VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.68 2.71 2.72 T:aes128gcmv1 3.13 3.17 3.20 aes256gcmv1 11.44 11.46 11.48 ascon128av12 16.76 16.77 16.78 ascon80pqv12 16.92 16.94 16.94 ascon128v12 23.04 23.05 23.06 ascon128abi32v12 23.78 23.80 24.24 T:xoodyakround3 32.64 32.66 32.67 T:schwaemm256128v2 33.85 33.86 34.36 ascon128bi32v12 40.30 40.31 40.32 T:schwaemm256256v2 40.69 40.83 40.84 T:grain128aeadv2 43.18 43.21 43.22 T:schwaemm192192v2 43.65 43.66 43.68 T:schwaemm128128v2 45.27 45.29 45.57 romulusn 47.65 47.68 47.69 T:giftcofb128v1 63.38 63.42 63.44 T:isapa128av20 72.05 72.07 72.09 T:isapa128v20 73.92 73.93 74.75 romulusm 84.80 84.81 84.83 T:tinyjambu128v2 102.55 102.58 102.59 T:tinyjambu192v2 109.56 109.58 109.63 T:tinyjambu256v2 125.98 126.06 126.49 T:isapk128av20 151.68 151.70 151.72 T!!!romulust 164.57 166.50 175.89 T:isapk128v20 237.72 237.76 238.72 T:elephant200v2 258.43 258.50 259.26 T:isapxv20 12768.72 12836.74 12846.98 T:elephant176v2 13917.91 13934.70 13938.02 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 2.81 2.83 2.84 T:aes128gcmv1 3.41 3.43 3.45 aes256gcmv1 11.14 11.15 11.18 ascon128av12 16.66 16.69 16.70 ascon80pqv12 16.76 16.77 16.78 ascon128v12 22.87 22.89 22.95 T:xoodyakround3 23.26 23.27 23.27 ascon128abi32v12 32.52 32.54 32.56 T:schwaemm256128v2 34.11 34.12 34.12 ascon128bi32v12 40.27 40.28 40.29 T:schwaemm256256v2 40.78 40.79 40.80 T:grain128aeadv2 43.18 43.19 43.20 T:schwaemm192192v2 43.59 43.60 43.62 T:schwaemm128128v2 45.66 45.68 45.73 romulusn 46.95 46.96 46.97 T:giftcofb128v1 63.56 63.60 63.65 T:isapa128av20 71.90 72.00 72.10 T:isapa128v20 74.05 74.07 74.41 romulusm 83.99 84.05 84.22 T:tinyjambu128v2 102.56 102.58 102.60 T:tinyjambu192v2 108.31 108.87 112.95 T:tinyjambu256v2 126.01 126.02 126.74 T:isapk128av20 151.74 151.92 153.52 T!!!romulust 166.27 166.44 167.54 T:isapk128v20 237.74 237.76 237.83 T:elephant200v2 258.43 258.57 262.79 T:isapxv20 12777.87 12831.60 12847.02 T:elephant176v2 13918.59 13935.58 13945.44 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 2.82 2.83 2.84 T:aes128gcmv1 3.41 3.42 3.45 aes256gcmv1 11.13 11.16 11.16 ascon128av12 16.68 16.69 16.70 ascon80pqv12 16.76 16.77 16.78 ascon128v12 22.92 22.98 23.01 T:xoodyakround3 23.26 23.27 23.28 ascon128abi32v12 32.51 32.53 32.54 T:schwaemm256128v2 34.11 34.11 34.13 ascon128bi32v12 35.80 35.90 35.94 T:isapa128v20 40.26 40.27 40.29 T:schwaemm256256v2 40.79 40.82 40.86 T:grain128aeadv2 41.59 41.62 41.64 T:isapa128av20 43.19 43.19 43.20 T:schwaemm192192v2 43.59 43.60 43.61 T:schwaemm128128v2 45.64 45.68 45.75 romulusn 46.96 46.97 46.98 T:giftcofb128v1 53.04 53.07 53.27 T!!!romulust 74.04 74.06 74.08 romulusm 83.28 83.30 83.37 T:isapk128av20 84.04 84.26 85.91 T:tinyjambu128v2 102.56 102.58 102.61 T:tinyjambu192v2 103.41 103.50 103.58 T:isapk128v20 108.32 108.88 108.90 T:tinyjambu256v2 154.03 154.11 154.82 T:isapxv20 237.74 237.76 237.81 T:elephant200v2 12772.95 12838.89 12844.28 T:elephant176v2 13919.64 13932.39 13939.39 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.98 2.01 2.02 T:aes128gcmv1 2.20 2.23 2.24 aes256gcmv1 11.24 11.27 11.28 ascon128av12 16.45 16.46 16.47 ascon80pqv12 16.59 16.61 16.62 ascon128v12 17.03 17.04 17.06 T:xoodyakround3 22.77 22.81 22.83 ascon128abi32v12 32.30 32.32 32.33 T:schwaemm256128v2 33.70 33.72 33.92 ascon128bi32v12 37.76 37.86 38.00 romulusn 40.05 40.06 40.07 T:schwaemm256256v2 40.55 40.58 40.60 T:grain128aeadv2 42.95 42.97 42.98 T:schwaemm192192v2 43.49 43.50 43.52 T:schwaemm128128v2 47.42 47.47 47.62 T:giftcofb128v1 51.97 52.01 52.92 romulusm 52.68 52.70 52.72 T:isapa128av20 53.93 53.98 54.02 T:isapa128v20 69.08 69.19 69.20 T:tinyjambu128v2 80.42 80.43 80.44 T:tinyjambu192v2 84.05 84.06 84.08 T:tinyjambu256v2 102.34 102.37 102.49 T!!!romulust 104.51 104.61 104.99 T:isapk128av20 132.21 135.81 142.51 T:isapk128v20 176.96 176.98 177.01 T:elephant200v2 206.08 206.51 208.29 T:isapxv20 9538.28 9584.16 9592.32 T:elephant176v2 10439.45 10442.06 10450.58 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.03 2.04 2.06 T:aes128gcmv1 2.34 2.36 2.36 aes256gcmv1 11.04 11.06 11.06 ascon128av12 16.46 16.47 16.48 ascon128v12 16.45 16.47 16.49 T:xoodyakround3 16.48 16.49 16.57 ascon80pqv12 22.86 22.87 22.87 ascon128abi32v12 32.25 32.26 32.27 T:schwaemm256128v2 33.71 33.72 34.80 ascon128bi32v12 37.83 38.03 38.74 romulusn 40.03 40.04 40.05 T:schwaemm256256v2 40.45 40.46 40.67 T:grain128aeadv2 42.96 42.97 42.98 T:schwaemm192192v2 43.47 43.47 43.82 T:schwaemm128128v2 47.05 47.07 47.31 T:giftcofb128v1 51.97 52.02 52.13 romulusm 52.67 52.70 52.72 T:isapa128av20 53.56 53.98 54.02 T:isapa128v20 68.96 69.00 69.18 T:tinyjambu128v2 80.43 80.43 80.45 T:tinyjambu192v2 86.96 87.60 87.61 T:tinyjambu256v2 102.19 102.37 103.40 T!!!romulust 104.51 104.54 105.07 T:isapk128av20 135.03 135.24 141.92 T:isapk128v20 176.96 176.97 177.57 T:elephant200v2 206.41 206.50 209.35 T:isapxv20 9541.04 9585.26 9594.58 T:elephant176v2 10440.29 10443.37 10451.46 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.03 2.04 2.04 T:aes128gcmv1 2.34 2.35 2.36 aes256gcmv1 11.05 11.06 11.06 ascon128av12 16.46 16.46 16.47 ascon128v12 16.48 16.49 16.49 ascon80pqv12 16.48 16.52 16.57 T:xoodyakround3 22.87 22.87 22.89 ascon128abi32v12 32.26 32.26 32.27 T:schwaemm256128v2 33.72 33.72 34.65 ascon128bi32v12 35.88 35.93 35.93 T:isapa128v20 37.76 37.83 38.04 romulusn 40.03 40.04 40.05 T:schwaemm256256v2 40.45 40.47 41.02 T:grain128aeadv2 41.71 41.72 41.80 T:isapa128av20 42.97 42.97 42.98 T:schwaemm192192v2 43.47 43.47 43.48 T:schwaemm128128v2 47.05 47.07 47.09 T:giftcofb128v1 51.99 52.03 52.44 romulusm 53.01 53.09 53.20 T!!!romulust 68.97 69.00 69.00 T:tinyjambu128v2 80.43 80.43 80.54 T:tinyjambu192v2 83.37 83.42 85.76 T:isapk128av20 86.96 87.60 87.61 T:tinyjambu256v2 103.41 103.50 112.32 T:isapk128v20 154.24 154.29 154.66 T:isapxv20 176.96 176.97 177.02 T:elephant200v2 9538.57 9588.66 9592.10 T:elephant176v2 10439.45 10444.38 10456.47 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.27 1.29 1.31 aes256gcmv1 1.28 1.32 1.32 T:aes128gcmv1 10.05 10.08 10.29 T:xoodyakround3 11.07 11.08 11.09 ascon128av12 16.13 16.15 16.16 ascon80pqv12 16.26 16.27 16.28 ascon128v12 22.25 22.27 22.27 ascon128abi32v12 29.93 29.94 29.97 romulusm 30.45 30.50 30.58 romulusn 31.98 32.00 32.01 T:schwaemm256128v2 33.56 33.57 33.59 ascon128bi32v12 35.95 36.07 36.08 T:isapa128v20 39.80 39.81 39.82 T:schwaemm256256v2 40.24 40.29 40.48 T:grain128aeadv2 41.80 41.81 41.84 T:isapa128av20 42.72 42.74 42.75 T:schwaemm192192v2 43.34 43.34 43.35 T:schwaemm128128v2 47.05 47.71 47.73 T:giftcofb128v1 52.96 52.98 53.05 T!!!romulust 53.67 53.69 53.71 T:tinyjambu128v2 56.27 56.28 56.31 T:tinyjambu256v2 58.28 58.29 58.31 T:tinyjambu192v2 83.46 83.54 83.63 T:isapk128av20 103.42 103.58 111.92 T:isapk128v20 116.80 116.83 116.91 T:elephant200v2 154.45 154.48 154.58 T:isapxv20 6321.50 6338.56 6348.21 T:elephant176v2 6948.64 6962.29 6973.12 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.23 1.25 1.26 T:aes128gcmv1 1.26 1.29 1.30 aes256gcmv1 10.01 10.04 10.05 T:xoodyakround3 10.93 10.96 10.97 ascon128av12 16.14 16.15 16.16 ascon128v12 16.26 16.28 16.29 ascon80pqv12 22.45 22.46 22.47 ascon128abi32v12 30.03 30.15 30.32 romulusm 30.42 30.47 30.69 romulusn 31.97 31.99 32.01 T:schwaemm256128v2 33.31 33.33 33.34 ascon128bi32v12 35.95 36.07 36.10 T:isapa128v20 39.80 39.81 39.82 T:schwaemm256256v2 40.09 40.11 40.13 T:grain128aeadv2 41.79 41.82 41.84 T:isapa128av20 42.73 42.74 42.75 T:schwaemm192192v2 43.33 43.34 43.36 T:schwaemm128128v2 47.25 47.28 47.70 T:giftcofb128v1 52.93 52.97 53.00 T!!!romulust 53.14 53.16 53.17 T:tinyjambu128v2 58.28 58.30 58.31 T:tinyjambu192v2 59.03 59.04 59.06 T:tinyjambu256v2 83.01 83.16 83.21 T:isapk128av20 103.69 103.81 113.34 T:isapk128v20 116.81 116.82 116.86 T:elephant200v2 154.40 154.50 155.15 T:isapxv20 6315.30 6338.25 6345.04 T:elephant176v2 6952.12 6965.86 6974.02 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.24 1.24 1.25 T:aes128gcmv1 1.27 1.29 1.30 aes256gcmv1 10.06 10.09 10.30 T:xoodyakround3 10.94 10.96 10.97 ascon128av12 16.14 16.15 16.16 ascon128v12 16.26 16.28 16.28 ascon80pqv12 22.46 22.46 22.46 ascon128abi32v12 30.02 30.15 30.33 romulusm 30.41 30.44 30.69 romulusn 31.98 31.99 32.01 T:schwaemm256128v2 33.31 33.32 33.34 ascon128bi32v12 35.94 36.06 36.09 T:isapa128v20 39.80 39.81 39.82 T:schwaemm256256v2 40.09 40.11 40.15 T:grain128aeadv2 41.79 41.82 41.85 T:isapa128av20 42.73 42.74 42.75 T:schwaemm192192v2 43.34 43.34 43.36 T:schwaemm128128v2 47.70 47.71 47.72 T:giftcofb128v1 52.94 52.96 52.99 T!!!romulust 53.15 53.16 53.18 T:tinyjambu128v2 58.28 58.29 58.31 T:tinyjambu192v2 59.03 59.05 59.06 T:tinyjambu256v2 83.46 83.49 83.58 T:isapk128av20 103.40 103.49 108.02 T:isapk128v20 116.81 116.82 116.86 T:elephant200v2 154.42 154.47 154.54 T:isapxv20 6311.50 6337.99 6346.37 T:elephant176v2 6951.55 6964.41 6971.56 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.16 2.16 2.17 T:aes128gcmv1 2.41 2.41 2.42 aes256gcmv1 11.51 11.53 11.53 ascon128av12 16.69 16.70 16.71 ascon80pqv12 16.83 16.84 16.84 ascon128v12 17.07 17.27 17.29 T:xoodyakround3 23.30 23.30 23.32 ascon128abi32v12 33.21 33.22 33.23 T:schwaemm256128v2 34.22 34.22 34.23 ascon128bi32v12 38.13 38.32 38.47 romulusn 41.08 41.08 41.09 T:schwaemm256256v2 41.07 41.09 41.12 T:grain128aeadv2 43.88 43.88 43.90 T:schwaemm192192v2 44.03 44.03 44.04 T:schwaemm128128v2 47.84 47.95 47.96 T:giftcofb128v1 52.40 52.41 52.44 romulusm 56.48 56.54 56.54 T:isapa128av20 69.63 69.73 69.74 T:tinyjambu128v2 78.43 78.44 78.45 T:isapa128v20 81.04 81.04 81.05 T:tinyjambu192v2 84.70 84.71 84.71 T:tinyjambu256v2 104.03 104.04 104.18 T!!!romulust 122.51 122.54 122.66 T:isapk128av20 180.70 180.71 180.76 T:elephant200v2 242.28 242.38 251.44 T:isapk128v20 336.04 336.10 343.56 T:isapxv20 9620.74 9657.87 9662.35 T:elephant176v2 10560.71 10565.56 10569.29 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.19 2.19 2.21 T:aes128gcmv1 2.53 2.54 2.55 aes256gcmv1 11.31 11.32 11.32 ascon128av12 16.60 16.62 16.64 T:xoodyakround3 16.70 16.70 16.71 ascon128v12 16.73 16.73 16.73 ascon80pqv12 23.38 23.38 23.39 ascon128abi32v12 33.16 33.17 33.17 T:schwaemm256128v2 34.23 34.23 34.24 ascon128bi32v12 38.26 38.35 38.58 romulusn 40.95 40.96 40.97 T:grain128aeadv2 41.06 41.07 41.07 T:schwaemm256256v2 43.88 43.88 43.89 T:schwaemm192192v2 44.00 44.00 44.01 T:schwaemm128128v2 47.59 47.64 47.66 T:giftcofb128v1 52.52 52.53 52.69 romulusm 56.70 56.70 56.72 T:isapa128av20 69.52 69.54 69.67 T:tinyjambu128v2 78.46 78.48 78.74 T:isapa128v20 81.04 81.05 81.06 T:tinyjambu192v2 88.24 88.24 88.25 T:tinyjambu256v2 103.90 103.97 105.06 T!!!romulust 122.54 122.55 125.51 T:isapk128av20 180.70 180.71 181.40 T:elephant200v2 242.34 242.34 244.35 T:isapk128v20 336.04 336.06 336.63 T:isapxv20 9617.25 9657.26 9661.63 T:elephant176v2 10559.08 10563.02 10565.94 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.18 2.19 2.19 T:aes128gcmv1 2.53 2.53 2.54 aes256gcmv1 11.31 11.32 11.32 ascon128av12 16.66 16.67 16.70 T:xoodyakround3 16.70 16.70 16.70 ascon128v12 16.73 16.73 16.73 ascon80pqv12 23.37 23.39 23.39 ascon128abi32v12 33.16 33.16 33.20 T:schwaemm256128v2 34.22 34.23 34.23 ascon128bi32v12 38.35 38.37 38.60 romulusn 40.95 40.96 40.97 T:grain128aeadv2 41.06 41.07 41.07 T:schwaemm256256v2 43.88 43.88 43.88 T:schwaemm192192v2 44.00 44.00 44.00 T:schwaemm128128v2 44.03 44.04 44.04 T:isapa128av20 47.59 47.59 47.59 T:giftcofb128v1 48.36 48.37 48.38 T:isapa128v20 52.52 52.53 53.67 romulusm 54.62 54.62 54.70 T!!!romulust 69.53 69.54 69.56 T:tinyjambu128v2 81.05 81.05 81.06 T:tinyjambu192v2 88.24 88.25 88.25 T:tinyjambu256v2 90.68 90.70 94.57 T:isapk128av20 154.47 154.49 154.58 T:isapk128v20 180.70 180.71 181.36 T:elephant200v2 220.57 220.65 222.69 T:isapxv20 9620.99 9659.26 9661.96 T:elephant176v2 10561.18 10563.52 10570.56 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 8.84 9.16 9.47 T:aes128gcmv1 10.44 11.00 11.45 aes256gcmv1 17.12 17.14 17.52 ascon128av12 21.94 21.97 22.25 ascon128v12 22.08 22.23 22.44 ascon80pqv12 24.34 24.44 24.47 T:xoodyakround3 34.73 34.83 35.23 ascon128abi32v12 45.67 45.72 45.95 ascon128bi32v12 46.66 46.84 47.03 romulusn 52.39 52.48 53.25 T:grain128aeadv2 53.62 53.64 53.69 T:schwaemm256128v2 56.03 56.12 56.27 T:schwaemm128128v2 59.08 59.17 59.83 T:giftcofb128v1 61.70 62.02 62.34 romulusm 64.27 64.33 64.41 T:schwaemm256256v2 70.27 70.36 70.95 T:schwaemm192192v2 82.19 82.42 82.58 T:tinyjambu128v2 94.95 95.06 95.16 T:tinyjambu192v2 99.55 99.70 99.77 T:tinyjambu256v2 142.62 142.80 143.28 T!!!romulust 144.34 144.56 144.72 T:isapa128av20 254.97 255.27 255.59 T:elephant200v2 514.39 514.61 515.00 T:isapk128av20 639.56 639.72 640.70 T:isapa128v20 2678.16 2678.36 2736.97 T:isapk128v20 3278.97 3279.27 3280.59 T:isapxv20 11974.80 11976.19 12126.56 T:elephant176v2 14079.64 14081.47 14241.33 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 8.94 9.00 9.34 T:aes128gcmv1 10.52 10.77 10.91 aes256gcmv1 17.05 17.17 17.25 ascon128av12 21.98 22.02 22.33 ascon128v12 22.14 22.33 22.52 ascon80pqv12 23.86 24.00 24.09 T:xoodyakround3 35.06 35.12 35.34 ascon128abi32v12 45.80 45.84 46.03 ascon128bi32v12 47.09 47.17 47.42 romulusn 52.25 52.39 52.50 T:grain128aeadv2 53.55 53.67 53.77 T:schwaemm256128v2 55.97 56.03 56.09 T:schwaemm128128v2 59.12 59.19 59.44 T:giftcofb128v1 64.06 64.12 64.23 romulusm 64.16 64.25 64.30 T:schwaemm256256v2 70.34 70.44 70.56 T:schwaemm192192v2 82.23 82.34 82.39 T:tinyjambu128v2 95.14 95.27 95.34 T:tinyjambu192v2 102.95 103.11 103.17 T:tinyjambu256v2 142.45 143.03 143.34 T!!!romulust 147.92 148.23 148.52 T:isapa128av20 254.78 255.00 255.08 T:elephant200v2 514.80 514.95 515.44 T:isapk128av20 639.94 640.27 640.61 T:isapa128v20 2679.78 2680.09 2683.72 T:isapk128v20 3279.22 3279.53 3280.86 T:isapxv20 11972.48 11975.78 12056.34 T:elephant176v2 14079.89 14094.09 14236.47 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 8.97 8.97 8.98 T:aes128gcmv1 10.25 10.36 10.75 aes256gcmv1 17.11 17.11 17.12 ascon128av12 21.94 21.95 21.98 ascon128v12 22.08 22.09 22.12 ascon80pqv12 24.05 24.14 24.58 T:xoodyakround3 35.05 35.08 35.14 ascon128abi32v12 45.77 45.81 45.91 ascon128bi32v12 46.94 47.02 47.12 romulusn 52.27 52.33 52.38 T:grain128aeadv2 53.47 53.53 53.59 T:schwaemm256128v2 55.95 56.02 56.09 T:schwaemm128128v2 58.91 59.00 59.06 T:giftcofb128v1 64.16 64.27 64.30 T:schwaemm256256v2 64.38 64.48 64.55 romulusm 70.20 70.33 70.44 T:schwaemm192192v2 82.19 82.30 82.36 T:tinyjambu128v2 91.34 91.44 91.78 T!!!romulust 95.12 95.22 95.33 T:tinyjambu192v2 96.47 96.59 96.75 T:isapa128av20 103.00 103.11 103.20 T:tinyjambu256v2 240.19 240.28 240.75 T:isapk128av20 254.83 254.92 255.05 T:elephant200v2 334.27 335.80 337.03 T:isapa128v20 1304.91 1305.16 1307.05 T:isapk128v20 1716.88 1717.14 1717.56 T:isapxv20 11974.16 11975.92 12133.28 T:elephant176v2 14079.78 14126.48 14325.03 T:elephant160v2