VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates, indexed by machine

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each cipher and each implementation.

The shootout

• The primary third-round recommendation is selected when possible.
• If not enough data is available yet for the primary third-round recommendation, an older primary recommendation is used instead.

• 128gcm: aes128gcmv1
• acorn: acorn128v3
• aegis: aegis128l
• aez: aezv4
• ascon: ascon128v11
• cloc: aes128n12t8clocv3
• colm: colm0v1
• deoxys: deoxysi128v141
• jambu: aesjambuv1
• ketje: ketjesrv1
• keyak: lakekeyakv2
• morus: morus1280128v2
• norx: norx6441v2
• ocb: aeadaes128ocbtaglen128v1
• otr: aes128otrpv3
• silc: aes128n12t8silcv3
• tiaoxin: tiaoxinv2

As an example, the "1536+0 encrypt" graph shows the speed, in cycles/byte, of encrypting a 1536-byte message with no additional data. Each graph point indicates the median of many speed measurements. Machines in each graph are sorted primarily by architecture (amd64 for 64-bit Intel and AMD CPUs, armeabi for 32-bit ARM CPUs, etc.) and microarchitecture (Sandy Bridge, Westmere, etc.). These graphs exclude data from very old SUPERCOP versions and from computers with demonstrably unstable timings.

The labels are sorted on the top and bottom of the graph according to an extremely crude metric of overall software performance. Colors are chosen across the RGB-compatible (a,b) range of the CIELAB spectrum at a uniform 50% lightness, to try to give similar visibility to each candidate, although exact results will depend on your monitor, printer, room lighting, eyes, etc.

Each graph is a PNG and links to a higher-resolution PNG. The graphs are also available in maximum resolution as the following PDFs for downloading (the PDFs are smaller than the PNGs) and printing (letter paper, to the edges; scale as necessary for your printer; color printing recommended):

• long+0 encrypt decrypt forgery
• long+long encrypt decrypt forgery
• 0+long encrypt decrypt forgery
• 1536+0 encrypt decrypt forgery
• 1536+1536 encrypt decrypt forgery
• 0+1536 encrypt decrypt forgery
• 64+0 encrypt decrypt forgery
• 64+64 encrypt decrypt forgery
• 0+64 encrypt decrypt forgery

amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,1f626960,5600000, supercop-20230530

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.18? 0.19? 0.21? T:tiaoxinv1 0.17? 0.20? 0.20? T:tiaoxinv2 0.21 0.22 0.23 T:aegis128l 0.23? 0.28? 0.35? T:aeadaes128ocbtaglen128v1 0.30? 0.36? 0.39? T:aeadaes256ocbtaglen128v1 0.35 0.36 0.38 T:aezv4 0.35 0.37 0.38 T:aezv3 0.38 0.39 0.39 T:aegis128 0.11? 0.39? 0.42? T:aeadaes192ocbtaglen128v1 0.38 0.39 0.40 T:aegis256 0.40 0.40 0.41 T:aezv5 0.44 0.46 0.47 T:aes128otrcv3 0.45 0.47 0.50 T:aes128otrsv3 0.46 0.47 0.50 T:aes128otrpv3 0.52 0.53 0.54 T:aes128gcmv1 0.56 0.57 0.59 T:aes256otrcv3 0.58 0.60 0.62 T:aes256otrpv3 0.59 0.61 0.62 T:aes256otrsv3 0.60 0.62 0.63 T:aes256gcmv1 0.64 0.65 0.67 T:morus1280128v1 0.64 0.65 0.66 T:morus1280256v1 0.65 0.67 0.68 T:deoxysi128v141 0.67 0.68 0.70 T:morus1280128v2 0.67 0.68 0.70 T:morus1280256v2 0.72 0.73 0.75 T:deoxysneq128128v1 0.74 0.75 0.77 T:deoxysi256v141 0.80 0.81 0.82 T:deoxysneq256128v1 1.07 1.10 1.12 T:norx6444v3 1.15 1.16 1.18 T:morus640128v2 1.15 1.16 1.18 T:morus640128v1 1.31 1.33 1.34 T:deoxysii128v141 1.38 1.39 1.41 T:colm0v1 1.40 1.41 1.42 T:deoxyseq128128v1 1.47 1.49 1.50 T:deoxysii256v141 1.53 1.54 1.55 aes256gcmv1 1.64 1.65 1.66 T:deoxyseq256128v1 1.75? 1.88? 2.01? T:lunarkeyakv2 2.02 2.03 2.06 T:norx6441v2 2.02 2.04 2.07 T:norx6441v3 2.18 2.20 2.23 T:aes128n12t8clocv2 2.21 2.21 2.22 T:aes128n12t8clocv3 2.21 2.21 2.22 T:aes128n12t8silcv2 2.21 2.21 2.22 T:aes128n12t8silcv3 2.20 2.22 2.24 T:aes128n8t8clocv2 2.21 2.22 2.23 T:aes128n8t8silcv2 2.42 2.44 2.45 T:norx6441v1 2.51 2.55 2.58 T:seakeyakv2 2.50 2.56 2.65 T:oceankeyakv2 2.67 2.70 2.76 T:lakekeyakv1 2.77 2.79 2.81 T:norx6444v2 2.83 2.90 2.94 T:lakekeyakv2 3.01 3.04 3.07 T:norx6461v2 3.02 3.04 3.07 T:norx6461v3 3.17 3.21 3.32 T:norx6444v1 3.58 3.59 3.60 T:norx3241v3 3.60 3.61 3.62 T:norx3241v2 3.62 3.64 3.67 T:norx6461v1 4.31 4.32 4.35 T:norx3241v1 4.43 4.44 4.45 T:aesjambuv1 4.67 4.78 4.84 T:ketjemajorv2 5.00? 5.06? 6.34? T:acorn128v2 5.05? 5.20? 5.77? T:acorn128v3 5.33 5.35 5.36 T:norx3261v2 5.33 5.35 5.39 T:norx3261v3 5.94 6.01 6.08 T:ketjeminorv2 6.54 6.57 6.60 ascon128av12 6.58 6.65 6.77 T:riverkeyakv2 6.75 6.78 6.82 T:ascon128av11 6.80 6.85 6.89 T:ascon96v1 7.49 7.51 7.52 T:norx3261v1 9.17 9.28 9.65 T:seakeyakv1 8.55? 9.51? 11.46? T:oceankeyakv1 9.83 9.86 9.91 ascon128v12 10.22 10.25 10.27 T:ascon128v11 10.21 10.26 10.29 T:ascon128v1 11.79 11.82 11.86 T:aes128otrsv2 11.79 11.82 11.84 T:aes128otrsv1 12.83 12.87 12.96 T:aes128otrpv1 12.84 12.88 12.93 T:aeadaes128ocbtaglen64v1 12.85 12.89 12.95 T:aeadaes128ocbtaglen96v1 12.91 12.95 12.99 T:aes128otrpv2 14.55 14.61 14.66 T:aeadaes192ocbtaglen96v1 14.59 14.65 14.71 T:aeadaes192ocbtaglen64v1 15.14 15.16 15.19 T:aes256otrpv1 15.13 15.17 15.20 T:aes256otrsv2 15.17 15.20 15.22 T:aes256otrpv2 15.20 15.23 15.24 T:aes256otrsv1 15.18 15.39 15.50 T:proest256otrv1 16.16 16.21 16.28 T:twine80n6t4clocv2 16.33 16.37 16.44 T:aeadaes256ocbtaglen96v1 16.33 16.37 16.43 T:aeadaes256ocbtaglen64v1 16.52 16.54 16.57 T:twine80n6t4clocv3 20.19 20.22 20.25 T:aes128n12silcv1 20.15 20.22 20.29 T:aes128n8silcv1 20.32 20.42 20.45 T:ketjesrv1 20.85 20.89 20.95 T:aes128n12clocv1 20.83 20.89 20.92 T:aes128n8clocv1 23.29 23.38 23.44 T:ketjesrv2 25.16 25.30 25.45 T:riverkeyakv1 31.91 32.04 32.30 T:colm127v1 34.14 34.22 34.27 T:proest128otrv1 39.57 39.64 39.82 T:ketjejrv1 58.91 58.97 59.05 T:deoxysneq128128v13 61.14 61.32 61.83 T:ketjejrv2 76.39 76.52 76.61 T:present80n6t4silcv3 77.55 77.60 77.65 T:deoxysneq256128v13 83.91? 84.58? 112.55? T:twine80n6clocv1 119.44 119.80 119.92 T:deoxyseq128128v13 128.83 128.92 129.03 T:led80n6t4silcv3 134.10 134.39 135.02 T:aezv1 156.49 156.74 157.13 T:deoxyseq256128v13 328.33 337.61 341.08 T:acorn128 3265.24 3267.43 3270.76 T:present80n6silcv1 3267.00 3268.09 3272.39 T:present80n6t4silcv2 5870.04 5886.65 5896.46 T:led80n6silcv1 5899.17 5909.02 5931.03 T:led80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.23? 0.24? 0.26? T:aegis128l 0.27? 0.33? 0.35? T:aeadaes128ocbtaglen128v1 0.36 0.36 0.37 T:aezv3 0.36 0.36 0.37 T:aezv4 0.34? 0.37? 0.42? T:aeadaes256ocbtaglen128v1 0.38 0.39 0.40 T:aegis256 0.38 0.39 0.40 T:tiaoxinv2 0.39 0.40 0.41 T:aegis128 0.39 0.40 0.41 T:aezv5 0.36? 0.41? 0.44? T:aeadaes192ocbtaglen128v1 0.43? 0.44? 0.48? T:tiaoxinv1 0.49 0.51 0.53 T:aes128otrcv3 0.48? 0.51? 0.55? T:aes128otrsv3 0.46? 0.52? 0.54? T:aes128gcmv1 0.49 0.52 0.53 T:aes128otrpv3 0.59 0.60 0.65 T:aes256gcmv1 0.62 0.64 0.66 T:aes256otrcv3 0.63 0.65 0.68 T:aes256otrpv3 0.66 0.69 0.72 T:aes256otrsv3 0.68 0.69 0.70 T:morus1280256v2 0.68 0.69 0.71 T:morus1280256v1 0.69 0.69 0.71 T:morus1280128v2 0.69 0.70 0.71 T:morus1280128v1 0.77 0.78 0.80 T:deoxysi128v141 0.85 0.86 0.88 T:deoxysi256v141 0.87 0.88 0.88 T:deoxysneq128128v1 0.92 0.92 0.93 T:deoxysneq256128v1 1.04 1.07 1.09 T:norx6444v3 1.13 1.15 1.17 T:morus640128v2 1.14 1.15 1.16 T:morus640128v1 1.32 1.33 1.34 T:deoxysii128v141 1.41 1.42 1.43 aes256gcmv1 1.44 1.46 1.48 T:colm0v1 1.48 1.50 1.51 T:deoxysii256v141 1.67 1.68 1.71 T:deoxyseq128128v1 1.76 1.77 1.78 T:deoxyseq256128v1 1.68? 1.80? 1.91? T:lunarkeyakv2 1.96 1.99 2.01 T:norx6441v3 1.98 2.00 2.01 T:norx6441v2 2.04 2.05 2.13 T:aes128n12t8silcv3 2.10 2.12 2.15 T:aes128n12t8clocv3 2.12 2.12 2.13 T:aes128n12t8clocv2 2.12 2.12 2.13 T:aes128n8t8clocv2 2.10 2.13 2.14 T:aes128n12t8silcv2 2.12 2.13 2.14 T:aes128n8t8silcv2 2.39 2.43 2.44 T:norx6441v1 2.55 2.59 2.66 T:seakeyakv2 2.51 2.62 2.73 T:oceankeyakv2 2.64 2.69 2.75 T:lakekeyakv1 2.77 2.82 2.87 T:norx6444v2 2.87 2.95 2.99 T:lakekeyakv2 2.97 3.00 3.03 T:norx6461v2 2.98 3.01 3.02 T:norx6461v3 3.06 3.13 3.39 T:norx6444v1 3.50 3.52 3.54 T:norx3241v2 3.51 3.53 3.54 T:norx3241v3 3.60 3.61 3.63 T:norx6461v1 4.22 4.25 4.26 T:norx3241v1 4.51 4.58 4.67 T:ketjemajorv2 4.67 4.68 4.69 T:aesjambuv1 4.96? 5.15? 5.77? T:acorn128v3 5.32 5.34 5.37 T:norx3261v2 5.33 5.36 5.43 T:norx3261v3 5.98 6.04 6.11 T:acorn128v2 6.55 6.62 6.69 T:ketjeminorv2 6.58 6.64 6.73 ascon128av12 6.66 6.70 6.72 T:ascon96v1 6.68 6.71 6.73 T:ascon128av11 6.72 6.79 6.91 T:riverkeyakv2 7.36 7.37 7.38 T:norx3261v1 9.16 9.48 10.07 T:seakeyakv1 8.71? 9.65? 11.95? T:oceankeyakv1 9.74 9.80 9.85 ascon128v12 10.03 10.05 10.10 T:ascon128v1 10.03 10.07 10.09 T:ascon128v11 12.19 12.22 12.27 T:aes128otrsv1 12.15 12.22 12.27 T:aes128otrsv2 13.03 13.07 13.11 T:aes128otrpv1 13.04 13.08 13.13 T:aes128otrpv2 13.55 13.61 13.71 T:aeadaes128ocbtaglen96v1 13.55 13.62 13.65 T:aeadaes128ocbtaglen64v1 15.05 15.32 15.46 T:proest256otrv1 15.31 15.35 15.41 T:aeadaes192ocbtaglen96v1 15.28 15.36 15.43 T:aeadaes192ocbtaglen64v1 15.58 15.61 15.64 T:aes256otrpv2 15.60 15.62 15.67 T:aes256otrpv1 15.56 15.63 15.66 T:aes256otrsv2 15.63 15.65 15.68 T:aes256otrsv1 16.09 16.13 16.18 T:twine80n6t4clocv2 16.58 16.63 16.66 T:twine80n6t4clocv3 17.01 17.06 17.10 T:aeadaes256ocbtaglen64v1 17.02 17.07 17.13 T:aeadaes256ocbtaglen96v1 19.00 19.04 19.08 T:aes128n12clocv1 19.28 19.36 19.39 T:aes128n8clocv1 20.43 20.50 20.60 T:aes128n8silcv1 20.50 20.58 20.68 T:aes128n12silcv1 20.83 20.92 21.01 T:ketjesrv1 21.13 21.19 21.32 T:ketjesrv2 25.34 25.48 25.80 T:riverkeyakv1 31.74 31.92 32.37 T:colm127v1 34.21 34.24 34.31 T:proest128otrv1 41.75 41.89 42.11 T:ketjejrv1 61.66 61.93 62.23 T:ketjejrv2 76.84 76.94 77.03 T:deoxysneq128128v13 76.97 77.08 77.21 T:present80n6t4silcv3 83.97? 87.31? 94.85? T:twine80n6clocv1 96.71 96.98 97.27 T:deoxysneq256128v13 119.61 119.70 119.80 T:deoxyseq128128v13 129.18 129.29 129.36 T:led80n6t4silcv3 133.71 134.16 134.49 T:aezv1 156.76 157.10 157.48 T:deoxyseq256128v13 325.20 326.77 329.70 T:acorn128 3263.49 3266.38 3268.66 T:present80n6silcv1 3264.67 3266.79 3267.84 T:present80n6t4silcv2 5878.42 5884.49 5898.90 T:led80n6silcv1 5901.01 5907.46 5913.69 T:led80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13 0.13 0.14 T:aezv3 0.13 0.14 0.14 T:aezv4 0.13? 0.14? 0.17? T:aezv5 0.23 0.24 0.25 T:aegis128l 0.32? 0.34? 0.36? T:aeadaes128ocbtaglen128v1 0.05? 0.37? 0.65? T:aeadaes256ocbtaglen128v1 0.38 0.39 0.39 T:aegis256 0.39 0.39 0.40 T:tiaoxinv2 0.39 0.40 0.40 T:aegis128 0.39? 0.40? 0.69? T:aeadaes192ocbtaglen128v1 0.43 0.44 0.44 T:tiaoxinv1 0.49 0.51 0.53 T:aes128otrsv3 0.49 0.51 0.52 T:aes128otrcv3 0.51 0.51 0.53 T:aes128otrpv3 0.51 0.53 0.56 T:aes128gcmv1 0.60 0.61 0.62 T:aes256gcmv1 0.62 0.64 0.65 T:aes256otrcv3 0.63 0.65 0.66 T:aes256otrpv3 0.63 0.66 0.68 T:aes256otrsv3 0.68 0.69 0.71 T:morus1280128v2 0.69 0.69 0.70 T:morus1280128v1 0.69 0.70 0.71 T:morus1280256v2 0.69 0.70 0.71 T:morus1280256v1 0.76 0.78 0.83 T:deoxysi128v141 0.85 0.86 0.87 T:deoxysi256v141 0.87 0.88 0.91 T:deoxysneq128128v1 0.91 0.93 0.94 T:deoxysneq256128v1 1.04 1.07 1.09 T:norx6444v3 1.13 1.15 1.16 T:morus640128v2 1.14 1.15 1.17 T:morus640128v1 1.32 1.33 1.35 T:deoxysii128v141 1.41 1.42 1.43 aes256gcmv1 1.44 1.46 1.49 T:colm0v1 1.49 1.50 1.52 T:deoxysii256v141 1.67 1.68 1.69 T:deoxyseq128128v1 1.75 1.77 1.78 T:deoxyseq256128v1 1.75? 1.84? 2.02? T:lunarkeyakv2 1.96 1.97 1.99 T:norx6441v3 1.97 1.99 2.00 T:norx6441v2 2.02 2.04 2.13 T:aes128n12t8clocv3 2.02 2.04 2.13 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128n12t8clocv2 2.12 2.12 2.13 T:aes128n8t8clocv2 2.11 2.13 2.22 T:aes128n12t8silcv2 2.12 2.13 2.21 T:aes128n8t8silcv2 2.38 2.42 2.43 T:norx6441v1 2.55 2.62 2.71 T:seakeyakv2 2.57 2.64 2.76 T:oceankeyakv2 2.69 2.73 2.82 T:lakekeyakv1 2.78 2.84 2.86 T:norx6444v2 2.87 2.92 2.98 T:lakekeyakv2 2.96 3.00 3.04 T:norx6461v2 2.97 3.01 3.04 T:norx6461v3 3.04 3.14 3.24 T:norx6444v1 3.49 3.51 3.52 T:norx3241v2 3.50 3.52 3.53 T:norx3241v3 3.60 3.62 3.64 T:norx6461v1 4.23 4.25 4.27 T:norx3241v1 4.42 4.56 4.63 T:ketjemajorv2 4.66 4.68 4.69 T:aesjambuv1 5.30 5.33 5.47 T:acorn128v2 5.33 5.33 5.36 T:norx3261v2 5.33 5.36 5.46 T:norx3261v3 5.11? 5.73? 5.79? T:acorn128v3 6.56 6.63 6.69 ascon128av12 6.54 6.64 6.71 T:ketjeminorv2 6.66 6.70 6.74 T:ascon128av11 6.66 6.72 6.74 T:ascon96v1 6.74 6.82 6.88 T:riverkeyakv2 7.36 7.38 7.39 T:norx3261v1 9.77 9.78 9.83 ascon128v12 9.48 9.82 10.29 T:seakeyakv1 8.87? 9.86? 12.10? T:oceankeyakv1 10.04 10.07 10.11 T:ascon128v11 10.02 10.08 10.11 T:ascon128v1 12.21 12.26 12.31 T:aes128otrsv2 12.20 12.26 12.30 T:aes128otrsv1 13.02 13.07 13.14 T:aes128otrpv1 13.01 13.08 13.17 T:aes128otrpv2 13.51 13.54 13.56 T:aeadaes128ocbtaglen96v1 13.55 13.66 13.88 T:aeadaes128ocbtaglen64v1 15.24 15.31 15.41 T:aeadaes192ocbtaglen96v1 15.33 15.42 15.49 T:aeadaes192ocbtaglen64v1 15.30 15.47 15.50 T:proest256otrv1 15.61 15.64 15.68 T:aes256otrpv2 15.60 15.65 15.67 T:aes256otrpv1 15.63 15.67 15.72 T:aes256otrsv1 15.66 15.71 15.74 T:aes256otrsv2 16.07 16.13 16.17 T:twine80n6t4clocv2 16.55 16.61 16.66 T:twine80n6t4clocv3 16.98 17.03 17.07 T:aeadaes256ocbtaglen96v1 17.00 17.05 17.12 T:aeadaes256ocbtaglen64v1 19.01 19.03 19.10 T:aes128n12clocv1 19.30 19.39 19.43 T:aes128n8clocv1 20.46 20.52 20.60 T:aes128n8silcv1 20.51 20.58 20.67 T:aes128n12silcv1 20.87 20.93 21.05 T:ketjesrv1 21.04 21.18 21.27 T:ketjesrv2 25.33 25.46 25.55 T:riverkeyakv1 31.20 31.31 31.40 T:colm127v1 34.14 34.21 34.27 T:proest128otrv1 41.63 42.04 42.21 T:ketjejrv1 61.79 62.07 62.15 T:ketjejrv2 76.93 77.03 77.13 T:deoxysneq128128v13 77.04 77.09 77.27 T:present80n6t4silcv3 83.03? 84.59? 119.41? T:twine80n6clocv1 96.84 96.92 97.01 T:deoxysneq256128v13 119.78 119.96 120.04 T:deoxyseq128128v13 129.26 129.36 129.47 T:led80n6t4silcv3 133.67 133.89 134.23 T:aezv1 157.19 157.33 157.52 T:deoxyseq256128v13 325.23 326.55 329.80 T:acorn128 3264.26 3266.92 3267.44 T:present80n6silcv1 3266.19 3267.95 3269.14 T:present80n6t4silcv2 5867.04 5879.02 5892.28 T:led80n6silcv1 5897.40 5908.76 5914.61 T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.14? 0.16? 0.16? T:tiaoxinv1 0.13? 0.17? 0.19? T:tiaoxinv2 0.20 0.20 0.21 T:aegis128l 0.19? 0.24? 0.26? T:aeadaes128ocbtaglen128v1 0.26 0.27 0.28 T:aezv3 0.26 0.27 0.28 T:aezv4 0.27 0.29 0.30 T:aezv5 0.15? 0.31? 0.44? T:aeadaes256ocbtaglen128v1 0.29? 0.35? 0.43? T:aeadaes192ocbtaglen128v1 0.37 0.38 0.38 T:aes128gcmv1 0.37 0.38 0.38 T:aegis128 0.38 0.40 0.40 T:aegis256 0.42 0.43 0.43 T:aes256gcmv1 0.47 0.47 0.47 T:aes128otrpv3 0.47 0.49 0.50 T:aes128otrcv3 0.58 0.60 0.61 T:aes256otrpv3 0.59 0.61 0.62 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280128v1 0.65 0.66 0.67 T:morus1280128v2 0.66 0.66 0.67 T:morus1280256v2 0.67 0.67 0.68 T:deoxysi128v141 0.72 0.73 0.74 T:deoxysneq128128v1 0.75 0.76 0.76 T:deoxysi256v141 0.81 0.82 0.83 T:deoxysneq256128v1 0.91 0.92 0.93 aes256gcmv1 0.98 0.99 1.00 T:deoxysii128v141 0.98 1.00 1.00 T:colm0v1 1.03 1.05 1.05 T:deoxyseq128128v1 1.09 1.09 1.14 T:morus640128v1 1.10 1.11 1.14 T:morus640128v2 1.11 1.12 1.13 T:deoxysii256v141 1.23 1.24 1.25 T:deoxyseq256128v1 1.30 1.30 1.31 T:aes128otrsv3 1.55 1.57 1.58 T:norx6444v3 1.73 1.74 1.74 T:aes256otrsv3 2.02 2.04 2.05 T:norx6441v3 2.03 2.04 2.05 T:norx6441v2 2.13 2.14 2.15 T:aes128n12t8clocv2 2.13 2.14 2.14 T:aes128n8t8clocv2 2.13 2.15 2.18 T:seakeyakv2 2.16 2.17 2.17 T:aes128n12t8silcv3 2.16 2.17 2.18 T:aes128n8t8silcv2 2.16 2.17 2.18 T:aes128n12t8silcv2 2.17 2.18 2.19 T:aes128n12t8clocv3 2.15 2.18 2.23 T:oceankeyakv2 2.43 2.44 2.46 T:norx6441v1 2.54 2.58 2.62 T:lakekeyakv2 2.54 2.58 2.64 T:lunarkeyakv2 2.58 2.62 2.64 T:lakekeyakv1 2.76 2.78 2.79 T:norx6444v2 3.02 3.03 3.05 T:norx6461v3 3.03 3.06 3.07 T:norx6461v2 3.18 3.19 3.32 T:norx6444v1 3.59 3.60 3.61 T:norx3241v3 3.60 3.62 3.64 T:norx3241v2 3.64 3.66 3.67 T:norx6461v1 4.10 4.15 4.19 T:ketjemajorv2 4.31 4.33 4.34 T:norx3241v1 4.44 4.44 4.45 T:aesjambuv1 4.70 4.74 4.79 T:riverkeyakv2 5.33 5.35 5.39 T:norx3261v2 5.35 5.37 5.38 T:norx3261v3 5.09 5.39 5.43 T:acorn128v2 5.44 5.52 5.55 T:acorn128v3 5.55 5.60 5.65 T:ketjeminorv2 6.50 6.55 6.58 ascon128av12 6.72 6.74 6.76 T:ascon128av11 6.75 6.79 6.81 T:ascon96v1 7.49 7.51 7.52 T:norx3261v1 9.14 9.36 9.43 T:seakeyakv1 8.82? 9.62? 10.55? T:oceankeyakv1 9.77 9.80 9.83 ascon128v12 10.10 10.13 10.16 T:ascon128v11 10.11 10.15 10.18 T:ascon128v1 11.48 11.51 11.54 T:aes128otrsv1 11.51 11.54 11.57 T:aes128otrsv2 11.96 12.00 12.04 T:aeadaes128ocbtaglen96v1 11.95 12.01 12.08 T:aeadaes128ocbtaglen64v1 12.21 12.25 12.29 T:aes128otrpv1 12.26 12.28 12.31 T:aes128otrpv2 13.70 13.73 13.78 T:aeadaes192ocbtaglen96v1 13.73 13.78 13.79 T:aeadaes192ocbtaglen64v1 14.88 14.90 14.93 T:aes256otrsv2 14.88 14.91 14.96 T:aes256otrsv1 15.24 15.27 15.30 T:aes128n8silcv1 15.26 15.30 15.34 T:aes128n12silcv1 15.48 15.51 15.54 T:aeadaes256ocbtaglen96v1 15.49 15.52 15.57 T:aeadaes256ocbtaglen64v1 15.71 15.73 15.75 T:aes256otrpv1 15.73 15.75 15.76 T:aes256otrpv2 15.55 15.75 16.43 T:proest256otrv1 15.82 15.85 15.88 T:twine80n6t4clocv2 16.00 16.04 16.08 T:aes128n8clocv1 16.04 16.07 16.11 T:aes128n12clocv1 16.32 16.35 16.38 T:twine80n6t4clocv3 19.64 19.67 19.73 T:ketjesrv1 21.52 21.55 21.58 T:ketjesrv2 23.08 23.23 23.68 T:colm127v1 23.82 23.90 24.00 T:riverkeyakv1 34.56 34.64 34.72 T:proest128otrv1 37.32 37.41 37.53 T:ketjejrv1 59.31 59.40 59.94 T:ketjejrv2 59.49 59.64 59.69 T:deoxysneq128128v13 62.02 62.34 63.64 T:twine80n6clocv1 76.28 76.31 76.39 T:present80n6t4silcv3 77.59 77.71 77.83 T:deoxysneq256128v13 88.56 89.31 89.52 T:aezv1 89.79 89.89 89.96 T:deoxyseq128128v13 117.04 117.17 117.89 T:deoxyseq256128v13 128.62 128.70 128.80 T:led80n6t4silcv3 323.14 333.82 335.88 T:acorn128 2446.29 2447.77 2451.83 T:present80n6t4silcv2 2448.87 2451.10 2454.14 T:present80n6silcv1 4401.48 4409.31 4425.15 T:led80n6silcv1 4419.96 4426.91 4429.87 T:led80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.20 0.21 0.22 T:aegis128l 0.21? 0.26? 0.32? T:aeadaes128ocbtaglen128v1 0.25 0.26 0.27 T:tiaoxinv2 0.26 0.27 0.27 T:aezv4 0.26 0.27 0.28 T:aezv3 0.25? 0.28? 0.28? T:tiaoxinv1 0.28 0.29 0.30 T:aezv5 0.17? 0.32? 0.45? T:aeadaes256ocbtaglen128v1 0.35 0.37 0.38 T:aes128gcmv1 0.38 0.39 0.39 T:aegis128 0.24? 0.39? 0.54? T:aeadaes192ocbtaglen128v1 0.39 0.40 0.40 T:aegis256 0.40 0.41 0.42 T:aes256gcmv1 0.49 0.50 0.51 T:aes128otrpv3 0.50 0.51 0.52 T:aes128otrcv3 0.60 0.62 0.63 T:aes256otrpv3 0.63 0.64 0.65 T:aes256otrcv3 0.66 0.67 0.67 T:morus1280256v2 0.66 0.67 0.68 T:morus1280128v2 0.66 0.67 0.68 T:morus1280128v1 0.66 0.68 0.70 T:morus1280256v1 0.72 0.73 0.75 T:deoxysi128v141 0.80 0.80 0.81 T:deoxysneq128128v1 0.80 0.81 0.82 T:deoxysi256v141 0.84 0.86 0.87 aes256gcmv1 0.86 0.88 0.88 T:deoxysneq256128v1 0.99 0.99 1.00 T:deoxysii128v141 1.00 1.03 1.04 T:colm0v1 1.11 1.12 1.14 T:morus640128v2 1.12 1.12 1.13 T:deoxysii256v141 1.12 1.12 1.13 T:morus640128v1 1.18 1.20 1.21 T:deoxyseq128128v1 1.28 1.29 1.30 T:deoxyseq256128v1 1.31 1.32 1.32 T:aes128otrsv3 1.54 1.55 1.57 T:norx6444v3 1.75 1.76 1.77 T:aes256otrsv3 2.00 2.01 2.03 T:norx6441v3 2.00 2.02 2.03 T:norx6441v2 2.06 2.08 2.17 T:aes128n12t8silcv3 2.10 2.10 2.11 T:aes128n8t8clocv2 2.09 2.10 2.14 T:aes128n12t8clocv2 2.12 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.13 T:aes128n8t8silcv2 2.14 2.16 2.20 T:seakeyakv2 2.12 2.19 2.19 T:aes128n12t8clocv3 2.16 2.21 2.26 T:oceankeyakv2 2.41 2.43 2.45 T:norx6441v1 2.53 2.57 2.62 T:lakekeyakv2 2.59 2.62 2.65 T:lakekeyakv1 2.59 2.66 2.70 T:lunarkeyakv2 2.74 2.78 2.80 T:norx6444v2 3.02 3.03 3.04 T:norx6461v2 3.02 3.03 3.04 T:norx6461v3 3.11 3.16 3.26 T:norx6444v1 3.55 3.56 3.56 T:norx3241v3 3.54 3.56 3.58 T:norx3241v2 3.63 3.65 3.66 T:norx6461v1 3.94 3.99 4.06 T:ketjemajorv2 4.27 4.29 4.30 T:norx3241v1 4.56 4.57 4.58 T:aesjambuv1 4.77 4.84 4.97 T:riverkeyakv2 5.33 5.35 5.36 T:norx3261v2 5.39 5.41 5.43 T:norx3261v3 5.50 5.52 5.55 T:acorn128v2 5.80 5.84 5.89 T:ketjeminorv2 5.63 5.90 5.94 T:acorn128v3 6.48 6.53 6.57 ascon128av12 6.67 6.70 6.71 T:ascon96v1 6.67 6.72 6.76 T:ascon128av11 7.42 7.44 7.45 T:norx3261v1 9.36 9.44 9.62 T:seakeyakv1 9.74 9.77 9.81 ascon128v12 9.35? 9.78? 10.71? T:oceankeyakv1 9.99 10.02 10.05 T:ascon128v1 10.01 10.02 10.06 T:ascon128v11 11.68 11.70 11.73 T:aes128otrsv1 11.72 11.74 11.78 T:aes128otrsv2 12.31 12.33 12.37 T:aes128otrpv1 12.32 12.34 12.38 T:aeadaes128ocbtaglen96v1 12.29 12.35 12.39 T:aes128otrpv2 12.35 12.39 12.46 T:aeadaes128ocbtaglen64v1 14.09 14.11 14.15 T:aeadaes192ocbtaglen64v1 14.10 14.14 14.17 T:aeadaes192ocbtaglen96v1 15.06 15.09 15.12 T:aes256otrsv1 15.09 15.11 15.14 T:aes256otrsv2 15.11 15.15 15.18 T:aes128n12clocv1 15.25 15.29 15.30 T:aes128n8clocv1 15.45 15.48 15.54 T:aes128n12silcv1 15.43 15.49 15.52 T:aes128n8silcv1 15.66 15.72 15.81 T:proest256otrv1 15.78 15.85 15.89 T:aeadaes256ocbtaglen96v1 15.86 15.90 15.93 T:aeadaes256ocbtaglen64v1 15.87 15.90 15.93 T:twine80n6t4clocv2 15.93 15.96 15.98 T:aes256otrpv1 15.94 15.97 15.99 T:aes256otrpv2 16.35 16.38 16.40 T:twine80n6t4clocv3 19.90 19.95 19.99 T:ketjesrv1 20.38 20.45 20.52 T:ketjesrv2 23.01 23.15 23.27 T:colm127v1 23.94 24.02 24.13 T:riverkeyakv1 34.49 34.56 34.63 T:proest128otrv1 38.50 38.72 39.62 T:ketjejrv1 59.20 59.35 59.67 T:ketjejrv2 62.18? 62.53? 81.52? T:twine80n6clocv1 68.43 68.52 68.62 T:deoxysneq128128v13 76.64 76.69 76.73 T:present80n6t4silcv3 87.48 87.72 87.82 T:deoxysneq256128v13 88.30 88.57 88.78 T:aezv1 89.69 89.80 89.84 T:deoxyseq128128v13 117.37 117.75 117.86 T:deoxyseq256128v13 128.76 128.91 129.01 T:led80n6t4silcv3 321.45 328.34 330.75 T:acorn128 2448.07 2449.25 2451.12 T:present80n6t4silcv2 2448.18 2449.25 2451.94 T:present80n6silcv1 4410.87 4418.58 4428.79 T:led80n6silcv1 4424.26 4425.95 4432.00 T:led80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.15 0.15 0.15 T:aezv5 0.15 0.15 0.15 T:aezv3 0.13? 0.15? 0.15? T:aezv4 0.21 0.21 0.21 T:aegis128l 0.25? 0.26? 0.28? T:aeadaes128ocbtaglen128v1 0.25 0.26 0.27 T:tiaoxinv2 0.27 0.28 0.28 T:tiaoxinv1 0.30 0.31 0.33 T:aeadaes256ocbtaglen128v1 0.34? 0.37? 0.38? T:aes128gcmv1 0.38 0.39 0.39 T:aegis128 0.38 0.39 0.40 T:aeadaes192ocbtaglen128v1 0.40 0.40 0.41 T:aegis256 0.41? 0.42? 0.46? T:aes256gcmv1 0.49 0.50 0.51 T:aes128otrpv3 0.51 0.51 0.52 T:aes128otrcv3 0.61 0.61 0.62 T:aes256otrpv3 0.63 0.64 0.65 T:aes256otrcv3 0.66 0.67 0.68 T:morus1280256v2 0.66 0.67 0.68 T:morus1280256v1 0.66 0.67 0.70 T:morus1280128v1 0.66 0.68 0.70 T:morus1280128v2 0.73 0.75 0.76 T:deoxysi128v141 0.79 0.80 0.82 T:deoxysneq128128v1 0.80 0.81 0.83 T:deoxysi256v141 0.85 0.86 0.87 aes256gcmv1 0.87 0.88 0.88 T:deoxysneq256128v1 0.99 0.99 1.00 T:deoxysii128v141 1.02 1.03 1.03 T:colm0v1 1.11 1.12 1.13 T:morus640128v2 1.11 1.12 1.13 T:deoxysii256v141 1.11 1.12 1.13 T:morus640128v1 1.17 1.20 1.23 T:deoxyseq128128v1 1.28 1.29 1.30 T:deoxyseq256128v1 1.32 1.32 1.33 T:aes128otrsv3 1.55 1.56 1.58 T:norx6444v3 1.75 1.76 1.77 T:aes256otrsv3 1.99 2.00 2.02 T:norx6441v3 2.00 2.02 2.03 T:norx6441v2 2.06 2.08 2.12 T:aes128n12t8silcv3 2.09 2.10 2.14 T:aes128n12t8clocv2 2.09 2.14 2.15 T:aes128n8t8clocv2 2.05 2.17 2.17 T:aes128n12t8silcv2 2.16 2.17 2.17 T:aes128n8t8silcv2 2.06 2.18 2.19 T:aes128n12t8clocv3 2.17 2.19 2.23 T:seakeyakv2 2.18 2.21 2.25 T:oceankeyakv2 2.41 2.43 2.44 T:norx6441v1 2.50 2.55 2.59 T:lakekeyakv2 2.59 2.63 2.66 T:lakekeyakv1 2.63 2.68 2.73 T:lunarkeyakv2 2.77 2.79 2.81 T:norx6444v2 3.01 3.03 3.05 T:norx6461v2 3.02 3.04 3.06 T:norx6461v3 3.10 3.15 3.19 T:norx6444v1 3.55 3.55 3.57 T:norx3241v2 3.55 3.56 3.58 T:norx3241v3 3.64 3.65 3.66 T:norx6461v1 3.98 4.05 4.10 T:ketjemajorv2 4.27 4.28 4.29 T:norx3241v1 4.55 4.57 4.58 T:aesjambuv1 4.80 4.84 4.91 T:riverkeyakv2 5.14 5.30 5.44 T:acorn128v3 5.37 5.38 5.40 T:norx3261v2 5.39 5.41 5.43 T:norx3261v3 5.55 5.87 5.93 T:acorn128v2 5.82 5.87 5.94 T:ketjeminorv2 6.52 6.55 6.58 ascon128av12 6.66 6.69 6.72 T:ascon128av11 6.68 6.71 6.72 T:ascon96v1 7.42 7.43 7.44 T:norx3261v1 9.32 9.47 9.63 T:seakeyakv1 9.06? 9.75? 11.32? T:oceankeyakv1 9.75 9.77 9.80 ascon128v12 10.01 10.03 10.06 T:ascon128v11 10.03 10.05 10.07 T:ascon128v1 11.69 11.71 11.74 T:aes128otrsv1 11.70 11.74 11.78 T:aes128otrsv2 12.30 12.33 12.39 T:aes128otrpv1 12.32 12.35 12.38 T:aes128otrpv2 12.36 12.40 12.43 T:aeadaes128ocbtaglen64v1 12.37 12.41 12.53 T:aeadaes128ocbtaglen96v1 14.09 14.14 14.15 T:aeadaes192ocbtaglen64v1 14.09 14.18 14.24 T:aeadaes192ocbtaglen96v1 15.07 15.11 15.13 T:aes256otrsv1 15.10 15.12 15.17 T:aes128n12clocv1 15.09 15.12 15.15 T:aes256otrsv2 15.24 15.29 15.33 T:aes128n8clocv1 15.44 15.48 15.53 T:aes128n8silcv1 15.47 15.50 15.56 T:aes128n12silcv1 15.49 15.70 15.76 T:proest256otrv1 15.81 15.87 15.95 T:aeadaes256ocbtaglen96v1 15.84 15.88 15.93 T:aeadaes256ocbtaglen64v1 15.87 15.90 15.93 T:twine80n6t4clocv2 15.94 15.97 16.00 T:aes256otrpv1 15.95 15.99 16.04 T:aes256otrpv2 16.36 16.40 16.42 T:twine80n6t4clocv3 19.90 19.94 19.98 T:ketjesrv1 20.39 20.46 20.53 T:ketjesrv2 22.69 22.78 23.08 T:colm127v1 23.86 23.97 24.12 T:riverkeyakv1 34.54 34.58 34.68 T:proest128otrv1 38.45 38.53 38.60 T:ketjejrv1 59.29 60.16 60.35 T:ketjejrv2 62.95? 64.49? 83.99? T:twine80n6clocv1 68.62 68.65 68.73 T:deoxysneq128128v13 76.61 76.67 76.74 T:present80n6t4silcv3 87.39 87.76 87.93 T:deoxysneq256128v13 88.24 88.47 89.19 T:aezv1 89.92 90.02 90.14 T:deoxyseq128128v13 117.38 117.61 117.85 T:deoxyseq256128v13 128.84 128.91 129.00 T:led80n6t4silcv3 321.01 328.29 330.55 T:acorn128 2447.67 2449.31 2450.87 T:present80n6silcv1 2448.59 2449.72 2451.20 T:present80n6t4silcv2 4404.55 4417.98 4427.22 T:led80n6silcv1 4424.17 4427.20 4432.26 T:led80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.11 0.11 0.12 T:tiaoxinv1 0.12? 0.13? 0.16? T:tiaoxinv2 0.15? 0.16? 0.19? T:aezv5 0.15? 0.16? 0.17? T:aezv4 0.15? 0.17? 0.19? T:aezv3 0.18 0.19 0.19 T:aegis128l 0.14? 0.22? 0.25? T:aeadaes128ocbtaglen128v1 0.21? 0.23? 0.25? T:aes128gcmv1 0.21? 0.24? 0.25? T:aes256gcmv1 -0.02? 0.25? 0.54? T:aeadaes256ocbtaglen128v1 0.29? 0.31? 0.33? aes256gcmv1 0.37 0.37 0.38 T:aegis128 0.39 0.41 0.42 T:aegis256 0.30? 0.42? 0.69? T:aeadaes192ocbtaglen128v1 0.44 0.47 0.48 T:aes128otrpv3 0.47 0.50 0.52 T:aes128otrcv3 0.52? 0.58? 0.60? T:aes256otrpv3 0.57 0.60 0.63 T:colm0v1 0.63 0.64 0.65 T:morus1280256v2 0.62 0.64 0.66 T:aes256otrcv3 0.63 0.64 0.66 T:morus1280128v2 0.63 0.64 0.65 T:morus1280256v1 0.63 0.64 0.65 T:morus1280128v1 0.66 0.67 0.68 T:deoxysii128v141 0.67 0.68 0.69 T:deoxysi128v141 0.69 0.69 0.70 T:deoxyseq128128v1 0.72 0.73 0.74 T:deoxysneq128128v1 0.74 0.75 0.75 T:deoxysi256v141 0.74 0.75 0.77 T:deoxysii256v141 0.81 0.82 0.84 T:deoxysneq256128v1 0.82 0.83 0.84 T:deoxyseq256128v1 1.00 1.02 1.04 T:morus640128v1 1.04 1.07 1.14 T:morus640128v2 1.58? 1.67? 1.76? T:lunarkeyakv2 1.66 1.70 1.77 T:oceankeyakv2 2.01 2.03 2.06 T:norx6444v3 2.02 2.04 2.05 T:norx6441v2 2.03 2.05 2.07 T:norx6441v3 2.04 2.06 2.06 T:aes128n8t8clocv2 2.05 2.06 2.06 T:aes128n12t8clocv2 2.00 2.10 2.15 T:seakeyakv2 2.10 2.11 2.12 T:aes128n12t8clocv3 2.11 2.12 2.13 T:aes128otrsv3 2.12 2.12 2.13 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128n12t8silcv2 2.12 2.13 2.13 T:aes128n8t8silcv2 2.27 2.33 2.41 T:lakekeyakv2 2.42 2.43 2.44 T:norx6441v1 2.35 2.44 2.51 T:lakekeyakv1 2.68 2.71 2.75 T:norx6444v2 2.87 2.88 2.88 T:aes256otrsv3 3.02 3.04 3.07 T:norx6461v3 3.07 3.10 3.12 T:norx6461v2 3.09 3.15 3.21 T:norx6444v1 3.38 3.47 3.58 T:ketjemajorv2 3.59 3.60 3.62 T:norx3241v2 3.59 3.60 3.61 T:norx3241v3 3.64 3.65 3.66 T:norx6461v1 4.29 4.31 4.33 T:norx3241v1 4.38 4.44 4.51 T:riverkeyakv2 4.43 4.44 4.45 T:aesjambuv1 4.92 4.98 5.11 T:acorn128v3 4.97 5.08 5.22 T:ketjeminorv2 5.30 5.33 5.34 T:norx3261v2 5.35 5.37 5.39 T:norx3261v3 4.87? 5.53? 5.61? T:acorn128v2 6.43 6.52 6.59 ascon128av12 6.66 6.69 6.74 T:ascon96v1 6.66 6.69 6.72 T:ascon128av11 7.48 7.51 7.53 T:norx3261v1 9.26 9.35 9.43 T:seakeyakv1 8.83? 9.62? 11.30? T:oceankeyakv1 9.68 9.74 9.76 ascon128v12 10.00 10.02 10.06 T:ascon128v1 9.99 10.02 10.05 T:ascon128v11 10.27 10.32 10.36 T:aes128n12silcv1 10.30 10.37 10.41 T:aes128n8silcv1 11.16 11.19 11.23 T:aes128otrsv1 11.13 11.20 11.25 T:aeadaes128ocbtaglen64v1 11.15 11.23 11.29 T:aes128otrsv2 11.21 11.24 11.27 T:aes128n8clocv1 11.21 11.24 11.32 T:aeadaes128ocbtaglen96v1 11.23 11.27 11.31 T:aes128n12clocv1 11.55 11.60 11.62 T:aes128otrpv1 11.57 11.64 11.67 T:aes128otrpv2 12.89 12.95 12.98 T:aeadaes192ocbtaglen64v1 12.92 12.96 13.01 T:aeadaes192ocbtaglen96v1 14.10 14.15 14.48 T:colm127v1 14.53 14.57 14.61 T:aes256otrsv2 14.56 14.61 14.64 T:aes256otrsv1 14.68 14.72 14.78 T:aeadaes256ocbtaglen64v1 14.68 14.73 14.76 T:aeadaes256ocbtaglen96v1 15.61 15.65 15.69 T:twine80n6t4clocv2 16.09 16.14 16.17 T:twine80n6t4clocv3 16.27 16.31 16.33 T:aes256otrpv1 16.28 16.31 16.33 T:aes256otrpv2 15.94 16.72 17.02 T:proest256otrv1 18.93 19.00 19.05 T:ketjesrv1 19.75 19.84 19.88 T:ketjesrv2 22.45 22.62 22.75 T:riverkeyakv1 34.86 34.99 35.13 T:proest128otrv1 35.31 35.39 35.47 T:ketjejrv1 42.68 42.77 42.87 T:aezv1 41.39? 52.74? 53.64? T:twine80n6clocv1 56.84 57.03 58.06 T:ketjejrv2 59.87 59.96 60.02 T:deoxyseq128128v13 60.09 60.13 60.19 T:deoxysneq128128v13 76.14 76.18 76.22 T:present80n6t4silcv3 78.04 78.14 78.21 T:deoxyseq256128v13 78.13 78.44 78.52 T:deoxysneq256128v13 128.39 128.51 128.57 T:led80n6t4silcv3 315.29 329.90 333.51 T:acorn128 1630.77 1632.37 1633.11 T:present80n6t4silcv2 1631.01 1632.55 1634.88 T:present80n6silcv1 2933.51 2947.01 2957.82 T:led80n6silcv1 2943.50 2950.48 2958.51 T:led80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.11? 0.12? 0.15? T:tiaoxinv1 0.13? 0.13? 0.18? T:tiaoxinv2 0.15? 0.16? 0.19? T:aezv5 0.16 0.17 0.17 T:aezv4 0.16? 0.17? 0.18? T:aezv3 0.18 0.19 0.19 T:aegis128l 0.21? 0.22? 0.25? T:aeadaes128ocbtaglen128v1 0.20? 0.23? 0.24? T:aes128gcmv1 0.21? 0.23? 0.25? T:aes256gcmv1 -0.02? 0.28? 0.55? T:aeadaes256ocbtaglen128v1 0.28? 0.32? 0.33? aes256gcmv1 0.37 0.37 0.38 T:aegis128 0.11? 0.39? 0.43? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.42 T:aegis256 0.46 0.47 0.48 T:aes128otrpv3 0.47 0.51 0.52 T:aes128otrcv3 0.57 0.58 0.59 T:aes256otrpv3 0.56 0.60 0.61 T:colm0v1 0.63 0.64 0.64 T:morus1280128v1 0.62 0.64 0.67 T:morus1280128v2 0.62 0.64 0.65 T:morus1280256v2 0.62 0.64 0.66 T:aes256otrcv3 0.63 0.65 0.66 T:morus1280256v1 0.65 0.66 0.67 T:deoxysii128v141 0.66 0.67 0.68 T:deoxysi128v141 0.69 0.70 0.71 T:deoxyseq128128v1 0.71 0.72 0.73 T:deoxysneq128128v1 0.74 0.75 0.77 T:deoxysii256v141 0.74 0.75 0.78 T:deoxysi256v141 0.80 0.82 0.83 T:deoxyseq256128v1 0.82 0.82 0.83 T:deoxysneq256128v1 1.10 1.11 1.12 T:morus640128v1 1.09 1.12 1.13 T:morus640128v2 1.64 1.70 1.78 T:oceankeyakv2 1.64 1.75 1.81 T:lunarkeyakv2 2.01 2.04 2.06 T:norx6441v2 2.02 2.04 2.06 T:norx6444v3 2.01 2.04 2.06 T:norx6441v3 2.02 2.06 2.21 T:aes128n12t8clocv2 2.05 2.06 2.07 T:aes128n8t8clocv2 2.03 2.09 2.15 T:seakeyakv2 2.12 2.12 2.12 T:aes128otrsv3 2.01 2.12 2.13 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.12 2.13 T:aes128n12t8silcv2 2.01? 2.13? 2.25? T:aes128n12t8clocv3 2.29 2.35 2.38 T:lakekeyakv2 2.37 2.43 2.46 T:lakekeyakv1 2.43 2.44 2.45 T:norx6441v1 2.69 2.75 2.80 T:norx6444v2 2.86 2.87 2.88 T:aes256otrsv3 3.02 3.05 3.09 T:norx6461v3 3.03 3.05 3.07 T:norx6461v2 3.14 3.19 3.29 T:norx6444v1 3.41 3.48 3.60 T:ketjemajorv2 3.59 3.60 3.62 T:norx3241v3 3.60 3.60 3.62 T:norx3241v2 3.64 3.66 3.68 T:norx6461v1 4.30 4.33 4.35 T:norx3241v1 4.34 4.39 4.42 T:riverkeyakv2 4.45 4.45 4.46 T:aesjambuv1 5.02 5.08 5.19 T:ketjeminorv2 5.32 5.33 5.36 T:norx3261v2 5.37 5.40 5.42 T:norx3261v3 5.04? 5.82? 5.88? T:acorn128v2 5.79 6.03 6.07 T:acorn128v3 6.44 6.48 6.56 ascon128av12 6.62 6.68 6.77 T:ascon128av11 6.66 6.70 6.73 T:ascon96v1 7.48 7.50 7.52 T:norx3261v1 9.08 9.22 9.35 T:seakeyakv1 9.70 9.74 9.77 ascon128v12 8.68? 9.75? 10.77? T:oceankeyakv1 9.96 9.99 10.05 T:ascon128v1 9.96 10.05 10.08 T:ascon128v11 10.32 10.36 10.41 T:aes128n8silcv1 10.32 10.37 10.42 T:aes128n12silcv1 11.15 11.20 11.29 T:aeadaes128ocbtaglen64v1 11.19 11.23 11.26 T:aes128otrsv1 11.18 11.23 11.27 T:aeadaes128ocbtaglen96v1 11.23 11.26 11.31 T:aes128n8clocv1 11.23 11.26 11.31 T:aes128n12clocv1 11.22 11.29 11.34 T:aes128otrsv2 11.59 11.64 11.69 T:aes128otrpv1 11.60 11.65 11.67 T:aes128otrpv2 12.92 12.98 13.02 T:aeadaes192ocbtaglen64v1 12.96 13.03 13.19 T:aeadaes192ocbtaglen96v1 14.10 14.15 14.34 T:colm127v1 14.52 14.58 14.62 T:aes256otrsv2 14.57 14.60 14.62 T:aes256otrsv1 14.69 14.75 14.83 T:aeadaes256ocbtaglen96v1 14.71 14.79 14.82 T:aeadaes256ocbtaglen64v1 15.61 15.66 15.71 T:twine80n6t4clocv2 15.89 15.95 16.06 T:proest256otrv1 16.10 16.15 16.20 T:twine80n6t4clocv3 16.26 16.29 16.34 T:aes256otrpv1 16.31 16.34 16.36 T:aes256otrpv2 18.87 18.94 19.03 T:ketjesrv1 19.71 19.85 19.94 T:ketjesrv2 22.48 22.58 22.64 T:riverkeyakv1 34.89 34.98 35.09 T:proest128otrv1 35.23 35.33 35.41 T:ketjejrv1 41.37? 41.51? 56.69? T:twine80n6clocv1 42.53 42.60 42.66 T:aezv1 57.01 57.32 58.03 T:ketjejrv2 59.87 59.96 60.07 T:deoxyseq128128v13 60.07 60.12 60.19 T:deoxysneq128128v13 76.12 76.15 76.18 T:present80n6t4silcv3 77.98 78.18 78.27 T:deoxyseq256128v13 78.08 78.19 78.37 T:deoxysneq256128v13 128.29 128.46 128.63 T:led80n6t4silcv3 313.30 329.84 333.48 T:acorn128 1630.23 1631.34 1632.75 T:present80n6t4silcv2 1631.79 1632.54 1633.77 T:present80n6silcv1 2940.38 2950.13 2953.65 T:led80n6silcv1 2949.66 2956.59 2959.99 T:led80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.07? 0.11? 0.12? T:tiaoxinv1 0.13 0.13 0.14 T:tiaoxinv2 0.15? 0.16? 0.18? T:aezv5 0.16 0.17 0.17 T:aezv4 0.17? 0.17? 0.19? T:aezv3 0.18 0.19 0.19 T:aegis128l 0.21? 0.22? 0.24? T:aeadaes128ocbtaglen128v1 0.22? 0.23? 0.26? T:aes256gcmv1 0.22? 0.24? 0.29? T:aes128gcmv1 0.24? 0.26? 0.28? T:aeadaes256ocbtaglen128v1 0.29 0.30 0.31 aes256gcmv1 0.37 0.38 0.38 T:aegis128 0.38? 0.39? 0.67? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aegis256 0.47 0.48 0.49 T:aes128otrpv3 0.49 0.50 0.52 T:aes128otrcv3 0.58 0.59 0.59 T:aes256otrpv3 0.56? 0.60? 0.65? T:colm0v1 0.62 0.63 0.65 T:morus1280128v2 0.63 0.64 0.66 T:morus1280128v1 0.62 0.64 0.65 T:morus1280256v1 0.63 0.64 0.66 T:aes256otrcv3 0.63 0.64 0.65 T:morus1280256v2 0.66 0.66 0.68 T:deoxysii128v141 0.62 0.67 0.68 T:deoxysi128v141 0.69 0.70 0.71 T:deoxyseq128128v1 0.71 0.72 0.75 T:deoxysneq128128v1 0.74 0.75 0.76 T:deoxysi256v141 0.74 0.75 0.76 T:deoxysii256v141 0.81 0.82 0.83 T:deoxyseq256128v1 0.82 0.83 0.84 T:deoxysneq256128v1 1.10 1.11 1.12 T:morus640128v1 1.10 1.12 1.13 T:morus640128v2 1.65 1.70 1.76 T:oceankeyakv2 1.65 1.72 1.80 T:lunarkeyakv2 1.99 2.00 2.13 T:aes128n12t8clocv3 2.01 2.04 2.07 T:norx6444v3 2.02 2.04 2.06 T:norx6441v3 2.01 2.04 2.06 T:norx6441v2 2.04 2.04 2.13 T:aes128n12t8silcv3 1.91 2.05 2.07 T:aes128n8t8clocv2 2.04 2.06 2.06 T:aes128n12t8clocv2 2.03 2.11 2.16 T:seakeyakv2 2.04 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.12 T:aes128otrsv3 2.12 2.13 2.21 T:aes128n8t8silcv2 2.25 2.31 2.34 T:lakekeyakv2 2.34 2.40 2.45 T:lakekeyakv1 2.42 2.43 2.45 T:norx6441v1 2.66 2.69 2.73 T:norx6444v2 2.86 2.88 2.88 T:aes256otrsv3 3.01 3.04 3.07 T:norx6461v3 3.03 3.04 3.07 T:norx6461v2 3.11 3.18 3.21 T:norx6444v1 3.36 3.44 3.58 T:ketjemajorv2 3.59 3.59 3.61 T:norx3241v2 3.59 3.60 3.61 T:norx3241v3 3.63 3.66 3.68 T:norx6461v1 4.30 4.33 4.35 T:norx3241v1 4.35 4.40 4.49 T:riverkeyakv2 4.44 4.45 4.46 T:aesjambuv1 5.05 5.12 5.18 T:ketjeminorv2 5.02? 5.14? 5.84? T:acorn128v2 5.30 5.32 5.34 T:norx3261v2 5.37 5.39 5.40 T:norx3261v3 5.03? 5.75? 6.04? T:acorn128v3 6.41 6.47 6.53 ascon128av12 6.66 6.68 6.71 T:ascon96v1 6.64 6.71 6.81 T:ascon128av11 7.48 7.51 7.53 T:norx3261v1 8.34? 9.39? 10.70? T:oceankeyakv1 9.25 9.46 9.53 T:seakeyakv1 9.69 9.72 9.75 ascon128v12 9.93 10.01 10.07 T:ascon128v11 9.97 10.02 10.05 T:ascon128v1 10.31 10.34 10.38 T:aes128n8silcv1 10.34 10.38 10.41 T:aes128n12silcv1 11.11 11.18 11.25 T:aeadaes128ocbtaglen64v1 11.19 11.22 11.28 T:aeadaes128ocbtaglen96v1 11.20 11.25 11.28 T:aes128otrsv1 11.22 11.26 11.34 T:aes128n8clocv1 11.23 11.27 11.32 T:aes128n12clocv1 11.23 11.28 11.31 T:aes128otrsv2 11.58 11.60 11.63 T:aes128otrpv2 11.58 11.63 11.67 T:aes128otrpv1 12.89 12.96 13.01 T:aeadaes192ocbtaglen64v1 12.93 12.98 13.03 T:aeadaes192ocbtaglen96v1 14.08 14.29 14.56 T:colm127v1 14.57 14.60 14.64 T:aes256otrsv1 14.56 14.61 14.67 T:aes256otrsv2 14.68 14.73 14.81 T:aeadaes256ocbtaglen64v1 14.72 14.79 14.83 T:aeadaes256ocbtaglen96v1 15.62 15.70 15.74 T:twine80n6t4clocv2 15.81 15.92 15.95 T:proest256otrv1 16.11 16.17 16.20 T:twine80n6t4clocv3 16.30 16.33 16.35 T:aes256otrpv1 16.31 16.35 16.39 T:aes256otrpv2 18.81 18.91 19.02 T:ketjesrv1 19.77 19.90 20.00 T:ketjesrv2 22.44 22.57 22.72 T:riverkeyakv1 34.95 35.02 35.12 T:proest128otrv1 35.26 35.41 35.62 T:ketjejrv1 41.62? 42.50? 57.55? T:twine80n6clocv1 42.69 42.80 42.92 T:aezv1 57.01 57.14 58.59 T:ketjejrv2 60.00 60.05 60.15 T:deoxyseq128128v13 60.07 60.16 60.28 T:deoxysneq128128v13 76.12 76.15 76.21 T:present80n6t4silcv3 78.02 78.15 78.22 T:deoxyseq256128v13 78.01 78.17 78.42 T:deoxysneq256128v13 128.34 128.45 128.64 T:led80n6t4silcv3 313.46 329.81 333.56 T:acorn128 1631.50 1632.59 1633.35 T:present80n6t4silcv2 1631.31 1632.65 1634.02 T:present80n6silcv1 2944.29 2947.76 2953.61 T:led80n6silcv1 2950.71 2953.26 2957.34 T:led80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.20 0.20 0.21 T:tiaoxinv1 0.21 0.21 0.23 T:tiaoxinv2 0.24 0.24 0.24 T:aegis128l 0.31 0.31 0.32 T:aezv4 0.31 0.31 0.32 T:aezv3 0.32 0.33 0.33 T:aezv5 0.39 0.40 0.43 T:aeadaes128ocbtaglen128v1 0.40 0.40 0.41 T:aegis128 0.43 0.44 0.44 T:aegis256 0.47? 0.48? 0.64? T:aeadaes256ocbtaglen128v1 0.51 0.51 0.56 T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrpv3 0.61 0.62 0.62 T:aes128otrcv3 0.69 0.70 0.71 T:aes256otrpv3 0.72 0.73 0.74 T:aes128gcmv1 0.78 0.78 0.79 T:aes256otrcv3 0.78 0.78 0.79 T:aes256gcmv1 0.79 0.80 0.80 T:morus1280128v1 0.79 0.80 0.82 T:deoxysneq128128v1 0.80 0.80 0.81 T:morus1280256v1 0.79 0.80 0.81 T:deoxysi128v141 0.81 0.82 0.83 T:morus1280128v2 0.82 0.82 0.83 T:morus1280256v2 0.90 0.91 0.91 T:deoxysi256v141 0.91 0.92 0.94 T:deoxysneq256128v1 1.06 1.06 1.06 aes256gcmv1 1.06 1.06 1.07 T:colm0v1 1.13 1.13 1.15 T:deoxysii128v141 1.15 1.15 1.16 T:deoxyseq128128v1 1.22 1.23 1.23 T:morus640128v1 1.24 1.25 1.29 T:morus640128v2 1.30 1.31 1.31 T:deoxysii256v141 1.35 1.35 1.37 T:deoxyseq256128v1 1.36 1.36 1.37 T:aes128otrsv3 1.82 1.83 1.84 T:aes256otrsv3 2.16 2.17 2.18 T:norx6444v3 2.19 2.19 2.21 T:aes128n12t8clocv2 2.21 2.21 2.21 T:aes128n8t8clocv2 2.21 2.21 2.22 T:aes128n12t8clocv3 2.24 2.24 2.24 T:aes128n12t8silcv2 2.24 2.24 2.25 T:aes128n12t8silcv3 2.24 2.24 2.24 T:aes128n8t8silcv2 2.39 2.40 2.41 T:norx6441v2 2.40 2.40 2.41 T:norx6441v3 2.72 2.73 2.74 T:norx6441v1 2.79 2.81 2.83 T:lakekeyakv2 3.09 3.11 3.14 T:seakeyakv2 3.11 3.13 3.14 T:lakekeyakv1 3.56 3.57 3.58 T:norx6461v3 3.56 3.57 3.58 T:norx6461v2 3.86 3.88 3.89 T:norx3241v3 3.88 3.89 3.89 T:norx3241v2 4.02 4.04 4.06 T:norx6444v2 4.07 4.08 4.12 T:oceankeyakv2 4.09 4.10 4.11 T:norx6461v1 4.49 4.49 4.50 T:aesjambuv1 4.55 4.57 4.58 T:norx3241v1 4.57 4.60 4.71 T:norx6444v1 4.93 4.99 5.04 T:riverkeyakv2 5.35 5.38 5.43 T:ketjemajorv2 5.74 5.75 5.75 T:norx3261v2 5.77 5.79 5.79 T:norx3261v3 5.89 6.16 6.17 T:acorn128v2 5.94 6.21 6.25 T:acorn128v3 6.23 6.25 6.28 T:ketjeminorv2 6.69 6.71 6.73 ascon128av12 6.85 6.86 6.88 T:ascon128av11 6.91 6.92 6.95 T:ascon96v1 7.06 7.09 7.11 T:lunarkeyakv2 7.90 7.91 7.92 T:norx3261v1 9.91 9.93 9.96 ascon128v12 10.22 10.24 10.28 T:ascon128v11 10.22 10.26 10.29 T:ascon128v1 11.62 11.72 11.77 T:seakeyakv1 11.81 11.82 11.85 T:aes128otrsv1 11.82 11.85 11.87 T:aes128otrsv2 12.35 12.39 12.46 T:aeadaes128ocbtaglen96v1 12.37 12.40 12.42 T:aeadaes128ocbtaglen64v1 12.58 12.60 12.62 T:aes128otrpv1 12.63 12.66 12.69 T:aes128otrpv2 14.15 14.17 14.19 T:aeadaes192ocbtaglen64v1 14.16 14.20 14.23 T:aeadaes192ocbtaglen96v1 14.25? 14.61? 16.19? T:oceankeyakv1 15.27 15.29 15.32 T:aes256otrsv1 15.30 15.31 15.33 T:aes256otrsv2 15.54 15.56 15.58 T:aes128n12silcv1 15.55 15.58 15.62 T:aes128n8silcv1 16.00 16.01 16.09 T:aeadaes256ocbtaglen96v1 15.99 16.02 16.66 T:aeadaes256ocbtaglen64v1 16.10 16.11 16.21 T:twine80n6t4clocv2 16.09 16.12 16.14 T:aes256otrpv1 16.12 16.14 16.16 T:aes256otrpv2 16.19 16.20 16.22 T:aes128n12clocv1 16.19 16.22 16.24 T:aes128n8clocv1 16.56 16.57 16.58 T:twine80n6t4clocv3 17.08 17.12 17.17 T:proest256otrv1 20.19 20.20 20.23 T:ketjesrv1 22.29 22.33 22.39 T:ketjesrv2 23.50 23.53 23.59 T:colm127v1 24.90 25.00 25.22 T:riverkeyakv1 36.21 36.25 36.34 T:proest128otrv1 37.99 38.06 38.28 T:ketjejrv1 59.84 59.90 59.95 T:deoxysneq128128v13 60.33 60.91 61.08 T:ketjejrv2 77.09 77.13 77.17 T:present80n6t4silcv3 77.83 78.08 78.22 T:deoxysneq256128v13 64.07? 82.59? 83.18? T:twine80n6clocv1 85.49 85.98 86.97 T:aezv1 90.79 90.85 90.96 T:deoxyseq128128v13 118.35 118.41 118.59 T:deoxyseq256128v13 129.71 129.75 129.79 T:led80n6t4silcv3 363.96 374.38 374.48 T:acorn128 2461.47 2462.70 2463.98 T:present80n6t4silcv2 2462.70 2463.77 2465.11 T:present80n6silcv1 4422.82 4435.53 4443.89 T:led80n6silcv1 4438.91 4442.12 4444.48 T:led80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.25 0.25 0.25 T:aegis128l 0.31 0.31 0.31 T:aezv4 0.31 0.31 0.32 T:tiaoxinv2 0.31 0.31 0.32 T:aezv3 0.32 0.32 0.33 T:tiaoxinv1 0.32 0.33 0.33 T:aezv5 0.41 0.42 0.42 T:aegis128 0.41? 0.42? 0.46? T:aeadaes128ocbtaglen128v1 0.43 0.44 0.44 T:aegis256 0.49? 0.50? 0.67? T:aeadaes256ocbtaglen128v1 0.50? 0.51? 0.67? T:aeadaes192ocbtaglen128v1 0.57 0.57 0.58 T:aes128otrpv3 0.63 0.64 0.65 T:aes128otrcv3 0.71 0.72 0.74 T:aes256otrpv3 0.72 0.73 0.75 T:aes128gcmv1 0.78 0.79 0.79 T:aes256gcmv1 0.80 0.81 0.83 T:aes256otrcv3 0.82 0.83 0.83 T:morus1280256v1 0.83 0.83 0.83 T:morus1280128v1 0.83 0.84 0.84 T:morus1280128v2 0.84 0.84 0.85 T:morus1280256v2 0.89 0.89 0.90 T:deoxysi128v141 0.92 0.93 0.93 T:deoxysneq128128v1 0.99 1.00 1.02 T:deoxysi256v141 1.00 1.00 1.00 T:deoxysneq256128v1 1.00 1.01 1.01 aes256gcmv1 1.10 1.11 1.11 T:colm0v1 1.16 1.16 1.16 T:deoxysii128v141 1.27 1.28 1.28 T:morus640128v1 1.27 1.28 1.29 T:morus640128v2 1.34 1.35 1.35 T:deoxysii256v141 1.34 1.35 1.36 T:deoxyseq128128v1 1.39 1.39 1.40 T:aes128otrsv3 1.45 1.45 1.46 T:deoxyseq256128v1 1.85 1.85 1.87 T:aes256otrsv3 2.14 2.14 2.19 T:aes128n8t8clocv2 2.14 2.15 2.20 T:aes128n12t8clocv2 2.14 2.15 2.15 T:aes128n12t8clocv3 2.16 2.16 2.17 T:norx6444v3 2.20 2.20 2.20 T:aes128n8t8silcv2 2.19 2.20 2.20 T:aes128n12t8silcv3 2.20 2.20 2.20 T:aes128n12t8silcv2 2.35 2.36 2.37 T:norx6441v3 2.35 2.37 2.38 T:norx6441v2 2.71 2.71 2.72 T:norx6441v1 2.80 2.84 2.86 T:lakekeyakv2 3.11 3.12 3.14 T:seakeyakv2 3.12 3.14 3.15 T:lakekeyakv1 3.52 3.53 3.55 T:norx6461v2 3.52 3.54 3.56 T:norx6461v3 3.84 3.85 3.85 T:norx3241v3 3.84 3.85 3.86 T:norx3241v2 4.02 4.04 4.06 T:norx6444v2 4.08 4.09 4.10 T:norx6461v1 4.09 4.14 4.17 T:oceankeyakv2 4.52 4.53 4.54 T:norx3241v1 4.58 4.61 4.71 T:norx6444v1 4.62 4.64 4.64 T:aesjambuv1 5.08 5.09 5.14 T:riverkeyakv2 5.25 5.28 5.31 T:ketjemajorv2 5.79 5.80 5.82 T:norx3261v2 5.83 5.84 5.85 T:norx3261v3 6.07 6.38 6.73 T:acorn128v3 6.38 6.39 6.40 T:acorn128v2 6.50 6.53 6.58 T:ketjeminorv2 6.66 6.69 6.74 ascon128av12 6.82 6.83 6.89 T:ascon128av11 6.83 6.85 6.86 T:ascon96v1 7.13 7.18 7.20 T:lunarkeyakv2 7.85 7.85 7.86 T:norx3261v1 9.88 9.89 9.91 ascon128v12 10.14 10.16 10.18 T:ascon128v1 10.14 10.16 10.20 T:ascon128v11 11.76 11.77 11.88 T:seakeyakv1 12.00 12.02 12.04 T:aes128otrsv1 12.02 12.05 12.09 T:aes128otrsv2 12.69 12.71 12.74 T:aes128otrpv1 12.70 12.72 12.74 T:aes128otrpv2 12.81 12.85 12.88 T:aeadaes128ocbtaglen64v1 12.82 12.86 12.88 T:aeadaes128ocbtaglen96v1 14.62 14.64 14.69 T:aeadaes192ocbtaglen96v1 14.66 14.69 14.70 T:aeadaes192ocbtaglen64v1 14.44 14.84 15.92 T:oceankeyakv1 15.27 15.29 15.31 T:aes128n12clocv1 15.43 15.45 15.48 T:aes128n8clocv1 15.48 15.50 15.51 T:aes256otrsv1 15.49 15.52 15.56 T:aes256otrsv2 15.73 15.77 15.83 T:aes128n12silcv1 15.79 15.81 15.82 T:aes128n8silcv1 16.12 16.15 16.17 T:twine80n6t4clocv2 16.31 16.34 16.35 T:aes256otrpv1 16.34 16.35 16.36 T:aes256otrpv2 16.49 16.53 16.54 T:aeadaes256ocbtaglen64v1 16.50 16.54 16.59 T:aeadaes256ocbtaglen96v1 16.58 16.61 16.63 T:twine80n6t4clocv3 17.12 17.15 17.22 T:proest256otrv1 20.48 20.51 20.58 T:ketjesrv1 21.24 21.28 21.30 T:ketjesrv2 23.42 23.43 23.59 T:colm127v1 24.91 24.98 25.07 T:riverkeyakv1 36.11 36.18 36.20 T:proest128otrv1 39.02 39.06 39.14 T:ketjejrv1 60.08 60.29 61.11 T:ketjejrv2 68.84 68.92 69.00 T:deoxysneq128128v13 77.45 77.49 77.61 T:present80n6t4silcv3 70.60? 82.64? 83.75? T:twine80n6clocv1 85.50 85.69 85.89 T:aezv1 88.00 88.20 88.24 T:deoxysneq256128v13 90.84 90.93 91.07 T:deoxyseq128128v13 118.27 118.69 118.91 T:deoxyseq256128v13 129.96 130.01 130.13 T:led80n6t4silcv3 361.51 368.89 369.03 T:acorn128 2461.37 2462.42 2464.00 T:present80n6t4silcv2 2462.07 2463.15 2464.98 T:present80n6silcv1 4419.55 4421.75 4431.34 T:led80n6silcv1 4439.01 4443.65 4446.74 T:led80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.18 0.18 0.18 T:aezv3 0.18 0.18 0.18 T:aezv4 0.18 0.18 0.18 T:aezv5 0.24 0.25 0.25 T:aegis128l 0.31 0.31 0.31 T:tiaoxinv2 0.32 0.32 0.33 T:tiaoxinv1 0.41 0.41 0.41 T:aegis128 0.40 0.42 0.43 T:aeadaes128ocbtaglen128v1 0.44 0.44 0.44 T:aegis256 0.49 0.49 0.50 T:aeadaes256ocbtaglen128v1 0.50 0.50 0.52 T:aeadaes192ocbtaglen128v1 0.57 0.57 0.58 T:aes128otrpv3 0.63 0.64 0.64 T:aes128otrcv3 0.71 0.72 0.73 T:aes256otrpv3 0.72 0.72 0.73 T:aes128gcmv1 0.78 0.79 0.79 T:aes256gcmv1 0.81 0.81 0.82 T:aes256otrcv3 0.82 0.82 0.83 T:morus1280128v1 0.82 0.83 0.84 T:morus1280256v1 0.84 0.84 0.85 T:morus1280256v2 0.84 0.84 0.85 T:morus1280128v2 0.87 0.88 0.89 T:deoxysi128v141 0.91 0.92 0.93 T:deoxysneq128128v1 0.99 0.99 1.00 T:deoxysi256v141 0.99 1.00 1.00 T:deoxysneq256128v1 1.00 1.01 1.01 aes256gcmv1 1.10 1.11 1.11 T:colm0v1 1.16 1.16 1.16 T:deoxysii128v141 1.26 1.26 1.27 T:morus640128v1 1.27 1.28 1.29 T:morus640128v2 1.35 1.35 1.35 T:deoxysii256v141 1.34 1.35 1.36 T:deoxyseq128128v1 1.38 1.39 1.39 T:aes128otrsv3 1.44 1.45 1.45 T:deoxyseq256128v1 1.84 1.85 1.86 T:aes256otrsv3 2.14 2.14 2.20 T:aes128n8t8clocv2 2.14 2.14 2.20 T:aes128n12t8clocv2 2.16 2.17 2.18 T:norx6444v3 2.19 2.20 2.20 T:aes128n12t8silcv3 2.22 2.22 2.22 T:aes128n12t8clocv3 2.16 2.22 2.25 T:aes128n8t8silcv2 2.19 2.25 2.25 T:aes128n12t8silcv2 2.35 2.36 2.37 T:norx6441v3 2.36 2.37 2.38 T:norx6441v2 2.70 2.71 2.72 T:norx6441v1 2.83 2.85 2.88 T:lakekeyakv2 3.11 3.13 3.17 T:lakekeyakv1 3.12 3.14 3.15 T:seakeyakv2 3.52 3.53 3.54 T:norx6461v2 3.52 3.54 3.56 T:norx6461v3 3.83 3.84 3.85 T:norx3241v3 3.84 3.85 3.86 T:norx3241v2 4.03 4.04 4.07 T:norx6444v2 4.07 4.09 4.09 T:norx6461v1 4.11 4.15 4.17 T:oceankeyakv2 4.51 4.53 4.54 T:norx3241v1 4.59 4.60 4.62 T:norx6444v1 4.61 4.62 4.64 T:aesjambuv1 5.04 5.10 5.15 T:riverkeyakv2 5.29 5.31 5.37 T:ketjemajorv2 5.75 5.77 5.80 T:norx3261v2 5.80 5.83 5.85 T:norx3261v3 6.51 6.54 6.58 T:ketjeminorv2 6.66 6.68 6.77 T:acorn128v3 6.65 6.68 6.72 ascon128av12 6.68 6.68 6.70 T:acorn128v2 6.82 6.83 6.85 T:ascon96v1 6.83 6.85 6.88 T:ascon128av11 7.15 7.17 7.19 T:lunarkeyakv2 7.84 7.85 7.87 T:norx3261v1 9.87 9.90 9.93 ascon128v12 10.15 10.16 10.17 T:ascon128v11 10.16 10.18 10.20 T:ascon128v1 11.47 11.72 11.84 T:seakeyakv1 12.02 12.04 12.06 T:aes128otrsv1 12.04 12.07 12.09 T:aes128otrsv2 12.67 12.69 12.72 T:aes128otrpv1 12.72 12.75 12.79 T:aes128otrpv2 12.82 12.87 12.88 T:aeadaes128ocbtaglen96v1 12.85 12.89 12.91 T:aeadaes128ocbtaglen64v1 14.60 14.63 14.68 T:aeadaes192ocbtaglen64v1 14.69 14.72 14.76 T:aeadaes192ocbtaglen96v1 14.90 14.97 16.36 T:oceankeyakv1 15.27 15.29 15.32 T:aes128n12clocv1 15.46 15.48 15.49 T:aes128n8clocv1 15.49 15.52 15.55 T:aes256otrsv1 15.52 15.53 15.56 T:aes256otrsv2 15.71 15.74 15.81 T:aes128n12silcv1 15.75 15.77 15.82 T:aes128n8silcv1 16.13 16.14 16.17 T:twine80n6t4clocv2 16.34 16.35 16.39 T:aes256otrpv2 16.33 16.36 16.39 T:aes256otrpv1 16.46 16.50 16.56 T:aeadaes256ocbtaglen96v1 16.48 16.51 16.54 T:aeadaes256ocbtaglen64v1 16.58 16.59 16.62 T:twine80n6t4clocv3 17.13 17.15 17.24 T:proest256otrv1 20.49 20.51 20.55 T:ketjesrv1 21.18 21.21 21.26 T:ketjesrv2 23.38 23.41 23.45 T:colm127v1 24.94 25.09 25.22 T:riverkeyakv1 36.11 36.17 36.23 T:proest128otrv1 39.19 39.33 39.44 T:ketjejrv1 60.28 60.41 61.40 T:ketjejrv2 68.97 69.02 69.06 T:deoxysneq128128v13 63.86? 74.70? 81.91? T:twine80n6clocv1 77.42 77.47 77.50 T:present80n6t4silcv3 85.53 85.68 85.81 T:aezv1 88.06 88.19 88.28 T:deoxysneq256128v13 90.82 90.91 90.94 T:deoxyseq128128v13 117.98 118.08 118.64 T:deoxyseq256128v13 129.90 129.97 130.03 T:led80n6t4silcv3 361.43 368.87 369.01 T:acorn128 2461.27 2462.11 2462.86 T:present80n6silcv1 2461.57 2462.60 2464.13 T:present80n6t4silcv2 4430.16 4436.09 4440.02 T:led80n6silcv1 4442.30 4444.18 4448.59 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.95? 0.97? 1.11? T:aegis128 0.95? 0.98? 1.11? T:aegis128l 1.07? 1.12? 1.41? T:aezv3 1.09? 1.15? 1.28? T:aezv4 1.26? 1.34? 1.64? T:aezv5 1.27? 1.34? 1.67? T:aegis256 1.27? 1.36? 1.61? T:tiaoxinv1 1.36? 1.44? 1.71? T:tiaoxinv2 2.28? 2.31? 2.75? T:aes128otrpv3 2.43 2.52 2.59 T:deoxysneq128128v1 2.37? 2.65? 2.87? T:aes128otrsv3 2.65 2.70 2.85 T:colm0v1 2.88? 2.95? 3.27? T:aes256otrpv3 2.95 2.98 3.04 T:aes128n12t8clocv3 3.06? 3.15? 3.70? T:aes128otrcv3 3.19? 3.26? 3.55? T:deoxysi128v141 3.25 3.29 3.38 T:deoxysneq256128v1 3.41 3.44 3.52 T:aes256otrsv3 3.61 3.69 3.78 T:aes128n8t8clocv2 3.44? 3.73? 7.71? T:aeadaes192ocbtaglen128v1 3.66 3.73 3.82 T:aes128n12t8clocv2 3.73? 3.88? 4.98? T:aeadaes128ocbtaglen128v1 3.85 3.91 3.93 T:aes128n12t8silcv2 3.88 3.91 3.93 T:aes128n8t8silcv2 3.91 3.95 3.98 T:aes128n12t8silcv3 3.91 4.02 4.16 T:deoxysi256v141 4.12 4.16 4.28 T:deoxyseq128128v1 4.14 4.23 4.33 T:morus640128v1 4.20 4.27 4.31 T:morus1280128v1 4.22 4.28 4.61 T:aes256otrcv3 4.23 4.29 4.37 T:morus1280256v1 4.37 4.39 4.48 T:deoxysii128v141 4.41 4.51 4.57 T:morus640128v2 4.49 4.59 4.72 T:morus1280128v2 4.45? 4.60? 8.56? T:aeadaes256ocbtaglen128v1 4.51 4.60 4.68 T:morus1280256v2 4.76 4.85 5.02 T:deoxyseq256128v1 5.41 5.51 5.59 T:deoxysii256v141 5.55 5.62 5.65 T:aesjambuv1 5.62 5.68 5.75 aes256gcmv1 7.64 7.72 7.78 T:norx6441v1 8.84 8.92 9.05 T:norx6441v2 8.84 9.00 9.15 T:norx6441v3 8.86 9.04 9.29 T:aes128gcmv1 9.30 9.38 9.47 T:norx3241v2 9.28 9.38 9.45 T:norx3241v1 9.32 9.38 9.51 T:norx3241v3 9.23 9.44 9.68 T:aes256gcmv1 10.05 10.10 10.27 T:ascon128av11 10.12 10.17 10.42 T:ascon96v1 10.40 10.46 10.74 ascon128av12 10.98 11.09 11.69 T:lakekeyakv1 11.41 11.49 11.55 T:norx6461v1 12.31 12.59 12.84 T:lakekeyakv2 12.37 12.61 12.80 T:riverkeyakv2 12.85 13.02 13.08 ascon128v12 12.85 13.08 13.29 T:norx6461v3 12.98 13.09 13.36 T:norx6461v2 13.20 13.35 13.43 T:ascon128v1 13.27 13.37 13.52 T:ascon128v11 13.99 14.11 14.19 T:norx3261v2 14.05 14.15 14.28 T:norx3261v3 14.86 15.03 15.27 T:norx6444v3 16.21 16.27 16.33 T:norx3261v1 18.84 18.98 19.31 T:aes128otrsv1 18.91 18.98 19.45 T:aes128otrsv2 19.20 19.28 19.45 T:aes128n12clocv1 19.42 19.45 19.81 T:aes128n8clocv1 20.74 20.99 21.61 T:ketjeminorv2 20.34 21.02 21.86 T:aeadaes128ocbtaglen96v1 20.88 21.07 21.22 T:aes128otrpv1 20.91 21.16 21.41 T:aes128otrpv2 20.93 21.20 21.55 T:aeadaes128ocbtaglen64v1 21.14 21.33 21.63 T:twine80n6t4clocv3 21.41 21.52 22.05 T:aes128n8silcv1 21.58 21.79 22.12 T:twine80n6t4clocv2 21.62 21.97 22.82 T:aes128n12silcv1 23.44 23.62 24.21 T:aeadaes192ocbtaglen64v1 23.75 23.91 24.30 T:aeadaes192ocbtaglen96v1 24.40 24.49 24.82 T:aes256otrsv2 24.48 24.60 24.70 T:aes256otrsv1 24.42 24.77 25.27 T:acorn128v3 24.90 24.92 25.27 T:aes256otrpv1 23.78 24.95 25.41 T:acorn128v2 24.84 24.98 25.12 T:aes256otrpv2 26.61 27.26 27.85 T:aeadaes256ocbtaglen96v1 27.38 27.52 27.91 T:aeadaes256ocbtaglen64v1 28.01 28.22 29.05 T:seakeyakv2 30.34 30.50 30.73 T:norx6444v2 32.58 32.91 33.20 T:ketjesrv1 33.75 34.27 35.78 T:ketjemajorv2 34.27 34.32 34.43 T:colm127v1 34.41 34.67 34.90 T:norx6444v1 38.33 38.49 39.35 T:ketjesrv2 44.71 45.02 45.50 T:riverkeyakv1 44.71 45.38 45.81 T:oceankeyakv2 49.80 49.98 54.87 T:proest256otrv1 51.52 52.00 52.52 T:ketjejrv1 67.64 67.77 68.02 T:deoxysneq128128v13 70.48 70.63 71.05 T:proest128otrv1 71.80? 74.40? 82.42? T:twine80n6clocv1 81.11 81.53 82.37 T:ketjejrv2 88.19 88.29 88.97 T:deoxysneq256128v13 88.76 89.32 90.91 T:seakeyakv1 94.02 94.24 95.99 T:aezv1 94.84 94.95 95.12 T:present80n6t4silcv3 112.78 112.99 113.29 T:deoxyseq128128v13 116.19 116.70 117.70 T:lunarkeyakv2 147.77 148.12 148.62 T:deoxyseq256128v13 154.20 154.45 154.83 T:led80n6t4silcv3 156.89? 160.91? 177.70? T:oceankeyakv1 1256.64 1306.86 1307.47 T:acorn128 2758.33 2759.00 2760.57 T:present80n6t4silcv2 2759.02 2760.25 2765.59 T:present80n6silcv1 4727.79 4771.46 4855.45 T:led80n6silcv1 4759.58 4794.24 4833.78 T:led80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.02? 1.04? 1.20? T:aegis128l 1.02? 1.07? 1.34? T:aegis128 1.06 1.09 1.14 T:aezv3 1.12 1.17 1.24 T:aezv4 1.22? 1.27? 1.45? T:aezv5 1.44? 1.45? 1.66? T:tiaoxinv1 1.46? 1.50? 1.71? T:tiaoxinv2 1.36? 1.70? 1.86? T:aegis256 2.30? 2.33? 2.91? T:aes128otrpv3 2.52? 2.68? 2.96? T:aes128otrsv3 2.76 2.84 2.90 T:aes128n12t8clocv3 2.90 2.95 3.04 T:colm0v1 2.91 2.98 3.16 T:aes256otrpv3 3.20 3.28 3.38 T:aes128n8t8clocv2 3.20? 3.30? 3.61? T:aes128otrcv3 3.25 3.32 3.55 T:aes128n12t8clocv2 3.29? 3.38? 6.14? T:aeadaes192ocbtaglen128v1 3.49? 3.63? 3.89? T:aes256otrsv3 3.71? 3.80? 5.27? T:aeadaes128ocbtaglen128v1 3.91 3.93 3.94 T:aes128n8t8silcv2 3.92? 3.94? 5.23? T:aes128n12t8silcv2 3.92? 3.98? 5.38? T:aes128n12t8silcv3 4.02 4.09 4.14 T:deoxysneq128128v1 4.20 4.25 4.38 T:aes256otrcv3 4.30 4.33 4.41 T:deoxysneq256128v1 4.24 4.34 4.51 T:deoxysi128v141 4.39 4.47 4.55 T:morus640128v1 4.46 4.55 4.63 T:morus1280256v1 4.51 4.56 4.59 T:morus1280128v1 4.61? 4.70? 8.60? T:aeadaes256ocbtaglen128v1 4.73 4.80 4.88 T:morus1280128v2 4.73 4.85 4.90 T:morus1280256v2 4.78 4.88 4.93 T:morus640128v2 4.98 5.07 5.16 T:deoxysii128v141 5.15 5.23 5.33 T:deoxysi256v141 5.74 5.86 6.00 aes256gcmv1 5.70? 5.92? 6.34? T:deoxyseq128128v1 6.13 6.24 6.30 T:aesjambuv1 6.39 6.48 6.62 T:deoxyseq256128v1 6.55 6.65 6.70 T:deoxysii256v141 7.87 7.94 8.00 T:norx6441v1 8.72 8.82 8.95 T:norx6441v3 8.81 8.88 9.23 T:aes128gcmv1 8.78 8.90 9.02 T:norx6441v2 9.26 9.34 9.72 T:aes256gcmv1 9.49 9.55 9.63 T:norx3241v1 9.56 9.62 9.73 T:norx3241v3 9.53 9.66 9.80 T:norx3241v2 9.96 10.04 10.11 T:ascon128av11 10.02 10.16 10.23 T:ascon96v1 10.09 10.19 10.29 ascon128av12 10.93 11.15 11.60 T:lakekeyakv1 11.63 11.70 11.76 T:norx6461v1 12.37 12.72 13.04 T:lakekeyakv2 12.65 12.73 13.22 T:riverkeyakv2 12.87 12.96 13.20 T:norx6461v2 12.79 12.98 13.15 T:norx6461v3 12.87 13.06 13.17 ascon128v12 13.10 13.20 13.31 T:ascon128v1 13.09 13.24 13.40 T:ascon128v11 14.26 14.32 14.38 T:norx3261v2 14.38 14.44 14.54 T:norx3261v3 14.79 14.88 14.99 T:norx6444v3 16.37 16.44 16.49 T:norx3261v1 18.73 18.92 19.06 T:aes128n12clocv1 18.95 19.06 19.46 T:aes128otrsv1 18.99 19.09 19.34 T:aes128n8clocv1 19.03 19.20 19.35 T:aes128otrsv2 20.67 21.07 21.92 T:ketjeminorv2 20.96 21.16 21.50 T:aes128otrpv1 20.98 21.20 21.43 T:aes128otrpv2 21.10 21.24 21.62 T:twine80n6t4clocv3 21.64 21.72 21.97 T:twine80n6t4clocv2 21.70 22.20 23.27 T:aes128n12silcv1 21.97 22.44 23.45 T:aes128n8silcv1 23.03 23.16 23.66 T:aeadaes128ocbtaglen64v1 23.06 23.23 23.70 T:aeadaes128ocbtaglen96v1 24.27 24.45 26.38 T:acorn128v3 24.59 24.70 25.07 T:aes256otrsv2 24.61 24.73 25.11 T:aes256otrsv1 24.42 25.03 25.84 T:acorn128v2 25.09 25.19 25.30 T:aes256otrpv2 25.15 25.22 25.51 T:aes256otrpv1 25.71 25.83 26.32 T:aeadaes192ocbtaglen64v1 25.93 26.09 26.22 T:aeadaes192ocbtaglen96v1 28.02 28.59 28.89 T:seakeyakv2 30.08 30.21 30.67 T:aeadaes256ocbtaglen96v1 30.27 30.44 30.88 T:aeadaes256ocbtaglen64v1 30.52 30.64 30.85 T:norx6444v2 33.46 33.71 34.20 T:ketjesrv1 34.54 34.69 35.11 T:colm127v1 34.01 34.86 35.08 T:ketjemajorv2 34.60 35.04 35.51 T:norx6444v1 37.59 38.38 38.99 T:ketjesrv2 44.98 45.41 46.21 T:riverkeyakv1 44.77 45.70 46.19 T:oceankeyakv2 51.08 51.38 55.55 T:proest256otrv1 53.12 53.63 53.84 T:ketjejrv1 71.58 72.04 72.43 T:proest128otrv1 76.38 76.77 77.72 T:deoxysneq128128v13 80.75 81.36 82.05 T:ketjejrv2 73.71? 87.09? 92.30? T:twine80n6clocv1 89.56 91.04 92.13 T:seakeyakv1 95.43 95.75 96.16 T:present80n6t4silcv3 96.48 97.09 97.66 T:aezv1 98.30 98.64 99.41 T:deoxysneq256128v13 112.91 113.54 113.81 T:deoxyseq128128v13 115.91 116.48 117.41 T:lunarkeyakv2 147.18 147.97 148.53 T:deoxyseq256128v13 154.49 154.79 155.14 T:led80n6t4silcv3 161.85 162.44 178.87 T:oceankeyakv1 1257.20 1301.73 1302.35 T:acorn128 2756.83 2759.45 2760.98 T:present80n6t4silcv2 2758.47 2759.53 2760.53 T:present80n6silcv1 4641.19 4685.61 4775.88 T:led80n6t4silcv2 4665.39 4730.06 4734.52 T:led80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.76? 0.80? 1.05? T:aezv3 0.73? 0.82? 0.92? T:aezv4 1.02 1.03 1.10 T:aegis128l 1.01 1.05 1.09 T:aegis128 0.61? 1.08? 1.10? T:aezv5 1.31 1.35 1.44 T:aegis256 1.42? 1.47? 1.66? T:tiaoxinv1 1.48? 1.51? 1.69? T:tiaoxinv2 2.29 2.33 2.42 T:aes128otrpv3 2.42? 2.49? 2.72? T:aes128n12t8clocv3 2.43? 2.51? 2.73? T:aes128otrsv3 2.90 2.97 3.04 T:aes256otrpv3 2.98 3.04 3.10 T:colm0v1 3.15 3.16 3.23 T:aes128n12t8clocv2 3.12 3.16 3.37 T:aes128n8t8clocv2 3.20 3.25 3.38 T:aes128otrcv3 3.29? 3.34? 7.36? T:aeadaes192ocbtaglen128v1 3.46 3.51 3.55 T:aes256otrsv3 3.67 3.75 3.95 T:aes128n12t8silcv2 3.75 3.80 3.92 T:aeadaes128ocbtaglen128v1 3.70 3.85 4.05 T:aes128n8t8silcv2 3.90 3.97 4.02 T:deoxysneq128128v1 4.20 4.23 4.26 T:deoxysneq256128v1 4.22 4.23 4.29 T:aes256otrcv3 4.15 4.27 4.37 T:deoxysi128v141 4.36 4.43 4.59 T:morus640128v1 4.44 4.49 4.52 T:morus1280256v1 4.48 4.54 4.59 T:morus1280128v1 4.55 4.59 4.70 T:aeadaes256ocbtaglen128v1 4.76 4.79 4.80 T:morus1280128v2 4.79 4.83 4.88 T:morus1280256v2 4.80 4.84 5.01 T:morus640128v2 5.02 5.09 5.16 T:deoxysii128v141 5.05 5.10 5.23 T:deoxysi256v141 3.84? 5.13? 5.22? T:aes128n12t8silcv3 5.62? 5.73? 6.36? T:deoxyseq128128v1 5.79 5.84 5.90 aes256gcmv1 6.20 6.23 6.33 T:aesjambuv1 6.40 6.53 6.62 T:deoxyseq256128v1 6.55 6.59 6.72 T:deoxysii256v141 7.89 7.92 8.03 T:norx6441v1 8.82 8.95 8.99 T:norx6441v3 8.82 8.96 9.09 T:aes128gcmv1 8.83 8.98 9.05 T:norx6441v2 9.24 9.31 9.52 T:aes256gcmv1 9.50 9.55 9.62 T:norx3241v1 9.52 9.56 9.64 T:norx3241v2 9.56 9.62 9.70 T:norx3241v3 10.05 10.10 10.48 T:ascon96v1 10.04 10.16 10.51 T:ascon128av11 10.19 10.26 10.36 ascon128av12 10.99 11.32 11.56 T:lakekeyakv1 11.63 11.67 11.88 T:norx6461v1 12.18 12.38 13.23 T:lakekeyakv2 12.72 12.90 13.26 T:riverkeyakv2 12.84 12.99 13.12 T:norx6461v2 12.89 13.00 13.09 T:norx6461v3 12.95 13.01 13.15 ascon128v12 13.10 13.19 13.41 T:ascon128v11 13.02 13.25 13.29 T:ascon128v1 14.25 14.30 14.38 T:norx3261v2 14.37 14.41 14.49 T:norx3261v3 14.70 14.80 14.91 T:norx6444v3 16.38 16.46 16.54 T:norx3261v1 18.78 18.84 19.20 T:aes128n12clocv1 18.84 18.96 19.24 T:aes128n8clocv1 19.07 19.14 19.28 T:aes128otrsv2 19.08 19.16 19.54 T:aes128otrsv1 20.75 21.20 21.88 T:ketjeminorv2 20.94 21.25 21.58 T:aes128otrpv1 20.98 21.31 21.57 T:aes128otrpv2 21.22 21.54 21.90 T:twine80n6t4clocv3 21.74 21.89 22.26 T:twine80n6t4clocv2 21.64 22.12 22.47 T:aes128n8silcv1 21.76 22.29 22.73 T:aes128n12silcv1 23.05 23.08 23.41 T:aeadaes128ocbtaglen96v1 23.14 23.25 23.52 T:aeadaes128ocbtaglen64v1 24.32 24.52 24.89 T:acorn128v2 24.51 24.68 25.30 T:acorn128v3 24.62 24.75 25.10 T:aes256otrsv1 24.61 24.77 24.85 T:aes256otrsv2 25.07 25.17 25.38 T:aes256otrpv2 25.02 25.21 25.30 T:aes256otrpv1 25.77 25.94 26.10 T:aeadaes192ocbtaglen64v1 25.98 26.13 26.30 T:aeadaes192ocbtaglen96v1 28.25 28.91 29.55 T:seakeyakv2 30.15 30.23 30.78 T:aeadaes256ocbtaglen96v1 30.28 30.36 30.65 T:aeadaes256ocbtaglen64v1 30.40 30.52 30.67 T:norx6444v2 32.94 33.65 33.82 T:ketjesrv1 34.09 34.29 34.95 T:ketjemajorv2 34.23 34.45 34.81 T:colm127v1 34.52 35.14 36.14 T:norx6444v1 37.66 38.64 39.23 T:ketjesrv2 44.68 45.13 45.70 T:oceankeyakv2 45.20 45.46 45.87 T:riverkeyakv1 49.30 49.97 52.16 T:proest256otrv1 52.75 53.05 53.51 T:ketjejrv1 70.37 71.40 71.76 T:twine80n6clocv1 71.78 71.94 72.22 T:proest128otrv1 76.38 76.55 77.02 T:deoxysneq128128v13 81.16 81.87 83.03 T:ketjejrv2 89.69 91.00 92.88 T:seakeyakv1 95.69 95.84 96.14 T:present80n6t4silcv3 96.31 96.75 97.25 T:aezv1 97.88 98.29 99.18 T:deoxysneq256128v13 112.85 113.24 113.62 T:deoxyseq128128v13 115.89 116.88 117.59 T:lunarkeyakv2 147.64 148.27 148.71 T:deoxyseq256128v13 154.22 154.63 154.85 T:led80n6t4silcv3 163.70 164.66 179.30 T:oceankeyakv1 1254.20 1301.95 1302.12 T:acorn128 2755.91 2757.17 2762.53 T:present80n6t4silcv2 2757.66 2759.17 2762.02 T:present80n6silcv1 4614.64 4656.41 4708.41 T:led80n6silcv1 4649.13 4685.00 4765.92 T:led80n6t4silcv2