VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20231107

[Page version: 20240828 00:46:12]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 11.46? 11.52? 13.41? ascon80pqv12 26.24 26.95 27.15 ascon128bi32v12 44.21 46.61 48.89 T:aes128gcmv1 49.48 50.78 51.11 T:giftcofb128v1 49.61 52.41 53.78 T:isapa128av20 51.50 54.49 56.12 T:isapa128v20 53.84 55.01 55.08 T:schwaemm256128v2 57.36 58.85 59.77 romulusn 58.98 59.24 60.48 T:tinyjambu128v2 61.85 62.96 63.87 T:xoodyakround3 63.93 64.19 65.04 T:schwaemm256256v2 72.27 73.18 73.89 T:schwaemm192192v2 76.30 77.21 78.12 T:schwaemm128128v2 81.05 82.03 82.75 T:tinyjambu192v2 83.92 85.16 85.42 T:tinyjambu256v2 98.50 100.98 101.69 romulusm 160.22 163.22 165.43 T:isapk128av20 212.76 216.08 222.53 T:isapk128v20 214.19 216.80 218.03 romulust 347.07 349.22 354.49 T:elephant200v2 423.18 428.97 433.27 T:isapxv20 14019.08 14024.41 14034.96 T:elephant160v2 14861.59 14872.72 14887.76 T:elephant176v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 11.46? 11.52? 13.02? ascon80pqv12 25.46 26.56 27.34 ascon128bi32v12 44.66 47.07 48.89 T:aes128gcmv1 49.28 50.59 50.91 T:giftcofb128v1 50.46 52.47 52.73 T:isapa128av20 52.47 55.08 55.66 T:isapa128v20 55.08 55.79 56.05 T:schwaemm256128v2 57.55 58.92 59.96 romulusn 58.79 59.18 60.29 T:tinyjambu128v2 61.52 61.72 62.57 T:xoodyakround3 64.52 64.65 66.02 T:schwaemm256256v2 73.11 74.74 75.33 T:schwaemm192192v2 77.86 78.12 79.62 T:schwaemm128128v2 80.53 81.77 82.16 T:tinyjambu192v2 83.92 85.48 86.52 T:tinyjambu256v2 99.93 101.37 101.95 romulusm 160.74 163.74 165.62 T:isapk128av20 212.24 216.02 223.89 T:isapk128v20 214.52 216.73 217.71 romulust 348.31 349.48 354.43 T:elephant200v2 423.11 429.23 434.05 T:isapxv20 14021.81 14023.50 14037.04 T:elephant160v2 14865.69 14874.67 14885.22 T:elephant176v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 11.39? 11.52? 12.89? ascon80pqv12 25.26 26.50 26.95 ascon128bi32v12 25.65? 26.50? 28.84? T:isapa128v20 33.53 33.59 34.64 T:isapa128av20 44.60 46.88 48.63 T:aes128gcmv1 50.39 50.85 50.91 T:giftcofb128v1 55.14 55.79 55.99 T:schwaemm256128v2 57.49 59.05 60.42 romulusn 57.75 59.18 60.22 T:tinyjambu128v2 61.07 61.85 63.22 T:xoodyakround3 64.45 64.58 65.89 T:schwaemm256256v2 73.18 74.54 74.87 T:schwaemm192192v2 75.07 76.37 77.47 romulust 78.12 79.04 79.82 T:schwaemm128128v2 80.53 81.58 81.97 T:tinyjambu192v2 84.83 85.35 86.46 T:tinyjambu256v2 100.00 100.78 102.28 romulusm 106.05 108.20 108.85 T:isapk128av20 133.66 134.24 136.78 T:isapk128v20 238.41 240.89 246.55 T:isapxv20 347.07 350.13 354.04 T:elephant200v2 14020.70 14029.56 14039.91 T:elephant160v2 14865.76 14877.34 14889.13 T:elephant176v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 32.26 33.59 34.57 T:aes128gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 32.16 33.27 34.15 T:aes128gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 31.90 33.27 34.08 T:aes128gcmv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 11.13? 11.13? 12.70? ascon80pqv12 19.34? 20.96? 22.40? T:aes128gcmv1 26.11 26.17 26.95 ascon128bi32v12 25.85? 26.63? 28.97? T:isapa128v20 32.29 32.36 33.07 T:xoodyakround3 33.33 33.46 33.59 T:isapa128av20 37.83 37.96 39.06 T:tinyjambu128v2 41.15 41.80 42.32 romulusm 41.15 41.93 42.64 romulusn 42.06 42.58 43.62 T:tinyjambu256v2 46.22 47.14 47.72 T:tinyjambu192v2 48.70 50.13 50.26 T:giftcofb128v1 52.73 54.30 54.82 T:schwaemm256128v2 63.35 63.41 64.65 T:schwaemm256256v2 71.22 72.20 72.59 T:schwaemm192192v2 72.40 72.53 73.63 T:schwaemm128128v2 73.24 75.72 76.30 romulust 106.32 109.05 110.68 T:isapk128av20 130.92 133.79 141.02 T:isapk128v20 176.11 178.12 178.91 T:elephant200v2 242.77 245.44 250.65 T:isapxv20 7012.70 7019.01 7030.21 T:elephant160v2 7352.41 7356.45 7362.43 T:elephant176v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 11.13? 11.20? 12.83? ascon80pqv12 19.27? 20.83? 22.98? T:aes128gcmv1 25.91 26.17 26.82 ascon128bi32v12 25.72? 26.56? 29.36? T:isapa128v20 32.29 32.29 32.81 T:xoodyakround3 33.53 33.59 34.83 T:isapa128av20 37.89 38.09 39.13 T:tinyjambu128v2 41.08 41.28 42.71 romulusn 41.28 41.34 42.77 romulusm 42.19 42.32 43.62 T:tinyjambu256v2 46.22 47.20 47.59 T:tinyjambu192v2 48.70 50.13 50.33 T:giftcofb128v1 53.71 54.30 55.66 T:schwaemm256128v2 63.35 63.48 65.62 T:schwaemm256256v2 71.09 72.27 72.72 T:schwaemm192192v2 72.33 73.24 73.83 T:schwaemm128128v2 73.31 75.98 76.43 romulust 105.92 108.27 109.83 T:isapk128av20 131.38 134.05 137.30 T:isapk128v20 176.11 178.19 178.84 T:elephant200v2 242.58 246.09 251.11 T:isapxv20 7012.11 7019.66 7033.46 T:elephant160v2 7350.26 7358.27 7371.35 T:elephant176v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 11.13? 11.13? 12.63? ascon80pqv12 19.21? 21.68? 22.40? T:aes128gcmv1 26.11 26.17 26.56 ascon128bi32v12 25.65? 26.79? 29.56? T:isapa128v20 32.29 32.36 33.01 T:xoodyakround3 33.53 33.53 34.57 T:isapa128av20 37.89 38.09 39.00 T:tinyjambu128v2 41.21 41.28 42.71 romulusm 41.21 42.45 42.84 romulusn 42.25 42.71 43.68 T:tinyjambu256v2 47.20 47.59 49.15 T:tinyjambu192v2 49.09 50.26 51.04 T:giftcofb128v1 52.73 54.30 54.43 T:schwaemm256128v2 63.28 63.41 64.84 T:schwaemm256256v2 71.09 71.42 72.85 T:schwaemm192192v2 72.40 72.59 74.87 T:schwaemm128128v2 74.80 76.04 78.19 romulust 107.23 108.01 110.68 T:isapk128av20 132.42 134.96 139.13 T:isapk128v20 175.65 178.19 179.10 T:elephant200v2 242.12 244.99 250.26 T:isapxv20 7012.24 7018.62 7031.38 T:elephant160v2 7350.59 7355.79 7368.23 T:elephant176v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 11.56 12.45 12.53 ascon80pqv12 26.45 26.53 27.22 ascon128bi32v12 37.03 37.92 38.74 T:aes128gcmv1 267.29 268.47 272.09 T:elephant200v2 10634.60 10637.67 10643.72 T:elephant160v2 11191.77 11197.92 11204.75 T:elephant176v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 11.52 11.88 12.49 ascon80pqv12 26.25 26.37 27.30 ascon128bi32v12 37.80 38.45 39.14 T:aes128gcmv1 267.94 268.39 271.36 T:elephant200v2 10635.66 10640.99 10644.45 T:elephant160v2 11192.99 11198.85 11206.91 T:elephant176v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 11.52 11.64 12.53 ascon80pqv12 26.20 26.45 27.26 ascon128bi32v12 37.35 37.80 38.66 T:aes128gcmv1 267.25 268.05 271.85 T:elephant200v2 10636.11 10639.75 10648.15 T:elephant160v2 11192.83 11196.49 11207.52 T:elephant176v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 15.62 15.62 16.60 ascon80pqv12 35.16 36.13 36.13 ascon128bi32v12 55.66 55.66 55.66 T:tinyjambu128v2 59.57 59.57 60.55 romulusn 59.57 60.55 62.50 T:giftcofb128v1 64.45 65.43 65.43 T:xoodyakround3 72.27 72.27 73.24 T:tinyjambu256v2 73.24 73.24 74.22 T:tinyjambu192v2 81.05 81.05 83.98 romulusm 84.96 85.94 85.94 T:schwaemm256128v2 91.80 91.80 94.73 T:schwaemm128128v2 97.66? 97.66? 121.09? T:schwaemm256256v2 111.33? 111.33? 133.79? T:schwaemm192192v2 124.02 124.02 127.93 T:isapa128av20 137.70? 142.58? 166.99? T:aes128gcmv1 192.38? 192.38? 215.82? romulust 364.26 386.72 402.34 T:elephant200v2 496.09 497.07 529.30 T:isapa128v20 865.23 877.93 884.77 T:isapk128av20 3669.43 3691.41 3788.09 T:isapk128v20 5277.34 5286.13 5326.17 T:isapxv20 13938.48 13968.75 13976.56 T:elephant176v2 14206.05 14263.67 14291.02 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 15.62 15.62 15.62 ascon80pqv12 35.16 36.13 36.13 ascon128bi32v12 55.66 55.66 56.64 T:tinyjambu128v2 59.57 59.57 60.55 romulusn 59.57 60.55 61.52 T:giftcofb128v1 64.45 64.45 65.43 T:xoodyakround3 73.24 73.24 73.24 T:tinyjambu256v2 73.24 74.22 74.22 T:tinyjambu192v2 83.98 83.98 86.91 romulusm 85.94 85.94 87.89 T:schwaemm256128v2 92.77 92.77 95.70 T:schwaemm128128v2 97.66 98.63 99.61 T:schwaemm256256v2 112.30? 112.30? 135.74? T:schwaemm192192v2 124.02 124.02 128.91 T:isapa128av20 134.77? 140.62? 156.25? T:aes128gcmv1 192.38? 193.36? 216.80? romulust 364.26 386.72 403.32 T:elephant200v2 495.61 498.05 503.42 T:isapa128v20 867.19 885.74 895.51 T:isapk128av20 3665.04 3676.76 3743.16 T:isapk128v20 5231.45 5279.30 5326.17 T:isapxv20 13959.96 13981.45 14021.48 T:elephant176v2 14212.89 14269.53 14290.04 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 15.62 15.62 16.60 ascon80pqv12 35.16 35.16 36.13 ascon128bi32v12 55.66 55.66 56.64 T:tinyjambu128v2 59.57 59.57 60.55 romulusn 59.57 60.55 60.55 T:giftcofb128v1 64.45 65.43 67.38 T:xoodyakround3 73.24 73.24 73.24 T:tinyjambu256v2 73.24 74.22 74.22 T:tinyjambu192v2 78.12 78.12 78.12 T:isapa128av20 83.98 83.98 86.91 romulusm 85.94 85.94 87.89 T:schwaemm256128v2 92.77 92.77 94.73 T:schwaemm128128v2 97.66 98.63 100.59 T:schwaemm256256v2 112.30 112.30 115.23 T:schwaemm192192v2 122.07 122.07 125.00 romulust 134.77? 141.60? 163.09? T:aes128gcmv1 250.00 269.53 271.48 T:isapa128v20 364.26 385.74 388.67 T:elephant200v2 572.27 574.22 583.01 T:isapk128av20 1978.52 2000.00 2047.85 T:isapk128v20 2748.05 2750.00 2773.44 T:isapxv20 13947.27 13972.66 13990.23 T:elephant176v2 14252.93 14266.60 14292.97 T:elephant160v2