VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,little, supercop-20261018

[Page version: 20261107 07:59:40]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.24 1.25 1.27 T:aes128gcmv1 1.40 1.41 1.43 aes256gcmv1 6.20 6.22 6.24 ascon128av12 9.19 9.22 9.23 ascon80pqv12 9.21 9.23 9.25 ascon128v12 11.46 11.47 11.49 ascon128abi32v12 14.11 14.19 14.29 T:xoodyakround3 15.76 15.82 15.85 T:schwaemm256128v2 16.30 16.34 16.35 ascon128bi32v12 20.74 20.83 20.86 T:schwaemm192192v2 22.06 22.43 22.53 T:schwaemm256256v2 22.51 22.66 22.70 T:schwaemm128128v2 27.05 27.09 27.14 T:grain128aeadv2 35.16 35.19 35.21 T:isapa128av20 36.25 36.34 36.36 romulusn 36.84 36.92 36.95 T:isapa128v20 39.60 39.63 39.66 T:giftcofb128v1 51.80 51.83 51.87 T:tinyjambu128v2 59.45 59.52 59.61 romulusm 59.59 59.64 59.67 T:tinyjambu192v2 59.47 59.64 59.93 T:isapk128av20 62.79 62.83 62.88 T:tinyjambu256v2 79.62 79.90 80.16 T:isapk128v20 121.32 121.36 121.39 romulust 159.55 160.86 161.62 T:isapxv20 185.03 185.09 185.23 T:elephant200v2 6404.68 6405.56 6410.66 T:elephant176v2 7539.00 7547.50 7554.18 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.24 1.25 1.27 T:aes128gcmv1 1.39 1.40 1.42 aes256gcmv1 6.22 6.24 6.25 ascon128av12 9.15 9.17 9.19 ascon128v12 9.17 9.19 9.22 ascon80pqv12 11.35 11.37 11.38 ascon128abi32v12 14.02 14.09 14.27 T:xoodyakround3 15.75 15.81 15.87 T:schwaemm256128v2 16.37 16.40 16.41 ascon128bi32v12 20.46 20.68 20.84 T:schwaemm192192v2 22.03 22.45 22.54 T:schwaemm256256v2 22.56 22.65 22.69 T:schwaemm128128v2 27.58 27.62 27.67 T:grain128aeadv2 34.90 35.01 35.06 T:isapa128av20 36.27 36.34 36.40 romulusn 36.82 36.88 36.96 T:isapa128v20 39.75 39.78 39.82 T:giftcofb128v1 51.87 51.91 51.95 T:tinyjambu128v2 59.56 59.65 59.75 romulusm 59.62 59.67 59.71 T:tinyjambu192v2 59.57 59.68 59.88 T:isapk128av20 62.72 62.77 62.81 T:tinyjambu256v2 79.67 79.94 80.13 T:isapk128v20 121.34 121.37 121.40 romulust 158.75 160.69 162.01 T:isapxv20 184.79 184.88 184.98 T:elephant200v2 6405.36 6409.11 6415.47 T:elephant176v2 7537.69 7538.86 7547.66 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.24 1.25 1.26 T:aes128gcmv1 1.40 1.40 1.41 aes256gcmv1 6.22 6.24 6.26 ascon128av12 9.14 9.16 9.18 ascon128v12 9.17 9.19 9.22 ascon80pqv12 11.34 11.36 11.38 ascon128abi32v12 14.04 14.08 14.27 T:xoodyakround3 15.79 15.83 15.87 T:schwaemm256128v2 16.37 16.39 16.41 ascon128bi32v12 18.55 18.59 18.62 T:isapa128v20 20.46 20.65 20.69 T:schwaemm192192v2 22.03 22.43 22.51 T:schwaemm256256v2 22.56 22.65 22.68 T:schwaemm128128v2 23.49 23.64 23.75 T:isapa128av20 27.59 27.64 27.69 T:grain128aeadv2 36.21 36.30 36.33 romulusn 39.75 39.79 39.82 T:giftcofb128v1 39.87 39.99 40.11 T:isapk128av20 41.51 41.54 41.58 romulust 49.90 50.16 50.28 T:isapk128v20 51.90 51.92 51.95 T:tinyjambu128v2 59.58 59.62 59.74 romulusm 59.61 59.68 59.71 T:tinyjambu192v2 62.71 62.75 62.79 T:tinyjambu256v2 93.70 94.19 95.07 T:isapxv20 184.76 184.85 184.95 T:elephant200v2 6406.51 6412.48 6425.73 T:elephant176v2 7537.52 7538.83 7548.97 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.85 0.85 0.86 T:aes128gcmv1 0.92 0.93 0.94 aes256gcmv1 6.17 6.19 6.21 ascon128av12 9.17 9.19 9.20 ascon80pqv12 9.17 9.20 9.21 ascon128v12 10.83 10.90 10.95 T:xoodyakround3 11.19 11.21 11.22 ascon128abi32v12 15.58 15.69 15.73 T:schwaemm256128v2 16.42 16.44 16.46 ascon128bi32v12 20.72 20.75 20.78 T:schwaemm192192v2 22.01 22.42 22.49 T:schwaemm256256v2 22.14 22.63 23.12 T:schwaemm128128v2 27.10 27.13 27.17 T:grain128aeadv2 27.69 27.73 27.75 T:isapa128v20 29.20 29.29 29.38 T:isapa128av20 29.73 29.75 29.80 romulusn 39.52 39.60 39.64 T:giftcofb128v1 41.36 41.40 41.44 romulusm 41.44 41.47 41.50 T:tinyjambu128v2 46.40 46.43 46.46 T:tinyjambu192v2 48.75 48.92 49.00 T:tinyjambu256v2 49.82 49.95 50.10 T:isapk128av20 64.92 65.06 65.22 T:isapk128v20 81.43 81.46 81.49 romulust 125.42 126.93 127.46 T:isapxv20 138.93 139.06 139.13 T:elephant200v2 4796.66 4808.32 4813.56 T:elephant176v2 5652.44 5667.56 5669.60 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.85 0.85 0.86 T:aes128gcmv1 0.92 0.93 0.94 aes256gcmv1 6.21 6.23 6.24 ascon128av12 9.13 9.15 9.16 ascon128v12 9.17 9.18 9.19 ascon80pqv12 10.79 10.85 10.91 T:xoodyakround3 11.12 11.14 11.16 ascon128abi32v12 15.62 15.69 15.73 T:schwaemm256128v2 16.35 16.37 16.39 ascon128bi32v12 20.59 20.73 20.78 T:schwaemm192192v2 22.02 22.41 22.46 T:schwaemm256256v2 22.15 22.61 23.11 T:schwaemm128128v2 27.35 27.39 27.43 T:grain128aeadv2 27.68 27.71 27.74 T:isapa128v20 29.21 29.32 29.41 T:isapa128av20 29.72 29.84 29.90 romulusn 39.57 39.67 39.70 T:giftcofb128v1 41.38 41.44 41.50 romulusm 41.49 41.50 41.53 T:tinyjambu128v2 46.42 46.44 46.46 T:tinyjambu192v2 47.11 47.14 47.17 T:tinyjambu256v2 49.81 49.90 50.05 T:isapk128av20 64.92 65.01 65.14 T:isapk128v20 81.43 81.45 81.49 romulust 124.98 126.39 127.16 T:isapxv20 138.82 138.89 139.02 T:elephant200v2 4796.57 4807.98 4813.44 T:elephant176v2 5648.19 5664.61 5667.27 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.85 0.85 0.86 T:aes128gcmv1 0.93 0.93 0.94 aes256gcmv1 6.22 6.23 6.24 ascon128av12 9.14 9.15 9.16 ascon128v12 9.16 9.17 9.19 ascon80pqv12 10.82 10.88 10.95 T:xoodyakround3 11.14 11.15 11.16 ascon128abi32v12 15.69 15.72 15.73 T:schwaemm256128v2 16.35 16.37 16.39 ascon128bi32v12 18.55 18.57 18.59 T:isapa128v20 20.72 20.75 20.77 T:schwaemm192192v2 21.99 22.41 22.47 T:schwaemm256256v2 22.16 22.61 23.12 T:schwaemm128128v2 23.41 23.49 23.66 T:isapa128av20 27.37 27.41 27.44 T:grain128aeadv2 29.68 29.80 29.86 romulusn 39.58 39.67 39.70 T:giftcofb128v1 40.05 40.12 40.21 T:isapk128av20 41.38 41.44 41.51 romulusm 41.48 41.50 41.53 T:tinyjambu128v2 41.53 41.56 41.58 romulust 46.42 46.44 46.46 T:tinyjambu192v2 47.11 47.14 47.17 T:tinyjambu256v2 50.01 50.15 50.23 T:isapk128v20 92.69 93.81 94.27 T:isapxv20 138.83 138.92 139.02 T:elephant200v2 4796.66 4808.25 4813.42 T:elephant176v2 5647.63 5664.08 5666.42 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.45 0.45 0.47 aes256gcmv1 0.45 0.46 0.47 T:aes128gcmv1 6.14 6.16 6.19 ascon128av12 7.52 7.55 7.61 T:xoodyakround3 9.14 9.15 9.16 ascon128v12 9.15 9.17 9.18 ascon80pqv12 10.93 10.95 10.96 ascon128abi32v12 15.62 15.66 15.70 T:schwaemm256128v2 16.44 16.51 16.54 ascon128bi32v12 18.51 18.53 18.59 T:isapa128v20 20.64 20.66 20.70 T:schwaemm192192v2 21.93 22.31 22.38 T:schwaemm256256v2 22.21 22.43 22.48 T:schwaemm128128v2 23.22 23.25 23.26 romulusm 23.24 23.28 23.30 romulusn 23.53 23.62 23.70 T:isapa128av20 27.06 27.12 27.19 T:grain128aeadv2 31.08 31.10 31.13 T:tinyjambu128v2 33.20 33.22 33.27 T:tinyjambu192v2 34.62 34.93 35.12 T:tinyjambu256v2 39.46 39.50 39.59 T:giftcofb128v1 39.76 39.90 39.98 T:isapk128av20 41.51 41.54 41.58 romulust 49.80 50.14 50.45 T:isapk128v20 92.97 93.01 93.07 T:elephant200v2 92.82 93.54 94.26 T:isapxv20 3176.82 3184.85 3192.16 T:elephant176v2 3765.45 3777.03 3781.01 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.45 0.46 0.46 T:aes128gcmv1 0.45 0.46 0.47 aes256gcmv1 6.22 6.24 6.25 ascon128av12 7.53 7.57 7.62 T:xoodyakround3 9.09 9.11 9.13 ascon128v12 9.14 9.16 9.20 ascon80pqv12 10.91 10.93 10.95 ascon128abi32v12 15.60 15.66 15.69 T:schwaemm256128v2 16.33 16.36 16.38 ascon128bi32v12 18.51 18.57 18.64 T:isapa128v20 20.64 20.66 20.70 T:schwaemm192192v2 21.95 22.31 22.38 T:schwaemm256256v2 22.21 22.42 22.47 T:schwaemm128128v2 23.21 23.23 23.26 romulusn 23.21 23.23 23.27 romulusm 23.56 23.65 23.78 T:isapa128av20 27.10 27.15 27.21 T:grain128aeadv2 31.06 31.10 31.14 T:tinyjambu128v2 31.43 31.52 31.56 T:tinyjambu256v2 33.21 33.24 33.27 T:tinyjambu192v2 39.46 39.50 39.59 T:giftcofb128v1 39.71 39.89 40.04 T:isapk128av20 41.52 41.54 41.58 romulust 49.79 50.12 50.52 T:isapk128v20 92.98 93.02 93.05 T:elephant200v2 92.81 93.47 94.73 T:isapxv20 3174.53 3184.89 3192.00 T:elephant176v2 3765.36 3777.59 3781.09 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.45 0.46 0.46 T:aes128gcmv1 0.46 0.46 0.46 aes256gcmv1 6.22 6.24 6.26 ascon128av12 7.52 7.57 7.62 T:xoodyakround3 9.09 9.11 9.13 ascon128v12 9.14 9.17 9.20 ascon80pqv12 10.92 10.93 10.94 ascon128abi32v12 15.59 15.66 15.69 T:schwaemm256128v2 16.33 16.36 16.38 ascon128bi32v12 18.54 18.56 18.61 T:isapa128v20 20.64 20.67 20.70 T:schwaemm192192v2 21.91 22.32 22.39 T:schwaemm256256v2 22.21 22.42 22.47 T:schwaemm128128v2 23.20 23.23 23.27 romulusm 23.21 23.25 23.27 romulusn 23.38 23.49 23.52 T:isapa128av20 27.11 27.17 27.23 T:grain128aeadv2 31.08 31.10 31.13 T:tinyjambu128v2 31.44 31.52 31.56 T:tinyjambu256v2 33.20 33.24 33.26 T:tinyjambu192v2 39.46 39.50 39.59 T:giftcofb128v1 39.66 39.78 40.04 T:isapk128av20 41.52 41.57 41.60 romulust 49.70 50.12 50.56 T:isapk128v20 93.00 93.03 93.09 T:elephant200v2 92.46 93.47 94.16 T:isapxv20 3174.62 3184.90 3192.02 T:elephant176v2 3765.37 3777.44 3781.11 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.94 0.94 0.95 T:aes128gcmv1 1.03 1.04 1.04 aes256gcmv1 6.32 6.33 6.35 ascon128av12 9.31 9.32 9.33 ascon128v12 9.32 9.33 9.34 ascon80pqv12 10.96 11.01 11.06 T:xoodyakround3 11.45 11.46 11.48 ascon128abi32v12 16.17 16.22 16.25 T:schwaemm256128v2 16.65 16.75 16.76 ascon128bi32v12 21.21 21.23 21.25 T:schwaemm192192v2 22.81 22.90 22.92 T:schwaemm128128v2 22.63 23.04 23.06 T:schwaemm256256v2 27.42 27.45 27.49 T:grain128aeadv2 30.08 30.13 30.14 romulusn 31.58 31.67 31.80 T:isapa128av20 39.87 39.94 39.97 T:giftcofb128v1 40.51 40.52 40.54 T:isapa128v20 41.70 41.71 41.74 romulusm 41.77 41.78 41.80 T:tinyjambu128v2 46.75 46.77 46.80 T:tinyjambu192v2 49.05 49.15 49.22 T:tinyjambu256v2 57.81 57.89 57.96 T:isapk128av20 82.63 82.66 82.69 romulust 114.23 114.36 114.57 T:isapk128v20 141.90 142.00 142.09 T:elephant200v2 203.88 204.70 204.89 T:isapxv20 4843.58 4852.53 4865.39 T:elephant176v2 5736.05 5756.67 5760.88 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.95 0.95 0.96 T:aes128gcmv1 1.04 1.04 1.04 aes256gcmv1 6.36 6.38 6.39 ascon128av12 9.27 9.28 9.29 ascon128v12 9.31 9.31 9.32 ascon80pqv12 10.92 10.96 11.01 T:xoodyakround3 11.40 11.41 11.42 ascon128abi32v12 16.20 16.23 16.26 T:schwaemm256128v2 16.68 16.69 16.70 ascon128bi32v12 21.21 21.22 21.25 T:schwaemm192192v2 22.80 22.89 22.92 T:schwaemm128128v2 22.61 23.03 23.06 T:schwaemm256256v2 27.68 27.71 27.74 T:grain128aeadv2 30.12 30.14 30.15 romulusn 31.51 31.65 31.75 T:isapa128av20 39.96 40.03 40.06 T:giftcofb128v1 40.53 40.54 40.56 T:isapa128v20 41.80 41.82 41.84 T:tinyjambu128v2 41.84 41.88 41.93 romulusm 46.77 46.79 46.83 T:tinyjambu192v2 47.48 47.50 47.54 T:tinyjambu256v2 57.84 57.88 58.00 T:isapk128av20 82.62 82.64 82.68 romulust 114.33 114.40 114.57 T:isapk128v20 141.76 141.84 141.91 T:elephant200v2 203.19 204.37 204.78 T:isapxv20 4843.84 4854.07 4864.97 T:elephant176v2 5734.45 5747.94 5760.69 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.94 0.95 0.95 T:aes128gcmv1 1.03 1.04 1.04 aes256gcmv1 6.36 6.37 6.38 ascon128av12 9.27 9.28 9.30 ascon128v12 9.30 9.31 9.32 ascon80pqv12 10.94 10.99 11.05 T:xoodyakround3 11.40 11.41 11.42 ascon128abi32v12 16.22 16.24 16.26 T:schwaemm256128v2 16.67 16.68 16.70 ascon128bi32v12 21.13 21.21 21.26 T:schwaemm192192v2 22.79 22.88 22.90 T:schwaemm128128v2 22.62 23.03 23.06 T:schwaemm256256v2 24.81 24.86 24.94 T:isapa128av20 25.08 25.09 25.09 T:isapa128v20 27.68 27.72 27.74 T:grain128aeadv2 29.94 30.04 30.14 romulusn 39.95 40.02 40.05 T:giftcofb128v1 41.80 41.82 41.84 T:tinyjambu128v2 41.84 41.88 41.93 romulusm 42.70 42.72 42.75 romulust 45.27 45.30 45.36 T:isapk128av20 46.77 46.79 46.81 T:tinyjambu192v2 47.46 47.49 47.54 T:tinyjambu256v2 76.31 76.38 76.45 T:isapk128v20 132.68 133.42 133.97 T:isapxv20 141.76 141.85 141.92 T:elephant200v2 4843.79 4854.42 4865.21 T:elephant176v2 5734.34 5747.39 5759.26 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.68 4.75 4.79 T:aes128gcmv1 5.13 5.20 5.24 aes256gcmv1 9.50 9.64 9.95 ascon128av12 12.23 12.30 12.43 ascon128v12 12.34 12.41 12.58 ascon80pqv12 15.87 15.96 16.20 T:xoodyakround3 17.20 17.27 17.45 ascon128abi32v12 23.64 23.78 24.01 ascon128bi32v12 26.38 26.47 26.61 T:schwaemm256128v2 29.13 29.24 29.37 T:schwaemm128128v2 34.01 34.23 34.48 T:schwaemm192192v2 34.55 34.76 35.04 T:grain128aeadv2 36.29 36.93 37.09 T:schwaemm256256v2 37.52 37.56 37.65 romulusn 47.62 47.71 47.88 T:giftcofb128v1 48.63 48.75 48.91 T:tinyjambu128v2 49.89 49.94 50.06 romulusm 54.45 54.60 54.87 T:tinyjambu192v2 55.40 55.57 55.74 T:tinyjambu256v2 85.21 85.34 85.62 T:isapa128av20 110.45 110.54 110.59 romulust 200.62 200.83 201.10 T:elephant200v2 225.20 228.51 230.71 T:isapk128av20 334.62 334.62 334.99 T:isapa128v20 1231.13 1232.61 1236.47 T:isapk128v20 1973.14 1976.92 1983.11 T:isapxv20 6044.89 6048.98 6065.12 T:elephant176v2 7670.33 7675.03 7701.83 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.52 4.56 4.61 T:aes128gcmv1 5.01 5.10 5.24 aes256gcmv1 9.60 9.68 9.86 ascon128av12 12.22 12.30 12.44 ascon128v12 12.36 12.43 12.67 ascon80pqv12 15.94 15.99 16.23 T:xoodyakround3 17.16 17.27 17.45 ascon128abi32v12 23.78 23.88 24.01 ascon128bi32v12 26.44 26.55 26.79 T:schwaemm256128v2 29.14 29.24 29.46 T:schwaemm128128v2 34.12 34.21 34.35 T:schwaemm192192v2 35.01 35.15 35.36 T:grain128aeadv2 36.22 36.84 37.06 T:schwaemm256256v2 37.66 37.72 37.79 romulusn 48.08 48.17 48.29 T:giftcofb128v1 48.80 48.94 49.11 T:tinyjambu128v2 52.05 52.27 52.35 romulusm 54.65 54.78 54.94 T:tinyjambu192v2 55.24 55.34 55.52 T:tinyjambu256v2 85.15 85.26 85.41 T:isapa128av20 110.35 110.42 110.48 romulust 200.45 200.65 200.80 T:elephant200v2 226.16 228.33 229.33 T:isapk128av20 335.66 335.82 335.94 T:isapa128v20 1232.10 1234.67 1237.65 T:isapk128v20 1975.60 1977.61 1979.41 T:isapxv20 6045.23 6048.76 6065.38 T:elephant176v2 7669.71 7675.26 7703.45 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.54 4.56 4.59 T:aes128gcmv1 4.98 5.05 5.12 aes256gcmv1 9.59 9.68 9.84 ascon128av12 12.23 12.29 12.40 ascon128v12 12.35 12.45 12.60 ascon80pqv12 15.92 15.98 16.04 T:xoodyakround3 17.19 17.28 17.42 ascon128abi32v12 23.74 23.87 23.96 ascon128bi32v12 26.40 26.49 26.58 T:schwaemm256128v2 29.07 29.18 29.31 T:schwaemm128128v2 34.09 34.18 34.29 T:schwaemm192192v2 34.88 35.02 35.21 T:grain128aeadv2 36.19 36.85 37.02 T:schwaemm256256v2 37.69 37.73 37.77 romulusn 48.07 48.13 48.24 T:giftcofb128v1 48.80 48.90 49.01 T:tinyjambu128v2 52.06 52.15 52.27 romulusm 54.57 54.65 54.79 T:tinyjambu192v2 54.85 55.15 55.38 T:isapa128av20 55.26 55.38 55.59 T:tinyjambu256v2 69.36 69.50 69.64 romulust 153.54 154.95 155.72 T:isapk128av20 174.57 174.60 174.90 T:isapa128v20 200.56 200.69 200.89 T:elephant200v2 667.07 669.17 671.07 T:isapk128v20 1032.48 1034.82 1036.49 T:isapxv20 6045.66 6055.82 6068.14 T:elephant176v2 7669.79 7673.63 7702.23 T:elephant160v2