Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.15 0.15 0.16 T:tiaoxinv2 0.15 0.16 0.16 T:tiaoxinv1 0.12? 0.18? 0.22? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.19 aegis128l 0.17? 0.25? 0.29? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.32 0.33 0.34 T:aegis256 0.33 0.33 0.34 aegis256 0.36 0.37 0.38 T:aezv4 0.36 0.37 0.38 T:aezv3 0.10? 0.39? 0.42? T:aeadaes192ocbtaglen128v1 0.38 0.39 0.39 T:aezv5 0.40 0.42 0.43 T:aes128otrcv3 0.41 0.42 0.43 T:aes128otrsv3 0.46 0.47 0.48 T:morus1280256v2 0.47 0.48 0.49 T:morus1280256v1 0.46 0.48 0.49 T:morus1280128v1 0.49 0.49 0.50 T:morus1280128v2 0.52 0.54 0.55 T:deoxysi128v141 0.55 0.55 0.56 T:aes256otrsv3 0.55 0.56 0.56 T:aes256otrcv3 0.60 0.62 0.63 T:deoxysneq128128v1 0.54? 0.62? 0.65? T:deoxysi256v141 0.68 0.70 0.73 T:morus640128v2 0.68 0.71 0.72 T:deoxysneq256128v1 0.70 0.72 0.74 T:morus640128v1 0.70? 0.74? 0.81? T:oceankeyakv2 0.75? 0.80? 0.84? T:lunarkeyakv2 0.80 0.81 0.82 T:aes128gcmv1 0.85 0.87 0.87 T:norx6444v3 0.88 0.90 0.90 aes256gcmv1 1.15 1.18 1.22 T:deoxyseq128128v1 1.24 1.26 1.26 T:colm0v1 1.24 1.27 1.28 T:deoxysii128v141 1.27 1.28 1.30 T:aes128otrpv3 1.31 1.35 1.38 T:deoxyseq256128v1 1.37 1.41 1.42 T:seakeyakv2 1.43 1.50 1.51 T:deoxysii256v141 1.68? 1.71? 1.94? T:aes256otrpv3 2.17 2.18 2.20 T:norx6441v2 2.17 2.18 2.19 T:norx6441v3 2.62 2.62 2.63 T:aes128n12t8silcv2 2.62 2.62 2.63 T:aes128n8t8silcv2 2.61 2.62 2.63 T:aes128n12t8clocv3 2.62 2.62 2.63 T:aes128n12t8silcv3 2.62 2.62 2.63 T:aes128n12t8clocv2 2.62 2.62 2.63 T:aes128n8t8clocv2 2.61 2.63 2.64 T:norx6441v1 3.22 3.23 3.24 T:norx6461v3 3.19 3.23 3.30 T:lakekeyakv2 3.22 3.24 3.25 T:norx6461v2 3.18 3.26 3.31 T:lakekeyakv1 3.32 3.40 3.41 T:norx6444v2 3.39 3.44 3.46 T:norx6444v1 3.52 3.52 3.52 T:norx3241v2 3.52 3.52 3.53 T:norx3241v3 3.87 3.90 3.92 T:norx6461v1 4.22 4.23 4.23 T:norx3241v1 5.12 5.14 5.17 T:acorn128v2 5.27 5.27 5.28 T:norx3261v3 5.27 5.27 5.28 T:norx3261v2 5.38 5.38 5.44 T:aesjambuv1 5.41 5.52 5.60 T:ketjemajorv2 6.13 6.13 6.13 ascon128av12 6.49 6.50 6.51 T:acorn128v3 7.13? 7.19? 8.38? T:ketjeminorv2 7.52 7.52 7.53 T:norx3261v1 7.58 7.60 7.64 T:riverkeyakv2 8.88 8.88 8.88 T:ascon128v11 8.88 8.88 8.88 T:ascon128v1 9.13 9.13 9.13 ascon128v12 9.27 9.30 9.34 T:ascon96v1 9.30 9.31 9.31 T:ascon128av11 9.89? 11.99? 16.02? T:oceankeyakv1 12.04 12.12 12.23 T:seakeyakv1 12.32 12.35 12.37 T:aes128otrpv1 12.34 12.36 12.39 T:aes128otrsv2 12.34 12.37 12.38 T:aes128otrsv1 12.35 12.37 12.40 T:aes128otrpv2 15.95 15.96 15.98 T:aes256otrsv2 15.96 15.97 16.00 T:aes256otrpv2 15.95 15.97 16.01 T:aes256otrpv1 15.97 16.00 16.01 T:aes256otrsv1 18.40 18.46 18.51 T:proest256otrv1 19.85 19.95 20.40 T:twine80n6t4clocv2 21.78 21.83 21.87 T:aes128n12clocv1 21.79 21.84 21.89 T:aes128n8clocv1 21.51 21.89 21.92 T:twine80n6t4clocv3 24.58 24.74 24.87 T:aes128n12silcv1 24.77 24.84 24.95 T:aes128n8silcv1 29.04 29.09 29.17 T:ketjesrv1 30.33 30.49 30.66 T:riverkeyakv1 30.80 30.94 31.06 T:ketjesrv2 45.37 45.51 45.64 T:proest128otrv1 70.03 70.19 70.52 T:ketjejrv2 67.56 70.32 72.72 T:present80n6t4silcv3 71.25 71.27 71.28 T:ketjejrv1 74.83 75.00 75.06 T:deoxysneq128128v13 109.34 109.49 109.72 T:deoxysneq256128v13 121.98 122.46 122.70 T:twine80n6clocv1 128.12 128.30 136.58 T:led80n6t4silcv3 136.58 136.96 137.66 T:aezv1 150.11 150.22 151.04 T:deoxyseq128128v13 219.69 220.89 222.40 T:deoxyseq256128v13 481.07? 550.12? 625.06? T:acorn128 2168.15 2172.40 2193.01 T:led80n6t4silcv2 2168.28 2175.41 2178.77 T:led80n6silcv1 3759.04 3760.56 3761.90 T:present80n6t4silcv2 3773.72 3777.63 3779.73 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.13? 0.19? 0.23? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.19 aegis128l 0.16? 0.21? 0.31? T:aeadaes256ocbtaglen128v1 0.28 0.29 0.30 T:tiaoxinv1 0.28 0.29 0.30 T:tiaoxinv2 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.33 aegis256 0.33 0.33 0.34 T:aegis256 0.36 0.37 0.38 T:aezv3 0.37 0.37 0.38 T:aezv4 0.38 0.39 0.39 T:aezv5 0.33? 0.40? 0.46? T:aeadaes192ocbtaglen128v1 0.44 0.45 0.46 T:aes128otrsv3 0.45 0.45 0.45 T:aes128otrcv3 0.50 0.50 0.51 T:morus1280256v1 0.50 0.51 0.51 T:morus1280256v2 0.50 0.51 0.51 T:morus1280128v2 0.50 0.51 0.51 T:morus1280128v1 0.58 0.58 0.59 T:aes256otrcv3 0.58 0.59 0.59 T:aes256otrsv3 0.56 0.60 0.61 T:deoxysi128v141 0.68 0.69 0.71 T:aes128gcmv1 0.64 0.71 0.71 T:deoxysi256v141 0.71 0.73 0.73 T:deoxysneq256128v1 0.66? 0.74? 0.79? T:oceankeyakv2 0.74 0.77 0.78 T:deoxysneq128128v1 0.78 0.78 0.79 T:morus640128v2 0.77 0.79 0.81 T:morus640128v1 0.80 0.81 0.82 aes256gcmv1 0.83 0.87 0.92 T:lunarkeyakv2 0.86 0.87 0.88 T:norx6444v3 1.20 1.21 1.29 T:colm0v1 1.23 1.27 1.28 T:deoxysii128v141 1.23 1.29 1.34 T:aes128otrpv3 1.38 1.39 1.43 T:deoxyseq128128v1 1.36 1.41 1.47 T:seakeyakv2 1.42 1.50 1.51 T:deoxysii256v141 1.58 1.59 1.63 T:deoxyseq256128v1 1.73 1.76 1.79 T:aes256otrpv3 2.13 2.14 2.16 T:norx6441v2 2.15 2.17 2.18 T:norx6441v3 2.56 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.57 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128n12t8clocv2 2.55 2.57 2.60 T:aes128n12t8silcv2 2.55 2.57 2.58 T:aes128n12t8silcv3 2.56 2.57 2.59 T:aes128n8t8silcv2 2.58 2.59 2.61 T:norx6441v1 3.17 3.20 3.27 T:norx6444v2 3.21 3.23 3.26 T:norx6461v2 3.23 3.26 3.29 T:norx6461v3 3.20 3.27 3.38 T:lakekeyakv2 3.32 3.33 3.37 T:norx6444v1 3.22 3.33 3.36 T:lakekeyakv1 3.58 3.59 3.61 T:norx3241v2 3.58 3.59 3.60 T:norx3241v3 3.84 3.95 4.02 T:norx6461v1 4.30 4.35 4.37 T:norx3241v1 5.26 5.31 5.34 T:ketjemajorv2 5.31 5.31 5.32 T:norx3261v3 5.32 5.33 5.35 T:norx3261v2 5.33 5.36 5.38 T:acorn128v2 5.72 5.75 5.86 T:aesjambuv1 6.18 6.19 6.19 ascon128av12 6.61 6.62 6.65 T:acorn128v3 7.36 7.40 7.41 T:norx3261v1 7.76 7.82 7.85 T:riverkeyakv2 7.84? 8.02? 9.22? T:ketjeminorv2 8.75 8.75 8.76 ascon128v12 9.00 9.00 9.01 T:ascon128v11 9.00 9.00 9.01 T:ascon128v1 9.88 9.88 9.89 T:ascon128av11 9.88 9.89 9.92 T:ascon96v1 11.81 11.98 12.15 T:seakeyakv1 9.99? 11.99? 16.18? T:oceankeyakv1 12.64 12.69 12.73 T:aes128otrpv1 12.66 12.70 12.76 T:aes128otrsv1 12.65 12.71 12.76 T:aes128otrpv2 12.67 12.72 12.78 T:aes128otrsv2 16.26 16.30 16.36 T:aes256otrpv1 16.29 16.31 16.38 T:aes256otrsv2 16.25 16.32 16.37 T:aes256otrsv1 16.29 16.33 16.40 T:aes256otrpv2 18.35 18.40 18.42 T:proest256otrv1 19.84 20.36 20.59 T:twine80n6t4clocv2 21.40 21.59 21.86 T:twine80n6t4clocv3 21.78 21.91 22.01 T:ketjesrv2 22.89 22.94 22.98 T:aes128n8clocv1 22.94 22.96 23.01 T:aes128n12clocv1 24.35? 24.68? 28.38? T:aes128n12silcv1 24.65 24.73 24.88 T:aes128n8silcv1 29.79 29.93 29.97 T:ketjesrv1 30.27 30.60 31.60 T:riverkeyakv1 44.78 44.93 45.14 T:proest128otrv1 69.34 69.44 69.52 T:ketjejrv2 67.13 71.64 71.95 T:present80n6t4silcv3 72.76 72.78 72.81 T:ketjejrv1 111.71 112.08 113.48 T:deoxysneq128128v13 120.99 121.91 122.11 T:twine80n6clocv1 123.55 125.15 130.20 T:led80n6t4silcv3 137.26 137.43 137.71 T:aezv1 150.16 150.43 151.43 T:deoxyseq128128v13 167.40 167.58 168.54 T:deoxysneq256128v13 222.01 222.34 222.88 T:deoxyseq256128v13 474.88? 510.39? 555.23? T:acorn128 2163.52 2165.53 2166.90 T:led80n6silcv1 2172.20 2173.20 2176.37 T:led80n6t4silcv2 3755.26 3756.17 3760.94 T:present80n6t4silcv2 3776.28 3778.89 3785.02 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.12? 0.14? 0.14? T:aezv4 0.13? 0.14? 0.19? T:aezv3 0.14 0.15 0.15 T:aezv5 0.17? 0.19? 0.20? T:aeadaes128ocbtaglen128v1 -0.03? 0.21? 0.52? T:aeadaes256ocbtaglen128v1 0.18? 0.24? 0.26? aegis128l 0.28 0.29 0.31 T:tiaoxinv1 0.28 0.30 0.30 T:tiaoxinv2 0.31 0.31 0.32 T:aegis128 0.33 0.33 0.34 T:aegis256 0.32? 0.39? 0.39? aegis256 0.38? 0.40? 0.68? T:aeadaes192ocbtaglen128v1 0.44 0.45 0.45 T:aes128otrsv3 0.45 0.45 0.45 T:aes128otrcv3 0.50 0.50 0.51 T:morus1280256v2 0.50 0.50 0.51 T:morus1280128v2 0.50 0.51 0.51 T:morus1280128v1 0.50 0.51 0.51 T:morus1280256v1 0.58 0.58 0.59 T:aes256otrsv3 0.58 0.59 0.60 T:aes256otrcv3 0.58 0.60 0.61 T:deoxysi128v141 0.69 0.69 0.70 T:aes128gcmv1 0.64 0.70 0.71 T:deoxysi256v141 0.68? 0.72? 0.76? T:deoxysneq256128v1 0.75 0.77 0.80 T:deoxysneq128128v1 0.78 0.79 0.79 T:morus640128v2 0.72? 0.79? 0.86? T:oceankeyakv2 0.78 0.79 0.81 T:morus640128v1 0.79 0.80 0.82 aes256gcmv1 0.85 0.87 0.88 T:norx6444v3 0.88? 0.94? 0.98? T:lunarkeyakv2 1.12? 1.20? 1.28? T:colm0v1 1.22 1.27 1.28 T:deoxysii128v141 1.23 1.31 1.36 T:aes128otrpv3 1.37 1.39 1.39 T:deoxyseq128128v1 1.41 1.44 1.48 T:seakeyakv2 1.41 1.50 1.51 T:deoxysii256v141 1.59 1.60 1.61 T:deoxyseq256128v1 1.68 1.76 1.80 T:aes256otrpv3 2.14 2.16 2.17 T:norx6441v2 2.13 2.16 2.18 T:norx6441v3 2.45 2.56 2.67 T:aes128n8t8silcv2 2.45 2.56 2.67 T:aes128n12t8silcv2 2.56 2.56 2.62 T:aes128n12t8clocv3 2.56 2.56 2.62 T:aes128n8t8clocv2 2.56 2.56 2.62 T:aes128n12t8clocv2 2.57 2.60 2.62 T:norx6441v1 2.45 2.67 2.68 T:aes128n12t8silcv3 3.24 3.25 3.28 T:norx6461v3 3.22 3.26 3.28 T:norx6461v2 3.22 3.28 3.38 T:lakekeyakv2 3.28 3.34 3.37 T:norx6444v2 3.27 3.35 3.39 T:lakekeyakv1 3.33 3.36 3.40 T:norx6444v1 3.58 3.59 3.60 T:norx3241v2 3.59 3.61 3.61 T:norx3241v3 3.84 3.87 3.93 T:norx6461v1 4.31 4.35 4.37 T:norx3241v1 5.31 5.33 5.33 T:norx3261v2 5.31 5.34 5.37 T:ketjemajorv2 5.33 5.34 5.35 T:norx3261v3 5.35 5.37 5.39 T:acorn128v2 5.72 5.75 5.86 T:aesjambuv1 6.19 6.19 6.20 ascon128av12 6.62 6.62 6.63 T:acorn128v3 7.37 7.38 7.40 T:norx3261v1 7.76 7.79 7.81 T:riverkeyakv2 7.87? 8.06? 9.33? T:ketjeminorv2 8.75 8.75 8.76 ascon128v12 8.86 8.88 8.90 T:ascon128av11 8.88 8.89 8.90 T:ascon96v1 8.98 9.00 9.02 T:ascon128v1 8.98 9.00 9.03 T:ascon128v11 11.96 12.03 12.11 T:seakeyakv1 10.18? 12.20? 16.13? T:oceankeyakv1 12.66 12.69 12.75 T:aes128otrsv2 12.68 12.74 12.76 T:aes128otrsv1 12.69 12.74 12.87 T:aes128otrpv2 12.67 12.74 12.80 T:aes128otrpv1 16.29 16.33 16.44 T:aes256otrsv1 16.29 16.34 16.38 T:aes256otrsv2 16.31 16.35 16.40 T:aes256otrpv2 16.32 16.36 16.40 T:aes256otrpv1 18.36 18.38 18.41 T:proest256otrv1 19.75 19.98 20.52 T:twine80n6t4clocv2 21.40 21.57 21.69 T:twine80n6t4clocv3 21.82 21.91 22.01 T:ketjesrv2 22.90 22.94 22.98 T:aes128n8clocv1 22.93 22.96 23.00 T:aes128n12clocv1 24.36? 24.73? 28.45? T:aes128n12silcv1 24.65 24.78 24.91 T:aes128n8silcv1 29.86 29.95 30.03 T:ketjesrv1 30.36 30.57 30.91 T:riverkeyakv1 44.67 44.98 45.44 T:proest128otrv1 69.36 69.44 69.56 T:ketjejrv2 71.57 71.61 71.66 T:present80n6t4silcv3 72.75 72.79 72.82 T:ketjejrv1 111.69 111.86 113.19 T:deoxysneq128128v13 120.50 121.27 121.69 T:twine80n6clocv1 126.39 127.50 127.72 T:led80n6t4silcv3 137.24 137.54 137.89 T:aezv1 150.28 150.50 151.39 T:deoxyseq128128v13 167.40 167.89 168.04 T:deoxysneq256128v13 222.11 222.60 223.28 T:deoxyseq256128v13 469.64? 516.41? 537.32? T:acorn128 2166.79 2167.35 2174.75 T:led80n6silcv1 2172.16 2179.78 2180.60 T:led80n6t4silcv2 3755.60 3756.75 3757.66 T:present80n6t4silcv2 3776.69 3781.62 3786.36 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.11? 0.13? 0.13? T:tiaoxinv2 0.12 0.13 0.13 T:tiaoxinv1 0.17 0.17 0.18 aegis128l 0.14? 0.17? 0.19? T:aeadaes128ocbtaglen128v1 0.11? 0.25? 0.38? T:aeadaes256ocbtaglen128v1 0.24 0.25 0.26 T:aezv3 0.25 0.26 0.27 T:aezv4 0.25 0.26 0.27 T:aezv5 0.31 0.32 0.32 T:aegis128 0.32 0.32 0.33 T:aegis256 0.32 0.32 0.33 aegis256 0.31? 0.39? 0.40? T:aeadaes192ocbtaglen128v1 0.43 0.43 0.44 T:aes128otrcv3 0.48 0.48 0.49 T:morus1280128v1 0.48 0.48 0.49 T:morus1280256v1 0.48 0.48 0.50 T:morus1280256v2 0.48 0.48 0.50 T:morus1280128v2 0.57 0.57 0.57 T:aes256otrcv3 0.58 0.61 0.62 T:aes128gcmv1 0.61 0.62 0.63 T:deoxysneq128128v1 0.61 0.63 0.65 T:oceankeyakv2 0.61 0.65 0.65 T:deoxysi128v141 0.63 0.65 0.67 aes256gcmv1 0.74 0.74 0.75 T:morus640128v2 0.73 0.74 0.75 T:morus640128v1 0.71 0.76 0.76 T:deoxysi256v141 0.76 0.79 0.82 T:deoxysneq256128v1 0.88 0.89 0.90 T:colm0v1 0.95 0.97 1.00 T:lunarkeyakv2 0.96 1.00 1.02 T:deoxyseq128128v1 0.97 1.02 1.02 T:deoxysii128v141 1.16 1.18 1.20 T:deoxyseq256128v1 1.15 1.19 1.21 T:seakeyakv2 1.15 1.19 1.20 T:deoxysii256v141 1.23 1.24 1.25 T:aes128otrpv3 1.49 1.49 1.50 T:aes128otrsv3 1.50 1.51 1.51 T:norx6444v3 1.65 1.67 1.80 T:aes256otrpv3 2.06 2.06 2.06 T:aes256otrsv3 2.11 2.11 2.13 T:norx6441v2 2.11 2.14 2.15 T:norx6441v3 2.54 2.55 2.57 T:norx6441v1 2.59 2.59 2.59 T:aes128n12t8clocv3 2.59 2.59 2.60 T:aes128n8t8clocv2 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.60 T:aes128n12t8silcv3 2.59 2.59 2.59 T:aes128n12t8silcv2 2.59 2.60 2.60 T:aes128n12t8clocv2 2.84 2.86 2.88 T:lakekeyakv2 3.10 3.12 3.15 T:lakekeyakv1 3.13 3.19 3.20 T:norx6461v2 3.13 3.20 3.22 T:norx6461v3 3.19 3.21 3.28 T:norx6444v2 3.32 3.36 3.37 T:norx6444v1 3.52 3.52 3.53 T:norx3241v2 3.52 3.52 3.52 T:norx3241v3 3.82 3.84 3.85 T:norx6461v1 4.22 4.23 4.23 T:norx3241v1 4.77 4.81 4.86 T:ketjemajorv2 5.27 5.27 5.27 T:norx3261v2 5.27 5.27 5.28 T:norx3261v3 5.29 5.31 5.31 T:aesjambuv1 5.46 5.49 5.50 T:riverkeyakv2 6.06 6.09 6.11 T:acorn128v2 6.13 6.14 6.14 ascon128av12 6.56 6.57 6.58 T:acorn128v3 6.81? 7.10? 7.81? T:ketjeminorv2 7.52 7.53 7.53 T:norx3261v1 8.81 8.81 8.82 T:ascon128v11 8.81 8.81 8.82 T:ascon128v1 9.00 9.00 9.01 ascon128v12 9.27 9.28 9.28 T:ascon128av11 9.26 9.28 9.29 T:ascon96v1 11.85 11.87 11.94 T:aes128otrpv2 11.86 11.87 11.90 T:aes128otrpv1 11.84 11.90 11.97 T:seakeyakv1 10.99? 11.96? 14.95? T:oceankeyakv1 11.95 11.96 11.98 T:aes128otrsv2 11.95 11.98 12.00 T:aes128otrsv1 15.49 15.50 15.52 T:aes256otrpv2 15.58 15.59 15.60 T:aes256otrsv2 15.55 15.59 15.62 T:aes256otrpv1 15.58 15.60 15.62 T:aes256otrsv1 16.70 16.71 16.74 T:aes128n12clocv1 16.69 16.73 16.77 T:aes128n8clocv1 18.58 18.60 18.62 T:proest256otrv1 18.54 18.61 18.67 T:aes128n12silcv1 18.63 18.65 18.73 T:aes128n8silcv1 19.65 19.68 20.03 T:twine80n6t4clocv2 21.34 21.38 21.76 T:twine80n6t4clocv3 26.27 26.30 26.34 T:ketjesrv1 26.88 26.97 27.02 T:ketjesrv2 29.24 29.52 30.34 T:riverkeyakv1 45.54 45.97 46.06 T:proest128otrv1 65.62 65.63 65.65 T:ketjejrv1 68.29 68.39 69.05 T:ketjejrv2 67.43 70.97 71.01 T:present80n6t4silcv3 74.44 74.76 74.87 T:deoxysneq128128v13 90.51 91.06 91.27 T:aezv1 91.68 91.82 92.07 T:twine80n6clocv1 109.52 109.88 110.01 T:deoxysneq256128v13 112.04 112.12 113.15 T:deoxyseq128128v13 127.43 131.35 131.74 T:led80n6t4silcv3 164.82 166.29 166.60 T:deoxyseq256128v13 493.96? 528.96? 606.84? T:acorn128 1629.20 1630.07 1638.05 T:led80n6t4silcv2 1627.27 1632.38 1640.10 T:led80n6silcv1 2819.33 2820.99 2822.66 T:present80n6t4silcv2 2830.28 2833.29 2835.57 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.17 0.17 0.18 aegis128l 0.15? 0.18? 0.19? T:aeadaes128ocbtaglen128v1 0.18? 0.20? 0.21? T:tiaoxinv2 0.18? 0.20? 0.21? T:tiaoxinv1 0.09? 0.24? 0.38? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.26 T:aezv4 0.25 0.26 0.26 T:aezv5 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.32 aegis256 0.32 0.32 0.33 T:aegis256 0.26? 0.39? 0.53? T:aeadaes192ocbtaglen128v1 0.45 0.45 0.45 T:aes128otrcv3 0.49 0.50 0.50 T:morus1280256v2 0.49 0.50 0.51 T:morus1280128v2 0.50 0.50 0.51 T:morus1280128v1 0.49 0.50 0.50 T:morus1280256v1 0.52 0.54 0.56 T:aes128gcmv1 0.58 0.58 0.59 T:aes256otrcv3 0.58 0.60 0.63 aes256gcmv1 0.64 0.65 0.67 T:oceankeyakv2 0.63 0.67 0.68 T:deoxysi128v141 0.68? 0.73? 0.77? T:deoxysneq128128v1 0.78 0.80 0.82 T:morus640128v2 0.75 0.80 0.81 T:deoxysi256v141 0.77 0.80 0.82 T:morus640128v1 0.76 0.81 0.82 T:deoxysneq256128v1 0.82 0.87 0.88 T:colm0v1 0.97 1.01 1.01 T:deoxysii128v141 1.00 1.01 1.04 T:lunarkeyakv2 1.07 1.08 1.11 T:deoxyseq128128v1 1.15 1.20 1.21 T:deoxysii256v141 1.19 1.21 1.22 T:seakeyakv2 1.22 1.24 1.27 T:aes128otrpv3 1.30 1.34 1.36 T:deoxyseq256128v1 1.50 1.51 1.51 T:aes128otrsv3 1.50 1.51 1.52 T:norx6444v3 1.64 1.65 1.67 T:aes256otrpv3 2.08 2.08 2.08 T:aes256otrsv3 2.10 2.11 2.13 T:norx6441v3 2.11 2.12 2.13 T:norx6441v2 2.53 2.55 2.56 T:norx6441v1 2.52 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.52 2.56 2.57 T:aes128n12t8clocv3 2.56 2.57 2.57 T:aes128n12t8silcv2 2.56 2.57 2.57 T:aes128n12t8silcv3 2.51 2.57 2.57 T:aes128n8t8silcv2 2.88 2.89 2.92 T:lakekeyakv2 3.14 3.17 3.20 T:lakekeyakv1 3.15 3.17 3.19 T:norx6461v2 3.16 3.19 3.21 T:norx6444v2 3.18 3.20 3.21 T:norx6461v3 3.29 3.31 3.32 T:norx6444v1 3.54 3.55 3.56 T:norx3241v3 3.55 3.56 3.56 T:norx3241v2 3.79 3.83 3.83 T:norx6461v1 4.29 4.29 4.29 T:norx3241v1 4.64 4.75 4.78 T:ketjemajorv2 5.29 5.30 5.31 T:norx3261v3 5.30 5.30 5.31 T:norx3261v2 5.51 5.54 5.60 T:aesjambuv1 5.56 5.57 5.60 T:riverkeyakv2 6.00 6.00 6.02 ascon128av12 6.62 6.63 6.64 T:acorn128v3 6.63 6.64 6.65 T:acorn128v2 7.08? 7.20? 8.17? T:ketjeminorv2 7.45 7.45 7.47 T:norx3261v1 8.81 8.81 8.82 T:ascon128v1 8.81 8.81 8.82 T:ascon128v11 9.06 9.07 9.07 ascon128v12 9.55 9.56 9.57 T:ascon128av11 9.56 9.57 9.58 T:ascon96v1 10.86? 11.88? 15.03? T:oceankeyakv1 12.03 12.04 12.11 T:aes128otrpv1 11.92 12.05 12.13 T:seakeyakv1 12.05 12.07 12.11 T:aes128otrpv2 12.11 12.12 12.16 T:aes128otrsv2 12.12 12.16 12.20 T:aes128otrsv1 15.64 15.67 15.72 T:aes256otrpv2 15.72 15.75 15.78 T:aes256otrsv2 15.74 15.77 15.80 T:aes256otrsv1 15.73 15.78 15.81 T:aes256otrpv1 17.26 17.29 17.32 T:aes128n8clocv1 17.28 17.29 17.32 T:aes128n12clocv1 18.55 18.57 18.61 T:proest256otrv1 18.41 18.58 20.38 T:aes128n12silcv1 18.52 18.59 18.66 T:aes128n8silcv1 20.15 20.23 20.26 T:twine80n6t4clocv2 21.28 21.38 21.58 T:twine80n6t4clocv3 22.37 22.42 22.48 T:ketjesrv2 26.66 26.71 26.79 T:ketjesrv1 29.34 29.50 29.59 T:riverkeyakv1 45.59 45.78 46.20 T:proest128otrv1 66.36 66.39 66.40 T:ketjejrv1 67.84 67.96 68.19 T:ketjejrv2 71.22 71.27 71.28 T:present80n6t4silcv3 90.81 90.92 91.31 T:aezv1 91.17 91.43 92.05 T:twine80n6clocv1 92.77 92.96 94.05 T:deoxysneq128128v13 112.21 112.38 113.20 T:deoxyseq128128v13 125.19 132.95 133.81 T:led80n6t4silcv3 138.29 139.05 139.27 T:deoxysneq256128v13 165.99 166.27 166.98 T:deoxyseq256128v13 491.82 507.65 527.28 T:acorn128 1627.58 1629.54 1634.35 T:led80n6silcv1 1632.07 1634.53 1634.79 T:led80n6t4silcv2 2818.61 2819.66 2821.35 T:present80n6t4silcv2 2830.12 2832.65 2836.70 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.13 0.13 0.13 T:aezv3 0.13? 0.14? 0.16? T:aezv4 0.13 0.14 0.14 T:aezv5 0.15? 0.18? 0.18? T:aeadaes128ocbtaglen128v1 0.20 0.20 0.21 aegis128l 0.20 0.20 0.20 T:tiaoxinv2 0.19 0.20 0.21 T:tiaoxinv1 0.23 0.24 0.24 T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.33 T:aegis256 0.34 0.35 0.35 aegis256 0.39 0.39 0.39 T:aeadaes192ocbtaglen128v1 0.45 0.45 0.46 T:aes128otrcv3 0.50 0.50 0.50 T:morus1280256v2 0.49 0.50 0.50 T:morus1280256v1 0.50 0.50 0.50 T:morus1280128v1 0.50 0.50 0.51 T:morus1280128v2 0.54 0.54 0.55 T:aes128gcmv1 0.58 0.59 0.59 T:aes256otrcv3 0.59 0.60 0.60 aes256gcmv1 0.65 0.66 0.68 T:oceankeyakv2 0.67 0.67 0.68 T:deoxysi128v141 0.73 0.74 0.80 T:deoxysneq128128v1 0.79 0.80 0.81 T:deoxysi256v141 0.80 0.80 0.81 T:deoxysneq256128v1 0.79 0.81 0.82 T:morus640128v2 0.79 0.81 0.83 T:morus640128v1 0.82 0.87 0.91 T:colm0v1 1.01 1.01 1.01 T:deoxysii128v141 1.02 1.04 1.05 T:lunarkeyakv2 1.08 1.08 1.09 T:deoxyseq128128v1 1.19 1.20 1.20 T:deoxysii256v141 1.15 1.20 1.21 T:seakeyakv2 1.21 1.24 1.27 T:aes128otrpv3 1.32 1.34 1.34 T:deoxyseq256128v1 1.50 1.51 1.51 T:aes128otrsv3 1.50 1.51 1.52 T:norx6444v3 1.63 1.65 1.70 T:aes256otrpv3 2.08 2.08 2.08 T:aes256otrsv3 2.10 2.11 2.12 T:norx6441v3 2.09 2.11 2.12 T:norx6441v2 2.54 2.56 2.57 T:norx6441v1 2.50 2.56 2.56 T:aes128n12t8silcv2 2.50 2.56 2.62 T:aes128n8t8silcv2 2.52 2.56 2.56 T:aes128n12t8clocv3 2.52 2.56 2.60 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.50 2.56 2.56 T:aes128n12t8silcv3 2.88 2.91 2.91 T:lakekeyakv2 3.13 3.14 3.14 T:norx6461v3 3.14 3.15 3.19 T:norx6461v2 3.14 3.16 3.19 T:lakekeyakv1 3.17 3.21 3.24 T:norx6444v2 3.31 3.32 3.33 T:norx6444v1 3.55 3.56 3.56 T:norx3241v2 3.54 3.56 3.56 T:norx3241v3 3.82 3.83 3.83 T:norx6461v1 4.29 4.29 4.29 T:norx3241v1 4.71 4.76 4.83 T:ketjemajorv2 5.30 5.30 5.31 T:norx3261v2 5.30 5.30 5.31 T:norx3261v3 5.51 5.54 5.60 T:aesjambuv1 5.59 5.60 5.61 T:riverkeyakv2 6.00 6.00 6.04 ascon128av12 6.63 6.63 6.63 T:acorn128v3 6.63 6.64 6.65 T:acorn128v2 7.09? 7.22? 8.23? T:ketjeminorv2 7.45 7.45 7.47 T:norx3261v1 8.81 8.81 8.83 T:ascon128v1 8.81 8.81 8.83 T:ascon128v11 9.05 9.06 9.06 T:ascon128av11 9.06 9.07 9.07 ascon128v12 9.06 9.07 9.08 T:ascon96v1 11.88 12.02 12.12 T:seakeyakv1 11.02? 12.06? 15.06? T:oceankeyakv1 12.05 12.07 12.11 T:aes128otrpv2 12.06 12.10 12.13 T:aes128otrpv1 12.12 12.15 12.17 T:aes128otrsv2 12.14 12.16 12.18 T:aes128otrsv1 15.65 15.68 15.70 T:aes256otrpv2 15.75 15.77 15.80 T:aes256otrsv1 15.74 15.78 15.81 T:aes256otrpv1 15.78 15.80 15.81 T:aes256otrsv2 17.27 17.29 17.32 T:aes128n8clocv1 17.27 17.29 17.32 T:aes128n12clocv1 18.55 18.57 18.61 T:proest256otrv1 18.41 18.58 20.43 T:aes128n12silcv1 18.55 18.59 18.66 T:aes128n8silcv1 20.14 20.20 20.25 T:twine80n6t4clocv2 21.28 21.38 21.60 T:twine80n6t4clocv3 22.37 22.45 22.50 T:ketjesrv2 26.67 26.72 26.79 T:ketjesrv1 29.48 29.58 30.31 T:riverkeyakv1 45.47 45.59 45.72 T:proest128otrv1 66.38 66.39 66.42 T:ketjejrv1 68.02 68.13 69.69 T:ketjejrv2 71.21 71.25 71.27 T:present80n6t4silcv3 90.60 90.82 91.40 T:aezv1 91.05 91.34 92.33 T:twine80n6clocv1 92.85 93.01 94.24 T:deoxysneq128128v13 112.01 112.12 113.35 T:deoxyseq128128v13 125.10 126.92 133.78 T:led80n6t4silcv3 138.63 138.82 138.92 T:deoxysneq256128v13 165.82 166.00 166.20 T:deoxyseq256128v13 479.26? 527.63? 539.14? T:acorn128 1630.96 1631.20 1633.08 T:led80n6t4silcv2 1628.64 1638.81 1645.67 T:led80n6silcv1 2818.48 2819.36 2820.89 T:present80n6t4silcv2 2830.61 2832.63 2835.35 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.10? 0.11? 0.12? T:tiaoxinv1 0.10? 0.11? 0.12? T:tiaoxinv2 0.13? 0.13? 0.16? T:aezv4 0.13? 0.14? 0.16? T:aezv3 0.12? 0.14? 0.15? T:aezv5 0.15? 0.16? 0.17? aegis128l 0.13? 0.17? 0.19? T:aeadaes128ocbtaglen128v1 -0.02? 0.23? 0.51? T:aeadaes256ocbtaglen128v1 0.30 0.30 0.31 T:aegis128 0.31 0.31 0.32 T:aegis256 0.31 0.31 0.32 aegis256 0.36? 0.38? 0.67? T:aeadaes192ocbtaglen128v1 0.38 0.40 0.42 T:aes128gcmv1 0.39 0.40 0.43 aes256gcmv1 0.44 0.45 0.45 T:aes128otrcv3 0.47 0.49 0.50 T:morus1280128v2 0.49 0.49 0.50 T:morus1280256v1 0.48 0.50 0.51 T:morus1280128v1 0.49 0.50 0.51 T:morus1280256v2 0.46? 0.51? 0.54? T:oceankeyakv2 0.52 0.53 0.55 T:colm0v1 0.58 0.58 0.59 T:aes256otrcv3 0.57 0.60 0.62 T:lunarkeyakv2 0.60 0.62 0.63 T:deoxysneq128128v1 0.72 0.73 0.75 T:deoxysii128v141 0.72 0.74 0.75 T:deoxysi128v141 0.74 0.75 0.77 T:morus640128v2 0.74 0.75 0.78 T:morus640128v1 0.79 0.80 0.81 T:deoxyseq128128v1 0.83? 0.88? 0.94? T:deoxysneq256128v1 0.87 0.89 0.90 T:deoxysii256v141 0.85 0.90 0.91 T:deoxysi256v141 1.01 1.01 1.03 T:deoxyseq256128v1 1.11 1.12 1.13 T:seakeyakv2 1.19 1.19 1.20 T:aes128otrpv3 1.61 1.61 1.63 T:aes256otrpv3 2.03 2.06 2.10 T:norx6441v2 2.08 2.10 2.12 T:norx6441v3 2.15 2.16 2.16 T:norx6444v3 2.50 2.53 2.54 T:norx6441v1 2.56 2.56 2.58 T:aes128n8t8silcv2 2.55 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128otrsv3 2.56 2.56 2.58 T:aes128n12t8silcv3 2.53 2.56 2.67 T:lakekeyakv2 2.55 2.56 2.64 T:aes128n8t8clocv2 2.56 2.57 2.57 T:aes128n12t8clocv3 2.56 2.57 2.58 T:aes128n12t8silcv2 2.89 2.99 3.05 T:lakekeyakv1 3.01 3.15 3.17 T:norx6461v3 3.03 3.16 3.17 T:norx6461v2 3.09 3.17 3.18 T:norx6444v2 3.26 3.27 3.28 T:norx6444v1 3.52 3.52 3.52 T:norx3241v3 3.52 3.52 3.53 T:norx3241v2 3.56 3.56 3.57 T:aes256otrsv3 3.75 3.78 3.81 T:norx6461v1 3.93 4.02 4.13 T:ketjemajorv2 4.22 4.23 4.23 T:norx3241v1 5.18 5.19 5.23 T:riverkeyakv2 5.25 5.26 5.28 T:aesjambuv1 5.27 5.27 5.27 T:norx3261v3 5.27 5.27 5.28 T:norx3261v2 6.12 6.13 6.13 ascon128av12 6.62 6.63 6.64 T:acorn128v3 6.32? 6.97? 7.08? T:ketjeminorv2 6.98 7.04 7.09 T:acorn128v2 7.52 7.53 7.53 T:norx3261v1 8.75 8.75 8.75 T:ascon128v11 8.75 8.75 8.75 T:ascon128v1 8.87 8.88 8.88 ascon128v12 9.22 9.22 9.24 T:ascon128av11 9.21 9.25 9.26 T:ascon96v1 11.36 11.38 11.41 T:aes128otrpv1 11.36 11.41 11.45 T:aes128otrpv2 11.52 11.54 11.56 T:aes128otrsv1 11.54 11.55 11.59 T:aes128otrsv2 11.57 11.60 11.64 T:aes128n12clocv1 11.56 11.60 11.64 T:aes128n8clocv1 11.76 11.86 11.94 T:seakeyakv1 10.53? 11.97? 15.23? T:oceankeyakv1 12.40 12.43 12.46 T:aes128n8silcv1 12.31 12.45 12.57 T:aes128n12silcv1 14.97 14.99 15.02 T:aes256otrpv2 15.15 15.18 15.20 T:aes256otrsv1 15.15 15.19 15.20 T:aes256otrpv1 15.16 15.19 15.21 T:aes256otrsv2 18.72 18.73 18.78 T:proest256otrv1 19.42 19.78 20.17 T:twine80n6t4clocv2 21.24 21.32 21.38 T:twine80n6t4clocv3 22.94 23.04 23.15 T:ketjesrv2 23.45 23.53 23.65 T:ketjesrv1 28.18 29.31 29.45 T:riverkeyakv1 44.34 44.46 44.60 T:aezv1 46.10 46.44 46.68 T:proest128otrv1 59.20 59.85 60.01 T:ketjejrv1 61.42 61.74 61.79 T:twine80n6clocv1 66.42 66.50 66.60 T:ketjejrv2 67.31 70.87 70.89 T:present80n6t4silcv3 74.10 74.21 75.08 T:deoxyseq128128v13 74.32 74.49 74.56 T:deoxysneq128128v13 109.32 109.46 109.67 T:deoxysneq256128v13 109.20 109.47 112.03 T:deoxyseq256128v13 126.24 126.77 126.83 T:led80n6t4silcv3 515.03 552.19 557.64 T:acorn128 1088.68 1089.51 1090.95 T:led80n6silcv1 1089.53 1091.05 1099.23 T:led80n6t4silcv2 1876.66 1877.66 1883.92 T:present80n6t4silcv2 1883.84 1886.23 1889.55 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv2 0.09? 0.11? 0.11? T:tiaoxinv1 0.13 0.14 0.14 T:aezv4 0.13? 0.14? 0.15? T:aezv5 0.13? 0.14? 0.15? T:aezv3 0.16 0.16 0.16 aegis128l 0.17? 0.18? 0.19? T:aeadaes128ocbtaglen128v1 -0.04? 0.25? 0.51? T:aeadaes256ocbtaglen128v1 0.29 0.30 0.31 T:aegis128 0.31 0.31 0.31 T:aegis256 0.26? 0.32? 0.32? aegis256 0.12? 0.37? 0.37? T:aeadaes192ocbtaglen128v1 0.39 0.40 0.43 aes256gcmv1 0.39 0.40 0.43 T:aes128gcmv1 0.44 0.45 0.46 T:aes128otrcv3 0.48 0.49 0.50 T:morus1280256v1 0.48 0.49 0.50 T:morus1280128v1 0.48 0.49 0.50 T:morus1280256v2 0.48 0.50 0.51 T:morus1280128v2 0.47? 0.51? 0.55? T:oceankeyakv2 0.51 0.54 0.55 T:colm0v1 0.58 0.59 0.59 T:aes256otrcv3 0.60 0.63 0.66 T:lunarkeyakv2 0.62? 0.70? 0.78? T:deoxysneq128128v1 0.74 0.74 0.75 T:deoxysii128v141 0.74 0.74 0.76 T:deoxysi128v141 0.77 0.77 0.79 T:deoxyseq128128v1 0.77 0.79 0.85 T:morus640128v1 0.78? 0.85? 0.88? T:morus640128v2 0.81? 0.88? 0.98? T:deoxysneq256128v1 0.88 0.89 0.90 T:deoxysii256v141 0.88 0.89 0.91 T:deoxysi256v141 1.04 1.07 1.08 T:deoxyseq256128v1 1.10 1.12 1.13 T:seakeyakv2 1.19 1.21 1.25 T:aes128otrpv3 1.60 1.62 1.64 T:aes256otrpv3 2.04 2.04 2.11 T:norx6441v3 2.04 2.09 2.12 T:norx6441v2 2.15 2.16 2.16 T:norx6444v3 2.45 2.46 2.52 T:norx6441v1 2.54 2.55 2.56 T:aes128n12t8clocv2 2.48 2.56 2.64 T:aes128n12t8silcv3 2.48 2.56 2.56 T:aes128n8t8silcv2 2.56 2.56 2.58 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128otrsv3 2.48 2.56 2.57 T:aes128n12t8silcv2 2.55 2.57 2.58 T:lakekeyakv2 2.55 2.58 2.58 T:aes128n12t8clocv3 2.94 3.00 3.04 T:lakekeyakv1 3.02 3.03 3.17 T:norx6461v3 3.09 3.12 3.17 T:norx6444v2 3.04 3.15 3.18 T:norx6461v2 3.25 3.26 3.28 T:norx6444v1 3.52 3.52 3.52 T:norx3241v3 3.52 3.52 3.52 T:norx3241v2 3.56 3.56 3.56 T:aes256otrsv3 3.76 3.78 3.80 T:norx6461v1 4.05 4.12 4.18 T:ketjemajorv2 4.22 4.22 4.23 T:norx3241v1 5.17 5.19 5.22 T:riverkeyakv2 5.27 5.27 5.28 T:norx3261v3 5.27 5.27 5.27 T:norx3261v2 5.24 5.28 5.28 T:aesjambuv1 5.93 5.94 5.94 ascon128av12 6.31? 6.47? 7.24? T:ketjeminorv2 6.61 6.62 6.64 T:acorn128v3 7.52 7.52 7.53 T:norx3261v1 7.93 7.94 8.01 T:acorn128v2 8.62 8.63 8.65 T:ascon128v1 8.62 8.63 8.65 T:ascon128v11 9.22 9.22 9.24 T:ascon128av11 9.24 9.26 9.26 T:ascon96v1 9.37 9.38 9.38 ascon128v12 11.36 11.39 11.42 T:aes128otrpv2 11.38 11.41 11.46 T:aes128otrpv1 11.53 11.56 11.58 T:aes128otrsv1 11.54 11.57 11.61 T:aes128otrsv2 11.55 11.60 11.62 T:aes128n12clocv1 11.59 11.62 11.67 T:aes128n8clocv1 11.75 11.82 11.93 T:seakeyakv1 10.41? 11.91? 15.36? T:oceankeyakv1 12.38 12.43 12.47 T:aes128n8silcv1 12.26 12.45 12.64 T:aes128n12silcv1 14.96 15.00 15.04 T:aes256otrpv2 15.16 15.22 15.28 T:aes256otrsv1 15.17 15.22 15.24 T:aes256otrpv1 15.17 15.24 15.26 T:aes256otrsv2 18.68 18.74 18.84 T:proest256otrv1 19.42 19.66 19.86 T:twine80n6t4clocv2 21.15 21.35 21.54 T:twine80n6t4clocv3 22.88 23.02 23.10 T:ketjesrv2 23.47 23.59 23.69 T:ketjesrv1 28.34 28.49 28.66 T:riverkeyakv1 44.40 44.51 44.73 T:aezv1 46.25 46.40 46.56 T:proest128otrv1 59.94 60.02 60.07 T:ketjejrv1 61.26 61.56 64.96 T:twine80n6clocv1 66.32 66.41 68.14 T:ketjejrv2 67.31 67.40 71.12 T:present80n6t4silcv3 73.68 73.83 74.91 T:deoxysneq128128v13 74.23 74.28 75.16 T:deoxyseq128128v13 109.60 109.98 111.13 T:deoxyseq256128v13 109.84 110.09 110.27 T:deoxysneq256128v13 126.59 126.71 126.83 T:led80n6t4silcv3 484.13? 560.85? 581.23? T:acorn128 1084.97 1085.30 1091.62 T:led80n6silcv1 1089.55 1089.70 1094.28 T:led80n6t4silcv2 1878.66 1881.35 1882.92 T:present80n6t4silcv2 1884.34 1886.40 1890.80 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv2 0.09? 0.11? 0.12? T:tiaoxinv1 0.13 0.14 0.14 T:aezv5 0.13 0.14 0.14 T:aezv3 0.13 0.14 0.14 T:aezv4 0.10? 0.16? 0.22? aegis128l 0.17? 0.18? 0.19? T:aeadaes128ocbtaglen128v1 0.24 0.24 0.25 T:aeadaes256ocbtaglen128v1 0.30 0.31 0.31 T:aegis128 0.31 0.31 0.32 T:aegis256 0.25? 0.32? 0.38? aegis256 0.36? 0.37? 0.63? T:aeadaes192ocbtaglen128v1 0.40 0.40 0.40 aes256gcmv1 0.40 0.40 0.40 T:aes128gcmv1 0.45 0.45 0.46 T:aes128otrcv3 0.49 0.49 0.50 T:morus1280256v1 0.48 0.50 0.51 T:morus1280128v2 0.48 0.50 0.51 T:morus1280256v2 0.48 0.50 0.51 T:morus1280128v1 0.48 0.51 0.52 T:oceankeyakv2 0.49? 0.52? 0.55? T:colm0v1 0.58 0.59 0.59 T:aes256otrcv3 0.60 0.63 0.66 T:lunarkeyakv2 0.69 0.70 0.74 T:deoxysneq128128v1 0.73 0.74 0.75 T:deoxysii128v141 0.73 0.74 0.76 T:deoxysi128v141 0.77 0.77 0.78 T:deoxyseq128128v1 0.81 0.85 0.86 T:morus640128v2 0.83 0.86 0.88 T:morus640128v1 0.88 0.88 0.89 T:deoxysneq256128v1 0.89 0.89 0.90 T:deoxysii256v141 0.89 0.90 0.91 T:deoxysi256v141 1.07 1.07 1.09 T:deoxyseq256128v1 1.11 1.12 1.15 T:seakeyakv2 1.19 1.20 1.21 T:aes128otrpv3 1.60 1.61 1.62 T:aes256otrpv3 2.04 2.05 2.10 T:norx6441v2 2.04 2.09 2.12 T:norx6441v3 2.14 2.15 2.16 T:norx6444v3 2.45 2.46 2.52 T:norx6441v1 2.48 2.48 2.75 T:aes128n12t8silcv3 2.46 2.52 2.66 T:aes128n12t8clocv2 2.47 2.56 2.57 T:aes128n8t8clocv2 2.48 2.56 2.65 T:aes128n12t8silcv2 2.56 2.56 2.58 T:lakekeyakv2 2.47 2.56 2.65 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128otrsv3 2.47 2.56 2.56 T:aes128n12t8clocv3 2.97 3.00 3.07 T:lakekeyakv1 3.05 3.14 3.16 T:norx6444v2 3.04 3.15 3.17 T:norx6461v2 3.01 3.15 3.17 T:norx6461v3 3.23 3.27 3.29 T:norx6444v1 3.52 3.52 3.52 T:norx3241v3 3.52 3.52 3.53 T:norx3241v2 3.56 3.56 3.63 T:aes256otrsv3 3.61 3.76 3.80 T:norx6461v1 3.98 4.09 4.17 T:ketjemajorv2 4.22 4.23 4.23 T:norx3241v1 5.14 5.19 5.19 T:riverkeyakv2 5.27 5.27 5.27 T:norx3261v2 5.27 5.27 5.28 T:norx3261v3 5.25 5.28 5.28 T:aesjambuv1 5.94 5.94 5.94 ascon128av12 6.27? 6.36? 7.21? T:ketjeminorv2 6.61 6.62 6.63 T:acorn128v3 7.52 7.53 7.53 T:norx3261v1 7.91 7.93 7.96 T:acorn128v2 8.61 8.63 8.64 T:ascon128v1 8.62 8.63 8.64 T:ascon128v11 9.22 9.24 9.24 T:ascon128av11 9.24 9.26 9.27 T:ascon96v1 9.38 9.38 9.38 ascon128v12 11.36 11.40 11.43 T:aes128otrpv2 11.34 11.41 11.48 T:aes128otrpv1 11.52 11.56 11.58 T:aes128otrsv1 11.53 11.57 11.60 T:aes128otrsv2 11.57 11.59 11.62 T:aes128n12clocv1 11.57 11.60 11.62 T:aes128n8clocv1 11.78 11.86 11.93 T:seakeyakv1 10.51? 11.94? 15.22? T:oceankeyakv1 12.25 12.43 12.57 T:aes128n12silcv1 12.39 12.43 12.46 T:aes128n8silcv1 14.96 15.00 15.04 T:aes256otrpv2 15.15 15.20 15.23 T:aes256otrpv1 15.17 15.20 15.24 T:aes256otrsv1 15.16 15.21 15.26 T:aes256otrsv2 18.73 18.77 18.81 T:proest256otrv1 19.40 19.77 19.99 T:twine80n6t4clocv2 21.21 21.34 21.39 T:twine80n6t4clocv3 22.91 23.06 23.28 T:ketjesrv2 23.47 23.57 23.66 T:ketjesrv1 28.33 28.51 28.82 T:riverkeyakv1 44.30 44.42 44.50 T:aezv1 46.09 46.26 46.42 T:proest128otrv1 59.98 60.00 60.03 T:ketjejrv1 61.23 61.49 61.71 T:twine80n6clocv1 66.51 66.74 68.14 T:ketjejrv2 67.28 67.37 71.13 T:present80n6t4silcv3 73.69 73.75 74.89 T:deoxysneq128128v13 74.09 74.24 75.02 T:deoxyseq128128v13 109.75 110.04 110.64 T:deoxysneq256128v13 109.84 110.19 111.24 T:deoxyseq256128v13 125.38? 126.80? 141.67? T:led80n6t4silcv3 494.48? 568.19? 573.12? T:acorn128 1089.80 1090.13 1090.57 T:led80n6t4silcv2 1091.77 1094.84 1098.15 T:led80n6silcv1 1877.26 1880.79 1885.25 T:present80n6t4silcv2 1883.90 1886.33 1892.19 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.17 0.17 0.18 T:tiaoxinv2 0.17? 0.18? 0.19? T:tiaoxinv1 0.20 0.20 0.21 aegis128l 0.28 0.29 0.30 T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.31 0.31 0.32 T:aezv4 0.30 0.31 0.32 T:aezv5 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.36 T:aegis256 0.36 0.36 0.37 aegis256 0.37? 0.38? 0.54? T:aeadaes256ocbtaglen128v1 0.49 0.50 0.51 T:aeadaes192ocbtaglen128v1 0.55 0.56 0.56 T:aes128otrcv3 0.59 0.59 0.60 T:morus1280256v1 0.59 0.60 0.61 T:morus1280128v1 0.60 0.61 0.62 T:morus1280256v2 0.60 0.61 0.62 T:morus1280128v2 0.69 0.69 0.71 T:aes128gcmv1 0.74 0.74 0.75 T:deoxysneq128128v1 0.74 0.74 0.75 T:aes256otrcv3 0.75 0.75 0.77 aes256gcmv1 0.77 0.77 0.77 T:deoxysi128v141 0.82 0.82 0.83 T:morus640128v2 0.80 0.82 0.83 T:morus640128v1 0.91 0.91 0.95 T:deoxysneq256128v1 0.91 0.91 0.93 T:deoxysi256v141 0.95 0.96 0.97 T:colm0v1 1.13? 1.19? 1.55? T:deoxyseq128128v1 1.18 1.19 1.20 T:deoxysii128v141 1.35 1.36 1.38 T:deoxyseq256128v1 1.39 1.39 1.40 T:aes128otrpv3 1.40 1.41 1.41 T:deoxysii256v141 1.41 1.43 1.45 T:oceankeyakv2 1.54 1.54 1.55 T:aes128otrsv3 1.76 1.76 1.78 T:seakeyakv2 1.86 1.86 1.87 T:aes256otrpv3 2.08 2.09 2.10 T:norx6444v3 2.13 2.14 2.14 T:aes256otrsv3 2.45 2.46 2.46 T:norx6441v3 2.45 2.46 2.46 T:norx6441v2 2.45 2.46 2.47 T:lunarkeyakv2 2.60 2.61 2.61 T:aes128n12t8clocv3 2.61 2.61 2.61 T:aes128n8t8silcv2 2.61 2.61 2.61 T:aes128n12t8silcv2 2.61 2.61 2.61 T:aes128n12t8silcv3 2.61 2.61 2.62 T:aes128n12t8clocv2 2.61 2.61 2.62 T:aes128n8t8clocv2 2.85 2.85 2.87 T:norx6441v1 3.10 3.11 3.13 T:lakekeyakv2 3.63 3.64 3.65 T:norx6461v3 3.65 3.67 3.71 T:norx6461v2 3.73 3.74 3.75 T:lakekeyakv1 3.79 3.79 3.80 T:norx3241v3 3.79 3.79 3.79 T:norx3241v2 4.23 4.28 4.30 T:norx6461v1 4.45 4.46 4.46 T:norx3241v1 4.53 4.55 4.61 T:norx6444v2 4.70 4.73 4.74 T:norx6444v1 5.34 5.34 5.34 T:aesjambuv1 5.68 5.68 5.68 T:norx3261v2 5.68 5.68 5.68 T:norx3261v3 5.78 5.80 5.81 T:riverkeyakv2 6.11 6.12 6.15 T:ketjemajorv2 6.27 6.27 6.28 ascon128av12 7.05 7.06 7.09 T:acorn128v2 7.32 7.33 7.35 T:acorn128v3 7.92 7.92 7.92 T:norx3261v1 7.92 8.53 8.78 T:ketjeminorv2 8.94 8.94 8.95 T:ascon128v1 8.94 8.95 8.95 T:ascon128v11 9.15 9.15 9.16 ascon128v12 9.47 9.47 9.48 T:ascon128av11 9.49 9.50 9.50 T:ascon96v1 12.18 12.20 12.23 T:aes128otrpv1 12.21 12.22 12.27 T:aes128otrpv2 12.24 12.25 12.27 T:aes128otrsv2 12.26 12.27 12.29 T:aes128otrsv1 14.56 14.62 14.71 T:seakeyakv1 15.90 15.91 15.92 T:aes256otrpv2 15.95 15.97 15.99 T:aes256otrsv1 15.96 15.97 16.00 T:aes256otrsv2 15.98 16.01 16.04 T:aes256otrpv1 16.94 16.94 16.97 T:aes128n12clocv1 16.92 16.94 16.97 T:aes128n8clocv1 18.35? 18.48? 21.25? T:oceankeyakv1 18.92 18.94 19.03 T:aes128n12silcv1 18.94 19.01 19.02 T:aes128n8silcv1 20.31 20.33 20.37 T:proest256otrv1 20.08 20.50 20.54 T:twine80n6t4clocv2 21.67 21.72 21.89 T:twine80n6t4clocv3 27.01 27.04 27.09 T:ketjesrv1 27.80 27.85 27.90 T:ketjesrv2 30.55 30.65 31.58 T:riverkeyakv1 47.72 47.99 48.70 T:proest128otrv1 66.49 66.50 66.52 T:ketjejrv1 69.30 69.39 69.77 T:ketjejrv2 68.41 71.72 72.33 T:present80n6t4silcv3 75.06 75.14 75.26 T:deoxysneq128128v13 89.69 89.82 89.88 T:aezv1 92.14 92.30 92.35 T:twine80n6clocv1 110.51 110.72 110.80 T:deoxysneq256128v13 113.20 113.40 114.34 T:deoxyseq128128v13 132.29 132.50 132.54 T:led80n6t4silcv3 166.97 167.21 168.76 T:deoxyseq256128v13 565.08 569.50 612.55 T:acorn128 1638.22 1641.58 1642.13 T:led80n6t4silcv2 1641.40 1645.70 1649.62 T:led80n6silcv1 2834.36 2836.63 2841.70 T:present80n6t4silcv2 2844.19 2847.61 2848.58 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.21 0.21 0.21 aegis128l 0.24 0.25 0.25 T:tiaoxinv2 0.24 0.25 0.25 T:tiaoxinv1 0.29 0.29 0.31 T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.31 T:aezv5 0.31 0.31 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.37 T:aegis256 0.36 0.37 0.37 aegis256 0.38? 0.38? 0.56? T:aeadaes256ocbtaglen128v1 0.47? 0.48? 0.65? T:aeadaes192ocbtaglen128v1 0.58 0.58 0.58 T:aes128otrcv3 0.61 0.62 0.62 T:morus1280256v1 0.61 0.62 0.62 T:morus1280128v1 0.62 0.63 0.64 T:morus1280256v2 0.63 0.63 0.64 T:morus1280128v2 0.64 0.64 0.67 T:aes128gcmv1 0.70 0.71 0.74 aes256gcmv1 0.76 0.77 0.77 T:aes256otrcv3 0.84 0.84 0.84 T:deoxysi128v141 0.85 0.88 0.89 T:morus640128v1 0.88 0.89 0.91 T:morus640128v2 0.90 0.90 0.95 T:deoxysneq128128v1 0.94 0.95 0.97 T:deoxysneq256128v1 0.97 0.97 0.98 T:colm0v1 0.99 0.99 1.02 T:deoxysi256v141 1.20 1.20 1.20 T:deoxysii128v141 1.28? 1.32? 1.71? T:deoxyseq128128v1 1.41 1.42 1.43 T:oceankeyakv2 1.43 1.43 1.46 T:deoxysii256v141 1.42 1.44 1.45 T:aes128otrpv3 1.54 1.55 1.58 T:deoxyseq256128v1 1.56 1.56 1.56 T:aes128otrsv3 1.85 1.86 1.87 T:seakeyakv2 1.89 1.89 1.89 T:aes256otrpv3 2.09 2.10 2.10 T:norx6444v3 2.16 2.16 2.16 T:aes256otrsv3 2.47 2.48 2.49 T:norx6441v3 2.47 2.48 2.49 T:norx6441v2 2.52 2.53 2.55 T:lunarkeyakv2 2.58 2.58 2.59 T:aes128n12t8clocv2 2.58 2.58 2.59 T:aes128n8t8clocv2 2.58 2.58 2.58 T:aes128n12t8clocv3 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.59 T:aes128n12t8silcv2 2.59 2.60 2.60 T:aes128n12t8silcv3 2.84 2.86 2.87 T:norx6441v1 3.14 3.14 3.15 T:lakekeyakv2 3.67 3.68 3.71 T:norx6461v2 3.71 3.71 3.72 T:norx6461v3 3.82 3.83 3.85 T:lakekeyakv1 3.84 3.84 3.85 T:norx3241v2 3.85 3.85 3.85 T:norx3241v3 4.28 4.29 4.31 T:norx6461v1 4.53 4.54 4.54 T:norx3241v1 4.52 4.54 4.56 T:norx6444v2 4.66 4.66 4.67 T:norx6444v1 5.54 5.59 5.59 T:aesjambuv1 5.72 5.72 5.73 T:norx3261v2 5.72 5.73 5.73 T:norx3261v3 5.84 5.85 5.87 T:riverkeyakv2 6.04 6.08 6.12 T:ketjemajorv2 6.15 6.15 6.22 ascon128av12 7.39 7.39 7.41 T:acorn128v3 7.63 7.64 7.65 T:acorn128v2 7.86 7.86 7.86 T:norx3261v1 8.28? 8.48? 9.28? T:ketjeminorv2 8.94 8.94 8.95 T:ascon128v1 8.94 8.94 8.95 T:ascon128v11 9.22 9.22 9.22 ascon128v12 9.78 9.79 9.80 T:ascon96v1 9.81 9.81 9.82 T:ascon128av11 12.38 12.41 12.44 T:aes128otrpv1 12.40 12.41 12.44 T:aes128otrpv2 12.45 12.46 12.49 T:aes128otrsv2 12.45 12.48 12.53 T:aes128otrsv1 14.50 14.53 14.57 T:seakeyakv1 16.09 16.10 16.12 T:aes256otrpv2 16.14 16.16 16.19 T:aes256otrsv2 16.16 16.17 16.20 T:aes256otrsv1 16.20 16.21 16.23 T:aes256otrpv1 17.48 17.49 17.51 T:aes128n8clocv1 17.49 17.50 17.50 T:aes128n12clocv1 18.27? 18.33? 21.25? T:oceankeyakv1 18.90 18.91 18.97 T:aes128n8silcv1 18.87 18.91 20.67 T:aes128n12silcv1 20.29 20.30 20.30 T:proest256otrv1 20.05 20.52 20.54 T:twine80n6t4clocv2 21.60 21.81 21.88 T:twine80n6t4clocv3 23.39 23.45 23.47 T:ketjesrv2 27.44 27.50 27.62 T:ketjesrv1 30.47 30.63 30.72 T:riverkeyakv1 47.78 47.84 47.90 T:proest128otrv1 67.25 67.27 67.28 T:ketjejrv1 68.99 69.13 70.65 T:ketjejrv2 68.19 71.96 71.99 T:present80n6t4silcv3 90.32 90.36 90.49 T:aezv1 91.92 91.96 92.01 T:twine80n6clocv1 93.35 93.49 94.65 T:deoxysneq128128v13 113.27 113.33 114.49 T:deoxyseq128128v13 126.67 133.95 134.35 T:led80n6t4silcv3 139.13 139.28 139.78 T:deoxysneq256128v13 167.84 168.14 169.09 T:deoxyseq256128v13 576.74 598.44 606.34 T:acorn128 1635.48 1635.76 1637.88 T:led80n6silcv1 1642.06 1642.49 1645.82 T:led80n6t4silcv2 2834.94 2838.20 2855.10 T:present80n6t4silcv2 2846.51 2847.42 2850.50 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.18 0.18 0.18 T:aezv3 0.18 0.18 0.18 T:aezv5 0.18 0.18 0.19 T:aezv4 0.23 0.23 0.24 aegis128l 0.24? 0.25? 0.28? T:tiaoxinv2 0.24? 0.25? 0.27? T:tiaoxinv1 0.28 0.29 0.29 T:aeadaes128ocbtaglen128v1 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.37 T:aegis256 0.38 0.38 0.38 T:aeadaes256ocbtaglen128v1 0.38 0.39 0.41 aegis256 0.47 0.48 0.48 T:aeadaes192ocbtaglen128v1 0.58 0.58 0.58 T:aes128otrcv3 0.61 0.62 0.62 T:morus1280256v1 0.61 0.62 0.62 T:morus1280128v1 0.62 0.62 0.63 T:morus1280256v2 0.62 0.63 0.63 T:morus1280128v2 0.64 0.64 0.64 T:aes128gcmv1 0.70 0.70 0.71 aes256gcmv1 0.76 0.76 0.77 T:aes256otrcv3 0.83 0.84 0.84 T:deoxysi128v141 0.87 0.88 0.90 T:morus640128v1 0.88 0.90 0.91 T:morus640128v2 0.90 0.90 0.98 T:deoxysneq128128v1 0.94 0.94 0.94 T:deoxysneq256128v1 0.96 0.97 0.98 T:colm0v1 0.99 0.99 1.00 T:deoxysi256v141 1.20 1.20 1.20 T:deoxysii128v141 1.28 1.28 1.28 T:deoxyseq128128v1 1.41 1.42 1.44 T:oceankeyakv2 1.43 1.43 1.43 T:deoxysii256v141 1.42 1.45 1.45 T:aes128otrpv3 1.54 1.54 1.55 T:deoxyseq256128v1 1.56 1.56 1.56 T:aes128otrsv3 1.88 1.89 1.89 T:seakeyakv2 1.88 1.89 1.90 T:aes256otrpv3 2.09 2.09 2.10 T:norx6444v3 2.16 2.16 2.16 T:aes256otrsv3 2.44 2.45 2.45 T:norx6441v3 2.45 2.46 2.47 T:norx6441v2 2.53 2.54 2.55 T:lunarkeyakv2 2.58 2.58 2.58 T:aes128n8t8silcv2 2.58 2.58 2.58 T:aes128n12t8silcv3 2.58 2.58 2.58 T:aes128n12t8silcv2 2.58 2.58 2.58 T:aes128n8t8clocv2 2.58 2.58 2.58 T:aes128n12t8clocv3 2.58 2.58 2.58 T:aes128n12t8clocv2 2.83 2.85 2.87 T:norx6441v1 3.15 3.17 3.21 T:lakekeyakv2 3.66 3.66 3.66 T:norx6461v3 3.68 3.68 3.71 T:norx6461v2 3.82 3.83 3.84 T:lakekeyakv1 3.83 3.83 3.85 T:norx3241v3 3.84 3.84 3.85 T:norx3241v2 4.29 4.30 4.30 T:norx6461v1 4.53 4.53 4.54 T:norx3241v1 4.55 4.58 4.61 T:norx6444v2 4.67 4.68 4.69 T:norx6444v1 5.55 5.59 5.63 T:aesjambuv1 5.72 5.72 5.73 T:norx3261v3 5.72 5.72 5.72 T:norx3261v2 5.85 5.87 5.91 T:riverkeyakv2 6.07 6.08 6.11 T:ketjemajorv2 6.15 6.15 6.15 ascon128av12 7.39 7.39 7.39 T:acorn128v3 7.64 7.64 7.66 T:acorn128v2 7.86 7.86 7.87 T:norx3261v1 8.26? 8.30? 9.32? T:ketjeminorv2 8.94 8.94 8.96 T:ascon128v11 8.94 8.94 8.96 T:ascon128v1 9.22 9.22 9.22 ascon128v12 9.24 9.25 9.26 T:ascon128av11 9.27 9.27 9.28 T:ascon96v1 12.39 12.41 12.44 T:aes128otrpv2 12.41 12.43 12.49 T:aes128otrpv1 12.45 12.47 12.49 T:aes128otrsv2 12.48 12.49 12.52 T:aes128otrsv1 14.52 14.56 14.62 T:seakeyakv1 16.10 16.11 16.13 T:aes256otrpv2 16.14 16.18 16.21 T:aes256otrsv1 16.15 16.19 16.23 T:aes256otrsv2 16.19 16.20 16.23 T:aes256otrpv1 17.48 17.49 17.51 T:aes128n8clocv1 17.51 17.52 17.53 T:aes128n12clocv1 18.29? 18.39? 21.27? T:oceankeyakv1 18.89 18.91 20.64 T:aes128n12silcv1 18.91 18.95 18.99 T:aes128n8silcv1 20.04 20.12 20.53 T:twine80n6t4clocv2 20.31 20.31 20.33 T:proest256otrv1 21.66 21.68 21.84 T:twine80n6t4clocv3 23.35 23.36 23.42 T:ketjesrv2 27.43 27.48 27.53 T:ketjesrv1 30.60 30.66 30.71 T:riverkeyakv1 47.66 47.75 47.86 T:proest128otrv1 67.26 67.28 67.29 T:ketjejrv1 69.07 69.11 69.20 T:ketjejrv2 68.23 71.99 72.00 T:present80n6t4silcv3 90.44 90.53 90.64 T:aezv1 91.60 92.08 92.14 T:twine80n6clocv1 93.41 93.46 94.56 T:deoxysneq128128v13 113.37 113.44 114.35 T:deoxyseq128128v13 127.97 128.01 133.98 T:led80n6t4silcv3 139.11 139.19 139.83 T:deoxysneq256128v13 167.49 168.33 168.48 T:deoxyseq256128v13 559.29 560.92 621.27 T:acorn128 1637.28 1639.91 1642.02 T:led80n6silcv1 1643.97 1653.50 1653.99 T:led80n6t4silcv2 2833.85 2838.14 2844.88 T:present80n6t4silcv2 2845.15 2847.42 2853.00 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.91? 0.91? 1.23? aegis128l 0.86? 0.97? 0.98? T:aegis128 1.16 1.18 1.24 T:aegis256 1.19 1.20 1.27 T:tiaoxinv2 1.20? 1.23? 1.47? T:tiaoxinv1 1.28 1.30 1.31 aegis256 1.31? 1.34? 1.51? T:aezv5 1.40 1.44 1.46 T:aezv3 1.55 1.56 1.59 T:aezv4 2.37 2.38 2.40 T:colm0v1 2.53 2.57 2.59 T:aes128otrsv3 2.69 2.74 2.76 T:morus640128v1 2.84 2.85 2.94 T:morus640128v2 2.82? 2.88? 3.50? T:aeadaes128ocbtaglen128v1 2.98 2.99 3.01 T:aes128n12t8silcv2 2.98 3.01 3.02 T:aes128n8t8silcv2 2.99 3.02 3.03 T:aes128n12t8silcv3 3.07 3.07 3.29 T:aes128n12t8clocv3 3.14 3.18 3.38 T:aes128n8t8clocv2 3.05 3.20 3.23 T:aes128otrcv3 3.17 3.22 3.27 T:morus1280256v1 3.19 3.22 3.26 T:morus1280128v1 3.21 3.24 3.34 T:deoxysneq128128v1 3.12 3.34 3.39 T:aes128n12t8clocv2 3.33 3.34 3.42 T:morus1280128v2 3.31 3.36 3.39 T:deoxysi128v141 3.42 3.48 3.52 T:morus1280256v2 3.51 3.58 3.67 T:deoxysneq256128v1 3.61 3.63 3.64 T:aes256otrsv3 3.61? 3.65? 7.63? T:aeadaes192ocbtaglen128v1 3.98 3.99 4.04 T:deoxysi256v141 3.55? 4.05? 7.44? T:aeadaes256ocbtaglen128v1 4.09 4.16 4.23 T:aes256otrcv3 4.64 4.73 4.75 T:aes128otrpv3 4.74 4.78 4.80 T:deoxyseq128128v1 4.79 4.88 4.98 T:aes128gcmv1 4.93 4.96 5.02 T:deoxysii128v141 5.10 5.18 5.25 aes256gcmv1 5.75 5.77 5.80 T:deoxysii256v141 5.91 5.96 5.99 T:aes256otrpv3 6.10 6.12 6.12 T:deoxyseq256128v1 6.24 6.33 6.35 T:aesjambuv1 7.90 7.98 8.06 T:norx6441v1 8.15 8.20 8.23 T:norx6441v3 8.25 8.28 8.34 T:norx6441v2 9.16 9.19 9.22 T:norx3241v1 9.38 9.39 9.41 T:norx3241v2 9.38 9.41 9.43 T:norx3241v3 9.49 9.49 9.84 ascon128av12 11.87 11.87 11.88 T:ascon128v1 11.87 11.87 11.88 T:ascon128v11 11.93 12.04 12.20 T:norx6461v1 12.11 12.20 12.27 T:norx6461v2 12.16 12.22 12.24 T:norx6461v3 12.30 12.36 12.67 T:lakekeyakv1 12.58 12.59 12.62 ascon128v12 13.39 13.42 13.69 T:lakekeyakv2 13.56 13.57 13.70 T:riverkeyakv2 13.88 13.95 13.98 T:norx6444v3 13.93 13.95 13.95 T:norx3261v2 13.98 13.98 14.00 T:norx3261v3 14.01 14.39 14.54 T:ascon128av11 14.66 14.85 14.98 T:ascon96v1 15.98 15.98 16.01 T:norx3261v1 16.62 16.73 17.06 T:seakeyakv2 17.09 17.30 17.66 T:oceankeyakv2 19.07 19.12 19.30 T:aes128otrsv2 19.14 19.18 19.33 T:aes128otrsv1 19.67 19.75 19.80 T:aes128otrpv1 19.70 19.76 19.98 T:aes128otrpv2 21.60 21.74 21.84 T:aes128n8clocv1 21.65 21.82 21.94 T:aes128n12clocv1 24.64 24.76 24.80 T:aes256otrsv2 24.69 24.76 24.83 T:aes256otrsv1 24.85 24.85 25.15 T:acorn128v3 25.27 25.33 25.49 T:aes256otrpv2 25.29 25.43 25.56 T:aes256otrpv1 25.85 26.14 26.43 T:aes128n8silcv1 26.28 26.52 27.70 T:aes128n12silcv1 28.05 28.13 28.88 T:twine80n6t4clocv2 28.41 28.91 29.98 T:twine80n6t4clocv3 29.64 29.71 29.78 T:acorn128v2 32.12 32.45 33.45 T:ketjeminorv2 32.66 32.73 33.17 T:norx6444v2 33.88 34.21 34.30 T:norx6444v1 35.36 35.63 35.95 T:ketjemajorv2 38.66 38.75 39.06 T:lunarkeyakv2 42.66 43.26 43.30 T:ketjesrv1 47.51 48.08 48.43 T:ketjesrv2 52.55 52.88 53.41 T:riverkeyakv1 60.46 60.71 61.08 T:proest256otrv1 84.99 85.16 85.79 T:deoxysneq128128v13 86.48 86.60 87.01 T:ketjejrv1 88.66 88.67 88.88 T:present80n6t4silcv3 91.58 92.21 93.65 T:ketjejrv2 92.91 93.53 94.21 T:proest128otrv1 101.72 101.99 103.02 T:twine80n6clocv1 108.48 109.01 109.73 T:seakeyakv1 110.70 111.07 111.59 T:aezv1 123.10 123.58 124.45 T:deoxysneq256128v13 140.53 141.09 142.31 T:deoxyseq128128v13 152.23 152.34 157.56 T:led80n6t4silcv3 199.71? 200.21? 229.19? T:oceankeyakv1 205.72 206.45 207.65 T:deoxyseq256128v13 1834.21 1835.20 1843.97 T:led80n6t4silcv2 1836.48 1838.26 1839.80 T:led80n6silcv1 1997.12? 2359.01? 2506.82? T:acorn128 3168.60 3171.54 3172.57 T:present80n6t4silcv2 3181.95 3183.16 3186.16 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.98? 0.98? 1.11? T:aegis128 1.02? 1.02? 1.31? aegis128l 1.20 1.22 1.23 T:aegis256 1.27 1.30 1.34 T:aezv5 1.28? 1.32? 1.55? T:tiaoxinv2 1.34 1.38 1.46 T:tiaoxinv1 1.40 1.41 1.43 aegis256 1.40 1.44 1.45 T:aezv3 1.55 1.56 1.57 T:aezv4 2.57 2.65 2.70 T:aes128otrsv3 2.86 2.88 2.88 T:morus640128v1 2.80? 3.05? 3.86? T:aeadaes128ocbtaglen128v1 3.05 3.05 3.08 T:aes128n12t8clocv3 2.92 3.05 3.10 T:colm0v1 3.03 3.05 3.09 T:morus640128v2 3.05 3.07 3.09 T:aes128n12t8clocv2 3.05 3.07 3.09 T:aes128n8t8clocv2 3.12 3.13 3.15 T:aes128n12t8silcv3 3.10 3.20 3.35 T:aes128n8t8silcv2 3.14 3.23 3.35 T:aes128n12t8silcv2 3.32 3.32 3.35 T:morus1280128v1 3.27 3.34 3.38 T:aes128otrcv3 3.30 3.34 3.37 T:morus1280256v1 3.52 3.55 3.60 T:morus1280128v2 3.55 3.55 3.61 T:morus1280256v2 3.78 3.81 3.90 T:aes256otrsv3 3.82? 3.86? 5.46? T:aeadaes192ocbtaglen128v1 3.77? 3.94? 7.96? T:aeadaes256ocbtaglen128v1 4.15 4.18 4.25 T:deoxysneq256128v1 4.30 4.38 4.42 T:aes256otrcv3 4.52 4.56 4.68 T:deoxysi128v141 4.61 4.69 4.73 T:deoxysneq128128v1 4.92? 5.07? 5.59? T:aes128otrpv3 5.02 5.10 5.20 T:aes128gcmv1 5.20 5.27 5.41 T:deoxysii128v141 5.34 5.42 5.52 T:deoxysi256v141 5.46 5.49 5.64 aes256gcmv1 6.24 6.26 6.68 T:aesjambuv1 6.13 6.28 6.38 T:deoxysii256v141 6.27? 6.31? 7.23? T:aes256otrpv3 6.62 6.68 6.77 T:deoxyseq128128v1 7.18 7.27 7.30 T:deoxyseq256128v1 8.10 8.16 8.20 T:norx6441v1 8.23 8.30 8.40 T:norx6441v2 8.32 8.38 8.41 T:norx6441v3 9.48 9.52 9.68 ascon128av12 9.52 9.53 9.54 T:norx3241v1 9.70 9.73 9.76 T:norx3241v2 9.73 9.74 9.79 T:norx3241v3 11.91 11.91 11.99 T:ascon128v1 11.91 11.91 12.09 T:ascon128v11 12.19 12.25 12.34 T:norx6461v2 12.05 12.27 12.33 T:norx6461v1 12.23 12.30 12.41 T:norx6461v3 12.70 12.71 12.77 ascon128v12 13.37 13.42 13.80 T:lakekeyakv2 13.38 13.48 13.50 T:lakekeyakv1 13.62 13.66 13.95 T:riverkeyakv2 13.91 14.00 14.06 T:norx6444v3 14.28 14.32 14.36 T:norx3261v3 14.32 14.36 14.37 T:norx3261v2 14.55 14.59 14.73 T:ascon96v1 15.23 15.26 15.52 T:ascon128av11 16.20 16.24 16.25 T:norx3261v1 17.36 17.42 17.80 T:oceankeyakv2 18.04 18.09 18.38 T:seakeyakv2 19.77 19.85 19.92 T:aes128otrsv2 19.76 20.16 20.30 T:aes128otrsv1 20.27 20.34 20.61 T:aes128otrpv1 20.31 20.59 20.74 T:aes128otrpv2 22.31 22.50 22.71 T:aes128n12clocv1 22.34 22.54 22.80 T:aes128n8clocv1 24.88 24.89 25.17 T:acorn128v3 25.29 25.47 25.67 T:aes256otrsv1 25.38 25.52 25.71 T:aes256otrsv2 25.80 25.90 26.09 T:aes256otrpv1 25.90 26.00 26.30 T:aes256otrpv2 26.06 26.39 26.55 T:aes128n8silcv1 26.34? 26.70? 29.80? T:aes128n12silcv1 27.71 27.93 28.68 T:twine80n6t4clocv2 28.36 28.57 28.93 T:twine80n6t4clocv3 30.21 30.30 30.45 T:acorn128v2 32.35 32.77 34.04 T:ketjeminorv2 32.74 32.95 33.01 T:norx6444v2 33.69 33.77 33.81 T:norx6444v1 35.50 35.50 35.93 T:ketjemajorv2 38.80 39.16 39.25 T:lunarkeyakv2 43.55 43.74 44.22 T:ketjesrv1 44.05 44.38 45.26 T:ketjesrv2 52.11 52.88 53.40 T:riverkeyakv1 60.35 61.16 61.78 T:proest256otrv1 87.37 87.40 87.45 T:ketjejrv1 88.40 88.62 89.27 T:present80n6t4silcv3 91.23 91.45 91.97 T:ketjejrv2 92.16 94.29 96.11 T:proest128otrv1 101.79 103.36 104.03 T:twine80n6clocv1 103.34 104.06 104.76 T:deoxysneq128128v13 108.06 108.76 109.27 T:seakeyakv1 120.30 120.84 120.98 T:aezv1 140.32 140.67 142.24 T:deoxyseq128128v13 151.85 152.14 153.11 T:deoxysneq256128v13 149.99 153.76 158.60 T:led80n6t4silcv3 198.62? 199.95? 228.44? T:oceankeyakv1 206.19 207.22 209.71 T:deoxyseq256128v13 1831.70 1832.45 1841.69 T:led80n6silcv1 1837.77 1844.37 1847.16 T:led80n6t4silcv2 1976.12? 2097.80? 2214.70? T:acorn128 3169.53 3170.77 3175.01 T:present80n6t4silcv2 3182.12 3185.73 3187.05 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.79? 0.94? 0.96? T:aegis128 0.94? 0.97? 1.21? T:aezv5 0.98? 1.02? 1.20? aegis128l 1.09? 1.10? 1.27? T:aezv3 1.22 1.23 1.23 T:aegis256 1.31 1.31 1.34 T:aezv4 1.33 1.35 1.38 T:tiaoxinv2 1.33? 1.39? 1.48? T:tiaoxinv1 1.40 1.41 1.44 aegis256 2.59 2.72 2.76 T:aes128otrsv3 2.77? 2.83? 3.27? T:aeadaes128ocbtaglen128v1 2.84 2.85 2.91 T:morus640128v1 2.90? 2.94? 4.73? T:aes128n12t8silcv2 2.88? 2.95? 4.75? T:aes128n8t8silcv2 3.03 3.05 3.09 T:morus640128v2 3.07 3.08 3.10 T:aes128n8t8clocv2 3.05? 3.15? 4.17? T:colm0v1 3.09 3.30 3.35 T:aes128n12t8clocv2 3.13 3.31 3.38 T:aes128n12t8clocv3 3.29 3.31 3.34 T:morus1280256v1 3.31 3.34 3.38 T:morus1280128v1 3.30 3.38 3.44 T:aes128otrcv3 3.55 3.56 3.62 T:morus1280128v2 3.54 3.58 3.62 T:morus1280256v2 3.66 3.77 3.83 T:aeadaes256ocbtaglen128v1 3.80 3.84 3.93 T:aes256otrsv3 3.67? 3.88? 7.20? T:aeadaes192ocbtaglen128v1 4.01 4.05 4.09 T:deoxysneq256128v1 4.32 4.38 4.38 T:aes256otrcv3 4.55 4.59 4.75 T:deoxysi128v141 4.56 4.62 4.67 T:deoxysneq128128v1 2.90? 4.71? 4.73? T:aes128n12t8silcv3 5.06 5.10 5.19 T:aes128gcmv1 5.01? 5.11? 5.74? T:aes128otrpv3 5.20 5.23 5.30 T:deoxysii128v141 5.35 5.40 5.53 T:deoxysi256v141 5.46 5.50 5.52 aes256gcmv1 6.19 6.23 6.30 T:deoxysii256v141 6.24 6.26 6.68 T:aesjambuv1 6.33? 6.38? 7.29? T:aes256otrpv3 6.62 6.74 6.92 T:deoxyseq128128v1 7.24 7.28 7.36 T:deoxyseq256128v1 8.10 8.13 8.22 T:norx6441v1 8.22 8.27 8.33 T:norx6441v2 8.30 8.33 8.41 T:norx6441v3 9.48 9.48 9.52 ascon128av12 9.52 9.53 9.54 T:norx3241v1 9.70 9.72 9.76 T:norx3241v2 9.71 9.75 9.77 T:norx3241v3 11.89 11.89 11.96 T:ascon128v1 11.89 11.89 12.03 T:ascon128v11 12.04 12.10 12.11 T:norx6461v3 12.20 12.30 12.34 T:norx6461v2 12.27 12.34 12.45 T:norx6461v1 12.70 12.72 12.74 ascon128v12 13.51 13.53 13.79 T:lakekeyakv1 13.63 13.66 13.82 T:ascon128av11 13.66 13.66 13.91 T:riverkeyakv2 13.48 13.80 14.30 T:lakekeyakv2 13.91 13.92 13.94 T:ascon96v1 13.94 13.98 14.08 T:norx6444v3 14.31 14.34 14.38 T:norx3261v3 14.33 14.37 14.37 T:norx3261v2 16.20 16.23 16.24 T:norx3261v1 16.89 17.39 17.68 T:oceankeyakv2 19.20 19.24 19.26 T:seakeyakv2 19.73 19.89 20.16 T:aes128otrsv1 19.78 19.95 20.29 T:aes128otrsv2 20.29 20.51 20.93 T:aes128otrpv1 20.46 20.59 20.91 T:aes128otrpv2 22.00 22.28 22.68 T:aes128n12clocv1 22.20 22.31 22.45 T:aes128n8clocv1 24.87 24.88 24.88 T:acorn128v3 25.28 25.48 25.90 T:aes256otrsv1 25.41 25.64 26.16 T:aes256otrsv2 25.92 26.09 26.36 T:aes256otrpv2 25.95 26.16 26.32 T:aes256otrpv1 26.07 26.47 26.58 T:aes128n8silcv1 26.36? 26.59? 29.31? T:aes128n12silcv1 27.77 27.98 29.74 T:twine80n6t4clocv2 28.57 28.64 28.84 T:twine80n6t4clocv3 30.21 30.28 30.38 T:acorn128v2 32.43 33.16 34.05 T:ketjeminorv2 32.92 33.22 33.91 T:norx6444v2 33.76 33.83 33.91 T:norx6444v1 35.45 35.55 35.92 T:ketjemajorv2 38.77 38.79 39.01 T:lunarkeyakv2 43.56 43.88 44.69 T:ketjesrv1 44.01 44.62 45.12 T:ketjesrv2 52.55 52.71 53.71 T:riverkeyakv1 58.97 59.38 59.49 T:proest256otrv1 87.18 87.45 87.61 T:ketjejrv1 88.57 88.57 89.16 T:present80n6t4silcv3 91.67 92.38 93.58 T:ketjejrv2 93.41 95.29 95.66 T:proest128otrv1 101.63 102.04 102.37 T:twine80n6clocv1 103.40 104.06 104.56 T:deoxysneq128128v13 108.72 109.08 109.86 T:seakeyakv1 120.28 120.90 121.31 T:aezv1 140.91 141.22 142.12 T:deoxyseq128128v13 152.16 152.38 153.42 T:deoxysneq256128v13 151.25 157.74 158.66 T:led80n6t4silcv3 198.24? 199.73? 230.22? T:oceankeyakv1 206.06 207.98 208.98 T:deoxyseq256128v13 1831.89 1832.27 1836.37 T:led80n6silcv1 1835.71 1841.15 1852.88 T:led80n6t4silcv2 1955.75 2042.20 2124.41 T:acorn128 3169.74 3172.82 3174.32 T:present80n6t4silcv2 3182.43 3186.12 3189.08 T:present80n6silcv1