VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information: Introduction eBASH eBASC eBAEAD eBATS SUPERCOP XBX Computers Arch
How to submit new software: Tips hash stream aead dh kem encrypt sign
List of primitives measured: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
Measurements indexed by machine: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
List of subroutines: verify decode encode sort core hashblocks scalarmult

Measurements of NISTLWC cipher candidates, indexed by machine

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each cipher and each implementation.

amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.530.530.54aes256gcmv1
0.790.800.81T:aes128gcmv1
3.693.743.77aes128gcmv1
5.315.315.31ascon128av12
7.497.517.51ascon80pqv12
7.757.757.76ascon128v12
11.6911.7011.72T:xoodyakround3
12.3212.3812.42ascon128abi32v12
17.4817.5317.60T:schwaemm256128v2
17.5717.5917.69T:grain128aeadv2
18.4418.5118.56ascon128bi32v12
23.7823.8423.96T:schwaemm192192v2
24.3124.3924.81T:schwaemm256256v2
25.7325.7425.75T:isapa128av20
26.7026.7926.94T:schwaemm128128v2
30.7330.7630.77T:giftcofb128v1
33.6433.6433.65T:isapa128v20
41.1441.6042.14romulusn
46.2848.2548.66T:isapk128av20
64.1764.2165.11romulusm
71.8172.1472.42T:isapk128v20
73.2573.2673.26T:tinyjambu128v2
82.7482.7482.75T:tinyjambu192v2
91.2491.2691.26T:tinyjambu256v2
133.68134.31134.58romulust
141.61142.25142.35T:isapxv20
188.80190.86191.54T:elephant200v2
6383.496384.276385.44T:elephant176v2
7248.577267.297270.41T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.480.500.51aes256gcmv1
0.740.760.78T:aes128gcmv1
3.733.763.79aes128gcmv1
5.315.315.31ascon128av12
7.617.627.64ascon128v12
8.008.018.01ascon80pqv12
11.6211.7011.75T:xoodyakround3
12.4012.4412.48ascon128abi32v12
17.6217.6517.70T:grain128aeadv2
17.6117.6717.75T:schwaemm256128v2
18.5018.5018.50ascon128bi32v12
23.8523.9124.02T:schwaemm192192v2
24.5824.6524.79T:schwaemm256256v2
26.6726.7026.75T:isapa128av20
27.0927.4027.62T:schwaemm128128v2
30.9331.0631.06T:giftcofb128v1
33.6233.6433.67T:isapa128v20
41.5242.4742.82romulusn
48.0748.4248.64T:isapk128av20
64.7065.2865.54romulusm
71.8171.8671.97T:isapk128v20
73.5073.5173.51T:tinyjambu128v2
82.9882.9983.00T:tinyjambu192v2
91.4891.5191.51T:tinyjambu256v2
133.77134.09134.63romulust
141.29142.07142.77T:isapxv20
188.72190.86191.01T:elephant200v2
6375.876383.986386.94T:elephant176v2
7266.637270.447272.97T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.480.500.50aes256gcmv1
0.750.750.76T:aes128gcmv1
1.171.191.22aes128gcmv1
5.315.315.32ascon128av12
7.637.637.64ascon128v12
8.018.018.01ascon80pqv12
11.6911.7411.78T:xoodyakround3
12.4312.4412.48ascon128abi32v12
15.8415.9115.91T:isapa128v20
17.6217.6517.70T:grain128aeadv2
17.6317.7117.82T:schwaemm256128v2
17.7217.7617.77T:isapa128av20
18.5018.5018.51ascon128bi32v12
23.8123.8823.92T:schwaemm192192v2
24.5324.6524.86T:schwaemm256256v2
26.8426.9927.11T:schwaemm128128v2
30.8531.0631.07T:giftcofb128v1
30.9731.9032.26T:isapk128av20
41.5041.5642.47romulusn
44.4244.4944.60romulust
44.9845.1945.28T:isapk128v20
64.6565.3565.54romulusm
73.5173.5173.52T:tinyjambu128v2
83.0083.0083.00T:tinyjambu192v2
84.0584.5884.83T:isapxv20
91.5191.5191.51T:tinyjambu256v2
188.73190.96191.57T:elephant200v2
6382.016385.146394.78T:elephant176v2
7250.627257.717292.23T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.440.450.46aes256gcmv1
0.570.590.60T:aes128gcmv1
2.432.452.46aes128gcmv1
5.275.295.30ascon128av12
7.507.517.51ascon80pqv12
7.637.637.64ascon128v12
8.798.858.86T:xoodyakround3
12.4412.4412.45ascon128abi32v12
17.5017.5217.62T:grain128aeadv2
17.4717.5417.69T:schwaemm256128v2
18.3718.3818.40ascon128bi32v12
21.8121.8221.84T:isapa128av20
23.8123.9024.07T:schwaemm192192v2
24.3224.4424.54T:schwaemm256256v2
24.9524.9624.96T:isapa128v20
26.8226.9127.05T:schwaemm128128v2
30.9830.9931.02T:giftcofb128v1
32.3932.6132.73romulusn
38.5438.8040.12T:isapk128av20
43.5844.0544.14romulusm
57.4257.6557.73T:isapk128v20
59.7459.7659.77T:tinyjambu128v2
64.7464.7664.76T:tinyjambu192v2
68.7568.7668.77T:tinyjambu256v2
89.2089.2989.59romulust
112.95113.35113.47T:isapxv20
141.52143.19143.53T:elephant200v2
4764.184775.954778.08T:elephant176v2
5441.325443.215451.31T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.420.430.44aes256gcmv1
0.540.580.59T:aes128gcmv1
2.442.452.47aes128gcmv1
5.265.285.30ascon128av12
7.627.637.64ascon128v12
7.817.827.82ascon80pqv12
8.788.818.85T:xoodyakround3
12.4512.4712.49ascon128abi32v12
17.4617.4917.52T:schwaemm256128v2
17.5517.5617.61T:grain128aeadv2
18.5318.5418.54ascon128bi32v12
22.2122.2122.25T:isapa128av20
23.7723.8723.99T:schwaemm192192v2
24.4224.4524.50T:schwaemm256256v2
24.9424.9624.98T:isapa128v20
26.7126.7926.90T:schwaemm128128v2
31.1431.1731.17T:giftcofb128v1
32.5732.6732.90romulusn
38.6838.7440.34T:isapk128av20
43.6843.9644.08romulusm
57.6657.7257.95T:isapk128v20
59.8859.8959.89T:tinyjambu128v2
64.8764.8864.88T:tinyjambu192v2
68.8868.8968.89T:tinyjambu256v2
89.1489.4489.65romulust
112.67113.48113.69T:isapxv20
141.54143.23143.42T:elephant200v2
4763.444767.034771.66T:elephant176v2
5434.885449.525456.37T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.430.430.44aes256gcmv1
0.560.570.58T:aes128gcmv1
1.151.161.18aes128gcmv1
5.285.285.29ascon128av12
7.637.637.63ascon128v12
7.827.827.82ascon80pqv12
8.798.848.87T:xoodyakround3
12.4712.4712.48ascon128abi32v12
16.0516.0716.09T:isapa128v20
17.4517.5017.55T:schwaemm256128v2
17.5417.5617.59T:grain128aeadv2
17.7517.7517.76T:isapa128av20
18.5418.5418.54ascon128bi32v12
23.7723.8323.94T:schwaemm192192v2
24.3024.4524.58T:schwaemm256256v2
26.6426.7826.87T:schwaemm128128v2
31.1731.1731.17T:giftcofb128v1
31.7131.8232.13T:isapk128av20
32.6332.6732.68romulusn
43.6843.7544.03romulusm
44.0544.2744.39T:isapk128v20
44.4744.5144.55romulust
59.8859.8959.89T:tinyjambu128v2
64.8864.8864.88T:tinyjambu192v2
68.8968.8968.89T:tinyjambu256v2
83.9284.6684.93T:isapxv20
141.46143.13143.29T:elephant200v2
4766.154766.764773.37T:elephant176v2
5438.135442.625453.99T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.380.380.40T:aes128gcmv1
0.370.380.39aes256gcmv1
1.101.141.17aes128gcmv1
5.245.245.25ascon128av12
5.845.945.95T:xoodyakround3
7.497.507.51ascon80pqv12
7.497.507.50ascon128v12
12.4812.5012.54ascon128abi32v12
16.2516.2516.26T:isapa128v20
17.2817.3117.39T:schwaemm256128v2
17.4517.4817.53T:grain128aeadv2
17.8717.8717.88T:isapa128av20
18.1918.2518.32ascon128bi32v12
22.9322.9422.97romulusn
22.8822.9523.03romulusm
23.7223.7924.18T:schwaemm192192v2
24.3124.3524.41T:schwaemm256256v2
26.5626.6926.82T:schwaemm128128v2
31.2131.2331.29T:giftcofb128v1
30.9131.8732.24T:isapk128av20
43.0043.1743.25T:isapk128v20
44.3844.4244.45romulust
46.2446.2546.26T:tinyjambu256v2
46.2346.2646.27T:tinyjambu128v2
46.7446.7646.76T:tinyjambu192v2
83.9984.3484.65T:isapxv20
94.5295.6095.74T:elephant200v2
3153.173159.433161.40T:elephant176v2
3604.863608.743629.09T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.360.370.39T:aes128gcmv1
0.33?0.38?0.41?aes256gcmv1
1.111.151.18aes128gcmv1
5.225.255.27ascon128av12
5.845.955.98T:xoodyakround3
7.627.627.63ascon128v12
7.627.637.63ascon80pqv12
12.4712.5012.53ascon128abi32v12
16.2416.2516.28T:isapa128v20
17.2717.3317.40T:schwaemm256128v2
17.4317.4817.52T:grain128aeadv2
17.7417.7517.76T:isapa128av20
18.5618.5718.57ascon128bi32v12
22.9322.9923.05romulusm
22.9523.0123.01romulusn
23.7823.8924.02T:schwaemm192192v2
24.3024.3724.84T:schwaemm256256v2
26.4826.6726.84T:schwaemm128128v2
31.2231.2831.29T:giftcofb128v1
30.8731.7432.09T:isapk128av20
43.0043.0543.38T:isapk128v20
44.3844.4844.53romulust
46.2546.2646.26T:tinyjambu256v2
46.2646.2646.27T:tinyjambu128v2
46.7646.7646.76T:tinyjambu192v2
83.8084.7784.93T:isapxv20
94.5995.6396.11T:elephant200v2
3151.723152.283159.16T:elephant176v2
3613.183619.773625.59T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.370.370.38T:aes128gcmv1
0.35?0.39?0.41?aes256gcmv1
1.121.151.17aes128gcmv1
5.255.255.26ascon128av12
5.805.895.96T:xoodyakround3
7.627.627.62ascon128v12
7.627.637.63ascon80pqv12
12.5012.5012.51ascon128abi32v12
16.2316.2516.28T:isapa128v20
17.3117.3517.40T:schwaemm256128v2
17.4417.4817.52T:grain128aeadv2
17.7117.7517.79T:isapa128av20
18.5618.5718.57ascon128bi32v12
22.9522.9523.04romulusn
22.9522.9923.05romulusm
23.7823.8624.07T:schwaemm192192v2
24.2824.3424.56T:schwaemm256256v2
26.5226.6226.76T:schwaemm128128v2
30.7031.0231.21T:isapk128av20
31.2531.2831.29T:giftcofb128v1
43.1143.3543.52T:isapk128v20
44.3944.4944.50romulust
46.2646.2646.26T:tinyjambu256v2
46.2646.2646.27T:tinyjambu128v2
46.7646.7646.77T:tinyjambu192v2
83.9284.8785.03T:isapxv20
94.5695.7096.09T:elephant200v2
3153.133153.413160.21T:elephant176v2
3607.713613.363626.95T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.540.540.55aes256gcmv1
0.680.680.70T:aes128gcmv1
2.602.612.63aes128gcmv1
5.415.435.43ascon128av12
7.637.637.64ascon80pqv12
7.757.757.76ascon128v12
8.938.948.95T:xoodyakround3
12.7312.7412.75ascon128abi32v12
17.8617.8817.90T:grain128aeadv2
17.9517.9818.02T:schwaemm256128v2
18.7718.7718.79ascon128bi32v12
23.3623.3623.37T:isapa128av20
24.3624.4324.63T:schwaemm192192v2
25.0625.1525.45T:schwaemm256256v2
27.0127.1527.25T:schwaemm128128v2
31.2231.2431.26T:giftcofb128v1
32.7632.8332.83romulusn
36.6536.6636.66T:isapa128v20
42.9343.1144.39T:isapk128av20
43.8844.2644.30romulusm
60.2160.2260.22T:tinyjambu128v2
65.2465.2465.25T:tinyjambu192v2
69.2669.2669.27T:tinyjambu256v2
90.4590.6490.83romulust
97.8898.0198.28T:isapk128v20
144.62146.14146.20T:elephant200v2
186.38186.53186.72T:isapxv20
4802.124803.044811.34T:elephant176v2
5506.825507.915517.22T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.520.520.53aes256gcmv1
0.650.660.68T:aes128gcmv1
2.622.632.64aes128gcmv1
5.415.415.44ascon128av12
7.757.757.75ascon128v12
7.937.937.94ascon80pqv12
8.878.908.94T:xoodyakround3
12.7612.7612.78ascon128abi32v12
17.8717.8917.92T:grain128aeadv2
18.0518.0818.12T:schwaemm256128v2
19.0019.0019.00ascon128bi32v12
23.7223.7223.74T:isapa128av20
24.3324.3524.41T:schwaemm192192v2
25.1425.1725.18T:schwaemm256256v2
27.1327.1827.33T:schwaemm128128v2
31.3831.4131.42T:giftcofb128v1
32.8633.0633.16romulusn
36.6536.6636.68T:isapa128v20
43.0043.0843.68T:isapk128av20
44.1344.4544.54romulusm
60.3460.3460.34T:tinyjambu128v2
65.3765.3765.37T:tinyjambu192v2
69.3869.3969.39T:tinyjambu256v2
90.5690.6590.91romulust
97.8798.1098.17T:isapk128v20
144.68146.12146.20T:elephant200v2
186.02186.68187.13T:isapxv20
4801.044803.144809.63T:elephant176v2
5496.815501.975509.91T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.510.520.52aes256gcmv1
0.660.660.67T:aes128gcmv1
1.321.321.33aes128gcmv1
5.415.415.41ascon128av12
7.757.757.75ascon128v12
7.937.937.93ascon80pqv12
8.898.918.93T:xoodyakround3
12.7612.7612.76ascon128abi32v12
17.8717.8817.93T:grain128aeadv2
18.0218.0618.09T:schwaemm256128v2
18.6018.6018.62T:isapa128av20
19.0019.0019.00ascon128bi32v12
22.0222.0222.04T:isapa128v20
24.3324.3424.37T:schwaemm192192v2
25.2025.2925.48T:schwaemm256256v2
27.1127.1727.23T:schwaemm128128v2
31.3831.4131.41T:giftcofb128v1
32.8833.0733.08romulusn
33.5333.6234.43T:isapk128av20
44.0544.3644.54romulusm
45.7545.7745.82romulust
60.3460.3460.34T:tinyjambu128v2
65.1965.2465.36T:isapk128v20
65.3765.3765.37T:tinyjambu192v2
69.3869.3969.39T:tinyjambu256v2
121.61122.18122.26T:isapxv20
144.66146.14146.26T:elephant200v2
4801.494803.894811.60T:elephant176v2
5496.635501.015512.64T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
3.913.954.02aes256gcmv1
4.144.194.22T:aes128gcmv1
6.006.056.43aes128gcmv1
8.418.729.04ascon128av12
10.3810.3810.63ascon80pqv12
10.4510.4510.68ascon128v12
12.8312.8812.94T:xoodyakround3
19.2919.2919.80ascon128abi32v12
25.5225.5925.81T:grain128aeadv2
27.6727.6728.79ascon128bi32v12
29.9930.1930.50T:schwaemm256128v2
35.2235.4135.98T:schwaemm128128v2
36.6836.7136.79T:giftcofb128v1
38.3838.6838.73romulusn
38.5638.8238.95T:schwaemm192192v2
40.5540.6941.00T:schwaemm256256v2
50.6150.7850.94romulusm
58.3358.3558.64T:isapa128av20
70.5270.5370.94T:tinyjambu128v2
76.1876.1876.64T:tinyjambu192v2
80.6480.6481.08T:tinyjambu256v2
120.88121.01121.08romulust
132.62133.23138.45T:isapk128av20
204.95206.38206.70T:elephant200v2
305.65305.76305.76T:isapa128v20
1013.991014.341016.18T:isapk128v20
1851.701854.311857.34T:isapxv20
5980.075982.525984.48T:elephant176v2
7326.207373.407382.34T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
3.90?4.03?4.62?aes256gcmv1
4.154.204.23T:aes128gcmv1
6.216.336.70aes128gcmv1
8.538.598.95ascon128av12
10.4510.4510.82ascon128v12
10.5410.5510.63ascon80pqv12
12.8712.9112.92T:xoodyakround3
19.2719.3419.66ascon128abi32v12
25.2025.2625.37T:grain128aeadv2
29.5529.5529.57ascon128bi32v12
30.2930.5030.73T:schwaemm256128v2
35.5835.9836.30T:schwaemm128128v2
36.8036.8236.83T:giftcofb128v1
38.3838.4538.45romulusn
38.4938.9339.19T:schwaemm192192v2
40.4740.8240.99T:schwaemm256256v2
51.2251.3551.50romulusm
57.8558.1158.37T:isapa128av20
70.6570.6570.80T:tinyjambu128v2
76.3276.3276.32T:tinyjambu192v2
80.7980.7980.79T:tinyjambu256v2
121.09121.34121.52romulust
133.93138.28138.46T:isapk128av20
205.39206.13206.43T:elephant200v2
305.70306.17306.25T:isapa128v20
1014.751015.291015.70T:isapk128v20
1851.821852.121852.92T:isapxv20
5978.785979.875984.70T:elephant176v2
7371.527380.127384.09T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
3.903.933.95aes256gcmv1
4.104.204.23T:aes128gcmv1
4.704.844.93aes128gcmv1
8.318.418.45ascon128av12
10.4510.4510.45ascon128v12
10.5410.5410.54ascon80pqv12
12.9813.4413.61T:xoodyakround3
19.2419.3419.34ascon128abi32v12
25.0525.2125.40T:grain128aeadv2
29.5529.5629.56ascon128bi32v12
30.2230.5530.90T:schwaemm256128v2
35.3035.7436.16T:schwaemm128128v2
36.7936.8036.83T:giftcofb128v1
37.9137.9538.13T:isapa128av20
38.3538.4338.45romulusn
38.9139.2039.49T:schwaemm192192v2
40.7340.9141.27T:schwaemm256256v2
51.2151.5051.63romulusm
70.6570.6570.66T:tinyjambu128v2
75.3175.4175.98romulust
76.3276.3276.32T:tinyjambu192v2
80.7980.7980.79T:tinyjambu256v2
84.2285.0388.04T:isapk128av20
158.95159.34159.38T:isapa128v20
204.60206.15206.41T:elephant200v2
538.89539.53540.23T:isapk128v20
968.23970.38971.13T:isapxv20
5982.915984.195986.27T:elephant176v2
7364.817371.947374.83T:elephant160v2

amd64; Raptor Cove (b06a2); 2023 Intel Core i7-13700H, P cores; 6 x 4800MHz; raptor, supercop-20231107
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.411.421.43T:aes128gcmv1
1.461.541.56aes256gcmv1
6.456.516.59ascon128av12
9.829.879.90ascon80pqv12
9.959.9910.02ascon128v12
12.4012.4412.54T:schwaemm256128v2
12.8513.0213.18ascon128abi32v12
13.2113.2513.29T:xoodyakround3
16.3916.4816.55T:schwaemm192192v2
17.2817.3717.43T:schwaemm256256v2
18.2218.2718.30T:schwaemm128128v2
19.0919.1219.18ascon128bi32v12
23.1523.1923.24T:grain128aeadv2
33.0233.0733.12T:giftcofb128v1
38.7338.7538.81romulusn
39.2939.4039.58T:isapa128v20
39.4139.4939.54T:isapa128av20
47.4548.0048.14T:isapk128av20
62.1762.2262.28romulusm
64.4664.8265.24T:isapk128v20
65.4665.6165.70T:tinyjambu128v2
77.9978.0478.14T:tinyjambu192v2
83.8583.8984.03T:tinyjambu256v2
129.64129.77129.86romulust
161.35161.93162.57T:isapxv20
165.95167.86168.63T:elephant200v2
5699.425706.575732.88T:elephant176v2
5894.335897.405908.06T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.201.211.25T:aes128gcmv1
1.401.411.42aes256gcmv1
6.416.466.47ascon128av12
9.599.619.63ascon80pqv12
9.679.729.89ascon128v12
12.4412.4812.56T:schwaemm256128v2
13.0513.1913.31ascon128abi32v12
13.1613.2313.26T:xoodyakround3
16.4016.4816.51T:schwaemm192192v2
17.2717.3617.43T:schwaemm256256v2
18.2418.2718.34T:schwaemm128128v2
19.1819.2619.31ascon128bi32v12
22.5122.5322.57T:grain128aeadv2
33.0633.0833.13T:giftcofb128v1
38.8038.8538.94romulusn
39.2239.3239.48T:isapa128v20
39.4039.4739.57T:isapa128av20
47.3947.7248.06T:isapk128av20
62.1562.2862.35romulusm
64.1864.8465.65T:isapk128v20
65.4265.4665.49T:tinyjambu128v2
77.8477.9377.96T:tinyjambu192v2
84.0184.0784.10T:tinyjambu256v2
129.64129.75130.19romulust
163.38163.93164.52T:isapxv20
168.55169.18169.92T:elephant200v2
5697.515706.965734.97T:elephant176v2
5890.705895.725902.89T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.191.201.26T:aes128gcmv1
1.401.411.42aes256gcmv1
6.436.456.50ascon128av12
9.569.599.65ascon80pqv12
9.669.819.91ascon128v12
12.4512.5112.59T:schwaemm256128v2
13.0713.1613.19ascon128abi32v12
13.1113.1813.26T:xoodyakround3
16.3316.4316.47T:schwaemm192192v2
17.3017.3617.40T:schwaemm256256v2
18.2518.2818.33T:schwaemm128128v2
19.0919.1419.19ascon128bi32v12
19.4819.6119.72T:isapa128v20
22.5022.5522.58T:grain128aeadv2
26.2826.3826.48T:isapa128av20
31.8032.3732.41T:isapk128av20
33.0733.1633.23T:giftcofb128v1
38.8038.8538.92romulusn
40.5440.5840.68T:isapk128v20
44.6044.6844.87romulust
62.1962.2562.32romulusm
65.4165.4465.75T:tinyjambu128v2
77.8877.9377.98T:tinyjambu192v2
83.8483.8883.94T:tinyjambu256v2
98.7698.8998.96T:isapxv20
167.61168.41169.03T:elephant200v2
5698.695704.355714.10T:elephant176v2
5891.855894.495896.83T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.850.860.87T:aes128gcmv1
0.920.930.93aes256gcmv1
6.476.496.53ascon128av12
9.769.799.82ascon80pqv12
9.749.849.90ascon128v12
10.1710.2010.24T:xoodyakround3
12.3212.3612.39T:schwaemm256128v2
13.3113.3413.37ascon128abi32v12
16.3416.4416.46T:schwaemm192192v2
17.2617.3317.40T:schwaemm256256v2
18.2018.2318.26T:schwaemm128128v2
19.2519.2819.32ascon128bi32v12
23.0623.1523.19T:grain128aeadv2
29.4229.5029.58T:isapa128v20
31.1031.1331.16romulusn
32.7232.7732.82T:isapa128av20
32.9432.9833.02T:giftcofb128v1
40.3440.5940.85T:isapk128av20
42.8142.8742.93romulusm
52.3352.9053.16T:isapk128v20
53.5653.6253.66T:tinyjambu128v2
61.0261.0461.11T:tinyjambu192v2
63.3163.3363.48T:tinyjambu256v2
87.0387.1487.19romulust
124.07124.41126.80T:elephant200v2
128.93130.09130.44T:isapxv20
4258.614268.094273.79T:elephant176v2
4420.224423.264428.60T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.750.770.78T:aes128gcmv1
0.850.860.86aes256gcmv1
6.436.456.46ascon128av12
9.709.739.75ascon80pqv12
9.729.799.82ascon128v12
10.1210.1510.18T:xoodyakround3
12.3312.3712.42T:schwaemm256128v2
13.1513.2513.30ascon128abi32v12
16.3216.3916.44T:schwaemm192192v2
17.2117.2617.38T:schwaemm256256v2
18.1818.2118.23T:schwaemm128128v2
19.2419.2819.31ascon128bi32v12
22.8022.8622.88T:grain128aeadv2
29.4429.5229.60T:isapa128v20
31.1231.1431.18romulusn
32.7132.7432.81T:isapa128av20
33.0033.0633.10T:giftcofb128v1
40.1940.4540.65T:isapk128av20
42.8842.9443.08romulusm
52.3752.8353.08T:isapk128v20
53.4853.5153.53T:tinyjambu128v2
60.9660.9861.01T:tinyjambu192v2
63.4063.4263.45T:tinyjambu256v2
86.9787.0387.14romulust
123.70124.46125.42T:elephant200v2
131.15131.39132.01T:isapxv20
4260.174268.674273.65T:elephant176v2
4418.164423.964432.43T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.750.750.77T:aes128gcmv1
0.850.850.86aes256gcmv1
6.446.456.46ascon128av12
9.709.749.76ascon80pqv12
9.709.779.82ascon128v12
10.1410.1910.22T:xoodyakround3
12.3412.3712.43T:schwaemm256128v2
13.2313.2813.32ascon128abi32v12
16.3316.3816.44T:schwaemm192192v2
17.2717.3417.43T:schwaemm256256v2
18.2118.2318.27T:schwaemm128128v2
19.2619.2919.33ascon128bi32v12
19.5419.5819.66T:isapa128v20
22.7722.8022.82T:grain128aeadv2
26.1426.2026.25T:isapa128av20
31.1231.1531.17romulusn
32.2232.3232.68T:isapk128av20
32.9833.0133.03T:giftcofb128v1
40.5340.5940.71T:isapk128v20
42.8642.8943.00romulusm
44.5144.5844.67romulust
53.4953.5453.62T:tinyjambu128v2
60.9660.9861.10T:tinyjambu192v2
63.3163.3463.44T:tinyjambu256v2
98.7898.8698.95T:isapxv20
125.10125.80126.87T:elephant200v2
4261.054266.314275.95T:elephant176v2
4421.384427.534435.52T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.290.310.32T:aes128gcmv1
0.28?0.31?0.32?aes256gcmv1
6.436.456.47ascon128av12
7.077.167.20T:xoodyakround3
9.689.729.75ascon80pqv12
9.739.769.78ascon128v12
12.1812.2512.31T:schwaemm256128v2
13.3113.3413.38ascon128abi32v12
16.2616.3216.39T:schwaemm192192v2
17.1717.3317.37T:schwaemm256256v2
18.1518.1718.20T:schwaemm128128v2
19.3719.4919.87ascon128bi32v12
19.5619.6219.73T:isapa128v20
22.9723.0823.12T:grain128aeadv2
23.4523.4923.54romulusn
23.4623.5023.57romulusm
26.0226.1326.32T:isapa128av20
32.2632.3532.46T:isapk128av20
32.9432.9733.08T:giftcofb128v1
40.3640.4640.53T:isapk128v20
41.3741.4141.46T:tinyjambu128v2
42.5842.6042.63T:tinyjambu256v2
43.8343.8643.95T:tinyjambu192v2
44.4544.5444.62romulust
81.7481.8783.27T:elephant200v2
96.6398.29100.07T:isapxv20
2816.572817.822827.75T:elephant176v2
2945.412949.742954.31T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.290.300.32T:aes128gcmv1
0.300.310.33aes256gcmv1
6.446.466.49ascon128av12
7.117.177.21T:xoodyakround3
9.749.769.79ascon128v12
9.729.799.83ascon80pqv12
12.1812.2512.30T:schwaemm256128v2
13.3213.3813.41ascon128abi32v12
16.2516.3416.54T:schwaemm192192v2
17.2017.2617.36T:schwaemm256256v2
18.1218.1618.21T:schwaemm128128v2
19.3219.3819.50ascon128bi32v12
19.5919.6619.73T:isapa128v20
23.0323.1223.18T:grain128aeadv2
23.4523.4923.74romulusm
23.4523.5023.53romulusn
25.9926.0326.11T:isapa128av20
32.2232.3032.41T:isapk128av20
32.9032.9533.00T:giftcofb128v1
40.4140.5040.54T:isapk128v20
41.3541.3941.42T:tinyjambu128v2
42.7342.7842.82T:tinyjambu256v2
43.8343.8743.92T:tinyjambu192v2
44.4644.5244.73romulust
83.2783.7484.15T:elephant200v2
98.6998.8198.93T:isapxv20
2815.732820.052828.84T:elephant176v2
2947.532949.052955.53T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.300.310.32T:aes128gcmv1
0.300.310.33aes256gcmv1
6.446.466.49ascon128av12
7.097.147.21T:xoodyakround3
9.769.789.81ascon128v12
9.749.799.82ascon80pqv12
12.2112.2612.30T:schwaemm256128v2
13.2813.3313.40ascon128abi32v12
16.2816.3416.36T:schwaemm192192v2
17.2017.3217.39T:schwaemm256256v2
18.1218.1518.18T:schwaemm128128v2
19.3619.4019.49ascon128bi32v12
19.5119.5819.67T:isapa128v20
22.9723.0323.09T:grain128aeadv2
23.4323.4923.52romulusn
23.4123.5023.57romulusm
25.9926.0526.13T:isapa128av20
32.2832.3632.43T:isapk128av20
32.9433.0333.09T:giftcofb128v1
40.4140.5040.56T:isapk128v20
41.3441.3841.46T:tinyjambu128v2
42.5642.5942.68T:tinyjambu256v2
43.8943.9944.44T:tinyjambu192v2
44.4444.5344.59romulust
81.3883.5983.84T:elephant200v2
98.8398.9299.05T:isapxv20
2818.372823.732832.34T:elephant176v2
2946.152948.332954.58T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.970.980.98T:aes128gcmv1
1.051.051.06aes256gcmv1
6.646.656.66ascon128av12
9.919.939.97ascon80pqv12
9.869.969.99ascon128v12
10.2910.3110.34T:xoodyakround3
12.7412.7812.82T:schwaemm256128v2
13.5913.6413.70ascon128abi32v12
16.8016.8116.84T:schwaemm192192v2
17.8017.8417.86T:schwaemm256256v2
18.4318.4518.48T:schwaemm128128v2
19.6119.6419.67ascon128bi32v12
23.4723.4923.53T:grain128aeadv2
31.3931.4231.44romulusn
33.2333.3033.32T:giftcofb128v1
34.7734.8434.87T:isapa128av20
42.8842.9543.01T:isapa128v20
43.1743.2143.26romulusm
45.6745.8345.85T:isapk128av20
54.1054.1254.21T:tinyjambu128v2
61.5961.6261.68T:tinyjambu192v2
63.8663.8763.88T:tinyjambu256v2
88.3188.3888.49romulust
91.4691.6891.75T:isapk128v20
127.55128.33129.05T:elephant200v2
217.16217.28217.45T:isapxv20
4291.274302.564315.01T:elephant176v2
4469.054471.184473.27T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.880.890.91T:aes128gcmv1
0.990.991.00aes256gcmv1
6.606.626.64ascon128av12
9.829.859.89ascon80pqv12
9.879.939.99ascon128v12
10.2410.2610.29T:xoodyakround3
12.7312.7712.80T:schwaemm256128v2
13.5713.5913.63ascon128abi32v12
16.7116.7616.80T:schwaemm192192v2
17.7317.8017.85T:schwaemm256256v2
18.4418.4518.50T:schwaemm128128v2
19.5919.6319.66ascon128bi32v12
23.1523.1823.20T:grain128aeadv2
31.4331.4731.53romulusn
33.2733.3133.41T:giftcofb128v1
34.7834.8334.87T:isapa128av20
42.8542.9142.95T:isapa128v20
43.2643.3143.35romulusm
45.7345.7945.84T:isapk128av20
54.0154.0254.03T:tinyjambu128v2
61.4861.5061.54T:tinyjambu192v2
63.9763.9864.03T:tinyjambu256v2
88.3488.4288.45romulust
91.4091.4791.68T:isapk128v20
126.35128.07128.39T:elephant200v2
219.75219.79219.96T:isapxv20
4292.034298.944304.51T:elephant176v2
4469.264470.324472.80T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.880.890.91T:aes128gcmv1
0.990.991.00aes256gcmv1
6.596.616.63ascon128av12
9.859.879.88ascon80pqv12
9.859.889.94ascon128v12
10.2510.2810.30T:xoodyakround3
12.7112.7312.77T:schwaemm256128v2
13.5513.5913.61ascon128abi32v12
16.7516.8016.87T:schwaemm192192v2
17.7417.7817.80T:schwaemm256256v2
18.4318.4618.49T:schwaemm128128v2
19.5919.6219.65ascon128bi32v12
23.1123.1523.18T:grain128aeadv2
26.3726.4026.51T:isapa128v20
27.3327.3727.41T:isapa128av20
31.4631.4931.54romulusn
33.2633.3333.37T:giftcofb128v1
35.6335.7735.85T:isapk128av20
43.2343.2643.29romulusm
45.8545.8845.92romulust
53.9954.0154.12T:tinyjambu128v2
61.0961.1161.13T:isapk128v20
61.5061.5161.65T:tinyjambu192v2
63.8763.8963.90T:tinyjambu256v2
126.74127.73127.93T:elephant200v2
144.06144.50144.64T:isapxv20
4291.924294.454304.38T:elephant176v2
4468.604472.024482.56T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.645.695.80T:aes128gcmv1
5.895.956.13aes256gcmv1
9.8910.0710.27ascon128av12
12.8812.9513.10ascon128v12
12.9413.0613.30ascon80pqv12
14.7714.8915.29T:xoodyakround3
20.3420.4820.79ascon128abi32v12
20.6921.0221.43T:schwaemm256128v2
23.6623.7724.24T:schwaemm128128v2
26.5026.7627.12ascon128bi32v12
27.2327.4827.96T:schwaemm192192v2
28.4128.8028.95T:schwaemm256256v2
31.2631.4031.58T:grain128aeadv2
37.7738.0138.25romulusn
39.4639.5539.66T:giftcofb128v1
50.4550.5950.87romulusm
65.4865.8266.73T:tinyjambu128v2
74.0374.2674.53T:tinyjambu192v2
76.8777.2377.69T:tinyjambu256v2
81.8081.9882.29T:isapa128av20
117.78117.91118.33romulust
157.30157.98161.16T:isapk128av20
176.65180.67181.79T:elephant200v2
350.02350.90352.19T:isapa128v20
967.95968.98979.95T:isapk128v20
2191.302192.262193.93T:isapxv20
5336.235339.545350.16T:elephant176v2
5977.365979.616012.68T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.425.485.55T:aes128gcmv1
5.475.515.55aes256gcmv1
9.9110.0010.20ascon128av12
12.8913.0013.09ascon128v12
12.9313.0913.39ascon80pqv12
14.7014.8614.98T:xoodyakround3
20.2320.5220.73ascon128abi32v12
20.7120.9921.63T:schwaemm256128v2
23.7123.7724.21T:schwaemm128128v2
26.6226.8327.08ascon128bi32v12
27.2927.4627.83T:schwaemm192192v2
28.0628.7729.40T:schwaemm256256v2
31.2131.2931.38T:grain128aeadv2
38.3938.4938.63romulusn
39.6039.7640.00T:giftcofb128v1
52.6052.8253.02romulusm
65.6265.9266.39T:tinyjambu128v2
74.1674.4274.71T:tinyjambu192v2
76.5876.9177.26T:tinyjambu256v2
81.8482.0982.35T:isapa128av20
117.65118.44119.05romulust
157.28157.71158.59T:isapk128av20
176.30179.95180.47T:elephant200v2
350.55351.49352.10T:isapa128v20
967.96969.08976.85T:isapk128v20
2225.232228.522229.22T:isapxv20
5334.095336.465343.90T:elephant176v2
5976.435978.796009.52T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.415.455.53T:aes128gcmv1
5.455.545.66aes256gcmv1
9.919.9910.05ascon128av12
12.8212.8913.08ascon128v12
12.9313.0613.25ascon80pqv12
14.7714.8715.27T:xoodyakround3
20.3420.5820.74ascon128abi32v12
20.5221.1221.27T:schwaemm256128v2
23.6823.8324.02T:schwaemm128128v2
26.7927.0027.12ascon128bi32v12
27.3027.5728.02T:schwaemm192192v2
27.9828.1728.58T:schwaemm256256v2
31.1431.2331.38T:grain128aeadv2
38.3438.4738.73romulusn
39.7439.7739.90T:giftcofb128v1
52.5552.6852.87romulusm
54.2654.5954.97T:isapa128av20
65.6265.9166.54T:tinyjambu128v2
74.2374.3874.68T:tinyjambu192v2
74.6375.2775.57romulust
76.7277.1277.32T:tinyjambu256v2
101.86102.11102.91T:isapk128av20
177.53178.39179.03T:elephant200v2
182.99183.29183.97T:isapa128v20
516.41516.77517.31T:isapk128v20
1165.321166.021166.77T:isapxv20
5340.135372.215467.98T:elephant176v2
5973.485977.235979.30T:elephant160v2

amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,1f626960,5600000, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.51?0.53?0.57?T:aes128gcmv1
0.620.630.66T:aes256gcmv1
1.531.541.55aes256gcmv1
6.546.586.60ascon128av12
9.809.859.88ascon128v12
9.689.9910.05ascon80pqv12
13.0413.0613.09ascon128abi32v12
13.3813.4213.45T:schwaemm256128v2
15.2715.4315.48T:xoodyakround3
17.7217.7817.83T:schwaemm192192v2
18.8318.9418.99T:schwaemm256256v2
19.8319.8619.90T:schwaemm128128v2
19.8819.9320.03ascon128bi32v12
24.1424.1724.24T:grain128aeadv2
38.4238.4838.56romulusn
39.0439.3639.75T:isapa128v20
39.2539.5439.88T:isapa128av20
39.8139.8539.87T:giftcofb128v1
49.2449.4149.79T:isapk128av20
54.9955.0555.12T:tinyjambu128v2
61.7461.7961.84romulusm
66.5866.6566.80T:tinyjambu192v2
66.2067.8368.92T:isapk128v20
71.1671.2371.29T:tinyjambu256v2
109.90110.09110.63T:elephant200v2
119.33119.45119.53romulust
121.01121.44121.76T:isapxv20
5775.675794.555809.11T:elephant176v2
5890.045892.685895.31T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.48?0.52?0.54?T:aes128gcmv1
0.55?0.60?0.62?T:aes256gcmv1
1.411.421.43aes256gcmv1
6.556.606.68ascon128av12
9.809.829.87ascon128v12
9.699.8510.06ascon80pqv12
13.0313.0913.15ascon128abi32v12
13.3413.4113.45T:schwaemm256128v2
15.0915.1515.24T:xoodyakround3
17.6417.7017.75T:schwaemm192192v2
18.8818.9219.10T:schwaemm256256v2
19.7619.8119.83T:schwaemm128128v2
20.0220.1320.22ascon128bi32v12
23.6423.6923.73T:grain128aeadv2
38.5538.5938.64romulusn
39.1039.3639.89T:isapa128v20
39.6739.7839.83T:isapa128av20
39.8039.8339.88T:giftcofb128v1
48.5549.0549.88T:isapk128av20
54.8454.9255.02T:tinyjambu128v2
61.7161.8862.00romulusm
64.5266.1366.88T:isapk128v20
66.5966.6266.66T:tinyjambu192v2
70.6270.7271.04T:tinyjambu256v2
110.40110.83110.95T:elephant200v2
119.32119.42119.47romulust
119.76120.03120.42T:isapxv20
5774.445792.615801.29T:elephant176v2
5887.655890.955894.71T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.510.520.54T:aes128gcmv1
0.590.610.62T:aes256gcmv1
1.411.421.44aes256gcmv1
6.536.606.68ascon128av12
9.699.759.89ascon80pqv12
9.759.809.85ascon128v12
13.0413.1113.16ascon128abi32v12
13.3813.4313.49T:schwaemm256128v2
15.1815.2215.31T:xoodyakround3
17.6617.7017.77T:schwaemm192192v2
18.8718.9419.37T:schwaemm256256v2
19.3919.4719.53T:isapa128v20
19.7919.8219.86T:schwaemm128128v2
20.0320.0620.13ascon128bi32v12
23.6423.6723.70T:grain128aeadv2
26.2726.3726.42T:isapa128av20
32.9733.1833.39T:isapk128av20
38.5838.6338.67romulusn
39.7939.8539.89T:giftcofb128v1
41.2741.3541.40romulust
40.7541.3842.32T:isapk128v20
54.7854.8955.05T:tinyjambu128v2
61.6761.8261.93romulusm
66.4166.5066.63T:tinyjambu192v2
70.4070.5271.40T:tinyjambu256v2
72.7973.0473.40T:isapxv20
109.94110.15111.14T:elephant200v2
5763.085797.595827.47T:elephant176v2
5888.585891.925894.56T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.360.380.39T:aes128gcmv1
0.40?0.43?0.45?T:aes256gcmv1
0.910.920.93aes256gcmv1
6.526.566.62ascon128av12
9.669.779.86ascon80pqv12
9.779.829.83ascon128v12
11.4411.4711.52T:xoodyakround3
13.2813.3713.45ascon128abi32v12
13.3513.3813.41T:schwaemm256128v2
17.6117.6517.72T:schwaemm192192v2
18.8719.0219.09T:schwaemm256256v2
19.8019.8319.89T:schwaemm128128v2
20.1320.2220.24ascon128bi32v12
24.1624.1924.24T:grain128aeadv2
29.2529.4229.67T:isapa128v20
30.8730.8930.92romulusn
32.4432.5132.58T:isapa128av20
39.7539.7839.82T:giftcofb128v1
41.6841.8342.24T:isapk128av20
42.4842.5242.56romulusm
45.0345.0845.10T:tinyjambu128v2
52.0652.1152.18T:tinyjambu192v2
53.8153.8553.99T:tinyjambu256v2
54.7156.1056.30T:isapk128v20
80.3580.4080.46romulust
82.7482.8382.91T:elephant200v2
96.9597.1497.52T:isapxv20
4317.844332.784344.54T:elephant176v2
4416.174417.174418.78T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.34?0.37?0.38?T:aes128gcmv1
0.400.410.42T:aes256gcmv1
0.850.860.87aes256gcmv1
6.516.546.62ascon128av12
9.639.719.81ascon80pqv12
9.759.779.80ascon128v12
11.3811.4111.46T:xoodyakround3
13.2513.3113.35T:schwaemm256128v2
13.3013.3413.39ascon128abi32v12
17.6317.7017.79T:schwaemm192192v2
18.8718.9719.07T:schwaemm256256v2
19.7919.8319.84T:schwaemm128128v2
20.1420.1920.25ascon128bi32v12
23.8823.9724.02T:grain128aeadv2
29.4029.5829.72T:isapa128v20
30.9130.9430.97romulusn
32.9433.0233.08T:isapa128av20
39.7639.8039.83T:giftcofb128v1
41.6141.8242.15T:isapk128av20
42.5442.5842.65romulusm
44.9144.9645.02T:tinyjambu128v2
52.1152.1552.17T:tinyjambu192v2
53.7453.8253.88T:tinyjambu256v2
52.9553.9854.73T:isapk128v20
80.4180.4580.51romulust
82.3582.9083.19T:elephant200v2
96.1796.6097.22T:isapxv20
4326.754343.274351.94T:elephant176v2
4414.554417.284418.98T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.370.380.39T:aes128gcmv1
0.400.420.42T:aes256gcmv1
0.850.860.87aes256gcmv1
6.526.586.65ascon128av12
9.569.659.72ascon80pqv12
9.769.789.80ascon128v12
11.4111.4411.47T:xoodyakround3
13.2813.3213.37ascon128abi32v12
13.3113.3513.38T:schwaemm256128v2
17.6517.6817.72T:schwaemm192192v2
18.8719.0319.13T:schwaemm256256v2
19.4519.4919.53T:isapa128v20
19.8019.8319.88T:schwaemm128128v2
20.0620.1120.15ascon128bi32v12
23.9223.9524.00T:grain128aeadv2
26.1226.3326.39T:isapa128av20
30.9030.9230.96romulusn
33.1433.3233.69T:isapk128av20
39.7839.8039.84T:giftcofb128v1
41.3341.3841.47romulust
40.6541.4142.09T:isapk128v20
42.5242.5542.61romulusm
44.8844.9345.07T:tinyjambu128v2
52.0752.1652.22T:tinyjambu192v2
53.5353.5953.72T:tinyjambu256v2
72.5973.1073.30T:isapxv20
82.9983.5183.60T:elephant200v2
4322.304343.304351.80T:elephant176v2
4414.974417.594419.13T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.22?0.24?0.25?T:aes256gcmv1
0.230.240.25T:aes128gcmv1
0.290.310.32aes256gcmv1
6.416.536.58ascon128av12
7.587.637.69T:xoodyakround3
9.569.6310.33ascon80pqv12
9.709.739.78ascon128v12
13.2813.3113.39T:schwaemm256128v2
13.5113.6013.73ascon128abi32v12
17.6017.6617.73T:schwaemm192192v2
18.7318.9320.01T:schwaemm256256v2
19.4619.5119.57T:isapa128v20
19.7919.8119.85T:schwaemm128128v2
20.2020.4320.56ascon128bi32v12
23.2123.2423.28romulusn
23.2323.2923.36romulusm
24.1124.1624.20T:grain128aeadv2
26.3126.3826.44T:isapa128av20
32.8533.0433.24T:isapk128av20
34.8234.8634.90T:tinyjambu128v2
36.2836.3636.52T:tinyjambu256v2
37.5137.5837.67T:tinyjambu192v2
39.7739.8339.86T:giftcofb128v1
41.3141.3941.44romulust
40.3741.7642.58T:isapk128v20
55.6555.8155.92T:elephant200v2
72.5572.8574.06T:isapxv20
2848.502865.902874.36T:elephant176v2
2940.012942.472943.94T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.220.230.24T:aes128gcmv1
0.21?0.23?0.25?T:aes256gcmv1
0.28?0.31?0.32?aes256gcmv1
6.446.506.59ascon128av12
7.587.677.73T:xoodyakround3
9.599.669.86ascon80pqv12
9.699.739.76ascon128v12
13.2113.2713.39T:schwaemm256128v2
13.5413.6413.71ascon128abi32v12
17.6317.7017.77T:schwaemm192192v2
18.7218.8220.43T:schwaemm256256v2
19.4219.5019.55T:isapa128v20
19.7619.7919.83T:schwaemm128128v2
20.0520.1120.21ascon128bi32v12
23.2223.2923.31romulusn
23.2723.3123.35romulusm
24.0424.0924.18T:grain128aeadv2
26.2826.4026.60T:isapa128av20
32.6633.0833.88T:isapk128av20
34.9435.0135.05T:tinyjambu128v2
36.2936.3536.59T:tinyjambu256v2
37.5737.6337.71T:tinyjambu192v2
39.7139.7739.84T:giftcofb128v1
41.3341.4141.49romulust
40.9241.7942.98T:isapk128v20
55.6355.8556.55T:elephant200v2
72.3772.6573.04T:isapxv20
2846.502856.962874.57T:elephant176v2
2941.302943.062945.04T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.21?0.22?0.24?T:aes256gcmv1
0.21?0.23?0.25?T:aes128gcmv1
0.290.300.31aes256gcmv1
6.426.496.56ascon128av12
7.557.677.73T:xoodyakround3
9.619.659.68ascon80pqv12
9.729.739.78ascon128v12
13.2213.3113.43T:schwaemm256128v2
13.5113.5713.65ascon128abi32v12
17.6217.6817.82T:schwaemm192192v2
18.7518.8420.20T:schwaemm256256v2
19.4219.4819.55T:isapa128v20
19.7519.7619.83T:schwaemm128128v2
20.0220.1320.22ascon128bi32v12
23.2123.2623.31romulusn
23.2723.3223.41romulusm
24.0424.0824.13T:grain128aeadv2
26.1426.2726.39T:isapa128av20
33.1133.5434.05T:isapk128av20
35.0135.0835.11T:tinyjambu128v2
36.2536.4236.56T:tinyjambu256v2
37.5637.6237.72T:tinyjambu192v2
39.7739.8139.85T:giftcofb128v1
40.3241.0542.55T:isapk128v20
41.2541.3141.38romulust
55.6955.7456.13T:elephant200v2
72.2672.5573.47T:isapxv20
2858.682878.902886.10T:elephant176v2
2940.632943.072944.64T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.720.730.74T:aes128gcmv1
0.790.790.81T:aes256gcmv1
1.061.061.07aes256gcmv1
6.666.706.75ascon128av12
9.749.839.95ascon80pqv12
9.919.959.95ascon128v12
11.5911.6111.89T:xoodyakround3
13.6013.6413.67ascon128abi32v12
13.7513.7813.82T:schwaemm256128v2
18.0618.1018.19T:schwaemm192192v2
19.5219.5320.70T:schwaemm256256v2
20.0920.1220.13T:schwaemm128128v2
20.4320.4520.47ascon128bi32v12
24.5324.5924.64T:grain128aeadv2
31.1531.1731.19romulusn
36.1936.2536.43T:isapa128av20
40.1240.1640.18T:giftcofb128v1
42.8342.8442.89romulusm
42.6842.9142.98T:isapa128v20
45.4545.5045.54T:tinyjambu128v2
46.6146.8247.04T:isapk128av20
52.6852.7452.76T:tinyjambu192v2
54.3254.4154.64T:tinyjambu256v2
81.5881.6381.67romulust
84.3584.8684.94T:elephant200v2
92.6693.1093.80T:isapk128v20
159.63160.43160.61T:isapxv20
4355.894375.444391.36T:elephant176v2
4462.594468.114469.12T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.720.720.73T:aes128gcmv1
0.780.780.79T:aes256gcmv1
1.001.011.01aes256gcmv1
6.706.726.75ascon128av12
9.819.859.91ascon80pqv12
9.879.899.93ascon128v12
11.5211.5411.55T:xoodyakround3
13.5913.6313.67ascon128abi32v12
13.7213.7313.77T:schwaemm256128v2
18.0818.1118.14T:schwaemm192192v2
19.5419.5820.73T:schwaemm256256v2
20.0920.1320.17T:schwaemm128128v2
20.3320.3620.42ascon128bi32v12
24.3124.3624.39T:grain128aeadv2
31.2131.2431.27romulusn
36.4036.4736.75T:isapa128av20
40.1340.1740.19T:giftcofb128v1
42.7042.8442.97T:isapa128v20
42.8742.9343.05romulusm
45.3845.4345.51T:tinyjambu128v2
46.4446.6447.10T:isapk128av20
52.6752.7152.74T:tinyjambu192v2
54.0454.4654.51T:tinyjambu256v2
81.5681.6281.66romulust
84.9085.0185.31T:elephant200v2
92.4592.8993.42T:isapk128v20
159.82160.11160.20T:isapxv20
4369.214375.814381.46T:elephant176v2
4463.814468.074469.62T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.720.730.75T:aes128gcmv1
0.780.780.79T:aes256gcmv1
1.001.011.01aes256gcmv1
6.706.726.75ascon128av12
9.879.899.92ascon128v12
9.849.909.94ascon80pqv12
11.5511.5711.59T:xoodyakround3
13.5913.6413.68ascon128abi32v12
13.7413.7613.79T:schwaemm256128v2
18.0618.0718.10T:schwaemm192192v2
19.5119.5519.58T:schwaemm256256v2
20.0720.1020.11T:schwaemm128128v2
20.3120.3620.49ascon128bi32v12
24.2624.3024.38T:grain128aeadv2
26.2426.2626.28T:isapa128v20
28.3528.3928.43T:isapa128av20
31.2131.2331.27romulusn
36.3036.5836.84T:isapk128av20
40.1240.1440.17T:giftcofb128v1
42.4942.5342.58romulust
42.8942.9442.97romulusm
45.3645.3745.40T:tinyjambu128v2
52.5952.6752.73T:tinyjambu192v2
54.2254.2654.42T:tinyjambu256v2
61.2061.5461.90T:isapk128v20
84.3584.8885.12T:elephant200v2
104.77104.85104.89T:isapxv20
4361.584377.904386.50T:elephant176v2
4464.974467.584468.93T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.625.665.80aes256gcmv1
8.949.079.45T:aes128gcmv1
9.249.339.97T:aes256gcmv1
10.4410.4810.73ascon128av12
12.8812.9513.15ascon128v12
12.8512.9513.24ascon80pqv12
16.6317.0217.51T:xoodyakround3
20.1020.3820.70ascon128abi32v12
22.5722.8623.48T:schwaemm256128v2
25.5525.7025.94T:schwaemm128128v2
27.0327.2727.57ascon128bi32v12
29.0429.4029.59T:schwaemm192192v2
31.0932.2833.52T:schwaemm256256v2
32.5132.5932.77T:grain128aeadv2
37.4837.5637.65romulusn
47.2747.4447.56T:giftcofb128v1
49.9050.0250.39romulusm
55.9856.1556.51T:tinyjambu128v2
64.2964.5665.29T:tinyjambu192v2
66.0266.4266.79T:tinyjambu256v2
108.32108.50108.93romulust
119.08119.34119.59T:isapa128av20
119.30119.99120.28T:elephant200v2
150.86151.38151.76T:isapk128av20
348.86349.52349.98T:isapa128v20
951.65970.62979.65T:isapk128v20
1601.711604.481605.81T:isapxv20
5404.195410.305475.62T:elephant176v2
5978.525982.965987.84T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.805.845.87aes256gcmv1
8.939.059.16T:aes128gcmv1
9.279.429.74T:aes256gcmv1
10.1610.3410.42ascon128av12
12.8512.9713.10ascon80pqv12
12.8512.9813.12ascon128v12
16.5916.8617.52T:xoodyakround3
20.3320.6220.77ascon128abi32v12
22.4122.5122.73T:schwaemm256128v2
25.4425.5925.80T:schwaemm128128v2
27.1827.3827.67ascon128bi32v12
29.5329.7730.02T:schwaemm192192v2
32.3532.6032.77T:grain128aeadv2
32.9233.3635.12T:schwaemm256256v2
37.8138.0038.14romulusn
47.4947.6347.69T:giftcofb128v1
52.1352.2352.38romulusm
55.9856.0956.48T:tinyjambu128v2
64.3764.6865.34T:tinyjambu192v2
65.9166.2666.82T:tinyjambu256v2
108.71109.00109.69romulust
119.24119.45119.76T:isapa128av20
119.55119.86120.12T:elephant200v2
150.86151.09151.77T:isapk128av20
349.03349.69350.53T:isapa128v20
948.73957.11978.28T:isapk128v20
1595.731598.561600.70T:isapxv20
5402.925405.075409.74T:elephant176v2
5974.605978.735986.34T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.795.875.91aes256gcmv1
8.959.049.16T:aes128gcmv1
9.349.469.72T:aes256gcmv1
10.1010.1710.32ascon128av12
12.9313.0413.20ascon128v12
12.8413.0913.14ascon80pqv12
16.6017.3017.72T:xoodyakround3
20.2320.4420.60ascon128abi32v12
22.3722.4522.73T:schwaemm256128v2
25.4325.5525.78T:schwaemm128128v2
27.2327.3927.68ascon128bi32v12
29.2329.5729.83T:schwaemm192192v2
31.1032.5334.21T:schwaemm256256v2
32.5532.7432.83T:grain128aeadv2
37.8738.2238.33romulusn
47.5147.6047.74T:giftcofb128v1
52.0752.2052.27romulusm
55.8256.1956.38T:tinyjambu128v2
64.2764.5864.80T:tinyjambu192v2
65.8866.0666.45T:tinyjambu256v2
68.8069.2869.74romulust
73.5573.8874.20T:isapa128av20
98.7099.2699.78T:isapk128av20
119.28119.45119.80T:elephant200v2
181.86182.34182.64T:isapa128v20
505.05507.63512.20T:isapk128v20
836.83838.05839.26T:isapxv20
5458.985472.875484.09T:elephant176v2
5975.805977.595985.34T:elephant160v2

amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,1f626960,3300000, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.49?0.59?0.63?T:aes128gcmv1
0.57?0.67?0.70?T:aes256gcmv1
1.391.401.42aes256gcmv1
6.176.196.45ascon128av12
8.938.948.95ascon128v12
8.918.948.96ascon80pqv12
11.1411.1611.18ascon128abi32v12
16.6416.6516.68ascon128bi32v12
17.0217.0317.04T:schwaemm256128v2
17.3417.3817.43T:xoodyakround3
21.5921.7522.44T:schwaemm256256v2
22.2222.5422.59T:schwaemm192192v2
22.9223.3723.44T:schwaemm128128v2
27.0227.0727.12T:grain128aeadv2
36.5036.5636.58romulusn
36.7536.8136.88T:isapa128v20
37.4737.5137.56T:isapa128av20
38.7838.8238.86T:giftcofb128v1
51.3851.4251.46T:tinyjambu128v2
58.5659.4559.58T:tinyjambu192v2
60.1260.3260.58T:isapk128av20
60.2660.3760.39romulusm
62.6162.9563.13T:tinyjambu256v2
80.0180.1180.61T:isapk128v20
114.87114.95114.97romulust
146.39147.22148.55T:elephant200v2
158.86159.66160.11T:isapxv20
6426.906446.136496.15T:elephant176v2
7716.877728.057734.49T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.44?0.56?0.60?T:aes128gcmv1
0.56?0.66?0.70?T:aes256gcmv1
1.391.421.43aes256gcmv1
6.036.056.25ascon128av12
8.908.948.96ascon128v12
8.938.948.96ascon80pqv12
11.0911.1011.14ascon128abi32v12
16.7516.7816.82ascon128bi32v12
16.9917.0417.09T:schwaemm256128v2
17.4217.6217.72T:xoodyakround3
21.6221.7122.46T:schwaemm256256v2
22.2222.3522.53T:schwaemm192192v2
23.0123.3823.70T:schwaemm128128v2
27.5427.5827.62T:grain128aeadv2
36.4036.5736.72romulusn
36.7936.8536.90T:isapa128v20
37.4437.5437.58T:isapa128av20
38.7838.9439.00T:giftcofb128v1
51.4651.4951.52T:tinyjambu128v2
58.1058.3459.32T:tinyjambu192v2
59.8760.1660.36T:isapk128av20
60.1660.3660.53romulusm
60.9562.2762.33T:tinyjambu256v2
79.8280.0280.43T:isapk128v20
114.67114.81114.98romulust
145.97146.93148.22T:elephant200v2
156.46?159.19?194.41?T:isapxv20
6426.676446.506503.75T:elephant176v2
7716.877727.747734.13T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.50?0.59?0.63?T:aes128gcmv1
0.56?0.68?0.70?T:aes256gcmv1
1.401.411.42aes256gcmv1
6.026.046.25ascon128av12
8.908.928.94ascon128v12
8.918.938.96ascon80pqv12
11.0811.1111.12ascon128abi32v12
16.7616.7916.82ascon128bi32v12
16.9717.0217.09T:schwaemm256128v2
16.9517.5117.67T:xoodyakround3
18.2918.3518.39T:isapa128v20
21.6021.7722.48T:schwaemm256256v2
22.3322.5522.58T:schwaemm192192v2
22.9723.4223.71T:schwaemm128128v2
24.9124.9625.04T:isapa128av20
27.5327.6127.66T:grain128aeadv2
36.5436.5836.58romulusn
38.8038.9839.01T:giftcofb128v1
39.1739.2539.27romulust
39.8239.9640.06T:isapk128av20
49.8349.9850.38T:isapk128v20
51.4551.5051.54T:tinyjambu128v2
58.4659.3359.46T:tinyjambu192v2
60.2160.3560.56romulusm
61.9462.2563.07T:tinyjambu256v2
90.14?93.21?128.26?T:isapxv20
145.88146.95148.19T:elephant200v2
6426.716446.256493.34T:elephant176v2
7717.037728.087734.20T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.39?0.43?0.49?T:aes128gcmv1
0.43?0.47?0.55?T:aes256gcmv1
0.920.940.95aes256gcmv1
6.166.226.32ascon128av12
8.888.908.92ascon128v12
8.888.908.93ascon80pqv12
11.0111.0411.07ascon128abi32v12
13.2713.2913.37T:xoodyakround3
16.5816.6016.61ascon128bi32v12
16.9516.9817.01T:schwaemm256128v2
21.5921.7322.47T:schwaemm256256v2
21.9122.1422.25T:schwaemm192192v2
23.2623.3323.52T:schwaemm128128v2
27.0527.0727.15T:grain128aeadv2
27.6127.6727.69T:isapa128v20
29.8929.9129.92romulusn
31.2331.2531.28T:isapa128av20
38.7538.8238.84T:giftcofb128v1
41.6641.7241.79romulusm
42.2342.2742.31T:tinyjambu128v2
46.7646.9346.99T:tinyjambu192v2
48.3048.7448.93T:tinyjambu256v2
50.1350.3050.44T:isapk128av20
64.9265.0465.12T:isapk128v20
76.8876.9877.02romulust
109.92111.53111.61T:elephant200v2
125.79126.06126.73T:isapxv20
4788.314822.024854.40T:elephant176v2
5782.615809.495870.07T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.39?0.42?0.45?T:aes128gcmv1
0.44?0.49?0.51?T:aes256gcmv1
0.920.930.95aes256gcmv1
6.006.116.15ascon128av12
8.868.898.91ascon128v12
8.908.918.92ascon80pqv12
11.0011.0311.04ascon128abi32v12
13.0313.2813.36T:xoodyakround3
16.6216.6416.66ascon128bi32v12
16.9616.9817.01T:schwaemm256128v2
21.5921.6922.45T:schwaemm256256v2
21.9122.1322.26T:schwaemm192192v2
22.9923.4423.54T:schwaemm128128v2
27.2727.3227.39T:grain128aeadv2
27.6327.6527.68T:isapa128v20
29.8429.9029.99romulusn
31.2231.2531.28T:isapa128av20
38.7638.8138.87T:giftcofb128v1
41.5641.7241.80romulusm
42.2742.2942.31T:tinyjambu128v2
45.5145.6046.60T:tinyjambu192v2
46.8947.1347.82T:tinyjambu256v2
50.2150.2750.33T:isapk128av20
64.8964.9465.08T:isapk128v20
76.8677.0277.04romulust
109.77111.37111.48T:elephant200v2
123.29?126.90?161.03?T:isapxv20
4788.244821.074854.30T:elephant176v2
5782.545800.695869.79T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.39?0.42?0.46?T:aes128gcmv1
0.43?0.48?0.51?T:aes256gcmv1
0.930.930.93aes256gcmv1
6.026.116.16ascon128av12
8.868.888.90ascon128v12
8.908.928.92ascon80pqv12
11.0011.0211.03ascon128abi32v12
13.0413.3913.44T:xoodyakround3
16.6216.6416.67ascon128bi32v12
16.9516.9716.99T:schwaemm256128v2
18.3618.4018.42T:isapa128v20
21.6021.6922.46T:schwaemm256256v2
21.9022.1522.27T:schwaemm192192v2
22.9723.4623.53T:schwaemm128128v2
24.9825.0025.04T:isapa128av20
27.2827.3227.36T:grain128aeadv2
29.8429.8929.99romulusn
38.7538.7938.87T:giftcofb128v1
39.1439.1639.21romulust
40.0840.1440.30T:isapk128av20
41.5741.7141.80romulusm
42.2542.2942.34T:tinyjambu128v2
45.7046.6546.73T:tinyjambu192v2
46.9547.7048.05T:tinyjambu256v2
50.0150.0650.16T:isapk128v20
90.55?93.68?127.86?T:isapxv20
109.75111.37111.47T:elephant200v2
4788.234820.804854.42T:elephant176v2
5782.365815.865867.46T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.23?0.25?0.28?T:aes256gcmv1
0.23?0.25?0.27?T:aes128gcmv1
0.460.480.49aes256gcmv1
5.956.196.21ascon128av12
8.828.848.86ascon128v12
8.868.888.89ascon80pqv12
9.049.079.09T:xoodyakround3
10.9010.9110.95ascon128abi32v12
16.4816.5516.56ascon128bi32v12
16.8616.8916.93T:schwaemm256128v2
18.4118.4618.52T:isapa128v20
21.5321.6222.44T:schwaemm256256v2
22.0322.0622.09T:schwaemm192192v2
22.9122.9923.05romulusm
23.1923.2123.25romulusn
23.1223.2323.28T:schwaemm128128v2
24.9725.0125.04T:isapa128av20
27.0127.1027.15T:grain128aeadv2
31.6931.9232.90T:tinyjambu256v2
33.0333.0633.10T:tinyjambu128v2
32.9634.1534.22T:tinyjambu192v2
38.7338.8038.83T:giftcofb128v1
39.0639.1239.34romulust
39.9040.0740.51T:isapk128av20
50.0550.4350.64T:isapk128v20
73.7174.1174.79T:elephant200v2
93.0193.1293.26T:isapxv20
3159.793176.263179.76T:elephant176v2
3855.913888.773902.40T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.23?0.25?0.28?T:aes256gcmv1
0.23?0.25?0.28?T:aes128gcmv1
0.440.460.47aes256gcmv1
5.965.976.15ascon128av12
8.838.868.91ascon128v12
8.868.908.91ascon80pqv12
9.029.069.13T:xoodyakround3
10.9010.9210.94ascon128abi32v12
16.4616.4816.50ascon128bi32v12
16.8616.8916.91T:schwaemm256128v2
18.4118.4818.54T:isapa128v20
21.5321.6222.46T:schwaemm256256v2
22.0222.0622.11T:schwaemm192192v2
22.8323.0223.04romulusm
23.0823.2123.24T:schwaemm128128v2
23.2423.2723.28romulusn
24.9124.9625.01T:isapa128av20
27.0227.1127.14T:grain128aeadv2
31.7932.7532.93T:tinyjambu256v2
33.0233.0633.09T:tinyjambu128v2
33.9634.0334.06T:tinyjambu192v2
38.7438.7938.82T:giftcofb128v1
39.1039.1739.35romulust
39.9040.0040.16T:isapk128av20
50.0350.3850.52T:isapk128v20
73.6074.0874.75T:elephant200v2
90.28?93.67?128.38?T:isapxv20
3160.013171.623179.79T:elephant176v2
3854.173888.513902.78T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.21?0.25?0.28?T:aes128gcmv1
0.22?0.25?0.28?T:aes256gcmv1
0.450.450.46aes256gcmv1
5.955.976.15ascon128av12
8.828.848.91ascon128v12
8.868.888.91ascon80pqv12
9.029.079.12T:xoodyakround3
10.9010.9210.94ascon128abi32v12
16.4616.4816.51ascon128bi32v12
16.8416.8816.90T:schwaemm256128v2
18.4018.5018.59T:isapa128v20
21.5421.6322.47T:schwaemm256256v2
22.0622.0722.08T:schwaemm192192v2
22.8323.0223.04romulusm
23.1123.2123.26T:schwaemm128128v2
23.2223.2523.28romulusn
24.9625.0125.08T:isapa128av20
27.0527.0827.13T:grain128aeadv2
32.2232.7633.00T:tinyjambu256v2
33.0533.0833.15T:tinyjambu128v2
33.9734.0334.06T:tinyjambu192v2
38.7538.7838.82T:giftcofb128v1
39.0639.1139.19romulust
39.8439.9740.20T:isapk128av20
49.8350.3950.54T:isapk128v20
73.5774.0674.76T:elephant200v2
90.39?93.92?128.25?T:isapxv20
3159.953171.183179.79T:elephant176v2
3844.263888.633938.84T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.850.860.88T:aes128gcmv1
0.910.920.94T:aes256gcmv1
1.041.041.05aes256gcmv1
6.256.466.47ascon128av12
9.039.049.06ascon128v12
9.049.069.07ascon80pqv12
11.3011.3111.32ascon128abi32v12
13.3413.3813.51T:xoodyakround3
16.8716.8816.89ascon128bi32v12
17.3617.4817.49T:schwaemm256128v2
22.2622.3622.97T:schwaemm256256v2
22.6522.7323.01T:schwaemm192192v2
23.6223.7323.81T:schwaemm128128v2
27.3727.4027.45T:grain128aeadv2
30.2230.2430.25romulusn
34.1634.1834.23T:isapa128av20
39.0939.1439.17T:giftcofb128v1
40.4040.4240.44T:isapa128v20
41.9242.0342.10romulusm
42.5642.6042.62T:tinyjambu128v2
47.1047.2747.31T:tinyjambu192v2
47.4347.8449.54T:tinyjambu256v2
58.3158.3958.43T:isapk128av20
78.0678.1378.19romulust
112.27113.87114.03T:elephant200v2
115.35115.44115.48T:isapk128v20
205.87206.39206.47T:isapxv20
4821.434839.964857.70T:elephant176v2
5837.005847.935930.21T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.850.860.88T:aes128gcmv1
0.890.920.94T:aes256gcmv1
1.041.051.06aes256gcmv1
6.216.276.32ascon128av12
9.009.049.06ascon128v12
9.049.059.06ascon80pqv12
11.2811.2911.31ascon128abi32v12
13.2113.3913.45T:xoodyakround3
16.9016.9116.93ascon128bi32v12
17.3817.4717.49T:schwaemm256128v2
22.2422.2723.04T:schwaemm256256v2
22.6422.7322.92T:schwaemm192192v2
23.6223.6523.83T:schwaemm128128v2
27.6627.6927.74T:grain128aeadv2
30.2030.2730.32romulusn
34.2034.2234.25T:isapa128av20
39.1439.1839.24T:giftcofb128v1
40.4140.4240.44T:isapa128v20
41.9542.0842.15romulusm
42.6142.6242.64T:tinyjambu128v2
46.0446.9947.06T:tinyjambu192v2
47.1647.6547.88T:tinyjambu256v2
58.3058.3758.41T:isapk128av20
78.1378.1978.21romulust
112.11113.69113.85T:elephant200v2
115.31115.45115.56T:isapk128v20
206.07?206.80?238.79?T:isapxv20
4820.924821.104839.79T:elephant176v2
5847.795852.345930.23T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.840.860.87T:aes128gcmv1
0.900.910.92T:aes256gcmv1
1.041.041.04aes256gcmv1
6.206.276.31ascon128av12
9.009.029.03ascon128v12
9.059.059.07ascon80pqv12
11.2711.2811.29ascon128abi32v12
13.1813.3513.52T:xoodyakround3
16.9016.9016.92ascon128bi32v12
17.3717.4617.49T:schwaemm256128v2
22.2222.2723.01T:schwaemm256256v2
22.6322.7322.95T:schwaemm192192v2
23.6223.6423.83T:schwaemm128128v2
24.8724.8924.92T:isapa128v20
26.6426.6626.69T:isapa128av20
27.6527.6927.72T:grain128aeadv2
30.2030.2830.29romulusn
39.1339.1639.21T:giftcofb128v1
40.2840.3040.38romulust
41.9842.0842.15romulusm
42.5842.6242.63T:tinyjambu128v2
45.3645.4745.52T:isapk128av20
45.9246.9847.06T:tinyjambu192v2
47.2947.3347.76T:tinyjambu256v2
76.7877.0077.04T:isapk128v20
112.24113.69113.86T:elephant200v2
134.23?134.51?166.77?T:isapxv20
4815.674820.954839.47T:elephant176v2
5848.255852.495930.51T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.165.215.42aes256gcmv1
9.689.8210.34ascon128av12
10.9811.3512.02T:aes128gcmv1
11.58?11.73?12.95?T:aes256gcmv1
12.0312.1912.61ascon128v12
12.2212.3812.65ascon80pqv12
17.0217.1417.94ascon128abi32v12
19.2519.5019.71T:xoodyakround3
22.7522.8423.55ascon128bi32v12
28.5228.8529.12T:schwaemm256128v2
30.1130.2130.58T:schwaemm128128v2
34.6935.1635.69T:grain128aeadv2
35.4935.7536.70T:schwaemm256256v2
36.4636.9537.39T:schwaemm192192v2
38.0538.0738.14romulusn
47.0247.1247.48T:giftcofb128v1
48.7948.9849.45romulusm
49.8850.0150.18T:tinyjambu128v2
55.1655.5056.11T:tinyjambu192v2
55.7456.7057.40T:tinyjambu256v2
101.23101.50101.96T:isapa128av20
104.66104.73105.11romulust
159.31160.45161.34T:elephant200v2
231.23232.27234.77T:isapk128av20
333.10333.43333.88T:isapa128v20
1256.681258.201264.45T:isapk128v20
2012.252015.482015.89T:isapxv20
6000.706008.096012.75T:elephant176v2
7839.877882.417920.20T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
4.985.045.13aes256gcmv1
9.769.8810.05ascon128av12
11.0511.3011.42T:aes128gcmv1
11.3811.4612.09T:aes256gcmv1
12.0812.2712.46ascon80pqv12
12.2712.5212.63ascon128v12
17.1317.3017.65ascon128abi32v12
19.1619.2319.77T:xoodyakround3
22.9423.0623.34ascon128bi32v12
28.5528.7029.31T:schwaemm256128v2
30.1230.2030.30T:schwaemm128128v2
34.9435.2635.48T:grain128aeadv2
35.5335.8436.80T:schwaemm256256v2
36.4536.6536.95T:schwaemm192192v2
38.0538.0738.16romulusn
47.4947.5247.67T:giftcofb128v1
49.9450.0750.16T:tinyjambu128v2
50.0950.1950.59romulusm
55.0855.4355.77T:tinyjambu192v2
55.7056.4356.99T:tinyjambu256v2
101.49101.62101.94T:isapa128av20
104.59104.68105.42romulust
159.03159.77161.12T:elephant200v2
230.82231.86233.44T:isapk128av20
333.33333.72334.33T:isapa128v20
1257.291258.111262.86T:isapk128v20
2014.702016.332060.61T:isapxv20
6000.386007.326012.03T:elephant176v2
7840.537874.307919.52T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
4.975.005.02aes256gcmv1
9.599.679.80ascon128av12
11.0111.2811.34T:aes128gcmv1
11.3911.4512.09T:aes256gcmv1
11.9712.0912.26ascon128v12
12.1112.2312.41ascon80pqv12
17.0617.2517.37ascon128abi32v12
19.2219.8419.88T:xoodyakround3
22.9323.0123.07ascon128bi32v12
28.5428.7328.84T:schwaemm256128v2
30.0730.1230.29T:schwaemm128128v2
34.9835.0835.37T:grain128aeadv2
35.4435.7636.71T:schwaemm256256v2
36.3636.4336.53T:schwaemm192192v2
38.0738.1238.16romulusn
47.3847.4447.63T:giftcofb128v1
49.8950.0250.05T:tinyjambu128v2
49.9850.0850.13romulusm
55.1255.3455.64T:tinyjambu192v2
55.3156.7557.06T:tinyjambu256v2
64.2464.4364.70T:isapa128av20
65.9866.2766.50romulust
156.07157.30157.78T:isapk128av20
159.05160.54161.19T:elephant200v2
173.58174.01174.53T:isapa128v20
681.06681.82685.66T:isapk128v20
1052.201052.771098.48T:isapxv20
6001.276008.606012.36T:elephant176v2
7841.487887.347920.16T:elephant160v2

amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.51?0.54?0.57?T:aes128gcmv1
0.600.630.65T:aes256gcmv1
1.531.541.55aes256gcmv1
6.506.556.58ascon128av12
9.629.699.98ascon80pqv12
9.829.879.92ascon128v12
13.0213.0513.09ascon128abi32v12
13.3913.4213.45T:schwaemm256128v2
15.2815.3415.37T:xoodyakround3
17.6717.7817.85T:schwaemm192192v2
19.4919.5319.60T:schwaemm256256v2
19.8419.8719.91T:schwaemm128128v2
19.9119.9720.02ascon128bi32v12
24.1624.3725.37T:grain128aeadv2
38.4538.5038.56romulusn
39.0139.1039.40T:isapa128av20
39.2139.5439.91T:isapa128v20
39.7939.8239.85T:giftcofb128v1
49.7350.2350.54T:isapk128av20
55.0455.1055.15T:tinyjambu128v2
61.7161.7961.83romulusm
66.3366.4666.62T:tinyjambu192v2
65.9066.7367.87T:isapk128v20
71.1871.2871.36T:tinyjambu256v2
109.85110.81110.89T:elephant200v2
119.30119.45119.55romulust
119.81120.23120.68T:isapxv20
5771.675804.645832.27T:elephant176v2
5886.645888.755889.78T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.47?0.52?0.58?T:aes128gcmv1
0.570.600.62T:aes256gcmv1
1.411.421.43aes256gcmv1
6.616.676.69ascon128av12
9.769.809.82ascon128v12
9.7310.0210.08ascon80pqv12
13.0513.1113.17ascon128abi32v12
13.3913.4513.50T:schwaemm256128v2
15.1115.2315.27T:xoodyakround3
17.6717.7117.80T:schwaemm192192v2
19.8019.8219.87T:schwaemm128128v2
20.0120.0720.20ascon128bi32v12
20.4120.5320.62T:schwaemm256256v2
23.6223.6825.35T:grain128aeadv2
38.5438.5738.63romulusn
39.3339.5539.93T:isapa128v20
39.6239.7139.77T:isapa128av20
39.8039.8539.89T:giftcofb128v1
49.1549.6050.17T:isapk128av20
54.8754.9455.00T:tinyjambu128v2
61.6861.8262.04romulusm
66.5666.5966.63T:tinyjambu192v2
66.2967.0369.10T:isapk128v20
70.7271.1771.29T:tinyjambu256v2
110.86111.04111.18T:elephant200v2
119.30119.42119.48romulust
119.82120.78121.12T:isapxv20
5759.205814.655827.15T:elephant176v2
5886.705889.865891.50T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.510.520.53T:aes128gcmv1
0.590.600.61T:aes256gcmv1
1.411.421.43aes256gcmv1
6.526.606.62ascon128av12
9.769.809.84ascon128v12
9.759.9610.08ascon80pqv12
13.0613.0913.15ascon128abi32v12
13.3513.4313.48T:schwaemm256128v2
15.1615.2315.30T:xoodyakround3
17.6217.6917.75T:schwaemm192192v2
19.4119.4619.52T:isapa128v20
19.6019.6619.72T:schwaemm256256v2
19.7719.8019.85T:schwaemm128128v2
19.9720.0420.12ascon128bi32v12
23.6223.7025.28T:grain128aeadv2
26.2926.3926.44T:isapa128av20
33.0533.1133.34T:isapk128av20
38.5238.5738.60romulusn
39.8139.8539.87T:giftcofb128v1
40.2240.9641.81T:isapk128v20
41.2841.3741.50romulust
54.8054.8554.93T:tinyjambu128v2
61.7261.8661.94romulusm
66.4266.5366.60T:tinyjambu192v2
70.6770.7971.54T:tinyjambu256v2
72.1372.2872.44T:isapxv20
110.26110.86111.06T:elephant200v2
5754.755770.555804.96T:elephant176v2
5885.275887.595889.29T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.35?0.38?0.39?T:aes128gcmv1
0.400.410.43T:aes256gcmv1
0.910.920.93aes256gcmv1
6.516.556.60ascon128av12
9.619.679.79ascon80pqv12
9.789.799.82ascon128v12
11.4411.5111.54T:xoodyakround3
13.2713.3513.40ascon128abi32v12
13.2913.3613.40T:schwaemm256128v2
17.6017.6617.75T:schwaemm192192v2
19.4119.4719.51T:schwaemm256256v2
19.8119.8419.87T:schwaemm128128v2
20.1720.2820.33ascon128bi32v12
24.1324.2325.20T:grain128aeadv2
29.2629.4629.63T:isapa128v20
30.8530.8930.94romulusn
32.4432.4932.58T:isapa128av20
39.7939.8339.85T:giftcofb128v1
41.4441.9042.42T:isapk128av20
42.5042.5342.61romulusm
45.0045.0745.10T:tinyjambu128v2
52.0752.1052.17T:tinyjambu192v2
53.7953.8353.87T:tinyjambu256v2
53.8454.7555.45T:isapk128v20
80.3980.4280.48romulust
82.5782.6382.87T:elephant200v2
96.6297.1697.44T:isapxv20
4321.464339.334352.02T:elephant176v2
4412.894414.804417.40T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.35?0.36?0.39?T:aes128gcmv1
0.390.410.42T:aes256gcmv1
0.860.860.87aes256gcmv1
6.516.556.60ascon128av12
9.629.759.88ascon80pqv12
9.749.779.80ascon128v12
11.4111.4411.48T:xoodyakround3
13.2613.3413.39T:schwaemm256128v2
13.3013.3513.39ascon128abi32v12
17.6217.6817.72T:schwaemm192192v2
19.4419.6220.56T:schwaemm256256v2
19.7919.8219.85T:schwaemm128128v2
20.0320.1120.21ascon128bi32v12
23.8424.0425.19T:grain128aeadv2
29.3029.4429.69T:isapa128v20
30.8830.9330.96romulusn
32.9133.0133.06T:isapa128av20
39.7839.8339.85T:giftcofb128v1
41.3941.8242.09T:isapk128av20
42.5042.5542.63romulusm
44.9144.9845.10T:tinyjambu128v2
52.0752.1352.15T:tinyjambu192v2
53.8053.8754.12T:tinyjambu256v2
53.4554.4655.49T:isapk128v20
80.3680.4180.47romulust
83.1683.2083.24T:elephant200v2
96.2996.4796.66T:isapxv20
4311.494322.754339.28T:elephant176v2
4413.274415.234416.66T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.360.370.38T:aes128gcmv1
0.400.420.42T:aes256gcmv1
0.850.860.86aes256gcmv1
6.546.616.63ascon128av12
9.659.739.82ascon80pqv12
9.769.799.80ascon128v12
11.4011.4411.47T:xoodyakround3
13.2813.3213.36ascon128abi32v12
13.3513.4013.44T:schwaemm256128v2
17.6317.6717.72T:schwaemm192192v2
19.4519.4819.51T:isapa128v20
19.4119.5220.57T:schwaemm256256v2
19.7919.8119.85T:schwaemm128128v2
20.0320.0820.13ascon128bi32v12
23.9924.0925.26T:grain128aeadv2
26.2626.3426.38T:isapa128av20
30.9030.9230.94romulusn
33.3833.6433.80T:isapk128av20
39.7839.8239.85T:giftcofb128v1
41.3141.3641.44romulust
41.4241.7642.11T:isapk128v20
42.5242.5542.62romulusm
44.9244.9745.28T:tinyjambu128v2
52.0652.1252.15T:tinyjambu192v2
53.4453.7253.76T:tinyjambu256v2
72.3572.7273.15T:isapxv20
82.4282.8383.25T:elephant200v2
4315.994335.554356.47T:elephant176v2
4414.294415.304416.50T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.21?0.24?0.29?T:aes128gcmv1
0.23?0.25?0.26?T:aes256gcmv1
0.29?0.32?0.33?aes256gcmv1
6.386.516.63ascon128av12
7.597.657.69T:xoodyakround3
9.569.5610.27ascon80pqv12
9.689.729.76ascon128v12
13.2313.2913.36T:schwaemm256128v2
13.4013.5113.58ascon128abi32v12
17.5517.6817.75T:schwaemm192192v2
18.1719.4019.44T:schwaemm256256v2
19.4319.4819.57T:isapa128v20
19.7519.8119.86T:schwaemm128128v2
20.2520.4220.58ascon128bi32v12
23.2523.2823.30romulusn
23.2923.3323.38romulusm
24.0624.1625.12T:grain128aeadv2
26.2526.3626.40T:isapa128av20
33.0333.4333.61T:isapk128av20
34.8234.8834.96T:tinyjambu128v2
36.2536.3136.38T:tinyjambu256v2
37.5237.6337.77T:tinyjambu192v2
39.7539.8239.90T:giftcofb128v1
41.3441.3841.42romulust
41.4542.0142.94T:isapk128v20
55.6355.8656.10T:elephant200v2
72.2573.2673.67T:isapxv20
2843.492863.642879.49T:elephant176v2
2939.872940.892942.67T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.21?0.23?0.24?T:aes256gcmv1
0.22?0.23?0.30?T:aes128gcmv1
0.28?0.31?0.33?aes256gcmv1
6.426.516.56ascon128av12
7.587.657.70T:xoodyakround3
9.589.639.78ascon80pqv12
9.699.759.77ascon128v12
13.3213.3813.42T:schwaemm256128v2
13.5213.6113.66ascon128abi32v12
17.6217.6517.71T:schwaemm192192v2
19.3919.4819.56T:isapa128v20
19.8019.8219.85T:schwaemm128128v2
20.0320.1220.18ascon128bi32v12
19.2920.3920.49T:schwaemm256256v2
23.2223.2723.30romulusn
23.2623.3123.35romulusm
24.0024.1025.02T:grain128aeadv2
26.2626.3326.42T:isapa128av20
33.0933.3733.94T:isapk128av20
34.8334.8834.90T:tinyjambu128v2
36.2936.3436.42T:tinyjambu256v2
37.4837.5737.67T:tinyjambu192v2
39.7539.8339.89T:giftcofb128v1
41.2541.3641.45romulust
41.1041.8142.71T:isapk128v20
55.6255.9656.19T:elephant200v2
72.2672.4072.66T:isapxv20
2873.632882.582888.02T:elephant176v2
2938.082939.492940.49T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.220.230.24T:aes256gcmv1
0.20?0.23?0.30?T:aes128gcmv1
0.300.310.33aes256gcmv1
6.386.486.59ascon128av12
7.617.707.73T:xoodyakround3
9.509.619.65ascon80pqv12
9.699.729.74ascon128v12
13.2713.3313.41T:schwaemm256128v2
13.5313.5913.65ascon128abi32v12
17.5817.6717.74T:schwaemm192192v2
18.1219.4119.46T:schwaemm256256v2
19.4319.4819.54T:isapa128v20
19.7819.8319.87T:schwaemm128128v2
19.9920.0820.16ascon128bi32v12
23.2423.2923.33romulusn
23.2823.3423.35romulusm
24.0424.3824.95T:grain128aeadv2
26.3126.3826.42T:isapa128av20
32.8833.4833.90T:isapk128av20
34.8234.8734.94T:tinyjambu128v2
36.2536.3336.41T:tinyjambu256v2
37.5537.6137.66T:tinyjambu192v2
39.7739.8339.89T:giftcofb128v1
41.3041.3341.44romulust
41.2542.1942.96T:isapk128v20
55.8856.0056.21T:elephant200v2
72.2672.4872.67T:isapxv20
2846.342869.442879.90T:elephant176v2
2939.342940.882942.89T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.730.730.76T:aes128gcmv1
0.790.790.82T:aes256gcmv1
1.061.061.06aes256gcmv1
6.686.706.71ascon128av12
9.779.9110.03ascon80pqv12
9.919.949.97ascon128v12
11.6011.6111.62T:xoodyakround3
13.6213.6813.72ascon128abi32v12
13.7013.7313.78T:schwaemm256128v2
18.0618.0818.14T:schwaemm192192v2
19.9820.0220.07T:schwaemm256256v2
20.1020.1120.13T:schwaemm128128v2
20.4220.5020.56ascon128bi32v12
24.6424.7225.54T:grain128aeadv2
31.1431.1831.21romulusn
36.1436.1736.18T:isapa128av20
40.1440.1640.22T:giftcofb128v1
42.8242.8542.88romulusm
42.7642.8742.96T:isapa128v20
45.4645.5145.55T:tinyjambu128v2
46.8246.9647.16T:isapk128av20
52.7052.7852.79T:tinyjambu192v2
54.2954.3254.37T:tinyjambu256v2
81.6281.6681.67romulust
84.6084.8885.40T:elephant200v2
93.3494.2694.56T:isapk128v20
160.57160.79161.19T:isapxv20
4340.904362.074376.33T:elephant176v2
4464.184464.774465.23T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.720.730.76T:aes128gcmv1
0.770.780.79T:aes256gcmv1
1.001.011.01aes256gcmv1
6.676.706.75ascon128av12
9.809.859.89ascon80pqv12
9.889.929.94ascon128v12
11.5311.5511.58T:xoodyakround3
13.5913.6713.70ascon128abi32v12
13.7613.8013.83T:schwaemm256128v2
18.0918.1518.19T:schwaemm192192v2
20.0320.0720.11T:schwaemm128128v2
20.0620.1120.15T:schwaemm256256v2
20.3520.4520.47ascon128bi32v12
24.2824.3625.55T:grain128aeadv2
31.2031.2331.25romulusn
36.4736.5536.67T:isapa128av20
40.1340.1740.19T:giftcofb128v1
42.7442.8643.01T:isapa128v20
42.9343.0043.06romulusm
45.3645.3845.44T:tinyjambu128v2
46.5746.8847.29T:isapk128av20
52.6852.7152.73T:tinyjambu192v2
54.0354.2454.39T:tinyjambu256v2
81.5581.6081.65romulust
84.7784.9285.02T:elephant200v2
93.0693.5193.64T:isapk128v20
159.89160.17161.27T:isapxv20
4350.284383.764392.62T:elephant176v2
4457.834463.934466.00T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.720.730.75T:aes128gcmv1
0.790.790.82T:aes256gcmv1
1.001.011.01aes256gcmv1
6.706.736.77ascon128av12
9.789.849.90ascon80pqv12
9.889.909.91ascon128v12
11.5611.5911.60T:xoodyakround3
13.6013.6413.68ascon128abi32v12
13.7513.7713.81T:schwaemm256128v2
18.0718.1118.12T:schwaemm192192v2
20.0520.0820.10T:schwaemm128128v2
20.3320.3520.41ascon128bi32v12
20.0620.5721.05T:schwaemm256256v2
24.2924.3825.49T:grain128aeadv2
26.2326.2426.26T:isapa128v20
28.3028.3228.41T:isapa128av20
31.2031.2431.25romulusn
36.3436.5336.81T:isapk128av20
40.1340.1640.18T:giftcofb128v1
42.4842.5442.61romulust
42.8642.9743.04romulusm
45.3545.3945.42T:tinyjambu128v2
52.5652.6952.73T:tinyjambu192v2
54.1354.2854.41T:tinyjambu256v2
61.6061.9762.23T:isapk128v20
84.9584.9985.04T:elephant200v2
105.23105.52105.76T:isapxv20
4339.104343.304386.57T:elephant176v2
4459.834462.494464.89T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.605.635.71aes256gcmv1
9.129.179.95T:aes128gcmv1
9.359.489.84T:aes256gcmv1
10.4910.5910.88ascon128av12
12.7512.8412.99ascon80pqv12
12.8012.9713.05ascon128v12
16.6717.1017.58T:xoodyakround3
19.9820.1520.70ascon128abi32v12
22.3422.6223.07T:schwaemm256128v2
25.5025.6725.84T:schwaemm128128v2
27.0727.2927.55ascon128bi32v12
29.2329.6130.80T:schwaemm192192v2
31.7231.9932.20T:schwaemm256256v2
32.6132.9133.31T:grain128aeadv2
37.4537.6237.81romulusn
47.3147.4147.53T:giftcofb128v1
50.1650.3550.59romulusm
55.8756.3356.60T:tinyjambu128v2
64.2764.4264.78T:tinyjambu192v2
65.7666.1366.66T:tinyjambu256v2
108.15108.34108.72romulust
118.97119.16119.34T:elephant200v2
118.95119.30119.87T:isapa128av20
150.21151.02152.03T:isapk128av20
349.03349.67350.12T:isapa128v20
981.39987.98996.84T:isapk128v20
1597.661599.531601.71T:isapxv20
5406.455464.485474.60T:elephant176v2
5978.455980.935984.11T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.745.845.95aes256gcmv1
8.989.089.16T:aes128gcmv1
9.329.459.76T:aes256gcmv1
10.1510.2410.48ascon128av12
12.8312.9113.05ascon80pqv12
12.9113.0513.12ascon128v12
16.9117.0517.34T:xoodyakround3
20.2020.4520.59ascon128abi32v12
22.3322.5123.03T:schwaemm256128v2
25.3525.5425.89T:schwaemm128128v2
27.0627.2627.50ascon128bi32v12
29.3629.5730.13T:schwaemm192192v2
32.6532.8333.45T:grain128aeadv2
32.5433.7934.59T:schwaemm256256v2
37.8537.9838.13romulusn
47.4847.6147.67T:giftcofb128v1
52.1252.2652.59romulusm
55.9856.4056.70T:tinyjambu128v2
64.0564.4765.16T:tinyjambu192v2
65.8866.2366.59T:tinyjambu256v2
108.46108.69109.62romulust
119.45119.77119.96T:isapa128av20
119.83120.03120.30T:elephant200v2
150.20150.69151.69T:isapk128av20
349.21350.12350.84T:isapa128v20
968.50978.77979.47T:isapk128v20
1596.731599.701600.57T:isapxv20
5400.135409.285459.94T:elephant176v2
5979.875982.885985.46T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.775.835.85aes256gcmv1
9.059.109.34T:aes128gcmv1
9.349.439.60T:aes256gcmv1
10.2010.3710.54ascon128av12
12.8212.9013.12ascon80pqv12
12.8613.0513.12ascon128v12
16.7317.0717.59T:xoodyakround3
20.3120.4120.70ascon128abi32v12
22.3422.5322.80T:schwaemm256128v2
25.5125.5425.72T:schwaemm128128v2
27.1827.4527.77ascon128bi32v12
29.2929.5529.92T:schwaemm192192v2
31.8632.0032.42T:schwaemm256256v2
32.8432.9533.43T:grain128aeadv2
37.9938.0838.30romulusn
47.5447.6147.70T:giftcofb128v1
52.1252.3452.52romulusm
55.8056.1556.45T:tinyjambu128v2
64.2664.4765.13T:tinyjambu192v2
65.4765.8466.51T:tinyjambu256v2
68.8569.5569.94romulust
73.1673.9474.22T:isapa128av20
98.5298.8499.39T:isapk128av20
119.58120.36120.80T:elephant200v2
181.93182.33182.81T:isapa128v20
510.20515.68522.11T:isapk128v20
836.72837.52838.62T:isapxv20
5447.705454.155486.10T:elephant176v2
5972.795979.205980.79T:elephant160v2

amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.930.960.97T:aes256gcmv1
1.511.531.53T:aes128gcmv1
1.671.681.69aes256gcmv1
6.406.416.43ascon128av12
9.389.389.40ascon128v12
9.409.429.42ascon80pqv12
11.1311.1911.41ascon128abi32v12
16.9417.0217.12ascon128bi32v12
17.9217.9818.02T:xoodyakround3
19.5019.5419.63T:schwaemm256128v2
23.7123.7323.74T:schwaemm256256v2
25.6325.7725.89T:schwaemm192192v2
27.1827.2827.49T:grain128aeadv2
27.5527.6027.89T:schwaemm128128v2
35.4935.5335.57romulusn
36.3636.4236.48T:isapa128av20
36.5636.6036.62T:isapa128v20
40.4640.4940.52T:giftcofb128v1
57.1257.1657.23romulusm
61.6061.6261.66T:tinyjambu128v2
64.5864.6364.71T:isapk128av20
68.9568.9668.97T:tinyjambu192v2
75.9775.9776.00T:tinyjambu256v2
84.6784.8285.41T:isapk128v20
112.27112.30112.32romulust
147.78148.10148.72T:isapxv20
228.27229.90245.92T:elephant200v2
6455.276462.126503.67T:elephant176v2
7141.727144.357158.01T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.890.930.96T:aes256gcmv1
1.601.611.62T:aes128gcmv1
1.771.781.81aes256gcmv1
6.286.306.31ascon128av12
9.269.279.30ascon128v12
9.389.399.41ascon80pqv12
11.2311.2611.27ascon128abi32v12
16.8016.9216.98ascon128bi32v12
17.7717.8017.86T:xoodyakround3
19.4519.5019.58T:schwaemm256128v2
23.6723.6923.72T:schwaemm256256v2
25.6625.7225.84T:schwaemm192192v2
27.0827.1427.52T:grain128aeadv2
27.4927.5827.79T:schwaemm128128v2
35.5735.6135.65romulusn
36.2836.3236.42T:isapa128v20
36.4236.4536.48T:isapa128av20
40.5240.5540.58T:giftcofb128v1
57.2357.3057.33romulusm
61.5461.5961.61T:tinyjambu128v2
65.2565.3365.45T:isapk128av20
68.6768.7468.76T:tinyjambu192v2
76.0076.0476.14T:tinyjambu256v2
84.9185.4185.46T:isapk128v20
112.26112.32112.38romulust
147.94148.40149.10T:isapxv20
228.24229.68246.03T:elephant200v2
6459.036465.396505.04T:elephant176v2
7139.597142.207158.05T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.880.910.95T:aes256gcmv1
1.601.611.62T:aes128gcmv1
1.771.781.79aes256gcmv1
6.276.296.32ascon128av12
9.239.269.30ascon128v12
9.369.379.39ascon80pqv12
11.2211.2411.26ascon128abi32v12
16.7816.9016.98ascon128bi32v12
17.8317.8717.95T:xoodyakround3
18.0218.1118.13T:isapa128v20
19.4319.5119.58T:schwaemm256128v2
23.6823.7123.79T:schwaemm256256v2
24.1124.1524.20T:isapa128av20
25.6225.7425.84T:schwaemm192192v2
27.0427.1627.49T:grain128aeadv2
27.4727.6027.81T:schwaemm128128v2
35.5535.5935.62romulusn
37.4937.5737.58romulust
40.4940.5240.54T:giftcofb128v1
44.4844.5444.59T:isapk128av20
54.5854.6254.65T:isapk128v20
57.2457.2857.36romulusm
61.5261.5561.59T:tinyjambu128v2
68.6968.7068.72T:tinyjambu192v2
76.0676.0876.16T:tinyjambu256v2
86.5086.6987.21T:isapxv20
228.41229.92245.83T:elephant200v2
6457.086462.846505.28T:elephant176v2
7140.047142.017156.66T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.670.690.72T:aes256gcmv1
1.001.011.02T:aes128gcmv1
1.091.101.11aes256gcmv1
6.396.416.43ascon128av12
9.329.349.37ascon80pqv12
9.329.369.36ascon128v12
11.0611.1011.11ascon128abi32v12
13.5013.5413.59T:xoodyakround3
16.7916.9016.93ascon128bi32v12
19.3519.3819.44T:schwaemm256128v2
23.5823.5923.61T:schwaemm256256v2
25.5925.6425.66T:schwaemm192192v2
27.1527.1927.29T:grain128aeadv2
27.2527.4127.43T:isapa128v20
27.5427.6827.79T:schwaemm128128v2
28.6728.6928.75romulusn
30.2930.3130.32T:isapa128av20
39.4739.5239.57romulusm
40.3840.4140.44T:giftcofb128v1
50.6250.6550.66T:tinyjambu128v2
54.3154.3254.34T:tinyjambu192v2
54.6154.6354.69T:isapk128av20
57.9858.0258.08T:tinyjambu256v2
69.6869.7470.08T:isapk128v20
74.2574.8874.91romulust
117.04117.38117.60T:isapxv20
170.42171.34183.05T:elephant200v2
4821.964824.744858.34T:elephant176v2
5353.345354.465366.84T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.650.680.70T:aes256gcmv1
1.041.051.06T:aes128gcmv1
1.141.151.16aes256gcmv1
6.346.346.35ascon128av12
9.309.319.31ascon128v12
9.339.359.36ascon80pqv12
11.0811.1011.11ascon128abi32v12
13.4013.4513.48T:xoodyakround3
16.7116.7316.78ascon128bi32v12
19.3519.4119.46T:schwaemm256128v2
23.5623.5823.60T:schwaemm256256v2
25.5725.6325.68T:schwaemm192192v2
26.6027.0927.20T:grain128aeadv2
27.3827.4527.47T:isapa128v20
27.4327.5527.57T:schwaemm128128v2
28.7528.7628.77romulusn
30.2930.3130.36T:isapa128av20
39.6039.7039.75romulusm
40.3940.4140.44T:giftcofb128v1
50.5850.6150.67T:tinyjambu128v2
54.2054.2054.22T:tinyjambu192v2
54.9354.9655.01T:isapk128av20
58.0458.1058.12T:tinyjambu256v2
69.6770.1070.11T:isapk128v20
74.8874.9074.93romulust
117.14117.32117.89T:isapxv20
170.46171.54183.15T:elephant200v2
4818.274823.404858.40T:elephant176v2
5354.365355.055366.98T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.670.690.69T:aes256gcmv1
1.051.051.06T:aes128gcmv1
1.151.151.15aes256gcmv1
6.366.366.37ascon128av12
9.299.329.32ascon128v12
9.339.349.35ascon80pqv12
11.1011.1111.15ascon128abi32v12
13.4313.4813.52T:xoodyakround3
16.7316.7416.75ascon128bi32v12
18.1118.1218.21T:isapa128v20
19.3819.4019.45T:schwaemm256128v2
23.5623.5823.59T:schwaemm256256v2
24.1624.1824.20T:isapa128av20
25.5725.6425.66T:schwaemm192192v2
26.6127.1127.36T:grain128aeadv2
27.4127.5627.58T:schwaemm128128v2
28.6928.7428.77romulusn
37.5037.5237.54romulust
39.5339.5639.63romulusm
40.4140.4340.44T:giftcofb128v1
44.5344.5544.57T:isapk128av20
50.5950.6250.65T:tinyjambu128v2
54.1854.2354.24T:tinyjambu192v2
54.6254.6454.67T:isapk128v20
58.0658.0758.08T:tinyjambu256v2
86.3586.5786.83T:isapxv20
170.36171.34182.87T:elephant200v2
4818.564824.804858.35T:elephant176v2
5353.165354.355367.93T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.410.420.44T:aes256gcmv1
0.49?0.51?0.56?aes256gcmv1
0.500.520.53T:aes128gcmv1
6.336.366.41ascon128av12
9.029.099.13T:xoodyakround3
9.259.279.29ascon80pqv12
9.279.299.30ascon128v12
10.9210.9510.95ascon128abi32v12
16.5116.6716.74ascon128bi32v12
18.2318.2518.27T:isapa128v20
19.2319.3019.34T:schwaemm256128v2
21.7221.8121.85romulusm
21.8821.9221.93romulusn
23.4323.4523.46T:schwaemm256256v2
24.1624.1824.21T:isapa128av20
25.4025.5425.60T:schwaemm192192v2
27.1027.1827.20T:grain128aeadv2
27.2827.3427.53T:schwaemm128128v2
37.5037.5437.55romulust
39.6939.7039.70T:tinyjambu192v2
39.7039.7039.71T:tinyjambu128v2
40.0240.0240.05T:tinyjambu256v2
40.2340.2940.35T:giftcofb128v1
44.5244.6344.66T:isapk128av20
54.6554.7554.77T:isapk128v20
86.4686.9787.26T:isapxv20
112.35113.14120.86T:elephant200v2
3186.623190.383211.42T:elephant176v2
3565.643567.443573.51T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.410.420.45T:aes256gcmv1
0.490.500.52T:aes128gcmv1
0.49?0.52?0.55?aes256gcmv1
6.356.366.38ascon128av12
9.069.119.18T:xoodyakround3
9.289.299.31ascon80pqv12
9.279.299.30ascon128v12
10.9510.9610.97ascon128abi32v12
16.5116.5916.65ascon128bi32v12
18.1818.2218.29T:isapa128v20
19.2719.2919.37T:schwaemm256128v2
21.8421.8721.94romulusm
21.9121.9421.97romulusn
23.4523.4623.51T:schwaemm256256v2
24.1724.2024.23T:isapa128av20
25.4725.4725.63T:schwaemm192192v2
26.1626.8327.14T:grain128aeadv2
27.2727.5627.71T:schwaemm128128v2
37.4837.5737.59romulust
39.6839.6839.71T:tinyjambu128v2
39.6939.6939.70T:tinyjambu192v2
40.1240.1340.13T:tinyjambu256v2
40.2140.3240.34T:giftcofb128v1
44.5344.5844.61T:isapk128av20
54.6454.6954.71T:isapk128v20
85.9686.5487.01T:isapxv20
112.32113.38120.88T:elephant200v2
3185.393189.113212.09T:elephant176v2
3565.603567.463574.35T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.410.430.45T:aes256gcmv1
0.500.510.52T:aes128gcmv1
0.520.520.53aes256gcmv1
6.376.396.39ascon128av12
9.059.119.15T:xoodyakround3
9.289.299.30ascon80pqv12
9.289.299.30ascon128v12
10.9510.9611.00ascon128abi32v12
16.5116.6116.67ascon128bi32v12
18.2018.2418.29T:isapa128v20
19.2419.2819.33T:schwaemm256128v2
21.7821.8421.95romulusn
21.8521.8921.92romulusm
23.4223.4623.49T:schwaemm256256v2
24.1624.1924.23T:isapa128av20
25.4125.4925.61T:schwaemm192192v2
26.1527.0627.16T:grain128aeadv2
27.2427.3227.55T:schwaemm128128v2
37.4837.5137.56romulust
39.6839.6839.75T:tinyjambu128v2
39.7039.7039.75T:tinyjambu192v2
39.9940.0440.07T:tinyjambu256v2
40.2940.3240.34T:giftcofb128v1
44.5244.5844.61T:isapk128av20
54.6554.6854.72T:isapk128v20
85.7986.3986.97T:isapxv20
112.35113.25120.66T:elephant200v2
3186.483190.473213.61T:elephant176v2
3566.703567.553574.17T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.141.141.14T:aes128gcmv1
1.231.241.25T:aes256gcmv1
1.241.241.25aes256gcmv1
6.566.586.58ascon128av12
9.499.499.49ascon128v12
9.499.509.52ascon80pqv12
11.3811.3911.40ascon128abi32v12
13.6413.6913.72T:xoodyakround3
17.1617.1917.24ascon128bi32v12
19.9620.0020.04T:schwaemm256128v2
24.1824.2124.22T:schwaemm256256v2
26.2226.2626.32T:schwaemm192192v2
27.6027.6227.65T:grain128aeadv2
27.8627.9428.00T:schwaemm128128v2
28.9628.9829.02romulusn
33.5233.5333.54T:isapa128av20
39.8739.9239.95romulusm
39.9740.1540.15T:isapa128v20
40.7740.7940.82T:giftcofb128v1
51.0151.0251.06T:tinyjambu128v2
54.7454.7554.75T:tinyjambu192v2
58.4258.4458.49T:tinyjambu256v2
60.6760.7060.73T:isapk128av20
75.4575.9576.04romulust
121.72121.85122.06T:isapk128v20
174.79174.83185.95T:elephant200v2
190.38190.47190.65T:isapxv20
4862.094863.674893.55T:elephant176v2
5416.025417.025425.15T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.171.181.19T:aes128gcmv1
1.221.221.25T:aes256gcmv1
1.281.291.31aes256gcmv1
6.496.516.54ascon128av12
9.459.469.46ascon128v12
9.489.489.50ascon80pqv12
11.4011.4011.40ascon128abi32v12
13.5713.6413.67T:xoodyakround3
17.0917.1117.11ascon128bi32v12
19.9620.0120.06T:schwaemm256128v2
24.1924.2024.24T:schwaemm256256v2
26.1826.2526.28T:schwaemm192192v2
27.1227.4727.69T:grain128aeadv2
27.8227.9427.98T:schwaemm128128v2
29.0129.0329.04romulusn
33.5333.5533.56T:isapa128av20
39.9640.0140.06romulusm
40.1040.1640.19T:isapa128v20
40.7840.8040.82T:giftcofb128v1
50.9951.0251.04T:tinyjambu128v2
54.6254.6254.63T:tinyjambu192v2
58.5358.5458.55T:tinyjambu256v2
61.1461.1961.20T:isapk128av20
76.0376.0476.07romulust
121.88122.05122.07T:isapk128v20
174.84174.88186.09T:elephant200v2
190.16190.30190.49T:isapxv20
4862.284865.654893.29T:elephant176v2
5415.305416.515426.36T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.171.171.18T:aes128gcmv1
1.231.231.24T:aes256gcmv1
1.291.291.30aes256gcmv1
6.506.506.54ascon128av12
9.459.469.46ascon128v12
9.489.489.50ascon80pqv12
11.4011.4011.46ascon128abi32v12
13.6313.6713.69T:xoodyakround3
17.1117.1217.12ascon128bi32v12
19.9520.0020.01T:schwaemm256128v2
24.2024.2024.21T:schwaemm256256v2
24.6224.6224.72T:isapa128v20
25.9725.9926.00T:isapa128av20
26.1926.2526.27T:schwaemm192192v2
27.0027.4827.53T:grain128aeadv2
27.9127.9528.05T:schwaemm128128v2
28.9929.0329.05romulusn
38.6238.6238.65romulust
39.9439.9940.05romulusm
40.8140.8340.84T:giftcofb128v1
48.1348.1448.15T:isapk128av20
51.0351.0451.06T:tinyjambu128v2
54.6054.6254.63T:tinyjambu192v2
58.4858.4858.49T:tinyjambu256v2
81.3381.3581.37T:isapk128v20
123.94124.12124.31T:isapxv20
174.71174.79185.89T:elephant200v2
4862.244863.674893.20T:elephant176v2
5414.395415.425426.42T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.506.626.86aes256gcmv1
7.007.077.10T:aes128gcmv1
10.6210.7510.86ascon128av12
12.6112.6213.04ascon80pqv12
12.7212.9013.45ascon128v12
13.8414.2014.39T:aes256gcmv1
17.9318.5518.89ascon128abi32v12
20.1520.6620.80T:xoodyakround3
23.6224.2926.05ascon128bi32v12
32.6632.9933.44T:schwaemm256128v2
34.6334.7734.89romulusn
35.4235.8736.10T:grain128aeadv2
36.0236.4537.16T:schwaemm128128v2
38.6938.7038.73T:schwaemm256256v2
42.4142.6943.19T:schwaemm192192v2
46.9247.1647.50romulusm
49.3949.5849.80T:giftcofb128v1
59.9059.9560.20T:tinyjambu128v2
64.2664.4964.76T:tinyjambu192v2
68.1568.4268.66T:tinyjambu256v2
102.05102.14102.53romulust
106.93107.19107.70T:isapa128av20
189.65189.70190.23T:isapk128av20
245.91246.30262.70T:elephant200v2
331.00331.19331.26T:isapa128v20
1303.271303.381303.82T:isapk128v20
1848.801853.701857.69T:isapxv20
6048.136053.996097.61T:elephant176v2
7247.557253.347259.66T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.556.606.87aes256gcmv1
6.976.987.02T:aes128gcmv1
10.7010.7311.03ascon128av12
12.7112.7913.10ascon128v12
12.8412.9913.16ascon80pqv12
13.8914.0514.56T:aes256gcmv1
17.9818.4018.71ascon128abi32v12
19.9720.6621.11T:xoodyakround3
24.1525.3426.08ascon128bi32v12
32.6633.1833.66T:schwaemm256128v2
34.9335.0035.21romulusn
35.1635.4936.07T:grain128aeadv2
36.0736.1136.42T:schwaemm128128v2
38.4838.5338.71T:schwaemm256256v2
42.1742.3242.96T:schwaemm192192v2
48.3148.4848.88romulusm
49.5649.6650.04T:giftcofb128v1
60.0260.0560.09T:tinyjambu128v2
64.0664.1264.22T:tinyjambu192v2
68.3068.4368.70T:tinyjambu256v2
102.11102.25102.81romulust
106.91107.17107.45T:isapa128av20
192.37192.91193.45T:isapk128av20
245.86245.99262.86T:elephant200v2
331.67331.95332.55T:isapa128v20
1303.591303.911304.38T:isapk128v20
1845.221847.581849.84T:isapxv20
6049.626052.666089.03T:elephant176v2
7246.007253.207260.82T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.546.606.60aes256gcmv1
6.986.986.98T:aes128gcmv1
10.5410.6110.78ascon128av12
12.7012.7013.02ascon128v12
12.8412.8412.98ascon80pqv12
13.9814.1214.23T:aes256gcmv1
18.0518.2718.30ascon128abi32v12
19.9120.4620.57T:xoodyakround3
25.0125.5925.73ascon128bi32v12
32.8032.8533.10T:schwaemm256128v2
34.8935.0535.15romulusn
35.4935.6036.30T:grain128aeadv2
36.0736.1136.84T:schwaemm128128v2
38.4638.5538.67T:schwaemm256256v2
42.0842.1242.74T:schwaemm192192v2
48.4148.4848.62romulusm
49.8749.8850.18T:giftcofb128v1
60.2060.2260.30T:tinyjambu128v2
63.7364.0264.24romulust
64.2964.2964.29T:tinyjambu192v2
66.6666.9967.15T:isapa128av20
68.2968.3368.34T:tinyjambu256v2
121.70122.03122.71T:isapk128av20
173.04173.27173.79T:isapa128v20
245.50245.62263.06T:elephant200v2
684.04684.34684.63T:isapk128v20
967.42968.24969.06T:isapxv20
6046.556054.696091.54T:elephant176v2
7245.997251.107257.18T:elephant160v2

amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.740.760.79T:aes128gcmv1
0.810.840.87T:aes256gcmv1
1.841.841.84aes256gcmv1
5.845.875.89ascon128av12
8.508.508.51ascon80pqv12
8.628.638.67ascon128v12
12.5312.5512.57ascon128abi32v12
16.6116.6416.67T:xoodyakround3
19.1119.1319.16ascon128bi32v12
19.4119.6019.67T:schwaemm256128v2
23.1523.1923.22T:grain128aeadv2
23.5424.0624.72T:schwaemm256256v2
25.5526.6026.77T:schwaemm192192v2
28.9829.0629.18T:schwaemm128128v2
34.1434.1434.14T:isapa128v20
35.1535.6835.69T:isapa128av20
37.0837.1037.12romulusn
38.4338.4438.45T:giftcofb128v1
58.4258.4858.49T:tinyjambu128v2
59.2959.3559.40romulusm
60.5260.5560.81T:isapk128av20
65.2565.6265.63T:tinyjambu256v2
66.0566.0566.05T:tinyjambu192v2
78.2778.4478.91T:isapk128v20
114.50114.55114.73romulust
149.27150.13150.81T:isapxv20
230.13234.45253.30T:elephant200v2
6703.406704.386706.34T:elephant176v2
7844.127847.637849.23T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.70?0.73?0.78?T:aes128gcmv1
0.740.790.82T:aes256gcmv1
1.821.831.83aes256gcmv1
6.256.256.26ascon128av12
8.438.448.45ascon80pqv12
8.568.578.57ascon128v12
12.6812.6912.71ascon128abi32v12
16.5516.5816.64T:xoodyakround3
18.4618.5018.55ascon128bi32v12
19.5419.6419.73T:schwaemm256128v2
22.8522.9823.13T:grain128aeadv2
23.8124.3224.56T:schwaemm256256v2
25.2025.2625.33T:schwaemm192192v2
29.0929.2229.30T:schwaemm128128v2
34.1134.1534.18T:isapa128v20
35.6535.7035.72T:isapa128av20
37.3137.3337.36romulusn
38.5038.5038.51T:giftcofb128v1
58.5758.5858.59T:tinyjambu128v2
59.7159.7659.78romulusm
60.3860.4160.48T:isapk128av20
64.7564.7664.77T:tinyjambu192v2
65.5065.5965.75T:tinyjambu256v2
76.5177.6778.68T:isapk128v20
114.56114.64114.71romulust
149.26150.08150.88T:isapxv20
228.43234.68251.98T:elephant200v2
6704.086705.246706.70T:elephant176v2
7845.457845.757868.44T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.66?0.74?0.80?T:aes128gcmv1
0.760.800.81T:aes256gcmv1
1.821.821.83aes256gcmv1
6.266.266.26ascon128av12
8.448.448.45ascon80pqv12
8.568.578.57ascon128v12
12.6912.6912.70ascon128abi32v12
16.5916.6416.72T:xoodyakround3
16.8516.9216.93T:isapa128v20
18.4618.5018.53ascon128bi32v12
19.5119.7319.81T:schwaemm256128v2
22.9723.1123.13T:grain128aeadv2
23.6123.6223.64T:isapa128av20
23.7624.3324.58T:schwaemm256256v2
25.2525.3326.11T:schwaemm192192v2
29.0429.1429.20T:schwaemm128128v2
37.2937.3137.34romulusn
38.4838.5038.50T:giftcofb128v1
38.7838.8438.90romulust
40.4840.6140.95T:isapk128av20
50.0550.6651.13T:isapk128v20
58.5858.5858.59T:tinyjambu128v2
59.6959.7459.76romulusm
64.7564.7664.77T:tinyjambu192v2
65.5065.7565.75T:tinyjambu256v2
87.3487.7988.65T:isapxv20
228.97234.72252.86T:elephant200v2
6701.786706.056712.84T:elephant176v2
7844.847845.407845.86T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.580.600.62T:aes128gcmv1
0.600.650.65T:aes256gcmv1
1.141.151.15aes256gcmv1
5.835.845.86ascon128av12
8.388.398.40ascon80pqv12
8.448.458.46ascon128v12
12.4012.4112.44ascon128abi32v12
12.6512.6612.67T:xoodyakround3
18.8318.8618.88ascon128bi32v12
19.2319.3119.40T:schwaemm256128v2
23.0323.0423.07T:grain128aeadv2
23.4724.0924.76T:schwaemm256256v2
25.5825.5925.60T:isapa128v20
26.2226.3626.42T:schwaemm192192v2
29.0329.1329.17T:schwaemm128128v2
29.3929.6429.65T:isapa128av20
29.7029.7129.73romulusn
38.4038.4138.42T:giftcofb128v1
40.8140.8340.86romulusm
47.5547.6147.62T:tinyjambu128v2
48.5448.9749.33T:isapk128av20
49.2449.2649.28T:tinyjambu256v2
51.2951.3051.31T:tinyjambu192v2
64.1164.6764.78T:isapk128v20
76.6976.7376.78romulust
118.21118.35118.65T:isapxv20
171.09174.84188.37T:elephant200v2
5007.345010.005010.43T:elephant176v2
5882.555883.945884.21T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.550.580.60T:aes128gcmv1
0.590.610.63T:aes256gcmv1
1.131.131.14aes256gcmv1
6.046.046.05ascon128av12
8.348.358.35ascon80pqv12
8.418.418.41ascon128v12
12.4312.4512.46ascon128abi32v12
12.6112.6412.67T:xoodyakround3
18.4918.5118.51ascon128bi32v12
19.1319.2619.36T:schwaemm256128v2
22.9422.9823.00T:grain128aeadv2
23.9524.3124.47T:schwaemm256256v2
25.5625.5725.59T:isapa128v20
26.0726.2226.30T:schwaemm192192v2
29.0529.1329.23T:schwaemm128128v2
29.3829.6429.65T:isapa128av20
29.7829.8129.84romulusn
38.4338.4338.44T:giftcofb128v1
41.0141.0341.05romulusm
47.6147.6747.67T:tinyjambu128v2
48.5548.6350.45T:isapk128av20
49.3249.3849.45T:tinyjambu256v2
50.6150.6650.69T:tinyjambu192v2
64.3564.5164.77T:isapk128v20
76.6776.7476.78romulust
117.90118.62119.35T:isapxv20
171.15175.15188.14T:elephant200v2
5008.235010.845033.74T:elephant176v2
5883.465884.585900.50T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.550.580.61T:aes128gcmv1
0.580.610.62T:aes256gcmv1
1.131.131.14aes256gcmv1
6.046.056.05ascon128av12
8.358.358.35ascon80pqv12
8.418.418.41ascon128v12
12.4412.4512.45ascon128abi32v12
12.6112.6412.68T:xoodyakround3
16.9216.9316.97T:isapa128v20
18.4918.5018.52ascon128bi32v12
19.2519.4119.58T:schwaemm256128v2
22.8622.9422.96T:grain128aeadv2
23.6323.6323.64T:isapa128av20
23.9224.2724.48T:schwaemm256256v2
26.1026.2626.43T:schwaemm192192v2
29.0629.1329.17T:schwaemm128128v2
29.7929.8129.83romulusn
38.4238.4438.46T:giftcofb128v1
38.8138.8538.90romulust
38.5238.9839.03T:isapk128av20
41.0141.0241.05romulusm
47.6647.6747.67T:tinyjambu128v2
49.3349.3849.43T:tinyjambu256v2
49.7650.3750.61T:isapk128v20
50.6550.6650.66T:tinyjambu192v2
86.1286.9987.68T:isapxv20
170.79174.98188.29T:elephant200v2
5004.875008.425009.96T:elephant176v2
5883.665884.845900.25T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.400.410.42T:aes128gcmv1
0.40?0.42?0.49?T:aes256gcmv1
0.440.450.46aes256gcmv1
5.805.805.82ascon128av12
8.248.258.26ascon128v12
8.258.258.26ascon80pqv12
8.638.658.68T:xoodyakround3
12.2312.2612.29ascon128abi32v12
17.0017.0017.01T:isapa128v20
18.4818.5718.64ascon128bi32v12
18.9018.9519.13T:schwaemm256128v2
22.2622.2922.34romulusm
22.2722.2922.33romulusn
22.8022.9122.95T:grain128aeadv2
23.6123.6323.63T:isapa128av20
23.4023.9524.57T:schwaemm256256v2
26.7526.8126.92T:schwaemm192192v2
29.0629.1429.26T:schwaemm128128v2
33.2433.2533.26T:tinyjambu256v2
36.5536.5536.55T:tinyjambu192v2
36.6136.6236.64T:tinyjambu128v2
36.4836.6536.88T:isapk128av20
38.3138.3538.36T:giftcofb128v1
38.8038.8638.90romulust
50.5250.6251.35T:isapk128v20
86.7687.1588.62T:isapxv20
112.70115.60124.43T:elephant200v2
3311.743312.323313.16T:elephant176v2
3921.753922.383923.03T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.410.430.44T:aes256gcmv1
0.41?0.43?0.48?T:aes128gcmv1
0.420.440.45aes256gcmv1
5.825.835.84ascon128av12
8.258.258.26ascon80pqv12
8.258.258.26ascon128v12
8.608.668.69T:xoodyakround3
12.1812.1912.20ascon128abi32v12
16.9717.0117.05T:isapa128v20
18.4818.5018.52ascon128bi32v12
18.9018.9819.18T:schwaemm256128v2
22.2622.2922.35romulusm
22.2822.3122.33romulusn
22.8722.9122.96T:grain128aeadv2
23.6223.6323.65T:isapa128av20
23.6524.2224.36T:schwaemm256256v2
26.7226.7626.83T:schwaemm192192v2
29.0529.1329.21T:schwaemm128128v2
33.2433.2533.26T:tinyjambu256v2
36.1236.3137.96T:isapk128av20
36.5436.5536.57T:tinyjambu192v2
36.6136.7536.76T:tinyjambu128v2
38.3538.3638.39T:giftcofb128v1
38.8338.8938.93romulust
49.7050.5350.83T:isapk128v20
86.6786.9987.50T:isapxv20
112.53?113.55?125.51?T:elephant200v2
3310.103311.873314.67T:elephant176v2
3922.193922.973933.66T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.400.420.44T:aes128gcmv1
0.410.420.44T:aes256gcmv1
0.430.440.45aes256gcmv1
5.835.835.84ascon128av12
8.258.258.26ascon80pqv12
8.258.258.26ascon128v12
8.628.688.72T:xoodyakround3
12.1912.1912.20ascon128abi32v12
16.9717.0117.05T:isapa128v20
18.4818.5018.53ascon128bi32v12
18.8318.8719.06T:schwaemm256128v2
22.2722.3022.34romulusm
22.2722.3122.34romulusn
22.8922.9322.95T:grain128aeadv2
23.6123.6223.65T:isapa128av20
23.7824.3124.39T:schwaemm256256v2
26.7526.9027.44T:schwaemm192192v2
29.0529.1529.27T:schwaemm128128v2
32.9733.2533.28T:tinyjambu256v2
36.2736.3336.40T:isapk128av20
36.5436.5536.55T:tinyjambu192v2
36.6136.6736.76T:tinyjambu128v2
38.3538.3838.38T:giftcofb128v1
38.7638.8438.91romulust
49.5149.7650.83T:isapk128v20
85.9486.3486.68T:isapxv20
114.46115.69124.30T:elephant200v2
3310.473312.293313.12T:elephant176v2
3921.793922.363922.92T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.001.011.03T:aes128gcmv1
1.031.041.05T:aes256gcmv1
1.271.281.28aes256gcmv1
6.016.016.02ascon128av12
8.518.528.54ascon80pqv12
8.568.588.59ascon128v12
12.6912.7012.72ascon128abi32v12
12.7612.7812.81T:xoodyakround3
19.1519.1719.19ascon128bi32v12
19.9019.9520.19T:schwaemm256128v2
23.4423.4623.47T:grain128aeadv2
24.4924.6925.25T:schwaemm256256v2
26.9126.9827.02T:schwaemm192192v2
29.4729.5529.61T:schwaemm128128v2
29.9429.9529.96romulusn
33.5733.8133.82T:isapa128av20
37.2137.2237.23T:isapa128v20
38.7538.7638.77T:giftcofb128v1
41.0641.0741.10romulusm
47.9748.0048.03T:tinyjambu128v2
49.6449.6449.65T:tinyjambu256v2
51.7051.7151.72T:tinyjambu192v2
54.6354.6854.71T:isapk128av20
77.7777.8277.89romulust
108.77108.84108.95T:isapk128v20
177.33178.90190.67T:elephant200v2
192.87193.00193.45T:isapxv20
5045.205045.315045.42T:elephant176v2
5950.395950.525950.93T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.990.991.01T:aes128gcmv1
1.021.031.05T:aes256gcmv1
1.261.271.27aes256gcmv1
6.196.196.21ascon128av12
8.478.478.48ascon80pqv12
8.538.538.54ascon128v12
12.7312.7312.75ascon128abi32v12
12.7612.7812.79T:xoodyakround3
18.8618.8618.87ascon128bi32v12
19.7719.8719.92T:schwaemm256128v2
23.2923.3223.34T:grain128aeadv2
24.4224.9325.09T:schwaemm256256v2
26.7226.7526.79T:schwaemm192192v2
29.5429.6429.70T:schwaemm128128v2
30.0730.0930.10romulusn
33.5833.6633.82T:isapa128av20
37.2137.2137.23T:isapa128v20
38.7938.8038.81T:giftcofb128v1
41.3041.3341.35romulusm
48.0548.0648.06T:tinyjambu128v2
49.6949.7849.84T:tinyjambu256v2
51.0851.1351.15T:tinyjambu192v2
54.4754.4854.53T:isapk128av20
77.8277.8677.88romulust
109.42109.67110.15T:isapk128v20
175.71178.48190.72T:elephant200v2
192.72193.20193.34T:isapxv20
5045.985046.585049.68T:elephant176v2
5950.635950.925951.20T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.990.991.02T:aes128gcmv1
1.031.031.04T:aes256gcmv1
1.261.261.27aes256gcmv1
6.196.196.19ascon128av12
8.478.478.48ascon80pqv12
8.538.548.54ascon128v12
12.7212.7312.73ascon128abi32v12
12.7712.7912.82T:xoodyakround3
18.8618.8618.87ascon128bi32v12
19.8519.9920.09T:schwaemm256128v2
22.8622.8622.88T:isapa128v20
23.2123.2623.30T:grain128aeadv2
24.4524.9325.08T:schwaemm256256v2
25.9225.9225.93T:isapa128av20
26.6526.7026.77T:schwaemm192192v2
29.5229.5629.63T:schwaemm128128v2
30.0530.0730.08romulusn
38.7938.7938.81T:giftcofb128v1
39.9239.9539.95romulust
41.3141.3341.35romulusm
41.9541.9842.02T:isapk128av20
48.0548.0548.05T:tinyjambu128v2
49.7849.8149.84T:tinyjambu256v2
51.1451.1451.14T:tinyjambu192v2
73.4873.5573.73T:isapk128v20
124.93125.64126.33T:isapxv20
175.63178.59190.99T:elephant200v2
5046.965047.405049.31T:elephant176v2
5950.465951.135952.29T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.076.126.20aes256gcmv1
9.849.8710.06ascon128av12
10.6010.6910.97T:aes128gcmv1
10.7410.9411.30T:aes256gcmv1
11.4011.4011.48ascon128v12
11.4011.4011.61ascon80pqv12
18.2818.3818.62T:xoodyakround3
19.5519.6419.97ascon128abi32v12
25.9526.2027.12ascon128bi32v12
31.9932.2432.39T:grain128aeadv2
33.2033.4033.78T:schwaemm256128v2
35.7235.8035.91romulusn
38.2638.4639.33T:schwaemm128128v2
39.3339.8440.46T:schwaemm256256v2
43.1943.5944.38T:schwaemm192192v2
46.5546.8146.91T:giftcofb128v1
46.9146.9847.14romulusm
56.7257.6757.93T:tinyjambu128v2
58.5458.6258.73T:tinyjambu256v2
61.0761.0961.26T:tinyjambu192v2
103.48103.59104.03romulust
128.79128.85128.94T:isapa128av20
186.66186.95189.28T:isapk128av20
248.16250.40268.98T:elephant200v2
304.56304.56304.69T:isapa128v20
1115.731116.051117.15T:isapk128v20
1880.431880.601885.59T:isapxv20
6299.986305.206321.93T:elephant176v2
7967.957971.207986.38T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.635.665.70aes256gcmv1
9.919.919.97ascon128av12
10.2010.2210.57T:aes128gcmv1
10.8710.9311.18T:aes256gcmv1
11.2711.2711.48ascon80pqv12
11.3811.3811.40ascon128v12
18.3418.4518.91T:xoodyakround3
19.3119.4119.77ascon128abi32v12
26.9526.9827.33ascon128bi32v12
31.2131.2731.41T:grain128aeadv2
33.2633.4633.82T:schwaemm256128v2
36.0136.1436.31romulusn
38.5238.9139.30T:schwaemm128128v2
39.3140.3540.66T:schwaemm256256v2
43.2643.5243.90T:schwaemm192192v2
46.8647.2147.32T:giftcofb128v1
48.3348.5348.72romulusm
56.7757.1258.30T:tinyjambu128v2
59.5259.9160.34T:tinyjambu256v2
62.0762.2262.52T:tinyjambu192v2
103.34103.68104.00romulust
128.99129.01129.70T:isapa128av20
184.05184.32184.59T:isapk128av20
247.73249.54269.07T:elephant200v2
304.65304.65305.32T:isapa128v20
1136.601140.041140.30T:isapk128v20
1882.421894.101898.41T:isapxv20
6286.356286.416324.73T:elephant176v2
7967.967969.527984.56T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.645.675.76aes256gcmv1
9.919.919.95ascon128av12
10.2310.3411.01T:aes128gcmv1
10.9510.9711.05T:aes256gcmv1
11.2711.2711.34ascon80pqv12
11.3611.3811.42ascon128v12
18.4918.5919.20T:xoodyakround3
19.3219.3919.41ascon128abi32v12
26.9126.9427.29ascon128bi32v12
31.2031.2731.37T:grain128aeadv2
33.4533.6133.82T:schwaemm256128v2
36.0136.1036.20romulusn
38.2538.5839.04T:schwaemm128128v2
39.5040.0240.56T:schwaemm256256v2
42.7843.3044.37T:schwaemm192192v2
46.8646.8847.25T:giftcofb128v1
48.3548.5148.64romulusm
56.8556.9156.95T:tinyjambu128v2
58.7959.7660.20T:tinyjambu256v2
62.0762.0762.27T:tinyjambu192v2
64.9665.1265.23romulust
77.2777.2877.63T:isapa128av20
115.81116.18116.79T:isapk128av20
158.71158.91159.52T:isapa128v20
249.12249.77274.28T:elephant200v2
594.52595.02599.62T:isapk128v20
987.45989.85991.39T:isapxv20
6290.116306.686311.01T:elephant176v2
7966.807970.457986.39T:elephant160v2

amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; beelink, supercop-20221122
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.711.721.72T:aes128gcmv1
1.841.851.86aes256gcmv1
5.605.635.66ascon128av12
8.138.138.13ascon80pqv12
8.378.388.42ascon128v12
12.4712.5112.54ascon128abi32v12
14.7114.8114.87T:xoodyakround3
18.1618.1918.21ascon128bi32v12
18.1918.2218.27T:schwaemm256128v2
22.8322.9824.98T:grain128aeadv2
23.69?24.01?26.82?T:schwaemm256256v2
24.1624.2224.27T:schwaemm192192v2
28.5228.6528.83T:schwaemm128128v2
31.0331.0431.04T:isapa128v20
33.2333.2633.30T:isapa128av20
37.1237.1537.18romulusn
38.5638.5738.57T:giftcofb128v1
58.5058.5058.53T:tinyjambu128v2
59.4059.4459.47romulusm
60.4160.7860.85T:isapk128av20
62.5062.5062.50T:tinyjambu192v2
65.7365.8765.88T:tinyjambu256v2
82.4582.5482.69T:isapk128v20
120.70120.76120.80romulust
122.92123.08123.35T:elephant200v2
146.77148.52150.81T:isapxv20
6338.496376.376446.46T:elephant176v2
7797.257802.347841.88T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.711.721.72T:aes128gcmv1
1.861.871.88aes256gcmv1
5.175.195.19ascon128av12
7.627.637.63ascon80pqv12
7.877.887.88ascon128v12
12.6212.6312.67ascon128abi32v12
14.6414.6914.75T:xoodyakround3
18.2118.2618.32T:schwaemm256128v2
18.6118.6418.67ascon128bi32v12
23.0523.1223.66T:grain128aeadv2
23.63?23.98?26.48?T:schwaemm256256v2
24.1324.2024.26T:schwaemm192192v2
28.4828.6328.73T:schwaemm128128v2
30.9931.0431.08T:isapa128v20
33.2333.2733.30T:isapa128av20
37.3637.4337.44romulusn
38.5038.5038.51T:giftcofb128v1
58.5058.5158.51T:tinyjambu128v2
59.7259.7759.83romulusm
60.3260.8460.87T:isapk128av20
62.7562.7562.77T:tinyjambu192v2
65.4865.5065.52T:tinyjambu256v2
82.3582.4882.61T:isapk128v20
120.68120.80120.87romulust
122.86122.95123.05T:elephant200v2
147.56148.13149.02T:isapxv20
6370.206385.586390.08T:elephant176v2
7793.947830.607874.24T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.711.711.72T:aes128gcmv1
1.861.861.87aes256gcmv1
5.175.195.19ascon128av12
7.637.637.64ascon80pqv12
7.887.887.88ascon128v12
12.6212.6312.66ascon128abi32v12
14.6814.7314.77T:xoodyakround3
15.4815.5215.55T:isapa128v20
18.2118.2718.31T:schwaemm256128v2
18.6218.6418.67ascon128bi32v12
22.3222.3822.38T:isapa128av20
23.0323.0923.64T:grain128aeadv2
23.67?24.02?26.53?T:schwaemm256256v2
24.1524.1924.26T:schwaemm192192v2
28.5228.6528.81T:schwaemm128128v2
37.3637.4237.45romulusn
38.5038.5038.51T:giftcofb128v1
40.9841.0341.09romulust
43.6243.6543.83T:isapk128av20
56.2056.3556.41T:isapk128v20
58.5058.5158.52T:tinyjambu128v2
59.7159.7559.80romulusm
62.7562.7562.75T:tinyjambu192v2
65.4965.5065.52T:tinyjambu256v2
85.2385.4886.15T:isapxv20
122.93123.03123.15T:elephant200v2
6346.986368.476381.26T:elephant176v2
7790.827809.507886.74T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.081.091.09T:aes128gcmv1
1.141.151.16aes256gcmv1
5.625.635.65ascon128av12
7.877.887.89ascon80pqv12
8.128.148.15ascon128v12
11.3911.4511.47T:xoodyakround3
12.2412.3512.38ascon128abi32v12
18.0818.1118.14T:schwaemm256128v2
18.4018.4218.44ascon128bi32v12
22.8222.9524.96T:grain128aeadv2
23.2723.2923.29T:isapa128v20
23.6023.6323.81T:schwaemm256256v2
24.5824.7524.91T:schwaemm192192v2
27.2427.2727.28T:isapa128av20
28.5028.5828.66T:schwaemm128128v2
29.7429.7529.76romulusn
38.3838.3838.39T:giftcofb128v1
40.8940.9040.93romulusm
46.7546.7746.77T:tinyjambu128v2
46.5147.0847.59T:isapk128av20
49.6049.6149.62T:tinyjambu256v2
50.1350.1450.15T:tinyjambu192v2
65.6665.7565.80T:isapk128v20
80.8780.9180.94romulust
92.6692.7392.78T:elephant200v2
116.76117.01118.31T:isapxv20
4741.224750.674759.86T:elephant176v2
5832.585863.745936.02T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.081.081.10T:aes128gcmv1
1.151.151.15aes256gcmv1
5.265.275.28ascon128av12
7.757.767.76ascon80pqv12
7.817.827.82ascon128v12
11.3411.3611.38T:xoodyakround3
12.4412.4812.50ascon128abi32v12
18.1218.1418.18T:schwaemm256128v2
18.2418.2618.27ascon128bi32v12
22.9423.0123.60T:grain128aeadv2
23.2723.2723.28T:isapa128v20
23.6423.7423.84T:schwaemm256256v2
24.5124.6624.86T:schwaemm192192v2
27.2527.2627.28T:isapa128av20
28.4728.5128.61T:schwaemm128128v2
29.8629.8929.92romulusn
38.3538.3538.35T:giftcofb128v1
41.0341.0641.09romulusm
46.7646.7646.76T:tinyjambu128v2
46.6347.3547.61T:isapk128av20
49.4249.4249.43T:tinyjambu256v2
50.0150.0150.01T:tinyjambu192v2
65.5665.5965.66T:isapk128v20
80.8680.9380.98romulust
92.6892.7592.79T:elephant200v2
116.62116.93117.22T:isapxv20
4734.124747.394752.12T:elephant176v2
5827.775869.735874.79T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.081.091.09T:aes128gcmv1
1.151.151.15aes256gcmv1
5.265.275.28ascon128av12
7.767.767.76ascon80pqv12
7.817.827.82ascon128v12
11.3411.3611.39T:xoodyakround3
12.4812.4812.48ascon128abi32v12
15.5015.5115.53T:isapa128v20
18.1118.1318.16T:schwaemm256128v2
18.2518.2618.27ascon128bi32v12
21.7821.8221.85T:isapa128av20
22.9623.0523.69T:grain128aeadv2
23.6423.7923.84T:schwaemm256256v2
24.3424.3924.51T:schwaemm192192v2
28.4528.5828.66T:schwaemm128128v2
29.8729.8829.92romulusn
38.3538.3538.35T:giftcofb128v1
38.3638.9739.04T:isapk128av20
40.9740.9941.03romulust
41.0541.0741.08romulusm
46.7646.7646.77T:tinyjambu128v2
49.4249.4249.43T:tinyjambu256v2
50.0150.0150.01T:tinyjambu192v2
52.5252.5952.65T:isapk128v20
85.4685.7285.95T:isapxv20
92.6992.7592.89T:elephant200v2
4740.394766.574806.43T:elephant176v2
5850.635892.455913.32T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.440.450.46aes256gcmv1
0.450.450.46T:aes128gcmv1
5.615.635.64ascon128av12
7.617.627.64ascon80pqv12
7.867.877.88ascon128v12
8.018.048.07T:xoodyakround3
12.1712.2012.22ascon128abi32v12
15.5115.5115.51T:isapa128v20
17.9618.0218.09T:schwaemm256128v2
18.5718.6318.68ascon128bi32v12
21.2121.2621.29T:isapa128av20
22.3322.3622.39romulusm
22.3422.3722.40romulusn
22.8322.9324.81T:grain128aeadv2
23.2123.5823.65T:schwaemm256256v2
24.6324.8224.93T:schwaemm192192v2
28.4228.5228.61T:schwaemm128128v2
33.3433.3533.36T:tinyjambu256v2
33.7833.8234.24T:isapk128av20
35.0035.0035.00T:tinyjambu128v2
37.7637.7637.77T:tinyjambu192v2
38.1938.2038.21T:giftcofb128v1
40.9641.0241.08romulust
48.8548.8848.93T:isapk128v20
62.6062.6862.77T:elephant200v2
84.8685.4186.34T:isapxv20
3135.503151.443183.76T:elephant176v2
3906.033907.183942.88T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.430.430.45aes256gcmv1
0.450.460.46T:aes128gcmv1
5.365.365.36ascon128av12
7.747.757.75ascon128v12
7.887.887.88ascon80pqv12
8.008.048.08T:xoodyakround3
12.2912.3312.34ascon128abi32v12
15.4815.4815.55T:isapa128v20
17.8517.8817.91ascon128bi32v12
17.9818.0218.08T:schwaemm256128v2
21.2121.2621.32T:isapa128av20
22.3322.3622.42romulusm
22.3522.3822.42romulusn
22.8222.9323.64T:grain128aeadv2
23.1223.4323.58T:schwaemm256256v2
24.6024.8625.15T:schwaemm192192v2
28.4228.5128.72T:schwaemm128128v2
33.3433.3533.36T:tinyjambu256v2
33.5933.6234.34T:isapk128av20
35.0035.0135.02T:tinyjambu128v2
37.2637.2637.27T:tinyjambu192v2
38.1838.2038.20T:giftcofb128v1
40.9441.0341.12romulust
48.8148.8948.91T:isapk128v20
62.6462.7062.76T:elephant200v2
85.2285.4785.93T:isapxv20
3131.503143.493150.94T:elephant176v2
3907.113910.443912.19T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.430.430.44aes256gcmv1
0.450.450.46T:aes128gcmv1
5.365.365.37ascon128av12
7.757.757.76ascon128v12
7.887.887.88ascon80pqv12
8.018.068.10T:xoodyakround3
12.3212.3312.33ascon128abi32v12
15.4815.5115.54T:isapa128v20
17.8517.8817.90ascon128bi32v12
17.9818.0218.07T:schwaemm256128v2
21.2221.2621.32T:isapa128av20
22.3322.3722.40romulusm
22.3222.3822.41romulusn
22.8922.9523.64T:grain128aeadv2
23.1823.5023.64T:schwaemm256256v2
24.5724.7224.79T:schwaemm192192v2
28.3928.4928.59T:schwaemm128128v2
33.3433.3533.36T:tinyjambu256v2
33.6133.6834.33T:isapk128av20
35.0135.0135.02T:tinyjambu128v2
37.2637.2637.27T:tinyjambu192v2
38.1938.1938.20T:giftcofb128v1
40.9341.0141.07romulust
48.8248.8848.91T:isapk128v20
62.6362.6862.73T:elephant200v2
85.0885.4285.96T:isapxv20
3131.963159.333174.82T:elephant176v2
3899.623937.973941.54T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.191.191.20T:aes128gcmv1
1.261.271.27aes256gcmv1
5.775.785.80ascon128av12
8.008.008.01ascon80pqv12
8.258.258.26ascon128v12
11.4711.5611.58T:xoodyakround3
12.6412.6412.68ascon128abi32v12
18.6518.7018.73T:schwaemm256128v2
18.7518.7618.78ascon128bi32v12
23.3223.3525.17T:grain128aeadv2
24.2524.2924.49T:schwaemm256256v2
25.0025.0325.11T:schwaemm192192v2
28.9228.9729.04T:schwaemm128128v2
29.5029.5029.51T:isapa128av20
30.0130.0230.04romulusn
34.1534.1534.17T:isapa128v20
38.6838.6838.69T:giftcofb128v1
41.1641.1841.20romulusm
47.1147.1247.13T:tinyjambu128v2
50.0050.0050.00T:tinyjambu256v2
50.5150.5250.52T:tinyjambu192v2
53.2254.2656.38T:isapk128av20
82.1682.1882.21romulust
94.7694.8194.88T:elephant200v2
106.09106.13106.16T:isapk128v20
190.26190.37191.64T:isapxv20
4761.784791.864794.63T:elephant176v2
5923.265931.535995.92T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.201.201.20T:aes128gcmv1
1.271.271.28aes256gcmv1
5.415.435.44ascon128av12
7.887.887.88ascon80pqv12
7.937.937.93ascon128v12
11.4411.4511.48T:xoodyakround3
12.7612.7712.80ascon128abi32v12
18.6218.6218.64ascon128bi32v12
18.6918.7118.73T:schwaemm256128v2
23.3623.4324.01T:grain128aeadv2
24.2524.3424.45T:schwaemm256256v2
24.9925.0425.11T:schwaemm192192v2
28.9028.9829.03T:schwaemm128128v2
29.4929.4929.49T:isapa128av20
30.1630.1830.19romulusn
34.1534.1534.17T:isapa128v20
38.6538.6538.65T:giftcofb128v1
41.3641.3841.42romulusm
47.1047.1147.11T:tinyjambu128v2
49.8149.8249.82T:tinyjambu256v2
50.3950.3950.41T:tinyjambu192v2
53.1254.2554.28T:isapk128av20
82.1582.1982.23romulust
94.6894.7594.79T:elephant200v2
106.02106.06106.11T:isapk128v20
189.80190.21190.44T:isapxv20
4761.824775.454800.87T:elephant176v2
5910.335921.365922.18T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.201.201.20T:aes128gcmv1
1.271.271.27aes256gcmv1
5.415.415.43ascon128av12
7.887.887.88ascon80pqv12
7.937.937.94ascon128v12
11.4411.4711.52T:xoodyakround3
12.7612.7612.77ascon128abi32v12
18.6218.6218.64ascon128bi32v12
18.6718.7018.73T:schwaemm256128v2
21.0421.0421.06T:isapa128v20
23.0723.0723.09T:isapa128av20
23.3723.4024.00T:grain128aeadv2
24.2324.2924.42T:schwaemm256256v2
24.9725.0225.11T:schwaemm192192v2
28.9729.0029.05T:schwaemm128128v2
30.1530.1630.21romulusn
38.6538.6538.65T:giftcofb128v1
41.3641.3741.41romulusm
42.2642.3242.34romulust
42.4643.5245.50T:isapk128av20
47.1047.1147.11T:tinyjambu128v2
49.8149.8149.82T:tinyjambu256v2
50.3950.3950.39T:tinyjambu192v2
73.4573.5073.56T:isapk128v20
94.6794.7094.78T:elephant200v2
122.85123.30123.37T:isapxv20
4771.994785.924794.56T:elephant176v2
5909.645911.045915.89T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.525.565.59T:aes128gcmv1
5.885.896.00aes256gcmv1
8.648.929.20ascon128av12
10.6610.8010.85ascon80pqv12
11.0411.1211.12ascon128v12
16.5916.6616.77T:xoodyakround3
19.3719.4520.33ascon128abi32v12
26.4126.4527.17ascon128bi32v12
31.2331.3431.47T:schwaemm256128v2
31.7031.9533.05T:grain128aeadv2
35.9535.9636.10romulusn
37.5837.7738.20T:schwaemm128128v2
38.8139.0239.13T:schwaemm256256v2
39.8140.1740.55T:schwaemm192192v2
45.5045.5445.70T:giftcofb128v1
46.9547.0547.26romulusm
55.0555.0555.22T:tinyjambu128v2
58.6658.7758.93T:tinyjambu256v2
58.8858.9059.05T:tinyjambu192v2
80.6580.7281.25T:isapa128av20
111.05111.27111.66romulust
135.48135.75135.98T:elephant200v2
170.85170.95171.12T:isapk128av20
284.11284.11284.30T:isapa128v20
1023.011023.261023.58T:isapk128v20
1850.391855.261856.27T:isapxv20
5936.705955.885963.47T:elephant176v2
7920.737926.407956.11T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.315.345.40T:aes128gcmv1
5.685.715.81aes256gcmv1
8.999.119.16ascon128av12
10.6210.6210.69ascon80pqv12
10.6410.6710.70ascon128v12
16.6716.8016.88T:xoodyakround3
19.4819.4819.88ascon128abi32v12
26.9526.9727.72ascon128bi32v12
31.2331.5531.69T:schwaemm256128v2
32.1732.3132.67T:grain128aeadv2
36.4036.5336.74romulusn
37.3037.8738.42T:schwaemm128128v2
38.7939.0639.27T:schwaemm256256v2
39.9440.6340.91T:schwaemm192192v2
45.6245.6545.70T:giftcofb128v1
48.5048.6348.79romulusm
54.9954.9955.12T:tinyjambu128v2
58.6258.8058.93T:tinyjambu256v2
58.7658.8158.98T:tinyjambu192v2
80.5680.6281.02T:isapa128av20
111.30111.65112.13romulust
135.48135.73136.54T:elephant200v2
170.80170.82170.93T:isapk128av20
284.08284.11284.76T:isapa128v20
1023.151023.621023.79T:isapk128v20
1851.591854.451855.48T:isapxv20
5931.365940.515969.55T:elephant176v2
7900.127925.547964.16T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.305.335.44T:aes128gcmv1
5.705.735.81aes256gcmv1
8.869.119.11ascon128av12
10.5910.5910.59ascon80pqv12
10.6410.6410.64ascon128v12
16.6816.8016.85T:xoodyakround3
19.4619.4619.48ascon128abi32v12
26.9526.9527.35ascon128bi32v12
31.1231.2731.59T:schwaemm256128v2
31.5632.2332.51T:grain128aeadv2
36.4536.4836.66romulusn
37.4538.0138.27T:schwaemm128128v2
38.6739.1139.48T:schwaemm256256v2
40.1740.3440.93T:schwaemm192192v2
45.6245.6445.68T:giftcofb128v1
48.4148.5648.88romulusm
51.6551.7352.70T:isapa128av20
54.9854.9954.99T:tinyjambu128v2
58.5858.7058.76T:tinyjambu256v2
58.7558.7758.86T:tinyjambu192v2
71.0571.2771.87romulust
112.60112.65113.30T:isapk128av20
135.66136.09136.22T:elephant200v2
147.97147.99148.70T:isapa128v20
544.39544.50545.23T:isapk128v20
965.23968.04972.39T:isapxv20
5964.675992.596003.13T:elephant176v2
7909.527921.347931.19T:elephant160v2

amd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.930.960.99T:aes256gcmv1
1.511.521.54T:aes128gcmv1
1.661.671.69aes256gcmv1
6.406.416.41ascon128av12
9.389.399.40ascon128v12
9.419.429.42ascon80pqv12
11.1311.3011.41ascon128abi32v12
16.9417.0317.11ascon128bi32v12
17.9217.9517.99T:xoodyakround3
19.4219.5519.66T:schwaemm256128v2
23.6723.7424.32T:schwaemm256256v2
25.7325.7925.86T:schwaemm192192v2
26.8827.2327.33T:grain128aeadv2
27.5827.6027.88T:schwaemm128128v2
35.5635.5835.61romulusn
36.3836.4436.46T:isapa128av20
36.5436.5636.60T:isapa128v20
40.4640.5140.55T:giftcofb128v1
57.1457.1857.21romulusm
61.6061.6961.70T:tinyjambu128v2
64.9865.1965.27T:isapk128av20
68.9168.9668.98T:tinyjambu192v2
75.9575.9775.98T:tinyjambu256v2
84.9285.2585.69T:isapk128v20
112.27112.30112.32romulust
147.32148.09155.33T:isapxv20
227.74?229.78?254.38?T:elephant200v2
6479.916492.526536.91T:elephant176v2
7159.117184.497191.96T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.87?0.94?1.01?T:aes256gcmv1
1.611.621.63T:aes128gcmv1
1.801.811.82aes256gcmv1
6.286.306.30ascon128av12
9.269.319.31ascon128v12
9.399.399.41ascon80pqv12
11.2011.2511.27ascon128abi32v12
16.7916.9516.98ascon128bi32v12
17.7917.8217.87T:xoodyakround3
19.4419.5319.62T:schwaemm256128v2
23.6523.7424.27T:schwaemm256256v2
25.6025.7325.84T:schwaemm192192v2
27.1227.4627.50T:grain128aeadv2
27.5427.6027.79T:schwaemm128128v2
35.4035.4335.47romulusn
36.4236.4536.53T:isapa128av20
36.4536.7136.81T:isapa128v20
40.4940.5240.58T:giftcofb128v1
57.2457.2757.31romulusm
61.5061.5161.56T:tinyjambu128v2
64.9264.9865.06T:isapk128av20
68.7468.7568.75T:tinyjambu192v2
76.0676.1376.15T:tinyjambu256v2
85.1585.6785.71T:isapk128v20
112.24112.29112.33romulust
147.65148.65156.27T:isapxv20
227.69?229.73?254.79?T:elephant200v2
6476.426485.956537.56T:elephant176v2
7160.037185.367193.40T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.890.930.96T:aes256gcmv1
1.611.611.62T:aes128gcmv1
1.791.801.82aes256gcmv1
6.266.286.32ascon128av12
9.259.269.29ascon128v12
9.369.379.39ascon80pqv12
11.2411.2511.25ascon128abi32v12
16.7816.9116.99ascon128bi32v12
17.8117.8617.91T:xoodyakround3
18.0918.0918.13T:isapa128v20
19.4419.5119.59T:schwaemm256128v2
23.6623.7324.30T:schwaemm256256v2
24.1124.1624.21T:isapa128av20
25.6425.7225.81T:schwaemm192192v2
26.9527.4827.51T:grain128aeadv2
27.4627.6427.78T:schwaemm128128v2
35.4035.4235.46romulusn
37.4837.5837.59romulust
40.5040.5340.56T:giftcofb128v1
44.2444.5044.68T:isapk128av20
54.5754.6154.65T:isapk128v20
57.1857.2757.32romulusm
61.4161.5061.52T:tinyjambu128v2
68.7168.8068.81T:tinyjambu192v2
76.0476.0676.15T:tinyjambu256v2
86.3986.8695.11T:isapxv20
227.75?229.86?254.61?T:elephant200v2
6477.786489.906537.36T:elephant176v2
7159.327184.857190.72T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.670.690.71T:aes256gcmv1
1.011.021.02T:aes128gcmv1
1.091.101.10aes256gcmv1
6.376.406.43ascon128av12
9.319.349.37ascon80pqv12
9.329.369.37ascon128v12
11.0411.0811.11ascon128abi32v12
13.5113.5413.58T:xoodyakround3
16.7916.8916.94ascon128bi32v12
19.3819.4419.49T:schwaemm256128v2
23.5523.6224.38T:schwaemm256256v2
25.5625.6225.66T:schwaemm192192v2
27.2227.2627.35T:grain128aeadv2
27.2627.3127.43T:isapa128v20
27.4727.5727.62T:schwaemm128128v2
28.7328.7528.78romulusn
30.2930.3230.34T:isapa128av20
39.5139.5639.61romulusm
40.4040.4240.45T:giftcofb128v1
50.6450.6550.68T:tinyjambu128v2
54.3254.3354.35T:tinyjambu192v2
54.7654.8554.89T:isapk128av20
57.9958.0058.02T:tinyjambu256v2
69.7969.8470.18T:isapk128v20
74.7874.8974.92romulust
117.05117.43120.14T:isapxv20
169.98?171.30?189.60?T:elephant200v2
4838.444845.854887.75T:elephant176v2
5368.615388.865392.63T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.670.680.70T:aes256gcmv1
1.051.071.07T:aes128gcmv1
1.151.161.17aes256gcmv1
6.346.346.36ascon128av12
9.299.319.31ascon128v12
9.339.359.35ascon80pqv12
11.0811.1011.11ascon128abi32v12
13.4413.4613.50T:xoodyakround3
16.6916.7216.78ascon128bi32v12
19.3619.3919.42T:schwaemm256128v2
23.5523.6124.42T:schwaemm256256v2
25.5525.6225.67T:schwaemm192192v2
27.0827.1527.33T:grain128aeadv2
27.1827.2727.46T:isapa128v20
27.4327.5327.57T:schwaemm128128v2
28.6528.6928.70romulusn
30.3030.3330.37T:isapa128av20
39.5339.5739.62romulusm
40.3940.4140.45T:giftcofb128v1
50.6250.6250.63T:tinyjambu128v2
54.1954.2154.22T:tinyjambu192v2
54.7454.7854.83T:isapk128av20
58.0958.0958.16T:tinyjambu256v2
69.7370.1470.18T:isapk128v20
74.8874.8974.92romulust
116.14116.93124.83T:isapxv20
170.01?171.36?189.54?T:elephant200v2
4843.524848.634881.93T:elephant176v2
5373.555390.305395.59T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.670.680.70T:aes256gcmv1
1.061.061.07T:aes128gcmv1
1.161.161.16aes256gcmv1
6.356.366.36ascon128av12
9.289.319.32ascon128v12
9.339.349.34ascon80pqv12
11.1011.1111.11ascon128abi32v12
13.4813.5013.53T:xoodyakround3
16.7216.7416.75ascon128bi32v12
18.0918.1218.26T:isapa128v20
19.3219.3919.42T:schwaemm256128v2
23.5423.6124.35T:schwaemm256256v2
24.1724.1924.21T:isapa128av20
25.6125.6525.68T:schwaemm192192v2
27.1127.3327.41T:grain128aeadv2
27.4527.5427.57T:schwaemm128128v2
28.6428.6728.71romulusn
37.5137.5337.56romulust
39.4939.5439.62romulusm
40.4040.4240.44T:giftcofb128v1
44.3744.5144.60T:isapk128av20
50.6150.6150.62T:tinyjambu128v2
54.2054.2254.23T:tinyjambu192v2
54.6254.6554.68T:isapk128v20
58.0458.0558.09T:tinyjambu256v2
86.0886.5094.19T:isapxv20
170.07?171.40?189.47?T:elephant200v2
4839.604846.764891.40T:elephant176v2
5373.625389.355393.21T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.400.430.44T:aes256gcmv1
0.510.520.53T:aes128gcmv1
0.510.530.54aes256gcmv1
6.316.336.36ascon128av12
9.079.139.18T:xoodyakround3
9.259.289.29ascon80pqv12
9.289.289.30ascon128v12
10.9110.9410.95ascon128abi32v12
16.5116.7116.77ascon128bi32v12
18.2318.2318.30T:isapa128v20
19.1919.2919.39T:schwaemm256128v2
21.7921.8821.98romulusm
21.9021.9322.00romulusn
23.3923.4824.34T:schwaemm256256v2
24.1324.2024.24T:isapa128av20
25.4625.5225.61T:schwaemm192192v2
27.1527.2227.24T:grain128aeadv2
27.2427.3427.60T:schwaemm128128v2
37.5037.5837.58romulust
39.6539.6939.72T:tinyjambu128v2
39.6939.7039.72T:tinyjambu192v2
40.0240.1140.12T:tinyjambu256v2
40.2440.2940.31T:giftcofb128v1
44.3444.5344.75T:isapk128av20
54.6254.7354.76T:isapk128v20
86.1086.4386.56T:isapxv20
112.19?113.24?125.10?T:elephant200v2
3191.353204.093220.33T:elephant176v2
3575.873583.683590.31T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.420.430.45T:aes256gcmv1
0.490.510.53T:aes128gcmv1
0.520.530.55aes256gcmv1
6.336.356.38ascon128av12
9.089.139.15T:xoodyakround3
9.299.299.31ascon80pqv12
9.279.299.30ascon128v12
10.9410.9610.97ascon128abi32v12
16.5116.5916.65ascon128bi32v12
18.1818.2418.31T:isapa128v20
19.2119.2519.37T:schwaemm256128v2
21.7321.8421.89romulusm
21.9221.9521.97romulusn
23.4423.5224.25T:schwaemm256256v2
24.1424.1824.23T:isapa128av20
25.4425.4925.61T:schwaemm192192v2
26.7727.1027.19T:grain128aeadv2
27.2527.3027.56T:schwaemm128128v2
37.4937.5337.59romulust
39.6939.7039.71T:tinyjambu192v2
39.7239.7639.76T:tinyjambu128v2
40.1240.1340.13T:tinyjambu256v2
40.2740.3240.34T:giftcofb128v1
44.3044.5544.75T:isapk128av20
54.6354.6854.71T:isapk128v20
85.8886.1593.40T:isapxv20
112.11?113.26?125.09?T:elephant200v2
3193.913202.133222.39T:elephant176v2
3575.543583.653587.31T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.420.430.44T:aes256gcmv1
0.500.520.53T:aes128gcmv1
0.520.520.53aes256gcmv1
6.356.376.38ascon128av12
9.069.119.20T:xoodyakround3
9.289.289.30ascon128v12
9.289.299.29ascon80pqv12
10.9610.9611.04ascon128abi32v12
16.5216.6016.67ascon128bi32v12
18.2018.2618.31T:isapa128v20
19.2319.2619.36T:schwaemm256128v2
21.7921.8621.90romulusm
21.8221.8721.93romulusn
23.3123.4524.22T:schwaemm256256v2
24.1524.2124.28T:isapa128av20
25.4525.5325.58T:schwaemm192192v2
27.0927.1927.26T:grain128aeadv2
27.3127.3427.53T:schwaemm128128v2
37.5037.5337.59romulust
39.6939.7039.70T:tinyjambu128v2
39.7039.7039.72T:tinyjambu192v2
40.0140.0140.07T:tinyjambu256v2
40.2940.3240.35T:giftcofb128v1
44.2844.5044.71T:isapk128av20
54.6354.6854.72T:isapk128v20
86.0186.3593.79T:isapxv20
112.15?113.21?124.94?T:elephant200v2
3197.953207.343220.46T:elephant176v2
3573.853584.943589.49T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.141.141.15T:aes128gcmv1
1.221.231.26T:aes256gcmv1
1.231.231.25aes256gcmv1
6.546.586.59ascon128av12
9.489.499.53ascon128v12
9.499.509.51ascon80pqv12
11.3811.4011.41ascon128abi32v12
13.6713.6713.68T:xoodyakround3
17.1617.2017.23ascon128bi32v12
19.9419.9720.03T:schwaemm256128v2
24.2224.2524.90T:schwaemm256256v2
26.1526.2226.26T:schwaemm192192v2
27.5327.6027.66T:grain128aeadv2
27.8727.9128.01T:schwaemm128128v2
28.9629.0029.01romulusn
33.5333.5433.56T:isapa128av20
39.8739.9339.95romulusm
39.9740.1440.15T:isapa128v20
40.7740.8040.81T:giftcofb128v1
51.0151.0351.05T:tinyjambu128v2
54.7554.7654.76T:tinyjambu192v2
58.4558.4658.51T:tinyjambu256v2
60.9060.9160.93T:isapk128av20
76.0376.0476.04romulust
121.59121.64121.92T:isapk128v20
174.89174.89192.11T:elephant200v2
190.19190.64192.76T:isapxv20
4876.684881.544914.68T:elephant176v2
5429.465448.325451.09T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.181.181.19T:aes128gcmv1
1.221.231.24T:aes256gcmv1
1.301.301.31aes256gcmv1
6.496.506.51ascon128av12
9.449.449.46ascon128v12
9.489.489.51ascon80pqv12
11.4011.4011.41ascon128abi32v12
13.6113.6213.63T:xoodyakround3
17.0617.0917.12ascon128bi32v12
19.9720.0120.04T:schwaemm256128v2
24.2424.2524.93T:schwaemm256256v2
26.1926.2326.26T:schwaemm192192v2
27.4927.5127.65T:grain128aeadv2
27.8327.9127.97T:schwaemm128128v2
28.9628.9728.97romulusn
33.5433.5733.58T:isapa128av20
39.9339.9740.02T:isapa128v20
39.9739.9840.03romulusm
40.7840.8040.82T:giftcofb128v1
51.0351.0351.09T:tinyjambu128v2
54.6254.6354.65T:tinyjambu192v2
58.5258.5258.55T:tinyjambu256v2
60.8960.9160.93T:isapk128av20
76.0376.0576.09romulust
121.58121.94121.96T:isapk128v20
174.87174.89192.09T:elephant200v2
188.96190.34197.50T:isapxv20
4877.484884.154916.36T:elephant176v2
5429.445447.555451.82T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.181.181.18T:aes128gcmv1
1.221.221.23T:aes256gcmv1
1.301.301.31aes256gcmv1
6.506.506.50ascon128av12
9.449.449.46ascon128v12
9.489.489.50ascon80pqv12
11.4011.4011.46ascon128abi32v12
13.6313.6413.66T:xoodyakround3
17.0617.0917.11ascon128bi32v12
19.9419.9820.01T:schwaemm256128v2
24.2424.2524.95T:schwaemm256256v2
24.6224.6424.78T:isapa128v20
25.9725.9926.01T:isapa128av20
26.1726.1926.24T:schwaemm192192v2
27.4927.5427.68T:grain128aeadv2
27.8627.9928.12T:schwaemm128128v2
28.9428.9728.98romulusn
38.6238.6438.65romulust
39.9640.0040.05romulusm
40.8040.8040.83T:giftcofb128v1
47.9648.0948.11T:isapk128av20
51.0251.0251.03T:tinyjambu128v2
54.6154.6154.62T:tinyjambu192v2
58.4958.4958.50T:tinyjambu256v2
81.1381.1381.17T:isapk128v20
123.81124.12131.20T:isapxv20
174.87174.89192.01T:elephant200v2
4877.194880.614918.35T:elephant176v2
5427.755446.885450.55T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.077.307.48T:aes128gcmv1
7.507.558.22aes256gcmv1
10.6810.8010.84ascon128av12
12.6112.9113.29ascon80pqv12
12.7013.2113.30ascon128v12
14.2714.5214.83T:aes256gcmv1
17.9318.4319.04ascon128abi32v12
20.3120.6720.76T:xoodyakround3
23.6224.2925.84ascon128bi32v12
32.6632.9334.00T:schwaemm256128v2
35.1235.2335.23romulusn
35.4135.8136.05T:grain128aeadv2
35.7736.3837.05T:schwaemm128128v2
38.6138.8139.64T:schwaemm256256v2
42.7042.8043.49T:schwaemm192192v2
46.7947.2647.45romulusm
49.3449.4249.62T:giftcofb128v1
59.9459.9460.02T:tinyjambu128v2
64.2664.4964.76T:tinyjambu192v2
68.0968.5368.66T:tinyjambu256v2
101.78102.18102.71romulust
106.88107.19107.72T:isapa128av20
189.36190.15191.49T:isapk128av20
246.23246.43268.19T:elephant200v2
331.00331.00331.19T:isapa128v20
1298.381298.611298.68T:isapk128v20
1847.811853.021853.85T:isapxv20
6058.866063.956105.74T:elephant176v2
7272.367283.277289.09T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.686.906.97T:aes128gcmv1
7.517.707.84aes256gcmv1
10.7210.7310.91ascon128av12
12.7112.9813.26ascon128v12
12.8413.2413.53ascon80pqv12
14.3614.5215.02T:aes256gcmv1
17.9818.5019.26ascon128abi32v12
19.7720.7721.26T:xoodyakround3
24.7725.6626.20ascon128bi32v12
32.6532.8634.27T:schwaemm256128v2
35.0735.2235.55romulusn
35.6435.9136.30T:grain128aeadv2
36.1736.4836.84T:schwaemm128128v2
38.7338.8339.74T:schwaemm256256v2
42.3242.7343.45T:schwaemm192192v2
48.5048.5449.06romulusm
49.5649.6050.16T:giftcofb128v1
59.8459.8860.00T:tinyjambu128v2
64.0364.0964.27T:tinyjambu192v2
68.1568.3468.35T:tinyjambu256v2
102.23102.50102.62romulust
106.91107.12107.39T:isapa128av20
191.62191.69192.55T:isapk128av20
245.62245.68268.40T:elephant200v2
330.62331.03332.59T:isapa128v20
1298.761299.021299.52T:isapk128v20
1850.031854.221856.11T:isapxv20
6059.676062.956110.30T:elephant176v2
7263.097282.917285.97T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.756.846.88T:aes128gcmv1
7.527.807.98aes256gcmv1
10.5110.6110.72ascon128av12
12.7012.7013.02ascon128v12
12.8412.8413.05ascon80pqv12
14.2014.2814.56T:aes256gcmv1
18.0118.2618.38ascon128abi32v12
20.1020.4320.53T:xoodyakround3
25.3125.5925.59ascon128bi32v12
32.8633.2733.42T:schwaemm256128v2
35.1935.2735.49romulusn
35.7836.2736.55T:grain128aeadv2
36.1436.4836.73T:schwaemm128128v2
38.7238.7739.80T:schwaemm256256v2
42.1242.9443.18T:schwaemm192192v2
48.2348.3948.84romulusm
49.8849.9250.28T:giftcofb128v1
59.7759.7860.34T:tinyjambu128v2
63.5063.6264.05romulust
64.2464.2964.29T:tinyjambu192v2
66.6666.9967.20T:isapa128av20
68.2968.2968.34T:tinyjambu256v2
119.27121.96122.33T:isapk128av20
173.04173.34173.79T:isapa128v20
245.65245.88268.23T:elephant200v2
679.05679.49679.62T:isapk128v20
965.03970.05972.27T:isapxv20
6060.326063.156101.25T:elephant176v2
7261.967282.027286.75T:elephant160v2

amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.461.481.49T:aes128gcmv1
1.631.641.66aes256gcmv1
10.7510.7610.77ascon128av12
15.1415.1415.15ascon80pqv12
15.3215.3415.35ascon128v12
21.0721.7821.86T:xoodyakround3
22.1122.1422.18T:schwaemm256128v2
23.2123.4223.42ascon128abi32v12
29.2329.2929.37T:schwaemm192192v2
32.3832.4132.44T:schwaemm256256v2
33.4333.5033.56T:schwaemm128128v2
34.1134.1234.13ascon128bi32v12
38.9638.9739.12T:grain128aeadv2
46.6446.7746.92romulusn
47.9748.1248.23T:giftcofb128v1
61.3961.9762.16T:isapa128av20
68.3968.5469.07T:isapa128v20
75.9676.0676.21T:tinyjambu128v2
76.9076.9577.05romulusm
95.4195.4895.55T:tinyjambu192v2
103.95104.07104.29T:tinyjambu256v2
106.35106.44106.59T:isapk128av20
141.35141.60144.67T:isapk128v20
145.48145.55145.95romulust
197.06197.42203.22T:elephant200v2
210.90213.04231.62T:isapxv20
10390.6010392.7910395.20T:elephant176v2
11799.8911806.7011810.69T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.591.611.62T:aes128gcmv1
1.691.711.73aes256gcmv1
10.2410.3010.35ascon128av12
15.3115.3915.63ascon80pqv12
15.0815.5215.53ascon128v12
20.6820.7821.69T:xoodyakround3
22.1222.1622.18T:schwaemm256128v2
23.4323.4423.46ascon128abi32v12
29.3029.3629.40T:schwaemm192192v2
32.3632.4232.44T:schwaemm256256v2
33.3933.4333.50T:schwaemm128128v2
33.8733.9333.95ascon128bi32v12
39.2739.3439.40T:grain128aeadv2
46.7846.8646.96romulusn
47.8247.8447.97T:giftcofb128v1
61.1261.9261.99T:isapa128av20
68.4268.8069.03T:isapa128v20
76.4276.4776.50T:tinyjambu128v2
77.0977.2477.32romulusm
95.1395.2895.41T:tinyjambu192v2
104.26104.55104.63T:tinyjambu256v2
106.35106.45106.81T:isapk128av20
140.83141.50142.07T:isapk128v20
145.56145.69145.76romulust
197.00200.00203.13T:elephant200v2
211.29212.69230.67T:isapxv20
10383.1610386.3110390.57T:elephant176v2
11800.2811808.4311813.37T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.591.601.61T:aes128gcmv1
1.701.721.73aes256gcmv1
10.2410.2510.27ascon128av12
15.2415.2515.38ascon80pqv12
15.5415.5615.56ascon128v12
20.7720.8621.75T:xoodyakround3
22.1222.1422.19T:schwaemm256128v2
23.3223.4523.46ascon128abi32v12
29.2429.3529.41T:schwaemm192192v2
32.3332.4332.46T:schwaemm256256v2
33.3833.4233.49T:schwaemm128128v2
33.8733.9433.95ascon128bi32v12
34.2334.3934.46T:isapa128v20
39.3139.3539.64T:grain128aeadv2
40.3940.7941.09T:isapa128av20
46.9347.0347.13romulusn
47.9948.3448.48T:giftcofb128v1
51.8351.9252.02romulust
70.5970.6570.71T:isapk128av20
76.4276.4576.50T:tinyjambu128v2
77.1277.2177.46romulusm
87.9688.0488.33T:isapk128v20
95.1095.3795.45T:tinyjambu192v2
104.28104.36104.55T:tinyjambu256v2
126.09126.19126.56T:isapxv20
197.45199.84203.13T:elephant200v2
10385.6510389.1510393.31T:elephant176v2
11797.2211805.3911808.27T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.001.021.02T:aes128gcmv1
1.091.101.10aes256gcmv1
10.3910.4110.43ascon128av12
14.9814.9915.00ascon80pqv12
15.0615.0715.09ascon128v12
15.4915.5215.54T:xoodyakround3
21.9622.0122.04T:schwaemm256128v2
23.0723.1023.18ascon128abi32v12
29.1829.2229.27T:schwaemm192192v2
32.1732.2432.27T:schwaemm256256v2
33.3333.4433.61T:schwaemm128128v2
34.1234.1434.23ascon128bi32v12
38.8338.8638.96T:grain128aeadv2
39.1839.2139.27romulusn
48.0048.1148.23T:giftcofb128v1
51.1851.2151.49T:isapa128v20
51.2151.3851.66T:isapa128av20
53.3453.4053.54romulusm
62.2262.2562.34T:tinyjambu128v2
74.6274.6974.73T:tinyjambu192v2
78.6078.6478.71T:tinyjambu256v2
88.3088.5888.63T:isapk128av20
98.4298.5498.80romulust
114.23114.71115.01T:isapk128v20
148.59149.85152.77T:elephant200v2
168.65169.74178.99T:isapxv20
7758.587760.997763.19T:elephant176v2
8848.208852.078852.92T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.041.071.08T:aes128gcmv1
1.111.141.15aes256gcmv1
10.2810.2910.32ascon128av12
14.9314.9715.18ascon128v12
15.0315.1015.17ascon80pqv12
15.3615.3915.82T:xoodyakround3
21.9522.0022.04T:schwaemm256128v2
23.0423.0723.14ascon128abi32v12
29.1529.2029.28T:schwaemm192192v2
32.1932.2532.27T:schwaemm256256v2
33.3433.3633.58T:schwaemm128128v2
33.5633.6033.61ascon128bi32v12
39.0739.1239.21T:grain128aeadv2
39.3139.3439.38romulusn
48.0048.0848.18T:giftcofb128v1
51.1151.3251.48T:isapa128v20
51.2951.4551.69T:isapa128av20
53.4853.5253.61romulusm
62.4262.4562.50T:tinyjambu128v2
74.4874.6274.72T:tinyjambu192v2
78.7478.8178.86T:tinyjambu256v2
88.5688.6189.11T:isapk128av20
98.4498.5998.73romulust
114.62114.74114.99T:isapk128v20
148.14149.61152.16T:elephant200v2
169.01169.55178.11T:isapxv20
7756.327758.337761.19T:elephant176v2
8847.038850.728852.31T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.071.071.08T:aes128gcmv1
1.111.131.14aes256gcmv1
10.2910.3110.33ascon128av12
15.0515.1215.25ascon80pqv12
14.9615.1815.19ascon128v12
15.3915.4215.90T:xoodyakround3
21.9722.0122.03T:schwaemm256128v2
22.9923.0723.14ascon128abi32v12
29.1929.2329.24T:schwaemm192192v2
32.1832.2432.30T:schwaemm256256v2
33.3833.4333.55T:schwaemm128128v2
33.5933.6033.67ascon128bi32v12
33.9534.1534.37T:isapa128v20
39.1139.1639.24T:grain128aeadv2
39.3139.3539.40romulusn
40.8541.1141.24T:isapa128av20
47.9748.1048.26T:giftcofb128v1
51.5751.6851.75romulust
53.4853.5253.57romulusm
62.4362.4662.50T:tinyjambu128v2
70.6370.6870.73T:isapk128av20
74.4474.5374.58T:tinyjambu192v2
78.7078.8178.86T:tinyjambu256v2
88.0388.0688.84T:isapk128v20
126.13126.37126.49T:isapxv20
148.35149.31152.47T:elephant200v2
7760.617761.947763.34T:elephant176v2
8842.698850.438852.87T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.550.560.57T:aes128gcmv1
0.540.560.57aes256gcmv1
9.9610.0110.05T:xoodyakround3
10.0510.0610.07ascon128av12
14.7914.8114.82ascon128v12
14.8314.8414.85ascon80pqv12
21.8921.9321.96T:schwaemm256128v2
22.9322.9422.96ascon128abi32v12
29.0329.0629.08T:schwaemm192192v2
29.7729.8129.86romulusm
31.6231.6931.74romulusn
32.0932.1232.15T:schwaemm256256v2
33.4933.5133.91T:isapa128v20
33.4433.5733.78T:schwaemm128128v2
33.9134.0634.14ascon128bi32v12
38.7138.7438.77T:grain128aeadv2
40.9240.9941.08T:isapa128av20
48.0448.1948.40T:giftcofb128v1
48.3648.4348.50T:tinyjambu128v2
51.2451.4851.59romulust
53.1353.2153.25T:tinyjambu256v2
53.7653.8253.92T:tinyjambu192v2
70.6370.7470.76T:isapk128av20
87.5987.9488.29T:isapk128v20
99.89100.11102.46T:elephant200v2
126.39126.45126.97T:isapxv20
5128.635130.325132.38T:elephant176v2
5894.755897.415901.82T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.530.550.57T:aes128gcmv1
0.550.560.58aes256gcmv1
9.9610.0210.03T:xoodyakround3
10.2410.3010.32ascon128av12
14.8014.8114.82ascon128v12
14.8214.8414.84ascon80pqv12
21.8121.8921.93T:schwaemm256128v2
22.6822.8222.83ascon128abi32v12
29.0429.0629.09T:schwaemm192192v2
29.7629.8529.89romulusm
31.6131.6631.76romulusn
32.0932.1432.17T:schwaemm256256v2
33.2433.2533.26ascon128bi32v12
33.1533.3733.68T:schwaemm128128v2
33.4533.5934.27T:isapa128v20
38.6138.7939.11T:grain128aeadv2
40.9441.1241.22T:isapa128av20
47.9948.1248.39T:giftcofb128v1
48.3648.4048.48T:tinyjambu128v2
51.3851.6051.85romulust
53.1253.1553.20T:tinyjambu256v2
53.8153.8653.99T:tinyjambu192v2
70.6470.6970.76T:isapk128av20
87.6088.0388.36T:isapk128v20
100.58100.86102.81T:elephant200v2
126.05126.17127.06T:isapxv20
5127.725132.065134.40T:elephant176v2
5895.805899.385901.93T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.530.540.55T:aes128gcmv1
0.550.560.57aes256gcmv1
9.969.9810.03T:xoodyakround3
10.2510.3210.33ascon128av12
14.8114.8114.82ascon128v12
14.8314.8514.87ascon80pqv12
21.8221.8821.91T:schwaemm256128v2
22.6922.8222.83ascon128abi32v12
29.0429.0729.10T:schwaemm192192v2
29.8129.8529.90romulusm
31.6631.7131.73romulusn
32.0732.1232.16T:schwaemm256256v2
33.2433.2533.26ascon128bi32v12
33.4933.6434.33T:isapa128v20
33.3533.6533.75T:schwaemm128128v2
38.6338.8238.83T:grain128aeadv2
40.9641.0641.36T:isapa128av20
48.0248.0648.21T:giftcofb128v1
48.3448.4048.45T:tinyjambu128v2
51.3751.5951.80romulust
53.1353.1753.26T:tinyjambu256v2
53.8353.8853.97T:tinyjambu192v2
70.6470.7070.75T:isapk128av20
87.8888.0288.56T:isapk128v20
99.95100.75102.98T:elephant200v2
126.04126.14127.02T:isapxv20
5129.805131.125132.96T:elephant176v2
5892.745898.675900.31T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.151.151.15T:aes128gcmv1
1.251.261.27aes256gcmv1
10.6710.6810.69ascon128av12
15.2315.2415.29ascon80pqv12
15.3015.3115.32ascon128v12
15.6815.7015.73T:xoodyakround3
22.6222.6622.68T:schwaemm256128v2
23.6023.6723.69ascon128abi32v12
29.8129.8629.88T:schwaemm192192v2
33.0633.1233.17T:schwaemm256256v2
33.8333.9234.05T:schwaemm128128v2
34.5434.6134.64ascon128bi32v12
39.3139.3339.43T:grain128aeadv2
39.5439.5739.63romulusn
48.5348.6048.65T:giftcofb128v1
53.7053.7853.82romulusm
55.0355.1655.25T:isapa128av20
62.6562.7162.80T:tinyjambu128v2
74.4574.5274.79T:isapa128v20
75.1775.2175.27T:tinyjambu192v2
79.1679.2479.29T:tinyjambu256v2
100.19100.23100.40romulust
100.67100.69100.77T:isapk128av20
152.19153.15155.75T:elephant200v2
201.30201.38201.81T:isapk128v20
277.54278.24286.67T:isapxv20
7814.437816.697819.61T:elephant176v2
8950.688953.518959.11T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.201.211.23T:aes128gcmv1
1.291.291.30aes256gcmv1
10.5510.5510.55ascon128av12
15.2815.3415.36ascon80pqv12
15.1915.3915.40ascon128v12
15.5215.5715.95T:xoodyakround3
22.6122.6322.65T:schwaemm256128v2
23.5723.5823.65ascon128abi32v12
29.8229.8729.89T:schwaemm192192v2
33.0833.1133.17T:schwaemm256256v2
33.8833.9734.00T:schwaemm128128v2
34.1034.1034.11ascon128bi32v12
39.4239.5839.64T:grain128aeadv2
39.6739.7039.83romulusn
48.5048.6048.85T:giftcofb128v1
53.9854.0054.06romulusm
55.1855.2255.38T:isapa128av20
62.9062.9462.97T:tinyjambu128v2
74.5474.6974.98T:isapa128v20
75.0775.1675.22T:tinyjambu192v2
79.3579.4479.49T:tinyjambu256v2
100.25100.29100.35romulust
100.64100.69101.42T:isapk128av20
151.91152.44155.58T:elephant200v2
201.29201.40201.72T:isapk128v20
277.89278.23286.01T:isapxv20
7815.327822.167823.76T:elephant176v2
8950.618959.588961.56T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.201.211.21T:aes128gcmv1
1.291.291.30aes256gcmv1
10.5410.5510.56ascon128av12
15.2815.3415.37ascon80pqv12
15.1915.3915.40ascon128v12
15.5615.6015.99T:xoodyakround3
22.6122.6422.66T:schwaemm256128v2
23.5723.5823.65ascon128abi32v12
29.8429.8729.88T:schwaemm192192v2
33.1033.1233.18T:schwaemm256256v2
33.7633.7933.87T:schwaemm128128v2
34.0734.0734.10ascon128bi32v12
39.4839.6539.69T:grain128aeadv2
39.6339.7139.80romulusn
42.8842.9443.19T:isapa128av20
46.0446.1146.28T:isapa128v20
48.5048.6148.73T:giftcofb128v1
53.3053.3753.43romulust
53.9754.0154.06romulusm
62.9062.9562.99T:tinyjambu128v2
75.0675.1375.18T:tinyjambu192v2
78.3478.3878.41T:isapk128av20
79.3179.3879.44T:tinyjambu256v2
132.84132.89133.24T:isapk128v20
151.81153.13155.75T:elephant200v2
181.70181.88181.95T:isapxv20
7814.447817.377819.90T:elephant176v2
8949.938956.038959.47T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.137.237.35aes256gcmv1
7.587.647.78T:aes128gcmv1
16.1916.2816.52ascon128av12
20.1920.3920.62ascon128v12
20.3920.4820.69ascon80pqv12
23.2323.3023.53T:xoodyakround3
34.9535.1335.48ascon128abi32v12
37.1037.1837.28T:schwaemm256128v2
43.7743.9644.50T:schwaemm128128v2
45.9446.0346.16ascon128bi32v12
47.7747.8948.08romulusn
48.0348.1248.39T:schwaemm192192v2
49.6649.6950.23T:grain128aeadv2
52.5552.7352.94T:schwaemm256256v2
59.1059.2159.61T:giftcofb128v1
62.7862.8563.20romulusm
74.0274.2074.38T:tinyjambu128v2
88.1988.3888.48T:tinyjambu192v2
92.5792.8593.09T:tinyjambu256v2
137.88138.41139.10romulust
141.31141.70142.13T:isapa128av20
216.66217.30221.38T:elephant200v2
361.28361.59361.93T:isapk128av20
613.28616.20616.35T:isapa128v20
2168.502170.482176.54T:isapk128v20
2741.962749.932750.61T:isapxv20
9735.539739.429745.37T:elephant176v2
11982.1811988.9911993.58T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.746.837.28aes256gcmv1
7.457.597.69T:aes128gcmv1
16.0916.1616.43ascon128av12
20.3220.5320.74ascon128v12
20.4820.7020.80ascon80pqv12
22.7723.0923.32T:xoodyakround3
35.0535.1335.43ascon128abi32v12
37.1637.2437.27T:schwaemm256128v2
43.7644.2144.38T:schwaemm128128v2
45.5045.5445.98ascon128bi32v12
48.0748.0948.23T:schwaemm192192v2
48.0748.1148.35romulusn
49.7049.7650.12T:grain128aeadv2
52.5252.5952.77T:schwaemm256256v2
59.6059.7359.99T:giftcofb128v1
65.1765.4565.59romulusm
74.1774.3074.43T:tinyjambu128v2
88.2088.3588.43T:tinyjambu192v2
92.9893.1593.28T:tinyjambu256v2
137.62138.08138.41romulust
141.04141.55142.42T:isapa128av20
216.76217.06220.91T:elephant200v2
360.06360.83361.96T:isapk128av20
611.64616.30617.13T:isapa128v20
2168.352169.422170.73T:isapk128v20
2743.292746.572749.86T:isapxv20
9734.689740.069743.58T:elephant176v2
11982.0911983.9811989.62T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.736.857.00aes256gcmv1
7.447.457.59T:aes128gcmv1
15.9916.0316.11ascon128av12
20.1520.2020.23ascon128v12
20.3420.4820.62ascon80pqv12
23.0323.2023.27T:xoodyakround3
35.0635.1735.27ascon128abi32v12
37.1337.2237.28T:schwaemm256128v2
43.7443.8444.02T:schwaemm128128v2
45.4845.5145.66ascon128bi32v12
48.0548.0648.09T:schwaemm192192v2
47.9548.1048.36romulusn
49.7349.8049.91T:grain128aeadv2
52.4552.5752.71T:schwaemm256256v2
59.3859.5159.85T:giftcofb128v1
65.2165.4265.77romulusm
74.2774.4474.59T:tinyjambu128v2
88.1088.2988.37T:tinyjambu192v2
88.9689.2690.25romulust
91.1391.3591.74T:isapa128av20
92.8993.0293.23T:tinyjambu256v2
216.62216.95221.24T:elephant200v2
240.73241.11241.80T:isapk128av20
318.72323.53324.27T:isapa128v20
1145.521145.781150.41T:isapk128v20
1434.621435.261437.83T:isapxv20
9734.339739.759742.05T:elephant176v2
11981.9011987.2111990.85T:elephant160v2

amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.471.481.49T:aes128gcmv1
1.631.641.66aes256gcmv1
10.7610.7610.77ascon128av12
15.0315.1415.21ascon80pqv12
15.3115.3315.35ascon128v12
21.6421.7221.73T:xoodyakround3
22.0922.1222.19T:schwaemm256128v2
23.2123.2223.42ascon128abi32v12
29.2529.2929.42T:schwaemm192192v2
32.3632.3832.39T:schwaemm256256v2
33.3333.3833.43T:schwaemm128128v2
34.1034.1234.13ascon128bi32v12
38.9438.9638.97T:grain128aeadv2
47.4247.4447.50romulusn
47.9648.1148.21T:giftcofb128v1
60.9561.3062.18T:isapa128av20
68.3868.5168.61T:isapa128v20
76.0476.1376.18T:tinyjambu128v2
76.8776.9677.36romulusm
95.3895.4195.50T:tinyjambu192v2
103.90104.02104.10T:tinyjambu256v2
106.30106.44106.53T:isapk128av20
141.19141.55142.93T:isapk128v20
145.74145.82145.93romulust
199.05199.38201.17T:elephant200v2
211.51212.96214.09T:isapxv20
10389.3010407.1110512.20T:elephant176v2
11786.0711794.7611804.09T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.601.621.63T:aes128gcmv1
1.691.711.73aes256gcmv1
10.2410.2610.31ascon128av12
15.2115.3515.38ascon80pqv12
15.5015.5215.53ascon128v12
20.7020.7220.75T:xoodyakround3
22.0622.1222.19T:schwaemm256128v2
23.4323.4423.45ascon128abi32v12
29.2429.3629.41T:schwaemm192192v2
32.0632.3832.43T:schwaemm256256v2
33.3633.4233.46T:schwaemm128128v2
33.8533.9233.95ascon128bi32v12
39.0539.2639.80T:grain128aeadv2
47.3247.4547.78romulusn
47.7947.9448.01T:giftcofb128v1
61.7162.0362.30T:isapa128av20
68.2168.6669.05T:isapa128v20
76.4276.4776.53T:tinyjambu128v2
77.0977.2777.54romulusm
95.1195.2295.41T:tinyjambu192v2
104.27104.31104.35T:tinyjambu256v2
106.34106.39106.69T:isapk128av20
140.57141.45143.48T:isapk128v20
145.63145.84146.47romulust
196.06196.85201.68T:elephant200v2
212.23212.49212.95T:isapxv20
10389.7810394.7610517.31T:elephant176v2
11795.5211802.1811810.81T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.601.611.63T:aes128gcmv1
1.691.711.72aes256gcmv1
10.2410.2510.28ascon128av12
15.2515.3715.38ascon80pqv12
15.1015.5315.54ascon128v12
20.7320.7720.81T:xoodyakround3
22.1022.1222.19T:schwaemm256128v2
23.4323.4423.45ascon128abi32v12
29.2429.3829.41T:schwaemm192192v2
31.9632.3732.39T:schwaemm256256v2
33.3533.4333.49T:schwaemm128128v2
33.8633.9433.95ascon128bi32v12
34.2334.3934.44T:isapa128v20
38.8939.6239.80T:grain128aeadv2
40.4740.6540.83T:isapa128av20
47.4147.4347.45romulusn
47.8247.9348.03T:giftcofb128v1
51.8451.9752.79romulust
70.5970.6670.71T:isapk128av20
76.4376.4876.51T:tinyjambu128v2
77.0677.2477.53romulusm
87.8788.0788.96T:isapk128v20
95.1395.2095.40T:tinyjambu192v2
104.20104.35104.39T:tinyjambu256v2
126.26126.48126.74T:isapxv20
196.10198.67201.71T:elephant200v2
10387.9510400.3110534.77T:elephant176v2
11794.9811804.3111808.85T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.001.021.02T:aes128gcmv1
1.081.101.10aes256gcmv1
10.4010.4110.43ascon128av12
14.9815.0015.06ascon80pqv12
15.0715.0815.11ascon128v12
15.5115.5315.75T:xoodyakround3
21.9822.0322.08T:schwaemm256128v2
23.0823.1023.19ascon128abi32v12
29.1529.2329.32T:schwaemm192192v2
32.2032.2432.27T:schwaemm256256v2
33.2333.3133.40T:schwaemm128128v2
34.0834.1334.24ascon128bi32v12
38.5538.6538.78romulusn
38.8338.8538.96T:grain128aeadv2
48.0548.1348.20T:giftcofb128v1
50.9951.1351.36T:isapa128v20
51.3651.4151.58T:isapa128av20
53.3053.4253.75romulusm
62.2162.2462.28T:tinyjambu128v2
74.5774.6374.71T:tinyjambu192v2
78.5678.6078.64T:tinyjambu256v2
88.5288.5888.84T:isapk128av20
98.6098.7298.79romulust
114.46114.75115.27T:isapk128v20
147.70149.53151.97T:elephant200v2
168.96169.71170.44T:isapxv20
7751.107760.217762.36T:elephant176v2
8840.228841.708848.05T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.061.081.09T:aes128gcmv1
1.111.131.14aes256gcmv1
10.2810.2910.31ascon128av12
15.0215.0915.19ascon80pqv12
15.1515.1615.18ascon128v12
15.3415.3515.38T:xoodyakround3
21.9822.0022.08T:schwaemm256128v2
23.0623.0623.14ascon128abi32v12
29.1329.1729.29T:schwaemm192192v2
32.0032.2132.23T:schwaemm256256v2
33.1833.3533.69T:schwaemm128128v2
33.5533.5733.60ascon128bi32v12
38.5638.6238.89romulusn
38.8838.9239.27T:grain128aeadv2
47.9948.0848.14T:giftcofb128v1
50.9951.1651.32T:isapa128v20
51.1851.4651.56T:isapa128av20
53.3953.4753.82romulusm
62.3962.4362.46T:tinyjambu128v2
74.4874.5874.65T:tinyjambu192v2
78.6978.7378.76T:tinyjambu256v2
88.5288.5789.04T:isapk128av20
98.4298.7099.48romulust
114.31114.80115.37T:isapk128v20
147.64149.18152.05T:elephant200v2
169.27169.65170.07T:isapxv20
7751.987760.787763.75T:elephant176v2
8844.308851.068851.92T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.071.081.08T:aes128gcmv1
1.131.141.14aes256gcmv1
10.2610.2910.30ascon128av12
14.9515.0115.19ascon128v12
15.0515.1215.17ascon80pqv12
15.3515.3915.42T:xoodyakround3
22.0022.0122.03T:schwaemm256128v2
23.0623.0723.14ascon128abi32v12
29.1529.1929.29T:schwaemm192192v2
32.0632.2032.23T:schwaemm256256v2
33.3033.3133.46T:schwaemm128128v2
33.5633.5733.61ascon128bi32v12
33.9534.1534.36T:isapa128v20
38.5238.5938.99romulusn
38.8939.1739.27T:grain128aeadv2
40.5440.6941.01T:isapa128av20
47.9948.1448.21T:giftcofb128v1
51.5051.5852.79romulust
53.4353.4953.78romulusm
62.4162.4562.51T:tinyjambu128v2
70.6670.6971.10T:isapk128av20
74.4274.5574.61T:tinyjambu192v2
78.7178.7578.78T:tinyjambu256v2
87.4488.0488.38T:isapk128v20
126.20126.48126.83T:isapxv20
148.67149.23151.99T:elephant200v2
7756.647760.267763.95T:elephant176v2
8840.808847.248850.85T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.540.560.57T:aes128gcmv1
0.550.570.59aes256gcmv1
9.9510.0010.04T:xoodyakround3
10.0510.0610.07ascon128av12
14.7914.8114.82ascon128v12
14.8114.8414.85ascon80pqv12
21.7221.7721.85T:schwaemm256128v2
22.9422.9522.97ascon128abi32v12
28.9929.0829.30T:schwaemm192192v2
29.7129.9230.22romulusn
29.8329.9230.15romulusm
32.0332.0632.12T:schwaemm256256v2
33.1333.4933.57T:schwaemm128128v2
33.5033.5933.96T:isapa128v20
34.0434.0534.14ascon128bi32v12
38.7138.7438.97T:grain128aeadv2
40.8940.9841.20T:isapa128av20
47.9848.1248.24T:giftcofb128v1
48.3548.4348.49T:tinyjambu128v2
51.4951.6951.85romulust
53.1453.2053.28T:tinyjambu256v2
53.7953.8353.86T:tinyjambu192v2
70.6670.7370.79T:isapk128av20
87.7987.9888.21T:isapk128v20
99.74100.36102.34T:elephant200v2
126.25126.49126.64T:isapxv20
5126.175133.785137.79T:elephant176v2
5892.225897.095902.67T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.530.540.56T:aes128gcmv1
0.550.560.57aes256gcmv1
9.969.9910.02T:xoodyakround3
10.2310.3110.31ascon128av12
14.7814.8014.82ascon128v12
14.8014.8114.86ascon80pqv12
21.7621.8421.94T:schwaemm256128v2
22.6822.8222.83ascon128abi32v12
28.9929.0729.19T:schwaemm192192v2
29.7229.7930.29romulusn
29.7329.8730.20romulusm
31.8432.0632.09T:schwaemm256256v2
33.2433.2533.26ascon128bi32v12
33.3133.4233.50T:schwaemm128128v2
33.2233.6434.26T:isapa128v20
38.7038.7238.74T:grain128aeadv2
41.0341.0941.21T:isapa128av20
47.9348.1248.29T:giftcofb128v1
48.3448.4348.49T:tinyjambu128v2
51.3351.6252.54romulust
53.1153.1453.18T:tinyjambu256v2
53.7853.8453.88T:tinyjambu192v2
70.6270.7370.78T:isapk128av20
87.1688.1488.58T:isapk128v20
100.30100.73102.30T:elephant200v2
126.09126.31126.45T:isapxv20
5128.775137.815140.20T:elephant176v2
5892.095896.785900.22T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.530.540.55T:aes128gcmv1
0.550.560.57aes256gcmv1
9.9710.0010.03T:xoodyakround3
10.2910.3110.32ascon128av12
14.8014.8114.82ascon128v12
14.8314.8414.85ascon80pqv12
21.7621.8521.89T:schwaemm256128v2
22.6822.8222.83ascon128abi32v12
28.9929.0529.14T:schwaemm192192v2
29.7029.7830.24romulusn
29.7429.8230.20romulusm
31.8432.0532.10T:schwaemm256256v2
33.2533.2633.26ascon128bi32v12
33.3033.3333.73T:isapa128v20
33.3033.4233.60T:schwaemm128128v2
38.7138.7338.74T:grain128aeadv2
40.8440.9641.11T:isapa128av20
47.9548.0348.15T:giftcofb128v1
48.3548.4348.52T:tinyjambu128v2
51.3851.5452.59romulust
53.1253.1753.25T:tinyjambu256v2
53.7553.7953.83T:tinyjambu192v2
70.6570.7070.76T:isapk128av20
87.9488.0889.68T:isapk128v20
99.6699.87102.47T:elephant200v2
126.21126.40126.63T:isapxv20
5123.015133.205138.32T:elephant176v2
5887.845895.965901.70T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.151.151.16T:aes128gcmv1
1.251.261.27aes256gcmv1
10.6710.6810.69ascon128av12
15.2315.2315.24ascon80pqv12
15.3015.3015.31ascon128v12
15.6515.6815.91T:xoodyakround3
22.6122.6422.66T:schwaemm256128v2
23.6123.6823.69ascon128abi32v12
29.8129.8429.95T:schwaemm192192v2
33.0933.1033.19T:schwaemm256256v2
33.6833.7533.84T:schwaemm128128v2
34.5434.6134.72ascon128bi32v12
38.9138.9639.19romulusn
39.2939.3139.39T:grain128aeadv2
48.5148.5448.72T:giftcofb128v1
53.7453.8454.02romulusm
55.1055.1455.20T:isapa128av20
62.6662.7162.77T:tinyjambu128v2
74.5274.5274.73T:isapa128v20
75.1875.2375.26T:tinyjambu192v2
79.1379.1879.24T:tinyjambu256v2
100.28100.35100.50romulust
100.43100.47100.52T:isapk128av20
151.31152.40154.75T:elephant200v2
200.41200.47200.66T:isapk128v20
277.64278.13279.61T:isapxv20
7815.727818.947827.91T:elephant176v2
8943.858948.728950.88T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.201.211.23T:aes128gcmv1
1.291.291.30aes256gcmv1
10.5410.5510.55ascon128av12
15.2815.2915.34ascon80pqv12
15.1915.3915.40ascon128v12
15.4715.4815.53T:xoodyakround3
22.5822.6122.66T:schwaemm256128v2
23.5823.5823.65ascon128abi32v12
29.8029.8329.89T:schwaemm192192v2
32.9533.0833.11T:schwaemm256256v2
33.7233.7934.07T:schwaemm128128v2
34.0734.0734.10ascon128bi32v12
38.9839.0539.21romulusn
39.3539.6139.68T:grain128aeadv2
48.5048.5748.66T:giftcofb128v1
53.9654.0354.18romulusm
54.9655.1155.24T:isapa128av20
62.8762.9262.95T:tinyjambu128v2
74.5274.7074.83T:isapa128v20
75.0875.1675.22T:tinyjambu192v2
79.2979.3379.41T:tinyjambu256v2
100.26100.46101.15romulust
100.44100.47100.49T:isapk128av20
151.46152.01154.65T:elephant200v2
200.45200.49201.07T:isapk128v20
277.82278.25279.43T:isapxv20
7812.897821.457824.96T:elephant176v2
8942.848946.418963.20T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.201.211.21T:aes128gcmv1
1.291.291.30aes256gcmv1
10.5310.5410.56ascon128av12
15.2815.3415.42ascon80pqv12
15.1915.3915.40ascon128v12
15.5115.5315.57T:xoodyakround3
22.5822.6222.65T:schwaemm256128v2
23.5823.5823.65ascon128abi32v12
29.8329.8429.95T:schwaemm192192v2
32.8833.0933.10T:schwaemm256256v2
33.7133.7233.84T:schwaemm128128v2
34.0734.0734.10ascon128bi32v12
38.9239.0539.19romulusn
39.3639.6139.68T:grain128aeadv2
42.6842.9043.09T:isapa128av20
46.0446.1446.38T:isapa128v20
48.4548.5248.65T:giftcofb128v1
53.3053.4054.06romulust
53.9053.9854.34romulusm
62.8962.9462.96T:tinyjambu128v2
75.0475.0975.14T:tinyjambu192v2
76.7276.7477.10T:isapk128av20
79.3079.3579.41T:tinyjambu256v2
131.17131.20131.33T:isapk128v20
151.20152.20154.76T:elephant200v2
181.70181.98182.59T:isapxv20
7819.787821.877825.75T:elephant176v2
8946.788950.788951.13T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.097.167.41aes256gcmv1
7.547.597.67T:aes128gcmv1
16.1216.2016.52ascon128av12
20.4120.5720.70ascon128v12
20.4720.6720.84ascon80pqv12
22.8423.0023.23T:xoodyakround3
35.0135.0635.39ascon128abi32v12
37.1137.2237.30T:schwaemm256128v2
43.7843.8944.02T:schwaemm128128v2
45.9345.9646.17ascon128bi32v12
47.2047.3047.83romulusn
48.0648.1348.23T:schwaemm192192v2
49.3649.4049.73T:grain128aeadv2
52.7052.8052.88T:schwaemm256256v2
58.9559.2259.63T:giftcofb128v1
62.9563.1363.64romulusm
73.6673.8474.07T:tinyjambu128v2
87.8787.9388.28T:tinyjambu192v2
92.2792.4492.97T:tinyjambu256v2
136.51136.79138.09romulust
141.08141.43141.64T:isapa128av20
215.47215.98219.88T:elephant200v2
355.35356.17357.08T:isapk128av20
615.97616.39616.48T:isapa128v20
2147.742149.162158.96T:isapk128v20
2736.992743.332748.30T:isapxv20
9728.529744.779748.30T:elephant176v2
11977.6211980.4511983.30T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.736.897.22aes256gcmv1
7.417.557.66T:aes128gcmv1
16.0216.0816.45ascon128av12
20.3320.5520.74ascon128v12
20.3620.6220.88ascon80pqv12
22.5922.6222.98T:xoodyakround3
35.0535.1135.62ascon128abi32v12
37.2137.2637.32T:schwaemm256128v2
43.8443.8744.02T:schwaemm128128v2
45.4845.5745.88ascon128bi32v12
47.3047.4948.09romulusn
47.9948.2748.66T:schwaemm192192v2
49.3949.5149.90T:grain128aeadv2
52.5152.6952.90T:schwaemm256256v2
59.4759.8459.92T:giftcofb128v1
65.4365.5265.97romulusm
74.0274.1074.23T:tinyjambu128v2
87.9488.0088.13T:tinyjambu192v2
92.5992.7092.88T:tinyjambu256v2
136.84137.65138.60romulust
141.52142.05142.22T:isapa128av20
215.58215.80219.86T:elephant200v2
355.45356.16356.77T:isapk128av20
610.96611.31611.59T:isapa128v20
2149.202149.882156.69T:isapk128v20
2741.302745.552747.07T:isapxv20
9734.129742.629746.05T:elephant176v2
11974.0311979.6611986.27T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.776.886.98aes256gcmv1
7.497.557.69T:aes128gcmv1
15.9416.0016.09ascon128av12
20.1620.2820.45ascon128v12
20.4020.4820.58ascon80pqv12
22.6922.8423.15T:xoodyakround3
35.1235.2435.28ascon128abi32v12
37.1837.2337.32T:schwaemm256128v2
43.7243.8743.99T:schwaemm128128v2
45.5045.5545.69ascon128bi32v12
47.3647.6747.84romulusn
48.1048.1448.31T:schwaemm192192v2
49.3549.4449.55T:grain128aeadv2
52.5252.6252.77T:schwaemm256256v2
59.4059.5159.97T:giftcofb128v1
65.3965.5265.78romulusm
73.9174.0174.12T:tinyjambu128v2
87.7287.8488.06T:tinyjambu192v2
88.5688.9889.43romulust
91.2091.5691.72T:isapa128av20
92.5892.6692.78T:tinyjambu256v2
201.35201.61202.10T:isapk128av20
215.41215.80219.90T:elephant200v2
318.88323.45324.24T:isapa128v20
1104.591104.841105.96T:isapk128v20
1431.781434.931437.66T:isapxv20
9736.059742.259753.58T:elephant176v2
11972.7611977.6311983.55T:elephant160v2

amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.461.471.48T:aes128gcmv1
1.641.651.66aes256gcmv1
10.7610.7710.77ascon128av12
15.1315.1415.14ascon80pqv12
15.3215.3415.34ascon128v12
21.1421.7021.75T:xoodyakround3
22.0822.1122.18T:schwaemm256128v2
23.2123.4223.43ascon128abi32v12
29.3529.3729.39T:schwaemm192192v2
32.4032.4132.43T:schwaemm256256v2
33.3133.3933.48T:schwaemm128128v2
34.1234.1334.14ascon128bi32v12
38.9438.9639.08T:grain128aeadv2
47.2847.4847.54romulusn
48.0748.1148.21T:giftcofb128v1
60.9961.1461.84T:isapa128av20
68.1268.4568.86T:isapa128v20
76.0176.0776.38T:tinyjambu128v2
76.8776.9777.00romulusm
95.4495.4995.62T:tinyjambu192v2
103.98104.06104.11T:tinyjambu256v2
106.65106.78106.92T:isapk128av20
141.56141.81142.40T:isapk128v20
145.52145.57145.68romulust
197.28197.57203.23T:elephant200v2
211.67212.51213.68T:isapxv20
10390.3710392.7410396.03T:elephant176v2
11798.0411802.0111808.27T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.591.611.63T:aes128gcmv1
1.691.721.74aes256gcmv1
10.2510.2610.27ascon128av12
15.2415.3815.46ascon80pqv12
15.3215.5315.56ascon128v12
20.7020.7320.77T:xoodyakround3
22.0822.1122.13T:schwaemm256128v2
23.3123.4423.45ascon128abi32v12
29.2629.3729.41T:schwaemm192192v2
32.4132.4132.44T:schwaemm256256v2
33.3333.3833.42T:schwaemm128128v2
33.8533.9333.95ascon128bi32v12
39.0739.6439.67T:grain128aeadv2
47.4647.4747.49romulusn
47.9747.9848.03T:giftcofb128v1
61.1061.8662.35T:isapa128av20
67.9868.1368.31T:isapa128v20
76.4276.4776.54T:tinyjambu128v2
77.1077.1677.31romulusm
95.0595.3295.42T:tinyjambu192v2
104.25104.35104.40T:tinyjambu256v2
106.68106.72106.85T:isapk128av20
140.91141.77142.64T:isapk128v20
145.73145.86145.94romulust
197.04199.62203.00T:elephant200v2
212.31212.64212.72T:isapxv20
10390.1310391.9710395.10T:elephant176v2
11799.0511800.5511804.21T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.601.611.62T:aes128gcmv1
1.701.711.72aes256gcmv1
10.2510.2710.29ascon128av12
15.2515.2615.38ascon80pqv12
15.5315.5415.57ascon128v12
20.7920.8220.85T:xoodyakround3
22.1222.1322.14T:schwaemm256128v2
23.4323.4523.45ascon128abi32v12
29.2529.3729.42T:schwaemm192192v2
32.4032.4132.45T:schwaemm256256v2
33.3333.3833.42T:schwaemm128128v2
33.8533.9333.95ascon128bi32v12
34.1734.3334.64T:isapa128v20
38.9039.6539.67T:grain128aeadv2
40.0640.2341.39T:isapa128av20
47.4547.4647.48romulusn
47.9948.0348.30T:giftcofb128v1
51.8551.9952.12romulust
70.6770.7370.80T:isapk128av20
76.4476.4876.52T:tinyjambu128v2
77.1877.2377.30romulusm
88.3188.4588.78T:isapk128v20
95.1095.2595.30T:tinyjambu192v2
104.26104.30104.38T:tinyjambu256v2
126.12126.50126.57T:isapxv20
197.02197.57203.00T:elephant200v2
10388.7310391.4410392.97T:elephant176v2
11796.1611798.3211804.60T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.001.021.02T:aes128gcmv1
1.081.101.11aes256gcmv1
10.4110.4210.43ascon128av12
14.9915.0515.12ascon80pqv12
15.0715.0815.09ascon128v12
15.5015.5415.56T:xoodyakround3
21.9722.0022.02T:schwaemm256128v2
23.1423.1823.20ascon128abi32v12
29.1429.2129.23T:schwaemm192192v2
32.2232.2532.28T:schwaemm256256v2
33.3333.4233.65T:schwaemm128128v2
34.0834.1334.24ascon128bi32v12
38.6038.6538.70romulusn
38.8338.8938.95T:grain128aeadv2
48.0448.0948.15T:giftcofb128v1
51.0851.1951.51T:isapa128av20
51.0751.2351.32T:isapa128v20
53.3253.3453.40romulusm
62.2462.2862.39T:tinyjambu128v2
74.5774.6274.66T:tinyjambu192v2
78.5178.5878.64T:tinyjambu256v2
88.7488.7988.82T:isapk128av20
98.5898.6498.69romulust
115.92116.12116.59T:isapk128v20
148.62149.61152.41T:elephant200v2
169.10169.48170.06T:isapxv20
7758.757760.647764.33T:elephant176v2
8848.678849.828853.01T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.051.081.09T:aes128gcmv1
1.121.131.15aes256gcmv1
10.2510.2910.30ascon128av12
15.0315.0615.12ascon80pqv12
14.9415.1715.19ascon128v12
15.3515.3715.41T:xoodyakround3
21.9822.0022.02T:schwaemm256128v2
23.0523.0623.14ascon128abi32v12
29.1429.1729.22T:schwaemm192192v2
32.2232.2532.29T:schwaemm256256v2
33.2533.3233.36T:schwaemm128128v2
33.5633.5833.61ascon128bi32v12
38.5738.6238.76romulusn
38.8339.0539.20T:grain128aeadv2
48.0148.1348.19T:giftcofb128v1
51.0751.1351.23T:isapa128v20
51.0751.4051.55T:isapa128av20
53.4553.5153.57romulusm
62.4062.4462.51T:tinyjambu128v2
74.4774.5774.63T:tinyjambu192v2
78.6978.7378.79T:tinyjambu256v2
88.7088.7689.04T:isapk128av20
98.5498.6698.70romulust
115.86116.26116.50T:isapk128v20
148.50149.51152.46T:elephant200v2
169.17169.55169.66T:isapxv20
7756.557761.347763.06T:elephant176v2
8848.098850.378851.55T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.061.071.07T:aes128gcmv1
1.131.141.14aes256gcmv1
10.2410.3010.31ascon128av12
14.9715.1115.19ascon128v12
15.0515.1115.15ascon80pqv12
15.3615.4115.43T:xoodyakround3
21.9822.0122.02T:schwaemm256128v2
23.0723.0723.14ascon128abi32v12
29.1929.2129.22T:schwaemm192192v2
32.2132.2432.29T:schwaemm256256v2
33.3933.4833.51T:schwaemm128128v2
33.5633.5733.61ascon128bi32v12
34.1634.3034.32T:isapa128v20
38.6138.6638.72romulusn
38.8939.1839.26T:grain128aeadv2
40.6840.9141.03T:isapa128av20
48.0048.1048.19T:giftcofb128v1
51.6151.7151.79romulust
53.4553.5253.59romulusm
62.4062.4262.48T:tinyjambu128v2
70.7370.7670.97T:isapk128av20
74.4174.5274.65T:tinyjambu192v2
78.6678.7478.81T:tinyjambu256v2
89.4189.5589.72T:isapk128v20
126.07126.47126.49T:isapxv20
148.41149.17152.51T:elephant200v2
7759.607761.317763.56T:elephant176v2
8848.868850.498851.95T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.550.570.57T:aes128gcmv1
0.550.580.59aes256gcmv1
9.9810.0210.04T:xoodyakround3
10.0510.0610.07ascon128av12
14.7814.8014.83ascon128v12
14.8314.8414.85ascon80pqv12
21.8721.8921.89T:schwaemm256128v2
22.9422.9622.97ascon128abi32v12
29.0329.0729.09T:schwaemm192192v2
29.7829.8329.88romulusm
29.7929.8330.01romulusn
31.9632.0032.07T:schwaemm256256v2
33.1433.3233.49T:schwaemm128128v2
34.0434.1234.33ascon128bi32v12
34.1134.2534.28T:isapa128v20
38.5838.7338.96T:grain128aeadv2
40.9241.0641.29T:isapa128av20
47.9448.1448.26T:giftcofb128v1
48.3548.4548.52T:tinyjambu128v2
51.2251.2551.36romulust
53.1153.1653.20T:tinyjambu256v2
53.7853.8353.87T:tinyjambu192v2
70.7170.8270.89T:isapk128av20
90.3290.6190.70T:isapk128v20
100.64100.86102.93T:elephant200v2
126.12126.70126.81T:isapxv20
5131.355132.425134.45T:elephant176v2
5894.175896.625901.25T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.530.540.55T:aes128gcmv1
0.550.570.58aes256gcmv1
9.9710.0010.04T:xoodyakround3
10.2910.3010.32ascon128av12
14.8114.8214.83ascon128v12
14.8114.8414.85ascon80pqv12
21.7821.8821.92T:schwaemm256128v2
22.6822.8122.83ascon128abi32v12
29.0329.0329.04T:schwaemm192192v2
29.7929.8229.93romulusn
29.7829.8630.03romulusm
31.9632.0032.08T:schwaemm256256v2
33.2333.2633.27ascon128bi32v12
33.2033.2933.57T:schwaemm128128v2
34.0734.2534.51T:isapa128v20
38.7238.7338.74T:grain128aeadv2
40.6240.9441.00T:isapa128av20
47.9448.0748.27T:giftcofb128v1
48.3448.3848.47T:tinyjambu128v2
50.9851.2151.32romulust
53.1353.1653.21T:tinyjambu256v2
53.8353.8853.98T:tinyjambu192v2
70.6970.7670.83T:isapk128av20
90.4790.6090.93T:isapk128v20
100.23100.59102.84T:elephant200v2
126.15126.41126.47T:isapxv20
5131.445133.515134.95T:elephant176v2
5890.865897.575899.50T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.530.540.54T:aes128gcmv1
0.550.560.57aes256gcmv1
9.9410.0210.04T:xoodyakround3
10.3010.3110.32ascon128av12
14.8114.8114.82ascon128v12
14.8414.8514.86ascon80pqv12
21.8121.8921.91T:schwaemm256128v2
22.6922.8222.83ascon128abi32v12
29.0329.0329.05T:schwaemm192192v2
29.7929.8129.90romulusn
29.7629.8229.93romulusm
31.9531.9932.08T:schwaemm256256v2
33.2533.2633.26ascon128bi32v12
33.2933.5133.60T:schwaemm128128v2
34.1034.2534.29T:isapa128v20
38.7338.7338.76T:grain128aeadv2
40.6141.1141.26T:isapa128av20
47.9348.0748.17T:giftcofb128v1
48.2648.3848.43T:tinyjambu128v2
50.9751.1451.39romulust
53.1353.1853.29T:tinyjambu256v2
53.7953.8453.91T:tinyjambu192v2
70.7070.7970.85T:isapk128av20
90.3890.5791.00T:isapk128v20
99.93100.17102.84T:elephant200v2
126.13126.42126.47T:isapxv20
5131.165132.325135.03T:elephant176v2
5896.665897.895899.11T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.151.151.16T:aes128gcmv1
1.261.261.27aes256gcmv1
10.6710.6810.69ascon128av12
15.2315.2315.23ascon80pqv12
15.3015.3115.31ascon128v12
15.7215.7316.00T:xoodyakround3
22.6222.6422.68T:schwaemm256128v2
23.6023.6123.68ascon128abi32v12
29.8129.8829.90T:schwaemm192192v2
33.0833.1333.16T:schwaemm256256v2
33.7733.9034.02T:schwaemm128128v2
34.6034.6334.72ascon128bi32v12
38.9339.0339.13romulusn
39.3039.3239.42T:grain128aeadv2
48.4748.5448.58T:giftcofb128v1
53.7253.7753.80romulusm
54.9455.0855.60T:isapa128av20
62.7462.7562.81T:tinyjambu128v2
74.3474.3674.47T:isapa128v20
75.1675.2275.25T:tinyjambu192v2
79.1779.2079.24T:tinyjambu256v2
99.0699.0799.26T:isapk128av20
100.05100.14100.18romulust
152.12152.87155.80T:elephant200v2
205.94205.98206.33T:isapk128v20
277.48277.61278.19T:isapxv20
7815.357816.767822.39T:elephant176v2
8948.918950.778951.29T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.201.211.22T:aes128gcmv1
1.291.301.31aes256gcmv1
10.5110.5510.55ascon128av12
15.2915.3515.37ascon80pqv12
15.1915.3915.40ascon128v12
15.5415.5615.58T:xoodyakround3
22.6122.6522.68T:schwaemm256128v2
23.5823.5823.65ascon128abi32v12
29.8329.8629.88T:schwaemm192192v2
33.1233.1333.17T:schwaemm256256v2
33.8733.9533.96T:schwaemm128128v2
34.1034.1034.11ascon128bi32v12
38.9939.0439.09romulusn
39.2939.5439.63T:grain128aeadv2
48.5148.5948.65T:giftcofb128v1
53.9554.0654.08romulusm
55.0355.2155.33T:isapa128av20
62.9062.9662.98T:tinyjambu128v2
74.4774.5474.61T:isapa128v20
75.0575.1175.22T:tinyjambu192v2
79.3279.3479.38T:tinyjambu256v2
99.0999.1199.24T:isapk128av20
100.15100.26100.34romulust
151.97152.77155.57T:elephant200v2
206.01206.17206.50T:isapk128v20
277.77278.05278.12T:isapxv20
7816.047820.377823.75T:elephant176v2
8949.268951.118952.63T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.201.211.21T:aes128gcmv1
1.291.291.30aes256gcmv1
10.5410.5510.56ascon128av12
15.2815.2915.34ascon80pqv12
15.2015.3915.40ascon128v12
15.5415.5715.58T:xoodyakround3
22.6222.6422.66T:schwaemm256128v2
23.5823.5823.65ascon128abi32v12
29.8029.8329.89T:schwaemm192192v2
33.1033.1333.15T:schwaemm256256v2
33.7733.9534.00T:schwaemm128128v2
34.0734.0834.11ascon128bi32v12
39.0239.0739.15romulusn
39.3739.6239.63T:grain128aeadv2
42.7843.0243.13T:isapa128av20
46.0446.0946.16T:isapa128v20
48.4648.5648.74T:giftcofb128v1
53.1353.2653.28romulust
53.9053.9754.06romulusm
62.9062.9162.97T:tinyjambu128v2
75.0775.1475.17T:tinyjambu192v2
76.8076.8376.96T:isapk128av20
79.2979.3479.40T:tinyjambu256v2
136.21136.26136.52T:isapk128v20
152.23152.56155.91T:elephant200v2
181.65181.93181.98T:isapxv20
7817.567818.447820.56T:elephant176v2
8948.548950.328952.15T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.137.227.46aes256gcmv1
7.567.607.70T:aes128gcmv1
16.1616.2016.55ascon128av12
20.1720.3820.52ascon128v12
20.3920.4720.61ascon80pqv12
22.9923.0923.51T:xoodyakround3
34.9335.0635.22ascon128abi32v12
37.1137.2237.52T:schwaemm256128v2
43.7343.8043.91T:schwaemm128128v2
45.9345.9646.18ascon128bi32v12
47.2447.4747.54romulusn
48.0148.0848.23T:schwaemm192192v2
49.6649.7049.93T:grain128aeadv2
52.4652.5352.88T:schwaemm256256v2
59.0959.3359.60T:giftcofb128v1
62.6662.7763.06romulusm
73.9174.1874.34T:tinyjambu128v2
88.2488.2988.37T:tinyjambu192v2
92.5992.8393.23T:tinyjambu256v2
137.43137.88138.66romulust
141.61141.79142.40T:isapa128av20
216.73217.36221.29T:elephant200v2
317.82318.15318.53T:isapk128av20
610.47610.53610.97T:isapa128v20
2248.452249.232264.98T:isapk128v20
2731.992733.092742.06T:isapxv20
9728.609732.319739.34T:elephant176v2
11983.4811987.6611992.38T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.776.887.26aes256gcmv1
7.527.607.71T:aes128gcmv1
15.9716.1316.30ascon128av12
20.3920.5420.71ascon128v12
20.4820.7020.82ascon80pqv12
22.8123.2323.45T:xoodyakround3
35.0935.2135.46ascon128abi32v12
37.2337.2737.41T:schwaemm256128v2
43.8843.9844.05T:schwaemm128128v2
45.5145.5545.79ascon128bi32v12
47.3747.5447.66romulusn
48.0148.0948.21T:schwaemm192192v2
49.5849.6249.80T:grain128aeadv2
52.4552.4952.62T:schwaemm256256v2
59.4159.4559.79T:giftcofb128v1
65.1265.3065.62romulusm
74.4274.5574.66T:tinyjambu128v2
88.1188.2388.58T:tinyjambu192v2
92.9593.0593.09T:tinyjambu256v2
137.02137.50137.86romulust
141.80142.19142.36T:isapa128av20
216.62216.92221.44T:elephant200v2
318.28318.69319.27T:isapk128av20
610.86611.13611.41T:isapa128v20
2250.272250.732251.79T:isapk128v20
2741.982742.652743.10T:isapxv20
9732.989734.779738.73T:elephant176v2
11980.2411985.8811989.20T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.736.776.84aes256gcmv1
7.527.687.77T:aes128gcmv1
15.9816.0716.17ascon128av12
20.1720.3420.37ascon128v12
20.2320.4120.45ascon80pqv12
22.9323.1823.20T:xoodyakround3
35.0235.1035.26ascon128abi32v12
37.1237.1837.24T:schwaemm256128v2
43.7343.8443.91T:schwaemm128128v2
45.4845.5145.63ascon128bi32v12
47.2947.3647.63romulusn
48.0048.0548.12T:schwaemm192192v2
49.5549.6049.73T:grain128aeadv2
52.4452.4952.67T:schwaemm256256v2
59.3059.4459.74T:giftcofb128v1
65.2965.3465.49romulusm
74.1774.4474.59T:tinyjambu128v2
88.0088.1288.47T:tinyjambu192v2
88.7388.9489.85romulust
91.7791.9992.23T:isapa128av20
92.8792.9893.03T:tinyjambu256v2
201.69202.02202.33T:isapk128av20
216.66216.81221.14T:elephant200v2
318.38318.73318.99T:isapa128v20
1193.381194.521195.51T:isapk128v20
1434.391434.641434.91T:isapxv20
9729.539734.939737.76T:elephant176v2
11982.5911988.4611991.14T:elephant160v2

amd64; Zen 3 (a20f10); 2020 AMD Ryzen 5 5600X; 6 x 3700MHz; unstable; spawn, supercop-20231215
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.411.411.43T:aes128gcmv1
1.541.541.54aes256gcmv1
5.185.185.26ascon128av12
7.277.287.32ascon80pqv12
7.487.507.53ascon128v12
10.3310.4410.54ascon128abi32v12
15.0915.1915.26ascon128bi32v12
19.1219.1619.27T:schwaemm256128v2
19.6219.8319.91T:grain128aeadv2
24.3024.4424.59T:schwaemm256256v2
26.1726.2726.38T:schwaemm192192v2
28.0828.1028.17T:isapa128v20
29.1029.5029.54T:isapa128av20
30.2630.4130.74T:schwaemm128128v2
30.9331.0331.10romulusn
32.3232.6832.90T:giftcofb128v1
40.9541.0341.36T:xoodyakround3
46.6547.2947.77T:isapk128av20
48.2748.3748.50T:tinyjambu128v2
49.1849.4149.47romulusm
55.4455.4655.48T:tinyjambu192v2
56.2356.3356.33T:tinyjambu256v2
66.2069.1669.55T:isapk128v20
102.39102.91103.02T:elephant200v2
104.47104.56104.70romulust
272.86277.81280.91T:isapxv20
5800.045844.775879.92T:elephant176v2
6987.267036.867056.79T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.411.431.43T:aes128gcmv1
1.521.561.58aes256gcmv1
4.884.884.95ascon128av12
7.277.277.32ascon80pqv12
7.277.307.32ascon128v12
10.4410.5810.64ascon128abi32v12
15.4015.4915.57ascon128bi32v12
19.4419.5419.58T:schwaemm256128v2
20.1620.5220.97T:grain128aeadv2
24.4224.5524.65T:schwaemm256256v2
26.7726.8126.88T:schwaemm192192v2
28.0828.0828.15T:isapa128v20
29.1229.5429.60T:isapa128av20
30.3930.5430.78T:schwaemm128128v2
31.1431.2231.24romulusn
32.0532.5932.63T:giftcofb128v1
40.5540.7641.05T:xoodyakround3
46.1546.9648.00T:isapk128av20
48.3548.4148.49T:tinyjambu128v2
49.3549.5649.64romulusm
55.6055.6255.65T:tinyjambu192v2
56.4656.5456.58T:tinyjambu256v2
66.2768.7069.45T:isapk128v20
102.58102.94103.04T:elephant200v2
104.54104.72105.32romulust
271.64272.97282.22T:isapxv20
5800.235842.745847.97T:elephant176v2
6965.027033.827049.43T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.391.431.43T:aes128gcmv1
1.521.561.56aes256gcmv1
4.884.894.95ascon128av12
7.277.287.32ascon128v12
7.277.287.32ascon80pqv12
10.4410.5610.62ascon128abi32v12
13.8913.9513.99T:isapa128v20
15.4015.4915.57ascon128bi32v12
19.4819.5419.60T:schwaemm256128v2
19.3319.5819.64T:isapa128av20
20.2520.5420.99T:grain128aeadv2
24.4424.5324.63T:schwaemm256256v2
26.7726.7926.86T:schwaemm192192v2
29.6830.0830.24T:isapk128av20
30.3930.4530.76T:schwaemm128128v2
31.1431.2031.24romulusn
32.0132.5932.63T:giftcofb128v1
35.1135.1935.34romulust
40.5540.7641.03T:xoodyakround3
41.4142.7644.27T:isapk128v20
48.3348.3748.49T:tinyjambu128v2
49.3549.5649.70romulusm
55.6055.6255.63T:tinyjambu192v2
56.4456.5256.91T:tinyjambu256v2
102.33102.52102.98T:elephant200v2
163.47164.90169.35T:isapxv20
5807.325844.555870.42T:elephant176v2
6985.817032.187057.04T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.890.910.91T:aes128gcmv1
0.940.940.96aes256gcmv1
5.025.045.07ascon128av12
7.337.347.37ascon128v12
7.357.407.41ascon80pqv12
10.2310.2710.40ascon128abi32v12
15.2515.3415.51ascon128bi32v12
18.9719.0019.05T:schwaemm256128v2
19.7119.8420.06T:grain128aeadv2
21.1421.2921.31T:isapa128v20
24.1424.1924.29T:schwaemm256256v2
24.1924.3724.54T:isapa128av20
24.6924.7224.83romulusn
26.0826.1426.27T:schwaemm192192v2
30.0030.1030.16T:schwaemm128128v2
31.6531.7031.74T:xoodyakround3
31.9732.3632.55T:giftcofb128v1
33.5733.7734.00romulusm
38.9439.0939.19T:tinyjambu128v2
40.0740.3241.10T:isapk128av20
42.2742.4042.65T:tinyjambu256v2
42.3442.7342.98T:tinyjambu192v2
53.3555.4555.87T:isapk128v20
69.4569.9270.23romulust
76.7977.6378.09T:elephant200v2
218.16?220.24?264.22?T:isapxv20
4281.824353.624363.88T:elephant176v2
5238.015289.195301.39T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.900.900.91T:aes128gcmv1
0.940.940.95aes256gcmv1
4.894.924.94ascon128av12
7.227.247.27ascon128v12
7.347.367.38ascon80pqv12
10.3410.3710.49ascon128abi32v12
15.1015.1915.37ascon128bi32v12
19.1319.1619.18T:schwaemm256128v2
19.8520.2120.27T:grain128aeadv2
21.0321.2121.31T:isapa128v20
24.1724.2224.32T:schwaemm256256v2
24.1824.3524.55T:isapa128av20
24.8224.8724.98romulusn
26.3426.3926.43T:schwaemm192192v2
30.0930.1730.32T:schwaemm128128v2
31.5431.5831.60T:xoodyakround3
31.9232.4932.51T:giftcofb128v1
33.6833.8533.90romulusm
39.1239.2039.35T:tinyjambu128v2
39.8940.7140.82T:isapk128av20
42.4542.4942.77T:tinyjambu256v2
42.1342.7943.06T:tinyjambu192v2
53.4255.5156.24T:isapk128v20
69.7769.8670.25romulust
76.7577.6578.12T:elephant200v2
216.64?220.43?263.13?T:isapxv20
4284.404339.274359.00T:elephant176v2
5243.495284.305303.31T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.900.900.91T:aes128gcmv1
0.940.940.96aes256gcmv1
4.884.914.94ascon128av12
7.227.247.27ascon128v12
7.347.387.38ascon80pqv12
10.3210.3910.44ascon128abi32v12
13.9414.0314.14T:isapa128v20
15.1015.1915.37ascon128bi32v12
19.1319.1619.20T:schwaemm256128v2
19.3019.4319.57T:isapa128av20
20.1520.1920.26T:grain128aeadv2
24.1924.2624.32T:schwaemm256256v2
24.8324.8824.98romulusn
26.3826.4126.45T:schwaemm192192v2
30.1430.2030.30T:schwaemm128128v2
31.4031.5231.61T:xoodyakround3
31.4831.6932.13T:isapk128av20
31.9132.4932.51T:giftcofb128v1
33.6833.8333.88romulusm
35.0935.1335.30romulust
39.0739.1739.24T:tinyjambu128v2
42.4742.5042.75T:tinyjambu256v2
41.4242.5243.05T:isapk128v20
42.7742.8042.94T:tinyjambu192v2
76.7677.2478.18T:elephant200v2
162.41?163.67?191.91?T:isapxv20
4284.934354.924364.72T:elephant176v2
5242.465287.625315.70T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.370.370.37aes256gcmv1
0.35?0.39?0.39?T:aes128gcmv1
4.864.894.93ascon128av12
7.137.137.21ascon128v12
7.387.407.48ascon80pqv12
10.0810.1910.21ascon128abi32v12
14.0314.0714.22T:isapa128v20
15.3815.4915.67ascon128bi32v12
18.4618.4618.52romulusn
18.4018.5218.62romulusm
18.7718.8518.90T:schwaemm256128v2
19.4319.4819.62T:isapa128av20
19.8919.9820.25T:grain128aeadv2
21.9322.0322.12T:xoodyakround3
24.0524.1524.49T:schwaemm256256v2
25.9626.0226.03T:schwaemm192192v2
28.4828.6228.64T:tinyjambu256v2
29.6229.8329.95T:schwaemm128128v2
30.1030.4730.49T:tinyjambu128v2
30.3330.4930.52T:tinyjambu192v2
31.8232.3832.45T:giftcofb128v1
33.4333.5333.96T:isapk128av20
35.1135.1535.30romulust
42.18?42.67?108.82?T:isapk128v20
52.1952.3452.84T:elephant200v2
163.36166.83172.69T:isapxv20
2869.622890.822906.39T:elephant176v2
3489.683519.473522.59T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.350.370.37aes256gcmv1
0.370.390.39T:aes128gcmv1
4.894.934.99ascon128av12
7.137.137.21ascon128v12
7.347.347.42ascon80pqv12
10.1810.3110.31ascon128abi32v12
13.9714.0314.07T:isapa128v20
14.8014.8815.05ascon128bi32v12
18.4618.5018.56romulusn
18.4218.5418.63romulusm
18.8118.8518.94T:schwaemm256128v2
19.4319.4419.54T:isapa128av20
20.0820.1620.37T:grain128aeadv2
21.8521.9122.12T:xoodyakround3
24.0524.2024.45T:schwaemm256256v2
25.9826.0326.07T:schwaemm192192v2
28.4828.6428.66T:tinyjambu256v2
29.5629.6629.95T:schwaemm128128v2
30.1030.4530.47T:tinyjambu128v2
30.3330.4930.51T:tinyjambu192v2
31.9532.3632.41T:giftcofb128v1
33.7633.8834.24T:isapk128av20
35.0935.2135.32romulust
41.14?42.61?109.55?T:isapk128v20
51.9552.1352.47T:elephant200v2
166.89168.95170.60T:isapxv20
2863.722887.392906.62T:elephant176v2
3490.103521.323529.63T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.350.370.37aes256gcmv1
0.35?0.39?0.39?T:aes128gcmv1
4.914.954.99ascon128av12
7.137.137.21ascon128v12
7.347.347.42ascon80pqv12
10.1810.3110.31ascon128abi32v12
13.9514.0314.14T:isapa128v20
14.8014.8815.05ascon128bi32v12
18.4818.5018.56romulusn
18.4618.5418.60romulusm
18.7718.8118.92T:schwaemm256128v2
19.3719.4319.52T:isapa128av20
20.1220.1620.25T:grain128aeadv2
21.8921.9522.14T:xoodyakround3
24.0524.1724.49T:schwaemm256256v2
25.9226.0026.03T:schwaemm192192v2
28.4628.6428.66T:tinyjambu256v2
29.6029.6829.95T:schwaemm128128v2
30.0830.4530.51T:tinyjambu128v2
30.3330.4930.51T:tinyjambu192v2
32.0132.3832.41T:giftcofb128v1
33.1733.9734.17T:isapk128av20
35.0735.1935.30romulust
41.66?42.65?109.48?T:isapk128v20
51.9552.1752.42T:elephant200v2
166.08168.70171.11T:isapxv20
2874.772890.342896.68T:elephant176v2
3490.283521.593525.10T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.980.990.99T:aes128gcmv1
1.051.051.06aes256gcmv1
5.145.175.19ascon128av12
7.427.467.46ascon128v12
7.467.477.47ascon80pqv12
10.5010.5310.62ascon128abi32v12
15.5515.6215.69ascon128bi32v12
19.5419.5719.68T:schwaemm256128v2
20.3120.3820.40T:grain128aeadv2
24.6724.7925.23T:schwaemm256256v2
24.8824.9324.96romulusn
26.6526.6726.71T:schwaemm192192v2
27.8527.8628.00T:isapa128av20
30.3530.4130.51T:schwaemm128128v2
30.7630.7930.94T:isapa128v20
32.4632.8132.82T:giftcofb128v1
33.8934.0434.19romulusm
32.16?37.00?37.33?T:xoodyakround3
39.3439.4839.53T:tinyjambu128v2
42.7142.7242.73T:tinyjambu256v2
43.07?43.31?60.52?T:tinyjambu192v2
45.7045.8846.73T:isapk128av20
70.8970.9671.24romulust
78.4779.8180.15T:elephant200v2
90.7892.7993.19T:isapk128v20
376.84377.21378.90T:isapxv20
4350.474417.104420.77T:elephant176v2
5298.715335.745342.32T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.990.991.00T:aes128gcmv1
1.051.061.06aes256gcmv1
5.015.035.06ascon128av12
7.327.357.35ascon128v12
7.437.437.44ascon80pqv12
10.6210.7010.74ascon128abi32v12
15.4315.4815.56ascon128bi32v12
19.7919.8119.82T:schwaemm256128v2
20.4620.6820.82T:grain128aeadv2
24.7624.8225.22T:schwaemm256256v2
25.0325.0825.10romulusn
26.9126.9326.94T:schwaemm192192v2
27.8327.8527.99T:isapa128av20
30.4130.5130.59T:schwaemm128128v2
30.7730.7730.94T:isapa128v20
32.2432.7732.78T:giftcofb128v1
33.9534.0034.33romulusm
32.11?36.67?37.36?T:xoodyakround3
39.5239.6439.70T:tinyjambu128v2
42.6043.0743.31T:tinyjambu256v2
43.38?43.40?61.09?T:tinyjambu192v2
45.4645.7346.02T:isapk128av20
70.9370.9671.30romulust
78.5279.7579.85T:elephant200v2
90.7592.4093.19T:isapk128v20
373.08377.74381.30T:isapxv20
4351.794414.364421.54T:elephant176v2
5300.825335.275340.88T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.990.990.99T:aes128gcmv1
1.051.051.06aes256gcmv1
5.015.035.06ascon128av12
7.327.357.36ascon128v12
7.437.437.44ascon80pqv12
10.5710.6810.73ascon128abi32v12
15.4015.4915.56ascon128bi32v12
18.9318.9318.96T:isapa128v20
19.7319.8019.81T:schwaemm256128v2
20.3120.4020.50T:grain128aeadv2
21.3221.3321.43T:isapa128av20
24.7124.8225.20T:schwaemm256256v2
25.0325.0525.10romulusn
26.9126.9426.98T:schwaemm192192v2
30.4830.5230.57T:schwaemm128128v2
32.2432.7732.77T:giftcofb128v1
33.9634.0134.28romulusm
34.7734.9835.36T:isapk128av20
36.1336.1936.29romulust
32.09?36.70?37.35?T:xoodyakround3
39.4639.5239.60T:tinyjambu128v2
42.6043.0743.31T:tinyjambu256v2
43.38?43.40?60.70?T:tinyjambu192v2
60.4161.6461.87T:isapk128v20
78.5279.7680.24T:elephant200v2
242.76243.92250.41T:isapxv20
4360.414416.954418.32T:elephant176v2
5296.545333.435342.68T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
4.344.624.62T:aes128gcmv1
4.624.914.91aes256gcmv1
7.808.098.09ascon128av12
9.839.839.83ascon80pqv12
10.1210.1210.41ascon128v12
15.9016.1916.19ascon128abi32v12
21.6821.9722.26ascon128bi32v12
27.4627.7528.62T:grain128aeadv2
29.7729.7730.06romulusn
32.0932.3832.38T:schwaemm256128v2
39.0239.3139.60T:giftcofb128v1
39.3139.6040.18T:schwaemm256256v2
39.8939.8940.18romulusm
40.1840.4740.76T:schwaemm128128v2
42.7843.0743.07T:schwaemm192192v2
45.6745.9646.25T:xoodyakround3
46.8347.1247.41T:tinyjambu128v2
50.3050.3050.59T:tinyjambu256v2
50.8850.8851.16T:tinyjambu192v2
94.5295.1095.10romulust
106.09106.38106.95T:isapa128av20
113.31113.89114.18T:elephant200v2
164.77165.63166.21T:isapk128av20
251.20253.51253.80T:isapa128v20
930.78935.41938.30T:isapk128v20
3917.383919.693961.60T:isapxv20
5450.275483.805500.57T:elephant176v2
7110.367129.447150.54T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
4.344.344.34T:aes128gcmv1
4.624.624.62aes256gcmv1
7.807.808.09ascon128av12
9.839.839.83ascon80pqv12
10.1210.1210.41ascon128v12
16.1916.1916.19ascon128abi32v12
22.2622.2622.55ascon128bi32v12
28.0428.3328.91T:grain128aeadv2
30.0630.0630.06romulusn
32.3832.3832.38T:schwaemm256128v2
38.7339.0239.60T:schwaemm128128v2
39.3139.3139.89T:schwaemm256256v2
39.3139.6039.89T:giftcofb128v1
40.7641.3441.62romulusm
43.3643.3643.36T:schwaemm192192v2
45.6745.9645.96T:xoodyakround3
46.8347.1247.70T:tinyjambu128v2
50.3050.3050.88T:tinyjambu256v2
50.8851.1651.16T:tinyjambu192v2
94.5295.3995.39romulust
105.80106.09107.53T:isapa128av20
113.02114.47114.76T:elephant200v2
164.77166.21166.79T:isapk128av20
251.77253.51253.80T:isapa128v20
918.35923.84928.18T:isapk128v20
3901.483902.633946.28T:isapxv20
5447.675476.875482.65T:elephant176v2
7112.677150.257151.12T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
4.344.344.34T:aes128gcmv1
4.624.624.62aes256gcmv1
7.807.807.80ascon128av12
9.839.839.83ascon80pqv12
10.1210.1210.12ascon128v12
16.1916.1916.19ascon128abi32v12
22.2622.2622.55ascon128bi32v12
27.4628.0428.04T:grain128aeadv2
30.0630.0630.06romulusn
32.3832.3832.66T:schwaemm256128v2
38.4538.7339.02T:schwaemm128128v2
39.3139.6039.60T:giftcofb128v1
39.3139.6039.89T:schwaemm256256v2
41.0541.3441.91romulusm
43.0743.3643.36T:schwaemm192192v2
45.6745.6746.25T:xoodyakround3
46.8346.8347.12T:tinyjambu128v2
50.3050.3050.59T:tinyjambu256v2
50.8851.1651.16T:tinyjambu192v2
59.2659.5559.84romulust
63.3063.5963.88T:isapa128av20
102.91103.48103.77T:isapk128av20
113.02113.89114.18T:elephant200v2
131.52132.39132.68T:isapa128v20
478.98492.56498.05T:isapk128v20
2036.732038.762063.33T:isapxv20
5448.255478.895508.38T:elephant176v2
7117.597151.127191.01T:elephant160v2

amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.511.521.53T:aes128gcmv1
1.661.661.67aes256gcmv1
6.756.766.76ascon128av12
9.369.389.38ascon80pqv12
9.429.429.42ascon128v12
11.3211.3411.35ascon128abi32v12
17.2217.2317.23ascon128bi32v12
17.5917.6217.67T:xoodyakround3
21.7621.7721.80T:schwaemm256128v2
25.5025.5225.69T:schwaemm256256v2
27.2527.4927.52T:grain128aeadv2
28.4828.4828.50T:schwaemm192192v2
29.7829.8029.93T:schwaemm128128v2
34.8635.1435.27romulusn
36.2836.3737.69T:isapa128v20
36.7936.8036.92T:isapa128av20
40.3340.3640.42T:giftcofb128v1
56.9156.9557.12romulusm
62.1462.2362.25T:tinyjambu128v2
66.7466.8867.18T:isapk128av20
69.4969.5369.54T:tinyjambu192v2
76.6276.6576.72T:tinyjambu256v2
88.1388.2588.49T:isapk128v20
110.66110.67110.67romulust
163.81165.74166.60T:isapxv20
253.81254.11256.04T:elephant200v2
6829.526840.926851.68T:elephant176v2
7651.197656.737661.85T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.581.591.61T:aes128gcmv1
1.761.771.79aes256gcmv1
6.666.686.68ascon128av12
9.369.379.38ascon80pqv12
9.369.409.42ascon128v12
11.4311.4411.45ascon128abi32v12
17.15?17.28?19.52?ascon128bi32v12
17.4017.4517.52T:xoodyakround3
21.8121.8321.84T:schwaemm256128v2
25.6125.6825.74T:schwaemm256256v2
25.5827.2627.46T:grain128aeadv2
28.6428.9829.02T:schwaemm192192v2
29.7629.9029.97T:schwaemm128128v2
34.7235.1535.22romulusn
36.3236.3936.45T:isapa128v20
36.5136.7036.71T:isapa128av20
40.7440.8040.81T:giftcofb128v1
57.0857.1057.36romulusm
62.1762.1962.28T:tinyjambu128v2
66.7766.8666.88T:isapk128av20
69.3269.3369.44T:tinyjambu192v2
76.5576.6176.66T:tinyjambu256v2
88.0788.1988.28T:isapk128v20
110.66110.68110.74romulust
164.69165.45166.06T:isapxv20
253.18253.85256.05T:elephant200v2
6833.396835.856837.82T:elephant176v2
7651.767653.227667.37T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.601.611.63T:aes128gcmv1
1.761.771.78aes256gcmv1
6.656.666.68ascon128av12
9.359.379.40ascon80pqv12
9.379.399.40ascon128v12
11.4311.4411.46ascon128abi32v12
16.98?17.12?19.52?ascon128bi32v12
17.5017.5617.66T:xoodyakround3
18.0918.1918.23T:isapa128v20
21.8321.8321.84T:schwaemm256128v2
24.3624.3724.37T:isapa128av20
25.6025.6925.78T:schwaemm256256v2
25.5427.2527.45T:grain128aeadv2
28.6528.8429.05T:schwaemm192192v2
29.7929.8729.89T:schwaemm128128v2
35.1435.3335.41romulusn
37.1637.1837.23romulust
40.7740.7740.80T:giftcofb128v1
44.0144.0744.10T:isapk128av20
54.7254.8255.02T:isapk128v20
57.1057.1357.15romulusm
62.1662.2362.24T:tinyjambu128v2
69.3569.3769.38T:tinyjambu192v2
76.5876.6476.70T:tinyjambu256v2
98.1798.4198.91T:isapxv20
253.05253.60256.05T:elephant200v2
6834.046836.746838.38T:elephant176v2
7655.137659.207662.89T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.021.031.03T:aes128gcmv1
1.091.101.11aes256gcmv1
6.586.596.61ascon128av12
9.309.319.33ascon80pqv12
9.319.329.33ascon128v12
11.0511.0811.14ascon128abi32v12
13.7513.7913.80T:xoodyakround3
16.8416.8816.90ascon128bi32v12
21.5821.6121.61T:schwaemm256128v2
25.4525.5525.57T:schwaemm256256v2
27.3127.3327.43T:isapa128v20
27.2827.3427.38T:grain128aeadv2
28.4628.4728.49T:schwaemm192192v2
28.5528.6028.62romulusn
29.6429.6429.69T:schwaemm128128v2
30.7630.8530.86T:isapa128av20
39.4439.5539.62romulusm
40.3640.3840.40T:giftcofb128v1
51.1751.1851.21T:tinyjambu128v2
54.8254.8454.86T:tinyjambu192v2
55.3755.4455.46T:isapk128av20
58.4258.4658.50T:tinyjambu256v2
71.4071.5572.42T:isapk128v20
73.9173.9374.00romulust
130.74131.17131.44T:isapxv20
190.00190.78191.43T:elephant200v2
5103.345112.355123.81T:elephant176v2
5736.115742.985753.59T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.061.081.08T:aes128gcmv1
1.141.151.15aes256gcmv1
6.576.586.59ascon128av12
9.299.299.32ascon128v12
9.309.309.30ascon80pqv12
11.2111.2211.24ascon128abi32v12
13.6513.6913.71T:xoodyakround3
16.8416.9018.11ascon128bi32v12
21.3921.4021.67T:schwaemm256128v2
25.5925.6625.85T:schwaemm256256v2
26.8626.8927.16T:grain128aeadv2
27.3127.3227.33T:isapa128v20
28.3528.5528.57romulusn
28.5328.7128.73T:schwaemm192192v2
29.6429.6729.69T:schwaemm128128v2
30.7130.7330.84T:isapa128av20
39.5339.5539.56romulusm
40.5240.5440.58T:giftcofb128v1
51.1851.2351.25T:tinyjambu128v2
54.7354.7554.77T:tinyjambu192v2
55.4155.4555.46T:isapk128av20
58.5158.5358.54T:tinyjambu256v2
71.4871.5572.43T:isapk128v20
73.9173.9473.97romulust
130.93131.26131.59T:isapxv20
190.17190.43191.86T:elephant200v2
5102.625109.405113.88T:elephant176v2
5736.055739.425742.26T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.061.071.08T:aes128gcmv1
1.141.151.15aes256gcmv1
6.536.556.56ascon128av12
9.289.299.35ascon128v12
9.289.309.30ascon80pqv12
11.2211.2211.23ascon128abi32v12
13.6913.7513.77T:xoodyakround3
16.9317.0818.19ascon128bi32v12
18.2318.2418.27T:isapa128v20
21.3921.4021.60T:schwaemm256128v2
24.5424.5724.58T:isapa128av20
25.5025.5125.74T:schwaemm256256v2
26.8526.9127.22T:grain128aeadv2
28.3628.5728.72romulusn
28.4928.6328.71T:schwaemm192192v2
29.6329.6729.97T:schwaemm128128v2
37.1637.1837.22romulust
39.5439.5539.56romulusm
40.5640.5740.60T:giftcofb128v1
44.0244.0244.03T:isapk128av20
51.1951.2151.25T:tinyjambu128v2
54.7354.7454.76T:tinyjambu192v2
54.7654.8355.74T:isapk128v20
58.4858.5158.54T:tinyjambu256v2
98.0798.2898.49T:isapxv20
190.16190.67191.76T:elephant200v2
5105.655109.745111.60T:elephant176v2
5735.885742.065746.36T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.530.540.55aes256gcmv1
0.520.550.56T:aes128gcmv1
6.426.446.46ascon128av12
9.229.239.25ascon80pqv12
9.259.269.26ascon128v12
9.879.899.94T:xoodyakround3
10.8010.8310.84ascon128abi32v12
16.4516.5716.57ascon128bi32v12
18.2518.2518.37T:isapa128v20
21.2021.4421.46T:schwaemm256128v2
21.9821.9922.00romulusm
21.9822.0022.00romulusn
24.6424.6624.69T:isapa128av20
25.4425.5525.57T:schwaemm256256v2
27.0927.4327.48T:grain128aeadv2
28.2828.3828.42T:schwaemm192192v2
29.5029.5429.79T:schwaemm128128v2
37.1637.1837.20romulust
40.1240.1240.15T:tinyjambu192v2
40.1540.1640.22T:tinyjambu128v2
40.1840.2240.22T:tinyjambu256v2
40.2840.3440.38T:giftcofb128v1
43.9444.0344.10T:isapk128av20
54.8755.1356.64T:isapk128v20
97.8198.2598.90T:isapxv20
127.55127.70128.10T:elephant200v2
3373.843375.123376.60T:elephant176v2
3821.233822.243823.31T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.510.530.56T:aes128gcmv1
0.530.550.57aes256gcmv1
6.366.366.37ascon128av12
9.229.239.25ascon128v12
9.219.239.24ascon80pqv12
9.889.939.95T:xoodyakround3
10.9911.0111.02ascon128abi32v12
16.6816.6916.70ascon128bi32v12
18.2618.2718.27T:isapa128v20
21.2721.4621.47T:schwaemm256128v2
21.9821.9922.00romulusm
21.9721.9922.01romulusn
24.3724.3824.70T:isapa128av20
25.4325.4725.59T:schwaemm256256v2
26.5226.9927.09T:grain128aeadv2
28.2828.4128.43T:schwaemm192192v2
29.4329.5029.56T:schwaemm128128v2
37.1437.1837.39romulust
40.1240.1340.20T:tinyjambu192v2
40.2040.2440.25T:tinyjambu128v2
40.3740.3940.41T:giftcofb128v1
40.2540.4240.44T:tinyjambu256v2
43.9944.0544.07T:isapk128av20
54.6754.8557.33T:isapk128v20
97.8398.0998.83T:isapxv20
127.58127.64128.28T:elephant200v2
3374.353376.193379.21T:elephant176v2
3822.093823.003824.48T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.540.550.56T:aes128gcmv1
0.540.550.55aes256gcmv1
6.426.476.48ascon128av12
9.209.219.24ascon80pqv12
9.229.229.27ascon128v12
9.869.949.99T:xoodyakround3
11.0011.0211.02ascon128abi32v12
16.8416.8416.85ascon128bi32v12
18.2618.2618.29T:isapa128v20
21.4621.4721.47T:schwaemm256128v2
21.9822.0022.00romulusm
21.9822.0022.00romulusn
24.3824.6324.69T:isapa128av20
25.4225.4825.50T:schwaemm256256v2
26.5426.9927.08T:grain128aeadv2
28.3728.4228.44T:schwaemm192192v2
29.5029.5729.62T:schwaemm128128v2
37.1337.1837.21romulust
40.1340.1440.14T:tinyjambu192v2
40.2040.2140.22T:tinyjambu128v2
40.3640.3840.43T:giftcofb128v1
40.2640.4140.45T:tinyjambu256v2
43.9844.0044.05T:isapk128av20
54.7055.1956.95T:isapk128v20
97.8598.0598.65T:isapxv20
127.61127.64127.95T:elephant200v2
3372.973374.333375.88T:elephant176v2
3821.903823.323829.17T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.151.151.15T:aes128gcmv1
1.231.241.24aes256gcmv1
6.786.786.79ascon128av12
9.469.479.47ascon128v12
9.479.479.48ascon80pqv12
11.3911.3911.45ascon128abi32v12
13.9513.9513.96T:xoodyakround3
17.2117.2117.21ascon128bi32v12
22.1122.2322.24T:schwaemm256128v2
26.2626.3026.43T:schwaemm256256v2
27.6727.7127.74T:grain128aeadv2
28.8128.8528.86romulusn
29.1029.1029.12T:schwaemm192192v2
30.1130.1130.12T:schwaemm128128v2
33.9334.0334.12T:isapa128av20
39.7039.8139.88romulusm
39.8839.8839.95T:isapa128v20
40.7240.7340.75T:giftcofb128v1
51.5651.5851.59T:tinyjambu128v2
55.2555.2655.28T:tinyjambu192v2
58.8558.8658.86T:tinyjambu256v2
61.9161.9361.95T:isapk128av20
75.0775.0775.14romulust
123.23123.30123.72T:isapk128v20
194.22194.35196.11T:elephant200v2
212.30212.64213.02T:isapxv20
5144.085147.275149.91T:elephant176v2
5801.925803.385808.72T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.191.201.20T:aes128gcmv1
1.291.301.31aes256gcmv1
6.766.776.77ascon128av12
9.459.459.48ascon128v12
9.469.479.47ascon80pqv12
11.5211.5211.53ascon128abi32v12
13.8013.8113.85T:xoodyakround3
17.2317.2318.35ascon128bi32v12
22.0422.0522.06T:schwaemm256128v2
26.2126.2626.38T:schwaemm256256v2
27.2327.2527.54T:grain128aeadv2
28.6328.8228.99romulusn
29.2829.2829.35T:schwaemm192192v2
30.0730.1030.49T:schwaemm128128v2
33.9833.9834.04T:isapa128av20
39.8639.8839.94romulusm
39.9539.9640.10T:isapa128v20
40.9340.9340.95T:giftcofb128v1
51.5451.5751.63T:tinyjambu128v2
55.1555.1555.17T:tinyjambu192v2
58.9058.9658.98T:tinyjambu256v2
61.8761.8761.90T:isapk128av20
75.0875.0875.11romulust
123.31123.40124.06T:isapk128v20
193.95194.56195.70T:elephant200v2
212.33212.65212.89T:isapxv20
5143.885146.435153.72T:elephant176v2
5802.115807.435809.19T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.191.191.20T:aes128gcmv1
1.281.291.29aes256gcmv1
6.716.726.75ascon128av12
9.449.449.51ascon128v12
9.459.469.47ascon80pqv12
11.5211.5211.52ascon128abi32v12
13.8813.9013.92T:xoodyakround3
17.3117.3118.43ascon128bi32v12
22.0422.1822.19T:schwaemm256128v2
24.6424.6625.29T:isapa128v20
26.2226.2926.40T:schwaemm256256v2
26.3526.3826.40T:isapa128av20
27.1127.2427.54T:grain128aeadv2
28.8228.8228.99romulusn
29.2929.3129.35T:schwaemm192192v2
30.0730.0830.11T:schwaemm128128v2
38.2738.2738.31romulust
39.6839.8739.87romulusm
40.9040.9040.95T:giftcofb128v1
47.7847.7947.89T:isapk128av20
51.5951.6151.61T:tinyjambu128v2
55.1255.1655.18T:tinyjambu192v2
58.9258.9858.99T:tinyjambu256v2
81.3281.4082.12T:isapk128v20
139.94140.06140.22T:isapxv20
194.18194.35195.24T:elephant200v2
5143.295145.885149.38T:elephant176v2
5806.395809.465810.99T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.576.616.76aes256gcmv1
7.307.377.47T:aes128gcmv1
11.1511.4311.62ascon128av12
12.7612.7713.17ascon128v12
12.8413.0913.38ascon80pqv12
18.4118.6818.79ascon128abi32v12
20.3420.4020.45T:xoodyakround3
24.1524.4624.97ascon128bi32v12
34.5234.7634.83romulusn
35.6735.8035.93T:grain128aeadv2
36.0936.1236.12T:schwaemm256128v2
39.6939.8840.22T:schwaemm128128v2
41.7341.8442.10T:schwaemm256256v2
45.5945.8446.28romulusm
47.3047.5447.77T:schwaemm192192v2
49.2749.3352.07T:giftcofb128v1
60.4760.6660.76T:tinyjambu128v2
64.7664.8464.92T:tinyjambu192v2
68.5468.7369.14T:tinyjambu256v2
101.01101.25102.90romulust
109.43109.55109.92T:isapa128av20
198.73199.34200.01T:isapk128av20
276.22277.31278.24T:elephant200v2
328.61328.73329.69T:isapa128v20
1296.751298.061299.20T:isapk128v20
2060.842063.532069.58T:isapxv20
6405.676407.356409.66T:elephant176v2
7768.077771.597784.52T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.756.796.91aes256gcmv1
6.836.896.91T:aes128gcmv1
11.0011.3811.75ascon128av12
12.8012.8613.20ascon128v12
13.0513.1813.66ascon80pqv12
18.3118.7819.21ascon128abi32v12
19.9520.0520.22T:xoodyakround3
24.4525.0925.45ascon128bi32v12
34.8834.9435.02romulusn
35.3535.4235.66T:grain128aeadv2
36.4036.4136.66T:schwaemm256128v2
39.8439.9039.95T:schwaemm128128v2
41.7041.7441.93T:schwaemm256256v2
47.3047.3547.44romulusm
47.5947.7148.00T:schwaemm192192v2
49.7949.8049.95T:giftcofb128v1
60.4560.9161.02T:tinyjambu128v2
64.6964.6964.70T:tinyjambu192v2
68.8068.8269.12T:tinyjambu256v2
101.08101.12101.80romulust
109.41109.56109.61T:isapa128av20
198.94199.23199.78T:isapk128av20
275.95276.82277.66T:elephant200v2
328.11330.02330.93T:isapa128v20
1296.781297.041298.70T:isapk128v20
2059.602064.332067.23T:isapxv20
6402.246406.206409.16T:elephant176v2
7766.727769.127771.06T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.776.836.87T:aes128gcmv1
6.786.846.88aes256gcmv1
10.9510.9811.02ascon128av12
12.7812.9713.19ascon128v12
12.7013.0413.16ascon80pqv12
18.1818.2018.48ascon128abi32v12
20.0720.1420.76T:xoodyakround3
24.3924.5225.36ascon128bi32v12
34.9234.9235.05romulusn
35.2835.4135.70T:grain128aeadv2
36.3736.3836.51T:schwaemm256128v2
39.8539.9239.98T:schwaemm128128v2
41.8141.8641.96T:schwaemm256256v2
47.0747.2747.39romulusm
47.5247.5547.80T:schwaemm192192v2
49.5349.7449.74T:giftcofb128v1
60.7561.1261.12T:tinyjambu128v2
62.9262.9963.70romulust
64.6464.6565.12T:tinyjambu192v2
68.2268.2868.45T:isapa128av20
68.9568.9568.95T:tinyjambu256v2
124.93124.94125.58T:isapk128av20
170.06170.06172.01T:isapa128v20
275.88276.21277.70T:elephant200v2
678.05678.41679.95T:isapk128v20
1079.961083.081084.73T:isapxv20
6402.536405.906409.48T:elephant176v2
7768.627770.847773.05T:elephant160v2

amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.49?0.57?0.61?T:aes128gcmv1
0.63?0.71?0.76?T:aes256gcmv1
1.521.531.55aes256gcmv1
7.407.417.46ascon128av12
10.9110.9410.98ascon80pqv12
10.9610.9911.01ascon128v12
13.3713.4713.53T:xoodyakround3
14.7314.7814.80ascon128abi32v12
16.3216.4616.68T:schwaemm256128v2
18.8418.9119.00T:grain128aeadv2
19.8320.1020.30T:schwaemm256256v2
21.6921.7821.88T:schwaemm192192v2
22.4122.4522.49ascon128bi32v12
25.0725.1725.26T:schwaemm128128v2
26.8426.8726.93T:isapa128av20
32.0832.1132.17T:isapk128av20
37.0637.1037.18romulusn
44.0544.1244.22T:giftcofb128v1
45.1945.2345.29T:isapa128v20
57.8757.9858.10romulusm
70.4370.4970.68T:tinyjambu128v2
85.6385.9786.15T:tinyjambu192v2
90.1491.0991.97T:isapk128v20
91.0091.6391.70T:tinyjambu256v2
111.11111.22111.31romulust
120.53120.81121.54T:elephant200v2
136.75137.08137.83T:isapxv20
7254.017258.977279.98T:elephant176v2
8273.168276.448280.45T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.49?0.53?0.57?T:aes128gcmv1
0.54?0.61?0.68?T:aes256gcmv1
1.331.341.36aes256gcmv1
7.457.477.49ascon128av12
10.7610.7910.81ascon80pqv12
10.8610.8810.91ascon128v12
13.2413.2913.40T:xoodyakround3
14.8514.8714.90ascon128abi32v12
16.3516.4616.57T:schwaemm256128v2
19.2519.3319.48T:grain128aeadv2
19.8920.1220.32T:schwaemm256256v2
21.7621.9021.99T:schwaemm192192v2
22.3422.3922.41ascon128bi32v12
24.9625.1225.27T:schwaemm128128v2
32.1032.1232.14T:isapk128av20
34.2634.3434.40T:isapa128av20
37.3837.4337.50romulusn
44.2344.2944.31T:giftcofb128v1
45.1445.2145.31T:isapa128v20
58.2158.4258.49romulusm
70.4770.5670.66T:tinyjambu128v2
85.7285.8786.16T:tinyjambu192v2
90.9391.0191.07T:tinyjambu256v2
90.2691.1792.13T:isapk128v20
111.15111.22111.33romulust
120.47120.91121.72T:elephant200v2
137.99138.69139.62T:isapxv20
7253.807259.277268.74T:elephant176v2
8274.908276.458277.66T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.47?0.54?0.62?T:aes128gcmv1
0.55?0.60?0.63?T:aes256gcmv1
1.331.341.36aes256gcmv1
7.457.487.51ascon128av12
10.7710.8010.82ascon80pqv12
10.8410.8710.89ascon128v12
13.2813.4013.46T:xoodyakround3
14.8614.8914.92ascon128abi32v12
16.3216.4316.56T:schwaemm256128v2
19.2619.3619.41T:grain128aeadv2
19.8920.0320.14T:schwaemm256256v2
21.3721.4121.44T:isapk128av20
21.6821.8121.99T:schwaemm192192v2
22.0022.0822.16T:isapa128v20
22.3522.3822.41ascon128bi32v12
22.7822.8322.92T:isapa128av20
24.9425.3325.43T:schwaemm128128v2
37.2937.3537.40romulusn
38.6938.8138.96romulust
44.2244.3244.35T:giftcofb128v1
57.0857.5658.12T:isapk128v20
58.2058.2758.38romulusm
70.3570.4670.59T:tinyjambu128v2
82.2383.1283.98T:isapxv20
85.7685.9986.15T:tinyjambu192v2
91.0891.5691.71T:tinyjambu256v2
120.71120.86121.43T:elephant200v2
7254.577265.247287.17T:elephant176v2
8274.408277.378280.64T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.38?0.41?0.46?T:aes128gcmv1
0.41?0.46?0.53?T:aes256gcmv1
0.940.950.95aes256gcmv1
7.347.377.39ascon128av12
10.2910.3310.38T:xoodyakround3
10.8710.8910.93ascon80pqv12
10.9110.9310.95ascon128v12
14.5014.5214.54ascon128abi32v12
16.2616.3616.44T:schwaemm256128v2
18.8118.8718.96T:grain128aeadv2
19.9720.1320.26T:schwaemm256256v2
21.6521.7621.89T:schwaemm192192v2
22.0722.1022.12ascon128bi32v12
24.8624.8924.92T:isapa128av20
25.2325.3225.41T:schwaemm128128v2
26.7326.7426.75T:isapk128av20
28.9428.9829.05romulusn
33.6433.6833.70T:isapa128v20
39.2839.3539.39romulusm
44.1444.1844.23T:giftcofb128v1
57.5057.5257.60T:tinyjambu128v2
66.9767.0867.31T:tinyjambu192v2
68.6968.9369.13T:tinyjambu256v2
73.8174.1974.63T:isapk128v20
74.9175.0075.19romulust
91.0391.4291.68T:elephant200v2
109.35109.53110.07T:isapxv20
5417.175425.465431.38T:elephant176v2
6202.986205.896207.23T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.35?0.37?0.42?T:aes128gcmv1
0.40?0.43?0.45?T:aes256gcmv1
0.850.850.86aes256gcmv1
7.387.407.44ascon128av12
10.1910.2410.30T:xoodyakround3
10.8010.8310.84ascon80pqv12
10.8610.8810.90ascon128v12
14.5414.5814.60ascon128abi32v12
16.2316.3316.41T:schwaemm256128v2
19.0819.1219.36T:grain128aeadv2
19.9720.1720.33T:schwaemm256256v2
21.4421.6521.84T:schwaemm192192v2
22.0622.0922.11ascon128bi32v12
25.2725.3625.44T:schwaemm128128v2
26.7126.7226.75T:isapk128av20
28.3428.3828.41T:isapa128av20
29.1229.1629.22romulusn
33.6433.6933.73T:isapa128v20
39.4539.5739.62romulusm
44.2244.2744.31T:giftcofb128v1
57.4757.5157.63T:tinyjambu128v2
66.8566.9567.05T:tinyjambu192v2
68.6368.9269.14T:tinyjambu256v2
73.8374.2374.46T:isapk128v20
74.9074.9775.07romulust
91.1791.2891.48T:elephant200v2
108.93109.85110.14T:isapxv20
5418.125425.585437.85T:elephant176v2
6203.196205.006206.13T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.36?0.37?0.41?T:aes128gcmv1
0.420.440.46T:aes256gcmv1
0.840.850.85aes256gcmv1
7.387.397.42ascon128av12
10.2210.2610.30T:xoodyakround3
10.7810.8110.83ascon80pqv12
10.8510.8610.91ascon128v12
14.5414.5614.58ascon128abi32v12
16.1816.2816.33T:schwaemm256128v2
19.1519.1919.27T:grain128aeadv2
19.9920.2520.41T:schwaemm256256v2
21.3721.3921.42T:isapk128av20
21.6221.7521.84T:schwaemm192192v2
22.0622.0822.10ascon128bi32v12
22.0622.1022.14T:isapa128v20
22.6022.6222.67T:isapa128av20
25.0925.3625.50T:schwaemm128128v2
29.0329.0929.11romulusn
38.8338.8838.96romulust
39.5539.6239.68romulusm
44.1744.1944.25T:giftcofb128v1
56.9557.1757.58T:isapk128v20
57.6257.6457.67T:tinyjambu128v2
67.1067.1867.28T:tinyjambu192v2
68.6569.0769.11T:tinyjambu256v2
81.6381.9182.62T:isapxv20
90.8691.1591.41T:elephant200v2
5418.955422.975430.59T:elephant176v2
6202.556204.456205.62T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.18?0.20?0.27?T:aes256gcmv1
0.16?0.20?0.23?T:aes128gcmv1
0.360.370.38aes256gcmv1
7.157.247.30T:xoodyakround3
7.277.307.35ascon128av12
10.8210.8410.86ascon80pqv12
10.8610.8810.91ascon128v12
14.2014.2414.26ascon128abi32v12
16.1416.2616.43T:schwaemm256128v2
18.8118.9619.04T:grain128aeadv2
19.6019.7519.84T:schwaemm256256v2
20.7820.8820.93romulusn
20.8120.8920.92romulusm
21.3921.4021.43T:isapk128av20
21.5821.7521.82T:schwaemm192192v2
21.7521.7921.82ascon128bi32v12
22.0222.0822.19T:isapa128v20
22.7922.8522.92T:isapa128av20
24.8725.1025.25T:schwaemm128128v2
38.9439.0339.11romulust
44.0744.1944.27T:giftcofb128v1
44.5744.5944.64T:tinyjambu128v2
46.1946.2446.60T:tinyjambu256v2
48.3048.4348.53T:tinyjambu192v2
57.2157.6958.20T:isapk128v20
61.9662.1262.33T:elephant200v2
81.6081.7882.33T:isapxv20
3578.063605.513617.34T:elephant176v2
4139.714144.584152.79T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.10?0.19?0.26?T:aes128gcmv1
0.17?0.24?0.31?T:aes256gcmv1
0.360.370.38aes256gcmv1
7.177.257.31T:xoodyakround3
7.287.337.35ascon128av12
10.7710.8010.82ascon80pqv12
10.8410.8610.90ascon128v12
14.2014.2614.28ascon128abi32v12
16.0616.1816.35T:schwaemm256128v2
18.7818.9419.02T:grain128aeadv2
19.8020.0120.24T:schwaemm256256v2
20.7520.8320.90romulusn
20.8020.8620.95romulusm
21.3521.4121.43T:isapk128av20
21.5221.7521.87T:schwaemm192192v2
21.7421.7921.84ascon128bi32v12
22.0422.0922.16T:isapa128v20
22.3722.4422.48T:isapa128av20
25.0825.1325.23T:schwaemm128128v2
38.9238.9839.07romulust
44.1144.2344.31T:giftcofb128v1
44.6444.6844.71T:tinyjambu128v2
46.5346.5746.60T:tinyjambu256v2
48.2148.3848.51T:tinyjambu192v2
56.9157.2957.70T:isapk128v20
61.9862.3662.69T:elephant200v2
82.1682.7683.86T:isapxv20
3566.513589.083604.14T:elephant176v2
4135.484141.604150.32T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.16?0.20?0.24?T:aes128gcmv1
0.15?0.20?0.26?T:aes256gcmv1
0.350.380.38aes256gcmv1
7.167.237.32T:xoodyakround3
7.297.327.35ascon128av12
10.8110.8510.88ascon80pqv12
10.8210.8610.88ascon128v12
14.2214.2614.29ascon128abi32v12
16.1116.2416.33T:schwaemm256128v2
19.0219.0919.16T:grain128aeadv2
19.7019.8120.02T:schwaemm256256v2
20.8420.8820.95romulusm
20.8120.9020.93romulusn
21.3721.4421.45T:isapk128av20
21.4821.6421.82T:schwaemm192192v2
21.7421.7721.81ascon128bi32v12
22.0122.1222.19T:isapa128v20
22.4122.4722.49T:isapa128av20
24.7724.8925.08T:schwaemm128128v2
38.8038.9839.08romulust
44.1244.2144.25T:giftcofb128v1
44.5944.6344.67T:tinyjambu128v2
46.1846.2346.54T:tinyjambu256v2
48.3048.3748.41T:tinyjambu192v2
57.0257.5558.03T:isapk128v20
61.8262.0462.36T:elephant200v2
81.5682.0183.24T:isapxv20
3570.863582.763608.05T:elephant176v2
4132.394136.884145.44T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.810.830.88T:aes128gcmv1
0.870.880.92T:aes256gcmv1
1.091.091.10aes256gcmv1
7.547.567.58ascon128av12
10.4410.4510.47T:xoodyakround3
11.0311.0411.05ascon80pqv12
11.0611.0811.09ascon128v12
14.8514.8614.88ascon128abi32v12
16.7916.8216.90T:schwaemm256128v2
19.3219.3319.35T:grain128aeadv2
20.5120.5520.81T:schwaemm256256v2
22.1522.2322.31T:schwaemm192192v2
22.4522.4622.47ascon128bi32v12
25.3225.4125.59T:schwaemm128128v2
26.8026.8226.85T:isapa128av20
29.1529.2129.24romulusn
29.7929.8029.81T:isapk128av20
39.6439.7039.74romulusm
44.5344.5644.61T:giftcofb128v1
48.7148.7348.76T:isapa128v20
57.9558.0658.10T:tinyjambu128v2
67.6067.6567.76T:tinyjambu192v2
69.1269.5869.65T:tinyjambu256v2
76.1776.2276.37romulust
92.9393.2193.82T:elephant200v2
128.44128.65128.97T:isapk128v20
179.71179.89180.12T:isapxv20
5461.745467.435476.84T:elephant176v2
6275.056277.376278.72T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.800.810.84T:aes128gcmv1
0.860.870.92T:aes256gcmv1
0.970.970.97aes256gcmv1
7.557.577.59ascon128av12
10.3810.4010.42T:xoodyakround3
10.9410.9610.97ascon80pqv12
11.0211.0411.05ascon128v12
14.8914.9114.93ascon128abi32v12
16.8116.8616.91T:schwaemm256128v2
19.5319.5419.63T:grain128aeadv2
20.3620.4520.56T:schwaemm256256v2
22.1722.2422.35T:schwaemm192192v2
22.4122.4222.46ascon128bi32v12
25.3925.6425.68T:schwaemm128128v2
29.2829.3429.39romulusn
29.8029.8129.81T:isapk128av20
30.2830.3130.32T:isapa128av20
39.8539.9239.96romulusm
44.6044.6544.67T:giftcofb128v1
48.6848.7248.77T:isapa128v20
57.9457.9657.97T:tinyjambu128v2
67.5267.5567.63T:tinyjambu192v2
69.3569.4169.52T:tinyjambu256v2
76.1376.1776.28romulust
93.2193.4693.67T:elephant200v2
128.66128.78129.14T:isapk128v20
179.54180.11180.45T:isapxv20
5465.025474.075482.93T:elephant176v2
6274.736276.446277.43T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.800.810.86T:aes128gcmv1
0.860.880.92T:aes256gcmv1
0.970.970.97aes256gcmv1
7.567.577.59ascon128av12
10.4110.4410.46T:xoodyakround3
10.9410.9610.97ascon80pqv12
11.0111.0311.05ascon128v12
14.8914.9014.92ascon128abi32v12
16.7416.8116.84T:schwaemm256128v2
19.5919.6219.63T:grain128aeadv2
20.3520.5020.57T:schwaemm256256v2
22.1222.2022.30T:schwaemm192192v2
22.3822.4022.43ascon128bi32v12
23.1823.1923.21T:isapk128av20
23.7023.7523.77T:isapa128av20
25.2425.3625.50T:schwaemm128128v2
29.3429.4029.47romulusn
29.7129.7529.79T:isapa128v20
39.8739.8939.97romulusm
39.8939.9440.00romulust
44.6044.6744.71T:giftcofb128v1
58.0458.0758.09T:tinyjambu128v2
67.4367.5567.80T:tinyjambu192v2
69.5469.5869.61T:tinyjambu256v2
85.4185.5285.61T:isapk128v20
92.9793.2893.56T:elephant200v2
118.15118.44118.60T:isapxv20
5464.745471.305482.03T:elephant176v2
6273.526276.436277.74T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.706.746.93aes256gcmv1
10.3410.9111.30T:aes128gcmv1
11.2011.5211.96T:aes256gcmv1
11.6211.7711.84ascon128av12
14.4814.5614.76ascon80pqv12
14.5214.6114.83ascon128v12
14.8215.3616.12T:xoodyakround3
22.2222.3322.86ascon128abi32v12
27.3427.7128.16T:schwaemm256128v2
27.7228.4228.60T:grain128aeadv2
30.1430.2730.58ascon128bi32v12
31.3132.0533.31T:schwaemm256256v2
32.9533.4533.86T:schwaemm128128v2
34.6734.7334.94romulusn
35.7136.1536.78T:schwaemm192192v2
45.9546.2846.47romulusm
53.1553.4853.98T:giftcofb128v1
67.4867.6367.76T:tinyjambu128v2
71.0271.4571.84T:isapa128av20
78.1478.3878.53T:tinyjambu192v2
80.4280.5780.70T:tinyjambu256v2
95.1695.4395.55T:isapk128av20
102.09102.48102.93romulust
131.67132.63134.14T:elephant200v2
394.81395.41395.97T:isapa128v20
1348.521351.951360.03T:isapk128v20
1766.711769.471774.38T:isapxv20
6830.126841.686856.94T:elephant176v2
8412.538418.678426.80T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.706.746.80aes256gcmv1
11.1211.2111.35T:aes128gcmv1
11.3811.5011.79ascon128av12
11.4211.6311.78T:aes256gcmv1
14.3314.4814.58ascon80pqv12
14.4814.6014.84ascon128v12
14.8515.2715.96T:xoodyakround3
22.4322.5623.09ascon128abi32v12
27.1927.7628.49T:schwaemm256128v2
28.2728.6929.00T:grain128aeadv2
29.9230.1630.32ascon128bi32v12
32.0532.6933.36T:schwaemm256256v2
32.8433.2733.73T:schwaemm128128v2
34.7734.9535.12romulusn
35.5736.1937.12T:schwaemm192192v2
47.0847.3047.59romulusm
53.5153.7353.98T:giftcofb128v1
67.5367.7367.95T:tinyjambu128v2
73.8874.2774.69T:isapa128av20
78.4578.6578.79T:tinyjambu192v2
80.2080.3480.56T:tinyjambu256v2
95.1295.4295.59T:isapk128av20
101.34102.70103.39romulust
132.68133.22134.16T:elephant200v2
394.80395.45395.79T:isapa128v20
1346.451354.441363.42T:isapk128v20
1770.271773.891776.90T:isapxv20
6819.246827.806839.55T:elephant176v2
8407.018417.308426.85T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.706.726.77aes256gcmv1
10.4111.1211.34T:aes128gcmv1
11.4011.5311.77ascon128av12
11.4811.5911.79T:aes256gcmv1
14.3914.5514.68ascon80pqv12
14.5114.5914.84ascon128v12
14.7015.4815.86T:xoodyakround3
22.4922.5222.59ascon128abi32v12
27.3427.6628.54T:schwaemm256128v2
27.9428.6228.98T:grain128aeadv2
30.1230.2830.72ascon128bi32v12
31.3932.2032.71T:schwaemm256256v2
33.3633.6834.26T:schwaemm128128v2
34.6735.0535.14romulusn
35.5336.0236.87T:schwaemm192192v2
47.1247.3247.62romulusm
48.5648.7549.27T:isapa128av20
53.5253.6953.79T:giftcofb128v1
59.9460.2660.47T:isapk128av20
65.4565.8266.04romulust
67.5567.7067.83T:tinyjambu128v2
78.1478.3178.58T:tinyjambu192v2
80.1380.2180.41T:tinyjambu256v2
132.45132.80133.72T:elephant200v2
205.83206.41206.57T:isapa128v20
709.83712.41714.33T:isapk128v20
927.06931.23932.42T:isapxv20
6810.666820.886834.23T:elephant176v2
8411.488420.938427.86T:elephant160v2

aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
7.197.197.19ascon128av12
10.5010.5110.51ascon128v12
10.5010.5110.51ascon80pqv12
14.3114.3214.36ascon128abi32v12
20.3720.3820.38ascon128bi32v12
22.0622.0822.11T:xoodyakround3
30.4930.5230.52T:schwaemm256128v2
32.2632.4932.77T:aes256gcmv1
38.9939.0139.01T:isapa128av20
40.5040.5340.56T:schwaemm192192v2
42.5042.5242.52T:giftcofb128v1
43.6243.6343.66T:isapa128v20
45.8945.9145.91T:schwaemm256256v2
48.6348.7249.82T:aes128gcmv1
50.2550.2550.26T:tinyjambu128v2
53.6853.8153.83T:schwaemm128128v2
59.5059.5359.60T:tinyjambu192v2
65.8165.8365.86T:romulusn
67.5067.5167.52T:tinyjambu256v2
98.4798.5698.62T:isapk128av20
114.11114.26114.26romulusn
129.91129.97131.43T:isapk128v20
169.86170.92171.00romulusm
205.21205.29205.50T:elephant200v2
238.24238.29241.49T:isapxv20
333.68333.77335.94romulust
6995.937000.947003.55T:elephant160v2
7459.747463.217473.19T:elephant176v2
18126.3018141.9118146.93aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
7.007.007.01ascon128av12
10.2410.2510.26ascon128v12
10.4910.5010.51ascon80pqv12
14.0614.0614.11ascon128abi32v12
20.3820.3820.38ascon128bi32v12
21.5521.5821.62T:xoodyakround3
30.4930.5230.53T:schwaemm256128v2
34.5534.7234.92T:aes256gcmv1
39.0039.0139.03T:isapa128av20
40.5140.5440.56T:schwaemm192192v2
42.5042.5242.52T:giftcofb128v1
43.6243.6343.66T:isapa128v20
46.0246.0346.04T:schwaemm256256v2
48.5448.6249.90T:aes128gcmv1
50.2450.2550.30T:tinyjambu128v2
53.6853.7053.78T:schwaemm128128v2
59.2559.2859.29T:tinyjambu192v2
65.2965.3165.34T:romulusn
67.7567.7767.94T:tinyjambu256v2
98.3598.5598.60T:isapk128av20
114.26114.27114.28romulusn
129.65129.93130.02T:isapk128v20
169.49171.10171.19romulusm
205.17205.21205.23T:elephant200v2
238.22238.28241.61T:isapxv20
333.68333.88336.37romulust
6985.756987.587000.60T:elephant160v2
7459.857464.987478.10T:elephant176v2
18128.0418145.0518157.79aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
7.017.017.01ascon128av12
10.2610.2610.26ascon128v12
10.5110.5110.51ascon80pqv12
14.0714.0714.11ascon128abi32v12
20.3820.3820.38ascon128bi32v12
21.6421.6821.70T:xoodyakround3
21.7221.7621.78T:isapa128v20
25.8525.8825.91T:isapa128av20
30.5030.5230.52T:schwaemm256128v2
34.0434.3234.56T:aes256gcmv1
40.5240.5340.56T:schwaemm192192v2
42.5242.5242.52T:giftcofb128v1
46.0346.0346.04T:schwaemm256256v2
48.4848.5548.70T:aes128gcmv1
50.2450.2550.26T:tinyjambu128v2
53.6953.7553.78T:schwaemm128128v2
59.2559.2759.36T:tinyjambu192v2
65.2865.3065.31T:romulusn
66.2766.4266.57T:isapk128av20
67.7567.7667.83T:tinyjambu256v2
82.0082.0382.22T:isapk128v20
114.05114.08114.14romulust
114.25114.26114.28romulusn
138.20138.23138.25T:isapxv20
169.46170.95171.15romulusm
204.64205.22205.30T:elephant200v2
381.30381.64382.24aes256gcmv1
6985.066991.337001.33T:elephant160v2
7457.217462.107473.64T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
7.027.047.05ascon128av12
10.5010.5110.51ascon128v12
10.6110.6310.64ascon80pqv12
14.0514.0814.09ascon128abi32v12
16.8416.9116.92T:xoodyakround3
19.2119.3319.48T:aes256gcmv1
20.3620.3820.39ascon128bi32v12
30.3130.3230.34T:schwaemm256128v2
30.6130.6430.69T:aes128gcmv1
32.4332.4432.46T:isapa128av20
32.7632.7732.80T:isapa128v20
40.2940.3040.30T:schwaemm192192v2
41.4941.5041.51T:tinyjambu128v2
42.3442.3542.36T:giftcofb128v1
45.2845.4845.49T:schwaemm256256v2
46.3746.3846.39T:tinyjambu192v2
50.5050.5050.51T:tinyjambu256v2
53.5453.5553.57T:schwaemm128128v2
57.1857.1857.21T:romulusn
81.4181.5281.59T:isapk128av20
84.7484.7585.23romulusn
105.10105.32105.94T:isapk128v20
111.84113.69113.73romulusm
153.32153.38153.48T:elephant200v2
188.02188.08188.16T:isapxv20
224.24225.32225.41romulust
5239.415246.205248.36T:elephant160v2
5582.605589.435595.93T:elephant176v2
9256.799258.459261.22aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
7.007.017.01ascon128av12
10.4310.4410.44ascon128v12
10.5010.5110.51ascon80pqv12
13.9313.9413.96ascon128abi32v12
16.5716.5916.60T:xoodyakround3
20.1220.4020.53T:aes256gcmv1
20.4420.4520.45ascon128bi32v12
30.3130.3330.33T:schwaemm256128v2
30.5330.6130.66T:aes128gcmv1
32.4332.4432.45T:isapa128av20
32.7732.7832.78T:isapa128v20
40.2940.3140.34T:schwaemm192192v2
41.4841.5041.50T:tinyjambu128v2
42.3542.3642.38T:giftcofb128v1
45.3045.5245.52T:schwaemm256256v2
46.2146.2646.27T:tinyjambu192v2
50.6250.6350.64T:tinyjambu256v2
53.5153.5253.53T:schwaemm128128v2
56.9056.9256.93T:romulusn
81.4981.5281.57T:isapk128av20
85.2085.2085.21romulusn
105.22105.32105.42T:isapk128v20
112.86113.64113.81romulusm
153.09153.44153.48T:elephant200v2
188.07188.09188.17T:isapxv20
224.03224.16225.52romulust
5240.465247.635248.91T:elephant160v2
5582.745584.405593.12T:elephant176v2
9250.109259.979263.24aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
7.017.017.01ascon128av12
10.4410.4410.44ascon128v12
10.5110.5110.54ascon80pqv12
13.9513.9513.96ascon128abi32v12
16.6116.6416.65T:xoodyakround3
20.0020.2220.71T:aes256gcmv1
20.4520.4520.45ascon128bi32v12
21.8121.8321.84T:isapa128v20
25.8625.8825.89T:isapa128av20
30.3130.3330.33T:schwaemm256128v2
30.5630.6130.67T:aes128gcmv1
40.3040.3040.31T:schwaemm192192v2
41.5041.5041.51T:tinyjambu128v2
42.3642.3642.36T:giftcofb128v1
45.3045.5345.53T:schwaemm256256v2
46.2446.2646.31T:tinyjambu192v2
50.6250.6350.63T:tinyjambu256v2
53.5353.5553.55T:schwaemm128128v2
56.9156.9256.94T:romulusn
65.4065.4965.56T:isapk128av20
81.3281.3481.43T:isapk128v20
85.1985.2285.22romulusn
112.47113.40113.80romulusm
114.11114.25114.32romulust
137.96137.98137.99T:isapxv20
153.32153.45153.54T:elephant200v2
381.10382.07383.67aes256gcmv1
5239.075246.375250.18T:elephant160v2
5580.955586.115590.69T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
5.986.166.33T:aes256gcmv1
6.876.886.88ascon128av12
10.5010.5110.51ascon128v12
10.7510.7610.76ascon80pqv12
11.5911.6111.63T:xoodyakround3
12.5312.6112.67T:aes128gcmv1
13.8013.8113.86ascon128abi32v12
20.3720.3820.38ascon128bi32v12
21.8721.8921.90T:isapa128v20
25.8825.8825.88T:isapa128av20
30.1230.1530.15T:schwaemm256128v2
32.7532.7532.75T:tinyjambu128v2
33.2533.2533.26T:tinyjambu192v2
33.4933.5033.50T:tinyjambu256v2
40.0540.1040.12T:schwaemm192192v2
42.1942.2142.22T:giftcofb128v1
44.5644.5644.57T:schwaemm256256v2
48.4948.5048.53T:romulusn
53.2653.3953.41T:schwaemm128128v2
56.0856.1156.13romulusn
56.1156.4356.44romulusm
64.4364.5964.70T:isapk128av20
80.6480.7381.17T:isapk128v20
102.02102.06102.13T:elephant200v2
114.09114.12114.25romulust
137.72137.74137.75T:isapxv20
381.26381.82386.79aes256gcmv1
3492.983493.623507.44T:elephant160v2
3687.553688.603693.25T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
6.056.336.41T:aes256gcmv1
7.007.007.01ascon128av12
10.4910.5110.51ascon80pqv12
10.6210.6210.63ascon128v12
11.5611.6011.63T:xoodyakround3
12.5412.6012.68T:aes128gcmv1
13.8113.8113.86ascon128abi32v12
20.5020.5120.51ascon128bi32v12
21.8521.8821.90T:isapa128v20
25.8525.8825.90T:isapa128av20
30.1130.1530.16T:schwaemm256128v2
32.7432.7532.76T:tinyjambu128v2
33.2433.2533.26T:tinyjambu192v2
33.4933.5033.51T:tinyjambu256v2
40.0740.1140.12T:schwaemm192192v2
42.2042.2142.23T:giftcofb128v1
44.5644.5744.59T:schwaemm256256v2
48.4948.5349.02T:romulusn
53.2653.3253.41T:schwaemm128128v2
56.1556.1656.17romulusn
56.1756.4356.45romulusm
64.4264.6064.68T:isapk128av20
80.6580.6980.79T:isapk128v20
102.14102.17102.19T:elephant200v2
114.33114.46114.57romulust
137.70137.74137.80T:isapxv20
381.48381.82388.69aes256gcmv1
3491.953493.163497.24T:elephant160v2
3687.633688.243691.29T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
5.916.136.46T:aes256gcmv1
7.017.017.01ascon128av12
10.5110.5110.51ascon80pqv12
10.6310.6310.63ascon128v12
11.5811.6011.62T:xoodyakround3
12.5512.5812.67T:aes128gcmv1
13.8213.8213.86ascon128abi32v12
20.5120.5120.51ascon128bi32v12
21.8521.8821.90T:isapa128v20
25.8525.8825.90T:isapa128av20
30.1330.1530.16T:schwaemm256128v2
32.7432.7532.76T:tinyjambu128v2
33.2433.2533.29T:tinyjambu192v2
33.4933.5133.51T:tinyjambu256v2
40.0640.1140.12T:schwaemm192192v2
42.2142.2142.21T:giftcofb128v1
44.5644.5744.57T:schwaemm256256v2
48.5048.5248.54T:romulusn
53.2653.3253.40T:schwaemm128128v2
56.1456.1556.18romulusn
56.1856.4256.45romulusm
64.4364.5464.68T:isapk128av20
80.5480.6880.80T:isapk128v20
102.14102.17102.20T:elephant200v2
114.12114.30114.53romulust
137.71137.73137.76T:isapxv20
381.46381.75385.37aes256gcmv1
3492.943493.913497.18T:elephant160v2
3687.683688.313695.82T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
7.197.197.21ascon128av12
10.6510.6510.66ascon128v12
10.7710.7710.78ascon80pqv12
14.4214.4414.44ascon128abi32v12
17.0417.1017.10T:xoodyakround3
20.7220.7220.73ascon128bi32v12
26.6426.8326.95T:aes256gcmv1
31.1831.1931.20T:schwaemm256128v2
33.0533.0833.13T:aes128gcmv1
35.3635.3635.37T:isapa128av20
41.1641.1741.19T:schwaemm192192v2
41.8241.8241.83T:tinyjambu128v2
42.7642.7642.78T:giftcofb128v1
46.4846.6346.64T:schwaemm256256v2
46.7246.7346.74T:tinyjambu192v2
47.8247.8347.84T:isapa128v20
50.8650.8650.87T:tinyjambu256v2
54.2154.2254.23T:schwaemm128128v2
57.8957.9057.92T:romulusn
85.4985.7485.74romulusn
95.4495.5395.56T:isapk128av20
112.60114.28114.30romulusm
156.49156.54156.59T:elephant200v2
185.18185.19185.21T:isapk128v20
227.13228.11228.50romulust
305.35305.36305.38T:isapxv20
5298.025299.415309.01T:elephant160v2
5617.015618.425626.12T:elephant176v2
9431.559434.099450.47aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
7.177.177.17ascon128av12
10.5810.5810.58ascon128v12
10.6510.6510.65ascon80pqv12
14.3014.3014.33ascon128abi32v12
16.7816.7916.80T:xoodyakround3
20.8020.8020.80ascon128bi32v12
29.3429.5029.61T:aes256gcmv1
31.1731.1931.20T:schwaemm256128v2
32.9632.9933.05T:aes128gcmv1
35.3935.3935.39T:isapa128av20
41.1741.1741.18T:schwaemm192192v2
41.8241.8241.83T:tinyjambu128v2
42.7842.7842.79T:giftcofb128v1
46.6046.6146.68T:tinyjambu192v2
46.4746.6846.68T:schwaemm256256v2
47.8447.8547.86T:isapa128v20
50.9951.0051.00T:tinyjambu256v2
54.1854.2054.21T:schwaemm128128v2
57.6557.6757.84T:romulusn
85.8285.8285.82romulusn
95.5495.5695.62T:isapk128av20
113.36114.42114.43romulusm
156.57156.59156.61T:elephant200v2
185.22185.27185.32T:isapk128v20
227.27227.31227.81romulust
305.36305.37305.48T:isapxv20
5299.015299.785306.40T:elephant160v2
5617.095619.135625.93T:elephant176v2
9432.339439.799443.57aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
7.177.177.17ascon128av12
10.5810.5810.58ascon128v12
10.6510.6510.65ascon80pqv12
14.3014.3014.33ascon128abi32v12
16.8316.8416.85T:xoodyakround3
20.8020.8020.80ascon128bi32v12
27.4927.4927.51T:isapa128av20
29.4829.4829.51T:isapa128v20
31.1731.1931.20T:schwaemm256128v2
32.9532.9933.10T:aes128gcmv1
41.1741.1741.20T:schwaemm192192v2
41.8241.8241.83T:tinyjambu128v2
42.7842.7842.78T:giftcofb128v1
44.4244.6244.95T:aes256gcmv1
46.6046.6046.62T:tinyjambu192v2
46.4846.6946.69T:schwaemm256256v2
50.9951.0051.00T:tinyjambu256v2
54.2154.2154.24T:schwaemm128128v2
57.6457.6657.87T:romulusn
74.7174.7874.81T:isapk128av20
85.8185.8185.84romulusn
113.28114.40114.42romulusm
117.27117.36117.48romulust
124.26124.26124.32T:isapk128v20
156.31156.59156.77T:elephant200v2
197.98198.00198.05T:isapxv20
567.90568.38570.32aes256gcmv1
5299.145300.025308.73T:elephant160v2
5617.075619.605626.16T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
10.7310.8211.29ascon128av12
13.8413.9514.14ascon128v12
13.9813.9814.30ascon80pqv12
22.2922.4323.12ascon128abi32v12
25.7525.7926.52T:xoodyakround3
28.4028.4129.02ascon128bi32v12
49.1649.1649.37T:tinyjambu128v2
50.3850.4850.62T:schwaemm256128v2
52.0252.0252.70T:giftcofb128v1
54.5954.5954.81T:tinyjambu192v2
59.1759.1759.30T:tinyjambu256v2
66.1466.3066.48T:schwaemm192192v2
69.4169.4169.52T:schwaemm128128v2
72.5672.5972.70T:schwaemm256256v2
73.8773.8774.62T:romulusn
87.9988.3089.02T:aes128gcmv1
98.5799.3599.72romulusn
102.52102.62103.23T:isapa128av20
128.52128.83129.04romulusm
196.80198.00201.74T:aes256gcmv1
219.91220.82222.48T:elephant200v2
299.59300.04300.18romulust
394.04394.04394.44T:isapa128v20
404.67404.97405.48T:isapk128av20
2003.322003.552004.90T:isapk128v20
2969.392969.612969.91T:isapxv20
6986.776987.066990.45T:elephant176v2
7088.467088.837092.41T:elephant160v2
13708.0213708.2713778.71aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
10.7510.7511.20ascon128av12
13.8413.8414.04ascon128v12
14.0014.0014.12ascon80pqv12
22.4622.4623.22ascon128abi32v12
25.4125.5826.02T:xoodyakround3
28.9528.9529.45ascon128bi32v12
49.2349.2349.34T:tinyjambu128v2
50.3450.4050.66T:schwaemm256128v2
52.3852.3852.84T:giftcofb128v1
54.5354.5654.70T:tinyjambu192v2
59.3759.4159.60T:tinyjambu256v2
66.1666.2766.53T:schwaemm192192v2
69.2369.2769.29T:schwaemm128128v2
72.9873.0173.30T:schwaemm256256v2
73.8773.9474.33T:romulusn
87.4888.0988.80T:aes128gcmv1
99.5699.84100.05romulusn
103.05103.05103.32T:isapa128av20
128.76128.99129.16romulusm
220.00220.16220.52T:elephant200v2
237.31239.91241.05T:aes256gcmv1
298.95299.20300.29romulust
394.47394.47394.77T:isapa128v20
404.84405.02405.47T:isapk128av20
2004.002005.022006.15T:isapk128v20
2969.542969.742970.11T:isapxv20
6987.056987.176989.21T:elephant176v2
7088.497088.697091.33T:elephant160v2
13708.2313708.8913763.21aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
10.7410.7410.75ascon128av12
13.8413.8413.84ascon128v12
13.8914.0014.00ascon80pqv12
22.4622.4622.46ascon128abi32v12
25.5625.5925.87T:xoodyakround3
28.9528.9528.95ascon128bi32v12
49.2349.2349.33T:tinyjambu128v2
50.3350.3850.47T:schwaemm256128v2
52.3852.3852.38T:giftcofb128v1
54.5354.5354.70T:tinyjambu192v2
59.3759.3759.55T:tinyjambu256v2
64.3864.3865.03T:isapa128av20
66.1666.2366.27T:schwaemm192192v2
69.2369.2469.25T:schwaemm128128v2
72.9772.9772.98T:schwaemm256256v2
73.6173.6673.78T:romulusn
87.2387.8187.95T:aes128gcmv1
99.5699.5699.56romulusn
128.76128.76129.16romulusm
188.22188.48188.95romulust
205.68205.68205.96T:isapa128v20
219.92220.02220.35T:elephant200v2
276.94277.63278.71T:isapk128av20
598.38600.39603.66T:aes256gcmv1
1096.391096.651096.88T:isapk128v20
1552.511552.761553.14T:isapxv20
4855.694855.904856.30aes256gcmv1
6986.806986.886988.27T:elephant176v2
7088.127088.277088.47T:elephant160v2

amd64; Zen 2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.940.950.99T:aes256gcmv1
1.521.531.54T:aes128gcmv1
1.681.691.71aes256gcmv1
6.416.426.44ascon128av12
9.379.389.40ascon128v12
9.409.419.42ascon80pqv12
11.1211.2511.41ascon128abi32v12
16.9517.0317.12ascon128bi32v12
17.8417.8818.05T:xoodyakround3
19.4519.4919.58T:schwaemm256128v2
23.3023.5024.24T:schwaemm256256v2
25.6525.7925.87T:schwaemm192192v2
26.5526.9827.37T:grain128aeadv2
27.5027.6227.84T:schwaemm128128v2
35.5535.5835.61romulusn
36.3836.4336.46T:isapa128av20
36.5336.5636.64T:isapa128v20
40.4940.5140.55T:giftcofb128v1
57.1157.1857.21romulusm
61.6061.6261.63T:tinyjambu128v2
65.0265.0865.26T:isapk128av20
68.9668.9668.96T:tinyjambu192v2
75.9775.9775.97T:tinyjambu256v2
84.8984.9685.06T:isapk128v20
112.30112.31112.33romulust
147.91148.56148.89T:isapxv20
250.03258.54259.12T:elephant200v2
6482.926500.186538.07T:elephant176v2
7166.997185.647191.92T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.870.930.95T:aes256gcmv1
1.601.621.63T:aes128gcmv1
1.791.801.81aes256gcmv1
6.286.306.32ascon128av12
9.519.529.54ascon80pqv12
9.529.539.53ascon128v12
11.2111.2311.25ascon128abi32v12
16.7916.9216.98ascon128bi32v12
17.7817.8217.85T:xoodyakround3
19.4619.5519.65T:schwaemm256128v2
23.2723.4924.37T:schwaemm256256v2
25.6625.7525.87T:schwaemm192192v2
27.4927.5827.80T:schwaemm128128v2
27.3527.5927.62T:grain128aeadv2
35.4035.4235.44romulusn
36.2636.3736.42T:isapa128v20
36.4036.4436.48T:isapa128av20
40.4840.5340.55T:giftcofb128v1
57.2057.3057.32romulusm
61.4961.5761.62T:tinyjambu128v2
64.9465.0965.20T:isapk128av20
68.6368.7268.81T:tinyjambu192v2
76.0276.0576.15T:tinyjambu256v2
85.4585.5185.83T:isapk128v20
112.27112.29112.36romulust
147.36147.72148.46T:isapxv20
248.71258.60259.99T:elephant200v2
6479.996491.486539.29T:elephant176v2
7164.987185.127190.17T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.890.930.97T:aes256gcmv1
1.601.611.61T:aes128gcmv1
1.771.791.80aes256gcmv1
6.276.306.31ascon128av12
9.499.509.53ascon80pqv12
9.549.569.56ascon128v12
11.2411.2511.25ascon128abi32v12
16.7916.9316.99ascon128bi32v12
17.8117.8617.89T:xoodyakround3
18.0218.0918.13T:isapa128v20
19.4819.5219.58T:schwaemm256128v2
23.2523.4424.34T:schwaemm256256v2
24.1224.1524.21T:isapa128av20
25.6725.8025.87T:schwaemm192192v2
27.3327.5827.64T:grain128aeadv2
27.4827.6127.85T:schwaemm128128v2
35.4035.4235.45romulusn
37.4637.5737.62romulust
40.5140.5240.56T:giftcofb128v1
44.2444.4544.70T:isapk128av20
54.5854.6254.65T:isapk128v20
57.2157.2657.32romulusm
61.5061.5361.58T:tinyjambu128v2
68.6468.6668.71T:tinyjambu192v2
76.0276.0476.06T:tinyjambu256v2
86.6586.9287.45T:isapxv20
250.16258.62259.44T:elephant200v2
6478.506492.996542.89T:elephant176v2
7163.117186.007189.49T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.670.690.70T:aes256gcmv1
1.001.011.02T:aes128gcmv1
1.091.101.11aes256gcmv1
6.376.406.43ascon128av12
9.449.469.47ascon80pqv12
9.439.489.50ascon128v12
11.0611.1011.11ascon128abi32v12
13.4813.5113.56T:xoodyakround3
16.8016.8916.92ascon128bi32v12
19.3519.4019.44T:schwaemm256128v2
23.1823.3824.22T:schwaemm256256v2
25.5625.6125.66T:schwaemm192192v2
26.5027.0527.27T:grain128aeadv2
27.2527.4227.43T:isapa128v20
27.4927.5927.63T:schwaemm128128v2
28.7028.7528.79romulusn
30.2930.3230.33T:isapa128av20
39.5439.5739.60romulusm
40.4040.4240.45T:giftcofb128v1
50.6150.6450.69T:tinyjambu128v2
54.3154.3354.34T:tinyjambu192v2
54.7954.8154.90T:isapk128av20
58.0258.0558.08T:tinyjambu256v2
69.7669.7969.83T:isapk128v20
74.7474.9074.93romulust
116.94117.18117.51T:isapxv20
185.87193.43194.98T:elephant200v2
4846.724852.934889.25T:elephant176v2
5371.305388.135391.22T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.650.680.69T:aes256gcmv1
1.051.061.07T:aes128gcmv1
1.141.151.16aes256gcmv1
6.326.346.35ascon128av12
9.519.529.54ascon80pqv12
9.519.559.55ascon128v12
11.0811.1011.11ascon128abi32v12
13.3713.3913.51T:xoodyakround3
16.7316.7416.78ascon128bi32v12
19.3519.4019.44T:schwaemm256128v2
23.1723.4024.26T:schwaemm256256v2
25.5525.6225.67T:schwaemm192192v2
27.2127.2827.41T:isapa128v20
27.2227.4027.45T:grain128aeadv2
27.4827.5527.58T:schwaemm128128v2
28.6428.6828.70romulusn
30.3030.3330.34T:isapa128av20
39.5539.6139.63romulusm
40.3940.4340.46T:giftcofb128v1
50.6050.6150.65T:tinyjambu128v2
54.1854.2054.22T:tinyjambu192v2
54.7354.8254.85T:isapk128av20
58.0958.1058.11T:tinyjambu256v2
70.0770.1070.28T:isapk128v20
74.8774.9074.91romulust
116.93117.26118.07T:isapxv20
185.36193.64194.13T:elephant200v2
4842.394848.694887.81T:elephant176v2
5370.195388.305391.72T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.660.680.69T:aes256gcmv1
1.051.061.06T:aes128gcmv1
1.141.151.16aes256gcmv1
6.356.366.36ascon128av12
9.529.529.54ascon80pqv12
9.539.539.53ascon128v12
11.1011.1111.13ascon128abi32v12
13.4013.4313.53T:xoodyakround3
16.7316.7416.74ascon128bi32v12
18.1118.1218.21T:isapa128v20
19.3819.4219.48T:schwaemm256128v2
23.1523.4124.25T:schwaemm256256v2
24.1724.1824.19T:isapa128av20
25.6025.6625.74T:schwaemm192192v2
27.2527.4127.45T:grain128aeadv2
27.4427.5327.61T:schwaemm128128v2
28.6528.6728.71romulusn
37.4937.5137.53romulust
39.5639.5839.61romulusm
40.4240.4240.44T:giftcofb128v1
44.4044.5144.60T:isapk128av20
50.5950.6250.64T:tinyjambu128v2
54.1854.2354.24T:tinyjambu192v2
54.6254.6554.67T:isapk128v20
58.0558.0758.14T:tinyjambu256v2
86.4686.8087.07T:isapxv20
185.84193.57194.12T:elephant200v2
4842.374848.734888.50T:elephant176v2
5372.125387.915390.92T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.400.430.44T:aes256gcmv1
0.500.520.52T:aes128gcmv1
0.510.530.55aes256gcmv1
6.326.346.37ascon128av12
8.989.049.13T:xoodyakround3
9.489.499.54ascon80pqv12
9.479.539.56ascon128v12
10.9210.9510.95ascon128abi32v12
16.5816.7016.75ascon128bi32v12
18.1918.2518.27T:isapa128v20
19.2019.2919.34T:schwaemm256128v2
21.8221.8921.95romulusm
21.9021.9421.97romulusn
23.1223.2224.19T:schwaemm256256v2
24.1624.1824.23T:isapa128av20
25.4325.5225.59T:schwaemm192192v2
26.3626.9027.16T:grain128aeadv2
27.2327.3327.56T:schwaemm128128v2
37.5037.5337.58romulust
39.6939.7039.72T:tinyjambu192v2
39.6439.7039.71T:tinyjambu128v2
40.0240.1240.13T:tinyjambu256v2
40.2340.3140.36T:giftcofb128v1
44.3244.5044.75T:isapk128av20
54.6454.7354.76T:isapk128v20
85.9486.1786.53T:isapxv20
123.05128.13129.19T:elephant200v2
3194.553204.153221.55T:elephant176v2
3575.463586.333589.45T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.410.420.43T:aes256gcmv1
0.500.520.54aes256gcmv1
0.510.520.53T:aes128gcmv1
6.366.376.38ascon128av12
9.029.079.17T:xoodyakround3
9.499.519.58ascon80pqv12
9.509.559.57ascon128v12
10.9510.9610.97ascon128abi32v12
16.5016.5916.64ascon128bi32v12
18.1818.2318.27T:isapa128v20
19.2419.2819.36T:schwaemm256128v2
21.8621.8921.96romulusn
21.8021.8921.93romulusm
23.0823.2324.18T:schwaemm256256v2
24.1624.1824.23T:isapa128av20
25.4625.5025.65T:schwaemm192192v2
27.1327.2327.28T:grain128aeadv2
27.2427.2927.60T:schwaemm128128v2
37.4937.5437.60romulust
39.6839.6939.75T:tinyjambu128v2
39.6939.7039.72T:tinyjambu192v2
40.1340.1340.14T:tinyjambu256v2
40.2940.3640.41T:giftcofb128v1
44.3144.5244.75T:isapk128av20
54.6554.7054.72T:isapk128v20
86.0386.2086.80T:isapxv20
123.71128.11128.41T:elephant200v2
3193.523202.383221.15T:elephant176v2
3576.553585.293589.96T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.410.430.45T:aes256gcmv1
0.510.520.52T:aes128gcmv1
0.510.520.53aes256gcmv1
6.376.396.39ascon128av12
9.029.079.13T:xoodyakround3
9.529.539.57ascon128v12
9.519.539.54ascon80pqv12
10.9410.9610.97ascon128abi32v12
16.4916.6016.67ascon128bi32v12
18.2018.2518.28T:isapa128v20
19.2119.2619.33T:schwaemm256128v2
21.8321.8421.89romulusn
21.8821.9021.94romulusm
23.0423.2224.10T:schwaemm256256v2
24.1524.1624.22T:isapa128av20
25.4525.5225.62T:schwaemm192192v2
27.1027.2227.27T:grain128aeadv2
27.2427.3227.53T:schwaemm128128v2
37.4937.5237.57romulust
39.7039.7039.75T:tinyjambu192v2
39.6839.7039.75T:tinyjambu128v2
40.0140.0340.12T:tinyjambu256v2
40.2840.3140.34T:giftcofb128v1
44.2944.5244.72T:isapk128av20
54.6454.6854.72T:isapk128v20
85.9386.2886.78T:isapxv20
123.23128.18129.08T:elephant200v2
3194.493201.383221.37T:elephant176v2
3577.993585.313589.64T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.141.151.15T:aes128gcmv1
1.221.231.24T:aes256gcmv1
1.231.241.25aes256gcmv1
6.546.576.58ascon128av12
9.579.619.63ascon128v12
9.619.629.64ascon80pqv12
11.3711.3911.41ascon128abi32v12
13.6113.6313.67T:xoodyakround3
17.1617.1917.24ascon128bi32v12
19.9419.9820.01T:schwaemm256128v2
23.8723.9924.77T:schwaemm256256v2
26.2026.2426.31T:schwaemm192192v2
26.8927.3827.59T:grain128aeadv2
27.8728.0428.12T:schwaemm128128v2
28.9929.0029.03romulusn
33.5133.5333.54T:isapa128av20
39.8539.9139.96romulusm
39.9740.1540.15T:isapa128v20
40.7740.8040.82T:giftcofb128v1
50.9851.0351.05T:tinyjambu128v2
54.7454.7554.75T:tinyjambu192v2
58.4458.4558.48T:tinyjambu256v2
60.8960.9060.92T:isapk128av20
75.8376.0376.05romulust
121.77121.81121.82T:isapk128v20
190.00190.21190.51T:isapxv20
190.42197.50197.65T:elephant200v2
4885.544888.954915.42T:elephant176v2
5432.485448.345450.56T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.181.191.20T:aes128gcmv1
1.221.231.26T:aes256gcmv1
1.291.301.32aes256gcmv1
6.496.506.50ascon128av12
9.679.679.69ascon80pqv12
9.689.699.69ascon128v12
11.4011.4011.41ascon128abi32v12
13.5313.6113.62T:xoodyakround3
17.1017.1117.11ascon128bi32v12
19.9519.9720.02T:schwaemm256128v2
23.8123.9624.61T:schwaemm256256v2
26.1826.2026.23T:schwaemm192192v2
27.6727.7927.82T:grain128aeadv2
27.8227.8827.97T:schwaemm128128v2
28.9528.9728.97romulusn
33.5233.5433.56T:isapa128av20
39.9439.9840.05romulusm
39.9440.0240.17T:isapa128v20
40.7940.8140.84T:giftcofb128v1
50.9650.9951.00T:tinyjambu128v2
54.6254.6454.66T:tinyjambu192v2
58.5358.5358.56T:tinyjambu256v2
60.9060.9360.97T:isapk128av20
76.0476.0476.06romulust
122.09122.11122.16T:isapk128v20
189.88190.08190.39T:isapxv20
190.95197.47197.57T:elephant200v2
4881.674886.354916.12T:elephant176v2
5432.845448.305451.88T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.181.181.19T:aes128gcmv1
1.221.241.25T:aes256gcmv1
1.291.291.30aes256gcmv1
6.506.506.50ascon128av12
9.679.679.68ascon80pqv12
9.699.699.69ascon128v12
11.4011.4011.46ascon128abi32v12
13.5513.5913.64T:xoodyakround3
17.1017.1117.12ascon128bi32v12
19.9519.9820.03T:schwaemm256128v2
23.8123.9624.78T:schwaemm256256v2
24.6224.6224.72T:isapa128v20
25.9725.9826.00T:isapa128av20
26.1726.2226.26T:schwaemm192192v2
27.6227.7927.81T:grain128aeadv2
27.8127.9127.98T:schwaemm128128v2
28.9428.9628.96romulusn
38.6238.6438.65romulust
39.9540.0040.05romulusm
40.7940.8240.83T:giftcofb128v1
48.1548.1848.28T:isapk128av20
51.0551.0551.08T:tinyjambu128v2
54.6154.6254.63T:tinyjambu192v2
58.4858.5358.54T:tinyjambu256v2
81.3381.3581.37T:isapk128v20
123.82123.95124.07T:isapxv20
190.48197.64197.73T:elephant200v2
4879.764883.594916.98T:elephant176v2
5432.775447.135450.08T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.486.526.91aes256gcmv1
7.007.057.12T:aes128gcmv1
10.6110.6910.81ascon128av12
12.9812.9813.24ascon80pqv12
12.8713.0913.41ascon128v12
14.1114.3814.56T:aes256gcmv1
17.9318.0518.77ascon128abi32v12
20.2320.5620.73T:xoodyakround3
23.6225.1025.77ascon128bi32v12
32.9132.9233.35T:schwaemm256128v2
35.1235.2335.38romulusn
35.3135.8836.43T:grain128aeadv2
35.7736.3836.70T:schwaemm128128v2
38.0438.3739.52T:schwaemm256256v2
42.3842.5843.16T:schwaemm192192v2
46.9646.9847.36romulusm
49.3449.4249.70T:giftcofb128v1
60.0160.1560.27T:tinyjambu128v2
64.1464.4964.76T:tinyjambu192v2
68.1368.3968.49T:tinyjambu256v2
101.77102.12102.38romulust
107.03107.40107.78T:isapa128av20
189.75191.30191.37T:isapk128av20
273.57278.18278.61T:elephant200v2
331.00331.00331.23T:isapa128v20
1303.301303.371303.57T:isapk128v20
1845.211853.521853.92T:isapxv20
6059.736062.336108.05T:elephant176v2
7272.007283.447286.66T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.526.526.62aes256gcmv1
7.487.527.59T:aes128gcmv1
10.7210.8110.91ascon128av12
12.9413.0313.33ascon80pqv12
13.0713.0713.40ascon128v12
14.2114.5115.01T:aes256gcmv1
18.0218.2918.98ascon128abi32v12
19.8720.6620.98T:xoodyakround3
24.6625.0126.12ascon128bi32v12
32.7733.1433.80T:schwaemm256128v2
35.1135.1135.53romulusn
36.0636.1737.19T:schwaemm128128v2
36.1636.5136.85T:grain128aeadv2
38.1638.3139.50T:schwaemm256256v2
42.2342.5942.94T:schwaemm192192v2
48.3048.6548.73romulusm
49.5649.6650.00T:giftcofb128v1
59.9960.0960.27T:tinyjambu128v2
64.0564.0964.18T:tinyjambu192v2
68.1568.3068.34T:tinyjambu256v2
102.09102.55102.89romulust
106.84107.39107.45T:isapa128av20
189.56190.32192.00T:isapk128av20
270.36279.55279.70T:elephant200v2
329.31331.30331.75T:isapa128v20
1303.731303.851304.42T:isapk128v20
1846.951852.061854.28T:isapxv20
6058.916064.776105.33T:elephant176v2
7271.947279.277282.77T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.526.556.60aes256gcmv1
7.467.487.50T:aes128gcmv1
10.4410.6210.70ascon128av12
13.0113.0113.27ascon80pqv12
13.0513.1413.26ascon128v12
14.0214.1314.40T:aes256gcmv1
18.0118.0218.59ascon128abi32v12
19.9820.1620.50T:xoodyakround3
25.5925.5925.85ascon128bi32v12
32.7332.9233.47T:schwaemm256128v2
35.1335.4835.49romulusn
36.1436.2036.84T:schwaemm128128v2
36.2336.3437.00T:grain128aeadv2
38.1538.1839.47T:schwaemm256256v2
42.2742.3042.34T:schwaemm192192v2
48.3548.5648.67romulusm
49.8849.8850.18T:giftcofb128v1
60.1060.2260.34T:tinyjambu128v2
63.7364.0264.34romulust
64.2964.2964.30T:tinyjambu192v2
66.6866.9967.23T:isapa128av20
68.2968.2968.30T:tinyjambu256v2
123.20123.32126.16T:isapk128av20
172.55173.34173.97T:isapa128v20
270.12278.27279.35T:elephant200v2
683.88684.27684.38T:isapk128v20
964.09968.55968.91T:isapxv20
6060.806064.576104.64T:elephant176v2
7269.337280.947286.40T:elephant160v2

amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.401.401.41T:aes128gcmv1
1.641.641.65aes256gcmv1
7.417.437.46ascon128av12
10.8311.0411.09ascon128v12
10.9711.0811.10ascon80pqv12
14.0514.0914.12ascon128abi32v12
15.7315.8715.96T:xoodyakround3
17.8717.9418.00T:schwaemm256128v2
20.6021.0921.14ascon128bi32v12
22.8222.8522.92T:schwaemm256256v2
23.5023.7223.95T:schwaemm192192v2
24.9224.9325.04T:grain128aeadv2
25.6825.7325.79T:schwaemm128128v2
38.4738.4938.51romulusn
40.4340.4940.54T:isapa128av20
41.3941.4741.52T:giftcofb128v1
41.9142.0142.08T:isapa128v20
60.3360.5760.80T:tinyjambu128v2
61.9461.9962.03romulusm
69.5269.7369.94T:isapk128av20
76.5676.5776.57T:tinyjambu192v2
80.0580.1280.14T:tinyjambu256v2
92.3692.7393.09T:isapk128v20
125.02125.08125.13romulust
177.12177.19177.32T:elephant200v2
195.81197.91198.05T:isapxv20
7523.197524.327524.79T:elephant176v2
8225.288225.548225.78T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.441.451.46T:aes128gcmv1
1.561.581.59aes256gcmv1
7.307.327.34ascon128av12
10.9510.9911.03ascon128v12
10.9611.0111.04ascon80pqv12
14.0614.1014.13ascon128abi32v12
15.4915.5515.58T:xoodyakround3
17.8717.9317.96T:schwaemm256128v2
20.9220.9520.98ascon128bi32v12
22.8322.8722.91T:schwaemm256256v2
23.5823.7424.76T:schwaemm192192v2
25.3525.3825.41T:grain128aeadv2
25.6725.7225.78T:schwaemm128128v2
38.4738.4838.50romulusn
40.2940.4640.52T:isapa128av20
41.4941.5541.59T:giftcofb128v1
41.8741.9842.12T:isapa128v20
60.7360.8861.02T:tinyjambu128v2
61.9361.9662.02romulusm
69.5869.6769.87T:isapk128av20
76.5576.5776.58T:tinyjambu192v2
80.0780.1080.23T:tinyjambu256v2
92.3592.6492.87T:isapk128v20
125.01125.07125.36romulust
177.06177.23177.31T:elephant200v2
186.47?198.85?207.47?T:isapxv20
7523.657524.337525.12T:elephant176v2
8225.278225.698226.14T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.441.451.45T:aes128gcmv1
1.571.581.59aes256gcmv1
7.327.347.36ascon128av12
10.9611.0011.02ascon128v12
10.9711.0111.04ascon80pqv12
14.0614.1214.14ascon128abi32v12
15.5115.5915.63T:xoodyakround3
17.8617.9117.96T:schwaemm256128v2
20.5020.5520.63T:isapa128v20
20.9320.9520.98ascon128bi32v12
22.8422.8722.93T:schwaemm256256v2
23.5323.6424.50T:schwaemm192192v2
25.3625.3825.39T:grain128aeadv2
25.6825.7825.82T:schwaemm128128v2
27.2427.3027.38T:isapa128av20
38.4638.4938.51romulusn
41.5241.5741.60T:giftcofb128v1
42.5942.6542.90romulust
46.1746.2846.45T:isapk128av20
57.5057.8958.24T:isapk128v20
60.7560.9561.11T:tinyjambu128v2
61.9262.0062.04romulusm
76.5476.5776.58T:tinyjambu192v2
80.0280.2080.29T:tinyjambu256v2
112.76114.85114.99T:isapxv20
177.05177.19177.44T:elephant200v2
7523.187524.077524.69T:elephant176v2
8225.038225.538226.52T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.880.900.90T:aes128gcmv1
1.011.021.02aes256gcmv1
7.437.467.47ascon128av12
10.8510.8710.90ascon128v12
10.9110.9310.96ascon80pqv12
11.8011.8211.88T:xoodyakround3
13.9213.9513.98ascon128abi32v12
17.7217.7617.83T:schwaemm256128v2
20.8021.0521.07ascon128bi32v12
22.7222.7422.80T:schwaemm256256v2
23.5523.8624.28T:schwaemm192192v2
24.8724.8924.99T:grain128aeadv2
25.5725.6025.64T:schwaemm128128v2
31.0031.0231.03romulusn
30.9931.0531.11T:isapa128v20
33.8633.9333.97T:isapa128av20
41.4041.4341.47T:giftcofb128v1
42.7442.8142.87romulusm
49.5149.6049.74T:tinyjambu128v2
57.9758.0558.20T:isapk128av20
59.6059.6159.61T:tinyjambu192v2
60.5760.6060.64T:tinyjambu256v2
75.3475.4775.63T:isapk128v20
83.7083.7483.78romulust
133.01133.06133.12T:elephant200v2
155.00155.91156.01T:isapxv20
5618.645619.065619.64T:elephant176v2
6168.136168.346168.68T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.900.920.93T:aes128gcmv1
0.960.980.99aes256gcmv1
7.377.397.41ascon128av12
10.9510.9711.01ascon80pqv12
10.9710.9811.02ascon128v12
11.6811.7011.75T:xoodyakround3
13.9313.9513.98ascon128abi32v12
17.7017.7917.84T:schwaemm256128v2
20.7220.8720.98ascon128bi32v12
22.7222.7422.79T:schwaemm256256v2
23.4723.8624.85T:schwaemm192192v2
25.0925.1025.12T:grain128aeadv2
25.5725.6225.66T:schwaemm128128v2
30.9831.0031.02romulusn
30.9931.0431.10T:isapa128v20
33.8433.9033.96T:isapa128av20
41.4441.4741.53T:giftcofb128v1
42.7742.7942.86romulusm
49.6049.7249.77T:tinyjambu128v2
57.9058.0158.15T:isapk128av20
59.6059.6159.64T:tinyjambu192v2
60.6360.6660.70T:tinyjambu256v2
75.2875.4675.76T:isapk128v20
83.7383.7984.02romulust
132.98133.01133.11T:elephant200v2
150.19155.99160.68T:isapxv20
5618.255618.955619.65T:elephant176v2
6168.056168.256168.72T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.920.920.92T:aes128gcmv1
0.980.990.99aes256gcmv1
7.367.407.41ascon128av12
10.9710.9810.99ascon128v12
10.9610.9911.04ascon80pqv12
11.6811.7211.74T:xoodyakround3
13.9313.9513.98ascon128abi32v12
17.6917.7417.78T:schwaemm256128v2
20.3020.3420.39T:isapa128v20
20.7220.9620.99ascon128bi32v12
22.7322.7622.81T:schwaemm256256v2
23.4723.8024.86T:schwaemm192192v2
25.0925.1025.12T:grain128aeadv2
25.5725.6225.67T:schwaemm128128v2
27.2127.2527.29T:isapa128av20
30.9931.0131.03romulusn
41.4341.4941.51T:giftcofb128v1
42.4842.5342.80romulust
42.7542.7842.83romulusm
46.2246.3346.45T:isapk128av20
49.6049.7049.76T:tinyjambu128v2
57.9858.0958.20T:isapk128v20
59.5959.6059.63T:tinyjambu192v2
60.6560.6760.71T:tinyjambu256v2
113.46114.41114.46T:isapxv20
132.96133.01133.08T:elephant200v2
5618.365619.175619.70T:elephant176v2
6168.036168.356168.76T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.370.390.41T:aes128gcmv1
0.380.400.40aes256gcmv1
7.427.447.46ascon128av12
7.927.967.99T:xoodyakround3
10.8710.8910.92ascon128v12
10.9110.9410.97ascon80pqv12
13.8013.8213.83ascon128abi32v12
17.5517.6217.71T:schwaemm256128v2
20.0020.0620.14T:isapa128v20
20.5221.0021.02ascon128bi32v12
22.5922.6322.69T:schwaemm256256v2
23.5023.5223.55romulusn
23.5023.5423.70romulusm
23.3124.0824.56T:schwaemm192192v2
24.7724.8024.90T:grain128aeadv2
25.3625.4625.50T:schwaemm128128v2
27.2827.3127.34T:isapa128av20
38.5338.5938.63T:tinyjambu128v2
41.1041.1441.19T:tinyjambu256v2
41.3541.3941.41T:giftcofb128v1
42.3242.3642.41romulust
42.6442.6542.66T:tinyjambu192v2
46.1046.2446.34T:isapk128av20
57.9858.3458.56T:isapk128v20
90.4490.5390.59T:elephant200v2
113.90113.97114.03T:isapxv20
3715.873716.213716.95T:elephant176v2
4112.254113.194113.52T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.370.390.40aes256gcmv1
0.380.400.41T:aes128gcmv1
7.427.457.46ascon128av12
7.927.968.00T:xoodyakround3
10.9510.9711.01ascon128v12
10.9711.0011.03ascon80pqv12
13.7813.8213.85ascon128abi32v12
17.5517.6317.67T:schwaemm256128v2
20.0720.1320.19T:isapa128v20
20.4720.6321.01ascon128bi32v12
22.5722.6422.70T:schwaemm256256v2
23.4923.5123.54romulusn
23.5023.5823.66romulusm
23.3224.1425.08T:schwaemm192192v2
24.7824.7924.81T:grain128aeadv2
25.3825.4125.51T:schwaemm128128v2
27.2127.2827.32T:isapa128av20
38.5238.5838.62T:tinyjambu128v2
41.0841.1341.17T:tinyjambu256v2
41.3141.3941.46T:giftcofb128v1
42.3742.4342.69romulust
42.6342.6442.65T:tinyjambu192v2
46.1346.2946.40T:isapk128av20
58.0358.3158.64T:isapk128v20
90.4890.5590.60T:elephant200v2
113.94114.02114.10T:isapxv20
3715.653716.073716.80T:elephant176v2
4112.474113.274113.87T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.390.400.40aes256gcmv1
0.400.400.41T:aes128gcmv1
7.427.447.46ascon128av12
7.917.947.99T:xoodyakround3
10.9710.9911.02ascon80pqv12
10.9811.0011.03ascon128v12
13.7913.8313.85ascon128abi32v12
17.5617.6217.67T:schwaemm256128v2
20.0320.1320.20T:isapa128v20
20.4720.5120.91ascon128bi32v12
22.5822.6422.70T:schwaemm256256v2
23.4823.5023.53romulusn
23.4923.5223.64romulusm
23.2824.1725.11T:schwaemm192192v2
24.7824.8024.81T:grain128aeadv2
25.4025.4525.53T:schwaemm128128v2
27.2627.3027.35T:isapa128av20
38.5338.5738.61T:tinyjambu128v2
41.1041.1241.15T:tinyjambu256v2
41.3741.4241.47T:giftcofb128v1
42.3542.4342.65romulust
42.6242.6342.65T:tinyjambu192v2
46.0746.2046.37T:isapk128av20
57.9958.1958.45T:isapk128v20
90.4590.5290.63T:elephant200v2
113.89113.99114.08T:isapxv20
3715.663716.293716.69T:elephant176v2
4112.774113.274114.96T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.061.061.06T:aes128gcmv1
1.191.191.20aes256gcmv1
7.627.647.66ascon128av12
11.0411.0511.09ascon128v12
11.1311.1411.17ascon80pqv12
12.0012.0312.05T:xoodyakround3
14.2514.2814.30ascon128abi32v12
18.3218.3418.37T:schwaemm256128v2
21.3421.3721.37ascon128bi32v12
23.3423.3723.42T:schwaemm256256v2
24.1224.3924.82T:schwaemm192192v2
25.2725.2925.38T:grain128aeadv2
25.9125.9426.02T:schwaemm128128v2
31.3231.3331.34romulusn
36.3036.3636.41T:isapa128av20
41.8141.8241.84T:giftcofb128v1
43.0943.1443.17romulusm
45.7345.7645.78T:isapa128v20
49.9149.9850.06T:tinyjambu128v2
60.0460.0560.05T:tinyjambu192v2
61.0761.1061.13T:tinyjambu256v2
64.9665.0565.20T:isapk128av20
85.0285.0385.05romulust
130.74130.80131.05T:isapk128v20
135.87135.93136.01T:elephant200v2
250.47251.24251.30T:isapxv20
5661.525661.965662.45T:elephant176v2
6237.686237.866238.27T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.081.081.08T:aes128gcmv1
1.161.161.17aes256gcmv1
7.577.597.60ascon128av12
11.1411.1611.20ascon80pqv12
11.1611.1911.22ascon128v12
11.8211.8511.87T:xoodyakround3
14.2514.2714.29ascon128abi32v12
18.2918.3118.35T:schwaemm256128v2
21.0421.2521.28ascon128bi32v12
23.3523.3723.42T:schwaemm256256v2
24.0524.4125.37T:schwaemm192192v2
25.4925.5125.52T:grain128aeadv2
25.9325.9626.00T:schwaemm128128v2
31.3231.3431.35romulusn
36.2636.2836.36T:isapa128av20
41.8741.9041.94T:giftcofb128v1
43.1843.2343.29romulusm
45.7145.7645.78T:isapa128v20
50.0150.1050.17T:tinyjambu128v2
60.0260.0460.06T:tinyjambu192v2
61.0761.1361.18T:tinyjambu256v2
65.0665.1265.23T:isapk128av20
85.0385.0685.26romulust
130.84131.06131.34T:isapk128v20
135.81135.86135.92T:elephant200v2
251.26251.52257.56T:isapxv20
5661.295661.895662.43T:elephant176v2
6237.516237.656238.39T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.081.081.08T:aes128gcmv1
1.161.161.16aes256gcmv1
7.577.587.62ascon128av12
11.1311.1511.22ascon80pqv12
11.1611.1711.19ascon128v12
11.8711.8911.91T:xoodyakround3
14.2514.2714.28ascon128abi32v12
18.2818.3318.34T:schwaemm256128v2
21.0421.0621.25ascon128bi32v12
23.3623.3823.41T:schwaemm256256v2
24.1024.4325.38T:schwaemm192192v2
25.4925.5025.52T:grain128aeadv2
25.9425.9726.04T:schwaemm128128v2
27.9127.9527.99T:isapa128v20
28.6628.6928.71T:isapa128av20
31.3331.3531.37romulusn
41.8641.8841.91T:giftcofb128v1
43.1743.2143.27romulusm
43.7743.7944.02romulust
50.0350.1450.18T:tinyjambu128v2
50.3650.4350.54T:isapk128av20
60.0260.0360.05T:tinyjambu192v2
61.1061.1461.16T:tinyjambu256v2
86.4786.5586.74T:isapk128v20
135.84135.90135.97T:elephant200v2
162.24163.19163.23T:isapxv20
5661.255661.975662.48T:elephant176v2
6237.456238.016238.23T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.636.676.70T:aes128gcmv1
7.397.427.46aes256gcmv1
11.9812.1212.69ascon128av12
15.1315.2715.60ascon80pqv12
15.1615.4215.80ascon128v12
17.5617.7317.88T:xoodyakround3
21.3321.4021.80ascon128abi32v12
28.1628.3728.58ascon128bi32v12
29.8529.9030.05T:schwaemm256128v2
33.4333.6733.84T:schwaemm128128v2
34.5034.5734.71T:grain128aeadv2
37.2937.4537.58T:schwaemm256256v2
38.6538.7338.99romulusn
39.1939.3840.16T:schwaemm192192v2
50.7650.9551.09T:giftcofb128v1
51.0951.2751.48romulusm
58.7258.9159.09T:tinyjambu128v2
70.1170.1370.16T:tinyjambu192v2
71.6872.0072.16T:tinyjambu256v2
93.4593.6593.96T:isapa128av20
114.49114.73115.09romulust
192.41192.92193.55T:elephant200v2
210.14210.77213.18T:isapk128av20
382.30382.98383.47T:isapa128v20
1383.881385.611386.67T:isapk128v20
2415.402415.982416.33T:isapxv20
7049.127051.807054.89T:elephant176v2
8354.588355.478357.67T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.326.376.48T:aes128gcmv1
7.087.117.19aes256gcmv1
12.0012.3312.71ascon128av12
15.0915.2115.34ascon80pqv12
15.1315.2715.92ascon128v12
17.5317.8018.02T:xoodyakround3
21.3121.5122.09ascon128abi32v12
28.0728.3028.44ascon128bi32v12
29.7029.9130.38T:schwaemm256128v2
33.1833.5234.05T:schwaemm128128v2
34.7634.8334.92T:grain128aeadv2
37.3937.4937.62T:schwaemm256256v2
38.9038.9539.11romulusn
38.8239.5540.78T:schwaemm192192v2
50.9551.1251.43T:giftcofb128v1
53.0753.1653.33romulusm
59.0959.3859.58T:tinyjambu128v2
70.1370.2070.26T:tinyjambu192v2
71.7371.8872.12T:tinyjambu256v2
93.2093.4893.80T:isapa128av20
114.52114.84115.24romulust
192.48192.91193.46T:elephant200v2
210.94211.71212.77T:isapk128av20
382.64383.29384.07T:isapa128v20
1383.911385.701387.48T:isapk128v20
2416.412417.712590.20T:isapxv20
7050.337053.017054.66T:elephant176v2
8354.758356.148359.65T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.346.386.42T:aes128gcmv1
7.037.117.12aes256gcmv1
11.7611.8211.99ascon128av12
15.0015.0715.12ascon80pqv12
15.1015.1715.27ascon128v12
17.5917.6718.05T:xoodyakround3
21.2721.4221.66ascon128abi32v12
28.0628.2528.35ascon128bi32v12
29.7730.0230.22T:schwaemm256128v2
33.2733.5733.92T:schwaemm128128v2
34.7234.8034.87T:grain128aeadv2
37.3437.4137.59T:schwaemm256256v2
38.8438.8938.92romulusn
38.9539.3140.57T:schwaemm192192v2
51.1051.2151.45T:giftcofb128v1
53.1153.1953.35romulusm
59.0559.1659.38T:tinyjambu128v2
60.3460.5160.95T:isapa128av20
70.1270.1670.20T:tinyjambu192v2
71.7471.8072.05T:tinyjambu256v2
71.9672.1072.47romulust
132.02132.66133.63T:isapk128av20
192.39192.77193.40T:elephant200v2
201.42201.72202.05T:isapa128v20
723.93725.28727.34T:isapk128v20
1263.221263.901264.20T:isapxv20
7049.787052.997053.38T:elephant176v2
8354.438355.298358.30T:elephant160v2

amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.650.660.68T:aes128gcmv1
0.880.900.93T:aes256gcmv1
1.631.651.66aes256gcmv1
7.717.777.81ascon128av12
10.8710.9010.93ascon80pqv12
10.9410.9711.00ascon128v12
14.3014.3314.35ascon128abi32v12
16.7216.7716.80T:xoodyakround3
18.7119.3619.45T:schwaemm256128v2
21.3221.3521.39T:schwaemm256256v2
21.3321.3721.41ascon128bi32v12
25.0325.1625.32T:grain128aeadv2
25.0425.2325.40T:schwaemm192192v2
27.3727.4127.48T:schwaemm128128v2
38.5838.6138.65romulusn
41.1241.1641.20T:giftcofb128v1
41.2441.3041.33T:isapa128av20
45.4845.6045.67T:isapa128v20
60.1660.2560.30T:tinyjambu128v2
61.9161.9662.58romulusm
68.8868.9569.30T:isapk128av20
72.3772.4372.47T:tinyjambu192v2
78.3478.7479.01T:tinyjambu256v2
91.4591.5591.77T:isapk128v20
126.19126.28126.31romulust
142.36142.52142.62T:elephant200v2
176.86?178.55?200.46?T:isapxv20
7512.867513.727515.37T:elephant176v2
8187.008189.388190.75T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.620.640.67T:aes128gcmv1
0.840.900.92T:aes256gcmv1
1.581.591.60aes256gcmv1
7.417.437.48ascon128av12
10.8410.8810.93ascon128v12
10.9410.9810.99ascon80pqv12
14.1514.1814.23ascon128abi32v12
16.2916.3216.34T:xoodyakround3
18.6919.3819.45T:schwaemm256128v2
21.2821.3421.38T:schwaemm256256v2
21.3921.4321.45ascon128bi32v12
25.0325.2725.33T:schwaemm192192v2
25.6025.6125.62T:grain128aeadv2
27.2827.3427.38T:schwaemm128128v2
38.4638.4838.52romulusn
41.1941.2541.29T:giftcofb128v1
41.2341.2841.42T:isapa128av20
45.5445.6445.74T:isapa128v20
60.2260.2860.34T:tinyjambu128v2
61.8861.9662.69romulusm
68.8568.9769.11T:isapk128av20
72.4472.4872.58T:tinyjambu192v2
78.5978.6578.82T:tinyjambu256v2
91.4591.5291.66T:isapk128v20
126.20126.30126.38romulust
142.31142.42142.53T:elephant200v2
178.33178.47178.57T:isapxv20
7509.457514.367515.17T:elephant176v2
8184.398187.028189.27T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.600.640.66T:aes128gcmv1
0.82?0.88?0.94?T:aes256gcmv1
1.581.591.59aes256gcmv1
7.397.437.45ascon128av12
10.8510.9011.01ascon128v12
10.9510.9710.99ascon80pqv12
14.1414.1714.23ascon128abi32v12
16.3216.3516.38T:xoodyakround3
18.5819.3619.43T:schwaemm256128v2
21.3221.3421.38T:schwaemm256256v2
21.4021.4521.47ascon128bi32v12
22.6522.7322.77T:isapa128v20
25.1025.1725.28T:schwaemm192192v2
25.5825.5925.62T:grain128aeadv2
27.0927.1327.20T:isapa128av20
27.2827.3427.38T:schwaemm128128v2
38.4638.4838.50romulusn
41.2141.2641.29T:giftcofb128v1
44.0344.0644.13romulust
46.0146.0946.19T:isapk128av20
57.3157.4257.47T:isapk128v20
60.2760.3260.37T:tinyjambu128v2
61.8761.9662.70romulusm
72.4272.5272.55T:tinyjambu192v2
78.6078.6278.81T:tinyjambu256v2
106.80106.96107.04T:isapxv20
142.32142.38142.51T:elephant200v2
7512.277514.697516.12T:elephant176v2
8187.378189.118190.06T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.480.520.53T:aes128gcmv1
0.600.620.66T:aes256gcmv1
1.031.031.04aes256gcmv1
7.487.527.54ascon128av12
10.9210.9310.98ascon80pqv12
10.9711.0111.02ascon128v12
12.7212.7412.77T:xoodyakround3
14.3014.3314.35ascon128abi32v12
19.2219.2719.31T:schwaemm256128v2
21.2221.2421.25T:schwaemm256256v2
21.3421.3621.37ascon128bi32v12
25.0625.1625.26T:grain128aeadv2
25.0825.1625.24T:schwaemm192192v2
26.8727.1827.24T:schwaemm128128v2
30.9731.0431.07romulusn
34.1834.2434.29T:isapa128av20
34.2234.2534.32T:isapa128v20
41.3541.3941.41T:giftcofb128v1
42.6842.7743.39romulusm
49.3349.3549.40T:tinyjambu128v2
56.7156.7556.80T:tinyjambu192v2
57.3757.4357.48T:isapk128av20
59.6159.7059.87T:tinyjambu256v2
74.3074.3674.45T:isapk128v20
85.0485.0985.12romulust
107.44107.51107.60T:elephant200v2
140.67142.78153.68T:isapxv20
5610.465610.985612.01T:elephant176v2
6139.166141.826143.12T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.470.490.50T:aes128gcmv1
0.57?0.61?0.64?T:aes256gcmv1
0.991.001.01aes256gcmv1
7.307.317.33ascon128av12
10.9210.9310.96ascon128v12
10.9610.9810.99ascon80pqv12
12.5012.5212.57T:xoodyakround3
14.3114.3314.35ascon128abi32v12
19.2319.2919.34T:schwaemm256128v2
21.2321.2621.26T:schwaemm256256v2
21.4221.4521.48ascon128bi32v12
25.0625.1125.15T:schwaemm192192v2
25.3225.3425.36T:grain128aeadv2
26.8727.2027.22T:schwaemm128128v2
30.9631.0031.02romulusn
34.2234.2534.30T:isapa128av20
34.1934.2634.34T:isapa128v20
41.4141.4541.49T:giftcofb128v1
42.6942.7443.49romulusm
49.3749.4149.47T:tinyjambu128v2
56.7656.8356.87T:tinyjambu192v2
57.3757.4257.48T:isapk128av20
59.5959.6359.65T:tinyjambu256v2
74.2474.3174.34T:isapk128v20
85.0185.0585.09romulust
107.49107.53107.61T:elephant200v2
141.65142.76142.82T:isapxv20
5610.395611.095612.12T:elephant176v2
6138.376140.776142.93T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.470.490.52T:aes128gcmv1
0.580.590.64T:aes256gcmv1
1.001.001.01aes256gcmv1
7.307.337.39ascon128av12
10.9210.9510.96ascon128v12
10.9510.9811.00ascon80pqv12
12.5112.5312.56T:xoodyakround3
14.2914.3214.33ascon128abi32v12
19.2719.3019.35T:schwaemm256128v2
21.2321.2521.26T:schwaemm256256v2
21.4021.4521.47ascon128bi32v12
22.7722.8322.86T:isapa128v20
25.0525.1125.15T:schwaemm192192v2
25.3225.3625.38T:grain128aeadv2
26.9027.1727.20T:schwaemm128128v2
27.1527.2227.26T:isapa128av20
30.9730.9931.02romulusn
41.4241.4541.48T:giftcofb128v1
42.6942.7443.46romulusm
43.9343.9844.03romulust
45.9445.9746.07T:isapk128av20
49.3549.3849.43T:tinyjambu128v2
56.7956.8456.86T:tinyjambu192v2
57.2157.2657.29T:isapk128v20
59.5959.6459.66T:tinyjambu256v2
106.07106.96107.03T:isapxv20
107.45107.54107.65T:elephant200v2
5608.515611.035611.61T:elephant176v2
6139.036141.506143.03T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.30?0.32?0.37?T:aes256gcmv1
0.31?0.34?0.39?T:aes128gcmv1
0.410.430.43aes256gcmv1
7.237.267.28ascon128av12
8.778.798.83T:xoodyakround3
10.9410.9811.04ascon80pqv12
10.9610.9911.02ascon128v12
14.2614.2914.32ascon128abi32v12
18.3619.1419.24T:schwaemm256128v2
21.0821.1121.16T:schwaemm256256v2
21.2721.3221.35ascon128bi32v12
22.7422.8522.91T:isapa128v20
23.4923.5223.56romulusn
23.5023.5924.22romulusm
24.8224.9425.05T:schwaemm192192v2
25.0325.0425.17T:grain128aeadv2
26.9327.0027.05T:schwaemm128128v2
27.0927.1627.20T:isapa128av20
38.4438.5138.52T:tinyjambu128v2
40.6240.6540.72T:tinyjambu256v2
41.1041.1541.18T:tinyjambu192v2
41.5841.6441.67T:giftcofb128v1
43.8643.9043.97romulust
45.7945.8746.06T:isapk128av20
57.0057.1057.22T:isapk128v20
72.2172.2572.35T:elephant200v2
106.71106.95107.13T:isapxv20
3706.143708.233709.74T:elephant176v2
4074.804093.254094.30T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.310.320.33T:aes256gcmv1
0.310.320.33T:aes128gcmv1
0.410.420.43aes256gcmv1
7.297.337.36ascon128av12
8.778.808.85T:xoodyakround3
10.9410.9711.01ascon80pqv12
10.9811.0011.02ascon128v12
14.4214.4414.48ascon128abi32v12
18.3719.0919.19T:schwaemm256128v2
21.0921.1321.17T:schwaemm256256v2
21.4021.4321.45ascon128bi32v12
22.7422.8922.97T:isapa128v20
23.4823.5023.54romulusn
23.4823.5724.30romulusm
24.7724.9925.06T:schwaemm192192v2
25.0225.0525.07T:grain128aeadv2
26.9827.0027.03T:schwaemm128128v2
27.0927.1427.19T:isapa128av20
38.4538.4938.53T:tinyjambu128v2
40.6040.6240.70T:tinyjambu256v2
41.0941.1341.15T:tinyjambu192v2
41.5641.6441.68T:giftcofb128v1
43.8743.9344.00romulust
45.7845.8445.93T:isapk128av20
56.9957.1257.29T:isapk128v20
72.2072.2672.30T:elephant200v2
106.80106.90107.02T:isapxv20
3706.283707.743709.28T:elephant176v2
4091.964093.344094.10T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.29?0.32?0.33?T:aes256gcmv1
0.31?0.32?0.40?T:aes128gcmv1
0.420.420.43aes256gcmv1
7.297.337.36ascon128av12
8.798.828.84T:xoodyakround3
10.9710.9911.01ascon80pqv12
10.9711.0011.01ascon128v12
14.4314.4514.49ascon128abi32v12
18.3519.1319.19T:schwaemm256128v2
21.1121.1421.15T:schwaemm256256v2
21.4221.4421.46ascon128bi32v12
22.7922.9223.04T:isapa128v20
23.4823.5123.53romulusn
23.4823.5424.31romulusm
24.7324.9225.02T:schwaemm192192v2
25.0325.0525.06T:grain128aeadv2
26.9727.0227.07T:schwaemm128128v2
27.0927.1227.22T:isapa128av20
38.4638.4938.52T:tinyjambu128v2
40.6140.6740.72T:tinyjambu256v2
41.1141.1641.20T:tinyjambu192v2
41.6041.6341.69T:giftcofb128v1
43.8643.9343.98romulust
45.7645.8745.95T:isapk128av20
57.0657.1157.17T:isapk128v20
72.2172.3072.41T:elephant200v2
106.87106.99107.09T:isapxv20
3706.193708.103709.33T:elephant176v2
4092.234094.144095.19T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.991.001.00T:aes128gcmv1
1.131.131.13T:aes256gcmv1
1.211.211.22aes256gcmv1
7.677.707.74ascon128av12
11.1211.1311.14ascon80pqv12
11.1611.1711.20ascon128v12
12.8712.8812.91T:xoodyakround3
14.6514.6714.69ascon128abi32v12
19.8219.8619.89T:schwaemm256128v2
21.6821.7121.73ascon128bi32v12
21.8221.8521.86T:schwaemm256256v2
25.4825.5625.69T:grain128aeadv2
25.6725.7225.76T:schwaemm192192v2
27.5827.6427.69T:schwaemm128128v2
31.3631.3831.44romulusn
37.7537.7937.81T:isapa128av20
41.8041.8241.83T:giftcofb128v1
43.1043.1143.69romulusm
49.7349.7649.79T:tinyjambu128v2
49.9650.0050.06T:isapa128v20
57.2057.2357.24T:tinyjambu192v2
60.0760.2660.36T:tinyjambu256v2
64.1764.2064.24T:isapk128av20
86.4386.4686.48romulust
109.83109.88109.96T:elephant200v2
128.48128.50128.60T:isapk128v20
234.61234.82245.06T:isapxv20
5652.865653.545653.85T:elephant176v2
6210.556211.566212.61T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.980.980.99T:aes128gcmv1
1.111.111.12T:aes256gcmv1
1.181.181.19aes256gcmv1
7.507.527.58ascon128av12
11.1111.1311.14ascon128v12
11.1511.1611.18ascon80pqv12
12.6712.6812.69T:xoodyakround3
14.6514.6614.71ascon128abi32v12
19.8519.8819.91T:schwaemm256128v2
21.7721.7921.82ascon128bi32v12
21.8421.8521.87T:schwaemm256256v2
25.6725.7025.77T:schwaemm192192v2
25.7525.7725.78T:grain128aeadv2
27.5627.5927.63T:schwaemm128128v2
31.3431.3631.39romulusn
37.7637.7937.81T:isapa128av20
41.8741.8841.91T:giftcofb128v1
43.1643.1943.89romulusm
49.7849.8049.85T:tinyjambu128v2
49.9950.0250.09T:isapa128v20
57.2257.2457.26T:tinyjambu192v2
60.0760.0960.10T:tinyjambu256v2
64.2364.2664.30T:isapk128av20
86.4186.4586.50romulust
109.84109.87109.92T:elephant200v2
128.49128.50128.55T:isapk128v20
233.62234.74234.80T:isapxv20
5653.285653.465653.96T:elephant176v2
6208.266210.946212.10T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.980.980.98T:aes128gcmv1
1.101.111.11T:aes256gcmv1
1.181.181.19aes256gcmv1
7.517.537.59ascon128av12
11.1111.1211.14ascon128v12
11.1511.1711.18ascon80pqv12
12.6812.6912.71T:xoodyakround3
14.6314.6614.69ascon128abi32v12
19.8519.8819.89T:schwaemm256128v2
21.7621.7821.81ascon128bi32v12
21.8521.8721.88T:schwaemm256256v2
25.6825.7425.80T:schwaemm192192v2
25.7525.7525.77T:grain128aeadv2
27.5527.5927.64T:schwaemm128128v2
29.0929.1129.13T:isapa128av20
30.8130.8530.89T:isapa128v20
31.3431.3731.41romulusn
41.8541.8741.91T:giftcofb128v1
43.1643.1843.89romulusm
45.2345.2645.30romulust
49.7749.8049.84T:tinyjambu128v2
49.8949.9450.20T:isapk128av20
57.2357.2557.28T:tinyjambu192v2
60.0760.0960.12T:tinyjambu256v2
85.0185.0585.09T:isapk128v20
109.86109.90109.99T:elephant200v2
153.96154.05154.11T:isapxv20
5653.435653.755654.44T:elephant176v2
6208.166211.046211.82T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.467.487.50aes256gcmv1
12.1312.3112.60ascon128av12
12.4112.5313.29T:aes128gcmv1
12.8312.8813.09T:aes256gcmv1
15.0215.1215.57ascon128v12
15.0915.2215.44ascon80pqv12
18.6218.9219.12T:xoodyakround3
22.1622.2122.76ascon128abi32v12
29.0229.1229.28ascon128bi32v12
32.3832.4332.77T:schwaemm256128v2
34.7034.7934.98T:schwaemm256256v2
34.8534.9135.05T:grain128aeadv2
35.4835.6336.31T:schwaemm128128v2
38.5238.5538.74romulusn
41.2341.5542.40T:schwaemm192192v2
50.8351.2751.57romulusm
51.3851.4951.83T:giftcofb128v1
58.5058.9859.32T:tinyjambu128v2
67.2667.4367.89T:tinyjambu192v2
70.4270.6271.15T:tinyjambu256v2
117.40117.64118.20romulust
118.58118.84118.99T:isapa128av20
156.95157.21158.21T:elephant200v2
206.17206.60207.20T:isapk128av20
411.61412.81413.37T:isapa128v20
1358.021358.191358.75T:isapk128v20
2323.522325.512337.38T:isapxv20
7035.287036.297037.28T:elephant176v2
8314.868317.458320.73T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
7.127.167.20aes256gcmv1
12.0212.2812.68ascon128av12
12.3212.4112.75T:aes128gcmv1
12.7212.8113.12T:aes256gcmv1
15.0715.2215.56ascon128v12
15.2615.4315.53ascon80pqv12
18.4418.5919.27T:xoodyakround3
22.1622.2122.68ascon128abi32v12
29.2729.3429.41ascon128bi32v12
32.6332.8032.96T:schwaemm256128v2
35.0535.1535.20T:grain128aeadv2
35.1235.1535.29T:schwaemm256256v2
35.2735.5435.92T:schwaemm128128v2
38.8438.9139.08romulusn
41.9042.2743.05T:schwaemm192192v2
51.5851.7851.95T:giftcofb128v1
52.7653.0353.77romulusm
58.7058.8359.09T:tinyjambu128v2
67.3467.4267.73T:tinyjambu192v2
70.4970.6170.77T:tinyjambu256v2
117.34117.43117.98romulust
118.80119.36119.62T:isapa128av20
156.90157.04157.83T:elephant200v2
206.44207.04207.75T:isapk128av20
412.59413.51414.78T:isapa128v20
1358.311358.571358.94T:isapk128v20
2324.562326.202327.32T:isapxv20
7035.377035.987036.20T:elephant176v2
8312.568315.698319.78T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
7.117.127.15aes256gcmv1
11.8812.0512.20ascon128av12
12.3412.4412.61T:aes128gcmv1
12.8412.9013.02T:aes256gcmv1
14.8515.0115.16ascon128v12
15.0515.2015.30ascon80pqv12
18.4118.7418.80T:xoodyakround3
22.2322.3222.42ascon128abi32v12
29.2529.3129.37ascon128bi32v12
32.7032.8232.91T:schwaemm256128v2
34.9535.0835.34T:schwaemm256256v2
35.0535.0835.12T:grain128aeadv2
35.2735.4435.80T:schwaemm128128v2
38.7938.9539.04romulusn
42.0242.2742.72T:schwaemm192192v2
51.5451.6051.81T:giftcofb128v1
52.8153.1053.48romulusm
58.7258.8059.05T:tinyjambu128v2
67.3267.4967.62T:tinyjambu192v2
70.4170.4870.62T:tinyjambu256v2
73.4473.7174.04T:isapa128av20
74.2774.3874.63romulust
129.98130.41130.94T:isapk128av20
156.99157.31157.68T:elephant200v2
214.76215.06215.45T:isapa128v20
711.23711.70712.47T:isapk128v20
1216.451216.981217.25T:isapxv20
7035.027035.497037.04T:elephant176v2
8315.238316.758318.54T:elephant160v2

amd64; Ice Lake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.471.481.49T:aes128gcmv1
1.561.571.58aes256gcmv1
7.887.958.14ascon128av12
11.7211.7912.12ascon128v12
11.7611.8311.90ascon80pqv12
12.1312.1812.25T:xoodyakround3
14.5214.6014.71ascon128abi32v12
17.0017.0517.19T:schwaemm256128v2
20.0420.1820.38T:schwaemm256256v2
20.3220.3620.42T:grain128aeadv2
21.5221.5721.62ascon128bi32v12
22.6322.7322.88T:schwaemm192192v2
24.0224.1524.27T:schwaemm128128v2
27.0027.0627.16T:isapa128av20
32.0932.1032.13T:isapk128av20
37.4337.5237.65romulusn
42.9843.0643.21T:isapa128v20
44.31?44.39?50.52?T:giftcofb128v1
58.2358.4258.65romulusm
70.4470.6071.03T:tinyjambu128v2
86.0886.2486.27T:tinyjambu192v2
90.0690.1990.54T:tinyjambu256v2
97.4898.6498.93T:isapk128v20
116.26116.55116.73romulust
142.56143.19146.66T:isapxv20
178.48178.93180.60T:elephant200v2
7420.947433.267465.64T:elephant176v2
8258.468264.088271.69T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.431.451.46T:aes128gcmv1
1.461.471.48aes256gcmv1
8.008.078.11ascon128av12
11.7411.7911.82ascon128v12
11.8111.8411.87ascon80pqv12
12.0512.1112.21T:xoodyakround3
14.6014.7214.82ascon128abi32v12
17.0517.1017.28T:schwaemm256128v2
19.9420.3120.45T:schwaemm256256v2
20.5020.5320.59T:grain128aeadv2
21.6821.7221.84ascon128bi32v12
22.5622.7322.85T:schwaemm192192v2
24.1124.1624.31T:schwaemm128128v2
32.0732.1132.16T:isapk128av20
34.0534.1134.23T:isapa128av20
37.4037.5537.66romulusn
42.9943.0943.25T:isapa128v20
44.32?44.45?50.23?T:giftcofb128v1
58.4358.5559.22romulusm
70.5070.7170.82T:tinyjambu128v2
85.6485.8286.08T:tinyjambu192v2
90.1790.3190.49T:tinyjambu256v2
97.4898.5098.98T:isapk128v20
115.71116.55117.57romulust
141.96143.47146.70T:isapxv20
179.01179.88180.60T:elephant200v2
7424.177436.477471.02T:elephant176v2
8258.268262.758267.75T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.451.451.46T:aes128gcmv1
1.471.471.48aes256gcmv1
8.038.068.10ascon128av12
11.7411.7711.81ascon128v12
11.6711.8211.87ascon80pqv12
12.0812.1412.44T:xoodyakround3
14.6414.7414.81ascon128abi32v12
17.0817.1417.19T:schwaemm256128v2
20.1220.2920.36T:schwaemm256256v2
20.4820.5120.55T:grain128aeadv2
21.1121.2421.31T:isapa128v20
21.3821.4321.44T:isapk128av20
21.6821.7321.76ascon128bi32v12
22.4022.4922.67T:isapa128av20
22.5422.6322.76T:schwaemm192192v2
24.0624.1324.22T:schwaemm128128v2
37.4037.5537.66romulusn
39.6239.8339.95romulust
44.3344.3945.78T:giftcofb128v1
58.4858.6359.05romulusm
63.8164.3564.89T:isapk128v20
70.4570.6070.74T:tinyjambu128v2
85.3585.6986.86T:isapxv20
85.8085.9786.10T:tinyjambu192v2
90.1290.2090.35T:tinyjambu256v2
177.83179.02180.14T:elephant200v2
7418.977428.787455.27T:elephant176v2
8261.358264.648267.99T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.870.880.89T:aes128gcmv1
0.910.930.93aes256gcmv1
7.958.028.09ascon128av12
9.309.349.46T:xoodyakround3
11.7111.8212.00ascon80pqv12
11.7711.9512.08ascon128v12
14.3914.4314.45ascon128abi32v12
16.8316.9316.99T:schwaemm256128v2
19.9220.2520.43T:schwaemm256256v2
20.4120.4520.52T:grain128aeadv2
21.4921.5521.58ascon128bi32v12
22.4522.5122.66T:schwaemm192192v2
23.8623.9023.94T:schwaemm128128v2
24.9725.0125.05T:isapa128av20
26.7426.7526.79T:isapk128av20
29.0229.0729.16romulusn
32.0832.1532.24T:isapa128v20
39.4339.7039.86romulusm
44.3144.3644.42T:giftcofb128v1
57.6657.7557.88T:tinyjambu128v2
67.0767.2267.35T:tinyjambu192v2
68.0068.1168.23T:tinyjambu256v2
76.3777.1678.32T:isapk128v20
77.9178.3078.64romulust
112.54113.78115.27T:isapxv20
133.35133.61134.33T:elephant200v2
5541.525552.175573.16T:elephant176v2
6208.106224.716278.71T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.850.870.89T:aes128gcmv1
0.850.910.92aes256gcmv1
8.018.058.08ascon128av12
9.259.339.45T:xoodyakround3
11.7211.7611.94ascon128v12
11.7111.7811.92ascon80pqv12
14.4314.5014.52ascon128abi32v12
16.9016.9717.04T:schwaemm256128v2
19.9720.2320.35T:schwaemm256256v2
20.4920.5220.56T:grain128aeadv2
21.5621.6521.71ascon128bi32v12
22.4522.5022.63T:schwaemm192192v2
23.8023.9124.24T:schwaemm128128v2
26.7526.7626.84T:isapk128av20
28.4328.4828.51T:isapa128av20
29.0229.0729.11romulusn
32.1332.1732.23T:isapa128v20
39.5239.7539.86romulusm
44.3044.3344.43T:giftcofb128v1
57.6957.8357.92T:tinyjambu128v2
67.0367.3167.45T:tinyjambu192v2
68.0568.1768.29T:tinyjambu256v2
76.3376.8477.26T:isapk128v20
78.2478.4178.74romulust
112.61114.33114.61T:isapxv20
133.21133.94134.46T:elephant200v2
5548.025558.375580.34T:elephant176v2
6210.256217.646233.37T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.860.870.88T:aes128gcmv1
0.880.910.91aes256gcmv1
8.008.038.05ascon128av12
9.249.289.46T:xoodyakround3
11.7211.7611.84ascon80pqv12
11.7011.7711.93ascon128v12
14.4614.5114.55ascon128abi32v12
16.8916.9717.08T:schwaemm256128v2
19.9420.1320.46T:schwaemm256256v2
20.4920.5220.55T:grain128aeadv2
21.1921.2421.29T:isapa128v20
21.3921.4121.44T:isapk128av20
21.6021.6821.82ascon128bi32v12
22.3922.5422.73T:schwaemm192192v2
22.6122.6622.69T:isapa128av20
23.8123.9024.03T:schwaemm128128v2
29.0429.0729.19romulusn
39.5139.7639.98romulusm
39.6740.0540.31romulust
44.3144.3444.37T:giftcofb128v1
57.7657.8457.96T:tinyjambu128v2
59.4559.7560.29T:isapk128v20
67.0267.1967.32T:tinyjambu192v2
68.0668.1368.27T:tinyjambu256v2
84.5485.0085.50T:isapxv20
132.84133.68134.34T:elephant200v2
5546.515557.515583.07T:elephant176v2
6208.946216.306232.84T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.25?0.27?0.29?aes256gcmv1
0.26?0.29?0.30?T:aes128gcmv1
6.346.406.45T:xoodyakround3
7.988.028.06ascon128av12
11.5511.6411.73ascon80pqv12
11.6511.6911.95ascon128v12
14.3714.4614.52ascon128abi32v12
16.6616.7616.85T:schwaemm256128v2
19.8420.0120.26T:schwaemm256256v2
20.4420.4820.52T:grain128aeadv2
20.7020.8020.94romulusn
20.8220.9421.06romulusm
21.1321.2221.31T:isapa128v20
21.3821.4121.46T:isapk128av20
21.4421.5021.59ascon128bi32v12
22.0422.1422.20T:schwaemm192192v2
22.8522.9223.16T:isapa128av20
23.6323.7623.85T:schwaemm128128v2
38.9139.2039.62romulust
44.2944.3244.40T:giftcofb128v1
44.9445.0345.06T:tinyjambu128v2
45.7745.8145.90T:tinyjambu256v2
48.2648.3848.42T:tinyjambu192v2
55.1055.4856.31T:isapk128v20
84.2384.9085.51T:isapxv20
88.9189.2489.66T:elephant200v2
3668.403676.163695.98T:elephant176v2
4126.844129.544132.91T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.24?0.27?0.29?aes256gcmv1
0.25?0.27?0.29?T:aes128gcmv1
6.366.416.43T:xoodyakround3
7.978.008.07ascon128av12
11.5911.6611.69ascon128v12
11.6312.0012.10ascon80pqv12
14.2914.4214.55ascon128abi32v12
16.7016.7816.87T:schwaemm256128v2
19.9220.1020.37T:schwaemm256256v2
20.4520.4820.52T:grain128aeadv2
20.7020.8020.88romulusn
20.7120.8720.94romulusm
21.1921.2621.31T:isapa128v20
21.3821.4221.43T:isapk128av20
21.4221.4921.52ascon128bi32v12
22.0622.1122.23T:schwaemm192192v2
22.8322.9122.96T:isapa128av20
23.6223.7223.91T:schwaemm128128v2
39.0039.2239.48romulust
44.2544.2844.33T:giftcofb128v1
44.8544.9144.97T:tinyjambu128v2
45.7745.8445.88T:tinyjambu256v2
48.1748.2948.41T:tinyjambu192v2
55.0555.3156.28T:isapk128v20
84.3384.6185.67T:isapxv20
89.0689.6490.04T:elephant200v2
3671.823679.593689.35T:elephant176v2
4126.294129.064132.01T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.270.280.29aes256gcmv1
0.270.280.29T:aes128gcmv1
6.376.416.45T:xoodyakround3
7.978.018.03ascon128av12
11.5511.6611.98ascon80pqv12
11.6411.6611.72ascon128v12
14.3214.4314.51ascon128abi32v12
16.7416.8516.94T:schwaemm256128v2
19.8620.0020.21T:schwaemm256256v2
20.4520.4920.54T:grain128aeadv2
20.7320.8120.99romulusn
20.7420.9120.98romulusm
21.1721.2121.28T:isapa128v20
21.3921.4221.46T:isapk128av20
21.4321.4921.56ascon128bi32v12
22.1122.2222.30T:schwaemm192192v2
22.8222.8923.14T:isapa128av20
23.6123.6823.80T:schwaemm128128v2
39.1939.3639.58romulust
44.2644.3044.36T:giftcofb128v1
44.8344.9845.19T:tinyjambu128v2
45.7845.8345.94T:tinyjambu256v2
48.3148.4048.45T:tinyjambu192v2
55.0855.5655.87T:isapk128v20
84.1584.5785.26T:isapxv20
89.0189.6390.41T:elephant200v2
3665.913676.423691.77T:elephant176v2
4126.234129.354131.58T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.001.001.01T:aes128gcmv1
1.071.071.08aes256gcmv1
8.168.178.27ascon128av12
9.379.429.50T:xoodyakround3
11.9712.0312.23ascon128v12
11.9712.0612.29ascon80pqv12
14.7014.7114.74ascon128abi32v12
17.4017.4317.52T:schwaemm256128v2
20.5020.6020.80T:schwaemm256256v2
20.7420.7520.78T:grain128aeadv2
21.8421.8821.94ascon128bi32v12
22.9323.0023.13T:schwaemm192192v2
24.1024.1924.23T:schwaemm128128v2
27.0427.0727.10T:isapa128av20
29.3329.3529.48romulusn
29.8129.8229.83T:isapk128av20
39.7339.8239.89romulusm
44.7444.7744.80T:giftcofb128v1
46.7746.8446.97T:isapa128v20
58.1058.1758.28T:tinyjambu128v2
67.7267.7667.88T:tinyjambu192v2
68.4168.4468.64T:tinyjambu256v2
78.6478.8879.25romulust
127.50127.73127.98T:isapk128v20
136.28136.81137.64T:elephant200v2
188.16188.81189.93T:isapxv20
5590.415604.115615.65T:elephant176v2
6266.016268.426273.09T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.990.991.01T:aes128gcmv1
1.021.031.06aes256gcmv1
8.228.238.31ascon128av12
9.369.449.67T:xoodyakround3
11.9812.0112.13ascon128v12
12.0012.0112.05ascon80pqv12
14.8214.8714.96ascon128abi32v12
17.3417.4217.47T:schwaemm256128v2
20.4320.5720.90T:schwaemm256256v2
20.8520.8620.90T:grain128aeadv2
21.9121.9322.05ascon128bi32v12
22.9422.9823.11T:schwaemm192192v2
24.2324.2924.33T:schwaemm128128v2
29.2929.3429.38romulusn
29.8129.8129.83T:isapk128av20
30.4430.4630.54T:isapa128av20
39.8539.9440.10romulusm
44.7744.8044.83T:giftcofb128v1
46.7946.8547.04T:isapa128v20
58.1358.2058.32T:tinyjambu128v2
67.7067.7867.83T:tinyjambu192v2
68.4668.5068.56T:tinyjambu256v2
78.8779.1079.18romulust
127.38127.74128.03T:isapk128v20
135.95136.77137.63T:elephant200v2
187.84187.91188.48T:isapxv20
5593.735596.895601.92T:elephant176v2
6265.446268.926270.41T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.990.991.00T:aes128gcmv1
1.021.021.06aes256gcmv1
8.228.238.25ascon128av12
9.369.399.45T:xoodyakround3
11.9812.0212.06ascon80pqv12
12.0012.1312.22ascon128v12
14.8114.8314.91ascon128abi32v12
17.4017.4417.58T:schwaemm256128v2
20.5320.6220.79T:schwaemm256256v2
20.8220.8520.86T:grain128aeadv2
21.8721.8921.93ascon128bi32v12
22.9022.9623.03T:schwaemm192192v2
23.1923.2023.22T:isapk128av20
23.7623.7923.82T:isapa128av20
24.1424.1824.28T:schwaemm128128v2
28.6728.7128.74T:isapa128v20
29.2929.3529.62romulusn
39.8539.9640.03romulusm
40.4540.6540.78romulust
44.7644.7844.80T:giftcofb128v1
58.1058.2258.28T:tinyjambu128v2
67.5167.6667.84T:tinyjambu192v2
68.4468.5368.69T:tinyjambu256v2
86.1986.4386.67T:isapk128v20
122.65123.00123.51T:isapxv20
136.77137.00138.28T:elephant200v2
5588.065594.495607.91T:elephant176v2
6266.146270.276270.95T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.976.036.08T:aes128gcmv1
6.346.386.45aes256gcmv1
12.3112.3812.94ascon128av12
13.5113.5814.17T:xoodyakround3
17.5217.7717.93ascon128v12
17.7818.0218.34ascon80pqv12
21.7221.8822.45ascon128abi32v12
28.1428.5729.13T:schwaemm256128v2
28.6628.7328.79T:grain128aeadv2
28.7728.9329.08ascon128bi32v12
30.7531.0531.59T:schwaemm128128v2
32.7333.0433.37T:schwaemm256256v2
35.3735.5436.84romulusn
36.4537.0137.62T:schwaemm192192v2
46.8347.0447.78romulusm
54.0054.3454.87T:giftcofb128v1
67.4667.5768.05T:tinyjambu128v2
73.8874.2174.77T:isapa128av20
78.3278.5578.75T:tinyjambu192v2
79.2379.4980.06T:tinyjambu256v2
95.4195.5195.59T:isapk128av20
104.41104.76105.70romulust
192.79193.52194.46T:elephant200v2
383.18383.91384.91T:isapa128v20
1268.291269.981274.20T:isapk128v20
1848.491873.191877.44T:isapxv20
6950.486963.736980.10T:elephant176v2
8377.148385.788406.70T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.235.295.34T:aes128gcmv1
6.126.206.27aes256gcmv1
12.3412.5113.43ascon128av12
13.4213.5513.98T:xoodyakround3
17.3317.5217.98ascon128v12
17.2717.7418.05ascon80pqv12
21.9722.2023.09ascon128abi32v12
27.7728.1128.82T:schwaemm256128v2
28.7028.8429.28T:grain128aeadv2
28.9429.0529.37ascon128bi32v12
30.9731.4031.68T:schwaemm128128v2
33.1133.3433.54T:schwaemm256256v2
35.5935.7335.84romulusn
36.6936.9237.54T:schwaemm192192v2
48.0648.2449.45romulusm
54.2654.4554.62T:giftcofb128v1
67.7167.9368.20T:tinyjambu128v2
76.0976.4577.36T:isapa128av20
78.6378.7778.95T:tinyjambu192v2
79.5079.5779.70T:tinyjambu256v2
95.6295.7795.88T:isapk128av20
104.73105.55105.98romulust
192.38192.96193.75T:elephant200v2
384.67385.06385.50T:isapa128v20
1269.061270.381274.24T:isapk128v20
1848.551874.571882.35T:isapxv20
6956.007001.057005.66T:elephant176v2
8382.458388.868408.45T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.245.265.30T:aes128gcmv1
6.136.186.25aes256gcmv1
12.3012.3812.98ascon128av12
13.5513.9914.12T:xoodyakround3
17.3017.4417.53ascon80pqv12
17.3317.5317.73ascon128v12
21.9522.2622.48ascon128abi32v12
27.7327.9828.31T:schwaemm256128v2
28.7328.9029.06T:grain128aeadv2
28.9228.9629.06ascon128bi32v12
30.8731.0331.52T:schwaemm128128v2
32.7832.9333.41T:schwaemm256256v2
35.5535.7635.88romulusn
36.5836.9537.44T:schwaemm192192v2
48.0248.3448.62romulusm
49.6349.9250.48T:isapa128av20
54.2354.5954.80T:giftcofb128v1
60.2860.5660.80T:isapk128av20
65.9866.3567.26romulust
67.7267.8168.06T:tinyjambu128v2
78.3878.5378.80T:tinyjambu192v2
79.3479.4579.73T:tinyjambu256v2
192.08193.16194.12T:elephant200v2
200.08200.55201.02T:isapa128v20
668.86670.03670.94T:isapk128v20
967.36980.39981.54T:isapxv20
6947.906957.027009.71T:elephant176v2
8381.768392.718412.84T:elephant160v2

amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20240425
[show/hide table]

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
2.132.322.34T:aes128gcmv1
2.332.332.34aes256gcmv1
10.4610.4710.47ascon128av12
15.1615.1615.16ascon128v12
15.4015.4115.41ascon80pqv12
23.4323.4423.45ascon128abi32v12
23.6524.1224.15T:xoodyakround3
27.8827.8927.91T:schwaemm256128v2
34.4434.4534.45ascon128bi32v12
34.4334.6837.44T:schwaemm256256v2
36.5436.5536.56T:schwaemm128128v2
37.1637.1937.51T:schwaemm192192v2
39.5339.9539.96T:grain128aeadv2
45.7345.7745.84romulusn
48.0748.4348.43T:giftcofb128v1
62.4762.6762.93T:isapa128av20
69.1569.1669.18T:isapa128v20
75.8276.2576.75romulusm
83.4383.4383.83T:tinyjambu128v2
97.2097.2197.23T:tinyjambu192v2
109.37109.39109.63T:tinyjambu256v2
113.04113.34113.50T:isapk128av20
144.60144.66144.72romulust
152.04152.20153.85T:isapk128v20
220.70221.27221.51T:isapxv20
238.51243.21243.24T:elephant200v2
11089.5511095.3511152.20T:elephant176v2
12328.9212330.5812331.61T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
2.342.362.37aes256gcmv1
2.212.432.45T:aes128gcmv1
10.0510.0610.07ascon128av12
14.9915.0115.02ascon128v12
15.1215.1215.13ascon80pqv12
22.9523.4723.47T:xoodyakround3
23.5723.5723.58ascon128abi32v12
27.7927.8127.84T:schwaemm256128v2
33.9434.2137.27T:schwaemm256256v2
34.4934.5134.52ascon128bi32v12
36.5336.5436.54T:schwaemm128128v2
37.0637.0837.25T:schwaemm192192v2
41.8941.9041.90T:grain128aeadv2
45.2645.3145.34romulusn
48.5548.5748.73T:giftcofb128v1
62.4162.4562.86T:isapa128av20
69.1869.1969.20T:isapa128v20
76.0476.1076.42romulusm
83.7283.7283.78T:tinyjambu128v2
97.2597.2797.52T:tinyjambu192v2
108.72108.76108.78T:tinyjambu256v2
112.96113.25113.47T:isapk128av20
143.84144.65144.69romulust
151.45152.26153.28T:isapk128v20
220.97221.42221.53T:isapxv20
243.20243.22243.24T:elephant200v2
11090.8911094.2111153.48T:elephant176v2
12329.2312330.5312331.05T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
2.352.352.36aes256gcmv1
2.212.422.44T:aes128gcmv1
10.0510.0610.07ascon128av12
15.0015.0015.01ascon128v12
15.1215.1215.13ascon80pqv12
23.0523.5323.57T:xoodyakround3
23.5723.5723.57ascon128abi32v12
27.7927.8127.84T:schwaemm256128v2
33.9534.2137.03T:schwaemm256256v2
34.5134.5134.52ascon128bi32v12
34.4934.5134.79T:isapa128v20
36.5236.5436.55T:schwaemm128128v2
37.0637.0937.25T:schwaemm192192v2
41.8941.8941.89T:grain128aeadv2
42.5742.5942.64T:isapa128av20
45.7345.9045.91romulusn
48.5648.5748.73T:giftcofb128v1
51.7951.8552.12romulust
74.3274.6074.79T:isapk128av20
76.0876.1176.55romulusm
83.7283.7283.80T:tinyjambu128v2
94.4694.4894.64T:isapk128v20
97.2597.2797.52T:tinyjambu192v2
108.73108.78109.13T:tinyjambu256v2
129.95130.14130.39T:isapxv20
243.20243.22243.65T:elephant200v2
11090.3411092.9111149.73T:elephant176v2
12328.8812330.9512334.88T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.771.791.80aes256gcmv1
1.69?1.81?1.92?T:aes128gcmv1
10.2210.2310.24ascon128av12
14.7414.7514.75ascon80pqv12
14.9514.9614.97ascon128v12
16.7617.2217.24T:xoodyakround3
22.9322.9522.96ascon128abi32v12
27.7027.7127.71T:schwaemm256128v2
34.2234.2334.24ascon128bi32v12
34.1934.4037.56T:schwaemm256256v2
36.4636.4736.61T:schwaemm128128v2
36.6736.7037.05T:schwaemm192192v2
38.0038.0238.07romulusn
39.4139.5639.59T:grain128aeadv2
48.2248.2248.23T:giftcofb128v1
51.6151.6151.62T:isapa128v20
52.5252.5552.72T:isapa128av20
53.3453.3853.43romulusm
67.4967.9767.99T:tinyjambu128v2
75.9775.9875.99T:tinyjambu192v2
82.6782.6982.70T:tinyjambu256v2
93.7693.8594.06T:isapk128av20
97.7897.8198.49romulust
123.60123.73124.42T:isapk128v20
176.19179.03179.07T:isapxv20
181.16181.20181.42T:elephant200v2
8256.288258.388302.25T:</