VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20240107

[Page version: 20240726 23:46:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.95 3.00 3.04 T:morus640128v2 2.98 3.00 3.02 T:morus640128v1 3.20 3.26 3.28 T:morus1280128v2 3.26 3.29 3.31 T:morus1280128v1 3.26 3.29 3.30 T:morus1280256v1 3.36 3.41 3.43 T:morus1280256v2 6.83 6.84 6.84 T:norx3241v2 6.82 6.84 6.85 T:norx3241v3 6.61 6.87 7.14 T:lunarkeyakv2 7.54 7.57 7.58 T:norx6441v3 7.55 7.57 7.59 T:norx6441v2 7.62 7.63 7.64 T:norx6444v2 7.63 7.66 7.68 T:norx6444v3 7.87 7.90 7.94 T:norx3241v1 8.06 8.14 8.30 T:seakeyakv2 8.25 8.26 8.28 T:norx6441v1 8.33? 8.40? 19.47? T:norx6444v1 9.05 9.13 9.48 T:oceankeyakv2 9.78 9.79 9.85 T:norx3261v3 9.76 9.80 9.82 T:norx3261v2 11.07 11.09 11.10 T:norx6461v2 11.04 11.09 11.10 T:norx6461v3 10.98 11.10 11.24 T:lakekeyakv1 11.35 11.45 11.51 T:norx3261v1 11.70 11.75 11.76 T:norx6461v1 11.85 11.94 12.36 T:lakekeyakv2 13.23 13.26 13.26 T:ascon96v1 12.27? 13.36? 26.58? T:ascon128av11 12.98? 14.06? 27.86? ascon128av12 12.42? 14.21? 14.39? T:tiaoxinv1 14.18 14.23 14.35 T:tiaoxinv2 17.73 17.75 17.78 T:acorn128v3 17.98 18.02 18.33 T:acorn128v2 18.27 18.36 18.37 T:aegis128l 20.61 20.62 20.63 T:ascon128v11 20.61 20.62 20.69 T:ascon128v1 20.98 21.00 21.01 ascon128v12 22.39 22.47 22.57 T:aegis128 26.92 27.00 27.04 T:aegis256 27.13 27.16 27.39 T:riverkeyakv2 28.56 28.56 28.64 T:ketjeminorv2 29.21 29.34 29.43 T:ketjemajorv2 29.37 29.57 29.74 T:deoxysi128v141 33.00 33.18 33.45 T:deoxysi256v141 40.70? 43.96? 45.39? T:oceankeyakv1 45.02 45.27 45.65 T:seakeyakv1 46.14 46.20 46.30 T:aes128otrcv3 50.75 50.77 50.86 T:aes128otrsv1 50.76 50.83 50.86 T:aes128otrpv1 50.83 50.88 50.89 T:aes128otrsv2 50.49 51.56 53.06 T:aes128otrsv3 54.00 54.02 54.07 T:aes128otrpv2 55.54 55.61 55.74 T:aes128otrpv3 57.87 58.24 58.85 T:deoxysii128v141 59.72 59.85 59.98 T:proest256otrv1 60.76 61.27 61.84 T:aes256otrcv3 65.02 65.05 65.06 T:aes256otrsv3 65.32 65.40 66.48 T:aes256otrpv2 65.36 65.41 65.50 T:aes256otrsv1 65.34 65.41 65.53 T:aes256otrpv1 64.79 65.51 65.62 T:aes256otrsv2 65.96 66.40 67.90 T:aes256otrpv3 66.07 66.52 66.94 T:deoxysii256v141 71.62 71.65 71.68 T:aesjambuv1 73.14 73.20 73.37 T:aes128n12clocv1 73.17 73.25 73.37 T:aes128n12t8clocv3 73.18 73.25 73.39 T:aes128n8t8clocv2 73.19 73.25 73.41 T:aes128n12t8clocv2 73.20 73.29 74.06 T:aes128n8clocv1 78.85 78.89 79.13 T:twine80n6t4clocv3 83.69 83.79 83.89 T:twine80n6t4clocv2 86.93 87.02 87.09 T:aes128n12silcv1 86.95 87.06 88.39 T:aes128n8silcv1 87.03 87.08 87.19 T:aes128n12t8silcv2 87.06 87.11 87.21 T:aes128n12t8silcv3 87.06 87.14 87.57 T:aes128n8t8silcv2 87.01 88.34 89.47 T:aes256gcmv1 108.10 108.64 112.67 T:ketjesrv1 113.72 117.56 117.97 T:riverkeyakv1 121.17 125.23 125.62 T:ketjesrv2 153.28 154.64 156.60 T:aezv4 163.50 163.52 163.71 T:present80n6t4silcv3 169.75 169.81 169.98 T:proest128otrv1 180.50 180.53 180.74 T:ketjejrv1 188.11 188.48 189.05 T:aezv5 303.12 303.17 303.51 T:deoxysneq128128v13 303.13 303.29 304.21 T:deoxysneq128128v1 308.36 309.67 316.65 T:ketjejrv2 442.08 442.20 443.18 T:deoxysneq256128v13 442.22 442.49 443.47 T:deoxysneq256128v1 458.60 459.21 461.19 T:aezv3 522.29 523.53 525.10 T:aezv1 602.17 612.12 613.37 T:deoxyseq128128v1 612.75 613.54 614.76 T:deoxyseq128128v13 620.23 621.19 621.66 T:twine80n6clocv1 734.54 735.84 736.79 T:led80n6t4silcv3 881.47 882.29 884.59 T:deoxyseq256128v1 889.31 890.03 890.69 T:deoxyseq256128v13 1483.78 1486.20 1493.44 T:aes128gcmv1 1482.37 1602.30 1634.90 T:acorn128 12080.17 12083.30 12095.05 T:led80n6t4silcv2 12079.76 12087.65 12099.53 T:led80n6silcv1 15887.80 15899.65 15911.39 T:present80n6silcv1 15885.78 15900.58 15915.38 T:present80n6t4silcv2 44567.69 44632.36 44804.31 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 2.90 2.94 2.96 T:morus640128v1 2.91 2.94 2.96 T:morus640128v2 3.09 3.16 3.20 T:morus1280128v2 3.11 3.16 3.20 T:morus1280128v1 3.29 3.35 3.38 T:morus1280256v2 3.30 3.35 3.39 T:morus1280256v1 6.39? 6.84? 7.26? T:norx3241v3 6.83 6.84 6.84 T:norx3241v2 6.70 6.95 7.33 T:lunarkeyakv2 7.68 7.68 7.69 T:norx6441v2 7.68 7.68 7.69 T:norx6441v3 7.75 7.76 7.77 T:norx6444v2 7.75 7.77 7.78 T:norx6444v3 8.00 8.08 8.09 T:norx3241v1 7.93? 8.22? 11.38? T:seakeyakv2 8.34 8.38 8.43 T:norx6441v1 8.38? 8.48? 18.98? T:norx6444v1 9.32 9.52 9.78 T:oceankeyakv2 9.78 9.79 9.82 T:norx3261v2 9.78 9.80 9.81 T:norx3261v3 10.90 10.97 11.15 T:lakekeyakv1 11.19 11.21 11.21 T:norx6461v2 11.18 11.21 11.23 T:norx6461v3 11.35 11.44 11.56 T:lakekeyakv2 11.55 11.62 11.67 T:norx3261v1 11.84 11.87 11.89 T:norx6461v1 13.43 13.44 13.45 T:ascon96v1 12.49? 13.57? 25.07? T:ascon128av11 12.88? 13.94? 27.73? ascon128av12 14.41 14.44 14.56 T:tiaoxinv1 14.40 14.48 14.57 T:tiaoxinv2 15.99 16.00 16.01 T:acorn128v3 17.49 17.50 17.50 T:acorn128v2 18.42 18.43 18.45 T:aegis128l 20.34 20.38 20.40 T:ascon128v11 20.34 20.38 20.41 T:ascon128v1 20.87 20.88 20.94 ascon128v12 22.45 22.53 22.54 T:aegis128 26.60 26.68 26.75 T:ketjemajorv2 26.89 26.93 26.97 T:aegis256 27.12 27.20 27.32 T:riverkeyakv2 30.31 30.34 30.76 T:ketjeminorv2 44.32 45.60 47.05 T:oceankeyakv1 45.46 45.69 45.96 T:seakeyakv1 46.30 46.36 46.45 T:aes128otrcv3 51.51 51.52 51.64 T:aes128otrsv1 51.50 51.58 51.66 T:aes128otrpv1 51.58 51.63 51.66 T:aes128otrsv2 52.54 52.58 52.69 T:aes128otrsv3 53.29 53.55 53.73 T:deoxysi128v141 55.27 55.34 55.45 T:aes128otrpv3 57.65 57.71 57.79 T:aes128otrpv2 58.04 58.35 58.55 T:deoxysii128v141 58.32 58.40 58.51 T:proest256otrv1 60.50 60.71 60.94 T:deoxysi256v141 60.94 61.00 61.11 T:aes256otrcv3 66.06 66.10 66.20 T:aes256otrpv2 66.13 66.14 66.72 T:aes256otrsv1 66.09 66.16 66.28 T:aes256otrpv1 66.04 66.25 66.26 T:aes256otrsv2 66.07 66.34 66.71 T:deoxysii256v141 67.10 67.15 69.66 T:aes256otrsv3 68.08 68.16 68.26 T:aes256otrpv3 71.48 71.51 71.65 T:aesjambuv1 77.74 77.81 77.96 T:aes128n12t8clocv3 77.70 77.82 77.94 T:aes128n12t8clocv2 77.77 77.82 77.94 T:aes128n8t8clocv2 77.82 77.88 78.01 T:aes128n8clocv1 77.81 77.88 78.00 T:aes128n12clocv1 79.11 79.14 79.67 T:twine80n6t4clocv3 86.34 86.38 86.93 T:twine80n6t4clocv2 87.44 87.48 87.56 T:aes128n8t8silcv2 87.45 87.55 90.76 T:aes128n12t8silcv3 87.51 87.57 87.66 T:aes128n8silcv1 87.51 87.70 89.03 T:aes128n12silcv1 87.66 87.72 87.81 T:aes128n12t8silcv2 87.71 89.02 90.21 T:aes256gcmv1 109.35 109.99 113.92 T:ketjesrv1 115.75 116.90 117.86 T:riverkeyakv1 116.56 119.01 119.68 T:ketjesrv2 148.99 149.41 149.63 T:aezv4 163.48 163.50 163.54 T:present80n6t4silcv3 169.14 169.23 169.41 T:proest128otrv1 176.00 176.01 176.19 T:ketjejrv1 183.05 184.08 184.55 T:aezv5 290.41 290.50 291.22 T:ketjejrv2 410.80 411.20 412.78 T:deoxysneq128128v1 411.45 412.17 412.48 T:deoxysneq128128v13 453.29 453.93 455.59 T:aezv3 524.16 525.45 528.12 T:aezv1 612.50 612.76 613.46 T:deoxyseq128128v13 612.59 613.05 615.45 T:deoxysneq256128v1 612.71 613.08 615.48 T:deoxysneq256128v13 622.51 623.16 623.70 T:twine80n6clocv1 735.67 735.93 737.70 T:led80n6t4silcv3 815.33 816.79 818.72 T:deoxyseq128128v1 889.44 890.35 891.64 T:deoxyseq256128v13 1222.08 1224.23 1231.56 T:deoxyseq256128v1 1483.84 1485.11 1490.49 T:aes128gcmv1 1461.27? 1621.12? 1713.52? T:acorn128 12070.91 12081.00 12092.08 T:led80n6t4silcv2 12076.45 12084.87 12091.53 T:led80n6silcv1 15882.05 15895.49 15914.50 T:present80n6silcv1 15888.37 15898.38 15919.33 T:present80n6t4silcv2 44567.73 44605.69 44738.17 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 2.94 2.94 2.95 T:morus640128v1 2.94 2.94 2.95 T:morus640128v2 3.11 3.16 3.18 T:morus1280128v2 3.16 3.16 3.18 T:morus1280128v1 3.34 3.35 3.38 T:morus1280256v2 3.35 3.35 3.36 T:morus1280256v1 6.82? 6.83? 9.15? T:norx3241v3 6.83 6.83 6.84 T:norx3241v2 6.88 7.07 7.26 T:lunarkeyakv2 7.79 7.81 7.83 T:norx6441v3 7.81 7.81 7.83 T:norx6441v2 7.87 7.89 7.90 T:norx6444v2 7.88 7.89 7.91 T:norx6444v3 7.95 8.04 8.12 T:seakeyakv2 8.08 8.08 8.08 T:norx3241v1 8.50 8.51 8.53 T:norx6441v1 8.55? 8.60? 20.45? T:norx6444v1 9.57 9.60 9.76 T:oceankeyakv2 9.37 9.78 9.80 T:norx3261v3 9.78 9.79 9.80 T:norx3261v2 11.09 11.11 11.18 T:lakekeyakv1 11.32 11.33 11.35 T:norx6461v2 11.32 11.34 11.35 T:norx6461v3 11.58 11.59 11.60 T:lakekeyakv2 11.62 11.62 11.62 T:norx3261v1 11.98 11.99 12.00 T:norx6461v1 13.42 13.44 13.45 T:ascon96v1 12.49? 13.71? 26.73? T:ascon128av11 12.78? 13.94? 27.60? ascon128av12 14.43 14.44 14.53 T:tiaoxinv1 14.45 14.47 14.53 T:tiaoxinv2 15.99 16.00 16.01 T:acorn128v3 17.50 17.50 17.50 T:acorn128v2 18.41 18.43 18.45 T:aegis128l 20.37 20.38 20.38 T:ascon128v1 20.37 20.38 20.38 T:ascon128v11 20.88 20.88 20.88 ascon128v12 22.50 22.51 22.55 T:aegis128 26.72 26.80 26.90 T:ketjemajorv2 26.93 26.95 26.98 T:aegis256 27.18 27.22 27.25 T:riverkeyakv2 30.44? 30.52? 49.70? T:ketjeminorv2 44.46 45.61 46.08 T:oceankeyakv1 45.62 45.83 46.45 T:seakeyakv1 46.22 46.36 46.42 T:aes128otrcv3 51.64 51.66 51.76 T:aes128otrsv1 51.63 51.69 51.73 T:aes128otrpv1 51.73 51.76 52.24 T:aes128otrsv2 52.64 52.68 52.78 T:aes128otrsv3 53.61 53.72 53.94 T:deoxysi128v141 55.27 55.46 55.57 T:aes128otrpv3 57.81 57.87 58.71 T:aes128otrpv2 58.20 58.29 58.60 T:deoxysii128v141 58.37 58.40 58.47 T:proest256otrv1 60.75 60.87 62.12 T:deoxysi256v141 60.93 61.00 61.08 T:aes256otrcv3 66.19 66.22 66.32 T:aes256otrpv2 66.26 66.28 66.42 T:aes256otrsv1 66.24 66.30 66.91 T:aes256otrpv1 66.24 66.36 66.42 T:aes256otrsv2 66.53 66.80 68.88 T:deoxysii256v141 67.20 67.25 67.67 T:aes256otrsv3 68.23 68.24 68.33 T:aes256otrpv3 71.50 71.51 71.53 T:aesjambuv1 77.78 77.81 77.94 T:aes128n8t8clocv2 77.80 77.81 77.94 T:aes128n12t8clocv3 77.78 77.84 78.15 T:aes128n12t8clocv2 77.85 77.89 78.02 T:aes128n8clocv1 77.86 77.89 78.52 T:aes128n12clocv1 79.08 79.18 80.20 T:twine80n6t4clocv3 86.30 86.38 86.42 T:twine80n6t4clocv2 87.43 87.46 87.54 T:aes128n12t8silcv3 87.46 87.50 87.70 T:aes128n8t8silcv2 87.51 87.60 87.64 T:aes128n12silcv1 87.57 87.60 87.71 T:aes128n8silcv1 87.70 87.73 88.01 T:aes128n12t8silcv2 87.25 87.99 88.89 T:aes256gcmv1 109.47 109.99 114.04 T:ketjesrv1 112.48 117.01 117.03 T:riverkeyakv1 115.08 119.11 119.52 T:ketjesrv2 148.90 149.30 149.43 T:aezv4 163.49 163.50 163.56 T:present80n6t4silcv3 169.19 169.23 169.41 T:proest128otrv1 176.10 176.13 176.24 T:ketjejrv1 182.89 184.40 185.14 T:aezv5 290.57 290.71 291.48 T:ketjejrv2 409.95 410.28 411.78 T:deoxysneq128128v1 411.85 412.45 413.43 T:deoxysneq128128v13 451.29 453.64 455.42 T:aezv3 523.85 524.67 526.99 T:aezv1 612.69 612.88 613.69 T:deoxyseq128128v13 612.82 612.97 617.34 T:deoxysneq256128v13 612.09 613.01 616.92 T:deoxysneq256128v1 622.56 623.34 623.74 T:twine80n6clocv1 735.59 735.69 736.25 T:led80n6t4silcv3 815.35 817.07 820.18 T:deoxyseq128128v1 889.41 890.40 891.18 T:deoxyseq256128v13 1218.19 1223.32 1229.39 T:deoxyseq256128v1 1426.42 1427.38 1435.64 aes256gcmv1 1427.24 1427.76 1433.52 T:aes128gcmv1 1460.52? 1621.58? 1714.14? T:acorn128 12073.59 12084.39 12098.46 T:led80n6t4silcv2 12076.08 12085.21 12095.77 T:led80n6silcv1 15880.97 15891.75 15899.23 T:present80n6t4silcv2 15883.85 15895.61 15909.71 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.70 2.72 2.75 T:morus640128v2 2.71? 2.77? 4.46? T:morus640128v1 2.86 2.90 2.93 T:morus1280128v2 2.91 2.93 2.96 T:morus1280256v1 2.94 2.97 2.99 T:morus1280256v2 2.94 2.98 3.00 T:morus1280128v1 6.57 6.57 6.58 T:norx3241v3 6.57 6.57 6.58 T:norx3241v2 6.86 6.88 6.99 T:seakeyakv2 7.43 7.44 7.46 T:norx6441v3 7.42 7.45 7.47 T:norx6441v2 5.41? 7.47? 7.58? T:norx6444v3 7.46 7.48 7.51 T:norx6444v2 7.52 7.58 7.76 T:oceankeyakv2 7.66 7.70 7.74 T:norx3241v1 8.12 8.13 8.14 T:norx6441v1 8.17 8.20 8.23 T:norx6444v1 8.83 8.97 9.12 T:lunarkeyakv2 9.53 9.54 9.54 T:norx3261v3 9.53 9.54 9.54 T:norx3261v2 10.59 10.66 10.69 T:lakekeyakv2 10.94 10.97 11.00 T:norx6461v2 10.95 10.97 11.01 T:norx6461v3 11.02 11.06 11.20 T:lakekeyakv1 11.18 11.24 11.33 T:norx3261v1 11.60 11.61 11.63 T:norx6461v1 13.37 13.38 13.41 T:ascon96v1 12.34? 13.43? 27.29? T:ascon128av11 12.66? 13.77? 28.12? ascon128av12 13.77 13.80 13.84 T:tiaoxinv2 13.78 13.80 13.85 T:tiaoxinv1 16.86 16.88 16.93 T:acorn128v3 17.23 17.25 17.30 T:acorn128v2 18.14 18.18 18.23 T:aegis128l 19.19 19.21 19.27 T:riverkeyakv2 19.16 20.55 20.61 T:ascon128v11 19.21 20.55 20.61 T:ascon128v1 20.67 20.70 20.73 ascon128v12 22.09 22.17 22.21 T:aegis128 23.61 23.64 23.67 T:ketjemajorv2 26.56 26.64 26.69 T:aegis256 26.89 26.90 26.93 T:ketjeminorv2 29.27 29.45 29.54 T:deoxysi128v141 33.05 33.28 33.94 T:deoxysi256v141 44.13 44.41 44.70 T:deoxysii128v141 44.60 44.74 44.89 T:seakeyakv1 44.09 44.83 46.73 T:oceankeyakv1 44.93 46.28 46.64 T:aes128otrcv3 46.63 46.67 46.75 T:aes128otrsv3 46.66 46.71 46.79 T:aes128otrsv1 46.67 46.76 46.84 T:aes128otrsv2 50.20 50.47 50.80 T:deoxysii256v141 51.35 51.77 52.03 T:aes256gcmv1 52.41 52.46 52.48 T:aes128otrpv2 52.97 53.07 53.42 T:aes128otrpv1 53.17 53.25 55.13 T:aes128otrpv3 54.59 54.66 54.72 T:aes128n12clocv1 54.62 54.67 55.10 T:aes128n8clocv1 54.66 54.69 54.76 T:aes128n12t8clocv3 54.66 54.70 54.77 T:aes128n8t8clocv2 54.66 54.70 54.98 T:aes128n12t8clocv2 59.04 59.14 59.83 T:proest256otrv1 60.79 60.89 61.32 T:aes256otrsv3 60.81 60.90 61.60 T:aes256otrcv3 60.76 61.00 61.12 T:aes256otrsv1 61.00 61.06 61.15 T:aes256otrsv2 64.89 64.95 64.99 T:aes128n8silcv1 64.97 64.98 65.05 T:aes128n12t8silcv2 64.88 64.98 65.65 T:aes128n12silcv1 64.95 65.01 65.18 T:aes128n8t8silcv2 64.95 65.03 65.46 T:aes128n12t8silcv3 67.30 67.36 67.49 T:aes256otrpv1 67.60 67.72 68.58 T:aes256otrpv3 67.37 67.93 68.37 T:aes256otrpv2 71.31 71.32 71.36 T:aesjambuv1 78.23 78.25 78.31 T:twine80n6t4clocv3 87.29 87.33 87.74 T:twine80n6t4clocv2 96.68 97.05 101.08 T:ketjesrv1 106.47 110.72 111.47 T:riverkeyakv1 108.47 112.13 112.51 T:ketjesrv2 138.54 138.68 139.81 T:aezv4 148.32 149.06 149.87 T:aezv5 158.49 158.51 158.87 T:ketjejrv1 162.86 162.91 163.36 T:present80n6t4silcv3 169.67 170.63 174.55 T:proest128otrv1 285.97 286.94 294.09 T:ketjejrv2 302.68 302.75 303.34 T:deoxysneq128128v13 302.97 303.10 303.44 T:deoxysneq128128v1 344.73 345.31 345.95 T:aezv1 351.42 351.88 356.02 T:aezv3 442.25 442.80 443.43 T:deoxysneq256128v1 442.35 442.81 442.96 T:deoxysneq256128v13 457.00 457.32 457.88 T:deoxyseq128128v13 457.58 458.01 459.01 T:deoxyseq128128v1 463.91 464.49 465.58 T:twine80n6clocv1 661.21 661.58 662.50 T:deoxyseq256128v1 665.82 665.94 666.97 T:deoxyseq256128v13 734.95 735.04 735.37 T:led80n6t4silcv3 1455.61 1456.15 1460.46 T:aes128gcmv1 1464.36 1575.89 1595.80 T:acorn128 9057.39 9063.90 9071.03 T:led80n6t4silcv2 8923.25 9067.65 9083.49 T:led80n6silcv1 11919.75 11928.53 11935.97 T:present80n6silcv1 11920.02 11929.98 11969.17 T:present80n6t4silcv2 22997.39 23029.25 23084.75 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.58 2.63 2.68 T:morus640128v2 2.59 2.63 2.68 T:morus640128v1 2.86 2.91 2.99 T:morus1280128v1 2.87 2.91 2.98 T:morus1280128v2 2.94 3.01 3.09 T:morus1280256v2 2.98 3.01 3.07 T:morus1280256v1 6.56 6.57 6.62 T:norx3241v3 6.53 6.58 6.84 T:norx3241v2 6.72 6.81 6.97 T:seakeyakv2 7.48 7.50 7.56 T:norx6441v3 5.47? 7.51? 7.63? T:norx6444v3 7.49 7.51 7.57 T:norx6441v2 7.52 7.54 7.59 T:norx6444v2 7.52 7.60 7.76 T:oceankeyakv2 7.72 7.78 7.85 T:norx3241v1 8.17 8.19 8.25 T:norx6441v1 8.20 8.23 8.41 T:norx6444v1 8.96 9.37 9.47 T:lunarkeyakv2 9.49 9.53 9.60 T:norx3261v3 9.52 9.53 9.61 T:norx3261v2 10.18 10.29 10.39 T:lakekeyakv2 10.99 11.02 11.09 T:norx6461v3 10.96 11.04 11.38 T:lakekeyakv1 10.99 11.05 11.13 T:norx6461v2 11.23 11.32 11.44 T:norx3261v1 11.64 11.67 11.74 T:norx6461v1 13.37 13.42 13.47 T:ascon96v1 12.44? 13.54? 26.68? T:ascon128av11 12.56? 13.71? 28.23? ascon128av12 13.88 13.95 14.06 T:tiaoxinv2 13.90? 13.96? 15.75? T:tiaoxinv1 15.96 16.00 16.05 T:acorn128v3 17.11 17.12 17.21 T:acorn128v2 18.20 18.23 18.32 T:aegis128l 19.39 19.47 19.59 T:riverkeyakv2 18.78 20.16 20.27 T:ascon128v11 18.86 20.17 20.27 T:ascon128v1 20.55 20.56 20.61 ascon128v12 22.11 22.20 22.25 T:aegis128 22.21 22.33 22.44 T:ketjemajorv2 26.54 26.60 26.66 T:aegis256 27.71 27.78 27.84 T:ketjeminorv2 41.27 41.43 41.75 T:deoxysi128v141 44.40 44.54 46.63 T:deoxysii128v141 44.84 45.00 47.13 T:seakeyakv1 44.24 45.03 47.02 T:oceankeyakv1 46.25 46.34 46.46 T:aes128otrcv3 47.00 47.06 47.35 T:deoxysi256v141 47.07 47.09 47.57 T:aes128otrsv1 47.14 47.22 47.76 T:aes128otrsv2 47.69 47.70 47.81 T:aes128otrsv3 50.22 50.42 50.89 T:deoxysii256v141 45.95? 51.07? 52.64? T:aes256gcmv1 53.03 53.08 53.16 T:aes128otrpv3 53.34 53.43 53.50 T:aes128otrpv1 53.20 54.29 54.35 T:aes128otrpv2 56.92 56.96 57.15 T:aes128n12t8clocv3 56.96 56.97 57.04 T:aes128n8clocv1 56.94 56.97 57.06 T:aes128n12t8clocv2 56.95 56.97 57.08 T:aes128n8t8clocv2 56.97 57.00 57.40 T:aes128n12clocv1 58.32 58.40 58.48 T:proest256otrv1 60.93 61.00 61.06 T:aes256otrcv3 61.38 61.43 61.66 T:aes256otrsv1 61.38 61.44 61.55 T:aes256otrsv2 61.83 61.93 62.06 T:aes256otrsv3 65.12 65.17 65.25 T:aes128n12t8silcv3 65.17 65.21 65.36 T:aes128n8t8silcv2 65.19 65.24 65.29 T:aes128n8silcv1 65.14 65.27 65.78 T:aes128n12silcv1 65.27 65.30 65.52 T:aes128n12t8silcv2 67.65 67.75 68.27 T:aes256otrpv1 67.69 67.80 68.36 T:aes256otrpv2 68.62 68.89 69.62 T:aes256otrpv3 71.24 71.26 71.36 T:aesjambuv1 78.37 78.38 78.71 T:twine80n6t4clocv3 90.39 90.44 90.80 T:twine80n6t4clocv2 97.30 97.68 101.70 T:ketjesrv1 105.54 109.00 109.33 T:ketjesrv2 106.24 110.43 110.92 T:riverkeyakv1 136.19 136.58 140.59 T:aezv4 145.75 147.00 147.71 T:aezv5 156.24 156.29 156.68 T:ketjejrv1 162.86 162.91 163.76 T:present80n6t4silcv3 169.36 170.30 174.40 T:proest128otrv1 277.20 277.46 278.49 T:ketjejrv2 346.01 346.40 348.39 T:aezv1 348.18 349.19 353.59 T:aezv3 355.86 356.66 357.50 T:deoxysneq128128v1 356.07 356.88 357.45 T:deoxysneq128128v13 456.93 457.33 458.31 T:deoxyseq128128v13 465.15 465.48 467.62 T:twine80n6clocv1 527.69 528.45 530.95 T:deoxysneq256128v13 527.68 528.77 532.63 T:deoxysneq256128v1 559.24 559.94 563.10 T:deoxyseq128128v1 665.93 669.62 672.07 T:deoxyseq256128v13 735.03 735.42 736.22 T:led80n6t4silcv3 831.88 832.23 832.72 T:deoxyseq256128v1 1455.08 1455.69 1456.34 T:aes128gcmv1 1472.41? 1614.60? 1691.03? T:acorn128 9055.81 9057.50 9064.53 T:led80n6t4silcv2 8916.53 9064.70 9070.08 T:led80n6silcv1 11913.56 11920.50 11926.68 T:present80n6t4silcv2 11918.16 11927.44 11958.81 T:present80n6silcv1 22976.68 23042.86 23099.66 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 2.63 2.63 2.63 T:morus640128v1 2.63 2.63 2.63 T:morus640128v2 2.91 2.92 2.93 T:morus1280128v1 2.91 2.92 2.96 T:morus1280128v2 3.00 3.01 3.02 T:morus1280256v2 3.00 3.01 3.01 T:morus1280256v1 6.57 6.58 6.58 T:norx3241v3 6.57 6.58 6.61 T:norx3241v2 6.79 6.83 6.93 T:seakeyakv2 7.55 7.56 7.59 T:norx6441v3 7.57 7.57 7.60 T:norx6441v2 5.37? 7.59? 7.66? T:norx6444v3 7.60 7.61 7.64 T:norx6444v2 7.55 7.62 7.76 T:oceankeyakv2 7.78 7.78 7.78 T:norx3241v1 8.25 8.26 8.30 T:norx6441v1 8.27 8.29 8.34 T:norx6444v1 9.05 9.17 9.34 T:lunarkeyakv2 9.52 9.53 9.56 T:norx3261v3 9.53 9.54 9.56 T:norx3261v2 9.28? 10.34? 10.42? T:lakekeyakv2 11.06 11.08 11.13 T:norx6461v2 11.08 11.09 11.12 T:norx6461v3 11.06 11.09 11.21 T:lakekeyakv1 11.32 11.33 11.34 T:norx3261v1 11.72 11.73 11.77 T:norx6461v1 13.40 13.42 13.44 T:ascon96v1 12.48? 13.54? 27.59? T:ascon128av11 12.45? 13.71? 28.30? ascon128av12 13.92 13.94 13.96 T:tiaoxinv1 13.93 13.95 13.99 T:tiaoxinv2 15.99 16.00 16.03 T:acorn128v3 17.12 17.12 17.15 T:acorn128v2 18.22 18.23 18.25 T:aegis128l 19.43 19.47 19.56 T:riverkeyakv2 18.92 20.18 20.21 T:ascon128v1 18.71 20.19 20.21 T:ascon128v11 20.56 20.56 20.57 ascon128v12 22.16 22.19 22.22 T:aegis128 22.31 22.38 22.45 T:ketjemajorv2 26.54 26.58 26.61 T:aegis256 27.83 27.85 27.90 T:ketjeminorv2 41.51 41.81 43.14 T:deoxysi128v141 44.56 44.67 44.95 T:deoxysii128v141 44.90 45.04 45.17 T:seakeyakv1 44.86 45.18 46.97 T:oceankeyakv1 46.30 46.37 46.45 T:aes128otrcv3 47.12 47.14 47.20 T:aes128otrsv1 47.16 47.26 47.82 T:aes128otrsv2 47.17 47.36 48.59 T:deoxysi256v141 47.75 47.76 47.85 T:aes128otrsv3 50.29 50.40 50.63 T:deoxysii256v141 51.17? 51.59? 59.08? T:aes256gcmv1 53.10 53.36 55.55 T:aes128otrpv3 53.43 53.49 53.51 T:aes128otrpv1 53.10 54.35 54.40 T:aes128otrpv2 56.96 56.98 57.03 T:aes128n12t8clocv3 56.95 56.98 57.33 T:aes128n8clocv1 56.94 56.98 57.05 T:aes128n8t8clocv2 56.68 57.01 58.57 T:aes128n12clocv1 56.96 57.16 58.13 T:aes128n12t8clocv2 57.71 58.40 58.90 T:proest256otrv1 60.93 60.98 61.22 T:aes256otrcv3 61.47 61.51 62.21 T:aes256otrsv2 61.47 61.56 63.48 T:aes256otrsv1 61.96 61.99 62.06 T:aes256otrsv3 65.14 65.18 65.36 T:aes128n12t8silcv3 65.18 65.18 65.24 T:aes128n8t8silcv2 65.19 65.24 65.31 T:aes128n12silcv1 65.28 65.30 65.35 T:aes128n12t8silcv2 64.71 65.30 66.06 T:aes128n8silcv1 67.52 67.80 67.88 T:aes256otrpv1 67.78 67.83 67.86 T:aes256otrpv2 68.68 68.98 69.86 T:aes256otrpv3 71.25 71.26 71.33 T:aesjambuv1 78.34 78.42 79.01 T:twine80n6t4clocv3 90.41 90.44 90.48 T:twine80n6t4clocv2 97.36 97.83 101.76 T:ketjesrv1 105.54 109.06 109.44 T:ketjesrv2 108.66 110.50 111.10 T:riverkeyakv1 136.02 136.24 140.03 T:aezv4 145.69 146.79 148.85 T:aezv5 156.32 156.38 156.81 T:ketjejrv1 162.86 162.91 163.29 T:present80n6t4silcv3 169.35 170.70 174.27 T:proest128otrv1 277.29 277.48 277.99 T:ketjejrv2 343.53 346.41 349.43 T:aezv1 348.18 349.12 350.66 T:aezv3 356.17 356.49 359.03 T:deoxysneq128128v13 355.84 356.72 359.56 T:deoxysneq128128v1 457.01 457.32 458.80 T:deoxyseq128128v13 465.25 465.50 467.40 T:twine80n6clocv1 527.63 528.47 530.66 T:deoxysneq256128v1 527.69 528.62 528.89 T:deoxysneq256128v13 554.36 558.63 562.26 T:deoxyseq128128v1 666.02 666.86 671.18 T:deoxyseq256128v13 735.22 736.22 739.73 T:led80n6t4silcv3 831.98 832.37 832.68 T:deoxyseq256128v1 1426.28 1427.12 1430.55 aes256gcmv1 1426.95 1427.37 1431.12 T:aes128gcmv1 1503.79? 1621.32? 1692.09? T:acorn128 9053.57 9059.09 9073.35 T:led80n6t4silcv2 8916.38 9059.79 9068.29 T:led80n6silcv1 11909.81 11922.81 11931.82 T:present80n6silcv1 11919.43 11924.20 11952.43 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 2.40 2.44 2.46 T:morus640128v2 2.42 2.44 2.45 T:morus640128v1 2.48 2.53 2.55 T:morus1280256v2 2.48 2.54 2.55 T:morus1280128v2 2.54 2.57 2.57 T:morus1280256v1 2.62 2.66 2.67 T:morus1280128v1 5.52 5.67 5.84 T:lunarkeyakv2 5.70 5.83 6.00 T:oceankeyakv2 6.29 6.31 6.34 T:norx3241v2 6.28 6.32 6.33 T:norx3241v3 6.36? 6.45? 16.91? T:seakeyakv2 5.49? 7.27? 7.33? T:norx6444v2 5.58? 7.28? 7.34? T:norx6441v3 7.30 7.31 7.32 T:norx6444v3 7.28 7.33 7.33 T:norx6441v2 7.43 7.48 7.50 T:norx3241v1 8.01 8.01 8.02 T:norx6441v1 8.00 8.01 8.02 T:norx6444v1 8.61 8.65 8.71 T:lakekeyakv2 9.24 9.27 9.30 T:norx3261v2 9.24 9.27 9.31 T:norx3261v3 9.74 9.89 9.95 T:lakekeyakv1 10.79 10.83 10.92 T:norx6461v2 10.80 10.83 10.85 T:norx6461v3 10.97 11.02 11.07 T:norx3261v1 11.48 11.48 11.49 T:norx6461v1 13.33 13.37 13.51 T:tiaoxinv1 13.29 13.37 13.40 T:tiaoxinv2 12.16? 13.41? 28.25? T:ascon128av11 12.12? 13.44? 28.52? ascon128av12 13.50 13.51 13.51 T:ascon96v1 13.66? 15.06? 16.17? T:aes256gcmv1 15.96 16.01 16.08 T:acorn128v3 16.50 16.50 16.76 T:acorn128v2 17.10 17.21 17.22 T:riverkeyakv2 17.92 17.97 18.05 T:ketjemajorv2 17.95 18.04 18.07 T:aegis128l 20.37 20.38 20.38 ascon128v12 20.48 20.50 20.51 T:ascon128v11 19.15? 20.51? 38.77? T:ascon128v1 21.63 21.84 21.85 T:aegis128 25.23 25.25 25.27 T:ketjeminorv2 26.14 26.22 26.35 T:aegis256 28.27 28.55 28.65 T:deoxysi128v141 28.25 28.56 28.61 T:deoxysii128v141 31.77 32.04 32.45 T:deoxysi256v141 31.85 32.11 32.23 T:deoxysii256v141 36.03 36.06 36.11 T:aes128n8clocv1 36.04 36.09 36.18 T:aes128n12clocv1 36.08 36.13 36.18 T:aes128n12t8clocv3 36.10 36.13 36.15 T:aes128n8t8clocv2 36.11? 36.15? 45.46? T:aes128n12t8clocv2 42.57 42.61 43.35 T:aes128otrsv1 42.78 42.82 42.89 T:aes128otrsv3 42.87 42.88 42.98 T:aes128n12t8silcv2 42.87 42.89 42.96 T:aes128n8t8silcv2 42.88 42.89 42.95 T:aes128n12t8silcv3 42.86 42.90 43.03 T:aes128n8silcv1 42.87 42.97 44.18 T:aes128n12silcv1 42.78 43.26 43.62 T:aes128otrsv2 43.93 44.15 44.42 T:seakeyakv1 43.93 44.59 46.42 T:oceankeyakv1 46.31 46.35 46.49 T:aes128otrcv3 50.74 50.79 50.86 T:aes128otrpv3 50.72 50.87 52.75 T:aes128otrpv2 55.25 55.29 55.37 T:aes128otrpv1 56.58 56.64 57.03 T:aes256otrsv1 56.68 56.74 56.77 T:aes256otrsv2 56.69 56.94 59.72 T:aes256otrsv3 58.40 58.42 58.48 T:proest256otrv1 60.92 61.01 63.18 T:aes256otrcv3 69.26 69.26 69.38 T:aes256otrpv1 69.29 69.33 69.75 T:aes256otrpv2 70.25 70.37 71.26 T:aes256otrpv3 70.99 71.02 71.06 T:aesjambuv1 77.61 77.64 78.01 T:twine80n6t4clocv3 85.09 85.59 89.66 T:ketjesrv1 90.85 90.88 90.97 T:twine80n6t4clocv2 95.52 99.00 99.41 T:ketjesrv2 94.48 103.83 104.54 T:riverkeyakv1 108.43 108.55 109.04 T:aezv5 122.81 122.88 123.33 T:aezv4 136.50 136.52 136.63 T:ketjejrv1 162.24 162.31 162.95 T:present80n6t4silcv3 167.05 167.26 168.69 T:aezv1 169.51 172.40 179.44 T:proest128otrv1 242.22 242.41 242.82 T:aezv3 263.36 264.76 271.65 T:ketjejrv2 301.14 301.41 302.26 T:deoxyseq128128v13 302.27 302.31 303.13 T:deoxysneq128128v13 302.79 302.89 303.85 T:deoxysneq128128v1 303.04 303.12 303.91 T:deoxyseq128128v1 307.25 307.38 308.23 T:twine80n6clocv1 440.63 440.97 443.77 T:deoxyseq256128v1 441.67 442.16 443.03 T:deoxyseq256128v13 442.31 442.35 443.53 T:deoxysneq256128v1 442.40 442.55 443.68 T:deoxysneq256128v13 733.78 734.35 734.80 T:led80n6t4silcv3 1425.68 1427.33 1433.39 aes256gcmv1 1426.11 1427.57 1427.98 T:aes128gcmv1 1429.52 1550.14 1575.36 T:acorn128 6036.08 6039.18 6043.00 T:led80n6t4silcv2 6031.73 6039.75 6047.02 T:led80n6silcv1 7943.90 7944.83 7955.35 T:present80n6t4silcv2 7943.35 7948.69 7951.33 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 2.28 2.32 2.34 T:morus640128v2 2.28 2.32 2.33 T:morus640128v1 2.59 2.66 2.69 T:morus1280256v2 2.58 2.66 2.71 T:morus1280256v1 2.62 2.66 2.68 T:morus1280128v2 2.63 2.66 2.68 T:morus1280128v1 5.70 5.76 5.94 T:oceankeyakv2 5.51 5.89 5.91 T:lunarkeyakv2 6.30 6.31 6.32 T:norx3241v2 6.30 6.32 6.33 T:norx3241v3 6.38? 6.50? 18.34? T:seakeyakv2 5.60? 7.28? 7.35? T:norx6441v3 5.41? 7.30? 7.33? T:norx6444v2 7.29 7.31 7.33 T:norx6444v3 7.31 7.33 7.34 T:norx6441v2 7.44 7.48 7.49 T:norx3241v1 7.97 8.01 8.03 T:norx6444v1 7.99 8.02 8.06 T:norx6441v1 8.63? 8.64? 10.07? T:lakekeyakv2 9.26 9.27 9.29 T:norx3261v3 9.26 9.27 9.28 T:norx3261v2 9.81? 9.93? 13.94? T:lakekeyakv1 10.81 10.83 10.85 T:norx6461v3 10.82 10.85 10.97 T:norx6461v2 10.97 11.02 11.08 T:norx3261v1 11.48 11.48 11.49 T:norx6461v1 13.35 13.38 13.39 T:ascon96v1 11.85? 13.41? 28.58? ascon128av12 13.40 13.42 13.44 T:tiaoxinv2 13.39 13.43 13.49 T:tiaoxinv1 12.20? 13.50? 28.01? T:ascon128av11 13.81? 15.07? 16.41? T:aes256gcmv1 15.99 16.00 16.01 T:acorn128v3 16.75 16.75 16.75 T:acorn128v2 17.16 17.21 17.26 T:riverkeyakv2 17.94 17.98 18.05 T:ketjemajorv2 17.98 18.05 18.06 T:aegis128l 18.58? 19.99? 39.17? T:ascon128v1 19.97 20.00 20.02 T:ascon128v11 20.22 20.25 20.27 ascon128v12 21.78 21.83 21.85 T:aegis128 25.24 25.25 25.27 T:ketjeminorv2 26.14 26.21 26.30 T:aegis256 28.27 28.49 28.55 T:deoxysi128v141 28.33 28.51 28.69 T:deoxysii128v141 31.91 32.07 32.31 T:deoxysi256v141 31.99 32.12 32.34 T:deoxysii256v141 36.01 36.07 36.10 T:aes128n8clocv1 36.03 36.08 36.10 T:aes128n12clocv1 36.09 36.12 36.16 T:aes128n12t8clocv3 36.12 36.13 36.16 T:aes128n8t8clocv2 36.12? 36.16? 47.63? T:aes128n12t8clocv2 42.57 42.61 42.69 T:aes128otrsv1 42.79 42.82 42.91 T:aes128otrsv3 42.87 42.89 42.96 T:aes128n12t8silcv3 42.88 42.89 42.98 T:aes128n8t8silcv2 42.83 42.89 43.00 T:aes128n8silcv1 42.70 42.89 43.55 T:aes128otrsv2 42.86 42.89 42.96 T:aes128n12t8silcv2 42.81 42.90 43.00 T:aes128n12silcv1 43.98 44.13 44.31 T:seakeyakv1 43.98 44.32 46.42 T:oceankeyakv1 46.34 46.38 46.47 T:aes128otrcv3 50.72 50.75 50.80 T:aes128otrpv3 50.79 50.85 50.90 T:aes128otrpv2 55.24 55.27 55.32 T:aes128otrpv1 56.64 56.67 56.80 T:aes256otrsv1 56.62 56.69 56.75 T:aes256otrsv3 56.69 56.71 56.77 T:aes256otrsv2 58.39 58.42 58.53 T:proest256otrv1 60.94 61.04 61.09 T:aes256otrcv3 69.24 69.26 69.33 T:aes256otrpv1 69.28 69.35 69.40 T:aes256otrpv2 70.17 70.35 73.02 T:aes256otrpv3 70.98 71.01 71.06 T:aesjambuv1 77.62 77.62 77.70 T:twine80n6t4clocv3 85.09 85.78 89.67 T:ketjesrv1 94.47 94.50 94.57 T:twine80n6t4clocv2 94.90 99.00 99.04 T:ketjesrv2 92.54? 103.82? 104.25? T:riverkeyakv1 108.56 109.04 109.49 T:aezv5 122.82 122.88 122.98 T:aezv4 136.49 136.54 136.71 T:ketjejrv1 162.23 162.29 162.49 T:present80n6t4silcv3 167.10 167.27 168.78 T:aezv1 169.40 170.80 179.30 T:proest128otrv1 242.31 242.43 242.64 T:aezv3 263.97 264.02 264.26 T:ketjejrv2 301.15 301.20 302.37 T:deoxyseq128128v13 302.12 302.19 303.10 T:deoxysneq128128v13 302.82 302.96 303.89 T:deoxysneq128128v1 302.99 303.38 307.30 T:deoxyseq128128v1 307.02 310.57 311.84 T:twine80n6clocv1 440.39 440.70 444.70 T:deoxyseq256128v1 441.66 441.73 442.83 T:deoxyseq256128v13 442.22 442.34 444.16 T:deoxysneq256128v13 442.27 442.44 443.29 T:deoxysneq256128v1 734.08 734.48 734.91 T:led80n6t4silcv3 1421.29 1426.41 1428.81 aes256gcmv1 1426.99 1427.30 1428.44 T:aes128gcmv1 1487.89? 1616.28? 1710.11? T:acorn128 6031.45 6039.81 6049.77 T:led80n6silcv1 6037.07 6039.99 6043.76 T:led80n6t4silcv2 7940.39 7945.15 7968.54 T:present80n6t4silcv2 7944.74 7950.93 7964.66 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 2.32 2.32 2.32 T:morus640128v1 2.32 2.32 2.32 T:morus640128v2 2.64 2.66 2.67 T:morus1280256v2 2.66 2.66 2.67 T:morus1280256v1 2.66 2.66 2.67 T:morus1280128v2 2.66 2.66 2.67 T:morus1280128v1 5.57 5.74 5.91 T:lunarkeyakv2 5.72 5.74 5.88 T:oceankeyakv2 6.00 6.31 6.33 T:norx3241v2 6.31 6.32 6.33 T:norx3241v3 6.41? 6.49? 13.68? T:seakeyakv2 5.60? 7.30? 7.33? T:norx6441v3 5.64? 7.31? 7.33? T:norx6444v2 7.30 7.31 7.32 T:norx6444v3 7.31 7.33 7.35 T:norx6441v2 7.48 7.48 7.48 T:norx3241v1 7.98 8.00 8.01 T:norx6444v1 8.00 8.01 8.02 T:norx6441v1 8.64 8.64 8.64 T:lakekeyakv2 9.26 9.27 9.29 T:norx3261v3 9.27 9.28 9.29 T:norx3261v2 9.18? 9.89? 20.48? T:lakekeyakv1 10.83 10.84 10.84 T:norx6461v3 10.82 10.84 10.86 T:norx6461v2 11.02 11.02 11.02 T:norx3261v1 11.47 11.48 11.50 T:norx6461v1 13.36 13.38 13.39 T:ascon96v1 13.42 13.42 13.43 T:tiaoxinv2 13.41 13.43 13.48 T:tiaoxinv1 12.21? 13.44? 28.59? ascon128av12 12.26? 13.50? 28.18? T:ascon128av11 14.32 15.08 15.64 T:aes256gcmv1 15.99 16.00 16.02 T:acorn128v3 16.75 16.75 16.75 T:acorn128v2 17.19 17.20 17.22 T:riverkeyakv2 17.86 17.97 18.07 T:ketjemajorv2 18.00 18.04 18.17 T:aegis128l 19.99 20.00 20.01 T:ascon128v11 18.72? 20.01? 39.47? T:ascon128v1 20.24 20.25 20.26 ascon128v12 21.81 21.82 21.85 T:aegis128 25.22 25.25 25.28 T:ketjeminorv2 26.19 26.22 26.23 T:aegis256 28.38 28.47 28.51 T:deoxysi128v141 28.43 28.51 28.56 T:deoxysii128v141 31.99 32.05 32.21 T:deoxysi256v141 32.03 32.13 32.20 T:deoxysii256v141 36.05 36.07 36.24 T:aes128n8clocv1 36.05 36.08 36.09 T:aes128n12clocv1 36.11 36.13 36.15 T:aes128n8t8clocv2 36.12 36.13 36.94 T:aes128n12t8clocv3 36.12? 36.34? 46.07? T:aes128n12t8clocv2 42.57 42.60 42.68 T:aes128otrsv1 42.80 42.82 42.90 T:aes128otrsv3 42.87 42.88 42.96 T:aes128n8silcv1 42.79 42.89 43.55 T:aes128otrsv2 42.88 42.89 42.96 T:aes128n8t8silcv2 42.88 42.89 42.99 T:aes128n12t8silcv3 42.85 42.89 42.97 T:aes128n12silcv1 42.87 42.90 42.95 T:aes128n12t8silcv2 43.98 44.13 44.32 T:seakeyakv1 43.95 44.19 46.64 T:oceankeyakv1 46.34 46.34 46.41 T:aes128otrcv3 50.74 50.75 50.95 T:aes128otrpv3 50.80 50.85 50.92 T:aes128otrpv2 55.20 55.28 55.33 T:aes128otrpv1 56.63 56.69 56.80 T:aes256otrsv1 56.69 56.70 56.79 T:aes256otrsv2 56.67 56.72 56.81 T:aes256otrsv3 58.40 58.42 58.45 T:proest256otrv1 60.71 60.94 61.04 T:aes256otrcv3 69.26 69.29 69.40 T:aes256otrpv1 69.29 69.35 69.40 T:aes256otrpv2 69.62 70.25 73.02 T:aes256otrpv3 70.99 71.01 71.05 T:aesjambuv1 77.61 77.62 77.66 T:twine80n6t4clocv3 85.09 85.58 89.66 T:ketjesrv1 94.47 94.50 94.55 T:twine80n6t4clocv2 96.69 99.00 99.44 T:ketjesrv2 94.06 103.82 104.25 T:riverkeyakv1 108.44 108.58 109.38 T:aezv5 122.84 122.87 123.25 T:aezv4 136.49 136.51 136.58 T:ketjejrv1 162.21 162.26 162.30 T:present80n6t4silcv3 167.09 167.19 167.29 T:aezv1 169.55 172.17 179.32 T:proest128otrv1 242.33 242.45 245.16 T:aezv3 263.96 264.01 264.85 T:ketjejrv2 301.15 301.25 302.13 T:deoxyseq128128v13 302.13 302.18 303.24 T:deoxysneq128128v13 302.86 302.94 303.97 T:deoxysneq128128v1 302.98 303.26 305.72 T:deoxyseq128128v1 306.90 308.22 311.57 T:twine80n6clocv1 440.44 440.67 444.05 T:deoxyseq256128v1 441.64 441.75 444.08 T:deoxyseq256128v13 442.22 442.39 443.46 T:deoxysneq256128v13 442.28 442.45 443.12 T:deoxysneq256128v1 734.20 734.54 735.16 T:led80n6t4silcv3 1426.39 1427.24 1427.85 T:aes128gcmv1 1426.08 1427.46 1434.27 aes256gcmv1 1453.52? 1608.88? 1703.65? T:acorn128 6029.51 6035.80 6043.75 T:led80n6silcv1 6036.22 6039.17 6046.75 T:led80n6t4silcv2 7942.82 7948.10 7963.62 T:present80n6silcv1 7945.13 7950.42 7958.41 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 3.00 3.00 3.05 T:morus640128v1 3.02 3.02 3.07 T:morus640128v2 3.54 3.54 3.58 T:morus1280128v2 3.54 3.54 3.58 T:morus1280256v1 3.57 3.57 3.60 T:morus1280128v1 3.63 3.63 3.69 T:morus1280256v2 7.19 7.19 7.22 T:norx3241v2 7.20 7.20 7.22 T:norx3241v3 8.15 8.15 8.21 T:norx3241v1 9.00 9.00 9.02 T:norx6441v2 9.01 9.01 9.03 T:norx6441v3 9.33 9.33 9.35 T:norx6441v1 10.39 10.39 10.42 T:norx3261v2 10.40 10.40 10.43 T:norx3261v3 10.45 10.45 10.53 T:seakeyakv2 11.12 11.12 11.15 T:norx6444v2 11.16 11.18 12.17 T:norx6444v3 11.90 11.90 11.97 T:norx3261v1 11.89 11.91 11.99 T:lakekeyakv2 11.94 11.95 12.04 T:norx6444v1 13.06 13.06 13.09 T:norx6461v2 13.11 13.11 13.14 T:norx6461v3 13.24 13.24 13.45 T:norx6461v1 13.64 13.66 13.84 T:lakekeyakv1 13.71 13.71 13.72 T:ascon96v1 13.73? 13.75? 25.95? T:ascon128av11 14.09? 14.14? 27.56? ascon128av12 14.37 14.38 14.56 T:oceankeyakv2 19.20 19.20 19.26 T:tiaoxinv2 19.23 19.23 19.31 T:tiaoxinv1 19.63 19.63 19.70 T:acorn128v3 20.03 20.03 20.09 T:acorn128v2 20.35 20.36 20.43 T:riverkeyakv2 20.87 20.87 20.93 T:ascon128v11 20.87 20.87 20.94 T:ascon128v1 21.01 21.01 21.06 ascon128v12 21.37 21.37 21.41 T:aegis128l 24.14 24.17 24.25 T:aegis128 24.41 24.43 24.62 T:lunarkeyakv2 29.79 29.81 29.90 T:aegis256 29.95 29.95 29.99 T:ketjeminorv2 31.71 31.76 34.00 T:deoxysi128v141 32.06 32.06 32.09 T:ketjemajorv2 36.43 36.44 36.94 T:deoxysi256v141 46.93 46.98 47.39 T:deoxysii128v141 48.68 48.69 48.78 T:aes128otrsv1 48.59 48.69 49.88 T:aes128otrcv3 48.66 48.76 49.16 T:aes128otrsv3 48.80 48.82 49.32 T:aes128otrsv2 54.34 54.37 54.41 T:aes128otrpv2 54.91 54.96 55.08 T:aes128otrpv1 54.98 54.98 55.17 T:seakeyakv1 54.99 55.07 55.92 T:deoxysii256v141 55.10 55.12 55.22 T:aes128otrpv3 55.24 55.25 55.34 T:aes128n8t8clocv2 55.26 55.26 55.34 T:aes128n12t8clocv2 55.31 55.32 55.41 T:aes128n12t8clocv3 55.36 55.38 55.49 T:aes128n12clocv1 55.38 55.39 55.50 T:aes128n8clocv1 63.48 63.50 63.57 T:aes256otrsv3 63.64 63.64 63.76 T:aes256otrsv2 63.65 63.65 63.76 T:aes256otrsv1 63.89 63.95 65.23 T:aes256otrcv3 64.43 64.44 65.81 T:proest256otrv1 64.85 64.95 65.27 T:aes256gcmv1 65.93 65.94 66.01 T:aes128n8t8silcv2 65.94 65.96 66.13 T:aes128n12t8silcv2 65.95 65.97 66.03 T:aes128n12t8silcv3 66.10 66.11 66.18 T:aes128n12silcv1 66.11 66.12 66.17 T:aes128n8silcv1 69.01 69.01 69.18 T:oceankeyakv1 69.86 69.87 69.99 T:aes256otrpv1 69.84 69.88 69.94 T:aes256otrpv2 70.30 71.03 71.13 T:aes256otrpv3 72.37 72.38 72.42 T:aesjambuv1 79.61 79.61 79.67 T:twine80n6t4clocv3 88.50 88.51 89.01 T:twine80n6t4clocv2 99.44 100.07 103.25 T:ketjesrv1 112.24 115.51 115.72 T:riverkeyakv1 112.33 115.61 115.62 T:ketjesrv2 133.36 133.55 135.77 T:aezv4 144.08 144.88 147.65 T:aezv5 160.72 160.73 161.06 T:ketjejrv1 164.83 164.88 165.28 T:present80n6t4silcv3 177.40 177.89 181.67 T:proest128otrv1 290.53 291.43 297.59 T:ketjejrv2 304.35 304.39 305.09 T:deoxysneq128128v13 304.68 304.75 305.34 T:deoxysneq128128v1 331.54 332.22 333.81 T:aezv1 350.62 350.88 353.10 T:aezv3 444.75 444.92 447.52 T:deoxysneq256128v13 444.70 444.99 446.43 T:deoxysneq256128v1 460.80 460.88 461.27 T:deoxyseq128128v1 461.75 461.86 462.30 T:deoxyseq128128v13 466.06 466.39 467.47 T:twine80n6clocv1 665.55 665.99 666.22 T:deoxyseq256128v1 672.63 673.05 674.47 T:deoxyseq256128v13 740.83 741.02 741.43 T:led80n6t4silcv3 1463.36 1464.13 1465.14 T:aes128gcmv1 1671.36 1767.95 1768.46 T:acorn128 9105.20 9106.75 9115.25 T:led80n6t4silcv2 9106.96 9108.70 9115.23 T:led80n6silcv1 11975.38 11980.46 11986.33 T:present80n6t4silcv2 11977.38 11986.45 11989.07 T:present80n6silcv1 23454.25 23472.11 23537.47 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.92 2.92 2.98 T:morus640128v1 2.94 2.94 2.97 T:morus640128v2 3.53? 3.55? 4.35? T:morus1280128v1 3.57 3.57 3.65 T:morus1280128v2 3.64 3.64 3.76 T:morus1280256v1 3.68 3.68 3.80 T:morus1280256v2 7.18 7.18 7.26 T:norx3241v3 7.18 7.19 7.28 T:norx3241v2 8.24 8.24 8.32 T:norx3241v1 9.06 9.07 9.12 T:norx6441v2 9.08 9.08 9.15 T:norx6441v3 9.36 9.36 9.41 T:norx6441v1 10.38 10.38 10.46 T:norx3261v2 10.39 10.39 10.47 T:norx3261v3 10.54 10.54 10.68 T:seakeyakv2 11.21 11.22 11.29 T:norx6444v2 11.25 11.27 11.99 T:norx6444v3 11.51 11.51 11.63 T:lakekeyakv2 11.96 11.97 12.04 T:norx6444v1 11.99 12.00 12.14 T:norx3261v1 13.14 13.17 13.25 T:norx6461v2 13.19 13.19 13.27 T:norx6461v3 13.25 13.25 13.30 T:norx6461v1 13.52 13.54 13.73 T:lakekeyakv1 13.75 13.75 13.82 T:ascon96v1 14.04? 14.11? 26.64? ascon128av12 13.87? 14.47? 26.97? T:ascon128av11 14.60 14.62 14.84 T:oceankeyakv2 18.74 18.75 18.82 T:acorn128v3 19.35 19.35 19.49 T:tiaoxinv2 19.37 19.38 19.49 T:tiaoxinv1 19.97 19.97 20.07 T:acorn128v2 20.50 20.50 20.60 T:ascon128v1 20.50 20.50 20.60 T:ascon128v11 20.65 20.65 20.78 T:riverkeyakv2 20.89 20.89 20.95 ascon128v12 21.42 21.42 21.56 T:aegis128l 24.18 24.20 24.27 T:aegis128 24.51 24.54 24.79 T:lunarkeyakv2 29.76 29.78 29.89 T:aegis256 30.79 30.79 30.91 T:ketjemajorv2 30.82 30.83 30.89 T:ketjeminorv2 43.71 43.74 44.12 T:deoxysi128v141 47.13 47.15 47.54 T:deoxysii128v141 48.70 48.70 48.77 T:aes128otrcv3 49.07 49.08 49.19 T:aes128otrsv1 49.22 49.25 49.73 T:aes128otrsv2 49.74 50.22 50.24 T:aes128otrsv3 50.46 50.50 50.75 T:deoxysi256v141 55.06 55.08 55.17 T:aes128otrpv3 55.19 55.19 55.37 T:seakeyakv1 55.21 55.22 55.62 T:deoxysii256v141 55.28 55.32 55.90 T:aes128otrpv1 56.22 56.27 56.48 T:aes128otrpv2 57.54 57.55 57.70 T:aes128n12t8clocv2 57.59 57.60 57.70 T:aes128n12t8clocv3 57.52 57.64 58.11 T:aes128n8t8clocv2 57.69 57.70 57.80 T:aes128n8clocv1 57.72 57.73 57.83 T:aes128n12clocv1 63.75 63.75 63.82 T:proest256otrv1 64.00 64.05 64.07 T:aes256otrcv3 64.05 64.05 64.18 T:aes256otrsv1 64.04 64.05 64.17 T:aes256otrsv2 64.53 64.59 64.67 T:aes256otrsv3 66.16 66.18 66.25 T:aes128n8t8silcv2 66.20 66.21 66.33 T:aes128n12t8silcv3 66.26 66.27 66.35 T:aes128n12t8silcv2 66.43 66.45 67.04 T:aes128n8silcv1 66.40 66.53 68.46 T:aes128n12silcv1 69.19 69.22 70.00 T:oceankeyakv1 70.24 70.26 70.40 T:aes256otrpv1 70.24 70.27 71.35 T:aes256otrpv2 70.92 70.99 71.86 T:aes256gcmv1 71.99 72.06 72.30 T:aes256otrpv3 72.32 72.33 72.37 T:aesjambuv1 79.74 79.75 79.81 T:twine80n6t4clocv3 91.61 91.61 91.71 T:twine80n6t4clocv2 100.04 100.32 103.89 T:ketjesrv1 109.21 112.51 112.52 T:ketjesrv2 111.95 115.28 115.54 T:riverkeyakv1 130.74 130.94 132.65 T:aezv4 141.46 142.54 142.89 T:aezv5 158.49 158.51 158.69 T:ketjejrv1 164.85 164.88 165.03 T:present80n6t4silcv3 177.13 177.66 181.40 T:proest128otrv1 281.29 281.38 281.81 T:ketjejrv2 333.17 333.65 335.06 T:aezv1 348.18 349.08 349.81 T:aezv3 357.48 357.66 358.88 T:deoxysneq128128v1 357.76 358.20 361.63 T:deoxysneq128128v13 461.73 462.30 462.83 T:deoxyseq128128v13 467.16 467.45 468.85 T:twine80n6clocv1 529.98 530.13 531.19 T:deoxysneq256128v13 530.05 531.02 531.80 T:deoxysneq256128v1 562.73 563.44 564.63 T:deoxyseq128128v1 672.57 672.98 673.41 T:deoxyseq256128v13 741.04 741.23 741.80 T:led80n6t4silcv3 836.07 837.23 841.37 T:deoxyseq256128v1 1463.85 1465.39 1468.70 T:aes128gcmv1 1703.83 1812.72 1865.06 T:acorn128 9104.15 9106.56 9110.62 T:led80n6silcv1 9104.79 9109.82 9114.07 T:led80n6t4silcv2 11976.43 11982.73 11986.79 T:present80n6silcv1 11980.06 11985.62 11988.00 T:present80n6t4silcv2 23443.63 23469.89 23553.86 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.92 2.92 2.92 T:morus640128v1 2.94 2.94 2.94 T:morus640128v2 3.53? 3.57? 5.36? T:morus1280128v1 3.57 3.58 3.58 T:morus1280128v2 3.64 3.64 3.68 T:morus1280256v1 3.68 3.68 3.69 T:morus1280256v2 7.18 7.18 7.18 T:norx3241v2 7.18 7.18 7.19 T:norx3241v3 8.24 8.24 8.24 T:norx3241v1 9.15 9.16 9.18 T:norx6441v2 9.17 9.17 9.20 T:norx6441v3 9.44 9.45 9.49 T:norx6441v1 10.38 10.38 10.40 T:norx3261v2 10.39 10.39 10.39 T:norx3261v3 10.59 10.62 10.68 T:seakeyakv2 11.33? 11.38? 19.66? T:norx6444v3 11.30? 11.40? 14.22? T:norx6444v2 11.61 11.61 11.67 T:lakekeyakv2 11.99 11.99 12.00 T:norx3261v1 12.05 12.05 12.09 T:norx6444v1 13.22 13.23 13.26 T:norx6461v2 13.27 13.28 13.31 T:norx6461v3 13.33 13.33 13.37 T:norx6461v1 13.60 13.62 13.75 T:lakekeyakv1 13.74 13.75 13.77 T:ascon96v1 13.86? 13.88? 27.39? T:ascon128av11 14.04? 14.05? 27.67? ascon128av12 14.59 14.82 15.07 T:oceankeyakv2 18.74 18.74 18.78 T:acorn128v3 19.32 19.33 19.37 T:tiaoxinv2 19.35 19.35 19.38 T:tiaoxinv1 19.97 19.97 20.00 T:acorn128v2 20.50 20.50 20.53 T:ascon128v11 20.50 20.51 21.13 T:ascon128v1 20.72 20.72 20.83 T:riverkeyakv2 20.89 20.89 20.90 ascon128v12 21.42 21.43 21.45 T:aegis128l 24.18 24.20 24.20 T:aegis128 24.59 24.60 24.79 T:lunarkeyakv2 29.76 29.78 29.79 T:aegis256 30.88 30.88 30.97 T:ketjemajorv2 30.93 30.93 30.99 T:ketjeminorv2 43.80 43.81 44.25 T:deoxysi128v141 47.29 47.35 49.29 T:deoxysii128v141 48.68 48.68 48.70 T:aes128otrcv3 49.19 49.19 49.26 T:aes128otrsv1 49.28 49.32 49.92 T:aes128otrsv2 49.84 49.95 50.42 T:aes128otrsv3 50.52 50.64 50.87 T:deoxysi256v141 55.15 55.18 55.75 T:aes128otrpv3 55.27 55.28 55.43 T:seakeyakv1 55.29 55.31 55.60 T:deoxysii256v141 55.37 55.40 55.49 T:aes128otrpv1 56.31 56.36 56.39 T:aes128otrpv2 57.49 57.49 57.58 T:aes128n8t8clocv2 57.50 57.50 57.59 T:aes128n12t8clocv2 57.55 57.56 57.62 T:aes128n12t8clocv3 57.66 57.66 57.74 T:aes128n8clocv1 57.69 57.71 58.22 T:aes128n12clocv1 63.74 63.75 64.47 T:proest256otrv1 64.01 64.05 64.54 T:aes256otrcv3 64.15 64.15 64.25 T:aes256otrsv1 64.15 64.26 65.09 T:aes256otrsv2 64.67 64.69 64.76 T:aes256otrsv3 66.16 66.18 66.35 T:aes128n8t8silcv2 66.19 66.22 67.79 T:aes128n12t8silcv3 66.25 66.27 66.92 T:aes128n12t8silcv2 66.38 66.41 66.46 T:aes128n12silcv1 66.42 66.42 66.45 T:aes128n8silcv1 69.29 69.43 71.21 T:oceankeyakv1 70.33 70.35 70.44 T:aes256otrpv1 70.32 70.36 70.42 T:aes256otrpv2 71.40 72.15 72.23 T:aes256otrpv3 72.32 72.33 72.37 T:aesjambuv1 79.74 79.74 79.79 T:twine80n6t4clocv3 91.42 91.52 92.05 T:aes256gcmv1 91.61 91.61 91.66 T:twine80n6t4clocv2 100.14 101.54 103.98 T:ketjesrv1 110.30 112.60 112.71 T:ketjesrv2 111.19 115.37 115.39 T:riverkeyakv1 130.60 130.81 132.05 T:aezv4 141.40 142.41 143.67 T:aezv5 158.58 158.59 158.75 T:ketjejrv1 164.84 164.84 165.00 T:present80n6t4silcv3 177.12 178.01 181.40 T:proest128otrv1 281.38 281.46 281.82 T:ketjejrv2 332.98 333.97 334.83 T:aezv1 347.98 348.92 351.97 T:aezv3 357.49 358.02 359.02 T:deoxysneq128128v1 357.87 358.19 359.40 T:deoxysneq128128v13 461.88 462.41 463.01 T:deoxyseq128128v13 467.19 468.40 469.03 T:twine80n6clocv1 529.97 530.13 531.17 T:deoxysneq256128v1 530.19? 531.45? 632.79? T:deoxysneq256128v13 563.27 563.54 567.32 T:deoxyseq128128v1 672.72 673.30 674.56 T:deoxyseq256128v13 740.86 741.18 741.45 T:led80n6t4silcv3 835.93 836.86 837.02 T:deoxyseq256128v1 1435.19 1435.47 1439.79 T:aes128gcmv1 1671.52? 1822.41? 1865.37? T:acorn128 1883.04 1884.21 1891.54 aes256gcmv1 9104.61 9107.25 9110.70 T:led80n6t4silcv2 9105.68 9110.55 9115.21 T:led80n6silcv1 11973.89 11974.94 11994.99 T:present80n6t4silcv2 11976.22 11983.53 11987.72 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.37 9.37 10.13 T:morus640128v1 9.90 9.90 10.63 T:morus640128v2 17.23 17.23 18.33 T:morus1280128v1 17.51 17.52 18.34 T:morus1280256v1 17.62 17.63 19.34 T:norx3241v1 18.25 18.26 19.14 T:morus1280128v2 18.72 18.77 19.59 T:morus1280256v2 19.48 19.52 20.58 T:norx3241v2 19.57 19.60 20.52 T:norx3241v3 21.15 21.15 21.70 T:ascon96v1 21.05? 22.01? 40.88? T:ascon128av11 21.84? 22.88? 41.12? ascon128av12 25.56 25.57 27.14 T:norx3261v1 27.45 27.46 28.01 T:norx3261v2 27.53 27.63 28.72 T:norx3261v3 28.21 28.21 29.02 ascon128v12 27.84? 28.59? 46.63? T:ascon128v11 27.84? 28.78? 46.55? T:ascon128v1 31.12 31.12 31.12 T:norx6441v1 37.16 37.26 37.80 T:norx6441v2 37.38 37.38 38.11 T:norx6441v3 41.99 41.99 42.20 T:norx6461v1 50.07 50.16 50.62 T:norx6461v2 51.23 51.31 52.32 T:norx6461v3 51.58 51.70 52.71 T:riverkeyakv2 52.08 52.27 53.45 T:lakekeyakv1 55.19 55.19 56.03 T:lakekeyakv2 68.12 68.12 69.55 T:aes128n8t8clocv2 68.50 68.65 70.13 T:aes128n12t8clocv2 69.73 69.73 70.86 T:aes128n12t8clocv3 70.20 70.25 71.13 T:aegis128 72.04 72.04 74.02 T:aes128n8clocv1 72.21? 74.47? 91.55? T:aes128n12clocv1 82.93 82.95 83.56 T:acorn128v3 84.00 84.00 84.56 T:acorn128v2 87.05 87.38 93.26 T:norx6444v2 87.45 87.52 88.93 T:aes128n8t8silcv2 87.96 87.98 88.84 T:aes128n12t8silcv2 88.06 88.15 88.95 T:norx6444v3 88.53 88.58 90.16 T:aes128n12t8silcv3 91.98 92.02 92.07 T:norx6444v1 93.24 93.28 95.14 T:aes128n12silcv1 93.30 93.36 94.67 T:aes128n8silcv1 93.98 94.09 96.55 T:aes128otrsv1 94.19 94.36 95.86 T:aes128otrsv2 94.59 94.77 96.87 T:aes128otrsv3 94.54 95.58 97.84 T:aegis128l 96.26 96.26 96.82 T:aesjambuv1 98.01 98.06 99.00 T:aes128otrpv2 98.28 98.38 100.46 T:aes128otrpv1 99.12 99.20 100.53 T:aes128otrpv3 99.91 99.95 100.05 T:ketjeminorv2 101.59 101.91 103.52 T:seakeyakv2 101.95 101.98 104.30 T:aes128otrcv3 102.96 103.07 104.33 T:aegis256 111.00 111.05 111.68 T:twine80n6t4clocv3 114.30 114.37 115.48 T:deoxysi128v141 115.79 115.97 117.08 T:twine80n6t4clocv2 122.87 123.71 125.08 T:aes256otrsv2 123.48 123.76 125.30 T:aes256otrsv1 123.89 124.44 126.23 T:aes256otrsv3 126.84 126.95 128.50 T:aes256otrpv2 127.10 127.93 130.16 T:aes256otrpv1 128.44 129.15 129.95 T:aes256otrpv3 133.02 134.33 135.30 T:aes256otrcv3 143.55 143.55 144.68 T:tiaoxinv2 144.07 144.07 144.84 T:tiaoxinv1 154.53 155.27 160.54 T:ketjesrv1 157.99 158.11 159.96 T:deoxysii128v141 159.92 160.09 162.03 T:oceankeyakv2 172.73 172.73 176.40 T:aezv4 185.51 185.51 187.63 T:proest256otrv1 188.13 188.62 190.83 T:deoxysi256v141 191.53 192.22 193.71 T:aezv5 190.54 195.79 196.04 T:ketjesrv2 209.82 209.82 210.05 T:present80n6t4silcv3 211.72 211.78 212.23 T:ketjejrv1 208.93? 212.57? 279.09? T:riverkeyakv1 225.29? 225.91? 260.09? T:ketjemajorv2 342.39 342.71 343.47 T:deoxysneq128128v13 342.86 342.95 344.32 T:deoxysneq128128v1 346.76 351.84 353.26 T:proest128otrv1 362.19 362.65 366.14 T:aezv1 361.68 365.15 381.82 T:aes256gcmv1 382.09 383.58 391.72 T:ketjejrv2 397.01 397.13 401.59 T:lunarkeyakv2 416.89 417.12 421.16 T:seakeyakv1 439.62 440.17 442.42 T:deoxysii256v141 499.95 499.95 501.08 T:deoxysneq256128v13 499.96 499.96 500.68 T:deoxysneq256128v1 505.14 505.50 508.55 T:aezv3 508.00 508.54 511.79 T:twine80n6clocv1 534.08 534.13 534.61 T:deoxyseq128128v1 571.91 571.97 572.98 T:deoxyseq128128v13 753.20 753.33 758.07 T:oceankeyakv1 773.10 773.87 774.19 T:deoxyseq256128v1 832.60 833.38 834.20 T:deoxyseq256128v13 877.70 877.70 878.22 T:led80n6t4silcv3 1649.18 1649.23 1651.12 T:aes128gcmv1 5813.18 6186.37 6216.84 T:acorn128 10172.34 10182.38 10190.66 T:led80n6t4silcv2 10202.80 10210.04 10216.94 T:led80n6silcv1 13400.18 13406.48 13416.57 T:present80n6t4silcv2 13409.06 13413.51 13438.85 T:present80n6silcv1 33911.89 33944.21 34075.38 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.61 9.61 10.66 T:morus640128v1 10.02? 10.02? 11.24? T:morus640128v2 17.77 17.77 18.80 T:morus1280128v1 17.77 17.79 19.48 T:norx3241v1 18.21 18.25 18.93 T:morus1280256v1 18.72 18.72 19.80 T:morus1280128v2 19.14 19.14 20.44 T:morus1280256v2 19.14 19.16 19.71 T:norx3241v2 19.24 19.25 19.70 T:norx3241v3 21.29 21.29 22.13 T:ascon96v1 21.37? 22.23? 42.01? T:ascon128av11 22.09? 23.29? 41.32? ascon128av12 25.72 25.72 26.98 T:norx3261v1 27.09 27.20 27.43 T:norx3261v2 27.20 27.23 27.89 T:norx3261v3 28.28 28.28 28.90 ascon128v12 27.62? 28.57? 49.59? T:ascon128v1 27.62? 28.59? 50.66? T:ascon128v11 30.87 30.87 31.56 T:norx6441v1 37.46 37.55 38.16 T:norx6441v2 37.91 37.91 38.20 T:norx6441v3 41.64 41.64 42.01 T:norx6461v1 50.67 50.81 51.43 T:lakekeyakv1 50.78 50.85 51.34 T:norx6461v2 51.98 52.02 52.50 T:norx6461v3 52.73 52.85 54.04 T:riverkeyakv2 54.88 54.90 55.85 T:lakekeyakv2 70.17 70.17 70.58 T:aes128n8t8clocv2 70.35 70.41 70.76 T:aegis128 70.49 70.58 70.98 T:aes128n12t8clocv2 72.03 72.12 72.74 T:aes128n12t8clocv3 74.09 74.09 74.68 T:aes128n8clocv1 74.79 74.98 75.33 T:aes128n12clocv1 81.85 81.88 82.29 T:acorn128v3 85.45 85.45 85.80 T:acorn128v2 87.88 88.17 89.27 T:norx6444v2 88.35 88.41 89.24 T:aes128n12t8silcv2 88.61 88.65 88.98 T:aes128n8t8silcv2 88.71 88.71 89.41 T:norx6444v3 89.68 89.75 90.14 T:aes128n12t8silcv3 91.99 92.07 92.99 T:norx6444v1 93.41 93.48 94.74 T:aes128n12silcv1 93.45 93.54 95.07 T:aes128n8silcv1 94.61 94.66 94.98 T:aegis128l 94.80 94.80 95.93 T:aes128otrsv1 95.27 95.44 96.45 T:aes128otrsv2 96.19 96.36 97.16 T:aes128otrsv3 96.56 96.56 97.74 T:aesjambuv1 98.53 98.53 100.56 T:aes128otrpv1 100.78 100.82 100.94 T:ketjeminorv2 100.85 100.91 102.23 T:aes128otrpv2 100.95 100.95 102.69 T:aes128otrpv3 101.84 101.89 103.77 T:aes128otrcv3 102.56 102.59 105.21 T:seakeyakv2 103.02 103.13 103.77 T:aegis256 111.14 111.20 111.38 T:twine80n6t4clocv3 118.34 118.35 119.04 T:twine80n6t4clocv2 124.40 124.40 125.91 T:aes256otrsv1 123.84 124.68 125.40 T:aes256otrsv2 125.31 125.31 127.01 T:aes256otrsv3 127.37 127.42 128.59 T:aes256otrpv2 127.83 128.73 130.33 T:aes256otrpv1 129.52 130.23 131.46 T:aes256otrpv3 132.30 133.11 134.08 T:deoxysi128v141 133.38 134.06 134.80 T:aes256otrcv3 143.59 143.64 144.81 T:tiaoxinv2 144.27 144.32 145.16 T:tiaoxinv1 155.48 156.15 161.49 T:ketjesrv1 158.22 158.28 159.70 T:deoxysii128v141 162.34 162.66 164.95 T:oceankeyakv2 168.66 168.75 170.18 T:aezv4 187.33 187.33 196.51 T:proest256otrv1 188.51 189.45 190.64 T:aezv5 187.70 193.25 193.62 T:ketjesrv2 204.70 209.14 209.47 T:riverkeyakv1 208.96 209.16 211.32 T:deoxysi256v141 209.95 209.99 210.07 T:ketjejrv1 210.16 210.16 210.52 T:present80n6t4silcv3 225.05 225.15 227.22 T:ketjemajorv2 347.15 351.24 353.65 T:proest128otrv1 373.08 373.97 376.18 T:aezv1 374.03 374.09 375.40 T:ketjejrv2 395.38 395.76 396.76 T:deoxysneq128128v1 395.68 396.00 396.63 T:deoxysneq128128v13 395.86 399.13 400.34 T:lunarkeyakv2 416.48 416.51 419.69 T:seakeyakv1 439.70 439.98 442.11 T:deoxysii256v141 501.86 502.03 505.68 T:aezv3 506.48 508.48 522.35 T:aes256gcmv1 509.59 511.52 512.09 T:twine80n6clocv1 571.91 572.70 573.20 T:deoxyseq128128v13 584.87 584.87 585.23 T:deoxysneq256128v1 585.10 585.10 585.54 T:deoxysneq256128v13 636.70 637.49 640.71 T:deoxyseq128128v1 753.80 753.92 757.45 T:oceankeyakv1 832.53 833.35 833.57 T:deoxyseq256128v13 878.06 878.08 878.38 T:led80n6t4silcv3 943.32 943.32 944.01 T:deoxyseq256128v1 1648.90 1649.04 1650.00 T:aes128gcmv1 5829.55? 6328.25? 6519.98? T:acorn128 10168.63 10177.66 10180.85 T:led80n6t4silcv2 10204.20 10211.05 10311.50 T:led80n6silcv1 13399.23 13406.09 13484.98 T:present80n6t4silcv2 13407.73 13411.57 13419.52 T:present80n6silcv1 33909.52 33914.46 33951.16 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.61 9.61 9.61 T:morus640128v1 10.02 10.02 10.02 T:morus640128v2 17.76 17.76 17.77 T:norx3241v1 17.77 17.77 17.87 T:morus1280128v1 18.21 18.21 18.21 T:morus1280256v1 18.72 18.72 18.88 T:morus1280128v2 19.14 19.14 19.25 T:morus1280256v2 19.14 19.16 19.30 T:norx3241v2 19.24 19.26 19.38 T:norx3241v3 21.12 21.12 21.66 T:ascon96v1 22.09? 22.19? 41.49? ascon128av12 21.29? 22.23? 39.17? T:ascon128av11 25.72 25.72 25.72 T:norx3261v1 27.09 27.09 27.23 T:norx3261v2 27.18 27.20 27.41 T:norx3261v3 27.55? 27.80? 48.21? T:ascon128v11 27.55? 27.95? 52.71? T:ascon128v1 28.28 28.28 28.38 ascon128v12 31.35 31.41 31.66 T:norx6441v1 38.05 38.05 38.25 T:norx6441v2 38.54 38.54 38.70 T:norx6441v3 42.10 42.10 42.45 T:norx6461v1 51.26 51.30 51.47 T:norx6461v2 51.30 51.38 51.43 T:lakekeyakv1 52.52 52.55 52.71 T:norx6461v3 53.77 53.89 54.36 T:riverkeyakv2 55.40 55.40 55.43 T:lakekeyakv2 69.41 69.41 69.71 T:aes128n8t8clocv2 69.67 69.82 70.12 T:aes128n12t8clocv2 70.32 70.32 70.38 T:aegis128 71.18 71.18 71.34 T:aes128n12t8clocv3 73.43 73.43 73.71 T:aes128n8clocv1 74.02 74.03 74.26 T:aes128n12clocv1 81.78 81.82 81.93 T:acorn128v3 85.45 85.45 85.50 T:acorn128v2 87.98 88.12 88.37 T:aes128n12t8silcv2 88.30 88.37 88.46 T:aes128n8t8silcv2 88.46 88.50 88.67 T:norx6444v2 89.21 89.21 89.41 T:norx6444v3 89.54 89.62 89.77 T:aes128n12t8silcv3 92.43 92.45 92.67 T:norx6444v1 93.24 93.34 93.64 T:aes128n12silcv1 93.27 93.35 93.44 T:aes128n8silcv1 94.59 94.65 94.65 T:aegis128l 95.73 95.73 95.83 T:aes128otrsv1 95.66 95.84 95.93 T:aes128otrsv2 96.56 96.56 96.80 T:aesjambuv1 97.39 97.56 97.71 T:aes128otrsv3 99.13 99.13 99.58 T:aes128otrpv1 101.53 101.59 101.80 T:aes128otrpv2 101.64 101.64 101.98 T:aes128otrpv3 101.68 101.72 101.80 T:ketjeminorv2 101.98 101.98 102.10 T:aes128otrcv3 103.02 103.12 103.13 T:aegis256 104.19 104.21 105.50 T:seakeyakv2 111.06 111.12 111.48 T:twine80n6t4clocv3 118.32 118.41 119.03 T:twine80n6t4clocv2 125.27 125.27 125.41 T:aes256otrsv1 124.60 125.45 126.14 T:aes256otrsv2 126.26 126.26 126.58 T:aes256otrsv3 128.15 128.25 141.80 T:aes256otrpv2 128.27 129.09 129.16 T:aes256otrpv1 130.17 130.18 130.89 T:aes256otrpv3 132.86 133.50 134.08 T:deoxysi128v141 133.32 133.70 135.02 T:aes256otrcv3 142.84 142.89 142.91 T:tiaoxinv2 143.55 143.61 143.73 T:tiaoxinv1 156.06 156.76 162.06 T:ketjesrv1 158.64 158.75 159.62 T:deoxysii128v141 163.41 163.48 163.68 T:oceankeyakv2 167.97 168.12 169.59 T:aezv4 181.73 181.73 182.22 T:proest256otrv1 187.42 187.70 188.43 T:aezv5 188.45 193.70 194.10 T:ketjesrv2 210.12 210.12 210.23 T:present80n6t4silcv3 204.80 210.24 210.30 T:riverkeyakv1 209.92 210.28 211.38 T:deoxysi256v141 210.45 210.52 210.67 T:ketjejrv1 225.75 225.75 227.48 T:ketjemajorv2 347.12 353.48 353.70 T:proest128otrv1 372.19 372.34 374.65 T:aezv1 374.48 374.58 375.91 T:ketjejrv2 395.38 395.67 396.29 T:deoxysneq128128v1 396.20 396.55 396.82 T:deoxysneq128128v13 397.43 399.69 400.32 T:lunarkeyakv2 416.95 416.98 419.42 T:seakeyakv1 440.30 440.57 441.80 T:deoxysii256v141 501.67 501.93 503.91 T:aezv3 510.05 512.12 519.02 T:twine80n6clocv1 572.47 573.03 573.35 T:deoxyseq128128v13 584.83 584.83 585.31 T:deoxysneq256128v1 585.62 585.89 589.01 T:deoxysneq256128v13 636.60 637.41 638.26 T:deoxyseq128128v1 754.36 754.41 758.23 T:oceankeyakv1 833.06 833.88 834.08 T:deoxyseq256128v13 878.02 878.04 879.95 T:led80n6t4silcv3 943.30 943.30 943.90 T:deoxyseq256128v1 1006.12 1008.96 1016.92 T:aes256gcmv1 1620.31 1620.75 1624.44 T:aes128gcmv1 5825.11? 6328.02? 6519.09? T:acorn128 10177.13 10181.81 10195.78 T:led80n6t4silcv2 10200.66 10206.79 10241.72 T:led80n6silcv1 12372.58 12384.50 13558.45 aes256gcmv1 13398.82 13402.91 13414.50 T:present80n6t4silcv2 13406.87 13409.02 13411.39 T:present80n6silcv1