VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20250922

[Page version: 20251103 11:56:58]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.54 1.54 1.55 T:aes128gcmv1 1.74 1.77 1.78 aes256gcmv1 6.57 6.60 6.61 ascon128av12 9.01 9.02 9.03 ascon128v12 9.02 9.07 9.08 ascon80pqv12 11.40 11.42 11.43 ascon128abi32v12 15.25 15.52 15.63 T:xoodyakround3 16.61 16.63 16.63 ascon128bi32v12 19.39 19.41 19.42 T:schwaemm256128v2 24.09 24.11 24.14 T:schwaemm256256v2 25.81 25.83 25.85 T:schwaemm192192v2 26.93 27.23 27.38 T:grain128aeadv2 27.74 27.77 27.83 T:schwaemm128128v2 34.27 34.31 34.33 T:isapa128av20 34.29 34.71 34.72 T:isapa128v20 34.88 35.00 35.37 romulusn 40.53 40.56 40.60 T:giftcofb128v1 56.39 56.47 56.48 T:tinyjambu128v2 56.64 56.79 57.03 romulusm 66.43 66.49 66.55 T:tinyjambu192v2 66.58 66.72 68.28 T:isapk128av20 71.04 71.08 71.08 T:tinyjambu256v2 88.79 88.88 89.12 T:isapk128v20 115.56 115.58 115.60 romulust 147.86 147.93 148.15 T:elephant200v2 160.66 162.63 164.66 T:isapxv20 6937.90 6938.64 6943.36 T:elephant176v2 7827.99 7828.49 7829.09 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.70 1.72 1.74 T:aes128gcmv1 1.74 1.75 1.77 aes256gcmv1 6.05 6.06 6.07 ascon128av12 8.87 8.90 8.91 ascon80pqv12 9.09 9.10 9.11 ascon128v12 11.42 11.44 11.46 ascon128abi32v12 16.23 16.25 16.26 ascon128bi32v12 16.34 16.63 16.71 T:xoodyakround3 19.46 19.48 19.62 T:schwaemm256128v2 24.01 24.11 24.14 T:schwaemm256256v2 25.84 25.86 25.88 T:schwaemm192192v2 27.31 27.32 27.38 T:grain128aeadv2 27.79 27.82 27.87 T:schwaemm128128v2 34.30 34.32 34.35 T:isapa128av20 34.50 34.71 34.89 T:isapa128v20 34.87 34.88 35.86 romulusn 40.47 40.53 40.54 T:giftcofb128v1 56.51 56.52 56.54 T:tinyjambu128v2 56.75 57.22 57.65 romulusm 66.11 66.14 66.15 T:tinyjambu192v2 66.59 66.67 68.95 T:isapk128av20 71.14 71.18 71.22 T:tinyjambu256v2 88.79 88.89 88.92 T:isapk128v20 115.57 115.60 115.63 romulust 147.80 147.98 148.12 T:elephant200v2 161.58 162.81 163.99 T:isapxv20 6938.41 6939.10 6965.28 T:elephant176v2 7828.44 7829.43 7857.04 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.69 1.71 1.73 T:aes128gcmv1 1.74 1.75 1.76 aes256gcmv1 6.05 6.07 6.08 ascon128av12 8.88 8.90 8.92 ascon80pqv12 9.06 9.08 9.13 ascon128v12 11.43 11.45 11.46 ascon128abi32v12 16.25 16.25 16.25 ascon128bi32v12 16.45 16.64 16.77 T:xoodyakround3 17.24 17.74 17.74 T:isapa128v20 19.50 19.60 19.66 T:schwaemm256128v2 22.89 22.91 22.93 T:isapa128av20 24.05 24.09 24.13 T:schwaemm256256v2 25.85 25.87 25.89 T:schwaemm192192v2 27.30 27.31 27.32 T:grain128aeadv2 27.80 27.84 27.87 T:schwaemm128128v2 34.87 35.02 35.29 romulusn 38.85 38.87 38.90 romulust 40.49 40.54 40.56 T:giftcofb128v1 44.31 44.39 45.32 T:isapk128av20 55.33 55.36 55.42 T:isapk128v20 56.50 56.50 56.53 T:tinyjambu128v2 56.47 56.80 56.83 romulusm 66.11 66.13 66.16 T:tinyjambu192v2 71.17 71.24 71.24 T:tinyjambu256v2 94.64 95.21 96.19 T:isapxv20 147.86 148.22 148.51 T:elephant200v2 6939.57 6943.90 6945.42 T:elephant176v2 7827.36 7828.82 7856.20 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.04 1.04 1.04 T:aes128gcmv1 1.14 1.15 1.16 aes256gcmv1 6.28 6.29 6.30 ascon128av12 8.80 8.83 8.91 ascon80pqv12 8.99 9.00 9.01 ascon128v12 11.15 11.21 11.80 ascon128abi32v12 11.63 11.88 11.98 T:xoodyakround3 16.45 16.45 16.47 ascon128bi32v12 19.40 19.41 19.42 T:schwaemm256128v2 23.87 23.96 23.98 T:schwaemm256256v2 25.43 25.58 25.60 T:schwaemm192192v2 26.09 26.11 26.24 T:isapa128v20 27.14 27.17 27.20 T:grain128aeadv2 27.69 27.73 27.75 T:schwaemm128128v2 28.36 28.40 28.70 romulusn 28.49 28.67 28.69 T:isapa128av20 39.34 39.42 39.43 romulusm 40.49 40.52 40.54 T:giftcofb128v1 44.66 44.66 44.74 T:tinyjambu128v2 51.73 51.76 51.81 T:tinyjambu192v2 53.33 53.36 53.38 T:tinyjambu256v2 55.61 56.06 56.50 T:isapk128av20 72.14 72.21 72.68 T:isapk128v20 77.20 77.23 77.24 romulust 111.61 111.92 111.96 T:elephant200v2 129.63 129.89 130.78 T:isapxv20 5182.50 5185.56 5189.22 T:elephant176v2 5868.70 5869.12 5869.41 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.10 1.11 1.12 T:aes128gcmv1 1.14 1.14 1.15 aes256gcmv1 5.97 6.00 6.01 ascon128av12 8.89 8.89 8.89 ascon80pqv12 8.92 8.93 8.95 ascon128v12 11.21 11.24 11.26 ascon128abi32v12 12.24 12.35 12.56 T:xoodyakround3 16.24 16.34 16.35 ascon128bi32v12 19.42 19.45 19.54 T:schwaemm256128v2 23.93 23.99 24.02 T:schwaemm256256v2 25.64 25.68 25.72 T:schwaemm192192v2 26.15 26.16 26.36 T:isapa128v20 27.17 27.31 27.34 T:grain128aeadv2 27.72 27.75 27.76 T:schwaemm128128v2 28.55 28.56 28.81 romulusn 28.65 28.69 28.71 T:isapa128av20 39.19 39.32 39.72 romulusm 40.46 40.48 40.52 T:giftcofb128v1 44.73 44.73 44.73 T:tinyjambu128v2 51.46 51.47 51.50 T:tinyjambu192v2 53.42 53.44 53.46 T:tinyjambu256v2 55.53 55.62 56.53 T:isapk128av20 72.65 72.69 72.73 T:isapk128v20 77.22 77.24 77.24 romulust 111.62 111.79 111.94 T:elephant200v2 129.25 130.52 130.93 T:isapxv20 5182.01 5182.50 5189.11 T:elephant176v2 5869.02 5869.43 5869.65 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.10 1.11 1.12 T:aes128gcmv1 1.13 1.14 1.15 aes256gcmv1 5.99 6.00 6.01 ascon128av12 8.89 8.89 8.90 ascon80pqv12 8.93 8.94 8.95 ascon128v12 11.24 11.25 11.25 ascon128abi32v12 12.27 12.32 12.55 T:xoodyakround3 16.25 16.35 16.36 ascon128bi32v12 17.54 17.55 17.70 T:isapa128v20 19.46 19.48 19.53 T:schwaemm256128v2 22.92 22.97 22.99 T:isapa128av20 23.89 23.98 24.00 T:schwaemm256256v2 25.60 25.70 25.71 T:schwaemm192192v2 27.31 27.35 27.49 T:grain128aeadv2 27.74 27.76 27.78 T:schwaemm128128v2 28.35 28.49 28.82 romulusn 38.85 38.87 38.88 romulust 39.29 39.52 39.73 romulusm 40.46 40.50 40.52 T:giftcofb128v1 44.45 44.50 44.90 T:isapk128av20 44.74 44.74 44.75 T:tinyjambu128v2 51.43 51.46 51.51 T:tinyjambu192v2 53.42 53.42 53.43 T:tinyjambu256v2 55.44 55.83 56.07 T:isapk128v20 94.95 95.67 96.08 T:isapxv20 111.63 111.89 112.20 T:elephant200v2 5181.95 5182.41 5188.11 T:elephant176v2 5868.76 5869.07 5869.29 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.52 0.53 0.55 T:aes128gcmv1 0.53 0.55 0.57 aes256gcmv1 5.98 6.00 6.01 ascon128av12 7.97 8.12 8.29 T:xoodyakround3 8.76 8.80 8.81 ascon80pqv12 8.95 8.95 8.97 ascon128v12 10.90 10.94 12.06 ascon128abi32v12 16.28 16.29 16.29 ascon128bi32v12 17.60 17.60 17.63 T:isapa128v20 19.38 19.40 19.44 T:schwaemm256128v2 21.79 21.80 21.82 romulusn 21.80 21.81 21.81 romulusm 23.05 23.06 23.07 T:isapa128av20 23.78 23.88 23.89 T:schwaemm256256v2 25.33 25.36 25.37 T:schwaemm192192v2 26.96 26.98 27.07 T:grain128aeadv2 27.72 27.79 28.07 T:schwaemm128128v2 32.93 32.95 32.98 T:tinyjambu128v2 35.63 35.63 35.68 T:tinyjambu256v2 37.01 37.02 37.03 T:tinyjambu192v2 38.83 38.87 38.88 romulust 40.43 40.45 40.46 T:giftcofb128v1 44.51 44.57 45.41 T:isapk128av20 55.46 55.53 56.06 T:isapk128v20 75.51 75.67 75.82 T:elephant200v2 94.42 95.22 96.66 T:isapxv20 3425.19 3426.21 3428.02 T:elephant176v2 3908.95 3909.31 3909.77 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.53 0.54 0.55 T:aes128gcmv1 0.54 0.57 0.58 aes256gcmv1 5.90 5.92 5.94 ascon128av12 7.95 8.07 8.25 T:xoodyakround3 8.85 8.86 8.88 ascon80pqv12 8.86 8.88 8.91 ascon128v12 11.01 11.02 11.04 ascon128abi32v12 16.25 16.44 16.46 ascon128bi32v12 17.60 17.60 17.73 T:isapa128v20 19.40 19.41 19.43 T:schwaemm256128v2 21.80 21.80 21.82 romulusm 21.79 21.80 21.81 romulusn 22.91 22.97 23.08 T:isapa128av20 23.85 23.87 23.89 T:schwaemm256256v2 25.32 25.34 25.35 T:schwaemm192192v2 27.15 27.18 27.34 T:grain128aeadv2 27.70 27.72 27.80 T:schwaemm128128v2 32.94 32.95 32.98 T:tinyjambu128v2 35.66 35.68 35.72 T:tinyjambu256v2 36.76 36.83 36.87 T:tinyjambu192v2 38.80 38.87 38.88 romulust 40.42 40.46 40.49 T:giftcofb128v1 44.54 44.63 45.41 T:isapk128av20 55.40 55.46 55.59 T:isapk128v20 75.69 75.80 76.09 T:elephant200v2 95.32 95.92 96.18 T:isapxv20 3424.61 3426.07 3439.09 T:elephant176v2 3909.20 3909.57 3910.02 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.53 0.53 0.54 T:aes128gcmv1 0.54 0.55 0.56 aes256gcmv1 5.91 5.91 5.92 ascon128av12 7.97 8.17 8.51 T:xoodyakround3 8.83 8.87 8.88 ascon80pqv12 8.87 8.88 8.93 ascon128v12 11.02 11.04 11.04 ascon128abi32v12 16.25 16.44 16.46 ascon128bi32v12 17.57 17.57 17.73 T:isapa128v20 19.40 19.42 19.43 T:schwaemm256128v2 21.79 21.80 21.81 romulusn 21.80 21.81 21.82 romulusm 22.91 22.98 23.07 T:isapa128av20 23.76 23.85 23.91 T:schwaemm256256v2 25.29 25.33 25.36 T:schwaemm192192v2 27.19 27.30 27.38 T:grain128aeadv2 27.69 27.71 27.76 T:schwaemm128128v2 32.96 32.97 32.97 T:tinyjambu128v2 35.66 35.66 35.67 T:tinyjambu256v2 36.80 36.81 36.87 T:tinyjambu192v2 38.82 38.87 38.92 romulust 40.41 40.44 40.53 T:giftcofb128v1 44.50 44.63 45.63 T:isapk128av20 55.45 55.52 55.99 T:isapk128v20 75.64 75.71 75.84 T:elephant200v2 96.07 96.35 96.62 T:isapxv20 3424.71 3426.66 3430.40 T:elephant176v2 3909.14 3909.41 3909.98 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.15 1.16 1.16 T:aes128gcmv1 1.28 1.29 1.29 aes256gcmv1 6.45 6.45 6.47 ascon128av12 9.01 9.02 9.06 ascon80pqv12 9.12 9.14 9.16 ascon128v12 11.49 11.50 12.01 ascon128abi32v12 11.88 11.93 12.10 T:xoodyakround3 16.79 16.79 16.80 ascon128bi32v12 19.97 19.99 20.00 T:schwaemm256128v2 24.63 24.66 24.67 T:schwaemm256256v2 26.03 26.28 26.28 T:schwaemm192192v2 27.49 27.50 27.58 T:grain128aeadv2 28.12 28.17 28.18 T:schwaemm128128v2 28.62 28.68 28.83 romulusn 30.92 31.11 31.12 T:isapa128av20 38.38 38.41 38.48 T:isapa128v20 39.61 39.67 39.72 romulusm 40.87 40.89 40.91 T:giftcofb128v1 45.03 45.03 45.10 T:tinyjambu128v2 52.13 52.16 52.24 T:tinyjambu192v2 53.76 53.78 53.80 T:tinyjambu256v2 62.67 62.71 63.33 T:isapk128av20 78.40 78.41 78.42 romulust 114.13 114.23 114.29 T:elephant200v2 125.40 125.48 126.22 T:isapk128v20 209.87 210.09 210.59 T:isapxv20 5221.90 5223.37 5224.96 T:elephant176v2 5935.08 5935.27 5935.70 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.23 1.24 1.24 T:aes128gcmv1 1.28 1.28 1.29 aes256gcmv1 6.15 6.17 6.18 ascon128av12 9.05 9.05 9.07 ascon80pqv12 9.08 9.08 9.10 ascon128v12 11.54 11.55 11.55 ascon128abi32v12 12.39 12.48 12.65 T:xoodyakround3 16.60 16.68 16.69 ascon128bi32v12 20.02 20.03 20.04 T:schwaemm256128v2 24.57 24.64 24.66 T:schwaemm256256v2 26.20 26.31 26.36 T:schwaemm192192v2 27.66 27.68 27.76 T:grain128aeadv2 28.18 28.19 28.21 T:schwaemm128128v2 28.68 28.81 28.82 romulusn 31.07 31.10 31.12 T:isapa128av20 38.26 38.29 38.37 T:isapa128v20 39.67 39.87 40.06 romulusm 40.86 40.88 40.88 T:giftcofb128v1 45.11 45.11 45.12 T:tinyjambu128v2 51.88 51.90 51.93 T:tinyjambu192v2 53.86 53.87 53.90 T:tinyjambu256v2 62.67 62.71 63.72 T:isapk128av20 78.39 78.40 78.41 romulust 114.06 114.17 114.30 T:elephant200v2 125.34 125.37 125.89 T:isapk128v20 208.93 209.53 210.34 T:isapxv20 5222.32 5223.32 5225.05 T:elephant176v2 5934.76 5935.15 5935.51 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.22 1.22 1.23 T:aes128gcmv1 1.27 1.28 1.28 aes256gcmv1 6.15 6.17 6.18 ascon128av12 9.05 9.05 9.05 ascon80pqv12 9.10 9.10 9.11 ascon128v12 11.54 11.54 11.55 ascon128abi32v12 12.38 12.44 12.61 T:xoodyakround3 16.60 16.68 16.69 ascon128bi32v12 20.01 20.02 20.08 T:schwaemm256128v2 23.72 23.73 23.73 T:isapa128v20 24.30 24.35 24.36 T:isapa128av20 24.59 24.62 24.65 T:schwaemm256256v2 26.18 26.35 26.37 T:schwaemm192192v2 27.64 27.65 27.70 T:grain128aeadv2 28.15 28.17 28.19 T:schwaemm128128v2 28.78 29.05 29.06 romulusn 39.65 39.75 40.06 romulusm 39.97 39.99 40.00 romulust 40.85 40.87 40.92 T:giftcofb128v1 45.11 45.12 45.14 T:tinyjambu128v2 48.50 48.53 49.25 T:isapk128av20 51.85 51.87 51.91 T:tinyjambu192v2 53.86 53.88 53.89 T:tinyjambu256v2 82.58 82.63 83.10 T:isapk128v20 113.87 114.00 114.30 T:elephant200v2 136.08 136.32 136.54 T:isapxv20 5222.32 5223.45 5239.92 T:elephant176v2 5935.18 5935.54 5935.84 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.84 5.86 6.11 T:aes128gcmv1 5.89 5.93 6.25 aes256gcmv1 10.02 10.23 10.80 ascon128av12 12.27 12.59 13.01 ascon128v12 12.86 13.02 13.21 ascon80pqv12 17.70 18.06 18.59 T:xoodyakround3 18.52 18.67 19.02 ascon128abi32v12 24.22 24.40 24.57 ascon128bi32v12 32.54 32.59 32.98 T:schwaemm256128v2 34.41 34.54 34.66 romulusn 35.35 35.46 35.61 T:grain128aeadv2 36.77 37.05 37.32 T:schwaemm128128v2 39.20 39.25 39.30 T:schwaemm256256v2 42.73 42.75 43.26 T:schwaemm192192v2 46.21 46.34 46.47 romulusm 49.41 49.43 49.73 T:giftcofb128v1 53.27 53.38 53.62 T:tinyjambu128v2 61.45 61.61 62.12 T:tinyjambu192v2 63.11 63.19 63.62 T:tinyjambu256v2 86.68 86.92 87.45 T:isapa128av20 105.29 105.45 105.75 romulust 162.93 163.54 163.87 T:elephant200v2 212.76 213.09 213.95 T:isapk128av20 318.35 319.08 321.37 T:isapa128v20 1333.24 1333.45 1334.27 T:isapk128v20 2007.84 2029.09 2032.64 T:isapxv20 6503.06 6505.36 6509.24 T:elephant176v2 7949.45 7950.62 7952.01 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.92 5.98 6.03 aes256gcmv1 5.95 6.05 6.12 T:aes128gcmv1 9.81 10.08 10.33 ascon128av12 12.74 12.88 13.03 ascon80pqv12 12.48 12.89 13.10 ascon128v12 17.84 17.95 18.27 T:xoodyakround3 18.47 18.70 19.09 ascon128abi32v12 23.98 24.43 24.75 ascon128bi32v12 32.56 32.66 32.80 T:schwaemm256128v2 34.59 34.62 34.66 romulusn 35.23 35.52 35.74 T:grain128aeadv2 37.12 37.29 37.38 T:schwaemm128128v2 39.14 39.19 39.23 T:schwaemm256256v2 42.75 42.88 43.06 T:schwaemm192192v2 48.18 48.49 48.74 romulusm 49.66 49.66 49.89 T:giftcofb128v1 53.53 53.53 53.55 T:tinyjambu128v2 61.56 61.73 61.80 T:tinyjambu192v2 63.66 63.66 63.91 T:tinyjambu256v2 86.72 86.81 87.01 T:isapa128av20 105.23 105.24 105.27 romulust 163.01 163.15 163.49 T:elephant200v2 211.93 213.15 213.70 T:isapk128av20 319.10 319.10 319.11 T:isapa128v20 1332.77 1333.01 1333.34 T:isapk128v20 2013.53 2016.86 2017.93 T:isapxv20 6500.09 6502.48 6508.75 T:elephant176v2 7947.41 7953.43 7964.78 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.86 5.88 5.91 T:aes128gcmv1 5.92 5.97 6.00 aes256gcmv1 9.77 9.86 10.08 ascon128av12 12.56 12.62 12.75 ascon128v12 12.49 12.64 12.70 ascon80pqv12 17.91 18.22 18.43 T:xoodyakround3 18.24 18.41 18.59 ascon128abi32v12 23.88 23.97 23.98 ascon128bi32v12 32.58 32.77 32.87 T:schwaemm256128v2 34.60 34.62 34.76 romulusn 35.29 35.36 35.73 T:grain128aeadv2 36.98 36.99 37.24 T:schwaemm128128v2 39.10 39.16 39.23 T:schwaemm256256v2 42.82 42.91 43.00 T:schwaemm192192v2 47.99 48.18 48.38 romulusm 49.53 49.66 49.80 T:giftcofb128v1 53.45 53.45 53.45 T:tinyjambu128v2 55.66 55.78 55.98 T:isapa128av20 61.35 61.55 61.89 T:tinyjambu192v2 63.79 63.82 63.93 T:tinyjambu256v2 65.66 65.76 65.97 romulust 131.30 131.77 132.04 T:isapk128av20 162.96 163.19 163.38 T:elephant200v2 165.80 165.80 166.20 T:isapa128v20 696.10 696.21 696.36 T:isapk128v20 1054.41 1058.36 1060.85 T:isapxv20 6500.55 6503.84 6509.66 T:elephant176v2 7947.52 7949.59 7951.20 T:elephant160v2