VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20240425

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.67 2.71 2.72 T:aes128gcmv1 3.16 3.17 3.20 aes256gcmv1 11.44 11.46 11.47 ascon128av12 16.76 16.77 16.78 ascon80pqv12 16.92 16.94 16.95 ascon128v12 23.04 23.05 23.06 ascon128abi32v12 23.63 24.22 24.25 T:xoodyakround3 32.63 32.66 32.75 T:schwaemm256128v2 33.84 33.86 33.88 ascon128bi32v12 40.30 40.31 40.33 T:schwaemm256256v2 40.72 40.81 40.83 T:grain128aeadv2 43.18 43.20 43.22 T:schwaemm192192v2 43.65 43.66 43.68 T:schwaemm128128v2 44.64 44.92 45.01 romulusn 47.66 47.67 47.69 T:giftcofb128v1 63.32 63.36 63.54 T:isapa128av20 72.05 72.07 72.09 T:isapa128v20 75.36 75.53 75.55 romulusm 84.80 84.82 85.07 T:tinyjambu128v2 102.55 102.58 102.60 T:tinyjambu192v2 110.98 111.00 111.09 T:tinyjambu256v2 125.38 125.45 125.52 T:isapk128av20 151.17 151.74 152.40 romulust 166.23 166.50 170.03 T:isapk128v20 237.66 238.70 239.61 T:elephant200v2 257.96 258.78 259.48 T:isapxv20 12840.12 12873.17 12898.34 T:elephant176v2 13917.63 13970.62 14040.64 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 2.80 2.83 2.84 T:aes128gcmv1 3.41 3.43 3.46 aes256gcmv1 11.14 11.15 11.18 ascon128av12 16.63 16.65 16.66 ascon80pqv12 16.85 16.87 16.87 ascon128v12 22.84 22.87 22.93 T:xoodyakround3 23.26 23.27 23.27 ascon128abi32v12 32.50 32.53 32.69 T:schwaemm256128v2 34.11 34.12 34.13 ascon128bi32v12 40.27 40.28 40.30 T:schwaemm256256v2 40.77 40.79 40.81 T:grain128aeadv2 43.19 43.20 43.21 T:schwaemm192192v2 43.59 43.60 43.61 T:schwaemm128128v2 44.65 44.66 44.67 romulusn 46.95 46.96 46.97 T:giftcofb128v1 63.34 63.36 63.44 T:isapa128av20 71.93 72.08 72.19 T:isapa128v20 75.46 75.73 75.79 romulusm 84.32 84.43 84.45 T:tinyjambu128v2 102.57 102.58 102.65 T:tinyjambu192v2 111.49 111.50 111.52 T:tinyjambu256v2 125.38 125.40 125.47 T:isapk128av20 151.13 151.36 151.91 romulust 165.60 167.03 171.48 T:isapk128v20 237.69 239.56 242.49 T:elephant200v2 257.85 258.75 264.06 T:isapxv20 12843.31 12882.79 12898.77 T:elephant176v2 13941.20 13983.52 14017.29 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 2.82 2.83 2.83 T:aes128gcmv1 3.42 3.43 3.45 aes256gcmv1 11.15 11.16 11.17 ascon128av12 16.64 16.65 16.65 ascon80pqv12 16.85 16.86 16.88 ascon128v12 22.89 22.95 22.99 T:xoodyakround3 23.27 23.27 23.27 ascon128abi32v12 32.52 32.53 32.70 T:schwaemm256128v2 34.10 34.13 34.13 ascon128bi32v12 35.88? 35.93? 40.51? T:isapa128v20 40.27 40.28 40.29 T:schwaemm256256v2 40.79 40.80 40.82 T:grain128aeadv2 41.47 41.50 41.51 T:isapa128av20 43.19 43.20 43.21 T:schwaemm192192v2 43.59 43.60 43.61 T:schwaemm128128v2 44.65 44.66 44.67 romulusn 46.96 46.98 47.01 T:giftcofb128v1 52.27 52.30 52.81 romulust 75.53 75.74 75.76 romulusm 83.08 83.14 84.29 T:isapk128av20 84.41 84.43 84.53 T:tinyjambu128v2 102.56 102.58 102.60 T:tinyjambu192v2 103.42 103.51 105.30 T:isapk128v20 111.49 111.50 111.52 T:tinyjambu256v2 154.20 154.26 155.00 T:isapxv20 237.66 238.70 239.66 T:elephant200v2 12843.83 12870.19 12929.91 T:elephant176v2 13947.96 13976.96 14009.91 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.98 2.01 2.02 T:aes128gcmv1 2.20 2.23 2.24 aes256gcmv1 11.26 11.27 11.28 ascon128av12 16.45 16.46 16.46 ascon80pqv12 16.60 16.61 16.61 ascon128v12 17.04 17.05 17.07 T:xoodyakround3 22.77 22.81 22.81 ascon128abi32v12 32.31 32.33 32.42 T:schwaemm256128v2 33.70 33.72 33.73 ascon128bi32v12 37.24 37.44 38.21 romulusn 40.05 40.06 40.07 T:schwaemm256256v2 40.57 40.59 40.62 T:grain128aeadv2 42.94 42.97 43.00 T:schwaemm192192v2 43.50 43.50 43.52 T:schwaemm128128v2 47.27 47.47 47.84 T:giftcofb128v1 52.34 52.50 52.73 romulusm 52.68 52.78 52.97 T:isapa128av20 53.94 53.99 54.09 T:isapa128v20 69.07 69.18 69.19 T:tinyjambu128v2 80.42 80.43 80.44 T:tinyjambu192v2 84.31 84.39 84.45 T:tinyjambu256v2 102.33 102.39 103.02 romulust 104.29 105.12 110.21 T:isapk128av20 135.05 136.23 146.25 T:isapk128v20 176.92 178.31 180.12 T:elephant200v2 206.15 206.97 209.35 T:isapxv20 9601.79 9617.60 9639.26 T:elephant176v2 10462.65 10474.19 10502.76 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.01 2.04 2.05 T:aes128gcmv1 2.33 2.36 2.37 aes256gcmv1 11.05 11.05 11.06 ascon128av12 16.39 16.40 16.41 ascon80pqv12 16.46 16.47 16.52 T:xoodyakround3 16.55 16.56 16.57 ascon128v12 22.82 22.84 22.84 ascon128abi32v12 32.25 32.27 32.39 T:schwaemm256128v2 33.71 33.72 33.73 ascon128bi32v12 37.19 37.41 37.42 romulusn 40.03 40.05 40.06 T:schwaemm256256v2 40.44 40.46 40.47 T:grain128aeadv2 42.96 42.97 42.98 T:schwaemm192192v2 43.46 43.47 43.48 T:schwaemm128128v2 47.06 47.07 47.13 T:giftcofb128v1 52.42 52.60 53.26 romulusm 52.55 52.77 52.83 T:isapa128av20 53.95 54.01 54.02 T:isapa128v20 68.99 69.01 69.16 T:tinyjambu128v2 80.42 80.44 80.45 T:tinyjambu192v2 84.39 84.40 84.49 T:tinyjambu256v2 102.04 102.41 102.45 romulust 103.70 104.31 104.40 T:isapk128av20 129.73 135.04 143.06 T:isapk128v20 176.91 178.30 178.34 T:elephant200v2 206.64 207.24 211.96 T:isapxv20 9587.57 9603.86 9629.34 T:elephant176v2 10473.10 10488.07 10520.88 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.03 2.03 2.04 T:aes128gcmv1 2.35 2.36 2.36 aes256gcmv1 11.05 11.06 11.06 ascon128av12 16.40 16.41 16.41 ascon80pqv12 16.48 16.51 16.58 T:xoodyakround3 16.56 16.56 16.57 ascon128v12 22.84 22.84 22.84 ascon128abi32v12 32.26 32.39 32.39 T:schwaemm256128v2 33.72 33.72 33.72 ascon128bi32v12 35.92 35.93 35.94 T:isapa128v20 37.19 37.41 37.42 romulusn 40.04 40.05 40.06 T:schwaemm256256v2 40.45 40.46 41.03 T:grain128aeadv2 41.63 41.84 41.85 T:isapa128av20 42.96 42.97 42.98 T:schwaemm192192v2 43.47 43.47 43.48 T:schwaemm128128v2 47.06 47.07 47.11 T:giftcofb128v1 52.58 52.60 52.62 romulusm 52.87 52.89 52.90 romulust 68.99 69.01 69.02 T:tinyjambu128v2 80.42 80.44 80.45 T:tinyjambu192v2 83.19 83.21 83.82 T:isapk128av20 84.39 84.47 84.49 T:tinyjambu256v2 103.41 103.54 104.43 T:isapk128v20 154.33 154.38 154.77 T:isapxv20 176.91 177.56 178.36 T:elephant200v2 9600.49 9609.02 9626.50 T:elephant176v2 10471.75 10482.73 10504.16 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.27 1.29 1.31 aes256gcmv1 1.28 1.31 1.32 T:aes128gcmv1 10.04 10.07 10.15 T:xoodyakround3 11.06 11.08 11.09 ascon128av12 16.13 16.15 16.16 ascon80pqv12 16.26 16.27 16.28 ascon128v12 22.26 22.27 22.27 ascon128abi32v12 29.37 29.48 29.50 romulusm 29.57 29.69 30.15 romulusn 31.98 32.00 32.10 T:schwaemm256128v2 33.56 33.58 33.59 ascon128bi32v12 35.95 36.07 36.09 T:isapa128v20 39.80 39.81 39.82 T:schwaemm256256v2 40.27 40.44 40.45 T:grain128aeadv2 41.61 41.63 41.65 T:isapa128av20 42.72 42.74 42.76 T:schwaemm192192v2 43.33 43.34 43.35 T:schwaemm128128v2 47.03 47.70 47.73 T:giftcofb128v1 52.93 52.97 53.17 romulust 53.68 53.69 53.71 T:tinyjambu128v2 57.61 57.63 57.71 T:tinyjambu256v2 58.28 58.29 58.31 T:tinyjambu192v2 83.24 83.29 83.33 T:isapk128av20 103.41 103.57 103.73 T:isapk128v20 116.75 116.92 117.66 T:elephant200v2 154.40 154.43 155.11 T:isapxv20 6333.82 6355.27 6371.59 T:elephant176v2 6957.95 6993.57 7005.67 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.23 1.25 1.26 T:aes128gcmv1 1.27 1.29 1.30 aes256gcmv1 10.01 10.03 10.05 T:xoodyakround3 10.93 10.96 10.97 ascon128av12 16.13 16.15 16.16 ascon80pqv12 16.25 16.27 16.28 ascon128v12 22.39 22.40 22.40 ascon128abi32v12 29.54 29.56 29.61 romulusm 29.71 30.06 30.17 romulusn 31.97 31.99 32.10 T:schwaemm256128v2 33.31 33.33 33.34 ascon128bi32v12 35.94 36.06 36.10 T:isapa128v20 39.80 39.81 39.82 T:schwaemm256256v2 40.10 40.11 40.12 T:grain128aeadv2 41.55 41.79 42.23 T:isapa128av20 42.73 42.74 42.76 T:schwaemm192192v2 43.34 43.34 43.37 T:schwaemm128128v2 47.27 47.29 47.69 T:giftcofb128v1 52.94 52.96 52.99 romulust 53.13 53.15 53.47 T:tinyjambu128v2 57.27 57.30 57.46 T:tinyjambu256v2 58.28 58.29 58.31 T:tinyjambu192v2 83.09 83.14 83.84 T:isapk128av20 103.62 103.80 113.54 T:isapk128v20 116.76 116.82 117.66 T:elephant200v2 154.31 154.43 155.13 T:isapxv20 6333.30 6373.30 6379.64 T:elephant176v2 6962.88 6984.14 7002.31 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.24 1.24 1.25 T:aes128gcmv1 1.28 1.29 1.30 aes256gcmv1 10.02 10.07 10.30 T:xoodyakround3 10.95 10.95 10.97 ascon128av12 16.14 16.15 16.16 ascon80pqv12 16.26 16.27 16.28 ascon128v12 22.39 22.40 22.40 ascon128abi32v12 29.54 29.56 29.60 romulusm 29.72 30.15 30.18 romulusn 31.98 32.00 32.09 T:schwaemm256128v2 33.31 33.33 33.34 ascon128bi32v12 35.86 36.05 36.10 T:isapa128v20 39.80 39.82 39.84 T:schwaemm256256v2 40.10 40.12 40.14 T:grain128aeadv2 41.57 41.79 42.24 T:isapa128av20 42.73 42.74 42.76 T:schwaemm192192v2 43.34 43.35 43.36 T:schwaemm128128v2 47.67 47.70 47.72 T:giftcofb128v1 52.94 52.97 53.00 romulust 53.12 53.15 53.17 T:tinyjambu128v2 57.27 57.29 57.46 T:tinyjambu256v2 58.28 58.29 58.31 T:tinyjambu192v2 83.11 83.25 83.95 T:isapk128av20 103.37 103.58 106.38 T:isapk128v20 116.74 116.84 117.66 T:elephant200v2 154.32 154.41 154.46 T:isapxv20 6341.96 6358.82 6373.10 T:elephant176v2 6956.78 6981.20 6992.73 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.16 2.16 2.17 T:aes128gcmv1 2.41 2.41 2.43 aes256gcmv1 11.52 11.52 11.53 ascon128av12 16.69 16.70 16.71 ascon80pqv12 16.83 16.84 16.84 ascon128v12 17.13 17.27 17.29 T:xoodyakround3 23.30 23.30 23.32 ascon128abi32v12 33.22 33.23 33.32 T:schwaemm256128v2 34.22 34.22 34.23 ascon128bi32v12 37.50 37.52 37.92 romulusn 41.09 41.09 41.10 T:schwaemm256256v2 41.09 41.11 41.13 T:grain128aeadv2 43.88 43.88 43.89 T:schwaemm192192v2 44.02 44.03 44.04 T:schwaemm128128v2 47.89 47.96 48.32 T:giftcofb128v1 52.89 53.10 54.23 romulusm 56.59 56.76 56.78 T:isapa128av20 69.64 69.73 69.74 T:tinyjambu128v2 78.43 78.45 78.45 T:isapa128v20 81.04 81.04 81.16 T:tinyjambu192v2 84.93 84.96 85.09 T:tinyjambu256v2 104.03 104.06 104.13 romulust 122.33 122.39 130.69 T:isapk128av20 180.76 181.97 182.53 T:elephant200v2 242.24 242.88 251.52 T:isapk128v20 336.04 336.17 339.65 T:isapxv20 9673.51 9692.88 9702.40 T:elephant176v2 10585.40 10594.25 10633.85 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.18 2.19 2.20 T:aes128gcmv1 2.53 2.54 2.56 aes256gcmv1 11.31 11.31 11.32 ascon128av12 16.60 16.63 16.64 T:xoodyakround3 16.64 16.64 16.65 ascon80pqv12 16.80 16.80 16.80 ascon128v12 23.35 23.35 23.36 ascon128abi32v12 33.16 33.16 33.28 T:schwaemm256128v2 34.23 34.23 34.23 ascon128bi32v12 37.59 37.82 37.84 romulusn 40.95 40.96 41.17 T:grain128aeadv2 41.07 41.08 41.08 T:schwaemm256256v2 43.88 43.88 43.89 T:schwaemm192192v2 44.00 44.00 44.01 T:schwaemm128128v2 47.59 47.59 47.59 T:giftcofb128v1 52.93 53.02 53.08 romulusm 56.35 56.61 56.63 T:isapa128av20 69.54 69.56 69.76 T:tinyjambu128v2 78.46 78.46 78.48 T:isapa128v20 81.05 81.05 81.11 T:tinyjambu192v2 85.02 85.04 85.11 T:tinyjambu256v2 103.77 103.89 104.11 romulust 122.26 122.31 125.67 T:isapk128av20 180.75 181.45 182.02 T:elephant200v2 242.35 244.77 253.42 T:isapk128v20 336.05 336.09 337.52 T:isapxv20 9676.63 9682.64 9701.90 T:elephant176v2 10588.87 10598.82 10613.95 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.18 2.19 2.19 T:aes128gcmv1 2.53 2.53 2.54 aes256gcmv1 11.31 11.32 11.32 ascon128av12 16.64 16.64 16.65 ascon80pqv12 16.64 16.66 16.68 T:xoodyakround3 16.80 16.80 16.80 ascon128v12 23.35 23.35 23.36 ascon128abi32v12 33.16 33.21 33.28 T:schwaemm256128v2 34.22 34.23 34.23 ascon128bi32v12 37.80 37.83 37.84 romulusn 40.95 40.96 40.96 T:grain128aeadv2 41.07 41.07 41.08 T:schwaemm256256v2 43.88 43.88 43.99 T:schwaemm192192v2 43.85 44.00 44.01 T:isapa128av20 44.00 44.00 44.00 T:schwaemm128128v2 47.59 47.59 47.64 T:giftcofb128v1 48.37 48.37 48.57 T:isapa128v20 52.92 52.93 52.93 romulusm 54.49 54.49 55.48 romulust 69.54 69.55 69.56 T:tinyjambu128v2 81.04 81.05 81.07 T:tinyjambu192v2 85.02 85.09 85.11 T:tinyjambu256v2 90.45 90.45 92.86 T:isapk128av20 154.46 154.63 166.75 T:isapk128v20 180.77 181.98 182.54 T:elephant200v2 220.58 220.59 220.64 T:isapxv20 9672.43 9680.43 9696.15 T:elephant176v2 10596.13 10614.40 10623.33 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 8.86 9.19 9.48 T:aes128gcmv1 10.42 10.91 11.30 aes256gcmv1 17.08 17.09 17.28 ascon128av12 21.97 21.98 22.34 ascon128v12 22.02 22.05 22.39 ascon80pqv12 24.52 24.59 24.72 T:xoodyakround3 34.75 34.83 35.20 ascon128abi32v12 45.66 45.72 45.98 ascon128bi32v12 46.20 46.41 46.69 romulusn 52.45 52.61 52.80 T:grain128aeadv2 53.56 53.64 53.75 T:schwaemm256128v2 56.03 56.11 56.34 T:schwaemm128128v2 59.16 59.23 59.53 T:giftcofb128v1 61.59 61.78 62.52 romulusm 64.17 64.27 64.38 T:schwaemm256256v2 70.22 70.28 70.80 T:schwaemm192192v2 82.23 82.44 82.56 T:tinyjambu128v2 94.98 95.06 95.20 T:tinyjambu192v2 99.19 99.34 99.41 T:tinyjambu256v2 142.62 142.98 143.55 romulust 144.16 144.39 144.59 T:isapa128av20 255.19 255.55 256.88 T:elephant200v2 514.44 515.00 515.86 T:isapk128av20 639.53 639.69 641.19 T:isapa128v20 2678.23 2679.23 2745.45 T:isapk128v20 3276.97 3277.30 3288.52 T:isapxv20 11974.45 11976.72 12182.19 T:elephant176v2 14087.08 14131.02 14295.48 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 8.91 8.95 9.28 T:aes128gcmv1 10.47 10.53 10.88 aes256gcmv1 17.08 17.09 17.38 ascon128av12 22.02 22.06 22.33 ascon80pqv12 22.05 22.09 22.25 ascon128v12 23.84 23.98 24.11 T:xoodyakround3 35.02 35.08 35.41 ascon128abi32v12 45.73 45.83 46.06 ascon128bi32v12 46.61 46.77 47.06 romulusn 52.27 52.42 52.59 T:grain128aeadv2 53.53 53.61 53.78 T:schwaemm256128v2 55.97 56.08 56.16 T:schwaemm128128v2 59.12 59.20 59.42 T:giftcofb128v1 64.12 64.17 64.27 T:schwaemm256256v2 64.19 64.72 65.08 romulusm 70.28 70.41 70.55 T:schwaemm192192v2 82.20 82.31 82.45 T:tinyjambu128v2 95.16 95.27 95.38 T:tinyjambu192v2 99.39 99.47 99.59 T:tinyjambu256v2 142.45 142.78 143.20 romulust 144.58 144.98 145.20 T:isapa128av20 254.94 255.12 256.58 T:elephant200v2 514.52 515.70 516.33 T:isapk128av20 640.16 640.39 642.42 T:isapa128v20 2679.61 2680.09 2727.75 T:isapk128v20 3277.52 3277.97 3290.50 T:isapxv20 11974.64 11979.16 12133.56 T:elephant176v2 14088.20 14110.92 14259.14 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 8.67 8.69 8.97 T:aes128gcmv1 10.72 10.73 10.78 aes256gcmv1 17.03 17.05 17.08 ascon128av12 22.00 22.05 22.06 ascon80pqv12 22.02 22.05 22.05 ascon128v12 24.05 24.42 24.55 T:xoodyakround3 35.02 35.06 35.09 ascon128abi32v12 45.77 45.80 45.83 ascon128bi32v12 46.77 46.89 46.95 romulusn 52.20 52.28 52.42 T:grain128aeadv2 53.58 53.64 53.70 T:schwaemm256128v2 55.94 56.03 56.08 T:schwaemm128128v2 58.91 58.97 59.08 T:giftcofb128v1 64.06 64.17 64.25 T:schwaemm256256v2 64.33 64.45 64.97 romulusm 70.16 70.23 70.41 T:schwaemm192192v2 82.17 82.31 82.38 T:tinyjambu128v2 91.14 91.44 91.61 romulust 92.89 93.41 93.55 T:isapa128av20 95.09 95.22 95.33 T:tinyjambu192v2 99.25 99.33 99.47 T:tinyjambu256v2 239.56 239.95 240.66 T:isapk128av20 254.88 255.11 256.72 T:elephant200v2 334.11 334.17 335.83 T:isapa128v20 1304.77 1304.88 1329.52 T:isapk128v20 1715.86 1716.12 1716.41 T:isapxv20 11975.14 11976.48 12204.80 T:elephant176v2 14087.92 14098.45 14301.34 T:elephant160v2