VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20240808

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 7.56 7.56 7.57 ascon128av12 11.12 11.13 11.13 ascon128v12 11.12 11.13 11.14 ascon80pqv12 17.62 17.63 18.11 ascon128abi32v12 25.74 25.75 25.76 ascon128bi32v12 37.05 37.07 37.33 T:xoodyakround3 43.65 43.76 43.88 T:schwaemm256128v2 45.23 45.38 46.02 T:aes128gcmv1 45.73 45.77 46.31 T:isapa128av20 46.31 46.32 46.72 T:giftcofb128v1 49.49? 52.02? 55.36? T:isapa128v20 53.50 53.77 54.36 T:aes256gcmv1 54.32 54.46 54.59 T:schwaemm128128v2 55.90 55.93 56.35 romulusn 56.25 56.26 58.95 T:tinyjambu128v2 57.24 57.33 57.41 T:schwaemm192192v2 58.53 58.57 61.25 T:schwaemm256256v2 71.45 71.54 74.10 T:tinyjambu192v2 77.56 77.59 77.74 T:tinyjambu256v2 95.52 95.56 98.32 romulusm 208.63 208.71 209.95 romulust 243.78 247.98 255.83 T:isapk128v20 304.00 305.28 306.74 T:isapk128av20 384.51 386.84 390.56 T:isapxv20 387.40 390.04 390.33 T:elephant200v2 13411.00 13423.88 13430.47 T:elephant160v2 14204.89 14215.95 14225.17 T:elephant176v2 29377.18 29393.79 29420.30 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 7.50 7.50 7.57 ascon128av12 11.12 11.13 11.14 ascon80pqv12 11.12 11.13 11.13 ascon128v12 17.55 17.57 17.62 ascon128abi32v12 25.50 25.50 25.77 ascon128bi32v12 36.08 36.16 36.45 T:xoodyakround3 43.69 43.76 43.85 T:schwaemm256128v2 45.16 45.48 48.23 T:aes128gcmv1 45.92 46.03 46.15 T:isapa128av20 46.05 46.07 46.43 T:giftcofb128v1 51.37 52.62 55.07 T:isapa128v20 53.36 53.69 54.24 T:aes256gcmv1 54.26 54.38 54.41 T:schwaemm128128v2 55.89 55.91 56.13 romulusn 56.49 56.51 56.59 T:tinyjambu128v2 57.30 57.32 59.86 T:schwaemm192192v2 58.51 58.51 58.65 T:schwaemm256256v2 72.00 72.08 74.78 T:tinyjambu192v2 77.81 77.87 80.82 T:tinyjambu256v2 95.51 95.69 98.57 romulusm 208.56 208.73 209.05 romulust 244.15 247.52 252.69 T:isapk128v20 304.15 305.93 307.22 T:isapk128av20 383.45 385.15 391.66 T:isapxv20 387.45 389.23 390.20 T:elephant200v2 13415.45 13423.08 13431.12 T:elephant160v2 14205.25 14214.87 14227.43 T:elephant176v2 29359.62 29366.83 29382.26 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 7.50 7.57 7.57 ascon128av12 11.12 11.13 11.13 ascon80pqv12 11.12 11.13 11.14 ascon128v12 17.56 17.58 17.88 ascon128abi32v12 25.46 25.50 25.51 ascon128bi32v12 25.68 26.12 27.75 T:isapa128v20 29.34 29.37 29.65 T:isapa128av20 36.21 36.25 36.42 T:xoodyakround3 43.69 43.70 43.74 T:schwaemm256128v2 45.14 45.33 45.80 T:aes128gcmv1 46.05 46.07 46.43 T:giftcofb128v1 53.39 53.55 53.98 T:aes256gcmv1 54.26 54.39 54.41 T:schwaemm128128v2 55.90 55.93 58.58 romulusn 56.49 56.50 56.60 T:tinyjambu128v2 57.25 57.31 57.45 T:schwaemm192192v2 58.51 58.52 58.65 T:schwaemm256256v2 72.00 72.09 74.86 T:tinyjambu192v2 72.25 72.27 74.96 romulust 77.83 77.86 81.31 T:tinyjambu256v2 95.50 95.59 98.32 romulusm 151.98 155.65 156.56 T:isapk128v20 179.04 179.86 181.06 T:isapk128av20 216.73 219.19 223.22 T:isapxv20 387.46 390.09 391.52 T:elephant200v2 750.07 753.95 758.40 aes256gcmv1 13410.96 13430.94 13440.03 T:elephant160v2 14209.99 14217.81 14228.46 T:elephant176v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 7.46 7.47 7.48 ascon128av12 10.93 10.94 11.00 ascon128v12 10.93 10.94 11.00 ascon80pqv12 17.15 17.16 17.17 ascon128abi32v12 25.12 25.13 25.33 ascon128bi32v12 26.56 26.57 26.78 T:xoodyakround3 32.97 33.11 33.83 T:aes128gcmv1 36.95 37.21 38.66 T:aes256gcmv1 37.63 37.64 39.09 T:isapa128av20 39.06 39.65 40.86 T:isapa128v20 43.31 43.33 44.64 T:schwaemm256128v2 44.38 44.44 45.77 T:tinyjambu128v2 45.97 46.00 47.43 T:giftcofb128v1 47.80 47.88 49.28 romulusn 53.90 53.98 55.25 T:schwaemm128128v2 56.28 56.31 57.65 T:tinyjambu192v2 56.94 57.15 58.35 T:schwaemm192192v2 58.13 58.20 59.59 T:schwaemm256256v2 59.03 59.11 60.36 T:tinyjambu256v2 67.62 68.97 69.10 romulusm 140.23 140.42 140.90 romulust 198.34 199.15 202.57 T:isapk128v20 241.67 243.96 245.07 T:isapk128av20 288.78 288.98 289.96 T:elephant200v2 302.60 303.40 305.80 T:isapxv20 10060.41 10068.61 10078.35 T:elephant160v2 10614.51 10620.00 10630.14 T:elephant176v2 15071.61 15082.37 15092.45 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 7.43 7.44 7.44 ascon128av12 10.93 10.94 11.31 ascon128v12 11.00 11.00 11.06 ascon80pqv12 17.11 17.15 17.30 ascon128abi32v12 24.99 25.00 26.04 ascon128bi32v12 26.07 26.10 26.49 T:xoodyakround3 32.90 33.09 34.48 T:aes128gcmv1 37.07 37.26 38.88 T:aes256gcmv1 37.63 37.67 38.95 T:isapa128av20 37.97 39.12 40.61 T:isapa128v20 43.16 43.34 44.25 T:schwaemm256128v2 44.53 44.74 46.21 T:tinyjambu128v2 45.85 46.35 47.63 T:giftcofb128v1 47.80 47.84 49.24 romulusn 53.81 53.90 55.32 T:schwaemm128128v2 56.50 56.62 57.86 T:tinyjambu192v2 56.96 57.04 58.34 T:schwaemm192192v2 58.10 58.18 59.48 T:schwaemm256256v2 59.16 59.35 60.74 T:tinyjambu256v2 67.62 68.16 69.04 romulusm 140.32 140.40 140.63 romulust 198.39 199.04 202.69 T:isapk128v20 241.49 243.61 245.15 T:isapk128av20 288.75 288.96 292.05 T:elephant200v2 303.38 304.35 307.01 T:isapxv20 10065.89 10070.07 10078.67 T:elephant160v2 10609.17 10617.41 10631.39 T:elephant176v2 15066.81 15071.37 15074.52 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 7.44 7.44 7.47 ascon128av12 10.93 10.94 10.99 ascon128v12 11.00 11.00 11.06 ascon80pqv12 17.13 17.14 17.71 ascon128abi32v12 25.00 25.01 25.59 ascon128bi32v12 26.13 26.16 26.36 T:xoodyakround3 25.80 26.20 27.14 T:isapa128v20 29.37 29.57 29.86 T:isapa128av20 32.91 33.06 33.78 T:aes128gcmv1 37.08 37.23 38.73 T:aes256gcmv1 43.30 43.34 44.72 T:schwaemm256128v2 44.50 44.57 46.28 T:tinyjambu128v2 45.84 45.88 47.42 T:giftcofb128v1 47.80 47.92 49.35 romulusn 53.86 54.15 55.18 T:schwaemm128128v2 56.50 56.59 57.84 T:tinyjambu192v2 57.00 57.07 58.36 T:schwaemm192192v2 58.09 58.62 59.53 T:schwaemm256256v2 59.17 59.19 60.61 T:tinyjambu256v2 67.63 67.97 69.09 romulusm 72.10 73.45 73.66 romulust 151.18 152.05 154.96 T:isapk128v20 179.37 180.42 181.61 T:isapk128av20 219.51 220.31 223.30 T:isapxv20 288.78 288.97 290.16 T:elephant200v2 754.11 755.58 755.95 aes256gcmv1 10066.38 10071.42 10085.34 T:elephant160v2 10618.05 10625.42 10634.84 T:elephant176v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 7.38 7.38 7.38 ascon128av12 10.75 10.75 10.75 ascon128v12 10.75 10.75 10.76 ascon80pqv12 16.08 16.10 16.14 T:xoodyakround3 16.68 16.70 17.25 ascon128abi32v12 20.59 20.68 20.89 T:aes128gcmv1 20.57 20.68 20.81 T:aes256gcmv1 24.50 24.52 25.02 ascon128bi32v12 25.81 26.12 27.04 T:isapa128v20 29.37 29.38 29.40 T:isapa128av20 32.49 32.51 32.55 T:tinyjambu128v2 39.67 39.69 39.88 romulusn 39.68 39.72 39.90 romulusm 40.50 40.51 40.55 T:tinyjambu256v2 41.24 41.25 41.31 T:tinyjambu192v2 42.91 42.93 43.03 T:schwaemm256128v2 45.62 45.63 45.94 T:giftcofb128v1 53.33 53.33 53.45 T:schwaemm128128v2 56.61 56.66 59.38 T:schwaemm192192v2 57.69 57.70 57.79 T:schwaemm256256v2 71.91 71.97 74.60 romulust 149.86 150.73 153.80 T:isapk128v20 179.97 180.78 182.82 T:isapk128av20 190.30 193.06 194.29 T:elephant200v2 218.44 219.54 225.18 T:isapxv20 750.33 754.04 757.48 aes256gcmv1 6704.37 6711.55 6720.76 T:elephant160v2 7017.21 7028.72 7039.02 T:elephant176v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 7.37 7.38 7.38 ascon128av12 10.75 10.75 10.83 ascon128v12 10.87 10.87 10.89 ascon80pqv12 16.08 16.09 16.15 T:xoodyakround3 16.69 16.69 16.69 ascon128abi32v12 20.53 20.66 20.91 T:aes256gcmv1 20.56 20.73 20.93 T:aes128gcmv1 24.49 24.51 24.52 ascon128bi32v12 25.83 25.94 26.42 T:isapa128v20 29.37 29.38 29.41 T:isapa128av20 32.49 32.51 32.52 T:tinyjambu128v2 39.68 39.69 39.71 romulusm 39.69 39.70 39.80 romulusn 40.49 40.50 40.54 T:tinyjambu256v2 41.08 41.25 41.26 T:tinyjambu192v2 42.90 42.92 42.95 T:schwaemm256128v2 45.63 45.64 45.87 T:giftcofb128v1 53.33 53.38 53.46 T:schwaemm128128v2 56.59 56.61 57.33 T:schwaemm192192v2 57.69 57.72 57.88 T:schwaemm256256v2 71.89 71.93 74.97 romulust 149.72 150.43 153.77 T:isapk128v20 180.62 181.53 182.70 T:isapk128av20 192.93 193.01 193.61 T:elephant200v2 218.62 220.07 224.88 T:isapxv20 746.87 754.54 759.86 aes256gcmv1 6703.13 6708.25 6711.92 T:elephant160v2 7015.18 7024.11 7029.63 T:elephant176v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 7.37 7.38 7.38 ascon128av12 10.74 10.75 10.76 ascon128v12 10.87 10.88 10.88 ascon80pqv12 16.08 16.12 16.14 T:xoodyakround3 16.69 16.69 16.92 ascon128abi32v12 20.56 20.62 20.73 T:aes128gcmv1 20.60 20.66 20.80 T:aes256gcmv1 24.49 24.50 24.51 ascon128bi32v12 25.48 26.07 26.76 T:isapa128v20 29.35 29.51 29.58 T:isapa128av20 32.48 32.50 32.52 T:tinyjambu128v2 39.68 39.69 39.83 romulusm 39.68 39.69 39.73 romulusn 40.49 40.50 40.56 T:tinyjambu256v2 41.24 41.26 41.28 T:tinyjambu192v2 42.91 42.97 43.04 T:schwaemm256128v2 45.62 45.64 45.88 T:giftcofb128v1 53.33 53.34 53.61 T:schwaemm128128v2 56.59 56.61 56.74 T:schwaemm192192v2 57.69 57.71 58.05 T:schwaemm256256v2 71.90 71.92 74.67 romulust 149.99 153.34 154.20 T:isapk128v20 179.97 181.69 182.83 T:isapk128av20 190.19 192.98 193.15 T:elephant200v2 218.73 220.20 224.63 T:isapxv20 751.97 756.74 759.26 aes256gcmv1 6703.57 6709.40 6719.32 T:elephant160v2 7015.19 7022.53 7030.80 T:elephant176v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 7.66 7.66 7.67 ascon128av12 11.11 11.11 11.11 ascon128v12 11.11 11.11 11.11 ascon80pqv12 17.69 17.69 17.99 ascon128abi32v12 25.58 25.58 25.69 ascon128bi32v12 26.80 26.81 27.04 T:xoodyakround3 34.52 34.65 35.49 T:aes128gcmv1 38.75 38.93 39.81 T:aes256gcmv1 40.19 40.21 40.41 T:isapa128av20 44.52 44.55 46.20 T:schwaemm256128v2 44.77 44.81 46.57 T:tinyjambu128v2 46.47 46.47 47.06 T:giftcofb128v1 48.26 48.27 50.07 romulusn 54.50 54.56 56.16 T:schwaemm128128v2 56.71 56.81 58.40 T:tinyjambu192v2 56.66 56.93 59.02 T:isapa128v20 58.14 58.24 59.97 T:schwaemm192192v2 59.49 59.51 61.13 T:tinyjambu256v2 59.63 59.63 61.32 T:schwaemm256256v2 68.12 68.61 70.02 romulusm 141.66 142.91 143.01 romulust 266.00 267.23 268.90 T:isapk128av20 293.78 295.40 295.56 T:elephant200v2 334.01 335.09 337.10 T:isapk128v20 487.25 487.87 491.03 T:isapxv20 10180.19 10181.90 10188.21 T:elephant160v2 10697.16 10700.95 10704.79 T:elephant176v2 15370.52 15374.97 15388.79 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 7.63 7.63 7.64 ascon128av12 11.11 11.11 11.20 ascon128v12 11.17 11.17 11.24 ascon80pqv12 17.67 17.70 18.56 ascon128abi32v12 25.48 25.48 27.18 ascon128bi32v12 26.32 26.34 26.62 T:xoodyakround3 34.44 34.51 35.83 T:aes128gcmv1 38.68 38.83 39.81 T:aes256gcmv1 40.22 40.33 41.99 T:isapa128av20 44.54 44.57 45.14 T:schwaemm256128v2 44.90 44.92 45.07 T:tinyjambu128v2 46.39 46.45 48.44 T:giftcofb128v1 48.26 48.29 50.05 romulusn 54.48 54.51 56.17 T:schwaemm128128v2 56.96 57.05 58.65 T:tinyjambu192v2 56.82 57.17 58.70 T:isapa128v20 58.19 58.30 59.94 T:schwaemm192192v2 59.62 59.64 61.35 T:schwaemm256256v2 59.63 59.99 61.47 T:tinyjambu256v2 68.23 68.28 70.12 romulusm 142.36 142.97 143.18 romulust 266.09 267.31 269.72 T:isapk128av20 293.89 295.44 299.49 T:elephant200v2 334.80 335.03 336.33 T:isapk128v20 486.24 487.91 489.56 T:isapxv20 10180.07 10184.77 10192.98 T:elephant160v2 10697.44 10703.17 10713.08 T:elephant176v2 15370.10 15379.19 15386.53 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 7.63 7.64 7.71 ascon128av12 11.11 11.11 11.11 ascon128v12 11.17 11.17 11.18 ascon80pqv12 17.67 17.67 17.67 ascon128abi32v12 25.48 25.48 25.49 ascon128bi32v12 26.38 26.40 26.62 T:xoodyakround3 30.86 31.04 31.68 T:isapa128av20 34.44 34.57 35.46 T:aes128gcmv1 34.90 35.17 36.25 T:isapa128v20 38.69 38.82 39.62 T:aes256gcmv1 44.53 44.57 44.80 T:schwaemm256128v2 44.90 44.93 46.65 T:tinyjambu128v2 46.38 46.42 48.37 T:giftcofb128v1 48.29 48.38 50.14 romulusn 54.48 54.52 56.13 T:schwaemm128128v2 56.99 57.06 58.58 T:tinyjambu192v2 58.18 58.25 59.92 T:schwaemm192192v2 59.62 59.64 61.29 T:schwaemm256256v2 59.63 59.66 61.44 T:tinyjambu256v2 68.25 68.75 70.42 romulusm 74.22 74.60 76.03 romulust 193.05 193.85 194.53 T:isapk128av20 224.68 224.85 227.10 T:isapk128v20 293.79 295.42 296.71 T:elephant200v2 314.12 314.98 318.43 T:isapxv20 1054.97 1057.32 1058.69 aes256gcmv1 10183.40 10187.61 10192.72 T:elephant160v2 10702.65 10709.89 10711.99 T:elephant176v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 11.91 11.91 12.26 ascon128av12 14.84 14.88 15.02 ascon128v12 14.95 15.04 15.09 ascon80pqv12 29.77 29.80 29.96 ascon128abi32v12 35.87 35.94 36.09 ascon128bi32v12 38.18 38.25 38.34 T:xoodyakround3 53.60 53.68 53.81 T:tinyjambu128v2 57.82 57.88 58.16 T:giftcofb128v1 59.18 59.18 59.31 romulusn 66.87 66.95 67.15 T:tinyjambu192v2 69.02 69.59 72.81 T:aes128gcmv1 69.80 69.80 70.05 T:schwaemm128128v2 69.75 69.82 69.97 T:tinyjambu256v2 72.28 72.39 72.45 T:schwaemm256128v2 76.05 76.52 77.16 T:aes256gcmv1 79.12 79.19 79.78 romulusm 93.03 93.09 93.15 T:schwaemm192192v2 94.02 94.13 94.25 T:schwaemm256256v2 99.10 99.17 99.43 T:isapa128av20 192.42 192.59 192.99 romulust 409.14 409.26 409.55 T:elephant200v2 460.91 465.25 500.11 T:isapa128v20 775.52 778.20 780.10 T:isapk128av20 3416.85 3421.72 3429.46 T:isapk128v20 4663.16 4674.71 4679.22 T:isapxv20 13293.51 13315.57 13378.06 T:elephant176v2 13599.81 13607.90 13688.09 T:elephant160v2 22271.56 22338.70 22356.29 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 12.04 12.11 12.33 ascon128av12 14.94 14.96 15.12 ascon80pqv12 14.88 15.02 15.10 ascon128v12 30.05 30.16 30.70 ascon128abi32v12 36.32 36.42 36.52 ascon128bi32v12 37.68 37.85 37.91 T:xoodyakround3 53.66 53.88 54.05 T:tinyjambu128v2 58.58 58.59 58.74 T:giftcofb128v1 59.26 59.26 59.38 romulusn 67.20 67.32 67.43 T:tinyjambu192v2 68.26 68.50 69.70 T:aes128gcmv1 69.77 69.81 69.84 T:schwaemm128128v2 70.04 70.23 70.52 T:tinyjambu256v2 72.35 72.47 72.55 T:schwaemm256128v2 75.09 75.55 76.34 T:aes256gcmv1 82.43 82.49 82.77 romulusm 93.16 93.21 93.27 T:schwaemm192192v2 94.16 94.23 94.38 T:schwaemm256256v2 99.49 99.57 99.66 T:isapa128av20 192.52 192.61 192.91 romulust 409.46 409.54 409.82 T:elephant200v2 462.14 468.37 480.02 T:isapa128v20 775.23 778.25 782.80 T:isapk128av20 3415.92 3422.50 3429.41 T:isapk128v20 4640.83 4647.54 4662.66 T:isapxv20 13292.42 13294.84 13380.95 T:elephant176v2 13597.55 13600.44 13687.59 T:elephant160v2 22263.68 22344.73 22381.67 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 11.98 11.98 12.05 ascon128av12 14.80 14.86 14.88 ascon128v12 14.88 14.88 14.94 ascon80pqv12 29.98 29.98 30.05 ascon128abi32v12 36.32 36.33 36.45 ascon128bi32v12 37.90 38.04 38.26 T:xoodyakround3 53.66 53.66 54.02 T:tinyjambu128v2 58.57 58.58 58.68 T:giftcofb128v1 59.26 59.26 59.26 romulusn 64.23 64.39 64.51 T:isapa128av20 67.16 67.25 67.36 T:tinyjambu192v2 68.01 68.34 68.89 T:aes128gcmv1 69.77 69.82 69.85 T:schwaemm128128v2 70.05 70.20 70.45 T:tinyjambu256v2 72.33 72.44 72.49 T:schwaemm256128v2 75.21 75.47 76.03 T:aes256gcmv1 82.43 82.43 82.49 romulusm 93.12 93.18 93.23 T:schwaemm192192v2 94.12 94.23 94.30 T:schwaemm256256v2 122.62 122.72 122.77 romulust 240.40 242.34 247.61 T:isapa128v20 409.45 409.51 410.47 T:elephant200v2 476.30 477.26 478.44 T:isapk128av20 1834.66 1863.74 1888.80 T:isapk128v20 2428.42 2445.81 2467.92 T:isapxv20 7977.73 7995.21 8045.60 aes256gcmv1 13294.20 13329.19 13384.75 T:elephant176v2 13598.55 13601.17 13658.94 T:elephant160v2