VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20240425

[Page version: 20240726 23:46:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 6.12 6.13 6.14 T:morus1280256v2 2.90? 6.15? 7.10? T:morus1280128v1 6.09 6.16 6.18 T:morus1280256v1 8.19 8.22 8.26 T:norx6441v2 6.76? 8.23? 14.66? T:norx6441v3 4.80? 8.32? 16.88? T:norx6444v2 8.34 8.36 8.39 T:morus640128v1 8.36 8.37 8.38 T:morus640128v2 8.45? 9.79? 17.00? T:norx6441v1 9.16? 10.12? 17.19? T:norx3241v3 10.34 10.36 10.37 T:morus1280128v2 6.19? 10.68? 21.55? T:norx6444v1 7.02? 11.04? 21.54? T:tiaoxinv2 -10.65? 13.31? 32.19? T:lunarkeyakv2 4.83? 13.71? 17.46? T:norx6444v3 13.61? 15.01? 25.47? T:norx3261v3 13.62? 15.03? 25.47? T:norx3261v2 9.16? 16.21? 17.18? T:norx3241v2 6.61? 16.83? 20.68? T:tiaoxinv1 16.38? 17.98? 30.39? T:norx3261v1 9.82? 18.44? 20.05? T:lakekeyakv1 19.06 19.22 19.47 T:lakekeyakv2 19.30 19.36 19.39 T:norx6461v2 19.32 19.44 19.53 T:norx3241v1 4.38? 20.09? 27.64? T:oceankeyakv2 20.05 20.14 20.17 T:norx6461v3 8.79? 20.58? 25.43? T:seakeyakv2 23.88 23.96 24.02 T:norx6461v1 24.64 24.67 24.73 T:aegis128l 15.45? 26.25? 27.18? T:ascon96v1 26.48 26.50 26.50 T:ascon128av11 27.04 27.06 27.06 ascon128av12 14.29? 28.50? 32.02? T:acorn128v3 14.98? 30.02? 33.80? T:acorn128v2 30.05 30.10 30.11 T:aegis128 16.55? 33.89? 42.57? T:ketjemajorv2 19.09? 36.22? 39.65? T:aegis256 37.85 37.86 37.88 T:aes128otrsv3 36.38? 39.52? 66.33? T:aes128otrsv2 39.73 39.74 39.76 ascon128v12 40.48 40.50 40.51 T:ascon128v1 41.36 41.38 41.38 T:ascon128v11 24.37? 42.05? 43.92? T:riverkeyakv2 24.94? 43.21? 49.28? T:ketjeminorv2 28.45? 49.84? 52.63? T:aes128otrcv3 48.37? 54.15? 92.36? T:proest256otrv1 51.81? 54.73? 90.49? T:aes128n12clocv1 54.83 54.85 54.92 T:aes128n12t8clocv2 52.12? 54.91? 90.40? T:aes128n12t8clocv3 57.93 57.97 58.70 T:aes128n12silcv1 59.93 60.87 62.28 T:oceankeyakv1 35.49? 61.81? 65.05? T:aes128otrpv2 35.50? 61.85? 65.10? T:aes128otrpv1 61.23 62.57 62.90 T:seakeyakv1 36.37? 63.16? 66.32? T:aes128otrsv1 34.23? 65.01? 72.20? T:aes128gcmv1 65.27 65.55 65.61 T:aes256otrcv3 62.70? 66.08? 109.11? T:aes128n12t8silcv2 38.02? 66.21? 69.34? T:aes128otrpv3 68.60 68.62 68.64 T:deoxysi128v141 41.05? 71.67? 75.72? T:aes256otrsv1 68.56? 72.48? 119.94? T:twine80n6t4clocv3 74.60 74.67 74.71 T:deoxysi256v141 45.58? 79.21? 83.28? T:aes256otrsv2 79.45 79.54 80.44 T:aes256otrpv1 79.55 79.57 79.69 T:aes256otrpv2 80.71 81.53 82.46 T:aes256gcmv1 47.21? 81.79? 85.76? T:aes256otrpv3 47.25? 81.99? 85.93? T:aes256otrsv3 49.08? 83.03? 85.84? T:aesjambuv1 85.85 85.97 86.29 T:aes128n8t8clocv2 51.25? 86.24? 88.95? T:aes128n8clocv1 50.45? 91.66? 103.17? T:aeadaes128ocbtaglen128v1 85.42? 91.91? 155.60? T:riverkeyakv1 100.70 101.22 108.85 T:aes128n8silcv1 103.25 103.37 103.99 T:aes128n8t8silcv2 61.83? 103.47? 107.09? T:aes128n12t8silcv3 68.30? 115.75? 119.85? T:twine80n6t4clocv2 114.86? 134.36? 137.35? T:aeadaes256ocbtaglen128v1 141.03? 148.90? 246.08? T:ketjejrv1 90.91? 153.35? 158.69? T:deoxysii128v141 101.06? 172.52? 179.41? T:ketjesrv1 110.30? 186.97? 195.01? T:ketjesrv2 117.54? 195.31? 204.35? T:deoxysii256v141 223.57 223.97 225.48 T:proest128otrv1 227.90? 241.54? 396.09? T:deoxysneq128128v1 157.69? 257.48? 265.66? T:aezv4 274.85? 287.88? 473.41? T:deoxysneq128128v13 181.49? 297.78? 307.62? T:aezv5 227.90? 383.06? 395.18? T:present80n6t4silcv3 255.69? 432.77? 447.74? T:ketjejrv2 420.78? 447.86? 733.28? T:aezv3 327.36? 545.25? 566.45? T:twine80n6clocv1 373.71? 611.26? 628.40? T:deoxysneq256128v13 363.07? 611.42? 630.83? T:deoxysneq256128v1 587.33? 618.54? 1019.26? T:deoxyseq128128v13 463.85? 764.46? 785.65? T:aezv1 783.45 783.51 786.76 T:deoxyseq128128v1 917.77 919.37 926.80 T:led80n6t4silcv3 734.64? 1220.62? 1260.37? T:deoxyseq256128v1 1233.85 1244.03 1251.56 T:deoxyseq256128v13 3970.74? 5924.27? 6322.37? T:acorn128 12112.86? 12125.61? 20839.28? T:present80n6t4silcv2 12110.37 12660.76 12670.35 T:present80n6silcv1 13939.55 14008.69 14026.14 T:led80n6t4silcv2 13967.89 14022.23 14090.92 T:led80n6silcv1 37866.85? 37891.80? 63846.10? aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 6.21 6.23 6.25 T:morus1280256v2 2.93? 6.27? 7.23? T:morus1280128v1 6.22 6.28 6.32 T:morus1280256v1 6.76? 8.28? 14.79? T:norx6441v3 8.22 8.28 8.31 T:norx6441v2 4.79? 8.34? 16.92? T:norx6444v2 8.48 8.50 8.52 T:morus640128v1 8.47 8.50 8.52 T:morus640128v2 8.50? 9.82? 17.03? T:norx6441v1 9.17? 10.12? 17.19? T:norx3241v3 10.14 10.18 10.20 T:morus1280128v2 6.23? 10.68? 21.49? T:norx6444v1 7.78? 11.93? 23.14? T:tiaoxinv2 -10.58? 12.86? 31.62? T:lunarkeyakv2 4.78? 13.79? 17.65? T:norx6444v3 13.62? 15.02? 25.47? T:norx3261v3 13.63? 15.04? 25.47? T:norx3261v2 9.17? 16.24? 17.14? T:norx3241v2 9.65? 17.89? 19.41? T:lakekeyakv1 16.52? 18.10? 30.60? T:norx3261v1 18.27 18.45 18.89 T:lakekeyakv2 4.20? 18.83? 26.44? T:oceankeyakv2 7.76? 18.98? 23.06? T:tiaoxinv1 19.37 19.44 19.46 T:norx6461v2 19.57 19.67 19.76 T:norx3241v1 20.30 20.36 20.40 T:norx6461v3 8.67? 20.46? 24.54? T:seakeyakv2 23.63 23.67 23.77 T:norx6461v1 24.60 24.68 25.32 T:aegis128l 15.40? 26.12? 27.07? T:ascon96v1 26.35 26.37 26.39 T:ascon128av11 26.92 26.94 26.96 ascon128av12 14.34? 27.01? 30.52? T:acorn128v3 14.36? 29.00? 32.80? T:acorn128v2 30.13 30.14 30.27 T:aegis128 14.90? 33.64? 39.75? T:ketjemajorv2 19.27? 36.47? 39.95? T:aegis256 39.15 39.17 39.21 T:aes128otrsv3 39.73 39.74 39.75 ascon128v12 39.96 39.99 40.02 T:ascon128v1 40.96 40.99 41.02 T:ascon128v11 38.12? 41.11? 69.36? T:aes128otrsv2 25.54? 42.79? 44.65? T:riverkeyakv2 24.43? 44.88? 48.26? T:ketjeminorv2 28.28? 49.57? 52.28? T:aes128otrcv3 48.02? 53.76? 91.90? T:proest256otrv1 53.90? 56.80? 93.59? T:aes128n12t8clocv3 58.09 58.18 58.73 T:aes128n12silcv1 60.67 60.70 60.81 T:aes128n12t8clocv2 35.34? 60.87? 64.07? T:aes128otrpv2 60.15 61.18 62.46 T:oceankeyakv1 61.78 62.20 63.08 T:seakeyakv1 35.80? 62.43? 65.71? T:aes128otrpv1 59.70? 62.98? 104.01? T:aes128n12clocv1 40.81? 64.75? 71.57? T:aes128gcmv1 64.94 65.20 65.29 T:aes256otrcv3 61.97? 65.30? 107.84? T:aes128n12t8silcv2 38.46? 66.24? 69.49? T:aes128otrsv1 39.00? 67.26? 70.52? T:aes128otrpv3 67.34? 71.25? 117.88? T:twine80n6t4clocv3 41.53? 72.69? 76.61? T:aes256otrsv1 77.59 77.81 77.85 T:deoxysi128v141 78.73 78.78 78.87 T:aes256otrpv2 80.22 80.30 80.88 T:aes256otrpv1 80.95 81.71 82.17 T:aes256gcmv1 48.67? 81.99? 85.22? T:aesjambuv1 47.33? 82.28? 86.39? T:aes256otrsv2 48.43? 83.89? 87.93? T:aes256otrsv3 48.65? 84.26? 88.27? T:aes256otrpv3 85.61 85.66 85.78 T:deoxysi256v141 90.49 90.61 90.74 T:aes128n8t8clocv2 54.72? 92.02? 94.90? T:aes128n8clocv1 86.67? 95.59? 158.34? T:riverkeyakv1 61.58? 103.74? 107.10? T:aes128n12t8silcv3 103.84 103.91 104.17 T:aes128n8t8silcv2 99.80 105.77 107.92 T:aes128n8silcv1 69.03? 117.02? 121.14? T:twine80n6t4clocv2 66.48? 123.81? 135.84? T:aeadaes128ocbtaglen128v1 140.32? 148.24? 244.78? T:ketjejrv1 90.43? 152.83? 158.18? T:deoxysii128v141 160.98? 171.82? 182.99? T:aeadaes256ocbtaglen128v1 101.56? 173.56? 180.61? T:ketjesrv1 109.94? 187.94? 196.03? T:ketjesrv2 113.58? 194.97? 203.28? T:deoxysii256v141 223.52 223.70 223.74 T:proest128otrv1 153.00? 257.04? 264.85? T:aezv4 176.49? 297.22? 306.92? T:aezv5 297.31? 312.41? 514.55? T:deoxysneq128128v1 344.44? 363.37? 592.60? T:deoxysneq128128v13 228.74? 385.89? 398.00? T:present80n6t4silcv3 259.39? 437.06? 451.92? T:ketjejrv2 421.66? 447.61? 732.66? T:aezv3 326.88? 543.05? 558.99? T:twine80n6clocv1 587.91? 619.63? 1017.14? T:deoxyseq128128v13 471.96? 763.71? 783.12? T:aezv1 473.50? 775.54? 796.68? T:deoxysneq256128v13 468.83? 775.79? 799.33? T:deoxysneq256128v1 921.48 921.59 930.33 T:led80n6t4silcv3 1002.53 1003.36 1013.03 T:deoxyseq128128v1 1232.16 1244.94 1245.64 T:deoxyseq256128v13 930.88? 1549.56? 1604.72? T:deoxyseq256128v1 4039.05? 6009.23? 6412.42? T:acorn128 12112.24? 12127.56? 20833.00? T:present80n6t4silcv2 12112.47 12667.36 12684.14 T:present80n6silcv1 14014.78 14029.77 14045.06 T:led80n6t4silcv2 14031.55 14043.54 14058.13 T:led80n6silcv1 37864.03? 37878.81? 63835.90? aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 6.26 6.27 6.27 T:morus1280256v2 2.98? 6.27? 7.24? T:morus1280128v1 6.27 6.32 6.33 T:morus1280256v1 8.51 8.52 8.52 T:morus640128v1 8.52 8.52 8.52 T:morus640128v2 8.52 8.55 8.58 T:norx6441v2 7.01? 8.55? 15.23? T:norx6441v3 5.03? 8.63? 17.35? T:norx6444v2 8.78? 10.13? 17.52? T:norx6441v1 9.17? 10.13? 17.20? T:norx3241v3 10.20 10.21 10.22 T:morus1280128v2 6.46? 10.96? 21.94? T:norx6444v1 7.83? 12.98? 23.10? T:tiaoxinv2 -6.15? 13.29? 32.06? T:lunarkeyakv2 5.04? 14.22? 18.08? T:norx6444v3 13.62? 15.04? 25.48? T:norx3261v3 13.63? 15.04? 25.47? T:norx3261v2 9.17? 16.24? 17.19? T:norx3241v2 16.52? 18.13? 30.63? T:norx3261v1 10.05? 18.43? 20.02? T:lakekeyakv1 18.75 18.84 18.93 T:lakekeyakv2 7.83? 18.94? 22.97? T:tiaoxinv1 8.71? 19.28? 26.86? T:oceankeyakv2 19.72 19.72 19.72 T:norx3241v1 19.82 19.85 19.88 T:norx6461v2 20.77 20.82 20.88 T:norx6461v3 8.88? 20.87? 25.25? T:seakeyakv2 24.10 24.11 24.17 T:norx6461v1 24.64 24.72 25.35 T:aegis128l 15.40? 26.14? 27.07? T:ascon96v1 26.35 26.38 26.39 T:ascon128av11 26.94 26.95 26.95 ascon128av12 13.35? 27.01? 30.52? T:acorn128v3 14.36? 29.01? 32.78? T:acorn128v2 30.12 30.17 30.26 T:aegis128 15.10? 34.05? 40.20? T:ketjemajorv2 19.27? 36.44? 39.93? T:aegis256 39.43 39.46 39.50 T:aes128otrsv3 39.75 39.75 39.75 ascon128v12 39.99 40.00 40.02 T:ascon128v1 40.98 41.00 41.02 T:ascon128v11 38.37? 41.60? 69.76? T:aes128otrsv2 25.12? 43.23? 45.13? T:riverkeyakv2 24.70? 45.32? 48.95? T:ketjeminorv2 28.29? 49.56? 52.31? T:aes128otrcv3 48.06? 55.40? 91.88? T:proest256otrv1 53.91? 57.11? 93.59? T:aes128n12t8clocv3 58.08 58.14 58.59 T:aes128n12silcv1 60.68 60.77 60.95 T:aes128n12t8clocv2 35.56? 61.27? 64.49? T:aes128otrpv2 60.96 61.65 63.08 T:oceankeyakv1 61.81 62.49 63.40 T:seakeyakv1 36.03? 62.89? 66.17? T:aes128otrpv1 59.72? 62.97? 104.01? T:aes128n12clocv1 34.57? 64.89? 71.36? T:aes128gcmv1 64.95 65.19 65.26 T:aes256otrcv3 61.91? 65.32? 107.81? T:aes128n12t8silcv2 40.80? 66.63? 69.91? T:aes128otrsv1 39.23? 68.06? 71.43? T:aes128otrpv3 67.34? 71.30? 117.85? T:twine80n6t4clocv3 41.78? 73.09? 77.03? T:aes256otrsv1 77.99 78.09 78.27 T:deoxysi128v141 79.13 79.19 79.22 T:aes256otrpv2 80.71 80.77 81.33 T:aes256otrpv1 81.16 81.64 82.22 T:aes256gcmv1 48.42? 82.43? 85.22? T:aesjambuv1 47.47? 82.64? 86.91? T:aes256otrsv2 48.66? 84.32? 88.40? T:aes256otrsv3 48.93? 84.69? 88.72? T:aes256otrpv3 85.36 85.43 86.17 T:deoxysi256v141 90.48 90.54 90.75 T:aes128n8t8clocv2 54.75? 92.01? 94.87? T:aes128n8clocv1 86.92? 93.42? 158.85? T:riverkeyakv1 99.75 100.20 108.02 T:aes128n8silcv1 61.64? 103.67? 107.28? T:aes128n12t8silcv3 103.85 104.13 107.06 T:aes128n8t8silcv2 69.02? 117.00? 121.13? T:twine80n6t4clocv2 65.88? 124.00? 134.89? T:aeadaes128ocbtaglen128v1 140.57? 148.72? 245.26? T:ketjejrv1 90.68? 153.27? 158.64? T:deoxysii128v141 161.10? 172.14? 183.22? T:aeadaes256ocbtaglen128v1 101.80? 173.97? 180.90? T:ketjesrv1 109.65? 188.36? 196.48? T:ketjesrv2 113.97? 195.75? 203.71? T:deoxysii256v141 223.67 223.72 223.91 T:proest128otrv1 153.28? 256.54? 264.31? T:aezv4 176.75? 296.80? 306.34? T:aezv5 297.19? 312.16? 514.57? T:deoxysneq128128v1 344.64? 363.56? 592.96? T:deoxysneq128128v13 228.76? 385.36? 397.99? T:present80n6t4silcv3 259.58? 437.48? 452.32? T:ketjejrv2 421.48? 445.05? 732.30? T:aezv3 494.41? 508.28? 1493.56? aes256gcmv1 326.81? 543.12? 558.86? T:twine80n6clocv1 588.18? 619.84? 1017.55? T:deoxyseq128128v13 463.01? 763.25? 783.03? T:aezv1 465.31? 775.81? 799.30? T:deoxysneq256128v1 473.05? 775.94? 797.14? T:deoxysneq256128v13 921.50 921.61 930.47 T:led80n6t4silcv3 1002.49 1003.08 1012.41 T:deoxyseq128128v1 1223.20 1234.78 1245.57 T:deoxyseq256128v13 930.64? 1549.68? 1602.00? T:deoxyseq256128v1 4038.76? 6010.43? 6404.29? T:acorn128 12112.99? 12124.17? 20841.07? T:present80n6t4silcv2 12111.63 12663.79 12671.04 T:present80n6silcv1 14001.77 14015.65 14039.11 T:led80n6t4silcv2 14006.82 14028.48 14044.48 T:led80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 6.24 6.26 6.28 T:morus1280256v2 6.25 6.27 6.31 T:morus1280256v1 3.35? 6.30? 6.84? T:morus1280128v1 7.73? 7.77? 18.01? T:tiaoxinv1 7.78 7.80 7.83 T:morus640128v1 7.79 7.81 7.84 T:morus640128v2 8.15 8.16 8.19 T:norx6441v2 7.18? 8.17? 14.04? T:norx6441v3 6.19? 8.21? 15.17? T:norx6444v2 9.34? 9.35? 16.82? T:norx3241v2 8.81? 9.73? 16.49? T:norx6441v1 9.34? 10.06? 16.82? T:norx3241v3 10.26 10.27 10.30 T:morus1280128v2 7.70? 10.29? 18.93? T:norx6444v1 8.68? 10.88? 10.90? T:tiaoxinv2 6.34? 13.56? 15.68? T:norx6444v3 13.92? 14.97? 25.00? T:norx3261v2 13.91? 14.98? 25.02? T:norx3261v3 5.05? 16.56? 21.49? T:oceankeyakv2 16.81 16.93 16.99 T:lakekeyakv2 8.06? 17.40? 20.24? T:seakeyakv2 16.69? 17.94? 29.95? T:norx3261v1 9.98? 17.96? 19.17? T:lakekeyakv1 2.08? 18.50? 28.08? T:lunarkeyakv2 19.21 19.26 19.50 T:norx6461v2 19.35 19.39 19.47 T:norx3241v1 20.07 20.09 20.10 T:norx6461v3 20.02? 20.11? 37.86? T:aegis256 23.86 23.89 23.89 T:norx6461v1 13.14? 24.09? 24.70? T:aegis128l 15.55? 26.24? 27.09? T:ascon96v1 26.35 26.36 26.38 T:ascon128av11 26.79 26.81 26.85 ascon128av12 15.30? 27.88? 29.99? T:acorn128v3 14.82? 29.27? 34.12? T:ketjemajorv2 16.20? 29.50? 31.75? T:acorn128v2 18.94? 30.06? 31.24? T:riverkeyakv2 30.58 30.62 30.81 T:aegis128 31.89 34.01 34.05 T:aes128otrsv2 34.53 34.54 34.59 T:aes128otrsv3 39.61 39.62 39.64 ascon128v12 39.98 40.00 40.02 T:ascon128v1 23.04? 40.71? 44.08? T:ketjeminorv2 38.85? 40.78? 67.20? T:aes128n12clocv1 40.82 40.86 40.90 T:aes128n12t8clocv2 40.98 40.99 41.02 T:ascon128v11 39.79? 41.72? 68.50? T:aes128n12t8clocv3 27.00? 42.89? 46.65? T:aes128gcmv1 43.15 43.19 43.44 T:aes128n12silcv1 28.86? 49.72? 51.90? T:aes128otrcv3 47.24? 50.36? 81.65? T:aes128n12t8silcv2 50.79 51.15 52.86 T:aes256gcmv1 31.94? 54.46? 56.62? T:aes128otrsv1 49.87? 54.64? 91.69? T:proest256otrv1 59.60 60.02 61.15 T:oceankeyakv1 31.36? 60.72? 61.89? T:seakeyakv1 36.27? 61.36? 63.71? T:aes128otrpv2 36.00? 61.37? 63.76? T:aes128otrpv1 35.93? 61.47? 63.84? T:aes128otrpv3 64.14 64.23 64.27 T:aes128n8t8clocv2 38.57? 64.37? 66.35? T:aes128n8clocv1 38.17? 65.11? 68.08? T:aes256otrsv1 65.14 65.31 65.42 T:aes256otrcv3 66.81? 66.84? 115.59? T:twine80n6t4clocv2 68.12 68.14 68.15 T:deoxysi128v141 40.93? 70.08? 72.83? T:aes256otrsv2 41.73? 71.26? 74.06? T:aes256otrsv3 68.43? 71.80? 118.07? T:twine80n6t4clocv3 42.95? 74.25? 74.27? T:deoxysi256v141 75.40 75.97 80.74 T:aes128n8silcv1 44.82? 76.36? 79.29? T:aes256otrpv3 45.86? 76.98? 79.22? T:aes128n12t8silcv3 77.31 77.34 77.39 T:aes128n8t8silcv2 78.45 78.47 78.50 T:aes256otrpv2 78.44 78.52 78.96 T:aes256otrpv1 48.90? 82.11? 82.14? T:aesjambuv1 83.35? 89.67? 146.56? T:riverkeyakv1 49.92? 91.32? 97.50? T:aeadaes128ocbtaglen128v1 106.05? 112.24? 186.17? T:ketjesrv2 67.87? 114.08? 118.46? T:deoxysii128v141 119.17 125.30 131.65 T:aeadaes256ocbtaglen128v1 136.00? 142.60? 234.69? T:ketjejrv1 87.91? 146.07? 152.13? T:deoxysii256v141 98.58? 166.28? 171.68? T:ketjesrv1 223.57 224.95 225.32 T:proest128otrv1 136.83? 227.71? 233.43? T:aezv4 229.77 240.03 240.60 T:deoxysneq128128v1 146.28? 240.17? 246.24? T:aezv5 244.53? 245.61? 422.32? T:twine80n6clocv1 275.36? 288.67? 472.41? T:deoxysneq128128v13 304.11? 306.33? 517.17? T:aezv1 321.03 336.04 338.10 T:aezv3 348.75? 349.52? 583.27? T:deoxyseq128128v1 369.64? 372.25? 627.74? T:deoxysneq256128v13 228.35? 382.41? 393.28? T:present80n6t4silcv3 252.42? 425.61? 438.76? T:ketjejrv2 441.92 465.50 465.67 T:deoxyseq128128v13 548.42 548.46 551.73 T:led80n6t4silcv3 551.94? 560.14? 918.02? T:deoxyseq256128v13 369.57? 612.05? 629.82? T:deoxysneq256128v1 916.28 920.77 946.64 T:deoxyseq256128v1 3354.88? 4411.58? 6311.68? T:acorn128 9096.75? 9500.59? 15610.14? T:present80n6silcv1 9101.14? 9504.55? 15625.32? T:present80n6t4silcv2 17489.83 17917.16 17935.14 T:led80n6t4silcv2 17940.70 17965.20 18042.61 T:led80n6silcv1 19389.16? 32662.61? 32678.71? aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 3.39? 6.35? 6.91? T:morus1280128v1 6.32 6.36 6.37 T:morus1280256v2 6.33 6.37 6.38 T:morus1280256v1 7.85 7.87 7.89 T:morus640128v1 7.88 7.89 7.92 T:morus640128v2 8.18 8.20 8.21 T:norx6441v2 7.19? 8.20? 14.13? T:norx6441v3 6.21? 8.24? 15.19? T:norx6444v2 8.42? 8.46? 19.23? T:tiaoxinv1 9.33? 9.57? 16.79? T:norx3241v2 8.83? 9.74? 16.50? T:norx6441v1 9.34? 10.05? 16.82? T:norx3241v3 10.16 10.16 10.16 T:morus1280128v2 7.78? 10.27? 18.92? T:norx6444v1 8.55? 10.74? 10.80? T:tiaoxinv2 6.26? 13.59? 15.81? T:norx6444v3 13.92? 14.98? 25.01? T:norx3261v2 13.91? 14.98? 25.02? T:norx3261v3 4.98? 15.74? 20.99? T:oceankeyakv2 16.04 16.20 16.61 T:lakekeyakv2 10.42? 17.23? 20.03? T:seakeyakv2 9.82? 17.38? 18.58? T:lakekeyakv1 16.70? 18.00? 30.07? T:norx3261v1 2.01? 18.26? 27.75? T:lunarkeyakv2 19.24 19.30 19.54 T:norx6461v2 19.38 19.48 19.57 T:norx3241v1 19.94 20.02 20.04 T:norx6461v3 20.26? 20.46? 38.38? T:aegis256 23.53 23.62 23.68 T:norx6461v1 13.10? 24.04? 24.65? T:aegis128l 15.52? 26.19? 27.03? T:ascon96v1 26.22 26.24 26.46 T:ascon128av11 26.77 26.78 26.79 ascon128av12 15.23? 27.76? 29.87? T:acorn128v3 15.88? 29.01? 31.27? T:acorn128v2 15.19? 29.11? 32.43? T:ketjemajorv2 17.85? 30.48? 31.69? T:riverkeyakv2 30.57 30.65 30.68 T:aegis128 32.66? 33.04? 58.16? T:aes128otrsv1 32.74 34.91 35.00 T:aes128otrsv2 35.13 35.17 35.22 T:aes128otrsv3 39.74 39.75 39.81 ascon128v12 39.86 39.88 40.14 T:ascon128v1 22.99? 40.38? 42.63? T:ketjeminorv2 40.86 40.87 40.89 T:ascon128v11 40.72? 42.91? 70.11? T:aes128n12t8clocv3 23.47? 43.00? 46.69? T:aes128gcmv1 43.28 43.46 43.58 T:aes128n12silcv1 43.74 43.76 43.85 T:aes128n12t8clocv2 42.85? 45.01? 73.96? T:aes128n12clocv1 46.84? 49.21? 81.04? T:aes128n12t8silcv2 29.77? 49.56? 51.80? T:aes128otrcv3 51.07 51.51 51.88 T:aes256gcmv1 49.78? 54.28? 91.47? T:proest256otrv1 59.69 60.23 61.30 T:oceankeyakv1 33.20? 60.73? 61.84? T:seakeyakv1 35.89? 60.85? 63.30? T:aes128otrpv2 37.50? 61.67? 64.05? T:aes128otrpv1 37.86? 61.94? 64.58? T:aes128otrpv3 64.97 65.20 65.24 T:aes256otrcv3 38.41? 65.59? 68.37? T:aes256otrsv1 66.43 66.48 66.62 T:aes128n8t8clocv2 67.18? 67.23? 116.22? T:twine80n6t4clocv2 40.30? 67.25? 69.31? T:aes128n8clocv1 67.82? 70.99? 117.04? T:twine80n6t4clocv3 42.19? 71.43? 74.38? T:aes256otrsv2 42.52? 72.23? 75.04? T:aes256otrsv3 72.58 72.62 72.78 T:deoxysi128v141 74.94 75.28 80.25 T:aes128n8silcv1 46.25? 77.18? 79.53? T:aes128n12t8silcv3 77.45 77.48 77.51 T:aes128n8t8silcv2 45.77? 77.56? 80.65? T:aes256otrpv3 77.96 78.02 78.08 T:aes256otrpv2 78.76 78.85 79.43 T:aes256otrpv1 45.85? 79.77? 79.85? T:deoxysi256v141 49.45? 81.62? 82.02? T:aesjambuv1 83.96? 88.99? 147.51? T:riverkeyakv1 60.57? 107.22? 114.64? T:aeadaes128ocbtaglen128v1 106.35? 112.55? 186.63? T:ketjesrv2 67.77? 113.75? 118.00? T:deoxysii128v141 135.67? 142.23? 234.05? T:ketjejrv1 86.16? 146.34? 151.58? T:deoxysii256v141 139.49? 153.82? 155.89? T:aeadaes256ocbtaglen128v1 98.67? 166.73? 173.28? T:ketjesrv1 223.76 223.82 226.10 T:proest128otrv1 139.05? 227.43? 233.59? T:aezv4 143.76? 239.88? 246.21? T:aezv5 244.12? 245.24? 418.49? T:twine80n6clocv1 264.44 276.61 277.91 T:deoxysneq128128v1 303.68? 306.65? 518.00? T:aezv1 311.50? 325.71? 531.72? T:deoxysneq128128v13 320.88 336.44 338.12 T:aezv3 229.31? 383.29? 394.19? T:present80n6t4silcv3 414.93? 418.27? 692.57? T:deoxyseq128128v1 419.72? 420.53? 709.77? T:deoxysneq256128v13 257.28? 425.55? 438.08? T:ketjejrv2 441.03 464.84 465.70 T:deoxyseq128128v13 549.47 550.12 552.42 T:led80n6t4silcv3 553.05? 556.86? 918.12? T:deoxyseq256128v13 420.14? 694.37? 718.19? T:deoxysneq256128v1 1080.71 1085.95 1115.56 T:deoxyseq256128v1 3381.46? 4415.93? 6366.62? T:acorn128 9098.40? 9502.86? 15615.26? T:present80n6silcv1 9102.67? 9506.36? 15626.69? T:present80n6t4silcv2 17494.88 17934.60 17944.71 T:led80n6t4silcv2 17956.65 17963.98 17976.29 T:led80n6silcv1 19381.03? 32664.74? 32678.77? aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 3.42? 6.37? 6.95? T:morus1280128v1 6.37 6.38 6.38 T:morus1280256v2 6.37 6.39 6.39 T:morus1280256v1 7.89 7.89 7.89 T:morus640128v1 7.89 7.90 7.90 T:morus640128v2 7.31? 8.32? 14.34? T:norx6441v3 8.31 8.34 8.35 T:norx6441v2 8.45? 8.51? 19.34? T:tiaoxinv1 6.33? 8.58? 15.42? T:norx6444v2 9.34? 9.63? 16.81? T:norx3241v2 8.96? 9.89? 16.73? T:norx6441v1 9.34? 10.03? 16.82? T:norx3241v3 10.15 10.17 10.18 T:morus1280128v2 7.92? 10.53? 19.14? T:norx6444v1 8.59? 10.78? 10.80? T:tiaoxinv2 6.43? 13.82? 16.03? T:norx6444v3 13.92? 14.97? 25.00? T:norx3261v2 13.92? 14.98? 25.01? T:norx3261v3 5.04? 15.95? 24.73? T:oceankeyakv2 16.35 16.41 16.52 T:lakekeyakv2 8.17? 17.46? 20.27? T:seakeyakv2 9.95? 17.63? 18.82? T:lakekeyakv1 16.75? 18.27? 30.07? T:norx3261v1 2.11? 18.44? 27.87? T:lunarkeyakv2 19.25 19.34 19.69 T:norx6461v2 19.47 19.51 19.58 T:norx3241v1 20.19 20.24 20.28 T:norx6461v3 20.22? 20.47? 38.39? T:aegis256 23.77 23.81 23.85 T:norx6461v1 13.15? 24.09? 24.68? T:aegis128l 15.54? 26.20? 27.05? T:ascon96v1 26.24 26.24 26.26 T:ascon128av11 26.79 26.80 26.88 ascon128av12 15.25? 27.75? 29.88? T:acorn128v3 16.28? 29.01? 31.28? T:acorn128v2 14.92? 29.31? 32.66? T:ketjemajorv2 30.60 30.69 30.86 T:aegis128 17.96? 30.69? 31.93? T:riverkeyakv2 32.86? 33.16? 58.38? T:aes128otrsv1 32.86 35.03 35.12 T:aes128otrsv2 35.31 35.34 35.37 T:aes128otrsv3 39.76 39.76 39.85 ascon128v12 39.87 39.89 40.12 T:ascon128v1 23.12? 40.60? 42.88? T:ketjeminorv2 40.87 40.89 40.90 T:ascon128v11 40.75? 42.68? 70.11? T:aes128n12t8clocv3 23.35? 42.99? 46.63? T:aes128gcmv1 43.24 43.29 43.53 T:aes128n12silcv1 43.76 43.76 43.84 T:aes128n12t8clocv2 42.84? 45.14? 73.97? T:aes128n12clocv1 46.81? 49.20? 81.03? T:aes128n12t8silcv2 28.78? 49.53? 51.80? T:aes128otrcv3 51.38 51.51 51.75 T:aes256gcmv1 49.76? 54.05? 91.49? T:proest256otrv1 59.90 60.27 61.37 T:oceankeyakv1 31.28? 60.94? 62.05? T:seakeyakv1 36.03? 61.07? 63.43? T:aes128otrpv2 36.28? 61.89? 64.32? T:aes128otrpv1 36.35? 62.39? 64.58? T:aes128otrpv3 64.96 65.19 65.24 T:aes256otrcv3 39.95? 65.85? 68.63? T:aes256otrsv1 66.45 66.48 66.57 T:aes128n8t8clocv2 67.18? 67.22? 116.21? T:twine80n6t4clocv2 40.31? 67.26? 69.30? T:aes128n8clocv1 67.82? 71.10? 117.03? T:twine80n6t4clocv3 43.25? 71.64? 74.52? T:aes256otrsv2 42.49? 72.44? 75.10? T:aes256otrsv3 72.92 72.96 73.02 T:deoxysi128v141 74.94 75.57 80.33 T:aes128n8silcv1 46.98? 77.20? 79.57? T:aes128n12t8silcv3 77.44 77.47 77.50 T:aes128n8t8silcv2 47.03? 77.82? 80.70? T:aes256otrpv3 78.19 78.24 78.30 T:aes256otrpv2 78.99 79.03 79.63 T:aes256otrpv1 46.18? 79.64? 80.06? T:deoxysi256v141 48.84? 82.02? 82.03? T:aesjambuv1 84.10? 90.44? 147.79? T:riverkeyakv1 60.31? 107.41? 114.40? T:aeadaes128ocbtaglen128v1 106.46? 112.68? 186.91? T:ketjesrv2 69.40? 114.00? 117.66? T:deoxysii128v141 135.44? 142.38? 233.76? T:ketjejrv1 142.78 143.58 154.64 T:aeadaes256ocbtaglen128v1 88.70? 146.69? 152.25? T:deoxysii256v141 99.27? 166.95? 173.50? T:ketjesrv1 223.78 223.80 225.38 T:proest128otrv1 138.54? 227.10? 232.68? T:aezv4 143.69? 239.60? 245.96? T:aezv5 244.09? 245.20? 418.47? T:twine80n6clocv1 264.41 276.37 277.56 T:deoxysneq128128v1 303.61? 305.87? 517.55? T:aezv1 311.67? 326.99? 531.97? T:deoxysneq128128v13 320.79 336.20 338.04 T:aezv3 229.16? 383.29? 394.14? T:present80n6t4silcv3 414.79? 418.15? 692.50? T:deoxyseq128128v1 420.56? 423.12? 711.91? T:deoxysneq256128v13 254.11? 425.78? 438.82? T:ketjejrv2 440.95 464.96 465.81 T:deoxyseq128128v13 549.47 550.04 552.70 T:led80n6t4silcv3 553.16? 557.56? 918.82? T:deoxyseq256128v13 420.39? 694.34? 716.09? T:deoxysneq256128v1 1080.72 1086.04 1114.67 T:deoxyseq256128v1 698.88? 1496.91? 1500.21? aes256gcmv1 3381.67? 4414.25? 6367.86? T:acorn128 9098.00? 9502.20? 15615.38? T:present80n6silcv1 9103.93? 9507.36? 15623.89? T:present80n6t4silcv2 17493.39 17927.21 17935.02 T:led80n6t4silcv2 17960.27 17964.53 17979.55 T:led80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 6.34 6.36 6.37 T:morus1280256v1 6.35 6.37 6.39 T:morus1280256v2 3.02? 6.37? 7.33? T:morus1280128v1 7.24 7.27 7.28 T:morus640128v2 7.24 7.27 7.28 T:morus640128v1 6.63? 8.08? 14.38? T:norx6444v2 8.06 8.09 8.09 T:norx6441v2 6.63? 8.09? 14.40? T:norx6441v3 8.32? 9.63? 16.75? T:norx6441v1 8.49? 9.90? 17.25? T:norx6444v1 9.01? 9.94? 16.92? T:norx3241v3 10.16 10.18 10.20 T:morus1280128v2 6.83? 10.80? 21.25? T:tiaoxinv2 -11.41? 11.63? 30.20? T:lunarkeyakv2 3.41? 11.64? 19.05? T:oceankeyakv2 6.87? 13.39? 14.86? T:norx6444v3 14.17 14.27 14.36 T:lakekeyakv2 13.49? 14.87? 25.22? T:norx3261v2 13.50? 14.91? 25.26? T:norx3261v3 5.51? 15.07? 18.96? T:tiaoxinv1 8.18? 15.86? 17.56? T:lakekeyakv1 5.87? 15.96? 19.99? T:seakeyakv2 9.02? 15.97? 16.89? T:norx3241v2 16.23? 17.83? 30.18? T:norx3261v1 19.04 19.11 19.17 T:norx6461v2 19.18 19.22 19.30 T:norx3241v1 20.00 20.03 20.05 T:norx6461v3 9.20? 21.08? 26.13? T:aes128gcmv1 20.89 21.20 22.14 T:aes256gcmv1 23.39 23.52 23.55 T:aegis128l 23.67 23.72 23.76 T:norx6461v1 10.48? 24.99? 30.34? T:ketjemajorv2 26.22 26.24 26.26 T:ascon128av11 15.37? 26.25? 27.25? T:ascon96v1 26.53 26.56 26.58 ascon128av12 26.81 26.83 26.86 T:aes128n12t8clocv2 25.18? 26.86? 44.73? T:aes128n12clocv1 13.54? 27.25? 30.81? T:acorn128v3 15.35? 27.57? 29.30? T:riverkeyakv2 28.43 28.46 28.52 T:aes128n12silcv1 25.62? 28.54? 48.57? T:aes128otrsv2 26.87? 28.63? 47.30? T:aes128n12t8clocv3 14.39? 29.00? 32.76? T:acorn128v2 31.06 31.12 31.22 T:aegis128 31.16 31.18 31.19 T:aes128otrsv3 30.93? 33.10? 55.04? T:aes128n12t8silcv2 18.44? 35.03? 38.44? T:aegis256 19.25? 35.88? 38.99? T:ketjeminorv2 39.49 39.50 39.51 T:ascon128v1 39.50 39.50 39.50 ascon128v12 40.60 40.61 40.62 T:ascon128v11 42.29 42.32 42.44 T:aes128n8t8clocv2 25.20? 42.47? 44.37? T:aes128n8clocv1 25.83? 45.65? 48.64? T:aes128otrsv1 27.68? 49.50? 52.82? T:aes128otrcv3 49.72 50.08 52.70 T:aes128n8silcv1 29.47? 50.49? 52.62? T:aes128n12t8silcv3 50.73 50.78 50.79 T:aes128n8t8silcv2 47.82? 54.75? 94.67? T:proest256otrv1 32.21? 56.66? 59.91? T:aes128otrpv3 32.76? 58.43? 62.59? T:aes256otrsv1 58.72 59.21 60.34 T:oceankeyakv1 59.71 60.32 60.97 T:seakeyakv1 34.03? 60.52? 64.42? T:aes256otrsv3 34.05? 60.54? 64.33? T:aes256otrsv2 34.69? 60.87? 64.21? T:aes128otrpv1 35.28? 60.88? 64.17? T:aes128otrpv2 64.97 65.21 65.25 T:aes256otrcv3 67.59 67.62 67.64 T:deoxysi128v141 42.09? 70.75? 74.82? T:aes256otrpv3 67.25? 70.93? 117.18? T:twine80n6t4clocv3 73.81 73.88 73.92 T:deoxysi256v141 43.97? 74.73? 78.29? T:deoxysii128v141 77.36 77.40 77.43 T:aes256otrpv2 77.38 77.45 77.55 T:aes256otrpv1 48.02? 81.25? 84.00? T:aesjambuv1 78.65? 84.99? 143.87? T:riverkeyakv1 50.47? 90.04? 102.13? T:aeadaes128ocbtaglen128v1 56.32? 96.29? 101.78? T:deoxysii256v141 99.84? 99.96? 180.06? T:ketjesrv2 64.26? 108.76? 112.47? T:twine80n6t4clocv2 112.55? 117.15? 136.20? T:aeadaes256ocbtaglen128v1 128.37? 136.26? 225.31? T:ketjejrv1 93.53? 159.99? 166.47? T:ketjesrv1 110.72? 181.47? 185.87? T:aezv5 118.64? 197.35? 202.05? T:aezv4 222.73 223.90 224.04 T:proest128otrv1 215.90? 226.45? 374.06? T:aezv3 229.15? 240.01? 394.83? T:deoxysneq128128v1 147.66? 245.63? 251.58? T:aezv1 163.63? 272.51? 280.81? T:twine80n6clocv1 274.36? 288.69? 472.82? T:deoxysneq128128v13 289.45? 306.34? 507.12? T:deoxyseq128128v13 226.29? 381.25? 393.77? T:present80n6t4silcv3 383.04 383.10 385.93 T:deoxyseq128128v1 244.56? 413.96? 429.35? T:ketjejrv2 364.71? 611.89? 632.49? T:deoxyseq256128v1 371.79? 612.38? 629.28? T:deoxysneq256128v13 367.32? 612.63? 630.01? T:deoxysneq256128v1 614.14 616.42 619.64 T:deoxyseq256128v13 917.23 917.76 929.59 T:led80n6t4silcv3 505.69? 1500.80? 1931.07? aes256gcmv1 3143.46? 4051.24? 6367.17? T:acorn128 6332.57? 6339.41? 10453.38? T:present80n6silcv1 6020.05? 6339.91? 10461.73? T:present80n6t4silcv2 7271.24? 7315.12? 12022.90? T:led80n6t4silcv2 7282.53 7325.63 7371.89 T:led80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 6.41 6.42 6.43 T:morus1280256v2 6.39 6.43 6.45 T:morus1280256v1 3.05? 6.44? 7.38? T:morus1280128v1 7.22 7.24 7.27 T:morus640128v2 7.22 7.25 7.25 T:morus640128v1 6.62? 8.08? 14.39? T:norx6441v3 8.06 8.09 8.10 T:norx6441v2 6.65? 8.10? 14.56? T:norx6444v2 8.33? 9.65? 16.76? T:norx6441v1 5.74? 9.66? 19.55? T:tiaoxinv2 8.44? 9.93? 17.31? T:norx6444v1 9.02? 9.98? 16.92? T:norx3241v3 10.08 10.10 10.14 T:morus1280128v2 -11.24? 11.58? 30.09? T:lunarkeyakv2 -0.15? 11.64? 19.02? T:oceankeyakv2 6.80? 13.39? 14.96? T:norx6444v3 14.16 14.28 14.40 T:lakekeyakv2 13.48? 14.89? 25.24? T:norx3261v2 13.50? 14.90? 25.26? T:norx3261v3 5.48? 15.13? 19.09? T:tiaoxinv1 5.86? 15.92? 20.06? T:seakeyakv2 8.33? 15.94? 17.62? T:lakekeyakv1 9.02? 15.97? 16.92? T:norx3241v2 16.22? 17.86? 30.19? T:norx3261v1 19.05 19.06 19.13 T:norx6461v2 19.19 19.24 19.35 T:norx3241v1 19.51 19.60 19.69 T:norx6461v3 20.86 21.03 21.68 T:aes256gcmv1 8.90? 21.15? 25.89? T:aes128gcmv1 23.36 23.44 23.51 T:norx6461v1 23.41 23.47 23.54 T:aegis128l 10.50? 25.02? 30.33? T:ketjemajorv2 26.10 26.13 26.15 T:ascon128av11 15.35? 26.25? 27.26? T:ascon96v1 26.61 26.62 26.62 ascon128av12 26.79 26.83 26.87 T:aes128n12t8clocv2 25.23? 27.09? 44.72? T:aes128n12clocv1 15.49? 27.62? 29.69? T:riverkeyakv2 28.45 28.48 28.77 T:aes128n12silcv1 14.27? 28.50? 32.08? T:acorn128v3 25.62? 28.52? 48.54? T:aes128otrsv2 26.85? 28.57? 47.32? T:aes128n12t8clocv3 15.18? 29.00? 32.81? T:acorn128v2 30.98 31.01 31.04 T:aegis128 31.13 31.17 31.23 T:aes128otrsv3 30.89? 33.08? 55.05? T:aes128n12t8silcv2 19.26? 35.90? 39.12? T:ketjeminorv2 18.97? 35.93? 39.38? T:aegis256 39.73 39.75 39.75 ascon128v12 39.74 39.77 40.21 T:ascon128v1 40.72 40.72 40.77 T:ascon128v11 42.28 42.34 42.42 T:aes128n8t8clocv2 25.23? 42.47? 44.39? T:aes128n8clocv1 25.74? 45.64? 48.64? T:aes128otrsv1 27.71? 49.54? 52.89? T:aes128otrcv3 49.79 50.06 52.66 T:aes128n8silcv1 29.46? 50.48? 52.61? T:aes128n12t8silcv3 50.71 50.74 50.78 T:aes128n8t8silcv2 47.79? 54.82? 94.64? T:proest256otrv1 32.17? 56.65? 59.96? T:aes128otrpv3 32.80? 58.41? 62.39? T:aes256otrsv1 58.70 59.22 60.31 T:oceankeyakv1 59.76 60.32 61.06 T:seakeyakv1 34.51? 60.52? 63.90? T:aes256otrsv3 33.99? 60.54? 64.34? T:aes256otrsv2 34.67? 60.88? 64.18? T:aes128otrpv1 34.70? 60.91? 64.26? T:aes128otrpv2 64.99 65.18 65.26 T:aes256otrcv3 67.59 67.62 67.66 T:deoxysi128v141 40.19? 70.73? 74.85? T:aes256otrpv3 67.25? 70.95? 117.18? T:twine80n6t4clocv3 73.92 74.00 74.06 T:deoxysi256v141 43.68? 74.58? 78.09? T:deoxysii128v141 77.36 77.43 77.49 T:aes256otrpv2 77.37 77.49 78.11 T:aes256otrpv1 48.22? 81.22? 83.99? T:aesjambuv1 79.65? 86.00? 143.81? T:riverkeyakv1 48.67? 90.95? 105.85? T:aeadaes128ocbtaglen128v1 54.58? 95.65? 101.12? T:deoxysii256v141 99.80? 99.92? 180.08? T:ketjesrv2 64.26? 108.74? 112.59? T:twine80n6t4clocv2 108.02? 134.45? 139.93? T:aeadaes256ocbtaglen128v1 129.07? 137.39? 225.27? T:ketjejrv1 93.40? 160.00? 168.47? T:ketjesrv1 109.10? 181.43? 185.80? T:aezv5 121.52? 197.50? 202.19? T:aezv4 223.91 224.02 224.03 T:proest128otrv1 216.15? 226.66? 373.20? T:aezv3 228.99? 239.94? 394.79? T:deoxysneq128128v1 147.63? 245.76? 251.64? T:aezv1 162.02? 272.47? 280.79? T:twine80n6clocv1 274.29? 288.87? 472.66? T:deoxysneq128128v13 289.31? 306.30? 507.06? T:deoxyseq128128v13 227.22? 381.26? 393.80? T:present80n6t4silcv3 383.06 383.12 387.90 T:deoxyseq128128v1 245.36? 414.00? 429.34? T:ketjejrv2 365.01? 611.90? 636.18? T:deoxyseq256128v1 373.21? 612.28? 629.36? T:deoxysneq256128v13 368.68? 612.65? 630.09? T:deoxysneq256128v1 615.71 619.58 627.20 T:deoxyseq256128v13 917.63 919.36 926.19 T:led80n6t4silcv3 508.14? 1494.68? 1925.27? aes256gcmv1 3162.06? 3992.91? 6389.27? T:acorn128 6330.10? 6337.65? 10455.21? T:present80n6silcv1 6019.21? 6339.28? 10459.56? T:present80n6t4silcv2 7323.51? 7331.73? 12032.98? T:led80n6t4silcv2 7334.40 7338.36 7343.22 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 6.44 6.46 6.48 T:morus1280256v1 3.10? 6.46? 7.41? T:morus1280128v1 6.46 6.46 6.47 T:morus1280256v2 7.27 7.27 7.27 T:morus640128v1 7.27 7.27 7.27 T:morus640128v2 8.06 8.07 8.10 T:norx6441v2 6.62? 8.09? 14.42? T:norx6441v3 6.64? 8.09? 14.75? T:norx6444v2 8.32? 9.66? 16.77? T:norx6441v1 5.76? 9.67? 19.58? T:tiaoxinv2 8.44? 9.93? 17.32? T:norx6444v1 9.03? 9.98? 16.93? T:norx3241v3 10.13 10.14 10.18 T:morus1280128v2 -11.30? 11.60? 30.15? T:lunarkeyakv2 -0.08? 11.66? 19.05? T:oceankeyakv2 6.82? 13.40? 14.96? T:norx6444v3 14.15 14.24 14.33 T:lakekeyakv2 13.50? 14.91? 25.26? T:norx3261v3 13.50? 14.91? 25.25? T:norx3261v2 5.51? 15.18? 19.10? T:tiaoxinv1 5.80? 15.93? 20.11? T:seakeyakv2 8.29? 15.94? 17.66? T:lakekeyakv1 9.03? 15.97? 16.93? T:norx3241v2 16.28? 17.87? 30.20? T:norx3261v1 19.29 19.32 19.32 T:norx3241v1 18.62 19.35 19.59 T:norx6461v2 19.54 19.62 19.67 T:norx6461v3 20.92? 21.12? 23.77? T:aes256gcmv1 8.89? 21.16? 25.99? T:aes128gcmv1 23.40 23.49 23.51 T:norx6461v1 23.46 23.49 23.56 T:aegis128l 10.48? 24.99? 30.32? T:ketjemajorv2 26.11 26.14 26.15 T:ascon128av11 15.38? 26.25? 27.29? T:ascon96v1 26.62 26.62 26.63 ascon128av12 26.80 26.82 26.86 T:aes128n12t8clocv2 25.20? 26.89? 44.73? T:aes128n12clocv1 15.69? 27.62? 29.43? T:riverkeyakv2 28.44 28.47 29.12 T:aes128n12silcv1 14.27? 28.50? 32.05? T:acorn128v3 26.85? 28.53? 47.32? T:aes128n12t8clocv3 25.65? 28.53? 48.51? T:aes128otrsv2 14.35? 29.00? 32.81? T:acorn128v2 30.68 31.03 31.06 T:aegis128 31.16 31.18 31.23 T:aes128otrsv3 30.93? 33.08? 55.04? T:aes128n12t8silcv2 19.23? 35.90? 39.12? T:ketjeminorv2 19.01? 35.96? 39.41? T:aegis256 39.75 39.75 39.77 ascon128v12 39.75 39.77 39.78 T:ascon128v1 40.73 40.73 40.77 T:ascon128v11 42.20 42.31 42.43 T:aes128n8t8clocv2 25.26? 42.47? 44.34? T:aes128n8clocv1 25.76? 45.64? 48.63? T:aes128otrsv1 27.70? 49.54? 52.90? T:aes128otrcv3 31.23? 50.48? 52.62? T:aes128n12t8silcv3 49.82 50.57 52.62 T:aes128n8silcv1 50.71 50.74 50.76 T:aes128n8t8silcv2 48.05? 54.98? 94.47? T:proest256otrv1 34.38? 56.51? 59.86? T:aes128otrpv3 32.82? 58.42? 62.39? T:aes256otrsv1 58.74 59.21 60.31 T:oceankeyakv1 59.75 60.29 61.02 T:seakeyakv1 33.99? 60.54? 64.37? T:aes256otrsv2 34.39? 60.54? 64.39? T:aes256otrsv3 34.68? 60.89? 64.24? T:aes128otrpv1 34.69? 60.89? 64.28? T:aes128otrpv2 65.10 65.17 65.23 T:aes256otrcv3 67.59 67.66 67.67 T:deoxysi128v141 40.17? 70.76? 74.83? T:aes256otrpv3 67.25? 70.96? 117.18? T:twine80n6t4clocv3 73.91 74.02 74.12 T:deoxysi256v141 43.68? 74.64? 78.10? T:deoxysii128v141 77.35 77.40 77.44 T:aes256otrpv2 77.38 77.51 78.09 T:aes256otrpv1 48.23? 81.63? 84.41? T:aesjambuv1 78.65? 84.99? 142.25? T:riverkeyakv1 46.79? 90.39? 101.96? T:aeadaes128ocbtaglen128v1 60.03? 95.77? 101.36? T:deoxysii256v141 99.79? 99.93? 180.08? T:ketjesrv2 64.28? 108.76? 112.48? T:twine80n6t4clocv2 114.08? 124.94? 136.00? T:aeadaes256ocbtaglen128v1 128.99? 136.24? 224.23? T:ketjejrv1 93.44? 160.01? 168.57? T:ketjesrv1 109.16? 181.31? 185.92? T:aezv5 118.77? 197.46? 202.22? T:aezv4 223.88 223.92 224.01 T:proest128otrv1 216.15? 226.71? 373.20? T:aezv3 228.99? 240.00? 394.68? T:deoxysneq128128v1 149.11? 245.73? 251.62? T:aezv1 163.78? 272.49? 280.78? T:twine80n6clocv1 274.21? 287.19? 472.56? T:deoxysneq128128v13 289.30? 306.33? 507.06? T:deoxyseq128128v13 227.12? 381.25? 393.28? T:present80n6t4silcv3 383.00 383.08 386.89 T:deoxyseq128128v1 245.40? 414.01? 429.32? T:ketjejrv2 365.26? 611.87? 632.22? T:deoxyseq256128v1 373.21? 612.27? 632.36? T:deoxysneq256128v13 367.54? 612.65? 630.43? T:deoxysneq256128v1 615.73 619.50 622.89 T:deoxyseq256128v13 917.64 919.34 925.65 T:led80n6t4silcv3 500.10? 1493.07? 1932.09? aes256gcmv1 3156.38? 3993.28? 6385.83? T:acorn128 6330.91? 6337.30? 10456.14? T:present80n6silcv1 6019.20? 6338.47? 10461.69? T:present80n6t4silcv2 7330.79? 7337.90? 12036.12? T:led80n6t4silcv2 7334.86 7341.48 7345.23 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 7.63 7.64 7.65 T:morus1280256v1 4.82? 7.66? 7.70? T:morus1280128v1 7.66 7.68 7.69 T:morus1280256v2 8.75 8.76 8.79 T:morus640128v1 8.83 8.84 8.87 T:morus640128v2 9.75 9.75 9.77 T:norx6441v2 9.77? 9.78? 15.62? T:norx6441v3 10.96? 10.97? 17.53? T:norx3241v2 10.96? 10.98? 17.53? T:norx3241v3 11.05? 11.07? 17.68? T:norx6441v1 11.98? 12.01? 19.13? T:norx6444v2 12.33 12.36 12.37 T:morus1280128v2 13.62? 13.64? 21.82? T:tiaoxinv1 14.60 14.62 14.64 T:tiaoxinv2 14.88? 14.92? 23.77? T:norx6444v1 16.25? 16.27? 25.98? T:norx3261v2 16.26? 16.28? 26.00? T:norx3261v3 18.72 18.77 18.89 T:lakekeyakv2 19.03? 19.06? 30.43? T:norx3261v1 12.49? 19.92? 19.95? T:norx6444v3 20.58 20.61 20.65 T:norx3241v1 13.17? 21.10? 21.17? T:lakekeyakv1 22.81 23.01 23.03 T:norx6461v2 23.68 23.70 23.76 T:norx6461v3 15.41? 24.45? 24.76? T:seakeyakv2 16.83? 26.90? 26.91? T:ascon96v1 26.99 27.00 27.01 T:norx6461v1 27.02 27.02 27.03 T:ascon128av11 27.47 27.49 27.55 ascon128av12 17.78? 28.47? 29.04? T:aegis128l 18.21? 29.34? 29.40? T:oceankeyakv2 19.78? 31.60? 31.62? T:riverkeyakv2 20.40? 32.59? 32.61? T:acorn128v3 33.23 33.28 33.46 T:aegis128 21.66? 34.60? 34.62? T:acorn128v2 35.71 35.73 35.78 T:aes128otrsv2 36.43 36.44 36.47 T:aes128otrsv3 23.84? 38.08? 39.55? T:ketjemajorv2 24.94? 39.89? 39.92? T:aegis256 40.24 40.24 40.27 ascon128v12 40.62 40.63 40.65 T:ascon128v1 41.37 41.39 41.41 T:aes128n12t8clocv2 41.49? 41.52? 66.34? T:aes128n12clocv1 41.63 41.64 41.66 T:ascon128v11 42.15? 42.18? 67.37? T:aes128n12t8clocv3 44.00 44.08 44.12 T:aes128n12silcv1 27.37? 44.80? 44.81? T:ketjeminorv2 29.84? 47.61? 47.78? T:lunarkeyakv2 50.32? 50.34? 80.54? T:aes128n12t8silcv2 32.57? 51.71? 51.90? T:aes128gcmv1 33.12? 52.90? 52.97? T:aes128otrcv3 35.83? 57.14? 57.18? T:aes128otrsv1 59.51? 59.55? 95.20? T:proest256otrv1 60.34 60.64 60.99 T:aes256gcmv1 40.16? 64.00? 64.23? T:aes128otrpv3 40.17? 64.19? 64.34? T:aes128otrpv1 40.49? 64.19? 64.22? T:aes128otrpv2 64.83 64.86 65.00 T:aes128n8t8clocv2 41.00? 65.26? 65.42? T:aes128n8clocv1 43.11? 68.74? 68.95? T:aes256otrsv1 69.17 69.29 69.39 T:aes256otrcv3 71.00 71.01 71.02 T:deoxysi128v141 71.29? 71.31? 114.07? T:twine80n6t4clocv2 72.64? 72.68? 116.22? T:twine80n6t4clocv3 47.55? 73.32? 73.37? T:aes256otrsv2 46.68? 74.70? 74.71? T:aes256otrsv3 74.77 75.02 75.13 T:seakeyakv1 77.26 77.66 81.89 T:aes128n8silcv1 48.96? 78.21? 78.38? T:aes128n12t8silcv3 78.47 78.51 78.54 T:aes128n8t8silcv2 49.71? 79.52? 79.58? T:deoxysi256v141 51.51? 79.70? 79.74? T:aes256otrpv3 82.00 82.02 82.08 T:aes256otrpv2 82.06 82.10 82.49 T:aes256otrpv1 83.38 83.40 83.41 T:aesjambuv1 92.05? 92.09? 147.27? T:riverkeyakv1 91.84 92.84 93.04 T:oceankeyakv1 68.31? 101.38? 108.54? T:aeadaes128ocbtaglen128v1 115.55? 116.24? 185.36? T:ketjesrv2 73.21? 116.84? 117.39? T:deoxysii128v141 136.93 143.17 144.09 T:aeadaes256ocbtaglen128v1 144.45? 144.48? 230.60? T:ketjejrv1 99.19? 154.00? 154.45? T:deoxysii256v141 106.52? 170.40? 170.43? T:ketjesrv1 136.65? 217.66? 217.84? T:aezv4 147.24? 230.72? 230.86? T:aezv5 233.23 234.37 235.10 T:proest128otrv1 241.27 241.31 242.17 T:deoxysneq128128v1 289.27? 289.30? 462.67? T:deoxysneq128128v13 299.43? 302.38? 480.15? T:aezv1 331.61? 332.06? 530.98? T:aezv3 241.29? 386.53? 386.57? T:present80n6t4silcv3 385.60? 389.37? 615.20? T:deoxysneq256128v13 257.74? 410.59? 413.57? T:twine80n6clocv1 269.24? 430.03? 432.44? T:ketjejrv2 470.21? 470.25? 746.73? T:deoxyseq128128v13 578.26 578.30 581.50 T:led80n6t4silcv3 587.28 587.36 592.30 T:deoxyseq128128v1 585.62? 590.68? 928.23? T:deoxyseq256128v13 615.40 615.45 621.01 T:deoxysneq256128v1 582.03? 922.76? 928.64? T:deoxyseq256128v1 4173.98? 6681.52? 7932.31? T:acorn128 9547.75? 9550.80? 15289.85? T:present80n6silcv1 9553.85? 9556.22? 15298.26? T:present80n6t4silcv2 10928.63? 10934.14? 17520.33? T:led80n6t4silcv2 10953.41 10967.37 11003.05 T:led80n6silcv1 20813.70? 33322.09? 33344.36? aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 7.71 7.73 7.75 T:morus1280256v1 4.85? 7.75? 7.76? T:morus1280128v1 7.77 7.77 7.78 T:morus1280256v2 8.95 9.03 9.23 T:morus640128v2 8.88 9.09 9.24 T:morus640128v1 9.81 9.82 9.85 T:norx6441v2 9.83? 9.86? 15.73? T:norx6441v3 11.07? 11.09? 17.69? T:norx6441v1 10.95? 11.28? 17.51? T:norx3241v2 11.24? 11.64? 17.61? T:norx3241v3 12.23 12.24 12.24 T:morus1280128v2 12.02? 12.33? 19.17? T:norx6444v2 14.41? 14.41? 23.01? T:tiaoxinv1 14.53 14.57 14.59 T:tiaoxinv2 14.87? 14.87? 23.73? T:norx6444v1 16.26? 16.28? 26.00? T:norx3261v3 16.26? 16.56? 25.99? T:norx3261v2 17.95 18.00 18.16 T:lakekeyakv2 19.08? 19.17? 30.51? T:norx3261v1 12.61? 20.07? 20.11? T:norx6444v3 13.13? 20.42? 20.50? T:lakekeyakv1 20.69 20.71 20.78 T:norx3241v1 23.10 23.12 23.20 T:norx6461v2 23.64 23.67 23.74 T:norx6461v3 15.43? 24.40? 24.56? T:seakeyakv2 26.70 26.77 26.84 T:norx6461v1 16.79? 26.85? 26.87? T:ascon96v1 26.90 26.91 26.94 T:ascon128av11 27.45 27.45 27.46 ascon128av12 17.77? 28.43? 28.99? T:aegis128l 18.19? 28.77? 28.85? T:oceankeyakv2 20.06? 32.00? 32.06? T:riverkeyakv2 20.36? 32.53? 32.54? T:acorn128v3 33.17 33.19 33.24 T:aegis128 21.90? 34.17? 34.18? T:acorn128v2 36.71 36.75 36.79 T:aes128otrsv2 37.09 37.10 37.14 T:aes128otrsv3 24.00? 37.86? 37.90? T:ketjemajorv2 40.36 40.36 40.37 ascon128v12 25.28? 40.49? 40.52? T:aegis256 40.50 40.51 40.87 T:ascon128v1 41.51 41.51 41.53 T:ascon128v11 43.12? 43.14? 68.92? T:aes128n12t8clocv3 44.15 44.22 44.35 T:aes128n12silcv1 44.26 44.29 44.32 T:aes128n12t8clocv2 27.86? 44.53? 44.56? T:ketjeminorv2 45.75? 45.97? 72.90? T:aes128n12clocv1 29.73? 47.29? 47.44? T:lunarkeyakv2 49.96? 49.98? 79.94? T:aes128n12t8silcv2 32.85? 51.65? 51.85? T:aes128gcmv1 32.95? 52.67? 52.77? T:aes128otrcv3 37.10? 58.76? 58.81? T:aes128otrsv1 59.32? 59.36? 94.96? T:proest256otrv1 60.70 60.83 61.09 T:aes256gcmv1 40.16? 63.78? 63.83? T:aes128otrpv2 40.45? 64.56? 64.61? T:aes128otrpv1 40.64? 64.68? 64.75? T:aes128otrpv3 67.12 67.21 67.36 T:aes128n8t8clocv2 44.67? 68.15? 68.32? T:aes128n8clocv1 69.12 69.15 69.20 T:aes256otrcv3 43.41? 69.24? 69.29? T:aes256otrsv1 71.72? 71.77? 114.74? T:twine80n6t4clocv2 72.04? 72.06? 115.25? T:twine80n6t4clocv3 74.18 74.63 75.17 T:seakeyakv1 47.17? 74.84? 74.97? T:aes256otrsv2 47.65? 75.71? 75.73? T:aes256otrsv3 76.17 76.24 76.27 T:deoxysi128v141 76.75 76.84 81.46 T:aes128n8silcv1 49.20? 78.43? 78.79? T:aes128n12t8silcv3 78.58 78.65 78.71 T:aes128n8t8silcv2 50.92? 80.99? 81.03? T:aes256otrpv3 81.66 81.69 81.72 T:aes256otrpv2 82.46 82.51 83.08 T:aes256otrpv1 83.28 83.30 83.31 T:aesjambuv1 53.64? 85.72? 85.79? T:deoxysi256v141 91.92 92.00 92.96 T:oceankeyakv1 92.67? 92.70? 148.23? T:riverkeyakv1 115.84? 115.85? 185.85? T:ketjesrv2 74.63? 116.41? 116.46? T:deoxysii128v141 79.67? 117.90? 126.41? T:aeadaes128ocbtaglen128v1 144.09? 144.11? 230.50? T:ketjejrv1 97.03? 153.39? 153.65? T:deoxysii256v141 160.12 166.62 168.86 T:aeadaes256ocbtaglen128v1 107.10? 170.89? 171.96? T:ketjesrv1 135.98? 217.29? 217.44? T:aezv4 144.16? 230.46? 231.04? T:aezv5 233.31 233.34 233.68 T:proest128otrv1 277.41 277.48 280.04 T:deoxysneq128128v1 299.81? 300.07? 479.84? T:aezv1 325.96? 327.92? 520.62? T:deoxysneq128128v13 332.15? 334.24? 530.19? T:aezv3 242.26? 387.51? 387.94? T:present80n6t4silcv3 261.15? 409.57? 410.09? T:twine80n6clocv1 271.06? 431.88? 432.33? T:ketjejrv2 440.17? 442.31? 697.24? T:deoxysneq256128v13 469.74? 470.33? 750.01? T:deoxyseq128128v13 579.48 579.93 580.49 T:led80n6t4silcv3 588.20? 589.67? 928.31? T:deoxyseq256128v13 696.46 696.61 703.17 T:deoxyseq128128v1 697.63 697.74 704.15 T:deoxysneq256128v1 684.39? 1087.15? 1094.02? T:deoxyseq256128v1 4206.16? 6731.55? 7940.71? T:acorn128 9553.83? 9558.72? 15300.98? T:present80n6t4silcv2 9549.17? 9559.50? 15285.23? T:present80n6silcv1 10932.19? 10936.15? 17520.49? T:led80n6t4silcv2 10955.79 10958.89 10961.60 T:led80n6silcv1 20817.65? 33323.82? 33330.75? aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 7.71 7.72 7.73 T:morus1280256v1 4.84? 7.74? 7.76? T:morus1280128v1 7.75 7.77 7.77 T:morus1280256v2 8.87 8.87 9.15 T:morus640128v1 8.94 8.94 9.23 T:morus640128v2 9.93 9.95 9.97 T:norx6441v2 9.96? 9.98? 15.94? T:norx6441v3 11.19? 11.21? 17.89? T:norx6441v1 10.95? 11.27? 17.51? T:norx3241v2 11.24? 11.53? 17.52? T:norx3241v3 12.22 12.22 12.23 T:morus1280128v2 12.16? 12.38? 19.39? T:norx6444v2 14.37? 14.42? 22.96? T:tiaoxinv1 14.49 14.52 14.53 T:tiaoxinv2 15.00? 15.00? 23.94? T:norx6444v1 16.26? 16.26? 25.99? T:norx3261v3 16.25? 16.56? 25.97? T:norx3261v2 18.09 18.14 18.48 T:lakekeyakv2 19.06? 19.36? 30.49? T:norx3261v1 13.45? 20.29? 20.31? T:norx6444v3 20.66 20.67 20.92 T:norx3241v1 13.29? 20.69? 20.72? T:lakekeyakv1 23.17 23.34 23.38 T:norx6461v2 23.86 23.88 23.90 T:norx6461v3 15.54? 24.59? 24.75? T:seakeyakv2 16.79? 26.83? 26.84? T:ascon96v1 26.89 26.90 26.91 T:ascon128av11 26.92 26.93 26.96 T:norx6461v1 27.45 27.45 27.46 ascon128av12 17.75? 28.38? 29.04? T:aegis128l 18.20? 28.87? 28.92? T:oceankeyakv2 20.18? 32.22? 32.26? T:riverkeyakv2 20.34? 32.52? 32.52? T:acorn128v3 33.17 33.19 33.22 T:aegis128 21.37? 34.15? 34.16? T:acorn128v2 36.84 36.89 36.92 T:aes128otrsv2 37.23 37.23 37.26 T:aes128otrsv3 23.86? 38.08? 38.09? T:ketjemajorv2 40.36 40.36 40.37 ascon128v12 25.28? 40.48? 40.50? T:aegis256 40.49 40.49 40.50 T:ascon128v1 41.50 41.50 41.52 T:ascon128v11 43.11? 43.16? 68.91? T:aes128n12t8clocv3 44.25 44.27 44.31 T:aes128n12t8clocv2 44.20 44.40 44.44 T:aes128n12silcv1 28.90? 44.75? 44.80? T:ketjeminorv2 45.56? 45.97? 72.88? T:aes128n12clocv1 29.77? 47.48? 47.50? T:lunarkeyakv2 49.93? 49.96? 79.94? T:aes128n12t8silcv2 32.66? 51.59? 51.77? T:aes128gcmv1 32.96? 52.66? 52.77? T:aes128otrcv3 37.21? 58.99? 59.01? T:aes128otrsv1 59.29? 59.33? 94.96? T:proest256otrv1 60.73 61.01 61.19 T:aes256gcmv1 41.22? 63.99? 64.00? T:aes128otrpv2 40.54? 64.80? 64.82? T:aes128otrpv1 41.12? 64.87? 64.96? T:aes128otrpv3 67.10 67.12 67.28 T:aes128n8t8clocv2 42.78? 68.09? 68.28? T:aes128n8clocv1 68.95 69.14 69.15 T:aes256otrcv3 43.54? 69.51? 69.53? T:aes256otrsv1 71.70? 71.80? 114.69? T:twine80n6t4clocv2 72.04? 72.06? 115.24? T:twine80n6t4clocv3 74.39 74.72 75.31 T:seakeyakv1 46.93? 75.10? 75.19? T:aes256otrsv2 49.02? 75.98? 76.00? T:aes256otrsv3 76.37 76.50 76.57 T:deoxysi128v141 76.71 76.75 81.41 T:aes128n8silcv1 49.07? 78.43? 78.55? T:aes128n12t8silcv3 78.53 78.61 78.64 T:aes128n8t8silcv2 51.14? 81.25? 81.31? T:aes256otrpv3 81.84 81.88 81.91 T:aes256otrpv2 82.67 82.73 83.26 T:aes256otrpv1 82.92 83.29 83.47 T:aesjambuv1 53.77? 85.60? 85.99? T:deoxysi256v141 92.12 92.14 93.10 T:oceankeyakv1 92.80? 93.10? 148.44? T:riverkeyakv1 73.03? 116.65? 116.69? T:deoxysii128v141 115.98? 116.88? 186.09? T:ketjesrv2 78.78? 117.81? 125.06? T:aeadaes128ocbtaglen128v1 144.22? 144.33? 230.24? T:ketjejrv1 99.45? 153.79? 153.97? T:deoxysii256v141 160.13 160.59 167.55 T:aeadaes256ocbtaglen128v1 108.08? 171.12? 172.18? T:ketjesrv1 136.07? 217.02? 217.07? T:aezv4 146.27? 230.22? 230.50? T:aezv5 233.29 233.30 233.40 T:proest128otrv1 277.41 277.52 279.18 T:deoxysneq128128v1 299.61? 299.91? 479.54? T:aezv1 326.15? 327.91? 520.80? T:deoxysneq128128v13 331.96? 333.46? 530.18? T:aezv3 242.30? 387.51? 387.94? T:present80n6t4silcv3 257.23? 409.74? 410.30? T:twine80n6clocv1 270.75? 432.07? 432.58? T:ketjejrv2 438.51? 442.49? 697.45? T:deoxysneq256128v13 468.69? 471.76? 750.17? T:deoxyseq128128v13 579.48 579.93 580.55 T:led80n6t4silcv3 584.73? 588.73? 928.53? T:deoxyseq256128v13 696.44 697.02 701.85 T:deoxyseq128128v1 697.62 697.71 704.38 T:deoxysneq256128v1 683.65? 1087.13? 1094.10? T:deoxyseq256128v1 1346.89? 2153.75? 2154.64? aes256gcmv1 4212.93? 6733.81? 7940.71? T:acorn128 9548.56? 9551.08? 15288.39? T:present80n6silcv1 9554.82? 9560.08? 15301.91? T:present80n6t4silcv2 10933.01? 10936.73? 17519.82? T:led80n6t4silcv2 10955.53 10961.63 10963.80 T:led80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 29.13? 29.43? 45.98? T:norx3241v3 30.39 30.88 31.32 T:morus640128v1 32.02 32.51 33.25 T:morus640128v2 34.25? 34.37? 54.55? T:norx6441v1 37.85 37.89 38.26 T:norx6441v2 38.12? 38.70? 60.75? T:norx6441v3 25.27? 39.12? 39.67? T:morus1280128v1 38.70 39.23 39.82 T:morus1280256v1 39.45 39.59 40.34 T:morus1280256v2 41.05? 41.71? 66.24? T:norx3261v1 26.95? 42.08? 42.53? T:ascon96v1 41.86 42.12 42.68 T:ascon128av11 42.23? 42.48? 66.76? T:norx3261v2 42.23? 42.94? 67.09? T:norx3261v3 43.16 43.90 44.38 ascon128av12 29.54? 45.98? 46.24? T:norx3241v2 45.42 46.20 46.50 T:norx3241v1 52.99? 53.40? 84.16? T:aes128n12t8clocv3 53.51 53.70 54.11 T:aes128n12t8clocv2 54.48 54.70 55.22 ascon128v12 55.07 55.25 55.55 T:ascon128v1 55.81 56.04 56.66 T:ascon128v11 57.19? 57.92? 90.32? T:aes128n12clocv1 59.41 59.86 60.41 T:morus1280128v2 64.49 65.09 65.20 T:aes128n12silcv1 44.38? 69.02? 70.28? T:lakekeyakv1 68.40? 69.32? 108.95? T:aes128n12t8silcv2 49.43? 75.11? 77.82? T:riverkeyakv2 74.77? 76.00? 117.89? T:aes128otrsv2 79.56 79.78 80.57 T:aes128otrsv3 81.30 81.31 81.83 T:norx6461v1 80.64 81.56 82.20 T:aes128n8t8clocv2 80.86 81.64 83.38 T:lakekeyakv2 83.12 83.38 84.12 T:norx6461v2 55.63? 84.76? 85.69? T:aes128n8clocv1 86.69 86.69 87.17 T:norx6461v3 89.80? 90.25? 143.80? T:norx6444v2 92.62 92.99 93.96 T:aegis128 96.96? 98.86? 149.88? T:twine80n6t4clocv3 100.09? 100.86? 160.05? T:tiaoxinv2 105.20 106.05 106.32 T:aes128n8t8silcv2 67.24? 106.91? 107.50? T:aes128n12t8silcv3 70.88? 112.25? 112.55? T:aesjambuv1 109.73 112.29 115.85 T:aes128n8silcv1 115.01? 115.12? 184.10? T:norx6444v1 75.34? 118.60? 119.64? T:aes128otrsv1 79.41? 124.88? 126.54? T:aes128otrcv3 80.71? 125.98? 126.84? T:aes128otrpv3 127.99 128.33 128.91 T:aegis128l 81.87? 128.99? 129.81? T:aes128otrpv1 82.64? 129.59? 130.03? T:aes128otrpv2 136.67 137.12 137.41 T:deoxysi128v141 87.43? 138.05? 140.60? T:aegis256 88.02? 140.61? 140.83? T:ketjeminorv2 89.29? 141.28? 142.05? T:acorn128v3 94.14? 150.19? 151.70? T:aes256otrsv2 96.71? 150.89? 151.62? T:aes256otrsv1 95.63? 152.00? 152.26? T:acorn128v2 96.48? 152.89? 153.67? T:norx6444v3 96.48? 153.00? 153.15? T:aes256otrsv3 97.45? 155.45? 155.94? T:twine80n6t4clocv2 98.04? 156.38? 157.27? T:aes256otrpv3 99.01? 157.31? 158.46? T:tiaoxinv1 159.31 160.53 161.38 T:aes256otrcv3 160.98? 162.02? 256.65? T:riverkeyakv1 163.21 164.06 164.36 T:aes256otrpv2 163.95 164.47 165.14 T:aes256otrpv1 173.71? 175.49? 277.95? T:proest256otrv1 111.33? 177.45? 178.12? T:deoxysii128v141 187.52? 187.84? 299.29? T:ketjejrv1 191.38? 192.71? 309.23? T:ketjesrv2 200.47 200.91 201.17 T:deoxysi256v141 142.09? 220.50? 223.84? T:seakeyakv2 152.56? 241.70? 244.41? T:ketjemajorv2 169.73? 256.84? 264.88? T:aes128gcmv1 165.14? 263.59? 265.11? T:ketjesrv1 171.45? 268.19? 269.97? T:aezv4 272.23? 272.61? 435.14? T:deoxysneq128128v1 274.39 275.31 284.96 T:aes256gcmv1 187.07? 294.50? 297.36? T:aezv5 199.05? 312.28? 313.28? T:oceankeyakv2 325.86? 326.16? 521.02? T:deoxysneq128128v13 327.27? 340.85? 510.66? T:aeadaes128ocbtaglen128v1 396.15? 423.27? 563.32? T:aeadaes256ocbtaglen128v1 449.95 451.44 455.96 T:proest128otrv1 284.26? 451.95? 454.99? T:twine80n6clocv1 453.52? 455.55? 723.30? T:aezv3 301.44? 481.23? 481.83? T:present80n6t4silcv3 376.25? 495.52? 498.83? T:aezv1 558.50 561.39 562.95 T:seakeyakv1 363.05? 578.91? 580.36? T:ketjejrv2 579.27? 581.32? 926.18? T:deoxyseq128128v13 383.23? 611.74? 615.76? T:deoxysii256v141 679.51 679.66 680.44 T:deoxyseq128128v1 471.29? 692.05? 692.57? T:deoxysneq256128v13 461.34? 692.27? 693.12? T:deoxysneq256128v1 474.93? 758.07? 759.44? T:lunarkeyakv2 998.02 1000.80 1008.63 T:oceankeyakv1 671.87? 1072.23? 1072.72? T:deoxyseq256128v1 1096.33 1096.62 1097.06 T:led80n6t4silcv3 1159.55 1159.81 1164.34 T:deoxyseq256128v13 10677.55? 10690.58? 17084.49? T:present80n6t4silcv2 10672.21? 10703.53? 17075.32? T:present80n6silcv1 11005.57 11099.64 11557.83 T:led80n6silcv1 10966.27? 11543.69? 17531.25? T:led80n6t4silcv2 14726.63? 17451.43? 23411.68? T:acorn128 48434.05 48438.01 48480.76 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 28.77? 28.95? 45.76? T:norx3241v3 31.91 32.13 32.95 T:morus640128v1 33.48 33.70 34.18 T:morus640128v2 34.33? 35.03? 54.70? T:norx6441v1 38.48 38.70 39.00 T:norx6441v2 39.07? 39.45? 61.97? T:norx6441v3 39.19 39.70 40.16 T:morus1280256v1 25.53? 39.78? 40.34? T:morus1280128v1 40.19 40.34 40.56 T:morus1280256v2 27.05? 41.60? 42.49? T:ascon96v1 41.98? 42.12? 67.20? T:norx3261v3 42.09 42.27 42.56 T:ascon128av11 41.83? 42.30? 66.87? T:norx3261v2 41.52? 42.34? 65.80? T:norx3261v1 43.09 43.34 44.16 ascon128av12 45.02 45.68 46.76 T:norx3241v1 28.95? 45.83? 46.20? T:norx3241v2 53.80? 54.36? 85.84? T:aes128n12t8clocv3 54.48 54.52 54.96 ascon128v12 54.85 55.10 55.66 T:ascon128v1 55.89 56.11 56.48 T:aes128n12t8clocv2 56.18 56.19 56.74 T:ascon128v11 59.48 60.01 60.16 T:morus1280128v2 60.27? 60.97? 96.11? T:aes128n12clocv1 64.68 64.91 65.27 T:aes128n12silcv1 43.12? 67.02? 68.13? T:lakekeyakv1 68.06? 68.77? 108.66? T:aes128n12t8silcv2 47.95? 74.37? 75.66? T:riverkeyakv2 77.63? 78.19? 122.16? T:aes128otrsv2 80.42 80.60 81.05 T:aes128otrsv3 80.56 80.82 81.97 T:norx6461v1 79.97 81.49 83.12 T:lakekeyakv2 82.83 83.05 84.35 T:aes128n8t8clocv2 84.50 84.87 85.32 T:norx6461v2 88.02 88.02 88.73 T:norx6461v3 57.23? 88.06? 88.13? T:aes128n8clocv1 90.81? 91.25? 147.25? T:norx6444v2 93.07 93.30 93.92 T:aegis128 96.93? 97.04? 149.10? T:twine80n6t4clocv3 100.75? 101.72? 161.54? T:tiaoxinv2 105.21 105.72 106.62 T:aes128n8t8silcv2 67.39? 107.28? 107.99? T:aes128n12t8silcv3 108.77 111.25 114.82 T:aes128n8silcv1 71.21? 112.77? 112.89? T:aesjambuv1 113.62? 114.15? 180.69? T:norx6444v1 77.97? 122.95? 124.69? T:aes128otrsv1 78.26? 124.06? 124.65? T:aes128otrcv3 80.41? 127.25? 128.07? T:aes128otrpv3 128.06 128.07 128.66 T:aegis128l 81.75? 129.59? 130.22? T:aes128otrpv2 82.60? 129.95? 130.66? T:aes128otrpv1 87.88? 139.16? 146.47? T:aegis256 88.62? 139.80? 141.42? T:ketjeminorv2 89.62? 142.20? 142.76? T:acorn128v3 96.34? 152.00? 152.93? T:aes256otrsv1 95.89? 152.74? 153.00? T:acorn128v2 97.11? 153.19? 154.71? T:aes256otrsv2 98.20? 155.05? 155.74? T:aes256otrsv3 97.94? 156.49? 156.82? T:norx6444v3 98.27? 156.67? 158.05? T:twine80n6t4clocv2 156.38 157.20 158.16 T:deoxysi128v141 158.53 158.57 159.12 T:aes256otrcv3 100.45? 158.83? 159.50? T:aes256otrpv3 100.57? 159.68? 159.91? T:tiaoxinv1 161.17? 161.95? 256.95? T:riverkeyakv1 164.24 164.80 166.40 T:aes256otrpv2 165.06 165.77 166.37 T:aes256otrpv1 175.12? 175.64? 279.69? T:proest256otrv1 111.55? 177.64? 179.61? T:deoxysii128v141 187.37? 187.84? 298.95? T:ketjejrv1 191.82? 192.85? 309.20? T:ketjesrv2 141.02? 220.46? 222.95? T:seakeyakv2 222.73 223.25 223.91 T:deoxysi256v141 152.30? 240.59? 242.92? T:ketjemajorv2 171.67? 253.94? 263.29? T:aes128gcmv1 171.78? 264.62? 265.78? T:aezv4 165.66? 265.78? 266.59? T:ketjesrv1 280.55 281.25 291.75 T:aes256gcmv1 183.51? 292.12? 293.65? T:aezv5 308.56? 309.09? 493.04? T:deoxysneq128128v1 199.98? 313.05? 314.84? T:oceankeyakv2 354.55? 361.41? 523.35? T:aeadaes128ocbtaglen128v1 362.56? 363.52? 578.91? T:deoxysneq128128v13 281.77? 449.88? 450.55? T:twine80n6clocv1 451.73 451.99 452.70 T:proest128otrv1 451.40? 452.17? 720.74? T:aezv3 302.41? 483.42? 483.65? T:present80n6t4silcv3 318.84? 508.55? 510.18? T:aezv1 556.41 559.42 562.20 T:seakeyakv1 360.93? 577.01? 577.42? T:ketjejrv2 579.84? 580.61? 928.15? T:deoxyseq128128v13 426.73? 590.59? 609.71? T:aeadaes256ocbtaglen128v1 443.75? 612.79? 613.20? T:deoxysii256v141 474.66? 755.66? 758.15? T:lunarkeyakv2 484.95? 774.70? 775.59? T:deoxysneq256128v1 490.55? 774.88? 775.62? T:deoxysneq256128v13 790.84 791.21 791.62 T:deoxyseq128128v1 996.42 997.91 1006.74 T:oceankeyakv1 1098.85 1099.92 1101.45 T:led80n6t4silcv3 1152.39 1160.34 1181.19 T:deoxyseq256128v13 773.55? 1236.78? 1237.19? T:deoxyseq256128v1 10678.07? 10700.67? 17084.34? T:present80n6t4silcv2 10675.14? 10765.32? 17075.66? T:present80n6silcv1 10814.48? 10866.77? 17253.93? T:led80n6t4silcv2 10827.59 10869.41 10901.29 T:led80n6silcv1 14756.43? 17472.84? 23468.01? T:acorn128 48433.97 48441.98 48445.66 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 28.76? 28.80? 45.76? T:norx3241v3 31.14 31.17 31.17 T:morus640128v1 32.73 32.77 32.77 T:morus640128v2 34.41? 34.88? 54.77? T:norx6441v1 38.45 38.45 38.59 T:morus1280256v1 38.70 38.89 39.19 T:norx6441v2 24.53? 39.00? 39.01? T:morus1280128v1 39.19? 39.63? 62.34? T:norx6441v3 39.48 39.67 39.82 T:morus1280256v2 40.97? 40.97? 65.27? T:norx3261v1 26.53? 41.27? 42.04? T:ascon96v1 41.60? 41.60? 66.28? T:norx3261v2 41.83? 41.86? 66.65? T:norx3261v3 41.60 41.98 42.19 T:ascon128av11 42.34 42.60 42.83 ascon128av12 44.53 44.53 44.79 T:norx3241v1 28.84? 45.68? 46.20? T:norx3241v2 53.25? 53.62? 85.31? T:aes128n12t8clocv3 54.22 54.25 54.29 ascon128v12 54.77 54.92 55.29 T:ascon128v1 55.25 55.26 55.52 T:aes128n12t8clocv2 55.62 55.85 56.62 T:ascon128v11 58.78 58.85 58.97 T:morus1280128v2 60.12? 60.82? 95.70? T:aes128n12clocv1 63.95 64.57 64.87 T:aes128n12silcv1 43.12? 67.57? 68.40? T:lakekeyakv1 67.77? 67.98? 108.06? T:aes128n12t8silcv2 47.28? 74.70? 75.89? T:riverkeyakv2 77.59? 78.52? 122.23? T:aes128otrsv2 79.16 79.67 81.20 T:lakekeyakv2 80.30 80.38 81.23 T:aes128otrsv3 80.68 80.72 81.72 T:norx6461v1 82.20 82.30 82.98 T:aes128n8t8clocv2 84.88 84.98 85.57 T:norx6461v2 56.73? 86.80? 87.25? T:aes128n8clocv1 88.39 88.40 88.84 T:norx6461v3 90.91? 91.18? 148.62? T:norx6444v2 92.15 92.26 92.41 T:aegis128 96.97? 97.86? 148.92? T:twine80n6t4clocv3 100.12? 100.45? 159.72? T:tiaoxinv2 104.98 105.24 105.28 T:aes128n8t8silcv2 66.58? 106.77? 107.06? T:aes128n12t8silcv3 107.95 110.95 113.48 T:aes128n8silcv1 70.48? 112.03? 112.34? T:aesjambuv1 113.62? 113.97? 181.16? T:norx6444v1 77.52? 123.12? 123.98? T:aes128otrsv1 77.86? 124.24? 124.54? T:aes128otrcv3 127.28 127.55 127.58 T:aegis128l 79.98? 127.66? 128.88? T:aes128otrpv3 81.94? 129.96? 130.25? T:aes128otrpv2 82.42? 130.48? 130.73? T:aes128otrpv1 86.62? 138.64? 144.39? T:aegis256 87.98? 140.27? 141.88? T:ketjeminorv2 88.62? 141.53? 141.54? T:acorn128v3 95.12? 151.92? 152.00? T:acorn128v2 95.85? 152.04? 152.45? T:aes256otrsv1 96.45? 153.45? 156.20? T:aes256otrsv2 98.08? 155.74? 156.12? T:aes256otrsv3 97.86? 155.94? 156.34? T:twine80n6t4clocv2 97.71? 156.56? 156.78? T:norx6444v3 156.38 156.82 157.16 T:deoxysi128v141 99.30? 158.31? 158.79? T:tiaoxinv1 158.27 158.57 158.83 T:aes256otrcv3 100.20? 159.49? 159.87? T:aes256otrpv3 160.87? 161.83? 256.98? T:riverkeyakv1 164.17 164.28 164.84 T:aes256otrpv2 165.21 165.48 165.95 T:aes256otrpv1 169.77? 169.99? 271.02? T:proest256otrv1 111.26? 176.91? 178.23? T:deoxysii128v141 187.80? 188.03? 299.84? T:ketjejrv1 191.63? 192.75? 310.38? T:ketjesrv2 139.83? 220.02? 222.91? T:seakeyakv2 222.54 222.84 224.10 T:deoxysi256v141 152.45? 240.91? 243.25? T:ketjemajorv2 162.51? 253.38? 260.36? T:aes128gcmv1 170.22? 264.19? 264.37? T:aezv4 165.84? 266.23? 267.00? T:ketjesrv1 278.02 281.33 289.98 T:aes256gcmv1 187.26? 291.38? 293.24? T:aezv5 308.60? 308.75? 493.19? T:deoxysneq128128v1 197.79? 311.01? 312.53? T:oceankeyakv2 362.59? 363.60? 579.05? T:deoxysneq128128v13 348.49? 378.59? 529.22? T:aeadaes128ocbtaglen128v1 281.14? 449.62? 449.99? T:twine80n6clocv1 450.32? 451.03? 720.37? T:aezv3 451.25 451.32 451.40 T:proest128otrv1 313.69? 482.98? 483.58? T:present80n6t4silcv3 316.80? 505.55? 508.03? T:aezv1 555.60 558.72 561.84 T:seakeyakv1 377.77? 576.60? 577.60? T:ketjejrv2 579.76? 580.43? 928.48? T:deoxyseq128128v13 428.73? 582.66? 598.13? T:aeadaes256ocbtaglen128v1 382.52? 613.12? 614.75? T:deoxysii256v141 474.26? 755.51? 756.96? T:lunarkeyakv2 484.69? 774.29? 774.84? T:deoxysneq256128v1 490.59? 775.21? 775.66? T:deoxysneq256128v13 790.84 791.54 791.69 T:deoxyseq128128v1 996.98 997.77 1006.78 T:oceankeyakv1 1098.70 1099.03 1101.23 T:led80n6t4silcv3 1159.52 1159.93 1180.38 T:deoxyseq256128v13 773.03? 1236.19? 1236.63? T:deoxyseq256128v1 10677.70? 10690.43? 17083.56? T:present80n6t4silcv2 10671.95? 10707.88? 17074.66? T:present80n6silcv1 10896.58 10948.49 11084.91 T:led80n6silcv1 10921.59? 10991.13? 17401.15? T:led80n6t4silcv2 17226.21 17232.89 17353.05 aes256gcmv1 14763.85? 17472.69? 23467.38? T:acorn128