VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Raptor Cove (b06a2-40); 2024 Intel Core 5 210H; 4 x 2200MHz; freshwrap,big, supercop-20251222

[Page version: 20260116 16:47:10]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.93 0.95 0.96 T:aes128gcmv1 1.04 1.06 1.08 aes256gcmv1 6.70 6.78 6.89 ascon128av12 9.91 10.03 10.16 ascon128v12 10.08 10.15 10.19 ascon80pqv12 12.53 12.62 12.70 T:schwaemm256128v2 12.94 13.13 13.26 ascon128abi32v12 14.03 14.09 14.16 T:xoodyakround3 16.52 16.64 16.77 T:schwaemm192192v2 17.19 17.24 17.28 T:schwaemm256256v2 18.26 18.30 18.32 T:schwaemm128128v2 19.04 19.16 19.27 ascon128bi32v12 23.63 23.65 23.69 T:grain128aeadv2 32.78 32.85 32.91 T:giftcofb128v1 38.15 38.45 38.70 T:isapa128v20 38.77 38.79 38.84 romulusn 39.27 39.56 39.82 T:isapa128av20 47.69 47.78 47.88 T:isapk128av20 62.72 62.79 62.86 romulusm 64.19 64.74 65.77 T:isapk128v20 65.56 65.59 65.69 T:tinyjambu128v2 77.78 77.84 77.89 T:tinyjambu192v2 83.83 84.02 84.07 T:tinyjambu256v2 129.84 129.97 130.09 romulust 140.06 140.69 140.97 T:isapxv20 169.68 170.23 171.02 T:elephant200v2 5034.29 5036.36 5038.92 T:elephant176v2 5600.83 5605.00 5606.45 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.67 0.69 0.70 T:aes128gcmv1 0.80 0.81 0.83 aes256gcmv1 6.70 6.72 6.75 ascon128av12 9.98 10.01 10.10 ascon128v12 9.95 10.05 10.13 ascon80pqv12 12.44 12.52 12.62 T:schwaemm256128v2 13.11 13.17 13.21 ascon128abi32v12 13.96 13.99 14.02 T:xoodyakround3 16.42 16.48 16.56 T:schwaemm192192v2 17.17 17.28 17.36 T:schwaemm256256v2 18.12 18.15 18.18 T:schwaemm128128v2 19.37 19.43 19.47 ascon128bi32v12 23.05 23.10 23.12 T:grain128aeadv2 32.77 32.82 32.87 T:giftcofb128v1 38.16 38.44 38.67 T:isapa128v20 38.79 38.84 38.90 romulusn 39.42 39.70 39.90 T:isapa128av20 47.69 47.75 47.83 T:isapk128av20 62.98 63.01 63.07 romulusm 64.11 64.64 65.63 T:isapk128v20 65.08 65.10 65.13 T:tinyjambu128v2 77.84 77.97 78.06 T:tinyjambu192v2 83.87 83.94 84.05 T:tinyjambu256v2 129.78 129.91 129.99 romulust 135.65 136.99 138.69 T:isapxv20 161.98 162.93 171.06 T:elephant200v2 5034.37 5036.41 5037.49 T:elephant176v2 5600.41 5605.60 5615.70 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.68 0.69 0.70 T:aes128gcmv1 0.80 0.82 0.83 aes256gcmv1 6.68 6.70 6.72 ascon128av12 9.88 10.06 10.14 ascon80pqv12 10.03 10.07 10.10 ascon128v12 12.45 12.51 12.62 T:schwaemm256128v2 13.10 13.15 13.20 ascon128abi32v12 13.95 13.99 14.04 T:xoodyakround3 16.40 16.53 16.67 T:schwaemm192192v2 17.16 17.25 17.32 T:schwaemm256256v2 18.14 18.17 18.20 T:schwaemm128128v2 18.62 18.77 19.02 T:isapa128v20 19.38 19.43 19.52 ascon128bi32v12 23.06 23.10 23.13 T:grain128aeadv2 26.05 26.58 26.79 T:isapa128av20 32.08 32.13 32.16 T:isapk128av20 32.81 32.85 32.89 T:giftcofb128v1 38.82 38.85 38.91 romulusn 40.26 40.32 40.48 T:isapk128v20 44.83 44.94 44.98 romulust 63.01 63.03 63.10 romulusm 65.43 65.61 65.65 T:tinyjambu128v2 77.40 78.04 78.08 T:tinyjambu192v2 80.03 80.55 80.86 T:isapxv20 84.02 84.09 84.11 T:tinyjambu256v2 162.94 164.13 164.82 T:elephant200v2 5034.76 5036.54 5038.24 T:elephant176v2 5605.98 5607.16 5616.33 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.61 0.63 0.64 T:aes128gcmv1 0.68 0.69 0.70 aes256gcmv1 6.71 6.77 6.81 ascon128av12 9.98 10.07 10.15 ascon128v12 10.11 10.17 10.19 ascon80pqv12 10.83 10.85 10.88 T:xoodyakround3 12.46 12.49 12.56 T:schwaemm256128v2 13.27 13.31 13.35 ascon128abi32v12 16.40 16.46 16.54 T:schwaemm192192v2 17.09 17.19 17.22 T:schwaemm256256v2 18.25 18.27 18.33 T:schwaemm128128v2 19.20 19.25 19.30 ascon128bi32v12 23.60 23.62 23.67 T:grain128aeadv2 28.57 28.69 28.78 T:isapa128v20 31.13 31.17 31.21 romulusn 32.84 32.99 33.12 T:isapa128av20 33.00 33.02 33.05 T:giftcofb128v1 40.40 40.60 40.80 T:isapk128av20 42.93 42.96 43.00 romulusm 52.66 53.04 53.32 T:isapk128v20 53.51 53.59 53.62 T:tinyjambu128v2 60.93 60.95 60.96 T:tinyjambu192v2 63.36 63.41 63.42 T:tinyjambu256v2 87.23 87.30 87.37 romulust 113.30 113.56 114.01 T:isapxv20 123.51 125.16 125.46 T:elephant200v2 3760.17 3761.23 3762.57 T:elephant176v2 4198.10 4199.93 4204.10 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.48 0.50 0.51 T:aes128gcmv1 0.55 0.57 0.57 aes256gcmv1 6.68 6.69 6.72 ascon128av12 10.01 10.06 10.13 ascon80pqv12 10.04 10.08 10.11 ascon128v12 10.76 10.79 10.82 T:xoodyakround3 12.34 12.42 12.47 T:schwaemm256128v2 13.19 13.24 13.31 ascon128abi32v12 16.41 16.44 16.48 T:schwaemm192192v2 17.10 17.15 17.21 T:schwaemm256256v2 18.17 18.18 18.22 T:schwaemm128128v2 19.39 19.45 19.50 ascon128bi32v12 23.35 23.37 23.40 T:grain128aeadv2 28.63 28.74 28.91 T:isapa128v20 31.15 31.18 31.22 romulusn 32.95 33.01 33.03 T:giftcofb128v1 32.94 33.05 33.12 T:isapa128av20 40.21 40.32 40.48 T:isapk128av20 43.10 43.13 43.18 romulusm 52.62 52.87 53.23 T:isapk128v20 53.59 53.60 53.62 T:tinyjambu128v2 60.94 61.02 61.11 T:tinyjambu192v2 63.39 63.41 63.45 T:tinyjambu256v2 87.22 87.30 87.35 romulust 108.56 109.03 109.67 T:isapxv20 126.13 126.33 127.45 T:elephant200v2 3760.73 3762.18 3763.21 T:elephant176v2 4198.49 4201.55 4207.25 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.49 0.50 0.51 T:aes128gcmv1 0.56 0.57 0.57 aes256gcmv1 6.67 6.71 6.73 ascon128av12 9.99 10.05 10.11 ascon80pqv12 10.04 10.07 10.10 ascon128v12 10.78 10.81 10.84 T:xoodyakround3 12.36 12.39 12.45 T:schwaemm256128v2 13.20 13.25 13.29 ascon128abi32v12 16.38 16.44 16.50 T:schwaemm192192v2 17.10 17.15 17.22 T:schwaemm256256v2 18.20 18.22 18.24 T:schwaemm128128v2 18.91 18.97 19.05 T:isapa128v20 19.42 19.47 19.51 ascon128bi32v12 23.35 23.37 23.39 T:grain128aeadv2 26.40 26.55 26.62 T:isapa128av20 31.16 31.19 31.21 romulusn 32.22 32.48 32.72 T:isapk128av20 32.99 33.02 33.05 T:giftcofb128v1 40.55 40.84 40.96 T:isapk128v20 43.12 43.14 43.17 romulusm 44.70 44.77 44.85 romulust 53.56 53.60 53.62 T:tinyjambu128v2 60.95 61.04 61.07 T:tinyjambu192v2 63.40 63.41 63.43 T:tinyjambu256v2 81.97 82.14 82.27 T:isapxv20 121.24 121.30 124.21 T:elephant200v2 3760.27 3761.35 3762.37 T:elephant176v2 4198.41 4201.39 4208.51 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.28? 0.31? 0.32? T:aes128gcmv1 0.27? 0.31? 0.32? aes256gcmv1 6.67 6.69 6.72 ascon128av12 7.58 7.62 7.64 T:xoodyakround3 9.80 10.01 10.09 ascon80pqv12 10.04 10.07 10.13 ascon128v12 12.31 12.40 12.43 T:schwaemm256128v2 13.30 13.35 13.41 ascon128abi32v12 16.32 16.41 16.61 T:schwaemm192192v2 16.99 17.08 17.13 T:schwaemm256256v2 18.21 18.27 18.31 T:schwaemm128128v2 18.81 18.95 19.25 T:isapa128v20 19.39 19.46 19.62 ascon128bi32v12 23.16 23.19 23.21 romulusm 23.43 23.47 23.51 romulusn 23.64 23.69 23.72 T:grain128aeadv2 26.34 26.39 26.44 T:isapa128av20 32.00 32.10 32.18 T:isapk128av20 33.21 33.24 33.29 T:giftcofb128v1 40.64 40.68 40.74 T:isapk128v20 41.53 41.57 41.65 T:tinyjambu128v2 42.57 42.78 42.82 T:tinyjambu256v2 43.82 43.85 43.87 T:tinyjambu192v2 44.61 44.67 44.74 romulust 82.34 83.45 84.50 T:elephant200v2 85.85 86.27 86.46 T:isapxv20 2486.36 2487.49 2488.52 T:elephant176v2 2799.65 2800.55 2801.51 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.29 0.30 0.32 T:aes128gcmv1 0.31 0.32 0.33 aes256gcmv1 6.64 6.69 6.71 ascon128av12 7.59 7.62 7.65 T:xoodyakround3 10.04 10.07 10.12 ascon80pqv12 10.07 10.09 10.14 ascon128v12 12.31 12.38 12.45 T:schwaemm256128v2 13.30 13.35 13.41 ascon128abi32v12 16.32 16.39 16.42 T:schwaemm192192v2 16.98 17.06 17.13 T:schwaemm256256v2 18.18 18.20 18.23 T:schwaemm128128v2 18.97 19.04 19.17 T:isapa128v20 19.37 19.43 19.45 ascon128bi32v12 23.23 23.26 23.29 romulusm 23.44 23.48 23.54 romulusn 23.63 23.66 23.70 T:grain128aeadv2 26.35 26.38 26.46 T:isapa128av20 32.00 32.06 32.19 T:isapk128av20 33.17 33.22 33.26 T:giftcofb128v1 40.61 40.63 40.73 T:isapk128v20 41.30 41.35 41.40 T:tinyjambu128v2 42.64 42.70 42.75 T:tinyjambu256v2 43.73 43.80 43.99 T:tinyjambu192v2 44.63 44.70 44.76 romulust 81.05 81.32 82.17 T:isapxv20 83.45 83.95 84.14 T:elephant200v2 2484.48 2485.44 2487.24 T:elephant176v2 2774.73 2777.19 2779.45 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.29 0.30 0.32 T:aes128gcmv1 0.31 0.32 0.33 aes256gcmv1 6.67 6.68 6.71 ascon128av12 7.57 7.61 7.66 T:xoodyakround3 10.04 10.06 10.12 ascon128v12 10.03 10.07 10.11 ascon80pqv12 12.38 12.44 12.51 T:schwaemm256128v2 13.31 13.34 13.38 ascon128abi32v12 16.28 16.35 16.44 T:schwaemm192192v2 17.02 17.14 17.18 T:schwaemm256256v2 18.25 18.27 18.31 T:schwaemm128128v2 18.93 19.06 19.16 T:isapa128v20 19.37 19.46 19.53 ascon128bi32v12 23.19 23.22 23.27 romulusm 23.44 23.48 23.52 romulusn 23.64 23.68 23.72 T:grain128aeadv2 26.35 26.42 26.48 T:isapa128av20 32.00 32.05 32.11 T:isapk128av20 33.15 33.21 33.27 T:giftcofb128v1 40.66 40.70 40.99 T:isapk128v20 41.33 41.40 41.43 T:tinyjambu128v2 42.63 42.76 42.82 T:tinyjambu256v2 43.81 43.87 44.04 T:tinyjambu192v2 44.61 44.66 44.76 romulust 81.00 81.39 81.50 T:isapxv20 83.30 84.14 84.68 T:elephant200v2 2486.24 2486.99 2487.67 T:elephant176v2 2798.91 2800.96 2803.43 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.74 0.74 0.75 T:aes128gcmv1 0.81 0.82 0.83 aes256gcmv1 6.88 6.92 6.94 ascon128av12 10.11 10.18 10.25 ascon80pqv12 10.12 10.19 10.27 ascon128v12 10.94 10.96 10.98 T:xoodyakround3 12.82 12.85 12.89 T:schwaemm256128v2 13.54 13.59 13.68 ascon128abi32v12 16.81 16.84 16.88 T:schwaemm192192v2 17.59 17.63 17.69 T:schwaemm256256v2 18.46 18.50 18.53 T:schwaemm128128v2 19.64 19.69 19.95 ascon128bi32v12 23.95 23.98 23.99 T:grain128aeadv2 31.50 31.52 31.61 romulusn 33.26 33.28 33.30 T:giftcofb128v1 34.86 35.14 35.18 T:isapa128av20 41.62 41.67 41.77 T:isapa128v20 43.25 43.29 43.31 romulusm 45.67 45.77 45.91 T:isapk128av20 54.04 54.11 54.15 T:tinyjambu128v2 61.47 61.47 61.49 T:tinyjambu192v2 63.93 63.97 63.98 T:tinyjambu256v2 88.56 88.59 88.64 romulust 90.94 91.16 91.30 T:isapk128v20 127.99 128.35 129.55 T:elephant200v2 183.96 184.09 185.00 T:isapxv20 3789.41 3790.27 3791.10 T:elephant176v2 4246.53 4249.14 4251.71 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.60 0.61 0.61 T:aes128gcmv1 0.70 0.70 0.71 aes256gcmv1 6.85 6.86 6.88 ascon128av12 10.16 10.19 10.22 ascon128v12 10.16 10.20 10.26 ascon80pqv12 10.88 10.90 10.91 T:xoodyakround3 12.73 12.77 12.82 T:schwaemm256128v2 13.52 13.54 13.59 ascon128abi32v12 16.79 16.83 16.88 T:schwaemm192192v2 17.58 17.64 17.69 T:schwaemm256256v2 18.42 18.44 18.45 T:schwaemm128128v2 19.72 19.75 19.80 ascon128bi32v12 23.69 23.70 23.72 T:grain128aeadv2 31.53 31.55 31.56 romulusn 33.26 33.29 33.31 T:giftcofb128v1 34.90 35.03 35.13 T:isapa128av20 41.59 41.68 41.72 T:isapa128v20 43.43 43.45 43.48 romulusm 45.64 45.73 45.81 T:isapk128av20 54.11 54.12 54.14 T:tinyjambu128v2 61.59 61.61 61.62 T:tinyjambu192v2 63.90 63.97 63.98 T:tinyjambu256v2 88.53 88.59 88.66 romulust 90.88 91.03 91.21 T:isapk128v20 128.59 128.68 128.77 T:elephant200v2 179.86 180.26 180.62 T:isapxv20 3788.20 3788.78 3790.92 T:elephant176v2 4249.50 4252.18 4255.79 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.61 0.61 0.62 T:aes128gcmv1 0.70 0.70 0.71 aes256gcmv1 6.83 6.84 6.85 ascon128av12 10.16 10.20 10.23 ascon80pqv12 10.17 10.22 10.23 ascon128v12 10.88 10.91 10.93 T:xoodyakround3 12.74 12.76 12.79 T:schwaemm256128v2 13.53 13.57 13.59 ascon128abi32v12 16.80 16.85 16.96 T:schwaemm192192v2 17.58 17.63 17.67 T:schwaemm256256v2 18.43 18.45 18.49 T:schwaemm128128v2 19.71 19.75 19.83 ascon128bi32v12 23.69 23.72 23.72 T:grain128aeadv2 25.51 25.58 25.62 T:isapa128v20 27.42 27.57 27.69 T:isapa128av20 31.54 31.56 31.60 romulusn 33.28 33.30 33.32 T:giftcofb128v1 35.63 35.67 35.72 T:isapk128av20 43.41 43.46 43.48 romulusm 45.98 46.03 46.08 romulust 54.11 54.13 54.15 T:tinyjambu128v2 60.54 60.57 60.59 T:isapk128v20 61.59 61.61 61.62 T:tinyjambu192v2 63.97 63.98 64.00 T:tinyjambu256v2 117.92 117.98 118.03 T:isapxv20 126.23 126.58 128.54 T:elephant200v2 3788.35 3790.29 3791.23 T:elephant176v2 4247.91 4250.61 4252.03 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.02 5.20 5.30 T:aes128gcmv1 5.70 5.82 5.99 aes256gcmv1 10.04 10.16 10.32 ascon128av12 13.16 13.22 13.36 ascon80pqv12 13.12 13.37 13.45 ascon128v12 15.66 15.73 15.91 T:xoodyakround3 20.38 20.59 20.71 ascon128abi32v12 20.78 21.10 21.64 T:schwaemm256128v2 23.51 23.83 23.94 T:schwaemm128128v2 26.64 26.77 26.85 ascon128bi32v12 26.94 27.36 27.85 T:schwaemm192192v2 27.85 28.51 28.90 T:schwaemm256256v2 31.44 31.50 31.56 T:grain128aeadv2 39.31 39.56 39.66 T:giftcofb128v1 40.16 40.32 40.48 romulusn 49.69 49.88 50.29 romulusm 65.39 65.92 66.54 T:tinyjambu128v2 73.96 74.72 75.19 T:tinyjambu192v2 76.84 77.27 78.02 T:tinyjambu256v2 81.79 81.98 82.35 T:isapa128av20 117.69 117.96 118.26 romulust 156.81 157.17 158.01 T:isapk128av20 179.31 179.70 181.84 T:elephant200v2 337.73 339.45 340.21 T:isapa128v20 954.12 958.34 960.57 T:isapk128v20 1796.02 1796.67 1798.18 T:isapxv20 4717.21 4721.70 4726.52 T:elephant176v2 5686.39 5693.39 5695.66 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.35 5.51 5.59 T:aes128gcmv1 5.91 6.00 6.17 aes256gcmv1 10.12 10.26 10.52 ascon128av12 13.09 13.27 13.50 ascon80pqv12 13.17 13.31 13.40 ascon128v12 15.64 15.89 16.27 T:xoodyakround3 20.26 20.58 20.71 ascon128abi32v12 20.78 21.09 21.73 T:schwaemm256128v2 23.37 23.50 23.70 T:schwaemm128128v2 26.71 26.93 27.02 ascon128bi32v12 27.05 27.55 27.76 T:schwaemm192192v2 27.96 28.37 28.81 T:schwaemm256256v2 31.27 31.32 31.41 T:grain128aeadv2 39.40 39.47 39.65 T:giftcofb128v1 40.23 40.34 40.45 romulusn 50.96 51.11 51.41 romulusm 69.12 70.38 71.22 T:tinyjambu128v2 75.26 75.98 76.20 T:tinyjambu192v2 76.82 77.02 77.33 T:tinyjambu256v2 81.45 81.81 82.20 T:isapa128av20 117.98 118.30 119.12 romulust 156.89 157.35 157.69 T:isapk128av20 176.84 177.91 178.74 T:elephant200v2 337.34 338.96 340.51 T:isapa128v20 954.48 954.92 955.88 T:isapk128v20 1789.48 1790.38 1799.17 T:isapxv20 4714.46 4718.16 4722.20 T:elephant176v2 5695.76 5696.91 5844.92 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.27 5.45 5.66 T:aes128gcmv1 5.92 6.05 6.20 aes256gcmv1 10.05 10.19 10.27 ascon128av12 13.02 13.16 13.24 ascon80pqv12 13.12 13.23 13.40 ascon128v12 15.80 16.16 16.30 T:xoodyakround3 20.27 20.37 20.47 ascon128abi32v12 20.73 20.88 21.22 T:schwaemm256128v2 23.39 23.55 23.67 T:schwaemm128128v2 26.82 26.91 26.98 ascon128bi32v12 26.95 27.18 27.52 T:schwaemm192192v2 27.64 27.90 28.34 T:schwaemm256256v2 31.30 31.33 31.38 T:grain128aeadv2 39.53 39.65 39.71 T:giftcofb128v1 40.25 40.41 40.57 romulusn 51.01 51.05 51.12 romulusm 54.50 54.59 55.02 T:isapa128av20 64.91 65.95 67.46 T:tinyjambu128v2 73.86 74.17 75.57 T:tinyjambu192v2 74.63 75.53 76.36 romulust 76.69 76.89 77.37 T:tinyjambu256v2 102.24 102.46 102.82 T:isapk128av20 177.69 178.23 178.52 T:isapa128v20 176.99 180.61 180.98 T:elephant200v2 504.73 505.06 505.33 T:isapk128v20 936.11 936.81 942.04 T:isapxv20 4721.40 4725.52 4728.59 T:elephant176v2 5689.34 5691.67 5694.96 T:elephant160v2