128v12 11.01 11.02 11.04 ascon128abi32v12 16.25 16.44 16.46 ascon128bi32v12 17.60 17.60 17.73 T:isapa128v20 19.40 19.41 19.43 T:schwaemm256128v2 21.76 21.77 21.78 romulusm 21.80 21.81 21.82 romulusn 22.91 22.97 23.08 T:isapa128av20 23.85 23.87 23.89 T:schwaemm256256v2 25.32 25.34 25.35 T:schwaemm192192v2 27.15 27.18 27.34 T:grain128aeadv2 27.70 27.72 27.80 T:schwaemm128128v2 32.94 32.95 32.98 T:tinyjambu128v2 35.66 35.68 35.72 T:tinyjambu256v2 36.76 36.83 36.87 T:tinyjambu192v2 38.79 38.86 38.95 romulust 40.42 40.46 40.49 T:giftcofb128v1 44.54 44.63 45.41 T:isapk128av20 55.40 55.46 55.59 T:isapk128v20 75.69 75.80 76.09 T:elephant200v2 95.32 95.92 96.18 T:isapxv20 3424.61 3426.07 3439.09 T:elephant176v2 3909.20 3909.57 3910.02 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.53 0.53 0.54 T:aes128gcmv1 0.54 0.55 0.56 aes256gcmv1 5.91 5.91 5.92 ascon128av12 7.97 8.17 8.51 T:xoodyakround3 8.83 8.87 8.88 ascon80pqv12 8.87 8.88 8.93 ascon128v12 11.02 11.04 11.04 ascon128abi32v12 16.25 16.44 16.46 ascon128bi32v12 17.57 17.57 17.73 T:isapa128v20 19.40 19.42 19.43 T:schwaemm256128v2 21.76 21.77 21.77 romulusm 21.80 21.81 21.82 romulusn 22.91 22.98 23.07 T:isapa128av20 23.76 23.85 23.91 T:schwaemm256256v2 25.29 25.33 25.36 T:schwaemm192192v2 27.19 27.30 27.38 T:grain128aeadv2 27.69 27.71 27.76 T:schwaemm128128v2 32.96 32.97 32.97 T:tinyjambu128v2 35.66 35.66 35.67 T:tinyjambu256v2 36.80 36.81 36.87 T:tinyjambu192v2 38.83 38.87 38.87 romulust 40.41 40.44 40.53 T:giftcofb128v1 44.50 44.63 45.63 T:isapk128av20 55.45 55.52 55.99 T:isapk128v20 75.64 75.71 75.84 T:elephant200v2 96.07 96.35 96.62 T:isapxv20 3424.71 3426.66 3430.40 T:elephant176v2 3909.14 3909.41 3909.98 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.15 1.16 1.16 T:aes128gcmv1 1.28 1.29 1.29 aes256gcmv1 6.45 6.45 6.47 ascon128av12 9.01 9.02 9.06 ascon80pqv12 9.12 9.14 9.16 ascon128v12 11.49 11.50 12.01 ascon128abi32v12 11.88 11.93 12.10 T:xoodyakround3 16.79 16.79 16.80 ascon128bi32v12 19.97 19.99 20.00 T:schwaemm256128v2 24.63 24.66 24.67 T:schwaemm256256v2 26.03 26.28 26.28 T:schwaemm192192v2 27.49 27.50 27.58 T:grain128aeadv2 28.12 28.17 28.18 T:schwaemm128128v2 28.47 28.69 28.83 romulusn 30.92 31.11 31.12 T:isapa128av20 38.38 38.41 38.48 T:isapa128v20 39.58 39.76 39.76 romulusm 40.87 40.89 40.91 T:giftcofb128v1 45.03 45.03 45.10 T:tinyjambu128v2 52.13 52.16 52.24 T:tinyjambu192v2 53.76 53.78 53.80 T:tinyjambu256v2 62.67 62.71 63.33 T:isapk128av20 78.41 78.41 78.44 romulust 114.13 114.23 114.29 T:elephant200v2 125.40 125.48 126.22 T:isapk128v20 209.87 210.09 210.59 T:isapxv20 5221.90 5223.37 5224.96 T:elephant176v2 5935.08 5935.27 5935.70 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.23 1.24 1.24 T:aes128gcmv1 1.28 1.28 1.29 aes256gcmv1 6.15 6.17 6.18 ascon128av12 9.05 9.05 9.07 ascon80pqv12 9.08 9.08 9.10 ascon128v12 11.54 11.55 11.55 ascon128abi32v12 12.39 12.48 12.65 T:xoodyakround3 16.60 16.68 16.69 ascon128bi32v12 20.02 20.03 20.04 T:schwaemm256128v2 24.57 24.64 24.66 T:schwaemm256256v2 26.20 26.31 26.36 T:schwaemm192192v2 27.66 27.68 27.76 T:grain128aeadv2 28.18 28.19 28.21 T:schwaemm128128v2 28.67 28.82 28.97 romulusn 31.07 31.10 31.12 T:isapa128av20 38.26 38.29 38.37 T:isapa128v20 39.69 39.74 39.91 romulusm 40.86 40.88 40.88 T:giftcofb128v1 45.11 45.11 45.12 T:tinyjambu128v2 51.88 51.90 51.93 T:tinyjambu192v2 53.86 53.87 53.90 T:tinyjambu256v2 62.67 62.71 63.72 T:isapk128av20 78.40 78.41 78.43 romulust 114.06 114.17 114.30 T:elephant200v2 125.34 125.37 125.89 T:isapk128v20 208.93 209.53 210.34 T:isapxv20 5222.32 5223.32 5225.05 T:elephant176v2 5934.76 5935.15 5935.51 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.22 1.22 1.23 T:aes128gcmv1 1.27 1.28 1.28 aes256gcmv1 6.15 6.17 6.18 ascon128av12 9.05 9.05 9.05 ascon80pqv12 9.10 9.10 9.11 ascon128v12 11.54 11.54 11.55 ascon128abi32v12 12.38 12.44 12.61 T:xoodyakround3 16.60 16.68 16.69 ascon128bi32v12 20.01 20.02 20.08 T:schwaemm256128v2 23.72 23.73 23.73 T:isapa128v20 24.30 24.35 24.36 T:isapa128av20 24.59 24.62 24.65 T:schwaemm256256v2 26.18 26.35 26.37 T:schwaemm192192v2 27.64 27.65 27.70 T:grain128aeadv2 28.15 28.17 28.19 T:schwaemm128128v2 28.67 28.82 28.96 romulusn 39.68 39.69 39.86 romulusm 40.00 40.01 40.01 romulust 40.85 40.87 40.92 T:giftcofb128v1 45.11 45.12 45.14 T:tinyjambu128v2 48.50 48.53 49.25 T:isapk128av20 51.85 51.87 51.91 T:tinyjambu192v2 53.86 53.88 53.89 T:tinyjambu256v2 82.58 82.63 83.10 T:isapk128v20 113.87 114.00 114.30 T:elephant200v2 136.08 136.32 136.54 T:isapxv20 5222.32 5223.45 5239.92 T:elephant176v2 5935.18 5935.54 5935.84 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.84 5.86 6.11 T:aes128gcmv1 5.89 5.93 6.25 aes256gcmv1 10.02 10.23 10.80 ascon128av12 12.27 12.59 13.01 ascon128v12 12.86 13.02 13.21 ascon80pqv12 17.70 18.06 18.59 T:xoodyakround3 18.52 18.67 19.02 ascon128abi32v12 24.22 24.40 24.57 ascon128bi32v12 32.54 32.59 32.98 T:schwaemm256128v2 34.77 34.93 35.09 romulusn 35.35 35.46 35.61 T:grain128aeadv2 36.77 37.05 37.32 T:schwaemm128128v2 39.20 39.25 39.30 T:schwaemm256256v2 42.73 42.75 43.26 T:schwaemm192192v2 48.32 48.62 48.97 romulusm 49.41 49.43 49.73 T:giftcofb128v1 53.27 53.38 53.62 T:tinyjambu128v2 61.45 61.61 62.12 T:tinyjambu192v2 63.11 63.19 63.62 T:tinyjambu256v2 86.68 86.92 87.45 T:isapa128av20 105.47 105.78 106.83 romulust 162.93 163.54 163.87 T:elephant200v2 212.76 213.09 213.95 T:isapk128av20 318.35 319.08 321.37 T:isapa128v20 1333.24 1333.45 1334.27 T:isapk128v20 2007.84 2029.09 2032.64 T:isapxv20 6503.06 6505.36 6509.24 T:elephant176v2 7949.45 7950.62 7952.01 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.92 5.98 6.03 aes256gcmv1 5.95 6.05 6.12 T:aes128gcmv1 9.81 10.08 10.33 ascon128av12 12.74 12.88 13.03 ascon80pqv12 12.48 12.89 13.10 ascon128v12 17.84 17.95 18.27 T:xoodyakround3 18.47 18.70 19.09 ascon128abi32v12 23.98 24.43 24.75 ascon128bi32v12 32.56 32.66 32.80 T:schwaemm256128v2 34.84 34.97 35.04 romulusn 35.23 35.52 35.74 T:grain128aeadv2 37.12 37.29 37.38 T:schwaemm128128v2 39.14 39.19 39.23 T:schwaemm256256v2 42.75 42.88 43.06 T:schwaemm192192v2 49.66 49.66 49.89 T:giftcofb128v1 50.64 50.94 51.08 romulusm 53.53 53.53 53.55 T:tinyjambu128v2 61.56 61.73 61.80 T:tinyjambu192v2 63.66 63.66 63.91 T:tinyjambu256v2 86.72 86.81 87.01 T:isapa128av20 105.41 105.62 105.73 romulust 163.01 163.15 163.49 T:elephant200v2 211.93 213.15 213.70 T:isapk128av20 319.10 319.10 319.11 T:isapa128v20 1332.77 1333.01 1333.34 T:isapk128v20 2013.53 2016.86 2017.93 T:isapxv20 6500.09 6502.48 6508.75 T:elephant176v2 7947.41 7953.43 7964.78 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.86 5.88 5.91 T:aes128gcmv1 5.92 5.97 6.00 aes256gcmv1 9.77 9.86 10.08 ascon128av12 12.56 12.62 12.75 ascon128v12 12.49 12.64 12.70 ascon80pqv12 17.91 18.22 18.43 T:xoodyakround3 18.24 18.41 18.59 ascon128abi32v12 23.88 23.97 23.98 ascon128bi32v12 32.58 32.77 32.87 T:schwaemm256128v2 34.88 35.04 35.11 romulusn 35.29 35.36 35.73 T:grain128aeadv2 36.98 36.99 37.24 T:schwaemm128128v2 39.10 39.16 39.23 T:schwaemm256256v2 42.82 42.91 43.00 T:schwaemm192192v2 49.53 49.66 49.80 T:giftcofb128v1 50.32 50.44 50.64 romulusm 53.45 53.45 53.45 T:tinyjambu128v2 55.66 55.78 55.98 T:isapa128av20 61.35 61.55 61.89 T:tinyjambu192v2 63.79 63.82 63.93 T:tinyjambu256v2 65.82 65.88 66.38 romulust 131.30 131.77 132.04 T:isapk128av20 162.96 163.19 163.38 T:elephant200v2 165.80 165.80 166.20 T:isapa128v20 696.10 696.21 696.36 T:isapk128v20 1054.41 1058.36 1060.85 T:isapxv20 6500.55 6503.84 6509.66 T:elephant176v2 7947.52 7949.59 7951.20 T:elephant160v2