VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; know, supercop-20260217

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.40 1.40 1.41 T:aes128gcmv1 1.66 1.67 1.67 aes256gcmv1 7.41 7.43 7.45 ascon128av12 10.78 10.90 11.02 ascon128v12 10.94 11.05 11.09 ascon80pqv12 13.90 13.95 14.05 ascon128abi32v12 15.60 16.17 16.21 T:xoodyakround3 18.01 18.06 18.12 T:schwaemm256128v2 21.06 21.30 21.34 ascon128bi32v12 22.60 22.73 22.76 T:schwaemm256256v2 24.84 24.90 25.05 T:grain128aeadv2 23.94 24.92 25.16 T:schwaemm192192v2 26.04 26.08 26.15 T:schwaemm128128v2 38.53 38.56 38.59 romulusn 40.54 40.61 40.66 T:isapa128av20 41.38 41.43 41.48 T:giftcofb128v1 41.57 41.65 41.73 T:isapa128v20 60.20 60.27 60.35 T:tinyjambu128v2 62.70 62.81 62.93 romulusm 69.57 69.78 69.96 T:isapk128av20 76.58 76.59 76.60 T:tinyjambu192v2 80.09 80.16 80.25 T:tinyjambu256v2 92.23 92.53 92.95 T:isapk128v20 125.56 125.64 125.72 romulust 176.61 176.73 176.93 T:elephant200v2 191.34 191.44 191.52 T:isapxv20 7632.46 7638.49 7641.91 T:elephant176v2 8182.23 8185.03 8187.53 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.44 1.45 1.46 T:aes128gcmv1 1.57 1.57 1.58 aes256gcmv1 7.34 7.44 7.48 ascon128av12 10.88 10.90 10.94 ascon80pqv12 10.92 10.96 10.99 ascon128v12 13.88 13.96 14.00 ascon128abi32v12 15.79 15.88 15.91 T:xoodyakround3 17.95 18.00 18.08 T:schwaemm256128v2 20.94 20.98 21.27 ascon128bi32v12 22.58 22.73 22.76 T:schwaemm256256v2 23.69 23.77 23.85 T:schwaemm192192v2 25.49 25.62 25.66 T:grain128aeadv2 26.04 26.11 26.19 T:schwaemm128128v2 38.52 38.55 38.58 romulusn 40.42 40.56 40.65 T:isapa128av20 41.37 41.42 41.47 T:giftcofb128v1 41.59 41.67 41.75 T:isapa128v20 60.43 60.52 60.62 T:tinyjambu128v2 62.77 62.82 62.86 romulusm 69.57 69.72 69.91 T:isapk128av20 76.56 76.58 76.61 T:tinyjambu192v2 80.19 80.24 80.30 T:tinyjambu256v2 92.29 92.76 93.12 T:isapk128v20 125.58 125.68 125.78 romulust 176.64 176.77 176.90 T:elephant200v2 172.67? 207.19? 215.00? T:isapxv20 7632.79 7640.04 7642.69 T:elephant176v2 8181.39 8185.07 8188.48 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.44 1.45 1.45 T:aes128gcmv1 1.57 1.58 1.58 aes256gcmv1 7.30 7.41 7.47 ascon128av12 10.87 10.91 10.95 ascon80pqv12 10.92 10.95 10.98 ascon128v12 13.88 13.96 14.01 ascon128abi32v12 15.88 15.91 15.93 T:xoodyakround3 17.96 18.03 18.12 T:schwaemm256128v2 20.42 20.47 20.52 T:isapa128v20 20.95 21.02 21.26 ascon128bi32v12 22.58 22.72 22.76 T:schwaemm256256v2 23.68 23.75 23.84 T:schwaemm192192v2 25.42 25.61 25.64 T:grain128aeadv2 26.02 26.09 26.15 T:schwaemm128128v2 27.36 27.40 27.44 T:isapa128av20 38.53 38.57 38.60 romulusn 41.38 41.41 41.47 T:giftcofb128v1 42.97 43.01 43.05 romulust 46.23 46.33 46.44 T:isapk128av20 57.70 57.94 58.21 T:isapk128v20 60.45 60.53 60.66 T:tinyjambu128v2 62.78 62.82 62.88 romulusm 76.56 76.57 76.61 T:tinyjambu192v2 80.21 80.27 80.32 T:tinyjambu256v2 110.68? 112.09? 127.00? T:isapxv20 176.60 176.70 176.81 T:elephant200v2 7633.60 7640.05 7642.18 T:elephant176v2 8182.05 8185.07 8186.72 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.90 0.90 0.91 T:aes128gcmv1 1.03 1.03 1.04 aes256gcmv1 7.42 7.44 7.45 ascon128av12 10.81 10.84 10.87 ascon128v12 10.90 10.92 10.94 ascon80pqv12 12.17 12.21 12.23 T:xoodyakround3 13.92 13.94 13.96 ascon128abi32v12 17.87 17.91 17.96 T:schwaemm256128v2 20.79 20.99 21.05 ascon128bi32v12 22.48 22.66 22.73 T:schwaemm256256v2 23.68 24.03 24.12 T:schwaemm192192v2 24.89 24.95 25.03 T:grain128aeadv2 25.93 25.98 26.04 T:schwaemm128128v2 30.82 30.86 30.90 T:isapa128v20 31.13 31.15 31.18 romulusn 33.94 33.99 34.04 T:isapa128av20 41.32 41.35 41.38 T:giftcofb128v1 43.11 43.15 43.20 romulusm 49.32 49.37 49.41 T:tinyjambu128v2 57.95 58.08 58.20 T:isapk128av20 59.62 59.62 59.63 T:tinyjambu192v2 60.66 60.69 60.73 T:tinyjambu256v2 75.33 75.52 75.77 T:isapk128v20 84.08 84.13 84.18 romulust 132.67 132.73 132.81 T:elephant200v2 152.21 152.30 152.47 T:isapxv20 5701.03 5704.47 5707.14 T:elephant176v2 6136.03 6138.43 6141.53 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.93 0.93 0.93 T:aes128gcmv1 0.99 0.99 0.99 aes256gcmv1 7.24 7.26 7.30 ascon128av12 10.82 10.85 10.86 ascon80pqv12 10.89 10.91 10.92 ascon128v12 12.05 12.06 12.08 T:xoodyakround3 13.92 13.95 13.97 ascon128abi32v12 17.82 17.89 17.93 T:schwaemm256128v2 20.87 20.94 21.04 ascon128bi32v12 22.48 22.65 22.68 T:schwaemm256256v2 23.49 23.55 23.62 T:schwaemm192192v2 25.16 25.21 25.23 T:grain128aeadv2 25.94 25.99 26.05 T:schwaemm128128v2 30.84 30.89 30.93 T:isapa128v20 31.13 31.16 31.23 romulusn 33.94 33.99 34.04 T:isapa128av20 41.36 41.39 41.42 T:giftcofb128v1 43.15 43.17 43.21 romulusm 49.44 49.48 49.53 T:tinyjambu128v2 57.95 58.05 58.16 T:isapk128av20 59.59 59.62 59.65 T:tinyjambu192v2 60.62 60.71 60.77 T:tinyjambu256v2 75.30 75.49 75.73 T:isapk128v20 84.08 84.12 84.17 romulust 132.70 132.75 132.81 T:elephant200v2 143.66? 163.49? 168.74? T:isapxv20 5701.81 5705.34 5707.36 T:elephant176v2 6136.39 6138.85 6141.44 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.93 0.93 0.93 T:aes128gcmv1 0.99 0.99 0.99 aes256gcmv1 7.24 7.26 7.28 ascon128av12 10.83 10.85 10.87 ascon80pqv12 10.88 10.90 10.92 ascon128v12 12.05 12.07 12.09 T:xoodyakround3 13.94 13.95 13.97 ascon128abi32v12 17.83 17.88 17.94 T:schwaemm256128v2 20.27 20.29 20.32 T:isapa128v20 20.88 20.95 21.06 ascon128bi32v12 22.50 22.65 22.68 T:schwaemm256256v2 23.50 23.55 23.61 T:schwaemm192192v2 25.18 25.21 25.23 T:grain128aeadv2 25.92 25.98 26.04 T:schwaemm128128v2 27.33 27.36 27.39 T:isapa128av20 31.14 31.16 31.21 romulusn 41.34 41.38 41.43 T:giftcofb128v1 42.76 42.79 42.82 romulust 43.14 43.17 43.20 romulusm 46.31 46.39 46.50 T:isapk128av20 49.47 49.51 49.56 T:tinyjambu128v2 57.97 58.13 58.26 T:isapk128v20 59.59 59.60 59.62 T:tinyjambu192v2 60.69 60.72 60.76 T:tinyjambu256v2 111.53? 112.82? 128.07? T:isapxv20 132.71 132.77 132.84 T:elephant200v2 5702.06 5704.30 5706.41 T:elephant176v2 6135.54 6138.73 6140.69 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.40 0.40 0.41 T:aes128gcmv1 0.40 0.40 0.41 aes256gcmv1 7.41 7.43 7.45 ascon128av12 8.26 8.28 8.31 T:xoodyakround3 10.83 10.85 10.88 ascon128v12 10.87 10.90 10.93 ascon80pqv12 13.90 13.92 13.94 ascon128abi32v12 17.73 17.79 17.87 T:schwaemm256128v2 20.00 20.06 20.11 T:isapa128v20 20.69 20.72 21.01 ascon128bi32v12 22.36 22.51 22.55 T:schwaemm256256v2 23.20 23.26 23.34 T:schwaemm192192v2 23.51 23.57 23.63 romulusm 23.71 23.73 23.76 romulusn 24.88 24.90 24.91 T:grain128aeadv2 25.77 25.86 25.93 T:schwaemm128128v2 27.36 27.40 27.44 T:isapa128av20 38.42 38.46 38.51 T:tinyjambu128v2 41.17 41.21 41.25 T:tinyjambu256v2 41.29 41.33 41.38 T:giftcofb128v1 42.54 42.58 42.64 romulust 42.65 42.66 42.66 T:tinyjambu192v2 46.13 46.33 46.46 T:isapk128av20 57.94 58.17 58.46 T:isapk128v20 89.49 89.55 89.62 T:elephant200v2 113.18 113.25 113.59 T:isapxv20 3771.13 3773.73 3774.90 T:elephant176v2 4089.94 4090.87 4094.38 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.41 0.41 0.42 T:aes128gcmv1 0.41 0.41 0.42 aes256gcmv1 7.01 7.05 7.28 ascon128av12 8.24 8.27 8.29 T:xoodyakround3 10.75 10.78 10.81 ascon80pqv12 10.82 10.84 10.88 ascon128v12 13.90 13.93 13.95 ascon128abi32v12 17.72 17.79 17.87 T:schwaemm256128v2 20.01 20.08 20.15 T:isapa128v20 20.79 20.92 21.10 ascon128bi32v12 22.35 22.52 22.55 T:schwaemm256256v2 23.23 23.29 23.34 T:schwaemm192192v2 23.53 23.56 23.60 romulusm 23.71 23.74 23.77 romulusn 24.77 24.79 24.83 T:grain128aeadv2 25.76 25.85 25.92 T:schwaemm128128v2 27.35 27.39 27.43 T:isapa128av20 38.45 38.48 38.52 T:tinyjambu128v2 41.16 41.20 41.25 T:tinyjambu256v2 41.29 41.34 41.40 T:giftcofb128v1 42.55 42.60 42.65 romulust 42.61 42.66 42.71 T:tinyjambu192v2 46.17 46.28 46.40 T:isapk128av20 58.09 58.34 58.56 T:isapk128v20 89.49 89.54 89.60 T:elephant200v2 111.90? 113.31? 128.34? T:isapxv20 3771.49 3773.40 3774.48 T:elephant176v2 4089.75 4091.11 4093.77 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.40 0.41 0.41 aes256gcmv1 0.41 0.41 0.41 T:aes128gcmv1 7.01 7.05 7.08 ascon128av12 8.24 8.28 8.31 T:xoodyakround3 10.74 10.78 10.80 ascon80pqv12 10.82 10.85 10.87 ascon128v12 13.90 13.93 13.95 ascon128abi32v12 17.74 17.80 17.87 T:schwaemm256128v2 19.99 20.05 20.12 T:isapa128v20 20.82 21.00 21.13 ascon128bi32v12 22.35 22.51 22.55 T:schwaemm256256v2 23.22 23.29 23.35 T:schwaemm192192v2 23.54 23.58 23.61 romulusm 23.70 23.73 23.76 romulusn 24.37 24.78 24.80 T:grain128aeadv2 25.78 25.85 25.92 T:schwaemm128128v2 27.35 27.41 27.46 T:isapa128av20 38.43 38.48 38.52 T:tinyjambu128v2 41.15 41.19 41.22 T:tinyjambu256v2 41.26 41.32 41.38 T:giftcofb128v1 42.54 42.58 42.63 romulust 42.62 42.65 42.69 T:tinyjambu192v2 46.18 46.28 46.38 T:isapk128av20 58.09 58.29 58.48 T:isapk128v20 89.51 89.55 89.61 T:elephant200v2 111.61? 113.15? 129.57? T:isapxv20 3770.19 3773.66 3774.73 T:elephant176v2 4089.92 4092.05 4093.76 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.06 1.06 1.06 T:aes128gcmv1 1.20 1.21 1.21 aes256gcmv1 7.60 7.61 7.62 ascon128av12 10.99 11.01 11.03 ascon128v12 11.07 11.09 11.11 ascon80pqv12 12.06 12.28 12.34 T:xoodyakround3 14.25 14.26 14.28 ascon128abi32v12 18.42 18.46 18.51 T:schwaemm256128v2 21.09 21.18 21.33 ascon128bi32v12 23.12 23.27 23.29 T:schwaemm256256v2 24.18 24.57 24.66 T:schwaemm192192v2 25.33 25.38 25.42 T:grain128aeadv2 26.31 26.35 26.41 T:schwaemm128128v2 31.45 31.47 31.49 romulusn 36.41 36.44 36.48 T:isapa128av20 41.71 41.74 41.77 T:giftcofb128v1 43.45 43.48 43.54 romulusm 45.52 45.55 45.59 T:isapa128v20 49.71 49.75 49.79 T:tinyjambu128v2 60.05 60.06 60.13 T:tinyjambu192v2 61.14 61.17 61.19 T:tinyjambu256v2 65.06 65.13 65.23 T:isapk128av20 85.39 85.44 85.48 romulust 130.94 131.05 131.18 T:isapk128v20 135.49 135.53 135.56 T:elephant200v2 247.73 247.75 247.78 T:isapxv20 5744.64 5747.57 5750.90 T:elephant176v2 6205.53 6207.29 6209.04 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.08 1.08 1.08 T:aes128gcmv1 1.16 1.17 1.17 aes256gcmv1 7.43 7.44 7.46 ascon128av12 11.01 11.02 11.04 ascon80pqv12 11.07 11.08 11.10 ascon128v12 12.19 12.20 12.21 T:xoodyakround3 14.25 14.27 14.28 ascon128abi32v12 18.41 18.44 18.48 T:schwaemm256128v2 21.20 21.33 21.37 ascon128bi32v12 23.11 23.26 23.28 T:schwaemm256256v2 24.08 24.11 24.16 T:schwaemm192192v2 25.57 25.61 25.63 T:grain128aeadv2 26.31 26.34 26.37 T:schwaemm128128v2 31.45 31.47 31.49 romulusn 36.41 36.44 36.47 T:isapa128av20 41.76 41.79 41.81 T:giftcofb128v1 43.54 43.56 43.59 romulusm 45.52 45.55 45.61 T:isapa128v20 49.84 49.88 49.94 T:tinyjambu128v2 60.04 60.07 60.13 T:tinyjambu192v2 61.13 61.19 61.23 T:tinyjambu256v2 65.01 65.09 65.15 T:isapk128av20 85.39 85.42 85.47 romulust 130.92 131.07 131.25 T:isapk128v20 135.48 135.53 135.57 T:elephant200v2 250.62 263.42 263.84 T:isapxv20 5744.29 5746.93 5758.62 T:elephant176v2 6204.64 6206.44 6210.33 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.08 1.08 1.08 T:aes128gcmv1 1.16 1.17 1.17 aes256gcmv1 7.44 7.45 7.49 ascon128av12 11.01 11.02 11.04 ascon80pqv12 11.06 11.08 11.09 ascon128v12 12.08 12.21 12.22 T:xoodyakround3 14.25 14.27 14.29 ascon128abi32v12 18.42 18.46 18.51 T:schwaemm256128v2 21.23 21.32 21.37 ascon128bi32v12 23.12 23.26 23.28 T:schwaemm256256v2 24.04 24.10 24.16 T:schwaemm192192v2 25.60 25.62 25.64 T:grain128aeadv2 26.29 26.33 26.39 T:schwaemm128128v2 27.87 27.89 27.91 T:isapa128v20 28.74 28.78 28.81 T:isapa128av20 31.45 31.47 31.49 romulusn 41.76 41.79 41.82 T:giftcofb128v1 43.55 43.57 43.60 romulusm 44.01 44.04 44.08 romulust 49.82 49.88 49.93 T:tinyjambu128v2 50.38 50.44 50.53 T:isapk128av20 60.03 60.05 60.08 T:tinyjambu192v2 61.17 61.20 61.23 T:tinyjambu256v2 86.56 86.67 86.85 T:isapk128v20 135.49 135.54 135.58 T:elephant200v2 161.50 161.56 175.43 T:isapxv20 5744.09 5745.96 5749.26 T:elephant176v2 6204.27 6206.94 6210.08 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.57 6.61 6.64 T:aes128gcmv1 7.38 7.42 7.47 aes256gcmv1 11.49 11.58 11.86 ascon128av12 14.79 14.87 15.07 ascon80pqv12 14.78 14.87 15.10 ascon128v12 17.68 17.77 18.04 T:xoodyakround3 21.37 21.49 21.84 ascon128abi32v12 27.84 27.97 28.26 ascon128bi32v12 30.00 30.30 30.73 T:schwaemm256128v2 33.75 34.05 34.42 T:schwaemm128128v2 34.85 34.93 35.01 T:grain128aeadv2 36.96 37.15 37.38 T:schwaemm256256v2 38.80 38.87 38.99 romulusn 38.88 39.15 39.55 T:schwaemm192192v2 50.56 50.73 51.03 T:giftcofb128v1 50.63 50.78 51.00 romulusm 58.44 58.65 58.94 T:tinyjambu128v2 70.08 70.09 70.13 T:tinyjambu192v2 71.74 71.86 72.11 T:tinyjambu256v2 93.55 93.83 94.04 T:isapa128av20 115.20 115.40 115.76 romulust 192.09 192.45 192.90 T:elephant200v2 210.15 211.08 212.37 T:isapk128av20 381.39 381.78 382.30 T:isapa128v20 1385.29 1387.24 1389.53 T:isapk128v20 2414.99 2415.38 2415.83 T:isapxv20 7148.76 7149.64 7151.11 T:elephant176v2 8305.61 8307.12 8313.27 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.29 6.33 6.36 T:aes128gcmv1 7.01 7.03 7.07 aes256gcmv1 11.47 11.63 11.91 ascon128av12 14.79 14.90 15.13 ascon80pqv12 14.91 14.98 15.12 ascon128v12 17.68 17.82 18.05 T:xoodyakround3 21.39 21.49 21.80 ascon128abi32v12 28.10 28.19 28.57 ascon128bi32v12 29.96 30.18 30.58 T:schwaemm256128v2 33.67 33.81 34.13 T:schwaemm128128v2 35.07 35.15 35.33 T:grain128aeadv2 37.01 37.17 37.37 T:schwaemm256256v2 38.91 39.03 39.17 romulusn 38.98 39.26 39.60 T:schwaemm192192v2 50.90 51.08 51.28 T:giftcofb128v1 52.10 52.23 52.42 romulusm 58.58 58.75 58.97 T:tinyjambu128v2 70.10 70.15 70.19 T:tinyjambu192v2 71.67 71.79 71.97 T:tinyjambu256v2 93.15 93.37 93.51 T:isapa128av20 115.07 115.24 115.49 romulust 192.11 192.43 192.82 T:elephant200v2 210.61 211.22 212.31 T:isapk128av20 381.52 381.95 382.56 T:isapa128v20 1385.57 1387.23 1389.65 T:isapk128v20 2421.16? 2437.50? 2734.52? T:isapxv20 7149.83 7151.35 7153.86 T:elephant176v2 8289.06 8307.11 8309.69 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.28 6.31 6.34 T:aes128gcmv1 7.00 7.02 7.07 aes256gcmv1 11.48 11.60 11.79 ascon128av12 14.78 14.90 15.07 ascon80pqv12 14.86 14.95 15.14 ascon128v12 17.79 17.90 18.09 T:xoodyakround3 21.44 21.53 21.60 ascon128abi32v12 28.03 28.16 28.35 ascon128bi32v12 29.92 30.19 30.57 T:schwaemm256128v2 33.62 33.83 34.17 T:schwaemm128128v2 35.07 35.12 35.22 T:grain128aeadv2 37.01 37.20 37.33 T:schwaemm256256v2 38.93 39.02 39.12 romulusn 38.83 39.07 39.38 T:schwaemm192192v2 50.84 50.98 51.13 T:giftcofb128v1 52.12 52.24 52.42 romulusm 58.59 58.74 58.90 T:tinyjambu128v2 60.46 60.59 60.76 T:isapa128av20 70.11 70.14 70.17 T:tinyjambu192v2 71.65 71.76 71.88 T:tinyjambu256v2 72.00 72.13 72.37 romulust 131.67 132.46 133.42 T:isapk128av20 192.18 192.43 192.74 T:elephant200v2 200.96 201.21 201.61 T:isapa128v20 725.53 726.54 727.75 T:isapk128v20 1263.18 1263.87 1283.85 T:isapxv20 7149.35 7150.13 7151.43 T:elephant176v2 8306.75 8308.35 8311.42 T:elephant160v2