VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20251222

[Page version: 20260112 15:28:56]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.92 0.95 0.97 T:aes128gcmv1 1.52 1.54 1.55 aes256gcmv1 6.72 6.74 6.78 ascon128av12 9.94 10.04 10.24 ascon80pqv12 10.07 10.13 10.16 ascon128v12 13.00 13.20 13.32 ascon128abi32v12 13.37 13.42 13.47 T:schwaemm256128v2 15.29 15.35 15.43 T:xoodyakround3 17.73 17.82 17.87 T:schwaemm192192v2 19.06 19.12 19.21 ascon128bi32v12 19.49 19.53 19.59 T:schwaemm256256v2 19.83 19.88 19.93 T:schwaemm128128v2 24.30 24.42 24.50 T:grain128aeadv2 38.77 38.79 38.85 romulusn 39.09 39.24 40.11 T:isapa128av20 39.24 39.79 39.88 T:isapa128v20 39.79 39.83 39.88 T:giftcofb128v1 49.40 49.71 50.61 T:isapk128av20 54.98 55.09 55.15 T:tinyjambu128v2 62.72 62.78 62.84 romulusm 66.61 66.67 66.78 T:tinyjambu192v2 67.01 68.35 69.41 T:isapk128v20 71.07 71.17 71.24 T:tinyjambu256v2 110.30 110.46 111.03 T:elephant200v2 119.83 120.59 121.52 T:isapxv20 129.92 130.02 130.11 romulust 5780.83 5815.66 5835.69 T:elephant176v2 5881.95 5888.07 5890.52 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.68 0.70 0.71 T:aes128gcmv1 1.41 1.42 1.44 aes256gcmv1 6.72 6.75 6.79 ascon128av12 9.89 10.00 10.25 ascon80pqv12 10.07 10.10 10.15 ascon128v12 13.01 13.14 13.22 ascon128abi32v12 13.38 13.43 13.49 T:schwaemm256128v2 15.16 15.23 15.33 T:xoodyakround3 17.72 17.80 17.91 T:schwaemm192192v2 19.43 19.47 19.51 ascon128bi32v12 19.77 19.79 19.82 T:schwaemm128128v2 19.66 20.48 20.66 T:schwaemm256256v2 23.65 23.68 23.72 T:grain128aeadv2 38.84 38.86 38.91 romulusn 39.23 39.38 39.62 T:isapa128v20 39.50 39.66 39.72 T:isapa128av20 39.80 39.83 39.89 T:giftcofb128v1 49.63 49.93 50.25 T:isapk128av20 54.83 54.89 54.96 T:tinyjambu128v2 62.97 63.03 63.18 romulusm 66.44 66.55 66.61 T:tinyjambu192v2 66.72 67.83 68.81 T:isapk128v20 70.98 71.04 71.20 T:tinyjambu256v2 109.81 111.07 111.25 T:elephant200v2 119.73 119.97 120.37 T:isapxv20 129.88 129.93 130.09 romulust 5763.83 5801.09 5835.29 T:elephant176v2 5887.40 5888.47 5891.03 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.68 0.69 0.71 T:aes128gcmv1 1.41 1.42 1.43 aes256gcmv1 6.71 6.75 6.79 ascon128av12 10.07 10.10 10.14 ascon128v12 9.87 10.20 10.30 ascon80pqv12 13.05 13.11 13.22 ascon128abi32v12 13.41 13.44 13.48 T:schwaemm256128v2 15.13 15.20 15.25 T:xoodyakround3 17.75 17.81 17.87 T:schwaemm192192v2 19.37 19.41 19.48 ascon128bi32v12 19.43 19.50 19.56 T:isapa128v20 19.52 19.62 19.72 T:schwaemm256256v2 19.76 19.79 19.85 T:schwaemm128128v2 23.66 23.68 23.72 T:grain128aeadv2 26.35 26.44 26.48 T:isapa128av20 33.08 33.29 33.85 T:isapk128av20 38.81 38.85 38.90 romulusn 39.81 39.85 39.88 T:giftcofb128v1 42.02 42.65 43.24 T:isapk128v20 44.88 44.96 45.03 romulust 54.75 54.86 54.91 T:tinyjambu128v2 63.05 63.07 63.13 romulusm 66.41 66.47 66.56 T:tinyjambu192v2 70.58 71.23 71.66 T:tinyjambu256v2 71.98 72.14 72.76 T:isapxv20 110.66 110.75 111.15 T:elephant200v2 5782.50 5818.75 5842.91 T:elephant176v2 5885.96 5888.46 5891.12 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.62 0.63 0.64 T:aes128gcmv1 0.91 0.92 0.93 aes256gcmv1 6.70 6.72 6.74 ascon128av12 10.01 10.04 10.18 ascon80pqv12 10.00 10.10 10.15 ascon128v12 11.44 11.47 11.53 T:xoodyakround3 13.31 13.33 13.40 T:schwaemm256128v2 13.30 13.34 13.41 ascon128abi32v12 17.75 17.77 17.80 T:schwaemm192192v2 19.25 19.35 19.42 ascon128bi32v12 19.42 19.45 19.50 T:schwaemm256256v2 19.81 19.85 19.89 T:schwaemm128128v2 24.16 24.31 24.36 T:grain128aeadv2 29.45 29.63 29.69 T:isapa128v20 31.14 31.15 31.19 romulusn 32.40 32.42 32.47 T:isapa128av20 39.78 39.80 39.84 T:giftcofb128v1 41.88 42.22 42.56 T:isapk128av20 42.94 42.99 43.03 romulusm 44.99 45.06 45.09 T:tinyjambu128v2 52.11 52.16 52.20 T:tinyjambu192v2 53.81 53.88 53.94 T:tinyjambu256v2 54.13 54.92 55.77 T:isapk128v20 82.90 83.29 83.38 T:elephant200v2 87.24 87.36 87.40 romulust 96.52 96.89 97.14 T:isapxv20 4318.04 4338.39 4352.92 T:elephant176v2 4413.54 4414.80 4415.37 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.48 0.50 0.51 T:aes128gcmv1 0.85 0.86 0.87 aes256gcmv1 6.67 6.71 6.72 ascon128av12 9.98 10.05 10.11 ascon80pqv12 10.08 10.12 10.14 ascon128v12 11.37 11.47 11.50 T:xoodyakround3 13.20 13.23 13.28 ascon128abi32v12 13.30 13.32 13.37 T:schwaemm256128v2 17.69 17.72 17.75 T:schwaemm192192v2 19.37 19.41 19.46 ascon128bi32v12 19.44 19.54 19.59 T:schwaemm256256v2 19.79 19.82 19.85 T:schwaemm128128v2 23.88 23.92 23.96 T:grain128aeadv2 29.36 29.57 29.70 T:isapa128v20 31.15 31.17 31.21 romulusn 32.77 32.95 33.03 T:isapa128av20 39.75 39.80 39.82 T:giftcofb128v1 41.68 41.92 42.10 T:isapk128av20 43.08 43.11 43.15 romulusm 44.93 45.04 45.10 T:tinyjambu128v2 52.17 52.22 52.27 T:tinyjambu192v2 53.61 53.67 53.82 T:tinyjambu256v2 54.26 54.77 55.72 T:isapk128v20 82.85 82.90 83.07 T:elephant200v2 87.27 87.32 87.36 romulust 96.39 96.58 96.81 T:isapxv20 4301.19 4328.79 4349.39 T:elephant176v2 4412.66 4413.94 4415.29 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.49 0.50 0.50 T:aes128gcmv1 0.85 0.86 0.86 aes256gcmv1 6.68 6.69 6.71 ascon128av12 9.97 10.08 10.13 ascon80pqv12 10.09 10.13 10.16 ascon128v12 11.35 11.39 11.46 T:xoodyakround3 13.25 13.28 13.31 ascon128abi32v12 13.34 13.38 13.42 T:schwaemm256128v2 17.71 17.75 17.78 T:schwaemm192192v2 19.40 19.45 19.57 ascon128bi32v12 19.45 19.49 19.50 T:isapa128v20 19.79 19.82 19.84 T:schwaemm128128v2 19.50 19.87 20.64 T:schwaemm256256v2 23.88 23.92 24.04 T:grain128aeadv2 26.32 26.37 26.40 T:isapa128av20 31.14 31.16 31.22 romulusn 33.42 33.74 34.16 T:isapk128av20 39.78 39.82 39.84 T:giftcofb128v1 41.92 42.19 42.68 T:isapk128v20 43.11 43.15 43.19 romulusm 44.73 44.77 44.83 romulust 44.89 44.91 44.98 T:tinyjambu128v2 52.06 52.12 52.17 T:tinyjambu192v2 53.82 53.87 54.02 T:tinyjambu256v2 72.58 72.75 72.86 T:isapxv20 82.65 82.98 83.61 T:elephant200v2 4308.72 4322.25 4338.62 T:elephant176v2 4414.34 4415.52 4417.09 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.29 0.31 0.32 aes256gcmv1 0.30 0.32 0.33 T:aes128gcmv1 6.67 6.69 6.72 ascon128av12 7.58 7.65 7.75 T:xoodyakround3 9.78 10.03 10.08 ascon80pqv12 10.11 10.16 10.21 ascon128v12 13.25 13.30 13.35 T:schwaemm256128v2 13.27 13.36 13.42 ascon128abi32v12 17.61 17.69 17.78 T:schwaemm192192v2 19.31 19.41 19.50 ascon128bi32v12 19.37 19.41 19.43 T:schwaemm256256v2 19.44 19.50 19.55 T:isapa128v20 19.77 19.81 19.84 T:schwaemm128128v2 23.15 23.18 23.21 romulusm 23.46 23.53 23.57 romulusn 24.21 24.25 24.30 T:grain128aeadv2 26.14 26.28 26.40 T:isapa128av20 33.12 33.48 33.98 T:isapk128av20 34.82 34.89 34.95 T:tinyjambu128v2 36.25 36.32 36.39 T:tinyjambu256v2 37.52 37.78 37.88 T:tinyjambu192v2 39.75 39.81 39.86 T:giftcofb128v1 41.05 41.90 42.19 T:isapk128v20 44.58 44.63 44.71 romulust 55.44 55.87 56.31 T:elephant200v2 72.39 72.48 72.71 T:isapxv20 2847.07 2859.89 2878.81 T:elephant176v2 2938.56 2940.08 2941.96 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.28? 0.30? 0.32? T:aes128gcmv1 0.28? 0.31? 0.32? aes256gcmv1 6.66 6.69 6.73 ascon128av12 7.56 7.63 7.69 T:xoodyakround3 10.05 10.09 10.12 ascon80pqv12 9.79 10.09 10.15 ascon128v12 13.29 13.32 13.39 ascon128abi32v12 13.29 13.34 13.40 T:schwaemm256128v2 17.67 17.75 17.79 T:schwaemm192192v2 19.43 19.48 19.52 T:isapa128v20 19.39 19.49 19.87 ascon128bi32v12 19.75 19.76 19.80 T:schwaemm128128v2 19.46 20.51 20.60 T:schwaemm256256v2 23.18 23.21 23.25 romulusm 23.47 23.51 23.56 romulusn 24.08 24.29 24.35 T:grain128aeadv2 26.32 26.38 26.48 T:isapa128av20 33.03 33.48 34.10 T:isapk128av20 34.89 35.02 35.07 T:tinyjambu128v2 36.30 36.35 36.41 T:tinyjambu256v2 37.44 37.54 37.70 T:tinyjambu192v2 39.71 39.80 39.84 T:giftcofb128v1 40.99 41.68 42.45 T:isapk128v20 44.58 44.70 44.80 romulust 55.26 55.77 56.18 T:elephant200v2 72.72 72.81 73.14 T:isapxv20 2843.11 2850.25 2873.55 T:elephant176v2 2936.71 2938.03 2940.30 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.29 0.30 0.32 T:aes128gcmv1 0.29 0.31 0.32 aes256gcmv1 6.64 6.67 6.69 ascon128av12 7.56 7.65 7.70 T:xoodyakround3 9.84 10.08 10.21 ascon128v12 10.05 10.09 10.14 ascon80pqv12 13.26 13.36 13.41 T:schwaemm256128v2 13.30 13.36 13.41 ascon128abi32v12 17.69 17.74 17.76 T:schwaemm192192v2 19.41 19.45 19.55 T:isapa128v20 19.42 19.49 19.63 ascon128bi32v12 19.35 19.50 20.54 T:schwaemm256256v2 19.78 19.82 19.87 T:schwaemm128128v2 23.17 23.23 23.25 romulusm 23.47 23.50 23.54 romulusn 24.05 24.08 24.33 T:grain128aeadv2 26.33 26.40 26.45 T:isapa128av20 32.99 33.23 33.75 T:isapk128av20 34.92 35.03 35.11 T:tinyjambu128v2 36.27 36.37 36.45 T:tinyjambu256v2 37.42 37.53 37.65 T:tinyjambu192v2 39.71 39.78 39.84 T:giftcofb128v1 40.87 41.84 42.87 T:isapk128v20 44.66 44.72 44.76 romulust 55.80 55.89 55.99 T:elephant200v2 72.39 72.67 73.66 T:isapxv20 2874.16 2881.78 2889.26 T:elephant176v2 2938.71 2939.43 2942.34 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.74 0.75 0.75 T:aes128gcmv1 1.06 1.06 1.07 aes256gcmv1 6.85 6.87 6.88 ascon128av12 10.10 10.16 10.28 ascon80pqv12 10.11 10.21 10.28 ascon128v12 11.57 11.60 11.61 T:xoodyakround3 13.49 13.62 13.69 ascon128abi32v12 13.72 13.75 13.78 T:schwaemm256128v2 18.14 18.15 18.19 T:schwaemm192192v2 19.55 19.58 19.63 ascon128bi32v12 20.00 20.02 20.06 T:schwaemm256256v2 20.08 20.09 20.10 T:schwaemm128128v2 24.62 24.63 24.65 T:grain128aeadv2 31.51 31.54 31.55 romulusn 36.14 36.17 36.21 T:isapa128av20 40.13 40.16 40.18 T:giftcofb128v1 42.74 42.92 43.01 T:isapa128v20 43.24 43.28 43.30 romulusm 45.48 45.50 45.56 T:tinyjambu128v2 46.78 46.95 47.37 T:isapk128av20 52.67 52.75 52.81 T:tinyjambu192v2 54.29 54.34 54.41 T:tinyjambu256v2 84.42 84.60 84.95 T:elephant200v2 88.56 88.58 88.63 romulust 94.51 94.82 95.07 T:isapk128v20 159.88 159.97 160.40 T:isapxv20 4337.63 4340.24 4361.82 T:elephant176v2 4463.48 4464.05 4464.79 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.61 0.61 0.62 T:aes128gcmv1 1.00 1.01 1.02 aes256gcmv1 6.84 6.86 6.87 ascon128av12 10.17 10.24 10.28 ascon80pqv12 10.20 10.25 10.27 ascon128v12 11.52 11.54 11.61 T:xoodyakround3 13.49 13.59 13.62 ascon128abi32v12 13.76 13.77 13.83 T:schwaemm256128v2 18.12 18.15 18.18 T:schwaemm192192v2 19.72 19.78 19.86 ascon128bi32v12 20.05 20.09 20.10 T:schwaemm128128v2 20.07 20.10 21.04 T:schwaemm256256v2 24.26 24.30 24.36 T:grain128aeadv2 31.56 31.58 31.61 romulusn 36.64 36.67 36.73 T:isapa128av20 40.11 40.14 40.17 T:giftcofb128v1 42.58 42.76 42.98 T:isapa128v20 43.39 43.43 43.46 romulusm 45.43 45.44 45.50 T:tinyjambu128v2 46.58 46.77 46.87 T:isapk128av20 52.61 52.65 52.71 T:tinyjambu192v2 54.30 54.33 54.38 T:tinyjambu256v2 84.57 84.74 85.18 T:elephant200v2 88.60 88.64 88.69 romulust 93.93 94.13 94.85 T:isapk128v20 159.40 160.08 161.12 T:isapxv20 4344.05 4365.98 4380.98 T:elephant176v2 4463.02 4464.46 4465.46 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.61 0.61 0.62 T:aes128gcmv1 1.01 1.01 1.01 aes256gcmv1 6.85 6.87 6.89 ascon128av12 10.12 10.18 10.22 ascon80pqv12 10.17 10.22 10.23 ascon128v12 11.53 11.55 11.60 T:xoodyakround3 13.55 13.58 13.59 ascon128abi32v12 13.77 13.80 13.83 T:schwaemm256128v2 18.12 18.14 18.19 T:schwaemm192192v2 19.74 19.81 19.85 ascon128bi32v12 20.07 20.08 20.11 T:schwaemm128128v2 20.07 20.17 21.01 T:schwaemm256256v2 24.29 24.40 24.41 T:grain128aeadv2 26.21 26.23 26.25 T:isapa128v20 28.31 28.36 28.38 T:isapa128av20 31.55 31.58 31.60 romulusn 36.39 36.48 36.64 T:isapk128av20 40.10 40.16 40.17 T:giftcofb128v1 43.39 43.42 43.46 romulusm 45.37 45.39 45.40 T:tinyjambu128v2 46.04 46.07 46.15 romulust 52.59 52.67 52.72 T:tinyjambu192v2 54.02 54.10 54.16 T:tinyjambu256v2 62.43 62.79 62.91 T:isapk128v20 84.52 84.56 84.86 T:elephant200v2 104.88 105.32 105.70 T:isapxv20 4350.28 4377.72 4384.87 T:elephant176v2 4463.19 4464.09 4465.41 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.17 5.32 5.52 T:aes128gcmv1 5.59 5.67 5.86 aes256gcmv1 10.16 10.28 10.47 ascon128av12 13.19 13.32 13.40 ascon128v12 13.30 13.37 13.54 ascon80pqv12 16.55 17.15 17.51 T:xoodyakround3 20.27 20.48 20.78 ascon128abi32v12 22.35 22.64 23.34 T:schwaemm256128v2 25.54 25.71 25.99 T:schwaemm128128v2 26.85 27.05 27.17 ascon128bi32v12 29.34 29.54 29.84 T:schwaemm192192v2 31.72 32.33 32.59 T:schwaemm256256v2 32.55 32.64 32.70 T:grain128aeadv2 40.14 40.31 40.41 romulusn 47.30 47.41 47.52 T:giftcofb128v1 49.63 49.84 50.14 romulusm 55.73 56.07 57.13 T:tinyjambu128v2 64.30 64.54 65.23 T:tinyjambu192v2 65.91 66.35 66.54 T:tinyjambu256v2 117.62 117.88 118.84 romulust 119.04 119.26 119.47 T:isapa128av20 119.03 119.38 119.58 T:elephant200v2 150.65 150.92 152.56 T:isapk128av20 348.85 349.75 349.94 T:isapa128v20 988.58 994.19 1000.41 T:isapk128v20 1594.27 1598.53 1601.21 T:isapxv20 5459.27 5472.98 5483.77 T:elephant176v2 5980.17 5982.38 5984.19 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.41 5.54 5.60 T:aes128gcmv1 5.78 5.83 5.91 aes256gcmv1 10.23 10.36 10.47 ascon128av12 13.19 13.29 13.38 ascon128v12 13.32 13.51 13.66 ascon80pqv12 16.61 16.84 16.98 T:xoodyakround3 20.40 20.48 20.74 ascon128abi32v12 22.36 22.54 22.91 T:schwaemm256128v2 25.45 25.58 25.80 T:schwaemm128128v2 26.86 27.03 27.25 ascon128bi32v12 29.25 29.68 29.84 T:schwaemm192192v2 32.43 32.64 32.84 T:grain128aeadv2 32.62 33.61 34.28 T:schwaemm256256v2 40.35 40.47 40.52 romulusn 47.45 47.59 47.74 T:giftcofb128v1 51.05 51.18 51.29 romulusm 56.05 56.35 57.12 T:tinyjambu128v2 64.30 64.80 65.15 T:tinyjambu192v2 65.97 66.30 66.56 T:tinyjambu256v2 117.84 118.24 118.94 romulust 119.34 119.64 120.00 T:isapa128av20 118.98 119.77 120.18 T:elephant200v2 150.62 151.20 151.45 T:isapk128av20 349.45 350.08 350.77 T:isapa128v20 977.81 984.79 997.38 T:isapk128v20 1599.20 1600.84 1602.73 T:isapxv20 5403.06 5412.86 5459.48 T:elephant176v2 5976.90 5983.01 5985.85 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.29 5.41 5.80 T:aes128gcmv1 5.76 5.84 5.90 aes256gcmv1 10.23 10.28 10.41 ascon128av12 13.05 13.12 13.34 ascon128v12 13.22 13.35 13.53 ascon80pqv12 16.66 17.23 17.46 T:xoodyakround3 20.30 20.43 20.59 ascon128abi32v12 22.42 22.60 22.84 T:schwaemm256128v2 25.47 25.55 25.73 T:schwaemm128128v2 26.70 26.79 26.95 ascon128bi32v12 29.23 29.40 29.52 T:schwaemm192192v2 31.77 32.20 32.44 T:schwaemm256256v2 32.38 32.57 32.66 T:grain128aeadv2 40.47 40.58 40.68 romulusn 47.45 47.59 47.75 T:giftcofb128v1 50.89 50.98 51.27 romulusm 55.89 56.24 56.43 T:tinyjambu128v2 63.99 64.21 64.91 T:tinyjambu192v2 65.77 66.22 66.57 T:tinyjambu256v2 73.66 73.92 74.15 T:isapa128av20 74.72 75.40 75.85 romulust 98.66 99.10 99.36 T:isapk128av20 119.48 119.73 120.12 T:elephant200v2 181.75 182.23 182.91 T:isapa128v20 509.80 518.46 522.87 T:isapk128v20 836.38 837.92 841.63 T:isapxv20 5401.48 5405.12 5443.82 T:elephant176v2 5971.82 5976.84 5981.93 T:elephant160v2