VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Raptor Cove (b06a2-40); 2024 Intel Core 5 210H, P cores; 4 x 2200MHz; freshwrap,big, supercop-20260330

[Page version: 20260503 04:13:14]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.94 0.95 0.96 T:aes128gcmv1 1.05 1.07 1.08 aes256gcmv1 6.68 6.78 6.88 ascon128av12 9.97 10.14 10.22 ascon80pqv12 10.08 10.16 10.21 ascon128v12 12.40 12.49 12.57 T:schwaemm256128v2 12.79 12.83 12.88 ascon128abi32v12 14.06 14.12 14.18 T:xoodyakround3 16.50 16.61 16.69 T:schwaemm192192v2 17.16 17.23 17.32 T:schwaemm256256v2 18.23 18.27 18.29 T:schwaemm128128v2 19.08 19.15 19.27 ascon128bi32v12 23.59 23.62 23.66 T:grain128aeadv2 32.87 32.99 33.05 T:giftcofb128v1 38.16 38.32 38.53 T:isapa128v20 38.84 38.88 38.94 romulusn 38.92 39.87 40.64 T:isapa128av20 47.55 47.64 47.80 T:isapk128av20 62.70 62.77 62.82 romulusm 64.43 65.05 65.74 T:isapk128v20 65.58 65.63 65.68 T:tinyjambu128v2 77.80 77.85 79.03 T:tinyjambu192v2 83.83 83.86 84.03 T:tinyjambu256v2 129.82 129.91 130.00 romulust 115.11? 151.34? 167.65? T:isapxv20 163.97 166.18 167.37 T:elephant200v2 4925.45 4929.20 4931.73 T:elephant176v2 5627.27 5630.24 5644.21 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.68 0.69 0.70 T:aes128gcmv1 0.80 0.81 0.82 aes256gcmv1 6.70 6.73 6.76 ascon128av12 9.89 9.99 10.19 ascon80pqv12 9.99 10.04 10.08 ascon128v12 12.47 12.54 12.62 T:schwaemm256128v2 12.75 12.80 12.86 ascon128abi32v12 13.93 13.97 14.01 T:xoodyakround3 16.47 16.54 16.64 T:schwaemm192192v2 17.15 17.23 17.32 T:schwaemm256256v2 18.26 18.29 18.32 T:schwaemm128128v2 19.40 19.44 19.48 ascon128bi32v12 23.07 23.10 23.13 T:grain128aeadv2 33.10 33.18 33.24 T:giftcofb128v1 38.19 38.39 38.56 T:isapa128v20 38.74 38.80 38.89 romulusn 39.13 39.96 40.12 T:isapa128av20 47.60 47.68 47.76 T:isapk128av20 62.94 63.00 63.07 romulusm 64.30 65.10 65.93 T:isapk128v20 65.16 65.60 65.64 T:tinyjambu128v2 77.76 78.02 78.06 T:tinyjambu192v2 83.90 84.04 84.08 T:tinyjambu256v2 129.80 129.94 130.01 romulust 133.76? 138.89? 162.21? T:isapxv20 163.03 166.00 166.62 T:elephant200v2 4924.51 4928.71 4932.12 T:elephant176v2 5629.46 5635.39 5649.49 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.68 0.69 0.70 T:aes128gcmv1 0.81 0.81 0.82 aes256gcmv1 6.69 6.73 6.76 ascon128av12 9.89 9.97 10.12 ascon80pqv12 9.99 10.03 10.09 ascon128v12 12.43 12.49 12.57 T:schwaemm256128v2 12.75 12.79 12.84 ascon128abi32v12 13.96 14.01 14.06 T:xoodyakround3 16.47 16.54 16.60 T:schwaemm192192v2 17.15 17.23 17.30 T:schwaemm256256v2 18.27 18.30 18.33 T:schwaemm128128v2 18.63 18.71 18.79 T:isapa128v20 19.40 19.44 19.50 ascon128bi32v12 22.97 23.08 23.11 T:grain128aeadv2 25.84 26.64 26.83 T:isapa128av20 31.93 31.99 32.05 T:isapk128av20 33.09 33.15 33.24 T:giftcofb128v1 38.81 38.92 39.00 romulusn 40.27 40.42 40.77 T:isapk128v20 44.84 44.92 44.99 romulust 62.98 63.04 63.11 romulusm 65.61 65.64 67.71 T:tinyjambu128v2 77.81 78.03 78.08 T:tinyjambu192v2 81.09 82.75 88.34 T:isapxv20 83.93 84.05 84.07 T:tinyjambu256v2 163.03 164.01 167.19 T:elephant200v2 4916.83 4927.97 4932.10 T:elephant176v2 5627.52 5630.56 5640.57 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.62 0.63 0.64 T:aes128gcmv1 0.69 0.70 0.71 aes256gcmv1 6.74 6.77 6.81 ascon128av12 10.01 10.08 10.14 ascon128v12 10.02 10.13 10.18 ascon80pqv12 10.83 10.86 10.89 T:xoodyakround3 12.37 12.41 12.47 T:schwaemm256128v2 13.09 13.13 13.19 ascon128abi32v12 16.44 16.50 16.57 T:schwaemm192192v2 17.10 17.16 17.22 T:schwaemm256256v2 18.20 18.22 18.24 T:schwaemm128128v2 19.20 19.27 19.39 ascon128bi32v12 23.62 23.65 23.66 T:grain128aeadv2 28.63 28.76 28.84 T:isapa128v20 31.16 31.20 31.23 romulusn 32.90 32.94 32.96 T:giftcofb128v1 32.37 33.10 33.49 T:isapa128av20 40.20 40.39 40.72 T:isapk128av20 42.96 42.99 43.04 romulusm 52.86 53.06 53.34 T:isapk128v20 53.59 53.61 53.62 T:tinyjambu128v2 60.91 60.94 61.46 T:tinyjambu192v2 63.29 63.33 63.42 T:tinyjambu256v2 87.22 87.27 87.34 romulust 98.81? 117.71? 126.54? T:isapxv20 122.46 124.46 126.52 T:elephant200v2 3679.50 3681.67 3682.96 T:elephant176v2 4222.17 4230.80 4244.55 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.49 0.50 0.51 T:aes128gcmv1 0.56 0.57 0.58 aes256gcmv1 6.69 6.71 6.73 ascon128av12 9.96 10.00 10.08 ascon80pqv12 10.03 10.05 10.08 ascon128v12 10.76 10.79 10.81 T:xoodyakround3 12.36 12.40 12.46 T:schwaemm256128v2 13.04 13.07 13.09 ascon128abi32v12 16.43 16.48 16.54 T:schwaemm192192v2 17.09 17.15 17.19 T:schwaemm256256v2 18.22 18.24 18.26 T:schwaemm128128v2 19.37 19.41 19.44 ascon128bi32v12 23.35 23.37 23.39 T:grain128aeadv2 28.60 28.70 28.79 T:isapa128v20 31.15 31.20 31.25 romulusn 32.89 32.93 33.02 T:giftcofb128v1 32.54 33.18 33.50 T:isapa128av20 40.21 40.40 40.60 T:isapk128av20 43.09 43.13 43.17 romulusm 52.61 52.94 53.35 T:isapk128v20 53.57 53.60 53.63 T:tinyjambu128v2 61.03 61.04 61.07 T:tinyjambu192v2 63.37 63.41 63.43 T:tinyjambu256v2 87.19 87.26 87.31 romulust 109.77? 111.10? 122.04? T:isapxv20 121.43 122.62 124.87 T:elephant200v2 3679.93 3681.74 3683.65 T:elephant176v2 4218.73 4226.33 4244.09 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.49 0.50 0.50 T:aes128gcmv1 0.56 0.57 0.57 aes256gcmv1 6.67 6.70 6.73 ascon128av12 9.97 10.01 10.10 ascon80pqv12 10.02 10.04 10.07 ascon128v12 10.78 10.80 10.82 T:xoodyakround3 12.36 12.42 12.48 T:schwaemm256128v2 13.04 13.07 13.11 ascon128abi32v12 16.40 16.44 16.48 T:schwaemm192192v2 17.09 17.15 17.21 T:schwaemm256256v2 18.21 18.23 18.26 T:schwaemm128128v2 18.86 18.93 19.00 T:isapa128v20 19.39 19.42 19.45 ascon128bi32v12 23.35 23.37 23.39 T:grain128aeadv2 26.15 26.71 27.25 T:isapa128av20 31.13 31.18 31.22 romulusn 32.20 32.38 32.64 T:isapk128av20 32.96 33.00 33.05 T:giftcofb128v1 40.62 40.75 40.93 T:isapk128v20 43.05 43.09 43.13 romulusm 44.72 44.76 44.81 romulust 53.57 53.60 53.62 T:tinyjambu128v2 61.03 61.05 61.07 T:tinyjambu192v2 63.36 63.41 63.44 T:tinyjambu256v2 81.34 84.66 86.42 T:isapxv20 121.83 124.57 125.04 T:elephant200v2 3678.36 3682.14 3684.75 T:elephant176v2 4218.82 4226.36 4241.09 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.31 0.31 0.32 T:aes128gcmv1 0.32 0.33 0.34 aes256gcmv1 6.66 6.68 6.71 ascon128av12 7.58 7.61 7.64 T:xoodyakround3 9.84 10.04 10.12 ascon80pqv12 10.02 10.06 10.10 ascon128v12 12.29 12.34 12.41 T:schwaemm256128v2 13.29 13.33 13.37 ascon128abi32v12 16.42 16.51 16.62 T:schwaemm192192v2 17.04 17.12 17.19 T:schwaemm256256v2 18.15 18.18 18.21 T:schwaemm128128v2 18.93 19.10 19.26 T:isapa128v20 19.40 19.46 19.56 ascon128bi32v12 23.16 23.20 23.25 romulusm 23.45 23.51 23.57 romulusn 23.62 23.67 23.70 T:grain128aeadv2 25.88 26.12 26.22 T:isapa128av20 31.87 31.92 31.99 T:isapk128av20 32.82 32.91 33.02 T:giftcofb128v1 40.69 40.78 40.88 T:isapk128v20 41.53 41.58 41.61 T:tinyjambu128v2 42.53 42.58 42.77 T:tinyjambu256v2 43.78 43.84 44.05 T:tinyjambu192v2 44.64 44.71 44.76 romulust 77.74? 80.64? 88.92? T:isapxv20 81.14 81.93 82.83 T:elephant200v2 2431.91 2433.46 2435.15 T:elephant176v2 2789.20 2811.61 2955.88 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.29 0.30 0.31 T:aes128gcmv1 0.31 0.32 0.33 aes256gcmv1 6.66 6.68 6.72 ascon128av12 7.58 7.61 7.65 T:xoodyakround3 10.02 10.08 10.13 ascon128v12 10.04 10.09 10.12 ascon80pqv12 12.30 12.38 12.48 T:schwaemm256128v2 13.30 13.35 13.39 ascon128abi32v12 16.44 16.51 16.58 T:schwaemm192192v2 17.03 17.12 17.20 T:schwaemm256256v2 18.15 18.17 18.20 T:schwaemm128128v2 18.94 19.05 19.15 T:isapa128v20 19.40 19.47 19.54 ascon128bi32v12 23.14 23.19 23.25 romulusm 23.48 23.52 23.57 romulusn 23.64 23.67 23.70 T:grain128aeadv2 26.04 26.46 27.11 T:isapa128av20 31.89 31.95 32.03 T:isapk128av20 32.80 32.90 33.03 T:giftcofb128v1 40.69 40.76 40.90 T:isapk128v20 41.34 41.37 41.42 T:tinyjambu128v2 42.57 42.59 42.61 T:tinyjambu256v2 43.82 43.86 44.03 T:tinyjambu192v2 44.65 44.70 44.79 romulust 80.94 81.17 82.48 T:elephant200v2 82.28 83.06 89.03 T:isapxv20 2432.97 2434.09 2435.79 T:elephant176v2 2789.36 2806.02 2869.43 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.29 0.30 0.31 T:aes128gcmv1 0.31 0.32 0.33 aes256gcmv1 6.66 6.69 6.72 ascon128av12 7.57 7.60 7.64 T:xoodyakround3 10.03 10.07 10.12 ascon128v12 10.03 10.08 10.13 ascon80pqv12 12.33 12.39 12.52 T:schwaemm256128v2 13.28 13.32 13.36 ascon128abi32v12 16.46 16.55 16.63 T:schwaemm192192v2 17.02 17.08 17.15 T:schwaemm256256v2 18.15 18.17 18.20 T:schwaemm128128v2 18.96 19.08 19.15 T:isapa128v20 19.40 19.46 19.53 ascon128bi32v12 23.15 23.19 23.24 romulusm 23.46 23.53 23.56 romulusn 23.65 23.68 23.71 T:grain128aeadv2 26.01 26.13 27.03 T:isapa128av20 31.91 31.97 32.04 T:isapk128av20 32.83 32.94 33.03 T:giftcofb128v1 40.70 40.78 40.86 T:isapk128v20 41.35 41.38 41.53 T:tinyjambu128v2 42.58 42.60 42.63 T:tinyjambu256v2 43.84 43.86 44.03 T:tinyjambu192v2 44.65 44.73 44.80 romulust 81.86 82.39 82.78 T:elephant200v2 82.34 82.95 88.00 T:isapxv20 2432.52 2433.96 2435.78 T:elephant176v2 2788.09 2811.96 2917.14 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.73 0.74 0.74 T:aes128gcmv1 0.81 0.82 0.83 aes256gcmv1 6.85 6.88 6.93 ascon128av12 10.13 10.18 10.26 ascon80pqv12 10.15 10.23 10.28 ascon128v12 10.94 10.97 10.99 T:xoodyakround3 12.71 12.77 12.81 T:schwaemm256128v2 13.42 13.45 13.48 ascon128abi32v12 16.83 16.87 16.93 T:schwaemm192192v2 17.56 17.61 17.65 T:schwaemm256256v2 18.43 18.45 18.47 T:schwaemm128128v2 19.55 19.60 19.68 ascon128bi32v12 23.95 23.97 23.98 T:grain128aeadv2 31.52 31.54 31.57 romulusn 33.19 33.23 33.26 T:giftcofb128v1 35.03 35.26 35.64 T:isapa128av20 41.58 41.64 41.76 T:isapa128v20 43.23 43.27 43.30 romulusm 45.56 45.64 45.73 T:isapk128av20 54.11 54.11 54.13 T:tinyjambu128v2 61.47 61.48 61.85 T:tinyjambu192v2 63.86 63.91 63.99 T:tinyjambu256v2 88.55 88.59 88.65 romulust 90.91 91.06 91.32 T:isapk128v20 125.23 126.81 127.55 T:elephant200v2 182.16 192.52 200.42 T:isapxv20 3707.75 3709.43 3710.80 T:elephant176v2 4267.90 4277.12 4290.53 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.60 0.61 0.61 T:aes128gcmv1 0.69 0.70 0.70 aes256gcmv1 6.83 6.85 6.87 ascon128av12 10.16 10.19 10.23 ascon128v12 10.13 10.23 10.30 ascon80pqv12 10.87 10.89 10.91 T:xoodyakround3 12.75 12.79 12.83 T:schwaemm256128v2 13.36 13.39 13.42 ascon128abi32v12 16.81 16.85 16.91 T:schwaemm192192v2 17.60 17.62 17.66 T:schwaemm256256v2 18.44 18.46 18.48 T:schwaemm128128v2 19.72 19.75 19.79 ascon128bi32v12 23.69 23.71 23.73 T:grain128aeadv2 31.54 31.58 31.62 romulusn 33.25 33.30 33.35 T:giftcofb128v1 35.19 35.60 35.90 T:isapa128av20 41.58 41.65 41.74 T:isapa128v20 43.40 43.43 43.47 romulusm 45.56 45.63 45.74 T:isapk128av20 54.12 54.13 54.14 T:tinyjambu128v2 61.59 61.60 61.61 T:tinyjambu192v2 63.95 63.98 64.01 T:tinyjambu256v2 88.55 88.60 88.65 romulust 90.88 91.01 91.24 T:isapk128v20 124.55 125.02 126.49 T:elephant200v2 184.55 185.91 195.85 T:isapxv20 3703.98 3708.53 3711.03 T:elephant176v2 4268.51 4272.90 4286.75 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.61 0.61 0.61 T:aes128gcmv1 0.69 0.70 0.70 aes256gcmv1 6.83 6.85 6.88 ascon128av12 10.16 10.20 10.24 ascon128v12 10.15 10.27 10.32 ascon80pqv12 10.88 10.91 10.93 T:xoodyakround3 12.73 12.78 12.82 T:schwaemm256128v2 13.36 13.39 13.42 ascon128abi32v12 16.80 16.85 16.90 T:schwaemm192192v2 17.57 17.60 17.67 T:schwaemm256256v2 18.46 18.47 18.49 T:schwaemm128128v2 19.69 19.73 19.76 ascon128bi32v12 23.68 23.70 23.72 T:grain128aeadv2 25.46 25.53 25.63 T:isapa128v20 27.47 27.69 28.31 T:isapa128av20 31.51 31.56 31.61 romulusn 33.30 33.34 33.37 T:giftcofb128v1 35.52 35.56 35.62 T:isapk128av20 43.43 43.46 43.49 romulusm 46.04 46.07 46.11 romulust 54.09 54.12 54.15 T:tinyjambu128v2 60.61 60.63 60.68 T:isapk128v20 61.59 61.60 61.61 T:tinyjambu192v2 63.94 63.98 64.01 T:tinyjambu256v2 121.22 122.10 124.35 T:isapxv20 124.53 126.27 127.17 T:elephant200v2 3708.64 3710.71 3712.85 T:elephant176v2 4267.61 4273.64 4290.29 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.65 4.70 4.80 aes256gcmv1 4.79 4.91 5.08 T:aes128gcmv1 10.12 10.24 10.38 ascon128av12 13.13 13.22 13.38 ascon80pqv12 13.16 13.26 13.44 ascon128v12 15.65 15.76 16.14 T:xoodyakround3 20.37 20.54 20.71 ascon128abi32v12 20.51 20.83 21.11 T:schwaemm256128v2 23.57 23.73 24.04 T:schwaemm128128v2 26.60 26.84 27.14 ascon128bi32v12 26.58 26.90 27.40 T:schwaemm192192v2 27.58 27.92 28.38 T:schwaemm256256v2 31.36 31.46 31.55 T:grain128aeadv2 39.24 39.38 39.53 T:giftcofb128v1 39.73 39.89 40.11 romulusn 49.70 49.83 50.06 romulusm 65.71 66.14 66.48 T:tinyjambu128v2 74.22 74.58 75.13 T:tinyjambu192v2 76.81 76.90 77.07 T:tinyjambu256v2 85.29 85.87 86.35 T:isapa128av20 117.81 118.26 118.72 romulust 156.20 156.48 156.96 T:isapk128av20 176.55 178.70 179.83 T:elephant200v2 338.10 339.45 340.82 T:isapa128v20 954.52 955.20 956.54 T:isapk128v20 1818.89? 1907.70? 2153.51? T:isapxv20 4616.42 4621.43 4625.23 T:elephant176v2 5712.69 5719.38 5768.31 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.07 5.13 5.19 aes256gcmv1 5.24 5.36 5.52 T:aes128gcmv1 10.03 10.17 10.31 ascon128av12 13.16 13.25 13.39 ascon128v12 13.10 13.25 13.39 ascon80pqv12 15.67 15.75 15.85 T:xoodyakround3 20.17 20.33 20.51 ascon128abi32v12 20.58 20.92 21.30 T:schwaemm256128v2 23.60 23.67 23.98 T:schwaemm128128v2 26.66 26.79 26.96 ascon128bi32v12 26.96 27.33 27.73 T:schwaemm192192v2 27.69 27.99 28.34 T:schwaemm256256v2 31.26 31.37 31.47 T:grain128aeadv2 39.52 39.61 39.75 T:giftcofb128v1 39.82 39.97 40.18 romulusn 50.87 51.10 51.31 romulusm 65.65 65.76 66.34 T:tinyjambu128v2 74.47 74.91 75.35 T:tinyjambu192v2 76.85 76.94 77.17 T:tinyjambu256v2 85.88 86.29 86.54 T:isapa128av20 117.99 118.30 118.74 romulust 156.15 156.42 156.98 T:isapk128av20 176.05 178.47 179.25 T:elephant200v2 335.84 338.35 339.38 T:isapa128v20 955.53 956.17 957.13 T:isapk128v20 1823.95 1902.29 1903.30 T:isapxv20 4615.25 4621.01 4625.29 T:elephant176v2 5714.99 5721.06 5912.76 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.07 5.13 5.22 aes256gcmv1 5.30 5.38 5.44 T:aes128gcmv1 10.06 10.16 10.32 ascon128av12 13.13 13.23 13.34 ascon128v12 13.15 13.29 13.42 ascon80pqv12 15.62 15.77 16.07 T:xoodyakround3 20.20 20.37 20.56 ascon128abi32v12 20.54 20.84 21.20 T:schwaemm256128v2 23.58 23.68 23.95 T:schwaemm128128v2 26.69 26.85 27.06 ascon128bi32v12 26.87 27.26 27.49 T:schwaemm192192v2 27.66 27.95 28.37 T:schwaemm256256v2 31.32 31.44 31.49 T:grain128aeadv2 39.48 39.61 39.72 T:giftcofb128v1 39.95 40.11 40.30 romulusn 50.81 50.99 51.14 romulusm 56.57 56.82 57.44 T:isapa128av20 65.63 66.05 66.79 T:tinyjambu128v2 74.30 74.72 75.30 T:tinyjambu192v2 74.70 75.01 75.50 romulust 76.82 76.92 77.05 T:tinyjambu256v2 101.42 101.77 102.15 T:isapk128av20 175.41 176.19 177.79 T:elephant200v2 174.84 177.18 178.36 T:isapa128v20 503.78 504.15 504.54 T:isapk128v20 951.77 989.24 998.35 T:isapxv20 4616.59 4621.86 4626.99 T:elephant176v2 5712.32 5715.83 5719.72 T:elephant160v2