VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20260217

[Page version: 20260405 18:05:21]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.53 1.54 1.55 T:aes128gcmv1 1.75 1.77 1.78 aes256gcmv1 6.59 6.59 6.61 ascon128av12 9.01 9.03 9.04 ascon128v12 9.04 9.07 9.10 ascon80pqv12 11.21 11.23 11.28 ascon128abi32v12 15.34 15.47 15.69 T:xoodyakround3 16.89 16.90 16.90 ascon128bi32v12 19.45 19.46 19.48 T:schwaemm256128v2 24.04 24.11 24.14 T:schwaemm256256v2 25.70 25.79 25.80 T:schwaemm192192v2 27.04 27.10 27.26 T:grain128aeadv2 27.74 27.77 27.78 T:schwaemm128128v2 34.08 34.23 34.30 T:isapa128av20 34.51 34.53 34.67 T:isapa128v20 35.18 35.27 35.34 romulusn 40.53 40.57 40.59 T:giftcofb128v1 56.39 56.40 56.42 T:tinyjambu128v2 57.05 57.31 57.47 romulusm 66.51 66.57 66.61 T:tinyjambu192v2 70.99 71.07 71.08 T:tinyjambu256v2 72.45 72.85 76.05 T:isapk128av20 96.62 96.86 98.75 T:isapk128v20 115.58 115.59 116.57 romulust 159.70 161.64 165.17 T:isapxv20 168.56 168.76 168.89 T:elephant200v2 6948.10 6951.90 6960.85 T:elephant176v2 7834.98 7837.17 7840.01 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.68 1.69 1.70 T:aes128gcmv1 1.73 1.74 1.75 aes256gcmv1 6.07 6.08 6.08 ascon128av12 8.91 8.92 8.93 ascon80pqv12 9.11 9.12 9.14 ascon128v12 11.55 11.56 11.58 ascon128abi32v12 15.04 15.20 15.43 T:xoodyakround3 16.35 16.39 16.54 ascon128bi32v12 19.46 19.55 19.85 T:schwaemm256128v2 24.02 24.09 24.12 T:schwaemm256256v2 25.88 25.93 25.99 T:schwaemm192192v2 27.29 27.40 27.51 T:grain128aeadv2 27.79 27.82 27.86 T:schwaemm128128v2 34.25 34.30 34.36 T:isapa128av20 34.55 34.78 35.10 T:isapa128v20 35.18 35.19 35.21 romulusn 40.55 40.60 40.64 T:giftcofb128v1 56.53 56.53 56.53 T:tinyjambu128v2 57.48 57.77 57.82 romulusm 66.13 66.14 66.15 T:tinyjambu192v2 71.16 71.16 71.18 T:tinyjambu256v2 72.58 72.97 76.74 T:isapk128av20 96.65 96.87 98.74 T:isapk128v20 115.58 115.59 115.95 romulust 159.68 161.69 168.40 T:isapxv20 168.53 168.70 169.02 T:elephant200v2 6949.27 6954.72 6958.24 T:elephant176v2 7818.47 7836.79 7842.43 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.67 1.68 1.70 T:aes128gcmv1 1.73 1.74 1.75 aes256gcmv1 6.06 6.07 6.07 ascon128av12 8.91 8.93 8.93 ascon80pqv12 9.10 9.11 9.13 ascon128v12 11.55 11.57 11.58 ascon128abi32v12 15.19 15.27 15.49 T:xoodyakround3 16.33 16.40 16.54 ascon128bi32v12 17.26 17.26 17.38 T:isapa128v20 19.53 19.54 19.56 T:schwaemm256128v2 22.66 22.86 22.92 T:isapa128av20 24.01 24.08 24.12 T:schwaemm256256v2 25.87 25.95 25.98 T:schwaemm192192v2 27.31 27.45 27.55 T:grain128aeadv2 27.80 27.84 27.89 T:schwaemm128128v2 35.21 35.34 35.35 romulusn 38.86 38.87 38.88 romulust 40.54 40.58 40.63 T:giftcofb128v1 50.43 50.69 54.30 T:isapk128av20 56.53 56.53 56.54 T:tinyjambu128v2 57.52 57.76 57.82 romulusm 63.28 63.38 64.22 T:isapk128v20 66.12 66.13 66.14 T:tinyjambu192v2 71.16 71.17 71.19 T:tinyjambu256v2 94.40 95.17 96.51 T:isapxv20 168.47 168.58 168.75 T:elephant200v2 6953.29 6956.52 6960.50 T:elephant176v2 7832.88 7837.49 7847.55 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.03 1.03 1.04 T:aes128gcmv1 1.15 1.16 1.16 aes256gcmv1 6.26 6.30 6.30 ascon128av12 8.81 8.85 8.95 ascon80pqv12 8.99 9.00 9.00 ascon128v12 11.05 11.07 11.11 ascon128abi32v12 11.77 11.85 11.91 T:xoodyakround3 16.56 16.57 16.58 ascon128bi32v12 19.31 19.39 20.04 T:schwaemm256128v2 23.99 24.00 24.02 T:schwaemm256256v2 25.66 25.66 25.67 T:schwaemm192192v2 26.12 26.19 26.38 T:isapa128v20 26.99 27.11 27.24 T:grain128aeadv2 27.71 27.72 27.74 T:schwaemm128128v2 28.52 28.62 28.67 T:isapa128av20 28.51 28.62 28.75 romulusn 39.52 39.71 39.91 romulusm 40.51 40.53 40.55 T:giftcofb128v1 44.73 44.73 44.75 T:tinyjambu128v2 51.73 51.73 51.75 T:tinyjambu192v2 53.33 53.35 53.37 T:tinyjambu256v2 58.11 58.32 60.57 T:isapk128av20 75.42 75.54 76.56 T:isapk128v20 77.22 77.23 77.25 romulust 126.64 126.83 127.05 T:elephant200v2 127.25 128.29 131.08 T:isapxv20 5191.69 5195.97 5200.62 T:elephant176v2 5872.64 5875.22 5884.87 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.10 1.11 1.11 T:aes128gcmv1 1.14 1.14 1.15 aes256gcmv1 5.99 6.00 6.01 ascon128av12 8.88 8.89 8.91 ascon80pqv12 9.00 9.02 9.02 ascon128v12 11.25 11.26 11.27 ascon128abi32v12 11.64 11.74 11.84 T:xoodyakround3 16.46 16.47 16.48 ascon128bi32v12 19.43 19.45 19.49 T:schwaemm256128v2 23.92 23.99 24.01 T:schwaemm256256v2 25.68 25.83 25.92 T:schwaemm192192v2 26.08 26.18 26.26 T:isapa128v20 27.36 27.45 27.57 T:grain128aeadv2 27.76 27.79 28.14 T:schwaemm128128v2 28.65 28.66 28.67 T:isapa128av20 28.58 28.67 28.72 romulusn 39.65 39.92 40.08 romulusm 40.55 40.58 40.63 T:giftcofb128v1 44.75 44.78 44.80 T:tinyjambu128v2 51.45 51.48 51.49 T:tinyjambu192v2 53.38 53.46 53.53 T:tinyjambu256v2 58.20 58.48 60.40 T:isapk128av20 75.43 75.59 76.53 T:isapk128v20 77.23 77.24 77.25 romulust 126.64 126.85 127.01 T:elephant200v2 128.21 129.80 131.02 T:isapxv20 5191.94 5198.60 5208.85 T:elephant176v2 5872.79 5876.66 5885.99 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.10 1.11 1.11 T:aes128gcmv1 1.14 1.14 1.15 aes256gcmv1 6.00 6.01 6.01 ascon128av12 8.88 8.89 8.90 ascon80pqv12 9.01 9.02 9.02 ascon128v12 11.26 11.26 11.27 ascon128abi32v12 11.60 11.81 11.89 T:xoodyakround3 16.47 16.48 16.49 ascon128bi32v12 17.48 17.56 17.59 T:isapa128v20 19.43 19.44 19.45 T:schwaemm256128v2 22.98 22.99 23.00 T:isapa128av20 23.91 23.96 24.00 T:schwaemm256256v2 25.69 25.91 25.95 T:schwaemm192192v2 27.17 27.25 27.35 T:grain128aeadv2 27.73 27.75 27.78 T:schwaemm128128v2 28.64 28.69 28.80 romulusn 38.87 38.88 38.89 romulust 39.63 39.87 40.03 romulusm 40.55 40.56 40.58 T:giftcofb128v1 44.74 44.77 44.81 T:tinyjambu128v2 47.10 47.25 49.23 T:isapk128av20 51.46 51.49 51.50 T:tinyjambu192v2 53.39 53.41 53.45 T:tinyjambu256v2 58.77 58.83 59.23 T:isapk128v20 94.86 95.17 95.80 T:isapxv20 126.76 126.78 127.00 T:elephant200v2 5189.56 5193.82 5198.36 T:elephant176v2 5872.61 5875.18 5888.23 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.53 0.53 0.55 T:aes128gcmv1 0.56 0.57 0.57 aes256gcmv1 5.98 6.03 6.04 ascon128av12 7.98 8.18 8.33 T:xoodyakround3 8.76 8.79 8.82 ascon80pqv12 8.94 8.96 8.97 ascon128v12 10.91 10.92 10.93 ascon128abi32v12 16.25 16.25 16.26 ascon128bi32v12 17.20 17.79 17.88 T:isapa128v20 19.31 19.32 19.32 T:schwaemm256128v2 21.91 22.05 22.23 romulusm 21.98 22.10 22.22 romulusn 22.97 22.98 23.00 T:isapa128av20 23.74 23.84 23.90 T:schwaemm256256v2 25.54 25.55 25.75 T:schwaemm192192v2 27.10 27.17 27.22 T:grain128aeadv2 27.70 27.74 27.75 T:schwaemm128128v2 32.94 32.97 32.97 T:tinyjambu128v2 35.64 35.65 35.67 T:tinyjambu256v2 37.05 37.08 37.08 T:tinyjambu192v2 38.86 38.87 38.87 romulust 40.50 40.52 40.57 T:giftcofb128v1 43.61 43.91 44.72 T:isapk128av20 54.25 54.28 54.31 T:isapk128v20 85.47 85.77 85.80 T:elephant200v2 94.41 95.29 95.88 T:isapxv20 3429.13 3432.07 3435.60 T:elephant176v2 3915.66 3925.81 3929.51 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.52 0.53 0.55 T:aes128gcmv1 0.54 0.55 0.56 aes256gcmv1 5.91 5.93 5.93 ascon128av12 8.03 8.10 8.14 T:xoodyakround3 8.87 8.88 8.89 ascon80pqv12 8.86 8.88 8.90 ascon128v12 10.94 10.95 10.95 ascon128abi32v12 16.22 16.23 16.24 ascon128bi32v12 17.26 17.85 18.14 T:isapa128v20 19.22 19.25 19.31 T:schwaemm256128v2 21.95 22.05 22.30 romulusm 21.91 22.06 22.14 romulusn 22.92 22.92 23.04 T:isapa128av20 23.78 23.87 23.93 T:schwaemm256256v2 25.53 25.54 25.54 T:schwaemm192192v2 26.82 26.97 27.21 T:grain128aeadv2 27.70 27.73 27.75 T:schwaemm128128v2 32.96 33.01 33.03 T:tinyjambu128v2 35.63 35.64 35.65 T:tinyjambu256v2 36.69 36.82 36.84 T:tinyjambu192v2 38.86 38.87 38.88 romulust 40.50 40.53 40.59 T:giftcofb128v1 43.61 43.79 43.87 T:isapk128av20 54.22 54.27 54.33 T:isapk128v20 85.21 85.52 85.74 T:elephant200v2 94.43 95.15 95.69 T:isapxv20 3430.27 3433.77 3439.35 T:elephant176v2 3912.43 3915.11 3917.43 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.52 0.53 0.54 T:aes128gcmv1 0.54 0.55 0.55 aes256gcmv1 5.92 5.93 5.94 ascon128av12 8.01 8.15 8.28 T:xoodyakround3 8.86 8.88 8.88 ascon80pqv12 8.87 8.88 8.90 ascon128v12 10.94 10.94 10.95 ascon128abi32v12 16.22 16.23 16.25 ascon128bi32v12 17.34 17.82 18.17 T:isapa128v20 19.29 19.31 19.32 T:schwaemm256128v2 22.01 22.04 22.25 romulusn 21.87 22.07 22.20 romulusm 23.05 23.06 23.07 T:isapa128av20 23.79 23.86 23.92 T:schwaemm256256v2 25.53 25.54 25.55 T:schwaemm192192v2 27.16 27.38 27.56 T:grain128aeadv2 27.71 27.74 27.78 T:schwaemm128128v2 32.98 33.05 33.06 T:tinyjambu128v2 35.61 35.62 35.65 T:tinyjambu256v2 36.80 36.82 36.84 T:tinyjambu192v2 38.86 38.87 38.88 romulust 40.51 40.53 40.56 T:giftcofb128v1 43.71 43.94 44.61 T:isapk128av20 54.24 54.28 54.32 T:isapk128v20 85.45 85.74 85.81 T:elephant200v2 94.60 95.61 95.84 T:isapxv20 3430.91 3433.63 3437.58 T:elephant176v2 3913.49 3919.80 3925.52 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.14 1.15 1.15 T:aes128gcmv1 1.29 1.29 1.30 aes256gcmv1 6.46 6.46 6.47 ascon128av12 8.98 9.00 9.09 ascon80pqv12 9.14 9.14 9.14 ascon128v12 11.42 11.43 11.47 ascon128abi32v12 11.93 12.00 12.13 T:xoodyakround3 16.87 16.87 16.88 ascon128bi32v12 19.95 19.96 19.98 T:schwaemm256128v2 24.61 24.63 24.65 T:schwaemm256256v2 26.23 26.24 26.24 T:schwaemm192192v2 27.37 27.44 27.51 T:grain128aeadv2 28.09 28.11 28.13 T:schwaemm128128v2 28.79 28.85 29.04 romulusn 30.96 31.05 31.08 T:isapa128av20 38.39 38.39 38.46 T:isapa128v20 39.82 40.08 40.17 romulusm 40.89 40.91 40.93 T:giftcofb128v1 45.11 45.11 45.14 T:tinyjambu128v2 52.13 52.15 52.19 T:tinyjambu192v2 53.79 53.82 53.83 T:tinyjambu256v2 64.70 64.78 66.66 T:isapk128av20 78.41 78.41 78.43 romulust 126.71 126.80 127.74 T:isapk128v20 129.46 129.63 129.89 T:elephant200v2 207.39 207.70 208.18 T:isapxv20 5230.54 5231.98 5233.84 T:elephant176v2 5938.91 5941.83 5952.48 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.22 1.23 1.23 T:aes128gcmv1 1.27 1.28 1.28 aes256gcmv1 6.16 6.16 6.17 ascon128av12 9.05 9.05 9.05 ascon80pqv12 9.13 9.14 9.15 ascon128v12 11.56 11.56 11.56 ascon128abi32v12 11.79 11.83 11.98 T:xoodyakround3 16.84 16.84 16.84 ascon128bi32v12 19.98 20.00 20.03 T:schwaemm256128v2 24.55 24.61 24.62 T:schwaemm256256v2 26.22 26.24 26.46 T:schwaemm192192v2 27.57 27.68 27.82 T:grain128aeadv2 28.13 28.14 28.17 T:schwaemm128128v2 28.82 28.88 28.97 romulusn 31.07 31.08 31.15 T:isapa128av20 38.26 38.27 38.36 T:isapa128v20 39.96 40.16 40.31 romulusm 40.93 40.96 40.99 T:giftcofb128v1 45.10 45.12 45.15 T:tinyjambu128v2 51.92 51.92 51.92 T:tinyjambu192v2 53.81 53.87 53.91 T:tinyjambu256v2 64.79 64.85 66.00 T:isapk128av20 78.41 78.41 78.43 romulust 126.71 126.80 127.70 T:isapk128v20 129.42 129.55 129.62 T:elephant200v2 207.98 209.03 210.49 T:isapxv20 5229.82 5232.80 5236.23 T:elephant176v2 5938.59 5940.41 5944.96 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.22 1.23 1.23 T:aes128gcmv1 1.27 1.28 1.28 aes256gcmv1 6.16 6.16 6.17 ascon128av12 9.05 9.05 9.05 ascon80pqv12 9.15 9.15 9.15 ascon128v12 11.55 11.55 11.56 ascon128abi32v12 11.78 11.88 12.01 T:xoodyakround3 16.84 16.85 16.85 ascon128bi32v12 19.98 19.99 20.07 T:schwaemm256128v2 23.75 23.75 23.75 T:isapa128v20 24.32 24.35 24.35 T:isapa128av20 24.57 24.62 24.65 T:schwaemm256256v2 26.23 26.27 26.50 T:schwaemm192192v2 27.50 27.56 27.61 T:grain128aeadv2 28.14 28.15 28.16 T:schwaemm128128v2 28.85 28.92 28.96 romulusn 40.00 40.00 40.01 romulust 39.99 40.18 40.32 romulusm 40.93 40.97 40.98 T:giftcofb128v1 45.11 45.13 45.13 T:tinyjambu128v2 51.02 51.06 53.00 T:isapk128av20 51.88 51.90 51.91 T:tinyjambu192v2 53.81 53.85 53.89 T:tinyjambu256v2 85.09 85.15 85.50 T:isapk128v20 129.45 129.58 129.69 T:elephant200v2 136.03 136.06 136.19 T:isapxv20 5229.32 5232.52 5235.77 T:elephant176v2 5939.21 5945.00 5953.96 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.83 5.84 5.91 T:aes128gcmv1 5.92 5.99 6.05 aes256gcmv1 9.79 9.84 10.11 ascon128av12 12.30 12.31 12.58 ascon80pqv12 12.46 12.49 12.56 ascon128v12 17.59 17.77 18.02 T:xoodyakround3 19.09 19.16 19.42 ascon128abi32v12 23.48 23.48 24.07 ascon128bi32v12 32.46 32.50 32.79 T:schwaemm256128v2 34.68 34.75 34.91 romulusn 35.06 35.21 35.42 T:grain128aeadv2 36.84 37.04 37.45 T:schwaemm128128v2 39.11 39.18 39.25 T:schwaemm256256v2 42.73 42.95 42.99 T:schwaemm192192v2 45.68 45.90 46.11 romulusm 49.54 49.77 49.78 T:giftcofb128v1 53.29 53.36 53.36 T:tinyjambu128v2 61.62 61.65 61.68 T:tinyjambu192v2 63.46 63.48 63.58 T:tinyjambu256v2 86.30 86.47 86.81 T:isapa128av20 105.38 105.52 105.97 romulust 184.01 184.12 184.32 T:elephant200v2 199.90 200.91 201.50 T:isapk128av20 318.34 318.39 319.63 T:isapa128v20 1288.65 1289.20 1289.67 T:isapk128v20 2001.48 2016.29 2031.56 T:isapxv20 6505.05 6508.61 6514.07 T:elephant176v2 7947.26 7949.14 7956.40 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.86 5.88 5.93 T:aes128gcmv1 5.94 5.95 5.95 aes256gcmv1 9.37 9.66 10.04 ascon128av12 12.42 12.44 12.68 ascon80pqv12 12.42 12.50 12.69 ascon128v12 17.78 17.92 18.09 T:xoodyakround3 18.24 18.29 18.65 ascon128abi32v12 25.07 25.18 25.61 ascon128bi32v12 32.77 32.89 32.91 T:schwaemm256128v2 34.63 34.71 34.79 romulusn 35.25 35.33 35.48 T:grain128aeadv2 37.12 37.26 37.40 T:schwaemm128128v2 39.07 39.17 39.21 T:schwaemm256256v2 42.75 43.15 43.17 T:schwaemm192192v2 47.03 47.26 47.43 romulusm 49.97 50.06 50.12 T:giftcofb128v1 53.49 53.49 53.50 T:tinyjambu128v2 61.45 61.51 61.68 T:tinyjambu192v2 63.35 63.35 63.35 T:tinyjambu256v2 86.57 86.61 86.63 T:isapa128av20 105.42 105.54 105.62 romulust 184.04 184.26 184.42 T:elephant200v2 199.51 199.75 201.31 T:isapk128av20 318.38 318.52 318.53 T:isapa128v20 1288.65 1289.12 1289.78 T:isapk128v20 2015.55 2019.72 2026.15 T:isapxv20 6506.71 6512.34 6524.45 T:elephant176v2 7949.25 7955.45 7974.50 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.86 5.87 5.89 aes256gcmv1 5.85 5.87 5.90 T:aes128gcmv1 9.37 9.65 9.88 ascon128av12 12.41 12.44 12.53 ascon80pqv12 12.43 12.50 12.57 ascon128v12 17.99 18.14 18.27 T:xoodyakround3 18.23 18.29 18.33 ascon128abi32v12 25.07 25.10 25.23 ascon128bi32v12 32.69 32.90 32.95 T:schwaemm256128v2 34.42 34.55 34.61 romulusn 35.20 35.32 35.34 T:grain128aeadv2 37.09 37.18 37.45 T:schwaemm128128v2 39.05 39.16 39.21 T:schwaemm256256v2 42.80 43.20 43.20 T:schwaemm192192v2 46.98 47.28 47.34 romulusm 49.73 49.93 50.13 T:giftcofb128v1 53.48 53.48 53.48 T:tinyjambu128v2 55.55 55.71 55.79 T:isapa128av20 61.44 61.50 61.50 T:tinyjambu192v2 63.31 63.31 63.32 T:tinyjambu256v2 65.82 65.95 66.08 romulust 127.57 127.81 129.66 T:isapk128av20 161.61 162.74 168.32 T:isapa128v20 183.92 184.24 184.36 T:elephant200v2 677.03 677.23 677.47 T:isapk128v20 1052.27 1060.09 1066.55 T:isapxv20 6503.96 6510.58 6530.17 T:elephant176v2 7946.43 7948.22 7952.93 T:elephant160v2