VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20250415

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.44 1.46 1.48 T:aes128gcmv1 1.63 1.65 1.66 aes256gcmv1 10.75 10.76 10.77 ascon128av12 15.13 15.16 15.20 ascon80pqv12 15.31 15.34 15.35 ascon128v12 21.66 21.75 21.78 T:xoodyakround3 22.06 22.10 22.12 T:schwaemm256128v2 23.21 23.23 23.43 ascon128abi32v12 29.21 29.34 29.36 T:schwaemm192192v2 32.27 32.37 32.38 T:schwaemm256256v2 33.28 33.40 33.48 T:schwaemm128128v2 34.10 34.12 34.14 ascon128bi32v12 38.97 39.09 39.13 T:grain128aeadv2 47.44 47.46 47.51 romulusn 47.93 48.10 48.25 T:giftcofb128v1 61.45 61.92 62.31 T:isapa128av20 68.21 68.51 68.76 T:isapa128v20 76.00 76.10 76.21 T:tinyjambu128v2 76.86 76.95 77.34 romulusm 95.39 95.49 95.60 T:tinyjambu192v2 103.89 103.99 104.07 T:tinyjambu256v2 105.12 105.26 105.47 T:isapk128av20 136.59 140.71 143.99 T:isapk128v20 145.79 145.93 146.19 T!!!romulust 196.33 197.95 202.12 T:elephant200v2 212.86 213.01 213.35 T:isapxv20 10388.10 10389.66 10394.72 T:elephant176v2 11780.72 11795.12 11803.13 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.59 1.60 1.63 T:aes128gcmv1 1.68 1.71 1.73 aes256gcmv1 10.25 10.27 10.29 ascon128av12 15.14 15.17 15.22 ascon128v12 15.34 15.37 15.46 ascon80pqv12 20.65 20.73 20.76 T:xoodyakround3 22.07 22.09 22.11 T:schwaemm256128v2 23.43 23.44 23.52 ascon128abi32v12 29.20 29.22 29.32 T:schwaemm192192v2 32.22 32.37 32.39 T:schwaemm256256v2 33.30 33.35 33.38 T:schwaemm128128v2 33.86 33.91 33.95 ascon128bi32v12 39.04 39.62 39.83 T:grain128aeadv2 47.42 47.44 47.45 romulusn 47.83 48.01 48.41 T:giftcofb128v1 61.93 62.01 62.08 T:isapa128av20 67.61 68.46 68.57 T:isapa128v20 76.42 76.45 76.49 T:tinyjambu128v2 77.13 77.23 77.62 romulusm 95.11 95.32 95.41 T:tinyjambu192v2 104.29 104.35 104.42 T:tinyjambu256v2 105.10 105.21 105.32 T:isapk128av20 135.92 141.54 142.85 T:isapk128v20 145.77 146.03 146.25 T!!!romulust 197.60 198.01 200.72 T:elephant200v2 182.80? 212.66? 241.37? T:isapxv20 10384.20 10389.95 10396.65 T:elephant176v2 11787.66 11796.43 11801.32 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.59 1.61 1.62 T:aes128gcmv1 1.69 1.70 1.72 aes256gcmv1 10.24 10.26 10.29 ascon128av12 15.19 15.19 15.20 ascon128v12 15.36 15.37 15.45 ascon80pqv12 20.71 20.76 20.84 T:xoodyakround3 22.09 22.10 22.11 T:schwaemm256128v2 23.43 23.45 23.55 ascon128abi32v12 29.21 29.23 29.32 T:schwaemm192192v2 32.22 32.37 32.38 T:schwaemm256256v2 33.31 33.36 33.38 T:schwaemm128128v2 33.86 33.92 33.95 ascon128bi32v12 34.23 34.46 34.76 T:isapa128v20 39.05 39.62 39.76 T:grain128aeadv2 40.50 41.02 41.35 T:isapa128av20 47.43 47.46 47.47 romulusn 47.82 47.89 48.12 T:giftcofb128v1 51.86 52.00 52.18 T!!!romulust 70.03 70.10 70.30 T:isapk128av20 76.43 76.47 76.49 T:tinyjambu128v2 77.12 77.19 77.33 romulusm 84.92 88.37 89.43 T:isapk128v20 95.10 95.21 95.40 T:tinyjambu192v2 104.25 104.33 104.40 T:tinyjambu256v2 125.98 126.23 126.82 T:isapxv20 196.32 200.45 201.77 T:elephant200v2 10382.55 10385.63 10393.48 T:elephant176v2 11802.41 11806.41 11811.33 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.00 1.02 1.03 T:aes128gcmv1 1.08 1.10 1.11 aes256gcmv1 10.40 10.41 10.43 ascon128av12 14.99 15.02 15.06 ascon80pqv12 15.07 15.08 15.09 ascon128v12 15.49 15.50 15.54 T:xoodyakround3 21.93 21.98 21.99 T:schwaemm256128v2 23.04 23.17 23.20 ascon128abi32v12 29.17 29.20 29.21 T:schwaemm192192v2 32.14 32.21 32.23 T:schwaemm256256v2 33.21 33.37 33.48 T:schwaemm128128v2 34.07 34.14 34.28 ascon128bi32v12 38.51 38.57 38.62 romulusn 38.85 38.87 38.98 T:grain128aeadv2 48.05 48.14 48.32 T:giftcofb128v1 50.87 51.17 51.45 T:isapa128v20 51.24 51.46 51.49 T:isapa128av20 53.32 53.41 53.48 romulusm 62.10 62.22 62.35 T:tinyjambu128v2 74.61 74.68 74.75 T:tinyjambu192v2 78.54 78.58 78.63 T:tinyjambu256v2 88.63 88.72 88.85 T:isapk128av20 98.47 98.55 98.75 T!!!romulust 114.90 115.00 116.49 T:isapk128v20 148.67 149.42 151.26 T:elephant200v2 169.53 169.66 169.77 T:isapxv20 7752.63 7754.11 7760.94 T:elephant176v2 8849.31 8851.40 8853.37 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.07 1.08 1.10 T:aes128gcmv1 1.11 1.13 1.15 aes256gcmv1 10.28 10.29 10.30 ascon128av12 14.92 14.99 15.03 ascon128v12 14.94 15.02 15.16 ascon80pqv12 15.32 15.34 15.37 T:xoodyakround3 21.93 21.97 21.99 T:schwaemm256128v2 23.06 23.13 23.14 ascon128abi32v12 29.14 29.17 29.21 T:schwaemm192192v2 32.14 32.21 32.24 T:schwaemm256256v2 33.20 33.28 33.39 T:schwaemm128128v2 33.56 33.57 33.57 ascon128bi32v12 38.55 38.59 38.64 romulusn 38.88 39.17 39.19 T:grain128aeadv2 47.94 48.01 48.20 T:giftcofb128v1 50.96 51.18 51.31 T:isapa128v20 51.20 51.39 51.70 T:isapa128av20 53.44 53.50 53.56 romulusm 62.41 62.46 62.50 T:tinyjambu128v2 74.45 74.54 74.59 T:tinyjambu192v2 78.70 78.75 78.78 T:tinyjambu256v2 88.56 88.70 88.81 T:isapk128av20 98.50 98.62 98.77 T!!!romulust 114.51 115.04 115.39 T:isapk128v20 148.58 149.24 151.94 T:elephant200v2 154.71? 169.22? 183.44? T:isapxv20 7753.46 7754.44 7764.89 T:elephant176v2 8842.58 8848.88 8850.01 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.08 1.08 1.10 T:aes128gcmv1 1.13 1.13 1.14 aes256gcmv1 10.29 10.30 10.30 ascon128av12 14.95 15.03 15.04 ascon128v12 14.97 15.05 15.22 ascon80pqv12 15.36 15.38 15.41 T:xoodyakround3 21.93 21.98 22.00 T:schwaemm256128v2 22.99 23.07 23.14 ascon128abi32v12 29.14 29.18 29.23 T:schwaemm192192v2 32.13 32.19 32.24 T:schwaemm256256v2 33.37 33.47 33.55 T:schwaemm128128v2 33.55 33.57 33.66 ascon128bi32v12 34.09 34.19 34.35 T:isapa128v20 38.53 38.55 38.60 romulusn 38.89 39.04 39.26 T:grain128aeadv2 40.68 40.98 41.09 T:isapa128av20 47.98 48.09 48.20 T:giftcofb128v1 51.63 51.69 51.76 T!!!romulust 53.46 53.54 53.57 romulusm 62.39 62.45 62.50 T:tinyjambu128v2 71.03 71.11 71.24 T:isapk128av20 74.46 74.53 74.64 T:tinyjambu192v2 78.72 78.77 78.80 T:tinyjambu256v2 88.20 88.40 88.45 T:isapk128v20 125.93 126.11 126.42 T:isapxv20 148.31 148.70 151.87 T:elephant200v2 7749.19 7751.85 7761.93 T:elephant176v2 8839.20 8848.26 8851.47 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.55 0.56 0.57 T:aes128gcmv1 0.54 0.57 0.58 aes256gcmv1 9.96 10.00 10.02 T:xoodyakround3 10.06 10.06 10.07 ascon128av12 14.80 14.81 14.82 ascon128v12 14.83 14.84 14.86 ascon80pqv12 21.74 21.85 21.88 T:schwaemm256128v2 22.93 22.95 23.07 ascon128abi32v12 29.00 29.05 29.09 T:schwaemm192192v2 29.66 29.73 29.78 romulusn 29.73 29.84 29.89 romulusm 32.03 32.04 32.13 T:schwaemm256256v2 33.05 33.22 33.58 T:schwaemm128128v2 33.64 33.81 34.04 T:isapa128v20 34.04 34.07 34.17 ascon128bi32v12 38.69 38.72 38.96 T:grain128aeadv2 40.88 40.94 41.15 T:isapa128av20 47.88 48.01 48.36 T:giftcofb128v1 48.32 48.41 48.44 T:tinyjambu128v2 50.99 51.18 51.43 T!!!romulust 53.12 53.17 53.24 T:tinyjambu256v2 53.78 53.82 53.84 T:tinyjambu192v2 71.99 72.12 72.18 T:isapk128av20 88.33 88.46 88.77 T:isapk128v20 99.33 100.41 102.05 T:elephant200v2 126.32 126.43 126.80 T:isapxv20 5128.20 5132.75 5140.90 T:elephant176v2 5893.05 5896.12 5900.34 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.54 0.55 0.56 T:aes128gcmv1 0.55 0.56 0.57 aes256gcmv1 9.98 10.00 10.03 T:xoodyakround3 10.30 10.31 10.32 ascon128av12 14.54 14.68 14.96 ascon80pqv12 14.86 14.87 14.88 ascon128v12 21.74 21.84 21.88 T:schwaemm256128v2 22.78 22.82 22.95 ascon128abi32v12 29.00 29.02 29.07 T:schwaemm192192v2 29.68 29.73 29.80 romulusn 29.70 29.78 29.88 romulusm 32.02 32.04 32.15 T:schwaemm256256v2 33.07 33.11 33.21 T:schwaemm128128v2 33.24 33.25 33.38 ascon128bi32v12 33.70 33.84 33.96 T:isapa128v20 38.70 38.72 38.73 T:grain128aeadv2 40.87 40.96 41.15 T:isapa128av20 47.92 48.17 48.34 T:giftcofb128v1 48.35 48.41 48.49 T:tinyjambu128v2 51.25 51.35 51.53 T!!!romulust 53.13 53.20 53.25 T:tinyjambu256v2 53.79 53.85 53.92 T:tinyjambu192v2 71.98 72.10 72.14 T:isapk128av20 88.36 88.51 89.37 T:isapk128v20 100.24 100.41 102.03 T:elephant200v2 125.73 126.15 126.50 T:isapxv20 5124.83 5143.20 5146.26 T:elephant176v2 5891.81 5894.63 5900.64 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.54 0.56 0.56 T:aes128gcmv1 0.55 0.56 0.57 aes256gcmv1 10.00 10.02 10.04 T:xoodyakround3 10.30 10.31 10.33 ascon128av12 14.57 14.72 14.96 ascon80pqv12 14.68 14.88 14.88 ascon128v12 21.76 21.85 21.89 T:schwaemm256128v2 22.69 22.82 22.83 ascon128abi32v12 29.00 29.02 29.07 T:schwaemm192192v2 29.64 29.74 29.79 romulusn 29.77 29.83 29.91 romulusm 32.01 32.05 32.14 T:schwaemm256256v2 33.25 33.26 33.39 ascon128bi32v12 33.11 33.32 33.55 T:schwaemm128128v2 33.65 33.80 34.16 T:isapa128v20 38.71 38.73 38.75 T:grain128aeadv2 40.92 41.00 41.20 T:isapa128av20 47.91 48.05 48.27 T:giftcofb128v1 48.35 48.41 48.54 T:tinyjambu128v2 51.20 51.27 51.49 T!!!romulust 53.10 53.17 53.23 T:tinyjambu256v2 53.80 53.82 53.86 T:tinyjambu192v2 72.04 72.10 72.38 T:isapk128av20 88.31 88.40 88.48 T:isapk128v20 99.50 100.25 102.33 T:elephant200v2 125.92 126.17 126.57 T:isapxv20 5128.30 5133.36 5138.58 T:elephant176v2 5891.39 5896.80 5898.90 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.15 1.15 1.16 T:aes128gcmv1 1.25 1.26 1.27 aes256gcmv1 10.67 10.68 10.69 ascon128av12 15.30 15.31 15.32 ascon128v12 15.31 15.35 15.48 ascon80pqv12 15.66 15.67 15.68 T:xoodyakround3 22.57 22.61 22.62 T:schwaemm256128v2 23.59 23.61 23.68 ascon128abi32v12 29.85 29.87 29.90 T:schwaemm192192v2 33.01 33.08 33.10 T:schwaemm256256v2 33.67 33.78 33.91 T:schwaemm128128v2 34.63 34.64 34.79 ascon128bi32v12 38.96 38.99 39.04 romulusn 39.29 39.34 39.41 T:grain128aeadv2 48.51 48.60 48.63 T:giftcofb128v1 53.69 53.76 53.80 romulusm 54.83 55.14 55.38 T:isapa128av20 62.62 62.70 62.79 T:tinyjambu128v2 74.57 74.74 74.98 T:isapa128v20 75.17 75.20 75.22 T:tinyjambu192v2 79.10 79.16 79.20 T:tinyjambu256v2 100.09 100.17 100.38 T!!!romulust 106.41 106.44 106.50 T:isapk128av20 152.00 152.36 154.77 T:elephant200v2 203.87 203.91 205.49 T:isapk128v20 278.10 278.18 278.38 T:isapxv20 7812.86 7814.62 7822.11 T:elephant176v2 8946.78 8947.72 8953.08 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.22 1.23 1.23 T:aes128gcmv1 1.28 1.29 1.30 aes256gcmv1 10.54 10.55 10.56 ascon128av12 15.26 15.26 15.27 ascon128v12 15.21 15.32 15.41 ascon80pqv12 15.47 15.48 15.49 T:xoodyakround3 22.57 22.62 22.64 T:schwaemm256128v2 23.58 23.58 23.64 ascon128abi32v12 29.81 29.84 29.86 T:schwaemm192192v2 33.01 33.08 33.11 T:schwaemm256256v2 33.69 33.79 33.83 T:schwaemm128128v2 34.10 34.11 34.11 ascon128bi32v12 38.93 38.96 38.98 romulusn 39.30 39.36 39.63 T:grain128aeadv2 48.47 48.56 48.68 T:giftcofb128v1 53.96 54.01 54.07 romulusm 54.90 55.04 55.14 T:isapa128av20 62.88 62.91 62.94 T:tinyjambu128v2 74.82 74.87 75.11 T:isapa128v20 75.08 75.13 75.18 T:tinyjambu192v2 79.28 79.33 79.41 T:tinyjambu256v2 100.21 100.26 100.37 T!!!romulust 106.42 106.50 106.56 T:isapk128av20 151.93 152.42 154.74 T:elephant200v2 203.85 203.87 203.91 T:isapk128v20 277.56 277.68 295.57 T:isapxv20 7811.44 7815.32 7822.43 T:elephant176v2 8947.62 8948.81 8949.88 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.22 1.22 1.22 T:aes128gcmv1 1.28 1.29 1.29 aes256gcmv1 10.54 10.55 10.56 ascon128av12 15.18 15.26 15.27 ascon128v12 15.20 15.27 15.38 ascon80pqv12 15.52 15.52 15.54 T:xoodyakround3 22.58 22.62 22.63 T:schwaemm256128v2 23.57 23.58 23.64 ascon128abi32v12 29.80 29.85 29.87 T:schwaemm192192v2 33.02 33.08 33.11 T:schwaemm256256v2 33.60 33.87 33.97 T:schwaemm128128v2 34.07 34.11 34.22 ascon128bi32v12 38.95 38.97 38.99 romulusn 39.35 39.61 39.63 T:grain128aeadv2 42.91 43.02 43.10 T:isapa128av20 46.24 46.30 46.39 T:isapa128v20 48.42 48.50 48.67 T:giftcofb128v1 53.10 53.15 53.27 T!!!romulust 53.97 53.99 54.07 romulusm 62.90 62.93 62.94 T:tinyjambu128v2 75.10 75.14 75.27 T:tinyjambu192v2 79.29 79.32 79.35 T:tinyjambu256v2 81.60 81.67 81.71 T:isapk128av20 134.73 134.76 135.35 T:isapk128v20 151.94 152.29 154.66 T:elephant200v2 181.40 181.58 181.75 T:isapxv20 7812.13 7815.13 7821.08 T:elephant176v2 8943.57 8949.18 8951.03 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 7.00 7.22 7.40 aes256gcmv1 7.60 7.67 7.76 T:aes128gcmv1 16.13 16.20 16.57 ascon128av12 20.34 20.45 20.67 ascon128v12 20.46 20.67 20.80 ascon80pqv12 22.78 23.06 23.34 T:xoodyakround3 34.96 34.98 35.69 ascon128abi32v12 37.00 37.12 37.33 T:schwaemm256128v2 43.70 43.91 44.20 T:schwaemm128128v2 45.91 46.05 46.23 ascon128bi32v12 47.08 47.18 47.51 romulusn 48.30 48.43 48.63 T:schwaemm192192v2 49.40 49.46 49.73 T:grain128aeadv2 52.55 52.73 52.82 T:schwaemm256256v2 58.98 59.19 59.35 T:giftcofb128v1 62.73 62.90 63.07 romulusm 73.76 73.83 74.07 T:tinyjambu128v2 87.80 88.13 88.32 T:tinyjambu192v2 92.35 92.52 92.77 T:tinyjambu256v2 136.38 136.57 137.66 T!!!romulust 140.62 141.14 141.38 T:isapa128av20 216.12 216.84 219.38 T:elephant200v2 497.28 497.46 498.16 T:isapk128av20 612.28 616.48 618.05 T:isapa128v20 2224.17 2225.04 2240.73 T:isapk128v20 2741.05 2741.45 2743.69 T:isapxv20 9740.89 9741.84 9745.89 T:elephant176v2 11971.94 11983.60 11985.56 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.78 6.84 6.97 aes256gcmv1 7.51 7.57 7.64 T:aes128gcmv1 16.04 16.08 16.44 ascon128av12 20.23 20.34 20.60 ascon128v12 20.34 20.45 20.62 ascon80pqv12 22.46 22.58 22.77 T:xoodyakround3 35.12 35.28 35.65 ascon128abi32v12 37.14 37.29 37.34 T:schwaemm256128v2 43.70 43.86 44.06 T:schwaemm128128v2 45.52 45.54 46.05 ascon128bi32v12 47.37 47.45 47.76 romulusn 48.42 48.52 48.60 T:schwaemm192192v2 49.46 49.48 49.71 T:grain128aeadv2 52.71 52.77 52.84 T:schwaemm256256v2 59.50 59.59 59.77 T:giftcofb128v1 65.38 65.48 65.73 romulusm 73.86 74.06 74.17 T:tinyjambu128v2 87.79 87.99 88.22 T:tinyjambu192v2 92.57 92.67 92.90 T:tinyjambu256v2 136.98 137.23 138.05 T!!!romulust 141.31 141.51 141.92 T:isapa128av20 215.80 216.64 219.51 T:elephant200v2 497.72 498.25 498.88 T:isapk128av20 615.41 616.45 620.22 T:isapa128v20 2224.30 2225.57 2242.94 T:isapk128v20 2734.87? 2745.14? 3174.97? T:isapxv20 9731.57 9736.78 9741.77 T:elephant176v2 11980.98 11984.52 11988.31 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.70 6.73 6.82 aes256gcmv1 7.41 7.52 7.55 T:aes128gcmv1 15.84 15.90 16.02 ascon128av12 20.12 20.17 20.20 ascon128v12 20.29 20.41 20.54 ascon80pqv12 22.81 22.98 23.04 T:xoodyakround3 35.05 35.16 35.21 ascon128abi32v12 37.13 37.16 37.25 T:schwaemm256128v2 43.48 43.68 43.88 T:schwaemm128128v2 45.49 45.59 45.73 ascon128bi32v12 47.37 47.55 47.63 romulusn 48.43 48.46 48.65 T:schwaemm192192v2 49.40 49.46 49.52 T:grain128aeadv2 52.61 52.70 52.82 T:schwaemm256256v2 59.45 59.53 59.85 T:giftcofb128v1 65.27 65.43 65.57 romulusm 73.82 74.01 74.12 T:tinyjambu128v2 87.66 87.84 88.14 T:tinyjambu192v2 88.38 88.66 88.87 T!!!romulust 91.10 91.61 92.11 T:isapa128av20 92.37 92.57 92.75 T:tinyjambu256v2 215.74 216.62 219.48 T:elephant200v2 309.38 309.98 310.34 T:isapk128av20 319.49 322.44 326.41 T:isapa128v20 1181.20 1181.76 1182.30 T:isapk128v20 1430.34 1434.34 1436.04 T:isapxv20 9726.45 9737.36 9745.16 T:elephant176v2 11976.66 11980.27 11982.99 T:elephant160v2