VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Gracemont (b06a2-20); 2024 Intel Core 5 210H, E cores; 4 x 1600MHz; freshwrap,little, supercop-20260627

[Page version: 20260717 22:09:00]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.22 0.23 0.24 T:tiaoxinv2 0.22 0.23 0.24 T:tiaoxinv1 0.25 0.25 0.26 aegis128l 0.38 0.38 0.39 T:aegis128 0.40 0.41 0.42 aegis256 0.43 0.43 0.44 T:aezv4 0.44 0.44 0.45 T:aezv3 0.47 0.48 0.49 T:aezv5 0.50 0.50 0.51 T:aeadaes128ocbtaglen128v1 0.52 0.53 0.54 T:aes128otrpv3 0.52 0.53 0.54 T:aes128otrcv3 0.53 0.54 0.54 T:aes128otrsv3 0.34? 0.58? 0.85? T:aeadaes192ocbtaglen128v1 0.58 0.60 0.61 T:aeadaes256ocbtaglen128v1 0.67 0.67 0.69 T:aes256otrpv3 0.67 0.68 0.69 T:aes256otrcv3 0.67 0.68 0.69 T:aes256otrsv3 0.83 0.84 0.85 T:deoxysi128v141 0.90 0.91 0.92 T:deoxysneq128128v1 0.93 0.94 0.95 T:deoxysi256v141 0.93 0.94 0.95 T:aes128gcmv1 0.98 0.99 1.00 T:deoxysneq256128v1 0.97 0.99 1.01 T:morus1280256v1 0.98 1.00 1.01 T:morus1280128v2 0.98 1.00 1.01 T:morus1280128v1 0.99 1.01 1.03 T:morus1280256v2 1.07 1.08 1.09 aes256gcmv1 1.18 1.19 1.20 T:morus640128v1 1.17 1.19 1.20 T:morus640128v2 1.64 1.65 1.67 T:deoxysii128v141 1.80 1.82 1.84 T:deoxyseq128128v1 1.83 1.85 1.86 T:colm0v1 1.85 1.86 1.87 T:deoxysii256v141 2.06 2.08 2.09 T:deoxyseq256128v1 2.00 2.08 2.17 T:lunarkeyakv2 2.12 2.12 2.13 T:aes128n12t8silcv3 2.12 2.13 2.13 T:aes128n8t8clocv2 2.12 2.13 2.13 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n12t8silcv2 2.12 2.13 2.13 T:aes128n12t8clocv2 2.12 2.13 2.13 T:aes128n8t8silcv2 2.54 2.57 2.60 T:norx6444v3 2.60 2.65 2.68 T:norx6441v2 2.64 2.68 2.72 T:norx6441v3 2.79 2.82 2.85 T:seakeyakv2 2.82 2.86 2.92 T:oceankeyakv2 3.08 3.10 3.13 T:lakekeyakv1 3.18 3.20 3.26 T:norx6441v1 3.31 3.33 3.34 T:lakekeyakv2 3.42 3.43 3.45 T:norx6444v2 3.79 3.82 3.85 T:norx3241v3 3.80 3.83 3.85 T:norx3241v2 3.86 3.90 3.94 T:norx6444v1 3.95 3.99 4.02 T:norx6461v2 3.96 4.01 4.05 T:norx6461v3 4.25 4.26 4.29 T:aesjambuv1 4.59 4.62 4.65 T:norx3241v1 4.75 4.80 4.85 T:norx6461v1 5.48 5.52 5.53 T:acorn128v2 5.62 5.66 5.69 T:acorn128v3 5.67 5.70 5.72 T:norx3261v3 5.78 5.81 5.84 T:norx3261v2 6.02 6.06 6.09 T:ketjemajorv2 6.28 6.30 6.32 ascon128av12 6.45 6.46 6.48 T:ascon128av11 6.46 6.48 6.50 T:ascon96v1 7.28 7.29 7.31 T:norx3261v1 7.63 7.66 7.92 T:riverkeyakv2 8.31 8.32 8.56 T:ketjeminorv2 9.09 9.11 9.15 T:ascon128v11 9.09 9.11 9.18 T:ascon128v1 9.33 9.38 9.40 ascon128v12 11.74 11.76 11.77 T:aes128otrpv2 11.75 11.76 11.78 T:aes128otrpv1 11.71 11.76 11.79 T:aes128otrsv1 12.36 12.39 12.42 T:aes128otrsv2 14.52 14.53 14.55 T:twine80n6t4clocv3 15.21 15.23 15.25 T:aes256otrpv1 15.22 15.23 15.25 T:aes256otrpv2 15.45 15.49 15.71 T:aes256otrsv1 15.49 15.50 15.51 T:twine80n6t4clocv2 15.45 15.53 15.70 T:aes256otrsv2 19.95 20.01 20.45 T:proest256otrv1 20.48 20.51 20.53 T:aes128n12clocv1 20.49 20.51 20.53 T:aes128n8clocv1 22.77 22.80 22.88 T:aeadaes128ocbtaglen96v1 22.77 22.80 22.83 T:aeadaes128ocbtaglen64v1 26.33 26.64 27.61 T:ketjesrv1 26.94 26.98 27.01 T:aeadaes192ocbtaglen64v1 26.94 26.99 27.03 T:aeadaes192ocbtaglen96v1 27.02 27.37 27.55 T:ketjesrv2 31.14 31.18 31.22 T:aeadaes256ocbtaglen64v1 31.14 31.19 31.23 T:aeadaes256ocbtaglen96v1 44.18 44.28 44.99 T:proest128otrv1 49.36 49.43 49.49 T:colm127v1 50.07 50.56 51.05 T:ketjejrv1 66.78 67.29 67.89 T:deoxysneq128128v13 70.68 70.83 70.95 T:ketjejrv2 71.51 71.53 71.56 T:present80n6t4silcv3 120.31 121.53 121.65 T:deoxysneq256128v13 126.11 126.32 126.37 T:led80n6t4silcv3 127.80 129.01 138.92 T:aezv1 133.84 134.34 134.57 T:deoxyseq128128v13 239.91 240.37 240.57 T:deoxyseq256128v13 403.06 408.71 412.68 T:acorn128 3777.13 3787.53 3797.28 T:led80n6silcv1 3786.80 3796.11 3806.41 T:led80n6t4silcv2 3910.80 3915.27 3919.25 T:present80n6silcv1 3914.46 3924.41 3925.82 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.26 0.27 0.28 aegis128l 0.33 0.34 0.35 T:tiaoxinv2 0.33 0.34 0.35 T:tiaoxinv1 0.39 0.40 0.40 T:aegis128 0.40 0.41 0.44 aegis256 0.43 0.43 0.44 T:aezv4 0.44 0.44 0.45 T:aezv3 0.48 0.48 0.50 T:aezv5 0.52 0.53 0.54 T:aeadaes128ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrpv3 0.55 0.56 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrsv3 0.35? 0.61? 0.74? T:aeadaes192ocbtaglen128v1 0.67 0.69 0.70 T:aeadaes256ocbtaglen128v1 0.70 0.70 0.72 T:aes256otrsv3 0.70 0.71 0.72 T:aes256otrcv3 0.70 0.71 0.72 T:aes256otrpv3 0.90 0.91 0.92 T:deoxysi128v141 0.92 0.93 0.94 T:deoxysneq128128v1 0.95 0.96 0.97 T:aes128gcmv1 1.00 1.01 1.03 T:morus1280128v1 1.00 1.01 1.03 T:morus1280128v2 1.00 1.01 1.03 T:morus1280256v2 1.00 1.01 1.03 T:morus1280256v1 1.01 1.03 1.04 T:deoxysi256v141 1.09 1.10 1.11 T:deoxysneq256128v1 1.14 1.15 1.16 aes256gcmv1 1.16 1.19 1.21 T:morus640128v2 1.17 1.19 1.20 T:morus640128v1 1.64 1.65 1.67 T:deoxysii128v141 1.84 1.86 1.87 T:deoxyseq128128v1 1.84 1.86 1.88 T:deoxysii256v141 1.92 1.93 1.94 T:colm0v1 2.06 2.06 2.08 T:aes128n8t8clocv2 2.06 2.06 2.09 T:aes128n12t8clocv3 2.02 2.06 2.10 T:aes128n12t8silcv2 2.06 2.06 2.08 T:aes128n12t8clocv2 2.05 2.06 2.09 T:aes128n12t8silcv3 2.03 2.06 2.09 T:aes128n8t8silcv2 2.09 2.11 2.13 T:deoxyseq256128v1 2.06 2.14 2.23 T:lunarkeyakv2 2.51 2.54 2.57 T:norx6444v3 2.63 2.67 2.70 T:norx6441v3 2.64 2.67 2.71 T:norx6441v2 2.83 2.87 2.90 T:seakeyakv2 2.91 2.96 3.00 T:oceankeyakv2 3.13 3.14 3.17 T:lakekeyakv1 3.16 3.20 3.22 T:norx6441v1 3.33 3.35 3.37 T:lakekeyakv2 3.43 3.46 3.49 T:norx6444v2 3.70 3.72 3.74 T:norx3241v2 3.70 3.72 3.74 T:norx3241v3 3.87 3.91 3.96 T:norx6444v1 3.96 4.00 4.05 T:norx6461v3 4.02 4.07 4.12 T:norx6461v2 4.46 4.49 4.52 T:norx3241v1 4.57 4.58 4.58 T:aesjambuv1 4.74 4.77 4.82 T:norx6461v1 5.48 5.51 5.54 T:acorn128v2 5.64 5.67 5.70 T:norx3261v2 5.69 5.72 5.74 T:norx3261v3 5.81 5.84 5.88 T:acorn128v3 5.83 5.88 5.92 T:ketjemajorv2 6.28 6.30 6.32 ascon128av12 6.43 6.45 6.48 T:ascon128av11 6.42 6.45 6.47 T:ascon96v1 7.14 7.15 7.17 T:norx3261v1 7.88 7.91 7.94 T:riverkeyakv2 8.98 9.00 9.03 T:ascon128v1 8.97 9.01 9.03 T:ascon128v11 9.06 9.10 9.35 T:ketjeminorv2 9.34 9.37 9.38 ascon128v12 11.76 11.83 11.86 T:aes128otrsv1 11.81 11.90 11.95 T:aes128otrpv1 11.87 12.09 12.24 T:aes128otrpv2 12.60 12.63 12.65 T:aes128otrsv2 14.43 14.45 14.49 T:twine80n6t4clocv3 15.24 15.29 15.35 T:aes256otrsv2 15.30 15.41 15.45 T:aes256otrpv1 15.42 15.43 15.50 T:twine80n6t4clocv2 15.31 15.62 15.71 T:aes256otrpv2 15.69 15.73 15.93 T:aes256otrsv1 19.91 19.99 20.40 T:proest256otrv1 20.09 20.12 20.14 T:aes128n12clocv1 21.37 21.40 21.43 T:aes128n8clocv1 27.70 27.94 29.24 T:ketjesrv1 27.91 27.99 28.09 T:ketjesrv2 31.04 31.08 31.13 T:aeadaes128ocbtaglen64v1 31.07 31.12 31.16 T:aeadaes128ocbtaglen96v1 37.08 37.13 37.18 T:aeadaes192ocbtaglen96v1 37.10 37.14 37.18 T:aeadaes192ocbtaglen64v1 43.11 43.15 43.21 T:aeadaes256ocbtaglen96v1 43.13 43.21 43.39 T:aeadaes256ocbtaglen64v1 43.39 44.04 44.09 T:proest128otrv1 49.95 50.56 51.04 T:ketjejrv1 66.07 66.20 66.26 T:colm127v1 71.53 71.56 71.59 T:present80n6t4silcv3 72.34 72.46 72.60 T:ketjejrv2 91.96 92.17 92.68 T:deoxysneq128128v13 126.38 126.69 127.25 T:led80n6t4silcv3 128.30 129.32 138.95 T:aezv1 134.05 134.32 134.64 T:deoxyseq128128v13 148.12 149.19 149.49 T:deoxysneq256128v13 240.11 240.57 240.77 T:deoxyseq256128v13 407.04 411.16 412.26 T:acorn128 3780.78 3795.88 3809.26 T:led80n6t4silcv2 3784.67 3797.23 3813.62 T:led80n6silcv1 3909.72 3912.19 3917.93 T:present80n6silcv1 3908.03 3918.66 3922.47 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.16? 0.17? 0.18? T:aezv3 0.17 0.17 0.17 T:aezv4 0.18 0.19 0.19 T:aezv5 0.27 0.27 0.28 aegis128l 0.33 0.34 0.36 T:tiaoxinv1 0.33 0.34 0.34 T:tiaoxinv2 0.39 0.40 0.40 T:aegis128 0.45 0.46 0.47 aegis256 0.52 0.53 0.54 T:aeadaes128ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrpv3 0.55 0.56 0.57 T:aes128otrcv3 0.56 0.56 0.57 T:aes128otrsv3 0.47? 0.61? 0.86? T:aeadaes192ocbtaglen128v1 0.68 0.69 0.69 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.71 T:aes256otrsv3 0.70 0.70 0.71 T:aes256otrcv3 0.70 0.71 0.71 T:aes256otrpv3 0.89 0.91 0.93 T:deoxysi128v141 0.92 0.93 0.95 T:deoxysneq128128v1 0.95 0.96 0.96 T:aes128gcmv1 1.00 1.01 1.02 T:morus1280256v2 1.00 1.01 1.02 T:morus1280256v1 1.00 1.01 1.03 T:morus1280128v1 1.00 1.01 1.03 T:morus1280128v2 1.01 1.03 1.04 T:deoxysi256v141 1.09 1.11 1.12 T:deoxysneq256128v1 1.14 1.15 1.16 aes256gcmv1 1.17 1.18 1.21 T:morus640128v2 1.17 1.19 1.20 T:morus640128v1 1.64 1.66 1.67 T:deoxysii128v141 1.84 1.86 1.87 T:deoxyseq128128v1 1.85 1.86 1.87 T:deoxysii256v141 1.93 1.94 1.94 T:colm0v1 2.06 2.06 2.10 T:aes128n8t8clocv2 2.05 2.06 2.09 T:aes128n12t8clocv2 2.06 2.06 2.11 T:aes128n8t8silcv2 2.06 2.06 2.09 T:aes128n12t8clocv3 2.06 2.06 2.10 T:aes128n12t8silcv2 2.06 2.07 2.12 T:aes128n12t8silcv3 2.08 2.10 2.12 T:deoxyseq256128v1 2.11 2.18 2.27 T:lunarkeyakv2 2.50 2.54 2.57 T:norx6444v3 2.63 2.67 2.70 T:norx6441v3 2.65 2.67 2.71 T:norx6441v2 2.87 2.91 2.93 T:seakeyakv2 2.97 3.00 3.03 T:oceankeyakv2 3.15 3.17 3.19 T:lakekeyakv1 3.16 3.19 3.21 T:norx6441v1 3.35 3.37 3.39 T:lakekeyakv2 3.47 3.49 3.51 T:norx6444v2 3.71 3.73 3.75 T:norx3241v2 3.71 3.73 3.75 T:norx3241v3 3.91 3.94 3.97 T:norx6444v1 3.98 4.02 4.06 T:norx6461v3 4.01 4.06 4.11 T:norx6461v2 4.47 4.49 4.52 T:norx3241v1 4.57 4.57 4.58 T:aesjambuv1 4.74 4.78 4.82 T:norx6461v1 5.48 5.52 5.54 T:acorn128v2 5.65 5.69 5.72 T:norx3261v2 5.69 5.72 5.75 T:norx3261v3 5.82 5.85 5.88 T:acorn128v3 5.86 5.91 5.96 T:ketjemajorv2 6.29 6.31 6.33 ascon128av12 6.42 6.45 6.48 T:ascon128av11 6.43 6.46 6.47 T:ascon96v1 7.13 7.15 7.17 T:norx3261v1 7.91 7.93 7.95 T:riverkeyakv2 8.98 9.00 9.02 T:ascon128v1 8.97 9.01 9.04 T:ascon128v11 9.08 9.11 9.32 T:ketjeminorv2 9.31 9.35 9.37 ascon128v12 11.85 11.90 11.99 T:aes128otrsv1 11.92 11.97 11.99 T:aes128otrpv1 11.99 12.26 12.28 T:aes128otrpv2 12.63 12.67 12.70 T:aes128otrsv2 14.43 14.45 14.50 T:twine80n6t4clocv3 15.26 15.30 15.38 T:aes256otrsv2 15.29 15.39 15.47 T:aes256otrpv1 15.41 15.43 15.51 T:twine80n6t4clocv2 15.33 15.58 15.75 T:aes256otrpv2 15.71 15.77 15.95 T:aes256otrsv1 19.93 19.99 20.39 T:proest256otrv1 20.09 20.12 20.14 T:aes128n12clocv1 21.37 21.40 21.43 T:aes128n8clocv1 27.74 27.95 29.46 T:ketjesrv1 27.95 28.02 28.06 T:ketjesrv2 31.06 31.10 31.15 T:aeadaes128ocbtaglen96v1 31.08 31.11 31.15 T:aeadaes128ocbtaglen64v1 37.10 37.15 37.18 T:aeadaes192ocbtaglen64v1 37.10 37.16 37.21 T:aeadaes192ocbtaglen96v1 43.12 43.16 43.22 T:aeadaes256ocbtaglen96v1 43.14 43.21 43.38 T:aeadaes256ocbtaglen64v1 43.39 44.05 44.09 T:proest128otrv1 50.17 50.59 51.05 T:ketjejrv1 65.03 65.14 65.22 T:colm127v1 71.44 71.56 71.59 T:present80n6t4silcv3 72.35 72.46 72.60 T:ketjejrv2 91.99 92.25 92.75 T:deoxysneq128128v13 126.33 126.66 126.89 T:led80n6t4silcv3 128.24 129.15 138.91 T:aezv1 133.67 134.46 134.75 T:deoxyseq128128v13 148.33 149.10 149.48 T:deoxysneq256128v13 240.15 240.46 240.67 T:deoxyseq256128v13 406.34 411.30 412.64 T:acorn128 3783.45 3797.53 3806.94 T:led80n6silcv1 3793.23 3803.35 3813.43 T:led80n6t4silcv2 3910.27 3911.84 3917.91 T:present80n6silcv1 3908.28 3918.83 3922.96 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.18 0.18 0.19 T:tiaoxinv1 0.18 0.18 0.19 T:tiaoxinv2 0.20 0.21 0.22 aegis128l 0.31 0.32 0.32 T:aezv4 0.32 0.33 0.34 T:aezv3 0.34 0.35 0.36 T:aezv5 0.36 0.37 0.37 aegis256 0.38 0.38 0.38 T:aegis128 0.48 0.48 0.49 T:aeadaes128ocbtaglen128v1 0.38? 0.53? 0.63? T:aeadaes192ocbtaglen128v1 0.54 0.54 0.54 T:aes128otrcv3 0.55 0.56 0.56 T:aes128otrpv3 0.64 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.68 0.69 0.70 T:aes256otrcv3 0.69 0.70 0.70 T:aes128gcmv1 0.70 0.71 0.71 T:aes256otrpv3 0.77 0.78 0.78 aes256gcmv1 0.82 0.84 0.84 T:deoxysi128v141 0.90 0.91 0.92 T:deoxysneq128128v1 0.92 0.94 0.95 T:deoxysi256v141 0.94 0.95 0.96 T:morus1280128v2 0.94 0.95 0.96 T:morus1280128v1 0.94 0.95 0.96 T:morus1280256v1 0.94 0.95 0.97 T:morus1280256v2 0.99 1.00 1.00 T:deoxysneq256128v1 1.14 1.15 1.16 T:morus640128v2 1.14 1.16 1.18 T:morus640128v1 1.23 1.24 1.25 T:deoxysii128v141 1.29 1.29 1.30 T:colm0v1 1.30 1.30 1.30 T:aes128otrsv3 1.35 1.37 1.38 T:deoxyseq128128v1 1.38 1.40 1.41 T:deoxysii256v141 1.54 1.55 1.57 T:deoxyseq256128v1 1.74 1.74 1.75 T:aes256otrsv3 2.09 2.09 2.10 T:aes128n12t8silcv3 2.09 2.09 2.10 T:aes128n12t8silcv2 2.09 2.09 2.10 T:aes128n8t8clocv2 2.09 2.09 2.10 T:aes128n8t8silcv2 2.09 2.10 2.10 T:aes128n12t8clocv3 2.09 2.10 2.10 T:aes128n12t8clocv2 2.33 2.35 2.37 T:seakeyakv2 2.39 2.41 2.44 T:oceankeyakv2 2.62 2.65 2.67 T:norx6441v2 2.66 2.68 2.71 T:norx6441v3 2.86 2.89 2.94 T:lunarkeyakv2 2.89 2.91 2.93 T:norx6444v3 2.94 2.96 2.99 T:lakekeyakv1 2.95 2.96 2.98 T:lakekeyakv2 3.18 3.20 3.22 T:norx6441v1 3.29 3.30 3.32 T:norx6444v2 3.77 3.80 3.82 T:norx3241v2 3.78 3.80 3.82 T:norx3241v3 3.86 3.91 3.92 T:norx6444v1 3.94 3.97 4.00 T:norx6461v2 3.96 4.01 4.04 T:norx6461v3 4.24 4.24 4.24 T:aesjambuv1 4.57 4.59 4.62 T:norx3241v1 4.76 4.79 4.81 T:norx6461v1 5.18 5.21 5.27 T:ketjemajorv2 5.51 5.51 5.53 T:riverkeyakv2 5.52 5.54 5.55 T:acorn128v3 5.66 5.69 5.72 T:acorn128v2 5.67 5.69 5.71 T:norx3261v2 5.71 5.73 5.76 T:norx3261v3 6.22 6.25 6.30 ascon128av12 6.36 6.38 6.40 T:ascon128av11 6.38 6.40 6.41 T:ascon96v1 7.27 7.28 7.29 T:norx3261v1 7.41 7.46 7.51 T:ketjeminorv2 9.09 9.11 9.14 T:ascon128v1 9.10 9.12 9.14 T:ascon128v11 9.31 9.33 9.35 ascon128v12 11.13 11.16 11.18 T:aes128otrsv2 11.16 11.17 11.19 T:aes128otrsv1 11.29 11.30 11.32 T:aes128otrpv1 11.29 11.31 11.33 T:aes128otrpv2 14.20 14.24 14.44 T:aes256otrsv1 14.31 14.32 14.33 T:twine80n6t4clocv3 14.43 14.48 14.54 T:aes256otrsv2 14.76 14.77 14.79 T:aes256otrpv1 14.76 14.78 14.79 T:aes256otrpv2 15.21 15.22 15.24 T:twine80n6t4clocv2 15.34 15.36 15.38 T:aes128n8clocv1 15.64 15.66 15.67 T:aes128n12clocv1 19.99 20.14 20.18 T:proest256otrv1 22.47 22.50 22.52 T:aeadaes128ocbtaglen96v1 22.49 22.52 22.53 T:aeadaes128ocbtaglen64v1 25.54 25.80 26.07 T:ketjesrv1 26.43 26.52 26.82 T:ketjesrv2 26.68 26.70 26.73 T:aeadaes192ocbtaglen64v1 26.68 26.71 26.75 T:aeadaes192ocbtaglen96v1 30.87 30.90 30.94 T:aeadaes256ocbtaglen96v1 30.88 30.91 30.94 T:aeadaes256ocbtaglen64v1 36.45 36.54 36.59 T:colm127v1 44.83 45.25 46.38 T:ketjejrv1 44.62 45.69 45.77 T:proest128otrv1 67.07 67.71 67.82 T:deoxysneq128128v13 70.01 70.16 70.83 T:ketjejrv2 70.84 70.96 70.98 T:present80n6t4silcv3 84.76 84.96 91.97 T:aezv1 98.41 99.92 100.58 T:deoxyseq128128v13 120.87 121.75 122.02 T:deoxysneq256128v13 124.89 125.57 125.74 T:led80n6t4silcv3 180.55 182.86 184.75 T:deoxyseq256128v13 402.14 406.53 410.85 T:acorn128 2833.13 2840.56 2847.08 T:led80n6silcv1 2838.70 2847.71 2852.25 T:led80n6t4silcv2 2933.08 2933.74 2940.17 T:present80n6silcv1 2933.70 2934.88 2941.37 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.21 0.22 0.22 aegis128l 0.23 0.23 0.24 T:tiaoxinv2 0.23 0.23 0.24 T:tiaoxinv1 0.32 0.32 0.32 T:aezv4 0.32 0.33 0.33 T:aezv3 0.35 0.35 0.36 T:aezv5 0.35 0.36 0.36 T:aegis128 0.35 0.37 0.38 aegis256 0.49 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.46? 0.55? 0.68? T:aeadaes192ocbtaglen128v1 0.56 0.56 0.56 T:aes128otrcv3 0.57 0.57 0.58 T:aes128otrpv3 0.69 0.70 0.70 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.70 T:aes256otrcv3 0.71 0.71 0.72 T:aes128gcmv1 0.71 0.72 0.73 T:aes256otrpv3 0.80 0.80 0.81 aes256gcmv1 0.86 0.88 0.89 T:deoxysi128v141 0.92 0.92 0.93 T:deoxysneq128128v1 0.94 0.94 0.95 T:morus1280128v1 0.94 0.94 0.95 T:morus1280128v2 0.94 0.94 0.95 T:morus1280256v2 0.94 0.95 0.95 T:morus1280256v1 0.97 0.98 0.99 T:deoxysi256v141 1.05 1.05 1.06 T:deoxysneq256128v1 1.14 1.16 1.17 T:morus640128v1 1.13 1.16 1.17 T:morus640128v2 1.24 1.25 1.26 T:deoxysii128v141 1.31 1.31 1.32 T:aes128otrsv3 1.34 1.34 1.35 T:colm0v1 1.37 1.38 1.39 T:deoxyseq128128v1 1.38 1.40 1.40 T:deoxysii256v141 1.56 1.58 1.59 T:deoxyseq256128v1 1.75 1.75 1.76 T:aes256otrsv3 2.06 2.06 2.08 T:aes128n8t8clocv2 2.06 2.06 2.08 T:aes128n12t8silcv3 2.06 2.06 2.08 T:aes128n8t8silcv2 2.05 2.06 2.08 T:aes128n12t8silcv2 2.06 2.06 2.08 T:aes128n12t8clocv2 2.06 2.07 2.08 T:aes128n12t8clocv3 2.38 2.40 2.41 T:seakeyakv2 2.43 2.45 2.48 T:oceankeyakv2 2.64 2.66 2.68 T:norx6441v2 2.64 2.66 2.69 T:norx6441v3 2.88 2.90 2.92 T:norx6444v3 2.88 2.93 2.98 T:lunarkeyakv2 2.95 2.96 2.97 T:lakekeyakv2 2.95 2.97 2.99 T:lakekeyakv1 3.19 3.22 3.24 T:norx6441v1 3.26 3.28 3.30 T:norx6444v2 3.74 3.76 3.78 T:norx3241v2 3.75 3.76 3.77 T:norx3241v3 3.87 3.91 3.93 T:norx6444v1 3.98 4.01 4.04 T:norx6461v3 4.01 4.04 4.07 T:norx6461v2 4.36 4.37 4.39 T:aesjambuv1 4.53 4.55 4.57 T:norx3241v1 4.75 4.77 4.81 T:norx6461v1 5.10 5.15 5.20 T:ketjemajorv2 5.52 5.55 5.56 T:acorn128v2 5.63 5.64 5.65 T:riverkeyakv2 5.65 5.67 5.69 T:norx3261v2 5.68 5.69 5.69 T:acorn128v3 5.68 5.70 5.74 T:norx3261v3 6.22 6.24 6.28 ascon128av12 6.36 6.38 6.39 T:ascon96v1 6.37 6.39 6.43 T:ascon128av11 7.20 7.21 7.22 T:norx3261v1 7.75 7.76 7.78 T:ketjeminorv2 9.02 9.03 9.04 T:ascon128v11 9.02 9.04 9.05 T:ascon128v1 9.31 9.34 9.38 ascon128v12 11.19 11.24 11.27 T:aes128otrsv1 11.25 11.27 11.29 T:aes128otrsv2 11.34 11.38 11.40 T:aes128otrpv1 11.37 11.47 11.55 T:aes128otrpv2 14.22 14.30 14.33 T:aes256otrsv2 14.28 14.30 14.31 T:twine80n6t4clocv3 14.31 14.34 14.55 T:aes256otrsv1 14.78 14.81 14.87 T:aes256otrpv1 14.80 14.89 15.00 T:aes256otrpv2 15.18 15.19 15.22 T:twine80n6t4clocv2 15.45 15.46 15.48 T:aes128n12clocv1 15.78 15.81 15.83 T:aes128n8clocv1 19.97 20.13 20.17 T:proest256otrv1 26.08 26.53 26.93 T:ketjesrv1 26.62 26.64 26.67 T:aeadaes128ocbtaglen64v1 26.61 26.65 26.68 T:aeadaes128ocbtaglen96v1 26.81 26.86 27.09 T:ketjesrv2 31.74 31.76 31.80 T:aeadaes192ocbtaglen64v1 31.74 31.80 31.85 T:aeadaes192ocbtaglen96v1 36.85 36.89 36.92 T:aeadaes256ocbtaglen64v1 36.87 36.91 36.97 T:aeadaes256ocbtaglen96v1 44.82 44.89 44.95 T:colm127v1 44.27 45.15 45.25 T:proest128otrv1 44.80 45.25 46.38 T:ketjejrv1 70.81 70.91 71.06 T:ketjejrv2 70.76 70.97 71.01 T:present80n6t4silcv3 79.65 80.18 80.39 T:deoxysneq128128v13 84.95 85.16 92.14 T:aezv1 98.50 99.99 100.66 T:deoxyseq128128v13 125.34 125.77 125.96 T:led80n6t4silcv3 134.86 135.63 135.95 T:deoxysneq256128v13 180.56 182.86 184.76 T:deoxyseq256128v13 404.75 409.47 411.31 T:acorn128 2839.62 2846.25 2852.12 T:led80n6t4silcv2 2837.08 2846.66 2870.04 T:led80n6silcv1 2930.53 2931.38 2940.53 T:present80n6t4silcv2 2932.18 2933.29 2939.66 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.18 0.18 0.18 T:aezv4 0.18 0.19 0.19 T:aezv3 0.20 0.20 0.21 T:aezv5 0.21 0.22 0.22 aegis128l 0.23 0.23 0.24 T:tiaoxinv1 0.23 0.23 0.24 T:tiaoxinv2 0.35 0.36 0.36 T:aegis128 0.39 0.40 0.40 aegis256 0.49 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.42? 0.55? 0.62? T:aeadaes192ocbtaglen128v1 0.56 0.56 0.56 T:aes128otrcv3 0.57 0.57 0.57 T:aes128otrpv3 0.69 0.70 0.70 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.70 T:aes256otrcv3 0.71 0.71 0.72 T:aes128gcmv1 0.72 0.72 0.73 T:aes256otrpv3 0.80 0.81 0.81 aes256gcmv1 0.87 0.87 0.88 T:deoxysi128v141 0.92 0.92 0.93 T:deoxysneq128128v1 0.93 0.94 0.95 T:morus1280128v2 0.93 0.94 0.95 T:morus1280128v1 0.93 0.94 0.95 T:morus1280256v1 0.93 0.94 0.95 T:morus1280256v2 0.97 0.98 0.99 T:deoxysi256v141 1.04 1.05 1.06 T:deoxysneq256128v1 1.15 1.15 1.16 T:morus640128v2 1.15 1.16 1.17 T:morus640128v1 1.24 1.25 1.26 T:deoxysii128v141 1.31 1.31 1.32 T:aes128otrsv3 1.31 1.34 1.34 T:colm0v1 1.37 1.39 1.40 T:deoxyseq128128v1 1.39 1.39 1.40 T:deoxysii256v141 1.56 1.58 1.59 T:deoxyseq256128v1 1.75 1.75 1.76 T:aes256otrsv3 2.06 2.06 2.08 T:aes128n12t8silcv2 2.06 2.06 2.09 T:aes128n8t8silcv2 2.06 2.06 2.08 T:aes128n12t8silcv3 2.06 2.06 2.08 T:aes128n8t8clocv2 2.06 2.06 2.08 T:aes128n12t8clocv2 2.06 2.07 2.08 T:aes128n12t8clocv3 2.39 2.41 2.43 T:seakeyakv2 2.45 2.46 2.48 T:oceankeyakv2 2.64 2.66 2.68 T:norx6441v3 2.64 2.67 2.69 T:norx6441v2 2.87 2.90 2.92 T:norx6444v3 2.91 2.95 3.00 T:lunarkeyakv2 2.96 2.97 2.98 T:lakekeyakv2 2.98 2.99 3.00 T:lakekeyakv1 3.18 3.21 3.23 T:norx6441v1 3.28 3.30 3.31 T:norx6444v2 3.74 3.76 3.77 T:norx3241v2 3.75 3.77 3.78 T:norx3241v3 3.88 3.93 3.95 T:norx6444v1 3.98 4.01 4.03 T:norx6461v3 4.01 4.03 4.06 T:norx6461v2 4.36 4.36 4.37 T:aesjambuv1 4.53 4.54 4.57 T:norx3241v1 4.74 4.77 4.80 T:norx6461v1 5.12 5.17 5.22 T:ketjemajorv2 5.52 5.55 5.57 T:acorn128v2 5.65 5.65 5.66 T:riverkeyakv2 5.65 5.67 5.69 T:norx3261v2 5.69 5.69 5.70 T:acorn128v3 5.67 5.69 5.73 T:norx3261v3 6.23 6.24 6.26 ascon128av12 6.37 6.38 6.40 T:ascon96v1 6.37 6.40 6.43 T:ascon128av11 7.20 7.21 7.23 T:norx3261v1 7.71 7.75 7.78 T:ketjeminorv2 9.01 9.04 9.05 T:ascon128v11 9.03 9.04 9.06 T:ascon128v1 9.32 9.33 9.36 ascon128v12 11.21 11.23 11.25 T:aes128otrsv1 11.28 11.29 11.31 T:aes128otrsv2 11.40 11.42 11.43 T:aes128otrpv1 11.39 11.53 11.57 T:aes128otrpv2 14.27 14.28 14.29 T:twine80n6t4clocv3 14.26 14.35 14.39 T:aes256otrsv2 14.33 14.36 14.56 T:aes256otrsv1 14.81 14.86 14.90 T:aes256otrpv1 14.82 14.95 15.02 T:aes256otrpv2 15.19 15.20 15.22 T:twine80n6t4clocv2 15.44 15.46 15.47 T:aes128n12clocv1 15.78 15.81 15.83 T:aes128n8clocv1 19.95 20.14 20.16 T:proest256otrv1 26.16 26.54 26.90 T:ketjesrv1 26.62 26.65 26.67 T:aeadaes128ocbtaglen96v1 26.62 26.65 26.68 T:aeadaes128ocbtaglen64v1 26.80 26.84 27.10 T:ketjesrv2 31.74 31.76 31.79 T:aeadaes192ocbtaglen64v1 31.77 31.80 31.84 T:aeadaes192ocbtaglen96v1 36.87 36.89 36.91 T:aeadaes256ocbtaglen64v1 36.87 36.91 36.96 T:aeadaes256ocbtaglen96v1 44.30 44.41 44.44 T:colm127v1 44.27 45.18 45.23 T:proest128otrv1 44.80 45.27 46.39 T:ketjejrv1 70.77 70.97 71.01 T:present80n6t4silcv3 70.89 71.03 71.14 T:ketjejrv2 79.52 79.82 80.20 T:deoxysneq128128v13 84.93 85.06 92.05 T:aezv1 98.47 100.02 100.68 T:deoxyseq128128v13 125.25 125.74 125.97 T:led80n6t4silcv3 134.85 135.63 135.97 T:deoxysneq256128v13 180.43 181.94 184.62 T:deoxyseq256128v13 404.78 406.61 410.53 T:acorn128 2842.64 2850.05 2864.45 T:led80n6silcv1 2839.81 2851.34 2861.68 T:led80n6t4silcv2 2930.49 2931.19 2940.78 T:present80n6t4silcv2 2932.08 2933.35 2939.68 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.12? 0.13? 0.14? T:tiaoxinv1 0.12? 0.13? 0.14? T:tiaoxinv2 0.16? 0.17? 0.18? aegis128l 0.19 0.20 0.21 T:aezv4 0.20 0.21 0.22 T:aezv3 0.21? 0.22? 0.24? T:aezv5 0.31 0.32 0.33 aegis256 0.37 0.38 0.38 T:aegis128 0.45 0.46 0.47 T:aes128gcmv1 0.45 0.47 0.48 T:aeadaes128ocbtaglen128v1 0.47 0.47 0.48 aes256gcmv1 0.29? 0.49? 0.66? T:aeadaes192ocbtaglen128v1 0.55 0.56 0.56 T:aes128otrcv3 0.58 0.59 0.60 T:aes128otrpv3 0.70 0.70 0.71 T:aes256otrcv3 0.71 0.72 0.73 T:aeadaes256ocbtaglen128v1 0.72 0.73 0.74 T:aes256otrpv3 0.73 0.75 0.76 T:colm0v1 0.81 0.82 0.83 T:deoxysi128v141 0.82 0.83 0.84 T:deoxysii128v141 0.88 0.89 0.90 T:morus1280256v2 0.88 0.89 0.90 T:morus1280256v1 0.88 0.90 0.91 T:morus1280128v1 0.89 0.90 0.91 T:morus1280128v2 0.90 0.91 0.92 T:deoxyseq128128v1 0.90 0.92 0.93 T:deoxysneq128128v1 0.93 0.93 0.94 T:deoxysii256v141 0.92 0.93 0.95 T:deoxysi256v141 0.99 1.00 1.01 T:deoxysneq256128v1 1.03 1.04 1.04 T:deoxyseq256128v1 1.10 1.12 1.15 T:morus640128v2 1.11 1.13 1.16 T:morus640128v1 1.84 1.89 1.93 T:oceankeyakv2 1.80 1.89 1.97 T:lunarkeyakv2 2.06 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128n12t8silcv2 2.27 2.29 2.32 T:seakeyakv2 2.60 2.63 2.66 T:norx6441v2 2.65 2.67 2.69 T:lakekeyakv2 2.64 2.68 2.71 T:norx6441v3 2.74 2.75 2.77 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.14 3.17 3.18 T:norx6444v2 3.15 3.18 3.23 T:norx6441v1 3.25 3.28 3.31 T:norx6444v3 3.73 3.76 3.80 T:norx3241v2 3.75 3.77 3.80 T:norx3241v3 3.90 3.92 3.94 T:norx6444v1 3.91 3.95 3.99 T:norx6461v2 3.90 3.96 4.03 T:norx6461v3 4.18 4.19 4.20 T:aesjambuv1 4.36 4.40 4.43 T:ketjemajorv2 4.49 4.52 4.56 T:norx3241v1 4.72 4.76 4.81 T:norx6461v1 5.12 5.13 5.15 T:riverkeyakv2 5.40 5.43 5.44 T:acorn128v3 5.62 5.66 5.70 T:norx3261v2 5.73 5.76 5.81 T:norx3261v3 5.83 5.88 5.91 T:acorn128v2 6.12 6.14 6.17 ascon128av12 6.28 6.30 6.31 T:ascon128av11 6.30 6.32 6.33 T:ascon96v1 6.43 6.45 6.47 T:ketjeminorv2 7.25 7.26 7.27 T:norx3261v1 9.09 9.11 9.13 T:ascon128v1 9.09 9.11 9.13 T:ascon128v11 9.25 9.26 9.30 ascon128v12 9.89 9.91 9.93 T:aes128otrsv2 10.18 10.20 10.22 T:aes128n8clocv1 10.50 10.58 10.60 T:aes128otrsv1 10.79 10.80 10.82 T:aes128n12clocv1 10.85 10.86 10.87 T:aes128otrpv2 10.85 10.87 10.88 T:aes128otrpv1 12.96 13.03 13.21 T:aes256otrsv1 13.16 13.31 13.48 T:aes256otrsv2 14.11 14.12 14.14 T:twine80n6t4clocv3 14.29 14.31 14.32 T:aes256otrpv2 14.29 14.31 14.33 T:aes256otrpv1 14.96 14.97 14.98 T:twine80n6t4clocv2 20.25 20.38 20.45 T:proest256otrv1 22.17 22.21 22.24 T:aeadaes128ocbtaglen64v1 22.18 22.21 22.25 T:aeadaes128ocbtaglen96v1 23.44 23.47 23.51 T:colm127v1 24.42 24.59 24.95 T:ketjesrv1 25.71 25.94 26.11 T:ketjesrv2 26.37 26.41 26.45 T:aeadaes192ocbtaglen96v1 26.38 26.41 26.45 T:aeadaes192ocbtaglen64v1 30.57 30.60 30.63 T:aeadaes256ocbtaglen96v1 30.58 30.62 30.64 T:aeadaes256ocbtaglen64v1 40.98 41.10 41.58 T:ketjejrv1 41.49 44.52 44.93 T:aezv1 44.85 44.96 46.21 T:proest128otrv1 66.16 66.26 66.60 T:deoxyseq128128v13 66.35 66.69 66.95 T:deoxysneq128128v13 68.99 69.08 69.17 T:ketjejrv2 70.25 70.41 70.44 T:present80n6t4silcv3 119.68 119.90 120.27 T:deoxyseq256128v13 120.31 120.47 120.58 T:deoxysneq256128v13 124.55 125.01 125.08 T:led80n6t4silcv3 401.31 405.75 411.66 T:acorn128 1888.13 1895.94 1901.00 T:led80n6silcv1 1897.36 1904.43 1912.52 T:led80n6t4silcv2 1953.52 1956.88 1957.33 T:present80n6silcv1 1953.49 1959.51 1963.68 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.12? 0.13? 0.14? T:tiaoxinv2 0.12? 0.13? 0.14? T:tiaoxinv1 0.16? 0.17? 0.18? aegis128l 0.19 0.20 0.21 T:aezv4 0.21 0.21 0.22 T:aezv3 0.21 0.22 0.23 T:aezv5 0.31 0.31 0.32 T:aegis128 0.31 0.32 0.33 aegis256 0.45 0.46 0.47 aes256gcmv1 0.46 0.47 0.47 T:aeadaes128ocbtaglen128v1 0.47 0.48 0.49 T:aes128gcmv1 0.37? 0.50? 0.64? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.59 0.59 0.60 T:aes128otrpv3 0.70 0.70 0.71 T:aes256otrcv3 0.71 0.72 0.73 T:aeadaes256ocbtaglen128v1 0.73 0.73 0.74 T:aes256otrpv3 0.72 0.74 0.75 T:colm0v1 0.82 0.83 0.84 T:deoxysii128v141 0.83 0.84 0.86 T:deoxysi128v141 0.86 0.87 0.88 T:morus1280128v2 0.86 0.87 0.89 T:morus1280256v2 0.86 0.88 0.89 T:morus1280128v1 0.87 0.88 0.89 T:morus1280256v1 0.89 0.90 0.91 T:deoxyseq128128v1 0.91 0.92 0.93 T:deoxysneq128128v1 0.92 0.93 0.94 T:deoxysii256v141 0.93 0.95 0.95 T:deoxysi256v141 1.00 1.02 1.03 T:deoxysneq256128v1 1.04 1.05 1.06 T:deoxyseq256128v1 1.10 1.12 1.14 T:morus640128v1 1.09 1.13 1.15 T:morus640128v2 1.84 1.88 1.93 T:oceankeyakv2 1.81 1.89 1.97 T:lunarkeyakv2 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.06 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n12t8clocv2 2.26 2.29 2.32 T:seakeyakv2 2.63 2.66 2.70 T:norx6441v3 2.63 2.66 2.70 T:norx6441v2 2.65 2.67 2.68 T:lakekeyakv2 2.74 2.75 2.76 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.09 3.11 3.13 T:norx6444v2 3.19 3.24 3.28 T:norx6441v1 3.26 3.29 3.32 T:norx6444v3 3.77 3.79 3.81 T:norx3241v3 3.77 3.81 3.82 T:norx3241v2 3.89 3.92 3.94 T:norx6444v1 3.93 3.98 4.04 T:norx6461v3 3.96 4.01 4.05 T:norx6461v2 4.18 4.19 4.19 T:aesjambuv1 4.36 4.41 4.44 T:ketjemajorv2 4.51 4.55 4.58 T:norx3241v1 4.73 4.76 4.81 T:norx6461v1 5.12 5.13 5.15 T:riverkeyakv2 5.43 5.51 5.51 T:acorn128v3 5.53 5.60 5.63 T:acorn128v2 5.59 5.63 5.69 T:norx3261v2 5.66 5.74 5.78 T:norx3261v3 6.14 6.15 6.17 ascon128av12 6.27 6.31 6.40 T:ascon128av11 6.29 6.31 6.33 T:ascon96v1 6.42 6.46 6.49 T:ketjeminorv2 7.25 7.26 7.27 T:norx3261v1 9.02 9.05 9.07 T:ascon128v1 9.03 9.06 9.08 T:ascon128v11 9.25 9.31 9.33 ascon128v12 9.87 9.92 9.94 T:aes128otrsv2 10.18 10.20 10.23 T:aes128n8clocv1 10.50 10.58 10.61 T:aes128otrsv1 10.79 10.80 10.83 T:aes128n12clocv1 10.83 10.86 10.88 T:aes128otrpv2 10.83 10.86 10.88 T:aes128otrpv1 12.93 12.98 13.21 T:aes256otrsv1 13.27 13.37 13.57 T:aes256otrsv2 14.11 14.12 14.14 T:twine80n6t4clocv3 14.28 14.31 14.34 T:aes256otrpv1 14.28 14.31 14.34 T:aes256otrpv2 14.95 14.97 14.99 T:twine80n6t4clocv2 20.24 20.39 20.46 T:proest256otrv1 22.19 22.22 22.27 T:aeadaes128ocbtaglen96v1 22.20 22.22 22.25 T:aeadaes128ocbtaglen64v1 23.43 23.48 23.58 T:colm127v1 24.42 24.60 24.96 T:ketjesrv1 25.69 25.94 26.11 T:ketjesrv2 26.38 26.42 26.46 T:aeadaes192ocbtaglen96v1 26.39 26.42 26.46 T:aeadaes192ocbtaglen64v1 30.59 30.62 30.65 T:aeadaes256ocbtaglen96v1 30.61 30.64 30.67 T:aeadaes256ocbtaglen64v1 40.97 41.07 41.58 T:ketjejrv1 41.47 44.52 44.96 T:aezv1 44.57 44.80 45.73 T:proest128otrv1 66.25 66.50 66.81 T:deoxyseq128128v13 66.72 66.87 66.99 T:deoxysneq128128v13 68.99 69.11 69.24 T:ketjejrv2 70.00 70.41 70.44 T:present80n6t4silcv3 119.71 119.88 120.15 T:deoxyseq256128v13 120.34 120.60 120.81 T:deoxysneq256128v13 124.71 125.02 125.07 T:led80n6t4silcv3 401.05 407.03 410.97 T:acorn128 1891.45 1896.54 1904.69 T:led80n6silcv1 1894.78 1902.93 1910.03 T:led80n6t4silcv2 1953.33 1956.58 1957.09 T:present80n6silcv1 1953.65 1959.62 1963.17 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.12? 0.13? 0.15? T:tiaoxinv2 0.12? 0.13? 0.16? T:tiaoxinv1 0.16? 0.17? 0.18? aegis128l 0.19 0.20 0.21 T:aezv4 0.21 0.21 0.22 T:aezv3 0.21 0.22 0.23 T:aezv5 0.31 0.31 0.32 T:aegis128 0.31 0.32 0.33 aegis256 0.45 0.45 0.46 aes256gcmv1 0.46 0.47 0.47 T:aeadaes128ocbtaglen128v1 0.47 0.48 0.49 T:aes128gcmv1 0.36? 0.50? 0.64? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.59 0.59 0.60 T:aes128otrpv3 0.69 0.70 0.71 T:aes256otrcv3 0.71 0.72 0.72 T:aeadaes256ocbtaglen128v1 0.73 0.74 0.74 T:aes256otrpv3 0.73 0.74 0.75 T:colm0v1 0.82 0.83 0.84 T:deoxysii128v141 0.82 0.83 0.84 T:deoxysi128v141 0.86 0.87 0.89 T:morus1280128v1 0.86 0.88 0.89 T:morus1280128v2 0.86 0.88 0.89 T:morus1280256v1 0.86 0.88 0.89 T:morus1280256v2 0.89 0.90 0.91 T:deoxyseq128128v1 0.90 0.92 0.93 T:deoxysneq128128v1 0.92 0.93 0.94 T:deoxysii256v141 0.93 0.94 0.94 T:deoxysi256v141 0.98 1.00 1.02 T:deoxysneq256128v1 1.04 1.05 1.06 T:deoxyseq256128v1 1.10 1.12 1.15 T:morus640128v2 1.11 1.12 1.15 T:morus640128v1 1.85 1.88 1.92 T:oceankeyakv2 1.84 1.90 1.97 T:lunarkeyakv2 2.05 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128otrsv3 2.05 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.08 T:aes128n12t8silcv2 2.05 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.09 T:aes128n12t8silcv3 2.05 2.06 2.07 T:aes128n12t8clocv3 2.26 2.29 2.32 T:seakeyakv2 2.63 2.66 2.69 T:norx6441v2 2.64 2.67 2.68 T:lakekeyakv2 2.62 2.67 2.70 T:norx6441v3 2.74 2.75 2.76 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.09 3.11 3.14 T:norx6444v2 3.18 3.23 3.26 T:norx6441v1 3.25 3.29 3.32 T:norx6444v3 3.76 3.78 3.81 T:norx3241v2 3.77 3.79 3.81 T:norx3241v3 3.90 3.92 3.94 T:norx6444v1 3.96 4.00 4.04 T:norx6461v2 3.97 4.00 4.04 T:norx6461v3 4.18 4.19 4.19 T:aesjambuv1 4.37 4.41 4.45 T:ketjemajorv2 4.53 4.55 4.58 T:norx3241v1 4.72 4.75 4.80 T:norx6461v1 5.12 5.13 5.15 T:riverkeyakv2 5.45 5.51 5.51 T:acorn128v3 5.54 5.60 5.63 T:acorn128v2 5.59 5.64 5.70 T:norx3261v2 5.65 5.74 5.78 T:norx3261v3 6.13 6.15 6.17 ascon128av12 6.27 6.31 6.33 T:ascon96v1 6.27 6.31 6.41 T:ascon128av11 6.34 6.43 6.47 T:ketjeminorv2 7.24 7.26 7.27 T:norx3261v1 9.05 9.07 9.09 T:ascon128v1 9.06 9.08 9.10 T:ascon128v11 9.23 9.27 9.33 ascon128v12 9.88 9.91 9.94 T:aes128otrsv2 10.17 10.20 10.22 T:aes128n8clocv1 10.51 10.57 10.61 T:aes128otrsv1 10.78 10.81 10.83 T:aes128n12clocv1 10.84 10.87 10.90 T:aes128otrpv2 10.84 10.87 10.89 T:aes128otrpv1 12.93 12.98 13.20 T:aes256otrsv1 13.33 13.40 13.57 T:aes256otrsv2 14.11 14.12 14.15 T:twine80n6t4clocv3 14.27 14.31 14.33 T:aes256otrpv1 14.28 14.31 14.34 T:aes256otrpv2 14.96 14.97 14.99 T:twine80n6t4clocv2 20.22 20.39 20.46 T:proest256otrv1 22.20 22.23 22.25 T:aeadaes128ocbtaglen64v1 22.20 22.24 22.27 T:aeadaes128ocbtaglen96v1 23.41 23.50 23.56 T:colm127v1 24.43 24.64 24.93 T:ketjesrv1 25.61 25.92 26.11 T:ketjesrv2 26.37 26.41 26.45 T:aeadaes192ocbtaglen96v1 26.39 26.42 26.46 T:aeadaes192ocbtaglen64v1 30.59 30.62 30.65 T:aeadaes256ocbtaglen96v1 30.59 30.62 30.65 T:aeadaes256ocbtaglen64v1 40.98 41.07 41.58 T:ketjejrv1 41.48 44.53 44.95 T:aezv1 44.55 44.79 46.04 T:proest128otrv1 66.26 66.50 66.69 T:deoxyseq128128v13 66.52 66.85 67.13 T:deoxysneq128128v13 69.01 69.10 69.17 T:ketjejrv2 69.97 70.39 70.44 T:present80n6t4silcv3 119.80 119.87 120.15 T:deoxyseq256128v13 120.33 120.51 120.78 T:deoxysneq256128v13 124.56 124.99 125.08 T:led80n6t4silcv3 398.18 404.92 410.05 T:acorn128 1891.84 1897.54 1902.52 T:led80n6silcv1 1895.35 1904.29 1915.72 T:led80n6t4silcv2 1953.24 1956.68 1957.35 T:present80n6silcv1 1953.20 1959.66 1963.29 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.22 0.22 0.24 T:tiaoxinv2 0.22 0.23 0.23 T:tiaoxinv1 0.24 0.25 0.26 aegis128l 0.36 0.36 0.37 T:aezv4 0.38 0.38 0.38 T:aezv3 0.39 0.39 0.40 T:aezv5 0.40 0.41 0.41 T:aegis128 0.41 0.41 0.42 aegis256 0.53 0.53 0.53 T:aeadaes128ocbtaglen128v1 0.62 0.63 0.63 T:aes128otrpv3 0.62? 0.63? 0.79? T:aeadaes192ocbtaglen128v1 0.65 0.65 0.66 T:aes128otrcv3 0.71 0.71 0.72 T:aeadaes256ocbtaglen128v1 0.79 0.80 0.80 T:aes128gcmv1 0.80 0.80 0.80 T:aes256otrpv3 0.84 0.84 0.84 T:aes256otrcv3 0.88 0.88 0.89 aes256gcmv1 0.95 0.96 0.97 T:deoxysi128v141 0.99 1.00 1.00 T:deoxysneq128128v1 1.08 1.09 1.10 T:deoxysi256v141 1.10 1.11 1.12 T:deoxysneq256128v1 1.15 1.15 1.17 T:morus1280256v1 1.15 1.16 1.17 T:morus1280128v1 1.16 1.17 1.18 T:morus1280128v2 1.17 1.18 1.19 T:morus1280256v2 1.29 1.29 1.30 T:morus640128v1 1.29 1.30 1.31 T:morus640128v2 1.35 1.35 1.35 T:aes128otrsv3 1.35 1.35 1.36 T:colm0v1 1.38 1.39 1.40 T:deoxysii128v141 1.47 1.48 1.49 T:deoxyseq128128v1 1.57 1.58 1.60 T:deoxysii256v141 1.69 1.69 1.70 T:deoxyseq256128v1 1.81 1.81 1.82 T:aes256otrsv3 2.11 2.12 2.12 T:aes128n12t8clocv2 2.11 2.12 2.12 T:aes128n8t8clocv2 2.12 2.12 2.12 T:aes128n12t8clocv3 2.13 2.13 2.13 T:aes128n12t8silcv3 2.12 2.13 2.13 T:aes128n12t8silcv2 2.13 2.13 2.13 T:aes128n8t8silcv2 3.04 3.06 3.08 T:norx6441v2 3.08 3.10 3.12 T:norx6441v3 3.24 3.24 3.26 T:lakekeyakv2 3.36 3.37 3.38 T:seakeyakv2 3.50 3.50 3.52 T:lakekeyakv1 3.56 3.58 3.60 T:norx6441v1 3.89 3.90 3.91 T:norx6444v3 4.07 4.09 4.11 T:norx3241v2 4.08 4.09 4.11 T:norx3241v3 4.29 4.30 4.30 T:aesjambuv1 4.46 4.48 4.50 T:oceankeyakv2 4.56 4.59 4.61 T:norx6461v2 4.58 4.62 4.65 T:norx6461v3 4.68 4.69 4.71 T:norx6444v2 4.82 4.83 4.86 T:norx3241v1 5.34 5.37 5.40 T:norx6461v1 5.51 5.53 5.54 T:norx6444v1 5.77 5.77 5.79 T:riverkeyakv2 6.12 6.14 6.16 T:norx3261v2 6.16 6.17 6.19 T:norx3261v3 6.37 6.39 6.44 ascon128av12 6.46 6.47 6.47 T:acorn128v3 6.52 6.53 6.54 T:ascon128av11 6.53 6.54 6.56 T:ascon96v1 6.59 6.61 6.62 T:acorn128v2 6.75 6.77 6.79 T:ketjemajorv2 7.67 7.67 7.68 T:norx3261v1 7.67 7.70 7.74 T:lunarkeyakv2 8.26 8.26 8.27 T:ketjeminorv2 9.23 9.24 9.25 T:ascon128v1 9.23 9.25 9.26 T:ascon128v11 9.44 9.47 9.48 ascon128v12 11.46 11.48 11.49 T:aes128otrsv1 11.48 11.49 11.51 T:aes128otrsv2 11.61 11.61 11.63 T:aes128otrpv1 11.62 11.63 11.64 T:aes128otrpv2 14.50 14.50 14.51 T:twine80n6t4clocv3 14.65 14.70 14.85 T:aes256otrsv1 14.82 14.85 14.89 T:aes256otrsv2 15.17 15.18 15.19 T:aes256otrpv1 15.17 15.19 15.20 T:aes256otrpv2 15.41 15.41 15.42 T:twine80n6t4clocv2 15.53 15.54 15.55 T:aes128n8clocv1 15.81 15.83 15.85 T:aes128n12clocv1 21.94 21.96 22.02 T:proest256otrv1 23.03 23.04 23.06 T:aeadaes128ocbtaglen64v1 22.97 23.06 23.10 T:aeadaes128ocbtaglen96v1 26.24 26.54 26.75 T:ketjesrv1 27.30 27.32 27.35 T:aeadaes192ocbtaglen64v1 27.31 27.33 27.35 T:aeadaes192ocbtaglen96v1 27.43 27.45 27.81 T:ketjesrv2 31.63 31.65 31.66 T:aeadaes256ocbtaglen96v1 31.64 31.65 31.67 T:aeadaes256ocbtaglen64v1 37.10 37.12 37.15 T:colm127v1 45.68 46.69 46.89 T:ketjejrv1 46.46 46.75 47.44 T:proest128otrv1 67.40 67.70 67.99 T:deoxysneq128128v13 70.99 71.05 71.32 T:ketjejrv2 71.45 71.61 71.67 T:present80n6t4silcv3 82.66 83.31 89.29 T:aezv1 99.99 100.77 100.87 T:deoxyseq128128v13 121.77 121.86 122.49 T:deoxysneq256128v13 125.84 125.92 126.51 T:led80n6t4silcv3 182.26 182.33 185.92 T:deoxyseq256128v13 453.86 456.07 461.06 T:acorn128 2849.47 2855.84 2868.75 T:led80n6silcv1 2854.73 2867.22 2877.69 T:led80n6t4silcv2 2950.01 2950.62 2952.53 T:present80n6t4silcv2 2949.35 2952.06 2952.76 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.25 0.26 0.27 aegis128l 0.28 0.28 0.29 T:tiaoxinv2 0.28 0.28 0.29 T:tiaoxinv1 0.36 0.36 0.37 T:aezv4 0.38 0.38 0.38 T:aezv3 0.38 0.39 0.39 T:aegis128 0.39 0.39 0.40 T:aezv5 0.41 0.41 0.43 aegis256 0.55 0.55 0.56 T:aeadaes128ocbtaglen128v1 0.64 0.64 0.65 T:aes128otrpv3 0.64? 0.65? 0.74? T:aeadaes192ocbtaglen128v1 0.68 0.68 0.68 T:aes128otrcv3 0.76 0.76 0.77 T:aeadaes256ocbtaglen128v1 0.81 0.81 0.81 T:aes256otrpv3 0.81 0.81 0.82 T:aes128gcmv1 0.86 0.87 0.87 T:aes256otrcv3 0.91 0.91 0.92 aes256gcmv1 1.04 1.04 1.05 T:deoxysi128v141 1.06 1.06 1.07 T:deoxysneq128128v1 1.15 1.15 1.16 T:morus1280128v1 1.15 1.16 1.16 T:morus1280256v1 1.16 1.17 1.18 T:morus1280256v2 1.16 1.17 1.18 T:morus1280128v2 1.16 1.17 1.19 T:deoxysi256v141 1.20 1.21 1.21 T:deoxysneq256128v1 1.28 1.29 1.30 T:morus640128v1 1.31 1.33 1.34 T:morus640128v2 1.36 1.37 1.37 T:aes128otrsv3 1.41 1.42 1.42 T:colm0v1 1.42 1.43 1.44 T:deoxysii128v141 1.55 1.55 1.56 T:deoxyseq128128v1 1.62 1.62 1.64 T:deoxysii256v141 1.74 1.74 1.76 T:deoxyseq256128v1 1.84 1.84 1.84 T:aes256otrsv3 2.08 2.09 2.10 T:aes128n12t8clocv2 2.08 2.09 2.10 T:aes128n8t8clocv2 2.09 2.09 2.10 T:aes128n12t8clocv3 2.10 2.10 2.10 T:aes128n8t8silcv2 2.10 2.10 2.11 T:aes128n12t8silcv2 2.10 2.10 2.12 T:aes128n12t8silcv3 3.07 3.09 3.12 T:norx6441v2 3.07 3.10 3.12 T:norx6441v3 3.23 3.23 3.24 T:lakekeyakv2 3.40 3.40 3.42 T:seakeyakv2 3.50 3.52 3.54 T:lakekeyakv1 3.58 3.60 3.62 T:norx6441v1 3.87 3.89 3.91 T:norx6444v3 4.06 4.06 4.08 T:norx3241v3 4.06 4.07 4.08 T:norx3241v2 4.43 4.43 4.43 T:aesjambuv1 4.50 4.52 4.55 T:oceankeyakv2 4.62 4.64 4.68 T:norx6461v3 4.64 4.67 4.69 T:norx6461v2 4.67 4.68 4.70 T:norx6444v2 4.78 4.80 4.81 T:norx3241v1 5.33 5.36 5.39 T:norx6461v1 5.52 5.54 5.55 T:norx6444v1 5.89 5.90 5.91 T:riverkeyakv2 6.09 6.11 6.13 T:norx3261v2 6.15 6.18 6.20 T:norx3261v3 6.37 6.38 6.39 ascon128av12 6.45 6.47 6.48 T:acorn128v2 6.52 6.53 6.55 T:ascon96v1 6.52 6.54 6.57 T:ascon128av11 6.62 6.62 6.62 T:acorn128v3 6.69 6.73 6.75 T:ketjemajorv2 7.61 7.61 7.63 T:norx3261v1 7.71 7.74 7.78 T:lunarkeyakv2 8.65 8.68 8.69 T:ketjeminorv2 9.16 9.16 9.17 T:ascon128v11 9.16 9.16 9.18 T:ascon128v1 9.44 9.48 9.52 ascon128v12 11.53 11.56 11.58 T:aes128otrsv1 11.60 11.61 11.62 T:aes128otrsv2 11.68 11.71 11.73 T:aes128otrpv1 11.70 11.81 11.86 T:aes128otrpv2 14.47 14.49 14.50 T:twine80n6t4clocv3 14.72 14.74 14.76 T:aes256otrsv2 14.77 14.80 14.95 T:aes256otrsv1 15.24 15.26 15.41 T:aes256otrpv2 15.26 15.28 15.30 T:aes256otrpv1 15.38 15.41 15.42 T:twine80n6t4clocv2 15.62 15.63 15.65 T:aes128n12clocv1 15.99 16.00 16.02 T:aes128n8clocv1 21.97 21.99 22.05 T:proest256otrv1 26.84 27.25 27.69 T:ketjesrv1 27.34 27.35 27.38 T:aeadaes128ocbtaglen64v1 27.37 27.40 27.43 T:aeadaes128ocbtaglen96v1 27.76 27.85 28.06 T:ketjesrv2 32.55 32.57 32.59 T:aeadaes192ocbtaglen64v1 32.55 32.57 32.60 T:aeadaes192ocbtaglen96v1 37.83 37.84 37.87 T:aeadaes256ocbtaglen96v1 37.83 37.86 37.89 T:aeadaes256ocbtaglen64v1 45.49 45.51 45.54 T:colm127v1 46.07 46.28 46.86 T:proest128otrv1 45.67 46.69 46.88 T:ketjejrv1 71.48 71.67 71.70 T:present80n6t4silcv3 71.89 71.92 72.01 T:ketjejrv2 79.80 80.08 80.53 T:deoxysneq128128v13 83.27 83.81 89.69 T:aezv1 99.97 100.80 100.92 T:deoxyseq128128v13 126.03 126.22 126.70 T:led80n6t4silcv3 135.63 135.82 136.48 T:deoxysneq256128v13 182.18 182.32 185.96 T:deoxyseq256128v13 456.23 459.59 461.45 T:acorn128 2850.90 2859.48 2870.30 T:led80n6silcv1 2854.82 2862.42 2871.54 T:led80n6t4silcv2 2948.69 2950.03 2951.46 T:present80n6silcv1 2947.42 2950.26 2951.06 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.22 0.22 0.22 T:aezv4 0.23 0.23 0.23 T:aezv3 0.23 0.23 0.24 T:aezv5 0.25 0.26 0.26 aegis128l 0.28 0.28 0.28 T:tiaoxinv2 0.28 0.28 0.29 T:tiaoxinv1 0.38 0.39 0.39 T:aegis128 0.43 0.44 0.45 aegis256 0.55 0.55 0.55 T:aeadaes128ocbtaglen128v1 0.64 0.64 0.65 T:aes128otrpv3 0.64? 0.65? 0.81? T:aeadaes192ocbtaglen128v1 0.68 0.68 0.68 T:aes128otrcv3 0.76 0.76 0.76 T:aeadaes256ocbtaglen128v1 0.81 0.81 0.82 T:aes256otrpv3 0.81 0.81 0.81 T:aes128gcmv1 0.86 0.87 0.87 T:aes256otrcv3 0.91 0.91 0.91 aes256gcmv1 1.03 1.04 1.04 T:deoxysi128v141 1.06 1.06 1.07 T:deoxysneq128128v1 1.15 1.16 1.16 T:morus1280128v1 1.15 1.16 1.16 T:morus1280256v1 1.16 1.17 1.17 T:morus1280128v2 1.16 1.17 1.17 T:morus1280256v2 1.18 1.18 1.18 T:deoxysi256v141 1.19 1.20 1.21 T:deoxysneq256128v1 1.28 1.28 1.30 T:morus640128v1 1.31 1.33 1.34 T:morus640128v2 1.37 1.37 1.37 T:aes128otrsv3 1.42 1.42 1.43 T:colm0v1 1.42 1.43 1.43 T:deoxysii128v141 1.54 1.55 1.55 T:deoxyseq128128v1 1.62 1.63 1.63 T:deoxysii256v141 1.74 1.74 1.76 T:deoxyseq256128v1 1.84 1.84 1.84 T:aes256otrsv3 2.08 2.08 2.11 T:aes128n12t8clocv2 2.08 2.09 2.11 T:aes128n8t8clocv2 2.08 2.09 2.11 T:aes128n12t8clocv3 2.09 2.09 2.11 T:aes128n8t8silcv2 2.09 2.09 2.12 T:aes128n12t8silcv3 2.09 2.10 2.13 T:aes128n12t8silcv2 3.07 3.09 3.11 T:norx6441v3 3.08 3.10 3.11 T:norx6441v2 3.24 3.25 3.26 T:lakekeyakv2 3.41 3.42 3.43 T:seakeyakv2 3.52 3.53 3.55 T:lakekeyakv1 3.58 3.61 3.63 T:norx6441v1 3.86 3.88 3.90 T:norx6444v3 4.05 4.06 4.08 T:norx3241v3 4.05 4.06 4.08 T:norx3241v2 4.42 4.43 4.43 T:aesjambuv1 4.52 4.53 4.55 T:oceankeyakv2 4.62 4.64 4.67 T:norx6461v3 4.64 4.67 4.69 T:norx6461v2 4.70 4.70 4.72 T:norx6444v2 4.78 4.79 4.81 T:norx3241v1 5.33 5.35 5.38 T:norx6461v1 5.54 5.56 5.57 T:norx6444v1 5.91 5.92 5.92 T:riverkeyakv2 6.09 6.11 6.14 T:norx3261v2 6.15 6.18 6.21 T:norx3261v3 6.37 6.38 6.39 ascon128av12 6.45 6.47 6.48 T:acorn128v2 6.51 6.52 6.54 T:ascon96v1 6.53 6.54 6.57 T:ascon128av11 6.62 6.62 6.62 T:acorn128v3 6.72 6.75 6.77 T:ketjemajorv2 7.61 7.62 7.62 T:norx3261v1 7.73 7.76 7.79 T:lunarkeyakv2 8.65 8.68 8.70 T:ketjeminorv2 9.15 9.16 9.18 T:ascon128v1 9.15 9.16 9.18 T:ascon128v11 9.44 9.47 9.51 ascon128v12 11.59 11.60 11.61 T:aes128otrsv1 11.62 11.63 11.65 T:aes128otrsv2 11.69 11.70 11.71 T:aes128otrpv1 11.76 11.87 11.88 T:aes128otrpv2 14.46 14.47 14.49 T:twine80n6t4clocv3 14.67 14.73 14.76 T:aes256otrsv2 14.79 14.83 14.98 T:aes256otrsv1 15.24 15.27 15.30 T:aes256otrpv1 15.27 15.37 15.44 T:aes256otrpv2 15.36 15.37 15.38 T:twine80n6t4clocv2 15.61 15.62 15.64 T:aes128n12clocv1 15.98 15.99 16.01 T:aes128n8clocv1 21.97 21.99 22.05 T:proest256otrv1 26.90 27.25 27.56 T:ketjesrv1 27.34 27.36 27.38 T:aeadaes128ocbtaglen64v1 27.36 27.38 27.41 T:aeadaes128ocbtaglen96v1 27.81 27.90 28.09 T:ketjesrv2 32.54 32.56 32.58 T:aeadaes192ocbtaglen96v1 32.55 32.57 32.60 T:aeadaes192ocbtaglen64v1 37.82 37.85 37.87 T:aeadaes256ocbtaglen96v1 37.85 37.87 37.89 T:aeadaes256ocbtaglen64v1 45.47 45.49 45.50 T:colm127v1 46.04 46.27 46.80 T:proest128otrv1 45.65 46.69 46.84 T:ketjejrv1 71.53 71.66 71.69 T:present80n6t4silcv3 71.88 72.00 72.12 T:ketjejrv2 80.14 80.30 80.49 T:deoxysneq128128v13 83.19 83.71 89.51 T:aezv1 99.95 100.78 100.84 T:deoxyseq128128v13 126.02 126.27 126.68 T:led80n6t4silcv3 135.66 135.83 136.46 T:deoxysneq256128v13 182.32 182.49 185.99 T:deoxyseq256128v13 456.20 457.61 461.27 T:acorn128 2851.82 2859.05 2866.35 T:led80n6silcv1 2855.89 2862.49 2869.41 T:led80n6t4silcv2 2947.25 2949.08 2950.73 T:present80n6t4silcv2 2948.65 2950.03 2951.63 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.00 1.03 1.11 T:aegis128 1.10? 1.15? 1.26? aegis128l 1.31 1.33 1.36 aegis256 1.30? 1.34? 1.57? T:tiaoxinv1 1.31? 1.37? 1.62? T:tiaoxinv2 1.39 1.40 1.42 T:aezv5 1.40 1.43 1.49 T:aezv4 1.55 1.55 1.57 T:aezv3 1.53 1.63 1.68 T:aeadaes128ocbtaglen128v1 1.99 2.00 2.06 T:aes128otrpv3 2.08 2.10 2.23 T:aeadaes256ocbtaglen128v1 2.26 2.29 2.30 T:aes128otrsv3 2.57 2.60 2.73 T:aes256otrpv3 2.58 2.61 2.64 T:aes128n12t8clocv2 2.60 2.63 2.65 T:aes128n12t8clocv3 2.62 2.64 2.67 T:aes128n8t8clocv2 2.73 2.75 2.82 T:colm0v1 2.84 2.86 2.90 T:aes128n12t8silcv3 2.85 2.86 2.89 T:aes128n12t8silcv2 2.87 2.87 2.88 T:aes128otrcv3 2.85 2.88 2.90 T:aes128n8t8silcv2 3.01 3.05 3.12 T:deoxysneq128128v1 3.08 3.10 3.12 T:aes256otrsv3 3.07? 3.16? 6.37? T:aeadaes192ocbtaglen128v1 3.48 3.52 3.65 T:deoxysi128v141 3.58 3.60 3.61 T:aes256otrcv3 3.90 3.96 4.04 T:deoxysneq256128v1 4.20 4.25 4.39 T:deoxysi256v141 4.27 4.33 4.47 T:morus640128v1 4.42 4.47 4.55 T:aes128gcmv1 4.48 4.57 4.70 T:morus640128v2 4.74 4.77 4.83 T:deoxyseq128128v1 4.81 4.82 4.91 T:deoxysii128v141 5.60 5.63 5.64 T:aesjambuv1 5.65 5.69 5.77 T:deoxysii256v141 5.72 5.77 5.90 T:deoxyseq256128v1 5.72 5.78 5.86 aes256gcmv1 5.90 5.98 6.09 T:morus1280128v1 5.94 6.02 6.14 T:morus1280256v1 6.23 6.28 6.39 T:morus1280128v2 6.24 6.29 6.43 T:morus1280256v2 9.58 9.69 9.92 ascon128av12 9.74 9.81 10.09 T:ascon128av11 9.71 9.83 10.16 T:ascon96v1 9.91 9.97 10.07 T:norx3241v3 9.89 10.01 10.14 T:norx6441v1 9.94 10.02 10.13 T:norx3241v1 9.94 10.05 10.14 T:norx3241v2 9.92 10.06 10.34 T:norx6441v2 9.89 10.07 10.24 T:norx6441v3 11.96 11.99 12.16 T:lakekeyakv1 12.06 12.13 12.29 T:ascon128v1 12.06 12.13 12.30 T:ascon128v11 12.38 12.51 12.69 ascon128v12 13.33 13.35 13.42 T:riverkeyakv2 13.93 14.00 14.21 T:lakekeyakv2 14.77 14.91 15.22 T:norx6461v3 14.79 14.93 15.28 T:norx6461v2 14.93 15.06 15.25 T:norx3261v3 14.92 15.07 15.24 T:norx6461v1 15.01 15.13 15.30 T:norx3261v2 15.82 15.88 15.94 T:norx3261v1 18.55 18.62 18.85 T:aes128otrsv1 18.52 18.69 18.72 T:twine80n6t4clocv3 18.63 18.71 18.91 T:aes128otrpv1 18.70 18.78 18.90 T:aes128otrpv2 18.91 18.99 19.15 T:aes128otrsv2 19.30 19.38 19.48 T:aes128n8clocv1 19.34 19.40 19.55 T:aes128n12clocv1 19.45 19.53 19.58 T:twine80n6t4clocv2 23.31 23.48 23.74 T:aes256otrsv2 23.35 23.50 23.66 T:norx6444v3 23.98 24.07 24.29 T:aes256otrsv1 24.26 24.35 24.47 T:aes256otrpv1 24.36 24.45 24.57 T:aes256otrpv2 27.23 27.64 27.82 T:acorn128v2 27.57 27.78 27.99 T:acorn128v3 29.10 29.15 29.30 T:ketjeminorv2 30.67 30.85 31.36 T:seakeyakv2 33.52 33.63 33.77 T:norx6444v2 35.66 35.75 35.87 T:aeadaes128ocbtaglen64v1 35.70 36.04 36.56 T:aeadaes128ocbtaglen96v1 39.52 39.67 39.81 T:norx6444v1 41.77 41.88 42.08 T:aeadaes192ocbtaglen96v1 41.79 41.88 42.00 T:aeadaes192ocbtaglen64v1 41.27 42.25 42.66 T:ketjemajorv2 42.04 42.41 42.63 T:ketjesrv1 48.72 48.87 49.26 T:oceankeyakv2 48.86 48.96 49.18 T:aeadaes256ocbtaglen64v1 48.86 48.96 49.19 T:aeadaes256ocbtaglen96v1 49.34 49.43 49.66 T:ketjesrv2 54.08 54.48 54.74 T:colm127v1 60.15 60.61 61.06 T:ketjejrv1 63.34 63.68 64.00 T:proest256otrv1 76.46 76.65 76.83 T:deoxysneq128128v13 87.72 87.81 87.91 T:present80n6t4silcv3 89.38 90.60 90.92 T:proest128otrv1 95.90 96.42 96.91 T:ketjejrv2 107.62 107.96 108.84 T:aezv1 124.29 124.77 125.59 T:lunarkeyakv2 125.72 125.99 126.21 T:deoxyseq128128v13 136.55 136.70 136.78 T:deoxysneq256128v13 149.38 149.73 149.99 T:led80n6t4silcv3 225.90 226.10 226.88 T:deoxyseq256128v13 1612.09 1623.65 1641.88 T:acorn128 3192.85 3207.84 3220.09 T:led80n6silcv1 3195.69 3212.81 3216.56 T:led80n6t4silcv2 3302.80 3305.36 3310.10 T:present80n6silcv1 3301.20 3307.79 3312.30 T:present80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.03 1.06 1.14 T:aegis128 1.11? 1.14? 1.24? aegis128l 1.33 1.37 1.47 T:tiaoxinv2 1.33? 1.39? 1.48? T:tiaoxinv1 1.40 1.42 1.49 aegis256 1.40 1.42 1.45 T:aezv5 1.41 1.44 1.50 T:aezv4 1.56 1.56 1.58 T:aezv3 1.70 1.79 1.87 T:aeadaes128ocbtaglen128v1 2.03 2.05 2.08 T:aes128otrpv3 2.34 2.36 2.39 T:aes128otrsv3 2.37 2.40 2.44 T:aeadaes256ocbtaglen128v1 2.52 2.55 2.60 T:aes256otrpv3 2.58 2.62 2.65 T:aes128n12t8clocv2 2.60 2.62 2.66 T:aes128n12t8clocv3 2.62 2.63 2.66 T:aes128n8t8clocv2 2.88 2.91 2.92 T:aes128otrcv3 3.01 3.06 3.07 T:aes128n8t8silcv2 3.06 3.08 3.08 T:aes128n12t8silcv2 3.07 3.08 3.08 T:aes128n12t8silcv3 3.21 3.25 3.31 T:colm0v1 3.37 3.38 3.38 T:aes256otrsv3 3.49? 3.54? 6.21? T:aeadaes192ocbtaglen128v1 3.74 3.76 3.78 T:aes256otrcv3 4.32 4.37 4.42 T:aes128gcmv1 4.33 4.41 4.52 T:morus640128v1 4.39 4.43 4.51 T:deoxysneq128128v1 5.03 5.15 5.24 T:morus640128v2 5.08 5.15 5.23 T:deoxysneq256128v1 5.04 5.16 5.20 T:deoxysi128v141 5.47 5.51 5.59 T:deoxysii128v141 5.75 5.76 5.78 T:aesjambuv1 5.82 5.85 5.94 aes256gcmv1 5.88 5.94 6.02 T:deoxysi256v141 6.00 6.04 6.24 T:morus1280256v1 6.00 6.07 6.15 T:morus1280128v1 6.26 6.33 6.48 T:morus1280256v2 6.25 6.34 6.52 T:morus1280128v2 6.69 6.75 6.80 T:deoxyseq128128v1 6.74 6.79 6.84 T:deoxysii256v141 6.76 6.83 6.89 T:deoxyseq256128v1 9.57 9.66 9.95 ascon128av12 9.70 9.77 9.91 T:ascon128av11 9.73 9.79 10.06 T:ascon96v1 9.92 10.03 10.15 T:norx6441v1 10.03 10.13 10.29 T:norx3241v3 10.06 10.14 10.25 T:norx3241v1 10.08 10.17 10.31 T:norx3241v2 10.36 10.44 10.71 T:norx6441v3 10.33 10.46 10.58 T:norx6441v2 11.93 12.01 12.13 T:ascon128v11 11.95 12.04 12.35 T:ascon128v1 12.03 12.06 12.24 T:lakekeyakv1 12.37 12.46 12.76 ascon128v12 13.46 13.49 13.60 T:riverkeyakv2 13.80 13.86 13.98 T:lakekeyakv2 14.76 14.97 15.11 T:norx6461v1 15.12 15.23 15.41 T:norx3261v3 15.22 15.29 15.45 T:norx3261v2 15.31 15.47 15.76 T:norx6461v3 15.19 15.47 15.71 T:norx6461v2 16.02 16.07 16.13 T:norx3261v1 18.64 18.81 18.84 T:twine80n6t4clocv3 18.90 18.95 19.10 T:aes128otrsv1 18.89 18.98 19.08 T:aes128otrpv1 19.02 19.10 19.17 T:aes128otrpv2 19.08 19.17 19.55 T:aes128otrsv2 19.29 19.37 19.45 T:aes128n12clocv1 19.48 19.54 19.58 T:twine80n6t4clocv2 19.89 19.97 20.25 T:aes128n8clocv1 23.32 23.51 23.68 T:norx6444v3 23.40 23.60 23.96 T:aes256otrsv2 24.10 24.18 24.65 T:aes256otrsv1 24.61 24.68 24.79 T:aes256otrpv1 24.79 24.88 25.03 T:aes256otrpv2 27.22 27.60 27.90 T:acorn128v2 27.80 27.88 28.13 T:acorn128v3 29.17 29.23 29.34 T:ketjeminorv2 30.88 31.06 31.39 T:seakeyakv2 33.68 33.80 34.05 T:norx6444v2 39.52 39.71 39.91 T:norx6444v1 41.43 42.53 42.84 T:ketjemajorv2 42.66 43.03 43.34 T:ketjesrv1 43.43 43.55 43.69 T:aeadaes128ocbtaglen64v1 43.47 43.86 44.53 T:aeadaes128ocbtaglen96v1 48.82 48.97 49.41 T:oceankeyakv2 49.51 49.73 50.05 T:ketjesrv2 50.95 51.12 51.48 T:aeadaes192ocbtaglen96v1 51.04 51.14 51.32 T:aeadaes192ocbtaglen64v1 59.87 59.96 60.12 T:aeadaes256ocbtaglen96v1 59.91 60.08 60.27 T:aeadaes256ocbtaglen64v1 60.14 60.68 61.11 T:ketjejrv1 62.82 63.15 63.45 T:colm127v1 64.14 64.41 64.71 T:proest256otrv1 87.79 87.89 88.06 T:present80n6t4silcv3 88.79 89.17 89.43 T:deoxysneq128128v13 89.80 91.11 92.08 T:proest128otrv1 97.11 97.38 97.79 T:ketjejrv2 117.40 117.66 118.52 T:aezv1 124.06 124.56 125.33 T:lunarkeyakv2 125.90 126.04 126.30 T:deoxyseq128128v13 149.54 149.84 150.08 T:led80n6t4silcv3 150.36 150.52 150.67 T:deoxysneq256128v13 225.86 226.10 226.69 T:deoxyseq256128v13 1619.39 1625.91 1641.19 T:acorn128 3182.00 3193.82 3218.69 T:led80n6t4silcv2 3191.77 3209.52 3221.10 T:led80n6silcv1 3299.57 3304.06 3310.88 T:present80n6t4silcv2 3303.01 3305.71 3309.91 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.03 1.05 1.10 T:aegis128 1.07? 1.08? 1.28? T:aezv5 1.09 1.09 1.11 T:aezv4 1.11 1.13 1.21 aegis128l 1.19 1.19 1.20 T:aezv3 1.33? 1.36? 1.48? T:tiaoxinv1 1.33 1.37 1.41 T:tiaoxinv2 1.41 1.44 1.48 aegis256 1.68 1.78 1.85 T:aeadaes128ocbtaglen128v1 2.03 2.05 2.07 T:aes128otrpv3 2.34 2.36 2.38 T:aes128otrsv3 2.37 2.39 2.45 T:aeadaes256ocbtaglen128v1 2.48 2.51 2.56 T:aes128n12t8clocv2 2.49 2.51 2.54 T:aes128n12t8clocv3 2.51 2.52 2.56 T:aes256otrpv3 2.51 2.53 2.69 T:aes128n8t8clocv2 2.80? 2.83? 3.28? T:aes128n8t8silcv2 2.82 2.84 3.06 T:aes128n12t8silcv3 2.82 2.84 2.95 T:aes128n12t8silcv2 2.86 2.91 2.92 T:aes128otrcv3 3.26? 3.31? 3.91? T:colm0v1 3.37 3.38 3.39 T:aes256otrsv3 3.51? 3.55? 5.49? T:aeadaes192ocbtaglen128v1 3.74 3.76 3.77 T:aes256otrcv3 4.26 4.35 4.40 T:morus640128v1 4.32 4.36 4.39 T:aes128gcmv1 4.31 4.40 4.47 T:deoxysneq128128v1 4.90 4.95 5.02 T:deoxysneq256128v1 5.05 5.10 5.15 T:deoxysi128v141 5.08 5.15 5.19 T:morus640128v2 5.49 5.52 5.57 T:deoxysii128v141 5.76 5.78 5.79 T:aesjambuv1 5.81 5.86 5.91 aes256gcmv1 5.85 5.89 5.97 T:deoxysi256v141 6.00 6.03 6.10 T:morus1280256v1 5.97 6.04 6.10 T:morus1280128v1 6.25 6.31 6.42 T:morus1280128v2 6.30 6.36 6.43 T:morus1280256v2 6.73 6.76 6.81 T:deoxyseq128128v1 6.75 6.79 6.85 T:deoxysii256v141 6.77 6.82 6.86 T:deoxyseq256128v1 9.57 9.66 9.82 ascon128av12 9.64 9.73 9.91 T:ascon128av11 9.65 9.74 9.96 T:ascon96v1 9.90 9.99 10.08 T:norx6441v1 10.04 10.10 10.21 T:norx3241v2 10.05 10.11 10.21 T:norx3241v3 10.08 10.19 10.28 T:norx3241v1 10.30 10.41 10.51 T:norx6441v2 10.26 10.42 10.56 T:norx6441v3 11.93 12.00 12.19 T:ascon128v11 11.94 12.01 12.14 T:ascon128v1 12.09 12.12 12.16 T:lakekeyakv1 12.39 12.47 12.53 ascon128v12 13.53 13.55 13.63 T:riverkeyakv2 13.88 13.96 14.10 T:lakekeyakv2 14.83 14.98 15.12 T:norx6461v1 15.07 15.22 15.31 T:norx3261v2 15.17 15.27 15.40 T:norx3261v3 15.18 15.36 15.58 T:norx6461v2 15.26 15.39 15.55 T:norx6461v3 16.02 16.07 16.14 T:norx3261v1 18.54 18.73 18.79 T:twine80n6t4clocv3 18.92 19.01 19.15 T:aes128otrsv1 18.98 19.05 19.26 T:aes128otrpv1 19.04 19.12 19.24 T:aes128otrpv2 19.11 19.17 19.35 T:aes128otrsv2 19.25 19.33 19.42 T:aes128n12clocv1 19.43 19.53 19.55 T:twine80n6t4clocv2 19.82 19.89 20.17 T:aes128n8clocv1 23.32 23.45 23.63 T:norx6444v3 23.48 23.69 23.91 T:aes256otrsv2 24.12 24.25 24.39 T:aes256otrsv1 24.65 24.75 24.90 T:aes256otrpv1 24.80 24.90 25.04 T:aes256otrpv2 27.09 27.43 27.78 T:acorn128v2 27.79 27.83 27.87 T:acorn128v3 29.26 29.31 29.50 T:ketjeminorv2 30.75 30.88 31.19 T:seakeyakv2 33.69 33.81 33.98 T:norx6444v2 39.59 39.77 40.00 T:norx6444v1 41.51 42.60 43.02 T:ketjemajorv2 42.77 43.11 43.43 T:ketjesrv1 43.44 43.62 43.75 T:aeadaes128ocbtaglen64v1 43.47 43.66 44.34 T:aeadaes128ocbtaglen96v1 48.81 49.00 49.19 T:oceankeyakv2 49.51 49.76 50.05 T:ketjesrv2 50.90 51.16 51.37 T:aeadaes192ocbtaglen96v1 51.06 51.21 51.37 T:aeadaes192ocbtaglen64v1 59.85 59.97 60.11 T:aeadaes256ocbtaglen96v1 59.91 60.02 60.13 T:aeadaes256ocbtaglen64v1 60.21 60.71 61.14 T:ketjejrv1 62.37 62.73 63.07 T:colm127v1 62.64 62.95 63.15 T:proest256otrv1 87.81 87.93 88.24 T:present80n6t4silcv3 88.80 89.18 89.41 T:deoxysneq128128v13 89.11 90.05 90.91 T:proest128otrv1 97.12 97.47 97.82 T:ketjejrv2 117.35 117.71 118.40 T:aezv1 124.12 124.60 125.18 T:lunarkeyakv2 125.74 125.93 126.14 T:deoxyseq128128v13 149.49 149.84 150.21 T:led80n6t4silcv3 150.38 150.51 150.74 T:deoxysneq256128v13 225.88 226.06 226.68 T:deoxyseq256128v13 1619.19 1625.99 1640.77 T:acorn128 3189.37 3203.91 3220.47 T:led80n6t4silcv2 3191.41 3206.14 3220.92 T:led80n6silcv1 3298.92 3304.21 3311.71 T:present80n6t4silcv2 3302.28 3304.94 3309.55 T:present80n6silcv1