VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20261004

[Page version: 20261013 16:31:00]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.55 0.56 0.57 aes256gcmv1 0.78 0.78 0.79 T:aes128gcmv1 5.31 5.31 5.32 ascon128av12 7.50 7.51 7.51 ascon80pqv12 7.75 7.75 7.76 ascon128v12 10.72 11.14 11.15 T:xoodyakround3 12.72 12.72 12.73 ascon128abi32v12 17.17 17.21 17.30 T:schwaemm256128v2 17.58 17.60 17.62 T:grain128aeadv2 18.62 18.63 18.63 ascon128bi32v12 23.45 23.47 23.50 T:schwaemm256256v2 23.45 23.52 23.59 T:schwaemm192192v2 25.46 25.47 25.47 T:isapa128av20 27.86 28.01 28.15 T:schwaemm128128v2 29.88 29.88 29.88 T:giftcofb128v1 33.00 33.00 33.01 T:isapa128v20 41.14 41.16 41.18 romulusn 41.80 41.97 43.51 T:isapk128av20 63.63 63.70 63.86 romulusm 67.26 67.30 67.32 T:tinyjambu128v2 69.66 69.71 69.76 T:isapk128v20 84.51 84.53 84.54 T:tinyjambu192v2 90.51 90.51 90.51 T:tinyjambu256v2 133.59 133.88 134.30 romulust 171.08 171.78 173.19 T:isapxv20 198.67 198.74 198.82 T:elephant200v2 5986.13 5990.08 6011.47 T:elephant176v2 6725.72 6727.24 6740.43 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.47 0.48 0.49 aes256gcmv1 0.80 0.80 0.81 T:aes128gcmv1 5.31 5.31 5.31 ascon128av12 7.63 7.64 7.64 ascon128v12 8.00 8.01 8.01 ascon80pqv12 10.43 10.55 10.69 T:xoodyakround3 12.51 12.51 12.51 ascon128abi32v12 17.19 17.23 17.27 T:schwaemm256128v2 17.61 17.64 17.70 T:grain128aeadv2 18.12 18.13 18.13 ascon128bi32v12 23.42 23.45 23.49 T:schwaemm256256v2 23.55 23.61 23.69 T:schwaemm192192v2 24.75 24.75 24.75 T:isapa128av20 28.01 28.14 28.26 T:schwaemm128128v2 30.00 30.00 30.00 T:giftcofb128v1 33.00 33.00 33.00 T:isapa128v20 41.11 41.17 41.21 romulusn 42.20 42.29 42.37 T:isapk128av20 63.68 63.81 64.17 romulusm 67.27 67.28 67.29 T:tinyjambu128v2 69.66 69.79 69.92 T:isapk128v20 84.75 84.76 84.77 T:tinyjambu192v2 90.51 90.51 90.51 T:tinyjambu256v2 133.79 134.25 134.60 romulust 171.07 172.34 173.89 T:isapxv20 198.71 198.77 198.81 T:elephant200v2 5986.11 5989.52 6006.02 T:elephant176v2 6722.89 6726.09 6728.36 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.47 0.48 0.49 aes256gcmv1 0.79 0.80 0.80 T:aes128gcmv1 5.31 5.31 5.31 ascon128av12 7.64 7.64 7.64 ascon128v12 8.01 8.01 8.01 ascon80pqv12 10.48 10.53 10.66 T:xoodyakround3 12.51 12.51 12.51 ascon128abi32v12 16.50 16.50 16.51 T:isapa128v20 16.50 16.50 16.52 T:isapa128av20 17.20 17.26 17.33 T:schwaemm256128v2 17.62 17.65 17.71 T:grain128aeadv2 18.12 18.13 18.13 ascon128bi32v12 23.45 23.49 23.71 T:schwaemm256256v2 23.55 23.61 23.67 T:schwaemm192192v2 28.01 28.13 28.24 T:schwaemm128128v2 28.10 28.21 29.28 T:isapk128av20 30.00 30.00 30.00 T:giftcofb128v1 41.12 41.18 41.21 romulusn 44.39 44.47 44.52 romulust 44.77 44.84 44.87 T:isapk128v20 63.72 63.92 64.00 romulusm 67.28 67.28 67.30 T:tinyjambu128v2 84.76 84.76 84.77 T:tinyjambu192v2 90.51 90.51 90.51 T:tinyjambu256v2 102.76 103.64 106.12 T:isapxv20 198.69 198.85 198.93 T:elephant200v2 5985.87 5990.79 6007.38 T:elephant176v2 6723.23 6727.86 6731.07 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.46 0.46 0.46 aes256gcmv1 0.60 0.60 0.61 T:aes128gcmv1 5.28 5.28 5.29 ascon128av12 7.50 7.50 7.50 ascon80pqv12 7.62 7.62 7.63 ascon128v12 8.15 8.34 8.47 T:xoodyakround3 12.64 12.65 12.65 ascon128abi32v12 17.14 17.18 17.24 T:schwaemm256128v2 17.51 17.53 17.59 T:grain128aeadv2 18.71 18.71 18.71 ascon128bi32v12 20.97 20.98 20.99 T:isapa128av20 23.28 23.30 23.43 T:schwaemm256256v2 23.44 23.50 23.54 T:schwaemm192192v2 24.75 24.75 24.77 T:isapa128v20 27.70 27.79 27.96 T:schwaemm128128v2 29.81 29.81 29.82 T:giftcofb128v1 31.80 31.81 31.84 romulusn 35.01 35.09 36.44 T:isapk128av20 43.09 43.12 43.20 romulusm 54.76 54.78 54.80 T:tinyjambu128v2 55.52 55.53 55.55 T:isapk128v20 65.89 65.90 65.91 T:tinyjambu192v2 68.01 68.01 68.02 T:tinyjambu256v2 89.02 89.25 89.45 romulust 135.81 136.42 137.43 T:isapxv20 149.60 149.62 149.72 T:elephant200v2 4480.24 4488.55 4494.76 T:elephant176v2 5044.44 5048.42 5049.19 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.42 0.42 0.43 aes256gcmv1 0.60 0.60 0.60 T:aes128gcmv1 5.29 5.29 5.29 ascon128av12 7.62 7.63 7.63 ascon128v12 7.81 7.81 7.82 ascon80pqv12 8.11 8.16 8.20 T:xoodyakround3 12.56 12.56 12.56 ascon128abi32v12 17.14 17.19 17.25 T:schwaemm256128v2 17.57 17.62 17.65 T:grain128aeadv2 18.19 18.19 18.19 ascon128bi32v12 20.81 20.82 20.82 T:isapa128av20 23.28 23.31 23.68 T:schwaemm256256v2 23.48 23.53 23.56 T:schwaemm192192v2 24.75 24.76 24.77 T:isapa128v20 27.75 27.86 28.06 T:schwaemm128128v2 29.87 29.88 29.88 T:giftcofb128v1 31.72 31.75 31.79 romulusn 36.43 36.67 36.76 T:isapk128av20 43.14 43.22 43.29 romulusm 54.78 54.79 54.80 T:tinyjambu128v2 55.47 55.53 55.60 T:isapk128v20 66.01 66.01 66.02 T:tinyjambu192v2 68.01 68.01 68.01 T:tinyjambu256v2 89.01 89.21 89.31 romulust 137.35 138.05 138.48 T:isapxv20 149.56 149.64 149.74 T:elephant200v2 4482.68 4488.98 4497.23 T:elephant176v2 5042.53 5046.24 5049.64 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.42 0.43 0.43 aes256gcmv1 0.60 0.60 0.60 T:aes128gcmv1 5.29 5.29 5.29 ascon128av12 7.62 7.63 7.63 ascon128v12 7.81 7.81 7.81 ascon80pqv12 8.11 8.16 8.25 T:xoodyakround3 12.56 12.56 12.56 ascon128abi32v12 16.49 16.50 16.50 T:isapa128v20 16.69 16.69 16.70 T:isapa128av20 17.13 17.19 17.25 T:schwaemm256128v2 17.56 17.61 17.65 T:grain128aeadv2 18.19 18.19 18.19 ascon128bi32v12 23.27 23.29 23.32 T:schwaemm256256v2 23.48 23.52 23.56 T:schwaemm192192v2 27.77 27.85 27.97 T:schwaemm128128v2 28.15 28.20 28.24 T:isapk128av20 29.87 29.88 29.88 T:giftcofb128v1 31.66 31.71 31.73 romulusn 43.04 43.08 43.12 T:isapk128v20 43.12 43.21 43.32 romulusm 44.36 44.39 44.42 romulust 54.78 54.78 54.80 T:tinyjambu128v2 66.01 66.01 66.02 T:tinyjambu192v2 68.01 68.01 68.01 T:tinyjambu256v2 102.70 103.43 104.17 T:isapxv20 149.61 149.64 149.73 T:elephant200v2 4471.68 4473.82 4486.20 T:elephant176v2 5041.90 5044.56 5048.09 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.37 0.39 0.40 aes256gcmv1 0.41 0.42 0.42 T:aes128gcmv1 5.25 5.25 5.25 ascon128av12 5.68 5.70 5.72 T:xoodyakround3 7.50 7.50 7.50 ascon128v12 7.50 7.50 7.50 ascon80pqv12 12.54 12.56 12.58 ascon128abi32v12 16.49 16.50 16.51 T:isapa128av20 16.50 16.50 16.50 T:isapa128v20 17.04 17.10 17.18 T:schwaemm256128v2 17.45 17.48 17.57 T:grain128aeadv2 18.77 18.80 18.81 ascon128bi32v12 22.46 22.48 22.53 romulusn 22.52 22.52 22.53 romulusm 23.10 23.11 23.14 T:schwaemm256256v2 23.42 23.50 23.57 T:schwaemm192192v2 27.47 27.60 27.76 T:schwaemm128128v2 27.99 28.22 29.46 T:isapk128av20 29.75 29.75 29.76 T:giftcofb128v1 41.34 41.38 41.43 T:isapk128v20 42.24 42.28 43.32 T:tinyjambu128v2 44.32 44.36 44.41 romulust 45.51 45.51 45.51 T:tinyjambu256v2 47.25 47.26 47.26 T:tinyjambu192v2 100.54 100.62 100.71 T:elephant200v2 102.48 103.54 108.91 T:isapxv20 2957.38 2960.76 2967.54 T:elephant176v2 3363.40 3365.16 3370.99 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.37 0.38 0.39 aes256gcmv1 0.40 0.40 0.40 T:aes128gcmv1 5.25 5.26 5.26 ascon128av12 5.69 5.74 5.78 T:xoodyakround3 7.62 7.62 7.63 ascon128v12 7.62 7.63 7.63 ascon80pqv12 12.62 12.62 12.63 ascon128abi32v12 16.50 16.50 16.50 T:isapa128v20 16.87 16.88 16.88 T:isapa128av20 17.06 17.11 17.17 T:schwaemm256128v2 17.47 17.55 17.64 T:grain128aeadv2 18.25 18.25 18.25 ascon128bi32v12 22.44 22.47 22.53 romulusn 22.47 22.52 22.55 romulusm 23.13 23.22 23.38 T:schwaemm256256v2 23.42 23.47 23.54 T:schwaemm192192v2 27.49 27.61 27.80 T:schwaemm128128v2 27.90 27.99 28.21 T:isapk128av20 29.75 29.75 29.75 T:giftcofb128v1 41.34 41.36 41.38 T:isapk128v20 42.26 42.27 42.29 T:tinyjambu128v2 44.30 44.35 44.40 romulust 45.50 45.51 45.51 T:tinyjambu256v2 47.26 47.26 47.27 T:tinyjambu192v2 100.52 100.60 100.92 T:elephant200v2 103.57 105.40 106.39 T:isapxv20 2957.51 2959.93 2968.18 T:elephant176v2 3363.18 3364.75 3370.89 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.37 0.38 0.39 aes256gcmv1 0.40 0.40 0.40 T:aes128gcmv1 5.25 5.26 5.26 ascon128av12 5.70 5.75 5.76 T:xoodyakround3 7.62 7.63 7.63 ascon128v12 7.62 7.63 7.63 ascon80pqv12 12.62 12.62 12.63 ascon128abi32v12 16.49 16.50 16.51 T:isapa128v20 16.87 16.88 16.89 T:isapa128av20 17.08 17.13 17.20 T:schwaemm256128v2 17.47 17.54 17.67 T:grain128aeadv2 18.25 18.25 18.25 ascon128bi32v12 22.44 22.46 22.53 romulusn 22.51 22.54 22.55 romulusm 23.11 23.12 23.16 T:schwaemm256256v2 23.47 23.52 23.57 T:schwaemm192192v2 27.46 27.61 27.80 T:schwaemm128128v2 28.11 28.18 28.26 T:isapk128av20 29.75 29.75 29.75 T:giftcofb128v1 41.28 41.36 41.39 T:isapk128v20 42.26 42.27 42.29 T:tinyjambu128v2 44.23 44.31 44.36 romulust 45.51 45.51 45.52 T:tinyjambu256v2 47.26 47.26 47.26 T:tinyjambu192v2 100.54 100.61 100.69 T:elephant200v2 100.96 104.47 105.34 T:isapxv20 2957.67 2964.06 2973.23 T:elephant176v2 3367.96 3387.41 3388.28 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.55 0.55 0.56 aes256gcmv1 0.69 0.69 0.70 T:aes128gcmv1 5.41 5.41 5.42 ascon128av12 7.62 7.62 7.62 ascon80pqv12 7.74 7.74 7.75 ascon128v12 8.44 8.49 8.54 T:xoodyakround3 12.94 12.94 12.94 ascon128abi32v12 17.69 17.72 17.74 T:schwaemm256128v2 17.83 17.85 17.87 T:grain128aeadv2 18.98 18.98 18.98 ascon128bi32v12 22.49 22.49 22.49 T:isapa128av20 23.91 23.93 23.97 T:schwaemm256256v2 24.05 24.10 24.22 T:schwaemm192192v2 28.03 28.11 28.28 T:schwaemm128128v2 30.08 30.08 30.08 T:giftcofb128v1 32.09 32.10 32.13 romulusn 36.05 36.05 36.05 T:isapa128v20 39.12 39.18 40.34 T:isapk128av20 43.37 43.38 43.41 romulusm 55.19 55.20 55.22 T:tinyjambu128v2 66.39 66.39 66.39 T:tinyjambu192v2 68.51 68.51 68.51 T:tinyjambu256v2 90.35 90.49 90.65 romulust 95.72 95.73 95.76 T:isapk128v20 152.74 152.83 153.42 T:elephant200v2 228.87 229.38 232.96 T:isapxv20 4509.46 4513.61 4520.48 T:elephant176v2 5100.86 5101.72 5104.66 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.51 0.51 0.52 aes256gcmv1 0.69 0.69 0.70 T:aes128gcmv1 5.41 5.41 5.41 ascon128av12 7.74 7.74 7.74 ascon128v12 7.93 7.93 7.93 ascon80pqv12 8.16 8.18 8.26 T:xoodyakround3 12.85 12.85 12.86 ascon128abi32v12 17.72 17.75 17.89 T:schwaemm256128v2 17.87 17.90 17.93 T:grain128aeadv2 18.46 18.46 18.46 ascon128bi32v12 22.29 22.29 22.29 T:isapa128av20 23.89 23.91 24.13 T:schwaemm256256v2 24.04 24.09 24.13 T:schwaemm192192v2 28.15 28.24 28.36 T:schwaemm128128v2 30.15 30.16 30.16 T:giftcofb128v1 32.03 32.05 32.09 romulusn 36.06 36.06 36.07 T:isapa128v20 39.20 40.16 40.63 T:isapk128av20 43.39 43.41 43.46 romulusm 55.21 55.22 56.75 T:tinyjambu128v2 66.50 66.51 66.51 T:tinyjambu192v2 68.51 68.51 68.51 T:tinyjambu256v2 90.19 90.36 90.57 romulust 95.71 95.74 95.78 T:isapk128v20 152.73 152.75 152.78 T:elephant200v2 229.08 229.45 229.83 T:isapxv20 4509.61 4516.16 4522.63 T:elephant176v2 5103.70 5130.00 5133.62 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.51 0.51 0.52 aes256gcmv1 0.69 0.69 0.69 T:aes128gcmv1 5.41 5.41 5.41 ascon128av12 7.74 7.74 7.74 ascon128v12 7.93 7.93 7.93 ascon80pqv12 8.18 8.24 8.27 T:xoodyakround3 12.85 12.85 12.85 ascon128abi32v12 17.52 17.52 17.53 T:isapa128av20 17.70 17.73 17.75 T:schwaemm256128v2 17.87 17.90 17.94 T:grain128aeadv2 18.46 18.46 18.46 ascon128bi32v12 22.26 22.26 22.26 T:isapa128v20 23.89 23.90 23.91 T:schwaemm256256v2 24.05 24.09 24.14 T:schwaemm192192v2 28.18 28.31 28.41 T:schwaemm128128v2 30.15 30.16 30.16 T:giftcofb128v1 30.48 30.56 31.48 T:isapk128av20 32.02 32.03 32.08 romulusn 43.37 43.40 43.48 romulusm 45.63 45.66 45.72 romulust 55.21 55.21 56.71 T:tinyjambu128v2 64.00 64.06 64.14 T:isapk128v20 66.50 66.50 66.51 T:tinyjambu192v2 68.51 68.51 68.51 T:tinyjambu256v2 149.63 149.74 149.86 T:isapxv20 152.74 152.83 153.34 T:elephant200v2 4507.95 4516.51 4523.95 T:elephant176v2 5101.25 5102.46 5129.64 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.04 4.11 4.17 T:aes128gcmv1 4.64 4.71 4.78 aes256gcmv1 8.40 8.40 8.48 ascon128av12 10.39 10.39 10.40 ascon80pqv12 10.48 10.49 10.49 ascon128v12 12.17 12.21 12.24 T:xoodyakround3 19.77 19.77 19.78 ascon128abi32v12 25.11 25.18 25.27 T:grain128aeadv2 25.24 25.25 25.29 ascon128bi32v12 29.98 30.22 30.54 T:schwaemm256128v2 36.34 36.34 36.37 T:giftcofb128v1 36.20 36.59 36.97 T:schwaemm128128v2 37.87 37.92 38.08 romulusn 37.71 38.11 38.19 T:schwaemm256256v2 39.50 39.74 40.12 T:schwaemm192192v2 49.17 49.32 49.55 romulusm 57.27 57.27 57.27 T:isapa128av20 64.85 65.32 68.10 T:tinyjambu128v2 77.53 77.55 77.79 T:tinyjambu192v2 79.79 79.79 79.84 T:tinyjambu256v2 120.45 120.58 120.76 romulust 122.56 126.46 127.54 T:isapk128av20 215.63 215.76 216.06 T:elephant200v2 295.90 295.90 296.10 T:isapa128v20 1009.08 1009.19 1009.76 T:isapk128v20 2301.06 2303.08 2357.47 T:isapxv20 5618.67 5623.56 5629.89 T:elephant176v2 6834.56 6836.85 6842.00 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.09 4.13 4.16 T:aes128gcmv1 4.92 4.98 5.06 aes256gcmv1 8.29 8.29 8.37 ascon128av12 10.42 10.42 10.46 ascon128v12 10.56 10.56 10.59 ascon80pqv12 12.20 12.25 12.28 T:xoodyakround3 19.58 19.58 19.58 ascon128abi32v12 24.62 24.62 24.66 ascon128bi32v12 25.23 25.32 25.45 T:grain128aeadv2 30.09 30.33 30.49 T:schwaemm256128v2 36.61 36.63 36.66 T:giftcofb128v1 36.41 36.77 37.01 T:schwaemm128128v2 37.46 37.74 37.86 T:schwaemm256256v2 37.69 37.80 37.88 romulusn 39.27 39.51 39.70 T:schwaemm192192v2 49.95 50.04 50.30 romulusm 56.20 56.21 56.26 T:isapa128av20 64.75 64.93 68.19 T:tinyjambu128v2 77.73 77.73 77.74 T:tinyjambu192v2 79.90 79.90 79.94 T:tinyjambu256v2 120.52 120.76 121.10 romulust 123.45 127.34 128.13 T:isapk128av20 215.73 215.88 215.94 T:elephant200v2 296.21 296.22 296.34 T:isapa128v20 1008.96 1009.13 1009.27 T:isapk128v20 2299.41 2302.91 2326.43 T:isapxv20 5611.73 5616.91 5628.99 T:elephant176v2 6833.73 6840.32 6864.36 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.09 4.13 4.15 T:aes128gcmv1 4.91 4.96 5.05 aes256gcmv1 8.29 8.29 8.29 ascon128av12 10.42 10.42 10.42 ascon128v12 10.56 10.56 10.56 ascon80pqv12 12.09 12.21 12.35 T:xoodyakround3 19.58 19.58 19.58 ascon128abi32v12 24.62 24.62 24.66 ascon128bi32v12 25.24 25.32 25.39 T:grain128aeadv2 30.13 30.47 30.80 T:schwaemm256128v2 36.55 36.55 36.56 T:isapa128av20 36.61 36.62 36.65 T:giftcofb128v1 36.75 37.05 37.54 T:schwaemm128128v2 37.41 37.78 37.87 T:schwaemm256256v2 37.69 37.78 37.88 romulusn 39.07 39.33 39.62 T:schwaemm192192v2 49.96 50.03 50.26 romulusm 64.75 64.86 68.19 T:tinyjambu128v2 75.15 75.28 75.71 romulust 77.73 77.73 77.74 T:tinyjambu192v2 77.68 78.03 78.28 T:isapk128av20 79.90 79.90 79.90 T:tinyjambu256v2 154.65 154.68 155.35 T:isapa128v20 215.82 216.04 216.50 T:elephant200v2 537.24 537.42 537.86 T:isapk128v20 1201.52 1202.52 1205.86 T:isapxv20 5611.68 5617.69 5628.75 T:elephant176v2 6832.71 6835.30 6840.63 T:elephant160v2