VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20241022

[Page version: 20251103 11:56:53]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.95 0.97 0.98 T:morus1280128v2 0.97 0.98 0.99 T:morus1280256v2 0.98 0.99 1.00 T:morus1280256v1 1.13 1.13 1.14 T:morus640128v1 1.12 1.14 1.16 T:morus640128v2 1.99 2.07 2.15 T:morus1280128v1 2.29 2.41 2.47 T:lunarkeyakv2 2.75 2.76 2.78 T:norx6441v2 2.83 2.86 2.89 T:norx6441v3 3.05 3.13 3.31 T:seakeyakv2 3.22 3.26 3.34 T:oceankeyakv2 3.29 3.32 3.35 T:norx6441v1 3.82 3.85 3.87 T:norx3241v3 3.85 3.90 3.92 T:norx3241v2 4.15 4.19 4.22 T:norx6461v2 4.21 4.24 4.27 T:norx6461v3 4.54 4.61 4.67 T:norx6444v3 4.60 4.65 4.68 T:norx6444v2 4.62 4.65 4.67 T:norx3241v1 4.66 4.80 5.03 T:tiaoxinv2 4.98 5.02 5.04 T:norx6461v1 5.19 5.30 5.44 T:tiaoxinv1 5.52 5.58 5.67 T:norx6444v1 5.58 5.59 5.63 T:lakekeyakv2 5.60 5.68 5.73 T:lakekeyakv1 5.91 5.94 5.96 T:norx3261v3 5.92 5.97 5.99 T:norx3261v2 6.56 6.60 6.65 T:aegis128l 7.67 7.69 7.71 T:norx3261v1 7.82 7.83 7.86 T:aegis128 8.23 8.45 8.57 T:aes128gcmv1 9.29 9.33 9.35 T:aegis256 9.69 9.71 9.73 T:ascon96v1 9.73 9.78 9.82 T:ascon128av11 10.12 10.15 10.17 ascon128av12 10.16 10.20 10.27 T:ketjemajorv2 9.65 10.29 10.55 T:deoxysi128v141 9.73? 10.59? 11.11? T:aeadaes128ocbtaglen128v1 10.62 10.86 11.02 T:aes256gcmv1 11.46 12.19 12.34 T:deoxysi256v141 13.17 13.21 13.25 T:riverkeyakv2 13.52 13.64 13.69 T:ketjeminorv2 14.48 14.50 14.52 T:ascon128v11 13.57 14.51 15.03 T:aeadaes256ocbtaglen128v1 14.56 14.57 14.61 T:ascon128v1 15.03 15.06 15.09 ascon128v12 15.74 15.75 15.77 T:twine80n6t4clocv2 16.27 16.31 16.33 T:twine80n6t4clocv3 16.59 16.65 16.69 T:aes128otrcv3 18.21 18.25 18.30 T:aes128otrpv3 18.21 18.27 18.33 T:aes128otrsv3 18.10 18.75 19.45 T:oceankeyakv1 19.25 19.36 19.41 T:aes128otrpv2 19.33 19.39 19.43 T:aes128otrsv2 19.44 19.47 19.50 T:aes128otrpv1 19.44 19.51 19.58 T:aes128otrsv1 19.39 20.69 21.22 T:deoxysii128v141 21.68 21.72 21.77 T:aes256otrcv3 23.33 23.36 23.41 T:aes256otrpv3 23.35 23.42 23.49 T:aes256otrsv3 22.63 23.49 23.96 T:deoxysii256v141 24.37 24.45 24.54 T:aes256otrpv2 24.45 24.51 24.54 T:aes256otrsv2 24.61 24.66 24.71 T:aes256otrpv1 24.70 24.76 24.84 T:aes256otrsv1 25.00 25.18 25.60 T:seakeyakv1 29.29 29.31 29.35 T:aesjambuv1 30.36 30.41 30.45 T:proest256otrv1 30.96 31.03 31.09 T:aes128n12t8clocv2 30.93 31.04 31.09 T:aes128n8t8clocv2 31.09 31.11 31.15 T:aes128n12t8clocv3 31.04 31.11 31.14 T:aes128n12clocv1 31.02 31.18 32.00 T:aes128n8clocv1 33.29 33.32 33.37 T:aes128n8t8silcv2 33.27 33.34 33.38 T:aes128n12t8silcv2 34.36 34.39 34.46 T:aes128n12t8silcv3 34.77 34.83 34.95 T:aes128n12silcv1 34.78 34.88 34.98 T:aes128n8silcv1 37.56 37.58 37.93 T:ketjesrv1 39.93 40.15 40.26 T:ketjesrv2 44.18 44.23 44.32 T:riverkeyakv1 46.26 46.41 46.58 T:aezv5 47.73 47.87 48.15 T:aezv4 66.38 66.54 66.61 T:proest128otrv1 78.86 78.94 79.73 T:present80n6t4silcv3 80.15 80.32 80.51 T:ketjejrv1 87.50 87.67 87.75 T:deoxysneq128128v13 87.52 87.77 89.37 T:deoxysneq128128v1 116.26 118.25 118.57 T:led80n6t4silcv3 127.50 127.65 130.72 T:ketjejrv2 137.32 137.53 137.74 T:deoxysneq256128v13 138.15 138.38 139.30 T:deoxysneq256128v1 159.79 160.13 162.27 T:twine80n6clocv1 176.08 176.37 176.99 T:deoxyseq128128v1 177.76 177.87 178.02 T:deoxyseq128128v13 192.85 193.17 193.77 T:aezv3 204.57 205.09 205.74 T:aezv1 276.29 276.75 277.09 T:deoxyseq256128v1 277.90 278.43 278.64 T:deoxyseq256128v13 484.81 485.09 485.33 T:acorn128v3 425.34? 494.25? 788.60? T:acorn128 489.81 496.08 507.03 T:acorn128v2 6933.68 6938.66 6951.81 T:present80n6silcv1 6959.06 6976.30 7011.37 T:present80n6t4silcv2 8424.18 8429.65 8435.84 T:led80n6silcv1 8434.49 8611.48 8625.92 T:led80n6t4silcv2 25978.09 25982.19 25984.58 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.94 0.95 0.97 T:morus1280128v2 0.96 0.96 0.96 T:morus1280256v2 0.95 0.96 0.97 T:morus1280256v1 1.13 1.14 1.15 T:morus640128v1 1.14 1.15 1.15 T:morus640128v2 1.95 2.06 2.12 T:morus1280128v1 2.44 2.53 2.62 T:lunarkeyakv2 2.74 2.75 2.79 T:norx6441v2 2.82 2.84 2.87 T:norx6441v3 3.13 3.20 3.43 T:seakeyakv2 3.30 3.35 3.42 T:oceankeyakv2 3.37 3.39 3.42 T:norx6441v1 3.76 3.78 3.80 T:norx3241v2 3.79 3.81 3.83 T:norx3241v3 4.06 4.09 4.14 T:norx6461v2 4.19 4.20 4.22 T:norx6461v3 4.54 4.55 4.57 T:norx3241v1 4.59 4.61 4.70 T:norx6444v3 4.61 4.64 4.69 T:norx6444v2 5.13 5.16 5.19 T:norx6461v1 5.11 5.21 5.49 T:tiaoxinv2 5.21 5.27 5.30 T:tiaoxinv1 5.36 5.40 5.45 T:lakekeyakv1 5.53 5.58 5.61 T:norx6444v1 5.58 5.65 5.68 T:lakekeyakv2 5.87 5.89 5.91 T:norx3261v3 5.88 5.90 5.92 T:norx3261v2 6.55 6.58 6.64 T:aegis128l 7.52 7.53 7.54 T:norx3261v1 7.86 7.88 7.90 T:aegis128 8.34 8.48 8.55 T:aes128gcmv1 9.26 9.29 9.30 T:aegis256 9.83 9.87 9.91 T:ascon96v1 9.86 9.89 9.92 T:ascon128av11 10.01 10.05 10.07 ascon128av12 10.26 10.29 10.33 T:ketjemajorv2 10.68 10.94 11.02 T:aes256gcmv1 12.49 12.55 12.60 T:ketjeminorv2 12.15? 12.76? 13.61? T:aeadaes128ocbtaglen128v1 13.36 13.40 13.44 T:riverkeyakv2 13.15 13.68 13.97 T:deoxysi128v141 14.79 14.82 14.85 T:ascon128v1 14.95 14.97 15.00 T:ascon128v11 14.97 15.01 15.03 ascon128v12 15.36 15.39 15.43 T:twine80n6t4clocv2 15.07 15.80 16.02 T:deoxysi256v141 16.23 16.27 16.31 T:twine80n6t4clocv3 16.82 16.87 16.90 T:aes128otrcv3 16.97 17.53 18.41 T:aeadaes256ocbtaglen128v1 18.27 18.78 19.46 T:oceankeyakv1 18.81 18.93 18.99 T:aes128otrsv2 18.93 19.00 19.04 T:aes128otrpv2 19.09 19.10 19.16 T:aes128otrsv1 19.07 19.12 19.17 T:aes128otrpv1 20.20 20.26 20.34 T:aes128otrpv3 20.24 20.28 20.31 T:aes128otrsv3 19.95 21.13 21.69 T:deoxysii128v141 21.92 21.97 22.00 T:aes256otrcv3 23.04 23.44 23.90 T:deoxysii256v141 24.01 24.05 24.09 T:aes256otrsv2 23.99 24.07 24.17 T:aes256otrpv2 24.26 24.29 24.33 T:aes256otrpv1 24.26 24.33 24.35 T:aes256otrsv1 25.14 25.33 25.71 T:seakeyakv1 25.42 25.46 25.53 T:aes256otrsv3 25.44 25.49 25.55 T:aes256otrpv3 29.28 29.35 29.40 T:aesjambuv1 30.10 30.14 30.18 T:proest256otrv1 30.36 30.42 30.47 T:aes128n8t8clocv2 30.35 30.48 30.69 T:aes128n12t8clocv2 30.48 30.60 30.86 T:aes128n12clocv1 30.59 30.65 30.75 T:aes128n12t8clocv3 30.82 30.93 32.03 T:aes128n8clocv1 33.30 33.37 33.50 T:aes128n12t8silcv2 33.33 33.43 33.48 T:aes128n8t8silcv2 34.42 34.46 34.62 T:aes128n12t8silcv3 34.77 34.84 34.98 T:aes128n12silcv1 34.77 34.87 34.94 T:aes128n8silcv1 38.50 38.61 38.67 T:ketjesrv1 42.45 42.51 42.61 T:ketjesrv2 44.37 44.46 44.53 T:riverkeyakv1 46.12 46.24 46.43 T:aezv5 47.59 47.74 47.88 T:aezv4 64.12 64.54 67.13 T:proest128otrv1 79.64 79.72 80.41 T:present80n6t4silcv3 80.96 81.10 81.40 T:ketjejrv1 117.02 117.09 117.22 T:led80n6t4silcv3 123.14 123.47 123.95 T:deoxysneq128128v1 123.39 123.52 123.83 T:deoxysneq128128v13 127.97 129.84 138.17 T:ketjejrv2 160.07 160.19 160.85 T:twine80n6clocv1 177.07 177.25 177.58 T:deoxyseq128128v13 177.22 177.38 177.53 T:deoxysneq256128v13 178.86 179.12 179.33 T:deoxysneq256128v1 192.73 192.86 193.57 T:aezv3 205.10 205.54 206.06 T:aezv1 245.09 245.70 246.23 T:deoxyseq128128v1 278.70 278.94 279.32 T:deoxyseq256128v13 353.89 354.90 355.07 T:deoxyseq256128v1 485.99 487.90 500.91 T:acorn128v2 417.50? 488.50? 787.36? T:acorn128 489.23 489.64 492.40 T:acorn128v3 6955.18 6958.09 6960.29 T:present80n6silcv1 6945.61 6959.25 6965.80 T:present80n6t4silcv2 8438.52 8604.18 8617.20 T:led80n6silcv1 8616.57 8623.21 8633.49 T:led80n6t4silcv2 25979.12 25983.20 25984.22 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.94 0.95 0.97 T:morus1280128v2 0.95 0.96 0.98 T:morus1280256v1 0.96 0.96 0.97 T:morus1280256v2 1.14 1.15 1.16 T:morus640128v1 1.14 1.15 1.16 T:morus640128v2 1.94 2.02 2.12 T:morus1280128v1 2.52 2.57 2.67 T:lunarkeyakv2 2.75 2.78 2.81 T:norx6441v2 2.82 2.83 2.86 T:norx6441v3 3.19 3.26 3.48 T:seakeyakv2 3.37 3.38 3.40 T:norx6441v1 3.35 3.41 3.43 T:oceankeyakv2 3.77 3.79 3.80 T:norx3241v2 3.80 3.82 3.84 T:norx3241v3 4.05 4.08 4.10 T:norx6461v2 4.18 4.21 4.22 T:norx6461v3 4.53 4.55 4.57 T:norx3241v1 4.64 4.67 4.71 T:norx6444v3 4.65 4.67 4.74 T:norx6444v2 5.12 5.15 5.18 T:norx6461v1 5.10 5.16 5.46 T:tiaoxinv2 5.22 5.29 5.33 T:tiaoxinv1 5.42 5.43 5.47 T:lakekeyakv1 5.56 5.62 5.65 T:norx6444v1 5.62 5.66 5.68 T:lakekeyakv2 5.87 5.87 5.89 T:norx3261v2 5.84 5.88 5.90 T:norx3261v3 6.56 6.60 6.65 T:aegis128l 7.50 7.51 7.53 T:norx3261v1 7.86 7.88 7.90 T:aegis128 8.35 8.47 8.55 T:aes128gcmv1 9.26 9.28 9.30 T:aegis256 9.83 9.86 9.88 T:ascon128av11 9.86 9.88 9.91 T:ascon96v1 10.02 10.03 10.05 ascon128av12 10.30 10.37 10.42 T:ketjemajorv2 10.75 10.94 11.10 T:aes256gcmv1 12.56 12.62 12.67 T:ketjeminorv2 12.11? 12.76? 13.46? T:aeadaes128ocbtaglen128v1 13.43 13.44 13.50 T:riverkeyakv2 13.42 13.73 13.85 T:deoxysi128v141 14.79 14.83 14.86 T:ascon128v1 14.93 14.97 15.02 T:ascon128v11 14.98 15.01 15.03 ascon128v12 15.36 15.39 15.43 T:twine80n6t4clocv2 15.38 15.85 16.07 T:deoxysi256v141 16.24 16.27 16.31 T:twine80n6t4clocv3 16.85 16.87 16.91 T:aes128otrcv3 16.95 17.59 18.43 T:aeadaes256ocbtaglen128v1 18.31 18.86 19.63 T:oceankeyakv1 18.96 19.01 19.06 T:aes128otrsv2 19.01 19.06 19.10 T:aes128otrpv2 19.12 19.14 19.21 T:aes128otrsv1 19.10 19.14 19.18 T:aes128otrpv1 20.27 20.32 20.40 T:aes128otrpv3 20.27 20.33 20.35 T:aes128otrsv3 20.35 21.04 21.32 T:deoxysii128v141 21.95 21.97 22.00 T:aes256otrcv3 23.07 23.45 23.79 T:deoxysii256v141 24.07 24.10 24.15 T:aes256otrsv2 24.07 24.11 24.22 T:aes256otrpv2 24.29 24.33 24.39 T:aes256otrpv1 24.33 24.39 24.44 T:aes256otrsv1 25.24 25.50 25.75 T:seakeyakv1 25.49 25.52 25.56 T:aes256otrsv3 25.52 25.58 25.61 T:aes256otrpv3 29.29 29.32 29.36 T:aesjambuv1 30.02 30.15 30.19 T:proest256otrv1 30.37 30.43 30.52 T:aes128n12t8clocv2 30.37 30.45 30.54 T:aes128n8t8clocv2 30.49 30.56 30.61 T:aes128n12clocv1 30.62 30.68 30.73 T:aes128n12t8clocv3 30.78 31.01 32.05 T:aes128n8clocv1 33.25 33.32 33.35 T:aes128n8t8silcv2 33.27 33.36 33.50 T:aes128n12t8silcv2 34.41 34.48 34.79 T:aes128n12t8silcv3 34.79 34.84 34.91 T:aes128n8silcv1 34.81 34.86 34.94 T:aes128n12silcv1 38.53 38.58 38.71 T:ketjesrv1 42.33 42.57 42.63 T:ketjesrv2 44.42 44.52 44.59 T:riverkeyakv1 46.02 46.13 46.26 T:aezv5 47.52 47.66 47.77 T:aezv4 64.11 64.45 67.10 T:proest128otrv1 79.63 79.67 80.45 T:present80n6t4silcv3 80.92 81.25 81.38 T:ketjejrv1 117.00 117.11 117.19 T:led80n6t4silcv3 123.14 123.32 123.83 T:deoxysneq128128v1 123.34 123.48 123.83 T:deoxysneq128128v13 128.63? 129.70? 145.44? T:ketjejrv2 160.03 160.22 160.92 T:twine80n6clocv1 177.30 177.38 177.74 T:deoxysneq256128v13 177.23 177.55 177.72 T:deoxyseq128128v13 179.07 179.25 179.44 T:deoxysneq256128v1 192.65 193.28 193.55 T:aezv3 204.75 204.96 205.75 T:aezv1 245.07 245.55 246.09 T:deoxyseq128128v1 278.54 279.05 279.40 T:deoxyseq256128v13 354.30 354.76 355.11 T:deoxyseq256128v1 404.72 405.43 406.17 aes256gcmv1 485.73 488.05 500.43 T:acorn128v2 417.51? 488.43? 787.75? T:acorn128 489.33 489.61 492.13 T:acorn128v3 6934.74 6953.28 6957.76 T:present80n6silcv1 6945.24 6961.05 6965.70 T:present80n6t4silcv2 8429.38 8603.45 8613.28 T:led80n6silcv1 8616.27 8630.41 8636.39 T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.91 0.93 0.94 T:morus1280256v1 0.92 0.93 0.94 T:morus1280128v2 0.93 0.94 0.94 T:morus1280256v2 1.08 1.09 1.10 T:morus640128v1 1.09 1.10 1.10 T:morus640128v2 1.97 2.01 2.04 T:morus1280128v1 2.63 2.68 2.81 T:seakeyakv2 2.68 2.72 2.76 T:oceankeyakv2 2.76 2.78 2.79 T:norx6441v2 2.86 2.87 2.89 T:norx6441v3 3.26 3.31 3.35 T:lunarkeyakv2 3.34 3.36 3.38 T:norx6441v1 3.86 3.87 3.93 T:norx3241v3 3.87 3.88 3.89 T:norx3241v2 4.17 4.18 4.21 T:norx6461v2 4.23 4.24 4.25 T:norx6461v3 4.45 4.57 4.77 T:tiaoxinv2 4.56 4.57 4.60 T:norx6444v3 4.56 4.59 4.60 T:norx6444v2 4.65 4.66 4.68 T:norx3241v1 4.58 4.70 4.84 T:tiaoxinv1 4.92 4.95 4.98 T:lakekeyakv2 5.03 5.06 5.09 T:norx6461v1 5.13 5.21 5.29 T:aes128gcmv1 5.34 5.36 5.38 T:lakekeyakv1 5.48 5.50 5.52 T:norx6444v1 5.89 5.92 5.93 T:norx3261v2 5.92 5.95 5.96 T:norx3261v3 6.19 6.40 6.62 T:aes256gcmv1 6.47 6.49 6.52 T:aegis128l 7.70 7.72 7.75 T:norx3261v1 7.81 7.85 7.87 T:aegis128 8.66 8.68 8.73 T:ketjemajorv2 9.29 9.30 9.31 T:aegis256 9.50 9.54 9.56 T:riverkeyakv2 9.71 9.74 9.76 T:ascon96v1 9.78 9.80 9.82 T:ascon128av11 10.01 10.03 10.05 ascon128av12 9.92 10.21 10.87 T:aeadaes128ocbtaglen128v1 9.83 10.40 10.71 T:deoxysi128v141 11.94 12.02 12.04 T:ketjeminorv2 11.47 12.14 12.50 T:deoxysi256v141 13.78 14.17 14.66 T:aeadaes256ocbtaglen128v1 14.56 14.59 14.62 T:ascon128v11 14.62 14.63 14.65 T:ascon128v1 14.88 14.90 14.92 ascon128v12 14.89 15.36 15.63 T:deoxysii128v141 15.44 15.45 15.48 T:twine80n6t4clocv2 16.11 16.13 16.15 T:twine80n6t4clocv3 16.76 16.77 16.82 T:aes128otrcv3 16.90 16.93 16.96 T:aes128otrsv3 17.37 17.40 17.44 T:aes128otrsv2 17.56 17.60 17.63 T:aes128otrsv1 17.18 17.66 17.83 T:deoxysii256v141 18.16 18.58 19.09 T:oceankeyakv1 18.83 18.87 18.93 T:aes128otrpv3 19.43 19.49 19.54 T:aes128otrpv2 19.48 19.50 19.55 T:aes128otrpv1 21.81 21.85 21.87 T:aes256otrcv3 22.08 22.12 22.19 T:aes256otrsv3 22.46 22.49 22.52 T:aes256otrsv2 22.72 22.78 22.84 T:aes256otrsv1 23.42 23.47 23.51 T:aes128n8t8clocv2 23.43 23.47 23.52 T:aes128n12t8clocv2 23.45 23.48 23.53 T:aes128n12clocv1 23.50 23.52 23.58 T:aes128n12t8clocv3 23.49 23.56 24.11 T:aes128n8clocv1 24.01 24.05 24.16 T:aes256otrpv3 24.47 24.51 24.56 T:aes256otrpv2 24.61 24.64 24.68 T:aes128n8t8silcv2 24.62 24.66 24.69 T:aes128n12t8silcv2 24.71 24.77 24.93 T:aes256otrpv1 25.13 25.18 25.22 T:aes128n12t8silcv3 24.96 25.22 25.37 T:seakeyakv1 25.40 25.43 25.46 T:aes128n8silcv1 25.40 25.45 25.46 T:aes128n12silcv1 29.17 29.19 29.22 T:aesjambuv1 30.56 30.59 30.62 T:proest256otrv1 34.91 34.95 34.99 T:ketjesrv1 37.37 37.46 37.66 T:aezv5 37.79 37.81 37.85 T:ketjesrv2 39.62 39.71 39.77 T:aezv4 41.82 41.93 41.99 T:riverkeyakv1 63.81 63.90 63.96 T:proest128otrv1 75.74 75.80 75.85 T:ketjejrv1 78.70 78.76 79.23 T:present80n6t4silcv3 87.56 87.64 87.72 T:deoxysneq128128v13 88.00 88.24 89.58 T:deoxysneq128128v1 116.10 118.18 118.42 T:led80n6t4silcv3 119.76 119.86 121.14 T:twine80n6clocv1 121.72 122.20 122.53 T:ketjejrv2 132.28 132.40 132.50 T:deoxyseq128128v13 132.37 132.68 132.88 T:deoxyseq128128v1 133.96 134.53 135.52 T:aezv1 137.29 137.43 137.60 T:deoxysneq256128v13 138.96 139.01 139.57 T:deoxysneq256128v1 142.09 142.24 142.65 T:aezv3 207.52 207.67 207.88 T:deoxyseq256128v1 207.82 208.03 208.13 T:deoxyseq256128v13 483.61 483.77 484.91 T:acorn128v3 446.92? 490.26? 766.38? T:acorn128 487.32 491.38 499.99 T:acorn128v2 5204.40 5210.38 5214.80 T:present80n6silcv1 5224.85 5228.16 5238.96 T:present80n6t4silcv2 6363.75 6367.98 6371.48 T:led80n6silcv1 6376.50 6418.72 6423.15 T:led80n6t4silcv2 13193.95 13194.88 13196.12 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.90 0.91 0.91 T:morus1280256v2 0.89 0.91 0.92 T:morus1280256v1 0.91 0.93 0.94 T:morus1280128v2 1.09 1.11 1.12 T:morus640128v2 1.10 1.11 1.12 T:morus640128v1 1.99 2.03 2.06 T:morus1280128v1 2.67 2.72 2.89 T:seakeyakv2 2.73 2.78 2.83 T:oceankeyakv2 2.77 2.79 2.80 T:norx6441v2 2.86 2.87 2.89 T:norx6441v3 3.29 3.35 3.39 T:lunarkeyakv2 3.36 3.37 3.39 T:norx6441v1 3.76 3.83 3.86 T:norx3241v2 3.85 3.87 3.88 T:norx3241v3 4.13 4.15 4.17 T:norx6461v2 4.20 4.22 4.23 T:norx6461v3 4.56 4.57 4.59 T:norx6444v2 4.53 4.57 4.58 T:norx6444v3 4.59 4.60 4.62 T:norx3241v1 4.68 4.71 4.91 T:tiaoxinv2 4.66 4.72 4.75 T:tiaoxinv1 4.91 4.94 4.97 T:lakekeyakv2 5.09 5.10 5.14 T:norx6461v1 5.07 5.16 5.31 T:aes128gcmv1 5.17 5.22 5.27 T:lakekeyakv1 5.49 5.51 5.54 T:norx6444v1 5.87 5.88 5.90 T:norx3261v3 5.88 5.90 5.91 T:norx3261v2 6.20 6.36 6.60 T:aes256gcmv1 6.45 6.48 6.54 T:aegis128l 7.62 7.62 7.64 T:norx3261v1 7.84 7.85 7.88 T:aegis128 8.67 8.71 8.79 T:ketjemajorv2 9.23 9.25 9.27 T:aegis256 9.57 9.61 9.64 T:riverkeyakv2 9.78 9.81 9.83 T:ascon96v1 9.83 9.87 9.89 T:ascon128av11 9.97 10.00 10.01 ascon128av12 11.43 11.47 11.50 T:ketjeminorv2 11.08 11.77 12.08 T:aeadaes128ocbtaglen128v1 11.56 12.11 12.29 T:deoxysi128v141 13.41 13.75 14.07 T:deoxysi256v141 14.72 14.74 14.76 T:ascon128v1 14.74 14.77 14.79 T:ascon128v11 14.91 14.91 14.93 ascon128v12 15.25 15.27 15.30 T:twine80n6t4clocv2 15.08 15.45 15.59 T:deoxysii128v141 16.09 16.11 16.14 T:twine80n6t4clocv3 15.80 16.28 16.61 T:aeadaes256ocbtaglen128v1 16.83 16.87 16.90 T:aes128otrcv3 17.18 17.20 17.24 T:aes128otrsv2 17.34 17.38 17.41 T:aes128otrsv1 17.27 17.60 17.82 T:deoxysii256v141 17.92 17.95 17.98 T:aes128otrsv3 18.20 18.57 19.16 T:oceankeyakv1 19.22 19.28 19.47 T:aes128otrpv2 19.31 19.33 19.36 T:aes128otrpv1 19.85 19.88 19.91 T:aes128otrpv3 21.95 21.97 21.99 T:aes256otrcv3 22.26 22.30 22.36 T:aes256otrsv2 22.54 22.59 22.63 T:aes256otrsv1 23.10 23.13 23.16 T:aes256otrsv3 23.12 23.16 23.21 T:aes128n8t8clocv2 23.13 23.17 23.20 T:aes128n12t8clocv2 23.33 23.36 23.41 T:aes128n12t8clocv3 23.24 23.39 23.47 T:aes128n12clocv1 23.40 23.45 24.06 T:aes128n8clocv1 24.27 24.31 24.38 T:aes256otrpv2 24.54 24.59 24.76 T:aes256otrpv1 24.67 24.71 24.77 T:aes128n8t8silcv2 24.70 24.74 24.80 T:aes128n12t8silcv2 25.07 25.12 25.66 T:aes256otrpv3 25.01 25.18 25.38 T:seakeyakv1 25.16 25.21 25.29 T:aes128n12t8silcv3 25.48 25.53 25.58 T:aes128n8silcv1 25.50 25.55 26.07 T:aes128n12silcv1 29.16 29.20 29.23 T:aesjambuv1 30.43 30.47 30.53 T:proest256otrv1 35.43 35.48 35.57 T:ketjesrv1 37.32 37.41 37.52 T:aezv5 38.82 38.98 39.05 T:ketjesrv2 39.53 39.57 39.70 T:aezv4 41.95 42.07 42.24 T:riverkeyakv1 62.61 62.82 64.21 T:proest128otrv1 76.03 76.17 76.29 T:ketjejrv1 79.06 79.12 79.75 T:present80n6t4silcv3 105.41 105.52 105.63 T:deoxysneq128128v13 105.82 106.09 106.44 T:deoxysneq128128v1 116.45 116.59 116.90 T:led80n6t4silcv3 119.85 120.02 120.25 T:twine80n6clocv1 118.22? 122.32? 138.17? T:ketjejrv2 132.07 132.31 132.41 T:deoxyseq128128v13 134.44 135.21 135.97 T:aezv1 142.05 142.11 142.59 T:aezv3 157.30 157.44 157.64 T:deoxysneq256128v13 158.52 158.89 159.61 T:deoxysneq256128v1 166.91 167.42 167.83 T:deoxyseq128128v1 208.17 208.37 208.49 T:deoxyseq256128v13 246.87 247.23 247.40 T:deoxyseq256128v1 485.73 486.06 487.08 T:acorn128v3 483.77 486.16 496.55 T:acorn128v2 443.91? 486.98? 769.36? T:acorn128 5214.65 5216.41 5223.56 T:present80n6t4silcv2 5210.50 5218.45 5220.52 T:present80n6silcv1 6376.55 6413.80 6419.65 T:led80n6silcv1 6418.06 6422.25 6427.62 T:led80n6t4silcv2 13193.65 13194.95 13197.06 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.90 0.90 0.91 T:morus1280256v1 0.91 0.91 0.91 T:morus1280256v2 0.91 0.92 0.94 T:morus1280128v2 1.10 1.10 1.12 T:morus640128v2 1.11 1.12 1.12 T:morus640128v1 1.96 2.04 2.05 T:morus1280128v1 2.70 2.76 2.92 T:seakeyakv2 2.77 2.78 2.79 T:norx6441v2 2.76 2.82 2.86 T:oceankeyakv2 2.85 2.86 2.87 T:norx6441v3 3.35 3.37 3.38 T:norx6441v1 3.33 3.37 3.45 T:lunarkeyakv2 3.82 3.84 3.84 T:norx3241v2 3.85 3.86 3.89 T:norx3241v3 4.12 4.13 4.15 T:norx6461v2 4.19 4.21 4.22 T:norx6461v3 4.57 4.59 4.64 T:norx6444v2 4.57 4.60 4.61 T:norx6444v3 4.60 4.61 4.62 T:norx3241v1 4.65 4.68 4.73 T:tiaoxinv1 4.68 4.74 4.90 T:tiaoxinv2 4.94 4.98 5.00 T:lakekeyakv2 5.08 5.09 5.11 T:norx6461v1 5.08 5.14 5.29 T:aes128gcmv1 5.21 5.26 5.29 T:lakekeyakv1 5.52 5.53 5.56 T:norx6444v1 5.87 5.88 5.89 T:norx3261v3 5.86 5.88 5.91 T:norx3261v2 6.25 6.34 6.58 T:aes256gcmv1 6.47 6.49 6.54 T:aegis128l 7.60 7.62 7.63 T:norx3261v1 7.85 7.86 7.87 T:aegis128 8.70 8.75 8.81 T:ketjemajorv2 9.26 9.27 9.30 T:aegis256 9.62 9.64 9.67 T:riverkeyakv2 9.79 9.81 9.83 T:ascon96v1 9.82 9.85 9.87 T:ascon128av11 9.97 10.00 10.02 ascon128av12 11.12 11.24 11.87 T:aeadaes128ocbtaglen128v1 11.45 11.50 11.52 T:ketjeminorv2 11.90 12.04 12.22 T:deoxysi128v141 13.59 13.79 14.06 T:deoxysi256v141 14.74 14.75 14.76 T:ascon128v1 14.75 14.77 14.80 T:ascon128v11 14.89 14.90 14.93 ascon128v12 15.25 15.27 15.29 T:twine80n6t4clocv2 15.19 15.49 15.69 T:deoxysii128v141 15.73 16.01 16.47 T:aeadaes256ocbtaglen128v1 16.10 16.11 16.14 T:twine80n6t4clocv3 16.86 16.88 16.89 T:aes128otrcv3 17.20 17.22 17.25 T:aes128otrsv2 17.37 17.38 17.41 T:aes128otrsv1 17.49 17.64 17.86 T:deoxysii256v141 17.95 17.98 18.02 T:aes128otrsv3 18.26 18.64 19.10 T:oceankeyakv1 19.24 19.30 19.44 T:aes128otrpv2 19.35 19.36 19.41 T:aes128otrpv1 19.89 19.92 19.96 T:aes128otrpv3 21.94 21.96 21.98 T:aes256otrcv3 22.28 22.32 22.35 T:aes256otrsv2 22.57 22.60 22.62 T:aes256otrsv1 23.15 23.18 23.20 T:aes256otrsv3 23.15 23.18 23.22 T:aes128n8t8clocv2 23.16 23.22 23.25 T:aes128n12t8clocv2 23.25 23.34 23.50 T:aes128n12clocv1 23.33 23.36 23.44 T:aes128n12t8clocv3 23.42 23.45 24.08 T:aes128n8clocv1 24.31 24.37 24.46 T:aes256otrpv2 24.57 24.62 24.82 T:aes256otrpv1 24.68 24.71 24.75 T:aes128n8t8silcv2 24.68 24.74 24.77 T:aes128n12t8silcv2 25.11 25.13 25.19 T:aes256otrpv3 24.97 25.14 25.42 T:seakeyakv1 25.19 25.24 25.36 T:aes128n12t8silcv3 25.48 25.53 25.58 T:aes128n8silcv1 25.52 25.56 26.07 T:aes128n12silcv1 29.19 29.21 29.22 T:aesjambuv1 30.41 30.45 30.49 T:proest256otrv1 35.51 35.58 35.64 T:ketjesrv1 37.32 37.37 37.41 T:aezv5 38.86 38.98 39.08 T:ketjesrv2 39.50 39.53 39.65 T:aezv4 41.97 42.03 42.13 T:riverkeyakv1 62.65 62.89 64.18 T:proest128otrv1 76.04 76.19 76.30 T:ketjejrv1 79.10 79.12 79.74 T:present80n6t4silcv3 105.47 105.56 105.65 T:deoxysneq128128v13 105.86 106.36 107.11 T:deoxysneq128128v1 116.47 116.56 116.91 T:led80n6t4silcv3 119.82 120.03 120.27 T:twine80n6clocv1 119.52? 122.20? 151.68? T:ketjejrv2 132.13 132.32 132.43 T:deoxyseq128128v13 134.31 135.02 135.80 T:aezv1 142.14 142.37 142.53 T:aezv3 157.38 157.58 157.77 T:deoxysneq256128v13 158.72 158.90 159.50 T:deoxysneq256128v1 166.57 166.95 167.48 T:deoxyseq128128v1 208.11 208.32 208.52 T:deoxyseq256128v13 246.84 247.02 247.33 T:deoxyseq256128v1 404.68 405.54 406.04 aes256gcmv1 485.82 486.02 488.28 T:acorn128v3 484.13 486.21 496.80 T:acorn128v2 443.95? 486.93? 769.36? T:acorn128 5212.09 5215.61 5220.96 T:present80n6t4silcv2 5209.08 5216.29 5220.65 T:present80n6silcv1 6371.35 6410.24 6421.64 T:led80n6silcv1 6421.02 6423.01 6426.39 T:led80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.86 0.87 0.89 T:morus1280256v1 0.89 0.90 0.91 T:morus1280256v2 0.89 0.91 0.93 T:morus1280128v2 1.03 1.04 1.06 T:morus640128v1 1.05 1.05 1.06 T:morus640128v2 1.70 1.82 1.87 T:aes128gcmv1 1.73? 1.83? 1.95? T:aes256gcmv1 1.92 1.95 1.98 T:morus1280128v1 2.07 2.16 2.25 T:lunarkeyakv2 2.13 2.17 2.28 T:oceankeyakv2 2.49 2.57 2.75 T:seakeyakv2 2.76 2.79 2.80 T:norx6441v2 2.87 2.90 2.92 T:norx6441v3 3.35 3.38 3.41 T:norx6441v1 3.86 3.88 3.90 T:norx3241v3 3.88 3.89 3.93 T:norx3241v2 4.00 4.08 4.20 T:tiaoxinv1 4.15 4.19 4.23 T:norx6461v2 4.23 4.26 4.29 T:norx6461v3 4.13 4.26 4.51 T:tiaoxinv2 4.38 4.43 4.46 T:lakekeyakv2 4.50 4.51 4.54 T:norx6444v3 4.50 4.52 4.53 T:norx6444v2 4.64 4.67 4.69 T:norx3241v1 5.03 5.05 5.07 T:norx6461v1 5.00 5.05 5.11 T:lakekeyakv1 5.44 5.46 5.49 T:norx6444v1 5.87 5.88 5.91 T:norx3261v2 5.93 5.94 5.96 T:norx3261v3 6.35 6.37 6.39 T:aegis128l 7.07 7.12 7.20 T:ketjemajorv2 7.69 7.72 7.72 T:norx3261v1 7.82 7.84 7.88 T:aegis128 8.89 8.93 8.97 T:riverkeyakv2 9.25 9.27 9.31 T:aegis256 9.71 9.74 9.77 T:ascon96v1 9.28? 9.79? 10.90? T:aeadaes128ocbtaglen128v1 9.80 9.82 9.85 T:ascon128av11 9.64 9.83 9.88 T:deoxysi128v141 9.63 9.83 9.86 T:deoxysii128v141 9.88 9.91 9.93 ascon128av12 10.31 10.38 10.45 T:ketjeminorv2 11.24 11.57 11.74 T:deoxysii256v141 11.37 11.58 12.06 T:deoxysi256v141 13.56 14.09 14.91 T:aeadaes256ocbtaglen128v1 14.64 14.67 14.69 T:ascon128v11 14.65 14.68 14.71 T:ascon128v1 14.67 14.71 14.75 ascon128v12 15.11 15.14 15.17 T:twine80n6t4clocv2 15.45 15.51 15.55 T:aes128otrsv2 15.60 15.64 15.66 T:aes128otrsv3 15.61 15.65 15.66 T:aes128otrsv1 15.89 15.91 15.97 T:aes128n12t8silcv3 15.92 15.94 15.96 T:twine80n6t4clocv3 15.92 15.95 16.00 T:aes128n8t8clocv2 15.94 15.96 16.00 T:aes128n8t8silcv2 15.93 15.97 16.01 T:aes128n12t8clocv2 15.92 16.00 16.03 T:aes128n12clocv1 15.98 16.02 16.03 T:aes128n12t8silcv2 15.99 16.03 16.09 T:aes128n12t8clocv3 16.00 16.06 16.10 T:aes128n8silcv1 16.03 16.06 16.11 T:aes128n12silcv1 16.00 16.07 16.16 T:aes128n8clocv1 16.82 16.86 17.02 T:aes128otrcv3 18.15 18.66 19.08 T:oceankeyakv1 19.45 19.50 19.55 T:aes128otrpv3 19.45 19.55 19.71 T:aes128otrpv2 19.52 19.56 19.64 T:aes128otrpv1 20.47 20.52 20.55 T:aes256otrsv2 20.78 20.82 20.84 T:aes256otrsv3 20.79 20.82 20.86 T:aes256otrsv1 21.94 21.97 22.00 T:aes256otrcv3 24.52 24.56 24.66 T:aes256otrpv2 24.64 24.68 24.70 T:aes256otrpv3 24.75 24.80 25.09 T:aes256otrpv1 24.78 24.90 25.21 T:seakeyakv1 28.16 28.19 28.24 T:aezv5 29.06 29.09 29.14 T:aesjambuv1 30.79 30.83 30.89 T:proest256otrv1 30.75 30.84 30.95 T:aezv4 32.37 32.42 32.48 T:ketjesrv1 35.26 35.35 35.43 T:ketjesrv2 39.41 39.60 39.75 T:riverkeyakv1 61.09 61.16 61.27 T:proest128otrv1 64.76 64.90 64.95 T:aezv1 71.10 71.21 71.34 T:ketjejrv1 78.56 78.60 78.93 T:present80n6t4silcv3 79.52 79.92 80.01 T:twine80n6clocv1 87.02 87.09 87.37 T:deoxyseq128128v13 87.28 87.68 87.75 T:deoxysneq128128v13 88.54 88.70 91.58 T:deoxysneq128128v1 88.55 88.88 89.86 T:deoxyseq128128v1 90.94 91.07 91.28 T:aezv3 115.56 115.91 116.38 T:ketjejrv2 115.72 117.92 118.09 T:led80n6t4silcv3 137.31 137.45 137.64 T:deoxysneq256128v13 137.42 137.58 137.85 T:deoxyseq256128v13 138.78 138.88 138.96 T:deoxyseq256128v1 139.45 139.68 139.86 T:deoxysneq256128v1 403.75 404.70 406.54 aes256gcmv1 480.95 481.92 482.46 T:acorn128v3 414.51? 485.63? 793.96? T:acorn128 480.84 486.40 493.83 T:acorn128v2 3471.29 3476.22 3479.04 T:present80n6silcv1 3478.16 3482.01 3484.02 T:present80n6t4silcv2 4212.29 4221.80 4313.43 T:led80n6t4silcv2 4304.94 4310.02 4315.60 T:led80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.85 0.86 0.87 T:morus1280256v2 0.84 0.86 0.87 T:morus1280256v1 0.89 0.91 0.93 T:morus1280128v2 1.05 1.07 1.08 T:morus640128v1 1.06 1.07 1.08 T:morus640128v2 1.72 1.82 1.90 T:aes128gcmv1 1.70? 1.84? 1.89? T:aes256gcmv1 1.92 1.96 1.98 T:morus1280128v1 2.09 2.15 2.22 T:oceankeyakv2 2.10 2.17 2.24 T:lunarkeyakv2 2.51 2.60 2.77 T:seakeyakv2 2.77 2.80 2.82 T:norx6441v2 2.86 2.88 2.91 T:norx6441v3 3.34 3.37 3.39 T:norx6441v1 3.87 3.89 3.93 T:norx3241v2 3.87 3.89 3.91 T:norx3241v3 4.10 4.14 4.16 T:tiaoxinv1 4.16 4.18 4.20 T:norx6461v2 4.22 4.24 4.27 T:norx6461v3 4.22 4.27 4.47 T:tiaoxinv2 4.39 4.42 4.45 T:lakekeyakv2 4.49 4.51 4.54 T:norx6444v2 4.52 4.53 4.55 T:norx6444v3 4.64 4.66 4.67 T:norx3241v1 4.95 5.00 5.04 T:lakekeyakv1 5.04 5.06 5.08 T:norx6461v1 5.43 5.45 5.50 T:norx6444v1 5.86 5.89 5.91 T:norx3261v3 5.88 5.89 5.91 T:norx3261v2 6.34 6.38 6.42 T:aegis128l 7.11 7.15 7.22 T:ketjemajorv2 7.70 7.72 7.74 T:norx3261v1 7.81 7.83 7.86 T:aegis128 8.91 8.95 8.96 T:riverkeyakv2 9.24 9.26 9.28 T:aegis256 9.72 9.75 9.77 T:ascon96v1 9.77 9.80 9.84 T:deoxysii128v141 9.74 9.82 9.89 T:deoxysi128v141 9.81 9.84 9.87 T:ascon128av11 9.92 9.94 9.96 ascon128av12 10.30 10.35 10.44 T:ketjeminorv2 9.50? 10.69? 11.01? T:aeadaes128ocbtaglen128v1 11.39 11.47 11.65 T:deoxysii256v141 11.39 11.51 11.58 T:deoxysi256v141 14.51 14.55 14.59 T:ascon128v11 14.62 14.65 14.70 T:ascon128v1 13.47? 14.73? 15.29? T:aeadaes256ocbtaglen128v1 14.80 14.82 14.85 ascon128v12 15.09 15.14 15.20 T:twine80n6t4clocv2 15.43 15.46 15.51 T:aes128otrsv2 15.59 15.63 15.68 T:aes128otrsv3 15.57 15.63 15.66 T:aes128otrsv1 15.88 15.91 15.98 T:aes128n12t8silcv3 15.91 15.94 15.96 T:twine80n6t4clocv3 15.92 15.95 15.96 T:aes128n12t8clocv2 15.92 15.96 16.02 T:aes128n12clocv1 15.89 15.97 16.03 T:aes128n8t8clocv2 15.94 15.99 16.02 T:aes128n8t8silcv2 15.96 15.99 16.07 T:aes128n12t8silcv2 15.93 16.02 16.10 T:aes128n8clocv1 15.97 16.03 16.07 T:aes128n12t8clocv3 16.05 16.10 16.13 T:aes128n8silcv1 16.07 16.10 16.15 T:aes128n12silcv1 16.85 16.88 16.92 T:aes128otrcv3 17.94 18.45 18.93 T:oceankeyakv1 19.42 19.46 19.57 T:aes128otrpv2 19.46 19.50 19.55 T:aes128otrpv3 19.50 19.58 19.63 T:aes128otrpv1 20.49 20.51 20.55 T:aes256otrsv2 20.79 20.82 20.86 T:aes256otrsv1 20.77 20.83 20.87 T:aes256otrsv3 21.95 21.97 22.01 T:aes256otrcv3 24.51 24.58 24.66 T:aes256otrpv2 24.64 24.68 24.72 T:aes256otrpv3 24.74 24.83 25.19 T:aes256otrpv1 24.71 24.88 25.32 T:seakeyakv1 28.10 28.17 28.23 T:aezv5 29.02 29.05 29.10 T:aesjambuv1 30.78 30.81 30.96 T:aezv4 30.76 30.82 30.87 T:proest256otrv1 32.30 32.39 32.48 T:ketjesrv1 35.30 35.37 35.42 T:ketjesrv2 39.43 39.55 39.68 T:riverkeyakv1 61.08 61.24 61.38 T:proest128otrv1 64.61 64.87 64.92 T:aezv1 71.02 71.19 71.38 T:ketjejrv1 78.54 78.60 79.04 T:present80n6t4silcv3 79.51 79.64 79.93 T:twine80n6clocv1 86.79 86.98 87.20 T:deoxyseq128128v13 87.38 87.57 87.67 T:deoxysneq128128v13 88.29 88.74 88.85 T:deoxysneq128128v1 88.57 88.78 88.97 T:deoxyseq128128v1 90.97 91.12 91.27 T:aezv3 110.96? 115.89? 148.71? T:ketjejrv2 115.89 116.02 116.09 T:led80n6t4silcv3 137.06 137.21 137.31 T:deoxysneq256128v13 137.63 137.70 137.79 T:deoxyseq256128v13 138.76 138.91 139.37 T:deoxyseq256128v1 139.12 139.26 140.24 T:deoxysneq256128v1 404.34 405.47 406.47 aes256gcmv1 481.50 482.03 482.59 T:acorn128v3 480.73 484.44 494.13 T:acorn128v2 416.96? 485.79? 802.53? T:acorn128 3474.30 3476.46 3479.38 T:present80n6silcv1 3477.48 3482.47 3485.18 T:present80n6t4silcv2 4225.84 4228.61 4231.83 T:led80n6t4silcv2 4223.39 4235.49 4324.31 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.85 0.86 0.87 T:morus1280256v1 0.86 0.86 0.87 T:morus1280256v2 0.89 0.92 0.93 T:morus1280128v2 1.06 1.07 1.08 T:morus640128v1 1.07 1.08 1.08 T:morus640128v2 1.66? 1.78? 1.97? T:aes256gcmv1 1.70 1.79 1.83 T:aes128gcmv1 1.95 1.96 1.97 T:morus1280128v1 2.06 2.13 2.20 T:lunarkeyakv2 2.10 2.16 2.23 T:oceankeyakv2 2.49 2.59 2.76 T:seakeyakv2 2.77 2.79 2.81 T:norx6441v2 2.87 2.88 2.89 T:norx6441v3 3.32 3.34 3.37 T:norx6441v1 3.87 3.90 3.92 T:norx3241v2 3.88 3.90 3.92 T:norx3241v3 4.09 4.15 4.18 T:tiaoxinv1 4.15 4.17 4.20 T:norx6461v2 4.20 4.23 4.24 T:norx6461v3 4.23 4.28 4.41 T:tiaoxinv2 4.40 4.42 4.44 T:lakekeyakv2 4.49 4.51 4.54 T:norx6444v2 4.49 4.51 4.54 T:norx6444v3 4.65 4.66 4.69 T:norx3241v1 4.97 5.01 5.04 T:lakekeyakv1 5.03 5.05 5.07 T:norx6461v1 5.43 5.47 5.52 T:norx6444v1 5.87 5.89 5.92 T:norx3261v3 5.87 5.89 5.91 T:norx3261v2 6.36 6.39 6.43 T:aegis128l 7.09 7.15 7.20 T:ketjemajorv2 7.68 7.70 7.72 T:norx3261v1 7.81 7.83 7.85 T:aegis128 8.90 8.93 8.96 T:riverkeyakv2 9.24 9.26 9.28 T:aegis256 9.70 9.74 9.76 T:ascon96v1 9.70 9.79 9.85 T:deoxysii128v141 9.80 9.83 9.87 T:deoxysi128v141 9.81 9.85 9.86 T:ascon128av11 9.91 9.93 9.97 ascon128av12 9.67? 10.10? 10.77? T:aeadaes128ocbtaglen128v1 10.29 10.35 10.40 T:ketjeminorv2 11.46 11.50 11.59 T:deoxysii256v141 11.45 11.52 11.57 T:deoxysi256v141 13.57 14.11 15.01 T:aeadaes256ocbtaglen128v1 14.52 14.55 14.56 T:ascon128v11 14.63 14.65 14.69 T:ascon128v1 14.79 14.82 14.85 ascon128v12 15.11 15.15 15.19 T:twine80n6t4clocv2 15.44 15.48 15.53 T:aes128otrsv2 15.58 15.60 15.65 T:aes128otrsv3 15.61 15.63 15.67 T:aes128otrsv1 15.91 15.94 15.97 T:aes128n12t8silcv3 15.91 15.95 15.98 T:twine80n6t4clocv3 15.90 15.95 16.01 T:aes128n8t8clocv2 15.93 15.95 16.00 T:aes128n12t8clocv2 15.93 15.96 15.98 T:aes128n12clocv1 15.97 15.99 16.05 T:aes128n12t8clocv3 15.96 16.00 16.05 T:aes128n8t8silcv2 15.89 16.01 16.07 T:aes128n8clocv1 15.98 16.04 16.09 T:aes128n12t8silcv2 16.04 16.08 16.10 T:aes128n8silcv1 16.07 16.10 16.14 T:aes128n12silcv1 16.85 16.87 16.90 T:aes128otrcv3 17.93 18.36 18.97 T:oceankeyakv1 19.43 19.46 19.52 T:aes128otrpv2 19.47 19.51 19.55 T:aes128otrpv3 19.51 19.57 19.60 T:aes128otrpv1 20.49 20.53 20.58 T:aes256otrsv2 20.78 20.81 20.85 T:aes256otrsv3 20.79 20.83 20.86 T:aes256otrsv1 21.94 21.97 21.99 T:aes256otrcv3 24.54 24.59 24.66 T:aes256otrpv2 24.65 24.69 24.72 T:aes256otrpv3 24.74 24.79 25.20 T:aes256otrpv1 24.74 24.83 25.15 T:seakeyakv1 28.06 28.13 28.24 T:aezv5 29.01 29.04 29.09 T:aesjambuv1 30.77 30.80 30.96 T:aezv4 30.76 30.81 30.86 T:proest256otrv1 32.31 32.36 32.46 T:ketjesrv1 35.29 35.36 35.42 T:ketjesrv2 39.47 39.54 39.75 T:riverkeyakv1 61.07 61.19 61.36 T:proest128otrv1 64.73 64.84 64.96 T:aezv1 71.06 71.18 71.50 T:ketjejrv1 78.53 78.57 79.13 T:present80n6t4silcv3 79.50 79.58 79.97 T:twine80n6clocv1 86.85 87.19 88.11 T:deoxyseq128128v13 87.43 87.56 87.65 T:deoxysneq128128v13 88.34 88.55 88.85 T:deoxysneq128128v1 88.42 88.72 88.93 T:deoxyseq128128v1 90.91 91.17 91.33 T:aezv3 114.46? 115.96? 127.98? T:ketjejrv2 115.89 116.01 116.11 T:led80n6t4silcv3 137.00 137.28 137.38 T:deoxysneq256128v13 137.54 137.67 137.77 T:deoxyseq256128v13 138.81 138.89 139.42 T:deoxyseq256128v1 138.87 139.32 140.06 T:deoxysneq256128v1 404.94 406.00 406.51 aes256gcmv1 481.66 482.33 482.66 T:acorn128v3 480.66 484.11 494.33 T:acorn128v2 416.89? 485.92? 802.65? T:acorn128 3472.19 3476.38 3478.65 T:present80n6silcv1 3469.62 3478.20 3482.02 T:present80n6t4silcv2 4226.27 4228.62 4230.68 T:led80n6t4silcv2 4226.49 4237.25 4330.54 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.15 1.16 1.17 T:morus1280256v1 1.17 1.17 1.18 T:morus1280128v2 1.18 1.19 1.20 T:morus1280256v2 1.24 1.25 1.26 T:morus640128v1 1.26 1.27 1.28 T:morus640128v2 2.42 2.49 2.50 T:morus1280128v1 3.27 3.28 3.28 T:norx6441v2 3.36 3.37 3.38 T:norx6441v3 3.78 3.80 3.81 T:norx6441v1 3.90 3.93 4.06 T:seakeyakv2 4.18 4.19 4.22 T:norx3241v3 4.22 4.22 4.23 T:norx3241v2 4.88 4.89 4.91 T:norx6461v2 4.92 4.94 4.97 T:norx3241v1 4.93 4.95 4.97 T:norx6461v3 5.28 5.29 5.32 T:oceankeyakv2 5.41 5.42 5.45 T:lakekeyakv2 5.68 5.69 5.71 T:norx6461v1 6.20 6.22 6.43 T:tiaoxinv2 6.18 6.23 6.24 T:lakekeyakv1 6.23 6.35 6.36 T:tiaoxinv1 6.38 6.42 6.43 T:norx3261v2 6.43 6.44 6.47 T:norx3261v3 6.53 6.56 6.57 T:norx6444v2 6.53 6.58 6.60 T:norx6444v3 6.95 7.04 7.06 T:aes128gcmv1 7.66 7.66 7.68 T:aegis128l 7.75 7.77 7.78 T:norx6444v1 8.14 8.15 8.16 T:norx3261v1 8.35 8.40 8.62 T:aes256gcmv1 8.52 8.54 8.55 T:aegis128 9.10 9.14 9.16 T:lunarkeyakv2 9.96 9.98 9.99 T:ascon96v1 10.03 10.03 10.06 T:ascon128av11 10.01 10.04 10.06 T:riverkeyakv2 10.27 10.27 10.30 ascon128av12 10.42 10.44 10.45 T:aegis256 11.07 11.21 11.50 T:deoxysi128v141 11.47 11.49 11.54 T:ketjemajorv2 12.41 12.59 12.95 T:aeadaes128ocbtaglen128v1 13.11 13.34 13.60 T:deoxysi256v141 13.51 13.53 13.58 T:ketjeminorv2 14.80 14.81 14.82 T:ascon128v11 14.87 14.87 14.89 T:ascon128v1 15.13 15.13 15.15 ascon128v12 15.84 15.85 15.90 T:twine80n6t4clocv2 16.19 16.26 16.60 T:deoxysii128v141 16.47 16.48 16.50 T:twine80n6t4clocv3 16.34 16.65 16.92 T:aeadaes256ocbtaglen128v1 17.42 17.43 17.44 T:aes128otrcv3 17.48 17.51 17.58 T:aes128otrsv3 17.91 17.93 17.99 T:aes128otrsv2 18.06 18.07 18.10 T:aes128otrsv1 19.32 19.43 19.68 T:deoxysii256v141 19.41 19.43 19.47 T:aes128otrpv3 19.93 20.01 20.05 T:aes128otrpv2 20.02 20.04 20.07 T:aes128otrpv1 22.66 22.68 22.72 T:aes256otrcv3 22.81 22.84 22.90 T:aes256otrsv3 23.12 23.14 23.17 T:aes256otrsv2 23.38 23.43 23.49 T:aes256otrsv1 23.69 23.70 23.76 T:aes128n8t8clocv2 23.67 23.73 23.74 T:aes128n12t8clocv2 23.75 23.76 23.83 T:aes128n12clocv1 23.79 23.82 23.87 T:aes128n12t8clocv3 23.84 23.87 24.44 T:aes128n8clocv1 24.73 24.75 24.78 T:aes256otrpv3 25.04 25.05 25.08 T:aes128n8t8silcv2 25.07 25.09 25.18 T:aes128n12t8silcv2 25.15 25.18 25.27 T:aes256otrpv2 25.38 25.46 25.54 T:aes256otrpv1 25.58 25.59 25.61 T:aes128n12t8silcv3 25.86 25.89 25.92 T:aes128n8silcv1 25.86 25.89 25.93 T:aes128n12silcv1 28.28 28.53 28.95 T:oceankeyakv1 29.65 29.67 29.68 T:aesjambuv1 30.39 30.48 30.62 T:seakeyakv1 33.24 33.29 33.31 T:proest256otrv1 35.38 35.44 35.53 T:aezv5 35.84 35.91 36.06 T:ketjesrv1 37.49 37.56 37.68 T:aezv4 38.95 39.02 39.04 T:ketjesrv2 43.59 43.65 43.72 T:riverkeyakv1 66.65 66.69 66.77 T:proest128otrv1 76.79 76.90 77.04 T:ketjejrv1 79.57 79.61 80.07 T:present80n6t4silcv3 88.00 88.12 88.17 T:deoxysneq128128v13 88.54 88.77 89.97 T:deoxysneq128128v1 117.19 119.16 119.24 T:led80n6t4silcv3 120.28 120.50 121.63 T:twine80n6clocv1 123.39 123.72 124.34 T:ketjejrv2 130.06 130.44 131.03 T:aezv1 133.39 133.66 133.99 T:deoxyseq128128v1 133.83 133.89 134.00 T:deoxyseq128128v13 138.11 138.33 138.41 T:deoxysneq256128v13 139.64 139.76 140.13 T:deoxysneq256128v1 142.34 142.51 142.88 T:aezv3 208.87 209.04 209.20 T:deoxyseq256128v1 209.97 210.07 210.27 T:deoxyseq256128v13 543.09 543.53 544.07 T:acorn128v3 548.57? 549.21? 817.76? T:acorn128 548.06 551.65 566.40 T:acorn128v2 5229.72 5235.74 5238.59 T:present80n6silcv1 5250.17 5252.76 5265.64 T:present80n6t4silcv2 6390.15 6394.60 6397.08 T:led80n6silcv1 6404.34 6443.79 6445.23 T:led80n6t4silcv2 13462.02 13462.92 13482.81 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.12 1.13 1.14 T:morus1280256v1 1.14 1.15 1.16 T:morus1280256v2 1.17 1.18 1.19 T:morus1280128v2 1.26 1.26 1.27 T:morus640128v1 1.28 1.28 1.29 T:morus640128v2 2.43 2.44 2.55 T:morus1280128v1 3.28 3.28 3.30 T:norx6441v2 3.35 3.36 3.39 T:norx6441v3 3.80 3.81 3.84 T:norx6441v1 3.95 3.97 4.14 T:seakeyakv2 4.16 4.18 4.18 T:norx3241v2 4.18 4.19 4.21 T:norx3241v3 4.83 4.85 4.87 T:norx6461v2 4.87 4.89 4.90 T:norx3241v1 4.90 4.92 4.93 T:norx6461v3 5.34 5.35 5.38 T:oceankeyakv2 5.41 5.42 5.45 T:lakekeyakv2 5.74 5.76 5.78 T:norx6461v1 6.04 6.07 6.10 T:lakekeyakv1 6.30 6.32 6.35 T:tiaoxinv1 6.36 6.38 6.39 T:norx3261v3 6.38 6.39 6.41 T:norx3261v2 6.41 6.44 6.64 T:tiaoxinv2 6.52 6.54 6.56 T:norx6444v2 6.55 6.56 6.57 T:norx6444v3 6.97 7.02 7.05 T:aes128gcmv1 7.65 7.66 7.71 T:aegis128l 7.75 7.78 7.80 T:norx6444v1 8.05 8.06 8.06 T:norx3261v1 8.37 8.40 8.68 T:aes256gcmv1 8.55 8.57 8.58 T:aegis128 9.14 9.16 9.21 T:lunarkeyakv2 10.03 10.05 10.09 T:ascon96v1 10.07 10.09 10.10 T:ascon128av11 10.09 10.11 10.14 T:riverkeyakv2 10.24 10.25 10.26 ascon128av12 10.39 10.41 10.42 T:aegis256 11.51 11.54 11.59 T:ketjemajorv2 12.68 12.95 13.06 T:deoxysi128v141 12.98 13.02 13.05 T:ketjeminorv2 13.63 14.01 14.27 T:aeadaes128ocbtaglen128v1 14.97 14.98 14.99 T:ascon128v1 14.98 15.00 15.02 T:ascon128v11 15.13 15.14 15.15 ascon128v12 14.96 15.26 16.12 T:deoxysi256v141 15.68 15.71 15.72 T:twine80n6t4clocv2 16.45 16.46 16.48 T:twine80n6t4clocv3 16.14 16.47 16.66 T:deoxysii128v141 17.52 17.53 17.55 T:aes128otrcv3 17.72 17.73 17.76 T:aes128otrsv2 17.88 17.89 17.91 T:aes128otrsv1 18.47 18.51 18.54 T:aes128otrsv3 18.33 18.59 18.94 T:aeadaes256ocbtaglen128v1 19.21 19.27 19.50 T:deoxysii256v141 19.73 19.77 19.85 T:aes128otrpv2 19.85 19.87 19.91 T:aes128otrpv1 20.39 20.40 20.42 T:aes128otrpv3 22.78 22.79 22.81 T:aes256otrcv3 22.95 22.96 22.97 T:aes256otrsv2 23.22 23.25 23.28 T:aes256otrsv1 23.42 23.43 23.47 T:aes128n8t8clocv2 23.41 23.46 23.48 T:aes128n12t8clocv2 23.56 23.59 23.68 T:aes128n12clocv1 23.63 23.66 23.69 T:aes128n12t8clocv3 23.75 23.78 24.36 T:aes128n8clocv1 23.84 23.86 23.88 T:aes256otrsv3 24.97 24.99 25.11 T:aes256otrpv2 25.05 25.11 25.17 T:aes128n12t8silcv2 25.07 25.11 25.14 T:aes128n8t8silcv2 25.22 25.27 25.50 T:aes256otrpv1 25.60 25.64 25.71 T:aes128n12t8silcv3 25.75 25.76 25.80 T:aes256otrpv3 25.94 25.98 26.05 T:aes128n8silcv1 25.97 26.00 26.04 T:aes128n12silcv1 28.39 28.57 29.02 T:oceankeyakv1 29.64 29.66 29.69 T:aesjambuv1 30.44 30.51 30.78 T:seakeyakv1 33.21 33.26 33.29 T:proest256otrv1 35.29 35.34 35.40 T:aezv5 36.38 36.44 36.47 T:ketjesrv1 37.40 37.43 37.50 T:aezv4 40.07 40.21 40.28 T:ketjesrv2 43.70 43.75 43.81 T:riverkeyakv1 65.59 65.68 66.95 T:proest128otrv1 77.20 77.28 77.41 T:ketjejrv1 79.93 79.99 80.56 T:present80n6t4silcv3 106.01 106.05 106.12 T:deoxysneq128128v13 106.37 106.44 106.79 T:deoxysneq128128v1 117.43 117.61 117.77 T:led80n6t4silcv3 120.40 120.58 120.73 T:twine80n6clocv1 122.13 124.25 135.38 T:ketjejrv2 130.95 131.37 131.73 T:aezv1 133.53 133.66 133.79 T:deoxyseq128128v13 142.14 142.24 142.68 T:aezv3 158.12 158.23 158.32 T:deoxysneq256128v13 159.65 159.89 160.61 T:deoxysneq256128v1 167.83 168.09 168.35 T:deoxyseq128128v1 210.21 210.51 210.58 T:deoxyseq256128v13 248.45 248.51 248.62 T:deoxyseq256128v1 545.01? 545.87? 817.19? T:acorn128 546.53 546.93 547.07 T:acorn128v3 545.83 549.32 556.82 T:acorn128v2 5239.48 5242.45 5246.21 T:present80n6t4silcv2 5236.92 5243.48 5246.41 T:present80n6silcv1 6406.04 6430.44 6436.13 T:led80n6silcv1 6441.81 6444.66 6447.94 T:led80n6t4silcv2 13463.14 13463.91 13484.24 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.12 1.12 1.13 T:morus1280256v1 1.14 1.14 1.15 T:morus1280256v2 1.17 1.18 1.18 T:morus1280128v2 1.26 1.26 1.27 T:morus640128v1 1.28 1.28 1.29 T:morus640128v2 2.41 2.42 2.51 T:morus1280128v1 3.27 3.28 3.30 T:norx6441v2 3.35 3.36 3.36 T:norx6441v3 3.81 3.82 3.83 T:norx6441v1 3.98 4.01 4.15 T:seakeyakv2 4.17 4.17 4.18 T:norx3241v2 4.18 4.18 4.20 T:norx3241v3 4.84 4.86 4.87 T:norx6461v2 4.89 4.89 4.91 T:norx3241v1 4.90 4.91 4.92 T:norx6461v3 5.38 5.40 5.42 T:oceankeyakv2 5.43 5.45 5.46 T:lakekeyakv2 5.75 5.75 5.76 T:norx6461v1 6.09 6.11 6.14 T:lakekeyakv1 6.29 6.33 6.38 T:tiaoxinv1 6.37 6.37 6.39 T:norx3261v3 6.37 6.38 6.39 T:norx3261v2 6.41 6.43 6.56 T:tiaoxinv2 6.55 6.57 6.59 T:norx6444v2 6.57 6.58 6.60 T:norx6444v3 6.98 7.02 7.25 T:aes128gcmv1 7.64 7.65 7.71 T:aegis128l 7.79 7.81 7.82 T:norx6444v1 8.05 8.05 8.06 T:norx3261v1 8.35 8.41 8.63 T:aes256gcmv1 8.55 8.57 8.59 T:aegis128 9.18 9.20 9.24 T:lunarkeyakv2 10.03 10.04 10.06 T:ascon96v1 10.08 10.09 10.11 T:ascon128av11 10.12 10.14 10.17 T:riverkeyakv2 10.23 10.23 10.24 ascon128av12 10.39 10.40 10.46 T:aegis256 11.55 11.57 11.59 T:ketjemajorv2 12.67 12.95 13.01 T:deoxysi128v141 13.01 13.02 13.07 T:ketjeminorv2 13.59 13.66 14.08 T:aeadaes128ocbtaglen128v1 14.97 14.99 14.99 T:ascon128v1 14.98 15.01 15.03 T:ascon128v11 14.98 15.09 15.32 T:deoxysi256v141 15.13 15.14 15.15 ascon128v12 15.68 15.70 15.70 T:twine80n6t4clocv2 16.31 16.40 16.61 T:deoxysii128v141 16.46 16.47 16.49 T:twine80n6t4clocv3 17.51 17.53 17.54 T:aes128otrcv3 17.75 17.76 17.77 T:aes128otrsv2 17.90 17.92 17.93 T:aes128otrsv1 18.25 18.54 18.79 T:aeadaes256ocbtaglen128v1 18.52 18.55 18.58 T:aes128otrsv3 19.23 19.25 19.47 T:deoxysii256v141 19.79 19.82 19.87 T:aes128otrpv2 19.89 19.91 19.93 T:aes128otrpv1 20.43 20.44 20.45 T:aes128otrpv3 22.78 22.78 22.81 T:aes256otrcv3 22.98 22.99 23.02 T:aes256otrsv2 23.25 23.26 23.31 T:aes256otrsv1 23.42 23.44 23.47 T:aes128n8t8clocv2 23.40 23.45 23.49 T:aes128n12t8clocv2 23.56 23.58 23.78 T:aes128n12clocv1 23.60 23.64 23.67 T:aes128n12t8clocv3 23.71 23.75 24.31 T:aes128n8clocv1 23.86 23.87 23.92 T:aes256otrsv3 25.00 25.05 25.16 T:aes256otrpv2 25.08 25.10 25.13 T:aes128n8t8silcv2 25.11 25.14 25.18 T:aes128n12t8silcv2 25.24 25.27 25.47 T:aes256otrpv1 25.59 25.63 25.73 T:aes128n12t8silcv3 25.79 25.80 25.85 T:aes256otrpv3 25.94 26.01 26.10 T:aes128n8silcv1 25.96 26.03 26.08 T:aes128n12silcv1 28.44 28.61 28.99 T:oceankeyakv1 29.63 29.65 29.67 T:aesjambuv1 30.56 30.67 30.84 T:seakeyakv1 33.18 33.22 33.26 T:proest256otrv1 35.26 35.28 35.31 T:aezv5 36.39 36.43 36.48 T:ketjesrv1 37.35 37.41 37.47 T:aezv4 40.20 40.24 40.30 T:ketjesrv2 43.74 43.80 43.83 T:riverkeyakv1 65.57 65.66 66.94 T:proest128otrv1 77.29 77.41 77.44 T:ketjejrv1 79.95 79.98 80.51 T:present80n6t4silcv3 106.06 106.10 106.17 T:deoxysneq128128v13 106.52 106.66 106.74 T:deoxysneq128128v1 117.44 117.59 117.67 T:led80n6t4silcv3 120.51 120.70 120.78 T:twine80n6clocv1 121.90? 124.40? 139.77? T:ketjejrv2 130.66 130.94 131.72 T:aezv1 133.55 133.65 133.78 T:deoxyseq128128v13 142.07 142.15 142.55 T:aezv3 158.07 158.22 158.37 T:deoxysneq256128v13 159.86 159.94 160.44 T:deoxysneq256128v1 167.52 168.05 168.60 T:deoxyseq128128v1 210.46 210.55 210.57 T:deoxyseq256128v13 248.48 248.52 248.75 T:deoxyseq256128v1 544.74? 545.71? 817.21? T:acorn128 546.24 546.63 547.03 T:acorn128v3 545.65 555.70 556.59 T:acorn128v2 674.20 674.57 675.35 aes256gcmv1 5232.27 5243.03 5245.04 T:present80n6silcv1 5239.32 5243.37 5248.57 T:present80n6t4silcv2 6401.14 6434.12 6442.15 T:led80n6silcv1 6442.11 6443.94 6446.83 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.63 4.70 4.80 T:morus640128v1 4.90 4.95 5.06 T:morus640128v2 6.34 6.53 6.71 T:morus1280256v1 6.53 6.59 7.07 T:morus1280128v2 6.86 7.05 7.27 T:morus1280256v2 10.52 10.59 10.76 T:norx3241v1 10.69 10.80 11.06 T:norx3241v2 10.80 10.88 11.02 T:norx3241v3 11.23 11.41 11.50 T:norx6441v1 11.68 11.73 11.75 T:norx6441v3 11.91 11.95 12.02 T:norx6441v2 12.62 12.73 13.22 T:morus1280128v1 15.09 15.22 15.45 T:ascon96v1 15.18 15.27 15.73 T:ascon128av11 15.84 15.97 16.31 ascon128av12 16.05 16.13 16.26 T:norx3261v2 16.05 16.16 16.25 T:norx3261v3 16.54 16.64 16.80 T:norx6461v1 16.85 16.90 16.92 T:norx6461v3 17.13 17.21 17.29 T:norx6461v2 17.17 17.21 17.28 T:norx3261v1 19.71 19.76 20.18 T:ascon128v11 19.86 19.99 20.18 T:ascon128v1 20.06 20.18 20.39 ascon128v12 20.26 20.45 20.83 T:lakekeyakv1 23.40 23.45 24.00 T:riverkeyakv2 23.43 23.64 23.95 T:lakekeyakv2 24.41 24.55 24.70 T:twine80n6t4clocv3 24.81 24.93 25.05 T:twine80n6t4clocv2 24.70 25.05 25.22 T:aegis128 28.77 28.88 29.57 T:aes128n8t8clocv2 28.77 28.91 29.73 T:aes128n12t8clocv2 29.52 29.63 29.88 T:aes128n12t8clocv3 29.62 29.89 29.96 T:aes128otrsv2 30.10 30.17 30.50 T:aes128otrsv1 30.19 30.30 30.89 T:aes128n12clocv1 30.23 30.62 30.80 T:aes128otrsv3 30.13 30.62 31.70 T:aes128n8clocv1 31.62 31.66 31.76 T:aes128otrpv2 31.53 31.98 32.26 T:aes128otrpv3 31.93 32.07 32.45 T:aes128otrpv1 32.44 32.95 33.80 T:aes128otrcv3 33.82 34.02 34.22 T:aes128n12t8silcv2 34.06 34.16 34.38 T:aes128n8t8silcv2 34.45 34.58 34.76 T:aegis128l 34.77 35.05 35.59 T:aes128n12t8silcv3 35.91 36.13 36.67 T:aes128n12silcv1 35.90 36.15 36.37 T:aes128n8silcv1 36.12 36.33 36.55 T:aegis256 36.61 37.84 38.65 T:seakeyakv2 38.02 38.37 38.50 T:aes256otrsv2 38.73 38.84 39.12 T:aes256otrsv3 38.50 39.02 39.11 T:aes256otrsv1 39.80 40.05 40.48 T:aes256otrpv3 40.04 40.13 40.60 T:aesjambuv1 39.79 40.20 40.48 T:aes256otrpv2 40.38 40.64 40.78 T:aes256otrpv1 41.27 41.75 41.98 T:aes256otrcv3 43.52 43.86 44.24 T:tiaoxinv1 44.80 45.88 46.15 T:tiaoxinv2 46.73 47.00 47.11 T:norx6444v2 46.97 47.10 47.43 T:norx6444v3 48.37 48.73 49.05 T:ketjeminorv2 48.27 48.73 49.14 T:aezv4 48.55 48.82 49.33 T:aezv5 50.14 50.61 50.92 T:deoxysi128v141 55.34 55.52 55.62 T:norx6444v1 56.67 56.98 57.37 T:ketjesrv1 59.02 59.80 61.12 T:aes128gcmv1 59.61 59.88 60.09 T:oceankeyakv2 58.00? 62.66? 68.73? T:aeadaes128ocbtaglen128v1 66.77 66.88 67.73 T:ketjesrv2 67.41 67.84 69.87 T:aes256gcmv1 68.12 68.41 69.09 T:deoxysii128v141 64.86? 69.96? 75.77? T:aeadaes256ocbtaglen128v1 72.41 72.66 73.02 T:deoxysi256v141 75.17 75.67 75.93 T:ketjemajorv2 76.41 76.66 77.05 T:riverkeyakv1 95.13 95.24 95.92 T:proest256otrv1 98.48 98.68 98.88 T:present80n6t4silcv3 99.78 100.14 100.32 T:deoxysneq128128v13 100.23 100.61 100.78 T:deoxysneq128128v1 101.69 102.17 103.42 T:ketjejrv1 129.62 130.09 130.98 T:proest128otrv1 132.40 133.41 133.88 T:twine80n6clocv1 140.24 141.84 142.55 T:led80n6t4silcv3 145.65 146.26 147.13 T:aezv1 148.62 149.11 149.51 T:lunarkeyakv2 156.05 156.25 156.50 T:deoxysneq256128v13 155.88 156.36 157.79 T:deoxyseq128128v1 157.25 157.90 158.55 T:deoxysneq256128v1 163.30 163.91 165.14 T:ketjejrv2 166.27 166.52 166.99 T:deoxyseq128128v13 178.65 179.27 180.22 T:deoxysii256v141 203.13 204.04 205.44 T:aezv3 227.72 229.19 230.95 T:seakeyakv1 243.12 243.53 244.23 T:deoxyseq256128v1 260.42 261.46 261.70 T:deoxyseq256128v13 309.02 309.91 313.34 T:oceankeyakv1 1888.95? 1904.80? 2948.80? T:acorn128 1921.45 1924.77 1925.97 T:acorn128v3 1939.30 1941.23 1971.96 T:acorn128v2 5855.28 5860.09 5865.73 T:present80n6silcv1 5856.91 5863.13 5880.77 T:present80n6t4silcv2 6985.05 7028.10 7076.62 T:led80n6silcv1 7035.59 7075.81 7117.80 T:led80n6t4silcv2 19639.13 19640.34 19643.49 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.80 4.86 5.04 T:morus640128v1 5.12 5.22 5.48 T:morus640128v2 6.18 6.34 6.67 T:morus1280256v1 6.62 6.80 6.92 T:morus1280256v2 6.93 6.99 7.43 T:morus1280128v2 10.71 10.77 10.82 T:norx3241v1 10.80 10.83 10.91 T:norx3241v2 10.95 11.05 11.20 T:norx3241v3 11.30 11.43 11.50 T:norx6441v1 11.57 11.73 11.78 T:norx6441v3 11.89 11.95 11.98 T:norx6441v2 12.83 12.87 13.56 T:morus1280128v1 15.17 15.30 15.59 T:ascon128av11 15.25 15.39 15.95 T:ascon96v1 15.84 16.03 16.14 ascon128av12 16.28 16.38 16.58 T:norx3261v2 16.25 16.48 16.69 T:norx3261v3 16.62 16.68 16.77 T:norx6461v1 16.69 16.72 16.80 T:norx6461v3 17.17 17.29 17.41 T:norx6461v2 17.22 17.30 17.34 T:norx3261v1 19.86 19.92 20.20 T:ascon128v11 20.02 20.15 20.49 T:ascon128v1 20.12 20.28 20.58 ascon128v12 20.28 20.51 20.91 T:lakekeyakv1 23.28 23.49 24.02 T:lakekeyakv2 23.45 23.55 23.88 T:riverkeyakv2 24.35 24.52 24.81 T:twine80n6t4clocv3 24.82 24.91 25.21 T:twine80n6t4clocv2 24.76 25.08 25.23 T:aegis128 28.71 28.88 29.68 T:aes128n8t8clocv2 28.79 28.93 29.71 T:aes128n12t8clocv2 29.47 29.61 29.76 T:aes128n12t8clocv3 29.66 29.73 30.09 T:aes128otrsv2 29.84 30.02 30.20 T:aes128otrsv1 30.23 30.42 31.40 T:aes128n12clocv1 30.17 30.73 30.94 T:aes128n8clocv1 30.95 31.11 31.46 T:aes128otrsv3 31.48 31.70 32.09 T:aes128otrpv2 31.86 31.99 32.40 T:aes128otrpv1 32.08 32.34 32.65 T:aes128otrpv3 32.41 32.98 33.27 T:aes128otrcv3 33.77 34.15 34.72 T:aes128n8t8silcv2 33.93 34.57 34.76 T:aes128n12t8silcv2 34.45 34.60 34.88 T:aegis128l 35.16 35.40 35.76 T:aes128n12t8silcv3 35.98 36.23 36.95 T:aes128n12silcv1 36.23 36.30 36.66 T:aegis256 36.05 36.31 36.59 T:aes128n8silcv1 36.77 37.12 38.22 T:seakeyakv2 38.01 38.10 38.37 T:aes256otrsv2 38.37 38.48 39.17 T:aes256otrsv1 39.46 39.65 39.89 T:aes256otrsv3 39.75 39.88 40.19 T:aes256otrpv2 40.02 40.20 40.50 T:aesjambuv1 40.33 40.41 40.79 T:aes256otrpv1 40.51 40.87 41.29 T:aes256otrpv3 41.37 41.53 42.14 T:aes256otrcv3 43.46 43.66 45.04 T:tiaoxinv1 45.56 45.81 46.02 T:tiaoxinv2 47.30 47.73 47.97 T:norx6444v3 47.52 47.75 48.05 T:norx6444v2 47.61 47.98 48.29 T:ketjeminorv2 48.42 48.52 48.86 T:aezv4 48.48 48.74 48.98 T:aezv5 55.30 55.50 55.95 T:norx6444v1 55.73 56.27 56.64 T:deoxysi128v141 57.52 57.73 58.16 T:ketjesrv1 58.45 58.96 60.73 T:aes128gcmv1 59.95 60.52 61.10 T:oceankeyakv2 67.06 67.76 68.91 T:aes256gcmv1 68.42 68.54 69.13 T:ketjesrv2 68.19 68.80 69.61 T:deoxysii128v141 61.59? 69.98? 73.09? T:aeadaes128ocbtaglen128v1 74.87 75.20 76.08 T:ketjemajorv2 76.55 76.74 77.09 T:riverkeyakv1 67.93? 76.76? 78.61? T:aeadaes256ocbtaglen128v1 78.92 79.27 80.08 T:deoxysi256v141 96.64 97.08 97.60 T:proest256otrv1 98.90 99.35 99.86 T:present80n6t4silcv3 102.86 103.24 103.74 T:ketjejrv1 117.80 117.95 118.20 T:deoxysneq128128v13 118.12 118.34 118.73 T:deoxysneq128128v1 129.77 131.44 134.82 T:proest128otrv1 132.84 132.95 133.07 T:twine80n6clocv1 140.21 140.66 141.16 T:led80n6t4silcv3 149.02 149.29 149.70 T:lunarkeyakv2 150.06 150.74 151.96 T:aezv1 163.92 165.44 179.39 T:ketjejrv2 166.36 166.70 168.05 T:deoxyseq128128v13 175.67 175.96 176.41 T:deoxysneq256128v13 177.26 177.77 178.34 T:deoxysneq256128v1 179.34 179.69 179.84 T:deoxysii256v141 190.49 190.95 192.02 T:deoxyseq128128v1 203.05 203.39 203.91 T:aezv3 228.72 229.99 231.11 T:seakeyakv1 261.19 262.23 263.01 T:deoxyseq256128v13 282.69 283.10 283.56 T:deoxyseq256128v1 307.62 309.36 313.35 T:oceankeyakv1 1879.30? 1900.27? 2921.27? T:acorn128 1929.21 1930.13 1931.10 T:acorn128v3 1931.93 1936.76 1964.21 T:acorn128v2 5858.35 5860.67 5871.12 T:present80n6t4silcv2 5861.73 5869.72 5876.45 T:present80n6silcv1 6895.48 6916.52 6942.67 T:led80n6silcv1 6951.59 6970.51 6992.87 T:led80n6t4silcv2 19640.34 19641.26 19647.02 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.73 4.80 4.84 T:morus640128v1 5.09 5.15 5.22 T:morus640128v2 6.17 6.20 6.27 T:morus1280256v1 6.48 6.51 6.52 T:morus1280256v2 6.93 7.01 7.30 T:morus1280128v2 10.70 10.77 10.85 T:norx3241v1 10.77 10.85 10.95 T:norx3241v2 10.95 11.04 11.13 T:norx3241v3 11.26 11.39 11.49 T:norx6441v1 11.61 11.66 11.83 T:norx6441v3 11.95 11.99 12.09 T:norx6441v2 12.70 12.84 12.98 T:morus1280128v1 15.04 15.20 15.35 T:ascon96v1 15.16 15.27 15.68 T:ascon128av11 15.73 15.80 15.88 ascon128av12 16.16 16.23 16.32 T:norx3261v2 16.20 16.34 16.53 T:norx3261v3 16.52 16.62 16.75 T:norx6461v1 16.71 16.82 16.91 T:norx6461v3 17.19 17.25 17.31 T:norx3261v1 17.22 17.34 17.53 T:norx6461v2 19.78 19.87 20.17 T:ascon128v11 19.88 20.15 20.25 T:ascon128v1 20.09 20.21 20.46 ascon128v12 20.34 20.54 20.66 T:lakekeyakv1 23.36 23.46 23.76 T:lakekeyakv2 23.51 23.56 23.62 T:riverkeyakv2 24.41 24.59 24.80 T:twine80n6t4clocv3 24.68 24.74 24.80 T:aegis128 24.77 24.90 25.09 T:twine80n6t4clocv2 28.72 28.84 29.10 T:aes128n12t8clocv2 28.70 29.01 29.53 T:aes128n8t8clocv2 29.48 29.59 30.04 T:aes128n12t8clocv3 29.82 29.89 30.17 T:aes128otrsv2 30.01 30.16 30.80 T:aes128n8clocv1 30.05 30.20 31.02 T:aes128n12clocv1 30.09 30.23 30.47 T:aes128otrsv1 31.00 31.28 31.47 T:aes128otrsv3 31.66 31.74 32.02 T:aes128otrpv2 31.89 32.01 32.27 T:aes128otrpv1 32.08 32.30 32.63 T:aes128otrpv3 32.43 32.58 32.91 T:aes128otrcv3 33.80 33.90 34.23 T:aes128n8t8silcv2 33.88 33.95 34.22 T:aes128n12t8silcv2 34.32 34.40 34.46 T:aegis128l 34.78 35.04 35.31 T:aes128n12t8silcv3 35.94 36.09 36.39 T:aes128n12silcv1 35.82 36.10 36.43 T:aes128n8silcv1 36.12 36.22 36.34 T:aegis256 36.90 37.12 38.30 T:seakeyakv2 38.06 38.20 38.42 T:aes256otrsv2 38.59 38.77 39.04 T:aes256otrsv1 39.43 39.61 39.82 T:aes256otrsv3 39.80 39.88 40.05 T:aes256otrpv2 40.08 40.21 40.47 T:aesjambuv1 40.54 40.73 40.98 T:aes256otrpv3 40.70 40.85 41.16 T:aes256otrpv1 41.36 41.43 41.88 T:aes256otrcv3 43.20 43.39 44.77 T:tiaoxinv1 45.12 45.48 45.59 T:tiaoxinv2 47.27 47.48 47.84 T:norx6444v2 47.41 47.78 47.98 T:norx6444v3 47.66 48.05 48.35 T:ketjeminorv2 48.34 48.45 48.77 T:aezv5 48.32 48.57 48.80 T:aezv4 55.41 55.66 55.77 T:norx6444v1 55.62 55.84 56.33 T:deoxysi128v141 57.57 57.88 58.07 T:ketjesrv1 58.09 58.77 59.41 T:aes128gcmv1 59.88 60.01 60.62 T:oceankeyakv2 67.00 67.60 70.03 T:aes256gcmv1 61.77? 68.41? 71.47? T:aeadaes128ocbtaglen128v1 68.30 68.52 69.01 T:deoxysii128v141 68.45 68.63 69.03 T:ketjesrv2 68.15? 74.38? 76.82? T:aeadaes256ocbtaglen128v1 74.76 75.13 75.88 T:ketjemajorv2 76.59 76.72 77.16 T:riverkeyakv1 78.77 79.29 79.73 T:deoxysi256v141 93.38 93.49 94.13 T:proest256otrv1 98.98 99.35 99.66 T:present80n6t4silcv3 102.08 103.04 103.61 T:ketjejrv1 117.77 118.10 118.55 T:deoxysneq128128v13 117.82 118.18 118.50 T:deoxysneq128128v1 128.78 129.59 131.58 T:proest128otrv1 132.55 132.74 133.06 T:twine80n6clocv1 140.13 140.41 140.65 T:led80n6t4silcv3 149.04 149.43 149.79 T:lunarkeyakv2 149.69 150.31 151.66 T:aezv1 164.62 165.73 179.28 T:ketjejrv2 166.53 166.81 167.24 T:deoxyseq128128v13 175.58 175.82 176.11 T:deoxysneq256128v13 176.95 177.55 178.23 T:deoxysneq256128v1 179.27 179.44 180.13 T:deoxysii256v141 189.89 190.66 191.21 T:deoxyseq128128v1 202.35 202.98 203.91 T:aezv3 228.27 229.29 230.50 T:seakeyakv1 261.24 261.73 262.00 T:deoxyseq256128v13 282.30 283.02 283.23 T:deoxyseq256128v1 308.77 310.01 312.91 T:oceankeyakv1 1879.85? 1902.00? 2921.29? T:acorn128 1928.34 1929.87 1930.43 T:acorn128v3 1930.82 1935.66 1963.97 T:acorn128v2 5851.34 5853.38 5863.93 T:present80n6silcv1 5854.21 5860.99 5871.39 T:present80n6t4silcv2 6850.42 6851.55 6854.14 aes256gcmv1 6890.80 6902.27 6939.18 T:led80n6silcv1 6936.73 6968.74 6983.40 T:led80n6t4silcv2