VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates, indexed by machine

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each cipher and each implementation.

The shootout

• The primary third-round recommendation is selected when possible.
• If not enough data is available yet for the primary third-round recommendation, an older primary recommendation is used instead.

• 128gcm: aes128gcmv1
• acorn: acorn128v3
• aegis: aegis128l
• aez: aezv4
• ascon: ascon128v11
• cloc: aes128n12t8clocv3
• colm: colm0v1
• deoxys: deoxysi128v141
• jambu: aesjambuv1
• ketje: ketjesrv1
• keyak: lakekeyakv2
• morus: morus1280128v2
• norx: norx6441v2
• ocb: aeadaes128ocbtaglen128v1
• otr: aes128otrpv3
• silc: aes128n12t8silcv3
• tiaoxin: tiaoxinv2

As an example, the "1536+0 encrypt" graph shows the speed, in cycles/byte, of encrypting a 1536-byte message with no additional data. Each graph point indicates the median of many speed measurements. Machines in each graph are sorted primarily by architecture (amd64 for 64-bit Intel and AMD CPUs, armeabi for 32-bit ARM CPUs, etc.) and microarchitecture (Sandy Bridge, Westmere, etc.). These graphs exclude data from very old SUPERCOP versions and from computers with demonstrably unstable timings.

The labels are sorted on the top and bottom of the graph according to an extremely crude metric of overall software performance. Colors are chosen across the RGB-compatible (a,b) range of the CIELAB spectrum at a uniform 50% lightness, to try to give similar visibility to each candidate, although exact results will depend on your monitor, printer, room lighting, eyes, etc.

Each graph is a PNG and links to a higher-resolution PNG. The graphs are also available in maximum resolution as the following PDFs for downloading (the PDFs are smaller than the PNGs) and printing (letter paper, to the edges; scale as necessary for your printer; color printing recommended):

• long+0 encrypt decrypt forgery
• long+long encrypt decrypt forgery
• 0+long encrypt decrypt forgery
• 1536+0 encrypt decrypt forgery
• 1536+1536 encrypt decrypt forgery
• 0+1536 encrypt decrypt forgery
• 64+0 encrypt decrypt forgery
• 64+64 encrypt decrypt forgery
• 0+64 encrypt decrypt forgery

amd64; Zen2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20230530

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.19? 0.21? 0.23? T:tiaoxinv2 0.19? 0.21? 0.24? T:tiaoxinv1 0.22 0.23 0.24 T:aegis128l 0.34 0.35 0.36 T:aegis128 0.36 0.37 0.38 T:aegis256 0.44 0.47 0.48 T:aeadaes128ocbtaglen128v1 0.47 0.47 0.48 T:aezv4 0.47 0.48 0.48 T:aezv3 0.48 0.49 0.50 T:aezv5 0.30? 0.53? 0.56? T:aeadaes192ocbtaglen128v1 0.52 0.53 0.53 T:aes128otrsv3 0.51 0.53 0.54 T:aes128otrcv3 0.52 0.54 0.56 T:aes128otrpv3 0.64 0.65 0.67 T:aeadaes256ocbtaglen128v1 0.63 0.65 0.69 T:deoxysi128v141 0.67 0.67 0.68 T:aes256otrsv3 0.66 0.67 0.68 T:aes256otrcv3 0.67 0.68 0.69 T:aes256otrpv3 0.60? 0.69? 0.84? T:deoxysi256v141 0.66? 0.70? 0.74? T:deoxysneq128128v1 0.76 0.77 0.80 T:deoxysneq256128v1 0.78 0.78 0.79 T:morus1280256v1 0.77 0.78 0.79 T:morus1280256v2 0.77 0.78 0.79 T:morus1280128v1 0.77 0.79 0.79 T:morus1280128v2 0.90 0.93 0.97 T:aes256gcmv1 1.03 1.04 1.06 T:morus640128v2 1.03 1.05 1.06 T:morus640128v1 1.15 1.17 1.18 T:norx6444v3 1.17? 1.27? 1.44? T:deoxysii128v141 1.27? 1.41? 1.52? T:deoxysii256v141 1.39 1.44 1.49 T:deoxyseq128128v1 1.51 1.52 1.52 T:aes128gcmv1 1.57 1.60 1.62 T:colm0v1 1.58 1.63 1.70 T:deoxyseq256128v1 1.65 1.67 1.68 aes256gcmv1 2.34 2.36 2.36 T:norx6441v2 2.39 2.39 2.40 T:norx6441v3 2.34 2.40 2.45 T:lunarkeyakv2 2.68 2.69 2.69 T:aes128n12t8clocv2 2.69 2.69 2.69 T:aes128n8t8clocv2 2.68 2.74 2.76 T:aes128n12t8clocv3 2.74 2.75 2.75 T:aes128n8t8silcv2 2.77 2.77 2.77 T:aes128n12t8silcv3 2.77 2.77 2.77 T:aes128n12t8silcv2 2.83 2.86 2.88 T:norx6441v1 3.02 3.07 3.12 T:seakeyakv2 3.22 3.26 3.30 T:oceankeyakv2 3.52 3.54 3.55 T:norx6461v3 3.54 3.55 3.57 T:norx6461v2 3.68 3.69 3.70 T:norx3241v2 3.67 3.70 3.72 T:lakekeyakv1 3.69 3.71 3.71 T:norx3241v3 3.70 3.77 3.79 T:norx6444v2 4.09 4.10 4.12 T:norx6444v1 4.24 4.27 4.29 T:norx6461v1 4.46 4.47 4.49 T:norx3241v1 4.42 4.48 4.52 T:lakekeyakv2 5.37 5.37 5.47 T:aesjambuv1 5.54 5.56 5.57 T:norx3261v2 5.55 5.57 5.57 T:norx3261v3 6.05 6.14 6.16 T:acorn128v2 6.23 6.24 6.27 T:acorn128v3 6.24 6.27 6.28 T:ascon96v1 6.29 6.30 6.31 T:ascon128av11 6.40 6.42 6.43 ascon128av12 7.31 7.33 7.33 T:norx3261v1 7.53 7.59 7.66 T:ketjemajorv2 8.54 8.61 8.71 T:ketjeminorv2 8.79 8.82 8.84 T:riverkeyakv2 9.37 9.38 9.40 ascon128v12 9.36 9.40 9.41 T:ascon128v1 9.38 9.40 9.41 T:ascon128v11 12.37 12.54 12.92 T:seakeyakv1 12.13? 12.81? 13.78? T:oceankeyakv1 14.73 14.79 14.82 T:aes128otrsv2 14.79 14.81 14.82 T:aes128otrpv2 14.77 14.81 14.86 T:aes128otrsv1 14.82 14.84 14.87 T:aes128otrpv1 15.37 15.40 15.50 T:twine80n6t4clocv2 16.68 16.69 16.69 T:twine80n6t4clocv3 16.97 17.01 17.03 T:aeadaes128ocbtaglen96v1 16.98 17.01 17.03 T:aeadaes128ocbtaglen64v1 18.42 18.45 18.49 T:aes256otrsv1 18.38 18.46 18.48 T:aes256otrsv2 18.47 18.49 18.56 T:aes256otrpv2 18.48 18.51 18.53 T:aes256otrpv1 19.09 19.12 19.13 T:proest256otrv1 19.29 19.30 19.34 T:aeadaes192ocbtaglen96v1 19.30 19.32 19.36 T:aeadaes192ocbtaglen64v1 21.48 21.51 21.56 T:aeadaes256ocbtaglen64v1 21.48 21.51 21.55 T:aeadaes256ocbtaglen96v1 22.29 22.32 22.36 T:aes128n8clocv1 22.29 22.32 22.36 T:aes128n12clocv1 25.39 25.48 25.58 T:aes128n8silcv1 25.44 25.52 25.60 T:aes128n12silcv1 30.79 30.93 30.99 T:ketjesrv1 31.93? 32.31? 36.68? T:riverkeyakv1 32.53 32.56 32.57 T:ketjesrv2 41.73 41.99 42.29 T:colm127v1 45.33 45.37 45.39 T:proest128otrv1 54.47 54.62 54.80 T:ketjejrv1 72.46 72.53 72.71 T:deoxysneq128128v13 85.87 85.87 86.01 T:present80n6t4silcv3 96.69 97.49 100.84 T:ketjejrv2 102.67 102.70 102.78 T:deoxysneq256128v13 129.11 129.12 129.14 T:led80n6t4silcv3 130.78 131.09 131.15 T:twine80n6clocv1 144.58 147.95 148.27 T:deoxyseq128128v13 198.05 198.26 198.45 T:aezv1 208.02 208.75 211.33 T:deoxyseq256128v13 447.22 454.08 454.90 T:acorn128 3964.98 3966.89 3969.65 T:present80n6t4silcv2 3979.14 3982.24 3984.42 T:present80n6silcv1 9552.47 9580.55 9600.93 T:led80n6silcv1 9637.20 9660.83 9674.02 T:led80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.22 0.23 0.24 T:aegis128l 0.32 0.33 0.35 T:tiaoxinv2 0.32 0.33 0.35 T:tiaoxinv1 0.35 0.37 0.38 T:aegis128 0.37 0.38 0.38 T:aegis256 0.42? 0.47? 0.48? T:aezv4 0.47 0.48 0.48 T:aezv3 0.48 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.49 0.50 0.52 T:aezv5 0.42? 0.52? 0.53? T:aeadaes192ocbtaglen128v1 0.53 0.54 0.54 T:aes128otrpv3 0.53 0.54 0.55 T:aes128otrsv3 0.55 0.55 0.56 T:aes128otrcv3 0.66 0.67 0.70 T:aeadaes256ocbtaglen128v1 0.67 0.67 0.68 T:aes256otrpv3 0.67 0.68 0.69 T:aes256otrsv3 0.69 0.71 0.71 T:aes256otrcv3 0.67? 0.74? 0.77? T:deoxysneq128128v1 0.68? 0.78? 0.92? T:deoxysi128v141 0.81 0.81 0.82 T:morus1280256v2 0.80 0.82 0.82 T:morus1280128v2 0.81 0.82 0.83 T:morus1280256v1 0.81 0.82 0.83 T:morus1280128v1 0.72? 0.85? 1.03? T:deoxysi256v141 0.80? 0.90? 0.91? T:deoxysneq256128v1 0.88 0.92 0.97 T:aes256gcmv1 1.01 1.03 1.04 T:morus640128v2 1.02 1.05 1.06 T:morus640128v1 1.14 1.16 1.17 T:norx6444v3 1.18? 1.29? 1.36? T:deoxysii128v141 1.43 1.44 1.45 T:deoxysii256v141 1.41? 1.50? 1.58? T:colm0v1 1.48 1.52 1.60 T:deoxyseq128128v1 1.59 1.60 1.61 T:aes128gcmv1 1.70 1.72 1.78 T:deoxyseq256128v1 1.79 1.79 1.82 aes256gcmv1 2.28 2.30 2.31 T:norx6441v3 2.29 2.30 2.32 T:norx6441v2 2.41 2.46 2.51 T:lunarkeyakv2 2.55 2.63 2.70 T:aes128n8t8silcv2 2.61 2.63 2.68 T:aes128n8t8clocv2 2.59 2.67 2.68 T:aes128n12t8clocv2 2.62 2.69 2.70 T:aes128n12t8clocv3 2.54 2.71 2.71 T:aes128n12t8silcv3 2.62 2.71 2.71 T:aes128n12t8silcv2 2.77 2.79 2.80 T:norx6441v1 3.10 3.13 3.19 T:seakeyakv2 3.35 3.37 3.39 T:oceankeyakv2 3.42 3.47 3.48 T:norx6461v3 3.47 3.49 3.51 T:norx6461v2 3.58 3.63 3.67 T:lakekeyakv1 3.66 3.67 3.68 T:norx3241v3 3.68 3.69 3.70 T:norx3241v2 3.68 3.72 3.78 T:norx6444v2 4.13 4.15 4.17 T:norx6444v1 4.18 4.20 4.22 T:norx6461v1 4.47 4.49 4.49 T:norx3241v1 4.52 4.60 4.65 T:lakekeyakv2 5.48 5.49 5.49 T:norx3261v2 5.48 5.49 5.49 T:norx3261v3 5.67 5.70 5.76 T:ketjemajorv2 5.86 5.89 5.91 T:aesjambuv1 6.08 6.13 6.16 T:acorn128v3 6.22 6.27 6.30 T:ascon128av11 6.28 6.30 6.30 ascon128av12 6.27 6.31 6.31 T:ascon96v1 6.34 6.40 6.51 T:acorn128v2 7.18 7.19 7.23 T:norx3261v1 8.23 8.27 8.29 T:ketjeminorv2 9.27 9.29 9.31 ascon128v12 9.38 9.39 9.42 T:ascon128v11 9.38 9.40 9.42 T:ascon128v1 9.67 9.71 9.75 T:riverkeyakv2 12.73 12.87 13.26 T:seakeyakv1 12.53? 13.12? 14.25? T:oceankeyakv1 14.91 14.93 14.96 T:aes128otrsv2 14.90 14.95 15.00 T:aes128otrsv1 14.94 14.97 15.03 T:aes128otrpv2 14.96 14.97 15.02 T:aes128otrpv1 15.36 15.39 15.46 T:twine80n6t4clocv2 16.44 16.51 16.53 T:twine80n6t4clocv3 17.45 17.47 17.49 T:aeadaes128ocbtaglen96v1 17.48 17.49 17.52 T:aeadaes128ocbtaglen64v1 18.56 18.59 18.64 T:aes256otrsv2 18.57 18.60 18.64 T:aes256otrsv1 18.65 18.68 18.71 T:aes256otrpv2 18.67 18.74 18.79 T:aes256otrpv1 18.83 19.16 19.18 T:proest256otrv1 19.75 19.78 19.81 T:aeadaes192ocbtaglen64v1 19.75 19.80 20.54 T:aeadaes192ocbtaglen96v1 22.06 22.11 22.12 T:aeadaes256ocbtaglen64v1 22.11 22.15 22.20 T:aeadaes256ocbtaglen96v1 23.32 23.34 23.40 T:aes128n8clocv1 23.34 23.36 23.38 T:aes128n12clocv1 25.35 25.37 25.53 T:aes128n12silcv1 25.36 25.39 25.42 T:aes128n8silcv1 27.18 27.24 27.32 T:ketjesrv2 32.22? 32.71? 36.66? T:riverkeyakv1 33.44 33.54 33.58 T:ketjesrv1 43.89 44.18 44.54 T:colm127v1 45.51 45.55 45.92 T:proest128otrv1 57.56 57.65 57.72 T:ketjejrv1 87.00 87.15 87.27 T:present80n6t4silcv3 97.98 98.39 103.55 T:ketjejrv2 99.48 99.53 99.68 T:deoxysneq128128v13 128.99 129.24 129.31 T:led80n6t4silcv3 130.88 131.33 131.44 T:twine80n6clocv1 134.53 135.22 135.62 T:deoxysneq256128v13 144.29 144.93 148.08 T:deoxyseq128128v13 196.48 196.70 196.96 T:aezv1 208.93 209.64 210.24 T:deoxyseq256128v13 435.92 441.37 442.56 T:acorn128 3972.50 3974.24 3976.33 T:present80n6t4silcv2 3981.37 3983.49 3984.47 T:present80n6silcv1 9560.48 9564.28 9568.87 T:led80n6silcv1 9637.61 9643.13 9650.38 T:led80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13? 0.18? 0.23? T:aezv4 0.13? 0.18? 0.19? T:aezv3 0.16? 0.20? 0.25? T:aezv5 0.24 0.24 0.25 T:aegis128l 0.28? 0.33? 0.34? T:tiaoxinv2 0.28? 0.33? 0.34? T:tiaoxinv1 0.37 0.37 0.38 T:aegis128 0.37 0.38 0.38 T:aegis256 0.47 0.48 0.49 T:aeadaes128ocbtaglen128v1 0.40? 0.50? 0.69? T:aeadaes192ocbtaglen128v1 0.53 0.54 0.55 T:aes128otrpv3 0.54 0.54 0.54 T:aes128otrsv3 0.54 0.55 0.56 T:aes128otrcv3 0.67 0.67 0.68 T:aeadaes256ocbtaglen128v1 0.67 0.68 0.68 T:aes256otrpv3 0.67 0.68 0.69 T:aes256otrsv3 0.68 0.69 0.69 T:aes256otrcv3 0.66? 0.73? 0.79? T:deoxysneq128128v1 0.68? 0.81? 0.91? T:deoxysi128v141 0.81 0.82 0.82 T:morus1280256v2 0.81 0.82 0.83 T:morus1280128v2 0.81 0.82 0.83 T:morus1280256v1 0.81 0.82 0.82 T:morus1280128v1 0.72? 0.84? 0.95? T:deoxysi256v141 0.83 0.84 0.86 T:deoxysneq256128v1 0.89 0.91 0.94 T:aes256gcmv1 1.02 1.03 1.05 T:morus640128v2 1.03 1.05 1.06 T:morus640128v1 1.15 1.16 1.18 T:norx6444v3 1.18? 1.28? 1.34? T:deoxysii128v141 1.42 1.44 1.45 T:deoxysii256v141 1.43 1.48 1.57 T:colm0v1 1.42 1.50 1.55 T:deoxyseq128128v1 1.60 1.60 1.61 T:aes128gcmv1 1.63 1.71 1.78 T:deoxyseq256128v1 1.79 1.79 1.80 aes256gcmv1 2.29 2.30 2.31 T:norx6441v3 2.30 2.30 2.31 T:norx6441v2 2.39 2.46 2.53 T:lunarkeyakv2 2.58 2.67 2.67 T:aes128n12t8clocv2 2.58 2.67 2.67 T:aes128n8t8clocv2 2.56 2.69 2.69 T:aes128n8t8silcv2 2.62 2.70 2.70 T:aes128n12t8clocv3 2.55 2.70 2.70 T:aes128n12t8silcv2 2.55 2.70 2.70 T:aes128n12t8silcv3 2.77 2.79 2.81 T:norx6441v1 3.14 3.18 3.21 T:seakeyakv2 3.36 3.38 3.41 T:oceankeyakv2 3.42 3.44 3.48 T:norx6461v3 3.47 3.48 3.51 T:norx6461v2 3.58 3.62 3.65 T:lakekeyakv1 3.66 3.67 3.68 T:norx3241v3 3.68 3.69 3.70 T:norx3241v2 3.72 3.77 3.80 T:norx6444v2 4.10 4.15 4.20 T:norx6444v1 4.19 4.21 4.22 T:norx6461v1 4.47 4.49 4.50 T:norx3241v1 4.57 4.59 4.63 T:lakekeyakv2 5.48 5.48 5.50 T:norx3261v3 5.48 5.49 5.50 T:norx3261v2 5.71 5.81 5.85 T:ketjemajorv2 5.87 5.89 5.91 T:aesjambuv1 6.09 6.14 6.17 T:acorn128v3 6.27 6.29 6.32 T:ascon128av11 6.27 6.31 6.33 T:ascon96v1 6.27 6.31 6.32 ascon128av12 6.34 6.41 6.44 T:acorn128v2 7.18 7.19 7.23 T:norx3261v1 8.29 8.31 8.33 T:ketjeminorv2 9.24 9.26 9.30 ascon128v12 9.32 9.38 9.40 T:ascon128v11 9.33 9.39 9.40 T:ascon128v1 9.70 9.75 9.77 T:riverkeyakv2 12.71 12.88 13.31 T:seakeyakv1 12.53? 13.15? 14.23? T:oceankeyakv1 14.91 14.95 14.98 T:aes128otrsv2 14.92 14.96 14.99 T:aes128otrsv1 14.99 15.03 15.08 T:aes128otrpv2 15.03 15.08 15.10 T:aes128otrpv1 15.36 15.38 15.45 T:twine80n6t4clocv2 16.44 16.49 16.51 T:twine80n6t4clocv3 17.47 17.49 17.53 T:aeadaes128ocbtaglen96v1 17.48 17.51 17.52 T:aeadaes128ocbtaglen64v1 18.61 18.64 18.69 T:aes256otrsv2 18.60 18.67 18.71 T:aes256otrsv1 18.66 18.70 18.73 T:aes256otrpv2 18.73 18.76 18.82 T:aes256otrpv1 19.08 19.13 19.14 T:proest256otrv1 19.77 19.80 19.84 T:aeadaes192ocbtaglen64v1 19.78 19.84 20.49 T:aeadaes192ocbtaglen96v1 22.08 22.09 22.13 T:aeadaes256ocbtaglen64v1 22.10 22.12 22.15 T:aeadaes256ocbtaglen96v1 23.31 23.34 23.38 T:aes128n12clocv1 23.32 23.37 23.38 T:aes128n8clocv1 25.37 25.39 25.57 T:aes128n12silcv1 25.37 25.39 25.41 T:aes128n8silcv1 27.32 27.37 27.43 T:ketjesrv2 32.32? 32.77? 36.66? T:riverkeyakv1 33.48 33.56 33.60 T:ketjesrv1 43.02 43.35 43.72 T:colm127v1 45.49 45.56 45.60 T:proest128otrv1 57.57 57.72 57.81 T:ketjejrv1 86.98 87.02 87.27 T:present80n6t4silcv3 98.00 98.31 103.16 T:ketjejrv2 99.48 99.56 99.81 T:deoxysneq128128v13 128.98 129.23 129.32 T:led80n6t4silcv3 131.27 131.52 131.73 T:twine80n6clocv1 134.24 134.33 134.42 T:deoxysneq256128v13 144.54 144.86 148.15 T:deoxyseq128128v13 196.20 196.35 196.46 T:aezv1 208.53 209.65 210.51 T:deoxyseq256128v13 435.93 441.40 442.46 T:acorn128 3973.64 3974.85 3977.14 T:present80n6t4silcv2 3980.45 3981.95 3984.38 T:present80n6silcv1 9551.24 9561.65 9571.77 T:led80n6silcv1 9635.56 9648.31 9655.84 T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.15? 0.17? 0.20? T:tiaoxinv1 0.15? 0.17? 0.20? T:tiaoxinv2 0.18? 0.20? 0.21? T:aegis128l 0.30? 0.32? 0.34? T:aezv4 0.31 0.32 0.34 T:aezv3 0.32 0.33 0.34 T:aegis128 0.32? 0.34? 0.36? T:aezv5 0.35 0.36 0.36 T:aegis256 0.41 0.44 0.45 T:aeadaes128ocbtaglen128v1 0.41? 0.47? 0.51? T:aeadaes192ocbtaglen128v1 0.51 0.52 0.54 T:aes128otrpv3 0.53 0.54 0.55 T:aes128otrcv3 0.59? 0.62? 0.74? T:deoxysi128v141 0.64 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.65 0.66 0.67 T:aes256otrpv3 0.64? 0.67? 0.81? T:deoxysi256v141 0.64? 0.67? 0.72? T:deoxysneq128128v1 0.68 0.68 0.69 T:aes256otrcv3 0.67 0.69 0.70 T:aes256gcmv1 0.77 0.78 0.78 T:morus1280256v2 0.75 0.78 0.80 T:deoxysneq256128v1 0.77 0.78 0.78 T:morus1280128v2 0.77 0.78 0.78 T:morus1280256v1 0.77 0.78 0.78 T:morus1280128v1 0.88? 0.94? 0.99? T:deoxysii128v141 0.98 1.00 1.01 T:morus640128v2 0.98 1.00 1.01 T:morus640128v1 1.01 1.02 1.02 T:aes128gcmv1 1.09 1.09 1.10 aes256gcmv1 1.04 1.10 1.15 T:deoxysii256v141 1.10 1.12 1.21 T:deoxyseq128128v1 1.10 1.13 1.14 T:colm0v1 1.18 1.21 1.30 T:deoxyseq256128v1 1.57 1.57 1.58 T:aes128otrsv3 1.75 1.76 1.77 T:norx6444v3 2.15 2.15 2.15 T:aes256otrsv3 2.35 2.35 2.36 T:norx6441v2 2.38 2.38 2.38 T:norx6441v3 2.57 2.59 2.64 T:seakeyakv2 2.62 2.62 2.63 T:aes128n8t8clocv2 2.62 2.62 2.63 T:aes128n12t8clocv2 2.68 2.69 2.69 T:aes128n12t8clocv3 2.68 2.69 2.69 T:aes128n8t8silcv2 2.69 2.70 2.70 T:aes128n12t8silcv3 2.69 2.70 2.70 T:aes128n12t8silcv2 2.72 2.75 2.77 T:oceankeyakv2 2.85 2.87 2.91 T:norx6441v1 3.28 3.32 3.36 T:lunarkeyakv2 3.52 3.54 3.56 T:norx6461v3 3.54 3.56 3.56 T:norx6461v2 3.69 3.69 3.70 T:norx3241v2 3.69 3.70 3.70 T:norx3241v3 3.71 3.72 3.75 T:norx6444v2 3.69 3.73 3.76 T:lakekeyakv1 3.99 4.01 4.02 T:lakekeyakv2 4.04 4.05 4.06 T:norx6444v1 4.27 4.31 4.35 T:norx6461v1 4.45 4.48 4.51 T:norx3241v1 5.40 5.42 5.42 T:aesjambuv1 5.56 5.58 5.58 T:norx3261v3 5.55 5.61 5.61 T:norx3261v2 5.91 6.05 6.08 T:ketjemajorv2 6.05 6.11 6.15 T:acorn128v2 6.25 6.26 6.29 T:ascon128av11 6.25 6.28 6.29 T:acorn128v3 6.27 6.29 6.31 T:ascon96v1 6.29 6.33 6.35 T:riverkeyakv2 6.38 6.42 6.43 ascon128av12 7.31 7.33 7.33 T:norx3261v1 7.52 7.57 7.69 T:ketjeminorv2 9.32 9.33 9.37 T:ascon128v11 9.32 9.33 9.38 T:ascon128v1 9.32 9.35 9.36 ascon128v12 12.38 12.48 12.77 T:seakeyakv1 12.36 12.72 13.43 T:oceankeyakv1 13.25 13.27 13.28 T:aes128otrsv2 13.26 13.29 13.32 T:aes128otrsv1 13.74 13.77 13.80 T:aes128otrpv1 13.75 13.79 13.80 T:aes128otrpv2 15.04 15.05 15.09 T:twine80n6t4clocv2 16.06 16.08 16.10 T:aeadaes128ocbtaglen64v1 16.05 16.08 16.10 T:aeadaes128ocbtaglen96v1 16.36 16.36 16.37 T:twine80n6t4clocv3 16.86 16.89 16.91 T:aes128n12clocv1 16.87 16.90 16.92 T:aes128n8clocv1 16.90 16.93 16.96 T:aes256otrsv1 16.93 16.95 16.98 T:aes256otrsv2 17.43 17.45 17.55 T:aes256otrpv1 17.48 17.50 17.54 T:aes256otrpv2 18.34 18.36 18.38 T:aeadaes192ocbtaglen64v1 18.33 18.37 18.39 T:aeadaes192ocbtaglen96v1 19.16 19.22 19.29 T:aes128n12silcv1 19.18 19.26 19.33 T:aes128n8silcv1 19.27 19.28 19.30 T:proest256otrv1 20.56 20.59 20.64 T:aeadaes256ocbtaglen96v1 20.57 20.60 20.62 T:aeadaes256ocbtaglen64v1 28.65 28.67 28.70 T:ketjesrv1 28.86 28.88 28.99 T:ketjesrv2 29.54 29.62 29.90 T:colm127v1 30.27? 30.66? 34.72? T:riverkeyakv1 45.70 45.72 45.74 T:proest128otrv1 50.74 50.82 50.94 T:ketjejrv1 73.01 73.04 73.13 T:deoxysneq128128v13 85.81 85.81 85.82 T:present80n6t4silcv3 98.00 98.12 98.23 T:twine80n6clocv1 97.50 98.18 102.57 T:ketjejrv2 102.77 102.91 102.99 T:deoxysneq256128v13 108.01 110.79 111.00 T:deoxyseq128128v13 128.16 128.38 128.48 T:led80n6t4silcv3 130.87 130.93 131.01 T:aezv1 155.58 156.08 157.40 T:deoxyseq256128v13 454.08 454.16 461.24 T:acorn128 2979.25 2979.78 2980.81 T:present80n6t4silcv2 2983.20 2984.41 2985.77 T:present80n6silcv1 7182.70 7196.60 7208.54 T:led80n6silcv1 7243.54 7257.84 7268.98 T:led80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.19 0.20 0.21 T:aegis128l 0.21? 0.23? 0.24? T:tiaoxinv1 0.22 0.23 0.24 T:tiaoxinv2 0.31 0.32 0.33 T:aezv4 0.32 0.33 0.35 T:aezv3 0.31 0.33 0.34 T:aezv5 0.34 0.35 0.36 T:aegis128 0.35 0.36 0.36 T:aegis256 0.43 0.45 0.46 T:aeadaes128ocbtaglen128v1 0.39? 0.47? 0.57? T:aeadaes192ocbtaglen128v1 0.52 0.52 0.52 T:aes128otrpv3 0.55 0.55 0.55 T:aes128otrcv3 0.65 0.66 0.66 T:aes256otrpv3 0.64 0.67 0.67 T:aeadaes256ocbtaglen128v1 0.66 0.68 0.70 T:aes256gcmv1 0.69 0.69 0.70 T:aes256otrcv3 0.66? 0.72? 0.76? T:deoxysi128v141 0.70? 0.74? 0.78? T:deoxysneq128128v1 0.75 0.77 0.80 T:deoxysi256v141 0.78 0.79 0.79 T:morus1280256v1 0.78 0.79 0.79 T:morus1280256v2 0.78 0.79 0.79 T:morus1280128v2 0.78 0.79 0.79 T:morus1280128v1 0.81 0.85 0.88 T:deoxysneq256128v1 0.96 0.98 1.01 T:deoxysii128v141 1.00 1.01 1.02 T:morus640128v2 1.00 1.01 1.02 T:morus640128v1 1.02 1.05 1.09 T:colm0v1 1.04 1.06 1.07 T:aes128gcmv1 1.08 1.09 1.14 T:deoxysii256v141 1.12 1.14 1.15 T:deoxyseq128128v1 1.15 1.15 1.17 aes256gcmv1 1.23 1.27 1.31 T:deoxyseq256128v1 1.58 1.59 1.59 T:aes128otrsv3 1.74 1.76 1.77 T:norx6444v3 2.15 2.16 2.16 T:aes256otrsv3 2.33 2.34 2.36 T:norx6441v2 2.34 2.36 2.36 T:norx6441v3 2.59 2.59 2.62 T:aes128n12t8clocv2 2.59 2.61 2.62 T:aes128n8t8clocv2 2.59 2.62 2.62 T:aes128n8t8silcv2 2.62 2.63 2.67 T:aes128n12t8silcv2 2.62 2.63 2.66 T:aes128n12t8clocv3 2.62 2.64 2.66 T:seakeyakv2 2.58 2.67 2.67 T:aes128n12t8silcv3 2.76 2.78 2.81 T:oceankeyakv2 2.81 2.82 2.83 T:norx6441v1 3.29 3.32 3.36 T:lunarkeyakv2 3.50 3.50 3.52 T:norx6461v3 3.52 3.53 3.54 T:norx6461v2 3.65 3.67 3.69 T:norx3241v3 3.65 3.67 3.70 T:lakekeyakv1 3.69 3.70 3.70 T:norx3241v2 3.69 3.72 3.73 T:norx6444v2 4.02 4.05 4.07 T:lakekeyakv2 4.05 4.06 4.08 T:norx6444v1 4.23 4.25 4.26 T:norx6461v1 4.46 4.47 4.50 T:norx3241v1 5.06 5.13 5.16 T:ketjemajorv2 5.52 5.52 5.52 T:norx3261v3 5.50 5.54 5.58 T:norx3261v2 5.62 5.64 5.64 T:aesjambuv1 6.17 6.20 6.23 T:acorn128v3 6.18 6.21 6.26 T:acorn128v2 6.22 6.24 6.26 T:ascon128av11 6.27 6.28 6.29 T:ascon96v1 6.33 6.34 6.35 ascon128av12 6.81 6.84 6.85 T:riverkeyakv2 7.24 7.26 7.26 T:norx3261v1 7.37 7.41 7.43 T:ketjeminorv2 9.31 9.31 9.31 ascon128v12 9.33 9.35 9.36 T:ascon128v1 9.34 9.35 9.36 T:ascon128v11 12.51 12.60 12.90 T:seakeyakv1 12.60 12.84 13.70 T:oceankeyakv1 13.30 13.33 13.36 T:aes128otrsv1 13.32 13.33 13.36 T:aes128otrsv2 13.84 13.85 13.87 T:aes128otrpv2 13.85 13.87 13.89 T:aes128otrpv1 15.05 15.07 15.10 T:twine80n6t4clocv2 16.29 16.31 16.33 T:aeadaes128ocbtaglen96v1 16.29 16.31 16.33 T:twine80n6t4clocv3 16.30 16.33 16.34 T:aeadaes128ocbtaglen64v1 16.98 17.01 17.04 T:aes256otrsv1 16.99 17.02 17.06 T:aes256otrsv2 17.39 17.42 17.44 T:aes128n12clocv1 17.40 17.43 17.47 T:aes128n8clocv1 17.52 17.54 17.57 T:aes256otrpv1 17.51 17.56 17.60 T:aes256otrpv2 18.59 18.60 18.62 T:aeadaes192ocbtaglen64v1 18.58 18.63 18.97 T:aeadaes192ocbtaglen96v1 19.10 19.14 19.19 T:aes128n8silcv1 19.09 19.18 19.22 T:aes128n12silcv1 19.12 19.23 19.29 T:proest256otrv1 20.86 20.89 20.92 T:aeadaes256ocbtaglen64v1 20.86 20.89 20.92 T:aeadaes256ocbtaglen96v1 26.17 26.23 26.27 T:ketjesrv2 30.01 30.04 30.07 T:ketjesrv1 30.54 30.65 30.93 T:colm127v1 30.40? 30.75? 34.76? T:riverkeyakv1 45.80 45.83 45.92 T:proest128otrv1 52.21 52.27 52.36 T:ketjejrv1 85.95 86.00 86.06 T:deoxysneq128128v13 86.25 86.30 86.34 T:present80n6t4silcv3 98.04 98.19 98.31 T:twine80n6clocv1 98.42 98.74 102.30 T:ketjejrv2 108.11 108.27 111.06 T:deoxyseq128128v13 119.36 119.52 119.56 T:deoxysneq256128v13 128.88 128.89 128.92 T:led80n6t4silcv3 129.36 129.54 129.80 T:aezv1 155.37 156.71 157.61 T:deoxyseq256128v13 447.79 447.87 466.64 T:acorn128 2982.46 2983.55 2985.23 T:present80n6silcv1 2983.02 2984.12 2984.95 T:present80n6t4silcv2 7186.97 7191.74 7195.57 T:led80n6silcv1 7241.74 7248.05 7254.30 T:led80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.15? 0.18? 0.18? T:aezv3 0.16? 0.18? 0.18? T:aezv4 0.18? 0.19? 0.22? T:aezv5 0.20 0.20 0.21 T:aegis128l 0.21? 0.23? 0.24? T:tiaoxinv1 0.21? 0.23? 0.24? T:tiaoxinv2 0.34 0.35 0.35 T:aegis128 0.36 0.36 0.36 T:aegis256 0.44 0.45 0.45 T:aeadaes128ocbtaglen128v1 0.48 0.49 0.50 T:aeadaes192ocbtaglen128v1 0.52 0.52 0.52 T:aes128otrpv3 0.55 0.55 0.55 T:aes128otrcv3 0.65 0.66 0.66 T:aes256otrpv3 0.66 0.67 0.67 T:aeadaes256ocbtaglen128v1 0.66 0.68 0.69 T:aes256gcmv1 0.69 0.69 0.70 T:aes256otrcv3 0.66? 0.72? 0.75? T:deoxysi128v141 0.70? 0.76? 0.81? T:deoxysneq128128v1 0.74 0.77 0.82 T:deoxysi256v141 0.78 0.79 0.79 T:morus1280128v1 0.78 0.79 0.79 T:morus1280256v2 0.78 0.79 0.79 T:morus1280256v1 0.78 0.79 0.79 T:morus1280128v2 0.83 0.86 0.87 T:deoxysneq256128v1 0.97 0.98 0.98 T:deoxysii128v141 1.01 1.02 1.02 T:morus640128v2 1.01 1.02 1.02 T:morus640128v1 1.02 1.03 1.09 T:colm0v1 1.05 1.06 1.07 T:aes128gcmv1 1.09 1.09 1.09 T:deoxysii256v141 1.11 1.14 1.14 T:deoxyseq128128v1 1.15 1.16 1.16 aes256gcmv1 1.21 1.25 1.25 T:deoxyseq256128v1 1.58 1.58 1.59 T:aes128otrsv3 1.76 1.77 1.77 T:norx6444v3 2.15 2.16 2.16 T:aes256otrsv3 2.33 2.35 2.36 T:norx6441v2 2.33 2.35 2.35 T:norx6441v3 2.59 2.61 2.62 T:aes128n12t8clocv2 2.59 2.62 2.62 T:aes128n8t8clocv2 2.62 2.62 2.66 T:aes128n12t8clocv3 2.62 2.62 2.66 T:aes128n8t8silcv2 2.63 2.64 2.67 T:seakeyakv2 2.62 2.66 2.66 T:aes128n12t8silcv2 2.63 2.66 2.66 T:aes128n12t8silcv3 2.79 2.80 2.81 T:oceankeyakv2 2.80 2.82 2.85 T:norx6441v1 3.28 3.32 3.38 T:lunarkeyakv2 3.49 3.50 3.53 T:norx6461v3 3.52 3.52 3.52 T:norx6461v2 3.65 3.66 3.68 T:lakekeyakv1 3.67 3.67 3.69 T:norx3241v3 3.69 3.69 3.70 T:norx3241v2 3.72 3.74 3.76 T:norx6444v2 4.02 4.04 4.05 T:lakekeyakv2 4.06 4.09 4.10 T:norx6444v1 4.22 4.22 4.24 T:norx6461v1 4.46 4.49 4.49 T:norx3241v1 5.09 5.14 5.20 T:ketjemajorv2 5.50 5.50 5.56 T:norx3261v2 5.51 5.54 5.55 T:norx3261v3 5.62 5.63 5.64 T:aesjambuv1 6.20 6.21 6.23 T:acorn128v3 6.20 6.21 6.24 T:acorn128v2 6.22 6.24 6.27 T:ascon128av11 6.27 6.28 6.29 T:ascon96v1 6.34 6.35 6.37 ascon128av12 6.83 6.84 6.85 T:riverkeyakv2 7.25 7.26 7.26 T:norx3261v1 7.40 7.42 7.43 T:ketjeminorv2 9.30 9.31 9.32 ascon128v12 9.32 9.34 9.34 T:ascon128v11 9.32 9.34 9.34 T:ascon128v1 12.52 12.62 12.95 T:seakeyakv1 12.62 13.00 13.67 T:oceankeyakv1 13.33 13.36 13.40 T:aes128otrsv1 13.34 13.36 13.40 T:aes128otrsv2 13.85 13.87 13.89 T:aes128otrpv1 13.87 13.90 13.92 T:aes128otrpv2 15.06 15.07 15.10 T:twine80n6t4clocv2 16.29 16.31 16.32 T:twine80n6t4clocv3 16.31 16.32 16.33 T:aeadaes128ocbtaglen64v1 16.30 16.32 16.34 T:aeadaes128ocbtaglen96v1 17.00 17.02 17.07 T:aes256otrsv1 17.02 17.04 17.07 T:aes256otrsv2 17.40 17.41 17.43 T:aes128n8clocv1 17.42 17.43 17.44 T:aes128n12clocv1 17.53 17.54 17.57 T:aes256otrpv2 17.53 17.57 17.66 T:aes256otrpv1 18.59 18.61 18.64 T:aeadaes192ocbtaglen64v1 18.58 18.62 18.94 T:aeadaes192ocbtaglen96v1 19.11 19.14 19.21 T:aes128n12silcv1 19.08 19.17 19.19 T:aes128n8silcv1 19.25 19.30 19.31 T:proest256otrv1 20.88 20.89 20.90 T:aeadaes256ocbtaglen64v1 20.90 20.92 20.95 T:aeadaes256ocbtaglen96v1 26.20 26.24 26.29 T:ketjesrv2 30.01 30.10 30.17 T:ketjesrv1 30.15 30.19 30.29 T:colm127v1 30.38? 30.76? 34.66? T:riverkeyakv1 45.78 45.83 45.83 T:proest128otrv1 52.29 52.34 52.36 T:ketjejrv1 86.01 86.03 86.08 T:deoxysneq128128v13 86.29 86.31 86.34 T:present80n6t4silcv3 98.10 98.27 98.36 T:twine80n6clocv1 98.38 98.69 102.30 T:ketjejrv2 108.15 108.41 111.03 T:deoxyseq128128v13 119.11 119.66 120.03 T:deoxysneq256128v13 128.89 128.93 128.94 T:led80n6t4silcv3 129.16 129.24 129.38 T:aezv1 155.82 157.16 158.30 T:deoxyseq256128v13 443.61 447.71 448.48 T:acorn128 2982.32 2983.19 2984.59 T:present80n6silcv1 2982.98 2983.96 2985.45 T:present80n6t4silcv2 7184.31 7189.15 7195.05 T:led80n6silcv1 7240.51 7247.64 7252.89 T:led80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.11? 0.14? 0.16? T:tiaoxinv1 0.13? 0.14? 0.16? T:tiaoxinv2 0.15 0.16 0.16 T:aegis128l 0.16? 0.17? 0.19? T:aezv4 0.15? 0.17? 0.20? T:aezv5 0.17? 0.18? 0.20? T:aezv3 0.30? 0.33? 0.36? T:aegis128 0.33 0.34 0.34 T:aegis256 0.41? 0.41? 0.46? T:aeadaes128ocbtaglen128v1 0.40? 0.43? 0.48? T:aes256gcmv1 0.34? 0.50? 0.68? T:aeadaes192ocbtaglen128v1 0.50 0.52 0.53 T:aes128otrpv3 0.51 0.52 0.55 aes256gcmv1 0.51 0.53 0.54 T:aes128gcmv1 0.54 0.55 0.55 T:aes128otrcv3 0.54? 0.62? 0.70? T:deoxysi128v141 0.56? 0.62? 0.72? T:deoxysii128v141 0.56? 0.63? 0.70? T:deoxysneq128128v1 0.58 0.63 0.64 T:colm0v1 0.61 0.64 0.65 T:aes256otrpv3 0.67 0.69 0.70 T:aeadaes256ocbtaglen128v1 0.58? 0.69? 0.82? T:deoxysi256v141 0.69 0.71 0.72 T:aes256otrcv3 0.63? 0.72? 0.79? T:deoxysii256v141 0.69? 0.74? 0.77? T:deoxysneq256128v1 0.76 0.76 0.77 T:morus1280256v2 0.76 0.76 0.77 T:morus1280128v2 0.74 0.77 0.81 T:deoxyseq128128v1 0.77 0.77 0.77 T:morus1280256v1 0.77 0.77 0.77 T:morus1280128v1 0.79 0.79 0.83 T:deoxyseq256128v1 0.92 0.94 0.95 T:morus640128v1 0.94 0.95 0.95 T:morus640128v2 2.11 2.16 2.21 T:lunarkeyakv2 2.11 2.16 2.19 T:oceankeyakv2 2.34 2.35 2.36 T:norx6444v3 2.36 2.37 2.38 T:norx6441v2 2.37 2.38 2.38 T:norx6441v3 2.48 2.51 2.52 T:seakeyakv2 2.55 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.57 T:aes128n12t8clocv2 2.62 2.62 2.63 T:aes128otrsv3 2.62 2.62 2.63 T:aes128n8t8silcv2 2.62 2.63 2.63 T:aes128n12t8silcv2 2.62 2.63 2.64 T:aes128n12t8clocv3 2.62 2.63 2.63 T:aes128n12t8silcv3 2.85 2.87 2.89 T:norx6441v1 3.43 3.51 3.55 T:lakekeyakv1 3.53 3.53 3.54 T:norx6461v3 3.52 3.54 3.55 T:norx6461v2 3.62 3.62 3.62 T:aes256otrsv3 3.60 3.64 3.64 T:lakekeyakv2 3.64 3.66 3.69 T:norx6444v2 3.68 3.69 3.70 T:norx3241v3 3.68 3.69 3.71 T:norx3241v2 3.98 3.99 3.99 T:norx6444v1 4.28 4.31 4.33 T:norx6461v1 4.46 4.47 4.49 T:norx3241v1 4.40 4.47 4.57 T:ketjemajorv2 5.37 5.38 5.44 T:aesjambuv1 5.50 5.51 5.59 T:norx3261v2 5.53 5.53 5.54 T:norx3261v3 5.84 5.94 5.97 T:riverkeyakv2 5.90 5.98 6.09 T:acorn128v2 6.20 6.23 6.30 T:acorn128v3 6.23 6.24 6.25 T:ascon128av11 6.26 6.30 6.31 T:ascon96v1 6.32 6.33 6.36 ascon128av12 6.48 6.54 6.58 T:ketjeminorv2 7.29 7.30 7.32 T:norx3261v1 9.22 9.23 9.32 T:ascon128v11 9.22 9.23 9.32 T:ascon128v1 9.28 9.28 9.30 ascon128v12 11.44 11.46 11.50 T:aes128n12clocv1 11.46 11.48 11.51 T:aes128n8clocv1 11.74 11.76 11.82 T:aes128otrsv1 11.72 11.77 11.79 T:aes128otrsv2 12.22 12.39 12.70 T:seakeyakv1 12.25 12.67 13.49 T:oceankeyakv1 12.66 12.70 12.84 T:aes128otrpv2 12.66 12.72 12.74 T:aes128otrpv1 12.72 12.79 12.98 T:aes128n12silcv1 12.73 12.83 12.95 T:aes128n8silcv1 14.73 14.75 14.77 T:twine80n6t4clocv2 15.12 15.15 15.17 T:aeadaes128ocbtaglen64v1 15.13 15.17 15.21 T:aeadaes128ocbtaglen96v1 15.40 15.44 15.46 T:aes256otrsv2 15.44 15.45 15.47 T:aes256otrsv1 16.12 16.12 16.14 T:twine80n6t4clocv3 16.36 16.38 16.41 T:aes256otrpv2 16.35 16.41 16.54 T:aes256otrpv1 17.19 17.28 17.37 T:colm127v1 17.38 17.41 17.48 T:aeadaes192ocbtaglen64v1 17.39 17.43 17.46 T:aeadaes192ocbtaglen96v1 19.42 19.48 19.52 T:proest256otrv1 19.64 19.67 19.70 T:aeadaes256ocbtaglen96v1 19.66 19.69 19.75 T:aeadaes256ocbtaglen64v1 25.15 25.19 25.24 T:ketjesrv2 26.56 26.59 27.40 T:ketjesrv1 28.63? 29.11? 33.00? T:riverkeyakv1 46.03 46.06 46.09 T:proest128otrv1 46.98 47.05 47.11 T:ketjejrv1 62.30 62.35 62.41 T:aezv1 65.08 65.22 65.34 T:twine80n6clocv1 72.01 73.55 73.79 T:deoxyseq128128v13 73.70 73.79 73.88 T:deoxysneq128128v13 85.62 85.63 85.63 T:present80n6t4silcv3 98.62 98.87 101.58 T:ketjejrv2 103.00 103.04 103.17 T:deoxysneq256128v13 102.85 103.56 104.29 T:deoxyseq256128v13 128.19 128.58 128.64 T:led80n6t4silcv3 448.01 454.00 454.93 T:acorn128 1982.14 1982.78 1983.56 T:present80n6silcv1 1989.77 1991.39 1992.43 T:present80n6t4silcv2 4741.80 4764.99 4802.21 T:led80n6silcv1 4786.75 4810.24 4840.84 T:led80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.08? 0.13? 0.15? T:tiaoxinv2 0.11? 0.14? 0.16? T:tiaoxinv1 0.16 0.17 0.17 T:aezv4 0.17 0.18 0.18 T:aezv3 0.17 0.18 0.18 T:aezv5 0.17 0.18 0.18 T:aegis128l 0.33 0.34 0.34 T:aegis256 0.31? 0.35? 0.36? T:aegis128 0.41? 0.42? 0.46? T:aeadaes128ocbtaglen128v1 0.41 0.43 0.44 T:aes256gcmv1 0.27? 0.47? 0.48? T:aeadaes192ocbtaglen128v1 0.49 0.50 0.51 T:aes128otrpv3 0.50 0.52 0.54 T:aes128gcmv1 0.51 0.53 0.54 aes256gcmv1 0.54 0.55 0.56 T:aes128otrcv3 0.50? 0.61? 0.74? T:deoxysi128v141 0.61 0.63 0.64 T:colm0v1 0.57? 0.63? 0.72? T:deoxysneq128128v1 0.62 0.64 0.64 T:aes256otrpv3 0.57? 0.64? 0.68? T:deoxysii128v141 0.56? 0.68? 0.83? T:deoxysi256v141 0.65? 0.68? 0.73? T:deoxysii256v141 0.68 0.69 0.70 T:aeadaes256ocbtaglen128v1 0.69 0.69 0.70 T:aes256otrcv3 0.65? 0.70? 0.76? T:deoxysneq256128v1 0.69? 0.72? 0.82? T:deoxyseq256128v1 0.74 0.75 0.76 T:morus1280256v2 0.75 0.75 0.76 T:morus1280128v1 0.75 0.75 0.76 T:morus1280256v1 0.75 0.75 0.76 T:morus1280128v2 0.77 0.78 0.81 T:deoxyseq128128v1 0.96 0.97 0.98 T:morus640128v2 0.96 0.98 0.98 T:morus640128v1 2.12 2.14 2.15 T:oceankeyakv2 2.11 2.14 2.19 T:lunarkeyakv2 2.31 2.32 2.39 T:norx6441v2 2.32 2.34 2.37 T:norx6441v3 2.33 2.35 2.36 T:norx6444v3 2.48 2.53 2.56 T:seakeyakv2 2.56 2.62 2.63 T:aes128n8t8clocv2 2.62 2.62 2.63 T:aes128otrsv3 2.56 2.62 2.63 T:aes128n12t8clocv2 2.62 2.62 2.70 T:aes128n8t8silcv2 2.62 2.69 2.70 T:aes128n12t8clocv3 2.54 2.71 2.71 T:aes128n12t8silcv2 2.54 2.71 2.71 T:aes128n12t8silcv3 2.86 2.88 2.89 T:norx6441v1 3.48 3.56 3.59 T:lakekeyakv1 3.56 3.58 3.61 T:norx6461v3 3.52 3.60 3.60 T:norx6461v2 3.59 3.62 3.64 T:lakekeyakv2 3.62 3.62 3.63 T:aes256otrsv3 3.66 3.68 3.70 T:norx6444v2 3.69 3.69 3.71 T:norx3241v2 3.66 3.70 3.71 T:norx3241v3 3.99 4.02 4.04 T:norx6444v1 4.27 4.29 4.32 T:norx6461v1 4.37 4.41 4.53 T:ketjemajorv2 4.40 4.42 4.44 T:norx3241v1 5.37 5.44 5.44 T:aesjambuv1 5.50 5.51 5.51 T:norx3261v2 5.55 5.55 5.61 T:norx3261v3 5.86 5.91 5.96 T:riverkeyakv2 5.95 6.01 6.07 T:acorn128v2 6.16 6.21 6.21 T:ascon128av11 6.23 6.26 6.26 T:ascon96v1 6.20 6.26 6.33 T:acorn128v3 6.35 6.36 6.39 ascon128av12 6.49 6.53 6.56 T:ketjeminorv2 7.30 7.32 7.34 T:norx3261v1 9.28 9.29 9.29 ascon128v12 9.27 9.30 9.32 T:ascon128v1 9.26 9.31 9.32 T:ascon128v11 11.45 11.46 11.50 T:aes128n12clocv1 11.44 11.47 11.49 T:aes128n8clocv1 11.70 11.76 11.80 T:aes128otrsv2 11.73 11.76 11.81 T:aes128otrsv1 12.22 12.35 12.72 T:seakeyakv1 12.65 12.68 12.73 T:aes128otrpv1 12.64 12.69 12.85 T:aes128otrpv2 12.71 12.75 12.93 T:aes128n12silcv1 12.25 12.78 13.48 T:oceankeyakv1 12.74 12.79 12.99 T:aes128n8silcv1 14.71 14.76 14.80 T:twine80n6t4clocv2 15.14 15.17 15.19 T:aeadaes128ocbtaglen96v1 15.14 15.17 15.20 T:aeadaes128ocbtaglen64v1 15.33 15.37 15.48 T:aes256otrsv2 15.35 15.41 15.46 T:aes256otrsv1 16.08 16.13 16.18 T:twine80n6t4clocv3 16.37 16.39 16.42 T:aes256otrpv2 16.36 16.40 16.45 T:aes256otrpv1 17.23 17.26 17.32 T:colm127v1 17.40 17.42 17.49 T:aeadaes192ocbtaglen96v1 17.43 17.46 17.48 T:aeadaes192ocbtaglen64v1 19.45 19.53 19.59 T:proest256otrv1 19.65 19.66 19.70 T:aeadaes256ocbtaglen64v1 19.65 19.68 19.71 T:aeadaes256ocbtaglen96v1 25.14 25.19 25.24 T:ketjesrv2 26.55 26.57 26.62 T:ketjesrv1 28.40? 29.08? 32.91? T:riverkeyakv1 45.99 46.05 46.12 T:proest128otrv1 46.96 47.03 47.11 T:ketjejrv1 63.48 63.53 63.61 T:aezv1 65.07 65.20 65.56 T:twine80n6clocv1 71.71 71.88 73.83 T:deoxyseq128128v13 72.47 72.50 72.58 T:deoxysneq128128v13 85.57 85.62 85.67 T:present80n6t4silcv3 98.61 98.93 101.57 T:ketjejrv2 103.91 104.01 104.53 T:deoxysneq256128v13 103.64 104.04 104.62 T:deoxyseq256128v13 128.53 128.58 128.62 T:led80n6t4silcv3 449.90 454.00 455.02 T:acorn128 1980.89 1982.71 1983.52 T:present80n6silcv1 1989.04 1990.61 1991.68 T:present80n6t4silcv2 4751.50 4755.84 4763.67 T:led80n6silcv1 4786.68 4793.10 4802.31 T:led80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.12? 0.13? 0.15? T:tiaoxinv2 0.11? 0.13? 0.15? T:tiaoxinv1 0.16 0.17 0.17 T:aezv4 0.17 0.18 0.18 T:aegis128l 0.17? 0.18? 0.19? T:aezv3 0.17? 0.18? 0.19? T:aezv5 0.31 0.31 0.32 T:aegis128 0.33 0.34 0.34 T:aegis256 0.41 0.42 0.43 T:aeadaes128ocbtaglen128v1 0.42? 0.43? 0.47? T:aes256gcmv1 0.46? 0.47? 0.66? T:aeadaes192ocbtaglen128v1 0.49 0.50 0.50 T:aes128otrpv3 0.50 0.51 0.52 T:aes128gcmv1 0.52 0.52 0.53 aes256gcmv1 0.55 0.55 0.56 T:aes128otrcv3 0.51? 0.60? 0.70? T:deoxysi128v141 0.60 0.62 0.64 T:colm0v1 0.58? 0.64? 0.74? T:deoxysneq128128v1 0.63 0.64 0.65 T:aes256otrpv3 0.62 0.66 0.68 T:deoxysii128v141 0.68 0.68 0.69 T:aeadaes256ocbtaglen128v1 0.54? 0.69? 0.78? T:deoxysi256v141 0.69 0.69 0.70 T:aes256otrcv3 0.66 0.69 0.72 T:deoxysneq256128v1 0.70 0.70 0.71 T:deoxysii256v141 0.72? 0.73? 0.81? T:deoxyseq256128v1 0.74 0.75 0.76 T:morus1280128v1 0.75 0.75 0.76 T:morus1280256v1 0.75 0.75 0.76 T:morus1280128v2 0.75 0.76 0.78 T:deoxyseq128128v1 0.75 0.76 0.76 T:morus1280256v2 0.97 0.98 0.99 T:morus640128v2 0.97 0.98 0.99 T:morus640128v1 2.07 2.14 2.17 T:lunarkeyakv2 2.13 2.14 2.16 T:oceankeyakv2 2.31 2.31 2.36 T:norx6441v2 2.34 2.36 2.37 T:norx6444v3 2.34 2.38 2.39 T:norx6441v3 2.46 2.51 2.56 T:seakeyakv2 2.56 2.62 2.62 T:aes128n8t8clocv2 2.56 2.62 2.63 T:aes128n12t8clocv2 2.62 2.62 2.63 T:aes128otrsv3 2.62 2.69 2.69 T:aes128n8t8silcv2 2.62 2.69 2.69 T:aes128n12t8clocv3 2.55 2.70 2.70 T:aes128n12t8silcv2 2.62 2.70 2.70 T:aes128n12t8silcv3 2.86 2.86 2.86 T:norx6441v1 3.47 3.50 3.57 T:lakekeyakv1 3.53 3.55 3.58 T:norx6461v3 3.52 3.55 3.60 T:norx6461v2 3.61 3.62 3.62 T:lakekeyakv2 3.62 3.63 3.63 T:aes256otrsv3 3.63 3.67 3.71 T:norx6444v2 3.68 3.68 3.69 T:norx3241v2 3.66 3.70 3.71 T:norx3241v3 3.96 4.02 4.03 T:norx6444v1 4.31 4.31 4.32 T:norx6461v1 4.37 4.44 4.54 T:ketjemajorv2 4.44 4.44 4.44 T:norx3241v1 5.37 5.43 5.44 T:aesjambuv1 5.52 5.55 5.55 T:norx3261v3 5.63 5.64 5.65 T:norx3261v2 5.87 5.91 5.94 T:riverkeyakv2 5.98 6.01 6.05 T:acorn128v2 6.16 6.19 6.21 T:ascon128av11 6.19 6.23 6.25 T:ascon96v1 6.22 6.27 6.31 T:acorn128v3 6.37 6.38 6.40 ascon128av12 6.48 6.51 6.55 T:ketjeminorv2 7.32 7.33 7.34 T:norx3261v1 9.27 9.28 9.30 ascon128v12 9.26 9.29 9.30 T:ascon128v11 9.26 9.30 9.30 T:ascon128v1 11.46 11.48 11.50 T:aes128n8clocv1 11.47 11.49 11.51 T:aes128n12clocv1 11.70 11.72 11.77 T:aes128otrsv1 11.70 11.77 11.82 T:aes128otrsv2 12.21 12.35 12.70 T:seakeyakv1 12.19 12.70 13.45 T:oceankeyakv1 12.68 12.71 12.76 T:aes128otrpv1 12.68 12.72 12.80 T:aes128otrpv2 12.70 12.79 12.98 T:aes128n12silcv1 12.70 12.81 12.93 T:aes128n8silcv1 14.71 14.75 14.81 T:twine80n6t4clocv2 15.14 15.15 15.18 T:aeadaes128ocbtaglen64v1 15.12 15.16 15.18 T:aeadaes128ocbtaglen96v1 15.40 15.43 15.47 T:aes256otrsv2 15.38 15.43 15.48 T:aes256otrsv1 16.08 16.10 16.18 T:twine80n6t4clocv3 16.32 16.35 16.40 T:aes256otrpv2 16.33 16.37 16.45 T:aes256otrpv1 17.24 17.27 17.34 T:colm127v1 17.38 17.42 17.46 T:aeadaes192ocbtaglen96v1 17.41 17.44 17.49 T:aeadaes192ocbtaglen64v1 19.40 19.42 19.49 T:proest256otrv1 19.63 19.66 19.73 T:aeadaes256ocbtaglen96v1 19.67 19.69 19.70 T:aeadaes256ocbtaglen64v1 25.12 25.18 25.24 T:ketjesrv2 26.54 26.57 26.60 T:ketjesrv1 28.49? 28.95? 32.84? T:riverkeyakv1 46.03 46.07 46.10 T:proest128otrv1 46.96 47.05 47.09 T:ketjejrv1 63.52 63.56 63.65 T:aezv1 65.16 65.26 65.30 T:twine80n6clocv1 71.73 71.99 73.66 T:deoxyseq128128v13 72.45 72.55 72.64 T:deoxysneq128128v13 85.53 85.62 85.68 T:present80n6t4silcv3 98.62 98.90 101.55 T:ketjejrv2 104.10 104.23 104.39 T:deoxysneq256128v13 103.37 104.27 104.38 T:deoxyseq256128v13 128.53 128.55 128.62 T:led80n6t4silcv3 452.20 453.99 454.84 T:acorn128 1980.38 1981.05 1983.17 T:present80n6silcv1 1989.06 1990.11 1991.29 T:present80n6t4silcv2 4744.34 4745.84 4751.82 T:led80n6silcv1 4782.38 4787.16 4791.68 T:led80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.22 0.22 0.23 T:tiaoxinv1 0.22 0.22 0.24 T:tiaoxinv2 0.23 0.24 0.25 T:aegis128l 0.38 0.39 0.41 T:aezv4 0.39 0.39 0.41 T:aezv3 0.38 0.39 0.40 T:aegis128 0.40 0.40 0.43 T:aezv5 0.40 0.40 0.41 T:aegis256 0.51 0.53 0.56 T:aeadaes128ocbtaglen128v1 0.62 0.63 0.64 T:aes128otrpv3 0.65 0.66 0.68 T:aeadaes192ocbtaglen128v1 0.70 0.70 0.71 T:aes128otrcv3 0.75 0.75 0.78 T:aeadaes256ocbtaglen128v1 0.80 0.81 0.81 T:aes256otrpv3 0.85 0.85 0.88 T:deoxysneq128128v1 0.86? 0.89? 0.96? T:deoxysi128v141 0.90 0.91 0.91 T:aes256otrcv3 0.95 0.95 0.96 T:morus1280256v1 0.95 0.95 1.05 T:deoxysi256v141 0.95 0.96 0.96 T:morus1280128v1 0.97 0.97 0.97 T:morus1280128v2 0.97 0.97 0.97 T:morus1280256v2 0.97 0.98 1.01 T:deoxysneq256128v1 1.12 1.13 1.13 T:morus640128v1 1.13 1.13 1.14 T:aes128gcmv1 1.14 1.15 1.15 T:morus640128v2 1.23 1.23 1.28 T:deoxysii128v141 1.22 1.23 1.24 aes256gcmv1 1.23 1.24 1.25 T:colm0v1 1.24 1.24 1.27 T:aes256gcmv1 1.33 1.34 1.39 T:deoxyseq128128v1 1.43 1.44 1.50 T:deoxyseq256128v1 1.45 1.46 1.50 T:deoxysii256v141 1.65 1.65 1.65 T:aes128otrsv3 2.25 2.25 2.25 T:aes256otrsv3 2.43 2.43 2.44 T:norx6444v3 2.71 2.71 2.71 T:aes128n12t8clocv2 2.71 2.71 2.71 T:aes128n8t8clocv2 2.71 2.72 2.72 T:aes128n12t8clocv3 2.73 2.73 2.75 T:norx6441v2 2.76 2.76 2.76 T:norx6441v3 2.76 2.77 2.77 T:aes128n8t8silcv2 2.78 2.78 2.78 T:aes128n12t8silcv3 2.78 2.78 2.78 T:aes128n12t8silcv2 3.19 3.19 3.21 T:norx6441v1 3.75 3.77 3.82 T:seakeyakv2 3.99 3.99 3.99 T:norx3241v2 3.99 4.00 4.01 T:norx3241v3 4.07 4.09 4.09 T:norx6461v2 4.10 4.12 4.16 T:norx6461v3 4.38 4.40 4.41 T:lakekeyakv2 4.56 4.56 4.59 T:lakekeyakv1 4.72 4.74 4.79 T:norx3241v1 4.79 4.82 4.84 T:norx6461v1 5.12 5.12 5.14 T:oceankeyakv2 5.32 5.36 5.41 T:norx6444v2 5.44 5.47 5.47 T:aesjambuv1 5.74 5.76 5.77 T:norx6444v1 5.97 5.97 5.97 T:norx3261v2 5.99 6.00 6.00 T:norx3261v3 6.44 6.44 6.44 T:ascon128av11 6.43 6.45 6.46 T:ascon96v1 6.55 6.57 6.59 ascon128av12 6.70 6.71 6.73 T:riverkeyakv2 7.03 7.05 7.11 T:acorn128v2 7.23 7.25 7.26 T:acorn128v3 7.71 7.73 7.75 T:norx3261v1 7.71 7.73 7.78 T:ketjemajorv2 8.60 8.65 8.76 T:ketjeminorv2 8.70 8.71 8.74 T:lunarkeyakv2 9.48 9.48 9.52 T:ascon128v1 9.48 9.48 9.52 T:ascon128v11 9.49 9.49 9.54 ascon128v12 13.68 13.71 13.73 T:aes128otrsv2 13.71 13.73 13.75 T:aes128otrsv1 14.21 14.22 14.24 T:aes128otrpv1 14.22 14.23 14.29 T:aes128otrpv2 15.29 15.32 15.58 T:seakeyakv1 15.42 15.48 15.48 T:twine80n6t4clocv2 16.53 16.54 16.56 T:aeadaes128ocbtaglen64v1 16.54 16.56 16.56 T:aeadaes128ocbtaglen96v1 16.67 16.68 16.72 T:twine80n6t4clocv3 17.13 17.14 17.16 T:aes128n8clocv1 17.16 17.16 17.19 T:aes128n12clocv1 17.50 17.52 17.54 T:aes256otrsv2 17.50 17.53 17.55 T:aes256otrsv1 17.99 18.01 18.02 T:aes256otrpv1 18.01 18.03 18.05 T:aes256otrpv2 18.86 18.88 18.89 T:aeadaes192ocbtaglen96v1 18.87 18.91 18.92 T:aeadaes192ocbtaglen64v1 19.53 19.57 19.69 T:aes128n8silcv1 19.53 19.61 19.71 T:aes128n12silcv1 19.56 19.64 20.17 T:oceankeyakv1 21.00 21.00 21.01 T:proest256otrv1 21.17 21.19 21.21 T:aeadaes256ocbtaglen64v1 21.19 21.21 21.25 T:aeadaes256ocbtaglen96v1 29.36 29.37 29.39 T:ketjesrv1 29.81 29.81 29.82 T:ketjesrv2 30.10 30.18 30.39 T:colm127v1 31.97? 32.08? 35.93? T:riverkeyakv1 47.70 47.72 47.74 T:proest128otrv1 51.52 51.54 51.63 T:ketjejrv1 73.49 73.54 73.62 T:deoxysneq128128v13 86.66 86.66 86.66 T:present80n6t4silcv3 98.53 98.63 98.73 T:twine80n6clocv1 99.30 99.69 102.48 T:ketjejrv2 103.30 103.41 103.66 T:deoxysneq256128v13 109.66 112.05 112.10 T:deoxyseq128128v13 125.89 125.99 126.14 T:aezv1 129.53 129.74 129.75 T:led80n6t4silcv3 157.38 158.23 158.92 T:deoxyseq256128v13 504.94 509.09 509.13 T:acorn128 2995.07 2997.91 2999.33 T:present80n6t4silcv2 2997.73 2998.99 2999.86 T:present80n6silcv1 7196.50 7202.61 7210.70 T:led80n6silcv1 7247.55 7253.29 7265.44 T:led80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.24 0.25 0.25 T:aegis128l 0.28 0.29 0.30 T:tiaoxinv1 0.29 0.29 0.31 T:tiaoxinv2 0.38 0.38 0.40 T:aegis128 0.38 0.38 0.39 T:aezv4 0.39 0.39 0.41 T:aezv3 0.40 0.40 0.41 T:aezv5 0.41 0.41 0.41 T:aegis256 0.53 0.54 0.55 T:aeadaes128ocbtaglen128v1 0.62? 0.63? 0.74? T:aeadaes192ocbtaglen128v1 0.63 0.64 0.64 T:aes128otrpv3 0.72 0.72 0.72 T:aes128otrcv3 0.77 0.77 0.79 T:aeadaes256ocbtaglen128v1 0.80 0.81 0.81 T:aes256otrpv3 0.93 0.94 0.94 T:aes256otrcv3 0.98 0.98 1.00 T:deoxysneq128128v1 0.98 0.99 0.99 T:morus1280256v1 0.98 0.99 0.99 T:morus1280128v1 0.99 0.99 1.02 T:deoxysi128v141 1.00 1.00 1.00 T:morus1280128v2 1.00 1.01 1.01 T:morus1280256v2 1.09 1.09 1.13 T:deoxysneq256128v1 1.14 1.14 1.23 T:deoxysi256v141 1.14 1.15 1.16 T:morus640128v1 1.16 1.16 1.17 T:morus640128v2 1.17 1.18 1.19 T:aes128gcmv1 1.20 1.20 1.24 T:colm0v1 1.23 1.24 1.26 T:aes256gcmv1 1.29 1.30 1.31 aes256gcmv1 1.37 1.37 1.42 T:deoxysii128v141 1.43 1.43 1.47 T:deoxyseq128128v1 1.53 1.53 1.60 T:deoxyseq256128v1 1.56 1.57 1.60 T:deoxysii256v141 1.66 1.66 1.67 T:aes128otrsv3 2.26 2.26 2.26 T:aes256otrsv3 2.43 2.43 2.44 T:norx6444v3 2.68 2.68 2.71 T:aes128n8t8clocv2 2.68 2.68 2.71 T:aes128n12t8clocv2 2.67 2.71 2.71 T:aes128n12t8clocv3 2.71 2.71 2.77 T:aes128n12t8silcv3 2.72 2.73 2.74 T:norx6441v2 2.72 2.73 2.74 T:norx6441v3 2.71 2.75 2.75 T:aes128n8t8silcv2 2.71 2.77 2.77 T:aes128n12t8silcv2 3.17 3.18 3.19 T:norx6441v1 3.82 3.83 3.86 T:seakeyakv2 3.97 3.98 3.99 T:norx3241v3 3.99 4.00 4.01 T:norx3241v2 4.08 4.09 4.10 T:norx6461v2 4.07 4.09 4.10 T:norx6461v3 4.41 4.42 4.44 T:lakekeyakv2 4.51 4.53 4.55 T:lakekeyakv1 4.71 4.75 4.76 T:norx3241v1 4.76 4.77 4.79 T:norx6461v1 5.17 5.18 5.19 T:oceankeyakv2 5.34 5.36 5.37 T:norx6444v2 5.69 5.69 5.70 T:aesjambuv1 5.73 5.75 5.76 T:norx6444v1 5.95 5.99 6.01 T:norx3261v2 6.00 6.00 6.00 T:norx3261v3 6.39 6.39 6.40 T:ascon128av11 6.42 6.43 6.44 T:ascon96v1 6.49 6.51 6.53 ascon128av12 6.85 6.89 6.96 T:ketjemajorv2 7.18 7.18 7.24 T:acorn128v2 7.17 7.18 7.21 T:acorn128v3 7.19 7.20 7.21 T:riverkeyakv2 7.67 7.67 7.68 T:norx3261v1 8.43 8.45 8.47 T:ketjeminorv2 8.75 8.76 8.80 T:lunarkeyakv2 9.46 9.46 9.46 ascon128v12 9.50 9.50 9.51 T:ascon128v11 9.50 9.51 9.51 T:ascon128v1 13.80 13.81 13.82 T:aes128otrsv2 13.80 13.83 13.86 T:aes128otrsv1 14.34 14.34 14.39 T:aes128otrpv2 14.35 14.37 14.43 T:aes128otrpv1 15.44 15.45 15.46 T:twine80n6t4clocv2 15.43 15.45 15.72 T:seakeyakv1 16.62 16.62 16.63 T:twine80n6t4clocv3 16.92 16.93 16.94 T:aeadaes128ocbtaglen96v1 16.92 16.95 16.96 T:aeadaes128ocbtaglen64v1 17.58 17.62 17.63 T:aes256otrsv1 17.60 17.63 17.65 T:aes256otrsv2 17.68 17.69 17.71 T:aes128n12clocv1 17.66 17.70 17.71 T:aes128n8clocv1 18.11 18.12 18.14 T:aes256otrpv2 18.15 18.16 18.23 T:aes256otrpv1 19.25 19.26 19.28 T:aeadaes192ocbtaglen64v1 19.28 19.30 19.59 T:aeadaes192ocbtaglen96v1 19.46 19.50 19.55 T:aes128n12silcv1 19.50 19.56 19.60 T:aes128n8silcv1 19.72 19.93 20.41 T:oceankeyakv1 21.06 21.08 21.11 T:proest256otrv1 21.66 21.67 21.68 T:aeadaes256ocbtaglen64v1 21.68 21.70 21.71 T:aeadaes256ocbtaglen96v1 27.17 27.22 27.26 T:ketjesrv2 30.81 30.92 30.97 T:ketjesrv1 31.19 31.27 31.53 T:colm127v1 32.17? 32.28? 35.95? T:riverkeyakv1 47.90 48.02 48.12 T:proest128otrv1 53.01 53.02 53.07 T:ketjejrv1 86.42 86.48 86.52 T:deoxysneq128128v13 87.11 87.16 87.19 T:present80n6t4silcv3 98.55 98.69 98.75 T:twine80n6clocv1 100.22 100.26 103.62 T:ketjejrv2 109.34 109.44 112.09 T:deoxyseq128128v13 120.00 120.10 120.17 T:deoxysneq256128v13 124.43 124.48 124.58 T:aezv1 129.86 129.98 129.99 T:led80n6t4silcv3 157.95 158.42 158.73 T:deoxyseq256128v13 498.52 502.82 503.00 T:acorn128 2998.44 2998.90 3000.44 T:present80n6silcv1 2999.29 3000.01 3001.28 T:present80n6t4silcv2 7182.76 7185.44 7188.30 T:led80n6silcv1 7237.38 7241.92 7250.46 T:led80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.22 0.22 0.23 T:aezv3 0.22 0.23 0.23 T:aezv4 0.23? 0.24? 0.27? T:aezv5 0.23 0.24 0.25 T:aegis128l 0.29 0.29 0.30 T:tiaoxinv1 0.29 0.29 0.29 T:tiaoxinv2 0.38 0.40 0.40 T:aegis128 0.41 0.41 0.41 T:aegis256 0.53 0.53 0.53 T:aeadaes128ocbtaglen128v1 0.61 0.62 0.62 T:aeadaes192ocbtaglen128v1 0.63 0.63 0.65 T:aes128otrpv3 0.72 0.72 0.72 T:aes128otrcv3 0.77 0.77 0.78 T:aeadaes256ocbtaglen128v1 0.81 0.81 0.82 T:aes256otrpv3 0.93 0.93 0.94 T:aes256otrcv3 0.97 0.97 1.01 T:deoxysneq128128v1 0.99 0.99 0.99 T:morus1280128v1 0.98 0.99 0.99 T:morus1280256v1 0.99 0.99 1.02 T:deoxysi128v141 1.00 1.00 1.00 T:morus1280128v2 1.00 1.00 1.01 T:morus1280256v2 1.09 1.09 1.10 T:deoxysneq256128v1 1.12 1.12 1.16 T:deoxysi256v141 1.15 1.15 1.16 T:morus640128v1 1.16 1.17 1.17 T:morus640128v2 1.17 1.18 1.19 T:aes128gcmv1 1.20 1.23 1.24 T:colm0v1 1.24 1.25 1.26 T:aes256gcmv1 1.29 1.29 1.30 aes256gcmv1 1.36 1.37 1.37 T:deoxysii128v141 1.42 1.45 1.45 T:deoxyseq128128v1 1.51 1.53 1.53 T:deoxyseq256128v1 1.56 1.56 1.56 T:deoxysii256v141 1.66 1.67 1.67 T:aes128otrsv3 2.26 2.26 2.26 T:aes256otrsv3 2.42 2.43 2.44 T:norx6444v3 2.68 2.70 2.71 T:aes128n12t8clocv2 2.68 2.70 2.71 T:aes128n8t8clocv2 2.70 2.71 2.74 T:aes128n8t8silcv2 2.66 2.71 2.71 T:aes128n12t8clocv3 2.72 2.72 2.72 T:norx6441v3 2.73 2.73 2.73 T:norx6441v2 2.71 2.76 2.76 T:aes128n12t8silcv2 2.71 2.76 2.76 T:aes128n12t8silcv3 3.17 3.18 3.18 T:norx6441v1 3.84 3.84 3.87 T:seakeyakv2 3.96 3.99 3.99 T:norx3241v3 3.99 4.00 4.01 T:norx3241v2 4.07 4.09 4.09 T:norx6461v3 4.09 4.10 4.10 T:norx6461v2 4.42 4.43 4.45 T:lakekeyakv2 4.52 4.54 4.55 T:lakekeyakv1 4.73 4.73 4.74 T:norx3241v1 4.69 4.76 4.77 T:norx6461v1 5.17 5.18 5.19 T:oceankeyakv2 5.37 5.38 5.39 T:norx6444v2 5.69 5.70 5.70 T:aesjambuv1 5.76 5.76 5.78 T:norx6444v1 5.98 5.98 5.98 T:norx3261v3 6.00 6.00 6.02 T:norx3261v2 6.40 6.41 6.41 T:ascon128av11 6.41 6.42 6.44 T:ascon96v1 6.50 6.50 6.51 ascon128av12 6.89 6.90 6.95 T:ketjemajorv2 7.18 7.18 7.20 T:acorn128v3 7.18 7.19 7.21 T:acorn128v2 7.14 7.20 7.22 T:riverkeyakv2 7.66 7.67 7.67 T:norx3261v1 8.45 8.46 8.46 T:ketjeminorv2 8.75 8.77 8.80 T:lunarkeyakv2 9.45 9.46 9.46 ascon128v12 9.50 9.50 9.50 T:ascon128v11 9.50 9.50 9.51 T:ascon128v1 13.80 13.81 13.85 T:aes128otrsv2 13.82 13.83 13.86 T:aes128otrsv1 14.32 14.35 14.40 T:aes128otrpv2 14.36 14.41 14.44 T:aes128otrpv1 15.44 15.44 15.46 T:twine80n6t4clocv2 15.44 15.47 15.75 T:seakeyakv1 16.62 16.63 16.63 T:twine80n6t4clocv3 16.91 16.91 16.94 T:aeadaes128ocbtaglen64v1 16.90 16.93 16.97 T:aeadaes128ocbtaglen96v1 17.60 17.61 17.64 T:aes256otrsv2 17.61 17.62 17.64 T:aes256otrsv1 17.67 17.68 17.70 T:aes128n12clocv1 17.67 17.70 17.71 T:aes128n8clocv1 18.12 18.13 18.17 T:aes256otrpv1 18.16 18.18 18.21 T:aes256otrpv2 19.26 19.27 19.29 T:aeadaes192ocbtaglen64v1 19.28 19.31 19.62 T:aeadaes192ocbtaglen96v1 19.51 19.54 19.58 T:aes128n12silcv1 19.49 19.56 19.61 T:aes128n8silcv1 19.63 19.82 20.50 T:oceankeyakv1 21.07 21.09 21.09 T:proest256otrv1 21.65 21.65 21.68 T:aeadaes256ocbtaglen64v1 21.68 21.69 21.70 T:aeadaes256ocbtaglen96v1 27.20 27.24 27.26 T:ketjesrv2 30.74 30.76 30.80 T:ketjesrv1 31.13 31.17 31.23 T:colm127v1 32.11? 32.24? 35.93? T:riverkeyakv1 47.88 47.88 48.07 T:proest128otrv1 53.01 53.04 53.09 T:ketjejrv1 86.44 86.47 86.54 T:deoxysneq128128v13 87.16 87.17 87.19 T:present80n6t4silcv3 98.71 98.84 99.45 T:twine80n6clocv1 99.72 100.19 103.21 T:ketjejrv2 109.64 109.67 112.01 T:deoxyseq128128v13 119.74 119.93 120.39 T:deoxysneq256128v13 124.47 124.51 124.84 T:aezv1 129.86 129.98 129.98 T:led80n6t4silcv3 157.52 159.08 159.25 T:deoxyseq256128v13 498.83 502.67 502.77 T:acorn128 2998.12 2998.51 2999.47 T:present80n6t4silcv2 2998.14 2998.64 2999.67 T:present80n6silcv1 7181.41 7184.13 7188.00 T:led80n6silcv1 7233.44 7246.45 7250.41 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.25? 1.38? 1.48? T:aegis128 1.36? 1.38? 1.73? T:tiaoxinv1 1.23? 1.55? 1.73? T:aegis128l 1.48? 1.57? 1.79? T:aegis256 1.65 1.68 1.82 T:aezv3 1.71? 1.79? 2.30? T:aezv4 1.37? 1.80? 1.92? T:tiaoxinv2 1.79? 1.85? 2.42? T:aezv5 2.20 2.41 2.43 T:aeadaes128ocbtaglen128v1 2.93 3.04 3.08 T:aeadaes256ocbtaglen128v1 3.02 3.06 3.08 T:aes128otrpv3 3.13 3.16 3.17 T:aes128otrsv3 3.37 3.41 3.69 T:deoxysneq128128v1 3.53 3.58 3.73 T:aes256otrpv3 3.57 3.59 3.61 T:aes128n12t8clocv3 3.62? 3.76? 4.32? T:colm0v1 3.81 3.91 4.01 T:aes128otrcv3 4.07 4.08 4.09 T:aes256otrsv3 4.02 4.22 4.45 T:morus640128v1 4.25 4.27 4.38 T:deoxysi128v141 4.27? 4.48? 4.91? T:morus640128v2 4.32? 4.59? 7.23? T:aeadaes192ocbtaglen128v1 4.57 4.59 4.65 T:deoxysneq256128v1 4.42 4.60 4.60 T:aes128n8t8silcv2 4.66 4.66 4.73 T:aes128n12t8clocv2 4.70 4.73 4.75 T:aes128n8t8clocv2 4.69 4.73 4.74 T:aes128n12t8silcv2 4.69 4.73 4.74 T:aes128n12t8silcv3 4.86 4.88 5.10 T:aes256otrcv3 4.93 4.99 5.17 T:deoxysi256v141 5.09 5.13 5.13 T:morus1280256v1 5.09 5.13 5.17 T:morus1280128v1 5.41 5.43 5.54 T:morus1280128v2 5.44 5.47 5.55 T:morus1280256v2 5.48 5.55 5.60 T:deoxyseq128128v1 6.52 6.55 6.64 T:deoxyseq256128v1 6.93 6.94 6.97 T:aesjambuv1 7.11 7.31 7.44 T:aes128gcmv1 7.49 7.82 8.15 aes256gcmv1 8.86 8.95 9.27 T:norx6441v1 9.21 9.34 9.48 T:deoxysii128v141 9.58 9.58 9.58 T:norx6441v2 9.58 9.58 9.62 T:norx6441v3 9.75 9.77 9.91 T:norx3241v3 9.77 9.78 10.27 T:ascon96v1 9.77 9.81 9.87 T:norx3241v2 9.80 9.92 10.30 T:ascon128av11 9.84 9.93 10.28 T:norx3241v1 10.55 10.70 10.73 ascon128av12 10.85 10.85 11.41 T:deoxysii256v141 12.62 12.77 13.22 T:ascon128v1 12.63 12.86 13.26 T:ascon128v11 12.71 12.87 13.32 ascon128v12 13.19 13.24 13.62 T:norx6461v1 13.62 13.64 13.67 T:norx6461v3 13.90 13.97 14.01 T:norx6461v2 14.23 14.54 14.77 T:aes256gcmv1 14.97 15.00 15.00 T:norx3261v3 15.04 15.04 15.05 T:norx3261v2 15.84 15.91 15.94 T:norx6444v3 15.94 15.94 16.05 T:norx3261v1 16.71 16.79 17.00 T:riverkeyakv2 16.52 16.88 17.08 T:lakekeyakv1 19.33 19.77 19.87 T:lakekeyakv2 22.77 22.92 23.53 T:aes128n12clocv1 22.66 23.09 23.37 T:aes128n8clocv1 23.52 23.62 23.91 T:twine80n6t4clocv2 23.77 23.88 24.15 T:twine80n6t4clocv3 23.83 23.95 24.33 T:aes128otrsv2 24.01 24.19 24.80 T:aes128otrsv1 24.48 24.55 24.80 T:aes128otrpv2 24.73 24.88 25.34 T:aes128otrpv1 26.95 27.12 27.48 T:aeadaes128ocbtaglen64v1 26.96 27.34 27.63 T:aeadaes128ocbtaglen96v1 27.28 27.99 28.30 T:aes128n8silcv1 27.61 28.04 28.41 T:aes128n12silcv1 29.37 29.50 30.27 T:acorn128v3 28.97 29.55 30.02 T:acorn128v2 30.20 30.45 30.89 T:aeadaes192ocbtaglen64v1 30.20 30.46 31.17 T:aeadaes192ocbtaglen96v1 30.38 30.58 30.92 T:aes256otrsv1 30.30 30.62 30.87 T:aes256otrsv2 31.05 31.27 31.59 T:aes256otrpv1 31.08 31.27 31.64 T:aes256otrpv2 31.72 32.41 32.63 T:ketjeminorv2 34.44 34.71 35.16 T:aeadaes256ocbtaglen64v1 34.83 35.18 35.51 T:aeadaes256ocbtaglen96v1 35.12 35.30 35.73 T:seakeyakv2 38.48 38.55 38.57 T:norx6444v2 41.45 41.48 41.52 T:norx6444v1 44.84 44.86 45.03 T:colm127v1 45.59 45.64 45.80 T:ketjesrv1 46.95 47.12 47.38 T:ketjemajorv2 51.34 51.54 51.79 T:ketjesrv2 55.95 56.56 56.93 T:oceankeyakv2 58.67 59.58 64.50 T:riverkeyakv1 61.45 61.49 61.56 T:proest256otrv1 68.38 68.49 68.70 T:ketjejrv1 83.24 83.39 83.55 T:deoxysneq128128v13 93.46 93.57 93.95 T:proest128otrv1 106.11 106.15 106.17 T:present80n6t4silcv3 109.30 109.58 110.26 T:twine80n6clocv1 116.90 117.09 117.50 T:deoxysneq256128v13 116.60 117.37 118.91 T:seakeyakv1 134.89 135.30 136.09 T:aezv1 134.34 135.92 138.38 T:ketjejrv2 136.51 139.05 139.77 T:deoxyseq128128v13 140.66 140.95 141.39 T:lunarkeyakv2 153.20 153.67 153.94 T:led80n6t4silcv3 196.48 196.78 197.32 T:deoxyseq256128v13 213.11 215.01 220.38 T:oceankeyakv1 1763.40 1776.01 1776.28 T:acorn128 3352.12 3352.68 3353.74 T:present80n6t4silcv2 3354.88 3355.48 3357.20 T:present80n6silcv1 7417.24 7534.62 7757.74 T:led80n6silcv1 7485.07 7568.01 7804.12 T:led80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.30? 1.49? 1.68? T:aegis128l 1.48 1.54 1.59 T:aegis256 1.27? 1.55? 1.60? T:aegis128 1.58? 1.67? 1.86? T:tiaoxinv2 1.66? 1.69? 2.80? T:aezv3 1.70 1.70 1.83 T:aezv4 1.59? 1.73? 1.98? T:tiaoxinv1 1.78? 1.82? 2.13? T:aezv5 2.45 2.56 2.62 T:aeadaes128ocbtaglen128v1 3.07 3.09 3.23 T:aes128otrpv3 3.23? 3.33? 3.75? T:aeadaes256ocbtaglen128v1 3.32 3.34 3.35 T:aes128otrsv3 3.63 3.66 3.70 T:aes256otrpv3 3.70 3.71 3.74 T:aes128n12t8clocv3 3.95? 3.98? 5.30? T:colm0v1 4.09 4.09 4.11 T:aes128otrcv3 4.29 4.30 4.38 T:aes256otrsv3 4.28 4.45 4.75 T:morus640128v1 4.39? 4.48? 6.33? T:aeadaes192ocbtaglen128v1 4.62 4.62 4.63 T:aes128n8t8silcv2 4.62 4.64 4.70 T:aes128n8t8clocv2 4.64 4.67 4.74 T:aes128n12t8clocv2 4.74 4.75 4.76 T:aes128n12t8silcv2 4.74 4.76 4.76 T:aes128n12t8silcv3 4.69 4.87 4.95 T:morus640128v2 4.82 4.90 5.02 T:deoxysneq128128v1 5.20 5.22 5.24 T:aes256otrcv3 5.42 5.48 5.60 T:deoxysneq256128v1 5.54 5.55 5.62 T:morus1280128v1 5.52 5.60 5.64 T:morus1280256v1 5.71 5.72 5.92 T:deoxysi128v141 5.87 5.90 6.00 T:morus1280128v2 5.93 5.96 5.98 T:morus1280256v2 6.65 6.68 7.06 T:deoxysi256v141 6.84 6.84 6.99 T:aes128gcmv1 7.16 7.18 7.22 T:aesjambuv1 7.34 7.45 7.56 T:deoxyseq128128v1 7.51 7.58 7.80 aes256gcmv1 7.86 7.92 8.05 T:deoxyseq256128v1 9.05 9.10 9.17 T:norx6441v1 9.69 9.69 9.69 T:norx6441v2 9.70 9.74 9.74 T:norx6441v3 9.59 9.75 10.26 T:ascon128av11 9.55 9.88 10.23 T:ascon96v1 10.08 10.15 10.19 T:norx3241v3 10.12 10.20 10.22 T:norx3241v2 10.17 10.21 10.27 T:norx3241v1 10.52 10.56 11.16 T:deoxysii128v141 10.73 10.88 11.02 ascon128av12 12.55 12.55 13.13 T:ascon128v1 12.64 12.64 12.64 T:deoxysii256v141 12.55 12.73 13.17 T:ascon128v11 12.71 12.86 13.20 ascon128v12 13.42 13.53 13.61 T:norx6461v1 13.71 13.74 13.81 T:norx6461v3 14.11 14.11 14.12 T:norx6461v2 14.51 14.67 14.85 T:aes256gcmv1 15.16 15.28 15.28 T:norx3261v2 15.30 15.30 15.32 T:norx3261v3 16.09 16.09 16.09 T:norx6444v3 16.29 16.32 16.32 T:norx3261v1 16.31 16.64 16.83 T:lakekeyakv1 16.74 16.81 17.23 T:riverkeyakv2 19.24 19.45 19.68 T:lakekeyakv2 23.70 23.80 24.55 T:twine80n6t4clocv3 23.74 24.01 25.02 T:aes128n12clocv1 23.62 24.02 24.46 T:aes128n8clocv1 23.62 24.03 24.55 T:twine80n6t4clocv2 24.09 24.23 24.68 T:aes128otrsv2 24.27 24.47 24.80 T:aes128otrsv1 24.66 24.76 25.12 T:aes128otrpv2 24.89 25.16 25.45 T:aes128otrpv1 27.41 27.80 28.27 T:aes128n12silcv1 27.55 27.89 28.43 T:aes128n8silcv1 29.12 29.46 30.60 T:acorn128v2 29.38 29.55 30.08 T:acorn128v3 30.38 30.45 30.69 T:aeadaes128ocbtaglen64v1 30.43 30.52 30.77 T:aeadaes128ocbtaglen96v1 30.61 30.69 30.98 T:aes256otrsv1 30.66 30.72 31.09 T:aes256otrsv2 31.61 31.68 32.09 T:aes256otrpv2 31.41 31.70 31.98 T:aes256otrpv1 31.70 31.88 32.12 T:ketjeminorv2 34.01 34.09 34.41 T:aeadaes192ocbtaglen64v1 34.16 34.26 34.73 T:aeadaes192ocbtaglen96v1 35.46 35.83 36.05 T:seakeyakv2 38.79 39.06 39.18 T:norx6444v2 39.39 39.60 39.79 T:aeadaes256ocbtaglen64v1 39.64 39.73 39.95 T:aeadaes256ocbtaglen96v1 41.23 41.40 41.61 T:norx6444v1 46.02 46.16 46.73 T:colm127v1 47.02 47.12 47.45 T:ketjemajorv2 46.92 47.30 47.51 T:ketjesrv1 48.86 49.11 49.58 T:ketjesrv2 56.45 56.59 56.69 T:oceankeyakv2 58.91 59.64 64.62 T:riverkeyakv1 63.38 63.52 65.16 T:proest256otrv1 69.91 70.23 70.55 T:ketjejrv1 95.70 96.04 96.31 T:deoxysneq128128v13 95.42 96.25 100.04 T:proest128otrv1 106.75 107.29 107.52 T:present80n6t4silcv3 109.11 109.54 110.59 T:twine80n6clocv1 117.02 118.09 119.44 T:seakeyakv1 133.05 133.47 134.21 T:deoxysneq256128v13 136.10 137.20 139.34 T:deoxyseq128128v13 134.59 137.31 139.45 T:ketjejrv2 136.84 137.88 138.38 T:aezv1 141.17 141.82 142.59 T:lunarkeyakv2 154.42 154.84 155.19 T:led80n6t4silcv3 196.61 197.46 198.43 T:deoxyseq256128v13 214.17 215.91 221.46 T:oceankeyakv1 1756.41 1769.55 1769.89 T:acorn128 3355.70 3356.17 3357.44 T:present80n6t4silcv2 3355.08 3356.36 3358.54 T:present80n6silcv1 7380.91 7397.21 7407.47 T:led80n6silcv1 7415.29 7445.17 7458.63 T:led80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.14 1.17 1.23 T:aegis128 1.20? 1.23? 1.34? T:aegis128l 1.35? 1.35? 2.18? T:aezv3 1.38? 1.39? 2.20? T:aezv4 1.44 1.45 1.50 T:aezv5 1.45 1.48 1.53 T:aegis256 1.61? 1.65? 2.41? T:tiaoxinv2 1.57? 2.21? 2.41? T:tiaoxinv1 2.31? 2.55? 2.57? T:aeadaes128ocbtaglen128v1 3.07 3.09 3.10 T:aes128otrpv3 3.25 3.32 3.36 T:aeadaes256ocbtaglen128v1 3.30 3.34 3.34 T:aes128otrsv3 3.56? 3.59? 4.57? T:aes128n12t8clocv3 3.62 3.64 3.66 T:aes256otrpv3 4.00? 4.05? 5.04? T:colm0v1 4.05 4.07 4.11 T:aes128otrcv3 4.20 4.23 4.30 T:morus640128v1 4.27 4.29 4.34 T:aes256otrsv3 4.40? 4.52? 7.35? T:aeadaes192ocbtaglen128v1 4.54? 4.54? 5.49? T:aes128n8t8silcv2 4.57 4.58 4.63 T:aes128n8t8clocv2 4.57 4.59 4.64 T:aes128n12t8clocv2 4.62 4.64 4.70 T:morus640128v2 4.64 4.64 4.66 T:aes128n12t8silcv2 4.64? 4.66? 5.79? T:aes128n12t8silcv3 4.61? 4.70? 5.33? T:deoxysneq128128v1 5.16 5.23 5.28 T:aes256otrcv3 5.36? 5.38? 5.98? T:deoxysneq256128v1 5.49 5.52 5.56 T:morus1280128v1 5.51 5.54 5.62 T:morus1280256v1 5.65? 5.72? 6.34? T:deoxysi128v141 5.84 5.89 5.95 T:morus1280128v2 5.88 5.89 5.92 T:morus1280256v2 6.63 6.68 7.27 T:deoxysi256v141 6.84 6.88 6.98 T:aes128gcmv1 7.13 7.16 7.19 T:aesjambuv1 7.39 7.40 8.16 T:deoxyseq128128v1 7.73 7.79 7.81 aes256gcmv1 8.12 8.18 8.97 T:deoxyseq256128v1 9.05 9.10 9.15 T:norx6441v1 9.68 9.69 9.69 T:norx6441v2 9.74 9.80 9.85 T:norx6441v3 9.64 9.88 10.14 T:ascon128av11 9.84 9.91 10.09 T:ascon96v1 10.18 10.19 10.20 T:norx3241v3 10.18 10.19 10.23 T:norx3241v2 10.18 10.21 10.25 T:norx3241v1 10.55 10.59 10.69 T:deoxysii128v141 10.59 10.73 10.82 ascon128av12 11.97 11.98 12.12 T:deoxysii256v141 12.61 12.70 12.83 T:ascon128v1 12.70 12.76 12.82 ascon128v12 12.61 12.87 12.98 T:ascon128v11 13.42 13.54 13.59 T:norx6461v1 13.68 13.71 13.80 T:norx6461v3 14.11 14.11 14.12 T:norx6461v2 14.30 14.43 14.47 T:aes256gcmv1 15.27 15.28 15.37 T:norx3261v2 15.40 15.40 15.40 T:norx3261v3 15.99 16.08 16.08 T:norx6444v3 16.21 16.24 16.27 T:norx3261v1 16.52 16.66 16.80 T:lakekeyakv1 16.91 16.98 17.24 T:riverkeyakv2 19.26 19.30 19.35 T:lakekeyakv2 23.52 23.56 23.89 T:aes128n8clocv1 23.53 23.59 23.86 T:aes128n12clocv1 23.69 23.86 24.42 T:twine80n6t4clocv3 23.61 24.09 24.52 T:twine80n6t4clocv2 24.12 24.45 24.80 T:aes128otrsv2 24.24 24.66 25.02 T:aes128otrsv1 24.81 25.05 25.32 T:aes128otrpv2 24.95 25.27 25.46 T:aes128otrpv1 27.40 27.45 27.80 T:aes128n8silcv1 27.37 27.60 27.66 T:aes128n12silcv1 29.37 29.37 29.67 T:acorn128v3 29.16 29.45 29.96 T:acorn128v2 30.27 30.32 30.43 T:aeadaes128ocbtaglen64v1 30.41 30.45 30.55 T:aeadaes128ocbtaglen96v1 30.66 30.68 31.17 T:aes256otrsv2 30.70 30.81 31.16 T:aes256otrsv1 31.60 31.66 31.88 T:aes256otrpv2 31.44 31.75 31.94 T:aes256otrpv1 31.48 32.00 32.31 T:ketjeminorv2 33.95 34.03 34.18 T:aeadaes192ocbtaglen64v1 34.05 34.16 34.55 T:aeadaes192ocbtaglen96v1 35.45 35.72 35.88 T:seakeyakv2 39.05 39.09 39.35 T:norx6444v2 39.38 39.48 39.57 T:aeadaes256ocbtaglen64v1 39.61 39.66 40.00 T:aeadaes256ocbtaglen96v1 41.27 41.55 41.87 T:norx6444v1 45.88 45.95 46.10 T:colm127v1 47.12 47.44 47.66 T:ketjemajorv2 47.06 47.55 47.79 T:ketjesrv1 48.90 49.23 49.58 T:ketjesrv2 56.30 56.39 56.73 T:oceankeyakv2 58.91 59.33 64.77 T:riverkeyakv1 61.19 61.25 61.35 T:proest256otrv1 70.18 70.41 71.00 T:ketjejrv1 95.28 95.35 95.55 T:proest128otrv1 95.55 95.88 96.17 T:deoxysneq128128v13 106.69 107.16 107.29 T:present80n6t4silcv3 109.12 109.70 110.38 T:twine80n6clocv1 116.92 117.37 119.16 T:seakeyakv1 132.73 133.18 133.80 T:deoxysneq256128v13 135.86 136.75 138.98 T:deoxyseq128128v13 136.66 136.75 137.30 T:aezv1 134.88 138.30 139.44 T:ketjejrv2 140.98 141.22 142.21 T:lunarkeyakv2 154.38 154.90 155.23 T:led80n6t4silcv3 196.23 197.45 197.88 T:deoxyseq256128v13 213.49 215.03 221.63 T:oceankeyakv1 1755.90 1769.66 1769.77 T:acorn128 3354.76 3355.13 3357.42 T:present80n6silcv1 3355.42 3356.91 3357.79 T:present80n6t4silcv2 7386.20 7424.49 7502.95 T:led80n6silcv1 7448.52 7485.40 7543.24 T:led80n6t4silcv2