VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20240425

[Page version: 20240828 00:46:12]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 7.56 7.56 7.57 ascon128av12 11.00 11.00 11.00 ascon128v12 11.12 11.12 11.14 ascon80pqv12 17.62 17.62 17.75 ascon128abi32v12 25.75 25.76 26.12 ascon128bi32v12 36.82 36.84 37.11 T:xoodyakround3 43.26 43.32 43.45 T:schwaemm256128v2 45.21 45.39 46.05 T:aes128gcmv1 45.87 45.88 46.17 T:isapa128av20 46.93 46.94 47.38 T:giftcofb128v1 50.99 52.05 55.44 T:isapa128v20 53.46 53.71 54.55 T:aes256gcmv1 54.33 54.34 54.56 T:schwaemm128128v2 55.81 55.84 56.13 romulusn 56.24 56.26 56.36 T:tinyjambu128v2 57.27 57.33 59.93 T:schwaemm192192v2 57.98 57.99 58.36 T:schwaemm256256v2 71.50 71.53 74.13 T:tinyjambu192v2 77.57 77.60 80.21 T:tinyjambu256v2 95.51 95.57 98.34 romulusm 178.87 180.24 181.00 T:isapk128av20 208.53 208.69 209.70 romulust 234.53 238.37 243.44 T:isapk128v20 381.12 383.48 386.56 T:isapxv20 387.09 387.71 389.76 T:elephant200v2 13394.52 13415.29 13422.15 T:elephant160v2 14206.22 14214.99 14228.21 T:elephant176v2 27122.64 27145.25 27155.90 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 7.50 7.50 7.62 ascon128av12 11.12 11.12 11.13 ascon80pqv12 11.23 11.25 11.31 ascon128v12 17.49 17.57 17.59 ascon128abi32v12 25.47 25.50 25.85 ascon128bi32v12 35.86 35.90 36.10 T:xoodyakround3 43.25 43.32 43.37 T:schwaemm256128v2 45.22 45.50 45.94 T:aes128gcmv1 45.85 45.88 45.97 T:isapa128av20 46.37 46.38 46.50 T:giftcofb128v1 50.79 51.88 54.58 T:isapa128v20 53.48 53.69 54.93 T:aes256gcmv1 54.26 54.27 54.41 T:schwaemm128128v2 55.81 55.84 56.00 romulusn 56.50 56.52 56.62 T:tinyjambu128v2 57.38 57.39 57.41 T:schwaemm192192v2 57.89 57.89 58.03 T:schwaemm256256v2 72.00 72.06 74.79 T:tinyjambu192v2 77.83 77.86 80.55 T:tinyjambu256v2 95.51 95.67 98.42 romulusm 179.71 180.25 180.97 T:isapk128av20 206.35 208.59 208.86 romulust 234.76 238.03 243.67 T:isapk128v20 381.23 381.82 386.93 T:isapxv20 387.05 388.94 389.94 T:elephant200v2 13400.37 13414.74 13425.47 T:elephant160v2 14205.25 14213.79 14231.11 T:elephant176v2 27129.52 27141.04 27157.46 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 7.50 7.50 7.51 ascon128av12 11.12 11.13 11.13 ascon80pqv12 11.25 11.25 11.52 ascon128v12 17.55 17.56 17.67 ascon128abi32v12 25.49 25.51 25.51 ascon128bi32v12 24.79 25.62 26.29 T:isapa128v20 29.37 29.38 29.58 T:isapa128av20 35.96 35.99 36.17 T:xoodyakround3 43.26 43.32 43.33 T:schwaemm256128v2 45.19 45.32 45.84 T:aes128gcmv1 46.37 46.38 46.69 T:giftcofb128v1 53.43 53.54 53.93 T:aes256gcmv1 54.26 54.27 54.47 T:schwaemm128128v2 55.80 55.82 55.94 romulusn 56.50 56.51 59.30 T:tinyjambu128v2 57.30 57.32 57.41 T:schwaemm192192v2 57.89 57.90 60.63 T:schwaemm256256v2 72.00 72.04 74.70 T:tinyjambu192v2 72.18 72.20 72.72 romulust 77.81 77.85 80.60 T:tinyjambu256v2 95.51 95.58 98.31 romulusm 117.35 120.46 121.55 T:isapk128av20 145.67 148.98 149.64 T:isapk128v20 215.60 217.47 221.18 T:isapxv20 387.16 387.33 389.75 T:elephant200v2 692.15 700.71 703.08 aes256gcmv1 13404.64 13413.99 13431.66 T:elephant160v2 14215.93 14226.41 14234.46 T:elephant176v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 7.46 7.47 7.54 ascon128av12 10.93 10.94 11.08 ascon80pqv12 11.00 11.00 11.05 ascon128v12 17.15 17.16 17.70 ascon128abi32v12 25.12 25.16 25.55 ascon128bi32v12 26.44 26.45 26.66 T:xoodyakround3 32.96 33.10 33.84 T:aes128gcmv1 37.11 37.24 38.66 T:aes256gcmv1 37.69 37.70 39.03 T:isapa128av20 37.58 40.37 41.06 T:isapa128v20 42.88 42.92 44.34 T:schwaemm256128v2 44.38 44.50 45.91 T:tinyjambu128v2 46.35 46.42 47.76 T:giftcofb128v1 47.75 47.79 49.15 romulusn 53.85 53.91 55.30 T:schwaemm128128v2 56.24 56.59 57.67 T:tinyjambu192v2 56.93 57.06 58.31 T:schwaemm192192v2 57.83 58.05 59.38 T:schwaemm256256v2 59.04 60.33 60.54 T:tinyjambu256v2 67.60 67.66 69.01 romulusm 140.07 140.28 140.41 romulust 148.74 149.20 151.01 T:isapk128av20 191.70 192.84 196.42 T:isapk128v20 288.39 288.67 291.61 T:elephant200v2 300.61 300.87 304.07 T:isapxv20 10054.59 10057.02 10062.40 T:elephant160v2 10613.71 10623.41 10630.91 T:elephant176v2 13920.64 13927.59 13936.50 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 7.43 7.44 7.44 ascon128av12 10.99 11.00 11.01 ascon128v12 11.00 11.00 11.37 ascon80pqv12 17.12 17.13 17.21 ascon128abi32v12 24.98 25.00 25.90 ascon128bi32v12 25.96 25.98 26.82 T:xoodyakround3 32.83 33.06 33.90 T:aes128gcmv1 37.09 37.23 38.60 T:aes256gcmv1 37.69 37.71 38.92 T:isapa128av20 38.51 39.14 40.59 T:isapa128v20 42.87 42.91 44.24 T:schwaemm256128v2 44.51 44.56 45.92 T:tinyjambu128v2 46.06 46.10 47.63 T:giftcofb128v1 47.71 47.83 49.21 romulusn 53.83 53.88 55.15 T:schwaemm128128v2 56.44 56.81 57.92 T:tinyjambu192v2 56.94 57.22 58.38 T:schwaemm192192v2 57.78 59.14 59.39 T:schwaemm256256v2 59.16 59.20 60.55 T:tinyjambu256v2 67.62 68.94 69.11 romulusm 140.22 140.28 140.55 romulust 148.59 149.18 151.60 T:isapk128av20 192.32 192.96 196.49 T:isapk128v20 288.57 288.70 289.68 T:elephant200v2 299.53 300.86 303.39 T:isapxv20 10056.11 10063.51 10072.77 T:elephant160v2 10621.98 10626.15 10633.64 T:elephant176v2 13903.64 13917.58 13921.71 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 7.43 7.45 7.58 ascon128av12 11.00 11.00 11.01 ascon80pqv12 11.00 11.00 11.04 ascon128v12 17.12 17.12 17.16 ascon128abi32v12 24.99 25.00 25.57 ascon128bi32v12 25.45 25.99 26.81 T:isapa128v20 26.00 26.02 26.30 T:xoodyakround3 29.37 29.39 29.68 T:isapa128av20 32.95 33.18 34.57 T:aes128gcmv1 37.09 37.20 38.62 T:aes256gcmv1 42.88 42.89 44.25 T:schwaemm256128v2 44.52 44.61 46.24 T:tinyjambu128v2 46.04 46.09 47.51 T:giftcofb128v1 47.76 47.82 49.20 romulusn 53.83 53.97 55.16 T:schwaemm128128v2 56.49 56.75 57.86 T:tinyjambu192v2 56.97 57.03 58.45 T:schwaemm192192v2 57.78 58.04 59.27 T:schwaemm256256v2 59.18 59.50 61.20 T:tinyjambu256v2 67.61 68.95 69.26 romulusm 72.01 72.28 73.40 romulust 119.09 119.58 120.47 T:isapk128av20 146.41 149.71 150.85 T:isapk128v20 217.68 218.41 221.33 T:isapxv20 288.48 288.60 289.54 T:elephant200v2 697.81 698.59 700.18 aes256gcmv1 10058.30 10065.46 10075.41 T:elephant160v2 10616.13 10627.97 10638.95 T:elephant176v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 7.38 7.38 7.38 ascon128av12 10.75 10.75 10.76 ascon80pqv12 10.74 10.82 11.01 ascon128v12 16.04 16.06 16.08 T:xoodyakround3 16.68 16.69 16.83 ascon128abi32v12 20.46 20.64 20.80 T:aes256gcmv1 20.59 20.66 20.85 T:aes128gcmv1 24.50 24.51 24.90 ascon128bi32v12 25.79 26.18 26.92 T:isapa128v20 29.37 29.38 29.53 T:isapa128av20 32.50 32.51 32.64 T:tinyjambu128v2 39.67 39.69 39.84 romulusn 39.68 39.70 39.90 romulusm 40.50 40.51 40.55 T:tinyjambu256v2 41.49 41.50 41.53 T:tinyjambu192v2 42.47 42.50 42.59 T:schwaemm256128v2 45.68 45.70 46.20 T:giftcofb128v1 53.32 53.35 53.58 T:schwaemm128128v2 56.50 56.58 56.70 T:schwaemm192192v2 57.64 57.65 58.36 T:schwaemm256256v2 71.76 71.90 74.66 romulust 117.83 121.09 121.88 T:isapk128av20 146.21 150.76 153.87 T:isapk128v20 190.08 192.77 192.86 T:elephant200v2 217.20 218.94 221.61 T:isapxv20 694.06 698.26 701.70 aes256gcmv1 6697.87 6704.16 6713.25 T:elephant160v2 7018.00 7027.97 7032.77 T:elephant176v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 7.38 7.38 7.38 ascon128av12 10.74 10.75 10.76 ascon128v12 10.87 10.88 10.89 ascon80pqv12 16.04 16.06 16.23 T:xoodyakround3 16.69 16.69 16.69 ascon128abi32v12 20.60 20.64 20.88 T:aes256gcmv1 20.63 20.69 20.92 T:aes128gcmv1 24.47 24.51 24.56 ascon128bi32v12 25.48 26.06 26.69 T:isapa128v20 29.36 29.40 29.71 T:isapa128av20 32.49 32.50 32.52 T:tinyjambu128v2 39.69 39.69 39.83 romulusm 39.67 39.69 39.81 romulusn 40.50 40.50 40.54 T:tinyjambu256v2 41.50 41.51 41.57 T:tinyjambu192v2 42.47 42.54 42.59 T:schwaemm256128v2 45.69 45.70 45.96 T:giftcofb128v1 53.33 53.38 56.11 T:schwaemm128128v2 56.55 56.58 56.65 T:schwaemm192192v2 57.64 57.64 57.78 T:schwaemm256256v2 71.71 71.84 74.75 romulust 117.67 121.22 121.86 T:isapk128av20 146.17 149.49 150.78 T:isapk128v20 190.07 192.80 193.22 T:elephant200v2 217.48 218.97 223.36 T:isapxv20 689.30 695.74 703.02 aes256gcmv1 6700.76 6709.00 6719.77 T:elephant160v2 7019.94 7029.90 7035.75 T:elephant176v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 7.38 7.38 7.39 ascon128av12 10.75 10.75 10.76 ascon128v12 10.86 10.88 10.89 ascon80pqv12 16.04 16.06 16.08 T:xoodyakround3 16.69 16.69 16.78 ascon128abi32v12 20.37 20.64 21.03 T:aes128gcmv1 20.61 20.65 20.82 T:aes256gcmv1 24.46 24.51 24.56 ascon128bi32v12 25.74 26.20 26.68 T:isapa128v20 29.39 29.51 29.74 T:isapa128av20 32.49 32.50 32.53 T:tinyjambu128v2 39.68 39.69 39.78 romulusm 39.68 39.69 39.81 romulusn 40.50 40.50 40.56 T:tinyjambu256v2 41.50 41.50 41.58 T:tinyjambu192v2 42.47 42.48 42.56 T:schwaemm256128v2 45.69 45.70 45.94 T:giftcofb128v1 53.32 53.33 53.41 T:schwaemm128128v2 56.55 56.57 59.24 T:schwaemm192192v2 57.64 57.65 57.82 T:schwaemm256256v2 71.80 71.88 72.36 romulust 117.40 118.11 121.66 T:isapk128av20 146.85 147.90 150.79 T:isapk128v20 190.75 192.93 193.57 T:elephant200v2 217.22 218.36 221.52 T:isapxv20 693.69 695.98 703.51 aes256gcmv1 6698.76 6706.64 6714.18 T:elephant160v2 7019.03 7029.97 7037.23 T:elephant176v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 7.66 7.66 7.67 ascon128av12 11.11 11.11 11.15 ascon80pqv12 11.05 11.17 11.23 ascon128v12 17.67 17.67 17.81 ascon128abi32v12 25.56 25.57 25.68 ascon128bi32v12 26.65 26.67 26.71 T:xoodyakround3 34.50 34.58 35.06 T:aes128gcmv1 38.75 38.87 39.73 T:aes256gcmv1 40.25 40.26 40.59 T:isapa128av20 44.07 44.08 44.29 T:schwaemm256128v2 44.77 44.79 45.24 T:tinyjambu128v2 46.80 46.87 48.63 T:giftcofb128v1 48.48 48.55 50.37 romulusn 54.49 54.53 56.16 T:schwaemm128128v2 56.71 56.77 58.36 T:tinyjambu192v2 56.63 57.07 58.77 T:isapa128v20 58.10 58.13 59.78 T:schwaemm192192v2 59.31 59.33 61.12 T:schwaemm256256v2 59.49 59.51 61.22 T:tinyjambu256v2 68.09 68.13 69.84 romulusm 142.80 142.94 143.47 romulust 173.30 173.39 173.86 T:isapk128av20 293.49 295.11 296.31 T:elephant200v2 328.49 329.07 330.48 T:isapk128v20 483.73 485.29 486.93 T:isapxv20 10157.75 10164.29 10170.01 T:elephant160v2 10700.14 10703.07 10713.97 T:elephant176v2 14195.57 14201.66 14209.52 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 7.63 7.63 7.64 ascon128av12 11.17 11.17 11.23 ascon80pqv12 11.18 11.29 11.30 ascon128v12 17.65 17.66 18.34 ascon128abi32v12 25.46 25.46 25.54 ascon128bi32v12 26.20 26.20 26.27 T:xoodyakround3 34.43 34.65 35.69 T:aes128gcmv1 38.71 38.85 39.65 T:aes256gcmv1 40.26 40.28 40.45 T:isapa128av20 44.10 44.13 45.79 T:schwaemm256128v2 44.90 44.91 45.71 T:tinyjambu128v2 46.53 46.60 48.45 T:giftcofb128v1 48.50 48.53 48.95 romulusn 54.47 54.50 56.12 T:schwaemm128128v2 56.97 57.01 58.63 T:tinyjambu192v2 56.91 57.06 58.73 T:isapa128v20 58.17 58.20 60.00 T:schwaemm192192v2 59.29 59.30 61.11 T:schwaemm256256v2 59.62 59.65 61.34 T:tinyjambu256v2 68.23 68.30 70.01 romulusm 141.14 142.86 142.92 romulust 173.35 173.42 173.64 T:isapk128av20 293.48 295.09 296.42 T:elephant200v2 326.89 329.08 329.50 T:isapk128v20 484.28 485.28 487.37 T:isapxv20 10165.14 10169.08 10172.47 T:elephant160v2 10699.75 10708.16 10715.37 T:elephant176v2 14199.43 14202.77 14205.71 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 7.63 7.63 7.64 ascon128av12 11.17 11.17 11.22 ascon128v12 11.17 11.17 11.24 ascon80pqv12 17.65 17.67 17.79 ascon128abi32v12 25.46 25.48 25.77 ascon128bi32v12 26.25 26.26 26.35 T:xoodyakround3 30.83 30.85 31.17 T:isapa128av20 34.43 34.60 36.29 T:aes128gcmv1 34.83 35.07 36.18 T:isapa128v20 38.72 38.85 39.64 T:aes256gcmv1 44.07 44.11 44.38 T:schwaemm256128v2 44.90 44.92 45.33 T:tinyjambu128v2 46.53 46.62 47.22 T:giftcofb128v1 48.50 48.51 48.90 romulusn 54.47 54.48 56.06 T:schwaemm128128v2 56.96 57.01 58.63 T:tinyjambu192v2 58.17 58.18 59.86 T:schwaemm192192v2 59.28 59.31 60.58 T:schwaemm256256v2 59.62 59.64 61.33 T:tinyjambu256v2 68.23 68.26 70.00 romulusm 74.12 74.40 75.85 romulust 133.25 135.34 135.86 T:isapk128av20 219.88 219.99 220.42 T:isapk128v20 293.48 295.11 295.44 T:elephant200v2 312.04 313.15 313.86 T:isapxv20 974.67 977.77 978.71 aes256gcmv1 10168.87 10172.53 10185.48 T:elephant160v2 10701.52 10703.69 10711.63 T:elephant176v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 11.88 11.95 12.24 ascon128av12 14.86 14.86 15.09 ascon128v12 14.91 14.93 15.04 ascon80pqv12 29.23 29.23 29.55 ascon128abi32v12 35.48 35.50 35.72 ascon128bi32v12 37.70 37.96 38.07 T:xoodyakround3 53.70 53.80 54.48 T:tinyjambu128v2 57.96 57.96 58.32 T:giftcofb128v1 65.38 65.52 65.66 romulusn 67.00 67.06 67.27 T:tinyjambu192v2 69.05 69.48 70.18 T:aes128gcmv1 69.73 69.75 69.78 T:schwaemm128128v2 69.73 69.83 70.01 T:tinyjambu256v2 71.48 71.55 71.64 T:schwaemm256128v2 75.64 76.48 77.23 T:aes256gcmv1 79.10 79.10 79.48 romulusm 92.91 93.01 93.08 T:schwaemm192192v2 93.45 93.59 93.67 T:schwaemm256256v2 98.98 99.04 99.12 T:isapa128av20 192.16 192.28 192.63 romulust 408.73 408.80 409.12 T:elephant200v2 464.63 469.86 497.96 T:isapa128v20 690.98 692.81 703.84 T:isapk128av20 3395.64 3412.09 3437.55 T:isapk128v20 4649.55 4659.14 4664.08 T:isapxv20 13300.62 13309.27 13387.91 T:elephant176v2 13590.59 13592.33 13679.04 T:elephant160v2 20581.42 20613.44 20650.88 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 12.00 12.05 12.28 ascon128av12 14.86 14.92 15.12 ascon80pqv12 15.02 15.09 15.34 ascon128v12 29.48 29.55 30.08 ascon128abi32v12 36.05 36.05 36.27 ascon128bi32v12 37.53 37.63 37.88 T:xoodyakround3 53.71 53.91 54.24 T:tinyjambu128v2 57.86 57.86 58.07 T:giftcofb128v1 65.64 65.77 65.84 romulusn 67.22 67.31 67.43 T:tinyjambu192v2 68.12 68.57 69.42 T:aes128gcmv1 69.66 69.68 69.77 T:schwaemm128128v2 69.97 70.20 70.41 T:tinyjambu256v2 71.48 71.58 71.66 T:schwaemm256128v2 75.73 76.52 77.87 T:aes256gcmv1 82.42 82.42 82.46 romulusm 93.03 93.12 93.18 T:schwaemm192192v2 93.56 93.72 93.79 T:schwaemm256256v2 99.38 99.48 99.57 T:isapa128av20 192.27 192.47 193.13 romulust 408.98 409.12 409.73 T:elephant200v2 465.37 468.42 481.57 T:isapa128v20 688.58 690.18 693.44 T:isapk128av20 3398.03 3411.60 3422.23 T:isapk128v20 4657.81 4659.30 4662.21 T:isapxv20 13300.45 13302.50 13382.38 T:elephant176v2 13592.21 13612.24 13690.96 T:elephant160v2 20580.94 20625.42 20646.02 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 11.92 11.92 12.06 ascon128av12 14.86 14.86 14.94 ascon80pqv12 15.05 15.07 15.12 ascon128v12 29.47 29.47 29.63 ascon128abi32v12 36.04 36.05 36.24 ascon128bi32v12 37.70 37.82 37.91 T:xoodyakround3 53.84 53.93 54.24 T:tinyjambu128v2 57.86 57.86 57.86 T:giftcofb128v1 64.29 64.39 64.53 T:isapa128av20 65.64 65.75 65.78 romulusn 67.22 67.27 67.47 T:tinyjambu192v2 68.62 69.02 69.96 T:aes128gcmv1 69.68 69.68 69.73 T:schwaemm128128v2 70.02 70.18 70.41 T:tinyjambu256v2 71.47 71.55 71.59 T:schwaemm256128v2 75.53 76.00 76.51 T:aes256gcmv1 82.38 82.42 82.42 romulusm 93.05 93.12 93.18 T:schwaemm192192v2 93.56 93.70 93.79 T:schwaemm256256v2 122.30 122.40 122.46 romulust 242.90 244.29 248.71 T:isapa128v20 409.05 409.16 412.70 T:elephant200v2 458.05 464.83 470.55 T:isapk128av20 1829.65 1869.24 1883.38 T:isapk128v20 2426.12 2442.73 2466.65 T:isapxv20 7363.34 7390.88 7393.28 aes256gcmv1 13300.26 13303.37 13382.61 T:elephant176v2 13593.80 13614.54 13690.67 T:elephant160v2