VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20241022

[Page version: 20241215 22:59:43]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.84? 6.09? 6.99? T:morus1280256v2 2.92? 6.17? 7.11? T:morus1280256v1 6.16 6.20 6.28 T:morus1280128v2 7.17 7.17 7.23 T:morus1280128v1 8.21 8.23 8.24 T:norx6441v3 6.76? 8.24? 14.69? T:norx6441v2 8.31 8.34 8.36 T:norx6444v3 8.33 8.34 8.35 T:norx6444v2 4.47? 8.36? 9.11? T:morus640128v1 4.42? 8.37? 9.14? T:morus640128v2 8.92? 10.31? 17.53? T:norx6441v1 6.48? 10.45? 20.76? T:tiaoxinv1 10.64 10.67 10.72 T:norx6444v1 10.43? 12.52? 22.23? T:norx6461v2 -10.44? 13.42? 31.91? T:lunarkeyakv2 13.62? 15.03? 25.47? T:norx3261v3 13.06? 15.13? 26.15? T:norx6461v1 9.13? 16.18? 17.18? T:norx3241v2 9.16? 16.26? 17.25? T:norx3241v3 15.45? 16.39? 27.19? T:ascon96v1 15.63? 16.55? 27.45? T:ascon128av11 6.96? 17.54? 21.56? T:tiaoxinv2 9.74? 18.33? 20.15? T:lakekeyakv1 19.12 19.20 19.48 T:lakekeyakv2 18.54 19.29 19.60 T:oceankeyakv2 10.02? 19.39? 21.50? T:norx6461v3 19.40 19.41 19.42 T:aegis256 19.24 19.48 19.63 T:seakeyakv2 11.02? 19.51? 20.48? T:norx3241v1 11.03? 22.07? 24.87? T:aegis128l 13.62? 24.06? 25.37? T:norx3261v2 24.01? 25.31? 41.80? T:ascon128v1 24.02? 25.31? 41.80? T:ascon128v11 24.46? 26.07? 42.57? ascon128v12 15.97? 27.12? 28.07? ascon128av12 24.74? 28.50? 49.25? T:ketjeminorv2 16.35? 28.79? 30.38? T:norx3261v1 16.31? 29.84? 32.11? T:aegis128 28.55? 31.22? 52.48? T:aes128otrcv3 14.70? 32.90? 42.08? T:ketjemajorv2 35.46? 38.79? 65.08? T:aes128otrpv1 24.33? 41.98? 43.84? T:riverkeyakv2 30.96? 48.12? 94.22? T:seakeyakv1 49.92 51.40 52.02 T:aes256gcmv1 53.68 53.71 53.76 T:aes128n8t8clocv2 53.79 53.91 54.02 T:aes128n8clocv1 54.07 54.12 54.16 T:proest256otrv1 48.31? 57.72? 99.69? T:aeadaes128ocbtaglen128v1 54.83? 58.06? 96.11? T:aes128n8t8silcv2 55.23? 58.40? 96.11? T:aes128n12t8silcv2 34.52? 60.22? 63.47? T:aes128otrsv1 35.81? 60.56? 63.77? T:aes128otrsv3 16.68? 60.86? 85.85? T:oceankeyakv1 61.01 61.03 61.05 T:aes128n12t8silcv3 61.80 61.84 61.97 T:aes128otrpv2 36.32? 63.18? 66.44? T:aes128otrsv2 63.19 63.29 65.52 T:aes128n8silcv1 63.91 64.62 65.35 T:aes128gcmv1 37.36? 65.41? 69.03? T:aes256otrcv3 65.94 66.22 66.32 T:aes128otrpv3 39.81? 68.61? 71.69? T:deoxysi128v141 44.48? 77.62? 81.61? T:aes256otrpv3 46.21? 78.18? 82.80? T:deoxysi256v141 44.95? 78.39? 82.47? T:aes256otrsv3 73.88? 78.89? 135.31? T:aeadaes256ocbtaglen128v1 79.16 79.28 79.36 T:aes256otrsv1 45.72? 79.50? 83.63? T:aes256otrpv1 45.63? 79.56? 83.68? T:aes256otrpv2 47.27? 80.00? 82.74? T:aesjambuv1 81.17 81.19 81.23 T:aes256otrsv2 87.48 87.56 87.64 T:aes128n12clocv1 52.03? 87.77? 90.60? T:aes128n12t8clocv2 52.01? 87.88? 90.87? T:aes128n12t8clocv3 101.74 102.01 102.39 T:aes128n12silcv1 101.07? 107.86? 179.45? T:ketjesrv1 64.83? 110.02? 113.92? T:twine80n6t4clocv2 110.56 110.70 110.75 T:ketjesrv2 67.96? 115.02? 118.96? T:twine80n6t4clocv3 139.64 139.69 139.78 T:proest128otrv1 146.98 147.60 150.12 T:riverkeyakv1 140.42? 149.71? 244.72? T:ketjejrv1 89.21? 151.32? 157.13? T:deoxysii128v141 160.67 161.28 161.46 T:aezv4 176.95? 186.48? 307.03? T:aezv5 123.62? 205.52? 221.95? T:deoxysii256v141 229.94? 240.81? 393.96? T:deoxysneq128128v13 382.11 382.16 382.32 T:deoxysneq256128v1 375.76? 383.15? 482.59? T:present80n6t4silcv3 383.83 383.88 384.41 T:deoxysneq128128v1 421.02 421.14 421.26 T:ketjejrv2 480.89 481.92 482.26 T:deoxyseq128128v13 546.25? 574.65? 945.21? T:led80n6t4silcv3 374.08? 611.30? 630.87? T:deoxysneq256128v13 421.03? 710.09? 734.28? T:aezv3 432.62? 720.58? 742.71? T:twine80n6clocv1 597.88? 763.83? 783.76? T:aezv1 783.30 786.41 791.82 T:deoxyseq128128v1 733.08? 1220.66? 1265.36? T:deoxyseq256128v1 739.40? 1224.94? 1264.06? T:deoxyseq256128v13 3685.19 3694.15 3700.39 T:acorn128v3 3182.89? 5924.27? 6506.55? T:acorn128 3194.21? 6062.08? 6656.54? T:acorn128v2 12113.37 12124.49 12673.70 T:present80n6t4silcv2 12409.37 12422.04 12988.41 T:present80n6silcv1 13973.92 14025.68 14038.25 T:led80n6silcv1 14580.40? 23942.79? 23964.90? T:led80n6t4silcv2 43116.40? 43133.21? 74970.24? aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 6.22 6.26 6.28 T:morus1280128v2 2.97? 6.30? 7.21? T:morus1280256v1 2.99? 6.38? 7.31? T:morus1280256v2 6.67 6.67 6.74 T:morus1280128v1 6.78? 8.28? 14.76? T:norx6441v2 8.26 8.30 8.31 T:norx6441v3 8.29 8.33 8.37 T:norx6444v3 8.30 8.35 8.37 T:norx6444v2 4.47? 8.50? 9.30? T:morus640128v2 4.63? 8.64? 9.38? T:morus640128v1 8.77? 10.14? 17.66? T:norx6441v1 10.59 10.65 10.68 T:norx6444v1 7.82? 11.85? 22.93? T:tiaoxinv1 10.38? 12.59? 22.39? T:norx6461v2 -10.23? 12.93? 30.93? T:lunarkeyakv2 12.61? 14.58? 25.24? T:norx6461v1 13.62? 15.03? 25.48? T:norx3261v3 9.31? 16.22? 17.09? T:norx3241v2 9.19? 16.27? 17.25? T:norx3241v3 15.40? 16.32? 27.07? T:ascon96v1 15.53? 16.48? 27.32? T:ascon128av11 9.64? 17.84? 19.54? T:lakekeyakv1 18.41 18.47 18.62 T:lakekeyakv2 18.66 18.82 18.90 T:seakeyakv2 18.40 18.92 19.37 T:oceankeyakv2 7.79? 18.96? 23.05? T:tiaoxinv2 10.04? 19.42? 21.52? T:norx6461v3 19.53 19.56 19.60 T:aegis256 11.13? 19.71? 20.75? T:norx3241v1 10.90? 21.88? 24.69? T:aegis128l 13.63? 24.06? 25.47? T:norx3261v2 23.73? 24.99? 41.28? T:ascon128v1 23.70? 25.11? 41.29? T:ascon128v11 24.17? 25.48? 42.06? ascon128v12 15.91? 27.00? 27.95? ascon128av12 24.47? 28.06? 48.46? T:ketjeminorv2 16.46? 28.98? 30.58? T:norx3261v1 17.40? 29.58? 31.92? T:aegis128 28.35? 31.01? 52.20? T:aes128otrcv3 13.94? 31.66? 37.50? T:ketjemajorv2 35.76? 39.07? 65.70? T:aes128otrpv1 25.35? 42.73? 44.71? T:riverkeyakv2 30.98? 48.16? 94.23? T:seakeyakv1 50.96 51.44 53.24 T:aes256gcmv1 53.77 53.80 53.82 T:proest256otrv1 56.58 56.62 56.70 T:aes128n8t8clocv2 57.42 57.53 57.64 T:aes128n8clocv1 55.09? 58.10? 95.88? T:aes128n12t8silcv2 54.98? 58.12? 95.85? T:aes128n8t8silcv2 34.76? 60.67? 63.86? T:aes128otrsv1 60.74 60.89 60.99 T:aes128otrpv2 13.28? 61.01? 85.92? T:oceankeyakv1 62.25 62.27 62.31 T:aes128n12t8silcv3 35.98? 62.68? 65.94? T:aes128otrsv3 62.62 63.01 66.24 T:aes128n8silcv1 37.15? 65.07? 68.74? T:aes256otrcv3 64.74 65.07 65.62 T:aes128gcmv1 38.08? 66.13? 69.41? T:aes128otrsv2 67.55 67.67 67.75 T:aes128otrpv3 64.44? 76.45? 131.96? T:aeadaes128ocbtaglen128v1 44.85? 77.54? 81.44? T:deoxysi128v141 45.08? 78.57? 82.58? T:aes256otrpv3 45.14? 78.75? 82.91? T:aes256otrpv2 46.11? 80.32? 84.47? T:aes256otrpv1 46.20? 80.44? 84.54? T:aes256otrsv3 47.72? 80.76? 83.53? T:aesjambuv1 82.18 82.26 82.37 T:aes256otrsv1 84.36 84.46 84.55 T:aes256otrsv2 50.45? 89.17? 94.53? T:deoxysi256v141 57.68? 97.13? 100.30? T:aes128n12t8clocv2 58.08? 97.89? 101.09? T:aes128n12t8clocv3 100.68 100.80 100.89 T:aes128n12clocv1 101.55 101.85 102.02 T:aes128n12silcv1 100.32? 107.91? 182.00? T:aeadaes256ocbtaglen128v1 101.58? 108.43? 180.45? T:ketjesrv1 65.54? 111.25? 115.19? T:twine80n6t4clocv2 67.34? 114.01? 117.95? T:twine80n6t4clocv3 116.94 116.95 117.01 T:ketjesrv2 139.78 139.83 139.86 T:proest128otrv1 148.94 149.17 153.67 T:riverkeyakv1 89.93? 149.64? 155.15? T:deoxysii128v141 143.43? 151.26? 249.85? T:ketjejrv1 160.16 160.55 160.81 T:aezv4 176.69? 185.69? 306.69? T:aezv5 118.88? 204.70? 219.67? T:deoxysii256v141 298.52? 315.10? 514.12? T:deoxysneq128128v13 377.04? 385.89? 504.81? T:present80n6t4silcv3 427.18 428.95 429.34 T:ketjejrv2 481.28 481.86 483.13 T:deoxyseq128128v13 484.82 485.62 488.46 T:deoxysneq256128v1 499.68 500.63 504.94 T:deoxysneq128128v1 548.50? 577.57? 949.08? T:led80n6t4silcv3 425.13? 710.10? 739.31? T:aezv3 433.64? 723.08? 741.12? T:twine80n6clocv1 465.09? 763.85? 783.08? T:aezv1 471.42? 777.41? 801.22? T:deoxysneq256128v13 1000.95 1011.85 1013.86 T:deoxyseq128128v1 737.93? 1225.14? 1266.17? T:deoxyseq256128v13 930.96? 1552.17? 1603.94? T:deoxyseq256128v1 3648.74 3654.46 3658.51 T:acorn128v3 3090.79? 5902.46? 6493.29? T:acorn128v2 3166.30? 6012.40? 6594.92? T:acorn128 12111.87 12123.20 12678.33 T:present80n6t4silcv2 12409.38 12419.56 12979.56 T:present80n6silcv1 14032.46 14041.13 14051.98 T:led80n6silcv1 14610.80? 23958.80? 23983.11? T:led80n6t4silcv2 43122.65? 43143.00? 74976.08? aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 6.29 6.31 6.32 T:morus1280128v2 3.01? 6.32? 7.24? T:morus1280256v1 3.02? 6.38? 7.34? T:morus1280256v2 6.70 6.71 6.75 T:morus1280128v1 4.50? 8.52? 9.33? T:morus640128v2 7.04? 8.55? 15.19? T:norx6441v2 8.53 8.56 8.60 T:norx6441v3 8.58 8.59 8.63 T:norx6444v2 8.57 8.60 8.62 T:norx6444v3 4.63? 8.64? 9.42? T:morus640128v1 9.02? 10.43? 18.14? T:norx6441v1 10.89 10.95 10.96 T:norx6444v1 7.85? 11.89? 22.93? T:tiaoxinv1 10.64? 12.88? 22.84? T:norx6461v2 -10.60? 13.49? 31.58? T:lunarkeyakv2 12.88? 14.83? 25.69? T:norx6461v1 13.62? 15.04? 25.48? T:norx3261v3 9.23? 16.22? 17.20? T:norx3241v2 9.19? 16.27? 17.25? T:norx3241v3 15.40? 16.34? 27.08? T:ascon96v1 15.54? 16.48? 27.32? T:ascon128av11 9.96? 18.45? 20.00? T:lakekeyakv1 7.82? 18.96? 23.04? T:tiaoxinv2 18.95 18.99 19.02 T:lakekeyakv2 18.77 19.22 19.71 T:oceankeyakv2 19.15 19.22 19.27 T:seakeyakv2 11.22? 19.72? 20.83? T:norx3241v1 19.79 19.82 19.86 T:aegis256 10.31? 19.90? 22.07? T:norx6461v3 11.20? 22.38? 25.19? T:aegis128l 13.63? 24.06? 25.47? T:norx3261v2 23.72? 25.00? 41.28? T:ascon128v1 23.72? 25.02? 41.29? T:ascon128v11 24.17? 25.47? 42.07? ascon128v12 15.91? 27.02? 27.97? ascon128av12 24.71? 28.32? 48.91? T:ketjeminorv2 16.53? 29.02? 30.63? T:norx3261v1 16.18? 29.58? 31.91? T:aegis128 28.34? 31.03? 52.20? T:aes128otrcv3 14.19? 32.06? 37.90? T:ketjemajorv2 36.00? 39.32? 66.15? T:aes128otrpv1 27.74? 43.16? 45.25? T:riverkeyakv2 31.22? 48.19? 94.50? T:seakeyakv1 50.61 51.22 51.62 T:aes256gcmv1 53.75 53.80 53.80 T:proest256otrv1 56.59 56.65 56.69 T:aes128n8t8clocv2 57.42 57.54 57.63 T:aes128n8clocv1 55.11? 58.10? 95.88? T:aes128n12t8silcv2 54.96? 58.13? 95.87? T:aes128n8t8silcv2 36.62? 61.07? 64.35? T:aes128otrsv1 61.27 61.30 61.36 T:aes128otrpv2 13.33? 61.34? 83.19? T:oceankeyakv1 62.26 62.28 62.30 T:aes128n12t8silcv3 62.63 62.67 62.70 T:aes128n8silcv1 36.25? 63.15? 66.39? T:aes128otrsv3 64.72 64.95 65.24 T:aes128gcmv1 37.17? 65.06? 68.75? T:aes256otrcv3 38.32? 66.56? 69.83? T:aes128otrsv2 67.99 68.05 68.17 T:aes128otrpv3 45.15? 77.97? 81.63? T:deoxysi128v141 67.67? 78.06? 133.12? T:aeadaes128ocbtaglen128v1 45.36? 79.02? 83.00? T:aes256otrpv3 45.38? 79.20? 83.30? T:aes256otrpv2 46.35? 80.75? 84.91? T:aes256otrpv1 47.75? 80.78? 83.55? T:aesjambuv1 46.43? 80.88? 85.02? T:aes256otrsv3 82.61 82.67 82.78 T:aes256otrsv1 84.68 84.83 84.94 T:aes256otrsv2 50.68? 89.57? 95.10? T:deoxysi256v141 57.67? 97.17? 100.34? T:aes128n12t8clocv2 59.56? 97.92? 101.09? T:aes128n12t8clocv3 100.70 100.75 100.80 T:aes128n12clocv1 101.49 101.82 101.90 T:aes128n12silcv1 94.68? 107.45? 182.74? T:aeadaes256ocbtaglen128v1 101.55? 108.66? 180.89? T:ketjesrv1 67.22? 111.26? 115.22? T:twine80n6t4clocv2 67.36? 114.01? 117.93? T:twine80n6t4clocv3 117.13 117.22 117.24 T:ketjesrv2 139.77 139.83 139.91 T:proest128otrv1 149.45 150.05 156.28 T:riverkeyakv1 88.30? 150.06? 155.57? T:deoxysii128v141 143.68? 151.53? 250.29? T:ketjejrv1 159.90 160.23 160.64 T:aezv4 176.41? 186.05? 306.33? T:aezv5 119.26? 205.18? 224.91? T:deoxysii256v141 298.64? 315.05? 514.46? T:deoxysneq128128v13 377.05? 385.97? 504.79? T:present80n6t4silcv3 427.45 427.51 427.72 T:ketjejrv2 466.01? 473.84? 2014.44? aes256gcmv1 481.31 482.12 483.45 T:deoxyseq128128v13 484.85 485.61 488.30 T:deoxysneq256128v1 499.64 500.65 504.61 T:deoxysneq128128v1 548.53? 576.89? 949.06? T:led80n6t4silcv3 424.25? 709.64? 738.58? T:aezv3 434.22? 723.00? 743.17? T:twine80n6clocv1 462.63? 763.31? 782.98? T:aezv1 471.62? 777.94? 801.72? T:deoxysneq256128v13 1000.95 1011.69 1015.63 T:deoxyseq128128v1 738.37? 1230.17? 1270.40? T:deoxyseq256128v13 930.82? 1552.20? 1605.63? T:deoxyseq256128v1 3648.92 3655.59 3660.43 T:acorn128v3 3090.32? 5902.14? 6494.50? T:acorn128v2 3164.28? 6009.91? 6597.40? T:acorn128 12112.44 12124.08 12675.23 T:present80n6t4silcv2 12409.66 12420.83 12989.40 T:present80n6silcv1 14007.43 14022.00 14036.83 T:led80n6silcv1 14588.95? 23949.39? 23970.06? T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 3.36? 6.28? 6.82? T:morus1280256v1 3.34? 6.29? 6.88? T:morus1280256v2 6.26 6.29 6.31 T:morus1280128v2 6.47 6.50 6.51 T:morus1280128v1 4.39? 7.82? 8.32? T:morus640128v2 4.41? 7.82? 8.27? T:morus640128v1 7.18? 8.15? 8.17? T:norx6441v2 8.15 8.17 8.18 T:norx6441v3 8.20 8.21 8.23 T:norx6444v3 8.19 8.21 8.24 T:norx6444v2 7.77? 9.93? 18.04? T:tiaoxinv1 9.08? 10.12? 16.99? T:norx6441v1 10.25 10.25 10.29 T:norx6444v1 11.08? 12.55? 21.51? T:norx6461v2 13.32? 14.73? 24.93? T:norx6461v1 13.92? 14.97? 25.01? T:norx3261v3 15.70 15.80 15.85 T:seakeyakv2 15.78 16.04 16.15 T:oceankeyakv2 9.34? 16.10? 16.53? T:norx3241v2 9.38? 16.16? 16.90? T:norx3241v3 15.55? 16.39? 27.09? T:ascon96v1 15.63? 16.48? 27.21? T:ascon128av11 16.56 16.61 16.78 T:lakekeyakv2 8.67? 17.43? 19.63? T:tiaoxinv2 10.00? 17.99? 19.25? T:lakekeyakv1 2.24? 18.56? 28.00? T:lunarkeyakv2 18.75 18.76 18.79 T:aegis256 10.59? 19.21? 20.62? T:norx6461v3 11.29? 19.43? 20.28? T:norx3241v1 11.60? 21.19? 22.86? T:aegis128l 13.98? 23.95? 25.00? T:norx3261v2 23.82? 24.99? 41.18? T:ascon128v11 23.81? 25.11? 41.18? T:ascon128v1 24.36? 25.55? 42.08? ascon128v12 23.15? 26.09? 42.89? T:ketjeminorv2 15.97? 26.94? 27.81? ascon128av12 16.67? 28.72? 29.99? T:norx3261v1 14.71? 28.97? 33.60? T:ketjemajorv2 17.21? 30.03? 31.54? T:aegis128 17.55? 30.09? 31.34? T:riverkeyakv2 28.91? 31.13? 51.89? T:aes128otrcv3 28.50? 32.46? 55.66? T:aes256gcmv1 35.98? 38.90? 63.75? T:aes128otrpv1 38.96? 39.01? 67.29? T:aes128n12t8clocv3 40.07 40.14 40.16 T:aes128n8t8clocv2 40.27 40.34 40.41 T:aes128n8clocv1 42.55? 42.61? 75.64? T:aes256otrsv3 41.01? 43.16? 71.38? T:aes128n8t8silcv2 42.58 43.18 44.60 T:aes128gcmv1 41.22 43.31 43.45 T:aes128n12t8silcv2 45.62 45.65 45.71 T:aes128n12t8silcv3 47.30 47.35 47.37 T:aes128n8silcv1 31.86? 54.44? 56.63? T:aes128otrsv2 54.42 54.46 54.50 T:proest256otrv1 31.96? 54.68? 56.91? T:aes128otrsv1 32.30? 55.28? 57.59? T:aes128otrsv3 55.67? 57.91? 96.87? T:aeadaes128ocbtaglen128v1 25.02? 60.08? 72.65? T:oceankeyakv1 61.35 61.37 61.48 T:aes128otrpv2 61.21 61.43 61.47 T:aes128otrpv3 37.90? 65.22? 68.23? T:aes256otrcv3 65.23 65.31 65.47 T:aes128n12clocv1 38.98? 65.35? 67.26? T:aes128n12t8clocv2 40.08? 68.13? 70.69? T:deoxysi128v141 69.90 70.04 70.55 T:aes256otrsv1 71.10 71.14 71.17 T:aes256otrsv2 76.53 76.64 76.88 T:aes128n12silcv1 45.50? 77.54? 80.58? T:aes256otrpv3 71.90? 78.15? 131.49? T:aeadaes256ocbtaglen128v1 45.99? 78.46? 81.48? T:aes256otrpv2 46.07? 78.46? 81.48? T:aes256otrpv1 45.35? 78.53? 82.27? T:deoxysi256v141 47.90? 79.51? 81.86? T:aesjambuv1 38.74? 84.73? 84.93? T:seakeyakv1 98.52? 103.90? 171.67? T:ketjesrv1 106.87 107.25 107.28 T:ketjesrv2 65.06? 107.89? 111.10? T:twine80n6t4clocv2 66.62? 112.77? 116.65? T:deoxysii128v141 68.20? 114.39? 117.69? T:twine80n6t4clocv3 132.36? 138.76? 228.44? T:ketjejrv1 139.82 139.87 140.19 T:proest128otrv1 83.35? 141.46? 141.58? T:riverkeyakv1 142.26? 144.53? 233.18? T:aezv4 144.03? 150.46? 246.22? T:aezv5 91.57? 153.63? 159.90? T:deoxysii256v141 229.73? 230.66? 384.04? T:deoxysneq128128v1 229.09 239.31 240.00 T:deoxysneq128128v13 320.75 321.18 338.12 T:aezv3 322.13? 322.87? 551.99? T:twine80n6clocv1 348.45 350.24 351.54 T:deoxyseq128128v1 359.59 360.08 360.88 T:deoxyseq128128v13 375.72? 383.21? 481.26? T:present80n6t4silcv3 382.78? 383.62? 628.31? T:deoxysneq256128v1 246.13? 408.02? 408.11? T:ketjejrv2 505.75 507.26 521.53 T:aezv1 548.46 573.62 576.54 T:led80n6t4silcv3 548.32 574.89 577.64 T:deoxyseq256128v13 615.18 620.12 641.16 T:deoxysneq256128v13 551.01? 916.85? 946.44? T:deoxyseq256128v1 3341.22? 3707.64? 6304.34? T:acorn128v3 3713.91? 3720.35? 6321.13? T:acorn128 3380.76? 3750.76? 3757.15? T:acorn128v2 10461.34? 10487.77? 17484.15? T:led80n6t4silcv2 10498.73 10924.96 10942.79 T:led80n6silcv1 9511.77? 15627.98? 15633.00? T:present80n6t4silcv2 9328.36? 16008.16? 16019.44? T:present80n6silcv1 22018.41 23176.34 23181.64 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 6.17 6.20 6.23 T:morus1280128v1 6.34 6.36 6.39 T:morus1280128v2 3.41? 6.36? 6.92? T:morus1280256v1 3.44? 6.46? 7.05? T:morus1280256v2 4.41? 7.88? 8.38? T:morus640128v2 4.57? 8.13? 8.67? T:morus640128v1 7.17? 8.19? 8.22? T:norx6441v2 8.17 8.20 8.22 T:norx6441v3 8.19 8.20 8.24 T:norx6444v3 8.20 8.21 8.24 T:norx6444v2 9.10? 10.06? 17.07? T:norx6441v1 10.24 10.27 10.31 T:norx6444v1 8.45? 10.59? 19.26? T:tiaoxinv1 11.08? 12.55? 21.60? T:norx6461v2 13.12? 14.52? 24.55? T:norx6461v1 13.93? 14.98? 25.05? T:norx3261v3 15.59 15.67 15.79 T:seakeyakv2 15.55 15.67 15.85 T:oceankeyakv2 9.57? 16.08? 16.78? T:norx3241v2 9.36? 16.17? 16.88? T:norx3241v3 16.21 16.27 16.37 T:lakekeyakv2 15.53? 16.67? 27.03? T:ascon96v1 15.56? 16.68? 27.10? T:ascon128av11 8.52? 17.21? 19.51? T:tiaoxinv2 9.64? 17.24? 18.47? T:lakekeyakv1 2.58? 18.39? 27.63? T:lunarkeyakv2 18.82 18.84 18.86 T:aegis256 10.81? 19.27? 20.69? T:norx6461v3 11.31? 19.51? 20.39? T:norx3241v1 11.52? 21.06? 22.74? T:aegis128l 14.53? 23.96? 25.19? T:norx3261v2 23.75? 24.93? 41.06? T:ascon128v11 23.74? 25.17? 41.05? T:ascon128v1 24.19? 25.53? 41.83? ascon128v12 23.01? 25.95? 42.63? T:ketjeminorv2 15.90? 26.82? 27.67? ascon128av12 14.33? 28.08? 31.32? T:ketjemajorv2 16.69? 28.77? 30.03? T:norx3261v1 17.09? 29.83? 31.34? T:aegis128 18.08? 30.45? 31.70? T:riverkeyakv2 28.83? 31.00? 51.71? T:aes128otrcv3 27.93? 32.51? 55.51? T:aes256gcmv1 36.11? 38.56? 64.05? T:aes128otrpv1 41.56 41.58 41.63 T:aes128n8t8clocv2 42.00? 42.04? 72.39? T:aes128n12t8clocv3 42.10 42.17 42.21 T:aes128n8clocv1 41.06? 43.14? 71.27? T:aes128n8t8silcv2 43.12? 43.18? 76.70? T:aes256otrsv3 42.93 43.25 43.37 T:aes128gcmv1 41.20 43.26 43.38 T:aes128n12t8silcv2 46.22 46.23 46.27 T:aes128n12t8silcv3 47.01 47.03 47.06 T:aes128n8silcv1 54.30 54.32 54.33 T:proest256otrv1 33.07? 54.90? 57.17? T:aes128otrsv1 34.25? 55.93? 58.29? T:aes128otrsv2 32.90? 56.34? 58.65? T:aes128otrsv3 25.10? 60.10? 72.63? T:oceankeyakv1 60.75 60.81 60.92 T:aes128otrpv2 61.85 62.10 62.25 T:aes128otrpv3 37.79? 65.01? 68.05? T:aes256otrcv3 60.83? 66.18? 113.10? T:aeadaes128ocbtaglen128v1 41.82? 70.03? 72.05? T:aes128n12t8clocv2 71.35 71.43 72.05 T:aes256otrsv1 71.90 72.10 72.14 T:aes128n12clocv1 42.55? 72.60? 75.48? T:deoxysi128v141 72.68 72.73 72.76 T:aes256otrsv2 76.49 76.61 76.67 T:aes128n12silcv1 45.74? 78.01? 81.05? T:aes256otrpv2 45.79? 78.09? 81.11? T:aes256otrpv3 46.21? 78.80? 81.90? T:aes256otrpv1 47.49? 79.77? 82.13? T:aesjambuv1 48.21? 83.49? 87.49? T:deoxysi256v141 38.96? 84.90? 85.09? T:seakeyakv1 86.74? 91.47? 156.20? T:aeadaes256ocbtaglen128v1 98.81? 104.29? 172.20? T:ketjesrv1 64.58? 108.51? 111.81? T:twine80n6t4clocv2 110.34 110.39 110.39 T:ketjesrv2 67.65? 111.98? 115.86? T:deoxysii128v141 68.40? 113.89? 117.19? T:twine80n6t4clocv3 139.87 139.90 140.18 T:proest128otrv1 133.87? 140.99? 231.01? T:ketjejrv1 83.89? 142.46? 142.50? T:riverkeyakv1 142.02? 142.53? 232.98? T:aezv4 143.87? 152.30? 246.01? T:aezv5 89.68? 153.39? 160.37? T:deoxysii256v141 264.51? 266.41? 441.92? T:deoxysneq128128v1 264.04 276.04 277.69 T:deoxysneq128128v13 320.76 321.23 339.68 T:aezv3 322.89? 323.95? 553.08? T:twine80n6clocv1 360.20 360.24 361.74 T:deoxyseq128128v13 379.65? 384.88? 443.31? T:present80n6t4silcv3 245.45? 412.09? 412.16? T:ketjejrv2 413.83 417.06 418.84 T:deoxyseq128128v1 434.19? 436.86? 712.67? T:deoxysneq256128v1 504.87 505.16 522.47 T:aezv1 548.30 574.29 577.48 T:deoxyseq256128v13 549.57 575.31 577.84 T:led80n6t4silcv3 697.50 701.19 721.41 T:deoxysneq256128v13 650.86? 1080.73? 1116.17? T:deoxyseq256128v1 3286.49? 3654.30? 6213.80? T:acorn128v3 3333.97? 3702.33? 3708.74? T:acorn128v2 3745.27? 3750.92? 6372.59? T:acorn128 10488.86? 10501.41? 17499.59? T:led80n6t4silcv2 10503.09 10937.06 10944.65 T:led80n6silcv1 9508.62? 15625.47? 15637.53? T:present80n6t4silcv2 9331.30? 16010.87? 16026.41? T:present80n6silcv1 22021.61 23175.50 23183.12 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 6.20 6.20 6.23 T:morus1280128v1 6.37 6.38 6.40 T:morus1280128v2 3.43? 6.39? 6.94? T:morus1280256v1 3.47? 6.48? 7.06? T:morus1280256v2 4.43? 7.90? 8.40? T:morus640128v2 4.60? 8.15? 8.64? T:morus640128v1 8.31 8.32 8.35 T:norx6441v3 7.30? 8.32? 8.34? T:norx6441v2 8.32 8.35 8.40 T:norx6444v3 8.34 8.36 8.67 T:norx6444v2 9.21? 10.19? 17.29? T:norx6441v1 10.40 10.42 10.43 T:norx6444v1 8.56? 10.94? 19.16? T:tiaoxinv1 11.20? 12.72? 21.83? T:norx6461v2 13.25? 14.64? 24.75? T:norx6461v1 13.93? 14.98? 25.01? T:norx3261v3 15.59 15.82 15.95 T:oceankeyakv2 15.81 15.95 16.01 T:seakeyakv2 9.38? 16.10? 16.82? T:norx3241v2 9.38? 16.16? 16.90? T:norx3241v3 15.54? 16.37? 27.04? T:ascon96v1 16.45 16.47 16.50 T:lakekeyakv2 15.56? 16.66? 27.09? T:ascon128av11 8.55? 17.22? 19.30? T:tiaoxinv2 9.74? 17.51? 18.71? T:lakekeyakv1 4.67? 18.60? 27.56? T:lunarkeyakv2 18.94 18.97 19.01 T:aegis256 11.63? 19.52? 20.43? T:norx3241v1 11.01? 19.53? 21.14? T:norx6461v3 11.68? 21.30? 22.97? T:aegis128l 13.93? 23.96? 25.01? T:norx3261v2 23.76? 24.99? 41.07? T:ascon128v11 23.75? 25.15? 41.05? T:ascon128v1 23.13? 25.38? 42.86? T:ketjeminorv2 24.21? 25.39? 41.84? ascon128v12 15.88? 26.82? 27.67? ascon128av12 14.46? 28.30? 31.53? T:ketjemajorv2 16.96? 28.80? 30.08? T:norx3261v1 17.11? 29.86? 31.40? T:aegis128 18.14? 30.68? 31.98? T:riverkeyakv2 28.84? 31.97? 51.71? T:aes128otrcv3 28.40? 32.57? 55.45? T:aes256gcmv1 36.28? 38.70? 64.31? T:aes128otrpv1 41.53 41.59 41.61 T:aes128n8t8clocv2 41.99? 42.05? 72.38? T:aes128n12t8clocv3 42.09 42.16 42.22 T:aes128n8clocv1 41.06? 43.15? 71.27? T:aes128n8t8silcv2 41.16 43.24 43.27 T:aes128n12t8silcv2 43.03 43.26 43.49 T:aes128gcmv1 43.26? 43.30? 76.92? T:aes256otrsv3 46.22 46.24 46.26 T:aes128n12t8silcv3 47.00 47.01 47.04 T:aes128n8silcv1 54.29 54.31 54.32 T:proest256otrv1 32.22? 55.13? 57.41? T:aes128otrsv1 32.85? 56.16? 58.40? T:aes128otrsv2 33.05? 56.55? 58.87? T:aes128otrsv3 25.23? 60.28? 72.85? T:oceankeyakv1 61.01 61.05 61.09 T:aes128otrpv2 62.05 62.36 62.56 T:aes128otrpv3 39.07? 65.02? 68.05? T:aes256otrcv3 61.12? 66.60? 110.01? T:aeadaes128ocbtaglen128v1 42.70? 70.05? 72.07? T:aes128n12t8clocv2 71.56 71.64 71.79 T:aes256otrsv1 71.85 72.03 72.15 T:aes128n12clocv1 42.68? 72.82? 75.67? T:deoxysi128v141 72.94 72.96 73.15 T:aes256otrsv2 76.41 76.56 76.64 T:aes128n12silcv1 45.88? 78.21? 81.25? T:aes256otrpv2 45.91? 78.31? 81.35? T:aes256otrpv3 47.11? 79.01? 82.09? T:aes256otrpv1 47.51? 79.77? 82.13? T:aesjambuv1 48.28? 83.67? 87.81? T:deoxysi256v141 39.15? 84.97? 85.18? T:seakeyakv1 84.06? 96.08? 154.87? T:aeadaes256ocbtaglen128v1 98.92? 104.60? 172.41? T:ketjesrv1 64.60? 108.52? 111.77? T:twine80n6t4clocv2 110.50 110.52 110.57 T:ketjesrv2 66.31? 112.19? 116.04? T:deoxysii128v141 67.90? 113.89? 117.19? T:twine80n6t4clocv3 139.88 139.90 140.21 T:proest128otrv1 134.00? 141.11? 231.23? T:ketjejrv1 141.79? 141.87? 232.60? T:aezv4 84.17? 142.68? 142.74? T:riverkeyakv1 143.67? 151.68? 245.73? T:aezv5 90.07? 153.67? 159.90? T:deoxysii256v141 264.27? 265.91? 441.96? T:deoxysneq128128v1 264.17 276.21 277.65 T:deoxysneq128128v13 320.70 320.94 338.35 T:aezv3 322.88? 323.78? 553.22? T:twine80n6clocv1 359.71 359.77 360.90 T:deoxyseq128128v13 379.65? 384.44? 443.04? T:present80n6t4silcv3 245.88? 411.27? 412.39? T:ketjejrv2 413.79 417.58 418.93 T:deoxyseq128128v1 434.20? 437.71? 712.67? T:deoxysneq256128v1 504.56 505.27 522.28 T:aezv1 548.37 574.31 577.29 T:deoxyseq256128v13 549.58 575.22 578.18 T:led80n6t4silcv3 697.68 701.36 723.67 T:deoxysneq256128v13 693.86? 956.78? 958.68? aes256gcmv1 649.58? 1080.72? 1114.90? T:deoxyseq256128v1 3287.54? 3655.54? 6216.89? T:acorn128v3 3334.88? 3704.36? 3707.60? T:acorn128v2 3745.58? 3750.96? 6368.80? T:acorn128 10479.08? 10492.00? 17502.45? T:led80n6t4silcv2 10499.03 10932.40 10941.12 T:led80n6silcv1 9505.49? 15624.90? 15633.60? T:present80n6t4silcv2 9336.05? 16008.73? 16022.07? T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 5.74 5.77 5.79 T:morus1280128v1 6.33 6.34 6.37 T:morus1280128v2 3.24? 6.38? 7.29? T:morus1280256v1 3.10? 6.49? 7.41? T:morus1280256v2 3.82? 7.25? 7.95? T:morus640128v1 3.79? 7.27? 8.04? T:morus640128v2 6.64? 8.08? 14.37? T:norx6441v2 8.07 8.08 8.10 T:norx6444v2 8.04 8.08 8.10 T:norx6441v3 8.07 8.08 8.11 T:norx6444v3 5.46? 9.34? 18.91? T:tiaoxinv1 9.90 9.90 9.90 T:norx6444v1 8.60? 9.95? 17.27? T:norx6441v1 11.07 11.53 11.68 T:oceankeyakv2 -11.09? 11.54? 29.90? T:lunarkeyakv2 10.39? 12.48? 22.09? T:norx6461v2 13.54 13.92 14.11 T:aes256gcmv1 12.15? 14.08? 24.48? T:norx6461v1 14.11 14.20 14.24 T:lakekeyakv2 14.28 14.37 14.44 T:seakeyakv2 13.51? 14.91? 25.25? T:norx3261v3 8.26? 15.95? 17.69? T:lakekeyakv1 9.03? 15.97? 16.91? T:norx3241v2 9.03? 16.06? 17.05? T:norx3241v3 15.38? 16.39? 27.27? T:ascon96v1 15.38? 16.39? 27.28? T:ascon128av11 6.84? 17.34? 21.27? T:tiaoxinv2 18.11 18.14 18.15 T:aegis256 9.88? 19.09? 21.14? T:norx6461v3 10.94? 19.25? 20.31? T:norx3241v1 9.94? 20.26? 22.99? T:aegis128l 20.87 21.06 21.39 T:aes128gcmv1 19.23? 22.46? 39.11? T:ketjeminorv2 13.46? 23.83? 25.24? T:norx3261v2 10.25? 24.50? 29.58? T:ketjemajorv2 23.35? 24.66? 40.84? T:ascon128v11 23.35? 24.69? 40.85? T:ascon128v1 23.95? 25.30? 41.86? ascon128v12 26.44 26.49 26.56 T:aes128n8t8clocv2 26.65 26.73 26.86 T:aes128n8clocv1 15.65? 26.75? 27.78? ascon128av12 15.40? 27.59? 29.31? T:riverkeyakv2 26.43? 28.35? 47.42? T:aes128n12t8silcv2 26.46? 28.43? 47.28? T:aes128n8t8silcv2 16.22? 28.56? 30.12? T:norx3261v1 30.14 30.16 30.17 T:aes128n12t8silcv3 16.50? 30.18? 32.49? T:aegis128 27.66? 30.98? 52.71? T:aes128otrcv3 31.18 31.28 31.33 T:aes128n8silcv1 34.69? 38.11? 64.24? T:aes128otrpv1 25.16? 42.89? 44.57? T:aes128n12t8clocv3 25.22? 42.92? 44.57? T:aes128n12t8clocv2 42.96 43.00 43.03 T:aes128n12clocv1 25.58? 45.68? 48.91? T:aes128otrsv2 34.62? 47.17? 87.85? T:seakeyakv1 27.64? 49.15? 52.26? T:aes128otrsv1 28.06? 49.88? 53.22? T:aes128otrsv3 50.97 51.24 51.46 T:aes128n12silcv1 54.76 54.80 54.82 T:proest256otrv1 56.62 56.69 56.70 T:aes128otrpv3 19.38? 59.25? 76.92? T:oceankeyakv1 60.45 60.55 60.64 T:aes256otrsv1 60.88 60.88 60.92 T:aes128otrpv2 60.99 61.02 61.04 T:aes256otrsv2 47.80? 62.04? 97.85? T:aeadaes128ocbtaglen128v1 38.09? 65.01? 69.46? T:aes256otrcv3 37.72? 66.86? 70.92? T:aes256otrsv3 39.21? 67.61? 70.66? T:deoxysi128v141 43.36? 74.28? 77.62? T:deoxysii128v141 44.11? 77.38? 81.67? T:aes256otrpv3 44.14? 77.38? 81.68? T:aes256otrpv1 44.11? 77.40? 81.72? T:aes256otrpv2 44.84? 78.88? 83.49? T:deoxysi256v141 47.75? 79.01? 81.70? T:aesjambuv1 69.37? 79.15? 133.49? T:aeadaes256ocbtaglen128v1 93.49? 100.01? 166.53? T:ketjesrv1 57.31? 101.42? 107.42? T:deoxysii256v141 103.66 103.76 103.82 T:ketjesrv2 62.49? 105.75? 109.38? T:twine80n6t4clocv2 109.24? 113.55? 185.78? T:aezv5 68.14? 113.77? 117.45? T:twine80n6t4clocv3 123.08 123.15 123.18 T:aezv4 122.45? 129.43? 213.96? T:ketjejrv1 135.69 135.92 135.98 T:riverkeyakv1 139.95 140.06 140.73 T:proest128otrv1 238.17 238.18 238.59 T:deoxyseq128128v13 228.24? 240.28? 393.30? T:deoxysneq128128v13 151.47? 245.66? 251.95? T:aezv1 213.45? 355.27? 365.96? T:twine80n6clocv1 215.71? 362.42? 370.73? T:aezv3 373.95? 381.38? 480.52? T:present80n6t4silcv3 382.87 382.89 382.91 T:deoxysneq256128v1 382.83 383.30 384.74 T:deoxyseq128128v1 383.96 383.98 384.17 T:deoxysneq128128v1 395.10 395.12 395.14 T:ketjejrv2 546.23? 574.50? 945.14? T:led80n6t4silcv3 362.47? 611.93? 635.06? T:deoxyseq256128v1 363.89? 612.00? 633.31? T:deoxyseq256128v13 371.92? 612.51? 631.12? T:deoxysneq256128v13 476.35? 2020.93? 2024.79? aes256gcmv1 3136.59? 3149.76? 6558.58? T:acorn128 3716.74? 3727.43? 6549.21? T:acorn128v3 6335.71 6337.65 6341.21 T:present80n6t4silcv2 6491.46? 6496.67? 10718.18? T:present80n6silcv1 3134.08? 6548.63? 6561.43? T:acorn128v2 7283.74 7323.22 7337.06 T:led80n6silcv1 11688.19 11731.35 12004.88 T:led80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 5.63 5.67 5.69 T:morus1280128v1 3.06? 6.40? 7.36? T:morus1280256v1 6.40 6.42 6.45 T:morus1280128v2 3.09? 6.56? 7.52? T:morus1280256v2 3.71? 7.23? 8.02? T:morus640128v2 3.99? 7.62? 8.35? T:morus640128v1 8.05 8.08 8.12 T:norx6441v3 8.05 8.08 8.11 T:norx6444v3 6.61? 8.09? 14.43? T:norx6441v2 8.06 8.09 8.10 T:norx6444v2 5.49? 8.65? 19.02? T:tiaoxinv1 9.89 9.91 9.93 T:norx6444v1 8.53? 9.95? 17.32? T:norx6441v1 -10.56? 11.59? 29.32? T:lunarkeyakv2 11.15 11.62 11.82 T:oceankeyakv2 10.36? 12.51? 22.15? T:norx6461v2 13.42 13.62 13.87 T:aes256gcmv1 12.10? 14.09? 24.53? T:norx6461v1 14.09 14.16 14.34 T:lakekeyakv2 14.28 14.33 14.40 T:seakeyakv2 13.50? 14.90? 25.25? T:norx3261v3 5.68? 15.47? 19.43? T:tiaoxinv2 9.28? 15.97? 16.85? T:norx3241v2 8.28? 16.03? 17.76? T:lakekeyakv1 9.05? 16.04? 17.02? T:norx3241v3 15.30? 16.33? 27.15? T:ascon128av11 15.41? 16.40? 27.28? T:ascon96v1 18.09 18.11 18.14 T:aegis256 9.87? 19.10? 21.15? T:norx6461v3 11.00? 19.30? 20.37? T:norx3241v1 9.95? 20.30? 23.05? T:aegis128l 20.69 21.26 21.69 T:aes128gcmv1 19.24? 22.44? 39.11? T:ketjeminorv2 13.46? 23.85? 25.22? T:norx3261v2 10.24? 24.50? 29.58? T:ketjemajorv2 23.50? 24.84? 41.10? T:ascon128v11 23.52? 24.84? 41.09? T:ascon128v1 23.94? 25.37? 41.86? ascon128v12 26.46 26.51 26.56 T:aes128n8t8clocv2 15.59? 26.64? 27.64? ascon128av12 26.65 26.73 26.86 T:aes128n8clocv1 15.47? 27.61? 29.38? T:riverkeyakv2 26.43? 28.35? 47.41? T:aes128n12t8silcv2 26.45? 28.43? 47.28? T:aes128n8t8silcv2 16.24? 28.58? 30.17? T:norx3261v1 16.43? 30.04? 32.39? T:aegis128 30.14 30.16 30.17 T:aes128n12t8silcv3 27.75? 31.03? 52.78? T:aes128otrcv3 31.25 31.27 31.30 T:aes128n8silcv1 34.67? 38.05? 64.27? T:aes128otrpv1 25.18? 42.92? 44.59? T:aes128n12t8clocv3 25.21? 42.94? 44.59? T:aes128n12t8clocv2 42.98 43.01 43.07 T:aes128n12clocv1 34.68? 45.33? 87.85? T:seakeyakv1 25.58? 45.67? 48.84? T:aes128otrsv2 27.61? 49.12? 52.22? T:aes128otrsv1 29.60? 49.92? 53.20? T:aes128otrsv3 50.92 51.14 51.46 T:aes128n12silcv1 54.80 54.81 54.82 T:proest256otrv1 56.37 56.65 56.76 T:aes128otrpv3 19.38? 59.16? 76.85? T:oceankeyakv1 60.39 60.52 60.67 T:aes256otrsv1 60.86 60.91 61.01 T:aes128otrpv2 60.97 61.01 61.23 T:aes256otrsv2 47.18? 63.51? 98.61? T:aeadaes128ocbtaglen128v1 36.43? 64.99? 69.39? T:aes256otrcv3 37.72? 66.88? 70.94? T:aes256otrsv3 39.17? 67.62? 70.69? T:deoxysi128v141 43.45? 74.32? 77.56? T:deoxysii128v141 44.09? 77.38? 81.68? T:aes256otrpv1 45.82? 77.39? 81.69? T:aes256otrpv3 44.14? 77.39? 81.69? T:aes256otrpv2 44.08? 77.79? 82.40? T:deoxysi256v141 46.65? 79.00? 81.71? T:aesjambuv1 66.46? 79.61? 134.63? T:aeadaes256ocbtaglen128v1 93.49? 99.98? 166.52? T:ketjesrv1 57.71? 101.56? 107.64? T:deoxysii256v141 103.72 103.74 103.75 T:ketjesrv2 62.50? 105.75? 109.40? T:twine80n6t4clocv2 109.11? 113.48? 185.88? T:aezv5 67.39? 113.75? 117.46? T:twine80n6t4clocv3 123.11 123.17 123.40 T:aezv4 122.47? 129.42? 213.94? T:ketjejrv1 135.66 135.99 136.10 T:riverkeyakv1 139.89 140.01 140.09 T:proest128otrv1 238.09 238.12 238.60 T:deoxyseq128128v13 229.62? 240.40? 393.22? T:deoxysneq128128v13 148.27? 245.59? 251.47? T:aezv1 211.56? 355.21? 365.88? T:twine80n6clocv1 219.31? 362.93? 373.68? T:aezv3 380.32 381.36 382.26 T:present80n6t4silcv3 382.86 382.88 382.92 T:deoxysneq256128v1 382.99 383.32 384.95 T:deoxyseq128128v1 383.78 383.94 384.36 T:deoxysneq128128v1 395.10 395.14 396.76 T:ketjejrv2 546.20? 575.01? 945.19? T:led80n6t4silcv3 363.52? 612.01? 633.12? T:deoxyseq256128v13 363.51? 612.03? 636.49? T:deoxyseq256128v1 371.48? 612.27? 630.71? T:deoxysneq256128v13 474.26? 2019.46? 2021.50? aes256gcmv1 3147.11? 3164.37? 6576.29? T:acorn128 3648.45? 3657.39? 6442.91? T:acorn128v3 6335.12 6337.91 6340.71 T:present80n6t4silcv2 6494.83? 6496.99? 10720.03? T:present80n6silcv1 3137.42? 6552.06? 6563.62? T:acorn128v2 7332.77 7339.75 7345.63 T:led80n6silcv1 11731.36 11743.47 12048.96 T:led80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 5.70 5.70 5.71 T:morus1280128v1 6.45 6.45 6.47 T:morus1280128v2 3.11? 6.46? 7.39? T:morus1280256v1 3.14? 6.58? 7.55? T:morus1280256v2 3.76? 7.27? 8.06? T:morus640128v2 4.03? 7.64? 8.39? T:morus640128v1 8.02 8.07 8.10 T:norx6444v3 8.05 8.08 8.11 T:norx6441v3 8.07 8.09 8.10 T:norx6444v2 6.60? 8.10? 14.43? T:norx6441v2 5.58? 9.47? 19.02? T:tiaoxinv1 9.88 9.91 9.93 T:norx6444v1 8.53? 9.98? 17.33? T:norx6441v1 11.13 11.52 11.98 T:oceankeyakv2 -10.50? 11.60? 25.93? T:lunarkeyakv2 10.35? 12.50? 22.16? T:norx6461v2 13.29 13.50 13.86 T:aes256gcmv1 12.10? 14.09? 24.54? T:norx6461v1 14.12 14.18 14.27 T:lakekeyakv2 14.29 14.33 14.40 T:seakeyakv2 13.50? 14.91? 25.26? T:norx3261v3 5.71? 15.49? 19.47? T:tiaoxinv2 9.02? 15.97? 16.88? T:norx3241v2 8.26? 16.04? 17.78? T:lakekeyakv1 9.07? 16.06? 17.03? T:norx3241v3 15.31? 16.32? 27.15? T:ascon128av11 15.38? 16.41? 27.28? T:ascon96v1 18.10 18.11 18.14 T:aegis256 9.86? 19.10? 21.19? T:norx6461v3 11.01? 19.32? 20.40? T:norx3241v1 9.97? 20.28? 23.02? T:aegis128l 20.64 21.27 22.16 T:aes128gcmv1 19.23? 22.44? 39.12? T:ketjeminorv2 13.51? 23.85? 25.25? T:norx3261v2 10.23? 24.53? 29.62? T:ketjemajorv2 23.51? 24.84? 41.09? T:ascon128v1 23.51? 24.85? 41.10? T:ascon128v11 23.96? 25.31? 41.89? ascon128v12 26.45 26.50 26.56 T:aes128n8t8clocv2 15.63? 26.64? 27.66? ascon128av12 26.65 26.73 26.87 T:aes128n8clocv1 15.40? 27.61? 29.46? T:riverkeyakv2 26.45? 28.37? 47.41? T:aes128n12t8silcv2 26.45? 28.43? 47.28? T:aes128n8t8silcv2 16.28? 28.62? 30.20? T:norx3261v1 16.47? 30.06? 32.42? T:aegis128 30.13 30.16 30.19 T:aes128n12t8silcv3 27.75? 31.00? 52.78? T:aes128otrcv3 31.24 31.29 31.33 T:aes128n8silcv1 34.67? 38.06? 64.27? T:aes128otrpv1 25.24? 42.92? 44.60? T:aes128n12t8clocv2 25.19? 42.95? 44.51? T:aes128n12t8clocv3 42.98 43.02 43.08 T:aes128n12clocv1 25.61? 45.63? 48.85? T:aes128otrsv2 34.72? 47.13? 87.85? T:seakeyakv1 27.69? 49.12? 52.25? T:aes128otrsv1 28.04? 49.89? 53.21? T:aes128otrsv3 50.96 51.24 51.33 T:aes128n12silcv1 54.78 54.81 54.89 T:proest256otrv1 56.61 56.67 56.79 T:aes128otrpv3 54.24? 59.01? 99.01? T:aeadaes128ocbtaglen128v1 19.44? 59.18? 74.67? T:oceankeyakv1 60.50 60.54 60.64 T:aes256otrsv1 60.86 60.89 60.94 T:aes128otrpv2 60.94 61.01 61.13 T:aes256otrsv2 36.42? 64.97? 69.39? T:aes256otrcv3 37.75? 66.89? 70.97? T:aes256otrsv3 39.19? 67.64? 70.72? T:deoxysi128v141 43.20? 74.33? 77.71? T:deoxysii128v141 44.12? 77.38? 81.50? T:aes256otrpv1 44.12? 77.38? 81.65? T:aes256otrpv3 44.09? 77.42? 81.69? T:aes256otrpv2 44.07? 77.80? 82.42? T:deoxysi256v141 69.10? 78.00? 133.75? T:aeadaes256ocbtaglen128v1 46.67? 79.02? 81.73? T:aesjambuv1 93.48? 99.98? 166.51? T:ketjesrv1 57.33? 101.75? 107.62? T:deoxysii256v141 103.71 103.74 103.75 T:ketjesrv2 62.49? 105.73? 109.39? T:twine80n6t4clocv2 109.10? 113.45? 185.88? T:aezv5 67.40? 113.75? 117.47? T:twine80n6t4clocv3 123.05 123.27 123.32 T:aezv4 122.48? 130.56? 213.95? T:ketjejrv1 135.71 135.90 135.99 T:riverkeyakv1 139.93 139.97 140.04 T:proest128otrv1 238.09 238.14 238.65 T:deoxyseq128128v13 228.18? 238.97? 393.22? T:deoxysneq128128v13 151.67? 245.56? 251.56? T:aezv1 211.56? 355.20? 365.91? T:twine80n6clocv1 216.41? 362.88? 373.48? T:aezv3 380.33 381.35 382.26 T:present80n6t4silcv3 382.87 382.90 382.92 T:deoxysneq256128v1 382.79 383.29 384.95 T:deoxyseq128128v1 383.79 383.87 384.30 T:deoxysneq128128v1 395.08 395.14 396.86 T:ketjejrv2 546.21? 574.37? 945.17? T:led80n6t4silcv3 365.86? 611.93? 632.65? T:deoxyseq256128v1 361.46? 612.03? 633.37? T:deoxyseq256128v13 371.65? 612.30? 630.65? T:deoxysneq256128v13 475.85? 2019.44? 2022.41? aes256gcmv1 3148.63? 3161.65? 6579.91? T:acorn128 3646.83? 3657.06? 6438.13? T:acorn128v3 6335.44 6337.03 6340.34 T:present80n6t4silcv2 6490.83? 6497.45? 10717.60? T:present80n6silcv1 3136.86? 6553.96? 6567.57? T:acorn128v2 7336.29 7340.35 7345.79 T:led80n6silcv1 11735.59 11744.39 12052.63 T:led80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 4.80? 7.64? 7.66? T:morus1280256v1 4.84? 7.71? 7.74? T:morus1280256v2 7.76 7.77 7.78 T:morus1280128v2 8.04 8.06 8.07 T:morus1280128v1 5.48? 8.74? 8.76? T:morus640128v1 5.54? 8.82? 8.84? T:morus640128v2 9.76 9.78 9.79 T:norx6441v3 9.75? 9.78? 15.57? T:norx6441v2 11.52? 11.55? 18.26? T:norx6441v1 11.96 11.97 11.99 T:norx6444v2 12.00 12.01 12.04 T:norx6444v3 13.63? 13.65? 21.82? T:tiaoxinv1 14.81? 14.85? 23.66? T:norx6461v2 14.86 14.87 14.89 T:norx6444v1 16.26? 16.29? 26.00? T:norx3261v3 16.71? 16.72? 26.68? T:norx6461v1 16.82? 16.83? 26.89? T:ascon96v1 16.89? 16.90? 27.02? T:ascon128av11 10.97? 17.52? 17.53? T:norx3241v2 11.05? 17.60? 17.63? T:norx3241v3 18.38 18.42 18.54 T:lakekeyakv2 12.93? 20.56? 20.61? T:norx3241v1 21.01 21.03 21.04 T:aegis256 13.28? 21.24? 21.32? T:lakekeyakv1 22.14 22.21 22.29 T:seakeyakv2 14.25? 22.74? 22.82? T:norx6461v3 14.63? 23.38? 23.40? T:tiaoxinv2 15.59? 24.88? 24.93? T:aegis128l 25.39? 25.40? 40.61? T:ascon128v1 25.39? 25.40? 40.62? T:ascon128v11 25.94? 25.96? 41.49? ascon128v12 16.28? 25.99? 26.01? T:norx3261v2 17.27? 27.59? 27.63? ascon128av12 28.51 28.66 28.72 T:oceankeyakv2 28.71? 28.71? 45.92? T:ketjeminorv2 19.05? 30.40? 30.47? T:norx3261v1 19.84? 31.61? 31.65? T:riverkeyakv2 20.49? 32.67? 32.71? T:aegis128 33.10? 33.21? 52.86? T:aes128otrcv3 23.59? 37.75? 38.92? T:ketjemajorv2 38.67? 38.99? 61.45? T:aes256gcmv1 40.14? 40.21? 64.21? T:aes128otrpv1 40.55 40.57 40.58 T:aes128n8t8clocv2 40.88 40.90 40.96 T:aes128n8clocv1 41.49? 41.54? 66.34? T:aes128n12t8clocv3 43.81? 43.88? 70.42? T:aes128n8t8silcv2 44.00? 44.14? 70.43? T:aes128n12t8silcv2 46.47 46.48 46.50 T:aes128n12t8silcv3 29.65? 47.22? 47.34? T:lunarkeyakv2 47.80? 47.85? 76.47? T:aes256otrsv3 48.25 48.26 48.29 T:aes128n8silcv1 51.42 51.49 51.76 T:aes128gcmv1 35.75? 57.16? 57.23? T:aes128otrsv2 36.07? 57.58? 57.60? T:aes128otrsv1 36.45? 58.31? 58.35? T:aes128otrsv3 59.49 59.51 59.55 T:proest256otrv1 64.02 64.19 64.24 T:aes128otrpv3 64.20 64.22 64.35 T:aes128otrpv2 42.24? 66.16? 66.23? T:aes128n12t8clocv2 66.39 66.42 66.59 T:aes128n12clocv1 43.25? 69.20? 69.34? T:aes256otrcv3 44.39? 70.99? 71.01? T:deoxysi128v141 73.38 73.41 73.46 T:aes256otrsv1 74.45 74.47 74.50 T:aes256otrsv2 78.21 78.23 78.38 T:aes128n12silcv1 50.50? 80.74? 80.78? T:aesjambuv1 50.75? 81.13? 81.15? T:aes256otrpv3 52.01? 82.00? 82.01? T:aes256otrpv1 52.02? 82.01? 82.04? T:aes256otrpv2 54.04? 84.44? 84.48? T:deoxysi256v141 86.84? 90.80? 136.74? T:aeadaes256ocbtaglen128v1 57.43? 91.92? 92.05? T:oceankeyakv1 57.64? 92.52? 92.56? T:seakeyakv1 68.67? 101.79? 108.95? T:aeadaes128ocbtaglen128v1 106.49? 106.51? 170.39? T:ketjesrv1 68.56? 109.65? 109.66? T:twine80n6t4clocv2 110.26 110.30 110.98 T:ketjesrv2 72.46? 115.85? 115.89? T:twine80n6t4clocv3 72.65? 116.21? 116.31? T:deoxysii128v141 136.25? 138.93? 217.48? T:aezv4 140.61? 140.62? 224.96? T:ketjejrv1 145.77 145.82 146.13 T:proest128otrv1 147.26 147.28 147.32 T:riverkeyakv1 144.27? 147.31? 230.84? T:aezv5 101.25? 161.99? 162.08? T:deoxysii256v141 240.60 240.63 240.70 T:deoxysneq128128v13 241.30? 241.36? 385.87? T:deoxysneq128128v1 331.95? 335.55? 530.98? T:aezv3 337.42? 337.68? 539.90? T:twine80n6clocv1 363.38 363.93 364.30 T:deoxyseq128128v13 367.18? 367.95? 590.82? T:deoxyseq128128v1 384.88 384.91 386.22 T:deoxysneq256128v1 386.55? 387.39? 479.35? T:present80n6t4silcv3 259.08? 413.62? 413.73? T:ketjejrv2 479.60 480.02 484.48 T:aezv1 578.27 578.29 578.94 T:led80n6t4silcv3 580.24 580.95 581.36 T:deoxyseq256128v13 391.89? 615.27? 617.12? T:deoxysneq256128v13 922.92 924.61 929.12 T:deoxyseq256128v1 4163.40? 4165.64? 6665.87? T:acorn128v3 4216.00 4216.50 4218.57 T:acorn128v2 4173.87? 6677.27? 6683.10? T:acorn128 9553.19 9556.68 9559.28 T:present80n6t4silcv2 9799.28? 15677.16? 15681.24? T:present80n6silcv1 10944.11? 17508.23? 17516.95? T:led80n6t4silcv2 10955.15? 17527.51? 17539.49? T:led80n6silcv1 23645.99? 23651.91? 37860.13? aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 4.84? 7.73? 7.75? T:morus1280256v1 7.82 7.83 7.84 T:morus1280128v2 4.95? 7.90? 7.90? T:morus1280256v2 8.09 8.11 8.13 T:morus1280128v1 5.59? 8.94? 9.18? T:morus640128v2 6.06? 9.12? 9.16? T:morus640128v1 9.82 9.84 9.86 T:norx6441v3 9.82? 9.84? 15.71? T:norx6441v2 11.47? 11.50? 18.34? T:norx6441v1 11.99 12.00 12.03 T:norx6444v2 12.03 12.04 12.10 T:norx6444v3 14.32? 14.39? 23.02? T:tiaoxinv1 14.85 14.87 14.89 T:norx6444v1 14.92? 14.95? 23.86? T:norx6461v2 16.27? 16.28? 26.02? T:norx3261v3 16.43? 16.47? 26.23? T:norx6461v1 16.82? 16.83? 26.90? T:ascon128av11 16.79? 17.31? 26.84? T:ascon96v1 11.37? 17.59? 17.88? T:norx3241v2 11.04? 17.62? 17.67? T:norx3241v3 18.02 18.08 18.24 T:lakekeyakv2 12.73? 20.29? 20.37? T:lakekeyakv1 12.99? 20.67? 20.69? T:norx3241v1 21.11 21.12 21.13 T:aegis256 22.09 22.17 22.30 T:seakeyakv2 14.31? 22.86? 22.96? T:norx6461v3 14.56? 23.27? 23.30? T:tiaoxinv2 15.56? 24.85? 24.92? T:aegis128l 25.32? 25.67? 40.50? T:ascon128v1 25.32? 25.68? 40.50? T:ascon128v11 25.79? 25.81? 41.26? ascon128v12 16.98? 26.00? 26.04? T:norx3261v2 17.18? 27.47? 27.47? ascon128av12 27.84? 27.87? 44.54? T:ketjeminorv2 28.19 28.32 28.71 T:oceankeyakv2 19.14? 30.52? 30.56? T:norx3261v1 22.20? 32.04? 32.11? T:riverkeyakv2 20.41? 32.49? 32.54? T:aegis128 32.97? 32.98? 52.67? T:aes128otrcv3 22.82? 36.47? 36.50? T:ketjemajorv2 38.84? 38.93? 61.16? T:aes256gcmv1 40.38? 40.44? 64.56? T:aes128otrpv1 41.99 42.00 42.02 T:aes128n8t8clocv2 42.69 42.71 42.77 T:aes128n8clocv1 43.83? 43.86? 70.31? T:aes128n8t8silcv2 44.08? 44.10? 70.31? T:aes128n12t8silcv2 44.60? 44.63? 71.28? T:aes128n12t8clocv3 47.07 47.10 47.15 T:aes128n12t8silcv3 30.34? 47.15? 47.31? T:lunarkeyakv2 47.90 47.93 47.97 T:aes128n8silcv1 48.43? 48.48? 77.46? T:aes256otrsv3 51.75 51.93 52.09 T:aes128gcmv1 36.19? 57.86? 57.90? T:aes128otrsv1 36.79? 58.71? 58.82? T:aes128otrsv2 59.30 59.31 59.45 T:proest256otrv1 37.11? 59.36? 59.44? T:aes128otrsv3 63.80 63.82 63.90 T:aes128otrpv2 64.68 64.98 65.03 T:aes128otrpv3 43.12? 68.99? 69.09? T:aes256otrcv3 44.29? 70.82? 70.89? T:aes128n12t8clocv2 72.97 73.20 73.28 T:aes128n12clocv1 74.93 74.96 75.09 T:aes256otrsv1 47.63? 76.13? 76.17? T:deoxysi128v141 76.21 76.22 76.52 T:aes256otrsv2 78.08 78.10 78.21 T:aes128n12silcv1 50.66? 81.02? 81.03? T:aesjambuv1 51.08? 81.64? 81.68? T:aes256otrpv2 51.13? 81.71? 81.75? T:aes256otrpv3 51.57? 82.43? 82.51? T:aes256otrpv1 56.45? 90.22? 90.32? T:deoxysi256v141 57.56? 91.94? 92.10? T:oceankeyakv1 57.91? 92.58? 92.67? T:seakeyakv1 100.91? 106.31? 160.41? T:aeadaes256ocbtaglen128v1 106.83? 106.86? 170.91? T:ketjesrv1 68.97? 110.31? 110.33? T:twine80n6t4clocv2 113.40 113.44 113.47 T:ketjesrv2 72.12? 115.37? 115.40? T:twine80n6t4clocv3 72.34? 115.41? 115.44? T:deoxysii128v141 80.11? 118.15? 127.09? T:aeadaes128ocbtaglen128v1 135.81? 135.88? 217.35? T:aezv4 142.16? 142.47? 227.44? T:ketjejrv1 144.04? 144.11? 230.55? T:aezv5 145.84 145.84 146.07 T:proest128otrv1 148.24 148.29 150.90 T:riverkeyakv1 107.59? 161.52? 161.60? T:deoxysii256v141 276.92 277.27 278.50 T:deoxysneq128128v13 277.70? 278.02? 443.93? T:deoxysneq128128v1 331.56? 334.43? 530.83? T:aezv3 338.20? 339.49? 541.13? T:twine80n6clocv1 363.93 363.99 364.93 T:deoxyseq128128v13 387.93? 389.19? 443.87? T:present80n6t4silcv3 262.24? 416.89? 417.92? T:ketjejrv2 436.03 436.52 441.06 T:deoxysneq256128v1 436.51? 440.77? 703.19? T:deoxyseq128128v1 480.55 480.92 485.78 T:aezv1 579.45 579.49 580.61 T:led80n6t4silcv3 580.17 580.29 584.39 T:deoxyseq256128v13 445.89? 697.90? 702.44? T:deoxysneq256128v13 1087.12 1093.29 1094.86 T:deoxyseq256128v1 4114.02? 4114.59? 6583.33? T:acorn128v3 4166.91 4168.56 4169.60 T:acorn128v2 4204.64? 6729.27? 6733.32? T:acorn128 9554.90 9556.23 9559.60 T:present80n6t4silcv2 9792.04? 15676.90? 15682.89? T:present80n6silcv1 10947.45? 17512.53? 17527.31? T:led80n6t4silcv2 10961.68? 17527.70? 17543.31? T:led80n6silcv1 23642.41? 23646.78? 37860.20? aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 4.82? 7.73? 7.73? T:morus1280256v1 7.81 7.82 7.83 T:morus1280128v2 4.94? 7.89? 7.90? T:morus1280256v2 8.07 8.07 8.10 T:morus1280128v1 5.59? 8.94? 8.94? T:morus640128v2 6.04? 9.12? 9.27? T:morus640128v1 9.97 9.98 10.00 T:norx6441v3 9.95? 10.28? 15.91? T:norx6441v2 11.60? 11.62? 18.55? T:norx6441v1 12.12 12.13 12.44 T:norx6444v2 12.17 12.19 12.35 T:norx6444v3 14.27? 14.40? 22.98? T:tiaoxinv1 14.98 15.00 15.00 T:norx6444v1 15.03? 15.06? 24.07? T:norx6461v2 16.26? 16.27? 25.99? T:norx3261v3 16.55? 16.58? 26.46? T:norx6461v1 16.82? 16.82? 26.89? T:ascon128av11 16.78? 17.13? 26.83? T:ascon96v1 11.01? 17.60? 17.61? T:norx3241v3 11.24? 17.78? 17.88? T:norx3241v2 18.26 18.28 18.34 T:lakekeyakv2 12.87? 20.57? 20.62? T:lakekeyakv1 12.98? 20.66? 20.69? T:norx3241v1 21.25 21.25 21.27 T:aegis256 22.20 22.28 22.44 T:seakeyakv2 14.53? 23.06? 23.10? T:norx6461v3 14.51? 23.19? 23.26? T:tiaoxinv2 15.69? 25.08? 25.11? T:aegis128l 25.31? 25.32? 40.50? T:ascon128v11 25.31? 25.65? 40.49? T:ascon128v1 25.79? 25.79? 41.26? ascon128v12 16.53? 25.98? 26.00? T:norx3261v2 17.18? 27.47? 27.47? ascon128av12 27.98? 28.01? 44.77? T:ketjeminorv2 28.37 28.39 28.42 T:oceankeyakv2 19.08? 30.49? 30.50? T:norx3261v1 20.47? 32.30? 32.32? T:riverkeyakv2 20.37? 32.48? 32.52? T:aegis128 32.96? 32.98? 52.66? T:aes128otrcv3 22.97? 36.72? 36.84? T:ketjemajorv2 38.64? 39.43? 61.05? T:aes256gcmv1 40.51? 40.54? 64.81? T:aes128otrpv1 41.96 41.99 42.01 T:aes128n8t8clocv2 42.68 42.70 42.73 T:aes128n8clocv1 43.84? 44.00? 70.31? T:aes128n8t8silcv2 43.94? 44.08? 70.33? T:aes128n12t8silcv2 44.60? 44.64? 71.27? T:aes128n12t8clocv3 47.05 47.07 47.09 T:aes128n12t8silcv3 29.89? 47.32? 47.38? T:lunarkeyakv2 47.90 47.91 47.95 T:aes128n8silcv1 48.56? 48.77? 77.69? T:aes256otrsv3 51.75 51.84 51.99 T:aes128gcmv1 36.34? 58.09? 58.12? T:aes128otrsv1 38.50? 58.91? 59.01? T:aes128otrsv2 59.30 59.30 59.31 T:proest256otrv1 37.27? 59.55? 59.64? T:aes128otrsv3 63.99 64.01 64.05 T:aes128otrpv2 65.15 65.24 65.30 T:aes128otrpv3 43.10? 68.94? 69.08? T:aes256otrcv3 44.26? 70.80? 70.89? T:aes128n12t8clocv2 72.89 72.89 73.22 T:aes128n12clocv1 75.15 75.21 75.26 T:aes256otrsv1 47.75? 76.32? 76.43? T:deoxysi128v141 76.43 76.44 76.53 T:aes256otrsv2 77.92 78.15 78.25 T:aes128n12silcv1 50.66? 81.02? 81.03? T:aesjambuv1 51.19? 81.84? 81.88? T:aes256otrpv2 51.26? 81.93? 81.94? T:aes256otrpv3 51.68? 82.65? 82.70? T:aes256otrpv1 56.54? 90.34? 90.45? T:deoxysi256v141 57.59? 92.13? 92.24? T:oceankeyakv1 58.31? 92.80? 92.83? T:seakeyakv1 106.97? 106.98? 171.13? T:ketjesrv1 100.80? 107.24? 160.08? T:aeadaes256ocbtaglen128v1 68.94? 110.29? 110.34? T:twine80n6t4clocv2 113.56 113.60 114.56 T:ketjesrv2 72.13? 115.36? 115.37? T:twine80n6t4clocv3 72.32? 115.63? 115.74? T:deoxysii128v141 79.08? 117.85? 125.79? T:aeadaes128ocbtaglen128v1 135.69? 138.31? 217.25? T:aezv4 142.30? 142.32? 227.68? T:ketjejrv1 145.84 145.86 145.92 T:proest128otrv1 143.91? 146.17? 230.26? T:aezv5 148.47 148.49 149.95 T:riverkeyakv1 101.17? 161.68? 161.87? T:deoxysii256v141 277.04 277.96 279.23 T:deoxysneq128128v13 277.71? 279.62? 443.93? T:deoxysneq128128v1 331.56? 334.00? 530.81? T:aezv3 338.17? 338.31? 541.11? T:twine80n6clocv1 363.58 364.10 365.01 T:deoxyseq128128v13 387.93? 388.39? 443.61? T:present80n6t4silcv3 262.36? 417.06? 417.16? T:ketjejrv2 436.02 436.34 438.07 T:deoxysneq256128v1 436.07? 438.38? 703.79? T:deoxyseq128128v1 480.24 480.56 484.77 T:aezv1 579.44 579.49 582.92 T:led80n6t4silcv3 580.34 580.42 584.03 T:deoxyseq256128v13 447.48? 698.14? 705.12? T:deoxysneq256128v13 1087.16 1093.43 1095.08 T:deoxyseq256128v1 1421.42? 1424.50? 2279.46? aes256gcmv1 4114.10? 4116.69? 6584.38? T:acorn128v3 4168.14 4168.91 4170.58 T:acorn128v2 4206.87? 6729.16? 6734.17? T:acorn128 9552.53 9554.76 9558.69 T:present80n6t4silcv2 9795.73? 15673.58? 15684.81? T:present80n6silcv1 10943.46? 17515.10? 17528.12? T:led80n6t4silcv2 10953.99? 17531.50? 17540.02? T:led80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 26.23? 26.90? 41.41? T:ascon96v1 26.64? 26.98? 41.82? T:ascon128av11 19.48? 30.05? 30.28? T:morus640128v1 20.34? 31.55? 32.47? T:morus640128v2 34.55? 34.81? 54.44? T:ascon128v1 34.59? 34.81? 54.77? T:ascon128v11 34.85? 35.40? 55.48? ascon128v12 36.44? 36.55? 57.81? T:norx6441v1 37.85? 38.23? 59.97? T:norx6441v2 38.08 38.30 38.48 T:norx6441v3 25.02? 38.96? 39.38? T:morus1280256v1 25.57? 40.19? 40.86? T:morus1280256v2 40.52 40.97 41.67 T:morus1280128v2 27.42? 42.75? 43.23? ascon128av12 42.38? 43.27? 66.80? T:norx3261v3 43.68 44.20 44.68 T:morus1280128v1 29.76? 45.12? 46.28? T:norx3241v1 29.43? 45.87? 45.98? T:norx3241v2 30.36? 47.13? 48.31? T:norx3241v3 50.59 50.88 51.51 T:aes128n8t8clocv2 53.02? 53.03? 84.57? T:norx6461v1 53.17 53.92 54.88 T:aes128n8clocv1 54.74? 54.81? 87.35? T:norx6461v2 60.01? 60.67? 95.89? T:aes128n8t8silcv2 60.38? 60.67? 95.92? T:aes128n12t8silcv2 64.46 65.02 65.76 T:aes128n12t8silcv3 42.34? 65.57? 67.09? T:norx3261v1 42.64? 67.02? 67.62? T:norx3261v2 68.40 69.09 69.51 T:aes128n8silcv1 45.69? 71.73? 72.91? T:lakekeyakv1 72.88 73.11 73.48 T:aegis256 48.28? 74.22? 77.00? T:riverkeyakv2 78.12? 79.63? 124.54? T:aes128otrcv3 80.79? 81.64? 128.92? T:aes128otrpv1 82.05 82.68 84.16 T:lakekeyakv2 53.14? 83.91? 84.27? T:norx6461v3 54.59? 84.87? 85.72? T:aes128n12t8clocv2 55.88? 88.47? 89.06? T:aes128n12t8clocv3 88.17? 88.84? 140.57? T:ketjeminorv2 89.66 89.73 90.14 T:norx6444v2 90.62 90.62 90.84 T:norx6444v3 90.96 91.88 92.81 T:aes128n12clocv1 59.93? 94.63? 95.55? T:aegis128 99.27? 99.64? 158.31? T:tiaoxinv1 68.70? 109.10? 109.73? T:aesjambuv1 70.06? 110.25? 111.18? T:aegis128l 109.84 111.22 112.96 T:aes128n12silcv1 114.63 115.11 115.16 T:norx6444v1 74.44? 117.63? 118.38? T:aes128otrsv2 78.23? 124.02? 124.88? T:aes128otrsv1 125.84 126.25 127.32 T:aes128otrpv3 80.38? 127.21? 128.10? T:aes128otrsv3 129.29 130.25 132.30 T:aes128otrpv2 85.84? 136.64? 137.12? T:deoxysi128v141 98.86? 149.21? 150.30? T:twine80n6t4clocv3 94.85? 150.26? 150.59? T:twine80n6t4clocv2 151.70 151.74 152.27 T:aes256otrsv2 150.48 151.92 152.70 T:aes256otrsv1 100.49? 159.53? 160.69? T:aes256otrcv3 100.49? 159.61? 160.38? T:tiaoxinv2 102.05? 161.69? 162.91? T:aes256otrsv3 103.20? 163.28? 163.51? T:aes256otrpv1 102.68? 163.47? 164.47? T:aes256otrpv2 102.94? 163.62? 164.32? T:aes256otrpv3 165.28? 166.84? 265.11? T:ketjesrv1 168.95 170.19 172.15 T:aezv4 173.93 174.56 175.04 T:proest256otrv1 179.84 180.31 181.24 T:ketjesrv2 182.88? 183.25? 291.91? T:ketjejrv1 184.88? 187.37? 293.53? T:aezv5 183.20? 192.89? 294.87? T:aes256gcmv1 123.57? 196.53? 197.46? T:deoxysii128v141 197.83 198.84 200.57 T:seakeyakv2 175.38? 220.54? 222.06? T:deoxysi256v141 149.66? 231.27? 239.13? T:ketjemajorv2 253.31 254.34 261.62 T:aes128gcmv1 256.80 257.54 259.25 T:riverkeyakv1 271.64? 271.94? 433.99? T:deoxysneq128128v13 281.25 281.62 282.52 T:proest128otrv1 300.73 301.81 304.45 T:oceankeyakv2 223.02? 332.80? 360.22? T:aeadaes128ocbtaglen128v1 259.69? 366.01? 419.75? T:aeadaes256ocbtaglen128v1 430.65? 431.59? 688.90? T:seakeyakv1 432.84 433.18 433.44 T:deoxysneq256128v1 435.22 435.37 436.04 T:deoxysneq128128v1 451.29 451.40 451.70 T:deoxyseq128128v13 481.23? 482.16? 590.34? T:present80n6t4silcv3 313.38? 495.48? 498.56? T:aezv1 541.83 542.32 542.39 T:ketjejrv2 366.38? 584.84? 585.95? T:twine80n6clocv1 424.75? 677.32? 678.51? T:deoxysii256v141 679.77 680.21 682.52 T:deoxyseq128128v1 685.34? 686.04? 1096.29? T:led80n6t4silcv3 440.71? 692.27? 695.43? T:deoxysneq256128v13 720.04? 720.52? 1151.58? T:deoxyseq256128v13 454.48? 723.85? 728.16? T:aezv3 470.33? 747.20? 748.98? T:lunarkeyakv2 626.23? 997.95? 1000.66? T:oceankeyakv1 670.68? 1072.38? 1072.83? T:deoxyseq256128v1 10677.26 10677.59 10690.32 T:present80n6t4silcv2 10942.77? 11040.37? 17507.53? T:present80n6silcv1 11018.22? 11519.01? 17583.16? T:led80n6silcv1 14632.34 14633.86 14722.77 T:acorn128 14643.36? 14734.12? 23427.85? T:acorn128v3 14849.24? 14938.27? 23758.91? T:acorn128v2 17545.50 17677.27 18458.84 T:led80n6t4silcv2 34430.74? 34436.53? 55080.52? aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 26.27? 26.76? 41.52? T:ascon96v1 26.60? 26.95? 42.01? T:ascon128av11 20.75? 32.17? 32.44? T:morus640128v1 21.86? 33.25? 33.73? T:morus640128v2 34.48? 35.06? 54.96? T:ascon128v11 34.77? 35.11? 55.19? T:ascon128v1 35.33? 35.62? 56.26? ascon128v12 36.73? 37.37? 58.12? T:norx6441v1 38.70? 38.97? 61.34? T:norx6441v2 25.20? 39.01? 39.78? T:morus1280256v1 39.08 39.19 39.56 T:norx6441v3 25.53? 40.30? 41.08? T:morus1280256v2 41.16 41.41 42.49 T:morus1280128v2 27.50? 43.05? 43.53? ascon128av12 42.09? 43.20? 66.73? T:norx3261v3 29.65? 45.38? 46.31? T:norx3241v1 30.02? 45.61? 45.79? T:norx3241v2 29.87? 46.20? 46.80? T:norx3241v3 51.02? 51.47? 81.12? T:norx6461v1 51.47 51.88 52.32 T:morus1280128v1 51.91 52.10 52.40 T:aes128n8t8clocv2 55.07 55.26 56.97 T:aes128n8clocv1 56.59? 56.89? 90.29? T:norx6461v2 60.23? 60.63? 95.70? T:aes128n12t8silcv2 60.38? 60.89? 96.04? T:aes128n8t8silcv2 65.05 65.27 65.76 T:aes128n12t8silcv3 42.38? 66.20? 67.50? T:norx3261v1 42.34? 66.57? 67.13? T:norx3261v2 68.13 68.43 68.70 T:aes128n8silcv1 44.72? 68.73? 69.70? T:lakekeyakv1 73.29 73.66 73.85 T:aegis256 48.77? 76.08? 77.22? T:riverkeyakv2 77.78? 78.11? 124.05? T:aes128otrcv3 80.79 81.49 82.83 T:lakekeyakv2 81.38? 82.09? 130.29? T:aes128otrpv1 53.99? 85.35? 86.13? T:norx6461v3 87.50? 88.09? 139.53? T:ketjeminorv2 56.59? 88.91? 89.58? T:aes128n12t8clocv2 90.47 90.62 90.91 T:norx6444v2 91.29 91.48 91.81 T:norx6444v3 58.07? 91.77? 92.18? T:aes128n12t8clocv3 60.12? 94.81? 95.26? T:aegis128 96.52 97.59 97.90 T:aes128n12clocv1 100.02? 100.34? 159.42? T:tiaoxinv1 70.02? 110.02? 110.25? T:aesjambuv1 70.03? 111.55? 112.15? T:aegis128l 110.07 112.66 114.41 T:aes128n12silcv1 113.26 113.34 113.85 T:norx6444v1 76.74? 122.20? 123.27? T:aes128otrsv2 78.82? 124.88? 125.39? T:aes128otrsv1 127.36 127.92 128.43 T:aes128otrpv3 81.16? 128.10? 128.55? T:aes128otrsv3 129.26 130.36 131.03 T:aes128otrpv2 111.22? 148.99? 149.62? T:twine80n6t4clocv3 95.11? 151.41? 151.62? T:twine80n6t4clocv2 155.27 155.56 156.82 T:aes256otrsv1 155.23 155.71 156.23 T:aes256otrsv2 98.64? 156.60? 156.94? T:deoxysi128v141 99.16? 158.80? 159.12? T:aes256otrcv3 100.34? 160.84? 161.84? T:tiaoxinv2 102.84? 162.80? 163.91? T:aes256otrsv3 103.65? 163.84? 165.02? T:aes256otrpv3 103.61? 163.95? 164.80? T:aes256otrpv2 103.95? 165.36? 165.73? T:aes256otrpv1 165.66? 166.88? 266.59? T:ketjesrv1 166.36 167.18 170.00 T:aezv4 175.04 175.16 175.78 T:proest256otrv1 182.91 182.95 182.98 T:ketjesrv2 183.77? 184.40? 292.87? T:aezv5 184.06? 184.73? 293.79? T:ketjejrv1 187.59? 191.41? 296.70? T:aes256gcmv1 124.32? 195.57? 196.64? T:deoxysii128v141 198.09 199.61 200.80 T:seakeyakv2 143.43? 228.45? 229.60? T:ketjemajorv2 153.74? 242.51? 243.55? T:deoxysi256v141 249.74 251.67 254.27 T:aes128gcmv1 257.35 258.13 259.25 T:riverkeyakv1 282.55 282.84 283.14 T:proest128otrv1 300.25 302.99 309.31 T:oceankeyakv2 307.97? 308.56? 492.18? T:deoxysneq128128v13 236.16? 349.31? 374.09? T:aeadaes128ocbtaglen128v1 270.94? 389.83? 429.88? T:aeadaes256ocbtaglen128v1 431.70? 433.73? 689.30? T:seakeyakv1 451.59 451.77 452.33 T:deoxyseq128128v13 483.05? 483.95? 552.19? T:present80n6t4silcv3 484.39 484.91 485.24 T:deoxysneq256128v1 493.23 493.45 494.52 T:deoxysneq128128v1 318.17? 506.13? 507.43? T:aezv1 549.26 549.59 549.96 T:ketjejrv2 367.57? 585.66? 587.03? T:twine80n6clocv1 425.27? 678.02? 679.70? T:deoxysii256v141 687.12? 687.30? 1098.84? T:led80n6t4silcv3 719.96? 720.77? 1151.28? T:deoxyseq256128v13 451.25? 721.18? 724.71? T:aezv3 477.38? 748.27? 749.72? T:lunarkeyakv2 490.52? 775.66? 777.07? T:deoxysneq256128v13 791.47 797.59 798.26 T:deoxyseq128128v1 624.55? 997.17? 998.84? T:oceankeyakv1 824.16? 1236.71? 1237.30? T:deoxyseq256128v1 10677.52 10678.00 10693.02 T:present80n6t4silcv2 10840.58? 10908.56? 17317.35? T:led80n6silcv1 10942.18? 11055.88? 17507.69? T:present80n6silcv1 14666.77 14667.34 14755.36 T:acorn128 14683.06? 14772.65? 23493.65? T:acorn128v3 14799.19? 14883.16? 23678.30? T:acorn128v2 17257.60 17331.78 17419.55 T:led80n6t4silcv2 34431.41? 34474.31? 55081.23? aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 26.20? 26.38? 41.90? T:ascon96v1 26.57? 26.87? 41.79? T:ascon128av11 19.78? 31.13? 31.14? T:morus640128v1 20.81? 32.73? 32.92? T:morus640128v2 34.40? 34.70? 54.29? T:ascon128v1 34.44? 34.70? 54.81? T:ascon128v11 35.00? 35.18? 55.59? ascon128v12 36.84? 37.04? 58.45? T:norx6441v1 24.20? 38.45? 38.45? T:morus1280256v1 38.71? 39.19? 61.67? T:norx6441v2 39.12 39.23 39.63 T:norx6441v3 25.20? 40.08? 40.08? T:morus1280256v2 40.63 40.63 40.82 T:morus1280128v2 41.93? 42.01? 66.69? T:norx3261v3 27.05? 42.38? 42.79? ascon128av12 28.32? 44.53? 44.64? T:norx3241v1 28.69? 45.68? 45.83? T:norx3241v2 29.06? 46.20? 46.23? T:norx3241v3 50.88 50.88 50.95 T:morus1280128v1 51.02? 51.21? 81.38? T:norx6461v1 51.51 51.73 52.03 T:aes128n8t8clocv2 54.73 54.95 56.67 T:aes128n8clocv1 56.85? 57.00? 90.66? T:norx6461v2 59.86? 60.05? 95.82? T:aes128n8t8silcv2 60.20? 60.52? 96.00? T:aes128n12t8silcv2 64.72 64.76 64.98 T:aes128n12t8silcv3 42.23? 65.27? 65.31? T:norx3261v1 41.64? 66.31? 66.35? T:norx3261v2 67.98 68.13 68.21 T:aes128n8silcv1 44.49? 69.06? 69.58? T:lakekeyakv1 73.62 74.03 74.26 T:aegis256 47.46? 74.52? 77.15? T:riverkeyakv2 77.74? 77.97? 124.02? T:aes128otrcv3 81.64? 82.01? 130.55? T:aes128otrpv1 82.23 82.61 82.90 T:lakekeyakv2 54.33? 85.69? 86.46? T:norx6461v3 55.59? 88.17? 88.58? T:aes128n12t8clocv2 87.95? 88.25? 140.02? T:ketjeminorv2 90.52 90.70 90.96 T:norx6444v2 57.59? 91.11? 91.47? T:aes128n12t8clocv3 91.66 91.77 91.99 T:norx6444v3 59.34? 94.30? 94.37? T:aegis128 95.86 96.78 97.20 T:aes128n12clocv1 99.09? 99.72? 157.83? T:tiaoxinv1 68.77? 109.44? 109.44? T:aesjambuv1 108.95 109.47 112.26 T:aes128n12silcv1 69.99? 110.66? 111.45? T:aegis128l 113.41 113.41 113.55 T:norx6444v1 76.62? 121.91? 122.98? T:aes128otrsv2 78.67? 124.98? 125.50? T:aes128otrsv1 81.01? 127.55? 128.73? T:aes128otrsv3 127.91 128.44 128.73 T:aes128otrpv3 129.77 130.21 130.55 T:aes128otrpv2 96.93? 148.84? 149.18? T:twine80n6t4clocv3 94.81? 150.81? 151.14? T:twine80n6t4clocv2 98.79? 156.45? 157.27? T:deoxysi128v141 155.12 156.60 157.72 T:aes256otrsv2 155.08 156.83 157.20 T:aes256otrsv1 99.27? 158.49? 159.05? T:aes256otrcv3 99.49? 159.34? 159.65? T:tiaoxinv2 102.23? 162.84? 163.58? T:aes256otrsv3 103.09? 163.95? 164.50? T:aes256otrpv3 103.39? 164.25? 164.77? T:aes256otrpv2 103.46? 165.18? 165.48? T:aes256otrpv1 166.02 166.32 169.81 T:aezv4 165.98? 167.07? 266.96? T:ketjesrv1 169.59 169.77 170.19 T:proest256otrv1 182.77? 183.28? 292.42? T:aezv5 183.39 183.43 183.66 T:ketjesrv2 184.36? 185.02? 294.05? T:ketjejrv1 183.05? 188.92? 299.06? T:aes256gcmv1 123.24? 195.31? 196.38? T:deoxysii128v141 197.61 198.20 198.61 T:seakeyakv2 144.05? 229.22? 233.94? T:ketjemajorv2 152.00? 242.92? 243.44? T:deoxysi256v141 251.75 252.57 255.35 T:aes128gcmv1 257.39 257.39 258.80 T:riverkeyakv1 282.29 282.33 282.55 T:proest128otrv1 300.03 302.07 309.38 T:oceankeyakv2 308.27? 308.63? 492.52? T:deoxysneq128128v13 244.96? 346.93? 388.91? T:aeadaes128ocbtaglen128v1 286.04? 381.48? 428.58? T:aeadaes256ocbtaglen128v1 433.18? 434.40? 690.20? T:seakeyakv1 451.84 451.88 452.22 T:deoxyseq128128v13 482.98? 483.57? 552.00? T:present80n6t4silcv3 484.09 484.53 484.88 T:deoxysneq256128v1 493.07 493.26 493.59 T:deoxysneq128128v1 316.14? 505.09? 505.51? T:aezv1 549.59 549.66 550.22 T:ketjejrv2 366.79? 584.59? 586.88? T:twine80n6clocv1 476.63? 679.73? 680.81? T:deoxysii256v141 687.01? 687.23? 1098.70? T:led80n6t4silcv3 449.88? 720.11? 724.00? T:aezv3 719.88? 720.18? 1151.62? T:deoxyseq256128v13 475.33? 748.02? 749.54? T:lunarkeyakv2 490.84? 776.21? 777.19? T:deoxysneq256128v13 791.43 797.67 807.84 T:deoxyseq128128v1 623.62? 995.50? 998.20? T:oceankeyakv1 772.99? 1236.27? 1236.63? T:deoxyseq256128v1 10677.70 10677.88 10691.14 T:present80n6t4silcv2 10942.55? 10966.01? 17509.77? T:present80n6silcv1 10951.49? 11084.16? 17469.20? T:led80n6silcv1 12163.53? 12255.74? 19461.79? aes256gcmv1 14666.81 14667.55 14750.27 T:acorn128 14682.80? 14771.91? 23492.73? T:acorn128v3 14798.81? 14882.64? 23680.80? T:acorn128v2 17391.38 17512.66 17593.77 T:led80n6t4silcv2