VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20250415

[Page version: 20250523 10:17:58]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 7.75 7.75 7.76 ascon128av12 11.50 11.50 11.50 ascon128v12 11.50 11.50 11.51 ascon80pqv12 17.74 17.75 17.76 ascon128abi32v12 25.50 25.50 26.17 ascon128bi32v12 35.87 36.60 37.76 T:aes128gcmv1 42.20 43.22 46.26 T:aes256gcmv1 48.31 48.33 48.89 T:giftcofb128v1 49.37 49.54 49.71 T:isapa128av20 51.15 51.93 55.27 T:isapa128v20 52.19 52.20 52.48 T:schwaemm256128v2 55.87 55.90 56.18 romulusn 56.25 56.52 56.53 T:tinyjambu128v2 59.94 60.39 60.66 T:xoodyakround3 61.20 61.23 64.50 T:schwaemm256256v2 69.63 69.65 72.38 T:schwaemm192192v2 73.64 73.72 73.97 T:schwaemm128128v2 77.70 77.75 79.30 T:tinyjambu192v2 81.06 81.12 81.94 T:tinyjambu256v2 95.64 95.77 98.73 romulusm 205.56 208.31 209.48 T!!!romulust 331.29 332.69 335.29 T:isapk128av20 336.68 339.56 342.28 T:elephant200v2 416.53 419.87 423.08 T:isapk128v20 419.49 428.47 431.17 T:isapxv20 13521.45 13533.07 13547.53 T:elephant160v2 14340.63 14345.29 14359.13 T:elephant176v2 35656.85 35672.59 35839.26 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 7.68 7.69 7.74 ascon128av12 11.49 11.50 11.51 ascon128v12 11.50 11.51 11.51 ascon80pqv12 17.81 17.81 18.17 ascon128abi32v12 24.85 24.88 24.90 ascon128bi32v12 36.10 36.70 37.85 T:aes128gcmv1 42.75 43.30 44.11 T:aes256gcmv1 47.87 47.88 47.98 T:giftcofb128v1 49.36 49.53 49.64 T:isapa128av20 51.27 51.82 53.75 T:isapa128v20 52.94 52.95 53.14 T:schwaemm256128v2 55.87 55.88 56.10 romulusn 56.24 56.25 56.38 T:tinyjambu128v2 58.95 58.98 59.13 T:xoodyakround3 61.63 61.64 61.85 T:schwaemm256256v2 70.57 70.59 70.98 T:schwaemm192192v2 75.22 75.54 78.30 T:schwaemm128128v2 77.72 77.75 78.75 T:tinyjambu192v2 81.08 81.11 82.39 T:tinyjambu256v2 95.59 95.62 98.54 romulusm 206.13 208.38 209.26 T!!!romulust 331.51 332.78 335.35 T:isapk128av20 336.43 339.31 342.31 T:elephant200v2 416.60 419.75 423.87 T:isapk128v20 419.49 427.80 431.07 T:isapxv20 13518.97 13529.23 13537.07 T:elephant160v2 14344.72 14352.55 14366.39 T:elephant176v2 35646.27 35699.43 35965.83 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 7.69 7.69 7.70 ascon128av12 11.49 11.50 11.50 ascon128v12 11.38 11.51 11.54 ascon80pqv12 17.81 17.81 17.86 ascon128abi32v12 24.87 24.89 24.94 ascon128bi32v12 25.68 25.94 26.50 T:isapa128v20 31.99 32.00 32.04 T:isapa128av20 35.98 36.49 37.34 T:aes128gcmv1 42.75 43.03 43.98 T:aes256gcmv1 47.87 47.88 47.99 T:giftcofb128v1 52.94 52.95 53.02 T:schwaemm256128v2 55.87 55.90 56.10 romulusn 56.25 56.27 56.44 T:tinyjambu128v2 59.04 59.10 59.28 T:xoodyakround3 61.63 61.63 61.72 T:schwaemm256256v2 70.57 70.58 71.05 T:schwaemm192192v2 72.03 72.15 75.05 T!!!romulust 75.21 75.22 75.51 T:schwaemm128128v2 77.71 77.75 78.54 T:tinyjambu192v2 81.08 81.13 84.38 T:tinyjambu256v2 95.60 95.66 98.62 romulusm 194.59 195.55 197.46 T:isapk128av20 235.61 237.50 241.69 T:isapk128v20 236.54 239.45 243.22 T:isapxv20 337.80 339.19 342.29 T:elephant200v2 872.83 879.79 886.04 aes256gcmv1 13526.00 13533.27 13541.13 T:elephant160v2 14344.97 14350.62 14372.20 T:elephant176v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 7.68 7.69 7.70 ascon128av12 11.31 11.31 11.32 ascon128v12 11.31 11.31 11.36 ascon80pqv12 17.28 17.28 17.29 ascon128abi32v12 25.05 25.06 25.12 ascon128bi32v12 27.36 27.87 29.28 T:aes128gcmv1 30.81 31.48 33.82 T:aes256gcmv1 38.31 39.01 40.49 T:isapa128v20 40.69 40.72 42.11 T:isapa128av20 45.53 45.77 46.95 T:xoodyakround3 46.28 46.38 47.70 T:tinyjambu128v2 47.75 47.79 49.23 romulusn 47.78 47.82 49.21 T:giftcofb128v1 51.80 51.81 53.17 T:schwaemm256128v2 60.79 60.96 62.43 T:schwaemm256256v2 60.94 61.03 62.41 T:tinyjambu256v2 61.23 61.33 62.71 T:tinyjambu192v2 67.65 68.23 69.07 romulusm 69.02 70.34 70.61 T:schwaemm192192v2 71.60 71.67 72.96 T:schwaemm128128v2 139.98 140.13 141.07 T!!!romulust 254.35 256.58 258.13 T:elephant200v2 265.62 266.14 268.25 T:isapk128av20 329.49 331.97 334.08 T:isapk128v20 332.72 337.03 341.91 T:isapxv20 10144.79 10148.64 10164.12 T:elephant160v2 10717.70 10727.29 10734.82 T:elephant176v2 18277.62 18411.92 18441.74 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 7.65 7.66 7.67 ascon128av12 11.31 11.31 11.37 ascon128v12 11.31 11.32 11.37 ascon80pqv12 17.24 17.33 17.46 ascon128abi32v12 24.68 24.70 25.25 ascon128bi32v12 27.46 27.94 29.45 T:aes128gcmv1 30.63 31.22 32.56 T:aes256gcmv1 38.58 39.01 40.66 T:isapa128v20 40.69 40.83 41.08 T:isapa128av20 45.03 45.06 46.52 T:xoodyakround3 46.26 46.38 47.72 T:tinyjambu128v2 47.57 47.61 49.09 T:giftcofb128v1 47.75 47.85 49.22 romulusn 52.18 52.24 53.63 T:schwaemm256128v2 60.92 60.94 62.30 T:tinyjambu256v2 61.23 61.27 62.70 T:tinyjambu192v2 61.04 62.34 62.50 T:schwaemm256256v2 67.65 67.96 69.22 romulusm 69.46 69.54 70.88 T:schwaemm192192v2 72.38 73.70 74.11 T:schwaemm128128v2 139.89 140.10 140.33 T!!!romulust 254.33 255.97 258.08 T:elephant200v2 265.50 266.58 268.38 T:isapk128av20 329.39 331.64 333.74 T:isapk128v20 332.94 337.84 339.78 T:isapxv20 10144.33 10151.43 10160.48 T:elephant160v2 10718.67 10727.03 10753.22 T:elephant176v2 18258.04 18402.61 18434.84 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 7.66 7.66 7.66 ascon128av12 11.30 11.31 11.36 ascon128v12 11.31 11.31 11.32 ascon80pqv12 17.27 17.33 17.45 ascon128abi32v12 24.68 24.69 25.24 ascon128bi32v12 25.65 26.13 27.70 T:isapa128v20 27.50 28.07 29.55 T:aes128gcmv1 30.46 31.15 32.57 T:aes256gcmv1 32.00 32.01 32.24 T:isapa128av20 45.07 45.10 46.41 T:xoodyakround3 46.29 46.39 47.78 T:tinyjambu128v2 47.60 47.70 49.32 T:giftcofb128v1 47.76 47.85 49.22 romulusn 52.18 52.22 53.54 T:schwaemm256128v2 60.92 60.95 62.30 T:tinyjambu256v2 61.03 61.28 62.78 T:schwaemm256256v2 61.25 61.31 62.76 T:tinyjambu192v2 67.66 67.72 69.08 romulusm 69.47 69.54 71.06 T:schwaemm192192v2 72.39 72.59 73.85 T:schwaemm128128v2 71.88 73.20 73.53 T!!!romulust 196.36 197.77 198.45 T:isapk128av20 238.98 240.08 242.01 T:isapk128v20 241.60 245.20 247.14 T:isapxv20 254.37 255.88 258.11 T:elephant200v2 874.38 885.50 888.77 aes256gcmv1 10140.20 10145.94 10154.08 T:elephant160v2 10717.90 10722.94 10737.13 T:elephant176v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 7.62 7.62 7.63 ascon128av12 11.12 11.12 11.13 ascon80pqv12 11.12 11.12 11.13 ascon128v12 16.81 16.81 16.82 ascon128abi32v12 18.31 18.68 19.09 T:aes256gcmv1 18.51 18.84 19.09 T:aes128gcmv1 24.61 24.88 24.90 ascon128bi32v12 24.81 25.77 26.19 T:isapa128v20 30.84 31.15 31.20 T:xoodyakround3 31.98 32.01 32.22 T:isapa128av20 36.49 36.51 36.53 T:tinyjambu128v2 39.61 39.63 39.79 romulusn 39.68 39.70 39.89 romulusm 40.74 40.76 40.82 T:tinyjambu256v2 44.75 44.76 44.82 T:tinyjambu192v2 47.23 47.26 47.62 T:giftcofb128v1 51.41 51.44 52.51 T:schwaemm256128v2 60.38 60.39 60.60 T:schwaemm256256v2 68.35 68.43 68.51 T:schwaemm192192v2 69.53 69.54 69.74 T:schwaemm128128v2 71.71 71.74 72.32 T!!!romulust 172.20 172.76 174.26 T:elephant200v2 198.84 199.95 201.85 T:isapk128av20 239.63 241.63 244.62 T:isapk128v20 241.79 245.30 247.54 T:isapxv20 871.89 881.24 908.62 aes256gcmv1 6759.09 6768.24 6774.17 T:elephant160v2 7088.40 7096.91 7100.43 T:elephant176v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 7.62 7.62 7.63 ascon128av12 11.12 11.12 11.12 ascon128v12 11.12 11.12 11.21 ascon80pqv12 16.76 16.95 17.14 ascon128abi32v12 18.21 18.66 19.04 T:aes256gcmv1 18.35 18.88 19.79 T:aes128gcmv1 24.49 24.51 24.73 ascon128bi32v12 25.52 26.02 26.64 T:isapa128v20 30.84 31.12 31.14 T:xoodyakround3 31.98 32.00 32.02 T:isapa128av20 36.50 36.51 36.53 T:tinyjambu128v2 39.61 39.64 39.96 romulusn 39.68 39.70 39.80 romulusm 40.75 40.76 40.84 T:tinyjambu256v2 44.73 44.75 44.77 T:tinyjambu192v2 47.25 47.26 47.35 T:giftcofb128v1 51.41 51.43 51.53 T:schwaemm256128v2 60.38 60.38 60.42 T:schwaemm256256v2 68.34 68.43 71.20 T:schwaemm192192v2 69.53 69.53 69.67 T:schwaemm128128v2 71.71 71.86 72.35 T!!!romulust 172.26 173.56 175.17 T:elephant200v2 198.98 199.92 201.19 T:isapk128av20 239.74 241.91 245.40 T:isapk128v20 241.78 245.31 247.59 T:isapxv20 876.93 879.83 903.01 aes256gcmv1 6761.22 6767.88 6774.05 T:elephant160v2 7086.15 7094.87 7097.99 T:elephant176v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 7.63 7.63 7.63 ascon128av12 11.12 11.12 11.13 ascon80pqv12 11.12 11.12 11.24 ascon128v12 16.68 16.82 17.02 ascon128abi32v12 18.64 18.97 19.89 T:aes128gcmv1 18.59 18.99 19.71 T:aes256gcmv1 24.48 24.51 24.90 ascon128bi32v12 25.47 25.66 26.41 T:isapa128v20 31.09 31.11 31.14 T:xoodyakround3 31.98 32.00 32.04 T:isapa128av20 36.49 36.52 36.59 T:tinyjambu128v2 39.63 39.65 39.68 romulusn 39.69 39.70 39.74 romulusm 40.75 40.76 40.78 T:tinyjambu256v2 44.74 44.75 44.77 T:tinyjambu192v2 47.25 47.33 47.65 T:giftcofb128v1 51.41 51.43 51.63 T:schwaemm256128v2 60.38 60.38 60.44 T:schwaemm256256v2 68.34 68.41 68.46 T:schwaemm192192v2 69.52 69.53 69.62 T:schwaemm128128v2 71.71 71.87 74.56 T!!!romulust 170.87 172.26 173.82 T:elephant200v2 199.67 200.09 201.84 T:isapk128av20 239.68 242.92 246.14 T:isapk128v20 242.03 244.57 249.56 T:isapxv20 871.84 881.12 901.80 aes256gcmv1 6753.74 6767.24 6774.95 T:elephant160v2 7090.35 7094.04 7098.20 T:elephant176v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 7.89 7.89 7.89 ascon128av12 11.49 11.50 11.57 ascon128v12 11.50 11.50 11.54 ascon80pqv12 17.71 17.71 17.71 ascon128abi32v12 25.51 25.51 25.59 ascon128bi32v12 32.12 32.29 34.22 T:aes128gcmv1 35.77 35.99 37.64 T:aes256gcmv1 44.16 44.17 44.55 T:isapa128av20 45.98 46.19 46.42 T:xoodyakround3 46.75 46.77 48.49 T:tinyjambu128v2 48.25 48.26 48.72 romulusn 48.29 48.31 48.89 T:giftcofb128v1 53.21 53.22 53.39 T:schwaemm256128v2 56.50 56.80 58.93 T:isapa128v20 61.40 61.43 63.09 T:tinyjambu256v2 61.73 61.75 63.36 T:tinyjambu192v2 62.35 62.39 64.08 T:schwaemm256256v2 68.21 68.27 69.99 romulusm 70.41 70.45 72.18 T:schwaemm192192v2 72.44 72.45 74.12 T:schwaemm128128v2 141.92 142.60 143.44 T!!!romulust 259.97 260.94 262.53 T:elephant200v2 291.66 293.11 295.17 T:isapk128av20 535.46 536.74 540.64 T:isapk128v20 539.41 543.40 545.15 T:isapxv20 10258.01 10264.97 10274.55 T:elephant160v2 10799.19 10801.78 10812.41 T:elephant176v2 18631.65 18640.16 18647.06 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 7.86 7.86 7.87 ascon128av12 11.49 11.49 11.50 ascon128v12 11.50 11.50 11.50 ascon80pqv12 17.76 17.81 18.02 ascon128abi32v12 25.15 25.15 25.22 ascon128bi32v12 32.10 32.14 32.91 T:aes128gcmv1 35.61 36.13 37.87 T:aes256gcmv1 44.17 44.31 44.60 T:isapa128av20 45.47 45.49 47.24 T:xoodyakround3 46.75 46.77 46.78 T:tinyjambu128v2 48.08 48.13 48.73 T:giftcofb128v1 48.23 48.28 48.69 romulusn 53.59 53.64 55.46 T:schwaemm256128v2 56.49 56.90 58.58 T:isapa128v20 61.76 61.79 63.79 T:tinyjambu192v2 61.43 61.92 63.17 T:tinyjambu256v2 62.56 62.60 64.30 T:schwaemm256256v2 68.33 68.36 70.16 romulusm 70.89 70.92 72.65 T:schwaemm192192v2 73.22 73.25 75.04 T:schwaemm128128v2 141.07 142.58 142.86 T!!!romulust 260.15 260.36 263.25 T:elephant200v2 291.38 293.36 295.13 T:isapk128av20 535.43 536.34 539.99 T:isapk128v20 539.79 542.82 544.46 T:isapxv20 10255.83 10259.09 10271.80 T:elephant160v2 10802.47 10805.71 10815.52 T:elephant176v2 18629.25 18631.26 18638.53 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 7.86 7.86 7.93 ascon128av12 11.49 11.49 11.56 ascon128v12 11.50 11.50 11.56 ascon80pqv12 17.76 17.81 17.91 ascon128abi32v12 25.15 25.15 25.45 ascon128bi32v12 32.05 32.21 34.06 T:aes128gcmv1 33.92 33.93 34.29 T:isapa128av20 34.80 34.89 35.33 T:isapa128v20 35.56 35.98 38.46 T:aes256gcmv1 45.52 45.54 45.78 T:xoodyakround3 46.76 46.78 48.72 T:tinyjambu128v2 48.09 48.22 50.31 T:giftcofb128v1 48.23 48.26 48.64 romulusn 53.59 53.60 53.87 T:schwaemm256128v2 61.42 61.43 61.57 T:tinyjambu256v2 61.75 61.79 62.76 T:tinyjambu192v2 62.56 62.59 64.31 T:schwaemm256256v2 68.34 68.37 70.15 romulusm 70.89 70.92 72.60 T:schwaemm192192v2 73.22 73.24 74.98 T:schwaemm128128v2 73.97 74.10 75.66 T!!!romulust 212.09 213.74 214.07 T:isapk128av20 260.18 262.13 263.55 T:elephant200v2 344.78 345.29 347.14 T:isapk128v20 347.43 349.08 351.33 T:isapxv20 1240.99 1245.23 1245.86 aes256gcmv1 10256.19 10258.36 10271.45 T:elephant160v2 10798.44 10802.49 10809.94 T:elephant176v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 12.45 12.45 12.78 ascon128av12 15.59 15.59 15.78 ascon80pqv12 15.59 15.66 15.77 ascon128v12 27.33 27.48 27.92 ascon128abi32v12 35.71 35.84 35.88 ascon128bi32v12 55.39 55.47 55.70 T:tinyjambu128v2 59.51 59.58 59.73 romulusn 59.90 59.90 60.23 T:giftcofb128v1 65.21 65.36 65.51 T:xoodyakround3 72.39 72.47 72.57 T:tinyjambu256v2 73.10 73.30 73.36 T:tinyjambu192v2 80.75 80.76 81.03 romulusm 85.40 85.51 85.52 T:schwaemm256128v2 91.84 91.84 91.93 T:schwaemm128128v2 97.56 97.80 97.91 T:schwaemm256256v2 111.48 111.52 111.62 T:schwaemm192192v2 123.83 123.95 124.09 T:isapa128av20 133.09 133.68 139.43 T:aes128gcmv1 141.39 142.27 149.91 T:aes256gcmv1 191.64 191.70 192.03 T!!!romulust 366.03 367.19 368.05 T:elephant200v2 462.28 465.60 479.24 T:isapa128v20 854.18 857.21 857.97 T:isapk128av20 5197.23 5211.51 5240.85 T:isapk128v20 5212.23 5220.30 5268.98 T:isapxv20 13407.67 13443.14 13500.18 T:elephant176v2 13689.56 13728.80 13801.38 T:elephant160v2 27044.41 27121.29 27396.25 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 12.52 12.52 12.78 ascon128av12 15.58 15.58 15.73 ascon128v12 15.62 15.62 15.93 ascon80pqv12 27.78 27.78 29.40 ascon128abi32v12 35.52 35.59 35.80 ascon128bi32v12 55.48 55.58 55.63 T:tinyjambu128v2 59.16 59.17 59.27 romulusn 59.82 59.82 59.98 T:giftcofb128v1 64.74 64.82 65.06 T:xoodyakround3 72.81 73.03 73.20 T:tinyjambu256v2 73.68 73.70 73.73 T:tinyjambu192v2 83.95 84.02 84.30 romulusm 85.82 85.93 86.38 T:schwaemm256128v2 92.63 92.63 92.76 T:schwaemm128128v2 98.05 98.16 98.16 T:schwaemm256256v2 112.14 112.23 112.46 T:schwaemm192192v2 124.11 124.20 124.41 T:isapa128av20 132.23 133.20 136.51 T:aes128gcmv1 140.09 140.79 145.08 T:aes256gcmv1 191.59 191.84 192.02 T!!!romulust 364.77 366.48 368.16 T:elephant200v2 462.55 465.54 474.75 T:isapa128v20 854.57 857.12 859.96 T:isapk128av20 5196.94 5212.05 5241.39 T:isapk128v20 5213.44 5221.18 5259.66 T:isapxv20 13425.77 13446.25 13501.58 T:elephant176v2 13688.38 13729.31 13819.79 T:elephant160v2 27050.92 27162.22 27408.33 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 12.52 12.52 12.52 ascon128av12 15.56 15.56 15.62 ascon80pqv12 15.52 15.57 15.58 ascon128v12 27.78 27.78 28.93 ascon128abi32v12 35.52 35.52 35.52 ascon128bi32v12 55.45 55.51 55.63 T:tinyjambu128v2 59.16 59.17 59.21 romulusn 59.80 59.82 59.82 T:giftcofb128v1 64.81 64.88 64.98 T:xoodyakround3 72.81 73.09 73.20 T:tinyjambu256v2 73.68 73.73 73.75 T:tinyjambu192v2 77.95 78.10 78.17 T:isapa128av20 83.94 83.96 84.24 romulusm 85.82 85.92 85.93 T:schwaemm256128v2 92.63 92.63 92.63 T:schwaemm128128v2 98.05 98.05 98.16 T:schwaemm256256v2 111.84 112.18 112.30 T:schwaemm192192v2 121.71 121.99 122.15 T!!!romulust 131.88 132.54 135.27 T:aes128gcmv1 140.86 141.68 145.63 T:aes256gcmv1 241.13 242.39 248.30 T:isapa128v20 366.14 366.51 368.34 T:elephant200v2 525.20 525.24 528.22 T:isapk128av20 2699.70 2732.50 2746.12 T:isapk128v20 2727.18 2742.28 2754.66 T:isapxv20 9660.85 9671.64 9758.12 aes256gcmv1 13441.27 13450.03 13531.18 T:elephant176v2 13709.56 13728.00 13791.91 T:elephant160v2