VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20260217

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.40 1.40 1.41 T:aes128gcmv1 1.66 1.66 1.67 aes256gcmv1 7.41 7.43 7.45 ascon128av12 10.78 10.88 11.03 ascon128v12 10.92 11.01 11.07 ascon80pqv12 13.87 13.94 14.06 ascon128abi32v12 15.49 15.50 15.52 T:xoodyakround3 17.98 18.04 18.13 T:schwaemm256128v2 20.99 21.29 21.32 ascon128bi32v12 22.50 22.54 22.74 T:schwaemm256256v2 23.68 23.88 25.09 T:schwaemm192192v2 24.80 24.82 24.90 T:grain128aeadv2 25.99 26.07 26.25 T:schwaemm128128v2 38.54 38.56 38.59 romulusn 40.37 40.54 40.62 T:isapa128av20 41.35 41.39 41.44 T:giftcofb128v1 41.58 41.65 41.73 T:isapa128v20 60.21 60.27 60.33 T:tinyjambu128v2 62.30 62.33 62.37 romulusm 69.49 69.71 69.88 T:isapk128av20 76.57 76.58 76.59 T:tinyjambu192v2 80.11 80.21 80.28 T:tinyjambu256v2 92.23 92.51 92.79 T:isapk128v20 125.63 125.71 125.81 romulust 176.59 176.67 176.80 T:elephant200v2 162.82? 186.14? 207.97? T:isapxv20 7526.94 7529.52 7531.74 T:elephant176v2 8181.66 8183.82 8187.14 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.44 1.45 1.46 T:aes128gcmv1 1.57 1.58 1.59 aes256gcmv1 7.33 7.45 7.48 ascon128av12 10.88 10.91 10.94 ascon80pqv12 10.92 10.96 10.98 ascon128v12 13.88 13.96 14.00 ascon128abi32v12 15.89 15.92 15.95 T:xoodyakround3 17.99 18.05 18.12 T:schwaemm256128v2 20.94 20.99 21.26 ascon128bi32v12 22.50 22.53 22.76 T:schwaemm256256v2 23.53 23.71 23.82 T:schwaemm192192v2 25.40 25.51 25.54 T:grain128aeadv2 26.03 26.11 26.22 T:schwaemm128128v2 38.53 38.55 38.58 romulusn 40.30 40.42 40.58 T:isapa128av20 41.41 41.45 41.49 T:giftcofb128v1 41.59 41.66 41.78 T:isapa128v20 60.41 60.50 60.57 T:tinyjambu128v2 62.04 62.27 62.31 romulusm 69.60 69.78 69.94 T:isapk128av20 76.55 76.56 76.59 T:tinyjambu192v2 80.21 80.28 80.35 T:tinyjambu256v2 92.53 92.80 93.09 T:isapk128v20 125.63 125.71 125.81 romulust 176.60 176.68 176.76 T:elephant200v2 184.44 184.61 186.36 T:isapxv20 7525.28 7527.54 7530.49 T:elephant176v2 8181.13 8184.95 8187.66 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.44 1.45 1.45 T:aes128gcmv1 1.57 1.58 1.58 aes256gcmv1 7.37 7.45 7.47 ascon128av12 10.87 10.90 10.94 ascon80pqv12 10.94 10.96 10.99 ascon128v12 13.88 13.97 14.01 ascon128abi32v12 15.92 15.95 15.97 T:xoodyakround3 17.98 18.03 18.09 T:schwaemm256128v2 20.41 20.45 20.51 T:isapa128v20 20.93 20.96 21.07 ascon128bi32v12 22.50 22.55 22.75 T:schwaemm256256v2 23.50 23.73 23.83 T:schwaemm192192v2 25.41 25.52 25.55 T:grain128aeadv2 26.03 26.13 26.23 T:schwaemm128128v2 27.35 27.41 27.45 T:isapa128av20 38.53 38.56 38.60 romulusn 41.40 41.44 41.47 T:giftcofb128v1 43.00 43.05 43.09 romulust 46.19 46.32 46.43 T:isapk128av20 57.62 57.90 58.21 T:isapk128v20 60.44 60.54 60.63 T:tinyjambu128v2 62.03 62.29 62.33 romulusm 76.55 76.56 76.58 T:tinyjambu192v2 80.21 80.30 80.37 T:tinyjambu256v2 110.90 110.96 111.03 T:isapxv20 176.57 176.70 176.83 T:elephant200v2 7526.08 7528.41 7531.82 T:elephant176v2 8180.88 8183.65 8186.49 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.90 0.90 0.91 T:aes128gcmv1 1.03 1.03 1.04 aes256gcmv1 7.42 7.44 7.46 ascon128av12 10.81 10.83 10.85 ascon128v12 10.89 10.92 10.94 ascon80pqv12 11.84 11.86 11.88 T:xoodyakround3 13.93 13.95 14.01 ascon128abi32v12 17.89 17.93 17.99 T:schwaemm256128v2 20.78 20.84 21.03 ascon128bi32v12 22.40 22.43 22.62 T:schwaemm256256v2 23.29 23.58 24.05 T:schwaemm192192v2 24.76 24.80 24.91 T:grain128aeadv2 25.92 25.99 26.11 T:schwaemm128128v2 30.85 30.88 30.94 T:isapa128v20 31.12 31.17 31.50 romulusn 33.88 33.97 34.01 T:isapa128av20 41.33 41.36 41.40 T:giftcofb128v1 43.03 43.05 43.08 romulusm 49.33 49.37 49.40 T:tinyjambu128v2 57.96 58.07 58.21 T:isapk128av20 59.61 59.62 59.63 T:tinyjambu192v2 60.64 60.69 60.72 T:tinyjambu256v2 75.34 75.51 75.76 T:isapk128v20 84.07 84.13 84.17 romulust 132.67 132.74 132.80 T:elephant200v2 136.86? 149.35? 159.25? T:isapxv20 5621.06 5622.59 5623.75 T:elephant176v2 6134.75 6137.92 6139.39 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.93 0.93 0.93 T:aes128gcmv1 0.99 0.99 1.00 aes256gcmv1 7.24 7.26 7.31 ascon128av12 10.82 10.84 10.87 ascon80pqv12 10.88 10.90 10.92 ascon128v12 12.05 12.07 12.09 T:xoodyakround3 13.94 13.95 13.97 ascon128abi32v12 17.87 17.92 17.96 T:schwaemm256128v2 21.04 21.07 21.11 ascon128bi32v12 22.40 22.42 22.65 T:schwaemm256256v2 23.28 23.51 23.59 T:schwaemm192192v2 25.16 25.23 25.25 T:grain128aeadv2 25.92 25.99 26.13 T:schwaemm128128v2 30.84 30.88 30.94 T:isapa128v20 31.13 31.17 31.38 romulusn 33.88 33.95 34.00 T:isapa128av20 41.34 41.38 41.42 T:giftcofb128v1 43.03 43.06 43.09 romulusm 49.46 49.50 49.53 T:tinyjambu128v2 57.98 58.07 58.17 T:isapk128av20 59.57 59.60 59.63 T:tinyjambu192v2 60.67 60.73 60.76 T:tinyjambu256v2 75.30 75.55 75.80 T:isapk128v20 84.07 84.13 84.18 romulust 132.68 132.74 132.79 T:elephant200v2 147.36 147.40 147.50 T:isapxv20 5620.97 5622.29 5624.37 T:elephant176v2 6133.56 6136.79 6138.07 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.93 0.93 0.93 T:aes128gcmv1 0.99 0.99 1.00 aes256gcmv1 7.24 7.26 7.30 ascon128av12 10.83 10.85 10.87 ascon80pqv12 10.88 10.90 10.92 ascon128v12 12.07 12.09 12.10 T:xoodyakround3 13.93 13.95 13.97 ascon128abi32v12 17.85 17.89 17.94 T:schwaemm256128v2 20.26 20.29 20.32 T:isapa128v20 21.05 21.07 21.10 ascon128bi32v12 22.40 22.43 22.64 T:schwaemm256256v2 23.27 23.51 23.58 T:schwaemm192192v2 25.17 25.22 25.25 T:grain128aeadv2 25.90 25.98 26.13 T:schwaemm128128v2 27.30 27.34 27.37 T:isapa128av20 31.13 31.19 31.39 romulusn 41.35 41.39 41.42 T:giftcofb128v1 42.77 42.80 42.84 romulust 43.03 43.06 43.09 romulusm 46.33 46.41 46.50 T:isapk128av20 49.45 49.48 49.52 T:tinyjambu128v2 57.97 58.11 58.29 T:isapk128v20 59.57 59.60 59.64 T:tinyjambu192v2 60.70 60.74 60.76 T:tinyjambu256v2 110.60 110.64 110.67 T:isapxv20 132.66 132.73 132.80 T:elephant200v2 5620.68 5621.95 5623.50 T:elephant176v2 6133.65 6137.63 6139.71 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.40 0.40 0.41 T:aes128gcmv1 0.40 0.40 0.41 aes256gcmv1 7.40 7.42 7.45 ascon128av12 8.26 8.28 8.31 T:xoodyakround3 10.83 10.88 10.91 ascon128v12 10.88 10.91 10.94 ascon80pqv12 13.90 13.93 13.95 ascon128abi32v12 17.76 17.82 17.87 T:schwaemm256128v2 20.03 20.07 20.14 T:isapa128v20 20.71 20.73 20.85 ascon128bi32v12 22.28 22.31 22.52 T:schwaemm256256v2 23.21 23.30 23.38 T:schwaemm192192v2 23.68 23.74 24.46 romulusn 23.73 23.76 23.80 romulusm 24.79 24.82 24.90 T:grain128aeadv2 25.78 25.85 25.93 T:schwaemm128128v2 27.37 27.40 27.44 T:isapa128av20 38.41 38.47 38.51 T:tinyjambu128v2 41.16 41.20 41.26 T:tinyjambu256v2 41.27 41.33 41.38 T:giftcofb128v1 42.54 42.58 42.62 romulust 42.65 42.66 42.67 T:tinyjambu192v2 46.17 46.33 46.48 T:isapk128av20 57.99 58.25 58.51 T:isapk128v20 89.51 89.57 89.61 T:elephant200v2 110.30 110.35 110.41 T:isapxv20 3717.23 3718.37 3720.21 T:elephant176v2 4089.43 4091.05 4092.95 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.40 0.41 0.41 aes256gcmv1 0.41 0.41 0.41 T:aes128gcmv1 7.01 7.05 7.56 ascon128av12 8.25 8.28 8.31 T:xoodyakround3 10.75 10.78 10.81 ascon80pqv12 10.83 10.87 10.92 ascon128v12 13.90 13.93 13.95 ascon128abi32v12 17.76 17.82 17.89 T:schwaemm256128v2 20.01 20.06 20.13 T:isapa128v20 21.13 21.16 21.19 ascon128bi32v12 22.28 22.31 22.52 T:schwaemm256256v2 23.23 23.30 23.40 T:schwaemm192192v2 23.71 23.73 23.76 romulusm 23.69 23.74 24.16 romulusn 24.88 24.91 24.93 T:grain128aeadv2 25.75 25.85 26.06 T:schwaemm128128v2 27.37 27.41 27.44 T:isapa128av20 38.44 38.48 38.52 T:tinyjambu128v2 41.15 41.19 41.23 T:tinyjambu256v2 41.28 41.32 41.36 T:giftcofb128v1 42.55 42.58 42.62 romulust 42.64 42.70 42.73 T:tinyjambu192v2 46.15 46.28 46.39 T:isapk128av20 58.03 58.30 58.55 T:isapk128v20 89.47 89.53 89.59 T:elephant200v2 110.29 110.35 110.40 T:isapxv20 3716.90 3718.21 3719.69 T:elephant176v2 4089.46 4090.86 4093.35 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.40 0.41 0.41 aes256gcmv1 0.41 0.41 0.41 T:aes128gcmv1 7.01 7.05 7.33 ascon128av12 8.26 8.29 8.31 T:xoodyakround3 10.76 10.80 10.84 ascon80pqv12 10.82 10.87 10.93 ascon128v12 13.91 13.94 13.95 ascon128abi32v12 17.74 17.80 17.89 T:schwaemm256128v2 19.98 20.05 20.11 T:isapa128v20 21.14 21.16 21.18 ascon128bi32v12 22.27 22.32 22.54 T:schwaemm256256v2 23.22 23.31 23.38 T:schwaemm192192v2 23.71 23.74 23.77 romulusm 23.68 23.75 24.16 romulusn 24.88 24.91 24.99 T:grain128aeadv2 25.77 25.86 26.04 T:schwaemm128128v2 27.37 27.41 27.46 T:isapa128av20 38.44 38.47 38.52 T:tinyjambu128v2 41.17 41.21 41.27 T:tinyjambu256v2 41.27 41.32 41.36 T:giftcofb128v1 42.53 42.56 42.62 romulust 42.61 42.65 42.72 T:tinyjambu192v2 46.17 46.30 46.41 T:isapk128av20 58.13 58.31 58.54 T:isapk128v20 89.49 89.55 89.62 T:elephant200v2 110.29 110.35 110.39 T:isapxv20 3716.46 3717.79 3719.12 T:elephant176v2 4089.84 4091.85 4093.24 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.06 1.06 1.06 T:aes128gcmv1 1.21 1.21 1.21 aes256gcmv1 7.60 7.62 7.63 ascon128av12 11.00 11.01 11.04 ascon128v12 11.07 11.09 11.11 ascon80pqv12 12.00 12.01 12.02 T:xoodyakround3 14.25 14.26 14.28 ascon128abi32v12 18.45 18.49 18.52 T:schwaemm256128v2 21.09 21.10 21.24 ascon128bi32v12 23.03 23.05 23.26 T:schwaemm256256v2 24.09 24.17 24.65 T:schwaemm192192v2 25.22 25.24 25.33 T:grain128aeadv2 26.29 26.33 26.43 T:schwaemm128128v2 31.47 31.50 31.82 romulusn 36.41 36.45 36.47 T:isapa128av20 41.73 41.76 41.78 T:giftcofb128v1 43.38 43.39 43.41 romulusm 45.54 45.56 45.62 T:isapa128v20 49.72 49.75 49.79 T:tinyjambu128v2 60.05 60.05 60.06 T:tinyjambu192v2 61.12 61.17 61.20 T:tinyjambu256v2 65.05 65.16 65.22 T:isapk128av20 85.43 85.46 85.50 romulust 130.97 131.04 131.16 T:isapk128v20 135.50 135.53 135.57 T:elephant200v2 242.80 243.61 256.46 T:isapxv20 5663.37 5664.03 5665.25 T:elephant176v2 6202.61 6204.73 6207.02 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.08 1.08 1.08 T:aes128gcmv1 1.17 1.17 1.17 aes256gcmv1 7.44 7.45 7.51 ascon128av12 11.01 11.02 11.04 ascon80pqv12 11.07 11.08 11.10 ascon128v12 12.20 12.21 12.22 T:xoodyakround3 14.25 14.27 14.28 ascon128abi32v12 18.43 18.47 18.51 T:schwaemm256128v2 21.35 21.36 21.38 ascon128bi32v12 23.03 23.05 23.25 T:schwaemm256256v2 24.06 24.09 24.13 T:schwaemm192192v2 25.59 25.64 25.65 T:grain128aeadv2 26.29 26.34 26.49 T:schwaemm128128v2 31.47 31.49 31.69 romulusn 36.39 36.43 36.47 T:isapa128av20 41.76 41.79 41.81 T:giftcofb128v1 43.44 43.46 43.49 romulusm 45.53 45.55 45.59 T:isapa128v20 49.83 49.87 49.92 T:tinyjambu128v2 60.04 60.07 60.09 T:tinyjambu192v2 61.18 61.21 61.24 T:tinyjambu256v2 65.04 65.09 65.15 T:isapk128av20 85.41 85.46 85.50 romulust 130.99 131.13 131.25 T:isapk128v20 135.51 135.54 135.58 T:elephant200v2 242.75 242.79 242.96 T:isapxv20 5663.81 5664.95 5666.16 T:elephant176v2 6202.97 6205.46 6207.38 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.08 1.08 1.08 T:aes128gcmv1 1.17 1.17 1.17 aes256gcmv1 7.43 7.45 7.57 ascon128av12 11.01 11.03 11.05 ascon80pqv12 11.07 11.08 11.10 ascon128v12 12.21 12.22 12.23 T:xoodyakround3 14.26 14.27 14.29 ascon128abi32v12 18.43 18.48 18.52 T:schwaemm256128v2 21.34 21.36 21.37 ascon128bi32v12 23.03 23.05 23.24 T:schwaemm256256v2 24.01 24.09 24.15 T:schwaemm192192v2 25.57 25.64 25.66 T:grain128aeadv2 26.31 26.36 26.48 T:schwaemm128128v2 27.86 27.88 27.92 T:isapa128v20 28.74 28.77 28.79 T:isapa128av20 31.46 31.49 31.68 romulusn 41.77 41.79 41.82 T:giftcofb128v1 43.45 43.47 43.48 romulusm 44.02 44.04 44.06 romulust 49.83 49.88 49.92 T:tinyjambu128v2 50.38 50.45 50.51 T:isapk128av20 60.03 60.06 60.08 T:tinyjambu192v2 61.17 61.20 61.24 T:tinyjambu256v2 86.53 86.67 86.78 T:isapk128v20 135.49 135.52 135.58 T:elephant200v2 159.42 159.44 159.46 T:isapxv20 5663.93 5664.84 5666.40 T:elephant176v2 6203.76 6206.22 6207.79 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.61 6.65 6.69 T:aes128gcmv1 7.36 7.41 7.45 aes256gcmv1 11.49 11.60 11.88 ascon128av12 14.77 14.87 15.12 ascon128v12 14.79 14.89 15.14 ascon80pqv12 17.51 17.60 17.76 T:xoodyakround3 21.38 21.48 21.74 ascon128abi32v12 27.85 27.95 28.21 ascon128bi32v12 30.00 30.19 30.69 T:schwaemm256128v2 33.77 34.04 34.33 T:schwaemm128128v2 34.78 34.84 34.97 T:grain128aeadv2 36.84 37.07 37.27 T:schwaemm256256v2 38.75 38.96 39.20 romulusn 38.77 39.04 39.49 T:schwaemm192192v2 50.61 50.75 51.01 T:giftcofb128v1 51.36 51.47 51.59 romulusm 58.55 58.69 58.98 T:tinyjambu128v2 70.05 70.08 70.11 T:tinyjambu192v2 71.74 71.91 72.08 T:tinyjambu256v2 93.07 93.77 93.99 T:isapa128av20 115.10 115.31 115.59 romulust 191.89 192.29 192.59 T:elephant200v2 210.20 211.07 212.44 T:isapk128av20 381.28 381.69 382.10 T:isapa128v20 1386.02 1387.48 1389.13 T:isapk128v20 2410.11? 2411.29? 2727.72? T:isapxv20 7045.52 7048.11 7053.62 T:elephant176v2 8304.26 8305.79 8311.69 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.29 6.32 6.36 T:aes128gcmv1 7.00 7.04 7.09 aes256gcmv1 11.52 11.65 11.88 ascon128av12 14.90 14.96 15.23 ascon128v12 14.88 15.00 15.23 ascon80pqv12 17.59 17.69 17.82 T:xoodyakround3 21.40 21.48 21.65 ascon128abi32v12 28.04 28.15 28.39 ascon128bi32v12 29.90 30.18 30.58 T:schwaemm256128v2 33.74 33.96 34.30 T:schwaemm128128v2 35.03 35.11 35.22 T:grain128aeadv2 36.92 37.08 37.32 T:schwaemm256256v2 38.68 39.02 39.47 T:schwaemm192192v2 38.96 39.10 39.34 romulusn 50.83 51.03 51.32 T:giftcofb128v1 53.30 53.42 53.54 romulusm 58.56 58.77 58.92 T:tinyjambu128v2 70.12 70.16 70.20 T:tinyjambu192v2 71.66 71.76 71.96 T:tinyjambu256v2 93.20 93.34 93.53 T:isapa128av20 114.96 115.14 115.43 romulust 192.05 192.29 192.67 T:elephant200v2 210.22 211.13 212.32 T:isapk128av20 381.13 381.69 382.32 T:isapa128v20 1385.13 1387.00 1389.13 T:isapk128v20 2409.77 2410.18 2410.51 T:isapxv20 7046.58 7048.68 7052.00 T:elephant176v2 8304.11 8305.68 8308.67 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.29 6.31 6.34 T:aes128gcmv1 6.97 7.01 7.04 aes256gcmv1 11.46 11.54 11.74 ascon128av12 14.90 15.01 15.17 ascon128v12 14.89 15.01 15.16 ascon80pqv12 17.66 17.74 17.88 T:xoodyakround3 21.37 21.47 21.58 ascon128abi32v12 28.12 28.22 28.45 ascon128bi32v12 29.99 30.29 30.60 T:schwaemm256128v2 33.72 33.91 34.26 T:schwaemm128128v2 35.02 35.08 35.16 T:grain128aeadv2 36.89 37.02 37.22 T:schwaemm256256v2 38.67 38.98 39.26 T:schwaemm192192v2 38.96 39.07 39.27 romulusn 50.93 51.06 51.26 T:giftcofb128v1 53.33 53.42 53.55 romulusm 58.56 58.75 58.88 T:tinyjambu128v2 60.35 60.51 60.71 T:isapa128av20 70.11 70.14 70.18 T:tinyjambu192v2 71.64 71.72 71.85 T:tinyjambu256v2 71.96 72.12 72.29 romulust 131.95 132.74 133.32 T:isapk128av20 192.08 192.30 192.68 T:elephant200v2 200.98 201.33 201.69 T:isapa128v20 725.76 726.61 727.85 T:isapk128v20 1260.65 1260.93 1261.23 T:isapxv20 7047.35 7049.62 7052.04 T:elephant176v2 8304.18 8305.86 8308.42 T:elephant160v2