VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20260330

[Page version: 20260418 07:16:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.11 2.12 2.13 T:aes128gcmv1 2.44 2.44 2.45 aes256gcmv1 10.16 10.19 10.20 ascon128av12 14.81 14.83 14.83 ascon80pqv12 14.97 14.98 14.98 ascon128v12 18.61 18.63 18.81 T:xoodyakround3 20.80 20.81 20.81 ascon128abi32v12 30.87 30.88 31.32 ascon128bi32v12 32.83 32.84 32.85 T:schwaemm256128v2 39.68 39.72 39.85 T:grain128aeadv2 41.07 41.08 41.08 T:schwaemm256256v2 42.99 43.01 43.04 T:schwaemm192192v2 45.06 45.08 45.10 T:schwaemm128128v2 46.87 46.91 46.92 romulusn 48.18 48.21 48.23 T:giftcofb128v1 59.00 59.02 59.02 T:isapa128v20 59.29 59.30 59.30 T:isapa128av20 74.94 74.94 74.94 T:tinyjambu128v2 75.15 75.18 75.25 romulusm 88.94 88.94 88.95 T:tinyjambu192v2 97.69 97.69 97.71 T:tinyjambu256v2 108.18 110.46 112.25 T:isapk128av20 140.31 146.34 153.33 T:isapk128v20 149.96 150.09 150.33 T!!!romulust 218.79 219.99 221.97 T:elephant200v2 226.00 228.00 230.14 T:isapxv20 11573.10 11583.21 11588.45 T:elephant176v2 13360.84 13365.83 13374.92 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 2.22 2.26 2.28 T:aes128gcmv1 2.41 2.42 2.42 aes256gcmv1 10.25 10.26 10.26 ascon128av12 14.88 14.89 14.89 ascon80pqv12 15.22 15.23 15.24 ascon128v12 18.11 18.12 18.31 T:xoodyakround3 20.73 21.04 21.05 ascon128abi32v12 31.27 31.27 31.30 ascon128bi32v12 33.03 33.03 33.04 T:schwaemm256128v2 40.94 40.94 40.96 T:schwaemm256256v2 41.40 41.41 41.43 T:grain128aeadv2 43.13 43.14 43.15 T:schwaemm192192v2 44.97 45.06 45.06 T:schwaemm128128v2 45.56 45.60 45.60 romulusn 48.15 48.21 48.22 T:giftcofb128v1 58.69 58.72 58.76 T:isapa128v20 59.29 59.30 59.31 T:isapa128av20 75.12 75.12 75.13 T:tinyjambu128v2 76.09 76.12 76.12 romulusm 89.50 89.50 89.50 T:tinyjambu192v2 97.38 97.38 97.39 T:tinyjambu256v2 107.91 110.39 112.28 T:isapk128av20 140.29 146.37 153.29 T:isapk128v20 149.92 150.10 150.34 T!!!romulust 218.69 219.46 221.61 T:elephant200v2 225.25 227.33 231.92 T:isapxv20 11572.97 11582.13 11588.60 T:elephant176v2 13358.65 13366.29 13376.07 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 2.22 2.26 2.29 T:aes128gcmv1 2.41 2.42 2.42 aes256gcmv1 10.25 10.26 10.26 ascon128av12 14.89 14.89 14.89 ascon80pqv12 15.22 15.23 15.23 ascon128v12 18.16 18.17 18.36 T:xoodyakround3 20.76 21.04 21.05 ascon128abi32v12 28.20 28.20 28.27 T:isapa128v20 31.27 31.28 31.30 ascon128bi32v12 33.02 33.03 33.03 T:schwaemm256128v2 39.46 39.47 39.48 T:isapa128av20 40.94 40.94 40.95 T:schwaemm256256v2 41.40 41.41 41.42 T:grain128aeadv2 43.11 43.12 43.13 T:schwaemm192192v2 44.95 45.05 45.06 T:schwaemm128128v2 45.57 45.60 45.60 romulusn 48.10 48.17 48.22 T:giftcofb128v1 53.60 53.61 53.62 T!!!romulust 69.21? 73.89? 77.23? T:isapk128av20 75.12 75.12 75.13 T:tinyjambu128v2 76.07 76.12 76.13 romulusm 89.50 89.50 89.50 T:tinyjambu192v2 84.47? 90.52? 97.60? T:isapk128v20 97.38 97.38 97.38 T:tinyjambu256v2 131.81 132.33 135.68 T:isapxv20 218.69 219.21 221.61 T:elephant200v2 11570.46 11582.59 11590.33 T:elephant176v2 13359.09 13366.46 13372.82 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.69 1.69 1.70 T:aes128gcmv1 1.83 1.84 1.84 aes256gcmv1 9.83 9.84 9.84 ascon128av12 13.97 13.98 14.25 T:xoodyakround3 14.93 14.94 14.94 ascon128v12 14.97 14.98 14.98 ascon80pqv12 21.28 21.29 21.30 ascon128abi32v12 31.10 31.11 31.13 ascon128bi32v12 32.65 32.66 32.66 T:schwaemm256128v2 38.08 38.09 38.12 romulusn 39.47 39.52 39.75 T:grain128aeadv2 40.68 40.69 40.71 T:schwaemm256256v2 42.90 42.91 42.93 T:schwaemm192192v2 43.29 43.31 43.31 T:isapa128v20 44.83 44.94 44.94 T:schwaemm128128v2 48.19 48.19 48.23 T:giftcofb128v1 49.37 49.38 49.38 T:isapa128av20 52.69 52.78 52.89 romulusm 60.09 60.09 60.10 T:tinyjambu128v2 69.34 69.34 69.36 T:tinyjambu192v2 73.22 73.22 73.27 T:tinyjambu256v2 91.00 91.15 91.78 T:isapk128av20 101.09 101.14 101.25 T!!!romulust 118.46 118.87 124.37 T:isapk128v20 164.42 165.18 166.58 T:elephant200v2 179.38 180.32 181.86 T:isapxv20 8647.61 8653.48 8665.53 T:elephant176v2 10017.99 10021.47 10027.91 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.73 1.74 1.77 T:aes128gcmv1 1.82 1.82 1.83 aes256gcmv1 10.07 10.07 10.07 ascon128av12 13.85 13.87 13.99 T:xoodyakround3 15.05 15.06 15.06 ascon128v12 15.26 15.26 15.26 ascon80pqv12 21.04 21.05 21.10 ascon128abi32v12 30.87 30.89 30.90 ascon128bi32v12 32.77 32.77 32.78 T:schwaemm256128v2 37.44 37.45 37.45 romulusn 40.33 40.34 40.36 T:grain128aeadv2 40.62 40.63 40.63 T:schwaemm256256v2 42.96 42.97 42.98 T:schwaemm192192v2 43.29 43.31 43.35 T:isapa128v20 44.79 44.85 44.86 T:schwaemm128128v2 48.20 48.21 48.24 T:giftcofb128v1 49.38 49.39 49.40 T:isapa128av20 52.67 52.76 52.77 romulusm 60.34 60.34 60.34 T:tinyjambu128v2 69.47 69.47 69.50 T:tinyjambu192v2 73.06 73.06 73.11 T:tinyjambu256v2 90.96 91.18 91.82 T:isapk128av20 101.23 101.31 101.41 T!!!romulust 118.74 118.90 124.26 T:isapk128v20 164.37 165.02 166.37 T:elephant200v2 181.62 181.78 183.67 T:isapxv20 8648.45 8654.22 8658.14 T:elephant176v2 10017.82 10023.00 10031.93 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.73 1.74 1.76 T:aes128gcmv1 1.82 1.82 1.83 aes256gcmv1 10.07 10.07 10.07 ascon128av12 13.88 13.90 14.02 T:xoodyakround3 15.05 15.06 15.06 ascon128v12 15.26 15.26 15.26 ascon80pqv12 21.04 21.05 21.09 ascon128abi32v12 28.39 28.42 28.48 T:isapa128v20 30.88 30.89 30.94 ascon128bi32v12 32.77 32.77 32.78 T:schwaemm256128v2 37.44 37.45 37.46 romulusn 39.47 39.47 39.47 T:isapa128av20 40.33 40.34 40.35 T:grain128aeadv2 40.62 40.63 40.63 T:schwaemm256256v2 42.96 42.96 42.97 T:schwaemm192192v2 44.77 44.85 44.86 T:schwaemm128128v2 48.17 48.19 48.21 T:giftcofb128v1 52.63 52.76 52.77 romulusm 53.02 53.03 53.03 T!!!romulust 60.34 60.34 60.35 T:tinyjambu128v2 69.47 69.47 69.48 T:tinyjambu192v2 71.92 72.98 73.67 T:isapk128av20 73.06 73.06 73.11 T:tinyjambu256v2 90.57 90.98 94.98 T:isapk128v20 132.02 134.30 135.05 T:isapxv20 164.37 164.99 166.51 T:elephant200v2 8650.41 8654.79 8660.41 T:elephant176v2 10018.03 10020.52 10026.42 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.23 1.24 1.24 aes256gcmv1 1.26 1.27 1.27 T:aes128gcmv1 9.50 9.51 9.51 ascon128av12 9.58 9.60 9.70 T:xoodyakround3 14.88 14.88 14.89 ascon128v12 15.13 15.13 15.13 ascon80pqv12 21.60 21.61 21.62 ascon128abi32v12 27.62 27.62 27.63 T:isapa128v20 29.30 29.32 29.33 romulusn 29.39 29.40 29.43 romulusm 30.87 30.90 30.92 ascon128bi32v12 32.46 32.53 32.53 T:schwaemm256128v2 39.19 39.23 39.73 T:grain128aeadv2 39.47 39.47 39.47 T:isapa128av20 40.32 40.32 40.32 T:schwaemm256256v2 42.83 42.83 42.85 T:schwaemm192192v2 44.65 44.67 44.80 T:schwaemm128128v2 45.25 45.25 45.25 T:tinyjambu128v2 48.23 48.25 48.29 T:giftcofb128v1 48.87 48.88 48.88 T:tinyjambu256v2 49.75 49.75 49.75 T:tinyjambu192v2 52.81 52.82 52.83 T!!!romulust 72.49 72.53 72.64 T:isapk128av20 85.26? 91.09? 96.83? T:isapk128v20 110.42 110.57 111.83 T:elephant200v2 131.68 132.58 133.35 T:isapxv20 5715.17 5722.07 5726.26 T:elephant176v2 6673.58 6679.64 6683.58 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.22 1.23 1.24 aes256gcmv1 1.25 1.25 1.26 T:aes128gcmv1 9.59 9.60 9.70 T:xoodyakround3 9.87 9.88 9.89 ascon128av12 14.88 14.88 14.89 ascon128v12 15.75 15.76 15.77 ascon80pqv12 21.59 21.60 21.61 ascon128abi32v12 28.03 28.63 28.64 T:isapa128v20 29.32 29.33 29.34 romulusn 29.41 29.43 29.44 romulusm 30.85 30.86 30.90 ascon128bi32v12 32.52 32.53 32.55 T:schwaemm256128v2 39.26 39.27 39.29 T:grain128aeadv2 39.46 39.47 39.48 T:isapa128av20 40.32 40.32 40.33 T:schwaemm256256v2 42.83 42.84 42.86 T:schwaemm192192v2 44.69 44.80 44.80 T:schwaemm128128v2 45.56 45.56 45.56 T:tinyjambu128v2 48.22 48.23 48.29 T:giftcofb128v1 48.88 48.88 48.88 T:tinyjambu256v2 49.69 49.69 49.69 T:tinyjambu192v2 53.08 53.09 53.11 T!!!romulust 72.48 72.57 72.62 T:isapk128av20 85.92? 91.08? 98.01? T:isapk128v20 110.43 110.69 111.83 T:elephant200v2 130.29 132.24 136.11 T:isapxv20 5717.00 5722.29 5725.43 T:elephant176v2 6673.56 6678.55 6685.43 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.22 1.23 1.23 aes256gcmv1 1.25 1.25 1.26 T:aes128gcmv1 9.59 9.60 9.70 T:xoodyakround3 9.88 9.88 9.89 ascon128av12 14.88 14.89 14.89 ascon128v12 15.73 15.76 15.77 ascon80pqv12 21.59 21.60 21.61 ascon128abi32v12 28.63 28.63 28.63 T:isapa128v20 29.32 29.33 29.34 romulusn 29.41 29.43 29.44 romulusm 30.85 30.87 30.90 ascon128bi32v12 32.52 32.53 32.55 T:schwaemm256128v2 39.27 39.28 39.29 T:grain128aeadv2 39.47 39.47 39.48 T:isapa128av20 40.33 40.33 40.33 T:schwaemm256256v2 42.82 42.82 42.84 T:schwaemm192192v2 44.69 44.79 44.79 T:schwaemm128128v2 45.56 45.56 45.56 T:tinyjambu128v2 48.22 48.24 48.30 T:giftcofb128v1 48.88 48.88 48.88 T:tinyjambu256v2 49.69 49.69 49.69 T:tinyjambu192v2 53.06 53.07 53.07 T!!!romulust 72.49 72.57 72.69 T:isapk128av20 85.23? 91.02? 97.59? T:isapk128v20 110.43 110.65 111.83 T:elephant200v2 130.25 131.79 134.27 T:isapxv20 5715.74 5722.23 5725.33 T:elephant176v2 6673.17 6679.37 6681.64 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.84 1.85 1.86 T:aes128gcmv1 2.00 2.00 2.01 aes256gcmv1 10.07 10.07 10.07 ascon128av12 14.26 14.26 14.39 T:xoodyakround3 15.14 15.15 15.15 ascon128v12 15.20 15.20 15.20 ascon80pqv12 21.75 21.75 21.75 ascon128abi32v12 31.55 31.55 31.56 ascon128bi32v12 33.56 33.61 33.61 T:schwaemm256128v2 38.42 38.42 38.45 romulusn 39.97 39.98 40.22 T:grain128aeadv2 41.71 41.72 41.72 T:schwaemm256256v2 43.90 43.91 43.91 T:schwaemm192192v2 45.44 45.50 45.50 T:schwaemm128128v2 48.68 48.68 48.69 T:giftcofb128v1 52.67 52.68 52.70 T:isapa128av20 53.09 53.11 53.12 romulusm 60.55 60.55 60.56 T:tinyjambu128v2 63.47 63.47 63.47 T:isapa128v20 69.86 69.86 69.87 T:tinyjambu192v2 73.76 73.76 73.81 T:tinyjambu256v2 102.75 102.84 102.96 T!!!romulust 107.41 107.58 107.86 T:isapk128av20 168.07 168.44 169.77 T:elephant200v2 221.49 221.91 223.20 T:isapk128v20 284.46 284.60 285.26 T:isapxv20 8713.00 8716.72 8719.29 T:elephant176v2 10131.94 10134.04 10139.72 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.88 1.89 1.91 T:aes128gcmv1 1.98 1.98 1.99 aes256gcmv1 10.30 10.30 10.30 ascon128av12 14.02 14.02 14.13 T:xoodyakround3 15.27 15.27 15.27 ascon128v12 15.48 15.48 15.48 ascon80pqv12 21.52 21.52 21.52 ascon128abi32v12 31.33 31.33 31.34 ascon128bi32v12 33.69 33.73 33.73 T:schwaemm256128v2 37.79 37.79 37.79 romulusn 40.82 40.82 40.85 T:grain128aeadv2 41.66 41.66 41.67 T:schwaemm256256v2 43.98 43.98 43.99 T:schwaemm192192v2 45.40 45.41 45.41 T:schwaemm128128v2 48.71 48.71 48.72 T:giftcofb128v1 52.68 52.68 52.70 T:isapa128av20 53.12 53.18 53.18 romulusm 60.81 60.81 60.81 T:tinyjambu128v2 63.45 63.45 63.47 T:isapa128v20 69.99 69.99 70.07 T:tinyjambu192v2 73.61 73.61 73.66 T:tinyjambu256v2 102.91 102.98 103.09 T!!!romulust 107.55 107.73 107.99 T:isapk128av20 168.02 168.41 169.73 T:elephant200v2 221.60 222.02 223.24 T:isapk128v20 286.94 287.00 287.90 T:isapxv20 8710.20 8716.67 8718.59 T:elephant176v2 10131.40 10133.80 10140.58 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.88 1.90 1.91 T:aes128gcmv1 1.98 1.98 1.98 aes256gcmv1 10.30 10.30 10.30 ascon128av12 14.05 14.07 14.17 T:xoodyakround3 15.27 15.27 15.27 ascon128v12 15.48 15.48 15.48 ascon80pqv12 21.52 21.52 21.52 ascon128abi32v12 31.33 31.33 31.34 ascon128bi32v12 33.73 33.73 33.73 T:schwaemm256128v2 37.79 37.79 37.80 romulusn 38.77 38.77 38.82 T:isapa128v20 40.82 40.82 40.82 T:grain128aeadv2 41.35 41.35 41.35 T:isapa128av20 41.66 41.66 41.66 T:schwaemm256256v2 43.98 43.98 43.99 T:schwaemm192192v2 45.40 45.41 45.41 T:schwaemm128128v2 48.71 48.72 48.73 T:giftcofb128v1 53.10 53.16 53.18 romulusm 54.62 54.62 54.66 T!!!romulust 60.81 60.81 60.81 T:tinyjambu128v2 69.99 69.99 70.03 T:tinyjambu192v2 73.61 73.61 73.64 T:tinyjambu256v2 82.75 83.25 84.19 T:isapk128av20 146.44 147.01 147.92 T:isapk128v20 168.02 168.43 169.75 T:elephant200v2 186.05 188.21 188.27 T:isapxv20 8712.46 8717.74 8722.70 T:elephant176v2 10132.62 10136.36 10143.79 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 7.14 7.19 7.38 T:aes128gcmv1 8.25 8.27 8.37 aes256gcmv1 15.28 15.31 15.42 ascon128av12 19.87 19.97 20.18 ascon128v12 20.12 20.16 20.34 ascon80pqv12 20.94 21.11 21.25 T:xoodyakround3 32.03 32.19 32.37 ascon128abi32v12 41.35 41.43 41.63 ascon128bi32v12 45.88 45.93 46.05 romulusn 50.36 50.47 50.72 T:grain128aeadv2 54.79 54.79 54.82 T:schwaemm256128v2 58.10 58.19 58.28 T:schwaemm128128v2 59.69 59.83 59.96 T:giftcofb128v1 60.24 60.56 60.76 romulusm 64.82 64.85 64.93 T:schwaemm256256v2 71.13 71.13 71.15 T:tinyjambu128v2 71.08 71.15 71.26 T:schwaemm192192v2 81.74 81.74 81.74 T:tinyjambu192v2 86.17 86.17 86.19 T:tinyjambu256v2 128.49 128.49 128.51 T:isapa128av20 140.38 140.71 141.05 T!!!romulust 238.66 238.95 240.99 T:elephant200v2 461.62 465.58 465.98 T:isapk128av20 527.03 527.03 527.03 T:isapa128v20 2439.69 2567.20 2568.40 T:isapk128v20 2639.42 2642.34 2659.03 T:isapxv20 10833.49 10839.21 10895.88 T:elephant176v2 13546.04 13550.82 13602.65 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 7.38 7.42 7.52 T:aes128gcmv1 8.14 8.21 8.27 aes256gcmv1 15.40 15.43 15.56 ascon128av12 20.03 20.05 20.23 ascon128v12 20.42 20.42 20.51 ascon80pqv12 20.67 20.73 20.95 T:xoodyakround3 32.06 32.23 32.42 ascon128abi32v12 41.30 41.40 41.69 ascon128bi32v12 45.38 45.44 45.48 romulusn 51.01 51.10 51.45 T:grain128aeadv2 55.02 55.02 55.06 T:schwaemm256128v2 58.07 58.13 58.23 T:schwaemm128128v2 59.95 60.10 60.37 T:giftcofb128v1 62.96 63.03 63.20 romulusm 64.93 65.00 65.17 T:schwaemm256256v2 71.19 71.25 71.44 T:schwaemm192192v2 71.56 71.56 71.64 T:tinyjambu128v2 82.04 82.04 82.04 T:tinyjambu192v2 86.27 86.27 86.28 T:tinyjambu256v2 128.29 128.31 128.62 T:isapa128av20 141.25 141.48 141.67 T!!!romulust 238.93 239.23 240.99 T:elephant200v2 463.81 468.39 468.44 T:isapk128av20 526.78 526.78 527.19 T:isapa128v20 2449.26 2569.60 2569.97 T:isapk128v20 2634.47 2635.46 2637.61 T:isapxv20 10832.89 10838.96 10877.93 T:elephant176v2 13545.92 13551.45 13604.42 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 7.46 7.52 7.52 T:aes128gcmv1 8.12 8.19 8.22 aes256gcmv1 15.39 15.43 15.47 ascon128av12 20.05 20.07 20.15 ascon128v12 20.42 20.42 20.43 ascon80pqv12 20.72 20.76 20.91 T:xoodyakround3 32.03 32.09 32.17 ascon128abi32v12 41.30 41.40 41.67 ascon128bi32v12 45.40 45.48 45.50 romulusn 50.97 51.08 51.14 T:grain128aeadv2 55.14 55.15 55.18 T:schwaemm256128v2 58.09 58.13 58.14 T:schwaemm128128v2 59.98 60.10 60.32 T:giftcofb128v1 62.99 63.07 63.17 romulusm 64.93 64.94 65.02 T:schwaemm256256v2 71.45 71.52 71.55 T:schwaemm192192v2 71.56 71.57 71.57 T:tinyjambu128v2 82.04 82.04 82.04 T:tinyjambu192v2 84.53 84.53 84.61 T:isapa128av20 86.27 86.27 86.27 T:tinyjambu256v2 90.60 90.79 90.94 T!!!romulust 238.84 239.06 241.00 T:elephant200v2 276.72 276.72 276.72 T:isapa128v20 296.78 299.82 321.84 T:isapk128av20 1381.12 1381.40 1382.71 T:isapxv20 1313.30 1416.84 1417.19 T:isapk128v20 10832.81 10839.28 10873.99 T:elephant176v2 13545.68 13551.77 13628.32 T:elephant160v2