VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,little, supercop-20250922

[Page version: 20251010 17:33:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.21? 0.24? 0.24? T:tiaoxinv1 0.22? 0.24? 0.25? T:tiaoxinv2 0.24 0.25 0.26 aegis128l 0.35 0.36 0.38 T:aegis128 0.42 0.42 0.43 aegis256 0.42 0.44 0.46 T:aezv3 0.42 0.45 0.46 T:aezv4 0.50 0.51 0.52 T:aezv5 0.52 0.52 0.53 T:aes128otrpv3 0.53 0.53 0.54 T:aes128otrsv3 0.53 0.54 0.55 T:aes128otrcv3 0.66 0.67 0.68 T:aes256otrpv3 0.67 0.68 0.68 T:aes256otrcv3 0.68 0.69 0.70 T:aes256otrsv3 0.76? 0.82? 0.85? T:deoxysi128v141 0.84 0.86 0.88 T:deoxysneq128128v1 0.91 0.94 0.97 T:deoxysi256v141 0.96 0.98 0.99 T:morus1280256v1 0.98 1.00 1.01 T:morus1280128v1 0.98 1.00 1.01 T:morus1280256v2 0.99 1.00 1.02 T:morus1280128v2 0.98 1.01 1.02 T:deoxysneq256128v1 1.15 1.16 1.17 T:morus640128v2 1.15 1.17 1.19 T:morus640128v1 -2.29? 1.59? 1.74? T:aeadaes192ocbtaglen128v1 1.69 1.73 1.76 T:deoxysii128v141 1.76 1.79 1.81 T:deoxyseq128128v1 1.85 1.89 1.90 T:deoxysii256v141 1.87 1.89 1.90 T:colm0v1 2.06 2.07 2.08 T:deoxyseq256128v1 2.02 2.08 2.19 T:lunarkeyakv2 2.12 2.12 2.13 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.12 2.14 T:aes128n12t8silcv2 2.12 2.12 2.13 T:aes128n12t8clocv3 2.12 2.12 2.13 T:aes128n8t8clocv2 2.12 2.13 2.13 T:aes128n12t8clocv2 2.41 2.44 2.46 T:norx6444v3 2.64 2.67 2.71 T:norx6441v3 2.66 2.68 2.69 T:norx6441v2 2.70 2.76 2.81 T:seakeyakv2 2.78 2.84 2.93 T:oceankeyakv2 3.00 3.09 3.12 T:lakekeyakv1 3.17 3.19 3.23 T:norx6441v1 3.32 3.41 3.46 T:lakekeyakv2 3.43 3.45 3.49 T:norx6444v2 3.47 3.50 3.55 T:aes128gcmv1 3.67 3.69 3.71 T:norx3241v2 3.68 3.70 3.72 T:norx3241v3 3.82 3.85 3.87 T:norx6444v1 3.98 4.00 4.02 T:norx6461v3 3.98 4.02 4.06 T:norx6461v2 4.35 4.36 4.37 T:aesjambuv1 4.41 4.43 4.46 T:norx3241v1 4.76 4.81 4.87 T:norx6461v1 5.50 5.53 5.55 T:norx3261v3 5.53 5.56 5.58 T:norx3261v2 6.12 6.18 6.18 T:acorn128v2 6.14 6.19 6.24 T:acorn128v3 6.21 6.25 6.38 T:ketjemajorv2 6.26 6.27 6.28 T:ascon128av11 6.25 6.28 6.29 T:ascon96v1 6.20 6.44 6.46 ascon128av12 7.27 7.28 7.31 T:norx3261v1 7.35 7.42 7.45 T:riverkeyakv2 8.30 8.48 8.67 T:ketjeminorv2 8.92 8.95 8.96 ascon128v12 9.39 9.40 9.43 T:ascon128v11 9.39 9.41 9.45 T:ascon128v1 11.90 11.94 12.20 T:aes128otrsv1 11.92 11.96 11.99 T:aes128otrpv1 11.94 11.97 11.99 T:aes128otrpv2 11.95 12.08 12.12 T:aes128otrsv2 12.58 12.63 12.67 T:seakeyakv1 11.32? 12.73? 15.41? T:oceankeyakv1 14.49 14.50 14.52 T:twine80n6t4clocv3 14.98 15.02 15.07 T:aes256otrsv2 15.04 15.06 15.12 T:aes256otrpv2 15.04 15.07 15.12 T:aes256otrpv1 15.11 15.31 15.39 T:aes256otrsv1 15.35 15.35 15.36 T:twine80n6t4clocv2 17.97 18.03 18.16 T:proest256otrv1 20.56 20.60 20.64 T:aes128n12clocv1 20.63 20.68 20.71 T:aes128n8clocv1 21.67 21.72 21.75 T:aes128n12silcv1 21.65 21.75 21.81 T:aes128n8silcv1 26.40 26.44 26.48 T:ketjesrv1 25.65 27.76 27.92 T:riverkeyakv1 27.73 27.80 28.23 T:ketjesrv2 41.23 41.26 41.32 T:proest128otrv1 47.67 47.83 49.97 T:ketjejrv1 67.04 67.18 67.39 T:aeadaes128ocbtaglen64v1 67.26 67.34 67.41 T:aeadaes128ocbtaglen96v1 70.64 70.66 70.68 T:present80n6t4silcv3 78.81 78.85 79.00 T:aeadaes192ocbtaglen64v1 78.65 78.89 79.01 T:aeadaes192ocbtaglen96v1 78.21 78.95 79.19 T:deoxysneq128128v13 85.65 86.57 86.74 T:ketjejrv2 90.40 90.55 90.76 T:aeadaes256ocbtaglen96v1 90.39 90.57 90.67 T:aeadaes256ocbtaglen64v1 102.72 102.77 102.84 T:twine80n6clocv1 119.19 119.44 120.03 T:deoxysneq256128v13 121.53 121.78 121.88 T:led80n6t4silcv3 151.58 152.24 152.37 T:colm127v1 158.97 159.13 159.59 T:deoxyseq128128v13 160.63 161.44 161.74 T:aezv1 240.48 241.36 241.97 T:deoxyseq256128v13 331.33 334.26 334.82 T:acorn128 4039.41 4053.10 4053.49 T:present80n6silcv1 4055.71 4056.36 4059.42 T:present80n6t4silcv2 9060.25 9112.73 9122.62 T:led80n6silcv1 9165.70 9181.42 9196.57 T:led80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.26 0.27 0.28 aegis128l 0.32 0.33 0.35 T:tiaoxinv1 0.31? 0.34? 0.37? T:tiaoxinv2 0.38 0.39 0.40 T:aegis128 0.42 0.44 0.45 T:aezv3 0.44 0.45 0.46 T:aezv4 0.39? 0.45? 0.48? aegis256 0.49 0.51 0.52 T:aezv5 0.56 0.57 0.59 T:aes128otrsv3 0.56 0.57 0.58 T:aes128otrcv3 0.57 0.58 0.59 T:aes128otrpv3 0.70 0.71 0.71 T:aes256otrcv3 0.71 0.72 0.72 T:aes256otrsv3 0.73 0.73 0.75 T:aes256otrpv3 0.89 0.92 0.94 T:deoxysi128v141 0.96 0.97 0.99 T:morus1280256v1 0.96 0.97 0.98 T:morus1280128v2 0.96 0.97 0.99 T:morus1280128v1 0.97 0.98 0.99 T:morus1280256v2 0.96 0.99 1.01 T:deoxysneq128128v1 1.01 1.06 1.07 T:deoxysi256v141 1.03 1.06 1.11 T:deoxysneq256128v1 1.14 1.16 1.18 T:morus640128v1 1.15 1.17 1.19 T:morus640128v2 1.38? 1.65? 1.68? T:aeadaes192ocbtaglen128v1 1.68 1.71 1.74 T:deoxysii128v141 1.83 1.88 1.91 T:deoxysii256v141 1.81 1.89 1.92 T:colm0v1 1.90 1.93 1.95 T:deoxyseq128128v1 2.01 2.06 2.11 T:aes128n12t8silcv3 2.01 2.07 2.11 T:aes128n8t8silcv2 2.01 2.07 2.11 T:aes128n12t8silcv2 2.05 2.08 2.10 T:deoxyseq256128v1 2.02 2.10 2.11 T:aes128n8t8clocv2 2.06 2.10 2.11 T:aes128n12t8clocv3 2.06 2.10 2.19 T:lunarkeyakv2 2.02 2.11 2.11 T:aes128n12t8clocv2 2.42 2.46 2.49 T:norx6444v3 2.64 2.66 2.69 T:norx6441v3 2.66 2.68 2.70 T:norx6441v2 2.76 2.81 2.86 T:seakeyakv2 2.84 2.90 2.98 T:oceankeyakv2 3.01 3.07 3.12 T:lakekeyakv1 3.16 3.19 3.21 T:norx6441v1 3.30 3.36 3.40 T:lakekeyakv2 3.44 3.47 3.51 T:norx6444v2 3.44 3.49 3.54 T:aes128gcmv1 3.57 3.58 3.59 T:norx3241v3 3.56 3.60 3.61 T:norx3241v2 3.80 3.86 3.91 T:norx6444v1 3.99 4.03 4.06 T:norx6461v2 3.99 4.03 4.04 T:norx6461v3 4.32 4.34 4.36 T:norx3241v1 4.57 4.57 4.58 T:aesjambuv1 4.80 4.85 4.87 T:norx6461v1 5.51 5.53 5.56 T:norx3261v3 5.50 5.54 5.56 T:norx3261v2 6.02 6.04 6.07 ascon128av12 5.93 6.07 6.11 T:ketjemajorv2 6.09 6.12 6.15 T:acorn128v3 6.17 6.21 6.27 T:ascon128av11 6.27 6.29 6.31 T:ascon96v1 6.37 6.42 6.43 T:acorn128v2 7.13 7.14 7.17 T:norx3261v1 7.57 7.61 7.66 T:riverkeyakv2 7.71 7.77 7.83 T:ketjeminorv2 8.89 8.91 8.94 ascon128v12 9.35 9.38 9.40 T:ascon128v11 9.36 9.39 9.44 T:ascon128v1 12.07 12.11 12.15 T:aes128otrpv2 12.04 12.11 12.30 T:aes128otrsv1 12.06 12.11 12.15 T:aes128otrpv1 12.06 12.18 12.26 T:aes128otrsv2 12.90 12.95 13.01 T:seakeyakv1 11.62? 12.95? 15.67? T:oceankeyakv1 14.34 14.37 14.41 T:twine80n6t4clocv3 15.09 15.18 15.21 T:aes256otrsv2 15.12 15.18 15.27 T:aes256otrpv2 15.17 15.21 15.26 T:aes256otrpv1 15.23 15.42 15.50 T:aes256otrsv1 15.41 15.45 15.49 T:twine80n6t4clocv2 17.38 17.79 17.92 T:proest256otrv1 21.40 21.44 21.49 T:aes128n12clocv1 21.45 21.51 21.55 T:aes128n8clocv1 22.22 22.28 22.35 T:aes128n12silcv1 22.25 22.34 22.43 T:aes128n8silcv1 26.20 26.23 26.27 T:ketjesrv1 25.78 27.89 28.01 T:riverkeyakv1 28.65 28.74 28.93 T:ketjesrv2 41.08 41.14 41.25 T:proest128otrv1 50.51 50.69 53.38 T:ketjejrv1 69.98 70.03 70.20 T:present80n6t4silcv3 82.12? 83.76? 94.05? T:ketjejrv2 89.16 89.38 89.52 T:aeadaes128ocbtaglen96v1 89.32 89.46 89.70 T:aeadaes128ocbtaglen64v1 103.40 103.53 106.91 T:twine80n6clocv1 103.41 104.20 104.48 T:deoxysneq128128v13 106.01 106.12 106.26 T:aeadaes192ocbtaglen64v1 106.08 106.22 106.31 T:aeadaes192ocbtaglen96v1 122.72 122.90 122.99 T:aeadaes256ocbtaglen96v1 122.85 123.01 123.15 T:aeadaes256ocbtaglen64v1 123.22 123.28 123.38 T:led80n6t4silcv3 147.71 148.26 148.61 T:deoxysneq256128v13 158.99 159.16 159.69 T:deoxyseq128128v13 160.63 161.40 161.78 T:aezv1 197.53 197.74 197.93 T:colm127v1 239.21 239.88 241.08 T:deoxyseq256128v13 329.62 336.45 337.38 T:acorn128 4053.16 4054.39 4057.39 T:present80n6t4silcv2 4045.69 4056.96 4057.47 T:present80n6silcv1 9059.26 9122.00 9129.32 T:led80n6silcv1 9155.30 9163.37 9168.42 T:led80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13? 0.17? 0.21? T:aezv4 0.17 0.17 0.17 T:aezv3 0.16? 0.20? 0.23? T:aezv5 0.26 0.27 0.28 aegis128l 0.31 0.33 0.34 T:tiaoxinv2 0.30? 0.33? 0.34? T:tiaoxinv1 0.39 0.40 0.40 T:aegis128 0.45? 0.45? 0.51? aegis256 0.57 0.58 0.58 T:aes128otrsv3 0.57 0.58 0.58 T:aes128otrcv3 0.58 0.58 0.59 T:aes128otrpv3 0.70 0.71 0.72 T:aes256otrcv3 0.71 0.72 0.72 T:aes256otrsv3 0.72 0.73 0.73 T:aes256otrpv3 0.87 0.93 0.96 T:deoxysi128v141 0.96 0.97 0.99 T:morus1280128v1 0.96 0.97 0.98 T:morus1280128v2 0.97 0.98 0.98 T:morus1280256v1 0.97 0.98 0.99 T:morus1280256v2 0.97 1.00 1.03 T:deoxysneq128128v1 1.04 1.05 1.08 T:deoxysi256v141 1.06 1.08 1.10 T:deoxysneq256128v1 1.16 1.17 1.18 T:morus640128v2 1.17 1.18 1.19 T:morus640128v1 1.65? 1.66? 5.43? T:aeadaes192ocbtaglen128v1 1.68 1.70 1.72 T:deoxysii128v141 1.81 1.86 1.90 T:colm0v1 1.86 1.87 1.89 T:deoxysii256v141 1.91 1.94 1.98 T:deoxyseq128128v1 2.01 2.06 2.11 T:aes128n12t8silcv2 2.01 2.07 2.12 T:aes128n12t8silcv3 2.05 2.09 2.13 T:deoxyseq256128v1 2.02 2.10 2.11 T:aes128n12t8clocv2 2.02 2.10 2.11 T:aes128n12t8clocv3 2.02 2.11 2.11 T:aes128n8t8clocv2 2.01 2.11 2.11 T:aes128n8t8silcv2 2.10 2.15 2.19 T:lunarkeyakv2 2.42 2.46 2.52 T:norx6444v3 2.63 2.64 2.68 T:norx6441v3 2.66 2.68 2.70 T:norx6441v2 2.83 2.88 2.92 T:seakeyakv2 2.90 2.93 2.99 T:oceankeyakv2 3.00 3.07 3.10 T:lakekeyakv1 3.17 3.20 3.22 T:norx6441v1 3.32 3.36 3.39 T:lakekeyakv2 3.48 3.50 3.51 T:aes128gcmv1 3.47 3.51 3.55 T:norx6444v2 3.57 3.59 3.61 T:norx3241v3 3.60 3.61 3.62 T:norx3241v2 3.83 3.89 3.95 T:norx6444v1 3.97 3.99 4.03 T:norx6461v3 4.00 4.04 4.08 T:norx6461v2 4.32 4.33 4.35 T:norx3241v1 4.57 4.57 4.58 T:aesjambuv1 4.77 4.81 4.84 T:norx6461v1 5.53 5.55 5.57 T:norx3261v3 5.53 5.56 5.57 T:norx3261v2 6.03 6.06 6.07 ascon128av12 6.01 6.12 6.15 T:ketjemajorv2 6.10 6.12 6.15 T:acorn128v3 6.18 6.21 6.24 T:ascon128av11 6.26 6.30 6.32 T:ascon96v1 6.39 6.43 6.44 T:acorn128v2 7.14 7.15 7.16 T:norx3261v1 7.60 7.63 7.66 T:riverkeyakv2 7.74 7.81 7.85 T:ketjeminorv2 8.89 8.91 8.94 ascon128v12 9.38 9.40 9.43 T:ascon128v1 9.37 9.40 9.44 T:ascon128v11 12.07 12.12 12.36 T:aes128otrsv1 12.11 12.13 12.17 T:aes128otrpv2 12.10 12.14 12.19 T:aes128otrpv1 12.12 12.24 12.30 T:aes128otrsv2 12.91 12.96 13.01 T:seakeyakv1 11.64? 13.12? 15.72? T:oceankeyakv1 14.35 14.38 14.40 T:twine80n6t4clocv3 15.14 15.20 15.25 T:aes256otrsv2 15.18 15.23 15.31 T:aes256otrpv2 15.21 15.24 15.29 T:aes256otrpv1 15.41 15.45 15.49 T:twine80n6t4clocv2 15.31 15.47 15.55 T:aes256otrsv1 17.73 17.78 17.89 T:proest256otrv1 21.39 21.44 21.50 T:aes128n12clocv1 21.46 21.50 21.55 T:aes128n8clocv1 22.23 22.29 22.35 T:aes128n12silcv1 22.27 22.37 22.47 T:aes128n8silcv1 26.22 26.25 26.31 T:ketjesrv1 25.74 27.92 28.09 T:riverkeyakv1 28.65 28.76 28.98 T:ketjesrv2 41.09 41.15 41.22 T:proest128otrv1 49.97 50.25 53.38 T:ketjejrv1 69.79 70.11 70.19 T:present80n6t4silcv3 82.48 84.13 84.36 T:ketjejrv2 89.32 89.39 89.52 T:aeadaes128ocbtaglen96v1 89.39 89.45 89.52 T:aeadaes128ocbtaglen64v1 103.39 103.55 106.95 T:twine80n6clocv1 103.60 104.33 104.45 T:deoxysneq128128v13 106.05 106.15 106.25 T:aeadaes192ocbtaglen64v1 106.14 106.23 106.32 T:aeadaes192ocbtaglen96v1 122.83 122.95 123.04 T:aeadaes256ocbtaglen96v1 122.97 123.08 123.27 T:aeadaes256ocbtaglen64v1 123.18 123.26 123.30 T:led80n6t4silcv3 147.45 148.21 149.96 T:deoxysneq256128v13 159.01 159.19 159.86 T:deoxyseq128128v13 160.14 161.27 161.37 T:aezv1 194.43 194.62 194.81 T:colm127v1 239.52 241.05 241.34 T:deoxyseq256128v13 329.57 336.42 337.35 T:acorn128 4053.96 4054.36 4058.09 T:present80n6t4silcv2 4046.08 4057.46 4060.00 T:present80n6silcv1 9060.69 9123.45 9127.80 T:led80n6silcv1 9155.95 9163.17 9170.50 T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.16? 0.19? 0.20? T:tiaoxinv1 0.16? 0.19? 0.21? T:tiaoxinv2 0.20? 0.22? 0.23? aegis128l 0.29? 0.32? 0.34? T:aezv4 0.32? 0.35? 0.37? T:aezv3 0.34 0.35 0.35 T:aegis128 0.34? 0.37? 0.38? T:aezv5 0.34? 0.37? 0.38? aegis256 0.55 0.56 0.56 T:aes128otrcv3 0.57 0.57 0.58 T:aes128otrpv3 0.69 0.70 0.70 T:aes256otrcv3 0.71 0.72 0.73 T:aes256otrpv3 0.79 0.83 0.85 T:deoxysi128v141 0.85 0.88 0.89 T:deoxysneq128128v1 0.93 0.94 0.96 T:morus1280256v1 0.91 0.95 0.97 T:deoxysi256v141 0.94 0.95 0.97 T:morus1280128v2 0.95 0.96 0.98 T:morus1280256v2 0.95 0.96 0.97 T:morus1280128v1 0.99 1.01 1.03 T:deoxysneq256128v1 1.11 1.13 1.13 T:morus640128v2 1.11 1.13 1.14 T:morus640128v1 1.25 1.28 1.31 T:deoxysii128v141 1.30 1.30 1.30 T:aes128otrsv3 1.34 1.35 1.37 T:deoxyseq128128v1 1.33 1.36 1.37 T:colm0v1 1.37 1.42 1.45 T:deoxysii256v141 0.98? 1.50? 1.59? T:aeadaes192ocbtaglen128v1 1.55 1.57 1.58 T:deoxyseq256128v1 1.75 1.75 1.76 T:aes256otrsv3 2.09 2.09 2.10 T:aes128n8t8silcv2 2.09 2.09 2.10 T:aes128n12t8silcv3 2.09 2.09 2.10 T:aes128n12t8silcv2 2.09 2.09 2.10 T:aes128n12t8clocv2 2.09 2.10 2.10 T:aes128n12t8clocv3 2.09 2.10 2.11 T:aes128n8t8clocv2 2.28 2.32 2.35 T:seakeyakv2 2.32 2.39 2.41 T:aes128gcmv1 2.37 2.41 2.43 T:oceankeyakv2 2.63 2.66 2.67 T:norx6441v3 2.66 2.69 2.71 T:norx6441v2 2.89 2.90 2.91 T:norx6444v3 2.90 2.91 2.95 T:lakekeyakv2 2.86 2.91 2.96 T:lunarkeyakv2 2.92 2.98 3.03 T:lakekeyakv1 3.17 3.21 3.24 T:norx6441v1 3.41 3.43 3.46 T:norx6444v2 3.66 3.67 3.69 T:norx3241v3 3.65 3.68 3.69 T:norx3241v2 3.81 3.83 3.85 T:norx6444v1 3.96 3.98 4.00 T:norx6461v3 3.99 4.01 4.05 T:norx6461v2 4.32 4.33 4.33 T:aesjambuv1 4.40 4.42 4.44 T:norx3241v1 4.77 4.79 4.84 T:norx6461v1 5.30 5.34 5.37 T:riverkeyakv2 5.43 5.47 5.48 T:ketjemajorv2 5.47 5.50 5.52 T:norx3261v2 5.49 5.54 5.56 T:norx3261v3 6.04 6.07 6.10 T:acorn128v2 6.06 6.08 6.09 T:acorn128v3 6.18 6.20 6.23 ascon128av12 6.24 6.26 6.27 T:ascon128av11 6.27 6.29 6.32 T:ascon96v1 7.16 7.18 7.22 T:ketjeminorv2 7.27 7.29 7.30 T:norx3261v1 8.88 8.90 8.92 ascon128v12 9.32 9.35 9.40 T:ascon128v1 9.33 9.36 9.40 T:ascon128v11 11.24 11.30 11.36 T:aes128otrsv2 11.30 11.32 11.47 T:aes128otrsv1 12.09 12.13 12.19 T:aes128otrpv2 12.10 12.15 12.19 T:aes128otrpv1 11.92? 12.57? 14.71? T:oceankeyakv1 12.64 13.01 13.21 T:seakeyakv1 14.31 14.32 14.33 T:twine80n6t4clocv3 14.32 14.37 14.40 T:aes256otrsv2 14.36 14.39 14.42 T:aes256otrsv1 15.19 15.21 15.23 T:twine80n6t4clocv2 15.19 15.23 15.27 T:aes256otrpv1 15.23 15.26 15.29 T:aes256otrpv2 15.41 15.44 15.47 T:aes128n12clocv1 15.44 15.46 15.48 T:aes128n8clocv1 16.23 16.29 16.38 T:aes128n12silcv1 16.26 16.31 16.42 T:aes128n8silcv1 18.21 18.25 18.41 T:proest256otrv1 24.82 24.87 24.92 T:ketjesrv1 26.34 26.41 26.44 T:ketjesrv2 24.60 26.69 27.10 T:riverkeyakv1 41.26 41.29 41.32 T:proest128otrv1 44.57 44.79 45.59 T:ketjejrv1 65.31 65.43 65.52 T:aeadaes128ocbtaglen64v1 65.39 65.48 65.62 T:aeadaes128ocbtaglen96v1 69.73 69.74 69.78 T:present80n6t4silcv3 77.06 77.12 77.32 T:aeadaes192ocbtaglen64v1 77.06 77.14 77.24 T:aeadaes192ocbtaglen96v1 79.30 79.40 79.59 T:deoxysneq128128v13 81.44 81.59 84.12 T:twine80n6clocv1 82.80 82.94 83.90 T:ketjejrv2 88.67 88.78 88.86 T:aeadaes256ocbtaglen64v1 88.68 88.81 88.88 T:aeadaes256ocbtaglen96v1 106.42 106.85 107.80 T:aezv1 110.11 110.21 110.37 T:colm127v1 119.65 119.79 119.95 T:deoxyseq128128v13 119.61 121.42 121.64 T:deoxysneq256128v13 121.60 121.64 121.81 T:led80n6t4silcv3 180.51 181.37 181.86 T:deoxyseq256128v13 331.28 333.92 334.52 T:acorn128 3031.61 3032.19 3033.76 T:present80n6silcv1 3033.43 3034.17 3036.10 T:present80n6t4silcv2 6822.12 6848.29 6866.75 T:led80n6silcv1 6879.54 6889.31 6898.10 T:led80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.21 0.22 0.23 aegis128l 0.21? 0.23? 0.27? T:tiaoxinv1 0.19? 0.23? 0.25? T:tiaoxinv2 0.31 0.33 0.34 T:aezv4 0.33 0.34 0.35 T:aezv3 0.35 0.36 0.36 T:aegis128 0.36 0.37 0.37 T:aezv5 0.35? 0.37? 0.40? aegis256 0.57 0.57 0.58 T:aes128otrcv3 0.59 0.60 0.61 T:aes128otrpv3 0.70 0.71 0.72 T:aes256otrcv3 0.74 0.75 0.75 T:aes256otrpv3 0.86 0.89 0.91 T:deoxysi128v141 0.91 0.92 0.93 T:morus1280128v2 0.91 0.92 0.93 T:morus1280256v2 0.91 0.92 0.93 T:morus1280128v1 0.91 0.92 0.93 T:morus1280256v1 0.91 0.93 0.95 T:deoxysneq128128v1 0.96 1.00 1.01 T:deoxysi256v141 1.00 1.03 1.05 T:deoxysneq256128v1 1.12 1.13 1.14 T:morus640128v1 1.13 1.14 1.15 T:morus640128v2 1.27 1.29 1.30 T:deoxysii128v141 1.31 1.32 1.33 T:aes128otrsv3 1.31 1.35 1.38 T:colm0v1 1.38 1.42 1.43 T:deoxysii256v141 1.41 1.43 1.44 T:deoxyseq128128v1 -0.35? 1.54? 3.49? T:aeadaes192ocbtaglen128v1 1.53 1.57 1.58 T:deoxyseq256128v1 1.76 1.76 1.77 T:aes256otrsv3 2.04 2.06 2.09 T:aes128n8t8silcv2 2.04 2.06 2.09 T:aes128n12t8clocv2 2.06 2.06 2.09 T:aes128n12t8clocv3 2.04 2.09 2.09 T:aes128n8t8clocv2 2.04 2.09 2.09 T:aes128n12t8silcv2 2.04 2.09 2.09 T:aes128n12t8silcv3 2.35 2.38 2.41 T:seakeyakv2 2.33 2.40 2.42 T:aes128gcmv1 2.37 2.41 2.46 T:oceankeyakv2 2.66 2.67 2.70 T:norx6441v2 2.66 2.68 2.71 T:norx6441v3 2.87 2.90 2.91 T:norx6444v3 2.86 2.91 2.94 T:lunarkeyakv2 2.91 2.93 2.97 T:lakekeyakv1 2.92 2.95 2.97 T:lakekeyakv2 3.15 3.17 3.20 T:norx6441v1 3.43 3.44 3.47 T:norx6444v2 3.61 3.62 3.64 T:norx3241v2 3.62 3.64 3.65 T:norx3241v3 3.80 3.83 3.87 T:norx6444v1 4.00 4.02 4.04 T:norx6461v3 4.01 4.07 4.11 T:norx6461v2 4.36 4.37 4.38 T:norx3241v1 4.43 4.43 4.44 T:aesjambuv1 4.77 4.78 4.80 T:norx6461v1 5.25 5.29 5.32 T:ketjemajorv2 5.42 5.44 5.47 T:riverkeyakv2 5.48 5.50 5.52 T:norx3261v2 5.50 5.53 5.55 T:norx3261v3 5.99 6.01 6.13 ascon128av12 6.16 6.17 6.19 T:acorn128v3 6.18 6.20 6.23 T:acorn128v2 6.21 6.25 6.28 T:ascon128av11 6.26 6.29 6.30 T:ascon96v1 6.86 6.90 6.94 T:ketjeminorv2 7.20 7.21 7.22 T:norx3261v1 8.85 8.89 8.93 ascon128v12 9.39 9.40 9.43 T:ascon128v1 9.38 9.41 9.42 T:ascon128v11 11.32 11.36 11.40 T:aes128otrsv2 11.34 11.37 11.50 T:aes128otrsv1 12.15 12.18 12.23 T:aes128otrpv2 12.16 12.19 12.24 T:aes128otrpv1 12.02? 12.74? 14.85? T:oceankeyakv1 12.78 13.17 13.36 T:seakeyakv1 14.24 14.26 14.28 T:twine80n6t4clocv3 14.40 14.44 14.48 T:aes256otrsv2 14.44 14.48 14.51 T:aes256otrsv1 15.21 15.24 15.26 T:twine80n6t4clocv2 15.27 15.30 15.34 T:aes256otrpv1 15.28 15.33 15.37 T:aes256otrpv2 15.85 15.87 15.89 T:aes128n12clocv1 15.86 15.88 15.90 T:aes128n8clocv1 16.53 16.61 16.67 T:aes128n12silcv1 16.57 16.69 16.74 T:aes128n8silcv1 17.90 18.07 18.12 T:proest256otrv1 24.70 24.77 24.82 T:ketjesrv1 24.67 26.75 27.11 T:riverkeyakv1 26.73 26.96 26.99 T:ketjesrv2 41.19 41.22 41.30 T:proest128otrv1 45.92 46.21 47.32 T:ketjejrv1 69.40 69.48 69.64 T:present80n6t4silcv3 76.40 76.49 76.85 T:aeadaes128ocbtaglen96v1 76.48 76.54 76.61 T:aeadaes128ocbtaglen64v1 80.90 81.35 82.75 T:ketjejrv2 81.96 82.16 84.61 T:twine80n6clocv1 90.68 90.74 90.82 T:aeadaes192ocbtaglen64v1 90.72 90.83 91.17 T:aeadaes192ocbtaglen96v1 91.96 92.03 92.24 T:deoxysneq128128v13 104.91 104.97 105.04 T:aeadaes256ocbtaglen64v1 104.89 104.99 105.18 T:aeadaes256ocbtaglen96v1 106.65 107.25 107.68 T:aezv1 119.73 119.83 120.05 T:deoxyseq128128v13 122.38 122.48 122.58 T:led80n6t4silcv3 132.84 133.15 133.44 T:colm127v1 133.73 134.17 135.91 T:deoxysneq256128v13 180.27 180.61 181.22 T:deoxyseq256128v13 329.46 333.34 335.29 T:acorn128 3033.07 3033.80 3035.44 T:present80n6silcv1 3033.61 3033.93 3035.28 T:present80n6t4silcv2 6819.44 6852.40 6863.82 T:led80n6silcv1 6877.33 6880.21 6885.44 T:led80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.16? 0.19? 0.21? T:aezv4 0.19? 0.20? 0.23? T:aezv3 0.18? 0.21? 0.23? T:aezv5 0.21 0.22 0.22 aegis128l 0.21? 0.23? 0.25? T:tiaoxinv1 0.22? 0.24? 0.26? T:tiaoxinv2 0.35 0.36 0.36 T:aegis128 0.38 0.41 0.42 aegis256 0.57 0.57 0.58 T:aes128otrcv3 0.60 0.60 0.61 T:aes128otrpv3 0.70 0.71 0.71 T:aes256otrcv3 0.74 0.75 0.75 T:aes256otrpv3 0.87 0.88 0.90 T:deoxysi128v141 0.92 0.92 0.93 T:morus1280128v1 0.92 0.92 0.93 T:morus1280256v2 0.92 0.92 0.93 T:morus1280128v2 0.92 0.93 0.93 T:morus1280256v1 0.91 0.94 0.95 T:deoxysneq128128v1 0.98 1.00 1.01 T:deoxysi256v141 1.04 1.04 1.05 T:deoxysneq256128v1 1.14 1.14 1.16 T:morus640128v2 1.13 1.14 1.15 T:morus640128v1 1.28 1.30 1.31 T:deoxysii128v141 1.32 1.32 1.33 T:aes128otrsv3 1.33 1.34 1.37 T:colm0v1 1.40 1.41 1.42 T:deoxysii256v141 1.40 1.43 1.46 T:deoxyseq128128v1 1.52 1.53 1.55 T:aeadaes192ocbtaglen128v1 1.53 1.56 1.60 T:deoxyseq256128v1 1.76 1.77 1.77 T:aes256otrsv3 2.03 2.06 2.10 T:aes128n8t8clocv2 2.03 2.07 2.10 T:aes128n12t8clocv2 2.04 2.07 2.09 T:aes128n12t8silcv3 2.04 2.09 2.09 T:aes128n8t8silcv2 2.04 2.09 2.09 T:aes128n12t8silcv2 2.04 2.09 2.09 T:aes128n12t8clocv3 2.37 2.38 2.39 T:aes128gcmv1 2.37 2.40 2.42 T:seakeyakv2 2.42 2.44 2.47 T:oceankeyakv2 2.66 2.67 2.69 T:norx6441v2 2.66 2.68 2.69 T:norx6441v3 2.87 2.90 2.91 T:norx6444v3 2.92 2.94 2.96 T:lunarkeyakv2 2.93 2.95 2.96 T:lakekeyakv2 2.92 2.95 2.98 T:lakekeyakv1 3.16 3.18 3.19 T:norx6441v1 3.44 3.46 3.48 T:norx6444v2 3.62 3.63 3.64 T:norx3241v2 3.62 3.63 3.64 T:norx3241v3 3.83 3.85 3.86 T:norx6444v1 3.99 4.01 4.05 T:norx6461v3 4.02 4.04 4.09 T:norx6461v2 4.36 4.37 4.38 T:norx3241v1 4.43 4.43 4.44 T:aesjambuv1 4.77 4.79 4.80 T:norx6461v1 5.31 5.33 5.36 T:ketjemajorv2 5.45 5.46 5.48 T:riverkeyakv2 5.49 5.50 5.51 T:norx3261v2 5.49 5.52 5.53 T:norx3261v3 5.99 6.02 6.12 ascon128av12 6.17 6.18 6.19 T:acorn128v3 6.20 6.22 6.24 T:acorn128v2 6.25 6.29 6.31 T:ascon96v1 6.26 6.30 6.34 T:ascon128av11 6.90 6.92 6.93 T:ketjeminorv2 7.20 7.21 7.22 T:norx3261v1 8.86 8.87 8.89 ascon128v12 9.40 9.41 9.43 T:ascon128v11 9.41 9.42 9.43 T:ascon128v1 11.35 11.38 11.42 T:aes128otrsv2 11.38 11.42 11.56 T:aes128otrsv1 12.18 12.21 12.26 T:aes128otrpv2 12.19 12.23 12.26 T:aes128otrpv1 12.09? 12.81? 14.86? T:oceankeyakv1 12.81 13.22 13.37 T:seakeyakv1 14.24 14.25 14.28 T:twine80n6t4clocv3 14.42 14.47 14.51 T:aes256otrsv2 14.46 14.48 14.50 T:aes256otrsv1 15.21 15.23 15.25 T:twine80n6t4clocv2 15.31 15.32 15.37 T:aes256otrpv2 15.29 15.34 15.36 T:aes256otrpv1 15.86 15.88 15.91 T:aes128n12clocv1 15.87 15.88 15.92 T:aes128n8clocv1 16.54 16.63 16.70 T:aes128n12silcv1 16.56 16.65 16.72 T:aes128n8silcv1 18.04 18.11 18.14 T:proest256otrv1 24.72 24.79 24.84 T:ketjesrv1 24.66 26.77 27.16 T:riverkeyakv1 26.75 26.99 27.03 T:ketjesrv2 41.19 41.24 41.28 T:proest128otrv1 46.00 46.45 47.34 T:ketjejrv1 69.41 69.49 69.63 T:present80n6t4silcv3 76.40 76.52 76.61 T:aeadaes128ocbtaglen96v1 76.48 76.57 76.62 T:aeadaes128ocbtaglen64v1 81.14 81.26 83.27 T:ketjejrv2 81.98 82.12 84.60 T:twine80n6clocv1 90.70 90.75 90.81 T:aeadaes192ocbtaglen64v1 90.74 90.82 90.92 T:aeadaes192ocbtaglen96v1 91.99 92.10 92.26 T:deoxysneq128128v13 104.91 104.97 105.10 T:aeadaes256ocbtaglen96v1 104.93 105.00 105.04 T:aeadaes256ocbtaglen64v1 106.39 106.84 107.41 T:aezv1 119.77 119.95 120.15 T:deoxyseq128128v13 122.47 122.49 122.54 T:led80n6t4silcv3 131.20 131.44 131.74 T:colm127v1 134.32 134.63 135.58 T:deoxysneq256128v13 180.53 180.93 181.46 T:deoxyseq256128v13 329.45 333.26 335.43 T:acorn128 3032.36 3033.50 3033.84 T:present80n6t4silcv2 3033.04 3033.66 3035.62 T:present80n6silcv1 6820.47 6838.59 6862.44 T:led80n6silcv1 6878.57 6882.26 6886.08 T:led80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.12? 0.14? 0.15? T:tiaoxinv2 0.12? 0.14? 0.16? T:tiaoxinv1 0.16? 0.17? 0.18? aegis128l 0.16? 0.21? 0.23? T:aezv4 0.19? 0.22? 0.23? T:aezv5 0.22? 0.25? 0.27? T:aezv3 0.31 0.31 0.31 T:aegis128 0.32 0.33 0.34 aegis256 0.57 0.57 0.58 T:aes128otrcv3 0.60 0.63 0.64 T:aes128otrpv3 0.70 0.71 0.72 T:aes256otrcv3 0.71 0.77 0.78 T:aes256otrpv3 0.80 0.83 0.83 T:colm0v1 0.80 0.84 0.86 T:deoxysi128v141 0.83 0.86 0.87 T:deoxysii128v141 0.84 0.87 0.88 T:deoxysneq128128v1 0.87 0.89 0.90 T:morus1280128v1 0.89 0.90 0.91 T:morus1280256v2 0.90 0.90 0.91 T:morus1280256v1 0.89 0.90 0.91 T:morus1280128v2 0.91 0.92 0.93 T:deoxyseq128128v1 0.92 0.94 0.94 T:deoxysi256v141 0.93 0.94 0.95 T:deoxysii256v141 0.98 1.00 1.01 T:deoxysneq256128v1 1.04 1.05 1.08 T:deoxyseq256128v1 1.06 1.07 1.08 T:morus640128v1 1.07 1.09 1.10 T:morus640128v2 1.25 1.27 1.32 T:aes128gcmv1 1.01? 1.44? 5.14? T:aeadaes192ocbtaglen128v1 1.84 1.88 1.94 T:oceankeyakv2 1.85 1.89 1.93 T:lunarkeyakv2 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.06 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128n12t8silcv2 2.06 2.06 2.06 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n12t8clocv2 2.25 2.29 2.32 T:seakeyakv2 2.57 2.62 2.65 T:norx6441v3 2.64 2.68 2.70 T:lakekeyakv2 2.65 2.69 2.71 T:norx6441v2 2.69 2.75 2.78 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.17 3.19 3.23 T:norx6441v1 3.31 3.34 3.37 T:norx6444v3 3.39 3.40 3.42 T:norx6444v2 3.62 3.65 3.67 T:norx3241v3 3.64 3.66 3.67 T:norx3241v2 3.79 3.82 3.84 T:norx6444v1 3.92 3.95 3.97 T:norx6461v3 3.96 4.00 4.02 T:norx6461v2 4.29 4.29 4.30 T:aesjambuv1 4.37 4.40 4.44 T:norx3241v1 4.49 4.55 4.57 T:ketjemajorv2 4.72 4.76 4.80 T:norx6461v1 4.89 4.96 4.99 T:riverkeyakv2 5.44 5.48 5.50 T:norx3261v2 5.46 5.50 5.54 T:norx3261v3 5.88 5.91 5.95 T:acorn128v2 5.94 6.01 6.26 ascon128av12 5.95 6.05 6.07 T:acorn128v3 6.01 6.08 6.19 T:ketjeminorv2 6.23 6.25 6.25 T:ascon128av11 6.28 6.31 6.33 T:ascon96v1 7.26 7.28 7.28 T:norx3261v1 8.80 8.85 8.87 ascon128v12 9.26 9.27 9.29 T:ascon128v11 9.25 9.28 9.30 T:ascon128v1 10.22 10.25 10.28 T:aes128n8clocv1 10.27 10.28 10.32 T:aes128n12clocv1 10.63 10.68 10.71 T:aes128otrsv2 10.71 10.77 11.00 T:aes128otrsv1 10.80 10.84 10.86 T:aes128n8silcv1 10.81 10.84 10.87 T:aes128n12silcv1 12.25 12.28 12.33 T:aes128otrpv2 12.29 12.31 12.34 T:aes128otrpv1 11.61? 12.50? 14.78? T:oceankeyakv1 12.46 12.50 12.55 T:seakeyakv1 13.65 13.73 13.79 T:aes256otrsv1 13.67 13.74 13.82 T:aes256otrsv2 14.14 14.15 14.16 T:twine80n6t4clocv3 15.02 15.05 15.07 T:twine80n6t4clocv2 15.40 15.43 15.46 T:aes256otrpv1 15.38 15.44 15.48 T:aes256otrpv2 18.08 18.20 18.30 T:proest256otrv1 23.37 23.42 23.49 T:ketjesrv1 24.80 25.02 25.10 T:ketjesrv2 23.51 25.56 26.03 T:riverkeyakv1 41.29 41.33 41.38 T:proest128otrv1 41.69 41.79 41.92 T:ketjejrv1 50.79 50.92 51.27 T:aezv1 51.08 52.81 53.34 T:twine80n6clocv1 63.59 63.66 63.73 T:aeadaes128ocbtaglen64v1 63.50 63.71 63.85 T:aeadaes128ocbtaglen96v1 67.76 68.00 68.96 T:colm127v1 68.79 68.81 68.83 T:present80n6t4silcv3 75.23 75.33 75.40 T:aeadaes192ocbtaglen64v1 75.18 75.34 75.47 T:aeadaes192ocbtaglen96v1 78.80 79.18 79.39 T:ketjejrv2 79.45 79.54 79.63 T:deoxyseq128128v13 78.91 79.62 79.78 T:deoxysneq128128v13 86.91 87.01 87.17 T:aeadaes256ocbtaglen64v1 86.86 87.02 87.17 T:aeadaes256ocbtaglen96v1 119.84 120.49 121.08 T:deoxysneq256128v13 119.90 120.71 120.95 T:deoxyseq256128v13 121.48 121.69 121.79 T:led80n6t4silcv3 330.33 332.62 333.75 T:acorn128 2020.77 2021.20 2021.61 T:present80n6t4silcv2 2019.71 2021.33 2021.91 T:present80n6silcv1 4537.19 4547.59 4571.40 T:led80n6silcv1 4564.99 4580.48 4594.64 T:led80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.11? 0.15? 0.18? T:tiaoxinv1 0.11? 0.15? 0.17? T:tiaoxinv2 0.16? 0.17? 0.18? aegis128l 0.21 0.21 0.22 T:aezv5 0.20 0.21 0.22 T:aezv4 0.24 0.25 0.26 T:aezv3 0.30 0.31 0.31 T:aegis128 0.28? 0.32? 0.37? aegis256 0.57 0.57 0.58 T:aes128otrcv3 0.61 0.62 0.62 T:aes128otrpv3 0.70 0.70 0.71 T:aes256otrcv3 0.74 0.75 0.77 T:aes256otrpv3 0.80 0.81 0.82 T:colm0v1 0.82 0.84 0.86 T:deoxysi128v141 0.83 0.86 0.87 T:deoxysii128v141 0.85 0.86 0.88 T:morus1280256v2 0.85 0.86 0.87 T:morus1280128v1 0.85 0.87 0.89 T:morus1280256v1 0.85 0.87 0.88 T:morus1280128v2 0.84 0.88 0.91 T:deoxysneq128128v1 0.89 0.91 0.92 T:deoxyseq128128v1 0.92 0.94 0.95 T:deoxysii256v141 0.93 0.95 0.97 T:deoxysi256v141 0.97 1.01 1.02 T:deoxysneq256128v1 1.02 1.04 1.05 T:deoxyseq256128v1 1.08 1.10 1.11 T:morus640128v1 1.09 1.10 1.12 T:morus640128v2 1.26 1.30 1.32 T:aes128gcmv1 -2.36? 1.39? 1.43? T:aeadaes192ocbtaglen128v1 1.84 1.88 1.93 T:oceankeyakv2 1.85 1.91 1.96 T:lunarkeyakv2 2.02 2.02 2.11 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.07 2.11 T:aes128n12t8clocv3 2.06 2.10 2.11 T:aes128n12t8clocv2 2.06 2.11 2.11 T:aes128n8t8silcv2 2.01 2.11 2.12 T:aes128n12t8silcv2 2.02 2.11 2.12 T:aes128n12t8silcv3 2.26 2.29 2.32 T:seakeyakv2 2.64 2.67 2.71 T:norx6441v2 2.65 2.67 2.69 T:norx6441v3 2.64 2.67 2.69 T:lakekeyakv2 2.72 2.74 2.76 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.14 3.19 3.22 T:norx6441v1 3.32 3.35 3.36 T:norx6444v3 3.38 3.40 3.43 T:norx6444v2 3.63 3.66 3.67 T:norx3241v2 3.64 3.67 3.69 T:norx3241v3 3.77 3.80 3.84 T:norx6444v1 3.99 4.01 4.08 T:norx6461v3 3.99 4.04 4.07 T:norx6461v2 4.29 4.30 4.30 T:aesjambuv1 4.37 4.40 4.41 T:norx3241v1 4.49 4.54 4.60 T:ketjemajorv2 4.72 4.76 4.78 T:norx6461v1 4.92 4.97 4.98 T:riverkeyakv2 5.42 5.47 5.49 T:norx3261v2 5.47 5.50 5.53 T:norx3261v3 5.94 5.97 5.98 ascon128av12 5.96 6.02 6.26 T:acorn128v2 6.02 6.08 6.14 T:ketjeminorv2 6.16 6.23 6.27 T:acorn128v3 6.20 6.27 6.30 T:ascon128av11 6.26 6.30 6.31 T:ascon96v1 7.25 7.27 7.28 T:norx3261v1 8.80 8.83 8.86 ascon128v12 9.38 9.42 9.44 T:ascon128v1 9.39 9.42 9.44 T:ascon128v11 10.26 10.29 10.31 T:aes128n8clocv1 10.27 10.33 10.38 T:aes128n12clocv1 10.60 10.65 10.71 T:aes128otrsv2 10.62 10.77 10.98 T:aes128otrsv1 10.79 10.83 10.87 T:aes128n8silcv1 10.80 10.85 10.87 T:aes128n12silcv1 12.27 12.30 12.35 T:aes128otrpv2 12.28 12.31 12.37 T:aes128otrpv1 11.55? 12.49? 14.75? T:oceankeyakv1 12.45 12.50 12.53 T:seakeyakv1 13.66 13.70 13.76 T:aes256otrsv1 13.65 13.75 13.82 T:aes256otrsv2 14.11 14.14 14.18 T:twine80n6t4clocv3 14.99 15.04 15.07 T:twine80n6t4clocv2 15.38 15.43 15.47 T:aes256otrpv1 15.37 15.44 15.50 T:aes256otrpv2 18.08 18.16 18.30 T:proest256otrv1 23.29 23.40 23.43 T:ketjesrv1 24.67 25.01 25.11 T:ketjesrv2 23.52 25.64 25.96 T:riverkeyakv1 41.28 41.32 41.34 T:proest128otrv1 41.72 41.81 41.90 T:ketjejrv1 50.81 50.94 51.17 T:aezv1 51.07 52.82 53.32 T:twine80n6clocv1 63.51 63.64 63.76 T:aeadaes128ocbtaglen64v1 63.51 63.72 63.90 T:aeadaes128ocbtaglen96v1 67.88 68.72 68.99 T:colm127v1 68.76 68.81 68.85 T:present80n6t4silcv3 75.24 75.31 75.39 T:aeadaes192ocbtaglen64v1 75.22 75.35 75.39 T:aeadaes192ocbtaglen96v1 78.19 78.73 79.45 T:ketjejrv2 79.38 79.53 79.62 T:deoxyseq128128v13 78.86 79.75 79.88 T:deoxysneq128128v13 86.90 86.98 87.18 T:aeadaes256ocbtaglen64v1 86.87 87.02 87.15 T:aeadaes256ocbtaglen96v1 119.33 119.57 120.54 T:deoxysneq256128v13 119.41 119.74 120.42 T:deoxyseq256128v13 121.49 121.67 121.75 T:led80n6t4silcv3 329.00 331.49 335.41 T:acorn128 2020.78 2021.06 2021.55 T:present80n6t4silcv2 2019.64 2021.21 2023.67 T:present80n6silcv1 4539.33 4549.42 4573.46 T:led80n6silcv1 4559.85 4563.36 4568.21 T:led80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.13? 0.15? 0.18? T:tiaoxinv1 0.17 0.17 0.18 aegis128l 0.11? 0.18? 0.18? T:tiaoxinv2 0.20 0.21 0.22 T:aezv4 0.21 0.21 0.22 T:aezv5 0.23? 0.25? 0.26? T:aezv3 0.31 0.31 0.32 T:aegis128 0.28? 0.36? 0.37? aegis256 0.56 0.57 0.58 T:aes128otrcv3 0.62 0.62 0.62 T:aes128otrpv3 0.70 0.70 0.71 T:aes256otrcv3 0.74 0.75 0.77 T:aes256otrpv3 0.81 0.82 0.82 T:colm0v1 0.79 0.84 0.87 T:deoxysi128v141 0.85 0.86 0.87 T:deoxysii128v141 0.86 0.87 0.87 T:morus1280256v2 0.87 0.87 0.88 T:morus1280256v1 0.86 0.87 0.88 T:morus1280128v2 0.86 0.87 0.88 T:morus1280128v1 0.83 0.88 0.91 T:deoxysneq128128v1 0.90 0.91 0.92 T:deoxyseq128128v1 0.93 0.95 0.96 T:deoxysii256v141 0.92 0.95 0.96 T:deoxysi256v141 0.97 0.98 1.03 T:deoxysneq256128v1 1.03 1.04 1.05 T:deoxyseq256128v1 1.09 1.11 1.12 T:morus640128v1 1.09 1.11 1.12 T:morus640128v2 1.25 1.28 1.30 T:aes128gcmv1 1.38? 1.41? 5.27? T:aeadaes192ocbtaglen128v1 1.86 1.89 1.92 T:oceankeyakv2 1.87 1.91 1.92 T:lunarkeyakv2 2.06 2.06 2.07 T:aes128otrsv3 2.02 2.10 2.11 T:aes128n8t8clocv2 2.02 2.10 2.11 T:aes128n12t8clocv3 2.01 2.11 2.11 T:aes128n12t8silcv2 2.02 2.11 2.11 T:aes128n12t8clocv2 2.02 2.11 2.11 T:aes128n12t8silcv3 2.01 2.11 2.11 T:aes128n8t8silcv2 2.27 2.29 2.30 T:seakeyakv2 2.64 2.66 2.67 T:lakekeyakv2 2.65 2.68 2.69 T:norx6441v2 2.65 2.68 2.69 T:norx6441v3 2.73 2.74 2.76 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.15 3.18 3.20 T:norx6441v1 3.32 3.34 3.36 T:norx6444v3 3.37 3.41 3.43 T:norx6444v2 3.64 3.66 3.67 T:norx3241v2 3.64 3.66 3.68 T:norx3241v3 3.79 3.80 3.84 T:norx6444v1 3.99 4.01 4.02 T:norx6461v3 3.99 4.03 4.05 T:norx6461v2 4.29 4.29 4.30 T:aesjambuv1 4.39 4.40 4.41 T:norx3241v1 4.52 4.57 4.61 T:ketjemajorv2 4.75 4.77 4.82 T:norx6461v1 4.94 4.97 4.97 T:riverkeyakv2 5.45 5.47 5.49 T:norx3261v2 5.46 5.49 5.52 T:norx3261v3 5.94 5.96 5.98 ascon128av12 5.97 6.02 6.29 T:acorn128v2 6.05 6.11 6.20 T:ketjeminorv2 6.16 6.24 6.27 T:acorn128v3 6.20 6.31 6.32 T:ascon128av11 6.28 6.31 6.34 T:ascon96v1 7.25 7.26 7.28 T:norx3261v1 8.81 8.83 8.87 ascon128v12 9.40 9.44 9.47 T:ascon128v1 9.42 9.44 9.46 T:ascon128v11 10.24 10.27 10.31 T:aes128n8clocv1 10.25 10.29 10.33 T:aes128n12clocv1 10.65 10.68 10.73 T:aes128otrsv2 10.70 10.74 10.97 T:aes128otrsv1 10.80 10.84 10.87 T:aes128n8silcv1 10.79 10.84 10.88 T:aes128n12silcv1 12.26 12.30 12.35 T:aes128otrpv2 12.29 12.32 12.36 T:aes128otrpv1 12.42 12.47 12.52 T:seakeyakv1 11.54? 12.48? 14.77? T:oceankeyakv1 13.65 13.71 13.78 T:aes256otrsv1 13.67 13.74 13.79 T:aes256otrsv2 14.12 14.15 14.18 T:twine80n6t4clocv3 14.99 15.03 15.06 T:twine80n6t4clocv2 15.37 15.42 15.48 T:aes256otrpv2 15.40 15.44 15.47 T:aes256otrpv1 18.09 18.17 18.31 T:proest256otrv1 23.31 23.40 23.49 T:ketjesrv1 24.72 25.06 25.10 T:ketjesrv2 23.50 25.59 25.96 T:riverkeyakv1 41.29 41.31 41.37 T:proest128otrv1 41.59 41.76 41.90 T:ketjejrv1 50.79 50.93 51.18 T:aezv1 51.35 52.82 53.34 T:twine80n6clocv1 63.57 63.61 63.71 T:aeadaes128ocbtaglen64v1 63.47 63.77 63.92 T:aeadaes128ocbtaglen96v1 67.82 67.97 68.13 T:colm127v1 68.79 68.81 68.86 T:present80n6t4silcv3 75.21 75.28 75.49 T:aeadaes192ocbtaglen96v1 75.24 75.30 75.36 T:aeadaes192ocbtaglen64v1 78.49 79.19 79.25 T:ketjejrv2 79.37 79.47 79.62 T:deoxyseq128128v13 78.88 79.66 79.79 T:deoxysneq128128v13 86.90 86.97 87.12 T:aeadaes256ocbtaglen64v1 86.91 86.98 87.10 T:aeadaes256ocbtaglen96v1 119.29 119.45 120.75 T:deoxysneq256128v13 119.49 119.84 120.45 T:deoxyseq256128v13 121.51 121.68 121.79 T:led80n6t4silcv3 328.77 331.38 334.65 T:acorn128 2019.73 2020.96 2021.44 T:present80n6silcv1 2020.79 2021.38 2021.57 T:present80n6t4silcv2 4540.18 4549.54 4568.19 T:led80n6silcv1 4550.10 4552.39 4554.77 T:led80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.23 0.23 0.25 T:tiaoxinv1 0.22? 0.24? 0.26? T:tiaoxinv2 0.25? 0.27? 0.28? aegis128l 0.37 0.37 0.38 T:aezv4 0.37 0.38 0.38 T:aegis128 0.39 0.39 0.41 T:aezv3 0.41 0.41 0.43 T:aezv5 0.41 0.42 0.42 aegis256 0.65 0.65 0.66 T:aes128otrpv3 0.68 0.68 0.69 T:aes128otrcv3 0.81 0.82 0.82 T:aes256otrpv3 0.86 0.86 0.87 T:aes256otrcv3 0.97 0.98 1.00 T:deoxysi128v141 0.98 0.99 1.00 T:deoxysneq128128v1 1.10 1.10 1.12 T:deoxysi256v141 1.14 1.15 1.17 T:deoxysneq256128v1 1.17 1.18 1.18 T:morus1280128v1 1.17 1.18 1.18 T:morus1280256v1 1.17 1.19 1.19 T:morus1280256v2 1.18 1.19 1.20 T:morus1280128v2 1.27 1.27 1.28 T:morus640128v2 1.27 1.27 1.28 T:morus640128v1 1.35 1.36 1.36 T:aes128otrsv3 1.42 1.43 1.44 T:colm0v1 1.43 1.45 1.48 T:deoxysii128v141 1.48 1.49 1.52 T:deoxyseq128128v1 1.63 1.64 1.67 T:deoxysii256v141 1.70 1.71 1.72 T:deoxyseq256128v1 1.78 1.80 1.91 T:aeadaes192ocbtaglen128v1 1.82 1.83 1.83 T:aes256otrsv3 2.12 2.12 2.12 T:aes128n12t8clocv3 2.12 2.12 2.12 T:aes128n12t8clocv2 2.12 2.13 2.13 T:aes128n8t8clocv2 2.16 2.16 2.16 T:aes128n12t8silcv3 2.16 2.16 2.16 T:aes128n12t8silcv2 2.16 2.16 2.16 T:aes128n8t8silcv2 2.63 2.65 2.67 T:aes128gcmv1 3.09 3.10 3.13 T:norx6441v3 3.11 3.14 3.16 T:norx6441v2 3.20 3.21 3.22 T:lakekeyakv2 3.37 3.39 3.43 T:seakeyakv2 3.52 3.53 3.60 T:lakekeyakv1 3.57 3.58 3.60 T:norx6441v1 3.91 3.94 3.95 T:norx6444v3 3.96 3.97 3.99 T:norx3241v3 3.95 3.97 3.98 T:norx3241v2 4.37 4.38 4.39 T:aesjambuv1 4.56 4.58 4.62 T:oceankeyakv2 4.61 4.63 4.65 T:norx6461v3 4.66 4.67 4.71 T:norx3241v1 4.63 4.69 4.71 T:norx6461v2 4.95 4.97 4.98 T:norx6444v2 5.34 5.37 5.40 T:norx6461v1 5.58 5.58 5.60 T:norx6444v1 5.60 5.61 5.65 T:riverkeyakv2 5.94 5.94 5.96 T:norx3261v2 5.94 5.96 5.98 T:norx3261v3 6.37 6.39 6.50 ascon128av12 6.41 6.41 6.42 T:ascon128av11 6.44 6.45 6.46 T:ascon96v1 6.95 6.97 6.98 T:ketjemajorv2 7.01 7.02 7.06 T:acorn128v2 7.06 7.06 7.11 T:acorn128v3 7.67 7.68 7.72 T:norx3261v1 7.88 7.90 7.93 T:lunarkeyakv2 8.17 8.23 8.40 T:ketjeminorv2 9.04 9.05 9.06 ascon128v12 9.48 9.50 9.54 T:ascon128v11 9.48 9.50 9.53 T:ascon128v1 11.61 11.67 11.73 T:aes128otrsv2 11.70 11.78 11.87 T:aes128otrsv1 12.44 12.46 12.49 T:aes128otrpv2 12.46 12.47 12.49 T:aes128otrpv1 14.56 14.56 14.57 T:twine80n6t4clocv3 14.77 14.79 14.84 T:aes256otrsv2 14.81 14.84 15.10 T:aes256otrsv1 15.29 15.44 15.97 T:seakeyakv1 15.51 15.52 15.54 T:twine80n6t4clocv2 15.63 15.65 15.67 T:aes256otrpv1 15.64 15.65 15.68 T:aes128n12clocv1 15.65 15.68 15.69 T:aes256otrpv2 15.68 15.69 15.73 T:aes128n8clocv1 16.59 16.62 16.71 T:aes128n12silcv1 16.59 16.63 16.65 T:aes128n8silcv1 19.27 19.33 21.26 T:oceankeyakv1 19.66 19.73 19.78 T:proest256otrv1 25.55 25.56 25.57 T:ketjesrv1 27.29 27.31 27.35 T:ketjesrv2 25.98 27.89 28.07 T:riverkeyakv1 43.06 43.07 43.09 T:proest128otrv1 45.27 45.36 46.34 T:ketjejrv1 66.95 67.01 67.06 T:aeadaes128ocbtaglen64v1 67.08 67.18 67.20 T:aeadaes128ocbtaglen96v1 70.47 70.48 70.49 T:present80n6t4silcv3 78.88 78.91 78.99 T:aeadaes192ocbtaglen96v1 78.89 78.96 79.03 T:aeadaes192ocbtaglen64v1 79.11 79.24 79.85 T:deoxysneq128128v13 79.83 81.65 81.74 T:twine80n6clocv1 83.60 83.67 84.28 T:ketjejrv2 90.90 90.95 91.07 T:aeadaes256ocbtaglen64v1 90.98 91.02 91.07 T:aeadaes256ocbtaglen96v1 102.52 102.96 103.30 T:aezv1 112.05 112.18 112.39 T:colm127v1 120.11 120.72 121.47 T:deoxysneq256128v13 120.58 120.76 120.87 T:deoxyseq128128v13 122.65 122.71 122.78 T:led80n6t4silcv3 182.44 183.13 184.06 T:deoxyseq256128v13 373.44 375.50 375.69 T:acorn128 3046.70 3048.22 3051.10 T:present80n6silcv1 3049.36 3049.89 3052.26 T:present80n6t4silcv2 6851.08 6878.35 6882.03 T:led80n6silcv1 6905.39 6908.67 6923.12 T:led80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.26 0.26 0.26 aegis128l 0.28 0.28 0.29 T:tiaoxinv2 0.28 0.29 0.30 T:tiaoxinv1 0.37 0.37 0.38 T:aezv4 0.39 0.39 0.39 T:aegis128 0.39 0.39 0.40 T:aezv3 0.40 0.40 0.42 T:aezv5 0.42 0.43 0.45 aegis256 0.67 0.68 0.70 T:aes128otrpv3 0.70 0.70 0.71 T:aes128otrcv3 0.85 0.85 0.86 T:aes256otrpv3 0.89 0.90 0.90 T:aes256otrcv3 1.05 1.06 1.07 T:deoxysi128v141 1.08 1.08 1.11 T:deoxysneq128128v1 1.14 1.15 1.15 T:morus1280256v1 1.14 1.15 1.16 T:morus1280128v1 1.15 1.16 1.17 T:morus1280128v2 1.16 1.16 1.17 T:morus1280256v2 1.22 1.23 1.26 T:deoxysi256v141 1.22 1.23 1.25 T:deoxysneq256128v1 1.28 1.29 1.30 T:morus640128v1 1.30 1.30 1.31 T:morus640128v2 1.38 1.38 1.38 T:aes128otrsv3 1.43 1.44 1.48 T:colm0v1 1.46 1.47 1.48 T:deoxysii128v141 1.61 1.62 1.63 T:deoxyseq128128v1 1.68 1.69 1.71 T:deoxysii256v141 1.73 1.75 1.76 T:deoxyseq256128v1 1.82? 1.85? 4.25? T:aeadaes192ocbtaglen128v1 1.85 1.85 1.86 T:aes256otrsv3 2.10 2.10 2.13 T:aes128n12t8clocv3 2.10 2.10 2.13 T:aes128n8t8clocv2 2.10 2.13 2.13 T:aes128n12t8clocv2 2.13 2.13 2.17 T:aes128n12t8silcv3 2.13 2.13 2.16 T:aes128n12t8silcv2 2.13 2.13 2.16 T:aes128n8t8silcv2 2.63 2.64 2.67 T:aes128gcmv1 3.11 3.12 3.14 T:norx6441v3 3.11 3.12 3.16 T:norx6441v2 3.22 3.23 3.23 T:lakekeyakv2 3.41 3.42 3.44 T:seakeyakv2 3.50 3.52 3.58 T:lakekeyakv1 3.55 3.57 3.60 T:norx6441v1 3.91 3.92 3.93 T:norx6444v3 3.92 3.92 3.94 T:norx3241v3 3.92 3.93 3.94 T:norx3241v2 4.49 4.49 4.49 T:aesjambuv1 4.59 4.61 4.64 T:oceankeyakv2 4.61 4.62 4.63 T:norx3241v1 4.64 4.67 4.73 T:norx6461v3 4.68 4.70 4.73 T:norx6461v2 4.97 4.98 5.00 T:norx6444v2 5.33 5.36 5.39 T:norx6461v1 5.58 5.59 5.60 T:norx6444v1 5.72 5.73 5.76 T:riverkeyakv2 5.92 5.94 5.96 T:norx3261v2 5.96 5.98 6.00 T:norx3261v3 6.16 6.19 6.26 ascon128av12 6.43 6.45 6.46 T:ascon96v1 6.41 6.46 6.46 T:ascon128av11 6.81 6.83 6.85 T:ketjemajorv2 7.14 7.14 7.15 T:acorn128v3 7.15 7.17 7.20 T:acorn128v2 7.60 7.62 7.62 T:norx3261v1 7.90 7.92 7.94 T:ketjeminorv2 7.91 7.93 7.97 T:lunarkeyakv2 8.99 9.01 9.04 ascon128v12 9.54 9.55 9.56 T:ascon128v1 9.54 9.55 9.58 T:ascon128v11 11.65 11.69 11.79 T:aes128otrsv2 11.76 11.83 11.95 T:aes128otrsv1 12.50 12.51 12.53 T:aes128otrpv2 12.52 12.54 12.55 T:aes128otrpv1 14.50 14.51 14.52 T:twine80n6t4clocv3 14.85 14.87 14.89 T:aes256otrsv2 14.87 14.89 15.16 T:aes256otrsv1 15.56 15.56 15.58 T:twine80n6t4clocv2 15.45 15.59 16.12 T:seakeyakv1 15.68 15.71 15.73 T:aes256otrpv1 15.71 15.73 15.75 T:aes256otrpv2 16.09 16.09 16.10 T:aes128n12clocv1 16.11 16.13 16.14 T:aes128n8clocv1 16.87 16.91 16.99 T:aes128n12silcv1 16.89 16.93 16.95 T:aes128n8silcv1 19.42 19.45 21.39 T:oceankeyakv1 19.60 19.68 19.69 T:proest256otrv1 25.45 25.47 25.49 T:ketjesrv1 27.83 27.84 27.89 T:ketjesrv2 26.00 27.97 28.15 T:riverkeyakv1 43.02 43.03 43.04 T:proest128otrv1 46.52 46.57 47.51 T:ketjejrv1 69.99 70.17 70.26 T:present80n6t4silcv3 78.51 78.54 78.61 T:aeadaes128ocbtaglen64v1 78.51 78.62 78.71 T:aeadaes128ocbtaglen96v1 80.14 82.17 82.23 T:twine80n6clocv1 81.70 82.28 82.36 T:ketjejrv2 91.72 91.82 92.38 T:deoxysneq128128v13 93.00 93.09 93.15 T:aeadaes192ocbtaglen96v1 93.02 93.09 93.12 T:aeadaes192ocbtaglen64v1 102.88 103.50 103.96 T:aezv1 107.66 107.71 107.79 T:aeadaes256ocbtaglen96v1 107.67 107.71 107.80 T:aeadaes256ocbtaglen64v1 120.61 120.76 120.87 T:deoxyseq128128v13 123.39 123.48 123.52 T:led80n6t4silcv3 134.57 135.06 135.87 T:deoxysneq256128v13 134.73 135.10 135.19 T:colm127v1 182.52 183.13 183.36 T:deoxyseq256128v13 371.91 375.83 377.10 T:acorn128 3048.48 3048.62 3051.03 T:present80n6t4silcv2 3049.68 3049.78 3053.08 T:present80n6silcv1 6848.15 6879.74 6884.42 T:led80n6silcv1 6891.14 6892.95 6898.73 T:led80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.22 0.22 0.24 T:aezv4 0.24? 0.24? 0.27? T:aezv3 0.24? 0.26? 0.27? T:aezv5 0.25 0.26 0.26 aegis128l 0.28 0.28 0.28 T:tiaoxinv1 0.28 0.28 0.31 T:tiaoxinv2 0.38 0.39 0.39 T:aegis128 0.45 0.46 0.47 aegis256 0.68 0.68 0.68 T:aes128otrpv3 0.70 0.70 0.70 T:aes128otrcv3 0.84 0.85 0.85 T:aes256otrpv3 0.89 0.89 0.90 T:aes256otrcv3 1.05 1.05 1.06 T:deoxysi128v141 1.07 1.08 1.09 T:deoxysneq128128v1 1.14 1.14 1.15 T:morus1280256v1 1.14 1.14 1.15 T:morus1280128v1 1.15 1.15 1.16 T:morus1280128v2 1.15 1.16 1.16 T:morus1280256v2 1.22 1.22 1.22 T:deoxysi256v141 1.21 1.23 1.23 T:deoxysneq256128v1 1.28 1.29 1.29 T:morus640128v1 1.28 1.29 1.30 T:morus640128v2 1.38 1.38 1.38 T:aes128otrsv3 1.45 1.46 1.47 T:colm0v1 1.45 1.46 1.47 T:deoxysii128v141 1.60 1.62 1.64 T:deoxyseq128128v1 1.66 1.66 1.68 T:deoxysii256v141 1.73 1.74 1.76 T:deoxyseq256128v1 1.82 1.83 1.84 T:aeadaes192ocbtaglen128v1 1.85 1.85 1.85 T:aes256otrsv3 2.09 2.13 2.13 T:aes128n12t8clocv3 2.09 2.13 2.13 T:aes128n8t8clocv2 2.09 2.13 2.13 T:aes128n12t8clocv2 2.16 2.16 2.16 T:aes128n12t8silcv2 2.13 2.16 2.16 T:aes128n8t8silcv2 2.13 2.16 2.16 T:aes128n12t8silcv3 2.63 2.64 2.65 T:aes128gcmv1 3.10 3.11 3.12 T:norx6441v2 3.10 3.12 3.14 T:norx6441v3 3.23 3.23 3.26 T:lakekeyakv2 3.42 3.43 3.45 T:seakeyakv2 3.54 3.56 3.59 T:lakekeyakv1 3.57 3.58 3.60 T:norx6441v1 3.90 3.90 3.93 T:norx6444v3 3.91 3.92 3.93 T:norx3241v3 3.91 3.93 3.93 T:norx3241v2 4.49 4.49 4.49 T:aesjambuv1 4.60 4.61 4.64 T:oceankeyakv2 4.61 4.62 4.62 T:norx3241v1 4.63 4.64 4.66 T:norx6461v3 4.66 4.68 4.70 T:norx6461v2 4.99 5.00 5.02 T:norx6444v2 5.34 5.35 5.37 T:norx6461v1 5.60 5.61 5.62 T:norx6444v1 5.72 5.73 5.75 T:riverkeyakv2 5.94 5.95 5.95 T:norx3261v2 5.96 5.98 5.98 T:norx3261v3 6.16 6.17 6.26 ascon128av12 6.43 6.44 6.46 T:ascon96v1 6.42 6.45 6.46 T:ascon128av11 6.84 6.85 6.88 T:ketjemajorv2 7.14 7.15 7.16 T:acorn128v3 7.15 7.17 7.20 T:acorn128v2 7.60 7.61 7.62 T:norx3261v1 7.91 7.93 7.94 T:ketjeminorv2 7.92 7.94 7.97 T:lunarkeyakv2 8.99 9.01 9.03 ascon128v12 9.54 9.55 9.56 T:ascon128v11 9.55 9.56 9.57 T:ascon128v1 11.69 11.71 11.83 T:aes128otrsv2 11.78 11.86 11.97 T:aes128otrsv1 12.53 12.55 12.57 T:aes128otrpv2 12.55 12.56 12.59 T:aes128otrpv1 14.50 14.51 14.52 T:twine80n6t4clocv3 14.87 14.90 14.92 T:aes256otrsv2 14.88 14.92 15.19 T:aes256otrsv1 15.56 15.57 15.58 T:twine80n6t4clocv2 15.43 15.58 16.14 T:seakeyakv1 15.71 15.74 15.77 T:aes256otrpv1 15.74 15.76 15.80 T:aes256otrpv2 16.08 16.09 16.11 T:aes128n12clocv1 16.11 16.13 16.14 T:aes128n8clocv1 16.85 16.89 16.98 T:aes128n12silcv1 16.89 16.92 16.96 T:aes128n8silcv1 19.43 19.49 21.41 T:oceankeyakv1 19.59 19.67 19.71 T:proest256otrv1 25.47 25.49 25.52 T:ketjesrv1 27.85 27.88 27.89 T:ketjesrv2 26.03 27.99 28.19 T:riverkeyakv1 43.02 43.03 43.07 T:proest128otrv1 46.53 46.78 47.50 T:ketjejrv1 70.04 70.22 70.34 T:present80n6t4silcv3 78.51 78.54 78.58 T:aeadaes128ocbtaglen64v1 78.53 78.59 78.69 T:aeadaes128ocbtaglen96v1 81.80 81.88 82.19 T:ketjejrv2 80.14 82.20 82.23 T:twine80n6clocv1 91.85 92.44 92.55 T:deoxysneq128128v13 93.00 93.04 93.08 T:aeadaes192ocbtaglen64v1 93.01 93.06 93.09 T:aeadaes192ocbtaglen96v1 102.38 103.15 103.44 T:aezv1 107.69 107.72 107.83 T:aeadaes256ocbtaglen64v1 107.70 107.75 107.84 T:aeadaes256ocbtaglen96v1 120.68 120.76 120.86 T:deoxyseq128128v13 123.35 123.37 123.39 T:led80n6t4silcv3 134.76 135.09 135.14 T:colm127v1 135.16 135.33 136.06 T:deoxysneq256128v13 182.91 183.10 183.62 T:deoxyseq256128v13 371.81 375.76 376.86 T:acorn128 3048.49 3048.75 3049.81 T:present80n6t4silcv2 3048.44 3049.97 3053.03 T:present80n6silcv1 6846.89 6879.99 6886.87 T:led80n6silcv1 6890.43 6893.37 6895.39 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.91? 1.01? 1.18? T:aegis128 1.09? 1.16? 1.38? aegis128l 1.31? 1.35? 1.94? T:aezv5 1.38? 1.41? 1.58? aegis256 1.39? 1.44? 2.02? T:aezv4 1.41? 1.45? 1.91? T:aezv3 1.38? 1.55? 1.83? T:tiaoxinv1 1.55? 1.68? 2.06? T:tiaoxinv2 2.24? 2.28? 2.52? T:aes128otrpv3 2.42 2.47 2.48 T:aes128otrsv3 2.70 2.75 2.80 T:aes128n12t8clocv3 2.75 2.78 3.05 T:aes256otrpv3 2.82 2.88 2.95 T:aes128n12t8clocv2 2.77 2.92 2.97 T:aes128n8t8clocv2 3.05 3.11 3.16 T:aes128otrcv3 2.93? 3.17? 3.45? T:colm0v1 3.16 3.18 3.20 T:aes256otrsv3 3.49 3.67 3.69 T:aes128n12t8silcv2 3.54 3.68 3.69 T:aes128n12t8silcv3 3.56 3.68 3.68 T:aes128n8t8silcv2 3.76 3.80 4.01 T:deoxysi128v141 3.84 3.89 3.91 T:aes256otrcv3 3.84 4.02 4.15 T:deoxysneq128128v1 4.35 4.46 4.69 T:morus640128v1 4.64 4.74 4.89 T:morus640128v2 4.72 4.80 5.10 T:deoxysneq256128v1 4.92 5.06 5.21 T:deoxysi256v141 4.98 5.09 5.14 T:deoxyseq128128v1 5.43 5.55 5.80 T:deoxysii128v141 5.66 5.68 5.72 T:aesjambuv1 5.74 5.77 6.19 T:deoxyseq256128v1 6.10 6.17 6.30 T:morus1280128v1 6.26 6.36 6.66 T:deoxysii256v141 6.30 6.36 6.66 T:morus1280256v2 6.24 6.38 6.64 T:morus1280256v1 6.45 6.75 7.02 T:morus1280128v2 9.57 9.66 9.75 T:norx3241v1 9.62 9.71 10.27 T:norx3241v2 9.64 9.73 10.06 T:norx3241v3 9.62 9.77 9.98 T:ascon96v1 9.69 9.91 10.11 T:ascon128av11 9.73 9.98 10.46 ascon128av12 10.02 10.11 10.24 T:norx6441v1 10.32 10.46 10.53 T:norx6441v2 10.22? 10.80? 65.89? T:aeadaes192ocbtaglen128v1 11.63 11.69 11.82 T:norx6441v3 11.98 12.27 12.51 ascon128v12 12.47 12.59 12.93 T:ascon128v11 12.49 12.63 13.06 T:ascon128v1 12.88 13.02 13.16 T:aes128gcmv1 13.17 13.39 13.84 T:lakekeyakv1 13.57 13.65 14.16 T:riverkeyakv2 14.17 14.39 15.10 T:lakekeyakv2 14.50 14.65 14.92 T:norx3261v2 14.67 14.75 14.99 T:norx3261v3 14.86 14.98 15.32 T:norx6461v1 15.25 15.43 15.50 T:norx6461v2 15.78 15.93 16.04 T:norx3261v1 16.57 16.83 16.98 T:norx6461v3 18.79 19.02 19.73 T:aes128otrsv1 19.09 19.41 20.27 T:aes128otrpv2 19.09 19.50 19.65 T:aes128otrsv2 19.19 19.67 19.98 T:aes128otrpv1 19.89 19.95 20.02 T:twine80n6t4clocv3 20.13 20.39 21.40 T:aes128n12clocv1 20.68 20.96 21.23 T:aes128n8clocv1 22.62 22.66 22.70 T:twine80n6t4clocv2 23.31 24.03 24.45 T:aes128n12silcv1 23.91 24.04 24.21 T:norx6444v3 23.70 24.07 24.77 T:aes256otrsv1 23.38 24.15 24.64 T:aes128n8silcv1 24.26 24.51 25.08 T:aes256otrsv2 24.55 24.78 25.47 T:aes256otrpv2 24.57 24.91 25.44 T:aes256otrpv1 28.35 28.64 29.19 T:acorn128v2 29.20 29.27 29.74 T:acorn128v3 29.74 30.07 30.28 T:ketjeminorv2 31.32 31.42 32.00 T:seakeyakv2 37.30 37.64 37.72 T:norx6444v2 40.43 40.75 40.85 T:ketjesrv1 41.52 41.61 41.86 T:ketjemajorv2 42.92 43.09 43.27 T:norx6444v1 47.04 47.22 47.41 T:ketjesrv2 51.21 51.46 52.57 T:oceankeyakv2 50.01 51.71 52.30 T:riverkeyakv1 56.87 57.29 57.41 T:proest256otrv1 60.16 60.71 61.70 T:ketjejrv1 83.95 84.23 84.62 T:proest128otrv1 87.48 87.57 87.69 T:present80n6t4silcv3 87.53 87.96 88.69 T:twine80n6clocv1 89.59 89.85 90.24 T:deoxysneq128128v13 104.41 104.90 106.47 T:aeadaes128ocbtaglen64v1 104.66 105.34 107.01 T:aeadaes128ocbtaglen96v1 110.18 110.77 111.42 T:aezv1 110.94 111.09 111.44 T:ketjejrv2 116.84 117.16 118.12 T:seakeyakv1 121.00 121.58 122.55 T:aeadaes192ocbtaglen96v1 121.35 122.24 123.32 T:aeadaes192ocbtaglen64v1 128.70 129.22 129.70 T:lunarkeyakv2 135.16 137.06 137.57 T:deoxysneq256128v13 140.73 141.88 142.38 T:aeadaes256ocbtaglen64v1 141.17 142.27 143.95 T:aeadaes256ocbtaglen96v1 145.20 145.41 145.87 T:led80n6t4silcv3 149.80 150.09 150.58 T:deoxyseq128128v13 160.59 161.20 162.10 T:colm127v1 211.52 212.21 230.81 T:oceankeyakv1 226.82 227.45 228.16 T:deoxyseq256128v13 1326.27 1332.74 1332.88 T:acorn128 3412.26 3412.87 3415.23 T:present80n6t4silcv2 3411.87 3413.34 3415.25 T:present80n6silcv1 7524.38 7572.37 7692.11 T:led80n6t4silcv2 7569.78 7602.85 7645.72 T:led80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.09? 1.16? 1.44? T:aegis128 1.15? 1.27? 1.66? aegis128l 1.32 1.36 1.41 T:aezv5 1.41? 1.44? 1.58? T:aezv3 1.38? 1.45? 2.30? T:aezv4 1.43? 1.54? 2.09? T:tiaoxinv2 1.46? 1.62? 1.88? T:tiaoxinv1 1.50? 1.64? 2.17? aegis256 2.27? 2.29? 2.55? T:aes128otrpv3 2.55 2.60 2.61 T:aes128otrsv3 2.79 2.82 3.08 T:aes256otrpv3 2.88 2.91 2.93 T:aes128n12t8clocv3 2.83 2.95 2.97 T:aes128n8t8clocv2 2.88? 2.97? 3.62? T:aes128n12t8clocv2 3.09 3.14 3.16 T:aes128otrcv3 3.37 3.38 3.39 T:aes256otrsv3 3.36? 3.52? 4.26? T:colm0v1 4.16 4.16 4.18 T:aes256otrcv3 3.70? 4.37? 4.50? T:aes128n12t8silcv2 3.70? 4.38? 4.44? T:aes128n12t8silcv3 3.72? 4.44? 4.46? T:aes128n8t8silcv2 4.65 4.73 4.86 T:morus640128v1 4.98 5.04 5.20 T:morus640128v2 4.98 5.05 5.25 T:deoxysi128v141 5.06 5.12 5.23 T:deoxysneq128128v1 5.65 5.78 5.80 T:aesjambuv1 5.88? 5.95? 6.71? T:deoxysneq256128v1 6.08 6.12 6.23 T:deoxysii128v141 6.34 6.42 6.68 T:deoxyseq128128v1 6.34 6.47 6.64 T:morus1280128v1 6.39 6.54 6.71 T:morus1280256v1 6.59 6.72 6.91 T:morus1280128v2 6.63 6.74 7.03 T:morus1280256v2 6.95 6.99 7.05 T:deoxysi256v141 7.16 7.27 7.77 T:deoxyseq256128v1 7.53 7.70 7.79 T:deoxysii256v141 9.53 9.60 10.09 ascon128av12 9.72 9.78 10.02 T:ascon96v1 9.62 9.81 10.41 T:ascon128av11 9.77 9.85 9.91 T:norx3241v1 9.83 9.91 10.33 T:norx3241v2 9.82 9.91 10.49 T:norx3241v3 9.95 10.02 10.08 T:norx6441v1 10.62 10.77 10.83 T:norx6441v2 10.73? 10.85? 17.23? T:aeadaes192ocbtaglen128v1 11.63 11.70 11.78 T:norx6441v3 12.05 12.23 12.53 ascon128v12 12.56 12.68 13.19 T:ascon128v1 12.59 12.70 13.04 T:aes128gcmv1 12.56 12.78 13.17 T:ascon128v11 13.16 13.45 13.93 T:lakekeyakv1 13.67 13.94 14.16 T:riverkeyakv2 14.22 14.41 14.88 T:lakekeyakv2 14.72 14.77 14.89 T:norx3261v2 14.76 14.87 15.01 T:norx3261v3 14.90 15.00 15.10 T:norx6461v1 15.39 15.49 15.65 T:norx6461v2 15.95 16.02 16.05 T:norx3261v1 16.20 16.45 16.52 T:norx6461v3 18.81 19.30 19.96 T:aes128otrsv1 19.13 19.40 19.91 T:aes128otrpv2 19.17 19.51 19.86 T:aes128otrsv2 19.23 19.59 20.24 T:aes128otrpv1 19.93 19.99 20.05 T:twine80n6t4clocv3 20.85 21.37 22.20 T:aes128n12clocv1 21.27 21.61 22.23 T:aes128n8clocv1 22.77 22.85 23.38 T:twine80n6t4clocv2 23.67 23.79 23.98 T:norx6444v3 23.83 24.19 25.04 T:aes128n8silcv1 24.02 24.19 24.86 T:aes256otrsv1 23.86 24.25 25.16 T:aes128n12silcv1 24.37 24.80 25.18 T:aes256otrsv2 24.64 24.86 25.80 T:aes256otrpv2 24.81 25.31 25.70 T:aes256otrpv1 28.89 29.05 29.35 T:acorn128v3 28.94 29.30 29.65 T:acorn128v2 29.65 29.82 30.34 T:ketjeminorv2 31.64 32.05 32.57 T:seakeyakv2 37.74 38.19 38.34 T:norx6444v2 40.59 40.99 41.34 T:ketjesrv1 41.48 41.84 42.41 T:ketjemajorv2 43.16 43.34 43.52 T:norx6444v1 47.59 47.95 48.26 T:ketjesrv2 50.27 51.50 52.33 T:riverkeyakv1 51.34 51.77 52.44 T:oceankeyakv2 57.60 57.96 58.35 T:proest256otrv1 60.98 61.77 63.05 T:ketjejrv1 84.77 86.97 89.52 T:proest128otrv1 87.14 87.48 87.79 T:present80n6t4silcv3 88.05 88.52 89.17 T:twine80n6clocv1 102.30 102.66 103.20 T:deoxysneq128128v13 109.41 110.09 114.30 T:ketjejrv2 112.78 112.96 113.33 T:aezv1 117.39 118.48 118.80 T:seakeyakv1 124.91 125.12 125.45 T:aeadaes128ocbtaglen64v1 125.51 126.65 128.86 T:aeadaes128ocbtaglen96v1 129.04 129.24 130.08 T:lunarkeyakv2 145.61 146.06 146.62 T:aeadaes192ocbtaglen96v1 146.23 146.43 146.61 T:led80n6t4silcv3 146.30 146.55 146.96 T:aeadaes192ocbtaglen64v1 149.62 150.13 150.40 T:deoxyseq128128v13 149.70 150.50 151.87 T:deoxysneq256128v13 170.66 171.02 171.67 T:aeadaes256ocbtaglen64v1 170.53 171.47 174.35 T:aeadaes256ocbtaglen96v1 185.41 186.49 187.46 T:colm127v1 211.79 213.30 232.61 T:oceankeyakv1 226.45 226.92 229.16 T:deoxyseq256128v13 1325.12 1333.96 1345.85 T:acorn128 3412.06 3412.61 3414.55 T:present80n6t4silcv2 3413.34 3415.92 3418.30 T:present80n6silcv1 7431.86 7453.58 7462.27 T:led80n6t4silcv2 7508.12 7558.84 7584.12 T:led80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.06? 1.10? 1.18? T:aegis128 1.10? 1.12? 1.68? T:aezv4 1.06? 1.12? 1.67? T:aezv5 1.12? 1.20? 1.82? T:aezv3 1.12? 1.22? 1.27? aegis128l 1.42? 1.50? 1.67? T:tiaoxinv1 1.45? 1.55? 1.68? T:tiaoxinv2 1.52? 1.59? 2.16? aegis256 2.27 2.29 2.50 T:aes128otrpv3 2.54 2.59 2.62 T:aes128otrsv3 2.68 2.72 2.74 T:aes128n12t8clocv3 2.70? 2.73? 3.55? T:aes128n8t8clocv2 2.77 2.79 2.81 T:aes256otrpv3 3.16 3.16 3.20 T:aes128otrcv3 3.36 3.38 3.38 T:aes256otrsv3 2.71? 3.60? 3.64? T:aes128n12t8clocv2 3.43? 4.06? 4.12? T:colm0v1 4.15 4.16 4.17 T:aes256otrcv3 3.62? 4.33? 4.39? T:aes128n8t8silcv2 3.62? 4.37? 4.44? T:aes128n12t8silcv3 3.63? 4.37? 4.39? T:aes128n12t8silcv2 4.55 4.63 4.68 T:morus640128v1 4.79 4.86 5.20 T:deoxysneq128128v1 4.82 4.88 4.92 T:morus640128v2 4.95? 5.05? 5.52? T:deoxysi128v141 5.62? 5.70? 6.33? T:deoxysneq256128v1 5.79 5.80 5.83 T:aesjambuv1 6.05 6.13 6.19 T:deoxysii128v141 6.16 6.20 6.37 T:morus1280256v1 6.15 6.21 6.26 T:morus1280128v1 6.34 6.40 6.77 T:deoxyseq128128v1 6.52 6.57 6.62 T:morus1280128v2 6.52 6.57 6.63 T:morus1280256v2 7.00 7.05 7.42 T:deoxysi256v141 7.21 7.26 7.73 T:deoxyseq256128v1 7.53 7.58 7.65 T:deoxysii256v141 9.48 9.59 9.81 ascon128av12 9.73 9.74 9.84 T:norx3241v1 9.60 9.79 9.91 T:ascon128av11 9.72 9.81 10.15 T:ascon96v1 9.81 9.86 9.94 T:norx3241v3 9.80 9.87 9.98 T:norx3241v2 9.88 9.97 10.17 T:norx6441v1 10.55 10.70 10.87 T:norx6441v2 10.68? 10.76? 65.66? T:aeadaes192ocbtaglen128v1 11.60 11.74 11.77 T:norx6441v3 12.04 12.16 12.18 ascon128v12 12.62 12.66 13.03 T:ascon128v1 12.55 12.68 12.93 T:ascon128v11 12.63 12.70 12.77 T:aes128gcmv1 13.38 13.45 13.60 T:lakekeyakv1 13.77 13.80 14.04 T:riverkeyakv2 14.27 14.47 14.54 T:lakekeyakv2 14.61 14.73 14.74 T:norx3261v2 14.74 14.84 14.92 T:norx3261v3 14.80 14.96 15.09 T:norx6461v1 15.42 15.71 15.75 T:norx6461v2 15.94 16.00 16.05 T:norx3261v1 16.20 16.35 16.50 T:norx6461v3 18.97 19.12 19.60 T:aes128otrsv1 19.25 19.40 19.82 T:aes128otrpv2 19.21 19.46 19.84 T:aes128otrsv2 19.21 19.60 20.19 T:aes128otrpv1 19.81 19.98 20.28 T:twine80n6t4clocv3 20.62 20.98 21.37 T:aes128n12clocv1 21.01 21.37 21.73 T:aes128n8clocv1 22.68 23.05 23.10 T:twine80n6t4clocv2 23.71 23.82 23.98 T:norx6444v3 23.96 24.09 24.45 T:aes128n12silcv1 23.76 24.12 24.53 T:aes256otrsv1 24.05 24.22 24.47 T:aes128n8silcv1 24.38 24.55 25.05 T:aes256otrsv2 24.56 24.80 25.20 T:aes256otrpv2 24.78 25.06 25.22 T:aes256otrpv1 28.73 28.92 29.20 T:acorn128v2 28.80 29.09 29.23 T:acorn128v3 29.61 29.76 30.08 T:ketjeminorv2 31.48 31.52 31.79 T:seakeyakv2 37.81 38.12 38.34 T:norx6444v2 40.40 40.93 41.20 T:ketjesrv1 41.47 41.97 42.10 T:ketjemajorv2 43.16 43.27 43.43 T:norx6444v1 47.57 48.02 48.19 T:ketjesrv2 49.91 51.58 51.84 T:riverkeyakv1 51.41 51.62 52.05 T:oceankeyakv2 55.92 56.36 56.62 T:proest256otrv1 61.45 62.01 62.92 T:ketjejrv1 84.52 84.59 84.69 T:proest128otrv1 87.12 87.41 87.63 T:present80n6t4silcv3 88.09 88.37 88.96 T:twine80n6clocv1 102.34 102.65 102.98 T:deoxysneq128128v13 109.46 109.71 114.54 T:ketjejrv2 112.74 112.93 113.45 T:aezv1 117.41 117.72 118.05 T:seakeyakv1 124.70 124.97 125.35 T:aeadaes128ocbtaglen64v1 125.16 125.98 128.52 T:aeadaes128ocbtaglen96v1 129.21 129.49 129.59 T:lunarkeyakv2 146.20 146.37 146.68 T:led80n6t4silcv3 146.05 146.38 147.06 T:aeadaes192ocbtaglen64v1 145.41 146.58 147.08 T:aeadaes192ocbtaglen96v1 149.25 149.59 150.21 T:deoxyseq128128v13 149.40 149.92 151.22 T:deoxysneq256128v13 170.18 170.66 171.02 T:aeadaes256ocbtaglen64v1 170.62 171.18 171.70 T:aeadaes256ocbtaglen96v1 184.53 185.46 186.30 T:colm127v1 211.19 211.43 232.20 T:oceankeyakv1 226.95 227.73 228.68 T:deoxyseq256128v13 1325.18 1334.17 1345.76 T:acorn128 3411.98 3412.32 3413.46 T:present80n6t4silcv2 3412.94 3414.26 3416.20 T:present80n6silcv1 7431.84 7460.80 7470.82 T:led80n6t4silcv2 7523.79 7547.41 7585.47 T:led80n6silcv1