VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,big, supercop-20260330

[Page version: 20260413 04:20:10]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.43 1.44 1.45 T:aes128gcmv1 1.54 1.55 1.56 aes256gcmv1 6.54 6.62 6.67 ascon128av12 9.96 10.00 10.04 ascon128v12 9.97 10.10 10.17 ascon80pqv12 12.58 12.65 12.76 T:schwaemm256128v2 13.25 13.31 13.37 ascon128abi32v12 13.83 13.90 14.01 T:xoodyakround3 16.78 16.84 16.92 T:schwaemm192192v2 17.37 17.49 17.63 T:schwaemm256256v2 19.29 19.38 19.46 ascon128bi32v12 19.97 20.02 20.07 T:schwaemm128128v2 24.49 24.52 24.57 T:grain128aeadv2 38.36 38.71 39.34 T:isapa128v20 38.72 38.76 38.80 romulusn 39.06 39.18 39.36 T:isapa128av20 39.85 39.94 40.07 T:giftcofb128v1 50.57 51.14 51.65 T:isapk128av20 54.71 55.04 55.11 T:tinyjambu128v2 62.19 62.25 62.33 romulusm 66.32 66.37 66.42 T:tinyjambu192v2 66.70 68.18 70.32 T:isapk128v20 71.38 71.45 71.51 T:tinyjambu256v2 125.59 125.66 125.73 romulust 127.17 128.01 131.98 T:isapxv20 139.09 139.18 139.28 T:elephant200v2 5510.66 5519.90 5526.40 T:elephant176v2 5888.73 5891.02 5893.56 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.28 1.29 1.30 T:aes128gcmv1 1.40 1.41 1.42 aes256gcmv1 6.54 6.58 6.61 ascon128av12 9.82 9.91 9.96 ascon128v12 9.90 9.99 10.04 ascon80pqv12 12.58 12.66 12.73 T:schwaemm256128v2 12.92 13.01 13.22 ascon128abi32v12 13.70 13.79 13.91 T:xoodyakround3 16.60 16.69 16.79 T:schwaemm192192v2 17.40 17.55 17.63 T:schwaemm256256v2 19.23 19.31 19.39 ascon128bi32v12 19.86 19.90 19.94 T:schwaemm128128v2 23.86 23.89 23.92 T:grain128aeadv2 38.76 38.80 38.84 romulusn 38.67 39.01 39.37 T:isapa128v20 39.04 39.14 39.26 T:isapa128av20 39.96 40.02 40.07 T:giftcofb128v1 50.36 51.03 51.68 T:isapk128av20 54.89 54.96 55.04 T:tinyjambu128v2 62.27 62.36 62.42 romulusm 66.31 66.47 66.59 T:tinyjambu192v2 67.36 69.41 71.48 T:isapk128v20 71.28 71.33 71.38 T:tinyjambu256v2 125.59 125.68 125.79 romulust 130.93 131.95 136.38 T:isapxv20 138.42 138.86 139.26 T:elephant200v2 5512.49 5518.63 5526.38 T:elephant176v2 5887.28 5890.49 5893.26 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.28 1.29 1.31 T:aes128gcmv1 1.40 1.41 1.42 aes256gcmv1 6.52 6.56 6.59 ascon128av12 9.86 9.92 9.97 ascon128v12 9.95 10.01 10.06 ascon80pqv12 12.60 12.66 12.71 T:schwaemm256128v2 12.78 12.84 13.13 ascon128abi32v12 13.71 13.77 13.81 T:xoodyakround3 16.64 16.72 16.82 T:schwaemm192192v2 17.49 17.58 17.66 T:schwaemm256256v2 19.25 19.33 19.41 ascon128bi32v12 19.29 19.43 19.51 T:isapa128v20 19.84 19.89 19.93 T:schwaemm128128v2 23.85 23.89 23.91 T:grain128aeadv2 26.61 26.68 26.73 T:isapa128av20 33.40 33.75 34.14 T:isapk128av20 38.76 38.80 38.85 romulusn 39.99 40.02 40.07 T:giftcofb128v1 42.26 43.34 44.48 T:isapk128v20 43.30 43.38 43.45 romulust 54.91 54.98 55.08 T:tinyjambu128v2 62.25 62.33 62.42 romulusm 66.29 66.42 66.53 T:tinyjambu192v2 71.26? 71.37? 80.13? T:tinyjambu256v2 77.72 78.69 80.65 T:isapxv20 138.99 139.22 139.34 T:elephant200v2 5506.99 5517.05 5528.83 T:elephant176v2 5886.63 5889.52 5891.65 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.86 0.87 0.87 T:aes128gcmv1 0.92 0.93 0.93 aes256gcmv1 6.55 6.59 6.64 ascon128av12 9.93 9.95 9.98 ascon128v12 9.96 10.02 10.05 ascon80pqv12 10.70 10.75 10.81 T:xoodyakround3 12.51 12.56 12.62 T:schwaemm256128v2 13.21 13.33 13.37 ascon128abi32v12 16.63 16.70 16.75 T:schwaemm192192v2 17.37 17.48 17.57 T:schwaemm256256v2 19.44 19.51 19.58 ascon128bi32v12 19.98 20.01 20.04 T:schwaemm128128v2 24.48 24.51 24.55 T:grain128aeadv2 28.78 28.99 29.26 T:isapa128v20 31.10 31.13 31.17 romulusn 32.84 32.91 33.04 T:isapa128av20 39.91 39.94 39.99 T:giftcofb128v1 42.30 42.54 42.96 T:isapk128av20 42.84 42.87 42.92 romulusm 45.03 45.07 45.10 T:tinyjambu128v2 51.97 52.01 52.05 T:tinyjambu192v2 53.93 53.99 54.03 T:tinyjambu256v2 54.81 55.69 56.76 T:isapk128v20 84.38 84.43 84.49 romulust 104.03 104.29 104.47 T:elephant200v2 104.41 104.93 106.14 T:isapxv20 4115.99 4120.83 4129.30 T:elephant176v2 4414.58 4416.18 4417.78 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.79 0.80 0.81 T:aes128gcmv1 0.85 0.86 0.86 aes256gcmv1 6.53 6.56 6.58 ascon128av12 9.82 9.88 9.95 ascon80pqv12 9.86 9.89 9.94 ascon128v12 10.63 10.66 10.68 T:xoodyakround3 12.50 12.56 12.61 T:schwaemm256128v2 13.24 13.29 13.32 ascon128abi32v12 16.60 16.66 16.72 T:schwaemm192192v2 17.43 17.50 17.55 T:schwaemm256256v2 19.42 19.51 19.59 ascon128bi32v12 19.92 19.95 19.98 T:schwaemm128128v2 24.20 24.23 24.25 T:grain128aeadv2 28.86 29.17 29.28 T:isapa128v20 31.10 31.14 31.19 romulusn 32.84 32.89 33.00 T:isapa128av20 39.92 39.96 40.02 T:giftcofb128v1 42.30 42.59 42.95 T:isapk128av20 42.88 42.93 42.98 romulusm 44.93 44.98 45.05 T:tinyjambu128v2 52.00 52.09 52.19 T:tinyjambu192v2 53.88 53.92 53.95 T:tinyjambu256v2 54.56 55.48 56.40 T:isapk128v20 84.40 84.47 84.52 romulust 104.20 104.38 104.47 T:elephant200v2 102.89 104.84 106.08 T:isapxv20 4115.13 4120.30 4126.28 T:elephant176v2 4414.02 4416.03 4417.70 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.79 0.79 0.80 T:aes128gcmv1 0.85 0.86 0.86 aes256gcmv1 6.54 6.56 6.58 ascon128av12 9.83 9.89 9.97 ascon80pqv12 9.88 9.91 9.94 ascon128v12 10.65 10.69 10.71 T:xoodyakround3 12.51 12.56 12.62 T:schwaemm256128v2 13.27 13.32 13.36 ascon128abi32v12 16.61 16.66 16.71 T:schwaemm192192v2 17.43 17.51 17.58 T:schwaemm256256v2 19.17 19.28 19.34 T:isapa128v20 19.44 19.52 19.59 ascon128bi32v12 19.93 19.95 19.97 T:schwaemm128128v2 24.20 24.21 24.24 T:grain128aeadv2 26.61 26.65 26.69 T:isapa128av20 31.12 31.16 31.20 romulusn 33.91 34.24 34.55 T:isapk128av20 39.95 40.01 40.04 T:giftcofb128v1 42.20 42.67 43.17 T:isapk128v20 42.88 42.93 42.99 romulusm 43.22 43.27 43.31 romulust 44.94 44.97 45.02 T:tinyjambu128v2 51.97 52.03 52.11 T:tinyjambu192v2 53.87 53.90 53.93 T:tinyjambu256v2 77.75 78.69 80.56 T:isapxv20 103.97 104.40 104.63 T:elephant200v2 4115.32 4120.92 4126.49 T:elephant176v2 4414.17 4416.13 4417.59 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.29 0.30 0.32 aes256gcmv1 0.29 0.31 0.32 T:aes128gcmv1 6.53 6.56 6.59 ascon128av12 7.56 7.61 7.66 T:xoodyakround3 9.87 9.91 9.95 ascon128v12 9.90 9.93 9.98 ascon80pqv12 12.38 12.46 12.53 T:schwaemm256128v2 13.32 13.36 13.43 ascon128abi32v12 16.58 16.64 16.71 T:schwaemm192192v2 17.36 17.47 17.55 T:schwaemm256256v2 18.80 19.04 19.42 T:isapa128v20 19.51 19.63 19.77 ascon128bi32v12 19.93 19.97 20.02 T:schwaemm128128v2 23.48 23.54 23.59 romulusn 23.48 23.54 23.59 romulusm 24.47 24.51 24.55 T:grain128aeadv2 26.60 26.65 26.70 T:isapa128av20 33.46 33.90 34.39 T:isapk128av20 34.80 34.85 34.90 T:tinyjambu128v2 36.31 36.38 36.43 T:tinyjambu256v2 37.42 37.47 37.52 T:tinyjambu192v2 39.85 39.94 40.01 T:giftcofb128v1 42.48 43.08 44.00 T:isapk128v20 43.19 43.23 43.29 romulust 69.61 69.74 69.87 T:elephant200v2 77.33 78.44 80.93 T:isapxv20 2722.76 2727.79 2733.32 T:elephant176v2 2941.32 2942.58 2944.43 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.29 0.31 0.32 aes256gcmv1 0.29 0.31 0.32 T:aes128gcmv1 6.53 6.55 6.58 ascon128av12 7.53 7.59 7.63 T:xoodyakround3 9.88 9.92 9.96 ascon128v12 9.91 9.99 10.04 ascon80pqv12 12.38 12.43 12.49 T:schwaemm256128v2 13.33 13.38 13.42 ascon128abi32v12 16.52 16.60 16.69 T:schwaemm192192v2 17.31 17.39 17.46 T:schwaemm256256v2 19.03 19.29 19.51 T:isapa128v20 19.54 19.68 19.81 ascon128bi32v12 19.94 19.97 20.02 T:schwaemm128128v2 23.45 23.52 23.57 romulusm 23.48 23.53 23.58 romulusn 24.49 24.54 24.57 T:grain128aeadv2 26.57 26.64 26.71 T:isapa128av20 33.49 33.78 34.33 T:isapk128av20 34.80 34.89 35.04 T:tinyjambu128v2 36.27 36.32 36.39 T:tinyjambu256v2 37.43 37.51 37.69 T:tinyjambu192v2 39.90 39.97 40.06 T:giftcofb128v1 41.49 42.61 43.93 T:isapk128v20 43.16 43.26 43.32 romulust 69.70 69.78 69.85 T:elephant200v2 76.69 77.30 79.70 T:isapxv20 2717.64 2726.76 2732.25 T:elephant176v2 2940.29 2942.22 2943.75 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.30 0.31 0.32 aes256gcmv1 0.30 0.31 0.32 T:aes128gcmv1 6.53 6.56 6.59 ascon128av12 7.55 7.62 7.67 T:xoodyakround3 9.88 9.92 9.95 ascon128v12 9.91 9.99 10.03 ascon80pqv12 12.38 12.45 12.51 T:schwaemm256128v2 13.34 13.39 13.44 ascon128abi32v12 16.54 16.62 16.69 T:schwaemm192192v2 17.31 17.39 17.47 T:schwaemm256256v2 18.93 19.26 19.53 T:isapa128v20 19.52 19.68 19.83 ascon128bi32v12 19.96 19.99 20.02 T:schwaemm128128v2 23.44 23.52 23.57 romulusm 23.47 23.54 23.59 romulusn 24.50 24.53 24.57 T:grain128aeadv2 26.58 26.66 26.73 T:isapa128av20 33.41 33.74 34.26 T:isapk128av20 34.82 34.88 35.08 T:tinyjambu128v2 36.30 36.34 36.44 T:tinyjambu256v2 37.63 37.66 37.70 T:tinyjambu192v2 39.88 39.95 40.01 T:giftcofb128v1 42.35 42.93 43.66 T:isapk128v20 43.16 43.23 43.29 romulust 69.70 69.82 69.89 T:elephant200v2 77.74 80.13 81.71 T:isapxv20 2720.03 2723.41 2732.23 T:elephant176v2 2941.48 2942.92 2945.41 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.97 0.98 0.99 T:aes128gcmv1 1.05 1.05 1.06 aes256gcmv1 6.70 6.73 6.76 ascon128av12 10.06 10.08 10.11 ascon128v12 10.08 10.11 10.16 ascon80pqv12 10.82 10.86 10.91 T:xoodyakround3 12.88 12.91 12.98 T:schwaemm256128v2 13.52 13.64 13.68 ascon128abi32v12 16.98 17.03 17.07 T:schwaemm192192v2 17.87 17.94 18.00 T:schwaemm256256v2 19.71 19.76 19.81 ascon128bi32v12 20.24 20.26 20.29 T:schwaemm128128v2 24.83 24.85 24.88 T:grain128aeadv2 31.38 31.40 31.43 romulusn 35.14 35.19 35.27 T:isapa128av20 40.28 40.31 40.35 T:giftcofb128v1 41.92 42.07 42.29 T:isapa128v20 43.18 43.20 43.23 romulusm 45.44 45.51 45.56 T:tinyjambu128v2 47.39 47.63 47.92 T:isapk128av20 52.48 52.51 53.01 T:tinyjambu192v2 54.42 54.49 54.54 T:tinyjambu256v2 85.69 85.72 85.77 romulust 96.30 96.81 97.29 T:isapk128v20 106.44 106.52 107.21 T:elephant200v2 175.11 176.81 177.99 T:isapxv20 4147.22 4152.69 4157.52 T:elephant176v2 4463.83 4465.29 4467.30 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.91 0.92 0.92 T:aes128gcmv1 0.99 1.00 1.00 aes256gcmv1 6.68 6.69 6.72 ascon128av12 10.02 10.04 10.06 ascon128v12 10.00 10.05 10.09 ascon80pqv12 10.75 10.77 10.79 T:xoodyakround3 12.90 12.94 12.98 T:schwaemm256128v2 13.55 13.60 13.63 ascon128abi32v12 17.00 17.05 17.09 T:schwaemm192192v2 17.93 17.99 18.04 T:schwaemm256256v2 19.78 19.83 19.89 ascon128bi32v12 20.18 20.20 20.22 T:schwaemm128128v2 24.53 24.54 24.57 T:grain128aeadv2 31.44 31.46 31.49 romulusn 35.15 35.20 35.28 T:isapa128av20 40.30 40.34 40.37 T:giftcofb128v1 42.05 42.28 42.35 T:isapa128v20 43.29 43.33 43.39 romulusm 45.41 45.45 45.50 T:tinyjambu128v2 47.34 47.58 47.80 T:isapk128av20 52.47 52.53 52.59 T:tinyjambu192v2 54.40 54.43 54.47 T:tinyjambu256v2 85.70 85.74 85.78 romulust 95.44 95.97 96.52 T:isapk128v20 106.19 106.55 106.64 T:elephant200v2 172.83 173.35 175.87 T:isapxv20 4149.95 4154.49 4158.13 T:elephant176v2 4464.85 4466.10 4467.62 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.91 0.91 0.92 T:aes128gcmv1 0.99 1.00 1.00 aes256gcmv1 6.68 6.70 6.72 ascon128av12 9.99 10.03 10.06 ascon128v12 10.00 10.05 10.09 ascon80pqv12 10.78 10.80 10.90 T:xoodyakround3 12.89 12.93 12.97 T:schwaemm256128v2 13.58 13.61 13.64 ascon128abi32v12 16.92 16.96 17.01 T:schwaemm192192v2 17.94 17.98 18.04 T:schwaemm256256v2 19.80 19.85 19.90 ascon128bi32v12 20.15 20.18 20.21 T:schwaemm128128v2 24.53 24.54 24.56 T:grain128aeadv2 25.84 25.91 25.97 T:isapa128v20 27.92 27.96 28.00 T:isapa128av20 31.42 31.45 31.48 romulusn 36.97 37.09 37.27 T:isapk128av20 40.29 40.34 40.38 T:giftcofb128v1 43.29 43.33 43.36 romulusm 44.49 44.52 44.55 romulust 45.41 45.44 45.47 T:tinyjambu128v2 52.54 52.57 52.61 T:tinyjambu192v2 54.38 54.41 58.96 T:tinyjambu256v2 63.41 63.74 63.97 T:isapk128v20 106.48 106.57 106.64 T:elephant200v2 113.28 113.64 115.54 T:isapxv20 4148.25 4152.73 4156.92 T:elephant176v2 4464.85 4466.02 4467.20 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.40 5.46 5.54 T:aes128gcmv1 5.94 6.00 6.09 aes256gcmv1 9.93 10.06 10.23 ascon128av12 13.01 13.11 13.25 ascon128v12 13.03 13.18 13.33 ascon80pqv12 15.67 15.80 16.29 T:xoodyakround3 20.37 20.54 20.78 ascon128abi32v12 20.86 21.15 21.67 T:schwaemm256128v2 25.44 25.59 25.76 T:schwaemm128128v2 26.18 26.59 27.02 ascon128bi32v12 27.12 27.57 28.10 T:schwaemm192192v2 28.27 28.68 29.08 T:schwaemm256256v2 32.32 32.46 32.68 T:grain128aeadv2 37.75 37.90 38.13 romulusn 47.51 47.66 47.79 T:giftcofb128v1 50.47 50.63 50.90 romulusm 55.77 56.03 56.32 T:tinyjambu128v2 64.12 64.33 64.59 T:tinyjambu192v2 66.14 66.48 66.70 T:tinyjambu256v2 87.85 88.05 88.32 T:isapa128av20 114.19 114.46 114.75 romulust 149.99 150.29 150.71 T:elephant200v2 152.38 152.71 153.38 T:isapk128av20 342.81 343.39 343.84 T:isapa128v20 982.06 1010.84 1021.04 T:isapk128v20 1743.96 1771.17 1780.28 T:isapxv20 5169.75 5174.55 5183.33 T:elephant176v2 5975.72 5979.77 5987.48 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.66 4.75 4.83 T:aes128gcmv1 5.44 5.50 5.63 aes256gcmv1 9.93 10.00 10.14 ascon128av12 12.92 13.06 13.26 ascon128v12 12.99 13.13 13.21 ascon80pqv12 15.71 15.78 16.17 T:xoodyakround3 20.13 20.33 20.55 ascon128abi32v12 20.96 21.22 21.75 T:schwaemm256128v2 25.43 25.53 25.66 T:schwaemm128128v2 26.92 27.27 27.62 ascon128bi32v12 27.30 27.48 27.97 T:schwaemm192192v2 28.26 28.60 28.99 T:schwaemm256256v2 32.18 32.31 32.46 T:grain128aeadv2 38.24 38.41 38.64 romulusn 47.90 47.97 48.12 T:giftcofb128v1 52.27 52.49 52.81 romulusm 55.86 56.11 56.41 T:tinyjambu128v2 64.22 64.43 64.66 T:tinyjambu192v2 66.12 66.28 66.57 T:tinyjambu256v2 87.84 88.08 88.38 T:isapa128av20 114.23 114.55 114.98 romulust 150.15 150.49 150.69 T:elephant200v2 152.43 152.59 153.12 T:isapk128av20 342.95 343.36 343.96 T:isapa128v20 994.16 1006.94 1019.17 T:isapk128v20 1734.76 1741.01 1763.80 T:isapxv20 5170.78 5177.32 5186.02 T:elephant176v2 5976.25 5980.13 5988.09 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.71 4.74 4.79 T:aes128gcmv1 5.49 5.55 5.63 aes256gcmv1 9.91 10.01 10.14 ascon128av12 12.91 13.05 13.19 ascon128v12 12.99 13.10 13.26 ascon80pqv12 15.71 15.83 16.13 T:xoodyakround3 20.45 20.61 20.75 ascon128abi32v12 20.79 21.13 21.45 T:schwaemm256128v2 25.47 25.55 25.66 T:schwaemm128128v2 26.78 27.23 27.60 ascon128bi32v12 27.20 27.45 27.72 T:schwaemm192192v2 28.25 28.58 28.89 T:schwaemm256256v2 32.17 32.28 32.42 T:grain128aeadv2 38.32 38.52 38.70 romulusn 47.85 48.00 48.12 T:giftcofb128v1 52.26 52.45 52.60 romulusm 55.75 56.02 56.44 T:tinyjambu128v2 57.63 57.86 58.19 T:isapa128av20 64.20 64.46 64.71 T:tinyjambu192v2 66.12 66.26 66.39 T:tinyjambu256v2 72.50 72.70 72.96 romulust 100.09 100.36 100.94 T:isapk128av20 149.89 150.21 150.50 T:elephant200v2 178.46 179.03 179.74 T:isapa128v20 523.01 527.72 532.89 T:isapk128v20 924.09 927.72 936.94 T:isapxv20 5160.39 5168.11 5180.78 T:elephant176v2 5977.77 5980.79 5985.91 T:elephant160v2