VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20260217

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.54 1.55 1.55 T:aes128gcmv1 1.75 1.76 1.77 aes256gcmv1 6.57 6.59 6.61 ascon128av12 9.04 9.04 9.05 ascon128v12 9.03 9.05 9.07 ascon80pqv12 11.41 11.43 11.43 ascon128abi32v12 15.11 15.36 15.44 T:xoodyakround3 16.44 16.51 16.64 ascon128bi32v12 19.40 19.40 19.41 T:schwaemm256128v2 24.05 24.11 24.15 T:schwaemm256256v2 25.63 25.81 25.82 T:schwaemm192192v2 26.99 27.28 27.39 T:grain128aeadv2 27.75 27.80 27.84 T:schwaemm128128v2 34.16 34.18 34.19 T:isapa128av20 34.52 34.59 34.72 T:isapa128v20 34.61 34.98 35.27 romulusn 40.52 40.55 40.58 T:giftcofb128v1 56.43 56.51 56.59 T:tinyjambu128v2 56.87 57.01 57.08 romulusm 66.36 66.44 66.53 T:isapk128av20 66.57 66.61 66.62 T:tinyjambu192v2 71.04 71.04 71.05 T:tinyjambu256v2 88.48 89.02 89.65 T:isapk128v20 115.58 115.59 115.61 romulust 147.83 147.95 148.27 T:elephant200v2 165.17 167.75 170.00 T:isapxv20 6945.05 6948.47 6949.76 T:elephant176v2 7827.81 7828.39 7829.05 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.68 1.69 1.70 T:aes128gcmv1 1.74 1.74 1.75 aes256gcmv1 6.06 6.08 6.10 ascon128av12 8.88 8.89 8.90 ascon80pqv12 9.08 9.09 9.12 ascon128v12 11.44 11.46 11.46 ascon128abi32v12 15.39 15.55 15.96 T:xoodyakround3 16.25 16.26 16.26 ascon128bi32v12 19.46 19.48 19.50 T:schwaemm256128v2 24.02 24.08 24.12 T:schwaemm256256v2 25.87 25.88 25.89 T:schwaemm192192v2 27.30 27.31 27.38 T:grain128aeadv2 27.78 27.83 27.86 T:schwaemm128128v2 34.12 34.14 34.17 T:isapa128av20 34.77 35.10 35.10 T:isapa128v20 35.01 35.23 35.59 romulusn 40.48 40.52 40.55 T:giftcofb128v1 56.52 56.53 56.54 T:tinyjambu128v2 56.61 57.02 57.24 romulusm 66.15 66.15 66.17 T:tinyjambu192v2 66.27 66.49 66.57 T:isapk128av20 71.15 71.16 71.16 T:tinyjambu256v2 88.59 88.94 89.57 T:isapk128v20 115.58 115.59 115.60 romulust 147.99 148.11 148.43 T:elephant200v2 166.08 167.66 168.91 T:isapxv20 6944.31 6944.95 6947.04 T:elephant176v2 7828.32 7828.96 7835.07 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.68 1.70 1.71 T:aes128gcmv1 1.73 1.74 1.75 aes256gcmv1 6.07 6.08 6.08 ascon128av12 8.91 8.92 8.92 ascon80pqv12 9.12 9.12 9.12 ascon128v12 11.45 11.46 11.47 ascon128abi32v12 15.45 15.61 15.94 T:xoodyakround3 16.26 16.26 16.27 ascon128bi32v12 17.25 17.26 17.39 T:isapa128v20 19.47 19.49 19.50 T:schwaemm256128v2 22.89 22.91 22.93 T:isapa128av20 24.02 24.09 24.13 T:schwaemm256256v2 25.86 25.86 25.88 T:schwaemm192192v2 27.30 27.32 27.34 T:grain128aeadv2 27.79 27.83 27.86 T:schwaemm128128v2 35.01 35.24 35.59 romulusn 38.86 38.87 38.87 romulust 40.46 40.51 40.54 T:giftcofb128v1 44.34 44.37 44.40 T:isapk128av20 54.97 55.31 55.59 T:isapk128v20 54.72 56.52 56.53 T:tinyjambu128v2 56.62 57.04 57.27 romulusm 66.13 66.14 66.18 T:tinyjambu192v2 71.14 71.14 71.15 T:tinyjambu256v2 97.41 97.90 98.74 T:isapxv20 147.91 148.07 148.20 T:elephant200v2 6943.11 6946.70 6948.29 T:elephant176v2 7828.18 7828.83 7831.33 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.03 1.04 1.04 T:aes128gcmv1 1.14 1.15 1.16 aes256gcmv1 6.29 6.30 6.30 ascon128av12 8.80 8.84 8.94 ascon80pqv12 8.99 8.99 9.00 ascon128v12 11.18 11.19 11.19 ascon128abi32v12 11.56 11.70 11.77 T:xoodyakround3 16.45 16.46 16.47 ascon128bi32v12 19.39 19.41 19.42 T:schwaemm256128v2 23.94 23.98 24.01 T:schwaemm256256v2 25.57 25.59 25.59 T:schwaemm192192v2 26.03 26.29 26.33 T:isapa128v20 27.16 27.21 27.29 T:grain128aeadv2 27.73 27.76 27.78 T:schwaemm128128v2 28.21 28.40 28.52 romulusn 28.58 28.61 28.68 T:isapa128av20 39.20 39.40 39.43 romulusm 40.46 40.49 40.53 T:giftcofb128v1 44.61 44.70 44.78 T:tinyjambu128v2 51.83 51.85 51.86 T:tinyjambu192v2 53.35 53.36 53.39 T:tinyjambu256v2 55.47 55.51 55.52 T:isapk128av20 71.71 72.09 72.56 T:isapk128v20 77.22 77.23 77.25 romulust 111.62 111.75 111.89 T:elephant200v2 117.47? 132.77? 133.80? T:isapxv20 5184.92 5186.53 5188.65 T:elephant176v2 5867.54 5868.90 5869.28 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.10 1.11 1.11 T:aes128gcmv1 1.14 1.14 1.15 aes256gcmv1 5.99 6.01 6.01 ascon128av12 8.89 8.89 8.90 ascon80pqv12 8.98 8.98 9.00 ascon128v12 11.24 11.25 11.26 ascon128abi32v12 11.73 11.91 12.04 T:xoodyakround3 16.24 16.32 16.36 ascon128bi32v12 19.46 19.50 19.52 T:schwaemm256128v2 23.91 23.97 24.01 T:schwaemm256256v2 25.48 25.63 25.72 T:schwaemm192192v2 26.08 26.17 26.17 T:isapa128v20 27.22 27.24 27.25 T:grain128aeadv2 27.76 27.79 28.00 T:schwaemm128128v2 28.37 28.50 28.70 romulusn 28.55 28.58 28.60 T:isapa128av20 39.18 39.21 39.41 romulusm 40.48 40.50 40.52 T:giftcofb128v1 44.75 44.76 44.78 T:tinyjambu128v2 51.43 51.43 51.46 T:tinyjambu192v2 53.41 53.42 53.46 T:tinyjambu256v2 55.45 55.53 55.86 T:isapk128av20 71.73 72.22 72.73 T:isapk128v20 77.23 77.24 77.24 romulust 111.54 111.70 111.77 T:elephant200v2 115.92? 132.94? 134.00? T:isapxv20 5186.18 5186.66 5187.39 T:elephant176v2 5868.69 5869.13 5869.61 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.11 1.11 1.12 T:aes128gcmv1 1.13 1.14 1.15 aes256gcmv1 5.99 6.01 6.01 ascon128av12 8.89 8.89 8.90 ascon80pqv12 8.98 8.99 9.00 ascon128v12 11.24 11.25 11.26 ascon128abi32v12 11.77 11.95 12.06 T:xoodyakround3 16.25 16.32 16.36 ascon128bi32v12 17.47 17.53 17.58 T:isapa128v20 19.45 19.51 19.55 T:schwaemm256128v2 22.91 22.91 22.93 T:isapa128av20 23.92 23.98 24.02 T:schwaemm256256v2 25.44 25.62 25.72 T:schwaemm192192v2 27.24 27.26 27.36 T:grain128aeadv2 27.75 27.80 27.93 T:schwaemm128128v2 28.37 28.49 28.70 romulusn 38.87 38.88 38.88 romulust 39.18 39.23 39.44 romulusm 40.46 40.48 40.50 T:giftcofb128v1 44.48 44.52 44.89 T:isapk128av20 44.74 44.75 44.77 T:tinyjambu128v2 51.39 51.40 51.41 T:tinyjambu192v2 53.40 53.41 53.42 T:tinyjambu256v2 55.13 55.30 55.45 T:isapk128v20 97.52 97.58 98.18 T:isapxv20 111.65 111.79 111.88 T:elephant200v2 5187.02 5188.38 5189.00 T:elephant176v2 5867.79 5868.90 5869.37 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.53 0.53 0.54 T:aes128gcmv1 0.54 0.55 0.56 aes256gcmv1 6.00 6.01 6.02 ascon128av12 8.01 8.10 8.32 T:xoodyakround3 8.79 8.80 8.81 ascon80pqv12 8.96 8.97 8.98 ascon128v12 10.94 10.95 10.98 ascon128abi32v12 16.28 16.39 16.41 ascon128bi32v12 17.61 17.78 17.79 T:isapa128v20 19.40 19.41 19.42 T:schwaemm256128v2 21.75 21.77 21.78 romulusm 21.80 21.82 21.82 romulusn 22.97 22.99 23.04 T:isapa128av20 23.82 23.86 23.89 T:schwaemm256256v2 25.30 25.34 25.46 T:schwaemm192192v2 26.96 26.97 27.08 T:grain128aeadv2 27.69 27.75 27.78 T:schwaemm128128v2 32.87 32.98 33.06 T:tinyjambu128v2 35.61 35.70 35.71 T:tinyjambu256v2 37.07 37.07 37.07 T:tinyjambu192v2 38.86 38.87 38.88 romulust 40.45 40.50 40.51 T:giftcofb128v1 44.51 44.57 44.65 T:isapk128av20 55.01 55.28 55.56 T:isapk128v20 75.57 75.86 75.93 T:elephant200v2 96.93 97.09 97.61 T:isapxv20 3428.62 3429.76 3430.84 T:elephant176v2 3909.17 3909.52 3909.97 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.52 0.53 0.56 T:aes128gcmv1 0.54 0.55 0.56 aes256gcmv1 5.92 5.93 5.94 ascon128av12 8.02 8.11 8.34 T:xoodyakround3 8.88 8.89 8.94 ascon80pqv12 8.90 8.91 8.91 ascon128v12 11.03 11.04 11.04 ascon128abi32v12 16.24 16.35 16.47 ascon128bi32v12 17.66 17.72 17.85 T:isapa128v20 19.29 19.40 19.42 T:schwaemm256128v2 21.76 21.77 21.80 romulusm 21.80 21.81 21.82 romulusn 22.91 22.92 22.95 T:isapa128av20 23.79 23.85 23.89 T:schwaemm256256v2 25.33 25.34 25.36 T:schwaemm192192v2 27.27 27.37 27.38 T:grain128aeadv2 27.69 27.73 27.77 T:schwaemm128128v2 32.94 32.96 32.98 T:tinyjambu128v2 35.65 35.66 35.70 T:tinyjambu256v2 36.68 36.85 36.88 T:tinyjambu192v2 38.86 38.87 38.88 romulust 40.46 40.47 40.51 T:giftcofb128v1 44.64 45.06 45.16 T:isapk128av20 55.06 55.32 55.52 T:isapk128v20 75.51 75.82 76.07 T:elephant200v2 96.18 96.46 97.20 T:isapxv20 3429.04 3430.08 3430.99 T:elephant176v2 3909.54 3910.12 3921.50 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.52 0.54 0.55 T:aes128gcmv1 0.55 0.56 0.56 aes256gcmv1 5.93 5.94 5.94 ascon128av12 7.98 8.09 8.40 T:xoodyakround3 8.87 8.88 8.90 ascon80pqv12 8.95 8.96 8.97 ascon128v12 11.03 11.03 11.04 ascon128abi32v12 16.24 16.37 16.47 ascon128bi32v12 17.81 17.84 17.85 T:isapa128v20 19.40 19.41 19.43 T:schwaemm256128v2 21.76 21.77 21.79 romulusm 21.80 21.81 21.82 romulusn 22.91 22.92 22.95 T:isapa128av20 23.79 23.85 23.89 T:schwaemm256256v2 25.33 25.35 25.36 T:schwaemm192192v2 27.21 27.37 27.38 T:grain128aeadv2 27.65 27.70 27.74 T:schwaemm128128v2 32.94 32.99 33.08 T:tinyjambu128v2 35.60 35.68 35.69 T:tinyjambu256v2 36.84 36.86 36.88 T:tinyjambu192v2 38.86 38.87 38.87 romulust 40.42 40.44 40.45 T:giftcofb128v1 44.56 44.61 44.64 T:isapk128av20 55.05 55.28 55.53 T:isapk128v20 75.59 75.70 76.06 T:elephant200v2 96.29 96.55 97.66 T:isapxv20 3427.91 3428.85 3430.40 T:elephant176v2 3909.25 3909.64 3910.01 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.15 1.15 1.15 T:aes128gcmv1 1.27 1.28 1.29 aes256gcmv1 6.46 6.46 6.46 ascon128av12 8.97 8.99 9.08 ascon80pqv12 9.14 9.14 9.15 ascon128v12 11.48 11.48 11.56 ascon128abi32v12 11.74 11.90 11.96 T:xoodyakround3 16.78 16.78 16.83 ascon128bi32v12 19.97 19.97 19.98 T:schwaemm256128v2 24.62 24.64 24.66 T:schwaemm256256v2 26.15 26.16 26.27 T:schwaemm192192v2 27.49 27.51 27.58 T:grain128aeadv2 28.14 28.16 28.17 T:schwaemm128128v2 28.47 28.66 28.77 romulusn 31.01 31.02 31.03 T:isapa128av20 38.38 38.38 38.48 T:isapa128v20 39.63 39.75 39.79 romulusm 40.86 40.87 40.89 T:giftcofb128v1 45.09 45.10 45.11 T:tinyjambu128v2 52.23 52.26 52.26 T:tinyjambu192v2 53.75 53.76 53.77 T:tinyjambu256v2 62.49 62.50 62.53 T:isapk128av20 78.41 78.41 78.42 romulust 113.94 114.18 114.26 T:elephant200v2 125.50 125.63 126.05 T:isapk128v20 211.56 211.91 214.07 T:isapxv20 5225.10 5225.83 5227.09 T:elephant176v2 5934.81 5935.08 5935.38 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.23 1.23 1.24 T:aes128gcmv1 1.27 1.28 1.28 aes256gcmv1 6.17 6.17 6.18 ascon128av12 9.05 9.05 9.06 ascon80pqv12 9.14 9.14 9.14 ascon128v12 11.54 11.55 11.55 ascon128abi32v12 11.89 12.06 12.14 T:xoodyakround3 16.59 16.65 16.69 ascon128bi32v12 20.03 20.07 20.07 T:schwaemm256128v2 24.57 24.63 24.67 T:schwaemm256256v2 26.01 26.19 26.28 T:schwaemm192192v2 27.58 27.59 27.67 T:grain128aeadv2 28.14 28.18 28.36 T:schwaemm128128v2 28.66 28.76 28.95 romulusn 30.98 30.99 31.02 T:isapa128av20 38.26 38.27 38.36 T:isapa128v20 39.67 39.81 39.95 romulusm 40.88 40.88 40.90 T:giftcofb128v1 45.12 45.13 45.13 T:tinyjambu128v2 51.85 51.89 51.90 T:tinyjambu192v2 53.85 53.88 53.89 T:tinyjambu256v2 62.47 62.53 62.82 T:isapk128av20 78.40 78.41 78.42 romulust 114.05 114.12 114.17 T:elephant200v2 125.58 125.73 126.06 T:isapk128v20 211.55 212.50 213.78 T:isapxv20 5225.75 5226.76 5227.77 T:elephant176v2 5934.90 5935.12 5935.42 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.22 1.23 1.23 T:aes128gcmv1 1.27 1.28 1.28 aes256gcmv1 6.16 6.17 6.17 ascon128av12 9.05 9.05 9.06 ascon80pqv12 9.14 9.14 9.15 ascon128v12 11.55 11.55 11.55 ascon128abi32v12 11.92 12.08 12.17 T:xoodyakround3 16.58 16.66 16.69 ascon128bi32v12 20.02 20.06 20.07 T:schwaemm256128v2 23.75 23.75 23.76 T:isapa128v20 24.27 24.28 24.29 T:isapa128av20 24.58 24.63 24.65 T:schwaemm256256v2 26.03 26.19 26.27 T:schwaemm192192v2 27.57 27.58 27.60 T:grain128aeadv2 28.14 28.15 28.17 T:schwaemm128128v2 28.65 28.76 28.95 romulusn 39.67 39.78 39.92 romulusm 40.00 40.00 40.00 romulust 40.84 40.85 40.88 T:giftcofb128v1 45.13? 45.15? 57.93? T:tinyjambu128v2 48.48 48.48 48.51 T:isapk128av20 51.83 51.83 51.85 T:tinyjambu192v2 53.81 53.83 53.83 T:tinyjambu256v2 82.56 82.61 82.74 T:isapk128v20 114.00 114.09 114.13 T:elephant200v2 138.38 138.47 138.63 T:isapxv20 5225.50 5234.15 5240.68 T:elephant176v2 5935.04 5935.41 5946.21 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.92 5.95 6.04 aes256gcmv1 5.96 6.00 6.00 T:aes128gcmv1 9.81 9.91 10.36 ascon128av12 12.31 12.39 12.65 ascon80pqv12 12.41 12.42 12.52 ascon128v12 17.68 17.83 18.00 T:xoodyakround3 18.09 18.19 18.52 ascon128abi32v12 23.80 23.87 24.21 ascon128bi32v12 32.51 32.61 32.64 T:schwaemm256128v2 34.76 34.85 35.01 romulusn 35.12 35.33 35.47 T:grain128aeadv2 36.82 37.07 37.46 T:schwaemm128128v2 39.18 39.25 39.32 T:schwaemm256256v2 42.48 42.51 42.57 T:schwaemm192192v2 48.25 48.28 48.46 romulusm 49.24 49.38 49.71 T:giftcofb128v1 53.51 53.60 54.77 T:tinyjambu128v2 61.45 61.45 61.51 T:tinyjambu192v2 63.33 63.33 63.33 T:tinyjambu256v2 86.48 86.65 86.96 T:isapa128av20 105.24 105.33 105.50 romulust 162.96 163.22 163.52 T:elephant200v2 211.49 211.66 211.91 T:isapk128av20 318.38 318.38 318.51 T:isapa128v20 1337.62 1341.27 1350.49 T:isapk128v20 2006.75 2018.17 2033.64 T:isapxv20 6505.53 6507.64 6510.32 T:elephant176v2 7947.27 7948.70 7950.72 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.82 5.84 5.86 T:aes128gcmv1 5.99 6.05 6.12 aes256gcmv1 9.46 9.48 9.86 ascon128av12 12.28 12.33 12.72 ascon80pqv12 12.30 12.38 12.57 ascon128v12 17.69 17.83 17.97 T:xoodyakround3 18.21 18.27 18.43 ascon128abi32v12 23.82 23.92 24.31 ascon128bi32v12 32.67 32.72 32.79 T:schwaemm256128v2 34.90 35.00 35.12 romulusn 35.33 35.51 35.74 T:grain128aeadv2 36.99 37.15 37.28 T:schwaemm128128v2 39.04 39.14 39.23 T:schwaemm256256v2 42.59 42.75 42.79 T:schwaemm192192v2 49.38 49.60 49.83 T:giftcofb128v1 50.55 50.67 50.84 romulusm 53.73 53.76 53.82 T:tinyjambu128v2 61.26 61.45 61.47 T:tinyjambu192v2 63.44 63.44 63.58 T:tinyjambu256v2 86.39 86.61 86.77 T:isapa128av20 105.35 105.44 105.60 romulust 162.75 163.22 163.51 T:elephant200v2 211.54 213.07 213.21 T:isapk128av20 318.59 318.59 318.59 T:isapa128v20 1338.34 1342.10 1350.08 T:isapk128v20 2015.63 2019.24 2021.87 T:isapxv20 6506.73 6508.79 6526.84 T:elephant176v2 7946.84 7949.23 7958.66 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.82 5.83 5.84 T:aes128gcmv1 6.01 6.04 6.08 aes256gcmv1 9.48 9.48 9.90 ascon128av12 12.28 12.28 12.56 ascon80pqv12 12.23 12.37 12.49 ascon128v12 17.86 17.96 18.03 T:xoodyakround3 18.17 18.24 18.29 ascon128abi32v12 23.78 23.83 23.88 ascon128bi32v12 32.43 32.54 32.75 T:schwaemm256128v2 34.74 34.90 35.06 romulusn 35.21 35.24 35.42 T:grain128aeadv2 37.01 37.25 37.42 T:schwaemm128128v2 39.07 39.13 39.19 T:schwaemm256256v2 42.69 42.84 42.84 T:schwaemm192192v2 49.55 49.64 49.70 T:giftcofb128v1 50.48 50.58 50.76 romulusm 53.93 53.94 53.94 T:tinyjambu128v2 55.53 55.65 55.75 T:isapa128av20 61.28 61.28 61.34 T:tinyjambu192v2 63.51 63.55 63.71 T:tinyjambu256v2 65.76 65.92 66.07 romulust 130.76 130.91 132.10 T:isapk128av20 161.63 161.64 161.74 T:isapa128v20 162.67 163.11 163.36 T:elephant200v2 698.21 698.83 702.90 T:isapk128v20 1051.17 1056.64 1070.08 T:isapxv20 6506.38 6507.90 6509.81 T:elephant176v2 7946.68 7948.28 7950.90 T:elephant160v2