VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Gracemont (b06a2-20); 2024 Intel Core 5 210H, E cores; 4 x 1600MHz; freshwrap,little, supercop-20260330

[Page version: 20260503 04:13:14]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.28 1.30 1.31 T:aes128gcmv1 1.47 1.48 1.51 aes256gcmv1 8.66 8.70 8.72 ascon128av12 12.87 12.91 12.96 ascon128v12 12.88 12.92 12.97 ascon80pqv12 15.72 15.76 15.80 ascon128abi32v12 18.95 19.06 19.12 T:xoodyakround3 22.53 22.56 22.60 T:schwaemm256128v2 22.60 22.63 22.65 ascon128bi32v12 29.64 29.70 29.99 T:schwaemm192192v2 31.42 31.48 31.77 T:schwaemm128128v2 33.36 34.14 35.11 T:schwaemm256256v2 34.63 34.67 34.74 T:grain128aeadv2 43.67 43.75 43.79 T:giftcofb128v1 48.53 48.58 48.66 T:isapa128av20 49.04 49.13 49.22 T:isapa128v20 50.10 50.12 50.15 romulusn 71.17 71.23 71.26 T:tinyjambu128v2 81.97 82.14 82.24 romulusm 82.02 82.30 82.52 T:isapk128av20 87.85 87.92 88.00 T:tinyjambu192v2 101.32 101.37 101.46 T:tinyjambu256v2 109.85 110.21 110.48 T:isapk128v20 169.29 169.33 169.39 romulust 226.06 226.57 227.38 T:isapxv20 242.46 245.12 245.84 T:elephant200v2 8809.69 8818.62 8859.46 T:elephant176v2 10169.31 10192.77 10196.17 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.31 1.32 1.34 T:aes128gcmv1 1.58 1.60 1.62 aes256gcmv1 8.69 8.73 8.76 ascon128av12 12.84 12.87 12.90 ascon128v12 12.85 12.89 12.92 ascon80pqv12 15.63 15.66 15.68 ascon128abi32v12 18.81 18.89 18.96 T:xoodyakround3 22.52 22.55 22.59 T:schwaemm256128v2 22.38 22.56 22.59 ascon128bi32v12 29.66 29.72 29.99 T:schwaemm192192v2 30.67 31.41 31.84 T:schwaemm128128v2 33.35 34.18 35.01 T:schwaemm256256v2 35.10 35.14 35.19 T:grain128aeadv2 43.60 43.72 43.80 T:giftcofb128v1 48.56 48.62 48.68 T:isapa128av20 48.97 49.05 49.14 T:isapa128v20 50.02 50.09 50.22 romulusn 71.22 71.27 71.55 T:tinyjambu128v2 81.83 82.23 82.32 romulusm 82.01 82.27 82.52 T:isapk128av20 87.78 87.84 87.92 T:tinyjambu192v2 101.43 101.49 101.56 T:tinyjambu256v2 109.84 110.25 110.55 T:isapk128v20 169.33 169.36 169.40 romulust 227.02 228.68 230.11 T:isapxv20 242.30 244.71 245.62 T:elephant200v2 8809.91 8818.63 8857.36 T:elephant176v2 10171.76 10192.94 10195.79 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.30 1.31 1.33 T:aes128gcmv1 1.59 1.60 1.61 aes256gcmv1 8.69 8.73 8.76 ascon128av12 12.85 12.89 12.92 ascon128v12 12.84 12.89 12.91 ascon80pqv12 15.62 15.64 15.67 ascon128abi32v12 18.86 18.96 19.02 T:xoodyakround3 22.52 22.55 22.59 T:schwaemm256128v2 22.38 22.57 22.60 ascon128bi32v12 24.58 24.66 24.71 T:isapa128v20 29.64 29.68 29.99 T:schwaemm192192v2 30.61 31.40 31.84 T:schwaemm128128v2 32.40 32.45 32.47 T:isapa128av20 33.32 34.17 35.03 T:schwaemm256256v2 35.09 35.14 35.19 T:grain128aeadv2 43.57 43.71 43.79 T:giftcofb128v1 50.06 50.16 50.22 romulusn 54.85 55.02 55.20 T:isapk128av20 57.84 57.89 57.96 romulust 68.89 69.03 69.18 T:isapk128v20 71.23 71.29 71.54 T:tinyjambu128v2 81.87 82.24 82.33 romulusm 87.77 87.84 87.93 T:tinyjambu192v2 101.44 101.50 101.57 T:tinyjambu256v2 133.07 133.90 134.48 T:isapxv20 242.17 244.72 245.42 T:elephant200v2 8809.63 8819.12 8858.17 T:elephant176v2 10169.10 10192.24 10196.22 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.96 0.97 0.97 T:aes128gcmv1 1.04 1.05 1.06 aes256gcmv1 8.57 8.60 8.68 ascon128av12 12.83 12.85 12.87 ascon128v12 12.86 12.89 12.92 ascon80pqv12 14.66 14.69 14.76 T:xoodyakround3 15.51 15.53 15.55 ascon128abi32v12 22.47 22.50 22.54 T:schwaemm256128v2 22.67 22.69 22.71 ascon128bi32v12 29.78 29.88 29.90 T:schwaemm192192v2 31.67 31.76 31.79 T:schwaemm128128v2 33.18 33.93 34.84 T:schwaemm256256v2 34.59 34.62 34.67 T:grain128aeadv2 36.99 37.04 37.08 T:isapa128v20 40.52 40.55 40.58 T:isapa128av20 40.95 41.03 41.06 romulusn 43.68 43.71 43.73 T:giftcofb128v1 56.92 56.99 57.07 romulusm 58.19 58.28 59.18 T:tinyjambu128v2 68.65 68.95 69.10 T:isapk128av20 67.44 69.02 69.07 T:tinyjambu192v2 74.02 74.06 74.09 T:tinyjambu256v2 89.40 89.74 90.02 T:isapk128v20 113.64 113.67 113.71 romulust 178.65 180.48 181.46 T:isapxv20 181.70 182.84 183.35 T:elephant200v2 6581.28 6591.06 6614.78 T:elephant176v2 7614.28 7620.96 7632.77 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.97 0.98 0.99 T:aes128gcmv1 1.12 1.13 1.14 aes256gcmv1 8.60 8.65 8.69 ascon128av12 12.80 12.85 12.92 ascon128v12 12.83 12.85 12.89 ascon80pqv12 14.51 14.59 14.70 T:xoodyakround3 15.44 15.46 15.47 ascon128abi32v12 22.46 22.48 22.52 T:schwaemm256128v2 22.61 22.78 22.92 ascon128bi32v12 29.80 29.89 29.91 T:schwaemm192192v2 31.67 31.76 31.80 T:schwaemm128128v2 33.23 33.92 34.83 T:schwaemm256256v2 34.79 34.83 34.88 T:grain128aeadv2 36.96 37.01 37.05 T:isapa128v20 40.51 40.54 40.57 T:isapa128av20 40.77 40.89 41.07 romulusn 43.60 43.63 43.70 T:giftcofb128v1 56.94 57.11 57.17 romulusm 58.18 58.28 59.16 T:tinyjambu128v2 68.63 68.90 69.08 T:isapk128av20 67.52 68.96 69.26 T:tinyjambu192v2 74.05 74.09 74.13 T:tinyjambu256v2 89.37 89.65 90.01 T:isapk128v20 113.62 113.70 113.75 romulust 180.93 181.26 182.02 T:isapxv20 181.70 182.77 183.29 T:elephant200v2 6581.70 6591.77 6613.32 T:elephant176v2 7614.27 7632.10 7666.12 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.98 0.98 0.99 T:aes128gcmv1 1.12 1.13 1.14 aes256gcmv1 8.62 8.65 8.68 ascon128av12 12.80 12.85 12.91 ascon128v12 12.84 12.85 12.87 ascon80pqv12 14.53 14.64 14.74 T:xoodyakround3 15.44 15.46 15.48 ascon128abi32v12 22.49 22.54 22.56 T:schwaemm256128v2 22.64 22.89 22.93 ascon128bi32v12 24.73 24.77 24.81 T:isapa128v20 29.64 29.89 29.90 T:schwaemm192192v2 31.67 31.76 31.80 T:schwaemm128128v2 32.40 32.43 32.47 T:isapa128av20 33.19 33.92 34.74 T:schwaemm256256v2 34.79 34.84 34.87 T:grain128aeadv2 40.96 41.00 41.04 romulusn 43.59 43.64 43.70 T:giftcofb128v1 55.04 55.28 55.41 T:isapk128av20 56.92 57.10 57.18 romulusm 57.91 57.96 58.01 romulust 58.18 58.28 59.18 T:tinyjambu128v2 67.35 68.93 69.25 T:tinyjambu192v2 68.92 69.10 69.34 T:isapk128v20 74.04 74.07 74.11 T:tinyjambu256v2 133.37 133.87 134.39 T:isapxv20 180.54 182.62 183.20 T:elephant200v2 6575.41 6583.26 6613.40 T:elephant176v2 7615.00 7633.64 7666.38 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.62 0.63 0.64 aes256gcmv1 0.63 0.64 0.65 T:aes128gcmv1 8.43 8.46 8.48 ascon128av12 10.16 10.20 10.23 T:xoodyakround3 12.73 12.78 12.82 ascon128v12 12.80 12.86 12.89 ascon80pqv12 15.27 15.31 15.34 ascon128abi32v12 22.41 22.43 22.45 T:schwaemm256128v2 22.74 22.76 22.79 ascon128bi32v12 24.87 24.90 24.95 T:isapa128v20 29.40 29.67 29.75 T:schwaemm192192v2 31.48 31.65 31.71 T:schwaemm128128v2 31.90 31.94 32.03 romulusn 31.97 32.01 32.07 romulusm 32.44 32.46 32.49 T:isapa128av20 32.90 33.66 34.53 T:schwaemm256256v2 34.46 34.53 34.61 T:grain128aeadv2 43.61 43.66 43.70 T:giftcofb128v1 45.25 45.32 47.33 T:tinyjambu128v2 46.67 46.71 46.76 T:tinyjambu256v2 48.71 50.01 50.08 T:tinyjambu192v2 55.02 55.43 55.63 T:isapk128av20 57.98 58.01 58.05 romulust 68.29 69.01 69.29 T:isapk128v20 121.12 122.10 122.61 T:elephant200v2 132.78 133.12 134.45 T:isapxv20 4345.12 4358.72 4371.66 T:elephant176v2 5094.50 5098.20 5108.66 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.64 0.65 0.67 aes256gcmv1 0.64 0.66 0.67 T:aes128gcmv1 8.46 8.53 8.65 ascon128av12 10.18 10.22 10.26 T:xoodyakround3 12.78 12.80 12.83 ascon80pqv12 12.76 12.80 12.86 ascon128v12 15.23 15.26 15.30 ascon128abi32v12 22.41 22.43 22.45 T:schwaemm256128v2 22.66 22.69 22.73 ascon128bi32v12 24.80 24.88 24.97 T:isapa128v20 29.40 29.63 29.74 T:schwaemm192192v2 31.34 31.64 31.70 T:schwaemm128128v2 31.91 31.99 32.05 romulusm 31.96 32.05 32.07 romulusn 32.40 32.47 32.51 T:isapa128av20 32.91 33.72 34.53 T:schwaemm256256v2 34.46 34.54 34.62 T:grain128aeadv2 43.61 43.66 43.71 T:giftcofb128v1 45.24 45.30 47.10 T:tinyjambu128v2 46.63 46.67 46.71 T:tinyjambu256v2 48.58 50.02 50.07 T:tinyjambu192v2 54.96 55.37 55.70 T:isapk128av20 57.97 58.00 58.04 romulust 68.33 68.95 69.23 T:isapk128v20 120.81 121.97 122.71 T:elephant200v2 133.05 134.04 134.74 T:isapxv20 4345.02 4359.19 4372.75 T:elephant176v2 5094.78 5098.02 5107.62 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.65 0.66 0.67 aes256gcmv1 0.65 0.66 0.67 T:aes128gcmv1 8.47 8.52 8.66 ascon128av12 10.17 10.21 10.26 T:xoodyakround3 12.78 12.80 12.83 ascon80pqv12 12.77 12.80 12.87 ascon128v12 15.23 15.26 15.30 ascon128abi32v12 22.42 22.45 22.49 T:schwaemm256128v2 22.67 22.69 22.74 ascon128bi32v12 24.80 24.91 25.01 T:isapa128v20 29.38 29.64 29.74 T:schwaemm192192v2 31.35 31.64 31.70 T:schwaemm128128v2 31.94 31.99 32.06 romulusn 31.96 32.02 32.05 romulusm 32.34 32.42 32.47 T:isapa128av20 32.91 33.70 34.53 T:schwaemm256256v2 34.47 34.54 34.61 T:grain128aeadv2 43.61 43.64 43.68 T:giftcofb128v1 45.26 45.32 47.12 T:tinyjambu128v2 46.64 46.67 46.71 T:tinyjambu256v2 48.57 50.01 50.08 T:tinyjambu192v2 55.02 55.33 55.65 T:isapk128av20 57.98 58.03 58.10 romulust 68.40 68.90 69.25 T:isapk128v20 121.14 122.01 122.85 T:elephant200v2 133.07 133.43 134.68 T:isapxv20 4344.17 4356.60 4372.99 T:elephant176v2 5099.55 5109.71 5121.09 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.10 1.10 1.11 T:aes128gcmv1 1.20 1.20 1.21 aes256gcmv1 8.78 8.81 8.89 ascon128av12 13.01 13.04 13.07 ascon128v12 13.06 13.08 13.11 ascon80pqv12 14.75 14.78 14.88 T:xoodyakround3 15.98 16.00 16.02 ascon128abi32v12 23.08 23.10 23.12 ascon128bi32v12 23.14 23.18 23.21 T:schwaemm256128v2 30.32 30.41 30.45 T:schwaemm192192v2 32.12 32.18 32.22 T:schwaemm128128v2 34.13 34.80 35.56 T:schwaemm256256v2 35.00 35.04 35.09 T:grain128aeadv2 41.61 41.65 41.72 romulusn 43.28 43.30 43.32 T:isapa128av20 44.09 44.12 44.15 T:giftcofb128v1 53.95 53.99 54.02 T:isapa128v20 57.68 57.78 57.82 romulusm 58.67 58.71 58.74 T:tinyjambu128v2 68.07 69.45 69.49 T:tinyjambu192v2 74.53 74.56 74.59 T:tinyjambu256v2 79.75 79.86 80.04 T:isapk128av20 115.34 115.38 115.42 romulust 158.22 158.28 158.43 T:isapk128v20 185.88 187.00 187.60 T:elephant200v2 293.06 293.95 294.60 T:isapxv20 6658.62 6662.28 6671.63 T:elephant176v2 7711.09 7722.30 7741.38 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.11 1.12 1.13 T:aes128gcmv1 1.27 1.27 1.28 aes256gcmv1 8.83 8.86 8.89 ascon128av12 13.03 13.05 13.10 ascon128v12 13.03 13.05 13.07 ascon80pqv12 14.65 14.73 14.87 T:xoodyakround3 15.90 15.92 15.93 ascon128abi32v12 23.02 23.14 23.30 ascon128bi32v12 23.16 23.18 23.21 T:schwaemm256128v2 30.35 30.42 30.45 T:schwaemm192192v2 31.97 32.10 32.21 T:schwaemm128128v2 34.14 34.82 35.54 T:schwaemm256256v2 35.24 35.27 35.32 T:grain128aeadv2 41.52 41.76 41.79 romulusn 43.21 43.25 43.29 T:isapa128av20 44.03 44.07 44.12 T:giftcofb128v1 53.97 54.00 54.05 T:isapa128v20 57.76 57.89 57.95 romulusm 58.70 58.74 58.85 T:tinyjambu128v2 68.12 69.45 69.70 T:tinyjambu192v2 74.56 74.59 74.63 T:tinyjambu256v2 79.73 79.78 79.98 T:isapk128av20 115.35 115.39 115.44 romulust 158.18 158.27 158.38 T:isapk128v20 185.66 186.79 187.29 T:elephant200v2 296.09 296.65 297.31 T:isapxv20 6657.91 6661.98 6672.64 T:elephant176v2 7709.42 7721.15 7739.64 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.11 1.12 1.12 T:aes128gcmv1 1.27 1.27 1.28 aes256gcmv1 8.82 8.85 8.88 ascon128av12 13.05 13.06 13.07 ascon80pqv12 13.02 13.06 13.14 ascon128v12 14.85 14.88 14.91 T:xoodyakround3 15.90 15.91 15.93 ascon128abi32v12 23.16 23.22 23.25 T:schwaemm256128v2 23.04 23.28 23.33 ascon128bi32v12 30.31 30.42 30.45 T:schwaemm192192v2 31.97 32.10 32.20 T:schwaemm128128v2 33.37 33.40 33.43 T:isapa128v20 33.97 34.00 34.03 T:isapa128av20 34.20 34.80 35.63 T:schwaemm256256v2 35.23 35.26 35.31 T:grain128aeadv2 41.45 41.49 41.54 romulusn 44.03 44.06 44.12 T:giftcofb128v1 57.74 57.89 57.94 romulusm 58.70 58.74 58.85 T:tinyjambu128v2 59.56 59.60 59.63 romulust 62.28 62.45 62.49 T:isapk128av20 67.99 69.44 69.66 T:tinyjambu192v2 74.56 74.60 74.63 T:tinyjambu256v2 105.59 105.67 105.77 T:isapk128v20 185.68 186.82 187.35 T:elephant200v2 192.72 193.00 193.38 T:isapxv20 6657.25 6661.37 6669.29 T:elephant176v2 7710.02 7719.96 7739.57 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.12 6.21 6.30 T:aes128gcmv1 6.67 6.72 6.78 aes256gcmv1 13.37 13.45 13.72 ascon128av12 17.13 17.26 17.66 ascon128v12 17.26 17.41 17.57 ascon80pqv12 21.34 21.48 21.61 T:xoodyakround3 26.44 26.60 26.83 ascon128abi32v12 31.97 32.07 32.27 ascon128bi32v12 37.79 37.87 38.13 T:schwaemm256128v2 40.60 41.10 41.33 T:schwaemm128128v2 44.55 44.74 44.93 T:grain128aeadv2 48.88 49.03 49.35 T:schwaemm192192v2 53.26 53.37 53.56 T:giftcofb128v1 53.99 55.35 56.49 T:schwaemm256256v2 57.37 57.47 57.68 romulusn 68.94 69.27 69.80 T:tinyjambu128v2 73.18 73.34 73.60 romulusm 80.71 81.01 81.30 T:tinyjambu192v2 85.99 86.18 86.52 T:tinyjambu256v2 105.50 105.81 106.28 T:isapa128av20 153.97 154.36 154.80 romulust 262.19 263.57 263.96 T:elephant200v2 314.64 317.23 318.41 T:isapk128av20 444.04 444.36 444.82 T:isapa128v20 1712.06 1713.97 1716.15 T:isapk128v20 2855.94 2865.92 2886.09 T:isapxv20 8254.77 8259.18 8268.72 T:elephant176v2 10334.69 10349.98 10378.30 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.05 6.10 6.17 T:aes128gcmv1 6.67 6.75 7.02 aes256gcmv1 13.41 13.49 13.73 ascon128av12 17.19 17.32 17.56 ascon128v12 17.32 17.46 17.88 ascon80pqv12 21.33 21.49 21.88 T:xoodyakround3 26.20 26.28 26.42 ascon128abi32v12 31.86 32.01 32.22 ascon128bi32v12 37.88 37.96 38.11 T:schwaemm256128v2 40.32 41.18 41.30 T:schwaemm128128v2 44.99 45.21 45.45 T:grain128aeadv2 48.98 49.10 49.25 T:schwaemm192192v2 53.55 53.65 53.85 T:giftcofb128v1 54.02 55.13 56.29 T:schwaemm256256v2 57.74 57.93 58.07 romulusn 68.96 69.25 70.21 T:tinyjambu128v2 75.66 75.83 76.11 romulusm 80.39 81.30 81.63 T:tinyjambu192v2 86.18 86.41 86.63 T:tinyjambu256v2 105.48 105.70 106.17 T:isapa128av20 153.91 154.22 154.57 romulust 261.85 263.47 263.82 T:elephant200v2 315.11 316.49 318.13 T:isapk128av20 444.36 444.96 445.37 T:isapa128v20 1711.68 1714.44 1716.77 T:isapk128v20 2912.33 2915.30 2924.86 T:isapxv20 8244.66 8251.60 8267.41 T:elephant176v2 10334.83 10348.15 10377.63 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.05 6.11 6.16 T:aes128gcmv1 6.68 6.72 6.79 aes256gcmv1 13.38 13.49 13.84 ascon128av12 17.20 17.31 17.49 ascon128v12 17.37 17.45 17.58 ascon80pqv12 21.38 21.55 21.84 T:xoodyakround3 26.19 26.26 26.40 ascon128abi32v12 31.84 31.99 32.13 ascon128bi32v12 37.85 37.91 37.97 T:schwaemm256128v2 40.19 41.18 41.32 T:schwaemm128128v2 45.01 45.20 45.38 T:grain128aeadv2 48.96 49.05 49.15 T:schwaemm192192v2 53.54 53.64 53.80 T:giftcofb128v1 53.91 55.06 56.31 T:schwaemm256256v2 57.73 57.91 58.03 romulusn 68.97 69.18 70.22 T:tinyjambu128v2 69.29 69.51 69.89 T:isapa128av20 75.49 75.63 75.82 romulusm 80.34 81.30 81.57 T:tinyjambu192v2 86.08 86.29 86.53 T:tinyjambu256v2 96.69 96.93 97.43 romulust 214.02 215.75 220.45 T:isapk128av20 231.73 231.96 232.36 T:isapa128v20 261.90 263.48 263.91 T:elephant200v2 925.62 927.65 928.95 T:isapk128v20 1523.85 1530.08 1533.90 T:isapxv20 8246.93 8254.64 8276.88 T:elephant176v2 10335.57 10351.13 10380.38 T:elephant160v2