VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, E cores; 8 x 700MHz; meteor,little, supercop-20261018

[Page version: 20261107 07:59:40]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.91 0.92 0.93 T:aes128gcmv1 1.07 1.07 1.08 aes256gcmv1 6.20 6.21 6.23 ascon128av12 9.23 9.26 9.27 ascon128v12 9.27 9.28 9.29 ascon80pqv12 11.49 11.51 11.53 ascon128abi32v12 13.90 14.07 14.15 T:xoodyakround3 16.43 16.45 16.46 T:schwaemm256128v2 16.47 16.49 16.50 ascon128bi32v12 21.68 21.72 21.74 T:schwaemm192192v2 23.32 23.56 23.72 T:schwaemm128128v2 23.44 23.63 23.91 T:schwaemm256256v2 24.86 24.94 25.00 T:grain128aeadv2 31.89 31.94 32.00 T:giftcofb128v1 35.68 35.75 35.81 T:isapa128v20 35.93 35.97 36.03 T:isapa128av20 36.88 36.90 36.92 romulusn 53.68 53.72 53.76 T:tinyjambu128v2 58.32 58.51 58.74 T:isapk128av20 58.94 59.02 59.13 romulusm 69.13 69.17 69.21 T:tinyjambu256v2 71.99 72.02 72.07 T:tinyjambu192v2 76.98 77.51 77.88 T:isapk128v20 123.32 123.52 123.61 romulust 158.16? 160.95? 181.69? T:isapxv20 169.79 171.33 171.73 T:elephant200v2 6107.60 6121.04 6126.26 T:elephant176v2 7212.64 7215.72 7216.84 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.94 0.96 0.96 T:aes128gcmv1 1.15 1.16 1.18 aes256gcmv1 6.17 6.19 6.21 ascon128av12 9.20 9.22 9.23 ascon128v12 9.21 9.24 9.27 ascon80pqv12 11.36 11.40 11.44 ascon128abi32v12 13.83 14.01 14.70 T:xoodyakround3 16.43 16.45 16.46 T:schwaemm256128v2 16.53 16.64 16.88 ascon128bi32v12 21.69 21.72 21.75 T:schwaemm192192v2 23.41 23.63 23.88 T:schwaemm256256v2 23.37 23.72 23.81 T:schwaemm128128v2 25.28 25.31 25.36 T:grain128aeadv2 31.87 32.01 32.39 T:giftcofb128v1 35.71 35.75 35.82 T:isapa128v20 35.95 35.99 36.04 T:isapa128av20 36.52 36.54 36.71 romulusn 53.76 53.80 53.85 T:tinyjambu128v2 58.35 58.52 58.68 T:isapk128av20 59.08 59.17 59.35 romulusm 69.19 69.23 69.26 T:tinyjambu256v2 71.97 72.01 72.07 T:tinyjambu192v2 76.99 77.35 77.77 T:isapk128v20 123.29 123.39 123.62 romulust 155.82? 161.00? 190.04? T:isapxv20 169.53 170.92 171.44 T:elephant200v2 6115.69 6123.08 6127.63 T:elephant176v2 7212.87 7216.00 7217.37 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.95 0.96 0.97 T:aes128gcmv1 1.16 1.16 1.17 aes256gcmv1 6.17 6.19 6.21 ascon128av12 9.21 9.22 9.23 ascon128v12 9.21 9.23 9.26 ascon80pqv12 11.36 11.41 11.44 ascon128abi32v12 13.86 14.08 14.75 T:xoodyakround3 16.43 16.45 16.46 T:schwaemm256128v2 16.51 16.59 16.85 ascon128bi32v12 17.73 17.78 17.81 T:isapa128v20 21.69 21.73 21.75 T:schwaemm192192v2 23.46 23.67 23.86 T:schwaemm256256v2 23.38 23.72 23.81 T:schwaemm128128v2 24.20 24.24 24.29 T:isapa128av20 25.20 25.24 25.29 T:grain128aeadv2 31.97 32.12 32.38 T:giftcofb128v1 36.52 36.54 36.72 romulusn 39.06 39.17 39.31 T:isapk128av20 41.89 41.93 42.04 romulust 48.34 48.75 49.04 T:isapk128v20 53.77 53.80 53.84 T:tinyjambu128v2 59.05 59.18 59.36 romulusm 69.18 69.22 69.25 T:tinyjambu256v2 71.98 72.02 72.07 T:tinyjambu192v2 94.22 95.49 97.02 T:isapxv20 169.46 171.14 171.47 T:elephant200v2 6121.24 6126.60 6132.32 T:elephant176v2 7210.28 7211.86 7215.73 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.67 0.68 0.69 T:aes128gcmv1 0.75 0.75 0.76 aes256gcmv1 6.18 6.19 6.20 ascon128av12 9.18 9.20 9.23 ascon128v12 9.20 9.22 9.24 ascon80pqv12 10.69 10.74 10.78 T:xoodyakround3 11.31 11.33 11.35 ascon128abi32v12 16.24 16.37 16.39 T:schwaemm256128v2 16.53 16.54 16.56 ascon128bi32v12 21.60 21.68 21.70 T:schwaemm192192v2 23.35 23.44 23.58 T:schwaemm128128v2 23.63 23.73 23.77 T:schwaemm256256v2 24.81 24.84 24.89 T:grain128aeadv2 26.82 26.85 26.90 T:isapa128v20 29.65 29.68 29.70 romulusn 30.08 30.11 30.16 T:isapa128av20 31.91 32.00 32.03 T:giftcofb128v1 40.48 40.58 40.66 romulusm 43.83 43.86 43.89 T:tinyjambu128v2 48.81 48.87 48.97 T:isapk128av20 52.29 52.32 52.34 T:tinyjambu256v2 55.95 55.97 56.00 T:tinyjambu192v2 63.18 63.36 63.53 T:isapk128v20 82.62 82.70 82.79 romulust 125.59 126.34 127.40 T:elephant200v2 125.74 127.53 137.98 T:isapxv20 4571.17 4573.79 4576.18 T:elephant176v2 5407.83 5408.47 5416.50 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.69 0.70 0.71 T:aes128gcmv1 0.79 0.80 0.81 aes256gcmv1 6.16 6.17 6.18 ascon128av12 9.18 9.19 9.21 ascon128v12 9.20 9.23 9.27 ascon80pqv12 10.58 10.72 11.02 T:xoodyakround3 11.24 11.28 11.29 ascon128abi32v12 16.22 16.36 16.38 T:schwaemm256128v2 16.46 16.49 16.56 ascon128bi32v12 21.59 21.68 21.70 T:schwaemm192192v2 23.35 23.43 23.59 T:schwaemm128128v2 23.66 23.71 23.78 T:schwaemm256256v2 25.02 25.05 25.10 T:grain128aeadv2 26.80 26.85 26.91 T:isapa128v20 29.44 29.46 29.50 romulusn 30.11 30.14 30.16 T:isapa128av20 31.96 32.01 32.18 T:giftcofb128v1 40.68 40.75 40.87 romulusm 43.87 43.89 43.92 T:tinyjambu128v2 48.80 48.87 48.94 T:isapk128av20 52.33 52.36 52.38 T:tinyjambu256v2 55.96 55.98 56.01 T:tinyjambu192v2 63.13 63.32 63.53 T:isapk128v20 82.64 82.70 82.83 romulust 125.45 126.14 127.38 T:elephant200v2 125.07? 128.13? 141.88? T:isapxv20 4571.53 4574.92 4577.30 T:elephant176v2 5408.09 5409.86 5418.41 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.69 0.70 0.70 T:aes128gcmv1 0.79 0.80 0.80 aes256gcmv1 6.16 6.18 6.19 ascon128av12 9.18 9.19 9.20 ascon128v12 9.20 9.24 9.28 ascon80pqv12 10.64 10.75 11.00 T:xoodyakround3 11.24 11.28 11.30 ascon128abi32v12 16.21 16.36 16.38 T:schwaemm256128v2 16.46 16.48 16.52 ascon128bi32v12 17.85 17.88 17.92 T:isapa128v20 21.60 21.69 21.70 T:schwaemm192192v2 23.35 23.44 23.59 T:schwaemm128128v2 23.63 23.76 23.81 T:schwaemm256256v2 24.20 24.23 24.25 T:isapa128av20 25.01 25.04 25.07 T:grain128aeadv2 29.46 29.48 29.50 romulusn 31.92 32.00 32.19 T:giftcofb128v1 39.07 39.16 39.32 T:isapk128av20 40.66 40.75 40.85 romulusm 41.90 41.94 41.99 romulust 43.87 43.89 43.92 T:tinyjambu128v2 48.64 48.82 49.04 T:isapk128v20 52.34 52.36 52.38 T:tinyjambu256v2 55.94 55.98 56.01 T:tinyjambu192v2 93.88 94.67 95.84 T:isapxv20 126.08 126.73 127.36 T:elephant200v2 4571.50 4574.41 4576.66 T:elephant176v2 5402.77 5408.29 5416.02 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.43 0.43 0.44 aes256gcmv1 0.43 0.44 0.44 T:aes128gcmv1 6.15 6.17 6.18 ascon128av12 7.29 7.37 7.43 T:xoodyakround3 9.15 9.18 9.21 ascon128v12 9.16 9.19 9.21 ascon80pqv12 11.12 11.15 11.17 ascon128abi32v12 16.29 16.30 16.31 T:schwaemm256128v2 16.59 16.62 16.63 ascon128bi32v12 17.96 18.03 18.07 T:isapa128v20 21.45 21.48 21.52 T:schwaemm192192v2 22.19 22.23 22.34 romulusm 22.38 22.40 22.47 romulusn 23.40 23.66 23.74 T:schwaemm256256v2 23.64 23.67 23.70 T:schwaemm128128v2 24.20 24.23 24.26 T:isapa128av20 24.82 24.85 24.88 T:grain128aeadv2 31.75 31.78 31.82 T:giftcofb128v1 33.97 33.99 34.01 T:tinyjambu128v2 35.44 35.48 35.51 T:tinyjambu256v2 38.94 39.18 39.33 T:isapk128av20 39.89 39.93 39.96 T:tinyjambu192v2 41.84 41.89 41.93 romulust 48.77 48.93 49.10 T:isapk128v20 83.74 84.91 85.45 T:elephant200v2 93.20 94.26 95.22 T:isapxv20 3021.14 3022.05 3022.80 T:elephant176v2 3605.36 3607.47 3608.78 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.43 0.43 0.44 aes256gcmv1 0.43 0.44 0.45 T:aes128gcmv1 6.15 6.16 6.18 ascon128av12 7.31 7.39 7.42 T:xoodyakround3 9.13 9.17 9.30 ascon80pqv12 9.19 9.22 9.22 ascon128v12 11.12 11.14 11.17 ascon128abi32v12 16.30 16.30 16.33 T:schwaemm256128v2 16.45 16.48 16.59 ascon128bi32v12 17.97 18.03 18.08 T:isapa128v20 21.46 21.51 21.53 T:schwaemm192192v2 22.20 22.25 22.33 romulusm 22.37 22.40 22.43 romulusn 23.41 23.57 23.72 T:schwaemm256256v2 23.65 23.67 23.71 T:schwaemm128128v2 24.20 24.24 24.28 T:isapa128av20 24.80 24.84 24.87 T:grain128aeadv2 31.76 31.80 31.86 T:giftcofb128v1 33.97 34.00 34.02 T:tinyjambu128v2 35.45 35.48 35.50 T:tinyjambu256v2 38.96 39.15 39.26 T:isapk128av20 39.90 39.93 39.96 T:tinyjambu192v2 41.87 41.90 41.95 romulust 48.76 48.91 49.03 T:isapk128v20 84.61 85.43 85.88 T:elephant200v2 93.36 94.67 95.74 T:isapxv20 3020.87 3021.71 3022.50 T:elephant176v2 3605.28 3607.28 3609.05 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.42 0.43 0.44 aes256gcmv1 0.43 0.43 0.44 T:aes128gcmv1 6.15 6.17 6.19 ascon128av12 7.27 7.33 7.40 T:xoodyakround3 9.13 9.19 9.32 ascon80pqv12 9.21 9.22 9.23 ascon128v12 11.12 11.14 11.17 ascon128abi32v12 16.29 16.30 16.32 T:schwaemm256128v2 16.45 16.49 16.59 ascon128bi32v12 17.98 18.03 18.10 T:isapa128v20 21.48 21.52 21.53 T:schwaemm192192v2 22.19 22.25 22.36 romulusm 22.38 22.41 22.44 romulusn 23.51 23.57 23.74 T:schwaemm256256v2 23.65 23.68 23.71 T:schwaemm128128v2 24.17 24.22 24.27 T:isapa128av20 24.80 24.82 24.85 T:grain128aeadv2 31.77 31.82 31.93 T:giftcofb128v1 33.97 34.00 34.02 T:tinyjambu128v2 35.45 35.47 35.50 T:tinyjambu256v2 38.99 39.12 39.26 T:isapk128av20 39.89 39.93 39.96 T:tinyjambu192v2 41.84 41.91 41.97 romulust 48.67 48.89 49.06 T:isapk128v20 84.56 85.04 85.62 T:elephant200v2 93.53 94.75 96.05 T:isapxv20 3021.22 3022.14 3022.85 T:elephant176v2 3605.27 3607.02 3608.52 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.76 0.77 0.77 T:aes128gcmv1 0.85 0.86 0.86 aes256gcmv1 6.31 6.32 6.33 ascon128av12 9.31 9.33 9.36 ascon128v12 9.34 9.36 9.38 ascon80pqv12 10.69 10.76 10.80 T:xoodyakround3 11.63 11.64 11.66 ascon128abi32v12 16.82 16.83 16.83 ascon128bi32v12 16.74 16.84 16.86 T:schwaemm256128v2 22.10 22.11 22.17 T:schwaemm192192v2 23.77 23.89 23.93 T:schwaemm128128v2 24.34 24.47 24.50 T:schwaemm256256v2 25.12 25.15 25.20 T:grain128aeadv2 29.90 29.92 29.94 romulusn 32.06 32.10 32.13 T:isapa128av20 32.11 32.14 32.17 T:giftcofb128v1 39.16 39.20 39.24 T:isapa128v20 40.74 40.83 40.90 romulusm 44.18 44.19 44.22 T:tinyjambu128v2 52.69 52.71 52.73 T:tinyjambu256v2 56.01 56.06 56.12 T:isapk128av20 56.36 56.40 56.42 T:tinyjambu192v2 83.85 83.93 84.00 romulust 110.69 110.74 110.84 T:isapk128v20 128.91 129.36 130.31 T:elephant200v2 209.76 210.94 219.71 T:isapxv20 4601.87 4603.48 4608.67 T:elephant176v2 5472.98 5476.49 5477.68 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.78 0.79 0.80 T:aes128gcmv1 0.90 0.90 0.91 aes256gcmv1 6.30 6.31 6.32 ascon128av12 9.32 9.32 9.33 ascon128v12 9.34 9.36 9.39 ascon80pqv12 10.78 10.88 11.08 T:xoodyakround3 11.54 11.57 11.59 ascon128abi32v12 16.75 16.76 16.81 ascon128bi32v12 16.75 16.85 16.86 T:schwaemm256128v2 22.09 22.11 22.17 T:schwaemm192192v2 23.67 23.89 23.92 T:schwaemm128128v2 24.40 24.47 24.49 T:schwaemm256256v2 25.30 25.33 25.35 T:grain128aeadv2 29.72 29.75 29.77 romulusn 32.09 32.12 32.15 T:isapa128av20 32.15 32.21 32.25 T:giftcofb128v1 39.17 39.21 39.26 T:isapa128v20 41.02 41.07 41.16 romulusm 44.20 44.23 44.25 T:tinyjambu128v2 52.73 52.75 52.77 T:tinyjambu256v2 56.01 56.04 56.09 T:isapk128av20 56.37 56.40 56.42 T:tinyjambu192v2 83.80 83.88 83.97 romulust 110.72 110.75 110.85 T:isapk128v20 128.93 129.27 130.11 T:elephant200v2 209.16 210.88 223.61 T:isapxv20 4601.75 4603.32 4608.78 T:elephant176v2 5471.55 5475.18 5479.54 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.79 0.79 0.80 T:aes128gcmv1 0.90 0.90 0.91 aes256gcmv1 6.31 6.32 6.33 ascon128av12 9.32 9.32 9.34 ascon128v12 9.33 9.36 9.40 ascon80pqv12 10.79 10.89 11.07 T:xoodyakround3 11.54 11.56 11.58 ascon128abi32v12 16.75 16.76 16.78 ascon128bi32v12 16.75 16.83 16.85 T:schwaemm256128v2 22.08 22.08 22.10 T:schwaemm192192v2 23.68 23.88 23.91 T:schwaemm128128v2 24.11 24.13 24.16 T:isapa128v20 24.39 24.47 24.50 T:schwaemm256256v2 25.33 25.35 25.37 T:grain128aeadv2 25.36 25.38 25.42 T:isapa128av20 29.72 29.74 29.76 romulusn 32.17 32.19 32.25 T:giftcofb128v1 41.00 41.07 41.19 romulusm 43.07 43.10 43.16 romulust 43.66 43.69 43.73 T:isapk128av20 44.21 44.23 44.26 T:tinyjambu128v2 52.74 52.76 52.79 T:tinyjambu256v2 56.37 56.39 56.42 T:tinyjambu192v2 73.72 73.77 73.85 T:isapk128v20 128.81 129.30 130.25 T:elephant200v2 136.83 137.29 138.18 T:isapxv20 4601.35 4603.00 4609.26 T:elephant176v2 5473.35 5479.35 5480.11 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.31 4.37 4.43 T:aes128gcmv1 4.69 4.77 4.87 aes256gcmv1 9.46 9.52 9.59 ascon128av12 12.22 12.29 12.41 ascon128v12 12.30 12.36 12.49 ascon80pqv12 15.48 15.60 15.74 T:xoodyakround3 18.81 18.89 19.03 ascon128abi32v12 23.08 23.16 23.25 ascon128bi32v12 27.37 27.40 27.46 T:schwaemm256128v2 30.70 30.79 30.93 T:schwaemm128128v2 31.88 32.03 32.16 T:grain128aeadv2 35.32 35.39 35.70 T:schwaemm192192v2 35.49 35.54 35.66 romulusn 38.46 38.56 38.76 T:giftcofb128v1 38.49 38.70 38.98 T:schwaemm256256v2 46.95 47.05 47.24 romulusm 51.51 51.64 51.84 T:tinyjambu128v2 61.26 61.40 61.66 T:tinyjambu256v2 65.81 65.96 66.23 T:tinyjambu192v2 77.09 77.34 77.62 T:isapa128av20 111.55 111.77 111.98 romulust 182.88 183.76 185.08 T:elephant200v2 212.32 212.96 213.56 T:isapk128av20 322.31 322.51 322.80 T:isapa128v20 1189.19 1190.40 1191.36 T:isapk128v20 2080.90 2092.60 2107.90 T:isapxv20 5729.06 5733.65 5735.79 T:elephant176v2 7327.82 7331.88 7334.48 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.28 4.34 4.42 T:aes128gcmv1 4.71 4.77 4.83 aes256gcmv1 9.46 9.53 9.64 ascon128av12 12.21 12.25 12.33 ascon128v12 12.31 12.40 12.49 ascon80pqv12 15.60 15.74 16.07 T:xoodyakround3 18.71 18.83 18.97 ascon128abi32v12 22.95 23.03 23.19 ascon128bi32v12 27.42 27.45 27.49 T:schwaemm256128v2 30.72 30.80 30.98 T:schwaemm128128v2 32.18 32.27 32.40 T:grain128aeadv2 35.37 35.43 35.52 T:schwaemm192192v2 35.47 35.54 35.63 romulusn 38.47 38.60 38.78 T:schwaemm256256v2 38.76 38.88 39.06 T:giftcofb128v1 48.27 48.41 48.59 romulusm 51.60 51.72 52.09 T:tinyjambu128v2 61.35 61.55 61.81 T:tinyjambu256v2 65.90 66.00 66.11 T:tinyjambu192v2 77.15 77.33 77.54 T:isapa128av20 111.75 111.87 111.90 romulust 182.09 182.94 184.93 T:elephant200v2 212.16 213.07 214.05 T:isapk128av20 322.67 323.15 323.73 T:isapa128v20 1188.81 1189.54 1190.86 T:isapk128v20 2066.67 2082.40 2119.44 T:isapxv20 5727.84 5733.60 5735.98 T:elephant176v2 7325.65 7328.53 7333.04 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.26 4.32 4.38 T:aes128gcmv1 4.69 4.73 4.78 aes256gcmv1 9.45 9.51 9.57 ascon128av12 12.19 12.26 12.35 ascon128v12 12.30 12.38 12.47 ascon80pqv12 15.68 15.82 16.00 T:xoodyakround3 18.65 18.71 18.81 ascon128abi32v12 22.93 23.02 23.13 ascon128bi32v12 27.42 27.46 27.49 T:schwaemm256128v2 30.77 30.86 30.97 T:schwaemm128128v2 32.10 32.18 32.35 T:grain128aeadv2 35.36 35.44 35.51 T:schwaemm192192v2 35.49 35.61 35.72 romulusn 38.46 38.61 38.80 T:schwaemm256256v2 38.76 38.88 39.02 T:giftcofb128v1 48.28 48.44 48.57 romulusm 50.92 51.06 51.22 T:isapa128av20 51.60 51.67 51.85 T:tinyjambu128v2 61.32 61.45 61.72 T:tinyjambu256v2 65.85 66.01 66.23 T:tinyjambu192v2 69.97 70.03 70.19 romulust 138.90 140.17 141.50 T:isapk128av20 168.01 168.21 168.59 T:isapa128v20 182.73 183.28 185.03 T:elephant200v2 635.84 637.27 638.32 T:isapk128v20 1087.40 1094.07 1103.08 T:isapxv20 5726.57 5733.45 5736.79 T:elephant176v2 7325.38 7328.32 7333.39 T:elephant160v2