VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20260217

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.37 1.38 1.39 aes256gcmv1 1.48 1.48 1.49 T:aes128gcmv1 7.33 7.37 7.40 ascon128av12 10.92 10.95 10.98 ascon80pqv12 10.99 11.02 11.06 ascon128v12 12.26 12.36 12.44 T:xoodyakround3 14.38 14.43 14.47 ascon128abi32v12 17.00 17.12 17.22 T:schwaemm256128v2 20.35 20.38 20.42 T:grain128aeadv2 20.85 21.25 21.44 T:schwaemm256256v2 21.21 21.26 21.30 ascon128bi32v12 22.58 22.70 22.78 T:schwaemm192192v2 23.91 24.02 24.12 T:schwaemm128128v2 27.13 27.19 27.24 T:isapa128av20 32.04 32.08 32.12 T:isapk128av20 37.30 37.34 37.38 romulusn 43.01 43.08 43.17 T:isapa128v20 44.31 44.37 44.42 T:giftcofb128v1 58.00 58.06 58.11 romulusm 70.76 70.89 70.95 T:tinyjambu128v2 86.15 86.24 86.31 T:tinyjambu192v2 90.01 90.08 90.21 T:tinyjambu256v2 97.23 97.57 97.82 T:isapk128v20 115.54 115.87 116.30 romulust 143.90 144.16 144.94 T:isapxv20 176.48 177.17 177.63 T:elephant200v2 7438.63 7454.02 7464.88 T:elephant176v2 8247.73 8254.33 8267.93 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.25 1.26 1.27 aes256gcmv1 1.45 1.46 1.47 T:aes128gcmv1 7.28 7.31 7.35 ascon128av12 10.76 10.79 10.81 ascon80pqv12 10.82 10.86 10.89 ascon128v12 12.13 12.22 12.29 T:xoodyakround3 14.59 14.63 14.68 ascon128abi32v12 17.10 17.18 17.27 T:schwaemm256128v2 20.44 20.51 20.56 T:grain128aeadv2 20.84 21.24 21.43 T:schwaemm256256v2 21.25 21.30 21.35 ascon128bi32v12 22.46 22.58 22.70 T:schwaemm192192v2 24.03 24.13 24.20 T:schwaemm128128v2 32.06 32.10 32.13 T:isapk128av20 34.00 34.06 34.13 T:isapa128av20 37.32 37.37 37.40 romulusn 43.01 43.09 43.21 T:isapa128v20 44.34 44.39 44.43 T:giftcofb128v1 58.05 58.12 58.17 romulusm 70.97 71.04 71.10 T:tinyjambu128v2 86.02 86.10 86.16 T:tinyjambu192v2 90.22 90.51 90.62 T:tinyjambu256v2 97.27 97.70 98.04 T:isapk128v20 115.52 115.92 116.36 romulust 143.08 144.14 145.31 T:isapxv20 176.39 177.06 177.85 T:elephant200v2 7436.52 7451.53 7465.37 T:elephant176v2 8249.26 8257.81 8268.44 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.25 1.26 1.27 aes256gcmv1 1.46 1.46 1.47 T:aes128gcmv1 7.28 7.31 7.34 ascon128av12 10.77 10.79 10.82 ascon80pqv12 10.82 10.84 10.87 ascon128v12 12.13 12.24 12.34 T:xoodyakround3 14.59 14.64 14.68 ascon128abi32v12 17.08 17.17 17.26 T:schwaemm256128v2 20.43 20.48 20.54 T:grain128aeadv2 21.14 21.20 21.26 T:isapa128v20 20.83 21.22 21.45 T:schwaemm256256v2 21.27 21.34 21.38 ascon128bi32v12 21.37 21.41 21.45 T:isapk128av20 22.37 22.42 22.46 T:isapa128av20 22.55 22.66 22.78 T:schwaemm192192v2 23.92 24.05 24.17 T:schwaemm128128v2 37.34 37.38 37.42 romulusn 39.49 39.72 39.95 romulust 44.34 44.38 44.44 T:giftcofb128v1 58.09 58.15 58.20 romulusm 64.15 64.43 64.66 T:isapk128v20 70.89 70.99 71.09 T:tinyjambu128v2 84.96 85.40 86.69 T:isapxv20 86.02 86.12 86.21 T:tinyjambu192v2 90.16 90.50 90.60 T:tinyjambu256v2 176.64 177.11 177.52 T:elephant200v2 7437.46 7448.29 7461.46 T:elephant176v2 8248.68 8260.23 8268.22 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.87 0.87 0.88 aes256gcmv1 0.88 0.88 0.89 T:aes128gcmv1 7.30 7.32 7.35 ascon128av12 9.36 9.41 9.45 T:xoodyakround3 10.87 10.90 10.93 ascon80pqv12 10.93 10.95 10.97 ascon128v12 14.35 14.38 14.41 ascon128abi32v12 16.87 16.93 17.01 T:schwaemm256128v2 20.41 20.44 20.46 T:grain128aeadv2 20.66 21.16 21.23 T:schwaemm256256v2 21.30 21.33 21.35 ascon128bi32v12 22.41 22.49 22.56 T:schwaemm192192v2 23.74 23.82 23.89 T:schwaemm128128v2 25.00 25.04 25.08 T:isapa128av20 26.73 26.74 26.75 T:isapk128av20 29.03 29.05 29.08 romulusn 32.08 32.14 32.19 T:isapa128v20 39.40 39.44 39.48 romulusm 44.29 44.32 44.35 T:giftcofb128v1 57.92 57.98 58.05 T:tinyjambu128v2 67.24 67.29 67.34 T:tinyjambu192v2 67.97 68.17 68.25 T:tinyjambu256v2 76.29 76.52 76.70 T:isapk128v20 77.46 77.75 78.02 romulust 113.24 113.69 114.69 T:isapxv20 132.29 132.40 133.00 T:elephant200v2 5544.32 5552.57 5562.69 T:elephant176v2 6183.49 6186.16 6188.57 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.81 0.81 0.82 aes256gcmv1 0.86 0.87 0.87 T:aes128gcmv1 7.27 7.30 7.31 ascon128av12 9.30 9.35 9.39 T:xoodyakround3 10.78 10.81 10.84 ascon80pqv12 10.82 10.84 10.86 ascon128v12 14.45 14.48 14.50 ascon128abi32v12 16.88 16.93 17.02 T:schwaemm256128v2 20.46 20.50 20.54 T:grain128aeadv2 20.66 21.17 21.26 T:schwaemm256256v2 21.41 21.45 21.47 ascon128bi32v12 22.35 22.44 22.53 T:schwaemm192192v2 23.74 23.83 23.92 T:schwaemm128128v2 26.72 26.73 26.74 T:isapk128av20 28.42 28.47 28.52 T:isapa128av20 29.03 29.06 29.09 romulusn 32.08 32.12 32.18 T:isapa128v20 39.37 39.42 39.48 romulusm 44.29 44.33 44.38 T:giftcofb128v1 58.00 58.06 58.11 T:tinyjambu128v2 67.17 67.23 67.27 T:tinyjambu192v2 67.91 67.95 67.99 T:tinyjambu256v2 76.31 76.44 76.68 T:isapk128v20 77.42 77.65 77.81 romulust 112.91 113.43 114.58 T:isapxv20 132.83 133.54 133.82 T:elephant200v2 5548.94 5555.60 5561.78 T:elephant176v2 6183.69 6186.30 6189.51 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.81 0.81 0.82 aes256gcmv1 0.86 0.87 0.87 T:aes128gcmv1 7.29 7.31 7.33 ascon128av12 9.29 9.35 9.41 T:xoodyakround3 10.79 10.82 10.85 ascon80pqv12 10.84 10.85 10.88 ascon128v12 14.45 14.48 14.51 ascon128abi32v12 16.85 16.92 17.00 T:schwaemm256128v2 20.47 20.51 20.54 T:grain128aeadv2 20.73 21.14 21.22 T:schwaemm256256v2 21.16 21.21 21.24 T:isapa128v20 21.39 21.40 21.41 T:isapk128av20 21.43 21.45 21.48 ascon128bi32v12 22.32 22.39 22.47 T:schwaemm192192v2 22.60 22.64 22.68 T:isapa128av20 23.68 23.80 23.89 T:schwaemm128128v2 29.03 29.06 29.09 romulusn 39.25 39.36 39.51 romulust 39.41 39.45 39.49 romulusm 44.29 44.34 44.38 T:giftcofb128v1 58.05 58.12 58.18 T:tinyjambu128v2 59.68 59.80 59.93 T:isapk128v20 67.18 67.23 67.27 T:tinyjambu192v2 68.19 68.28 68.32 T:tinyjambu256v2 84.91 85.12 85.34 T:isapxv20 133.51 133.71 134.07 T:elephant200v2 5549.31 5555.65 5562.73 T:elephant176v2 6183.90 6186.42 6189.48 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.26 0.27 0.28 T:aes128gcmv1 0.36 0.37 0.38 aes256gcmv1 6.38 6.48 6.54 T:xoodyakround3 7.27 7.30 7.33 ascon128av12 10.83 10.86 10.88 ascon128v12 10.84 10.86 10.90 ascon80pqv12 14.30 14.34 14.38 ascon128abi32v12 16.79 16.88 16.98 T:schwaemm256128v2 20.47 20.52 20.56 T:grain128aeadv2 20.70 20.74 20.77 romulusm 20.69 20.75 20.80 romulusn 20.61 21.01 21.10 T:schwaemm256256v2 21.16 21.22 21.28 T:isapa128v20 21.34 21.39 21.43 ascon128bi32v12 21.38 21.40 21.42 T:isapk128av20 22.11 22.20 22.35 T:schwaemm192192v2 22.84 22.90 22.94 T:isapa128av20 23.57 23.68 23.81 T:schwaemm128128v2 38.94 39.07 39.24 romulust 44.29 44.32 44.37 T:giftcofb128v1 45.08 45.14 45.20 T:tinyjambu128v2 45.74 45.84 45.93 T:tinyjambu256v2 48.26 48.32 48.39 T:tinyjambu192v2 54.96 55.16 55.39 T:isapk128v20 83.96 85.32 85.75 T:isapxv20 88.48 89.43 89.81 T:elephant200v2 3667.23 3674.82 3681.19 T:elephant176v2 4121.25 4123.92 4127.36 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.25? 0.27? 0.28? T:aes128gcmv1 0.34 0.36 0.37 aes256gcmv1 6.32 6.41 6.46 T:xoodyakround3 7.26 7.30 7.35 ascon128av12 10.79 10.82 10.85 ascon128v12 10.79 10.84 10.89 ascon80pqv12 14.29 14.33 14.37 ascon128abi32v12 16.79 16.87 16.97 T:schwaemm256128v2 20.44 20.49 20.54 T:grain128aeadv2 20.68 20.74 20.79 romulusn 20.74 20.78 20.81 romulusm 20.61 21.01 21.12 T:schwaemm256256v2 21.13 21.21 21.29 T:isapa128v20 21.38 21.40 21.41 T:isapk128av20 21.53 21.56 21.59 ascon128bi32v12 22.10 22.22 22.34 T:schwaemm192192v2 22.81 22.86 22.92 T:isapa128av20 23.61 23.72 23.83 T:schwaemm128128v2 38.95 39.07 39.17 romulust 44.27 44.34 44.42 T:giftcofb128v1 45.10 45.17 45.24 T:tinyjambu128v2 45.72 45.77 45.88 T:tinyjambu256v2 48.26 48.34 48.41 T:tinyjambu192v2 54.93 55.11 55.34 T:isapk128v20 85.33 85.81 86.13 T:isapxv20 89.31 89.81 90.06 T:elephant200v2 3668.62 3684.07 3694.58 T:elephant176v2 4121.04 4123.51 4127.73 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.26 0.27 0.28 T:aes128gcmv1 0.35 0.36 0.37 aes256gcmv1 6.37 6.46 6.51 T:xoodyakround3 7.27 7.30 7.33 ascon128av12 10.76 10.79 10.82 ascon80pqv12 10.80 10.83 10.86 ascon128v12 14.30 14.34 14.37 ascon128abi32v12 16.76 16.84 16.97 T:schwaemm256128v2 20.47 20.50 20.53 T:grain128aeadv2 20.71 20.75 20.80 romulusm 20.70 20.75 20.79 romulusn 20.65 21.01 21.13 T:schwaemm256256v2 21.15 21.21 21.26 T:isapa128v20 21.38 21.40 21.41 T:isapk128av20 21.55 21.58 21.61 ascon128bi32v12 22.08 22.17 22.32 T:schwaemm192192v2 22.82 22.89 22.95 T:isapa128av20 23.57 23.65 23.78 T:schwaemm128128v2 39.00 39.14 39.27 romulust 44.30 44.37 44.44 T:giftcofb128v1 45.14 45.21 45.26 T:tinyjambu128v2 45.85 45.93 45.99 T:tinyjambu256v2 48.29 48.37 48.43 T:tinyjambu192v2 54.88 55.06 55.33 T:isapk128v20 85.16 85.87 86.36 T:isapxv20 88.50 89.47 89.84 T:elephant200v2 3668.70 3677.94 3686.78 T:elephant176v2 4121.07 4123.54 4126.06 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.00 1.00 1.01 T:aes128gcmv1 1.02 1.02 1.02 aes256gcmv1 7.48 7.50 7.51 ascon128av12 9.46 9.48 9.52 T:xoodyakround3 11.02 11.04 11.07 ascon80pqv12 11.07 11.10 11.12 ascon128v12 14.70 14.72 14.75 ascon128abi32v12 17.39 17.46 17.50 T:schwaemm256128v2 20.76 20.78 20.80 T:grain128aeadv2 21.38 21.69 21.78 T:schwaemm256256v2 21.69 21.72 21.75 ascon128bi32v12 22.90 22.98 23.07 T:schwaemm192192v2 24.23 24.30 24.39 T:schwaemm128128v2 27.05 27.09 27.12 T:isapa128av20 29.29 29.31 29.34 romulusn 29.81 29.81 29.82 T:isapk128av20 39.70 39.74 39.78 romulusm 44.73 44.76 44.81 T:giftcofb128v1 46.77 46.81 46.85 T:isapa128v20 58.32 58.41 58.47 T:tinyjambu128v2 67.74 67.78 67.81 T:tinyjambu192v2 68.38 68.45 68.58 T:tinyjambu256v2 78.47 78.72 78.94 romulust 127.67 127.77 127.87 T:isapk128v20 134.87 135.57 135.95 T:elephant200v2 186.77 187.54 188.28 T:isapxv20 5591.36 5599.04 5609.19 T:elephant176v2 6252.65 6255.39 6259.48 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.94 0.94 0.95 aes256gcmv1 0.99 0.99 1.00 T:aes128gcmv1 7.46 7.48 7.50 ascon128av12 9.39 9.43 9.47 T:xoodyakround3 10.94 10.96 10.98 ascon80pqv12 10.98 10.99 11.01 ascon128v12 14.78 14.80 14.82 ascon128abi32v12 17.38 17.44 17.51 T:schwaemm256128v2 20.82 20.84 20.86 T:grain128aeadv2 21.40 21.72 21.78 T:schwaemm256256v2 21.81 21.84 21.87 ascon128bi32v12 22.84 22.93 22.99 T:schwaemm192192v2 24.15 24.23 24.35 T:schwaemm128128v2 29.32 29.34 29.35 romulusn 29.81 29.82 29.83 T:isapk128av20 30.43 30.46 30.49 T:isapa128av20 39.77 39.80 39.84 romulusm 44.75 44.78 44.83 T:giftcofb128v1 46.78 46.81 46.85 T:isapa128v20 58.48 58.51 58.55 T:tinyjambu128v2 67.65 67.68 67.71 T:tinyjambu192v2 68.39 68.45 68.69 T:tinyjambu256v2 78.49 78.66 78.81 romulust 127.60 127.76 127.90 T:isapk128v20 134.79 135.50 135.99 T:elephant200v2 187.49 188.01 188.63 T:isapxv20 5590.60 5594.98 5601.07 T:elephant176v2 6253.41 6255.09 6259.19 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.94 0.94 0.94 aes256gcmv1 0.99 0.99 1.00 T:aes128gcmv1 7.46 7.48 7.50 ascon128av12 9.41 9.45 9.49 T:xoodyakround3 10.94 10.96 10.97 ascon80pqv12 10.98 10.99 11.01 ascon128v12 14.79 14.81 14.83 ascon128abi32v12 17.36 17.43 17.49 T:schwaemm256128v2 20.81 20.83 20.87 T:grain128aeadv2 21.38 21.73 21.79 T:schwaemm256256v2 21.80 21.82 21.85 ascon128bi32v12 22.86 22.94 23.02 T:schwaemm192192v2 23.18 23.19 23.20 T:isapk128av20 23.75 23.78 23.81 T:isapa128av20 24.15 24.23 24.40 T:schwaemm128128v2 28.65 28.68 28.71 T:isapa128v20 29.32 29.33 29.36 romulusn 39.78 39.81 39.84 romulusm 40.38 40.47 40.56 romulust 44.73 44.76 44.82 T:giftcofb128v1 58.46 58.53 58.58 T:tinyjambu128v2 67.68 67.72 67.76 T:tinyjambu192v2 68.41 68.45 68.50 T:tinyjambu256v2 86.16 86.28 86.45 T:isapk128v20 122.84 123.01 123.46 T:isapxv20 135.42 135.62 136.13 T:elephant200v2 5589.79 5595.10 5601.67 T:elephant176v2 6254.79 6257.59 6260.44 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.94 5.98 6.03 T:aes128gcmv1 6.69 6.76 6.81 aes256gcmv1 11.27 11.40 11.60 ascon128av12 13.49 13.72 14.61 T:xoodyakround3 14.36 14.45 14.67 ascon80pqv12 14.43 14.56 14.74 ascon128v12 21.68 21.82 22.37 ascon128abi32v12 28.71 28.84 29.07 T:grain128aeadv2 28.63 29.18 29.77 T:schwaemm256128v2 30.77 30.88 31.30 ascon128bi32v12 31.07 31.38 32.01 T:schwaemm128128v2 34.10 34.70 34.93 T:schwaemm256256v2 35.34 35.44 35.56 romulusn 37.27 37.72 38.27 T:schwaemm192192v2 46.63 46.81 47.22 romulusm 53.79 53.97 54.30 T:giftcofb128v1 67.79 68.01 68.30 T:tinyjambu128v2 73.95 74.18 74.45 T:isapa128av20 78.55 78.73 78.86 T:tinyjambu192v2 79.03 79.17 79.35 T:tinyjambu256v2 95.40 95.49 95.60 T:isapk128av20 104.28 104.58 105.42 romulust 192.11 192.58 192.96 T:elephant200v2 383.73 384.16 384.98 T:isapa128v20 1281.98 1283.26 1284.76 T:isapk128v20 1863.23 1866.20 1890.51 T:isapxv20 6979.07 6994.83 7014.07 T:elephant176v2 8375.05 8385.56 8394.20 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.13 5.21 5.27 T:aes128gcmv1 6.33 6.39 6.45 aes256gcmv1 11.25 11.39 11.60 ascon128av12 13.47 13.69 14.49 T:xoodyakround3 14.34 14.43 14.56 ascon80pqv12 14.35 14.45 14.60 ascon128v12 21.90 22.02 22.49 ascon128abi32v12 28.70 28.88 29.34 T:grain128aeadv2 28.67 29.01 29.53 T:schwaemm256128v2 30.75 30.89 31.14 ascon128bi32v12 31.02 31.48 32.04 T:schwaemm128128v2 34.10 34.81 34.97 T:schwaemm256256v2 35.56 35.64 35.76 romulusn 37.05 37.69 38.25 T:schwaemm192192v2 48.09 48.28 48.60 romulusm 54.21 54.43 54.85 T:giftcofb128v1 68.04 68.22 68.41 T:tinyjambu128v2 76.19 76.39 76.67 T:isapa128av20 78.47 78.63 78.84 T:tinyjambu192v2 79.32 79.63 79.88 T:tinyjambu256v2 95.58 95.66 95.77 T:isapk128av20 104.41 105.04 105.69 romulust 191.45 191.90 192.34 T:elephant200v2 383.79 384.41 385.03 T:isapa128v20 1280.19 1281.13 1282.26 T:isapk128v20 1856.71 1865.47 1879.48 T:isapxv20 6975.31 6988.85 7003.67 T:elephant176v2 8386.17 8393.75 8400.18 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.18 5.25 5.32 T:aes128gcmv1 6.20 6.30 6.39 aes256gcmv1 11.17 11.28 11.42 ascon128av12 13.51 13.82 14.62 T:xoodyakround3 14.33 14.45 14.58 ascon80pqv12 14.34 14.45 14.59 ascon128v12 21.89 21.99 22.40 ascon128abi32v12 28.72 28.82 29.08 T:grain128aeadv2 28.48 28.93 29.32 T:schwaemm256128v2 30.69 30.84 30.99 ascon128bi32v12 31.03 31.59 32.09 T:schwaemm128128v2 34.15 34.82 34.99 T:schwaemm256256v2 35.56 35.63 35.77 romulusn 37.29 37.71 38.16 T:schwaemm192192v2 48.10 48.23 48.36 romulusm 49.50 49.70 49.98 T:isapa128av20 54.17 54.29 54.57 T:giftcofb128v1 60.21 60.30 60.42 T:isapk128av20 65.37 65.69 66.30 romulust 68.02 68.18 68.37 T:tinyjambu128v2 78.54 78.68 78.89 T:tinyjambu192v2 79.30 79.50 79.72 T:tinyjambu256v2 191.87 192.10 192.64 T:elephant200v2 200.12 200.43 200.86 T:isapa128v20 676.37 677.41 678.64 T:isapk128v20 973.13 977.01 982.36 T:isapxv20 6966.98 6985.52 7004.82 T:elephant176v2 8384.39 8391.46 8399.84 T:elephant160v2