VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, LPE cores; 2 x 700MHz; meteor,tiny, supercop-20261018

[Page version: 20261107 07:59:40]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.90 0.91 0.92 T:aes128gcmv1 1.07 1.07 1.08 aes256gcmv1 6.20 6.22 6.23 ascon128av12 9.19 9.20 9.21 ascon128v12 9.26 9.28 9.29 ascon80pqv12 11.49 11.52 11.54 ascon128abi32v12 13.89 14.01 14.09 T:xoodyakround3 16.31 16.42 16.44 T:schwaemm256128v2 16.46 16.48 16.50 ascon128bi32v12 21.60 21.65 21.70 T:schwaemm192192v2 23.24 23.28 23.53 T:schwaemm128128v2 23.86 23.88 23.91 T:schwaemm256256v2 24.81 24.86 24.91 T:grain128aeadv2 31.70 31.80 31.92 T:giftcofb128v1 35.70 35.78 35.85 T:isapa128v20 35.93 36.00 36.03 T:isapa128av20 36.87 36.91 36.94 romulusn 53.68 53.71 53.75 T:tinyjambu128v2 58.06 58.54 59.01 T:isapk128av20 58.95 59.03 59.12 romulusm 69.13 69.17 69.20 T:tinyjambu256v2 72.93 72.97 73.02 T:tinyjambu192v2 77.32 77.49 77.72 T:isapk128v20 123.34 123.47 123.59 romulust 158.71 159.59 160.17 T:isapxv20 162.69 170.08 172.15 T:elephant200v2 6103.66 6116.77 6127.19 T:elephant176v2 7209.34 7226.09 7230.37 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.94 0.96 0.97 T:aes128gcmv1 1.16 1.17 1.18 aes256gcmv1 6.18 6.19 6.20 ascon128av12 9.20 9.21 9.22 ascon128v12 9.22 9.25 9.27 ascon80pqv12 11.40 11.42 11.45 ascon128abi32v12 13.82 13.97 14.08 T:xoodyakround3 16.32 16.43 16.44 T:schwaemm256128v2 16.54 16.62 16.83 ascon128bi32v12 21.62 21.68 21.71 T:schwaemm192192v2 23.29 23.33 23.51 T:schwaemm128128v2 23.84 23.87 23.93 T:schwaemm256256v2 25.24 25.33 25.38 T:grain128aeadv2 31.85 31.92 31.98 T:giftcofb128v1 35.70 35.78 35.83 T:isapa128v20 35.95 35.98 36.02 T:isapa128av20 36.52 36.55 36.73 romulusn 53.71 53.75 53.81 T:tinyjambu128v2 58.10 58.71 59.14 T:isapk128av20 58.98 59.10 59.18 romulusm 69.18 69.23 69.32 T:tinyjambu256v2 72.98 73.02 73.06 T:tinyjambu192v2 77.27 77.48 77.75 T:isapk128v20 123.44 123.61 123.75 romulust 156.68 159.22 162.64 T:isapxv20 161.81 169.85 171.78 T:elephant200v2 6115.52 6123.28 6130.60 T:elephant176v2 7208.26 7222.26 7231.17 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.95 0.96 0.96 T:aes128gcmv1 1.16 1.17 1.18 aes256gcmv1 6.18 6.20 6.21 ascon128av12 9.20 9.21 9.22 ascon128v12 9.22 9.25 9.27 ascon80pqv12 11.39 11.42 11.43 ascon128abi32v12 13.88 14.02 14.11 T:xoodyakround3 16.34 16.43 16.45 T:schwaemm256128v2 16.50 16.61 16.82 ascon128bi32v12 17.71 17.76 17.82 T:isapa128v20 21.62 21.68 21.70 T:schwaemm192192v2 23.37 23.66 23.72 T:schwaemm128128v2 23.84 23.87 23.88 T:schwaemm256256v2 24.17 24.21 24.24 T:isapa128av20 25.19 25.28 25.34 T:grain128aeadv2 31.84 31.92 31.97 T:giftcofb128v1 36.51 36.54 36.71 romulusn 38.87 39.26 39.50 T:isapk128av20 41.87 41.94 42.04 romulust 48.55 48.69 48.86 T:isapk128v20 53.73 53.76 53.80 T:tinyjambu128v2 58.97 59.14 59.20 romulusm 69.21 69.26 69.31 T:tinyjambu256v2 72.99 73.02 73.05 T:tinyjambu192v2 93.64 94.78 95.88 T:isapxv20 162.50 169.73 171.79 T:elephant200v2 6108.70 6122.78 6128.26 T:elephant176v2 7197.94 7214.98 7228.68 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.67 0.68 0.68 T:aes128gcmv1 0.74 0.75 0.76 aes256gcmv1 6.18 6.19 6.21 ascon128av12 9.20 9.21 9.26 ascon128v12 9.20 9.21 9.23 ascon80pqv12 10.63 10.70 10.76 T:xoodyakround3 11.32 11.33 11.36 ascon128abi32v12 16.33 16.35 16.39 T:schwaemm256128v2 16.54 16.55 16.56 ascon128bi32v12 21.41 21.44 21.64 T:schwaemm192192v2 23.49 23.52 23.63 T:schwaemm128128v2 23.79 23.81 23.84 T:schwaemm256256v2 24.83 24.86 24.90 T:grain128aeadv2 26.83 26.88 26.91 T:isapa128v20 29.65 29.70 29.76 romulusn 30.07 30.13 30.18 T:isapa128av20 31.76 31.84 32.00 T:giftcofb128v1 40.48 40.54 40.62 romulusm 43.84 43.87 43.90 T:tinyjambu128v2 48.58 48.77 48.95 T:isapk128av20 52.29 52.31 52.34 T:tinyjambu256v2 56.73 56.77 56.79 T:tinyjambu192v2 63.10 63.29 63.46 T:isapk128v20 82.67 82.76 82.87 romulust 125.23 126.00 126.69 T:elephant200v2 126.44 126.88 127.28 T:isapxv20 4561.79 4569.29 4582.91 T:elephant176v2 5404.66 5408.47 5414.99 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.69 0.70 0.71 T:aes128gcmv1 0.79 0.80 0.80 aes256gcmv1 6.16 6.17 6.19 ascon128av12 9.18 9.19 9.20 ascon128v12 9.20 9.22 9.24 ascon80pqv12 10.65 10.69 10.74 T:xoodyakround3 11.27 11.28 11.29 ascon128abi32v12 16.32 16.35 16.39 T:schwaemm256128v2 16.51 16.63 16.68 ascon128bi32v12 21.42 21.45 21.55 T:schwaemm192192v2 23.48 23.50 23.59 T:schwaemm128128v2 23.83 23.85 23.86 T:schwaemm256256v2 25.01 25.08 25.11 T:grain128aeadv2 26.83 26.86 26.90 T:isapa128v20 29.47 29.51 29.56 romulusn 30.13 30.16 30.18 T:isapa128av20 31.81 31.90 31.96 T:giftcofb128v1 40.53 40.60 40.72 romulusm 43.86 43.89 43.92 T:tinyjambu128v2 48.62 48.79 48.91 T:isapk128av20 52.32 52.34 52.37 T:tinyjambu256v2 56.74 56.79 56.82 T:tinyjambu192v2 63.08 63.26 63.41 T:isapk128v20 82.70 82.77 82.85 romulust 124.89 126.22 126.65 T:elephant200v2 125.38 126.35 128.26 T:isapxv20 4564.06 4574.39 4579.29 T:elephant176v2 5406.29 5407.64 5413.89 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.69 0.70 0.71 T:aes128gcmv1 0.79 0.80 0.80 aes256gcmv1 6.16 6.17 6.18 ascon128av12 9.16 9.17 9.20 ascon128v12 9.21 9.23 9.24 ascon80pqv12 10.56 10.67 10.77 T:xoodyakround3 11.27 11.29 11.30 ascon128abi32v12 16.33 16.35 16.40 T:schwaemm256128v2 16.50 16.63 16.65 ascon128bi32v12 17.84 17.87 17.90 T:isapa128v20 21.42 21.44 21.53 T:schwaemm192192v2 23.33 23.49 23.55 T:schwaemm128128v2 23.80 23.81 23.85 T:schwaemm256256v2 24.18 24.23 24.28 T:isapa128av20 24.99 25.02 25.05 T:grain128aeadv2 29.46 29.51 29.57 romulusn 31.81 31.91 31.98 T:giftcofb128v1 39.05 39.15 39.27 T:isapk128av20 40.54 40.61 40.72 romulusm 41.94 41.99 42.06 romulust 43.87 43.89 43.92 T:tinyjambu128v2 48.78 48.93 49.04 T:isapk128v20 52.32 52.34 52.37 T:tinyjambu256v2 56.74 56.80 56.82 T:tinyjambu192v2 93.86 94.41 94.99 T:isapxv20 124.70 125.84 126.57 T:elephant200v2 4563.75 4569.50 4586.36 T:elephant176v2 5407.20 5409.58 5415.36 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.42 0.43 0.44 T:aes128gcmv1 0.43 0.43 0.44 aes256gcmv1 6.15 6.16 6.17 ascon128av12 7.28 7.38 7.45 T:xoodyakround3 9.14 9.15 9.20 ascon128v12 9.18 9.20 9.22 ascon80pqv12 11.11 11.14 11.16 ascon128abi32v12 16.30 16.33 16.82 T:schwaemm256128v2 16.59 16.61 16.63 ascon128bi32v12 17.98 18.04 18.08 T:isapa128v20 21.52 21.57 21.64 T:schwaemm192192v2 22.18 22.21 22.24 romulusm 22.37 22.44 22.53 romulusn 23.56 23.64 23.70 T:schwaemm128128v2 23.74 23.76 23.77 T:schwaemm256256v2 24.24 24.25 24.26 T:isapa128av20 24.77 24.81 24.85 T:grain128aeadv2 31.75 31.78 31.81 T:giftcofb128v1 33.98 34.01 34.04 T:tinyjambu128v2 34.47 35.45 35.49 T:tinyjambu256v2 38.74 39.06 39.20 T:isapk128av20 40.52 40.56 41.67 T:tinyjambu192v2 41.87 41.90 41.94 romulust 48.83 49.24 49.46 T:isapk128v20 81.41 83.60 84.04 T:elephant200v2 93.83 94.35 94.74 T:isapxv20 3016.60 3020.09 3022.57 T:elephant176v2 3599.72 3604.45 3609.66 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.42 0.43 0.44 T:aes128gcmv1 0.42 0.43 0.44 aes256gcmv1 6.14 6.17 6.18 ascon128av12 7.31 7.37 7.44 T:xoodyakround3 9.15 9.17 9.18 ascon128v12 9.18 9.19 9.21 ascon80pqv12 11.12 11.15 11.17 ascon128abi32v12 16.29 16.33 16.85 T:schwaemm256128v2 16.43 16.44 16.47 ascon128bi32v12 17.96 18.01 18.07 T:isapa128v20 21.51 21.57 21.64 T:schwaemm192192v2 22.19 22.22 22.25 romulusm 22.37 22.42 22.51 romulusn 23.58 23.63 23.69 T:schwaemm128128v2 23.75 23.76 23.78 T:schwaemm256256v2 24.23 24.25 24.29 T:isapa128av20 24.80 24.83 24.88 T:grain128aeadv2 31.53 31.76 31.80 T:giftcofb128v1 33.98 34.01 34.05 T:tinyjambu128v2 34.49 35.45 35.49 T:tinyjambu256v2 38.76 39.05 39.16 T:isapk128av20 40.51 40.56 41.68 T:tinyjambu192v2 41.89 41.94 42.02 romulust 48.80 49.17 49.45 T:isapk128v20 81.94 83.56 84.26 T:elephant200v2 92.56 93.92 95.13 T:isapxv20 3020.08 3022.50 3025.09 T:elephant176v2 3599.58 3604.58 3607.55 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.43 0.43 0.44 T:aes128gcmv1 0.42 0.43 0.44 aes256gcmv1 6.15 6.16 6.19 ascon128av12 7.26 7.31 7.45 T:xoodyakround3 9.15 9.16 9.18 ascon128v12 9.18 9.19 9.22 ascon80pqv12 11.13 11.15 11.17 ascon128abi32v12 16.29 16.32 16.35 T:schwaemm256128v2 16.43 16.46 16.49 ascon128bi32v12 17.95 18.04 18.10 T:isapa128v20 21.52 21.56 21.63 T:schwaemm192192v2 22.19 22.22 22.25 romulusm 22.38 22.42 22.56 romulusn 23.47 23.58 23.68 T:schwaemm128128v2 23.73 23.74 23.77 T:schwaemm256256v2 24.17 24.23 24.27 T:isapa128av20 24.80 24.85 24.90 T:grain128aeadv2 31.54 31.76 31.78 T:giftcofb128v1 33.97 34.00 34.03 T:tinyjambu128v2 34.46 35.45 35.49 T:tinyjambu256v2 38.69 39.08 39.28 T:isapk128av20 40.53 40.58 41.68 T:tinyjambu192v2 41.84 41.92 41.98 romulust 48.90 49.27 49.45 T:isapk128v20 81.88 83.62 84.29 T:elephant200v2 92.57 93.80 95.10 T:isapxv20 3020.18 3022.71 3025.08 T:elephant176v2 3598.61 3600.26 3603.95 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.76 0.77 0.77 T:aes128gcmv1 0.85 0.85 0.86 aes256gcmv1 6.31 6.32 6.33 ascon128av12 9.32 9.33 9.34 ascon128v12 9.36 9.37 9.38 ascon80pqv12 10.71 10.75 10.81 T:xoodyakround3 11.63 11.64 11.66 ascon128abi32v12 16.82 16.83 16.84 ascon128bi32v12 16.79 16.83 16.85 T:schwaemm256128v2 21.89 21.92 22.01 T:schwaemm192192v2 23.64 23.92 24.01 T:schwaemm128128v2 24.45 24.48 24.50 T:schwaemm256256v2 25.12 25.15 25.17 T:grain128aeadv2 29.91 29.93 29.98 romulusn 32.07 32.09 32.11 T:isapa128av20 32.13 32.26 32.30 T:giftcofb128v1 39.16 39.18 39.21 T:isapa128v20 40.78 40.87 40.93 romulusm 44.17 44.19 44.21 T:tinyjambu128v2 52.68 52.69 52.72 T:tinyjambu256v2 55.91 56.00 56.08 T:isapk128av20 57.17 57.19 57.21 T:tinyjambu192v2 83.88 83.93 84.00 romulust 110.83 110.91 111.02 T:isapk128v20 128.90 129.05 129.60 T:elephant200v2 208.83 209.17 209.43 T:isapxv20 4615.39 4617.05 4619.17 T:elephant176v2 5453.00 5465.47 5482.06 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.78 0.79 0.79 T:aes128gcmv1 0.90 0.90 0.91 aes256gcmv1 6.30 6.31 6.32 ascon128av12 9.31 9.33 9.35 ascon128v12 9.34 9.36 9.37 ascon80pqv12 10.70 10.79 10.87 T:xoodyakround3 11.57 11.58 11.60 ascon128abi32v12 16.79 16.82 16.85 T:schwaemm256128v2 16.84 16.90 16.96 ascon128bi32v12 21.89 21.91 21.97 T:schwaemm192192v2 23.78 23.91 24.03 T:schwaemm128128v2 24.45 24.47 24.49 T:schwaemm256256v2 25.33 25.37 25.40 T:grain128aeadv2 29.75 29.79 29.88 romulusn 32.09 32.12 32.14 T:isapa128av20 32.07 32.23 32.42 T:giftcofb128v1 39.17 39.19 39.21 T:isapa128v20 40.87 40.94 41.10 romulusm 44.19 44.21 44.23 T:tinyjambu128v2 52.71 52.73 52.75 T:tinyjambu256v2 55.88 55.98 56.04 T:isapk128av20 57.20 57.22 57.24 T:tinyjambu192v2 83.86 83.93 84.02 romulust 110.78 110.84 110.95 T:isapk128v20 128.73 128.90 129.69 T:elephant200v2 208.38 209.00 210.31 T:isapxv20 4600.67 4607.97 4612.21 T:elephant176v2 5455.08 5465.55 5482.50 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.78 0.79 0.79 T:aes128gcmv1 0.90 0.90 0.91 aes256gcmv1 6.30 6.31 6.32 ascon128av12 9.30 9.31 9.34 ascon128v12 9.34 9.35 9.37 ascon80pqv12 10.72 10.81 10.90 T:xoodyakround3 11.58 11.59 11.60 ascon128abi32v12 16.79 16.83 16.86 T:schwaemm256128v2 16.79 16.89 16.93 ascon128bi32v12 21.89 21.90 21.92 T:schwaemm192192v2 23.82 23.91 24.01 T:schwaemm128128v2 24.11 24.13 24.16 T:isapa128v20 24.45 24.46 24.48 T:schwaemm256256v2 25.34 25.37 25.40 T:grain128aeadv2 25.36 25.37 25.39 T:isapa128av20 29.75 29.78 29.88 romulusn 32.07 32.20 32.22 T:giftcofb128v1 40.88 40.93 41.09 romulusm 43.10 43.16 43.22 romulust 43.59 43.66 43.71 T:isapk128av20 44.20 44.22 44.24 T:tinyjambu128v2 52.71 52.73 52.75 T:tinyjambu256v2 57.19 57.22 57.24 T:tinyjambu192v2 73.74 73.82 73.89 T:isapk128v20 128.77 128.92 129.69 T:elephant200v2 136.44 136.71 137.18 T:isapxv20 4599.76 4617.04 4618.95 T:elephant176v2 5458.84 5476.55 5485.78 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.71 4.77 4.87 aes256gcmv1 5.32 5.38 5.44 T:aes128gcmv1 9.47 9.52 9.62 ascon128av12 12.22 12.29 12.44 ascon128v12 12.31 12.37 12.47 ascon80pqv12 15.43 15.52 15.73 T:xoodyakround3 18.81 18.90 18.98 ascon128abi32v12 23.12 23.19 23.27 ascon128bi32v12 27.31 27.48 27.68 T:schwaemm256128v2 30.35 30.66 30.82 T:schwaemm128128v2 31.83 31.94 32.10 T:grain128aeadv2 35.23 35.41 35.70 T:schwaemm192192v2 35.62 35.79 35.86 romulusn 38.54 38.65 38.76 T:giftcofb128v1 38.79 38.91 38.96 T:schwaemm256256v2 46.93 47.03 47.10 romulusm 51.57 51.67 51.90 T:tinyjambu128v2 61.24 61.37 61.69 T:tinyjambu256v2 66.62 66.85 67.27 T:tinyjambu192v2 77.07 77.27 77.45 T:isapa128av20 111.60 111.79 111.97 romulust 181.75 182.25 183.25 T:elephant200v2 210.20 211.55 215.46 T:isapk128av20 322.57 322.73 322.96 T:isapa128v20 1188.74 1190.55 1192.64 T:isapk128v20 2069.37 2075.43 2081.33 T:isapxv20 5731.81 5736.07 5749.66 T:elephant176v2 7323.85 7330.11 7333.58 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.70 4.75 4.80 aes256gcmv1 5.33 5.38 5.42 T:aes128gcmv1 9.44 9.51 9.63 ascon128av12 12.17 12.22 12.31 ascon128v12 12.29 12.35 12.44 ascon80pqv12 15.57 15.64 15.74 T:xoodyakround3 18.67 18.75 18.86 ascon128abi32v12 23.01 23.08 23.18 ascon128bi32v12 27.37 27.49 27.98 T:schwaemm256128v2 30.43 30.71 30.84 T:schwaemm128128v2 32.06 32.21 32.39 T:grain128aeadv2 35.33 35.43 35.54 T:schwaemm192192v2 35.53 35.61 35.74 romulusn 38.84 38.91 39.04 T:schwaemm256256v2 38.84 38.99 39.12 T:giftcofb128v1 48.17 48.29 48.44 romulusm 51.57 51.70 51.87 T:tinyjambu128v2 61.38 61.58 61.82 T:tinyjambu256v2 66.67 66.92 67.39 T:tinyjambu192v2 77.07 77.29 77.52 T:isapa128av20 111.80 111.91 112.11 romulust 181.63 181.90 182.14 T:elephant200v2 208.79 211.03 215.37 T:isapk128av20 322.86 323.31 323.81 T:isapa128v20 1190.17 1191.32 1193.62 T:isapk128v20 2065.51 2067.88 2106.46 T:isapxv20 5734.78 5740.90 5750.90 T:elephant176v2 7324.42 7329.90 7334.16 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.69 4.73 4.78 aes256gcmv1 5.30 5.36 5.43 T:aes128gcmv1 9.42 9.46 9.56 ascon128av12 12.20 12.25 12.35 ascon128v12 12.30 12.37 12.44 ascon80pqv12 15.49 15.62 15.84 T:xoodyakround3 18.70 18.78 18.86 ascon128abi32v12 23.00 23.08 23.18 ascon128bi32v12 27.38 27.47 27.68 T:schwaemm256128v2 30.41 30.71 30.84 T:schwaemm128128v2 32.27 32.42 32.46 T:grain128aeadv2 35.28 35.40 35.48 T:schwaemm192192v2 35.50 35.61 35.73 romulusn 38.75 38.80 38.86 T:schwaemm256256v2 38.82 38.94 39.11 T:giftcofb128v1 48.16 48.30 48.44 romulusm 50.88 51.04 51.22 T:isapa128av20 51.57 51.69 51.83 T:tinyjambu128v2 61.34 61.47 61.66 T:tinyjambu256v2 66.63 66.86 67.36 T:tinyjambu192v2 70.01 70.13 70.39 romulust 138.82 141.14 142.95 T:isapk128av20 167.78 168.09 168.51 T:isapa128v20 181.36 181.85 182.25 T:elephant200v2 637.63 638.41 639.74 T:isapk128v20 1082.74 1089.90 1101.86 T:isapxv20 5735.56 5739.20 5742.46 T:elephant176v2 7324.67 7330.28 7334.32 T:elephant160v2