VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Redwood Cove (a06a4-40); 2023 Intel Core Ultra 5 125H, P cores; 4 x 1200MHz; meteor,big, supercop-20260330

[Page version: 20260413 04:20:10]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.94 0.95 0.96 T:aes128gcmv1 1.06 1.07 1.09 aes256gcmv1 6.71 6.75 6.79 ascon128av12 9.99 10.03 10.06 ascon128v12 10.00 10.03 10.08 ascon80pqv12 13.09 13.16 13.26 T:schwaemm256128v2 13.10 13.17 13.28 ascon128abi32v12 14.14 14.22 14.27 T:xoodyakround3 17.17 17.30 17.40 T:schwaemm192192v2 18.21 18.32 18.44 T:schwaemm256256v2 18.89 18.97 19.20 T:schwaemm128128v2 19.79 19.85 19.92 ascon128bi32v12 23.60 23.64 23.68 T:grain128aeadv2 32.83 32.88 32.96 T:giftcofb128v1 38.40 38.50 38.61 T:isapa128v20 38.29 38.90 38.98 romulusn 39.28 39.45 39.55 T:isapa128av20 55.04 55.28 55.51 T:isapk128av20 62.71 62.80 62.89 romulusm 65.59 65.63 65.67 T:tinyjambu128v2 76.05 76.71 77.52 T:isapk128v20 77.89 78.04 78.11 T:tinyjambu192v2 84.02 84.05 84.07 T:tinyjambu256v2 129.46 129.54 129.63 romulust 122.69? 155.82? 168.42? T:isapxv20 162.14 162.47 162.99 T:elephant200v2 4852.18 4862.58 4873.60 T:elephant176v2 5597.30 5654.09 5683.80 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.69 0.70 0.71 T:aes128gcmv1 0.80 0.82 0.83 aes256gcmv1 6.56 6.67 6.72 ascon128av12 9.91 10.03 10.13 ascon128v12 10.01 10.09 10.13 ascon80pqv12 13.00 13.03 13.08 ascon128abi32v12 13.11 13.18 13.24 T:schwaemm256128v2 14.05 14.10 14.16 T:xoodyakround3 17.21 17.30 17.39 T:schwaemm192192v2 18.20 18.30 18.47 T:schwaemm256256v2 18.89 18.97 19.10 T:schwaemm128128v2 19.52 19.59 19.66 ascon128bi32v12 23.09 23.11 23.14 T:grain128aeadv2 33.07 33.13 33.24 T:giftcofb128v1 38.34 38.44 38.59 T:isapa128v20 36.76 38.86 38.92 romulusn 39.31 39.50 39.58 T:isapa128av20 55.03 55.35 55.59 T:isapk128av20 62.90 62.96 63.01 romulusm 65.30 65.60 65.69 T:tinyjambu128v2 75.89 76.90 78.24 T:isapk128v20 77.89 78.04 78.08 T:tinyjambu192v2 83.91 84.04 84.10 T:tinyjambu256v2 129.43 129.55 129.67 romulust 131.79? 141.70? 163.83? T:isapxv20 162.66 162.97 163.27 T:elephant200v2 4855.28 4865.36 4895.10 T:elephant176v2 5603.75 5637.73 5675.15 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.68 0.69 0.71 T:aes128gcmv1 0.80 0.81 0.83 aes256gcmv1 6.66 6.70 6.74 ascon128av12 9.88 9.96 10.12 ascon128v12 10.05 10.11 10.15 ascon80pqv12 13.01 13.05 13.09 ascon128abi32v12 13.13 13.19 13.26 T:schwaemm256128v2 14.06 14.11 14.16 T:xoodyakround3 17.24 17.33 17.42 T:schwaemm192192v2 18.18 18.27 18.38 T:schwaemm256256v2 18.91 18.96 18.99 T:schwaemm128128v2 18.89 18.96 19.04 T:isapa128v20 19.54 19.62 19.98 ascon128bi32v12 23.08 23.12 23.15 T:grain128aeadv2 26.33 26.38 26.44 T:isapa128av20 33.05 33.13 33.20 T:giftcofb128v1 35.55 35.74 35.96 T:isapk128av20 38.82 38.86 38.91 romulusn 44.43 44.52 44.60 romulust 48.56 48.83 49.70 T:isapk128v20 62.88 62.94 63.00 romulusm 65.57 65.62 65.66 T:tinyjambu128v2 77.90 78.04 78.09 T:tinyjambu192v2 83.91 84.02 84.11 T:tinyjambu256v2 81.30 86.99 90.14 T:isapxv20 162.50 162.95 163.35 T:elephant200v2 4850.45 4860.88 4873.79 T:elephant176v2 5552.18 5650.02 5700.18 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.62 0.64 0.65 T:aes128gcmv1 0.69 0.70 0.71 aes256gcmv1 6.69 6.72 6.74 ascon128av12 9.95 9.98 10.01 ascon80pqv12 9.99 10.03 10.05 ascon128v12 10.89 10.92 10.95 T:xoodyakround3 13.04 13.09 13.14 T:schwaemm256128v2 13.29 13.32 13.36 ascon128abi32v12 17.14 17.22 17.30 T:schwaemm192192v2 18.11 18.18 18.26 T:schwaemm256256v2 18.82 18.86 18.91 T:schwaemm128128v2 20.03 20.06 20.12 ascon128bi32v12 23.62 23.65 23.67 T:grain128aeadv2 28.73 28.79 28.85 T:isapa128v20 31.16 31.20 31.26 romulusn 32.56 32.69 33.16 T:isapa128av20 32.82 32.87 32.90 T:giftcofb128v1 42.91 42.96 43.01 romulusm 45.69 45.83 45.94 T:isapk128av20 53.58 53.61 55.15 T:tinyjambu128v2 60.28 60.72 61.30 T:isapk128v20 60.92 60.98 61.06 T:tinyjambu192v2 63.40 63.43 63.47 T:tinyjambu256v2 87.08 87.14 87.18 romulust 103.19? 119.77? 127.45? T:isapxv20 120.93 121.18 121.50 T:elephant200v2 3625.38 3638.32 3655.70 T:elephant176v2 4182.72 4211.52 4249.75 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.50 0.50 0.51 T:aes128gcmv1 0.56 0.57 0.58 aes256gcmv1 6.64 6.68 6.71 ascon128av12 9.92 9.96 10.02 ascon80pqv12 9.93 9.99 10.05 ascon128v12 10.84 10.86 10.89 T:xoodyakround3 13.03 13.08 13.16 T:schwaemm256128v2 13.23 13.27 13.30 ascon128abi32v12 17.18 17.24 17.31 T:schwaemm192192v2 18.10 18.19 18.26 T:schwaemm256256v2 18.82 18.86 18.89 T:schwaemm128128v2 19.89 19.94 19.97 ascon128bi32v12 23.37 23.40 23.43 T:grain128aeadv2 28.73 28.79 28.85 T:isapa128v20 31.15 31.18 31.22 romulusn 32.91 32.97 33.02 T:giftcofb128v1 33.22 33.41 33.53 T:isapa128av20 43.05 43.09 43.14 romulusm 45.72 45.84 45.98 T:isapk128av20 53.58 53.60 53.64 T:tinyjambu128v2 60.36 60.76 61.23 T:isapk128v20 60.97 61.05 61.08 T:tinyjambu192v2 63.40 63.43 63.48 T:tinyjambu256v2 87.05 87.13 87.19 romulust 108.08? 114.16? 125.54? T:isapxv20 120.96 121.17 121.39 T:elephant200v2 3623.75 3638.28 3662.41 T:elephant176v2 4189.91 4211.16 4233.14 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.49 0.50 0.51 T:aes128gcmv1 0.56 0.57 0.58 aes256gcmv1 6.65 6.69 6.71 ascon128av12 9.92 9.96 9.99 ascon80pqv12 9.92 9.98 10.04 ascon128v12 10.83 10.86 10.88 T:xoodyakround3 13.03 13.10 13.16 T:schwaemm256128v2 13.23 13.26 13.29 ascon128abi32v12 17.16 17.22 17.27 T:schwaemm192192v2 18.10 18.20 18.28 T:schwaemm256256v2 18.82 18.86 18.90 T:schwaemm128128v2 18.94 18.99 19.04 T:isapa128v20 19.89 19.93 19.98 ascon128bi32v12 23.38 23.41 23.42 T:grain128aeadv2 26.89 26.96 27.01 T:isapa128av20 31.15 31.18 31.21 romulusn 32.93 32.98 33.03 T:giftcofb128v1 36.08 36.17 36.26 T:isapk128av20 43.05 43.08 43.12 romulusm 44.55 44.60 44.66 romulust 46.38 46.56 46.94 T:isapk128v20 53.60 53.65 55.75 T:tinyjambu128v2 60.96 61.03 61.06 T:tinyjambu192v2 63.33 63.39 63.47 T:tinyjambu256v2 82.82 86.95 88.56 T:isapxv20 120.87 121.17 121.48 T:elephant200v2 3626.64 3645.21 3659.38 T:elephant176v2 4189.31 4214.87 4241.25 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.32 0.34 0.35 aes256gcmv1 0.32 0.34 0.35 T:aes128gcmv1 6.64 6.68 6.71 ascon128av12 7.59 7.62 7.66 T:xoodyakround3 9.87 9.91 9.96 ascon80pqv12 9.96 10.00 10.04 ascon128v12 12.92 13.00 13.07 T:schwaemm256128v2 13.40 13.44 13.49 ascon128abi32v12 16.98 17.08 17.20 T:schwaemm192192v2 17.97 18.10 18.20 T:schwaemm256256v2 18.73 18.78 18.83 T:schwaemm128128v2 18.96 19.04 19.13 T:isapa128v20 20.18 20.26 20.34 ascon128bi32v12 23.13 23.20 23.24 romulusm 23.46 23.51 23.56 romulusn 23.63 23.68 23.98 T:grain128aeadv2 27.05 27.37 27.52 T:isapa128av20 32.82 32.92 33.01 T:giftcofb128v1 35.67 35.89 36.14 T:isapk128av20 41.54 41.57 41.61 T:tinyjambu128v2 42.74 42.80 42.84 T:tinyjambu256v2 43.75 43.95 44.33 T:isapk128v20 43.86 44.00 44.07 T:tinyjambu192v2 44.64 44.71 44.78 romulust 79.84 80.01 80.15 T:elephant200v2 83.39 84.42 89.29 T:isapxv20 2398.21 2416.64 2434.90 T:elephant176v2 2797.27 2826.35 2856.20 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.31 0.32 0.33 T:aes128gcmv1 0.33 0.34 0.35 aes256gcmv1 6.66 6.68 6.71 ascon128av12 7.59 7.62 7.65 T:xoodyakround3 9.91 9.96 10.01 ascon80pqv12 9.94 9.98 10.03 ascon128v12 12.83 12.91 12.96 T:schwaemm256128v2 13.43 13.46 13.51 ascon128abi32v12 16.96 17.03 17.12 T:schwaemm192192v2 18.10 18.19 18.30 T:schwaemm256256v2 18.74 18.78 18.81 T:schwaemm128128v2 18.93 19.01 19.08 T:isapa128v20 20.26 20.33 20.38 ascon128bi32v12 23.13 23.18 23.23 romulusm 23.45 23.49 23.53 romulusn 23.68 23.74 24.20 T:grain128aeadv2 26.94 27.45 27.53 T:isapa128av20 32.82 32.88 32.95 T:giftcofb128v1 35.65 35.92 36.15 T:isapk128av20 41.35 41.37 41.43 T:tinyjambu128v2 42.54 42.61 42.65 T:tinyjambu256v2 43.94 44.03 44.05 T:tinyjambu192v2 44.22 44.41 44.64 T:isapk128v20 44.64 44.75 44.82 romulust 79.92 80.08 80.33 T:elephant200v2 81.41 87.03 90.28 T:isapxv20 2402.03 2417.55 2441.87 T:elephant176v2 2792.34 2808.29 2835.97 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.31 0.32 0.33 T:aes128gcmv1 0.32 0.33 0.35 aes256gcmv1 6.66 6.68 6.71 ascon128av12 7.58 7.62 7.66 T:xoodyakround3 9.93 9.96 10.00 ascon128v12 9.91 9.97 10.02 ascon80pqv12 12.83 12.91 13.01 T:schwaemm256128v2 13.43 13.47 13.51 ascon128abi32v12 16.98 17.07 17.16 T:schwaemm192192v2 18.00 18.09 18.18 T:schwaemm256256v2 18.73 18.76 18.81 T:schwaemm128128v2 18.95 19.03 19.14 T:isapa128v20 20.27 20.33 20.37 ascon128bi32v12 23.14 23.20 23.25 romulusm 23.47 23.52 23.57 romulusn 23.66 23.70 23.92 T:grain128aeadv2 27.29 27.46 27.59 T:isapa128av20 32.85 32.91 33.00 T:giftcofb128v1 35.76 35.98 36.23 T:isapk128av20 41.11 41.34 41.39 T:tinyjambu128v2 42.57 42.62 42.66 T:tinyjambu256v2 43.89 44.01 44.04 T:tinyjambu192v2 43.98 44.38 44.74 T:isapk128v20 44.54 44.71 44.80 romulust 80.01 80.18 80.39 T:elephant200v2 80.92? 86.98? 90.10? T:isapxv20 2402.57 2414.03 2431.40 T:elephant176v2 2799.20 2822.75 2843.82 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.73 0.73 0.74 T:aes128gcmv1 0.80 0.81 0.82 aes256gcmv1 6.84 6.86 6.89 ascon128av12 10.10 10.12 10.14 ascon80pqv12 10.12 10.15 10.18 ascon128v12 11.00 11.02 11.04 T:xoodyakround3 13.43 13.47 13.52 T:schwaemm256128v2 13.63 13.65 13.69 ascon128abi32v12 17.53 17.58 17.63 T:schwaemm192192v2 18.61 18.67 18.74 T:schwaemm256256v2 19.07 19.10 19.13 T:schwaemm128128v2 20.34 20.38 20.42 ascon128bi32v12 23.95 23.98 24.00 T:grain128aeadv2 31.52 31.56 31.60 romulusn 33.14 33.18 33.21 T:giftcofb128v1 35.04 35.31 35.37 T:isapa128av20 41.72 41.75 41.79 T:isapa128v20 43.22 43.26 43.31 romulusm 51.90 52.04 52.12 T:isapk128av20 54.11 54.13 54.16 T:tinyjambu128v2 61.48 61.52 61.63 T:tinyjambu192v2 63.99 64.00 64.04 T:tinyjambu256v2 88.41 88.49 91.61 romulust 100.90 101.12 101.31 T:isapk128v20 123.61 124.02 124.68 T:elephant200v2 189.48 195.77 202.99 T:isapxv20 3657.16 3665.54 3681.30 T:elephant176v2 4244.73 4267.95 4287.29 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.60 0.60 0.61 T:aes128gcmv1 0.69 0.69 0.70 aes256gcmv1 6.81 6.83 6.85 ascon128av12 10.08 10.12 10.17 ascon128v12 10.11 10.13 10.16 ascon80pqv12 10.94 10.96 10.98 T:xoodyakround3 13.44 13.49 13.53 T:schwaemm256128v2 13.54 13.56 13.58 ascon128abi32v12 17.58 17.63 17.69 T:schwaemm192192v2 18.64 18.68 18.76 T:schwaemm256256v2 19.09 19.11 19.15 T:schwaemm128128v2 20.19 20.22 20.26 ascon128bi32v12 23.71 23.72 23.75 T:grain128aeadv2 31.53 31.56 31.59 romulusn 33.23 33.28 33.31 T:giftcofb128v1 34.69 35.08 35.31 T:isapa128av20 41.71 41.77 41.82 T:isapa128v20 43.37 43.42 43.45 romulusm 51.96 52.07 52.21 T:isapk128av20 54.11 54.12 55.02 T:tinyjambu128v2 61.54 61.60 61.63 T:tinyjambu192v2 63.98 64.01 64.04 T:tinyjambu256v2 88.41 88.50 92.22 romulust 100.86 101.11 101.28 T:isapk128v20 123.28 123.54 123.89 T:elephant200v2 183.62 186.20 196.93 T:isapxv20 3654.65 3663.25 3680.92 T:elephant176v2 4250.99 4264.09 4287.09 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.60 0.60 0.61 T:aes128gcmv1 0.69 0.69 0.69 aes256gcmv1 6.79 6.82 6.85 ascon128av12 10.08 10.12 10.15 ascon128v12 10.09 10.12 10.14 ascon80pqv12 10.95 10.98 11.00 T:xoodyakround3 13.40 13.47 13.52 T:schwaemm256128v2 13.55 13.57 13.60 ascon128abi32v12 17.59 17.64 17.68 T:schwaemm192192v2 18.65 18.72 18.78 T:schwaemm256256v2 19.09 19.12 19.17 T:schwaemm128128v2 20.20 20.24 20.28 ascon128bi32v12 23.72 23.74 23.76 T:grain128aeadv2 25.56 25.60 25.64 T:isapa128v20 28.04 28.09 28.13 T:isapa128av20 31.53 31.55 31.58 romulusn 33.28 33.31 33.36 T:giftcofb128v1 39.74 39.83 39.91 T:isapk128av20 43.36 43.40 43.43 romulusm 45.89 45.93 46.88 romulust 54.11 54.12 54.16 T:tinyjambu128v2 61.54 61.60 61.68 T:tinyjambu192v2 63.91 63.95 64.02 T:tinyjambu256v2 67.61 67.77 67.94 T:isapk128v20 123.52 123.79 123.97 T:elephant200v2 121.01 123.93 125.65 T:isapxv20 3654.11 3659.60 3674.19 T:elephant176v2 4244.74 4274.49 4298.06 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.45 4.53 4.67 aes256gcmv1 4.87 4.91 5.09 T:aes128gcmv1 10.06 10.19 10.37 ascon128av12 13.04 13.16 13.34 ascon80pqv12 13.02 13.17 13.41 ascon128v12 15.68 15.79 16.03 T:xoodyakround3 20.38 20.54 20.68 ascon128abi32v12 21.73 22.15 22.88 T:schwaemm256128v2 24.35 24.51 24.87 T:schwaemm128128v2 26.81 26.94 27.10 ascon128bi32v12 28.14 28.56 29.04 T:schwaemm192192v2 29.60 30.07 30.56 T:schwaemm256256v2 31.43 31.51 31.65 T:grain128aeadv2 39.07 39.26 39.43 T:giftcofb128v1 39.84 39.98 40.11 romulusn 49.69 49.84 50.05 romulusm 65.63 65.93 66.45 T:tinyjambu128v2 74.38 74.81 75.00 T:tinyjambu192v2 76.84 76.95 77.53 T:tinyjambu256v2 81.24 81.64 81.88 T:isapa128av20 117.85 118.25 118.65 romulust 174.46 175.06 175.47 T:elephant200v2 178.98 180.18 181.51 T:isapk128av20 339.72 340.52 341.34 T:isapa128v20 1000.91 1011.40 1019.43 T:isapk128v20 1843.60? 1915.08? 2166.95? T:isapxv20 4551.94 4570.77 4600.47 T:elephant176v2 5631.06 5694.36 5791.88 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.94 5.02 5.12 aes256gcmv1 5.31 5.41 5.48 T:aes128gcmv1 10.07 10.17 10.32 ascon128av12 13.10 13.22 13.35 ascon80pqv12 13.11 13.24 13.41 ascon128v12 15.72 15.85 16.08 T:xoodyakround3 20.32 20.46 20.60 ascon128abi32v12 21.83 22.10 22.43 T:schwaemm256128v2 24.48 24.65 24.94 T:schwaemm128128v2 26.65 26.80 26.99 ascon128bi32v12 28.26 28.62 28.97 T:schwaemm192192v2 29.77 30.11 30.54 T:schwaemm256256v2 31.31 31.42 31.53 T:grain128aeadv2 39.50 39.61 39.80 T:giftcofb128v1 39.84 39.98 40.16 romulusn 50.86 50.98 51.18 romulusm 65.64 65.93 66.45 T:tinyjambu128v2 74.23 74.59 75.04 T:tinyjambu192v2 76.90 77.03 77.58 T:tinyjambu256v2 81.21 81.52 81.89 T:isapa128av20 117.94 118.32 118.92 romulust 174.24 174.92 175.59 T:elephant200v2 179.07 179.95 180.80 T:isapk128av20 340.29 340.83 341.50 T:isapa128v20 998.95 1008.43 1015.37 T:isapk128v20 1816.68 1822.73 1913.75 T:isapxv20 4547.52 4562.18 4585.30 T:elephant176v2 5658.38 5719.26 5780.97 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.99 5.05 5.13 aes256gcmv1 5.38 5.45 5.54 T:aes128gcmv1 10.01 10.14 10.27 ascon128av12 13.02 13.17 13.29 ascon128v12 13.09 13.20 13.36 ascon80pqv12 15.75 15.92 16.28 T:xoodyakround3 20.20 20.35 20.51 ascon128abi32v12 21.74 22.00 22.33 T:schwaemm256128v2 24.47 24.56 24.72 T:schwaemm128128v2 26.73 26.87 27.05 ascon128bi32v12 28.24 28.48 28.77 T:schwaemm192192v2 29.58 30.12 30.52 T:schwaemm256256v2 31.33 31.41 31.52 T:grain128aeadv2 39.45 39.60 39.71 T:giftcofb128v1 39.80 39.95 40.16 romulusn 50.84 50.95 51.12 romulusm 54.47 54.73 55.07 T:isapa128av20 65.65 65.89 66.43 T:tinyjambu128v2 74.14 74.25 74.83 T:tinyjambu192v2 74.81 75.24 75.95 romulust 76.94 77.00 77.25 T:tinyjambu256v2 111.81 112.49 113.24 T:isapk128av20 174.24 174.73 175.39 T:elephant200v2 177.26 177.68 178.21 T:isapa128v20 538.85 540.47 543.26 T:isapk128v20 951.25 955.61 996.89 T:isapxv20 4544.35 4553.99 4573.08 T:elephant176v2 5668.63 5783.42 5814.03 T:elephant160v2