VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: aarch64; Cortex-A76 (414fd0b1); 2023 Broadcom BCM2712; 4 x 1500MHz; pi5, supercop-20250415

[Page version: 20251103 11:56:53]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead -2.96? 0.00? 50.38? T:colm0v1 0.53 0.53 0.54 aegis128l 0.78 0.78 0.78 aegis256 0.78 0.79 0.80 T:aezv5 0.79 0.81 0.81 T:aezv4 1.36 1.38 1.39 T:morus1280128v2 1.37 1.38 1.38 T:morus1280256v2 1.37 1.38 1.39 T:morus1280128v1 1.36 1.38 1.39 T:morus1280256v1 2.52 2.53 2.55 T:norx6441v2 2.53 2.54 2.56 T:norx6441v3 2.56 2.59 2.60 T:norx6444v3 2.57 2.59 2.61 T:norx6444v2 2.72 2.75 2.76 T:morus640128v1 2.66 2.76 2.83 T:lunarkeyakv2 2.75 2.76 2.78 T:morus640128v2 2.96 2.96 2.96 T:aes128gcmv1 3.01 3.03 3.05 T:norx6441v1 3.06 3.10 3.13 T:norx6444v1 3.14 3.15 3.17 T:tiaoxinv1 3.14 3.16 3.19 T:tiaoxinv2 3.47 3.52 3.54 T:lakekeyakv1 3.71 3.73 3.76 T:norx6461v2 3.72 3.74 3.76 T:norx6461v3 3.81 3.85 3.86 T:ketjemajorv2 3.85 3.87 3.88 T:lakekeyakv2 3.95 3.98 4.00 T:seakeyakv2 3.92 4.00 4.07 T:oceankeyakv2 4.43 4.46 4.48 T:norx6461v1 4.73 4.75 4.77 T:acorn128v3 4.94 4.95 4.97 T:norx3241v3 4.94 4.95 4.96 T:acorn128v2 4.94 4.96 4.97 T:norx3241v2 5.29 5.31 5.32 ascon128av12 5.88 5.91 5.94 T:norx3241v1 6.25 6.26 6.28 T:ascon96v1 6.32 6.33 6.35 T:ascon128av11 6.93 6.97 7.00 T:aegis128 7.31 7.33 7.34 T:norx3261v3 7.36 7.37 7.39 T:norx3261v2 7.80 7.82 7.84 ascon128v12 8.45 8.47 8.49 T:ascon128v11 8.46 8.48 8.50 T:ascon128v1 8.46 8.48 8.52 T:ketjeminorv2 8.60 8.63 8.73 T:norx3261v1 8.98 9.00 9.02 T:riverkeyakv2 12.32 12.35 12.38 T:aes128otrcv3 13.70 13.72 13.75 T:aes128otrsv3 13.70 13.73 13.76 T:aes128otrpv3 14.01 14.03 14.07 T:aes128otrpv2 14.04 14.05 14.06 T:aes128otrsv2 14.07 14.08 14.11 T:aes128otrpv1 14.04 14.09 14.11 T:aes128otrsv1 15.30 15.79 16.77 T:oceankeyakv1 15.30? 15.85? 17.10? T:seakeyakv1 16.19 16.24 16.25 T:aes256otrcv3 17.24 17.26 17.31 T:deoxysi128v141 17.59 17.61 17.64 T:aes256otrsv3 17.56 17.62 17.65 T:aes256otrpv3 17.90 17.91 17.93 T:aes256otrsv2 17.89 17.92 17.95 T:aes256otrpv2 17.91 17.93 17.96 T:aes256otrsv1 17.91 17.95 17.98 T:aes256otrpv1 19.00 19.06 19.07 T:proest256otrv1 19.24 19.26 19.28 T:deoxysi256v141 21.41 21.44 21.48 T:aesjambuv1 22.61 22.66 22.74 T:aes128n12clocv1 22.62 22.67 22.70 T:aes128n8t8clocv2 22.64 22.67 22.72 T:aes128n12t8clocv3 22.64 22.67 22.74 T:aes128n12t8clocv2 22.80 22.84 22.86 T:aes128n12t8silcv3 22.85 22.87 23.03 T:aes128n12silcv1 22.82 22.89 22.92 T:aes128n8clocv1 22.86 22.97 23.01 T:aes128n12t8silcv2 22.96 22.99 23.02 T:aes128n8t8silcv2 22.87 23.01 23.08 T:aes128n8silcv1 20.74? 23.71? 23.71? T:aeadaes128ocbtaglen96v1 23.71 23.71 23.71 T:aeadaes128ocbtaglen64v1 26.67 26.67 26.67 T:aeadaes192ocbtaglen128v1 26.67 26.67 26.67 T:aeadaes192ocbtaglen64v1 26.67 26.67 26.67 T:aeadaes192ocbtaglen96v1 29.64 29.64 29.64 T:aeadaes256ocbtaglen64v1 29.64 29.64 29.64 T:aeadaes256ocbtaglen96v1 31.70 31.85 31.89 T:ketjesrv1 33.17 33.21 33.29 T:ketjesrv2 33.53 33.95 34.83 T:riverkeyakv1 37.07 37.10 37.13 T:deoxysii128v141 44.45? 44.45? 50.38? T:colm127v1 45.48 45.54 45.64 T:proest128otrv1 58.53 58.59 58.87 T:ketjejrv1 73.96 74.01 74.12 T:deoxysneq128128v13 74.57 74.71 74.83 T:deoxysneq128128v1 94.62 94.94 95.70 T:ketjejrv2 97.22 97.25 97.32 T:twine80n6clocv1 114.61 115.03 115.97 T:deoxysneq256128v13 114.32 116.00 116.32 T:deoxysneq256128v1 131.08 131.27 131.43 T:aezv3 135.48 135.58 135.77 T:deoxysii256v141 135.75 135.89 136.79 T:twine80n6t4clocv2 135.80 135.93 137.08 T:twine80n6t4clocv3 149.78 149.96 150.24 T:deoxyseq128128v1 150.53 150.62 150.79 T:deoxyseq128128v13 158.45 158.65 158.85 T:aezv1 231.76 233.49 235.07 T:deoxyseq256128v13 233.01 235.64 236.49 T:deoxyseq256128v1 512.32 516.27 517.11 T:acorn128 3918.47 3918.65 3919.25 T:present80n6t4silcv2 3918.73 3919.02 3919.24 T:present80n6t4silcv3 3918.92 3920.45 3921.23 T:present80n6silcv1 5306.73 5308.73 5322.73 T:led80n6t4silcv2 5293.46 5313.90 5322.90 T:led80n6silcv1 5313.00 5315.74 5325.64 T:led80n6t4silcv3 24253.62 24259.55 24268.44 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead -2.96? 0.00? 53.34? T:colm0v1 0.52 0.57 0.57 aegis128l 0.77 0.79 0.79 T:aezv5 0.79 0.80 0.81 T:aezv4 0.80 0.83 0.85 aegis256 1.33 1.34 1.35 T:morus1280128v2 1.33 1.35 1.36 T:morus1280128v1 1.34 1.35 1.36 T:morus1280256v2 1.34 1.35 1.36 T:morus1280256v1 2.53 2.55 2.61 T:norx6441v2 2.55 2.57 2.60 T:norx6444v3 2.55 2.58 2.60 T:norx6441v3 2.56 2.59 2.62 T:norx6444v2 2.63 2.64 2.65 T:morus640128v2 2.63 2.64 2.65 T:morus640128v1 2.71 2.78 2.85 T:lunarkeyakv2 2.96 2.96 2.96 T:aes128gcmv1 3.03 3.06 3.07 T:norx6441v1 3.04 3.08 3.11 T:norx6444v1 3.49 3.52 3.55 T:lakekeyakv1 3.74 3.77 3.80 T:norx6461v2 3.75 3.77 3.80 T:norx6461v3 3.83 3.85 3.88 T:ketjemajorv2 3.89 3.90 3.92 T:lakekeyakv2 3.96 3.98 4.02 T:seakeyakv2 3.92 3.99 4.10 T:oceankeyakv2 4.43 4.45 4.47 T:tiaoxinv1 4.41 4.45 4.49 T:norx6461v1 4.44 4.45 4.46 T:tiaoxinv2 4.74 4.75 4.78 T:acorn128v3 4.95 4.96 4.97 T:acorn128v2 4.96 4.97 4.99 T:norx3241v3 4.97 5.00 5.03 T:norx3241v2 5.23 5.24 5.25 ascon128av12 5.86 5.89 5.91 T:norx3241v1 6.31 6.34 6.35 T:ascon128av11 6.38 6.40 6.42 T:ascon96v1 6.97 7.00 7.02 T:aegis128 7.40 7.42 7.44 T:norx3261v2 7.42 7.44 7.47 T:norx3261v3 7.65 7.66 7.68 ascon128v12 8.07 8.13 8.17 T:ketjeminorv2 8.49 8.52 8.54 T:ascon128v11 8.51 8.54 8.57 T:ascon128v1 8.77 8.80 8.83 T:norx3261v1 9.03 9.06 9.10 T:riverkeyakv2 12.12 12.14 12.17 T:aes128otrcv3 13.97 14.01 14.03 T:aes128otrpv3 13.98 14.01 14.05 T:aes128otrsv3 14.18 14.22 14.25 T:aes128otrsv1 14.21 14.22 14.26 T:aes128otrpv2 14.18 14.22 14.26 T:aes128otrsv2 14.20 14.24 14.26 T:aes128otrpv1 15.46 15.87 16.97 T:seakeyakv1 15.41 15.93 16.76 T:oceankeyakv1 15.98 16.03 16.08 T:aes256otrcv3 17.82 17.85 17.90 T:aes256otrsv3 17.83 17.87 17.90 T:aes256otrpv3 18.07 18.08 18.13 T:aes256otrpv1 18.06 18.09 18.12 T:aes256otrsv2 18.08 18.09 18.13 T:aes256otrsv1 18.08 18.10 18.13 T:aes256otrpv2 18.49 18.78 18.88 T:proest256otrv1 21.16 21.18 21.21 T:deoxysi128v141 21.29 21.34 21.39 T:aesjambuv1 22.42 22.47 22.53 T:aes128n8clocv1 22.43 22.50 22.55 T:aes128n12t8clocv3 22.46 22.50 22.55 T:aes128n12clocv1 22.45 22.54 22.59 T:aes128n8t8clocv2 22.52 22.58 22.65 T:aes128n12t8clocv2 22.98 23.05 23.23 T:aes128n12t8silcv3 22.99 23.05 23.21 T:aes128n8t8silcv2 22.98 23.06 23.13 T:aes128n8silcv1 23.01 23.13 23.24 T:aes128n12t8silcv2 23.17 23.21 23.25 T:deoxysi256v141 23.01 23.21 23.27 T:aes128n12silcv1 23.71 23.71 23.71 T:aeadaes128ocbtaglen64v1 23.71 23.71 23.71 T:aeadaes128ocbtaglen96v1 26.67 26.67 26.67 T:aeadaes192ocbtaglen128v1 26.67 26.67 26.67 T:aeadaes192ocbtaglen64v1 26.67 26.67 26.67 T:aeadaes192ocbtaglen96v1 26.67? 29.64? 32.60? T:aeadaes256ocbtaglen64v1 26.67? 29.64? 32.60? T:aeadaes256ocbtaglen96v1 32.99 33.05 33.11 T:ketjesrv1 33.43 33.47 33.69 T:ketjesrv2 34.16 34.79 34.93 T:riverkeyakv1 36.93 36.96 37.00 T:deoxysii128v141 45.15 45.21 45.28 T:proest128otrv1 47.42? 50.38? 53.34? T:colm127v1 58.82 59.15 59.39 T:ketjejrv1 92.67 92.77 93.04 T:ketjejrv2 96.92 97.01 97.04 T:twine80n6clocv1 108.61 109.11 109.25 T:deoxysneq128128v13 109.50 109.60 109.66 T:deoxysneq128128v1 131.02 131.16 131.44 T:aezv3 134.16 134.63 134.72 T:twine80n6t4clocv2 134.71 134.83 135.02 T:deoxysii256v141 133.92 135.49 136.18 T:twine80n6t4clocv3 147.46 148.51 148.89 T:deoxysneq256128v1 147.91 149.00 149.40 T:deoxysneq256128v13 154.01 154.14 154.28 T:deoxyseq128128v13 158.39 158.49 158.58 T:aezv1 214.87 215.06 215.28 T:deoxyseq128128v1 232.89 234.03 234.29 T:deoxyseq256128v13 296.66 299.69 300.02 T:deoxyseq256128v1 495.39 500.45 501.65 T:acorn128 3918.84 3919.30 3919.68 T:present80n6t4silcv3 3919.15 3919.42 3919.88 T:present80n6t4silcv2 3918.73 3920.75 3922.09 T:present80n6silcv1 5296.96 5298.38 5301.84 T:led80n6silcv1 5303.89 5306.69 5319.13 T:led80n6t4silcv2 5311.12 5312.21 5326.24 T:led80n6t4silcv3 24253.62 24253.62 24259.55 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead -2.96? 0.00? 53.34? T:colm0v1 0.26? 0.30? 0.32? T:aezv4 0.34 0.34 0.36 T:aezv5 0.56 0.59 0.60 aegis128l 0.85 0.87 0.89 aegis256 1.33 1.34 1.35 T:morus1280128v1 1.33 1.34 1.36 T:morus1280128v2 1.34 1.35 1.35 T:morus1280256v1 1.33 1.35 1.36 T:morus1280256v2 2.59 2.61 2.67 T:norx6444v2 2.60 2.62 2.65 T:norx6441v3 2.56 2.62 2.64 T:norx6441v2 2.63 2.64 2.65 T:morus640128v1 2.63 2.64 2.65 T:morus640128v2 2.61 2.64 2.66 T:norx6444v3 2.73 2.81 2.83 T:lunarkeyakv2 2.96 2.96 2.96 T:aes128gcmv1 3.05 3.08 3.10 T:norx6441v1 3.08 3.11 3.15 T:norx6444v1 3.51 3.52 3.53 T:lakekeyakv1 3.78 3.80 3.82 T:norx6461v3 3.80 3.83 3.84 T:norx6461v2 3.86 3.88 3.91 T:ketjemajorv2 3.88 3.92 3.93 T:lakekeyakv2 3.99 4.00 4.02 T:seakeyakv2 3.96 4.02 4.19 T:oceankeyakv2 4.43 4.45 4.46 T:tiaoxinv2 4.42 4.45 4.47 T:tiaoxinv1 4.43 4.47 4.50 T:norx6461v1 4.74 4.77 4.79 T:acorn128v3 4.95 4.96 4.98 T:acorn128v2 4.99 5.00 5.03 T:norx3241v3 5.00 5.02 5.03 T:norx3241v2 5.23 5.25 5.26 ascon128av12 5.91 5.92 5.94 T:norx3241v1 6.31 6.34 6.36 T:ascon128av11 6.38 6.39 6.41 T:ascon96v1 6.97 7.03 7.06 T:aegis128 7.42 7.45 7.47 T:norx3261v2 7.44 7.49 7.54 T:norx3261v3 7.64 7.65 7.67 ascon128v12 8.09 8.11 8.21 T:ketjeminorv2 8.52 8.53 8.56 T:ascon128v11 8.52 8.55 8.57 T:ascon128v1 8.79 8.83 8.86 T:norx3261v1 9.08 9.09 9.11 T:riverkeyakv2 12.12 12.14 12.18 T:aes128otrcv3 14.01 14.03 14.07 T:aes128otrpv3 14.03 14.05 14.07 T:aes128otrsv3 14.22 14.24 14.27 T:aes128otrsv1 14.22 14.25 14.27 T:aes128otrsv2 14.23 14.26 14.28 T:aes128otrpv1 14.24 14.26 14.29 T:aes128otrpv2 15.44 15.83 16.78 T:oceankeyakv1 15.48 15.93 16.93 T:seakeyakv1 16.01 16.04 16.06 T:aes256otrcv3 17.87 17.89 17.90 T:aes256otrpv3 17.87 17.89 17.92 T:aes256otrsv3 18.10 18.12 18.13 T:aes256otrsv2 18.10 18.12 18.15 T:aes256otrpv2 18.10 18.13 18.17 T:aes256otrpv1 18.11 18.14 18.18 T:aes256otrsv1 18.84 18.86 18.87 T:proest256otrv1 21.18 21.22 21.26 T:deoxysi128v141 21.32 21.36 21.43 T:aesjambuv1 22.42 22.48 22.57 T:aes128n8clocv1 22.45 22.50 22.53 T:aes128n12clocv1 22.49 22.53 22.57 T:aes128n8t8clocv2 22.48 22.53 22.58 T:aes128n12t8clocv3 22.52 22.56 22.60 T:aes128n12t8clocv2 22.99 23.02 23.25 T:aes128n12silcv1 23.00 23.05 23.23 T:aes128n8silcv1 23.01 23.05 23.10 T:aes128n8t8silcv2 23.03 23.17 23.24 T:aes128n12t8silcv3 22.97 23.24 23.26 T:aes128n12t8silcv2 23.20 23.25 23.27 T:deoxysi256v141 23.71 23.71 23.71 T:aeadaes128ocbtaglen64v1 23.71 23.71 23.71 T:aeadaes128ocbtaglen96v1 26.67 26.67 26.67 T:aeadaes192ocbtaglen128v1 26.67 26.67 26.67 T:aeadaes192ocbtaglen64v1 26.67 26.67 26.67 T:aeadaes192ocbtaglen96v1 26.67? 29.64? 32.60? T:aeadaes256ocbtaglen64v1 26.67? 29.64? 32.60? T:aeadaes256ocbtaglen96v1 33.03 33.08 33.35 T:ketjesrv1 33.43 33.48 33.50 T:ketjesrv2 34.37 34.51 35.12 T:riverkeyakv1 36.96 36.99 37.03 T:deoxysii128v141 45.15 45.20 45.32 T:proest128otrv1 47.42? 47.42? 53.34? T:colm127v1 58.47 59.02 59.20 T:ketjejrv1 92.63 92.89 93.06 T:ketjejrv2 96.92 96.97 97.04 T:twine80n6clocv1 109.02 109.07 109.24 T:deoxysneq128128v13 109.54 109.62 109.71 T:deoxysneq128128v1 130.90 131.07 131.38 T:aezv3 133.77 133.79 133.91 T:twine80n6t4clocv3 134.37 134.51 136.29 T:twine80n6t4clocv2 134.87 134.92 135.04 T:deoxysii256v141 147.35 148.54 148.86 T:deoxysneq256128v1 147.94 149.04 149.23 T:deoxysneq256128v13 153.92 154.05 154.29 T:deoxyseq128128v13 158.32 158.39 158.50 T:aezv1 214.87 215.02 215.30 T:deoxyseq128128v1 232.93 233.99 234.36 T:deoxyseq256128v13 296.64 300.29 300.59 T:deoxyseq256128v1 447.49 450.46 450.46 aes256gcmv1 495.24 500.33 501.68 T:acorn128 3919.04 3919.35 3919.60 T:present80n6t4silcv3 3919.17 3919.38 3919.80 T:present80n6t4silcv2 3919.59 3920.88 3921.40 T:present80n6silcv1 5283.83 5300.53 5310.29 T:led80n6silcv1 5306.34 5307.79 5319.05 T:led80n6t4silcv2 5310.02 5316.16 5320.10 T:led80n6t4silcv3

Cycles/byte for long+long encrypt 25% 50% 75% aead -2.96? 0.00? 37.04? T:colm0v1 0.44 0.45 0.46 aegis128l 0.52 0.54 0.54 T:aezv4 0.53 0.54 0.55 T:aezv5 0.66 0.67 0.67 aegis256 1.39 1.41 1.42 T:morus1280256v1 1.39 1.41 1.42 T:morus1280128v2 1.40 1.41 1.42 T:morus1280128v1 1.40 1.42 1.43 T:morus1280256v2 2.53 2.54 2.56 T:norx6441v3 2.53 2.54 2.56 T:norx6441v2 2.53 2.56 2.58 T:norx6444v3 2.56 2.57 2.58 T:norx6444v2 2.77 2.78 2.80 T:morus640128v1 2.76 2.80 2.81 T:morus640128v2 1.48? 2.96? 2.96? T:aes128gcmv1 3.02 3.04 3.05 T:tiaoxinv2 3.02 3.04 3.05 T:tiaoxinv1 3.02 3.05 3.06 T:norx6441v1 3.07 3.08 3.11 T:norx6444v1 3.30 3.31 3.33 T:lakekeyakv1 3.34 3.40 3.46 T:oceankeyakv2 3.41 3.43 3.46 T:seakeyakv2 3.47 3.49 3.50 T:lakekeyakv2 3.77 3.77 3.80 T:norx6461v2 3.79 3.81 3.81 T:ketjemajorv2 3.80 3.83 3.85 T:norx6461v3 3.88 3.93 3.99 T:lunarkeyakv2 4.51 4.53 4.56 T:norx6461v1 4.67 4.68 4.70 T:acorn128v3 4.85 4.87 4.90 T:acorn128v2 4.93 4.95 4.97 T:norx3241v3 5.00 5.02 5.04 T:norx3241v2 5.29 5.31 5.32 ascon128av12 5.95 5.97 5.99 T:norx3241v1 6.24 6.25 6.27 T:ascon96v1 6.24 6.26 6.28 T:ascon128av11 6.43 6.45 6.47 T:riverkeyakv2 6.87 6.89 6.91 T:aegis128 7.34 7.35 7.36 T:norx3261v3 7.39 7.43 7.45 T:ketjeminorv2 7.44 7.46 7.48 T:norx3261v2 7.79 7.80 7.82 ascon128v12 8.46 8.47 8.48 T:ascon128v1 8.45 8.47 8.48 T:ascon128v11 8.91 8.95 8.97 T:norx3261v1 12.24 12.26 12.28 T:aes128otrcv3 12.55 12.57 12.59 T:aes128otrsv3 12.72 12.74 12.76 T:aes128otrsv2 12.72 12.74 12.77 T:aes128otrsv1 12.97 12.98 12.99 T:aes128otrpv3 13.26 13.29 13.30 T:aes128otrpv2 13.28 13.30 13.32 T:aes128otrpv1 15.51 15.74 16.76 T:seakeyakv1 16.11 16.12 16.15 T:aes256otrcv3 16.00 16.20 16.35 T:oceankeyakv1 16.43 16.44 16.46 T:aes256otrsv3 16.59 16.60 16.62 T:aes256otrsv2 16.60 16.61 16.64 T:aes256otrsv1 16.83 16.85 16.87 T:aes256otrpv3 16.98 17.00 17.03 T:aes128n8t8clocv2 16.97 17.01 17.03 T:aes128n12clocv1 16.98 17.01 17.05 T:aes128n12t8clocv2 16.98 17.01 17.03 T:aes128n12t8clocv3 17.07 17.10 17.15 T:aes128n8silcv1 17.09 17.11 17.14 T:aes128n8clocv1 17.08 17.12 17.15 T:aes128n12t8silcv2 17.10 17.13 17.18 T:aes128n12silcv1 17.10 17.14 17.17 T:aes128n8t8silcv2 17.13 17.15 17.21 T:aes128n12t8silcv3 17.14 17.16 17.18 T:aes256otrpv1 17.14 17.17 17.19 T:aes256otrpv2 17.27 17.29 17.33 T:deoxysi128v141 18.96 19.00 19.09 T:proest256otrv1 19.28 19.30 19.31 T:deoxysi256v141 21.29 21.33 21.36 T:aesjambuv1 20.74? 22.23? 23.71? T:aeadaes128ocbtaglen64v1 20.74? 22.23? 23.71? T:aeadaes128ocbtaglen96v1 25.19 25.19 26.67 T:aeadaes192ocbtaglen128v1 25.19 25.19 26.67 T:aeadaes192ocbtaglen64v1 25.19 25.19 26.67 T:aeadaes192ocbtaglen96v1 27.39 27.41 27.42 T:deoxysii128v141 28.15 28.15 28.15 T:aeadaes256ocbtaglen96v1 28.15 28.15 29.64 T:aeadaes256ocbtaglen64v1 31.17 31.21 31.35 T:ketjesrv1 31.17 31.23 31.27 T:ketjesrv2 32.37 32.66 33.06 T:riverkeyakv1 34.08 34.08 35.56 T:colm127v1 45.11 45.39 45.53 T:proest128otrv1 55.84 55.90 56.35 T:ketjejrv1 72.82 72.86 72.91 T:twine80n6clocv1 75.61 75.69 75.86 T:deoxysneq128128v13 75.97 76.12 76.19 T:deoxysneq128128v1 91.44 91.82 92.01 T:ketjejrv2 98.36 98.46 98.56 T:aezv3 100.70 101.17 101.20 T:deoxysii256v141 101.62 101.80 102.30 T:twine80n6t4clocv2 101.65 102.23 102.36 T:twine80n6t4clocv3 104.73 104.90 105.00 T:aezv1 112.78 112.84 112.87 T:deoxyseq128128v13 113.14 113.23 113.39 T:deoxyseq128128v1 114.64 115.71 116.08 T:deoxysneq256128v13 114.70 116.37 116.67 T:deoxysneq256128v1 173.34 174.77 176.10 T:deoxyseq256128v13 175.13 177.04 178.37 T:deoxyseq256128v1 504.57 506.21 507.53 T:acorn128 2938.64 2938.75 2939.07 T:present80n6t4silcv3 2938.50 2938.76 2938.89 T:present80n6t4silcv2 2938.51 2939.69 2939.99 T:present80n6silcv1 3976.42 3980.87 3988.45 T:led80n6silcv1 3983.79 3985.72 3989.15 T:led80n6t4silcv2 3984.11 3986.17 3991.63 T:led80n6t4silcv3 12352.04 12353.52 12356.49 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead -2.96? 0.00? 38.53? T:colm0v1 0.43 0.45 0.47 aegis128l 0.52 0.54 0.54 T:aezv4 0.54 0.54 0.55 T:aezv5 0.67 0.69 0.70 aegis256 1.38 1.40 1.41 T:morus1280128v2 1.39 1.40 1.41 T:morus1280256v2 1.39 1.40 1.41 T:morus1280128v1 1.39 1.40 1.41 T:morus1280256v1 1.48? 1.48? 2.96? T:aes128gcmv1 2.53 2.56 2.59 T:norx6441v2 2.54 2.56 2.60 T:norx6444v2 2.55 2.57 2.57 T:norx6441v3 2.59 2.62 2.65 T:norx6444v3 2.72 2.74 2.75 T:morus640128v2 2.73 2.74 2.75 T:morus640128v1 3.01 3.03 3.04 T:norx6441v1 3.03 3.05 3.08 T:norx6444v1 3.30 3.32 3.34 T:lakekeyakv1 3.33 3.40 3.44 T:oceankeyakv2 3.40 3.41 3.44 T:seakeyakv2 3.46 3.47 3.49 T:lakekeyakv2 3.67 3.68 3.69 T:tiaoxinv1 3.67 3.68 3.69 T:tiaoxinv2 3.68 3.70 3.76 T:norx6461v3 3.70 3.74 3.76 T:norx6461v2 3.80 3.80 3.82 T:ketjemajorv2 3.90 3.94 4.03 T:lunarkeyakv2 4.39 4.42 4.45 T:norx6461v1 4.67 4.69 4.70 T:acorn128v3 4.85 4.86 4.88 T:acorn128v2 4.94 4.95 4.98 T:norx3241v3 4.95 4.97 4.99 T:norx3241v2 5.27 5.28 5.28 ascon128av12 5.85 5.87 5.88 T:norx3241v1 6.28 6.29 6.31 T:ascon128av11 6.33 6.34 6.36 T:ascon96v1 6.47 6.48 6.50 T:riverkeyakv2 6.89 6.91 6.92 T:aegis128 7.22 7.25 7.27 T:ketjeminorv2 7.27 7.29 7.32 T:norx3261v2 7.31 7.33 7.36 T:norx3261v3 7.71 7.72 7.75 ascon128v12 8.48 8.50 8.52 T:ascon128v1 8.49 8.50 8.52 T:ascon128v11 8.69 8.70 8.72 T:norx3261v1 12.13 12.15 12.17 T:aes128otrcv3 12.70 12.71 12.73 T:aes128otrsv3 12.79 12.81 12.83 T:aes128otrsv1 12.80 12.82 12.84 T:aes128otrsv2 13.09 13.10 13.15 T:aes128otrpv3 13.33 13.35 13.38 T:aes128otrpv1 13.36 13.38 13.40 T:aes128otrpv2 15.53 15.69 16.63 T:seakeyakv1 16.01 16.02 16.04 T:aes256otrcv3 15.92 16.32 16.41 T:oceankeyakv1 16.55 16.57 16.58 T:aes256otrsv3 16.68 16.69 16.70 T:aes256otrsv2 16.68 16.70 16.72 T:aes256otrsv1 16.89 16.91 16.94 T:aes128n8clocv1 16.92 16.93 16.98 T:aes128n8t8clocv2 16.90 16.94 16.97 T:aes128n12t8clocv2 16.91 16.94 16.98 T:aes128n12t8clocv3 16.92 16.96 16.98 T:aes128n12clocv1 16.95 16.97 16.99 T:aes256otrpv3 17.15 17.17 17.19 T:aes128n12silcv1 17.13 17.18 17.20 T:aes128n12t8silcv3 17.15 17.19 17.32 T:aes128n8silcv1 17.23 17.25 17.28 T:aes256otrpv2 17.23 17.26 17.28 T:aes256otrpv1 17.16 17.28 17.32 T:aes128n8t8silcv2 17.26 17.28 17.35 T:aes128n12t8silcv2 18.74 18.84 18.98 T:proest256otrv1 19.16 19.18 19.20 T:deoxysi128v141 21.14 21.17 21.20 T:deoxysi256v141 21.22 21.27 21.31 T:aesjambuv1 20.74? 22.23? 23.71? T:aeadaes128ocbtaglen96v1 20.74? 23.71? 23.71? T:aeadaes128ocbtaglen64v1 25.19 25.19 26.67 T:aeadaes192ocbtaglen128v1 25.19 25.19 26.67 T:aeadaes192ocbtaglen64v1 25.19 25.19 26.67 T:aeadaes192ocbtaglen96v1 27.31 27.37 27.41 T:deoxysii128v141 28.15 28.15 28.15 T:aeadaes256ocbtaglen64v1 28.15 28.15 28.15 T:aeadaes256ocbtaglen96v1 31.25 31.28 31.33 T:ketjesrv2 31.86 31.90 31.95 T:ketjesrv1 32.51 32.78 33.22 T:riverkeyakv1 35.56 37.04 37.04 T:colm127v1 44.99 45.24 45.29 T:proest128otrv1 55.30 55.41 55.55 T:ketjejrv1 72.73 72.77 72.81 T:twine80n6clocv1 90.52 90.69 90.96 T:ketjejrv2 92.82 92.86 92.99 T:deoxysneq128128v13 93.28 93.49 93.56 T:deoxysneq128128v1 98.37 98.42 98.56 T:aezv3 100.63 100.73 100.76 T:deoxysii256v141 100.72 100.93 101.02 T:twine80n6t4clocv3 101.17 101.24 101.38 T:twine80n6t4clocv2 104.88 104.98 105.04 T:aezv1 113.99 114.06 114.21 T:deoxyseq128128v13 131.88 131.96 132.02 T:deoxysneq256128v1 131.98 132.07 132.65 T:deoxysneq256128v13 145.24 145.70 145.87 T:deoxyseq128128v1 174.91 175.44 175.81 T:deoxyseq256128v13 207.62 208.69 209.67 T:deoxyseq256128v1 494.41 496.83 497.75 T:acorn128 2938.74 2938.91 2939.11 T:present80n6t4silcv3 2938.82 2939.03 2939.33 T:present80n6t4silcv2 2938.65 2939.69 2940.07 T:present80n6silcv1 3984.10 3984.40 3986.93 T:led80n6t4silcv2 3983.57 3984.68 3989.12 T:led80n6t4silcv3 3973.34 3987.42 3988.08 T:led80n6silcv1 12350.56 12353.52 12363.90 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead -2.96? 0.00? 38.53? T:colm0v1 0.27 0.28 0.29 T:aezv4 0.30 0.32 0.33 T:aezv5 0.45 0.47 0.48 aegis128l 0.70 0.70 0.72 aegis256 1.39 1.40 1.40 T:morus1280256v1 1.39 1.40 1.41 T:morus1280128v2 1.39 1.40 1.41 T:morus1280256v2 1.39 1.40 1.41 T:morus1280128v1 0.00? 1.48? 2.96? T:aes128gcmv1 2.57 2.58 2.60 T:norx6441v3 2.57 2.58 2.60 T:norx6441v2 2.58 2.59 2.60 T:norx6444v2 2.62 2.64 2.67 T:norx6444v3 2.73 2.74 2.75 T:morus640128v1 2.73 2.74 2.75 T:morus640128v2 3.04 3.05 3.06 T:norx6441v1 3.06 3.08 3.10 T:norx6444v1 3.32 3.32 3.38 T:lakekeyakv1 3.35 3.41 3.44 T:oceankeyakv2 3.40 3.42 3.45 T:seakeyakv2 3.46 3.48 3.49 T:lakekeyakv2 3.67 3.68 3.70 T:tiaoxinv1 3.67 3.68 3.69 T:tiaoxinv2 3.73 3.75 3.77 T:norx6461v3 3.74 3.76 3.78 T:norx6461v2 3.82 3.83 3.85 T:ketjemajorv2 3.92 3.95 3.99 T:lunarkeyakv2 4.42 4.44 4.46 T:norx6461v1 4.67 4.69 4.70 T:acorn128v3 4.86 4.87 4.89 T:acorn128v2 4.96 4.98 4.99 T:norx3241v3 4.99 5.00 5.01 T:norx3241v2 5.26 5.27 5.29 ascon128av12 5.87 5.88 5.89 T:norx3241v1 6.28 6.30 6.31 T:ascon128av11 6.33 6.34 6.36 T:ascon96v1 6.47 6.49 6.50 T:riverkeyakv2 6.88 6.92 6.93 T:aegis128 7.22 7.22 7.26 T:ketjeminorv2 7.29 7.31 7.33 T:norx3261v2 7.35 7.37 7.40 T:norx3261v3 7.72 7.73 7.76 ascon128v12 8.46 8.49 8.51 T:ascon128v1 8.48 8.49 8.50 T:ascon128v11 8.70 8.72 8.74 T:norx3261v1 12.15 12.16 12.17 T:aes128otrcv3 12.71 12.72 12.74 T:aes128otrsv3 12.82 12.83 12.84 T:aes128otrsv2 12.81 12.83 12.85 T:aes128otrsv1 13.11 13.12 13.15 T:aes128otrpv3 13.37 13.38 13.40 T:aes128otrpv2 13.37 13.38 13.40 T:aes128otrpv1 15.53 15.70 16.67 T:seakeyakv1 16.01 16.03 16.04 T:aes256otrcv3 15.92 16.18 16.43 T:oceankeyakv1 16.57 16.58 16.60 T:aes256otrsv3 16.69 16.71 16.73 T:aes256otrsv1 16.68 16.71 16.73 T:aes256otrsv2 16.91 16.93 16.97 T:aes128n12t8clocv2 16.90 16.93 16.96 T:aes128n8clocv1 16.92 16.94 16.97 T:aes128n8t8clocv2 16.91 16.94 16.96 T:aes128n12t8clocv3 16.92 16.94 16.97 T:aes128n12clocv1 16.98 17.00 17.01 T:aes256otrpv3 17.16 17.18 17.30 T:aes128n12t8silcv3 17.17 17.19 17.25 T:aes128n12t8silcv2 17.15 17.20 17.27 T:aes128n12silcv1 17.19 17.20 17.28 T:aes128n8silcv1 17.19 17.22 17.24 T:aes128n8t8silcv2 17.24 17.25 17.28 T:aes256otrpv2 17.24 17.26 17.27 T:aes256otrpv1 18.87 18.91 18.98 T:proest256otrv1 19.17 19.18 19.21 T:deoxysi128v141 20.74? 20.74? 23.71? T:aeadaes128ocbtaglen96v1 21.16 21.19 21.21 T:deoxysi256v141 21.26 21.28 21.32 T:aesjambuv1 20.74? 23.71? 23.71? T:aeadaes128ocbtaglen64v1 25.19 25.19 26.67 T:aeadaes192ocbtaglen128v1 25.19 25.19 26.67 T:aeadaes192ocbtaglen64v1 25.19 25.19 26.67 T:aeadaes192ocbtaglen96v1 27.32 27.39 27.42 T:deoxysii128v141 28.15 28.15 28.15 T:aeadaes256ocbtaglen64v1 28.15 28.15 28.15 T:aeadaes256ocbtaglen96v1 31.24 31.35 31.41 T:ketjesrv2 31.61 31.91 32.00 T:ketjesrv1 32.55 32.93 33.11 T:riverkeyakv1 35.56 35.56 35.56 T:colm127v1 45.00 45.23 45.41 T:proest128otrv1 55.48 55.98 56.25 T:ketjejrv1 72.70 72.73 72.76 T:twine80n6clocv1 90.59 90.65 90.76 T:ketjejrv2 92.80 92.89 92.96 T:deoxysneq128128v13 93.25 93.50 93.58 T:deoxysneq128128v1 98.28 98.36 98.46 T:aezv3 100.67 100.73 100.79 T:deoxysii256v141 100.67 100.74 100.84 T:twine80n6t4clocv3 100.99 101.07 101.18 T:twine80n6t4clocv2 104.81 104.90 104.95 T:aezv1 114.01 114.12 114.23 T:deoxyseq128128v13 131.85 131.94 132.03 T:deoxysneq256128v1 131.93 132.09 132.50 T:deoxysneq256128v13 145.38 145.60 145.73 T:deoxyseq128128v1 174.90 175.44 175.88 T:deoxyseq256128v13 207.64 208.21 209.69 T:deoxyseq256128v1 447.49 450.46 450.46 aes256gcmv1 495.11 496.48 497.75 T:acorn128 2938.73 2938.93 2939.26 T:present80n6t4silcv3 2938.84 2939.04 2939.25 T:present80n6t4silcv2 2938.60 2939.89 2940.02 T:present80n6silcv1 3964.36 3964.95 3976.05 T:led80n6silcv1 3984.25 3984.66 3992.07 T:led80n6t4silcv2 3983.99 3986.41 3992.02 T:led80n6t4silcv3

Cycles/byte for 0+long encrypt 25% 50% 75% aead -2.96? 0.00? 23.71? T:colm0v1 0.00? 0.00? 2.96? T:aes128gcmv1 0.25? 0.27? 0.28? T:aezv4 0.27? 0.29? 0.31? T:aezv5 0.36 0.36 0.37 aegis128l 0.56 0.57 0.57 aegis256 1.43 1.44 1.46 T:morus1280128v1 1.42 1.44 1.46 T:morus1280128v2 1.43 1.44 1.46 T:morus1280256v1 1.43 1.45 1.46 T:morus1280256v2 2.37 2.50 2.59 T:lunarkeyakv2 2.47 2.51 2.59 T:oceankeyakv2 2.50 2.52 2.54 T:norx6444v3 2.52 2.54 2.56 T:norx6441v2 2.51 2.54 2.56 T:norx6441v3 2.53 2.55 2.58 T:norx6444v2 2.82 2.83 2.85 T:morus640128v1 2.82 2.83 2.85 T:morus640128v2 2.90 2.91 2.93 T:tiaoxinv2 2.90 2.92 2.93 T:tiaoxinv1 3.02 3.04 3.07 T:norx6441v1 3.02 3.05 3.07 T:norx6444v1 3.06 3.07 3.10 T:lakekeyakv2 3.07 3.11 3.13 T:seakeyakv2 3.09 3.12 3.14 T:lakekeyakv1 3.76 3.78 3.79 T:ketjemajorv2 3.76 3.80 3.84 T:norx6461v2 3.88 3.91 3.95 T:norx6461v3 4.56 4.58 4.62 T:acorn128v3 4.55 4.60 4.63 T:norx6461v1 4.75 4.76 4.79 T:acorn128v2 4.91 4.93 4.97 T:norx3241v3 5.02 5.08 5.12 T:norx3241v2 5.28 5.30 5.31 ascon128av12 5.94 5.96 5.99 T:riverkeyakv2 5.97 6.01 6.04 T:norx3241v1 6.17 6.20 6.21 T:ascon128av11 6.21 6.23 6.25 T:ascon96v1 6.35 6.37 6.41 T:ketjeminorv2 6.77 6.83 6.89 T:aegis128 7.34 7.35 7.38 T:norx3261v3 7.62 7.66 7.70 T:norx3261v2 7.75 7.77 7.79 ascon128v12 8.42 8.43 8.45 T:ascon128v11 8.42 8.43 8.47 T:ascon128v1 9.18 9.24 9.28 T:norx3261v1 11.33 11.35 11.40 T:aes128n8silcv1 11.33 11.35 11.38 T:aes128n12t8silcv2 11.33 11.35 11.37 T:aes128n8t8clocv2 11.33 11.36 11.39 T:aes128n12t8clocv3 11.34 11.37 11.40 T:aes128n12silcv1 11.33 11.37 11.39 T:aes128n12t8silcv3 11.34 11.37 11.45 T:aes128n12t8clocv2 11.36 11.39 11.41 T:aes128n8t8silcv2 11.39 11.41 11.44 T:aes128otrsv3 11.39 11.41 11.44 T:aes128otrsv1 11.36 11.42 11.47 T:aes128n8clocv1 11.41 11.43 11.46 T:aes128otrsv2 11.36 11.46 11.51 T:aes128n12clocv1 12.14 12.16 12.18 T:aes128otrcv3 12.19 12.21 12.25 T:aes128otrpv3 12.50 12.52 12.54 T:aes128otrpv2 12.51 12.53 12.55 T:aes128otrpv1 15.26 15.29 15.31 T:aes256otrsv1 15.27 15.30 15.32 T:aes256otrsv2 15.25 15.30 15.33 T:aes256otrsv3 15.28 15.52 16.32 T:oceankeyakv1 15.23 15.61 16.74 T:seakeyakv1 16.01 16.03 16.06 T:aes256otrcv3 16.06 16.11 16.13 T:aes256otrpv3 16.39 16.41 16.43 T:aes256otrpv2 16.39 16.42 16.44 T:aes256otrpv1 17.32 17.33 17.36 T:deoxysi128v141 17.68 17.69 17.72 T:deoxysii128v141 18.93 18.99 19.13 T:proest256otrv1 19.29 19.32 19.34 T:deoxysi256v141 20.74 20.74 20.74 T:aeadaes128ocbtaglen64v1 20.74 20.74 20.74 T:aeadaes128ocbtaglen96v1 21.13 21.16 21.21 T:aesjambuv1 20.74? 23.71? 23.71? T:colm127v1 23.71 23.71 23.71 T:aeadaes192ocbtaglen128v1 23.71 23.71 23.71 T:aeadaes192ocbtaglen64v1 23.71 23.71 23.71 T:aeadaes192ocbtaglen96v1 26.67? 26.67? 29.64? T:aeadaes256ocbtaglen64v1 26.67? 26.67? 29.64? T:aeadaes256ocbtaglen96v1 29.04 29.09 29.13 T:ketjesrv2 30.43 30.52 30.61 T:ketjesrv1 30.92 31.34 31.80 T:riverkeyakv1 45.07 45.24 45.48 T:proest128otrv1 48.52 48.55 48.56 T:twine80n6clocv1 51.09 51.14 51.20 T:aezv1 52.56 52.84 53.06 T:ketjejrv1 65.24 65.29 65.33 T:aezv3 66.59 66.64 66.68 T:deoxysii256v141 67.58 67.73 67.92 T:twine80n6t4clocv3 67.68 67.76 67.82 T:twine80n6t4clocv2 74.96 75.04 75.20 T:deoxyseq128128v13 76.50 76.61 76.71 T:deoxyseq128128v1 77.31 77.57 77.70 T:deoxysneq128128v13 77.46 77.59 77.77 T:deoxysneq128128v1 88.27 88.48 88.93 T:ketjejrv2 114.41 115.96 116.12 T:deoxysneq256128v13 115.59 116.36 117.09 T:deoxyseq256128v13 115.03 116.62 116.77 T:deoxysneq256128v1 117.10 118.54 118.88 T:deoxyseq256128v1 447.49 450.46 450.46 aes256gcmv1 494.10 496.99 498.75 T:acorn128 1958.26 1958.51 1958.75 T:present80n6silcv1 1958.24 1958.54 1958.81 T:present80n6t4silcv3 1958.39 1958.64 1958.91 T:present80n6t4silcv2 2645.80 2652.75 2659.53 T:led80n6silcv1 2657.16 2657.70 2659.28 T:led80n6t4silcv3 2654.15 2660.87 2661.85 T:led80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead -2.96? 0.00? 23.71? T:colm0v1 0.00? 0.00? 2.96? T:aes128gcmv1 0.27 0.27 0.27 T:aezv4 0.29 0.29 0.29 T:aezv5 0.35? 0.36? 0.39? aegis128l 0.54 0.59 0.59 aegis256 1.42 1.45 1.46 T:morus1280128v1 1.43 1.45 1.46 T:morus1280256v2 1.43 1.45 1.46 T:morus1280128v2 1.43 1.45 1.46 T:morus1280256v1 2.40 2.49 2.57 T:lunarkeyakv2 2.49 2.52 2.57 T:norx6441v2 2.45 2.52 2.56 T:oceankeyakv2 2.52 2.55 2.58 T:norx6444v2 2.53 2.57 2.59 T:norx6441v3 2.61 2.66 2.70 T:norx6444v3 2.83 2.85 2.86 T:morus640128v1 2.83 2.85 2.86 T:morus640128v2 2.89 2.91 2.93 T:tiaoxinv1 2.90 2.91 2.93 T:tiaoxinv2 3.00 3.02 3.03 T:norx6441v1 3.02 3.04 3.06 T:norx6444v1 3.04 3.07 3.09 T:lakekeyakv2 3.08 3.10 3.12 T:seakeyakv2 3.10 3.11 3.12 T:lakekeyakv1 3.65 3.70 3.74 T:norx6461v2 3.67 3.70 3.74 T:norx6461v3 3.77 3.78 3.79 T:ketjemajorv2 4.37 4.40 4.43 T:norx6461v1 4.57 4.59 4.61 T:acorn128v3 4.75 4.78 4.80 T:acorn128v2 4.91 4.94 4.96 T:norx3241v3 4.93 4.95 4.97 T:norx3241v2 5.29 5.30 5.33 ascon128av12 5.81 5.83 5.85 T:norx3241v1 5.95 5.97 5.99 T:riverkeyakv2 6.24 6.26 6.28 T:ascon128av11 6.28 6.29 6.31 T:ascon96v1 6.35 6.38 6.42 T:ketjeminorv2 6.77 6.80 6.83 T:aegis128 7.13 7.16 7.20 T:norx3261v2 7.21 7.24 7.29 T:norx3261v3 7.76 7.78 7.79 ascon128v12 8.43 8.45 8.47 T:ascon128v11 8.42 8.45 8.47 T:ascon128v1 8.53 8.59 8.62 T:norx3261v1 11.32 11.34 11.38 T:aes128n8silcv1 11.28 11.35 11.38 T:aes128n12t8silcv3 11.33 11.35 11.39 T:aes128n8clocv1 11.34 11.36 11.39 T:aes128n12silcv1 11.32 11.36 11.40 T:aes128n8t8clocv2 11.33 11.36 11.46 T:aes128n12t8clocv3 11.32 11.37 11.40 T:aes128n12t8silcv2 11.36 11.38 11.40 T:aes128n8t8silcv2 11.33 11.38 11.45 T:aes128n12t8clocv2 11.34 11.39 11.47 T:aes128n12clocv1 11.38 11.40 11.45 T:aes128otrsv2 11.38 11.41 11.44 T:aes128otrsv3 11.39 11.42 11.44 T:aes128otrsv1 12.12 12.17 12.19 T:aes128otrcv3 12.19 12.21 12.24 T:aes128otrpv3 12.47 12.50 12.55 T:aes128otrpv2 12.48 12.51 12.54 T:aes128otrpv1 15.26 15.29 15.32 T:aes256otrsv1 15.28 15.29 15.32 T:aes256otrsv3 15.26 15.30 15.33 T:aes256otrsv2 15.32 15.54 16.30 T:oceankeyakv1 15.35 15.57 16.54 T:seakeyakv1 16.03 16.05 16.07 T:aes256otrcv3 16.07 16.11 16.14 T:aes256otrpv3 16.37 16.40 16.41 T:aes256otrpv2 16.37 16.41 16.46 T:aes256otrpv1 17.11 17.15 17.19 T:deoxysi128v141 17.70 17.72 17.77 T:deoxysii128v141 18.94 18.96 19.15 T:proest256otrv1 19.08 19.13 19.19 T:deoxysi256v141 20.74 20.74 20.74 T:aeadaes128ocbtaglen64v1 20.74 20.74 20.74 T:aeadaes128ocbtaglen96v1 21.08 21.17 21.22 T:aesjambuv1 20.74? 23.71? 23.71? T:colm127v1 23.71? 23.71? 26.67? T:aeadaes192ocbtaglen128v1 23.71? 23.71? 26.67? T:aeadaes192ocbtaglen64v1 23.71? 23.71? 26.67? T:aeadaes192ocbtaglen96v1 26.67? 26.67? 29.64? T:aeadaes256ocbtaglen96v1 29.01 29.07 29.13 T:ketjesrv2 23.71? 29.64? 29.64? T:aeadaes256ocbtaglen64v1 30.67 30.73 30.82 T:ketjesrv1 30.81 30.92 31.47 T:riverkeyakv1 45.06 45.26 45.47 T:proest128otrv1 48.52 48.53 48.57 T:twine80n6clocv1 51.00 51.11 51.33 T:aezv1 51.63 52.40 52.50 T:ketjejrv1 65.23 65.29 65.37 T:aezv3 66.63 66.67 67.22 T:deoxysii256v141 67.59 67.80 67.93 T:twine80n6t4clocv3 67.70 67.80 67.87 T:twine80n6t4clocv2 74.02 74.09 74.19 T:deoxyseq128128v13 76.40 76.51 76.58 T:deoxysneq128128v13 76.43 76.53 76.69 T:deoxyseq128128v1 77.34 77.55 77.65 T:deoxysneq128128v1 88.38 88.49 88.61 T:ketjejrv2 115.20 115.77 116.92 T:deoxysneq256128v1 114.75 115.85 116.50 T:deoxysneq256128v13 116.65 116.94 117.03 T:deoxyseq256128v13 117.23 118.62 118.88 T:deoxyseq256128v1 447.49 450.46 453.42 aes256gcmv1 492.83 493.43 494.99 T:acorn128 1958.28 1958.52 1958.76 T:present80n6t4silcv3 1958.48 1958.62 1958.82 T:present80n6silcv1 1958.30 1958.70 1958.89 T:present80n6t4silcv2 2644.55 2646.28 2653.44 T:led80n6silcv1 2656.40 2657.14 2657.76 T:led80n6t4silcv3 2655.04 2660.59 2661.46 T:led80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead -2.96? 0.00? 23.71? T:colm0v1 0.00? 0.00? 2.96? T:aes128gcmv1 0.27 0.27 0.27 T:aezv4 0.28 0.29 0.29 T:aezv5 0.36? 0.39? 0.40? aegis128l 0.53? 0.54? 0.60? aegis256 1.44 1.44 1.45 T:morus1280128v2 1.43 1.45 1.46 T:morus1280128v1 1.43 1.45 1.46 T:morus1280256v1 1.44 1.45 1.46 T:morus1280256v2 2.41 2.50 2.62 T:lunarkeyakv2 2.44 2.52 2.55 T:oceankeyakv2 2.52 2.56 2.58 T:norx6441v3 2.54 2.57 2.60 T:norx6444v2 2.55 2.57 2.59 T:norx6441v2 2.60 2.64 2.68 T:norx6444v3 2.82 2.84 2.86 T:morus640128v2 2.83 2.84 2.86 T:morus640128v1 2.90 2.91 2.93 T:tiaoxinv1 2.90 2.92 2.94 T:tiaoxinv2 3.00 3.02 3.03 T:norx6441v1 3.00 3.02 3.05 T:norx6444v1 3.05 3.06 3.07 T:lakekeyakv2 3.08 3.10 3.11 T:seakeyakv2 3.10 3.11 3.12 T:lakekeyakv1 3.64 3.68 3.72 T:norx6461v3 3.67 3.70 3.73 T:norx6461v2 3.76 3.78 3.79 T:ketjemajorv2 4.36 4.39 4.43 T:norx6461v1 4.58 4.60 4.62 T:acorn128v3 4.76 4.77 4.78 T:acorn128v2 4.91 4.94 4.97 T:norx3241v3 4.93 4.95 4.97 T:norx3241v2 5.27 5.30 5.31 ascon128av12 5.81 5.83 5.86 T:norx3241v1 5.95 5.97 5.98 T:riverkeyakv2 6.24 6.25 6.27 T:ascon128av11 6.26 6.29 6.30 T:ascon96v1 6.34 6.38 6.41 T:ketjeminorv2 6.73 6.78 6.80 T:aegis128 7.14 7.17 7.20 T:norx3261v2 7.21 7.25 7.29 T:norx3261v3 7.77 7.79 7.81 ascon128v12 8.44 8.45 8.47 T:ascon128v1 8.44 8.45 8.47 T:ascon128v11 8.56 8.60 8.62 T:norx3261v1 11.31 11.33 11.35 T:aes128n8silcv1 11.25 11.33 11.37 T:aes128n12t8silcv3 11.29 11.34 11.38 T:aes128n12t8silcv2 11.34 11.36 11.38 T:aes128n8t8clocv2 11.33 11.36 11.38 T:aes128n12silcv1 11.35 11.36 11.40 T:aes128n8clocv1 11.34 11.37 11.50 T:aes128n12clocv1 11.33 11.37 11.44 T:aes128n12t8clocv2 11.35 11.37 11.41 T:aes128n8t8silcv2 11.34 11.38 11.42 T:aes128n12t8clocv3 11.37 11.41 11.44 T:aes128otrsv3 11.38 11.42 11.44 T:aes128otrsv2 11.40 11.42 11.43 T:aes128otrsv1 12.14 12.16 12.21 T:aes128otrcv3 12.21 12.23 12.26 T:aes128otrpv3 12.49 12.51 12.53 T:aes128otrpv1 12.48 12.51 12.53 T:aes128otrpv2 15.26 15.29 15.30 T:aes256otrsv2 15.27 15.29 15.33 T:aes256otrsv1 15.26 15.30 15.32 T:aes256otrsv3 15.27 15.46 16.41 T:oceankeyakv1 15.37 15.58 16.59 T:seakeyakv1 16.02 16.04 16.07 T:aes256otrcv3 16.07 16.10 16.14 T:aes256otrpv3 16.38 16.41 16.43 T:aes256otrpv2 16.37 16.41 16.48 T:aes256otrpv1 17.13 17.16 17.19 T:deoxysi128v141 17.70 17.74 17.77 T:deoxysii128v141 18.94 18.98 19.14 T:proest256otrv1 19.09 19.11 19.14 T:deoxysi256v141 20.74 20.74 20.74 T:aeadaes128ocbtaglen64v1 20.74 20.74 20.74 T:aeadaes128ocbtaglen96v1 21.11 21.16 21.18 T:aesjambuv1 20.74? 23.71? 23.71? T:colm127v1 23.71? 23.71? 26.67? T:aeadaes192ocbtaglen128v1 23.71? 23.71? 26.67? T:aeadaes192ocbtaglen64v1 23.71? 23.71? 26.67? T:aeadaes192ocbtaglen96v1 28.99 29.07 29.12 T:ketjesrv2 23.71? 29.64? 29.64? T:aeadaes256ocbtaglen96v1 26.67? 29.64? 29.64? T:aeadaes256ocbtaglen64v1 30.68 30.75 30.87 T:ketjesrv1 30.80 30.92 31.48 T:riverkeyakv1 45.04 45.23 45.51 T:proest128otrv1 48.51 48.55 48.59 T:twine80n6clocv1 51.00 51.04 51.26 T:aezv1 51.43 51.75 52.50 T:ketjejrv1 65.22 65.29 65.35 T:aezv3 66.63 66.68 67.22 T:deoxysii256v141 67.68 67.78 67.85 T:twine80n6t4clocv2 67.63 67.81 67.89 T:twine80n6t4clocv3 74.02 74.13 74.36 T:deoxyseq128128v13 76.43 76.49 76.58 T:deoxysneq128128v13 76.39 76.59 76.76 T:deoxyseq128128v1 77.42 77.54 77.64 T:deoxysneq128128v1 88.37 88.57 88.66 T:ketjejrv2 115.11 115.76 117.04 T:deoxysneq256128v1 114.76 115.89 116.43 T:deoxysneq256128v13 116.73 116.90 117.01 T:deoxyseq256128v13 117.25 118.65 119.01 T:deoxyseq256128v1 450.46 450.46 453.42 aes256gcmv1 492.43 493.38 494.63 T:acorn128 1958.42 1958.57 1958.69 T:present80n6t4silcv3 1958.23 1958.60 1958.76 T:present80n6silcv1 1958.38 1958.69 1959.05 T:present80n6t4silcv2 2650.98 2653.35 2654.42 T:led80n6silcv1 2656.42 2657.54 2658.98 T:led80n6t4silcv3 2653.56 2660.98 2661.72 T:led80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.00? 0.00? 35.19? T:colm0v1 0.52 0.53 0.53 aegis128l 0.60 0.60 0.62 T:aezv5 0.60 0.60 0.61 T:aezv4 0.74 0.75 0.75 aegis256 1.68 1.69 1.69 T:morus1280256v1 1.68 1.69 1.70 T:morus1280128v2 1.67 1.69 1.70 T:morus1280128v1 1.69 1.70 1.71 T:morus1280256v2 1.85 1.85 1.85 T:aes128gcmv1 3.01 3.02 3.04 T:norx6441v2 3.03 3.03 3.05 T:norx6441v3 3.05 3.06 3.06 T:morus640128v1 3.08 3.09 3.10 T:morus640128v2 3.39 3.42 3.42 T:norx6441v1 3.68 3.68 3.70 T:norx6444v2 3.69 3.70 3.73 T:norx6444v3 3.84 3.85 3.87 T:lakekeyakv2 4.02 4.03 4.04 T:lakekeyakv1 4.16 4.16 4.17 T:tiaoxinv2 4.16 4.17 4.18 T:tiaoxinv1 4.31 4.32 4.36 T:norx6444v1 4.44 4.45 4.47 T:norx6461v2 4.48 4.50 4.52 T:norx6461v3 4.68 4.69 4.70 T:ketjemajorv2 4.78 4.79 4.81 T:seakeyakv2 5.06 5.08 5.10 T:norx6461v1 5.41 5.43 5.45 T:norx3241v3 5.42 5.43 5.44 ascon128av12 5.46 5.46 5.48 T:acorn128v3 5.46 5.48 5.48 T:norx3241v2 5.61 5.62 5.63 T:acorn128v2 6.10 6.11 6.14 T:oceankeyakv2 6.29 6.30 6.32 T:norx3241v1 6.39 6.40 6.41 T:ascon96v1 6.40 6.41 6.43 T:ascon128av11 6.77 6.78 6.80 T:riverkeyakv2 7.55 7.57 7.59 T:aegis128 7.91 7.92 7.93 ascon128v12 8.01 8.01 8.04 T:norx3261v3 8.09 8.10 8.14 T:norx3261v2 8.49 8.50 8.52 T:ketjeminorv2 8.59 8.60 8.61 T:ascon128v11 8.60 8.60 8.61 T:ascon128v1 9.43 9.44 9.48 T:norx3261v1 10.22 10.24 10.28 T:lunarkeyakv2 12.69 12.70 12.72 T:aes128otrcv3 12.91 12.92 12.93 T:aes128otrsv3 13.06 13.08 13.09 T:aes128otrsv2 13.08 13.10 13.12 T:aes128otrsv1 13.31 13.32 13.34 T:aes128otrpv3 13.61 13.63 13.64 T:aes128otrpv2 13.64 13.65 13.66 T:aes128otrpv1 16.68 16.69 16.70 T:aes256otrcv3 16.89 16.91 16.92 T:aes256otrsv3 17.03 17.04 17.05 T:aes256otrsv2 17.05 17.06 17.09 T:aes256otrsv1 17.16 17.17 17.20 T:aes128n12t8clocv3 17.16 17.17 17.19 T:aes128n8t8clocv2 17.16 17.18 17.20 T:aes128n12t8clocv2 17.22 17.24 17.28 T:aes128n12clocv1 17.30 17.31 17.33 T:aes256otrpv3 17.32 17.34 17.37 T:aes128n8clocv1 17.37 17.40 17.44 T:aes128n12t8silcv3 17.38 17.40 17.47 T:aes128n12t8silcv2 17.39 17.40 17.43 T:aes128n8t8silcv2 17.49 17.51 17.55 T:aes128n12silcv1 17.50 17.53 17.55 T:aes128n8silcv1 17.59 17.61 17.62 T:aes256otrpv2 17.60 17.62 17.63 T:aes256otrpv1 17.80 17.81 17.82 T:deoxysi128v141 19.15 19.18 20.07 T:seakeyakv1 20.28 20.31 20.33 T:deoxysi256v141 20.67 20.68 20.75 T:proest256otrv1 21.64 21.67 21.69 T:aesjambuv1 22.23 22.23 24.08 T:aeadaes128ocbtaglen64v1 22.23 22.23 24.08 T:aeadaes128ocbtaglen96v1 24.11 24.45 24.81 T:oceankeyakv1 25.93 25.93 25.93 T:aeadaes192ocbtaglen64v1 25.93 25.93 27.78 T:aeadaes192ocbtaglen128v1 25.93 25.93 27.78 T:aeadaes192ocbtaglen96v1 27.99 28.01 28.04 T:deoxysii128v141 29.64 29.64 29.64 T:aeadaes256ocbtaglen64v1 29.64 29.64 29.64 T:aeadaes256ocbtaglen96v1 31.87 31.91 32.03 T:ketjesrv1 32.23 32.25 32.26 T:ketjesrv2 33.78 33.92 34.62 T:riverkeyakv1 35.19 35.19 35.19 T:colm127v1 47.11 47.40 47.48 T:proest128otrv1 56.41 56.60 56.77 T:ketjejrv1 73.17 73.21 73.25 T:twine80n6clocv1 76.08 76.20 76.27 T:deoxysneq128128v13 76.49 76.58 76.69 T:deoxysneq128128v1 93.05 93.42 93.52 T:ketjejrv2 97.81 97.90 97.94 T:aezv3 99.43 99.46 99.67 T:aezv1 101.38 101.67 101.72 T:deoxysii256v141 101.90 102.02 102.09 T:twine80n6t4clocv3 101.74 102.21 102.32 T:twine80n6t4clocv2 113.95 114.04 114.11 T:deoxyseq128128v13 113.98 114.06 114.18 T:deoxyseq128128v1 115.34 116.29 116.94 T:deoxysneq256128v13 115.56 116.93 117.04 T:deoxysneq256128v1 175.59 176.51 177.82 T:deoxyseq256128v13 176.41 178.01 178.37 T:deoxyseq256128v1 566.52 568.35 568.81 T:acorn128 2953.84 2954.02 2954.24 T:present80n6t4silcv3 2953.97 2954.13 2954.28 T:present80n6t4silcv2 2954.42 2954.96 2955.14 T:present80n6silcv1 3989.61 4000.94 4001.64 T:led80n6silcv1 4006.32 4006.58 4008.38 T:led80n6t4silcv2 4006.78 4008.32 4010.69 T:led80n6t4silcv3 12602.46 12604.31 12608.02 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.00? 0.00? 37.04? T:colm0v1 0.53 0.53 0.53 aegis128l 0.60 0.60 0.61 T:aezv5 0.60 0.61 0.61 T:aezv4 0.77 0.77 0.78 aegis256 1.66 1.67 1.68 T:morus1280256v1 1.66 1.67 1.68 T:morus1280128v1 1.67 1.67 1.69 T:morus1280128v2 1.67 1.68 1.69 T:morus1280256v2 1.85 1.85 1.85 T:aes128gcmv1 3.01 3.01 3.03 T:morus640128v1 3.03 3.04 3.04 T:morus640128v2 3.05 3.07 3.09 T:norx6441v2 3.07 3.08 3.09 T:norx6441v3 3.40 3.41 3.41 T:norx6441v1 3.69 3.70 3.73 T:norx6444v2 3.75 3.78 3.80 T:norx6444v3 3.81 3.82 3.85 T:lakekeyakv2 4.01 4.02 4.04 T:lakekeyakv1 4.30 4.32 4.34 T:norx6444v1 4.42 4.43 4.45 T:norx6461v3 4.42 4.44 4.45 T:norx6461v2 4.70 4.70 4.71 T:ketjemajorv2 4.77 4.78 4.80 T:seakeyakv2 4.78 4.79 4.81 T:tiaoxinv2 4.78 4.79 4.80 T:tiaoxinv1 4.97 4.98 5.00 T:norx6461v1 5.39 5.41 5.43 ascon128av12 5.43 5.43 5.44 T:norx3241v3 5.43 5.44 5.45 T:norx3241v2 5.46 5.47 5.49 T:acorn128v3 5.62 5.63 5.64 T:acorn128v2 6.09 6.11 6.13 T:oceankeyakv2 6.21 6.22 6.23 T:norx3241v1 6.43 6.45 6.46 T:ascon128av11 6.47 6.48 6.50 T:ascon96v1 6.80 6.80 6.82 T:riverkeyakv2 7.57 7.59 7.61 T:aegis128 7.82 7.84 7.86 ascon128v12 7.94 7.96 7.99 T:norx3261v2 7.99 8.02 8.03 T:norx3261v3 8.33 8.35 8.38 T:ketjeminorv2 8.61 8.63 8.64 T:ascon128v1 8.62 8.63 8.64 T:ascon128v11 9.21 9.22 9.23 T:norx3261v1 10.22 10.23 10.29 T:lunarkeyakv2 12.59 12.59 12.60 T:aes128otrcv3 13.08 13.09 13.09 T:aes128otrsv3 13.15 13.17 13.18 T:aes128otrsv2 13.17 13.18 13.19 T:aes128otrsv1 13.46 13.49 13.50 T:aes128otrpv3 13.72 13.73 13.74 T:aes128otrpv1 13.73 13.74 13.76 T:aes128otrpv2 16.60 16.61 16.62 T:aes256otrcv3 17.03 17.03 17.04 T:aes256otrsv3 17.08 17.11 17.13 T:aes128n12t8clocv2 17.10 17.12 17.15 T:aes128n12t8clocv3 17.09 17.13 17.16 T:aes128n8t8clocv2 17.13 17.14 17.15 T:aes256otrsv2 17.12 17.15 17.16 T:aes128n8clocv1 17.14 17.15 17.17 T:aes128n12clocv1 17.14 17.15 17.16 T:aes256otrsv1 17.43 17.45 17.46 T:aes256otrpv3 17.46 17.47 17.50 T:aes128n12t8silcv3 17.47 17.51 17.55 T:aes128n8t8silcv2 17.47 17.52 17.60 T:aes128n12t8silcv2 17.51 17.53 17.55 T:aes128n8silcv1 17.53 17.53 17.56 T:aes128n12silcv1 17.69 17.70 17.72 T:aes256otrpv2 17.69 17.72 17.75 T:aes256otrpv1 19.14 19.17 19.98 T:seakeyakv1 19.87 19.88 19.89 T:deoxysi128v141 20.65 20.66 20.72 T:proest256otrv1 21.57 21.59 21.65 T:aesjambuv1 22.23 22.23 24.08 T:aeadaes128ocbtaglen96v1 22.37 22.40 22.47 T:deoxysi256v141 22.23 24.08 24.08 T:aeadaes128ocbtaglen64v1 24.24 24.69 24.82 T:oceankeyakv1 25.93 25.93 27.78 T:aeadaes192ocbtaglen128v1 25.93 25.93 27.78 T:aeadaes192ocbtaglen64v1 25.93 25.93 27.78 T:aeadaes192ocbtaglen96v1 27.97 27.99 28.01 T:deoxysii128v141 29.64 29.64 29.64 T:aeadaes256ocbtaglen64v1 29.64 29.64 29.64 T:aeadaes256ocbtaglen96v1 32.32 32.37 32.45 T:ketjesrv2 32.37 32.39 32.59 T:ketjesrv1 33.62 33.78 34.63 T:riverkeyakv1 37.04 37.04 37.04 T:colm127v1 47.03 47.23 47.25 T:proest128otrv1 56.37 56.41 56.55 T:ketjejrv1 73.06 73.09 73.14 T:twine80n6clocv1 91.92 92.00 92.20 T:ketjejrv2 93.17 93.22 93.29 T:deoxysneq128128v13 93.92 93.96 94.14 T:deoxysneq128128v1 97.75 97.84 97.90 T:aezv3 99.68 99.80 99.90 T:aezv1 101.23 101.31 101.66 T:deoxysii256v141 101.45 101.56 101.96 T:twine80n6t4clocv2 101.08 101.78 101.89 T:twine80n6t4clocv3 115.31 115.36 115.52 T:deoxyseq128128v13 132.55 132.64 133.08 T:deoxysneq256128v13 132.60 132.71 132.84 T:deoxysneq256128v1 146.37 146.46 146.61 T:deoxyseq128128v1 176.51 177.62 177.69 T:deoxyseq256128v13 209.32 209.57 210.50 T:deoxyseq256128v1 555.19 557.92 558.62 T:acorn128 2954.04 2954.20 2954.42 T:present80n6t4silcv3 2954.34 2954.53 2954.65 T:present80n6t4silcv2 2954.28 2955.07 2955.22 T:present80n6silcv1 3987.06 3987.68 3997.92 T:led80n6silcv1 4006.63 4006.95 4009.03 T:led80n6t4silcv3 4004.97 4007.15 4007.89 T:led80n6t4silcv2 12602.46 12602.46 12604.31 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.00? 0.00? 37.04? T:colm0v1 0.33 0.34 0.34 T:aezv4 0.36 0.36 0.38 T:aezv5 0.55 0.55 0.56 aegis128l 0.79 0.80 0.80 aegis256 1.66 1.67 1.67 T:morus1280128v1 1.66 1.67 1.67 T:morus1280256v1 1.67 1.68 1.68 T:morus1280128v2 1.68 1.68 1.68 T:morus1280256v2 1.85 1.85 1.85 T:aes128gcmv1 3.01 3.02 3.02 T:morus640128v1 3.03 3.03 3.04 T:morus640128v2 3.06 3.06 3.07 T:norx6441v2 3.08 3.09 3.10 T:norx6441v3 3.42 3.44 3.44 T:norx6441v1 3.72 3.73 3.75 T:norx6444v2 3.75 3.78 3.79 T:norx6444v3 3.82 3.83 3.85 T:lakekeyakv2 4.02 4.03 4.04 T:lakekeyakv1 4.32 4.34 4.36 T:norx6444v1 4.41 4.43 4.44 T:norx6461v2 4.42 4.43 4.47 T:norx6461v3 4.72 4.73 4.74 T:ketjemajorv2 4.77 4.77 4.80 T:tiaoxinv1 4.77 4.78 4.79 T:tiaoxinv2 4.78 4.79 4.80 T:seakeyakv2 4.99 5.00 5.02 T:norx6461v1 5.39 5.40 5.41 ascon128av12 5.45 5.46 5.47 T:norx3241v3 5.46 5.46 5.47 T:norx3241v2 5.46 5.47 5.48 T:acorn128v3 5.62 5.64 5.64 T:acorn128v2 6.10 6.12 6.14 T:oceankeyakv2 6.23 6.23 6.24 T:norx3241v1 6.43 6.44 6.45 T:ascon128av11 6.47 6.48 6.50 T:ascon96v1 6.81 6.81 6.83 T:riverkeyakv2 7.54 7.57 7.60 T:aegis128 7.82 7.84 7.86 ascon128v12 7.94 7.95 7.98 T:norx3261v2 8.02 8.04 8.08 T:norx3261v3 8.34 8.35 8.39 T:ketjeminorv2 8.61 8.62 8.64 T:ascon128v11 8.61 8.63 8.64 T:ascon128v1 9.22 9.24 9.25 T:norx3261v1 10.22 10.24 10.28 T:lunarkeyakv2 12.58 12.59 12.62 T:aes128otrcv3 13.08 13.09 13.11 T:aes128otrsv3 13.17 13.18 13.20 T:aes128otrsv2 13.18 13.18 13.20 T:aes128otrsv1 13.48 13.50 13.52 T:aes128otrpv3 13.73 13.74 13.75 T:aes128otrpv2 13.74 13.75 13.75 T:aes128otrpv1 16.58 16.60 16.61 T:aes256otrcv3 17.02 17.04 17.05 T:aes256otrsv3 17.08 17.09 17.12 T:aes128n8t8clocv2 17.09 17.10 17.12 T:aes128n12t8clocv2 17.11 17.12 17.16 T:aes128n8clocv1 17.10 17.12 17.14 T:aes128n12t8clocv3 17.13 17.15 17.17 T:aes256otrsv2 17.14 17.16 17.22 T:aes128n12clocv1 17.15 17.17 17.18 T:aes256otrsv1 17.44 17.46 17.47 T:aes256otrpv3 17.47 17.49 17.52 T:aes128n8t8silcv2 17.48 17.51 17.56 T:aes128n12t8silcv3 17.51 17.53 17.56 T:aes128n12t8silcv2 17.53 17.56 17.65 T:aes128n8silcv1 17.53 17.57 17.64 T:aes128n12silcv1 17.71 17.73 17.74 T:aes256otrpv2 17.71 17.73 17.75 T:aes256otrpv1 19.17 19.23 20.05 T:seakeyakv1 19.88 19.88 19.90 T:deoxysi128v141 20.63 20.65 20.71 T:proest256otrv1 21.59 21.61 21.65 T:aesjambuv1 22.23 22.23 24.08 T:aeadaes128ocbtaglen64v1 22.23 22.23 24.08 T:aeadaes128ocbtaglen96v1 22.38 22.42 22.46 T:deoxysi256v141 24.23 24.59 24.76 T:oceankeyakv1 25.93 25.93 27.78 T:aeadaes192ocbtaglen128v1 25.93 25.93 27.78 T:aeadaes192ocbtaglen64v1 25.93 25.93 27.78 T:aeadaes192ocbtaglen96v1 27.96 27.99 28.02 T:deoxysii128v141 29.64 29.64 29.64 T:aeadaes256ocbtaglen64v1 29.64 29.64 29.64 T:aeadaes256ocbtaglen96v1 32.33 32.35 32.37 T:ketjesrv2 32.34 32.44 32.57 T:ketjesrv1 33.78 33.90 34.37 T:riverkeyakv1 37.04 37.04 37.04 T:colm127v1 47.03 47.21 47.23 T:proest128otrv1 56.30 56.36 56.47 T:ketjejrv1 73.05 73.06 73.10 T:twine80n6clocv1 91.89 92.01 92.03 T:ketjejrv2 93.14 93.18 93.24 T:deoxysneq128128v13 93.90 93.98 94.08 T:deoxysneq128128v1 97.74 97.79 97.88 T:aezv3 99.50 99.74 99.81 T:aezv1 101.10 101.18 102.38 T:twine80n6t4clocv3 101.25 101.32 101.37 T:deoxysii256v141 101.45 101.60 101.66 T:twine80n6t4clocv2 115.23 115.42 115.58 T:deoxyseq128128v13 132.56 132.67 133.02 T:deoxysneq256128v13 132.61 132.70 132.79 T:deoxysneq256128v1 146.31 146.37 146.51 T:deoxyseq128128v1 176.49 177.61 177.73 T:deoxyseq256128v13 208.93 209.52 210.39 T:deoxyseq256128v1 555.52 557.94 558.64 T:acorn128 700.14 700.14 701.99 aes256gcmv1 2954.25 2954.33 2954.45 T:present80n6t4silcv3 2954.27 2954.39 2955.22 T:present80n6t4silcv2 2954.37 2955.16 2955.40 T:present80n6silcv1 4005.56 4005.85 4007.29 T:led80n6t4silcv2 3997.69 4005.87 4006.14 T:led80n6silcv1 4005.67 4007.15 4009.73 T:led80n6t4silcv3

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.00? 0.00? 44.45? T:aes128gcmv1 0.00? 0.00? 44.45? T:colm0v1 1.82? 1.83? 2.30? T:aezv5 2.02? 2.09? 2.41? T:aezv4 2.16 2.20 2.35 aegis128l 2.30 2.39 2.53 aegis256 7.77 7.86 8.08 T:morus1280128v1 7.83 7.95 8.20 T:morus1280256v1 8.02 8.12 8.42 T:morus1280128v2 8.08 8.30 8.43 T:morus1280256v2 8.34 8.41 8.69 ascon128av12 9.12 9.25 9.55 T:morus640128v1 9.56 9.70 10.01 T:ascon128av11 9.62 9.72 9.94 T:ascon96v1 9.67 9.72 9.84 T:morus640128v2 9.81 9.99 10.22 T:norx6441v1 10.62 10.71 10.86 ascon128v12 11.15 11.27 11.39 T:norx6441v2 11.32 11.45 11.54 T:norx6441v3 11.58 11.64 11.75 T:ascon128v1 11.53 11.67 11.77 T:ascon128v11 13.26 13.40 13.44 T:norx3241v1 14.15 14.25 14.42 T:norx6461v1 14.57 14.60 14.71 T:norx3241v2 14.59 14.70 14.80 T:norx3241v3 15.43 15.50 15.59 T:lakekeyakv1 15.57 15.67 15.79 T:norx6461v2 15.73 15.87 15.91 T:norx6461v3 16.04 16.15 16.59 T:riverkeyakv2 16.72 16.84 17.07 T:lakekeyakv2 19.52 19.57 19.75 T:norx3261v1 20.50 20.61 20.73 T:norx3261v2 20.48 20.73 20.98 T:aes128n8t8clocv2 20.44 20.79 21.09 T:aes128n12t8clocv2 20.65 20.80 20.87 T:aes128otrsv2 20.81 20.89 21.03 T:aes128otrsv1 20.81 20.92 21.09 T:aes128n12t8clocv3 20.88 20.94 21.20 T:aes128otrsv3 20.83 20.95 21.10 T:norx3261v3 21.02 21.16 21.32 T:aes128otrpv3 21.38 21.53 21.75 T:aes128otrpv2 21.59 21.67 21.73 T:aes128n12clocv1 21.58 21.70 21.83 T:aes128otrpv1 21.56 21.73 21.88 T:aes128n8clocv1 22.66 22.74 22.81 T:aes128otrcv3 22.75 22.98 23.13 T:aegis128 23.03 23.14 23.25 T:acorn128v2 23.34 23.56 23.77 T:acorn128v3 23.82 23.98 24.08 T:aes128n12t8silcv2 23.83 23.98 24.26 T:aes128n8t8silcv2 24.05 24.41 24.56 T:aes128n12t8silcv3 24.77 24.83 24.88 T:ketjemajorv2 24.91 25.12 25.34 T:aes128n12silcv1 25.06 25.27 25.41 T:aes128n8silcv1 26.45 26.55 26.70 T:norx6444v2 26.75 26.84 26.98 T:aes256otrsv2 26.91 27.04 27.17 T:aes256otrsv1 26.91 27.12 27.20 T:norx6444v3 27.05 27.14 27.34 T:aes256otrsv3 27.49 27.64 27.79 T:aes256otrpv3 27.53 27.69 27.85 T:aes256otrpv2 27.59 27.71 27.95 T:aes256otrpv1 29.19 29.27 29.40 T:aesjambuv1 29.30 29.42 29.58 T:aes256otrcv3 29.34 29.59 29.76 T:deoxysi128v141 29.80 29.92 30.05 T:tiaoxinv2 29.96 30.05 30.34 T:tiaoxinv1 30.79 30.90 31.10 T:norx6444v1 33.96 34.03 34.11 T:ketjeminorv2 41.42 41.95 42.30 T:deoxysii128v141 42.69 42.98 43.30 T:seakeyakv2 43.07 43.23 43.40 T:deoxysi256v141 44.45 44.45 44.45 T:aeadaes128ocbtaglen64v1 44.45 44.45 44.45 T:aeadaes128ocbtaglen96v1 44.45 44.45 44.45 T:aeadaes192ocbtaglen128v1 44.45 44.45 44.45 T:aeadaes192ocbtaglen64v1 44.45 44.45 44.45 T:aeadaes192ocbtaglen96v1 44.45 44.45 44.45 T:aeadaes256ocbtaglen64v1 44.45 44.45 44.45 T:aeadaes256ocbtaglen96v1 44.45 44.45 44.45 T:colm127v1 48.81 48.99 49.06 T:ketjesrv1 55.66 55.73 55.85 T:ketjesrv2 59.03 59.28 59.77 T:riverkeyakv1 59.62 59.74 59.90 T:proest256otrv1 64.86 65.11 66.48 T:oceankeyakv2 73.51 73.67 73.94 T:ketjejrv1 80.68 80.78 80.91 T:twine80n6clocv1 85.58 85.70 85.91 T:deoxysneq128128v13 85.85 86.02 86.19 T:deoxysneq128128v1 92.15 92.46 93.06 T:proest128otrv1 106.80 107.38 107.98 T:aezv1 109.56 109.77 110.24 T:twine80n6t4clocv3 109.62 109.98 110.09 T:twine80n6t4clocv2 113.56 113.77 114.05 T:deoxysii256v141 124.39 124.55 125.34 T:ketjejrv2 130.09 130.80 131.42 T:deoxysneq256128v13 130.07 131.80 132.09 T:deoxysneq256128v1 132.01 132.34 132.58 T:deoxyseq128128v1 137.98 138.93 140.11 T:aezv3 142.09 142.32 142.53 T:deoxyseq128128v13 144.55 145.43 151.53 T:seakeyakv1 163.03 163.38 164.35 T:lunarkeyakv2 204.88 206.27 206.90 T:deoxyseq256128v1 218.97 219.91 220.54 T:deoxyseq256128v13 263.26 264.16 270.04 T:oceankeyakv1 1971.84 1982.34 1984.72 T:acorn128 3306.66 3307.78 3308.01 T:present80n6t4silcv3 3306.97 3308.15 3308.90 T:present80n6t4silcv2 3308.24 3309.63 3311.19 T:present80n6silcv1 4485.12 4485.81 4488.26 T:led80n6t4silcv2 4485.82 4486.82 4489.91 T:led80n6t4silcv3 4486.47 4489.93 4492.67 T:led80n6silcv1 18314.69 18359.14 18359.14 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.00? 0.00? 44.45? T:aes128gcmv1 0.00? 0.00? 44.45? T:colm0v1 1.84? 1.91? 2.31? T:aezv5 2.04? 2.17? 2.39? T:aezv4 2.28 2.30 2.35 aegis128l 2.51? 2.62? 3.05? aegis256 7.77 7.80 8.16 T:morus1280128v1 7.91 7.96 8.16 T:morus1280256v1 8.05 8.09 8.44 T:morus1280128v2 8.11 8.21 8.62 T:morus1280256v2 8.48 8.59 8.72 ascon128av12 9.16 9.27 9.57 T:morus640128v1 9.68 9.71 10.08 T:morus640128v2 9.63 9.75 9.99 T:ascon96v1 9.66 9.77 10.05 T:ascon128av11 9.88 9.96 10.11 T:norx6441v1 10.45 10.54 10.74 ascon128v12 11.63 11.77 11.95 T:ascon128v11 11.62 11.77 11.94 T:ascon128v1 11.84 11.96 12.27 T:norx6441v2 11.88 12.12 12.32 T:norx6441v3 13.50 13.59 13.77 T:norx3241v1 14.48 14.70 14.83 T:norx6461v1 14.76 14.84 15.02 T:norx3241v2 15.05 15.16 15.39 T:norx3241v3 15.42 15.55 15.69 T:lakekeyakv1 16.16 16.31 16.55 T:norx6461v2 16.16 16.34 16.78 T:riverkeyakv2 16.41 16.53 16.62 T:norx6461v3 16.77 16.78 16.97 T:lakekeyakv2 19.70 19.81 19.98 T:norx3261v1 20.60 20.83 21.30 T:aes128n8t8clocv2 20.74 20.91 21.08 T:aes128n12t8clocv3 20.64 20.94 21.20 T:aes128n12t8clocv2 21.02 21.12 21.26 T:aes128otrsv1 20.94 21.14 21.35 T:aes128otrsv2 21.17 21.30 21.44 T:aes128otrsv3 21.26 21.34 21.62 T:aes128otrpv3 21.19 21.38 21.55 T:norx3261v2 21.51 21.62 21.98 T:norx3261v3 21.58 21.75 21.97 T:aes128n8clocv1 21.69 21.82 21.91 T:aes128otrpv2 21.70 21.89 22.14 T:aes128n12clocv1 21.77 22.04 22.22 T:aes128otrpv1 22.76 22.86 22.92 T:aes128otrcv3 22.75 23.01 23.23 T:aegis128 23.09 23.17 23.28 T:acorn128v2 23.30 23.47 23.64 T:acorn128v3 24.00 24.08 24.26 T:aes128n8t8silcv2 23.98 24.14 24.27 T:aes128n12t8silcv2 24.20 24.29 24.48 T:aes128n12t8silcv3 25.08 25.25 25.30 T:ketjemajorv2 25.20 25.29 25.41 T:aes128n12silcv1 25.18 25.34 25.54 T:aes128n8silcv1 26.77 26.95 27.41 T:norx6444v2 27.16 27.23 27.36 T:aes256otrsv2 27.19 27.26 27.41 T:aes256otrsv1 27.24 27.43 27.55 T:aes256otrsv3 27.41 27.51 27.73 T:norx6444v3 27.79 27.91 27.98 T:aes256otrpv3 27.84 28.04 28.21 T:aes256otrpv2 27.95 28.20 28.31 T:aes256otrpv1 29.18 29.46 29.64 T:aesjambuv1 29.38 29.46 29.56 T:aes256otrcv3 30.11 30.22 30.57 T:tiaoxinv1 30.12 30.23 30.49 T:tiaoxinv2 30.61 30.90 31.10 T:norx6444v1 33.70 33.81 33.92 T:ketjeminorv2 35.33 35.65 35.90 T:deoxysi128v141 41.47 42.03 42.36 T:deoxysii128v141 42.58 42.90 43.06 T:seakeyakv2 44.45 44.45 44.45 T:aeadaes128ocbtaglen64v1 44.45 44.45 44.45 T:aeadaes128ocbtaglen96v1 44.45 44.45 44.45 T:aeadaes192ocbtaglen128v1 44.45 44.45 44.45 T:aeadaes192ocbtaglen64v1 44.45 44.45 44.45 T:aeadaes192ocbtaglen96v1 44.45? 44.45? 88.91? T:aeadaes256ocbtaglen64v1 44.45? 44.45? 88.91? T:aeadaes256ocbtaglen96v1 44.45? 44.45? 88.91? T:colm127v1 49.34 49.61 49.70 T:ketjesrv1 49.89 50.23 50.46 T:deoxysi256v141 55.84 55.91 56.09 T:ketjesrv2 59.28 59.90 60.38 T:riverkeyakv1 61.06 61.42 62.20 T:proest256otrv1 64.79 65.23 66.27 T:oceankeyakv2 73.67 73.82 73.92 T:ketjejrv1 80.70 80.75 80.93 T:twine80n6clocv1 93.32 94.69 97.06 T:proest128otrv1 102.71 102.92 103.13 T:deoxysneq128128v13 103.25 103.45 103.66 T:deoxysneq128128v1 108.87 109.07 109.34 T:twine80n6t4clocv3 109.25 109.48 110.14 T:twine80n6t4clocv2 110.45 110.77 111.53 T:aezv1 113.52 113.71 113.91 T:deoxysii256v141 123.20 123.79 124.37 T:ketjejrv2 137.98 138.50 139.13 T:aezv3 142.53 142.72 143.23 T:deoxyseq128128v13 144.18 145.17 150.16 T:seakeyakv1 147.38 147.59 147.82 T:deoxysneq256128v1 147.12 147.62 147.91 T:deoxysneq256128v13 162.78 163.23 164.12 T:lunarkeyakv2 164.80 165.10 165.67 T:deoxyseq128128v1 220.09 220.59 221.33 T:deoxyseq256128v13 237.12 237.88 239.25 T:deoxyseq256128v1 263.13 264.45 270.31 T:oceankeyakv1 1958.88 1972.62 1974.05 T:acorn128 3306.91 3307.53 3308.62 T:present80n6t4silcv2 3306.65 3307.80 3309.20 T:present80n6t4silcv3 3307.87 3309.28 3309.93 T:present80n6silcv1 4485.38 4485.77 4486.80 T:led80n6t4silcv2 4485.08 4486.92 4491.47 T:led80n6t4silcv3 4466.99 4487.27 4489.05 T:led80n6silcv1 18359.14 18359.14 18359.14 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.00? 0.00? 44.45? T:aes128gcmv1 0.00? 0.00? 44.45? T:colm0v1 1.30 1.30 1.31 T:aezv5 1.34? 1.70? 1.72? T:aezv4 2.30? 2.66? 2.73? aegis128l 2.52? 2.90? 2.98? aegis256 7.79 7.80 7.91 T:morus1280128v1 7.86 7.88 7.93 T:morus1280256v1 8.04 8.08 8.30 T:morus1280128v2 8.10 8.14 8.28 T:morus1280256v2 8.23 8.34 8.41 ascon128av12 9.14 9.23 9.41 T:morus640128v1 9.60 9.75 9.98 T:ascon128av11 9.62 9.75 9.86 T:morus640128v2 9.64 9.83 9.91 T:ascon96v1 9.91 10.16 10.34 T:norx6441v1 10.35 10.39 10.43 ascon128v12 11.45 11.55 11.75 T:ascon128v1 11.52 11.65 11.77 T:ascon128v11 11.79 11.98 12.04 T:norx6441v2 12.02 12.23 12.34 T:norx6441v3 13.52 13.68 13.80 T:norx3241v1 14.61 14.88 15.04 T:norx6461v1 14.74 14.95 15.01 T:norx3241v2 15.12 15.29 15.41 T:norx3241v3 15.53 15.58 15.70 T:lakekeyakv1 16.26 16.31 16.51 T:riverkeyakv2 16.29 16.39 16.63 T:norx6461v2 16.44 16.53 16.67 T:norx6461v3 16.84 16.88 17.00 T:lakekeyakv2 19.80 19.87 19.98 T:norx3261v1 20.59 20.72 20.82 T:aes128n8t8clocv2 20.62 20.74 20.88 T:aes128n12t8clocv3 20.66 20.80 20.88 T:aes128n12t8clocv2 21.14 21.23 21.39 T:aes128otrsv2 21.22 21.32 21.42 T:norx3261v2 21.27 21.36 21.55 T:aes128otrsv3 21.25 21.37 21.41 T:aes128otrsv1 21.32 21.44 21.60 T:norx3261v3 21.37 21.55 21.68 T:aes128otrpv3 21.55 21.59 21.67 T:aes128n8clocv1 21.75 21.85 22.05 T:aes128otrpv2 21.70 21.88 21.95 T:aes128n12clocv1 21.93 22.07 22.22 T:aes128otrpv1 22.16 22.36 22.87 T:aegis128 22.70 22.80 22.84 T:aes128otrcv3 23.07 23.12 23.18 T:acorn128v2 23.29 23.33 23.62 T:acorn128v3 23.80 23.97 24.12 T:aes128n8t8silcv2 23.98 24.13 24.24 T:aes128n12t8silcv2 23.99 24.15 24.27 T:aes128n12t8silcv3 25.12 25.20 25.27 T:aes128n8silcv1 25.16 25.24 25.43 T:ketjemajorv2 25.08 25.27 25.41 T:aes128n12silcv1 26.88 26.93 27.07 T:norx6444v2 27.27 27.34 27.50 T:aes256otrsv2 27.27 27.42 27.72 T:norx6444v3 27.37 27.44 27.62 T:aes256otrsv1 27.34 27.54 27.65 T:aes256otrsv3 27.82 28.02 28.20 T:aes256otrpv3 27.92 28.19 28.31 T:aes256otrpv2 28.21 28.28 28.44 T:aes256otrpv1 29.27 29.30 29.37 T:aesjambuv1 29.44 29.48 29.62 T:aes256otrcv3 29.88 29.95 30.12 T:tiaoxinv1 29.88 30.00 30.34 T:tiaoxinv2 30.85 30.97 31.22 T:norx6444v1 33.79 33.85 34.02 T:ketjeminorv2 35.38 35.52 35.68 T:deoxysi128v141 41.66 41.77 41.85 T:deoxysii128v141 42.74 42.91 43.05 T:seakeyakv2 44.45 44.45 44.45 T:aeadaes128ocbtaglen64v1 44.45 44.45 44.45 T:aeadaes128ocbtaglen96v1 44.45 44.45 44.45 T:aeadaes192ocbtaglen128v1 44.45 44.45 44.45 T:aeadaes192ocbtaglen64v1 44.45 44.45 44.45 T:aeadaes192ocbtaglen96v1 44.45? 44.45? 88.91? T:aeadaes256ocbtaglen64v1 44.45? 44.45? 88.91? T:aeadaes256ocbtaglen96v1 44.45? 44.45? 88.91? T:colm127v1 49.45 49.50 49.61 T:ketjesrv1 49.86 50.09 50.41 T:deoxysi256v141 55.79 55.96 56.02 T:ketjesrv2 58.77 58.88 58.98 T:proest256otrv1 59.10 60.03 60.74 T:riverkeyakv1 64.98 65.16 68.82 T:oceankeyakv2 73.66 73.80 74.05 T:ketjejrv1 80.62 80.87 81.00 T:twine80n6clocv1 92.41 93.08 93.30 T:proest128otrv1 102.67 102.82 103.21 T:deoxysneq128128v13 103.00 103.32 103.47 T:deoxysneq128128v1 108.85 109.06 109.27 T:twine80n6t4clocv3 109.54 109.81 110.12 T:twine80n6t4clocv2 110.32 110.59 110.84 T:aezv1 113.73 113.86 114.20 T:deoxysii256v141 123.32 123.53 124.13 T:ketjejrv2 137.84 138.16 138.66 T:aezv3 142.26 142.66 143.15 T:deoxyseq128128v13 144.59 145.48 149.70 T:seakeyakv1 147.30 147.63 147.89 T:deoxysneq256128v1 147.36 147.66 148.30 T:deoxysneq256128v13 162.91 163.30 163.60 T:lunarkeyakv2 164.38 164.66 165.42 T:deoxyseq128128v1 220.00 220.89 221.23 T:deoxyseq256128v13 237.84 238.14 239.20 T:deoxyseq256128v1 262.58 263.79 270.10 T:oceankeyakv1 1960.30 1969.36 1972.24 T:acorn128 3306.74 3307.45 3308.41 T:present80n6t4silcv3 3306.62 3308.26 3309.64 T:present80n6t4silcv2 3308.14 3310.24 3311.02 T:present80n6silcv1 4466.31 4484.12 4485.28 T:led80n6silcv1 4484.45 4484.71 4484.98 T:led80n6t4silcv2 4484.88 4486.66 4487.33 T:led80n6t4silcv3 6445.70 6445.70 6445.70 aes256gcmv1