VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of authenticated ciphers on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20231107

[Page version: 20240828 00:45:55]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents benchmark results collected in eBAEAD:

• "1536+0 encrypt": Speed (cycles/byte) of encrypting a 1536-byte message with no additional data.
• "1536+0 decrypt": Speed of decrypting a 1536-byte message.
• "1536+0 forgery": Speed of recognizing a 1536-byte forged message.
• "1536+1536": Same but using a 1536-byte message and 1536 bytes of additional data.
• "0+1536": Same but using an empty message and 1536 bytes of additional data. Nothing is encrypted but the additional data is authenticated.
• "64": 64-byte messages (and/or 64-byte additional data).
• "long": long messages (and/or long additional data). Speed is computed as 1/1920 of the difference in cycle counts between handling a 2048-byte message and handling a 128-byte message.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation. Designers and implementors interested in submitting new authenticated ciphers and new implementations should read the call for submissions.

Implementation notes

NISTLWC graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 7.49? 7.49? 9.05? T:hs1sivhiv2 8.85 8.85 9.38 T:ascon128av11 11.46? 11.52? 13.41? ascon80pqv12 11.72? 11.78? 13.41? T:acorn128v3 11.85 12.17 12.70 T:hs1sivlov2 12.24 12.57 13.02 T:hs1sivlov1 12.76? 12.89? 14.26? T:acorn128v2 13.28? 13.35? 14.84? T:ascon128v11 14.84 15.36 16.47 T:hs1sivv2 14.84 15.43 16.21 T:hs1sivv1 15.89 17.38 17.64 T:aegis128l 17.19? 19.86? 20.83? T:hs1sivhiv1 19.08 20.51 20.83 T:calicov8 19.92 21.09 21.48 T:aegis128 26.24 26.95 27.15 ascon128bi32v12 30.40 30.53 31.12 T:aeadaes128ocbtaglen96v1 30.53 30.66 30.99 T:aeadaes128ocbtaglen64v1 30.27 30.79 31.77 T:aeadaes128ocbtaglen128v1 31.45 31.71 32.81 T:icepole128v1 31.58 31.71 32.16 T:aes128otrpv1 31.58 31.71 32.55 T:aes128otrsv2 31.58 31.71 33.14 T:icepole128av1 31.58 31.77 32.75 T:icepole256av1 30.21 31.84 32.49 T:icepole128v2 30.21 31.84 32.55 T:icepole128av2 31.71 31.84 32.62 T:aes128otrpv3 31.84 33.33 34.83 T:icepole256av2 34.64 34.83 35.48 T:aeadaes192ocbtaglen96v1 34.64 34.90 36.00 T:aeadaes192ocbtaglen128v1 34.77 34.90 35.94 T:aeadaes192ocbtaglen64v1 35.68 35.81 36.91 T:aes256otrcv3 37.43 37.76 39.00 T:deoxysi128v141 38.41 38.74 39.78 T:aeadaes256ocbtaglen128v1 38.54 38.74 39.78 T:aeadaes256ocbtaglen64v1 38.93 39.00 40.04 T:clx128q 39.19 39.26 40.30 T:aes256otrpv1 39.00 39.32 40.43 T:aes256otrpv3 38.67 39.39 40.04 T:aeadaes256ocbtaglen96v1 37.11 39.58 39.97 T:elephant200v1 39.19 40.17 40.95 T:aes256otrsv2 41.02 42.51 42.90 T:deoxysi256v141 44.01 44.99 45.64 T:aesjambuv1 45.44 46.29 46.94 T:clx192q 45.96 46.35 47.66 T:aes128n12t8clocv3 44.21 46.61 48.89 T:aes128gcmv1 45.96 46.74 49.28 T:aes128n12clocv1 46.29 47.46 47.92 T:aes256cpfbv1 49.48 50.78 51.11 T:giftcofb128v1 49.93 51.37 51.56 T:aes128n8t8silcv2 49.80 51.56 52.47 T:aes128n12silcv1 50.00 51.63 52.86 T:aes128n12t8silcv3 50.72 51.69 53.06 T:aes128n8silcv1 50.85 52.02 52.99 T:comet128aesv1 49.61 52.41 53.78 T:isapa128av20 50.78 52.47 53.91 T:aes128marble4rv1 51.50 54.49 56.12 T:isapa128v20 57.23 57.62 58.46 T:gimli24v1 57.81 59.18 59.57 T:clx128 61.07 61.69 62.50 T:clx256q 66.08 67.97 70.70 T:cmcc22v1 66.93 68.10 70.83 T:cmcc44v1 66.73 68.36 70.18 T:cmcc24v1 66.47 68.68 69.73 T:cmcc42v1 66.86 69.01 69.79 T:cmcc84v1 72.40 72.79 73.76 T:clx128h 72.40 72.92 74.67 T:aes128poetv2aes128 73.63 73.83 74.87 T:flexaead128b064v12 73.44 73.89 75.13 T:flexaead256b128v12 72.01 75.00 75.72 T:aes128poetv1aes128 73.89 75.85 77.15 T:flexaead128b128v12 75.13 77.93 79.23 T:flexaead256b256v12 78.12 79.95 82.36 T:ifeedaes128n104v1 79.30 80.27 82.16 T:ifeedaes128n96v1 80.27 81.80 83.59 T:deoxysii128v141 82.03 83.20 83.59 T:clx192h 83.20 83.59 84.90 T:drygascon128k56 83.27 84.38 84.96 T:drygascon128k32 83.40 84.77 85.55 T:drygascon128k16 85.42 86.85 87.89 T:iscream12v1 85.55 86.98 88.61 T:iscream12v2 96.03 96.29 97.33 T:clx256h 99.28 99.61 101.11 T:iscream14v1 99.35 100.20 101.11 T:iscream14v2 101.24 102.99 103.71 T:grain128aead 119.34 120.83 122.98 T:drygascon256k32 126.89 128.97 131.12 T:aezv5 133.72 136.13 137.57 T:deoxysneq128128v13 133.46 136.20 137.89 T:deoxysneq128128v1 155.08 156.90 158.53 T:hanmre 160.22 163.22 165.43 T:isapk128av20 162.70 163.93 165.76 T:elmd500v1 169.99 172.20 174.41 T:clae128v1 212.76 216.08 222.53 T:isapk128v20 219.34 220.51 223.44 T:comet128chamv1 220.05 222.14 227.67 T:aegis128x2 239.19 239.58 241.47 T:deoxysneq256128v1 238.48 241.15 241.99 T:deoxysneq256128v13 243.16 244.14 250.85 T:comet64speckv1 246.88 247.53 251.11 T:aescopav1 263.41 265.59 272.40 T:comet64chamv1 267.25 269.04 271.03 T:deoxyseq128128v1 270.51 272.01 275.91 T:deoxyseq128128v13 293.49 293.75 297.79 T:estatetweaes128v1 330.92 334.05 339.45 T:aegis256x2 347.07 349.22 354.49 T:elephant200v2 392.38 395.57 399.80 T:deoxysii256v141 423.18 428.97 433.27 T:isapxv20 428.06 430.34 435.42 T:aezv3 468.75 472.20 478.91 T:flexaead256b256v1 475.00 478.39 484.31 T:deoxyseq256128v1 479.17 482.03 488.41 T:deoxyseq256128v13 553.78 562.04 563.67 T:artemia128v12 648.96 653.52 656.90 T:flexaead128b064v1 676.56 683.98 686.59 T:artemia256v12 720.31 727.41 736.13 T:flexaead128b128v1 986.85 987.96 989.71 T:enchilada128v1 1272.66 1275.91 1280.73 T:joltikeq6464v1 1273.76 1276.30 1279.88 T:joltikeq8048v1 1276.95 1278.45 1280.08 T:joltikeq6464v13 1568.10 1576.69 1578.84 T:acorn128 1576.50 1581.05 1582.88 T:fountain128v1 1594.08 1600.33 1601.50 T:hern128v1 1828.58 1834.64 1837.57 T:aceae128v1 3073.89 3076.11 3079.56 T:joltikeq12864v1 3073.24 3076.63 3084.51 T:joltikeq12864v13 3072.33 3078.39 3082.55 T:joltikeq9696v13 3075.26 3078.45 3087.17 T:joltikeq80112v13 3073.50 3078.58 3080.79 T:joltikeq9696v1 3875.07 3883.66 3890.82 T:hyenav1 4027.80 4036.85 4050.65 T:ingage1k128n128c256r064 5512.70 5519.53 5525.59 T:ingage1k256n096c448r064 5512.17 5520.12 5531.38 T:ingage1k256n128c448r064 5569.47 5578.12 5581.38 T:ingage1k128n096c224r032 7891.21 7900.65 7907.88 T:estatetwegift128v1 8133.59 8144.21 8148.70 T:cilipadi128v1medium 9127.80 9134.18 9147.46 T:enchilada256v1 9152.28 9160.29 9173.70 T:cilipadi128v1extrahot 10851.82 10861.52 10880.14 T:cilipadi128v1hot 10917.58 10930.01 10939.84 T:cilipadi128v1mild 12168.68 12171.16 12179.75 T:ingage1k128n096c224r016 14019.08 14024.41 14034.96 T:elephant160v2 14029.49 14034.38 14042.51 T:elephant160v1 14861.59 14872.72 14887.76 T:elephant176v2 14872.46 14877.73 14890.76 T:elephant176v1 23541.47 23558.85 23565.17 T:ingage1k128n096c224r008

Cycles/byte for long+0 decrypt 25% 50% 75% aead 7.75? 7.88? 9.44? T:hs1sivhiv2 9.11? 9.11? 10.61? T:ascon128av11 11.46? 11.52? 13.02? ascon80pqv12 11.98? 12.04? 13.48? T:acorn128v3 12.17? 12.24? 13.87? T:hs1sivlov2 12.43? 12.83? 14.45? T:hs1sivlov1 12.70? 12.96? 14.52? T:acorn128v2 13.35? 13.41? 14.91? T:ascon128v11 14.97? 15.49? 16.80? T:hs1sivv2 14.97? 16.60? 16.80? T:hs1sivv1 16.02? 17.48? 18.23? T:aegis128l 19.01 20.51 20.70 T:calicov8 18.88? 20.96? 21.74? T:hs1sivhiv1 21.42 21.68 22.66 T:aegis128 25.46 26.56 27.34 ascon128bi32v12 30.53 30.79 30.99 T:aeadaes128ocbtaglen96v1 30.60 30.99 31.77 T:aeadaes128ocbtaglen64v1 30.53 31.05 31.77 T:aeadaes128ocbtaglen128v1 31.38 31.58 32.68 T:icepole128v1 31.45 31.64 32.81 T:icepole256av1 31.38 31.71 32.68 T:icepole128av1 31.51 31.71 32.81 T:icepole128av2 30.08 31.84 33.01 T:icepole128v2 32.23 32.29 33.01 T:aes128otrpv1 32.29 32.62 33.46 T:aes128otrsv2 32.29 32.62 33.92 T:aes128otrpv3 31.71 33.92 34.70 T:icepole256av2 35.03 35.42 36.46 T:aeadaes192ocbtaglen64v1 35.16 35.42 36.39 T:aeadaes192ocbtaglen96v1 35.35 35.55 37.17 T:aeadaes192ocbtaglen128v1 35.74 35.94 37.30 T:aes256otrcv3 38.93 39.19 40.43 T:clx128q 37.43? 39.71? 41.93? T:elephant200v1 39.32 39.71 41.28 T:aeadaes256ocbtaglen64v1 39.26 39.84 41.15 T:aeadaes256ocbtaglen128v1 39.78 40.04 41.41 T:aes256otrpv1 39.78 40.04 41.41 T:aes256otrsv2 39.52 40.62 41.34 T:aeadaes256ocbtaglen96v1 39.65 40.69 41.41 T:aes256otrpv3 42.84 44.56 46.68 T:deoxysi128v141 44.08 44.99 45.51 T:aesjambuv1 45.44 46.35 47.07 T:clx192q 44.66 47.07 48.89 T:aes128gcmv1 46.74 48.24 48.37 T:aes256cpfbv1 46.74 48.24 48.63 T:aes128n12t8clocv3 47.01 48.63 49.22 T:aes128n12clocv1 46.68 49.15 50.46 T:deoxysi256v141 49.28 50.59 50.91 T:giftcofb128v1 49.93 51.37 51.82 T:aes128n12silcv1 50.91 51.50 52.54 T:aes128n8t8silcv2 49.61 51.56 52.60 T:aes128n8silcv1 50.72 51.56 52.54 T:aes128n12t8silcv3 50.20 51.82 52.93 T:comet128aesv1 50.46 52.47 52.73 T:isapa128av20 52.47 55.08 55.66 T:isapa128v20 55.40 56.84 58.07 T:gimli24v1 57.75 59.11 60.48 T:clx128 61.13 61.69 61.78 T:clx256q 63.41 64.39 65.49 T:aes128marble4rv1 70.38 70.90 73.37 T:cmcc84v1 70.44 71.16 73.31 T:cmcc44v1 70.57 71.48 73.31 T:cmcc42v1 70.64 71.94 72.98 T:cmcc22v1 70.96 72.01 73.89 T:cmcc24v1 71.68 72.59 73.50 T:flexaead128b064v12 72.59 72.79 73.96 T:clx128h 72.85 74.09 75.20 T:flexaead256b128v12 73.44 74.22 76.04 T:aes128poetv1aes128 72.27 74.80 76.56 T:flexaead128b128v12 72.98 75.00 76.50 T:aes128poetv2aes128 74.15 77.08 78.58 T:flexaead256b256v12 77.15 79.62 81.51 T:ifeedaes128n104v1 79.30 80.66 82.23 T:ifeedaes128n96v1 80.60 81.54 82.62 T:deoxysii128v141 82.29 83.53 83.85 T:clx192h 83.85 84.18 86.91 T:drygascon128k16 82.68 84.24 86.39 T:drygascon128k56 83.92 85.29 86.13 T:drygascon128k32 84.83 86.13 87.43 T:iscream12v2 85.16 86.52 87.76 T:iscream12v1 95.77 96.22 97.59 T:clx256h 99.41 99.67 101.82 T:iscream14v2 99.67 100.78 101.43 T:iscream14v1 102.28 103.45 104.10 T:grain128aead 119.73 121.09 122.14 T:drygascon256k32 125.72 129.10 130.73 T:aezv5 155.14 156.38 158.92 T:hanmre 158.07 160.74 162.50 T:clae128v1 160.74 163.74 165.62 T:isapk128av20 171.35 172.98 174.61 T:elmd500v1 195.70 198.11 199.87 T:deoxysneq128128v13 195.51 198.31 203.06 T:deoxysneq128128v1 212.24 216.02 223.89 T:isapk128v20 219.73 222.01 225.13 T:comet128chamv1 220.70 223.83 228.32 T:aegis128x2 243.62 245.57 247.79 T:comet64speckv1 264.65 266.34 268.55 T:comet64chamv1 270.77 272.20 276.82 T:deoxyseq128128v13 293.55 294.01 301.17 T:estatetweaes128v1 307.42 309.38 316.99 T:deoxysneq256128v13 308.33 309.51 316.99 T:deoxysneq256128v1 328.19 330.99 336.91 T:aescopav1 330.60 332.55 337.50 T:aegis256x2 348.31 349.48 354.43 T:elephant200v2 389.84 392.12 397.33 T:deoxyseq128128v1 392.38 395.18 400.07 T:deoxysii256v141 423.11 429.23 434.05 T:isapxv20 429.49 431.32 436.20 T:aezv3 470.51 473.31 480.14 T:flexaead256b256v1 479.88 485.87 488.35 T:deoxyseq256128v13 561.26 567.45 569.99 T:artemia128v12 613.74 619.79 622.98 T:deoxyseq256128v1 657.75 663.41 666.47 T:flexaead128b064v1 676.30 682.10 684.18 T:artemia256v12 721.55 725.65 731.38 T:flexaead128b128v1 982.23 985.48 986.72 T:enchilada128v1 1275.65 1278.19 1280.40 T:joltikeq6464v13 1477.60 1479.49 1486.00 T:joltikeq6464v1 1477.28 1482.81 1486.72 T:joltikeq8048v1 1577.21 1582.16 1586.72 T:fountain128v1 1599.35 1608.14 1610.03 T:acorn128 1601.17 1608.40 1610.09 T:hern128v1 1830.92 1838.67 1841.54 T:aceae128v1 3075.46 3077.67 3080.01 T:joltikeq12864v13 3072.59 3077.73 3083.92 T:joltikeq9696v13 3071.35 3077.93 3081.12 T:joltikeq80112v13 3340.36 3344.47 3348.37 T:joltikeq9696v1 3339.13 3344.66 3349.28 T:joltikeq12864v1 3880.60 3890.49 3892.51 T:hyenav1 4029.04 4037.89 4053.12 T:ingage1k128n128c256r064 5515.89 5523.05 5526.50 T:ingage1k256n128c448r064 5515.49 5523.18 5530.79 T:ingage1k256n096c448r064 5570.83 5577.86 5585.35 T:ingage1k128n096c224r032 7893.88 7903.32 7911.72 T:estatetwegift128v1 8114.52 8123.37 8129.49 T:cilipadi128v1medium 9119.21 9126.43 9136.00 T:enchilada256v1 9155.27 9165.30 9180.66 T:cilipadi128v1extrahot 10838.61 10849.80 10871.74 T:cilipadi128v1hot 10914.91 10924.41 10936.78 T:cilipadi128v1mild 12176.17 12188.74 12196.22 T:ingage1k128n096c224r016 14021.81 14023.50 14037.04 T:elephant160v2 14030.99 14034.44 14047.72 T:elephant160v1 14865.69 14874.67 14885.22 T:elephant176v2 14875.07 14882.42 14897.40 T:elephant176v1 23543.23 23561.33 23569.66 T:ingage1k128n096c224r008

Cycles/byte for long+0 forgery 25% 50% 75% aead 7.55? 7.68? 9.38? T:hs1sivhiv2 9.11 9.11 9.44 T:ascon128av11 11.39? 11.52? 12.89? ascon80pqv12 11.85? 11.91? 13.61? T:calicov8 11.98? 12.04? 13.48? T:acorn128v3 11.91? 12.24? 13.61? T:hs1sivlov2 12.24? 12.37? 13.93? T:hs1sivlov1 12.76? 12.83? 14.32? T:acorn128v2 13.41? 13.48? 15.17? T:ascon128v11 14.78? 15.04? 16.54? T:hs1sivv2 14.78? 16.47? 16.99? T:hs1sivv1 16.02 17.38 17.45 T:aegis128l 19.08 20.64 20.90 T:hs1sivhiv1 20.18 21.48 22.01 T:aegis128 25.26 26.50 26.95 ascon128bi32v12 25.65? 26.50? 28.84? T:isapa128v20 30.60 30.66 30.99 T:aeadaes128ocbtaglen96v1 30.73 30.79 31.97 T:aeadaes128ocbtaglen128v1 30.66 30.86 32.42 T:aeadaes128ocbtaglen64v1 31.38 31.58 32.75 T:icepole128v1 30.08 31.71 32.62 T:icepole256av1 30.14 31.71 32.68 T:icepole128av2 31.51 31.71 33.01 T:icepole128av1 32.23 32.42 33.20 T:aes128otrpv1 30.01 32.62 33.01 T:icepole128v2 32.29 32.62 33.59 T:aes128otrpv3 32.36 32.94 33.66 T:aes128otrsv2 31.64 33.27 34.77 T:icepole256av2 33.53 33.59 34.64 T:isapa128av20 35.22 35.42 37.17 T:aeadaes192ocbtaglen96v1 35.29 35.68 36.91 T:aeadaes192ocbtaglen128v1 35.35 35.74 36.98 T:aeadaes192ocbtaglen64v1 35.68 35.81 36.85 T:aes256otrcv3 37.11 38.35 40.10 T:elephant200v1 38.93 39.06 39.26 T:clx128q 39.45 39.65 41.02 T:aeadaes256ocbtaglen64v1 39.45 39.71 41.08 T:aeadaes256ocbtaglen128v1 39.39 39.78 41.73 T:aeadaes256ocbtaglen96v1 39.71 40.23 41.47 T:aes256otrpv1 39.71 40.56 41.28 T:aes256otrpv3 39.97 40.89 41.67 T:aes256otrsv2 42.97 44.04 46.42 T:deoxysi128v141 44.14 45.31 45.64 T:aesjambuv1 45.44 46.71 47.40 T:clx192q 44.60 46.88 48.63 T:aes128gcmv1 46.68 47.92 48.57 T:aes256cpfbv1 46.81 48.44 49.74 T:aes128n12t8clocv3 47.46 48.70 50.65 T:aes128n12clocv1 47.46 49.09 50.46 T:deoxysi256v141 49.87 50.72 51.37 T:aes128n8t8silcv2 50.39 50.85 50.91 T:giftcofb128v1 49.93 51.24 53.91 T:aes128n8silcv1 49.67 51.30 51.82 T:aes128n12t8silcv3 50.13 51.43 52.80 T:aes128n12silcv1 50.72 51.82 53.32 T:comet128aesv1 56.32 56.90 58.01 T:gimli24v1 57.75 59.11 60.22 T:clx128 61.07 61.72 62.70 T:clx256q 63.48 65.30 67.12 T:aes128marble4rv1 72.66 72.79 74.54 T:clx128h 72.59 73.05 73.83 T:flexaead128b064v12 71.48 73.11 75.20 T:flexaead256b128v12 73.05 73.76 76.56 T:aes128poetv2aes128 72.33 74.87 75.59 T:flexaead128b128v12 73.70 75.33 76.76 T:aes128poetv1aes128 74.22 76.50 78.39 T:flexaead256b256v12 70.90? 76.95? 79.49? T:cmcc84v1 74.93 77.21 80.27 T:cmcc22v1 75.00 77.41 79.43 T:cmcc44v1 75.26 78.32 80.53 T:cmcc42v1 74.74 78.58 79.95 T:cmcc24v1 79.43 79.62 81.71 T:ifeedaes128n96v1 79.36 79.69 81.84 T:ifeedaes128n104v1 80.53 81.90 83.66 T:deoxysii128v141 82.36 83.40 83.85 T:clx192h 82.68 83.98 86.59 T:drygascon128k56 84.05 85.16 85.48 T:drygascon128k16 83.92 85.22 85.74 T:drygascon128k32 85.03 86.65 88.35 T:iscream12v2 86.33 86.65 87.37 T:iscream12v1 96.03 96.16 97.46 T:clx256h 99.74 100.00 102.02 T:iscream14v1 99.48 100.52 101.63 T:iscream14v2 102.93 104.10 105.79 T:grain128aead 106.05 108.20 108.85 T:isapk128av20 119.27 121.16 122.53 T:drygascon256k32 126.63 129.10 131.45 T:aezv5 133.66 134.24 136.78 T:isapk128v20 155.21 156.25 158.53 T:hanmre 158.20 160.03 160.81 T:clae128v1 171.94 174.54 176.04 T:elmd500v1 195.77 197.79 199.67 T:deoxysneq128128v1 195.18 198.11 200.00 T:deoxysneq128128v13 220.31 222.33 224.35 T:comet128chamv1 220.25 222.40 228.06 T:aegis128x2 238.41 240.89 246.55 T:isapxv20 243.95 245.90 247.20 T:comet64speckv1 264.39 266.02 268.68 T:comet64chamv1 270.51 272.27 276.95 T:deoxyseq128128v13 292.77 293.82 297.33 T:estatetweaes128v1 308.07 309.44 314.97 T:deoxysneq256128v13 307.36 309.57 317.38 T:deoxysneq256128v1 329.56 330.92 337.70 T:aescopav1 329.69 332.68 338.74 T:aegis256x2 347.07 350.13 354.04 T:elephant200v2 388.61 390.14 399.87 T:deoxyseq128128v1 393.88 395.25 401.69 T:deoxysii256v141 427.08 432.68 436.26 T:aezv3 469.40 472.07 479.88 T:flexaead256b256v1 479.56 483.01 486.26 T:deoxyseq256128v13 561.00 568.62 570.12 T:artemia128v12 616.86 621.55 622.66 T:deoxyseq256128v1 660.35 664.65 665.69 T:flexaead128b064v1 675.98 684.51 685.74 T:artemia256v12 722.72 726.56 727.93 T:flexaead128b128v1 911.65 918.23 920.90 T:enchilada128v1 1275.91 1278.65 1282.75 T:joltikeq6464v13 1477.54 1479.62 1485.81 T:joltikeq6464v1 1476.56 1479.88 1485.61 T:joltikeq8048v1 1576.82 1580.21 1586.13 T:fountain128v1 1602.28 1608.59 1610.35 T:acorn128 1603.19 1609.51 1611.39 T:hern128v1 1830.21 1834.57 1838.74 T:aceae128v1 3075.20 3077.47 3081.38 T:joltikeq12864v13 3074.48 3078.78 3081.71 T:joltikeq80112v13 3340.43 3343.82 3346.29 T:joltikeq12864v1 3340.89 3343.88 3346.03 T:joltikeq9696v1 3880.79 3888.28 3900.07 T:hyenav1 4033.40 4037.63 4040.89 T:ingage1k128n128c256r064 5515.30 5523.18 5528.65 T:ingage1k256n096c448r064 5515.36 5524.61 5530.14 T:ingage1k256n128c448r064 5570.25 5578.32 5586.59 T:ingage1k128n096c224r032 7890.17 7900.91 7910.74 T:estatetwegift128v1 8118.36 8125.65 8137.30 T:cilipadi128v1medium 9088.80 9093.95 9110.22 T:enchilada256v1 9149.28 9156.45 9173.70 T:cilipadi128v1extrahot 10840.89 10849.28 10871.74 T:cilipadi128v1hot 10915.43 10924.67 10939.00 T:cilipadi128v1mild 12178.06 12181.38 12198.57 T:ingage1k128n096c224r016 14020.70 14029.56 14039.91 T:elephant160v2 14028.26 14034.31 14047.79 T:elephant160v1 14870.96 14875.65 14892.51 T:elephant176v1 14865.76 14877.34 14889.13 T:elephant176v2 23548.50 23566.28 23578.26 T:ingage1k128n096c224r008

Cycles/byte for long+long encrypt 25% 50% 75% aead 8.82 9.15 9.64 T:ascon128av11 31.28 31.48 32.03 T:clx128q 32.26 33.59 34.57 T:aes128gcmv1 34.80 35.12 36.23 T:aes128n12clocv1 34.75 35.38 35.58 T:aes128n12t8clocv3 35.61 35.87 36.59 T:aes256otrcv3 37.53 38.28 38.61 T:aes128n12silcv1 38.05 38.83 39.23 T:aes256otrpv1 40.30 40.49 41.28 T:clx128 47.85 48.18 48.89 T:clx128h 49.61 49.97 50.52 T:comet128aesv1 50.59 51.33 51.86 T:aes128marble4rv1 53.71 54.17 54.65 T:clx192h 55.27 56.28 58.11 T:flexaead128b064v12 55.21 56.38 57.13 T:flexaead256b128v12 57.10 58.40 59.28 T:flexaead128b128v12 57.98 58.89 60.16 T:flexaead256b256v12 111.07 112.24 112.96 T:clae128v1 132.00 132.65 134.93 T:elmd500v1 219.11 220.12 222.98 T:comet128chamv1 219.01 220.15 223.24 T:estatetweaes128v1 332.65 334.51 335.48 T:aegis256x2 346.32 349.06 350.49 T:flexaead256b256v1 493.23 493.82 494.86 T:flexaead128b064v1 543.07 547.72 551.99 T:flexaead128b128v1 949.93 952.67 955.01 T:enchilada128v1 5919.86 5922.01 5926.63 T:estatetwegift128v1 8128.48 8130.79 8139.26 T:cilipadi128v1medium 9111.95 9113.51 9119.60 T:enchilada256v1 9158.59 9161.69 9168.42 T:cilipadi128v1extrahot 10850.94 10858.14 10864.45 T:cilipadi128v1hot 10926.11 10930.37 10936.07 T:cilipadi128v1mild

Cycles/byte for long+long decrypt 25% 50% 75% aead 8.89 9.60 9.80 T:ascon128av11 31.41 31.51 32.00 T:clx128q 32.16 33.27 34.15 T:aes128gcmv1 35.29 35.35 35.99 T:aes128n12t8clocv3 35.64 35.87 36.85 T:aes256otrcv3 35.35 36.00 36.82 T:aes128n12clocv1 37.34 37.99 39.00 T:aes128n12silcv1 38.28 39.03 39.36 T:aes256otrpv1 40.17 40.23 41.15 T:clx128 47.98 48.86 49.41 T:clx128h 49.28 49.90 50.94 T:comet128aesv1 53.87 54.26 54.85 T:clx192h 53.91 55.11 55.99 T:flexaead128b064v12 54.79 56.45 56.67 T:flexaead256b128v12 56.02 57.16 59.73 T:aes128marble4rv1 56.38 57.62 57.85 T:flexaead128b128v12 57.85 58.56 59.83 T:flexaead256b256v12 104.10 104.79 105.50 T:clae128v1 136.65 137.21 139.55 T:elmd500v1 218.98 220.08 222.66 T:estatetweaes128v1 219.37 220.48 223.08 T:comet128chamv1 332.23 333.95 334.83 T:aegis256x2 346.09 349.51 350.52 T:flexaead256b256v1 497.66 499.02 500.88 T:flexaead128b064v1 547.10 548.40 551.07 T:flexaead128b128v1 948.54 951.40 952.93 T:enchilada128v1 5918.82 5923.05 5930.92 T:estatetwegift128v1 8119.79 8125.91 8133.53 T:cilipadi128v1medium 9107.98 9110.16 9117.15 T:enchilada256v1 9150.49 9160.06 9163.25 T:cilipadi128v1extrahot 10842.90 10848.83 10853.19 T:cilipadi128v1hot 10925.62 10930.40 10939.71 T:cilipadi128v1mild

Cycles/byte for long+long forgery 25% 50% 75% aead 8.95 9.64 9.90 T:ascon128av11 31.41 31.48 32.06 T:clx128q 31.90 33.27 34.08 T:aes128gcmv1 35.74 35.87 36.82 T:aes256otrcv3 35.90 36.10 36.39 T:aes128n12t8clocv3 35.48 36.17 36.43 T:aes128n12clocv1 37.40 38.09 38.74 T:aes128n12silcv1 38.44 39.39 40.27 T:aes256otrpv1 40.23 40.76 40.92 T:clx128 47.62 48.37 49.61 T:clx128h 49.32 50.36 51.07 T:comet128aesv1 53.87 54.46 54.95 T:clx192h 54.85 55.05 55.63 T:flexaead128b064v12 54.85 56.25 56.87 T:flexaead256b128v12 55.86 57.62 58.11 T:aes128marble4rv1 56.45 57.65 57.91 T:flexaead128b128v12 57.62 58.56 59.86 T:flexaead256b256v12 103.52 104.92 106.15 T:clae128v1 136.43 137.01 138.38 T:elmd500v1 219.11 220.31 222.59 T:estatetweaes128v1 219.95 220.64 222.43 T:comet128chamv1 331.62 334.15 335.25 T:aegis256x2 345.83 349.09 350.78 T:flexaead256b256v1 497.95 499.64 501.82 T:flexaead128b064v1 545.21 548.57 550.49 T:flexaead128b128v1 914.42 917.84 918.91 T:enchilada128v1 5919.56 5924.97 5928.29 T:estatetwegift128v1 8126.07 8131.77 8135.25 T:cilipadi128v1medium 9092.48 9097.04 9102.05 T:enchilada256v1 9150.55 9159.15 9166.86 T:cilipadi128v1extrahot 10846.45 10855.27 10863.44 T:cilipadi128v1hot 10926.79 10935.09 10941.37 T:cilipadi128v1mild

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.98? 1.30? 1.76? T:hs1sivlov1 1.24? 1.37? 1.43? T:hs1sivlov2 1.95? 2.34? 2.47? T:hs1sivv1 2.21? 2.34? 2.47? T:hs1sivhiv2 2.21? 2.34? 2.80? T:hs1sivv2 2.99? 3.52? 3.97? T:hs1sivhiv1 8.72 8.79 9.24 T:ascon128av11 11.13? 11.13? 12.70? ascon80pqv12 11.85? 11.91? 13.41? T:calicov8 11.98? 12.11? 13.87? T:acorn128v3 12.50? 12.50? 14.06? T:acorn128v2 12.96? 13.09? 14.52? T:ascon128v11 15.62 16.31 17.12 T:aegis128l 19.27 20.70 20.96 T:aegis128 19.34? 20.96? 22.40? T:aes128gcmv1 21.48 22.85 22.98 T:clx128 22.14 23.70 24.41 T:aes128n12t8clocv3 22.53 23.89 24.93 T:aes128n12clocv1 22.53 23.96 24.02 T:clx128h 22.53 23.96 24.22 T:clx128q 23.89 25.26 25.98 T:aes128n8silcv1 23.63? 25.33? 26.56? T:aes128n12silcv1 23.76 25.33 25.52 T:aes128n8t8silcv2 24.09 25.46 25.52 T:clx192h 24.09 25.52 25.91 T:aes128n12t8silcv3 24.35 25.91 26.56 T:aes128otrsv2 26.11 26.17 26.95 ascon128bi32v12 25.85? 26.63? 28.97? T:isapa128v20 29.10 29.17 29.62 T:aes128poetv2aes128 29.30 29.49 30.08 T:icepole128v1 29.30 29.49 30.40 T:icepole128av1 29.30 29.49 30.60 T:icepole256av1 27.99 29.52 30.53 T:icepole128av2 28.06 29.56 30.11 T:icepole128v2 28.45 29.56 31.18 T:aes128poetv1aes128 29.36 29.69 30.27 T:aes128otrpv1 29.88 30.08 30.60 T:aes128otrpv3 30.27 30.47 31.05 T:aeadaes128ocbtaglen96v1 30.47 30.63 31.32 T:aeadaes128ocbtaglen128v1 30.47 30.66 31.51 T:aeadaes128ocbtaglen64v1 29.56 31.12 32.55 T:icepole256av2 31.84 31.97 32.75 T:clx256h 33.33 33.46 33.59 T:isapa128av20 33.40 33.72 34.51 T:aes256otrsv2 33.07 33.85 34.90 T:cmcc42v1 33.53 33.85 35.22 T:cmcc84v1 32.88 33.98 35.09 T:cmcc22v1 34.24 34.38 35.42 T:aeadaes192ocbtaglen96v1 34.38 34.64 35.87 T:aeadaes192ocbtaglen128v1 34.38 34.73 35.94 T:aeadaes192ocbtaglen64v1 35.87 36.07 37.37 T:aes256otrcv3 37.30 37.83 38.93 T:flexaead128b064v12 37.04 38.15 38.41 T:aes256otrpv1 37.50 38.28 38.87 T:aes256otrpv3 38.02 38.28 39.13 T:flexaead256b128v12 39.19 39.45 40.43 T:aeadaes256ocbtaglen64v1 38.67 39.52 40.36 T:aeadaes256ocbtaglen96v1 39.00 40.14 40.76 T:aeadaes256ocbtaglen128v1 39.97 40.56 43.03 T:deoxysi256v141 39.84 40.62 41.54 T:flexaead128b128v12 38.41 41.21 41.86 T:flexaead256b256v12 43.55 43.82 45.44 T:aesjambuv1 45.05 46.29 46.74 T:aes256cpfbv1 48.24 49.41 49.74 T:comet128aesv1 48.70 50.13 50.26 T:giftcofb128v1 49.41 51.24 52.67 T:aes128marble4rv1 51.50 52.60 52.93 T:clae128v1 51.50 53.06 53.58 T:gimli24v1 73.83 76.69 79.10 T:hanmre 77.34 78.45 80.47 T:ifeedaes128n96v1 77.41 78.52 80.08 T:ifeedaes128n104v1 79.82 80.27 82.03 T:drygascon128k32 86.20 87.24 88.35 T:iscream12v2 86.26 87.96 89.91 T:aezv5 86.07 87.99 89.13 T:iscream12v1 98.63 100.26 102.15 T:grain128aead 99.28 100.42 101.89 T:iscream14v1 99.54 100.59 101.50 T:iscream14v2 100.26 102.73 104.30 T:elmd500v1 106.32 109.05 110.68 T:isapk128av20 117.58 119.99 121.81 T:drygascon256k32 120.57 124.41 127.47 T:aescopav1 130.92 133.79 141.02 T:isapk128v20 132.55 135.35 136.65 T:deoxyseq128128v13 133.85 136.72 137.63 T:deoxysneq128128v13 143.23 145.70 146.61 T:estatetweaes128v1 176.11 178.12 178.91 T:elephant200v2 193.95 196.55 197.92 T:deoxysii256v141 218.03 220.64 221.74 T:comet128chamv1 219.53 222.14 227.93 T:aegis128x2 221.61 223.89 224.61 T:flexaead256b256v1 237.76 238.61 242.19 T:comet64speckv1 237.89 238.93 242.58 T:deoxyseq256128v13 238.61 241.02 243.62 T:deoxysneq256128v13 242.77 245.44 250.65 T:isapxv20 275.59 278.06 280.53 T:aezv3 330.21 332.42 338.09 T:aegis256x2 331.25 334.11 339.06 T:flexaead128b064v1 362.83 368.55 374.41 T:flexaead128b128v1 554.75 555.86 563.41 T:artemia128v12 632.81 638.54 640.89 T:joltikeq6464v13 634.11 640.10 641.99 T:joltikeq6464v1 633.92 640.30 642.77 T:joltikeq8048v1 676.11 684.77 686.39 T:artemia256v12 916.34 917.90 920.18 T:enchilada128v1 1518.42 1526.63 1531.32 T:acorn128 1530.47 1531.77 1539.78 T:fountain128v1 1531.38 1535.35 1539.32 T:joltikeq12864v13 1532.10 1535.55 1541.80 T:joltikeq9696v13 1532.03 1535.74 1539.39 T:joltikeq80112v13 1533.66 1536.49 1540.95 T:joltikeq12864v1 1534.57 1538.31 1542.32 T:joltikeq9696v1 1623.18 1629.82 1630.79 T:hern128v1 1827.54 1830.66 1843.68 T:aceae128v1 3872.98 3880.50 3885.03 T:hyenav1 3943.29 3947.79 3953.45 T:estatetwegift128v1 4021.55 4030.40 4031.90 T:ingage1k128n128c256r064 5505.86 5514.71 5522.46 T:ingage1k256n096c448r064 5508.33 5515.49 5518.03 T:ingage1k256n128c448r064 5566.93 5573.96 5578.91 T:ingage1k128n096c224r032 7012.70 7019.01 7030.21 T:elephant160v2 7352.41 7356.45 7362.43 T:elephant176v2 8119.73 8126.30 8141.67 T:cilipadi128v1medium 9085.55 9092.32 9099.74 T:enchilada256v1 9150.85 9160.29 9174.54 T:cilipadi128v1extrahot 10841.02 10847.53 10854.56 T:cilipadi128v1hot 10919.92 10928.97 10944.86 T:cilipadi128v1mild 12165.10 12169.53 12189.84 T:ingage1k128n096c224r016 23538.87 23555.99 23566.99 T:ingage1k128n096c224r008

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.24 1.30 1.37 T:hs1sivlov1 1.30 1.30 1.37 T:hs1sivlov2 2.28? 2.34? 2.54? T:hs1sivhiv2 2.21? 2.41? 2.60? T:hs1sivv2 2.28 2.41 2.47 T:hs1sivv1 3.39? 3.58? 5.01? T:hs1sivhiv1 8.59? 8.66? 10.16? T:ascon128av11 11.13? 11.20? 12.83? ascon80pqv12 11.85? 11.91? 13.35? T:calicov8 11.98? 12.04? 13.61? T:acorn128v3 12.50? 12.57? 14.06? T:acorn128v2 12.70? 13.09? 14.19? T:ascon128v11 15.62 17.02 17.25 T:aegis128l 19.21 20.57 20.70 T:aegis128 19.27? 20.83? 22.98? T:aes128gcmv1 21.48 22.79 23.05 T:clx128 22.20 23.76 24.28 T:aes128n12t8clocv3 22.20 23.89 24.09 T:aes128n12clocv1 22.53 23.96 24.02 T:clx128h 22.53 24.02 24.22 T:clx128q 23.89 25.26 26.11 T:aes128n12silcv1 23.70 25.33 25.78 T:aes128n12t8silcv3 23.76 25.39 25.78 T:aes128n8t8silcv2 25.07 25.39 26.63 T:aes128n8silcv1 25.39 25.52 26.30 T:clx192h 25.85 25.91 26.04 T:aes128otrsv2 25.91 26.17 26.82 ascon128bi32v12 25.72? 26.56? 29.36? T:isapa128v20 28.84 29.49 30.66 T:aes128poetv1aes128 29.30 29.49 30.47 T:icepole128v1 29.36 29.49 29.62 T:icepole128av2 29.30 29.62 30.79 T:icepole128av1 29.49 29.62 30.21 T:aes128otrpv1 27.93 29.69 30.73 T:icepole128v2 29.36 29.69 30.79 T:icepole256av1 29.75 29.88 30.01 T:aes128otrpv3 28.78 29.95 30.99 T:aes128poetv2aes128 30.27 30.40 30.53 T:aeadaes128ocbtaglen96v1 30.47 30.73 31.51 T:aeadaes128ocbtaglen64v1 30.60 30.73 31.45 T:aeadaes128ocbtaglen128v1 29.62 31.18 31.87 T:icepole256av2 31.77 31.97 32.62 T:clx256h 33.53 33.59 34.83 T:isapa128av20 33.46 33.66 34.05 T:cmcc22v1 33.40 33.79 34.70 T:aes256otrsv2 33.59 33.85 35.09 T:cmcc42v1 33.59 34.05 35.16 T:cmcc84v1 34.31 34.70 35.87 T:aeadaes192ocbtaglen128v1 34.51 34.77 35.74 T:aeadaes192ocbtaglen96v1 34.44 34.83 36.20 T:aeadaes192ocbtaglen64v1 35.68 35.94 37.04 T:aes256otrcv3 36.98 37.11 38.48 T:aes256otrpv1 37.43 37.50 38.80 T:aes256otrpv3 38.02 38.15 39.19 T:flexaead128b064v12 36.72 38.35 39.84 T:flexaead256b128v12 39.06 39.88 40.76 T:aeadaes256ocbtaglen128v1 39.26 40.17 40.69 T:aeadaes256ocbtaglen96v1 39.91 40.56 41.15 T:flexaead128b128v12 39.26 40.62 40.82 T:aeadaes256ocbtaglen64v1 38.35 41.21 41.47 T:flexaead256b256v12 40.04 41.34 41.93 T:deoxysi256v141 43.62 44.60 45.12 T:aesjambuv1 45.05 46.16 47.20 T:aes256cpfbv1 48.70 49.15 50.78 T:comet128aesv1 48.57 50.07 51.56 T:clae128v1 48.70 50.13 50.33 T:giftcofb128v1 48.83 50.72 51.50 T:aes128marble4rv1 51.56 52.57 53.06 T:gimli24v1 74.09 76.82 78.19 T:hanmre 77.41 77.86 79.10 T:ifeedaes128n104v1 77.34 78.03 79.04 T:ifeedaes128n96v1 79.95 80.14 81.71 T:drygascon128k32 85.81 87.24 88.41 T:iscream12v2 85.87 87.96 89.97 T:iscream12v1 86.91 88.02 89.19 T:aezv5 99.48 100.26 101.76 T:iscream14v1 98.76 100.59 101.76 T:grain128aead 99.67 100.98 101.63 T:iscream14v2 99.74 101.50 103.78 T:elmd500v1 105.92 108.27 109.83 T:isapk128av20 118.88 120.77 122.14 T:drygascon256k32 122.14 124.74 128.19 T:aescopav1 131.38 134.05 137.30 T:isapk128v20 132.42 136.07 136.78 T:deoxyseq128128v13 133.79 136.46 138.09 T:deoxysneq128128v13 143.29 145.70 146.68 T:estatetweaes128v1 176.11 178.19 178.84 T:elephant200v2 193.62 195.96 198.18 T:deoxysii256v141 218.23 220.05 221.81 T:comet128chamv1 219.27 221.88 228.19 T:aegis128x2 219.92 221.88 223.24 T:flexaead256b256v1 237.76 238.80 242.97 T:deoxyseq256128v13 237.83 240.17 241.47 T:comet64speckv1 239.26 241.15 242.45 T:deoxysneq256128v13 242.58 246.09 251.11 T:isapxv20 275.39 278.12 279.43 T:aezv3 329.17 331.12 338.80 T:aegis256x2 331.84 333.85 338.67 T:flexaead128b064v1 365.43 372.85 378.84 T:flexaead128b128v1 554.04 559.11 562.83 T:artemia128v12 632.94 637.96 640.95 T:joltikeq6464v13 633.14 638.80 642.32 T:joltikeq8048v1 632.75 639.75 642.38 T:joltikeq6464v1 673.63 683.59 686.39 T:artemia256v12 916.41 919.01 919.99 T:enchilada128v1 1517.84 1526.04 1529.17 T:acorn128 1529.88 1533.27 1537.83 T:fountain128v1 1530.99 1534.64 1540.04 T:joltikeq12864v13 1532.49 1534.83 1539.32 T:joltikeq9696v13 1531.77 1535.25 1541.67 T:joltikeq80112v13 1533.85 1536.43 1545.64 T:joltikeq12864v1 1534.11 1537.30 1543.10 T:joltikeq9696v1 1623.70 1630.60 1632.29 T:hern128v1 1822.01 1831.45 1836.07 T:aceae128v1 3872.07 3879.26 3884.64 T:hyenav1 3943.03 3947.66 3953.45 T:estatetwegift128v1 4027.99 4032.62 4037.96 T:ingage1k128n128c256r064 5510.22 5518.10 5523.83 T:ingage1k256n128c448r064 5513.28 5519.86 5525.52 T:ingage1k256n096c448r064 5572.53 5582.16 5590.95 T:ingage1k128n096c224r032 7012.11 7019.66 7033.46 T:elephant160v2 7350.26 7358.27 7371.35 T:elephant176v2 8116.67 8121.29 8130.99 T:cilipadi128v1medium 9089.52 9091.67 9101.04 T:enchilada256v1 9148.76 9153.32 9162.63 T:cilipadi128v1extrahot 10843.68 10857.88 10867.77 T:cilipadi128v1hot 10928.65 10934.83 10947.07 T:cilipadi128v1mild 12173.18 12178.12 12191.99 T:ingage1k128n096c224r016 23541.86 23554.95 23562.96 T:ingage1k128n096c224r008

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.30 1.30 1.37 T:hs1sivlov1 1.30 1.37 1.43 T:hs1sivlov2 2.28 2.34 2.41 T:hs1sivhiv2 2.28? 2.34? 2.60? T:hs1sivv2 2.28 2.41 2.47 T:hs1sivv1 3.45 3.45 3.78 T:hs1sivhiv1 8.59 8.66 8.92 T:ascon128av11 11.13? 11.13? 12.63? ascon80pqv12 11.85? 11.91? 13.35? T:calicov8 11.98? 12.04? 13.54? T:acorn128v3 12.43? 12.50? 14.06? T:acorn128v2 12.76? 12.89? 14.45? T:ascon128v11 15.49? 17.06? 17.32? T:aegis128l 19.21 20.57 20.96 T:aegis128 19.21? 21.68? 22.40? T:aes128gcmv1 21.48 22.79 22.98 T:clx128 22.14 23.70 23.76 T:aes128n12t8clocv3 22.53 23.89 24.09 T:aes128n12clocv1 22.53 23.96 24.22 T:clx128q 23.89 24.15 24.87 T:clx128h 24.41 25.33 25.91 T:aes128n8silcv1 25.07 25.33 26.11 T:aes128n12silcv1 24.02 25.39 26.17 T:aes128n12t8silcv3 24.02 25.39 26.37 T:aes128n8t8silcv2 24.09 25.52 25.85 T:clx192h 25.85 25.91 26.30 T:aes128otrsv2 26.11 26.17 26.56 ascon128bi32v12 25.65? 26.79? 29.56? T:isapa128v20 29.10 29.30 30.53 T:aes128poetv1aes128 27.73 29.49 30.60 T:icepole256av1 28.78 29.49 30.99 T:aes128poetv2aes128 29.36 29.49 30.60 T:icepole128v1 29.30 29.56 30.66 T:icepole128av1 28.09 29.62 30.66 T:icepole128v2 29.62 29.69 30.40 T:aes128otrpv1 29.69 29.88 30.34 T:aes128otrpv3 30.21 30.40 30.53 T:aeadaes128ocbtaglen96v1 28.09 30.66 31.18 T:icepole128av2 30.60 30.73 31.45 T:aeadaes128ocbtaglen64v1 30.60 30.76 31.90 T:aeadaes128ocbtaglen128v1 29.49 31.12 32.68 T:icepole256av2 31.77 31.97 32.10 T:clx256h 33.53 33.53 34.57 T:isapa128av20 33.59 34.11 34.64 T:aes256otrsv2 34.31 34.64 35.68 T:aeadaes192ocbtaglen128v1 34.38 34.64 36.20 T:aeadaes192ocbtaglen96v1 34.24 34.77 35.87 T:aeadaes192ocbtaglen64v1 32.23? 35.22? 38.61? T:cmcc22v1 33.92 35.35 37.57 T:cmcc84v1 35.81 36.00 36.91 T:aes256otrcv3 33.98? 36.59? 38.54? T:cmcc42v1 37.37 37.43 38.48 T:aes256otrpv3 37.11 38.09 38.54 T:aes256otrpv1 38.09 38.35 39.71 T:flexaead256b128v12 38.15 38.35 39.00 T:flexaead128b064v12 38.80 39.32 40.76 T:aeadaes256ocbtaglen96v1 39.00 39.45 40.82 T:aeadaes256ocbtaglen64v1 39.32 40.07 40.82 T:aeadaes256ocbtaglen128v1 40.04 40.62 41.93 T:deoxysi256v141 39.78 40.89 41.28 T:flexaead128b128v12 39.39 41.28 41.86 T:flexaead256b256v12 43.62 43.95 45.38 T:aesjambuv1 45.12 46.22 46.88 T:aes256cpfbv1 48.11 48.89 49.48 T:comet128aesv1 48.63 50.07 50.20 T:clae128v1 49.09 50.26 51.04 T:giftcofb128v1 48.96 51.17 53.32 T:aes128marble4rv1 51.56 52.99 54.23 T:gimli24v1 74.35 76.56 78.32 T:hanmre 77.34 78.84 79.49 T:ifeedaes128n96v1 77.54 78.91 79.23 T:ifeedaes128n104v1 80.01 80.99 81.58 T:drygascon128k32 85.87 86.78 88.35 T:iscream12v1 85.81 86.98 87.83 T:iscream12v2 86.46 88.28 88.74 T:aezv5 99.02 99.93 101.56 T:grain128aead 99.74 100.33 101.17 T:iscream14v2 99.48 100.98 102.73 T:iscream14v1 99.74 102.21 104.10 T:elmd500v1 107.23 108.01 110.68 T:isapk128av20 120.05 120.77 122.07 T:drygascon256k32 121.68 124.02 125.98 T:aescopav1 132.42 134.96 139.13 T:isapk128v20 132.68 135.55 137.96 T:deoxyseq128128v13 134.90 136.20 138.87 T:deoxysneq128128v13 143.10 145.57 146.61 T:estatetweaes128v1 175.65 178.19 179.10 T:elephant200v2 194.01 196.48 197.59 T:deoxysii256v141 218.23 219.99 221.55 T:comet128chamv1 220.96 222.33 225.46 T:flexaead256b256v1 219.01 222.72 228.65 T:aegis128x2 236.85 238.74 240.49 T:deoxyseq256128v13 237.24 240.10 241.08 T:comet64speckv1 238.80 241.28 244.53 T:deoxysneq256128v13 242.12 244.99 250.26 T:isapxv20 275.20 278.26 281.51 T:aezv3 327.60 330.27 339.00 T:aegis256x2 332.29 334.11 339.97 T:flexaead128b064v1 366.21 368.49 375.33 T:flexaead128b128v1 554.69 557.94 563.02 T:artemia128v12 634.51 639.36 643.62 T:joltikeq6464v1 633.79 640.10 641.93 T:joltikeq6464v13 634.38 640.43 642.19 T:joltikeq8048v1 676.04 684.05 686.52 T:artemia256v12 916.41 918.49 919.47 T:enchilada128v1 1515.49 1527.47 1528.91 T:acorn128 1530.08 1534.31 1539.65 T:fountain128v1 1531.32 1534.99 1539.71 T:joltikeq80112v13 1533.85 1536.36 1541.54 T:joltikeq9696v1 1532.88 1537.50 1539.06 T:joltikeq12864v13 1534.90 1537.66 1542.45 T:joltikeq12864v1 1619.66 1629.88 1631.84 T:hern128v1 1820.70 1829.88 1838.41 T:aceae128v1 3872.33 3876.30 3881.77 T:hyenav1 3942.38 3946.61 3954.43 T:estatetwegift128v1 4023.83 4032.29 4036.85 T:ingage1k128n128c256r064 5511.13 5517.84 5524.67 T:ingage1k256n128c448r064 5512.96 5518.29 5522.53 T:ingage1k256n096c448r064 5573.76 5579.88 5584.83 T:ingage1k128n096c224r032 7012.24 7018.62 7031.38 T:elephant160v2 7350.59 7355.79 7368.23 T:elephant176v2 8119.34 8122.20 8141.93 T:cilipadi128v1medium 9087.50 9093.68 9110.87 T:enchilada256v1 9142.58 9153.91 9165.36 T:cilipadi128v1extrahot 10845.51 10852.93 10862.70 T:cilipadi128v1hot 10929.10 10937.70 10947.66 T:cilipadi128v1mild 12169.66 12175.46 12191.34 T:ingage1k128n096c224r016 23538.93 23554.82 23563.15 T:ingage1k128n096c224r008

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 8.99 9.24 9.97 T:ascon128av11 11.56 12.45 12.53 ascon80pqv12 13.35 14.28 14.61 T:ascon128v11 15.91 16.64 16.72 T:calicov8 22.24 22.30 22.71 T:aegis128 26.45 26.53 27.22 ascon128bi32v12 28.93 29.62 29.87 T:aes128otrsv2 31.37 31.45 32.27 T:clx128q 30.84 31.53 31.74 T:aes128otrpv1 30.97 31.66 31.86 T:aes128otrpv3 33.20 33.57 33.94 T:icepole128v1 35.44 35.60 36.17 T:aes128n12t8clocv3 35.07 35.89 36.50 T:aes128n12clocv1 36.50 37.39 38.17 T:aes256otrcv3 37.52 37.68 38.41 T:aes256otrsv2 37.03 37.92 38.74 T:aes128gcmv1 37.60 38.53 39.51 T:aes128n8t8silcv2 37.88 38.53 39.14 T:aes128n12t8silcv3 37.96 38.74 39.59 T:aes128n8silcv1 37.96 38.86 39.79 T:aes128n12silcv1 39.35 39.47 40.20 T:aes256otrpv1 39.35 39.59 40.12 T:aes256otrpv3 40.89 40.93 41.63 T:clx128 44.27 44.39 45.37 T:deoxysi256v141 44.80 45.29 45.86 T:aesjambuv1 47.53 47.69 48.54 T:aes256cpfbv1 48.26 48.54 48.99 T:clx128h 50.58 51.15 51.31 T:comet128aesv1 51.92 52.21 53.34 T:aes128marble4rv1 52.00 52.49 52.94 T:cmcc22v1 51.92 52.53 53.14 T:cmcc84v1 52.12 52.69 53.18 T:aes128poetv2aes128 52.12 52.86 53.14 T:cmcc42v1 52.73 53.87 54.00 T:aes128poetv1aes128 53.83 53.87 55.42 T:clx192h 57.29 58.15 58.76 T:flexaead128b064v12 58.72 59.49 60.06 T:flexaead256b128v12 60.79 61.52 62.26 T:flexaead128b128v12 64.37 64.49 65.02 T:clx256h 64.09 65.39 66.16 T:flexaead256b256v12 82.76 83.11 83.54 T:drygascon128k32 101.97 102.91 104.45 T:aezv5 112.79 113.44 113.93 T:clae128v1 121.22 121.74 122.40 T:drygascon256k32 136.03 136.96 137.17 T:deoxysneq128128v13 136.11 137.08 137.57 T:elmd500v1 188.64 188.80 189.62 T:aescopav1 204.67 205.65 208.29 T:deoxyseq128128v13 220.54 221.07 224.57 T:estatetweaes128v1 222.45 222.78 226.07 T:comet128chamv1 240.80 241.50 244.63 T:deoxysneq256128v13 242.80 243.41 246.54 T:comet64speckv1 267.29 268.47 272.09 T:elephant200v2 296.63 296.92 300.42 T:deoxysii256v141 329.92 331.26 335.29 T:aezv3 362.67 363.48 367.19 T:flexaead256b256v1 363.53 364.95 367.92 T:deoxyseq256128v13 411.70 415.00 415.85 T:aegis256x2 500.77 503.62 504.19 T:flexaead128b064v1 566.20 567.83 570.76 T:flexaead128b128v1 564.82 568.44 569.42 T:artemia128v12 703.45 704.35 706.58 T:artemia256v12 956.58 957.85 960.61 T:enchilada128v1 959.76 961.10 961.98 T:joltikeq8048v1 2317.40 2317.71 2319.13 T:joltikeq9696v13 5945.48 5947.88 5952.84 T:estatetwegift128v1 8167.85 8172.24 8180.22 T:cilipadi128v1medium 9163.57 9168.09 9175.54 T:enchilada256v1 9215.09 9218.79 9229.61 T:cilipadi128v1extrahot 10634.60 10637.67 10643.72 T:elephant160v2 10905.23 10911.25 10914.35 T:cilipadi128v1hot 10959.76 10963.50 10972.57 T:cilipadi128v1mild 11191.77 11197.92 11204.75 T:elephant176v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 9.11? 9.72? 10.17? T:ascon128av11 11.52 11.88 12.49 ascon80pqv12 13.31 14.24 14.49 T:ascon128v11 15.95 16.64 16.72 T:calicov8 22.18 22.22 22.34 T:aegis128 26.25 26.37 27.30 ascon128bi32v12 29.22 30.15 30.68 T:aes128otrsv2 31.09 31.74 32.02 T:aes128otrpv1 31.33 32.15 34.34 T:aes128otrpv3 31.41 32.23 32.31 T:clx128q 32.94 33.49 34.51 T:icepole128v1 35.07 35.93 36.17 T:aes128n12t8clocv3 35.69 36.38 37.35 T:aes128n12clocv1 37.03 37.35 38.29 T:aes256otrcv3 37.11 38.00 39.35 T:aes256otrsv2 37.80 38.45 39.14 T:aes128gcmv1 38.29 38.57 40.00 T:aes128n12t8silcv3 38.53 38.70 39.43 T:aes128n12silcv1 38.53 38.74 39.51 T:aes128n8silcv1 38.45 38.90 40.12 T:aes128n8t8silcv2 38.86 39.71 40.57 T:aes256otrpv1 39.63 39.96 40.73 T:aes256otrpv3 40.89 41.02 41.54 T:clx128 44.80 44.84 45.57 T:aesjambuv1 47.77 48.01 48.95 T:aes256cpfbv1 47.89 48.18 49.56 T:deoxysi256v141 48.34 48.38 49.15 T:clx128h 50.17 50.42 51.68 T:comet128aesv1 53.14 53.39 55.18 T:aes128poetv2aes128 52.98 53.91 54.44 T:aes128poetv1aes128 54.00 54.12 55.79 T:clx192h 53.59 54.28 55.14 T:cmcc22v1 54.12 54.44 56.48 T:cmcc84v1 53.71 54.77 55.09 T:cmcc42v1 55.87 56.23 57.45 T:flexaead128b064v12 57.78 58.59 59.53 T:aes128marble4rv1 58.51 59.33 59.86 T:flexaead256b128v12 60.18 61.08 62.05 T:flexaead128b128v12 64.25 64.37 65.23 T:clx256h 64.58 64.94 66.24 T:flexaead256b256v12 82.48 83.44 84.55 T:drygascon128k32 102.42 103.07 104.65 T:aezv5 104.98 105.92 107.38 T:clae128v1 121.09 121.77 122.15 T:drygascon256k32 141.15 141.76 144.25 T:elmd500v1 166.87 167.44 170.25 T:deoxysneq128128v13 204.83 205.81 208.58 T:deoxyseq128128v13 220.54 221.11 224.93 T:estatetweaes128v1 222.53 223.02 226.32 T:comet128chamv1 229.94 230.22 234.29 T:aescopav1 243.04 243.94 246.91 T:comet64speckv1 267.94 268.39 271.36 T:elephant200v2 276.08 276.45 280.92 T:deoxysneq256128v13 296.39 297.20 300.05 T:deoxysii256v141 330.08 330.89 333.98 T:aezv3 363.44 363.97 368.08 T:deoxyseq256128v13 362.83 365.36 367.35 T:flexaead256b256v1 411.30 414.75 415.81 T:aegis256x2 506.27 509.16 509.60 T:flexaead128b064v1 564.66 566.00 567.02 T:flexaead128b128v1 570.52 571.33 572.51 T:artemia128v12 703.90 704.39 707.23 T:artemia256v12 956.14 958.58 959.27 T:enchilada128v1 1060.26 1060.42 1065.92 T:joltikeq8048v1 5944.46 5947.43 5954.55 T:estatetwegift128v1 8158.12 8162.64 8169.11 T:cilipadi128v1medium 9164.39 9165.77 9172.65 T:enchilada256v1 9210.65 9212.85 9220.70 T:cilipadi128v1extrahot 10635.66 10640.99 10644.45 T:elephant160v2 10900.11 10906.82 10911.46 T:cilipadi128v1hot 10963.01 10969.73 10971.84 T:cilipadi128v1mild 11192.99 11198.85 11206.91 T:elephant176v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 9.11 9.16 10.05 T:ascon128av11 11.52 11.64 12.53 ascon80pqv12 12.13 13.02 13.06 T:calicov8 13.35 14.20 14.32 T:ascon128v11 22.24 22.30 22.97 T:aegis128 26.20 26.45 27.26 ascon128bi32v12 29.46 29.91 30.52 T:aes128otrsv2 31.13 31.70 32.55 T:aes128otrpv1 31.37 32.02 33.08 T:clx128q 31.33 32.10 32.39 T:aes128otrpv3 33.00 33.41 34.20 T:icepole128v1 35.12 35.93 36.74 T:aes128n12t8clocv3 35.60 36.42 37.15 T:aes128n12clocv1 36.50 37.43 38.21 T:aes256otrcv3 37.35 37.80 38.66 T:aes128gcmv1 37.35 37.92 39.55 T:aes256otrsv2 37.60 38.45 38.86 T:aes128n12t8silcv3 37.84 38.53 40.00 T:aes128n8t8silcv2 37.96 38.61 39.39 T:aes128n8silcv1 37.80 38.74 40.24 T:aes128n12silcv1 39.71 39.92 40.61 T:aes256otrpv1 39.27 39.96 41.26 T:aes256otrpv3 40.65 40.93 41.87 T:clx128 44.80 44.88 45.90 T:aesjambuv1 47.73 47.81 48.87 T:aes256cpfbv1 48.14 48.54 49.72 T:deoxysi256v141 48.38 48.71 49.19 T:clx128h 50.21 50.90 51.39 T:comet128aesv1 52.98 53.83 55.14 T:aes128poetv1aes128 53.22 54.08 54.97 T:aes128poetv2aes128 54.00 54.08 54.81 T:clx192h 56.44 57.29 57.94 T:flexaead128b064v12 57.09 58.43 62.70 T:cmcc22v1 58.43 59.12 60.30 T:aes128marble4rv1 57.78 59.20 62.46 T:cmcc84v1 58.68 59.61 60.51 T:flexaead256b128v12 57.70 59.81 61.04 T:cmcc42v1 60.26 61.20 62.13 T:flexaead128b128v12 63.64 64.37 65.31 T:clx256h 64.86 65.63 66.41 T:flexaead256b256v12 82.93 83.48 84.11 T:drygascon128k32 102.21 102.99 103.88 T:aezv5 105.55 105.88 107.30 T:clae128v1 121.26 121.99 122.68 T:drygascon256k32 139.85 140.99 141.76 T:elmd500v1 167.15 167.48 167.93 T:deoxysneq128128v13 204.87 205.93 208.66 T:deoxyseq128128v13 220.50 221.15 224.61 T:estatetweaes128v1 222.21 222.78 225.95 T:comet128chamv1 229.86 230.31 234.33 T:aescopav1 242.64 243.45 246.83 T:comet64speckv1 267.25 268.05 271.85 T:elephant200v2 275.88 276.61 280.19 T:deoxysneq256128v13 296.51 298.38 301.11 T:deoxysii256v141 329.92 331.14 335.21 T:aezv3 363.65 365.36 367.96 T:deoxyseq256128v13 364.14 365.93 368.37 T:flexaead256b256v1 411.01 414.71 414.92 T:aegis256x2 506.43 509.60 510.38 T:flexaead128b064v1 568.36 570.15 571.49 T:flexaead128b128v1 569.58 571.66 572.18 T:artemia128v12 703.12 704.10 704.67 T:artemia256v12 921.79 922.32 923.62 T:enchilada128v1 5944.86 5946.70 5949.02 T:estatetwegift128v1 8162.92 8168.25 8175.05 T:cilipadi128v1medium 9144.25 9146.28 9155.76 T:enchilada256v1 9215.13 9218.30 9228.68 T:cilipadi128v1extrahot 10636.11 10639.75 10648.15 T:elephant160v2 10899.82 10904.09 10911.95 T:cilipadi128v1hot 10963.79 10966.88 10979.70 T:cilipadi128v1mild 11192.83 11196.49 11207.52 T:elephant176v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 13.67 13.67 14.65 T:ascon128av11 15.62 15.62 16.60 ascon80pqv12 17.58 17.58 18.55 T:ascon128v11 20.51 21.48 21.48 T:calicov8 24.41 25.39 25.39 T:hs1sivlov2 25.39 25.39 26.37 T:hs1sivlov1 33.20 34.18 34.18 T:hs1sivv1 35.16 35.16 36.13 T:hs1sivv2 35.16 36.13 36.13 ascon128bi32v12 37.11 38.09 39.06 T:acorn128v3 38.09 38.09 39.06 T:hs1sivhiv2 40.04 41.02 41.02 T:aes128n12t8clocv3 41.02 41.02 41.02 T:acorn128v2 41.02 41.02 41.02 T:clx128q 42.97 43.95 44.92 T:aes128otrsv2 43.95 43.95 46.88 T:aes128n12clocv1 44.92 44.92 44.92 T:aes128otrpv1 44.92 44.92 45.90 T:aes128otrpv3 45.90 46.88 47.85 T:aeadaes128ocbtaglen128v1 45.90 46.88 47.85 T:aeadaes128ocbtaglen64v1 45.90 46.88 47.85 T:aeadaes128ocbtaglen96v1 46.88 46.88 47.85 T:clx128 48.83 48.83 52.73 T:aes128n8t8silcv2 48.83 49.80 52.73 T:aes128n12t8silcv3 52.73 52.73 53.71 T:aeadaes192ocbtaglen64v1 52.73 52.73 53.71 T:aeadaes192ocbtaglen96v1 52.73 52.73 54.69 T:aeadaes192ocbtaglen128v1 52.73 52.73 55.66 T:aes128n12silcv1 52.73 52.73 57.62 T:aes128n8silcv1 55.66 55.66 55.66 T:clx128h 55.66 56.64 56.64 T:aes256otrsv2 56.64 57.62 57.62 T:aesjambuv1 57.62 57.62 57.62 T:aes256otrpv3 57.62 57.62 58.59 T:aes256otrpv1 59.57 59.57 61.52 T:aeadaes256ocbtaglen64v1 59.57 60.06 61.52 T:aeadaes256ocbtaglen96v1 59.57 60.55 62.50 T:giftcofb128v1 59.57 60.55 65.43 T:aeadaes256ocbtaglen128v1 60.55 60.55 60.55 T:aegis128 61.52 61.52 63.48 T:hs1sivhiv1 62.50 62.50 63.48 T:clx192h 62.50 62.50 64.45 T:aes256otrcv3 65.43 65.43 67.38 T:comet128aesv1 71.78 72.27 72.75 T:gimli24v1 73.24 74.22 74.22 T:clx256h 80.08 81.05 82.03 T:aegis128l 80.08 81.05 85.94 T:aes128marble4rv1 84.96 85.94 88.87 T:aes256cpfbv1 85.94 85.94 90.82 T:aes128poetv2aes128 88.87? 88.87? 118.16? T:cmcc42v1 88.87? 88.87? 99.61? T:cmcc84v1 88.87? 89.84? 99.61? T:cmcc22v1 89.84 90.82 92.77 T:drygascon128k32 89.84 90.82 96.68 T:aes128poetv1aes128 92.77 92.77 93.75 T:flexaead128b064v12 93.75 93.75 95.70 T:iscream12v1 93.75 94.73 96.68 T:iscream12v2 103.52? 104.49? 117.19? T:grain128aead 107.42? 108.40? 130.86? T:iscream14v2 107.91 108.40 108.89 T:iscream14v1 111.33 112.30 114.26 T:ifeedaes128n96v1 111.33 112.30 116.21 T:ifeedaes128n104v1 112.30 112.30 119.14 T:deoxysi256v141 123.05 123.05 125.00 T:icepole128av1 123.05 123.05 125.00 T:icepole256av1 124.02 124.02 127.93 T:isapa128av20 124.02? 124.02? 146.48? T:icepole128v1 125.00 125.00 138.67 T:aezv5 126.95 126.95 129.88 T:flexaead256b128v12 137.70? 138.67? 160.16? T:flexaead128b128v12 137.70? 138.67? 164.06? T:clae128v1 137.70? 142.58? 166.99? T:aes128gcmv1 144.53 145.51 148.44 T:drygascon256k32 145.51 145.51 146.48 T:icepole128av2 145.51 146.48 146.97 T:icepole256av2 146.48 146.48 158.20 T:icepole128v2 146.48 147.46 154.30 T:deoxysneq128128v13 203.12? 203.12? 226.56? T:flexaead256b256v12 217.77? 222.66? 246.09? T:elmd500v1 243.16 244.14 268.55 T:deoxyseq128128v13 233.40? 253.91? 260.74? T:estatetweaes128v1 247.07? 255.86? 275.39? T:aescopav1 258.79 270.51 283.20 T:deoxysneq256128v13 266.60? 289.06? 305.66? T:comet64speckv1 270.51? 291.02? 313.48? T:comet128chamv1 294.43 315.43 324.22 T:hanmre 317.38 340.82 347.66 T:deoxysii256v141 364.26 386.72 402.34 T:elephant200v2 403.32 406.25 408.20 T:aezv3 453.12 453.12 477.54 T:deoxyseq256128v13 496.09 497.07 529.30 T:isapa128v20 707.03 726.56 734.38 T:flexaead128b064v1 721.68 736.33 751.95 T:flexaead256b256v1 767.58 788.09 809.57 T:artemia128v12 865.23 877.93 884.77 T:isapk128av20 992.19 993.16 1008.79 T:flexaead128b128v1 1033.20 1034.18 1052.73 T:joltikeq8048v1 1026.86 1035.16 1062.99 T:joltikeq6464v1 1070.31 1072.27 1087.89 T:joltikeq6464v13 1079.10 1080.08 1098.63 T:enchilada128v1 1196.29 1207.03 1235.35 T:artemia256v12 2100.59 2119.14 2131.84 T:aegis128x2 2232.42 2258.79 2262.70 T:aegis256x2 2479.00 2486.33 2515.62 T:joltikeq12864v1 2483.89 2502.93 2526.37 T:joltikeq9696v1 2577.15 2586.91 2608.89 T:joltikeq80112v13 2578.12 2586.91 2606.45 T:joltikeq9696v13 2578.12 2587.89 2612.30 T:joltikeq12864v13 2620.12 2634.28 2644.53 T:aceae128v1 2987.79 2992.19 3021.00 T:fountain128v1 3623.05 3636.72 3659.18 T:hern128v1 3669.43 3691.41 3788.09 T:isapk128v20 4425.78 4439.45 4493.16 T:hyenav1 5277.34 5286.13 5326.17 T:isapxv20 5288.09 5299.80 5396.48 T:ingage1k128n128c256r064 5577.15 5581.05 5666.99 T:acorn128 6438.48 6448.24 6502.93 T:ingage1k128n096c224r032 6468.75 6481.45 6564.45 T:estatetwegift128v1 7230.47 7247.07 7337.89 T:ingage1k256n096c448r064 7232.42 7264.65 7311.52 T:ingage1k256n128c448r064 10026.37 10111.33 10139.65 T:cilipadi128v1medium 10291.99 10358.40 10386.72 T:enchilada256v1 10517.58 10594.73 10635.74 T:cilipadi128v1extrahot 11768.55 11813.48 11829.10 T:cilipadi128v1mild 13119.14 13161.13 13187.50 T:ingage1k128n096c224r016 13442.38 13514.65 13526.37 T:cilipadi128v1hot 13938.48 13968.75 13976.56 T:elephant176v2 14206.05 14263.67 14291.02 T:elephant160v2 24453.12 24482.42 24554.69 T:ingage1k128n096c224r008

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 13.67 14.65 14.65 T:ascon128av11 15.62 15.62 15.62 ascon80pqv12 17.58 17.58 18.55 T:ascon128v11 20.51 21.48 21.48 T:calicov8 26.37 26.37 27.34 T:hs1sivlov2 26.37? 27.34? 32.23? T:hs1sivlov1 35.16 36.13 36.13 ascon128bi32v12 35.16 36.13 36.13 T:hs1sivv1 37.11 37.11 38.09 T:hs1sivv2 38.09 38.09 38.09 T:acorn128v3 40.04 40.04 41.02 T:hs1sivhiv2 40.04 41.02 41.02 T:clx128q 41.02 41.02 41.99 T:acorn128v2 41.02 41.02 41.99 T:aes128n12t8clocv3 43.95 43.95 46.88 T:aes128otrsv2 44.92 44.92 46.88 T:aes128n12clocv1 44.92 45.90 45.90 T:aes128otrpv1 44.92 45.90 45.90 T:aes128otrpv3 47.85 47.85 47.85 T:clx128 48.83 48.83 49.80 T:aes128n12t8silcv3 48.83 48.83 52.73 T:aes128n8t8silcv2 52.73 52.73 53.71 T:aes128n8silcv1 52.73 52.73 54.69 T:aeadaes128ocbtaglen96v1 52.73 52.73 55.66 T:aes128n12silcv1 52.73 53.71 54.69 T:aeadaes128ocbtaglen128v1 52.73 53.71 54.69 T:aeadaes128ocbtaglen64v1 55.66 55.66 56.64 T:clx128h 56.64 56.64 57.62 T:aes256otrsv2 56.64 57.62 57.62 T:aesjambuv1 57.62 57.62 58.59 T:aes256otrpv1 57.62 57.62 58.59 T:aes256otrpv3 59.57 60.55 61.52 T:giftcofb128v1 60.55 60.55 61.52 T:aeadaes192ocbtaglen96v1 60.55 60.55 61.52 T:aegis128 60.55? 60.55? 67.38? T:aeadaes192ocbtaglen128v1 60.55? 60.55? 67.38? T:aeadaes192ocbtaglen64v1 62.50 62.50 62.50 T:aes256otrcv3 62.50 62.50 63.48 T:clx192h 63.48 63.48 64.45 T:hs1sivhiv1 66.41 66.41 69.34 T:comet128aesv1 69.34 69.34 71.29 T:aeadaes256ocbtaglen64v1 69.34 69.82 71.29 T:aeadaes256ocbtaglen96v1 69.34? 69.82? 77.15? T:aeadaes256ocbtaglen128v1 71.78 72.27 72.75 T:gimli24v1 73.24 74.22 74.22 T:clx256h 81.05 81.05 82.03 T:aegis128l 85.94 86.91 88.87 T:aes256cpfbv1 87.89? 88.87? 97.66? T:aes128marble4rv1 89.84 90.82 95.70 T:cmcc22v1 89.84 90.82 96.68 T:aes128poetv1aes128 90.82 90.82 92.77 T:drygascon128k32 90.82 90.82 94.73 T:cmcc84v1 90.82 90.82 95.70 T:cmcc42v1 91.80 91.80 94.73 T:flexaead128b064v12 92.77 92.77 101.56 T:aes128poetv2aes128 94.73 94.73 98.63 T:iscream12v2 94.73? 95.70? 113.77? T:iscream12v1 102.54? 104.49? 115.23? T:grain128aead 108.40 109.38 112.30 T:iscream14v2 109.38 109.38 110.84 T:iscream14v1 112.30 113.28 116.21 T:ifeedaes128n104v1 113.77? 116.21? 161.13? T:ifeedaes128n96v1 123.05 123.05 125.00 T:icepole128av1 123.05 123.05 125.98 T:icepole256av1 123.05 124.02 136.72 T:deoxysi256v141 124.02 124.02 128.91 T:isapa128av20 124.02? 124.02? 145.51? T:icepole128v1 124.02 125.98 135.74 T:aezv5 125.98? 126.95? 150.39? T:flexaead256b128v12 131.84 132.81 138.67 T:clae128v1 137.70 137.70 141.60 T:flexaead128b128v12 134.77? 140.62? 156.25? T:aes128gcmv1 144.53 145.51 149.41 T:drygascon256k32 145.51 145.51 158.20 T:icepole256av2 145.51? 145.51? 164.06? T:icepole128av2 146.48? 147.46? 166.50? T:icepole128v2 175.78? 176.76? 201.17? T:deoxysneq128128v13 203.12? 204.10? 229.49? T:flexaead256b256v12 224.61? 230.47? 251.95? T:elmd500v1 233.40 236.33 258.79 T:estatetweaes128v1 243.16 243.16 269.53 T:deoxyseq128128v13 271.48 281.25 297.85 T:comet128chamv1 268.55 290.04 294.92 T:comet64speckv1 285.16? 304.69? 322.27? T:aescopav1 291.99? 314.45? 324.71? T:hanmre 291.99 315.43 318.36 T:deoxysneq256128v13 317.38 340.82 342.77 T:deoxysii256v141 364.26 386.72 403.32 T:elephant200v2 383.79 407.23 411.13 T:aezv3 430.66 454.10 469.73 T:deoxyseq256128v13 495.61 498.05 503.42 T:isapa128v20 713.87 730.47 736.33 T:flexaead128b064v1 720.70 744.14 756.84 T:flexaead256b256v1 766.60 786.13 796.88 T:artemia128v12 867.19 885.74 895.51 T:isapk128av20 995.12 999.02 1019.53 T:flexaead128b128v1 1070.31 1081.05 1091.80 T:joltikeq6464v13 1094.73 1096.68 1114.26 T:enchilada128v1 1130.86 1131.84 1161.62 T:joltikeq6464v1 1130.86 1147.46 1164.06 T:joltikeq8048v1 1194.34 1211.91 1233.40 T:artemia256v12 2098.63 2111.33 2122.07 T:aegis128x2 2245.12 2248.05 2254.88 T:aegis256x2 2581.05 2585.94 2605.96 T:joltikeq80112v13 2574.22 2588.87 2606.45 T:joltikeq12864v13 2580.08 2605.47 2608.40 T:joltikeq9696v13 2614.75 2627.93 2667.48 T:joltikeq9696v1 2623.54 2630.86 2659.18 T:joltikeq12864v1 2605.47 2631.35 2654.30 T:aceae128v1 2972.17 2991.21 3007.81 T:fountain128v1 3637.70 3649.41 3666.99 T:hern128v1 3665.04 3676.76 3743.16 T:isapk128v20 4428.22 4443.36 4497.07 T:hyenav1 5231.45 5279.30 5326.17 T:isapxv20 5290.04 5308.59 5375.98 T:ingage1k128n128c256r064 5591.80 5613.28 5667.97 T:acorn128 6436.52 6453.12 6547.85 T:ingage1k128n096c224r032 6477.54 6489.26 6543.95 T:estatetwegift128v1 7240.23 7266.60 7333.01 T:ingage1k256n128c448r064 7239.26 7271.48 7331.05 T:ingage1k256n096c448r064 10032.23 10054.69 10124.02 T:cilipadi128v1medium 10380.86 10446.29 10469.73 T:enchilada256v1 10508.79 10591.80 10617.19 T:cilipadi128v1extrahot 11757.81 11822.27 11846.68 T:cilipadi128v1mild 13116.21 13180.66 13194.34 T:ingage1k128n096c224r016 13458.01 13512.70 13526.37 T:cilipadi128v1hot 13959.96 13981.45 14021.48 T:elephant176v2 14212.89 14269.53 14290.04 T:elephant160v2 24457.03 24479.49 24544.92 T:ingage1k128n096c224r008

Cycles/byte for 64+64 forgery 25% 50% 75% aead 13.67 13.67 14.65 T:ascon128av11 15.62 15.62 16.60 ascon80pqv12 16.60 17.58 17.58 T:calicov8 17.58 17.58 19.53 T:ascon128v11 26.37 26.37 26.37 T:hs1sivlov2 26.37 27.34 28.32 T:hs1sivlov1 35.16 35.16 36.13 ascon128bi32v12 35.16 36.13 38.09 T:hs1sivv1 36.13 36.13 37.11 T:hs1sivv2 38.09 38.09 38.09 T:acorn128v3 40.04 40.04 41.02 T:hs1sivhiv2 41.02 41.02 41.02 T:acorn128v2 41.02 41.02 41.02 T:clx128q 41.02 41.02 41.99 T:aes128n12t8clocv3 43.95 43.95 44.92 T:aes128otrsv2 43.95 44.92 48.83 T:aes128n12clocv1 44.92 45.90 46.88 T:aes128otrpv1 45.90 45.90 46.88 T:aes128otrpv3 47.85 47.85 47.85 T:clx128 48.83 48.83 49.80 T:aes128n12t8silcv3 48.83 48.83 51.76 T:aes128n8t8silcv2 52.73 52.73 53.71 T:aes128n8silcv1 52.73 52.73 54.69 T:aeadaes128ocbtaglen128v1 52.73 52.73 55.66 T:aeadaes128ocbtaglen64v1 52.73 52.73 55.66 T:aes128n12silcv1 52.73? 52.73? 59.57? T:aeadaes128ocbtaglen96v1 55.66 55.66 56.64 T:clx128h 56.64 56.64 57.62 T:aes256otrsv2 56.64 57.62 57.62 T:aesjambuv1 57.62 57.62 58.59 T:aes256otrpv1 57.62 57.62 58.59 T:aes256otrpv3 59.57 60.55 60.55 T:giftcofb128v1 59.57 60.55 61.52 T:aeadaes192ocbtaglen96v1 60.55 60.55 61.52 T:aegis128 60.55 60.55 62.50 T:aeadaes192ocbtaglen64v1 60.55? 60.55? 67.38? T:aeadaes192ocbtaglen128v1 62.50 62.50 63.48 T:aes256otrcv3 62.50 62.50 63.48 T:clx192h 62.50 63.48 64.45 T:hs1sivhiv1 65.43 66.41 68.36 T:comet128aesv1 69.34 69.34 70.31 T:aeadaes256ocbtaglen128v1 69.34 69.34 70.31 T:aeadaes256ocbtaglen64v1 69.34 69.82 76.17 T:aeadaes256ocbtaglen96v1 72.27 72.27 72.27 T:gimli24v1 73.24 74.22 74.22 T:clx256h 78.12 78.12 78.12 T:isapa128av20 80.08 81.05 82.03 T:aegis128l 85.94 85.94 88.87 T:aes256cpfbv1 85.94 86.91 93.75 T:aes128marble4rv1 89.84 90.82 97.66 T:aes128poetv1aes128 90.82 90.82 92.77 T:cmcc42v1 90.82 91.80 91.80 T:drygascon128k32 90.82 91.80 93.75 T:cmcc84v1 90.82 91.80 94.73 T:cmcc22v1 91.80 92.77 101.56 T:aes128poetv2aes128 93.75 93.75 95.70 T:flexaead128b064v12 93.75 93.75 96.68 T:iscream12v2 94.24 94.73 96.19 T:iscream12v1 101.56 103.52 108.40 T:grain128aead 108.40 108.40 110.35 T:iscream14v2 108.89 109.38 110.35 T:iscream14v1 111.33 111.33 114.26 T:ifeedaes128n104v1 111.33 111.33 114.26 T:ifeedaes128n96v1 123.05 123.05 124.02 T:icepole128av1 123.05 123.05 133.79 T:deoxysi256v141 123.05? 123.05? 145.51? T:icepole256av1 124.02? 124.02? 146.48? T:icepole128v1 124.02 125.00 135.74 T:aezv5 129.88? 130.86? 154.30? T:flexaead256b128v12 131.84 132.81 135.74 T:clae128v1 134.77? 141.60? 163.09? T:aes128gcmv1 141.60 141.60 145.51 T:flexaead128b128v12 144.53? 145.51? 167.97? T:drygascon256k32 145.51 145.51 157.23 T:icepole128av2 145.51 146.48 157.71 T:icepole256av2 146.48 146.48 158.69 T:icepole128v2 175.78? 176.76? 203.12? T:deoxysneq128128v13 210.94? 211.91? 236.33? T:flexaead256b256v12 205.08? 228.52? 234.38? T:elmd500v1 233.40? 233.40? 273.44? T:estatetweaes128v1 243.16? 255.86? 274.41? T:deoxyseq128128v13 250.00 269.53 271.48 T:isapa128v20 270.51 281.25 294.92 T:comet128chamv1 268.55? 290.04? 302.73? T:comet64speckv1 291.99 297.85 315.43 T:hanmre 287.11? 306.64? 323.24? T:aescopav1 292.97 315.43 319.34 T:deoxysneq256128v13 320.31 340.82 349.61 T:deoxysii256v141 364.26 385.74 388.67 T:elephant200v2 383.79? 407.23? 430.66? T:aezv3 453.12 455.08 477.54 T:deoxyseq256128v13 572.27 574.22 583.01 T:isapk128av20 724.61 729.49 745.12 T:flexaead128b064v1 750.00 766.60 785.16 T:flexaead256b256v1 766.60 783.20 789.06 T:artemia128v12 1017.58 1031.25 1037.11 T:flexaead128b128v1 1044.92 1058.59 1067.38 T:enchilada128v1 1070.31 1071.29 1085.94 T:joltikeq6464v13 1129.88 1131.84 1149.41 T:joltikeq8048v1 1130.86 1135.74 1158.69 T:joltikeq6464v1 1191.41 1203.12 1227.54 T:artemia256v12 1978.52 2000.00 2047.85 T:isapk128v20 2096.68 2103.52 2131.84 T:aegis128x2 2234.38 2258.79 2267.58 T:aegis256x2 2569.82 2584.96 2599.12 T:joltikeq80112v13 2578.12 2589.84 2617.19 T:joltikeq12864v13 2619.63 2624.02 2647.46 T:joltikeq9696v1 2628.42 2632.81 2647.46 T:joltikeq12864v1 2622.07 2638.18 2647.46 T:aceae128v1 2748.05 2750.00 2773.44 T:isapxv20 2983.89 2990.23 3041.99 T:fountain128v1 3641.60 3661.13 3714.84 T:hern128v1 4422.85 4437.50 4519.53 T:hyenav1 5292.97 5298.83 5380.86 T:ingage1k128n128c256r064 5584.96 5596.68 5675.78 T:acorn128 6427.73 6455.08 6529.30 T:ingage1k128n096c224r032 6454.10 6481.45 6578.12 T:estatetwegift128v1 7245.12 7269.53 7344.73 T:ingage1k256n128c448r064 7237.30 7277.34 7332.03 T:ingage1k256n096c448r064 10035.16 10116.21 10130.86 T:cilipadi128v1medium 10278.32 10337.89 10365.23 T:enchilada256v1 10509.77 10611.33 10629.88 T:cilipadi128v1extrahot 11751.95 11825.20 11861.33 T:cilipadi128v1mild 13140.62 13167.97 13190.43 T:ingage1k128n096c224r016 13428.71 13509.77 13537.11 T:cilipadi128v1hot 13947.27 13972.66 13990.23 T:elephant176v2 14252.93 14266.60 14292.97 T:elephant160v2 24464.84 24497.07 24531.25 T:ingage1k128n096c224r008