VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20260330

[Page version: 20260624 14:36:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.40 1.40 1.41 T:aes128gcmv1 1.64 1.65 1.66 aes256gcmv1 7.42 7.44 7.46 ascon128av12 10.80 10.92 11.08 ascon128v12 10.95 11.01 11.12 ascon80pqv12 13.77 13.92 14.12 ascon128abi32v12 16.26 16.31 16.40 T:xoodyakround3 17.77 17.86 18.05 T:schwaemm256128v2 20.95 21.12 21.15 ascon128bi32v12 22.79 22.84 22.87 T:schwaemm256256v2 23.45 23.77 24.65 T:schwaemm192192v2 24.75 24.83 24.86 T:grain128aeadv2 25.68 25.76 25.83 T:schwaemm128128v2 38.49 38.51 38.54 romulusn 40.34 40.47 40.56 T:isapa128av20 41.38 41.45 41.51 T:giftcofb128v1 41.85 41.96 42.05 T:isapa128v20 60.39 60.63 61.03 T:tinyjambu128v2 61.97 62.04 62.31 romulusm 69.46 69.67 69.85 T:isapk128av20 76.56 76.57 76.58 T:tinyjambu192v2 80.08 80.14 80.20 T:tinyjambu256v2 92.17 92.43 92.82 T:isapk128v20 125.09 125.15 125.22 romulust 176.86 177.07 177.20 T:elephant200v2 195.86 195.96 196.05 T:isapxv20 7787.10 7787.77 7788.30 T:elephant176v2 8150.01 8150.37 8150.85 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.44 1.45 1.45 T:aes128gcmv1 1.57 1.58 1.58 aes256gcmv1 7.32 7.42 7.47 ascon128av12 10.93 10.95 11.00 ascon80pqv12 10.94 10.99 11.02 ascon128v12 13.81 13.85 13.89 ascon128abi32v12 15.48 15.67 15.96 T:xoodyakround3 17.73 17.82 18.01 T:schwaemm256128v2 20.75 21.02 21.17 ascon128bi32v12 22.80 22.84 22.87 T:schwaemm256256v2 23.39 23.51 23.74 T:schwaemm192192v2 25.35 25.38 25.48 T:grain128aeadv2 25.71 25.77 25.85 T:schwaemm128128v2 38.47 38.49 38.52 romulusn 40.31 40.50 40.60 T:isapa128av20 41.44 41.50 41.56 T:giftcofb128v1 41.90 42.00 42.09 T:isapa128v20 60.66 60.97 61.10 T:tinyjambu128v2 61.98 62.03 62.28 romulusm 69.53 69.69 69.89 T:isapk128av20 76.54 76.55 76.57 T:tinyjambu192v2 80.14 80.22 80.27 T:tinyjambu256v2 92.26 92.67 93.14 T:isapk128v20 125.09 125.14 125.24 romulust 176.91 177.04 177.22 T:elephant200v2 195.90 195.99 196.09 T:isapxv20 7787.09 7787.76 7788.27 T:elephant176v2 8150.36 8150.73 8151.27 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.44 1.45 1.45 T:aes128gcmv1 1.57 1.58 1.58 aes256gcmv1 7.32 7.45 7.48 ascon128av12 10.90 10.95 10.99 ascon80pqv12 10.94 10.98 11.01 ascon128v12 13.83 13.87 13.90 ascon128abi32v12 15.51 15.65 15.90 T:xoodyakround3 17.74 17.84 18.01 T:schwaemm256128v2 20.50 20.55 20.63 T:isapa128v20 20.73 20.76 21.08 ascon128bi32v12 22.80 22.84 22.87 T:schwaemm256256v2 23.38 23.52 23.72 T:schwaemm192192v2 25.35 25.38 25.48 T:grain128aeadv2 25.69 25.79 25.87 T:schwaemm128128v2 27.25 27.30 27.35 T:isapa128av20 38.48 38.50 38.52 romulusn 41.43 41.50 41.56 T:giftcofb128v1 42.76 42.81 42.86 romulust 46.22 46.35 46.48 T:isapk128av20 57.67 57.92 58.13 T:isapk128v20 60.65 60.96 61.08 T:tinyjambu128v2 61.95 62.02 62.28 romulusm 76.55 76.56 76.58 T:tinyjambu192v2 80.18 80.23 80.28 T:tinyjambu256v2 112.86 112.93 112.99 T:isapxv20 176.69 177.00 177.13 T:elephant200v2 7786.98 7787.72 7788.32 T:elephant176v2 8150.26 8150.81 8151.54 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.89 0.90 0.90 T:aes128gcmv1 1.01 1.02 1.03 aes256gcmv1 7.43 7.45 7.47 ascon128av12 10.83 10.87 10.89 ascon128v12 10.94 10.96 10.98 ascon80pqv12 12.29 12.32 12.36 T:xoodyakround3 13.79 13.81 13.83 ascon128abi32v12 17.64 17.71 17.89 T:schwaemm256128v2 20.56 20.72 20.83 ascon128bi32v12 22.69 22.73 22.75 T:schwaemm256256v2 23.30 23.54 23.83 T:schwaemm192192v2 24.79 24.86 24.88 T:grain128aeadv2 25.65 25.69 25.74 T:schwaemm128128v2 31.03 31.05 31.06 romulusn 31.01 31.06 31.14 T:isapa128v20 33.83 33.88 33.93 T:isapa128av20 41.35 41.41 41.44 T:giftcofb128v1 42.80 42.86 43.04 romulusm 49.40 49.48 49.63 T:tinyjambu128v2 57.91 58.02 58.14 T:isapk128av20 59.60 59.61 59.62 T:tinyjambu192v2 60.60 60.65 60.70 T:tinyjambu256v2 75.32 75.49 75.68 T:isapk128v20 83.75 83.78 83.83 romulust 132.75 132.94 133.02 T:elephant200v2 154.97 155.01 155.07 T:isapxv20 5815.89 5816.16 5816.60 T:elephant176v2 6110.92 6111.26 6111.85 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.92 0.92 0.92 T:aes128gcmv1 0.98 0.99 0.99 aes256gcmv1 7.23 7.26 7.29 ascon128av12 10.88 10.91 10.92 ascon80pqv12 10.91 10.96 10.98 ascon128v12 11.87 11.95 12.11 T:xoodyakround3 13.82 13.84 13.86 ascon128abi32v12 17.63 17.71 17.89 T:schwaemm256128v2 20.71 20.83 20.87 ascon128bi32v12 22.70 22.73 22.75 T:schwaemm256256v2 23.19 23.27 23.53 T:schwaemm192192v2 25.13 25.17 25.22 T:grain128aeadv2 25.64 25.68 25.73 T:schwaemm128128v2 31.02 31.04 31.06 romulusn 31.00 31.06 31.10 T:isapa128v20 33.83 33.90 33.94 T:isapa128av20 41.40 41.46 41.50 T:giftcofb128v1 42.80 42.85 43.01 romulusm 49.59 49.79 49.84 T:tinyjambu128v2 57.97 58.08 58.17 T:isapk128av20 59.57 59.60 59.64 T:tinyjambu192v2 60.64 60.68 60.73 T:tinyjambu256v2 75.27 75.47 75.72 T:isapk128v20 83.73 83.78 83.83 romulust 132.74 132.91 133.02 T:elephant200v2 154.96 155.01 155.08 T:isapxv20 5815.83 5816.16 5816.60 T:elephant176v2 6110.90 6111.25 6111.56 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.92 0.92 0.92 T:aes128gcmv1 0.98 0.99 0.99 aes256gcmv1 7.24 7.27 7.47 ascon128av12 10.88 10.90 10.93 ascon80pqv12 10.91 10.95 10.98 ascon128v12 11.93 11.97 12.14 T:xoodyakround3 13.83 13.84 13.86 ascon128abi32v12 17.63 17.68 17.88 T:schwaemm256128v2 20.34 20.37 20.43 T:isapa128v20 20.73 20.86 20.89 ascon128bi32v12 22.69 22.72 22.75 T:schwaemm256256v2 23.19 23.29 23.53 T:schwaemm192192v2 25.11 25.17 25.23 T:grain128aeadv2 25.64 25.70 25.76 T:schwaemm128128v2 27.21 27.24 27.28 T:isapa128av20 31.03 31.04 31.06 romulusn 41.40 41.45 41.50 T:giftcofb128v1 42.60 42.63 42.66 romulust 42.80 42.85 43.04 romulusm 46.29 46.37 46.47 T:isapk128av20 49.62 49.77 49.83 T:tinyjambu128v2 57.97 58.17 58.35 T:isapk128v20 59.55 59.59 59.62 T:tinyjambu192v2 60.64 60.68 60.73 T:tinyjambu256v2 113.48 113.52 113.56 T:isapxv20 132.75 132.94 133.01 T:elephant200v2 5815.82 5816.17 5816.59 T:elephant176v2 6110.78 6111.07 6111.32 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.39 0.39 0.40 T:aes128gcmv1 0.39 0.40 0.40 aes256gcmv1 7.42 7.44 7.46 ascon128av12 8.26 8.32 8.36 T:xoodyakround3 10.85 10.89 10.93 ascon128v12 10.91 10.95 10.98 ascon80pqv12 13.80 13.82 13.83 ascon128abi32v12 17.51 17.59 17.76 T:schwaemm256128v2 20.02 20.09 20.16 T:isapa128v20 20.46 20.51 20.82 ascon128bi32v12 22.57 22.61 22.64 T:schwaemm256256v2 22.96 23.08 23.28 T:schwaemm192192v2 23.54 23.57 23.59 romulusn 23.57 23.61 23.73 romulusm 24.78 24.85 24.91 T:grain128aeadv2 25.47 25.55 25.64 T:schwaemm128128v2 27.26 27.29 27.34 T:isapa128av20 38.49 38.55 38.61 T:tinyjambu128v2 41.11 41.17 41.21 T:tinyjambu256v2 41.32 41.38 41.43 T:giftcofb128v1 42.34 42.39 42.43 romulust 42.64 42.65 42.66 T:tinyjambu192v2 46.13 46.30 46.42 T:isapk128av20 57.96 58.19 58.51 T:isapk128v20 89.68 90.48 90.59 T:elephant200v2 114.09 114.16 114.21 T:isapxv20 3845.77 3846.10 3846.95 T:elephant176v2 4073.84 4074.34 4074.65 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.39 0.40 0.41 aes256gcmv1 0.39 0.40 0.40 T:aes128gcmv1 7.03 7.08 7.44 ascon128av12 8.30 8.33 8.36 T:xoodyakround3 10.81 10.84 10.88 ascon80pqv12 10.84 10.92 10.95 ascon128v12 13.79 13.82 13.85 ascon128abi32v12 17.49 17.60 17.77 T:schwaemm256128v2 20.05 20.13 20.19 T:isapa128v20 20.58 20.85 20.98 ascon128bi32v12 22.57 22.61 22.64 T:schwaemm256256v2 22.94 23.08 23.28 T:schwaemm192192v2 23.53 23.56 23.59 romulusn 23.54 23.59 23.72 romulusm 24.85 24.94 24.96 T:grain128aeadv2 25.48 25.56 25.65 T:schwaemm128128v2 27.26 27.31 27.37 T:isapa128av20 38.46 38.53 38.59 T:tinyjambu128v2 41.10 41.14 41.20 T:tinyjambu256v2 41.29 41.34 41.41 T:giftcofb128v1 42.36 42.40 42.46 romulust 42.63 42.66 42.72 T:tinyjambu192v2 46.11 46.26 46.38 T:isapk128av20 57.97 58.28 58.52 T:isapk128v20 89.65 90.48 90.59 T:elephant200v2 114.10 114.16 114.22 T:isapxv20 3845.78 3846.20 3847.01 T:elephant176v2 4073.64 4074.21 4074.66 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.39 0.40 0.40 T:aes128gcmv1 0.39 0.40 0.41 aes256gcmv1 7.03 7.07 7.43 ascon128av12 8.26 8.31 8.36 T:xoodyakround3 10.81 10.84 10.87 ascon80pqv12 10.84 10.90 10.93 ascon128v12 13.79 13.81 13.83 ascon128abi32v12 17.50 17.61 17.76 T:schwaemm256128v2 20.05 20.11 20.20 T:isapa128v20 20.58 20.86 20.98 ascon128bi32v12 22.57 22.61 22.64 T:schwaemm256256v2 22.95 23.09 23.28 T:schwaemm192192v2 23.53 23.56 23.59 romulusn 23.54 23.57 23.71 romulusm 24.84 24.93 24.96 T:grain128aeadv2 25.47 25.56 25.66 T:schwaemm128128v2 27.28 27.33 27.38 T:isapa128av20 38.47 38.56 38.62 T:tinyjambu128v2 41.10 41.15 41.20 T:tinyjambu256v2 41.30 41.36 41.42 T:giftcofb128v1 42.36 42.42 42.46 romulust 42.61 42.64 42.70 T:tinyjambu192v2 46.13 46.28 46.43 T:isapk128av20 58.00 58.22 58.49 T:isapk128v20 89.69 90.52 90.59 T:elephant200v2 114.12 114.19 114.25 T:isapxv20 3845.77 3846.06 3846.93 T:elephant176v2 4073.36 4073.83 4074.49 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.05 1.06 1.06 T:aes128gcmv1 1.19 1.20 1.21 aes256gcmv1 7.61 7.62 7.64 ascon128av12 11.02 11.04 11.06 ascon128v12 11.12 11.13 11.15 ascon80pqv12 12.45 12.46 12.48 T:xoodyakround3 14.12 14.13 14.14 ascon128abi32v12 18.23 18.29 18.47 T:schwaemm256128v2 20.87 20.99 21.12 ascon128bi32v12 23.33 23.36 23.39 T:schwaemm256256v2 23.82 24.09 24.31 T:schwaemm192192v2 25.21 25.28 25.30 T:grain128aeadv2 26.00 26.03 26.08 T:schwaemm128128v2 31.34 31.36 31.37 romulusn 36.28 36.34 36.40 T:isapa128av20 41.76 41.81 41.85 T:giftcofb128v1 43.15 43.18 43.37 romulusm 45.73 45.77 45.82 T:isapa128v20 49.81 49.89 50.06 T:tinyjambu128v2 60.04 60.04 60.05 T:tinyjambu192v2 61.10 61.12 61.16 T:tinyjambu256v2 65.05 65.11 65.18 T:isapk128av20 85.03 85.08 85.13 romulust 130.88 131.00 131.14 T:isapk128v20 135.64 135.79 135.84 T:elephant200v2 250.32 250.35 250.39 T:isapxv20 5860.07 5860.32 5860.50 T:elephant176v2 6180.23 6180.49 6180.76 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.07 1.08 1.08 T:aes128gcmv1 1.16 1.16 1.17 aes256gcmv1 7.44 7.45 7.53 ascon128av12 11.06 11.07 11.11 ascon80pqv12 11.10 11.12 11.15 ascon128v12 12.09 12.21 12.28 T:xoodyakround3 14.13 14.15 14.18 ascon128abi32v12 18.20 18.26 18.42 T:schwaemm256128v2 21.07 21.16 21.20 ascon128bi32v12 23.35 23.36 23.38 T:schwaemm256256v2 23.77 23.86 24.06 T:schwaemm192192v2 25.52 25.58 25.63 T:grain128aeadv2 25.99 26.03 26.08 T:schwaemm128128v2 31.35 31.37 31.38 romulusn 36.30 36.35 36.38 T:isapa128av20 41.81 41.86 41.90 T:giftcofb128v1 43.23 43.27 43.45 romulusm 45.75 45.79 45.85 T:isapa128v20 49.99 50.16 50.22 T:tinyjambu128v2 59.99 60.03 60.06 T:tinyjambu192v2 61.03 61.11 61.18 T:tinyjambu256v2 64.97 65.03 65.13 T:isapk128av20 85.04 85.07 85.10 romulust 130.81 130.98 131.18 T:isapk128v20 135.62 135.78 135.83 T:elephant200v2 250.29 250.32 250.36 T:isapxv20 5860.13 5860.43 5860.58 T:elephant176v2 6180.35 6180.66 6180.89 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.07 1.08 1.08 T:aes128gcmv1 1.16 1.16 1.17 aes256gcmv1 7.44 7.45 7.62 ascon128av12 11.05 11.07 11.10 ascon80pqv12 11.09 11.13 11.15 ascon128v12 12.21 12.29 12.33 T:xoodyakround3 14.13 14.15 14.17 ascon128abi32v12 18.19 18.25 18.41 T:schwaemm256128v2 21.06 21.14 21.17 ascon128bi32v12 23.34 23.36 23.38 T:schwaemm256256v2 23.79 23.85 24.02 T:schwaemm192192v2 25.52 25.58 25.62 T:grain128aeadv2 26.02 26.06 26.09 T:schwaemm128128v2 27.94 27.96 28.00 T:isapa128v20 28.65 28.68 28.72 T:isapa128av20 31.36 31.37 31.38 romulusn 41.82 41.86 41.90 T:giftcofb128v1 43.23 43.27 43.43 romulusm 43.81 43.84 43.87 romulust 50.00 50.15 50.19 T:tinyjambu128v2 50.35 50.41 50.49 T:isapk128av20 60.00 60.04 60.06 T:tinyjambu192v2 61.12 61.15 61.20 T:tinyjambu256v2 86.43 86.49 86.67 T:isapk128v20 135.61 135.75 135.83 T:elephant200v2 162.26 162.29 162.32 T:isapxv20 5860.08 5860.34 5860.52 T:elephant176v2 6180.25 6180.38 6180.65 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.56 6.59 6.63 T:aes128gcmv1 7.36 7.42 7.45 aes256gcmv1 11.45 11.52 11.83 ascon128av12 14.73 14.83 15.13 ascon128v12 14.87 15.01 15.23 ascon80pqv12 17.86 18.15 18.45 T:xoodyakround3 21.15 21.22 21.53 ascon128abi32v12 27.65 27.76 28.05 ascon128bi32v12 29.83 30.10 30.46 T:schwaemm256128v2 33.26 33.61 33.93 T:schwaemm128128v2 34.76 34.82 34.99 T:grain128aeadv2 37.35 37.66 38.46 T:schwaemm256256v2 38.59 38.67 38.86 romulusn 38.51 38.82 39.19 T:schwaemm192192v2 50.61 50.78 51.08 T:giftcofb128v1 51.10 51.25 51.46 romulusm 58.61 58.80 59.02 T:tinyjambu128v2 70.06 70.08 70.12 T:tinyjambu192v2 71.65 71.75 71.93 T:tinyjambu256v2 92.55 93.50 93.77 T:isapa128av20 114.41 114.63 115.00 romulust 192.49 193.24 194.35 T:elephant200v2 209.96 210.67 211.70 T:isapk128av20 382.25 382.76 383.50 T:isapa128v20 1384.94 1386.60 1388.70 T:isapk128v20 2414.54 2414.94 2415.45 T:isapxv20 7298.21 7298.83 7299.81 T:elephant176v2 8278.01 8279.19 8281.30 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.29 6.32 6.36 T:aes128gcmv1 7.02 7.06 7.11 aes256gcmv1 11.49 11.61 11.90 ascon128av12 14.90 14.98 15.18 ascon80pqv12 14.90 15.00 15.31 ascon128v12 17.90 18.04 18.31 T:xoodyakround3 21.24 21.32 21.56 ascon128abi32v12 27.87 28.03 28.28 ascon128bi32v12 29.62 30.00 30.39 T:schwaemm256128v2 33.20 33.51 33.92 T:schwaemm128128v2 34.96 35.04 35.16 T:grain128aeadv2 37.34 37.59 38.14 T:schwaemm256256v2 38.78 38.88 39.00 romulusn 38.56 38.94 39.26 T:schwaemm192192v2 50.93 51.12 51.37 T:giftcofb128v1 53.14 53.26 53.50 romulusm 58.89 59.01 59.22 T:tinyjambu128v2 70.13 70.15 70.17 T:tinyjambu192v2 71.54 71.65 71.79 T:tinyjambu256v2 93.13 93.30 93.43 T:isapa128av20 114.34 114.58 115.02 romulust 192.68 193.29 194.13 T:elephant200v2 210.04 210.78 211.86 T:isapk128av20 382.58 383.03 383.65 T:isapa128v20 1384.67 1386.33 1389.03 T:isapk128v20 2414.45 2414.89 2415.46 T:isapxv20 7298.04 7298.78 7299.91 T:elephant176v2 8278.38 8279.28 8281.10 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.28 6.31 6.34 T:aes128gcmv1 7.02 7.04 7.08 aes256gcmv1 11.49 11.58 11.81 ascon128av12 14.89 14.94 15.16 ascon80pqv12 14.89 15.00 15.13 ascon128v12 18.01 18.16 18.37 T:xoodyakround3 21.21 21.32 21.46 ascon128abi32v12 27.93 28.04 28.21 ascon128bi32v12 29.64 29.91 30.29 T:schwaemm256128v2 33.33 33.57 33.77 T:schwaemm128128v2 34.94 35.03 35.12 T:grain128aeadv2 37.34 37.47 38.17 T:schwaemm256256v2 38.59 38.86 39.10 T:schwaemm192192v2 38.77 38.88 38.99 romulusn 50.96 51.10 51.24 T:giftcofb128v1 53.12 53.26 53.38 romulusm 58.90 59.10 59.22 T:tinyjambu128v2 60.18 60.38 60.61 T:isapa128av20 70.11 70.14 70.16 T:tinyjambu192v2 71.54 71.69 71.84 T:tinyjambu256v2 71.57 71.74 72.02 romulust 131.63 132.31 133.14 T:isapk128av20 192.63 193.03 193.70 T:elephant200v2 201.58 201.82 202.14 T:isapa128v20 725.45 726.65 728.27 T:isapk128v20 1262.51 1262.82 1263.23 T:isapxv20 7297.90 7298.48 7299.70 T:elephant176v2 8278.64 8279.88 8281.58 T:elephant160v2