VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20260627

[Page version: 20260629 21:50:28]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.55 0.56 0.57 aes256gcmv1 0.78 0.78 0.79 T:aes128gcmv1 6.07 6.07 6.07 ascon128av12 8.62 8.63 8.63 ascon128v12 9.01 9.01 9.01 ascon80pqv12 9.42 9.45 9.50 T:xoodyakround3 12.72 12.73 12.74 ascon128abi32v12 17.17 17.21 17.36 T:schwaemm256128v2 17.58 17.62 17.66 T:grain128aeadv2 18.62 18.63 18.63 ascon128bi32v12 22.38 22.68 23.20 T:schwaemm256256v2 23.49 23.56 23.64 T:schwaemm192192v2 25.50 25.51 25.51 T:isapa128av20 27.86 27.96 28.05 T:schwaemm128128v2 33.24 33.25 33.27 T:isapa128v20 37.94 37.94 37.94 T:giftcofb128v1 41.07 41.22 41.32 romulusn 42.25 42.36 43.30 T:isapk128av20 63.56 63.60 63.66 romulusm 71.26 71.37 71.50 T:isapk128v20 73.24 73.26 73.28 T:tinyjambu128v2 87.25 87.26 87.28 T:tinyjambu192v2 91.26 91.26 91.26 T:tinyjambu256v2 133.58 133.87 133.95 romulust 162.07 163.89 165.46 T:isapxv20 197.86 199.17 199.36 T:elephant200v2 5985.02 5988.89 5990.48 T:elephant176v2 6723.11 6726.52 6729.45 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.47 0.48 0.49 aes256gcmv1 0.78 0.79 0.82 T:aes128gcmv1 6.06 6.06 6.07 ascon128av12 8.88 8.88 8.88 ascon80pqv12 8.88 8.88 8.88 ascon128v12 9.05 9.05 9.10 T:xoodyakround3 12.51 12.51 12.56 ascon128abi32v12 17.19 17.24 17.29 T:schwaemm256128v2 17.61 17.64 17.67 T:grain128aeadv2 18.12 18.13 18.14 ascon128bi32v12 22.30 22.41 23.20 T:schwaemm256256v2 23.55 23.63 23.74 T:schwaemm192192v2 24.75 24.75 24.76 T:isapa128av20 27.94 28.05 28.15 T:schwaemm128128v2 33.23 33.25 33.28 T:isapa128v20 37.91 37.94 37.96 T:giftcofb128v1 41.13 41.21 41.29 romulusn 42.10 44.31 44.47 T:isapk128av20 63.59 63.61 63.63 romulusm 71.15 71.35 71.53 T:isapk128v20 73.50 73.51 73.51 T:tinyjambu128v2 87.25 87.25 87.25 T:tinyjambu192v2 91.50 91.51 91.51 T:tinyjambu256v2 133.79 133.88 134.25 romulust 161.50 163.80 165.35 T:isapxv20 197.91 199.13 199.32 T:elephant200v2 5987.57 5991.12 5994.26 T:elephant176v2 6724.83 6725.98 6751.49 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.47 0.48 0.49 aes256gcmv1 0.78 0.79 0.82 T:aes128gcmv1 6.06 6.07 6.07 ascon128av12 8.88 8.88 8.88 ascon128v12 8.88 8.88 8.88 ascon80pqv12 9.07 9.09 9.14 T:xoodyakround3 12.51 12.51 12.56 ascon128abi32v12 16.50 16.50 16.51 T:isapa128av20 16.62 16.62 16.63 T:isapa128v20 17.19 17.24 17.28 T:schwaemm256128v2 17.62 17.64 17.67 T:grain128aeadv2 18.12 18.13 18.13 ascon128bi32v12 22.29 22.38 23.17 T:schwaemm256256v2 23.57 23.63 23.75 T:schwaemm192192v2 27.98 28.10 28.22 T:schwaemm128128v2 28.07 28.17 28.25 T:isapk128av20 37.93 37.94 37.94 T:giftcofb128v1 41.03 41.17 41.29 romulusn 44.44 44.48 44.52 romulust 44.49 44.63 44.76 T:isapk128v20 63.56 63.60 63.64 romulusm 73.50 73.51 73.51 T:tinyjambu128v2 87.25 87.25 87.25 T:tinyjambu192v2 91.51 91.51 91.51 T:tinyjambu256v2 97.66 98.51 100.12 T:isapxv20 198.32 199.14 199.34 T:elephant200v2 5984.57 5991.01 5998.49 T:elephant176v2 6722.85 6726.02 6728.76 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.46 0.47 0.47 aes256gcmv1 0.58 0.59 0.59 T:aes128gcmv1 5.88 5.88 5.89 ascon128av12 7.16 7.17 7.20 T:xoodyakround3 8.69 8.69 8.69 ascon80pqv12 8.75 8.75 8.75 ascon128v12 12.64 12.64 12.65 ascon128abi32v12 17.14 17.18 17.33 T:schwaemm256128v2 17.53 17.56 17.58 T:grain128aeadv2 18.71 18.71 18.71 ascon128bi32v12 20.99 21.00 21.03 T:isapa128av20 22.19 22.26 23.04 T:schwaemm256256v2 23.50 23.69 23.81 T:schwaemm192192v2 25.12 25.13 25.14 T:isapa128v20 27.66 27.72 27.82 T:schwaemm128128v2 31.80 31.84 31.88 romulusn 35.19 36.46 36.69 T:isapk128av20 38.14 38.15 38.16 T:giftcofb128v1 43.05 43.07 43.09 romulusm 57.99 58.04 58.12 T:isapk128v20 59.75 59.76 59.77 T:tinyjambu128v2 68.13 68.14 68.15 T:tinyjambu192v2 68.76 68.76 68.77 T:tinyjambu256v2 89.22 89.27 89.49 romulust 130.56 131.46 132.26 T:isapxv20 148.45 149.43 149.78 T:elephant200v2 4470.02 4473.99 4475.22 T:elephant176v2 5042.83 5045.77 5049.74 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.42 0.43 0.43 aes256gcmv1 0.58 0.59 0.60 T:aes128gcmv1 5.83 5.85 5.85 ascon128av12 7.03 7.04 7.07 T:xoodyakround3 8.69 8.69 8.70 ascon80pqv12 9.00 9.00 9.00 ascon128v12 12.57 12.57 12.61 ascon128abi32v12 17.13 17.17 17.20 T:schwaemm256128v2 17.53 17.55 17.57 T:grain128aeadv2 18.18 18.19 18.19 ascon128bi32v12 20.87 20.87 20.88 T:isapa128av20 22.17 22.24 22.98 T:schwaemm256256v2 23.46 23.54 23.74 T:schwaemm192192v2 25.11 25.12 25.13 T:isapa128v20 27.73 27.82 27.91 T:schwaemm128128v2 31.82 31.87 31.93 romulusn 36.49 36.71 36.77 T:isapk128av20 38.13 38.15 38.17 T:giftcofb128v1 43.03 43.05 43.10 romulusm 57.83 57.94 58.02 T:isapk128v20 59.88 59.89 59.89 T:tinyjambu128v2 68.13 68.13 68.13 T:tinyjambu192v2 68.89 68.89 68.89 T:tinyjambu256v2 89.01 89.05 89.28 romulust 130.33 131.28 132.06 T:isapxv20 148.39 149.38 149.53 T:elephant200v2 4472.25 4476.62 4479.73 T:elephant176v2 5044.28 5046.40 5059.50 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.42 0.43 0.44 aes256gcmv1 0.58 0.59 0.59 T:aes128gcmv1 5.83 5.85 5.85 ascon128av12 7.05 7.05 7.07 T:xoodyakround3 8.69 8.69 8.70 ascon80pqv12 9.00 9.00 9.00 ascon128v12 12.57 12.57 12.61 ascon128abi32v12 16.75 16.75 16.75 T:isapa128av20 16.80 16.81 16.84 T:isapa128v20 17.13 17.17 17.20 T:schwaemm256128v2 17.54 17.55 17.56 T:grain128aeadv2 18.19 18.19 18.19 ascon128bi32v12 22.18 22.25 23.00 T:schwaemm256256v2 23.54 23.71 23.77 T:schwaemm192192v2 27.74 27.82 27.91 T:schwaemm128128v2 28.17 28.23 29.02 T:isapk128av20 31.83 31.87 31.94 romulusn 38.13 38.15 38.16 T:giftcofb128v1 43.03 43.07 43.13 romulusm 44.48 44.54 44.61 romulust 44.46 44.62 44.66 T:isapk128v20 59.88 59.89 59.89 T:tinyjambu128v2 68.13 68.13 68.13 T:tinyjambu192v2 68.89 68.89 68.89 T:tinyjambu256v2 98.14 98.98 99.70 T:isapxv20 148.42 149.39 149.69 T:elephant200v2 4469.66 4472.46 4474.22 T:elephant176v2 5043.47 5045.78 5050.92 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.38 0.39 0.40 T:aes128gcmv1 0.38 0.39 0.40 aes256gcmv1 4.99 5.02 5.03 T:xoodyakround3 5.68 5.69 5.69 ascon128av12 8.37 8.38 8.38 ascon80pqv12 8.87 8.88 8.88 ascon128v12 12.54 12.56 12.58 ascon128abi32v12 16.49 16.50 16.50 T:isapa128av20 16.99 17.00 17.01 T:isapa128v20 17.05 17.10 17.15 T:schwaemm256128v2 17.46 17.50 17.53 T:grain128aeadv2 18.77 18.79 18.81 ascon128bi32v12 22.51 22.51 22.53 romulusm 22.09 22.58 22.92 T:schwaemm256256v2 22.56 22.64 22.69 romulusn 23.42 23.50 23.74 T:schwaemm192192v2 27.42 27.52 27.61 T:schwaemm128128v2 27.99 28.20 29.08 T:isapk128av20 38.33 38.35 38.37 T:giftcofb128v1 44.48 44.53 44.58 romulust 44.53 44.57 44.62 T:isapk128v20 46.25 46.26 46.26 T:tinyjambu256v2 46.25 46.26 46.26 T:tinyjambu128v2 49.00 49.01 49.01 T:tinyjambu192v2 97.36 98.12 99.98 T:isapxv20 98.26 99.18 99.93 T:elephant200v2 2957.06 2958.56 2959.50 T:elephant176v2 3363.33 3364.55 3365.10 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.37 0.39 0.40 aes256gcmv1 0.40 0.40 0.41 T:aes128gcmv1 4.98 5.03 5.04 T:xoodyakround3 5.56 5.56 5.57 ascon128av12 8.50 8.50 8.50 ascon80pqv12 9.12 9.12 9.12 ascon128v12 12.62 12.62 12.63 ascon128abi32v12 16.99 17.00 17.02 T:isapa128v20 17.00 17.00 17.00 T:isapa128av20 17.05 17.09 17.14 T:schwaemm256128v2 17.45 17.48 17.51 T:grain128aeadv2 18.25 18.25 18.25 ascon128bi32v12 22.00 22.06 22.82 T:schwaemm256256v2 22.48 22.49 22.53 romulusm 22.58 22.66 22.68 romulusn 23.42 23.47 23.74 T:schwaemm192192v2 27.44 27.53 27.62 T:schwaemm128128v2 28.16 28.22 28.29 T:isapk128av20 38.33 38.35 38.37 T:giftcofb128v1 44.58 44.61 44.83 romulust 44.57 44.66 44.89 T:isapk128v20 46.26 46.26 46.26 T:tinyjambu256v2 46.26 46.26 46.26 T:tinyjambu128v2 49.01 49.01 49.01 T:tinyjambu192v2 98.26 98.97 99.27 T:elephant200v2 97.56 99.13 100.22 T:isapxv20 2956.27 2958.90 2960.00 T:elephant176v2 3364.36 3365.51 3366.56 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.37 0.38 0.40 aes256gcmv1 0.40 0.40 0.41 T:aes128gcmv1 4.98 5.04 5.05 T:xoodyakround3 5.56 5.56 5.57 ascon128av12 8.50 8.50 8.51 ascon80pqv12 9.12 9.12 9.12 ascon128v12 12.62 12.62 12.63 ascon128abi32v12 17.00 17.00 17.00 T:isapa128av20 16.98 17.00 17.02 T:isapa128v20 17.11 17.19 17.24 T:schwaemm256128v2 17.45 17.46 17.48 T:grain128aeadv2 18.25 18.25 18.25 ascon128bi32v12 22.01 22.08 22.77 T:schwaemm256256v2 22.49 22.50 22.52 romulusm 22.57 22.66 22.66 romulusn 23.41 23.49 23.76 T:schwaemm192192v2 27.44 27.51 27.61 T:schwaemm128128v2 27.92 28.04 28.28 T:isapk128av20 38.33 38.36 38.37 T:giftcofb128v1 44.49 44.60 44.63 romulust 44.56 44.64 44.90 T:isapk128v20 46.26 46.26 46.26 T:tinyjambu256v2 46.26 46.26 46.26 T:tinyjambu128v2 49.01 49.01 49.01 T:tinyjambu192v2 97.49 98.49 99.92 T:isapxv20 98.29 99.46 99.99 T:elephant200v2 2956.63 2959.29 2960.22 T:elephant176v2 3363.45 3365.36 3366.27 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.55 0.56 0.56 aes256gcmv1 0.68 0.69 0.69 T:aes128gcmv1 6.02 6.02 6.02 ascon128av12 7.24 7.25 7.27 T:xoodyakround3 8.83 8.83 8.83 ascon80pqv12 8.88 8.88 8.88 ascon128v12 12.94 12.94 12.94 ascon128abi32v12 17.68 17.70 17.73 T:schwaemm256128v2 17.84 17.87 17.89 T:grain128aeadv2 18.98 18.98 18.98 ascon128bi32v12 22.46 22.46 22.46 T:isapa128av20 22.78 22.81 23.72 T:schwaemm256256v2 24.02 24.06 24.19 T:schwaemm192192v2 28.07 28.11 28.17 T:schwaemm128128v2 32.13 32.16 32.20 romulusn 36.58 36.58 36.60 T:isapa128v20 38.46 38.46 38.47 T:giftcofb128v1 40.48 40.59 40.64 T:isapk128av20 43.33 43.36 43.39 romulusm 60.21 60.22 60.47 T:tinyjambu128v2 68.64 68.64 68.65 T:tinyjambu192v2 69.26 69.26 69.27 T:tinyjambu256v2 90.53 90.73 90.84 romulust 100.91 100.93 100.98 T:isapk128v20 151.69 152.54 152.65 T:elephant200v2 219.95 220.63 221.07 T:isapxv20 4504.67 4508.20 4516.49 T:elephant176v2 5100.93 5102.11 5104.09 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.51 0.51 0.52 aes256gcmv1 0.68 0.68 0.69 T:aes128gcmv1 5.98 5.99 5.99 ascon128av12 7.11 7.12 7.15 T:xoodyakround3 8.82 8.82 8.82 ascon80pqv12 9.13 9.13 9.13 ascon128v12 12.85 12.85 12.86 ascon128abi32v12 17.71 17.74 17.87 T:schwaemm256128v2 17.86 17.88 17.89 T:grain128aeadv2 18.46 18.46 18.46 ascon128bi32v12 22.28 22.28 22.28 T:isapa128av20 22.79 22.82 23.69 T:schwaemm256256v2 24.10 24.17 24.29 T:schwaemm192192v2 28.10 28.17 28.24 T:schwaemm128128v2 32.12 32.15 32.19 romulusn 36.58 36.58 36.59 T:isapa128v20 38.48 38.49 38.51 T:giftcofb128v1 39.16 39.76 40.61 T:isapk128av20 43.34 43.36 43.41 romulusm 60.34 60.34 60.34 T:tinyjambu128v2 68.64 68.64 68.64 T:tinyjambu192v2 69.38 69.39 69.39 T:tinyjambu256v2 90.45 90.48 90.70 romulust 100.95 100.98 101.08 T:isapk128v20 151.68 152.59 152.85 T:elephant200v2 219.43 220.27 220.93 T:isapxv20 4504.32 4508.02 4510.79 T:elephant176v2 5101.62 5104.37 5119.75 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.51 0.51 0.52 aes256gcmv1 0.68 0.68 0.69 T:aes128gcmv1 5.97 5.99 5.99 ascon128av12 7.12 7.13 7.19 T:xoodyakround3 8.82 8.82 8.82 ascon80pqv12 9.13 9.13 9.13 ascon128v12 12.85 12.85 12.86 ascon128abi32v12 17.55 17.55 17.55 T:isapa128av20 17.69 17.72 17.74 T:schwaemm256128v2 17.86 17.87 17.87 T:grain128aeadv2 18.46 18.46 18.46 ascon128bi32v12 22.63 22.63 22.65 T:isapa128v20 22.79 22.82 23.53 T:schwaemm256256v2 24.04 24.08 24.27 T:schwaemm192192v2 28.12 28.20 28.27 T:schwaemm128128v2 30.46 30.51 30.55 T:isapk128av20 32.15 32.15 32.19 romulusn 38.48 38.48 38.49 T:giftcofb128v1 43.34 43.34 43.42 romulusm 45.74 45.77 45.82 romulust 60.34 60.34 60.34 T:tinyjambu128v2 66.80 66.84 66.89 T:isapk128v20 68.64 68.64 68.64 T:tinyjambu192v2 69.38 69.39 69.39 T:tinyjambu256v2 144.05 144.64 145.07 T:isapxv20 151.77 152.89 153.67 T:elephant200v2 4508.15 4509.21 4516.11 T:elephant176v2 5112.54 5130.80 5132.20 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.62 4.69 4.73 aes256gcmv1 4.83 4.86 4.91 T:aes128gcmv1 9.34 9.34 9.38 ascon128av12 10.45 10.58 10.67 T:xoodyakround3 11.75 11.76 11.81 ascon128v12 12.01 12.01 12.01 ascon80pqv12 19.77 19.77 19.77 ascon128abi32v12 25.03 25.10 25.23 T:grain128aeadv2 25.24 25.24 25.25 ascon128bi32v12 30.00 30.16 30.41 T:schwaemm256128v2 35.47 35.61 36.63 T:schwaemm256256v2 36.06 36.39 36.69 T:schwaemm128128v2 38.69 38.76 39.43 romulusn 39.48 39.78 40.24 T:schwaemm192192v2 45.70 45.70 45.80 T:giftcofb128v1 50.21 50.27 50.29 romulusm 55.86 55.95 55.98 T:isapa128av20 70.52 70.52 70.57 T:tinyjambu128v2 80.09 80.09 80.12 T:tinyjambu192v2 80.65 80.65 80.74 T:tinyjambu256v2 119.45 119.74 119.99 romulust 121.84 122.20 122.50 T:isapk128av20 215.80 217.32 217.66 T:elephant200v2 299.97 299.97 300.23 T:isapa128v20 1077.51 1078.00 1078.89 T:isapk128v20 2224.94 2242.24 2260.76 T:isapxv20 5612.16 5614.81 5618.93 T:elephant176v2 6834.05 6836.21 6841.06 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.97 5.06 5.10 aes256gcmv1 5.01 5.10 5.14 T:aes128gcmv1 9.27 9.29 9.34 ascon128av12 10.53 10.56 10.56 T:xoodyakround3 11.90 11.90 11.92 ascon80pqv12 12.06 12.06 12.06 ascon128v12 19.58 19.58 19.58 ascon128abi32v12 24.62 24.62 24.62 ascon128bi32v12 25.04 25.12 25.21 T:grain128aeadv2 30.00 30.35 30.58 T:schwaemm256128v2 35.38 35.59 36.65 T:schwaemm256256v2 36.25 36.56 36.98 T:schwaemm128128v2 38.60 38.82 39.46 romulusn 39.28 39.56 39.83 T:schwaemm192192v2 46.12 46.42 46.48 T:giftcofb128v1 50.71 50.77 50.82 romulusm 54.66 54.66 54.70 T:isapa128av20 70.66 70.67 70.78 T:tinyjambu128v2 80.10 80.10 80.14 T:tinyjambu192v2 80.79 80.79 80.80 T:tinyjambu256v2 119.54 119.85 120.03 romulust 122.47 122.97 123.63 T:isapk128av20 215.27 216.98 217.41 T:elephant200v2 300.05 300.07 300.31 T:isapa128v20 1079.74 1082.30 1082.61 T:isapk128v20 2232.39 2241.18 2254.91 T:isapxv20 5612.93 5615.02 5619.12 T:elephant176v2 6834.01 6839.37 6865.89 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.97 5.05 5.09 aes256gcmv1 5.01 5.10 5.13 T:aes128gcmv1 9.27 9.29 9.32 ascon128av12 10.49 10.66 10.80 T:xoodyakround3 11.90 11.90 11.92 ascon80pqv12 12.06 12.06 12.06 ascon128v12 19.58 19.58 19.58 ascon128abi32v12 24.62 24.62 24.62 ascon128bi32v12 25.04 25.11 25.19 T:grain128aeadv2 30.18 30.38 30.60 T:schwaemm256128v2 35.39 35.51 36.59 T:schwaemm256256v2 35.86 35.86 35.87 T:isapa128av20 36.40 36.73 37.13 T:schwaemm128128v2 38.63 38.82 39.62 romulusn 39.25 39.49 39.67 T:schwaemm192192v2 46.14 46.14 46.37 T:giftcofb128v1 50.68 50.76 50.79 romulusm 70.66 70.66 70.78 T:tinyjambu128v2 74.31 74.38 74.61 romulust 77.95 78.24 78.42 T:isapk128av20 80.10 80.10 80.10 T:tinyjambu192v2 80.79 80.79 80.79 T:tinyjambu256v2 156.51 156.54 156.93 T:isapa128v20 215.16 216.79 217.25 T:elephant200v2 568.14 568.77 569.54 T:isapk128v20 1161.20 1177.40 1183.22 T:isapxv20 5613.73 5615.38 5618.82 T:elephant176v2 6832.37 6835.08 6840.11 T:elephant160v2