VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,little, supercop-20260627

[Page version: 20260805 22:02:36]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.65 1.67 1.70 T:aes128gcmv1 1.87 1.89 1.91 aes256gcmv1 8.24 8.26 8.29 ascon128av12 12.27 12.30 12.32 ascon128v12 12.30 12.32 12.34 ascon80pqv12 15.31 15.33 15.35 ascon128abi32v12 18.94 19.01 19.44 T:xoodyakround3 21.13 21.17 21.21 T:schwaemm256128v2 21.81 21.86 21.89 ascon128bi32v12 27.58 27.62 27.74 T:schwaemm192192v2 29.61 29.70 29.87 T:schwaemm256256v2 29.04 29.94 30.41 T:schwaemm128128v2 36.18 36.23 36.30 T:grain128aeadv2 46.91 47.01 47.03 T:isapa128av20 48.42 48.56 48.60 romulusn 49.23 49.28 49.36 T:isapa128v20 52.78 52.82 52.89 T:giftcofb128v1 69.22 69.27 69.32 T:tinyjambu128v2 79.50 79.63 79.76 romulusm 79.65 79.69 79.76 T:tinyjambu192v2 80.21 80.59 80.87 T:isapk128av20 83.91 83.98 84.04 T:tinyjambu256v2 106.26 106.63 106.97 T:isapk128v20 162.14 162.16 162.20 romulust 213.21 214.11 215.37 T:isapxv20 247.50 247.66 247.89 T:elephant200v2 8638.87 8646.95 8711.25 T:elephant176v2 10083.90 10123.21 10128.00 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.66 1.67 1.69 T:aes128gcmv1 1.86 1.88 1.90 aes256gcmv1 8.31 8.33 8.35 ascon128av12 12.24 12.26 12.29 ascon128v12 12.20 12.27 12.30 ascon80pqv12 15.15 15.19 15.21 ascon128abi32v12 18.85 18.99 19.08 T:xoodyakround3 21.06 21.19 21.23 T:schwaemm256128v2 21.87 21.91 21.94 ascon128bi32v12 27.62 27.81 27.88 T:schwaemm192192v2 29.63 29.79 29.87 T:schwaemm256256v2 29.04 29.95 30.39 T:schwaemm128128v2 36.85 36.91 36.96 T:grain128aeadv2 46.56 46.77 46.89 T:isapa128av20 48.45 48.56 48.69 romulusn 49.25 49.32 49.39 T:isapa128v20 52.91 52.96 53.00 T:giftcofb128v1 69.35 69.39 69.45 T:tinyjambu128v2 79.69 79.73 79.79 T:tinyjambu192v2 79.65 79.76 79.85 romulusm 80.08 80.49 80.82 T:isapk128av20 83.80 83.88 83.95 T:tinyjambu256v2 106.43 107.00 107.23 T:isapk128v20 162.16 162.22 162.29 romulust 212.86 213.77 215.21 T:isapxv20 247.10 247.30 247.40 T:elephant200v2 8639.02 8645.99 8710.98 T:elephant176v2 10085.67 10121.15 10127.76 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.67 1.67 1.69 T:aes128gcmv1 1.86 1.87 1.88 aes256gcmv1 8.31 8.33 8.36 ascon128av12 12.24 12.26 12.28 ascon128v12 12.22 12.28 12.31 ascon80pqv12 15.15 15.19 15.22 ascon128abi32v12 18.93 19.08 19.16 T:xoodyakround3 21.08 21.19 21.23 T:schwaemm256128v2 21.86 21.90 21.93 ascon128bi32v12 24.78 24.85 24.90 T:isapa128v20 27.64 27.71 27.87 T:schwaemm192192v2 29.59 29.73 29.82 T:schwaemm256256v2 29.09 29.93 30.18 T:schwaemm128128v2 31.40 31.57 31.69 T:isapa128av20 36.83 36.93 36.97 T:grain128aeadv2 48.42 48.56 48.73 romulusn 52.91 52.97 53.02 T:giftcofb128v1 53.75 54.02 54.14 T:isapk128av20 55.48 55.52 55.59 romulust 66.55 67.01 67.28 T:isapk128v20 69.34 69.38 69.42 T:tinyjambu128v2 79.54 79.74 79.92 romulusm 79.68 79.74 79.79 T:tinyjambu192v2 83.80 83.86 83.92 T:tinyjambu256v2 125.02 125.68 126.71 T:isapxv20 247.09 247.27 247.38 T:elephant200v2 8637.40 8646.27 8711.83 T:elephant176v2 10083.52 10121.19 10127.65 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.13 1.14 1.15 T:aes128gcmv1 1.24 1.25 1.26 aes256gcmv1 8.22 8.28 8.30 ascon128av12 12.25 12.27 12.29 ascon80pqv12 12.29 12.32 12.33 ascon128v12 14.46 14.51 14.59 T:xoodyakround3 14.95 14.98 14.99 ascon128abi32v12 20.96 21.09 21.13 T:schwaemm256128v2 21.82 21.95 21.97 ascon128bi32v12 27.11 27.53 27.71 T:schwaemm192192v2 29.64 29.70 29.76 T:schwaemm256256v2 29.54 30.09 30.99 T:schwaemm128128v2 36.23 36.28 36.35 T:grain128aeadv2 37.00 37.04 37.06 T:isapa128v20 39.06 39.21 39.29 T:isapa128av20 39.73 39.80 39.85 romulusn 52.76 52.81 52.94 T:giftcofb128v1 55.27 55.30 55.36 romulusm 55.39 55.42 55.45 T:tinyjambu128v2 62.02 62.06 62.10 T:tinyjambu192v2 65.22 65.42 65.48 T:tinyjambu256v2 66.55 66.99 67.19 T:isapk128av20 86.67 86.95 87.36 T:isapk128v20 108.83 108.87 108.91 romulust 168.56 169.47 171.06 T:isapxv20 185.85 185.99 186.46 T:elephant200v2 6443.43 6445.93 6463.83 T:elephant176v2 7566.47 7600.56 7645.01 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.13 1.14 1.15 T:aes128gcmv1 1.23 1.24 1.25 aes256gcmv1 8.28 8.29 8.31 ascon128av12 12.23 12.26 12.27 ascon128v12 12.25 12.26 12.28 ascon80pqv12 14.50 14.68 14.70 T:xoodyakround3 14.87 14.89 14.90 ascon128abi32v12 21.07 21.12 21.16 T:schwaemm256128v2 21.84 21.87 21.90 ascon128bi32v12 27.15 27.67 27.74 T:schwaemm192192v2 29.62 29.65 29.69 T:schwaemm256256v2 30.01 30.09 31.01 T:schwaemm128128v2 36.56 36.62 36.68 T:grain128aeadv2 36.98 37.02 37.06 T:isapa128v20 38.99 39.10 39.32 T:isapa128av20 39.68 39.80 39.89 romulusn 52.85 52.91 53.05 T:giftcofb128v1 55.31 55.39 55.50 romulusm 55.44 55.47 55.51 T:tinyjambu128v2 62.04 62.07 62.11 T:tinyjambu192v2 62.96 63.00 63.03 T:tinyjambu256v2 66.60 66.96 67.06 T:isapk128av20 86.68 86.95 87.20 T:isapk128v20 108.80 108.85 108.92 romulust 168.81 169.05 169.89 T:isapxv20 185.63 185.78 186.12 T:elephant200v2 6443.42 6446.15 6465.35 T:elephant176v2 7567.34 7600.46 7645.10 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.14 1.14 1.15 T:aes128gcmv1 1.23 1.24 1.25 aes256gcmv1 8.28 8.30 8.32 ascon128av12 12.24 12.25 12.27 ascon128v12 12.25 12.27 12.29 ascon80pqv12 14.45 14.60 14.69 T:xoodyakround3 14.86 14.89 14.91 ascon128abi32v12 21.05 21.10 21.15 T:schwaemm256128v2 21.86 21.89 21.93 ascon128bi32v12 24.79 24.81 24.83 T:isapa128v20 27.16 27.52 27.71 T:schwaemm192192v2 29.66 29.70 29.75 T:schwaemm256256v2 29.41 29.92 30.39 T:schwaemm128128v2 31.47 31.48 31.64 T:isapa128av20 36.56 36.62 36.67 T:grain128aeadv2 39.64 39.79 39.87 romulusn 52.84 52.89 53.05 T:giftcofb128v1 53.46 53.71 53.80 T:isapk128av20 55.29 55.39 55.46 romulusm 55.45 55.47 55.51 T:tinyjambu128v2 55.50 55.52 55.55 romulust 62.04 62.06 62.10 T:tinyjambu192v2 62.96 63.00 63.05 T:tinyjambu256v2 66.85 66.94 67.06 T:isapk128v20 124.96 125.17 125.56 T:isapxv20 185.67 185.77 186.03 T:elephant200v2 6443.49 6446.18 6464.64 T:elephant176v2 7566.92 7600.80 7645.48 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.58 0.60 0.62 T:aes128gcmv1 0.59 0.61 0.62 aes256gcmv1 8.16 8.28 8.31 ascon128av12 10.05 10.09 10.14 T:xoodyakround3 12.21 12.24 12.27 ascon80pqv12 12.23 12.27 12.36 ascon128v12 14.61 14.63 14.65 ascon128abi32v12 20.93 20.96 20.99 T:schwaemm256128v2 21.84 22.06 22.09 ascon128bi32v12 24.74 24.79 24.86 T:isapa128v20 27.53 27.59 27.63 T:schwaemm192192v2 29.51 29.56 29.61 T:schwaemm256256v2 28.80 29.88 30.10 T:schwaemm128128v2 31.00 31.05 31.08 romulusm 31.03 31.07 31.11 romulusn 31.35 31.71 31.80 T:isapa128av20 36.22 36.32 36.39 T:grain128aeadv2 41.53 41.57 41.61 T:tinyjambu128v2 44.35 44.41 44.45 T:tinyjambu192v2 46.59 46.90 46.96 T:tinyjambu256v2 52.52 52.77 52.92 T:giftcofb128v1 53.26 53.49 53.67 T:isapk128av20 55.51 55.55 55.59 romulust 66.28 66.79 67.03 T:isapk128v20 124.29 124.35 124.45 T:elephant200v2 124.07 124.70 125.77 T:isapxv20 4264.03 4271.92 4296.67 T:elephant176v2 5041.07 5046.89 5067.11 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.60 0.61 0.63 T:aes128gcmv1 0.62 0.62 0.63 aes256gcmv1 8.23 8.26 8.28 ascon128av12 10.02 10.06 10.09 T:xoodyakround3 12.20 12.23 12.26 ascon128v12 12.20 12.24 12.26 ascon80pqv12 14.57 14.60 14.62 ascon128abi32v12 20.89 20.95 20.99 T:schwaemm256128v2 21.79 21.84 21.88 ascon128bi32v12 24.73 24.78 24.82 T:isapa128v20 27.47 27.57 27.62 T:schwaemm192192v2 29.50 29.56 29.61 T:schwaemm256256v2 28.97 30.06 30.13 T:schwaemm128128v2 31.02 31.05 31.08 romulusm 31.03 31.07 31.12 romulusn 31.21 31.65 31.74 T:isapa128av20 36.26 36.35 36.44 T:grain128aeadv2 41.52 41.57 41.59 T:tinyjambu128v2 42.09 42.13 42.19 T:tinyjambu256v2 44.38 44.42 44.45 T:tinyjambu192v2 52.49 52.75 52.92 T:giftcofb128v1 53.32 53.53 53.73 T:isapk128av20 55.50 55.55 55.59 romulust 66.27 66.75 66.94 T:isapk128v20 123.87 124.31 124.87 T:isapxv20 124.29 124.36 124.43 T:elephant200v2 4264.66 4271.80 4297.17 T:elephant176v2 5040.57 5046.92 5066.89 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.60 0.61 0.62 T:aes128gcmv1 0.60 0.61 0.62 aes256gcmv1 8.24 8.26 8.29 ascon128av12 10.03 10.10 10.15 T:xoodyakround3 12.19 12.23 12.27 ascon128v12 12.21 12.24 12.26 ascon80pqv12 14.58 14.60 14.63 ascon128abi32v12 20.78 20.82 20.95 T:schwaemm256128v2 21.80 21.85 21.88 ascon128bi32v12 24.73 24.78 24.85 T:isapa128v20 27.47 27.58 27.63 T:schwaemm192192v2 29.51 29.56 29.60 T:schwaemm256256v2 29.89 30.07 30.12 T:schwaemm128128v2 30.98 31.04 31.10 romulusm 31.03 31.08 31.11 romulusn 31.28 31.61 31.77 T:isapa128av20 36.22 36.32 36.38 T:grain128aeadv2 41.52 41.57 41.60 T:tinyjambu128v2 42.07 42.12 42.17 T:tinyjambu256v2 44.37 44.41 44.45 T:tinyjambu192v2 52.47 52.74 52.90 T:giftcofb128v1 53.29 53.55 53.72 T:isapk128av20 55.50 55.55 55.61 romulust 66.17 66.68 66.94 T:isapk128v20 124.01 124.35 125.60 T:isapxv20 124.31 124.37 124.42 T:elephant200v2 4264.84 4271.72 4296.74 T:elephant176v2 5040.30 5046.96 5068.05 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.26 1.27 1.27 T:aes128gcmv1 1.38 1.39 1.40 aes256gcmv1 8.42 8.46 8.49 ascon128av12 12.45 12.47 12.49 ascon80pqv12 12.50 12.50 12.51 ascon128v12 14.61 14.66 14.80 T:xoodyakround3 15.32 15.33 15.34 ascon128abi32v12 21.68 21.69 21.72 T:schwaemm256128v2 22.27 22.37 22.39 ascon128bi32v12 28.24 28.30 28.35 T:schwaemm192192v2 29.97 30.40 30.47 T:schwaemm128128v2 30.49 30.53 30.56 T:schwaemm256256v2 36.67 36.69 36.74 T:grain128aeadv2 40.20 40.25 40.29 romulusn 42.24 42.37 42.44 T:isapa128av20 52.94 53.15 53.32 T:giftcofb128v1 54.14 54.16 54.18 T:isapa128v20 55.76 55.78 55.81 romulusm 55.82 55.84 55.86 T:tinyjambu128v2 62.49 62.52 62.56 T:tinyjambu192v2 65.60 65.71 65.78 T:tinyjambu256v2 77.32 77.59 77.91 T:isapk128av20 110.42 110.45 110.49 romulust 152.54 152.68 152.96 T:isapk128v20 189.75 189.85 189.97 T:elephant200v2 273.01 273.56 274.51 T:isapxv20 6501.35 6502.73 6505.54 T:elephant176v2 7670.34 7677.23 7680.97 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.27 1.27 1.28 T:aes128gcmv1 1.39 1.39 1.40 aes256gcmv1 8.49 8.50 8.52 ascon128av12 12.43 12.44 12.45 ascon128v12 12.44 12.45 12.47 ascon80pqv12 14.65 14.71 14.74 T:xoodyakround3 15.24 15.25 15.27 ascon128abi32v12 21.61 21.69 21.71 T:schwaemm256128v2 22.27 22.29 22.32 ascon128bi32v12 28.19 28.28 28.34 T:schwaemm192192v2 30.45 30.48 30.51 T:schwaemm256256v2 30.16 30.92 31.35 T:schwaemm128128v2 37.00 37.04 37.11 T:grain128aeadv2 40.19 40.24 40.29 romulusn 42.02 42.23 42.28 T:isapa128av20 53.22 53.37 53.51 T:giftcofb128v1 54.17 54.18 54.19 T:isapa128v20 55.87 55.89 55.92 T:tinyjambu128v2 55.87 55.98 56.04 romulusm 62.52 62.54 62.57 T:tinyjambu192v2 63.45 63.49 63.55 T:tinyjambu256v2 77.36 77.59 77.97 T:isapk128av20 110.42 110.46 110.50 romulust 152.53 152.62 152.77 T:isapk128v20 189.57 189.66 189.79 T:elephant200v2 272.78 273.07 273.61 T:isapxv20 6504.90 6518.76 6546.91 T:elephant176v2 7670.21 7677.52 7679.83 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.26 1.27 1.27 T:aes128gcmv1 1.39 1.39 1.40 aes256gcmv1 8.47 8.49 8.51 ascon128av12 12.42 12.45 12.45 ascon128v12 12.43 12.45 12.46 ascon80pqv12 14.72 14.76 14.81 T:xoodyakround3 15.24 15.25 15.26 ascon128abi32v12 21.58 21.68 21.73 T:schwaemm256128v2 22.28 22.29 22.31 ascon128bi32v12 28.18 28.26 28.34 T:schwaemm192192v2 30.46 30.50 30.53 T:schwaemm256256v2 30.06 30.90 31.29 T:schwaemm128128v2 33.24 33.32 33.50 T:isapa128av20 33.50 33.51 33.54 T:isapa128v20 37.07 37.09 37.12 T:grain128aeadv2 40.19 40.26 40.33 romulusn 53.06 53.18 53.32 T:giftcofb128v1 55.87 55.90 55.93 T:tinyjambu128v2 55.91 55.96 56.01 romulusm 57.07 57.09 57.12 romulust 60.53 60.73 60.86 T:isapk128av20 62.50 62.52 62.56 T:tinyjambu192v2 63.43 63.47 63.52 T:tinyjambu256v2 101.86 101.95 102.14 T:isapk128v20 178.31 178.39 178.50 T:isapxv20 189.57 189.66 189.73 T:elephant200v2 6504.31 6518.71 6547.32 T:elephant176v2 7669.91 7676.80 7679.23 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.19 6.27 6.35 T:aes128gcmv1 6.86 6.95 7.03 aes256gcmv1 12.99 13.06 13.42 ascon128av12 16.49 16.60 16.82 ascon128v12 16.57 16.68 16.89 ascon80pqv12 21.29 21.46 21.76 T:xoodyakround3 23.14 23.23 23.37 ascon128abi32v12 31.84 32.03 32.22 ascon128bi32v12 35.50 35.62 35.98 T:schwaemm256128v2 38.88 39.23 39.53 T:schwaemm128128v2 45.52 45.89 46.29 T:schwaemm192192v2 46.22 46.60 47.36 T:grain128aeadv2 48.69 48.88 49.05 T:schwaemm256256v2 50.39 50.52 50.65 romulusn 63.64 63.85 64.16 T:giftcofb128v1 65.07 65.23 65.36 T:tinyjambu128v2 66.88 66.96 67.15 romulusm 72.93 73.11 73.33 T:tinyjambu192v2 73.97 74.23 74.58 T:tinyjambu256v2 113.72 114.04 114.51 T:isapa128av20 147.43 147.61 147.85 romulust 268.33 268.50 269.03 T:elephant200v2 306.87 308.56 309.69 T:isapk128av20 447.78 448.07 448.42 T:isapa128v20 1643.32 1646.09 1652.90 T:isapk128v20 2637.64 2643.38 2645.88 T:isapxv20 8109.19 8133.41 8151.44 T:elephant176v2 10258.69 10285.55 10302.85 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.10 6.15 6.24 T:aes128gcmv1 6.79 6.85 6.91 aes256gcmv1 13.06 13.13 13.28 ascon128av12 16.54 16.65 16.89 ascon128v12 16.63 16.74 16.89 ascon80pqv12 21.34 21.54 21.97 T:xoodyakround3 23.12 23.27 23.54 ascon128abi32v12 31.79 31.95 32.17 ascon128bi32v12 35.58 35.67 35.84 T:schwaemm256128v2 38.97 39.32 39.62 T:schwaemm128128v2 45.27 45.69 46.06 T:schwaemm192192v2 46.96 47.25 47.62 T:grain128aeadv2 48.70 48.88 49.11 T:schwaemm256256v2 50.53 50.63 50.78 romulusn 64.26 64.45 64.66 T:giftcofb128v1 65.32 65.53 65.76 T:tinyjambu128v2 69.86 70.03 70.17 romulusm 73.06 73.24 73.47 T:tinyjambu192v2 73.91 74.07 74.32 T:tinyjambu256v2 113.92 114.09 114.45 T:isapa128av20 147.53 147.66 147.81 romulust 268.17 268.36 268.62 T:elephant200v2 306.96 307.86 308.99 T:isapk128av20 447.80 448.29 448.85 T:isapa128v20 1644.18 1647.19 1652.25 T:isapk128v20 2633.89 2637.93 2641.86 T:isapxv20 8108.46 8134.82 8150.23 T:elephant176v2 10258.82 10284.18 10304.32 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.09 6.15 6.21 T:aes128gcmv1 6.78 6.83 6.86 aes256gcmv1 13.07 13.19 13.37 ascon128av12 16.54 16.65 16.86 ascon128v12 16.62 16.69 16.86 ascon80pqv12 21.36 21.57 22.16 T:xoodyakround3 23.10 23.23 23.40 ascon128abi32v12 31.80 31.96 32.12 ascon128bi32v12 35.55 35.64 35.72 T:schwaemm256128v2 39.16 39.35 39.55 T:schwaemm128128v2 45.37 45.58 45.84 T:schwaemm192192v2 46.65 46.91 47.31 T:grain128aeadv2 48.63 48.78 48.97 T:schwaemm256256v2 50.52 50.62 50.72 romulusn 64.21 64.39 64.55 T:giftcofb128v1 65.30 65.44 65.55 T:tinyjambu128v2 69.89 70.00 70.16 romulusm 72.93 73.08 73.33 T:tinyjambu192v2 73.17 73.38 73.65 T:isapa128av20 73.85 73.98 74.26 T:tinyjambu256v2 92.66 92.83 93.06 romulust 208.00 208.77 210.51 T:isapk128av20 233.44 233.76 234.08 T:isapa128v20 268.19 268.40 268.62 T:elephant200v2 890.38 891.62 892.83 T:isapk128v20 1377.99 1380.90 1382.88 T:isapxv20 8102.78 8124.98 8147.45 T:elephant176v2 10259.64 10284.45 10301.93 T:elephant160v2