VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20260217

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.52 1.52 1.53 T:aes128gcmv1 1.74 1.75 1.76 aes256gcmv1 6.00 6.05 6.07 ascon128av12 8.99 9.00 9.02 ascon128v12 8.99 9.00 9.01 ascon80pqv12 11.16 11.24 11.25 ascon128abi32v12 15.15 15.22 15.31 T:xoodyakround3 16.30 16.33 16.33 ascon128bi32v12 17.72 17.76 17.82 T:schwaemm256128v2 23.23 23.26 23.35 T:schwaemm256256v2 23.26 23.31 23.35 T:schwaemm192192v2 26.08 26.11 26.17 T:schwaemm128128v2 26.91 27.02 27.03 T:grain128aeadv2 34.33 34.35 34.37 T:isapa128av20 35.14 35.15 35.15 T:isapa128v20 35.69 35.75 35.80 romulusn 40.64 40.67 40.68 T:giftcofb128v1 56.13 56.13 56.13 T:tinyjambu128v2 57.98 58.03 58.08 romulusm 66.03 66.06 66.10 T:tinyjambu192v2 68.23 68.28 68.34 T:isapk128av20 70.66 70.67 70.70 T:tinyjambu256v2 88.27 88.63 88.85 T:isapk128v20 118.14 118.78 118.81 romulust 147.84 152.32 155.91 T:isapxv20 156.25 156.36 156.42 T:elephant200v2 6457.80 6467.19 6497.39 T:elephant176v2 7273.78 7285.02 7286.96 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.66 1.67 1.68 T:aes128gcmv1 1.74 1.74 1.75 aes256gcmv1 6.02 6.04 6.06 ascon128av12 8.94 8.94 8.95 ascon80pqv12 8.96 8.97 8.98 ascon128v12 11.19 11.23 11.26 ascon128abi32v12 15.16 15.21 15.30 T:xoodyakround3 16.14 16.16 16.32 ascon128bi32v12 17.74 17.76 17.83 T:schwaemm256128v2 23.26 23.28 23.40 T:schwaemm256256v2 23.27 23.33 23.38 T:schwaemm192192v2 26.12 26.16 26.22 T:schwaemm128128v2 27.34 27.38 27.40 T:grain128aeadv2 34.30 34.34 34.38 T:isapa128av20 35.25 35.36 35.46 T:isapa128v20 35.79 35.82 35.87 romulusn 40.41 40.45 40.49 T:giftcofb128v1 56.07 56.07 56.08 T:tinyjambu128v2 57.98 58.10 58.20 romulusm 65.84 65.93 65.93 T:tinyjambu192v2 68.23 68.28 68.32 T:isapk128av20 70.55 70.55 70.57 T:tinyjambu256v2 88.22 88.48 88.82 T:isapk128v20 118.78 118.81 118.84 romulust 148.85 150.74 154.20 T:isapxv20 156.20 156.35 156.50 T:elephant200v2 6452.90 6463.21 6496.65 T:elephant176v2 7273.76 7285.79 7287.36 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.66 1.67 1.67 T:aes128gcmv1 1.74 1.74 1.75 aes256gcmv1 6.02 6.04 6.05 ascon128av12 8.93 8.94 8.94 ascon80pqv12 8.96 8.97 8.98 ascon128v12 11.22 11.26 11.27 ascon128abi32v12 15.25 15.30 15.39 T:xoodyakround3 16.13 16.27 16.32 ascon128bi32v12 17.53 17.53 17.67 T:isapa128v20 17.74 17.78 17.84 T:schwaemm256128v2 22.84 22.87 22.90 T:isapa128av20 23.28 23.30 23.39 T:schwaemm256256v2 23.31 23.34 23.40 T:schwaemm192192v2 26.12 26.19 26.26 T:schwaemm128128v2 27.36 27.38 27.41 T:grain128aeadv2 35.77 35.82 35.85 romulusn 39.79 39.80 39.82 romulust 40.42 40.45 40.49 T:giftcofb128v1 44.99 45.01 45.03 T:isapk128av20 56.02 56.02 56.04 T:tinyjambu128v2 55.87 56.11 56.38 T:isapk128v20 58.08 58.09 58.15 romulusm 65.88 65.93 65.93 T:tinyjambu192v2 70.64 70.64 70.64 T:tinyjambu256v2 86.43 87.64 88.58 T:isapxv20 156.29 156.34 156.50 T:elephant200v2 6454.62 6467.25 6497.80 T:elephant176v2 7274.06 7286.21 7288.08 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.02 1.02 1.03 T:aes128gcmv1 1.13 1.14 1.15 aes256gcmv1 5.99 6.03 6.04 ascon128av12 8.97 8.98 8.98 ascon80pqv12 8.99 9.00 9.01 ascon128v12 10.91 10.98 10.98 ascon128abi32v12 11.82 11.87 11.90 T:xoodyakround3 16.16 16.28 16.29 ascon128bi32v12 17.61 17.64 17.67 T:schwaemm256128v2 23.13 23.14 23.27 T:schwaemm256256v2 23.24 23.27 23.30 T:schwaemm192192v2 26.04 26.08 26.14 T:schwaemm128128v2 26.35 26.36 26.44 T:isapa128v20 27.08 27.10 27.13 T:grain128aeadv2 28.74 28.75 28.76 T:isapa128av20 28.98 29.00 29.02 romulusn 40.13 40.15 40.20 romulusm 40.53 40.56 40.59 T:giftcofb128v1 44.55 44.55 44.56 T:tinyjambu128v2 51.45 51.45 51.46 T:tinyjambu192v2 52.94 52.95 52.97 T:tinyjambu256v2 56.57 56.64 56.83 T:isapk128av20 72.32 72.37 72.42 T:isapk128v20 79.27 79.32 79.35 romulust 117.61 117.67 117.68 T:elephant200v2 117.73 119.17 120.14 T:isapxv20 4824.61 4829.23 4852.89 T:elephant176v2 5453.58 5462.34 5463.24 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.09 1.09 1.10 T:aes128gcmv1 1.13 1.14 1.14 aes256gcmv1 5.98 6.01 6.03 ascon128av12 8.80 8.81 8.87 ascon80pqv12 8.92 8.92 8.95 ascon128v12 11.08 11.08 11.08 ascon128abi32v12 11.83 11.84 11.90 T:xoodyakround3 16.11 16.21 16.30 ascon128bi32v12 17.61 17.64 17.68 T:schwaemm256128v2 23.16 23.18 23.27 T:schwaemm256256v2 23.26 23.29 23.31 T:schwaemm192192v2 26.03 26.07 26.10 T:schwaemm128128v2 26.35 26.39 26.39 T:isapa128v20 27.12 27.16 27.20 T:grain128aeadv2 28.73 28.74 28.75 T:isapa128av20 29.02 29.04 29.07 romulusn 40.15 40.26 40.27 romulusm 40.40 40.43 40.46 T:giftcofb128v1 44.54 44.55 44.56 T:tinyjambu128v2 51.28 51.28 51.29 T:tinyjambu192v2 52.99 52.99 52.99 T:tinyjambu256v2 56.56 56.65 56.77 T:isapk128av20 72.27 72.34 72.42 T:isapk128v20 79.30 79.34 79.35 romulust 117.59 117.60 117.63 T:elephant200v2 118.07 118.85 120.12 T:isapxv20 4826.42 4831.26 4853.21 T:elephant176v2 5453.61 5462.53 5463.42 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.09 1.09 1.10 T:aes128gcmv1 1.14 1.14 1.14 aes256gcmv1 6.02 6.02 6.03 ascon128av12 8.80 8.82 8.87 ascon80pqv12 8.85 8.90 9.00 ascon128v12 11.08 11.08 11.08 ascon128abi32v12 11.77 11.81 11.91 T:xoodyakround3 16.23 16.24 16.30 ascon128bi32v12 17.55 17.56 17.59 T:isapa128v20 17.62 17.64 17.70 T:schwaemm256128v2 22.98 23.00 23.01 T:isapa128av20 23.17 23.18 23.30 T:schwaemm256256v2 23.24 23.29 23.38 T:schwaemm192192v2 26.05 26.08 26.12 T:schwaemm128128v2 27.17 27.22 27.24 T:grain128aeadv2 29.02 29.03 29.05 romulusn 39.78 39.80 39.83 romulust 40.16 40.24 40.27 romulusm 40.41 40.44 40.47 T:giftcofb128v1 44.55 44.56 44.56 T:tinyjambu128v2 44.94 45.02 45.16 T:isapk128av20 51.31 51.31 51.33 T:tinyjambu192v2 52.99 52.99 52.99 T:tinyjambu256v2 56.12 56.15 56.17 T:isapk128v20 86.98 87.39 88.42 T:isapxv20 117.52 117.55 117.59 T:elephant200v2 4823.46 4827.46 4853.65 T:elephant176v2 5453.54 5462.42 5463.47 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.51 0.52 0.53 T:aes128gcmv1 0.53 0.54 0.55 aes256gcmv1 5.99 6.01 6.02 ascon128av12 8.42 8.43 8.52 T:xoodyakround3 8.88 8.89 8.90 ascon80pqv12 8.95 8.98 9.00 ascon128v12 10.63 10.64 10.83 ascon128abi32v12 16.27 16.28 16.28 ascon128bi32v12 17.50 17.54 17.56 T:schwaemm256128v2 17.58 17.58 17.59 T:isapa128v20 22.23 22.29 22.29 romulusn 22.43 22.43 22.44 romulusm 23.02 23.04 23.16 T:schwaemm256256v2 23.10 23.13 23.16 T:isapa128av20 23.21 23.25 23.30 T:schwaemm192192v2 25.95 26.00 26.09 T:schwaemm128128v2 27.17 27.22 27.26 T:grain128aeadv2 32.99 33.00 33.00 T:tinyjambu128v2 35.27 35.28 35.30 T:tinyjambu256v2 36.85 36.88 36.93 T:tinyjambu192v2 39.76 39.77 39.77 romulust 40.31 40.42 40.46 T:giftcofb128v1 45.03 45.07 45.17 T:isapk128av20 56.15 56.18 56.23 T:isapk128v20 79.04 79.08 79.12 T:elephant200v2 86.33 86.83 88.97 T:isapxv20 3186.74 3192.07 3206.74 T:elephant176v2 3633.08 3637.86 3639.12 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.52 0.52 0.53 T:aes128gcmv1 0.53 0.54 0.55 aes256gcmv1 5.96 5.98 6.01 ascon128av12 8.42 8.45 8.49 T:xoodyakround3 8.82 8.83 8.89 ascon128v12 8.83 8.84 8.85 ascon80pqv12 10.82 10.84 10.91 ascon128abi32v12 16.07 16.21 16.31 ascon128bi32v12 17.50 17.53 17.61 T:schwaemm256128v2 17.57 17.58 17.61 T:isapa128v20 22.23 22.24 22.25 romulusn 22.27 22.27 22.28 romulusm 23.01 23.03 23.15 T:schwaemm256256v2 23.09 23.14 23.17 T:isapa128av20 23.22 23.25 23.31 T:schwaemm192192v2 25.89 26.01 26.03 T:schwaemm128128v2 26.95 27.03 27.05 T:grain128aeadv2 32.96 32.97 32.98 T:tinyjambu128v2 35.36 35.36 35.36 T:tinyjambu256v2 36.75 36.75 36.75 T:tinyjambu192v2 39.72 39.76 39.81 romulust 40.37 40.41 40.47 T:giftcofb128v1 45.00 45.09 45.19 T:isapk128av20 56.13 56.16 56.19 T:isapk128v20 79.01 79.04 79.08 T:elephant200v2 85.39 85.86 87.05 T:isapxv20 3186.53 3192.17 3206.59 T:elephant176v2 3633.17 3638.45 3639.44 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.52 0.52 0.53 T:aes128gcmv1 0.53 0.54 0.54 aes256gcmv1 5.99 6.02 6.02 ascon128av12 8.41 8.45 8.50 T:xoodyakround3 8.67 8.77 8.96 ascon128v12 8.83 8.84 8.85 ascon80pqv12 10.90 10.91 10.91 ascon128abi32v12 16.08 16.23 16.32 ascon128bi32v12 17.52 17.54 17.55 T:schwaemm256128v2 17.56 17.58 17.61 T:isapa128v20 22.23 22.23 22.23 romulusn 22.27 22.27 22.28 romulusm 23.04 23.07 23.17 T:schwaemm256256v2 23.09 23.12 23.15 T:isapa128av20 23.23 23.25 23.32 T:schwaemm192192v2 25.91 25.96 26.03 T:schwaemm128128v2 26.94 27.04 27.11 T:grain128aeadv2 33.02 33.02 33.03 T:tinyjambu128v2 35.34 35.36 35.36 T:tinyjambu256v2 36.82 36.82 36.82 T:tinyjambu192v2 39.75 39.78 39.82 romulust 40.39 40.42 40.45 T:giftcofb128v1 45.01 45.09 45.18 T:isapk128av20 56.18 56.24 56.27 T:isapk128v20 79.02 79.07 79.10 T:elephant200v2 87.02 87.44 88.40 T:isapxv20 3186.53 3191.26 3206.39 T:elephant176v2 3633.14 3638.57 3639.63 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.14 1.14 1.15 T:aes128gcmv1 1.27 1.27 1.28 aes256gcmv1 6.17 6.18 6.19 ascon128av12 9.13 9.13 9.13 ascon80pqv12 9.13 9.14 9.15 ascon128v12 11.28 11.28 11.29 ascon128abi32v12 11.96 11.97 11.99 T:xoodyakround3 16.64 16.74 16.74 ascon128bi32v12 18.14 18.17 18.21 T:schwaemm256128v2 23.76 23.77 23.87 T:schwaemm256256v2 23.79 23.83 23.86 T:schwaemm192192v2 26.39 26.41 26.44 T:schwaemm128128v2 27.42 27.44 27.45 T:grain128aeadv2 29.22 29.24 29.26 romulusn 31.11 31.11 31.12 T:isapa128av20 38.73 38.74 38.76 T:isapa128v20 40.41 40.44 40.49 romulusm 40.93 40.94 40.96 T:giftcofb128v1 44.93 44.93 44.93 T:tinyjambu128v2 51.82 51.83 51.85 T:tinyjambu192v2 53.38 53.38 53.40 T:tinyjambu256v2 62.88 63.04 63.05 T:isapk128av20 80.18 80.47 80.50 romulust 120.05 120.08 120.11 T:elephant200v2 123.14 123.21 123.23 T:isapk128v20 192.53 192.90 194.30 T:isapxv20 4858.65 4864.60 4886.79 T:elephant176v2 5515.56 5523.68 5524.14 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.21 1.21 1.22 T:aes128gcmv1 1.27 1.27 1.28 aes256gcmv1 6.17 6.18 6.19 ascon128av12 9.03 9.03 9.06 ascon80pqv12 9.07 9.07 9.09 ascon128v12 11.39 11.39 11.39 ascon128abi32v12 11.92 11.94 11.97 T:xoodyakround3 16.57 16.63 16.70 ascon128bi32v12 18.16 18.18 18.21 T:schwaemm256128v2 23.78 23.80 23.89 T:schwaemm256256v2 23.84 23.87 23.91 T:schwaemm192192v2 26.43 26.45 26.47 T:schwaemm128128v2 27.49 27.52 27.55 T:grain128aeadv2 29.31 29.32 29.33 romulusn 31.09 31.09 31.10 T:isapa128av20 38.76 38.79 38.80 T:isapa128v20 40.47 40.54 40.59 romulusm 40.80 40.83 40.85 T:giftcofb128v1 44.90 44.91 44.92 T:tinyjambu128v2 51.72 51.72 51.74 T:tinyjambu192v2 53.42 53.42 53.42 T:tinyjambu256v2 62.90 63.01 63.04 T:isapk128av20 80.49 80.51 80.52 romulust 119.98 120.03 120.06 T:elephant200v2 123.20 123.23 123.29 T:isapk128v20 192.34 193.17 194.10 T:isapxv20 4864.03 4865.59 4886.47 T:elephant176v2 5515.67 5523.59 5523.96 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.21 1.21 1.22 T:aes128gcmv1 1.27 1.27 1.28 aes256gcmv1 6.17 6.18 6.19 ascon128av12 9.03 9.03 9.06 ascon80pqv12 9.03 9.06 9.13 ascon128v12 11.36 11.38 11.38 ascon128abi32v12 11.97 11.98 12.01 T:xoodyakround3 16.63 16.63 16.70 ascon128bi32v12 18.14 18.17 18.18 T:schwaemm256128v2 23.78 23.80 23.83 T:schwaemm192192v2 23.77 23.82 23.87 T:schwaemm256256v2 23.85 23.85 23.86 T:isapa128v20 24.31 24.31 24.32 T:isapa128av20 26.41 26.44 26.46 T:schwaemm128128v2 27.49 27.53 27.56 T:grain128aeadv2 29.27 29.29 29.30 romulusn 40.47 40.52 40.57 romulusm 40.81 40.83 40.85 T:giftcofb128v1 40.94 40.97 40.98 romulust 44.92 44.92 44.92 T:tinyjambu128v2 48.70 48.85 48.85 T:isapk128av20 51.79 51.79 51.79 T:tinyjambu192v2 53.36 53.37 53.44 T:tinyjambu256v2 81.84 81.86 81.88 T:isapk128v20 120.03 120.05 120.10 T:elephant200v2 125.39 125.67 126.01 T:isapxv20 4857.62 4860.38 4886.14 T:elephant176v2 5515.55 5523.12 5523.88 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.94 6.02 6.04 T:aes128gcmv1 6.07 6.22 6.27 aes256gcmv1 9.48 9.50 10.01 ascon128av12 12.25 12.25 12.44 ascon128v12 12.27 12.27 12.35 ascon80pqv12 17.23 17.33 17.41 T:xoodyakround3 18.04 18.04 18.29 ascon128abi32v12 27.10 27.16 27.32 ascon128bi32v12 29.54 29.69 29.93 T:schwaemm256128v2 33.81 34.20 34.41 T:schwaemm128128v2 34.73 34.76 35.19 T:grain128aeadv2 34.92 35.17 35.37 romulusn 37.88 37.92 38.15 T:schwaemm256256v2 38.31 38.53 38.91 T:schwaemm192192v2 46.23 46.28 46.43 romulusm 48.95 49.73 49.77 T:giftcofb128v1 52.54 52.54 52.68 T:tinyjambu128v2 60.83 60.83 61.06 T:tinyjambu192v2 62.34 62.34 62.47 T:tinyjambu256v2 84.84 85.09 85.56 T:isapa128av20 107.70 107.81 107.88 romulust 170.16 170.51 170.76 T:elephant200v2 194.09 197.58 197.62 T:isapk128av20 322.73 322.95 322.96 T:isapa128v20 1277.47 1277.75 1277.89 T:isapk128v20 1857.38 1872.32 1906.52 T:isapxv20 6048.72 6053.63 6083.95 T:elephant176v2 7385.78 7392.48 7396.22 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.76 5.76 5.77 T:aes128gcmv1 5.80 5.85 5.87 aes256gcmv1 9.86 10.02 10.15 ascon128av12 12.25 12.25 12.48 ascon80pqv12 12.30 12.30 12.40 ascon128v12 17.36 17.48 17.82 T:xoodyakround3 18.16 18.19 18.42 ascon128abi32v12 25.31 25.45 25.77 ascon128bi32v12 29.76 29.77 30.03 T:schwaemm256128v2 34.21 34.25 34.44 T:schwaemm128128v2 35.14 35.36 35.60 romulusn 35.39 35.41 35.65 T:grain128aeadv2 37.98 37.99 38.23 T:schwaemm256256v2 38.46 38.52 38.79 T:schwaemm192192v2 47.38 47.52 47.70 romulusm 49.53 49.73 49.89 T:giftcofb128v1 52.83 52.98 53.09 T:tinyjambu128v2 61.01 61.01 61.16 T:tinyjambu192v2 62.32 62.32 62.52 T:tinyjambu256v2 84.79 84.88 85.17 T:isapa128av20 107.67 107.95 108.23 romulust 170.15 170.32 170.52 T:elephant200v2 194.59 197.71 198.01 T:isapk128av20 323.04 324.07 324.17 T:isapa128v20 1277.54 1278.17 1278.53 T:isapk128v20 1863.59 1883.91 1889.00 T:isapxv20 6050.89 6054.64 6082.06 T:elephant176v2 7386.32 7392.23 7394.04 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.76 5.76 5.77 T:aes128gcmv1 5.85 5.87 5.88 aes256gcmv1 9.55 9.63 9.98 ascon128av12 12.15 12.24 12.47 ascon128v12 12.25 12.25 12.35 ascon80pqv12 17.28 17.33 17.57 T:xoodyakround3 18.14 18.17 18.27 ascon128abi32v12 25.42 25.45 25.59 ascon128bi32v12 29.74 29.77 29.88 T:schwaemm256128v2 33.91 33.95 34.06 T:schwaemm128128v2 35.08 35.24 35.27 romulusn 35.49 35.64 35.77 T:grain128aeadv2 37.99 38.01 38.23 T:schwaemm256256v2 38.20 38.28 38.44 T:schwaemm192192v2 47.46 47.53 47.70 romulusm 49.49 49.67 49.95 T:giftcofb128v1 52.64 52.64 52.64 T:tinyjambu128v2 54.40 54.46 54.72 T:isapa128av20 60.82 61.25 61.25 T:tinyjambu192v2 62.29 62.29 62.29 T:tinyjambu256v2 67.41 67.53 67.82 romulust 123.35 126.60 126.74 T:isapk128av20 168.71 168.71 168.95 T:isapa128v20 169.97 170.22 170.44 T:elephant200v2 661.65 661.71 661.95 T:isapk128v20 977.45 995.83 998.28 T:isapxv20 6048.47 6053.70 6078.91 T:elephant176v2 7387.36 7392.61 7395.34 T:elephant160v2