VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20260217

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.56 0.59 0.60 aes256gcmv1 0.78 0.78 0.79 T:aes128gcmv1 5.31 5.31 5.32 ascon128av12 7.51 7.51 7.51 ascon80pqv12 7.75 7.75 7.76 ascon128v12 10.72 11.23 11.31 T:xoodyakround3 12.72 12.73 12.73 ascon128abi32v12 17.14 17.18 17.22 T:schwaemm256128v2 17.56 17.57 17.59 T:grain128aeadv2 18.62 18.63 18.63 ascon128bi32v12 22.34 23.48 23.70 T:schwaemm256256v2 23.46 23.51 23.57 T:schwaemm192192v2 25.50 25.50 25.51 T:isapa128av20 27.79 27.94 28.05 T:schwaemm128128v2 33.23 33.25 33.27 T:isapa128v20 37.94 37.94 37.94 T:giftcofb128v1 41.06 41.12 41.19 romulusn 41.96 42.27 42.39 T:isapk128av20 63.68 63.77 63.90 romulusm 69.62 69.72 69.90 T:isapk128v20 73.26 73.26 73.26 T:tinyjambu128v2 87.25 87.25 87.25 T:tinyjambu192v2 91.25 91.26 91.26 T:tinyjambu256v2 133.41 133.77 134.29 romulust 169.06 170.14 171.08 T:isapxv20 198.76 198.90 199.71 T:elephant200v2 5985.39 5987.04 5990.45 T:elephant176v2 6725.02 6726.08 6761.23 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.46? 0.49? 0.53? aes256gcmv1 0.79 0.80 0.80 T:aes128gcmv1 5.31 5.32 5.33 ascon128av12 7.63 7.64 7.64 ascon128v12 8.01 8.01 8.01 ascon80pqv12 10.65 10.70 10.78 T:xoodyakround3 12.51 12.51 12.51 ascon128abi32v12 17.02 17.21 17.27 T:schwaemm256128v2 17.64 17.69 17.71 T:grain128aeadv2 18.12 18.13 18.13 ascon128bi32v12 22.45 23.49 23.64 T:schwaemm256256v2 23.53 23.60 23.67 T:schwaemm192192v2 24.75 24.75 24.75 T:isapa128av20 28.02 28.11 28.22 T:schwaemm128128v2 33.23 33.26 33.29 T:isapa128v20 37.91 37.94 37.96 T:giftcofb128v1 41.11 41.13 41.16 romulusn 41.83 41.99 42.96 T:isapk128av20 63.71 63.87 63.98 romulusm 69.53 69.72 69.78 T:isapk128v20 73.51 73.51 73.51 T:tinyjambu128v2 87.25 87.25 87.25 T:tinyjambu192v2 91.50 91.51 91.51 T:tinyjambu256v2 133.51 133.70 134.29 romulust 169.15 169.88 172.14 T:isapxv20 198.69 198.76 198.85 T:elephant200v2 5985.64 5986.38 5988.36 T:elephant176v2 6727.41 6729.64 6754.71 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.47 0.49 0.52 aes256gcmv1 0.80 0.80 0.80 T:aes128gcmv1 5.31 5.31 5.32 ascon128av12 7.64 7.64 7.64 ascon128v12 8.01 8.01 8.01 ascon80pqv12 10.73 10.77 10.80 T:xoodyakround3 12.51 12.51 12.51 ascon128abi32v12 16.50 16.50 16.51 T:isapa128av20 16.62 16.62 16.63 T:isapa128v20 17.18 17.21 17.27 T:schwaemm256128v2 17.65 17.69 17.71 T:grain128aeadv2 18.12 18.13 18.13 ascon128bi32v12 22.34 23.49 23.74 T:schwaemm256256v2 23.59 23.65 23.72 T:schwaemm192192v2 27.96 28.09 28.20 T:schwaemm128128v2 28.11 28.26 29.48 T:isapk128av20 37.93 37.94 37.94 T:giftcofb128v1 40.96 41.14 41.20 romulusn 44.34 44.43 44.62 romulust 44.70 44.76 44.85 T:isapk128v20 63.63 63.72 63.82 romulusm 73.51 73.51 73.51 T:tinyjambu128v2 87.25 87.25 87.25 T:tinyjambu192v2 91.51 91.51 91.51 T:tinyjambu256v2 101.84 102.38 102.90 T:isapxv20 198.63 198.72 198.84 T:elephant200v2 5985.65 5987.01 6008.63 T:elephant176v2 6725.05 6725.84 6726.53 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.47 0.49 0.49 aes256gcmv1 0.60 0.60 0.60 T:aes128gcmv1 5.28 5.28 5.29 ascon128av12 7.50 7.50 7.50 ascon80pqv12 7.62 7.63 7.63 ascon128v12 8.41 8.46 8.48 T:xoodyakround3 12.64 12.64 12.65 ascon128abi32v12 17.13 17.16 17.20 T:schwaemm256128v2 17.50 17.52 17.54 T:grain128aeadv2 18.71 18.71 18.72 ascon128bi32v12 20.99 20.99 21.01 T:isapa128av20 22.23 23.31 23.50 T:schwaemm256256v2 23.45 23.49 23.53 T:schwaemm192192v2 25.12 25.12 25.14 T:isapa128v20 27.68 27.74 27.79 T:schwaemm128128v2 31.75 31.79 31.81 romulusn 35.02 35.96 36.68 T:isapk128av20 38.14 38.15 38.16 T:giftcofb128v1 43.09 43.11 43.17 romulusm 55.38 55.52 55.62 T:isapk128v20 59.75 59.76 59.77 T:tinyjambu128v2 68.13 68.13 68.14 T:tinyjambu192v2 68.76 68.76 68.77 T:tinyjambu256v2 88.89 89.12 89.43 romulust 136.40 136.82 137.31 T:isapxv20 149.56 149.62 149.71 T:elephant200v2 4470.17 4474.17 4481.77 T:elephant176v2 5043.63 5045.12 5046.40 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.42 0.44 0.46 aes256gcmv1 0.60 0.60 0.60 T:aes128gcmv1 5.28 5.28 5.29 ascon128av12 7.62 7.63 7.63 ascon128v12 7.81 7.81 7.82 ascon80pqv12 8.18 8.20 8.22 T:xoodyakround3 12.56 12.57 12.57 ascon128abi32v12 17.16 17.20 17.27 T:schwaemm256128v2 17.56 17.60 17.62 T:grain128aeadv2 18.19 18.19 18.19 ascon128bi32v12 20.87 20.87 20.88 T:isapa128av20 22.39 23.30 23.38 T:schwaemm256256v2 23.48 23.52 23.57 T:schwaemm192192v2 25.12 25.13 25.14 T:isapa128v20 27.74 27.81 27.89 T:schwaemm128128v2 31.68 31.83 31.85 romulusn 35.05 35.72 36.72 T:isapk128av20 38.13 38.15 38.17 T:giftcofb128v1 43.09 43.15 43.21 romulusm 55.43 55.55 55.60 T:isapk128v20 59.89 59.89 59.89 T:tinyjambu128v2 68.13 68.13 68.13 T:tinyjambu192v2 68.89 68.89 68.89 T:tinyjambu256v2 88.98 89.20 89.44 romulust 135.46 137.33 142.78 T:isapxv20 149.58 149.62 149.70 T:elephant200v2 4470.23 4472.68 4490.22 T:elephant176v2 5043.33 5047.36 5049.06 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.42 0.44 0.45 aes256gcmv1 0.60 0.60 0.60 T:aes128gcmv1 5.28 5.28 5.28 ascon128av12 7.62 7.63 7.63 ascon128v12 7.81 7.81 7.82 ascon80pqv12 8.21 8.22 8.24 T:xoodyakround3 12.56 12.57 12.57 ascon128abi32v12 16.75 16.75 16.77 T:isapa128av20 16.80 16.81 16.82 T:isapa128v20 17.12 17.15 17.18 T:schwaemm256128v2 17.56 17.61 17.64 T:grain128aeadv2 18.19 18.19 18.19 ascon128bi32v12 22.20 23.29 23.38 T:schwaemm256256v2 23.48 23.52 23.56 T:schwaemm192192v2 27.72 27.78 27.87 T:schwaemm128128v2 28.14 28.22 28.30 T:isapk128av20 31.56 31.71 31.85 romulusn 38.14 38.15 38.16 T:giftcofb128v1 43.04 43.08 43.11 T:isapk128v20 43.08 43.12 43.21 romulusm 44.31 44.39 44.44 romulust 59.89 59.89 59.89 T:tinyjambu128v2 68.13 68.13 68.13 T:tinyjambu192v2 68.89 68.89 68.89 T:tinyjambu256v2 101.94 102.28 102.49 T:isapxv20 149.56 149.62 149.71 T:elephant200v2 4470.86 4471.66 4472.45 T:elephant176v2 5042.17 5044.77 5049.37 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.38 0.39 0.40 aes256gcmv1 0.41 0.41 0.42 T:aes128gcmv1 5.25 5.25 5.26 ascon128av12 5.66 5.72 5.75 T:xoodyakround3 7.50 7.50 7.50 ascon128v12 7.50 7.50 7.50 ascon80pqv12 12.54 12.56 12.58 ascon128abi32v12 16.50 16.50 16.51 T:isapa128av20 16.99 17.00 17.02 T:isapa128v20 17.05 17.09 17.13 T:schwaemm256128v2 17.46 17.49 17.50 T:grain128aeadv2 18.77 18.79 18.81 ascon128bi32v12 22.22 22.46 22.55 romulusn 22.52 22.53 22.55 romulusm 22.05 23.12 23.25 T:schwaemm256256v2 23.43 23.48 23.55 T:schwaemm192192v2 27.40 27.51 27.61 T:schwaemm128128v2 27.94 28.08 29.01 T:isapk128av20 38.33 38.35 38.37 T:giftcofb128v1 41.25 41.33 41.38 T:isapk128v20 44.26 44.39 44.54 romulust 46.26 46.26 46.26 T:tinyjambu128v2 46.25 46.26 46.26 T:tinyjambu256v2 49.01 49.01 49.01 T:tinyjambu192v2 100.52 100.60 100.65 T:elephant200v2 100.67 102.10 105.24 T:isapxv20 2955.77 2957.42 2963.26 T:elephant176v2 3363.77 3365.54 3366.37 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.34? 0.39? 0.42? aes256gcmv1 0.39 0.40 0.41 T:aes128gcmv1 5.25 5.25 5.26 ascon128av12 5.67 5.71 5.73 T:xoodyakround3 7.62 7.63 7.63 ascon128v12 7.62 7.63 7.63 ascon80pqv12 12.62 12.62 12.63 ascon128abi32v12 16.99 17.00 17.01 T:isapa128v20 17.00 17.00 17.00 T:isapa128av20 17.05 17.10 17.15 T:schwaemm256128v2 17.47 17.52 17.54 T:grain128aeadv2 18.25 18.25 18.25 ascon128bi32v12 22.39 22.53 22.54 romulusn 22.48 22.54 22.56 romulusm 22.17 23.12 23.24 T:schwaemm256256v2 23.43 23.50 23.57 T:schwaemm192192v2 27.45 27.52 27.66 T:schwaemm128128v2 28.13 28.34 29.57 T:isapk128av20 38.33 38.35 38.39 T:giftcofb128v1 41.30 41.37 41.43 T:isapk128v20 44.31 44.36 44.41 romulust 46.26 46.26 46.26 T:tinyjambu128v2 46.26 46.26 46.26 T:tinyjambu256v2 49.01 49.01 49.01 T:tinyjambu192v2 100.53 100.57 100.64 T:elephant200v2 102.14 102.32 103.22 T:isapxv20 2956.85 2957.61 2958.36 T:elephant176v2 3362.48 3364.39 3364.94 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.34? 0.39? 0.42? aes256gcmv1 0.39 0.40 0.41 T:aes128gcmv1 5.25 5.25 5.26 ascon128av12 5.68 5.73 5.77 T:xoodyakround3 7.62 7.63 7.63 ascon128v12 7.62 7.63 7.63 ascon80pqv12 12.62 12.62 12.63 ascon128abi32v12 17.00 17.00 17.03 T:isapa128av20 16.99 17.00 17.02 T:isapa128v20 17.07 17.12 17.15 T:schwaemm256128v2 17.47 17.53 17.56 T:grain128aeadv2 18.25 18.25 18.25 ascon128bi32v12 22.31 22.42 22.54 romulusn 22.50 22.53 22.55 romulusm 22.17 23.13 23.25 T:schwaemm256256v2 23.45 23.52 23.59 T:schwaemm192192v2 27.46 27.60 27.71 T:schwaemm128128v2 28.11 28.21 28.30 T:isapk128av20 38.33 38.35 38.36 T:giftcofb128v1 41.27 41.39 41.41 T:isapk128v20 44.24 44.32 44.39 romulust 46.26 46.26 46.26 T:tinyjambu128v2 46.26 46.26 46.26 T:tinyjambu256v2 49.01 49.01 49.01 T:tinyjambu192v2 100.55 100.58 100.63 T:elephant200v2 101.81 103.83 106.20 T:isapxv20 2957.62 2958.46 2962.55 T:elephant176v2 3363.33 3365.21 3366.21 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.56 0.57 0.57 aes256gcmv1 0.69 0.69 0.69 T:aes128gcmv1 5.41 5.41 5.42 ascon128av12 7.62 7.62 7.62 ascon80pqv12 7.74 7.74 7.75 ascon128v12 8.48 8.56 8.57 T:xoodyakround3 12.94 12.94 12.94 ascon128abi32v12 17.68 17.71 17.73 T:schwaemm256128v2 17.82 17.84 17.85 T:grain128aeadv2 18.98 18.98 18.98 ascon128bi32v12 22.46 22.46 22.55 T:isapa128av20 22.86 23.90 23.92 T:schwaemm256256v2 24.03? 24.08? 32.61? T:schwaemm192192v2 28.07 28.12 28.19 T:schwaemm128128v2 32.00 32.04 32.06 romulusn 36.58 36.58 36.60 T:isapa128v20 38.46 38.46 38.47 T:giftcofb128v1 40.56 40.63 40.70 T:isapk128av20 43.39 43.44 43.51 romulusm 60.21 60.21 60.22 T:tinyjambu128v2 68.64 68.64 68.64 T:tinyjambu192v2 69.26 69.26 69.27 T:tinyjambu256v2 90.26 90.43 90.70 romulust 95.67 95.72 95.76 T:isapk128v20 152.76 152.79 152.86 T:elephant200v2 227.15 227.41 227.70 T:isapxv20 4505.98 4506.67 4509.41 T:elephant176v2 5101.58 5102.97 5105.71 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.52 0.53 0.54 aes256gcmv1 0.69 0.69 0.69 T:aes128gcmv1 5.41 5.41 5.41 ascon128av12 7.74 7.74 7.74 ascon128v12 7.93 7.93 7.94 ascon80pqv12 8.26 8.28 8.29 T:xoodyakround3 12.85 12.85 12.86 ascon128abi32v12 17.70 17.73 17.75 T:schwaemm256128v2 17.90 17.94 17.96 T:grain128aeadv2 18.46 18.46 18.46 ascon128bi32v12 22.28 22.28 22.28 T:isapa128av20 22.83 23.88 23.90 T:schwaemm256256v2 24.04? 24.10? 32.19? T:schwaemm192192v2 28.11 28.18 28.27 T:schwaemm128128v2 31.85 31.89 32.07 romulusn 36.58 36.58 36.60 T:isapa128v20 38.48 38.49 38.50 T:giftcofb128v1 39.19 39.23 40.17 T:isapk128av20 43.39 43.44 43.51 romulusm 60.34 60.34 60.34 T:tinyjambu128v2 68.64 68.64 68.64 T:tinyjambu192v2 69.38 69.39 69.39 T:tinyjambu256v2 90.26 90.36 90.50 romulust 95.66 95.74 95.81 T:isapk128v20 152.71 152.75 152.80 T:elephant200v2 227.77 229.30 230.52 T:isapxv20 4507.31 4507.78 4510.41 T:elephant176v2 5100.95 5101.59 5103.50 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.52 0.53 0.54 aes256gcmv1 0.69 0.69 0.69 T:aes128gcmv1 5.41 5.41 5.41 ascon128av12 7.74 7.74 7.74 ascon128v12 7.93 7.93 7.93 ascon80pqv12 8.26 8.28 8.30 T:xoodyakround3 12.85 12.85 12.85 ascon128abi32v12 17.55 17.55 17.55 T:isapa128av20 17.70 17.72 17.74 T:schwaemm256128v2 17.89 17.93 17.95 T:grain128aeadv2 18.46 18.46 18.46 ascon128bi32v12 22.63 22.63 22.64 T:isapa128v20 22.86 23.88 23.90 T:schwaemm256256v2 24.04? 24.08? 33.32? T:schwaemm192192v2 28.11 28.18 28.25 T:schwaemm128128v2 30.47 30.52 30.56 T:isapk128av20 31.99 32.08 32.11 romulusn 38.48 38.48 38.50 T:giftcofb128v1 43.38 43.40 43.47 romulusm 45.65 45.70 45.85 romulust 60.34 60.34 60.34 T:tinyjambu128v2 63.97 64.01 64.06 T:isapk128v20 68.64 68.64 68.64 T:tinyjambu192v2 69.39 69.39 69.39 T:tinyjambu256v2 149.01 149.16 149.92 T:isapxv20 152.93 153.39 153.46 T:elephant200v2 4505.66 4506.92 4508.80 T:elephant176v2 5101.01 5102.55 5116.07 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 3.92 3.99 4.09 aes256gcmv1 4.02 4.06 4.13 T:aes128gcmv1 8.38 8.40 8.52 ascon128av12 10.39 10.39 10.40 ascon80pqv12 10.48 10.49 10.49 ascon128v12 12.06 12.14 12.21 T:xoodyakround3 19.77 19.77 19.79 ascon128abi32v12 25.15 25.22 25.29 T:grain128aeadv2 25.24 25.24 25.24 ascon128bi32v12 30.01 30.22 30.43 T:schwaemm256128v2 36.11 36.45 36.97 T:schwaemm128128v2 36.29 37.56 38.00 T:schwaemm256256v2 37.88 38.00 38.17 romulusn 39.39 39.65 40.04 T:schwaemm192192v2 45.70 45.70 45.84 T:giftcofb128v1 49.40 49.54 49.67 romulusm 55.88 55.95 55.99 T:isapa128av20 70.53 70.53 70.56 T:tinyjambu128v2 80.09 80.09 80.12 T:tinyjambu192v2 80.65 80.65 80.68 T:tinyjambu256v2 120.43 120.60 120.84 romulust 122.01 122.47 124.45 T:isapk128av20 215.52 215.91 216.33 T:elephant200v2 299.97 299.97 300.35 T:isapa128v20 1009.38 1009.70 1011.50 T:isapk128v20 2302.43 2306.68 2350.62 T:isapxv20 5611.13 5615.20 5629.68 T:elephant176v2 6831.43 6835.28 6839.82 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 3.83 3.89 3.95 aes256gcmv1 4.07 4.13 4.14 T:aes128gcmv1 8.29 8.29 8.37 ascon128av12 10.42 10.42 10.43 ascon128v12 10.56 10.56 10.57 ascon80pqv12 12.12 12.24 12.32 T:xoodyakround3 19.58 19.58 19.58 ascon128abi32v12 24.62 24.62 24.62 ascon128bi32v12 25.20 25.28 25.42 T:grain128aeadv2 30.00 30.20 30.41 T:schwaemm256128v2 36.31 36.69 36.98 T:schwaemm128128v2 36.00 37.27 37.72 T:schwaemm256256v2 37.65 37.81 37.92 romulusn 39.18 39.42 39.72 T:schwaemm192192v2 46.15 46.43 46.47 T:giftcofb128v1 50.04 50.07 50.22 romulusm 54.67 54.69 54.74 T:isapa128av20 70.67 70.67 70.67 T:tinyjambu128v2 80.10 80.10 80.30 T:tinyjambu192v2 80.79 80.79 80.88 T:tinyjambu256v2 120.39 120.68 121.08 romulust 122.51 124.48 128.83 T:isapk128av20 215.79 216.00 216.42 T:elephant200v2 300.05 300.05 300.29 T:isapa128v20 1008.90 1009.33 1010.15 T:isapk128v20 2306.57 2309.33 2311.31 T:isapxv20 5612.85 5621.00 5630.92 T:elephant176v2 6833.97 6836.32 6844.11 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 3.88 3.92 3.98 aes256gcmv1 4.08 4.13 4.14 T:aes128gcmv1 8.29 8.29 8.29 ascon128av12 10.42 10.42 10.42 ascon128v12 10.56 10.56 10.56 ascon80pqv12 12.20 12.25 12.31 T:xoodyakround3 19.58 19.58 19.58 ascon128abi32v12 24.62 24.62 24.62 ascon128bi32v12 25.18 25.25 25.32 T:grain128aeadv2 30.36 30.66 30.96 T:schwaemm256128v2 35.86 35.86 35.86 T:isapa128av20 36.30 36.71 37.19 T:schwaemm128128v2 36.02 37.32 37.74 T:schwaemm256256v2 37.66 37.78 37.91 romulusn 39.15 39.37 39.67 T:schwaemm192192v2 46.14 46.15 46.40 T:giftcofb128v1 50.03 50.07 50.15 romulusm 70.67 70.67 70.67 T:tinyjambu128v2 75.15 75.23 75.46 romulust 77.86 78.27 78.80 T:isapk128av20 80.09 80.10 80.10 T:tinyjambu192v2 80.79 80.79 80.79 T:tinyjambu256v2 156.48 156.49 156.65 T:isapa128v20 215.62 215.82 216.05 T:elephant200v2 537.42 537.57 537.84 T:isapk128v20 1206.51 1207.44 1208.35 T:isapxv20 5608.76 5610.38 5614.26 T:elephant176v2 6833.36 6835.01 6840.99 T:elephant160v2