VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20240425

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.13 2.32 2.34 T:aes128gcmv1 2.33 2.33 2.34 aes256gcmv1 10.46 10.47 10.47 ascon128av12 15.16 15.16 15.16 ascon128v12 15.40 15.41 15.41 ascon80pqv12 23.43 23.44 23.45 ascon128abi32v12 23.65 24.12 24.15 T:xoodyakround3 27.88 27.89 27.91 T:schwaemm256128v2 34.44 34.45 34.45 ascon128bi32v12 34.43 34.68 37.44 T:schwaemm256256v2 36.54 36.55 36.56 T:schwaemm128128v2 37.16 37.19 37.51 T:schwaemm192192v2 39.53 39.95 39.96 T:grain128aeadv2 45.73 45.77 45.84 romulusn 48.07 48.43 48.43 T:giftcofb128v1 62.47 62.67 62.93 T:isapa128av20 69.15 69.16 69.18 T:isapa128v20 75.82 76.25 76.75 romulusm 83.43 83.43 83.83 T:tinyjambu128v2 97.20 97.21 97.23 T:tinyjambu192v2 109.37 109.39 109.63 T:tinyjambu256v2 113.04 113.34 113.50 T:isapk128av20 144.60 144.66 144.72 romulust 152.04 152.20 153.85 T:isapk128v20 220.70 221.27 221.51 T:isapxv20 238.51 243.21 243.24 T:elephant200v2 11089.55 11095.35 11152.20 T:elephant176v2 12328.92 12330.58 12331.61 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 2.34 2.36 2.37 aes256gcmv1 2.21 2.43 2.45 T:aes128gcmv1 10.05 10.06 10.07 ascon128av12 14.99 15.01 15.02 ascon128v12 15.12 15.12 15.13 ascon80pqv12 22.95 23.47 23.47 T:xoodyakround3 23.57 23.57 23.58 ascon128abi32v12 27.79 27.81 27.84 T:schwaemm256128v2 33.94 34.21 37.27 T:schwaemm256256v2 34.49 34.51 34.52 ascon128bi32v12 36.53 36.54 36.54 T:schwaemm128128v2 37.06 37.08 37.25 T:schwaemm192192v2 41.89 41.90 41.90 T:grain128aeadv2 45.26 45.31 45.34 romulusn 48.55 48.57 48.73 T:giftcofb128v1 62.41 62.45 62.86 T:isapa128av20 69.18 69.19 69.20 T:isapa128v20 76.04 76.10 76.42 romulusm 83.72 83.72 83.78 T:tinyjambu128v2 97.25 97.27 97.52 T:tinyjambu192v2 108.72 108.76 108.78 T:tinyjambu256v2 112.96 113.25 113.47 T:isapk128av20 143.84 144.65 144.69 romulust 151.45 152.26 153.28 T:isapk128v20 220.97 221.42 221.53 T:isapxv20 243.20 243.22 243.24 T:elephant200v2 11090.89 11094.21 11153.48 T:elephant176v2 12329.23 12330.53 12331.05 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 2.35 2.35 2.36 aes256gcmv1 2.21 2.42 2.44 T:aes128gcmv1 10.05 10.06 10.07 ascon128av12 15.00 15.00 15.01 ascon128v12 15.12 15.12 15.13 ascon80pqv12 23.05 23.53 23.57 T:xoodyakround3 23.57 23.57 23.57 ascon128abi32v12 27.79 27.81 27.84 T:schwaemm256128v2 33.95 34.21 37.03 T:schwaemm256256v2 34.51 34.51 34.52 ascon128bi32v12 34.49 34.51 34.79 T:isapa128v20 36.52 36.54 36.55 T:schwaemm128128v2 37.06 37.09 37.25 T:schwaemm192192v2 41.89 41.89 41.89 T:grain128aeadv2 42.57 42.59 42.64 T:isapa128av20 45.73 45.90 45.91 romulusn 48.56 48.57 48.73 T:giftcofb128v1 51.79 51.85 52.12 romulust 74.32 74.60 74.79 T:isapk128av20 76.08 76.11 76.55 romulusm 83.72 83.72 83.80 T:tinyjambu128v2 94.46 94.48 94.64 T:isapk128v20 97.25 97.27 97.52 T:tinyjambu192v2 108.73 108.78 109.13 T:tinyjambu256v2 129.95 130.14 130.39 T:isapxv20 243.20 243.22 243.65 T:elephant200v2 11090.34 11092.91 11149.73 T:elephant176v2 12328.88 12330.95 12334.88 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.77 1.79 1.80 aes256gcmv1 1.69? 1.81? 1.92? T:aes128gcmv1 10.22 10.23 10.24 ascon128av12 14.74 14.75 14.75 ascon80pqv12 14.95 14.96 14.97 ascon128v12 16.76 17.22 17.24 T:xoodyakround3 22.93 22.95 22.96 ascon128abi32v12 27.70 27.71 27.71 T:schwaemm256128v2 34.22 34.23 34.24 ascon128bi32v12 34.19 34.40 37.56 T:schwaemm256256v2 36.46 36.47 36.61 T:schwaemm128128v2 36.67 36.70 37.05 T:schwaemm192192v2 38.00 38.02 38.07 romulusn 39.41 39.56 39.59 T:grain128aeadv2 48.22 48.22 48.23 T:giftcofb128v1 51.61 51.61 51.62 T:isapa128v20 52.52 52.55 52.72 T:isapa128av20 53.34 53.38 53.43 romulusm 67.49 67.97 67.99 T:tinyjambu128v2 75.97 75.98 75.99 T:tinyjambu192v2 82.67 82.69 82.70 T:tinyjambu256v2 93.76 93.85 94.06 T:isapk128av20 97.78 97.81 98.49 romulust 123.60 123.73 124.42 T:isapk128v20 176.19 179.03 179.07 T:isapxv20 181.16 181.20 181.42 T:elephant200v2 8256.28 8258.38 8302.25 T:elephant176v2 9243.67 9245.11 9247.50 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.79 1.81 1.82 aes256gcmv1 1.71? 1.85? 1.94? T:aes128gcmv1 10.06 10.07 10.08 ascon128av12 14.87 14.87 14.88 ascon80pqv12 14.93 14.94 14.95 ascon128v12 16.61 16.79 16.80 T:xoodyakround3 23.13 23.15 23.16 ascon128abi32v12 27.66 27.67 27.68 T:schwaemm256128v2 33.78 33.79 33.81 ascon128bi32v12 33.93 34.23 36.99 T:schwaemm256256v2 36.45 36.46 36.63 T:schwaemm128128v2 36.68 36.77 37.05 T:schwaemm192192v2 37.74 37.78 37.86 romulusn 40.50 40.51 40.55 T:grain128aeadv2 47.85 47.90 47.91 T:giftcofb128v1 51.32 51.60 51.78 T:isapa128v20 52.71 52.73 52.73 T:isapa128av20 53.15 53.22 53.34 romulusm 68.00 68.07 68.08 T:tinyjambu128v2 76.14 76.15 76.20 T:tinyjambu192v2 82.21 82.22 82.23 T:tinyjambu256v2 93.74 93.89 94.12 T:isapk128av20 97.80 97.98 98.44 romulust 123.27 123.73 124.37 T:isapk128v20 176.14 178.18 179.08 T:isapxv20 181.17 181.20 181.39 T:elephant200v2 8256.12 8258.25 8301.37 T:elephant176v2 9243.65 9245.30 9247.18 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.81 1.81 1.82 aes256gcmv1 1.73 1.83 1.85 T:aes128gcmv1 10.07 10.08 10.08 ascon128av12 14.88 14.89 14.89 ascon80pqv12 14.94 14.94 14.95 ascon128v12 16.65 16.82 16.85 T:xoodyakround3 23.14 23.15 23.15 ascon128abi32v12 27.66 27.67 27.68 T:schwaemm256128v2 33.78 33.79 33.79 ascon128bi32v12 33.95 34.21 37.23 T:schwaemm256256v2 34.28 34.29 34.29 T:isapa128v20 36.46 36.62 36.63 T:schwaemm128128v2 36.68 36.70 37.05 T:schwaemm192192v2 37.75 37.77 37.87 romulusn 40.51 40.52 40.52 T:grain128aeadv2 42.56 42.59 42.62 T:isapa128av20 47.84 47.90 47.91 T:giftcofb128v1 51.36 51.57 52.02 romulust 53.17 53.21 53.54 romulusm 67.93 68.07 68.07 T:tinyjambu128v2 74.50 74.54 74.57 T:isapk128av20 76.14 76.15 76.27 T:tinyjambu192v2 82.21 82.23 82.23 T:tinyjambu256v2 94.88 94.91 95.41 T:isapk128v20 130.64 131.94 132.21 T:isapxv20 181.17 181.20 181.30 T:elephant200v2 8256.32 8258.81 8302.39 T:elephant176v2 9243.55 9244.88 9245.46 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.24 1.26 1.28 aes256gcmv1 1.27? 1.30? 1.51? T:aes128gcmv1 9.98 9.99 10.23 ascon128av12 9.89 10.29 10.35 T:xoodyakround3 14.61 14.62 14.63 ascon80pqv12 14.73 14.75 14.76 ascon128v12 22.45 22.46 22.47 ascon128abi32v12 27.53 27.55 27.55 T:schwaemm256128v2 29.97 29.99 30.22 romulusn 30.00 30.34 30.36 romulusm 33.74 33.74 33.75 ascon128bi32v12 33.85 33.87 33.88 T:isapa128v20 33.94 34.18 36.91 T:schwaemm256256v2 36.38 36.39 36.80 T:schwaemm192192v2 36.38 36.40 36.73 T:schwaemm128128v2 39.06 39.24 39.27 T:grain128aeadv2 42.57 42.58 42.61 T:isapa128av20 47.71 47.74 48.45 T:giftcofb128v1 51.66 52.21 52.25 romulust 52.06 52.43 52.44 T:tinyjambu128v2 54.77 54.77 54.77 T:tinyjambu192v2 56.03 56.04 56.04 T:tinyjambu256v2 74.18 74.37 74.62 T:isapk128av20 95.24 95.30 96.02 T:isapk128v20 119.78 119.80 119.85 T:elephant200v2 130.49 131.90 132.08 T:isapxv20 5424.19 5431.05 5458.04 T:elephant176v2 6158.07 6160.42 6160.82 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.22? 1.27? 1.47? T:aes128gcmv1 1.24 1.28 1.29 aes256gcmv1 10.05 10.06 10.07 ascon128av12 10.11 10.13 10.28 T:xoodyakround3 14.62 14.63 14.63 ascon80pqv12 14.87 14.88 14.88 ascon128v12 22.65 22.66 22.68 ascon128abi32v12 27.53 27.53 27.55 T:schwaemm256128v2 30.20 30.21 30.23 romulusn 30.23 30.26 30.48 romulusm 33.07 33.08 33.08 ascon128bi32v12 33.94 34.18 37.13 T:schwaemm256256v2 33.84 34.43 34.46 T:isapa128v20 36.39 36.42 36.86 T:schwaemm192192v2 36.45 36.73 36.74 T:schwaemm128128v2 39.13 39.17 39.24 T:grain128aeadv2 42.49 42.55 42.61 T:isapa128av20 47.47 47.86 47.93 T:giftcofb128v1 51.67 51.70 52.03 romulust 52.43 52.44 52.46 T:tinyjambu128v2 54.77 54.77 54.77 T:tinyjambu192v2 55.72 55.73 55.73 T:tinyjambu256v2 74.28 74.39 74.55 T:isapk128av20 95.18 95.26 95.99 T:isapk128v20 119.80 119.81 119.86 T:elephant200v2 130.12 131.89 132.08 T:isapxv20 5423.24 5425.71 5457.65 T:elephant176v2 6158.09 6160.03 6160.44 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.25? 1.26? 1.47? T:aes128gcmv1 1.27 1.27 1.28 aes256gcmv1 10.06 10.07 10.08 ascon128av12 10.12 10.14 10.28 T:xoodyakround3 14.62 14.63 14.63 ascon80pqv12 14.86 14.87 14.88 ascon128v12 22.66 22.66 22.67 ascon128abi32v12 27.53 27.53 27.54 T:schwaemm256128v2 30.21 30.23 30.25 romulusn 30.24 30.28 30.48 romulusm 33.07 33.07 33.08 ascon128bi32v12 33.96 34.18 37.13 T:schwaemm256256v2 33.86 34.45 34.45 T:isapa128v20 36.40 36.43 36.87 T:schwaemm192192v2 36.42 36.73 36.74 T:schwaemm128128v2 39.16 39.19 39.27 T:grain128aeadv2 42.56 42.59 42.62 T:isapa128av20 47.16 47.72 47.90 T:giftcofb128v1 51.38 51.72 52.00 romulust 52.43 52.44 52.45 T:tinyjambu128v2 54.77 54.77 54.77 T:tinyjambu192v2 55.71 55.73 55.73 T:tinyjambu256v2 74.32 74.35 74.85 T:isapk128av20 95.28 95.34 95.59 T:isapk128v20 119.80 119.85 119.86 T:elephant200v2 129.78 130.12 132.02 T:isapxv20 5423.36 5426.24 5460.01 T:elephant176v2 6159.77 6160.16 6160.59 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.97 1.97 2.00 aes256gcmv1 1.88 1.99 2.01 T:aes128gcmv1 10.47 10.47 10.57 ascon128av12 14.98 14.98 14.98 ascon80pqv12 15.18 15.18 15.19 ascon128v12 16.92 17.36 17.36 T:xoodyakround3 23.46 23.46 23.47 ascon128abi32v12 28.50 28.50 28.51 T:schwaemm256128v2 34.61 34.73 34.73 ascon128bi32v12 35.30 35.30 38.06 T:schwaemm256256v2 36.93 36.94 37.05 T:schwaemm128128v2 37.52 37.52 37.84 T:schwaemm192192v2 38.41 38.41 38.43 romulusn 39.74 40.03 40.08 T:grain128aeadv2 48.76 48.77 48.78 T:giftcofb128v1 53.69 53.80 54.24 romulusm 56.38 56.38 56.39 T:isapa128av20 68.38 68.51 68.53 T:tinyjambu128v2 75.50 75.50 75.51 T:isapa128v20 76.56 76.56 76.68 T:tinyjambu192v2 83.32 83.32 83.33 T:tinyjambu256v2 99.56 99.57 100.18 romulust 107.07 107.21 107.31 T:isapk128av20 184.99 185.02 185.05 T:elephant200v2 221.30 221.35 222.29 T:isapk128v20 281.40 283.46 283.49 T:isapxv20 8324.31 8325.03 8367.33 T:elephant176v2 9346.28 9348.80 9349.28 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.98 1.99 2.01 aes256gcmv1 1.90? 2.02? 2.16? T:aes128gcmv1 10.31 10.31 10.32 ascon128av12 15.10 15.10 15.10 ascon80pqv12 15.16 15.16 15.17 ascon128v12 16.94 16.94 16.95 T:xoodyakround3 23.66 23.66 23.66 ascon128abi32v12 28.46 28.47 28.48 T:schwaemm256128v2 34.29 34.30 34.31 ascon128bi32v12 35.06 35.10 37.89 T:schwaemm256256v2 36.93 37.07 37.08 T:schwaemm128128v2 37.52 37.56 37.84 T:schwaemm192192v2 38.20 38.22 38.45 romulusn 41.01 41.01 41.02 T:grain128aeadv2 48.42 48.47 48.48 T:giftcofb128v1 53.57 53.70 53.73 romulusm 56.55 56.56 56.58 T:isapa128av20 68.46 68.58 68.59 T:tinyjambu128v2 75.24 75.24 75.25 T:isapa128v20 76.72 76.73 76.73 T:tinyjambu192v2 82.89 82.89 82.91 T:tinyjambu256v2 99.56 99.72 100.14 romulust 107.13 107.14 107.18 T:isapk128av20 185.00 185.02 185.24 T:elephant200v2 221.35 221.37 222.00 T:isapk128v20 281.45 283.47 283.53 T:isapxv20 8324.38 8326.70 8367.05 T:elephant176v2 9347.76 9348.81 9349.79 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.98 1.99 2.00 aes256gcmv1 1.88 2.02 2.04 T:aes128gcmv1 10.31 10.31 10.32 ascon128av12 15.10 15.11 15.12 ascon80pqv12 15.16 15.16 15.16 ascon128v12 16.83 16.98 16.99 T:xoodyakround3 23.66 23.66 23.66 ascon128abi32v12 28.46 28.47 28.49 T:schwaemm256128v2 34.29 34.30 34.30 ascon128bi32v12 35.06 35.07 37.81 T:schwaemm256256v2 36.93 37.07 37.08 T:schwaemm128128v2 37.52 37.53 37.84 T:schwaemm192192v2 38.17 38.20 38.45 romulusn 41.01 41.01 41.02 T:grain128aeadv2 44.74 44.75 45.10 T:isapa128av20 46.59 46.59 46.60 T:isapa128v20 48.46 48.48 48.63 T:giftcofb128v1 53.20 53.20 53.62 romulust 53.70 53.70 53.73 romulusm 68.46 68.58 68.59 T:tinyjambu128v2 76.72 76.73 76.73 T:tinyjambu192v2 82.89 82.90 82.90 T:tinyjambu256v2 82.95 83.02 83.05 T:isapk128av20 144.08 144.10 144.63 T:isapk128v20 185.00 185.02 185.23 T:elephant200v2 184.58 185.83 185.84 T:isapxv20 8324.67 8326.72 8367.33 T:elephant176v2 9346.22 9348.69 9349.18 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 8.30 8.34 8.71 T:aes128gcmv1 9.22 9.30 9.55 aes256gcmv1 15.81 15.91 16.22 ascon128av12 20.04 20.09 20.53 ascon128v12 20.25 20.39 20.70 ascon80pqv12 24.42 24.61 24.84 T:xoodyakround3 34.93 35.16 35.70 ascon128abi32v12 46.24 46.27 46.64 ascon128bi32v12 46.52 46.55 46.89 T:schwaemm256128v2 47.09 47.17 47.32 romulusn 47.21 47.45 47.52 T:schwaemm128128v2 50.83 51.09 51.24 T:grain128aeadv2 55.58 56.05 58.84 T:schwaemm256256v2 60.50 60.94 61.11 T:schwaemm192192v2 61.13 61.13 61.41 T:giftcofb128v1 62.60 62.84 63.13 romulusm 80.59 80.95 80.99 T:tinyjambu128v2 89.83 89.83 89.89 T:tinyjambu192v2 97.34 97.42 97.77 T:tinyjambu256v2 138.81 139.09 140.16 romulust 144.69 144.70 145.02 T:isapa128av20 261.50 261.64 261.92 T:elephant200v2 394.84 395.48 395.59 T:isapk128av20 624.50 624.62 624.77 T:isapa128v20 2440.65 2440.81 2449.21 T:isapk128v20 2650.87 2651.03 2673.06 T:isapxv20 10440.93 10457.73 10466.91 T:elephant176v2 12517.24 12518.61 12521.85 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 8.34 8.70 9.12 T:aes128gcmv1 8.98 9.08 9.62 aes256gcmv1 16.03 16.06 16.38 ascon128av12 20.04 20.05 20.56 ascon128v12 20.39 20.53 20.69 ascon80pqv12 23.89 24.05 24.34 T:xoodyakround3 35.27 35.33 35.62 ascon128abi32v12 45.93 46.00 46.15 ascon128bi32v12 46.63 46.79 46.98 T:schwaemm256128v2 47.11 47.20 47.43 romulusn 47.20 47.26 47.38 T:schwaemm128128v2 51.18 51.48 51.57 T:grain128aeadv2 55.52 55.70 58.82 T:schwaemm256256v2 60.44 60.66 60.89 T:schwaemm192192v2 60.66 61.10 61.41 T:giftcofb128v1 64.73 64.98 65.16 romulusm 80.42 80.70 81.18 T:tinyjambu128v2 90.10 90.10 90.16 T:tinyjambu192v2 97.84 98.02 98.02 T:tinyjambu256v2 138.21 138.77 139.12 romulust 144.76 145.33 145.49 T:isapa128av20 261.47 261.55 261.81 T:elephant200v2 393.30 395.00 395.48 T:isapk128av20 616.84 624.67 625.09 T:isapa128v20 2440.52 2441.15 2441.99 T:isapk128v20 2651.12 2651.88 2658.03 T:isapxv20 10460.16 10462.74 10474.12 T:elephant176v2 12516.64 12518.59 12524.35 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 8.23 8.27 8.38 T:aes128gcmv1 8.98 8.98 9.25 aes256gcmv1 15.91 15.93 16.03 ascon128av12 20.04 20.12 20.36 ascon128v12 20.23 20.28 20.39 ascon80pqv12 23.99 24.17 24.35 T:xoodyakround3 35.26 35.33 35.50 ascon128abi32v12 45.92 46.00 46.06 ascon128bi32v12 46.63 46.66 46.84 T:schwaemm256128v2 46.76 47.08 47.29 romulusn 47.17 47.24 47.37 T:schwaemm128128v2 51.09 51.18 51.26 T:grain128aeadv2 55.52 55.52 58.73 T:schwaemm256256v2 60.44 60.44 60.70 T:schwaemm192192v2 60.66 61.32 61.41 T:giftcofb128v1 65.03 65.08 65.10 romulusm 80.43 80.52 81.17 T:tinyjambu128v2 90.09 90.09 90.09 T:tinyjambu192v2 90.12 90.40 90.55 romulust 94.36 94.57 94.80 T:isapa128av20 97.84 97.84 98.01 T:tinyjambu256v2 261.48 261.54 261.82 T:elephant200v2 262.90 263.23 263.79 T:isapk128av20 329.46 329.62 329.70 T:isapa128v20 1255.09 1255.30 1264.57 T:isapk128v20 1389.62 1389.63 1389.76 T:isapxv20 10442.57 10462.77 10493.77 T:elephant176v2 12516.87 12518.07 12523.12 T:elephant160v2