VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A9+NEON (411fc093); 2011 TI OMAP 4430; 2 x 1000MHz; h7panda, supercop-20250922

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 22.01 22.38 22.52 ascon128abi32v12 31.65 31.78 31.94 ascon128av12 33.95 34.09 34.19 ascon128bi32v12 42.63 42.74 43.39 ascon80pqv12 43.15 43.28 43.49 ascon128v12 43.59 43.83 44.49 T:schwaemm256128v2 47.89 48.83 50.43 T:aes128gcmv1 53.58 54.22 54.71 T:xoodyakround3 55.38 56.54 59.65 T:aes256gcmv1 57.19 57.62 58.88 T:schwaemm192192v2 61.30 61.65 62.98 T:giftcofb128v1 63.20 63.74 64.89 T:schwaemm256256v2 65.24 65.53 68.63 T:schwaemm128128v2 78.50 78.68 79.63 T:tinyjambu128v2 83.55 84.44 86.15 T:isapa128av20 110.45? 112.37? 126.17? T:isapa128v20 115.25 115.37 116.77 T:tinyjambu192v2 124.22 124.90 134.52 T:tinyjambu256v2 152.38 153.11 160.51 T:romulusn 279.54 281.85 293.48 romulusn 321.14 332.76 334.25 T:isapk128av20 413.41 422.70 430.20 T:elephant200v2 514.72 525.05 532.67 romulusm 583.44 590.41 608.46 T:isapk128v20 580.82 592.04 611.84 T:isapxv20 1094.19 1106.21 1111.84 romulust 26585.39 26657.95 26740.48 T:elephant176v2 26752.21 26903.22 27007.33 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 22.20 22.34 22.68 ascon128abi32v12 31.68 31.77 32.85 ascon128av12 33.58 33.83 34.22 ascon128bi32v12 42.42 42.57 43.07 ascon128v12 42.39 42.63 43.07 ascon80pqv12 43.94 44.19 45.45 T:schwaemm256128v2 47.98 48.83 51.72 T:aes128gcmv1 49.94 50.14 50.69 T:xoodyakround3 55.78 57.02 59.50 T:aes256gcmv1 57.65 57.74 58.55 T:schwaemm192192v2 60.37 61.81 63.68 T:giftcofb128v1 62.89 63.07 63.52 T:schwaemm128128v2 63.37 63.68 64.78 T:schwaemm256256v2 78.51 78.92 80.07 T:tinyjambu128v2 83.88 84.57 86.81 T:isapa128av20 110.83? 112.98? 125.10? T:isapa128v20 115.38 116.26 120.80 T:tinyjambu192v2 124.77 125.25 136.23 T:tinyjambu256v2 151.67 153.64 162.27 T:romulusn 279.54 282.12 293.17 romulusn 318.23 330.46 334.31 T:isapk128av20 415.41 428.82 432.19 T:elephant200v2 504.73 516.94 525.01 romulusm 573.00 588.60 601.39 T:isapk128v20 586.05 593.41 607.20 T:isapxv20 1095.07 1103.39 1114.60 romulust 26566.95 26606.66 26694.87 T:elephant176v2 26837.46 26925.22 27007.15 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 22.25 22.41 22.47 ascon128abi32v12 31.62 31.69 31.76 ascon128av12 33.58 33.79 33.88 ascon128bi32v12 42.48 42.63 43.03 ascon80pqv12 42.30 42.77 43.13 ascon128v12 43.97 44.14 45.40 T:schwaemm256128v2 47.03 48.67 49.97 T:aes128gcmv1 50.08 50.29 51.10 T:xoodyakround3 53.54 53.92 55.98 T:isapa128av20 55.25? 56.69? 66.10? T:isapa128v20 55.67 57.27 60.62 T:aes256gcmv1 57.71 58.05 59.38 T:schwaemm192192v2 60.67 61.41 63.28 T:giftcofb128v1 62.87 63.07 63.70 T:schwaemm128128v2 63.30 63.51 64.82 T:schwaemm256256v2 78.48 78.62 79.14 T:tinyjambu128v2 115.29 115.85 117.67 T:tinyjambu192v2 124.84 125.39 127.99 T:tinyjambu256v2 150.96 152.36 163.05 T:romulusn 203.76? 214.46? 226.81? T:isapk128av20 281.29 289.46 293.58 romulusn 283.79 301.10 309.90 T:isapk128v20 286.62 304.54 318.44 T:isapxv20 355.83 367.43 369.38 romulust 415.22 425.65 429.84 T:elephant200v2 503.26 515.20 521.90 romulusm 26575.56 26632.92 26735.23 T:elephant176v2 26829.03 26905.49 27004.49 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 22.00 22.11 22.41 ascon128abi32v12 29.71 29.84 31.00 ascon128av12 33.71 34.08 34.89 ascon128bi32v12 37.23 37.78 40.28 T:aes128gcmv1 40.27 40.50 40.92 ascon80pqv12 40.42 40.74 41.24 ascon128v12 40.74 41.08 41.84 T:xoodyakround3 41.04 41.99 44.00 T:aes256gcmv1 43.45 43.77 44.98 T:schwaemm256128v2 57.47 57.94 59.37 T:schwaemm192192v2 60.96 61.33 62.60 T:giftcofb128v1 63.72 63.96 64.97 T:schwaemm128128v2 63.04 64.12 68.46 T:schwaemm256256v2 68.71 69.39 74.79 T:isapa128av20 71.59 71.92 76.95 T:tinyjambu128v2 83.03 84.82 89.08 T:isapa128v20 90.75 90.99 91.84 T:tinyjambu192v2 93.83 94.79 95.32 T:tinyjambu256v2 128.03 129.35 134.67 T:romulusn 258.15 264.81 266.77 romulusn 274.67 276.44 278.40 T:isapk128av20 308.27 314.40 318.34 T:elephant200v2 378.16 382.06 384.75 romulusm 441.09 445.16 451.90 T:isapk128v20 442.02 447.00 453.52 T:isapxv20 728.19 731.71 737.21 romulust 19883.11 19911.89 19969.90 T:elephant176v2 20169.24 20203.54 20223.31 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 22.09 22.23 22.54 ascon128abi32v12 29.65 29.76 30.89 ascon128av12 33.54 33.72 34.88 ascon128bi32v12 37.10 38.02 40.81 T:aes128gcmv1 38.49 38.81 39.25 T:xoodyakround3 40.12 40.54 40.85 ascon128v12 40.45 40.54 40.76 ascon80pqv12 41.04 42.28 44.84 T:aes256gcmv1 43.49 43.95 44.63 T:schwaemm256128v2 57.51 57.70 58.77 T:schwaemm192192v2 60.99? 61.58? 68.32? T:giftcofb128v1 62.69 62.89 63.83 T:schwaemm128128v2 62.95 63.16 64.08 T:schwaemm256256v2 68.80 69.28 70.33 T:isapa128av20 71.58 71.92 77.15 T:tinyjambu128v2 82.46 83.69 89.65 T:isapa128v20 90.83 91.47 97.12 T:tinyjambu192v2 94.44 95.35 97.18 T:tinyjambu256v2 128.46 129.40 133.95 T:romulusn 252.92 262.38 264.01 romulusn 271.35 276.53 281.02 T:isapk128av20 311.69 313.85 315.59 T:elephant200v2 368.27 373.28 376.67 romulusm 437.64 443.89 449.59 T:isapk128v20 440.78 446.69 456.24 T:isapxv20 724.92 733.80 737.16 romulust 19852.45 19917.29 19973.54 T:elephant176v2 20139.30 20187.27 20230.77 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 22.07 22.15 22.23 ascon128abi32v12 29.60 29.70 30.71 ascon128av12 33.52 33.70 34.11 ascon128bi32v12 37.14 38.12 39.31 T:aes128gcmv1 38.69 38.86 40.23 T:xoodyakround3 40.22 40.52 40.82 ascon128v12 40.46 40.57 40.83 ascon80pqv12 41.51 42.55 43.74 T:aes256gcmv1 43.33 43.68 44.75 T:schwaemm256128v2 53.80 55.14 56.39 T:isapa128av20 54.70 55.49 56.57 T:isapa128v20 57.46 57.71 58.67 T:schwaemm192192v2 61.08 61.68 66.86 T:giftcofb128v1 62.64 62.84 63.76 T:schwaemm128128v2 62.91 63.14 64.62 T:schwaemm256256v2 71.51 71.89 73.35 T:tinyjambu128v2 90.77 90.93 96.14 T:tinyjambu192v2 94.51 95.23 102.19 T:tinyjambu256v2 129.19 129.48 134.72 T:romulusn 216.43 221.25 224.19 T:isapk128av20 252.47 259.01 261.09 romulusn 289.42 300.04 302.28 T:isapk128v20 295.30 303.23 307.48 T:isapxv20 312.36 313.90 316.77 T:elephant200v2 356.95 364.47 368.03 romulust 367.74 371.41 376.57 romulusm 19873.54 19915.56 19940.90 T:elephant176v2 20109.34 20174.04 20224.14 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 21.68 21.76 21.82 ascon128abi32v12 26.50 27.10 28.47 T:aes128gcmv1 27.28 27.38 27.61 T:xoodyakround3 26.08? 27.46? 30.05? T:aes256gcmv1 27.48 27.60 27.84 ascon128av12 33.44 33.53 33.94 ascon128bi32v12 37.95 38.06 38.27 ascon128v12 37.91 38.09 38.28 ascon80pqv12 43.01 43.18 43.92 T:schwaemm256128v2 53.43 54.30 57.06 T:isapa128av20 54.92 55.38 57.84 T:isapa128v20 57.25 57.33 58.55 T:schwaemm192192v2 60.53 60.80 62.20 T:giftcofb128v1 62.38 62.59 63.16 T:schwaemm256256v2 62.16 62.62 63.54 T:schwaemm128128v2 63.26 63.49 64.27 T:tinyjambu256v2 64.50 64.65 65.85 T:tinyjambu128v2 65.83 66.00 66.64 T:tinyjambu192v2 104.24 104.76 107.11 T:romulusn 202.59 205.08 216.13 T:elephant200v2 217.11 221.90 230.60 T:isapk128av20 234.10 237.05 249.98 romulusm 234.39 240.26 247.11 romulusn 284.86 301.83 311.33 T:isapk128v20 287.38 302.99 308.16 T:isapxv20 357.36 367.25 369.61 romulust 13141.54 13180.02 13260.32 T:elephant176v2 13403.17 13436.93 13466.26 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 21.89 21.99 22.09 ascon128abi32v12 26.33 26.82 27.85 T:aes128gcmv1 26.51 27.13 27.93 T:aes256gcmv1 27.11 27.21 27.82 T:xoodyakround3 27.34 27.73 28.27 ascon128av12 33.28 33.44 33.58 ascon128bi32v12 37.90 37.99 38.08 ascon80pqv12 38.04 38.16 38.70 ascon128v12 43.03 43.14 44.55 T:schwaemm256128v2 53.01 54.02 56.34 T:isapa128av20 54.06 55.28 57.26 T:isapa128v20 57.14 57.29 57.84 T:schwaemm192192v2 60.56 60.70 62.32 T:giftcofb128v1 62.19 62.40 63.57 T:schwaemm128128v2 62.47 62.61 63.37 T:schwaemm256256v2 63.88 64.01 64.30 T:tinyjambu256v2 64.25 64.60 65.89 T:tinyjambu128v2 65.94 66.14 67.02 T:tinyjambu192v2 104.25 104.65 106.08 T:romulusn 204.05 206.40 215.52 T:elephant200v2 216.90 219.56 230.46 T:isapk128av20 223.94 225.90 236.29 romulusm 224.25 227.09 236.31 romulusn 282.24 302.35 309.73 T:isapk128v20 285.46 303.28 310.06 T:isapxv20 355.59 366.69 369.89 romulust 13140.99 13171.51 13279.37 T:elephant176v2 13409.89 13449.89 13497.13 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 21.99 22.04 22.58 ascon128abi32v12 25.98 26.98 28.01 T:aes256gcmv1 27.05 27.14 27.24 T:xoodyakround3 27.31 27.45 27.63 ascon128av12 26.08? 27.58? 30.26? T:aes128gcmv1 33.32 33.63 33.79 ascon128bi32v12 37.87 38.02 38.32 ascon80pqv12 38.07 38.22 38.72 ascon128v12 43.05 43.13 44.74 T:schwaemm256128v2 53.14 53.98 55.93 T:isapa128av20 53.13 55.15 56.90 T:isapa128v20 57.19 57.29 57.51 T:schwaemm192192v2 60.42 60.76 62.25 T:giftcofb128v1 62.13 62.51 65.74 T:schwaemm128128v2 62.46 62.60 63.25 T:schwaemm256256v2 64.48 65.08 65.97 T:tinyjambu128v2 64.15? 65.40? 77.41? T:tinyjambu256v2 65.97 66.31 68.32 T:tinyjambu192v2 104.09 104.72 106.42 T:romulusn 203.34 206.56 215.20 T:elephant200v2 217.83 219.09 229.87 T:isapk128av20 223.86 226.06 237.48 romulusm 223.90 226.71 236.62 romulusn 282.58 300.79 308.47 T:isapk128v20 283.91 302.52 308.88 T:isapxv20 355.96 367.18 370.76 romulust 13133.54 13180.34 13252.97 T:elephant176v2 13402.98 13443.63 13496.44 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 23.43 23.49 24.09 ascon128abi32v12 31.12 31.19 32.41 ascon128av12 35.12 35.22 35.41 ascon128bi32v12 41.88 42.04 42.71 ascon128v12 41.91 42.19 43.28 ascon80pqv12 42.12 42.19 42.62 T:xoodyakround3 44.11 44.56 46.07 T:aes128gcmv1 45.63 45.75 46.83 T:schwaemm256128v2 48.49 48.81 49.54 T:aes256gcmv1 59.65 59.77 60.75 T:schwaemm192192v2 62.68 62.76 63.83 T:giftcofb128v1 65.48 65.59 67.55 T:schwaemm128128v2 65.48 65.65 66.65 T:schwaemm256256v2 73.08 73.44 74.12 T:tinyjambu128v2 75.56 76.15 77.71 T:isapa128av20 92.29 92.58 93.77 T:tinyjambu192v2 95.51 95.76 96.83 T:tinyjambu256v2 118.76 119.61 125.90 T:isapa128v20 130.69 131.72 137.33 T:romulusn 262.00 268.09 270.00 romulusn 305.50 308.97 312.34 T:isapk128av20 316.19 321.45 324.60 T:elephant200v2 380.29 387.72 391.60 romulusm 700.30 707.08 709.67 T:isapk128v20 704.01 707.55 710.60 T:isapxv20 743.33 748.28 752.58 romulust 20002.43 20027.53 20081.49 T:elephant176v2 20386.63 20430.49 20467.14 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 23.56 23.75 24.83 ascon128abi32v12 31.03 31.12 31.28 ascon128av12 34.98 35.06 35.43 ascon128bi32v12 40.07 40.20 40.61 T:xoodyakround3 41.79 42.02 42.13 ascon128v12 42.01 42.09 42.41 ascon80pqv12 44.18 44.48 46.08 T:aes128gcmv1 45.77 46.22 47.73 T:schwaemm256128v2 48.78 49.44 51.43 T:aes256gcmv1 59.59 59.73 60.56 T:schwaemm192192v2 62.43 62.79 64.14 T:giftcofb128v1 64.55 64.88 66.51 T:schwaemm128128v2 65.54 65.68 66.75 T:schwaemm256256v2 73.15 73.48 75.99 T:tinyjambu128v2 75.48 75.87 77.28 T:isapa128av20 92.27 92.58 93.69 T:tinyjambu192v2 96.09 96.56 98.17 T:tinyjambu256v2 118.68 119.59 125.60 T:isapa128v20 130.68 130.97 139.60 T:romulusn 257.37 262.26 263.56 romulusn 305.80 311.69 314.90 T:isapk128av20 316.63 322.69 325.29 T:elephant200v2 369.04 377.62 381.45 romulusm 703.14 707.93 710.64 T:isapxv20 705.87 708.21 712.25 T:isapk128v20 743.32 746.52 751.30 romulust 20033.62 20066.13 20103.48 T:elephant176v2 20376.34 20410.49 20429.50 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 23.53 23.55 23.63 ascon128abi32v12 31.01 31.16 31.65 ascon128av12 34.88 34.93 35.20 ascon128bi32v12 40.17 40.44 41.79 T:xoodyakround3 41.92 41.96 42.07 ascon80pqv12 41.80 42.01 42.08 ascon128v12 44.25 44.80 47.27 T:aes128gcmv1 45.69 45.81 47.01 T:schwaemm256128v2 48.42 48.82 50.15 T:aes256gcmv1 57.84 58.45 59.83 T:isapa128av20 59.64 59.72 60.87 T:schwaemm192192v2 62.39 62.72 63.91 T:giftcofb128v1 64.48 64.59 65.18 T:schwaemm128128v2 65.50 65.83 67.19 T:schwaemm256256v2 73.08? 73.54? 81.58? T:tinyjambu128v2 74.05 74.49 75.34 T:isapa128v20 92.22 92.63 93.11 T:tinyjambu192v2 96.10 97.08 103.00 T:tinyjambu256v2 131.82 132.00 136.94 T:romulusn 237.57 243.24 244.40 T:isapk128av20 256.58 262.79 264.30 romulusn 318.84 322.12 324.60 T:elephant200v2 369.10 375.28 378.80 romulust 374.51 375.68 379.96 romulusm 427.11 432.88 437.82 T:isapk128v20 433.57 437.61 438.79 T:isapxv20 20005.99 20038.93 20098.26 T:elephant176v2 20374.22 20430.20 20458.67 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 54.92 55.15 56.01 ascon128abi32v12 64.62 65.12 66.35 ascon128av12 65.87 65.98 67.12 ascon128bi32v12 73.81 74.44 75.46 ascon128v12 74.93 75.23 76.37 ascon80pqv12 85.60 86.25 87.39 T:xoodyakround3 94.93 95.55 96.89 T:schwaemm256128v2 100.70 100.91 102.61 T:giftcofb128v1 106.48 106.83 107.91 T:schwaemm128128v2 107.66 107.80 108.14 T:tinyjambu128v2 118.02 118.48 119.37 T:schwaemm192192v2 124.38 124.88 126.52 T:schwaemm256256v2 130.03 130.21 131.20 T:tinyjambu192v2 132.37 132.61 133.32 T:tinyjambu256v2 184.39 184.70 187.44 T:romulusn 184.89 185.49 191.04 T:aes128gcmv1 194.45 198.58 213.16 T:aes256gcmv1 226.11 228.17 234.21 T:isapa128av20 346.70 347.77 349.62 romulusn 464.02 465.80 475.00 romulusm 466.76 468.64 478.20 T:elephant200v2 931.70 934.91 944.98 T:isapa128v20 1009.88 1014.57 1047.48 romulust 1035.34 1037.70 1053.02 T:isapk128av20 6547.97 6568.95 6718.05 T:isapk128v20 6550.32 6579.27 6754.55 T:isapxv20 24943.88 25009.41 25125.80 T:elephant176v2 27355.60 27387.27 27455.50 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 55.26 55.44 56.38 ascon128abi32v12 64.73 64.95 66.11 ascon128av12 66.58 66.93 68.10 ascon128bi32v12 74.73 74.95 76.30 ascon128v12 75.18 75.52 77.09 ascon80pqv12 82.52 83.32 84.82 T:xoodyakround3 95.31 95.95 96.95 T:schwaemm256128v2 101.00 101.26 102.45 T:giftcofb128v1 105.96 106.45 109.45 T:schwaemm128128v2 107.27 107.66 108.25 T:tinyjambu128v2 118.03 118.60 119.66 T:schwaemm192192v2 124.20 124.46 125.42 T:schwaemm256256v2 128.60 128.85 129.85 T:tinyjambu192v2 132.82 132.91 133.27 T:tinyjambu256v2 184.16 185.70 191.50 T:aes128gcmv1 186.31 186.89 188.61 T:romulusn 193.27 194.58 202.22 T:aes256gcmv1 226.15 228.30 234.16 T:isapa128av20 338.97 339.63 344.50 romulusn 468.73 471.42 479.92 T:elephant200v2 472.15 473.85 487.38 romulusm 938.36 943.88 966.12 T:isapa128v20 1010.55 1011.76 1020.50 romulust 1036.09 1040.13 1056.76 T:isapk128av20 6549.86 6676.56 6710.09 T:isapk128v20 6538.18 6685.21 6764.31 T:isapxv20 24929.75 25050.47 25118.84 T:elephant176v2 27301.58 27416.17 27532.62 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 54.99 55.41 57.44 ascon128abi32v12 64.70 65.01 65.59 ascon128av12 66.15 66.43 67.60 ascon128bi32v12 74.28 74.55 75.41 ascon128v12 74.93 75.14 75.71 ascon80pqv12 82.52 83.27 85.10 T:xoodyakround3 95.43 95.63 96.47 T:schwaemm256128v2 100.50 100.80 102.06 T:giftcofb128v1 105.59 106.21 106.53 T:schwaemm128128v2 107.41 107.56 107.80 T:tinyjambu128v2 117.82 118.09 118.44 T:schwaemm192192v2 124.54 124.77 128.39 T:schwaemm256256v2 128.71 128.95 129.77 T:tinyjambu192v2 132.73 133.25 136.32 T:tinyjambu256v2 156.38 156.95 161.99 T:isapa128av20 184.05 185.66 197.73 T:aes128gcmv1 185.68 186.46 189.23 T:romulusn 194.12 197.15 206.47 T:aes256gcmv1 338.77 339.60 343.37 romulusn 467.65 468.33 469.93 T:elephant200v2 471.70 472.84 476.33 romulusm 504.91 506.39 511.85 T:isapa128v20 620.24 621.11 626.85 romulust 668.36 669.98 677.23 T:isapk128av20 3411.71 3421.88 3568.36 T:isapk128v20 3412.60 3423.61 3584.09 T:isapxv20 24962.48 25000.38 25118.96 T:elephant176v2 27261.46 27354.06 27489.92 T:elephant160v2