VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A9+NEON (411fc093); 2011 TI OMAP 4430; 2 x 1000MHz; h7panda, supercop-20250922

[Page version: 20260203 05:36:03]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 22.01 22.38 22.52 ascon128abi32v12 31.65 31.78 31.94 ascon128av12 33.95 34.09 34.19 ascon128bi32v12 42.63 42.74 43.39 ascon80pqv12 43.15 43.28 43.49 ascon128v12 43.59 43.83 44.49 T:schwaemm256128v2 47.89 48.83 50.43 T:aes128gcmv1 53.58 54.22 54.71 T:xoodyakround3 55.38 56.54 59.65 T:aes256gcmv1 57.19 57.62 58.88 T:schwaemm192192v2 61.30 61.65 62.98 T:giftcofb128v1 63.20 63.74 64.89 T:schwaemm256256v2 65.24 65.53 68.63 T:schwaemm128128v2 78.50 78.68 79.63 T:tinyjambu128v2 83.55 84.44 86.15 T:isapa128av20 110.45? 112.37? 126.17? T:isapa128v20 115.25 115.37 116.77 T:tinyjambu192v2 124.22 124.90 134.52 T:tinyjambu256v2 152.38 153.11 160.51 T:romulusn 279.54 281.85 293.48 romulusn 321.14 332.76 334.25 T:isapk128av20 413.41 422.70 430.20 T:elephant200v2 514.72 525.05 532.67 romulusm 583.44 590.41 608.46 T:isapk128v20 580.82 592.04 611.84 T:isapxv20 1094.19 1106.21 1111.84 romulust 26585.39 26657.95 26740.48 T:elephant176v2 26752.21 26903.22 27007.33 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 22.20 22.34 22.68 ascon128abi32v12 31.68 31.77 32.85 ascon128av12 33.58 33.83 34.22 ascon128bi32v12 42.42 42.57 43.07 ascon128v12 42.39 42.63 43.07 ascon80pqv12 43.94 44.19 45.45 T:schwaemm256128v2 47.98 48.83 51.72 T:aes128gcmv1 49.94 50.14 50.69 T:xoodyakround3 55.78 57.02 59.50 T:aes256gcmv1 57.65 57.74 58.55 T:schwaemm192192v2 60.37 61.81 63.68 T:giftcofb128v1 62.89 63.07 63.52 T:schwaemm128128v2 63.37 63.68 64.78 T:schwaemm256256v2 78.51 78.92 80.07 T:tinyjambu128v2 83.88 84.57 86.81 T:isapa128av20 110.83? 112.98? 125.10? T:isapa128v20 115.38 116.26 120.80 T:tinyjambu192v2 124.77 125.25 136.23 T:tinyjambu256v2 151.67 153.64 162.27 T:romulusn 279.54 282.12 293.17 romulusn 318.23 330.46 334.31 T:isapk128av20 415.41 428.82 432.19 T:elephant200v2 504.73 516.94 525.01 romulusm 573.00 588.60 601.39 T:isapk128v20 586.05 593.41 607.20 T:isapxv20 1095.07 1103.39 1114.60 romulust 26566.95 26606.66 26694.87 T:elephant176v2 26837.46 26925.22 27007.15 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 22.25 22.41 22.47 ascon128abi32v12 31.62 31.69 31.76 ascon128av12 33.58 33.79 33.88 ascon128bi32v12 42.48 42.63 43.03 ascon80pqv12 42.30 42.77 43.13 ascon128v12 43.97 44.14 45.40 T:schwaemm256128v2 47.03 48.67 49.97 T:aes128gcmv1 50.08 50.29 51.10 T:xoodyakround3 53.54 53.92 55.98 T:isapa128av20 55.25? 56.69? 66.10? T:isapa128v20 55.67 57.27 60.62 T:aes256gcmv1 57.71 58.05 59.38 T:schwaemm192192v2 60.67 61.41 63.28 T:giftcofb128v1 62.87 63.07 63.70 T:schwaemm128128v2 63.30 63.51 64.82 T:schwaemm256256v2 78.48 78.62 79.14 T:tinyjambu128v2 115.29 115.85 117.67 T:tinyjambu192v2 124.84 125.39 127.99 T:tinyjambu256v2 150.96 152.36 163.05 T:romulusn 203.76? 214.46? 226.81? T:isapk128av20 281.29 289.46 293.58 romulusn 283.79 301.10 309.90 T:isapk128v20 286.62 304.54 318.44 T:isapxv20 355.83 367.43 369.38 romulust 415.22 425.65 429.84 T:elephant200v2 503.26 515.20 521.90 romulusm 26575.56 26632.92 26735.23 T:elephant176v2 26829.03 26905.49 27004.49 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 22.00 22.11 22.41 ascon128abi32v12 29.71 29.84 31.00 ascon128av12 33.71 34.08 34.89 ascon128bi32v12 37.23 37.78 40.28 T:aes128gcmv1 40.27 40.50 40.92 ascon80pqv12 40.42 40.74 41.24 ascon128v12 40.74 41.08 41.84 T:xoodyakround3 41.04 41.99 44.00 T:aes256gcmv1 43.45 43.77 44.98 T:schwaemm256128v2 57.47 57.94 59.37 T:schwaemm192192v2 60.96 61.33 62.60 T:giftcofb128v1 63.72 63.96 64.97 T:schwaemm128128v2 63.04 64.12 68.46 T:schwaemm256256v2 68.71 69.39 74.79 T:isapa128av20 71.59 71.92 76.95 T:tinyjambu128v2 83.03 84.82 89.08 T:isapa128v20 90.75 90.99 91.84 T:tinyjambu192v2 93.83 94.79 95.32 T:tinyjambu256v2 128.03 129.35 134.67 T:romulusn 258.15 264.81 266.77 romulusn 274.67 276.44 278.40 T:isapk128av20 308.27 314.40 318.34 T:elephant200v2 378.16 382.06 384.75 romulusm 441.09 445.16 451.90 T:isapk128v20 442.02 447.00 453.52 T:isapxv20 728.19 731.71 737.21 romulust 19883.11 19911.89 19969.90 T:elephant176v2 20169.24 20203.54 20223.31 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 22.09 22.23 22.54 ascon128abi32v12 29.65 29.76 30.89 ascon128av12 33.54 33.72 34.88 ascon128bi32v12 37.10 38.02 40.81 T:aes128gcmv1 38.49 38.81 39.25 T:xoodyakround3 40.12 40.54 40.85 ascon128v12 40.45 40.54 40.76 ascon80pqv12 41.04 42.28 44.84 T:aes256gcmv1 43.49 43.95 44.63 T:schwaemm256128v2 57.51 57.70 58.77 T:schwaemm192192v2 60.99? 61.58? 68.32? T:giftcofb128v1 62.69 62.89 63.83 T:schwaemm128128v2 62.95 63.16 64.08 T:schwaemm256256v2 68.80 69.28 70.33 T:isapa128av20 71.58 71.92 77.15 T:tinyjambu128v2 82.46 83.69 89.65 T:isapa128v20 90.83 91.47 97.12 T:tinyjambu192v2 94.44 95.35 97.18 T:tinyjambu256v2 128.46 129.40 133.95 T:romulusn 252.92 262.38 264.01 romulusn 271.35 276.53 281.02 T:isapk128av20 311.69 313.85 315.59 T:elephant200v2 368.27 373.28 376.67 romulusm 437.64 443.89 449.59 T:isapk128v20 440.78 446.69 456.24 T:isapxv20 724.92 733.80 737.16 romulust 19852.45 19917.29 19973.54 T:elephant176v2 20139.30 20187.27 20230.77 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 22.07 22.15 22.23 ascon128abi32v12 29.60 29.70 30.71 ascon128av12 33.52 33.70 34.11 ascon128bi32v12 37.14 38.12 39.31 T:aes128gcmv1 38.69 38.86 40.23 T:xoodyakround3 40.22 40.52 40.82 ascon128v12 40.46 40.57 40.83 ascon80pqv12 41.51 42.55 43.74 T:aes256gcmv1 43.33 43.68 44.75 T:schwaemm256128v2 53.80 55.14 56.39 T:isapa128av20 54.70 55.49 56.57 T:isapa128v20 57.46 57.71 58.67 T:schwaemm192192v2 61.08 61.68 66.86 T:giftcofb128v1 62.64 62.84 63.76 T:schwaemm128128v2 62.91 63.14 64.62 T:schwaemm256256v2 71.51 71.89 73.35 T:tinyjambu128v2 90.77 90.93 96.14 T:tinyjambu192v2 94.51 95.23 102.19 T:tinyjambu256v2 129.19 129.48 134.72 T:romulusn 216.43 221.25 224.19 T:isapk128av20 252.47 259.01 261.09 romulusn 289.42 300.04 302.28 T:isapk128v20 295.30 303.23 307.48 T:isapxv20 312.36 313.90 316.77 T:elephant200v2 356.95 364.47 368.03 romulust 367.74 371.41 376.57 romulusm 19873.54 19915.56 19940.90 T:elephant176v2 20109.34 20174.04 20224.14 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 21.68 21.76 21.82 ascon128abi32v12 26.50 27.10 28.47 T:aes128gcmv1 27.28 27.38 27.61 T:xoodyakround3 26.08? 27.46? 30.05? T:aes256gcmv1 27.48 27.60 27.84 ascon128av12 33.44 33.53 33.94 ascon128bi32v12 37.95 38.06 38.27 ascon128v12 37.91 38.09 38.28 ascon80pqv12 43.01 43.18 43.92 T:schwaemm256128v2 53.43 54.30 57.06 T:isapa128av20 54.92 55.38 57.84 T:isapa128v20 57.25 57.33 58.55 T:schwaemm192192v2 60.53 60.80 62.20 T:giftcofb128v1 62.38 62.59 63.16 T:schwaemm256256v2 62.16 62.62 63.54 T:schwaemm128128v2 63.26 63.49 64.27 T:tinyjambu256v2 64.50 64.65 65.85 T:tinyjambu128v2 65.83 66.00 66.64 T:tinyjambu192v2 104.24 104.76 107.11 T:romulusn 202.59 205.08 216.13 T:elephant200v2 217.11 221.90 230.60 T:isapk128av20 234.10 237.05 249.98 romulusm 234.39 240.26 247.11 romulusn 284.86 301.83 311.33 T:isapk128v20 287.38 302.99 308.16 T:isapxv20 357.36 367.25 369.61 romulust 13141.54 13180.02 13260.32 T:elephant176v2 13403.17 13436.93 13466.26 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 21.89 21.99 22.09 ascon128abi32v12 26.33 26.82 27.85 T:aes128gcmv1 26.51 27.13 27.93 T:aes256gcmv1 27.11 27.21 27.82 T:xoodyakround3 27.34 27.73 28.27 ascon128av12 33.28 33.44 33.58 ascon128bi32v12 37.90 37.99 38.08 ascon80pqv12 38.04 38.16 38.70 ascon128v12 43.03 43.14 44.55 T:schwaemm256128v2 53.01 54.02 56.34 T:isapa128av20 54.06 55.28 57.26 T:isapa128v20 57.14 57.29 57.84 T:schwaemm192192v2 60.56 60.70 62.32 T:giftcofb128v1 62.19 62.40 63.57 T:schwaemm128128v2 62.47 62.61 63.37 T:schwaemm256256v2 63.88 64.01 64.30 T:tinyjambu256v2 64.25 64.60 65.89 T:tinyjambu128v2 65.94 66.14 67.02 T:tinyjambu192v2 104.25 104.65 106.08 T:romulusn 204.05 206.40 215.52 T:elephant200v2 216.90 219.56 230.46 T:isapk128av20 223.94 225.90 236.29 romulusm 224.25 227.09 236.31 romulusn 282.24 302.35 309.73 T:isapk128v20 285.46 303.28 310.06 T:isapxv20 355.59 366.69 369.89 romulust 13140.99 13171.51 13279.37 T:elephant176v2 13409.89 13449.89 13497.13 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 21.99 22.04 22.58 ascon128abi32v12 25.98 26.98 28.01 T:aes256gcmv1 27.05 27.14 27.24 T:xoodyakround3 27.31 27.45 27.63 ascon128av12 26.08? 27.58? 30.26? T:aes128gcmv1 33.32 33.63 33.79 ascon128bi32v12 37.87 38.02 38.32 ascon80pqv12 38.07 38.22 38.72 ascon128v12 43.05 43.13 44.74 T:schwaemm256128v2 53.14 53.98 55.93 T:isapa128av20 53.13 55.15 56.90 T:isapa128v20 57.19 57.29 57.51 T:schwaemm192192v2 60.42 60.76 62.25 T:giftcofb128v1 62.13 62.51 65.74 T:schwaemm128128v2 62.46 62.60 63.25 T:schwaemm256256v2 64.48 65.08 65.97 T:tinyjambu128v2 64.15? 65.40? 77.41? T:tinyjambu256v2 65.97 66.31 68.32 T:tinyjambu192v2 104.09 104.72 106.42 T:romulusn 203.34 206.56 215.20 T:elephant200v2 217.83 219.09 229.87 T:isapk128av20 223.86 226.06 237.48 romulusm 223.90 226.71 236.62 romulusn 282.58 300.79 308.47 T:isapk128v20 283.91 302.52 308.88 T:isapxv20 355.96 367.18 370.76 romulust 13133.54 13180.34 13252.97 T:elephant176v2 13402.98 13443.63 13496.44 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 23.43 23.49 24.09 ascon128abi32v12 31.12 31.19 32.41 ascon128av12 35.12 35.22 35.41 ascon128bi32v12 41.88 42.04 42.71 ascon128v12 41.91 42.19 43.28 ascon80pqv12 42.12 42.19 42.62 T:xoodyakround3 44.11 44.56 46.07 T:aes128gcmv1 45.63 45.75 46.83 T:schwaemm256128v2 48.49 48.81 49.54 T:aes256gcmv1 59.65 59.77 60.75 T:schwaemm192192v2 62.68 62.76 63.83 T:giftcofb128v1 65.48 65.59 67.55 T:schwaemm128128v2 65.48 65.65 66.65 T:schwaemm256256v2 73.08 73.44 74.12 T:tinyjambu128v2 75.56 76.15 77.71 T:isapa128av20 92.29 92.58 93.77 T:tinyjambu192v2 95.51 95.76 96.83 T:tinyjambu256v2 118.76 119.61 125.90 T:isapa128v20 130.69 131.72 137.33 T:romulusn 262.00 268.09 270.00 romulusn 305.50 308.97 312.34 T:isapk128av20 316.19 321.45 324.60 T:elephant200v2 380.29 387.72 391.60 romulusm 700.30 707.08 709.67 T:isapk128v20 704.01 707.55 710.60 T:isapxv20 743.33 748.28 752.58 romulust 20002.43 20027.53 20081.49 T:elephant176v2 20386.63 20430.49 20467.14 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 23.56 23.75 24.83 ascon128abi32v12 31.03 31.12 31.28 ascon128av12 34.98 35.06 35.43 ascon128bi32v12 40.07 40.20 40.61 T:xoodyakround3 41.79 42.02 42.13 ascon128v12 42.01 42.09 42.41 ascon80pqv12 44.18 44.48 46.08 T:aes128gcmv1 45.77 46.22 47.73 T:schwaemm256128v2 48.78 49.44 51.43 T:aes256gcmv1 59.59 59.73 60.56 T:schwaemm192192v2 62.43 62.79 64.14 T:giftcofb128v1 64.55 64.88 66.51 T:schwaemm128128v2 65.54 65.68 66.75 T:schwaemm256256v2 73.15 73.48 75.99 T:tinyjambu128v2 75.48 75.87 77.28 T:isapa128av20 92.27 92.58 93.69 T:tinyjambu192v2 96.09 96.56 98.17 T:tinyjambu256v2 118.68 119.59 125.60 T:isapa128v20 130.68 130.97 139.60 T:romulusn 257.37 262.26 263.56 romulusn 305.80 311.69 314.90 T:isapk128av20 316.63 322.69 325.29 T:elephant200v2 369.04 377.62 381.45 romulusm 703.14 707.93 710.64 T:isapxv20 705.87 708.21 712.25 T:isapk128v20 743.32 746.52 751.30 romulust 20033.62 20066.13 20103.48 T:elephant176v2 20376.34 20410.49 20429.50 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 23.53 23.55 23.63 ascon128abi32v12 31.01 31.16 31.65 ascon128av12 34.88 34.93 35.20 ascon128bi32v12 40.17 40.44 41.79 T:xoodyakround3 41.92 41.96 42.07 ascon80pqv12 41.80 42.01 42.08 ascon128v12 44.25 44.80 47.27 T:aes128gcmv1 45.69 45.81 47.01 T:schwaemm256128v2 48.42 48.82 50.15 T:aes256gcmv1 57.84 58.45 59.83 T:isapa128av20 59.64 59.72 60.87 T:schwaemm192192v2 62.39 62.72 63.91 T:giftcofb128v1 64.48 64.59 65.18 T:schwaemm128128v2 65.50 65.83 67.19 T:schwaemm256256v2 73.08? 73.54? 81.58? T:tinyjambu128v2 74.05 74.49 75.34 T:isapa128v20 92.22 92.63 93.11 T:tinyjambu192v2 96.10 97.08 103.00 T:tinyjambu256v2 131.82 132.00 136.94 T:romulusn 237.57 243.24 244.40 T:isapk128av20 256.58 262.79 264.30 romulusn 318.84 322.12 324.60 T:elephant200v2 369.10 375.28 378.80 romulust 374.51 375.68 379.96 romulusm 427.11 432.88 437.82 T:isapk128v20 433.57 437.61 438.79 T:isapxv20 20005.99 20038.93 20098.26 T:elephant176v2 20374.22 20430.20 20458.67 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 54.92 55.15 56.01 ascon128abi32v12 64.62 65.12 66.35 ascon128av12 65.87 65.98 67.12 ascon128bi32v12 73.81 74.44 75.46 ascon128v12 74.93 75.23 76.37 ascon80pqv12 85.60 86.25 87.39 T:xoodyakround3 94.93 95.55 96.89 T:schwaemm256128v2 100.70 100.91 102.61 T:giftcofb128v1 106.48 106.83 107.91 T:schwaemm128128v2 107.66 107.80 108.14 T:tinyjambu128v2 118.02 118.48 119.37 T:schwaemm192192v2 124.38 124.88 126.52 T:schwaemm256256v2 130.03 130.21 131.20 T:tinyjambu192v2 132.37 132.61 133.32 T:tinyjambu256v2 184.39 184.70 187.44 T:romulusn 184.89 185.49 191.04 T:aes128gcmv1 194.45 198.58 213.16 T:aes256gcmv1 226.11 228.17 234.21 T:isapa128av20 346.70 347.77 349.62 romulusn 464.02 465.80 475.00 romulusm 466.76 468.64 478.20 T:elephant200v2 931.70 934.91 944.98 T:isapa128v20 1009.88 1014.57 1047.48 romulust 1035.34 1037.70 1053.02 T:isapk128av20 6547.97 6568.95 6718.05 T:isapk128v20 6550.32 6579.27 6754.55 T:isapxv20 24943.88 25009.41 25125.80 T:elephant176v2 27355.60 27387.27 27455.50 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 55.26 55.44 56.38 ascon128abi32v12 64.73 64.95 66.11 ascon128av12 66.58 66.93 68.10 ascon128bi32v12 74.73 74.95 76.30 ascon128v12 75.18 75.52 77.09 ascon80pqv12 82.52 83.32 84.82 T:xoodyakround3 95.31 95.95 96.95 T:schwaemm256128v2 101.00 101.26 102.45 T:giftcofb128v1 105.96 106.45 109.45 T:schwaemm128128v2 107.27 107.66 108.25 T:tinyjambu128v2 118.03 118.60 119.66 T:schwaemm192192v2 124.20 124.46 125.42 T:schwaemm256256v2 128.60 128.85 129.85 T:tinyjambu192v2 132.82 132.91 133.27 T:tinyjambu256v2 184.16 185.70 191.50 T:aes128gcmv1 186.31 186.89 188.61 T:romulusn 193.27 194.58 202.22 T:aes256gcmv1 226.15 228.30 234.16 T:isapa128av20 338.97 339.63 344.50 romulusn 468.73 471.42 479.92 T:elephant200v2 472.15 473.85 487.38 romulusm 938.36 943.88 966.12 T:isapa128v20 1010.55 1011.76 1020.50 romulust 1036.09 1040.13 1056.76 T:isapk128av20 6549.86 6676.56 6710.09 T:isapk128v20 6538.18 6685.21 6764.31 T:isapxv20 24929.75 25050.47 25118.84 T:elephant176v2 27301.58 27416.17 27532.62 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 54.99 55.41 57.44 ascon128abi32v12 64.70 65.01 65.59 ascon128av12 66.15 66.43 67.60 ascon128bi32v12 74.28 74.55 75.41 ascon128v12 74.93 75.14 75.71 ascon80pqv12 82.52 83.27 85.10 T:xoodyakround3 95.43 95.63 96.47 T:schwaemm256128v2 100.50 100.80 102.06 T:giftcofb128v1 105.59 106.21 106.53 T:schwaemm128128v2 107.41 107.56 107.80 T:tinyjambu128v2 117.82 118.09 118.44 T:schwaemm192192v2 124.54 124.77 128.39 T:schwaemm256256v2 128.71 128.95 129.77 T:tinyjambu192v2 132.73 133.25 136.32 T:tinyjambu256v2 156.38 156.95 161.99 T:isapa128av20 184.05 185.66 197.73 T:aes128gcmv1 185.68 186.46 189.23 T:romulusn 194.12 197.15 206.47 T:aes256gcmv1 338.77 339.60 343.37 romulusn 467.65 468.33 469.93 T:elephant200v2 471.70 472.84 476.33 romulusm 504.91 506.39 511.85 T:isapa128v20 620.24 621.11 626.85 romulust 668.36 669.98 677.23 T:isapk128av20 3411.71 3421.88 3568.36 T:isapk128v20 3412.60 3423.61 3584.09 T:isapxv20 24962.48 25000.38 25118.96 T:elephant176v2 27261.46 27354.06 27489.92 T:elephant160v2