VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20260330

[Page version: 20260413 04:20:10]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.55 0.56 0.57 aes256gcmv1 0.78 0.79 0.80 T:aes128gcmv1 6.07 6.07 6.07 ascon128av12 8.62 8.63 8.63 ascon128v12 9.01 9.01 9.01 ascon80pqv12 9.34 9.45 9.47 T:xoodyakround3 12.72 12.73 12.73 ascon128abi32v12 17.18 17.21 17.25 T:schwaemm256128v2 17.55 17.59 17.62 T:grain128aeadv2 18.62 18.63 18.63 ascon128bi32v12 23.17 23.26 23.38 T:schwaemm256256v2 23.46 23.53 23.60 T:schwaemm192192v2 25.50 25.51 25.51 T:isapa128av20 27.82 27.91 28.04 T:schwaemm128128v2 33.23 33.25 33.28 T:isapa128v20 37.94 37.94 37.94 T:giftcofb128v1 41.06 41.15 41.23 romulusn 41.97 43.26 44.46 T:isapk128av20 63.55 63.62 63.68 romulusm 71.26 71.34 71.44 T:isapk128v20 73.26 73.26 73.26 T:tinyjambu128v2 87.25 87.25 87.25 T:tinyjambu192v2 91.26 91.26 91.26 T:tinyjambu256v2 133.54 133.86 134.04 romulust 161.12 162.64 164.49 T:isapxv20 198.66 198.72 198.81 T:elephant200v2 5994.79 6003.83 6005.57 T:elephant176v2 6725.42 6728.33 6729.85 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.47 0.48 0.48 aes256gcmv1 0.77 0.79 0.82 T:aes128gcmv1 6.06 6.07 6.07 ascon128av12 8.88 8.88 8.88 ascon80pqv12 8.88 8.88 8.88 ascon128v12 8.94 9.05 9.06 T:xoodyakround3 12.50 12.51 12.51 ascon128abi32v12 17.24 17.31 17.37 T:schwaemm256128v2 17.62 17.65 17.68 T:grain128aeadv2 18.12 18.13 18.13 ascon128bi32v12 23.17 23.25 23.44 T:schwaemm256256v2 23.51 23.58 23.66 T:schwaemm192192v2 24.75 24.75 24.76 T:isapa128av20 27.99 28.09 28.16 T:schwaemm128128v2 33.23 33.25 33.28 T:isapa128v20 37.91 37.93 37.96 T:giftcofb128v1 41.09 41.15 41.18 romulusn 42.12 43.71 44.17 T:isapk128av20 63.53 63.61 63.63 romulusm 71.33 71.43 71.51 T:isapk128v20 73.51 73.51 73.51 T:tinyjambu128v2 87.25 87.25 87.26 T:tinyjambu192v2 91.50 91.51 91.52 T:tinyjambu256v2 133.71 133.90 134.24 romulust 162.47 163.71 165.16 T:isapxv20 198.77 198.81 198.88 T:elephant200v2 5984.53 5985.33 5986.16 T:elephant176v2 6725.10 6727.18 6730.86 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.46 0.47 0.48 aes256gcmv1 0.77 0.78 0.82 T:aes128gcmv1 6.06 6.07 6.08 ascon128av12 8.88 8.88 8.88 ascon80pqv12 8.88 8.88 8.88 ascon128v12 9.07 9.08 9.10 T:xoodyakround3 12.51 12.51 12.51 ascon128abi32v12 16.50 16.50 16.52 T:isapa128av20 16.61 16.62 16.65 T:isapa128v20 17.18 17.22 17.26 T:schwaemm256128v2 17.62 17.64 17.68 T:grain128aeadv2 18.12 18.13 18.13 ascon128bi32v12 23.21 23.29 23.37 T:schwaemm256256v2 23.53 23.58 23.66 T:schwaemm192192v2 27.96 28.07 28.19 T:schwaemm128128v2 27.92 28.15 28.31 T:isapk128av20 37.93 37.94 37.95 T:giftcofb128v1 41.12 41.14 41.16 romulusn 44.35 44.41 44.62 T:isapk128v20 44.44 44.48 44.50 romulust 63.55 63.61 63.68 romulusm 73.51 73.51 73.51 T:tinyjambu128v2 87.25 87.25 87.25 T:tinyjambu192v2 91.51 91.51 91.51 T:tinyjambu256v2 97.69 99.12 100.50 T:isapxv20 198.71 198.77 198.82 T:elephant200v2 5984.53 5987.37 5991.54 T:elephant176v2 6723.54 6727.58 6730.00 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.46 0.47 0.47 aes256gcmv1 0.59 0.59 0.59 T:aes128gcmv1 5.88 5.88 5.89 ascon128av12 7.19 7.21 7.23 T:xoodyakround3 8.69 8.69 8.69 ascon80pqv12 8.75 8.75 8.75 ascon128v12 12.65 12.65 12.65 ascon128abi32v12 17.13 17.16 17.18 T:schwaemm256128v2 17.52 17.54 17.58 T:grain128aeadv2 18.71 18.71 18.71 ascon128bi32v12 20.99 20.99 21.01 T:isapa128av20 23.04 23.10 23.23 T:schwaemm256256v2 23.45 23.49 23.55 T:schwaemm192192v2 25.12 25.13 25.14 T:isapa128v20 27.68 27.73 27.80 T:schwaemm128128v2 31.78 31.83 31.86 romulusn 35.23 36.44 36.54 T:isapk128av20 38.14 38.15 38.16 T:giftcofb128v1 43.07 43.08 43.09 romulusm 57.92 57.95 58.02 T:isapk128v20 59.76 59.76 59.77 T:tinyjambu128v2 68.12 68.13 68.14 T:tinyjambu192v2 68.76 68.76 68.77 T:tinyjambu256v2 89.28 89.37 89.51 romulust 130.14 131.05 132.09 T:isapxv20 149.59 149.62 149.70 T:elephant200v2 4470.77 4471.45 4472.06 T:elephant176v2 5043.63 5044.70 5048.58 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.42 0.43 0.44 aes256gcmv1 0.59 0.59 0.59 T:aes128gcmv1 5.83 5.84 5.84 ascon128av12 7.03 7.04 7.05 T:xoodyakround3 8.69 8.69 8.69 ascon80pqv12 9.00 9.00 9.00 ascon128v12 12.56 12.57 12.57 ascon128abi32v12 17.19 17.23 17.27 T:schwaemm256128v2 17.53 17.56 17.62 T:grain128aeadv2 18.19 18.19 18.19 ascon128bi32v12 20.87 20.87 20.88 T:isapa128av20 23.01 23.06 23.19 T:schwaemm256256v2 23.48 23.53 23.58 T:schwaemm192192v2 25.11 25.12 25.15 T:isapa128v20 27.74 27.80 27.88 T:schwaemm128128v2 31.82 31.83 31.85 romulusn 35.19 35.26 35.51 T:isapk128av20 38.13 38.15 38.17 T:giftcofb128v1 43.02 43.09 43.12 romulusm 57.92 57.97 58.00 T:isapk128v20 59.88 59.89 59.89 T:tinyjambu128v2 68.13 68.13 68.13 T:tinyjambu192v2 68.89 68.89 68.89 T:tinyjambu256v2 89.04 89.14 89.42 romulust 130.22 131.28 131.99 T:isapxv20 149.61 149.66 149.75 T:elephant200v2 4469.48 4470.43 4471.90 T:elephant176v2 5043.76 5047.65 5073.27 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.42 0.43 0.44 aes256gcmv1 0.58 0.58 0.59 T:aes128gcmv1 5.82 5.84 5.84 ascon128av12 7.05 7.05 7.06 T:xoodyakround3 8.69 8.69 8.69 ascon80pqv12 9.00 9.00 9.00 ascon128v12 12.56 12.57 12.57 ascon128abi32v12 16.75 16.75 16.75 T:isapa128av20 16.81 16.81 16.82 T:isapa128v20 17.14 17.18 17.21 T:schwaemm256128v2 17.54 17.56 17.60 T:grain128aeadv2 18.19 18.19 18.19 ascon128bi32v12 23.00 23.04 23.34 T:schwaemm256256v2 23.49 23.53 23.58 T:schwaemm192192v2 27.72 27.80 27.90 T:schwaemm128128v2 28.04 28.20 28.68 T:isapk128av20 31.81 31.82 31.83 romulusn 38.14 38.15 38.16 T:giftcofb128v1 43.05 43.09 43.11 romulusm 44.48 44.50 44.58 romulust 44.58 44.65 44.76 T:isapk128v20 59.88 59.89 59.89 T:tinyjambu128v2 68.13 68.13 68.13 T:tinyjambu192v2 68.89 68.89 68.89 T:tinyjambu256v2 98.45 99.16 99.91 T:isapxv20 149.54 149.60 149.82 T:elephant200v2 4472.58 4482.82 4488.50 T:elephant176v2 5041.90 5046.49 5078.50 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.38 0.39 0.40 T:aes128gcmv1 0.38 0.39 0.40 aes256gcmv1 4.99 5.00 5.02 T:xoodyakround3 5.68 5.69 5.69 ascon128av12 8.37 8.38 8.38 ascon80pqv12 8.87 8.88 8.88 ascon128v12 12.54 12.56 12.58 ascon128abi32v12 16.49 16.50 16.50 T:isapa128av20 16.98 17.00 17.01 T:isapa128v20 17.07 17.12 17.28 T:schwaemm256128v2 17.45 17.47 17.51 T:grain128aeadv2 18.77 18.79 18.82 ascon128bi32v12 22.46 22.49 22.51 romulusn 22.47 22.53 22.60 romulusm 22.91 22.99 23.11 T:schwaemm256256v2 23.42 23.49 23.55 T:schwaemm192192v2 27.45 27.52 27.62 T:schwaemm128128v2 28.17 28.27 29.21 T:isapk128av20 38.34 38.36 38.37 T:giftcofb128v1 44.47 44.52 44.63 romulust 44.53 44.70 44.80 T:isapk128v20 46.25 46.26 46.26 T:tinyjambu128v2 46.25 46.26 46.26 T:tinyjambu256v2 49.01 49.01 49.01 T:tinyjambu192v2 97.47 98.94 100.19 T:isapxv20 100.53 100.61 100.91 T:elephant200v2 2956.97 2958.27 2961.73 T:elephant176v2 3365.02 3365.80 3384.07 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.37 0.38 0.40 aes256gcmv1 0.39 0.40 0.41 T:aes128gcmv1 5.01 5.03 5.07 T:xoodyakround3 5.56 5.56 5.57 ascon128av12 8.50 8.50 8.50 ascon80pqv12 9.12 9.12 9.13 ascon128v12 12.62 12.62 12.63 ascon128abi32v12 16.99 17.00 17.02 T:isapa128v20 17.00 17.00 17.01 T:isapa128av20 17.08 17.16 17.24 T:schwaemm256128v2 17.46 17.49 17.53 T:grain128aeadv2 18.25 18.25 18.26 ascon128bi32v12 22.46 22.49 22.54 romulusn 22.45 22.58 22.63 romulusm 22.85 22.90 23.08 T:schwaemm256256v2 23.43 23.51 23.63 T:schwaemm192192v2 27.44 27.56 27.65 T:schwaemm128128v2 27.98 28.22 28.28 T:isapk128av20 38.33 38.35 38.37 T:giftcofb128v1 44.52 44.59 44.63 T:isapk128v20 44.50 44.60 44.63 romulust 46.26 46.26 46.26 T:tinyjambu128v2 46.26 46.26 46.26 T:tinyjambu256v2 49.01 49.01 49.02 T:tinyjambu192v2 97.64 98.83 100.19 T:isapxv20 100.50 100.56 100.60 T:elephant200v2 2956.46 2957.11 2957.88 T:elephant176v2 3362.88 3364.86 3367.42 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.37 0.39 0.40 aes256gcmv1 0.40 0.40 0.41 T:aes128gcmv1 5.00 5.03 5.06 T:xoodyakround3 5.56 5.56 5.57 ascon128av12 8.50 8.50 8.50 ascon80pqv12 9.12 9.12 9.12 ascon128v12 12.62 12.62 12.63 ascon128abi32v12 16.98 17.00 17.02 T:isapa128v20 17.00 17.00 17.01 T:isapa128av20 17.04 17.08 17.13 T:schwaemm256128v2 17.45 17.48 17.52 T:grain128aeadv2 18.25 18.25 18.25 ascon128bi32v12 22.46 22.48 22.54 romulusn 22.45 22.56 22.62 romulusm 22.91 23.17 23.22 T:schwaemm256256v2 23.42 23.50 23.57 T:schwaemm192192v2 27.44 27.54 27.65 T:schwaemm128128v2 27.92 28.10 29.27 T:isapk128av20 38.34 38.36 38.37 T:giftcofb128v1 44.42 44.53 44.61 romulust 44.58 44.63 44.71 T:isapk128v20 46.26 46.26 46.26 T:tinyjambu128v2 46.26 46.26 46.26 T:tinyjambu256v2 49.01 49.01 49.01 T:tinyjambu192v2 97.48 98.61 100.04 T:isapxv20 100.51 100.57 100.62 T:elephant200v2 2955.95 2957.26 2965.85 T:elephant176v2 3364.48 3365.30 3365.92 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.55 0.55 0.56 aes256gcmv1 0.68 0.69 0.69 T:aes128gcmv1 6.02 6.02 6.02 ascon128av12 7.23 7.24 7.26 T:xoodyakround3 8.83 8.83 8.83 ascon80pqv12 8.88 8.88 8.88 ascon128v12 12.94 12.94 12.95 ascon128abi32v12 17.69 17.71 17.73 T:schwaemm256128v2 17.83 17.84 17.88 T:grain128aeadv2 18.98 18.98 18.98 ascon128bi32v12 22.46 22.46 22.48 T:isapa128av20 23.59 23.62 23.93 T:schwaemm256256v2 24.03 24.07 24.11 T:schwaemm192192v2 28.04 28.10 28.15 T:schwaemm128128v2 32.05 32.10 32.11 romulusn 36.58 36.58 36.60 T:isapa128v20 38.46 38.46 38.47 T:giftcofb128v1 39.15 39.21 40.34 T:isapk128av20 43.36 43.38 43.41 romulusm 60.21 60.21 60.22 T:tinyjambu128v2 68.64 68.64 68.64 T:tinyjambu192v2 69.26 69.26 69.27 T:tinyjambu256v2 90.58 90.71 90.86 romulust 100.94 100.98 101.05 T:isapk128v20 152.70 152.75 153.43 T:elephant200v2 219.91 220.57 221.14 T:isapxv20 4504.05 4504.54 4504.95 T:elephant176v2 5100.53 5101.17 5102.68 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.51 0.51 0.52 aes256gcmv1 0.68 0.68 0.69 T:aes128gcmv1 5.98 5.99 5.99 ascon128av12 7.10 7.11 7.11 T:xoodyakround3 8.82 8.82 8.82 ascon80pqv12 9.13 9.13 9.13 ascon128v12 12.85 12.85 12.86 ascon128abi32v12 17.71 17.72 17.74 T:schwaemm256128v2 17.86 17.89 17.92 T:grain128aeadv2 18.46 18.46 18.46 ascon128bi32v12 22.28 22.28 22.29 T:isapa128av20 23.58 23.63 23.83 T:schwaemm256256v2 24.05 24.09 24.13 T:schwaemm192192v2 28.13 28.19 28.27 T:schwaemm128128v2 32.06 32.08 32.09 romulusn 36.58 36.58 36.59 T:isapa128v20 38.48 38.49 38.50 T:giftcofb128v1 39.19 39.72 40.61 T:isapk128av20 43.42 43.43 43.44 romulusm 60.34 60.34 60.34 T:tinyjambu128v2 68.64 68.64 68.64 T:tinyjambu192v2 69.38 69.39 69.39 T:tinyjambu256v2 90.34 90.45 90.60 romulust 100.91 100.92 100.99 T:isapk128v20 152.73 152.75 152.77 T:elephant200v2 219.17 220.03 220.72 T:isapxv20 4504.05 4507.52 4509.94 T:elephant176v2 5100.72 5103.18 5106.60 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.51 0.51 0.52 aes256gcmv1 0.68 0.68 0.68 T:aes128gcmv1 5.96 5.98 5.99 ascon128av12 7.13 7.13 7.13 T:xoodyakround3 8.82 8.82 8.82 ascon80pqv12 9.13 9.13 9.13 ascon128v12 12.85 12.85 12.85 ascon128abi32v12 17.55 17.55 17.55 T:isapa128av20 17.70 17.72 17.75 T:schwaemm256128v2 17.86 17.87 17.91 T:grain128aeadv2 18.46 18.46 18.46 ascon128bi32v12 22.63 22.63 22.64 T:isapa128v20 23.58 23.61 23.82 T:schwaemm256256v2 24.06 24.13 24.21 T:schwaemm192192v2 28.15 28.21 28.26 T:schwaemm128128v2 30.50 30.55 30.63 T:isapk128av20 32.07 32.07 32.09 romulusn 38.48 38.48 38.49 T:giftcofb128v1 43.42 43.43 43.45 romulusm 45.74 45.76 45.81 romulust 60.34 60.34 60.34 T:tinyjambu128v2 66.79 66.81 66.84 T:isapk128v20 68.64 68.64 68.64 T:tinyjambu192v2 69.38 69.39 69.39 T:tinyjambu256v2 143.48 144.51 145.07 T:isapxv20 152.72 152.76 152.81 T:elephant200v2 4505.07 4505.91 4516.47 T:elephant176v2 5100.58 5102.44 5129.05 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.60 4.64 4.74 aes256gcmv1 4.80 4.86 4.90 T:aes128gcmv1 9.34 9.34 9.39 ascon128av12 10.41 10.42 10.51 T:xoodyakround3 11.75 11.75 11.75 ascon128v12 12.01 12.01 12.01 ascon80pqv12 19.77 19.77 19.78 ascon128abi32v12 24.97 25.04 25.20 T:grain128aeadv2 25.24 25.24 25.24 ascon128bi32v12 30.03 30.23 30.47 T:schwaemm256128v2 36.22 36.50 36.91 T:schwaemm128128v2 36.79 36.95 37.09 T:schwaemm256256v2 38.03 38.05 38.05 romulusn 39.08 39.32 39.79 T:schwaemm192192v2 45.70 45.70 45.81 T:giftcofb128v1 50.26 50.38 50.50 romulusm 55.90 56.06 56.12 T:isapa128av20 70.53 70.53 70.53 T:tinyjambu128v2 80.09 80.09 80.11 T:tinyjambu192v2 80.65 80.65 80.70 T:tinyjambu256v2 119.77 120.07 120.45 romulust 121.84 122.18 122.59 T:isapk128av20 215.85 216.17 216.59 T:elephant200v2 299.97 299.97 300.24 T:isapa128v20 1077.91 1078.19 1078.78 T:isapk128v20 2234.54 2245.76 2254.80 T:isapxv20 5607.67 5610.41 5613.87 T:elephant176v2 6833.76 6835.89 6841.77 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.99 5.02 5.12 aes256gcmv1 4.99 5.12 5.15 T:aes128gcmv1 9.28 9.29 9.35 ascon128av12 10.56 10.57 10.59 T:xoodyakround3 11.90 11.90 11.93 ascon80pqv12 12.06 12.06 12.06 ascon128v12 19.58 19.58 19.59 ascon128abi32v12 24.62 24.62 24.62 ascon128bi32v12 25.02 25.15 25.32 T:grain128aeadv2 30.08 30.28 30.58 T:schwaemm256128v2 36.42 36.72 36.93 T:schwaemm128128v2 36.70 36.82 37.00 T:schwaemm256256v2 37.65 37.70 37.76 romulusn 39.14 39.39 39.66 T:schwaemm192192v2 46.16 46.45 46.47 T:giftcofb128v1 50.76 50.81 51.65 romulusm 54.66 54.69 54.81 T:isapa128av20 70.67 70.67 70.67 T:tinyjambu128v2 80.10 80.10 80.14 T:tinyjambu192v2 80.79 80.79 80.83 T:tinyjambu256v2 119.65 119.92 120.07 romulust 123.08 127.36 128.05 T:isapk128av20 215.53 215.71 215.89 T:elephant200v2 300.05 300.05 300.33 T:isapa128v20 1078.05 1078.39 1079.32 T:isapk128v20 2231.65 2240.79 2252.42 T:isapxv20 5608.99 5614.28 5618.96 T:elephant176v2 6834.44 6842.12 6867.02 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.98 5.03 5.09 aes256gcmv1 5.00 5.11 5.13 T:aes128gcmv1 9.28 9.29 9.32 ascon128av12 10.45 10.64 10.74 T:xoodyakround3 11.90 11.90 11.90 ascon80pqv12 12.06 12.06 12.06 ascon128v12 19.58 19.58 19.58 ascon128abi32v12 24.62 24.62 24.62 ascon128bi32v12 25.07 25.14 25.23 T:grain128aeadv2 30.23 30.52 30.85 T:schwaemm256128v2 35.86 35.87 35.96 T:isapa128av20 36.70 36.83 36.91 T:schwaemm256256v2 36.66 36.99 37.33 T:schwaemm128128v2 37.65 37.70 37.76 romulusn 39.10 39.36 39.68 T:schwaemm192192v2 46.14 46.14 46.40 T:giftcofb128v1 50.76 50.77 51.56 romulusm 70.67 70.67 70.67 T:tinyjambu128v2 74.29 74.41 74.61 romulust 77.92 78.22 78.38 T:isapk128av20 80.10 80.10 80.10 T:tinyjambu192v2 80.79 80.79 80.79 T:tinyjambu256v2 156.48 156.48 156.98 T:isapa128v20 215.55 215.71 215.94 T:elephant200v2 567.76 568.30 568.54 T:isapk128v20 1160.77 1169.70 1180.06 T:isapxv20 5609.76 5612.26 5616.08 T:elephant176v2 6831.59 6838.84 6866.63 T:elephant160v2