VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,big, supercop-20250922

[Page version: 20251103 11:56:58]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.43 1.44 1.46 T:aes128gcmv1 1.52 1.55 1.56 aes256gcmv1 6.53 6.56 6.63 ascon128av12 9.95 9.98 10.03 ascon128v12 9.96 10.05 10.13 ascon80pqv12 12.61 12.72 12.76 T:schwaemm256128v2 12.85 12.88 12.92 ascon128abi32v12 13.78 13.84 13.90 T:xoodyakround3 16.66 16.76 16.83 T:schwaemm192192v2 17.44 17.52 17.63 T:schwaemm256256v2 19.27 19.35 19.41 ascon128bi32v12 20.00 20.04 20.08 T:schwaemm128128v2 24.47 24.53 24.60 T:grain128aeadv2 37.91 38.11 38.88 T:isapa128v20 38.72 38.77 38.80 romulusn 39.03 39.16 39.29 T:isapa128av20 39.89 39.97 40.09 T:giftcofb128v1 50.90 51.23 52.16 T:isapk128av20 54.87 54.93 55.08 T:tinyjambu128v2 62.17 62.22 62.25 romulusm 66.39 66.49 66.57 T:tinyjambu192v2 67.86 68.41 69.81 T:isapk128v20 71.32 71.45 71.51 T:tinyjambu256v2 125.57 125.64 125.71 romulust 129.79? 132.25? 148.20? T:isapxv20 138.44 138.56 138.72 T:elephant200v2 5519.01 5525.56 5539.15 T:elephant176v2 5885.60 5886.86 5887.85 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.29 1.29 1.30 T:aes128gcmv1 1.40 1.41 1.42 aes256gcmv1 6.54 6.56 6.59 ascon128av12 9.72 9.77 9.87 ascon80pqv12 9.89 9.92 9.95 ascon128v12 12.56 12.65 12.69 T:schwaemm256128v2 13.03 13.09 13.14 ascon128abi32v12 13.70 13.76 13.87 T:xoodyakround3 16.61 16.70 16.78 T:schwaemm192192v2 17.41 17.48 17.53 T:schwaemm256256v2 19.27 19.35 19.39 ascon128bi32v12 19.88 19.91 19.99 T:schwaemm128128v2 23.87 23.90 23.92 T:grain128aeadv2 37.88 38.46 38.76 T:isapa128v20 38.75 38.78 38.87 romulusn 39.01 39.14 39.27 T:isapa128av20 39.95 40.02 40.06 T:giftcofb128v1 50.68 51.22 51.96 T:isapk128av20 54.80 54.89 54.93 T:tinyjambu128v2 62.13 62.19 62.27 romulusm 66.38 66.48 66.55 T:tinyjambu192v2 67.81 68.70 70.14 T:isapk128v20 71.29 71.33 71.40 T:tinyjambu256v2 125.58 125.71 125.78 romulust 128.76 130.95 135.65 T:isapxv20 138.56 138.94 139.03 T:elephant200v2 5518.08 5526.24 5532.04 T:elephant176v2 5884.03 5886.73 5888.79 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.29 1.29 1.30 T:aes128gcmv1 1.41 1.41 1.42 aes256gcmv1 6.52 6.58 6.61 ascon128av12 9.75 9.77 9.81 ascon80pqv12 9.86 9.92 9.94 ascon128v12 12.58 12.67 12.75 T:schwaemm256128v2 12.96 13.00 13.08 ascon128abi32v12 13.76 13.80 13.87 T:xoodyakround3 16.62 16.72 16.81 T:schwaemm192192v2 17.39 17.46 17.53 T:schwaemm256256v2 18.80 18.90 18.97 T:isapa128v20 19.26 19.34 19.41 ascon128bi32v12 19.87 19.92 19.95 T:schwaemm128128v2 23.89 23.93 23.95 T:grain128aeadv2 26.55 26.61 26.66 T:isapa128av20 34.15 34.35 34.60 T:isapk128av20 38.73 38.78 38.84 romulusn 40.00 40.05 40.10 T:giftcofb128v1 42.00 42.99 43.36 T:isapk128v20 43.24 43.33 43.44 romulust 54.80 54.89 55.01 T:tinyjambu128v2 62.19 62.24 62.30 romulusm 66.31 66.37 66.45 T:tinyjambu192v2 71.33 71.46 71.67 T:tinyjambu256v2 77.84 78.89 81.02 T:isapxv20 138.66 138.76 138.96 T:elephant200v2 5517.81 5526.00 5534.46 T:elephant176v2 5884.98 5885.99 5887.41 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.86 0.87 0.88 T:aes128gcmv1 0.92 0.92 0.93 aes256gcmv1 6.56 6.61 6.64 ascon128av12 9.93 9.96 9.98 ascon128v12 10.03 10.05 10.08 ascon80pqv12 10.72 10.77 10.90 T:xoodyakround3 12.51 12.55 12.62 T:schwaemm256128v2 13.18 13.30 13.46 ascon128abi32v12 16.63 16.70 16.75 T:schwaemm192192v2 17.34 17.41 17.48 T:schwaemm256256v2 19.40 19.48 19.56 ascon128bi32v12 19.96 19.99 20.01 T:schwaemm128128v2 24.48 24.52 24.54 T:grain128aeadv2 28.63 28.72 29.02 T:isapa128v20 31.09 31.13 31.15 romulusn 32.85 32.87 32.94 T:isapa128av20 39.89 39.92 39.97 T:giftcofb128v1 42.79 42.83 42.87 romulusm 42.74 43.03 43.45 T:isapk128av20 44.87 45.00 45.06 T:tinyjambu128v2 51.88 52.03 52.19 T:tinyjambu192v2 53.94 53.99 54.03 T:tinyjambu256v2 54.93 55.77 56.31 T:isapk128v20 84.36 84.41 84.47 romulust 103.76 103.90 103.97 T:elephant200v2 104.30 107.61 113.81 T:isapxv20 4120.86 4124.72 4130.39 T:elephant176v2 4412.86 4413.84 4414.61 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.79 0.80 0.80 T:aes128gcmv1 0.85 0.85 0.86 aes256gcmv1 6.54 6.57 6.60 ascon128av12 9.87 9.90 9.94 ascon128v12 9.87 9.92 9.95 ascon80pqv12 10.63 10.69 10.75 T:xoodyakround3 12.53 12.56 12.60 T:schwaemm256128v2 13.16 13.24 13.34 ascon128abi32v12 16.57 16.62 16.72 T:schwaemm192192v2 17.33 17.42 17.48 T:schwaemm256256v2 19.39 19.50 19.56 ascon128bi32v12 19.94 19.96 19.99 T:schwaemm128128v2 24.18 24.21 24.23 T:grain128aeadv2 28.73 29.02 29.14 T:isapa128v20 31.13 31.15 31.20 romulusn 32.83 32.88 32.91 T:isapa128av20 39.94 39.95 39.98 T:giftcofb128v1 42.80 42.84 42.87 romulusm 42.56 42.91 43.41 T:isapk128av20 44.89 44.94 44.98 T:tinyjambu128v2 52.06 52.13 52.25 T:tinyjambu192v2 53.87 53.93 53.98 T:tinyjambu256v2 55.17 55.81 56.53 T:isapk128v20 84.35 84.40 84.47 romulust 104.03 104.18 104.72 T:elephant200v2 103.54 104.35 106.45 T:isapxv20 4123.65 4127.65 4134.49 T:elephant176v2 4412.92 4414.54 4415.93 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.79 0.80 0.80 T:aes128gcmv1 0.85 0.85 0.86 aes256gcmv1 6.54 6.57 6.58 ascon128av12 9.83 9.89 9.94 ascon128v12 9.85 9.90 9.93 ascon80pqv12 10.65 10.68 10.72 T:xoodyakround3 12.52 12.56 12.61 T:schwaemm256128v2 13.15 13.30 13.46 ascon128abi32v12 16.61 16.66 16.69 T:schwaemm192192v2 17.35 17.42 17.46 T:schwaemm256256v2 19.06 19.15 19.22 T:isapa128v20 19.42 19.51 19.57 ascon128bi32v12 19.92 19.96 20.00 T:schwaemm128128v2 24.19 24.22 24.25 T:grain128aeadv2 26.63 26.66 26.69 T:isapa128av20 31.09 31.13 31.16 romulusn 33.97 34.40 34.65 T:isapk128av20 39.95 39.97 40.01 T:giftcofb128v1 42.17 42.66 43.21 T:isapk128v20 42.82 42.85 42.89 romulusm 43.22 43.25 43.30 romulust 44.91 44.95 44.99 T:tinyjambu128v2 52.00 52.05 52.08 T:tinyjambu192v2 53.92 53.94 53.99 T:tinyjambu256v2 77.73 80.87 81.26 T:isapxv20 103.92 104.03 104.08 T:elephant200v2 4123.59 4132.01 4135.19 T:elephant176v2 4413.35 4413.94 4416.06 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.28? 0.31? 0.33? T:aes128gcmv1 0.30 0.31 0.32 aes256gcmv1 6.53 6.55 6.57 ascon128av12 7.53 7.64 7.71 T:xoodyakround3 9.88 9.92 9.95 ascon128v12 9.92 9.95 9.98 ascon80pqv12 12.38 12.46 12.54 T:schwaemm256128v2 13.53 13.75 13.84 ascon128abi32v12 16.49 16.60 16.69 T:schwaemm192192v2 17.37 17.46 17.54 T:schwaemm256256v2 18.79 18.87 19.50 T:isapa128v20 19.50 19.58 19.68 ascon128bi32v12 19.96 20.03 20.06 T:schwaemm128128v2 23.43 23.47 23.53 romulusm 23.45 23.47 23.50 romulusn 24.49 24.52 24.57 T:grain128aeadv2 26.61 26.65 26.72 T:isapa128av20 33.64 33.81 34.06 T:isapk128av20 34.83 34.93 35.10 T:tinyjambu128v2 36.26 36.32 36.41 T:tinyjambu256v2 37.38 37.44 37.51 T:tinyjambu192v2 39.86 39.92 40.01 T:giftcofb128v1 41.39 42.31 43.69 T:isapk128v20 43.13 43.22 43.29 romulust 69.59 69.72 69.78 T:elephant200v2 77.07 80.32 80.70 T:isapxv20 2724.51 2733.89 2736.42 T:elephant176v2 2941.79 2942.72 2944.34 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.28? 0.30? 0.32? aes256gcmv1 0.29? 0.31? 0.33? T:aes128gcmv1 6.53 6.55 6.60 ascon128av12 7.53 7.62 7.68 T:xoodyakround3 9.87 9.92 9.94 ascon128v12 9.93 10.01 10.03 ascon80pqv12 12.39 12.43 12.49 T:schwaemm256128v2 13.20 13.32 13.50 ascon128abi32v12 16.51 16.60 16.66 T:schwaemm192192v2 17.25 17.32 17.41 T:schwaemm256256v2 18.78 19.38 19.57 T:isapa128v20 19.54 19.72 19.89 ascon128bi32v12 19.95 20.00 20.05 T:schwaemm128128v2 23.42 23.48 23.53 romulusm 23.45 23.49 23.53 romulusn 24.48 24.52 24.57 T:grain128aeadv2 26.57 26.61 26.66 T:isapa128av20 33.69 33.82 33.96 T:isapk128av20 34.72 34.86 34.96 T:tinyjambu128v2 36.27 36.38 36.53 T:tinyjambu256v2 37.69 37.73 37.80 T:tinyjambu192v2 39.85 39.92 39.99 T:giftcofb128v1 41.76 42.50 43.03 T:isapk128v20 43.14 43.21 43.27 romulust 69.52 69.78 69.84 T:elephant200v2 77.91 78.28 80.57 T:isapxv20 2725.37 2731.54 2735.80 T:elephant176v2 2941.03 2942.77 2943.99 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.29 0.31 0.32 aes256gcmv1 0.30 0.31 0.32 T:aes128gcmv1 6.54 6.56 6.58 ascon128av12 7.52 7.60 7.66 T:xoodyakround3 9.86 9.91 10.01 ascon80pqv12 9.88 9.91 9.93 ascon128v12 12.37 12.43 12.47 T:schwaemm256128v2 13.36 13.62 13.89 ascon128abi32v12 16.49 16.58 16.64 T:schwaemm192192v2 17.24 17.36 17.48 T:schwaemm256256v2 18.87 19.42 19.55 T:isapa128v20 19.46 19.61 19.73 ascon128bi32v12 19.98 20.00 20.04 T:schwaemm128128v2 23.41 23.46 23.49 romulusm 23.43 23.48 23.50 romulusn 24.48 24.52 24.56 T:grain128aeadv2 26.59 26.64 26.69 T:isapa128av20 33.66 33.93 34.22 T:isapk128av20 34.92 34.96 35.04 T:tinyjambu128v2 36.44 36.47 36.55 T:tinyjambu256v2 37.54 37.60 37.65 T:tinyjambu192v2 39.87 39.95 39.98 T:giftcofb128v1 41.69 42.73 43.28 T:isapk128v20 43.11 43.19 43.29 romulust 69.40 69.49 69.61 T:elephant200v2 77.33 80.36 80.89 T:isapxv20 2725.16 2729.64 2735.79 T:elephant176v2 2942.41 2943.10 2944.25 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.98 0.98 0.99 T:aes128gcmv1 1.05 1.06 1.07 aes256gcmv1 6.70 6.73 6.77 ascon128av12 10.06 10.08 10.10 ascon128v12 10.06 10.15 10.17 ascon80pqv12 10.82 10.83 10.86 T:xoodyakround3 12.89 12.95 13.00 T:schwaemm256128v2 13.39 13.46 13.67 ascon128abi32v12 17.04 17.06 17.11 T:schwaemm192192v2 17.85 17.90 17.94 T:schwaemm256256v2 19.79 19.87 19.90 ascon128bi32v12 20.26 20.28 20.30 T:schwaemm128128v2 24.82 24.86 24.89 T:grain128aeadv2 31.38 31.42 31.46 romulusn 35.15 35.19 35.24 T:isapa128av20 40.25 40.29 40.35 T:giftcofb128v1 41.80 41.85 42.05 T:isapa128v20 43.13 43.18 43.20 romulusm 45.47 45.52 45.57 T:tinyjambu128v2 47.81 48.04 48.14 T:isapk128av20 52.63 52.74 52.83 T:tinyjambu192v2 54.47 54.50 54.52 T:tinyjambu256v2 85.62 85.67 85.71 romulust 95.42 95.97 96.25 T:isapk128v20 106.06 106.11 106.18 T:elephant200v2 174.18 174.80 184.77 T:isapxv20 4154.68 4162.19 4164.81 T:elephant176v2 4463.90 4465.23 4465.84 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.92 0.92 0.92 T:aes128gcmv1 0.99 0.99 1.00 aes256gcmv1 6.69 6.72 6.74 ascon128av12 9.96 10.00 10.05 ascon80pqv12 10.01 10.03 10.05 ascon128v12 10.77 10.82 10.85 T:xoodyakround3 12.90 12.93 12.97 T:schwaemm256128v2 13.44 13.55 13.62 ascon128abi32v12 16.96 17.00 17.08 T:schwaemm192192v2 17.88 17.91 17.95 T:schwaemm256256v2 19.76 19.82 19.85 ascon128bi32v12 20.20 20.23 20.27 T:schwaemm128128v2 24.52 24.54 24.56 T:grain128aeadv2 31.40 31.44 31.50 romulusn 35.12 35.17 35.19 T:isapa128av20 40.30 40.33 40.35 T:giftcofb128v1 41.86 42.22 42.32 T:isapa128v20 43.17 43.24 43.27 romulusm 45.36 45.42 45.48 T:tinyjambu128v2 47.93 48.10 48.45 T:isapk128av20 52.56 52.63 52.70 T:tinyjambu192v2 54.43 54.48 54.54 T:tinyjambu256v2 85.69 85.72 85.77 romulust 95.18 95.68 95.93 T:isapk128v20 106.07 106.24 106.37 T:elephant200v2 174.11 174.39 176.85 T:isapxv20 4155.79 4162.09 4166.92 T:elephant176v2 4463.70 4464.71 4465.51 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.92 0.92 0.92 T:aes128gcmv1 0.99 1.00 1.00 aes256gcmv1 6.69 6.70 6.71 ascon128av12 9.96 9.98 10.03 ascon80pqv12 10.01 10.03 10.05 ascon128v12 10.78 10.80 10.89 T:xoodyakround3 12.88 12.91 12.97 T:schwaemm256128v2 13.43 13.58 13.64 ascon128abi32v12 17.01 17.06 17.08 T:schwaemm192192v2 17.86 17.89 17.92 T:schwaemm256256v2 19.79 19.84 19.91 ascon128bi32v12 20.19 20.21 20.25 T:schwaemm128128v2 24.53 24.55 24.56 T:grain128aeadv2 25.75 25.86 25.89 T:isapa128v20 27.91 27.95 27.98 T:isapa128av20 31.41 31.44 31.46 romulusn 37.19 37.40 37.66 T:isapk128av20 40.27 40.33 40.36 T:giftcofb128v1 43.19 43.22 43.23 romulusm 44.49 44.50 44.54 romulust 45.40 45.49 45.59 T:tinyjambu128v2 52.50 52.55 52.62 T:tinyjambu192v2 54.46 54.47 54.51 T:tinyjambu256v2 62.76 63.10 63.33 T:isapk128v20 106.20 106.45 106.54 T:elephant200v2 113.86 115.60 115.71 T:isapxv20 4154.93 4158.87 4164.07 T:elephant176v2 4462.98 4464.38 4465.06 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.50 5.58 5.65 T:aes128gcmv1 6.01 6.08 6.11 aes256gcmv1 9.97 10.15 10.28 ascon128av12 13.04 13.10 13.27 ascon128v12 13.06 13.16 13.23 ascon80pqv12 15.85 16.55 17.05 T:xoodyakround3 20.19 20.45 20.74 ascon128abi32v12 20.94 21.24 21.62 T:schwaemm256128v2 25.80 25.93 26.20 T:schwaemm128128v2 26.73 27.12 27.51 ascon128bi32v12 27.36 27.69 28.03 T:schwaemm192192v2 28.45 28.83 29.18 T:schwaemm256256v2 32.38 32.55 32.71 T:grain128aeadv2 37.90 38.00 38.17 romulusn 47.52 47.62 47.82 T:giftcofb128v1 50.44 50.62 50.83 romulusm 55.94 56.04 56.66 T:tinyjambu128v2 64.16 64.41 64.82 T:tinyjambu192v2 66.11 66.32 66.77 T:tinyjambu256v2 88.02 88.08 88.34 T:isapa128av20 114.26 114.59 115.10 romulust 149.80 149.99 150.45 T:elephant200v2 152.21 152.47 153.21 T:isapk128av20 342.98 343.63 343.98 T:isapa128v20 998.97 1005.77 1013.34 T:isapk128v20 1739.88 1742.26 1748.87 T:isapxv20 5169.95 5175.09 5182.60 T:elephant176v2 5972.22 5975.99 5979.59 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.75 4.80 5.16 T:aes128gcmv1 5.61 5.67 5.81 aes256gcmv1 9.98 10.07 10.27 ascon128av12 12.99 13.09 13.30 ascon128v12 13.05 13.16 13.30 ascon80pqv12 15.84 16.22 16.71 T:xoodyakround3 20.45 20.67 21.04 ascon128abi32v12 20.98 21.13 21.35 T:schwaemm256128v2 25.62 25.82 26.20 T:schwaemm128128v2 27.07 27.37 27.79 ascon128bi32v12 27.52 27.98 28.20 T:schwaemm192192v2 28.29 28.71 28.95 T:schwaemm256256v2 32.19 32.33 32.59 T:grain128aeadv2 38.40 38.66 38.73 romulusn 47.95 48.02 48.22 T:giftcofb128v1 52.27 52.41 52.54 romulusm 56.20 56.33 56.47 T:tinyjambu128v2 63.89 64.39 64.94 T:tinyjambu192v2 66.26 66.46 66.84 T:tinyjambu256v2 87.84 88.09 88.45 T:isapa128av20 114.55 115.08 115.37 romulust 149.80 149.99 150.32 T:elephant200v2 152.21 152.74 153.23 T:isapk128av20 343.24 343.92 344.77 T:isapa128v20 998.09 1004.92 1013.30 T:isapk128v20 1739.36 1771.36 1774.20 T:isapxv20 5168.96 5175.05 5181.16 T:elephant176v2 5974.14 5976.98 5981.24 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.73 4.83 4.91 T:aes128gcmv1 5.56 5.62 5.66 aes256gcmv1 10.04 10.17 10.23 ascon128av12 13.07 13.11 13.26 ascon80pqv12 13.03 13.14 13.38 ascon128v12 15.95 16.50 16.87 T:xoodyakround3 19.87 20.30 20.56 ascon128abi32v12 21.04 21.16 21.32 T:schwaemm256128v2 25.68 25.70 25.83 T:schwaemm128128v2 27.03 27.23 27.45 ascon128bi32v12 27.42 27.66 28.22 T:schwaemm192192v2 28.02 28.44 28.84 T:schwaemm256256v2 32.17 32.27 32.42 T:grain128aeadv2 38.34 38.58 38.73 romulusn 47.91 48.11 48.19 T:giftcofb128v1 52.20 52.68 52.82 romulusm 55.87 56.05 56.55 T:tinyjambu128v2 57.87 58.12 58.58 T:isapa128av20 64.03 64.29 64.68 T:tinyjambu192v2 65.97 66.38 66.67 T:tinyjambu256v2 72.57 73.34 73.78 romulust 100.04 100.20 101.05 T:isapk128av20 150.01 150.36 150.53 T:elephant200v2 179.02 179.61 179.97 T:isapa128v20 521.27 526.31 531.87 T:isapk128v20 910.35 926.95 928.14 T:isapxv20 5173.65 5179.53 5183.55 T:elephant176v2 5973.88 5976.02 5978.76 T:elephant160v2