VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20241022

[Page version: 20241215 22:59:43]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.14 0.14 0.15 T:tiaoxinv1 0.14 0.15 0.15 T:tiaoxinv2 0.14? 0.18? 0.20? T:aeadaes128ocbtaglen128v1 0.18 0.19 0.19 T:aegis128l 0.19 0.20 0.20 aegis128l 0.23? 0.25? 0.26? T:aeadaes256ocbtaglen128v1 0.32 0.32 0.32 T:aegis128 0.32 0.33 0.33 aegis256 0.35 0.36 0.37 T:aezv4 0.36 0.37 0.37 T:aezv3 0.38 0.38 0.39 T:aezv5 0.11? 0.39? 0.41? T:aeadaes192ocbtaglen128v1 0.40 0.41 0.42 T:aes128otrsv3 0.41 0.42 0.42 T:aes128otrcv3 0.37? 0.43? 0.47? T:aes128gcmv1 0.40? 0.44? 0.48? T:aes256gcmv1 0.47 0.48 0.51 T:morus1280128v2 0.47 0.49 0.49 T:morus1280256v2 0.47 0.49 0.51 T:morus1280128v1 0.48 0.50 0.51 T:morus1280256v1 0.52 0.54 0.56 T:deoxysi128v141 0.54 0.55 0.55 T:aes256otrsv3 0.56 0.56 0.57 T:aes256otrcv3 0.58 0.61 0.64 T:deoxysi256v141 0.58 0.61 0.62 T:deoxysneq128128v1 0.69 0.70 0.71 T:deoxysneq256128v1 0.68? 0.74? 0.76? T:oceankeyakv2 0.74 0.75 0.77 T:morus640128v2 0.74 0.76 0.76 T:morus640128v1 0.74? 0.78? 0.84? T:lunarkeyakv2 0.85 0.87 0.88 T:norx6444v3 0.99 1.01 1.03 T:aes128otrpv3 1.11 1.15 1.20 T:deoxysii128v141 1.18 1.19 1.19 T:colm0v1 1.22 1.25 1.26 T:aes256otrpv3 1.20 1.26 1.28 T:deoxysii256v141 1.20? 1.29? 1.37? T:deoxyseq128128v1 1.35 1.40 1.44 T:seakeyakv2 1.43 1.45 1.47 T:deoxyseq256128v1 2.17 2.18 2.19 T:norx6441v3 2.17 2.19 2.21 T:norx6441v2 2.53 2.56 2.57 T:norx6441v1 2.62 2.62 2.63 T:aes128n12t8silcv3 2.62 2.62 2.63 T:aes128n8t8silcv2 2.62 2.62 2.62 T:aes128n12t8silcv2 2.62 2.63 2.63 T:aes128n12t8clocv2 2.62 2.63 2.63 T:aes128n12t8clocv3 2.63 2.63 2.63 T:aes128n8t8clocv2 3.06 3.14 3.20 T:lakekeyakv1 3.21 3.22 3.25 T:norx6461v2 3.20 3.22 3.28 T:norx6444v2 3.22 3.23 3.25 T:norx6461v3 3.31 3.38 3.47 T:lakekeyakv2 3.54 3.54 3.54 T:norx3241v3 3.54 3.54 3.55 T:norx3241v2 3.86 3.89 3.92 T:norx6461v1 3.90 3.97 4.01 T:norx6444v1 4.25 4.25 4.25 T:norx3241v1 5.27 5.27 5.28 T:norx3261v3 5.27 5.27 5.28 T:norx3261v2 5.28 5.28 5.30 T:aesjambuv1 5.31 5.31 5.32 ascon128av12 5.44 5.44 5.44 T:ascon128av11 5.38 5.45 5.50 T:ketjemajorv2 5.56 5.56 5.57 T:ascon96v1 6.41 6.48 6.55 T:ketjeminorv2 7.50 7.51 7.51 T:acorn128v2 7.52 7.52 7.53 T:norx3261v1 7.54 7.57 7.60 T:riverkeyakv2 7.74 7.75 7.75 ascon128v12 8.25 8.25 8.26 T:ascon128v11 8.25 8.25 8.26 T:ascon128v1 12.47 12.50 12.50 T:acorn128v3 12.58 12.61 12.64 T:aes128otrpv1 12.59 12.62 12.64 T:aes128otrsv1 12.61 12.62 12.64 T:aes128otrsv2 12.61 12.63 12.66 T:aes128otrpv2 16.35 16.37 16.39 T:aes256otrsv2 16.35 16.38 16.42 T:aes256otrpv1 16.37 16.39 16.41 T:aes256otrsv1 16.37 16.40 16.43 T:aes256otrpv2 18.11 18.17 18.23 T:proest256otrv1 20.21 20.52 20.61 T:twine80n6t4clocv2 21.49 21.53 21.94 T:twine80n6t4clocv3 21.09? 21.80? 30.73? T:aes128n8clocv1 21.76 21.80 21.86 T:aes128n12clocv1 25.23 25.29 25.39 T:aeadaes128ocbtaglen96v1 25.28 25.29 25.31 T:aeadaes128ocbtaglen64v1 26.70 26.74 26.77 T:ketjesrv1 29.01 29.03 29.09 T:aeadaes192ocbtaglen96v1 29.02 29.04 29.20 T:aeadaes192ocbtaglen64v1 30.15 30.25 30.29 T:ketjesrv2 32.76 32.92 33.08 T:aeadaes256ocbtaglen96v1 32.90 32.95 33.14 T:aeadaes256ocbtaglen64v1 42.98 43.05 43.57 T:proest128otrv1 69.75 70.21 70.42 T:colm127v1 70.80 70.82 70.85 T:ketjejrv1 70.66 70.93 71.06 T:ketjejrv2 72.92 72.95 72.96 T:present80n6t4silcv3 77.55 77.84 77.96 T:deoxysneq128128v13 83.96 84.61 85.20 T:deoxysneq256128v13 124.98 128.87 136.01 T:led80n6t4silcv3 141.09 141.43 141.60 T:aezv1 156.93 157.14 157.92 T:deoxyseq128128v13 169.05 169.26 171.50 T:deoxyseq256128v13 275.67? 317.93? 537.63? aes256gcmv1 469.58? 509.14? 575.69? T:acorn128 2231.93 2233.27 2234.02 T:led80n6t4silcv2 2240.42 2242.29 2244.69 T:led80n6silcv1 3603.75 3604.43 3606.27 T:present80n6silcv1 3609.11 3611.40 3612.91 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.17? 0.18? 0.20? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.19 0.20 0.21 aegis128l 0.24 0.25 0.26 T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.34 aegis256 0.30? 0.33? 0.36? T:tiaoxinv1 0.32? 0.37? 0.37? T:tiaoxinv2 0.36 0.37 0.37 T:aezv4 0.36 0.37 0.38 T:aezv3 0.38 0.38 0.39 T:aezv5 0.38 0.40 0.41 T:aeadaes192ocbtaglen128v1 0.36? 0.42? 0.45? T:aes128gcmv1 0.44 0.44 0.44 T:aes128otrcv3 0.43 0.45 0.45 T:aes128otrsv3 0.42? 0.47? 0.49? T:aes256gcmv1 0.46 0.47 0.50 T:morus1280256v1 0.47 0.48 0.51 T:morus1280256v2 0.47 0.48 0.49 T:morus1280128v2 0.49 0.51 0.52 T:morus1280128v1 0.57 0.57 0.58 T:aes256otrcv3 0.57 0.58 0.58 T:aes256otrsv3 0.58 0.59 0.60 T:deoxysi128v141 0.64 0.65 0.66 T:deoxysneq128128v1 0.63? 0.68? 0.71? T:deoxysi256v141 0.68 0.69 0.71 T:deoxysneq256128v1 0.70? 0.75? 0.80? T:oceankeyakv2 0.75 0.75 0.75 T:morus640128v2 0.77 0.78 0.79 T:morus640128v1 0.85 0.87 0.89 T:norx6444v3 0.88 0.92 0.94 T:lunarkeyakv2 0.98? 0.99? 1.09? T:aes128otrpv3 1.09? 1.13? 1.22? T:deoxysii128v141 1.15 1.17 1.23 T:colm0v1 1.18 1.25 1.28 T:deoxysii256v141 1.20 1.25 1.29 T:aes256otrpv3 1.28 1.34 1.37 T:deoxyseq128128v1 1.42 1.44 1.46 T:deoxyseq256128v1 1.46 1.49 1.51 T:seakeyakv2 2.14 2.16 2.18 T:norx6441v2 2.15 2.17 2.18 T:norx6441v3 2.56 2.56 2.57 T:aes128n12t8clocv3 2.54 2.56 2.67 T:aes128n8t8silcv2 2.56 2.56 2.57 T:aes128n12t8clocv2 2.56 2.56 2.58 T:aes128n8t8clocv2 2.54 2.57 2.59 T:aes128n12t8silcv2 2.55 2.57 2.59 T:aes128n12t8silcv3 2.55 2.57 2.58 T:norx6441v1 3.11 3.14 3.18 T:lakekeyakv1 3.22 3.23 3.26 T:norx6461v2 3.22 3.23 3.25 T:norx6461v3 3.20 3.24 3.26 T:norx6444v2 3.15 3.33 3.39 T:lakekeyakv2 3.58 3.59 3.60 T:norx3241v3 3.60 3.63 3.64 T:norx3241v2 3.85 3.87 3.90 T:norx6461v1 3.94 3.98 4.04 T:norx6444v1 4.31 4.32 4.35 T:norx3241v1 5.19 5.25 5.28 T:ketjemajorv2 5.25 5.25 5.25 T:ascon128av11 5.30 5.31 5.32 ascon128av12 5.32 5.33 5.34 T:norx3261v2 5.32 5.33 5.35 T:norx3261v3 5.50 5.50 5.50 T:ascon96v1 5.73 5.79 5.86 T:aesjambuv1 6.89 6.98 7.18 T:ketjeminorv2 7.32 7.32 7.36 T:norx3261v1 7.50 7.52 7.52 T:acorn128v2 7.61 7.61 7.63 ascon128v12 7.78 7.81 7.89 T:riverkeyakv2 7.87 7.88 7.89 T:ascon128v11 7.88 7.89 7.89 T:ascon128v1 12.50 12.50 12.51 T:acorn128v3 12.93 12.97 13.04 T:aes128otrsv2 12.96 13.01 13.04 T:aes128otrpv2 12.95 13.01 13.06 T:aes128otrsv1 12.97 13.02 13.09 T:aes128otrpv1 16.70 16.76 16.81 T:aes256otrsv2 16.70 16.77 16.80 T:aes256otrpv2 16.75 16.77 16.84 T:aes256otrsv1 16.73 16.78 16.82 T:aes256otrpv1 18.74 18.82 18.91 T:proest256otrv1 19.80 19.85 20.29 T:twine80n6t4clocv2 21.41 21.54 21.86 T:twine80n6t4clocv3 22.19? 22.91? 31.98? T:aes128n8clocv1 22.91 22.95 22.99 T:aes128n12clocv1 22.73 22.96 23.16 T:ketjesrv2 27.82 27.90 28.01 T:ketjesrv1 34.60 34.70 34.86 T:aeadaes128ocbtaglen96v1 34.62 34.72 35.01 T:aeadaes128ocbtaglen64v1 40.27 40.32 40.34 T:aeadaes192ocbtaglen96v1 40.36 40.45 40.49 T:aeadaes192ocbtaglen64v1 43.67 43.83 44.01 T:proest128otrv1 45.90 45.94 46.08 T:aeadaes256ocbtaglen64v1 45.93 46.04 46.10 T:aeadaes256ocbtaglen96v1 70.10 70.25 70.33 T:ketjejrv2 72.56 72.62 72.68 T:ketjejrv1 70.22 73.00 73.07 T:present80n6t4silcv3 85.39 86.23 86.43 T:colm127v1 108.53 108.77 109.74 T:deoxysneq256128v13 115.21 115.75 117.05 T:deoxysneq128128v13 125.90 126.99 133.71 T:led80n6t4silcv3 141.24 141.42 141.80 T:aezv1 156.67 157.09 157.20 T:deoxyseq128128v13 169.42 169.60 171.33 T:deoxyseq256128v13 282.30? 298.25? 425.49? aes256gcmv1 478.87 505.74 516.59 T:acorn128 2229.36 2231.17 2233.75 T:led80n6t4silcv2 2237.85 2241.35 2242.51 T:led80n6silcv1 3601.96 3603.32 3606.23 T:present80n6silcv1 3607.63 3609.21 3610.61 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13? 0.14? 0.19? T:aezv4 0.13? 0.14? 0.19? T:aezv3 0.09? 0.15? 0.20? T:aezv5 0.18 0.18 0.19 T:aeadaes128ocbtaglen128v1 0.19 0.20 0.20 T:aegis128l 0.22? 0.24? 0.25? aegis128l -0.03? 0.25? 0.54? T:aeadaes256ocbtaglen128v1 0.31 0.32 0.32 T:aegis128 0.27? 0.32? 0.38? T:tiaoxinv2 0.29? 0.36? 0.38? T:tiaoxinv1 0.31? 0.39? 0.39? aegis256 0.39? 0.40? 0.66? T:aeadaes192ocbtaglen128v1 0.41? 0.43? 0.46? T:aes128gcmv1 0.43 0.44 0.44 T:aes128otrcv3 0.44 0.44 0.45 T:aes128otrsv3 0.44? 0.46? 0.49? T:aes256gcmv1 0.47 0.48 0.48 T:morus1280256v2 0.47 0.48 0.51 T:morus1280256v1 0.47 0.48 0.49 T:morus1280128v1 0.46? 0.51? 0.52? T:morus1280128v2 0.57 0.57 0.58 T:aes256otrcv3 0.57 0.57 0.58 T:aes256otrsv3 0.58 0.59 0.60 T:deoxysi128v141 0.65 0.65 0.66 T:deoxysneq128128v1 0.67 0.68 0.68 T:deoxysi256v141 0.68 0.70 0.72 T:deoxysneq256128v1 0.76 0.78 0.79 T:morus640128v2 0.77 0.78 0.80 T:morus640128v1 0.72? 0.79? 0.82? T:oceankeyakv2 0.86 0.87 0.89 T:norx6444v3 0.89 0.90 0.93 T:lunarkeyakv2 0.96 1.00 1.03 T:aes128otrpv3 1.10 1.12 1.20 T:deoxysii128v141 1.07? 1.16? 1.23? T:colm0v1 1.24 1.25 1.27 T:deoxysii256v141 1.25 1.27 1.30 T:aes256otrpv3 1.32 1.34 1.39 T:deoxyseq128128v1 1.42 1.44 1.44 T:deoxyseq256128v1 1.48 1.51 1.56 T:seakeyakv2 2.14 2.15 2.17 T:norx6441v2 2.15 2.17 2.17 T:norx6441v3 2.56 2.56 2.62 T:aes128n12t8clocv3 2.45 2.56 2.67 T:aes128n8t8silcv2 2.56 2.56 2.62 T:aes128n12t8clocv2 2.56 2.56 2.62 T:aes128n8t8clocv2 2.56 2.58 2.59 T:norx6441v1 2.45 2.67 2.68 T:aes128n12t8silcv3 2.45 2.67 2.67 T:aes128n12t8silcv2 3.10 3.16 3.17 T:lakekeyakv1 3.18 3.22 3.32 T:norx6444v2 3.23 3.25 3.28 T:norx6461v3 3.27 3.29 3.30 T:norx6461v2 3.19 3.31 3.46 T:lakekeyakv2 3.58 3.60 3.62 T:norx3241v3 3.58 3.61 3.63 T:norx3241v2 3.88 3.98 4.00 T:norx6461v1 3.96 4.04 4.08 T:norx6444v1 4.35 4.36 4.37 T:norx3241v1 5.20 5.25 5.27 T:ketjemajorv2 5.24 5.25 5.27 T:ascon128av11 5.31 5.31 5.31 ascon128av12 5.32 5.32 5.35 T:norx3261v3 5.32 5.33 5.33 T:norx3261v2 5.50 5.50 5.52 T:ascon96v1 5.73 5.75 5.86 T:aesjambuv1 6.96 7.03 7.20 T:ketjeminorv2 7.32 7.32 7.36 T:norx3261v1 7.51 7.51 7.52 T:acorn128v2 7.62 7.62 7.64 ascon128v12 7.78 7.83 7.93 T:riverkeyakv2 7.87 7.88 7.90 T:ascon128v11 7.87 7.90 7.90 T:ascon128v1 12.49 12.50 12.51 T:acorn128v3 12.96 12.98 13.07 T:aes128otrsv2 12.97 13.00 13.06 T:aes128otrpv2 12.98 13.01 13.06 T:aes128otrpv1 12.98 13.02 13.08 T:aes128otrsv1 16.73 16.77 16.82 T:aes256otrpv1 16.73 16.79 16.82 T:aes256otrpv2 16.77 16.80 16.86 T:aes256otrsv1 16.75 16.81 16.89 T:aes256otrsv2 18.77 18.82 18.87 T:proest256otrv1 19.81 20.16 20.33 T:twine80n6t4clocv2 21.39 21.46 21.81 T:twine80n6t4clocv3 22.25? 22.90? 31.81? T:aes128n8clocv1 22.93 22.97 23.00 T:aes128n12clocv1 22.96 23.08 23.32 T:ketjesrv2 27.80 27.98 28.01 T:ketjesrv1 34.59 34.64 34.74 T:aeadaes128ocbtaglen64v1 34.65 34.68 34.70 T:aeadaes128ocbtaglen96v1 40.22 40.26 40.30 T:aeadaes192ocbtaglen96v1 40.25 40.31 40.35 T:aeadaes192ocbtaglen64v1 43.54 43.73 44.10 T:proest128otrv1 45.86 45.90 45.93 T:aeadaes256ocbtaglen64v1 45.96 46.06 46.11 T:aeadaes256ocbtaglen96v1 70.07 70.28 70.45 T:ketjejrv2 72.60 72.62 72.68 T:ketjejrv1 70.23 73.28 73.40 T:present80n6t4silcv3 84.64 84.98 85.43 T:colm127v1 108.45 108.61 109.45 T:deoxysneq256128v13 115.19 115.49 116.36 T:deoxysneq128128v13 125.91? 126.23? 144.82? T:led80n6t4silcv3 140.90 141.05 141.28 T:aezv1 156.41 156.54 156.63 T:deoxyseq128128v13 168.70 168.92 171.36 T:deoxyseq256128v13 276.91? 287.71? 420.41? aes256gcmv1 497.19? 560.65? 566.21? T:acorn128 2230.59 2232.30 2233.82 T:led80n6t4silcv2 2241.16 2241.71 2242.97 T:led80n6silcv1 3602.81 3605.32 3606.50 T:present80n6silcv1 3606.08 3607.33 3620.07 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.11 0.12 0.12 T:tiaoxinv2 0.11? 0.12? 0.13? T:tiaoxinv1 0.13? 0.17? 0.19? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 T:aegis128l 0.17 0.18 0.18 aegis128l 0.11? 0.24? 0.37? T:aeadaes256ocbtaglen128v1 0.24 0.25 0.26 T:aezv3 0.25 0.26 0.26 T:aezv4 0.25 0.26 0.27 T:aezv5 0.30 0.32 0.32 T:aegis128 0.32 0.32 0.32 aegis256 0.31? 0.33? 0.36? T:aes128gcmv1 0.31? 0.34? 0.36? T:aes256gcmv1 0.25? 0.39? 0.40? T:aeadaes192ocbtaglen128v1 0.42 0.43 0.43 T:aes128otrcv3 0.46 0.47 0.48 T:morus1280128v2 0.46 0.48 0.49 T:morus1280256v2 0.46 0.50 0.51 T:morus1280128v1 0.46 0.50 0.51 T:morus1280256v1 0.50 0.54 0.55 T:deoxysi128v141 0.56 0.57 0.57 T:aes256otrcv3 0.56 0.60 0.62 T:deoxysi256v141 0.58 0.61 0.63 T:deoxysneq128128v1 0.61 0.64 0.66 T:oceankeyakv2 0.70 0.70 0.71 T:deoxysneq256128v1 0.73 0.74 0.75 T:morus640128v2 0.74 0.75 0.76 T:morus640128v1 0.80 0.84 0.87 T:deoxysii128v141 0.83 0.84 0.85 T:colm0v1 0.90 0.93 0.95 T:lunarkeyakv2 0.92 0.94 0.97 T:deoxysii256v141 0.88? 0.97? 1.03? T:deoxyseq128128v1 1.01 1.05 1.06 T:aes128otrpv3 1.09 1.14 1.16 T:deoxyseq256128v1 1.16 1.18 1.20 T:seakeyakv2 1.25 1.27 1.28 T:aes256otrpv3 1.48 1.49 1.49 T:aes128otrsv3 1.50 1.51 1.52 T:norx6444v3 2.05 2.06 2.06 T:aes256otrsv3 2.12 2.13 2.15 T:norx6441v2 2.14 2.14 2.15 T:norx6441v3 2.56 2.57 2.58 T:norx6441v1 2.59 2.59 2.59 T:aes128n8t8clocv2 2.59 2.59 2.59 T:aes128n12t8silcv3 2.59 2.59 2.60 T:aes128n12t8clocv3 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.60 T:aes128n12t8clocv2 2.59 2.59 2.59 T:aes128n12t8silcv2 2.83 2.89 2.92 T:lakekeyakv2 2.97 2.98 2.99 T:norx6444v2 2.99 3.00 3.04 T:lakekeyakv1 3.12 3.14 3.19 T:norx6461v3 3.19 3.20 3.21 T:norx6461v2 3.55 3.55 3.55 T:norx3241v3 3.55 3.55 3.55 T:norx3241v2 3.62 3.64 3.65 T:norx6444v1 3.77 3.77 3.84 T:norx6461v1 4.25 4.25 4.25 T:norx3241v1 4.74 4.79 4.82 T:ketjemajorv2 5.27 5.27 5.28 T:aesjambuv1 5.27 5.27 5.27 T:norx3261v2 5.27 5.27 5.28 T:norx3261v3 5.28 5.29 5.30 ascon128av12 5.35 5.35 5.35 T:ascon128av11 5.37 5.38 5.39 T:ascon96v1 5.42 5.46 5.48 T:riverkeyakv2 6.11 6.15 6.18 T:ketjeminorv2 7.52 7.52 7.52 T:acorn128v2 7.52 7.53 7.53 T:norx3261v1 7.62 7.63 7.64 ascon128v12 8.06 8.07 8.08 T:ascon128v11 8.06 8.07 8.08 T:ascon128v1 12.04 12.06 12.08 T:aes128otrpv1 12.06 12.08 12.13 T:aes128otrpv2 12.19 12.21 12.23 T:aes128otrsv1 12.20 12.21 12.23 T:aes128otrsv2 12.55 12.56 12.57 T:acorn128v3 15.84 15.85 15.94 T:aes256otrpv2 15.82 15.85 15.87 T:aes256otrpv1 15.93 15.95 15.98 T:aes256otrsv2 15.96 15.99 16.01 T:aes256otrsv1 16.68 16.70 16.71 T:aes128n12clocv1 16.29? 16.72? 23.37? T:aes128n8clocv1 18.63 18.65 18.67 T:proest256otrv1 19.90 20.30 20.33 T:twine80n6t4clocv2 21.38 21.45 21.62 T:twine80n6t4clocv3 24.25 24.28 24.61 T:aeadaes128ocbtaglen96v1 24.24 24.30 24.37 T:aeadaes128ocbtaglen64v1 24.45 24.48 24.52 T:ketjesrv1 25.62 25.68 25.74 T:ketjesrv2 27.99 28.04 28.20 T:aeadaes192ocbtaglen64v1 28.11 28.13 28.27 T:aeadaes192ocbtaglen96v1 31.77 31.86 31.96 T:aeadaes256ocbtaglen96v1 31.89 31.95 32.16 T:aeadaes256ocbtaglen64v1 42.86 42.94 43.03 T:proest128otrv1 49.72 49.98 50.12 T:colm127v1 66.34 66.42 66.52 T:ketjejrv1 67.72 67.86 68.19 T:ketjejrv2 72.49 72.51 72.52 T:present80n6t4silcv3 77.75 77.88 78.42 T:deoxysneq128128v13 84.14 84.28 85.43 T:deoxysneq256128v13 93.31 93.40 93.55 T:aezv1 117.93 118.08 118.31 T:deoxyseq128128v13 127.25 127.63 128.16 T:deoxyseq256128v13 123.37 128.62 130.83 T:led80n6t4silcv3 272.98? 287.58? 542.23? aes256gcmv1 475.20? 576.73? 590.68? T:acorn128 1675.38 1676.01 1676.57 T:led80n6t4silcv2 1680.87 1681.97 1683.10 T:led80n6silcv1 2702.52 2703.38 2704.18 T:present80n6silcv1 2704.45 2704.80 2705.38 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.17 0.17 0.18 T:aegis128l 0.17 0.17 0.18 aegis128l 0.15? 0.18? 0.19? T:aeadaes128ocbtaglen128v1 0.20 0.22 0.22 T:tiaoxinv1 0.21 0.22 0.23 T:tiaoxinv2 0.11? 0.25? 0.38? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.26 T:aezv3 0.25? 0.26? 0.28? T:aezv4 0.26 0.26 0.26 T:aezv5 0.32 0.32 0.32 T:aegis128 0.32 0.32 0.32 aegis256 0.32 0.34 0.34 T:aes128gcmv1 0.36 0.38 0.39 T:aes256gcmv1 0.26? 0.39? 0.53? T:aeadaes192ocbtaglen128v1 0.43 0.44 0.44 T:aes128otrcv3 0.47 0.47 0.47 T:morus1280256v1 0.47 0.47 0.48 T:morus1280128v2 0.47 0.47 0.48 T:morus1280128v1 0.47 0.48 0.48 T:morus1280256v2 0.52? 0.56? 0.58? T:deoxysi128v141 0.57 0.57 0.57 T:aes256otrcv3 0.59 0.63 0.64 T:deoxysneq128128v1 0.59? 0.64? 0.66? T:deoxysi256v141 0.63 0.65 0.68 T:oceankeyakv2 0.67 0.70 0.71 T:deoxysneq256128v1 0.73 0.75 0.77 T:morus640128v1 0.72 0.76 0.77 T:morus640128v2 0.82 0.83 0.84 T:colm0v1 0.81 0.84 0.88 T:deoxysii128v141 0.89 0.93 0.95 T:deoxysii256v141 0.97 0.99 1.00 T:lunarkeyakv2 1.01 1.02 1.06 T:aes128otrpv3 0.97? 1.05? 1.12? T:deoxyseq128128v1 1.02 1.07 1.11 T:deoxyseq256128v1 1.19 1.22 1.24 T:seakeyakv2 1.25 1.27 1.29 T:aes256otrpv3 1.50 1.50 1.51 T:aes128otrsv3 1.50 1.51 1.52 T:norx6444v3 2.07 2.07 2.07 T:aes256otrsv3 2.11 2.12 2.13 T:norx6441v2 2.12 2.13 2.13 T:norx6441v3 2.51 2.56 2.57 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128n8t8clocv2 2.52 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.60 T:aes128n12t8clocv3 2.56 2.56 2.58 T:norx6441v1 2.51 2.57 2.57 T:aes128n12t8silcv2 2.85 2.88 2.94 T:lakekeyakv2 2.88 2.92 2.95 T:norx6444v2 3.06 3.09 3.13 T:lakekeyakv1 3.15 3.16 3.19 T:norx6461v3 3.15 3.16 3.17 T:norx6461v2 3.56 3.57 3.58 T:norx3241v2 3.57 3.57 3.58 T:norx3241v3 3.57 3.61 3.61 T:norx6444v1 3.80 3.82 3.83 T:norx6461v1 4.28 4.29 4.30 T:norx3241v1 4.66 4.68 4.70 T:ketjemajorv2 5.22 5.22 5.22 T:ascon128av11 5.28 5.28 5.29 ascon128av12 5.29 5.30 5.32 T:norx3261v3 5.30 5.30 5.31 T:norx3261v2 5.34 5.35 5.35 T:ascon96v1 5.49 5.56 5.57 T:aesjambuv1 5.55 5.60 5.62 T:riverkeyakv2 6.35 6.40 6.52 T:ketjeminorv2 7.44 7.44 7.44 T:norx3261v1 7.50 7.51 7.52 T:acorn128v2 7.62 7.63 7.64 ascon128v12 7.81 7.82 7.83 T:ascon128v11 7.81 7.82 7.82 T:ascon128v1 12.22 12.25 12.30 T:aes128otrpv1 12.23 12.25 12.30 T:aes128otrpv2 12.39 12.41 12.44 T:aes128otrsv2 12.37 12.42 12.45 T:aes128otrsv1 12.57 12.57 12.61 T:acorn128v3 16.02 16.05 16.09 T:aes256otrpv1 16.03 16.08 16.12 T:aes256otrpv2 16.12 16.15 16.19 T:aes256otrsv2 16.16 16.18 16.21 T:aes256otrsv1 16.85? 17.26? 24.03? T:aes128n8clocv1 17.23 17.26 17.28 T:aes128n12clocv1 18.96 19.00 19.00 T:proest256otrv1 19.73 20.13 20.17 T:twine80n6t4clocv2 21.28 21.33 21.62 T:twine80n6t4clocv3 21.95 22.02 22.09 T:ketjesrv2 25.01 25.10 25.13 T:ketjesrv1 28.92 28.96 29.06 T:aeadaes128ocbtaglen96v1 28.96 29.01 29.05 T:aeadaes128ocbtaglen64v1 33.67 33.72 33.84 T:aeadaes192ocbtaglen96v1 33.69 33.80 33.82 T:aeadaes192ocbtaglen64v1 38.46 38.48 38.50 T:aeadaes256ocbtaglen64v1 38.44 38.53 38.56 T:aeadaes256ocbtaglen96v1 43.42 43.75 44.01 T:proest128otrv1 57.83 57.97 58.05 T:colm127v1 65.86 67.23 67.33 T:ketjejrv1 67.63 68.62 68.72 T:ketjejrv2 72.50 72.59 72.93 T:present80n6t4silcv3 93.13 93.39 93.53 T:aezv1 96.28 96.88 97.53 T:deoxysneq256128v13 96.75 96.89 97.30 T:deoxysneq128128v13 117.46 117.51 117.67 T:deoxyseq128128v13 124.13 125.32 130.82 T:led80n6t4silcv3 126.42 127.50 128.56 T:deoxyseq256128v13 292.49? 304.64? 423.73? aes256gcmv1 525.15? 553.35? 590.18? T:acorn128 1672.77 1674.79 1675.36 T:led80n6t4silcv2 1679.34 1679.71 1680.58 T:led80n6silcv1 2701.14 2702.29 2702.55 T:present80n6silcv1 2703.19 2704.49 2709.03 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.11? 0.13? 0.14? T:aezv3 0.11? 0.14? 0.14? T:aezv5 0.11? 0.14? 0.17? T:aezv4 0.17 0.17 0.18 T:aegis128l 0.17 0.18 0.18 T:aeadaes128ocbtaglen128v1 0.20 0.20 0.21 aegis128l 0.20? 0.22? 0.23? T:tiaoxinv1 0.22 0.22 0.23 T:tiaoxinv2 0.24 0.25 0.25 T:aeadaes256ocbtaglen128v1 0.32 0.32 0.32 T:aegis128 0.33 0.34 0.35 T:aes128gcmv1 0.34 0.34 0.35 aegis256 0.35 0.36 0.38 T:aes256gcmv1 0.39 0.39 0.40 T:aeadaes192ocbtaglen128v1 0.43 0.44 0.44 T:aes128otrcv3 0.47 0.47 0.48 T:morus1280256v2 0.47 0.48 0.48 T:morus1280256v1 0.47 0.48 0.48 T:morus1280128v2 0.47 0.48 0.48 T:morus1280128v1 0.56 0.56 0.57 T:deoxysi128v141 0.56 0.57 0.57 T:aes256otrcv3 0.63 0.64 0.64 T:deoxysneq128128v1 0.64 0.64 0.65 T:deoxysi256v141 0.64 0.67 0.68 T:oceankeyakv2 0.70 0.70 0.71 T:deoxysneq256128v1 0.74 0.75 0.77 T:morus640128v1 0.74 0.75 0.77 T:morus640128v2 0.82 0.83 0.87 T:deoxysii128v141 0.79 0.83 0.84 T:colm0v1 0.92 0.93 0.93 T:deoxysii256v141 0.98 1.00 1.02 T:lunarkeyakv2 1.01 1.02 1.05 T:aes128otrpv3 1.02 1.03 1.11 T:deoxyseq128128v1 1.06 1.07 1.10 T:deoxyseq256128v1 1.21 1.23 1.26 T:seakeyakv2 1.24 1.28 1.29 T:aes256otrpv3 1.50 1.50 1.51 T:aes128otrsv3 1.51 1.51 1.51 T:norx6444v3 2.07 2.07 2.07 T:aes256otrsv3 2.10 2.12 2.13 T:norx6441v2 2.13 2.14 2.15 T:norx6441v3 2.56 2.56 2.60 T:aes128n12t8clocv3 2.56 2.56 2.60 T:aes128n8t8clocv2 2.50 2.56 2.62 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128n12t8silcv2 2.56 2.56 2.62 T:aes128n12t8silcv3 2.52 2.56 2.60 T:aes128n12t8clocv2 2.56 2.57 2.58 T:norx6441v1 2.89 2.91 2.97 T:norx6444v2 2.81 2.93 2.95 T:lakekeyakv2 3.03 3.05 3.09 T:lakekeyakv1 3.14 3.16 3.20 T:norx6461v3 3.19 3.19 3.20 T:norx6461v2 3.56 3.57 3.58 T:norx3241v3 3.57 3.57 3.58 T:norx3241v2 3.59 3.62 3.64 T:norx6444v1 3.82 3.83 3.83 T:norx6461v1 4.28 4.28 4.30 T:norx3241v1 4.63 4.66 4.71 T:ketjemajorv2 5.22 5.22 5.23 T:ascon128av11 5.28 5.28 5.29 ascon128av12 5.29 5.29 5.31 T:norx3261v3 5.30 5.30 5.31 T:norx3261v2 5.34 5.35 5.35 T:ascon96v1 5.49 5.57 5.58 T:aesjambuv1 5.58 5.59 5.61 T:riverkeyakv2 6.34 6.38 6.41 T:ketjeminorv2 7.42 7.44 7.44 T:norx3261v1 7.51 7.51 7.51 T:acorn128v2 7.63 7.63 7.63 ascon128v12 7.81 7.82 7.82 T:ascon128v1 7.81 7.82 7.82 T:ascon128v11 12.23 12.26 12.28 T:aes128otrpv2 12.23 12.26 12.29 T:aes128otrpv1 12.39 12.41 12.46 T:aes128otrsv2 12.40 12.43 12.47 T:aes128otrsv1 12.56 12.58 12.61 T:acorn128v3 16.01 16.04 16.15 T:aes256otrpv2 16.01 16.04 16.08 T:aes256otrpv1 16.13 16.17 16.19 T:aes256otrsv2 16.16 16.20 16.24 T:aes256otrsv1 17.25 17.28 17.31 T:aes128n12clocv1 16.89? 17.28? 24.15? T:aes128n8clocv1 18.92 18.96 18.99 T:proest256otrv1 19.74 20.15 20.19 T:twine80n6t4clocv2 21.34 21.58 21.62 T:twine80n6t4clocv3 22.04 22.09 22.19 T:ketjesrv2 25.04 25.09 25.13 T:ketjesrv1 28.98 29.00 29.02 T:aeadaes128ocbtaglen96v1 28.96 29.04 29.07 T:aeadaes128ocbtaglen64v1 33.66 33.75 33.77 T:aeadaes192ocbtaglen64v1 33.79 33.83 33.85 T:aeadaes192ocbtaglen96v1 38.46 38.49 38.51 T:aeadaes256ocbtaglen96v1 38.43 38.52 38.75 T:aeadaes256ocbtaglen64v1 43.41 43.67 44.56 T:proest128otrv1 57.09 57.13 57.21 T:colm127v1 65.94 67.13 67.46 T:ketjejrv1 67.51 67.64 67.76 T:ketjejrv2 72.58 72.62 72.88 T:present80n6t4silcv3 93.11 93.20 93.30 T:aezv1 96.33 96.53 97.56 T:deoxysneq256128v13 96.84 97.03 97.52 T:deoxysneq128128v13 117.38 117.63 117.72 T:deoxyseq128128v13 123.95 125.11 131.46 T:led80n6t4silcv3 126.55 126.68 128.46 T:deoxyseq256128v13 278.85? 290.51? 420.98? aes256gcmv1 524.43 529.50 530.62 T:acorn128 1672.71 1674.86 1676.06 T:led80n6t4silcv2 1678.79 1679.87 1680.89 T:led80n6silcv1 2702.14 2703.59 2707.32 T:present80n6silcv1 2702.93 2703.69 2704.45 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.10? 0.10? 0.12? T:tiaoxinv1 0.10 0.10 0.11 T:tiaoxinv2 0.12? 0.13? 0.15? T:aezv5 0.14? 0.15? 0.17? T:aezv3 0.14? 0.16? 0.16? T:aezv4 0.15 0.16 0.16 T:aegis128l 0.14? 0.17? 0.17? aegis128l 0.12? 0.17? 0.18? T:aeadaes128ocbtaglen128v1 -0.02? 0.24? 0.49? T:aeadaes256ocbtaglen128v1 0.19? 0.27? 0.31? T:aes128gcmv1 0.19? 0.27? 0.31? T:aes256gcmv1 0.31 0.31 0.32 aegis256 0.31 0.32 0.33 T:aegis128 0.31? 0.38? 0.68? T:aeadaes192ocbtaglen128v1 0.42 0.43 0.45 T:aes128otrcv3 0.44? 0.47? 0.49? T:morus1280256v1 0.45 0.47 0.48 T:morus1280128v1 0.47 0.49 0.51 T:oceankeyakv2 0.44? 0.49? 0.50? T:morus1280256v2 0.45 0.49 0.50 T:morus1280128v2 0.50 0.51 0.52 T:colm0v1 0.52 0.54 0.55 T:deoxysi128v141 0.53 0.54 0.55 T:deoxysii128v141 0.55? 0.58? 0.64? T:aes256otrcv3 0.55? 0.59? 0.62? T:lunarkeyakv2 0.57 0.61 0.62 T:deoxysi256v141 0.56? 0.61? 0.65? T:deoxysneq128128v1 0.60 0.61 0.62 T:deoxysii256v141 0.59? 0.62? 0.67? T:deoxyseq128128v1 0.67 0.70 0.71 T:deoxysneq256128v1 0.68 0.70 0.72 T:deoxyseq256128v1 0.67? 0.71? 0.75? T:morus640128v1 0.71 0.72 0.73 T:morus640128v2 1.07 1.08 1.09 T:aes128otrpv3 1.09 1.12 1.14 T:seakeyakv2 1.27 1.28 1.31 T:aes256otrpv3 2.03 2.05 2.11 T:norx6441v3 2.04 2.10 2.11 T:norx6441v2 2.14 2.15 2.16 T:norx6444v3 2.50 2.56 2.57 T:aes128n12t8clocv2 2.55 2.56 2.58 T:aes128n12t8silcv3 2.55 2.56 2.57 T:aes128n12t8silcv2 2.55 2.56 2.58 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128otrsv3 2.56 2.56 2.57 T:aes128n12t8clocv3 2.56 2.56 2.58 T:aes128n8t8clocv2 2.57 2.58 2.59 T:norx6441v1 2.59 2.61 2.67 T:lakekeyakv2 2.69 2.70 2.71 T:norx6444v2 2.68 2.79 2.87 T:lakekeyakv1 3.02 3.03 3.16 T:norx6461v2 3.01 3.15 3.18 T:norx6461v3 3.28 3.29 3.29 T:norx6444v1 3.55 3.55 3.56 T:norx3241v2 3.55 3.55 3.56 T:norx3241v3 3.56 3.56 3.57 T:aes256otrsv3 3.63 3.65 3.79 T:norx6461v1 3.97 4.06 4.13 T:ketjemajorv2 4.25 4.25 4.25 T:norx3241v1 5.13 5.17 5.20 T:riverkeyakv2 5.19 5.19 5.19 T:ascon96v1 5.24 5.24 5.26 ascon128av12 5.24 5.25 5.28 T:aesjambuv1 5.25 5.25 5.25 T:ascon128av11 5.27 5.27 5.27 T:norx3261v2 5.27 5.27 5.28 T:norx3261v3 5.73 5.77 5.80 T:ketjeminorv2 7.50 7.50 7.50 ascon128v12 7.50 7.51 7.51 T:acorn128v2 7.52 7.52 7.53 T:norx3261v1 7.87 7.88 7.88 T:ascon128v11 7.87 7.88 7.88 T:ascon128v1 11.42 11.46 11.50 T:aes128otrpv1 11.45 11.49 11.52 T:aes128otrpv2 11.57 11.58 11.61 T:aes128n12clocv1 11.38? 11.67? 16.47? T:aes128n8clocv1 11.76 11.79 11.81 T:aes128otrsv1 11.76 11.80 11.82 T:aes128otrsv2 12.63 12.64 12.64 T:acorn128v3 15.25 15.28 15.45 T:aes256otrpv2 15.25 15.28 15.31 T:aes256otrpv1 15.52 15.56 15.59 T:aes256otrsv1 15.53 15.57 15.59 T:aes256otrsv2 19.06 19.08 19.12 T:proest256otrv1 19.60 19.99 20.04 T:twine80n6t4clocv2 21.07 21.17 21.22 T:ketjesrv2 21.18 21.30 21.56 T:twine80n6t4clocv3 22.18 22.25 22.31 T:ketjesrv1 23.17 23.19 23.31 T:aeadaes128ocbtaglen64v1 23.28 23.31 23.48 T:aeadaes128ocbtaglen96v1 27.13 27.17 27.23 T:aeadaes192ocbtaglen64v1 27.02 27.18 27.48 T:aeadaes192ocbtaglen96v1 29.53 29.67 29.80 T:colm127v1 31.00 31.04 31.24 T:aeadaes256ocbtaglen64v1 31.01 31.05 31.08 T:aeadaes256ocbtaglen96v1 42.65 43.08 45.19 T:proest128otrv1 45.68 45.90 46.00 T:aezv1 61.68 62.10 62.30 T:ketjejrv1 64.95 65.13 65.55 T:ketjejrv2 72.03 72.26 72.30 T:present80n6t4silcv3 78.11 78.45 78.60 T:deoxysneq128128v13 78.03 78.50 78.59 T:deoxyseq128128v13 84.18 84.76 85.48 T:deoxysneq256128v13 84.16 84.82 85.41 T:deoxyseq256128v13 121.60 134.14 135.02 T:led80n6t4silcv3 271.11? 290.17? 533.89? aes256gcmv1 431.05? 547.49? 676.69? T:acorn128 1115.04 1115.91 1116.93 T:led80n6t4silcv2 1119.35 1120.35 1121.70 T:led80n6silcv1 1800.57 1801.13 1801.47 T:present80n6silcv1 1800.91 1801.22 1801.75 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.10? 0.10? 0.13? T:tiaoxinv1 0.13? 0.14? 0.15? T:aezv5 0.10? 0.14? 0.15? T:tiaoxinv2 0.14 0.15 0.15 T:aezv3 0.14? 0.15? 0.16? T:aezv4 0.15 0.16 0.16 T:aegis128l 0.14? 0.16? 0.16? aegis128l 0.15? 0.17? 0.18? T:aeadaes128ocbtaglen128v1 -0.02? 0.24? 0.50? T:aeadaes256ocbtaglen128v1 0.24? 0.27? 0.31? T:aes128gcmv1 0.25? 0.27? 0.30? T:aes256gcmv1 0.30 0.31 0.33 T:aegis128 0.26? 0.32? 0.38? aegis256 0.12? 0.37? 0.39? T:aeadaes192ocbtaglen128v1 0.42 0.44 0.46 T:aes128otrcv3 0.45 0.46 0.47 T:morus1280256v1 0.46 0.46 0.47 T:morus1280256v2 0.46 0.47 0.50 T:morus1280128v1 0.47 0.47 0.48 T:morus1280128v2 0.46? 0.49? 0.57? T:oceankeyakv2 0.50 0.50 0.53 T:colm0v1 0.52 0.53 0.54 T:deoxysi128v141 0.50? 0.54? 0.57? T:deoxysii128v141 0.56 0.58 0.61 T:lunarkeyakv2 0.57 0.58 0.58 T:aes256otrcv3 0.59 0.60 0.62 T:deoxysi256v141 0.58 0.61 0.62 T:deoxysneq128128v1 0.54? 0.62? 0.66? T:deoxysii256v141 0.58? 0.62? 0.76? T:deoxyseq128128v1 0.67? 0.67? 0.75? T:morus640128v2 0.66 0.70 0.73 T:deoxyseq256128v1 0.69 0.70 0.72 T:deoxysneq256128v1 0.67 0.71 0.73 T:morus640128v1 1.04 1.06 1.11 T:aes128otrpv3 1.07 1.12 1.16 T:seakeyakv2 1.30 1.32 1.37 T:aes256otrpv3 2.03 2.04 2.08 T:norx6441v2 2.04 2.10 2.12 T:norx6441v3 2.15 2.15 2.17 T:norx6444v3 2.52 2.55 2.57 T:aes128n12t8clocv2 2.48 2.56 2.66 T:aes128n12t8silcv3 2.56 2.56 2.65 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128otrsv3 2.56 2.56 2.57 T:aes128n8t8silcv2 2.48 2.57 2.65 T:aes128n12t8silcv2 2.56 2.57 2.58 T:norx6441v1 2.56 2.57 2.66 T:aes128n8t8clocv2 2.58 2.59 2.59 T:norx6444v2 2.48 2.62 2.72 T:lakekeyakv2 2.75 2.79 2.86 T:lakekeyakv1 3.02 3.03 3.16 T:norx6461v2 3.15 3.17 3.18 T:norx6461v3 3.25 3.25 3.25 T:norx6444v1 3.54 3.55 3.55 T:norx3241v2 3.55 3.55 3.56 T:norx3241v3 3.56 3.56 3.56 T:aes256otrsv3 3.77 3.80 3.82 T:norx6461v1 4.01 4.08 4.15 T:ketjemajorv2 4.25 4.25 4.26 T:norx3241v1 5.13 5.17 5.19 T:riverkeyakv2 5.18 5.19 5.20 T:ascon128av11 5.19 5.19 5.20 T:ascon96v1 5.24 5.24 5.26 ascon128av12 5.24 5.25 5.29 T:aesjambuv1 5.27 5.27 5.27 T:norx3261v3 5.27 5.27 5.28 T:norx3261v2 5.71 5.82 5.88 T:ketjeminorv2 7.50 7.52 7.52 T:acorn128v2 7.52 7.53 7.53 T:norx3261v1 7.62 7.62 7.63 ascon128v12 7.72 7.75 7.77 T:ascon128v1 7.74 7.75 7.75 T:ascon128v11 11.45 11.47 11.51 T:aes128otrpv1 11.45 11.49 11.53 T:aes128otrpv2 11.56 11.60 11.61 T:aes128n12clocv1 11.40? 11.67? 16.33? T:aes128n8clocv1 11.76 11.82 11.86 T:aes128otrsv1 11.79 11.82 11.85 T:aes128otrsv2 12.62 12.65 12.66 T:acorn128v3 15.25 15.29 15.44 T:aes256otrpv2 15.25 15.29 15.34 T:aes256otrpv1 15.55 15.59 15.62 T:aes256otrsv1 15.54 15.59 15.61 T:aes256otrsv2 19.05 19.07 19.12 T:proest256otrv1 19.59 19.91 20.11 T:twine80n6t4clocv2 21.09 21.17 21.28 T:ketjesrv2 21.17 21.35 21.60 T:twine80n6t4clocv3 22.23 22.28 22.36 T:ketjesrv1 23.27 23.29 23.32 T:aeadaes128ocbtaglen64v1 23.28 23.32 23.37 T:aeadaes128ocbtaglen96v1 27.00 27.12 27.33 T:aeadaes192ocbtaglen64v1 27.23 27.36 27.47 T:aeadaes192ocbtaglen96v1 29.36 29.49 29.68 T:colm127v1 31.02 31.06 31.12 T:aeadaes256ocbtaglen96v1 31.02 31.13 31.23 T:aeadaes256ocbtaglen64v1 42.70 42.80 43.44 T:proest128otrv1 45.78 45.94 46.04 T:aezv1 61.76 61.87 62.09 T:ketjejrv1 64.90 64.96 65.15 T:ketjejrv2 72.00 72.06 72.15 T:present80n6t4silcv3 78.00 78.06 78.36 T:deoxysneq128128v13 78.26 78.36 78.47 T:deoxyseq128128v13 84.08 84.46 85.28 T:deoxysneq256128v13 84.38 84.84 85.34 T:deoxyseq256128v13 121.65 122.56 134.92 T:led80n6t4silcv3 277.15? 285.63? 453.56? aes256gcmv1 459.01? 463.43? 561.80? T:acorn128 1114.62 1115.02 1115.46 T:led80n6t4silcv2 1118.85 1120.44 1121.59 T:led80n6silcv1 1800.67 1801.56 1802.79 T:present80n6silcv1 1800.76 1801.76 1802.42 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.07? 0.11? 0.15? T:tiaoxinv2 0.13 0.13 0.14 T:aezv5 0.06? 0.14? 0.14? T:tiaoxinv1 0.13? 0.14? 0.15? T:aezv3 0.15 0.15 0.16 T:aezv4 0.15 0.16 0.16 T:aegis128l 0.16? 0.16? 0.22? aegis128l 0.17 0.17 0.17 T:aeadaes128ocbtaglen128v1 0.23 0.24 0.25 T:aeadaes256ocbtaglen128v1 0.25? 0.27? 0.28? T:aes128gcmv1 0.25? 0.29? 0.31? T:aes256gcmv1 0.25? 0.32? 0.33? aegis256 0.31 0.32 0.33 T:aegis128 0.37? 0.37? 0.62? T:aeadaes192ocbtaglen128v1 0.42 0.44 0.46 T:aes128otrcv3 0.44 0.45 0.46 T:morus1280256v2 0.45 0.45 0.45 T:morus1280128v2 0.44 0.45 0.46 T:morus1280256v1 0.45 0.46 0.47 T:morus1280128v1 0.44? 0.47? 0.53? T:oceankeyakv2 0.47 0.47 0.50 T:colm0v1 0.52 0.53 0.54 T:deoxysi128v141 0.53 0.54 0.55 T:deoxysii128v141 0.55 0.58 0.61 T:lunarkeyakv2 0.58 0.58 0.58 T:aes256otrcv3 0.60 0.60 0.61 T:deoxysi256v141 0.61 0.61 0.61 T:deoxysneq128128v1 0.61 0.61 0.65 T:deoxysii256v141 0.60? 0.62? 0.77? T:deoxyseq128128v1 0.67 0.69 0.74 T:morus640128v2 0.69 0.70 0.71 T:deoxyseq256128v1 0.69 0.70 0.71 T:deoxysneq256128v1 0.71 0.73 0.76 T:morus640128v1 1.04 1.05 1.10 T:aes128otrpv3 1.09 1.12 1.17 T:seakeyakv2 1.29 1.34 1.37 T:aes256otrpv3 2.04 2.09 2.11 T:norx6441v2 2.04 2.10 2.12 T:norx6441v3 2.12 2.15 2.16 T:norx6444v3 2.47 2.47 2.65 T:aes128n12t8silcv3 2.48 2.48 2.66 T:aes128n12t8silcv2 2.47 2.52 2.66 T:aes128n12t8clocv2 2.51 2.56 2.66 T:aes128n12t8clocv3 2.48 2.56 2.65 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128otrsv3 2.57 2.58 2.58 T:norx6441v1 2.53 2.59 2.64 T:norx6444v2 2.47 2.65 2.66 T:aes128n8t8clocv2 2.61? 2.73? 4.94? T:lakekeyakv2 2.78 2.82 2.91 T:lakekeyakv1 3.03 3.16 3.18 T:norx6461v2 3.15 3.18 3.19 T:norx6461v3 3.25 3.25 3.26 T:norx6444v1 3.54 3.55 3.55 T:norx3241v2 3.55 3.55 3.56 T:norx3241v3 3.56 3.56 3.57 T:aes256otrsv3 3.63 3.78 3.81 T:norx6461v1 4.01 4.10 4.19 T:ketjemajorv2 4.25 4.25 4.26 T:norx3241v1 5.13 5.16 5.19 T:riverkeyakv2 5.17 5.19 5.21 T:ascon128av11 5.17 5.19 5.21 T:ascon96v1 5.24 5.25 5.29 T:aesjambuv1 5.25 5.25 5.26 ascon128av12 5.27 5.27 5.27 T:norx3261v3 5.27 5.27 5.27 T:norx3261v2 5.69 5.77 5.87 T:ketjeminorv2 7.51 7.51 7.52 T:acorn128v2 7.52 7.53 7.53 T:norx3261v1 7.62 7.62 7.62 ascon128v12 7.74 7.75 7.75 T:ascon128v1 7.74 7.75 7.75 T:ascon128v11 11.42 11.45 11.49 T:aes128otrpv1 11.46 11.49 11.53 T:aes128otrpv2 11.57 11.61 11.62 T:aes128n12clocv1 11.39? 11.67? 16.42? T:aes128n8clocv1 11.77 11.79 11.82 T:aes128otrsv1 11.79 11.81 11.86 T:aes128otrsv2 12.63 12.65 12.67 T:acorn128v3 15.25 15.30 15.48 T:aes256otrpv2 15.27 15.31 15.33 T:aes256otrpv1 15.55 15.59 15.61 T:aes256otrsv1 15.56 15.59 15.62 T:aes256otrsv2 19.07 19.10 19.13 T:proest256otrv1 19.63 19.93 20.06 T:twine80n6t4clocv2 21.04 21.13 21.24 T:ketjesrv2 21.16 21.30 21.59 T:twine80n6t4clocv3 22.14 22.23 22.31 T:ketjesrv1 23.30 23.31 23.37 T:aeadaes128ocbtaglen96v1 23.33 23.37 23.39 T:aeadaes128ocbtaglen64v1 27.01 27.11 27.17 T:aeadaes192ocbtaglen64v1 26.98 27.13 27.18 T:aeadaes192ocbtaglen96v1 29.44 29.49 29.54 T:colm127v1 31.04 31.09 31.14 T:aeadaes256ocbtaglen96v1 31.03 31.15 31.23 T:aeadaes256ocbtaglen64v1 42.81 43.21 45.26 T:proest128otrv1 45.64 45.90 46.05 T:aezv1 59.27 61.82 61.91 T:ketjejrv1 64.85 64.95 65.07 T:ketjejrv2 72.00 72.10 72.42 T:present80n6t4silcv3 77.94 78.06 78.33 T:deoxysneq128128v13 78.33 78.47 78.54 T:deoxyseq128128v13 83.91 84.73 85.29 T:deoxysneq256128v13 84.09 84.77 84.85 T:deoxyseq256128v13 121.65 134.11 134.97 T:led80n6t4silcv3 286.15? 297.85? 449.07? aes256gcmv1 434.30? 469.06? 569.68? T:acorn128 1115.37 1116.05 1118.04 T:led80n6t4silcv2 1118.28 1119.88 1120.62 T:led80n6silcv1 1800.29 1801.11 1801.55 T:present80n6silcv1 1800.93 1801.18 1802.11 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.17 0.17 0.18 T:tiaoxinv2 0.17 0.17 0.18 T:tiaoxinv1 0.20 0.20 0.21 T:aegis128l 0.21 0.21 0.21 aegis128l 0.28 0.28 0.31 T:aeadaes128ocbtaglen128v1 0.30 0.30 0.31 T:aezv3 0.30 0.30 0.31 T:aezv5 0.30 0.31 0.32 T:aezv4 0.34 0.35 0.35 T:aegis128 0.36 0.36 0.36 aegis256 0.38? 0.38? 0.54? T:aeadaes256ocbtaglen128v1 0.49 0.50 0.52 T:aeadaes192ocbtaglen128v1 0.55 0.55 0.55 T:aes128otrcv3 0.60 0.60 0.61 T:morus1280128v1 0.59 0.60 0.62 T:morus1280128v2 0.59 0.60 0.62 T:morus1280256v2 0.59 0.61 0.62 T:morus1280256v1 0.68 0.68 0.70 T:deoxysi128v141 0.72 0.72 0.74 T:deoxysneq128128v1 0.74 0.74 0.74 T:aes256otrcv3 0.77 0.78 0.80 T:deoxysi256v141 0.81 0.83 0.83 T:morus640128v2 0.81 0.83 0.84 T:morus640128v1 0.83 0.83 0.84 T:deoxysneq256128v1 0.92 0.92 0.93 T:colm0v1 0.96 0.97 0.99 T:aes128gcmv1 0.98 0.98 1.01 T:aes256gcmv1 0.99 1.01 1.03 T:deoxysii128v141 1.08 1.12 1.18 T:deoxyseq128128v1 1.13 1.13 1.17 T:deoxysii256v141 1.14 1.15 1.16 T:aes128otrpv3 1.30 1.31 1.34 T:deoxyseq256128v1 1.40 1.41 1.44 T:aes256otrpv3 1.42 1.43 1.44 T:oceankeyakv2 1.53 1.54 1.54 T:aes128otrsv3 1.76 1.77 1.79 T:seakeyakv2 2.09 2.09 2.10 T:norx6444v3 2.13 2.13 2.14 T:aes256otrsv3 2.45 2.47 2.48 T:norx6441v3 2.46 2.47 2.49 T:norx6441v2 2.53 2.54 2.55 T:lunarkeyakv2 2.61 2.61 2.61 T:aes128n8t8silcv2 2.61 2.61 2.61 T:aes128n12t8silcv3 2.61 2.61 2.61 T:aes128n12t8silcv2 2.61 2.61 2.61 T:aes128n8t8clocv2 2.61 2.61 2.61 T:aes128n12t8clocv2 2.61 2.61 2.61 T:aes128n12t8clocv3 2.86 2.88 2.89 T:norx6441v1 3.11 3.13 3.14 T:lakekeyakv2 3.55 3.56 3.58 T:lakekeyakv1 3.69 3.70 3.70 T:norx6461v2 3.69 3.70 3.71 T:norx6461v3 3.82 3.82 3.82 T:norx3241v3 3.82 3.82 3.82 T:norx3241v2 4.26 4.29 4.30 T:norx6461v1 4.32 4.34 4.35 T:norx6444v2 4.47 4.47 4.48 T:norx3241v1 5.20 5.22 5.23 T:norx6444v1 5.31 5.31 5.33 T:aesjambuv1 5.42 5.43 5.44 ascon128av12 5.48 5.48 5.48 T:ascon128av11 5.50 5.50 5.51 T:ascon96v1 5.68 5.68 5.68 T:norx3261v2 5.68 5.68 5.68 T:norx3261v3 5.78 5.78 5.79 T:riverkeyakv2 6.06 6.11 6.13 T:ketjemajorv2 7.01 7.04 7.06 T:ketjeminorv2 7.75 7.76 7.76 ascon128v12 7.93 7.93 7.93 T:norx3261v1 8.19 8.19 8.20 T:ascon128v11 8.19 8.19 8.20 T:ascon128v1 8.47 8.47 8.47 T:acorn128v2 12.38 12.39 12.41 T:aes128otrpv2 12.38 12.40 12.41 T:aes128otrpv1 12.49 12.51 12.52 T:aes128otrsv2 12.51 12.52 12.53 T:aes128otrsv1 13.31 13.31 13.32 T:acorn128v3 16.24 16.24 16.26 T:aes256otrpv1 16.27 16.30 16.33 T:aes256otrpv2 16.35 16.36 16.39 T:aes256otrsv1 16.36 16.37 16.38 T:aes256otrsv2 16.89 16.91 16.96 T:aes128n12clocv1 16.91? 16.95? 23.22? T:aes128n8clocv1 20.23 20.27 20.28 T:proest256otrv1 20.15 20.50 20.53 T:twine80n6t4clocv2 21.80 21.91 21.94 T:twine80n6t4clocv3 24.83 24.84 24.96 T:aeadaes128ocbtaglen64v1 24.82 24.86 24.93 T:aeadaes128ocbtaglen96v1 25.16 25.19 25.21 T:ketjesrv1 26.51 26.53 26.56 T:ketjesrv2 28.67 28.73 28.78 T:aeadaes192ocbtaglen96v1 28.76 28.82 28.93 T:aeadaes192ocbtaglen64v1 32.69 32.75 32.80 T:aeadaes256ocbtaglen64v1 32.75 32.78 32.87 T:aeadaes256ocbtaglen96v1 45.03 45.95 45.97 T:proest128otrv1 50.92 50.98 51.09 T:colm127v1 67.25 67.26 67.33 T:ketjejrv1 68.75 68.83 68.92 T:ketjejrv2 69.15 73.22 73.25 T:present80n6t4silcv3 78.42 78.58 78.70 T:deoxysneq128128v13 84.89 85.18 85.36 T:deoxysneq256128v13 92.34 92.62 92.73 T:aezv1 118.95 119.10 119.74 T:deoxyseq128128v13 125.58 125.62 135.34 T:led80n6t4silcv3 127.88 128.09 130.12 T:deoxyseq256128v13 291.70? 340.84? 521.12? aes256gcmv1 640.64 642.08 650.56 T:acorn128 1683.43 1684.14 1684.93 T:led80n6t4silcv2 1689.14 1689.49 1690.84 T:led80n6silcv1 2716.70 2716.94 2717.83 T:present80n6silcv1 2718.33 2718.72 2719.03 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.20 0.21 0.21 T:aegis128l 0.21 0.21 0.22 aegis128l 0.25 0.26 0.27 T:tiaoxinv1 0.26 0.27 0.28 T:tiaoxinv2 0.28 0.28 0.30 T:aeadaes128ocbtaglen128v1 0.30 0.30 0.33 T:aezv3 0.30 0.30 0.31 T:aezv5 0.31 0.31 0.31 T:aezv4 0.34 0.34 0.35 T:aegis128 0.36 0.36 0.37 aegis256 0.38? 0.39? 0.55? T:aeadaes256ocbtaglen128v1 0.47? 0.47? 0.64? T:aeadaes192ocbtaglen128v1 0.57 0.57 0.57 T:aes128otrcv3 0.59 0.59 0.59 T:morus1280256v1 0.59 0.59 0.60 T:morus1280128v1 0.60 0.60 0.61 T:morus1280128v2 0.60 0.60 0.60 T:morus1280256v2 0.74 0.74 0.76 T:deoxysi128v141 0.75 0.76 0.76 T:aes256otrcv3 0.81 0.81 0.82 T:deoxysneq128128v1 0.81 0.85 0.85 T:morus640128v1 0.85 0.86 0.87 T:morus640128v2 0.86 0.86 0.89 T:deoxysi256v141 0.86 0.87 0.87 T:deoxysneq256128v1 0.92 0.93 0.93 T:colm0v1 0.96 0.98 0.99 T:aes128gcmv1 1.00 1.02 1.04 T:aes256gcmv1 1.02 1.03 1.05 T:deoxysii128v141 1.15 1.16 1.20 T:deoxysii256v141 1.14 1.16 1.19 T:aes128otrpv3 1.26 1.27 1.30 T:deoxyseq256128v1 1.24 1.30 1.31 T:deoxyseq128128v1 1.39 1.39 1.42 T:oceankeyakv2 1.47 1.48 1.50 T:aes256otrpv3 1.55 1.56 1.56 T:aes128otrsv3 1.79 1.80 1.81 T:seakeyakv2 2.09 2.09 2.10 T:norx6444v3 2.15 2.15 2.15 T:aes256otrsv3 2.46 2.46 2.47 T:norx6441v2 2.48 2.48 2.49 T:norx6441v3 2.58 2.58 2.59 T:aes128n12t8clocv2 2.58 2.58 2.59 T:aes128n8t8clocv2 2.58 2.59 2.59 T:aes128n12t8clocv3 2.59 2.59 2.60 T:aes128n12t8silcv3 2.58 2.59 2.60 T:lunarkeyakv2 2.59 2.59 2.59 T:aes128n12t8silcv2 2.59 2.59 2.59 T:aes128n8t8silcv2 2.88 2.89 2.89 T:norx6441v1 3.14 3.16 3.23 T:lakekeyakv2 3.65 3.68 3.71 T:lakekeyakv1 3.68 3.68 3.70 T:norx6461v2 3.67 3.68 3.71 T:norx6461v3 3.85 3.86 3.87 T:norx3241v3 3.86 3.86 3.87 T:norx3241v2 4.29 4.30 4.30 T:norx6461v1 4.28 4.30 4.32 T:norx6444v2 4.53 4.53 4.54 T:norx3241v1 5.20 5.23 5.26 T:norx6444v1 5.34 5.34 5.35 T:ascon128av11 5.41 5.42 5.42 ascon128av12 5.47 5.47 5.48 T:ascon96v1 5.53 5.54 5.60 T:aesjambuv1 5.72 5.72 5.73 T:norx3261v3 5.72 5.72 5.73 T:norx3261v2 5.91 5.94 5.95 T:riverkeyakv2 6.04 6.07 6.08 T:ketjemajorv2 7.28 7.32 7.34 T:ketjeminorv2 7.75 7.75 7.76 ascon128v12 7.83 7.83 7.85 T:norx3261v1 7.93 7.93 7.95 T:ascon128v11 7.93 7.93 7.94 T:ascon128v1 8.47 8.48 8.49 T:acorn128v2 12.56 12.58 12.61 T:aes128otrpv2 12.57 12.62 12.66 T:aes128otrpv1 12.69 12.71 12.72 T:aes128otrsv2 12.72 12.75 12.78 T:aes128otrsv1 13.33 13.33 13.34 T:acorn128v3 16.45 16.48 16.50 T:aes256otrpv1 16.44 16.51 16.56 T:aes256otrpv2 16.56 16.59 16.64 T:aes256otrsv2 16.57 16.59 16.61 T:aes256otrsv1 17.45 17.47 17.49 T:aes128n12clocv1 17.51? 17.53? 23.85? T:aes128n8clocv1 19.95 20.03 20.36 T:twine80n6t4clocv2 20.58 20.62 20.65 T:proest256otrv1 21.62 21.85 21.96 T:twine80n6t4clocv3 22.90 22.94 23.07 T:ketjesrv2 25.77 25.81 25.83 T:ketjesrv1 29.70 29.72 29.74 T:aeadaes128ocbtaglen64v1 29.71 29.74 29.78 T:aeadaes128ocbtaglen96v1 34.47 34.50 34.54 T:aeadaes192ocbtaglen96v1 34.52 34.57 34.66 T:aeadaes192ocbtaglen64v1 39.42 39.47 39.48 T:aeadaes256ocbtaglen64v1 39.44 39.48 39.49 T:aeadaes256ocbtaglen96v1 45.45 46.48 46.63 T:proest128otrv1 58.71 58.93 59.16 T:colm127v1 66.90 67.72 68.20 T:ketjejrv1 68.61 68.65 68.72 T:ketjejrv2 73.24 73.32 73.42 T:present80n6t4silcv3 92.09 92.52 92.74 T:aezv1 97.20 97.41 97.57 T:deoxysneq256128v13 97.49 97.66 98.44 T:deoxysneq128128v13 118.62 118.69 118.83 T:deoxyseq128128v13 128.01 129.56 129.66 T:deoxyseq256128v13 125.88 131.69 131.91 T:led80n6t4silcv3 292.86? 305.51? 417.03? aes256gcmv1 540.64? 612.95? 616.40? T:acorn128 1682.07 1682.34 1682.65 T:led80n6t4silcv2 1687.49 1687.91 1688.77 T:led80n6silcv1 2715.83 2716.06 2716.35 T:present80n6silcv1 2717.58 2718.36 2718.65 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17? 0.18? 0.21? T:aezv3 0.18 0.18 0.18 T:aezv5 0.18 0.18 0.19 T:aezv4 0.20 0.20 0.21 T:aegis128l 0.23 0.23 0.25 aegis128l 0.25? 0.26? 0.28? T:tiaoxinv2 0.25? 0.26? 0.28? T:tiaoxinv1 0.28 0.28 0.28 T:aeadaes128ocbtaglen128v1 0.34 0.34 0.35 T:aegis128 0.38 0.38 0.39 T:aeadaes256ocbtaglen128v1 0.38 0.39 0.40 aegis256 0.47 0.47 0.48 T:aeadaes192ocbtaglen128v1 0.57 0.57 0.57 T:aes128otrcv3 0.59 0.59 0.60 T:morus1280128v1 0.59 0.60 0.60 T:morus1280256v1 0.60 0.60 0.60 T:morus1280256v2 0.60 0.60 0.60 T:morus1280128v2 0.74 0.74 0.74 T:deoxysi128v141 0.75 0.76 0.76 T:aes256otrcv3 0.80 0.81 0.81 T:deoxysneq128128v1 0.81 0.84 0.86 T:morus640128v1 0.82 0.85 0.86 T:morus640128v2 0.86 0.86 0.86 T:deoxysi256v141 0.86 0.86 0.87 T:deoxysneq256128v1 0.93 0.93 0.94 T:colm0v1 0.98 0.99 0.99 T:aes128gcmv1 1.00 1.02 1.03 T:aes256gcmv1 1.02 1.03 1.05 T:deoxysii128v141 1.15 1.16 1.18 T:deoxysii256v141 1.16 1.18 1.18 T:aes128otrpv3 1.24 1.25 1.30 T:deoxyseq128128v1 1.27 1.29 1.31 T:deoxyseq256128v1 1.41 1.41 1.42 T:oceankeyakv2 1.47 1.48 1.50 T:aes256otrpv3 1.55 1.55 1.55 T:aes128otrsv3 1.81 1.81 1.83 T:seakeyakv2 2.09 2.09 2.10 T:norx6444v3 2.15 2.15 2.15 T:aes256otrsv3 2.45 2.46 2.47 T:norx6441v2 2.45 2.47 2.48 T:norx6441v3 2.58 2.58 2.58 T:aes128n12t8silcv2 2.58 2.58 2.58 T:aes128n8t8silcv2 2.58 2.58 2.65 T:aes128n12t8silcv3 2.58 2.58 2.64 T:aes128n8t8clocv2 2.58 2.58 2.59 T:aes128n12t8clocv2 2.58 2.59 2.63 T:aes128n12t8clocv3 2.59 2.60 2.62 T:lunarkeyakv2 2.88 2.89 2.89 T:norx6441v1 3.14 3.16 3.23 T:lakekeyakv2 3.63 3.67 3.70 T:lakekeyakv1 3.68 3.70 3.72 T:norx6461v3 3.68 3.71 3.72 T:norx6461v2 3.85 3.86 3.87 T:norx3241v2 3.86 3.86 3.87 T:norx3241v3 4.30 4.30 4.31 T:norx6461v1 4.29 4.31 4.34 T:norx6444v2 4.53 4.53 4.54 T:norx3241v1 5.20 5.23 5.24 T:norx6444v1 5.34 5.34 5.35 T:ascon128av11 5.41 5.41 5.42 ascon128av12 5.47 5.47 5.48 T:ascon96v1 5.53 5.55 5.60 T:aesjambuv1 5.72 5.72 5.72 T:norx3261v3 5.72 5.72 5.73 T:norx3261v2 5.91 5.91 5.92 T:riverkeyakv2 5.96 6.03 6.07 T:ketjemajorv2 7.26 7.32 7.37 T:ketjeminorv2 7.75 7.75 7.75 ascon128v12 7.83 7.84 7.85 T:norx3261v1 7.93 7.93 7.94 T:ascon128v11 7.93 7.94 7.94 T:ascon128v1 8.47 8.47 8.47 T:acorn128v2 12.57 12.60 12.62 T:aes128otrpv2 12.60 12.63 12.65 T:aes128otrpv1 12.71 12.73 12.75 T:aes128otrsv2 12.73 12.76 12.78 T:aes128otrsv1 13.32 13.33 13.33 T:acorn128v3 16.46 16.47 16.55 T:aes256otrpv2 16.46 16.49 16.51 T:aes256otrpv1 16.57 16.59 16.63 T:aes256otrsv2 16.57 16.59 16.63 T:aes256otrsv1 17.44 17.46 17.49 T:aes128n12clocv1 17.47? 17.50? 23.92? T:aes128n8clocv1 19.97 20.01 20.38 T:twine80n6t4clocv2 20.64 20.65 20.66 T:proest256otrv1 21.62 21.69 21.86 T:twine80n6t4clocv3 22.95 23.00 23.02 T:ketjesrv2 25.78 25.82 25.87 T:ketjesrv1 29.65 29.68 29.75 T:aeadaes128ocbtaglen96v1 29.68 29.72 29.77 T:aeadaes128ocbtaglen64v1 34.47 34.49 34.64 T:aeadaes192ocbtaglen64v1 34.46 34.50 34.59 T:aeadaes192ocbtaglen96v1 39.42 39.45 39.47 T:aeadaes256ocbtaglen96v1 39.46 39.48 39.49 T:aeadaes256ocbtaglen64v1 45.07 45.24 45.59 T:proest128otrv1 58.67 58.79 59.01 T:colm127v1 68.15 68.19 68.33 T:ketjejrv1 68.61 68.68 68.76 T:ketjejrv2 69.49 73.28 73.35 T:present80n6t4silcv3 92.28 92.50 92.60 T:aezv1 96.70 96.81 98.30 T:deoxysneq256128v13 97.28 97.41 98.15 T:deoxysneq128128v13 118.71 118.82 119.01 T:deoxyseq128128v13 125.42 125.80 131.28 T:led80n6t4silcv3 128.77 128.86 129.56 T:deoxyseq256128v13 293.93? 301.86? 426.41? aes256gcmv1 541.21? 570.51? 633.99? T:acorn128 1682.04 1682.64 1683.42 T:led80n6t4silcv2 1685.26 1688.00 1688.58 T:led80n6silcv1 2715.84 2716.31 2716.60 T:present80n6silcv1 2717.35 2717.93 2718.92 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.81? 0.89? 1.09? T:aegis128 0.91? 0.94? 1.15? aegis128l 0.93 0.95 0.98 T:aegis128l 1.16? 1.18? 1.55? aegis256 1.20? 1.23? 1.38? T:tiaoxinv2 1.21? 1.25? 1.35? T:tiaoxinv1 1.39 1.40 1.41 T:aezv5 1.40 1.43 1.46 T:aezv3 1.44 1.45 1.52 T:aezv4 2.36 2.38 2.40 T:colm0v1 2.43 2.47 2.49 T:aes128otrsv3 2.70 2.76 2.82 T:morus640128v1 2.81 2.84 2.89 T:morus640128v2 2.83? 2.85? 3.75? T:aeadaes128ocbtaglen128v1 2.93 2.98 3.12 T:deoxysneq128128v1 3.00 3.02 3.03 T:aes128n8t8silcv2 2.99 3.02 3.05 T:aes128n12t8silcv2 3.01 3.03 3.05 T:aes128n12t8silcv3 3.03 3.05 3.09 T:aes128n12t8clocv2 3.04 3.05 3.08 T:aes128n8t8clocv2 3.05 3.09 3.10 T:aes128n12t8clocv3 2.98 3.10 3.18 T:aes128otrcv3 3.13 3.16 3.22 T:morus1280128v1 3.16 3.23 3.30 T:morus1280256v1 3.41 3.45 3.54 T:morus1280128v2 3.45 3.48 3.49 T:aes256otrsv3 3.45 3.48 3.55 T:morus1280256v2 3.47? 3.62? 7.53? T:aeadaes256ocbtaglen128v1 3.66 3.72 3.79 T:deoxysneq256128v1 3.60? 3.90? 4.12? T:aes128otrpv3 3.91 3.96 3.99 T:deoxysi128v141 3.95 3.98 4.00 T:aes256otrcv3 3.90? 4.02? 8.22? T:aeadaes192ocbtaglen128v1 4.62 4.64 4.73 T:deoxysi256v141 4.91 4.93 5.04 T:aes256otrpv3 4.97 5.05 5.38 T:deoxyseq128128v1 6.02 6.05 6.10 T:deoxyseq256128v1 6.20 6.23 6.27 T:aesjambuv1 6.21 6.26 6.34 T:deoxysii128v141 7.29 7.37 7.47 T:deoxysii256v141 7.82 7.91 7.97 T:norx6441v1 7.96 8.00 8.05 T:norx6441v3 7.98 8.03 8.09 T:norx6441v2 8.35 8.35 8.44 T:ascon128av11 8.38 8.38 8.53 T:ascon96v1 8.43 8.56 8.84 ascon128av12 9.11 9.12 9.13 T:norx3241v1 9.29 9.33 9.34 T:norx3241v2 9.34 9.35 9.38 T:norx3241v3 10.48 10.58 10.71 ascon128v12 10.92 10.92 11.08 T:ascon128v1 10.92 10.97 11.21 T:ascon128v11 11.98 12.06 12.09 T:norx6461v2 12.02 12.07 12.11 T:norx6461v3 11.95 12.10 12.23 T:norx6461v1 12.52 12.78 13.03 T:lakekeyakv1 13.59 13.59 13.69 T:lakekeyakv2 13.95 13.96 13.98 T:norx3261v3 13.95 13.98 13.99 T:norx3261v2 13.90 14.00 14.10 T:norx6444v3 14.68 14.95 15.31 T:riverkeyakv2 15.20 15.52 15.98 T:aes128gcmv1 15.48 15.92 16.55 T:aes256gcmv1 16.30 16.31 16.33 T:norx3261v1 16.80 16.99 17.27 T:seakeyakv2 17.84 17.90 18.04 T:oceankeyakv2 19.43 19.55 19.75 T:aes128otrsv1 19.70 19.80 19.95 T:aes128otrpv1 19.51 19.81 19.95 T:aes128otrsv2 19.86 20.08 20.23 T:aes128otrpv2 21.29 21.34 21.66 T:aes128n12clocv1 21.41? 21.63? 27.58? T:aes128n8clocv1 25.30 25.41 25.54 T:aes256otrsv1 25.30 25.44 25.60 T:aes256otrsv2 25.47 25.52 25.88 T:twine80n6t4clocv2 25.69 25.86 25.95 T:aes256otrpv2 25.70 25.87 25.98 T:aes256otrpv1 26.89 27.12 27.67 T:ketjeminorv2 28.21 28.43 28.69 T:twine80n6t4clocv3 30.23 30.37 30.38 T:acorn128v2 30.52 30.52 30.55 T:acorn128v3 32.05 32.08 32.22 T:norx6444v2 36.36 36.37 36.77 T:ketjemajorv2 37.99 38.13 38.46 T:aeadaes128ocbtaglen64v1 38.38 38.75 39.48 T:aeadaes128ocbtaglen96v1 39.00 39.03 39.19 T:norx6444v1 40.33 40.65 40.88 T:lunarkeyakv2 41.41 41.66 41.80 T:ketjesrv1 43.45 43.86 44.16 T:aeadaes192ocbtaglen64v1 43.76 44.14 44.25 T:aeadaes192ocbtaglen96v1 46.30 46.51 47.16 T:ketjesrv2 50.34 50.38 50.62 T:aeadaes256ocbtaglen64v1 50.28 50.38 50.64 T:aeadaes256ocbtaglen96v1 57.74 57.80 58.16 T:proest256otrv1 73.31 74.90 75.88 T:colm127v1 87.85 88.12 88.39 T:proest128otrv1 87.92 88.20 88.48 T:ketjejrv1 88.27 88.37 88.64 T:deoxysneq128128v13 89.93 90.17 90.33 T:present80n6t4silcv3 91.88 92.17 92.68 T:ketjejrv2 95.15 95.84 96.39 T:deoxysneq256128v13 108.10 108.93 109.35 T:aezv1 147.41 147.97 148.20 T:deoxyseq128128v13 159.32 159.75 160.73 T:deoxyseq256128v13 148.95 160.46 161.45 T:led80n6t4silcv3 336.73? 341.93? 584.24? aes256gcmv1 1883.21 1884.27 1885.23 T:led80n6t4silcv2 1889.51 1891.16 1894.16 T:led80n6silcv1 2116.26? 2245.67? 2396.73? T:acorn128 3041.72 3042.94 3045.10 T:present80n6silcv1 3043.15 3044.49 3045.75 T:present80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.85? 0.93? 1.20? T:aegis128 0.92? 1.00? 1.09? T:aegis128l 1.02? 1.06? 1.15? aegis128l 1.23? 1.26? 1.41? T:tiaoxinv1 1.24? 1.27? 1.41? T:tiaoxinv2 1.26? 1.28? 1.44? aegis256 1.34 1.36 1.40 T:aezv5 1.37 1.40 1.45 T:aezv3 1.43 1.46 1.48 T:aezv4 2.62 2.65 2.67 T:aes128otrsv3 2.72 2.78 2.87 T:morus640128v1 2.75? 2.82? 3.66? T:aeadaes128ocbtaglen128v1 2.89 2.92 2.95 T:colm0v1 2.98 2.99 3.02 T:morus640128v2 3.09 3.12 3.15 T:aes128n12t8clocv2 3.12 3.14 3.16 T:aes128n8t8clocv2 3.12 3.14 3.16 T:aes128n12t8clocv3 3.12 3.23 3.34 T:aes128n12t8silcv2 3.16 3.25 3.35 T:aes128n12t8silcv3 3.13 3.27 3.37 T:aes128n8t8silcv2 3.20 3.27 3.33 T:morus1280256v1 3.21 3.27 3.55 T:aes128otrcv3 3.26 3.29 3.31 T:morus1280128v1 3.50 3.52 3.55 T:morus1280256v2 3.49 3.52 3.58 T:morus1280128v2 3.61 3.65 3.67 T:aes256otrsv3 3.80? 3.83? 4.44? T:aes128otrpv3 3.41? 3.88? 7.59? T:aeadaes256ocbtaglen128v1 3.63? 3.91? 5.58? T:aeadaes192ocbtaglen128v1 4.20 4.24 4.31 T:aes256otrcv3 4.62? 4.66? 5.67? T:aes256otrpv3 4.66 4.72 4.80 T:deoxysneq256128v1 4.68 4.73 4.78 T:deoxysneq128128v1 5.12 5.24 5.27 T:deoxysi128v141 6.02 6.08 6.10 T:deoxysi256v141 6.17 6.44 6.70 T:aesjambuv1 6.85 6.92 7.01 T:deoxysii128v141 6.94 7.08 7.11 T:deoxyseq128128v1 7.05 7.12 7.20 T:deoxyseq256128v1 8.01 8.05 8.12 T:norx6441v1 8.15 8.15 8.35 T:ascon128av11 8.10 8.18 8.33 T:norx6441v2 8.11 8.18 8.26 T:norx6441v3 8.29 8.30 8.38 T:ascon96v1 8.34 8.48 8.60 T:deoxysii256v141 8.45 8.55 8.83 ascon128av12 9.41 9.43 9.48 T:norx3241v1 9.59 9.62 9.66 T:norx3241v3 9.61 9.63 9.67 T:norx3241v2 10.43 10.51 10.71 ascon128v12 10.56 10.56 10.80 T:ascon128v1 10.56 10.56 10.84 T:ascon128v11 12.08 12.14 12.34 T:norx6461v1 12.09 12.16 12.26 T:norx6461v3 12.10 12.16 12.20 T:norx6461v2 12.78 12.84 12.98 T:lakekeyakv1 13.62? 13.67? 15.46? T:lakekeyakv2 13.83 13.98 14.13 T:norx6444v3 14.30 14.34 14.37 T:norx3261v3 14.34 14.37 14.38 T:norx3261v2 14.66 14.97 15.34 T:riverkeyakv2 15.18 15.41 15.70 T:aes128gcmv1 15.43 15.66 16.05 T:aes256gcmv1 16.44 16.45 16.45 T:norx3261v1 16.76 16.94 17.12 T:seakeyakv2 17.11 17.38 17.89 T:oceankeyakv2 19.74 19.82 19.96 T:aes128otrsv1 19.80 19.84 20.15 T:aes128otrsv2 20.16 20.30 20.49 T:aes128otrpv1 20.23 20.41 20.52 T:aes128otrpv2 22.07 22.39 22.69 T:aes128n12clocv1 22.04? 22.66? 28.54? T:aes128n8clocv1 25.01 25.05 25.34 T:twine80n6t4clocv2 25.45 25.66 25.86 T:aes256otrsv1 25.74 25.97 26.16 T:aes256otrsv2 25.91 26.02 26.14 T:aes256otrpv1 26.03 26.23 26.37 T:aes256otrpv2 27.27 27.60 28.37 T:ketjeminorv2 27.97 28.10 28.34 T:twine80n6t4clocv3 30.53 30.55 30.91 T:acorn128v2 30.60 30.65 30.70 T:acorn128v3 32.28 32.38 32.55 T:norx6444v2 36.59 36.91 37.20 T:ketjemajorv2 39.14 39.52 40.14 T:norx6444v1 39.90 40.24 40.55 T:lunarkeyakv2 41.97 42.34 43.26 T:ketjesrv1 43.25 43.60 44.20 T:ketjesrv2 46.14 46.34 46.67 T:aeadaes128ocbtaglen64v1 46.38 46.44 46.67 T:aeadaes128ocbtaglen96v1 53.02 53.09 53.27 T:aeadaes192ocbtaglen96v1 53.15 53.20 53.47 T:aeadaes192ocbtaglen64v1 59.45 59.91 62.52 T:proest256otrv1 61.41 61.45 61.91 T:aeadaes256ocbtaglen96v1 61.47 61.55 61.71 T:aeadaes256ocbtaglen64v1 81.52 82.50 83.55 T:colm127v1 85.44 87.91 89.70 T:present80n6t4silcv3 89.25 89.58 89.91 T:ketjejrv1 89.55 89.72 91.40 T:proest128otrv1 91.98 92.27 92.86 T:ketjejrv2 107.25 107.72 108.22 T:deoxysneq128128v13 107.57 108.30 108.55 T:deoxysneq256128v13 113.45 113.86 114.42 T:aezv1 147.07 147.56 148.14 T:deoxyseq128128v13 149.16 156.01 165.51 T:led80n6t4silcv3 158.84 159.43 160.71 T:deoxyseq256128v13 327.67? 328.45? 478.12? aes256gcmv1 1884.91 1886.31 1887.55 T:led80n6t4silcv2 1888.26 1890.73 1892.74 T:led80n6silcv1 2005.23? 2011.81? 2318.76? T:acorn128 3042.72 3044.26 3047.43 T:present80n6silcv1 3042.23 3044.48 3048.22 T:present80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.83 0.85 0.90 T:aegis128 0.91 0.94 0.98 T:aegis128l 1.04? 1.07? 1.24? T:aezv3 1.06 1.07 1.09 aegis128l 1.13 1.13 1.25 T:aezv4 0.99? 1.20? 1.88? T:aezv5 1.21 1.23 1.25 T:tiaoxinv2 1.23? 1.25? 1.81? T:tiaoxinv1 1.26? 1.28? 2.19? aegis256 2.62 2.65 2.68 T:aes128otrsv3 2.73 2.78 2.82 T:morus640128v1 2.75 2.79 2.81 T:aeadaes128ocbtaglen128v1 2.86 2.91 3.08 T:aes128n8t8silcv2 2.91? 2.95? 4.73? T:aes128n12t8silcv3 2.90? 2.95? 4.73? T:aes128n12t8silcv2 2.95 2.96 2.99 T:morus640128v2 2.98 2.98 3.04 T:colm0v1 3.06 3.07 3.09 T:aes128n8t8clocv2 3.07 3.09 3.13 T:aes128n12t8clocv2 3.10 3.13 3.15 T:aes128n12t8clocv3 3.22 3.24 3.28 T:morus1280128v1 3.24 3.27 3.29 T:morus1280256v1 3.22? 3.28? 3.59? T:aes128otrcv3 3.49 3.49 3.53 T:morus1280128v2 3.48 3.51 3.54 T:morus1280256v2 3.37? 3.56? 3.88? T:aeadaes256ocbtaglen128v1 3.62 3.66 3.68 T:aes256otrsv3 3.63? 3.86? 7.90? T:aeadaes192ocbtaglen128v1 4.23 4.24 4.30 T:aes256otrcv3 3.86? 4.45? 4.76? T:aes128otrpv3 4.59 4.62 4.71 T:deoxysneq128128v1 4.59 4.65 4.69 T:deoxysneq256128v1 5.19 5.25 5.30 T:deoxysi128v141 4.59? 5.45? 5.76? T:aes256otrpv3 6.02 6.08 6.12 T:deoxysi256v141 6.23 6.30 6.66 T:aesjambuv1 6.91 6.93 7.03 T:deoxysii128v141 7.02 7.09 7.72 T:deoxyseq128128v1 7.14 7.16 7.18 T:deoxyseq256128v1 8.12 8.12 8.31 T:ascon128av11 7.98 8.16 8.27 T:norx6441v1 8.18 8.20 8.22 T:norx6441v3 8.09 8.22 8.30 T:norx6441v2 8.24 8.24 8.52 T:ascon96v1 8.37 8.41 8.42 T:deoxysii256v141 8.31 8.41 8.41 ascon128av12 9.43 9.45 9.50 T:norx3241v1 9.59 9.60 9.63 T:norx3241v2 9.59 9.62 9.65 T:norx3241v3 10.42 10.43 10.43 ascon128v12 10.53 10.53 10.66 T:ascon128v1 10.53 10.53 10.89 T:ascon128v11 12.06 12.14 12.22 T:lakekeyakv1 12.14 12.22 12.32 T:norx6461v2 12.15 12.24 12.30 T:norx6461v3 12.18 12.32 12.39 T:norx6461v1 13.67? 13.70? 15.60? T:lakekeyakv2 13.88 13.95 14.03 T:norx6444v3 14.29 14.34 14.39 T:norx3261v3 14.32 14.35 14.36 T:norx3261v2 14.72 15.04 15.13 T:riverkeyakv2 14.98 15.25 15.39 T:aes128gcmv1 15.50 15.61 15.68 T:aes256gcmv1 16.44 16.45 16.45 T:norx3261v1 16.84 17.05 17.41 T:seakeyakv2 16.99 17.41 17.92 T:oceankeyakv2 19.94 20.06 20.62 T:aes128otrsv1 19.86 20.14 20.49 T:aes128otrsv2 20.27 20.59 20.80 T:aes128otrpv1 20.31 20.59 20.98 T:aes128otrpv2 21.95 22.09 22.34 T:aes128n12clocv1 22.08? 22.37? 28.85? T:aes128n8clocv1 25.07 25.27 25.52 T:twine80n6t4clocv2 25.82 26.05 26.36 T:aes256otrsv1 26.06 26.27 26.45 T:aes256otrpv1 26.01 26.36 26.53 T:aes256otrsv2 26.34 26.52 26.76 T:aes256otrpv2 27.53 27.93 28.48 T:ketjeminorv2 28.04 28.19 28.83 T:twine80n6t4clocv3 30.53 30.53 30.55 T:acorn128v2 30.48 30.61 30.65 T:acorn128v3 32.31 32.55 33.19 T:norx6444v2 37.12 37.23 37.61 T:ketjemajorv2 39.20 39.23 40.04 T:norx6444v1 40.49 40.62 40.87 T:lunarkeyakv2 42.36 42.82 43.21 T:ketjesrv1 43.34 43.80 44.27 T:ketjesrv2 46.32 46.38 46.47 T:aeadaes128ocbtaglen64v1 46.45 46.61 46.92 T:aeadaes128ocbtaglen96v1 53.02 53.26 53.34 T:aeadaes192ocbtaglen64v1 53.09 53.26 53.40 T:aeadaes192ocbtaglen96v1 57.84 58.04 58.33 T:proest256otrv1 61.45 61.48 61.90 T:aeadaes256ocbtaglen64v1 61.67 61.74 61.95 T:aeadaes256ocbtaglen96v1 81.30 81.46 81.70 T:colm127v1 89.61 89.72 89.96 T:proest128otrv1 89.11 89.78 90.03 T:ketjejrv1 89.47 90.15 90.38 T:present80n6t4silcv3 92.18 92.62 93.17 T:ketjejrv2 107.56 107.98 108.44 T:deoxysneq128128v13 107.56 108.52 108.89 T:deoxysneq256128v13 113.23 113.50 113.92 T:aezv1 147.23 148.04 148.77 T:deoxyseq128128v13 149.08 150.09 156.91 T:led80n6t4silcv3 158.91 159.34 160.54 T:deoxyseq256128v13 325.26? 327.50? 465.45? aes256gcmv1 1881.58 1883.13 1885.14 T:led80n6t4silcv2 1888.05 1890.77 1892.28 T:led80n6silcv1 1904.11? 1954.53? 2150.30? T:acorn128 3041.09 3043.30 3045.09 T:present80n6silcv1 3042.73 3044.26 3045.38 T:present80n6t4silcv2