VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20231107

[Page version: 20240726 23:46:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.21 2.28 2.34 T:morus1280128v2 2.21 2.28 2.34 T:morus1280256v2 2.21 2.28 2.41 T:morus1280128v1 2.28 2.28 2.34 T:morus1280256v1 4.49 4.49 4.69 T:morus640128v2 4.49 4.56 4.69 T:morus640128v1 5.27 5.34 5.53 T:norx6441v3 5.34 5.40 5.60 T:norx6441v2 5.34 5.40 5.60 T:norx6444v2 5.40 5.40 5.60 T:norx6444v3 5.40? 5.73? 8.27? T:lunarkeyakv2 6.32 6.32 6.45 T:norx6441v1 6.32? 6.38? 7.94? T:norx6444v1 6.77? 6.77? 7.94? T:lakekeyakv1 7.42? 7.55? 9.24? T:lakekeyakv2 7.68? 7.75? 9.18? T:ketjemajorv2 7.75 7.81 7.94 T:norx6461v2 7.75? 7.81? 9.31? T:norx6461v3 7.81? 7.94? 9.57? T:tiaoxinv1 7.68? 8.07? 9.90? T:seakeyakv2 8.01? 8.14? 9.51? T:tiaoxinv2 8.85 8.85 9.38 T:ascon128av11 9.31? 9.31? 10.94? T:norx6461v1 7.16? 9.70? 11.13? T:oceankeyakv2 10.16? 10.16? 11.72? T:norx3241v3 10.16? 10.29? 11.78? T:norx3241v2 11.72? 11.78? 13.41? T:acorn128v3 11.98? 12.04? 13.54? T:norx3241v1 12.76? 12.89? 14.26? T:acorn128v2 13.28? 13.35? 14.84? T:ascon128v11 15.04 15.23 16.54 T:norx3261v3 15.04 16.54 16.67 T:norx3261v2 15.89 17.38 17.64 T:aegis128l 16.08 17.58 17.64 T:ketjeminorv2 17.06? 18.62? 19.60? T:riverkeyakv2 17.97 19.47 19.60 T:norx3261v1 19.92 21.09 21.48 T:aegis128 30.40 30.53 31.12 T:aeadaes128ocbtaglen96v1 30.53 30.66 30.99 T:aeadaes128ocbtaglen64v1 30.27 30.79 31.77 T:aeadaes128ocbtaglen128v1 31.58 31.71 32.16 T:aes128otrpv1 31.58 31.71 32.55 T:aes128otrsv2 31.71 31.84 32.62 T:aes128otrpv3 33.79 34.11 34.38 T:proest256otrv1 34.64 34.83 35.48 T:aeadaes192ocbtaglen96v1 34.64 34.90 36.00 T:aeadaes192ocbtaglen128v1 34.77 34.90 35.94 T:aeadaes192ocbtaglen64v1 35.68 35.81 36.91 T:aes256otrcv3 37.43 37.76 39.00 T:deoxysi128v141 38.41 38.74 39.78 T:aeadaes256ocbtaglen128v1 38.54 38.74 39.78 T:aeadaes256ocbtaglen64v1 39.19 39.26 40.30 T:aes256otrpv1 39.00 39.32 40.43 T:aes256otrpv3 38.67 39.39 40.04 T:aeadaes256ocbtaglen96v1 39.19 40.17 40.95 T:aes256otrsv2 39.71 40.56 43.23 T:seakeyakv1 38.93 41.21 42.71 T:oceankeyakv1 41.02 42.51 42.90 T:deoxysi256v141 44.01 44.99 45.64 T:aesjambuv1 45.96 46.35 47.66 T:aes128n12t8clocv3 44.21 46.61 48.89 T:aes128gcmv1 45.96 46.74 49.28 T:aes128n12clocv1 49.93 51.37 51.56 T:aes128n8t8silcv2 49.80 51.56 52.47 T:aes128n12silcv1 50.00 51.63 52.86 T:aes128n12t8silcv3 50.72 51.69 53.06 T:aes128n8silcv1 74.54 77.21 78.12 T:proest128otrv1 77.02 78.52 79.36 T:ketjesrv1 80.27 81.80 83.59 T:deoxysii128v141 85.35 87.50 89.52 T:ketjesrv2 87.83 90.56 91.41 T:riverkeyakv1 126.89 128.97 131.12 T:aezv5 133.72 136.13 137.57 T:deoxysneq128128v13 133.46 136.20 137.89 T:deoxysneq128128v1 137.24 139.58 140.76 T:ketjejrv1 229.88 232.29 233.27 T:twine80n6clocv1 239.19 239.58 241.47 T:deoxysneq256128v1 238.48 241.15 241.99 T:deoxysneq256128v13 261.91 262.37 265.89 T:ketjejrv2 267.25 269.04 271.03 T:deoxyseq128128v1 270.51 272.01 275.91 T:deoxyseq128128v13 392.38 395.57 399.80 T:deoxysii256v141 428.06 430.34 435.42 T:aezv3 475.00 478.39 484.31 T:deoxyseq256128v1 479.88 481.77 487.70 T:twine80n6t4clocv2 479.17 482.03 488.41 T:deoxyseq256128v13 479.82 482.81 486.52 T:twine80n6t4clocv3 1568.10 1576.69 1578.84 T:acorn128 8364.06 8369.92 8383.07 T:present80n6silcv1 8365.10 8372.53 8382.42 T:present80n6t4silcv2 8364.78 8372.92 8378.45 T:present80n6t4silcv3 15966.21 15987.89 16018.36 T:led80n6silcv1 16019.86 16033.79 16045.83 T:led80n6t4silcv3 16029.69 16034.38 16045.51 T:led80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 2.15 2.15 2.21 T:morus1280128v2 2.15 2.15 2.28 T:morus1280256v2 2.15 2.21 2.21 T:morus1280256v1 2.21 2.21 2.21 T:morus1280128v1 4.04 4.04 4.10 T:morus640128v2 4.04 4.10 4.17 T:morus640128v1 5.21 5.27 5.40 T:norx6444v3 5.27 5.27 5.34 T:norx6441v3 5.27 5.27 5.47 T:norx6441v2 5.27? 5.34? 6.84? T:norx6444v2 5.73? 6.12? 8.66? T:lunarkeyakv2 6.25 6.25 6.38 T:norx6441v1 6.32? 6.32? 7.88? T:norx6444v1 7.10? 7.29? 9.38? T:lakekeyakv1 7.68? 7.75? 9.24? T:norx6461v2 7.68 7.81 7.88 T:norx6461v3 7.75? 7.81? 9.31? T:ketjemajorv2 7.81? 8.01? 9.57? T:lakekeyakv2 7.55? 8.66? 10.55? T:seakeyakv2 8.53? 8.98? 10.42? T:tiaoxinv2 8.92? 8.98? 10.48? T:tiaoxinv1 9.11? 9.11? 10.61? T:ascon128av11 9.18? 9.18? 10.68? T:norx6461v1 7.62? 10.03? 10.81? T:oceankeyakv2 10.09? 10.16? 11.59? T:norx3241v2 10.09? 10.16? 11.59? T:norx3241v3 11.91? 11.98? 13.48? T:norx3241v1 11.98? 12.04? 13.48? T:acorn128v3 12.70? 12.96? 14.52? T:acorn128v2 13.35? 13.41? 14.91? T:ascon128v11 15.04 15.17 16.60 T:norx3261v3 14.91? 16.41? 16.80? T:norx3261v2 16.02? 17.48? 18.23? T:aegis128l 16.15? 17.64? 18.49? T:ketjeminorv2 17.51 18.29 19.27 T:riverkeyakv2 17.64 19.14 19.34 T:norx3261v1 21.42 21.68 22.66 T:aegis128 30.53 30.79 30.99 T:aeadaes128ocbtaglen96v1 30.60 30.99 31.77 T:aeadaes128ocbtaglen64v1 30.53 31.05 31.77 T:aeadaes128ocbtaglen128v1 32.23 32.29 33.01 T:aes128otrpv1 32.29 32.62 33.46 T:aes128otrsv2 32.29 32.62 33.92 T:aes128otrpv3 33.59 33.72 35.03 T:proest256otrv1 35.03 35.42 36.46 T:aeadaes192ocbtaglen64v1 35.16 35.42 36.39 T:aeadaes192ocbtaglen96v1 35.35 35.55 37.17 T:aeadaes192ocbtaglen128v1 35.74 35.94 37.30 T:aes256otrcv3 39.32 39.71 41.28 T:aeadaes256ocbtaglen64v1 39.26 39.84 41.15 T:aeadaes256ocbtaglen128v1 39.78 40.04 41.41 T:aes256otrpv1 39.78 40.04 41.41 T:aes256otrsv2 39.52 40.62 41.34 T:aeadaes256ocbtaglen96v1 39.65 40.69 41.41 T:aes256otrpv3 40.23? 40.82? 44.73? T:seakeyakv1 39.32 41.93 43.23 T:oceankeyakv1 42.84 44.56 46.68 T:deoxysi128v141 44.08 44.99 45.51 T:aesjambuv1 44.66 47.07 48.89 T:aes128gcmv1 46.74 48.24 48.63 T:aes128n12t8clocv3 47.01 48.63 49.22 T:aes128n12clocv1 46.68 49.15 50.46 T:deoxysi256v141 49.93 51.37 51.82 T:aes128n12silcv1 50.91 51.50 52.54 T:aes128n8t8silcv2 49.61 51.56 52.60 T:aes128n8silcv1 50.72 51.56 52.54 T:aes128n12t8silcv3 73.70 76.04 76.63 T:proest128otrv1 76.37 79.10 80.53 T:ketjesrv2 78.32 80.40 82.49 T:ketjesrv1 80.60 81.54 82.62 T:deoxysii128v141 88.54 91.15 92.51 T:riverkeyakv1 125.72 129.10 130.73 T:aezv5 137.83 141.02 141.80 T:ketjejrv1 195.70 198.11 199.87 T:deoxysneq128128v13 195.51 198.31 203.06 T:deoxysneq128128v1 229.88 231.84 234.96 T:twine80n6clocv1 244.73 244.99 247.14 T:ketjejrv2 270.77 272.20 276.82 T:deoxyseq128128v13 307.42 309.38 316.99 T:deoxysneq256128v13 308.33 309.51 316.99 T:deoxysneq256128v1 389.84 392.12 397.33 T:deoxyseq128128v1 392.38 395.18 400.07 T:deoxysii256v141 429.49 431.32 436.20 T:aezv3 479.17 481.64 486.65 T:twine80n6t4clocv2 479.56 482.81 486.91 T:twine80n6t4clocv3 479.88 485.87 488.35 T:deoxyseq256128v13 613.74 619.79 622.98 T:deoxyseq256128v1 1599.35 1608.14 1610.03 T:acorn128 8364.06 8371.74 8378.32 T:present80n6t4silcv3 8365.10 8373.50 8380.66 T:present80n6t4silcv2 8364.78 8374.54 8385.16 T:present80n6silcv1 15965.10 15974.28 15995.64 T:led80n6silcv1 16016.34 16024.93 16034.90 T:led80n6t4silcv2 16030.14 16040.30 16055.14 T:led80n6t4silcv3

Cycles/byte for long+0 forgery 25% 50% 75% aead 2.15 2.21 2.28 T:morus1280128v2 2.15 2.21 2.28 T:morus1280256v1 2.15 2.21 2.28 T:morus1280256v2 2.21 2.21 2.21 T:morus1280128v1 4.04 4.04 4.17 T:morus640128v1 4.04 4.04 4.17 T:morus640128v2 5.40 5.40 5.47 T:norx6441v2 5.40 5.40 5.47 T:norx6441v3 5.40 5.40 5.66 T:norx6444v3 5.40? 5.40? 6.97? T:norx6444v2 5.92? 6.32? 9.24? T:lunarkeyakv2 6.32 6.38 6.45 T:norx6441v1 6.38? 6.45? 7.88? T:norx6444v1 7.23? 7.29? 8.27? T:lakekeyakv1 7.81? 7.88? 9.31? T:norx6461v2 7.81? 7.94? 9.51? T:ketjemajorv2 7.88? 7.94? 9.64? T:norx6461v3 7.88? 8.01? 9.77? T:lakekeyakv2 7.75? 8.53? 10.35? T:seakeyakv2 8.85? 8.92? 10.48? T:tiaoxinv2 9.11 9.11 9.44 T:ascon128av11 8.72? 9.18? 10.55? T:tiaoxinv1 9.31? 9.31? 10.74? T:norx6461v1 7.68? 10.09? 10.35? T:oceankeyakv2 10.16? 10.22? 11.78? T:norx3241v2 10.16? 10.22? 11.91? T:norx3241v3 11.98? 12.04? 13.48? T:acorn128v3 12.04? 12.11? 13.67? T:norx3241v1 12.76? 12.83? 14.32? T:acorn128v2 13.41? 13.48? 15.17? T:ascon128v11 14.97 16.47 16.54 T:norx3261v2 15.10? 16.54? 16.93? T:norx3261v3 16.02 17.38 17.45 T:aegis128l 16.21? 17.84? 18.29? T:ketjeminorv2 17.71? 19.27? 20.31? T:riverkeyakv2 17.84 19.27 19.53 T:norx3261v1 20.18 21.48 22.01 T:aegis128 30.60 30.66 30.99 T:aeadaes128ocbtaglen96v1 30.73 30.79 31.97 T:aeadaes128ocbtaglen128v1 30.66 30.86 32.42 T:aeadaes128ocbtaglen64v1 32.23 32.42 33.20 T:aes128otrpv1 32.29 32.62 33.59 T:aes128otrpv3 32.36 32.94 33.66 T:aes128otrsv2 33.46 33.66 34.57 T:proest256otrv1 35.22 35.42 37.17 T:aeadaes192ocbtaglen96v1 35.29 35.68 36.91 T:aeadaes192ocbtaglen128v1 35.35 35.74 36.98 T:aeadaes192ocbtaglen64v1 35.68 35.81 36.85 T:aes256otrcv3 39.45 39.65 41.02 T:aeadaes256ocbtaglen64v1 39.45 39.71 41.08 T:aeadaes256ocbtaglen128v1 39.39 39.78 41.73 T:aeadaes256ocbtaglen96v1 39.71 40.23 41.47 T:aes256otrpv1 39.71 40.56 41.28 T:aes256otrpv3 39.97 40.89 41.67 T:aes256otrsv2 40.56 40.95 43.49 T:seakeyakv1 38.87? 41.86? 43.75? T:oceankeyakv1 42.97 44.04 46.42 T:deoxysi128v141 44.14 45.31 45.64 T:aesjambuv1 44.60 46.88 48.63 T:aes128gcmv1 46.81 48.44 49.74 T:aes128n12t8clocv3 47.46 48.70 50.65 T:aes128n12clocv1 47.46 49.09 50.46 T:deoxysi256v141 49.87 50.72 51.37 T:aes128n8t8silcv2 49.93 51.24 53.91 T:aes128n8silcv1 49.67 51.30 51.82 T:aes128n12t8silcv3 50.13 51.43 52.80 T:aes128n12silcv1 73.76 76.17 76.76 T:proest128otrv1 77.21 79.17 80.92 T:ketjesrv1 78.06 79.49 80.47 T:ketjesrv2 80.53 81.90 83.66 T:deoxysii128v141 88.48 90.69 92.64 T:riverkeyakv1 126.63 129.10 131.45 T:aezv5 138.35 141.15 142.06 T:ketjejrv1 195.77 197.79 199.67 T:deoxysneq128128v1 195.18 198.11 200.00 T:deoxysneq128128v13 230.27 232.81 237.17 T:twine80n6clocv1 244.47 245.12 248.89 T:ketjejrv2 270.51 272.27 276.95 T:deoxyseq128128v13 308.07 309.44 314.97 T:deoxysneq256128v13 307.36 309.57 317.38 T:deoxysneq256128v1 388.61 390.14 399.87 T:deoxyseq128128v1 393.88 395.25 401.69 T:deoxysii256v141 427.08 432.68 436.26 T:aezv3 479.43 481.97 486.07 T:twine80n6t4clocv3 479.49 483.01 486.85 T:twine80n6t4clocv2 479.56 483.01 486.26 T:deoxyseq256128v13 616.86 621.55 622.66 T:deoxyseq256128v1 1602.28 1608.59 1610.35 T:acorn128 8364.91 8369.34 8381.25 T:present80n6silcv1 8365.43 8373.44 8380.34 T:present80n6t4silcv2 8364.78 8373.89 8392.58 T:present80n6t4silcv3 15969.01 15983.53 15991.67 T:led80n6silcv1 16012.76 16024.28 16038.61 T:led80n6t4silcv2 16027.67 16034.44 16052.60 T:led80n6t4silcv3

Cycles/byte for long+long encrypt 25% 50% 75% aead 8.82 9.15 9.64 T:ascon128av11 32.26 33.59 34.57 T:aes128gcmv1 34.80 35.12 36.23 T:aes128n12clocv1 34.75 35.38 35.58 T:aes128n12t8clocv3 35.61 35.87 36.59 T:aes256otrcv3 37.53 38.28 38.61 T:aes128n12silcv1 38.05 38.83 39.23 T:aes256otrpv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 8.89 9.60 9.80 T:ascon128av11 32.16 33.27 34.15 T:aes128gcmv1 35.29 35.35 35.99 T:aes128n12t8clocv3 35.64 35.87 36.85 T:aes256otrcv3 35.35 36.00 36.82 T:aes128n12clocv1 37.34 37.99 39.00 T:aes128n12silcv1 38.28 39.03 39.36 T:aes256otrpv1

Cycles/byte for long+long forgery 25% 50% 75% aead 8.95 9.64 9.90 T:ascon128av11 31.90 33.27 34.08 T:aes128gcmv1 35.74 35.87 36.82 T:aes256otrcv3 35.90 36.10 36.39 T:aes128n12t8clocv3 35.48 36.17 36.43 T:aes128n12clocv1 37.40 38.09 38.74 T:aes128n12silcv1 38.44 39.39 40.27 T:aes256otrpv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 2.54 2.54 2.67 T:morus1280128v1 2.54 2.54 2.67 T:morus1280256v1 2.54 2.60 2.60 T:morus1280128v2 2.60 2.60 2.67 T:morus1280256v2 4.75 4.82 5.01 T:morus640128v1 4.75 4.82 5.08 T:morus640128v2 2.47? 4.95? 7.94? T:lunarkeyakv2 4.17? 5.08? 7.81? T:oceankeyakv2 5.21 5.21 5.34 T:norx6441v2 5.21 5.21 5.34 T:norx6444v2 5.14 5.27 5.34 T:norx6441v3 5.21 5.27 5.34 T:norx6444v3 5.66? 5.86? 6.38? T:lakekeyakv2 5.34? 6.05? 7.68? T:seakeyakv2 6.18 6.18 6.25 T:norx6444v1 6.18 6.18 6.38 T:norx6441v1 6.12? 6.25? 7.10? T:lakekeyakv1 6.51? 6.84? 8.33? T:tiaoxinv1 6.51? 6.90? 8.46? T:tiaoxinv2 7.49? 7.49? 8.92? T:ketjemajorv2 7.62? 7.68? 9.11? T:norx6461v2 7.62? 7.68? 9.18? T:norx6461v3 8.72 8.79 9.24 T:ascon128av11 9.11? 9.18? 10.68? T:norx6461v1 9.57? 9.57? 11.13? T:norx3241v3 9.57? 9.64? 11.20? T:norx3241v2 11.20? 11.39? 12.83? T:riverkeyakv2 11.46? 11.52? 12.96? T:norx3241v1 11.98? 12.11? 13.87? T:acorn128v3 12.50? 12.50? 14.06? T:acorn128v2 12.96? 13.09? 14.52? T:ascon128v11 15.56 15.82 17.19 T:ketjeminorv2 14.32? 15.89? 16.02? T:norx3261v2 14.32? 15.89? 16.41? T:norx3261v3 15.62 16.31 17.12 T:aegis128l 17.38 18.82 18.95 T:norx3261v1 19.27 20.70 20.96 T:aegis128 19.34? 20.96? 22.40? T:aes128gcmv1 22.14 23.70 24.41 T:aes128n12t8clocv3 22.53 23.89 24.93 T:aes128n12clocv1 23.89 25.26 25.98 T:aes128n8silcv1 23.63? 25.33? 26.56? T:aes128n12silcv1 23.76 25.33 25.52 T:aes128n8t8silcv2 24.09 25.52 25.91 T:aes128n12t8silcv3 24.35 25.91 26.56 T:aes128otrsv2 29.36 29.69 30.27 T:aes128otrpv1 29.88 30.08 30.60 T:aes128otrpv3 30.27 30.47 31.05 T:aeadaes128ocbtaglen96v1 30.47 30.63 31.32 T:aeadaes128ocbtaglen128v1 30.47 30.66 31.51 T:aeadaes128ocbtaglen64v1 33.40 33.72 34.51 T:aes256otrsv2 34.05 34.24 35.22 T:proest256otrv1 34.24 34.38 35.42 T:aeadaes192ocbtaglen96v1 34.38 34.64 35.87 T:aeadaes192ocbtaglen128v1 34.38 34.73 35.94 T:aeadaes192ocbtaglen64v1 35.87 36.07 37.37 T:aes256otrcv3 37.04 38.15 38.41 T:aes256otrpv1 37.50 38.28 38.87 T:aes256otrpv3 39.19 39.45 40.43 T:aeadaes256ocbtaglen64v1 38.67 39.52 40.36 T:aeadaes256ocbtaglen96v1 38.54 39.91 41.15 T:oceankeyakv1 39.00 40.14 40.76 T:aeadaes256ocbtaglen128v1 39.97 40.56 43.03 T:deoxysi256v141 38.22 41.15 42.45 T:seakeyakv1 43.55 43.82 45.44 T:aesjambuv1 67.97 68.42 69.92 T:ketjesrv1 66.60 68.55 69.66 T:ketjesrv2 74.09 76.56 77.15 T:proest128otrv1 77.60 80.01 82.16 T:riverkeyakv1 86.26 87.96 89.91 T:aezv5 111.52 114.13 115.10 T:twine80n6clocv1 113.74 116.54 117.25 T:ketjejrv1 132.55 135.35 136.65 T:deoxyseq128128v13 133.85 136.72 137.63 T:deoxysneq128128v13 193.95 196.55 197.92 T:deoxysii256v141 227.21 228.78 231.84 T:ketjejrv2 235.94 236.91 240.43 T:twine80n6t4clocv2 236.07 238.74 240.69 T:twine80n6t4clocv3 237.89 238.93 242.58 T:deoxyseq256128v13 238.61 241.02 243.62 T:deoxysneq256128v13 275.59 278.06 280.53 T:aezv3 1518.42 1526.63 1531.32 T:acorn128 4177.21 4184.18 4185.81 T:present80n6t4silcv3 4179.88 4185.42 4189.78 T:present80n6t4silcv2 4176.04 4185.48 4189.97 T:present80n6silcv1 7986.00 7990.04 8001.89 T:led80n6silcv1 7999.02 8006.58 8016.73 T:led80n6t4silcv2 8011.91 8020.38 8029.62 T:led80n6t4silcv3

Cycles/byte for 0+long decrypt 25% 50% 75% aead 2.54 2.60 2.67 T:morus1280128v2 2.54 2.60 2.67 T:morus1280256v2 2.60 2.60 2.60 T:morus1280128v1 2.60 2.60 2.60 T:morus1280256v1 4.30? 4.95? 6.77? T:oceankeyakv2 4.75? 5.01? 6.90? T:lunarkeyakv2 5.01 5.08 5.21 T:morus640128v2 5.08 5.08 5.14 T:morus640128v1 5.21 5.21 5.34 T:norx6444v3 5.14 5.27 5.27 T:norx6444v2 5.21 5.27 5.34 T:norx6441v2 5.21 5.27 5.34 T:norx6441v3 5.73 5.86 6.25 T:lakekeyakv2 5.27? 5.99? 7.81? T:seakeyakv2 5.99? 6.18? 6.84? T:lakekeyakv1 6.12 6.18 6.38 T:norx6444v1 6.18 6.18 6.32 T:norx6441v1 6.64? 7.10? 8.92? T:tiaoxinv1 6.97? 7.16? 8.66? T:tiaoxinv2 7.68 7.68 7.81 T:norx6461v3 7.68? 7.68? 9.18? T:norx6461v2 7.36? 8.40? 10.48? T:ketjemajorv2 8.59? 8.66? 10.16? T:ascon128av11 9.11? 9.18? 10.68? T:norx6461v1 9.77? 9.83? 11.33? T:norx3241v2 9.77? 9.83? 11.33? T:norx3241v3 11.26? 11.33? 12.89? T:riverkeyakv2 11.59? 11.72? 13.22? T:norx3241v1 11.98? 12.04? 13.61? T:acorn128v3 12.50? 12.57? 14.06? T:acorn128v2 12.70? 13.09? 14.19? T:ascon128v11 14.58? 14.71? 16.21? T:norx3261v2 14.65? 14.91? 16.28? T:norx3261v3 15.56 15.89 17.19 T:ketjeminorv2 15.62 17.02 17.25 T:aegis128l 17.58? 19.08? 19.86? T:norx3261v1 19.21 20.57 20.70 T:aegis128 19.27? 20.83? 22.98? T:aes128gcmv1 22.20 23.76 24.28 T:aes128n12t8clocv3 22.20 23.89 24.09 T:aes128n12clocv1 23.89 25.26 26.11 T:aes128n12silcv1 23.70 25.33 25.78 T:aes128n12t8silcv3 23.76 25.39 25.78 T:aes128n8t8silcv2 25.07 25.39 26.63 T:aes128n8silcv1 25.85 25.91 26.04 T:aes128otrsv2 29.49 29.62 30.21 T:aes128otrpv1 29.75 29.88 30.01 T:aes128otrpv3 30.27 30.40 30.53 T:aeadaes128ocbtaglen96v1 30.47 30.73 31.51 T:aeadaes128ocbtaglen64v1 30.60 30.73 31.45 T:aeadaes128ocbtaglen128v1 33.40 33.79 34.70 T:aes256otrsv2 33.98 34.24 35.48 T:proest256otrv1 34.31 34.70 35.87 T:aeadaes192ocbtaglen128v1 34.51 34.77 35.74 T:aeadaes192ocbtaglen96v1 34.44 34.83 36.20 T:aeadaes192ocbtaglen64v1 35.68 35.94 37.04 T:aes256otrcv3 36.98 37.11 38.48 T:aes256otrpv1 37.43 37.50 38.80 T:aes256otrpv3 39.06 39.88 40.76 T:aeadaes256ocbtaglen128v1 39.58 40.04 42.19 T:oceankeyakv1 39.26 40.17 40.69 T:aeadaes256ocbtaglen96v1 39.26 40.62 40.82 T:aeadaes256ocbtaglen64v1 38.35? 41.28? 42.64? T:seakeyakv1 40.04 41.34 41.93 T:deoxysi256v141 43.62 44.60 45.12 T:aesjambuv1 68.68 69.11 69.92 T:ketjesrv1 67.45 69.73 70.57 T:ketjesrv2 74.09 76.43 76.95 T:proest128otrv1 79.30 80.40 81.38 T:riverkeyakv1 86.91 88.02 89.19 T:aezv5 111.52 114.26 116.34 T:twine80n6clocv1 114.71 116.67 117.84 T:ketjejrv1 132.42 136.07 136.78 T:deoxyseq128128v13 133.79 136.46 138.09 T:deoxysneq128128v13 193.62 195.96 198.18 T:deoxysii256v141 227.54 229.17 233.72 T:ketjejrv2 236.00 238.74 239.45 T:twine80n6t4clocv2 236.65 238.74 239.52 T:twine80n6t4clocv3 237.76 238.80 242.97 T:deoxyseq256128v13 239.26 241.15 242.45 T:deoxysneq256128v13 275.39 278.12 279.43 T:aezv3 1517.84 1526.04 1529.17 T:acorn128 4177.15 4185.29 4189.78 T:present80n6t4silcv2 4178.91 4185.81 4190.23 T:present80n6t4silcv3 4176.69 4186.39 4194.53 T:present80n6silcv1 7983.27 7990.17 8002.15 T:led80n6silcv1 8005.60 8011.65 8025.78 T:led80n6t4silcv2 8005.60 8013.74 8021.48 T:led80n6t4silcv3

Cycles/byte for 0+long forgery 25% 50% 75% aead 2.54 2.60 2.67 T:morus1280128v2 2.54 2.60 2.67 T:morus1280256v2 2.60 2.60 2.60 T:morus1280128v1 2.60 2.60 2.60 T:morus1280256v1 4.69? 4.95? 6.90? T:lunarkeyakv2 4.43? 5.01? 6.77? T:oceankeyakv2 5.08 5.08 5.14 T:morus640128v2 5.08 5.08 5.21 T:morus640128v1 5.14 5.21 5.40 T:norx6441v3 5.21 5.21 5.34 T:norx6444v3 5.14 5.27 5.27 T:norx6444v2 5.21 5.27 5.34 T:norx6441v2 5.53? 5.86? 6.32? T:lakekeyakv2 5.66? 6.05? 8.59? T:seakeyakv2 6.12 6.18 6.32 T:norx6444v1 6.12 6.25 6.32 T:norx6441v1 6.12? 6.25? 6.90? T:lakekeyakv1 6.84? 7.10? 8.72? T:tiaoxinv1 6.90? 7.10? 8.72? T:tiaoxinv2 7.36? 7.45? 9.05? T:ketjemajorv2 7.62? 7.68? 9.18? T:norx6461v3 7.68? 7.68? 9.18? T:norx6461v2 8.59 8.66 8.92 T:ascon128av11 9.18? 9.18? 10.68? T:norx6461v1 9.77? 9.83? 11.39? T:norx3241v3 9.77? 9.90? 11.39? T:norx3241v2 11.07? 11.33? 12.96? T:riverkeyakv2 11.59? 11.72? 13.22? T:norx3241v1 11.98? 12.04? 13.54? T:acorn128v3 12.43? 12.50? 14.06? T:acorn128v2 12.76? 12.89? 14.45? T:ascon128v11 14.65 14.71 16.08 T:norx3261v2 14.78? 14.78? 16.47? T:norx3261v3 15.49? 17.06? 17.32? T:aegis128l 15.62 17.06 17.19 T:ketjeminorv2 17.58 19.08 19.53 T:norx3261v1 19.21 20.57 20.96 T:aegis128 19.21? 21.68? 22.40? T:aes128gcmv1 22.14 23.70 23.76 T:aes128n12t8clocv3 22.53 23.89 24.09 T:aes128n12clocv1 24.41 25.33 25.91 T:aes128n8silcv1 25.07 25.33 26.11 T:aes128n12silcv1 24.02 25.39 26.17 T:aes128n12t8silcv3 24.02 25.39 26.37 T:aes128n8t8silcv2 25.85 25.91 26.30 T:aes128otrsv2 29.62 29.69 30.40 T:aes128otrpv1 29.69 29.88 30.34 T:aes128otrpv3 30.21 30.40 30.53 T:aeadaes128ocbtaglen96v1 30.60 30.73 31.45 T:aeadaes128ocbtaglen64v1 30.60 30.76 31.90 T:aeadaes128ocbtaglen128v1 33.59 34.11 34.64 T:aes256otrsv2 34.05 34.18 35.42 T:proest256otrv1 34.31 34.64 35.68 T:aeadaes192ocbtaglen128v1 34.38 34.64 36.20 T:aeadaes192ocbtaglen96v1 34.24 34.77 35.87 T:aeadaes192ocbtaglen64v1 35.81 36.00 36.91 T:aes256otrcv3 37.37 37.43 38.48 T:aes256otrpv3 37.11 38.09 38.54 T:aes256otrpv1 38.80 39.32 40.76 T:aeadaes256ocbtaglen96v1 39.00 39.45 40.82 T:aeadaes256ocbtaglen64v1 38.22? 39.78? 42.58? T:seakeyakv1 38.48 39.91 41.99 T:oceankeyakv1 39.32 40.07 40.82 T:aeadaes256ocbtaglen128v1 40.04 40.62 41.93 T:deoxysi256v141 43.62 43.95 45.38 T:aesjambuv1 68.16 68.75 70.51 T:ketjesrv1 67.45 69.14 70.31 T:ketjesrv2 73.83 76.89 78.12 T:proest128otrv1 77.67 80.08 82.23 T:riverkeyakv1 86.46 88.28 88.74 T:aezv5 112.76 114.84 115.17 T:twine80n6clocv1 115.17 116.57 117.90 T:ketjejrv1 132.68 135.55 137.96 T:deoxyseq128128v13 134.90 136.20 138.87 T:deoxysneq128128v13 194.01 196.48 197.59 T:deoxysii256v141 228.26 229.43 231.84 T:ketjejrv2 235.81 237.43 241.28 T:twine80n6t4clocv3 236.20 237.43 241.34 T:twine80n6t4clocv2 236.85 238.74 240.49 T:deoxyseq256128v13 238.80 241.28 244.53 T:deoxysneq256128v13 275.20 278.26 281.51 T:aezv3 1515.49 1527.47 1528.91 T:acorn128 4176.37 4184.44 4189.26 T:present80n6t4silcv2 4180.92 4185.16 4187.50 T:present80n6t4silcv3 4179.30 4186.72 4194.86 T:present80n6silcv1 7976.56 7991.67 8004.17 T:led80n6silcv1 8002.08 8009.70 8025.85 T:led80n6t4silcv3 8009.51 8012.04 8023.24 T:led80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 8.20? 8.22? 9.58? T:lakekeyakv1 8.99 9.24 9.97 T:ascon128av11 13.35 14.28 14.61 T:ascon128v11 22.24 22.30 22.71 T:aegis128 28.93 29.62 29.87 T:aes128otrsv2 30.84 31.53 31.74 T:aes128otrpv1 30.97 31.66 31.86 T:aes128otrpv3 35.44 35.60 36.17 T:aes128n12t8clocv3 35.07 35.89 36.50 T:aes128n12clocv1 36.50 37.39 38.17 T:aes256otrcv3 37.52 37.68 38.41 T:aes256otrsv2 37.03 37.92 38.74 T:aes128gcmv1 37.60 38.53 39.51 T:aes128n8t8silcv2 37.88 38.53 39.14 T:aes128n12t8silcv3 37.96 38.74 39.59 T:aes128n8silcv1 37.96 38.86 39.79 T:aes128n12silcv1 39.35 39.47 40.20 T:aes256otrpv1 39.35 39.59 40.12 T:aes256otrpv3 44.27 44.39 45.37 T:deoxysi256v141 44.80 45.29 45.86 T:aesjambuv1 101.97 102.91 104.45 T:aezv5 136.03 136.96 137.17 T:deoxysneq128128v13 204.67 205.65 208.29 T:deoxyseq128128v13 240.80 241.50 244.63 T:deoxysneq256128v13 296.63 296.92 300.42 T:deoxysii256v141 329.92 331.26 335.29 T:aezv3 363.53 364.95 367.92 T:deoxyseq256128v13

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 8.48? 8.54? 9.52? T:lakekeyakv1 9.11? 9.72? 10.17? T:ascon128av11 13.31 14.24 14.49 T:ascon128v11 22.18 22.22 22.34 T:aegis128 29.22 30.15 30.68 T:aes128otrsv2 31.09 31.74 32.02 T:aes128otrpv1 31.33 32.15 34.34 T:aes128otrpv3 35.07 35.93 36.17 T:aes128n12t8clocv3 35.69 36.38 37.35 T:aes128n12clocv1 37.03 37.35 38.29 T:aes256otrcv3 37.11 38.00 39.35 T:aes256otrsv2 37.80 38.45 39.14 T:aes128gcmv1 38.29 38.57 40.00 T:aes128n12t8silcv3 38.53 38.70 39.43 T:aes128n12silcv1 38.53 38.74 39.51 T:aes128n8silcv1 38.45 38.90 40.12 T:aes128n8t8silcv2 38.86 39.71 40.57 T:aes256otrpv1 39.63 39.96 40.73 T:aes256otrpv3 44.80 44.84 45.57 T:aesjambuv1 47.89 48.18 49.56 T:deoxysi256v141 102.42 103.07 104.65 T:aezv5 166.87 167.44 170.25 T:deoxysneq128128v13 204.83 205.81 208.58 T:deoxyseq128128v13 276.08 276.45 280.92 T:deoxysneq256128v13 296.39 297.20 300.05 T:deoxysii256v141 330.08 330.89 333.98 T:aezv3 363.44 363.97 368.08 T:deoxyseq256128v13

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 8.52 8.67 9.40 T:lakekeyakv1 9.11 9.16 10.05 T:ascon128av11 13.35 14.20 14.32 T:ascon128v11 22.24 22.30 22.97 T:aegis128 29.46 29.91 30.52 T:aes128otrsv2 31.13 31.70 32.55 T:aes128otrpv1 31.33 32.10 32.39 T:aes128otrpv3 35.12 35.93 36.74 T:aes128n12t8clocv3 35.60 36.42 37.15 T:aes128n12clocv1 36.50 37.43 38.21 T:aes256otrcv3 37.35 37.80 38.66 T:aes128gcmv1 37.35 37.92 39.55 T:aes256otrsv2 37.60 38.45 38.86 T:aes128n12t8silcv3 37.84 38.53 40.00 T:aes128n8t8silcv2 37.96 38.61 39.39 T:aes128n8silcv1 37.80 38.74 40.24 T:aes128n12silcv1 39.71 39.92 40.61 T:aes256otrpv1 39.27 39.96 41.26 T:aes256otrpv3 44.80 44.88 45.90 T:aesjambuv1 48.14 48.54 49.72 T:deoxysi256v141 102.21 102.99 103.88 T:aezv5 167.15 167.48 167.93 T:deoxysneq128128v13 204.87 205.93 208.66 T:deoxyseq128128v13 275.88 276.61 280.19 T:deoxysneq256128v13 296.51 298.38 301.11 T:deoxysii256v141 329.92 331.14 335.21 T:aezv3 363.65 365.36 367.96 T:deoxyseq256128v13

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 13.67 13.67 13.67 T:morus1280128v1 13.67 13.67 13.67 T:morus1280256v1 13.67 13.67 14.65 T:ascon128av11 13.67 13.67 14.65 T:morus1280128v2 13.67 13.67 14.65 T:morus1280256v2 14.65 15.62 15.62 T:morus640128v1 15.62? 16.60? 17.58? T:morus640128v2 17.58 17.58 18.55 T:ascon128v11 20.51 20.51 21.48 T:norx6441v1 22.46 22.46 23.44 T:norx6441v2 23.44 23.44 23.44 T:norx6441v3 26.37 26.37 27.34 T:norx3241v1 28.32 28.32 28.32 T:norx3241v2 28.32 29.30 29.30 T:norx3241v3 30.27 30.27 30.27 T:norx6461v1 31.25 32.23 32.23 T:riverkeyakv2 32.23 32.23 32.23 T:norx6461v2 32.23 32.23 33.20 T:lakekeyakv1 32.23 32.23 33.20 T:norx6461v3 33.20? 34.18? 38.57? T:lakekeyakv2 37.11 38.09 39.06 T:acorn128v3 39.06 40.04 40.04 T:norx3261v1 40.04 41.02 41.02 T:aes128n12t8clocv3 41.02 41.02 41.02 T:acorn128v2 41.02 41.02 41.99 T:norx3261v2 41.02 41.02 41.99 T:norx3261v3 42.97 43.95 44.92 T:aes128otrsv2 43.95 43.95 46.88 T:aes128n12clocv1 44.92 44.92 44.92 T:aes128otrpv1 44.92 44.92 45.90 T:aes128otrpv3 45.90 46.88 47.85 T:aeadaes128ocbtaglen128v1 45.90 46.88 47.85 T:aeadaes128ocbtaglen64v1 45.90 46.88 47.85 T:aeadaes128ocbtaglen96v1 48.83 48.83 52.73 T:aes128n8t8silcv2 48.83 49.80 52.73 T:aes128n12t8silcv3 52.73 52.73 53.71 T:aeadaes192ocbtaglen64v1 52.73 52.73 53.71 T:aeadaes192ocbtaglen96v1 52.73 52.73 54.69 T:aeadaes192ocbtaglen128v1 52.73 52.73 55.66 T:aes128n12silcv1 52.73 52.73 57.62 T:aes128n8silcv1 55.66 55.66 56.64 T:norx6444v2 55.66 56.64 56.64 T:aes256otrsv2 56.64 57.62 57.62 T:aesjambuv1 56.64 57.62 58.59 T:norx6444v3 57.62 57.62 57.62 T:aes256otrpv3 57.62 57.62 58.59 T:aes256otrpv1 58.59 59.57 59.57 T:ketjeminorv2 59.57 59.57 61.52 T:aeadaes256ocbtaglen64v1 59.57 60.06 61.52 T:aeadaes256ocbtaglen96v1 59.57 60.55 65.43 T:aeadaes256ocbtaglen128v1 60.55 60.55 60.55 T:aegis128 62.50 62.50 64.45 T:aes256otrcv3 64.45 64.45 65.43 T:norx6444v1 66.41 66.41 67.87 T:ketjemajorv2 70.31 71.29 72.27 T:tiaoxinv2 71.29? 71.29? 81.05? T:tiaoxinv1 80.08 81.05 82.03 T:aegis128l 90.82? 91.80? 104.49? T:seakeyakv2 101.56 101.56 111.33 T:proest256otrv1 112.30 112.30 119.14 T:deoxysi256v141 112.30 112.30 124.02 T:ketjesrv1 125.00 125.00 138.67 T:aezv5 133.79 133.79 137.70 T:ketjesrv2 132.81? 135.74? 161.13? T:oceankeyakv2 137.70? 142.58? 166.99? T:aes128gcmv1 146.48 147.46 154.30 T:deoxysneq128128v13 148.44? 148.44? 171.88? T:proest128otrv1 148.44 149.41 160.16 T:riverkeyakv1 162.11 162.11 174.32 T:ketjejrv1 184.57? 184.57? 207.03? T:twine80n6clocv1 243.16 244.14 268.55 T:deoxyseq128128v13 258.79 270.51 283.20 T:deoxysneq256128v13 311.52? 333.98? 350.59? T:ketjejrv2 317.38 340.82 347.66 T:deoxysii256v141 325.20 347.66 352.54 T:lunarkeyakv2 352.54 373.05 375.98 T:seakeyakv1 374.02 389.65 391.60 T:twine80n6t4clocv3 368.16 390.62 393.55 T:twine80n6t4clocv2 403.32 406.25 408.20 T:aezv3 453.12 453.12 477.54 T:deoxyseq256128v13 666.02 672.85 693.36 T:oceankeyakv1 5577.15 5581.05 5666.99 T:acorn128 7036.13 7050.78 7135.74 T:present80n6t4silcv2 7039.06 7056.64 7132.81 T:present80n6silcv1 7047.85 7066.41 7132.81 T:present80n6t4silcv3 13504.88 13533.20 13548.83 T:led80n6silcv1 13492.19 13536.62 13558.59 T:led80n6t4silcv2 13481.45 13561.52 13602.54 T:led80n6t4silcv3

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 13.67 13.67 13.67 T:morus1280128v1 13.67 13.67 13.67 T:morus1280256v1 13.67 14.65 14.65 T:ascon128av11 13.67 14.65 14.65 T:morus1280128v2 13.67 14.65 14.65 T:morus1280256v2 15.62 15.62 15.62 T:morus640128v1 15.62 16.60 16.60 T:morus640128v2 17.58 17.58 18.55 T:ascon128v11 20.51 20.51 21.48 T:norx6441v1 23.44 23.44 23.44 T:norx6441v2 23.44 23.44 24.41 T:norx6441v3 26.37 26.37 27.34 T:norx3241v1 28.32 29.30 29.30 T:norx3241v2 29.30 29.30 29.30 T:norx3241v3 30.27 30.27 31.25 T:norx6461v1 31.25 32.23 32.23 T:lakekeyakv1 31.25 32.23 32.23 T:riverkeyakv2 32.23 32.23 33.20 T:norx6461v2 32.23 33.20 33.20 T:norx6461v3 33.20 33.20 33.69 T:lakekeyakv2 38.09 38.09 38.09 T:acorn128v3 39.06 40.04 40.04 T:norx3261v1 41.02 41.02 41.99 T:acorn128v2 41.02 41.02 41.99 T:aes128n12t8clocv3 41.02 41.99 41.99 T:norx3261v2 41.99 41.99 42.97 T:norx3261v3 43.95 43.95 46.88 T:aes128otrsv2 44.92 44.92 46.88 T:aes128n12clocv1 44.92 45.90 45.90 T:aes128otrpv1 44.92 45.90 45.90 T:aes128otrpv3 48.83 48.83 49.80 T:aes128n12t8silcv3 48.83 48.83 52.73 T:aes128n8t8silcv2 52.73 52.73 53.71 T:aes128n8silcv1 52.73 52.73 54.69 T:aeadaes128ocbtaglen96v1 52.73 52.73 55.66 T:aes128n12silcv1 52.73 53.71 54.69 T:aeadaes128ocbtaglen128v1 52.73 53.71 54.69 T:aeadaes128ocbtaglen64v1 55.66 56.64 56.64 T:norx6444v2 56.64 56.64 57.62 T:aes256otrsv2 56.64 57.62 57.62 T:aesjambuv1 57.62 57.62 58.59 T:aes256otrpv1 57.62 57.62 58.59 T:aes256otrpv3 57.62 57.62 58.59 T:norx6444v3 58.59 58.59 59.57 T:ketjeminorv2 60.55 60.55 61.52 T:aeadaes192ocbtaglen96v1 60.55 60.55 61.52 T:aegis128 60.55? 60.55? 67.38? T:aeadaes192ocbtaglen128v1 60.55? 60.55? 67.38? T:aeadaes192ocbtaglen64v1 62.50 62.50 62.50 T:aes256otrcv3 64.45 64.45 65.43 T:norx6444v1 66.41 66.41 66.89 T:ketjemajorv2 69.34 69.34 71.29 T:aeadaes256ocbtaglen64v1 69.34 69.82 71.29 T:aeadaes256ocbtaglen96v1 69.34? 69.82? 77.15? T:aeadaes256ocbtaglen128v1 71.29 71.29 79.10 T:tiaoxinv1 74.22 74.22 76.17 T:tiaoxinv2 81.05 81.05 82.03 T:aegis128l 89.84? 91.80? 102.54? T:seakeyakv2 104.49 105.47 110.35 T:proest256otrv1 112.30? 112.30? 125.49? T:ketjesrv1 123.05 124.02 136.72 T:deoxysi256v141 124.02 125.98 135.74 T:aezv5 129.88 129.88 133.79 T:ketjesrv2 133.79? 136.72? 168.95? T:oceankeyakv2 134.77? 140.62? 156.25? T:aes128gcmv1 148.44 149.41 154.30 T:riverkeyakv1 149.41? 149.41? 172.85? T:proest128otrv1 162.60? 164.06? 207.03? T:ketjejrv1 175.78? 176.76? 201.17? T:deoxysneq128128v13 184.57? 185.55? 208.01? T:twine80n6clocv1 243.16 243.16 269.53 T:deoxyseq128128v13 291.99 315.43 318.36 T:deoxysneq256128v13 303.71? 326.17? 341.80? T:ketjejrv2 317.38 340.82 342.77 T:deoxysii256v141 326.17? 349.61? 367.19? T:lunarkeyakv2 373.05 375.00 391.60 T:seakeyakv1 369.14 390.14 391.60 T:twine80n6t4clocv3 369.14 390.62 406.25 T:twine80n6t4clocv2 383.79 407.23 411.13 T:aezv3 430.66 454.10 469.73 T:deoxyseq256128v13 664.06 667.97 690.43 T:oceankeyakv1 5591.80 5613.28 5667.97 T:acorn128 7023.44 7050.78 7114.26 T:present80n6t4silcv2 7024.41 7052.73 7130.86 T:present80n6t4silcv3 7037.11 7055.66 7139.65 T:present80n6silcv1 13477.54 13501.95 13537.11 T:led80n6silcv1 13477.54 13545.41 13581.05 T:led80n6t4silcv2 13490.23 13562.50 13581.05 T:led80n6t4silcv3

Cycles/byte for 64+64 forgery 25% 50% 75% aead 13.67 13.67 13.67 T:morus1280256v1 13.67 13.67 14.65 T:ascon128av11 13.67 13.67 14.65 T:morus1280128v1 13.67 13.67 14.65 T:morus1280128v2 13.67 13.67 14.65 T:morus1280256v2 15.62 15.62 15.62 T:morus640128v1 15.62 16.60 16.60 T:morus640128v2 17.58 17.58 19.53 T:ascon128v11 20.51 21.48 21.48 T:norx6441v1 23.44 23.44 23.44 T:norx6441v2 23.44 24.41 24.41 T:norx6441v3 26.37 27.34 27.34 T:norx3241v1 29.30 29.30 29.30 T:norx3241v2 29.30 29.30 30.27 T:norx3241v3 30.27 30.27 30.27 T:norx6461v1 31.25 32.23 32.23 T:lakekeyakv1 32.23 32.23 33.20 T:riverkeyakv2 32.23 33.20 33.20 T:norx6461v2 32.23 33.20 33.20 T:norx6461v3 33.20 33.20 34.18 T:lakekeyakv2 38.09 38.09 38.09 T:acorn128v3 39.06 40.04 40.04 T:norx3261v1 41.02 41.02 41.02 T:acorn128v2 41.02 41.02 41.99 T:aes128n12t8clocv3 41.99 41.99 41.99 T:norx3261v2 41.99 41.99 42.97 T:norx3261v3 43.95 43.95 44.92 T:aes128otrsv2 43.95 44.92 48.83 T:aes128n12clocv1 44.92 45.90 46.88 T:aes128otrpv1 45.90 45.90 46.88 T:aes128otrpv3 48.83 48.83 49.80 T:aes128n12t8silcv3 48.83 48.83 51.76 T:aes128n8t8silcv2 52.73 52.73 53.71 T:aes128n8silcv1 52.73 52.73 54.69 T:aeadaes128ocbtaglen128v1 52.73 52.73 55.66 T:aeadaes128ocbtaglen64v1 52.73 52.73 55.66 T:aes128n12silcv1 52.73? 52.73? 59.57? T:aeadaes128ocbtaglen96v1 56.64 56.64 56.64 T:norx6444v2 56.64 56.64 57.62 T:aes256otrsv2 56.64 57.62 57.62 T:aesjambuv1 57.62 57.62 58.59 T:aes256otrpv1 57.62 57.62 58.59 T:aes256otrpv3 57.62 57.62 58.59 T:norx6444v3 58.59 59.57 59.57 T:ketjeminorv2 59.57 60.55 61.52 T:aeadaes192ocbtaglen96v1 60.55 60.55 61.52 T:aegis128 60.55 60.55 62.50 T:aeadaes192ocbtaglen64v1 60.55? 60.55? 67.38? T:aeadaes192ocbtaglen128v1 62.50 62.50 63.48 T:aes256otrcv3 64.45 64.45 65.43 T:norx6444v1 66.41 66.41 67.38 T:ketjemajorv2 69.34 69.34 70.31 T:aeadaes256ocbtaglen128v1 69.34 69.34 70.31 T:aeadaes256ocbtaglen64v1 69.34 69.82 76.17 T:aeadaes256ocbtaglen96v1 70.31 71.29 74.22 T:tiaoxinv1 73.24 74.22 74.22 T:tiaoxinv2 80.08 81.05 82.03 T:aegis128l 90.82 91.80 100.59 T:seakeyakv2 98.63 99.61 100.59 T:proest256otrv1 113.28? 114.26? 136.72? T:ketjesrv1 123.05 123.05 133.79 T:deoxysi256v141 124.02 125.00 135.74 T:aezv5 129.88 130.86 133.79 T:ketjesrv2 133.79? 133.79? 161.13? T:oceankeyakv2 134.77? 141.60? 163.09? T:aes128gcmv1 149.41 149.41 152.34 T:proest128otrv1 149.41? 149.41? 173.83? T:riverkeyakv1 162.60? 163.09? 185.06? T:ketjejrv1 175.78? 176.76? 203.12? T:deoxysneq128128v13 184.57? 186.04? 212.89? T:twine80n6clocv1 243.16? 255.86? 274.41? T:deoxyseq128128v13 292.97 315.43 319.34 T:deoxysneq256128v13 310.55 327.15 343.75 T:ketjejrv2 320.31 340.82 349.61 T:deoxysii256v141 325.20 348.63 353.52 T:lunarkeyakv2 351.56 375.00 378.91 T:seakeyakv1 368.16 389.65 392.58 T:twine80n6t4clocv3 368.16 390.62 399.41 T:twine80n6t4clocv2 383.79? 407.23? 430.66? T:aezv3 453.12 455.08 477.54 T:deoxyseq256128v13 665.04 669.92 687.50 T:oceankeyakv1 5584.96 5596.68 5675.78 T:acorn128 7044.92 7050.78 7106.45 T:present80n6t4silcv2 7047.85 7052.73 7114.26 T:present80n6t4silcv3 7033.20 7058.59 7135.74 T:present80n6silcv1 13454.10 13528.32 13557.62 T:led80n6silcv1 13492.19 13547.85 13576.17 T:led80n6t4silcv3 13500.00 13553.22 13586.91 T:led80n6t4silcv2