VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Raptor Cove (b06a2-40); 2024 Intel Core 5 210H, P cores; 4 x 2200MHz; freshwrap,big, supercop-20260330

[Page version: 20260422 02:31:15]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.18? 0.19? 0.20? T:tiaoxinv1 0.18? 0.19? 0.20? T:tiaoxinv2 0.23 0.24 0.24 aegis128l 0.13? 0.29? 0.41? T:aeadaes128ocbtaglen128v1 0.34 0.35 0.36 T:aezv4 0.21? 0.35? 0.56? T:aeadaes256ocbtaglen128v1 0.34 0.36 0.36 T:aezv3 0.19? 0.39? 0.60? T:aeadaes192ocbtaglen128v1 0.39 0.39 0.40 T:aegis256 0.39 0.40 0.40 aegis256 0.39 0.40 0.41 T:aegis128 0.39 0.40 0.41 T:aezv5 0.44 0.45 0.46 T:aes128otrsv3 0.44 0.46 0.47 T:aes128otrpv3 0.45 0.46 0.48 T:aes128otrcv3 0.55 0.57 0.59 T:aes256otrsv3 0.56 0.57 0.59 T:aes256otrpv3 0.57 0.58 0.60 T:aes256otrcv3 0.67 0.67 0.68 T:deoxysi128v141 0.67 0.68 0.70 T:morus1280128v1 0.68 0.69 0.70 T:morus1280256v2 0.68 0.69 0.70 T:morus1280128v2 0.68 0.69 0.70 T:morus1280256v1 0.69 0.70 0.71 T:deoxysneq128128v1 0.75 0.76 0.77 T:deoxysi256v141 0.77 0.78 0.80 T:deoxysneq256128v1 0.94 0.95 0.96 T:aes128gcmv1 1.05 1.07 1.08 T:norx6444v3 1.05 1.07 1.08 aes256gcmv1 1.17 1.19 1.20 T:morus640128v1 1.18 1.19 1.21 T:morus640128v2 1.37 1.39 1.40 T:colm0v1 1.39 1.41 1.42 T:deoxysii128v141 1.44 1.45 1.46 T:deoxyseq128128v1 1.55 1.57 1.58 T:deoxysii256v141 1.64 1.65 1.66 T:deoxyseq256128v1 1.78 1.85 1.91 T:lunarkeyakv2 2.03 2.05 2.06 T:norx6441v2 2.06 2.07 2.09 T:norx6441v3 2.18 2.19 2.19 T:aes128n12t8clocv3 2.19 2.19 2.19 T:aes128n8t8clocv2 2.18 2.19 2.19 T:aes128n12t8clocv2 2.19 2.20 2.21 T:aes128n12t8silcv3 2.19 2.20 2.21 T:aes128n12t8silcv2 2.20 2.20 2.21 T:aes128n8t8silcv2 2.45 2.47 2.48 T:norx6441v1 2.56 2.58 2.61 T:seakeyakv2 2.53 2.58 2.63 T:oceankeyakv2 2.62 2.66 2.73 T:lakekeyakv1 2.76 2.79 2.83 T:norx6444v2 2.85 2.90 2.97 T:lakekeyakv2 3.08 3.09 3.11 T:norx6461v2 3.07 3.10 3.12 T:norx6461v3 3.13 3.17 3.21 T:norx6444v1 3.60 3.62 3.65 T:norx3241v3 3.62 3.64 3.66 T:norx3241v2 3.70 3.72 3.74 T:norx6461v1 4.36 4.39 4.41 T:norx3241v1 4.38 4.39 4.40 T:aesjambuv1 4.57 4.68 4.72 T:acorn128v3 4.75 4.79 4.85 T:acorn128v2 4.74 4.82 4.89 T:ketjemajorv2 5.50 5.52 5.54 T:norx3261v3 5.55 5.58 5.60 T:norx3261v2 6.20 6.25 6.32 T:ketjeminorv2 6.73 6.76 6.78 T:ascon96v1 6.74 6.77 6.80 T:ascon128av11 6.55 6.77 6.92 T:riverkeyakv2 6.68 6.78 6.88 ascon128av12 7.50 7.52 7.53 T:norx3261v1 9.88 9.91 9.94 T:ascon128v1 9.89 9.91 9.95 T:ascon128v11 10.08 10.16 10.21 ascon128v12 11.05 11.08 11.11 T:aes128otrpv1 11.06 11.09 11.12 T:aes128otrsv2 11.07 11.09 11.12 T:aes128otrsv1 11.08 11.11 11.13 T:aes128otrpv2 14.80 14.82 14.86 T:aes256otrpv2 14.81 14.84 14.87 T:aes256otrpv1 15.26 15.29 15.33 T:aes256otrsv1 15.26 15.29 15.31 T:twine80n6t4clocv3 15.28 15.32 15.35 T:aes256otrsv2 16.04 16.09 16.13 T:twine80n6t4clocv2 17.12 17.25 17.41 T:proest256otrv1 20.58 20.62 20.67 T:ketjesrv1 20.91 20.94 20.97 T:aes128n12clocv1 20.91 20.97 21.02 T:aeadaes128ocbtaglen64v1 20.90 20.97 21.02 T:aeadaes128ocbtaglen96v1 20.93 20.97 21.01 T:aes128n8clocv1 22.73 22.83 22.89 T:ketjesrv2 24.86 24.97 25.04 T:aeadaes192ocbtaglen64v1 24.94 24.99 25.05 T:aeadaes192ocbtaglen96v1 28.80 28.88 29.00 T:aeadaes256ocbtaglen96v1 28.86 28.95 29.05 T:aeadaes256ocbtaglen64v1 38.24 38.58 39.62 T:ketjejrv1 40.32 40.65 41.09 T:proest128otrv1 45.61 45.70 45.81 T:colm127v1 56.41 56.84 57.08 T:deoxysneq128128v13 60.57 61.04 61.16 T:ketjejrv2 72.05 72.11 72.17 T:present80n6t4silcv3 83.10 83.20 83.90 T:deoxysneq256128v13 111.85 112.82 113.52 T:deoxyseq128128v13 127.16 127.31 127.46 T:led80n6t4silcv3 130.84 131.03 131.16 T:aezv1 170.47 171.03 171.21 T:deoxyseq256128v13 373.87 390.52 394.24 T:acorn128 2608.00 2609.19 2610.00 T:led80n6t4silcv2 2608.84 2610.42 2612.58 T:led80n6silcv1 3086.14 3093.66 3101.47 T:present80n6t4silcv2 3086.17 3098.16 3129.03 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.22 0.23 0.24 aegis128l 0.12? 0.28? 0.39? T:aeadaes128ocbtaglen128v1 0.34 0.35 0.36 T:aezv4 0.12? 0.35? 0.47? T:aeadaes256ocbtaglen128v1 0.35 0.35 0.36 T:aezv3 0.37 0.38 0.39 T:aegis256 0.39 0.40 0.40 T:aezv5 0.40 0.40 0.41 T:aegis128 0.19? 0.41? 0.53? T:aeadaes192ocbtaglen128v1 0.41 0.43 0.44 aegis256 0.43 0.44 0.45 T:tiaoxinv1 0.43 0.44 0.45 T:tiaoxinv2 0.48 0.49 0.51 T:aes128otrcv3 0.48 0.49 0.51 T:aes128otrsv3 0.50 0.51 0.53 T:aes128otrpv3 0.60 0.61 0.63 T:aes256otrcv3 0.59 0.61 0.63 T:aes256otrpv3 0.60 0.62 0.64 T:aes256otrsv3 0.67 0.68 0.69 T:morus1280256v1 0.67 0.68 0.69 T:morus1280128v1 0.68 0.68 0.69 T:morus1280256v2 0.67 0.69 0.70 T:morus1280128v2 0.68 0.69 0.70 T:aes128gcmv1 0.79 0.80 0.80 T:deoxysi128v141 0.80 0.81 0.82 aes256gcmv1 0.81 0.82 0.82 T:deoxysneq128128v1 0.86 0.87 0.88 T:deoxysi256v141 0.89 0.90 0.91 T:deoxysneq256128v1 1.03 1.05 1.07 T:norx6444v3 1.13 1.15 1.16 T:morus640128v2 1.15 1.16 1.18 T:morus640128v1 1.35 1.36 1.38 T:deoxysii128v141 1.38 1.40 1.41 T:colm0v1 1.50 1.52 1.54 T:deoxysii256v141 1.73 1.74 1.75 T:deoxyseq128128v1 1.76 1.77 1.78 T:deoxyseq256128v1 1.85 1.91 2.00 T:lunarkeyakv2 1.95 1.97 1.99 T:norx6441v2 1.97 1.99 2.01 T:norx6441v3 2.11 2.12 2.13 T:aes128n12t8silcv3 2.11 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.13 T:aes128n12t8silcv2 2.11 2.12 2.13 T:aes128n12t8clocv2 2.11 2.12 2.13 T:aes128n12t8clocv3 2.11 2.12 2.13 T:aes128n8t8clocv2 2.41 2.43 2.45 T:norx6441v1 2.57 2.61 2.64 T:seakeyakv2 2.58 2.64 2.68 T:oceankeyakv2 2.66 2.71 2.78 T:lakekeyakv1 2.76 2.79 2.82 T:norx6444v2 2.88 2.95 3.01 T:lakekeyakv2 3.04 3.06 3.08 T:norx6461v2 3.04 3.07 3.08 T:norx6461v3 3.14 3.19 3.23 T:norx6444v1 3.54 3.56 3.58 T:norx3241v3 3.55 3.57 3.58 T:norx3241v2 3.70 3.73 3.75 T:norx6461v1 4.30 4.32 4.35 T:norx3241v1 4.53 4.58 4.63 T:ketjemajorv2 4.65 4.66 4.68 T:aesjambuv1 4.73 4.77 4.83 T:acorn128v3 4.74? 4.80? 5.56? T:acorn128v2 5.49 5.53 5.56 T:norx3261v2 5.51 5.54 5.56 T:norx3261v3 6.23 6.28 6.40 T:ketjeminorv2 6.66 6.70 6.73 T:ascon128av11 6.65 6.70 6.73 T:ascon96v1 6.70 6.73 6.76 ascon128av12 6.75 6.89 7.05 T:riverkeyakv2 7.36 7.37 7.39 T:norx3261v1 9.83 9.86 9.91 T:ascon128v1 9.86 9.88 9.91 T:ascon128v11 9.99 10.04 10.08 ascon128v12 11.45 11.49 11.53 T:aes128otrsv1 11.49 11.52 11.55 T:aes128otrsv2 11.48 11.52 11.57 T:aes128otrpv1 11.49 11.53 11.56 T:aes128otrpv2 15.24 15.27 15.31 T:twine80n6t4clocv3 15.29 15.32 15.35 T:aes256otrpv2 15.30 15.33 15.38 T:aes256otrpv1 15.86 15.88 15.92 T:twine80n6t4clocv2 15.87 15.91 15.95 T:aes256otrsv1 15.90 15.95 15.98 T:aes256otrsv2 17.02 17.16 17.27 T:proest256otrv1 18.65 18.70 18.74 T:aes128n12clocv1 19.13 19.17 19.21 T:aes128n8clocv1 21.15 21.25 21.33 T:ketjesrv2 21.52 21.59 21.65 T:ketjesrv1 34.47 34.57 34.65 T:aeadaes128ocbtaglen64v1 34.52 34.60 34.66 T:aeadaes128ocbtaglen96v1 38.53 38.60 38.68 T:ketjejrv1 39.41 39.60 39.85 T:proest128otrv1 41.83 41.91 42.05 T:aeadaes192ocbtaglen96v1 41.86 41.96 42.05 T:aeadaes192ocbtaglen64v1 49.14 49.27 49.38 T:aeadaes256ocbtaglen64v1 49.19 49.32 49.42 T:aeadaes256ocbtaglen96v1 60.98 61.08 61.23 T:ketjejrv2 71.97 72.04 72.10 T:present80n6t4silcv3 73.25 73.42 73.56 T:colm127v1 73.98 74.21 74.68 T:deoxysneq128128v13 112.34 112.49 112.73 T:deoxyseq128128v13 113.83 114.12 114.62 T:deoxysneq256128v13 127.08 127.23 127.34 T:led80n6t4silcv3 130.49 130.60 130.74 T:aezv1 168.12 168.29 170.04 T:deoxyseq256128v13 370.94 386.16 400.99 T:acorn128 2606.24 2607.43 2608.35 T:led80n6t4silcv2 2607.45 2608.31 2609.54 T:led80n6silcv1 3085.24 3091.69 3137.74 T:present80n6t4silcv2 3083.60 3094.91 3163.97 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.12? 0.13? 0.14? T:aezv3 0.13 0.14 0.14 T:aezv4 0.14? 0.15? 0.16? T:aezv5 0.24? 0.24? 0.27? aegis128l 0.18? 0.28? 0.39? T:aeadaes128ocbtaglen128v1 0.14? 0.35? 0.55? T:aeadaes256ocbtaglen128v1 0.38 0.38 0.39 T:aegis256 0.39 0.40 0.40 T:aegis128 0.29? 0.40? 0.61? T:aeadaes192ocbtaglen128v1 0.43 0.44 0.45 T:tiaoxinv2 0.41 0.44 0.45 aegis256 0.43 0.44 0.46 T:tiaoxinv1 0.48 0.49 0.51 T:aes128otrcv3 0.48 0.50 0.51 T:aes128otrpv3 0.48 0.50 0.51 T:aes128otrsv3 0.59 0.60 0.62 T:aes256otrcv3 0.59 0.61 0.62 T:aes256otrpv3 0.60 0.61 0.62 T:aes256otrsv3 0.68 0.68 0.69 T:morus1280256v2 0.67 0.68 0.69 T:morus1280128v2 0.67 0.68 0.69 T:morus1280128v1 0.68 0.69 0.70 T:morus1280256v1 0.68 0.69 0.70 T:aes128gcmv1 0.79 0.80 0.80 T:deoxysi128v141 0.81 0.81 0.82 aes256gcmv1 0.81 0.82 0.83 T:deoxysneq128128v1 0.87 0.88 0.89 T:deoxysi256v141 0.89 0.91 0.92 T:deoxysneq256128v1 1.03 1.05 1.07 T:norx6444v3 1.14 1.16 1.17 T:morus640128v1 1.14 1.16 1.17 T:morus640128v2 1.35 1.36 1.38 T:deoxysii128v141 1.38 1.40 1.44 T:colm0v1 1.50 1.52 1.54 T:deoxysii256v141 1.72 1.74 1.76 T:deoxyseq128128v1 1.76 1.77 1.79 T:deoxyseq256128v1 1.88 1.93 1.99 T:lunarkeyakv2 1.96 1.97 1.99 T:norx6441v2 1.98 1.99 2.01 T:norx6441v3 2.11 2.12 2.12 T:aes128n12t8silcv3 2.11 2.12 2.12 T:aes128n12t8silcv2 2.11 2.12 2.12 T:aes128n8t8silcv2 2.11 2.12 2.13 T:aes128n12t8clocv2 2.11 2.12 2.13 T:aes128n8t8clocv2 2.11 2.12 2.13 T:aes128n12t8clocv3 2.41 2.43 2.45 T:norx6441v1 2.59 2.64 2.70 T:oceankeyakv2 2.62 2.65 2.70 T:seakeyakv2 2.67 2.72 2.79 T:lakekeyakv1 2.81 2.83 2.85 T:norx6444v2 2.88 2.93 3.00 T:lakekeyakv2 3.04 3.06 3.09 T:norx6461v3 3.05 3.06 3.08 T:norx6461v2 3.16 3.20 3.25 T:norx6444v1 3.54 3.56 3.58 T:norx3241v3 3.54 3.57 3.59 T:norx3241v2 3.69 3.73 3.75 T:norx6461v1 4.28 4.31 4.34 T:norx3241v1 4.55 4.62 4.67 T:ketjemajorv2 4.66 4.67 4.68 T:aesjambuv1 4.76 4.79 4.82 T:acorn128v2 4.86 4.88 4.91 T:acorn128v3 5.49 5.51 5.54 T:norx3261v2 5.52 5.54 5.57 T:norx3261v3 6.19 6.30 6.42 T:ketjeminorv2 6.65 6.69 6.74 T:ascon128av11 6.66 6.70 6.72 T:ascon96v1 6.69 6.73 6.76 ascon128av12 6.71 6.88 7.02 T:riverkeyakv2 7.36 7.37 7.39 T:norx3261v1 9.83 9.87 9.91 T:ascon128v1 9.85 9.88 9.92 T:ascon128v11 9.99 10.03 10.09 ascon128v12 11.46 11.52 11.56 T:aes128otrsv1 11.50 11.55 11.59 T:aes128otrpv1 11.49 11.55 11.61 T:aes128otrpv2 11.49 11.55 11.60 T:aes128otrsv2 15.23 15.28 15.32 T:twine80n6t4clocv3 15.31 15.35 15.38 T:aes256otrpv1 15.33 15.36 15.40 T:aes256otrpv2 15.82 15.89 15.96 T:twine80n6t4clocv2 15.88 15.93 15.98 T:aes256otrsv1 15.88 15.95 16.00 T:aes256otrsv2 17.07 17.21 17.24 T:proest256otrv1 18.62 18.67 18.71 T:aes128n12clocv1 19.16 19.20 19.24 T:aes128n8clocv1 21.26 21.35 21.41 T:ketjesrv2 21.55 21.61 21.65 T:ketjesrv1 34.52 34.59 34.68 T:aeadaes128ocbtaglen64v1 34.57 34.66 34.75 T:aeadaes128ocbtaglen96v1 38.41 38.53 38.61 T:ketjejrv1 39.31 39.56 39.85 T:proest128otrv1 41.81 41.92 42.02 T:aeadaes192ocbtaglen64v1 41.92 42.04 42.14 T:aeadaes192ocbtaglen96v1 49.20 49.32 49.45 T:aeadaes256ocbtaglen64v1 49.27 49.36 49.46 T:aeadaes256ocbtaglen96v1 60.52 61.04 61.29 T:ketjejrv2 71.94 72.02 72.09 T:present80n6t4silcv3 72.18 72.35 72.51 T:colm127v1 74.72 74.94 75.06 T:deoxysneq128128v13 112.23 112.42 114.91 T:deoxyseq128128v13 113.04 113.65 113.86 T:deoxysneq256128v13 127.10 127.21 127.31 T:led80n6t4silcv3 130.45 130.59 130.81 T:aezv1 168.85 169.73 170.53 T:deoxyseq256128v13 371.22 384.88 401.23 T:acorn128 2606.62 2607.37 2608.27 T:led80n6t4silcv2 2607.29 2608.72 2616.02 T:led80n6silcv1 3086.76 3091.09 3128.97 T:present80n6t4silcv2 3082.95 3091.37 3111.26 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.15 0.15 0.16 T:tiaoxinv2 0.15? 0.16? 0.17? T:tiaoxinv1 0.21 0.21 0.22 aegis128l 0.19? 0.25? 0.33? T:aeadaes128ocbtaglen128v1 0.26 0.26 0.27 T:aezv3 0.26 0.26 0.27 T:aezv4 0.27 0.28 0.29 T:aezv5 0.23? 0.32? 0.39? T:aeadaes256ocbtaglen128v1 0.28? 0.38? 0.46? T:aeadaes192ocbtaglen128v1 0.38 0.39 0.39 aegis256 0.38 0.39 0.39 T:aegis256 0.39 0.39 0.40 T:aegis128 0.45 0.46 0.47 T:aes128otrpv3 0.47 0.48 0.50 T:aes128otrcv3 0.59 0.59 0.60 T:aes256otrpv3 0.59 0.61 0.62 T:aes256otrcv3 0.62 0.63 0.64 T:aes128gcmv1 0.66 0.66 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280256v2 0.66 0.67 0.67 T:morus1280128v1 0.66 0.67 0.67 T:morus1280128v2 0.66 0.67 0.68 T:deoxysi128v141 0.69 0.69 0.70 T:deoxysneq128128v1 0.69 0.70 0.71 aes256gcmv1 0.75 0.76 0.77 T:deoxysi256v141 0.77 0.77 0.78 T:deoxysneq256128v1 0.97 0.98 0.99 T:colm0v1 1.04 1.05 1.06 T:deoxysii128v141 1.08 1.09 1.10 T:deoxyseq128128v1 1.14 1.14 1.15 T:morus640128v2 1.14 1.15 1.16 T:morus640128v1 1.16 1.17 1.18 T:deoxysii256v141 1.23 1.24 1.25 T:deoxyseq256128v1 1.29 1.29 1.30 T:aes128otrsv3 1.56 1.57 1.59 T:norx6444v3 1.72 1.73 1.74 T:aes256otrsv3 2.03 2.04 2.05 T:norx6441v2 2.04 2.05 2.07 T:norx6441v3 2.16 2.16 2.17 T:aes128n12t8silcv3 2.16 2.16 2.17 T:aes128n12t8clocv3 2.16 2.16 2.17 T:aes128n8t8clocv2 2.16 2.17 2.17 T:aes128n8t8silcv2 2.16 2.17 2.17 T:aes128n12t8clocv2 2.16 2.17 2.17 T:aes128n12t8silcv2 2.15 2.17 2.19 T:seakeyakv2 2.16 2.18 2.20 T:oceankeyakv2 2.46 2.48 2.49 T:norx6441v1 2.54 2.58 2.62 T:lakekeyakv2 2.55 2.59 2.63 T:lakekeyakv1 2.60 2.66 2.70 T:lunarkeyakv2 2.65 2.68 2.70 T:norx6444v2 3.09 3.11 3.12 T:norx6461v3 3.09 3.11 3.13 T:norx6461v2 3.22 3.25 3.29 T:norx6444v1 3.62 3.64 3.65 T:norx3241v3 3.66 3.67 3.69 T:norx3241v2 3.68 3.70 3.72 T:norx6461v1 4.09 4.12 4.15 T:ketjemajorv2 4.34 4.35 4.36 T:aesjambuv1 4.38 4.40 4.41 T:norx3241v1 4.58 4.61 4.65 T:acorn128v3 4.85 4.97 5.09 T:riverkeyakv2 4.75 5.05 5.08 T:acorn128v2 5.52 5.53 5.55 T:norx3261v3 5.51 5.54 5.56 T:norx3261v2 5.61 5.65 5.73 T:ketjeminorv2 6.55 6.59 6.62 T:ascon128av11 6.57 6.59 6.61 T:ascon96v1 6.74 6.77 6.81 ascon128av12 7.50 7.51 7.52 T:norx3261v1 9.74 9.76 9.79 T:ascon128v1 9.75 9.77 9.79 T:ascon128v11 10.01 10.08 10.14 ascon128v12 10.80 10.82 10.85 T:aes128otrpv1 10.81 10.84 10.87 T:aes128otrpv2 11.18 11.20 11.22 T:aes128otrsv1 11.20 11.21 11.23 T:aes128otrsv2 14.53 14.55 14.58 T:aes256otrpv1 14.53 14.56 14.59 T:aes256otrpv2 14.65 14.68 14.71 T:aes256otrsv1 14.67 14.70 14.72 T:aes256otrsv2 15.04 15.06 15.08 T:twine80n6t4clocv3 15.78 15.82 15.87 T:twine80n6t4clocv2 16.11 16.13 16.16 T:aes128n12clocv1 16.11 16.14 16.15 T:aes128n8clocv1 17.29 17.34 17.41 T:proest256otrv1 19.96 19.98 20.01 T:ketjesrv1 20.66 20.71 20.76 T:aeadaes128ocbtaglen96v1 20.67 20.71 20.75 T:aeadaes128ocbtaglen64v1 21.46 21.51 21.54 T:ketjesrv2 24.60 24.66 24.76 T:aeadaes192ocbtaglen64v1 24.64 24.68 24.71 T:aeadaes192ocbtaglen96v1 28.54 28.58 28.63 T:aeadaes256ocbtaglen64v1 28.61 28.68 28.72 T:aeadaes256ocbtaglen96v1 34.10 34.18 34.26 T:colm127v1 35.44 35.52 35.62 T:ketjejrv1 39.96 40.02 40.14 T:proest128otrv1 55.97 56.11 56.45 T:deoxysneq128128v13 58.80 59.08 59.26 T:ketjejrv2 71.59 71.63 71.67 T:present80n6t4silcv3 83.74 83.92 84.20 T:deoxyseq128128v13 83.75 84.72 84.80 T:deoxysneq256128v13 85.95 86.08 86.22 T:aezv1 126.62 126.71 126.82 T:led80n6t4silcv3 127.45 127.68 128.00 T:deoxyseq256128v13 387.41 399.63 417.94 T:acorn128 1955.87 1956.50 1957.21 T:led80n6t4silcv2 1956.79 1957.27 1959.01 T:led80n6silcv1 2311.08 2321.87 2346.07 T:present80n6silcv1 2315.54 2324.46 2346.75 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.21 0.21 0.21 aegis128l 0.15? 0.24? 0.31? T:aeadaes128ocbtaglen128v1 0.26 0.26 0.26 T:aezv4 0.26 0.26 0.26 T:aezv3 0.27 0.28 0.29 T:tiaoxinv2 0.27 0.28 0.28 T:tiaoxinv1 0.27 0.28 0.29 T:aezv5 0.20? 0.32? 0.38? T:aeadaes256ocbtaglen128v1 0.38 0.38 0.39 T:aegis256 0.38 0.38 0.39 T:aegis128 0.30? 0.39? 0.50? T:aeadaes192ocbtaglen128v1 0.39 0.40 0.41 aegis256 0.48 0.49 0.50 T:aes128otrpv3 0.48 0.49 0.50 T:aes128otrcv3 0.49 0.50 0.51 T:aes128gcmv1 0.56 0.57 0.58 aes256gcmv1 0.60 0.61 0.63 T:aes256otrpv3 0.62 0.63 0.64 T:aes256otrcv3 0.66 0.67 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280128v1 0.66 0.67 0.67 T:morus1280128v2 0.66 0.67 0.67 T:morus1280256v2 0.73 0.73 0.74 T:deoxysi128v141 0.75 0.75 0.76 T:deoxysneq128128v1 0.81 0.81 0.82 T:deoxysi256v141 0.83 0.84 0.84 T:deoxysneq256128v1 0.98 0.98 1.00 T:colm0v1 1.01 1.02 1.03 T:deoxysii128v141 1.11 1.12 1.15 T:morus640128v2 1.12 1.13 1.14 T:morus640128v1 1.13 1.14 1.16 T:deoxysii256v141 1.23 1.23 1.24 T:deoxyseq128128v1 1.29 1.29 1.30 T:deoxyseq256128v1 1.30 1.30 1.31 T:aes128otrsv3 1.54 1.56 1.57 T:norx6444v3 1.74 1.74 1.75 T:aes256otrsv3 2.04 2.05 2.06 T:norx6441v3 2.05 2.06 2.07 T:norx6441v2 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.13 2.14 T:aes128n8t8clocv2 2.12 2.13 2.14 T:aes128n12t8clocv3 2.12 2.13 2.16 T:aes128n12t8clocv2 2.12 2.13 2.17 T:aes128n12t8silcv3 2.12 2.13 2.16 T:aes128n12t8silcv2 2.19 2.21 2.24 T:seakeyakv2 2.17 2.21 2.24 T:oceankeyakv2 2.43 2.45 2.46 T:norx6441v1 2.56 2.59 2.63 T:lakekeyakv1 2.56 2.61 2.66 T:lakekeyakv2 2.62 2.68 2.72 T:lunarkeyakv2 2.66 2.68 2.71 T:norx6444v2 3.05 3.07 3.08 T:norx6461v3 3.07 3.09 3.10 T:norx6461v2 3.16 3.21 3.28 T:norx6444v1 3.60 3.61 3.63 T:norx3241v3 3.61 3.62 3.63 T:norx3241v2 3.65 3.67 3.69 T:norx6461v1 3.96 4.01 4.06 T:ketjemajorv2 4.34 4.36 4.37 T:norx3241v1 4.48 4.49 4.50 T:aesjambuv1 4.64 4.87 4.89 T:acorn128v2 4.75 4.91 5.07 T:riverkeyakv2 4.78? 5.23? 5.54? T:acorn128v3 5.50 5.51 5.53 T:norx3261v2 5.52 5.54 5.56 T:norx3261v3 5.63 5.68 6.18 T:ketjeminorv2 6.53 6.57 6.60 T:ascon128av11 6.55 6.58 6.61 T:ascon96v1 6.69 6.71 6.73 ascon128av12 7.43 7.44 7.45 T:norx3261v1 9.71 9.73 9.75 T:ascon128v1 9.72 9.75 9.77 T:ascon128v11 10.03 10.05 10.08 ascon128v12 11.01 11.03 11.06 T:aes128otrpv1 11.02 11.05 11.08 T:aes128otrpv2 11.38 11.40 11.41 T:aes128otrsv1 11.39 11.41 11.44 T:aes128otrsv2 14.76 14.79 14.81 T:aes256otrpv2 14.78 14.80 14.83 T:aes256otrpv1 14.98 15.01 15.03 T:aes256otrsv2 14.98 15.01 15.04 T:aes256otrsv1 15.00 15.03 15.06 T:aes128n12clocv1 15.02 15.04 15.08 T:twine80n6t4clocv3 15.21 15.24 15.26 T:aes128n8clocv1 15.67 15.71 15.74 T:twine80n6t4clocv2 17.30 17.38 17.41 T:proest256otrv1 20.42 20.47 20.50 T:ketjesrv1 20.69 20.73 20.80 T:ketjesrv2 27.48 27.55 27.60 T:aeadaes128ocbtaglen96v1 27.51 27.56 27.63 T:aeadaes128ocbtaglen64v1 33.14 33.19 33.24 T:aeadaes192ocbtaglen96v1 33.16 33.21 33.26 T:aeadaes192ocbtaglen64v1 35.65 35.72 35.80 T:ketjejrv1 38.81 38.87 38.93 T:aeadaes256ocbtaglen96v1 38.77 38.89 38.97 T:aeadaes256ocbtaglen64v1 39.28 39.46 39.72 T:proest128otrv1 48.06 48.14 48.23 T:colm127v1 58.75 58.92 59.07 T:ketjejrv2 64.75 65.13 65.51 T:deoxysneq128128v13 71.56 71.64 71.86 T:present80n6t4silcv3 83.33 83.60 83.85 T:deoxyseq128128v13 85.88 86.00 86.14 T:aezv1 99.14 99.50 99.74 T:deoxysneq256128v13 126.07 126.52 127.50 T:deoxyseq256128v13 126.56 126.64 126.77 T:led80n6t4silcv3 388.71 416.90 421.99 T:acorn128 1955.09 1955.55 1956.80 T:led80n6t4silcv2 1954.15 1956.36 1957.08 T:led80n6silcv1 2311.64 2320.04 2337.39 T:present80n6silcv1 2315.41 2322.17 2348.00 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.14 0.15 0.15 T:aezv3 0.14 0.15 0.15 T:aezv4 0.15 0.15 0.16 T:aezv5 0.21 0.22 0.22 aegis128l 0.18? 0.24? 0.31? T:aeadaes128ocbtaglen128v1 0.27 0.28 0.28 T:tiaoxinv1 0.27 0.28 0.29 T:tiaoxinv2 0.20? 0.31? 0.42? T:aeadaes256ocbtaglen128v1 0.38 0.38 0.38 T:aegis256 0.38 0.38 0.39 T:aegis128 0.29? 0.39? 0.45? T:aeadaes192ocbtaglen128v1 0.39 0.39 0.42 aegis256 0.47 0.48 0.49 T:aes128otrpv3 0.48 0.49 0.50 T:aes128otrcv3 0.49 0.50 0.50 T:aes128gcmv1 0.56 0.57 0.57 aes256gcmv1 0.60 0.61 0.62 T:aes256otrpv3 0.62 0.63 0.64 T:aes256otrcv3 0.66 0.67 0.67 T:morus1280256v2 0.66 0.67 0.67 T:morus1280128v2 0.66 0.67 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280128v1 0.73 0.74 0.74 T:deoxysi128v141 0.75 0.75 0.76 T:deoxysneq128128v1 0.81 0.81 0.82 T:deoxysi256v141 0.83 0.84 0.84 T:deoxysneq256128v1 0.98 0.99 1.03 T:colm0v1 1.01 1.02 1.03 T:deoxysii128v141 1.11 1.12 1.14 T:morus640128v2 1.12 1.13 1.14 T:morus640128v1 1.13 1.14 1.17 T:deoxysii256v141 1.22 1.23 1.24 T:deoxyseq128128v1 1.28 1.29 1.30 T:deoxyseq256128v1 1.30 1.30 1.31 T:aes128otrsv3 1.54 1.56 1.57 T:norx6444v3 1.74 1.74 1.75 T:aes256otrsv3 2.04 2.05 2.06 T:norx6441v3 2.05 2.07 2.08 T:norx6441v2 2.12 2.13 2.17 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n12t8silcv3 2.12 2.13 2.17 T:aes128n8t8clocv2 2.12 2.13 2.17 T:aes128n12t8clocv2 2.12 2.13 2.17 T:aes128n12t8silcv2 2.12 2.13 2.13 T:aes128n8t8silcv2 2.18 2.22 2.25 T:oceankeyakv2 2.21 2.23 2.26 T:seakeyakv2 2.44 2.45 2.46 T:norx6441v1 2.56 2.60 2.65 T:lakekeyakv1 2.58 2.62 2.66 T:lakekeyakv2 2.65 2.68 2.71 T:lunarkeyakv2 2.68 2.69 2.72 T:norx6444v2 3.06 3.07 3.09 T:norx6461v3 3.08 3.09 3.10 T:norx6461v2 3.18 3.22 3.28 T:norx6444v1 3.60 3.61 3.63 T:norx3241v3 3.60 3.62 3.63 T:norx3241v2 3.66 3.67 3.69 T:norx6461v1 3.98 4.01 4.06 T:ketjemajorv2 4.35 4.36 4.38 T:norx3241v1 4.48 4.49 4.49 T:aesjambuv1 4.61 4.87 4.90 T:acorn128v2 4.86 4.96 5.07 T:riverkeyakv2 4.80 5.14 5.18 T:acorn128v3 5.49 5.51 5.53 T:norx3261v2 5.53 5.54 5.56 T:norx3261v3 5.62? 5.67? 6.31? T:ketjeminorv2 6.53 6.56 6.60 T:ascon128av11 6.57 6.59 6.61 T:ascon96v1 6.67 6.70 6.73 ascon128av12 7.43 7.44 7.45 T:norx3261v1 9.71 9.73 9.77 T:ascon128v1 9.72 9.74 9.77 T:ascon128v11 10.02 10.04 10.07 ascon128v12 11.01 11.04 11.06 T:aes128otrpv1 11.03 11.06 11.09 T:aes128otrpv2 11.38 11.41 11.44 T:aes128otrsv2 11.41 11.44 11.47 T:aes128otrsv1 14.78 14.81 14.83 T:aes256otrpv1 14.78 14.81 14.84 T:aes256otrpv2 14.98 15.01 15.04 T:aes256otrsv2 14.99 15.03 15.05 T:aes256otrsv1 15.00 15.03 15.06 T:aes128n12clocv1 15.03 15.04 15.08 T:twine80n6t4clocv3 15.21 15.23 15.26 T:aes128n8clocv1 15.66 15.69 15.74 T:twine80n6t4clocv2 17.14 17.31 17.38 T:proest256otrv1 20.43 20.45 20.49 T:ketjesrv1 20.67 20.74 20.79 T:ketjesrv2 27.49 27.53 27.57 T:aeadaes128ocbtaglen96v1 27.50 27.53 27.59 T:aeadaes128ocbtaglen64v1 33.14 33.18 33.24 T:aeadaes192ocbtaglen96v1 33.18 33.22 33.26 T:aeadaes192ocbtaglen64v1 35.52 35.72 35.96 T:ketjejrv1 38.82 38.87 38.94 T:aeadaes256ocbtaglen64v1 38.83 38.87 38.92 T:aeadaes256ocbtaglen96v1 39.32 39.39 39.58 T:proest128otrv1 47.40 47.47 47.54 T:colm127v1 58.81 59.09 59.43 T:ketjejrv2 65.03 65.26 65.36 T:deoxysneq128128v13 71.54 71.60 71.74 T:present80n6t4silcv3 83.50 84.04 84.90 T:deoxyseq128128v13 85.89 85.93 85.97 T:aezv1 98.64 99.22 99.47 T:deoxysneq256128v13 126.57 126.66 126.77 T:led80n6t4silcv3 126.57 127.17 127.46 T:deoxyseq256128v13 389.37 417.78 422.12 T:acorn128 1955.09 1955.66 1956.47 T:led80n6t4silcv2 1955.38 1956.39 1957.26 T:led80n6silcv1 2311.69 2318.19 2331.07 T:present80n6silcv1 2315.08 2319.01 2334.40 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.11? 0.12? 0.13? T:tiaoxinv2 0.11? 0.12? 0.13? T:tiaoxinv1 0.16 0.16 0.17 T:aezv5 0.16? 0.17? 0.18? T:aezv3 0.16? 0.17? 0.18? T:aezv4 0.19 0.19 0.20 aegis128l 0.10? 0.24? 0.36? T:aeadaes128ocbtaglen128v1 0.09? 0.30? 0.42? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aes128gcmv1 0.32 0.33 0.34 aes256gcmv1 0.37 0.37 0.38 aegis256 0.37 0.38 0.38 T:aegis256 0.37 0.38 0.39 T:aegis128 0.23? 0.38? 0.51? T:aeadaes192ocbtaglen128v1 0.45 0.47 0.49 T:aes128otrpv3 0.47 0.48 0.50 T:aes128otrcv3 0.57 0.58 0.60 T:colm0v1 0.59 0.60 0.63 T:aes256otrpv3 0.60 0.62 0.64 T:aes256otrcv3 0.63 0.64 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280128v1 0.66 0.67 0.68 T:deoxysi128v141 0.67 0.68 0.68 T:deoxysii128v141 0.68 0.69 0.70 T:deoxysneq128128v1 0.71 0.73 0.74 T:deoxyseq128128v1 0.74 0.76 0.77 T:deoxysi256v141 0.75 0.76 0.78 T:deoxysii256v141 0.76 0.77 0.77 T:deoxysneq256128v1 0.81 0.83 0.84 T:deoxyseq256128v1 1.09 1.10 1.12 T:morus640128v1 1.09 1.10 1.12 T:morus640128v2 1.64 1.70 1.77 T:lunarkeyakv2 1.67 1.71 1.76 T:oceankeyakv2 2.01 2.03 2.04 T:norx6441v3 2.03 2.04 2.05 T:norx6441v2 2.05 2.07 2.08 T:norx6444v3 2.07 2.10 2.12 T:seakeyakv2 2.10 2.11 2.12 T:aes128n8t8clocv2 2.10 2.11 2.12 T:aes128n12t8clocv2 2.11 2.12 2.12 T:aes128n12t8clocv3 2.11 2.12 2.12 T:aes128otrsv3 2.11 2.12 2.13 T:aes128n12t8silcv2 2.11 2.12 2.13 T:aes128n8t8silcv2 2.12 2.13 2.13 T:aes128n12t8silcv3 2.28 2.33 2.39 T:lakekeyakv2 2.32 2.38 2.42 T:lakekeyakv1 2.45 2.46 2.48 T:norx6441v1 2.50 2.53 2.56 T:norx6444v2 2.87 2.87 2.88 T:aes256otrsv3 3.09 3.11 3.13 T:norx6461v3 3.11 3.13 3.15 T:norx6461v2 3.27 3.31 3.35 T:norx6444v1 3.41 3.50 3.60 T:ketjemajorv2 3.62 3.64 3.66 T:norx3241v3 3.65 3.67 3.69 T:norx3241v2 3.67 3.69 3.71 T:norx6461v1 4.30 4.31 4.32 T:aesjambuv1 4.37 4.39 4.42 T:norx3241v1 4.43 4.56 4.64 T:acorn128v3 4.54 4.66 4.81 T:riverkeyakv2 5.01 5.09 5.15 T:ketjeminorv2 4.58? 5.25? 5.47? T:acorn128v2 5.44 5.47 5.49 T:norx3261v2 5.52 5.55 5.57 T:norx3261v3 6.40 6.43 6.46 T:ascon96v1 6.38 6.45 6.49 T:ascon128av11 6.66 6.68 6.71 ascon128av12 7.49 7.51 7.53 T:norx3261v1 9.59 9.62 9.65 T:ascon128v11 9.58 9.62 9.67 T:ascon128v1 10.02 10.06 10.10 ascon128v12 10.49 10.52 10.54 T:aes128otrpv1 10.52 10.55 10.58 T:aes128otrpv2 11.28 11.30 11.32 T:aes128otrsv1 11.28 11.31 11.33 T:aes128otrsv2 11.32 11.35 11.39 T:aes128n8clocv1 11.33 11.35 11.37 T:aes128n12clocv1 14.01 14.04 14.07 T:aes256otrsv1 14.01 14.05 14.08 T:aes256otrsv2 14.20 14.23 14.25 T:aes256otrpv2 14.20 14.23 14.25 T:aes256otrpv1 14.78 14.84 14.89 T:twine80n6t4clocv3 15.47 15.53 15.60 T:twine80n6t4clocv2 17.45 17.54 17.60 T:proest256otrv1 19.32 19.35 19.39 T:ketjesrv1 20.17 20.24 20.28 T:ketjesrv2 20.40 20.46 20.50 T:aeadaes128ocbtaglen96v1 20.48 20.52 20.55 T:aeadaes128ocbtaglen64v1 22.58 22.68 22.78 T:colm127v1 24.35 24.42 24.50 T:aeadaes192ocbtaglen96v1 24.40 24.44 24.49 T:aeadaes192ocbtaglen64v1 28.31 28.39 28.47 T:aeadaes256ocbtaglen96v1 28.36 28.42 28.49 T:aeadaes256ocbtaglen64v1 32.40 32.55 32.69 T:ketjejrv1 39.10 39.38 39.53 T:proest128otrv1 41.32 41.38 41.45 T:aezv1 55.10 55.42 56.00 T:deoxyseq128128v13 55.31 55.51 56.28 T:deoxysneq128128v13 56.53 56.87 57.01 T:ketjejrv2 71.14 71.20 71.25 T:present80n6t4silcv3 84.69 84.78 84.91 T:deoxysneq256128v13 84.25 84.81 84.92 T:deoxyseq256128v13 126.00 126.09 126.23 T:led80n6t4silcv3 366.26 370.95 373.65 T:acorn128 1303.34 1303.92 1304.53 T:led80n6t4silcv2 1303.67 1304.33 1305.12 T:led80n6silcv1 1542.27 1544.85 1576.07 T:present80n6t4silcv2 1541.23 1546.06 1556.30 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.11? 0.11? 0.13? T:tiaoxinv2 0.11? 0.12? 0.13? T:tiaoxinv1 0.16 0.16 0.17 T:aezv5 0.16? 0.17? 0.18? T:aezv3 0.16? 0.17? 0.18? T:aezv4 0.19 0.19 0.19 aegis128l 0.11? 0.24? 0.35? T:aeadaes128ocbtaglen128v1 0.08? 0.30? 0.51? T:aeadaes256ocbtaglen128v1 0.29 0.30 0.31 T:aes128gcmv1 0.31 0.32 0.33 aes256gcmv1 0.37 0.37 0.37 T:aegis128 0.37 0.38 0.38 T:aegis256 0.27? 0.38? 0.49? T:aeadaes192ocbtaglen128v1 0.37 0.38 0.41 aegis256 0.46 0.47 0.48 T:aes128otrpv3 0.47 0.49 0.50 T:aes128otrcv3 0.55 0.57 0.59 T:colm0v1 0.58 0.60 0.63 T:aes256otrpv3 0.60 0.62 0.63 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280256v2 0.66 0.67 0.68 T:deoxysi128v141 0.66 0.67 0.69 T:deoxysii128v141 0.68 0.69 0.70 T:deoxysneq128128v1 0.71 0.72 0.73 T:deoxyseq128128v1 0.75 0.76 0.76 T:deoxysi256v141 0.75 0.77 0.77 T:deoxysneq256128v1 0.75 0.77 0.78 T:deoxysii256v141 0.81 0.82 0.83 T:deoxyseq256128v1 1.06 1.08 1.09 T:morus640128v2 1.09 1.10 1.12 T:morus640128v1 1.65 1.70 1.78 T:lunarkeyakv2 1.67 1.72 1.75 T:oceankeyakv2 2.05 2.06 2.09 T:norx6444v3 2.07 2.09 2.10 T:norx6441v3 2.07 2.09 2.12 T:seakeyakv2 2.08 2.10 2.11 T:norx6441v2 2.10 2.12 2.13 T:aes128n8t8clocv2 2.11 2.12 2.12 T:aes128otrsv3 2.11 2.12 2.13 T:aes128n12t8silcv2 2.11 2.12 2.13 T:aes128n12t8clocv3 2.12 2.12 2.13 T:aes128n12t8clocv2 2.12 2.12 2.13 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128n8t8silcv2 2.25 2.31 2.35 T:lakekeyakv2 2.35 2.40 2.44 T:lakekeyakv1 2.43 2.45 2.47 T:norx6441v1 2.51 2.54 2.57 T:norx6444v2 2.87 2.88 2.88 T:aes256otrsv3 3.06 3.08 3.10 T:norx6461v3 3.09 3.11 3.14 T:norx6461v2 3.27 3.29 3.32 T:norx6444v1 3.45 3.52 3.57 T:ketjemajorv2 3.64 3.66 3.68 T:norx3241v3 3.65 3.68 3.70 T:norx6461v1 3.65 3.68 3.71 T:norx3241v2 4.30 4.31 4.32 T:aesjambuv1 4.39 4.42 4.43 T:norx3241v1 4.31? 4.50? 4.93? T:acorn128v2 4.58 4.74 4.86 T:riverkeyakv2 5.01 5.08 5.18 T:ketjeminorv2 5.29 5.38 5.59 T:acorn128v3 5.45 5.47 5.50 T:norx3261v2 5.53 5.55 5.58 T:norx3261v3 6.37 6.42 6.50 T:ascon128av11 6.46 6.49 6.52 T:ascon96v1 6.66 6.68 6.72 ascon128av12 7.49 7.51 7.53 T:norx3261v1 9.57 9.60 9.64 T:ascon128v11 9.58 9.61 9.64 T:ascon128v1 10.02 10.08 10.13 ascon128v12 10.50 10.53 10.56 T:aes128otrpv1 10.51 10.54 10.57 T:aes128otrpv2 11.28 11.30 11.33 T:aes128otrsv1 11.28 11.31 11.35 T:aes128otrsv2 11.32 11.35 11.38 T:aes128n12clocv1 11.33 11.36 11.39 T:aes128n8clocv1 14.01 14.07 14.11 T:aes256otrsv2 14.03 14.08 14.11 T:aes256otrsv1 14.20 14.23 14.26 T:aes256otrpv1 14.19 14.24 14.28 T:aes256otrpv2 14.78 14.82 14.89 T:twine80n6t4clocv3 15.44 15.50 15.59 T:twine80n6t4clocv2 17.47 18.09 18.93 T:proest256otrv1 19.30 19.36 19.40 T:ketjesrv1 20.16 20.24 20.31 T:ketjesrv2 20.37 20.42 20.46 T:aeadaes128ocbtaglen96v1 20.41 20.45 20.50 T:aeadaes128ocbtaglen64v1 22.59 22.67 22.74 T:colm127v1 24.31 24.39 24.43 T:aeadaes192ocbtaglen96v1 24.37 24.42 24.48 T:aeadaes192ocbtaglen64v1 28.35 28.41 28.46 T:aeadaes256ocbtaglen96v1 28.41 28.49 28.54 T:aeadaes256ocbtaglen64v1 32.47 32.56 32.68 T:ketjejrv1 39.08 39.31 39.60 T:proest128otrv1 41.30 41.41 41.48 T:aezv1 54.79 54.93 55.40 T:deoxyseq128128v13 55.22 55.40 55.55 T:deoxysneq128128v13 56.88 57.04 57.19 T:ketjejrv2 70.96 71.12 71.23 T:present80n6t4silcv3 83.25 83.48 83.90 T:deoxyseq256128v13 83.95 84.21 84.84 T:deoxysneq256128v13 125.95 126.09 126.24 T:led80n6t4silcv3 363.08 370.86 398.34 T:acorn128 1303.52 1304.19 1304.97 T:led80n6t4silcv2 1303.51 1304.47 1304.97 T:led80n6silcv1 1541.32 1543.27 1545.92 T:present80n6t4silcv2 1539.90 1548.07 1612.65 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.10? 0.11? 0.12? T:tiaoxinv1 0.11? 0.12? 0.13? T:tiaoxinv2 0.16 0.16 0.17 T:aezv5 0.16 0.17 0.17 T:aezv3 0.16? 0.17? 0.18? T:aezv4 0.17? 0.19? 0.19? aegis128l 0.13? 0.24? 0.35? T:aeadaes128ocbtaglen128v1 0.29 0.30 0.31 T:aes128gcmv1 0.18? 0.30? 0.52? T:aeadaes256ocbtaglen128v1 0.31 0.32 0.33 aes256gcmv1 0.37 0.37 0.37 T:aegis128 0.36 0.37 0.38 aegis256 0.37 0.37 0.38 T:aegis256 0.28? 0.38? 0.49? T:aeadaes192ocbtaglen128v1 0.45 0.47 0.48 T:aes128otrpv3 0.47 0.48 0.50 T:aes128otrcv3 0.56 0.57 0.59 T:colm0v1 0.58 0.60 0.62 T:aes256otrpv3 0.60 0.62 0.63 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280128v2 0.67 0.67 0.68 T:deoxysi128v141 0.66 0.67 0.69 T:deoxysii128v141 0.68 0.69 0.70 T:deoxysneq128128v1 0.71 0.72 0.73 T:deoxyseq128128v1 0.75 0.76 0.77 T:deoxysi256v141 0.75 0.76 0.77 T:deoxysii256v141 0.76 0.77 0.77 T:deoxysneq256128v1 0.81 0.82 0.83 T:deoxyseq256128v1 1.07 1.09 1.14 T:morus640128v2 1.09 1.10 1.12 T:morus640128v1 1.67 1.71 1.76 T:oceankeyakv2 1.67 1.72 1.77 T:lunarkeyakv2 2.05 2.07 2.09 T:norx6444v3 2.07 2.09 2.10 T:norx6441v3 2.09 2.10 2.11 T:norx6441v2 2.08 2.11 2.14 T:seakeyakv2 2.11 2.12 2.12 T:aes128otrsv3 2.12 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.12 2.13 T:aes128n12t8silcv3 2.11 2.13 2.14 T:aes128n12t8clocv2 2.11 2.13 2.20 T:aes128n12t8clocv3 2.13 2.13 2.16 T:aes128n8t8clocv2 2.29 2.33 2.37 T:lakekeyakv2 2.35 2.40 2.44 T:lakekeyakv1 2.43 2.45 2.47 T:norx6441v1 2.52 2.54 2.57 T:norx6444v2 2.87 2.88 2.88 T:aes256otrsv3 3.06 3.08 3.10 T:norx6461v3 3.10 3.11 3.13 T:norx6461v2 3.24 3.29 3.32 T:norx6444v1 3.45 3.52 3.58 T:ketjemajorv2 3.64 3.67 3.68 T:norx3241v3 3.65 3.67 3.69 T:norx6461v1 3.66 3.68 3.69 T:norx3241v2 4.30 4.31 4.32 T:aesjambuv1 4.39 4.41 4.43 T:norx3241v1 4.59 4.72 4.85 T:riverkeyakv2 4.86 5.04 5.16 T:acorn128v2 4.99 5.07 5.18 T:ketjeminorv2 4.65? 5.24? 5.38? T:acorn128v3 5.45 5.47 5.49 T:norx3261v2 5.53 5.55 5.57 T:norx3261v3 6.36 6.45 6.51 T:ascon128av11 6.46 6.49 6.52 T:ascon96v1 6.66 6.69 6.72 ascon128av12 7.50 7.51 7.53 T:norx3261v1 9.57 9.61 9.65 T:ascon128v11 9.58 9.62 9.66 T:ascon128v1 10.03 10.07 10.12 ascon128v12 10.49 10.55 10.59 T:aes128otrpv1 10.50 10.55 10.60 T:aes128otrpv2 11.28 11.31 11.34 T:aes128otrsv2 11.26 11.31 11.35 T:aes128otrsv1 11.32 11.35 11.38 T:aes128n12clocv1 11.33 11.35 11.38 T:aes128n8clocv1 14.02 14.08 14.12 T:aes256otrsv1 14.02 14.09 14.14 T:aes256otrsv2 14.20 14.23 14.26 T:aes256otrpv1 14.20 14.23 14.28 T:aes256otrpv2 14.75 14.83 14.88 T:twine80n6t4clocv3 15.39 15.46 15.54 T:twine80n6t4clocv2 17.46 17.54 17.66 T:proest256otrv1 19.32 19.36 19.41 T:ketjesrv1 20.15 20.25 20.31 T:ketjesrv2 20.40 20.45 20.49 T:aeadaes128ocbtaglen96v1 20.42 20.46 20.51 T:aeadaes128ocbtaglen64v1 22.53 22.64 22.77 T:colm127v1 24.33 24.37 24.45 T:aeadaes192ocbtaglen96v1 24.45 24.50 24.54 T:aeadaes192ocbtaglen64v1 28.37 28.42 28.52 T:aeadaes256ocbtaglen64v1 28.36 28.43 28.48 T:aeadaes256ocbtaglen96v1 32.59 32.72 32.88 T:ketjejrv1 38.94 39.08 39.40 T:proest128otrv1 41.28 41.39 41.47 T:aezv1 55.42 55.68 55.96 T:deoxysneq128128v13 55.00 55.80 56.34 T:deoxyseq128128v13 57.16 57.28 57.39 T:ketjejrv2 71.13 71.20 71.25 T:present80n6t4silcv3 83.82 83.94 84.61 T:deoxysneq256128v13 84.20 84.54 84.76 T:deoxyseq256128v13 126.00 126.13 126.26 T:led80n6t4silcv3 363.29 371.57 397.82 T:acorn128 1303.65 1304.05 1304.57 T:led80n6t4silcv2 1304.03 1304.59 1307.22 T:led80n6silcv1 1542.63 1546.01 1560.41 T:present80n6t4silcv2 1541.01 1546.16 1565.58 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.20 0.20 0.21 T:tiaoxinv2 0.20 0.20 0.21 T:tiaoxinv1 0.24 0.24 0.25 aegis128l 0.30 0.30 0.31 T:aezv3 0.30 0.31 0.31 T:aezv4 0.32 0.32 0.33 T:aezv5 0.38? 0.39? 0.47? T:aeadaes128ocbtaglen128v1 0.41 0.42 0.42 T:aegis128 0.42 0.42 0.42 T:aegis256 0.42 0.42 0.43 aegis256 0.48? 0.48? 0.61? T:aeadaes192ocbtaglen128v1 0.48? 0.48? 0.57? T:aeadaes256ocbtaglen128v1 0.52 0.53 0.53 T:aes128otrpv3 0.58 0.59 0.59 T:aes128otrcv3 0.67 0.67 0.68 T:aes256otrpv3 0.73 0.74 0.74 T:aes128gcmv1 0.75 0.75 0.77 T:aes256otrcv3 0.77 0.77 0.78 T:deoxysi128v141 0.78 0.78 0.79 T:deoxysneq128128v1 0.81 0.81 0.82 T:morus1280128v1 0.81 0.81 0.82 T:morus1280256v1 0.81 0.82 0.83 aes256gcmv1 0.82 0.82 0.83 T:morus1280256v2 0.82 0.83 0.83 T:morus1280128v2 0.87 0.88 0.89 T:deoxysneq256128v1 0.89 0.89 0.89 T:deoxysi256v141 1.05 1.05 1.06 T:colm0v1 1.17 1.18 1.19 T:deoxysii128v141 1.18 1.18 1.19 T:deoxyseq128128v1 1.27 1.28 1.29 T:morus640128v1 1.28 1.29 1.29 T:morus640128v2 1.33 1.33 1.34 T:deoxysii256v141 1.34 1.35 1.35 T:aes128otrsv3 1.34 1.35 1.36 T:deoxyseq256128v1 1.80 1.81 1.82 T:aes256otrsv3 2.14 2.14 2.15 T:norx6444v3 2.18 2.19 2.20 T:aes128n8t8clocv2 2.18 2.19 2.19 T:aes128n12t8clocv2 2.19 2.19 2.20 T:aes128n8t8silcv2 2.19 2.19 2.20 T:aes128n12t8silcv2 2.19 2.19 2.21 T:aes128n12t8silcv3 2.18 2.19 2.20 T:aes128n12t8clocv3 2.35 2.36 2.37 T:norx6441v2 2.36 2.37 2.38 T:norx6441v3 2.74 2.75 2.76 T:norx6441v1 2.84 2.86 2.89 T:lakekeyakv2 3.02 3.03 3.08 T:lakekeyakv1 3.09 3.09 3.11 T:seakeyakv2 3.57 3.59 3.60 T:norx6461v3 3.58 3.59 3.60 T:norx6461v2 3.83 3.84 3.87 T:norx6444v2 3.91 3.92 3.93 T:norx3241v3 3.95 3.96 3.97 T:norx3241v2 4.03 4.04 4.07 T:oceankeyakv2 4.13 4.14 4.16 T:norx6461v1 4.38 4.38 4.39 T:aesjambuv1 4.57 4.59 4.64 T:norx6444v1 4.63 4.64 4.66 T:norx3241v1 5.13 5.22 5.31 T:riverkeyakv2 5.33 5.34 5.36 T:ketjemajorv2 5.35 5.38 5.43 T:acorn128v3 5.49 5.62 5.84 T:acorn128v2 5.95 5.96 5.97 T:norx3261v2 5.95 5.96 5.97 T:norx3261v3 6.37 6.39 6.42 T:ketjeminorv2 6.72 6.73 6.75 T:ascon96v1 6.72 6.75 6.77 T:ascon128av11 6.85 6.88 6.93 ascon128av12 7.03 7.04 7.07 T:lunarkeyakv2 7.90 7.91 7.92 T:norx3261v1 9.88 9.90 9.92 T:ascon128v1 9.89 9.91 9.93 T:ascon128v11 10.15 10.23 10.28 ascon128v12 11.13 11.16 11.18 T:aes128otrpv1 11.15 11.18 11.21 T:aes128otrpv2 11.49 11.50 11.51 T:aes128otrsv1 11.49 11.51 11.52 T:aes128otrsv2 14.95 14.98 15.00 T:aes256otrpv1 14.98 14.99 15.01 T:aes256otrpv2 15.07 15.09 15.12 T:aes256otrsv2 15.08 15.10 15.12 T:aes256otrsv1 15.24 15.25 15.28 T:twine80n6t4clocv3 15.99 16.02 16.11 T:twine80n6t4clocv2 16.24 16.25 16.28 T:aes128n12clocv1 16.24 16.25 16.29 T:aes128n8clocv1 18.90 18.92 18.97 T:proest256otrv1 20.54 20.56 20.58 T:ketjesrv1 21.20 21.24 21.33 T:aeadaes128ocbtaglen96v1 21.24 21.27 21.30 T:aeadaes128ocbtaglen64v1 22.22 22.25 22.28 T:ketjesrv2 25.20 25.24 25.27 T:aeadaes192ocbtaglen64v1 25.22 25.26 25.30 T:aeadaes192ocbtaglen96v1 29.36 29.41 29.47 T:aeadaes256ocbtaglen96v1 29.37 29.42 29.46 T:aeadaes256ocbtaglen64v1 34.79 34.83 34.87 T:colm127v1 36.09 36.25 36.32 T:ketjejrv1 41.64 41.68 41.73 T:proest128otrv1 56.46 56.88 57.06 T:deoxysneq128128v13 59.80 59.87 60.34 T:ketjejrv2 72.34 72.37 72.45 T:present80n6t4silcv3 84.35 84.38 84.42 T:aezv1 84.55 84.82 85.05 T:deoxyseq128128v13 84.23 84.86 85.16 T:deoxysneq256128v13 127.26 127.38 127.96 T:deoxyseq256128v13 127.67 127.75 127.83 T:led80n6t4silcv3 416.66 426.07 443.97 T:acorn128 1966.37 1966.63 1969.03 T:led80n6t4silcv2 1966.90 1967.59 1968.30 T:led80n6silcv1 2327.84 2331.69 2353.73 T:present80n6t4silcv2 2326.42 2332.29 2375.08 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.24 0.24 0.25 aegis128l 0.30 0.30 0.31 T:aezv3 0.30 0.31 0.31 T:aezv4 0.32 0.32 0.32 T:aezv5 0.32 0.32 0.32 T:tiaoxinv2 0.32 0.32 0.33 T:tiaoxinv1 0.38? 0.38? 0.46? T:aeadaes128ocbtaglen128v1 0.41 0.41 0.42 T:aegis128 0.42 0.42 0.42 T:aegis256 0.44 0.44 0.45 aegis256 0.48? 0.48? 0.56? T:aeadaes192ocbtaglen128v1 0.48? 0.49? 0.56? T:aeadaes256ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrpv3 0.60 0.60 0.61 T:aes128otrcv3 0.60 0.61 0.61 T:aes128gcmv1 0.69 0.70 0.70 aes256gcmv1 0.69 0.70 0.71 T:aes256otrpv3 0.78 0.79 0.80 T:aes256otrcv3 0.81 0.82 0.82 T:morus1280128v1 0.81 0.82 0.82 T:morus1280256v1 0.82 0.83 0.83 T:morus1280256v2 0.82 0.83 0.83 T:morus1280128v2 0.88 0.88 0.88 T:deoxysi128v141 0.89 0.90 0.90 T:deoxysneq128128v1 0.98 0.98 0.98 T:deoxysneq256128v1 0.99 1.00 1.00 T:deoxysi256v141 1.06 1.06 1.08 T:colm0v1 1.18 1.19 1.20 T:deoxysii128v141 1.26 1.26 1.27 T:morus640128v1 1.26 1.27 1.28 T:morus640128v2 1.36 1.36 1.38 T:deoxysii256v141 1.36 1.37 1.37 T:aes128otrsv3 1.37 1.38 1.39 T:deoxyseq128128v1 1.43 1.43 1.44 T:deoxyseq256128v1 1.82 1.83 1.83 T:aes256otrsv3 2.13 2.14 2.15 T:norx6444v3 2.13 2.14 2.16 T:aes128n8t8clocv2 2.14 2.14 2.17 T:aes128n12t8clocv2 2.14 2.14 2.17 T:aes128n12t8clocv3 2.14 2.15 2.15 T:aes128n12t8silcv3 2.14 2.15 2.15 T:aes128n12t8silcv2 2.14 2.15 2.18 T:aes128n8t8silcv2 2.34 2.35 2.36 T:norx6441v3 2.37 2.38 2.39 T:norx6441v2 2.70 2.71 2.72 T:norx6441v1 2.84 2.88 2.91 T:lakekeyakv2 3.04 3.05 3.08 T:lakekeyakv1 3.12 3.13 3.14 T:seakeyakv2 3.55 3.56 3.57 T:norx6461v3 3.57 3.58 3.59 T:norx6461v2 3.84 3.86 3.89 T:norx6444v2 3.89 3.90 3.91 T:norx3241v3 3.89 3.91 3.92 T:norx3241v2 4.05 4.07 4.11 T:oceankeyakv2 4.13 4.15 4.16 T:norx6461v1 4.52 4.53 4.53 T:aesjambuv1 4.54 4.58 4.65 T:norx6444v1 4.59 4.60 4.61 T:norx3241v1 5.05 5.14 5.23 T:riverkeyakv2 5.25 5.26 5.30 T:ketjemajorv2 5.42 5.44 5.73 T:acorn128v2 5.53? 5.88? 6.30? T:acorn128v3 5.92 5.94 5.96 T:norx3261v2 5.97 5.98 5.99 T:norx3261v3 6.36 6.40 6.65 T:ketjeminorv2 6.67 6.72 6.74 T:ascon128av11 6.71 6.73 6.74 T:ascon96v1 6.83 6.85 6.87 ascon128av12 7.03 7.05 7.09 T:lunarkeyakv2 7.85 7.85 7.86 T:norx3261v1 9.85 9.86 9.88 T:ascon128v1 9.85 9.87 9.89 T:ascon128v11 10.16 10.19 10.23 ascon128v12 11.35 11.38 11.40 T:aes128otrpv1 11.37 11.39 11.41 T:aes128otrpv2 11.70 11.71 11.73 T:aes128otrsv1 11.71 11.73 11.75 T:aes128otrsv2 15.14 15.16 15.20 T:aes128n12clocv1 15.19 15.21 15.23 T:aes256otrpv2 15.20 15.22 15.26 T:aes256otrpv1 15.23 15.25 15.27 T:twine80n6t4clocv3 15.36 15.39 15.42 T:aes128n8clocv1 15.37 15.39 15.42 T:aes256otrsv2 15.38 15.40 15.43 T:aes256otrsv1 15.92 15.94 15.96 T:twine80n6t4clocv2 18.87 18.95 18.97 T:proest256otrv1 21.04 21.06 21.09 T:ketjesrv1 21.45 21.49 21.53 T:ketjesrv2 28.20 28.24 28.32 T:aeadaes128ocbtaglen64v1 28.21 28.25 28.30 T:aeadaes128ocbtaglen96v1 33.92 33.97 34.02 T:aeadaes192ocbtaglen64v1 33.94 33.98 34.00 T:aeadaes192ocbtaglen96v1 36.10 36.17 36.38 T:ketjejrv1 39.74 39.79 39.85 T:aeadaes256ocbtaglen64v1 39.76 39.79 39.84 T:aeadaes256ocbtaglen96v1 41.03 41.08 41.29 T:proest128otrv1 48.60 48.65 48.70 T:colm127v1 59.74 59.93 60.06 T:ketjejrv2 65.21 65.33 65.67 T:deoxysneq128128v13 72.30 72.34 72.50 T:present80n6t4silcv3 84.29 84.39 84.51 T:aezv1 84.42 84.51 85.11 T:deoxyseq128128v13 99.13 100.01 100.44 T:deoxysneq256128v13 127.63 127.72 127.80 T:led80n6t4silcv3 127.67 128.85 129.03 T:deoxyseq256128v13 422.50 443.90 444.97 T:acorn128 1965.48 1965.98 1966.71 T:led80n6t4silcv2 1966.23 1966.75 1969.87 T:led80n6silcv1 2326.07 2329.97 2342.60 T:present80n6t4silcv2 2330.22 2334.63 2370.38 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17 0.17 0.18 T:aezv3 0.17 0.17 0.18 T:aezv4 0.17? 0.17? 0.19? T:aezv5 0.25 0.25 0.26 aegis128l 0.32 0.32 0.33 T:tiaoxinv1 0.32 0.32 0.33 T:tiaoxinv2 0.37? 0.38? 0.44? T:aeadaes128ocbtaglen128v1 0.41 0.41 0.42 T:aegis128 0.42 0.42 0.42 T:aegis256 0.43 0.43 0.45 aegis256 0.47? 0.48? 0.60? T:aeadaes192ocbtaglen128v1 0.48? 0.49? 0.61? T:aeadaes256ocbtaglen128v1 0.54 0.55 0.55 T:aes128otrpv3 0.60 0.60 0.61 T:aes128otrcv3 0.61 0.61 0.61 T:aes128gcmv1 0.69 0.69 0.70 T:aes256otrpv3 0.69 0.70 0.70 aes256gcmv1 0.78 0.78 0.79 T:aes256otrcv3 0.81 0.82 0.82 T:morus1280256v1 0.81 0.82 0.83 T:morus1280128v1 0.82 0.83 0.83 T:morus1280256v2 0.83 0.83 0.83 T:morus1280128v2 0.88 0.88 0.89 T:deoxysi128v141 0.89 0.89 0.89 T:deoxysneq128128v1 0.97 0.98 0.98 T:deoxysneq256128v1 1.00 1.00 1.00 T:deoxysi256v141 1.06 1.06 1.07 T:colm0v1 1.18 1.19 1.20 T:deoxysii128v141 1.25 1.26 1.27 T:morus640128v1 1.25 1.27 1.30 T:morus640128v2 1.36 1.37 1.37 T:aes128otrsv3 1.36 1.37 1.39 T:deoxysii256v141 1.37 1.38 1.38 T:deoxyseq128128v1 1.42 1.43 1.44 T:deoxyseq256128v1 1.83 1.83 1.84 T:aes256otrsv3 2.13 2.13 2.13 T:aes128n12t8clocv2 2.13 2.13 2.14 T:aes128n12t8clocv3 2.13 2.13 2.21 T:aes128n8t8clocv2 2.13 2.13 2.15 T:norx6444v3 2.13 2.14 2.16 T:aes128n8t8silcv2 2.14 2.14 2.18 T:aes128n12t8silcv2 2.14 2.15 2.23 T:aes128n12t8silcv3 2.34 2.35 2.37 T:norx6441v3 2.37 2.38 2.39 T:norx6441v2 2.70 2.71 2.72 T:norx6441v1 2.85 2.88 2.92 T:lakekeyakv2 3.03 3.06 3.09 T:lakekeyakv1 3.13 3.14 3.16 T:seakeyakv2 3.55 3.56 3.57 T:norx6461v3 3.57 3.58 3.59 T:norx6461v2 3.85 3.86 3.88 T:norx6444v2 3.90 3.90 3.92 T:norx3241v2 3.90 3.90 3.92 T:norx3241v3 4.07 4.09 4.11 T:oceankeyakv2 4.14 4.15 4.17 T:norx6461v1 4.52 4.52 4.53 T:aesjambuv1 4.56 4.60 4.65 T:norx6444v1 4.59 4.60 4.61 T:norx3241v1 5.23 5.26 5.29 T:ketjemajorv2 5.19 5.27 5.35 T:riverkeyakv2 5.46 5.50 5.51 T:acorn128v2 5.51 5.53 5.85 T:acorn128v3 5.93 5.94 5.96 T:norx3261v2 5.97 5.99 6.00 T:norx3261v3 6.38 6.41 6.44 T:ketjeminorv2 6.67 6.70 6.73 T:ascon128av11 6.71 6.73 6.75 T:ascon96v1 6.83 6.85 6.88 ascon128av12 7.06 7.08 7.09 T:lunarkeyakv2 7.84 7.85 7.86 T:norx3261v1 9.85 9.87 9.89 T:ascon128v1 9.85 9.87 9.89 T:ascon128v11 10.16 10.20 10.24 ascon128v12 11.37 11.39 11.42 T:aes128otrpv1 11.39 11.42 11.44 T:aes128otrpv2 11.72 11.74 11.76 T:aes128otrsv2 11.73 11.75 11.78 T:aes128otrsv1 15.14 15.15 15.18 T:aes128n12clocv1 15.21 15.23 15.26 T:aes256otrpv1 15.21 15.23 15.26 T:aes256otrpv2 15.23 15.26 15.28 T:twine80n6t4clocv3 15.36 15.38 15.41 T:aes128n8clocv1 15.40 15.42 15.44 T:aes256otrsv1 15.40 15.42 15.45 T:aes256otrsv2 15.91 15.94 16.03 T:twine80n6t4clocv2 18.88 18.92 18.94 T:proest256otrv1 21.06 21.08 21.09 T:ketjesrv1 21.44 21.46 21.49 T:ketjesrv2 28.20 28.24 28.27 T:aeadaes128ocbtaglen96v1 28.21 28.25 28.29 T:aeadaes128ocbtaglen64v1 33.92 33.96 34.00 T:aeadaes192ocbtaglen96v1 33.92 33.96 34.01 T:aeadaes192ocbtaglen64v1 36.00 36.20 36.34 T:ketjejrv1 39.73 39.77 39.85 T:aeadaes256ocbtaglen64v1 39.77 39.81 39.86 T:aeadaes256ocbtaglen96v1 41.02 41.14 41.43 T:proest128otrv1 48.59 48.64 48.71 T:colm127v1 59.74 59.97 60.16 T:ketjejrv2 65.13 65.25 65.56 T:deoxysneq128128v13 72.28 72.31 72.35 T:present80n6t4silcv3 84.41 84.43 84.47 T:aezv1 84.44 84.70 84.95 T:deoxyseq128128v13 98.81 99.15 100.35 T:deoxysneq256128v13 127.61 127.69 127.79 T:led80n6t4silcv3 127.53 127.97 129.08 T:deoxyseq256128v13 424.43 443.81 444.12 T:acorn128 1965.59 1966.01 1966.67 T:led80n6t4silcv2 1965.70 1966.38 1967.19 T:led80n6silcv1 2329.05 2333.23 2360.73 T:present80n6silcv1 2329.07 2335.12 2383.46 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.91 0.95 0.98 T:aegis128 0.94 0.97 1.01 aegis128l 1.05 1.08 1.15 T:aezv5 1.06? 1.15? 1.24? T:aezv3 1.15 1.18 1.23 T:aezv4 1.18? 1.25? 1.40? T:tiaoxinv2 1.18? 1.26? 1.42? T:tiaoxinv1 1.27 1.29 1.32 aegis256 1.27 1.30 1.34 T:aegis256 2.00 2.05 2.19 T:aes128otrpv3 2.28 2.40 2.48 T:aes128otrsv3 2.56 2.62 2.73 T:colm0v1 2.69 2.73 2.82 T:aes128n8t8clocv2 2.73 2.80 2.84 T:aes128n12t8clocv3 2.72 2.81 2.98 T:aes128otrcv3 2.75 2.81 2.93 T:aes256otrpv3 2.76 2.81 2.86 T:aes128n12t8clocv2 2.82 2.88 2.94 T:deoxysneq128128v1 2.91 2.94 3.03 T:aes128n8t8silcv2 2.90 2.94 3.00 T:aes128n12t8silcv3 2.91 2.96 3.01 T:aes128n12t8silcv2 2.91? 3.05? 5.62? T:aeadaes192ocbtaglen128v1 3.03 3.08 3.16 T:deoxysi128v141 3.21 3.34 3.42 T:aes256otrsv3 3.37 3.42 3.51 T:deoxysneq256128v1 3.37? 3.62? 5.72? T:aeadaes128ocbtaglen128v1 3.82 3.92 4.02 T:aes256otrcv3 3.85 3.93 3.99 T:deoxysi256v141 3.96 4.03 4.11 T:deoxyseq128128v1 4.09 4.18 4.23 T:morus1280128v1 4.16 4.22 4.33 T:morus1280256v1 4.18 4.25 4.36 T:morus640128v1 4.14? 4.30? 6.43? T:aeadaes256ocbtaglen128v1 4.39 4.45 4.53 T:morus1280128v2 4.41 4.49 4.55 T:morus1280256v2 4.43 4.53 4.64 T:morus640128v2 4.65 4.70 4.80 aes256gcmv1 4.73 4.81 4.90 T:deoxyseq256128v1 4.79 4.91 5.08 T:aes128gcmv1 5.05 5.13 5.21 T:aesjambuv1 5.40 5.47 5.58 T:deoxysii128v141 6.41 6.46 6.61 T:deoxysii256v141 7.48 7.56 7.66 T:norx6441v2 7.53 7.61 7.72 T:norx6441v3 7.56 7.64 7.75 T:norx6441v1 9.41 9.49 9.63 T:norx3241v2 9.48 9.56 9.66 T:norx3241v1 9.46 9.57 9.68 T:norx3241v3 9.77 9.90 10.03 T:ascon96v1 9.84 9.94 10.06 T:ascon128av11 10.09 10.15 10.49 T:lakekeyakv1 10.12 10.24 10.38 ascon128av12 11.41 11.52 11.69 T:norx6461v2 11.48 11.59 11.71 T:norx6461v3 11.54 11.65 11.81 T:norx6461v1 11.74 11.93 12.57 T:riverkeyakv2 12.44 12.54 12.96 T:lakekeyakv2 12.84 12.94 13.09 T:ascon128v1 12.85 12.95 13.06 T:ascon128v11 13.16 13.26 13.44 ascon128v12 13.77 13.88 14.05 T:norx6444v3 14.24 14.36 14.57 T:norx3261v2 14.42 14.50 14.59 T:norx3261v3 16.14 16.22 16.30 T:norx3261v1 18.51 18.59 18.76 T:aes128otrsv2 18.51 18.60 18.66 T:aes128otrsv1 18.68 18.75 18.92 T:aes128otrpv2 18.68 18.76 18.83 T:aes128otrpv1 18.91 18.99 19.09 T:aes128n8clocv1 18.93 19.03 19.14 T:aes128n12clocv1 19.97 20.06 20.18 T:twine80n6t4clocv3 21.11 21.24 21.48 T:twine80n6t4clocv2 22.10 22.40 22.89 T:ketjeminorv2 22.23 22.77 24.08 T:acorn128v3 23.21 23.41 24.12 T:acorn128v2 24.18 24.27 24.42 T:aes256otrsv1 24.18 24.30 24.49 T:aes256otrsv2 24.62 24.71 24.83 T:aes256otrpv1 24.67 24.75 24.87 T:aes256otrpv2 27.58 27.75 27.94 T:norx6444v2 27.83 27.94 28.23 T:seakeyakv2 32.80 33.02 33.24 T:norx6444v1 32.98 33.31 33.72 T:ketjemajorv2 34.08 34.29 34.61 T:aeadaes128ocbtaglen96v1 34.17 34.31 34.52 T:ketjesrv1 34.09 34.49 35.31 T:aeadaes128ocbtaglen64v1 38.85 39.18 39.59 T:ketjesrv2 39.56 39.70 40.04 T:aeadaes192ocbtaglen64v1 39.62 39.85 40.35 T:aeadaes192ocbtaglen96v1 43.68 43.85 44.36 T:oceankeyakv2 46.34? 46.54? 53.93? T:aeadaes256ocbtaglen96v1 46.42 46.57 46.84 T:aeadaes256ocbtaglen64v1 48.06 48.51 48.78 T:ketjejrv1 49.67 49.91 50.96 T:colm127v1 54.72 54.96 58.57 T:proest256otrv1 63.60 63.93 64.48 T:deoxysneq128128v13 79.98 80.39 80.79 T:proest128otrv1 80.70 81.09 81.51 T:ketjejrv2 88.47 88.65 88.86 T:present80n6t4silcv3 94.50 94.85 95.15 T:deoxysneq256128v13 96.94 97.19 97.75 T:aezv1 105.19 106.22 107.71 T:deoxyseq128128v13 113.65 113.98 114.52 T:lunarkeyakv2 150.90 151.25 151.52 T:led80n6t4silcv3 157.92 158.55 160.17 T:deoxyseq256128v13 1419.31 1441.54 1445.90 T:acorn128 2200.39 2201.30 2202.28 T:led80n6t4silcv2 2201.63 2203.72 2205.85 T:led80n6silcv1 2606.04 2608.23 2616.45 T:present80n6silcv1 2607.33 2609.31 2627.14 T:present80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.01? 1.04? 1.14? aegis128l 1.07 1.10 1.17 T:aezv5 1.09 1.12 1.17 T:aegis128 1.07? 1.18? 1.29? T:aezv3 1.14 1.21 1.26 T:aezv4 1.25 1.28 1.30 T:aegis256 1.24? 1.31? 1.40? T:tiaoxinv2 1.26? 1.34? 1.50? T:tiaoxinv1 1.34 1.37 1.41 aegis256 1.98 2.04 2.16 T:aes128otrpv3 2.34 2.44 2.59 T:aes128otrsv3 2.46 2.49 2.56 T:aes128n12t8clocv3 2.43 2.49 2.58 T:aes128n8t8clocv2 2.46 2.50 2.58 T:aes128n12t8clocv2 2.58 2.67 2.84 T:aes128n12t8silcv2 2.59 2.69 2.86 T:aes128n8t8silcv2 2.59 2.70 2.83 T:aes128n12t8silcv3 2.72 2.78 2.93 T:colm0v1 2.70? 2.81? 5.47? T:aeadaes192ocbtaglen128v1 2.82 2.88 2.95 T:aes256otrpv3 2.90 2.98 3.04 T:aes128otrcv3 3.25 3.31 3.36 T:aes256otrsv3 3.31? 3.57? 5.67? T:aeadaes128ocbtaglen128v1 3.80 3.90 4.03 T:aes256otrcv3 4.18 4.25 4.35 T:morus640128v1 4.28 4.33 4.40 T:morus1280256v1 4.28 4.34 4.38 T:deoxysneq128128v1 4.30 4.34 4.39 T:morus1280128v1 4.22? 4.38? 7.68? T:aeadaes256ocbtaglen128v1 4.51 4.55 4.60 T:deoxysneq256128v1 4.52 4.57 4.62 T:morus1280256v2 4.48 4.58 4.69 T:morus640128v2 4.53 4.59 4.62 T:morus1280128v2 4.76 4.79 4.84 T:deoxysi128v141 5.07 5.13 5.19 aes256gcmv1 5.24 5.36 5.52 T:aes128gcmv1 5.31 5.41 5.46 T:aesjambuv1 5.63 5.69 5.81 T:deoxyseq256128v1 5.80 5.87 5.98 T:deoxysi256v141 5.92 6.01 6.08 T:deoxyseq128128v1 6.18 6.29 6.36 T:deoxysii128v141 7.71 7.78 7.89 T:norx6441v1 7.77 7.86 8.00 T:norx6441v2 7.77 7.86 7.98 T:deoxysii256v141 7.81 7.89 7.99 T:norx6441v3 9.63 9.71 9.81 T:norx3241v2 9.65 9.73 9.79 T:norx3241v1 9.70 9.81 9.94 T:norx3241v3 9.82 9.89 10.02 T:ascon128av11 9.84 9.93 10.07 T:ascon96v1 10.03 10.17 10.31 ascon128av12 10.12 10.38 10.80 T:lakekeyakv1 11.58 11.76 12.46 T:riverkeyakv2 11.69 11.79 11.90 T:norx6461v1 11.72 11.81 12.00 T:norx6461v3 11.76 11.86 11.99 T:norx6461v2 12.46 12.55 13.30 T:lakekeyakv2 12.80 12.89 13.03 T:ascon128v1 12.81 12.93 13.04 T:ascon128v11 13.16 13.25 13.39 ascon128v12 13.77 13.90 13.98 T:norx6444v3 14.60 14.71 14.80 T:norx3261v2 14.73 14.83 14.93 T:norx3261v3 16.39 16.47 16.55 T:norx3261v1 18.34 18.49 18.68 T:aes128n12clocv1 18.49 18.58 18.69 T:aes128n8clocv1 18.80 18.87 19.02 T:aes128otrsv2 18.79 18.87 18.96 T:aes128otrsv1 18.97 19.05 19.17 T:aes128otrpv1 18.97 19.06 19.16 T:aes128otrpv2 20.05 20.17 20.40 T:twine80n6t4clocv3 21.07 21.24 21.63 T:twine80n6t4clocv2 22.10 22.63 24.09 T:ketjeminorv2 23.06 23.56 23.81 T:acorn128v3 24.44 24.55 24.74 T:aes256otrsv2 24.46 24.57 24.70 T:aes256otrsv1 24.14 24.62 25.29 T:acorn128v2 24.98 25.07 25.28 T:aes256otrpv2 24.99 25.08 25.16 T:aes256otrpv1 27.87 27.94 28.31 T:seakeyakv2 27.93 28.12 28.52 T:norx6444v2 32.59 33.03 33.49 T:norx6444v1 32.86 33.18 33.80 T:ketjemajorv2 34.73 34.91 35.50 T:ketjesrv1 38.23 38.70 39.44 T:ketjesrv2 43.68 43.81 44.49 T:oceankeyakv2 44.31 44.57 44.91 T:aeadaes128ocbtaglen64v1 44.44 44.65 44.92 T:aeadaes128ocbtaglen96v1 48.51 48.83 49.25 T:ketjejrv1 51.65 51.87 52.14 T:aeadaes192ocbtaglen64v1 51.78 51.97 52.22 T:aeadaes192ocbtaglen96v1 55.82 56.57 60.28 T:proest256otrv1 61.09 61.30 61.61 T:aeadaes256ocbtaglen64v1 61.22 61.47 62.10 T:aeadaes256ocbtaglen96v1 63.69 64.27 65.21 T:colm127v1 72.63 73.24 74.07 T:deoxysneq128128v13 79.93 80.31 81.07 T:proest128otrv1 80.20 80.66 80.96 T:ketjejrv2 88.58 88.85 89.23 T:present80n6t4silcv3 99.45 99.89 100.25 T:aezv1 105.03 105.70 106.80 T:deoxyseq128128v13 109.91 110.77 111.29 T:deoxysneq256128v13 113.77 114.13 114.61 T:lunarkeyakv2 150.79 151.13 151.62 T:led80n6t4silcv3 158.63 159.45 160.24 T:deoxyseq256128v13 1434.88 1441.54 1533.73 T:acorn128 2200.00 2200.98 2201.90 T:led80n6t4silcv2 2202.85 2204.82 2233.53 T:led80n6silcv1 2610.33 2612.25 2616.56 T:present80n6t4silcv2 2608.22 2613.25 2636.94 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.64? 0.68? 0.76? T:aezv5 0.69? 0.74? 0.79? T:aezv4 0.75? 0.82? 0.90? T:aezv3 1.02 1.05 1.08 aegis128l 1.10 1.12 1.15 T:aegis128 1.26 1.29 1.32 T:aegis256 1.29? 1.32? 1.48? T:tiaoxinv1 1.26? 1.33? 1.43? T:tiaoxinv2 1.38 1.40 1.43 aegis256 1.98 2.02 2.11 T:aes128otrpv3 2.30 2.35 2.54 T:aes128n8t8clocv2 2.35 2.39 2.45 T:aes128n12t8clocv3 2.37? 2.40? 2.75? T:aes128n12t8clocv2 2.35 2.48 2.52 T:aes128otrsv3 2.47 2.49 2.55 T:aes128n12t8silcv3 2.48 2.50 2.57 T:aes128n12t8silcv2 2.48? 2.52? 2.89? T:aes128n8t8silcv2 2.68? 2.77? 4.44? T:aeadaes192ocbtaglen128v1 2.78 2.83 2.91 T:colm0v1 2.90 2.96 2.98 T:aes256otrpv3 2.86 2.97 3.03 T:aes128otrcv3 3.29 3.33 3.37 T:aes256otrsv3 3.33? 3.46? 5.09? T:aeadaes128ocbtaglen128v1 3.88 3.97 4.00 T:aes256otrcv3 4.17 4.21 4.28 T:deoxysneq128128v1 4.16 4.22 4.30 T:morus640128v1 4.20? 4.29? 7.40? T:aeadaes256ocbtaglen128v1 4.27 4.33 4.38 T:morus1280128v1 4.28 4.33 4.38 T:morus1280256v1 4.38 4.44 4.51 T:deoxysneq256128v1 4.49 4.56 4.64 T:morus640128v2 4.50 4.56 4.63 T:morus1280256v2 4.51 4.57 4.62 T:morus1280128v2 4.76 4.79 4.86 T:deoxysi128v141 5.07 5.13 5.22 aes256gcmv1 5.30 5.38 5.44 T:aes128gcmv1 5.38 5.41 5.47 T:aesjambuv1 5.65 5.73 5.82 T:deoxyseq256128v1 5.76 5.82 5.88 T:deoxysi256v141 5.93 6.00 6.09 T:deoxyseq128128v1 6.17 6.26 6.37 T:deoxysii128v141 7.75 7.80 7.85 T:norx6441v1 7.73 7.82 7.91 T:deoxysii256v141 7.72 7.82 7.92 T:norx6441v2 7.81 7.88 7.96 T:norx6441v3 9.63 9.72 9.79 T:norx3241v1 9.66 9.72 9.79 T:norx3241v2 9.64 9.78 9.88 T:norx3241v3 9.80 9.87 9.96 T:ascon128av11 9.78 9.90 10.06 T:ascon96v1 10.06 10.16 10.32 ascon128av12 10.23 10.41 10.75 T:lakekeyakv1 11.65 11.76 11.84 T:norx6461v1 11.69 11.78 11.90 T:norx6461v2 11.75 11.83 11.93 T:norx6461v3 11.64 11.90 12.41 T:riverkeyakv2 12.47 12.63 13.03 T:lakekeyakv2 12.75 12.84 12.99 T:ascon128v11 12.80 12.90 13.00 T:ascon128v1 13.13 13.23 13.34 ascon128v12 13.80 13.89 14.02 T:norx6444v3 14.58 14.64 14.72 T:norx3261v2 14.70 14.82 14.95 T:norx3261v3 16.38 16.46 16.53 T:norx3261v1 18.36 18.43 18.53 T:aes128n12clocv1 18.46 18.56 18.67 T:aes128n8clocv1 18.83 18.90 19.14 T:aes128otrsv2 18.83 18.92 19.18 T:aes128otrsv1 18.99 19.09 19.18 T:aes128otrpv2 19.04 19.09 19.19 T:aes128otrpv1 19.96 20.31 20.79 T:twine80n6t4clocv3 20.98 21.17 21.64 T:twine80n6t4clocv2 22.75 23.12 23.43 T:acorn128v3 22.52 23.30 23.95 T:ketjeminorv2 24.01 24.53 26.29 T:acorn128v2 24.46 24.60 24.73 T:aes256otrsv1 24.53 24.66 24.95 T:aes256otrsv2 24.97 25.08 25.21 T:aes256otrpv1 24.99 25.09 25.24 T:aes256otrpv2 27.87 28.02 28.31 T:seakeyakv2 27.93 28.08 28.36 T:norx6444v2 32.46 32.75 33.22 T:norx6444v1 33.06 33.51 33.97 T:ketjemajorv2 34.74 34.93 35.20 T:ketjesrv1 38.30 38.59 39.10 T:ketjesrv2 43.69 43.83 44.41 T:oceankeyakv2 44.44 44.64 44.80 T:aeadaes128ocbtaglen96v1 44.47 44.65 44.89 T:aeadaes128ocbtaglen64v1 48.33 48.79 49.12 T:ketjejrv1 51.74 51.89 52.09 T:aeadaes192ocbtaglen96v1 51.75 51.93 52.17 T:aeadaes192ocbtaglen64v1 54.08 54.19 56.32 T:proest256otrv1 61.12 61.33 61.58 T:aeadaes256ocbtaglen64v1 61.14 61.36 61.63 T:aeadaes256ocbtaglen96v1 63.47 63.76 64.27 T:colm127v1 72.79 73.13 73.68 T:deoxysneq128128v13 79.57 79.94 80.36 T:proest128otrv1 80.48 80.81 81.19 T:ketjejrv2 88.58 88.87 89.30 T:present80n6t4silcv3 99.52 99.76 100.11 T:aezv1 105.52 106.01 106.69 T:deoxyseq128128v13 110.08 110.61 111.06 T:deoxysneq256128v13 113.99 114.34 114.67 T:lunarkeyakv2 150.78 151.11 151.52 T:led80n6t4silcv3 159.01 159.88 160.42 T:deoxyseq256128v13 1431.06 1439.82 1532.69 T:acorn128 2199.96 2200.98 2201.85 T:led80n6t4silcv2 2200.52 2202.33 2204.06 T:led80n6silcv1 2602.82 2606.15 2612.33 T:present80n6t4silcv2 2606.76 2611.59 2623.52 T:present80n6silcv1