VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20241022

[Page version: 20251103 11:56:58]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 23.57? 24.83? 41.03? ascon80pqv12 24.46? 26.07? 42.57? ascon128v12 15.97? 27.12? 28.07? ascon128av12 32.24? 34.15? 56.53? ascon128abi32v12 48.67? 51.36? 84.60? ascon128bi32v12 49.92 51.40 52.02 T:aes256gcmv1 52.66 52.66 52.66 T:schwaemm256128v2 63.91 64.62 65.35 T:aes128gcmv1 64.76? 68.99? 114.68? T:schwaemm192192v2 71.78? 76.43? 126.92? T:schwaemm256256v2 48.03? 79.01? 82.04? T:xoodyakround3 60.94? 98.48? 190.95? T:isapa128v20 64.07? 108.62? 112.40? T:giftcofb128v1 110.94? 116.33? 191.32? T:grain128aeadv2 70.23? 118.27? 121.94? T:schwaemm128128v2 138.93? 145.75? 240.10? romulusn 89.54? 158.00? 167.20? T:isapa128av20 161.22? 168.92? 277.95? T:tinyjambu192v2 171.84? 180.01? 296.16? T:tinyjambu256v2 164.32? 201.31? 201.39? T:isapk128av20 130.90? 219.52? 225.86? T:tinyjambu128v2 85.23? 261.90? 589.51? T:isapk128v20 231.46? 384.42? 395.17? romulusm 374.49? 397.50? 656.27? T:elephant200v2 468.78? 786.21? 810.63? T!!!romulust 285.85? 993.22? 1003.75? T:isapxv20 23377.46? 24614.97? 40626.81? T:elephant160v2 23632.33? 38928.58? 38938.95? T:elephant176v2 43116.40? 43133.21? 74970.24? aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 23.48? 24.76? 40.90? ascon80pqv12 24.17? 25.48? 42.06? ascon128v12 15.91? 27.00? 27.95? ascon128av12 30.88? 32.73? 54.23? ascon128abi32v12 50.96 51.44 53.24 T:aes256gcmv1 48.88? 51.47? 84.98? ascon128bi32v12 52.66 52.66 52.71 T:schwaemm256128v2 64.74 65.07 65.62 T:aes128gcmv1 64.74? 69.03? 114.74? T:schwaemm192192v2 71.74? 76.42? 126.83? T:schwaemm256256v2 45.79? 78.01? 81.01? T:xoodyakround3 60.93? 96.88? 190.97? T:isapa128v20 65.95? 108.75? 112.58? T:giftcofb128v1 70.91? 118.15? 121.79? T:schwaemm128128v2 115.15? 120.72? 198.49? T:grain128aeadv2 138.83? 145.72? 239.98? romulusn 89.54? 158.01? 167.21? T:isapa128av20 161.06? 168.91? 277.71? T:tinyjambu192v2 171.83? 180.04? 296.18? T:tinyjambu256v2 164.31? 201.33? 201.37? T:isapk128av20 130.88? 219.52? 225.84? T:tinyjambu128v2 85.33? 260.34? 589.32? T:isapk128v20 231.50? 384.14? 394.73? romulusm 374.50? 397.67? 656.20? T:elephant200v2 468.86? 786.17? 810.86? T!!!romulust 285.93? 995.92? 1003.35? T:isapxv20 23368.75? 24604.02? 40624.18? T:elephant160v2 23626.22? 38923.69? 38943.08? T:elephant176v2 43122.65? 43143.00? 74976.08? aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 23.49? 24.76? 40.91? ascon80pqv12 24.17? 25.47? 42.07? ascon128v12 15.91? 27.02? 27.97? ascon128av12 30.90? 32.74? 54.25? ascon128abi32v12 30.37? 48.59? 95.99? T:isapa128v20 50.61 51.22 51.62 T:aes256gcmv1 48.89? 51.49? 85.01? ascon128bi32v12 52.66 52.66 52.71 T:schwaemm256128v2 64.72 64.95 65.24 T:aes128gcmv1 64.74? 69.03? 114.74? T:schwaemm192192v2 71.76? 76.42? 126.83? T:schwaemm256256v2 46.02? 78.45? 81.45? T:xoodyakround3 60.91? 106.50? 112.16? T:isapa128av20 64.16? 108.77? 112.59? T:giftcofb128v1 70.16? 118.14? 121.81? T:schwaemm128128v2 115.15? 120.64? 198.50? T:grain128aeadv2 108.28? 133.12? 133.47? T:isapk128av20 138.84? 145.76? 240.00? romulusn 68.29? 161.95? 352.74? T:isapk128v20 161.06? 169.51? 277.71? T:tinyjambu192v2 171.82? 180.00? 296.18? T:tinyjambu256v2 130.90? 219.52? 225.86? T:tinyjambu128v2 160.08? 274.37? 285.79? T!!!romulust 229.15? 384.17? 395.19? romulusm 374.50? 397.64? 656.19? T:elephant200v2 466.01? 473.84? 2014.44? aes256gcmv1 200.34? 600.65? 604.83? T:isapxv20 23372.13? 24610.96? 40637.34? T:elephant160v2 23614.59? 38933.80? 38947.66? T:elephant176v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 23.58? 25.33? 40.79? ascon80pqv12 24.36? 25.55? 42.08? ascon128v12 15.97? 26.94? 27.81? ascon128av12 28.50? 32.46? 55.66? T:aes256gcmv1 31.60? 33.27? 54.93? ascon128abi32v12 42.58 43.18 44.60 T:aes128gcmv1 48.87? 51.25? 84.38? ascon128bi32v12 52.38? 52.41? 86.63? T:schwaemm256128v2 35.99? 60.58? 62.47? T:xoodyakround3 64.37? 64.40? 110.99? T:giftcofb128v1 64.82 68.65 68.67 T:schwaemm192192v2 53.73? 74.92? 135.19? T:isapa128v20 72.00? 76.04? 125.70? T:schwaemm256256v2 76.71? 76.75? 138.19? T:isapa128av20 109.75? 115.01? 189.00? T:grain128aeadv2 70.20? 117.77? 121.15? T:schwaemm128128v2 125.90 131.63 131.66 T:tinyjambu192v2 129.27? 135.71? 222.14? T:tinyjambu256v2 167.07? 167.09? 289.27? T:isapk128av20 160.20? 168.03? 275.18? romulusm 106.09? 177.51? 182.37? T:tinyjambu128v2 115.76? 197.75? 197.77? romulusn 282.33? 297.71? 490.32? T:elephant200v2 315.47? 316.34? 545.57? T!!!romulust 322.46? 325.33? 974.48? T:isapxv20 123.58? 428.41? 431.01? T:isapk128v20 22018.41 23176.34 23181.64 aes256gcmv1 16838.56? 29045.64? 29054.48? T:elephant176v2 18462.48? 30427.50? 30435.69? T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 23.71? 25.12? 40.99? ascon80pqv12 24.19? 25.53? 41.83? ascon128v12 15.90? 26.82? 27.67? ascon128av12 27.93? 32.51? 55.51? T:aes256gcmv1 31.04? 33.00? 53.98? ascon128abi32v12 42.93 43.25 43.37 T:aes128gcmv1 48.96? 51.97? 84.59? ascon128bi32v12 52.38? 52.41? 86.67? T:schwaemm256128v2 35.86? 60.07? 61.82? T:xoodyakround3 64.42? 65.52? 111.04? T:giftcofb128v1 64.82 68.66 68.67 T:schwaemm192192v2 53.72? 72.64? 135.19? T:isapa128v20 72.02? 76.10? 125.67? T:schwaemm256256v2 76.71? 76.75? 138.19? T:isapa128av20 112.14? 117.16? 192.55? T:grain128aeadv2 70.97? 117.70? 121.09? T:schwaemm128128v2 126.13 131.86 131.96 T:tinyjambu192v2 129.27? 135.18? 222.17? T:tinyjambu256v2 167.03? 167.36? 289.25? T:isapk128av20 160.00? 167.96? 275.16? romulusm 106.85? 177.79? 182.63? T:tinyjambu128v2 114.89? 197.68? 197.75? romulusn 282.36? 297.85? 490.30? T:elephant200v2 315.45? 316.47? 545.56? T!!!romulust 321.25? 325.78? 973.20? T:isapxv20 119.99? 428.45? 429.61? T:isapk128v20 16830.89? 17644.44? 29053.50? T:elephant176v2 22021.61 23175.50 23183.12 aes256gcmv1 18455.53? 30429.32? 30447.65? T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 23.72? 25.21? 41.00? ascon80pqv12 24.21? 25.39? 41.84? ascon128v12 15.88? 26.82? 27.67? ascon128av12 28.40? 32.57? 55.45? T:aes256gcmv1 31.05? 32.70? 54.00? ascon128abi32v12 43.03 43.26 43.49 T:aes128gcmv1 38.45? 48.81? 87.73? T:isapa128v20 48.99? 51.38? 84.60? ascon128bi32v12 52.39? 52.41? 86.68? T:schwaemm256128v2 35.85? 60.29? 62.17? T:xoodyakround3 62.39? 62.42? 110.66? T:isapa128av20 64.42? 64.43? 111.08? T:giftcofb128v1 64.82 68.65 68.66 T:schwaemm192192v2 72.01? 76.04? 125.66? T:schwaemm256256v2 112.18? 117.65? 192.57? T:grain128aeadv2 70.17? 117.71? 121.13? T:schwaemm128128v2 126.13 131.88 131.89 T:tinyjambu192v2 132.93? 133.19? 228.54? T:isapk128av20 129.26? 135.16? 222.15? T:tinyjambu256v2 162.10? 162.77? 283.17? T!!!romulust 160.02? 167.65? 275.18? romulusm 106.25? 177.76? 182.64? T:tinyjambu128v2 114.89? 197.70? 197.75? romulusn 281.31? 284.38? 695.61? T:isapxv20 282.36? 297.84? 490.31? T:elephant200v2 111.43? 310.01? 310.09? T:isapk128v20 693.86? 956.78? 958.68? aes256gcmv1 16830.59? 17643.31? 29047.77? T:elephant176v2 18449.14? 30427.17? 30430.47? T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 13.54 13.92 14.11 T:aes256gcmv1 20.87 21.06 21.39 T:aes128gcmv1 23.35? 24.68? 40.84? ascon80pqv12 23.95? 25.30? 41.86? ascon128v12 15.65? 26.75? 27.78? ascon128av12 30.39? 32.38? 53.82? ascon128abi32v12 24.46? 42.14? 44.01? T:xoodyakround3 30.21? 48.43? 95.72? T:isapa128v20 48.53? 51.22? 84.72? ascon128bi32v12 52.09 52.11 52.14 T:schwaemm256128v2 64.06? 68.29? 117.39? T:schwaemm192192v2 71.07? 75.71? 125.67? T:schwaemm256256v2 85.74? 90.33? 149.07? T:tinyjambu256v2 89.66? 94.39? 155.73? T:tinyjambu192v2 89.18? 94.70? 157.14? romulusn 89.83? 94.74? 156.31? romulusm 60.93? 106.51? 112.15? T:isapa128av20 63.57? 107.19? 110.63? T:giftcofb128v1 108.48? 114.19? 187.36? T:grain128aeadv2 69.64? 117.25? 120.90? T:schwaemm128128v2 132.78 132.82 132.86 T:isapk128av20 80.51? 135.50? 139.72? T:tinyjambu128v2 68.30? 161.96? 352.64? T:isapk128v20 187.29? 199.70? 332.03? T:elephant200v2 159.27? 273.64? 286.75? T!!!romulust 208.22? 600.86? 777.20? T:isapxv20 476.35? 2020.93? 2024.79? aes256gcmv1 11522.34? 11539.16? 20457.07? T:elephant160v2 10946.45 11667.17 11676.94 T:elephant176v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 13.42 13.62 13.87 T:aes256gcmv1 20.69 21.26 21.69 T:aes128gcmv1 23.64? 25.12? 41.35? ascon80pqv12 23.94? 25.37? 41.86? ascon128v12 15.59? 26.64? 27.64? ascon128av12 30.63? 32.65? 54.27? ascon128abi32v12 24.48? 42.13? 44.04? T:xoodyakround3 30.21? 48.44? 95.75? T:isapa128v20 48.52? 51.23? 84.73? ascon128bi32v12 52.10 52.13 52.14 T:schwaemm256128v2 64.05? 68.29? 117.39? T:schwaemm192192v2 71.07? 75.69? 125.67? T:schwaemm256256v2 85.72? 90.33? 149.09? T:tinyjambu256v2 89.66? 94.40? 155.73? T:tinyjambu192v2 89.60? 94.70? 156.59? romulusm 89.19? 94.73? 157.15? romulusn 60.91? 106.48? 112.14? T:isapa128av20 63.58? 107.21? 110.68? T:giftcofb128v1 108.46? 113.76? 187.35? T:grain128aeadv2 70.27? 117.25? 120.90? T:schwaemm128128v2 132.77 132.84 132.86 T:isapk128av20 81.26? 136.00? 140.25? T:tinyjambu128v2 68.29? 161.89? 352.73? T:isapk128v20 187.33? 200.76? 332.08? T:elephant200v2 157.78? 273.64? 286.74? T!!!romulust 200.53? 600.85? 786.03? T:isapxv20 474.26? 2019.46? 2021.50? aes256gcmv1 11520.02? 11535.53? 20452.23? T:elephant160v2 10946.37 11667.28 11680.83 T:elephant176v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 13.29 13.50 13.86 T:aes256gcmv1 20.64 21.27 22.16 T:aes128gcmv1 23.66? 25.00? 41.37? ascon80pqv12 23.96? 25.31? 41.89? ascon128v12 15.63? 26.64? 27.66? ascon128av12 30.64? 32.67? 54.29? ascon128abi32v12 24.48? 42.14? 44.04? T:xoodyakround3 30.23? 48.44? 95.74? T:isapa128v20 48.54? 51.25? 84.75? ascon128bi32v12 52.10 52.11 52.14 T:schwaemm256128v2 64.05? 68.29? 115.07? T:schwaemm192192v2 71.09? 75.70? 125.67? T:schwaemm256256v2 85.72? 90.32? 149.09? T:tinyjambu256v2 89.66? 94.38? 155.72? T:tinyjambu192v2 89.58? 94.73? 156.60? romulusm 89.19? 94.74? 157.16? romulusn 61.65? 106.50? 112.15? T:isapa128av20 63.59? 107.21? 110.69? T:giftcofb128v1 108.49? 113.79? 187.38? T:grain128aeadv2 69.64? 117.25? 120.89? T:schwaemm128128v2 132.81 132.82 132.84 T:isapk128av20 80.77? 136.00? 140.24? T:tinyjambu128v2 68.24? 161.89? 352.75? T:isapk128v20 187.32? 199.76? 332.07? T:elephant200v2 160.91? 273.65? 284.99? T!!!romulust 200.41? 600.94? 778.94? T:isapxv20 475.85? 2019.44? 2022.41? aes256gcmv1 11527.06? 11538.56? 20447.54? T:elephant160v2 10946.29 11667.07 11675.39 T:elephant176v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 25.16? 25.18? 40.25? ascon80pqv12 25.94? 25.96? 41.49? ascon128v12 17.27? 27.59? 27.63? ascon128av12 34.03? 34.05? 54.45? ascon128abi32v12 38.67? 38.99? 61.45? T:aes256gcmv1 51.42 51.49 51.76 T:aes128gcmv1 51.98? 51.99? 83.16? ascon128bi32v12 53.93 53.94 53.95 T:schwaemm256128v2 38.31? 61.24? 61.25? T:xoodyakround3 68.28? 68.29? 109.21? T:giftcofb128v1 70.19 70.20 70.36 T:schwaemm192192v2 78.11? 78.12? 125.10? T:schwaemm256256v2 88.18? 88.22? 141.07? T:isapa128av20 106.10? 106.13? 169.74? T:isapa128v20 115.47? 115.80? 184.73? T:grain128aeadv2 74.57? 119.28? 120.79? T:schwaemm128128v2 132.66 132.68 132.69 T:tinyjambu192v2 136.19? 136.45? 217.89? T:tinyjambu256v2 168.64? 168.86? 269.77? romulusm 111.86? 178.92? 178.98? T:tinyjambu128v2 121.42? 194.20? 194.22? romulusn 199.32 199.34 199.85 T:isapk128av20 303.45? 304.15? 485.50? T:elephant200v2 384.00? 385.33? 614.41? T:isapk128v20 337.24? 538.05? 538.15? T!!!romulust 828.59 829.14 832.31 T:isapxv20 17772.30? 17778.85? 28458.24? T:elephant176v2 18658.26? 18665.33? 29874.29? T:elephant160v2 23645.99? 23651.91? 37860.13? aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 25.28? 25.57? 40.43? ascon80pqv12 25.79? 25.81? 41.26? ascon128v12 17.18? 27.47? 27.47? ascon128av12 33.47? 33.78? 53.54? ascon128abi32v12 38.84? 38.93? 61.16? T:aes256gcmv1 51.75 51.93 52.09 T:aes128gcmv1 52.10? 52.12? 83.35? ascon128bi32v12 53.92 53.94 53.99 T:schwaemm256128v2 38.29? 60.76? 60.81? T:xoodyakround3 68.34? 68.37? 109.30? T:giftcofb128v1 70.19 70.20 70.20 T:schwaemm192192v2 78.12? 78.14? 124.96? T:schwaemm256256v2 88.18? 88.20? 141.08? T:isapa128av20 106.10? 106.18? 169.74? T:isapa128v20 117.96? 117.97? 188.72? T:grain128aeadv2 75.11? 119.21? 120.72? T:schwaemm128128v2 132.90 132.92 132.95 T:tinyjambu192v2 136.23? 136.26? 217.96? T:tinyjambu256v2 168.84? 169.18? 270.11? romulusm 113.29? 179.23? 179.28? T:tinyjambu128v2 121.38? 194.18? 194.19? romulusn 199.33 199.61 199.67 T:isapk128av20 303.46? 304.25? 485.49? T:elephant200v2 384.07? 385.76? 614.44? T:isapk128v20 337.38? 538.01? 538.09? T!!!romulust 827.53 828.87 831.08 T:isapxv20 17770.55? 17776.77? 28457.64? T:elephant176v2 18656.69 18660.27 18665.55 T:elephant160v2 23642.41? 23646.78? 37860.20? aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 25.79? 25.79? 41.26? ascon128v12 25.55? 25.99? 40.43? ascon80pqv12 17.18? 27.47? 27.47? ascon128av12 33.51? 33.84? 53.53? ascon128abi32v12 38.64? 39.43? 61.05? T:aes256gcmv1 51.75 51.84 51.99 T:aes128gcmv1 52.10? 52.10? 83.35? ascon128bi32v12 53.91 53.95 53.99 T:schwaemm256128v2 38.19? 60.97? 61.00? T:xoodyakround3 65.51? 65.53? 104.81? T:isapa128v20 68.34? 68.39? 109.30? T:giftcofb128v1 69.71? 69.72? 111.52? T:isapa128av20 70.18 70.19 70.20 T:schwaemm192192v2 78.11? 78.12? 124.94? T:schwaemm256256v2 117.96? 118.01? 188.72? T:grain128aeadv2 74.53? 119.21? 120.72? T:schwaemm128128v2 132.90 132.90 132.96 T:tinyjambu192v2 136.20? 136.20? 217.91? T:tinyjambu256v2 155.21 155.23 155.24 T:isapk128av20 168.82? 169.59? 270.09? romulusm 112.01? 179.18? 179.19? T:tinyjambu128v2 121.45? 194.18? 194.19? romulusn 255.09? 255.16? 408.13? T:isapk128v20 176.95? 281.74? 281.76? T!!!romulust 303.45? 304.31? 485.49? T:elephant200v2 543.88 545.13 545.63 T:isapxv20 1421.42? 1424.50? 2279.46? aes256gcmv1 18655.39 18657.82 18661.78 T:elephant160v2 17773.99? 25495.56? 28456.16? T:elephant176v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 34.40? 35.06? 54.84? ascon80pqv12 34.85? 35.40? 55.48? ascon128v12 27.42? 42.75? 43.23? ascon128av12 51.91? 52.13? 81.79? ascon128abi32v12 68.62? 68.95? 109.55? ascon128bi32v12 88.80 89.18 89.32 T:schwaemm256128v2 58.86? 92.15? 93.52? T:xoodyakround3 114.11? 114.12? 182.36? T:schwaemm192192v2 125.02? 125.66? 200.39? T:schwaemm256256v2 132.63? 133.00? 211.23? T:grain128aeadv2 88.13? 139.16? 140.16? T:giftcofb128v1 147.10? 147.73? 235.09? romulusn 97.23? 154.30? 154.82? T:schwaemm128128v2 155.86? 156.30? 249.12? T:tinyjambu192v2 159.87? 160.42? 255.50? T:tinyjambu256v2 183.20? 192.89? 294.87? T:aes256gcmv1 195.09? 196.27? 311.45? romulusm 132.66? 211.34? 211.78? T:tinyjambu128v2 253.31 254.34 261.62 T:aes128gcmv1 215.98? 343.78? 344.67? T:isapa128av20 430.25? 431.02? 687.79? T:elephant200v2 455.44? 725.79? 727.27? T!!!romulust 875.38? 875.82? 1399.88? T:isapa128v20 905.58 905.84 906.36 T:isapk128av20 4326.36? 4328.51? 6921.09? T:isapk128v20 8346.20? 13285.34? 13304.60? T:isapxv20 22092.77 22122.91 22181.31 T:elephant176v2 24942.36? 25061.04? 39910.05? T:elephant160v2 34430.74? 34436.53? 55080.52? aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 34.44? 34.77? 54.70? ascon80pqv12 35.33? 35.62? 56.26? ascon128v12 27.50? 43.05? 43.53? ascon128av12 51.14? 51.36? 81.72? ascon128abi32v12 69.05? 69.43? 109.99? ascon128bi32v12 88.84 88.88 89.02 T:schwaemm256128v2 57.59? 91.36? 91.81? T:xoodyakround3 114.41? 114.63? 182.77? T:schwaemm192192v2 125.13? 125.51? 200.57? T:schwaemm256256v2 134.70? 135.30? 215.09? T:grain128aeadv2 87.84? 139.16? 139.42? T:giftcofb128v1 147.99? 148.81? 235.68? romulusn 96.38? 153.71? 153.74? T:schwaemm128128v2 156.20? 156.64? 249.63? T:tinyjambu192v2 160.42? 160.87? 256.39? T:tinyjambu256v2 187.59? 191.41? 296.70? T:aes256gcmv1 201.95? 203.10? 322.70? romulusm 133.00? 212.01? 212.56? T:tinyjambu128v2 249.74 251.67 254.27 T:aes128gcmv1 214.79? 343.08? 343.56? T:isapa128av20 430.17? 430.32? 687.82? T:elephant200v2 453.55? 723.85? 726.20? T!!!romulust 875.04? 875.30? 1399.50? T:isapa128v20 905.58 906.10 906.44 T:isapk128av20 4326.91? 4327.51? 6922.16? T:isapk128v20 8317.36? 13285.53? 13288.12? T:isapxv20 22092.62 22118.82 22182.46 T:elephant176v2 24942.14? 25029.50? 40025.76? T:elephant160v2 34431.41? 34474.31? 55081.23? aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 34.40? 34.55? 54.40? ascon80pqv12 35.00? 35.18? 55.59? ascon128v12 27.05? 42.38? 42.79? ascon128av12 50.73? 51.13? 80.94? ascon128abi32v12 68.58? 68.58? 109.47? ascon128bi32v12 88.69 88.70 88.88 T:schwaemm256128v2 57.97? 91.70? 92.15? T:xoodyakround3 114.41? 114.63? 182.77? T:schwaemm192192v2 125.13? 125.13? 200.20? T:schwaemm256256v2 134.60? 134.66? 215.05? T:grain128aeadv2 87.21? 139.16? 139.16? T:giftcofb128v1 147.62? 147.99? 235.61? romulusn 96.38? 153.71? 153.74? T:schwaemm128128v2 156.20? 156.23? 249.60? T:tinyjambu192v2 160.27? 160.28? 256.16? T:tinyjambu256v2 183.05? 188.92? 299.06? T:aes256gcmv1 201.40? 201.54? 321.96? romulusm 132.67? 212.04? 212.05? T:tinyjambu128v2 142.27? 226.70? 227.04? T:isapa128av20 251.75 252.57 255.35 T:aes128gcmv1 430.17? 430.28? 687.83? T:elephant200v2 456.22? 457.15? 729.38? T:isapa128v20 288.27? 459.38? 460.63? T!!!romulust 638.98 639.10 639.21 T:isapk128av20 2364.16? 2364.50? 3782.11? T:isapk128v20 4344.32? 6950.03? 6953.26? T:isapxv20 12163.53? 12255.74? 19461.79? aes256gcmv1 22092.62 22095.78 22190.78 T:elephant176v2 24942.55? 25027.08? 39943.79? T:elephant160v2