VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20260831

[Page version: 20260905 10:40:31]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.55 0.56 0.57 aes256gcmv1 0.78 0.78 0.79 T:aes128gcmv1 5.32 5.32 5.32 ascon128av12 7.51 7.51 7.51 ascon80pqv12 7.75 7.75 7.76 ascon128v12 11.02 11.23 11.24 T:xoodyakround3 12.72 12.72 12.73 ascon128abi32v12 17.17 17.22 17.35 T:schwaemm256128v2 17.56 17.60 17.67 T:grain128aeadv2 18.62 18.63 18.63 ascon128bi32v12 23.44 23.47 23.50 T:schwaemm256256v2 23.47 23.55 23.66 T:schwaemm192192v2 25.46 25.46 25.48 T:isapa128av20 27.83 27.93 28.02 T:schwaemm128128v2 33.23 33.25 33.29 T:isapa128v20 37.94 37.94 37.94 T:giftcofb128v1 41.00 41.04 41.17 romulusn 43.52 43.78 44.37 T:isapk128av20 63.65 63.84 63.95 romulusm 70.43 70.49 70.56 T:isapk128v20 73.26 73.26 73.26 T:tinyjambu128v2 87.25 87.25 87.25 T:tinyjambu192v2 91.26 91.26 91.26 T:tinyjambu256v2 133.72 134.35 134.52 romulust 168.20 169.84 173.90 T:isapxv20 198.66 198.74 198.83 T:elephant200v2 5984.70 5988.03 6009.70 T:elephant176v2 6725.51 6728.07 6730.34 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.47 0.48 0.49 aes256gcmv1 0.80 0.80 0.81 T:aes128gcmv1 5.31 5.31 5.31 ascon128av12 7.63 7.64 7.64 ascon128v12 8.01 8.01 8.01 ascon80pqv12 10.67 10.72 10.75 T:xoodyakround3 12.51 12.51 12.51 ascon128abi32v12 17.19 17.25 17.42 T:schwaemm256128v2 17.63 17.66 17.69 T:grain128aeadv2 18.12 18.13 18.13 ascon128bi32v12 23.44 23.49 23.74 T:schwaemm256256v2 23.52 23.59 23.67 T:schwaemm192192v2 24.74 24.75 24.75 T:isapa128av20 27.95 28.07 28.20 T:schwaemm128128v2 33.23 33.25 33.27 T:isapa128v20 37.91 37.93 37.96 T:giftcofb128v1 41.09 41.14 41.20 romulusn 42.37 43.83 43.95 T:isapk128av20 63.64 63.71 63.90 romulusm 70.28 70.32 70.40 T:isapk128v20 73.51 73.51 73.51 T:tinyjambu128v2 87.25 87.25 87.25 T:tinyjambu192v2 91.50 91.52 91.54 T:tinyjambu256v2 133.71 134.43 134.47 romulust 168.69 169.31 170.06 T:isapxv20 198.73 198.80 198.89 T:elephant200v2 5986.15 5992.46 6016.66 T:elephant176v2 6725.41 6726.27 6727.19 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.47 0.48 0.49 aes256gcmv1 0.80 0.80 0.81 T:aes128gcmv1 5.31 5.31 5.31 ascon128av12 7.64 7.64 7.64 ascon128v12 8.01 8.01 8.01 ascon80pqv12 10.70 10.74 10.76 T:xoodyakround3 12.51 12.51 12.51 ascon128abi32v12 16.50 16.50 16.52 T:isapa128av20 16.61 16.62 16.65 T:isapa128v20 17.18 17.23 17.27 T:schwaemm256128v2 17.63 17.66 17.70 T:grain128aeadv2 18.12 18.13 18.13 ascon128bi32v12 23.44 23.48 23.74 T:schwaemm256256v2 23.58 23.66 23.71 T:schwaemm192192v2 27.93 28.09 28.19 T:schwaemm128128v2 27.97 28.11 29.14 T:isapk128av20 37.93 37.94 37.96 T:giftcofb128v1 41.09 41.14 41.18 romulusn 44.36 44.40 44.41 romulust 45.02 45.12 45.19 T:isapk128v20 63.64 63.75 63.86 romulusm 73.51 73.51 73.51 T:tinyjambu128v2 87.25 87.25 87.25 T:tinyjambu192v2 91.51 91.51 91.54 T:tinyjambu256v2 101.45 102.43 103.09 T:isapxv20 198.71 198.86 199.83 T:elephant200v2 5983.54 5987.41 6000.78 T:elephant176v2 6724.08 6725.58 6726.92 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.46 0.47 0.47 aes256gcmv1 0.60 0.60 0.60 T:aes128gcmv1 5.28 5.28 5.29 ascon128av12 7.50 7.50 7.50 ascon80pqv12 7.62 7.63 7.63 ascon128v12 8.28 8.45 8.49 T:xoodyakround3 12.64 12.64 12.65 ascon128abi32v12 17.12 17.15 17.18 T:schwaemm256128v2 17.53 17.56 17.62 T:grain128aeadv2 18.71 18.71 18.71 ascon128bi32v12 20.98 20.98 20.99 T:isapa128av20 23.28 23.30 23.32 T:schwaemm256256v2 23.46 23.51 23.57 T:schwaemm192192v2 25.12 25.13 25.14 T:isapa128v20 27.64 27.71 27.79 T:schwaemm128128v2 31.76 31.81 31.81 romulusn 35.05 35.92 36.52 T:isapk128av20 38.14 38.15 38.16 T:giftcofb128v1 43.12 43.17 43.23 romulusm 55.70 55.73 55.81 T:isapk128v20 59.76 59.76 59.77 T:tinyjambu128v2 68.13 68.13 68.14 T:tinyjambu192v2 68.76 68.76 68.77 T:tinyjambu256v2 88.94 89.06 89.38 romulust 136.09 136.30 138.89 T:isapxv20 149.55 149.61 149.73 T:elephant200v2 4470.04 4472.10 4474.74 T:elephant176v2 5043.63 5044.27 5058.77 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.42 0.43 0.43 aes256gcmv1 0.60 0.60 0.60 T:aes128gcmv1 5.29 5.29 5.29 ascon128av12 7.62 7.62 7.63 ascon128v12 7.81 7.81 7.81 ascon80pqv12 8.21 8.23 8.24 T:xoodyakround3 12.56 12.56 12.57 ascon128abi32v12 17.14 17.18 17.24 T:schwaemm256128v2 17.52 17.57 17.62 T:grain128aeadv2 18.19 18.19 18.19 ascon128bi32v12 20.81 20.81 20.82 T:isapa128av20 23.48 23.52 23.56 T:schwaemm192192v2 23.34 23.56 23.60 T:schwaemm256256v2 25.12 25.12 25.14 T:isapa128v20 27.76 27.83 27.91 T:schwaemm128128v2 31.75 31.81 31.85 romulusn 35.81 36.36 36.89 T:isapk128av20 38.13 38.15 38.17 T:giftcofb128v1 43.13 43.16 43.19 romulusm 55.58 55.60 55.65 T:isapk128v20 59.89 59.89 59.89 T:tinyjambu128v2 68.13 68.13 68.13 T:tinyjambu192v2 68.88 68.89 68.91 T:tinyjambu256v2 88.96 89.19 89.43 romulust 134.49 136.03 136.32 T:isapxv20 149.62 149.66 149.75 T:elephant200v2 4470.98 4471.77 4472.82 T:elephant176v2 5041.80 5043.56 5047.52 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.42 0.43 0.43 aes256gcmv1 0.60 0.60 0.60 T:aes128gcmv1 5.29 5.29 5.29 ascon128av12 7.62 7.62 7.62 ascon128v12 7.81 7.81 7.81 ascon80pqv12 8.18 8.22 8.26 T:xoodyakround3 12.56 12.56 12.57 ascon128abi32v12 16.69 16.69 16.69 T:isapa128av20 16.81 16.81 16.83 T:isapa128v20 17.14 17.16 17.20 T:schwaemm256128v2 17.55 17.57 17.60 T:grain128aeadv2 18.19 18.19 18.19 ascon128bi32v12 23.27 23.29 23.31 T:schwaemm256256v2 23.48 23.52 23.56 T:schwaemm192192v2 27.77 27.82 27.88 T:schwaemm128128v2 28.04 28.14 29.09 T:isapk128av20 31.62 31.79 31.86 romulusn 38.14 38.15 38.16 T:giftcofb128v1 42.95 42.97 43.03 T:isapk128v20 43.15 43.17 43.18 romulusm 44.41 44.45 44.50 romulust 59.89 59.89 59.89 T:tinyjambu128v2 68.13 68.13 68.13 T:tinyjambu192v2 68.89 68.89 68.90 T:tinyjambu256v2 102.13 102.49 103.72 T:isapxv20 149.56 149.68 150.33 T:elephant200v2 4470.81 4471.51 4472.28 T:elephant176v2 5043.72 5046.04 5049.05 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.37 0.39 0.40 aes256gcmv1 0.41 0.42 0.42 T:aes128gcmv1 5.25 5.25 5.25 ascon128av12 5.69 5.75 5.77 T:xoodyakround3 7.50 7.50 7.50 ascon128v12 7.50 7.50 7.51 ascon80pqv12 12.54 12.56 12.58 ascon128abi32v12 16.50 16.50 16.51 T:isapa128av20 16.99 17.00 17.01 T:isapa128v20 17.06 17.10 17.16 T:schwaemm256128v2 17.45 17.49 17.56 T:grain128aeadv2 18.77 18.78 18.81 ascon128bi32v12 22.22 22.44 22.55 romulusn 22.52 22.53 22.54 romulusm 23.11 23.13 23.15 T:schwaemm256256v2 23.43 23.52 23.58 T:schwaemm192192v2 27.41 27.51 27.59 T:schwaemm128128v2 27.99 28.43 29.37 T:isapk128av20 38.33 38.35 38.37 T:giftcofb128v1 40.96 41.15 41.20 T:isapk128v20 44.47 44.50 44.52 romulust 46.25 46.26 46.26 T:tinyjambu128v2 46.26 46.26 46.26 T:tinyjambu256v2 49.00 49.01 49.01 T:tinyjambu192v2 100.51 100.61 101.09 T:elephant200v2 99.65 103.15 104.76 T:isapxv20 2956.88 2958.13 2959.02 T:elephant176v2 3362.67 3364.76 3365.68 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.37 0.38 0.39 aes256gcmv1 0.39 0.40 0.41 T:aes128gcmv1 5.25 5.25 5.25 ascon128av12 5.65 5.71 5.73 T:xoodyakround3 7.62 7.62 7.63 ascon128v12 7.62 7.62 7.63 ascon80pqv12 12.62 12.62 12.63 ascon128abi32v12 16.87 16.88 16.89 T:isapa128av20 16.99 17.00 17.01 T:isapa128v20 17.11 17.17 17.22 T:schwaemm256128v2 17.45 17.48 17.52 T:grain128aeadv2 18.25 18.25 18.25 ascon128bi32v12 22.48 22.54 22.55 romulusm 22.50 22.54 22.55 romulusn 23.11 23.13 23.15 T:schwaemm256256v2 23.39 23.45 23.51 T:schwaemm192192v2 27.47 27.57 27.64 T:schwaemm128128v2 28.10 29.07 29.57 T:isapk128av20 38.32 38.35 38.38 T:giftcofb128v1 40.58 40.86 40.95 T:isapk128v20 44.44 44.50 44.55 romulust 46.26 46.26 46.26 T:tinyjambu256v2 46.26 46.26 46.26 T:tinyjambu128v2 49.01 49.01 49.01 T:tinyjambu192v2 100.50 100.57 100.64 T:elephant200v2 101.49 102.86 104.00 T:isapxv20 2956.89 2962.41 2965.59 T:elephant176v2 3364.20 3365.64 3368.10 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.37 0.38 0.39 aes256gcmv1 0.39 0.40 0.40 T:aes128gcmv1 5.25 5.25 5.25 ascon128av12 5.73 5.75 5.77 T:xoodyakround3 7.62 7.62 7.62 ascon128v12 7.62 7.62 7.63 ascon80pqv12 12.62 12.62 12.63 ascon128abi32v12 16.87 16.87 16.89 T:isapa128av20 16.99 17.00 17.02 T:isapa128v20 17.04 17.07 17.13 T:schwaemm256128v2 17.46 17.48 17.53 T:grain128aeadv2 18.25 18.25 18.25 ascon128bi32v12 22.53 22.53 22.54 romulusn 22.54 22.55 22.55 romulusm 23.16 23.33 23.38 T:schwaemm256256v2 23.42 23.47 23.51 T:schwaemm192192v2 27.44 27.52 27.60 T:schwaemm128128v2 28.13 28.96 29.12 T:isapk128av20 38.33 38.35 38.37 T:giftcofb128v1 40.86 40.90 40.95 T:isapk128v20 44.46 44.49 44.53 romulust 46.26 46.26 46.26 T:tinyjambu128v2 46.26 46.26 46.26 T:tinyjambu256v2 49.01 49.01 49.01 T:tinyjambu192v2 100.51 100.58 100.63 T:elephant200v2 102.76 103.51 106.04 T:isapxv20 2955.88 2957.43 2970.77 T:elephant176v2 3363.31 3364.65 3365.53 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.55 0.56 0.56 aes256gcmv1 0.69 0.69 0.70 T:aes128gcmv1 5.41 5.41 5.42 ascon128av12 7.62 7.62 7.62 ascon80pqv12 7.74 7.74 7.75 ascon128v12 8.46 8.49 8.52 T:xoodyakround3 12.94 12.94 12.94 ascon128abi32v12 17.68 17.70 17.72 T:schwaemm256128v2 17.83 17.86 17.97 T:grain128aeadv2 18.98 18.98 18.98 ascon128bi32v12 22.49 22.49 22.50 T:isapa128av20 23.90 23.92 24.08 T:schwaemm256256v2 24.02 24.04 24.08 T:schwaemm192192v2 28.04 28.10 28.17 T:schwaemm128128v2 32.03 32.06 32.07 romulusn 36.58 36.58 36.60 T:isapa128v20 38.46 38.46 38.47 T:giftcofb128v1 39.18 39.37 40.80 T:isapk128av20 43.38 43.43 43.46 romulusm 60.21 60.21 60.22 T:tinyjambu128v2 68.64 68.64 68.64 T:tinyjambu192v2 69.26 69.26 69.26 T:tinyjambu256v2 90.33 90.39 90.69 romulust 95.93 95.93 95.95 T:isapk128v20 152.68 152.72 152.76 T:elephant200v2 227.43 227.88 231.27 T:isapxv20 4505.53 4506.98 4522.70 T:elephant176v2 5100.68 5101.78 5103.85 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.50 0.51 0.52 aes256gcmv1 0.69 0.69 0.69 T:aes128gcmv1 5.41 5.41 5.41 ascon128av12 7.74 7.74 7.74 ascon128v12 7.93 7.93 7.93 ascon80pqv12 8.26 8.27 8.29 T:xoodyakround3 12.85 12.86 12.86 ascon128abi32v12 17.70 17.73 17.76 T:schwaemm256128v2 17.86 17.90 17.94 T:grain128aeadv2 18.46 18.46 18.46 ascon128bi32v12 22.29 22.29 22.30 T:isapa128av20 23.88 23.91 24.14 T:schwaemm256256v2 24.04 24.08 24.11 T:schwaemm192192v2 28.12 28.21 28.28 T:schwaemm128128v2 31.88 31.97 32.08 romulusn 36.58 36.58 36.59 T:isapa128v20 38.48 38.49 38.50 T:giftcofb128v1 39.44 40.43 40.78 T:isapk128av20 43.37 43.41 43.46 romulusm 60.34 60.34 60.34 T:tinyjambu128v2 68.64 68.64 68.64 T:tinyjambu192v2 69.38 69.39 69.41 T:tinyjambu256v2 90.31 90.53 90.62 romulust 95.76 95.81 95.99 T:isapk128v20 152.88 153.41 153.46 T:elephant200v2 226.90 227.29 227.51 T:isapxv20 4505.49 4507.22 4525.19 T:elephant176v2 5101.08 5102.04 5114.08 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.50 0.51 0.51 aes256gcmv1 0.69 0.69 0.69 T:aes128gcmv1 5.41 5.41 5.41 ascon128av12 7.74 7.74 7.74 ascon128v12 7.93 7.93 7.93 ascon80pqv12 8.28 8.29 8.30 T:xoodyakround3 12.85 12.85 12.85 ascon128abi32v12 17.52 17.52 17.52 T:isapa128av20 17.70 17.73 17.75 T:schwaemm256128v2 17.87 17.89 17.92 T:grain128aeadv2 18.46 18.46 18.46 ascon128bi32v12 22.63 22.63 22.65 T:isapa128v20 23.87 23.89 24.11 T:schwaemm256256v2 24.03 24.06 24.10 T:schwaemm192192v2 28.11 28.17 28.24 T:schwaemm128128v2 30.71 31.38 31.77 T:isapk128av20 31.88 32.06 32.11 romulusn 38.48 38.48 38.49 T:giftcofb128v1 43.37 43.39 43.45 romulusm 45.68 45.72 45.73 romulust 60.34 60.34 60.34 T:tinyjambu128v2 63.92 63.94 64.00 T:isapk128v20 68.64 68.64 68.64 T:tinyjambu192v2 69.38 69.39 69.40 T:tinyjambu256v2 149.04 149.23 151.94 T:isapxv20 152.70 152.83 153.32 T:elephant200v2 4507.33 4509.83 4513.48 T:elephant176v2 5102.67 5104.25 5127.85 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.05 4.10 4.15 T:aes128gcmv1 4.63 4.66 4.72 aes256gcmv1 8.38 8.38 8.45 ascon128av12 10.39 10.39 10.40 ascon80pqv12 10.48 10.48 10.48 ascon128v12 12.04 12.09 12.15 T:xoodyakround3 19.77 19.77 19.78 ascon128abi32v12 25.13 25.22 25.36 T:grain128aeadv2 25.24 25.24 25.25 ascon128bi32v12 30.02 30.20 30.46 T:schwaemm256128v2 36.26 36.69 37.00 T:schwaemm128128v2 37.55 37.65 37.81 T:schwaemm256256v2 37.90 38.00 38.15 romulusn 39.24 39.58 40.02 T:schwaemm192192v2 45.70 45.70 45.81 T:giftcofb128v1 49.30 49.40 49.53 romulusm 57.27 57.27 57.27 T:isapa128av20 70.52 70.52 70.55 T:tinyjambu128v2 80.11 80.11 80.16 T:tinyjambu192v2 80.65 80.65 80.71 T:tinyjambu256v2 119.49 119.71 119.93 romulust 123.25 123.93 127.13 T:isapk128av20 215.58 215.89 216.32 T:elephant200v2 299.97 300.05 300.24 T:isapa128v20 1008.87 1009.16 1009.48 T:isapk128v20 2301.14 2314.21 2355.87 T:isapxv20 5607.86 5610.35 5614.01 T:elephant176v2 6833.42 6836.31 6842.88 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.08 4.12 4.14 T:aes128gcmv1 4.87 4.93 4.98 aes256gcmv1 8.30 8.30 8.34 ascon128av12 10.42 10.42 10.46 ascon128v12 10.56 10.56 10.58 ascon80pqv12 12.20 12.26 12.29 T:xoodyakround3 19.58 19.58 19.60 ascon128abi32v12 24.62 24.62 24.62 ascon128bi32v12 25.24 25.35 25.48 T:grain128aeadv2 30.01 30.23 30.50 T:schwaemm256128v2 36.42 36.84 37.17 T:schwaemm128128v2 37.25 37.36 37.58 T:schwaemm256256v2 37.64 37.72 37.91 romulusn 39.32 39.46 39.81 T:schwaemm192192v2 46.17 46.42 46.47 T:giftcofb128v1 50.04 50.09 50.18 romulusm 56.20 56.21 56.24 T:isapa128av20 70.66 70.66 70.66 T:tinyjambu128v2 80.13 80.13 80.16 T:tinyjambu192v2 80.79 80.79 80.83 T:tinyjambu256v2 119.66 119.91 120.11 romulust 123.72 124.13 124.49 T:isapk128av20 215.62 215.75 215.94 T:elephant200v2 300.06 300.08 300.43 T:isapa128v20 1008.53 1008.78 1009.27 T:isapk128v20 2303.31 2321.62 2354.78 T:isapxv20 5612.29 5619.13 5640.16 T:elephant176v2 6832.81 6835.39 6840.56 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.08 4.11 4.14 T:aes128gcmv1 4.87 4.94 4.97 aes256gcmv1 8.30 8.30 8.30 ascon128av12 10.42 10.42 10.42 ascon128v12 10.56 10.56 10.56 ascon80pqv12 12.21 12.25 12.27 T:xoodyakround3 19.58 19.58 19.60 ascon128abi32v12 24.62 24.62 24.62 ascon128bi32v12 25.21 25.28 25.41 T:grain128aeadv2 30.29 30.54 30.86 T:schwaemm256128v2 36.55 36.55 36.59 T:isapa128av20 36.48 36.85 37.22 T:schwaemm128128v2 37.25 37.35 37.56 T:schwaemm256256v2 37.63 37.74 37.90 romulusn 39.08 39.30 39.64 T:schwaemm192192v2 46.13 46.14 46.31 T:giftcofb128v1 50.01 50.02 50.11 romulusm 70.66 70.66 70.66 T:tinyjambu128v2 74.36 74.43 74.56 romulust 78.31 79.17 81.23 T:isapk128av20 80.13 80.13 80.13 T:tinyjambu192v2 80.78 80.79 80.79 T:tinyjambu256v2 156.48 156.49 156.73 T:isapa128v20 215.60 215.76 216.06 T:elephant200v2 536.61 536.86 537.43 T:isapk128v20 1203.15 1204.94 1205.87 T:isapxv20 5608.30 5610.65 5615.55 T:elephant176v2 6830.45 6832.69 6838.81 T:elephant160v2