VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; beelink, supercop-20221122

[Page version: 20251103 11:56:58]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.71 1.72 1.72 T:aes128gcmv1 1.84 1.85 1.86 aes256gcmv1 5.60 5.63 5.66 ascon128av12 8.13 8.13 8.13 ascon80pqv12 8.37 8.38 8.42 ascon128v12 12.47 12.51 12.54 ascon128abi32v12 14.71 14.81 14.87 T:xoodyakround3 18.16 18.19 18.21 ascon128bi32v12 18.19 18.22 18.27 T:schwaemm256128v2 22.83 22.98 24.98 T:grain128aeadv2 23.69? 24.01? 26.82? T:schwaemm256256v2 24.16 24.22 24.27 T:schwaemm192192v2 28.52 28.65 28.83 T:schwaemm128128v2 31.03 31.04 31.04 T:isapa128v20 33.23 33.26 33.30 T:isapa128av20 37.12 37.15 37.18 romulusn 38.56 38.57 38.57 T:giftcofb128v1 58.50 58.50 58.53 T:tinyjambu128v2 59.40 59.44 59.47 romulusm 60.41 60.78 60.85 T:isapk128av20 62.50 62.50 62.50 T:tinyjambu192v2 65.73 65.87 65.88 T:tinyjambu256v2 82.45 82.54 82.69 T:isapk128v20 120.70 120.76 120.80 romulust 122.92 123.08 123.35 T:elephant200v2 146.77 148.52 150.81 T:isapxv20 6338.49 6376.37 6446.46 T:elephant176v2 7797.25 7802.34 7841.88 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.71 1.72 1.72 T:aes128gcmv1 1.86 1.87 1.88 aes256gcmv1 5.17 5.19 5.19 ascon128av12 7.62 7.63 7.63 ascon80pqv12 7.87 7.88 7.88 ascon128v12 12.62 12.63 12.67 ascon128abi32v12 14.64 14.69 14.75 T:xoodyakround3 18.21 18.26 18.32 T:schwaemm256128v2 18.61 18.64 18.67 ascon128bi32v12 23.05 23.12 23.66 T:grain128aeadv2 23.63? 23.98? 26.48? T:schwaemm256256v2 24.13 24.20 24.26 T:schwaemm192192v2 28.48 28.63 28.73 T:schwaemm128128v2 30.99 31.04 31.08 T:isapa128v20 33.23 33.27 33.30 T:isapa128av20 37.36 37.43 37.44 romulusn 38.50 38.50 38.51 T:giftcofb128v1 58.50 58.51 58.51 T:tinyjambu128v2 59.72 59.77 59.83 romulusm 60.32 60.84 60.87 T:isapk128av20 62.75 62.75 62.77 T:tinyjambu192v2 65.48 65.50 65.52 T:tinyjambu256v2 82.35 82.48 82.61 T:isapk128v20 120.68 120.80 120.87 romulust 122.86 122.95 123.05 T:elephant200v2 147.56 148.13 149.02 T:isapxv20 6370.20 6385.58 6390.08 T:elephant176v2 7793.94 7830.60 7874.24 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.71 1.71 1.72 T:aes128gcmv1 1.86 1.86 1.87 aes256gcmv1 5.17 5.19 5.19 ascon128av12 7.63 7.63 7.64 ascon80pqv12 7.88 7.88 7.88 ascon128v12 12.62 12.63 12.66 ascon128abi32v12 14.68 14.73 14.77 T:xoodyakround3 15.48 15.52 15.55 T:isapa128v20 18.21 18.27 18.31 T:schwaemm256128v2 18.62 18.64 18.67 ascon128bi32v12 22.32 22.38 22.38 T:isapa128av20 23.03 23.09 23.64 T:grain128aeadv2 23.67? 24.02? 26.53? T:schwaemm256256v2 24.15 24.19 24.26 T:schwaemm192192v2 28.52 28.65 28.81 T:schwaemm128128v2 37.36 37.42 37.45 romulusn 38.50 38.50 38.51 T:giftcofb128v1 40.98 41.03 41.09 romulust 43.62 43.65 43.83 T:isapk128av20 56.20 56.35 56.41 T:isapk128v20 58.50 58.51 58.52 T:tinyjambu128v2 59.71 59.75 59.80 romulusm 62.75 62.75 62.75 T:tinyjambu192v2 65.49 65.50 65.52 T:tinyjambu256v2 85.23 85.48 86.15 T:isapxv20 122.93 123.03 123.15 T:elephant200v2 6346.98 6368.47 6381.26 T:elephant176v2 7790.82 7809.50 7886.74 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.08 1.09 1.09 T:aes128gcmv1 1.14 1.15 1.16 aes256gcmv1 5.62 5.63 5.65 ascon128av12 7.87 7.88 7.89 ascon80pqv12 8.12 8.14 8.15 ascon128v12 11.39 11.45 11.47 T:xoodyakround3 12.24 12.35 12.38 ascon128abi32v12 18.08 18.11 18.14 T:schwaemm256128v2 18.40 18.42 18.44 ascon128bi32v12 22.82 22.95 24.96 T:grain128aeadv2 23.27 23.29 23.29 T:isapa128v20 23.60 23.63 23.81 T:schwaemm256256v2 24.58 24.75 24.91 T:schwaemm192192v2 27.24 27.27 27.28 T:isapa128av20 28.50 28.58 28.66 T:schwaemm128128v2 29.74 29.75 29.76 romulusn 38.38 38.38 38.39 T:giftcofb128v1 40.89 40.90 40.93 romulusm 46.75 46.77 46.77 T:tinyjambu128v2 46.51 47.08 47.59 T:isapk128av20 49.60 49.61 49.62 T:tinyjambu256v2 50.13 50.14 50.15 T:tinyjambu192v2 65.66 65.75 65.80 T:isapk128v20 80.87 80.91 80.94 romulust 92.66 92.73 92.78 T:elephant200v2 116.76 117.01 118.31 T:isapxv20 4741.22 4750.67 4759.86 T:elephant176v2 5832.58 5863.74 5936.02 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.08 1.08 1.10 T:aes128gcmv1 1.15 1.15 1.15 aes256gcmv1 5.26 5.27 5.28 ascon128av12 7.75 7.76 7.76 ascon80pqv12 7.81 7.82 7.82 ascon128v12 11.34 11.36 11.38 T:xoodyakround3 12.44 12.48 12.50 ascon128abi32v12 18.12 18.14 18.18 T:schwaemm256128v2 18.24 18.26 18.27 ascon128bi32v12 22.94 23.01 23.60 T:grain128aeadv2 23.27 23.27 23.28 T:isapa128v20 23.64 23.74 23.84 T:schwaemm256256v2 24.51 24.66 24.86 T:schwaemm192192v2 27.25 27.26 27.28 T:isapa128av20 28.47 28.51 28.61 T:schwaemm128128v2 29.86 29.89 29.92 romulusn 38.35 38.35 38.35 T:giftcofb128v1 41.03 41.06 41.09 romulusm 46.76 46.76 46.76 T:tinyjambu128v2 46.63 47.35 47.61 T:isapk128av20 49.42 49.42 49.43 T:tinyjambu256v2 50.01 50.01 50.01 T:tinyjambu192v2 65.56 65.59 65.66 T:isapk128v20 80.86 80.93 80.98 romulust 92.68 92.75 92.79 T:elephant200v2 116.62 116.93 117.22 T:isapxv20 4734.12 4747.39 4752.12 T:elephant176v2 5827.77 5869.73 5874.79 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.08 1.09 1.09 T:aes128gcmv1 1.15 1.15 1.15 aes256gcmv1 5.26 5.27 5.28 ascon128av12 7.76 7.76 7.76 ascon80pqv12 7.81 7.82 7.82 ascon128v12 11.34 11.36 11.39 T:xoodyakround3 12.48 12.48 12.48 ascon128abi32v12 15.50 15.51 15.53 T:isapa128v20 18.11 18.13 18.16 T:schwaemm256128v2 18.25 18.26 18.27 ascon128bi32v12 21.78 21.82 21.85 T:isapa128av20 22.96 23.05 23.69 T:grain128aeadv2 23.64 23.79 23.84 T:schwaemm256256v2 24.34 24.39 24.51 T:schwaemm192192v2 28.45 28.58 28.66 T:schwaemm128128v2 29.87 29.88 29.92 romulusn 38.35 38.35 38.35 T:giftcofb128v1 38.36 38.97 39.04 T:isapk128av20 40.97 40.99 41.03 romulust 41.05 41.07 41.08 romulusm 46.76 46.76 46.77 T:tinyjambu128v2 49.42 49.42 49.43 T:tinyjambu256v2 50.01 50.01 50.01 T:tinyjambu192v2 52.52 52.59 52.65 T:isapk128v20 85.46 85.72 85.95 T:isapxv20 92.69 92.75 92.89 T:elephant200v2 4740.39 4766.57 4806.43 T:elephant176v2 5850.63 5892.45 5913.32 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.44 0.45 0.46 aes256gcmv1 0.45 0.45 0.46 T:aes128gcmv1 5.61 5.63 5.64 ascon128av12 7.61 7.62 7.64 ascon80pqv12 7.86 7.87 7.88 ascon128v12 8.01 8.04 8.07 T:xoodyakround3 12.17 12.20 12.22 ascon128abi32v12 15.51 15.51 15.51 T:isapa128v20 17.96 18.02 18.09 T:schwaemm256128v2 18.57 18.63 18.68 ascon128bi32v12 21.21 21.26 21.29 T:isapa128av20 22.33 22.36 22.39 romulusm 22.34 22.37 22.40 romulusn 22.83 22.93 24.81 T:grain128aeadv2 23.21 23.58 23.65 T:schwaemm256256v2 24.63 24.82 24.93 T:schwaemm192192v2 28.42 28.52 28.61 T:schwaemm128128v2 33.34 33.35 33.36 T:tinyjambu256v2 33.78 33.82 34.24 T:isapk128av20 35.00 35.00 35.00 T:tinyjambu128v2 37.76 37.76 37.77 T:tinyjambu192v2 38.19 38.20 38.21 T:giftcofb128v1 40.96 41.02 41.08 romulust 48.85 48.88 48.93 T:isapk128v20 62.60 62.68 62.77 T:elephant200v2 84.86 85.41 86.34 T:isapxv20 3135.50 3151.44 3183.76 T:elephant176v2 3906.03 3907.18 3942.88 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.43 0.43 0.45 aes256gcmv1 0.45 0.46 0.46 T:aes128gcmv1 5.36 5.36 5.36 ascon128av12 7.74 7.75 7.75 ascon128v12 7.88 7.88 7.88 ascon80pqv12 8.00 8.04 8.08 T:xoodyakround3 12.29 12.33 12.34 ascon128abi32v12 15.48 15.48 15.55 T:isapa128v20 17.85 17.88 17.91 ascon128bi32v12 17.98 18.02 18.08 T:schwaemm256128v2 21.21 21.26 21.32 T:isapa128av20 22.33 22.36 22.42 romulusm 22.35 22.38 22.42 romulusn 22.82 22.93 23.64 T:grain128aeadv2 23.12 23.43 23.58 T:schwaemm256256v2 24.60 24.86 25.15 T:schwaemm192192v2 28.42 28.51 28.72 T:schwaemm128128v2 33.34 33.35 33.36 T:tinyjambu256v2 33.59 33.62 34.34 T:isapk128av20 35.00 35.01 35.02 T:tinyjambu128v2 37.26 37.26 37.27 T:tinyjambu192v2 38.18 38.20 38.20 T:giftcofb128v1 40.94 41.03 41.12 romulust 48.81 48.89 48.91 T:isapk128v20 62.64 62.70 62.76 T:elephant200v2 85.22 85.47 85.93 T:isapxv20 3131.50 3143.49 3150.94 T:elephant176v2 3907.11 3910.44 3912.19 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.43 0.43 0.44 aes256gcmv1 0.45 0.45 0.46 T:aes128gcmv1 5.36 5.36 5.37 ascon128av12 7.75 7.75 7.76 ascon128v12 7.88 7.88 7.88 ascon80pqv12 8.01 8.06 8.10 T:xoodyakround3 12.32 12.33 12.33 ascon128abi32v12 15.48 15.51 15.54 T:isapa128v20 17.85 17.88 17.90 ascon128bi32v12 17.98 18.02 18.07 T:schwaemm256128v2 21.22 21.26 21.32 T:isapa128av20 22.33 22.37 22.40 romulusm 22.32 22.38 22.41 romulusn 22.89 22.95 23.64 T:grain128aeadv2 23.18 23.50 23.64 T:schwaemm256256v2 24.57 24.72 24.79 T:schwaemm192192v2 28.39 28.49 28.59 T:schwaemm128128v2 33.34 33.35 33.36 T:tinyjambu256v2 33.61 33.68 34.33 T:isapk128av20 35.01 35.01 35.02 T:tinyjambu128v2 37.26 37.26 37.27 T:tinyjambu192v2 38.19 38.19 38.20 T:giftcofb128v1 40.93 41.01 41.07 romulust 48.82 48.88 48.91 T:isapk128v20 62.63 62.68 62.73 T:elephant200v2 85.08 85.42 85.96 T:isapxv20 3131.96 3159.33 3174.82 T:elephant176v2 3899.62 3937.97 3941.54 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.19 1.19 1.20 T:aes128gcmv1 1.26 1.27 1.27 aes256gcmv1 5.77 5.78 5.80 ascon128av12 8.00 8.00 8.01 ascon80pqv12 8.25 8.25 8.26 ascon128v12 11.47 11.56 11.58 T:xoodyakround3 12.64 12.64 12.68 ascon128abi32v12 18.65 18.70 18.73 T:schwaemm256128v2 18.75 18.76 18.78 ascon128bi32v12 23.32 23.35 25.17 T:grain128aeadv2 24.25 24.29 24.49 T:schwaemm256256v2 25.00 25.03 25.11 T:schwaemm192192v2 28.92 28.97 29.04 T:schwaemm128128v2 29.50 29.50 29.51 T:isapa128av20 30.01 30.02 30.04 romulusn 34.15 34.15 34.17 T:isapa128v20 38.68 38.68 38.69 T:giftcofb128v1 41.16 41.18 41.20 romulusm 47.11 47.12 47.13 T:tinyjambu128v2 50.00 50.00 50.00 T:tinyjambu256v2 50.51 50.52 50.52 T:tinyjambu192v2 53.22 54.26 56.38 T:isapk128av20 82.16 82.18 82.21 romulust 94.76 94.81 94.88 T:elephant200v2 106.09 106.13 106.16 T:isapk128v20 190.26 190.37 191.64 T:isapxv20 4761.78 4791.86 4794.63 T:elephant176v2 5923.26 5931.53 5995.92 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.20 1.20 1.20 T:aes128gcmv1 1.27 1.27 1.28 aes256gcmv1 5.41 5.43 5.44 ascon128av12 7.88 7.88 7.88 ascon80pqv12 7.93 7.93 7.93 ascon128v12 11.44 11.45 11.48 T:xoodyakround3 12.76 12.77 12.80 ascon128abi32v12 18.62 18.62 18.64 ascon128bi32v12 18.69 18.71 18.73 T:schwaemm256128v2 23.36 23.43 24.01 T:grain128aeadv2 24.25 24.34 24.45 T:schwaemm256256v2 24.99 25.04 25.11 T:schwaemm192192v2 28.90 28.98 29.03 T:schwaemm128128v2 29.49 29.49 29.49 T:isapa128av20 30.16 30.18 30.19 romulusn 34.15 34.15 34.17 T:isapa128v20 38.65 38.65 38.65 T:giftcofb128v1 41.36 41.38 41.42 romulusm 47.10 47.11 47.11 T:tinyjambu128v2 49.81 49.82 49.82 T:tinyjambu256v2 50.39 50.39 50.41 T:tinyjambu192v2 53.12 54.25 54.28 T:isapk128av20 82.15 82.19 82.23 romulust 94.68 94.75 94.79 T:elephant200v2 106.02 106.06 106.11 T:isapk128v20 189.80 190.21 190.44 T:isapxv20 4761.82 4775.45 4800.87 T:elephant176v2 5910.33 5921.36 5922.18 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.20 1.20 1.20 T:aes128gcmv1 1.27 1.27 1.27 aes256gcmv1 5.41 5.41 5.43 ascon128av12 7.88 7.88 7.88 ascon80pqv12 7.93 7.93 7.94 ascon128v12 11.44 11.47 11.52 T:xoodyakround3 12.76 12.76 12.77 ascon128abi32v12 18.62 18.62 18.64 ascon128bi32v12 18.67 18.70 18.73 T:schwaemm256128v2 21.04 21.04 21.06 T:isapa128v20 23.07 23.07 23.09 T:isapa128av20 23.37 23.40 24.00 T:grain128aeadv2 24.23 24.29 24.42 T:schwaemm256256v2 24.97 25.02 25.11 T:schwaemm192192v2 28.97 29.00 29.05 T:schwaemm128128v2 30.15 30.16 30.21 romulusn 38.65 38.65 38.65 T:giftcofb128v1 41.36 41.37 41.41 romulusm 42.26 42.32 42.34 romulust 42.46 43.52 45.50 T:isapk128av20 47.10 47.11 47.11 T:tinyjambu128v2 49.81 49.81 49.82 T:tinyjambu256v2 50.39 50.39 50.39 T:tinyjambu192v2 73.45 73.50 73.56 T:isapk128v20 94.67 94.70 94.78 T:elephant200v2 122.85 123.30 123.37 T:isapxv20 4771.99 4785.92 4794.56 T:elephant176v2 5909.64 5911.04 5915.89 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.52 5.56 5.59 T:aes128gcmv1 5.88 5.89 6.00 aes256gcmv1 8.64 8.92 9.20 ascon128av12 10.66 10.80 10.85 ascon80pqv12 11.04 11.12 11.12 ascon128v12 16.59 16.66 16.77 T:xoodyakround3 19.37 19.45 20.33 ascon128abi32v12 26.41 26.45 27.17 ascon128bi32v12 31.23 31.34 31.47 T:schwaemm256128v2 31.70 31.95 33.05 T:grain128aeadv2 35.95 35.96 36.10 romulusn 37.58 37.77 38.20 T:schwaemm128128v2 38.81 39.02 39.13 T:schwaemm256256v2 39.81 40.17 40.55 T:schwaemm192192v2 45.50 45.54 45.70 T:giftcofb128v1 46.95 47.05 47.26 romulusm 55.05 55.05 55.22 T:tinyjambu128v2 58.66 58.77 58.93 T:tinyjambu256v2 58.88 58.90 59.05 T:tinyjambu192v2 80.65 80.72 81.25 T:isapa128av20 111.05 111.27 111.66 romulust 135.48 135.75 135.98 T:elephant200v2 170.85 170.95 171.12 T:isapk128av20 284.11 284.11 284.30 T:isapa128v20 1023.01 1023.26 1023.58 T:isapk128v20 1850.39 1855.26 1856.27 T:isapxv20 5936.70 5955.88 5963.47 T:elephant176v2 7920.73 7926.40 7956.11 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.31 5.34 5.40 T:aes128gcmv1 5.68 5.71 5.81 aes256gcmv1 8.99 9.11 9.16 ascon128av12 10.62 10.62 10.69 ascon80pqv12 10.64 10.67 10.70 ascon128v12 16.67 16.80 16.88 T:xoodyakround3 19.48 19.48 19.88 ascon128abi32v12 26.95 26.97 27.72 ascon128bi32v12 31.23 31.55 31.69 T:schwaemm256128v2 32.17 32.31 32.67 T:grain128aeadv2 36.40 36.53 36.74 romulusn 37.30 37.87 38.42 T:schwaemm128128v2 38.79 39.06 39.27 T:schwaemm256256v2 39.94 40.63 40.91 T:schwaemm192192v2 45.62 45.65 45.70 T:giftcofb128v1 48.50 48.63 48.79 romulusm 54.99 54.99 55.12 T:tinyjambu128v2 58.62 58.80 58.93 T:tinyjambu256v2 58.76 58.81 58.98 T:tinyjambu192v2 80.56 80.62 81.02 T:isapa128av20 111.30 111.65 112.13 romulust 135.48 135.73 136.54 T:elephant200v2 170.80 170.82 170.93 T:isapk128av20 284.08 284.11 284.76 T:isapa128v20 1023.15 1023.62 1023.79 T:isapk128v20 1851.59 1854.45 1855.48 T:isapxv20 5931.36 5940.51 5969.55 T:elephant176v2 7900.12 7925.54 7964.16 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.30 5.33 5.44 T:aes128gcmv1 5.70 5.73 5.81 aes256gcmv1 8.86 9.11 9.11 ascon128av12 10.59 10.59 10.59 ascon80pqv12 10.64 10.64 10.64 ascon128v12 16.68 16.80 16.85 T:xoodyakround3 19.46 19.46 19.48 ascon128abi32v12 26.95 26.95 27.35 ascon128bi32v12 31.12 31.27 31.59 T:schwaemm256128v2 31.56 32.23 32.51 T:grain128aeadv2 36.45 36.48 36.66 romulusn 37.45 38.01 38.27 T:schwaemm128128v2 38.67 39.11 39.48 T:schwaemm256256v2 40.17 40.34 40.93 T:schwaemm192192v2 45.62 45.64 45.68 T:giftcofb128v1 48.41 48.56 48.88 romulusm 51.65 51.73 52.70 T:isapa128av20 54.98 54.99 54.99 T:tinyjambu128v2 58.58 58.70 58.76 T:tinyjambu256v2 58.75 58.77 58.86 T:tinyjambu192v2 71.05 71.27 71.87 romulust 112.60 112.65 113.30 T:isapk128av20 135.66 136.09 136.22 T:elephant200v2 147.97 147.99 148.70 T:isapa128v20 544.39 544.50 545.23 T:isapk128v20 965.23 968.04 972.39 T:isapxv20 5964.67 5992.59 6003.13 T:elephant176v2 7909.52 7921.34 7931.19 T:elephant160v2