VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20260330

[Page version: 20260418 07:16:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.44 1.46 1.47 T:aes128gcmv1 1.61 1.62 1.64 aes256gcmv1 10.26 10.30 10.45 ascon128av12 15.15 15.17 15.18 ascon80pqv12 15.28 15.29 15.30 ascon128v12 17.13 17.15 17.40 T:xoodyakround3 20.11 20.17 20.31 ascon128abi32v12 29.04 29.07 29.15 T:schwaemm256128v2 29.99 30.17 30.46 ascon128bi32v12 36.57 36.62 36.68 T:schwaemm256256v2 38.48 38.57 38.68 T:schwaemm192192v2 39.49 39.55 39.63 T:grain128aeadv2 40.75 41.06 41.37 T:schwaemm128128v2 47.46 47.48 47.52 romulusn 49.36 49.48 49.66 T:giftcofb128v1 59.23 59.63 59.65 T:isapa128v20 59.66 59.77 60.02 T:isapa128av20 74.44 74.44 74.46 T:tinyjambu128v2 76.79 76.93 77.09 romulusm 87.00 87.00 87.00 T:tinyjambu192v2 94.56 94.56 94.57 T:tinyjambu256v2 99.69 103.98 106.92 T:isapk128av20 136.65 137.34 138.85 T:isapk128v20 150.32 150.54 150.73 T!!!romulust 181.99? 206.66? 230.13? T:isapxv20 231.44 231.54 231.82 T:elephant200v2 10835.64 10842.95 10866.91 T:elephant176v2 12166.52 12182.67 12190.51 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.44 1.45 1.47 T:aes128gcmv1 1.65 1.66 1.68 aes256gcmv1 10.59 10.61 10.61 ascon128av12 15.21 15.23 15.34 ascon80pqv12 15.27 15.39 15.45 ascon128v12 16.94 17.00 17.04 T:xoodyakround3 20.10 20.22 20.25 ascon128abi32v12 29.27 29.33 29.39 T:schwaemm256128v2 29.94 30.00 30.37 ascon128bi32v12 36.84 36.91 37.11 T:schwaemm256256v2 38.42 38.58 38.82 T:schwaemm192192v2 39.18 39.25 39.47 T:grain128aeadv2 41.08 41.25 41.40 T:schwaemm128128v2 45.16 46.15 46.63 romulusn 49.54 49.68 49.84 T:giftcofb128v1 58.99 59.13 59.65 T:isapa128v20 59.84 59.91 59.96 T:isapa128av20 74.50 74.50 74.52 T:tinyjambu128v2 74.70 75.27 75.84 romulusm 87.11 87.13 87.14 T:tinyjambu192v2 94.38 94.39 94.42 T:tinyjambu256v2 99.74 103.89 106.81 T:isapk128av20 136.40 137.42 138.87 T:isapk128v20 150.46 150.61 151.01 T!!!romulust 203.56 206.03 206.40 T:isapxv20 231.22 231.29 231.69 T:elephant200v2 10837.80 10851.27 10867.15 T:elephant176v2 12176.06 12181.82 12187.23 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.44 1.45 1.46 T:aes128gcmv1 1.65 1.66 1.67 aes256gcmv1 10.60 10.61 10.61 ascon128av12 15.21 15.24 15.39 ascon80pqv12 15.31 15.32 15.32 ascon128v12 17.03 17.08 17.10 T:xoodyakround3 20.11 20.22 20.25 ascon128abi32v12 28.86 29.27 29.48 T:isapa128v20 29.27 29.33 29.42 T:schwaemm256128v2 29.97 30.18 30.43 ascon128bi32v12 36.82 36.95 37.02 T:schwaemm256256v2 38.41 38.58 38.85 T:schwaemm192192v2 39.24 39.36 39.57 T:grain128aeadv2 39.64 39.67 39.80 T:isapa128av20 41.20 41.24 41.30 T:schwaemm128128v2 44.95 45.32 46.51 romulusn 49.53 49.62 49.75 T:giftcofb128v1 52.89 53.05 53.25 T!!!romulust 67.73 68.64 69.62 T:isapk128av20 74.50 74.50 74.51 T:tinyjambu128v2 74.87 75.56 76.37 romulusm 85.10 85.85 86.80 T:isapk128v20 87.12 87.13 87.14 T:tinyjambu192v2 94.38 94.39 94.45 T:tinyjambu256v2 122.76 123.60 123.76 T:isapxv20 231.34 231.35 231.60 T:elephant200v2 10839.38 10857.39 10866.49 T:elephant176v2 12173.03 12180.49 12187.07 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.99 1.00 1.00 T:aes128gcmv1 1.08 1.09 1.10 aes256gcmv1 10.00 10.06 10.13 ascon128av12 13.12 13.14 13.27 T:xoodyakround3 15.17 15.19 15.26 ascon128v12 15.14 15.22 15.31 ascon80pqv12 20.42 20.46 20.49 ascon128abi32v12 28.87 28.94 29.01 T:schwaemm256128v2 29.96 30.04 30.25 ascon128bi32v12 36.26 36.54 36.76 T:schwaemm256256v2 38.24 38.32 38.41 T:schwaemm192192v2 38.43 38.55 38.61 romulusn 39.48 39.54 39.64 T:grain128aeadv2 40.59 40.64 40.93 T:schwaemm128128v2 44.14 44.34 44.43 T:isapa128v20 49.30 49.34 49.42 T:giftcofb128v1 49.72 49.80 49.91 T:isapa128av20 52.52 52.91 53.03 romulusm 59.84 59.85 59.86 T:tinyjambu128v2 68.25 68.25 68.27 T:tinyjambu192v2 70.71 70.83 70.92 T:tinyjambu256v2 84.17 86.37 87.81 T:isapk128av20 101.39 101.58 101.82 T!!!romulust 111.20 111.63 112.81 T:isapk128v20 152.08? 164.77? 176.49? T:isapxv20 173.94 173.97 174.42 T:elephant200v2 8105.88 8117.53 8129.69 T:elephant176v2 9125.29 9132.47 9136.85 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.99 1.00 1.01 T:aes128gcmv1 1.08 1.09 1.10 aes256gcmv1 10.24 10.28 10.28 ascon128av12 13.01 13.04 13.06 T:xoodyakround3 15.10 15.17 15.30 ascon128v12 15.15 15.24 15.31 ascon80pqv12 20.38 20.44 20.53 ascon128abi32v12 29.01 29.06 29.16 T:schwaemm256128v2 30.13 30.30 30.41 ascon128bi32v12 36.49 36.59 36.83 T:schwaemm256256v2 37.19 37.78 38.05 romulusn 38.25 38.47 38.56 T:schwaemm192192v2 39.05 39.20 39.45 T:grain128aeadv2 40.75 40.87 40.95 T:schwaemm128128v2 44.10 44.14 44.34 T:isapa128v20 49.42 49.47 49.54 T:giftcofb128v1 49.71 49.86 49.94 T:isapa128av20 51.96 52.22 52.48 romulusm 59.94 59.94 59.95 T:tinyjambu128v2 68.34 68.35 68.35 T:tinyjambu192v2 70.61 70.63 70.88 T:tinyjambu256v2 84.21 86.34 87.81 T:isapk128av20 101.72 102.04 102.23 T!!!romulust 111.29 111.69 112.79 T:isapk128v20 164.21 164.49 165.11 T:isapxv20 173.81 173.85 174.38 T:elephant200v2 8097.67 8108.72 8121.26 T:elephant176v2 9127.75 9134.60 9138.91 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.99 1.00 1.00 T:aes128gcmv1 1.08 1.09 1.09 aes256gcmv1 10.26 10.27 10.27 ascon128av12 13.06 13.08 13.10 T:xoodyakround3 15.09 15.15 15.26 ascon128v12 15.18 15.23 15.33 ascon80pqv12 20.43 20.47 20.48 ascon128abi32v12 29.03 29.09 29.21 T:schwaemm256128v2 29.08 29.17 29.30 T:isapa128v20 29.96 30.10 30.30 ascon128bi32v12 36.49 36.67 36.78 T:schwaemm256256v2 37.25 37.62 37.90 romulusn 38.25 38.39 38.48 T:schwaemm192192v2 39.11 39.20 39.44 T:grain128aeadv2 39.64 39.65 39.71 T:isapa128av20 40.75 40.87 40.94 T:schwaemm128128v2 49.38 49.45 49.53 T:giftcofb128v1 51.90 52.17 52.73 romulusm 52.95 53.20 53.25 T!!!romulust 59.94 59.94 59.95 T:tinyjambu128v2 68.34 68.34 68.35 T:tinyjambu192v2 68.34 68.71 69.34 T:isapk128av20 70.61 70.66 70.93 T:tinyjambu256v2 85.48 85.85 86.58 T:isapk128v20 122.50 122.92 123.09 T:isapxv20 173.82 173.85 174.17 T:elephant200v2 8095.71 8101.42 8118.62 T:elephant176v2 9130.28 9135.71 9139.81 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.53 0.55 0.56 T:aes128gcmv1 0.54 0.56 0.58 aes256gcmv1 9.04 9.11 9.14 T:xoodyakround3 9.78 9.84 10.01 ascon128av12 15.00 15.07 15.46 ascon128v12 15.03 15.18 15.46 ascon80pqv12 20.72 20.73 20.74 ascon128abi32v12 28.80 28.87 28.96 T:schwaemm256128v2 28.70 29.15 29.64 T:isapa128v20 29.14 29.21 29.46 romulusm 28.85 29.41 29.65 romulusn 30.08 30.22 30.37 ascon128bi32v12 36.23 36.37 36.40 T:schwaemm256256v2 38.00 38.10 38.20 T:schwaemm192192v2 39.33 39.36 39.40 T:grain128aeadv2 39.64 39.66 39.88 T:isapa128av20 40.54 40.59 40.73 T:schwaemm128128v2 45.25 45.25 45.25 T:tinyjambu128v2 46.86 47.13 47.29 T:tinyjambu256v2 49.26 49.29 49.39 T:giftcofb128v1 49.50 49.50 49.50 T:tinyjambu192v2 52.49 52.55 52.87 T!!!romulust 68.72 68.77 68.83 T:isapk128av20 85.21 85.89 86.91 T:isapk128v20 117.15 117.17 117.25 T:elephant200v2 122.20 123.08 123.19 T:isapxv20 5355.72 5362.14 5368.97 T:elephant176v2 6078.11 6086.74 6090.75 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.50 0.51 0.53 aes256gcmv1 0.53 0.54 0.56 T:aes128gcmv1 8.97 9.05 9.14 T:xoodyakround3 9.93 9.93 9.94 ascon128av12 14.74 15.00 15.19 ascon128v12 15.08 15.16 15.39 ascon80pqv12 20.72 20.73 20.74 ascon128abi32v12 28.81 28.91 28.99 T:schwaemm256128v2 28.74 29.20 29.58 T:isapa128v20 29.20 29.34 29.55 romulusm 29.44 29.56 29.66 romulusn 30.02 30.13 30.27 ascon128bi32v12 36.23 36.35 36.54 T:schwaemm256256v2 38.15 38.24 38.38 T:schwaemm192192v2 38.69 39.15 39.28 T:grain128aeadv2 39.64 39.66 39.69 T:isapa128av20 40.70 40.78 40.82 T:schwaemm128128v2 45.37 45.37 45.38 T:tinyjambu128v2 46.85 47.19 47.41 T:tinyjambu256v2 49.28 49.37 49.41 T:giftcofb128v1 49.55 49.56 49.59 T:tinyjambu192v2 52.59 53.28 53.57 T!!!romulust 68.74 68.77 68.81 T:isapk128av20 85.03 85.86 87.04 T:isapk128v20 117.14 117.16 117.19 T:elephant200v2 120.80 121.93 123.27 T:isapxv20 5359.98 5365.42 5372.26 T:elephant176v2 6082.36 6087.53 6091.61 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.50 0.51 0.52 aes256gcmv1 0.53 0.55 0.56 T:aes128gcmv1 9.00 9.10 9.14 T:xoodyakround3 9.93 9.94 9.95 ascon128av12 14.79 15.03 15.18 ascon128v12 15.13 15.37 15.39 ascon80pqv12 20.73 20.73 20.74 ascon128abi32v12 28.83 28.89 28.99 T:schwaemm256128v2 28.82 29.20 29.62 T:isapa128v20 29.20 29.26 29.48 romulusm 29.41 29.57 29.60 romulusn 30.04 30.28 30.41 ascon128bi32v12 36.28 36.46 36.56 T:schwaemm256256v2 38.11 38.20 38.35 T:schwaemm192192v2 38.78 39.05 39.15 T:grain128aeadv2 39.63 39.66 39.80 T:isapa128av20 40.60 40.71 40.80 T:schwaemm128128v2 45.38 45.38 45.38 T:tinyjambu128v2 46.86 47.17 47.41 T:tinyjambu256v2 49.31 49.39 49.45 T:giftcofb128v1 49.55 49.56 49.57 T:tinyjambu192v2 52.90 53.32 53.50 T!!!romulust 68.73 68.78 68.92 T:isapk128av20 84.89 85.83 86.77 T:isapk128v20 117.14 117.16 117.18 T:elephant200v2 122.35 123.23 123.33 T:isapxv20 5355.60 5364.74 5368.50 T:elephant176v2 6082.16 6087.65 6090.35 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.13 1.13 1.14 T:aes128gcmv1 1.23 1.23 1.24 aes256gcmv1 10.31 10.38 10.39 ascon128av12 13.30 13.35 13.41 T:xoodyakround3 15.35 15.39 15.46 ascon80pqv12 15.38 15.40 15.45 ascon128v12 20.85 20.89 20.90 ascon128abi32v12 29.74 29.78 29.83 T:schwaemm256128v2 30.51 30.66 30.70 ascon128bi32v12 37.36 37.53 37.68 T:schwaemm256256v2 38.76 38.86 38.91 romulusn 39.16 39.18 39.21 T:schwaemm192192v2 39.87 39.96 40.08 T:grain128aeadv2 41.09 41.11 41.26 T:schwaemm128128v2 49.72 49.80 49.90 T:giftcofb128v1 53.05 53.13 53.20 T:isapa128av20 53.18 53.36 53.55 romulusm 60.30 60.31 60.31 T:tinyjambu128v2 64.59 64.71 64.79 T:isapa128v20 68.76 68.77 68.78 T:tinyjambu192v2 71.24 71.38 71.43 T:tinyjambu256v2 96.80 97.29 99.08 T:isapk128av20 103.03 103.19 103.33 T!!!romulust 177.59 177.62 177.94 T:elephant200v2 196.41 196.82 197.24 T:isapk128v20 268.02 268.77 283.19 T:isapxv20 8158.40 8163.53 8180.47 T:elephant176v2 9231.33 9237.70 9239.53 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.13 1.13 1.14 T:aes128gcmv1 1.23 1.23 1.24 aes256gcmv1 10.50 10.50 10.50 ascon128av12 13.19 13.21 13.24 T:xoodyakround3 15.31 15.37 15.49 ascon128v12 15.45 15.50 15.58 ascon80pqv12 20.87 20.90 20.90 ascon128abi32v12 29.87 29.92 30.01 T:schwaemm256128v2 30.64 30.73 30.80 ascon128bi32v12 37.48 37.62 37.71 T:schwaemm256256v2 37.68 38.29 38.51 romulusn 39.22 39.28 39.40 T:schwaemm192192v2 39.65 39.75 40.03 T:grain128aeadv2 41.32 41.45 41.49 T:schwaemm128128v2 49.82 49.90 49.96 T:giftcofb128v1 52.36 52.51 52.73 romulusm 53.00 53.07 53.21 T:isapa128av20 60.40 60.40 60.40 T:tinyjambu128v2 64.59 64.69 64.79 T:isapa128v20 68.87 68.87 68.90 T:tinyjambu192v2 71.40 71.41 71.41 T:tinyjambu256v2 96.80 97.31 99.10 T:isapk128av20 103.33 103.60 103.72 T!!!romulust 177.48 177.52 177.61 T:elephant200v2 196.42 196.91 197.58 T:isapk128v20 267.87 268.30 268.69 T:isapxv20 8160.21 8170.14 8181.00 T:elephant176v2 9234.45 9237.81 9241.12 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.13 1.13 1.14 T:aes128gcmv1 1.23 1.23 1.24 aes256gcmv1 10.44 10.44 10.50 ascon128av12 13.24 13.25 13.26 T:xoodyakround3 15.30 15.35 15.42 ascon128v12 15.40 15.44 15.53 ascon80pqv12 20.87 20.90 20.90 ascon128abi32v12 29.91 29.97 30.04 T:schwaemm256128v2 30.57 30.71 30.86 ascon128bi32v12 37.51 37.61 37.72 T:schwaemm256256v2 37.66 37.79 38.10 romulusn 39.14 39.20 39.40 T:schwaemm192192v2 39.54 39.64 39.76 T:isapa128v20 39.63 39.69 39.91 T:grain128aeadv2 41.40 41.46 41.49 T:schwaemm128128v2 41.53 41.53 41.62 T:isapa128av20 49.83 49.90 49.96 T:giftcofb128v1 52.46 52.78 52.94 romulusm 54.44 54.59 54.86 T!!!romulust 60.40 60.40 60.41 T:tinyjambu128v2 68.86 68.87 68.87 T:tinyjambu192v2 71.15 71.16 71.27 T:tinyjambu256v2 74.90 75.39 75.43 T:isapk128av20 130.62 131.06 131.34 T:isapk128v20 175.66 175.98 176.14 T:isapxv20 177.51 177.54 177.92 T:elephant200v2 8164.99 8172.45 8182.58 T:elephant176v2 9229.87 9235.75 9242.91 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.61 6.69 6.77 T:aes128gcmv1 7.62 7.74 7.90 aes256gcmv1 15.38 15.47 15.69 ascon128av12 19.97 20.06 20.25 T:xoodyakround3 20.12 20.21 20.37 ascon128v12 20.29 20.36 20.51 ascon80pqv12 30.60 30.63 30.73 ascon128abi32v12 39.65 39.85 39.99 ascon128bi32v12 46.14 46.36 46.66 romulusn 48.39 48.51 48.63 T:schwaemm256128v2 50.20 50.27 50.53 T:grain128aeadv2 52.71 52.86 52.99 T:schwaemm128128v2 58.91 59.06 59.25 T:giftcofb128v1 59.05 59.18 59.33 T:schwaemm256256v2 61.89 62.03 62.29 romulusm 62.60 62.74 62.93 T:schwaemm192192v2 70.59 70.74 70.83 T:tinyjambu128v2 80.47 80.49 80.62 T:tinyjambu192v2 83.03 83.13 83.27 T:tinyjambu256v2 128.38 128.69 128.98 T:isapa128av20 139.34 139.68 140.08 T!!!romulust 251.74 251.94 252.11 T:elephant200v2 327.92? 333.01? 383.14? T:isapk128av20 534.15 534.24 534.65 T:isapa128v20 2123.51 2134.65 2137.33 T:isapk128v20 2626.16? 2630.15? 2979.57? T:isapxv20 10149.17 10168.46 10186.84 T:elephant176v2 12346.40 12355.02 12385.21 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.77 6.88 6.96 T:aes128gcmv1 7.42 7.51 7.79 aes256gcmv1 15.53 15.57 15.77 ascon128av12 19.81 19.87 20.06 T:xoodyakround3 20.18 20.35 20.66 ascon128v12 20.39 20.47 20.75 ascon80pqv12 30.67 30.74 30.83 ascon128abi32v12 39.99 40.05 40.21 ascon128bi32v12 46.05 46.16 46.48 romulusn 48.54 48.67 48.85 T:schwaemm256128v2 50.07 50.15 50.24 T:grain128aeadv2 52.77 52.91 53.05 T:schwaemm128128v2 58.90 59.00 59.21 T:giftcofb128v1 59.06 59.20 59.48 T:schwaemm256256v2 62.96 63.15 63.27 T:schwaemm192192v2 63.21 63.42 63.73 romulusm 70.84 70.84 71.04 T:tinyjambu128v2 80.75 80.88 80.97 T:tinyjambu192v2 83.20 83.32 83.41 T:tinyjambu256v2 128.32 128.65 128.96 T:isapa128av20 139.82 139.97 140.21 T!!!romulust 251.68 251.73 252.08 T:elephant200v2 328.50? 332.79? 382.40? T:isapk128av20 534.30 534.43 534.78 T:isapa128v20 2123.66 2135.46 2139.45 T:isapk128v20 2622.26 2623.01 2626.97 T:isapxv20 10152.83 10167.34 10185.99 T:elephant176v2 12337.60 12351.91 12377.89 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.78 6.86 6.93 T:aes128gcmv1 7.38 7.50 7.75 aes256gcmv1 15.60 15.71 15.90 ascon128av12 19.84 19.95 20.03 T:xoodyakround3 20.26 20.36 20.45 ascon128v12 20.38 20.43 20.62 ascon80pqv12 30.65 30.70 30.76 ascon128abi32v12 40.01 40.13 40.32 ascon128bi32v12 45.98 46.05 46.34 romulusn 48.55 48.63 48.73 T:schwaemm256128v2 49.92 50.15 50.21 T:grain128aeadv2 52.65 52.81 53.05 T:schwaemm128128v2 58.82 58.95 59.07 T:giftcofb128v1 59.16 59.31 59.39 T:schwaemm256256v2 62.90 63.04 63.18 T:schwaemm192192v2 63.49 63.67 63.84 romulusm 70.84 70.84 70.84 T:tinyjambu128v2 80.74 80.79 80.82 T:tinyjambu192v2 83.32 83.33 83.36 T:tinyjambu256v2 84.39 84.60 84.85 T:isapa128av20 89.37 89.58 90.01 T!!!romulust 202.24 215.91 216.30 T:isapk128av20 251.69 251.75 252.07 T:elephant200v2 280.09 280.23 280.45 T:isapa128v20 1142.37 1154.30 1155.59 T:isapk128v20 1372.64 1372.92 1373.32 T:isapxv20 10154.97 10166.95 10188.95 T:elephant176v2 12348.21 12358.67 12386.78 T:elephant160v2