VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; know, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.40 1.41 1.41 T:aes128gcmv1 1.66 1.66 1.67 aes256gcmv1 7.40 7.42 7.45 ascon128av12 10.77 10.99 11.06 ascon128v12 10.92 11.02 11.04 ascon80pqv12 14.11 14.22 14.28 ascon128abi32v12 15.48 15.54 15.63 T:xoodyakround3 18.06 18.12 18.16 T:schwaemm256128v2 20.82 21.10 21.30 ascon128bi32v12 22.53 22.60 22.76 T:schwaemm256256v2 23.54 23.78 23.85 T:schwaemm192192v2 24.81 24.89 24.92 T:grain128aeadv2 26.00 26.07 26.13 T:schwaemm128128v2 38.54 38.57 38.58 romulusn 40.48 40.61 40.68 T:isapa128av20 41.32 41.38 41.45 T:giftcofb128v1 41.61 41.69 41.73 T:isapa128v20 60.15 60.23 60.33 T:tinyjambu128v2 62.83 62.96 63.04 romulusm 69.57 69.68 69.98 T:isapk128av20 76.57 76.58 76.60 T:tinyjambu192v2 80.06 80.14 80.23 T:tinyjambu256v2 92.80 93.17 93.54 T:isapk128v20 125.59 125.78 126.11 romulust 176.54 176.65 176.76 T:elephant200v2 191.04 191.15 193.43 T:isapxv20 7526.81 7527.64 7530.28 T:elephant176v2 8253.64 8256.33 8258.37 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.44 1.45 1.46 T:aes128gcmv1 1.57 1.59 1.60 aes256gcmv1 7.40 7.45 7.48 ascon128av12 10.85 10.90 10.93 ascon80pqv12 10.91 10.96 10.99 ascon128v12 14.14 14.19 14.22 ascon128abi32v12 15.26 15.31 15.42 T:xoodyakround3 18.07 18.13 18.19 T:schwaemm256128v2 20.96 21.13 21.16 ascon128bi32v12 22.52 22.57 22.75 T:schwaemm256256v2 23.73 23.78 23.86 T:schwaemm192192v2 25.38 25.41 25.52 T:grain128aeadv2 26.02 26.10 26.20 T:schwaemm128128v2 38.54 38.56 38.61 romulusn 40.56 40.60 40.67 T:isapa128av20 41.43 41.46 41.52 T:giftcofb128v1 41.57 41.67 41.77 T:isapa128v20 60.36 60.42 60.51 T:tinyjambu128v2 62.88 62.95 63.15 romulusm 69.53 69.69 69.85 T:isapk128av20 76.55 76.57 76.61 T:tinyjambu192v2 80.16 80.27 80.49 T:tinyjambu256v2 92.90 93.38 93.55 T:isapk128v20 125.64 125.75 125.85 romulust 176.60 176.68 176.76 T:elephant200v2 190.09 191.12 193.39 T:isapxv20 7527.18 7528.67 7531.97 T:elephant176v2 8254.89 8256.73 8259.41 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.44 1.45 1.46 T:aes128gcmv1 1.58 1.58 1.59 aes256gcmv1 7.32 7.45 7.49 ascon128av12 10.87 10.90 10.97 ascon80pqv12 10.93 10.95 10.97 ascon128v12 14.18 14.21 14.24 ascon128abi32v12 15.32 15.36 15.50 T:xoodyakround3 18.01 18.11 18.15 T:schwaemm256128v2 20.39 20.44 20.56 T:isapa128v20 20.93 21.13 21.16 ascon128bi32v12 22.52 22.58 22.75 T:schwaemm256256v2 23.55 23.76 23.81 T:schwaemm192192v2 25.37 25.42 25.53 T:grain128aeadv2 26.04 26.08 26.12 T:schwaemm128128v2 27.37 27.43 27.46 T:isapa128av20 38.53 38.56 38.58 romulusn 41.41 41.45 41.49 T:giftcofb128v1 43.02 43.06 43.14 romulust 46.17 46.27 46.51 T:isapk128av20 58.16 58.46 58.74 T:isapk128v20 60.38 60.48 60.58 T:tinyjambu128v2 62.91 62.99 63.11 romulusm 76.55 76.57 76.60 T:tinyjambu192v2 80.15 80.22 80.41 T:tinyjambu256v2 111.90 112.03 114.16 T:isapxv20 176.58 176.72 176.88 T:elephant200v2 7526.91 7528.18 7528.80 T:elephant176v2 8254.35 8257.60 8259.71 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.89 0.90 0.92 T:aes128gcmv1 1.02 1.03 1.04 aes256gcmv1 7.41 7.44 7.46 ascon128av12 10.80 10.84 10.88 ascon128v12 10.88 10.90 10.94 ascon80pqv12 11.64 11.66 11.68 T:xoodyakround3 13.98 14.06 14.10 ascon128abi32v12 17.93 17.97 18.01 T:schwaemm256128v2 20.76 20.80 21.02 ascon128bi32v12 22.43 22.48 22.64 T:schwaemm256256v2 23.59 23.65 24.05 T:schwaemm192192v2 24.84 24.93 24.96 T:grain128aeadv2 25.65 25.95 25.98 T:schwaemm128128v2 30.83 30.87 30.92 T:isapa128v20 31.12 31.17 31.56 romulusn 33.91 33.93 34.00 T:isapa128av20 41.32 41.34 41.38 T:giftcofb128v1 43.12 43.16 43.21 romulusm 49.31 49.34 49.39 T:tinyjambu128v2 57.95 58.11 58.17 T:isapk128av20 59.61 59.62 59.62 T:tinyjambu192v2 60.64 60.66 60.73 T:tinyjambu256v2 75.41 75.65 75.98 T:isapk128v20 84.14 84.23 84.35 romulust 132.66 132.71 132.85 T:elephant200v2 152.11 152.23 152.91 T:isapxv20 5622.60 5624.13 5631.22 T:elephant176v2 6188.16 6192.66 6193.46 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.91 0.93 0.94 T:aes128gcmv1 0.97 0.99 1.00 aes256gcmv1 7.23 7.25 7.28 ascon128av12 10.82 10.84 10.90 ascon80pqv12 10.86 10.91 10.95 ascon128v12 11.56 11.58 11.59 T:xoodyakround3 14.03 14.06 14.09 ascon128abi32v12 17.89 17.97 18.02 T:schwaemm256128v2 20.92 20.94 21.08 ascon128bi32v12 22.42 22.47 22.63 T:schwaemm256256v2 23.60 23.68 24.11 T:schwaemm192192v2 25.13 25.16 25.24 T:grain128aeadv2 25.93 25.97 26.03 T:schwaemm128128v2 30.85 30.89 30.95 T:isapa128v20 31.15 31.16 31.50 romulusn 33.90 33.95 33.99 T:isapa128av20 41.34 41.37 41.39 T:giftcofb128v1 43.18 43.22 43.27 romulusm 49.42 49.48 49.53 T:tinyjambu128v2 57.98 58.07 58.21 T:isapk128av20 59.58 59.61 59.66 T:tinyjambu192v2 60.73 60.76 60.79 T:tinyjambu256v2 75.48 75.68 76.02 T:isapk128v20 84.20 84.28 84.32 romulust 132.70 132.76 132.84 T:elephant200v2 151.60 151.77 152.82 T:isapxv20 5621.30 5622.62 5626.91 T:elephant176v2 6189.16 6192.89 6194.04 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.93 0.93 0.93 T:aes128gcmv1 0.99 0.99 1.00 aes256gcmv1 7.23 7.26 7.27 ascon128av12 10.83 10.85 10.86 ascon80pqv12 10.89 10.92 10.96 ascon128v12 11.57 11.59 11.61 T:xoodyakround3 14.03 14.06 14.08 ascon128abi32v12 17.92 17.98 18.06 T:schwaemm256128v2 20.25 20.30 20.36 T:isapa128v20 20.95 21.03 21.16 ascon128bi32v12 22.41 22.48 22.66 T:schwaemm256256v2 23.61 23.71 24.06 T:schwaemm192192v2 25.10 25.17 25.23 T:grain128aeadv2 25.91 25.97 26.00 T:schwaemm128128v2 27.31 27.34 27.38 T:isapa128av20 31.14 31.17 31.50 romulusn 41.36 41.39 41.44 T:giftcofb128v1 42.80 42.93 43.04 romulust 43.19 43.22 43.25 romulusm 46.21 46.39 46.51 T:isapk128av20 49.43 49.49 49.56 T:tinyjambu128v2 58.13 58.27 58.47 T:isapk128v20 59.59 59.61 59.63 T:tinyjambu192v2 60.72 60.78 60.83 T:tinyjambu256v2 112.50 112.58 113.82 T:isapxv20 132.72 132.79 132.83 T:elephant200v2 5619.17 5622.94 5624.48 T:elephant176v2 6190.39 6192.64 6193.53 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.39 0.40 0.41 T:aes128gcmv1 0.40 0.41 0.41 aes256gcmv1 7.40 7.42 7.45 ascon128av12 7.87 7.90 7.97 T:xoodyakround3 10.82 10.85 10.88 ascon128v12 10.87 10.89 10.92 ascon80pqv12 13.90 13.92 13.94 ascon128abi32v12 17.74 17.79 17.89 T:schwaemm256128v2 20.01 20.06 20.11 T:isapa128v20 20.69 20.73 21.19 ascon128bi32v12 22.30 22.36 22.53 T:schwaemm256256v2 23.34 23.45 24.32 T:schwaemm192192v2 23.58 23.61 23.69 romulusm 23.68 23.79 24.53 romulusn 24.85 24.89 24.94 T:grain128aeadv2 25.74 25.81 25.85 T:schwaemm128128v2 27.36 27.40 27.44 T:isapa128av20 38.41 38.48 38.51 T:tinyjambu128v2 41.17 41.21 41.27 T:tinyjambu256v2 41.24 41.31 41.36 T:giftcofb128v1 42.52 42.55 42.61 romulust 42.66 42.66 42.69 T:tinyjambu192v2 46.08 46.16 46.31 T:isapk128av20 57.50 57.89 58.39 T:isapk128v20 89.47 89.53 89.60 T:elephant200v2 113.03 113.10 113.18 T:isapxv20 3717.54 3718.40 3719.85 T:elephant176v2 4125.75 4128.32 4130.06 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.40 0.41 0.42 T:aes128gcmv1 0.39 0.41 0.42 aes256gcmv1 7.01 7.05 7.55 ascon128av12 7.86 7.89 7.95 T:xoodyakround3 10.75 10.79 10.88 ascon80pqv12 10.79 10.82 10.86 ascon128v12 13.90 13.93 13.95 ascon128abi32v12 17.68 17.78 17.93 T:schwaemm256128v2 20.00 20.05 20.10 T:isapa128v20 20.70 21.13 21.17 ascon128bi32v12 22.30 22.36 22.53 T:schwaemm256256v2 23.42 23.55 24.40 T:schwaemm192192v2 23.56 23.63 23.78 romulusm 23.68 23.76 24.43 romulusn 24.82 24.91 24.98 T:grain128aeadv2 25.75 25.82 25.90 T:schwaemm128128v2 27.38 27.41 27.46 T:isapa128av20 38.44 38.51 38.57 T:tinyjambu128v2 41.17 41.23 41.28 T:tinyjambu256v2 41.25 41.31 41.34 T:giftcofb128v1 42.54 42.59 42.67 romulust 42.64 42.73 42.75 T:tinyjambu192v2 46.07 46.25 46.38 T:isapk128av20 57.91 58.11 58.37 T:isapk128v20 89.50 89.56 89.67 T:elephant200v2 113.06 113.13 113.16 T:isapxv20 3717.43 3718.62 3719.13 T:elephant176v2 4125.74 4128.84 4131.81 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.40 0.41 0.41 aes256gcmv1 0.41 0.41 0.42 T:aes128gcmv1 7.02 7.04 7.06 ascon128av12 7.86 7.91 7.96 T:xoodyakround3 10.74 10.78 10.88 ascon80pqv12 10.79 10.83 10.86 ascon128v12 13.92 13.93 13.95 ascon128abi32v12 17.72 17.80 17.90 T:schwaemm256128v2 19.97 20.05 20.12 T:isapa128v20 20.72 21.14 21.18 ascon128bi32v12 22.29 22.35 22.52 T:schwaemm256256v2 23.40 23.55 24.30 T:schwaemm192192v2 23.58 23.62 23.68 romulusm 23.69 23.77 24.43 romulusn 24.82 24.91 24.94 T:grain128aeadv2 25.73 25.80 25.84 T:schwaemm128128v2 27.35 27.41 27.46 T:isapa128av20 38.45 38.48 38.52 T:tinyjambu128v2 41.15 41.21 41.25 T:tinyjambu256v2 41.28 41.32 41.37 T:giftcofb128v1 42.54 42.64 42.77 romulust 42.61 42.66 42.71 T:tinyjambu192v2 46.12 46.22 46.31 T:isapk128av20 58.02 58.22 58.54 T:isapk128v20 89.47 89.54 89.62 T:elephant200v2 113.03 113.11 113.17 T:isapxv20 3717.26 3718.85 3720.89 T:elephant176v2 4124.49 4126.14 4128.48 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.06 1.07 1.07 T:aes128gcmv1 1.21 1.21 1.21 aes256gcmv1 7.61 7.64 7.66 ascon128av12 11.01 11.02 11.04 ascon128v12 11.07 11.12 11.21 ascon80pqv12 11.80 11.80 11.81 T:xoodyakround3 14.35 14.39 14.42 ascon128abi32v12 18.50 18.52 18.61 T:schwaemm256128v2 21.10 21.17 21.31 ascon128bi32v12 23.06 23.13 23.25 T:schwaemm256256v2 24.22 24.27 24.57 T:schwaemm192192v2 25.25 25.35 25.37 T:grain128aeadv2 26.27 26.29 26.32 T:schwaemm128128v2 31.47 31.50 31.84 romulusn 36.37 36.43 36.51 T:isapa128av20 41.71 41.73 41.76 T:giftcofb128v1 43.48 43.55 43.62 romulusm 45.53 45.60 45.74 T:isapa128v20 49.73 49.77 49.79 T:tinyjambu128v2 60.06 60.06 60.06 T:tinyjambu192v2 61.12 61.16 61.19 T:tinyjambu256v2 64.99 65.05 65.11 T:isapk128av20 85.53 85.56 85.72 romulust 131.08 131.19 131.43 T:isapk128v20 135.53 135.56 135.62 T:elephant200v2 247.67 247.72 248.22 T:isapxv20 5664.03 5666.01 5667.64 T:elephant176v2 6260.29 6262.28 6265.10 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.08 1.09 1.10 T:aes128gcmv1 1.17 1.17 1.17 aes256gcmv1 7.45 7.45 7.48 ascon128av12 11.01 11.04 11.07 ascon80pqv12 11.06 11.08 11.09 ascon128v12 11.71 11.73 11.75 T:xoodyakround3 14.36 14.38 14.39 ascon128abi32v12 18.52 18.55 18.59 T:schwaemm256128v2 21.27 21.40 21.46 ascon128bi32v12 23.05 23.13 23.26 T:schwaemm256256v2 24.18 24.25 24.62 T:schwaemm192192v2 25.54 25.57 25.64 T:grain128aeadv2 26.27 26.32 26.34 T:schwaemm128128v2 31.48 31.50 31.83 romulusn 36.38 36.42 36.48 T:isapa128av20 41.79 41.82 41.83 T:giftcofb128v1 43.57 43.62 43.70 romulusm 45.54 45.58 45.72 T:isapa128v20 49.82 49.87 49.93 T:tinyjambu128v2 60.03 60.05 60.08 T:tinyjambu192v2 61.17 61.21 61.28 T:tinyjambu256v2 65.03 65.15 65.23 T:isapk128av20 85.43 85.56 85.68 romulust 131.05 131.19 131.34 T:isapk128v20 135.51 135.54 135.59 T:elephant200v2 247.57 247.67 248.64 T:isapxv20 5663.99 5665.02 5666.65 T:elephant176v2 6258.86 6261.96 6263.61 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.08 1.08 1.09 T:aes128gcmv1 1.17 1.17 1.17 aes256gcmv1 7.45 7.46 7.63 ascon128av12 11.01 11.04 11.07 ascon80pqv12 11.07 11.09 11.11 ascon128v12 11.72 11.75 11.76 T:xoodyakround3 14.35 14.38 14.39 ascon128abi32v12 18.48 18.52 18.58 T:schwaemm256128v2 21.27 21.36 21.44 ascon128bi32v12 23.04 23.11 23.25 T:schwaemm256256v2 24.15 24.22 24.60 T:schwaemm192192v2 25.52 25.58 25.64 T:grain128aeadv2 26.27 26.32 26.36 T:schwaemm128128v2 27.87 27.90 27.98 T:isapa128v20 28.76 28.78 28.81 T:isapa128av20 31.49 31.51 31.80 romulusn 41.75 41.79 41.81 T:giftcofb128v1 43.56 43.59 43.63 romulusm 44.09 44.22 44.38 romulust 49.87 49.92 49.96 T:tinyjambu128v2 50.38 50.44 50.51 T:isapk128av20 60.04 60.08 60.09 T:tinyjambu192v2 61.19 61.22 61.30 T:tinyjambu256v2 86.67 86.82 87.19 T:isapk128v20 135.50 135.56 135.78 T:elephant200v2 161.42 161.47 162.44 T:isapxv20 5662.90 5664.70 5666.19 T:elephant176v2 6257.97 6261.02 6262.31 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.65 6.71 6.74 T:aes128gcmv1 7.34 7.38 7.48 aes256gcmv1 12.04 12.18 12.32 ascon128av12 14.98 15.05 15.54 ascon128v12 15.27 15.51 15.83 ascon80pqv12 17.21 17.30 17.42 T:xoodyakround3 21.50 21.80 22.20 ascon128abi32v12 28.05 28.42 28.68 ascon128bi32v12 29.95 30.27 30.41 T:schwaemm256128v2 33.85 34.09 34.22 T:schwaemm128128v2 34.88 34.91 35.08 T:grain128aeadv2 36.93 37.07 37.32 T:schwaemm256256v2 38.91 39.02 39.50 romulusn 39.23 39.44 39.84 T:schwaemm192192v2 50.62 50.82 51.03 T:giftcofb128v1 50.73 50.84 51.86 romulusm 58.60 58.86 59.09 T:tinyjambu128v2 70.12 70.15 70.26 T:tinyjambu192v2 71.77 71.82 72.22 T:tinyjambu256v2 93.48 93.84 94.03 T:isapa128av20 115.07 115.41 116.48 romulust 192.09 192.42 193.10 T:elephant200v2 210.53 211.56 214.42 T:isapk128av20 381.74 381.84 382.66 T:isapa128v20 1384.68 1386.08 1388.09 T:isapk128v20 2415.57 2416.29 2417.02 T:isapxv20 7046.28 7049.03 7054.70 T:elephant176v2 8382.38 8385.11 8386.86 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.37 6.41 6.52 T:aes128gcmv1 7.03 7.09 7.14 aes256gcmv1 12.02 12.41 12.71 ascon128av12 15.00 15.12 15.60 ascon80pqv12 15.09 15.22 15.62 ascon128v12 17.17 17.38 17.84 T:xoodyakround3 21.42 21.57 22.30 ascon128abi32v12 28.41 28.46 28.79 ascon128bi32v12 30.21 30.45 30.79 T:schwaemm256128v2 33.73 34.06 34.41 T:schwaemm128128v2 34.98 35.09 35.27 T:grain128aeadv2 37.01 37.21 37.44 T:schwaemm256256v2 38.82 39.08 39.59 T:schwaemm192192v2 39.09 39.33 39.52 romulusn 50.96 51.02 51.44 T:giftcofb128v1 52.29 52.45 52.92 romulusm 59.09 59.34 59.56 T:tinyjambu128v2 70.19 70.25 70.29 T:tinyjambu192v2 71.73 71.98 72.23 T:tinyjambu256v2 93.34 93.62 93.94 T:isapa128av20 115.00 115.27 115.58 romulust 192.09 192.38 192.81 T:elephant200v2 210.52 211.12 212.77 T:isapk128av20 381.74 382.15 382.59 T:isapa128v20 1386.23 1387.80 1389.52 T:isapk128v20 2415.51 2416.46 2417.53 T:isapxv20 7048.09 7050.35 7054.49 T:elephant176v2 8382.45 8383.48 8386.20 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.35 6.38 6.40 T:aes128gcmv1 7.07 7.12 7.16 aes256gcmv1 11.87 11.94 12.06 ascon128av12 15.05 15.16 15.26 ascon128v12 15.06 15.20 15.29 ascon80pqv12 17.28 17.34 17.64 T:xoodyakround3 21.54 21.66 21.77 ascon128abi32v12 28.32 28.46 28.80 ascon128bi32v12 29.99 30.17 30.33 T:schwaemm256128v2 33.70 33.96 34.33 T:schwaemm128128v2 34.97 35.09 35.18 T:grain128aeadv2 37.04 37.16 37.34 T:schwaemm256256v2 39.10 39.20 39.58 romulusn 39.02 39.27 39.64 T:schwaemm192192v2 50.89 51.19 51.34 T:giftcofb128v1 52.21 52.27 52.55 romulusm 58.89 59.02 59.16 T:tinyjambu128v2 60.41 60.71 61.03 T:isapa128av20 70.12 70.16 70.20 T:tinyjambu192v2 71.84 71.97 72.07 T:tinyjambu256v2 72.14 72.35 73.20 romulust 131.95 132.61 133.66 T:isapk128av20 192.06 192.33 192.95 T:elephant200v2 200.81 201.13 201.27 T:isapa128v20 723.35 725.87 728.12 T:isapk128v20 1264.04 1264.46 1264.99 T:isapxv20 7048.96 7052.40 7054.85 T:elephant176v2 8382.13 8383.55 8385.94 T:elephant160v2