VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1800MHz; tinker, supercop-20240107

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 15.80 15.85 15.91 ascon128abi32v12 20.41 20.42 20.43 ascon128av12 24.11 24.13 24.15 ascon128bi32v12 24.84 25.47 25.81 T:aes128gcmv1 30.22 30.25 30.37 ascon80pqv12 30.32 30.38 30.44 ascon128v12 30.39 31.11 31.88 T:aes256gcmv1 33.31 33.33 33.36 T:schwaemm256128v2 43.83 43.85 43.86 T:schwaemm192192v2 45.66 46.10 46.13 T:xoodyakround3 46.79 46.87 47.53 T:schwaemm128128v2 47.88 47.92 47.97 T:schwaemm256256v2 50.35 50.39 50.50 T:giftcofb128v1 80.24 80.25 80.31 T:tinyjambu128v2 80.84 81.09 81.54 T:isapa128av20 96.74 96.77 96.86 T:tinyjambu192v2 97.46 97.50 97.78 romulusn 102.32 102.34 103.34 T:tinyjambu256v2 103.90 104.30 104.89 T:isapa128v20 146.38 146.47 146.68 romulusm 157.67 157.83 158.09 T:isapk128av20 210.60 210.73 210.95 T:isapk128v20 289.17 289.34 289.65 romulust 319.37 319.41 319.64 T:elephant200v2 436.94 437.50 440.05 T:isapxv20 18216.65 18227.77 18269.83 T:elephant176v2 19899.81 19929.77 20012.90 T:elephant160v2 26422.84 26429.33 26520.62 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 15.72 15.74 15.79 ascon128abi32v12 20.24 20.25 20.25 ascon128av12 24.34 24.37 24.42 ascon128bi32v12 25.01 25.37 25.83 T:aes128gcmv1 30.34 30.36 30.48 ascon80pqv12 30.47 30.52 30.59 ascon128v12 30.79 31.59 32.82 T:aes256gcmv1 33.31 33.31 33.33 T:schwaemm256128v2 43.82 43.84 43.84 T:schwaemm192192v2 43.44 44.00 44.03 T:xoodyakround3 46.83 46.86 46.88 T:schwaemm128128v2 48.05 48.06 48.13 T:schwaemm256256v2 50.47 50.50 50.60 T:giftcofb128v1 76.99 77.00 77.10 T:tinyjambu128v2 80.74 81.07 81.57 T:isapa128av20 97.75 97.75 98.06 T:tinyjambu192v2 97.64 97.77 97.86 romulusn 103.76 104.43 104.87 T:isapa128v20 109.00 109.13 109.18 T:tinyjambu256v2 146.31 146.36 146.45 romulusm 157.70 157.82 157.99 T:isapk128av20 210.52 210.68 211.10 T:isapk128v20 288.89 289.22 289.30 romulust 319.38 319.43 319.77 T:elephant200v2 435.72 436.63 437.69 T:isapxv20 18216.54 18228.68 18240.61 T:elephant176v2 19900.79 19915.51 19958.88 T:elephant160v2 26425.17 26438.47 26535.74 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 15.74 15.75 15.78 ascon128abi32v12 20.25 20.25 20.26 ascon128av12 24.34 24.38 24.42 ascon128bi32v12 24.71 25.55 25.74 T:aes128gcmv1 30.34 30.38 30.41 ascon80pqv12 30.49 30.51 30.53 ascon128v12 30.74 31.24 31.79 T:aes256gcmv1 33.31 33.31 33.32 T:schwaemm256128v2 43.83 43.84 43.85 T:schwaemm192192v2 43.67 44.26 45.32 T:xoodyakround3 46.85 46.86 46.87 T:schwaemm128128v2 48.04 48.06 48.14 T:schwaemm256256v2 50.49 50.51 50.60 T:giftcofb128v1 51.36 51.85 52.47 T:isapa128v20 51.61 51.96 52.49 T:isapa128av20 77.00 77.01 77.09 T:tinyjambu128v2 97.30 97.34 97.44 romulust 97.66 97.76 97.81 romulusn 97.74 97.76 98.08 T:tinyjambu192v2 104.25 104.34 104.52 T:isapk128av20 109.00 109.13 109.16 T:tinyjambu256v2 130.66 130.78 130.95 T:isapk128v20 146.31 146.37 146.44 romulusm 207.94 208.22 209.60 T:isapxv20 319.41 319.59 321.04 T:elephant200v2 723.12 725.27 731.11 aes256gcmv1 18217.02 18229.49 18297.64 T:elephant176v2 19898.29 19910.11 20017.70 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 15.75 15.79 15.90 ascon128abi32v12 16.97 17.15 17.88 T:aes128gcmv1 19.69 19.99 20.75 T:aes256gcmv1 20.24 20.28 20.43 ascon128av12 23.79 23.82 23.89 ascon128bi32v12 28.11 28.13 28.22 ascon80pqv12 28.17 28.19 28.32 ascon128v12 33.30 33.32 33.37 T:schwaemm256128v2 34.20 34.50 34.53 T:xoodyakround3 43.67 43.67 43.72 T:schwaemm192192v2 46.65 46.66 46.75 T:schwaemm128128v2 47.75 47.76 47.82 T:schwaemm256256v2 50.56 50.58 50.86 T:giftcofb128v1 65.74 65.74 65.80 T:tinyjambu128v2 66.36 66.58 67.52 T:isapa128av20 72.95 72.97 73.06 romulusn 75.49 75.51 75.59 T:tinyjambu192v2 77.12 77.66 82.08 T:tinyjambu256v2 77.90 78.16 78.39 T:isapa128v20 97.38 97.41 97.51 romulusm 130.96 131.04 131.17 T:isapk128av20 169.84 170.04 170.75 T:isapk128v20 193.07 193.14 193.86 romulust 240.48 240.63 241.37 T:elephant200v2 321.00 322.06 325.81 T:isapxv20 13572.59 13580.00 13628.15 aes256gcmv1 13612.75 13619.05 13666.64 T:elephant176v2 14924.53 14930.35 14981.52 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 15.65 15.69 15.78 ascon128abi32v12 16.75 17.18 17.65 T:aes128gcmv1 20.11 20.12 20.17 ascon128av12 19.72 20.13 20.45 T:aes256gcmv1 24.09 24.13 24.19 ascon128bi32v12 28.15 28.25 28.33 ascon80pqv12 28.27 28.32 28.44 ascon128v12 33.31 33.33 33.39 T:schwaemm256128v2 33.44 33.45 33.48 T:xoodyakround3 43.65 43.67 43.80 T:schwaemm192192v2 46.66 46.68 46.74 T:schwaemm128128v2 47.83 47.84 47.87 T:schwaemm256256v2 50.60 50.64 50.89 T:giftcofb128v1 64.16 64.25 64.25 T:tinyjambu128v2 66.38 66.55 66.84 T:isapa128av20 73.03 73.10 73.11 romulusn 76.68 76.74 76.87 T:tinyjambu192v2 78.00 78.41 79.05 T:isapa128v20 79.62 79.64 79.67 T:tinyjambu256v2 97.35 97.40 97.47 romulusm 130.96 131.00 131.12 T:isapk128av20 170.65 170.75 171.50 T:isapk128v20 193.02 193.12 194.03 romulust 240.51 240.68 241.43 T:elephant200v2 321.98 322.98 323.67 T:isapxv20 13574.74 13582.87 13629.79 aes256gcmv1 13613.32 13617.19 13663.65 T:elephant176v2 14926.49 14938.05 14978.33 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 15.66 15.68 15.72 ascon128abi32v12 16.88 17.27 17.61 T:aes128gcmv1 20.11 20.11 20.17 ascon128av12 19.78 20.19 20.85 T:aes256gcmv1 24.11 24.14 24.23 ascon128bi32v12 28.17 28.20 28.30 ascon80pqv12 28.30 28.38 28.42 ascon128v12 33.30 33.31 33.38 T:schwaemm256128v2 33.56 33.58 33.61 T:xoodyakround3 43.66 43.67 43.72 T:schwaemm192192v2 46.67 46.68 46.74 T:schwaemm128128v2 47.84 47.85 47.98 T:schwaemm256256v2 50.61 50.64 50.90 T:giftcofb128v1 51.66 51.97 52.24 T:isapa128v20 51.80 52.05 52.31 T:isapa128av20 64.12 64.14 64.19 T:tinyjambu128v2 73.05 73.10 73.13 romulusn 76.67 76.69 76.83 T:tinyjambu192v2 79.62 79.64 79.77 T:tinyjambu256v2 97.14 97.17 97.24 romulust 97.38 97.39 98.21 romulusm 104.19 104.25 105.01 T:isapk128av20 130.60 130.76 131.48 T:isapk128v20 208.07 208.20 208.91 T:isapxv20 240.52 240.66 241.45 T:elephant200v2 723.81 724.77 728.18 aes256gcmv1 13611.46 13615.32 13665.68 T:elephant176v2 14927.06 14931.48 14980.86 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 8.61 9.05 9.42 T:aes128gcmv1 8.56 9.10 9.32 T:aes256gcmv1 15.67 15.71 15.76 ascon128abi32v12 20.11 20.13 20.17 ascon128av12 22.70 22.91 22.93 T:xoodyakround3 23.48 23.51 23.57 ascon128bi32v12 25.96 26.01 26.32 ascon128v12 25.94 26.02 26.13 ascon80pqv12 33.31 33.32 33.38 T:schwaemm256128v2 43.50 43.51 43.52 T:schwaemm192192v2 46.53 47.27 47.31 T:schwaemm128128v2 47.62 47.64 47.65 T:schwaemm256256v2 48.39 48.41 48.45 romulusm 48.42 48.45 48.48 romulusn 50.73 50.75 51.20 T:giftcofb128v1 51.49 51.50 51.57 T:tinyjambu128v2 51.88 51.90 52.02 T:tinyjambu256v2 51.50 52.05 52.57 T:isapa128v20 51.81 52.18 52.66 T:isapa128av20 54.25 54.26 54.33 T:tinyjambu192v2 96.97 96.99 97.13 romulust 104.16 104.25 104.50 T:isapk128av20 130.30 130.75 130.83 T:isapk128v20 162.58 162.64 162.75 T:elephant200v2 207.98 208.17 208.29 T:isapxv20 722.58 724.57 731.57 aes256gcmv1 9004.59 9011.50 9065.44 T:elephant176v2 9946.61 9955.02 9964.77 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 8.79 8.97 9.25 T:aes128gcmv1 8.56 9.04 9.26 T:aes256gcmv1 15.56 15.63 15.70 ascon128abi32v12 20.06 20.08 20.14 ascon128av12 22.69 22.90 22.92 T:xoodyakround3 23.81 23.88 23.93 ascon128bi32v12 25.95 26.01 26.18 ascon80pqv12 26.07 26.12 26.27 ascon128v12 33.30 33.32 33.34 T:schwaemm256128v2 43.50 43.50 43.52 T:schwaemm192192v2 46.48 46.67 47.29 T:schwaemm128128v2 47.61 47.63 47.65 T:schwaemm256256v2 48.40 48.42 48.45 romulusm 48.43 48.44 48.48 romulusn 50.73 50.77 51.19 T:giftcofb128v1 51.49 51.50 51.51 T:tinyjambu128v2 51.44 51.99 52.73 T:isapa128v20 51.69 52.03 52.57 T:isapa128av20 52.75 52.76 52.97 T:tinyjambu256v2 55.61 55.62 55.69 T:tinyjambu192v2 96.94 96.99 97.18 romulust 104.10 104.20 104.29 T:isapk128av20 130.65 130.79 130.92 T:isapk128v20 162.59 162.66 162.78 T:elephant200v2 208.02 208.19 208.47 T:isapxv20 723.49 724.59 730.92 aes256gcmv1 9007.54 9012.14 9016.34 T:elephant176v2 9947.33 9958.84 9964.95 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 8.50 8.99 9.41 T:aes128gcmv1 8.76 9.13 9.24 T:aes256gcmv1 15.61 15.63 15.68 ascon128abi32v12 20.07 20.14 20.14 ascon128av12 22.70 22.91 22.92 T:xoodyakround3 23.85 23.86 23.90 ascon128bi32v12 25.96 26.01 26.09 ascon80pqv12 26.10 26.12 26.16 ascon128v12 33.29 33.31 33.34 T:schwaemm256128v2 43.50 43.50 43.51 T:schwaemm192192v2 46.49 47.25 47.28 T:schwaemm128128v2 47.61 47.63 47.65 T:schwaemm256256v2 48.41 48.42 48.44 romulusm 48.43 48.45 48.47 romulusn 50.74 50.76 50.77 T:giftcofb128v1 51.49 51.50 51.50 T:tinyjambu128v2 51.44 52.02 52.57 T:isapa128v20 51.75 52.05 52.60 T:isapa128av20 52.75 52.76 52.83 T:tinyjambu256v2 55.62 55.63 55.66 T:tinyjambu192v2 96.96 96.98 97.04 romulust 104.13 104.20 104.32 T:isapk128av20 130.63 130.73 130.83 T:isapk128v20 162.59 162.66 162.82 T:elephant200v2 208.14 208.27 209.69 T:isapxv20 722.38 724.30 730.95 aes256gcmv1 9008.18 9013.40 9019.66 T:elephant176v2 9952.04 9956.36 9962.16 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 16.38 16.39 16.40 ascon128abi32v12 20.97 20.97 20.98 ascon128av12 20.89 21.00 21.84 T:aes128gcmv1 24.03 24.11 25.01 T:aes256gcmv1 24.41 24.42 24.49 ascon128bi32v12 28.77 28.78 28.88 ascon80pqv12 28.82 28.82 28.96 ascon128v12 34.52 34.53 34.59 T:schwaemm256128v2 34.83 34.84 34.95 T:xoodyakround3 44.86 44.86 44.92 T:schwaemm192192v2 47.58 48.20 48.21 T:schwaemm128128v2 49.27 49.28 49.30 T:schwaemm256256v2 51.41 51.41 51.65 T:giftcofb128v1 66.41 66.53 66.55 T:tinyjambu128v2 71.69 71.72 71.98 T:isapa128av20 73.77 73.77 73.83 romulusn 76.42 76.43 76.57 T:tinyjambu192v2 78.03 78.04 78.46 T:tinyjambu256v2 98.25 98.26 98.34 romulusm 111.12 111.16 111.44 T:isapa128v20 148.44 148.52 149.42 T:isapk128av20 195.93 196.02 196.12 romulust 245.86 245.88 246.06 T:elephant200v2 294.68 295.42 295.70 T:isapk128v20 503.70 504.66 505.31 T:isapxv20 13717.23 13718.31 13738.55 T:elephant176v2 13848.68 13855.57 13901.56 aes256gcmv1 15097.31 15101.01 15158.99 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 16.31 16.32 16.39 ascon128abi32v12 20.82 20.82 20.83 ascon128av12 20.86 21.09 21.59 T:aes128gcmv1 23.89 24.16 24.69 T:aes256gcmv1 24.73 24.75 24.81 ascon128bi32v12 28.85 28.85 29.02 ascon80pqv12 28.95 28.96 29.04 ascon128v12 33.80 33.81 33.89 T:xoodyakround3 34.51 34.51 34.60 T:schwaemm256128v2 44.86 44.86 44.94 T:schwaemm192192v2 47.53 47.54 47.58 T:schwaemm128128v2 49.34 49.34 49.38 T:schwaemm256256v2 51.47 51.48 51.54 T:giftcofb128v1 65.03 65.04 65.06 T:tinyjambu128v2 71.69 71.80 72.01 T:isapa128av20 73.86 73.91 74.00 romulusn 77.62 77.71 77.80 T:tinyjambu192v2 80.48 80.49 80.53 T:tinyjambu256v2 98.23 98.25 98.36 romulusm 111.11 111.16 111.46 T:isapa128v20 148.44 148.46 148.52 T:isapk128av20 195.90 196.04 196.25 romulust 245.90 245.93 246.15 T:elephant200v2 295.45 295.47 295.69 T:isapk128v20 504.61 505.27 505.72 T:isapxv20 13717.86 13720.54 13727.12 T:elephant176v2 13849.32 13854.14 13908.10 aes256gcmv1 15096.21 15101.23 15144.32 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 16.31 16.31 16.36 ascon128abi32v12 20.82 20.82 20.83 ascon128av12 20.88 21.11 21.68 T:aes128gcmv1 23.92 24.13 24.99 T:aes256gcmv1 24.72 24.73 24.81 ascon128bi32v12 28.84 28.86 28.94 ascon80pqv12 28.95 28.96 29.11 ascon128v12 33.93 33.94 34.02 T:xoodyakround3 34.51 34.51 34.57 T:schwaemm256128v2 44.86 44.86 44.92 T:schwaemm192192v2 47.54 47.54 47.63 T:schwaemm128128v2 49.34 49.34 49.38 T:schwaemm256256v2 51.47 51.47 51.74 T:giftcofb128v1 55.04 55.12 55.43 T:isapa128av20 64.91 64.92 64.97 T:tinyjambu128v2 69.02 69.32 69.53 T:isapa128v20 73.86 73.91 73.92 romulusn 77.62 77.63 77.78 T:tinyjambu192v2 80.49 80.51 80.96 T:tinyjambu256v2 98.24 98.25 98.38 romulusm 100.07 100.08 100.17 romulust 114.31 114.34 114.53 T:isapk128av20 194.25 194.68 194.74 T:isapk128v20 245.90 245.95 247.00 T:elephant200v2 302.46 302.55 303.39 T:isapxv20 995.76 996.34 999.97 aes256gcmv1 13717.49 13720.53 13782.24 T:elephant176v2 15095.68 15101.61 15164.88 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 30.31 30.42 31.89 ascon128abi32v12 36.92 37.01 37.40 ascon128av12 38.07 38.16 38.76 ascon128bi32v12 43.16 43.22 45.00 ascon128v12 43.48 43.59 45.16 ascon80pqv12 56.41 56.50 56.72 T:xoodyakround3 62.00 62.03 62.20 T:schwaemm256128v2 67.32 67.38 67.47 T:schwaemm128128v2 70.28 70.60 71.67 T:giftcofb128v1 78.45 78.55 78.80 T:schwaemm192192v2 83.22 83.22 83.30 T:schwaemm256256v2 84.80 84.87 85.03 T:tinyjambu128v2 92.16 92.27 92.93 romulusn 97.30 97.34 98.13 T:tinyjambu192v2 97.33 97.39 97.83 T:tinyjambu256v2 105.90 107.01 113.54 T:aes128gcmv1 111.76 114.17 119.16 T:aes256gcmv1 117.30 117.39 117.79 romulusm 189.39 190.54 195.75 T:isapa128av20 263.06 263.12 263.78 romulust 355.08 355.44 357.12 T:elephant200v2 522.19 522.33 524.15 T:isapk128av20 869.85 872.65 877.41 T:isapa128v20 3129.31 3129.57 3131.19 T:isapk128v20 4668.79 4671.05 4672.71 T:isapxv20 17062.82 17067.89 17164.25 T:elephant176v2 20069.54 20090.10 20169.98 aes256gcmv1 20190.01 20193.32 20290.12 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 30.56 30.70 31.84 ascon128abi32v12 36.84 37.02 37.22 ascon128av12 38.59 38.75 39.28 ascon128bi32v12 43.52 43.64 44.84 ascon128v12 43.71 43.76 44.94 ascon80pqv12 55.73 55.77 56.12 T:xoodyakround3 61.98 62.10 62.11 T:schwaemm256128v2 67.12 67.20 67.33 T:schwaemm128128v2 70.55 70.61 71.00 T:giftcofb128v1 78.72 78.74 78.92 T:schwaemm192192v2 83.14 83.16 83.27 T:tinyjambu128v2 83.37 83.49 83.60 T:schwaemm256256v2 92.31 92.34 92.57 romulusn 99.02 99.24 99.79 T:tinyjambu192v2 100.05 100.21 101.20 T:tinyjambu256v2 104.56 106.28 110.36 T:aes128gcmv1 111.12 111.98 119.45 T:aes256gcmv1 117.63 117.67 117.94 romulusm 189.41 190.85 193.60 T:isapa128av20 263.41 263.48 264.25 romulust 355.55 355.86 357.37 T:elephant200v2 522.52 522.73 523.76 T:isapk128av20 868.53 870.16 876.05 T:isapa128v20 3129.45 3129.91 3131.84 T:isapk128v20 4668.12 4668.81 4670.88 T:isapxv20 17062.89 17065.07 17161.39 T:elephant176v2 20063.91 20089.32 20183.84 aes256gcmv1 20191.09 20287.42 20371.75 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 30.39 30.47 31.38 ascon128abi32v12 36.84 36.94 37.06 ascon128av12 38.29 38.44 38.70 ascon128bi32v12 43.52 43.69 44.08 ascon128v12 43.73 43.80 44.57 ascon80pqv12 55.99 56.00 56.22 T:xoodyakround3 62.09 62.11 62.27 T:schwaemm256128v2 67.03 67.20 67.29 T:schwaemm128128v2 70.55 70.59 70.83 T:giftcofb128v1 78.72 78.79 78.91 T:schwaemm192192v2 83.12 83.15 83.17 T:tinyjambu128v2 83.37 83.38 83.49 T:schwaemm256256v2 92.34 92.37 92.50 romulusn 99.08 99.24 99.42 T:tinyjambu192v2 100.07 100.18 101.20 T:tinyjambu256v2 103.80 105.47 109.34 T:aes128gcmv1 110.42 111.74 115.35 T:aes256gcmv1 117.62 117.68 117.76 romulusm 126.03 126.83 131.86 T:isapa128av20 166.91 167.04 167.45 romulust 324.17 324.29 325.91 T:isapk128av20 355.62 355.84 356.78 T:elephant200v2 458.33 459.76 467.68 T:isapa128v20 1638.85 1638.87 1639.79 T:isapk128v20 2431.59 2432.21 2434.35 T:isapxv20 7235.15 7236.03 7241.19 aes256gcmv1 17063.38 17065.23 17161.86 T:elephant176v2 20189.94 20194.16 20292.76 T:elephant160v2