VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, LPE cores; 2 x 700MHz; meteor,tiny, supercop-20251222

[Page version: 20260208 14:18:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.91 0.92 0.92 T:aes128gcmv1 1.05 1.07 1.07 aes256gcmv1 6.19 6.21 6.22 ascon128av12 9.17 9.18 9.19 ascon128v12 9.26 9.28 9.29 ascon80pqv12 11.48 11.51 11.53 ascon128abi32v12 13.91 13.98 14.02 T:xoodyakround3 16.38 16.42 16.43 T:schwaemm256128v2 16.47 16.49 16.51 ascon128bi32v12 21.60 21.69 21.77 T:schwaemm192192v2 22.98 23.58 23.72 T:schwaemm128128v2 23.37 23.83 23.97 T:schwaemm256256v2 24.87 24.93 24.98 T:grain128aeadv2 31.50 31.77 31.79 T:giftcofb128v1 35.71 35.88 35.92 T:isapa128v20 35.90 35.95 35.99 T:isapa128av20 36.88 36.90 36.92 romulusn 53.70 53.73 53.75 T:tinyjambu128v2 58.02 58.37 58.55 T:isapk128av20 58.92 59.05 59.14 romulusm 68.55 68.58 68.67 T:tinyjambu192v2 69.15 69.17 69.26 T:tinyjambu256v2 76.72 77.13 78.07 T:isapk128v20 123.40 123.54 123.78 romulust 158.96 159.23 159.91 T:isapxv20 167.50 168.67 170.76 T:elephant200v2 6236.12 6262.92 6321.36 T:elephant176v2 7220.06 7226.36 7341.30 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.94 0.95 0.96 T:aes128gcmv1 1.14 1.15 1.16 aes256gcmv1 6.16 6.18 6.20 ascon128av12 9.18 9.20 9.22 ascon128v12 9.22 9.24 9.27 ascon80pqv12 11.34 11.41 11.44 ascon128abi32v12 13.93 14.01 14.04 T:xoodyakround3 16.32 16.35 16.42 T:schwaemm256128v2 16.49 16.51 16.59 ascon128bi32v12 21.55 21.61 21.78 T:schwaemm192192v2 23.15 23.53 23.70 T:schwaemm128128v2 23.44 23.81 23.90 T:schwaemm256256v2 25.18 25.23 25.25 T:grain128aeadv2 31.69 31.91 32.01 T:giftcofb128v1 35.66 35.78 35.84 T:isapa128v20 35.92 35.96 36.01 T:isapa128av20 36.52 36.54 36.55 romulusn 53.74 53.80 53.86 T:tinyjambu128v2 58.07 58.41 58.84 T:isapk128av20 59.03 59.06 59.24 romulusm 68.67 68.74 68.86 T:tinyjambu192v2 69.20 69.23 69.26 T:tinyjambu256v2 76.64 76.99 77.40 T:isapk128v20 123.51 123.62 123.78 romulust 157.97 160.44 170.55 T:isapxv20 168.26 168.62 170.27 T:elephant200v2 6209.02 6270.09 6308.43 T:elephant176v2 7220.27 7225.86 7332.02 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.95 0.96 0.96 T:aes128gcmv1 1.14 1.15 1.16 aes256gcmv1 6.17 6.19 6.20 ascon128av12 9.18 9.20 9.21 ascon128v12 9.21 9.23 9.25 ascon80pqv12 11.38 11.43 11.45 ascon128abi32v12 13.73 13.80 13.98 T:xoodyakround3 16.33 16.39 16.44 T:schwaemm256128v2 16.50 16.51 16.53 ascon128bi32v12 17.79 17.87 17.93 T:isapa128v20 21.65 21.66 21.77 T:schwaemm192192v2 23.09 23.57 23.76 T:schwaemm128128v2 23.36 23.73 23.98 T:schwaemm256256v2 24.17 24.23 24.29 T:isapa128av20 25.21 25.24 25.29 T:grain128aeadv2 31.41 31.90 32.00 T:giftcofb128v1 36.51 36.53 36.55 romulusn 38.84 38.97 39.18 T:isapk128av20 41.88 41.96 42.17 romulust 48.09 48.48 48.69 T:isapk128v20 53.74 53.79 53.84 T:tinyjambu128v2 59.02 59.07 59.12 romulusm 68.66 68.71 68.77 T:tinyjambu192v2 69.22 69.27 69.31 T:tinyjambu256v2 92.85 94.69 95.97 T:isapxv20 167.05 168.42 170.30 T:elephant200v2 6224.92 6288.01 6306.82 T:elephant176v2 7222.20 7226.40 7342.30 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.67 0.68 0.69 T:aes128gcmv1 0.72 0.74 0.75 aes256gcmv1 6.17 6.19 6.20 ascon128av12 9.19 9.21 9.23 ascon80pqv12 9.21 9.22 9.24 ascon128v12 10.59 10.63 10.71 T:xoodyakround3 11.31 11.32 11.35 ascon128abi32v12 16.29 16.31 16.33 T:schwaemm256128v2 16.53 16.55 16.57 ascon128bi32v12 21.46 21.59 21.70 T:schwaemm192192v2 23.63 23.72 23.80 T:schwaemm128128v2 23.83 23.87 23.94 T:schwaemm256256v2 24.82 24.85 24.88 T:grain128aeadv2 26.83 26.87 26.92 T:isapa128v20 29.67 29.68 29.70 romulusn 29.87 29.92 30.07 T:isapa128av20 31.82 31.84 31.96 T:giftcofb128v1 40.52 40.57 40.63 romulusm 43.83 43.85 43.88 T:tinyjambu128v2 48.66 48.79 48.85 T:isapk128av20 51.34 51.42 51.57 T:tinyjambu192v2 52.29 52.31 52.39 T:tinyjambu256v2 63.08 63.17 63.34 T:isapk128v20 82.58 82.66 82.75 romulust 125.94 126.30 127.31 T:elephant200v2 126.17 127.01 128.54 T:isapxv20 4571.18 4631.39 4662.84 T:elephant176v2 5423.72 5428.70 5509.76 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.67 0.69 0.70 T:aes128gcmv1 0.78 0.79 0.80 aes256gcmv1 6.15 6.16 6.17 ascon128av12 9.17 9.20 9.20 ascon128v12 9.20 9.25 9.25 ascon80pqv12 10.52 10.56 10.59 T:xoodyakround3 11.23 11.27 11.29 ascon128abi32v12 16.25 16.28 16.31 T:schwaemm256128v2 16.45 16.49 16.58 ascon128bi32v12 21.32 21.57 21.71 T:schwaemm192192v2 23.29 23.61 23.65 T:schwaemm128128v2 23.82 23.84 23.96 T:schwaemm256256v2 24.96 24.99 25.02 T:grain128aeadv2 26.83 26.87 26.90 T:isapa128v20 29.48 29.50 29.56 romulusn 29.96 30.10 30.19 T:isapa128av20 31.87 31.89 31.91 T:giftcofb128v1 40.52 40.56 40.75 romulusm 43.88 43.92 43.95 T:tinyjambu128v2 48.60 48.67 48.85 T:isapk128av20 51.12 51.15 51.26 T:tinyjambu192v2 52.32 52.35 52.41 T:tinyjambu256v2 62.97 63.15 63.37 T:isapk128v20 82.63 82.68 82.77 romulust 125.57 125.82 127.45 T:elephant200v2 126.37 126.91 129.05 T:isapxv20 4599.92 4636.69 4685.31 T:elephant176v2 5416.19 5423.19 5498.79 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.68 0.70 0.70 T:aes128gcmv1 0.78 0.79 0.80 aes256gcmv1 6.15 6.17 6.18 ascon128av12 9.19 9.20 9.22 ascon128v12 9.22 9.24 9.25 ascon80pqv12 10.58 10.62 10.65 T:xoodyakround3 11.23 11.25 11.29 ascon128abi32v12 16.27 16.31 16.32 T:schwaemm256128v2 16.46 16.48 16.54 ascon128bi32v12 17.85 17.90 17.93 T:isapa128v20 21.41 21.61 21.66 T:schwaemm192192v2 22.55 23.63 23.84 T:schwaemm128128v2 23.84 23.86 23.91 T:schwaemm256256v2 24.07 24.20 24.24 T:isapa128av20 24.99 25.01 25.05 T:grain128aeadv2 29.46 29.48 29.57 romulusn 31.63 31.88 31.90 T:giftcofb128v1 38.97 39.08 39.15 T:isapk128av20 40.54 40.57 40.78 romulusm 41.91 41.96 42.06 romulust 43.89 43.92 43.98 T:tinyjambu128v2 48.78 48.85 48.98 T:isapk128v20 51.11 51.16 51.21 T:tinyjambu192v2 52.32 52.34 52.41 T:tinyjambu256v2 93.97 94.45 94.92 T:isapxv20 125.58 126.43 127.28 T:elephant200v2 4570.42 4640.20 4671.58 T:elephant176v2 5419.79 5424.20 5495.13 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.42 0.43 0.43 T:aes128gcmv1 0.43 0.44 0.44 aes256gcmv1 6.14 6.15 6.16 ascon128av12 7.36 7.39 7.41 T:xoodyakround3 9.12 9.15 9.21 ascon80pqv12 9.21 9.22 9.24 ascon128v12 11.14 11.16 11.18 ascon128abi32v12 16.18 16.27 16.32 T:schwaemm256128v2 16.58 16.61 16.63 ascon128bi32v12 17.94 17.99 18.04 T:isapa128v20 21.42 21.53 21.57 T:schwaemm192192v2 22.19 22.24 22.34 romulusm 22.38 22.42 22.47 romulusn 22.69 22.75 23.93 T:schwaemm128128v2 23.74 23.76 23.82 T:schwaemm256256v2 24.18 24.22 24.26 T:isapa128av20 24.71 24.75 24.79 T:grain128aeadv2 31.80 31.83 31.86 T:giftcofb128v1 33.97 34.01 34.03 T:tinyjambu128v2 34.14 34.18 34.22 T:tinyjambu192v2 34.26 35.47 35.52 T:tinyjambu256v2 38.86 39.02 39.18 T:isapk128av20 41.88 41.91 41.95 romulust 48.52 49.02 49.31 T:isapk128v20 82.81 83.25 84.44 T:elephant200v2 93.56 94.08 94.21 T:isapxv20 3068.41 3110.75 3141.26 T:elephant176v2 3615.06 3618.87 3643.18 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.42 0.43 0.44 aes256gcmv1 0.43 0.44 0.44 T:aes128gcmv1 6.14 6.15 6.18 ascon128av12 7.25 7.37 7.41 T:xoodyakround3 9.19 9.21 9.24 ascon80pqv12 9.20 9.21 9.22 ascon128v12 11.10 11.14 11.16 ascon128abi32v12 16.21 16.27 16.29 T:schwaemm256128v2 16.43 16.45 16.49 ascon128bi32v12 17.94 18.03 18.12 T:isapa128v20 21.45 21.47 21.50 T:schwaemm192192v2 22.20 22.25 22.28 romulusm 22.33 22.39 22.42 romulusn 22.48 23.61 23.92 T:schwaemm128128v2 23.75 23.77 23.81 T:schwaemm256256v2 24.19 24.26 24.29 T:isapa128av20 24.75 24.78 24.84 T:grain128aeadv2 31.78 31.84 31.87 T:giftcofb128v1 33.56 33.58 33.65 T:tinyjambu192v2 33.98 34.00 34.04 T:tinyjambu128v2 34.27 35.45 35.53 T:tinyjambu256v2 38.81 38.93 39.10 T:isapk128av20 41.90 41.94 41.97 romulust 48.69 49.02 49.14 T:isapk128v20 82.84 83.74 84.46 T:elephant200v2 93.05 94.10 95.35 T:isapxv20 3089.48 3111.49 3140.95 T:elephant176v2 3611.69 3618.97 3675.23 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.42 0.43 0.43 aes256gcmv1 0.43 0.43 0.45 T:aes128gcmv1 6.14 6.16 6.17 ascon128av12 7.25 7.34 7.41 T:xoodyakround3 9.19 9.21 9.24 ascon80pqv12 9.21 9.22 9.22 ascon128v12 11.11 11.13 11.15 ascon128abi32v12 16.21 16.27 16.33 T:schwaemm256128v2 16.43 16.47 16.68 ascon128bi32v12 17.91 18.03 18.08 T:isapa128v20 21.42 21.44 21.53 T:schwaemm192192v2 22.22 22.23 22.30 romulusm 22.37 22.40 22.43 romulusn 22.61 23.61 23.90 T:schwaemm128128v2 23.73 23.77 23.82 T:schwaemm256256v2 24.17 24.22 24.27 T:isapa128av20 24.77 24.80 24.85 T:grain128aeadv2 31.79 31.81 31.87 T:giftcofb128v1 33.55 33.57 33.63 T:tinyjambu192v2 33.98 34.00 34.02 T:tinyjambu128v2 34.26 35.46 35.55 T:tinyjambu256v2 38.83 39.02 39.19 T:isapk128av20 41.87 41.90 41.96 romulust 48.74 48.95 49.10 T:isapk128v20 82.73 83.48 84.14 T:elephant200v2 92.38 93.86 94.94 T:isapxv20 3082.45 3107.58 3149.25 T:elephant176v2 3615.94 3621.97 3683.28 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.76 0.76 0.77 T:aes128gcmv1 0.85 0.85 0.86 aes256gcmv1 6.32 6.34 6.35 ascon128av12 9.35 9.35 9.37 ascon80pqv12 9.37 9.38 9.39 ascon128v12 10.66 10.68 10.71 T:xoodyakround3 11.63 11.64 11.66 ascon128abi32v12 16.83 16.84 16.84 ascon128bi32v12 16.82 16.85 16.87 T:schwaemm256128v2 21.98 22.00 22.04 T:schwaemm192192v2 22.87 23.97 24.06 T:schwaemm128128v2 24.21 24.46 24.47 T:schwaemm256256v2 25.16 25.18 25.21 T:grain128aeadv2 29.87 29.93 29.95 romulusn 32.05 32.07 32.10 T:isapa128av20 32.01 32.10 32.15 T:giftcofb128v1 39.16 39.18 39.21 T:isapa128v20 40.77 40.84 40.88 romulusm 44.19 44.20 44.22 T:tinyjambu128v2 51.69 51.71 51.72 T:tinyjambu192v2 51.71 52.71 52.73 T:tinyjambu256v2 55.91 56.02 56.16 T:isapk128av20 83.88 83.91 83.97 romulust 110.76 110.90 114.03 T:isapk128v20 128.18 129.17 130.13 T:elephant200v2 208.27 209.18 209.82 T:isapxv20 4631.39 4693.73 4725.93 T:elephant176v2 5471.00 5478.60 5582.73 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.78 0.79 0.79 T:aes128gcmv1 0.90 0.90 0.91 aes256gcmv1 6.31 6.32 6.33 ascon128av12 9.34 9.34 9.39 ascon128v12 9.35 9.37 9.39 ascon80pqv12 10.59 10.75 10.81 T:xoodyakround3 11.55 11.58 11.60 ascon128abi32v12 16.75 16.76 16.87 ascon128bi32v12 16.78 16.79 16.80 T:schwaemm256128v2 21.96 22.06 22.09 T:schwaemm192192v2 22.94 23.18 24.07 T:schwaemm128128v2 24.21 24.43 24.44 T:schwaemm256256v2 25.32 25.32 25.35 T:grain128aeadv2 29.72 29.74 29.77 romulusn 32.07 32.08 32.13 T:isapa128av20 31.84 32.16 32.21 T:giftcofb128v1 39.22 39.26 39.28 T:isapa128v20 40.92 40.94 41.15 romulusm 44.22 44.24 44.26 T:tinyjambu128v2 51.48 51.51 51.54 T:tinyjambu192v2 51.61 52.70 52.74 T:tinyjambu256v2 55.79 55.94 56.14 T:isapk128av20 83.84 83.99 84.07 romulust 110.64 110.80 114.69 T:isapk128v20 127.80 129.03 129.70 T:elephant200v2 209.40 210.86 211.17 T:isapxv20 4627.87 4683.82 4704.99 T:elephant176v2 5477.91 5490.72 5543.36 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.79 0.79 0.79 T:aes128gcmv1 0.90 0.90 0.91 aes256gcmv1 6.31 6.32 6.32 ascon128av12 9.33 9.35 9.36 ascon128v12 9.37 9.38 9.39 ascon80pqv12 10.67 10.79 10.82 T:xoodyakround3 11.55 11.57 11.59 ascon128abi32v12 16.75 16.77 16.80 ascon128bi32v12 16.75 16.77 16.85 T:schwaemm256128v2 21.82 22.00 22.08 T:schwaemm192192v2 23.23 23.99 24.09 T:schwaemm128128v2 24.16 24.17 24.23 T:isapa128v20 24.21 24.44 24.46 T:schwaemm256256v2 25.30 25.33 25.35 T:grain128aeadv2 25.34 25.36 25.41 T:isapa128av20 29.71 29.73 29.75 romulusn 32.05 32.17 32.22 T:giftcofb128v1 40.89 40.92 41.05 romulusm 43.05 43.11 43.19 romulust 43.63 43.75 43.80 T:isapk128av20 44.20 44.22 44.24 T:tinyjambu128v2 51.46 51.47 51.49 T:tinyjambu192v2 51.62 52.72 52.75 T:tinyjambu256v2 73.83 73.98 76.68 T:isapk128v20 127.89 129.10 129.57 T:elephant200v2 136.87 137.22 137.42 T:isapxv20 4631.98 4664.99 4707.52 T:elephant176v2 5480.01 5492.29 5574.21 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.37 4.39 4.42 T:aes128gcmv1 5.58 5.68 5.95 aes256gcmv1 9.80 9.96 10.45 ascon128av12 12.30 12.36 12.48 ascon80pqv12 12.62 12.73 12.85 ascon128v12 15.55 15.72 16.08 T:xoodyakround3 18.85 19.02 19.21 ascon128abi32v12 23.07 23.18 23.56 ascon128bi32v12 27.47 27.64 27.88 T:schwaemm256128v2 30.20 30.86 31.05 T:schwaemm128128v2 32.24 32.38 32.48 T:grain128aeadv2 35.27 35.45 35.82 T:schwaemm192192v2 35.74 35.80 35.84 romulusn 38.52 38.71 38.81 T:giftcofb128v1 38.77 38.95 39.24 T:schwaemm256256v2 46.92 46.98 47.22 romulusm 51.56 51.68 51.91 T:tinyjambu128v2 59.98 60.08 60.15 T:tinyjambu192v2 61.02 61.27 61.65 T:tinyjambu256v2 77.48 77.73 78.23 T:isapa128av20 111.65 111.76 112.01 romulust 180.71 181.79 182.52 T:elephant200v2 210.74 211.64 214.16 T:isapk128av20 322.22 322.60 323.66 T:isapa128v20 1189.26 1193.20 1196.02 T:isapk128v20 2066.30 2070.28 2086.52 T:isapxv20 5746.46 5773.82 5823.25 T:elephant176v2 7327.34 7331.21 7361.84 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.33 4.41 4.52 T:aes128gcmv1 5.80 5.90 6.01 aes256gcmv1 10.05 10.27 10.40 ascon128av12 12.33 12.42 12.64 ascon80pqv12 12.77 12.84 12.89 ascon128v12 15.46 15.59 16.18 T:xoodyakround3 18.69 18.83 19.05 ascon128abi32v12 22.91 23.02 23.13 ascon128bi32v12 27.42 27.51 27.58 T:schwaemm256128v2 30.32 30.81 31.12 T:schwaemm128128v2 32.44 32.53 32.63 T:grain128aeadv2 35.31 35.47 36.03 T:schwaemm192192v2 35.50 35.58 35.66 romulusn 38.84 38.89 39.09 T:giftcofb128v1 38.85 38.95 39.27 T:schwaemm256256v2 48.17 48.34 48.52 romulusm 51.71 51.86 52.14 T:tinyjambu128v2 59.77 59.90 59.98 T:tinyjambu192v2 60.95 61.48 61.65 T:tinyjambu256v2 77.33 77.47 77.58 T:isapa128av20 111.62 111.79 112.14 romulust 178.92 181.21 181.84 T:elephant200v2 211.59 212.78 214.59 T:isapk128av20 322.66 323.19 323.48 T:isapa128v20 1190.11 1190.79 1192.70 T:isapk128v20 2070.12 2099.50 2109.34 T:isapxv20 5771.54 5819.70 6261.98 T:elephant176v2 7325.65 7332.74 7370.59 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.30 4.35 4.41 T:aes128gcmv1 5.84 6.02 6.06 aes256gcmv1 9.86 9.98 10.07 ascon128av12 12.33 12.41 12.66 ascon80pqv12 12.52 12.66 12.82 ascon128v12 15.53 15.91 16.06 T:xoodyakround3 18.71 18.79 18.92 ascon128abi32v12 22.98 23.06 23.14 ascon128bi32v12 27.38 27.48 27.50 T:schwaemm256128v2 30.30 30.83 31.03 T:schwaemm128128v2 32.41 32.50 32.59 T:grain128aeadv2 35.25 35.38 35.46 T:schwaemm192192v2 35.46 35.56 35.66 romulusn 38.80 38.81 38.86 T:schwaemm256256v2 38.87 38.92 39.00 T:giftcofb128v1 48.20 48.34 48.41 romulusm 51.01 51.23 51.45 T:isapa128av20 51.63 51.73 51.82 T:tinyjambu128v2 59.69 59.79 59.88 T:tinyjambu192v2 60.91 61.42 61.52 T:tinyjambu256v2 69.95 70.06 70.25 romulust 139.25 140.09 141.46 T:isapk128av20 168.23 168.60 169.30 T:isapa128v20 179.18 181.27 182.02 T:elephant200v2 637.68 639.77 640.66 T:isapk128v20 1083.23 1102.39 1108.04 T:isapxv20 5763.68 5811.63 5828.42 T:elephant176v2 7326.38 7333.16 7373.41 T:elephant160v2