VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: armeabi; ARM1176 (410fb767); 2011 Broadcom BCM2835; 1 x 1000MHz; berry0, supercop-20240909

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 30.52 30.87 31.37 ascon128abi32v12 39.77 40.89 42.62 ascon128av12 45.81 46.15 46.60 ascon128bi32v12 55.76 56.67 57.65 ascon128v12 57.60 58.14 58.89 ascon80pqv12 64.68 64.88 65.26 T:schwaemm256128v2 80.65 82.33 86.14 T:aes128gcmv1 85.39 85.61 86.15 T:schwaemm192192v2 85.36 86.38 87.77 T:giftcofb128v1 88.25 88.38 89.21 T:schwaemm128128v2 88.52 88.66 89.51 T:xoodyakround3 92.82 92.96 93.53 T:schwaemm256256v2 93.44 95.32 99.00 T:aes256gcmv1 141.57 141.75 142.12 T:tinyjambu128v2 143.72 144.89 147.97 T:isapa128av20 189.17 189.33 189.63 T:tinyjambu192v2 187.04 189.71 196.38 T:isapa128v20 205.11 205.29 205.47 T:tinyjambu256v2 253.68 254.15 255.06 T:romulusn 498.27 499.60 501.87 T:elephant200v2 514.97 517.03 543.03 romulusn 755.81 757.17 771.44 T:isapk128av20 915.13 924.33 936.58 T:isapk128v20 919.51 927.92 941.06 T:isapxv20 995.40 997.97 1028.29 romulusm 2079.57 2103.92 2118.15 T!!!romulust 33900.70 33915.75 33966.25 T:elephant160v2 38053.65 38098.19 38131.17 T:elephant176v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 30.37 31.07 31.63 ascon128abi32v12 39.91 40.92 41.84 ascon128av12 46.18 46.65 47.01 ascon128bi32v12 56.34 56.99 57.77 ascon128v12 57.30 57.87 58.78 ascon80pqv12 64.62 64.93 65.69 T:schwaemm256128v2 80.23 81.32 84.40 T:aes128gcmv1 85.46 85.70 86.29 T:schwaemm192192v2 85.72 86.37 87.76 T:giftcofb128v1 88.33 88.47 89.22 T:schwaemm128128v2 88.97 89.39 90.67 T:xoodyakround3 92.75 92.90 93.35 T:schwaemm256256v2 93.64 95.64 99.88 T:aes256gcmv1 143.65 143.81 144.27 T:tinyjambu128v2 143.81 145.28 147.68 T:isapa128av20 185.93 187.94 191.90 T:isapa128v20 189.59 190.12 190.27 T:tinyjambu192v2 207.66 207.71 208.82 T:tinyjambu256v2 253.01 253.85 255.38 T:romulusn 498.11 498.78 500.25 T:elephant200v2 509.66 511.52 543.01 romulusn 756.55 757.96 768.56 T:isapk128av20 914.06 923.58 936.98 T:isapk128v20 918.40 927.50 945.81 T:isapxv20 999.93 1004.52 1037.64 romulusm 2078.73 2084.37 2110.43 T!!!romulust 33885.55 33908.95 33954.84 T:elephant160v2 38049.53 38102.31 38132.14 T:elephant176v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 30.70 31.04 31.53 ascon128abi32v12 39.97 40.82 41.25 ascon128av12 46.19 46.67 47.03 ascon128bi32v12 56.37 56.91 57.64 ascon128v12 57.39 57.90 58.44 ascon80pqv12 64.63 64.96 65.57 T:schwaemm256128v2 80.12 81.98 85.03 T:aes128gcmv1 85.11 85.71 86.88 T:schwaemm192192v2 85.51 86.58 88.92 T:giftcofb128v1 88.37 88.53 88.98 T:schwaemm128128v2 89.15 89.53 90.42 T:xoodyakround3 92.64 92.89 93.40 T:schwaemm256256v2 91.12 93.83 97.40 T:isapa128v20 92.34 94.48 97.15 T:isapa128av20 93.76 95.28 97.86 T:aes256gcmv1 143.73 143.77 144.22 T:tinyjambu128v2 190.03 190.33 194.21 T:tinyjambu192v2 207.48 207.76 209.48 T:tinyjambu256v2 252.96 253.48 254.73 T:romulusn 362.27 363.69 371.25 T:isapk128av20 442.70 444.40 447.90 T:isapxv20 437.87 444.97 453.54 T:isapk128v20 498.38 499.10 500.02 T:elephant200v2 510.06 512.33 542.16 romulusn 689.30 691.88 722.81 T!!!romulust 999.91 1004.60 1034.82 romulusm 33882.26 33902.35 33986.53 T:elephant160v2 38053.55 38099.54 38153.99 T:elephant176v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 30.59 30.82 31.29 ascon128abi32v12 37.89 38.45 39.17 ascon128av12 45.87 46.04 46.48 ascon128bi32v12 54.01 54.33 54.85 ascon128v12 54.28 54.52 55.39 ascon80pqv12 59.05 60.10 61.70 T:aes128gcmv1 64.14 64.22 64.62 T:schwaemm256128v2 65.75 67.01 69.02 T:aes256gcmv1 67.32 67.54 68.02 T:xoodyakround3 84.99 85.08 85.43 T:schwaemm192192v2 85.10 85.62 86.89 T:giftcofb128v1 87.78 87.94 88.25 T:schwaemm128128v2 92.13 92.38 92.89 T:schwaemm256256v2 116.96 117.00 117.22 T:tinyjambu128v2 118.46 119.50 121.29 T:isapa128av20 139.73 140.62 142.16 T:isapa128v20 149.16 149.25 149.57 T:tinyjambu192v2 156.20 156.25 156.65 T:tinyjambu256v2 212.35 213.00 215.17 T:romulusn 373.66 374.75 384.35 T:elephant200v2 494.93 496.07 508.78 romulusn 561.39 562.30 569.82 T:isapk128av20 682.79 691.39 694.70 T:isapk128v20 684.57 693.28 696.07 T:isapxv20 731.70 734.69 749.06 romulusm 1381.83 1397.64 1402.17 T!!!romulust 25425.89 25460.31 25481.00 T:elephant160v2 28453.04 28460.05 28479.40 T:elephant176v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 30.47 30.81 31.52 ascon128abi32v12 37.62 38.10 38.99 ascon128av12 46.13 46.29 47.21 ascon128bi32v12 54.01 54.36 55.12 ascon80pqv12 54.17 54.57 55.17 ascon128v12 59.18 60.22 61.71 T:aes128gcmv1 64.09 64.26 64.60 T:schwaemm256128v2 66.28 67.08 68.96 T:aes256gcmv1 67.23 67.58 68.19 T:xoodyakround3 84.86 85.04 85.43 T:schwaemm192192v2 85.14 85.61 86.54 T:giftcofb128v1 87.82 87.91 88.19 T:schwaemm128128v2 92.07 92.23 93.05 T:schwaemm256256v2 117.96 118.00 118.35 T:tinyjambu128v2 118.09 119.56 123.49 T:isapa128av20 139.95 142.01 152.37 T:isapa128v20 149.56 149.68 150.02 T:tinyjambu192v2 157.45 157.53 157.92 T:tinyjambu256v2 211.78 212.27 213.52 T:romulusn 373.88 375.17 384.13 T:elephant200v2 492.10 493.80 510.61 romulusn 561.35 563.10 569.81 T:isapk128av20 686.65 688.72 694.53 T:isapxv20 681.67 691.83 692.61 T:isapk128v20 733.59 738.07 753.82 romulusm 1382.38 1396.93 1401.49 T!!!romulust 25420.58 25448.97 25476.35 T:elephant160v2 28453.04 28476.24 28498.84 T:elephant176v2

Cycles/byte for long+long forgery 25% 50% 75% aead 30.63 31.10 33.33 ascon128abi32v12 37.86 38.27 39.20 ascon128av12 46.03 46.22 46.75 ascon128bi32v12 54.12 54.42 55.14 ascon80pqv12 54.28 54.80 55.52 ascon128v12 59.39 60.38 61.91 T:aes128gcmv1 64.15 64.30 64.76 T:schwaemm256128v2 66.07 66.73 68.62 T:aes256gcmv1 67.50 67.72 68.28 T:xoodyakround3 84.93 85.20 85.56 T:schwaemm192192v2 85.09 85.84 87.32 T:giftcofb128v1 87.84 87.91 88.64 T:schwaemm128128v2 92.08 92.30 92.63 T:schwaemm256256v2 91.86 93.35 95.76 T:isapa128v20 92.12 93.83 95.64 T:isapa128av20 117.99 118.05 118.64 T:tinyjambu128v2 149.50 149.95 153.16 T:tinyjambu192v2 157.49 157.57 158.16 T:tinyjambu256v2 211.98 212.22 213.26 T:romulusn 364.06 364.74 370.53 T:isapk128av20 373.95 375.00 383.68 T:elephant200v2 444.67 446.11 454.07 T:isapxv20 444.73 446.57 453.23 T:isapk128v20 491.50 493.60 508.40 romulusn 685.77 688.10 704.26 T!!!romulust 733.67 736.93 755.35 romulusm 25420.20 25446.49 25467.84 T:elephant160v2 28446.98 28453.07 28472.11 T:elephant176v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 29.94 30.61 31.34 ascon128abi32v12 35.08 35.94 36.55 ascon128av12 36.67 37.93 40.10 T:aes256gcmv1 36.35 37.97 39.93 T:aes128gcmv1 45.36 45.90 47.25 ascon128bi32v12 45.87 46.07 46.56 T:xoodyakround3 50.25 51.05 51.84 ascon80pqv12 51.45 52.08 52.78 ascon128v12 63.42 63.62 63.93 T:schwaemm256128v2 84.36 84.56 85.04 T:schwaemm192192v2 84.22 84.80 86.53 T:giftcofb128v1 87.12 87.35 87.90 T:schwaemm128128v2 91.28 91.59 92.13 T:schwaemm256256v2 92.10 92.35 93.83 T:tinyjambu128v2 91.90 93.09 95.44 T:isapa128av20 90.65 93.77 96.71 T:isapa128v20 107.22 107.29 107.72 T:tinyjambu256v2 108.93 109.08 109.41 T:tinyjambu192v2 170.85 171.13 172.45 T:romulusn 253.68 254.20 255.38 T:elephant200v2 365.52 365.94 368.13 T:isapk128av20 446.48 447.15 451.84 T:isapk128v20 446.02 447.74 450.86 T:isapxv20 465.54 467.51 470.75 romulusm 473.01 474.36 476.80 romulusn 681.63 684.32 713.71 T!!!romulust 16950.92 16965.98 16992.52 T:elephant160v2 18810.37 18832.37 18876.81 T:elephant176v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 30.06 30.54 30.92 ascon128abi32v12 34.66 35.56 36.37 ascon128av12 36.76 37.96 39.52 T:aes128gcmv1 36.95? 39.34? 42.12? T:aes256gcmv1 45.66 46.09 46.34 T:xoodyakround3 45.49 46.22 47.31 ascon128bi32v12 50.22 50.80 51.64 ascon80pqv12 51.81 52.16 52.61 ascon128v12 63.43 63.56 63.72 T:schwaemm256128v2 84.38 84.57 85.23 T:schwaemm192192v2 84.00 85.10 86.49 T:giftcofb128v1 87.14 87.28 87.90 T:schwaemm128128v2 91.32 91.66 92.33 T:schwaemm256256v2 92.11 92.29 92.92 T:tinyjambu128v2 90.41 92.62 95.35 T:isapa128av20 90.41 93.10 97.31 T:isapa128v20 107.05 107.44 108.21 T:tinyjambu256v2 109.21 109.40 109.71 T:tinyjambu192v2 170.59 171.22 172.19 T:romulusn 253.75 254.71 267.27 T:elephant200v2 365.21 366.19 370.81 T:isapk128av20 445.87 447.77 457.11 T:isapxv20 446.52 448.15 456.66 T:isapk128v20 465.47 467.23 472.33 romulusm 472.48 474.23 480.02 romulusn 683.06 684.96 687.66 T!!!romulust 16955.02 16981.77 17014.40 T:elephant160v2 18801.17 18823.08 18852.83 T:elephant176v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 30.07 30.39 30.99 ascon128abi32v12 34.81 35.54 36.12 ascon128av12 36.58 38.03 39.12 T:aes128gcmv1 36.88? 38.38? 41.23? T:aes256gcmv1 45.80 46.03 46.47 T:xoodyakround3 45.62 46.08 46.59 ascon128bi32v12 50.17 50.80 51.35 ascon80pqv12 51.64 52.22 54.54 ascon128v12 63.45 63.62 63.97 T:schwaemm256128v2 84.35 84.48 86.13 T:schwaemm192192v2 84.17 85.04 86.92 T:giftcofb128v1 87.11 87.33 88.15 T:schwaemm128128v2 91.51 91.64 92.39 T:schwaemm256256v2 92.12 92.30 92.60 T:tinyjambu128v2 90.55 92.75 95.27 T:isapa128v20 92.01 93.15 95.78 T:isapa128av20 107.26 107.43 109.11 T:tinyjambu256v2 109.39 109.46 109.84 T:tinyjambu192v2 170.77 171.21 172.36 T:romulusn 253.77 254.22 255.23 T:elephant200v2 365.43 366.45 369.34 T:isapk128av20 440.20 446.50 449.60 T:isapk128v20 445.71 448.36 457.08 T:isapxv20 465.23 467.68 470.27 romulusm 471.39 474.23 480.07 romulusn 680.39 684.94 715.33 T!!!romulust 16945.62 16960.29 16980.74 T:elephant160v2 18814.72 18852.96 18872.87 T:elephant176v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 31.93 31.99 32.63 ascon128abi32v12 39.47 39.60 40.53 ascon128av12 47.08 47.15 47.71 ascon128bi32v12 55.49 55.57 56.13 ascon128v12 55.85 55.98 56.56 ascon80pqv12 66.50 66.54 66.66 T:schwaemm256128v2 66.15 66.96 68.74 T:aes128gcmv1 68.61 68.66 68.94 T:xoodyakround3 72.87 73.02 75.58 T:aes256gcmv1 87.26 87.34 87.68 T:schwaemm192192v2 87.18 87.50 89.58 T:giftcofb128v1 89.35 89.39 89.84 T:schwaemm128128v2 95.17 95.19 95.52 T:schwaemm256256v2 118.27 118.33 118.67 T:tinyjambu128v2 132.69 133.06 135.33 T:isapa128av20 150.68 150.74 150.98 T:tinyjambu192v2 157.73 157.77 158.02 T:tinyjambu256v2 208.75 209.16 211.64 T:isapa128v20 215.29 215.46 216.07 T:romulusn 383.03 383.69 385.61 T:elephant200v2 504.91 506.88 525.66 romulusn 606.37 606.84 615.14 T:isapk128av20 742.19 743.98 763.10 romulusm 1069.20 1070.43 1078.55 T:isapk128v20 1070.84 1073.36 1084.44 T:isapxv20 1409.30 1410.33 1430.62 T!!!romulust 25721.04 25741.99 25753.28 T:elephant160v2 28662.07 28682.14 28705.59 T:elephant176v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 32.07 32.17 32.83 ascon128abi32v12 39.44 39.52 40.38 ascon128av12 47.45 47.53 48.22 ascon128bi32v12 55.70 55.72 56.66 ascon80pqv12 55.77 55.93 56.59 ascon128v12 66.48 66.62 66.78 T:schwaemm256128v2 65.96 66.62 68.00 T:aes128gcmv1 68.85 68.96 69.72 T:xoodyakround3 72.97 73.65 75.63 T:aes256gcmv1 87.11 87.22 87.98 T:giftcofb128v1 87.32 87.38 87.78 T:schwaemm192192v2 89.40 89.42 89.79 T:schwaemm128128v2 95.16 95.18 95.85 T:schwaemm256256v2 119.27 119.31 119.53 T:tinyjambu128v2 132.81 133.34 136.05 T:isapa128av20 151.20 151.28 152.73 T:tinyjambu192v2 158.98 159.03 159.47 T:tinyjambu256v2 208.30 209.18 210.30 T:isapa128v20 215.26 216.25 226.09 T:romulusn 382.94 383.16 384.67 T:elephant200v2 503.08 503.71 506.93 romulusn 606.36 607.07 615.01 T:isapk128av20 747.97 749.94 772.10 romulusm 1069.25 1070.18 1078.59 T:isapk128v20 1070.78 1072.07 1079.82 T:isapxv20 1410.70 1424.70 1435.41 T!!!romulust 25718.36 25745.60 25757.95 T:elephant160v2 28656.52 28674.06 28688.38 T:elephant176v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 32.04 32.14 32.63 ascon128abi32v12 39.52 39.72 40.56 ascon128av12 47.46 47.54 48.20 ascon128bi32v12 55.78 55.80 56.61 ascon128v12 55.72 55.81 56.64 ascon80pqv12 65.89 66.21 67.84 T:aes128gcmv1 66.52 66.58 67.07 T:schwaemm256128v2 69.01 69.11 69.73 T:xoodyakround3 72.95 73.83 75.94 T:aes256gcmv1 87.10 87.40 88.38 T:giftcofb128v1 87.33 87.41 87.75 T:schwaemm192192v2 89.40 89.45 89.94 T:schwaemm128128v2 95.19 95.22 95.67 T:schwaemm256256v2 101.26 101.68 102.85 T:isapa128av20 119.31 119.42 120.86 T:tinyjambu128v2 128.58 129.04 130.60 T:isapa128v20 151.22 151.24 151.48 T:tinyjambu192v2 159.03 159.12 159.48 T:tinyjambu256v2 215.01 215.14 215.75 T:romulusn 383.01 383.54 384.93 T:elephant200v2 393.09 393.58 400.05 T:isapk128av20 502.61 503.47 520.37 romulusn 644.49 645.02 651.66 T:isapk128v20 644.80 645.42 652.65 T:isapxv20 710.78 712.04 728.98 T!!!romulust 748.58 748.95 769.97 romulusm 25714.93 25755.16 25761.95 T:elephant160v2 28654.48 28686.38 28704.10 T:elephant176v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 57.02? 58.32? 64.59? ascon128abi32v12 67.64? 69.47? 84.35? ascon128av12 70.92? 71.77? 82.12? ascon128bi32v12 82.59? 84.11? 93.92? ascon128v12 84.40? 86.95? 97.78? ascon80pqv12 111.09 112.17 113.66 T:xoodyakround3 117.77 119.24 122.52 T:schwaemm256128v2 123.16 124.39 127.79 T:schwaemm128128v2 124.05 125.16 136.11 T:giftcofb128v1 147.42 148.05 149.45 T:tinyjambu128v2 150.55 151.70 153.73 T:schwaemm192192v2 160.02 160.44 163.91 T:schwaemm256256v2 184.22 184.80 185.70 T:tinyjambu192v2 191.41 192.37 194.20 T:tinyjambu256v2 206.23? 209.88? 229.45? T:aes128gcmv1 218.05 223.12 240.25 T:aes256gcmv1 277.52 279.05 284.38 T:romulusn 442.01 448.66 469.75 T:isapa128av20 558.51 562.34 572.41 T:elephant200v2 734.55 744.23 753.79 romulusn 987.85 999.78 1005.43 romulusm 1620.41 1627.32 1655.56 T:isapk128av20 1766.84 1773.66 1790.20 T:isapa128v20 2038.75 2055.60 2065.81 T!!!romulust 9851.68 9858.45 9888.58 T:isapk128v20 9856.72 9866.84 9963.05 T:isapxv20 34399.05 34549.38 34601.58 T:elephant160v2 35653.80 35817.41 35869.20 T:elephant176v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 62.06? 64.47? 72.23? ascon128abi32v12 68.93? 70.16? 86.30? ascon128av12 73.45 74.45 80.54 ascon128bi32v12 82.99? 85.33? 94.66? ascon128v12 85.70 86.60 94.32 ascon80pqv12 111.96 114.46 118.23 T:xoodyakround3 119.45 120.14 123.19 T:schwaemm256128v2 123.28 124.10 126.00 T:schwaemm128128v2 121.62 124.20 133.38 T:giftcofb128v1 149.41 149.78 149.84 T:tinyjambu128v2 152.21 152.95 156.02 T:schwaemm192192v2 161.52 162.77 166.09 T:schwaemm256256v2 185.16 186.06 187.08 T:tinyjambu192v2 192.72 194.28 196.12 T:tinyjambu256v2 204.50 208.48 225.41 T:aes128gcmv1 219.83 225.93 242.95 T:aes256gcmv1 281.07 282.70 292.17 T:romulusn 448.31 462.28 482.05 T:isapa128av20 556.02 558.05 574.86 T:elephant200v2 725.17 732.98 747.33 romulusn 1046.58 1061.78 1070.57 romulusm 1620.02 1620.98 1633.95 T:isapk128av20 1766.89 1771.69 1796.57 T:isapa128v20 2050.27 2054.38 2075.66 T!!!romulust 9855.25 9864.67 9967.28 T:isapk128v20 9859.73 9872.97 9996.98 T:isapxv20 34396.42 34570.23 34652.75 T:elephant160v2 35670.17 35836.87 36059.36 T:elephant176v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 60.59 62.23 67.19 ascon128abi32v12 69.26? 71.80? 81.86? ascon128av12 73.30 73.88 77.74 ascon128bi32v12 83.98 85.27 90.98 ascon128v12 85.55? 88.41? 97.09? ascon80pqv12 112.41 115.01 118.69 T:xoodyakround3 118.73 119.96 125.62 T:schwaemm256128v2 123.32 123.97 128.44 T:schwaemm128128v2 121.62 124.12 133.78 T:giftcofb128v1 147.55 148.51 150.35 T:tinyjambu128v2 151.66 152.63 155.38 T:schwaemm192192v2 161.55 162.23 165.58 T:schwaemm256256v2 185.15 185.67 187.84 T:tinyjambu192v2 192.70 193.31 193.66 T:tinyjambu256v2 203.91 208.27 222.55 T:aes128gcmv1 215.22? 222.47? 242.23? T:aes256gcmv1 278.34 280.60 283.77 T:romulusn 281.99 292.47 308.56 T:isapa128av20 555.93 558.83 575.41 T:elephant200v2 726.13 736.59 742.50 romulusn 936.46 954.65 980.08 T:isapa128v20 984.24 984.97 991.73 T:isapk128av20 1047.26 1056.35 1061.73 romulusm 1259.94 1271.55 1283.77 T!!!romulust 5135.50 5136.04 5142.47 T:isapk128v20 5135.84 5140.24 5152.20 T:isapxv20 34392.82 34570.09 34596.55 T:elephant160v2 35647.41 35832.48 35857.71 T:elephant176v2