VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20250922

[Page version: 20251103 11:56:53]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.17 0.17 0.18 T:tiaoxinv1 0.16? 0.18? 0.19? T:tiaoxinv2 0.20 0.20 0.21 aegis128l 0.14? 0.25? 0.36? T:aeadaes128ocbtaglen128v1 0.17? 0.33? 0.43? T:aeadaes256ocbtaglen128v1 0.37 0.37 0.38 T:aegis128 0.37 0.38 0.38 T:aegis256 0.38 0.39 0.39 aegis256 0.39 0.39 0.40 T:aezv4 0.39 0.40 0.41 T:aezv3 0.41 0.42 0.43 T:aezv5 0.13? 0.42? 0.46? T:aeadaes192ocbtaglen128v1 0.44 0.45 0.46 T:aes128otrpv3 0.45 0.46 0.46 T:aes128otrsv3 0.45 0.46 0.47 T:aes128otrcv3 0.59 0.60 0.61 T:aes256otrpv3 0.59 0.60 0.60 T:aes256otrsv3 0.59 0.60 0.61 T:aes256otrcv3 0.57? 0.63? 0.67? T:deoxysneq128128v1 0.59? 0.64? 0.74? T:deoxysi128v141 0.60? 0.70? 0.81? T:deoxysi256v141 0.68 0.72 0.74 T:deoxysneq256128v1 0.77 0.78 0.79 T:morus1280256v2 0.78 0.79 0.80 T:morus1280128v2 0.78 0.79 0.80 T:morus1280256v1 0.79 0.79 0.80 T:morus1280128v1 0.94 0.95 0.97 T:norx6444v3 0.98 1.01 1.02 T:morus640128v2 0.99 1.01 1.01 T:morus640128v1 1.09 1.10 1.20 T:deoxysii128v141 1.23? 1.30? 1.49? T:deoxyseq128128v1 1.29? 1.39? 1.47? T:deoxysii256v141 1.52 1.52 1.54 T:colm0v1 1.59 1.64 1.66 T:deoxyseq256128v1 1.64 1.68 1.72 T:lunarkeyakv2 1.71 1.72 1.72 T:aes128gcmv1 1.84 1.84 1.85 aes256gcmv1 2.26 2.28 2.29 T:seakeyakv2 2.33 2.34 2.36 T:norx6441v3 2.30 2.35 2.40 T:oceankeyakv2 2.34 2.36 2.37 T:norx6441v2 2.68 2.69 2.69 T:aes128n8t8silcv2 2.68 2.69 2.69 T:aes128n12t8clocv3 2.68 2.69 2.70 T:aes128n12t8silcv2 2.68 2.69 2.69 T:aes128n12t8silcv3 2.68 2.69 2.69 T:aes128n8t8clocv2 2.69 2.69 2.69 T:aes128n12t8clocv2 2.81 2.83 2.83 T:norx6441v1 3.33 3.37 3.43 T:lakekeyakv1 3.42 3.46 3.48 T:norx6444v2 3.50 3.52 3.53 T:norx6461v3 3.52 3.53 3.55 T:norx6461v2 3.67 3.69 3.69 T:norx3241v2 3.68 3.69 3.70 T:norx3241v3 3.83 3.85 3.86 T:norx6444v1 3.96 4.00 4.04 T:lakekeyakv2 4.22 4.23 4.25 T:norx6461v1 4.41 4.42 4.45 T:norx3241v1 5.36 5.37 5.38 T:aesjambuv1 5.50 5.52 5.53 T:norx3261v3 5.49 5.52 5.57 T:acorn128v2 5.53 5.55 5.57 T:norx3261v2 5.69 5.69 5.69 T:ascon128av11 5.70 5.73 6.01 T:ketjemajorv2 5.75 5.76 5.76 T:acorn128v3 5.84 5.86 5.88 ascon128av12 5.94 5.94 5.95 T:ascon96v1 7.40 7.41 7.42 T:norx3261v1 7.95 7.97 8.03 T:riverkeyakv2 8.03 8.11 8.19 T:ketjeminorv2 8.62 8.62 8.67 ascon128v12 8.63 8.63 8.63 T:ascon128v1 8.63 8.63 8.64 T:ascon128v11 9.73 9.78 9.80 T:seakeyakv1 8.62? 9.78? 12.35? T:oceankeyakv1 14.24 14.30 14.33 T:aes128otrsv2 14.24 14.33 14.42 T:aes128otrsv1 14.56 14.61 14.63 T:twine80n6t4clocv3 15.26 15.29 15.35 T:aes128otrpv2 15.34 15.36 15.40 T:aes128otrpv1 15.54 15.55 15.56 T:twine80n6t4clocv2 17.52 17.55 17.59 T:proest256otrv1 17.82 17.86 17.89 T:aes256otrsv2 17.79 17.86 17.90 T:aes256otrpv2 17.88 17.94 17.98 T:aes256otrpv1 17.94 17.97 18.02 T:aes256otrsv1 21.79 21.85 21.89 T:aes128n8clocv1 21.82 21.87 21.96 T:aes128n12clocv1 23.36 23.42 23.67 T:aeadaes128ocbtaglen64v1 23.29 23.49 23.57 T:aeadaes128ocbtaglen96v1 24.05 24.11 24.49 T:aes128n12silcv1 24.02 24.11 24.13 T:aes128n8silcv1 27.07 27.12 27.30 T:aeadaes192ocbtaglen96v1 27.08 27.30 27.61 T:aeadaes192ocbtaglen64v1 27.36 27.57 27.65 T:riverkeyakv1 31.18 31.29 31.39 T:aeadaes256ocbtaglen64v1 31.27 31.31 31.34 T:aeadaes256ocbtaglen96v1 31.46 31.48 31.73 T:ketjesrv2 32.31 32.38 32.46 T:ketjesrv1 46.68 46.82 47.43 T:proest128otrv1 50.86 51.18 51.36 T:ketjejrv1 52.94 53.03 53.22 T:colm127v1 71.78 71.81 71.85 T:present80n6t4silcv3 76.20 77.81 78.01 T:deoxysneq128128v13 101.42 102.22 103.54 T:ketjejrv2 111.78 112.42 112.59 T:deoxysneq256128v13 125.80 125.89 126.00 T:led80n6t4silcv3 145.80 146.67 149.71 T:deoxyseq128128v13 147.10 147.32 148.93 T:twine80n6clocv1 180.92 181.22 181.41 T:aezv1 224.71 225.72 232.01 T:deoxyseq256128v13 396.96 399.50 428.90 T:acorn128 3946.63 3948.76 3988.43 T:present80n6t4silcv2 3991.27 4006.74 4016.11 T:present80n6silcv1 8758.00 8779.60 8823.01 T:led80n6t4silcv2 8787.33 8813.11 8841.44 T:led80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.11? 0.21? 0.30? T:aeadaes128ocbtaglen128v1 0.22 0.22 0.23 aegis128l 0.16? 0.27? 0.40? T:aeadaes256ocbtaglen128v1 0.33 0.34 0.35 T:tiaoxinv1 0.33 0.35 0.36 T:tiaoxinv2 0.37 0.37 0.38 T:aegis128 0.38 0.38 0.39 T:aegis256 0.38? 0.39? 0.43? aegis256 0.39 0.39 0.40 T:aezv4 0.40 0.41 0.41 T:aezv3 0.41 0.42 0.42 T:aezv5 0.34? 0.45? 0.49? T:aeadaes192ocbtaglen128v1 0.47 0.47 0.48 T:aes128otrcv3 0.48 0.49 0.49 T:aes128otrsv3 0.49 0.50 0.50 T:aes128otrpv3 0.64 0.64 0.65 T:aes256otrcv3 0.64 0.64 0.65 T:aes256otrsv3 0.65 0.66 0.67 T:aes256otrpv3 0.60? 0.69? 0.76? T:deoxysi128v141 0.68 0.72 0.74 T:deoxysneq128128v1 0.73 0.74 0.75 T:deoxysneq256128v1 0.65? 0.76? 0.85? T:deoxysi256v141 0.77 0.78 0.80 T:morus1280256v2 0.77 0.78 0.79 T:morus1280128v2 0.77 0.78 0.79 T:morus1280128v1 0.76 0.79 0.80 T:morus1280256v1 0.91 0.93 0.94 T:norx6444v3 0.99 1.01 1.02 T:morus640128v1 1.00 1.01 1.02 T:morus640128v2 1.09? 1.24? 1.35? T:deoxysii128v141 1.25? 1.38? 1.46? T:deoxysii256v141 1.33 1.40 1.47 T:colm0v1 1.52 1.55 1.59 T:deoxyseq128128v1 1.60 1.61 1.67 T:deoxyseq256128v1 1.71 1.72 1.72 T:aes128gcmv1 1.72 1.77 1.83 T:lunarkeyakv2 1.82 1.83 1.83 aes256gcmv1 2.28 2.29 2.30 T:norx6441v3 2.28 2.29 2.30 T:norx6441v2 2.33 2.36 2.41 T:seakeyakv2 2.44 2.49 2.54 T:oceankeyakv2 2.62 2.62 2.70 T:aes128n12t8silcv2 2.62 2.62 2.70 T:aes128n8t8silcv2 2.62 2.62 2.70 T:aes128n12t8silcv3 2.62 2.63 2.69 T:aes128n12t8clocv2 2.62 2.63 2.69 T:aes128n12t8clocv3 2.62 2.63 2.69 T:aes128n8t8clocv2 2.75 2.76 2.78 T:norx6441v1 3.39 3.41 3.43 T:norx6444v2 3.38 3.43 3.48 T:lakekeyakv1 3.44 3.46 3.47 T:norx6461v3 3.45 3.47 3.47 T:norx6461v2 3.59 3.61 3.62 T:norx3241v3 3.60 3.61 3.63 T:norx3241v2 3.68 3.71 3.79 T:lakekeyakv2 3.76 3.80 3.84 T:norx6444v1 4.16 4.18 4.19 T:norx6461v1 4.33 4.34 4.35 T:norx3241v1 5.29 5.37 5.40 T:ketjemajorv2 5.42 5.44 5.46 T:norx3261v3 5.49 5.51 5.53 T:acorn128v3 5.52 5.54 5.56 T:norx3261v2 5.67 5.67 5.67 T:aesjambuv1 5.74 5.76 5.78 T:acorn128v2 5.81 5.82 5.82 T:ascon128av11 5.95 5.97 5.97 T:ascon96v1 6.23 6.24 6.26 ascon128av12 7.25 7.27 7.27 T:norx3261v1 7.60 7.74 7.82 T:ketjeminorv2 8.37 8.38 8.38 ascon128v12 8.75 8.76 8.78 T:ascon128v11 8.75 8.76 8.78 T:ascon128v1 9.02 9.06 9.11 T:riverkeyakv2 8.77? 10.01? 12.43? T:oceankeyakv1 9.97 10.06 10.17 T:seakeyakv1 14.23 14.26 14.29 T:aes128otrsv2 14.46 14.51 14.54 T:aes128otrsv1 14.50 14.53 14.60 T:twine80n6t4clocv3 15.44 15.51 15.56 T:twine80n6t4clocv2 15.84 15.89 15.95 T:aes128otrpv2 15.91 15.95 15.99 T:aes128otrpv1 17.52 17.56 17.60 T:proest256otrv1 17.73 17.81 17.84 T:aes256otrsv2 17.77 17.83 17.86 T:aes256otrpv2 17.95 18.00 18.06 T:aes256otrsv1 18.05 18.11 18.13 T:aes256otrpv1 23.50 23.54 23.64 T:aes128n12clocv1 23.62 23.67 23.70 T:aes128n8clocv1 24.16 24.25 24.29 T:aes128n8silcv1 24.21 24.29 24.72 T:aes128n12silcv1 27.04 27.28 27.60 T:riverkeyakv1 27.30 27.37 27.67 T:ketjesrv2 30.97 31.01 31.12 T:aeadaes128ocbtaglen96v1 31.00 31.03 31.29 T:aeadaes128ocbtaglen64v1 33.51 33.69 33.76 T:ketjesrv1 36.45 36.48 36.87 T:aeadaes192ocbtaglen64v1 36.64 36.81 36.91 T:aeadaes192ocbtaglen96v1 42.23 42.30 42.49 T:aeadaes256ocbtaglen96v1 41.99 42.52 42.74 T:aeadaes256ocbtaglen64v1 46.32 46.51 47.46 T:proest128otrv1 55.04 55.14 55.52 T:ketjejrv1 66.78 66.88 67.80 T:colm127v1 71.60 71.89 74.87 T:present80n6t4silcv3 101.02 102.23 102.60 T:deoxysneq128128v13 103.99 105.63 105.76 T:ketjejrv2 125.81 125.99 126.13 T:led80n6t4silcv3 138.84 138.99 139.15 T:deoxysneq256128v13 144.31 144.97 150.60 T:deoxyseq128128v13 147.67 148.27 149.20 T:twine80n6clocv1 180.55 180.93 181.03 T:aezv1 224.41 224.61 228.28 T:deoxyseq256128v13 385.71? 388.97? 453.45? T:acorn128 3958.39 3958.76 3958.96 T:present80n6t4silcv2 4000.92 4003.41 4007.76 T:present80n6silcv1 8766.43 8807.16 8820.78 T:led80n6silcv1 8792.58 8826.02 8862.19 T:led80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.09? 0.14? 0.15? T:aezv3 0.10? 0.15? 0.15? T:aezv4 0.15? 0.16? 0.20? T:aezv5 0.19? 0.20? 0.25? T:aeadaes128ocbtaglen128v1 0.26? 0.27? 0.29? aegis128l 0.01? 0.27? 0.54? T:aeadaes256ocbtaglen128v1 0.33 0.34 0.34 T:tiaoxinv1 0.33 0.34 0.35 T:tiaoxinv2 0.37 0.37 0.38 T:aegis128 0.38 0.39 0.39 T:aegis256 0.43 0.44 0.46 aegis256 0.42? 0.46? 0.71? T:aeadaes192ocbtaglen128v1 0.46 0.47 0.48 T:aes128otrcv3 0.48 0.49 0.50 T:aes128otrsv3 0.49 0.50 0.50 T:aes128otrpv3 0.63 0.64 0.65 T:aes256otrcv3 0.64 0.65 0.65 T:aes256otrsv3 0.65 0.65 0.66 T:aes256otrpv3 0.69 0.71 0.73 T:deoxysneq128128v1 0.74 0.74 0.76 T:deoxysneq256128v1 0.65? 0.76? 0.90? T:deoxysi256v141 0.59? 0.76? 0.78? T:deoxysi128v141 0.77 0.78 0.79 T:morus1280256v2 0.77 0.78 0.79 T:morus1280256v1 0.77 0.78 0.79 T:morus1280128v2 0.77 0.78 0.79 T:morus1280128v1 0.92 0.93 0.95 T:norx6444v3 0.99 1.00 1.02 T:morus640128v2 1.00 1.01 1.03 T:morus640128v1 1.07? 1.24? 1.33? T:deoxysii128v141 1.23? 1.37? 1.46? T:deoxysii256v141 1.34 1.41 1.46 T:colm0v1 1.51 1.54 1.56 T:deoxyseq128128v1 1.58 1.60 1.65 T:deoxyseq256128v1 1.71 1.72 1.72 T:aes128gcmv1 1.73 1.77 1.81 T:lunarkeyakv2 1.82 1.82 1.83 aes256gcmv1 2.27 2.28 2.30 T:norx6441v3 2.29 2.30 2.30 T:norx6441v2 2.37 2.40 2.44 T:seakeyakv2 2.48 2.52 2.54 T:oceankeyakv2 2.55 2.63 2.70 T:aes128n12t8silcv2 2.62 2.63 2.70 T:aes128n8t8silcv2 2.55 2.70 2.70 T:aes128n12t8silcv3 2.55 2.70 2.70 T:aes128n12t8clocv3 2.55 2.70 2.70 T:aes128n12t8clocv2 2.55 2.70 2.70 T:aes128n8t8clocv2 2.74 2.75 2.77 T:norx6441v1 3.43 3.44 3.47 T:norx6444v2 3.42 3.44 3.47 T:lakekeyakv1 3.44 3.46 3.47 T:norx6461v3 3.45 3.47 3.48 T:norx6461v2 3.59 3.60 3.61 T:norx3241v3 3.60 3.61 3.62 T:norx3241v2 3.67 3.71 3.77 T:lakekeyakv2 3.83 3.84 3.86 T:norx6444v1 4.16 4.17 4.17 T:norx6461v1 4.33 4.34 4.35 T:norx3241v1 5.34 5.37 5.44 T:ketjemajorv2 5.41 5.43 5.45 T:norx3261v3 5.50 5.51 5.52 T:acorn128v3 5.52 5.54 5.56 T:norx3261v2 5.67 5.67 5.67 T:aesjambuv1 5.75 5.76 5.78 T:acorn128v2 5.82 5.84 5.85 T:ascon128av11 5.95 5.95 5.97 T:ascon96v1 6.24 6.24 6.26 ascon128av12 7.25 7.26 7.26 T:norx3261v1 7.65 7.79 7.89 T:ketjeminorv2 8.38 8.38 8.38 ascon128v12 8.75 8.78 8.78 T:ascon128v1 8.75 8.78 8.78 T:ascon128v11 9.06 9.07 9.11 T:riverkeyakv2 8.78? 10.01? 12.35? T:oceankeyakv1 9.97 10.02 10.07 T:seakeyakv1 14.27 14.31 14.34 T:aes128otrsv2 14.47 14.53 14.58 T:aes128otrsv1 14.48 14.55 14.62 T:twine80n6t4clocv3 15.45 15.48 15.56 T:twine80n6t4clocv2 15.90 15.97 16.16 T:aes128otrpv2 15.97 16.06 16.17 T:aes128otrpv1 17.55 17.59 17.60 T:proest256otrv1 17.77 17.84 17.92 T:aes256otrsv2 17.80 17.88 17.92 T:aes256otrpv2 17.94 17.96 18.00 T:aes256otrsv1 18.09 18.13 18.15 T:aes256otrpv1 23.56 23.60 23.63 T:aes128n12clocv1 23.63 23.66 23.72 T:aes128n8clocv1 24.23 24.28 24.30 T:aes128n8silcv1 24.23 24.30 24.71 T:aes128n12silcv1 27.10 27.22 27.56 T:riverkeyakv1 27.29 27.44 27.76 T:ketjesrv2 31.12 31.15 31.18 T:aeadaes128ocbtaglen96v1 31.19 31.20 31.31 T:aeadaes128ocbtaglen64v1 33.74 33.82 34.00 T:ketjesrv1 36.48 36.57 36.58 T:aeadaes192ocbtaglen64v1 36.54 36.73 37.17 T:aeadaes192ocbtaglen96v1 42.23 42.25 42.27 T:aeadaes256ocbtaglen64v1 42.22 42.27 42.43 T:aeadaes256ocbtaglen96v1 46.41 47.44 47.61 T:proest128otrv1 55.14 55.56 55.83 T:ketjejrv1 65.75 66.38 67.04 T:colm127v1 71.57 71.81 74.87 T:present80n6t4silcv3 101.35 101.99 102.74 T:deoxysneq128128v13 104.10 106.47 106.71 T:ketjejrv2 125.87 125.95 126.06 T:led80n6t4silcv3 138.46 139.02 140.91 T:deoxysneq256128v13 142.13 147.78 149.34 T:deoxyseq128128v13 148.83 148.92 149.73 T:twine80n6clocv1 180.60 180.89 181.39 T:aezv1 224.63 224.91 225.35 T:deoxyseq256128v13 380.50 385.48 391.49 T:acorn128 3946.61 3957.64 3958.50 T:present80n6t4silcv2 3989.88 4003.11 4007.41 T:present80n6silcv1 8780.54 8795.89 8815.62 T:led80n6silcv1 8775.41 8809.58 8827.00 T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.12? 0.14? 0.15? T:tiaoxinv2 0.13? 0.14? 0.15? T:tiaoxinv1 0.19 0.19 0.20 aegis128l 0.16? 0.23? 0.33? T:aeadaes128ocbtaglen128v1 0.27 0.27 0.28 T:aezv4 0.27 0.28 0.30 T:aezv3 0.28 0.29 0.29 T:aezv5 0.17? 0.30? 0.40? T:aeadaes256ocbtaglen128v1 0.36 0.36 0.37 aegis256 0.36 0.36 0.37 T:aegis128 0.36 0.36 0.37 T:aegis256 0.33? 0.41? 0.49? T:aeadaes192ocbtaglen128v1 0.46 0.47 0.48 T:aes128otrpv3 0.46 0.47 0.48 T:aes128otrcv3 0.58 0.59 0.60 T:aes256otrpv3 0.61 0.61 0.62 T:aes256otrcv3 0.54? 0.66? 0.71? T:deoxysi128v141 0.62? 0.69? 0.72? T:deoxysneq128128v1 0.62? 0.74? 0.79? T:deoxysi256v141 0.72 0.75 0.78 T:deoxysneq256128v1 0.74 0.75 0.75 T:morus1280128v2 0.74 0.75 0.76 T:morus1280256v2 0.74 0.75 0.76 T:morus1280128v1 0.75 0.75 0.76 T:morus1280256v1 0.78? 0.91? 1.00? T:deoxysii128v141 0.96 0.98 0.98 T:morus640128v1 0.97 0.98 1.01 T:morus640128v2 0.97? 1.05? 1.14? T:deoxysii256v141 0.99 1.06 1.07 T:deoxyseq128128v1 1.06 1.07 1.08 T:colm0v1 1.09 1.10 1.10 T:aes128gcmv1 1.14 1.15 1.15 aes256gcmv1 1.19 1.24 1.25 T:deoxyseq256128v1 1.54 1.54 1.55 T:aes128otrsv3 1.64 1.65 1.66 T:norx6444v3 1.91 1.93 1.95 T:seakeyakv2 1.94 1.98 2.03 T:oceankeyakv2 2.10 2.11 2.11 T:aes256otrsv3 2.34 2.35 2.36 T:norx6441v3 2.35 2.36 2.37 T:norx6441v2 2.36 2.39 2.42 T:lunarkeyakv2 2.65 2.65 2.66 T:aes128n12t8silcv2 2.65 2.65 2.66 T:aes128n12t8silcv3 2.65 2.66 2.66 T:aes128n8t8silcv2 2.65 2.66 2.66 T:aes128n12t8clocv3 2.66 2.66 2.66 T:aes128n8t8clocv2 2.66 2.66 2.66 T:aes128n12t8clocv2 2.83 2.83 2.85 T:norx6441v1 3.13 3.18 3.20 T:lakekeyakv1 3.40 3.41 3.43 T:lakekeyakv2 3.52 3.52 3.53 T:norx6461v3 3.53 3.54 3.55 T:norx6461v2 3.54 3.57 3.60 T:norx6444v2 3.68 3.69 3.69 T:norx3241v3 3.68 3.69 3.70 T:norx3241v2 3.75 3.76 3.76 T:norx6444v1 4.22 4.23 4.24 T:norx6461v1 4.42 4.43 4.44 T:norx3241v1 5.01 5.07 5.14 T:ketjemajorv2 5.41 5.42 5.44 T:aesjambuv1 5.51 5.53 5.55 T:acorn128v2 5.53 5.53 5.54 T:norx3261v2 5.55 5.56 5.57 T:norx3261v3 5.67 5.69 5.70 T:riverkeyakv2 5.69 5.71 5.72 T:acorn128v3 5.72 5.73 5.73 T:ascon128av11 5.83 5.84 5.85 ascon128av12 5.84 5.85 5.86 T:ascon96v1 7.03 7.07 7.14 T:ketjeminorv2 7.40 7.40 7.42 T:norx3261v1 8.44 8.45 8.46 ascon128v12 8.69 8.70 8.71 T:ascon128v11 8.69 8.70 8.71 T:ascon128v1 9.68 9.71 9.79 T:seakeyakv1 9.19? 9.81? 11.52? T:oceankeyakv1 13.51 13.55 13.56 T:aes128otrsv1 13.55 13.60 13.63 T:aes128otrsv2 14.35 14.37 14.42 T:aes128otrpv2 14.37 14.39 14.42 T:aes128otrpv1 14.39 14.40 14.42 T:twine80n6t4clocv3 15.26 15.27 15.28 T:twine80n6t4clocv2 16.64 16.68 16.70 T:aes128n12clocv1 16.66 16.70 16.72 T:aes128n8clocv1 17.08 17.13 17.17 T:aes256otrsv2 17.20 17.23 17.26 T:aes256otrsv1 17.66 17.68 17.72 T:proest256otrv1 18.23 18.26 18.43 T:aes128n12silcv1 18.23 18.27 18.29 T:aes128n8silcv1 18.26 18.28 18.30 T:aes256otrpv1 18.24 18.28 18.33 T:aes256otrpv2 23.28 23.29 23.45 T:aeadaes128ocbtaglen64v1 23.32 23.37 23.42 T:aeadaes128ocbtaglen96v1 25.61 25.87 26.03 T:riverkeyakv1 27.17 27.20 27.25 T:aeadaes192ocbtaglen96v1 27.20 27.28 27.42 T:aeadaes192ocbtaglen64v1 28.26 28.29 28.37 T:ketjesrv2 29.72 29.92 30.03 T:ketjesrv1 31.09 31.23 31.28 T:aeadaes256ocbtaglen64v1 31.03 31.32 31.34 T:aeadaes256ocbtaglen96v1 38.07 38.17 38.20 T:colm127v1 46.88 46.96 47.88 T:proest128otrv1 49.19 49.39 49.45 T:ketjejrv1 71.03 71.05 71.08 T:present80n6t4silcv3 76.26 77.97 78.19 T:deoxysneq128128v13 103.39 103.54 104.01 T:ketjejrv2 108.28 109.34 112.09 T:deoxyseq128128v13 110.21 110.31 111.62 T:twine80n6clocv1 111.97 112.45 113.60 T:deoxysneq256128v13 119.57 119.73 119.87 T:aezv1 125.11 125.14 125.23 T:led80n6t4silcv3 167.76 168.27 172.30 T:deoxyseq256128v13 390.53 394.15 405.33 T:acorn128 2985.84 2986.69 2989.19 T:present80n6silcv1 2988.56 2993.83 2994.21 T:present80n6t4silcv2 6570.93 6585.83 6604.79 T:led80n6t4silcv2 6562.47 6609.48 6638.28 T:led80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.12? 0.20? 0.31? T:aeadaes128ocbtaglen128v1 0.20 0.20 0.20 aegis128l 0.21 0.22 0.23 T:tiaoxinv2 0.22 0.22 0.23 T:tiaoxinv1 0.13? 0.27? 0.42? T:aeadaes256ocbtaglen128v1 0.27 0.28 0.28 T:aezv4 0.28 0.29 0.29 T:aezv5 0.28 0.29 0.30 T:aezv3 0.35 0.36 0.36 aegis256 0.36 0.36 0.37 T:aegis128 0.36 0.36 0.37 T:aegis256 0.29? 0.43? 0.57? T:aeadaes192ocbtaglen128v1 0.47 0.48 0.49 T:aes128otrcv3 0.48 0.48 0.49 T:aes128otrpv3 0.62 0.62 0.63 T:aes256otrpv3 0.64 0.64 0.65 T:aes256otrcv3 0.60? 0.68? 0.75? T:deoxysi128v141 0.61? 0.69? 0.70? T:deoxysneq128128v1 0.60? 0.72? 0.80? T:deoxysi256v141 0.72 0.73 0.74 T:morus1280256v1 0.73 0.73 0.74 T:morus1280256v2 0.73 0.74 0.74 T:morus1280128v2 0.74 0.74 0.75 T:morus1280128v1 0.70? 0.77? 0.79? T:deoxysneq256128v1 0.85? 0.96? 1.00? T:deoxysii128v141 0.97 1.00 1.04 T:colm0v1 0.98 1.01 1.02 T:morus640128v1 1.00 1.01 1.02 T:morus640128v2 1.03 1.03 1.06 T:deoxysii256v141 1.08 1.09 1.11 T:aes128gcmv1 1.13 1.13 1.13 aes256gcmv1 1.09 1.14 1.15 T:deoxyseq128128v1 1.21 1.24 1.25 T:deoxyseq256128v1 1.55 1.55 1.56 T:aes128otrsv3 1.63 1.65 1.66 T:norx6444v3 1.94 1.96 2.00 T:seakeyakv2 1.98 2.00 2.04 T:oceankeyakv2 2.13 2.13 2.14 T:aes256otrsv3 2.32 2.33 2.34 T:norx6441v2 2.32 2.33 2.34 T:norx6441v3 2.38 2.43 2.46 T:lunarkeyakv2 2.62 2.62 2.66 T:aes128n12t8clocv3 2.62 2.62 2.63 T:aes128n12t8silcv2 2.62 2.63 2.67 T:aes128n12t8silcv3 2.62 2.63 2.63 T:aes128n12t8clocv2 2.62 2.63 2.67 T:aes128n8t8silcv2 2.62 2.63 2.66 T:aes128n8t8clocv2 2.79 2.80 2.81 T:norx6441v1 3.20 3.20 3.24 T:lakekeyakv1 3.44 3.45 3.48 T:lakekeyakv2 3.49 3.50 3.51 T:norx6461v2 3.49 3.50 3.51 T:norx6461v3 3.53 3.54 3.57 T:norx6444v2 3.65 3.65 3.66 T:norx3241v3 3.65 3.66 3.66 T:norx3241v2 3.71 3.74 3.76 T:norx6444v1 4.19 4.20 4.21 T:norx6461v1 4.37 4.38 4.40 T:norx3241v1 4.85 4.86 4.92 T:ketjemajorv2 5.49 5.51 5.52 T:norx3261v3 5.52 5.53 5.54 T:norx3261v2 5.56 5.57 5.59 T:aesjambuv1 5.63 5.64 5.65 T:acorn128v2 5.62 5.64 5.65 T:acorn128v3 5.71 5.73 5.75 T:riverkeyakv2 5.81 5.82 5.82 T:ascon128av11 5.84 5.85 5.86 T:ascon96v1 6.04 6.05 6.06 ascon128av12 6.81 6.88 6.95 T:ketjeminorv2 7.32 7.33 7.34 T:norx3261v1 8.31 8.31 8.35 ascon128v12 8.75 8.76 8.76 T:ascon128v11 8.75 8.76 8.77 T:ascon128v1 9.80 9.83 9.84 T:seakeyakv1 9.26? 9.86? 11.61? T:oceankeyakv1 13.53 13.55 13.60 T:aes128otrsv2 13.60 13.62 13.64 T:aes128otrsv1 14.35 14.37 14.40 T:twine80n6t4clocv3 14.58 14.64 14.72 T:aes128otrpv2 14.67 14.70 14.73 T:aes128otrpv1 15.23 15.25 15.26 T:twine80n6t4clocv2 17.00 17.06 17.18 T:aes256otrsv2 17.20 17.22 17.25 T:aes256otrsv1 17.47 17.49 17.52 T:aes128n12clocv1 17.56 17.59 17.61 T:aes128n8clocv1 17.63 17.65 17.71 T:proest256otrv1 18.13 18.15 18.16 T:aes256otrpv2 18.29 18.33 18.35 T:aes128n8silcv1 18.29 18.33 18.56 T:aes128n12silcv1 18.31 18.34 18.44 T:aes256otrpv1 25.70 25.85 26.04 T:riverkeyakv1 25.99 26.08 26.32 T:ketjesrv2 27.10 27.21 27.28 T:aeadaes128ocbtaglen64v1 27.19 27.26 27.39 T:aeadaes128ocbtaglen96v1 30.58 30.62 30.77 T:ketjesrv1 31.90 31.93 31.95 T:aeadaes192ocbtaglen96v1 31.86 31.95 32.17 T:aeadaes192ocbtaglen64v1 36.47 36.60 36.68 T:aeadaes256ocbtaglen64v1 36.63 36.63 36.67 T:aeadaes256ocbtaglen96v1 45.15 45.23 45.61 T:colm127v1 47.42 47.65 47.79 T:proest128otrv1 50.95 51.03 51.15 T:ketjejrv1 70.96 71.06 72.57 T:present80n6t4silcv3 89.00 89.10 89.19 T:deoxysneq128128v13 101.94 102.19 104.72 T:ketjejrv2 107.70 108.86 112.80 T:deoxyseq128128v13 110.64 110.74 111.27 T:twine80n6clocv1 119.01 119.21 120.50 T:aezv1 125.11 125.22 125.32 T:led80n6t4silcv3 125.57 125.71 126.46 T:deoxysneq256128v13 167.77 167.93 171.64 T:deoxyseq256128v13 382.98 391.58 393.05 T:acorn128 2976.74 2984.70 2987.04 T:present80n6t4silcv2 2989.88 2991.53 2992.64 T:present80n6silcv1 6584.71 6593.89 6606.19 T:led80n6t4silcv2 6594.89 6619.60 6635.76 T:led80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.15 0.15 0.15 T:aezv4 0.15 0.15 0.16 T:aezv3 0.13? 0.16? 0.17? T:aezv5 0.18? 0.21? 0.28? T:aeadaes128ocbtaglen128v1 0.22 0.22 0.23 T:tiaoxinv2 0.22 0.23 0.23 T:tiaoxinv1 0.22 0.23 0.23 aegis128l 0.21? 0.27? 0.37? T:aeadaes256ocbtaglen128v1 0.36 0.36 0.36 T:aegis128 0.36 0.36 0.37 T:aegis256 0.38 0.39 0.40 aegis256 0.43 0.44 0.45 T:aeadaes192ocbtaglen128v1 0.47 0.47 0.48 T:aes128otrcv3 0.48 0.48 0.49 T:aes128otrpv3 0.62 0.62 0.63 T:aes256otrpv3 0.64 0.64 0.65 T:aes256otrcv3 0.66 0.68 0.73 T:deoxysneq128128v1 0.64? 0.71? 0.79? T:deoxysi256v141 0.63? 0.72? 0.73? T:deoxysi128v141 0.73 0.73 0.74 T:morus1280256v1 0.73 0.73 0.74 T:morus1280256v2 0.73 0.74 0.74 T:morus1280128v2 0.73 0.74 0.74 T:morus1280128v1 0.70? 0.74? 0.78? T:deoxysneq256128v1 0.87 0.94 0.96 T:deoxysii128v141 0.97 1.01 1.03 T:colm0v1 0.98 1.02 1.04 T:morus640128v1 1.00 1.03 1.03 T:morus640128v2 1.01 1.06 1.07 T:deoxysii256v141 1.09 1.09 1.11 T:aes128gcmv1 1.09 1.12 1.14 T:deoxyseq128128v1 1.13 1.13 1.13 aes256gcmv1 1.18 1.24 1.25 T:deoxyseq256128v1 1.55 1.56 1.56 T:aes128otrsv3 1.63 1.64 1.65 T:norx6444v3 1.95 1.98 2.00 T:seakeyakv2 2.02 2.04 2.06 T:oceankeyakv2 2.13 2.14 2.14 T:aes256otrsv3 2.32 2.32 2.34 T:norx6441v2 2.32 2.33 2.33 T:norx6441v3 2.41 2.43 2.45 T:lunarkeyakv2 2.62 2.62 2.66 T:aes128n12t8clocv3 2.62 2.62 2.67 T:aes128n12t8clocv2 2.62 2.63 2.66 T:aes128n12t8silcv3 2.62 2.63 2.66 T:aes128n8t8silcv2 2.62 2.63 2.66 T:aes128n12t8silcv2 2.62 2.63 2.67 T:aes128n8t8clocv2 2.80 2.81 2.81 T:norx6441v1 3.20 3.21 3.23 T:lakekeyakv1 3.45 3.46 3.48 T:lakekeyakv2 3.49 3.50 3.51 T:norx6461v3 3.50 3.51 3.52 T:norx6461v2 3.55 3.58 3.59 T:norx6444v2 3.64 3.65 3.66 T:norx3241v3 3.64 3.65 3.67 T:norx3241v2 3.74 3.74 3.75 T:norx6444v1 4.20 4.21 4.22 T:norx6461v1 4.37 4.38 4.39 T:norx3241v1 4.88 4.91 4.94 T:ketjemajorv2 5.50 5.51 5.52 T:norx3261v3 5.52 5.53 5.55 T:norx3261v2 5.56 5.58 5.59 T:aesjambuv1 5.63 5.64 5.65 T:acorn128v2 5.63 5.64 5.65 T:acorn128v3 5.72 5.75 5.77 T:riverkeyakv2 5.82 5.82 5.83 T:ascon128av11 5.85 5.85 5.86 T:ascon96v1 6.04 6.05 6.05 ascon128av12 6.85 6.89 6.96 T:ketjeminorv2 7.32 7.33 7.34 T:norx3261v1 8.31 8.31 8.33 ascon128v12 8.75 8.76 8.77 T:ascon128v1 8.75 8.76 8.77 T:ascon128v11 9.75 9.78 9.84 T:seakeyakv1 9.20? 9.89? 11.60? T:oceankeyakv1 13.54 13.57 13.58 T:aes128otrsv2 13.64 13.70 13.71 T:aes128otrsv1 14.34 14.37 14.41 T:twine80n6t4clocv3 14.59 14.65 14.68 T:aes128otrpv2 14.70 14.73 14.76 T:aes128otrpv1 15.22 15.25 15.26 T:twine80n6t4clocv2 17.03 17.12 17.19 T:aes256otrsv2 17.21 17.23 17.30 T:aes256otrsv1 17.48 17.50 17.52 T:aes128n12clocv1 17.57 17.60 17.60 T:aes128n8clocv1 17.64 17.68 17.72 T:proest256otrv1 18.13 18.15 18.22 T:aes256otrpv2 18.30 18.33 18.37 T:aes128n8silcv1 18.30 18.34 18.57 T:aes128n12silcv1 18.34 18.38 18.44 T:aes256otrpv1 25.83 25.97 26.14 T:riverkeyakv1 26.10 26.19 26.44 T:ketjesrv2 27.24 27.28 27.29 T:aeadaes128ocbtaglen64v1 27.18 27.45 27.47 T:aeadaes128ocbtaglen96v1 30.43 30.74 30.88 T:ketjesrv1 31.95 31.98 32.00 T:aeadaes192ocbtaglen96v1 31.95 31.98 32.10 T:aeadaes192ocbtaglen64v1 36.56 36.59 36.78 T:aeadaes256ocbtaglen64v1 36.36 36.66 36.82 T:aeadaes256ocbtaglen96v1 44.41 44.47 45.39 T:colm127v1 47.27 47.34 47.45 T:proest128otrv1 50.99 51.23 53.45 T:ketjejrv1 70.94 71.08 72.55 T:present80n6t4silcv3 88.93 89.17 89.28 T:deoxysneq128128v13 102.09 102.25 103.95 T:ketjejrv2 107.72 108.25 111.73 T:deoxyseq128128v13 110.15 110.97 112.37 T:twine80n6clocv1 119.08 119.19 119.39 T:aezv1 125.11 125.18 125.34 T:led80n6t4silcv3 125.76 125.86 126.02 T:deoxysneq256128v13 167.20 167.82 168.04 T:deoxyseq256128v13 381.95 387.08 390.70 T:acorn128 2975.07 2976.88 2993.85 T:present80n6t4silcv2 2983.27 2990.52 2991.42 T:present80n6silcv1 6583.01 6601.68 6615.18 T:led80n6silcv1 6599.26 6606.67 6623.81 T:led80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.09? 0.11? 0.12? T:tiaoxinv2 0.10 0.11 0.11 T:tiaoxinv1 0.15 0.15 0.16 T:aezv5 0.15 0.15 0.16 T:aezv4 0.16 0.16 0.17 T:aezv3 0.10? 0.17? 0.32? T:aeadaes128ocbtaglen128v1 0.18 0.18 0.19 aegis128l 0.05? 0.25? 0.51? T:aeadaes256ocbtaglen128v1 0.33 0.33 0.34 aegis256 0.33 0.34 0.35 T:aegis128 0.34 0.34 0.35 T:aegis256 0.37? 0.43? 0.70? T:aeadaes192ocbtaglen128v1 0.44 0.45 0.45 aes256gcmv1 0.45 0.46 0.47 T:aes128gcmv1 0.46 0.47 0.49 T:aes128otrcv3 0.47 0.48 0.49 T:aes128otrpv3 0.55? 0.57? 0.63? T:deoxysii128v141 0.58 0.59 0.60 T:aes256otrpv3 0.53? 0.61? 0.67? T:deoxysi128v141 0.57 0.62 0.63 T:colm0v1 0.55? 0.64? 0.71? T:deoxysneq128128v1 0.53? 0.65? 0.77? T:deoxyseq128128v1 0.64 0.65 0.66 T:aes256otrcv3 0.59? 0.68? 0.76? T:deoxysi256v141 0.59? 0.68? 0.82? T:deoxysii256v141 0.71 0.71 0.72 T:morus1280128v1 0.66? 0.72? 0.77? T:deoxysneq256128v1 0.71 0.72 0.73 T:morus1280256v1 0.71 0.72 0.73 T:morus1280128v2 0.72 0.72 0.74 T:morus1280256v2 0.77 0.80 0.82 T:deoxyseq256128v1 0.92 0.93 1.00 T:morus640128v1 0.92 0.93 0.97 T:morus640128v2 1.51 1.54 1.56 T:oceankeyakv2 1.54 1.57 1.60 T:lunarkeyakv2 1.85 1.86 1.87 T:seakeyakv2 2.33 2.35 2.36 T:norx6444v3 2.34 2.36 2.37 T:norx6441v3 2.35 2.36 2.37 T:norx6441v2 2.62 2.62 2.63 T:aes128otrsv3 2.62 2.62 2.63 T:aes128n12t8silcv2 2.62 2.63 2.63 T:aes128n8t8silcv2 2.62 2.63 2.63 T:aes128n12t8silcv3 2.62 2.63 2.65 T:aes128n12t8clocv3 2.62 2.63 2.64 T:aes128n12t8clocv2 2.62 2.63 2.65 T:aes128n8t8clocv2 2.82 2.84 2.85 T:norx6441v1 2.86 2.94 2.98 T:lakekeyakv1 3.11 3.12 3.17 T:lakekeyakv2 3.53 3.54 3.55 T:norx6461v3 3.53 3.54 3.56 T:norx6461v2 3.62 3.62 3.63 T:aes256otrsv3 3.66 3.67 3.67 T:norx6444v1 3.67 3.68 3.69 T:norx3241v3 3.68 3.69 3.70 T:norx3241v2 3.66 3.69 3.72 T:norx6444v2 4.21 4.22 4.25 T:norx6461v1 4.42 4.43 4.44 T:norx3241v1 4.42 4.48 4.52 T:ketjemajorv2 5.32 5.35 5.39 T:riverkeyakv2 5.45 5.48 5.50 T:aesjambuv1 5.50 5.51 5.53 T:norx3261v2 5.51 5.52 5.52 T:acorn128v2 5.57 5.59 5.60 T:norx3261v3 5.62 5.64 5.64 T:acorn128v3 5.74 5.75 5.76 T:ascon96v1 5.74 5.76 5.76 T:ascon128av11 5.80 5.80 5.81 ascon128av12 5.95 6.03 6.11 T:ketjeminorv2 7.40 7.40 7.42 T:norx3261v1 8.25 8.25 8.26 ascon128v12 8.75 8.75 8.76 T:ascon128v1 8.75 8.75 8.76 T:ascon128v11 9.54 9.58 9.63 T:seakeyakv1 8.78? 9.66? 11.88? T:oceankeyakv1 11.42 11.45 11.46 T:aes128n12clocv1 11.46 11.50 11.52 T:aes128n8clocv1 12.35 12.38 12.45 T:aes128n8silcv1 12.36 12.40 12.46 T:aes128n12silcv1 12.75 12.76 12.77 T:aes128otrsv1 12.79 12.81 12.89 T:aes128otrsv2 13.37 13.39 13.43 T:aes128otrpv1 13.37 13.39 13.43 T:aes128otrpv2 14.18 14.21 14.24 T:twine80n6t4clocv3 14.98 14.99 15.02 T:twine80n6t4clocv2 16.24 16.27 16.48 T:aes256otrsv2 16.40 16.42 16.46 T:aes256otrsv1 17.75 17.77 17.81 T:proest256otrv1 18.44 18.46 18.52 T:aes256otrpv2 18.57 18.62 18.69 T:aes256otrpv1 23.14 23.15 23.49 T:colm127v1 23.28 23.41 23.50 T:aeadaes128ocbtaglen64v1 23.40 23.43 23.44 T:aeadaes128ocbtaglen96v1 24.26 24.39 24.77 T:riverkeyakv1 24.93 25.19 25.41 T:ketjesrv2 27.04 27.21 27.25 T:aeadaes192ocbtaglen64v1 27.08 27.26 27.28 T:aeadaes192ocbtaglen96v1 26.67 27.37 27.78 T:ketjesrv1 30.89 31.00 31.15 T:aeadaes256ocbtaglen64v1 31.08 31.14 31.18 T:aeadaes256ocbtaglen96v1 47.12 47.22 48.19 T:proest128otrv1 46.89 47.38 47.50 T:ketjejrv1 57.67 57.78 58.05 T:aezv1 70.29 70.33 70.36 T:present80n6t4silcv3 71.38 72.03 74.80 T:deoxyseq128128v13 74.00 74.17 74.28 T:twine80n6clocv1 75.56 77.77 77.96 T:deoxysneq128128v13 100.15 100.40 102.31 T:ketjejrv2 110.69 111.47 112.20 T:deoxyseq256128v13 112.63 112.94 113.05 T:deoxysneq256128v13 124.37 124.45 124.53 T:led80n6t4silcv3 384.97 386.70 394.79 T:acorn128 1971.70 1980.08 1980.68 T:present80n6silcv1 1999.97 2001.78 2008.88 T:present80n6t4silcv2 4368.80 4386.25 4416.76 T:led80n6silcv1 4375.30 4387.94 4413.82 T:led80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv1 0.09? 0.11? 0.12? T:tiaoxinv2 0.14? 0.15? 0.16? T:aezv4 0.15 0.15 0.16 T:aezv5 0.14? 0.16? 0.17? T:aezv3 0.18 0.18 0.19 aegis128l 0.10? 0.21? 0.32? T:aeadaes128ocbtaglen128v1 0.03? 0.28? 0.53? T:aeadaes256ocbtaglen128v1 0.33 0.33 0.35 T:aegis128 0.33? 0.34? 0.39? aegis256 0.33 0.34 0.35 T:aegis256 0.13? 0.42? 0.43? T:aeadaes192ocbtaglen128v1 0.43 0.44 0.44 aes256gcmv1 0.45 0.46 0.47 T:aes128gcmv1 0.47 0.47 0.48 T:aes128otrpv3 0.47 0.48 0.50 T:aes128otrcv3 0.57 0.58 0.59 T:aes256otrpv3 0.53? 0.59? 0.67? T:deoxysi128v141 0.52? 0.61? 0.65? T:deoxysii128v141 0.59 0.61 0.64 T:colm0v1 0.56? 0.64? 0.67? T:deoxysneq128128v1 0.63 0.64 0.65 T:aes256otrcv3 0.54? 0.64? 0.75? T:deoxyseq128128v1 0.56? 0.66? 0.76? T:deoxysi256v141 0.68 0.69 0.70 T:morus1280128v2 0.68 0.69 0.70 T:morus1280128v1 0.68 0.69 0.70 T:morus1280256v1 0.68 0.69 0.70 T:morus1280256v2 0.60? 0.70? 0.79? T:deoxysii256v141 0.62? 0.73? 0.79? T:deoxysneq256128v1 0.70? 0.75? 0.83? T:deoxyseq256128v1 1.02 1.03 1.05 T:morus640128v1 1.03 1.04 1.05 T:morus640128v2 1.51 1.54 1.58 T:oceankeyakv2 1.53 1.58 1.60 T:lunarkeyakv2 1.85 1.86 1.89 T:seakeyakv2 2.34 2.35 2.37 T:norx6444v3 2.35 2.36 2.37 T:norx6441v2 2.35 2.37 2.38 T:norx6441v3 2.56 2.62 2.69 T:aes128n8t8clocv2 2.62 2.62 2.63 T:aes128otrsv3 2.62 2.62 2.69 T:aes128n12t8clocv3 2.62 2.63 2.71 T:aes128n8t8silcv2 2.62 2.63 2.69 T:aes128n12t8clocv2 2.62 2.63 2.70 T:aes128n12t8silcv2 2.62 2.63 2.71 T:aes128n12t8silcv3 2.83 2.84 2.85 T:norx6441v1 2.93 2.94 2.97 T:lakekeyakv1 3.12 3.15 3.17 T:lakekeyakv2 3.51 3.53 3.55 T:norx6461v2 3.53 3.54 3.57 T:norx6461v3 3.62 3.62 3.63 T:aes256otrsv3 3.65 3.67 3.70 T:norx6444v1 3.68 3.70 3.71 T:norx3241v3 3.69 3.70 3.71 T:norx3241v2 3.63 3.70 3.74 T:norx6444v2 4.22 4.23 4.25 T:norx6461v1 4.41 4.43 4.46 T:norx3241v1 4.39 4.48 4.53 T:ketjemajorv2 5.31 5.33 5.36 T:riverkeyakv2 5.46 5.48 5.48 T:aesjambuv1 5.49 5.51 5.53 T:acorn128v2 5.49 5.51 5.53 T:norx3261v2 5.56 5.58 5.60 T:norx3261v3 5.74 5.75 5.77 T:acorn128v3 5.74 5.77 5.78 T:ascon96v1 5.81 5.82 5.84 T:ascon128av11 5.82 5.85 5.86 ascon128av12 5.93 6.04 6.14 T:ketjeminorv2 7.40 7.41 7.41 T:norx3261v1 8.25 8.25 8.25 ascon128v12 8.75 8.75 8.77 T:ascon128v1 8.75 8.75 8.77 T:ascon128v11 9.59 9.64 9.70 T:seakeyakv1 8.86? 9.65? 11.69? T:oceankeyakv1 11.43 11.47 11.49 T:aes128n12clocv1 11.47 11.52 11.56 T:aes128n8clocv1 12.35 12.39 12.44 T:aes128n8silcv1 12.37 12.40 12.44 T:aes128n12silcv1 12.78 12.82 12.82 T:aes128otrsv1 12.80 12.84 12.86 T:aes128otrsv2 13.33 13.37 13.42 T:aes128otrpv1 13.29 13.40 13.44 T:aes128otrpv2 14.15 14.24 14.28 T:twine80n6t4clocv3 14.96 15.00 15.03 T:twine80n6t4clocv2 16.28 16.37 16.50 T:aes256otrsv2 16.45 16.50 16.52 T:aes256otrsv1 17.75 17.79 17.83 T:proest256otrv1 18.44 18.45 18.49 T:aes256otrpv2 18.57 18.59 18.66 T:aes256otrpv1 23.16 23.22 23.46 T:colm127v1 23.27 23.29 23.63 T:aeadaes128ocbtaglen96v1 23.31 23.37 23.44 T:aeadaes128ocbtaglen64v1 24.20 24.80 24.94 T:riverkeyakv1 24.77 24.86 25.12 T:ketjesrv2 27.08 27.13 27.28 T:aeadaes192ocbtaglen96v1 27.23 27.25 27.58 T:aeadaes192ocbtaglen64v1 26.58 27.70 27.94 T:ketjesrv1 31.08 31.18 31.47 T:aeadaes256ocbtaglen64v1 31.31 31.52 31.99 T:aeadaes256ocbtaglen96v1 46.95 47.25 47.36 T:ketjejrv1 47.32 48.16 48.35 T:proest128otrv1 57.95 58.22 58.50 T:aezv1 70.24 70.31 70.38 T:present80n6t4silcv3 70.82 72.11 74.34 T:deoxyseq128128v13 73.38 74.19 74.28 T:twine80n6clocv1 75.76 77.00 78.22 T:deoxysneq128128v13 99.95 100.44 104.76 T:ketjejrv2 111.35 111.49 113.66 T:deoxyseq256128v13 112.00 112.38 112.51 T:deoxysneq256128v13 124.31 124.49 124.61 T:led80n6t4silcv3 385.24 401.56 403.08 T:acorn128 1973.25 1977.84 1980.41 T:present80n6silcv1 1993.11 1993.52 1994.74 T:present80n6t4silcv2 4394.15 4428.34 4451.50 T:led80n6silcv1 4421.34 4435.02 4445.48 T:led80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.10? 0.10? 0.12? T:tiaoxinv2 0.10 0.11 0.11 T:tiaoxinv1 0.15 0.15 0.15 T:aezv4 0.15 0.15 0.15 T:aezv5 0.15? 0.16? 0.17? T:aezv3 0.17? 0.18? 0.19? aegis128l 0.15? 0.20? 0.29? T:aeadaes128ocbtaglen128v1 0.17? 0.27? 0.42? T:aeadaes256ocbtaglen128v1 0.32 0.34 0.34 T:aegis128 0.33? 0.34? 0.40? aegis256 0.34 0.34 0.35 T:aegis256 0.43 0.43 0.44 aes256gcmv1 0.42? 0.44? 0.69? T:aeadaes192ocbtaglen128v1 0.46 0.46 0.46 T:aes128gcmv1 0.46 0.47 0.49 T:aes128otrpv3 0.47 0.48 0.50 T:aes128otrcv3 0.50? 0.50? 0.67? T:deoxysi128v141 0.58 0.58 0.60 T:aes256otrpv3 0.53? 0.61? 0.65? T:deoxysii128v141 0.59 0.61 0.62 T:colm0v1 0.55? 0.63? 0.73? T:deoxyseq128128v1 0.63 0.64 0.65 T:aes256otrcv3 0.58? 0.64? 0.69? T:deoxysneq128128v1 0.55? 0.66? 0.76? T:deoxysi256v141 0.55? 0.68? 0.84? T:deoxysii256v141 0.68 0.69 0.70 T:morus1280256v2 0.68 0.69 0.69 T:morus1280128v1 0.68 0.69 0.70 T:morus1280256v1 0.68 0.69 0.70 T:morus1280128v2 0.64? 0.73? 0.79? T:deoxysneq256128v1 0.73 0.74 0.80 T:deoxyseq256128v1 1.02 1.04 1.05 T:morus640128v1 1.02 1.04 1.05 T:morus640128v2 1.52 1.55 1.57 T:oceankeyakv2 1.53 1.56 1.58 T:lunarkeyakv2 1.83 1.87 1.92 T:seakeyakv2 2.33 2.35 2.36 T:norx6444v3 2.34 2.35 2.37 T:norx6441v2 2.35 2.37 2.38 T:norx6441v3 2.55 2.62 2.69 T:aes128n12t8clocv2 2.62 2.62 2.63 T:aes128otrsv3 2.56 2.63 2.70 T:aes128n12t8silcv3 2.56 2.69 2.69 T:aes128n8t8clocv2 2.56 2.69 2.69 T:aes128n12t8clocv3 2.55 2.69 2.70 T:aes128n8t8silcv2 2.55 2.70 2.70 T:aes128n12t8silcv2 2.83 2.84 2.86 T:norx6441v1 2.95 2.96 2.99 T:lakekeyakv1 3.10 3.15 3.17 T:lakekeyakv2 3.53 3.54 3.55 T:norx6461v2 3.53 3.55 3.55 T:norx6461v3 3.62 3.62 3.63 T:aes256otrsv3 3.62 3.67 3.71 T:norx6444v1 3.64 3.69 3.73 T:norx6444v2 3.69 3.70 3.71 T:norx3241v3 3.69 3.70 3.71 T:norx3241v2 4.22 4.24 4.25 T:norx6461v1 4.42 4.43 4.44 T:norx3241v1 4.35 4.47 4.53 T:ketjemajorv2 5.32 5.36 5.38 T:riverkeyakv2 5.46 5.47 5.51 T:aesjambuv1 5.50 5.51 5.53 T:acorn128v2 5.51 5.52 5.53 T:norx3261v2 5.57 5.58 5.60 T:norx3261v3 5.75 5.75 5.78 T:ascon96v1 5.75 5.76 5.77 T:acorn128v3 5.82 5.82 5.84 T:ascon128av11 5.83 5.85 5.86 ascon128av12 5.95 6.04 6.11 T:ketjeminorv2 7.39 7.40 7.41 T:norx3261v1 8.25 8.25 8.26 ascon128v12 8.75 8.75 8.77 T:ascon128v11 8.75 8.75 8.77 T:ascon128v1 9.58 9.63 9.67 T:seakeyakv1 8.82? 9.69? 11.59? T:oceankeyakv1 11.42 11.45 11.48 T:aes128n12clocv1 11.46 11.49 11.52 T:aes128n8clocv1 12.37 12.39 12.41 T:aes128n8silcv1 12.39 12.42 12.47 T:aes128n12silcv1 12.71 12.77 12.82 T:aes128otrsv1 12.81 12.86 12.90 T:aes128otrsv2 13.31 13.36 13.44 T:aes128otrpv2 13.35 13.38 13.44 T:aes128otrpv1 14.14 14.20 14.26 T:twine80n6t4clocv3 14.93 14.99 15.04 T:twine80n6t4clocv2 16.28 16.31 16.52 T:aes256otrsv2 16.43 16.47 16.54 T:aes256otrsv1 17.75 17.80 17.86 T:proest256otrv1 18.43 18.48 18.53 T:aes256otrpv2 18.58 18.61 18.65 T:aes256otrpv1 23.11 23.30 23.38 T:colm127v1 23.26 23.35 23.45 T:aeadaes128ocbtaglen96v1 23.28 23.40 23.45 T:aeadaes128ocbtaglen64v1 24.51 24.73 24.81 T:riverkeyakv1 24.73 25.17 25.25 T:ketjesrv2 27.04 27.07 27.34 T:aeadaes192ocbtaglen64v1 27.07 27.08 27.27 T:aeadaes192ocbtaglen96v1 26.84 27.62 27.74 T:ketjesrv1 30.87 31.00 31.11 T:aeadaes256ocbtaglen64v1 30.85 31.12 31.16 T:aeadaes256ocbtaglen96v1 46.87 47.00 47.09 T:ketjejrv1 48.02 48.18 48.50 T:proest128otrv1 58.11 58.25 58.55 T:aezv1 70.25 70.30 70.38 T:present80n6t4silcv3 70.97 71.90 74.12 T:deoxyseq128128v13 73.52 73.60 74.38 T:twine80n6clocv1 75.38 77.08 77.77 T:deoxysneq128128v13 100.16 100.50 102.38 T:ketjejrv2 111.29 111.76 112.28 T:deoxyseq256128v13 111.76 111.96 112.27 T:deoxysneq256128v13 124.31 124.39 124.52 T:led80n6t4silcv3 383.88 385.43 411.12 T:acorn128 1977.63 1978.90 1980.73 T:present80n6silcv1 1993.74 1994.17 1999.65 T:present80n6t4silcv2 4419.36 4430.87 4453.86 T:led80n6silcv1 4419.38 4433.29 4441.26 T:led80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.20 0.20 0.20 T:tiaoxinv1 0.20 0.21 0.21 T:tiaoxinv2 0.22 0.23 0.23 aegis128l 0.33 0.33 0.35 T:aezv4 0.33 0.34 0.36 T:aezv3 0.34 0.34 0.35 T:aezv5 0.37? 0.37? 0.51? T:aeadaes128ocbtaglen128v1 0.38 0.39 0.39 T:aegis128 0.40 0.40 0.40 T:aegis256 0.40 0.40 0.40 aegis256 0.46? 0.47? 0.63? T:aeadaes256ocbtaglen128v1 0.55 0.55 0.60 T:aeadaes192ocbtaglen128v1 0.57 0.57 0.58 T:aes128otrpv3 0.62 0.62 0.62 T:aes128otrcv3 0.72 0.72 0.73 T:aes256otrpv3 0.77 0.79 0.82 T:deoxysneq128128v1 0.77? 0.81? 0.87? T:deoxysi128v141 0.81 0.81 0.82 T:aes256otrcv3 0.91 0.91 0.92 T:deoxysneq256128v1 0.93 0.93 0.96 T:deoxysi256v141 0.92 0.93 0.93 T:morus1280128v1 0.93 0.93 0.94 T:morus1280256v1 0.93 0.94 0.95 T:morus1280256v2 0.94 0.94 0.94 T:morus1280128v2 1.10 1.11 1.11 T:morus640128v2 1.09 1.11 1.13 T:morus640128v1 1.11 1.11 1.20 T:deoxysii128v141 1.16 1.17 1.17 T:colm0v1 1.20 1.20 1.21 T:aes128gcmv1 1.26 1.26 1.27 T:deoxyseq128128v1 1.27 1.27 1.28 aes256gcmv1 1.32 1.32 1.40 T:deoxysii256v141 1.42 1.43 1.44 T:deoxyseq256128v1 1.60 1.60 1.61 T:aes128otrsv3 2.19 2.19 2.20 T:aes256otrsv3 2.30 2.30 2.31 T:norx6444v3 2.68 2.68 2.68 T:aes128n12t8clocv2 2.68 2.68 2.68 T:aes128n12t8clocv3 2.68 2.68 2.69 T:aes128n8t8clocv2 2.72 2.72 2.73 T:norx6441v2 2.73 2.73 2.74 T:norx6441v3 2.73 2.74 2.74 T:aes128n12t8silcv3 2.73 2.74 2.74 T:aes128n12t8silcv2 2.73 2.74 2.74 T:aes128n8t8silcv2 2.81 2.82 2.83 T:seakeyakv2 3.17 3.18 3.18 T:norx6441v1 3.72 3.74 3.79 T:oceankeyakv2 3.76 3.77 3.80 T:lakekeyakv2 3.86 3.88 3.92 T:lakekeyakv1 3.96 3.97 3.98 T:norx3241v2 3.97 3.97 3.98 T:norx3241v3 4.07 4.08 4.09 T:norx6461v2 4.08 4.08 4.09 T:norx6461v3 4.66 4.66 4.67 T:norx3241v1 4.74 4.74 4.75 T:norx6461v1 5.17 5.20 5.21 T:norx6444v2 5.33 5.33 5.34 T:norx6444v1 5.47 5.48 5.49 T:aesjambuv1 5.85 5.85 5.87 T:ascon128av11 5.96 5.97 5.98 T:norx3261v2 5.97 5.97 6.00 T:ascon96v1 5.98 5.98 6.00 T:norx3261v3 5.98 5.99 6.02 T:riverkeyakv2 6.01 6.01 6.02 ascon128av12 6.39 6.41 6.42 T:acorn128v2 6.41 6.42 6.45 T:lunarkeyakv2 6.59 6.60 6.61 T:acorn128v3 6.58 6.62 6.66 T:ketjemajorv2 7.80 7.81 7.82 T:norx3261v1 8.12 8.16 8.19 T:ketjeminorv2 8.56 8.57 8.59 ascon128v12 8.81 8.82 8.83 T:ascon128v11 8.82 8.82 8.83 T:ascon128v1 11.90 11.93 11.94 T:seakeyakv1 13.87 13.89 13.91 T:aes128otrsv1 13.89 13.90 13.92 T:aes128otrsv2 14.69 14.72 14.74 T:aes128otrpv2 14.72 14.73 14.74 T:twine80n6t4clocv3 14.72 14.73 14.74 T:aes128otrpv1 15.00? 15.06? 16.91? T:oceankeyakv1 15.61 15.61 15.61 T:twine80n6t4clocv2 16.90 16.92 16.95 T:aes128n12clocv1 16.91 16.93 16.94 T:aes128n8clocv1 17.58 17.60 17.66 T:aes256otrsv2 17.68 17.70 17.73 T:aes256otrsv1 18.57 18.59 18.60 T:aes128n8silcv1 18.57 18.61 18.76 T:aes128n12silcv1 18.61 18.67 18.69 T:aes256otrpv2 18.70 18.71 18.75 T:aes256otrpv1 19.27 19.28 19.30 T:proest256otrv1 23.88 23.94 23.96 T:aeadaes128ocbtaglen96v1 23.98 24.01 24.02 T:aeadaes128ocbtaglen64v1 26.88 26.93 27.27 T:riverkeyakv1 27.84 27.88 28.17 T:aeadaes192ocbtaglen64v1 27.80 27.88 27.93 T:aeadaes192ocbtaglen96v1 29.11 29.13 29.18 T:ketjesrv2 30.38 30.59 30.67 T:ketjesrv1 31.84 31.90 31.97 T:aeadaes256ocbtaglen96v1 31.84 31.95 32.01 T:aeadaes256ocbtaglen64v1 38.78 38.83 38.87 T:colm127v1 48.93 49.81 49.95 T:proest128otrv1 49.83 49.86 50.00 T:ketjejrv1 71.76 71.79 71.83 T:present80n6t4silcv3 76.26 78.17 78.40 T:deoxysneq128128v13 102.83 102.92 104.56 T:ketjejrv2 109.78 109.98 113.50 T:deoxyseq128128v13 110.70 111.05 111.14 T:twine80n6clocv1 112.53 112.73 114.27 T:deoxysneq256128v13 114.57 114.72 114.83 T:aezv1 126.14 126.22 126.30 T:led80n6t4silcv3 170.20 170.53 170.80 T:deoxyseq256128v13 435.87 441.02 448.33 T:acorn128 2990.82 2991.97 2997.12 T:present80n6t4silcv2 3001.71 3004.89 3006.40 T:present80n6silcv1 6615.21 6631.36 6648.89 T:led80n6t4silcv2 6609.73 6640.93 6651.49 T:led80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.24 0.24 0.24 aegis128l 0.28 0.28 0.29 T:tiaoxinv1 0.28 0.29 0.29 T:tiaoxinv2 0.33 0.33 0.33 T:aezv4 0.34 0.34 0.34 T:aezv5 0.34 0.35 0.35 T:aezv3 0.37? 0.37? 0.51? T:aeadaes128ocbtaglen128v1 0.38 0.39 0.39 T:aegis128 0.40 0.40 0.41 T:aegis256 0.41 0.41 0.41 aegis256 0.46? 0.46? 0.65? T:aeadaes256ocbtaglen128v1 0.57? 0.58? 0.75? T:aeadaes192ocbtaglen128v1 0.59 0.59 0.59 T:aes128otrpv3 0.63 0.63 0.64 T:aes128otrcv3 0.74 0.75 0.75 T:aes256otrpv3 0.84 0.85 0.89 T:deoxysneq128128v1 0.85 0.86 0.86 T:aes256otrcv3 0.88 0.88 0.95 T:deoxysi128v141 0.92 0.92 0.93 T:morus1280256v1 0.92 0.92 0.93 T:morus1280128v1 0.93? 0.93? 1.06? T:deoxysi256v141 0.93 0.94 0.95 T:deoxysneq256128v1 0.94 0.94 0.95 T:morus1280256v2 0.94 0.94 0.95 T:morus1280128v2 1.11 1.12 1.15 T:morus640128v1 1.13 1.13 1.17 T:colm0v1 1.15 1.16 1.17 T:morus640128v2 1.20 1.20 1.21 T:aes128gcmv1 1.22 1.23 1.26 T:deoxysii128v141 1.26 1.26 1.26 aes256gcmv1 1.44 1.45 1.47 T:deoxysii256v141 1.47 1.47 1.49 T:deoxyseq128128v1 1.47 1.47 1.48 T:deoxyseq256128v1 1.62 1.62 1.62 T:aes128otrsv3 2.22 2.23 2.23 T:aes256otrsv3 2.28 2.29 2.30 T:norx6444v3 2.66 2.67 2.67 T:aes128n12t8clocv2 2.67 2.67 2.67 T:aes128n12t8clocv3 2.67 2.67 2.67 T:aes128n8t8clocv2 2.70 2.71 2.71 T:norx6441v2 2.71 2.71 2.71 T:aes128n12t8silcv3 2.71 2.71 2.71 T:aes128n12t8silcv2 2.71 2.71 2.71 T:aes128n8t8silcv2 2.71 2.72 2.72 T:norx6441v3 2.84 2.85 2.86 T:seakeyakv2 3.15 3.15 3.16 T:norx6441v1 3.77 3.78 3.82 T:oceankeyakv2 3.84 3.85 3.86 T:lakekeyakv2 3.93 3.93 3.95 T:lakekeyakv1 3.94 3.94 3.96 T:norx3241v3 3.94 3.95 3.96 T:norx3241v2 4.06 4.07 4.07 T:norx6461v2 4.07 4.08 4.09 T:norx6461v3 4.63 4.64 4.65 T:norx3241v1 4.73 4.73 4.74 T:norx6461v1 5.14 5.19 5.20 T:norx6444v2 5.29 5.30 5.32 T:norx6444v1 5.62 5.62 5.63 T:aesjambuv1 5.95 5.95 5.96 T:ascon128av11 5.95 5.96 5.98 T:norx3261v3 5.97 5.97 5.99 T:norx3261v2 5.97 5.97 5.99 T:ascon96v1 6.04 6.05 6.08 T:riverkeyakv2 6.19 6.19 6.21 ascon128av12 6.40 6.42 6.46 T:ketjemajorv2 6.47 6.48 6.50 T:lunarkeyakv2 6.50 6.50 6.52 T:acorn128v2 6.52 6.52 6.53 T:acorn128v3 7.74 7.75 7.76 T:norx3261v1 7.90 7.93 7.99 T:ketjeminorv2 8.44 8.44 8.48 ascon128v12 8.88 8.88 8.88 T:ascon128v11 8.88 8.88 8.90 T:ascon128v1 12.02 12.05 12.12 T:seakeyakv1 13.90 13.91 13.93 T:aes128otrsv2 13.95 14.00 14.07 T:aes128otrsv1 14.70 14.71 14.73 T:twine80n6t4clocv3 14.99 15.04 15.11 T:aes128otrpv2 15.03 15.07 15.12 T:aes128otrpv1 15.06? 15.08? 16.81? T:oceankeyakv1 15.59 15.60 15.61 T:twine80n6t4clocv2 17.53 17.53 17.61 T:aes256otrsv2 17.67 17.70 17.72 T:aes256otrsv1 17.76 17.77 17.78 T:aes128n12clocv1 17.84 17.85 17.86 T:aes128n8clocv1 18.56 18.57 18.63 T:aes256otrpv2 18.60 18.63 18.65 T:aes128n8silcv1 18.64 18.66 18.87 T:aes128n12silcv1 18.77 18.79 18.89 T:aes256otrpv1 19.34 19.35 19.38 T:proest256otrv1 26.98 27.01 27.30 T:ketjesrv2 26.85 27.08 27.18 T:riverkeyakv1 28.00 28.01 28.30 T:aeadaes128ocbtaglen64v1 28.06 28.08 28.11 T:aeadaes128ocbtaglen96v1 31.13 31.47 31.56 T:ketjesrv1 32.62 32.67 32.90 T:aeadaes192ocbtaglen96v1 32.86 32.95 33.07 T:aeadaes192ocbtaglen64v1 37.50 37.57 37.61 T:aeadaes256ocbtaglen96v1 37.67 37.87 37.88 T:aeadaes256ocbtaglen64v1 45.76 45.80 46.44 T:colm127v1 49.39 49.44 49.48 T:proest128otrv1 51.77 51.81 51.84 T:ketjejrv1 71.78 71.84 73.20 T:present80n6t4silcv3 89.31 89.64 89.80 T:deoxysneq128128v13 103.68 103.83 105.26 T:ketjejrv2 110.38 110.51 112.95 T:deoxyseq128128v13 111.13 111.27 111.46 T:twine80n6clocv1 114.34 114.49 114.75 T:aezv1 126.16 126.26 126.33 T:led80n6t4silcv3 126.21 126.33 126.47 T:deoxysneq256128v13 170.02 170.68 171.75 T:deoxyseq256128v13 432.09 432.27 441.91 T:acorn128 2992.08 2992.33 2992.62 T:present80n6t4silcv2 2998.39 3006.95 3013.39 T:present80n6silcv1 6611.40 6636.28 6652.89 T:led80n6t4silcv2 6621.39 6640.88 6653.52 T:led80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.20 0.20 0.20 T:aezv4 0.20 0.20 0.20 T:aezv3 0.20 0.20 0.21 T:aezv5 0.26 0.26 0.26 aegis128l 0.28 0.28 0.29 T:tiaoxinv2 0.28 0.28 0.29 T:tiaoxinv1 0.37? 0.37? 0.47? T:aeadaes128ocbtaglen128v1 0.39 0.39 0.39 T:aegis128 0.40 0.40 0.40 T:aegis256 0.43 0.43 0.46 aegis256 0.45? 0.46? 0.57? T:aeadaes256ocbtaglen128v1 0.56 0.57 0.58 T:aeadaes192ocbtaglen128v1 0.59 0.59 0.59 T:aes128otrpv3 0.63 0.63 0.64 T:aes128otrcv3 0.75 0.75 0.75 T:aes256otrpv3 0.82 0.83 0.86 T:deoxysneq128128v1 0.86 0.86 0.86 T:aes256otrcv3 0.88 0.88 0.93 T:deoxysi128v141 0.89 0.89 0.95 T:deoxysneq256128v1 0.92 0.92 0.93 T:morus1280256v1 0.92 0.92 0.93 T:morus1280128v1 0.93 0.94 1.03 T:deoxysi256v141 0.94 0.94 0.95 T:morus1280256v2 0.94 0.94 0.95 T:morus1280128v2 1.11 1.12 1.14 T:morus640128v1 1.13 1.14 1.17 T:colm0v1 1.15 1.16 1.17 T:morus640128v2 1.20 1.20 1.20 T:aes128gcmv1 1.22 1.22 1.24 T:deoxysii128v141 1.25 1.26 1.26 aes256gcmv1 1.42 1.43 1.45 T:deoxysii256v141 1.46 1.46 1.47 T:deoxyseq256128v1 1.46 1.47 1.48 T:deoxyseq128128v1 1.62 1.62 1.63 T:aes128otrsv3 2.22 2.23 2.23 T:aes256otrsv3 2.28 2.29 2.29 T:norx6444v3 2.65 2.65 2.70 T:aes128n8t8clocv2 2.65 2.65 2.70 T:aes128n12t8clocv2 2.65 2.66 2.66 T:aes128n12t8clocv3 2.71 2.71 2.71 T:aes128n12t8silcv3 2.70 2.71 2.71 T:norx6441v2 2.71 2.71 2.75 T:aes128n12t8silcv2 2.71 2.71 2.75 T:aes128n8t8silcv2 2.71 2.72 2.73 T:norx6441v3 2.85 2.86 2.86 T:seakeyakv2 3.15 3.15 3.16 T:norx6441v1 3.78 3.79 3.83 T:oceankeyakv2 3.87 3.88 3.89 T:lakekeyakv2 3.93 3.94 3.95 T:lakekeyakv1 3.94 3.94 3.96 T:norx3241v3 3.95 3.95 3.96 T:norx3241v2 4.06 4.06 4.07 T:norx6461v2 4.07 4.08 4.08 T:norx6461v3 4.63 4.64 4.64 T:norx3241v1 4.72 4.73 4.74 T:norx6461v1 5.16 5.18 5.22 T:norx6444v2 5.31 5.32 5.32 T:norx6444v1 5.62 5.62 5.63 T:aesjambuv1 5.95 5.95 5.96 T:ascon128av11 5.95 5.96 5.97 T:norx3261v3 5.98 5.98 5.99 T:ascon96v1 5.97 5.98 5.98 T:norx3261v2 6.07 6.08 6.09 T:riverkeyakv2 6.20 6.20 6.20 ascon128av12 6.41 6.45 6.46 T:ketjemajorv2 6.48 6.49 6.52 T:lunarkeyakv2 6.50 6.50 6.52 T:acorn128v2 6.52 6.52 6.53 T:acorn128v3 7.74 7.75 7.76 T:norx3261v1 7.94 7.95 8.01 T:ketjeminorv2 8.44 8.44 8.46 ascon128v12 8.88 8.88 8.89 T:ascon128v11 8.88 8.88 8.90 T:ascon128v1 12.03 12.05 12.07 T:seakeyakv1 13.90 13.93 13.99 T:aes128otrsv2 14.00 14.02 14.05 T:aes128otrsv1 14.70 14.72 14.74 T:twine80n6t4clocv3 14.96 15.00 15.05 T:aes128otrpv2 15.05 15.07 15.10 T:aes128otrpv1 15.06? 15.19? 16.93? T:oceankeyakv1 15.59 15.60 15.60 T:twine80n6t4clocv2 17.52 17.56 17.67 T:aes256otrsv2 17.69 17.70 17.71 T:aes256otrsv1 17.74 17.75 17.77 T:aes128n12clocv1 17.83 17.84 17.87 T:aes128n8clocv1 18.58 18.62 18.66 T:aes256otrpv2 18.63 18.64 18.69 T:aes128n8silcv1 18.64 18.70 18.89 T:aes128n12silcv1 18.77 18.83 18.84 T:aes256otrpv1 19.36 19.37 19.40 T:proest256otrv1 26.90 27.01 27.18 T:riverkeyakv1 26.95 27.02 27.31 T:ketjesrv2 27.89 27.93 27.93 T:aeadaes128ocbtaglen64v1 27.91 28.00 28.02 T:aeadaes128ocbtaglen96v1 31.14 31.47 31.57 T:ketjesrv1 32.67 32.68 32.78 T:aeadaes192ocbtaglen64v1 32.79 32.91 32.94 T:aeadaes192ocbtaglen96v1 37.55 37.58 37.59 T:aeadaes256ocbtaglen96v1 37.67 37.78 37.87 T:aeadaes256ocbtaglen64v1 45.76 46.00 46.21 T:colm127v1 49.41 49.56 49.71 T:proest128otrv1 51.79 51.94 52.44 T:ketjejrv1 71.79 71.85 73.25 T:present80n6t4silcv3 89.41 89.45 89.57 T:deoxysneq128128v13 103.70 103.81 105.43 T:ketjejrv2 109.18 111.02 114.02 T:deoxyseq128128v13 111.03 111.63 111.74 T:twine80n6clocv1 114.38 114.48 114.64 T:aezv1 126.22 126.26 126.30 T:led80n6t4silcv3 126.63 127.26 127.61 T:deoxysneq256128v13 169.48 171.68 172.14 T:deoxyseq256128v13 434.20 434.55 438.41 T:acorn128 2992.33 2992.69 3008.38 T:present80n6t4silcv2 3000.94 3006.25 3013.15 T:present80n6silcv1 6600.68 6628.43 6635.53 T:led80n6silcv1 6609.23 6630.33 6639.34 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.95? 0.97? 1.29? T:aegis128 1.00 1.02 1.05 aegis128l 1.33 1.35 1.38 T:aegis256 1.39 1.40 1.42 aegis256 1.47 1.49 1.55 T:tiaoxinv1 1.48? 1.49? 1.69? T:tiaoxinv2 1.48 1.49 1.57 T:aezv5 1.50 1.56 1.59 T:aezv3 1.59 1.60 1.63 T:aezv4 2.89 2.90 2.91 T:aes128otrpv3 2.91 2.95 2.97 T:aes128otrsv3 2.96 3.01 3.09 T:deoxysneq128128v1 3.06 3.09 3.15 T:colm0v1 3.26 3.27 3.29 T:aes128n12t8clocv3 3.25 3.27 3.29 T:aes128n12t8clocv2 3.28 3.30 3.33 T:aes128n8t8clocv2 3.31 3.34 3.38 T:aes256otrpv3 3.63 3.67 3.71 T:deoxysneq256128v1 3.66? 3.68? 5.98? T:aeadaes128ocbtaglen128v1 3.70 3.77 3.91 T:deoxysi128v141 3.77 3.80 3.81 T:aes256otrsv3 3.73 3.80 3.84 T:aes128otrcv3 3.84? 3.86? 8.26? T:aeadaes192ocbtaglen128v1 3.88 3.99 4.10 T:morus640128v1 4.12 4.23 4.32 T:morus640128v2 4.62 4.64 4.66 T:aes128n12t8silcv3 4.63 4.64 4.65 T:aes128n12t8silcv2 4.63 4.65 4.66 T:aes128n8t8silcv2 4.62 4.67 4.85 T:deoxysi256v141 4.68 4.73 4.81 T:aes256otrcv3 4.91 4.95 5.21 T:morus1280128v1 4.95 4.98 5.38 T:morus1280256v1 4.34? 4.98? 8.20? T:aeadaes256ocbtaglen128v1 5.21 5.26 5.29 T:morus1280128v2 5.23 5.27 5.33 T:morus1280256v2 5.51 5.56 5.62 T:aes128gcmv1 5.55 5.59 5.78 T:deoxysii128v141 6.09 6.12 6.18 aes256gcmv1 6.18 6.22 6.33 T:deoxyseq256128v1 6.24? 6.31? 7.12? T:deoxyseq128128v1 6.65 6.66 6.69 T:aesjambuv1 8.70 8.72 8.75 T:norx6441v2 8.67 8.73 8.78 T:norx6441v1 8.88 8.91 9.11 T:ascon128av11 8.90 8.98 9.03 T:norx6441v3 8.99 9.03 9.19 T:ascon96v1 9.48 9.57 9.63 T:norx3241v1 9.59 9.61 9.64 T:norx3241v2 9.55 9.65 9.67 T:norx3241v3 9.61 9.69 9.93 T:deoxysii256v141 9.79 9.84 9.84 ascon128av12 11.40 11.40 11.48 ascon128v12 11.62 11.63 11.65 T:ascon128v11 11.62 11.64 11.65 T:ascon128v1 13.08 13.12 13.18 T:norx6461v2 13.32 13.36 13.45 T:norx6461v1 13.33 13.40 13.45 T:norx6461v3 14.44 14.48 14.58 T:norx3261v3 14.48 14.52 15.09 T:lakekeyakv1 14.49 14.52 14.98 T:riverkeyakv2 14.45 14.53 14.59 T:norx3261v2 15.34 15.48 15.55 T:norx6444v3 15.97 16.02 16.07 T:norx3261v1 17.22 17.32 17.53 T:lakekeyakv2 22.02 22.13 22.40 T:twine80n6t4clocv3 21.96 22.20 22.73 T:aes128n8clocv1 22.20 22.32 22.61 T:aes128otrsv2 22.18 22.41 22.86 T:aes128n12clocv1 22.37 22.51 22.54 T:aes128otrsv1 22.94 23.09 23.28 T:aes128otrpv2 23.10 23.17 23.34 T:aes128otrpv1 23.44 23.52 23.65 T:twine80n6t4clocv2 25.43 25.44 26.03 T:aes128n8silcv1 25.52 25.75 26.09 T:aes128n12silcv1 26.30 26.47 26.80 T:acorn128v2 26.39 26.55 26.76 T:seakeyakv2 26.98 27.13 27.34 T:acorn128v3 27.98 28.23 28.43 T:aes256otrsv2 28.26 28.33 28.43 T:aes256otrsv1 28.69 28.82 28.99 T:aes256otrpv2 28.91 29.06 29.21 T:aes256otrpv1 31.81 32.92 33.56 T:ketjeminorv2 37.57 37.62 37.75 T:aeadaes128ocbtaglen64v1 37.60 37.66 37.86 T:aeadaes128ocbtaglen96v1 37.57 37.78 37.81 T:norx6444v2 38.69 38.86 38.89 T:norx6444v1 40.59 40.78 40.98 T:ketjemajorv2 41.25 41.45 42.20 T:oceankeyakv2 42.86 42.91 42.99 T:aeadaes192ocbtaglen96v1 42.86 43.00 43.09 T:aeadaes192ocbtaglen64v1 45.87 46.10 46.31 T:ketjesrv1 49.10 49.29 49.69 T:riverkeyakv1 49.59 49.68 49.79 T:aeadaes256ocbtaglen96v1 49.76 49.88 50.20 T:aeadaes256ocbtaglen64v1 49.41 50.27 50.80 T:ketjesrv2 56.12 56.31 56.48 T:colm127v1 56.83 57.08 57.34 T:proest256otrv1 65.38 65.58 65.84 T:ketjejrv1 88.61 88.69 88.81 T:present80n6t4silcv3 87.94 89.16 89.59 T:deoxysneq128128v13 91.63 91.83 92.16 T:seakeyakv1 96.68 97.20 97.77 T:proest128otrv1 104.85 104.95 105.62 T:lunarkeyakv2 121.20 121.59 122.15 T:aezv1 121.67 122.40 130.01 T:twine80n6clocv1 127.56 128.66 129.07 T:deoxysneq256128v13 137.39 138.12 140.77 T:deoxyseq128128v13 138.57 138.81 139.41 T:ketjejrv2 149.50 149.79 150.10 T:led80n6t4silcv3 164.79 165.18 182.05 T:oceankeyakv1 211.09 211.52 212.01 T:deoxyseq256128v13 1529.32 1531.13 1547.88 T:acorn128 3351.77 3352.28 3352.88 T:present80n6t4silcv2 3356.36 3362.73 3365.41 T:present80n6silcv1 7152.47 7192.41 7290.33 T:led80n6silcv1 7175.04 7241.28 7325.12 T:led80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.03? 1.10? 1.27? T:aegis128 1.13? 1.16? 1.27? aegis128l 1.38 1.41 1.42 T:aegis256 1.48 1.50 1.54 T:aezv5 1.52 1.59 1.60 T:aezv3 1.58 1.59 1.64 aegis256 1.59 1.61 1.62 T:aezv4 1.64? 1.66? 1.91? T:tiaoxinv1 1.66 1.73 1.80 T:tiaoxinv2 2.87 2.88 2.91 T:aes128otrpv3 3.01 3.02 3.05 T:aes128otrsv3 3.30 3.34 3.41 T:aes256otrpv3 3.47 3.51 3.58 T:colm0v1 3.60 3.62 3.64 T:aes128n12t8clocv3 3.60 3.62 3.64 T:aes128n12t8clocv2 3.62 3.67 3.73 T:aes128n8t8clocv2 3.84 3.90 3.95 T:aes128otrcv3 3.99 4.01 4.02 T:aes256otrsv3 3.98 4.08 4.27 T:morus640128v1 4.09? 4.15? 6.16? T:aeadaes128ocbtaglen128v1 3.79? 4.19? 4.87? T:aeadaes192ocbtaglen128v1 4.38 4.41 4.48 T:deoxysneq128128v1 4.46 4.57 4.63 T:morus640128v2 4.66 4.67 4.69 T:aes128n12t8silcv2 4.66 4.67 4.69 T:aes128n12t8silcv3 4.66 4.67 4.69 T:aes128n8t8silcv2 4.62 4.70 4.75 T:deoxysneq256128v1 5.02 5.05 5.09 T:aes256otrcv3 5.16 5.19 5.23 T:deoxysi128v141 4.84? 5.22? 8.73? T:aeadaes256ocbtaglen128v1 5.19 5.23 5.39 T:morus1280128v1 5.22 5.27 5.55 T:morus1280256v1 5.25 5.27 5.31 T:aes128gcmv1 5.60 5.66 5.69 aes256gcmv1 5.73 5.76 5.98 T:morus1280128v2 5.75 5.81 5.91 T:morus1280256v2 6.08 6.12 6.20 T:deoxysi256v141 6.16 6.18 6.25 T:deoxysii128v141 6.84 6.88 6.88 T:aesjambuv1 7.47 7.51 7.56 T:deoxyseq256128v1 8.94 9.00 9.05 T:norx6441v1 9.01 9.01 9.08 T:ascon128av11 8.99 9.02 9.17 T:ascon96v1 9.01 9.07 9.12 T:norx6441v2 9.05 9.19 9.55 T:deoxyseq128128v1 9.15 9.22 9.29 T:norx6441v3 9.91 9.91 9.95 ascon128av12 9.96 10.00 10.08 T:norx3241v1 9.97 10.04 10.11 T:norx3241v2 9.95 10.08 10.17 T:norx3241v3 10.02? 10.12? 11.80? T:deoxysii256v141 11.36 11.36 11.45 ascon128v12 11.68 11.70 11.72 T:ascon128v1 11.69 11.72 11.82 T:ascon128v11 13.35 13.45 13.55 T:norx6461v2 13.53 13.58 13.66 T:norx6461v1 13.59 13.64 13.71 T:norx6461v3 14.66 14.66 15.04 T:lakekeyakv1 14.68 14.86 15.28 T:riverkeyakv2 14.89 14.99 15.05 T:norx3261v2 14.92 15.00 15.05 T:norx3261v3 15.38 15.57 15.62 T:norx6444v3 16.39 16.44 16.48 T:norx3261v1 17.34 17.40 17.51 T:lakekeyakv2 22.27 22.41 22.60 T:aes128otrsv2 22.34 22.44 22.54 T:aes128otrsv1 22.05 22.50 22.88 T:twine80n6t4clocv3 23.16 23.26 23.51 T:aes128otrpv1 22.98 23.33 23.68 T:aes128n12clocv1 23.05 23.34 23.55 T:aes128n8clocv1 23.17 23.45 23.55 T:aes128otrpv2 23.52 23.59 23.71 T:twine80n6t4clocv2 25.48 25.58 26.14 T:aes128n8silcv1 25.51 25.77 26.10 T:aes128n12silcv1 26.26 26.30 26.51 T:seakeyakv2 26.28 26.41 26.73 T:acorn128v2 26.66 26.76 27.27 T:acorn128v3 27.94 28.13 28.33 T:aes256otrsv2 28.09 28.13 28.31 T:aes256otrsv1 28.48 28.59 28.73 T:aes256otrpv2 28.78 29.00 29.15 T:aes256otrpv1 31.44 32.04 32.95 T:ketjeminorv2 38.48 38.48 38.52 T:norx6444v1 38.65 38.69 38.80 T:norx6444v2 40.41 40.69 41.21 T:ketjemajorv2 41.45 41.63 42.46 T:oceankeyakv2 44.60 44.62 44.75 T:aeadaes128ocbtaglen64v1 44.73 44.80 45.00 T:aeadaes128ocbtaglen96v1 47.14 47.24 48.61 T:ketjesrv2 46.97 47.35 47.96 T:ketjesrv1 48.73 49.22 49.62 T:riverkeyakv1 51.40 51.47 51.52 T:aeadaes192ocbtaglen96v1 51.46 51.67 51.70 T:aeadaes192ocbtaglen64v1 58.54 58.68 59.08 T:proest256otrv1 59.59 59.75 59.84 T:aeadaes256ocbtaglen96v1 60.02 60.09 60.22 T:aeadaes256ocbtaglen64v1 63.96 64.41 64.71 T:colm127v1 67.71 67.98 68.24 T:ketjejrv1 88.71 89.11 90.56 T:present80n6t4silcv3 92.05 92.37 92.83 T:seakeyakv1 98.69 99.38 100.99 T:proest128otrv1 99.62 99.77 100.23 T:deoxysneq128128v13 104.58 104.64 105.33 T:lunarkeyakv2 121.20 121.96 122.34 T:twine80n6clocv1 123.62 123.82 124.23 T:aezv1 136.27 137.51 140.23 T:deoxyseq128128v13 139.34 140.27 140.94 T:ketjejrv2 140.31 140.91 141.70 T:deoxysneq256128v13 149.83 150.33 151.08 T:led80n6t4silcv3 164.87? 166.09? 183.44? T:oceankeyakv1 211.16 212.09 213.86 T:deoxyseq256128v13 1514.99 1550.67 1568.55 T:acorn128 3346.01 3351.91 3352.93 T:present80n6t4silcv2 3358.73 3360.94 3364.42 T:present80n6silcv1 7047.20 7068.84 7079.68 T:led80n6silcv1 7045.17 7091.83 7134.27 T:led80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.02 1.07 1.10 T:aegis128 1.14 1.16 1.19 aegis128l 1.23? 1.24? 1.88? T:aezv5 1.32 1.32 1.37 T:aezv4 1.32 1.33 1.35 T:aezv3 1.37 1.39 1.41 T:aegis256 1.56? 1.60? 2.44? aegis256 1.65 1.66 1.67 T:tiaoxinv1 1.63 1.66 1.77 T:tiaoxinv2 2.87 2.88 2.91 T:aes128otrpv3 2.99 3.02 3.04 T:aes128otrsv3 3.30 3.32 3.34 T:aes128n12t8clocv3 3.31 3.33 3.34 T:aes128n12t8clocv2 3.31 3.34 3.38 T:aes256otrpv3 3.30? 3.40? 4.51? T:aes128n8t8clocv2 3.52 3.58 3.64 T:colm0v1 3.83 3.88 3.91 T:aes128otrcv3 4.01 4.02 4.03 T:aes256otrsv3 4.09? 4.11? 4.98? T:aeadaes128ocbtaglen128v1 4.09 4.17 4.27 T:morus640128v1 3.88? 4.23? 7.94? T:aeadaes192ocbtaglen128v1 4.19 4.24 4.30 T:deoxysneq128128v1 4.48 4.54 4.60 T:morus640128v2 4.49 4.58 4.62 T:deoxysneq256128v1 4.59 4.60 4.62 T:aes128n8t8silcv2 4.59? 4.60? 5.64? T:aes128n12t8silcv2 4.59? 4.62? 5.67? T:aes128n12t8silcv3 4.79? 4.83? 6.21? T:aeadaes256ocbtaglen128v1 5.03 5.09 5.14 T:aes256otrcv3 5.16 5.20 5.27 T:morus1280128v1 5.22 5.24 5.31 T:deoxysi128v141 5.17 5.25 5.30 T:morus1280256v1 5.25 5.28 5.34 T:aes128gcmv1 5.61 5.65 5.70 aes256gcmv1 5.67 5.73 5.81 T:morus1280128v2 5.69 5.77 5.82 T:morus1280256v2 6.06 6.09 6.16 T:deoxysi256v141 6.12 6.17 6.21 T:deoxysii128v141 6.86 6.86 6.88 T:aesjambuv1 7.80 7.81 7.83 T:deoxyseq256128v1 8.94 8.99 9.08 T:norx6441v1 9.00 9.00 9.08 T:ascon96v1 8.99 9.04 9.06 T:ascon128av11 8.99 9.04 9.09 T:norx6441v2 9.14 9.20 9.23 T:norx6441v3 9.14 9.23 9.67 T:deoxyseq128128v1 9.91 9.95 9.95 ascon128av12 9.97 10.00 10.14 T:norx3241v3 9.96 10.01 10.08 T:norx3241v2 9.97? 10.04? 11.82? T:deoxysii256v141 9.98 10.04 10.12 T:norx3241v1 11.36 11.36 11.38 ascon128v12 11.69 11.69 11.71 T:ascon128v1 11.69 11.73 11.75 T:ascon128v11 13.37 13.40 13.49 T:norx6461v2 13.46 13.55 13.61 T:norx6461v1 13.55 13.61 13.68 T:norx6461v3 14.83 14.90 14.99 T:norx3261v2 14.89 14.98 15.07 T:norx3261v3 14.86 14.98 15.20 T:riverkeyakv2 14.78 15.04 15.44 T:lakekeyakv1 15.26 15.36 15.42 T:norx6444v3 16.34 16.41 16.48 T:norx3261v1 15.60? 17.43? 17.59? T:lakekeyakv2 22.24 22.38 22.83 T:aes128otrsv2 22.08 22.45 22.77 T:twine80n6t4clocv3 22.46 22.55 22.77 T:aes128otrsv1 22.89 23.05 23.27 T:aes128n12clocv1 23.10 23.26 23.53 T:aes128n8clocv1 23.33 23.38 23.52 T:aes128otrpv1 23.30 23.47 23.76 T:aes128otrpv2 23.48 23.55 24.23 T:twine80n6t4clocv2 25.42 25.52 25.78 T:aes128n8silcv1 25.55 25.70 26.23 T:aes128n12silcv1 26.27 26.30 26.45 T:acorn128v2 26.36 26.40 26.68 T:seakeyakv2 26.66 26.66 26.97 T:acorn128v3 27.90 28.11 28.20 T:aes256otrsv2 28.19 28.27 28.41 T:aes256otrsv1 28.65 28.86 29.20 T:aes256otrpv2 28.81 29.17 29.45 T:aes256otrpv1 31.37 32.09 33.02 T:ketjeminorv2 38.52 38.55 39.07 T:norx6444v1 38.64 38.73 38.82 T:norx6444v2 40.65 41.12 41.31 T:ketjemajorv2 41.55 41.72 42.05 T:oceankeyakv2 44.42 44.71 44.83 T:aeadaes128ocbtaglen64v1 44.97 45.05 45.11 T:aeadaes128ocbtaglen96v1 46.97 47.41 48.09 T:ketjesrv1 47.19 47.95 48.41 T:ketjesrv2 49.05 49.32 49.97 T:riverkeyakv1 51.47 51.50 51.68 T:aeadaes192ocbtaglen96v1 51.48 51.64 51.79 T:aeadaes192ocbtaglen64v1 56.55 56.66 56.91 T:proest256otrv1 59.56 59.80 59.86 T:aeadaes256ocbtaglen64v1 59.64 59.85 60.16 T:aeadaes256ocbtaglen96v1 63.84 64.16 64.36 T:colm127v1 67.50 67.74 68.30 T:ketjejrv1 88.85 89.15 90.63 T:present80n6t4silcv3 92.41 92.76 93.49 T:seakeyakv1 98.00 98.73 99.22 T:proest128otrv1 99.09 99.88 100.13 T:deoxysneq128128v13 104.74 104.91 105.33 T:lunarkeyakv2 121.53 121.76 128.82 T:twine80n6clocv1 123.82 124.25 124.65 T:aezv1 135.62 136.35 139.76 T:deoxyseq128128v13 140.67 140.88 141.57 T:deoxysneq256128v13 140.83 142.00 142.87 T:ketjejrv2 149.50 150.00 150.12 T:led80n6t4silcv3 164.90 165.45 183.03 T:oceankeyakv1 210.70 211.56 213.95 T:deoxyseq256128v13 1539.23 1540.38 1548.95 T:acorn128 3351.84 3352.91 3362.69 T:present80n6t4silcv2 3361.78 3363.80 3366.48 T:present80n6silcv1 7042.52 7089.38 7105.30 T:led80n6silcv1 7065.34 7102.22 7143.97 T:led80n6t4silcv2