VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.68 2.71 2.72 T:aes128gcmv1 3.15 3.17 3.20 aes256gcmv1 11.43 11.45 11.47 ascon128av12 16.76 16.77 16.78 ascon80pqv12 16.93 16.94 16.95 ascon128v12 23.04 23.05 23.06 ascon128abi32v12 23.76 23.77 24.36 T:xoodyakround3 32.63 32.66 32.67 T:schwaemm256128v2 33.84 33.86 33.88 ascon128bi32v12 40.29 40.31 40.32 T:schwaemm256256v2 40.53 40.56 40.81 T:grain128aeadv2 43.17 43.24 43.52 T:schwaemm192192v2 43.65 43.66 43.67 T:schwaemm128128v2 44.65 44.68 44.82 romulusn 47.66 47.67 47.68 T:giftcofb128v1 63.40 63.42 63.54 T:isapa128av20 72.05 72.07 72.11 T:isapa128v20 75.36 75.51 75.55 romulusm 84.81 85.06 85.37 T:tinyjambu128v2 102.56 102.58 102.59 T:tinyjambu192v2 110.98 110.99 111.23 T:tinyjambu256v2 125.40 125.44 127.08 T:isapk128av20 151.72 151.74 151.77 T!!!romulust 166.78 166.91 167.14 T:isapk128v20 237.72 237.76 238.75 T:elephant200v2 258.48 258.57 259.32 T:isapxv20 12854.29 12871.83 12893.01 T:elephant176v2 13925.54 13938.29 13974.44 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 2.80 2.83 2.84 T:aes128gcmv1 3.41 3.43 3.44 aes256gcmv1 11.12 11.15 11.15 ascon128av12 16.66 16.69 16.71 ascon80pqv12 16.75 16.77 16.78 ascon128v12 22.85 22.86 22.91 T:xoodyakround3 23.26 23.27 23.28 ascon128abi32v12 32.52 32.54 32.63 T:schwaemm256128v2 34.10 34.12 34.13 ascon128bi32v12 40.26 40.27 40.29 T:schwaemm256256v2 40.66 40.78 40.90 T:grain128aeadv2 43.15 43.20 43.51 T:schwaemm192192v2 43.58 43.59 43.61 T:schwaemm128128v2 44.64 44.66 44.67 romulusn 46.95 46.96 46.97 T:giftcofb128v1 63.53 63.58 63.63 T:isapa128av20 71.92 71.99 72.13 T:isapa128v20 75.69 75.71 75.75 romulusm 84.13 84.40 84.44 T:tinyjambu128v2 102.56 102.58 102.60 T:tinyjambu192v2 111.49 111.50 111.52 T:tinyjambu256v2 125.35 125.40 125.56 T:isapk128av20 151.13 151.30 151.94 T!!!romulust 166.74 167.04 176.47 T:isapk128v20 237.73 237.76 237.85 T:elephant200v2 258.40 258.54 271.21 T:isapxv20 12838.05 12860.26 12867.95 T:elephant176v2 13928.02 13954.86 13965.97 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 2.82 2.82 2.83 T:aes128gcmv1 3.41 3.42 3.44 aes256gcmv1 11.13 11.14 11.15 ascon128av12 16.68 16.69 16.70 ascon80pqv12 16.76 16.77 16.78 ascon128v12 22.88 22.96 23.01 T:xoodyakround3 23.26 23.27 23.28 ascon128abi32v12 32.51 32.53 32.54 T:schwaemm256128v2 34.10 34.12 34.13 ascon128bi32v12 35.82 35.90 35.95 T:isapa128v20 40.26 40.27 40.29 T:schwaemm256256v2 40.65 40.68 40.82 T:grain128aeadv2 41.60 41.62 41.65 T:isapa128av20 43.14 43.19 43.51 T:schwaemm192192v2 43.59 43.60 43.62 T:schwaemm128128v2 44.65 44.66 44.67 romulusn 46.96 46.98 46.99 T:giftcofb128v1 52.27 52.30 52.81 T!!!romulust 75.72 75.74 75.76 romulusm 83.06 83.12 83.19 T:isapk128av20 84.13 84.21 84.43 T:tinyjambu128v2 102.57 102.59 102.93 T:tinyjambu192v2 103.65 103.76 103.86 T:isapk128v20 111.49 111.50 111.51 T:tinyjambu256v2 154.05 154.13 154.81 T:isapxv20 237.73 237.76 237.86 T:elephant200v2 12851.07 12871.77 12891.59 T:elephant176v2 13934.29 13954.81 13965.30 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.98 2.00 2.01 T:aes128gcmv1 2.20 2.23 2.24 aes256gcmv1 11.25 11.28 11.28 ascon128av12 16.44 16.46 16.47 ascon80pqv12 16.59 16.60 16.61 ascon128v12 17.21 17.26 17.30 T:xoodyakround3 22.78 22.81 22.82 ascon128abi32v12 32.31 32.32 32.33 T:schwaemm256128v2 33.71 33.72 33.95 ascon128bi32v12 37.15 37.18 37.55 romulusn 40.05 40.06 40.07 T:schwaemm256256v2 40.42 40.45 40.59 T:grain128aeadv2 42.94 43.29 43.31 T:schwaemm192192v2 43.50 43.50 43.53 T:schwaemm128128v2 47.37 47.47 47.77 T:giftcofb128v1 52.67 52.70 52.76 T:isapa128av20 52.45 52.71 52.91 romulusm 53.93 53.97 53.99 T:isapa128v20 69.07 69.19 69.27 T:tinyjambu128v2 80.42 80.43 80.44 T:tinyjambu192v2 84.30 84.32 84.34 T:tinyjambu256v2 102.37 102.39 102.99 T!!!romulust 104.25 105.04 110.10 T:isapk128av20 129.74 135.54 142.99 T:isapk128v20 176.97 177.00 179.10 T:elephant200v2 206.43 206.53 206.92 T:isapxv20 9596.85 9606.32 9622.08 T:elephant176v2 10455.14 10466.31 10482.26 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.01 2.03 2.05 T:aes128gcmv1 2.32 2.35 2.36 aes256gcmv1 11.04 11.05 11.05 ascon128av12 16.45 16.46 16.47 T:xoodyakround3 16.45 16.46 16.47 ascon128v12 16.47 16.49 16.50 ascon80pqv12 22.86 22.87 22.87 ascon128abi32v12 32.25 32.26 32.28 T:schwaemm256128v2 33.72 33.72 33.73 ascon128bi32v12 37.40 37.41 37.42 romulusn 40.03 40.04 40.05 T:schwaemm256256v2 40.31 40.47 40.52 T:grain128aeadv2 42.93 43.28 43.29 T:schwaemm192192v2 43.46 43.47 43.47 T:schwaemm128128v2 47.05 47.11 47.37 T:giftcofb128v1 52.42 52.60 52.62 romulusm 52.68 52.70 52.74 T:isapa128av20 53.96 54.01 54.04 T:isapa128v20 68.97 68.97 69.16 T:tinyjambu128v2 80.43 80.43 80.69 T:tinyjambu192v2 84.38 84.40 84.49 T:tinyjambu256v2 102.07 102.08 103.06 T!!!romulust 104.31 104.99 108.97 T:isapk128av20 134.69 138.72 141.90 T:isapk128v20 176.95 176.97 177.57 T:elephant200v2 206.45 206.57 209.02 T:isapxv20 9596.95 9607.55 9622.11 T:elephant176v2 10457.68 10474.09 10496.13 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.03 2.03 2.04 T:aes128gcmv1 2.34 2.35 2.36 aes256gcmv1 11.05 11.05 11.06 ascon128av12 16.45 16.46 16.47 ascon128v12 16.47 16.49 16.50 ascon80pqv12 16.47 16.49 16.52 T:xoodyakround3 22.87 22.87 22.87 ascon128abi32v12 32.25 32.26 32.27 T:schwaemm256128v2 33.72 33.72 33.73 ascon128bi32v12 35.92 35.93 36.06 T:isapa128v20 37.41 37.41 37.42 romulusn 40.03 40.04 40.06 T:schwaemm256256v2 40.31 40.32 40.47 T:grain128aeadv2 41.70 41.73 41.80 T:isapa128av20 42.93 42.97 43.29 T:schwaemm192192v2 43.46 43.47 43.47 T:schwaemm128128v2 47.05 47.06 47.08 T:giftcofb128v1 52.43 52.60 52.62 romulusm 52.87 52.89 52.91 T!!!romulust 68.97 68.97 69.11 T:tinyjambu128v2 80.43 80.43 80.44 T:tinyjambu192v2 83.17 83.22 84.04 T:isapk128av20 84.39 84.40 84.44 T:tinyjambu256v2 101.59? 104.53? 114.26? T:isapk128v20 154.26 154.33 154.69 T:isapxv20 176.96 176.98 179.27 T:elephant200v2 9597.93 9610.30 9628.08 T:elephant176v2 10450.94 10466.42 10510.72 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.27 1.29 1.31 aes256gcmv1 1.28 1.31 1.32 T:aes128gcmv1 10.02 10.15 10.28 T:xoodyakround3 11.06 11.09 11.09 ascon128av12 16.13 16.15 16.16 ascon80pqv12 16.26 16.27 16.29 ascon128v12 22.26 22.27 22.27 ascon128abi32v12 29.42 29.49 29.61 romulusm 29.59 29.90 30.18 romulusn 31.98 32.00 32.01 T:schwaemm256128v2 33.55 33.58 33.59 ascon128bi32v12 35.95 36.07 36.19 T:isapa128v20 39.80 39.81 39.84 T:schwaemm256256v2 40.28 40.30 40.33 T:grain128aeadv2 41.81 41.83 41.85 T:isapa128av20 42.70 42.73 43.07 T:schwaemm192192v2 43.34 43.35 43.36 T:schwaemm128128v2 47.03 47.70 47.73 T:giftcofb128v1 52.96 52.97 52.99 T!!!romulust 53.68 53.70 53.71 T:tinyjambu128v2 57.62 57.63 57.65 T:tinyjambu256v2 58.28 58.30 58.31 T:tinyjambu192v2 83.25 83.30 83.36 T:isapk128av20 98.89 103.90 105.17 T:isapk128v20 116.83 116.84 116.89 T:elephant200v2 154.44 154.49 155.16 T:isapxv20 6335.27 6354.47 6366.79 T:elephant176v2 6969.16 6974.57 6983.28 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.23 1.25 1.26 T:aes128gcmv1 1.26 1.27 1.30 aes256gcmv1 10.01 10.02 10.04 T:xoodyakround3 10.93 10.96 10.97 ascon128av12 16.13 16.15 16.16 ascon128v12 16.25 16.28 16.28 ascon80pqv12 22.45 22.46 22.46 ascon128abi32v12 29.54 29.55 29.57 romulusm 29.64 30.15 30.17 romulusn 31.98 32.00 32.01 T:schwaemm256128v2 33.31 33.32 33.34 ascon128bi32v12 35.94 36.06 36.09 T:isapa128v20 39.80 39.81 39.83 T:schwaemm256256v2 39.95 39.97 40.14 T:grain128aeadv2 41.79 41.83 41.84 T:isapa128av20 42.69 42.74 43.09 T:schwaemm192192v2 43.34 43.35 43.36 T:schwaemm128128v2 47.26 47.28 47.71 T:giftcofb128v1 52.95 52.97 52.99 T!!!romulust 53.15 53.16 53.18 T:tinyjambu128v2 57.28 57.30 57.32 T:tinyjambu256v2 58.28 58.30 58.31 T:tinyjambu192v2 83.09 83.14 83.61 T:isapk128av20 103.86 104.01 104.58 T:isapk128v20 116.81 116.86 116.88 T:elephant200v2 154.44 154.50 159.85 T:isapxv20 6337.26 6357.66 6373.03 T:elephant176v2 6956.33 6970.57 6995.64 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.24 1.24 1.25 T:aes128gcmv1 1.27 1.29 1.30 aes256gcmv1 10.01 10.04 10.29 T:xoodyakround3 10.95 10.95 10.96 ascon128av12 16.14 16.14 16.16 ascon128v12 16.26 16.27 16.28 ascon80pqv12 22.46 22.46 22.46 ascon128abi32v12 29.54 29.55 29.57 romulusm 30.14 30.17 30.19 romulusn 31.98 32.00 32.01 T:schwaemm256128v2 33.31 33.33 33.34 ascon128bi32v12 35.95 36.06 36.09 T:isapa128v20 39.80 39.81 39.82 T:schwaemm256256v2 39.95 39.97 40.14 T:grain128aeadv2 41.79 41.83 41.84 T:isapa128av20 42.69 42.75 43.09 T:schwaemm192192v2 43.35 43.36 43.39 T:schwaemm128128v2 47.69 47.71 47.72 T:giftcofb128v1 52.94 52.97 53.01 T!!!romulust 53.15 53.16 53.18 T:tinyjambu128v2 57.28 57.29 57.31 T:tinyjambu256v2 58.27 58.29 58.31 T:tinyjambu192v2 83.10 83.25 83.32 T:isapk128av20 103.86 104.00 104.08 T:isapk128v20 116.82 116.84 116.88 T:elephant200v2 154.43 154.49 155.14 T:isapxv20 6336.54 6350.09 6376.80 T:elephant176v2 6965.33 6982.70 6990.54 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.16 2.16 2.18 T:aes128gcmv1 2.41 2.41 2.42 aes256gcmv1 11.52 11.53 11.54 ascon128av12 16.69 16.70 16.70 ascon80pqv12 16.83 16.84 16.84 ascon128v12 17.26 17.28 17.34 T:xoodyakround3 23.30 23.30 23.32 ascon128abi32v12 33.22 33.23 33.23 T:schwaemm256128v2 34.22 34.23 34.24 ascon128bi32v12 37.53 37.81 37.96 romulusn 40.92 40.95 41.08 T:grain128aeadv2 41.08 41.09 41.10 T:schwaemm256256v2 43.88 43.96 44.18 T:schwaemm192192v2 44.03 44.03 44.04 T:schwaemm128128v2 47.79 47.96 48.06 T:giftcofb128v1 52.89 52.90 53.10 romulusm 56.52 56.54 56.55 T:isapa128av20 69.62 69.64 69.74 T:tinyjambu128v2 78.43 78.45 78.45 T:isapa128v20 81.04 81.04 81.05 T:tinyjambu192v2 84.93 84.95 85.11 T:tinyjambu256v2 104.06 104.08 104.10 T!!!romulust 122.31 122.33 122.40 T:isapk128av20 180.70 180.71 181.34 T:elephant200v2 242.77 248.13 257.88 T:isapk128v20 336.04 336.08 336.79 T:isapxv20 9676.24 9687.30 9700.96 T:elephant176v2 10573.13 10578.26 10584.93 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.18 2.19 2.20 T:aes128gcmv1 2.53 2.53 2.54 aes256gcmv1 11.31 11.32 11.32 ascon128av12 16.60 16.60 16.61 T:xoodyakround3 16.70 16.70 16.71 ascon128v12 16.73 16.73 16.73 ascon80pqv12 23.38 23.39 23.39 ascon128abi32v12 33.16 33.16 33.17 T:schwaemm256128v2 34.23 34.23 34.38 ascon128bi32v12 37.82 37.83 37.83 romulusn 40.81 40.95 40.97 T:grain128aeadv2 41.06 41.07 41.07 T:schwaemm256256v2 44.00 44.00 44.00 T:schwaemm128128v2 43.88 44.18 44.31 T:schwaemm192192v2 47.59 47.64 47.86 T:giftcofb128v1 52.93 53.07 53.22 romulusm 56.69 56.72 56.93 T:isapa128av20 69.52 69.52 69.68 T:tinyjambu128v2 78.46 78.47 79.92 T:isapa128v20 81.05 81.06 81.34 T:tinyjambu192v2 85.02 85.03 85.03 T:tinyjambu256v2 103.77 103.77 104.95 T!!!romulust 122.26 122.32 126.97 T:isapk128av20 180.70 180.71 180.77 T:elephant200v2 242.82 242.90 249.04 T:isapk128v20 336.05 336.09 339.09 T:isapxv20 9671.35 9675.10 9681.81 T:elephant176v2 10569.17 10574.42 10594.50 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.18 2.18 2.19 T:aes128gcmv1 2.52 2.53 2.53 aes256gcmv1 11.31 11.31 11.32 ascon128av12 16.64 16.65 16.67 T:xoodyakround3 16.69 16.70 16.70 ascon128v12 16.72 16.73 16.73 ascon80pqv12 23.38 23.38 23.39 ascon128abi32v12 33.16 33.16 33.17 T:schwaemm256128v2 34.22 34.23 34.23 ascon128bi32v12 37.82 37.83 37.83 romulusn 40.81 40.82 40.96 T:grain128aeadv2 41.06 41.07 41.07 T:schwaemm256256v2 43.88 43.89 44.18 T:schwaemm192192v2 44.00 44.00 44.00 T:schwaemm128128v2 44.03 44.04 44.06 T:isapa128av20 47.59 47.59 47.59 T:giftcofb128v1 48.37 48.37 48.37 T:isapa128v20 52.93 52.93 52.94 romulusm 54.48 54.48 54.49 T!!!romulust 69.52 69.54 69.57 T:tinyjambu128v2 81.05 81.06 81.29 T:tinyjambu192v2 85.02 85.03 85.05 T:tinyjambu256v2 90.45 90.58 100.10 T:isapk128av20 154.99 156.13 167.29 T:isapk128v20 180.70 180.71 180.77 T:elephant200v2 220.57 220.59 220.64 T:isapxv20 9670.36 9682.54 9694.40 T:elephant176v2 10569.47 10577.95 10585.42 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 8.86 9.17 9.53 T:aes128gcmv1 10.42 10.77 11.27 aes256gcmv1 17.11 17.12 17.41 ascon128av12 21.91 21.95 22.23 ascon128v12 22.00 22.02 22.47 ascon80pqv12 24.50 24.52 24.91 T:xoodyakround3 34.72 34.77 35.31 ascon128abi32v12 45.59 45.64 45.98 ascon128bi32v12 46.27 46.38 46.59 romulusn 52.12 52.39 52.52 T:grain128aeadv2 53.52 53.59 53.70 T:schwaemm256128v2 56.03 56.11 56.25 T:schwaemm128128v2 59.00 59.09 59.53 T:giftcofb128v1 61.47 61.67 62.25 romulusm 64.25 64.36 64.55 T:schwaemm256256v2 70.25 70.61 71.12 T:schwaemm192192v2 82.22 82.36 82.59 T:tinyjambu128v2 94.94 95.08 95.19 T:tinyjambu192v2 99.12 99.22 99.45 T:tinyjambu256v2 142.53 142.70 142.98 T!!!romulust 144.30 144.64 145.14 T:isapa128av20 254.95 255.30 255.53 T:elephant200v2 514.69 515.72 516.22 T:isapk128av20 639.58 639.69 642.55 T:isapa128v20 2683.22 2827.55 2892.23 T:isapk128v20 3278.80 3278.92 3279.36 T:isapxv20 11976.09 12002.53 12149.25 T:elephant176v2 14083.88 14090.64 14276.78 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 8.91 8.98 9.42 T:aes128gcmv1 10.52 10.77 11.28 aes256gcmv1 17.09 17.11 17.30 ascon128av12 21.95 22.02 22.36 ascon128v12 22.14 22.16 22.81 ascon80pqv12 23.89 24.06 24.09 T:xoodyakround3 35.03 35.08 35.47 ascon128abi32v12 45.80 45.88 46.05 ascon128bi32v12 46.81 47.03 47.12 romulusn 52.16 52.30 52.42 T:grain128aeadv2 53.55 53.59 53.69 T:schwaemm256128v2 55.98 56.03 56.12 T:schwaemm128128v2 59.12 59.17 59.45 T:giftcofb128v1 64.14 64.23 64.36 T:schwaemm256256v2 64.16 64.69 65.08 romulusm 70.25 70.55 71.33 T:schwaemm192192v2 82.22 82.36 82.45 T:tinyjambu128v2 95.19 95.27 95.36 T:tinyjambu192v2 99.39 99.48 99.67 T:tinyjambu256v2 142.38 143.09 143.27 T!!!romulust 147.95 148.20 148.58 T:isapa128av20 254.89 255.08 255.27 T:elephant200v2 514.59 515.83 516.27 T:isapk128av20 640.03 640.39 642.08 T:isapa128v20 2685.59 2830.39 2873.81 T:isapk128v20 3279.23 3280.17 3291.78 T:isapxv20 11975.84 11976.59 12124.27 T:elephant176v2 14086.20 14192.89 14324.14 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 8.73 8.73 8.98 T:aes128gcmv1 10.75 10.78 10.80 aes256gcmv1 17.08 17.08 17.16 ascon128av12 21.97 22.00 22.05 ascon128v12 22.09 22.11 22.14 ascon80pqv12 24.03 24.36 24.53 T:xoodyakround3 34.97 35.02 35.14 ascon128abi32v12 45.81 45.86 45.91 ascon128bi32v12 46.80 46.88 46.95 romulusn 52.11 52.17 52.31 T:grain128aeadv2 53.55 53.61 53.67 T:schwaemm256128v2 55.94 56.02 56.11 T:schwaemm128128v2 58.94 59.03 59.06 T:giftcofb128v1 64.11 64.19 64.27 T:schwaemm256256v2 64.27 64.44 65.03 romulusm 70.20 70.33 71.23 T:schwaemm192192v2 82.27 82.31 82.39 T:tinyjambu128v2 91.05 91.34 91.55 T!!!romulust 95.11 95.25 95.33 T:tinyjambu192v2 96.53 96.67 96.78 T:isapa128av20 99.20 99.33 99.47 T:tinyjambu256v2 239.58 240.00 240.80 T:isapk128av20 254.88 255.03 255.20 T:elephant200v2 334.08 335.48 335.53 T:isapa128v20 1307.84? 1381.02? 1471.16? T:isapk128v20 1716.98 1717.25 1717.56 T:isapxv20 11975.92 11979.84 12076.77 T:elephant176v2 14086.78 14095.83 14256.80 T:elephant160v2