VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: armeabi; ARM1176 (410fb767); 2011 Broadcom BCM2835; 1 x 1000MHz; berry0, supercop-20240909

[Page version: 20250206 00:56:48]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 30.52 30.87 31.37 ascon128abi32v12 39.77 40.89 42.62 ascon128av12 45.81 46.15 46.60 ascon128bi32v12 55.76 56.67 57.65 ascon128v12 57.60 58.14 58.89 ascon80pqv12 64.68 64.88 65.26 T:schwaemm256128v2 80.65 82.33 86.14 T:aes128gcmv1 85.39 85.61 86.15 T:schwaemm192192v2 85.36 86.38 87.77 T:giftcofb128v1 88.25 88.38 89.21 T:schwaemm128128v2 88.52 88.66 89.51 T:xoodyakround3 92.82 92.96 93.53 T:schwaemm256256v2 93.44 95.32 99.00 T:aes256gcmv1 141.57 141.75 142.12 T:tinyjambu128v2 143.72 144.89 147.97 T:isapa128av20 189.17 189.33 189.63 T:tinyjambu192v2 187.04 189.71 196.38 T:isapa128v20 205.11 205.29 205.47 T:tinyjambu256v2 253.68 254.15 255.06 T:romulusn 498.27 499.60 501.87 T:elephant200v2 514.97 517.03 543.03 romulusn 755.81 757.17 771.44 T:isapk128av20 915.13 924.33 936.58 T:isapk128v20 919.51 927.92 941.06 T:isapxv20 995.40 997.97 1028.29 romulusm 2079.57 2103.92 2118.15 T!!!romulust 33900.70 33915.75 33966.25 T:elephant160v2 38053.65 38098.19 38131.17 T:elephant176v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 30.37 31.07 31.63 ascon128abi32v12 39.91 40.92 41.84 ascon128av12 46.18 46.65 47.01 ascon128bi32v12 56.34 56.99 57.77 ascon128v12 57.30 57.87 58.78 ascon80pqv12 64.62 64.93 65.69 T:schwaemm256128v2 80.23 81.32 84.40 T:aes128gcmv1 85.46 85.70 86.29 T:schwaemm192192v2 85.72 86.37 87.76 T:giftcofb128v1 88.33 88.47 89.22 T:schwaemm128128v2 88.97 89.39 90.67 T:xoodyakround3 92.75 92.90 93.35 T:schwaemm256256v2 93.64 95.64 99.88 T:aes256gcmv1 143.65 143.81 144.27 T:tinyjambu128v2 143.81 145.28 147.68 T:isapa128av20 185.93 187.94 191.90 T:isapa128v20 189.59 190.12 190.27 T:tinyjambu192v2 207.66 207.71 208.82 T:tinyjambu256v2 253.01 253.85 255.38 T:romulusn 498.11 498.78 500.25 T:elephant200v2 509.66 511.52 543.01 romulusn 756.55 757.96 768.56 T:isapk128av20 914.06 923.58 936.98 T:isapk128v20 918.40 927.50 945.81 T:isapxv20 999.93 1004.52 1037.64 romulusm 2078.73 2084.37 2110.43 T!!!romulust 33885.55 33908.95 33954.84 T:elephant160v2 38049.53 38102.31 38132.14 T:elephant176v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 30.70 31.04 31.53 ascon128abi32v12 39.97 40.82 41.25 ascon128av12 46.19 46.67 47.03 ascon128bi32v12 56.37 56.91 57.64 ascon128v12 57.39 57.90 58.44 ascon80pqv12 64.63 64.96 65.57 T:schwaemm256128v2 80.12 81.98 85.03 T:aes128gcmv1 85.11 85.71 86.88 T:schwaemm192192v2 85.51 86.58 88.92 T:giftcofb128v1 88.37 88.53 88.98 T:schwaemm128128v2 89.15 89.53 90.42 T:xoodyakround3 92.64 92.89 93.40 T:schwaemm256256v2 91.12 93.83 97.40 T:isapa128v20 92.34 94.48 97.15 T:isapa128av20 93.76 95.28 97.86 T:aes256gcmv1 143.73 143.77 144.22 T:tinyjambu128v2 190.03 190.33 194.21 T:tinyjambu192v2 207.48 207.76 209.48 T:tinyjambu256v2 252.96 253.48 254.73 T:romulusn 362.27 363.69 371.25 T:isapk128av20 442.70 444.40 447.90 T:isapxv20 437.87 444.97 453.54 T:isapk128v20 498.38 499.10 500.02 T:elephant200v2 510.06 512.33 542.16 romulusn 689.30 691.88 722.81 T!!!romulust 999.91 1004.60 1034.82 romulusm 33882.26 33902.35 33986.53 T:elephant160v2 38053.55 38099.54 38153.99 T:elephant176v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 30.59 30.82 31.29 ascon128abi32v12 37.89 38.45 39.17 ascon128av12 45.87 46.04 46.48 ascon128bi32v12 54.01 54.33 54.85 ascon128v12 54.28 54.52 55.39 ascon80pqv12 59.05 60.10 61.70 T:aes128gcmv1 64.14 64.22 64.62 T:schwaemm256128v2 65.75 67.01 69.02 T:aes256gcmv1 67.32 67.54 68.02 T:xoodyakround3 84.99 85.08 85.43 T:schwaemm192192v2 85.10 85.62 86.89 T:giftcofb128v1 87.78 87.94 88.25 T:schwaemm128128v2 92.13 92.38 92.89 T:schwaemm256256v2 116.96 117.00 117.22 T:tinyjambu128v2 118.46 119.50 121.29 T:isapa128av20 139.73 140.62 142.16 T:isapa128v20 149.16 149.25 149.57 T:tinyjambu192v2 156.20 156.25 156.65 T:tinyjambu256v2 212.35 213.00 215.17 T:romulusn 373.66 374.75 384.35 T:elephant200v2 494.93 496.07 508.78 romulusn 561.39 562.30 569.82 T:isapk128av20 682.79 691.39 694.70 T:isapk128v20 684.57 693.28 696.07 T:isapxv20 731.70 734.69 749.06 romulusm 1381.83 1397.64 1402.17 T!!!romulust 25425.89 25460.31 25481.00 T:elephant160v2 28453.04 28460.05 28479.40 T:elephant176v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 30.47 30.81 31.52 ascon128abi32v12 37.62 38.10 38.99 ascon128av12 46.13 46.29 47.21 ascon128bi32v12 54.01 54.36 55.12 ascon80pqv12 54.17 54.57 55.17 ascon128v12 59.18 60.22 61.71 T:aes128gcmv1 64.09 64.26 64.60 T:schwaemm256128v2 66.28 67.08 68.96 T:aes256gcmv1 67.23 67.58 68.19 T:xoodyakround3 84.86 85.04 85.43 T:schwaemm192192v2 85.14 85.61 86.54 T:giftcofb128v1 87.82 87.91 88.19 T:schwaemm128128v2 92.07 92.23 93.05 T:schwaemm256256v2 117.96 118.00 118.35 T:tinyjambu128v2 118.09 119.56 123.49 T:isapa128av20 139.95 142.01 152.37 T:isapa128v20 149.56 149.68 150.02 T:tinyjambu192v2 157.45 157.53 157.92 T:tinyjambu256v2 211.78 212.27 213.52 T:romulusn 373.88 375.17 384.13 T:elephant200v2 492.10 493.80 510.61 romulusn 561.35 563.10 569.81 T:isapk128av20 686.65 688.72 694.53 T:isapxv20 681.67 691.83 692.61 T:isapk128v20 733.59 738.07 753.82 romulusm 1382.38 1396.93 1401.49 T!!!romulust 25420.58 25448.97 25476.35 T:elephant160v2 28453.04 28476.24 28498.84 T:elephant176v2

Cycles/byte for long+long forgery 25% 50% 75% aead 30.63 31.10 33.33 ascon128abi32v12 37.86 38.27 39.20 ascon128av12 46.03 46.22 46.75 ascon128bi32v12 54.12 54.42 55.14 ascon80pqv12 54.28 54.80 55.52 ascon128v12 59.39 60.38 61.91 T:aes128gcmv1 64.15 64.30 64.76 T:schwaemm256128v2 66.07 66.73 68.62 T:aes256gcmv1 67.50 67.72 68.28 T:xoodyakround3 84.93 85.20 85.56 T:schwaemm192192v2 85.09 85.84 87.32 T:giftcofb128v1 87.84 87.91 88.64 T:schwaemm128128v2 92.08 92.30 92.63 T:schwaemm256256v2 91.86 93.35 95.76 T:isapa128v20 92.12 93.83 95.64 T:isapa128av20 117.99 118.05 118.64 T:tinyjambu128v2 149.50 149.95 153.16 T:tinyjambu192v2 157.49 157.57 158.16 T:tinyjambu256v2 211.98 212.22 213.26 T:romulusn 364.06 364.74 370.53 T:isapk128av20 373.95 375.00 383.68 T:elephant200v2 444.67 446.11 454.07 T:isapxv20 444.73 446.57 453.23 T:isapk128v20 491.50 493.60 508.40 romulusn 685.77 688.10 704.26 T!!!romulust 733.67 736.93 755.35 romulusm 25420.20 25446.49 25467.84 T:elephant160v2 28446.98 28453.07 28472.11 T:elephant176v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 29.94 30.61 31.34 ascon128abi32v12 35.08 35.94 36.55 ascon128av12 36.67 37.93 40.10 T:aes256gcmv1 36.35 37.97 39.93 T:aes128gcmv1 45.36 45.90 47.25 ascon128bi32v12 45.87 46.07 46.56 T:xoodyakround3 50.25 51.05 51.84 ascon80pqv12 51.45 52.08 52.78 ascon128v12 63.42 63.62 63.93 T:schwaemm256128v2 84.36 84.56 85.04 T:schwaemm192192v2 84.22 84.80 86.53 T:giftcofb128v1 87.12 87.35 87.90 T:schwaemm128128v2 91.28 91.59 92.13 T:schwaemm256256v2 92.10 92.35 93.83 T:tinyjambu128v2 91.90 93.09 95.44 T:isapa128av20 90.65 93.77 96.71 T:isapa128v20 107.22 107.29 107.72 T:tinyjambu256v2 108.93 109.08 109.41 T:tinyjambu192v2 170.85 171.13 172.45 T:romulusn 253.68 254.20 255.38 T:elephant200v2 365.52 365.94 368.13 T:isapk128av20 446.48 447.15 451.84 T:isapk128v20 446.02 447.74 450.86 T:isapxv20 465.54 467.51 470.75 romulusm 473.01 474.36 476.80 romulusn 681.63 684.32 713.71 T!!!romulust 16950.92 16965.98 16992.52 T:elephant160v2 18810.37 18832.37 18876.81 T:elephant176v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 30.06 30.54 30.92 ascon128abi32v12 34.66 35.56 36.37 ascon128av12 36.76 37.96 39.52 T:aes128gcmv1 36.95? 39.34? 42.12? T:aes256gcmv1 45.66 46.09 46.34 T:xoodyakround3 45.49 46.22 47.31 ascon128bi32v12 50.22 50.80 51.64 ascon80pqv12 51.81 52.16 52.61 ascon128v12 63.43 63.56 63.72 T:schwaemm256128v2 84.38 84.57 85.23 T:schwaemm192192v2 84.00 85.10 86.49 T:giftcofb128v1 87.14 87.28 87.90 T:schwaemm128128v2 91.32 91.66 92.33 T:schwaemm256256v2 92.11 92.29 92.92 T:tinyjambu128v2 90.41 92.62 95.35 T:isapa128av20 90.41 93.10 97.31 T:isapa128v20 107.05 107.44 108.21 T:tinyjambu256v2 109.21 109.40 109.71 T:tinyjambu192v2 170.59 171.22 172.19 T:romulusn 253.75 254.71 267.27 T:elephant200v2 365.21 366.19 370.81 T:isapk128av20 445.87 447.77 457.11 T:isapxv20 446.52 448.15 456.66 T:isapk128v20 465.47 467.23 472.33 romulusm 472.48 474.23 480.02 romulusn 683.06 684.96 687.66 T!!!romulust 16955.02 16981.77 17014.40 T:elephant160v2 18801.17 18823.08 18852.83 T:elephant176v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 30.07 30.39 30.99 ascon128abi32v12 34.81 35.54 36.12 ascon128av12 36.58 38.03 39.12 T:aes128gcmv1 36.88? 38.38? 41.23? T:aes256gcmv1 45.80 46.03 46.47 T:xoodyakround3 45.62 46.08 46.59 ascon128bi32v12 50.17 50.80 51.35 ascon80pqv12 51.64 52.22 54.54 ascon128v12 63.45 63.62 63.97 T:schwaemm256128v2 84.35 84.48 86.13 T:schwaemm192192v2 84.17 85.04 86.92 T:giftcofb128v1 87.11 87.33 88.15 T:schwaemm128128v2 91.51 91.64 92.39 T:schwaemm256256v2 92.12 92.30 92.60 T:tinyjambu128v2 90.55 92.75 95.27 T:isapa128v20 92.01 93.15 95.78 T:isapa128av20 107.26 107.43 109.11 T:tinyjambu256v2 109.39 109.46 109.84 T:tinyjambu192v2 170.77 171.21 172.36 T:romulusn 253.77 254.22 255.23 T:elephant200v2 365.43 366.45 369.34 T:isapk128av20 440.20 446.50 449.60 T:isapk128v20 445.71 448.36 457.08 T:isapxv20 465.23 467.68 470.27 romulusm 471.39 474.23 480.07 romulusn 680.39 684.94 715.33 T!!!romulust 16945.62 16960.29 16980.74 T:elephant160v2 18814.72 18852.96 18872.87 T:elephant176v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 31.93 31.99 32.63 ascon128abi32v12 39.47 39.60 40.53 ascon128av12 47.08 47.15 47.71 ascon128bi32v12 55.49 55.57 56.13 ascon128v12 55.85 55.98 56.56 ascon80pqv12 66.50 66.54 66.66 T:schwaemm256128v2 66.15 66.96 68.74 T:aes128gcmv1 68.61 68.66 68.94 T:xoodyakround3 72.87 73.02 75.58 T:aes256gcmv1 87.26 87.34 87.68 T:schwaemm192192v2 87.18 87.50 89.58 T:giftcofb128v1 89.35 89.39 89.84 T:schwaemm128128v2 95.17 95.19 95.52 T:schwaemm256256v2 118.27 118.33 118.67 T:tinyjambu128v2 132.69 133.06 135.33 T:isapa128av20 150.68 150.74 150.98 T:tinyjambu192v2 157.73 157.77 158.02 T:tinyjambu256v2 208.75 209.16 211.64 T:isapa128v20 215.29 215.46 216.07 T:romulusn 383.03 383.69 385.61 T:elephant200v2 504.91 506.88 525.66 romulusn 606.37 606.84 615.14 T:isapk128av20 742.19 743.98 763.10 romulusm 1069.20 1070.43 1078.55 T:isapk128v20 1070.84 1073.36 1084.44 T:isapxv20 1409.30 1410.33 1430.62 T!!!romulust 25721.04 25741.99 25753.28 T:elephant160v2 28662.07 28682.14 28705.59 T:elephant176v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 32.07 32.17 32.83 ascon128abi32v12 39.44 39.52 40.38 ascon128av12 47.45 47.53 48.22 ascon128bi32v12 55.70 55.72 56.66 ascon80pqv12 55.77 55.93 56.59 ascon128v12 66.48 66.62 66.78 T:schwaemm256128v2 65.96 66.62 68.00 T:aes128gcmv1 68.85 68.96 69.72 T:xoodyakround3 72.97 73.65 75.63 T:aes256gcmv1 87.11 87.22 87.98 T:giftcofb128v1 87.32 87.38 87.78 T:schwaemm192192v2 89.40 89.42 89.79 T:schwaemm128128v2 95.16 95.18 95.85 T:schwaemm256256v2 119.27 119.31 119.53 T:tinyjambu128v2 132.81 133.34 136.05 T:isapa128av20 151.20 151.28 152.73 T:tinyjambu192v2 158.98 159.03 159.47 T:tinyjambu256v2 208.30 209.18 210.30 T:isapa128v20 215.26 216.25 226.09 T:romulusn 382.94 383.16 384.67 T:elephant200v2 503.08 503.71 506.93 romulusn 606.36 607.07 615.01 T:isapk128av20 747.97 749.94 772.10 romulusm 1069.25 1070.18 1078.59 T:isapk128v20 1070.78 1072.07 1079.82 T:isapxv20 1410.70 1424.70 1435.41 T!!!romulust 25718.36 25745.60 25757.95 T:elephant160v2 28656.52 28674.06 28688.38 T:elephant176v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 32.04 32.14 32.63 ascon128abi32v12 39.52 39.72 40.56 ascon128av12 47.46 47.54 48.20 ascon128bi32v12 55.78 55.80 56.61 ascon128v12 55.72 55.81 56.64 ascon80pqv12 65.89 66.21 67.84 T:aes128gcmv1 66.52 66.58 67.07 T:schwaemm256128v2 69.01 69.11 69.73 T:xoodyakround3 72.95 73.83 75.94 T:aes256gcmv1 87.10 87.40 88.38 T:giftcofb128v1 87.33 87.41 87.75 T:schwaemm192192v2 89.40 89.45 89.94 T:schwaemm128128v2 95.19 95.22 95.67 T:schwaemm256256v2 101.26 101.68 102.85 T:isapa128av20 119.31 119.42 120.86 T:tinyjambu128v2 128.58 129.04 130.60 T:isapa128v20 151.22 151.24 151.48 T:tinyjambu192v2 159.03 159.12 159.48 T:tinyjambu256v2 215.01 215.14 215.75 T:romulusn 383.01 383.54 384.93 T:elephant200v2 393.09 393.58 400.05 T:isapk128av20 502.61 503.47 520.37 romulusn 644.49 645.02 651.66 T:isapk128v20 644.80 645.42 652.65 T:isapxv20 710.78 712.04 728.98 T!!!romulust 748.58 748.95 769.97 romulusm 25714.93 25755.16 25761.95 T:elephant160v2 28654.48 28686.38 28704.10 T:elephant176v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 57.02? 58.32? 64.59? ascon128abi32v12 67.64? 69.47? 84.35? ascon128av12 70.92? 71.77? 82.12? ascon128bi32v12 82.59? 84.11? 93.92? ascon128v12 84.40? 86.95? 97.78? ascon80pqv12 111.09 112.17 113.66 T:xoodyakround3 117.77 119.24 122.52 T:schwaemm256128v2 123.16 124.39 127.79 T:schwaemm128128v2 124.05 125.16 136.11 T:giftcofb128v1 147.42 148.05 149.45 T:tinyjambu128v2 150.55 151.70 153.73 T:schwaemm192192v2 160.02 160.44 163.91 T:schwaemm256256v2 184.22 184.80 185.70 T:tinyjambu192v2 191.41 192.37 194.20 T:tinyjambu256v2 206.23? 209.88? 229.45? T:aes128gcmv1 218.05 223.12 240.25 T:aes256gcmv1 277.52 279.05 284.38 T:romulusn 442.01 448.66 469.75 T:isapa128av20 558.51 562.34 572.41 T:elephant200v2 734.55 744.23 753.79 romulusn 987.85 999.78 1005.43 romulusm 1620.41 1627.32 1655.56 T:isapk128av20 1766.84 1773.66 1790.20 T:isapa128v20 2038.75 2055.60 2065.81 T!!!romulust 9851.68 9858.45 9888.58 T:isapk128v20 9856.72 9866.84 9963.05 T:isapxv20 34399.05 34549.38 34601.58 T:elephant160v2 35653.80 35817.41 35869.20 T:elephant176v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 62.06? 64.47? 72.23? ascon128abi32v12 68.93? 70.16? 86.30? ascon128av12 73.45 74.45 80.54 ascon128bi32v12 82.99? 85.33? 94.66? ascon128v12 85.70 86.60 94.32 ascon80pqv12 111.96 114.46 118.23 T:xoodyakround3 119.45 120.14 123.19 T:schwaemm256128v2 123.28 124.10 126.00 T:schwaemm128128v2 121.62 124.20 133.38 T:giftcofb128v1 149.41 149.78 149.84 T:tinyjambu128v2 152.21 152.95 156.02 T:schwaemm192192v2 161.52 162.77 166.09 T:schwaemm256256v2 185.16 186.06 187.08 T:tinyjambu192v2 192.72 194.28 196.12 T:tinyjambu256v2 204.50 208.48 225.41 T:aes128gcmv1 219.83 225.93 242.95 T:aes256gcmv1 281.07 282.70 292.17 T:romulusn 448.31 462.28 482.05 T:isapa128av20 556.02 558.05 574.86 T:elephant200v2 725.17 732.98 747.33 romulusn 1046.58 1061.78 1070.57 romulusm 1620.02 1620.98 1633.95 T:isapk128av20 1766.89 1771.69 1796.57 T:isapa128v20 2050.27 2054.38 2075.66 T!!!romulust 9855.25 9864.67 9967.28 T:isapk128v20 9859.73 9872.97 9996.98 T:isapxv20 34396.42 34570.23 34652.75 T:elephant160v2 35670.17 35836.87 36059.36 T:elephant176v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 60.59 62.23 67.19 ascon128abi32v12 69.26? 71.80? 81.86? ascon128av12 73.30 73.88 77.74 ascon128bi32v12 83.98 85.27 90.98 ascon128v12 85.55? 88.41? 97.09? ascon80pqv12 112.41 115.01 118.69 T:xoodyakround3 118.73 119.96 125.62 T:schwaemm256128v2 123.32 123.97 128.44 T:schwaemm128128v2 121.62 124.12 133.78 T:giftcofb128v1 147.55 148.51 150.35 T:tinyjambu128v2 151.66 152.63 155.38 T:schwaemm192192v2 161.55 162.23 165.58 T:schwaemm256256v2 185.15 185.67 187.84 T:tinyjambu192v2 192.70 193.31 193.66 T:tinyjambu256v2 203.91 208.27 222.55 T:aes128gcmv1 215.22? 222.47? 242.23? T:aes256gcmv1 278.34 280.60 283.77 T:romulusn 281.99 292.47 308.56 T:isapa128av20 555.93 558.83 575.41 T:elephant200v2 726.13 736.59 742.50 romulusn 936.46 954.65 980.08 T:isapa128v20 984.24 984.97 991.73 T:isapk128av20 1047.26 1056.35 1061.73 romulusm 1259.94 1271.55 1283.77 T!!!romulust 5135.50 5136.04 5142.47 T:isapk128v20 5135.84 5140.24 5152.20 T:isapxv20 34392.82 34570.09 34596.55 T:elephant160v2 35647.41 35832.48 35857.71 T:elephant176v2