VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20260217

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.93 0.95 0.97 T:aes128gcmv1 1.05 1.07 1.09 aes256gcmv1 6.67 6.76 6.86 ascon128av12 9.98 10.11 10.19 ascon80pqv12 10.07 10.14 10.22 ascon128v12 12.58 12.67 12.81 T:schwaemm256128v2 12.78 12.85 13.05 ascon128abi32v12 14.02 14.08 14.12 T:xoodyakround3 16.57 16.73 16.85 T:schwaemm192192v2 17.31 17.41 17.49 T:schwaemm256256v2 18.25 18.29 18.35 T:schwaemm128128v2 19.04 19.09 19.19 ascon128bi32v12 23.63 23.67 23.70 T:grain128aeadv2 32.94 33.01 33.08 T:giftcofb128v1 38.08 38.32 38.48 T:isapa128v20 38.82 38.87 38.90 romulusn 38.81 38.90 39.80 T:isapa128av20 49.93 50.22 50.50 T:isapk128av20 62.31 62.37 62.46 romulusm 65.17 65.58 65.65 T:tinyjambu128v2 65.35 66.48 67.56 T:isapk128v20 77.81 77.84 77.86 T:tinyjambu192v2 83.90 84.04 84.06 T:tinyjambu256v2 129.82 129.93 130.02 romulust 129.51? 139.25? 147.25? T:isapxv20 152.38 153.68 162.27 T:elephant200v2 5018.27 5023.73 5031.11 T:elephant176v2 5623.12 5625.09 5627.90 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.65 0.69 0.72 T:aes128gcmv1 0.80 0.81 0.82 aes256gcmv1 6.68 6.72 6.75 ascon128av12 9.89 9.99 10.16 ascon80pqv12 10.00 10.04 10.09 ascon128v12 12.54 12.62 12.71 T:schwaemm256128v2 12.77 12.85 12.95 ascon128abi32v12 13.95 14.00 14.05 T:xoodyakround3 16.60 16.70 16.79 T:schwaemm192192v2 17.27 17.37 17.51 T:schwaemm256256v2 18.10 18.18 18.22 T:schwaemm128128v2 19.40 19.44 19.49 ascon128bi32v12 23.31 23.43 24.39 T:grain128aeadv2 33.14 33.24 33.30 T:giftcofb128v1 38.24 38.49 38.69 T:isapa128v20 38.80 38.88 38.94 romulusn 39.19 39.58 40.19 T:isapa128av20 49.84 50.42 50.85 T:isapk128av20 62.29 62.38 62.45 romulusm 65.10 65.12 65.53 T:tinyjambu128v2 64.92 66.15 67.48 T:isapk128v20 78.04 78.06 78.08 T:tinyjambu192v2 84.04 84.05 84.07 T:tinyjambu256v2 129.81 129.90 130.00 romulust 131.71? 136.09? 148.07? T:isapxv20 151.08 154.28 162.34 T:elephant200v2 5020.70 5024.17 5026.96 T:elephant176v2 5622.42 5625.50 5630.83 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.67 0.69 0.71 T:aes128gcmv1 0.80 0.81 0.82 aes256gcmv1 6.68 6.71 6.75 ascon128av12 9.90 9.99 10.10 ascon80pqv12 10.01 10.06 10.12 ascon128v12 12.58 12.67 12.76 T:schwaemm256128v2 12.76 12.85 12.97 ascon128abi32v12 13.94 13.99 14.04 T:xoodyakround3 16.59 16.66 16.76 T:schwaemm192192v2 17.32 17.42 17.53 T:schwaemm256256v2 18.09 18.16 18.21 T:schwaemm128128v2 18.69 18.79 18.86 T:isapa128v20 19.39 19.44 19.51 ascon128bi32v12 23.28 23.40 24.28 T:grain128aeadv2 25.93 26.49 27.28 T:isapa128av20 33.16 33.25 33.30 T:giftcofb128v1 33.01 33.29 33.64 T:isapk128av20 38.79 38.86 38.94 romulusn 41.04 42.02 42.89 T:isapk128v20 44.86 44.95 45.03 romulust 62.28 62.36 62.47 romulusm 65.60 65.63 65.67 T:tinyjambu128v2 78.04 78.06 78.09 T:tinyjambu192v2 80.62 82.67 88.83 T:isapxv20 84.03 84.05 84.06 T:tinyjambu256v2 151.80 153.54 164.09 T:elephant200v2 5019.78 5023.80 5029.08 T:elephant176v2 5622.03 5623.59 5627.10 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.62 0.64 0.65 T:aes128gcmv1 0.69 0.70 0.71 aes256gcmv1 6.71 6.76 6.79 ascon128av12 10.01 10.05 10.12 ascon80pqv12 10.04 10.10 10.14 ascon128v12 10.81 10.84 10.86 T:xoodyakround3 12.48 12.54 12.61 T:schwaemm256128v2 13.08 13.11 13.14 ascon128abi32v12 16.53 16.62 16.70 T:schwaemm192192v2 17.23 17.31 17.39 T:schwaemm256256v2 18.21 18.25 18.30 T:schwaemm128128v2 19.18 19.21 19.27 ascon128bi32v12 23.68 23.71 23.74 T:grain128aeadv2 28.64 28.73 28.90 T:isapa128v20 31.16 31.18 31.21 romulusn 32.84 32.89 32.94 T:giftcofb128v1 33.01 33.36 33.49 T:isapa128av20 41.50 41.74 42.13 T:isapk128av20 42.91 42.95 43.00 romulusm 53.58 53.60 53.62 T:tinyjambu128v2 53.62 54.19 55.04 T:isapk128v20 60.92 60.93 60.96 T:tinyjambu192v2 63.32 63.41 63.42 T:tinyjambu256v2 87.24 87.29 87.38 romulust 104.39? 108.93? 116.27? T:isapxv20 113.60 114.64 120.96 T:elephant200v2 3749.01 3751.96 3756.23 T:elephant176v2 4215.63 4219.31 4226.63 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.49 0.50 0.51 T:aes128gcmv1 0.56 0.57 0.58 aes256gcmv1 6.67 6.69 6.72 ascon128av12 9.97 10.00 10.08 ascon80pqv12 10.04 10.06 10.09 ascon128v12 10.78 10.79 10.81 T:xoodyakround3 12.46 12.53 12.59 T:schwaemm256128v2 13.04 13.09 13.13 ascon128abi32v12 16.59 16.65 16.72 T:schwaemm192192v2 17.23 17.29 17.36 T:schwaemm256256v2 17.71 18.21 18.25 T:schwaemm128128v2 19.37 19.42 19.48 ascon128bi32v12 23.51 23.61 24.49 T:grain128aeadv2 28.60 28.73 28.83 T:isapa128v20 31.14 31.19 31.24 romulusn 32.93 32.99 33.03 T:giftcofb128v1 32.49 33.06 33.73 T:isapa128av20 41.56 41.79 42.13 T:isapk128av20 42.92 42.97 43.01 romulusm 53.59 53.60 53.61 T:tinyjambu128v2 53.31 53.93 54.78 T:isapk128v20 61.03 61.04 61.06 T:tinyjambu192v2 63.32 63.41 63.42 T:tinyjambu256v2 87.24 87.29 87.34 romulust 108.01 109.25 115.89 T:isapxv20 112.97 114.43 121.65 T:elephant200v2 3749.56 3752.10 3755.50 T:elephant176v2 4216.10 4218.69 4231.17 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.49 0.50 0.50 T:aes128gcmv1 0.56 0.57 0.58 aes256gcmv1 6.68 6.70 6.73 ascon128av12 9.94 9.99 10.07 ascon80pqv12 10.02 10.06 10.10 ascon128v12 10.77 10.80 10.82 T:xoodyakround3 12.45 12.52 12.58 T:schwaemm256128v2 13.05 13.09 13.13 ascon128abi32v12 16.58 16.64 16.72 T:schwaemm192192v2 17.24 17.30 17.40 T:schwaemm256256v2 18.14 18.17 18.21 T:schwaemm128128v2 18.84 18.90 19.02 T:isapa128v20 19.36 19.40 19.46 ascon128bi32v12 23.52 23.60 24.56 T:grain128aeadv2 25.82 26.15 26.67 T:isapa128av20 31.15 31.22 31.26 romulusn 32.90 32.95 33.00 T:giftcofb128v1 33.17 33.37 33.68 T:isapk128av20 41.42 42.06 42.45 T:isapk128v20 42.90 42.95 43.01 romulusm 44.73 44.79 44.84 romulust 53.53 53.60 53.61 T:tinyjambu128v2 61.03 61.04 61.05 T:tinyjambu192v2 63.33 63.41 63.42 T:tinyjambu256v2 81.46 84.41 86.21 T:isapxv20 113.43 114.93 120.81 T:elephant200v2 3750.98 3753.52 3759.30 T:elephant176v2 4216.87 4218.58 4222.10 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.31 0.32 0.33 T:aes128gcmv1 0.31 0.33 0.34 aes256gcmv1 6.66 6.69 6.72 ascon128av12 7.58 7.61 7.64 T:xoodyakround3 9.91 10.07 10.13 ascon80pqv12 10.04 10.08 10.13 ascon128v12 12.39 12.50 12.62 T:schwaemm256128v2 13.29 13.33 13.38 ascon128abi32v12 16.43 16.53 16.66 T:schwaemm192192v2 17.07 17.22 17.33 T:schwaemm256256v2 18.25 18.30 18.34 T:schwaemm128128v2 18.88 19.04 19.19 T:isapa128v20 19.41 19.46 19.51 ascon128bi32v12 23.47 23.50 23.55 romulusn 23.46 23.52 23.59 romulusm 23.61 23.65 23.70 T:grain128aeadv2 25.63 25.74 26.91 T:isapa128av20 32.83 32.92 32.98 T:giftcofb128v1 33.13 33.57 33.94 T:isapk128av20 41.55 41.58 41.59 T:tinyjambu128v2 40.69 41.95 42.88 T:isapk128v20 42.61 42.77 42.78 T:tinyjambu256v2 43.79 43.81 43.83 T:tinyjambu192v2 44.66 44.71 44.77 romulust 75.11 75.98 80.39 T:elephant200v2 78.09? 81.42? 88.78? T:isapxv20 2479.04 2481.79 2486.32 T:elephant176v2 2809.77 2811.51 2813.78 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.29 0.30 0.32 T:aes128gcmv1 0.31 0.32 0.33 aes256gcmv1 6.66 6.69 6.72 ascon128av12 7.56 7.61 7.64 T:xoodyakround3 10.02 10.08 10.14 ascon80pqv12 10.04 10.09 10.13 ascon128v12 12.48 12.59 12.66 T:schwaemm256128v2 13.32 13.37 13.41 ascon128abi32v12 16.48 16.58 16.70 T:schwaemm192192v2 17.16 17.28 17.36 T:schwaemm256256v2 18.21 18.28 18.32 T:schwaemm128128v2 18.92 19.07 19.17 T:isapa128v20 19.38 19.44 19.51 ascon128bi32v12 23.45 23.50 23.55 romulusn 23.48 23.55 23.59 romulusm 23.65 23.77 24.65 T:grain128aeadv2 25.67 26.00 26.66 T:isapa128av20 32.81 32.90 32.97 T:giftcofb128v1 33.02 33.50 34.09 T:isapk128av20 41.33 41.36 41.50 T:tinyjambu128v2 40.46 41.39 42.77 T:isapk128v20 42.76 42.78 42.80 T:tinyjambu256v2 43.80 43.82 43.84 T:tinyjambu192v2 44.63 44.72 44.78 romulust 75.03 75.79 80.13 T:elephant200v2 80.46 82.27 87.92 T:isapxv20 2478.76 2481.09 2484.34 T:elephant176v2 2805.04 2813.35 2938.35 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.29 0.30 0.31 T:aes128gcmv1 0.31 0.32 0.33 aes256gcmv1 6.66 6.69 6.72 ascon128av12 7.56 7.61 7.65 T:xoodyakround3 10.01 10.06 10.10 ascon80pqv12 10.03 10.07 10.11 ascon128v12 12.42 12.52 12.62 T:schwaemm256128v2 13.27 13.32 13.37 ascon128abi32v12 16.51 16.63 16.72 T:schwaemm192192v2 17.15 17.27 17.38 T:schwaemm256256v2 18.19 18.22 18.24 T:schwaemm128128v2 18.96 19.07 19.16 T:isapa128v20 19.38 19.45 19.52 ascon128bi32v12 23.47 23.50 23.56 romulusn 23.48 23.53 23.60 romulusm 23.67 23.78 24.67 T:grain128aeadv2 25.77 26.08 26.74 T:isapa128av20 32.84 32.92 32.98 T:giftcofb128v1 33.14 33.46 33.81 T:isapk128av20 41.32 41.36 41.50 T:tinyjambu128v2 40.66 41.86 42.77 T:isapk128v20 42.77 42.78 42.78 T:tinyjambu256v2 43.81 43.83 43.86 T:tinyjambu192v2 44.58 44.68 44.75 romulust 75.20 76.07 80.46 T:elephant200v2 80.93 82.17 88.17 T:isapxv20 2480.17 2482.62 2489.04 T:elephant176v2 2809.61 2811.29 2832.44 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.74 0.74 0.75 T:aes128gcmv1 0.81 0.82 0.82 aes256gcmv1 6.84 6.89 6.92 ascon128av12 10.14 10.17 10.22 ascon80pqv12 10.15 10.20 10.25 ascon128v12 10.92 10.94 10.96 T:xoodyakround3 12.83 12.89 12.95 T:schwaemm256128v2 13.42 13.45 13.51 ascon128abi32v12 16.98 17.03 17.07 T:schwaemm192192v2 17.72 17.76 17.83 T:schwaemm256256v2 18.48 18.50 18.52 T:schwaemm128128v2 19.56 19.60 19.75 ascon128bi32v12 24.01 24.02 24.05 T:grain128aeadv2 31.53 31.56 31.59 romulusn 33.15 33.18 33.23 T:giftcofb128v1 35.25 35.46 35.67 T:isapa128av20 41.53 41.60 41.69 T:isapa128v20 43.29 43.33 43.37 romulusm 46.80 47.10 47.41 T:isapk128av20 54.02 54.12 54.14 T:tinyjambu128v2 61.47 61.48 61.48 T:tinyjambu192v2 63.89 63.99 64.00 T:tinyjambu256v2 88.57 88.63 88.67 romulust 92.94 93.40 93.81 T:isapk128v20 116.50 117.45 123.43 T:elephant200v2 179.84 184.96 189.55 T:isapxv20 3779.54 3781.94 3784.22 T:elephant176v2 4263.52 4265.96 4280.26 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.61 0.61 0.62 T:aes128gcmv1 0.69 0.70 0.70 aes256gcmv1 6.84 6.86 6.88 ascon128av12 10.17 10.19 10.22 ascon128v12 10.19 10.25 10.33 ascon80pqv12 10.87 10.89 10.91 T:xoodyakround3 12.84 12.90 12.95 T:schwaemm256128v2 13.38 13.42 13.44 ascon128abi32v12 16.93 16.98 17.05 T:schwaemm192192v2 17.74 17.81 17.88 T:schwaemm256256v2 18.44 18.47 18.50 T:schwaemm128128v2 19.71 19.74 19.79 ascon128bi32v12 23.92 23.95 24.76 T:grain128aeadv2 31.53 31.57 31.63 romulusn 33.24 33.29 33.33 T:giftcofb128v1 35.12 35.33 35.61 T:isapa128av20 41.54 41.59 41.69 T:isapa128v20 43.32 43.36 43.44 romulusm 46.48 46.84 47.19 T:isapk128av20 54.12 54.14 56.82 T:tinyjambu128v2 61.61 61.62 61.63 T:tinyjambu192v2 63.98 64.00 64.00 T:tinyjambu256v2 88.55 88.62 88.67 romulust 92.94 93.37 93.86 T:isapk128v20 116.03 116.97 123.22 T:elephant200v2 184.63 185.27 189.31 T:isapxv20 3778.44 3780.06 3782.70 T:elephant176v2 4265.20 4268.19 4273.56 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.61 0.61 0.62 T:aes128gcmv1 0.70 0.70 0.71 aes256gcmv1 6.83 6.85 6.87 ascon128av12 10.16 10.19 10.22 ascon128v12 10.14 10.19 10.24 ascon80pqv12 10.87 10.89 10.91 T:xoodyakround3 12.85 12.89 12.95 T:schwaemm256128v2 13.39 13.41 13.49 ascon128abi32v12 16.97 17.01 17.07 T:schwaemm192192v2 17.71 17.77 17.84 T:schwaemm256256v2 18.40 18.42 18.43 T:schwaemm128128v2 19.70 19.75 19.80 ascon128bi32v12 23.92 23.94 24.76 T:grain128aeadv2 25.47 25.51 25.57 T:isapa128v20 27.03 27.49 28.01 T:isapa128av20 31.52 31.58 31.64 romulusn 33.21 33.24 33.28 T:giftcofb128v1 36.40 36.60 36.91 T:isapk128av20 43.34 43.40 43.45 romulusm 46.03 46.06 46.10 romulust 54.12 54.13 54.14 T:tinyjambu128v2 61.61 61.62 61.63 T:tinyjambu192v2 61.58 62.38 62.71 T:isapk128v20 63.99 64.00 64.01 T:tinyjambu256v2 116.56 117.24 123.63 T:elephant200v2 120.88 122.41 125.53 T:isapxv20 3778.92 3781.12 3784.27 T:elephant176v2 4263.81 4265.12 4267.60 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.71 4.79 4.88 aes256gcmv1 4.98 5.08 5.19 T:aes128gcmv1 10.09 10.22 10.36 ascon128av12 13.08 13.21 13.38 ascon80pqv12 13.13 13.26 13.45 ascon128v12 15.60 15.69 15.83 T:xoodyakround3 20.17 20.35 20.68 ascon128abi32v12 20.84 21.12 21.72 T:schwaemm256128v2 23.46 23.65 24.24 T:schwaemm128128v2 26.70 26.90 27.09 ascon128bi32v12 26.97 27.30 27.64 T:schwaemm192192v2 27.80 28.17 28.79 T:schwaemm256256v2 31.58 31.69 31.81 T:grain128aeadv2 39.24 39.34 39.48 T:giftcofb128v1 39.79 39.91 40.09 romulusn 51.89 52.14 52.41 romulusm 66.09 66.15 66.31 T:tinyjambu128v2 74.66 74.71 74.85 T:tinyjambu192v2 77.24 77.30 77.43 T:tinyjambu256v2 85.24 85.61 86.29 T:isapa128av20 117.85 118.19 118.65 romulust 157.29 157.67 158.08 T:isapk128av20 165.18 167.44 173.30 T:elephant200v2 337.22 338.86 340.31 T:isapa128v20 984.33 990.77 996.62 T:isapk128v20 1821.10 1922.80 1926.87 T:isapxv20 4705.21 4716.07 4729.66 T:elephant176v2 5707.24 5711.79 5717.05 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.16 5.22 5.29 aes256gcmv1 5.27 5.44 5.59 T:aes128gcmv1 10.04 10.14 10.30 ascon128av12 13.13 13.24 13.37 ascon128v12 13.16 13.29 13.42 ascon80pqv12 15.67 15.76 15.92 T:xoodyakround3 20.18 20.39 20.59 ascon128abi32v12 20.87 21.25 21.64 T:schwaemm256128v2 23.43 23.77 24.23 T:schwaemm128128v2 26.67 26.86 27.03 ascon128bi32v12 27.12 27.62 28.06 T:schwaemm192192v2 27.77 28.25 28.71 T:schwaemm256256v2 31.71 31.91 33.13 T:grain128aeadv2 39.44 39.59 39.84 T:giftcofb128v1 39.82 40.01 40.26 romulusn 53.76 54.03 54.22 romulusm 66.20 66.27 66.72 T:tinyjambu128v2 74.70 74.76 74.82 T:tinyjambu192v2 77.27 77.33 77.46 T:tinyjambu256v2 85.51 85.93 86.50 T:isapa128av20 117.99 118.25 118.73 romulust 157.46 157.74 158.33 T:isapk128av20 165.21 167.29 174.44 T:elephant200v2 337.84 339.15 340.77 T:isapa128v20 979.64 989.52 1000.81 T:isapk128v20 1825.64 1919.72 1927.52 T:isapxv20 4701.48 4708.53 4714.56 T:elephant176v2 5707.93 5712.22 5717.34 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.19 5.25 5.33 aes256gcmv1 5.20 5.31 5.40 T:aes128gcmv1 10.06 10.18 10.30 ascon128av12 13.07 13.20 13.35 ascon128v12 13.14 13.23 13.39 ascon80pqv12 15.66 15.77 16.03 T:xoodyakround3 20.23 20.42 20.67 ascon128abi32v12 20.90 21.11 21.45 T:schwaemm256128v2 23.42 23.75 24.30 T:schwaemm128128v2 26.70 26.88 27.08 ascon128bi32v12 26.99 27.35 27.77 T:schwaemm192192v2 27.97 28.32 28.71 T:schwaemm256256v2 31.83 32.16 33.40 T:grain128aeadv2 39.51 39.67 39.80 T:giftcofb128v1 39.82 39.94 40.12 romulusn 53.65 53.88 54.14 romulusm 56.55 56.99 57.43 T:isapa128av20 66.20 66.26 66.50 T:tinyjambu128v2 74.71 74.76 75.07 T:tinyjambu192v2 74.92 75.16 75.46 romulust 77.25 77.30 77.37 T:tinyjambu256v2 103.86 104.24 104.54 T:isapk128av20 164.90 168.08 174.41 T:elephant200v2 175.82 177.72 178.53 T:isapa128v20 510.73 514.96 522.64 T:isapk128v20 959.84 1002.90 1008.07 T:isapxv20 4703.25 4712.41 4727.74 T:elephant176v2 5708.58 5712.50 5721.28 T:elephant160v2