VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20260217

[Page version: 20260315 18:26:49]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.71 1.72 1.73 T:aes128gcmv1 1.79 1.80 1.80 aes256gcmv1 5.64 5.66 5.67 ascon128av12 8.13 8.13 8.13 ascon80pqv12 8.38 8.38 8.41 ascon128v12 12.75 12.76 12.76 ascon128abi32v12 14.62 14.66 14.71 T:xoodyakround3 18.13 18.14 18.14 ascon128bi32v12 18.53 18.58 18.63 T:schwaemm256128v2 22.91 22.97 23.00 T:grain128aeadv2 23.79 23.88 23.95 T:schwaemm256256v2 24.27 24.35 24.67 T:schwaemm192192v2 29.45 29.68 29.97 T:schwaemm128128v2 31.04 31.04 31.04 T:isapa128v20 33.26 33.27 33.27 T:isapa128av20 37.19 37.23 37.27 romulusn 38.25 38.25 38.27 T:giftcofb128v1 58.76 58.76 58.76 T:tinyjambu128v2 59.62 59.66 59.70 romulusm 60.88 60.92 60.98 T:isapk128av20 64.39 64.40 64.40 T:tinyjambu192v2 71.27 71.27 71.27 T:tinyjambu256v2 85.61 85.69 85.74 T:isapk128v20 120.69 120.75 120.81 romulust 147.76 148.18 148.50 T:isapxv20 151.97 152.16 152.29 T:elephant200v2 6326.41 6360.65 6424.12 T:elephant176v2 7781.84 7790.83 7812.59 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.67 1.67 1.68 aes256gcmv1 1.71 1.72 1.73 T:aes128gcmv1 5.20 5.22 5.24 ascon128av12 7.63 7.63 7.63 ascon80pqv12 7.88 7.88 7.88 ascon128v12 12.50 12.51 12.51 ascon128abi32v12 14.50 14.55 14.60 T:xoodyakround3 18.20 18.25 18.30 T:schwaemm256128v2 18.38 18.38 18.38 ascon128bi32v12 22.93 22.96 23.00 T:grain128aeadv2 23.89 24.00 24.11 T:schwaemm256256v2 23.92 24.09 24.13 T:schwaemm192192v2 29.51 29.71 29.93 T:schwaemm128128v2 31.03 31.03 31.05 T:isapa128v20 33.27 33.27 33.28 T:isapa128av20 37.40 37.44 37.47 romulusn 38.25 38.25 38.27 T:giftcofb128v1 58.50 58.50 58.50 T:tinyjambu128v2 60.02 60.06 60.09 romulusm 60.85 60.93 61.16 T:isapk128av20 64.27 64.27 64.27 T:tinyjambu192v2 69.51 69.51 69.51 T:tinyjambu256v2 85.76 85.92 85.94 T:isapk128v20 120.67 120.75 120.82 romulust 147.54 148.33 148.83 T:isapxv20 152.09 152.23 152.33 T:elephant200v2 6361.64 6368.40 6385.40 T:elephant176v2 7785.48 7808.03 7834.48 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.67 1.68 1.68 aes256gcmv1 1.71 1.72 1.76 T:aes128gcmv1 5.20 5.22 5.24 ascon128av12 7.63 7.63 7.63 ascon80pqv12 7.88 7.88 7.88 ascon128v12 12.51 12.51 12.51 ascon128abi32v12 14.55 14.59 14.63 T:xoodyakround3 15.50 15.52 15.53 T:isapa128v20 18.22 18.27 18.33 T:schwaemm256128v2 18.38 18.38 18.38 ascon128bi32v12 22.38 22.38 22.40 T:isapa128av20 22.93 22.96 23.00 T:grain128aeadv2 23.79 23.89 23.98 T:schwaemm256256v2 23.97 24.03 24.12 T:schwaemm192192v2 29.65 29.87 30.11 T:schwaemm128128v2 37.41 37.45 37.47 romulusn 38.25 38.25 38.25 T:giftcofb128v1 40.91 40.96 41.03 romulust 43.60 43.66 43.73 T:isapk128av20 56.27 56.35 56.56 T:isapk128v20 58.50 58.50 58.50 T:tinyjambu128v2 60.00 60.08 60.14 romulusm 64.27 64.27 64.27 T:tinyjambu192v2 69.51 69.51 69.51 T:tinyjambu256v2 85.08 85.43 85.77 T:isapxv20 152.05 152.34 153.05 T:elephant200v2 6328.66 6359.77 6378.83 T:elephant176v2 7774.25 7783.41 7798.90 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.09 1.09 1.10 T:aes128gcmv1 1.20 1.21 1.21 aes256gcmv1 5.66 5.67 5.67 ascon128av12 7.82 7.82 7.82 ascon80pqv12 8.25 8.26 8.27 ascon128v12 11.29 11.31 11.33 T:xoodyakround3 12.38 12.38 12.39 ascon128abi32v12 18.20 18.20 18.20 ascon128bi32v12 18.30 18.36 18.39 T:schwaemm256128v2 22.94 22.96 22.98 T:grain128aeadv2 23.27 23.27 23.28 T:isapa128v20 23.75 23.80 23.85 T:schwaemm256256v2 24.60 24.91 25.20 T:schwaemm192192v2 27.26 27.26 27.27 T:isapa128av20 29.48 29.60 29.73 T:schwaemm128128v2 29.84 29.87 29.88 romulusn 38.27 38.28 38.30 T:giftcofb128v1 41.06 41.08 41.11 romulusm 46.88 46.88 46.89 T:tinyjambu128v2 47.69 47.77 47.82 T:isapk128av20 50.39 50.39 50.40 T:tinyjambu192v2 53.89 53.89 53.90 T:tinyjambu256v2 67.90 67.93 67.97 T:isapk128v20 80.92 80.95 81.00 romulust 114.23 114.33 114.43 T:elephant200v2 116.15 116.37 116.54 T:isapxv20 4718.20 4767.20 4776.97 T:elephant176v2 5848.18 5861.90 5874.31 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.09 1.09 1.09 T:aes128gcmv1 1.14 1.15 1.15 aes256gcmv1 5.28 5.29 5.30 ascon128av12 7.75 7.75 7.75 ascon80pqv12 7.82 7.82 7.82 ascon128v12 11.21 11.24 11.28 T:xoodyakround3 12.38 12.38 12.38 ascon128abi32v12 18.22 18.22 18.22 ascon128bi32v12 18.24 18.30 18.35 T:schwaemm256128v2 22.95 22.96 22.98 T:grain128aeadv2 23.27 23.27 23.28 T:isapa128v20 23.63 23.67 23.78 T:schwaemm256256v2 24.71 24.96 25.22 T:schwaemm192192v2 27.26 27.26 27.27 T:isapa128av20 29.45 29.63 29.79 T:schwaemm128128v2 29.96 29.99 30.01 romulusn 38.27 38.28 38.30 T:giftcofb128v1 41.25 41.28 41.31 romulusm 46.76 46.76 46.76 T:tinyjambu128v2 47.62 47.63 47.72 T:isapk128av20 50.40 50.40 50.40 T:tinyjambu192v2 52.89 52.89 52.89 T:tinyjambu256v2 67.85 67.92 67.93 T:isapk128v20 80.86 80.91 80.95 romulust 114.15 114.27 114.39 T:elephant200v2 116.03 116.25 116.54 T:isapxv20 4713.92 4746.29 4767.49 T:elephant176v2 5846.75 5858.81 5874.77 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.09 1.09 1.09 T:aes128gcmv1 1.14 1.15 1.15 aes256gcmv1 5.28 5.29 5.30 ascon128av12 7.75 7.75 7.75 ascon80pqv12 7.82 7.82 7.82 ascon128v12 11.24 11.26 11.28 T:xoodyakround3 12.38 12.38 12.38 ascon128abi32v12 15.51 15.51 15.52 T:isapa128v20 18.22 18.22 18.22 ascon128bi32v12 18.21 18.25 18.31 T:schwaemm256128v2 21.82 21.82 21.83 T:isapa128av20 22.93 22.95 22.97 T:grain128aeadv2 23.70 23.82 23.92 T:schwaemm256256v2 24.52 24.70 24.92 T:schwaemm192192v2 29.53 29.62 29.79 T:schwaemm128128v2 29.96 29.98 30.00 romulusn 38.27 38.28 38.29 T:giftcofb128v1 39.01 39.02 39.05 T:isapk128av20 40.96 41.02 41.11 romulust 41.25 41.27 41.30 romulusm 46.76 46.76 46.76 T:tinyjambu128v2 50.40 50.40 50.40 T:tinyjambu192v2 52.89 52.89 52.89 T:tinyjambu256v2 53.11 53.15 53.21 T:isapk128v20 84.66 84.94 85.21 T:isapxv20 114.16 114.28 114.36 T:elephant200v2 4753.43 4777.73 4789.73 T:elephant176v2 5828.59 5838.22 5851.69 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.45 0.46 0.47 T:aes128gcmv1 0.61 0.62 0.62 aes256gcmv1 5.69 5.69 5.69 ascon128av12 7.50 7.51 7.51 ascon80pqv12 7.91 7.95 7.99 T:xoodyakround3 8.13 8.13 8.14 ascon128v12 12.00 12.01 12.01 ascon128abi32v12 15.51 15.51 15.51 T:isapa128v20 18.16 18.21 18.26 T:schwaemm256128v2 18.26 18.26 18.26 ascon128bi32v12 21.25 21.26 21.26 T:isapa128av20 22.48 22.51 22.54 romulusn 22.48 22.51 22.55 romulusm 22.93 22.96 22.99 T:grain128aeadv2 23.49 23.58 23.67 T:schwaemm256256v2 25.41 25.80 26.24 T:schwaemm192192v2 29.32 29.55 29.78 T:schwaemm128128v2 34.32 34.35 34.38 T:isapk128av20 35.00 35.01 35.01 T:tinyjambu128v2 36.52 36.52 36.52 T:tinyjambu256v2 36.52 36.52 36.52 T:tinyjambu192v2 38.29 38.31 38.33 T:giftcofb128v1 40.97 41.02 41.07 romulust 49.98 49.99 50.01 T:isapk128v20 76.91 77.04 77.13 T:elephant200v2 84.49 84.66 84.91 T:isapxv20 3152.83 3154.97 3160.14 T:elephant176v2 3897.60 3900.52 3907.01 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.46 0.46 0.47 T:aes128gcmv1 0.61 0.61 0.62 aes256gcmv1 5.36 5.38 5.40 ascon128av12 7.75 7.75 7.75 ascon128v12 7.88 7.88 7.88 ascon80pqv12 7.91 7.96 8.03 T:xoodyakround3 12.25 12.26 12.26 ascon128abi32v12 15.51 15.51 15.52 T:isapa128v20 18.06 18.07 18.07 ascon128bi32v12 18.14 18.20 18.25 T:schwaemm256128v2 21.25 21.25 21.26 T:isapa128av20 22.48 22.51 22.55 romulusn 22.50 22.53 22.56 romulusm 22.89 22.93 22.97 T:grain128aeadv2 23.42 23.48 23.61 T:schwaemm256256v2 24.43 25.22 25.51 T:schwaemm192192v2 29.21 29.41 29.60 T:schwaemm128128v2 34.30 34.33 34.39 T:isapk128av20 35.01 35.01 35.01 T:tinyjambu128v2 36.26 36.26 36.26 T:tinyjambu256v2 36.52 36.52 36.52 T:tinyjambu192v2 38.29 38.31 38.33 T:giftcofb128v1 41.01 41.08 41.14 romulust 49.97 49.98 50.00 T:isapk128v20 76.92 77.01 77.10 T:elephant200v2 84.18 84.71 84.91 T:isapxv20 3137.32 3142.13 3147.32 T:elephant176v2 3897.16 3923.75 3932.74 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.45 0.46 0.47 T:aes128gcmv1 0.61 0.61 0.62 aes256gcmv1 5.37 5.38 5.40 ascon128av12 7.75 7.75 7.75 ascon128v12 7.88 7.88 7.88 ascon80pqv12 7.94 7.98 8.05 T:xoodyakround3 12.25 12.25 12.26 ascon128abi32v12 15.51 15.51 15.52 T:isapa128v20 18.06 18.06 18.06 ascon128bi32v12 18.13 18.19 18.23 T:schwaemm256128v2 21.25 21.25 21.26 T:isapa128av20 22.47 22.51 22.54 romulusn 22.48 22.52 22.56 romulusm 22.88 22.93 22.98 T:grain128aeadv2 23.53 23.64 23.68 T:schwaemm256256v2 25.25 25.71 26.07 T:schwaemm192192v2 29.26 29.49 29.73 T:schwaemm128128v2 34.29 34.31 34.33 T:isapk128av20 35.01 35.01 35.01 T:tinyjambu128v2 36.26 36.26 36.26 T:tinyjambu256v2 36.52 36.52 36.52 T:tinyjambu192v2 38.30 38.32 38.34 T:giftcofb128v1 41.00 41.08 41.13 romulust 49.97 50.01 50.05 T:isapk128v20 76.92 77.03 77.11 T:elephant200v2 84.41 84.76 85.07 T:isapxv20 3115.90 3145.57 3155.32 T:elephant176v2 3902.13 3903.69 3922.18 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.20 1.20 1.20 T:aes128gcmv1 1.28 1.29 1.29 aes256gcmv1 5.81 5.81 5.81 ascon128av12 7.94 7.94 7.95 ascon80pqv12 8.38 8.38 8.40 ascon128v12 11.40 11.42 11.44 T:xoodyakround3 12.67 12.67 12.68 ascon128abi32v12 18.61 18.61 18.62 ascon128bi32v12 18.91 18.94 18.99 T:schwaemm256128v2 23.31 23.32 23.34 T:grain128aeadv2 24.30 24.36 24.44 T:schwaemm256256v2 25.13 25.35 25.61 T:schwaemm192192v2 29.49 29.49 29.50 T:isapa128av20 29.92 30.06 30.17 T:schwaemm128128v2 30.10 30.12 30.14 romulusn 34.15 34.15 34.16 T:isapa128v20 38.60 38.61 38.62 T:giftcofb128v1 41.33 41.35 41.37 romulusm 47.23 47.23 47.24 T:tinyjambu128v2 50.81 50.81 50.82 T:tinyjambu192v2 53.16 53.21 53.25 T:isapk128av20 54.27 54.27 54.28 T:tinyjambu256v2 82.11 82.15 82.19 romulust 108.21 108.23 108.24 T:isapk128v20 116.52 116.66 116.75 T:elephant200v2 189.49 189.65 189.86 T:isapxv20 4779.70 4820.68 4827.76 T:elephant176v2 5918.15 5920.75 5942.84 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.20 1.20 1.23 T:aes128gcmv1 1.23 1.23 1.23 aes256gcmv1 5.43 5.44 5.44 ascon128av12 7.87 7.87 7.87 ascon80pqv12 7.93 7.93 7.93 ascon128v12 11.34 11.34 11.36 T:xoodyakround3 12.66 12.67 12.67 ascon128abi32v12 18.63 18.63 18.63 ascon128bi32v12 18.76 18.81 18.87 T:schwaemm256128v2 23.30 23.32 23.33 T:grain128aeadv2 24.29 24.35 24.47 T:schwaemm256256v2 25.07 25.51 25.72 T:schwaemm192192v2 29.49 29.49 29.49 T:isapa128av20 29.96 30.08 30.21 T:schwaemm128128v2 30.22 30.24 30.26 romulusn 34.15 34.15 34.15 T:isapa128v20 38.62 38.63 38.64 T:giftcofb128v1 41.57 41.60 41.63 romulusm 47.10 47.10 47.10 T:tinyjambu128v2 50.80 50.80 50.80 T:tinyjambu192v2 53.12 53.15 53.19 T:isapk128av20 53.28 53.28 53.28 T:tinyjambu256v2 82.17 82.20 82.25 romulust 108.23 108.32 108.42 T:isapk128v20 116.66 116.72 116.78 T:elephant200v2 189.37 189.58 189.83 T:isapxv20 4781.04 4784.16 4802.36 T:elephant176v2 5907.82 5917.94 5919.77 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.20 1.20 1.22 T:aes128gcmv1 1.22 1.23 1.23 aes256gcmv1 5.43 5.44 5.44 ascon128av12 7.87 7.87 7.87 ascon80pqv12 7.93 7.93 7.93 ascon128v12 11.37 11.38 11.40 T:xoodyakround3 12.66 12.66 12.67 ascon128abi32v12 18.63 18.63 18.64 ascon128bi32v12 18.76 18.79 18.86 T:schwaemm256128v2 21.04 21.04 21.04 T:isapa128v20 23.07 23.07 23.07 T:isapa128av20 23.29 23.31 23.32 T:grain128aeadv2 24.28 24.33 24.45 T:schwaemm256256v2 25.50 25.67 25.74 T:schwaemm192192v2 29.94 30.10 30.24 T:schwaemm128128v2 30.23 30.25 30.27 romulusn 38.62 38.63 38.63 T:giftcofb128v1 41.58 41.59 41.62 romulusm 42.23 42.27 42.31 romulust 42.40 42.41 42.43 T:isapk128av20 47.10 47.10 47.10 T:tinyjambu128v2 50.80 50.80 50.80 T:tinyjambu192v2 53.28 53.28 53.28 T:tinyjambu256v2 74.04 74.08 74.10 T:isapk128v20 116.53 116.64 116.70 T:elephant200v2 122.52 122.62 122.73 T:isapxv20 4749.10 4784.64 4796.43 T:elephant176v2 5942.38 5966.13 5982.94 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.51 4.56 4.60 aes256gcmv1 5.53 5.57 5.61 T:aes128gcmv1 9.10 9.25 9.26 ascon128av12 10.61 10.61 10.63 ascon80pqv12 11.08 11.09 11.14 ascon128v12 16.44 16.60 16.67 T:xoodyakround3 19.39 19.40 19.43 ascon128abi32v12 27.99 28.00 28.01 ascon128bi32v12 31.29 31.48 31.67 T:schwaemm256128v2 31.90 32.21 32.39 T:grain128aeadv2 35.87 35.95 36.05 romulusn 38.95 39.20 39.42 T:schwaemm256256v2 39.43 40.03 40.54 T:schwaemm128128v2 39.98 40.18 40.43 T:schwaemm192192v2 45.97 46.03 46.35 T:giftcofb128v1 47.19 47.31 47.48 romulusm 55.13 55.15 55.15 T:tinyjambu128v2 60.42 60.42 60.44 T:tinyjambu192v2 62.90 62.90 62.90 T:tinyjambu256v2 80.66 80.70 80.74 T:isapa128av20 111.18 111.48 111.80 romulust 164.41 164.96 165.49 T:elephant200v2 170.82 170.83 170.86 T:isapk128av20 284.10 284.10 284.18 T:isapa128v20 1023.27 1023.34 1023.50 T:isapk128v20 1848.22 1853.35 1857.03 T:isapxv20 5945.79 5948.02 5984.27 T:elephant176v2 7898.22 7924.48 7934.19 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.19 4.22 4.26 aes256gcmv1 5.25 5.30 5.34 T:aes128gcmv1 8.87 9.08 9.10 ascon128av12 10.62 10.62 10.69 ascon80pqv12 10.64 10.64 10.68 ascon128v12 16.61 16.71 16.82 T:xoodyakround3 19.32 19.33 19.41 ascon128abi32v12 27.97 28.01 28.03 ascon128bi32v12 30.83 30.98 31.20 T:schwaemm256128v2 31.68 31.84 32.00 T:grain128aeadv2 36.13 36.26 36.39 romulusn 39.03 39.29 39.52 T:schwaemm256256v2 39.72 40.21 40.86 T:schwaemm128128v2 40.03 40.29 40.59 T:schwaemm192192v2 46.44 46.45 46.80 T:giftcofb128v1 48.59 48.75 48.90 romulusm 54.98 55.00 55.00 T:tinyjambu128v2 60.06 60.06 60.07 T:tinyjambu192v2 62.20 62.20 62.22 T:tinyjambu256v2 80.59 80.62 80.65 T:isapa128av20 111.29 111.66 111.89 romulust 164.31 164.71 165.03 T:elephant200v2 170.83 170.90 170.94 T:isapk128av20 284.08 284.10 284.10 T:isapa128v20 1023.35 1023.49 1023.83 T:isapk128v20 1856.77 1858.59 1860.39 T:isapxv20 5922.14 5965.36 5966.68 T:elephant176v2 7906.99 7919.98 7932.15 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.21 4.23 4.25 aes256gcmv1 5.25 5.30 5.35 T:aes128gcmv1 8.87 9.09 9.13 ascon128av12 10.62 10.62 10.62 ascon80pqv12 10.64 10.64 10.64 ascon128v12 16.64 16.72 16.88 T:xoodyakround3 19.31 19.32 19.34 ascon128abi32v12 28.02 28.04 28.06 ascon128bi32v12 30.93 31.14 31.31 T:schwaemm256128v2 31.57 31.83 31.99 T:grain128aeadv2 36.15 36.29 36.40 romulusn 38.88 39.12 39.44 T:schwaemm256256v2 39.98 40.19 40.62 T:schwaemm192192v2 39.75 40.33 40.76 T:schwaemm128128v2 46.54 46.58 46.72 T:giftcofb128v1 48.68 48.84 48.93 romulusm 51.68 51.70 51.74 T:isapa128av20 54.97 54.99 54.99 T:tinyjambu128v2 60.06 60.09 60.09 T:tinyjambu192v2 62.20 62.20 62.20 T:tinyjambu256v2 70.78 71.01 71.41 romulust 112.59 112.60 112.65 T:isapk128av20 147.97 147.97 148.21 T:isapa128v20 164.33 164.82 165.14 T:elephant200v2 544.64 544.72 544.99 T:isapk128v20 968.11 970.26 973.33 T:isapxv20 5922.87 5952.29 5965.64 T:elephant176v2 7905.81 7917.51 7926.91 T:elephant160v2