VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20251222

[Page version: 20260215 12:16:43]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.29? 0.34? 0.37? T:tiaoxinv2 0.31? 0.34? 0.37? T:tiaoxinv1 0.35? 0.39? 0.41? T:aegis128l 0.39 0.40 0.41 aegis128l 0.57 0.58 0.59 T:aegis128 0.61 0.62 0.63 aegis256 0.78? 0.83? 0.89? T:aeadaes128ocbtaglen128v1 0.87 0.88 0.88 T:aes128otrsv3 0.87 0.88 0.90 T:aes128otrcv3 0.92 0.93 0.95 T:morus1280128v1 0.93 0.93 0.95 T:morus1280128v2 0.93 0.93 0.95 T:aes128otrpv3 0.65? 0.95? 1.01? T:aeadaes192ocbtaglen128v1 0.94 0.95 0.96 T:aezv4 0.94 0.96 0.98 T:aezv3 0.95 0.96 0.97 T:aezv5 0.94 0.97 0.97 T:morus1280256v2 0.97 0.99 1.01 T:morus1280256v1 1.09 1.10 1.11 T:aes256otrcv3 1.09 1.10 1.12 T:aes256otrsv3 1.15 1.17 1.17 T:morus640128v1 1.15 1.17 1.17 T:morus640128v2 1.17 1.18 1.19 T:aes256otrpv3 1.18 1.21 1.22 T:aeadaes256ocbtaglen128v1 1.29 1.32 1.34 T:deoxysneq128128v1 1.29 1.32 1.42 T:deoxysi128v141 1.48 1.50 1.52 T:deoxysneq256128v1 1.51 1.54 1.56 T:deoxysi256v141 2.33 2.36 2.38 T:lunarkeyakv2 2.51 2.53 2.54 T:colm0v1 2.56 2.59 2.61 T:aes128gcmv1 2.70 2.75 2.77 T:deoxysii128v141 2.75 2.77 2.78 T:norx6441v3 2.81 2.82 2.84 T:norx6441v2 2.79 2.83 2.84 aes256gcmv1 2.93 3.00 3.06 T:deoxyseq128128v1 3.04 3.06 3.07 T:seakeyakv2 3.12 3.18 3.22 T:deoxysii256v141 3.09 3.22 3.36 T:deoxyseq256128v1 3.19 3.22 3.25 T:oceankeyakv2 3.28 3.31 3.32 T:norx6441v1 3.84 3.87 3.88 T:norx3241v3 3.88 3.89 3.90 T:norx3241v2 4.21 4.24 4.26 T:norx6461v3 4.24 4.25 4.28 T:norx6461v2 4.29 4.32 4.34 T:norx6444v2 4.30 4.33 4.35 T:norx6444v3 4.63 4.64 4.66 T:norx3241v1 4.97 5.00 5.03 T:norx6444v1 4.96 5.01 5.04 T:norx6461v1 5.11 5.17 5.22 T:lakekeyakv2 5.15 5.19 5.27 T:lakekeyakv1 5.20 5.21 5.22 T:aes128n8t8clocv2 5.20 5.21 5.22 T:aes128n12t8clocv2 5.21 5.21 5.22 T:aes128n12t8silcv2 5.20 5.21 5.21 T:aes128n12t8clocv3 5.21 5.21 5.21 T:aes128n12t8silcv3 5.21 5.21 5.22 T:aes128n8t8silcv2 5.76 5.79 5.80 T:norx3261v3 5.82 5.84 5.86 T:norx3261v2 7.59 7.60 7.62 T:norx3261v1 7.99 8.01 8.03 T:acorn128v3 8.30 8.40 8.42 T:acorn128v2 8.44 8.48 8.51 T:ascon128av11 8.57 8.62 8.64 T:ascon96v1 8.77 8.82 8.84 ascon128av12 9.59 9.60 9.62 T:ketjemajorv2 10.36 10.37 10.37 T:aesjambuv1 12.22 12.33 12.35 T:ketjeminorv2 12.64 12.73 12.87 T:ascon128v1 12.70 12.74 12.85 T:ascon128v11 12.84 12.86 12.91 ascon128v12 12.85 12.87 12.88 T:riverkeyakv2 14.65 14.66 14.67 T:twine80n6t4clocv3 15.35 15.37 15.38 T:twine80n6t4clocv2 16.10 16.12 16.13 T:aes128otrsv2 16.10 16.13 16.19 T:aes128otrpv1 16.09 16.13 16.16 T:aes128otrsv1 16.10 16.13 16.15 T:aes128otrpv2 21.06 21.08 21.09 T:aes256otrpv2 21.05 21.08 21.11 T:aes256otrpv1 21.78 21.84 21.88 T:aes256otrsv2 21.83 21.86 21.91 T:aes256otrsv1 25.93 26.04 26.19 T:proest256otrv1 26.71 26.75 26.81 T:aes128n8clocv1 26.75 26.77 26.82 T:aes128n12clocv1 27.46 27.51 27.54 T:aeadaes128ocbtaglen64v1 27.49 27.54 27.58 T:aeadaes128ocbtaglen96v1 31.97 32.00 32.04 T:ketjesrv1 32.48 32.53 32.61 T:aeadaes192ocbtaglen96v1 32.50 32.54 32.58 T:aeadaes192ocbtaglen64v1 33.47 33.51 33.54 T:ketjesrv2 37.30 37.38 37.42 T:aeadaes256ocbtaglen64v1 37.34 37.44 37.55 T:aeadaes256ocbtaglen96v1 60.40 60.44 60.49 T:colm127v1 60.46 60.62 60.75 T:proest128otrv1 66.12 66.23 66.46 T:ketjejrv1 71.95 72.72 72.82 T:present80n6t4silcv3 88.35 88.76 88.88 T:deoxysneq128128v13 108.82 108.99 109.23 T:ketjejrv2 119.32 119.37 119.41 T:led80n6t4silcv3 135.33 135.52 135.62 T:deoxysneq256128v13 180.06 180.99 182.34 T:deoxyseq128128v13 191.73 191.90 192.44 T:aezv1 271.59 272.40 273.12 T:deoxyseq256128v13 420.63 420.88 421.10 T:acorn128 5462.74 5463.27 5463.70 T:present80n6t4silcv2 5464.35 5464.80 5465.15 T:present80n6silcv1 8347.78 8363.14 8370.98 T:led80n6silcv1 8354.05 8365.59 8371.84 T:led80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.39 0.40 0.41 aegis128l 0.35? 0.40? 0.42? T:aegis128l 0.41? 0.45? 0.48? T:tiaoxinv1 0.44? 0.48? 0.49? T:tiaoxinv2 0.57 0.59 0.60 T:aegis128 0.60 0.63 0.63 aegis256 0.77? 0.82? 0.87? T:aeadaes128ocbtaglen128v1 0.86 0.86 0.87 T:aes128otrsv3 0.87 0.88 0.88 T:aes128otrcv3 0.92 0.93 0.95 T:morus1280128v1 0.93 0.94 0.94 T:morus1280128v2 0.93 0.94 0.96 T:aes128otrpv3 0.94 0.95 0.96 T:aezv4 0.90 0.95 0.97 T:aezv3 0.85? 0.96? 1.01? T:aeadaes192ocbtaglen128v1 0.94 0.96 0.97 T:morus1280256v1 0.95 0.96 0.98 T:aezv5 0.95 0.97 0.97 T:morus1280256v2 1.08 1.09 1.11 T:aes256otrsv3 1.09 1.09 1.10 T:aes256otrcv3 1.15 1.16 1.17 T:morus640128v1 1.15 1.17 1.18 T:morus640128v2 1.17 1.18 1.19 T:aes256otrpv3 1.21 1.23 1.27 T:aeadaes256ocbtaglen128v1 1.49 1.53 1.57 T:deoxysi128v141 1.54 1.58 1.60 T:deoxysneq128128v1 1.78 1.79 1.81 T:deoxysneq256128v1 1.77 1.80 1.81 T:deoxysi256v141 2.42 2.45 2.49 T:lunarkeyakv2 2.45 2.48 2.51 T:colm0v1 2.64 2.69 2.71 T:deoxysii128v141 2.76 2.78 2.81 T:norx6441v2 2.78 2.81 2.81 T:norx6441v3 3.05 3.08 3.10 T:aes128gcmv1 3.14 3.16 3.22 T:seakeyakv2 3.19 3.23 3.26 T:deoxysii256v141 3.27 3.31 3.36 T:oceankeyakv2 3.35 3.37 3.39 T:norx6441v1 3.24 3.41 3.47 T:deoxyseq128128v1 3.56 3.64 3.75 T:deoxyseq256128v1 3.75 3.78 3.79 aes256gcmv1 3.77 3.79 3.82 T:norx3241v3 3.82 3.84 3.85 T:norx3241v2 4.19 4.19 4.23 T:norx6461v2 4.25 4.27 4.28 T:norx6461v3 4.27 4.31 4.35 T:norx6444v3 4.27 4.32 4.34 T:norx6444v2 4.55 4.57 4.59 T:norx3241v1 4.94 4.97 5.00 T:norx6444v1 4.94 4.98 5.01 T:lakekeyakv1 5.10 5.13 5.15 T:aes128n12t8silcv2 5.12 5.14 5.17 T:norx6461v1 5.12 5.14 5.15 T:aes128n8t8clocv2 5.12 5.14 5.15 T:aes128n8t8silcv2 5.12 5.14 5.15 T:aes128n12t8clocv2 5.12 5.14 5.15 T:aes128n12t8silcv3 5.12 5.15 5.15 T:aes128n12t8clocv3 5.14 5.18 5.20 T:lakekeyakv2 5.69 5.72 5.75 T:norx3261v3 5.75 5.79 5.82 T:norx3261v2 7.40 7.41 7.43 T:norx3261v1 7.97 8.01 8.02 T:acorn128v3 8.24 8.26 8.28 T:acorn128v2 8.59 8.64 8.66 T:ascon128av11 8.64 8.65 8.69 T:ketjemajorv2 8.68 8.72 8.73 ascon128av12 8.72 8.75 8.77 T:ascon96v1 10.71 10.71 10.71 T:aesjambuv1 12.03 12.05 12.08 T:ketjeminorv2 12.80 12.83 12.84 ascon128v12 12.66 12.86 12.94 T:ascon128v1 12.69 12.92 12.93 T:ascon128v11 12.97 13.01 13.03 T:riverkeyakv2 14.54 14.55 14.60 T:twine80n6t4clocv3 15.37 15.39 15.42 T:twine80n6t4clocv2 16.46 16.49 16.56 T:aes128otrsv1 16.48 16.52 16.57 T:aes128otrpv1 16.51 16.57 16.64 T:aes128otrpv2 16.55 16.62 16.82 T:aes128otrsv2 21.44 21.49 21.52 T:aes256otrpv1 21.48 21.56 21.63 T:aes256otrpv2 22.20 22.23 22.26 T:aes256otrsv1 22.21 22.23 22.29 T:aes256otrsv2 25.80 25.85 25.90 T:aes128n12clocv1 25.85 25.93 26.16 T:proest256otrv1 26.32 26.36 26.44 T:aes128n8clocv1 32.93 33.13 33.18 T:ketjesrv1 33.57 33.61 33.72 T:ketjesrv2 36.71 36.79 36.83 T:aeadaes128ocbtaglen64v1 36.78 36.86 36.90 T:aeadaes128ocbtaglen96v1 43.76 43.82 43.89 T:aeadaes192ocbtaglen64v1 43.75 43.83 43.92 T:aeadaes192ocbtaglen96v1 50.80 50.87 50.95 T:aeadaes256ocbtaglen64v1 50.82 50.91 51.07 T:aeadaes256ocbtaglen96v1 59.94 59.98 60.11 T:proest128otrv1 67.24 67.37 67.44 T:ketjejrv1 72.12 73.02 73.12 T:present80n6t4silcv3 78.89 78.97 79.02 T:colm127v1 108.54 108.70 108.95 T:ketjejrv2 118.91 118.97 119.04 T:led80n6t4silcv3 121.97 122.29 122.82 T:deoxysneq128128v13 173.60 174.00 174.40 T:deoxysneq256128v13 179.77 180.91 181.64 T:deoxyseq128128v13 191.34 191.95 192.49 T:aezv1 271.60 272.02 273.54 T:deoxyseq256128v13 444.58 445.55 445.90 T:acorn128 5463.85 5464.54 5465.02 T:present80n6silcv1 5463.89 5464.57 5465.26 T:present80n6t4silcv2 8359.70 8364.35 8386.90 T:led80n6silcv1 8365.35 8375.78 8384.01 T:led80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.36 0.37 0.37 T:aezv4 0.36 0.37 0.38 T:aezv3 0.38 0.39 0.41 T:aezv5 0.38 0.39 0.40 T:aegis128l 0.46 0.46 0.47 aegis128l 0.44 0.46 0.47 T:tiaoxinv1 0.43? 0.47? 0.49? T:tiaoxinv2 0.59 0.60 0.60 T:aegis128 0.65 0.69 0.71 aegis256 0.78 0.80 0.83 T:aeadaes128ocbtaglen128v1 0.86 0.86 0.87 T:aes128otrsv3 0.86 0.87 0.88 T:aes128otrcv3 0.92 0.93 0.93 T:aes128otrpv3 0.92 0.93 0.95 T:morus1280128v2 0.93 0.94 0.95 T:morus1280128v1 0.91? 0.95? 1.25? T:aeadaes192ocbtaglen128v1 0.95 0.96 0.96 T:morus1280256v1 0.95 0.96 0.97 T:morus1280256v2 1.08 1.09 1.10 T:aes256otrsv3 1.09 1.10 1.10 T:aes256otrcv3 1.15 1.15 1.16 T:morus640128v1 1.16 1.17 1.17 T:morus640128v2 1.16 1.17 1.18 T:aes256otrpv3 1.20 1.22 1.25 T:aeadaes256ocbtaglen128v1 1.50 1.53 1.56 T:deoxysi128v141 1.58 1.60 1.64 T:deoxysneq128128v1 1.77 1.79 1.80 T:deoxysneq256128v1 1.79 1.81 1.82 T:deoxysi256v141 2.45 2.47 2.50 T:colm0v1 2.50 2.53 2.65 T:lunarkeyakv2 2.64 2.68 2.71 T:deoxysii128v141 2.75 2.76 2.78 T:norx6441v2 2.76 2.80 2.82 T:norx6441v3 3.07 3.08 3.09 T:aes128gcmv1 3.17 3.19 3.21 T:deoxysii256v141 3.20 3.23 3.27 T:seakeyakv2 3.33 3.35 3.37 T:norx6441v1 3.33 3.36 3.40 T:oceankeyakv2 3.28 3.38 3.44 T:deoxyseq128128v1 3.60 3.64 3.77 T:deoxyseq256128v1 3.76 3.77 3.78 aes256gcmv1 3.80 3.80 3.80 T:norx3241v3 3.80 3.84 3.86 T:norx3241v2 4.18 4.22 4.25 T:norx6461v2 4.24 4.26 4.28 T:norx6461v3 4.33 4.36 4.38 T:norx6444v2 4.36 4.39 4.41 T:norx6444v3 4.54 4.56 4.57 T:norx3241v1 4.98 5.00 5.03 T:lakekeyakv1 4.99 5.02 5.06 T:norx6444v1 5.08 5.11 5.13 T:norx6461v1 5.10 5.12 5.15 T:aes128n12t8silcv2 5.10 5.14 5.15 T:aes128n12t8silcv3 5.11 5.14 5.15 T:aes128n12t8clocv3 5.12 5.14 5.15 T:aes128n8t8silcv2 5.10 5.15 5.15 T:aes128n8t8clocv2 5.10 5.15 5.15 T:aes128n12t8clocv2 5.18 5.22 5.27 T:lakekeyakv2 5.70 5.73 5.74 T:norx3261v3 5.76 5.78 5.80 T:norx3261v2 7.40 7.41 7.42 T:norx3261v1 7.99 8.01 8.02 T:acorn128v3 8.24 8.26 8.28 T:acorn128v2 8.59 8.63 8.65 T:ascon128av11 8.69 8.69 8.71 ascon128av12 8.68 8.71 8.75 T:ketjemajorv2 8.70 8.73 8.76 T:ascon96v1 10.71 10.71 10.72 T:aesjambuv1 12.06 12.10 12.18 T:ketjeminorv2 12.81 12.82 12.84 ascon128v12 12.68 12.91 12.96 T:ascon128v1 12.71 12.92 12.95 T:ascon128v11 13.04 13.06 13.11 T:riverkeyakv2 14.54 14.57 14.60 T:twine80n6t4clocv3 15.36 15.40 15.42 T:twine80n6t4clocv2 16.52 16.56 16.60 T:aes128otrsv1 16.53 16.60 16.63 T:aes128otrpv1 16.59 16.61 16.71 T:aes128otrpv2 16.58 16.69 16.91 T:aes128otrsv2 21.50 21.54 21.58 T:aes256otrpv1 21.57 21.61 21.66 T:aes256otrpv2 22.26 22.29 22.34 T:aes256otrsv1 22.24 22.31 22.35 T:aes256otrsv2 25.77 25.86 25.89 T:aes128n12clocv1 25.86 25.95 26.15 T:proest256otrv1 26.36 26.40 26.49 T:aes128n8clocv1 32.98 33.19 33.26 T:ketjesrv1 33.51 33.69 33.76 T:ketjesrv2 36.79 36.84 36.89 T:aeadaes128ocbtaglen64v1 36.78 36.85 36.92 T:aeadaes128ocbtaglen96v1 43.79 43.87 43.95 T:aeadaes192ocbtaglen96v1 43.81 43.87 43.92 T:aeadaes192ocbtaglen64v1 50.81 50.88 50.93 T:aeadaes256ocbtaglen64v1 50.87 50.97 51.13 T:aeadaes256ocbtaglen96v1 59.95 60.01 60.09 T:proest128otrv1 67.25 67.38 67.55 T:ketjejrv1 72.18 73.03 73.09 T:present80n6t4silcv3 77.69 77.73 77.83 T:colm127v1 108.59 108.81 108.98 T:ketjejrv2 118.86 118.92 119.02 T:led80n6t4silcv3 122.04 122.55 122.74 T:deoxysneq128128v13 173.31 173.88 174.24 T:deoxysneq256128v13 178.79 181.52 182.01 T:deoxyseq128128v13 191.21 191.76 192.13 T:aezv1 271.72 272.14 273.60 T:deoxyseq256128v13 444.48 445.73 446.15 T:acorn128 5463.07 5464.16 5464.87 T:present80n6t4silcv2 5463.43 5464.97 5465.26 T:present80n6silcv1 8359.95 8364.24 8384.74 T:led80n6silcv1 8369.68 8373.24 8378.70 T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.25? 0.28? 0.32? T:tiaoxinv2 0.26? 0.29? 0.33? T:tiaoxinv1 0.30? 0.34? 0.36? T:aegis128l 0.34 0.35 0.37 aegis128l 0.54 0.55 0.56 T:aegis128 0.56 0.58 0.58 aegis256 0.66 0.68 0.70 T:aezv4 0.67 0.69 0.71 T:aezv5 0.67 0.70 0.71 T:aezv3 0.73? 0.80? 0.86? T:aeadaes128ocbtaglen128v1 0.86 0.87 0.88 T:aes128otrcv3 0.86 0.88 0.90 T:morus1280128v1 0.86 0.88 0.90 T:morus1280128v2 0.82? 0.93? 1.02? T:aeadaes192ocbtaglen128v1 0.91 0.93 0.94 T:morus1280256v2 0.94 0.96 0.97 T:morus1280256v1 0.97 0.98 0.98 T:aes128otrpv3 1.09 1.10 1.10 T:aes256otrcv3 1.11 1.12 1.14 T:morus640128v2 1.13 1.14 1.14 T:morus640128v1 1.24 1.26 1.26 T:aes256otrpv3 1.34 1.36 1.41 T:deoxysi128v141 1.34 1.37 1.38 T:deoxysneq128128v1 1.54 1.57 1.59 T:deoxysneq256128v1 1.57 1.59 1.61 T:deoxysi256v141 1.60 1.61 1.62 T:aeadaes256ocbtaglen128v1 1.79 1.80 1.81 T:colm0v1 2.17 2.19 2.21 T:aes128gcmv1 2.20 2.23 2.26 T:deoxysii128v141 2.24 2.26 2.27 T:deoxyseq128128v1 2.28 2.31 2.33 aes256gcmv1 2.47 2.51 2.53 T:deoxysii256v141 2.50 2.54 2.57 T:deoxyseq256128v1 2.59 2.59 2.61 T:seakeyakv2 2.69 2.70 2.72 T:oceankeyakv2 2.82 2.83 2.85 T:norx6441v3 2.83 2.84 2.85 T:norx6441v2 3.00 3.00 3.00 T:aes128otrsv3 3.25 3.28 3.37 T:lunarkeyakv2 3.35 3.37 3.39 T:norx6441v1 3.84 3.86 3.88 T:norx3241v3 3.84 3.87 3.88 T:norx3241v2 4.10 4.11 4.12 T:aes256otrsv3 4.23 4.25 4.27 T:norx6461v2 4.23 4.25 4.28 T:norx6461v3 4.25 4.27 4.28 T:norx6444v2 4.26 4.27 4.29 T:norx6444v3 4.55 4.57 4.58 T:lakekeyakv2 4.65 4.66 4.68 T:norx3241v1 4.84 4.86 4.90 T:lakekeyakv1 4.92 4.93 4.95 T:norx6444v1 5.03 5.05 5.06 T:norx6461v1 5.16 5.17 5.17 T:aes128n12t8silcv2 5.17 5.17 5.17 T:aes128n12t8silcv3 5.16 5.17 5.17 T:aes128n8t8silcv2 5.16 5.17 5.18 T:aes128n8t8clocv2 5.17 5.17 5.17 T:aes128n12t8clocv3 5.16 5.17 5.18 T:aes128n12t8clocv2 5.79 5.80 5.82 T:norx3261v2 5.80 5.82 5.83 T:norx3261v3 7.59 7.61 7.63 T:norx3261v1 7.87 7.89 7.90 T:acorn128v3 8.07 8.08 8.10 T:acorn128v2 8.11 8.13 8.14 T:ketjemajorv2 8.59 8.62 8.64 T:ascon96v1 8.70 8.73 8.74 ascon128av12 8.68 8.73 8.75 T:ascon128av11 9.31 9.34 9.35 T:riverkeyakv2 10.40 10.40 10.41 T:aesjambuv1 10.97 10.99 11.00 T:ketjeminorv2 12.70 12.72 12.77 T:ascon128v1 12.71 12.73 12.79 T:ascon128v11 12.71 12.74 12.77 ascon128v12 14.41 14.43 14.46 T:twine80n6t4clocv3 15.13 15.15 15.26 T:twine80n6t4clocv2 15.51 15.52 15.54 T:aes128otrsv1 15.50 15.52 15.54 T:aes128otrsv2 15.58 15.61 15.63 T:aes128otrpv2 15.60 15.61 15.63 T:aes128otrpv1 20.14 20.16 20.20 T:aes256otrsv2 20.13 20.18 20.22 T:aes256otrsv1 20.31 20.34 20.36 T:aes128n8clocv1 20.32 20.34 20.37 T:aes128n12clocv1 20.52 20.54 20.57 T:aes256otrpv1 20.52 20.55 20.57 T:aes256otrpv2 26.09 26.16 26.30 T:proest256otrv1 27.04 27.08 27.12 T:aeadaes128ocbtaglen64v1 27.09 27.15 27.18 T:aeadaes128ocbtaglen96v1 28.93 29.01 29.05 T:ketjesrv1 30.81 30.82 30.98 T:ketjesrv2 32.05 32.10 32.18 T:aeadaes192ocbtaglen64v1 32.07 32.10 32.13 T:aeadaes192ocbtaglen96v1 36.96 36.99 37.01 T:aeadaes256ocbtaglen64v1 36.95 37.00 37.06 T:aeadaes256ocbtaglen96v1 44.49 44.50 44.53 T:colm127v1 60.32 60.40 60.51 T:proest128otrv1 62.20 62.33 62.44 T:ketjejrv1 71.45 72.33 77.78 T:present80n6t4silcv3 88.64 88.91 89.03 T:deoxysneq128128v13 106.30 106.47 106.68 T:ketjejrv2 118.58 118.66 118.72 T:led80n6t4silcv3 125.80 126.06 127.25 T:aezv1 134.02 134.77 135.76 T:deoxyseq128128v13 134.88 135.01 135.34 T:deoxysneq256128v13 203.03 203.28 203.87 T:deoxyseq256128v13 420.96 421.36 421.65 T:acorn128 4097.25 4097.55 4097.81 T:present80n6t4silcv2 4097.95 4098.45 4098.75 T:present80n6silcv1 6266.12 6270.61 6277.02 T:led80n6silcv1 6268.22 6272.29 6275.05 T:led80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.30? 0.34? 0.37? T:aegis128l 0.31? 0.35? 0.37? T:tiaoxinv1 0.34? 0.36? 0.38? aegis128l 0.33? 0.36? 0.41? T:tiaoxinv2 0.55 0.55 0.56 T:aegis128 0.56 0.58 0.59 aegis256 0.65 0.68 0.69 T:aezv4 0.67 0.68 0.70 T:aezv3 0.68 0.69 0.70 T:aezv5 0.74? 0.80? 0.85? T:aeadaes128ocbtaglen128v1 0.86 0.87 0.88 T:aes128otrcv3 0.87 0.88 0.89 T:morus1280128v1 0.87 0.89 0.90 T:morus1280128v2 0.89 0.91 0.92 T:morus1280256v1 0.90 0.91 0.92 T:morus1280256v2 0.77? 0.94? 1.09? T:aeadaes192ocbtaglen128v1 0.97 0.98 0.98 T:aes128otrpv3 1.08 1.10 1.11 T:aes256otrcv3 1.12 1.13 1.14 T:morus640128v2 1.13 1.14 1.14 T:morus640128v1 1.26 1.26 1.27 T:aes256otrpv3 1.40 1.44 1.51 T:deoxysi128v141 1.44 1.47 1.52 T:deoxysneq128128v1 1.60 1.61 1.64 T:aeadaes256ocbtaglen128v1 1.65 1.69 1.72 T:deoxysneq256128v1 1.70 1.73 1.76 T:deoxysi256v141 1.77 1.79 1.81 T:colm0v1 2.17 2.20 2.21 T:deoxysii128v141 2.39 2.40 2.45 T:deoxyseq128128v1 2.41 2.43 2.47 T:aes128gcmv1 2.49 2.51 2.52 T:deoxysii256v141 2.64 2.66 2.68 T:seakeyakv2 2.73 2.76 2.78 T:oceankeyakv2 2.72 2.76 2.82 T:deoxyseq256128v1 2.76 2.79 2.80 aes256gcmv1 2.79 2.80 2.82 T:norx6441v2 2.79 2.81 2.83 T:norx6441v3 2.99 3.00 3.00 T:aes128otrsv3 3.30 3.33 3.35 T:lunarkeyakv2 3.36 3.38 3.40 T:norx6441v1 3.82 3.84 3.86 T:norx3241v3 3.83 3.84 3.85 T:norx3241v2 4.10 4.11 4.12 T:aes256otrsv3 4.20 4.21 4.23 T:norx6461v2 4.20 4.22 4.25 T:norx6461v3 4.23 4.26 4.27 T:norx6444v3 4.23 4.27 4.28 T:norx6444v2 4.54 4.56 4.59 T:lakekeyakv2 4.62 4.62 4.63 T:norx3241v1 4.72 4.76 4.82 T:lakekeyakv1 4.91 4.93 4.96 T:norx6444v1 5.08 5.10 5.12 T:norx6461v1 5.11 5.12 5.14 T:aes128n12t8silcv2 5.12 5.13 5.15 T:aes128n12t8clocv2 5.13 5.13 5.14 T:aes128n8t8silcv2 5.12 5.13 5.14 T:aes128n8t8clocv2 5.12 5.13 5.14 T:aes128n12t8silcv3 5.12 5.14 5.15 T:aes128n12t8clocv3 5.74 5.75 5.78 T:norx3261v3 5.76 5.79 5.80 T:norx3261v2 7.51 7.52 7.52 T:norx3261v1 7.61 7.67 7.69 T:ketjemajorv2 8.11 8.13 8.16 T:acorn128v2 7.99 8.13 8.14 T:acorn128v3 8.60 8.63 8.67 T:ascon128av11 8.63 8.68 8.71 ascon128av12 8.66 8.69 8.71 T:ascon96v1 9.37 9.39 9.40 T:riverkeyakv2 10.57 10.58 10.58 T:aesjambuv1 10.81 10.84 10.87 T:ketjeminorv2 12.71 12.73 12.74 ascon128v12 12.71 12.78 12.79 T:ascon128v11 12.75 12.80 12.81 T:ascon128v1 14.38 14.42 14.44 T:twine80n6t4clocv3 15.12 15.26 15.28 T:twine80n6t4clocv2 15.68 15.70 15.75 T:aes128otrsv1 15.72 15.75 15.90 T:aes128otrsv2 15.78 15.79 15.83 T:aes128otrpv1 15.79 15.83 15.85 T:aes128otrpv2 19.85 19.89 19.93 T:aes128n12clocv1 20.11 20.15 20.19 T:aes128n8clocv1 20.32 20.35 20.37 T:aes256otrsv2 20.32 20.36 20.40 T:aes256otrsv1 20.71 20.74 20.77 T:aes256otrpv1 20.72 20.76 20.82 T:aes256otrpv2 26.08 26.14 26.27 T:proest256otrv1 29.52 29.61 29.65 T:ketjesrv1 30.91 30.98 31.05 T:ketjesrv2 31.69 31.76 31.81 T:aeadaes128ocbtaglen64v1 31.75 31.78 31.85 T:aeadaes128ocbtaglen96v1 37.74 37.77 37.83 T:aeadaes192ocbtaglen96v1 37.75 37.78 37.86 T:aeadaes192ocbtaglen64v1 43.71 43.75 43.81 T:aeadaes256ocbtaglen64v1 43.70 43.79 43.86 T:aeadaes256ocbtaglen96v1 53.72 53.77 53.85 T:colm127v1 60.17 60.22 60.30 T:proest128otrv1 62.70 62.78 62.96 T:ketjejrv1 71.60? 72.43? 80.57? T:present80n6t4silcv3 105.70 106.07 107.70 T:deoxysneq128128v13 106.17 106.35 106.49 T:ketjejrv2 118.34 118.40 118.49 T:led80n6t4silcv3 125.98 126.35 127.49 T:aezv1 133.93 135.68 135.93 T:deoxyseq128128v13 154.06 154.18 154.48 T:deoxysneq256128v13 202.72 203.32 204.19 T:deoxyseq256128v13 434.06 434.73 435.17 T:acorn128 4097.47 4098.05 4098.39 T:present80n6t4silcv2 4097.94 4098.56 4099.04 T:present80n6silcv1 6273.87 6276.13 6280.16 T:led80n6t4silcv2 6273.51 6278.44 6279.73 T:led80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.32 0.34 0.35 T:aegis128l 0.33? 0.35? 0.39? T:tiaoxinv2 0.33? 0.35? 0.37? T:tiaoxinv1 0.38 0.39 0.39 aegis128l 0.39 0.39 0.41 T:aezv4 0.38 0.39 0.41 T:aezv3 0.39 0.40 0.43 T:aezv5 0.55 0.56 0.56 T:aegis128 0.60 0.62 0.62 aegis256 0.78 0.79 0.81 T:aeadaes128ocbtaglen128v1 0.86 0.87 0.88 T:aes128otrcv3 0.86 0.87 0.88 T:morus1280128v1 0.87 0.88 0.89 T:morus1280128v2 0.89 0.91 0.92 T:morus1280256v1 0.91 0.91 0.92 T:morus1280256v2 0.91 0.93 0.95 T:aeadaes192ocbtaglen128v1 0.97 0.98 0.98 T:aes128otrpv3 1.09 1.10 1.10 T:aes256otrcv3 1.12 1.13 1.13 T:morus640128v2 1.13 1.14 1.14 T:morus640128v1 1.25 1.26 1.26 T:aes256otrpv3 1.41 1.43 1.46 T:deoxysi128v141 1.47 1.49 1.49 T:deoxysneq128128v1 1.61 1.61 1.62 T:aeadaes256ocbtaglen128v1 1.68 1.70 1.71 T:deoxysneq256128v1 1.73 1.74 1.75 T:deoxysi256v141 1.78 1.79 1.81 T:colm0v1 2.15 2.17 2.20 T:deoxysii128v141 2.39 2.42 2.44 T:deoxyseq128128v1 2.43 2.43 2.44 T:aes128gcmv1 2.51 2.54 2.55 T:deoxysii256v141 2.67 2.69 2.70 T:seakeyakv2 2.74 2.76 2.81 T:deoxyseq256128v1 2.75 2.77 2.78 T:oceankeyakv2 2.78 2.79 2.80 aes256gcmv1 2.78 2.79 2.80 T:norx6441v3 2.79 2.80 2.81 T:norx6441v2 2.99 2.99 3.00 T:aes128otrsv3 3.32 3.35 3.42 T:lunarkeyakv2 3.36 3.37 3.38 T:norx6441v1 3.82 3.83 3.83 T:norx3241v2 3.83 3.84 3.85 T:norx3241v3 4.11 4.11 4.11 T:aes256otrsv3 4.20 4.20 4.23 T:norx6461v3 4.18 4.20 4.22 T:norx6461v2 4.27 4.28 4.30 T:norx6444v2 4.28 4.29 4.32 T:norx6444v3 4.56 4.59 4.60 T:lakekeyakv2 4.59 4.61 4.61 T:norx3241v1 4.76 4.80 4.83 T:lakekeyakv1 4.94 4.95 4.97 T:norx6444v1 5.08 5.09 5.12 T:norx6461v1 5.11 5.13 5.13 T:aes128n12t8silcv2 5.12 5.13 5.14 T:aes128n12t8clocv2 5.12 5.13 5.14 T:aes128n12t8clocv3 5.11 5.13 5.14 T:aes128n8t8silcv2 5.11 5.14 5.14 T:aes128n12t8silcv3 5.12 5.14 5.14 T:aes128n8t8clocv2 5.72 5.74 5.75 T:norx3261v3 5.76 5.76 5.78 T:norx3261v2 7.51 7.52 7.53 T:norx3261v1 7.68 7.73 7.76 T:ketjemajorv2 8.01 8.13 8.13 T:acorn128v3 8.13 8.14 8.15 T:acorn128v2 8.60 8.62 8.65 T:ascon128av11 8.62 8.67 8.73 ascon128av12 8.67 8.68 8.73 T:ascon96v1 9.40 9.41 9.43 T:riverkeyakv2 10.57 10.57 10.58 T:aesjambuv1 10.84 10.87 10.90 T:ketjeminorv2 12.72 12.73 12.75 ascon128v12 12.77 12.80 12.84 T:ascon128v11 12.77 12.81 12.82 T:ascon128v1 14.39 14.39 14.44 T:twine80n6t4clocv3 15.12 15.14 15.29 T:twine80n6t4clocv2 15.71 15.72 15.77 T:aes128otrsv1 15.76 15.80 15.91 T:aes128otrsv2 15.80 15.82 15.85 T:aes128otrpv1 15.82 15.87 15.90 T:aes128otrpv2 19.84 19.88 19.92 T:aes128n12clocv1 20.12 20.15 20.20 T:aes128n8clocv1 20.35 20.36 20.39 T:aes256otrsv2 20.36 20.37 20.43 T:aes256otrsv1 20.75 20.79 20.80 T:aes256otrpv1 20.79 20.82 20.84 T:aes256otrpv2 26.09 26.13 26.26 T:proest256otrv1 29.58 29.62 29.65 T:ketjesrv1 30.99 31.03 31.09 T:ketjesrv2 31.73 31.75 31.81 T:aeadaes128ocbtaglen64v1 31.75 31.78 31.83 T:aeadaes128ocbtaglen96v1 37.75 37.78 37.82 T:aeadaes192ocbtaglen96v1 37.74 37.80 37.84 T:aeadaes192ocbtaglen64v1 43.72 43.76 43.81 T:aeadaes256ocbtaglen96v1 43.71 43.76 43.83 T:aeadaes256ocbtaglen64v1 53.10 53.12 53.20 T:colm127v1 60.16 60.24 60.41 T:proest128otrv1 62.63 62.73 62.93 T:ketjejrv1 71.50? 72.49? 80.49? T:present80n6t4silcv3 105.68 106.02 107.61 T:deoxysneq128128v13 106.14 106.28 106.52 T:ketjejrv2 118.36 118.43 118.53 T:led80n6t4silcv3 125.72 126.05 127.23 T:aezv1 134.01 135.63 135.92 T:deoxyseq128128v13 153.99 154.06 154.41 T:deoxysneq256128v13 202.83 203.29 204.30 T:deoxyseq256128v13 434.52 435.23 435.34 T:acorn128 4097.41 4098.00 4098.34 T:present80n6t4silcv2 4097.89 4098.53 4099.07 T:present80n6silcv1 6272.10 6275.03 6278.48 T:led80n6silcv1 6274.30 6276.46 6281.38 T:led80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.22? 0.25? 0.29? T:tiaoxinv1 0.22? 0.26? 0.32? T:tiaoxinv2 0.24? 0.30? 0.32? T:aegis128l 0.29? 0.32? 0.34? aegis128l 0.37? 0.42? 0.43? T:aezv4 0.40 0.42 0.44 T:aezv5 0.40 0.42 0.44 T:aezv3 0.50 0.51 0.52 T:aegis128 0.54 0.54 0.55 aegis256 0.69? 0.80? 0.84? T:aeadaes128ocbtaglen128v1 0.82 0.84 0.86 T:morus1280128v1 0.81 0.84 0.85 T:morus1280128v2 0.85 0.86 0.89 T:aes128otrcv3 0.87 0.90 0.91 T:morus1280256v2 0.92 0.93 0.94 T:morus1280256v1 0.79? 0.94? 1.23? T:aeadaes192ocbtaglen128v1 1.00 1.03 1.04 T:aes128otrpv3 1.09 1.10 1.11 T:aes256otrcv3 1.07 1.11 1.12 T:colm0v1 1.10 1.12 1.12 T:morus640128v1 1.11 1.12 1.13 T:morus640128v2 1.20 1.26 1.32 T:deoxysi128v141 1.27 1.29 1.32 T:deoxysii128v141 1.26 1.32 1.36 T:deoxysneq128128v1 1.28 1.32 1.37 T:deoxyseq128128v1 1.31 1.34 1.35 T:aes256otrpv3 1.44? 1.47? 1.62? T:deoxyseq256128v1 1.46 1.48 1.49 T:deoxysi256v141 1.44 1.48 1.51 T:deoxysneq256128v1 1.46 1.49 1.53 T:deoxysii256v141 1.78 1.80 1.82 T:aes128gcmv1 1.78 1.80 1.82 aes256gcmv1 2.01 2.02 2.03 T:aeadaes256ocbtaglen128v1 2.08 2.11 2.14 T:oceankeyakv2 2.08 2.12 2.16 T:lunarkeyakv2 2.50 2.51 2.53 T:seakeyakv2 2.81 2.83 2.85 T:norx6441v2 2.83 2.84 2.86 T:norx6441v3 3.38 3.41 3.42 T:norx6441v1 3.84 3.85 3.86 T:norx3241v2 3.84 3.86 3.87 T:norx3241v3 4.05 4.12 4.14 T:lakekeyakv2 4.21 4.23 4.24 T:norx6444v2 4.22 4.24 4.25 T:norx6444v3 4.23 4.25 4.26 T:norx6461v2 4.22 4.25 4.28 T:norx6461v3 4.54 4.57 4.60 T:lakekeyakv1 4.65 4.68 4.69 T:norx3241v1 4.85 4.88 4.90 T:norx6444v1 5.09 5.11 5.13 T:norx6461v1 5.11 5.12 5.14 T:aes128n12t8clocv2 5.12 5.12 5.12 T:aes128n8t8silcv2 5.12 5.12 5.13 T:aes128n12t8silcv3 5.12 5.12 5.13 T:aes128n12t8clocv3 5.12 5.12 5.13 T:aes128n12t8silcv2 5.12 5.13 5.13 T:aes128otrsv3 5.11 5.13 5.14 T:aes128n8t8clocv2 5.74 5.76 5.80 T:norx3261v2 5.83 5.86 5.87 T:norx3261v3 6.63 6.67 6.71 T:ketjemajorv2 7.12 7.13 7.13 T:aes256otrsv3 7.60 7.63 7.65 T:norx3261v1 7.73 7.75 7.77 T:acorn128v3 7.73 7.77 7.78 T:acorn128v2 8.56 8.59 8.61 T:ascon96v1 8.60 8.62 8.64 ascon128av12 8.73 8.75 8.77 T:ascon128av11 8.76 8.79 8.81 T:riverkeyakv2 9.62 9.65 9.68 T:ketjeminorv2 10.43 10.44 10.45 T:aesjambuv1 12.57 12.60 12.62 ascon128v12 12.70 12.74 12.77 T:ascon128v11 12.72 12.74 12.76 T:ascon128v1 13.88 13.91 13.92 T:aes128n12clocv1 13.86 13.91 13.96 T:aes128n8clocv1 14.22 14.26 14.26 T:twine80n6t4clocv3 14.90 14.91 14.93 T:aes128otrsv2 14.90 14.92 14.94 T:aes128otrsv1 14.88 14.94 15.15 T:twine80n6t4clocv2 15.04 15.05 15.08 T:aes128otrpv2 15.07 15.10 15.12 T:aes128otrpv1 18.38 18.42 18.46 T:aes256otrsv2 18.39 18.48 18.52 T:aes256otrsv1 19.95 19.99 20.01 T:aes256otrpv2 19.98 20.00 20.03 T:aes256otrpv1 26.01 26.08 26.13 T:ketjesrv1 26.31 26.36 26.39 T:proest256otrv1 26.61 26.66 26.70 T:aeadaes128ocbtaglen64v1 26.64 26.70 26.79 T:aeadaes128ocbtaglen96v1 28.13 28.37 28.40 T:ketjesrv2 28.53 28.54 28.59 T:colm127v1 31.61 31.67 31.69 T:aeadaes192ocbtaglen96v1 31.62 31.69 31.81 T:aeadaes192ocbtaglen64v1 36.47 36.55 36.60 T:aeadaes256ocbtaglen64v1 36.51 36.57 36.63 T:aeadaes256ocbtaglen96v1 58.07 58.14 58.26 T:ketjejrv1 60.17 60.28 60.47 T:proest128otrv1 60.21 60.31 60.87 T:aezv1 70.30? 71.86? 83.64? T:present80n6t4silcv3 88.20 88.32 88.60 T:deoxysneq128128v13 88.10 88.86 89.10 T:deoxyseq128128v13 103.68 103.93 104.09 T:ketjejrv2 117.78 117.83 117.91 T:led80n6t4silcv3 134.13 134.37 135.38 T:deoxyseq256128v13 134.74 134.89 135.24 T:deoxysneq256128v13 421.05 421.97 423.27 T:acorn128 2731.52 2731.89 2732.78 T:present80n6silcv1 2731.12 2732.06 2732.58 T:present80n6t4silcv2 4183.85 4186.28 4191.44 T:led80n6t4silcv2 4181.60 4186.72 4192.36 T:led80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.21? 0.25? 0.30? T:tiaoxinv2 0.18? 0.26? 0.31? T:tiaoxinv1 0.25? 0.29? 0.32? T:aegis128l 0.29? 0.31? 0.33? aegis128l 0.40 0.41 0.42 T:aezv4 0.41 0.42 0.43 T:aezv3 0.42 0.42 0.43 T:aezv5 0.50 0.51 0.52 T:aegis128 0.53 0.54 0.55 aegis256 0.74? 0.79? 0.87? T:aeadaes128ocbtaglen128v1 0.81 0.82 0.84 T:morus1280128v2 0.81 0.82 0.84 T:morus1280128v1 0.85 0.86 0.87 T:aes128otrcv3 0.86 0.87 0.89 T:morus1280256v1 0.86 0.87 0.88 T:morus1280256v2 0.61? 0.91? 0.95? T:aeadaes192ocbtaglen128v1 1.02 1.02 1.03 T:aes128otrpv3 1.08 1.10 1.11 T:morus640128v2 1.09 1.10 1.11 T:aes256otrcv3 1.10 1.11 1.12 T:colm0v1 1.11 1.12 1.13 T:morus640128v1 1.21 1.27 1.30 T:deoxysi128v141 1.27 1.30 1.35 T:deoxysneq128128v1 1.28 1.32 1.34 T:deoxysii128v141 1.32 1.34 1.41 T:deoxyseq128128v1 1.32 1.34 1.34 T:aes256otrpv3 1.46 1.48 1.60 T:deoxysi256v141 1.41 1.48 1.53 T:deoxysneq256128v1 1.44 1.48 1.58 T:deoxyseq256128v1 1.47 1.51 1.55 T:deoxysii256v141 1.77 1.79 1.82 T:aes128gcmv1 1.77 1.81 1.83 aes256gcmv1 2.00 2.02 2.03 T:aeadaes256ocbtaglen128v1 2.08 2.10 2.13 T:oceankeyakv2 2.08 2.12 2.17 T:lunarkeyakv2 2.48 2.52 2.54 T:seakeyakv2 2.79 2.81 2.81 T:norx6441v3 2.80 2.81 2.83 T:norx6441v2 3.35 3.38 3.41 T:norx6441v1 3.83 3.86 3.88 T:norx3241v2 3.85 3.88 3.90 T:norx3241v3 4.08 4.09 4.12 T:lakekeyakv2 4.15 4.18 4.21 T:norx6461v3 4.19 4.21 4.24 T:norx6444v3 4.19 4.21 4.24 T:norx6444v2 4.20 4.22 4.25 T:norx6461v2 4.52 4.54 4.57 T:lakekeyakv1 4.66 4.67 4.69 T:norx3241v1 4.85 4.88 4.91 T:norx6444v1 5.05 5.08 5.12 T:norx6461v1 5.10 5.12 5.14 T:aes128n12t8clocv2 5.09 5.12 5.15 T:aes128n8t8clocv2 5.12 5.12 5.13 T:aes128n12t8clocv3 5.11 5.12 5.13 T:aes128n12t8silcv2 5.12 5.12 5.13 T:aes128n12t8silcv3 5.12 5.12 5.13 T:aes128n8t8silcv2 5.12 5.13 5.13 T:aes128otrsv3 5.73 5.75 5.78 T:norx3261v3 5.75 5.77 5.81 T:norx3261v2 6.59 6.66 6.69 T:ketjemajorv2 7.12 7.13 7.13 T:aes256otrsv3 7.59 7.61 7.64 T:norx3261v1 8.00 8.01 8.02 T:acorn128v2 8.23 8.26 8.27 T:acorn128v3 8.58 8.59 8.63 T:ascon128av11 8.52 8.65 8.72 ascon128av12 8.61 8.65 8.75 T:ascon96v1 8.74 8.78 8.80 T:riverkeyakv2 9.62 9.66 9.69 T:ketjeminorv2 10.44 10.44 10.45 T:aesjambuv1 12.62 12.64 12.69 T:ascon128v11 12.62 12.65 12.69 T:ascon128v1 12.62 12.65 12.67 ascon128v12 13.87 13.90 13.94 T:aes128n8clocv1 13.86 13.90 13.96 T:aes128n12clocv1 14.22 14.23 14.29 T:twine80n6t4clocv3 14.89 14.91 14.94 T:aes128otrsv2 14.89 14.92 14.97 T:aes128otrsv1 14.86 14.95 15.17 T:twine80n6t4clocv2 15.02 15.04 15.07 T:aes128otrpv2 15.06 15.09 15.13 T:aes128otrpv1 18.40 18.42 18.46 T:aes256otrsv2 18.44 18.51 18.58 T:aes256otrsv1 19.95 19.97 20.00 T:aes256otrpv2 19.95 19.98 20.02 T:aes256otrpv1 26.04 26.07 26.14 T:ketjesrv1 26.28 26.37 26.41 T:proest256otrv1 26.61 26.65 26.71 T:aeadaes128ocbtaglen64v1 26.60 26.67 26.80 T:aeadaes128ocbtaglen96v1 28.35 28.40 28.41 T:ketjesrv2 28.51 28.54 28.58 T:colm127v1 31.59 31.69 31.73 T:aeadaes192ocbtaglen96v1 31.64 31.71 31.82 T:aeadaes192ocbtaglen64v1 36.53 36.57 36.61 T:aeadaes256ocbtaglen64v1 36.52 36.59 36.64 T:aeadaes256ocbtaglen96v1 58.02 58.21 58.42 T:ketjejrv1 59.95 60.23 60.37 T:proest128otrv1 60.22 60.47 60.98 T:aezv1 69.81? 71.83? 88.92? T:present80n6t4silcv3 87.81 88.65 91.95 T:deoxysneq128128v13 87.90 88.93 89.18 T:deoxyseq128128v13 103.71 103.99 104.28 T:ketjejrv2 117.72 117.82 117.97 T:led80n6t4silcv3 134.20 134.38 135.26 T:deoxyseq256128v13 134.70 134.86 135.02 T:deoxysneq256128v13 423.70 424.05 424.32 T:acorn128 2731.21 2732.18 2732.60 T:present80n6t4silcv2 2731.90 2732.39 2732.81 T:present80n6silcv1 4188.15 4190.94 4193.92 T:led80n6t4silcv2 4189.09 4192.21 4195.63 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.22? 0.25? 0.29? T:tiaoxinv2 0.22? 0.26? 0.29? T:tiaoxinv1 0.29 0.30 0.32 T:aegis128l 0.31 0.32 0.32 aegis128l 0.41 0.41 0.42 T:aezv4 0.41 0.42 0.42 T:aezv3 0.42 0.42 0.44 T:aezv5 0.50 0.52 0.52 T:aegis128 0.51 0.54 0.54 aegis256 0.77 0.79 0.82 T:aeadaes128ocbtaglen128v1 0.81 0.82 0.84 T:morus1280128v1 0.81 0.83 0.84 T:morus1280128v2 0.86 0.87 0.88 T:aes128otrcv3 0.86 0.87 0.89 T:morus1280256v1 0.87 0.88 0.88 T:morus1280256v2 0.91? 0.93? 1.22? T:aeadaes192ocbtaglen128v1 1.02 1.02 1.03 T:aes128otrpv3 1.08 1.09 1.10 T:morus640128v2 1.08 1.10 1.11 T:aes256otrcv3 1.10 1.11 1.12 T:colm0v1 1.11 1.12 1.13 T:morus640128v1 1.24 1.28 1.33 T:deoxysneq128128v1 1.26 1.29 1.30 T:deoxysi128v141 1.31 1.33 1.34 T:deoxysii128v141 1.33 1.34 1.35 T:aes256otrpv3 1.32 1.34 1.37 T:deoxyseq128128v1 1.45 1.48 1.50 T:deoxysneq256128v1 1.47 1.49 1.52 T:deoxysii256v141 1.47 1.51 1.54 T:deoxysi256v141 1.47 1.52 1.58 T:deoxyseq256128v1 1.79 1.80 1.81 T:aes128gcmv1 1.80 1.81 1.83 aes256gcmv1 2.01 2.02 2.03 T:aeadaes256ocbtaglen128v1 2.08 2.11 2.13 T:oceankeyakv2 2.09 2.12 2.15 T:lunarkeyakv2 2.50 2.52 2.54 T:seakeyakv2 2.79 2.81 2.82 T:norx6441v3 2.81 2.83 2.84 T:norx6441v2 3.34 3.38 3.40 T:norx6441v1 3.83 3.84 3.85 T:norx3241v2 3.87 3.89 3.91 T:norx3241v3 4.06 4.11 4.15 T:lakekeyakv2 4.16 4.17 4.20 T:norx6461v3 4.19 4.21 4.22 T:norx6461v2 4.19 4.22 4.25 T:norx6444v3 4.18 4.23 4.25 T:norx6444v2 4.52 4.54 4.58 T:lakekeyakv1 4.65 4.66 4.67 T:norx3241v1 4.85 4.89 4.91 T:norx6444v1 4.99 5.06 5.09 T:norx6461v1 5.09 5.10 5.14 T:aes128n12t8clocv2 5.10 5.11 5.12 T:aes128n12t8silcv2 5.10 5.11 5.13 T:aes128n8t8clocv2 5.10 5.12 5.13 T:aes128n8t8silcv2 5.12 5.12 5.12 T:aes128n12t8silcv3 5.11 5.12 5.13 T:aes128n12t8clocv3 5.12 5.13 5.13 T:aes128otrsv3 5.71 5.72 5.77 T:norx3261v3 5.75 5.75 5.77 T:norx3261v2 6.62 6.67 6.70 T:ketjemajorv2 7.12 7.13 7.13 T:aes256otrsv3 7.59 7.61 7.64 T:norx3261v1 8.00 8.01 8.03 T:acorn128v2 8.25 8.26 8.28 T:acorn128v3 8.58 8.60 8.61 T:ascon128av11 8.60 8.63 8.71 T:ascon96v1 8.56 8.64 8.69 ascon128av12 8.75 8.77 8.80 T:riverkeyakv2 9.64 9.66 9.68 T:ketjeminorv2 10.44 10.44 10.45 T:aesjambuv1 12.61 12.64 12.67 T:ascon128v11 12.63 12.66 12.68 ascon128v12 12.63 12.66 12.67 T:ascon128v1 13.85 13.90 13.94 T:aes128n12clocv1 13.86 13.90 13.93 T:aes128n8clocv1 14.21 14.22 14.26 T:twine80n6t4clocv3 14.89 14.91 14.94 T:aes128otrsv2 14.90 14.92 14.96 T:aes128otrsv1 15.02 15.04 15.09 T:aes128otrpv2 15.06 15.10 15.16 T:aes128otrpv1 14.87 15.14 15.17 T:twine80n6t4clocv2 18.37 18.40 18.42 T:aes256otrsv2 18.38 18.50 18.52 T:aes256otrsv1 19.94 19.98 20.00 T:aes256otrpv2 19.96 19.98 20.01 T:aes256otrpv1 26.04 26.06 26.15 T:ketjesrv1 26.29 26.33 26.41 T:proest256otrv1 26.60 26.64 26.71 T:aeadaes128ocbtaglen64v1 26.62 26.70 26.83 T:aeadaes128ocbtaglen96v1 28.12 28.38 28.42 T:ketjesrv2 28.54 28.56 28.61 T:colm127v1 31.61 31.67 31.72 T:aeadaes192ocbtaglen96v1 31.66 31.69 31.91 T:aeadaes192ocbtaglen64v1 36.52 36.57 36.64 T:aeadaes256ocbtaglen64v1 36.53 36.58 36.63 T:aeadaes256ocbtaglen96v1 58.08 58.24 58.49 T:ketjejrv1 60.17 60.25 60.37 T:proest128otrv1 60.21 60.40 60.88 T:aezv1 69.86? 71.83? 89.06? T:present80n6t4silcv3 88.08 88.58 91.97 T:deoxysneq128128v13 88.06 88.92 89.19 T:deoxyseq128128v13 103.75 103.93 104.17 T:ketjejrv2 117.81 117.88 117.95 T:led80n6t4silcv3 134.20 134.37 135.24 T:deoxyseq256128v13 134.82 134.93 135.09 T:deoxysneq256128v13 423.54 423.82 424.32 T:acorn128 2731.59 2732.23 2732.96 T:present80n6silcv1 2731.46 2732.38 2732.69 T:present80n6t4silcv2 4191.64 4194.20 4197.29 T:led80n6t4silcv2 4191.74 4195.42 4201.12 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.40? 0.41? 0.45? T:tiaoxinv2 0.41 0.42 0.43 T:tiaoxinv1 0.41 0.42 0.44 T:aegis128l 0.42 0.43 0.44 aegis128l 0.62 0.62 0.63 T:aegis128 0.66 0.67 0.67 aegis256 0.83 0.83 0.86 T:aezv5 0.82 0.83 0.84 T:aezv4 0.84 0.84 0.85 T:aezv3 0.99 1.00 1.07 T:aeadaes128ocbtaglen128v1 1.11 1.11 1.12 T:morus1280128v1 1.11 1.12 1.13 T:morus1280128v2 1.14? 1.15? 1.27? T:aeadaes192ocbtaglen128v1 1.16 1.17 1.18 T:morus1280256v2 1.17 1.17 1.17 T:aes128otrpv3 1.18 1.19 1.21 T:morus1280256v1 1.24 1.24 1.25 T:aes128otrcv3 1.28 1.29 1.29 T:morus640128v1 1.29 1.29 1.31 T:morus640128v2 1.55 1.55 1.57 T:aes256otrpv3 1.55 1.58 1.59 T:deoxysneq128128v1 1.62 1.63 1.69 T:deoxysi128v141 1.66 1.67 1.67 T:aes256otrcv3 1.80 1.81 1.82 T:aeadaes256ocbtaglen128v1 1.79 1.81 1.84 T:deoxysneq256128v1 1.89 1.90 1.91 T:deoxysi256v141 2.10 2.10 2.11 T:colm0v1 2.41 2.42 2.43 T:aes128gcmv1 2.49 2.50 2.52 T:deoxysii128v141 2.53 2.55 2.59 T:deoxyseq128128v1 2.56 2.57 2.58 aes256gcmv1 2.81 2.82 2.82 T:deoxysii256v141 2.80 2.83 2.89 T:deoxyseq256128v1 3.19 3.19 3.19 T:aes128otrsv3 3.28 3.29 3.30 T:norx6441v2 3.28 3.29 3.30 T:norx6441v3 3.78 3.79 3.81 T:norx6441v1 3.80 3.81 3.82 T:seakeyakv2 4.17 4.19 4.20 T:norx3241v3 4.18 4.19 4.20 T:norx3241v2 4.39 4.39 4.40 T:aes256otrsv3 4.90 4.91 4.92 T:norx6461v3 4.91 4.93 4.94 T:norx6461v2 4.92 4.93 4.95 T:norx3241v1 4.99 5.01 5.04 T:lakekeyakv2 5.13 5.14 5.14 T:oceankeyakv2 5.26 5.26 5.26 T:aes128n12t8clocv3 5.26 5.27 5.27 T:aes128n8t8clocv2 5.26 5.27 5.27 T:aes128n12t8clocv2 5.30 5.30 5.31 T:aes128n12t8silcv2 5.30 5.31 5.31 T:aes128n12t8silcv3 5.30 5.31 5.31 T:aes128n8t8silcv2 5.67 5.69 5.71 T:lakekeyakv1 5.67 5.70 5.71 T:norx6461v1 6.10 6.11 6.12 T:norx6444v2 6.11 6.12 6.15 T:norx6444v3 6.26 6.27 6.29 T:norx3261v2 6.27 6.30 6.30 T:norx3261v3 6.96 6.97 6.98 T:norx6444v1 8.03 8.04 8.05 T:norx3261v1 8.81 8.82 8.84 T:ascon96v1 8.89 8.93 8.95 T:ascon128av11 8.92 8.93 8.96 ascon128av12 8.93 8.96 9.04 T:lunarkeyakv2 9.08 9.09 9.10 T:acorn128v3 9.28 9.30 9.31 T:acorn128v2 9.82 9.83 9.86 T:riverkeyakv2 10.16 10.18 10.22 T:ketjemajorv2 10.58 10.58 10.58 T:aesjambuv1 12.45 12.47 12.49 T:ketjeminorv2 12.91 12.93 13.01 T:ascon128v1 12.92 12.93 12.99 T:ascon128v11 12.93 12.94 12.95 ascon128v12 14.75 14.77 14.81 T:twine80n6t4clocv3 15.46 15.49 15.60 T:twine80n6t4clocv2 16.00 16.01 16.02 T:aes128otrsv1 16.00 16.01 16.03 T:aes128otrsv2 16.10 16.10 16.11 T:aes128otrpv2 16.09 16.12 16.14 T:aes128otrpv1 20.52 20.53 20.56 T:aes128n8clocv1 20.54 20.55 20.60 T:aes128n12clocv1 20.77 20.79 20.80 T:aes256otrsv2 20.81 20.84 20.87 T:aes256otrsv1 21.17 21.20 21.22 T:aes256otrpv1 21.20 21.21 21.23 T:aes256otrpv2 27.78 27.81 27.83 T:aeadaes128ocbtaglen64v1 27.82 27.85 27.90 T:aeadaes128ocbtaglen96v1 28.45 28.48 28.63 T:proest256otrv1 29.77 29.80 29.83 T:ketjesrv1 31.87 31.88 32.00 T:ketjesrv2 32.89 32.91 32.94 T:aeadaes192ocbtaglen96v1 32.88 32.91 33.00 T:aeadaes192ocbtaglen64v1 37.92 37.93 37.96 T:aeadaes256ocbtaglen64v1 37.91 37.94 37.99 T:aeadaes256ocbtaglen96v1 45.31 45.33 45.39 T:colm127v1 63.00 63.09 63.14 T:proest128otrv1 63.21 63.23 63.36 T:ketjejrv1 72.62 73.07 78.09 T:present80n6t4silcv3 88.90 88.95 88.98 T:deoxysneq128128v13 107.94 108.03 108.26 T:ketjejrv2 119.61 119.65 119.68 T:led80n6t4silcv3 123.37 123.56 123.79 T:aezv1 135.80 135.99 136.26 T:deoxysneq256128v13 135.19 136.95 137.06 T:deoxyseq128128v13 205.32 205.52 206.29 T:deoxyseq256128v13 474.79 475.02 475.49 T:acorn128 4118.60 4118.91 4119.16 T:present80n6t4silcv2 4119.72 4119.99 4120.28 T:present80n6silcv1 6291.52 6295.43 6299.88 T:led80n6silcv1 6298.62 6299.36 6300.61 T:led80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.41 0.42 0.44 T:aegis128l 0.44 0.44 0.46 aegis128l 0.47 0.47 0.49 T:tiaoxinv1 0.47 0.48 0.49 T:tiaoxinv2 0.62 0.63 0.63 T:aegis128 0.68 0.68 0.69 aegis256 0.82 0.82 0.83 T:aezv4 0.83 0.84 0.84 T:aezv3 0.83 0.84 0.85 T:aezv5 0.99 0.99 1.07 T:aeadaes128ocbtaglen128v1 1.10 1.10 1.11 T:morus1280128v1 1.10 1.11 1.12 T:morus1280128v2 1.13 1.13 1.15 T:morus1280256v1 1.13? 1.14? 1.33? T:aeadaes192ocbtaglen128v1 1.15 1.16 1.17 T:morus1280256v2 1.17 1.18 1.18 T:aes128otrpv3 1.26 1.26 1.27 T:aes128otrcv3 1.29 1.29 1.29 T:morus640128v1 1.30 1.30 1.31 T:morus640128v2 1.57 1.57 1.58 T:aes256otrpv3 1.69 1.70 1.70 T:aes256otrcv3 1.76 1.77 1.85 T:deoxysi128v141 1.79 1.80 1.82 T:deoxysneq128128v1 1.83 1.84 1.85 T:aeadaes256ocbtaglen128v1 1.97 1.99 2.02 T:deoxysneq256128v1 2.12 2.13 2.14 T:colm0v1 2.13 2.14 2.20 T:deoxysi256v141 2.49 2.51 2.54 T:deoxysii128v141 2.66 2.66 2.69 T:aes128gcmv1 2.89 2.90 2.96 T:deoxyseq128128v1 2.91 2.92 2.94 T:deoxysii256v141 3.04 3.05 3.09 aes256gcmv1 3.15 3.16 3.18 T:deoxyseq256128v1 3.20 3.20 3.20 T:aes128otrsv3 3.27 3.28 3.29 T:norx6441v3 3.27 3.28 3.30 T:norx6441v2 3.80 3.81 3.82 T:norx6441v1 3.84 3.85 3.89 T:seakeyakv2 4.16 4.16 4.18 T:norx3241v3 4.16 4.17 4.18 T:norx3241v2 4.42 4.42 4.43 T:aes256otrsv3 4.88 4.89 4.90 T:norx3241v1 4.89 4.90 4.92 T:norx6461v2 4.91 4.92 4.94 T:norx6461v3 4.98 5.00 5.01 T:lakekeyakv2 5.18 5.19 5.22 T:oceankeyakv2 5.23 5.24 5.25 T:aes128n12t8clocv2 5.22 5.24 5.25 T:aes128n12t8clocv3 5.23 5.24 5.25 T:aes128n8t8clocv2 5.27 5.27 5.28 T:aes128n12t8silcv2 5.27 5.28 5.28 T:aes128n12t8silcv3 5.27 5.28 5.28 T:aes128n8t8silcv2 5.52 5.53 5.65 T:lakekeyakv1 5.74 5.76 5.80 T:norx6461v1 6.08 6.09 6.10 T:norx6444v2 6.10 6.11 6.14 T:norx6444v3 6.21 6.23 6.24 T:norx3261v3 6.25 6.26 6.27 T:norx3261v2 6.94 6.96 6.97 T:norx6444v1 7.94 7.95 7.96 T:norx3261v1 8.83 8.84 8.86 T:ascon128av11 8.83 8.87 8.94 ascon128av12 8.90 8.91 8.96 T:ascon96v1 9.00 9.02 9.04 T:lunarkeyakv2 9.22 9.33 9.33 T:acorn128v3 9.33 9.33 9.34 T:acorn128v2 9.73 9.75 9.77 T:ketjemajorv2 9.87 9.88 9.89 T:riverkeyakv2 10.75 10.75 10.76 T:aesjambuv1 12.34 12.35 12.38 T:ketjeminorv2 12.91 12.92 12.94 ascon128v12 12.88 12.97 13.00 T:ascon128v11 12.88 12.98 13.01 T:ascon128v1 14.75 14.76 14.78 T:twine80n6t4clocv3 15.48 15.50 15.61 T:twine80n6t4clocv2 16.20 16.24 16.25 T:aes128otrsv1 16.25 16.28 16.37 T:aes128otrsv2 16.30 16.32 16.34 T:aes128otrpv1 16.31 16.33 16.35 T:aes128otrpv2 20.10 20.11 20.14 T:aes128n12clocv1 20.33 20.35 20.38 T:aes128n8clocv1 20.96 20.97 20.99 T:aes256otrsv2 20.95 21.00 21.06 T:aes256otrsv1 21.38 21.39 21.42 T:aes256otrpv1 21.42 21.44 21.47 T:aes256otrpv2 28.50 28.58 28.63 T:proest256otrv1 30.38 30.40 30.46 T:ketjesrv1 32.01 32.07 32.11 T:ketjesrv2 32.62 32.64 32.67 T:aeadaes128ocbtaglen64v1 32.65 32.69 32.75 T:aeadaes128ocbtaglen96v1 38.77 38.78 38.83 T:aeadaes192ocbtaglen96v1 38.74 38.79 38.83 T:aeadaes192ocbtaglen64v1 44.86 44.91 44.97 T:aeadaes256ocbtaglen64v1 44.89 44.95 45.05 T:aeadaes256ocbtaglen96v1 54.54 54.58 54.62 T:colm127v1 62.76 62.85 62.93 T:proest128otrv1 63.71 63.79 64.02 T:ketjejrv1 72.83 73.24 80.72 T:present80n6t4silcv3 105.70 105.93 107.35 T:deoxysneq128128v13 107.77 107.87 107.97 T:ketjejrv2 119.31 119.39 119.47 T:led80n6t4silcv3 123.69 123.82 124.15 T:aezv1 135.59 136.27 137.06 T:deoxyseq128128v13 154.61 154.97 155.29 T:deoxysneq256128v13 204.89 205.15 206.36 T:deoxyseq256128v13 487.59 488.58 488.78 T:acorn128 4119.16 4119.69 4120.55 T:present80n6t4silcv2 4119.61 4120.10 4120.53 T:present80n6silcv1 6294.54 6295.94 6298.53 T:led80n6silcv1 6298.56 6300.40 6301.10 T:led80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.41 0.41 0.42 T:aegis128l 0.46 0.46 0.47 T:tiaoxinv1 0.47 0.48 0.50 T:tiaoxinv2 0.50 0.50 0.51 T:aezv4 0.51 0.51 0.52 T:aezv5 0.52 0.52 0.52 T:aezv3 0.52 0.53 0.53 aegis128l 0.63 0.63 0.63 T:aegis128 0.71 0.71 0.72 aegis256 0.98 0.99 1.01 T:aeadaes128ocbtaglen128v1 1.09 1.10 1.11 T:morus1280128v1 1.10 1.11 1.11 T:morus1280128v2 1.13 1.13 1.14 T:morus1280256v1 1.13 1.14 1.16 T:aeadaes192ocbtaglen128v1 1.15 1.15 1.16 T:morus1280256v2 1.17 1.18 1.18 T:aes128otrpv3 1.26 1.26 1.27 T:aes128otrcv3 1.29 1.29 1.29 T:morus640128v1 1.30 1.30 1.30 T:morus640128v2 1.56 1.57 1.57 T:aes256otrpv3 1.69 1.70 1.70 T:aes256otrcv3 1.74 1.75 1.77 T:deoxysi128v141 1.78 1.79 1.80 T:deoxysneq128128v1 1.82 1.83 1.85 T:aeadaes256ocbtaglen128v1 1.98 1.99 2.00 T:deoxysneq256128v1 2.13 2.13 2.14 T:colm0v1 2.13 2.15 2.17 T:deoxysi256v141 2.48 2.50 2.52 T:deoxysii128v141 2.65 2.66 2.67 T:aes128gcmv1 2.89 2.90 2.92 T:deoxyseq128128v1 2.91 2.93 2.94 T:deoxysii256v141 3.04 3.05 3.06 aes256gcmv1 3.15 3.16 3.16 T:deoxyseq256128v1 3.20 3.20 3.20 T:aes128otrsv3 3.26 3.26 3.28 T:norx6441v2 3.26 3.28 3.29 T:norx6441v3 3.80 3.80 3.81 T:norx6441v1 3.88 3.89 3.92 T:seakeyakv2 4.15 4.16 4.17 T:norx3241v2 4.16 4.17 4.17 T:norx3241v3 4.42 4.42 4.42 T:aes256otrsv3 4.89 4.89 4.90 T:norx3241v1 4.88 4.89 4.91 T:norx6461v2 4.90 4.91 4.93 T:norx6461v3 5.02 5.03 5.04 T:lakekeyakv2 5.21 5.22 5.23 T:oceankeyakv2 5.23 5.23 5.23 T:aes128n12t8clocv2 5.22 5.23 5.24 T:aes128n12t8clocv3 5.22 5.23 5.24 T:aes128n8t8clocv2 5.26 5.28 5.28 T:aes128n8t8silcv2 5.26 5.28 5.28 T:aes128n12t8silcv3 5.26 5.28 5.28 T:aes128n12t8silcv2 5.58 5.60 5.63 T:lakekeyakv1 5.71 5.72 5.74 T:norx6461v1 6.11 6.12 6.13 T:norx6444v2 6.13 6.16 6.17 T:norx6444v3 6.20 6.21 6.22 T:norx3261v3 6.25 6.26 6.27 T:norx3261v2 6.97 6.98 6.99 T:norx6444v1 7.94 7.96 7.96 T:norx3261v1 8.81 8.83 8.83 T:ascon128av11 8.84 8.85 8.91 ascon128av12 8.88 8.90 8.92 T:ascon96v1 9.02 9.04 9.06 T:lunarkeyakv2 9.32 9.33 9.33 T:acorn128v3 9.32 9.33 9.33 T:acorn128v2 9.79 9.81 9.82 T:ketjemajorv2 9.90 9.91 9.91 T:riverkeyakv2 10.75 10.76 10.76 T:aesjambuv1 12.43 12.44 12.47 T:ketjeminorv2 12.92 12.92 12.93 ascon128v12 12.97 12.99 13.00 T:ascon128v11 12.97 12.99 13.01 T:ascon128v1 14.72 14.74 14.78 T:twine80n6t4clocv3 15.48 15.59 15.60 T:twine80n6t4clocv2 16.22 16.23 16.27 T:aes128otrsv1 16.28 16.30 16.40 T:aes128otrsv2 16.33 16.35 16.35 T:aes128otrpv1 16.34 16.37 16.38 T:aes128otrpv2 20.07 20.10 20.12 T:aes128n12clocv1 20.35 20.35 20.38 T:aes128n8clocv1 20.98 21.00 21.01 T:aes256otrsv2 21.00 21.03 21.07 T:aes256otrsv1 21.41 21.43 21.47 T:aes256otrpv1 21.44 21.47 21.51 T:aes256otrpv2 28.46 28.51 28.66 T:proest256otrv1 30.28 30.47 30.49 T:ketjesrv1 32.05 32.09 32.15 T:ketjesrv2 32.61 32.62 32.68 T:aeadaes128ocbtaglen64v1 32.64 32.70 32.77 T:aeadaes128ocbtaglen96v1 38.76 38.79 38.82 T:aeadaes192ocbtaglen96v1 38.76 38.80 38.85 T:aeadaes192ocbtaglen64v1 44.89 44.92 44.96 T:aeadaes256ocbtaglen96v1 44.91 44.93 44.95 T:aeadaes256ocbtaglen64v1 54.52 54.55 54.58 T:colm127v1 62.79 62.88 63.01 T:proest128otrv1 63.81 63.84 63.91 T:ketjejrv1 72.82 73.20 80.67 T:present80n6t4silcv3 105.62 105.79 107.48 T:deoxysneq128128v13 107.77 107.93 108.06 T:ketjejrv2 119.37 119.43 119.48 T:led80n6t4silcv3 123.47 123.62 123.77 T:aezv1 135.52 136.46 136.96 T:deoxyseq128128v13 154.64 154.95 155.43 T:deoxysneq256128v13 205.01 205.16 206.35 T:deoxyseq256128v13 488.49 488.63 488.93 T:acorn128 4119.13 4119.41 4119.80 T:present80n6t4silcv2 4119.56 4120.06 4120.25 T:present80n6silcv1 6294.15 6296.01 6298.86 T:led80n6silcv1 6296.66 6299.23 6300.29 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 2.17? 2.20? 2.52? T:aegis128l 2.23? 2.35? 2.65? T:aegis128 2.18? 2.37? 2.77? aegis128l 2.61? 2.63? 3.10? aegis256 2.98? 3.24? 3.98? T:tiaoxinv2 3.13? 3.31? 3.72? T:tiaoxinv1 3.74 3.78 4.04 T:aezv5 3.90 3.91 4.13 T:aezv4 4.00 4.04 4.30 T:aezv3 4.75 4.79 5.00 T:morus640128v1 4.95 5.05 5.23 T:morus640128v2 5.04 5.09 5.10 T:aes128otrpv3 5.59 5.62 5.87 T:deoxysneq128128v1 5.30? 5.75? 8.95? T:aeadaes128ocbtaglen128v1 6.14 6.23 6.59 T:morus1280128v1 6.34 6.34 6.40 T:aes128otrsv3 6.33 6.38 6.62 T:morus1280256v1 6.39 6.45 6.91 T:morus1280128v2 5.84? 6.55? 12.34? T:aeadaes192ocbtaglen128v1 6.58 6.61 6.83 T:aeadaes256ocbtaglen128v1 6.59 6.64 6.77 T:deoxysneq256128v1 6.65 6.81 6.91 T:morus1280256v2 6.81 6.93 7.27 T:deoxysi128v141 7.29 7.30 7.32 T:aes256otrpv3 7.37 7.38 7.39 T:aes128n12t8clocv3 7.43 7.48 7.68 T:colm0v1 7.48 7.52 7.83 T:aes128otrcv3 7.39 7.54 7.69 T:aes128n12t8clocv2 7.55 7.59 7.61 T:aes128n8t8clocv2 8.48 8.48 8.49 T:aes128n12t8silcv3 8.48 8.49 8.50 T:aes128n12t8silcv2 8.49 8.50 8.51 T:aes128n8t8silcv2 8.70 8.74 9.02 T:aes256otrsv3 9.91 10.01 10.12 T:deoxysi256v141 10.46 10.48 10.53 T:aes256otrcv3 10.47 10.55 10.68 T:aes128gcmv1 10.61 10.70 10.77 T:norx3241v1 10.63 10.73 10.87 T:norx3241v2 10.73 10.80 10.88 T:norx3241v3 10.91 11.08 11.18 T:norx6441v1 11.32 11.39 11.50 T:norx6441v3 11.35 11.48 11.66 T:deoxyseq128128v1 11.43 11.48 11.91 T:deoxysii128v141 11.52 11.56 11.65 T:norx6441v2 11.50 11.64 12.27 T:deoxyseq256128v1 11.59 11.73 12.55 aes256gcmv1 13.28 13.33 13.57 T:deoxysii256v141 13.58 13.61 13.71 T:ascon128av11 13.55 13.62 13.88 ascon128av12 13.60 13.73 13.95 T:ascon96v1 14.69 14.70 14.76 T:aesjambuv1 15.62 15.69 15.76 T:norx3261v3 15.80 15.91 15.96 T:norx3261v2 16.23 16.34 16.46 T:norx6461v1 16.47 16.60 16.74 T:norx6461v3 16.90 16.99 17.09 T:norx6461v2 16.95 17.02 17.04 T:norx3261v1 17.26 17.34 17.67 ascon128v12 17.18 17.37 18.02 T:ascon128v1 17.18 17.45 18.01 T:ascon128v11 18.77 18.98 19.44 T:lakekeyakv1 21.67 22.10 22.48 T:lakekeyakv2 22.40 22.44 22.48 T:twine80n6t4clocv3 22.75 22.85 22.95 T:riverkeyakv2 22.84 22.93 23.15 T:twine80n6t4clocv2 25.09 25.28 25.70 T:aes128n12clocv1 25.05 25.36 25.60 T:aes128n8clocv1 27.13 27.31 27.55 T:aes128otrsv1 27.23 27.34 27.80 T:aes128otrsv2 27.33 27.44 27.82 T:aes128otrpv1 27.57 27.70 28.02 T:aes128otrpv2 35.07 35.27 35.40 T:aes256otrsv1 35.08 35.34 35.59 T:aes256otrsv2 35.67 35.73 35.97 T:seakeyakv2 35.89 36.05 36.33 T:aes256otrpv1 36.09 36.14 36.33 T:aes256otrpv2 36.45 36.59 36.73 T:acorn128v3 36.94 37.11 37.42 T:acorn128v2 43.46 43.62 43.71 T:norx6444v2 43.90 43.98 44.20 T:norx6444v3 44.06 44.31 44.48 T:aeadaes128ocbtaglen64v1 44.33 44.89 45.53 T:aeadaes128ocbtaglen96v1 46.00 46.09 46.22 T:ketjeminorv2 47.70 47.93 48.13 T:ketjesrv1 49.65 49.90 50.09 T:norx6444v1 51.27 51.55 52.02 T:aeadaes192ocbtaglen96v1 51.72 51.88 52.16 T:aeadaes192ocbtaglen64v1 56.09 56.26 56.37 T:ketjesrv2 56.00 56.27 56.44 T:ketjemajorv2 57.11 57.32 57.56 T:oceankeyakv2 59.48 59.69 60.20 T:aeadaes256ocbtaglen64v1 59.63 59.79 60.34 T:aeadaes256ocbtaglen96v1 66.61 66.71 66.83 T:colm127v1 82.49 82.62 82.86 T:proest256otrv1 84.63 85.38 85.77 T:ketjejrv1 90.14 90.79 96.07 T:present80n6t4silcv3 100.59 100.95 101.15 T:deoxysneq128128v13 122.23 122.79 123.20 T:proest128otrv1 142.19 142.38 142.54 T:led80n6t4silcv3 142.93 143.38 144.12 T:aezv1 144.52 144.90 145.63 T:ketjejrv2 146.00 146.41 146.66 T:lunarkeyakv2 152.78 152.95 153.24 T:deoxysneq256128v13 168.35 170.20 170.63 T:deoxyseq128128v13 254.76 255.20 256.37 T:deoxyseq256128v13 1708.73 1709.55 1711.63 T:acorn128 4610.27 4611.05 4612.52 T:present80n6t4silcv2 4611.99 4613.20 4616.33 T:present80n6silcv1 6860.25 6888.32 6958.16 T:led80n6silcv1 6872.94 6921.12 6970.60 T:led80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 2.16? 2.21? 2.48? T:aegis128l 2.32? 2.42? 2.95? aegis128l 2.26? 2.47? 2.76? T:aegis128 2.78? 2.83? 3.45? aegis256 3.02? 3.11? 3.89? T:tiaoxinv2 3.13 3.23 3.46 T:tiaoxinv1 3.81 3.83 4.02 T:aezv5 3.88 3.89 4.03 T:aezv4 4.06 4.09 4.40 T:aezv3 4.73 4.73 5.00 T:morus640128v1 5.02 5.09 5.26 T:morus640128v2 5.25 5.27 5.30 T:aes128otrpv3 5.82? 6.00? 8.85? T:aeadaes128ocbtaglen128v1 6.23 6.30 6.65 T:morus1280128v1 6.24 6.44 6.80 T:morus1280256v1 6.45 6.55 6.70 T:morus1280128v2 6.66 6.68 6.70 T:aes128otrsv3 6.61? 6.71? 9.29? T:aeadaes192ocbtaglen128v1 6.67 6.78 6.95 T:morus1280256v2 6.98 7.03 7.08 T:aeadaes256ocbtaglen128v1 7.37 7.40 7.61 T:aes128n12t8clocv2 7.45 7.48 7.49 T:aes128n12t8clocv3 7.46 7.48 7.53 T:aes256otrpv3 7.38 7.61 7.66 T:aes128n8t8clocv2 7.86 7.93 8.04 T:aes128otrcv3 8.20 8.27 8.47 T:colm0v1 8.49 8.49 8.52 T:aes128n12t8silcv3 8.49 8.50 8.51 T:aes128n8t8silcv2 8.45 8.52 8.66 T:deoxysneq256128v1 8.49 8.81 8.84 T:aes128n12t8silcv2 8.92 8.95 9.05 T:deoxysneq128128v1 9.44 9.47 9.55 T:aes256otrsv3 10.07 10.16 10.54 T:deoxysi128v141 10.44 10.69 11.13 T:aes128gcmv1 10.67 10.79 10.84 T:norx3241v1 10.83 10.95 11.02 T:norx3241v2 10.79 10.96 11.12 T:norx3241v3 11.18 11.19 11.32 T:aes256otrcv3 11.17 11.23 11.33 T:norx6441v1 11.65 11.74 12.52 aes256gcmv1 11.70 11.77 11.91 T:norx6441v2 11.78 11.92 12.08 T:norx6441v3 12.50 12.54 12.71 T:deoxysii128v141 13.29 13.41 13.83 T:ascon128av11 13.40 13.57 13.93 T:ascon96v1 13.58 13.80 14.27 ascon128av12 13.84 13.91 13.99 T:deoxyseq256128v1 14.45 14.59 15.21 T:deoxysi256v141 14.88 14.91 14.93 T:aesjambuv1 14.88 15.08 15.64 T:deoxysii256v141 15.94 15.96 16.05 T:norx3261v3 16.07 16.12 16.27 T:norx3261v2 16.24 16.42 16.86 T:deoxyseq128128v1 16.39 16.48 16.55 T:norx6461v1 17.09 17.15 17.29 T:norx6461v2 17.06 17.21 17.30 T:norx3261v1 17.22 17.22 17.84 ascon128v12 17.22 17.25 17.58 T:norx6461v3 17.21 17.45 17.65 T:ascon128v11 17.29 17.45 17.55 T:ascon128v1 18.57 18.80 19.00 T:lakekeyakv1 21.77 21.87 22.34 T:lakekeyakv2 22.41 22.48 22.57 T:twine80n6t4clocv3 22.85 22.90 23.09 T:riverkeyakv2 22.99 23.07 23.23 T:twine80n6t4clocv2 24.89 24.95 25.13 T:aes128n12clocv1 24.95 25.08 25.32 T:aes128n8clocv1 27.33 27.40 27.62 T:aes128otrsv1 27.33 27.48 27.65 T:aes128otrsv2 27.52 27.59 27.65 T:aes128otrpv1 27.75 27.87 28.10 T:aes128otrpv2 35.08 35.29 35.88 T:aes256otrsv1 35.38 35.59 35.79 T:aes256otrsv2 35.82 35.93 36.16 T:seakeyakv2 36.12 36.20 36.67 T:aes256otrpv2 36.13 36.31 36.62 T:aes256otrpv1 36.54 36.60 36.77 T:acorn128v2 36.59 36.70 37.03 T:acorn128v3 43.79 44.01 44.14 T:norx6444v2 44.17 44.25 44.51 T:norx6444v3 45.89 46.11 46.22 T:ketjeminorv2 49.02 49.35 49.86 T:ketjesrv1 49.88 49.98 50.11 T:norx6444v1 52.95 53.03 53.20 T:aeadaes128ocbtaglen64v1 53.10 53.53 53.88 T:aeadaes128ocbtaglen96v1 56.22 56.34 57.03 T:ketjemajorv2 56.61 56.88 57.19 T:ketjesrv2 57.51 57.91 58.03 T:oceankeyakv2 61.67 61.86 61.97 T:aeadaes192ocbtaglen64v1 61.73 62.28 62.46 T:aeadaes192ocbtaglen96v1 71.92 72.19 72.37 T:aeadaes256ocbtaglen64v1 72.04 72.38 72.84 T:aeadaes256ocbtaglen96v1 76.17 76.33 76.77 T:colm127v1 83.63 84.11 84.75 T:proest256otrv1 85.45 85.88 87.17 T:ketjejrv1 90.47 91.11 98.43 T:present80n6t4silcv3 117.72 118.42 119.67 T:deoxysneq128128v13 122.48 125.53 125.91 T:proest128otrv1 142.01 142.33 142.85 T:led80n6t4silcv3 144.21 144.77 145.43 T:ketjejrv2 146.51 146.76 147.74 T:aezv1 146.70 146.83 147.22 T:lunarkeyakv2 169.38 170.27 170.91 T:deoxyseq128128v13 171.98 172.24 173.52 T:deoxysneq256128v13 254.88 255.55 256.01 T:deoxyseq256128v13 1717.44 1723.78 1724.23 T:acorn128 4610.88 4611.87 4615.97 T:present80n6t4silcv2 4611.82 4612.80 4616.68 T:present80n6silcv1 6759.84 6782.75 6793.64 T:led80n6silcv1 6773.38 6788.82 6802.63 T:led80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 2.14? 2.16? 2.47? T:aegis128l 2.22 2.25 2.41 T:aegis128 2.82 2.83 2.99 aegis256 2.94 2.95 3.13 T:aezv5 2.98 3.02 3.02 T:aezv4 3.02? 3.11? 3.52? T:tiaoxinv1 3.03? 3.16? 3.83? T:tiaoxinv2 3.19 3.23 3.48 T:aezv3 3.89 3.89 4.12 aegis128l 4.70 4.73 4.88 T:morus640128v1 4.98 5.08 5.10 T:morus640128v2 5.24 5.26 5.37 T:aes128otrpv3 5.88 5.95 6.35 T:aeadaes128ocbtaglen128v1 6.20 6.24 6.42 T:morus1280128v1 6.23 6.27 6.35 T:morus1280256v1 6.44 6.49 6.67 T:morus1280128v2 6.52 6.54 6.60 T:morus1280256v2 6.62? 6.67? 12.00? T:aeadaes192ocbtaglen128v1 6.67 6.69 6.73 T:aes128otrsv3 7.00 7.05 7.09 T:aeadaes256ocbtaglen128v1 7.30 7.33 7.70 T:aes128n8t8clocv2 7.35 7.37 7.66 T:aes128n12t8clocv3 7.48 7.50 7.53 T:aes256otrpv3 7.30 7.62 7.66 T:aes128n12t8clocv2 7.81 7.84 7.95 T:aes128otrcv3 8.23 8.24 8.48 T:colm0v1 8.22 8.30 8.55 T:deoxysneq256128v1 8.42 8.43 8.43 T:aes128n12t8silcv3 8.43 8.44 8.73 T:aes128n8t8silcv2 8.61 8.66 8.91 T:deoxysneq128128v1 8.43 8.73 8.77 T:aes128n12t8silcv2 9.47 9.48 9.55 T:aes256otrsv3 10.09 10.38 10.49 T:deoxysi128v141 10.40 10.46 10.80 T:aes128gcmv1 10.82 10.83 10.98 T:norx3241v2 10.79 10.88 10.98 T:norx3241v3 10.80 10.92 10.93 T:norx3241v1 11.00 11.17 11.30 T:norx6441v1 11.16 11.19 11.23 T:aes256otrcv3 11.63 11.79 11.86 T:norx6441v2 11.69 11.88 11.95 aes256gcmv1 11.83 11.96 12.08 T:norx6441v3 12.48 12.51 12.59 T:deoxysii128v141 13.24 13.34 13.54 T:ascon128av11 13.38 13.51 13.98 T:ascon96v1 13.61 13.66 13.82 ascon128av12 13.89 13.98 14.03 T:deoxyseq256128v1 14.39 14.50 14.73 T:deoxysi256v141 14.87 14.88 14.90 T:aesjambuv1 14.89 14.95 15.43 T:deoxysii256v141 15.69 15.80 15.88 T:norx3261v3 15.92 15.96 16.15 T:norx3261v2 16.27 16.32 16.84 T:deoxyseq128128v1 16.45 16.62 16.70 T:norx6461v1 16.93 17.09 17.27 T:norx6461v2 17.12 17.16 17.22 T:norx3261v1 17.12 17.27 17.50 T:ascon128v1 17.22 17.27 17.45 ascon128v12 17.19 17.30 17.39 T:norx6461v3 17.23 17.33 17.76 T:ascon128v11 18.59 18.64 18.86 T:lakekeyakv1 21.70 21.80 22.48 T:lakekeyakv2 22.37 22.38 22.44 T:twine80n6t4clocv3 22.93 23.02 23.29 T:riverkeyakv2 22.88 23.05 23.15 T:twine80n6t4clocv2 24.80 25.02 25.85 T:aes128n12clocv1 24.92 25.03 25.38 T:aes128n8clocv1 27.40 27.52 27.86 T:aes128otrsv2 27.44 27.58 27.82 T:aes128otrsv1 27.57 27.78 27.98 T:aes128otrpv1 27.86 27.95 28.20 T:aes128otrpv2 35.17 35.41 35.66 T:aes256otrsv1 35.41 35.55 35.65 T:aes256otrsv2 35.86 35.94 36.12 T:seakeyakv2 36.19 36.30 36.57 T:aes256otrpv2 36.21 36.34 36.49 T:aes256otrpv1 36.62 36.64 36.69 T:acorn128v3 36.57 36.67 36.73 T:acorn128v2 43.73 43.90 44.11 T:norx6444v2 44.14 44.37 44.51 T:norx6444v3 47.44 47.62 47.94 T:ketjeminorv2 48.92 49.40 49.80 T:ketjesrv1 49.81 50.08 50.35 T:norx6444v1 52.97 53.09 53.21 T:aeadaes128ocbtaglen64v1 53.16 53.23 53.45 T:aeadaes128ocbtaglen96v1 56.38 56.60 56.70 T:ketjemajorv2 56.59 56.89 57.02 T:ketjesrv2 57.51 57.73 57.92 T:oceankeyakv2 61.56 61.68 61.91 T:aeadaes192ocbtaglen64v1 61.68 61.99 62.17 T:aeadaes192ocbtaglen96v1 71.63 71.94 72.15 T:aeadaes256ocbtaglen64v1 72.05 72.21 72.46 T:aeadaes256ocbtaglen96v1 75.92 76.06 76.28 T:colm127v1 81.02 81.17 81.71 T:proest256otrv1 85.84 86.24 86.67 T:ketjejrv1 90.21 90.88 99.03 T:present80n6t4silcv3 117.93 118.16 119.45 T:deoxysneq128128v13 122.32 122.55 122.63 T:proest128otrv1 142.05 142.18 142.46 T:led80n6t4silcv3 143.73 144.37 145.05 T:ketjejrv2 146.55 146.71 146.84 T:lunarkeyakv2 146.35 146.78 147.46 T:aezv1 168.84 170.70 171.27 T:deoxyseq128128v13 171.79 172.22 172.67 T:deoxysneq256128v13 255.20 255.47 256.15 T:deoxyseq256128v13 1716.93 1718.16 1724.30 T:acorn128 4610.68 4611.40 4613.17 T:present80n6t4silcv2 4611.55 4611.92 4613.77 T:present80n6silcv1 6738.99 6771.73 6798.22 T:led80n6silcv1 6762.42 6776.47 6804.31 T:led80n6t4silcv2