VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20260217

[Page version: 20260315 18:26:44]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.18? 0.19? 0.20? T:tiaoxinv2 0.18? 0.19? 0.20? T:tiaoxinv1 -0.29? 0.20? 0.65? T:aeadaes128ocbtaglen128v1 0.23 0.23 0.24 aegis128l 0.23 0.24 0.25 T:aegis128l -0.22? 0.26? 1.11? T:aeadaes256ocbtaglen128v1 0.35 0.35 0.36 T:aezv4 0.35 0.36 0.36 T:aezv3 -0.13? 0.38? 1.23? T:aeadaes192ocbtaglen128v1 0.39 0.39 0.40 T:aegis256 0.39 0.40 0.40 T:aezv5 0.39 0.40 0.41 T:aegis128 0.39 0.40 0.41 aegis256 0.43 0.45 0.46 T:aes128otrsv3 0.44 0.45 0.47 T:aes128otrpv3 0.45 0.47 0.48 T:aes128otrcv3 0.56 0.57 0.59 T:aes256otrpv3 0.56 0.58 0.60 T:aes256otrcv3 0.56 0.58 0.61 T:aes256otrsv3 0.67 0.67 0.68 T:deoxysi128v141 0.67 0.68 0.70 T:morus1280128v2 0.67 0.69 0.70 T:morus1280256v2 0.67 0.69 0.70 T:morus1280128v1 0.68 0.69 0.70 T:morus1280256v1 0.69 0.70 0.71 T:deoxysneq128128v1 0.74 0.75 0.76 T:deoxysi256v141 0.77 0.78 0.79 T:deoxysneq256128v1 0.93 0.95 0.97 T:aes128gcmv1 1.01 1.04 1.06 T:norx6444v3 1.05 1.07 1.09 aes256gcmv1 1.17 1.18 1.20 T:morus640128v1 1.17 1.19 1.20 T:morus640128v2 1.31 1.32 1.33 T:deoxysii128v141 1.37 1.38 1.39 T:colm0v1 1.39 1.41 1.44 T:deoxyseq128128v1 1.48 1.50 1.51 T:deoxysii256v141 1.64 1.65 1.66 T:deoxyseq256128v1 1.80 1.86 1.95 T:lunarkeyakv2 2.02 2.04 2.06 T:norx6441v2 2.06 2.08 2.10 T:norx6441v3 2.18 2.19 2.19 T:aes128n12t8clocv2 2.19 2.19 2.20 T:aes128n12t8clocv3 2.19 2.19 2.19 T:aes128n8t8clocv2 2.19 2.20 2.20 T:aes128n12t8silcv2 2.19 2.20 2.21 T:aes128n8t8silcv2 2.20 2.20 2.21 T:aes128n12t8silcv3 2.44 2.46 2.47 T:norx6441v1 2.49 2.51 2.55 T:seakeyakv2 2.53 2.57 2.63 T:oceankeyakv2 2.66 2.70 2.76 T:lakekeyakv1 2.75 2.80 2.83 T:norx6444v2 2.89 2.94 3.01 T:lakekeyakv2 3.07 3.09 3.12 T:norx6461v3 3.07 3.10 3.11 T:norx6461v2 3.28 3.32 3.35 T:norx6444v1 3.60 3.62 3.64 T:norx3241v3 3.61 3.63 3.66 T:norx3241v2 3.69 3.72 3.73 T:norx6461v1 4.37 4.38 4.40 T:aesjambuv1 4.38 4.40 4.42 T:norx3241v1 4.75 4.79 4.84 T:acorn128v2 4.74 4.80 4.87 T:ketjemajorv2 5.49 5.51 5.53 T:norx3261v3 5.53 5.55 5.59 T:acorn128v3 5.56 5.59 5.62 T:norx3261v2 6.19 6.31 6.50 T:ketjeminorv2 6.67 6.76 6.86 ascon128av12 6.73 6.76 6.79 T:ascon128av11 6.73 6.76 6.79 T:ascon96v1 7.00 7.26 7.42 T:riverkeyakv2 7.49 7.51 7.53 T:norx3261v1 9.88 9.91 9.94 T:ascon128v1 9.88 9.92 9.95 T:ascon128v11 10.07 10.14 10.22 ascon128v12 11.05 11.08 11.10 T:aes128otrsv2 11.06 11.08 11.10 T:aes128otrpv2 11.07 11.09 11.11 T:aes128otrsv1 11.06 11.09 11.12 T:aes128otrpv1 14.78 14.81 14.84 T:aes256otrpv1 14.79 14.83 14.85 T:aes256otrpv2 15.23 15.26 15.29 T:aes256otrsv2 15.23 15.26 15.30 T:aes256otrsv1 15.25 15.29 15.31 T:twine80n6t4clocv3 16.03 16.21 16.28 T:twine80n6t4clocv2 17.06 17.18 17.32 T:proest256otrv1 20.87 20.91 20.94 T:aes128n12clocv1 20.85 20.92 21.00 T:ketjesrv1 20.89 20.92 20.95 T:aes128n8clocv1 20.88 20.93 20.97 T:aeadaes128ocbtaglen64v1 20.85 20.94 21.02 T:aeadaes128ocbtaglen96v1 22.70 22.78 22.87 T:ketjesrv2 24.90 24.97 25.02 T:aeadaes192ocbtaglen96v1 24.94 25.01 25.06 T:aeadaes192ocbtaglen64v1 28.79 28.87 28.95 T:aeadaes256ocbtaglen64v1 28.83 28.95 29.03 T:aeadaes256ocbtaglen96v1 38.17 38.25 38.94 T:ketjejrv1 39.67 39.95 40.05 T:proest128otrv1 45.54 45.64 45.77 T:colm127v1 54.58 54.75 55.43 T:deoxysneq128128v13 60.61 60.85 60.93 T:ketjejrv2 72.06 72.10 72.16 T:present80n6t4silcv3 86.05 86.25 86.75 T:deoxysneq256128v13 109.66 109.83 111.07 T:deoxyseq128128v13 127.20 127.31 127.44 T:led80n6t4silcv3 130.90 131.03 131.19 T:aezv1 170.40 170.66 170.94 T:deoxyseq256128v13 316.64 316.94 317.38 T:acorn128 2606.43 2608.03 2610.54 T:led80n6t4silcv2 2607.08 2608.55 2609.92 T:led80n6silcv1 3078.22 3080.59 3083.95 T:present80n6t4silcv2 3079.23 3084.22 3087.88 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead -0.25? 0.22? 0.64? T:aeadaes128ocbtaglen128v1 0.23 0.23 0.24 aegis128l 0.23 0.23 0.24 T:aegis128l -0.62? 0.27? 0.71? T:aeadaes256ocbtaglen128v1 0.34 0.35 0.36 T:aezv4 0.35 0.36 0.36 T:aezv3 0.38 0.39 0.39 T:aegis256 0.39 0.39 0.40 T:aezv5 0.39 0.40 0.40 T:aegis128 -0.45? 0.41? 0.85? T:aeadaes192ocbtaglen128v1 0.41 0.43 0.44 aegis256 0.43 0.44 0.45 T:tiaoxinv2 0.43 0.44 0.45 T:tiaoxinv1 0.47 0.49 0.51 T:aes128otrsv3 0.48 0.50 0.52 T:aes128otrcv3 0.50 0.51 0.52 T:aes128otrpv3 0.59 0.60 0.63 T:aes256otrsv3 0.59 0.61 0.63 T:aes256otrcv3 0.59 0.61 0.63 T:aes256otrpv3 0.67 0.68 0.69 T:morus1280128v1 0.68 0.68 0.69 T:morus1280256v1 0.68 0.68 0.69 T:morus1280256v2 0.67 0.68 0.69 T:morus1280128v2 0.65 0.69 0.72 T:aes128gcmv1 0.79 0.80 0.81 T:deoxysi128v141 0.80 0.81 0.82 aes256gcmv1 0.81 0.82 0.82 T:deoxysneq128128v1 0.84 0.86 0.87 T:deoxysi256v141 0.89 0.90 0.91 T:deoxysneq256128v1 1.03 1.05 1.07 T:norx6444v3 1.14 1.15 1.17 T:morus640128v2 1.15 1.16 1.18 T:morus640128v1 1.32 1.33 1.33 T:deoxysii128v141 1.38 1.39 1.42 T:colm0v1 1.49 1.50 1.52 T:deoxysii256v141 1.67 1.68 1.70 T:deoxyseq128128v1 1.76 1.77 1.78 T:deoxyseq256128v1 1.82 1.89 1.96 T:lunarkeyakv2 1.95 1.97 1.98 T:norx6441v2 1.98 2.00 2.01 T:norx6441v3 2.10 2.11 2.13 T:aes128n12t8silcv3 2.11 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.13 T:aes128n12t8clocv3 2.11 2.12 2.13 T:aes128n8t8clocv2 2.12 2.13 2.13 T:aes128n12t8clocv2 2.41 2.43 2.44 T:norx6441v1 2.53 2.57 2.60 T:seakeyakv2 2.60 2.66 2.71 T:oceankeyakv2 2.67 2.72 2.77 T:lakekeyakv1 2.77 2.81 2.85 T:norx6444v2 2.93 2.99 3.03 T:lakekeyakv2 3.04 3.06 3.08 T:norx6461v2 3.05 3.07 3.09 T:norx6461v3 3.32 3.36 3.40 T:norx6444v1 3.54 3.56 3.58 T:norx3241v3 3.55 3.58 3.59 T:norx3241v2 3.70 3.73 3.76 T:norx6461v1 4.30 4.33 4.35 T:norx3241v1 4.58 4.64 4.69 T:ketjemajorv2 4.66 4.67 4.68 T:aesjambuv1 4.72 4.74 4.75 T:acorn128v3 4.73 4.79 4.83 T:acorn128v2 5.49 5.51 5.54 T:norx3261v2 5.52 5.55 5.57 T:norx3261v3 6.24 6.33 6.41 T:ketjeminorv2 6.65 6.68 6.71 T:ascon128av11 6.65 6.68 6.72 T:ascon96v1 6.68 6.72 6.75 ascon128av12 7.16 7.21 7.26 T:riverkeyakv2 7.35 7.37 7.39 T:norx3261v1 9.84 9.87 9.90 T:ascon128v1 9.83 9.87 9.92 T:ascon128v11 10.00 10.04 10.09 ascon128v12 11.45 11.49 11.52 T:aes128otrpv2 11.46 11.53 11.56 T:aes128otrpv1 11.50 11.53 11.56 T:aes128otrsv1 11.48 11.56 11.60 T:aes128otrsv2 15.21 15.26 15.30 T:twine80n6t4clocv3 15.30 15.33 15.37 T:aes256otrpv2 15.30 15.33 15.36 T:aes256otrpv1 15.80 15.84 15.88 T:aes256otrsv2 15.83 15.88 15.92 T:aes256otrsv1 16.05 16.09 16.12 T:twine80n6t4clocv2 16.91 17.11 17.20 T:proest256otrv1 18.66 18.70 18.77 T:aes128n12clocv1 19.13 19.17 19.22 T:aes128n8clocv1 21.08 21.17 21.24 T:ketjesrv2 21.58 21.67 21.78 T:ketjesrv1 34.53 34.68 34.79 T:aeadaes128ocbtaglen96v1 34.68 34.78 34.86 T:aeadaes128ocbtaglen64v1 38.34 38.50 39.04 T:ketjejrv1 38.80 39.08 39.34 T:proest128otrv1 41.86 41.93 42.00 T:aeadaes192ocbtaglen96v1 41.88 41.96 42.05 T:aeadaes192ocbtaglen64v1 49.13 49.23 49.39 T:aeadaes256ocbtaglen96v1 49.16 49.24 49.34 T:aeadaes256ocbtaglen64v1 60.82 61.11 61.50 T:ketjejrv2 71.96 72.04 72.11 T:present80n6t4silcv3 72.55 72.67 73.12 T:deoxysneq128128v13 73.12 73.46 73.67 T:colm127v1 105.13 105.53 106.18 T:deoxysneq256128v13 109.76 110.00 110.11 T:deoxyseq128128v13 127.05 127.19 127.34 T:led80n6t4silcv3 130.60 130.69 130.81 T:aezv1 168.12 169.43 170.88 T:deoxyseq256128v13 363.89 364.69 365.75 T:acorn128 2603.76 2606.00 2608.65 T:led80n6t4silcv2 2605.42 2606.97 2608.37 T:led80n6silcv1 3079.23 3081.50 3084.76 T:present80n6t4silcv2 3079.75 3086.70 3093.90 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13 0.13 0.14 T:aezv3 0.13? 0.14? 0.15? T:aezv4 0.13? 0.15? 0.16? T:aezv5 -0.22? 0.22? 0.65? T:aeadaes128ocbtaglen128v1 0.23 0.23 0.24 T:aegis128l 0.24? 0.24? 0.27? aegis128l -0.59? 0.27? 1.13? T:aeadaes256ocbtaglen128v1 0.38 0.38 0.39 T:aegis256 0.40 0.40 0.40 T:aegis128 -0.03? 0.40? 1.24? T:aeadaes192ocbtaglen128v1 0.41? 0.43? 0.46? aegis256 0.43 0.44 0.45 T:tiaoxinv2 0.43 0.44 0.45 T:tiaoxinv1 0.48 0.50 0.51 T:aes128otrsv3 0.49 0.50 0.51 T:aes128otrcv3 0.50 0.52 0.52 T:aes128otrpv3 0.59 0.60 0.61 T:aes256otrcv3 0.59 0.60 0.61 T:aes256otrsv3 0.60 0.61 0.62 T:aes256otrpv3 0.68 0.68 0.69 T:morus1280256v1 0.68 0.69 0.69 T:morus1280256v2 0.68 0.69 0.69 T:morus1280128v2 0.67 0.69 0.70 T:morus1280128v1 0.67 0.69 0.71 T:aes128gcmv1 0.79 0.80 0.81 T:deoxysi128v141 0.80 0.81 0.82 aes256gcmv1 0.81 0.82 0.83 T:deoxysneq128128v1 0.85 0.86 0.88 T:deoxysi256v141 0.90 0.91 0.92 T:deoxysneq256128v1 1.04 1.06 1.08 T:norx6444v3 1.14 1.15 1.17 T:morus640128v2 1.15 1.16 1.18 T:morus640128v1 1.32 1.33 1.33 T:deoxysii128v141 1.37 1.39 1.41 T:colm0v1 1.49 1.50 1.52 T:deoxysii256v141 1.67 1.69 1.71 T:deoxyseq128128v1 1.76 1.77 1.78 T:deoxyseq256128v1 1.89 1.94 2.00 T:lunarkeyakv2 1.95 1.97 1.99 T:norx6441v2 1.98 1.99 2.01 T:norx6441v3 2.10 2.11 2.12 T:aes128n12t8silcv2 2.10 2.11 2.12 T:aes128n12t8silcv3 2.11 2.11 2.12 T:aes128n8t8silcv2 2.10 2.12 2.13 T:aes128n8t8clocv2 2.09 2.12 2.13 T:aes128n12t8clocv3 2.12 2.12 2.13 T:aes128n12t8clocv2 2.40 2.43 2.45 T:norx6441v1 2.55 2.58 2.61 T:seakeyakv2 2.60 2.65 2.70 T:oceankeyakv2 2.68 2.75 2.80 T:lakekeyakv1 2.79 2.83 2.87 T:norx6444v2 2.94 3.01 3.08 T:lakekeyakv2 3.03 3.05 3.07 T:norx6461v2 3.05 3.06 3.08 T:norx6461v3 3.31 3.35 3.39 T:norx6444v1 3.54 3.56 3.58 T:norx3241v3 3.55 3.57 3.59 T:norx3241v2 3.72 3.74 3.76 T:norx6461v1 4.30 4.32 4.35 T:norx3241v1 4.54 4.62 4.67 T:ketjemajorv2 4.66 4.67 4.68 T:aesjambuv1 4.71 4.73 4.74 T:acorn128v3 4.69? 4.82? 5.50? T:acorn128v2 5.48 5.50 5.53 T:norx3261v2 5.52 5.55 5.57 T:norx3261v3 6.21 6.30 6.40 T:ketjeminorv2 6.65 6.68 6.72 T:ascon128av11 6.67 6.70 6.73 T:ascon96v1 6.68 6.71 6.75 ascon128av12 7.20 7.28 7.42 T:riverkeyakv2 7.36 7.37 7.39 T:norx3261v1 9.83 9.86 9.91 T:ascon128v1 9.84 9.87 9.91 T:ascon128v11 10.01 10.06 10.12 ascon128v12 11.48 11.53 11.58 T:aes128otrpv2 11.50 11.55 11.58 T:aes128otrsv1 11.52 11.55 11.59 T:aes128otrpv1 11.52 11.57 11.62 T:aes128otrsv2 15.20 15.26 15.31 T:twine80n6t4clocv3 15.29 15.33 15.37 T:aes256otrpv1 15.31 15.33 15.38 T:aes256otrpv2 15.81 15.86 15.90 T:aes256otrsv2 15.83 15.89 15.94 T:aes256otrsv1 15.99 16.06 16.13 T:twine80n6t4clocv2 17.11 17.18 17.23 T:proest256otrv1 18.63 18.67 18.71 T:aes128n12clocv1 19.10 19.18 19.25 T:aes128n8clocv1 21.16 21.25 21.35 T:ketjesrv2 21.53 21.80 21.89 T:ketjesrv1 34.54 34.61 34.73 T:aeadaes128ocbtaglen96v1 34.58 34.68 34.78 T:aeadaes128ocbtaglen64v1 38.31 38.44 38.54 T:ketjejrv1 38.73 39.05 39.26 T:proest128otrv1 41.85 41.94 42.03 T:aeadaes192ocbtaglen96v1 41.86 41.97 42.08 T:aeadaes192ocbtaglen64v1 49.19 49.29 49.41 T:aeadaes256ocbtaglen64v1 49.18 49.30 49.47 T:aeadaes256ocbtaglen96v1 60.73 60.87 61.13 T:ketjejrv2 71.97 72.06 72.10 T:present80n6t4silcv3 72.10 72.46 72.66 T:colm127v1 72.36 72.60 73.19 T:deoxysneq128128v13 106.04 106.22 106.44 T:deoxysneq256128v13 109.76 109.89 110.02 T:deoxyseq128128v13 127.11 127.20 127.30 T:led80n6t4silcv3 130.40 130.50 130.80 T:aezv1 168.44 169.43 171.23 T:deoxyseq256128v13 364.37 364.90 365.42 T:acorn128 2604.64 2606.02 2609.44 T:led80n6t4silcv2 2605.05 2606.76 2608.06 T:led80n6silcv1 3079.72 3082.30 3087.82 T:present80n6t4silcv2 3079.72 3083.87 3086.72 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.15 0.16 0.16 T:tiaoxinv2 0.15? 0.16? 0.17? T:tiaoxinv1 -0.06? 0.19? 0.44? T:aeadaes128ocbtaglen128v1 0.21 0.21 0.21 aegis128l 0.21 0.21 0.22 T:aegis128l -0.01? 0.24? 0.49? T:aeadaes256ocbtaglen128v1 0.25 0.26 0.27 T:aezv3 0.25 0.26 0.27 T:aezv4 0.28 0.28 0.28 T:aezv5 0.38 0.38 0.39 aegis256 0.38 0.38 0.39 T:aegis256 0.39 0.39 0.40 T:aegis128 0.11? 0.40? 0.79? T:aeadaes192ocbtaglen128v1 0.45 0.46 0.46 T:aes128otrpv3 0.47 0.48 0.49 T:aes128otrcv3 0.58 0.59 0.60 T:aes256otrpv3 0.59 0.60 0.61 T:aes256otrcv3 0.62 0.64 0.65 T:aes128gcmv1 0.66 0.66 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280256v2 0.66 0.67 0.67 T:morus1280128v2 0.66 0.67 0.68 T:morus1280128v1 0.66 0.67 0.68 T:deoxysi128v141 0.68 0.69 0.70 T:deoxysneq128128v1 0.69 0.70 0.71 aes256gcmv1 0.74 0.76 0.78 T:deoxysi256v141 0.77 0.78 0.79 T:deoxysneq256128v1 0.98 0.98 1.00 T:colm0v1 0.99 1.00 1.01 T:deoxysii128v141 1.05 1.06 1.07 T:deoxyseq128128v1 1.12 1.13 1.14 T:deoxysii256v141 1.13 1.15 1.16 T:morus640128v2 1.14 1.15 1.16 T:morus640128v1 1.23 1.24 1.25 T:deoxyseq256128v1 1.29 1.29 1.30 T:aes128otrsv3 1.54 1.56 1.57 T:norx6444v3 1.72 1.73 1.74 T:aes256otrsv3 2.03 2.04 2.06 T:norx6441v2 2.04 2.05 2.06 T:norx6441v3 2.12 2.15 2.18 T:seakeyakv2 2.15 2.16 2.16 T:aes128n12t8clocv3 2.16 2.16 2.17 T:aes128n12t8clocv2 2.16 2.16 2.17 T:aes128n8t8clocv2 2.16 2.16 2.17 T:aes128n8t8silcv2 2.16 2.17 2.17 T:aes128n12t8silcv3 2.16 2.17 2.17 T:aes128n12t8silcv2 2.14 2.17 2.19 T:oceankeyakv2 2.46 2.47 2.49 T:norx6441v1 2.57 2.59 2.63 T:lakekeyakv1 2.58 2.63 2.66 T:lakekeyakv2 2.61 2.65 2.69 T:lunarkeyakv2 2.67 2.69 2.72 T:norx6444v2 3.09 3.11 3.12 T:norx6461v3 3.10 3.11 3.13 T:norx6461v2 3.18 3.21 3.24 T:norx6444v1 3.62 3.64 3.65 T:norx3241v3 3.66 3.67 3.69 T:norx3241v2 3.68 3.70 3.73 T:norx6461v1 4.08 4.12 4.15 T:ketjemajorv2 4.34 4.35 4.37 T:aesjambuv1 4.39 4.40 4.41 T:norx3241v1 5.01 5.03 5.04 T:acorn128v3 5.01 5.04 5.33 T:riverkeyakv2 4.73 5.05 5.21 T:acorn128v2 5.51 5.53 5.55 T:norx3261v2 5.51 5.53 5.55 T:norx3261v3 5.63? 5.71? 6.32? T:ketjeminorv2 6.57 6.59 6.62 T:ascon96v1 6.57 6.60 6.63 T:ascon128av11 6.71 6.76 6.79 ascon128av12 7.50 7.51 7.53 T:norx3261v1 9.74 9.76 9.79 T:ascon128v1 9.74 9.77 9.79 T:ascon128v11 10.04 10.10 10.14 ascon128v12 10.79 10.82 10.85 T:aes128otrpv2 10.81 10.82 10.85 T:aes128otrpv1 11.17 11.19 11.21 T:aes128otrsv2 11.19 11.20 11.21 T:aes128otrsv1 14.52 14.55 14.58 T:aes256otrpv1 14.54 14.56 14.58 T:aes256otrpv2 14.63 14.65 14.67 T:aes256otrsv1 14.63 14.67 14.70 T:aes256otrsv2 15.02 15.05 15.09 T:twine80n6t4clocv3 15.74 15.79 15.85 T:twine80n6t4clocv2 16.10 16.12 16.14 T:aes128n8clocv1 16.10 16.13 16.15 T:aes128n12clocv1 17.18 17.90 18.68 T:proest256otrv1 19.91 20.13 20.20 T:ketjesrv1 20.71 20.74 20.77 T:aeadaes128ocbtaglen96v1 20.71 20.75 20.78 T:aeadaes128ocbtaglen64v1 21.48 21.53 21.60 T:ketjesrv2 24.64 24.68 24.73 T:aeadaes192ocbtaglen96v1 24.60 24.70 24.76 T:aeadaes192ocbtaglen64v1 28.62 28.71 28.76 T:aeadaes256ocbtaglen96v1 28.65 28.72 28.76 T:aeadaes256ocbtaglen64v1 34.07 34.15 34.27 T:colm127v1 35.35 35.53 35.60 T:ketjejrv1 38.86 39.06 39.19 T:proest128otrv1 54.87 54.94 55.16 T:deoxysneq128128v13 59.00 59.05 59.11 T:ketjejrv2 71.60 71.64 71.68 T:present80n6t4silcv3 82.32 82.45 82.54 T:deoxyseq128128v13 86.10 86.18 86.29 T:aezv1 85.96 86.22 86.78 T:deoxysneq256128v13 126.63 126.72 126.81 T:led80n6t4silcv3 126.25 127.43 127.85 T:deoxyseq256128v13 322.11 322.32 322.64 T:acorn128 1955.14 1956.01 1956.99 T:led80n6t4silcv2 1955.27 1956.19 1957.43 T:led80n6silcv1 2310.14 2312.26 2316.42 T:present80n6silcv1 2310.30 2313.11 2315.99 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead -0.07? 0.18? 0.42? T:aeadaes128ocbtaglen128v1 0.20 0.21 0.22 aegis128l 0.21 0.21 0.21 T:aegis128l -0.19? 0.24? 0.46? T:aeadaes256ocbtaglen128v1 0.25 0.26 0.27 T:aezv3 0.26 0.26 0.27 T:aezv4 0.27 0.28 0.28 T:tiaoxinv2 0.27 0.28 0.28 T:tiaoxinv1 0.28 0.28 0.29 T:aezv5 0.38 0.38 0.39 T:aegis256 0.38 0.38 0.39 T:aegis128 0.14? 0.39? 0.82? T:aeadaes192ocbtaglen128v1 0.38 0.40 0.40 aegis256 0.47 0.48 0.50 T:aes128otrpv3 0.48 0.49 0.50 T:aes128otrcv3 0.49 0.50 0.51 T:aes128gcmv1 0.56 0.57 0.58 aes256gcmv1 0.59 0.60 0.62 T:aes256otrpv3 0.62 0.63 0.64 T:aes256otrcv3 0.66 0.66 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280256v2 0.66 0.67 0.67 T:morus1280128v1 0.66 0.67 0.68 T:morus1280128v2 0.73 0.74 0.74 T:deoxysi128v141 0.74 0.76 0.77 T:deoxysneq128128v1 0.79 0.81 0.83 T:deoxysi256v141 0.84 0.84 0.85 T:deoxysneq256128v1 0.98 0.99 1.00 T:colm0v1 1.00 1.00 1.01 T:deoxysii128v141 1.10 1.12 1.14 T:morus640128v2 1.13 1.13 1.14 T:morus640128v1 1.13 1.13 1.14 T:deoxysii256v141 1.19 1.20 1.21 T:deoxyseq128128v1 1.28 1.29 1.30 T:deoxyseq256128v1 1.29 1.30 1.31 T:aes128otrsv3 1.54 1.55 1.57 T:norx6444v3 1.74 1.74 1.76 T:aes256otrsv3 2.04 2.05 2.07 T:norx6441v3 2.05 2.06 2.07 T:norx6441v2 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.13 2.13 T:aes128n12t8clocv2 2.12 2.13 2.14 T:aes128n12t8silcv3 2.12 2.13 2.13 T:aes128n12t8clocv3 2.12 2.13 2.16 T:aes128n12t8silcv2 2.12 2.13 2.17 T:aes128n8t8clocv2 2.14 2.17 2.19 T:seakeyakv2 2.00? 2.18? 2.23? T:oceankeyakv2 2.43 2.45 2.46 T:norx6441v1 2.57 2.61 2.64 T:lakekeyakv1 2.64 2.68 2.73 T:lakekeyakv2 2.63 2.68 2.72 T:lunarkeyakv2 2.67 2.69 2.73 T:norx6444v2 3.05 3.07 3.08 T:norx6461v3 3.08 3.09 3.11 T:norx6461v2 3.21 3.23 3.25 T:norx6444v1 3.61 3.62 3.63 T:norx3241v3 3.61 3.62 3.63 T:norx3241v2 3.65 3.67 3.68 T:norx6461v1 3.85 3.99 4.05 T:ketjemajorv2 4.35 4.36 4.38 T:norx3241v1 4.48 4.49 4.50 T:aesjambuv1 4.88 4.90 4.94 T:acorn128v2 4.75 5.02 5.15 T:acorn128v3 5.10 5.15 5.22 T:riverkeyakv2 5.49 5.51 5.53 T:norx3261v2 5.52 5.54 5.56 T:norx3261v3 5.63? 5.75? 6.44? T:ketjeminorv2 6.53 6.56 6.59 T:ascon128av11 6.57 6.59 6.61 T:ascon96v1 6.67 6.69 6.72 ascon128av12 7.43 7.44 7.45 T:norx3261v1 9.71 9.74 9.76 T:ascon128v11 9.71 9.74 9.76 T:ascon128v1 10.04 10.06 10.09 ascon128v12 11.00 11.03 11.06 T:aes128otrpv1 11.00 11.06 11.08 T:aes128otrpv2 11.39 11.41 11.44 T:aes128otrsv1 11.39 11.41 11.44 T:aes128otrsv2 14.75 14.77 14.80 T:aes256otrpv1 14.77 14.80 14.82 T:aes256otrpv2 14.93 14.95 14.98 T:aes256otrsv2 14.92 14.96 14.98 T:aes256otrsv1 14.98 15.02 15.08 T:aes128n12clocv1 15.02 15.05 15.09 T:twine80n6t4clocv3 15.21 15.24 15.28 T:aes128n8clocv1 15.75 15.78 15.83 T:twine80n6t4clocv2 17.50 18.61 18.67 T:proest256otrv1 20.31 20.52 20.61 T:ketjesrv1 20.67 20.76 20.81 T:ketjesrv2 27.52 27.57 27.62 T:aeadaes128ocbtaglen96v1 27.54 27.60 27.68 T:aeadaes128ocbtaglen64v1 33.15 33.20 33.26 T:aeadaes192ocbtaglen96v1 33.15 33.22 33.28 T:aeadaes192ocbtaglen64v1 35.61 35.69 35.80 T:ketjejrv1 38.56 38.63 38.83 T:proest128otrv1 38.79 38.82 38.89 T:aeadaes256ocbtaglen96v1 38.82 38.91 38.96 T:aeadaes256ocbtaglen64v1 47.96 48.07 48.15 T:colm127v1 58.51 58.79 59.36 T:ketjejrv2 63.81 63.89 63.98 T:deoxysneq128128v13 71.69 71.84 71.91 T:present80n6t4silcv3 82.29 82.51 85.63 T:deoxyseq128128v13 85.91 85.97 86.06 T:aezv1 95.46 95.79 96.04 T:deoxysneq256128v13 125.97 126.61 128.10 T:deoxyseq256128v13 126.59 126.67 126.78 T:led80n6t4silcv3 347.81 348.38 349.11 T:acorn128 1953.77 1954.88 1956.26 T:led80n6t4silcv2 1954.49 1955.31 1957.32 T:led80n6silcv1 2310.10 2312.57 2315.49 T:present80n6t4silcv2 2310.13 2313.72 2317.62 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.14? 0.15? 0.16? T:aezv3 0.14 0.15 0.15 T:aezv4 0.15 0.15 0.16 T:aezv5 -0.03? 0.19? 0.41? T:aeadaes128ocbtaglen128v1 0.21 0.21 0.21 T:aegis128l 0.21 0.21 0.22 aegis128l -0.18? 0.24? 0.69? T:aeadaes256ocbtaglen128v1 0.27 0.28 0.29 T:tiaoxinv1 0.27 0.28 0.29 T:tiaoxinv2 0.38 0.38 0.38 T:aegis256 0.38 0.38 0.39 T:aegis128 -0.04? 0.39? 0.61? T:aeadaes192ocbtaglen128v1 0.40 0.41 0.42 aegis256 0.48 0.49 0.49 T:aes128otrpv3 0.48 0.49 0.50 T:aes128otrcv3 0.49 0.50 0.50 T:aes128gcmv1 0.56 0.57 0.58 aes256gcmv1 0.59 0.60 0.61 T:aes256otrpv3 0.62 0.63 0.64 T:aes256otrcv3 0.66 0.67 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280128v1 0.66 0.67 0.67 T:morus1280128v2 0.66 0.67 0.67 T:morus1280256v2 0.73 0.74 0.74 T:deoxysi128v141 0.74 0.76 0.77 T:deoxysneq128128v1 0.79 0.81 0.83 T:deoxysi256v141 0.83 0.84 0.85 T:deoxysneq256128v1 0.98 0.99 1.01 T:colm0v1 1.00 1.00 1.00 T:deoxysii128v141 1.11 1.13 1.16 T:morus640128v2 1.12 1.13 1.14 T:morus640128v1 1.13 1.13 1.14 T:deoxysii256v141 1.19 1.20 1.20 T:deoxyseq128128v1 1.28 1.29 1.31 T:deoxyseq256128v1 1.30 1.30 1.31 T:aes128otrsv3 1.54 1.56 1.57 T:norx6444v3 1.74 1.75 1.75 T:aes256otrsv3 2.05 2.06 2.06 T:norx6441v3 2.05 2.06 2.07 T:norx6441v2 2.12 2.13 2.19 T:aes128n12t8clocv2 2.12 2.13 2.20 T:aes128n8t8silcv2 2.12 2.13 2.15 T:aes128n8t8clocv2 2.12 2.13 2.17 T:aes128n12t8silcv2 2.13 2.13 2.16 T:aes128n12t8silcv3 2.13 2.13 2.19 T:aes128n12t8clocv3 2.15 2.17 2.19 T:seakeyakv2 2.19 2.22 2.24 T:oceankeyakv2 2.43 2.44 2.46 T:norx6441v1 2.60 2.64 2.68 T:lakekeyakv1 2.64 2.67 2.70 T:lakekeyakv2 2.65 2.69 2.71 T:lunarkeyakv2 2.68 2.71 2.74 T:norx6444v2 3.06 3.07 3.09 T:norx6461v3 3.08 3.09 3.11 T:norx6461v2 3.21 3.24 3.27 T:norx6444v1 3.60 3.61 3.63 T:norx3241v3 3.60 3.61 3.63 T:norx3241v2 3.66 3.67 3.69 T:norx6461v1 3.97 4.03 4.06 T:ketjemajorv2 4.34 4.36 4.38 T:norx3241v1 4.48 4.49 4.50 T:aesjambuv1 4.88 4.90 4.92 T:acorn128v2 4.88 5.01 5.04 T:acorn128v3 5.11 5.14 5.19 T:riverkeyakv2 5.48 5.50 5.53 T:norx3261v2 5.53 5.54 5.56 T:norx3261v3 5.66? 5.79? 6.48? T:ketjeminorv2 6.51 6.55 6.58 T:ascon128av11 6.57 6.60 6.62 T:ascon96v1 6.68 6.70 6.73 ascon128av12 7.43 7.44 7.45 T:norx3261v1 9.72 9.74 9.77 T:ascon128v1 9.73 9.75 9.77 T:ascon128v11 10.02 10.06 10.10 ascon128v12 11.01 11.03 11.06 T:aes128otrpv1 11.01 11.07 11.10 T:aes128otrpv2 11.40 11.43 11.45 T:aes128otrsv2 11.42 11.44 11.46 T:aes128otrsv1 14.77 14.80 14.83 T:aes256otrpv1 14.79 14.81 14.84 T:aes256otrpv2 14.93 14.96 14.99 T:aes256otrsv1 14.93 14.97 14.99 T:aes256otrsv2 14.97 15.00 15.03 T:aes128n12clocv1 15.01 15.05 15.08 T:twine80n6t4clocv3 15.21 15.23 15.26 T:aes128n8clocv1 15.74 15.79 15.84 T:twine80n6t4clocv2 17.55 18.64 18.75 T:proest256otrv1 20.30 20.49 20.56 T:ketjesrv1 20.72 20.75 20.80 T:ketjesrv2 27.51 27.56 27.62 T:aeadaes128ocbtaglen96v1 27.49 27.57 27.64 T:aeadaes128ocbtaglen64v1 33.12 33.16 33.23 T:aeadaes192ocbtaglen64v1 33.14 33.20 33.25 T:aeadaes192ocbtaglen96v1 35.52 35.61 35.70 T:ketjejrv1 38.46 38.53 38.80 T:proest128otrv1 38.80 38.84 38.89 T:aeadaes256ocbtaglen96v1 38.82 38.89 38.96 T:aeadaes256ocbtaglen64v1 47.41 47.55 47.64 T:colm127v1 58.90 58.97 59.07 T:ketjejrv2 63.87 64.00 64.13 T:deoxysneq128128v13 71.56 71.64 71.81 T:present80n6t4silcv3 82.32 82.48 82.60 T:deoxyseq128128v13 85.93 86.00 86.11 T:aezv1 95.82 95.99 96.14 T:deoxysneq256128v13 126.54 126.64 126.75 T:led80n6t4silcv3 126.48 127.04 127.36 T:deoxyseq256128v13 348.03 348.49 349.03 T:acorn128 1954.20 1954.96 1955.90 T:led80n6t4silcv2 1953.81 1955.31 1956.69 T:led80n6silcv1 2308.19 2311.85 2315.17 T:present80n6silcv1 2308.62 2313.06 2316.67 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.11? 0.12? 0.13? T:tiaoxinv2 0.11? 0.12? 0.13? T:tiaoxinv1 0.16? 0.17? 0.18? T:aezv5 0.16 0.17 0.17 T:aezv4 0.16? 0.17? 0.18? T:aezv3 -0.30? 0.17? 0.63? T:aeadaes128ocbtaglen128v1 0.18 0.19 0.19 aegis128l 0.19 0.19 0.19 T:aegis128l -0.62? 0.23? 0.67? T:aeadaes256ocbtaglen128v1 0.31 0.32 0.33 T:aes128gcmv1 0.31 0.33 0.34 aes256gcmv1 0.37 0.38 0.38 T:aegis256 0.37 0.38 0.38 aegis256 0.38 0.38 0.38 T:aegis128 -0.07? 0.39? 0.84? T:aeadaes192ocbtaglen128v1 0.46 0.47 0.48 T:aes128otrpv3 0.48 0.49 0.51 T:aes128otrcv3 0.58 0.59 0.59 T:colm0v1 0.58 0.59 0.61 T:aes256otrpv3 0.59 0.61 0.64 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280128v1 0.67 0.67 0.68 T:deoxysii128v141 0.67 0.67 0.68 T:deoxysi128v141 0.67 0.68 0.69 T:deoxysneq128128v1 0.69 0.70 0.70 T:deoxyseq128128v1 0.74 0.76 0.77 T:deoxysi256v141 0.74 0.76 0.78 T:deoxysii256v141 0.75 0.76 0.77 T:deoxysneq256128v1 0.81 0.82 0.84 T:deoxyseq256128v1 1.09 1.10 1.12 T:morus640128v1 1.09 1.10 1.12 T:morus640128v2 1.66 1.71 1.76 T:oceankeyakv2 1.66 1.72 1.79 T:lunarkeyakv2 2.01 2.02 2.04 T:norx6441v3 2.02 2.04 2.05 T:norx6441v2 2.06 2.07 2.09 T:norx6444v3 2.02 2.07 2.10 T:seakeyakv2 2.11 2.11 2.12 T:aes128otrsv3 2.11 2.11 2.12 T:aes128n12t8clocv2 2.11 2.12 2.12 T:aes128n8t8clocv2 2.11 2.12 2.12 T:aes128n8t8silcv2 2.11 2.12 2.13 T:aes128n12t8clocv3 2.11 2.12 2.13 T:aes128n12t8silcv2 2.12 2.13 2.13 T:aes128n12t8silcv3 2.31 2.36 2.41 T:lakekeyakv2 2.34 2.43 2.49 T:lakekeyakv1 2.45 2.47 2.48 T:norx6441v1 2.50 2.53 2.56 T:norx6444v2 2.87 2.87 2.88 T:aes256otrsv3 3.02 3.05 3.08 T:norx6444v1 3.09 3.11 3.13 T:norx6461v3 3.10 3.12 3.14 T:norx6461v2 3.39 3.48 3.56 T:ketjemajorv2 3.63 3.65 3.66 T:norx3241v3 3.65 3.67 3.68 T:norx3241v2 3.66 3.69 3.71 T:norx6461v1 4.30 4.31 4.32 T:aesjambuv1 4.38 4.40 4.42 T:norx3241v1 4.48 4.51 4.53 T:acorn128v3 4.40 4.53 4.85 T:acorn128v2 4.70 4.79 5.12 T:riverkeyakv2 5.00 5.07 5.12 T:ketjeminorv2 5.44 5.47 5.49 T:norx3261v2 5.53 5.56 5.58 T:norx3261v3 6.39 6.43 6.47 T:ascon96v1 6.46 6.49 6.52 T:ascon128av11 6.66 6.69 6.72 ascon128av12 7.49 7.51 7.53 T:norx3261v1 9.57 9.60 9.63 T:ascon128v1 9.56 9.60 9.66 T:ascon128v11 10.04 10.08 10.13 ascon128v12 10.50 10.53 10.56 T:aes128otrpv2 10.50 10.54 10.59 T:aes128otrpv1 11.28 11.30 11.32 T:aes128otrsv2 11.28 11.30 11.33 T:aes128otrsv1 11.29 11.32 11.34 T:aes128n8clocv1 11.30 11.32 11.35 T:aes128n12clocv1 14.02 14.06 14.09 T:aes256otrsv1 14.02 14.06 14.09 T:aes256otrsv2 14.18 14.22 14.26 T:aes256otrpv1 14.18 14.22 14.25 T:aes256otrpv2 14.79 14.83 14.88 T:twine80n6t4clocv3 15.42 15.51 15.62 T:twine80n6t4clocv2 17.43 17.56 17.64 T:proest256otrv1 18.90 19.37 19.45 T:ketjesrv1 20.21 20.25 20.30 T:ketjesrv2 20.32 20.36 20.42 T:aeadaes128ocbtaglen96v1 20.39 20.43 20.49 T:aeadaes128ocbtaglen64v1 22.57 22.73 22.81 T:colm127v1 24.30 24.37 24.47 T:aeadaes192ocbtaglen96v1 24.39 24.44 24.48 T:aeadaes192ocbtaglen64v1 28.34 28.40 28.45 T:aeadaes256ocbtaglen64v1 28.36 28.42 28.47 T:aeadaes256ocbtaglen96v1 32.61 32.79 32.95 T:ketjejrv1 38.01 38.08 38.34 T:proest128otrv1 41.39 41.46 41.55 T:aezv1 54.75 54.83 55.50 T:deoxyseq128128v13 54.96 55.05 55.18 T:deoxysneq128128v13 56.66 57.18 57.69 T:ketjejrv2 71.16 71.21 71.25 T:present80n6t4silcv3 84.04 84.23 85.07 T:deoxyseq256128v13 85.74 85.91 86.06 T:deoxysneq256128v13 125.99 126.11 126.23 T:led80n6t4silcv3 327.42 327.74 328.01 T:acorn128 1302.60 1303.29 1304.66 T:led80n6silcv1 1302.72 1303.30 1304.99 T:led80n6t4silcv2 1539.89 1541.79 1544.27 T:present80n6t4silcv2 1540.95 1543.17 1546.95 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.11? 0.11? 0.13? T:tiaoxinv2 0.11? 0.12? 0.14? T:tiaoxinv1 0.16 0.17 0.17 T:aezv5 0.16 0.17 0.17 T:aezv3 0.16 0.17 0.17 T:aezv4 -0.25? 0.18? 0.62? T:aeadaes128ocbtaglen128v1 0.18 0.19 0.19 T:aegis128l 0.19 0.19 0.19 aegis128l -0.63? 0.23? 1.09? T:aeadaes256ocbtaglen128v1 0.29 0.30 0.32 T:aes128gcmv1 0.31 0.32 0.33 aes256gcmv1 0.37 0.37 0.37 T:aegis128 0.37 0.37 0.38 aegis256 0.37 0.38 0.38 T:aegis256 -0.10? 0.38? 0.83? T:aeadaes192ocbtaglen128v1 0.45 0.47 0.48 T:aes128otrpv3 0.47 0.49 0.50 T:aes128otrcv3 0.56 0.58 0.60 T:colm0v1 0.58 0.59 0.61 T:aes256otrpv3 0.59 0.61 0.64 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280128v2 0.67 0.67 0.68 T:deoxysi128v141 0.67 0.67 0.68 T:deoxysii128v141 0.67 0.68 0.69 T:deoxysneq128128v1 0.69 0.70 0.70 T:deoxyseq128128v1 0.74 0.76 0.77 T:deoxysii256v141 0.75 0.76 0.77 T:deoxysneq256128v1 0.73 0.76 0.78 T:deoxysi256v141 0.80 0.82 0.82 T:deoxyseq256128v1 1.06 1.08 1.09 T:morus640128v2 1.09 1.10 1.12 T:morus640128v1 1.66 1.71 1.76 T:oceankeyakv2 1.66 1.73 1.80 T:lunarkeyakv2 2.05 2.07 2.08 T:norx6444v3 2.04 2.07 2.08 T:seakeyakv2 2.08 2.09 2.11 T:norx6441v3 2.08 2.09 2.11 T:norx6441v2 2.11 2.11 2.12 T:aes128otrsv3 2.11 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.13 T:aes128n12t8silcv3 2.11 2.12 2.15 T:aes128n12t8clocv2 2.11 2.12 2.16 T:aes128n8t8clocv2 2.11 2.12 2.14 T:aes128n12t8silcv2 2.12 2.13 2.14 T:aes128n12t8clocv3 2.33 2.37 2.40 T:lakekeyakv2 2.36 2.43 2.53 T:lakekeyakv1 2.43 2.45 2.47 T:norx6441v1 2.52 2.56 2.59 T:norx6444v2 2.87 2.87 2.88 T:aes256otrsv3 3.00 3.04 3.11 T:norx6444v1 3.06 3.08 3.10 T:norx6461v3 3.09 3.11 3.13 T:norx6461v2 3.48 3.54 3.58 T:ketjemajorv2 3.63 3.66 3.68 T:norx3241v3 3.65 3.67 3.70 T:norx6461v1 3.65 3.68 3.70 T:norx3241v2 4.30 4.31 4.32 T:aesjambuv1 4.39 4.41 4.42 T:norx3241v1 4.71? 4.77? 5.25? T:riverkeyakv2 5.02 5.06 5.16 T:acorn128v2 4.99 5.10 5.20 T:ketjeminorv2 4.85 5.30 5.32 T:acorn128v3 5.44 5.47 5.50 T:norx3261v2 5.53 5.55 5.58 T:norx3261v3 6.37 6.41 6.50 T:ascon128av11 6.46 6.49 6.52 T:ascon96v1 6.66 6.69 6.72 ascon128av12 7.50 7.51 7.53 T:norx3261v1 9.58 9.60 9.64 T:ascon128v11 9.58 9.62 9.65 T:ascon128v1 10.04 10.09 10.13 ascon128v12 10.50 10.53 10.59 T:aes128otrpv1 10.54 10.61 11.05 T:aes128otrpv2 11.29 11.31 11.34 T:aes128otrsv1 11.29 11.31 11.35 T:aes128otrsv2 11.29 11.32 11.36 T:aes128n12clocv1 11.30 11.33 11.36 T:aes128n8clocv1 13.99 14.04 14.08 T:aes256otrsv1 13.99 14.05 14.09 T:aes256otrsv2 14.18 14.21 14.25 T:aes256otrpv1 14.21 14.24 14.29 T:aes256otrpv2 14.77 14.81 14.89 T:twine80n6t4clocv3 15.41 15.47 15.57 T:twine80n6t4clocv2 17.26 17.32 17.54 T:proest256otrv1 18.89 19.37 19.44 T:ketjesrv1 20.20 20.26 20.31 T:ketjesrv2 20.39 20.43 20.51 T:aeadaes128ocbtaglen64v1 20.41 20.44 20.48 T:aeadaes128ocbtaglen96v1 22.62 22.71 22.82 T:colm127v1 24.35 24.40 24.47 T:aeadaes192ocbtaglen64v1 24.35 24.41 24.47 T:aeadaes192ocbtaglen96v1 28.38 28.43 28.48 T:aeadaes256ocbtaglen64v1 28.41 28.47 28.51 T:aeadaes256ocbtaglen96v1 32.50 32.58 32.72 T:ketjejrv1 38.21 38.47 38.57 T:proest128otrv1 41.37 41.45 41.52 T:aezv1 54.80 54.89 55.00 T:deoxyseq128128v13 54.97 55.10 55.24 T:deoxysneq128128v13 56.69 57.02 57.37 T:ketjejrv2 71.13 71.19 71.26 T:present80n6t4silcv3 83.75 83.83 83.94 T:deoxyseq256128v13 85.50 85.91 86.14 T:deoxysneq256128v13 125.96 126.08 126.26 T:led80n6t4silcv3 331.08 331.36 331.67 T:acorn128 1302.39 1303.16 1304.71 T:led80n6t4silcv2 1302.64 1303.38 1305.04 T:led80n6silcv1 1537.81 1540.05 1544.35 T:present80n6silcv1 1539.25 1540.61 1543.02 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.11 0.12 0.12 T:tiaoxinv1 0.10? 0.12? 0.12? T:tiaoxinv2 0.16 0.17 0.17 T:aezv5 0.16 0.17 0.17 T:aezv3 0.16 0.17 0.17 T:aezv4 -0.24? 0.19? 0.61? T:aeadaes128ocbtaglen128v1 0.17? 0.19? 0.19? aegis128l 0.18 0.19 0.19 T:aegis128l -0.19? 0.24? 1.08? T:aeadaes256ocbtaglen128v1 0.29 0.30 0.31 T:aes128gcmv1 0.31 0.32 0.33 aes256gcmv1 0.36 0.37 0.37 T:aegis128 0.37 0.38 0.38 aegis256 0.37 0.38 0.38 T:aegis256 -0.07? 0.38? 0.81? T:aeadaes192ocbtaglen128v1 0.45 0.47 0.48 T:aes128otrpv3 0.48 0.49 0.50 T:aes128otrcv3 0.56 0.57 0.59 T:colm0v1 0.58 0.59 0.61 T:aes256otrpv3 0.59 0.61 0.63 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v2 0.67 0.67 0.68 T:deoxysii128v141 0.67 0.67 0.68 T:deoxysi128v141 0.67 0.68 0.69 T:deoxysneq128128v1 0.69 0.70 0.70 T:deoxyseq128128v1 0.74 0.76 0.77 T:deoxysii256v141 0.75 0.76 0.77 T:deoxysneq256128v1 0.74 0.76 0.78 T:deoxysi256v141 0.81 0.82 0.83 T:deoxyseq256128v1 1.07 1.08 1.10 T:morus640128v2 1.09 1.10 1.12 T:morus640128v1 1.67 1.72 1.75 T:oceankeyakv2 1.66 1.73 1.80 T:lunarkeyakv2 2.05 2.07 2.09 T:norx6444v3 2.05 2.07 2.09 T:seakeyakv2 2.07 2.09 2.11 T:norx6441v3 2.08 2.09 2.11 T:norx6441v2 2.11 2.12 2.12 T:aes128otrsv3 2.11 2.12 2.13 T:aes128n12t8silcv3 2.11 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.13 2.14 T:aes128n12t8clocv3 2.13 2.13 2.14 T:aes128n8t8clocv2 2.13 2.14 2.15 T:aes128n12t8clocv2 2.32 2.36 2.39 T:lakekeyakv2 2.36 2.42 2.48 T:lakekeyakv1 2.43 2.46 2.48 T:norx6441v1 2.51 2.54 2.58 T:norx6444v2 2.87 2.87 2.87 T:aes256otrsv3 3.00 3.04 3.08 T:norx6444v1 3.06 3.08 3.10 T:norx6461v3 3.10 3.12 3.14 T:norx6461v2 3.48 3.54 3.59 T:ketjemajorv2 3.63 3.66 3.68 T:norx3241v3 3.64 3.67 3.69 T:norx6461v1 3.65 3.67 3.70 T:norx3241v2 4.30 4.31 4.32 T:aesjambuv1 4.39 4.41 4.43 T:norx3241v1 4.70 4.74 4.79 T:riverkeyakv2 4.56 5.02 5.06 T:acorn128v2 5.01 5.11 5.22 T:ketjeminorv2 4.78 5.28 5.30 T:acorn128v3 5.45 5.47 5.49 T:norx3261v2 5.53 5.55 5.58 T:norx3261v3 6.39 6.48 6.51 T:ascon128av11 6.46 6.50 6.52 T:ascon96v1 6.66 6.69 6.72 ascon128av12 7.49 7.51 7.53 T:norx3261v1 9.57 9.61 9.64 T:ascon128v1 9.59 9.62 9.64 T:ascon128v11 10.03 10.07 10.11 ascon128v12 10.47 10.53 10.58 T:aes128otrpv1 10.47 10.56 11.08 T:aes128otrpv2 11.27 11.30 11.33 T:aes128otrsv1 11.27 11.31 11.34 T:aes128otrsv2 11.29 11.31 11.34 T:aes128n12clocv1 11.30 11.34 11.37 T:aes128n8clocv1 14.01 14.07 14.11 T:aes256otrsv2 14.01 14.07 14.11 T:aes256otrsv1 14.19 14.22 14.26 T:aes256otrpv1 14.21 14.25 14.30 T:aes256otrpv2 14.78 14.87 14.91 T:twine80n6t4clocv3 15.41 15.46 15.54 T:twine80n6t4clocv2 17.35 17.62 18.96 T:proest256otrv1 18.88 19.36 19.43 T:ketjesrv1 20.14 20.22 20.28 T:ketjesrv2 20.38 20.43 20.53 T:aeadaes128ocbtaglen64v1 20.38 20.43 20.50 T:aeadaes128ocbtaglen96v1 22.59 22.70 22.81 T:colm127v1 24.33 24.36 24.41 T:aeadaes192ocbtaglen64v1 24.41 24.45 24.50 T:aeadaes192ocbtaglen96v1 28.36 28.43 28.49 T:aeadaes256ocbtaglen96v1 28.39 28.43 28.48 T:aeadaes256ocbtaglen64v1 32.47 32.62 32.98 T:ketjejrv1 38.18 38.45 38.53 T:proest128otrv1 41.39 41.46 41.53 T:aezv1 54.72 54.79 54.99 T:deoxyseq128128v13 54.91 55.04 55.15 T:deoxysneq128128v13 56.67 56.80 57.40 T:ketjejrv2 71.13 71.20 71.25 T:present80n6t4silcv3 84.05 84.78 85.66 T:deoxyseq256128v13 85.57 86.16 86.35 T:deoxysneq256128v13 125.98 126.09 126.21 T:led80n6t4silcv3 330.98 331.32 331.70 T:acorn128 1302.08 1302.86 1303.94 T:led80n6silcv1 1302.39 1302.96 1304.96 T:led80n6t4silcv2 1538.12 1540.34 1543.14 T:present80n6silcv1 1538.84 1540.98 1544.59 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.20 0.20 0.20 T:tiaoxinv1 0.20 0.20 0.21 T:tiaoxinv2 0.24 0.24 0.24 aegis128l 0.24 0.24 0.25 T:aegis128l 0.30 0.30 0.31 T:aezv3 0.30 0.30 0.31 T:aezv4 0.31? 0.32? 0.60? T:aeadaes128ocbtaglen128v1 0.32 0.32 0.33 T:aezv5 0.39? 0.40? 0.69? T:aeadaes256ocbtaglen128v1 0.41 0.42 0.42 T:aegis128 0.42 0.42 0.42 T:aegis256 0.42 0.42 0.43 aegis256 0.48? 0.48? 1.04? T:aeadaes192ocbtaglen128v1 0.53 0.53 0.54 T:aes128otrpv3 0.59 0.59 0.60 T:aes128otrcv3 0.67 0.68 0.68 T:aes256otrpv3 0.74 0.74 0.75 T:aes128gcmv1 0.75 0.76 0.77 T:aes256otrcv3 0.76 0.76 0.77 T:deoxysi128v141 0.76 0.76 0.77 T:deoxysneq128128v1 0.81 0.81 0.82 T:morus1280128v1 0.81 0.81 0.82 T:morus1280256v1 0.81 0.82 0.82 aes256gcmv1 0.82 0.83 0.83 T:morus1280128v2 0.82 0.83 0.83 T:morus1280256v2 0.87 0.87 0.88 T:deoxysneq256128v1 0.89 0.89 0.90 T:deoxysi256v141 1.05 1.05 1.06 T:colm0v1 1.12 1.12 1.12 T:deoxysii128v141 1.15 1.15 1.16 T:deoxyseq128128v1 1.27 1.28 1.29 T:morus640128v1 1.27 1.29 1.29 T:morus640128v2 1.29 1.29 1.30 T:deoxysii256v141 1.34 1.35 1.36 T:deoxyseq256128v1 1.35 1.35 1.36 T:aes128otrsv3 1.81 1.82 1.84 T:aes256otrsv3 2.12 2.13 2.14 T:norx6444v3 2.18 2.18 2.19 T:aes128n8t8clocv2 2.18 2.19 2.20 T:aes128n12t8clocv3 2.18 2.19 2.20 T:aes128n12t8clocv2 2.19 2.19 2.21 T:aes128n12t8silcv2 2.19 2.20 2.21 T:aes128n8t8silcv2 2.20 2.21 2.21 T:aes128n12t8silcv3 2.35 2.36 2.37 T:norx6441v2 2.36 2.37 2.38 T:norx6441v3 2.73 2.75 2.76 T:norx6441v1 2.84 2.87 2.92 T:lakekeyakv2 3.03 3.06 3.08 T:lakekeyakv1 3.06 3.08 3.11 T:seakeyakv2 3.58 3.59 3.60 T:norx6461v3 3.58 3.59 3.60 T:norx6461v2 3.83 3.84 3.87 T:norx6444v2 3.90 3.91 3.92 T:norx3241v3 3.94 3.95 3.97 T:norx3241v2 4.03 4.05 4.07 T:oceankeyakv2 4.14 4.15 4.16 T:norx6461v1 4.40 4.40 4.41 T:aesjambuv1 4.57 4.58 4.60 T:norx6444v1 4.62 4.63 4.65 T:norx3241v1 5.26 5.27 5.32 T:riverkeyakv2 5.32 5.34 5.36 T:ketjemajorv2 5.63 5.77 5.79 T:acorn128v3 5.63 5.93 6.02 T:acorn128v2 5.94 5.95 5.96 T:norx3261v2 5.95 5.96 5.98 T:norx3261v3 6.38 6.49 6.93 T:ketjeminorv2 6.72 6.73 6.76 T:ascon96v1 6.71 6.74 6.76 T:ascon128av11 6.84 6.89 6.92 ascon128av12 7.01 7.02 7.06 T:lunarkeyakv2 7.90 7.92 7.93 T:norx3261v1 9.88 9.90 9.92 T:ascon128v1 9.89 9.91 9.93 T:ascon128v11 10.15 10.20 10.25 ascon128v12 11.14 11.16 11.18 T:aes128otrpv2 11.17 11.18 11.20 T:aes128otrpv1 11.49 11.50 11.52 T:aes128otrsv1 11.50 11.51 11.53 T:aes128otrsv2 14.95 14.97 14.99 T:aes256otrpv1 14.98 15.00 15.01 T:aes256otrpv2 15.04 15.06 15.07 T:aes256otrsv1 15.04 15.07 15.10 T:aes256otrsv2 15.24 15.26 15.29 T:twine80n6t4clocv3 15.94 15.96 16.00 T:twine80n6t4clocv2 16.22 16.24 16.26 T:aes128n12clocv1 16.23 16.25 16.26 T:aes128n8clocv1 18.87 18.93 19.07 T:proest256otrv1 20.51 20.71 20.77 T:ketjesrv1 21.18 21.23 21.28 T:aeadaes128ocbtaglen96v1 21.23 21.27 21.31 T:aeadaes128ocbtaglen64v1 22.19 22.24 22.28 T:ketjesrv2 25.21 25.29 25.34 T:aeadaes192ocbtaglen64v1 25.27 25.29 25.34 T:aeadaes192ocbtaglen96v1 29.40 29.43 29.47 T:aeadaes256ocbtaglen64v1 29.41 29.47 29.51 T:aeadaes256ocbtaglen96v1 34.74 34.80 34.92 T:colm127v1 36.00 36.05 36.12 T:ketjejrv1 40.54 40.72 40.78 T:proest128otrv1 55.18 55.26 55.76 T:deoxysneq128128v13 59.85 59.97 60.20 T:ketjejrv2 72.35 72.42 72.57 T:present80n6t4silcv3 83.07 83.27 83.50 T:deoxyseq128128v13 84.45 84.52 84.57 T:aezv1 86.09 86.37 86.82 T:deoxysneq256128v13 127.67 127.74 127.80 T:led80n6t4silcv3 127.41 129.02 129.16 T:deoxyseq256128v13 363.31 363.47 363.67 T:acorn128 1964.68 1965.93 1966.99 T:led80n6t4silcv2 1966.09 1967.36 1969.88 T:led80n6silcv1 2322.74 2325.56 2328.56 T:present80n6silcv1 2323.32 2326.46 2330.07 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.24 0.24 0.25 T:aegis128l 0.24 0.24 0.25 aegis128l 0.30 0.30 0.31 T:aezv3 0.30 0.31 0.31 T:aezv4 0.31? 0.31? 0.58? T:aeadaes128ocbtaglen128v1 0.32 0.32 0.32 T:aezv5 0.32 0.32 0.32 T:tiaoxinv2 0.32 0.32 0.33 T:tiaoxinv1 0.40? 0.40? 0.68? T:aeadaes256ocbtaglen128v1 0.41 0.41 0.42 T:aegis128 0.42 0.42 0.42 T:aegis256 0.44 0.44 0.44 aegis256 0.48? 0.48? 0.76? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrpv3 0.60 0.61 0.62 T:aes128otrcv3 0.61 0.61 0.62 T:aes128gcmv1 0.69 0.70 0.71 T:aes256otrpv3 0.69 0.70 0.70 aes256gcmv1 0.78 0.79 0.80 T:aes256otrcv3 0.81 0.82 0.82 T:morus1280256v1 0.82 0.82 0.82 T:morus1280128v1 0.83 0.83 0.83 T:morus1280256v2 0.82 0.83 0.83 T:morus1280128v2 0.87 0.88 0.88 T:deoxysi128v141 0.88 0.88 0.89 T:deoxysneq128128v1 0.97 0.97 0.98 T:deoxysneq256128v1 0.98 0.99 1.00 T:deoxysi256v141 1.06 1.06 1.07 T:colm0v1 1.13 1.13 1.14 T:deoxysii128v141 1.25 1.26 1.27 T:morus640128v1 1.25 1.26 1.29 T:morus640128v2 1.34 1.35 1.35 T:deoxyseq128128v1 1.34 1.35 1.36 T:deoxysii256v141 1.36 1.37 1.37 T:aes128otrsv3 1.43 1.43 1.44 T:deoxyseq256128v1 1.83 1.83 1.84 T:aes256otrsv3 2.12 2.13 2.14 T:norx6444v3 2.14 2.14 2.14 T:aes128n12t8clocv3 2.14 2.14 2.14 T:aes128n12t8clocv2 2.14 2.14 2.16 T:aes128n8t8clocv2 2.14 2.15 2.15 T:aes128n12t8silcv2 2.14 2.15 2.19 T:aes128n8t8silcv2 2.15 2.15 2.16 T:aes128n12t8silcv3 2.34 2.35 2.36 T:norx6441v3 2.37 2.38 2.39 T:norx6441v2 2.70 2.71 2.73 T:norx6441v1 2.89 2.91 2.96 T:lakekeyakv2 3.05 3.07 3.10 T:lakekeyakv1 3.09 3.10 3.11 T:seakeyakv2 3.55 3.56 3.57 T:norx6461v3 3.57 3.58 3.59 T:norx6461v2 3.86 3.87 3.90 T:norx6444v2 3.89 3.90 3.92 T:norx3241v3 3.90 3.91 3.92 T:norx3241v2 4.07 4.08 4.11 T:oceankeyakv2 4.14 4.15 4.16 T:norx6461v1 4.53 4.53 4.57 T:aesjambuv1 4.58 4.59 4.62 T:norx6444v1 4.59 4.61 4.62 T:norx3241v1 5.24 5.27 5.30 T:ketjemajorv2 5.36 5.38 5.43 T:riverkeyakv2 5.46 5.55 5.77 T:acorn128v3 5.50 5.68 5.70 T:acorn128v2 5.93 5.94 5.96 T:norx3261v2 5.97 5.99 6.01 T:norx3261v3 6.43 6.49 7.09 T:ketjeminorv2 6.67 6.70 6.72 T:ascon128av11 6.72 6.73 6.75 T:ascon96v1 6.84 6.86 6.88 ascon128av12 7.02 7.04 7.07 T:lunarkeyakv2 7.85 7.86 7.86 T:norx3261v1 9.84 9.87 9.89 T:ascon128v1 9.85 9.87 9.89 T:ascon128v11 10.17 10.19 10.22 ascon128v12 11.35 11.37 11.39 T:aes128otrpv1 11.37 11.38 11.41 T:aes128otrpv2 11.71 11.73 11.76 T:aes128otrsv2 11.72 11.73 11.75 T:aes128otrsv1 15.13 15.15 15.18 T:aes128n12clocv1 15.19 15.21 15.24 T:aes256otrpv1 15.21 15.23 15.26 T:aes256otrpv2 15.23 15.25 15.30 T:twine80n6t4clocv3 15.32 15.35 15.37 T:aes256otrsv1 15.33 15.35 15.38 T:aes256otrsv2 15.35 15.37 15.40 T:aes128n8clocv1 15.94 15.98 16.01 T:twine80n6t4clocv2 19.12 20.10 20.26 T:proest256otrv1 20.90 21.17 21.22 T:ketjesrv1 21.46 21.51 21.59 T:ketjesrv2 28.22 28.29 28.33 T:aeadaes128ocbtaglen96v1 28.25 28.30 28.35 T:aeadaes128ocbtaglen64v1 33.89 33.94 33.98 T:aeadaes192ocbtaglen64v1 33.92 33.95 34.00 T:aeadaes192ocbtaglen96v1 36.13 36.23 36.41 T:ketjejrv1 39.76 39.80 39.86 T:aeadaes256ocbtaglen64v1 39.79 39.83 39.88 T:aeadaes256ocbtaglen96v1 40.17 40.25 40.51 T:proest128otrv1 48.52 48.58 48.63 T:colm127v1 59.61 60.02 60.21 T:ketjejrv2 64.09 64.17 64.39 T:deoxysneq128128v13 72.31 72.35 72.52 T:present80n6t4silcv3 83.01 83.10 84.55 T:deoxyseq128128v13 84.52 84.59 84.67 T:aezv1 96.02 96.33 96.70 T:deoxysneq256128v13 127.60 127.67 127.76 T:led80n6t4silcv3 128.29 129.05 129.44 T:deoxyseq256128v13 389.02 389.48 390.25 T:acorn128 1963.80 1964.71 1966.14 T:led80n6t4silcv2 1964.37 1965.36 1966.39 T:led80n6silcv1 2322.81 2324.64 2326.98 T:present80n6t4silcv2 2322.92 2325.95 2328.31 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17 0.17 0.18 T:aezv3 0.17 0.17 0.18 T:aezv4 0.17 0.17 0.18 T:aezv5 0.24 0.24 0.24 T:aegis128l 0.25 0.25 0.25 aegis128l 0.31? 0.31? 0.58? T:aeadaes128ocbtaglen128v1 0.32 0.32 0.33 T:tiaoxinv1 0.32 0.32 0.33 T:tiaoxinv2 0.39? 0.40? 0.91? T:aeadaes256ocbtaglen128v1 0.42 0.42 0.42 T:aegis256 0.41 0.42 0.42 T:aegis128 0.44 0.45 0.46 aegis256 0.48? 0.48? 1.00? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrpv3 0.60 0.60 0.61 T:aes128otrcv3 0.61 0.61 0.62 T:aes128gcmv1 0.69 0.70 0.70 T:aes256otrpv3 0.70 0.70 0.71 aes256gcmv1 0.78 0.79 0.79 T:aes256otrcv3 0.81 0.82 0.82 T:morus1280256v1 0.81 0.82 0.82 T:morus1280128v1 0.82 0.83 0.83 T:morus1280128v2 0.83 0.83 0.83 T:morus1280256v2 0.87 0.87 0.89 T:deoxysneq128128v1 0.87 0.88 0.88 T:deoxysi128v141 0.97 0.97 0.98 T:deoxysneq256128v1 0.98 0.98 1.00 T:deoxysi256v141 1.07 1.07 1.10 T:colm0v1 1.13 1.14 1.14 T:deoxysii128v141 1.26 1.26 1.28 T:morus640128v2 1.26 1.26 1.27 T:morus640128v1 1.34 1.35 1.35 T:deoxyseq128128v1 1.35 1.35 1.36 T:deoxysii256v141 1.36 1.37 1.37 T:aes128otrsv3 1.42 1.43 1.44 T:deoxyseq256128v1 1.83 1.83 1.84 T:aes256otrsv3 2.12 2.13 2.14 T:norx6444v3 2.13 2.13 2.18 T:aes128n8t8clocv2 2.13 2.13 2.20 T:aes128n12t8clocv2 2.13 2.13 2.21 T:aes128n12t8clocv3 2.14 2.14 2.20 T:aes128n8t8silcv2 2.13 2.14 2.19 T:aes128n12t8silcv3 2.14 2.14 2.19 T:aes128n12t8silcv2 2.35 2.36 2.37 T:norx6441v3 2.37 2.38 2.39 T:norx6441v2 2.70 2.71 2.72 T:norx6441v1 2.90 2.93 2.96 T:lakekeyakv2 3.05 3.06 3.09 T:lakekeyakv1 3.10 3.11 3.13 T:seakeyakv2 3.55 3.56 3.57 T:norx6461v3 3.57 3.58 3.59 T:norx6461v2 3.87 3.88 3.91 T:norx6444v2 3.90 3.90 3.91 T:norx3241v3 3.90 3.91 3.92 T:norx3241v2 4.06 4.08 4.11 T:oceankeyakv2 4.14 4.15 4.16 T:norx6461v1 4.52 4.53 4.57 T:aesjambuv1 4.59 4.60 4.61 T:norx6444v1 4.59 4.61 4.62 T:norx3241v1 5.28 5.30 5.33 T:ketjemajorv2 5.35 5.37 5.40 T:riverkeyakv2 5.51 5.69 5.81 T:acorn128v2 5.77 5.79 5.84 T:acorn128v3 5.93 5.95 5.97 T:norx3261v2 5.97 5.99 6.00 T:norx3261v3 6.39 6.42 6.47 T:ketjeminorv2 6.66 6.69 6.71 T:ascon128av11 6.72 6.73 6.75 T:ascon96v1 6.83 6.85 6.87 ascon128av12 7.04 7.06 7.08 T:lunarkeyakv2 7.85 7.86 7.86 T:norx3261v1 9.84 9.86 9.88 T:ascon128v1 9.85 9.87 9.89 T:ascon128v11 10.16 10.19 10.22 ascon128v12 11.35 11.37 11.39 T:aes128otrpv1 11.38 11.40 11.43 T:aes128otrpv2 11.73 11.75 11.77 T:aes128otrsv2 11.73 11.75 11.76 T:aes128otrsv1 15.14 15.16 15.18 T:aes128n12clocv1 15.22 15.24 15.26 T:aes256otrpv1 15.22 15.25 15.27 T:aes256otrpv2 15.24 15.26 15.29 T:twine80n6t4clocv3 15.34 15.36 15.39 T:aes256otrsv2 15.34 15.37 15.38 T:aes256otrsv1 15.35 15.37 15.39 T:aes128n8clocv1 15.93 15.97 16.01 T:twine80n6t4clocv2 19.00 19.03 19.38 T:proest256otrv1 20.94 21.08 21.15 T:ketjesrv1 21.47 21.49 21.52 T:ketjesrv2 28.21 28.26 28.30 T:aeadaes128ocbtaglen96v1 28.24 28.27 28.30 T:aeadaes128ocbtaglen64v1 33.93 33.96 34.00 T:aeadaes192ocbtaglen64v1 33.93 33.97 34.00 T:aeadaes192ocbtaglen96v1 36.22 36.31 36.40 T:ketjejrv1 39.77 39.82 39.87 T:aeadaes256ocbtaglen96v1 39.78 39.83 39.86 T:aeadaes256ocbtaglen64v1 40.19 40.24 40.40 T:proest128otrv1 48.59 48.64 48.69 T:colm127v1 59.73 59.97 60.12 T:ketjejrv2 64.17 64.30 64.43 T:deoxysneq128128v13 72.30 72.35 72.42 T:present80n6t4silcv3 83.14 83.21 83.39 T:deoxyseq128128v13 84.47 84.58 84.67 T:aezv1 95.95 96.43 96.71 T:deoxysneq256128v13 127.61 127.65 127.73 T:led80n6t4silcv3 128.03 128.90 129.29 T:deoxyseq256128v13 388.84 389.14 389.53 T:acorn128 1963.87 1964.96 1966.29 T:led80n6t4silcv2 1964.59 1965.66 1967.06 T:led80n6silcv1 2321.46 2323.63 2327.17 T:present80n6t4silcv2 2321.90 2324.64 2327.30 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.90 0.93 0.97 T:aegis128 0.91 0.94 0.98 T:aegis128l 0.93? 0.96? 1.04? aegis128l 1.04? 1.06? 1.16? T:aezv5 1.08? 1.16? 1.26? T:aezv3 1.12 1.16 1.22 T:aezv4 1.18? 1.22? 1.35? T:tiaoxinv1 1.17? 1.26? 1.43? T:tiaoxinv2 1.24 1.29 1.32 T:aegis256 1.27 1.31 1.34 aegis256 2.05 2.11 2.17 T:aes128otrpv3 2.28? 2.43? 2.58? T:aes128otrsv3 2.66 2.74 2.82 T:colm0v1 2.68? 2.82? 3.08? T:aes128otrcv3 2.82 2.86 2.95 T:aes128n12t8clocv3 2.83 2.87 2.91 T:aes128n12t8clocv2 2.79 2.87 2.94 T:aes128n8t8clocv2 2.84 2.90 2.98 T:deoxysneq128128v1 2.86 2.96 3.07 T:aes256otrpv3 2.94 2.99 3.10 T:aes128n12t8silcv3 2.97 3.01 3.08 T:aes128n8t8silcv2 2.96 3.01 3.10 T:aes128n12t8silcv2 3.01 3.06 3.13 T:deoxysi128v141 2.94? 3.09? 10.27? T:aeadaes192ocbtaglen128v1 3.39 3.44 3.54 T:deoxysneq256128v1 3.55 3.57 3.60 T:aes256otrsv3 3.19? 3.59? 10.44? T:aeadaes128ocbtaglen128v1 3.71 3.77 3.83 T:deoxysi256v141 3.88 3.93 3.99 T:deoxyseq128128v1 3.88 3.96 4.08 T:aes256otrcv3 3.97? 4.12? 10.95? T:aeadaes256ocbtaglen128v1 4.09 4.15 4.20 T:morus1280128v1 4.15 4.20 4.29 T:morus1280256v1 4.21 4.26 4.35 T:deoxysii128v141 4.21 4.30 4.40 T:morus640128v1 4.41 4.45 4.53 T:morus1280128v2 4.40 4.47 4.56 T:morus1280256v2 4.43 4.53 4.60 T:morus640128v2 4.71 4.79 4.88 aes256gcmv1 4.78 4.88 4.98 T:deoxyseq256128v1 4.98 5.08 5.19 T:aes128gcmv1 5.10 5.17 5.25 T:aesjambuv1 6.38 6.48 6.65 T:deoxysii256v141 7.52 7.60 7.69 T:norx6441v2 7.55 7.63 7.71 T:norx6441v3 7.56 7.64 7.72 T:norx6441v1 9.41 9.49 9.59 T:norx3241v2 9.45 9.53 9.70 T:norx3241v1 9.46 9.55 9.63 T:norx3241v3 9.80 9.89 10.52 T:lakekeyakv1 9.82 9.93 10.03 T:ascon96v1 9.80 9.97 10.07 T:ascon128av11 10.09 10.22 10.36 ascon128av12 11.38 11.51 11.59 T:norx6461v2 11.48 11.57 11.65 T:norx6461v3 11.57 11.67 11.79 T:norx6461v1 11.93 11.97 13.06 T:riverkeyakv2 12.27 12.51 12.86 T:lakekeyakv2 12.81 12.93 13.06 T:ascon128v1 12.88 12.99 13.10 T:ascon128v11 13.13 13.26 13.45 ascon128v12 13.65 13.77 13.90 T:norx6444v3 14.33 14.41 14.59 T:norx3261v2 14.44 14.51 14.64 T:norx3261v3 16.12 16.22 16.30 T:norx3261v1 18.45 18.54 18.69 T:aes128otrsv1 18.50 18.59 18.78 T:aes128otrsv2 18.68 18.76 18.91 T:aes128otrpv1 18.70 18.79 19.04 T:aes128otrpv2 18.91 18.96 19.09 T:aes128n8clocv1 18.86 18.98 19.11 T:aes128n12clocv1 19.51 19.89 20.34 T:twine80n6t4clocv2 19.96 20.04 20.16 T:twine80n6t4clocv3 22.19 22.52 23.22 T:ketjeminorv2 23.30 23.61 23.83 T:acorn128v3 24.05 24.14 24.38 T:aes256otrsv2 24.06 24.19 24.41 T:aes256otrsv1 23.64 24.38 26.18 T:acorn128v2 24.60 24.66 24.80 T:aes256otrpv1 24.66 24.77 25.11 T:aes256otrpv2 27.57 27.74 28.40 T:norx6444v2 28.05 28.15 28.70 T:seakeyakv2 32.71 33.09 33.70 T:ketjemajorv2 33.31 33.40 33.70 T:norx6444v1 33.98 34.09 34.37 T:aeadaes128ocbtaglen96v1 34.06 34.24 34.70 T:aeadaes128ocbtaglen64v1 33.84 34.30 34.71 T:ketjesrv1 39.52 39.68 39.98 T:aeadaes192ocbtaglen64v1 39.58 39.70 39.98 T:aeadaes192ocbtaglen96v1 39.44 39.77 40.24 T:ketjesrv2 43.72 43.88 44.29 T:oceankeyakv2 46.52 46.76 47.13 T:aeadaes256ocbtaglen96v1 46.58 46.83 47.24 T:aeadaes256ocbtaglen64v1 48.54 49.00 49.31 T:ketjejrv1 49.61 49.83 50.80 T:colm127v1 54.61 54.92 55.57 T:proest256otrv1 62.01 62.26 62.54 T:deoxysneq128128v13 78.51 78.90 79.39 T:proest128otrv1 79.85 80.27 80.92 T:ketjejrv2 88.51 88.66 88.85 T:present80n6t4silcv3 97.20 97.69 98.23 T:aezv1 97.67 98.10 98.59 T:deoxysneq256128v13 103.50 103.93 104.56 T:deoxyseq128128v13 113.02 113.71 114.32 T:lunarkeyakv2 150.78 151.15 151.53 T:led80n6t4silcv3 158.26 158.69 160.08 T:deoxyseq256128v13 1306.94 1308.03 1309.27 T:acorn128 2198.45 2199.51 2200.43 T:led80n6t4silcv2 2199.69 2200.53 2201.60 T:led80n6silcv1 2597.18 2600.46 2603.28 T:present80n6t4silcv2 2600.58 2604.60 2611.06 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.95 0.97 1.00 T:aegis128l 1.01? 1.05? 1.13? aegis128l 1.05 1.10 1.15 T:aezv5 1.10 1.13 1.18 T:aegis128 1.08? 1.17? 1.28? T:aezv3 1.13 1.17 1.21 T:aezv4 1.27 1.29 1.33 T:aegis256 1.27? 1.32? 1.45? T:tiaoxinv2 1.25? 1.33? 1.46? T:tiaoxinv1 1.35 1.38 1.42 aegis256 2.04? 2.12? 2.46? T:aes128otrpv3 2.37? 2.52? 2.65? T:aes128otrsv3 2.47 2.52 2.63 T:aes128n12t8clocv2 2.42 2.54 2.67 T:aes128n8t8clocv2 2.46 2.54 2.64 T:aes128n12t8clocv3 2.62 2.65 2.82 T:aes128n12t8silcv3 2.61 2.68 2.88 T:aes128n8t8silcv2 2.64 2.73 2.88 T:aes128n12t8silcv2 2.74 2.80 2.89 T:colm0v1 2.71? 2.81? 10.17? T:aeadaes192ocbtaglen128v1 2.90 3.01 3.12 T:aes128otrcv3 2.93 3.02 3.09 T:aes256otrpv3 3.21? 3.38? 10.27? T:aeadaes128ocbtaglen128v1 3.47 3.50 3.58 T:aes256otrsv3 3.94 4.03 4.12 T:aes256otrcv3 4.04? 4.21? 17.56? T:aeadaes256ocbtaglen128v1 4.19 4.29 4.38 T:morus640128v1 4.27 4.32 4.38 T:morus1280128v1 4.29 4.34 4.43 T:morus1280256v1 4.31 4.37 4.43 T:deoxysneq128128v1 4.50 4.55 4.61 T:deoxysneq256128v1 4.48 4.56 4.68 T:morus640128v2 4.52 4.57 4.65 T:morus1280256v2 4.55 4.60 4.65 T:morus1280128v2 4.71 4.76 4.82 T:deoxysii128v141 4.76 4.79 4.84 T:deoxysi128v141 5.16 5.22 5.29 aes256gcmv1 5.25 5.31 5.39 T:deoxysi256v141 5.27 5.44 5.59 T:aes128gcmv1 5.42 5.47 5.51 T:aesjambuv1 5.63 5.66 5.70 T:deoxyseq128128v1 5.65 5.72 5.83 T:deoxyseq256128v1 7.73 7.79 7.89 T:norx6441v1 7.71 7.85 8.00 T:deoxysii256v141 7.78 7.89 7.98 T:norx6441v2 7.88 7.97 8.06 T:norx6441v3 9.64 9.73 9.83 T:norx3241v1 9.64 9.75 9.86 T:norx3241v2 9.71 9.82 9.92 T:norx3241v3 9.83 9.91 10.05 T:ascon96v1 9.85 9.94 10.07 T:ascon128av11 10.04 10.14 10.30 ascon128av12 9.99 10.22 10.67 T:lakekeyakv1 11.69 11.80 11.89 T:norx6461v1 11.68 11.80 11.90 T:norx6461v2 11.76 11.86 11.96 T:norx6461v3 12.00 12.03 12.41 T:riverkeyakv2 12.19 12.36 12.75 T:lakekeyakv2 12.80 12.89 13.09 T:ascon128v11 12.80 12.92 13.09 T:ascon128v1 13.13 13.24 13.37 ascon128v12 13.80 13.91 14.03 T:norx6444v3 14.57 14.66 14.83 T:norx3261v2 14.73 14.84 14.97 T:norx3261v3 16.39 16.47 16.52 T:norx3261v1 18.38 18.50 18.72 T:aes128n12clocv1 18.43 18.54 18.67 T:aes128n8clocv1 18.79 18.85 18.95 T:aes128otrsv1 18.86 18.94 19.08 T:aes128otrsv2 18.98 19.08 19.15 T:aes128otrpv1 18.99 19.09 19.22 T:aes128otrpv2 19.41 19.49 19.80 T:twine80n6t4clocv2 20.04 20.13 20.65 T:twine80n6t4clocv3 22.09 22.82 23.55 T:ketjeminorv2 22.77 23.06 23.40 T:acorn128v3 23.64? 24.11? 26.76? T:acorn128v2 24.27 24.39 24.60 T:aes256otrsv1 24.34 24.48 24.74 T:aes256otrsv2 24.94 25.05 25.14 T:aes256otrpv1 24.91 25.05 25.18 T:aes256otrpv2 27.79 28.19 28.65 T:norx6444v2 28.15 28.28 28.66 T:seakeyakv2 32.80 33.32 33.77 T:ketjemajorv2 33.43 33.70 34.11 T:norx6444v1 34.39 34.75 35.17 T:ketjesrv1 38.96 39.29 39.70 T:ketjesrv2 43.80 44.06 45.67 T:oceankeyakv2 44.42 44.57 44.84 T:aeadaes128ocbtaglen96v1 44.44 44.65 44.98 T:aeadaes128ocbtaglen64v1 48.46 48.73 49.10 T:ketjejrv1 51.80 51.93 52.31 T:aeadaes192ocbtaglen64v1 51.91 52.11 52.40 T:aeadaes192ocbtaglen96v1 56.00 57.02 59.38 T:proest256otrv1 61.15 61.38 61.69 T:aeadaes256ocbtaglen64v1 61.22 61.42 61.75 T:aeadaes256ocbtaglen96v1 63.60 63.95 64.87 T:colm127v1 71.04 71.38 71.85 T:deoxysneq128128v13 78.31 78.86 79.90 T:proest128otrv1 79.65 80.15 80.56 T:ketjejrv2 88.57 88.74 89.20 T:present80n6t4silcv3 99.63 99.98 100.43 T:aezv1 103.25 103.48 104.23 T:deoxyseq128128v13 106.96 107.57 108.03 T:deoxysneq256128v13 113.51 114.12 114.60 T:lunarkeyakv2 150.66 151.09 151.67 T:led80n6t4silcv3 159.27 159.74 160.15 T:deoxyseq256128v13 1331.56 1333.21 1335.04 T:acorn128 2198.17 2199.16 2200.21 T:led80n6t4silcv2 2198.80 2199.84 2202.19 T:led80n6silcv1 2599.01 2601.49 2608.42 T:present80n6t4silcv2 2601.70 2604.66 2617.77 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.62? 0.68? 0.74? T:aezv5 0.69? 0.74? 0.82? T:aezv4 0.74? 0.81? 0.96? T:aezv3 0.95 0.97 0.98 T:aegis128l 1.02 1.05 1.09 aegis128l 1.09 1.11 1.15 T:aegis128 1.27 1.28 1.30 T:aegis256 1.25? 1.32? 1.41? T:tiaoxinv2 1.27? 1.34? 1.48? T:tiaoxinv1 1.37 1.40 1.44 aegis256 2.08 2.12 2.18 T:aes128otrpv3 2.34 2.39 2.56 T:aes128otrsv3 2.36? 2.40? 2.74? T:aes128n8t8clocv2 2.34? 2.41? 2.67? T:aes128n12t8clocv2 2.38? 2.44? 3.17? T:aes128n12t8clocv3 2.50 2.54 2.69 T:aes128n12t8silcv3 2.51 2.54 2.60 T:aes128n8t8silcv2 2.51? 2.57? 3.04? T:aes128n12t8silcv2 2.75? 2.81? 9.26? T:aeadaes192ocbtaglen128v1 2.77 2.81 2.93 T:colm0v1 2.91 3.00 3.10 T:aes128otrcv3 2.92 3.03 3.07 T:aes256otrpv3 3.17? 3.30? 9.72? T:aeadaes128ocbtaglen128v1 3.48 3.51 3.55 T:aes256otrsv3 3.91 4.00 4.12 T:aes256otrcv3 4.00? 4.12? 16.88? T:aeadaes256ocbtaglen128v1 4.18 4.24 4.33 T:morus640128v1 4.20 4.26 4.33 T:deoxysneq128128v1 4.26 4.31 4.36 T:morus1280256v1 4.26 4.35 4.43 T:morus1280128v1 4.39 4.45 4.51 T:deoxysneq256128v1 4.51 4.55 4.61 T:morus1280128v2 4.51 4.57 4.62 T:morus1280256v2 4.48 4.59 4.69 T:morus640128v2 4.71 4.76 4.82 T:deoxysii128v141 4.74 4.77 4.81 T:deoxysi128v141 5.18 5.25 5.42 T:deoxysi256v141 5.19 5.25 5.33 aes256gcmv1 5.20 5.31 5.40 T:aes128gcmv1 5.43 5.46 5.50 T:aesjambuv1 5.62 5.66 5.70 T:deoxyseq128128v1 5.64 5.71 5.80 T:deoxyseq256128v1 7.70 7.78 7.87 T:norx6441v1 7.69 7.80 7.93 T:deoxysii256v141 7.73 7.81 7.88 T:norx6441v2 7.81 7.89 7.95 T:norx6441v3 9.61 9.70 9.82 T:norx3241v1 9.62 9.71 9.81 T:norx3241v2 9.70 9.75 9.86 T:norx3241v3 9.74 9.89 10.03 T:ascon128av11 9.80 9.89 10.04 T:ascon96v1 10.06 10.18 10.30 ascon128av12 10.03 10.32 10.57 T:lakekeyakv1 11.65 11.75 11.83 T:norx6461v1 11.75 11.81 11.89 T:norx6461v2 11.75 11.84 11.93 T:norx6461v3 12.08 12.15 12.43 T:riverkeyakv2 12.16 12.32 12.78 T:lakekeyakv2 12.73 12.81 13.00 T:ascon128v1 12.72 12.82 12.94 T:ascon128v11 13.07 13.20 13.35 ascon128v12 13.79 13.89 13.99 T:norx6444v3 14.58 14.69 14.83 T:norx3261v2 14.75 14.82 14.92 T:norx3261v3 16.37 16.45 16.52 T:norx3261v1 18.31 18.42 18.58 T:aes128n12clocv1 18.45 18.51 18.67 T:aes128n8clocv1 18.78 18.85 18.95 T:aes128otrsv1 18.77 18.87 19.02 T:aes128otrsv2 19.01 19.08 19.37 T:aes128otrpv2 18.98 19.12 19.26 T:aes128otrpv1 19.39 19.53 20.01 T:twine80n6t4clocv2 20.06 20.55 20.90 T:twine80n6t4clocv3 22.75 22.96 23.28 T:acorn128v3 22.30 23.34 24.17 T:ketjeminorv2 23.71 23.90 24.32 T:acorn128v2 24.32 24.40 24.56 T:aes256otrsv2 24.35 24.44 24.72 T:aes256otrsv1 24.90 25.01 25.23 T:aes256otrpv1 24.96 25.07 25.19 T:aes256otrpv2 27.87 28.12 28.55 T:norx6444v2 28.29 28.40 28.67 T:seakeyakv2 33.41 33.55 34.06 T:norx6444v1 33.11 33.76 34.32 T:ketjemajorv2 34.45 34.76 35.24 T:ketjesrv1 39.17 39.55 40.11 T:ketjesrv2 43.80 43.93 44.57 T:oceankeyakv2 43.68 44.38 44.68 T:aeadaes128ocbtaglen64v1 44.32 44.59 45.00 T:aeadaes128ocbtaglen96v1 48.16 48.64 49.15 T:ketjejrv1 51.79 51.99 52.20 T:aeadaes192ocbtaglen64v1 51.83 52.01 52.20 T:aeadaes192ocbtaglen96v1 54.06 54.87 57.38 T:proest256otrv1 61.10 61.31 61.53 T:aeadaes256ocbtaglen96v1 61.25 61.46 61.66 T:aeadaes256ocbtaglen64v1 63.48 63.80 64.60 T:colm127v1 71.18 71.58 72.50 T:deoxysneq128128v13 78.17 78.67 79.14 T:proest128otrv1 79.91 80.37 80.79 T:ketjejrv2 88.63 88.95 89.43 T:present80n6t4silcv3 99.77 100.21 100.67 T:aezv1 103.13 103.36 103.78 T:deoxyseq128128v13 107.34 107.82 108.37 T:deoxysneq256128v13 113.43 113.86 114.37 T:lunarkeyakv2 150.51 151.07 151.49 T:led80n6t4silcv3 157.81 158.68 160.62 T:deoxyseq256128v13 1330.96 1332.88 1334.38 T:acorn128 2199.07 2200.09 2201.57 T:led80n6t4silcv2 2199.03 2200.17 2201.01 T:led80n6silcv1 2600.25 2605.74 2611.01 T:present80n6t4silcv2 2601.70 2605.82 2608.43 T:present80n6silcv1