VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20250415

[Page version: 20250523 10:17:58]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.67 2.71 2.72 T:aes128gcmv1 3.13 3.17 3.20 aes256gcmv1 11.44 11.46 11.48 ascon128av12 16.76 16.77 16.78 ascon80pqv12 16.92 16.94 16.94 ascon128v12 23.04 23.05 23.06 ascon128abi32v12 23.78 23.80 24.24 T:xoodyakround3 32.64 32.66 32.67 T:schwaemm256128v2 33.85 33.86 34.36 ascon128bi32v12 40.30 40.31 40.32 T:schwaemm256256v2 40.69 40.83 40.84 T:grain128aeadv2 43.18 43.21 43.22 T:schwaemm192192v2 43.65 43.66 43.68 T:schwaemm128128v2 44.65 44.67 44.91 romulusn 47.65 47.68 47.69 T:giftcofb128v1 63.38 63.42 63.44 T:isapa128av20 72.05 72.07 72.09 T:isapa128v20 75.49 75.52 75.67 romulusm 84.80 84.81 84.83 T:tinyjambu128v2 102.55 102.58 102.59 T:tinyjambu192v2 109.56 109.58 109.63 T:tinyjambu256v2 125.98 126.06 126.49 T:isapk128av20 151.71 152.09 152.14 T!!!romulust 164.57 166.50 175.89 T:isapk128v20 237.72 237.76 238.72 T:elephant200v2 258.43 258.50 259.26 T:isapxv20 12768.72 12836.74 12846.98 T:elephant176v2 13917.91 13934.70 13938.02 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 2.81 2.83 2.85 T:aes128gcmv1 3.41 3.43 3.45 aes256gcmv1 11.14 11.15 11.18 ascon128av12 16.66 16.69 16.70 ascon80pqv12 16.76 16.77 16.78 ascon128v12 22.87 22.89 22.95 T:xoodyakround3 23.26 23.27 23.27 ascon128abi32v12 32.52 32.54 32.56 T:schwaemm256128v2 34.11 34.12 34.12 ascon128bi32v12 40.27 40.28 40.29 T:schwaemm256256v2 40.78 40.79 40.80 T:grain128aeadv2 43.18 43.19 43.20 T:schwaemm192192v2 43.59 43.60 43.62 T:schwaemm128128v2 44.65 44.67 44.67 romulusn 46.95 46.96 46.97 T:giftcofb128v1 63.56 63.60 63.65 T:isapa128av20 71.90 72.00 72.10 T:isapa128v20 75.49 75.55 75.74 romulusm 83.99 84.05 84.22 T:tinyjambu128v2 102.56 102.58 102.60 T:tinyjambu192v2 108.31 108.87 112.95 T:tinyjambu256v2 126.01 126.02 126.74 T:isapk128av20 150.85 151.18 152.15 T!!!romulust 166.27 166.44 167.54 T:isapk128v20 237.74 237.76 237.83 T:elephant200v2 258.43 258.57 262.79 T:isapxv20 12777.87 12831.60 12847.02 T:elephant176v2 13918.59 13935.58 13945.44 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 2.82 2.83 2.83 T:aes128gcmv1 3.41 3.42 3.45 aes256gcmv1 11.13 11.16 11.16 ascon128av12 16.68 16.69 16.70 ascon80pqv12 16.76 16.77 16.78 ascon128v12 22.92 22.98 23.01 T:xoodyakround3 23.26 23.27 23.28 ascon128abi32v12 32.51 32.53 32.54 T:schwaemm256128v2 34.11 34.11 34.13 ascon128bi32v12 35.80 35.90 35.94 T:isapa128v20 40.26 40.27 40.29 T:schwaemm256256v2 40.79 40.82 40.86 T:grain128aeadv2 41.59 41.62 41.64 T:isapa128av20 43.19 43.19 43.20 T:schwaemm192192v2 43.59 43.60 43.61 T:schwaemm128128v2 44.66 44.67 44.68 romulusn 46.96 46.97 46.98 T:giftcofb128v1 52.29 52.35 52.84 T!!!romulust 75.46 75.53 75.75 romulusm 83.28 83.30 83.37 T:isapk128av20 84.04 84.26 85.91 T:tinyjambu128v2 102.56 102.58 102.61 T:tinyjambu192v2 103.41 103.50 103.58 T:isapk128v20 108.32 108.88 108.90 T:tinyjambu256v2 154.03 154.11 154.82 T:isapxv20 237.74 237.76 237.81 T:elephant200v2 12772.95 12838.89 12844.28 T:elephant176v2 13919.64 13932.39 13939.39 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.98 2.01 2.02 T:aes128gcmv1 2.20 2.23 2.24 aes256gcmv1 11.24 11.27 11.28 ascon128av12 16.45 16.46 16.47 ascon80pqv12 16.59 16.61 16.62 ascon128v12 17.03 17.04 17.06 T:xoodyakround3 22.77 22.81 22.83 ascon128abi32v12 32.30 32.32 32.33 T:schwaemm256128v2 33.70 33.72 33.92 ascon128bi32v12 37.15 37.27 37.55 romulusn 40.05 40.06 40.07 T:schwaemm256256v2 40.55 40.58 40.60 T:grain128aeadv2 42.95 42.97 42.98 T:schwaemm192192v2 43.49 43.50 43.52 T:schwaemm128128v2 47.42 47.47 47.62 T:giftcofb128v1 52.42 52.70 52.86 romulusm 52.68 52.70 52.72 T:isapa128av20 53.93 53.98 54.02 T:isapa128v20 69.08 69.19 69.20 T:tinyjambu128v2 80.42 80.43 80.44 T:tinyjambu192v2 84.05 84.06 84.08 T:tinyjambu256v2 102.38 102.39 102.58 T!!!romulust 104.51 104.61 104.99 T:isapk128av20 132.21 135.81 142.51 T:isapk128v20 176.96 176.98 177.01 T:elephant200v2 206.08 206.51 208.29 T:isapxv20 9538.28 9584.16 9592.32 T:elephant176v2 10439.45 10442.06 10450.58 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.01 2.04 2.05 T:aes128gcmv1 2.34 2.36 2.36 aes256gcmv1 11.04 11.06 11.06 ascon128av12 16.46 16.47 16.48 ascon128v12 16.45 16.47 16.49 T:xoodyakround3 16.48 16.49 16.57 ascon80pqv12 22.86 22.87 22.87 ascon128abi32v12 32.25 32.26 32.27 T:schwaemm256128v2 33.71 33.72 34.80 ascon128bi32v12 37.40 37.41 37.42 romulusn 40.03 40.04 40.05 T:schwaemm256256v2 40.45 40.46 40.67 T:grain128aeadv2 42.96 42.97 42.98 T:schwaemm192192v2 43.47 43.47 43.82 T:schwaemm128128v2 47.05 47.07 47.31 T:giftcofb128v1 52.45 52.54 52.61 romulusm 52.67 52.70 52.72 T:isapa128av20 53.56 53.98 54.02 T:isapa128v20 68.96 69.00 69.18 T:tinyjambu128v2 80.43 80.43 80.45 T:tinyjambu192v2 86.96 87.60 87.61 T:tinyjambu256v2 102.02 102.13 102.82 T!!!romulust 104.51 104.54 105.07 T:isapk128av20 135.03 135.24 141.92 T:isapk128v20 176.96 176.97 177.57 T:elephant200v2 206.41 206.50 209.35 T:isapxv20 9541.04 9585.26 9594.58 T:elephant176v2 10440.29 10443.37 10451.46 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.03 2.04 2.04 T:aes128gcmv1 2.34 2.35 2.36 aes256gcmv1 11.05 11.06 11.06 ascon128av12 16.46 16.46 16.47 ascon128v12 16.48 16.49 16.49 ascon80pqv12 16.48 16.52 16.57 T:xoodyakround3 22.87 22.87 22.89 ascon128abi32v12 32.26 32.26 32.27 T:schwaemm256128v2 33.72 33.72 34.65 ascon128bi32v12 35.88 35.93 35.93 T:isapa128v20 37.40 37.41 37.42 romulusn 40.03 40.04 40.05 T:schwaemm256256v2 40.45 40.47 41.02 T:grain128aeadv2 41.71 41.72 41.80 T:isapa128av20 42.97 42.97 42.98 T:schwaemm192192v2 43.47 43.47 43.48 T:schwaemm128128v2 47.05 47.07 47.09 T:giftcofb128v1 52.52 52.58 52.62 romulusm 52.87 52.90 52.98 T!!!romulust 68.97 69.00 69.00 T:tinyjambu128v2 80.43 80.43 80.54 T:tinyjambu192v2 83.37 83.42 85.76 T:isapk128av20 86.96 87.60 87.61 T:tinyjambu256v2 103.41 103.50 112.32 T:isapk128v20 154.24 154.29 154.66 T:isapxv20 176.96 176.97 177.02 T:elephant200v2 9538.57 9588.66 9592.10 T:elephant176v2 10439.45 10444.38 10456.47 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.27 1.29 1.31 aes256gcmv1 1.28 1.32 1.32 T:aes128gcmv1 10.05 10.08 10.29 T:xoodyakround3 11.07 11.08 11.09 ascon128av12 16.13 16.15 16.16 ascon80pqv12 16.26 16.27 16.28 ascon128v12 22.25 22.27 22.27 ascon128abi32v12 29.46 29.50 29.65 romulusm 29.59 29.82 30.18 romulusn 31.98 32.00 32.01 T:schwaemm256128v2 33.56 33.57 33.59 ascon128bi32v12 35.95 36.07 36.08 T:isapa128v20 39.80 39.81 39.82 T:schwaemm256256v2 40.24 40.29 40.48 T:grain128aeadv2 41.80 41.81 41.84 T:isapa128av20 42.72 42.74 42.75 T:schwaemm192192v2 43.34 43.34 43.35 T:schwaemm128128v2 47.05 47.71 47.73 T:giftcofb128v1 52.94 52.97 52.98 T!!!romulust 53.67 53.69 53.71 T:tinyjambu128v2 56.27 56.28 56.31 T:tinyjambu256v2 58.28 58.29 58.31 T:tinyjambu192v2 83.46 83.54 83.63 T:isapk128av20 103.42 103.58 111.92 T:isapk128v20 116.80 116.83 116.91 T:elephant200v2 154.45 154.48 154.58 T:isapxv20 6321.50 6338.56 6348.21 T:elephant176v2 6948.64 6962.29 6973.12 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.23 1.26 1.26 T:aes128gcmv1 1.26 1.29 1.30 aes256gcmv1 10.01 10.04 10.05 T:xoodyakround3 10.93 10.96 10.97 ascon128av12 16.14 16.15 16.16 ascon128v12 16.26 16.28 16.29 ascon80pqv12 22.45 22.46 22.47 ascon128abi32v12 29.52 29.55 29.71 romulusm 30.02 30.16 30.18 romulusn 31.97 31.99 32.01 T:schwaemm256128v2 33.31 33.33 33.34 ascon128bi32v12 35.95 36.07 36.10 T:isapa128v20 39.80 39.81 39.82 T:schwaemm256256v2 40.09 40.11 40.13 T:grain128aeadv2 41.79 41.82 41.84 T:isapa128av20 42.73 42.74 42.75 T:schwaemm192192v2 43.33 43.34 43.36 T:schwaemm128128v2 47.25 47.28 47.70 T:giftcofb128v1 52.95 52.98 53.00 T!!!romulust 53.14 53.16 53.17 T:tinyjambu128v2 58.28 58.30 58.31 T:tinyjambu192v2 59.03 59.04 59.06 T:tinyjambu256v2 83.01 83.16 83.21 T:isapk128av20 103.69 103.81 113.34 T:isapk128v20 116.81 116.82 116.86 T:elephant200v2 154.40 154.50 155.15 T:isapxv20 6315.30 6338.25 6345.04 T:elephant176v2 6952.12 6965.86 6974.02 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.24 1.24 1.25 T:aes128gcmv1 1.27 1.29 1.30 aes256gcmv1 10.06 10.09 10.30 T:xoodyakround3 10.94 10.96 10.97 ascon128av12 16.14 16.15 16.16 ascon128v12 16.26 16.28 16.28 ascon80pqv12 22.46 22.46 22.46 ascon128abi32v12 29.53 29.56 29.72 romulusm 30.14 30.17 30.18 romulusn 31.98 31.99 32.01 T:schwaemm256128v2 33.31 33.32 33.34 ascon128bi32v12 35.94 36.06 36.09 T:isapa128v20 39.80 39.81 39.82 T:schwaemm256256v2 40.09 40.11 40.15 T:grain128aeadv2 41.79 41.82 41.85 T:isapa128av20 42.73 42.74 42.75 T:schwaemm192192v2 43.34 43.34 43.36 T:schwaemm128128v2 47.70 47.71 47.72 T:giftcofb128v1 52.95 52.98 53.00 T!!!romulust 53.15 53.16 53.18 T:tinyjambu128v2 58.28 58.29 58.31 T:tinyjambu192v2 59.03 59.05 59.06 T:tinyjambu256v2 83.46 83.49 83.58 T:isapk128av20 103.40 103.49 108.02 T:isapk128v20 116.81 116.82 116.86 T:elephant200v2 154.42 154.47 154.54 T:isapxv20 6311.50 6337.99 6346.37 T:elephant176v2 6951.55 6964.41 6971.56 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.16 2.16 2.18 T:aes128gcmv1 2.41 2.41 2.42 aes256gcmv1 11.51 11.53 11.53 ascon128av12 16.69 16.70 16.71 ascon80pqv12 16.83 16.84 16.84 ascon128v12 17.07 17.27 17.29 T:xoodyakround3 23.30 23.30 23.32 ascon128abi32v12 33.21 33.22 33.23 T:schwaemm256128v2 34.22 34.22 34.23 ascon128bi32v12 37.51 37.54 37.96 romulusn 41.08 41.08 41.09 T:schwaemm256256v2 41.07 41.09 41.12 T:grain128aeadv2 43.88 43.88 43.90 T:schwaemm192192v2 44.03 44.03 44.04 T:schwaemm128128v2 47.84 47.95 47.96 T:giftcofb128v1 52.88 53.10 53.25 romulusm 56.48 56.54 56.54 T:isapa128av20 69.63 69.73 69.74 T:tinyjambu128v2 78.43 78.44 78.45 T:isapa128v20 81.04 81.04 81.05 T:tinyjambu192v2 84.70 84.71 84.71 T:tinyjambu256v2 104.07 104.09 104.26 T!!!romulust 122.51 122.54 122.66 T:isapk128av20 180.70 180.71 180.76 T:elephant200v2 242.28 242.38 251.44 T:isapk128v20 336.04 336.10 343.56 T:isapxv20 9620.74 9657.87 9662.35 T:elephant176v2 10560.71 10565.56 10569.29 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.18 2.19 2.21 T:aes128gcmv1 2.53 2.54 2.55 aes256gcmv1 11.31 11.32 11.32 ascon128av12 16.60 16.62 16.64 T:xoodyakround3 16.70 16.70 16.71 ascon128v12 16.73 16.73 16.73 ascon80pqv12 23.38 23.38 23.39 ascon128abi32v12 33.16 33.17 33.17 T:schwaemm256128v2 34.23 34.23 34.24 ascon128bi32v12 37.82 37.83 38.00 romulusn 40.95 40.96 40.97 T:grain128aeadv2 41.06 41.07 41.07 T:schwaemm256256v2 43.88 43.88 43.89 T:schwaemm192192v2 44.00 44.00 44.01 T:schwaemm128128v2 47.59 47.64 47.66 T:giftcofb128v1 52.93 53.00 53.07 romulusm 56.70 56.70 56.72 T:isapa128av20 69.52 69.54 69.67 T:tinyjambu128v2 78.46 78.48 78.74 T:isapa128v20 81.04 81.05 81.06 T:tinyjambu192v2 88.24 88.24 88.25 T:tinyjambu256v2 103.75 103.82 104.10 T!!!romulust 122.54 122.55 125.51 T:isapk128av20 180.70 180.71 181.40 T:elephant200v2 242.34 242.34 244.35 T:isapk128v20 336.04 336.06 336.63 T:isapxv20 9617.25 9657.26 9661.63 T:elephant176v2 10559.08 10563.02 10565.94 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.18 2.19 2.19 T:aes128gcmv1 2.53 2.53 2.54 aes256gcmv1 11.31 11.32 11.32 ascon128av12 16.66 16.67 16.70 T:xoodyakround3 16.70 16.70 16.70 ascon128v12 16.73 16.73 16.73 ascon80pqv12 23.37 23.39 23.39 ascon128abi32v12 33.16 33.16 33.20 T:schwaemm256128v2 34.22 34.23 34.23 ascon128bi32v12 37.82 37.83 37.83 romulusn 40.95 40.96 40.97 T:grain128aeadv2 41.06 41.07 41.07 T:schwaemm256256v2 43.88 43.88 43.88 T:schwaemm192192v2 44.00 44.00 44.00 T:schwaemm128128v2 44.03 44.04 44.04 T:isapa128av20 47.59 47.59 47.59 T:giftcofb128v1 48.36 48.37 48.38 T:isapa128v20 52.93 52.93 53.02 romulusm 54.49 54.51 54.52 T!!!romulust 69.53 69.54 69.56 T:tinyjambu128v2 81.05 81.05 81.06 T:tinyjambu192v2 88.24 88.25 88.25 T:tinyjambu256v2 90.68 90.70 94.57 T:isapk128av20 154.47 154.49 154.58 T:isapk128v20 180.70 180.71 181.36 T:elephant200v2 220.57 220.65 222.69 T:isapxv20 9620.99 9659.26 9661.96 T:elephant176v2 10561.18 10563.52 10570.56 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 8.83 9.14 9.45 T:aes128gcmv1 10.44 11.00 11.45 aes256gcmv1 17.12 17.14 17.52 ascon128av12 21.94 21.97 22.25 ascon128v12 22.08 22.23 22.44 ascon80pqv12 24.34 24.44 24.47 T:xoodyakround3 34.73 34.83 35.23 ascon128abi32v12 45.67 45.72 45.95 ascon128bi32v12 46.22 46.38 46.78 romulusn 52.39 52.48 53.25 T:grain128aeadv2 53.62 53.64 53.69 T:schwaemm256128v2 56.03 56.12 56.27 T:schwaemm128128v2 59.08 59.17 59.83 T:giftcofb128v1 61.48 61.94 62.16 romulusm 64.27 64.33 64.41 T:schwaemm256256v2 70.27 70.36 70.95 T:schwaemm192192v2 82.19 82.42 82.58 T:tinyjambu128v2 94.95 95.06 95.16 T:tinyjambu192v2 99.55 99.70 99.77 T:tinyjambu256v2 142.73 142.88 143.14 T!!!romulust 144.34 144.56 144.72 T:isapa128av20 254.97 255.27 255.59 T:elephant200v2 514.39 514.61 515.00 T:isapk128av20 639.56 639.72 640.70 T:isapa128v20 2678.16 2678.36 2736.97 T:isapk128v20 3278.97 3279.27 3280.59 T:isapxv20 11974.80 11976.19 12126.56 T:elephant176v2 14079.64 14081.47 14241.33 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 8.92 9.00 9.31 T:aes128gcmv1 10.52 10.77 10.91 aes256gcmv1 17.05 17.17 17.25 ascon128av12 21.98 22.02 22.33 ascon128v12 22.14 22.33 22.52 ascon80pqv12 23.86 24.00 24.09 T:xoodyakround3 35.06 35.12 35.34 ascon128abi32v12 45.80 45.84 46.03 ascon128bi32v12 46.47 46.52 46.81 romulusn 52.25 52.39 52.50 T:grain128aeadv2 53.55 53.67 53.77 T:schwaemm256128v2 55.97 56.03 56.09 T:schwaemm128128v2 59.12 59.19 59.44 T:giftcofb128v1 64.16 64.25 64.30 T:schwaemm256256v2 64.06 64.78 65.28 romulusm 70.34 70.44 70.56 T:schwaemm192192v2 82.23 82.34 82.39 T:tinyjambu128v2 95.14 95.27 95.34 T:tinyjambu192v2 102.95 103.11 103.17 T:tinyjambu256v2 142.62 142.98 143.67 T!!!romulust 147.92 148.23 148.52 T:isapa128av20 254.78 255.00 255.08 T:elephant200v2 514.80 514.95 515.44 T:isapk128av20 639.94 640.27 640.61 T:isapa128v20 2679.78 2680.09 2683.72 T:isapk128v20 3279.22 3279.53 3280.86 T:isapxv20 11972.48 11975.78 12056.34 T:elephant176v2 14079.89 14094.09 14236.47 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 8.72 8.97 8.97 T:aes128gcmv1 10.25 10.36 10.75 aes256gcmv1 17.11 17.11 17.12 ascon128av12 21.94 21.95 21.98 ascon128v12 22.08 22.09 22.12 ascon80pqv12 24.05 24.14 24.58 T:xoodyakround3 35.05 35.08 35.14 ascon128abi32v12 45.77 45.81 45.91 ascon128bi32v12 46.56 46.61 46.70 romulusn 52.27 52.33 52.38 T:grain128aeadv2 53.47 53.53 53.59 T:schwaemm256128v2 55.95 56.02 56.09 T:schwaemm128128v2 58.91 59.00 59.06 T:giftcofb128v1 64.16 64.27 64.30 T:schwaemm256256v2 64.09 64.48 64.84 romulusm 70.20 70.33 70.44 T:schwaemm192192v2 82.19 82.30 82.36 T:tinyjambu128v2 91.23 91.48 91.72 T!!!romulust 95.12 95.22 95.33 T:tinyjambu192v2 96.47 96.59 96.75 T:isapa128av20 103.00 103.11 103.20 T:tinyjambu256v2 240.19 240.28 240.75 T:isapk128av20 254.83 254.92 255.05 T:elephant200v2 334.27 335.80 337.03 T:isapa128v20 1304.91 1305.16 1307.05 T:isapk128v20 1716.88 1717.14 1717.56 T:isapxv20 11974.16 11975.92 12133.28 T:elephant176v2 14079.78 14126.48 14325.03 T:elephant160v2