VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,little, supercop-20260330

[Page version: 20260413 04:20:10]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.24 1.25 1.27 T:aes128gcmv1 1.40 1.41 1.42 aes256gcmv1 6.16 6.18 6.20 ascon128av12 9.19 9.22 9.27 ascon80pqv12 9.21 9.23 9.25 ascon128v12 11.45 11.48 11.49 ascon128abi32v12 15.80 15.85 15.88 T:schwaemm256128v2 16.32 16.35 16.37 ascon128bi32v12 18.93 19.01 19.06 T:xoodyakround3 20.77 20.83 20.86 T:schwaemm192192v2 22.01 22.30 22.52 T:schwaemm256256v2 22.54 22.62 22.70 T:schwaemm128128v2 35.12 35.17 35.19 T:isapa128av20 36.20 36.27 36.37 T:grain128aeadv2 36.74 36.78 36.85 T:isapa128v20 39.48 39.54 39.64 T:giftcofb128v1 48.41 48.52 48.60 romulusn 51.80 51.83 51.87 T:tinyjambu128v2 59.61 59.63 59.66 T:tinyjambu192v2 59.92 60.06 60.28 T:isapk128av20 62.79 62.84 62.87 T:tinyjambu256v2 79.50 79.61 79.71 romulusm 79.38 79.76 80.04 T:isapk128v20 157.15 158.47 159.38 T:isapxv20 162.14 162.16 162.21 romulust 185.22 185.28 185.37 T:elephant200v2 6451.94 6458.64 6476.47 T:elephant176v2 7546.82 7561.72 7571.97 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.24 1.25 1.27 T:aes128gcmv1 1.39 1.40 1.41 aes256gcmv1 6.22 6.24 6.26 ascon128av12 9.15 9.17 9.18 ascon128v12 9.16 9.19 9.20 ascon80pqv12 11.32 11.35 11.36 ascon128abi32v12 15.85 15.87 15.89 T:schwaemm256128v2 16.38 16.40 16.45 ascon128bi32v12 18.81 18.90 19.06 T:xoodyakround3 20.64 20.78 20.84 T:schwaemm192192v2 22.01 22.27 22.51 T:schwaemm256256v2 22.58 22.63 22.69 T:schwaemm128128v2 34.84 34.97 35.12 T:isapa128av20 36.76 36.84 36.88 T:isapa128v20 36.85 36.92 37.00 T:grain128aeadv2 39.62 39.69 39.80 T:giftcofb128v1 48.34 48.57 48.67 romulusn 51.89 51.93 51.96 T:tinyjambu128v2 59.61 59.66 59.72 T:tinyjambu192v2 59.87 60.09 60.27 T:isapk128av20 62.70 62.76 62.80 T:tinyjambu256v2 79.19 79.58 80.14 T:isapk128v20 79.67 79.71 79.80 romulusm 157.26 159.46 160.68 T:isapxv20 162.16 162.21 162.27 romulust 184.92 184.99 185.09 T:elephant200v2 6459.71 6474.45 6479.12 T:elephant176v2 7563.25 7573.90 7576.63 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.24 1.25 1.26 T:aes128gcmv1 1.39 1.40 1.41 aes256gcmv1 6.22 6.24 6.27 ascon128av12 9.15 9.17 9.18 ascon128v12 9.16 9.18 9.21 ascon80pqv12 11.32 11.34 11.36 ascon128abi32v12 15.86 15.88 15.90 T:schwaemm256128v2 16.37 16.39 16.41 ascon128bi32v12 18.49 18.53 18.60 T:isapa128v20 18.85 18.95 19.14 T:xoodyakround3 20.64 20.73 20.83 T:schwaemm192192v2 22.01 22.27 22.53 T:schwaemm256256v2 22.57 22.62 22.70 T:schwaemm128128v2 23.48 23.66 23.75 T:isapa128av20 36.85 36.94 37.01 T:grain128aeadv2 39.62 39.67 39.78 T:giftcofb128v1 40.17 40.45 40.60 T:isapk128av20 48.35 48.52 48.64 romulusn 49.47 49.81 50.23 T:isapk128v20 51.90 51.93 51.96 T:tinyjambu128v2 55.47 55.52 55.58 romulust 59.62 59.66 59.71 T:tinyjambu192v2 62.71 62.75 62.79 T:tinyjambu256v2 79.49 79.65 79.87 romulusm 92.41 93.63 94.55 T:isapxv20 184.92 184.97 185.11 T:elephant200v2 6459.82 6474.27 6478.13 T:elephant176v2 7562.77 7573.73 7576.19 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.85 0.85 0.86 T:aes128gcmv1 0.92 0.93 0.94 aes256gcmv1 6.18 6.20 6.21 ascon128av12 9.18 9.19 9.20 ascon80pqv12 9.17 9.19 9.20 ascon128v12 11.20 11.21 11.22 ascon128abi32v12 14.54 14.64 14.70 T:xoodyakround3 15.69 15.75 15.80 T:schwaemm256128v2 16.34 16.43 16.44 ascon128bi32v12 20.58 20.67 20.75 T:schwaemm192192v2 21.97 22.22 22.42 T:schwaemm256256v2 22.66 23.23 23.36 T:schwaemm128128v2 27.66 27.69 27.73 T:isapa128v20 29.22 29.31 29.38 T:isapa128av20 36.25 36.32 36.40 T:grain128aeadv2 39.51 39.56 39.62 T:giftcofb128v1 39.76 39.79 39.85 romulusn 41.45 41.46 41.49 T:tinyjambu128v2 46.40 46.43 46.46 T:tinyjambu192v2 48.82 48.94 49.00 T:tinyjambu256v2 49.96 50.09 50.31 T:isapk128av20 55.26 55.31 55.35 romulusm 64.82 64.95 65.14 T:isapk128v20 108.84 108.86 108.90 romulust 126.50 126.81 127.46 T:isapxv20 139.05 139.19 139.52 T:elephant200v2 4839.17 4847.97 4854.07 T:elephant176v2 5673.63 5694.36 5696.77 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.85 0.86 0.86 T:aes128gcmv1 0.92 0.93 0.94 aes256gcmv1 6.19 6.21 6.22 ascon128av12 9.13 9.15 9.15 ascon128v12 9.16 9.17 9.18 ascon80pqv12 11.12 11.14 11.15 ascon128abi32v12 14.52 14.57 14.62 T:xoodyakround3 15.72 15.76 15.80 T:schwaemm256128v2 16.36 16.37 16.39 ascon128bi32v12 20.60 20.74 20.77 T:schwaemm192192v2 21.97 22.19 22.42 T:schwaemm256256v2 22.57 23.22 23.38 T:schwaemm128128v2 27.69 27.71 27.74 T:isapa128v20 29.22 29.34 29.38 T:isapa128av20 36.55 36.63 36.72 T:grain128aeadv2 39.57 39.65 39.69 T:giftcofb128v1 39.65 39.80 39.90 romulusn 41.48 41.51 41.53 T:tinyjambu128v2 46.42 46.45 46.47 T:tinyjambu192v2 47.10 47.13 47.15 T:tinyjambu256v2 49.96 50.12 50.32 T:isapk128av20 55.32 55.39 55.45 romulusm 64.80 64.93 65.13 T:isapk128v20 108.80 108.86 108.89 romulust 125.92 126.77 127.18 T:isapxv20 138.99 139.07 139.30 T:elephant200v2 4838.79 4847.98 4853.76 T:elephant176v2 5673.49 5693.99 5696.46 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.85 0.86 0.86 T:aes128gcmv1 0.92 0.93 0.94 aes256gcmv1 6.19 6.20 6.22 ascon128av12 9.13 9.14 9.15 ascon128v12 9.16 9.17 9.19 ascon80pqv12 11.12 11.14 11.15 ascon128abi32v12 14.54 14.60 14.67 T:xoodyakround3 15.68 15.73 15.79 T:schwaemm256128v2 16.35 16.37 16.38 ascon128bi32v12 18.55 18.58 18.61 T:isapa128v20 20.59 20.66 20.74 T:schwaemm192192v2 21.98 22.19 22.43 T:schwaemm256256v2 22.62 23.23 23.39 T:schwaemm128128v2 23.51 23.56 23.73 T:isapa128av20 36.58 36.64 36.70 T:grain128aeadv2 39.58 39.63 39.69 T:giftcofb128v1 39.68 39.82 39.93 romulusn 40.10 40.19 40.30 T:isapk128av20 41.50 41.51 41.54 T:tinyjambu128v2 46.42 46.44 46.47 T:tinyjambu192v2 47.13 47.15 47.17 T:tinyjambu256v2 49.96 50.06 50.26 T:isapk128v20 55.28 55.37 55.47 romulusm 55.51 55.54 55.56 romulust 93.30 93.90 94.19 T:isapxv20 138.95 139.03 139.20 T:elephant200v2 4838.77 4848.02 4853.91 T:elephant176v2 5673.24 5694.08 5696.47 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.44 0.45 0.46 aes256gcmv1 0.44 0.45 0.46 T:aes128gcmv1 6.09 6.17 6.22 ascon128av12 9.12 9.14 9.17 ascon128v12 9.12 9.14 9.17 ascon80pqv12 10.04 10.10 10.16 T:xoodyakround3 10.92 10.94 10.96 ascon128abi32v12 15.64 15.67 15.71 T:schwaemm256128v2 16.28 16.32 16.51 ascon128bi32v12 18.50 18.53 18.58 T:isapa128v20 20.62 20.64 20.67 T:schwaemm192192v2 21.87 22.12 22.38 T:schwaemm256256v2 22.51 22.59 23.07 T:schwaemm128128v2 23.52 23.61 23.67 T:isapa128av20 31.02 31.05 31.10 romulusn 31.01 31.06 31.10 romulusm 31.08 31.11 31.13 T:tinyjambu128v2 33.20 33.23 33.26 T:tinyjambu192v2 34.92 35.23 35.31 T:tinyjambu256v2 36.26 36.35 36.43 T:grain128aeadv2 39.46 39.51 39.62 T:giftcofb128v1 39.96 40.03 40.11 T:isapk128av20 49.56 49.88 50.02 T:isapk128v20 55.51 55.55 55.59 romulust 93.01 93.04 93.09 T:elephant200v2 92.70 93.30 94.13 T:isapxv20 3185.90 3188.24 3198.27 T:elephant176v2 3783.90 3786.20 3788.73 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.45 0.46 0.47 T:aes128gcmv1 0.46 0.46 0.47 aes256gcmv1 6.16 6.18 6.19 ascon128av12 9.09 9.10 9.13 ascon128v12 9.13 9.16 9.19 ascon80pqv12 10.07 10.12 10.17 T:xoodyakround3 10.92 10.93 10.95 ascon128abi32v12 15.65 15.68 15.72 T:schwaemm256128v2 16.30 16.34 16.38 ascon128bi32v12 18.51 18.56 18.63 T:isapa128v20 20.62 20.64 20.67 T:schwaemm192192v2 21.91 22.12 22.40 T:schwaemm256256v2 22.42 22.53 22.58 T:schwaemm128128v2 23.51 23.57 23.74 T:isapa128av20 31.02 31.04 31.09 romulusn 31.03 31.06 31.08 romulusm 31.08 31.10 31.13 T:tinyjambu128v2 31.50 31.53 31.57 T:tinyjambu256v2 33.20 33.23 33.26 T:tinyjambu192v2 36.27 36.33 36.44 T:grain128aeadv2 39.45 39.49 39.59 T:giftcofb128v1 39.90 40.01 40.13 T:isapk128av20 49.62 49.87 50.00 T:isapk128v20 55.50 55.53 55.57 romulust 93.02 93.05 93.09 T:elephant200v2 92.29 93.27 93.90 T:isapxv20 3185.98 3188.81 3201.07 T:elephant176v2 3784.01 3786.39 3788.89 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.45 0.45 0.46 T:aes128gcmv1 0.46 0.46 0.46 aes256gcmv1 6.16 6.18 6.20 ascon128av12 9.09 9.10 9.12 ascon128v12 9.14 9.16 9.18 ascon80pqv12 10.08 10.15 10.23 T:xoodyakround3 10.91 10.93 10.94 ascon128abi32v12 15.62 15.67 15.70 T:schwaemm256128v2 16.30 16.34 16.39 ascon128bi32v12 18.55 18.60 18.64 T:isapa128v20 20.63 20.64 20.67 T:schwaemm192192v2 21.88 22.10 22.38 T:schwaemm256256v2 22.43 22.53 22.58 T:schwaemm128128v2 23.41 23.55 23.61 T:isapa128av20 31.03 31.06 31.10 romulusn 31.02 31.09 31.10 romulusm 31.08 31.10 31.13 T:tinyjambu128v2 31.51 31.54 31.57 T:tinyjambu256v2 33.20 33.23 33.26 T:tinyjambu192v2 36.28 36.35 36.41 T:grain128aeadv2 39.46 39.49 39.56 T:giftcofb128v1 39.99 40.06 40.12 T:isapk128av20 49.66 49.90 50.03 T:isapk128v20 55.48 55.53 55.59 romulust 93.00 93.04 93.09 T:elephant200v2 92.28 93.41 94.10 T:isapxv20 3186.15 3188.59 3200.76 T:elephant176v2 3774.94 3785.06 3788.94 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.94 0.95 0.95 T:aes128gcmv1 1.02 1.03 1.04 aes256gcmv1 6.33 6.34 6.36 ascon128av12 9.31 9.32 9.33 ascon80pqv12 9.31 9.33 9.34 ascon128v12 11.46 11.47 11.47 ascon128abi32v12 14.67 14.72 14.76 T:xoodyakround3 16.18 16.22 16.24 T:schwaemm256128v2 16.66 16.73 16.74 ascon128bi32v12 21.20 21.21 21.23 T:schwaemm192192v2 22.60 22.82 23.03 T:schwaemm256256v2 22.84 23.39 23.49 T:schwaemm128128v2 31.56 31.57 31.68 T:isapa128av20 36.67 36.72 36.78 T:grain128aeadv2 39.85 39.90 39.95 T:giftcofb128v1 40.22 40.26 40.30 romulusn 40.45 40.47 40.48 T:isapa128v20 41.76 41.78 41.80 T:tinyjambu128v2 46.75 46.77 46.79 T:tinyjambu192v2 49.05 49.17 49.24 T:tinyjambu256v2 55.74 55.80 55.85 romulusm 58.09 58.16 58.20 T:isapk128av20 110.41 110.45 110.49 romulust 114.12 114.25 114.45 T:isapk128v20 141.99 142.06 142.17 T:elephant200v2 203.70 204.09 204.63 T:isapxv20 4871.36 4872.86 4878.66 T:elephant176v2 5737.47 5759.82 5763.70 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.94 0.95 0.96 T:aes128gcmv1 1.03 1.04 1.04 aes256gcmv1 6.35 6.36 6.37 ascon128av12 9.27 9.28 9.29 ascon128v12 9.30 9.30 9.31 ascon80pqv12 11.41 11.41 11.42 ascon128abi32v12 14.75 14.80 14.82 T:xoodyakround3 16.16 16.21 16.25 T:schwaemm256128v2 16.66 16.67 16.70 ascon128bi32v12 21.18 21.20 21.22 T:schwaemm192192v2 22.59 22.79 22.98 T:schwaemm256256v2 22.90 23.40 23.47 T:schwaemm128128v2 31.51 31.61 31.66 T:isapa128av20 37.03 37.07 37.12 T:grain128aeadv2 39.93 40.00 40.05 T:giftcofb128v1 40.16 40.29 40.36 romulusn 40.44 40.46 40.49 T:isapa128v20 41.81 41.83 41.85 T:tinyjambu128v2 46.78 46.80 46.82 T:tinyjambu192v2 47.47 47.49 47.52 T:tinyjambu256v2 55.92 56.00 56.04 romulusm 58.11 58.17 58.22 T:isapk128av20 110.41 110.46 110.52 romulust 114.09 114.14 114.23 T:isapk128v20 141.85 141.92 142.03 T:elephant200v2 203.26 204.09 204.37 T:isapxv20 4871.00 4872.72 4878.47 T:elephant176v2 5737.48 5759.91 5763.80 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.95 0.95 0.95 T:aes128gcmv1 1.04 1.04 1.04 aes256gcmv1 6.35 6.36 6.37 ascon128av12 9.27 9.28 9.29 ascon128v12 9.30 9.31 9.31 ascon80pqv12 11.40 11.41 11.42 ascon128abi32v12 14.75 14.81 14.84 T:xoodyakround3 16.16 16.21 16.24 T:schwaemm256128v2 16.66 16.67 16.69 ascon128bi32v12 21.05 21.16 21.21 T:schwaemm192192v2 22.59 22.81 23.01 T:schwaemm256256v2 22.95 23.43 23.49 T:schwaemm128128v2 24.85 24.93 25.05 T:isapa128av20 25.04 25.07 25.08 T:isapa128v20 37.01 37.07 37.13 T:grain128aeadv2 39.94 40.00 40.04 T:giftcofb128v1 40.12 40.30 40.34 romulusn 41.81 41.83 41.84 T:tinyjambu128v2 45.43 45.49 45.54 T:isapk128av20 46.78 46.79 46.81 T:tinyjambu192v2 47.47 47.49 47.52 T:tinyjambu256v2 55.93 55.97 56.04 romulusm 57.05 57.08 57.11 romulust 76.18 76.22 76.29 T:isapk128v20 132.76 133.31 133.49 T:isapxv20 141.82 141.90 142.00 T:elephant200v2 4871.03 4872.74 4884.62 T:elephant176v2 5737.13 5760.16 5763.86 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.67 4.71 4.76 T:aes128gcmv1 5.13 5.20 5.26 aes256gcmv1 9.57 9.68 9.91 ascon128av12 12.25 12.31 12.46 ascon128v12 12.34 12.40 12.65 ascon80pqv12 17.22 17.28 17.48 ascon128abi32v12 21.29 21.42 21.64 T:xoodyakround3 23.64 23.80 23.97 ascon128bi32v12 26.35 26.54 26.66 T:schwaemm256128v2 29.14 29.59 30.09 T:schwaemm128128v2 34.10 34.25 34.50 T:schwaemm192192v2 36.24 36.71 37.02 T:schwaemm256256v2 46.20 46.48 47.09 T:grain128aeadv2 47.53 47.62 47.74 T:giftcofb128v1 48.63 48.76 48.90 T:tinyjambu128v2 50.38 50.49 50.62 romulusn 54.46 54.59 54.77 T:tinyjambu192v2 55.58 55.80 56.05 T:tinyjambu256v2 66.93 67.02 67.16 romulusm 85.11 85.31 85.71 T:isapa128av20 147.52 147.61 147.85 romulust 200.52 200.73 200.94 T:elephant200v2 229.18 230.55 231.40 T:isapk128av20 333.78 333.92 334.13 T:isapa128v20 1230.79 1233.90 1235.29 T:isapk128v20 1958.46 1961.40 1964.46 T:isapxv20 6040.70 6044.40 6056.62 T:elephant176v2 7686.62 7705.37 7719.74 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.52 4.57 4.64 T:aes128gcmv1 5.03 5.13 5.23 aes256gcmv1 9.71 9.79 10.01 ascon128av12 12.25 12.30 12.52 ascon128v12 12.33 12.44 12.61 ascon80pqv12 17.23 17.29 17.50 ascon128abi32v12 21.33 21.45 21.76 T:xoodyakround3 23.64 23.76 23.93 ascon128bi32v12 26.35 26.53 26.67 T:schwaemm256128v2 29.18 29.39 30.03 T:schwaemm128128v2 34.02 34.12 34.27 T:schwaemm192192v2 36.22 36.64 36.88 T:schwaemm256256v2 46.78 47.09 47.68 T:grain128aeadv2 48.02 48.12 48.21 T:giftcofb128v1 48.79 48.91 49.07 T:tinyjambu128v2 50.49 50.62 50.72 romulusn 54.65 54.78 54.96 T:tinyjambu192v2 55.22 55.37 55.60 T:tinyjambu256v2 69.96 70.10 70.28 romulusm 85.15 85.40 85.57 T:isapa128av20 147.44 147.75 147.94 romulust 200.45 200.60 200.78 T:elephant200v2 228.39 230.26 231.46 T:isapk128av20 333.69 333.83 334.26 T:isapa128v20 1229.54 1234.27 1235.74 T:isapk128v20 1959.75 1965.26 1970.10 T:isapxv20 6041.14 6045.55 6058.27 T:elephant176v2 7685.74 7704.73 7719.58 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.54 4.56 4.60 T:aes128gcmv1 4.97 5.05 5.15 aes256gcmv1 9.67 9.73 9.92 ascon128av12 12.21 12.27 12.38 ascon128v12 12.33 12.39 12.51 ascon80pqv12 17.20 17.26 17.40 ascon128abi32v12 21.40 21.51 22.01 T:xoodyakround3 23.59 23.67 23.93 ascon128bi32v12 26.34 26.51 26.60 T:schwaemm256128v2 29.17 29.42 29.91 T:schwaemm128128v2 34.04 34.17 34.26 T:schwaemm192192v2 36.12 36.66 36.93 T:schwaemm256256v2 46.70 47.12 47.42 T:grain128aeadv2 47.97 48.10 48.18 T:giftcofb128v1 48.78 48.86 48.97 T:tinyjambu128v2 50.50 50.61 50.75 romulusn 54.60 54.66 54.78 T:tinyjambu192v2 54.74 54.88 55.06 T:isapa128av20 55.26 55.37 55.59 T:tinyjambu256v2 69.79 70.01 70.28 romulusm 92.75 92.91 93.17 romulust 155.76 156.17 156.84 T:isapk128av20 173.85 173.98 174.27 T:isapa128v20 200.46 200.56 200.72 T:elephant200v2 666.97 668.60 670.74 T:isapk128v20 1025.26 1026.29 1027.54 T:isapxv20 6039.61 6044.29 6056.38 T:elephant176v2 7680.72 7702.38 7719.78 T:elephant160v2