VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Gracemont (b06a2-20); 2024 Intel Core 5 210H, E cores; 4 x 1600MHz; freshwrap,little, supercop-20260330

[Page version: 20260422 02:31:15]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.31 0.32 0.33 T:tiaoxinv2 0.31 0.32 0.33 T:tiaoxinv1 0.34 0.35 0.36 aegis128l 0.53 0.54 0.55 T:aegis128 0.56 0.57 0.58 aegis256 0.59 0.60 0.61 T:aezv4 0.61 0.61 0.62 T:aezv3 0.65 0.66 0.67 T:aezv5 0.68 0.69 0.70 T:aeadaes128ocbtaglen128v1 0.71 0.72 0.73 T:aes128otrpv3 0.72 0.73 0.74 T:aes128otrcv3 0.73 0.74 0.76 T:aes128otrsv3 -0.02? 0.80? 2.16? T:aeadaes192ocbtaglen128v1 0.80 0.81 0.84 T:aeadaes256ocbtaglen128v1 0.92 0.93 0.95 T:aes256otrpv3 0.91 0.93 0.95 T:aes256otrsv3 0.92 0.94 0.96 T:aes256otrcv3 1.13 1.14 1.16 T:deoxysi128v141 1.20 1.22 1.23 T:deoxysneq128128v1 1.28 1.30 1.31 T:aes128gcmv1 1.28 1.30 1.32 T:deoxysi256v141 1.34 1.35 1.37 T:morus1280256v2 1.34 1.35 1.37 T:morus1280256v1 1.35 1.36 1.38 T:deoxysneq256128v1 1.34 1.37 1.39 T:morus1280128v2 1.37 1.38 1.40 T:morus1280128v1 1.47 1.48 1.51 aes256gcmv1 1.61 1.63 1.65 T:morus640128v1 1.61 1.64 1.66 T:morus640128v2 2.26 2.28 2.30 T:deoxysii128v141 2.48 2.51 2.53 T:deoxyseq128128v1 2.52 2.54 2.55 T:colm0v1 2.55 2.57 2.60 T:deoxysii256v141 2.77 2.84 2.93 T:lunarkeyakv2 2.83 2.86 2.89 T:deoxyseq256128v1 2.92 2.93 2.93 T:aes128n8t8clocv2 2.92 2.93 2.93 T:aes128n12t8clocv3 2.92 2.93 2.93 T:aes128n12t8clocv2 2.92 2.93 2.94 T:aes128n8t8silcv2 2.92 2.93 2.94 T:aes128n12t8silcv2 2.93 2.93 2.94 T:aes128n12t8silcv3 3.49 3.53 3.60 T:norx6444v3 3.61 3.65 3.69 T:norx6441v2 3.65 3.70 3.73 T:norx6441v3 3.84 3.88 3.93 T:seakeyakv2 3.88 3.95 4.01 T:oceankeyakv2 4.22 4.26 4.29 T:lakekeyakv1 4.38 4.43 4.47 T:norx6441v1 4.56 4.59 4.60 T:lakekeyakv2 4.72 4.75 4.79 T:norx6444v2 5.21 5.25 5.28 T:norx3241v3 5.22 5.26 5.29 T:norx3241v2 5.34 5.39 5.46 T:norx6444v1 5.41 5.47 5.54 T:norx6461v2 5.46 5.51 5.58 T:norx6461v3 5.86 5.91 5.92 T:aesjambuv1 6.29 6.32 6.36 T:norx3241v1 6.55 6.61 6.68 T:norx6461v1 7.56 7.59 7.62 T:acorn128v2 7.73 7.78 7.84 T:acorn128v3 7.83 7.87 7.91 T:norx3261v3 7.90 7.94 7.98 T:norx3261v2 8.29 8.38 8.43 T:ketjemajorv2 8.66 8.70 8.72 ascon128av12 8.88 8.91 8.93 T:ascon96v1 8.89 8.91 8.94 T:ascon128av11 10.01 10.04 10.07 T:norx3261v1 10.53 10.55 10.58 T:riverkeyakv2 11.84 11.91 11.95 T:ketjeminorv2 12.33 12.35 12.38 T:ascon128v1 12.30 12.36 12.51 T:ascon128v11 12.87 12.91 12.96 ascon128v12 16.18 16.20 16.23 T:aes128otrpv2 16.17 16.20 16.24 T:aes128otrsv2 16.19 16.21 16.23 T:aes128otrpv1 16.94 17.02 17.07 T:aes128otrsv1 19.99 20.01 20.04 T:twine80n6t4clocv3 20.96 20.99 21.02 T:aes256otrpv1 20.96 20.99 21.03 T:aes256otrpv2 21.29 21.32 21.36 T:aes256otrsv1 21.35 21.37 21.38 T:twine80n6t4clocv2 21.41 21.65 21.71 T:aes256otrsv2 27.74 27.79 27.96 T:proest256otrv1 28.25 28.30 28.36 T:aes128n12clocv1 28.31 28.34 28.39 T:aes128n8clocv1 31.38 31.42 31.47 T:aeadaes128ocbtaglen96v1 31.38 31.44 31.48 T:aeadaes128ocbtaglen64v1 36.31 36.38 36.46 T:ketjesrv1 37.15 37.19 37.24 T:aeadaes192ocbtaglen96v1 37.16 37.21 37.27 T:aeadaes192ocbtaglen64v1 37.27 37.34 37.43 T:ketjesrv2 42.92 42.98 43.04 T:aeadaes256ocbtaglen64v1 42.94 43.01 43.06 T:aeadaes256ocbtaglen96v1 62.01 62.13 62.77 T:proest128otrv1 67.93 67.98 68.03 T:colm127v1 67.23 68.28 69.64 T:ketjejrv1 91.71 92.10 93.31 T:deoxysneq128128v13 97.04 98.21 103.82 T:ketjejrv2 98.55 98.59 98.62 T:present80n6t4silcv3 166.66 167.55 167.78 T:deoxysneq256128v13 173.67 173.76 173.94 T:led80n6t4silcv3 177.54 177.85 178.20 T:aezv1 182.61 183.14 183.65 T:deoxyseq128128v13 334.61 335.70 338.15 T:deoxyseq256128v13 562.43 586.97 592.34 T:acorn128 5219.76 5244.34 5269.73 T:led80n6silcv1 5228.33 5244.85 5261.65 T:led80n6t4silcv2 5393.25 5403.72 5405.71 T:present80n6silcv1 5405.73 5412.35 5417.06 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.36 0.37 0.39 aegis128l 0.45 0.46 0.48 T:tiaoxinv1 0.46 0.47 0.48 T:tiaoxinv2 0.54 0.55 0.56 T:aegis128 0.55 0.57 0.60 aegis256 0.59 0.59 0.60 T:aezv4 0.61 0.61 0.63 T:aezv3 0.65 0.66 0.68 T:aezv5 0.72 0.73 0.74 T:aeadaes128ocbtaglen128v1 0.75 0.76 0.77 T:aes128otrpv3 0.76 0.77 0.78 T:aes128otrcv3 0.77 0.78 0.79 T:aes128otrsv3 -0.49? 0.84? 1.55? T:aeadaes192ocbtaglen128v1 0.94 0.95 0.97 T:aeadaes256ocbtaglen128v1 0.96 0.97 0.97 T:aes256otrpv3 0.98 0.98 0.99 T:aes256otrcv3 0.97 0.99 1.00 T:aes256otrsv3 1.24 1.26 1.27 T:deoxysi128v141 1.31 1.32 1.34 T:aes128gcmv1 1.32 1.33 1.35 T:deoxysneq128128v1 1.37 1.38 1.41 T:morus1280128v2 1.38 1.39 1.41 T:morus1280256v1 1.38 1.40 1.41 T:morus1280256v2 1.37 1.40 1.42 T:morus1280128v1 1.40 1.42 1.43 T:deoxysi256v141 1.51 1.52 1.54 T:deoxysneq256128v1 1.58 1.60 1.62 aes256gcmv1 1.61 1.63 1.65 T:morus640128v2 1.62 1.65 1.67 T:morus640128v1 2.26 2.28 2.30 T:deoxysii128v141 2.53 2.55 2.59 T:deoxysii256v141 2.55 2.56 2.57 T:deoxyseq128128v1 2.62 2.66 2.68 T:colm0v1 2.80 2.84 2.88 T:aes128n12t8silcv2 2.84 2.84 2.86 T:aes128n8t8clocv2 2.84 2.84 2.86 T:aes128n8t8silcv2 2.84 2.84 2.88 T:aes128n12t8clocv2 2.84 2.84 2.89 T:aes128n12t8silcv3 2.84 2.85 2.89 T:aes128n12t8clocv3 2.88 2.90 2.93 T:deoxyseq256128v1 2.88 2.94 3.01 T:lunarkeyakv2 3.47 3.50 3.54 T:norx6444v3 3.64 3.68 3.73 T:norx6441v3 3.65 3.69 3.73 T:norx6441v2 3.90 3.96 4.01 T:seakeyakv2 3.99 4.05 4.12 T:oceankeyakv2 4.32 4.34 4.37 T:lakekeyakv1 4.34 4.38 4.42 T:norx6441v1 4.59 4.61 4.63 T:lakekeyakv2 4.73 4.77 4.81 T:norx6444v2 5.10 5.13 5.17 T:norx3241v2 5.12 5.14 5.17 T:norx3241v3 5.36 5.42 5.49 T:norx6444v1 5.49 5.55 5.63 T:norx6461v3 5.52 5.59 5.67 T:norx6461v2 6.19 6.22 6.24 T:norx3241v1 6.29 6.30 6.32 T:aesjambuv1 6.55 6.61 6.67 T:norx6461v1 7.57 7.59 7.62 T:acorn128v2 7.81 7.85 7.90 T:norx3261v2 7.84 7.88 7.92 T:norx3261v3 7.99 8.04 8.10 T:acorn128v3 8.05 8.16 8.24 T:ketjemajorv2 8.69 8.73 8.76 ascon128av12 8.84 8.88 8.91 T:ascon96v1 8.86 8.89 8.92 T:ascon128av11 9.81 9.84 9.87 T:norx3261v1 10.86 10.89 10.92 T:riverkeyakv2 11.12 11.17 11.32 T:ketjeminorv2 12.42 12.45 12.49 T:ascon128v11 12.42 12.46 12.48 T:ascon128v1 12.84 12.87 12.90 ascon128v12 16.27 16.42 16.48 T:aes128otrpv1 16.36 16.42 16.80 T:aes128otrsv2 16.37 16.68 16.85 T:aes128otrpv2 16.62 16.73 16.80 T:aes128otrsv1 19.88 19.92 19.95 T:twine80n6t4clocv3 20.91 21.05 21.13 T:aes256otrsv2 21.02 21.10 21.27 T:aes256otrpv1 21.05 21.11 21.17 T:aes256otrpv2 21.25 21.29 21.32 T:twine80n6t4clocv2 21.59 21.65 21.69 T:aes256otrsv1 27.65 27.74 27.95 T:proest256otrv1 27.82 27.86 27.91 T:aes128n8clocv1 29.48 29.52 29.57 T:aes128n12clocv1 38.07 38.21 38.36 T:ketjesrv1 38.31 38.39 38.47 T:ketjesrv2 42.75 42.80 42.85 T:aeadaes128ocbtaglen64v1 42.79 42.83 42.90 T:aeadaes128ocbtaglen96v1 51.09 51.16 51.25 T:aeadaes192ocbtaglen64v1 51.12 51.19 51.25 T:aeadaes192ocbtaglen96v1 59.44 59.50 59.57 T:aeadaes256ocbtaglen96v1 59.44 59.50 59.58 T:aeadaes256ocbtaglen64v1 59.97 60.87 61.33 T:proest128otrv1 67.09 68.27 69.62 T:ketjejrv1 90.99 91.08 91.19 T:colm127v1 98.55 98.62 98.66 T:present80n6t4silcv3 99.88 100.77 105.73 T:ketjejrv2 125.88 126.21 127.66 T:deoxysneq128128v13 173.67 174.16 174.55 T:led80n6t4silcv3 177.54 177.98 178.96 T:aezv1 182.56 182.93 183.70 T:deoxyseq128128v13 205.16 205.33 205.99 T:deoxysneq256128v13 334.38 335.49 337.80 T:deoxyseq256128v13 556.31 559.91 578.76 T:acorn128 5228.92 5242.13 5255.02 T:led80n6t4silcv2 5229.19 5248.91 5276.84 T:led80n6silcv1 5390.66 5399.96 5402.70 T:present80n6silcv1 5400.51 5403.91 5410.65 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.22 0.23 0.24 T:aezv4 0.22? 0.23? 0.25? T:aezv3 0.24? 0.26? 0.27? T:aezv5 0.36 0.37 0.39 aegis128l 0.45 0.46 0.48 T:tiaoxinv2 0.46 0.47 0.48 T:tiaoxinv1 0.54 0.55 0.56 T:aegis128 0.63 0.64 0.65 aegis256 0.72 0.73 0.74 T:aeadaes128ocbtaglen128v1 0.75 0.76 0.77 T:aes128otrpv3 0.75 0.76 0.77 T:aes128otrcv3 0.78 0.78 0.79 T:aes128otrsv3 0.17? 0.84? 2.20? T:aeadaes192ocbtaglen128v1 0.94 0.95 0.95 T:aeadaes256ocbtaglen128v1 0.97 0.97 0.98 T:aes256otrsv3 0.96 0.97 0.98 T:aes256otrcv3 0.97 0.99 0.99 T:aes256otrpv3 1.23 1.25 1.27 T:deoxysi128v141 1.30 1.31 1.33 T:aes128gcmv1 1.32 1.34 1.36 T:deoxysneq128128v1 1.37 1.38 1.41 T:morus1280128v2 1.37 1.39 1.41 T:morus1280256v2 1.38 1.39 1.41 T:morus1280256v1 1.38 1.40 1.41 T:morus1280128v1 1.39 1.41 1.43 T:deoxysi256v141 1.50 1.52 1.54 T:deoxysneq256128v1 1.59 1.60 1.61 aes256gcmv1 1.61 1.63 1.65 T:morus640128v2 1.61 1.64 1.66 T:morus640128v1 2.27 2.29 2.30 T:deoxysii128v141 2.54 2.56 2.58 T:deoxyseq128128v1 2.55 2.57 2.59 T:deoxysii256v141 2.65 2.67 2.69 T:colm0v1 2.81 2.84 2.88 T:aes128n8t8silcv2 2.81 2.84 2.88 T:aes128n12t8clocv3 2.84 2.84 2.90 T:aes128n12t8silcv3 2.83 2.84 2.89 T:aes128n12t8clocv2 2.82 2.85 2.89 T:aes128n8t8clocv2 2.84 2.85 2.91 T:aes128n12t8silcv2 2.88 2.90 2.93 T:deoxyseq256128v1 2.96 3.01 3.07 T:lunarkeyakv2 3.46 3.50 3.53 T:norx6444v3 3.64 3.69 3.73 T:norx6441v2 3.64 3.70 3.74 T:norx6441v3 3.97 4.01 4.04 T:seakeyakv2 4.06 4.12 4.18 T:oceankeyakv2 4.35 4.37 4.40 T:lakekeyakv1 4.35 4.38 4.42 T:norx6441v1 4.62 4.65 4.67 T:lakekeyakv2 4.79 4.82 4.85 T:norx6444v2 5.11 5.14 5.17 T:norx3241v3 5.11 5.15 5.18 T:norx3241v2 5.42 5.48 5.53 T:norx6444v1 5.48 5.54 5.62 T:norx6461v3 5.51 5.57 5.64 T:norx6461v2 6.19 6.21 6.24 T:norx3241v1 6.29 6.31 6.32 T:aesjambuv1 6.53 6.59 6.67 T:norx6461v1 7.57 7.60 7.62 T:acorn128v2 7.80 7.84 7.88 T:norx3261v2 7.85 7.89 7.93 T:norx3261v3 8.01 8.05 8.12 T:acorn128v3 8.10 8.22 8.30 T:ketjemajorv2 8.69 8.73 8.76 ascon128av12 8.87 8.89 8.92 T:ascon128av11 8.85 8.90 8.93 T:ascon96v1 9.85 9.88 9.91 T:norx3261v1 10.91 10.93 10.95 T:riverkeyakv2 11.15 11.19 11.23 T:ketjeminorv2 12.44 12.46 12.50 T:ascon128v1 12.44 12.47 12.49 T:ascon128v11 12.85 12.89 12.92 ascon128v12 16.38 16.49 16.52 T:aes128otrpv1 16.42 16.72 16.89 T:aes128otrsv2 16.68 16.79 16.85 T:aes128otrsv1 16.53 16.88 16.91 T:aes128otrpv2 19.89 19.92 19.95 T:twine80n6t4clocv3 20.96 21.10 21.19 T:aes256otrsv2 21.08 21.22 21.32 T:aes256otrpv1 21.23 21.29 21.33 T:twine80n6t4clocv2 21.16 21.54 21.72 T:aes256otrpv2 21.64 21.70 21.73 T:aes256otrsv1 27.71 27.74 27.94 T:proest256otrv1 27.81 27.87 27.91 T:aes128n8clocv1 29.48 29.52 29.56 T:aes128n12clocv1 38.15 38.27 38.44 T:ketjesrv1 38.38 38.45 38.52 T:ketjesrv2 42.77 42.82 42.89 T:aeadaes128ocbtaglen64v1 42.81 42.87 42.93 T:aeadaes128ocbtaglen96v1 51.10 51.15 51.20 T:aeadaes192ocbtaglen96v1 51.12 51.16 51.22 T:aeadaes192ocbtaglen64v1 59.42 59.48 59.53 T:aeadaes256ocbtaglen96v1 59.45 59.51 59.61 T:aeadaes256ocbtaglen64v1 59.98 60.86 61.31 T:proest128otrv1 67.10 68.32 69.54 T:ketjejrv1 89.60 89.69 89.79 T:colm127v1 98.53 98.62 98.68 T:present80n6t4silcv3 99.42 100.10 105.52 T:ketjejrv2 125.82 126.26 127.62 T:deoxysneq128128v13 173.51 174.12 174.65 T:led80n6t4silcv3 177.53 177.79 178.81 T:aezv1 182.63 182.89 183.15 T:deoxyseq128128v13 205.16 205.42 205.98 T:deoxysneq256128v13 334.60 335.45 337.90 T:deoxyseq256128v13 555.89 559.33 578.69 T:acorn128 5217.00 5237.57 5255.19 T:led80n6t4silcv2 5224.07 5246.69 5276.58 T:led80n6silcv1 5389.49 5399.97 5402.36 T:present80n6silcv1 5400.61 5404.18 5409.94 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.24 0.25 0.26 T:tiaoxinv1 0.24 0.25 0.26 T:tiaoxinv2 0.28 0.29 0.30 aegis128l 0.43 0.44 0.45 T:aezv4 0.44 0.45 0.46 T:aezv3 0.48 0.48 0.49 T:aezv5 0.50 0.51 0.51 aegis256 0.53 0.53 0.54 T:aegis128 0.65 0.66 0.67 T:aeadaes128ocbtaglen128v1 0.29? 0.74? 1.11? T:aeadaes192ocbtaglen128v1 0.74 0.75 0.75 T:aes128otrcv3 0.76 0.77 0.77 T:aes128otrpv3 0.88 0.90 0.90 T:aeadaes256ocbtaglen128v1 0.95 0.95 0.96 T:aes256otrcv3 0.96 0.97 0.97 T:aes128gcmv1 0.96 0.97 0.98 T:aes256otrpv3 1.04 1.05 1.06 aes256gcmv1 1.14 1.14 1.15 T:deoxysi128v141 1.22 1.23 1.24 T:deoxysneq128128v1 1.28 1.30 1.32 T:deoxysi256v141 1.29 1.30 1.32 T:morus1280128v2 1.29 1.30 1.32 T:morus1280256v1 1.30 1.31 1.32 T:morus1280128v1 1.29 1.31 1.33 T:morus1280256v2 1.36 1.37 1.38 T:deoxysneq256128v1 1.58 1.60 1.62 T:morus640128v2 1.58 1.60 1.63 T:morus640128v1 1.70 1.72 1.73 T:deoxysii128v141 1.78 1.79 1.79 T:colm0v1 1.79 1.79 1.80 T:aes128otrsv3 1.86 1.88 1.90 T:deoxyseq128128v1 1.92 1.93 1.94 T:deoxysii256v141 2.13 2.14 2.15 T:deoxyseq256128v1 2.40 2.40 2.41 T:aes256otrsv3 2.88 2.89 2.90 T:aes128n8t8silcv2 2.88 2.89 2.89 T:aes128n12t8clocv3 2.88 2.89 2.89 T:aes128n12t8silcv2 2.88 2.89 2.90 T:aes128n12t8clocv2 2.88 2.89 2.90 T:aes128n8t8clocv2 2.89 2.89 2.90 T:aes128n12t8silcv3 3.21 3.25 3.28 T:seakeyakv2 3.29 3.31 3.35 T:oceankeyakv2 3.61 3.64 3.68 T:norx6441v2 3.66 3.70 3.73 T:norx6441v3 3.97 4.00 4.03 T:lunarkeyakv2 4.01 4.03 4.06 T:norx6444v3 4.05 4.08 4.12 T:lakekeyakv1 4.08 4.09 4.11 T:lakekeyakv2 4.38 4.42 4.45 T:norx6441v1 4.52 4.54 4.57 T:norx6444v2 5.21 5.23 5.25 T:norx3241v3 5.22 5.25 5.28 T:norx3241v2 5.33 5.36 5.40 T:norx6444v1 5.42 5.47 5.52 T:norx6461v2 5.49 5.53 5.59 T:norx6461v3 5.83 5.84 5.85 T:aesjambuv1 6.26 6.29 6.32 T:norx3241v1 6.54 6.57 6.61 T:norx6461v1 7.19 7.20 7.22 T:ketjemajorv2 7.60 7.63 7.77 T:riverkeyakv2 7.62 7.64 7.74 T:acorn128v3 7.82 7.85 7.87 T:acorn128v2 7.82 7.85 7.89 T:norx3261v2 7.87 7.91 7.94 T:norx3261v3 8.57 8.60 8.68 ascon128av12 8.79 8.81 8.83 T:ascon96v1 8.78 8.81 8.86 T:ascon128av11 10.02 10.03 10.05 T:norx3261v1 10.31 10.43 10.48 T:ketjeminorv2 12.52 12.55 12.57 T:ascon128v1 12.55 12.57 12.62 T:ascon128v11 12.83 12.85 12.87 ascon128v12 15.34 15.36 15.38 T:aes128otrsv2 15.38 15.49 15.60 T:aes128otrsv1 15.54 15.58 15.60 T:aes128otrpv1 15.57 15.59 15.61 T:aes128otrpv2 19.58 19.62 19.66 T:aes256otrsv1 19.73 19.74 19.75 T:twine80n6t4clocv3 19.85 19.99 20.06 T:aes256otrsv2 20.34 20.36 20.38 T:aes256otrpv2 20.34 20.37 20.38 T:aes256otrpv1 20.98 20.99 21.00 T:twine80n6t4clocv2 21.16 21.18 21.20 T:aes128n12clocv1 21.61 21.63 21.64 T:aes128n8clocv1 27.52 27.57 28.71 T:proest256otrv1 30.96 30.99 31.02 T:aeadaes128ocbtaglen64v1 30.98 31.01 31.04 T:aeadaes128ocbtaglen96v1 35.20 35.28 35.47 T:ketjesrv1 36.54 36.66 36.74 T:ketjesrv2 36.75 36.79 36.82 T:aeadaes192ocbtaglen96v1 36.78 36.81 36.84 T:aeadaes192ocbtaglen64v1 42.53 42.56 42.60 T:aeadaes256ocbtaglen64v1 42.53 42.58 42.66 T:aeadaes256ocbtaglen96v1 50.20 50.24 50.29 T:colm127v1 61.25 61.48 62.31 T:proest128otrv1 62.48 62.87 63.74 T:ketjejrv1 92.37 92.56 93.01 T:deoxysneq128128v13 96.05 96.84 99.91 T:ketjejrv2 97.66 97.82 97.85 T:present80n6t4silcv3 119.10 126.93 129.08 T:aezv1 137.10 137.26 137.47 T:deoxyseq128128v13 167.16 167.30 167.74 T:deoxysneq256128v13 172.08 172.68 173.20 T:led80n6t4silcv3 248.49 252.53 252.87 T:deoxyseq256128v13 555.55 575.61 580.39 T:acorn128 3906.58 3915.20 3924.90 T:led80n6t4silcv2 3918.90 3932.38 3948.54 T:led80n6silcv1 4042.46 4046.49 4055.06 T:present80n6t4silcv2 4047.19 4048.31 4060.26 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.30 0.31 0.31 aegis128l 0.31 0.32 0.33 T:tiaoxinv1 0.32 0.32 0.33 T:tiaoxinv2 0.43 0.44 0.45 T:aezv4 0.44 0.45 0.46 T:aezv3 0.48 0.48 0.49 T:aezv5 0.49 0.49 0.50 T:aegis128 0.50 0.50 0.53 aegis256 0.67 0.68 0.69 T:aeadaes128ocbtaglen128v1 0.37? 0.76? 1.42? T:aeadaes192ocbtaglen128v1 0.76 0.77 0.77 T:aes128otrcv3 0.78 0.79 0.79 T:aes128otrpv3 0.96 0.96 0.96 T:aes256otrcv3 0.95 0.96 0.97 T:aeadaes256ocbtaglen128v1 0.97 0.98 0.99 T:aes128gcmv1 0.99 0.99 1.00 T:aes256otrpv3 1.12 1.13 1.14 aes256gcmv1 1.19 1.20 1.22 T:deoxysi128v141 1.26 1.28 1.30 T:deoxysneq128128v1 1.28 1.29 1.31 T:morus1280256v1 1.29 1.30 1.31 T:morus1280128v1 1.29 1.30 1.31 T:morus1280128v2 1.29 1.31 1.31 T:morus1280256v2 1.34 1.36 1.37 T:deoxysi256v141 1.44 1.45 1.46 T:deoxysneq256128v1 1.57 1.59 1.61 T:morus640128v1 1.58 1.60 1.61 T:morus640128v2 1.70 1.72 1.73 T:deoxysii128v141 1.80 1.81 1.81 T:aes128otrsv3 1.84 1.85 1.86 T:colm0v1 1.89 1.91 1.92 T:deoxyseq128128v1 1.92 1.93 1.94 T:deoxysii256v141 2.15 2.17 2.18 T:deoxyseq256128v1 2.41 2.42 2.43 T:aes256otrsv3 2.84 2.84 2.87 T:aes128n12t8silcv2 2.83 2.84 2.86 T:aes128n8t8silcv2 2.84 2.84 2.86 T:aes128n12t8clocv2 2.84 2.84 2.86 T:aes128n8t8clocv2 2.84 2.84 2.87 T:aes128n12t8clocv3 2.84 2.84 2.86 T:aes128n12t8silcv3 3.29 3.31 3.33 T:seakeyakv2 3.35 3.38 3.41 T:oceankeyakv2 3.64 3.67 3.71 T:norx6441v3 3.65 3.68 3.72 T:norx6441v2 3.96 3.99 4.03 T:norx6444v3 3.99 4.04 4.07 T:lunarkeyakv2 4.06 4.07 4.09 T:lakekeyakv2 4.08 4.12 4.19 T:lakekeyakv1 4.38 4.41 4.44 T:norx6441v1 4.50 4.52 4.55 T:norx6444v2 5.16 5.19 5.21 T:norx3241v3 5.16 5.19 5.21 T:norx3241v2 5.34 5.37 5.42 T:norx6444v1 5.49 5.53 5.56 T:norx6461v3 5.52 5.57 5.61 T:norx6461v2 6.01 6.02 6.05 T:aesjambuv1 6.22 6.25 6.27 T:norx3241v1 6.52 6.54 6.58 T:norx6461v1 7.07 7.11 7.14 T:ketjemajorv2 7.61 7.64 7.65 T:acorn128v2 7.76 7.78 7.79 T:acorn128v3 7.77 7.78 7.80 T:riverkeyakv2 7.76 7.79 7.82 T:norx3261v2 7.83 7.89 7.92 T:norx3261v3 8.60 8.65 8.69 ascon128av12 8.75 8.79 8.81 T:ascon96v1 8.79 8.81 8.83 T:ascon128av11 9.93 9.95 9.96 T:norx3261v1 9.96 10.08 10.18 T:ketjeminorv2 12.45 12.48 12.50 T:ascon128v1 12.47 12.49 12.52 T:ascon128v11 12.80 12.85 12.92 ascon128v12 15.26 15.36 15.48 T:aes128otrsv1 15.44 15.60 15.69 T:aes128otrsv2 15.61 15.66 15.71 T:aes128otrpv1 15.66 15.82 15.91 T:aes128otrpv2 19.67 19.69 19.72 T:twine80n6t4clocv3 19.74 19.78 19.82 T:aes256otrsv1 19.75 19.79 19.83 T:aes256otrsv2 20.40 20.48 20.50 T:aes256otrpv1 20.48 20.68 20.70 T:aes256otrpv2 20.93 20.95 20.97 T:twine80n6t4clocv2 21.32 21.35 21.37 T:aes128n8clocv1 21.76 21.79 21.82 T:aes128n12clocv1 27.48 27.57 28.67 T:proest256otrv1 35.89 35.99 36.15 T:ketjesrv1 36.69 36.72 36.76 T:aeadaes128ocbtaglen96v1 36.69 36.72 36.76 T:aeadaes128ocbtaglen64v1 37.04 37.18 37.26 T:ketjesrv2 43.73 43.79 43.94 T:aeadaes192ocbtaglen64v1 43.76 43.82 43.92 T:aeadaes192ocbtaglen96v1 50.80 50.84 50.89 T:aeadaes256ocbtaglen64v1 50.80 50.86 50.91 T:aeadaes256ocbtaglen96v1 60.59 60.93 61.46 T:proest128otrv1 61.72 61.76 61.80 T:colm127v1 62.52 62.89 63.89 T:ketjejrv1 97.48 97.60 97.84 T:present80n6t4silcv3 97.18 97.70 101.12 T:ketjejrv2 109.52 109.88 110.10 T:deoxysneq128128v13 119.26 127.08 127.33 T:aezv1 137.12 137.57 138.22 T:deoxyseq128128v13 172.59 172.96 173.47 T:led80n6t4silcv3 186.31 186.48 186.87 T:deoxysneq256128v13 248.43 252.27 252.75 T:deoxyseq256128v13 559.26 563.48 571.78 T:acorn128 3911.86 3924.86 3942.03 T:led80n6t4silcv2 3911.50 3938.59 3958.17 T:led80n6silcv1 4037.09 4043.83 4048.68 T:present80n6t4silcv2 4042.75 4045.03 4056.12 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.24 0.25 0.26 T:aezv4 0.26 0.26 0.27 T:aezv3 0.27 0.28 0.28 T:aezv5 0.29 0.30 0.31 aegis128l 0.31 0.32 0.33 T:tiaoxinv1 0.32 0.32 0.33 T:tiaoxinv2 0.49 0.49 0.50 T:aegis128 0.52 0.54 0.55 aegis256 0.68 0.68 0.69 T:aeadaes128ocbtaglen128v1 0.10? 0.76? 1.09? T:aeadaes192ocbtaglen128v1 0.76 0.77 0.78 T:aes128otrcv3 0.78 0.78 0.79 T:aes128otrpv3 0.95 0.96 0.97 T:aeadaes256ocbtaglen128v1 0.96 0.96 0.97 T:aes256otrcv3 0.98 0.98 0.99 T:aes128gcmv1 0.99 0.99 1.00 T:aes256otrpv3 1.12 1.13 1.14 aes256gcmv1 1.19 1.21 1.22 T:deoxysi128v141 1.27 1.29 1.30 T:deoxysneq128128v1 1.29 1.30 1.31 T:morus1280256v1 1.29 1.30 1.31 T:morus1280128v1 1.29 1.30 1.31 T:morus1280256v2 1.29 1.30 1.31 T:morus1280128v2 1.34 1.35 1.37 T:deoxysi256v141 1.44 1.45 1.46 T:deoxysneq256128v1 1.58 1.59 1.61 T:morus640128v2 1.58 1.60 1.61 T:morus640128v1 1.72 1.73 1.74 T:deoxysii128v141 1.81 1.81 1.81 T:aes128otrsv3 1.82 1.85 1.86 T:colm0v1 1.89 1.90 1.91 T:deoxyseq128128v1 1.91 1.93 1.95 T:deoxysii256v141 2.15 2.17 2.20 T:deoxyseq256128v1 2.42 2.42 2.43 T:aes256otrsv3 2.84 2.84 2.87 T:aes128n8t8silcv2 2.84 2.84 2.85 T:aes128n8t8clocv2 2.82 2.84 2.87 T:aes128n12t8silcv2 2.82 2.84 2.88 T:aes128n12t8silcv3 2.84 2.84 2.87 T:aes128n12t8clocv2 2.84 2.85 2.88 T:aes128n12t8clocv3 3.31 3.34 3.36 T:seakeyakv2 3.36 3.39 3.42 T:oceankeyakv2 3.64 3.66 3.69 T:norx6441v3 3.65 3.69 3.71 T:norx6441v2 3.97 3.98 4.03 T:norx6444v3 4.03 4.07 4.11 T:lunarkeyakv2 4.08 4.09 4.10 T:lakekeyakv2 4.12 4.15 4.17 T:lakekeyakv1 4.39 4.42 4.46 T:norx6441v1 4.53 4.55 4.57 T:norx6444v2 5.16 5.18 5.20 T:norx3241v3 5.16 5.19 5.21 T:norx3241v2 5.37 5.40 5.44 T:norx6444v1 5.47 5.52 5.56 T:norx6461v3 5.51 5.55 5.59 T:norx6461v2 6.06 6.07 6.08 T:aesjambuv1 6.23 6.25 6.27 T:norx3241v1 6.52 6.54 6.57 T:norx6461v1 7.09 7.15 7.17 T:ketjemajorv2 7.61 7.64 7.66 T:acorn128v2 7.76 7.78 7.80 T:acorn128v3 7.76 7.79 7.83 T:norx3261v2 7.79 7.80 7.81 T:riverkeyakv2 7.84 7.90 7.93 T:norx3261v3 8.62 8.65 8.68 ascon128av12 8.77 8.79 8.82 T:ascon96v1 8.78 8.80 8.83 T:ascon128av11 9.92 9.95 9.97 T:norx3261v1 10.09 10.11 10.13 T:ketjeminorv2 12.46 12.49 12.50 T:ascon128v1 12.46 12.49 12.52 T:ascon128v11 12.80 12.85 12.91 ascon128v12 15.24 15.35 15.52 T:aes128otrsv1 15.46 15.49 15.51 T:aes128otrsv2 15.60 15.66 15.73 T:aes128otrpv1 15.68 15.70 15.72 T:aes128otrpv2 19.67 19.69 19.72 T:twine80n6t4clocv3 19.76 19.81 19.84 T:aes256otrsv1 19.79 19.82 19.86 T:aes256otrsv2 20.40 20.48 20.53 T:aes256otrpv1 20.43 20.63 20.72 T:aes256otrpv2 20.92 20.95 20.97 T:twine80n6t4clocv2 21.33 21.35 21.38 T:aes128n8clocv1 21.76 21.79 21.82 T:aes128n12clocv1 27.49 27.56 28.58 T:proest256otrv1 35.76 36.02 36.17 T:ketjesrv1 36.69 36.72 36.76 T:aeadaes128ocbtaglen64v1 36.69 36.72 36.75 T:aeadaes128ocbtaglen96v1 37.07 37.23 37.28 T:ketjesrv2 43.75 43.81 43.92 T:aeadaes192ocbtaglen64v1 43.78 43.84 43.93 T:aeadaes192ocbtaglen96v1 50.80 50.83 50.91 T:aeadaes256ocbtaglen96v1 50.80 50.84 50.86 T:aeadaes256ocbtaglen64v1 60.56 60.92 61.32 T:proest128otrv1 61.02 61.07 61.12 T:colm127v1 62.48 62.87 63.74 T:ketjejrv1 97.47 97.71 97.85 T:present80n6t4silcv3 97.27 97.80 101.19 T:ketjejrv2 109.46 109.94 110.18 T:deoxysneq128128v13 119.07 127.03 127.35 T:aezv1 137.21 137.36 138.26 T:deoxyseq128128v13 172.49 173.04 173.57 T:led80n6t4silcv3 186.10 186.46 186.64 T:deoxysneq256128v13 248.47 252.32 252.98 T:deoxyseq256128v13 558.23 563.88 571.63 T:acorn128 3905.14 3924.33 3943.06 T:led80n6silcv1 3926.75 3935.02 3948.53 T:led80n6t4silcv2 4037.08 4043.64 4048.45 T:present80n6t4silcv2 4043.72 4046.17 4057.51 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.17? 0.18? 0.19? T:tiaoxinv2 0.17? 0.18? 0.19? T:tiaoxinv1 0.22 0.23 0.24 aegis128l 0.27 0.28 0.30 T:aezv4 0.29 0.30 0.31 T:aezv3 0.29 0.30 0.32 T:aezv5 0.43 0.44 0.45 aegis256 0.51 0.52 0.52 T:aegis128 0.62 0.63 0.64 aes256gcmv1 0.63 0.64 0.65 T:aes128gcmv1 0.63 0.64 0.66 T:aeadaes128ocbtaglen128v1 -0.06? 0.68? 1.42? T:aeadaes192ocbtaglen128v1 0.75 0.76 0.77 T:aes128otrcv3 0.81 0.82 0.83 T:aes128otrpv3 0.96 0.98 0.99 T:aes256otrcv3 0.97 0.98 0.99 T:aeadaes256ocbtaglen128v1 1.00 1.01 1.02 T:aes256otrpv3 1.02 1.03 1.05 T:colm0v1 1.13 1.14 1.15 T:deoxysi128v141 1.14 1.15 1.17 T:deoxysii128v141 1.22 1.23 1.24 T:morus1280256v2 1.22 1.24 1.26 T:deoxysneq128128v1 1.22 1.24 1.25 T:morus1280128v1 1.22 1.24 1.25 T:morus1280128v2 1.23 1.25 1.26 T:morus1280256v1 1.23 1.25 1.26 T:deoxyseq128128v1 1.27 1.28 1.30 T:deoxysi256v141 1.28 1.29 1.31 T:deoxysii256v141 1.36 1.38 1.40 T:deoxysneq256128v1 1.41 1.43 1.44 T:deoxyseq256128v1 1.52 1.54 1.57 T:morus640128v1 1.54 1.57 1.60 T:morus640128v2 2.51 2.57 2.62 T:lunarkeyakv2 2.55 2.62 2.68 T:oceankeyakv2 2.84 2.84 2.85 T:aes128otrsv3 2.83 2.84 2.85 T:aes128n8t8silcv2 2.83 2.84 2.85 T:aes128n12t8silcv2 2.84 2.84 2.85 T:aes128n12t8silcv3 2.83 2.84 2.85 T:aes128n12t8clocv3 2.83 2.84 2.85 T:aes128n8t8clocv2 2.84 2.84 2.85 T:aes128n12t8clocv2 3.10 3.15 3.18 T:seakeyakv2 3.58 3.62 3.68 T:norx6441v2 3.64 3.67 3.70 T:lakekeyakv2 3.64 3.69 3.74 T:norx6441v3 3.78 3.80 3.83 T:lakekeyakv1 3.87 3.88 3.88 T:aes256otrsv3 4.30 4.33 4.35 T:norx6444v2 4.36 4.44 4.53 T:norx6441v1 4.48 4.52 4.57 T:norx6444v3 5.16 5.20 5.23 T:norx3241v3 5.18 5.22 5.26 T:norx3241v2 5.35 5.37 5.40 T:norx6444v1 5.35 5.43 5.51 T:norx6461v3 5.38 5.44 5.49 T:norx6461v2 5.76 5.77 5.78 T:aesjambuv1 5.97 6.02 6.11 T:ketjemajorv2 6.19 6.23 6.26 T:norx3241v1 6.45 6.50 6.56 T:norx6461v1 7.05 7.07 7.08 T:riverkeyakv2 7.45 7.50 7.53 T:acorn128v3 7.70 7.74 7.77 T:norx3261v2 7.90 7.93 7.98 T:norx3261v3 8.05 8.08 8.11 T:acorn128v2 8.43 8.46 8.48 ascon128av12 8.65 8.68 8.71 T:ascon128av11 8.68 8.70 8.73 T:ascon96v1 8.77 9.06 9.23 T:ketjeminorv2 9.99 10.02 10.05 T:norx3261v1 12.53 12.58 12.61 T:ascon128v1 12.55 12.58 12.61 T:ascon128v11 12.73 12.78 12.82 ascon128v12 14.01 14.04 14.06 T:aes128n12clocv1 13.91 14.10 14.28 T:aes128otrsv1 14.51 14.54 14.58 T:aes128otrsv2 14.86 14.90 14.93 T:aes128n8clocv1 14.94 14.96 14.99 T:aes128otrpv2 14.94 14.97 14.99 T:aes128otrpv1 17.85 17.88 17.91 T:aes256otrsv1 18.22 18.39 18.44 T:aes256otrsv2 19.44 19.47 19.49 T:twine80n6t4clocv3 19.69 19.72 19.75 T:aes256otrpv1 19.69 19.72 19.74 T:aes256otrpv2 20.60 20.63 20.65 T:twine80n6t4clocv2 27.94 28.07 28.11 T:proest256otrv1 30.56 30.60 30.63 T:aeadaes128ocbtaglen96v1 30.57 30.62 30.66 T:aeadaes128ocbtaglen64v1 32.34 32.41 32.48 T:colm127v1 34.02 34.06 34.11 T:ketjesrv1 35.51 35.87 35.93 T:ketjesrv2 36.34 36.39 36.46 T:aeadaes192ocbtaglen96v1 36.35 36.40 36.45 T:aeadaes192ocbtaglen64v1 42.12 42.19 42.23 T:aeadaes256ocbtaglen96v1 42.15 42.19 42.24 T:aeadaes256ocbtaglen64v1 55.64 55.85 57.52 T:ketjejrv1 56.72 56.79 56.87 T:aezv1 62.09 62.37 63.24 T:proest128otrv1 90.51 90.69 90.79 T:deoxyseq128128v13 90.69 91.07 91.78 T:deoxysneq128128v13 94.81 95.40 100.91 T:ketjejrv2 96.47 97.01 97.05 T:present80n6t4silcv3 166.25 166.65 167.81 T:deoxyseq256128v13 165.66 166.91 167.81 T:deoxysneq256128v13 171.77 172.28 172.38 T:led80n6t4silcv3 549.43 563.13 571.26 T:acorn128 2601.77 2614.97 2628.62 T:led80n6silcv1 2607.28 2619.44 2628.78 T:led80n6t4silcv2 2695.82 2698.50 2702.18 T:present80n6silcv1 2699.49 2702.32 2703.74 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.17? 0.18? 0.21? T:tiaoxinv1 0.17? 0.18? 0.20? T:tiaoxinv2 0.22? 0.23? 0.25? aegis128l 0.27 0.28 0.29 T:aezv4 0.28 0.29 0.31 T:aezv3 0.29 0.30 0.32 T:aezv5 0.43 0.43 0.44 T:aegis128 0.43 0.44 0.46 aegis256 0.62 0.64 0.68 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.67 aes256gcmv1 0.64 0.66 0.67 T:aes128gcmv1 0.02? 0.69? 1.37? T:aeadaes192ocbtaglen128v1 0.76 0.76 0.77 T:aes128otrcv3 0.81 0.82 0.82 T:aes128otrpv3 0.96 0.96 0.96 T:aes256otrcv3 0.97 0.98 0.99 T:aeadaes256ocbtaglen128v1 1.00 1.01 1.02 T:aes256otrpv3 1.00 1.03 1.04 T:colm0v1 1.13 1.15 1.16 T:deoxysi128v141 1.15 1.16 1.17 T:deoxysii128v141 1.19 1.20 1.22 T:morus1280128v1 1.19 1.20 1.22 T:morus1280256v2 1.19 1.21 1.22 T:morus1280128v2 1.19 1.21 1.23 T:morus1280256v1 1.21 1.23 1.25 T:deoxysneq128128v1 1.23 1.24 1.26 T:deoxyseq128128v1 1.28 1.29 1.31 T:deoxysii256v141 1.28 1.30 1.31 T:deoxysi256v141 1.35 1.37 1.39 T:deoxysneq256128v1 1.42 1.43 1.46 T:deoxyseq256128v1 1.53 1.55 1.57 T:morus640128v1 1.53 1.55 1.58 T:morus640128v2 2.55 2.60 2.66 T:lunarkeyakv2 2.52 2.60 2.65 T:oceankeyakv2 2.83 2.84 2.85 T:aes128n12t8clocv3 2.83 2.84 2.85 T:aes128n8t8clocv2 2.83 2.84 2.87 T:aes128n12t8clocv2 2.84 2.84 2.85 T:aes128otrsv3 2.84 2.84 2.87 T:aes128n8t8silcv2 2.83 2.84 2.85 T:aes128n12t8silcv3 2.83 2.84 2.85 T:aes128n12t8silcv2 3.09 3.14 3.19 T:seakeyakv2 3.61 3.66 3.71 T:norx6441v2 3.62 3.67 3.71 T:norx6441v3 3.63 3.67 3.69 T:lakekeyakv2 3.78 3.79 3.81 T:lakekeyakv1 3.87 3.87 3.88 T:aes256otrsv3 4.28 4.31 4.34 T:norx6444v2 4.42 4.48 4.54 T:norx6441v1 4.48 4.52 4.56 T:norx6444v3 5.20 5.23 5.25 T:norx3241v3 5.20 5.23 5.25 T:norx3241v2 5.33 5.38 5.41 T:norx6444v1 5.45 5.52 5.58 T:norx6461v3 5.47 5.52 5.58 T:norx6461v2 5.76 5.77 5.78 T:aesjambuv1 5.96 6.04 6.11 T:ketjemajorv2 6.22 6.25 6.28 T:norx3241v1 6.50 6.55 6.59 T:norx6461v1 7.05 7.07 7.10 T:riverkeyakv2 7.46 7.49 7.51 T:acorn128v3 7.64 7.69 7.93 T:acorn128v2 7.73 7.77 7.82 T:norx3261v2 7.90 7.95 8.00 T:norx3261v3 8.46 8.53 8.65 ascon128av12 8.68 8.71 8.74 T:ascon96v1 8.71 8.73 8.76 T:ascon128av11 8.77 9.09 9.15 T:ketjeminorv2 9.98 10.00 10.03 T:norx3261v1 12.48 12.51 12.54 T:ascon128v11 12.49 12.51 12.55 T:ascon128v1 12.76 12.80 12.86 ascon128v12 14.00 14.04 14.07 T:aes128n12clocv1 14.18 14.26 14.31 T:aes128otrsv1 14.51 14.55 14.59 T:aes128otrsv2 14.87 14.89 14.93 T:aes128n8clocv1 14.92 14.97 15.00 T:aes128otrpv1 14.93 14.97 15.01 T:aes128otrpv2 17.83 17.88 17.92 T:aes256otrsv1 18.09 18.34 18.50 T:aes256otrsv2 19.44 19.47 19.50 T:twine80n6t4clocv3 19.69 19.72 19.75 T:aes256otrpv2 19.70 19.73 19.76 T:aes256otrpv1 20.60 20.64 20.67 T:twine80n6t4clocv2 27.94 28.08 28.12 T:proest256otrv1 30.56 30.61 30.64 T:aeadaes128ocbtaglen64v1 30.62 30.65 30.68 T:aeadaes128ocbtaglen96v1 32.33 32.43 32.48 T:colm127v1 33.99 34.04 34.09 T:ketjesrv1 35.45 35.71 35.91 T:ketjesrv2 36.35 36.39 36.44 T:aeadaes192ocbtaglen64v1 36.35 36.41 36.46 T:aeadaes192ocbtaglen96v1 42.16 42.20 42.26 T:aeadaes256ocbtaglen64v1 42.20 42.24 42.28 T:aeadaes256ocbtaglen96v1 55.70 55.85 57.67 T:ketjejrv1 56.71 56.81 56.88 T:aezv1 61.78 62.48 62.92 T:proest128otrv1 90.56 90.62 90.90 T:deoxyseq128128v13 91.12 91.27 91.51 T:deoxysneq128128v13 94.80 95.37 100.84 T:ketjejrv2 96.81 97.01 97.06 T:present80n6t4silcv3 166.20 166.37 167.65 T:deoxyseq256128v13 165.42 166.84 167.71 T:deoxysneq256128v13 171.08 171.52 172.21 T:led80n6t4silcv3 551.44 562.52 564.79 T:acorn128 2602.65 2613.95 2626.23 T:led80n6silcv1 2609.00 2622.57 2631.12 T:led80n6t4silcv2 2695.96 2698.81 2702.44 T:present80n6silcv1 2699.28 2701.84 2703.44 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.17? 0.18? 0.19? T:tiaoxinv2 0.17? 0.18? 0.19? T:tiaoxinv1 0.22 0.23 0.24 aegis128l 0.27 0.28 0.30 T:aezv4 0.29 0.30 0.31 T:aezv3 0.29 0.30 0.32 T:aezv5 0.43 0.43 0.44 T:aegis128 0.43 0.44 0.45 aegis256 0.63 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.65 0.66 0.67 aes256gcmv1 0.65 0.66 0.67 T:aes128gcmv1 0.03? 0.68? 1.36? T:aeadaes192ocbtaglen128v1 0.76 0.76 0.77 T:aes128otrcv3 0.81 0.81 0.82 T:aes128otrpv3 0.96 0.96 0.97 T:aes256otrcv3 0.97 0.98 0.99 T:aeadaes256ocbtaglen128v1 1.00 1.01 1.02 T:aes256otrpv3 1.02 1.03 1.04 T:colm0v1 1.14 1.15 1.16 T:deoxysii128v141 1.13 1.15 1.18 T:deoxysi128v141 1.19 1.21 1.22 T:morus1280128v1 1.19 1.21 1.22 T:morus1280256v2 1.19 1.21 1.22 T:morus1280128v2 1.19 1.21 1.22 T:morus1280256v1 1.22 1.24 1.26 T:deoxysneq128128v1 1.23 1.24 1.25 T:deoxyseq128128v1 1.28 1.29 1.30 T:deoxysii256v141 1.27 1.30 1.32 T:deoxysi256v141 1.37 1.39 1.40 T:deoxysneq256128v1 1.41 1.42 1.44 T:deoxyseq256128v1 1.53 1.55 1.57 T:morus640128v2 1.52 1.55 1.57 T:morus640128v1 2.55 2.60 2.64 T:oceankeyakv2 2.55 2.61 2.65 T:lunarkeyakv2 2.81 2.84 2.85 T:aes128n12t8clocv3 2.84 2.84 2.85 T:aes128n8t8silcv2 2.83 2.84 2.85 T:aes128n12t8clocv2 2.84 2.84 2.85 T:aes128n12t8silcv3 2.84 2.84 2.85 T:aes128otrsv3 2.83 2.84 2.85 T:aes128n8t8clocv2 2.84 2.84 2.88 T:aes128n12t8silcv2 3.13 3.17 3.20 T:seakeyakv2 3.62 3.65 3.70 T:norx6441v3 3.61 3.66 3.74 T:norx6441v2 3.64 3.67 3.69 T:lakekeyakv2 3.78 3.79 3.81 T:lakekeyakv1 3.87 3.88 3.88 T:aes256otrsv3 4.27 4.30 4.35 T:norx6444v2 4.38 4.42 4.49 T:norx6441v1 4.46 4.49 4.53 T:norx6444v3 5.18 5.21 5.24 T:norx3241v2 5.22 5.24 5.26 T:norx3241v3 5.33 5.38 5.42 T:norx6444v1 5.48 5.53 5.57 T:norx6461v2 5.46? 5.55? 7.55? T:norx6461v3 5.76 5.77 5.78 T:aesjambuv1 5.98 6.06 6.12 T:ketjemajorv2 6.22 6.24 6.27 T:norx3241v1 6.49 6.52 6.58 T:norx6461v1 7.05 7.08 7.09 T:riverkeyakv2 7.46 7.48 7.50 T:acorn128v3 7.65 7.69 7.94 T:acorn128v2 7.71 7.75 7.80 T:norx3261v2 7.91 7.96 8.01 T:norx3261v3 8.47 8.52 8.66 ascon128av12 8.67 8.71 8.74 T:ascon96v1 8.71 8.74 8.77 T:ascon128av11 8.78 9.09 9.14 T:ketjeminorv2 9.98 10.01 10.03 T:norx3261v1 12.49 12.52 12.55 T:ascon128v1 12.49 12.53 12.56 T:ascon128v11 12.77 12.80 12.87 ascon128v12 14.01 14.04 14.07 T:aes128n12clocv1 14.00 14.26 14.30 T:aes128otrsv1 14.50 14.55 14.59 T:aes128otrsv2 14.84 14.89 14.93 T:aes128n8clocv1 14.93 14.96 14.99 T:aes128otrpv1 14.92 14.97 15.01 T:aes128otrpv2 17.82 17.88 17.92 T:aes256otrsv1 18.07 18.32 18.52 T:aes256otrsv2 19.44 19.48 19.52 T:twine80n6t4clocv3 19.67 19.72 19.76 T:aes256otrpv2 19.68 19.73 19.76 T:aes256otrpv1 20.57 20.62 20.66 T:twine80n6t4clocv2 27.96 28.08 28.12 T:proest256otrv1 30.56 30.59 30.65 T:aeadaes128ocbtaglen96v1 30.57 30.61 30.66 T:aeadaes128ocbtaglen64v1 32.31 32.41 32.47 T:colm127v1 33.77 34.03 34.09 T:ketjesrv1 35.47 35.69 35.90 T:ketjesrv2 36.35 36.40 36.46 T:aeadaes192ocbtaglen96v1 36.35 36.41 36.46 T:aeadaes192ocbtaglen64v1 42.15 42.18 42.22 T:aeadaes256ocbtaglen64v1 42.19 42.23 42.27 T:aeadaes256ocbtaglen96v1 55.67 55.85 57.69 T:ketjejrv1 56.73 56.79 56.87 T:aezv1 61.81 62.49 62.95 T:proest128otrv1 90.46 90.65 90.75 T:deoxyseq128128v13 90.95 91.14 91.30 T:deoxysneq128128v13 94.82 95.36 100.52 T:ketjejrv2 96.39 96.90 97.07 T:present80n6t4silcv3 166.25 166.47 167.73 T:deoxyseq256128v13 165.43 166.85 167.66 T:deoxysneq256128v13 171.62 172.28 172.41 T:led80n6t4silcv3 555.16 562.54 566.15 T:acorn128 2604.91 2619.46 2630.59 T:led80n6silcv1 2611.37 2622.01 2630.81 T:led80n6t4silcv2 2696.06 2698.80 2701.81 T:present80n6silcv1 2699.26 2701.82 2703.24 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.31 0.32 0.32 T:tiaoxinv2 0.31 0.32 0.34 T:tiaoxinv1 0.33 0.34 0.36 aegis128l 0.50 0.50 0.51 T:aezv4 0.52 0.53 0.53 T:aezv3 0.54 0.54 0.55 T:aezv5 0.56 0.56 0.57 aegis256 0.56 0.57 0.57 T:aegis128 0.73 0.73 0.74 T:aeadaes128ocbtaglen128v1 0.86? 0.87? 1.70? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.87 T:aes128otrpv3 0.90 0.91 0.91 T:aes128otrcv3 0.98 0.98 0.99 T:aeadaes256ocbtaglen128v1 1.09 1.10 1.10 T:aes256otrpv3 1.10 1.10 1.11 T:aes128gcmv1 1.16 1.17 1.17 T:aes256otrcv3 1.20 1.20 1.21 aes256gcmv1 1.31 1.32 1.33 T:deoxysi128v141 1.34 1.35 1.37 T:deoxysneq128128v1 1.48 1.50 1.51 T:deoxysi256v141 1.52 1.53 1.54 T:deoxysneq256128v1 1.58 1.59 1.62 T:morus1280256v1 1.60 1.60 1.61 T:morus1280128v1 1.61 1.62 1.63 T:morus1280128v2 1.61 1.62 1.64 T:morus1280256v2 1.78 1.79 1.81 T:morus640128v1 1.79 1.80 1.81 T:morus640128v2 1.86 1.86 1.87 T:aes128otrsv3 1.86 1.87 1.88 T:colm0v1 1.92 1.93 1.95 T:deoxysii128v141 2.03 2.04 2.05 T:deoxyseq128128v1 2.22 2.23 2.24 T:deoxysii256v141 2.32 2.33 2.35 T:deoxyseq256128v1 2.50 2.51 2.51 T:aes256otrsv3 2.91 2.92 2.92 T:aes128n12t8clocv2 2.91 2.92 2.92 T:aes128n12t8clocv3 2.92 2.92 2.93 T:aes128n8t8clocv2 2.93 2.93 2.94 T:aes128n12t8silcv2 2.93 2.93 2.94 T:aes128n8t8silcv2 2.93 2.94 2.94 T:aes128n12t8silcv3 4.19 4.21 4.25 T:norx6441v2 4.23 4.26 4.31 T:norx6441v3 4.47 4.48 4.50 T:lakekeyakv2 4.63 4.64 4.66 T:seakeyakv2 4.82 4.84 4.86 T:lakekeyakv1 4.95 4.98 5.03 T:norx6441v1 5.36 5.39 5.41 T:norx6444v3 5.62 5.64 5.66 T:norx3241v3 5.65 5.66 5.68 T:norx3241v2 5.92 5.92 5.93 T:aesjambuv1 6.16 6.18 6.22 T:oceankeyakv2 6.28 6.31 6.34 T:norx6461v2 6.36 6.40 6.43 T:norx6461v3 6.45 6.46 6.48 T:norx6444v2 6.62 6.64 6.66 T:norx3241v1 7.40 7.44 7.48 T:norx6461v1 7.58 7.60 7.65 T:norx6444v1 7.97 7.98 8.00 T:riverkeyakv2 8.45 8.47 8.50 T:norx3261v2 8.49 8.52 8.55 T:norx3261v3 8.78 8.81 8.89 ascon128av12 8.92 8.94 8.96 T:acorn128v3 8.99 9.00 9.03 T:ascon128av11 8.99 9.01 9.02 T:ascon96v1 9.08 9.10 9.11 T:acorn128v2 9.25 9.28 9.31 T:ketjemajorv2 10.57 10.58 10.60 T:norx3261v1 10.59 10.60 10.63 T:lunarkeyakv2 11.74 11.77 11.83 T:ketjeminorv2 12.70 12.72 12.74 T:ascon128v11 12.70 12.73 12.75 T:ascon128v1 13.01 13.04 13.07 ascon128v12 15.78 15.79 15.82 T:aes128otrsv2 15.75 15.86 15.95 T:aes128otrsv1 15.97 16.01 16.03 T:aes128otrpv1 16.02 16.04 16.06 T:aes128otrpv2 19.98 19.99 19.99 T:twine80n6t4clocv3 20.16 20.18 20.20 T:aes256otrsv1 20.40 20.46 20.51 T:aes256otrsv2 20.91 20.93 20.95 T:aes256otrpv1 20.92 20.94 20.96 T:aes256otrpv2 21.32 21.33 21.34 T:twine80n6t4clocv2 21.41 21.43 21.45 T:aes128n12clocv1 21.83 21.84 21.86 T:aes128n8clocv1 30.02 30.05 30.86 T:proest256otrv1 31.75 31.78 31.80 T:aeadaes128ocbtaglen64v1 31.76 31.78 31.80 T:aeadaes128ocbtaglen96v1 36.01 36.20 36.41 T:ketjesrv1 37.57 37.65 37.69 T:aeadaes192ocbtaglen96v1 37.64 37.67 37.69 T:aeadaes192ocbtaglen64v1 37.67 37.86 37.91 T:ketjesrv2 43.60 43.62 43.65 T:aeadaes256ocbtaglen96v1 43.60 43.63 43.65 T:aeadaes256ocbtaglen64v1 51.14 51.17 51.21 T:colm127v1 63.20 63.26 63.54 T:ketjejrv1 64.82 64.86 64.93 T:proest128otrv1 92.10 92.48 92.70 T:deoxysneq128128v13 98.00 98.34 101.29 T:ketjejrv2 98.58 98.77 98.79 T:present80n6t4silcv3 123.26 123.38 123.47 T:aezv1 139.47 139.57 139.84 T:deoxyseq128128v13 167.80 168.09 168.57 T:deoxysneq256128v13 173.60 174.08 174.68 T:led80n6t4silcv3 253.66 255.12 255.29 T:deoxyseq256128v13 627.08 646.11 647.91 T:acorn128 3931.09 3937.54 3952.37 T:led80n6silcv1 3939.86 3948.36 3954.91 T:led80n6t4silcv2 4069.68 4072.02 4079.49 T:present80n6silcv1 4071.35 4074.53 4079.81 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.35 0.36 0.36 aegis128l 0.39 0.39 0.40 T:tiaoxinv1 0.39 0.39 0.40 T:tiaoxinv2 0.50 0.50 0.51 T:aezv4 0.52 0.53 0.53 T:aezv3 0.53 0.53 0.54 T:aegis128 0.54 0.55 0.55 T:aezv5 0.57 0.57 0.60 aegis256 0.75 0.76 0.77 T:aeadaes128ocbtaglen128v1 0.89 0.89 0.89 T:aes128otrpv3 0.89? 0.89? 1.31? T:aeadaes192ocbtaglen128v1 0.94 0.94 0.94 T:aes128otrcv3 1.05 1.05 1.06 T:aeadaes256ocbtaglen128v1 1.11 1.12 1.13 T:aes128gcmv1 1.11 1.12 1.13 T:aes256otrpv3 1.20 1.20 1.21 T:aes256otrcv3 1.27 1.27 1.28 aes256gcmv1 1.42 1.43 1.45 T:deoxysi128v141 1.49 1.50 1.51 T:deoxysneq128128v1 1.59 1.60 1.61 T:morus1280128v1 1.60 1.61 1.61 T:morus1280256v1 1.60 1.61 1.62 T:morus1280256v2 1.61 1.62 1.64 T:deoxysi256v141 1.62 1.62 1.63 T:morus1280128v2 1.66 1.67 1.68 T:deoxysneq256128v1 1.78 1.79 1.80 T:morus640128v1 1.80 1.81 1.82 T:morus640128v2 1.89 1.89 1.90 T:aes128otrsv3 1.95 1.96 1.96 T:colm0v1 1.95 1.96 1.97 T:deoxysii128v141 2.15 2.16 2.17 T:deoxyseq128128v1 2.27 2.28 2.29 T:deoxysii256v141 2.40 2.41 2.41 T:deoxyseq256128v1 2.53 2.54 2.54 T:aes256otrsv3 2.88 2.88 2.89 T:aes128n12t8clocv2 2.88 2.88 2.91 T:aes128n12t8clocv3 2.88 2.88 2.90 T:aes128n8t8clocv2 2.90 2.90 2.91 T:aes128n12t8silcv3 2.90 2.90 2.93 T:aes128n8t8silcv2 2.90 2.90 2.93 T:aes128n12t8silcv2 4.25 4.27 4.31 T:norx6441v2 4.24 4.28 4.31 T:norx6441v3 4.46 4.46 4.48 T:lakekeyakv2 4.69 4.70 4.72 T:seakeyakv2 4.86 4.88 4.90 T:lakekeyakv1 4.93 4.95 4.98 T:norx6441v1 5.34 5.36 5.37 T:norx6444v3 5.58 5.60 5.62 T:norx3241v3 5.59 5.60 5.63 T:norx3241v2 6.09 6.11 6.13 T:aesjambuv1 6.22 6.24 6.27 T:oceankeyakv2 6.38 6.40 6.44 T:norx6461v3 6.41 6.44 6.48 T:norx6461v2 6.45 6.46 6.48 T:norx6444v2 6.58 6.60 6.62 T:norx3241v1 7.39 7.42 7.46 T:norx6461v1 7.59 7.62 7.67 T:norx6444v1 8.14 8.15 8.17 T:riverkeyakv2 8.40 8.42 8.45 T:norx3261v2 8.47 8.51 8.54 T:norx3261v3 8.83 8.86 8.89 ascon128av12 8.88 8.90 8.91 T:acorn128v2 8.99 9.00 9.02 T:ascon96v1 9.00 9.01 9.05 T:ascon128av11 9.07 9.09 9.12 T:acorn128v3 9.17 9.19 9.23 T:ketjemajorv2 10.49 10.51 10.52 T:norx3261v1 10.63 10.64 10.68 T:lunarkeyakv2 11.40 11.43 11.47 T:ketjeminorv2 12.65 12.67 12.68 T:ascon128v11 12.66 12.67 12.69 T:ascon128v1 13.03 13.05 13.10 ascon128v12 15.90 15.93 15.98 T:aes128otrsv1 15.90 16.04 16.12 T:aes128otrsv2 16.08 16.11 16.14 T:aes128otrpv1 16.14 16.28 16.36 T:aes128otrpv2 19.93 19.94 19.97 T:twine80n6t4clocv3 20.14 20.32 20.36 T:aes256otrsv2 20.31 20.34 20.36 T:aes256otrsv1 20.97 20.99 21.06 T:aes256otrpv1 21.09 21.24 21.27 T:aes256otrpv2 21.29 21.30 21.31 T:twine80n6t4clocv2 21.57 21.59 21.62 T:aes128n8clocv1 22.05 22.07 22.09 T:aes128n12clocv1 30.06 30.10 30.90 T:proest256otrv1 36.67 36.94 37.08 T:ketjesrv1 37.67 37.69 37.73 T:aeadaes128ocbtaglen96v1 37.68 37.69 37.72 T:aeadaes128ocbtaglen64v1 38.24 38.42 38.57 T:ketjesrv2 44.88 44.93 45.06 T:aeadaes192ocbtaglen96v1 44.88 44.94 45.04 T:aeadaes192ocbtaglen64v1 52.14 52.18 52.22 T:aeadaes256ocbtaglen64v1 52.15 52.18 52.21 T:aeadaes256ocbtaglen96v1 62.68 62.70 62.74 T:colm127v1 63.22 63.28 63.58 T:ketjejrv1 63.59 64.01 64.49 T:proest128otrv1 98.63 98.80 98.82 T:present80n6t4silcv3 99.17 99.33 102.59 T:ketjejrv2 109.66 109.95 110.13 T:deoxysneq128128v13 124.00 124.08 124.19 T:aezv1 139.30 139.42 139.76 T:deoxyseq128128v13 173.89 174.27 174.72 T:led80n6t4silcv3 187.04 187.26 187.56 T:deoxysneq256128v13 253.89 255.41 255.58 T:deoxyseq256128v13 630.21 634.57 640.58 T:acorn128 3927.83 3936.52 3948.08 T:led80n6silcv1 3937.14 3948.92 3957.78 T:led80n6t4silcv2 4068.30 4073.42 4075.09 T:present80n6t4silcv2 4067.11 4073.94 4080.37 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.30 0.30 0.31 T:aezv4 0.31 0.32 0.32 T:aezv3 0.32 0.33 0.34 T:aezv5 0.35 0.36 0.36 aegis128l 0.39 0.39 0.40 T:tiaoxinv2 0.39 0.39 0.40 T:tiaoxinv1 0.53 0.53 0.54 T:aegis128 0.60 0.61 0.65 aegis256 0.75 0.76 0.76 T:aeadaes128ocbtaglen128v1 0.89 0.89 0.89 T:aes128otrpv3 0.89? 0.90? 1.72? T:aeadaes192ocbtaglen128v1 0.94 0.94 0.95 T:aes128otrcv3 1.05 1.05 1.06 T:aeadaes256ocbtaglen128v1 1.11 1.12 1.12 T:aes128gcmv1 1.11 1.12 1.13 T:aes256otrpv3 1.19 1.20 1.21 T:aes256otrcv3 1.27 1.27 1.28 aes256gcmv1 1.41 1.43 1.44 T:deoxysi128v141 1.49 1.49 1.50 T:deoxysneq128128v1 1.59 1.60 1.61 T:morus1280128v1 1.60 1.61 1.61 T:morus1280256v1 1.61 1.62 1.62 T:morus1280256v2 1.61 1.62 1.62 T:morus1280128v2 1.62 1.63 1.64 T:deoxysi256v141 1.65 1.66 1.67 T:deoxysneq256128v1 1.77 1.79 1.80 T:morus640128v1 1.79 1.80 1.82 T:morus640128v2 1.88 1.89 1.89 T:aes128otrsv3 1.95 1.96 1.96 T:deoxysii128v141 1.95 1.96 1.97 T:colm0v1 2.15 2.16 2.17 T:deoxyseq128128v1 2.27 2.28 2.28 T:deoxysii256v141 2.39 2.41 2.42 T:deoxyseq256128v1 2.54 2.54 2.54 T:aes256otrsv3 2.87 2.87 2.90 T:aes128n12t8clocv3 2.87 2.87 2.91 T:aes128n8t8clocv2 2.87 2.87 2.91 T:aes128n12t8clocv2 2.89 2.89 2.93 T:aes128n8t8silcv2 2.89 2.89 2.93 T:aes128n12t8silcv2 2.89 2.89 2.94 T:aes128n12t8silcv3 4.24 4.26 4.29 T:norx6441v3 4.25 4.28 4.30 T:norx6441v2 4.47 4.49 4.50 T:lakekeyakv2 4.71 4.72 4.73 T:seakeyakv2 4.87 4.89 4.91 T:lakekeyakv1 4.91 4.94 4.97 T:norx6441v1 5.33 5.35 5.38 T:norx6444v3 5.59 5.61 5.62 T:norx3241v3 5.59 5.61 5.62 T:norx3241v2 6.14 6.15 6.16 T:aesjambuv1 6.24 6.25 6.28 T:oceankeyakv2 6.36 6.39 6.43 T:norx6461v3 6.41 6.44 6.46 T:norx6461v2 6.49 6.50 6.52 T:norx6444v2 6.57 6.59 6.62 T:norx3241v1 7.40 7.42 7.45 T:norx6461v1 7.63 7.65 7.69 T:norx6444v1 8.16 8.17 8.18 T:riverkeyakv2 8.39 8.43 8.45 T:norx3261v2 8.47 8.50 8.53 T:norx3261v3 8.82 8.85 8.88 ascon128av12 8.88 8.89 8.90 T:acorn128v2 8.98 9.00 9.01 T:ascon96v1 8.99 9.01 9.03 T:ascon128av11 9.06 9.08 9.11 T:acorn128v3 9.21 9.23 9.24 T:ketjemajorv2 10.49 10.51 10.52 T:norx3261v1 10.65 10.68 10.71 T:lunarkeyakv2 11.45 11.56 11.65 T:ketjeminorv2 12.66 12.67 12.69 T:ascon128v1 12.66 12.67 12.69 T:ascon128v11 13.02 13.06 13.14 ascon128v12 15.77 15.81 15.92 T:aes128otrsv1 16.11 16.13 16.19 T:aes128otrpv1 15.98 16.14 16.16 T:aes128otrsv2 16.22 16.36 16.39 T:aes128otrpv2 19.93 19.94 19.97 T:twine80n6t4clocv3 20.20 20.28 20.33 T:aes256otrsv2 20.33 20.35 20.37 T:aes256otrsv1 21.01 21.07 21.11 T:aes256otrpv1 21.04 21.20 21.29 T:aes256otrpv2 21.28 21.29 21.32 T:twine80n6t4clocv2 21.57 21.59 21.61 T:aes128n8clocv1 22.05 22.06 22.08 T:aes128n12clocv1 30.06 30.10 30.95 T:proest256otrv1 36.69 36.97 37.10 T:ketjesrv1 37.67 37.70 37.73 T:aeadaes128ocbtaglen64v1 37.69 37.71 37.73 T:aeadaes128ocbtaglen96v1 38.31 38.49 38.64 T:ketjesrv2 44.88 44.92 45.05 T:aeadaes192ocbtaglen96v1 44.88 44.94 45.06 T:aeadaes192ocbtaglen64v1 52.14 52.16 52.19 T:aeadaes256ocbtaglen64v1 52.14 52.17 52.21 T:aeadaes256ocbtaglen96v1 62.64 62.66 62.69 T:colm127v1 63.21 63.27 63.59 T:ketjejrv1 63.62 63.99 64.47 T:proest128otrv1 98.51 98.63 98.82 T:present80n6t4silcv3 99.12 99.24 102.40 T:ketjejrv2 109.69 109.91 110.16 T:deoxysneq128128v13 123.92 123.99 124.05 T:aezv1 139.32 139.46 139.78 T:deoxyseq128128v13 174.12 174.37 174.72 T:led80n6t4silcv3 187.08 187.32 187.79 T:deoxysneq256128v13 253.63 255.18 255.43 T:deoxyseq256128v13 630.36 633.98 640.91 T:acorn128 3933.12 3951.38 3967.52 T:led80n6silcv1 3938.82 3951.62 3960.69 T:led80n6t4silcv2 4068.34 4073.17 4074.98 T:present80n6t4silcv2 4070.05 4074.39 4078.96 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.40 1.42 1.49 T:aegis128 1.51? 1.56? 1.72? aegis128l 1.88 1.91 2.03 aegis256 1.91? 1.94? 2.13? T:tiaoxinv1 1.91? 1.94? 2.17? T:tiaoxinv2 1.95 1.98 2.09 T:aezv5 1.95 1.99 2.05 T:aezv4 2.17 2.18 2.30 T:aezv3 2.27 2.36 2.49 T:aeadaes128ocbtaglen128v1 2.82 2.86 2.91 T:aes128otrpv3 2.98 3.04 3.21 T:aeadaes256ocbtaglen128v1 3.25 3.27 3.31 T:aes128otrsv3 3.55 3.60 3.66 T:aes128n12t8clocv2 3.60 3.63 3.67 T:aes128n8t8clocv2 3.57 3.65 3.71 T:aes128n12t8clocv3 3.63 3.66 3.71 T:aes256otrpv3 3.81 3.87 3.94 T:colm0v1 3.93 3.94 3.97 T:aes128n12t8silcv2 3.93 3.95 3.98 T:aes128n12t8silcv3 3.93 3.96 4.00 T:aes128n8t8silcv2 3.93 3.96 4.00 T:aes128otrcv3 4.28 4.30 4.32 T:aes256otrsv3 4.36? 4.40? 16.08? T:aeadaes192ocbtaglen128v1 4.56 4.61 4.84 T:deoxysneq128128v1 4.82 4.87 4.99 T:deoxysi128v141 4.98 5.00 5.04 T:aes256otrcv3 5.44 5.49 5.59 T:deoxysneq256128v1 5.79 5.86 5.94 T:deoxysi256v141 5.98 6.10 6.26 T:morus640128v1 6.12 6.21 6.30 T:aes128gcmv1 6.31 6.46 6.61 T:morus640128v2 6.67 6.72 6.78 aes256gcmv1 6.68 6.73 6.79 T:deoxysii128v141 6.98 7.03 7.11 T:deoxyseq128128v1 7.70 7.74 7.77 T:aesjambuv1 7.89 7.95 8.00 T:deoxyseq256128v1 8.31 8.32 8.47 T:morus1280128v1 8.51 8.56 8.66 T:deoxysii256v141 8.35 8.59 8.85 T:morus1280256v1 8.66 8.78 8.93 T:morus1280128v2 8.75 8.84 8.93 T:morus1280256v2 13.35 13.45 13.72 T:ascon128av11 13.37 13.45 13.72 ascon128av12 13.51 13.72 14.07 T:ascon96v1 13.65 13.76 13.92 T:norx3241v1 13.77 13.85 14.05 T:norx3241v2 13.68 13.91 14.21 T:norx6441v1 13.77 13.91 14.11 T:norx3241v3 13.78 13.95 14.23 T:norx6441v3 13.88 14.07 14.31 T:norx6441v2 16.59 16.65 17.14 T:lakekeyakv1 16.65 16.73 16.98 T:ascon128v11 16.66 16.75 16.85 T:ascon128v1 17.13 17.26 17.66 ascon128v12 18.47 18.52 18.69 T:riverkeyakv2 19.47 19.51 19.79 T:lakekeyakv2 20.43 20.66 20.95 T:norx6461v2 20.44 20.72 20.99 T:norx6461v3 20.68 20.82 21.05 T:norx3261v2 20.74 21.00 21.23 T:norx3261v3 21.65 21.91 22.33 T:norx6461v1 21.86 21.93 22.01 T:norx3261v1 25.26 25.34 25.53 T:aes128otrsv2 25.20 25.42 25.62 T:aes128otrsv1 25.51 25.68 25.82 T:twine80n6t4clocv3 25.81 25.90 26.14 T:aes128otrpv1 25.98 26.09 26.29 T:aes128otrpv2 26.70 26.79 26.94 T:aes128n8clocv1 26.81 26.95 27.23 T:aes128n12clocv1 28.98 29.02 29.09 T:twine80n6t4clocv2 32.25 32.43 32.69 T:aes256otrsv2 32.21 32.44 32.63 T:norx6444v3 33.18 33.28 33.69 T:aes256otrsv1 33.52 33.62 33.77 T:aes256otrpv1 33.77 33.90 34.07 T:aes256otrpv2 37.44 37.69 38.28 T:acorn128v2 38.36 38.62 38.83 T:acorn128v3 41.41 41.55 41.80 T:ketjeminorv2 42.50 42.71 43.16 T:seakeyakv2 46.22 46.42 46.84 T:norx6444v2 49.31 49.48 49.79 T:aeadaes128ocbtaglen64v1 49.41 49.50 49.72 T:aeadaes128ocbtaglen96v1 54.62 54.92 55.10 T:norx6444v1 56.32 56.41 56.53 T:ketjemajorv2 57.72 57.91 58.14 T:aeadaes192ocbtaglen96v1 57.76 57.94 58.40 T:aeadaes192ocbtaglen64v1 57.86 58.07 58.40 T:ketjesrv1 67.38 67.56 67.84 T:aeadaes256ocbtaglen96v1 67.48 67.62 67.97 T:aeadaes256ocbtaglen64v1 67.39 67.67 67.96 T:ketjesrv2 67.57 67.85 68.60 T:oceankeyakv2 74.75 75.04 75.31 T:colm127v1 82.65 82.97 83.35 T:ketjejrv1 87.58 87.87 88.11 T:proest256otrv1 104.42 104.89 105.09 T:deoxysneq128128v13 120.93 121.18 121.41 T:present80n6t4silcv3 124.04 124.62 124.95 T:proest128otrv1 133.00 133.87 140.82 T:ketjejrv2 136.00 136.44 136.91 T:aezv1 171.22 171.67 172.35 T:lunarkeyakv2 171.52 171.91 172.38 T:deoxyseq128128v13 187.99 189.33 190.09 T:deoxysneq256128v13 205.71 206.08 206.61 T:led80n6t4silcv3 313.99 314.39 316.66 T:deoxyseq256128v13 2206.70 2266.53 2273.46 T:acorn128 4399.16 4405.47 4434.83 T:led80n6silcv1 4399.40 4406.26 4430.10 T:led80n6t4silcv2 4544.69 4549.24 4570.56 T:present80n6t4silcv2 4546.10 4552.77 4557.51 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.42 1.45 1.56 T:aegis128 1.57 1.62 1.72 aegis128l 1.97 2.00 2.16 T:tiaoxinv1 1.97 2.01 2.04 T:aezv5 1.98 2.01 2.11 T:aezv4 1.99 2.02 2.13 aegis256 1.97? 2.04? 2.33? T:tiaoxinv2 2.17 2.19 2.35 T:aezv3 2.45 2.54 2.68 T:aeadaes128ocbtaglen128v1 2.93 2.97 3.00 T:aes128otrpv3 3.25 3.31 3.36 T:aeadaes256ocbtaglen128v1 3.38 3.39 3.41 T:aes128otrsv3 3.60 3.63 3.67 T:aes256otrpv3 3.71 3.73 3.76 T:aes128n12t8clocv2 3.72 3.75 3.78 T:aes128n8t8clocv2 3.72 3.76 3.84 T:aes128n12t8clocv3 4.11 4.13 4.14 T:aes128otrcv3 4.21 4.22 4.24 T:aes128n12t8silcv3 4.21 4.22 4.27 T:aes128n12t8silcv2 4.24 4.27 4.32 T:aes128n8t8silcv2 4.45 4.50 4.57 T:colm0v1 4.70 4.72 4.72 T:aes256otrsv3 4.84? 4.95? 16.36? T:aeadaes192ocbtaglen128v1 5.29 5.31 5.32 T:aes256otrcv3 6.05 6.10 6.17 T:aes128gcmv1 6.04 6.16 6.33 T:morus640128v1 6.51 6.59 6.77 T:morus640128v2 6.67 6.75 7.02 aes256gcmv1 7.00 7.05 7.12 T:deoxysneq128128v1 6.96 7.05 7.14 T:deoxysneq256128v1 6.99 7.09 7.15 T:deoxysi128v141 7.58 7.64 7.70 T:deoxysii128v141 7.93 7.96 8.00 T:aesjambuv1 8.11 8.25 8.35 T:deoxysi256v141 8.42 8.47 8.62 T:morus1280128v1 8.47 8.56 8.72 T:morus1280256v1 8.84 8.92 9.09 T:morus1280128v2 8.84 8.95 9.07 T:morus1280256v2 9.32 9.37 9.44 T:deoxyseq256128v1 9.70 9.76 9.82 T:deoxyseq128128v1 10.12 10.23 10.31 T:deoxysii256v141 13.41 13.49 13.73 ascon128av12 13.49 13.60 13.94 T:ascon96v1 13.53 13.65 13.78 T:ascon128av11 13.76 13.88 14.04 T:norx6441v1 13.85 13.98 14.06 T:norx3241v1 13.91 14.04 14.22 T:norx3241v2 13.99 14.06 14.21 T:norx3241v3 14.21 14.43 14.67 T:norx6441v2 14.33 14.54 14.75 T:norx6441v3 16.64 16.71 16.94 T:lakekeyakv1 16.71 16.82 17.01 T:ascon128v1 16.75 16.84 17.04 T:ascon128v11 17.19 17.32 17.56 ascon128v12 18.70 18.73 18.76 T:riverkeyakv2 19.26 19.32 19.48 T:lakekeyakv2 20.88 21.02 21.27 T:norx3261v3 20.91 21.06 21.24 T:norx3261v2 21.04 21.23 21.52 T:norx6461v2 21.01 21.34 21.49 T:norx6461v1 21.15 21.44 21.91 T:norx6461v3 22.09 22.19 22.26 T:norx3261v1 25.30 25.47 25.68 T:aes128otrsv1 25.65 25.81 25.99 T:twine80n6t4clocv3 25.72 25.87 26.27 T:aes128otrsv2 26.29 26.36 26.53 T:aes128otrpv1 26.43 26.55 26.65 T:aes128otrpv2 26.65 26.72 26.85 T:aes128n8clocv1 27.62 27.72 28.22 T:aes128n12clocv1 29.10 29.16 29.22 T:twine80n6t4clocv2 32.17 32.36 32.59 T:norx6444v3 32.34 32.46 32.92 T:aes256otrsv2 33.36 33.46 34.20 T:aes256otrsv1 34.02 34.11 34.25 T:aes256otrpv1 34.09 34.19 34.27 T:aes256otrpv2 37.55 37.87 38.43 T:acorn128v2 38.87 39.07 39.25 T:acorn128v3 40.58 40.74 40.84 T:ketjeminorv2 42.62 42.81 43.18 T:seakeyakv2 46.43 46.57 46.77 T:norx6444v2 54.77 55.07 55.36 T:norx6444v1 56.38 56.49 56.99 T:ketjemajorv2 58.39 58.61 59.04 T:ketjesrv1 59.90 60.08 60.32 T:aeadaes128ocbtaglen96v1 59.88 60.09 60.29 T:aeadaes128ocbtaglen64v1 67.37 67.70 68.27 T:oceankeyakv2 68.06 68.27 68.66 T:ketjesrv2 70.33 70.47 70.71 T:aeadaes192ocbtaglen96v1 70.36 70.54 70.78 T:aeadaes192ocbtaglen64v1 82.58 82.82 83.15 T:aeadaes256ocbtaglen64v1 82.69 83.00 83.32 T:ketjejrv1 82.78 83.06 83.45 T:aeadaes256ocbtaglen96v1 86.55 86.75 87.05 T:colm127v1 88.65 88.83 89.05 T:proest256otrv1 121.23 121.41 122.13 T:present80n6t4silcv3 121.48 122.01 122.37 T:deoxysneq128128v13 123.96 125.06 126.47 T:proest128otrv1 133.94 134.65 140.94 T:ketjejrv2 148.69 149.09 149.66 T:aezv1 171.10 171.51 172.16 T:lunarkeyakv2 171.49 172.33 172.77 T:deoxyseq128128v13 205.99 206.40 206.91 T:led80n6t4silcv3 207.24 208.44 209.16 T:deoxysneq256128v13 313.86 314.45 316.44 T:deoxyseq256128v13 2224.41 2235.91 2260.11 T:acorn128 4398.47 4404.09 4429.46 T:led80n6t4silcv2 4396.58 4414.60 4435.03 T:led80n6silcv1 4541.25 4549.25 4569.00 T:present80n6t4silcv2 4546.02 4553.03 4566.12 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.44 1.46 1.49 T:aegis128 1.54 1.56 1.59 T:aezv4 1.55? 1.56? 1.82? T:aezv5 1.56 1.60 1.68 aegis128l 1.66? 1.68? 1.94? T:aezv3 1.90? 1.96? 2.12? T:tiaoxinv1 1.94 1.97 2.13 T:tiaoxinv2 2.05? 2.09? 2.49? aegis256 2.45 2.54 2.62 T:aeadaes128ocbtaglen128v1 2.96 2.98 3.00 T:aes128otrpv3 3.28 3.34 3.39 T:aeadaes256ocbtaglen128v1 3.37 3.39 3.41 T:aes128otrsv3 3.46 3.53 3.57 T:aes128n12t8clocv2 3.51 3.55 3.82 T:aes128n12t8clocv3 3.52 3.56 3.66 T:aes128n8t8clocv2 3.61 3.62 3.65 T:aes256otrpv3 3.96 3.97 4.00 T:aes128n8t8silcv2 3.93? 3.99? 4.67? T:aes128n12t8silcv3 3.95 3.99 4.28 T:aes128n12t8silcv2 4.12 4.13 4.14 T:aes128otrcv3 4.51? 4.56? 5.08? T:colm0v1 4.69 4.71 4.72 T:aes256otrsv3 4.88? 4.97? 15.31? T:aeadaes192ocbtaglen128v1 5.30 5.32 5.33 T:aes256otrcv3 6.05 6.11 6.16 T:aes128gcmv1 6.05 6.14 6.22 T:morus640128v1 6.53 6.62 6.69 T:morus640128v2 6.68 6.72 6.79 aes256gcmv1 6.75 6.83 6.90 T:deoxysneq256128v1 6.76 6.86 6.99 T:deoxysneq128128v1 6.98 7.09 7.20 T:deoxysi128v141 7.57 7.62 7.67 T:deoxysii128v141 7.93 7.96 7.99 T:aesjambuv1 8.10 8.16 8.26 T:deoxysi256v141 8.47 8.53 8.59 T:morus1280128v1 8.44 8.53 8.62 T:morus1280256v1 8.84 8.91 9.03 T:morus1280128v2 8.81 8.94 9.10 T:morus1280256v2 9.35 9.42 9.50 T:deoxyseq256128v1 9.69 9.75 9.81 T:deoxyseq128128v1 10.12 10.21 10.26 T:deoxysii256v141 13.38 13.49 13.84 ascon128av12 13.44 13.54 13.88 T:ascon96v1 13.49 13.58 13.70 T:ascon128av11 13.76 13.91 14.03 T:norx6441v1 13.87 13.96 14.07 T:norx3241v1 13.93 14.06 14.19 T:norx3241v3 13.96 14.10 14.23 T:norx3241v2 14.25 14.46 14.67 T:norx6441v2 14.30 14.50 14.68 T:norx6441v3 16.74 16.81 17.07 T:lakekeyakv1 16.71 16.81 17.09 T:ascon128v11 16.68 16.82 17.12 T:ascon128v1 17.20 17.31 17.49 ascon128v12 18.75 18.79 18.85 T:riverkeyakv2 19.32 19.40 19.58 T:lakekeyakv2 20.84 20.97 21.18 T:norx3261v2 20.92 21.08 21.26 T:norx3261v3 20.95 21.22 21.45 T:norx6461v1 21.11 21.34 21.68 T:norx6461v3 21.19 21.39 21.58 T:norx6461v2 22.17 22.22 22.28 T:norx3261v1 25.30 25.52 25.68 T:aes128otrsv1 25.49 25.66 25.85 T:twine80n6t4clocv3 25.79 25.90 26.30 T:aes128otrsv2 26.36 26.45 26.66 T:aes128otrpv1 26.54 26.64 26.79 T:aes128otrpv2 26.60 26.72 26.90 T:aes128n8clocv1 27.48 27.59 27.96 T:aes128n12clocv1 29.01 29.06 29.16 T:twine80n6t4clocv2 32.22 32.41 32.61 T:norx6444v3 32.35 32.52 32.82 T:aes256otrsv2 33.40 33.54 33.95 T:aes256otrsv1 34.12 34.24 34.55 T:aes256otrpv1 34.34 34.47 34.73 T:aes256otrpv2 37.50 37.60 38.22 T:acorn128v2 38.77 38.93 39.08 T:acorn128v3 40.68 40.80 41.06 T:ketjeminorv2 42.45 42.60 42.78 T:seakeyakv2 46.44 46.63 46.91 T:norx6444v2 54.85 55.11 55.42 T:norx6444v1 56.38 56.47 57.07 T:ketjemajorv2 58.49 58.75 59.23 T:ketjesrv1 59.95 60.07 60.21 T:aeadaes128ocbtaglen96v1 59.95 60.10 60.25 T:aeadaes128ocbtaglen64v1 67.72 67.99 68.40 T:oceankeyakv2 68.00 68.23 68.54 T:ketjesrv2 70.30 70.44 70.56 T:aeadaes192ocbtaglen64v1 70.24 70.50 70.69 T:aeadaes192ocbtaglen96v1 82.54 82.81 83.16 T:aeadaes256ocbtaglen64v1 82.71 82.96 83.23 T:aeadaes256ocbtaglen96v1 82.83 83.09 83.42 T:ketjejrv1 86.25 86.44 86.73 T:colm127v1 86.43 86.56 86.73 T:proest256otrv1 121.10 121.26 121.60 T:present80n6t4silcv3 121.54 122.10 122.67 T:deoxysneq128128v13 123.11 123.36 124.15 T:proest128otrv1 134.10 134.63 141.42 T:ketjejrv2 148.61 149.04 149.32 T:aezv1 171.16 171.48 171.81 T:lunarkeyakv2 171.45 172.01 172.35 T:deoxyseq128128v13 205.93 206.57 207.14 T:led80n6t4silcv3 207.16 208.43 209.19 T:deoxysneq256128v13 313.96 314.51 316.63 T:deoxyseq256128v13 2222.93 2235.10 2256.98 T:acorn128 4397.66 4404.39 4427.68 T:led80n6t4silcv2 4397.45 4428.11 4438.87 T:led80n6silcv1 4541.79 4549.08 4569.20 T:present80n6t4silcv2 4544.75 4551.84 4556.21 T:present80n6silcv1