VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Gracemont (b06a2-20); 2024 Intel Core 5 210H, E cores; 4 x 1600MHz; freshwrap,little, supercop-20260627

[Page version: 20260717 22:09:05]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.93 0.94 0.95 T:aes128gcmv1 1.07 1.08 1.09 aes256gcmv1 6.28 6.30 6.32 ascon128av12 9.35 9.37 9.38 ascon80pqv12 9.33 9.38 9.40 ascon128v12 11.41 11.43 11.45 ascon128abi32v12 13.75 13.85 13.91 T:xoodyakround3 16.37 16.39 16.43 T:schwaemm256128v2 16.39 16.41 16.43 ascon128bi32v12 21.61 21.65 21.68 T:schwaemm192192v2 22.84 23.04 23.44 T:schwaemm128128v2 24.26 24.74 25.36 T:schwaemm256256v2 25.14 25.19 25.22 T:grain128aeadv2 31.76 31.92 31.95 T:giftcofb128v1 35.24 35.29 35.30 T:isapa128av20 35.59 35.64 35.71 T:isapa128v20 36.24 36.33 36.38 romulusn 51.66 51.69 51.73 T:tinyjambu128v2 59.47 59.60 59.69 romulusm 59.67 59.83 60.04 T:isapk128av20 62.41 62.68 63.81 T:tinyjambu192v2 73.52 73.56 73.61 T:tinyjambu256v2 79.29 79.76 80.04 T:isapk128v20 122.83 122.86 122.89 romulust 163.06 166.91 170.72 T:isapxv20 177.83 178.12 178.40 T:elephant200v2 6384.40 6386.07 6405.59 T:elephant176v2 7355.98 7371.93 7421.56 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.95 0.96 0.97 T:aes128gcmv1 1.14 1.15 1.16 aes256gcmv1 6.28 6.30 6.32 ascon128av12 9.34 9.37 9.38 ascon128v12 9.34 9.37 9.39 ascon80pqv12 11.34 11.36 11.37 ascon128abi32v12 13.85 14.00 14.09 T:xoodyakround3 16.19 16.23 16.39 ascon128bi32v12 16.37 16.38 16.42 T:schwaemm256128v2 21.60 21.65 21.68 T:schwaemm192192v2 22.83 23.06 23.46 T:schwaemm128128v2 24.21 24.74 25.42 T:schwaemm256256v2 25.47 25.50 25.54 T:grain128aeadv2 31.68 32.07 32.12 T:giftcofb128v1 35.22 35.29 35.32 T:isapa128av20 35.61 35.65 35.69 T:isapa128v20 36.12 36.33 36.44 romulusn 51.65 51.68 51.72 T:tinyjambu128v2 59.60 59.73 59.85 romulusm 59.64 59.86 60.10 T:isapk128av20 62.51 63.70 63.79 T:tinyjambu192v2 73.61 73.64 73.69 T:tinyjambu256v2 79.27 79.72 80.00 T:isapk128v20 122.83 122.86 122.90 romulust 163.56 164.65 166.14 T:isapxv20 177.58 177.88 178.04 T:elephant200v2 6384.15 6385.80 6404.94 T:elephant176v2 7355.67 7372.67 7421.62 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.95 0.96 0.96 T:aes128gcmv1 1.14 1.15 1.16 aes256gcmv1 6.29 6.31 6.33 ascon128av12 9.31 9.35 9.37 ascon128v12 9.34 9.36 9.38 ascon80pqv12 11.34 11.35 11.37 ascon128abi32v12 13.86 14.03 14.13 T:xoodyakround3 16.19 16.23 16.38 ascon128bi32v12 16.37 16.39 16.41 T:schwaemm256128v2 17.83 17.87 17.92 T:isapa128v20 21.61 21.65 21.68 T:schwaemm192192v2 22.85 23.05 23.53 T:schwaemm128128v2 23.50 23.53 23.57 T:isapa128av20 24.24 24.71 25.33 T:schwaemm256256v2 25.46 25.50 25.54 T:grain128aeadv2 31.68 32.07 32.12 T:giftcofb128v1 36.08 36.34 36.45 romulusn 39.80 39.96 40.06 T:isapk128av20 41.96 42.00 42.04 romulust 49.62 50.08 50.26 T:isapk128v20 51.66 51.69 51.72 T:tinyjambu128v2 59.30 59.63 59.71 romulusm 62.50 63.69 63.78 T:tinyjambu192v2 73.61 73.65 73.69 T:tinyjambu256v2 96.46 97.27 98.47 T:isapxv20 177.58 177.90 178.14 T:elephant200v2 6384.49 6386.37 6414.63 T:elephant176v2 7355.67 7372.67 7421.71 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.69 0.70 0.70 T:aes128gcmv1 0.77 0.78 0.78 aes256gcmv1 6.22 6.25 6.30 ascon128av12 9.31 9.33 9.35 ascon128v12 9.33 9.35 9.36 ascon80pqv12 10.59 10.61 10.64 T:xoodyakround3 11.25 11.26 11.28 ascon128abi32v12 16.28 16.30 16.35 T:schwaemm256128v2 16.45 16.46 16.47 ascon128bi32v12 21.40 21.59 21.61 T:schwaemm192192v2 22.97 23.05 23.09 T:schwaemm128128v2 24.07 24.58 25.21 T:schwaemm256256v2 25.08 25.11 25.15 T:grain128aeadv2 26.82 26.85 26.88 T:isapa128v20 29.40 29.42 29.44 T:isapa128av20 29.73 29.77 29.81 romulusn 31.69 31.71 31.73 T:giftcofb128v1 41.32 41.40 41.47 romulusm 42.26 42.28 42.30 T:tinyjambu128v2 49.80 49.94 50.05 T:isapk128av20 50.00 50.03 50.05 T:tinyjambu192v2 53.71 53.74 53.75 T:tinyjambu256v2 64.77 64.98 65.09 T:isapk128v20 82.47 82.49 82.53 romulust 130.59 132.71 133.50 T:isapxv20 132.55 132.97 133.22 T:elephant200v2 4772.56 4785.73 4798.62 T:elephant176v2 5537.24 5543.71 5545.59 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.71 0.71 0.72 T:aes128gcmv1 0.80 0.80 0.81 aes256gcmv1 6.22 6.24 6.28 ascon128av12 9.30 9.32 9.37 ascon80pqv12 9.31 9.34 9.38 ascon128v12 10.63 10.66 10.72 T:xoodyakround3 11.16 11.21 11.22 ascon128abi32v12 16.29 16.30 16.33 T:schwaemm256128v2 16.38 16.45 16.62 ascon128bi32v12 21.40 21.52 21.59 T:schwaemm192192v2 22.97 23.06 23.11 T:schwaemm128128v2 24.05 24.62 25.23 T:schwaemm256256v2 25.23 25.26 25.31 T:grain128aeadv2 26.83 26.86 26.90 T:isapa128v20 29.42 29.44 29.45 T:isapa128av20 29.68 29.76 29.86 romulusn 31.62 31.65 31.71 T:giftcofb128v1 41.40 41.45 41.50 romulusm 42.25 42.27 42.30 T:tinyjambu128v2 49.81 49.93 50.00 T:isapk128av20 49.99 50.01 50.04 T:tinyjambu192v2 53.73 53.75 53.78 T:tinyjambu256v2 64.81 65.00 65.12 T:isapk128v20 82.46 82.48 82.51 romulust 130.31 130.56 131.04 T:isapxv20 132.32 132.72 133.02 T:elephant200v2 4772.18 4785.61 4801.03 T:elephant176v2 5538.00 5544.05 5545.53 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.71 0.71 0.72 T:aes128gcmv1 0.80 0.81 0.81 aes256gcmv1 6.23 6.24 6.26 ascon128av12 9.30 9.32 9.36 ascon80pqv12 9.32 9.33 9.36 ascon128v12 10.61 10.73 10.74 T:xoodyakround3 11.16 11.21 11.22 ascon128abi32v12 16.29 16.30 16.33 T:schwaemm256128v2 16.41 16.58 16.63 ascon128bi32v12 17.93 17.97 17.99 T:isapa128v20 21.40 21.59 21.61 T:schwaemm192192v2 22.98 23.06 23.15 T:schwaemm128128v2 23.52 23.55 23.58 T:isapa128av20 24.06 24.60 25.21 T:schwaemm256256v2 25.24 25.27 25.31 T:grain128aeadv2 29.67 29.76 29.86 romulusn 31.62 31.65 31.70 T:giftcofb128v1 39.96 40.02 40.08 T:isapk128av20 41.29 41.43 41.47 romulusm 42.03 42.06 42.07 romulust 42.25 42.28 42.30 T:tinyjambu128v2 49.98 50.01 50.03 T:tinyjambu192v2 49.94 50.12 50.20 T:isapk128v20 53.73 53.75 53.78 T:tinyjambu256v2 96.40 96.63 96.82 T:isapxv20 132.18 133.04 133.26 T:elephant200v2 4773.28 4785.68 4795.31 T:elephant176v2 5538.18 5543.57 5545.58 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.45 0.46 0.47 T:aes128gcmv1 0.47 0.47 0.48 aes256gcmv1 6.12 6.14 6.17 ascon128av12 7.39 7.42 7.46 T:xoodyakround3 9.25 9.26 9.30 ascon128v12 9.30 9.32 9.34 ascon80pqv12 11.08 11.10 11.12 ascon128abi32v12 16.24 16.27 16.28 T:schwaemm256128v2 16.50 16.51 16.53 ascon128bi32v12 18.00 18.05 18.09 T:isapa128v20 21.50 21.52 21.55 T:schwaemm192192v2 22.63 22.93 23.41 T:schwaemm128128v2 23.18 23.23 23.27 romulusm 23.19 23.24 23.27 romulusn 23.53 23.55 23.57 T:isapa128av20 23.89 24.44 25.04 T:schwaemm256256v2 25.02 25.06 25.11 T:grain128aeadv2 31.66 31.69 31.72 T:giftcofb128v1 32.83 32.86 32.89 T:tinyjambu128v2 33.87 33.89 33.93 T:tinyjambu256v2 36.28 36.31 36.34 T:tinyjambu192v2 39.78 39.90 40.13 T:isapk128av20 42.07 42.09 42.12 romulust 49.67 49.99 50.33 T:isapk128v20 88.24 88.31 88.73 T:elephant200v2 96.76 99.53 100.08 T:isapxv20 3162.60 3164.74 3170.17 T:elephant176v2 3676.80 3684.45 3686.16 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.45 0.46 0.47 aes256gcmv1 0.47 0.48 0.49 T:aes128gcmv1 6.14 6.15 6.17 ascon128av12 7.39 7.41 7.45 T:xoodyakround3 9.24 9.29 9.40 ascon80pqv12 9.25 9.31 9.33 ascon128v12 10.90 10.95 11.07 ascon128abi32v12 16.23 16.26 16.27 T:schwaemm256128v2 16.44 16.47 16.49 ascon128bi32v12 18.00 18.06 18.10 T:isapa128v20 21.51 21.53 21.56 T:schwaemm192192v2 22.59 22.93 23.42 T:schwaemm128128v2 23.16 23.22 23.25 romulusn 23.17 23.22 23.26 romulusm 23.51 23.53 23.57 T:isapa128av20 23.89 24.42 25.06 T:schwaemm256256v2 25.00 25.06 25.12 T:grain128aeadv2 31.65 31.68 31.71 T:giftcofb128v1 32.84 32.86 32.88 T:tinyjambu128v2 33.83 33.86 33.89 T:tinyjambu256v2 36.28 36.31 36.36 T:tinyjambu192v2 39.82 39.93 40.15 T:isapk128av20 42.07 42.10 42.13 romulust 49.79 50.01 50.26 T:isapk128v20 88.24 88.44 88.74 T:elephant200v2 96.33 97.20 98.81 T:isapxv20 3162.66 3165.40 3172.41 T:elephant176v2 3676.83 3682.04 3685.10 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.45 0.45 0.46 aes256gcmv1 0.47 0.48 0.49 T:aes128gcmv1 6.13 6.15 6.17 ascon128av12 7.39 7.42 7.45 T:xoodyakround3 9.23 9.27 9.33 ascon128v12 9.25 9.30 9.41 ascon80pqv12 10.90 10.94 11.07 ascon128abi32v12 16.23 16.26 16.27 T:schwaemm256128v2 16.44 16.46 16.49 ascon128bi32v12 17.99 18.03 18.07 T:isapa128v20 21.50 21.51 21.52 T:schwaemm192192v2 22.67 22.94 23.42 T:schwaemm128128v2 23.14 23.19 23.23 romulusm 23.17 23.21 23.25 romulusn 23.54 23.55 23.57 T:isapa128av20 23.90 24.45 25.04 T:schwaemm256256v2 25.00 25.05 25.12 T:grain128aeadv2 31.65 31.68 31.70 T:giftcofb128v1 32.83 32.85 32.88 T:tinyjambu128v2 33.84 33.87 33.89 T:tinyjambu256v2 36.28 36.31 36.34 T:tinyjambu192v2 39.86 39.97 40.17 T:isapk128av20 42.07 42.09 42.14 romulust 49.80 50.02 50.29 T:isapk128v20 88.23 88.34 88.83 T:elephant200v2 96.16 96.61 97.29 T:isapxv20 3162.11 3164.66 3172.19 T:elephant176v2 3676.81 3683.13 3685.47 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.79 0.80 0.80 T:aes128gcmv1 0.88 0.88 0.89 aes256gcmv1 6.37 6.39 6.44 ascon128av12 9.44 9.47 9.48 ascon128v12 9.47 9.49 9.50 ascon80pqv12 10.75 10.78 10.81 T:xoodyakround3 11.59 11.59 11.61 ascon128abi32v12 16.74 16.75 16.75 ascon128bi32v12 16.81 16.82 16.84 T:schwaemm256128v2 22.07 22.10 22.17 T:schwaemm192192v2 23.31 23.35 23.37 T:schwaemm128128v2 24.83 25.25 25.78 T:schwaemm256256v2 25.41 25.44 25.46 T:grain128aeadv2 30.24 30.27 30.31 romulusn 31.40 31.41 31.44 T:isapa128av20 31.99 32.00 32.03 T:giftcofb128v1 39.15 39.17 39.20 T:isapa128v20 41.83 41.89 41.93 romulusm 42.57 42.59 42.60 T:tinyjambu128v2 50.40 50.43 50.45 T:tinyjambu192v2 54.08 54.10 54.12 T:tinyjambu256v2 57.91 57.98 58.15 T:isapk128av20 83.70 83.72 83.74 romulust 114.65 114.75 114.84 T:isapk128v20 135.54 135.74 135.93 T:elephant200v2 211.38 213.55 214.48 T:isapxv20 4818.60 4823.66 4828.14 T:elephant176v2 5554.48 5576.92 5619.71 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.81 0.81 0.82 T:aes128gcmv1 0.91 0.91 0.92 aes256gcmv1 6.37 6.38 6.39 ascon128av12 9.45 9.47 9.50 ascon80pqv12 9.44 9.48 9.52 ascon128v12 10.72 10.76 10.80 T:xoodyakround3 11.46 11.49 11.54 ascon128abi32v12 16.67 16.77 16.89 ascon128bi32v12 16.79 16.81 16.82 T:schwaemm256128v2 21.97 22.07 22.17 T:schwaemm192192v2 23.29 23.35 23.38 T:schwaemm128128v2 24.83 25.24 25.80 T:schwaemm256256v2 25.57 25.60 25.62 T:grain128aeadv2 30.19 30.29 30.35 romulusn 31.41 31.42 31.43 T:isapa128av20 31.94 31.96 32.01 T:giftcofb128v1 39.17 39.19 39.21 T:isapa128v20 41.77 41.93 42.02 romulusm 42.58 42.59 42.61 T:tinyjambu128v2 50.37 50.39 50.41 T:tinyjambu192v2 54.10 54.13 54.15 T:tinyjambu256v2 57.90 57.99 58.06 T:isapk128av20 83.69 83.71 83.72 romulust 114.68 114.75 114.83 T:isapk128v20 135.37 135.67 135.82 T:elephant200v2 212.66 213.14 213.40 T:isapxv20 4819.37 4823.27 4827.26 T:elephant176v2 5555.41 5575.65 5620.37 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.81 0.81 0.81 T:aes128gcmv1 0.91 0.91 0.91 aes256gcmv1 6.37 6.38 6.39 ascon128av12 9.45 9.46 9.50 ascon80pqv12 9.44 9.47 9.51 ascon128v12 10.72 10.78 10.81 T:xoodyakround3 11.46 11.47 11.54 ascon128abi32v12 16.79 16.81 16.82 T:schwaemm256128v2 16.70 16.85 16.90 ascon128bi32v12 21.97 22.07 22.16 T:schwaemm192192v2 23.26 23.37 23.39 T:schwaemm128128v2 24.22 24.24 24.24 T:isapa128v20 24.66 24.67 24.69 T:isapa128av20 24.83 25.26 25.78 T:schwaemm256256v2 25.55 25.58 25.62 T:grain128aeadv2 30.18 30.28 30.34 romulusn 31.93 31.96 32.01 T:giftcofb128v1 41.96 42.04 42.09 romulusm 42.58 42.60 42.62 T:tinyjambu128v2 43.22 43.23 43.26 romulust 45.24 45.31 45.45 T:isapk128av20 50.36 50.37 50.40 T:tinyjambu192v2 54.10 54.12 54.14 T:tinyjambu256v2 76.49 76.53 76.59 T:isapk128v20 135.40 135.61 135.71 T:elephant200v2 138.64 138.94 139.32 T:isapxv20 4819.55 4825.52 4831.85 T:elephant176v2 5557.02 5575.02 5619.97 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.42 4.47 4.55 T:aes128gcmv1 5.72 5.78 5.86 aes256gcmv1 9.58 9.69 9.92 ascon128av12 12.38 12.51 12.69 ascon128v12 12.46 12.54 12.80 ascon80pqv12 15.48 15.54 15.68 T:xoodyakround3 19.01 19.07 19.23 ascon128abi32v12 23.10 23.16 23.33 ascon128bi32v12 27.33 27.40 27.54 T:schwaemm256128v2 29.60 29.83 30.30 T:schwaemm128128v2 32.40 32.49 32.60 T:grain128aeadv2 35.35 35.43 35.62 T:schwaemm192192v2 38.54 38.66 38.76 T:giftcofb128v1 39.13 39.89 40.57 T:schwaemm256256v2 41.65 41.76 41.81 romulusn 49.89 50.01 50.18 T:tinyjambu128v2 52.84 52.96 53.17 romulusm 58.80 58.97 59.18 T:tinyjambu192v2 62.32 62.42 62.55 T:tinyjambu256v2 76.34 76.48 76.80 T:isapa128av20 111.70 111.91 112.04 romulust 191.49 191.81 192.12 T:elephant200v2 230.62 231.46 234.81 T:isapk128av20 322.16 322.42 322.76 T:isapa128v20 1245.86 1246.72 1248.37 T:isapk128v20 2055.86 2080.13 2087.56 T:isapxv20 5993.98 6014.21 6027.25 T:elephant176v2 7469.51 7478.53 7547.03 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.32 4.37 4.42 T:aes128gcmv1 5.82 5.85 5.94 aes256gcmv1 9.57 9.66 9.95 ascon128av12 12.37 12.46 12.76 ascon128v12 12.46 12.53 12.72 ascon80pqv12 15.44 15.52 15.68 T:xoodyakround3 18.81 18.89 19.01 ascon128abi32v12 23.06 23.15 23.30 ascon128bi32v12 27.38 27.46 27.61 T:schwaemm256128v2 29.70 29.82 30.30 T:schwaemm128128v2 32.62 32.75 32.87 T:grain128aeadv2 35.45 35.48 35.61 T:schwaemm192192v2 38.79 38.89 39.08 T:giftcofb128v1 39.04 39.82 40.60 T:schwaemm256256v2 41.79 41.90 42.02 romulusn 49.98 50.06 50.21 T:tinyjambu128v2 54.86 55.04 55.20 romulusm 58.82 58.94 59.07 T:tinyjambu192v2 62.42 62.53 62.73 T:tinyjambu256v2 76.40 76.57 76.86 T:isapa128av20 111.65 111.76 111.89 romulust 191.21 191.57 191.78 T:elephant200v2 229.77 230.74 233.28 T:isapk128av20 322.33 322.85 323.26 T:isapa128v20 1245.24 1246.39 1247.38 T:isapk128v20 2076.96 2080.87 2082.41 T:isapxv20 5993.81 6009.92 6015.32 T:elephant176v2 7478.77 7507.62 7549.21 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.32 4.36 4.39 T:aes128gcmv1 5.81 5.86 5.91 aes256gcmv1 9.57 9.66 9.82 ascon128av12 12.39 12.47 12.53 ascon128v12 12.46 12.52 12.67 ascon80pqv12 15.46 15.53 15.65 T:xoodyakround3 18.84 18.90 18.99 ascon128abi32v12 23.01 23.12 23.20 ascon128bi32v12 27.37 27.41 27.47 T:schwaemm256128v2 29.67 29.80 30.23 T:schwaemm128128v2 32.61 32.68 32.78 T:grain128aeadv2 35.42 35.46 35.52 T:schwaemm192192v2 38.76 38.87 39.05 T:giftcofb128v1 39.02 39.80 40.56 T:schwaemm256256v2 41.78 41.91 42.01 romulusn 49.94 50.03 50.14 T:tinyjambu128v2 50.23 50.36 50.69 T:isapa128av20 54.54 54.69 54.80 romulusm 58.82 58.93 59.01 T:tinyjambu192v2 62.44 62.55 62.67 T:tinyjambu256v2 70.20 70.46 70.80 romulust 156.22 157.23 158.69 T:isapk128av20 167.82 168.07 168.44 T:isapa128v20 191.44 191.61 191.76 T:elephant200v2 673.86 674.77 676.15 T:isapk128v20 1085.87 1087.92 1089.59 T:isapxv20 5994.09 6013.24 6017.34 T:elephant176v2 7480.12 7508.00 7549.83 T:elephant160v2