VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: aarch64; Neoverse-N1 (413fd0c1); 2021 Ampere Altra Max M128-30; 64 x 3000MHz; cfarm425, supercop-20261004

[Page version: 20261007 20:54:48]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.56 0.56 0.58 aegis128l 0.69? 0.78? 0.94? T:aeadaes128ocbtaglen128v1 0.72? 0.79? 0.80? T:aezv4 0.80 0.80 0.83 T:aezv5 0.83 0.84 0.92 aegis256 1.16? 1.17? 1.29? T:aeadaes256ocbtaglen128v1 1.24 1.30 1.31 T:morus1280256v1 1.29 1.30 1.30 T:morus1280128v1 1.30 1.31 1.33 T:morus1280256v2 1.42 1.44 1.44 T:morus1280128v2 1.47 1.48 1.49 T:aes128gcmv1 1.81 1.82 1.83 T:aes256gcmv1 2.05 2.06 2.10 T:norx6441v3 2.08 2.09 2.11 T:norx6441v2 2.51? 2.54? 2.82? T:norx6441v1 2.58 2.58 2.60 T:morus640128v2 2.64 2.66 2.68 T:norx6444v3 2.66 2.70 2.75 T:lunarkeyakv2 2.65? 2.71? 3.07? T:norx6444v2 2.96 2.98 3.10 T:morus640128v1 3.00 3.02 3.05 T:tiaoxinv1 3.01 3.03 3.04 T:norx6461v3 3.01 3.04 3.25 T:tiaoxinv2 3.01 3.04 3.07 T:norx6444v1 3.06 3.07 3.08 T:norx6461v2 3.45 3.48 3.50 T:lakekeyakv1 3.69 3.73 3.75 T:norx6461v1 3.72 3.75 3.77 T:lakekeyakv2 3.79 3.81 3.83 T:ketjemajorv2 3.84 3.87 3.90 T:oceankeyakv2 3.03? 3.89? 5.36? T:seakeyakv2 4.20 4.22 4.23 T:norx3241v3 4.22 4.26 4.60 T:norx3241v2 5.01 5.02 5.03 T:norx3241v1 5.20 5.23 5.25 ascon128av12 6.17 6.19 6.20 T:norx3261v3 6.18 6.19 6.21 T:norx3261v2 6.95 6.99 7.12 T:aegis128 7.41 7.43 7.45 T:norx3261v1 7.60 7.64 7.67 ascon128v12 8.34 8.40 8.50 T:ketjeminorv2 8.40 8.47 8.59 T:acorn128v3 8.45 8.47 8.50 T:acorn128v2 8.66 8.68 8.70 T:riverkeyakv2 8.84 8.86 8.88 T:ascon128v1 8.85 8.86 8.88 T:ascon128v11 12.02 12.04 12.05 T:ascon128av11 12.03 12.05 12.07 T:ascon96v1 12.23 12.25 12.28 T:aes128otrcv3 13.70 13.73 13.77 T:aes128otrsv1 13.71 13.74 13.76 T:aes128otrpv1 13.72 13.74 13.76 T:aes128otrpv2 13.74 13.77 13.82 T:aes128otrsv2 13.81 13.84 13.86 T:aeadaes128ocbtaglen64v1 13.83 13.87 13.92 T:aeadaes128ocbtaglen96v1 14.00 14.03 14.05 T:aes128otrsv3 14.07 14.09 14.12 T:aes128otrpv3 15.68 15.71 15.73 T:aeadaes192ocbtaglen64v1 15.70 15.73 15.77 T:aeadaes192ocbtaglen128v1 15.73 15.76 15.81 T:aeadaes192ocbtaglen96v1 15.90 15.92 15.94 T:aes256otrcv3 17.38 17.40 17.44 T:aes256otrpv1 17.40 17.42 17.45 T:aes256otrpv2 17.39 17.43 17.49 T:aes256otrsv2 17.45 17.47 17.50 T:aes256otrsv1 17.56 17.59 17.70 T:aeadaes256ocbtaglen96v1 17.56 17.61 17.65 T:aeadaes256ocbtaglen64v1 17.60 17.72 19.24 T:aes256otrsv3 17.76 17.78 17.81 T:aes256otrpv3 18.06 18.08 18.11 T:deoxysi128v141 19.38 19.42 19.44 T:proest256otrv1 20.21 20.23 20.26 T:deoxysi256v141 20.75 20.77 20.80 T:aesjambuv1 22.85 22.88 22.92 T:aes128n8t8clocv2 22.86 22.88 22.92 T:aes128n8clocv1 22.86 22.89 22.92 T:aes128n12clocv1 22.88 22.90 22.94 T:aes128n12t8clocv2 22.87 22.91 23.03 T:aes128n12t8clocv3 23.12 23.14 23.17 T:aes128n8t8silcv2 23.13 23.15 23.19 T:aes128n12t8silcv2 23.13 23.16 23.21 T:aes128n12t8silcv3 28.05 28.09 28.12 T:colm0v1 27.78 28.16 28.20 T:colm127v1 37.57 37.63 37.71 T:deoxysii128v141 44.60 44.64 44.68 T:proest128otrv1 47.04 47.21 47.28 T:ketjesrv1 48.40 48.64 49.83 T:ketjesrv2 66.39 66.47 66.54 T:deoxysneq128128v13 66.76 66.91 66.99 T:deoxysneq128128v1 72.25 72.77 75.20 T:ketjejrv1 83.09 83.15 83.25 T:deoxysneq256128v1 83.09 83.15 83.21 T:deoxysneq256128v13 99.35 99.54 99.94 T:ketjejrv2 131.65 132.74 134.01 T:deoxyseq128128v1 132.71 132.81 132.99 T:deoxyseq128128v13 134.84 134.94 135.73 T:deoxysii256v141 165.43 165.68 166.14 T:aezv1 166.27 166.41 166.51 T:deoxyseq256128v13 166.27 166.46 166.56 T:deoxyseq256128v1 172.36 173.52 174.46 T:aezv3 177.96 179.28 179.80 T:twine80n6t4clocv3 179.86 180.30 180.68 T:twine80n6t4clocv2 517.21 517.64 518.07 T:acorn128 3490.75 3493.31 3502.66 T:present80n6t4silcv3 3494.87 3501.61 3503.76 T:present80n6t4silcv2 3496.28 3504.14 3507.04 T:present80n6silcv1 8817.85 8823.55 8832.36 T:led80n6silcv1 8835.41 8843.67 8852.17 T:led80n6t4silcv2 8841.53 8848.55 8862.60 T:led80n6t4silcv3 20208.56 20216.32 20222.76 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.58 0.59 0.59 aegis128l 0.67? 0.79? 0.94? T:aeadaes128ocbtaglen128v1 0.78 0.80 0.80 T:aezv4 0.80 0.80 0.82 T:aezv5 0.82 0.83 0.86 aegis256 1.15? 1.16? 1.29? T:aeadaes256ocbtaglen128v1 1.21 1.29 1.30 T:morus1280256v1 1.28 1.29 1.30 T:morus1280128v1 1.27 1.30 1.31 T:aes128gcmv1 1.30 1.31 1.32 T:morus1280256v2 1.40 1.43 1.44 T:morus1280128v2 1.82 1.82 1.83 T:aes256gcmv1 2.05 2.06 2.08 T:norx6441v3 2.09 2.11 2.13 T:norx6441v2 2.50 2.52 2.56 T:norx6444v3 2.49? 2.53? 2.80? T:norx6441v1 2.64? 2.67? 3.09? T:norx6444v2 2.67 2.72 2.78 T:lunarkeyakv2 2.90 2.92 2.93 T:morus640128v2 2.90? 2.92? 3.34? T:morus640128v1 2.97 3.01 3.07 T:norx6444v1 3.02 3.03 3.05 T:norx6461v3 3.06 3.08 3.11 T:norx6461v2 3.45 3.47 3.49 T:lakekeyakv1 3.58 3.61 3.65 T:norx6461v1 3.76 3.78 3.79 T:lakekeyakv2 3.79 3.81 3.83 T:ketjemajorv2 3.85 3.89 3.92 T:oceankeyakv2 3.24? 3.93? 5.28? T:seakeyakv2 4.08 4.10 4.11 T:norx3241v3 4.23 4.25 4.62 T:norx3241v2 4.44 4.46 4.48 T:tiaoxinv1 4.46? 4.52? 4.99? T:tiaoxinv2 4.97 4.99 5.01 T:norx3241v1 5.10 5.11 5.13 ascon128av12 6.02 6.03 6.05 T:norx3261v3 6.14 6.15 6.18 T:norx3261v2 7.01 7.06 7.19 T:aegis128 7.20 7.24 7.26 T:norx3261v1 7.22 7.27 7.40 T:acorn128v2 7.62 7.63 7.65 ascon128v12 8.36 8.41 8.45 T:acorn128v3 8.06 8.45 8.53 T:ketjeminorv2 8.72 8.74 8.76 T:riverkeyakv2 8.82 8.87 8.98 T:ascon128v1 8.82 8.92 9.02 T:ascon128v11 12.36 12.40 12.42 T:aes128otrcv3 13.59 13.62 13.65 T:ascon96v1 13.66 13.74 13.75 T:ascon128av11 13.80 13.82 13.85 T:aes128otrsv1 13.81 13.85 13.88 T:aes128otrsv2 13.83 13.85 13.88 T:aeadaes128ocbtaglen96v1 13.84 13.86 13.88 T:aes128otrpv1 13.79 13.87 13.95 T:aeadaes128ocbtaglen64v1 13.84 13.87 13.89 T:aes128otrpv2 14.22 14.25 14.28 T:aes128otrsv3 14.27 14.31 14.36 T:aes128otrpv3 15.69 15.72 15.80 T:aeadaes192ocbtaglen64v1 15.73 15.77 15.81 T:aeadaes192ocbtaglen128v1 15.67? 15.82? 19.32? T:aeadaes192ocbtaglen96v1 16.05 16.09 16.11 T:aes256otrcv3 17.37 17.52 17.76 T:aeadaes256ocbtaglen96v1 17.46 17.55 17.59 T:aes256otrsv2 17.49 17.58 17.72 T:aeadaes256ocbtaglen64v1 17.55 17.59 17.72 T:aes256otrpv1 17.58 17.60 17.63 T:aes256otrsv1 17.57 17.60 17.63 T:aes256otrpv2 17.97 18.00 18.13 T:aes256otrsv3 17.97 18.01 18.06 T:aes256otrpv3 19.11 19.22 19.24 T:proest256otrv1 20.69 20.72 20.75 T:deoxysi128v141 20.75 20.78 20.81 T:aesjambuv1 22.36 22.39 22.42 T:aes128n12t8clocv3 22.36 22.39 22.43 T:aes128n8t8clocv2 22.36 22.40 22.43 T:aes128n12clocv1 22.39 22.41 22.44 T:aes128n12t8clocv2 22.46 22.49 22.54 T:aes128n8clocv1 22.69 22.75 22.86 T:deoxysi256v141 22.89 22.94 22.99 T:aes128n12t8silcv3 22.92 22.95 22.98 T:aes128n12t8silcv2 22.94 22.97 23.00 T:aes128n8t8silcv2 27.53 27.59 29.10 T:colm0v1 28.76 29.07 29.13 T:colm127v1 37.71 37.76 37.90 T:deoxysii128v141 44.20 44.23 44.27 T:proest128otrv1 46.66 47.21 47.70 T:ketjesrv1 47.34 47.62 47.97 T:ketjesrv2 72.82 73.10 75.27 T:ketjejrv1 93.11 93.17 93.30 T:deoxysneq128128v1 93.36? 93.46? 104.89? T:deoxysneq128128v13 95.30 95.36 95.45 T:ketjejrv2 114.64 114.94 115.25 T:deoxysneq256128v13 114.79 115.23 115.53 T:deoxysneq256128v1 132.53 132.66 132.92 T:deoxyseq128128v13 135.07 135.14 135.24 T:deoxysii256v141 165.62 165.86 167.07 T:aezv1 166.55 166.74 166.94 T:deoxyseq256128v13 173.14 173.42 173.90 T:aezv3 179.68 180.16 180.47 T:twine80n6t4clocv3 179.39 180.96 185.64 T:twine80n6t4clocv2 184.33 186.43 193.10 T:deoxyseq128128v1 232.88 234.16 238.48 T:deoxyseq256128v1 504.64 505.30 505.92 T:acorn128 3489.37 3499.37 3505.76 T:present80n6silcv1 3488.74 3508.70 3523.64 T:present80n6t4silcv3 3499.95 3516.62 3521.80 T:present80n6t4silcv2 8817.40 8821.72 8843.81 T:led80n6silcv1 8833.74 8840.63 8856.59 T:led80n6t4silcv2 8843.88 8856.54 8882.96 T:led80n6t4silcv3 20200.44 20211.78 20283.47 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.32 0.33 0.33 T:aezv5 0.32 0.33 0.34 T:aezv4 0.60 0.61 0.62 aegis128l 0.65? 0.78? 0.92? T:aeadaes128ocbtaglen128v1 0.84? 0.85? 0.94? aegis256 1.15? 1.16? 1.30? T:aeadaes256ocbtaglen128v1 1.28 1.29 1.29 T:morus1280128v1 1.27 1.29 1.32 T:morus1280256v1 1.27 1.29 1.31 T:aes128gcmv1 1.30 1.31 1.32 T:morus1280256v2 1.41 1.43 1.44 T:morus1280128v2 1.81 1.82 1.83 T:aes256gcmv1 1.99 2.08 2.10 T:norx6441v3 2.12 2.13 2.17 T:norx6441v2 2.52 2.54 2.57 T:norx6444v3 2.52? 2.55? 2.87? T:norx6441v1 2.67? 2.70? 3.08? T:norx6444v2 2.70 2.75 2.79 T:lunarkeyakv2 2.90 2.91 2.92 T:morus640128v2 2.90? 2.93? 3.33? T:morus640128v1 3.01 3.03 3.11 T:norx6444v1 3.04 3.06 3.07 T:norx6461v3 3.09 3.11 3.13 T:norx6461v2 3.48 3.49 3.51 T:lakekeyakv1 3.60 3.64 3.67 T:norx6461v1 3.78? 3.81? 4.64? T:lakekeyakv2 3.81 3.83 3.85 T:ketjemajorv2 3.85 3.90 3.93 T:oceankeyakv2 3.79? 3.95? 4.67? T:seakeyakv2 4.11 4.13 4.14 T:norx3241v3 4.26 4.27 4.65 T:norx3241v2 4.44 4.46 4.52 T:tiaoxinv1 4.45? 4.52? 4.97? T:tiaoxinv2 4.99 5.02 5.04 T:norx3241v1 5.11 5.12 5.14 ascon128av12 6.04 6.07 6.09 T:norx3261v3 6.17 6.19 6.22 T:norx3261v2 7.01 7.05 7.20 T:aegis128 7.23 7.27 7.37 T:acorn128v2 7.26 7.28 7.29 T:norx3261v1 7.62 7.63 7.65 ascon128v12 8.35 8.39 8.44 T:acorn128v3 8.17 8.48 8.55 T:ketjeminorv2 8.75 8.76 8.81 T:riverkeyakv2 8.82 8.86 8.97 T:ascon128v1 8.83 8.87 8.99 T:ascon128v11 12.07 12.08 12.10 T:ascon128av11 12.05 12.09 12.11 T:ascon96v1 12.36 12.39 12.41 T:aes128otrcv3 13.82 13.85 13.89 T:aes128otrsv1 13.84 13.87 13.90 T:aes128otrpv1 13.81 13.87 13.95 T:aeadaes128ocbtaglen64v1 13.83 13.88 13.93 T:aeadaes128ocbtaglen96v1 13.87 13.89 13.92 T:aes128otrpv2 13.87 13.90 13.94 T:aes128otrsv2 14.26 14.29 14.32 T:aes128otrsv3 14.30 14.33 14.36 T:aes128otrpv3 15.69 15.74 15.83 T:aeadaes192ocbtaglen64v1 15.73 15.76 15.81 T:aeadaes192ocbtaglen128v1 15.61? 15.80? 18.38? T:aeadaes192ocbtaglen96v1 16.07 16.09 16.11 T:aes256otrcv3 17.38 17.50 17.68 T:aeadaes256ocbtaglen96v1 17.49 17.52 17.65 T:aeadaes256ocbtaglen64v1 17.50 17.58 17.63 T:aes256otrsv2 17.57 17.62 17.65 T:aes256otrpv2 17.60 17.63 17.65 T:aes256otrsv1 17.61 17.65 18.81 T:aes256otrpv1 17.90 18.00 18.08 T:aes256otrsv3 18.01 18.05 18.07 T:aes256otrpv3 19.19 19.21 19.25 T:proest256otrv1 20.71 20.75 20.78 T:deoxysi128v141 20.75 20.79 22.76 T:aesjambuv1 22.37 22.40 22.43 T:aes128n12t8clocv3 22.38 22.40 22.43 T:aes128n12t8clocv2 22.38 22.41 22.45 T:aes128n8t8clocv2 22.39 22.42 22.45 T:aes128n12clocv1 22.46 22.49 22.53 T:aes128n8clocv1 22.71 22.77 22.88 T:deoxysi256v141 22.90 22.92 22.96 T:aes128n8t8silcv2 22.92 22.96 22.98 T:aes128n12t8silcv2 22.92 22.97 23.00 T:aes128n12t8silcv3 27.53 27.57 27.61 T:colm0v1 28.13 28.50 28.56 T:colm127v1 37.76 37.88 37.96 T:deoxysii128v141 44.20 44.22 44.26 T:proest128otrv1 47.02 47.32 48.77 T:ketjesrv1 47.36 47.56 47.92 T:ketjesrv2 72.87 73.31 75.83 T:ketjejrv1 93.11 93.22 93.36 T:deoxysneq128128v1 93.08 93.37 93.48 T:deoxysneq128128v13 95.33 95.44 95.79 T:ketjejrv2 114.69 114.97 115.24 T:deoxysneq256128v13 114.77 115.14 115.56 T:deoxysneq256128v1 132.37 132.54 132.75 T:deoxyseq128128v13 134.95 135.06 135.21 T:deoxysii256v141 165.69 165.89 168.45 T:aezv1 166.63 166.81 167.03 T:deoxyseq256128v13 173.15 173.36 173.69 T:aezv3 179.27 179.73 185.34 T:twine80n6t4clocv2 180.06 180.13 180.34 T:twine80n6t4clocv3 185.85 186.64 187.88 T:deoxyseq128128v1 232.96 236.29 239.98 T:deoxyseq256128v1 301.01 301.61 302.18 aes256gcmv1 504.86 505.41 505.92 T:acorn128 3503.17 3505.48 3506.99 T:present80n6silcv1 3490.30 3509.70 3522.61 T:present80n6t4silcv3 3505.62 3519.29 3535.78 T:present80n6t4silcv2 8816.91 8819.79 8832.29 T:led80n6silcv1 8834.48 8840.18 8853.62 T:led80n6t4silcv2 8848.30 8864.92 8883.49 T:led80n6t4silcv3

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.48 0.49 0.49 aegis128l 0.54 0.56 0.57 T:aezv4 0.57 0.57 0.58 T:aezv5 0.63? 0.73? 0.82? T:aeadaes128ocbtaglen128v1 0.75 0.76 0.77 aegis256 0.97 0.97 0.97 T:aes128gcmv1 1.11 1.11 1.13 T:aeadaes256ocbtaglen128v1 1.15 1.15 1.16 T:aes256gcmv1 1.18 1.18 1.19 T:morus1280128v1 1.17? 1.18? 1.36? T:morus1280256v1 1.18 1.19 1.30 T:morus1280256v2 1.42? 1.43? 1.61? T:morus1280128v2 2.04 2.04 2.05 T:norx6441v3 2.05 2.06 2.06 T:norx6441v2 2.31 2.33 2.34 T:norx6444v3 2.32 2.33 2.36 T:norx6444v2 2.35 2.36 2.37 T:morus640128v2 2.44 2.45 2.47 T:norx6441v1 2.67 2.69 2.71 T:norx6444v1 2.91 2.92 2.93 T:tiaoxinv2 2.91 2.93 3.23 T:tiaoxinv1 2.92 2.98 2.99 T:morus640128v1 3.00 3.01 3.01 T:norx6461v3 3.01 3.02 3.03 T:norx6461v2 3.25 3.29 3.30 T:lakekeyakv1 3.29 3.32 3.36 T:oceankeyakv2 2.96? 3.36? 4.20? T:seakeyakv2 3.33 3.36 3.39 T:lakekeyakv2 3.64 3.65 3.67 T:norx6461v1 3.77 3.77 3.78 T:ketjemajorv2 3.83? 3.86? 5.11? T:lunarkeyakv2 4.12 4.12 4.13 T:norx3241v3 4.13 4.15 4.16 T:norx3241v2 4.87 4.88 4.89 T:norx3241v1 5.05 5.07 5.09 ascon128av12 6.04 6.08 6.09 T:norx3261v2 6.03 6.10 6.11 T:norx3261v3 6.15 6.20 6.21 T:riverkeyakv2 6.85 6.87 7.01 T:aegis128 7.28 7.30 7.31 T:norx3261v1 7.56 7.58 7.60 ascon128v12 8.10 8.18 8.25 T:acorn128v2 8.40 8.42 8.46 T:acorn128v3 8.33 8.58 8.68 T:ketjeminorv2 8.70 8.73 8.75 T:ascon128v1 8.69 8.73 8.75 T:ascon128v11 12.01 12.02 12.03 T:ascon128av11 12.01 12.03 12.04 T:ascon96v1 12.30 12.32 12.33 T:aes128otrcv3 12.67 12.69 12.71 T:aes128otrsv2 12.68 12.70 12.71 T:aes128otrsv1 12.77 12.83 12.85 T:aes128otrsv3 13.80 13.81 13.83 T:aes128otrpv2 13.83 13.86 13.88 T:aes128otrpv1 13.87 13.89 13.91 T:aeadaes128ocbtaglen64v1 13.89 13.92 13.98 T:aeadaes128ocbtaglen96v1 14.09 14.11 14.12 T:aes128otrpv3 15.71 15.73 15.74 T:aeadaes192ocbtaglen64v1 15.74 15.76 15.81 T:aeadaes192ocbtaglen96v1 15.76 15.78 16.41 T:aeadaes192ocbtaglen128v1 15.99 16.01 16.03 T:aes256otrcv3 16.37 16.39 16.43 T:aes256otrsv2 16.39 16.41 16.45 T:aes256otrsv1 16.51 16.53 16.55 T:aes256otrsv3 17.32 17.34 17.37 T:aes128n8clocv1 17.33 17.35 17.36 T:aes128n12clocv1 17.31 17.36 17.38 T:aes128n8t8clocv2 17.35 17.37 17.39 T:aes128n12t8clocv2 17.35 17.37 17.39 T:aes128n12t8clocv3 17.40 17.41 17.43 T:aes128n8t8silcv2 17.40 17.42 17.45 T:aes128n12t8silcv3 17.41 17.43 17.46 T:aes128n12t8silcv2 17.49 17.51 17.53 T:aes256otrpv1 17.49 17.52 18.34 T:aes256otrpv2 17.61 17.63 17.65 T:aeadaes256ocbtaglen96v1 17.60 17.64 17.70 T:aeadaes256ocbtaglen64v1 17.76 17.78 18.07 T:aes256otrpv3 18.17 18.19 18.21 T:deoxysi128v141 19.44 19.45 19.47 T:proest256otrv1 20.31 20.33 20.35 T:deoxysi256v141 20.59 20.62 20.65 T:colm0v1 20.48 20.64 20.68 T:colm127v1 20.69 20.71 20.72 T:aesjambuv1 27.72 27.77 27.84 T:deoxysii128v141 44.10 44.52 44.62 T:ketjesrv1 44.63 44.78 44.82 T:proest128otrv1 46.29 46.40 46.49 T:ketjesrv2 66.53 66.57 66.61 T:deoxysneq128128v13 67.14 67.20 67.26 T:deoxysneq128128v1 68.15 68.42 69.79 T:ketjejrv1 83.22 83.32 88.89 T:deoxysneq256128v13 85.08 85.40 85.61 T:deoxysneq256128v1 94.89 95.11 95.33 T:ketjejrv2 98.85 99.42 99.57 T:deoxyseq128128v1 98.81 99.42 99.50 T:deoxyseq128128v13 100.56 100.68 100.80 T:deoxysii256v141 108.97 109.06 109.17 T:aezv1 124.56 124.67 124.77 T:deoxyseq256128v13 124.72 124.81 124.93 T:deoxyseq256128v1 134.02 134.16 134.33 T:aezv3 134.21 134.31 134.56 T:twine80n6t4clocv2 134.30 134.52 134.76 T:twine80n6t4clocv3 509.22 509.88 510.79 T:acorn128 2621.57 2629.26 2633.83 T:present80n6silcv1 2617.37 2629.50 2631.86 T:present80n6t4silcv3 2627.03 2630.45 2632.14 T:present80n6t4silcv2 6608.22 6631.07 6654.99 T:led80n6silcv1 6633.97 6640.05 6683.28 T:led80n6t4silcv2 6642.45 6644.19 6670.73 T:led80n6t4silcv3 10250.93 10258.10 10261.68 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.49 0.49 0.50 aegis128l 0.53 0.56 0.57 T:aezv4 0.57 0.58 0.58 T:aezv5 0.66? 0.74? 0.78? T:aeadaes128ocbtaglen128v1 0.74 0.74 0.75 aegis256 0.86 0.88 0.89 T:aes128gcmv1 1.09 1.10 1.13 T:aeadaes256ocbtaglen128v1 1.15 1.15 1.15 T:aes256gcmv1 1.16 1.17 1.17 T:morus1280128v1 1.17? 1.18? 1.34? T:morus1280256v1 1.18 1.19 1.31 T:morus1280256v2 1.40? 1.42? 1.61? T:morus1280128v2 2.03 2.04 2.23 T:norx6441v3 2.06 2.08 2.09 T:norx6441v2 2.26 2.27 2.28 T:norx6444v3 2.34 2.35 2.36 T:norx6444v2 2.45 2.47 2.48 T:norx6441v1 2.69 2.71 2.72 T:norx6444v1 2.94 2.98 3.00 T:morus640128v1 2.98 2.99 3.00 T:morus640128v2 3.00 3.01 3.02 T:norx6461v3 3.04 3.06 3.08 T:norx6461v2 3.26 3.28 3.30 T:lakekeyakv1 3.28 3.31 3.33 T:oceankeyakv2 2.92? 3.34? 3.99? T:seakeyakv2 3.33 3.35 3.36 T:lakekeyakv2 3.63 3.63 3.64 T:norx6461v1 3.63 3.64 3.86 T:tiaoxinv2 3.63? 3.66? 4.08? T:tiaoxinv1 3.80 3.81 3.82 T:ketjemajorv2 3.83? 3.86? 5.18? T:lunarkeyakv2 4.06 4.06 4.07 T:norx3241v3 4.11 4.11 4.12 T:norx3241v2 4.90 4.91 4.92 T:norx3241v1 5.06 5.08 5.12 ascon128av12 5.91 6.00 6.02 T:norx3261v3 5.99 6.03 6.05 T:norx3261v2 6.23 6.24 6.25 T:riverkeyakv2 6.89 6.92 7.06 T:aegis128 7.18 7.19 7.20 T:norx3261v1 7.24 7.29 7.51 T:acorn128v2 7.49 7.51 7.53 ascon128v12 8.36 8.38 8.41 T:acorn128v3 8.30 8.52 8.57 T:ketjeminorv2 8.73 8.76 8.78 T:ascon128v1 8.74 8.76 8.83 T:ascon128v11 12.37 12.38 12.40 T:aes128otrcv3 12.74 12.75 12.77 T:aes128otrsv2 12.75 12.77 12.83 T:aes128otrsv1 12.81 12.82 12.84 T:ascon96v1 12.82 12.86 12.89 T:ascon128av11 12.94 12.95 12.97 T:aes128otrsv3 13.86 13.89 13.92 T:aes128otrpv1 13.88 13.93 14.61 T:aes128otrpv2 13.91 13.95 14.60 T:aeadaes128ocbtaglen64v1 13.93 13.95 13.97 T:aeadaes128ocbtaglen96v1 14.19 14.22 14.23 T:aes128otrpv3 15.69 15.72 15.79 T:aeadaes192ocbtaglen96v1 15.76 15.78 15.80 T:aeadaes192ocbtaglen64v1 15.77 15.79 15.82 T:aeadaes192ocbtaglen128v1 16.07 16.09 16.11 T:aes256otrcv3 16.43 16.46 16.48 T:aes256otrsv2 16.46 16.48 17.37 T:aes256otrsv1 16.64 16.66 16.68 T:aes256otrsv3 17.08 17.10 17.12 T:aes128n12clocv1 17.05 17.11 17.13 T:aes128n8t8clocv2 17.10 17.12 17.14 T:aes128n12t8clocv2 17.10 17.12 17.14 T:aes128n12t8clocv3 17.13 17.16 17.19 T:aes128n8clocv1 17.29 17.31 18.44 T:aes128n8t8silcv2 17.30 17.32 17.35 T:aes128n12t8silcv3 17.30 17.32 17.39 T:aes128n12t8silcv2 17.52 17.56 17.65 T:aeadaes256ocbtaglen96v1 17.58 17.59 17.61 T:aes256otrpv1 17.57 17.60 17.66 T:aeadaes256ocbtaglen64v1 17.59 17.61 17.63 T:aes256otrpv2 17.87 17.89 17.90 T:aes256otrpv3 19.30 19.36 19.39 T:proest256otrv1 19.50 19.52 19.54 T:deoxysi128v141 20.35 20.38 20.65 T:colm0v1 20.67 20.71 20.72 T:aesjambuv1 20.82 20.98 21.11 T:colm127v1 21.54 21.58 21.63 T:deoxysi256v141 27.81 27.86 27.91 T:deoxysii128v141 44.45 44.52 44.56 T:proest128otrv1 44.25 44.60 44.77 T:ketjesrv1 45.79 45.84 45.96 T:ketjesrv2 68.13 68.50 70.19 T:ketjejrv1 79.86 79.97 80.09 T:deoxysneq128128v13 80.30 80.40 80.49 T:deoxysneq128128v1 92.78 92.86 92.95 T:ketjejrv2 98.85 99.32 103.89 T:deoxyseq128128v13 99.69 100.12 101.32 T:deoxysneq256128v1 99.77 100.23 101.05 T:deoxysneq256128v13 100.62 100.69 106.68 T:deoxysii256v141 109.06 109.27 109.40 T:aezv1 124.76 124.90 125.02 T:deoxyseq256128v13 125.78 126.36 126.75 T:deoxyseq128128v1 133.92 134.11 134.23 T:aezv3 133.97 134.49 138.44 T:twine80n6t4clocv2 134.13 134.68 134.85 T:twine80n6t4clocv3 160.19 161.23 161.91 T:deoxyseq256128v1 499.80 500.39 501.17 T:acorn128 2616.76 2628.38 2642.07 T:present80n6t4silcv2 2625.03 2629.50 2634.15 T:present80n6silcv1 2623.92 2638.13 2644.60 T:present80n6t4silcv3 6615.83 6632.41 6653.77 T:led80n6silcv1 6627.00 6637.19 6701.21 T:led80n6t4silcv3 6634.51 6639.57 6675.25 T:led80n6t4silcv2 10253.77 10256.66 10259.02 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.31 0.32 0.33 T:aezv4 0.34 0.34 0.34 T:aezv5 0.50 0.50 0.51 aegis128l 0.67? 0.73? 0.80? T:aeadaes128ocbtaglen128v1 0.75 0.75 0.79 aegis256 0.86 0.88 0.89 T:aes128gcmv1 1.09 1.10 1.11 T:aeadaes256ocbtaglen128v1 1.15 1.15 1.15 T:aes256gcmv1 1.16 1.17 1.17 T:morus1280128v1 1.16? 1.17? 1.34? T:morus1280256v1 1.18 1.19 1.29 T:morus1280256v2 1.40? 1.42? 1.60? T:morus1280128v2 2.04 2.06 2.24 T:norx6441v3 2.08 2.09 2.10 T:norx6441v2 2.27 2.28 2.30 T:norx6444v3 2.35 2.37 2.41 T:norx6444v2 2.47 2.48 2.50 T:norx6441v1 2.70 2.72 2.73 T:norx6444v1 2.93 2.98 3.00 T:morus640128v1 2.98 2.99 3.00 T:morus640128v2 3.01 3.02 3.08 T:norx6461v3 3.05 3.07 3.09 T:norx6461v2 3.25 3.29 3.35 T:lakekeyakv1 3.29 3.32 3.34 T:oceankeyakv2 3.03? 3.35? 4.09? T:seakeyakv2 3.35 3.37 3.37 T:lakekeyakv2 3.62 3.64 3.67 T:tiaoxinv1 3.62 3.64 3.98 T:tiaoxinv2 3.64 3.65 3.66 T:norx6461v1 3.82 3.82 3.83 T:ketjemajorv2 3.84? 3.87? 5.14? T:lunarkeyakv2 4.06 4.07 4.09 T:norx3241v3 4.12 4.13 4.14 T:norx3241v2 4.91 4.93 4.94 T:norx3241v1 5.05 5.07 5.08 ascon128av12 5.90 6.00 6.02 T:norx3261v3 6.01 6.04 6.06 T:norx3261v2 6.24 6.25 6.26 T:riverkeyakv2 6.89 6.92 7.07 T:aegis128 7.19 7.20 7.21 T:norx3261v1 7.24 7.30 7.48 T:acorn128v2 7.46 7.50 7.52 ascon128v12 8.37 8.39 8.41 T:acorn128v3 8.33 8.54 8.58 T:ketjeminorv2 8.74 8.76 8.80 T:ascon128v1 8.75 8.77 8.84 T:ascon128v11 12.03 12.04 12.06 T:ascon128av11 12.05 12.06 12.09 T:ascon96v1 12.37 12.39 12.41 T:aes128otrcv3 12.76 12.77 12.79 T:aes128otrsv2 12.77 12.78 12.81 T:aes128otrsv1 12.96 12.97 12.99 T:aes128otrsv3 13.89 13.91 13.97 T:aes128otrpv2 13.88 13.93 13.96 T:aes128otrpv1 13.89 13.93 13.96 T:aeadaes128ocbtaglen64v1 13.91 13.95 14.42 T:aeadaes128ocbtaglen96v1 14.21 14.22 14.24 T:aes128otrpv3 15.69 15.73 15.79 T:aeadaes192ocbtaglen96v1 15.76 15.77 15.79 T:aeadaes192ocbtaglen64v1 15.78 15.80 16.68 T:aeadaes192ocbtaglen128v1 16.07 16.09 16.10 T:aes256otrcv3 16.45 16.48 16.51 T:aes256otrsv2 16.48 16.49 16.51 T:aes256otrsv1 16.66 16.67 16.69 T:aes256otrsv3 17.09 17.10 17.12 T:aes128n12clocv1 17.10 17.11 17.13 T:aes128n12t8clocv3 17.10 17.12 17.14 T:aes128n12t8clocv2 17.10 17.12 17.16 T:aes128n8t8clocv2 17.14 17.16 17.19 T:aes128n8clocv1 17.29 17.31 17.33 T:aes128n8t8silcv2 17.29 17.31 17.35 T:aes128n12t8silcv3 17.30 17.33 17.37 T:aes128n12t8silcv2 17.53 17.56 17.66 T:aeadaes256ocbtaglen96v1 17.56 17.59 17.69 T:aeadaes256ocbtaglen64v1 17.60 17.61 17.63 T:aes256otrpv2 17.59 17.61 18.75 T:aes256otrpv1 17.89 17.90 17.92 T:aes256otrpv3 19.35 19.36 19.38 T:proest256otrv1 19.51 19.53 19.55 T:deoxysi128v141 20.34 20.39 22.25 T:colm0v1 20.69 20.72 20.74 T:aesjambuv1 20.63 20.85 20.88 T:colm127v1 21.55 21.58 21.66 T:deoxysi256v141 27.76 27.82 27.92 T:deoxysii128v141 44.44 44.51 44.54 T:proest128otrv1 44.24 44.69 44.86 T:ketjesrv1 45.75 45.83 46.21 T:ketjesrv2 68.09 68.51 69.91 T:ketjejrv1 79.90 80.01 80.13 T:deoxysneq128128v13 80.31 80.37 80.44 T:deoxysneq128128v1 92.76 92.88 93.02 T:ketjejrv2 99.17 99.28 99.35 T:deoxyseq128128v13 99.82 100.23 103.30 T:deoxysneq256128v1 99.57 100.25 101.23 T:deoxysneq256128v13 100.62 100.70 100.77 T:deoxysii256v141 109.03 109.16 109.35 T:aezv1 124.82 124.97 125.18 T:deoxyseq256128v13 126.03 126.35 126.53 T:deoxyseq128128v1 133.85 134.05 134.21 T:aezv3 133.99 134.51 138.36 T:twine80n6t4clocv2 134.40 134.85 134.93 T:twine80n6t4clocv3 160.53 161.32 161.84 T:deoxyseq256128v1 301.51 301.69 302.06 aes256gcmv1 499.74 500.35 501.05 T:acorn128 2622.61 2629.74 2633.96 T:present80n6silcv1 2622.59 2637.39 2658.37 T:present80n6t4silcv3 2632.92 2640.22 2642.09 T:present80n6t4silcv2 6615.43 6633.20 6660.28 T:led80n6silcv1 6632.03 6636.33 6695.64 T:led80n6t4silcv3 6634.47 6639.53 6681.46 T:led80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.32 0.33 0.33 T:aezv4 0.32 0.33 0.34 T:aezv5 0.41 0.42 0.43 aegis128l 0.47 0.48 0.49 T:aes128gcmv1 0.48 0.49 0.49 T:aes256gcmv1 0.67 0.67 0.68 aegis256 0.56? 0.67? 0.74? T:aeadaes128ocbtaglen128v1 1.05 1.05 1.07 T:morus1280256v1 1.04 1.06 1.07 T:morus1280256v2 1.05 1.06 1.08 T:morus1280128v1 1.07 1.07 1.08 T:aeadaes256ocbtaglen128v1 1.41 1.42 1.44 T:morus1280128v2 1.98 2.00 2.01 T:norx6444v3 1.99 2.01 2.03 T:norx6441v2 2.01 2.02 2.04 T:norx6444v2 2.01 2.03 2.04 T:norx6441v3 2.12 2.13 2.14 T:morus640128v2 2.36 2.37 2.38 T:norx6444v1 2.38 2.39 2.40 T:norx6441v1 2.33 2.42 2.48 T:lunarkeyakv2 2.38 2.44 2.54 T:oceankeyakv2 2.78 2.82 2.83 T:tiaoxinv2 2.78 2.82 2.83 T:tiaoxinv1 2.93 2.95 2.97 T:lakekeyakv2 2.96 2.98 2.99 T:norx6461v2 2.98 2.99 3.00 T:morus640128v1 2.99 3.00 3.01 T:norx6461v3 2.98? 3.02? 3.34? T:seakeyakv2 3.08 3.12 3.15 T:lakekeyakv1 3.45 3.59 3.61 T:norx6461v1 3.74 3.76 3.78 T:ketjemajorv2 4.02 4.03 4.05 T:norx3241v3 4.03 4.07 4.10 T:norx3241v2 4.72 4.73 4.74 T:norx3241v1 4.88 4.94 5.00 ascon128av12 5.63 5.70 5.71 T:riverkeyakv2 5.95 5.97 5.99 T:norx3261v2 6.03 6.04 6.05 T:norx3261v3 6.72 6.80 6.92 T:aegis128 7.16 7.18 7.19 T:norx3261v1 7.49 7.51 7.55 ascon128v12 7.73 7.77 7.81 T:acorn128v2 8.31 8.35 8.38 T:acorn128v3 8.52 8.57 8.62 T:ascon128v1 8.52 8.58 8.61 T:ascon128v11 8.53 8.95 9.01 T:ketjeminorv2 11.63 11.65 11.67 T:aes128otrsv2 11.65 11.66 11.69 T:aes128otrsv1 11.64 11.66 11.69 T:aes128n12t8silcv2 11.64 11.67 11.69 T:aes128otrsv3 11.65 11.67 11.70 T:aes128n8t8silcv2 11.64? 11.70? 12.95? T:aes128n12t8silcv3 11.78 11.81 11.84 T:aes128n8clocv1 11.77 11.81 11.85 T:aes128n12t8clocv3 11.78 11.81 11.83 T:aes128n12clocv1 11.80 11.83 11.85 T:aes128n8t8clocv2 11.80 11.83 11.86 T:aes128n12t8clocv2 11.96 11.99 12.01 T:ascon96v1 12.01 12.03 12.05 T:ascon128av11 12.37 12.39 12.41 T:aes128otrcv3 13.15 13.18 13.22 T:colm0v1 13.15 13.19 14.24 T:colm127v1 13.85 13.87 13.93 T:aes128otrpv2 13.92 13.96 13.98 T:aeadaes128ocbtaglen64v1 13.93 13.96 14.02 T:aeadaes128ocbtaglen96v1 13.91 13.97 14.00 T:aes128otrpv1 14.09 14.12 14.17 T:aes128otrpv3 15.31 15.33 15.37 T:aes256otrsv1 15.31 15.35 15.40 T:aes256otrsv2 15.31 15.37 15.42 T:aes256otrsv3 15.73 15.76 15.78 T:aeadaes192ocbtaglen64v1 15.73 15.78 15.83 T:aeadaes192ocbtaglen96v1 15.76 15.79 15.82 T:aeadaes192ocbtaglen128v1 16.07 16.09 16.12 T:aes256otrcv3 17.57 17.60 17.62 T:aes256otrpv2 17.63 17.65 17.68 T:aeadaes256ocbtaglen96v1 17.58 17.66 19.02 T:aes256otrpv1 17.63 17.66 17.73 T:aeadaes256ocbtaglen64v1 17.74 17.78 18.81 T:aes256otrpv3 17.83 17.86 17.88 T:deoxysii128v141 18.28 18.31 18.36 T:deoxysi128v141 19.48 19.52 19.55 T:proest256otrv1 20.38 20.41 20.44 T:deoxysi256v141 20.61 20.64 20.71 T:aesjambuv1 41.83 42.37 42.40 T:ketjesrv1 43.84 44.01 44.11 T:ketjesrv2 44.50 44.57 44.68 T:proest128otrv1 52.94 53.02 53.14 T:aezv1 63.19 63.72 65.19 T:ketjejrv1 65.76 65.88 65.98 T:deoxyseq128128v13 66.01 66.32 67.14 T:deoxyseq128128v1 66.33 66.40 66.50 T:deoxysii256v141 66.63 66.73 66.81 T:deoxysneq128128v13 67.50 67.58 67.65 T:deoxysneq128128v1 82.66 82.86 83.08 T:deoxyseq256128v13 83.20 83.26 83.40 T:deoxyseq256128v1 83.24 83.30 83.40 T:deoxysneq256128v13 86.01 86.41 87.44 T:deoxysneq256128v1 88.93 89.07 89.48 T:twine80n6t4clocv2 88.86 89.35 89.66 T:twine80n6t4clocv3 90.25 90.39 90.61 T:ketjejrv2 94.67 94.91 95.12 T:aezv3 301.27 301.58 301.95 aes256gcmv1 501.05 502.52 504.25 T:acorn128 1743.80 1746.86 1760.82 T:present80n6t4silcv2 1747.92 1759.29 1760.80 T:present80n6silcv1 1754.31 1760.60 1769.40 T:present80n6t4silcv3 4407.48 4409.99 4431.72 T:led80n6silcv1 4419.50 4425.81 4447.56 T:led80n6t4silcv2 4424.30 4437.96 4440.68 T:led80n6t4silcv3

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.32 0.33 0.33 T:aezv4 0.34 0.35 0.35 T:aezv5 0.42 0.42 0.42 aegis128l 0.47 0.47 0.48 T:aes256gcmv1 0.47 0.47 0.48 T:aes128gcmv1 0.65 0.65 0.66 aegis256 0.60? 0.67? 0.72? T:aeadaes128ocbtaglen128v1 1.04 1.05 1.06 T:morus1280256v1 1.04 1.05 1.06 T:morus1280128v1 1.05 1.06 1.07 T:morus1280256v2 1.06 1.06 1.07 T:aeadaes256ocbtaglen128v1 1.39 1.40 1.42 T:morus1280128v2 2.01 2.01 2.03 T:norx6441v3 2.02 2.03 2.05 T:norx6444v3 2.03 2.04 2.05 T:norx6441v2 2.03 2.04 2.05 T:norx6444v2 2.38 2.42 2.47 T:lunarkeyakv2 2.42 2.43 2.44 T:norx6444v1 2.42 2.44 2.46 T:norx6441v1 2.42 2.46 2.58 T:oceankeyakv2 2.56 2.79 2.81 T:tiaoxinv2 2.78 2.80 2.82 T:tiaoxinv1 2.94 2.95 3.01 T:lakekeyakv2 2.97 2.98 2.99 T:norx6461v3 2.99 3.01 3.17 T:seakeyakv2 3.00 3.01 3.02 T:norx6461v2 3.04 3.06 3.07 T:morus640128v1 3.06 3.06 3.07 T:morus640128v2 3.08 3.10 3.13 T:lakekeyakv1 3.44 3.56 3.58 T:norx6461v1 3.74 3.76 3.78 T:ketjemajorv2 3.99 4.00 4.01 T:norx3241v2 4.02 4.04 4.05 T:norx3241v3 4.82 4.84 4.85 T:norx3241v1 4.95 4.97 5.00 ascon128av12 5.67 5.70 5.71 T:riverkeyakv2 5.85 5.89 5.93 T:norx3261v2 5.92 5.97 5.98 T:norx3261v3 6.73 6.86 6.93 T:aegis128 7.10 7.13 7.14 T:norx3261v1 7.22 7.31 7.60 T:acorn128v2 7.38 7.40 7.44 ascon128v12 8.35 8.38 8.41 T:acorn128v3 8.66 8.69 8.71 T:ascon128v11 8.67 8.69 8.70 T:ascon128v1 8.71 8.95 9.03 T:ketjeminorv2 11.63 11.65 11.67 T:aes128otrsv2 11.64 11.67 11.69 T:aes128otrsv3 11.65 11.67 11.69 T:aes128otrsv1 11.65 11.67 11.70 T:aes128n12t8silcv2 11.64 11.67 11.80 T:aes128n12t8silcv3 11.65 11.68 11.71 T:aes128n8t8silcv2 11.78 11.79 11.81 T:aes128n12clocv1 11.77 11.80 11.82 T:aes128n8clocv1 11.79 11.81 11.84 T:aes128n12t8clocv3 11.79 11.82 11.84 T:aes128n12t8clocv2 11.80 11.82 11.84 T:aes128n8t8clocv2 11.98 12.00 12.01 T:ascon128av11 12.00 12.02 12.05 T:ascon96v1 12.37 12.39 12.42 T:aes128otrcv3 13.10 13.15 13.20 T:colm0v1 13.18 13.62 14.56 T:colm127v1 13.88 13.91 13.98 T:aes128otrpv2 13.88 13.92 13.98 T:aes128otrpv1 13.95 13.97 14.00 T:aeadaes128ocbtaglen96v1 13.93 13.98 14.01 T:aeadaes128ocbtaglen64v1 14.10 14.12 14.14 T:aes128otrpv3 15.32 15.35 15.39 T:aes256otrsv1 15.33 15.36 15.42 T:aes256otrsv2 15.34 15.37 15.46 T:aes256otrsv3 15.76 15.81 15.84 T:aeadaes192ocbtaglen96v1 15.78 15.81 15.84 T:aeadaes192ocbtaglen128v1 15.81 15.84 15.87 T:aeadaes192ocbtaglen64v1 16.07 16.09 16.12 T:aes256otrcv3 17.57 17.60 17.63 T:aes256otrpv1 17.58 17.61 17.63 T:aes256otrpv2 17.64 17.66 17.69 T:aeadaes256ocbtaglen64v1 17.63 17.67 17.71 T:aeadaes256ocbtaglen96v1 17.73 17.76 17.80 T:aes256otrpv3 17.81 17.85 17.90 T:deoxysii128v141 18.17 18.34 18.41 T:deoxysi128v141 19.48 19.53 19.56 T:proest256otrv1 20.35 20.38 20.44 T:deoxysi256v141 20.64 20.66 20.70 T:aesjambuv1 41.39 41.94 42.11 T:ketjesrv1 43.94 44.06 44.37 T:ketjesrv2 44.47 44.60 44.73 T:proest128otrv1 52.99 53.05 53.23 T:aezv1 63.15 63.66 64.60 T:ketjejrv1 65.88 65.97 66.06 T:deoxyseq128128v13 66.23 66.32 66.45 T:deoxysii256v141 66.16 66.40 68.48 T:deoxyseq128128v1 66.53 66.73 66.81 T:deoxysneq128128v13 67.27 67.38 67.53 T:deoxysneq128128v1 82.86 82.99 83.14 T:deoxyseq256128v13 83.12 83.27 83.46 T:deoxyseq256128v1 83.37 84.48 85.41 T:deoxysneq256128v13 85.76 86.16 86.43 T:deoxysneq256128v1 88.90 89.00 89.09 T:twine80n6t4clocv3 89.19 90.31 92.65 T:twine80n6t4clocv2 90.13 90.37 90.51 T:ketjejrv2 94.77 94.99 95.28 T:aezv3 300.95 301.20 301.71 aes256gcmv1 497.14 498.40 499.62 T:acorn128 1743.70 1744.31 1751.19 T:present80n6t4silcv2 1748.59 1760.33 1761.72 T:present80n6silcv1 1760.06 1761.16 1762.08 T:present80n6t4silcv3 4408.09 4410.76 4432.93 T:led80n6silcv1 4420.27 4421.42 4423.27 T:led80n6t4silcv3 4425.18 4442.38 4446.71 T:led80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.32 0.33 0.33 T:aezv4 0.34 0.34 0.35 T:aezv5 0.41 0.43 0.43 aegis128l 0.47 0.47 0.48 T:aes256gcmv1 0.46 0.47 0.50 T:aes128gcmv1 0.65 0.66 0.67 aegis256 0.59? 0.67? 0.74? T:aeadaes128ocbtaglen128v1 1.01 1.05 1.06 T:morus1280256v1 1.03 1.05 1.06 T:morus1280128v1 1.05 1.06 1.07 T:morus1280256v2 1.06 1.06 1.07 T:aeadaes256ocbtaglen128v1 1.39 1.39 1.41 T:morus1280128v2 1.99 2.01 2.02 T:norx6441v3 2.01 2.03 2.05 T:norx6444v3 2.03 2.04 2.06 T:norx6441v2 2.04 2.05 2.06 T:norx6444v2 2.33 2.42 2.47 T:lunarkeyakv2 2.38 2.43 2.44 T:norx6444v1 2.43 2.44 2.45 T:norx6441v1 2.42 2.45 2.54 T:oceankeyakv2 2.75 2.80 2.82 T:tiaoxinv2 2.79 2.80 2.82 T:tiaoxinv1 2.92 2.95 3.00 T:lakekeyakv2 2.96 2.97 2.99 T:norx6461v3 2.97 3.00 3.02 T:seakeyakv2 3.00 3.02 3.04 T:norx6461v2 3.04 3.06 3.07 T:morus640128v1 3.05 3.06 3.07 T:morus640128v2 3.08 3.10 3.12 T:lakekeyakv1 3.53 3.57 3.58 T:norx6461v1 3.74 3.76 3.79 T:ketjemajorv2 3.99 4.00 4.01 T:norx3241v2 4.02 4.04 4.05 T:norx3241v3 4.81 4.84 4.86 T:norx3241v1 4.95 4.97 4.99 ascon128av12 5.70 5.71 5.72 T:riverkeyakv2 5.85 5.90 5.94 T:norx3261v2 5.92 5.94 5.97 T:norx3261v3 6.74 6.79 6.92 T:aegis128 7.11 7.13 7.15 T:norx3261v1 7.25 7.31 7.63 T:acorn128v2 7.35 7.38 7.40 ascon128v12 8.34 8.38 8.42 T:acorn128v3 8.67 8.69 8.70 T:ascon128v1 8.68 8.69 8.70 T:ascon128v11 8.70 8.95 9.04 T:ketjeminorv2 11.64 11.66 11.68 T:aes128otrsv2 11.61 11.67 11.70 T:aes128otrsv1 11.63 11.67 11.70 T:aes128n12t8silcv2 11.61 11.67 11.70 T:aes128n12t8silcv3 11.65 11.68 11.70 T:aes128otrsv3 11.66 11.69 11.73 T:aes128n8t8silcv2 11.77 11.80 11.82 T:aes128n8clocv1 11.78 11.80 11.82 T:aes128n12clocv1 11.78 11.82 11.85 T:aes128n12t8clocv3 11.80 11.83 11.85 T:aes128n12t8clocv2 11.81 11.83 11.85 T:aes128n8t8clocv2 11.99 12.01 12.02 T:ascon128av11 11.99 12.02 12.06 T:ascon96v1 12.36 12.40 12.42 T:aes128otrcv3 13.13 13.18 13.22 T:colm0v1 13.12 13.18 14.40 T:colm127v1 13.87 13.90 13.95 T:aes128otrpv1 13.88 13.90 13.95 T:aes128otrpv2 13.94 13.97 13.99 T:aeadaes128ocbtaglen64v1 13.96 13.98 14.00 T:aeadaes128ocbtaglen96v1 14.10 14.13 14.17 T:aes128otrpv3 15.31 15.34 15.37 T:aes256otrsv2 15.31 15.34 15.37 T:aes256otrsv1 15.35 15.38 15.92 T:aes256otrsv3 15.74 15.76 15.79 T:aeadaes192ocbtaglen96v1 15.78 15.82 15.84 T:aeadaes192ocbtaglen128v1 15.80 15.84 15.87 T:aeadaes192ocbtaglen64v1 16.06 16.09 16.13 T:aes256otrcv3 17.32 17.58 17.62 T:aes256otrpv1 17.57 17.60 17.63 T:aes256otrpv2 17.63 17.67 17.69 T:aeadaes256ocbtaglen64v1 17.65 17.68 17.73 T:aeadaes256ocbtaglen96v1 17.74 17.76 17.78 T:aes256otrpv3 17.83 17.86 17.91 T:deoxysii128v141 18.29 18.34 18.40 T:deoxysi128v141 19.47 19.52 19.56 T:proest256otrv1 20.37 20.41 20.47 T:deoxysi256v141 20.64 20.67 20.69 T:aesjambuv1 41.33 41.83 42.10 T:ketjesrv1 43.78 44.00 44.13 T:ketjesrv2 44.58 44.65 44.70 T:proest128otrv1 53.00 53.08 53.30 T:aezv1 63.21 63.74 64.63 T:ketjejrv1 65.89 66.00 66.11 T:deoxyseq128128v13 65.95 66.26 66.41 T:deoxyseq128128v1 66.25 66.33 66.40 T:deoxysii256v141 66.64 66.73 66.81 T:deoxysneq128128v13 67.28 67.41 67.61 T:deoxysneq128128v1 82.82 83.04 83.29 T:deoxyseq256128v13 83.06 83.24 83.43 T:deoxyseq256128v1 83.35 83.56 85.04 T:deoxysneq256128v13 85.60 85.99 86.42 T:deoxysneq256128v1 88.95 89.16 89.67 T:twine80n6t4clocv3 88.92 89.30 91.56 T:twine80n6t4clocv2 90.13 90.37 90.51 T:ketjejrv2 94.79 94.96 95.18 T:aezv3 301.09 301.47 302.00 aes256gcmv1 496.45 498.29 499.78 T:acorn128 1744.24 1750.54 1760.70 T:present80n6silcv1 1745.18 1760.22 1761.56 T:present80n6t4silcv3 1760.02 1760.46 1761.63 T:present80n6t4silcv2 4407.75 4410.63 4431.00 T:led80n6silcv1 4420.85 4422.17 4424.59 T:led80n6t4silcv3 4425.19 4444.13 4447.04 T:led80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.59 0.59 0.60 aegis128l 0.65 0.66 0.66 T:aezv4 0.66 0.66 0.73 T:aezv5 0.87 0.87 0.88 aegis256 0.95 0.96 1.03 T:aeadaes128ocbtaglen128v1 1.21 1.22 1.22 T:aes128gcmv1 1.24 1.24 1.25 T:aeadaes256ocbtaglen128v1 1.40 1.40 1.40 T:aes256gcmv1 1.45 1.45 1.46 T:morus1280256v1 1.46 1.46 1.47 T:morus1280128v1 1.47 1.51 1.57 T:morus1280256v2 1.70 1.71 1.71 T:morus1280128v2 2.43 2.43 2.44 T:norx6441v3 2.44 2.44 2.45 T:norx6441v2 2.65 2.66 2.66 T:morus640128v2 2.83 2.83 2.84 T:norx6441v1 3.25 3.26 3.28 T:morus640128v1 3.37 3.38 3.39 T:norx6444v2 3.37 3.38 3.39 T:norx6444v3 3.55 3.56 3.57 T:norx6461v2 3.54 3.56 3.84 T:norx6461v3 3.76 3.77 3.78 T:lakekeyakv2 3.94 3.95 3.96 T:norx6444v1 3.98 3.99 4.00 T:lakekeyakv1 3.99 4.00 4.01 T:tiaoxinv1 4.00 4.01 4.02 T:tiaoxinv2 4.18 4.19 4.19 T:norx6461v1 4.52 4.52 4.53 T:norx3241v3 4.53 4.55 4.56 T:norx3241v2 4.69 4.69 4.70 T:ketjemajorv2 4.74 4.75 4.79 T:seakeyakv2 5.21 5.22 5.24 ascon128av12 5.34 5.34 5.35 T:norx3241v1 5.98 5.99 6.01 T:oceankeyakv2 6.55? 6.56? 7.31? T:riverkeyakv2 6.62 6.63 6.65 T:norx3261v3 6.62 6.63 6.64 T:norx3261v2 7.54 7.55 7.66 T:aegis128 7.70 7.71 7.73 ascon128v12 7.96 7.97 7.97 T:norx3261v1 8.84 8.88 8.89 T:ascon128v11 8.86 8.88 8.89 T:ascon128v1 8.95 8.99 9.04 T:acorn128v2 9.16 9.19 9.22 T:acorn128v3 9.22 9.25 9.33 T:ketjeminorv2 10.04 10.06 10.09 T:lunarkeyakv2 12.28 12.29 12.30 T:ascon128av11 12.29 12.31 12.80 T:ascon96v1 12.75 12.76 12.77 T:aes128otrcv3 13.04 13.05 13.06 T:aes128otrsv1 13.05 13.05 13.07 T:aes128otrsv2 13.18 13.19 13.21 T:aes128otrsv3 14.14 14.15 14.16 T:aes128otrpv2 14.16 14.18 14.20 T:aes128otrpv1 14.28 14.29 14.74 T:aeadaes128ocbtaglen64v1 14.28 14.30 14.35 T:aeadaes128ocbtaglen96v1 14.44 14.45 14.47 T:aes128otrpv3 16.18 16.19 16.20 T:aeadaes192ocbtaglen64v1 16.20 16.21 16.25 T:aeadaes192ocbtaglen96v1 16.21 16.22 16.23 T:aeadaes192ocbtaglen128v1 16.55 16.56 16.58 T:aes256otrcv3 16.82 16.84 16.87 T:aes256otrsv2 16.85 16.86 16.88 T:aes256otrsv1 16.97 16.99 17.01 T:aes256otrsv3 17.51 17.53 17.54 T:aes128n8t8clocv2 17.53 17.54 17.55 T:aes128n12t8clocv2 17.53 17.54 17.57 T:aes128n8clocv1 17.54 17.55 17.57 T:aes128n12clocv1 17.53 17.55 17.57 T:aes128n12t8clocv3 17.70 17.71 17.73 T:aes128n12t8silcv2 17.70 17.72 17.74 T:aes128n8t8silcv2 17.72 17.73 17.75 T:aes128n12t8silcv3 17.92 17.93 17.94 T:aes256otrpv1 17.93 17.94 17.95 T:aes256otrpv2 18.12 18.14 18.15 T:aeadaes256ocbtaglen96v1 18.12 18.14 18.19 T:aeadaes256ocbtaglen64v1 18.20 18.21 18.22 T:aes256otrpv3 18.73 18.75 18.77 T:deoxysi128v141 21.03 21.05 21.06 T:aesjambuv1 21.17 21.18 21.20 T:proest256otrv1 21.19 21.21 21.22 T:colm127v1 21.21 21.24 22.07 T:colm0v1 21.35 21.36 21.38 T:deoxysi256v141 28.42 28.45 28.50 T:deoxysii128v141 45.76 45.82 45.92 T:ketjesrv1 46.52 46.54 46.56 T:proest128otrv1 47.64 47.83 48.21 T:ketjesrv2 66.98 67.02 67.07 T:deoxysneq128128v13 67.55 67.60 67.66 T:deoxysneq128128v1 69.18 69.38 70.86 T:ketjejrv1 83.74 83.79 84.07 T:deoxysneq256128v13 85.56 85.77 85.92 T:deoxysneq256128v1 96.49 96.79 97.37 T:ketjejrv2 100.08 100.18 100.35 T:deoxyseq128128v1 100.30 100.43 100.48 T:deoxyseq128128v13 101.14 101.20 101.28 T:deoxysii256v141 104.92 105.05 105.17 T:aezv1 125.72 125.82 125.89 T:deoxyseq256128v1 125.90 126.03 126.10 T:deoxyseq256128v13 131.99 132.08 132.23 T:aezv3 134.76 134.92 135.15 T:twine80n6t4clocv3 134.74 134.93 135.09 T:twine80n6t4clocv2 571.12 571.44 571.85 T:acorn128 2637.04 2643.03 2645.23 T:present80n6t4silcv2 2640.32 2644.79 2645.64 T:present80n6t4silcv3 2638.67 2646.30 2647.60 T:present80n6silcv1 6645.24 6646.88 6660.15 T:led80n6silcv1 6665.23 6667.68 6673.09 T:led80n6t4silcv2 6667.45 6673.27 6675.10 T:led80n6t4silcv3 10464.39 10466.76 10468.17 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.61 0.61 0.62 aegis128l 0.66 0.66 0.66 T:aezv4 0.66 0.67 0.72 T:aezv5 0.87 0.87 0.89 aegis256 0.94 0.95 1.00 T:aeadaes128ocbtaglen128v1 1.12 1.13 1.13 T:aes128gcmv1 1.24 1.24 1.25 T:aeadaes256ocbtaglen128v1 1.41 1.41 1.41 T:aes256gcmv1 1.45 1.45 1.45 T:morus1280256v1 1.45 1.46 1.46 T:morus1280128v1 1.48 1.48 1.49 T:morus1280256v2 1.69 1.70 1.70 T:morus1280128v2 2.42 2.43 2.45 T:norx6441v3 2.45 2.46 2.47 T:norx6441v2 2.85 2.85 2.87 T:norx6441v1 3.27 3.27 3.29 T:morus640128v1 3.29 3.29 3.30 T:morus640128v2 3.31 3.32 3.32 T:norx6444v3 3.40 3.41 3.43 T:norx6444v2 3.55 3.55 3.57 T:norx6461v3 3.59 3.60 3.61 T:norx6461v2 3.74 3.75 3.76 T:lakekeyakv2 3.97 3.97 3.98 T:lakekeyakv1 3.98 3.99 4.01 T:norx6444v1 4.16 4.16 4.17 T:norx6461v1 4.46 4.46 4.47 T:norx3241v3 4.51 4.52 4.93 T:norx3241v2 4.69 4.70 4.73 T:tiaoxinv1 4.70 4.72 4.73 T:tiaoxinv2 4.73 4.73 4.74 T:ketjemajorv2 4.73 4.74 4.76 T:seakeyakv2 5.21 5.22 5.25 ascon128av12 5.38 5.39 5.41 T:norx3241v1 5.97 5.99 6.00 T:oceankeyakv2 6.54 6.55 6.62 T:norx3261v3 6.55 6.56 6.58 T:norx3261v2 6.59 6.59 6.60 T:riverkeyakv2 7.57 7.61 7.69 T:aegis128 7.63 7.65 7.66 ascon128v12 7.86 7.87 7.87 T:norx3261v1 8.01 8.03 8.25 T:acorn128v2 8.89 8.91 8.94 T:ascon128v1 8.89 8.92 8.97 T:ascon128v11 9.14 9.16 9.18 T:acorn128v3 9.18 9.31 9.51 T:ketjeminorv2 10.04 10.05 10.08 T:lunarkeyakv2 12.82 12.84 12.85 T:aes128otrcv3 13.09 13.10 13.14 T:ascon96v1 13.10 13.11 13.13 T:aes128otrsv1 13.09 13.11 13.13 T:aes128otrsv2 13.13 13.14 13.14 T:ascon128av11 13.30 13.31 13.32 T:aes128otrsv3 14.21 14.22 14.24 T:aes128otrpv1 14.22 14.24 14.27 T:aes128otrpv2 14.44 14.47 14.63 T:aeadaes128ocbtaglen64v1 14.46 14.47 14.48 T:aeadaes128ocbtaglen96v1 14.54 14.56 14.60 T:aes128otrpv3 16.31 16.33 16.41 T:aeadaes192ocbtaglen96v1 16.37 16.38 16.40 T:aeadaes192ocbtaglen64v1 16.38 16.40 16.42 T:aeadaes192ocbtaglen128v1 16.64 16.65 16.67 T:aes256otrcv3 16.89 16.91 16.99 T:aes256otrsv2 16.92 16.93 16.94 T:aes256otrsv1 17.11 17.12 17.14 T:aes256otrsv3 17.28 17.29 17.31 T:aes128n8t8clocv2 17.29 17.30 17.31 T:aes128n12t8clocv2 17.29 17.30 17.32 T:aes128n12t8clocv3 17.30 17.32 17.34 T:aes128n12clocv1 17.34 17.36 17.37 T:aes128n8clocv1 17.60 17.61 17.63 T:aes128n8t8silcv2 17.60 17.62 17.63 T:aes128n12t8silcv2 17.61 17.62 17.65 T:aes128n12t8silcv3 18.01 18.03 19.12 T:aes256otrpv1 18.02 18.04 18.05 T:aes256otrpv2 18.26 18.29 18.36 T:aeadaes256ocbtaglen96v1 18.29 18.32 18.38 T:aeadaes256ocbtaglen64v1 18.31 18.32 18.35 T:aes256otrpv3 20.21 20.22 20.24 T:deoxysi128v141 20.95 20.96 20.99 T:colm0v1 21.05 21.06 21.07 T:aesjambuv1 21.15 21.16 21.18 T:proest256otrv1 21.53 21.55 21.58 T:colm127v1 22.74 22.76 22.82 T:deoxysi256v141 28.51 28.53 28.57 T:deoxysii128v141 45.79 45.83 45.99 T:ketjesrv1 46.38 46.40 46.43 T:proest128otrv1 47.09 47.31 47.46 T:ketjesrv2 69.39 69.52 71.08 T:ketjejrv1 80.26 80.43 80.51 T:deoxysneq128128v13 80.65 80.71 80.77 T:deoxysneq128128v1 94.24 94.29 94.34 T:ketjejrv2 100.23 100.31 100.36 T:deoxyseq128128v13 100.35 100.60 101.35 T:deoxysneq256128v1 100.11 100.82 101.55 T:deoxysneq256128v13 101.16 101.24 101.31 T:deoxysii256v141 105.14 105.30 105.45 T:aezv1 126.22 126.29 126.40 T:deoxyseq256128v13 126.96 127.18 129.44 T:deoxyseq128128v1 131.98 132.15 135.26 T:aezv3 134.81 134.97 138.50 T:twine80n6t4clocv2 134.96 135.01 135.11 T:twine80n6t4clocv3 160.78 161.63 162.04 T:deoxyseq256128v1 561.01 562.04 562.80 T:acorn128 2635.89 2644.17 2647.03 T:present80n6silcv1 2636.42 2647.79 2653.92 T:present80n6t4silcv2 2639.44 2651.83 2654.85 T:present80n6t4silcv3 6646.19 6647.74 6661.48 T:led80n6silcv1 6665.54 6666.54 6680.18 T:led80n6t4silcv3 6667.50 6670.97 6671.60 T:led80n6t4silcv2 10463.67 10466.34 10476.56 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.40 0.41 0.41 T:aezv4 0.41 0.41 0.44 T:aezv5 0.62 0.62 0.63 aegis128l 0.87 0.88 0.91 aegis256 0.94 0.96 1.02 T:aeadaes128ocbtaglen128v1 1.13 1.13 1.14 T:aes128gcmv1 1.24 1.24 1.24 T:aeadaes256ocbtaglen128v1 1.41 1.41 1.41 T:aes256gcmv1 1.45 1.45 1.46 T:morus1280256v1 1.45 1.45 1.46 T:morus1280128v1 1.48 1.48 1.49 T:morus1280256v2 1.69 1.70 1.70 T:morus1280128v2 2.43 2.44 2.45 T:norx6441v3 2.47 2.47 2.47 T:norx6441v2 2.86 2.87 2.87 T:norx6441v1 3.26 3.27 3.27 T:morus640128v1 3.29 3.29 3.40 T:morus640128v2 3.33 3.33 3.34 T:norx6444v3 3.41 3.42 3.43 T:norx6444v2 3.56 3.57 3.58 T:norx6461v3 3.60 3.61 3.61 T:norx6461v2 3.76 3.76 3.77 T:lakekeyakv2 3.98 3.98 4.00 T:lakekeyakv1 3.99 4.00 4.02 T:norx6444v1 4.18 4.18 4.18 T:norx6461v1 4.47 4.48 4.49 T:norx3241v3 4.53 4.53 4.69 T:norx3241v2 4.69 4.70 4.70 T:tiaoxinv1 4.70 4.71 4.78 T:tiaoxinv2 4.74 4.74 4.75 T:ketjemajorv2 4.75 4.75 4.77 T:seakeyakv2 5.20 5.22 5.23 ascon128av12 5.39 5.40 5.41 T:norx3241v1 5.99 6.00 6.02 T:oceankeyakv2 6.55 6.56 6.62 T:norx3261v3 6.57 6.59 6.61 T:norx3261v2 6.60 6.61 6.61 T:riverkeyakv2 7.58 7.60 7.70 T:aegis128 7.63 7.64 7.65 ascon128v12 7.88 7.88 8.39 T:norx3261v1 8.00 8.03 8.26 T:acorn128v2 8.90 8.91 8.93 T:ascon128v11 8.90 8.91 8.93 T:ascon128v1 9.13 9.16 9.18 T:acorn128v3 9.20 9.36 9.54 T:ketjeminorv2 10.05 10.06 10.10 T:lunarkeyakv2 12.30 12.30 12.31 T:ascon128av11 12.31 12.32 12.33 T:ascon96v1 12.82 12.83 12.85 T:aes128otrcv3 13.13 13.14 13.15 T:aes128otrsv1 13.14 13.15 13.16 T:aes128otrsv2 13.33 13.34 13.35 T:aes128otrsv3 14.23 14.24 14.24 T:aes128otrpv1 14.23 14.25 14.29 T:aes128otrpv2 14.43 14.45 14.47 T:aeadaes128ocbtaglen96v1 14.43 14.45 14.47 T:aeadaes128ocbtaglen64v1 14.56 14.58 14.59 T:aes128otrpv3 16.30 16.32 16.39 T:aeadaes192ocbtaglen96v1 16.37 16.38 16.40 T:aeadaes192ocbtaglen64v1 16.37 16.39 16.41 T:aeadaes192ocbtaglen128v1 16.64 16.65 16.66 T:aes256otrcv3 16.92 16.93 16.99 T:aes256otrsv2 16.94 16.95 16.96 T:aes256otrsv1 17.13 17.15 17.17 T:aes256otrsv3 17.29 17.30 17.32 T:aes128n8t8clocv2 17.29 17.30 17.32 T:aes128n12t8clocv2 17.29 17.30 17.32 T:aes128n12t8clocv3 17.30 17.32 17.34 T:aes128n12clocv1 17.34 17.36 17.38 T:aes128n8clocv1 17.60 17.62 17.63 T:aes128n12t8silcv2 17.59 17.62 17.64 T:aes128n8t8silcv2 17.62 17.63 17.66 T:aes128n12t8silcv3 18.04 18.05 18.15 T:aes256otrpv1 18.05 18.06 18.08 T:aes256otrpv2 18.24 18.26 18.36 T:aeadaes256ocbtaglen96v1 18.30 18.32 18.38 T:aeadaes256ocbtaglen64v1 18.34 18.36 19.58 T:aes256otrpv3 20.21 20.23 20.25 T:deoxysi128v141 20.95 20.98 21.02 T:colm0v1 21.06 21.07 21.24 T:aesjambuv1 21.15 21.16 21.18 T:proest256otrv1 21.57 21.59 21.63 T:colm127v1 22.75 22.77 22.83 T:deoxysi256v141 28.52 28.55 28.58 T:deoxysii128v141 45.80 45.93 46.16 T:ketjesrv1 46.39 46.41 46.44 T:proest128otrv1 47.29 47.38 47.51 T:ketjesrv2 69.25 69.37 71.11 T:ketjejrv1 80.29 80.45 80.55 T:deoxysneq128128v13 80.57 80.64 80.72 T:deoxysneq128128v1 94.25 94.32 94.37 T:ketjejrv2 100.22 100.35 100.41 T:deoxyseq128128v13 100.37 100.76 101.10 T:deoxysneq256128v1 101.17 101.22 101.33 T:deoxysii256v141 100.34 101.30 102.85 T:deoxysneq256128v13 105.20 105.39 105.74 T:aezv1 126.22 126.31 126.38 T:deoxyseq256128v13 126.72 127.00 127.19 T:deoxyseq128128v1 131.88 131.94 132.01 T:aezv3 134.92 135.20 138.33 T:twine80n6t4clocv2 135.09 135.30 135.36 T:twine80n6t4clocv3 160.24 161.79 162.18 T:deoxyseq256128v1 510.47 510.70 511.47 aes256gcmv1 561.32 562.10 562.96 T:acorn128 2633.03 2640.22 2646.54 T:present80n6silcv1 2635.55 2651.24 2654.85 T:present80n6t4silcv2 2648.24 2653.68 2654.96 T:present80n6t4silcv3 6644.97 6646.83 6661.36 T:led80n6silcv1 6664.34 6666.04 6678.43 T:led80n6t4silcv3 6667.38 6670.95 6671.96 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 2.51 2.55 2.62 T:aezv5 2.75 2.78 2.86 T:aezv4 3.02 3.05 3.10 aegis128l 3.36 3.41 3.50 aegis256 4.32 4.38 4.42 T:aeadaes256ocbtaglen128v1 5.21? 5.61? 6.91? T:aeadaes128ocbtaglen128v1 7.84 7.88 7.99 T:morus1280128v1 7.89 7.93 8.01 T:morus1280256v1 7.90 8.01 8.08 T:morus1280256v2 8.16 8.22 8.48 T:morus1280128v2 8.38 8.42 8.57 ascon128av12 9.35 9.42 9.53 T:norx6441v2 9.41 9.45 9.62 T:morus640128v1 9.51 9.55 9.79 T:morus640128v2 9.58 9.67 9.74 T:norx6441v3 9.58 9.70 9.95 T:norx6441v1 10.13 10.19 10.36 T:aes128gcmv1 10.74 10.79 11.04 ascon128v12 10.79 10.88 11.23 T:aes256gcmv1 12.20 12.29 12.40 T:ascon128v11 12.20 12.31 12.52 T:ascon128v1 12.33 12.38 12.50 T:norx3241v2 12.43 12.49 12.60 T:norx3241v3 12.94 13.05 14.29 T:norx6461v2 13.15 13.22 13.33 T:norx6461v3 13.53 13.63 13.81 T:norx6461v1 15.46 15.52 15.59 T:norx3241v1 15.36 15.54 16.57 T:lakekeyakv1 16.27 16.30 16.42 T:riverkeyakv2 17.30 17.35 17.52 T:norx3261v2 17.40 17.45 17.51 T:norx3261v3 17.73 17.78 17.96 T:lakekeyakv2 18.43 18.51 18.56 T:ascon128av11 18.54 18.61 19.10 T:ascon96v1 20.97 21.04 21.16 T:aes128n8t8clocv2 21.02 21.11 21.25 T:aes128otrsv2 21.10 21.17 21.27 T:aes128otrsv1 21.09 21.19 22.00 T:aes128n12t8clocv2 21.11 21.30 22.38 T:aes128otrsv3 21.32 21.42 21.66 T:aes128n12t8clocv3 21.59 21.67 21.82 T:aes128otrpv1 21.71 21.80 21.95 T:aes128otrpv2 21.72 21.88 22.16 T:aes128n8clocv1 21.73 21.90 22.13 T:aes128n12clocv1 22.04 22.12 22.31 T:aes128otrpv3 22.48 22.53 22.61 T:norx3261v1 22.60 22.66 22.79 T:aes128otrcv3 22.58 22.74 23.10 T:aegis128 23.26 23.37 23.60 T:aeadaes128ocbtaglen64v1 23.33 23.46 23.71 T:aeadaes128ocbtaglen96v1 24.10 24.19 24.32 T:aes128n12t8silcv2 24.03 24.20 24.32 T:aes128n8t8silcv2 24.22 24.33 24.48 T:aes128n12t8silcv3 25.15 25.30 25.61 T:norx6444v2 25.44 25.55 25.76 T:norx6444v3 25.42 25.56 25.69 T:ketjemajorv2 26.21 26.31 26.54 T:acorn128v2 26.36 26.49 26.76 T:aeadaes192ocbtaglen128v1 26.44 26.58 26.77 T:aeadaes192ocbtaglen96v1 26.43 26.59 26.94 T:aeadaes192ocbtaglen64v1 26.58 26.66 26.89 T:acorn128v3 26.97 27.06 27.15 T:aes256otrsv1 27.05 27.20 27.36 T:aes256otrsv3 27.02 27.21 28.18 T:aes256otrsv2 27.54 27.64 27.83 T:aes256otrpv2 27.54? 27.85? 31.90? T:aes256otrpv1 27.79 27.88 28.09 T:aes256otrpv3 27.99 28.08 28.25 T:ketjeminorv2 28.73 28.80 28.93 T:aesjambuv1 28.75 28.81 28.90 T:tiaoxinv1 29.00 29.09 31.74 T:tiaoxinv2 29.03 29.13 29.32 T:aes256otrcv3 29.95 30.03 30.25 T:aeadaes256ocbtaglen64v1 29.91 30.08 30.31 T:aeadaes256ocbtaglen96v1 30.40 30.57 30.82 T:norx6444v1 31.33 31.46 32.60 T:deoxysi128v141 33.95 34.07 34.34 T:colm127v1 34.31 34.45 34.62 T:colm0v1 43.25 43.45 43.77 T:deoxysii128v141 43.38 43.51 43.80 T:seakeyakv2 44.90 45.02 45.14 T:deoxysi256v141 61.16 61.41 61.73 T:proest256otrv1 64.53 64.74 65.05 T:oceankeyakv2 74.14 74.41 74.93 T:ketjesrv1 75.64 75.76 75.94 T:deoxysneq128128v13 76.07 76.22 76.50 T:deoxysneq128128v1 82.28 82.55 83.05 T:ketjesrv2 91.07 91.22 91.47 T:proest128otrv1 93.26 93.97 95.85 T:ketjejrv1 94.59 94.72 94.86 T:deoxysneq256128v13 95.67 96.12 96.62 T:deoxysneq256128v1 112.60 112.80 113.25 T:aezv1 113.99 114.20 114.62 T:deoxysii256v141 116.85 117.06 118.20 T:deoxyseq128128v1 124.90 125.13 125.40 T:deoxyseq128128v13 129.02 129.33 129.61 T:ketjejrv2 144.93 145.17 145.47 T:twine80n6t4clocv2 144.83 145.23 145.49 T:twine80n6t4clocv3 146.39 146.60 147.06 T:deoxyseq256128v1 156.60 156.93 157.20 T:deoxyseq256128v13 160.44 160.71 161.14 T:lunarkeyakv2 183.32 183.84 184.27 T:aezv3 1986.31 1988.45 1990.97 T:acorn128 2946.54 2952.08 2963.36 T:present80n6t4silcv3 2961.33 2962.86 2965.86 T:present80n6t4silcv2 2964.87 2966.28 2967.65 T:present80n6silcv1 7414.40 7419.90 7440.32 T:led80n6silcv1 7426.29 7432.29 7441.85 T:led80n6t4silcv2 7431.93 7442.33 7450.69 T:led80n6t4silcv3 15273.01 15276.16 15279.48 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 2.49 2.54 2.62 T:aezv5 2.72 2.72 2.76 T:aezv4 3.40 3.42 3.43 aegis128l 3.83 3.87 4.25 aegis256 4.56 4.64 4.69 T:aeadaes256ocbtaglen128v1 5.69? 6.26? 7.41? T:aeadaes128ocbtaglen128v1 7.87 7.94 8.04 T:morus1280256v1 7.96 8.05 8.09 T:morus1280128v1 8.24 8.26 8.47 T:morus1280128v2 8.23 8.36 8.40 T:morus1280256v2 8.59 8.64 9.19 ascon128av12 9.38 9.44 9.72 T:norx6441v2 9.64 9.71 9.95 T:norx6441v3 9.67 9.74 9.83 T:morus640128v1 9.67 9.75 9.88 T:norx6441v1 10.10 10.15 10.28 T:aes128gcmv1 10.22 10.25 10.36 T:morus640128v2 10.73 10.80 10.88 ascon128v12 10.89 10.96 11.19 T:aes256gcmv1 12.24 12.31 12.38 T:ascon128v11 12.23 12.31 12.39 T:ascon128v1 12.35 12.39 12.44 T:norx3241v3 12.40 12.45 12.60 T:norx3241v2 13.06 13.36 14.05 T:norx6461v2 13.32 13.38 13.67 T:norx6461v3 13.62 13.72 13.94 T:norx6461v1 15.56 15.57 15.65 T:lakekeyakv1 15.64 15.69 15.80 T:norx3241v1 16.44 16.49 16.62 T:riverkeyakv2 17.34 17.38 17.46 T:norx3261v2 17.45 17.51 17.59 T:norx3261v3 17.59 17.62 17.70 T:lakekeyakv2 19.07 19.15 19.31 T:ascon128av11 19.22 19.30 19.54 T:ascon96v1 20.87 20.98 21.28 T:aes128n8t8clocv2 21.01 21.10 21.31 T:aes128n12t8clocv2 21.21 21.26 21.36 T:aes128otrsv1 21.19 21.27 21.43 T:aes128otrsv2 21.34 21.46 21.63 T:aes128n12t8clocv3 21.52 21.62 21.82 T:aes128otrsv3 21.67 21.77 21.88 T:aes128n12clocv1 21.64 21.78 21.89 T:aes128n8clocv1 21.83 21.99 22.21 T:aes128otrpv1 22.05 22.14 22.28 T:aes128otrpv2 22.32 22.43 22.63 T:aes128otrpv3 22.57 22.64 22.79 T:norx3261v1 22.69 22.81 23.07 T:aegis128 22.91 22.99 23.11 T:aes128otrcv3 24.02 24.17 24.33 T:aes128n8t8silcv2 24.12 24.25 24.36 T:aes128n12t8silcv2 24.33 24.45 24.57 T:aes128n12t8silcv3 24.92 25.07 25.46 T:acorn128v2 25.09 25.30 25.44 T:norx6444v3 25.53 25.62 25.79 T:norx6444v2 25.70 25.79 25.91 T:ketjemajorv2 26.61 26.71 26.88 T:aeadaes128ocbtaglen96v1 26.58 26.77 27.01 T:aeadaes128ocbtaglen64v1 26.68 26.80 26.94 T:acorn128v3 27.03 27.14 27.29 T:aes256otrsv1 27.13 27.28 28.31 T:aes256otrsv2 27.56 27.65 27.82 T:aes256otrsv3 27.89 27.97 28.15 T:aes256otrpv2 27.82? 28.05? 32.14? T:aes256otrpv1 28.09 28.25 28.47 T:ketjeminorv2 28.16 28.28 28.47 T:aes256otrpv3 29.06 29.13 29.30 T:aesjambuv1 29.08 29.13 29.23 T:tiaoxinv1 29.39 29.48 29.63 T:aes256otrcv3 29.22? 29.81? 33.52? T:tiaoxinv2 30.43 30.57 30.91 T:aeadaes192ocbtaglen64v1 30.45 30.58 30.74 T:aeadaes192ocbtaglen128v1 30.45 30.58 30.84 T:aeadaes192ocbtaglen96v1 30.97 31.09 31.38 T:norx6444v1 34.13 34.21 34.35 T:colm0v1 34.46 34.58 37.14 T:colm127v1 34.78 34.89 35.06 T:aeadaes256ocbtaglen64v1 34.77 34.92 35.11 T:aeadaes256ocbtaglen96v1 35.71 35.87 36.16 T:deoxysi128v141 43.16 43.32 43.57 T:deoxysii128v141 43.17 43.34 43.54 T:seakeyakv2 49.58 49.71 50.04 T:deoxysi256v141 62.75 62.93 64.06 T:proest256otrv1 64.27 64.48 64.81 T:oceankeyakv2 74.20 74.43 75.47 T:ketjesrv1 81.45 81.60 82.10 T:ketjesrv2 89.25 89.42 89.76 T:deoxysneq128128v13 89.46 89.58 89.83 T:deoxysneq128128v1 91.94 92.32 94.48 T:proest128otrv1 93.78 94.31 96.38 T:ketjejrv1 111.90 112.72 113.43 T:deoxysneq256128v13 112.14 113.15 114.21 T:deoxysneq256128v1 113.99 114.18 114.37 T:deoxysii256v141 115.84 116.05 116.48 T:aezv1 124.83 125.13 125.40 T:deoxyseq128128v13 126.64 126.85 127.27 T:ketjejrv2 143.62 143.94 144.34 T:deoxyseq128128v1 144.79 145.13 148.91 T:twine80n6t4clocv2 144.96 145.26 145.67 T:twine80n6t4clocv3 157.03 157.29 157.74 T:deoxyseq256128v13 160.22? 160.65? 178.21? T:lunarkeyakv2 183.31 183.68 184.09 T:aezv3 182.62 184.31 185.46 T:deoxyseq256128v1 1963.80 1967.44 1970.86 T:acorn128 2963.24 2965.68 2968.01 T:present80n6silcv1 2957.40 2970.56 2973.05 T:present80n6t4silcv2 2964.13 2970.57 2973.54 T:present80n6t4silcv3 7414.25 7418.74 7834.39 T:led80n6silcv1 7428.45 7433.97 7439.10 T:led80n6t4silcv2 7430.58 7435.61 7439.63 T:led80n6t4silcv3 15257.14 15262.87 15269.32 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.94 2.01 2.10 T:aezv5 2.11 2.14 2.23 T:aezv4 3.24 3.24 3.37 aegis128l 3.65 3.72 3.86 aegis256 4.63 4.66 4.71 T:aeadaes256ocbtaglen128v1 5.90? 6.33? 7.72? T:aeadaes128ocbtaglen128v1 7.98 8.01 8.09 T:morus1280256v1 7.96 8.05 8.07 T:morus1280128v1 8.28 8.35 8.64 T:morus1280128v2 8.26 8.36 8.39 T:morus1280256v2 8.67 8.74 9.07 ascon128av12 9.41 9.49 9.78 T:norx6441v2 9.67 9.75 9.82 T:morus640128v1 9.76 9.87 10.18 T:norx6441v3 9.75 9.94 10.15 T:norx6441v1 10.24 10.25 10.35 T:morus640128v2 10.21 10.28 10.38 T:aes128gcmv1 10.73 10.80 10.95 ascon128v12 10.91 10.96 11.13 T:aes256gcmv1 12.31 12.38 12.52 T:ascon128v11 12.29 12.38 12.49 T:ascon128v1 12.35 12.40 12.53 T:norx3241v2 12.45 12.51 12.61 T:norx3241v3 13.05? 13.46? 14.92? T:norx6461v2 13.46 13.60 13.85 T:norx6461v3 13.55 13.66 13.89 T:norx6461v1 15.62 15.69 15.86 T:norx3241v1 15.67 15.71 15.76 T:lakekeyakv1 16.48 16.51 16.61 T:riverkeyakv2 17.26 17.34 17.42 T:norx3261v2 17.62 17.66 17.68 T:lakekeyakv2 17.60 17.67 18.24 T:norx3261v3 18.24 18.32 18.44 T:ascon128av11 18.31 18.40 18.48 T:ascon96v1 20.81 20.87 20.99 T:aes128n8t8clocv2 21.01 21.10 21.21 T:aes128n12t8clocv2 21.28 21.37 21.47 T:aes128otrsv2 21.32 21.39 21.49 T:aes128n12t8clocv3 21.31 21.40 21.49 T:aes128otrsv1 21.64 21.72 21.83 T:aes128n12clocv1 21.67 21.78 22.07 T:aes128otrsv3 21.72 21.80 21.90 T:aes128n8clocv1 22.07 22.12 22.22 T:aes128otrpv1 22.20 22.30 22.35 T:aes128otrpv2 22.40 22.51 22.63 T:aes128otrpv3 22.64 22.74 22.99 T:aegis128 22.70 22.78 22.98 T:norx3261v1 22.83 22.91 23.04 T:aes128otrcv3 24.04 24.15 24.25 T:aes128n8t8silcv2 24.17 24.26 24.43 T:aes128n12t8silcv2 24.31? 24.42? 28.31? T:aes128n12t8silcv3 24.99 25.08 25.55 T:acorn128v2 25.22 25.41 25.53 T:norx6444v3 25.61 25.72 25.92 T:norx6444v2 25.69 25.78 25.91 T:ketjemajorv2 26.58 26.73 26.97 T:aeadaes128ocbtaglen96v1 26.61 26.76 26.94 T:aeadaes128ocbtaglen64v1 26.70 26.77 26.89 T:acorn128v3 27.16 27.25 27.31 T:aes256otrsv1 27.24 27.35 28.04 T:aes256otrsv2 27.68 27.80 27.91 T:aes256otrsv3 27.96 28.12 29.45 T:aes256otrpv1 28.15 28.24 28.36 T:aes256otrpv2 28.08 28.29 28.46 T:ketjeminorv2 28.32 28.43 28.52 T:aes256otrpv3 29.02 29.08 29.15 T:tiaoxinv1 29.08 29.16 29.23 T:aesjambuv1 29.35 29.38 29.48 T:aes256otrcv3 29.20? 29.52? 33.51? T:tiaoxinv2 30.37 30.50 30.65 T:aeadaes192ocbtaglen64v1 30.41 30.54 30.79 T:aeadaes192ocbtaglen96v1 30.42 30.55 30.74 T:aeadaes192ocbtaglen128v1 30.95 31.15 31.48 T:norx6444v1 34.13 34.26 34.38 T:colm0v1 34.72 34.85 35.03 T:aeadaes256ocbtaglen96v1 34.81 34.95 35.15 T:aeadaes256ocbtaglen64v1 34.62? 35.17? 38.60? T:colm127v1 35.80 35.93 36.16 T:deoxysi128v141 43.17 43.34 43.49 T:deoxysii128v141 43.08 43.35 43.54 T:seakeyakv2 49.72 49.86 50.02 T:deoxysi256v141 60.52 60.73 61.12 T:proest256otrv1 64.39 64.58 64.76 T:oceankeyakv2 74.25 74.35 74.50 T:ketjesrv1 81.85 82.00 82.24 T:ketjesrv2 89.39 89.54 89.80 T:deoxysneq128128v1 89.40 89.65 89.87 T:deoxysneq128128v13 91.90 92.07 92.22 T:proest128otrv1 93.90 95.00 96.65 T:ketjejrv1 111.47 112.07 113.04 T:deoxysneq256128v1 112.34 113.03 114.52 T:deoxysneq256128v13 113.96 114.23 114.56 T:deoxysii256v141 115.68 115.88 116.11 T:aezv1 124.83 125.03 125.29 T:deoxyseq128128v13 126.80 127.17 127.50 T:ketjejrv2 143.63 144.00 144.46 T:deoxyseq128128v1 144.89 145.05 145.28 T:twine80n6t4clocv3 144.62 145.13 148.80 T:twine80n6t4clocv2 156.88 157.10 157.60 T:deoxyseq256128v13 160.18? 160.84? 193.35? T:lunarkeyakv2 183.00 183.40 183.94 T:aezv3 183.44 185.06 186.97 T:deoxyseq256128v1 1963.87 1966.10 1970.74 T:acorn128 2946.19 2948.90 2969.12 T:present80n6t4silcv3 2957.78 2966.25 2968.43 T:present80n6silcv1 2968.18 2972.03 2974.38 T:present80n6t4silcv2 5312.50 5314.92 5318.19 aes256gcmv1 7415.62 7420.61 7430.90 T:led80n6silcv1 7426.67 7433.16 7439.20 T:led80n6t4silcv2 7430.67 7434.98 7441.92 T:led80n6t4silcv3