VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20240716

[Page version: 20240726 23:46:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.22? 0.24? 0.26? T:tiaoxinv1 0.23 0.24 0.25 T:tiaoxinv2 0.28 0.28 0.29 aegis128l 0.50 0.50 0.51 aegis256 0.52? 0.56? 0.84? T:aegis128 0.65 0.66 0.67 T:morus1280128v2 0.65 0.66 0.67 T:morus1280256v2 0.65 0.67 0.68 T:morus1280128v1 0.66 0.67 0.68 T:morus1280256v1 0.57? 0.68? 0.75? T:aeadaes128ocbtaglen128v1 0.69 0.70 0.70 T:aezv4 0.70 0.71 0.71 T:aezv3 0.72 0.73 0.73 T:aes128otrsv3 0.72 0.73 0.73 T:aes128otrpv3 0.61? 0.75? 1.15? T:aes128otrcv3 0.70? 0.76? 0.83? T:aes128gcmv1 -3.36? 0.77? 1.23? T:aeadaes192ocbtaglen128v1 0.69? 0.79? 1.16? T:aezv5 0.90 0.91 0.93 T:deoxysi128v141 0.93 0.94 0.95 T:aes256otrsv3 0.94 0.95 0.96 T:aes256otrcv3 0.96 0.96 0.97 T:aes256otrpv3 0.94? 1.04? 1.12? T:aeadaes256ocbtaglen128v1 1.04 1.06 1.07 T:deoxysi256v141 1.06 1.07 1.08 T:morus640128v1 1.06 1.07 1.08 T:morus640128v2 1.03? 1.12? 1.50? T:aes256gcmv1 1.24 1.29 1.34 T:norx6444v3 1.32 1.32 1.36 T:deoxysneq128128v1 1.51 1.52 1.53 T:deoxysneq256128v1 1.84 1.89 1.93 T:deoxysii128v141 2.13 2.15 2.16 T:norx6441v2 2.13 2.16 2.18 T:norx6441v3 2.13 2.16 2.18 T:deoxysii256v141 2.21 2.25 2.30 T:lunarkeyakv2 2.31 2.32 2.33 T:colm0v1 2.30 2.34 2.36 T:deoxyseq128128v1 2.48 2.51 2.52 T:deoxyseq256128v1 2.55 2.56 2.58 T:norx6441v1 2.87 2.91 2.93 T:seakeyakv2 2.98 3.08 3.12 T:oceankeyakv2 3.21 3.22 3.24 T:norx6461v3 3.21 3.23 3.25 T:norx6461v2 2.74? 3.73? 3.80? T:norx6444v2 3.86 3.87 3.90 T:norx3241v2 3.86 3.88 3.90 T:norx3241v3 3.87 3.90 3.95 T:norx6461v1 4.06 4.08 4.10 T:norx6444v1 4.10? 4.15? 6.25? T:lakekeyakv1 4.41 4.46 4.48 T:lakekeyakv2 4.56 4.56 4.57 T:aes128n12t8silcv3 4.56 4.56 4.57 T:aes128n8t8silcv2 4.56 4.57 4.57 T:aes128n8t8clocv2 4.56? 4.57? 6.66? T:aes128n12t8clocv3 4.56? 4.57? 6.67? T:aes128n12t8clocv2 4.39 4.68 4.72 T:norx3241v1 5.81 5.85 5.87 T:norx3261v3 5.89 5.92 5.94 T:norx3261v2 4.56? 6.04? 6.67? T:aes128n12t8silcv2 6.48 6.73 6.76 T:ascon128av11 6.84 6.85 6.86 T:ascon96v1 7.22 7.25 7.30 ascon128av12 7.42 7.44 7.46 T:norx3261v1 5.84? 7.55? 7.60? T:ketjemajorv2 9.12 9.13 9.14 T:aesjambuv1 9.44 9.46 9.56 T:ketjeminorv2 9.75 9.80 9.82 T:riverkeyakv2 9.53 9.90 9.98 T:ascon128v11 9.95 9.97 10.00 T:ascon128v1 10.54? 10.60? 12.18? ascon128v12 7.69? 14.26? 14.42? T:oceankeyakv1 14.58? 14.61? 22.41? T:aes128otrsv2 14.59 15.30 15.34 T:aes128otrpv1 15.28 15.30 15.35 T:aes128otrpv2 15.75 15.76 15.79 T:twine80n6t4clocv2 15.91 15.96 15.99 T:aes128otrsv1 16.18? 16.19? 23.58? T:twine80n6t4clocv3 16.59? 16.78? 18.65? T:seakeyakv1 18.12 18.99 19.10 T:aes256otrsv1 18.96 19.00 19.06 T:aes256otrpv2 18.16 19.06 19.09 T:aes256otrpv1 19.06 19.09 19.14 T:aes256otrsv2 23.49 23.66 24.28 T:aes128n8clocv1 23.99 24.09 24.12 T:aes128n12clocv1 24.59 24.65 24.71 T:proest256otrv1 24.92 25.93 25.99 T:aes128n8silcv1 25.84 25.96 26.09 T:aes128n12silcv1 32.25 32.33 32.40 T:riverkeyakv1 35.27 35.43 35.47 T:ketjesrv1 37.37 37.54 37.60 T:ketjesrv2 60.07 60.12 60.16 T:proest128otrv1 61.57 61.67 62.04 T:ketjejrv1 73.60 73.67 74.01 T:deoxysneq128128v13 75.45 75.47 75.49 T:present80n6t4silcv3 102.92 102.99 104.72 T:ketjejrv2 112.88 113.41 117.06 T:deoxysneq256128v13 128.54 128.69 128.92 T:twine80n6clocv1 131.57 131.63 131.78 T:led80n6t4silcv3 149.96 151.21 153.04 T:deoxyseq128128v13 190.65 192.47 192.79 T:aezv1 227.32 228.57 238.91 T:deoxyseq256128v13 281.90 282.04 290.39 aes256gcmv1 292.25? 366.98? 677.38? T:acorn128v3 370.88 371.02 371.29 T:acorn128 371.57 371.62 371.82 T:acorn128v2 4409.30 4416.15 4424.98 T:present80n6silcv1 4415.56 4424.51 4430.82 T:present80n6t4silcv2 8304.33 8319.86 8337.45 T:led80n6silcv1 8312.85 8516.38 8562.69 T:led80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.30 0.30 0.31 aegis128l 0.39 0.39 0.41 T:tiaoxinv2 0.38 0.40 0.41 T:tiaoxinv1 0.52? 0.56? 0.85? T:aegis128 0.59 0.59 0.60 aegis256 0.65 0.66 0.68 T:morus1280128v1 0.65 0.66 0.68 T:morus1280256v1 0.66 0.66 0.67 T:morus1280256v2 0.66 0.67 0.68 T:morus1280128v2 0.69 0.69 0.72 T:aezv4 0.69 0.69 0.72 T:aezv3 0.64? 0.70? 0.76? T:aeadaes128ocbtaglen128v1 0.72 0.74 0.76 T:aes128otrsv3 0.74 0.75 0.76 T:aes128otrpv3 0.62? 0.75? 1.19? T:aes128otrcv3 0.68? 0.77? 1.14? T:aezv5 0.65? 0.77? 0.81? T:aes128gcmv1 0.68? 0.84? 1.30? T:aeadaes192ocbtaglen128v1 0.94 0.96 0.97 T:aes256otrsv3 0.95 0.97 0.99 T:aes256otrcv3 0.99 1.01 1.03 T:aes256otrpv3 0.95? 1.06? 1.10? T:aes256gcmv1 1.06 1.07 1.08 T:morus640128v1 1.06 1.07 1.08 T:morus640128v2 0.99 1.07 1.09 T:aeadaes256ocbtaglen128v1 1.22 1.23 1.24 T:deoxysi128v141 1.22 1.25 1.30 T:norx6444v3 1.35 1.36 1.41 T:deoxysi256v141 1.51 1.52 1.54 T:deoxysneq256128v1 1.61 1.63 1.64 T:deoxysneq128128v1 1.83 1.86 1.89 T:deoxysii128v141 2.07 2.09 2.10 T:norx6441v2 2.08 2.09 2.11 T:norx6441v3 2.13 2.15 2.16 T:deoxysii256v141 2.21 2.28 2.34 T:colm0v1 2.30 2.34 2.38 T:lunarkeyakv2 2.50 2.51 2.53 T:norx6441v1 2.92 2.95 3.03 T:seakeyakv2 3.03 3.15 3.17 T:oceankeyakv2 3.16 3.17 3.21 T:norx6461v2 3.16 3.18 3.20 T:norx6461v3 3.18 3.22 3.24 T:deoxyseq128128v1 3.31 3.35 3.38 T:deoxyseq256128v1 2.68? 3.69? 3.76? T:norx6444v2 3.75 3.76 3.78 T:norx3241v2 3.77 3.79 3.80 T:norx3241v3 3.84 3.87 3.88 T:norx6461v1 3.98 3.99 4.02 T:norx6444v1 4.20? 4.26? 6.38? T:lakekeyakv1 4.45 4.49 4.51 T:lakekeyakv2 4.49 4.50 4.51 T:aes128n12t8silcv3 4.49 4.50 4.51 T:aes128n8t8silcv2 4.50 4.50 4.50 T:aes128n8t8clocv2 4.50? 4.50? 6.57? T:aes128n12t8clocv2 4.50? 4.50? 6.57? T:aes128n12t8clocv3 4.28 4.56 4.59 T:norx3241v1 5.83 5.85 5.87 T:norx3261v3 5.84 5.87 5.89 T:norx3261v2 4.50? 5.94? 6.58? T:aes128n12t8silcv2 7.03 7.05 7.07 T:ascon96v1 6.80 7.06 7.11 T:ascon128av11 7.13 7.15 7.17 ascon128av12 7.30 7.32 7.34 T:norx3261v1 6.34? 8.07? 8.11? T:ketjemajorv2 9.36? 9.41? 11.11? T:ketjeminorv2 9.41 9.41 9.42 T:aesjambuv1 10.01 10.06 10.09 T:riverkeyakv2 9.99 10.35 10.43 T:ascon128v11 10.30 10.37 10.42 T:ascon128v1 10.34? 11.78? 13.21? ascon128v12 7.84? 14.42? 14.50? T:oceankeyakv1 14.60? 14.67? 22.46? T:aes128otrsv2 14.61 15.31 15.35 T:aes128otrpv1 15.30 15.34 15.36 T:aes128otrpv2 15.50 15.54 15.56 T:twine80n6t4clocv2 16.20? 16.23? 23.65? T:twine80n6t4clocv3 16.34 16.40 16.46 T:aes128otrsv1 16.78? 16.98? 22.02? T:seakeyakv1 18.14 19.03 19.08 T:aes256otrpv1 18.14 19.04 19.17 T:aes256otrsv1 19.02 19.10 19.13 T:aes256otrsv2 19.05 19.10 19.26 T:aes256otrpv2 23.19 23.27 23.33 T:aes128n12clocv1 24.39 24.46 24.54 T:proest256otrv1 24.48 24.61 25.39 T:aes128n8clocv1 25.79 25.81 25.85 T:aes128n12silcv1 24.94 25.88 25.93 T:aes128n8silcv1 32.93 33.01 33.08 T:riverkeyakv1 36.02 36.15 36.27 T:ketjesrv2 36.06 36.34 36.43 T:ketjesrv1 60.09 60.17 60.19 T:proest128otrv1 62.14 62.30 62.84 T:ketjejrv1 76.16 76.20 76.26 T:present80n6t4silcv3 102.84 102.95 103.45 T:ketjejrv2 103.98 104.42 104.65 T:deoxysneq128128v13 128.69 128.72 128.84 T:twine80n6clocv1 132.54 132.64 138.14 T:led80n6t4silcv3 146.90 147.12 147.47 T:deoxysneq256128v13 150.12 151.69 152.44 T:deoxyseq128128v13 190.62 191.58 192.06 T:aezv1 227.60 228.40 228.51 T:deoxyseq256128v13 279.49 279.67 282.75 aes256gcmv1 283.68? 359.25? 662.81? T:acorn128v3 362.91 363.00 363.72 T:acorn128 363.84 364.01 364.79 T:acorn128v2 4406.61 4412.29 4424.69 T:present80n6silcv1 4405.41 4417.28 4422.56 T:present80n6t4silcv2 8308.22 8330.30 8335.07 T:led80n6silcv1 8306.57 8550.23 8576.47 T:led80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.27 0.27 0.28 T:aezv4 0.26? 0.27? 0.32? T:aezv3 0.30 0.30 0.31 aegis128l 0.24? 0.33? 0.47? T:aezv5 0.39 0.39 0.40 T:tiaoxinv2 0.39? 0.39? 0.44? T:tiaoxinv1 0.52? 0.56? 0.84? T:aegis128 0.59 0.59 0.60 aegis256 0.65 0.66 0.67 T:morus1280256v2 0.65 0.66 0.67 T:morus1280128v2 0.66 0.67 0.67 T:morus1280128v1 0.66 0.67 0.68 T:morus1280256v1 0.68 0.70 0.74 T:aeadaes128ocbtaglen128v1 0.62? 0.74? 1.18? T:aes128otrcv3 0.72 0.74 0.76 T:aes128otrsv3 0.73 0.75 0.75 T:aes128otrpv3 0.57? 0.77? 0.80? T:aes128gcmv1 0.94 0.96 0.97 T:aes256otrsv3 0.96 0.97 0.98 T:aes256otrcv3 0.98 1.00 1.01 T:aes256otrpv3 0.97? 1.02? 1.08? T:aes256gcmv1 -2.64? 1.07? 5.04? T:aeadaes256ocbtaglen128v1 1.06 1.07 1.08 T:morus640128v1 1.07 1.08 1.09 T:morus640128v2 0.68? 1.20? 4.95? T:aeadaes192ocbtaglen128v1 1.22 1.23 1.25 T:deoxysi128v141 1.22 1.25 1.27 T:norx6444v3 1.35 1.37 1.40 T:deoxysi256v141 1.48 1.53 1.54 T:deoxysneq256128v1 1.61 1.63 1.65 T:deoxysneq128128v1 1.82 1.85 1.89 T:deoxysii128v141 2.07 2.08 2.09 T:norx6441v2 2.08 2.09 2.10 T:norx6441v3 2.11 2.14 2.15 T:deoxysii256v141 2.22 2.28 2.34 T:colm0v1 2.27 2.32 2.35 T:lunarkeyakv2 2.50 2.51 2.53 T:norx6441v1 2.95 2.98 3.03 T:seakeyakv2 3.07 3.12 3.19 T:oceankeyakv2 3.14 3.17 3.19 T:norx6461v2 3.15 3.18 3.20 T:norx6461v3 3.19 3.23 3.26 T:deoxyseq128128v1 3.33 3.35 3.40 T:deoxyseq256128v1 2.72? 3.73? 3.80? T:norx6444v2 3.75 3.76 3.78 T:norx3241v2 3.77 3.79 3.80 T:norx3241v3 3.84 3.85 3.87 T:norx6461v1 4.01 4.03 4.06 T:norx6444v1 4.22? 4.27? 6.41? T:lakekeyakv1 4.43 4.49 4.50 T:aes128n12t8silcv3 4.43 4.49 4.50 T:aes128n8t8silcv2 4.43? 4.50? 6.57? T:aes128n12t8silcv2 4.47 4.50 4.51 T:lakekeyakv2 4.50? 4.50? 6.57? T:aes128n12t8clocv3 4.50? 4.50? 6.57? T:aes128n12t8clocv2 4.50 4.51 4.51 T:aes128n8t8clocv2 4.27 4.55 4.57 T:norx3241v1 5.82 5.84 5.86 T:norx3261v3 5.84 5.86 5.88 T:norx3261v2 7.03 7.04 7.07 T:ascon96v1 6.80 7.07 7.11 T:ascon128av11 7.13 7.15 7.17 ascon128av12 7.31 7.32 7.33 T:norx3261v1 6.41? 8.10? 8.17? T:ketjemajorv2 9.41 9.41 9.42 T:aesjambuv1 9.36 9.41 9.48 T:ketjeminorv2 10.06 10.09 10.12 T:riverkeyakv2 10.31 10.35 10.51 ascon128v12 9.98 10.35 10.42 T:ascon128v11 10.33 10.37 10.39 T:ascon128v1 7.85? 14.43? 14.51? T:oceankeyakv1 14.63? 14.69? 22.50? T:aes128otrsv2 14.66 15.36 15.40 T:aes128otrpv1 15.38 15.40 15.64 T:aes128otrpv2 15.51 15.55 15.59 T:twine80n6t4clocv2 16.17? 16.21? 23.63? T:twine80n6t4clocv3 16.34 16.43 16.56 T:aes128otrsv1 16.82? 16.90? 20.13? T:seakeyakv1 18.15 19.04 19.11 T:aes256otrpv1 19.04 19.09 19.20 T:aes256otrsv2 18.24? 19.14? 22.34? T:aes256otrsv1 19.09 19.20 20.65 T:aes256otrpv2 23.11 23.20 23.26 T:aes128n12clocv1 24.33 24.39 24.50 T:proest256otrv1 24.49 24.58 25.38 T:aes128n8clocv1 24.90 25.85 25.94 T:aes128n8silcv1 25.82 25.86 25.96 T:aes128n12silcv1 32.96? 33.12? 37.70? T:riverkeyakv1 35.93 36.24 36.42 T:ketjesrv1 36.21 36.28 36.34 T:ketjesrv2 60.08 60.13 60.19 T:proest128otrv1 62.10 62.22 62.43 T:ketjejrv1 76.20 76.23 76.26 T:present80n6t4silcv3 102.92 102.96 105.92 T:ketjejrv2 103.87 104.25 104.68 T:deoxysneq128128v13 128.55 128.62 128.80 T:twine80n6clocv1 132.55 132.64 132.68 T:led80n6t4silcv3 146.94 147.24 147.44 T:deoxysneq256128v13 150.03 150.21 152.29 T:deoxyseq128128v13 190.50 191.47 195.62 T:aezv1 228.29 228.52 228.93 T:deoxyseq256128v13 268.59 268.70 268.85 aes256gcmv1 286.59? 359.25? 684.93? T:acorn128v3 362.96 363.01 363.66 T:acorn128 363.77 364.08 364.75 T:acorn128v2 4406.12 4415.13 4423.18 T:present80n6t4silcv2 4409.46 4421.31 4425.89 T:present80n6silcv1 8304.74 8320.12 8552.11 T:led80n6t4silcv2 8311.88 8326.48 8340.94 T:led80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.18? 0.20? 0.23? T:tiaoxinv2 0.20? 0.21? 0.23? T:tiaoxinv1 0.27? 0.28? 0.41? aegis128l 0.48 0.50 0.51 T:aezv4 0.50 0.51 0.53 T:aezv3 0.48 0.51 0.52 aegis256 0.50 0.54 0.55 T:aes128gcmv1 0.52 0.54 0.55 T:aezv5 0.56? 0.57? 0.83? T:aegis128 0.63 0.64 0.64 T:morus1280256v2 0.63 0.64 0.65 T:morus1280128v1 0.63 0.64 0.65 T:morus1280128v2 0.64 0.64 0.65 T:morus1280256v1 0.58? 0.65? 0.71? T:aeadaes128ocbtaglen128v1 0.26? 0.68? 0.70? T:aes256gcmv1 0.73 0.74 0.74 T:aes128otrcv3 0.82 0.83 0.85 T:aes128otrpv3 0.89 0.91 0.93 T:deoxysi128v141 0.62? 0.94? 2.31? T:aeadaes192ocbtaglen128v1 0.95 0.96 0.98 T:aes256otrcv3 1.01 1.02 1.03 T:morus640128v2 1.01 1.03 1.04 T:morus640128v1 1.03 1.05 1.06 T:deoxysi256v141 1.06 1.07 1.07 T:aes256otrpv3 -0.85? 1.13? 3.03? T:aeadaes256ocbtaglen128v1 1.33 1.34 1.35 T:deoxysneq128128v1 1.35 1.40 1.43 T:deoxysii128v141 1.43 1.53 1.55 T:deoxysneq256128v1 1.59 1.62 1.64 T:deoxysii256v141 1.63 1.64 1.64 T:colm0v1 1.67 1.69 1.71 T:norx6444v3 1.74 1.75 1.76 T:deoxyseq128128v1 1.86 1.89 1.91 T:deoxyseq256128v1 1.98 2.14 2.15 T:norx6441v3 2.13 2.15 2.15 T:norx6441v2 2.45 2.49 2.66 T:seakeyakv2 2.55 2.56 2.57 T:norx6441v1 2.55 2.59 2.61 T:oceankeyakv2 2.61 2.61 2.62 T:aes128otrsv3 3.05 3.08 3.11 T:lunarkeyakv2 3.20 3.24 3.26 T:norx6461v2 3.23 3.24 3.26 T:norx6461v3 3.60 3.60 3.61 T:aes256otrsv3 3.69 3.71 3.71 T:norx6444v2 3.84 3.86 3.87 T:norx3241v3 3.86 3.87 3.88 T:norx3241v2 3.87 3.89 3.91 T:norx6461v1 3.92 3.93 3.97 T:lakekeyakv1 3.95 3.97 3.98 T:lakekeyakv2 4.03 4.04 4.05 T:norx6444v1 4.53 4.53 4.53 T:aes128n12t8silcv3 4.53 4.53 4.53 T:aes128n12t8silcv2 4.53 4.53 4.53 T:aes128n8t8silcv2 4.53 4.53 4.54 T:aes128n12t8clocv2 4.53 4.53 4.54 T:aes128n8t8clocv2 4.53 4.53 4.54 T:aes128n12t8clocv3 4.67 4.69 4.70 T:norx3241v1 5.85 5.87 5.87 T:norx3261v3 5.86 5.87 5.89 T:norx3261v2 6.52 6.55 6.57 T:ketjemajorv2 6.67 6.76 6.89 T:ascon128av11 6.75? 6.79? 7.60? T:ascon96v1 6.68 6.99 7.02 T:riverkeyakv2 6.92? 7.16? 7.94? ascon128av12 7.42 7.43 7.44 T:norx3261v1 8.43 8.45 8.49 T:ketjeminorv2 9.15 9.16 9.17 T:aesjambuv1 9.83 9.89 9.92 T:ascon128v11 9.88 9.91 9.92 T:ascon128v1 10.55? 10.58? 15.30? ascon128v12 13.68 13.70 13.73 T:aes128otrsv2 13.34 14.17 14.28 T:oceankeyakv1 14.76 14.80 14.87 T:aes128otrsv1 15.32 15.34 15.36 T:aes128otrpv1 15.34 15.43 15.51 T:aes128otrpv2 15.51 15.53 15.54 T:twine80n6t4clocv2 15.96 16.00 16.01 T:twine80n6t4clocv3 16.41 16.63 16.73 T:seakeyakv1 17.39 17.46 17.52 T:aes256otrsv1 17.45 17.51 17.54 T:aes256otrsv2 17.83 17.97 18.33 T:aes128n8clocv1 18.44 18.46 18.50 T:aes128n12clocv1 18.41 19.15 19.26 T:aes256otrpv2 19.33 19.35 20.38 T:aes128n8silcv1 19.35 19.36 20.14 T:aes128n12silcv1 24.89 24.93 24.97 T:proest256otrv1 19.18? 27.82? 27.86? T:aes256otrpv1 30.52 30.58 30.63 T:riverkeyakv1 32.47 32.51 32.55 T:ketjesrv1 34.20 34.24 34.39 T:ketjesrv2 57.89 58.03 58.16 T:ketjejrv1 60.26 60.30 60.47 T:proest128otrv1 73.93 74.21 74.31 T:deoxysneq128128v13 75.24 75.27 75.30 T:present80n6t4silcv3 96.38 96.44 96.49 T:twine80n6clocv1 98.59 98.65 99.16 T:ketjejrv2 111.64 112.65 115.28 T:deoxyseq128128v13 112.89 113.29 116.01 T:deoxysneq256128v13 125.88 127.63 129.05 T:aezv1 131.51 131.55 131.61 T:led80n6t4silcv3 170.07 170.95 178.92 T:deoxyseq256128v13 276.30 279.20 284.59 aes256gcmv1 323.10? 361.79? 639.57? T:acorn128v3 370.82 370.89 372.25 T:acorn128v2 370.49 371.79 372.23 T:acorn128 3317.44 3320.00 3415.46 T:present80n6silcv1 3319.95 3352.69 3431.91 T:present80n6t4silcv2 6233.26 6236.91 6367.37 T:led80n6t4silcv2 6190.52 6419.69 6444.22 T:led80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.27? 0.28? 0.42? aegis128l 0.28 0.28 0.29 T:tiaoxinv2 0.28 0.29 0.30 T:tiaoxinv1 0.23? 0.46? 0.69? T:aes256gcmv1 0.48 0.49 0.50 T:aezv4 0.47? 0.50? 0.53? T:aes128gcmv1 0.50 0.51 0.51 T:aezv3 0.53 0.54 0.54 T:aezv5 0.51 0.54 0.55 aegis256 0.56? 0.56? 0.83? T:aegis128 0.63 0.64 0.64 T:morus1280256v2 0.63 0.64 0.65 T:morus1280128v1 0.63 0.64 0.64 T:morus1280128v2 0.64 0.64 0.64 T:morus1280256v1 0.61? 0.67? 0.72? T:aeadaes128ocbtaglen128v1 0.74 0.75 0.75 T:aes128otrcv3 0.84 0.86 0.86 T:aes128otrpv3 0.97 0.98 0.99 T:aes256otrcv3 1.03 1.03 1.04 T:morus640128v1 1.03 1.03 1.04 T:morus640128v2 1.06 1.07 1.10 T:deoxysi128v141 1.09 1.09 1.10 T:aes256otrpv3 -0.84? 1.14? 3.04? T:aeadaes256ocbtaglen128v1 -1.17? 1.16? 2.93? T:aeadaes192ocbtaglen128v1 1.18 1.20 1.24 T:deoxysi256v141 1.35 1.39 1.43 T:deoxysii128v141 1.47 1.48 1.49 T:deoxysneq128128v1 1.41 1.53 1.54 T:deoxysneq256128v1 1.58 1.59 1.65 T:colm0v1 1.59 1.61 1.64 T:deoxysii256v141 1.67 1.71 1.72 T:norx6444v3 1.94 2.11 2.11 T:norx6441v3 2.10 2.11 2.12 T:norx6441v2 2.18 2.20 2.21 T:deoxyseq128128v1 2.29 2.31 2.33 T:deoxyseq256128v1 2.47 2.50 2.55 T:seakeyakv2 2.53 2.55 2.55 T:norx6441v1 2.62 2.62 2.63 T:aes128otrsv3 2.59? 2.63? 3.01? T:oceankeyakv2 3.06 3.08 3.11 T:lunarkeyakv2 3.20 3.21 3.23 T:norx6461v3 3.21 3.23 3.24 T:norx6461v2 3.61 3.62 3.62 T:aes256otrsv3 3.67 3.69 3.70 T:norx6444v2 3.83 3.83 3.84 T:norx3241v3 3.84 3.85 3.86 T:norx3241v2 3.85 3.86 3.91 T:norx6461v1 3.96 3.99 4.00 T:lakekeyakv2 3.96 3.99 4.01 T:lakekeyakv1 3.98 3.99 4.01 T:norx6444v1 4.50 4.50 4.51 T:aes128n12t8silcv3 4.50 4.50 4.54 T:aes128n8t8clocv2 4.50 4.50 4.51 T:aes128n12t8silcv2 4.50? 4.51? 5.25? T:aes128n8t8silcv2 4.50 4.53 4.53 T:aes128n12t8clocv2 4.50 4.53 4.53 T:aes128n12t8clocv3 4.61 4.63 4.64 T:norx3241v1 5.84 5.86 5.88 T:norx3261v2 5.84 5.86 5.88 T:norx3261v3 6.81 6.85 6.91 T:ketjemajorv2 6.84 6.87 6.94 T:ascon96v1 6.88? 6.91? 7.75? T:ascon128av11 6.84 7.08 7.12 ascon128av12 6.84 7.17 7.21 T:riverkeyakv2 7.36 7.37 7.38 T:norx3261v1 8.38 8.40 8.43 T:ketjeminorv2 9.30 9.30 10.14 T:aesjambuv1 10.03 10.10 10.13 T:ascon128v1 10.02 10.19 10.25 T:ascon128v11 10.46? 10.55? 15.06? ascon128v12 13.71 13.72 13.89 T:aes128otrsv2 14.19 14.25 14.35 T:oceankeyakv1 14.97 15.04 15.12 T:aes128otrsv1 15.33 15.37 15.65 T:aes128otrpv2 15.36 15.39 15.43 T:aes128otrpv1 15.39 15.41 15.44 T:twine80n6t4clocv2 15.97 15.99 16.01 T:twine80n6t4clocv3 16.42 16.70 16.78 T:seakeyakv1 17.46 17.47 17.50 T:aes256otrsv2 17.47 17.49 17.54 T:aes256otrsv1 18.00 18.03 18.11 T:aes128n12clocv1 18.32 18.36 18.84 T:aes128n8clocv1 18.41 19.12 19.19 T:aes256otrpv2 19.28 19.31 19.82 T:aes128n12silcv1 19.31? 20.21? 23.29? T:aes128n8silcv1 24.78 24.81 24.82 T:proest256otrv1 19.17? 27.82? 27.89? T:aes256otrpv1 30.90 30.96 31.07 T:riverkeyakv1 32.92 33.03 33.31 T:ketjesrv1 33.64 33.66 33.85 T:ketjesrv2 58.25 58.33 58.63 T:ketjejrv1 60.32 60.37 60.44 T:proest128otrv1 75.60 75.62 75.64 T:present80n6t4silcv3 89.08 89.44 89.78 T:deoxysneq128128v13 96.47 96.51 96.56 T:twine80n6clocv1 98.92 99.07 101.87 T:ketjejrv2 111.98 112.95 115.43 T:deoxyseq128128v13 125.98 127.10 128.39 T:aezv1 130.11 131.47 134.95 T:deoxysneq256128v13 131.96 132.00 132.07 T:led80n6t4silcv3 170.79 170.91 171.08 T:deoxyseq256128v13 274.09 278.09 281.24 aes256gcmv1 319.35? 361.39? 646.41? T:acorn128v3 366.50 366.53 368.62 T:acorn128 367.02 367.11 368.40 T:acorn128v2 3313.62 3319.73 3323.25 T:present80n6silcv1 3313.18 3400.39 3412.72 T:present80n6t4silcv2 6232.41 6237.17 6417.34 T:led80n6t4silcv2 6270.36 6416.02 6442.45 T:led80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.27 0.28 0.29 T:tiaoxinv2 0.28? 0.28? 0.42? aegis128l 0.28 0.28 0.29 T:aezv4 0.28 0.29 0.31 T:tiaoxinv1 0.29 0.30 0.30 T:aezv3 0.30 0.31 0.33 T:aezv5 0.47 0.49 0.52 T:aes128gcmv1 0.17? 0.53? 0.66? T:aes256gcmv1 0.51 0.55 0.55 aegis256 0.56? 0.56? 0.83? T:aegis128 0.63 0.64 0.65 T:morus1280128v1 0.63 0.64 0.64 T:morus1280256v2 0.64 0.64 0.64 T:morus1280256v1 0.63 0.64 0.65 T:morus1280128v2 0.65 0.66 0.67 T:aeadaes128ocbtaglen128v1 0.74 0.75 0.75 T:aes128otrcv3 0.77? 0.80? 1.18? T:aeadaes192ocbtaglen128v1 0.84 0.85 0.86 T:aes128otrpv3 0.96 0.97 0.98 T:aes256otrcv3 1.03 1.03 1.04 T:morus640128v1 1.03 1.03 1.04 T:morus640128v2 1.07 1.08 1.09 T:deoxysi128v141 1.09 1.09 1.09 T:aes256otrpv3 1.10 1.12 1.14 T:aeadaes256ocbtaglen128v1 1.18 1.20 1.25 T:deoxysi256v141 1.37 1.39 1.42 T:deoxysii128v141 1.48 1.48 1.49 T:deoxysneq128128v1 1.42 1.53 1.54 T:deoxysneq256128v1 1.58 1.61 1.64 T:colm0v1 1.59 1.61 1.62 T:deoxysii256v141 1.69 1.71 1.72 T:norx6444v3 1.94 2.10 2.11 T:norx6441v3 2.11 2.11 2.12 T:norx6441v2 2.18 2.20 2.21 T:deoxyseq128128v1 2.29 2.31 2.32 T:deoxyseq256128v1 2.49 2.51 2.56 T:seakeyakv2 2.54 2.54 2.55 T:norx6441v1 2.62 2.62 2.62 T:aes128otrsv3 2.58? 2.65? 3.47? T:oceankeyakv2 3.08 3.09 3.12 T:lunarkeyakv2 3.20 3.21 3.21 T:norx6461v3 3.21 3.22 3.23 T:norx6461v2 3.61 3.61 3.62 T:aes256otrsv3 3.69 3.71 3.72 T:norx6444v2 3.82 3.83 3.84 T:norx3241v3 3.83 3.83 3.86 T:norx6461v1 3.85 3.85 3.86 T:norx3241v2 3.96 3.99 4.00 T:lakekeyakv2 3.97 3.99 4.00 T:lakekeyakv1 4.00 4.01 4.02 T:norx6444v1 4.47 4.50 4.50 T:aes128n12t8silcv2 4.47 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.58 T:aes128n8t8clocv2 4.50 4.51 4.53 T:aes128n12t8clocv3 4.50 4.53 4.53 T:aes128n12t8clocv2 4.47? 4.53? 5.21? T:aes128n8t8silcv2 4.61 4.62 4.63 T:norx3241v1 5.83 5.84 5.85 T:norx3261v2 5.84 5.85 5.87 T:norx3261v3 6.82 6.86 6.91 T:ketjemajorv2 6.86 6.88 6.90 T:ascon128av11 6.86? 6.91? 8.41? T:ascon96v1 6.83 7.09 7.11 ascon128av12 6.86 7.17 7.22 T:riverkeyakv2 7.36 7.37 7.38 T:norx3261v1 8.38 8.43 8.45 T:ketjeminorv2 9.30 9.30 10.07 T:aesjambuv1 10.05 10.09 10.16 T:ascon128v1 10.01 10.10 10.18 T:ascon128v11 10.46? 12.11? 15.20? ascon128v12 13.70 13.72 13.74 T:aes128otrsv2 14.19 14.24 14.32 T:oceankeyakv1 15.01 15.05 15.11 T:aes128otrsv1 15.39 15.41 15.43 T:aes128otrpv1 15.39 15.43 15.45 T:twine80n6t4clocv2 15.59 15.68 17.21 T:aes128otrpv2 15.97 15.99 16.00 T:twine80n6t4clocv3 16.44 16.71 16.77 T:seakeyakv1 17.47 17.49 17.51 T:aes256otrsv2 17.42 17.50 17.55 T:aes256otrsv1 17.99 18.02 18.08 T:aes128n12clocv1 18.30 18.37 18.84 T:aes128n8clocv1 18.45 19.17 19.21 T:aes256otrpv2 19.29 19.33 19.35 T:aes128n8silcv1 19.32? 20.17? 22.33? T:aes128n12silcv1 24.79 24.81 24.84 T:proest256otrv1 19.62? 27.86? 27.90? T:aes256otrpv1 30.92 31.02 31.08 T:riverkeyakv1 32.96 33.06 33.17 T:ketjesrv1 33.63 33.69 33.73 T:ketjesrv2 58.25 58.34 58.38 T:ketjejrv1 60.27 60.30 60.34 T:proest128otrv1 75.61 75.64 75.65 T:present80n6t4silcv3 89.37 89.50 89.84 T:deoxysneq128128v13 96.46 96.51 96.58 T:twine80n6clocv1 98.90 99.07 99.44 T:ketjejrv2 111.99 112.92 114.96 T:deoxyseq128128v13 125.92 126.91 130.98 T:aezv1 129.94 130.38 134.92 T:deoxysneq256128v13 131.94 132.01 132.11 T:led80n6t4silcv3 170.71 170.97 171.06 T:deoxyseq256128v13 269.88 272.52 275.61 aes256gcmv1 319.15? 361.83? 642.26? T:acorn128v3 366.47 366.54 369.16 T:acorn128 366.94 367.06 368.66 T:acorn128v2 3312.02 3313.63 3319.79 T:present80n6silcv1 3378.38 3391.26 3402.46 T:present80n6t4silcv2 6232.89 6240.48 6398.07 T:led80n6t4silcv2 6254.58 6414.98 6455.26 T:led80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.17? 0.19? 0.22? T:tiaoxinv1 0.18? 0.19? 0.20? T:tiaoxinv2 0.25 0.26 0.26 aegis128l 0.29 0.29 0.30 T:aezv4 0.24? 0.30? 1.19? T:aes256gcmv1 0.26? 0.30? 0.36? T:aes128gcmv1 0.31 0.32 0.33 T:aezv3 0.32 0.33 0.33 T:aezv5 0.49 0.50 0.51 aegis256 0.52 0.56 0.57 T:aegis128 0.61 0.62 0.62 T:morus1280256v2 0.61 0.62 0.63 T:morus1280256v1 0.61 0.62 0.63 T:morus1280128v1 0.61 0.62 0.63 T:morus1280128v2 0.56? 0.65? 0.67? T:aeadaes128ocbtaglen128v1 0.56? 0.68? 4.71? T:aeadaes192ocbtaglen128v1 0.75 0.75 0.76 T:aes128otrcv3 0.89 0.90 0.92 T:deoxysi128v141 0.89 0.92 0.93 T:deoxysii128v141 0.91 0.92 0.97 T:aes128otrpv3 0.96 0.97 0.99 T:aes256otrcv3 0.96 0.97 0.97 T:colm0v1 0.96 0.97 0.99 T:morus640128v1 0.96 0.98 0.99 T:morus640128v2 1.00 1.02 1.06 T:deoxysi256v141 1.04 1.07 1.08 T:deoxysii256v141 1.15 1.16 1.18 T:deoxyseq128128v1 -2.65? 1.20? 4.95? T:aeadaes256ocbtaglen128v1 1.16 1.20 1.21 T:aes256otrpv3 1.26 1.27 1.28 T:deoxyseq256128v1 1.33 1.34 1.36 T:deoxysneq128128v1 1.51 1.53 1.55 T:deoxysneq256128v1 1.95 2.00 2.04 T:lunarkeyakv2 1.94 2.00 2.05 T:oceankeyakv2 2.11 2.14 2.15 T:norx6441v2 2.12 2.15 2.16 T:norx6444v3 2.12? 2.15? 3.25? T:norx6441v3 2.34 2.36 2.41 T:seakeyakv2 2.55 2.56 2.59 T:norx6441v1 3.22 3.25 3.26 T:norx6461v3 3.29 3.30 3.34 T:norx6461v2 3.24? 3.60? 3.70? T:lakekeyakv1 3.56 3.60 3.62 T:lakekeyakv2 3.61? 3.68? 5.63? T:norx6444v2 3.84 3.85 3.87 T:norx3241v3 3.84 3.88 3.89 T:norx3241v2 3.88 3.91 3.93 T:norx6461v1 3.99 4.00 4.01 T:norx6444v1 4.35 4.50 4.51 T:aes128n12t8clocv3 4.30 4.50 4.51 T:aes128n12t8silcv2 4.36 4.50 4.51 T:aes128n12t8clocv2 4.49 4.50 4.51 T:aes128otrsv3 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.51 T:aes128n8t8clocv2 4.50 4.50 4.51 T:aes128n8t8silcv2 4.68 4.70 4.71 T:norx3241v1 5.47 5.50 5.53 T:ketjemajorv2 5.81 5.82 5.85 T:norx3261v2 5.89 5.92 5.99 T:norx3261v3 6.25 6.26 6.29 T:aes256otrsv3 6.54? 6.61? 9.77? T:riverkeyakv2 6.66 6.73 7.01 T:ascon128av11 6.65 6.84 6.88 T:ascon96v1 7.03? 7.05? 10.24? ascon128av12 7.28 7.35 7.40 T:ketjeminorv2 7.40 7.41 7.44 T:norx3261v1 9.19? 9.19? 13.36? T:aesjambuv1 9.75 9.79 9.85 T:ascon128v1 9.78? 9.91? 14.36? T:ascon128v11 10.53 10.54 10.58 ascon128v12 11.30? 11.99? 17.69? T:aes128otrsv2 12.05 12.09 12.20 T:aes128n8clocv1 12.68 12.70 12.72 T:aes128n12clocv1 12.71 12.73 12.76 T:aes128n8silcv1 12.72 12.74 12.80 T:aes128n12silcv1 13.50 13.58 13.70 T:aes128otrsv1 13.98 14.09 14.17 T:oceankeyakv1 15.26 15.29 15.31 T:aes128otrpv1 15.24 15.30 15.32 T:twine80n6t4clocv2 15.30? 15.54? 17.20? T:aes128otrpv2 15.63 15.68 15.74 T:aes256otrsv1 15.68 15.70 15.72 T:aes256otrsv2 15.78 15.79 15.80 T:twine80n6t4clocv3 16.26 16.55 16.68 T:seakeyakv1 19.08 19.12 19.17 T:aes256otrpv1 19.09 19.14 19.23 T:aes256otrpv2 25.14 25.19 25.25 T:proest256otrv1 28.79? 28.91? 32.16? T:riverkeyakv1 29.52 29.57 29.63 T:ketjesrv1 31.08 31.12 31.28 T:ketjesrv2 54.33 54.46 54.57 T:ketjejrv1 60.48 60.54 60.59 T:proest128otrv1 61.48 61.58 61.85 T:aezv1 64.31 64.40 64.47 T:twine80n6clocv1 74.23 74.30 74.39 T:deoxysneq128128v13 74.51 74.95 76.78 T:deoxyseq128128v13 75.09 75.12 75.17 T:present80n6t4silcv3 95.19 95.27 95.31 T:ketjejrv2 112.59 113.24 116.20 T:deoxysneq256128v13 112.91 113.47 118.60 T:deoxyseq256128v13 131.45 131.54 135.22 T:led80n6t4silcv3 260.13 267.41 276.19 aes256gcmv1 369.92 370.01 370.12 T:acorn128 370.05 370.08 370.28 T:acorn128v2 283.65? 390.32? 667.51? T:acorn128v3 2210.46 2212.20 2215.24 T:present80n6silcv1 2208.27 2213.03 2215.58 T:present80n6t4silcv2 4156.36 4162.49 4168.50 T:led80n6t4silcv2 4160.80 4168.58 4175.51 T:led80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.16? 0.19? 0.22? T:tiaoxinv2 0.16? 0.20? 0.23? T:tiaoxinv1 0.25 0.25 0.27 aegis128l 0.23? 0.27? 0.32? T:aes128gcmv1 0.29 0.29 0.30 T:aezv4 0.32 0.32 0.33 T:aezv5 0.32 0.32 0.33 T:aezv3 0.25? 0.33? 1.17? T:aes256gcmv1 0.49 0.50 0.51 aegis256 0.52 0.56 0.57 T:aegis128 0.60 0.61 0.62 T:morus1280256v1 0.60 0.61 0.62 T:morus1280256v2 0.61 0.61 0.62 T:morus1280128v2 0.61 0.61 0.62 T:morus1280128v1 0.57? 0.63? 0.66? T:aeadaes128ocbtaglen128v1 -3.17? 0.66? 0.80? T:aeadaes192ocbtaglen128v1 0.74 0.75 0.76 T:aes128otrcv3 0.87 0.91 0.94 T:deoxysii128v141 0.89 0.92 0.93 T:deoxysi128v141 0.92 0.96 0.97 T:aes128otrpv3 0.96 0.97 0.98 T:aes256otrcv3 0.97 0.97 0.97 T:colm0v1 0.97 0.98 0.99 T:morus640128v1 0.98 0.99 1.01 T:morus640128v2 1.01 1.05 1.07 T:deoxysi256v141 1.02 1.07 1.09 T:deoxysii256v141 1.14 1.15 1.17 T:deoxyseq128128v1 -2.65? 1.16? 5.10? T:aeadaes256ocbtaglen128v1 1.17 1.18 1.19 T:aes256otrpv3 1.24 1.27 1.28 T:deoxyseq256128v1 1.32 1.34 1.35 T:deoxysneq128128v1 1.52 1.55 1.56 T:deoxysneq256128v1 1.88 1.99 2.04 T:oceankeyakv2 1.97 1.99 2.01 T:lunarkeyakv2 2.11 2.14 2.15 T:norx6441v2 2.12? 2.15? 3.22? T:norx6441v3 2.17 2.18 2.20 T:norx6444v3 2.34 2.37 2.42 T:seakeyakv2 2.58 2.59 2.61 T:norx6441v1 3.22 3.24 3.25 T:norx6461v3 3.23 3.25 3.27 T:norx6461v2 3.55 3.59 3.62 T:lakekeyakv2 3.25? 3.65? 3.70? T:lakekeyakv1 3.62? 3.68? 5.63? T:norx6444v2 3.83 3.85 3.89 T:norx6461v1 3.87 3.89 3.90 T:norx3241v3 3.89 3.91 3.93 T:norx3241v2 3.99 4.01 4.01 T:norx6444v1 4.33 4.45 4.51 T:aes128n12t8clocv3 4.30 4.50 4.50 T:aes128n12t8silcv2 4.48 4.50 4.51 T:aes128n8t8clocv2 4.33 4.50 4.51 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.51 T:aes128otrsv3 4.67 4.68 4.71 T:norx3241v1 5.48 5.51 5.55 T:ketjemajorv2 5.81 5.83 5.85 T:norx3261v2 5.86 5.88 5.92 T:norx3261v3 6.26 6.27 6.28 T:aes256otrsv3 6.53? 6.59? 9.80? T:riverkeyakv2 6.57 6.69 6.75 T:ascon128av11 6.64 6.89 7.00 T:ascon96v1 7.02? 7.06? 10.24? ascon128av12 7.27 7.35 7.44 T:ketjeminorv2 7.40 7.43 7.45 T:norx3261v1 9.19? 9.20? 13.36? T:aesjambuv1 9.79 9.81 10.18 T:ascon128v1 10.40? 10.47? 11.90? ascon128v12 9.79? 11.47? 14.24? T:ascon128v11 11.32? 11.99? 17.70? T:aes128otrsv2 12.06 12.08 12.20 T:aes128n8clocv1 12.69 12.72 12.75 T:aes128n12clocv1 12.70 12.73 12.76 T:aes128n12silcv1 12.69 12.74 12.79 T:aes128n8silcv1 13.51 13.58 13.75 T:aes128otrsv1 13.99 14.03 14.18 T:oceankeyakv1 15.24 15.28 15.32 T:aes128otrpv1 15.22? 15.28? 17.60? T:aes128otrpv2 15.26 15.30 15.33 T:twine80n6t4clocv2 15.66 15.69 15.74 T:aes256otrsv2 15.66 15.71 15.75 T:aes256otrsv1 15.78 15.79 15.80 T:twine80n6t4clocv3 16.23 16.54 16.63 T:seakeyakv1 19.06 19.11 19.16 T:aes256otrpv1 19.06 19.12 19.16 T:aes256otrpv2 25.12 25.19 25.26 T:proest256otrv1 28.77 28.86 28.93 T:riverkeyakv1 29.54 29.57 29.69 T:ketjesrv1 31.07 31.14 31.27 T:ketjesrv2 54.30 54.38 54.45 T:ketjejrv1 60.44 60.49 60.56 T:proest128otrv1 61.60 61.80 62.35 T:aezv1 64.33 64.38 64.49 T:twine80n6clocv1 74.22 74.34 74.63 T:deoxysneq128128v13 75.08 75.12 75.16 T:present80n6t4silcv3 74.22 75.34 76.30 T:deoxyseq128128v13 95.20 95.29 95.34 T:ketjejrv2 113.02 113.46 113.55 T:deoxyseq256128v13 113.21 113.84 119.02 T:deoxysneq256128v13 131.46 131.61 141.78 T:led80n6t4silcv3 260.26 268.70 270.43 aes256gcmv1 369.93 370.02 371.97 T:acorn128 370.05 370.10 370.41 T:acorn128v2 285.04? 386.42? 669.22? T:acorn128v3 2209.14 2210.46 2214.01 T:present80n6silcv1 2208.94 2211.40 2214.49 T:present80n6t4silcv2 4162.92 4166.31 4168.60 T:led80n6t4silcv2 4167.08 4177.40 4181.51 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.19 0.19 0.21 T:tiaoxinv1 0.18 0.19 0.19 T:tiaoxinv2 0.25 0.25 0.26 aegis128l 0.23? 0.27? 1.16? T:aes256gcmv1 0.29 0.29 0.30 T:aezv4 0.24? 0.29? 0.34? T:aes128gcmv1 0.32 0.32 0.33 T:aezv5 0.32 0.33 0.33 T:aezv3 0.50 0.50 0.51 aegis256 0.52 0.56 0.57 T:aegis128 0.60 0.61 0.62 T:morus1280128v2 0.60 0.61 0.62 T:morus1280256v2 0.61 0.61 0.62 T:morus1280128v1 0.61 0.61 0.63 T:morus1280256v1 0.61 0.62 0.63 T:aeadaes128ocbtaglen128v1 0.60? 0.73? 4.91? T:aeadaes192ocbtaglen128v1 0.74 0.75 0.75 T:aes128otrcv3 0.90 0.91 0.95 T:deoxysii128v141 0.90 0.92 0.93 T:deoxysi128v141 0.92 0.95 0.96 T:aes128otrpv3 0.96 0.97 0.98 T:aes256otrcv3 0.98 0.99 0.99 T:morus640128v1 0.98 0.99 1.00 T:morus640128v2 0.92 1.01 1.02 T:colm0v1 1.01 1.05 1.09 T:deoxysi256v141 1.05 1.07 1.08 T:deoxysii256v141 1.14 1.15 1.16 T:deoxyseq128128v1 1.18 1.18 1.19 T:aes256otrpv3 1.15 1.19 1.21 T:aeadaes256ocbtaglen128v1 1.26 1.27 1.29 T:deoxyseq256128v1 1.30 1.34 1.35 T:deoxysneq128128v1 1.53 1.55 1.57 T:deoxysneq256128v1 1.95 2.00 2.05 T:oceankeyakv2 1.97 2.00 2.02 T:lunarkeyakv2 2.11 2.13 2.14 T:norx6441v2 2.13? 2.14? 3.24? T:norx6441v3 2.16 2.17 2.19 T:norx6444v3 2.33 2.36 2.41 T:seakeyakv2 2.57 2.58 2.60 T:norx6441v1 3.22 3.24 3.27 T:norx6461v3 3.25 3.26 3.27 T:norx6461v2 3.56 3.58 3.59 T:lakekeyakv2 3.25? 3.67? 3.70? T:lakekeyakv1 3.64? 3.68? 5.64? T:norx6444v2 3.84 3.86 3.88 T:norx6461v1 3.87 3.88 3.90 T:norx3241v3 3.89 3.90 3.93 T:norx3241v2 3.99 4.00 4.02 T:norx6444v1 4.33 4.45 4.51 T:aes128n12t8clocv3 4.33 4.49 4.51 T:aes128n12t8clocv2 4.49 4.50 4.50 T:aes128n12t8silcv3 4.30 4.50 4.51 T:aes128n12t8silcv2 4.44 4.50 4.50 T:aes128n8t8clocv2 4.49 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.51 T:aes128otrsv3 4.67 4.68 4.70 T:norx3241v1 5.46 5.51 5.56 T:ketjemajorv2 5.81 5.82 5.84 T:norx3261v2 5.88? 5.92? 7.38? T:norx3261v3 6.26 6.27 6.27 T:aes256otrsv3 6.52? 6.55? 9.78? T:riverkeyakv2 6.59 6.72 6.77 T:ascon128av11 6.60 6.96 6.99 T:ascon96v1 7.35 7.40 7.49 T:ketjeminorv2 7.41 7.42 7.43 T:norx3261v1 7.05? 8.52? 10.29? ascon128av12 9.19? 9.20? 13.36? T:aesjambuv1 9.75 9.79 10.21 T:ascon128v1 9.76? 10.19? 14.21? T:ascon128v11 10.40? 11.83? 12.18? ascon128v12 11.31 11.98 12.04 T:aes128otrsv2 12.05 12.09 12.19 T:aes128n8clocv1 12.70 12.71 12.73 T:aes128n12clocv1 12.70 12.72 12.76 T:aes128n8silcv1 12.71 12.75 12.77 T:aes128n12silcv1 13.54 13.69 13.79 T:aes128otrsv1 14.02 14.09 14.20 T:oceankeyakv1 15.25 15.27 15.31 T:aes128otrpv1 15.25 15.28 15.86 T:aes128otrpv2 15.25 15.29 15.33 T:twine80n6t4clocv2 15.65 15.69 15.72 T:aes256otrsv2 15.66 15.70 15.77 T:aes256otrsv1 15.79 15.80 15.81 T:twine80n6t4clocv3 16.25 16.57 16.71 T:seakeyakv1 19.05 19.07 19.15 T:aes256otrpv1 19.09 19.14 19.18 T:aes256otrpv2 25.12 25.20 25.25 T:proest256otrv1 28.80 28.93 30.77 T:riverkeyakv1 29.51 29.53 29.65 T:ketjesrv1 31.08 31.14 31.25 T:ketjesrv2 54.33 54.42 54.69 T:ketjejrv1 60.46 60.51 60.55 T:proest128otrv1 61.51 61.75 61.81 T:aezv1 64.29 64.34 64.42 T:twine80n6clocv1 74.26 74.39 74.47 T:deoxysneq128128v13 74.78 75.00 76.20 T:deoxyseq128128v13 75.10 75.13 75.20 T:present80n6t4silcv3 95.21 95.26 95.36 T:ketjejrv2 113.10 113.44 113.56 T:deoxyseq256128v13 112.78 113.74 119.03 T:deoxysneq256128v13 131.44 131.54 134.78 T:led80n6t4silcv3 260.19 268.61 276.73 aes256gcmv1 369.93 370.04 370.22 T:acorn128 370.00 370.06 370.38 T:acorn128v2 283.54? 376.37? 668.28? T:acorn128v3 2209.31 2211.78 2213.12 T:present80n6silcv1 2209.24 2211.78 2214.42 T:present80n6t4silcv2 4161.34 4167.04 4171.55 T:led80n6t4silcv2 4172.17 4177.98 4182.32 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.29 0.29 0.29 T:tiaoxinv2 0.29? 0.29? 0.33? T:tiaoxinv1 0.34 0.34 0.35 aegis128l 0.59 0.59 0.60 T:aezv4 0.59 0.59 0.60 aegis256 0.60 0.61 0.62 T:aezv3 0.61 0.61 0.61 T:aegis128 0.62 0.62 0.62 T:aezv5 0.78 0.79 0.80 T:morus1280256v1 0.79 0.79 0.80 T:morus1280128v1 0.80 0.80 0.81 T:morus1280128v2 0.80 0.81 0.81 T:morus1280256v2 0.80? 0.81? 0.89? T:aeadaes128ocbtaglen128v1 0.99 0.99 1.01 T:aes128otrpv3 1.02 1.03 1.03 T:aes128otrcv3 1.10 1.10 1.11 T:deoxysi128v141 0.94? 1.13? 1.37? T:aeadaes192ocbtaglen128v1 1.15 1.15 1.17 T:morus640128v1 1.16 1.16 1.17 T:morus640128v2 1.27 1.29 1.30 T:deoxysi256v141 1.29 1.30 1.32 T:aes256otrpv3 1.33? 1.35? 3.83? T:aeadaes256ocbtaglen128v1 1.37 1.37 1.38 T:aes256otrcv3 1.47 1.48 1.49 T:deoxysneq128128v1 1.61 1.63 1.65 T:deoxysii128v141 1.68 1.69 1.71 T:deoxysneq256128v1 1.71 1.71 1.72 T:aes128gcmv1 1.83 1.84 1.85 T:colm0v1 1.87 1.88 1.90 T:aes256gcmv1 1.90 1.90 1.92 T:deoxysii256v141 1.95 1.96 1.98 T:deoxyseq128128v1 2.14 2.15 2.16 T:deoxyseq256128v1 2.33 2.33 2.34 T:norx6444v3 2.49 2.49 2.51 T:norx6441v2 2.50 2.51 2.52 T:norx6441v3 2.74 2.74 2.75 T:aes128otrsv3 2.88 2.88 2.89 T:norx6441v1 3.57 3.60 3.62 T:seakeyakv2 3.74 3.75 3.77 T:norx6461v3 3.73 3.75 3.80 T:norx6461v2 3.79 3.79 3.79 T:aes256otrsv3 4.18 4.18 4.19 T:norx3241v3 4.17 4.18 4.22 T:norx3241v2 4.34 4.35 4.36 T:lakekeyakv2 4.36 4.38 4.39 T:norx6461v1 4.60 4.60 4.60 T:aes128n12t8clocv3 4.60 4.60 4.60 T:aes128n8t8clocv2 4.60 4.60 4.60 T:aes128n12t8clocv2 4.60 4.61 4.90 T:lakekeyakv1 4.64 4.65 4.65 T:aes128n12t8silcv3 4.65 4.65 4.65 T:aes128n12t8silcv2 4.65 4.65 4.65 T:aes128n8t8silcv2 4.87 4.90 4.93 T:oceankeyakv2 4.93 4.94 4.95 T:norx3241v1 5.26 5.28 5.30 T:norx6444v2 5.68 5.69 5.69 T:norx6444v1 6.34 6.35 6.37 T:norx3261v3 6.34 6.36 6.42 T:norx3261v2 6.84 6.93 7.03 T:ascon128av11 6.92 6.93 6.94 T:ascon96v1 7.32 7.33 7.34 ascon128av12 7.40 7.42 7.62 T:riverkeyakv2 7.84 7.85 7.86 T:norx3261v1 8.31? 8.34? 11.75? T:lunarkeyakv2 8.86 8.86 8.87 T:ketjemajorv2 9.29 9.30 9.30 T:aesjambuv1 9.60 9.63 9.65 T:ketjeminorv2 10.01 10.05 10.08 T:ascon128v11 10.02 10.05 10.10 T:ascon128v1 10.73? 12.59? 15.16? ascon128v12 14.12 14.14 14.16 T:aes128otrsv2 15.26? 15.35? 17.43? T:aes128otrsv1 15.77 15.78 15.80 T:aes128otrpv1 15.81 15.82 15.84 T:twine80n6t4clocv2 15.79 15.85 15.90 T:aes128otrpv2 16.32 16.33 16.34 T:twine80n6t4clocv3 17.96 17.98 18.00 T:aes256otrsv1 18.02 18.06 18.18 T:aes256otrsv2 18.11 18.15 18.50 T:aes128n8clocv1 18.63 18.66 18.67 T:aes128n12clocv1 19.69 19.72 19.81 T:aes256otrpv1 19.69 19.72 19.76 T:aes128n8silcv1 19.68 19.73 20.72 T:aes256otrpv2 19.72 19.74 19.77 T:aes128n12silcv1 20.11 20.31 20.35 T:seakeyakv1 21.83 21.90 21.93 T:oceankeyakv1 27.11 27.13 27.14 T:proest256otrv1 31.86 31.90 31.92 T:riverkeyakv1 33.26 33.30 33.34 T:ketjesrv1 35.35 35.38 35.45 T:ketjesrv2 58.88? 58.95? 83.47? T:ketjejrv1 62.86 62.89 62.93 T:proest128otrv1 74.48? 74.67? 84.71? T:deoxysneq128128v13 76.06 76.07 76.11 T:present80n6t4silcv3 96.92 97.08 99.53 T:twine80n6clocv1 100.51 100.55 100.60 T:ketjejrv2 113.04 114.20 116.00 T:deoxyseq128128v13 113.86 114.23 117.66 T:deoxysneq256128v13 119.39 119.42 119.57 T:aezv1 132.64 132.68 132.77 T:led80n6t4silcv3 172.46 172.79 180.01 T:deoxyseq256128v13 276.86 277.01 282.89 aes256gcmv1 399.47? 407.81? 682.82? T:acorn128v3 417.39 417.45 418.99 T:acorn128v2 419.51 419.60 421.43 T:acorn128 3332.07 3335.13 3337.44 T:present80n6t4silcv2 3333.54 3336.02 3339.15 T:present80n6silcv1 6267.49 6269.60 6272.39 T:led80n6t4silcv2 6277.11 6280.74 6282.67 T:led80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.35 0.35 0.35 aegis128l 0.36 0.36 0.37 T:tiaoxinv2 0.36 0.37 0.37 T:tiaoxinv1 0.58 0.58 0.59 T:aezv4 0.60 0.60 0.60 T:aezv3 0.61 0.61 0.62 T:aegis128 0.61 0.62 0.62 T:aezv5 0.63 0.63 0.64 aegis256 0.80 0.80 0.81 T:morus1280128v1 0.80 0.80 0.81 T:morus1280256v1 0.81 0.82 0.82 T:morus1280128v2 0.81 0.82 0.82 T:morus1280256v2 0.82 0.83 0.90 T:aeadaes128ocbtaglen128v1 1.01 1.02 1.03 T:aes128otrpv3 1.06 1.07 1.08 T:aes128otrcv3 1.16 1.17 1.19 T:morus640128v1 1.18 1.18 1.19 T:morus640128v2 1.32 1.32 1.33 T:aes256otrpv3 0.96? 1.33? 3.53? T:aeadaes192ocbtaglen128v1 1.33 1.34 1.35 T:deoxysi128v141 1.33? 1.35? 3.71? T:aeadaes256ocbtaglen128v1 1.41 1.42 1.42 T:aes256otrcv3 1.51 1.52 1.55 T:deoxysi256v141 1.63 1.65 1.68 T:deoxysii128v141 1.68 1.69 1.73 T:aes128gcmv1 1.72 1.73 1.74 T:deoxysneq128128v1 1.75 1.76 1.77 T:deoxysneq256128v1 1.84 1.86 1.88 T:aes256gcmv1 1.85 1.86 1.89 T:colm0v1 1.94 1.95 1.96 T:deoxysii256v141 2.35 2.35 2.36 T:norx6444v3 2.45 2.46 2.47 T:norx6441v3 2.45 2.47 2.48 T:norx6441v2 2.50 2.52 2.53 T:deoxyseq128128v1 2.63 2.65 2.66 T:deoxyseq256128v1 2.77 2.77 2.77 T:aes128otrsv3 2.87 2.87 2.88 T:norx6441v1 3.60 3.62 3.66 T:seakeyakv2 3.73 3.73 3.74 T:norx6461v3 3.74 3.75 3.76 T:norx6461v2 3.81 3.81 3.83 T:aes256otrsv3 4.15 4.16 4.17 T:norx3241v3 4.15 4.17 4.18 T:norx3241v2 4.34 4.35 4.35 T:norx6461v1 4.36 4.36 4.38 T:lakekeyakv2 4.57 4.57 4.61 T:aes128n12t8clocv3 4.57 4.57 4.61 T:aes128n8t8clocv2 4.57 4.57 4.61 T:aes128n12t8clocv2 4.62 4.62 4.63 T:aes128n12t8silcv2 4.62 4.63 4.64 T:aes128n12t8silcv3 4.62 4.63 4.64 T:aes128n8t8silcv2 4.65 4.67 4.95 T:lakekeyakv1 4.88 4.89 4.89 T:norx3241v1 4.91 4.93 5.01 T:oceankeyakv2 5.26 5.27 5.28 T:norx6444v2 5.62 5.63 5.64 T:norx6444v1 6.31 6.32 6.34 T:norx3261v2 6.34 6.35 6.36 T:norx3261v3 7.03 7.06 7.17 T:ascon128av11 7.02 7.07 7.24 T:ascon96v1 7.26 7.27 7.28 ascon128av12 7.58 7.60 7.62 T:riverkeyakv2 7.79 7.79 7.80 T:norx3261v1 8.36? 8.44? 11.80? T:lunarkeyakv2 9.18 9.20 9.24 T:ketjemajorv2 9.43 9.44 9.44 T:aesjambuv1 9.56 9.60 9.63 T:ketjeminorv2 10.18 10.27 10.35 T:ascon128v11 10.24 10.32 10.46 T:ascon128v1 10.63? 10.65? 15.03? ascon128v12 14.15 14.17 14.22 T:aes128otrsv2 15.52 15.60 15.83 T:aes128otrsv1 15.72 15.73 15.75 T:twine80n6t4clocv2 15.77 15.82 16.02 T:aes128otrpv2 15.81 15.82 15.84 T:aes128otrpv1 16.30 16.31 16.34 T:twine80n6t4clocv3 18.00 18.03 18.06 T:aes256otrsv1 18.01 18.05 18.24 T:aes256otrsv2 18.25 18.27 18.31 T:aes128n12clocv1 18.57 18.63 19.00 T:aes128n8clocv1 19.68 19.68 19.71 T:aes128n8silcv1 19.66 19.69 19.71 T:aes128n12silcv1 19.70 19.71 19.74 T:aes256otrpv1 19.66 19.75 20.83 T:aes256otrpv2 20.22 20.42 20.47 T:seakeyakv1 21.87 21.94 21.98 T:oceankeyakv1 27.05 27.07 27.08 T:proest256otrv1 32.22 32.26 32.35 T:riverkeyakv1 33.84 33.88 33.92 T:ketjesrv1 34.73 34.75 34.82 T:ketjesrv2 59.12? 59.28? 83.76? T:ketjejrv1 62.91 62.94 63.10 T:proest128otrv1 76.41 76.42 76.45 T:present80n6t4silcv3 89.83? 90.44? 101.84? T:deoxysneq128128v13 97.05 97.08 97.29 T:twine80n6clocv1 100.47 100.80 105.95 T:ketjejrv2 113.14 114.02 115.68 T:deoxyseq128128v13 119.60 119.72 120.45 T:aezv1 130.83 130.93 133.71 T:deoxysneq256128v13 133.13 133.17 133.21 T:led80n6t4silcv3 172.66 172.80 173.12 T:deoxyseq256128v13 275.65 275.72 279.53 aes256gcmv1 413.52 413.61 415.92 T:acorn128v2 415.50 415.54 415.93 T:acorn128 395.44? 415.75? 692.84? T:acorn128v3 3330.21 3331.61 3333.98 T:present80n6t4silcv2 3330.57 3332.67 3335.48 T:present80n6silcv1 6265.44 6267.98 6270.81 T:led80n6t4silcv2 6279.98 6285.24 6289.64 T:led80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.35 0.35 0.36 aegis128l 0.35 0.36 0.36 T:aezv4 0.36 0.36 0.38 T:tiaoxinv2 0.36 0.37 0.37 T:tiaoxinv1 0.37 0.37 0.38 T:aezv3 0.38 0.38 0.38 T:aezv5 0.61 0.61 0.61 T:aegis128 0.63 0.63 0.63 aegis256 0.80 0.80 0.81 T:morus1280256v1 0.80 0.81 0.81 T:morus1280128v1 0.81 0.81 0.82 T:morus1280128v2 0.81 0.82 0.82 T:morus1280256v2 0.82 0.82 0.83 T:aeadaes128ocbtaglen128v1 0.95? 0.99? 1.37? T:aeadaes192ocbtaglen128v1 1.01 1.02 1.02 T:aes128otrpv3 1.06 1.07 1.07 T:aes128otrcv3 1.16 1.16 1.17 T:morus640128v1 1.18 1.18 1.18 T:morus640128v2 1.32 1.32 1.32 T:aes256otrpv3 1.32 1.33 1.35 T:deoxysi128v141 1.32 1.34 1.35 T:aeadaes256ocbtaglen128v1 1.41 1.41 1.42 T:aes256otrcv3 1.51 1.52 1.55 T:deoxysi256v141 1.64 1.66 1.68 T:deoxysii128v141 1.68 1.70 1.72 T:aes128gcmv1 1.70 1.71 1.72 T:deoxysneq128128v1 1.73 1.73 1.74 T:deoxysneq256128v1 1.84 1.85 1.86 T:aes256gcmv1 1.86 1.86 1.89 T:colm0v1 1.93 1.94 1.95 T:deoxysii256v141 2.33 2.35 2.35 T:norx6444v3 2.45 2.46 2.46 T:norx6441v3 2.46 2.46 2.47 T:norx6441v2 2.52 2.53 2.54 T:deoxyseq128128v1 2.63 2.63 2.65 T:deoxyseq256128v1 2.76 2.77 2.77 T:aes128otrsv3 2.86 2.86 2.87 T:norx6441v1 3.61 3.64 3.67 T:seakeyakv2 3.71 3.73 3.73 T:norx6461v3 3.74 3.75 3.75 T:norx6461v2 3.81 3.81 3.81 T:aes256otrsv3 4.15 4.15 4.17 T:norx3241v3 4.15 4.16 4.17 T:norx3241v2 4.32 4.33 4.35 T:norx6461v1 4.36 4.37 4.40 T:lakekeyakv2 4.57 4.57 4.60 T:aes128n12t8clocv3 4.57 4.57 4.60 T:aes128n8t8clocv2 4.57 4.60 4.60 T:aes128n12t8clocv2 4.62 4.62 4.62 T:aes128n12t8silcv3 4.62 4.62 4.62 T:aes128n8t8silcv2 4.62 4.62 4.62 T:aes128n12t8silcv2 4.65 4.68 4.96 T:lakekeyakv1 4.88 4.89 4.90 T:norx3241v1 4.91 4.95 4.97 T:oceankeyakv2 5.27 5.28 5.29 T:norx6444v2 5.63 5.64 5.65 T:norx6444v1 6.31 6.31 6.33 T:norx3261v2 6.34 6.35 6.36 T:norx3261v3 7.00 7.04 7.04 T:ascon128av11 7.03 7.04 7.10 T:ascon96v1 7.26? 7.28? 8.24? ascon128av12 7.59 7.60 7.61 T:riverkeyakv2 7.79 7.80 7.80 T:norx3261v1 8.36? 8.40? 11.81? T:lunarkeyakv2 9.18 9.21 9.24 T:ketjemajorv2 9.43 9.44 9.44 T:aesjambuv1 9.58 9.61 9.63 T:ketjeminorv2 10.17 10.20 10.30 T:ascon128v11 10.19 10.22 10.36 T:ascon128v1 10.61? 10.63? 15.02? ascon128v12 14.16 14.17 14.19 T:aes128otrsv2 15.53 15.57 15.61 T:aes128otrsv1 15.70 15.72 15.74 T:twine80n6t4clocv2 15.83 15.84 15.86 T:aes128otrpv1 15.81 15.84 16.10 T:aes128otrpv2 16.30 16.31 16.32 T:twine80n6t4clocv3 17.99 18.02 18.04 T:aes256otrsv1 18.01 18.03 18.07 T:aes256otrsv2 18.23 18.26 18.29 T:aes128n12clocv1 18.58 18.63 19.06 T:aes128n8clocv1 19.64 19.68 19.69 T:aes128n12silcv1 19.67 19.69 19.71 T:aes128n8silcv1 19.69 19.72 19.78 T:aes256otrpv2 19.71 19.73 19.75 T:aes256otrpv1 20.21 20.40 20.43 T:seakeyakv1 21.90 21.95 21.99 T:oceankeyakv1 27.05 27.07 27.12 T:proest256otrv1 32.26 32.33 32.42 T:riverkeyakv1 33.84 33.87 33.91 T:ketjesrv1 34.74 34.77 34.79 T:ketjesrv2 59.21? 59.26? 83.83? T:ketjejrv1 62.89? 62.93? 89.05? T:proest128otrv1 76.41 76.42 76.43 T:present80n6t4silcv3 89.73? 89.98? 101.91? T:deoxysneq128128v13 97.03 97.08 97.23 T:twine80n6clocv1 100.42 100.53 100.88 T:ketjejrv2 113.19 114.13 115.85 T:deoxyseq128128v13 119.44 119.57 119.90 T:aezv1 130.91 131.36 133.85 T:deoxysneq256128v13 133.11 133.14 133.18 T:led80n6t4silcv3 172.66 172.76 173.06 T:deoxyseq256128v13 270.19 271.65 273.43 aes256gcmv1 413.49 413.55 414.05 T:acorn128v2 397.40? 414.98? 684.64? T:acorn128v3 415.50 415.54 415.85 T:acorn128 3329.95 3331.51 3334.01 T:present80n6t4silcv2 3329.86 3332.51 3335.08 T:present80n6silcv1 6265.27 6268.48 6274.93 T:led80n6t4silcv2 6279.12 6281.59 6283.81 T:led80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.66 1.66 1.69 T:aegis128 1.94 1.97 2.03 aegis128l 2.06? 2.12? 2.34? T:tiaoxinv1 2.09? 2.25? 2.38? T:tiaoxinv2 2.28? 2.47? 3.15? aegis256 2.41? 2.53? 2.94? T:aezv5 2.66 2.69 2.75 T:aezv4 2.81 2.84 2.94 T:aezv3 4.03 4.12 4.41 T:morus640128v1 4.19 4.22 4.44 T:morus1280256v1 4.22 4.25 4.28 T:morus1280128v1 4.25 4.31 4.47 T:morus640128v2 4.34 4.34 4.47 T:aes128otrpv3 4.44 4.47 4.56 T:morus1280256v2 4.50 4.56 4.66 T:morus1280128v2 4.62? 4.81? 6.44? T:aeadaes128ocbtaglen128v1 4.97 5.03 5.09 T:deoxysneq128128v1 5.12 5.12 5.16 T:aes128otrsv3 5.19? 5.56? 64.75? T:aeadaes192ocbtaglen128v1 5.59 5.72 5.78 T:colm0v1 5.75 5.78 5.81 T:aes256otrpv3 5.81? 5.88? 8.23? T:deoxysneq256128v1 6.06 6.09 6.16 T:aes128n12t8clocv2 6.06 6.12 6.12 T:aes128n12t8clocv3 6.06 6.12 6.16 T:aes128n8t8clocv2 6.22 6.28 6.34 T:aes128otrcv3 6.84 6.91 6.94 T:deoxysi128v141 6.94 6.97 7.00 T:aes256otrsv3 6.66? 7.00? 63.91? T:aeadaes256ocbtaglen128v1 7.28 7.31 7.34 T:aes128n12t8silcv2 7.31? 7.31? 10.17? T:aes128n12t8silcv3 7.22 7.34 7.38 T:aes128n8t8silcv2 7.97 8.00 8.06 T:deoxysi256v141 8.22 8.28 8.31 T:norx6441v1 8.34 8.38 8.59 T:deoxyseq128128v1 8.34 8.41 8.50 T:aes256otrcv3 8.56? 8.62? 12.09? T:norx6441v2 8.56? 8.66? 11.99? T:norx6441v3 8.69 8.78 8.84 T:deoxysii128v141 9.75 9.84 9.97 T:deoxysii256v141 10.25 10.28 10.38 T:norx3241v1 10.31 10.41 10.62 T:ascon128av11 10.38 10.44 10.53 T:deoxyseq256128v1 10.44 10.50 10.66 T:norx3241v2 10.44 10.50 11.00 T:ascon96v1 10.47 10.59 10.69 T:norx3241v3 11.22? 11.56? 15.63? ascon128av12 12.31 12.44 12.53 T:norx6461v1 12.38? 12.47? 17.53? T:aesjambuv1 12.69 12.75 12.78 T:norx6461v3 12.78 12.88 12.91 T:norx6461v2 13.28 13.34 13.50 T:ascon128v1 13.34 13.41 13.50 T:ascon128v11 14.00 14.09 14.50 ascon128v12 15.31 15.41 15.47 T:norx6444v3 15.56 15.72 16.09 T:lakekeyakv1 15.59 15.72 15.91 T:norx3261v3 15.66 15.75 15.81 T:norx3261v2 16.31 16.34 16.44 T:norx3261v1 18.03? 18.66? 25.41? T:riverkeyakv2 18.84 19.06 19.31 T:lakekeyakv2 22.50 22.53 22.62 T:twine80n6t4clocv2 23.22 23.44 23.84 T:aes128n8clocv1 23.69 23.72 23.78 T:twine80n6t4clocv3 23.91 23.94 24.06 T:aes128n12clocv1 24.03 24.16 24.31 T:aes128otrsv2 25.62 25.75 26.03 T:aes128otrpv2 25.66 25.88 26.09 T:aes128otrpv1 26.09 26.25 26.94 T:aes128otrsv1 27.41 27.47 28.28 T:aes128n12silcv1 27.44 27.56 27.78 T:aes128n8silcv1 29.34 29.62 30.03 T:aes128gcmv1 30.38 30.47 30.59 T:aes256otrsv2 30.09 30.50 30.91 T:aes256otrsv1 32.16 32.41 32.47 T:aes256otrpv1 32.03? 32.47? 44.62? T:aes256otrpv2 33.53 33.75 34.22 T:seakeyakv2 31.06? 34.00? 43.56? T:aes256gcmv1 36.19 36.38 36.47 T:ketjeminorv2 37.19? 37.38? 52.59? T:norx6444v2 40.28 40.44 40.50 T:norx6444v1 51.62 51.75 51.84 T:ketjesrv1 53.97 54.12 54.94 T:oceankeyakv2 56.75 57.06 57.62 T:riverkeyakv1 58.88 58.97 59.31 T:ketjesrv2 61.66 62.38 62.47 T:ketjemajorv2 77.09 77.44 77.59 T:proest256otrv1 77.75 78.38 78.78 T:ketjejrv1 84.28 84.53 84.84 T:deoxysneq128128v13 93.84 94.03 94.19 T:present80n6t4silcv3 107.81 107.91 108.12 T:twine80n6clocv1 122.00 122.25 122.44 T:proest128otrv1 124.34 124.78 125.16 T:aezv1 128.25 128.59 131.28 T:deoxysneq256128v13 133.41 133.59 133.88 T:ketjejrv2 135.88 136.00 136.50 T:lunarkeyakv2 140.81 142.25 144.75 T:deoxyseq128128v13 153.47? 154.62? 177.88? T:seakeyakv1 157.59 158.00 158.25 T:led80n6t4silcv3 214.22 214.75 222.81 T:deoxyseq256128v13 238.16 238.47 239.19 T:oceankeyakv1 312.53 312.69 313.00 aes256gcmv1 1398.28? 1479.69? 2395.22? T:acorn128v3 1487.38 1487.56 1488.06 T:acorn128v2 1546.28 1546.69 1547.34 T:acorn128 3725.81 3731.16 3734.22 T:present80n6t4silcv2 3731.66 3734.31 3735.62 T:present80n6silcv1 6935.19 6967.31 6999.50 T:led80n6t4silcv2 6967.41 6996.25 7029.75 T:led80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.75 1.75 1.78 T:aegis128 2.00 2.03 2.19 aegis128l 2.09 2.12 2.31 T:tiaoxinv1 2.12? 2.34? 2.53? T:tiaoxinv2 2.41 2.44 2.50 T:aezv5 2.50? 2.62? 3.45? aegis256 2.66 2.72 2.72 T:aezv4 2.84 2.88 2.91 T:aezv3 4.16 4.25 4.31 T:morus640128v1 4.38 4.41 4.41 T:aes128otrpv3 4.44 4.56 4.66 T:morus640128v2 4.50 4.59 4.72 T:morus1280256v1 4.53 4.59 4.81 T:morus1280128v1 4.75 4.81 4.94 T:morus1280128v2 4.78 4.84 4.88 T:morus1280256v2 5.22 5.25 5.28 T:aes128otrsv3 5.19? 5.31? 8.41? T:aeadaes128ocbtaglen128v1 5.66? 5.75? 9.62? T:aeadaes192ocbtaglen128v1 5.84 5.88 5.94 T:aes256otrpv3 6.19 6.19 6.22 T:aes128n8t8clocv2 6.22 6.22 6.25 T:aes128n12t8clocv2 6.22 6.22 6.25 T:aes128n12t8clocv3 6.34 6.34 6.56 T:aes128otrcv3 6.25? 6.53? 67.78? T:aeadaes256ocbtaglen128v1 6.44 6.56 6.75 T:colm0v1 7.03 7.09 7.12 T:aes256otrsv3 7.44 7.47 7.50 T:aes128n12t8silcv2 7.44 7.53 7.53 T:aes128n8t8silcv2 7.47? 7.56? 10.36? T:aes128n12t8silcv3 8.34 8.38 8.47 T:norx6441v1 8.50? 8.53? 11.91? T:norx6441v2 8.53? 8.56? 11.91? T:norx6441v3 8.50 8.59 8.72 T:aes256otrcv3 8.53 8.59 8.66 T:deoxysneq128128v1 8.50? 8.66? 11.95? T:deoxysneq256128v1 9.34 9.41 9.44 T:deoxysii128v141 9.47 9.59 9.62 T:deoxysi128v141 10.41 10.47 10.50 T:norx3241v1 10.44 10.50 10.94 T:ascon128av11 10.47 10.59 10.94 T:ascon96v1 10.56 10.62 10.69 T:norx3241v2 10.62 10.69 10.81 T:norx3241v3 11.06 11.12 11.19 T:deoxysi256v141 11.16 11.22 11.34 T:deoxysii256v141 11.16? 11.38? 15.46? ascon128av12 12.03 12.09 12.22 T:deoxyseq128128v1 12.47 12.47 12.56 T:norx6461v1 12.38 12.50 12.78 T:deoxyseq256128v1 12.59? 12.66? 17.84? T:aesjambuv1 12.62 12.69 12.75 T:norx6461v3 12.66 12.75 12.81 T:norx6461v2 13.41 13.53 13.66 T:ascon128v1 13.75 13.81 14.31 T:ascon128v11 13.94 14.19 14.59 ascon128v12 15.12 15.16 15.19 T:norx6444v3 15.44 15.62 15.97 T:lakekeyakv1 15.78 15.88 16.03 T:norx3261v3 15.78 15.88 16.06 T:norx3261v2 16.47 16.53 16.59 T:norx3261v1 18.19? 18.75? 25.67? T:riverkeyakv2 18.88 19.09 19.47 T:lakekeyakv2 22.41 22.69 22.81 T:twine80n6t4clocv2 23.62 23.69 23.75 T:twine80n6t4clocv3 23.81 23.97 24.28 T:aes128n12clocv1 23.69 24.03 24.78 T:aes128n8clocv1 24.22 24.28 24.34 T:aes128otrsv2 25.66 25.81 26.16 T:aes128otrpv2 25.81 25.88 26.06 T:aes128otrpv1 26.62 26.97 27.28 T:aes128otrsv1 27.69 27.88 28.84 T:aes128n12silcv1 27.56 27.97 28.25 T:aes128n8silcv1 29.06 29.41 29.91 T:aes128gcmv1 29.88? 30.44? 42.05? T:aes256gcmv1 30.50 30.53 30.66 T:aes256otrsv2 30.47 30.69 30.78 T:aes256otrsv1 32.12? 32.38? 45.52? T:aes256otrpv2 32.31 32.47 32.81 T:aes256otrpv1 33.59 33.75 33.97 T:seakeyakv2 35.62 35.97 36.16 T:ketjeminorv2 37.59? 37.88? 52.73? T:norx6444v2 40.03 40.12 40.28 T:norx6444v1 52.47 52.66 52.94 T:ketjesrv1 54.44 54.84 55.41 T:oceankeyakv2 57.06 57.34 57.81 T:riverkeyakv1 58.75 58.94 59.38 T:ketjesrv2 62.44 62.53 63.00 T:ketjemajorv2 78.06 78.41 78.75 T:ketjejrv1 78.25 78.62 79.09 T:proest256otrv1 94.19 94.62 94.81 T:present80n6t4silcv3 99.50 99.66 100.06 T:deoxysneq128128v13 107.84 108.16 108.78 T:twine80n6clocv1 122.12 124.75 125.62 T:proest128otrv1 127.72 128.12 128.78 T:aezv1 133.59 133.75 134.09 T:ketjejrv2 135.88 136.25 136.69 T:lunarkeyakv2 142.00 142.34 144.16 T:deoxyseq128128v13 145.00 145.34 148.41 T:deoxysneq256128v13 152.62? 153.66? 179.22? T:seakeyakv1 158.19 158.41 158.66 T:led80n6t4silcv3 214.06 214.69 215.03 T:deoxyseq256128v13 238.31 238.41 239.03 T:oceankeyakv1 311.44 311.81 312.25 aes256gcmv1 1393.44? 1430.62? 2402.06? T:acorn128v3 1483.25 1483.50 1483.81 T:acorn128v2 1542.00 1542.50 1544.38 T:acorn128 3724.41 3726.69 3730.03 T:present80n6t4silcv2 3725.12 3727.97 3733.81 T:present80n6silcv1 6912.06 6927.22 6950.81 T:led80n6t4silcv2 6930.66 6949.00 6974.03 T:led80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.72 1.75 1.78 T:aegis128 1.97 2.03 2.09 aegis128l 2.03? 2.06? 2.62? T:aezv5 2.16 2.19 2.28 T:aezv3 2.16 2.22 2.28 T:aezv4 2.12? 2.31? 2.44? T:tiaoxinv2 2.12? 2.31? 2.69? T:tiaoxinv1 2.44? 2.53? 3.45? aegis256 4.16 4.19 4.28 T:morus640128v1 4.34 4.38 4.38 T:aes128otrpv3 4.47 4.50 4.56 T:morus640128v2 4.47 4.53 4.59 T:morus1280128v1 4.47 4.53 4.59 T:morus1280256v1 4.75 4.78 4.88 T:morus1280128v2 4.78 4.81 4.88 T:morus1280256v2 4.91? 5.16? 5.72? T:aeadaes128ocbtaglen128v1 5.22 5.22 5.25 T:aes128otrsv3 5.72? 5.84? 66.31? T:aeadaes192ocbtaglen128v1 5.84 5.91 5.91 T:aes256otrpv3 6.06 6.09 6.12 T:aes128n12t8clocv2 6.06 6.09 6.12 T:aes128n12t8clocv3 6.06 6.09 6.16 T:aes128n8t8clocv2 6.19 6.22 6.38 T:aeadaes256ocbtaglen128v1 6.34 6.34 6.38 T:aes128otrcv3 6.53? 6.59? 7.34? T:colm0v1 7.03 7.06 7.12 T:aes256otrsv3 7.31? 7.38? 8.31? T:aes128n12t8silcv2 7.34? 7.38? 8.31? T:aes128n8t8silcv2 7.94 8.06 8.22 T:deoxysneq128128v1 8.12? 8.19? 11.38? T:deoxysneq256128v1 8.28 8.34 8.38 T:norx6441v1 8.31? 8.38? 10.40? T:aes128n12t8silcv3 8.50 8.53 8.59 T:aes256otrcv3 8.44? 8.56? 11.88? T:norx6441v2 8.50? 8.56? 11.95? T:norx6441v3 9.34 9.41 9.47 T:deoxysii128v141 9.50 9.59 10.09 T:deoxysi128v141 10.44 10.50 10.53 T:norx3241v1 10.41 10.53 10.81 T:ascon128av11 10.56 10.59 10.69 T:norx3241v2 10.50 10.62 10.75 T:ascon96v1 10.59 10.66 10.75 T:norx3241v3 11.03 11.09 11.19 T:deoxysi256v141 11.16 11.19 11.31 T:deoxysii256v141 11.12? 11.47? 15.54? ascon128av12 12.03 12.12 12.22 T:deoxyseq128128v1 12.38 12.47 12.88 T:deoxyseq256128v1 12.50 12.56 12.62 T:norx6461v1 12.59 12.62 12.72 T:norx6461v3 12.59? 12.62? 17.80? T:aesjambuv1 12.66 12.72 12.81 T:norx6461v2 13.38 13.56 13.69 T:ascon128v1 13.50 13.66 13.88 T:ascon128v11 13.88 13.94 14.16 ascon128v12 15.06 15.19 15.25 T:norx6444v3 15.47 15.56 15.84 T:lakekeyakv1 15.81 15.88 15.94 T:norx3261v2 15.81 15.91 15.97 T:norx3261v3 16.47 16.50 16.56 T:norx3261v1 18.59? 19.00? 25.86? T:riverkeyakv2 19.00 19.09 19.31 T:lakekeyakv2 22.12 22.19 22.47 T:twine80n6t4clocv2 23.66 23.69 23.72 T:twine80n6t4clocv3 23.84 23.91 24.69 T:aes128n8clocv1 23.78 23.94 24.25 T:aes128n12clocv1 24.28 24.41 24.66 T:aes128otrsv2 25.88 26.06 26.34 T:aes128otrpv1 25.84 26.09 26.22 T:aes128otrpv2 26.72 26.91 27.09 T:aes128otrsv1 27.53 27.59 27.78 T:aes128n12silcv1 27.53 27.91 28.09 T:aes128n8silcv1 28.78 28.84 29.00 T:aes128gcmv1 29.53? 29.97? 41.80? T:aes256gcmv1 30.59 30.72 31.03 T:aes256otrsv2 30.50 31.00 31.16 T:aes256otrsv1 32.38 32.53 32.78 T:aes256otrpv1 32.34? 32.66? 45.55? T:aes256otrpv2 33.81 33.88 34.06 T:seakeyakv2 35.81 36.16 36.34 T:ketjeminorv2 37.78? 38.03? 52.99? T:norx6444v2 40.09 40.19 40.25 T:norx6444v1 52.03 52.78 53.09 T:ketjesrv1 54.56? 55.16? 78.75? T:oceankeyakv2 57.34 57.72 59.25 T:riverkeyakv1 58.34 59.00 59.47 T:ketjesrv2 62.50 62.88 63.34 T:ketjemajorv2 76.03 76.44 76.94 T:proest256otrv1 77.97 78.50 79.06 T:ketjejrv1 94.19 94.41 94.59 T:present80n6t4silcv3 99.19 99.56 99.94 T:deoxysneq128128v13 107.78 108.25 108.50 T:twine80n6clocv1 122.16 122.22 122.62 T:proest128otrv1 127.47 127.88 128.47 T:aezv1 133.59 133.78 134.00 T:ketjejrv2 136.22 136.56 136.78 T:lunarkeyakv2 141.56 142.81 144.66 T:deoxyseq128128v13 145.44 146.88 148.69 T:deoxysneq256128v13 152.16 153.38 154.44 T:seakeyakv1 157.91 158.03 158.28 T:led80n6t4silcv3 214.44 214.91 215.56 T:deoxyseq256128v13 238.59 238.88 239.50 T:oceankeyakv1 305.66 306.00 306.22 aes256gcmv1 1483.53 1483.81 1484.69 T:acorn128v2 1542.16 1542.34 1543.50 T:acorn128 1394.03? 1558.88? 2393.75? T:acorn128v3 3724.00 3724.69 3728.88 T:present80n6t4silcv2 3724.62 3727.06 3732.09 T:present80n6silcv1 6906.28 6921.19 6938.88 T:led80n6t4silcv2 6944.38 6955.59 6976.88 T:led80n6silcv1