VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20260217

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.52 1.53 1.54 T:aes128gcmv1 1.74 1.76 1.76 aes256gcmv1 6.03 6.06 6.08 ascon128av12 9.00 9.00 9.00 ascon128v12 8.99 9.00 9.02 ascon80pqv12 11.24 11.25 11.25 ascon128abi32v12 15.29 15.32 15.34 T:xoodyakround3 16.31 16.33 16.34 ascon128bi32v12 17.71 17.75 17.79 T:schwaemm256128v2 23.23 23.25 23.37 T:schwaemm256256v2 23.26 23.32 23.37 T:schwaemm192192v2 26.06 26.13 26.19 T:schwaemm128128v2 26.97 26.99 27.01 T:grain128aeadv2 34.32 34.34 34.36 T:isapa128av20 35.14 35.15 35.15 T:isapa128v20 35.67 35.74 35.80 romulusn 40.65 40.67 40.68 T:giftcofb128v1 56.12 56.13 56.14 T:tinyjambu128v2 58.06 58.08 58.13 romulusm 66.03 66.03 66.03 T:tinyjambu192v2 68.20 68.24 68.28 T:isapk128av20 70.70 70.70 70.70 T:tinyjambu256v2 88.53 88.60 88.68 T:isapk128v20 117.81 118.64 118.84 romulust 148.68 151.46 153.57 T:isapxv20 156.25 156.38 156.45 T:elephant200v2 6477.02 6490.60 6525.90 T:elephant176v2 7282.52 7288.37 7301.30 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.69 1.69 1.70 T:aes128gcmv1 1.74 1.75 1.75 aes256gcmv1 6.05 6.06 6.06 ascon128av12 8.94 8.94 8.95 ascon80pqv12 8.95 8.97 8.98 ascon128v12 11.19 11.23 11.26 ascon128abi32v12 15.06 15.21 15.27 T:xoodyakround3 16.13 16.16 16.30 ascon128bi32v12 17.73 17.77 17.83 T:schwaemm256128v2 23.23 23.25 23.40 T:schwaemm256256v2 23.30 23.37 23.41 T:schwaemm192192v2 26.12 26.13 26.21 T:schwaemm128128v2 27.36 27.37 27.41 T:grain128aeadv2 34.32 34.34 34.37 T:isapa128av20 35.34 35.36 35.37 T:isapa128v20 35.81 35.84 35.87 romulusn 40.41 40.44 40.49 T:giftcofb128v1 56.05 56.08 56.11 T:tinyjambu128v2 58.18 58.24 58.30 romulusm 65.93 65.93 65.93 T:tinyjambu192v2 68.19 68.24 68.26 T:isapk128av20 70.55 70.55 70.55 T:tinyjambu256v2 88.39 88.52 88.67 T:isapk128v20 118.78 118.79 118.82 romulust 148.75 150.40 152.84 T:isapxv20 156.26 156.42 156.46 T:elephant200v2 6477.44 6489.34 6522.72 T:elephant176v2 7282.20 7288.54 7301.78 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.69 1.69 1.70 T:aes128gcmv1 1.74 1.74 1.75 aes256gcmv1 6.05 6.06 6.06 ascon128av12 8.94 8.94 8.94 ascon80pqv12 8.96 8.97 8.98 ascon128v12 11.21 11.25 11.27 ascon128abi32v12 15.12 15.20 15.31 T:xoodyakround3 16.14 16.17 16.29 ascon128bi32v12 17.53 17.53 17.67 T:isapa128v20 17.71 17.74 17.81 T:schwaemm256128v2 22.84 22.86 22.88 T:isapa128av20 23.24 23.25 23.39 T:schwaemm256256v2 23.28 23.30 23.33 T:schwaemm192192v2 26.12 26.15 26.23 T:schwaemm128128v2 27.36 27.37 27.38 T:grain128aeadv2 35.77 35.81 35.87 romulusn 39.78 39.81 39.83 romulust 40.40 40.45 40.50 T:giftcofb128v1 44.97 45.00 45.03 T:isapk128av20 56.01 56.04 56.16 T:tinyjambu128v2 56.10 56.14 56.18 T:isapk128v20 58.13 58.24 58.42 romulusm 65.93 65.93 65.93 T:tinyjambu192v2 70.64 70.64 70.65 T:tinyjambu256v2 86.73 87.64 88.60 T:isapxv20 156.30 156.37 156.45 T:elephant200v2 6477.86 6489.88 6527.70 T:elephant176v2 7281.87 7288.38 7301.30 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.02 1.02 1.03 T:aes128gcmv1 1.14 1.14 1.15 aes256gcmv1 6.00 6.01 6.02 ascon128av12 8.97 8.98 8.98 ascon80pqv12 8.99 9.00 9.00 ascon128v12 10.97 10.98 10.99 ascon128abi32v12 11.76 11.89 11.93 T:xoodyakround3 16.16 16.28 16.29 ascon128bi32v12 17.61 17.64 17.67 T:schwaemm256128v2 23.13 23.14 23.28 T:schwaemm256256v2 23.25 23.29 23.31 T:schwaemm192192v2 26.06 26.10 26.14 T:schwaemm128128v2 26.35 26.35 26.43 T:isapa128v20 27.02 27.10 27.13 T:grain128aeadv2 28.74 28.75 28.76 T:isapa128av20 28.96 28.99 29.01 romulusn 40.14 40.18 40.19 romulusm 40.53 40.55 40.58 T:giftcofb128v1 44.55 44.56 44.58 T:tinyjambu128v2 51.44 51.45 51.46 T:tinyjambu192v2 52.94 52.95 52.97 T:tinyjambu256v2 56.63 56.65 56.67 T:isapk128av20 72.31 72.41 72.46 T:isapk128v20 79.13 79.28 79.31 romulust 117.54 117.64 117.68 T:elephant200v2 118.15 119.84 120.94 T:isapxv20 4839.09 4845.40 4876.91 T:elephant176v2 5461.85 5465.66 5476.79 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.10 1.10 1.10 T:aes128gcmv1 1.14 1.14 1.14 aes256gcmv1 6.01 6.02 6.03 ascon128av12 8.81 8.87 8.87 ascon80pqv12 8.92 8.92 8.92 ascon128v12 11.08 11.08 11.08 ascon128abi32v12 11.78 11.81 11.84 T:xoodyakround3 16.21 16.23 16.30 ascon128bi32v12 17.63 17.69 17.73 T:schwaemm256128v2 23.12 23.14 23.27 T:schwaemm256256v2 23.24 23.28 23.30 T:schwaemm192192v2 26.03 26.07 26.11 T:schwaemm128128v2 26.36 26.38 26.38 T:isapa128v20 27.12 27.14 27.17 T:grain128aeadv2 28.72 28.74 28.74 T:isapa128av20 28.99 29.04 29.06 romulusn 40.07 40.15 40.19 romulusm 40.41 40.44 40.46 T:giftcofb128v1 44.52 44.55 44.55 T:tinyjambu128v2 51.28 51.28 51.28 T:tinyjambu192v2 52.99 52.99 53.00 T:tinyjambu256v2 56.63 56.65 56.66 T:isapk128av20 72.35 72.40 72.48 T:isapk128v20 79.30 79.33 79.35 romulust 117.51 117.60 117.73 T:elephant200v2 118.38 120.07 120.71 T:isapxv20 4840.86 4847.51 4878.65 T:elephant176v2 5462.33 5466.02 5477.01 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.10 1.10 1.10 T:aes128gcmv1 1.13 1.14 1.14 aes256gcmv1 6.00 6.02 6.02 ascon128av12 8.85 8.86 8.91 ascon128v12 8.81 8.87 8.88 ascon80pqv12 11.08 11.08 11.08 ascon128abi32v12 11.80 11.83 11.84 T:xoodyakround3 16.22 16.23 16.33 ascon128bi32v12 17.55 17.55 17.57 T:isapa128v20 17.63 17.66 17.69 T:schwaemm256128v2 22.98 22.99 23.00 T:isapa128av20 23.13 23.15 23.27 T:schwaemm256256v2 23.24 23.27 23.30 T:schwaemm192192v2 26.06 26.09 26.13 T:schwaemm128128v2 27.15 27.21 27.25 T:grain128aeadv2 28.97 29.01 29.02 romulusn 39.78 39.80 39.83 romulust 40.07 40.15 40.19 romulusm 40.41 40.45 40.47 T:giftcofb128v1 44.54 44.56 44.58 T:tinyjambu128v2 45.04 45.06 45.07 T:isapk128av20 51.31 51.31 51.32 T:tinyjambu192v2 52.99 52.99 52.99 T:tinyjambu256v2 56.15 56.19 56.24 T:isapk128v20 87.19 88.31 88.75 T:isapxv20 117.51 117.56 117.64 T:elephant200v2 4841.00 4847.35 4877.24 T:elephant176v2 5461.56 5465.89 5476.75 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.51 0.52 0.53 T:aes128gcmv1 0.53 0.53 0.55 aes256gcmv1 5.97 5.98 5.99 ascon128av12 8.41 8.43 8.50 T:xoodyakround3 8.88 8.89 8.89 ascon80pqv12 8.97 8.98 8.98 ascon128v12 10.82 10.82 10.82 ascon128abi32v12 16.27 16.28 16.29 ascon128bi32v12 17.51 17.54 17.57 T:schwaemm256128v2 17.58 17.58 17.59 T:isapa128v20 22.21 22.24 22.26 romulusn 22.21 22.24 22.27 romulusm 23.02 23.04 23.16 T:schwaemm256256v2 23.11 23.12 23.15 T:isapa128av20 23.21 23.26 23.33 T:schwaemm192192v2 25.92 25.99 26.05 T:schwaemm128128v2 27.07 27.20 27.22 T:grain128aeadv2 33.00 33.00 33.00 T:tinyjambu128v2 35.27 35.28 35.28 T:tinyjambu256v2 36.85 36.85 36.87 T:tinyjambu192v2 39.77 39.77 39.81 romulust 40.38 40.43 40.51 T:giftcofb128v1 45.10 45.10 45.14 T:isapk128av20 56.09 56.13 56.19 T:isapk128v20 78.99 79.03 79.07 T:elephant200v2 87.97 89.20 89.66 T:isapxv20 3191.54 3200.95 3218.47 T:elephant176v2 3634.01 3638.83 3643.81 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.52 0.52 0.54 T:aes128gcmv1 0.53 0.53 0.54 aes256gcmv1 5.96 5.98 5.98 ascon128av12 8.41 8.44 8.49 T:xoodyakround3 8.81 8.83 8.83 ascon128v12 8.83 8.85 8.86 ascon80pqv12 10.82 10.84 10.91 ascon128abi32v12 16.08 16.18 16.31 ascon128bi32v12 17.48 17.54 17.56 T:schwaemm256128v2 17.57 17.58 17.61 T:isapa128v20 22.25 22.26 22.28 romulusn 22.20 22.31 22.41 romulusm 23.00 23.03 23.16 T:schwaemm256256v2 23.10 23.12 23.14 T:isapa128av20 23.22 23.24 23.31 T:schwaemm192192v2 25.93 26.00 26.05 T:schwaemm128128v2 26.92 27.00 27.05 T:grain128aeadv2 32.97 32.97 32.98 T:tinyjambu128v2 35.36 35.36 35.36 T:tinyjambu256v2 36.75 36.75 36.75 T:tinyjambu192v2 39.74 39.76 39.80 romulust 40.40 40.45 40.50 T:giftcofb128v1 45.07 45.11 45.14 T:isapk128av20 55.98 56.01 56.08 T:isapk128v20 78.98 79.03 79.07 T:elephant200v2 86.05 87.81 88.66 T:isapxv20 3189.93 3200.51 3218.81 T:elephant176v2 3635.75 3640.26 3643.87 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.52 0.52 0.53 T:aes128gcmv1 0.53 0.54 0.54 aes256gcmv1 5.96 5.98 5.98 ascon128av12 8.40 8.44 8.49 T:xoodyakround3 8.66 8.67 8.73 ascon128v12 8.83 8.84 8.86 ascon80pqv12 10.91 10.91 10.91 ascon128abi32v12 16.10 16.22 16.34 ascon128bi32v12 17.51 17.54 17.57 T:schwaemm256128v2 17.56 17.58 17.61 T:isapa128v20 22.19 22.23 22.27 romulusm 22.25 22.26 22.28 romulusn 23.01 23.04 23.17 T:schwaemm256256v2 23.10 23.12 23.15 T:isapa128av20 23.20 23.25 23.32 T:schwaemm192192v2 25.91 25.94 26.03 T:schwaemm128128v2 26.90 26.94 27.03 T:grain128aeadv2 33.02 33.03 33.03 T:tinyjambu128v2 35.36 35.36 35.36 T:tinyjambu256v2 36.82 36.82 36.82 T:tinyjambu192v2 39.75 39.80 39.82 romulust 40.41 40.44 40.48 T:giftcofb128v1 45.08 45.09 45.11 T:isapk128av20 56.01 56.11 56.26 T:isapk128v20 79.02 79.04 79.08 T:elephant200v2 87.21 87.77 88.67 T:isapxv20 3190.80 3200.23 3216.83 T:elephant176v2 3635.35 3639.99 3643.67 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.14 1.14 1.15 T:aes128gcmv1 1.27 1.27 1.28 aes256gcmv1 6.17 6.17 6.18 ascon128av12 9.13 9.13 9.13 ascon80pqv12 9.14 9.14 9.15 ascon128v12 11.28 11.28 11.28 ascon128abi32v12 11.89 11.98 11.98 T:xoodyakround3 16.61 16.61 16.63 ascon128bi32v12 18.14 18.15 18.19 T:schwaemm256128v2 23.75 23.76 23.89 T:schwaemm256256v2 23.78 23.81 23.83 T:schwaemm192192v2 26.39 26.43 26.46 T:schwaemm128128v2 27.36 27.43 27.44 T:grain128aeadv2 29.21 29.23 29.24 romulusn 31.11 31.11 31.12 T:isapa128av20 38.73 38.73 38.75 T:isapa128v20 40.45 40.47 40.50 romulusm 40.90 40.94 40.97 T:giftcofb128v1 44.93 44.93 44.93 T:tinyjambu128v2 51.82 51.82 51.85 T:tinyjambu192v2 53.38 53.38 53.40 T:tinyjambu256v2 62.81 62.82 62.84 T:isapk128av20 80.35 80.47 80.52 romulust 120.09 120.10 120.11 T:elephant200v2 123.15 123.20 123.26 T:isapk128v20 193.06 193.51 194.66 T:isapxv20 4877.33 4883.79 4909.46 T:elephant176v2 5522.74 5526.46 5535.10 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.22 1.22 1.23 T:aes128gcmv1 1.27 1.27 1.28 aes256gcmv1 6.14 6.17 6.18 ascon128av12 9.03 9.06 9.06 ascon80pqv12 9.07 9.07 9.07 ascon128v12 11.39 11.39 11.39 ascon128abi32v12 11.90 11.94 11.95 T:xoodyakround3 16.54 16.64 16.72 ascon128bi32v12 18.17 18.19 18.21 T:schwaemm256128v2 23.76 23.77 23.88 T:schwaemm256256v2 23.81 23.84 23.90 T:schwaemm192192v2 26.43 26.46 26.58 T:schwaemm128128v2 27.49 27.52 27.55 T:grain128aeadv2 29.27 29.28 29.28 romulusn 31.08 31.09 31.10 T:isapa128av20 38.79 38.80 38.80 T:isapa128v20 40.49 40.53 40.54 romulusm 40.79 40.81 40.84 T:giftcofb128v1 44.90 44.91 44.92 T:tinyjambu128v2 51.68 51.72 51.72 T:tinyjambu192v2 53.43 53.44 53.44 T:tinyjambu256v2 62.84 62.86 62.88 T:isapk128av20 80.50 80.51 80.52 romulust 120.02 120.07 120.09 T:elephant200v2 123.17 123.21 123.25 T:isapk128v20 193.36 193.89 195.11 T:isapxv20 4876.82 4882.65 4909.30 T:elephant176v2 5523.03 5526.88 5535.89 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.22 1.22 1.23 T:aes128gcmv1 1.27 1.27 1.28 aes256gcmv1 6.15 6.16 6.17 ascon128av12 9.03 9.03 9.06 ascon128v12 9.03 9.06 9.06 ascon80pqv12 11.38 11.38 11.38 ascon128abi32v12 11.90 11.96 11.97 T:xoodyakround3 16.54 16.63 16.69 ascon128bi32v12 18.14 18.16 18.19 T:schwaemm256128v2 23.75 23.77 23.90 T:schwaemm256256v2 23.79 23.83 23.89 T:schwaemm192192v2 23.85 23.85 23.87 T:isapa128v20 24.31 24.31 24.33 T:isapa128av20 26.41 26.45 26.52 T:schwaemm128128v2 27.50 27.54 27.56 T:grain128aeadv2 29.25 29.26 29.28 romulusn 40.48 40.51 40.52 romulusm 40.81 40.83 40.86 T:giftcofb128v1 40.93 40.94 40.97 romulust 44.91 44.92 44.92 T:tinyjambu128v2 48.66 48.66 48.67 T:isapk128av20 51.79 51.79 51.79 T:tinyjambu192v2 53.36 53.36 53.36 T:tinyjambu256v2 81.85 81.90 81.92 T:isapk128v20 120.06 120.09 120.10 T:elephant200v2 126.56 126.89 126.99 T:isapxv20 4877.61 4883.57 4909.86 T:elephant176v2 5522.63 5526.42 5535.72 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.94 6.02 6.06 T:aes128gcmv1 6.07 6.26 6.27 aes256gcmv1 9.62 9.64 9.84 ascon128av12 12.25 12.25 12.36 ascon128v12 12.27 12.27 12.32 ascon80pqv12 17.26 17.31 17.41 T:xoodyakround3 18.04 18.04 18.22 ascon128abi32v12 27.11 27.15 27.20 ascon128bi32v12 29.42 29.42 29.91 T:schwaemm256128v2 33.71 34.07 34.47 T:schwaemm128128v2 34.71 34.79 35.08 T:grain128aeadv2 34.95 35.07 35.23 romulusn 37.91 37.93 38.15 T:schwaemm256256v2 38.29 38.45 38.81 T:schwaemm192192v2 47.01 47.09 47.18 romulusm 49.22 49.45 49.68 T:giftcofb128v1 52.54 52.73 53.00 T:tinyjambu128v2 60.83 60.83 61.04 T:tinyjambu192v2 62.34 62.34 62.59 T:tinyjambu256v2 84.83 84.87 85.42 T:isapa128av20 107.71 107.78 107.88 romulust 169.85 170.21 170.75 T:elephant200v2 193.24 193.37 193.55 T:isapk128av20 322.96 322.96 322.96 T:isapa128v20 1277.34 1277.88 1279.31 T:isapk128v20 1858.03 1869.20 1886.87 T:isapxv20 6057.88 6062.35 6096.67 T:elephant176v2 7386.63 7389.51 7399.65 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.77 5.82 5.87 aes256gcmv1 5.76 5.85 5.85 T:aes128gcmv1 9.57 9.58 9.99 ascon128av12 12.30 12.30 12.49 ascon128v12 12.25 12.33 12.60 ascon80pqv12 17.42 17.51 17.74 T:xoodyakround3 18.16 18.16 18.38 ascon128abi32v12 25.36 25.45 25.64 ascon128bi32v12 29.70 29.79 29.93 T:schwaemm256128v2 34.04 34.13 34.31 T:schwaemm128128v2 34.91 35.07 35.25 romulusn 35.30 35.42 35.63 T:grain128aeadv2 37.82 38.00 38.27 T:schwaemm256256v2 38.31 38.34 38.47 T:schwaemm192192v2 48.35 48.57 48.80 romulusm 49.43 49.64 49.81 T:giftcofb128v1 52.78 52.93 53.01 T:tinyjambu128v2 61.01 61.01 61.12 T:tinyjambu192v2 62.32 62.32 62.51 T:tinyjambu256v2 84.73 84.82 85.05 T:isapa128av20 107.56 108.08 108.42 romulust 169.90 170.26 170.44 T:elephant200v2 193.29 193.47 193.84 T:isapk128av20 324.16 324.28 324.40 T:isapa128v20 1277.72 1278.81 1279.37 T:isapk128v20 1861.92 1866.18 1881.88 T:isapxv20 6056.15 6063.73 6099.36 T:elephant176v2 7385.28 7390.37 7399.51 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.73 5.73 5.74 T:aes128gcmv1 5.86 5.87 5.88 aes256gcmv1 9.55 9.58 9.65 ascon128av12 12.15 12.15 12.32 ascon128v12 12.25 12.35 12.55 ascon80pqv12 17.33 17.38 17.69 T:xoodyakround3 18.21 18.21 18.26 ascon128abi32v12 25.36 25.39 25.51 ascon128bi32v12 29.65 29.78 29.93 T:schwaemm256128v2 33.91 33.94 34.06 T:schwaemm128128v2 35.00 35.01 35.04 romulusn 35.31 35.54 35.57 T:grain128aeadv2 37.86 38.00 38.23 T:schwaemm256256v2 38.37 38.46 38.63 T:schwaemm192192v2 48.47 48.59 48.78 romulusm 49.62 49.83 50.07 T:giftcofb128v1 52.66 52.76 52.97 T:tinyjambu128v2 54.39 54.52 54.68 T:isapa128av20 61.25 61.25 61.25 T:tinyjambu192v2 62.29 62.29 62.31 T:tinyjambu256v2 67.54 67.55 67.80 romulust 122.29 122.32 122.60 T:isapk128av20 168.71 168.71 168.99 T:isapa128v20 169.83 170.15 170.37 T:elephant200v2 661.17 662.14 662.42 T:isapk128v20 972.39 976.78 979.55 T:isapxv20 6057.29 6062.13 6097.15 T:elephant176v2 7385.06 7388.23 7400.84 T:elephant160v2