VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20260217

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.13 0.13 0.14 T:tiaoxinv1 0.13 0.14 0.14 T:tiaoxinv2 0.09? 0.18? 0.28? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.19 T:aegis128l 0.18 0.19 0.19 aegis128l 0.15? 0.26? 0.41? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.31 T:aegis128 0.32 0.32 0.33 T:aegis256 0.32 0.33 0.33 aegis256 0.36 0.37 0.37 T:aezv3 0.36 0.37 0.37 T:aezv4 0.37 0.38 0.38 T:aezv5 0.23? 0.40? 0.57? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrsv3 0.41 0.42 0.42 T:aes128otrcv3 0.43 0.44 0.44 T:aes128otrpv3 0.46 0.47 0.48 T:morus1280256v2 0.46 0.48 0.49 T:morus1280128v2 0.47 0.49 0.50 T:morus1280128v1 0.50 0.50 0.51 T:morus1280256v1 0.53 0.53 0.54 T:aes256otrcv3 0.53 0.54 0.54 T:deoxysi128v141 0.51 0.54 0.55 T:aes256otrsv3 0.57 0.57 0.58 T:aes256otrpv3 0.56 0.59 0.60 aes256gcmv1 0.51? 0.60? 0.61? T:deoxysi256v141 0.61 0.62 0.63 T:deoxysneq128128v1 0.70 0.70 0.71 T:deoxysneq256128v1 0.71? 0.77? 0.81? T:oceankeyakv2 0.78 0.78 0.79 T:aes128gcmv1 0.80 0.81 0.82 T:morus640128v1 0.80 0.81 0.82 T:morus640128v2 0.74? 0.82? 0.86? T:lunarkeyakv2 0.89 0.90 0.92 T:norx6444v3 1.05 1.06 1.06 T:deoxysii128v141 1.19 1.20 1.24 T:deoxysii256v141 1.24 1.25 1.26 T:deoxyseq128128v1 1.28 1.29 1.30 T:colm0v1 1.41 1.42 1.44 T:seakeyakv2 1.43 1.45 1.45 T:deoxyseq256128v1 2.18 2.19 2.20 T:norx6441v2 2.15 2.19 2.20 T:norx6441v3 2.56 2.58 2.64 T:norx6441v1 2.62 2.62 2.63 T:aes128n12t8silcv3 2.62 2.62 2.63 T:aes128n8t8clocv2 2.62 2.62 2.63 T:aes128n12t8clocv3 2.62 2.63 2.63 T:aes128n12t8clocv2 2.62 2.63 2.63 T:aes128n8t8silcv2 2.63 2.63 2.63 T:aes128n12t8silcv2 3.12 3.20 3.25 T:lakekeyakv2 3.19 3.22 3.26 T:lakekeyakv1 3.20 3.30 3.31 T:norx6461v2 3.20 3.32 3.33 T:norx6461v3 3.78 3.81 3.88 T:norx6444v1 3.81 3.89 3.91 T:norx6461v1 3.90 3.92 3.94 T:norx3241v3 3.90 3.92 3.94 T:norx3241v2 3.87 3.93 3.98 T:norx6444v2 4.48 4.50 4.52 T:norx3241v1 5.18 5.23 5.26 T:ketjemajorv2 5.24 5.26 5.28 T:acorn128v2 5.31 5.31 5.32 ascon128av12 5.31 5.32 5.32 T:ascon96v1 5.35 5.35 5.36 T:aesjambuv1 5.44 5.44 5.44 T:ascon128av11 5.61 5.80 5.83 T:norx3261v3 5.55 5.81 5.85 T:norx3261v2 6.75 6.75 6.75 T:acorn128v3 7.46 7.49 7.51 T:riverkeyakv2 7.52 7.52 7.53 T:norx3261v1 7.55 7.57 7.59 T:ketjeminorv2 7.75 7.75 7.76 ascon128v12 8.25 8.25 8.25 T:ascon128v1 8.25 8.25 8.25 T:ascon128v11 14.56 14.58 14.61 T:aes128otrpv1 14.56 14.59 14.62 T:aes128otrsv2 14.58 14.60 14.63 T:aes128otrsv1 14.58 14.60 14.62 T:aes128otrpv2 16.98 17.04 17.07 T:proest256otrv1 17.16? 18.28? 20.34? T:twine80n6t4clocv2 18.53 18.55 18.58 T:aes256otrsv2 18.55 18.57 18.60 T:aes256otrpv1 18.57 18.59 18.62 T:aes256otrpv2 18.58 18.60 18.63 T:aes256otrsv1 20.34 20.47 20.51 T:twine80n6t4clocv3 21.57 21.64 21.68 T:aeadaes128ocbtaglen64v1 21.64 21.87 21.90 T:aeadaes128ocbtaglen96v1 22.52 22.54 22.54 T:aes128n12clocv1 22.56 22.60 22.63 T:aes128n8clocv1 25.45 25.47 25.54 T:aeadaes192ocbtaglen64v1 25.52 25.55 25.57 T:aeadaes192ocbtaglen96v1 28.41 28.57 28.98 T:ketjesrv1 29.28 29.37 29.45 T:aeadaes256ocbtaglen96v1 29.32 29.43 29.46 T:aeadaes256ocbtaglen64v1 33.96 34.04 34.10 T:ketjesrv2 45.09 45.19 45.44 T:proest128otrv1 46.80 47.16 47.23 T:colm127v1 58.32 58.40 58.47 T:ketjejrv1 67.28 67.72 70.05 T:present80n6t4silcv3 69.76 69.99 71.33 T:deoxysneq128128v13 74.14 74.24 77.14 T:ketjejrv2 88.25 89.44 91.30 T:led80n6t4silcv3 90.26 90.56 90.99 T:deoxysneq256128v13 141.52 141.67 141.82 T:deoxyseq128128v13 157.81 158.39 159.03 T:aezv1 181.58 182.03 182.98 T:deoxyseq256128v13 482.07? 509.37? 549.49? T:acorn128 3319.69 3325.70 3352.42 T:led80n6t4silcv2 3318.64 3327.81 3356.83 T:led80n6silcv1 3471.85 3472.47 3473.77 T:present80n6t4silcv2 3474.27 3474.79 3476.34 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.08? 0.18? 0.27? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.19 0.19 0.20 aegis128l 0.08? 0.25? 0.34? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.31 0.32 0.32 aegis256 0.29? 0.32? 0.34? T:tiaoxinv1 0.32 0.33 0.34 T:aegis256 0.31? 0.34? 0.36? T:tiaoxinv2 0.36 0.37 0.37 T:aezv4 0.36 0.37 0.37 T:aezv3 0.38 0.38 0.39 T:aezv5 0.24? 0.40? 0.50? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.43 T:aes128otrcv3 0.41 0.42 0.42 T:aes128otrsv3 0.45 0.45 0.46 T:aes128otrpv3 0.46? 0.49? 0.53? aes256gcmv1 0.50 0.51 0.51 T:morus1280128v2 0.50 0.51 0.51 T:morus1280128v1 0.50 0.51 0.52 T:morus1280256v1 0.50 0.51 0.52 T:morus1280256v2 0.54 0.55 0.55 T:aes256otrcv3 0.54 0.55 0.56 T:aes256otrsv3 0.58 0.58 0.59 T:aes256otrpv3 0.59 0.59 0.60 T:deoxysi128v141 0.66 0.66 0.67 T:deoxysneq128128v1 0.57? 0.68? 0.70? T:deoxysi256v141 0.70 0.71 0.72 T:deoxysneq256128v1 0.77 0.78 0.79 T:morus640128v1 0.79 0.80 0.80 T:aes128gcmv1 0.76? 0.80? 0.86? T:oceankeyakv2 0.81 0.82 0.83 T:morus640128v2 0.83? 0.89? 0.96? T:lunarkeyakv2 0.90 0.92 0.94 T:norx6444v3 1.05 1.07 1.08 T:deoxysii128v141 1.17 1.18 1.19 T:colm0v1 1.19 1.20 1.21 T:deoxysii256v141 1.35 1.36 1.37 T:deoxyseq128128v1 1.41 1.42 1.43 T:deoxyseq256128v1 1.47 1.48 1.50 T:seakeyakv2 2.07 2.09 2.13 T:norx6441v3 2.09 2.14 2.15 T:norx6441v2 2.55 2.56 2.57 T:aes128n12t8silcv3 2.55 2.56 2.57 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.59 T:aes128n12t8silcv2 2.56 2.57 2.58 T:aes128n8t8silcv2 2.48 2.58 2.60 T:norx6441v1 3.10 3.15 3.22 T:lakekeyakv2 3.14 3.18 3.22 T:lakekeyakv1 3.17 3.19 3.25 T:norx6461v2 3.16 3.24 3.27 T:norx6461v3 3.72 3.73 3.80 T:norx6461v1 3.74 3.77 3.81 T:norx3241v3 3.79 3.84 3.88 T:norx6444v1 3.77 3.87 3.90 T:norx3241v2 3.88 3.94 4.00 T:norx6444v2 4.54 4.59 4.63 T:norx3241v1 5.06 5.08 5.10 T:ketjemajorv2 5.19 5.19 5.19 T:ascon128av11 5.22 5.25 5.28 T:acorn128v2 5.31 5.32 5.33 ascon128av12 5.44 5.44 5.44 T:ascon96v1 5.55 5.59 5.76 T:norx3261v2 5.61 5.78 5.80 T:norx3261v3 5.73 5.79 5.86 T:aesjambuv1 6.75 6.75 6.76 T:acorn128v3 7.37 7.40 7.40 T:norx3261v1 7.63 7.64 7.64 ascon128v12 7.62 7.64 7.66 T:riverkeyakv2 7.87 7.88 7.88 T:ascon128v11 7.87 7.88 7.88 T:ascon128v1 7.90 7.94 7.98 T:ketjeminorv2 14.80 14.82 14.84 T:aes128otrpv1 14.84 14.87 14.91 T:aes128otrsv1 14.87 14.90 14.94 T:aes128otrpv2 14.88 14.93 14.95 T:aes128otrsv2 17.43 17.48 17.51 T:proest256otrv1 18.80 18.83 18.86 T:aes256otrpv1 18.85 18.88 18.90 T:aes256otrsv1 18.91 18.93 18.96 T:aes256otrpv2 18.90 18.93 18.97 T:aes256otrsv2 17.09? 19.60? 20.87? T:twine80n6t4clocv2 19.70 19.71 19.79 T:twine80n6t4clocv3 21.24 21.28 21.53 T:aes128n12clocv1 21.35 21.37 21.41 T:aes128n8clocv1 26.71 26.75 26.80 T:ketjesrv2 29.13 29.23 29.59 T:ketjesrv1 29.35 29.43 29.50 T:aeadaes128ocbtaglen96v1 29.35 29.44 29.57 T:aeadaes128ocbtaglen64v1 34.93 35.02 35.27 T:aeadaes192ocbtaglen64v1 34.95? 35.06? 40.93? T:aeadaes192ocbtaglen96v1 38.66 40.51 40.69 T:aeadaes256ocbtaglen64v1 40.52 40.57 40.62 T:aeadaes256ocbtaglen96v1 45.61 45.71 45.82 T:proest128otrv1 60.96 61.06 61.10 T:ketjejrv1 62.31 62.34 62.61 T:colm127v1 66.78 67.10 69.66 T:present80n6t4silcv3 78.30 78.41 78.64 T:ketjejrv2 89.87 92.08 97.25 T:led80n6t4silcv3 107.41? 109.37? 135.62? T:deoxysneq128128v13 141.59 142.03 142.23 T:deoxyseq128128v13 146.85? 150.20? 199.76? T:deoxysneq256128v13 157.21 157.50 157.97 T:aezv1 181.54 182.21 182.75 T:deoxyseq256128v13 439.80? 507.40? 547.29? T:acorn128 3314.24 3320.59 3325.79 T:led80n6silcv1 3321.11 3325.43 3351.93 T:led80n6t4silcv2 3473.99 3475.62 3479.67 T:present80n6silcv1 3475.22 3475.98 3476.68 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13 0.14 0.14 T:aezv3 0.14 0.14 0.14 T:aezv4 0.14 0.15 0.15 T:aezv5 0.07? 0.18? 0.27? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.23 0.24 0.24 aegis128l 0.08? 0.24? 0.33? T:aeadaes256ocbtaglen128v1 0.31 0.32 0.32 T:aegis128 0.32 0.32 0.33 T:aegis256 0.32 0.34 0.35 T:tiaoxinv2 0.32? 0.35? 0.37? T:tiaoxinv1 0.37 0.38 0.38 aegis256 0.32? 0.40? 0.56? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.42 T:aes128otrcv3 0.41 0.42 0.42 T:aes128otrsv3 0.45 0.45 0.46 T:aes128otrpv3 0.47 0.49 0.52 aes256gcmv1 0.50 0.51 0.51 T:morus1280128v2 0.50 0.51 0.52 T:morus1280256v1 0.50 0.51 0.52 T:morus1280128v1 0.50 0.51 0.52 T:morus1280256v2 0.54 0.55 0.55 T:aes256otrcv3 0.54 0.55 0.56 T:aes256otrsv3 0.58 0.59 0.59 T:aes256otrpv3 0.58 0.59 0.59 T:deoxysi128v141 0.66 0.66 0.67 T:deoxysneq128128v1 0.59? 0.69? 0.69? T:deoxysi256v141 0.71 0.72 0.73 T:deoxysneq256128v1 0.78 0.78 0.79 T:morus640128v1 0.80 0.80 0.80 T:aes128gcmv1 0.80 0.81 0.82 T:morus640128v2 0.78? 0.84? 0.89? T:oceankeyakv2 0.90 0.92 0.93 T:norx6444v3 0.89 0.93 0.97 T:lunarkeyakv2 1.06 1.07 1.08 T:deoxysii128v141 1.18 1.18 1.19 T:colm0v1 1.19 1.20 1.21 T:deoxysii256v141 1.35 1.36 1.37 T:deoxyseq128128v1 1.41 1.42 1.43 T:deoxyseq256128v1 1.50 1.51 1.53 T:seakeyakv2 2.09 2.13 2.14 T:norx6441v3 2.13 2.14 2.15 T:norx6441v2 2.55 2.56 2.58 T:aes128n12t8silcv3 2.55 2.56 2.57 T:aes128n12t8clocv3 2.55 2.56 2.57 T:aes128n12t8clocv2 2.55 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128n8t8silcv2 2.57 2.59 2.60 T:norx6441v1 3.14 3.18 3.20 T:lakekeyakv2 3.17 3.20 3.24 T:lakekeyakv1 3.16 3.24 3.26 T:norx6461v3 3.17 3.24 3.28 T:norx6461v2 3.72 3.74 3.85 T:norx6461v1 3.72 3.76 3.86 T:norx3241v2 3.81 3.88 3.92 T:norx6444v1 3.78 3.88 3.90 T:norx3241v3 3.94 4.01 4.08 T:norx6444v2 4.46 4.52 4.55 T:norx3241v1 5.10 5.12 5.14 T:ketjemajorv2 5.19 5.19 5.19 T:ascon128av11 5.23 5.25 5.28 T:acorn128v2 5.31 5.31 5.32 ascon128av12 5.44 5.44 5.44 T:ascon96v1 5.57 5.61 5.76 T:norx3261v3 5.73 5.76 5.86 T:aesjambuv1 5.59 5.77 5.79 T:norx3261v2 6.75 6.75 6.75 T:acorn128v3 7.37 7.40 7.41 T:norx3261v1 7.64 7.64 7.64 ascon128v12 7.62 7.65 7.68 T:riverkeyakv2 7.88 7.88 7.89 T:ascon128v1 7.88 7.88 7.88 T:ascon128v11 7.93 7.97 8.00 T:ketjeminorv2 14.81 14.84 14.86 T:aes128otrpv1 14.85 14.89 14.91 T:aes128otrsv1 14.87 14.90 14.95 T:aes128otrsv2 14.88 14.92 14.95 T:aes128otrpv2 17.42 17.45 17.49 T:proest256otrv1 18.86 18.90 18.95 T:aes256otrsv1 18.88 18.91 18.95 T:aes256otrpv1 18.91 18.95 18.97 T:aes256otrsv2 18.94 18.97 19.00 T:aes256otrpv2 19.70 19.71 19.79 T:twine80n6t4clocv3 17.17? 20.01? 20.88? T:twine80n6t4clocv2 21.19 21.25 21.44 T:aes128n12clocv1 21.36 21.38 21.39 T:aes128n8clocv1 26.75 26.79 26.86 T:ketjesrv2 29.20 29.28 29.36 T:ketjesrv1 29.28 29.32 29.43 T:aeadaes128ocbtaglen64v1 29.45 29.50 29.67 T:aeadaes128ocbtaglen96v1 34.90 34.93 35.06 T:aeadaes192ocbtaglen64v1 34.84 35.02 37.09 T:aeadaes192ocbtaglen96v1 40.53 40.67 40.73 T:aeadaes256ocbtaglen64v1 40.61 40.68 40.73 T:aeadaes256ocbtaglen96v1 45.74 45.84 45.95 T:proest128otrv1 60.79 60.88 61.12 T:ketjejrv1 61.51 61.64 61.66 T:colm127v1 66.77 67.13 69.63 T:present80n6t4silcv3 78.39 78.49 79.16 T:ketjejrv2 88.21 90.14 91.56 T:led80n6t4silcv3 107.37? 109.12? 134.47? T:deoxysneq128128v13 141.72 141.86 142.02 T:deoxyseq128128v13 147.01? 150.26? 199.41? T:deoxysneq256128v13 157.27 157.48 157.71 T:aezv1 181.76 182.23 182.85 T:deoxyseq256128v13 451.78? 471.36? 518.71? T:acorn128 3308.80 3313.13 3316.90 T:led80n6silcv1 3321.62 3329.45 3349.02 T:led80n6t4silcv2 3474.15 3475.71 3479.99 T:present80n6silcv1 3475.59 3476.02 3476.69 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.12 0.12 0.12 T:tiaoxinv1 0.12 0.12 0.12 T:tiaoxinv2 0.12? 0.17? 0.22? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 T:aegis128l 0.18 0.18 0.18 aegis128l 0.19? 0.24? 0.29? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.26 T:aezv5 0.31 0.31 0.31 T:aegis128 0.32 0.32 0.32 T:aegis256 0.32 0.32 0.32 aegis256 0.30? 0.39? 0.44? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.42 T:aes128otrcv3 0.42 0.42 0.42 T:aes128otrpv3 0.47 0.48 0.50 T:morus1280256v2 0.47 0.48 0.50 T:morus1280128v2 0.48 0.48 0.49 T:morus1280128v1 0.47 0.49 0.49 aes256gcmv1 0.49 0.50 0.51 T:morus1280256v1 0.53 0.54 0.54 T:aes256otrcv3 0.54 0.54 0.54 T:deoxysi128v141 0.55 0.55 0.55 T:aes256otrpv3 0.60 0.60 0.60 T:aes128gcmv1 0.59 0.60 0.61 T:deoxysi256v141 0.61 0.62 0.63 T:deoxysneq128128v1 0.58? 0.65? 0.85? T:oceankeyakv2 0.70 0.71 0.71 T:deoxysneq256128v1 0.76 0.77 0.77 T:morus640128v2 0.76 0.77 0.78 T:morus640128v1 0.79 0.80 0.80 T:deoxysii128v141 0.89 0.90 0.90 T:colm0v1 0.90 0.91 0.92 T:deoxysii256v141 0.93 0.93 0.94 T:deoxyseq128128v1 0.89? 0.94? 0.99? T:lunarkeyakv2 1.09 1.10 1.11 T:deoxyseq256128v1 1.19 1.19 1.20 T:seakeyakv2 1.49 1.49 1.49 T:aes128otrsv3 1.49 1.51 1.55 T:norx6444v3 2.05 2.05 2.06 T:aes256otrsv3 2.09 2.12 2.18 T:norx6441v3 2.11 2.18 2.19 T:norx6441v2 2.59 2.59 2.59 T:aes128n8t8clocv2 2.59 2.59 2.60 T:aes128n12t8clocv2 2.59 2.59 2.59 T:aes128n12t8clocv3 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.60 T:aes128n12t8silcv2 2.59 2.59 2.60 T:aes128n12t8silcv3 2.54 2.63 2.64 T:norx6441v1 2.71 2.74 2.79 T:lakekeyakv2 3.03 3.05 3.07 T:lakekeyakv1 3.15 3.15 3.29 T:norx6461v3 3.21 3.24 3.27 T:norx6444v2 3.18 3.29 3.31 T:norx6461v2 3.76 3.78 3.82 T:norx6444v1 3.70 3.79 3.84 T:norx3241v2 3.73 3.89 3.91 T:norx3241v3 3.88 3.89 3.90 T:norx6461v1 4.50 4.52 4.54 T:ketjemajorv2 4.47 4.52 4.61 T:norx3241v1 5.22 5.22 5.22 T:ascon96v1 5.28 5.28 5.29 ascon128av12 5.30 5.33 5.40 T:aesjambuv1 5.34 5.34 5.35 T:ascon128av11 5.40 5.41 5.42 T:riverkeyakv2 5.55 5.56 5.72 T:norx3261v3 5.54 5.68 5.71 T:norx3261v2 6.45 6.51 6.56 T:acorn128v2 6.76 6.76 6.76 T:acorn128v3 7.07 7.07 7.09 T:ketjeminorv2 7.52 7.52 7.53 T:norx3261v1 7.62 7.63 7.63 ascon128v12 8.06 8.06 8.07 T:ascon128v11 8.06 8.06 8.07 T:ascon128v1 13.47 13.49 13.52 T:aes128otrsv2 13.48 13.50 13.52 T:aes128otrsv1 14.37 14.39 14.42 T:aes128otrpv1 14.39 14.41 14.42 T:aes128otrpv2 17.22 17.24 17.25 T:aes128n12clocv1 17.23 17.26 17.28 T:aes128n8clocv1 17.44 17.45 17.48 T:proest256otrv1 17.48 17.50 17.51 T:aes256otrsv2 17.51 17.54 17.57 T:aes256otrsv1 17.13 17.74 18.88 T:twine80n6t4clocv2 18.37 18.39 18.43 T:aes256otrpv2 18.39 18.41 18.43 T:aes256otrpv1 18.05? 18.53? 20.71? T:twine80n6t4clocv3 21.36 21.38 21.45 T:aeadaes128ocbtaglen64v1 21.37 21.44 21.51 T:aeadaes128ocbtaglen96v1 25.21 25.23 25.27 T:aeadaes192ocbtaglen64v1 25.26 25.31 25.37 T:aeadaes192ocbtaglen96v1 25.68 25.75 25.80 T:ketjesrv1 29.11 29.12 29.15 T:aeadaes256ocbtaglen96v1 29.07 29.12 29.16 T:aeadaes256ocbtaglen64v1 29.88 29.94 29.97 T:ketjesrv2 34.72 34.77 34.82 T:colm127v1 45.65 45.71 45.93 T:proest128otrv1 53.48 53.63 53.82 T:ketjejrv1 66.91 67.22 69.52 T:present80n6t4silcv3 70.19 70.55 70.91 T:deoxysneq128128v13 71.58 71.62 71.69 T:ketjejrv2 90.35 90.46 90.57 T:deoxysneq256128v13 89.26 91.92 92.33 T:led80n6t4silcv3 104.01 104.19 104.49 T:aezv1 105.97 106.16 106.45 T:deoxyseq128128v13 136.20 136.54 136.87 T:deoxyseq256128v13 483.06 516.14 524.40 T:acorn128 2486.00 2494.67 2507.82 T:led80n6silcv1 2490.78 2502.64 2506.39 T:led80n6t4silcv2 2604.14 2604.44 2605.71 T:present80n6t4silcv2 2605.37 2605.84 2607.43 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.11? 0.17? 0.22? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 T:aegis128l 0.18 0.18 0.18 aegis128l 0.20 0.21 0.22 T:tiaoxinv2 0.19? 0.21? 0.22? T:tiaoxinv1 0.15? 0.24? 0.30? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.26 T:aezv4 0.25 0.26 0.26 T:aezv5 0.31 0.31 0.32 T:aegis128 0.33 0.33 0.33 T:aegis256 0.32 0.33 0.33 aegis256 0.33? 0.39? 0.47? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.43 0.43 0.43 T:aes128otrpv3 0.42 0.44 0.46 aes256gcmv1 0.49 0.49 0.50 T:morus1280256v2 0.50 0.50 0.50 T:morus1280128v2 0.49 0.50 0.51 T:morus1280128v1 0.50 0.51 0.51 T:morus1280256v1 0.55 0.55 0.55 T:aes256otrcv3 0.55 0.55 0.55 T:aes256otrpv3 0.57 0.57 0.57 T:deoxysi128v141 0.60 0.60 0.60 T:aes128gcmv1 0.59? 0.64? 0.81? T:oceankeyakv2 0.64 0.64 0.64 T:deoxysneq128128v1 0.64 0.65 0.65 T:deoxysi256v141 0.70 0.71 0.72 T:deoxysneq256128v1 0.75 0.75 0.76 T:morus640128v1 0.78 0.80 0.81 T:morus640128v2 0.79 0.80 0.80 T:deoxysii128v141 0.84 0.85 0.85 T:colm0v1 0.89 0.90 0.90 T:deoxysii256v141 0.99 0.99 1.00 T:deoxyseq128128v1 0.97 1.01 1.04 T:lunarkeyakv2 1.11 1.12 1.13 T:deoxyseq256128v1 1.21 1.22 1.22 T:seakeyakv2 1.49 1.49 1.49 T:aes128otrsv3 1.50 1.54 1.56 T:norx6444v3 2.05 2.06 2.06 T:aes256otrsv3 2.09 2.15 2.16 T:norx6441v3 2.11 2.16 2.17 T:norx6441v2 2.56 2.56 2.57 T:aes128n12t8clocv2 2.56 2.56 2.58 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.57 2.57 T:aes128n12t8silcv3 2.56 2.57 2.57 T:aes128n8t8silcv2 2.56 2.57 2.57 T:aes128n12t8silcv2 2.49 2.58 2.61 T:norx6441v1 2.74 2.77 2.80 T:lakekeyakv2 3.02 3.04 3.05 T:lakekeyakv1 3.10 3.14 3.26 T:norx6461v2 3.25 3.27 3.28 T:norx6461v3 3.25 3.28 3.31 T:norx6444v2 3.71 3.74 3.78 T:norx3241v2 3.71 3.77 3.77 T:norx3241v3 3.77 3.80 3.81 T:norx6444v1 3.79 3.86 3.88 T:norx6461v1 4.45 4.46 4.48 T:ketjemajorv2 4.60 4.64 4.67 T:norx3241v1 5.19 5.19 5.19 T:ascon128av11 5.28 5.28 5.29 ascon128av12 5.31 5.31 5.32 T:ascon96v1 5.47 5.48 5.49 T:riverkeyakv2 5.51 5.54 5.54 T:aesjambuv1 5.57 5.60 5.73 T:norx3261v2 5.75 5.82 5.84 T:norx3261v3 6.48 6.55 6.57 T:acorn128v2 6.88 6.88 6.88 T:acorn128v3 7.24 7.25 7.27 T:ketjeminorv2 7.44 7.45 7.46 T:norx3261v1 7.62 7.63 7.63 ascon128v12 7.81 7.81 7.81 T:ascon128v11 7.81 7.81 7.82 T:ascon128v1 13.60 13.62 13.64 T:aes128otrsv1 13.62 13.65 13.67 T:aes128otrsv2 14.49 14.51 14.53 T:aes128otrpv1 14.56 14.59 14.61 T:aes128otrpv2 16.61 16.63 16.65 T:aes128n8clocv1 16.61 16.64 16.74 T:aes128n12clocv1 17.62 17.64 17.66 T:aes256otrsv1 17.64 17.67 17.69 T:aes256otrsv2 17.67 17.69 17.70 T:proest256otrv1 17.06? 18.06? 19.15? T:twine80n6t4clocv2 17.99? 18.17? 20.59? T:twine80n6t4clocv3 18.51 18.52 18.54 T:aes256otrpv1 18.56 18.58 18.60 T:aes256otrpv2 25.14 25.16 25.26 T:aeadaes128ocbtaglen64v1 25.17 25.20 25.26 T:aeadaes128ocbtaglen96v1 26.06 26.10 26.15 T:ketjesrv1 26.26 26.31 26.36 T:ketjesrv2 29.97 30.01 30.04 T:aeadaes192ocbtaglen64v1 29.79 30.06 32.98 T:aeadaes192ocbtaglen96v1 34.65 34.66 34.78 T:aeadaes256ocbtaglen64v1 34.74 34.78 34.81 T:aeadaes256ocbtaglen96v1 42.42 42.51 42.53 T:colm127v1 45.96 46.13 46.27 T:proest128otrv1 54.77 54.86 54.94 T:ketjejrv1 66.64 66.97 69.48 T:present80n6t4silcv3 73.73 73.81 73.89 T:ketjejrv2 89.09 90.22 98.14 T:deoxysneq128128v13 90.31 92.13 92.34 T:led80n6t4silcv3 103.72 103.94 104.30 T:aezv1 105.97 106.09 106.26 T:deoxyseq128128v13 118.52? 120.22? 144.98? T:deoxysneq256128v13 136.02 136.40 136.60 T:deoxyseq256128v13 474.47 493.86 519.04 T:acorn128 2480.86 2482.32 2497.51 T:led80n6silcv1 2492.39 2498.07 2508.48 T:led80n6t4silcv2 2605.33 2605.82 2607.18 T:present80n6silcv1 2605.61 2606.32 2606.83 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.13 0.13 0.14 T:aezv3 0.13 0.14 0.14 T:aezv5 0.14 0.14 0.14 T:aezv4 0.12? 0.17? 0.21? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 T:aegis128l 0.20 0.20 0.21 aegis128l 0.20 0.21 0.22 T:tiaoxinv2 0.21 0.22 0.23 T:tiaoxinv1 0.15? 0.24? 0.32? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.33 0.33 0.33 T:aegis256 0.35 0.36 0.36 aegis256 0.31? 0.39? 0.43? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.42 T:aes128otrcv3 0.43 0.43 0.43 T:aes128otrpv3 0.42 0.44 0.45 aes256gcmv1 0.49 0.49 0.50 T:morus1280256v1 0.49 0.50 0.50 T:morus1280128v1 0.50 0.50 0.50 T:morus1280128v2 0.50 0.50 0.51 T:morus1280256v2 0.55 0.55 0.55 T:aes256otrcv3 0.55 0.55 0.55 T:aes256otrpv3 0.56 0.57 0.57 T:deoxysi128v141 0.60 0.60 0.60 T:aes128gcmv1 0.64 0.64 0.65 T:deoxysneq128128v1 0.64 0.64 0.65 T:deoxysi256v141 0.60? 0.65? 0.82? T:oceankeyakv2 0.70 0.71 0.72 T:deoxysneq256128v1 0.74 0.75 0.76 T:morus640128v1 0.79 0.80 0.80 T:deoxysii128v141 0.79 0.80 0.81 T:morus640128v2 0.84 0.85 0.85 T:colm0v1 0.89 0.90 0.90 T:deoxysii256v141 0.99 1.00 1.01 T:deoxyseq128128v1 0.96 1.02 1.06 T:lunarkeyakv2 1.09 1.09 1.10 T:deoxyseq256128v1 1.22 1.23 1.24 T:seakeyakv2 1.49 1.49 1.49 T:aes128otrsv3 1.49 1.54 1.56 T:norx6444v3 2.05 2.06 2.06 T:aes256otrsv3 2.10 2.15 2.17 T:norx6441v3 2.15 2.16 2.17 T:norx6441v2 2.55 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.57 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128n12t8silcv2 2.55 2.56 2.57 T:aes128n12t8clocv2 2.47 2.59 2.60 T:norx6441v1 2.76 2.78 2.79 T:lakekeyakv2 3.06 3.07 3.08 T:lakekeyakv1 3.11 3.13 3.15 T:norx6461v2 3.26 3.28 3.29 T:norx6461v3 3.28 3.33 3.34 T:norx6444v2 3.71 3.76 3.83 T:norx3241v2 3.77 3.77 3.77 T:norx3241v3 3.79 3.80 3.82 T:norx6444v1 3.75 3.81 3.87 T:norx6461v1 4.46 4.47 4.49 T:ketjemajorv2 4.50 4.53 4.65 T:norx3241v1 5.19 5.19 5.19 T:ascon128av11 5.28 5.28 5.28 ascon128av12 5.31 5.31 5.31 T:ascon96v1 5.48 5.50 5.50 T:riverkeyakv2 5.51 5.54 5.54 T:aesjambuv1 5.60 5.71 5.76 T:norx3261v2 5.60 5.73 5.84 T:norx3261v3 6.47 6.48 6.50 T:acorn128v2 6.88 6.88 6.88 T:acorn128v3 7.25 7.26 7.27 T:ketjeminorv2 7.44 7.45 7.45 T:norx3261v1 7.62 7.63 7.63 ascon128v12 7.81 7.81 7.82 T:ascon128v1 7.81 7.81 7.82 T:ascon128v11 13.62 13.63 13.65 T:aes128otrsv1 13.65 13.68 13.74 T:aes128otrsv2 14.48 14.50 14.55 T:aes128otrpv1 14.56 14.59 14.60 T:aes128otrpv2 16.57 16.61 16.72 T:aes128n12clocv1 16.62 16.66 16.68 T:aes128n8clocv1 17.64 17.65 17.67 T:aes256otrsv1 17.63 17.67 17.68 T:aes256otrsv2 17.65 17.67 17.69 T:proest256otrv1 16.97? 17.77? 19.00? T:twine80n6t4clocv2 18.01? 18.53? 20.86? T:twine80n6t4clocv3 18.53 18.55 18.58 T:aes256otrpv1 18.56 18.58 18.60 T:aes256otrpv2 25.20 25.22 25.32 T:aeadaes128ocbtaglen96v1 25.22 25.26 25.34 T:aeadaes128ocbtaglen64v1 26.10 26.18 26.21 T:ketjesrv1 26.26 26.33 26.37 T:ketjesrv2 29.90 29.93 29.99 T:aeadaes192ocbtaglen64v1 29.90 29.97 33.02 T:aeadaes192ocbtaglen96v1 34.62 34.67 34.78 T:aeadaes256ocbtaglen64v1 34.72 34.74 34.89 T:aeadaes256ocbtaglen96v1 41.94 42.04 42.19 T:colm127v1 46.05 46.14 46.26 T:proest128otrv1 54.80 54.96 55.31 T:ketjejrv1 66.68 66.94 69.16 T:present80n6t4silcv3 73.69 73.75 73.82 T:ketjejrv2 88.88? 89.95? 103.37? T:deoxysneq128128v13 91.61 92.15 92.54 T:led80n6t4silcv3 103.74 103.97 104.25 T:aezv1 106.19 106.40 106.66 T:deoxyseq128128v13 118.55? 120.27? 145.13? T:deoxysneq256128v13 135.85 136.43 136.56 T:deoxyseq256128v13 510.24 517.99 524.13 T:acorn128 2480.05 2481.80 2499.32 T:led80n6silcv1 2490.33 2501.89 2509.28 T:led80n6t4silcv2 2605.18 2605.96 2606.54 T:present80n6t4silcv2 2605.31 2606.08 2608.77 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv1 0.10 0.11 0.11 T:tiaoxinv2 0.13 0.13 0.14 T:aezv5 0.13? 0.14? 0.15? T:aezv4 0.13? 0.14? 0.15? T:aezv3 0.15 0.16 0.16 T:aegis128l 0.06? 0.17? 0.25? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.17 aegis128l 0.09? 0.24? 0.33? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.31 T:aegis128 0.31 0.31 0.31 T:aegis256 0.31 0.31 0.32 aegis256 0.27? 0.38? 0.49? T:aeadaes192ocbtaglen128v1 0.38 0.39 0.40 aes256gcmv1 0.39 0.40 0.40 T:aes128otrpv3 0.41 0.41 0.42 T:aes128gcmv1 0.42 0.42 0.43 T:aes128otrcv3 0.45 0.46 0.50 T:morus1280256v1 0.48 0.49 0.50 T:morus1280128v2 0.47 0.49 0.50 T:morus1280128v1 0.44? 0.50? 0.68? T:oceankeyakv2 0.49 0.50 0.51 T:morus1280256v2 0.50 0.51 0.51 T:colm0v1 0.52 0.53 0.53 T:aes256otrpv3 0.52 0.54 0.54 T:deoxysii128v141 0.54 0.54 0.55 T:deoxysi128v141 0.07? 0.55? 0.60? T:lunarkeyakv2 0.55 0.55 0.56 T:aes256otrcv3 0.59 0.59 0.60 T:deoxysi256v141 0.60 0.61 0.61 T:deoxysii256v141 0.61 0.62 0.63 T:deoxyseq128128v1 0.62 0.63 0.63 T:deoxysneq128128v1 0.70 0.70 0.71 T:deoxysneq256128v1 0.71 0.71 0.72 T:deoxyseq256128v1 0.71 0.72 0.74 T:morus640128v1 0.71 0.72 0.73 T:morus640128v2 1.10 1.11 1.13 T:seakeyakv2 2.10 2.17 2.19 T:norx6441v3 2.09 2.18 2.20 T:norx6444v3 2.17 2.18 2.20 T:norx6441v2 2.42 2.48 2.55 T:lakekeyakv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128otrsv3 2.56 2.56 2.57 T:norx6444v2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.57 T:aes128n8t8silcv2 2.56 2.56 2.57 T:aes128n8t8clocv2 2.48 2.62 2.63 T:norx6441v1 2.78 2.82 2.84 T:lakekeyakv1 3.08 3.11 3.13 T:norx6461v3 3.11 3.13 3.28 T:norx6461v2 3.56 3.56 3.56 T:aes256otrsv3 3.66 3.67 3.68 T:norx3241v2 3.74 3.75 3.76 T:norx6444v1 3.70 3.78 3.81 T:norx3241v3 3.78 3.84 3.89 T:norx6461v1 3.86 3.88 3.92 T:ketjemajorv2 4.51 4.54 4.55 T:norx3241v1 5.05 5.09 5.10 T:riverkeyakv2 5.12 5.13 5.13 T:ascon96v1 5.25 5.25 5.25 T:ascon128av11 5.25 5.25 5.26 ascon128av12 5.25 5.35 5.43 T:aesjambuv1 5.51 5.53 5.62 T:norx3261v2 5.56 5.60 5.65 T:norx3261v3 6.58 6.59 6.63 T:ketjeminorv2 6.74 6.75 6.76 T:acorn128v3 7.50 7.50 7.50 ascon128v12 7.52 7.52 7.53 T:norx3261v1 7.64 7.75 7.89 T:acorn128v2 7.87 7.88 7.88 T:ascon128v11 7.87 7.88 7.88 T:ascon128v1 11.91 11.93 11.94 T:aes128n12clocv1 11.92 11.94 11.96 T:aes128n8clocv1 12.37 12.38 12.40 T:aes128otrsv1 12.36 12.39 12.41 T:aes128otrsv2 14.16 14.18 14.19 T:aes128otrpv1 14.16 14.20 14.22 T:aes128otrpv2 16.41 16.44 16.46 T:aes256otrsv1 16.41 16.45 16.52 T:aes256otrsv2 16.91 17.32 18.10 T:twine80n6t4clocv2 17.86 17.90 17.93 T:proest256otrv1 18.15 18.18 18.20 T:aes256otrpv2 18.17 18.20 18.23 T:aes256otrpv1 18.04? 19.61? 20.10? T:twine80n6t4clocv3 21.08 21.19 21.35 T:aeadaes128ocbtaglen64v1 21.15 21.19 21.24 T:aeadaes128ocbtaglen96v1 22.43 22.46 22.50 T:colm127v1 22.94 22.97 23.33 T:ketjesrv1 25.01 25.05 25.25 T:aeadaes192ocbtaglen64v1 24.86 25.08 25.15 T:aeadaes192ocbtaglen96v1 25.68 25.86 25.93 T:ketjesrv2 28.74 28.87 28.92 T:aeadaes256ocbtaglen64v1 28.76 28.91 28.94 T:aeadaes256ocbtaglen96v1 46.32 46.40 46.67 T:proest128otrv1 48.65 48.70 49.19 T:ketjejrv1 49.94 50.17 50.42 T:aezv1 66.64 66.84 68.91 T:present80n6t4silcv3 69.16 69.37 72.45 T:ketjejrv2 70.41 70.54 70.69 T:deoxyseq128128v13 70.83 71.12 71.70 T:deoxysneq128128v13 88.99 89.55 93.39 T:led80n6t4silcv3 90.07 90.26 90.66 T:deoxyseq256128v13 90.41 90.49 90.59 T:deoxysneq256128v13 485.04 497.51 514.41 T:acorn128 1654.34 1658.75 1662.11 T:led80n6silcv1 1659.59 1664.64 1674.85 T:led80n6t4silcv2 1736.33 1736.51 1736.70 T:present80n6t4silcv2 1736.64 1736.99 1737.46 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv2 0.10 0.10 0.11 T:tiaoxinv1 0.13 0.13 0.14 T:aezv5 0.13 0.14 0.14 T:aezv4 0.13 0.14 0.14 T:aezv3 0.16 0.16 0.16 T:aegis128l 0.08? 0.17? 0.25? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 aegis128l 0.08? 0.24? 0.43? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.31 T:aegis128 0.31 0.31 0.32 T:aegis256 0.33 0.33 0.35 aegis256 0.28? 0.36? 0.46? T:aeadaes192ocbtaglen128v1 0.34? 0.39? 0.42? aes256gcmv1 0.39 0.40 0.41 T:aes128gcmv1 0.40 0.40 0.41 T:aes128otrpv3 0.41 0.41 0.42 T:aes128otrcv3 0.49 0.49 0.50 T:morus1280128v2 0.48 0.49 0.50 T:morus1280128v1 0.49 0.50 0.50 T:colm0v1 0.49 0.50 0.51 T:morus1280256v2 0.49 0.50 0.51 T:morus1280256v1 0.46? 0.50? 0.65? T:oceankeyakv2 0.52 0.53 0.54 T:deoxysii128v141 0.53 0.53 0.54 T:aes256otrpv3 0.53 0.54 0.54 T:deoxysi128v141 0.55 0.56 0.57 T:aes256otrcv3 0.12? 0.56? 0.62? T:lunarkeyakv2 0.59 0.59 0.60 T:deoxysii256v141 0.60 0.61 0.61 T:deoxysi256v141 0.60 0.61 0.62 T:deoxysneq128128v1 0.60 0.62 0.63 T:deoxyseq128128v1 0.69 0.70 0.72 T:deoxyseq256128v1 0.70 0.71 0.72 T:deoxysneq256128v1 0.71 0.72 0.74 T:morus640128v1 0.75 0.77 0.79 T:morus640128v2 1.09 1.11 1.14 T:seakeyakv2 2.04 2.05 2.10 T:norx6441v3 2.09 2.10 2.16 T:norx6444v3 2.11 2.16 2.18 T:norx6441v2 2.41 2.42 2.59 T:norx6441v1 2.40 2.47 2.55 T:lakekeyakv2 2.56 2.56 2.57 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.57 T:aes128n8t8silcv2 2.55 2.56 2.58 T:aes128n12t8clocv2 2.56 2.57 2.57 T:aes128otrsv3 2.56 2.57 2.57 T:aes128n8t8clocv2 2.60 2.61 2.61 T:norx6444v2 2.82 2.83 2.84 T:lakekeyakv1 3.10 3.26 3.30 T:norx6461v3 3.11 3.26 3.29 T:norx6461v2 3.56 3.56 3.56 T:aes256otrsv3 3.74 3.75 3.77 T:norx6444v1 3.69 3.78 3.81 T:norx3241v2 3.70 3.78 3.80 T:norx3241v3 3.87 3.88 3.92 T:ketjemajorv2 3.81 3.90 3.93 T:norx6461v1 4.53 4.62 4.70 T:norx3241v1 5.07 5.08 5.10 T:riverkeyakv2 5.19 5.19 5.19 T:ascon128av11 5.19 5.19 5.19 T:ascon96v1 5.25 5.25 5.26 ascon128av12 5.26 5.28 5.36 T:aesjambuv1 5.62 5.64 5.66 T:norx3261v3 5.61 5.70 5.76 T:norx3261v2 6.57 6.61 6.64 T:ketjeminorv2 7.00 7.00 7.00 T:acorn128v3 7.52 7.52 7.53 T:norx3261v1 7.62 7.63 7.63 ascon128v12 7.65 7.72 7.86 T:acorn128v2 7.75 7.75 7.76 T:ascon128v1 7.75 7.75 7.75 T:ascon128v11 11.90 11.92 11.95 T:aes128n12clocv1 11.91 11.94 11.96 T:aes128n8clocv1 12.36 12.40 12.42 T:aes128otrsv1 12.37 12.40 12.44 T:aes128otrsv2 14.14 14.17 14.24 T:aes128otrpv1 14.14 14.20 14.23 T:aes128otrpv2 16.41 16.44 16.48 T:aes256otrsv1 16.40 16.46 16.48 T:aes256otrsv2 16.84 17.22 18.27 T:twine80n6t4clocv2 17.86 17.91 17.93 T:proest256otrv1 18.17 18.23 18.24 T:aes256otrpv2 18.20 18.24 18.27 T:aes256otrpv1 17.95? 19.43? 20.78? T:twine80n6t4clocv3 21.11 21.15 21.18 T:aeadaes128ocbtaglen64v1 21.09 21.16 21.23 T:aeadaes128ocbtaglen96v1 22.33 22.36 22.47 T:colm127v1 22.94 22.98 23.01 T:ketjesrv1 24.85 24.93 25.02 T:aeadaes192ocbtaglen64v1 24.98 25.03 25.05 T:aeadaes192ocbtaglen96v1 25.74 25.91 26.57 T:ketjesrv2 28.75 28.81 28.84 T:aeadaes256ocbtaglen64v1 28.76 28.89 28.93 T:aeadaes256ocbtaglen96v1 46.28 46.33 46.57 T:proest128otrv1 48.61 48.72 48.80 T:ketjejrv1 50.16 50.34 50.73 T:aezv1 66.65 66.90 68.93 T:present80n6t4silcv3 69.20 69.47 72.61 T:ketjejrv2 70.43 70.57 70.69 T:deoxyseq128128v13 70.51 70.59 70.71 T:deoxysneq128128v13 88.68 89.06 93.38 T:led80n6t4silcv3 90.17 90.31 90.74 T:deoxysneq256128v13 90.29 90.58 90.76 T:deoxyseq256128v13 467.32? 497.40? 521.85? T:acorn128 1658.91 1662.08 1678.90 T:led80n6silcv1 1658.27 1663.46 1677.85 T:led80n6t4silcv2 1736.25 1736.63 1738.38 T:present80n6t4silcv2 1736.48 1736.96 1737.23 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.10 0.10 0.10 T:tiaoxinv2 0.10 0.10 0.10 T:tiaoxinv1 0.13 0.13 0.14 T:aezv5 0.13 0.14 0.14 T:aezv4 0.13 0.14 0.14 T:aezv3 0.16 0.16 0.16 T:aegis128l 0.09? 0.17? 0.25? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 aegis128l 0.15? 0.24? 0.40? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.31 0.31 0.32 T:aegis256 0.33 0.34 0.34 aegis256 0.28? 0.36? 0.44? T:aeadaes192ocbtaglen128v1 0.34? 0.39? 0.42? aes256gcmv1 0.39 0.40 0.41 T:aes128gcmv1 0.40 0.41 0.41 T:aes128otrpv3 0.40 0.41 0.42 T:aes128otrcv3 0.48 0.48 0.51 T:morus1280256v2 0.48 0.49 0.50 T:morus1280128v2 0.48 0.49 0.50 T:morus1280128v1 0.48 0.49 0.50 T:morus1280256v1 0.47? 0.50? 0.65? T:oceankeyakv2 0.49 0.50 0.51 T:colm0v1 0.52 0.53 0.54 T:aes256otrpv3 0.52 0.53 0.54 T:deoxysii128v141 0.53 0.54 0.54 T:deoxysi128v141 0.55 0.56 0.56 T:aes256otrcv3 0.07? 0.56? 0.63? T:lunarkeyakv2 0.59 0.60 0.60 T:deoxysii256v141 0.60 0.60 0.61 T:deoxysi256v141 0.61 0.62 0.63 T:deoxysneq128128v1 0.61 0.62 0.63 T:deoxyseq128128v1 0.69 0.70 0.72 T:deoxyseq256128v1 0.69 0.70 0.71 T:deoxysneq256128v1 0.71 0.72 0.73 T:morus640128v1 0.75 0.77 0.79 T:morus640128v2 1.10 1.11 1.14 T:seakeyakv2 2.06 2.07 2.08 T:norx6441v2 2.06 2.11 2.17 T:norx6441v3 2.17 2.18 2.19 T:norx6444v3 2.42 2.45 2.60 T:norx6441v1 2.48 2.53 2.56 T:lakekeyakv2 2.55 2.56 2.58 T:aes128n8t8silcv2 2.55 2.56 2.58 T:aes128n12t8silcv3 2.54 2.56 2.58 T:aes128n12t8clocv2 2.55 2.56 2.56 T:aes128n12t8clocv3 2.54 2.56 2.57 T:aes128n8t8clocv2 2.55 2.56 2.58 T:aes128n12t8silcv2 2.56 2.57 2.57 T:aes128otrsv3 2.60 2.61 2.62 T:norx6444v2 2.81 2.83 2.85 T:lakekeyakv1 3.06 3.13 3.27 T:norx6461v2 3.04 3.27 3.31 T:norx6461v3 3.56 3.56 3.56 T:aes256otrsv3 3.73 3.75 3.77 T:norx6444v1 3.70 3.79 3.81 T:norx3241v2 3.78 3.80 3.91 T:norx3241v3 3.80 3.82 3.90 T:norx6461v1 3.86 3.89 3.93 T:ketjemajorv2 4.54 4.55 4.67 T:norx3241v1 5.07 5.08 5.09 T:riverkeyakv2 5.18 5.19 5.19 T:ascon128av11 5.18 5.19 5.19 T:ascon96v1 5.25 5.25 5.26 ascon128av12 5.26 5.28 5.37 T:aesjambuv1 5.53 5.55 5.55 T:norx3261v3 5.54 5.63 5.69 T:norx3261v2 6.59 6.60 6.63 T:ketjeminorv2 7.00 7.00 7.00 T:acorn128v3 7.52 7.52 7.53 T:norx3261v1 7.62 7.63 7.63 ascon128v12 7.65 7.70 7.84 T:acorn128v2 7.75 7.76 7.76 T:ascon128v1 7.75 7.76 7.76 T:ascon128v11 11.90 11.92 11.97 T:aes128n12clocv1 11.93 11.95 11.96 T:aes128n8clocv1 12.36 12.39 12.44 T:aes128otrsv2 12.38 12.42 12.48 T:aes128otrsv1 14.16 14.20 14.25 T:aes128otrpv1 14.19 14.22 14.24 T:aes128otrpv2 16.41 16.44 16.49 T:aes256otrsv2 16.45 16.48 16.52 T:aes256otrsv1 16.83 17.63 18.45 T:twine80n6t4clocv2 17.71 17.80 17.97 T:twine80n6t4clocv3 17.84 17.88 17.92 T:proest256otrv1 18.16 18.18 18.22 T:aes256otrpv1 18.16 18.21 18.33 T:aes256otrpv2 21.04 21.15 21.36 T:aeadaes128ocbtaglen64v1 21.19 21.24 21.26 T:aeadaes128ocbtaglen96v1 22.40 22.62 22.63 T:colm127v1 22.92 22.99 23.10 T:ketjesrv1 24.82 24.90 25.23 T:aeadaes192ocbtaglen64v1 24.85 24.99 25.14 T:aeadaes192ocbtaglen96v1 25.68 25.85 25.92 T:ketjesrv2 28.75 28.81 28.83 T:aeadaes256ocbtaglen64v1 28.73 28.85 28.90 T:aeadaes256ocbtaglen96v1 46.26 46.37 46.51 T:proest128otrv1 48.67 48.73 48.76 T:ketjejrv1 50.03 50.14 50.55 T:aezv1 66.63 66.84 69.00 T:present80n6t4silcv3 69.04 69.15 69.26 T:ketjejrv2 70.43 70.61 70.79 T:deoxyseq128128v13 70.65 70.87 71.00 T:deoxysneq128128v13 90.25 90.32 90.42 T:deoxysneq256128v13 90.19 90.52 90.92 T:deoxyseq256128v13 93.05 93.07 93.39 T:led80n6t4silcv3 478.38? 508.88? 551.81? T:acorn128 1652.36 1656.07 1678.54 T:led80n6silcv1 1659.85 1663.47 1672.98 T:led80n6t4silcv2 1736.72 1737.06 1737.58 T:present80n6silcv1 1736.34 1737.53 1740.34 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.16 0.16 0.17 T:tiaoxinv1 0.16 0.17 0.17 T:tiaoxinv2 0.20 0.20 0.20 T:aegis128l 0.21 0.21 0.21 aegis128l 0.28? 0.28? 0.34? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.30 T:aezv5 0.30 0.30 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.35 0.35 0.36 T:aegis256 0.35 0.36 0.36 aegis256 0.37? 0.38? 0.44? T:aeadaes256ocbtaglen128v1 0.49? 0.50? 0.60? T:aeadaes192ocbtaglen128v1 0.53 0.54 0.54 T:aes128otrcv3 0.54 0.54 0.54 T:aes128otrpv3 0.56 0.57 0.57 aes256gcmv1 0.59 0.59 0.59 T:morus1280256v1 0.59 0.59 0.60 T:morus1280128v1 0.60 0.60 0.61 T:morus1280256v2 0.60 0.62 0.62 T:morus1280128v2 0.63 0.63 0.64 T:deoxysi128v141 0.69 0.69 0.69 T:aes256otrpv3 0.69 0.69 0.69 T:aes128gcmv1 0.70 0.71 0.71 T:deoxysi256v141 0.71 0.72 0.72 T:deoxysneq128128v1 0.71 0.72 0.72 T:aes256otrcv3 0.83 0.83 0.84 T:deoxysneq256128v1 0.84 0.85 0.86 T:morus640128v1 0.85 0.85 0.86 T:morus640128v2 0.91 0.91 0.91 T:deoxysii128v141 0.96 0.97 0.98 T:colm0v1 1.03 1.03 1.05 T:deoxysii256v141 1.05 1.06 1.06 T:deoxyseq128128v1 1.26 1.26 1.28 T:deoxyseq256128v1 1.38? 1.40? 1.57? T:oceankeyakv2 1.54 1.55 1.55 T:aes128otrsv3 1.75 1.76 1.76 T:seakeyakv2 2.07 2.11 2.13 T:norx6444v3 2.13 2.13 2.14 T:aes256otrsv3 2.42 2.43 2.47 T:lunarkeyakv2 2.44 2.46 2.51 T:norx6441v2 2.51 2.52 2.53 T:norx6441v3 2.61 2.61 2.61 T:aes128n8t8silcv2 2.61 2.61 2.61 T:aes128n12t8silcv2 2.61 2.61 2.61 T:aes128n12t8clocv2 2.61 2.61 2.61 T:aes128n12t8clocv3 2.61 2.61 2.61 T:aes128n8t8clocv2 2.61 2.61 2.61 T:aes128n12t8silcv3 2.84 2.93 2.94 T:norx6441v1 3.05 3.07 3.08 T:lakekeyakv2 3.57 3.58 3.60 T:lakekeyakv1 3.68 3.68 3.77 T:norx6461v2 3.81 3.82 3.82 T:norx6461v3 4.01 4.05 4.14 T:norx3241v3 4.00 4.10 4.13 T:norx3241v2 4.34 4.34 4.35 T:norx6461v1 4.67 4.68 4.71 T:norx6444v2 4.72 4.78 4.83 T:norx3241v1 5.30 5.31 5.35 T:norx6444v1 5.34 5.34 5.36 T:aesjambuv1 5.34 5.34 5.34 T:ascon96v1 5.41 5.41 5.42 ascon128av12 5.47 5.47 5.48 T:ascon128av11 5.66 5.66 5.68 T:riverkeyakv2 5.77 5.77 5.79 T:ketjemajorv2 5.99 6.01 6.17 T:norx3261v3 6.05 6.12 6.15 T:norx3261v2 7.58 7.63 7.67 T:acorn128v2 7.66 7.66 7.67 T:acorn128v3 7.74 7.74 7.75 ascon128v12 7.83 7.83 7.83 T:ketjeminorv2 7.92 7.92 7.92 T:norx3261v1 8.18 8.18 8.19 T:ascon128v11 8.18 8.18 8.18 T:ascon128v1 13.81 13.82 13.83 T:aes128otrsv1 13.82 13.83 13.84 T:aes128otrsv2 14.69 14.71 14.74 T:aes128otrpv1 14.71 14.72 14.74 T:aes128otrpv2 17.41 17.42 17.43 T:aes128n12clocv1 17.43 17.44 17.46 T:aes128n8clocv1 17.91 17.93 17.95 T:aes256otrsv2 17.94 17.96 17.98 T:aes256otrsv1 17.50 18.07 19.29 T:twine80n6t4clocv2 18.45 18.80 20.16 T:twine80n6t4clocv3 18.80 18.81 18.83 T:aes256otrpv2 18.81 18.84 18.87 T:aes256otrpv1 18.95 18.96 18.97 T:proest256otrv1 21.89 21.92 21.94 T:aeadaes128ocbtaglen96v1 21.94 21.99 22.02 T:aeadaes128ocbtaglen64v1 25.88 25.91 25.92 T:aeadaes192ocbtaglen96v1 25.89 25.97 26.02 T:aeadaes192ocbtaglen64v1 26.42 26.45 26.50 T:ketjesrv1 29.95 29.97 30.05 T:aeadaes256ocbtaglen96v1 29.92 30.04 30.05 T:aeadaes256ocbtaglen64v1 30.77 30.82 30.85 T:ketjesrv2 35.29 35.55 35.61 T:colm127v1 47.79 47.84 47.87 T:proest128otrv1 54.36 54.42 54.47 T:ketjejrv1 67.81 67.88 69.91 T:present80n6t4silcv3 70.69 70.98 71.41 T:deoxysneq128128v13 72.56 72.64 75.44 T:ketjejrv2 90.90 91.04 91.09 T:deoxysneq256128v13 89.85 91.94 92.88 T:led80n6t4silcv3 100.99 101.10 101.31 T:aezv1 107.25 107.38 107.91 T:deoxyseq128128v13 137.63 138.06 138.23 T:deoxyseq256128v13 542.42? 561.04? 619.03? T:acorn128 2503.98 2505.50 2523.58 T:led80n6silcv1 2504.56 2515.22 2521.01 T:led80n6t4silcv2 2618.10 2619.03 2622.76 T:present80n6t4silcv2 2619.34 2620.59 2623.97 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.20 0.20 0.21 T:aegis128l 0.22 0.22 0.22 aegis128l 0.26 0.26 0.27 T:tiaoxinv1 0.25 0.26 0.27 T:tiaoxinv2 0.28? 0.28? 0.34? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.30 T:aezv5 0.30 0.30 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.36 T:aegis256 0.36 0.37 0.37 aegis256 0.38? 0.38? 0.44? T:aeadaes256ocbtaglen128v1 0.47? 0.47? 0.54? T:aeadaes192ocbtaglen128v1 0.52 0.53 0.54 aes256gcmv1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.56 0.56 T:aes128otrpv3 0.61 0.62 0.62 T:morus1280256v1 0.61 0.62 0.62 T:morus1280128v1 0.62 0.63 0.63 T:morus1280256v2 0.63 0.64 0.64 T:morus1280128v2 0.69 0.69 0.69 T:aes128gcmv1 0.72 0.72 0.72 T:aes256otrpv3 0.73 0.73 0.73 T:deoxysi128v141 0.73 0.73 0.74 T:aes256otrcv3 0.81 0.82 0.82 T:deoxysneq128128v1 0.83 0.83 0.84 T:morus640128v1 0.85 0.85 0.85 T:deoxysi256v141 0.85 0.86 0.86 T:deoxysneq256128v1 0.88 0.90 0.90 T:morus640128v2 0.92 0.93 0.93 T:deoxysii128v141 0.94 0.94 0.95 T:colm0v1 1.04 1.05 1.06 T:deoxysii256v141 1.19 1.20 1.22 T:deoxyseq128128v1 1.29 1.30 1.31 T:deoxyseq256128v1 1.39 1.41 1.54 T:oceankeyakv2 1.55 1.55 1.55 T:aes128otrsv3 1.79 1.79 1.80 T:seakeyakv2 2.09 2.11 2.14 T:norx6444v3 2.14 2.14 2.14 T:aes256otrsv3 2.44 2.49 2.51 T:norx6441v2 2.50 2.51 2.51 T:norx6441v3 2.49 2.51 2.54 T:lunarkeyakv2 2.58 2.58 2.59 T:aes128n12t8clocv2 2.58 2.58 2.59 T:aes128n12t8clocv3 2.58 2.59 2.59 T:aes128n8t8clocv2 2.59 2.59 2.60 T:aes128n8t8silcv2 2.59 2.59 2.60 T:aes128n12t8silcv3 2.59 2.59 2.60 T:aes128n12t8silcv2 2.90 2.91 2.92 T:norx6441v1 3.08 3.09 3.10 T:lakekeyakv2 3.57 3.58 3.59 T:lakekeyakv1 3.62 3.62 3.75 T:norx6461v3 3.67 3.78 3.79 T:norx6461v2 4.01 4.01 4.06 T:norx3241v3 4.02 4.06 4.13 T:norx3241v2 4.25 4.33 4.34 T:norx6461v1 4.73 4.76 4.78 T:norx6444v2 4.74 4.83 4.85 T:norx3241v1 5.31 5.31 5.32 T:ascon128av11 5.31 5.33 5.34 T:norx6444v1 5.41 5.41 5.41 ascon128av12 5.44 5.44 5.44 T:ascon96v1 5.58 5.58 5.58 T:aesjambuv1 5.71 5.72 5.73 T:ketjemajorv2 5.74 5.75 5.76 T:riverkeyakv2 5.98 5.98 6.07 T:norx3261v3 6.01 6.04 6.17 T:norx3261v2 7.65 7.67 7.70 T:acorn128v2 7.74 7.74 7.74 ascon128v12 7.77 7.77 7.77 T:acorn128v3 7.85 7.85 7.86 T:norx3261v1 7.93 7.93 7.93 T:ascon128v11 7.93 7.93 7.93 T:ascon128v1 7.99 8.00 8.01 T:ketjeminorv2 13.94 13.95 13.97 T:aes128otrsv1 13.96 13.97 14.00 T:aes128otrsv2 14.80 14.82 14.86 T:aes128otrpv1 14.87 14.89 14.92 T:aes128otrpv2 16.79 16.82 16.90 T:aes128n12clocv1 16.82 16.84 16.87 T:aes128n8clocv1 18.07 18.08 18.10 T:aes256otrsv1 18.08 18.09 18.12 T:aes256otrsv2 17.46? 18.19? 19.61? T:twine80n6t4clocv2 18.40 18.47 19.80 T:twine80n6t4clocv3 18.91 18.94 18.96 T:aes256otrpv1 18.96 18.97 18.99 T:aes256otrpv2 19.27 19.29 19.30 T:proest256otrv1 25.88 25.96 25.98 T:aeadaes128ocbtaglen64v1 25.95 25.97 26.01 T:aeadaes128ocbtaglen96v1 26.82 26.87 27.06 T:ketjesrv1 27.21 27.25 28.21 T:ketjesrv2 30.78 30.82 30.85 T:aeadaes192ocbtaglen64v1 30.80 30.86 33.60 T:aeadaes192ocbtaglen96v1 35.69 35.73 35.80 T:aeadaes256ocbtaglen64v1 35.75 35.75 35.89 T:aeadaes256ocbtaglen96v1 43.16 43.26 43.28 T:colm127v1 48.04 48.08 48.21 T:proest128otrv1 55.62 55.66 55.86 T:ketjejrv1 67.57 67.63 69.99 T:present80n6t4silcv3 74.69 74.77 74.94 T:ketjejrv2 90.15? 90.26? 103.18? T:deoxysneq128128v13 93.05 95.40 95.60 T:led80n6t4silcv3 100.98 101.11 101.24 T:aezv1 107.17 107.23 107.32 T:deoxyseq128128v13 120.65? 120.72? 143.94? T:deoxysneq256128v13 137.36 137.97 138.08 T:deoxyseq256128v13 550.81 557.11 568.39 T:acorn128 2495.08 2497.78 2508.92 T:led80n6silcv1 2504.41 2516.01 2519.20 T:led80n6t4silcv2 2619.18 2619.73 2622.20 T:present80n6silcv1 2619.75 2620.04 2620.26 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.18 0.18 0.18 T:aezv3 0.18 0.18 0.18 T:aezv5 0.18 0.18 0.18 T:aezv4 0.20 0.20 0.21 T:aegis128l 0.23 0.23 0.23 aegis128l 0.25 0.26 0.26 T:tiaoxinv1 0.25 0.26 0.27 T:tiaoxinv2 0.28? 0.28? 0.33? T:aeadaes128ocbtaglen128v1 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.36 T:aegis256 0.37? 0.38? 0.48? T:aeadaes256ocbtaglen128v1 0.39 0.39 0.39 aegis256 0.47? 0.47? 0.57? T:aeadaes192ocbtaglen128v1 0.52 0.53 0.54 aes256gcmv1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.56 0.56 T:aes128otrpv3 0.61 0.62 0.62 T:morus1280256v1 0.61 0.62 0.62 T:morus1280128v1 0.63 0.63 0.63 T:morus1280256v2 0.63 0.63 0.64 T:morus1280128v2 0.69 0.69 0.69 T:aes128gcmv1 0.72 0.72 0.72 T:aes256otrpv3 0.73 0.73 0.73 T:deoxysi128v141 0.73 0.74 0.74 T:aes256otrcv3 0.80 0.81 0.82 T:deoxysneq128128v1 0.83 0.83 0.84 T:morus640128v1 0.84 0.85 0.85 T:deoxysi256v141 0.85 0.85 0.86 T:deoxysneq256128v1 0.88 0.89 0.90 T:morus640128v2 0.92 0.93 0.93 T:deoxysii128v141 0.94 0.95 0.95 T:colm0v1 1.04 1.05 1.05 T:deoxysii256v141 1.20 1.20 1.22 T:deoxyseq128128v1 1.29 1.30 1.30 T:deoxyseq256128v1 1.40 1.42 1.55 T:oceankeyakv2 1.55 1.55 1.55 T:aes128otrsv3 1.80 1.81 1.81 T:seakeyakv2 2.08 2.09 2.12 T:norx6444v3 2.14 2.14 2.14 T:aes256otrsv3 2.45 2.50 2.51 T:norx6441v2 2.50 2.51 2.51 T:norx6441v3 2.51 2.53 2.55 T:lunarkeyakv2 2.58 2.58 2.60 T:aes128n12t8silcv3 2.58 2.58 2.59 T:aes128n12t8silcv2 2.58 2.58 2.60 T:aes128n8t8silcv2 2.58 2.58 2.58 T:aes128n8t8clocv2 2.58 2.58 2.59 T:aes128n12t8clocv2 2.58 2.58 2.58 T:aes128n12t8clocv3 2.81 2.91 2.92 T:norx6441v1 3.09 3.10 3.10 T:lakekeyakv2 3.59 3.61 3.63 T:lakekeyakv1 3.61 3.62 3.75 T:norx6461v3 3.65 3.79 3.80 T:norx6461v2 4.01 4.04 4.06 T:norx3241v2 4.02 4.07 4.17 T:norx3241v3 4.24 4.25 4.31 T:norx6461v1 4.73 4.79 4.83 T:norx3241v1 4.79 4.80 4.81 T:norx6444v2 5.31 5.31 5.31 T:ascon128av11 5.33 5.36 5.36 T:norx6444v1 5.41 5.41 5.41 ascon128av12 5.44 5.44 5.44 T:ascon96v1 5.58 5.58 5.58 T:aesjambuv1 5.74 5.74 5.75 T:ketjemajorv2 5.75 5.76 5.77 T:riverkeyakv2 6.07 6.08 6.24 T:norx3261v3 6.04 6.18 6.22 T:norx3261v2 7.63 7.64 7.65 T:acorn128v2 7.74 7.74 7.74 ascon128v12 7.77 7.77 7.77 T:acorn128v3 7.85 7.86 7.87 T:norx3261v1 7.93 7.93 7.93 T:ascon128v11 7.93 7.93 7.93 T:ascon128v1 8.02 8.03 8.04 T:ketjeminorv2 13.95 13.97 13.99 T:aes128otrsv1 13.97 13.99 14.03 T:aes128otrsv2 14.84 14.85 14.93 T:aes128otrpv1 14.87 14.88 14.90 T:aes128otrpv2 16.79 16.83 16.88 T:aes128n12clocv1 16.82 16.85 16.89 T:aes128n8clocv1 18.06 18.08 18.09 T:aes256otrsv1 18.12 18.13 18.14 T:aes256otrsv2 18.41? 18.50? 20.70? T:twine80n6t4clocv3 17.69? 18.73? 19.79? T:twine80n6t4clocv2 18.92 18.93 18.95 T:aes256otrpv1 18.98 19.01 19.03 T:aes256otrpv2 19.26 19.27 19.30 T:proest256otrv1 25.91 25.94 25.95 T:aeadaes128ocbtaglen64v1 25.92 25.95 26.02 T:aeadaes128ocbtaglen96v1 26.87 26.90 26.93 T:ketjesrv1 27.20 27.23 27.26 T:ketjesrv2 30.71 30.78 30.84 T:aeadaes192ocbtaglen64v1 30.78 30.81 33.54 T:aeadaes192ocbtaglen96v1 35.71 35.75 35.81 T:aeadaes256ocbtaglen64v1 35.73 35.76 35.80 T:aeadaes256ocbtaglen96v1 43.09 43.13 43.17 T:colm127v1 48.09 48.24 48.26 T:proest128otrv1 55.43 55.53 55.62 T:ketjejrv1 67.60 67.65 69.69 T:present80n6t4silcv3 74.79 74.97 77.66 T:ketjejrv2 90.28 90.68 99.80 T:deoxysneq128128v13 91.12 92.90 92.91 T:led80n6t4silcv3 101.18 101.34 101.54 T:aezv1 107.39 107.69 107.85 T:deoxyseq128128v13 120.76? 120.91? 143.97? T:deoxysneq256128v13 137.66 138.00 138.07 T:deoxyseq256128v13 537.22 581.52 586.28 T:acorn128 2495.31 2497.44 2506.98 T:led80n6silcv1 2507.64 2514.08 2521.73 T:led80n6t4silcv2 2619.88 2620.05 2621.33 T:present80n6t4silcv2 2619.61 2621.16 2622.70 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.83 0.87 0.90 T:aegis128 0.86 0.88 0.89 T:aegis128l 0.88 0.89 0.94 aegis128l 1.16 1.16 1.17 T:aegis256 1.18 1.19 1.21 aegis256 1.19 1.22 1.26 T:tiaoxinv2 1.21 1.22 1.29 T:tiaoxinv1 1.41 1.41 1.44 T:aezv5 1.41 1.44 1.47 T:aezv3 1.50 1.52 1.54 T:aezv4 2.40 2.42 2.45 T:colm0v1 2.48 2.57 2.65 T:aes128otrsv3 2.70 2.74 2.79 T:morus640128v1 2.83? 2.86? 4.40? T:aeadaes128ocbtaglen128v1 2.90 2.91 2.92 T:aes128otrpv3 2.89 2.91 2.95 T:morus640128v2 2.97 2.98 2.99 T:aes128n8t8silcv2 3.01 3.02 3.03 T:aes128n12t8silcv2 2.98 3.02 3.03 T:aes128n12t8silcv3 2.97 3.04 3.12 T:aes128otrcv3 2.93 3.06 3.08 T:aes128n12t8clocv2 3.04 3.06 3.09 T:aes128n12t8clocv3 3.06 3.08 3.09 T:aes128n8t8clocv2 3.03 3.09 3.14 T:deoxysneq128128v1 3.13 3.16 3.19 T:morus1280256v1 3.15 3.18 3.23 T:morus1280128v1 3.40 3.44 3.49 T:morus1280256v2 3.41 3.45 3.50 T:morus1280128v2 3.45 3.47 3.50 T:aes256otrsv3 3.49? 3.55? 5.20? T:aeadaes256ocbtaglen128v1 3.78 3.81 3.83 T:aes256otrpv3 3.79 3.86 3.89 T:deoxysi128v141 3.92? 3.97? 5.98? T:aeadaes192ocbtaglen128v1 3.93 3.98 4.03 T:aes256otrcv3 3.96 3.98 4.01 T:deoxysneq256128v1 3.92 3.99 4.09 aes256gcmv1 4.02 4.06 4.13 T:aes128gcmv1 4.62 4.67 4.75 T:deoxysi256v141 4.77 4.82 4.91 T:deoxyseq128128v1 5.15 5.18 5.19 T:deoxysii128v141 5.96 6.01 6.03 T:deoxyseq256128v1 6.05 6.07 6.10 T:deoxysii256v141 6.25 6.28 6.32 T:aesjambuv1 7.87 7.99 8.04 T:norx6441v1 7.97 7.99 8.05 T:norx6441v3 7.92 8.00 8.09 T:norx6441v2 8.21 8.22 8.22 T:ascon96v1 8.34 8.34 8.37 T:ascon128av11 8.38 8.40 8.52 ascon128av12 9.72 9.82 9.90 T:norx3241v1 9.79 9.94 10.03 T:norx3241v3 9.72 9.97 10.07 T:norx3241v2 10.48 10.49 10.49 ascon128v12 10.91 10.92 10.95 T:ascon128v11 10.91 10.92 10.96 T:ascon128v1 11.50 11.57 11.67 T:lakekeyakv1 11.61 11.69 11.89 T:norx6461v1 12.05 12.07 12.17 T:norx6461v2 12.18 12.33 12.44 T:norx6461v3 13.30 13.35 13.50 T:riverkeyakv2 13.30 13.47 13.76 T:lakekeyakv2 14.04 14.13 14.22 T:norx6444v3 14.74 14.91 15.11 T:norx3261v2 14.81 15.13 15.18 T:norx3261v3 16.01 16.02 16.03 T:norx3261v1 16.68 16.75 16.90 T:seakeyakv2 16.96 17.43 17.77 T:oceankeyakv2 21.26 21.47 21.86 T:aes128n8clocv1 21.40 21.47 21.56 T:aes128otrsv1 21.64 21.74 21.82 T:aes128otrsv2 21.45 21.81 21.97 T:aes128n12clocv1 22.02 22.07 22.19 T:aes128otrpv1 22.22 22.32 22.49 T:aes128otrpv2 24.83 24.85 24.89 T:ketjeminorv2 25.05 25.69 26.66 T:twine80n6t4clocv2 27.52 27.61 27.65 T:aes256otrsv1 27.67 27.76 27.93 T:aes256otrsv2 28.21 28.28 28.35 T:aes256otrpv1 26.50 28.29 28.69 T:twine80n6t4clocv3 28.31 28.42 28.55 T:aes256otrpv2 28.56 28.61 28.88 T:acorn128v3 33.32 33.67 33.83 T:acorn128v2 34.18 34.23 34.27 T:ketjemajorv2 34.33 34.44 34.59 T:norx6444v2 35.11 35.17 35.57 T:aeadaes128ocbtaglen64v1 35.10 35.27 35.40 T:aeadaes128ocbtaglen96v1 37.77 37.92 38.29 T:norx6444v1 38.18 38.63 39.22 T:lunarkeyakv2 40.55 40.66 40.85 T:aeadaes192ocbtaglen64v1 40.62 40.67 40.85 T:aeadaes192ocbtaglen96v1 43.39 43.52 43.65 T:ketjesrv1 47.25 47.36 47.68 T:aeadaes256ocbtaglen96v1 47.27 47.43 47.57 T:aeadaes256ocbtaglen64v1 51.42 51.52 51.78 T:ketjesrv2 51.48 51.65 51.92 T:colm127v1 53.91 54.01 54.37 T:proest256otrv1 72.67 73.15 73.53 T:ketjejrv1 79.51 79.86 80.34 T:deoxysneq128128v13 83.31 83.45 86.14 T:present80n6t4silcv3 92.61 92.92 93.30 T:proest128otrv1 93.86 94.16 94.63 T:ketjejrv2 102.17 102.41 102.69 T:deoxysneq256128v13 106.44 106.94 106.99 T:led80n6t4silcv3 111.74 112.20 112.74 T:aezv1 132.58 132.91 133.38 T:deoxyseq128128v13 170.52 170.79 171.28 T:deoxyseq256128v13 1933.19? 2136.36? 2220.44? T:acorn128 2799.90 2803.34 2821.68 T:led80n6silcv1 2808.34 2811.88 2815.03 T:led80n6t4silcv2 2930.51 2931.49 2932.51 T:present80n6t4silcv2 2931.84 2932.82 2935.10 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.86 0.89 0.92 T:aegis128 0.89 0.90 0.91 T:aegis128l 0.99 1.00 1.06 aegis128l 1.14 1.15 1.19 T:aegis256 1.20 1.22 1.24 T:tiaoxinv1 1.23 1.24 1.25 aegis256 1.23 1.26 1.29 T:tiaoxinv2 1.39 1.40 1.41 T:aezv5 1.39 1.42 1.44 T:aezv3 1.49 1.51 1.52 T:aezv4 2.55 2.65 2.68 T:aes128otrsv3 2.73 2.76 2.78 T:morus640128v1 2.79? 2.81? 4.32? T:aeadaes128ocbtaglen128v1 2.94 2.96 2.98 T:colm0v1 2.99 3.05 3.09 T:morus640128v2 3.09 3.09 3.09 T:aes128n8t8clocv2 3.12 3.13 3.14 T:aes128n12t8clocv3 3.11 3.13 3.17 T:aes128n12t8silcv2 3.00 3.13 3.14 T:aes128n12t8clocv2 3.11 3.18 3.28 T:aes128n8t8silcv2 3.23 3.27 3.30 T:morus1280256v1 3.15 3.27 3.35 T:aes128n12t8silcv3 3.31 3.34 3.41 T:morus1280128v1 3.37 3.38 3.40 T:aes128otrpv3 3.35 3.38 3.43 T:aes128otrcv3 3.51 3.55 3.61 T:morus1280256v2 3.52 3.56 3.62 T:morus1280128v2 3.52? 3.65? 6.05? T:aeadaes256ocbtaglen128v1 3.63 3.66 3.68 T:aes256otrsv3 3.79? 3.88? 5.73? T:aeadaes192ocbtaglen128v1 3.83 3.89 3.95 aes256gcmv1 4.07 4.13 4.14 T:aes128gcmv1 4.16 4.19 4.29 T:aes256otrcv3 4.23 4.25 4.28 T:aes256otrpv3 4.33 4.36 4.40 T:deoxysneq256128v1 4.36 4.38 4.44 T:deoxysneq128128v1 4.76 4.80 4.87 T:deoxysi128v141 5.49 5.53 5.60 T:deoxysii128v141 5.62 5.67 5.76 T:deoxysi256v141 6.23 6.40 6.71 T:aesjambuv1 6.46 6.49 6.56 T:deoxyseq256128v1 6.72 6.75 6.84 T:deoxyseq128128v1 6.76 6.77 6.92 T:deoxysii256v141 7.91 7.98 8.18 T:norx6441v1 8.16 8.16 8.18 T:ascon128av11 8.06 8.18 8.25 T:norx6441v2 8.17 8.23 8.27 T:norx6441v3 8.29 8.29 8.37 ascon128av12 8.34 8.34 8.34 T:ascon96v1 10.15 10.25 10.43 T:norx3241v2 10.15 10.29 10.43 T:norx3241v1 10.18 10.39 10.56 T:norx3241v3 10.42 10.42 10.43 ascon128v12 10.56 10.57 10.60 T:ascon128v11 10.56 10.58 10.63 T:ascon128v1 11.47 11.48 11.49 T:lakekeyakv1 11.77 11.83 11.90 T:norx6461v1 11.99 12.03 12.07 T:norx6461v2 12.43 12.49 12.57 T:norx6461v3 13.34 13.40 13.49 T:riverkeyakv2 13.31 13.52 13.87 T:lakekeyakv2 14.08 14.17 14.31 T:norx6444v3 14.98 15.11 15.36 T:norx3261v3 15.14 15.41 15.63 T:norx3261v2 16.20 16.22 16.25 T:norx3261v1 16.74 16.83 16.93 T:seakeyakv2 17.00 17.30 17.47 T:oceankeyakv2 20.78 20.92 21.32 T:aes128n8clocv1 20.92 21.05 21.43 T:aes128n12clocv1 21.60 21.68 21.77 T:aes128otrsv1 21.79 21.86 21.99 T:aes128otrsv2 22.26 22.37 22.46 T:aes128otrpv1 22.47 22.59 22.80 T:aes128otrpv2 24.66 24.87 25.97 T:twine80n6t4clocv2 24.69 24.90 25.02 T:ketjeminorv2 25.65 26.67 27.45 T:twine80n6t4clocv3 27.71 27.74 27.80 T:aes256otrsv1 27.93 28.04 28.11 T:aes256otrsv2 28.37 28.39 28.46 T:acorn128v3 28.31 28.40 28.51 T:aes256otrpv1 28.48 28.56 28.67 T:aes256otrpv2 34.36 34.38 34.49 T:ketjemajorv2 34.34 34.60 34.80 T:acorn128v2 34.55 34.73 35.10 T:norx6444v2 37.78 37.90 37.98 T:norx6444v1 38.31 38.83 39.20 T:lunarkeyakv2 42.40 42.66 42.84 T:aeadaes128ocbtaglen64v1 42.49 42.72 42.96 T:aeadaes128ocbtaglen96v1 43.82 44.05 44.23 T:ketjesrv1 47.97 48.25 48.42 T:ketjesrv2 49.40 49.53 50.05 T:aeadaes192ocbtaglen96v1 49.36 49.55 49.96 T:aeadaes192ocbtaglen64v1 55.94 56.21 56.67 T:proest256otrv1 57.78 58.09 58.21 T:aeadaes256ocbtaglen64v1 57.85 58.14 58.47 T:aeadaes256ocbtaglen96v1 59.23 59.52 59.72 T:colm127v1 73.96 74.19 74.34 T:ketjejrv1 83.02 83.09 86.08 T:present80n6t4silcv3 93.67 93.86 94.62 T:proest128otrv1 96.21 96.52 97.10 T:ketjejrv2 98.78? 99.34? 111.32? T:deoxysneq128128v13 107.21 112.54 112.54 T:led80n6t4silcv3 113.90 114.71 115.49 T:aezv1 131.63? 132.02? 155.76? T:deoxysneq256128v13 132.56 132.89 133.30 T:deoxyseq128128v13 170.20 170.79 171.21 T:deoxyseq256128v13 1897.28 2051.96 2071.44 T:acorn128 2793.95 2800.34 2810.69 T:led80n6silcv1 2809.00 2814.63 2818.81 T:led80n6t4silcv2 2931.37 2931.92 2932.74 T:present80n6t4silcv2 2932.02 2933.94 2936.61 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.83? 0.89? 0.93? T:aegis128 0.89 0.91 0.91 T:aegis128l 1.00 1.00 1.01 T:aezv5 1.02 1.03 1.05 aegis128l 1.04 1.06 1.10 T:aezv3 1.14 1.15 1.17 T:aegis256 1.18 1.18 1.19 T:aezv4 1.21 1.22 1.25 T:tiaoxinv1 1.21 1.23 1.26 T:tiaoxinv2 1.26 1.28 1.31 aegis256 2.54 2.65 2.69 T:aes128otrsv3 2.73 2.75 2.78 T:morus640128v1 2.78? 2.82? 4.22? T:aeadaes128ocbtaglen128v1 2.89 2.90 2.91 T:aes128n8t8silcv2 2.90 2.90 2.92 T:aes128n12t8silcv3 2.90 2.90 3.08 T:aes128n12t8silcv2 2.96 3.00 3.05 T:colm0v1 2.97 3.02 3.06 T:morus640128v2 3.06 3.06 3.08 T:aes128n8t8clocv2 3.08 3.10 3.11 T:aes128n12t8clocv3 2.94 3.10 3.10 T:aes128n12t8clocv2 3.29 3.35 3.38 T:morus1280256v1 3.32 3.35 3.40 T:morus1280128v1 3.37 3.38 3.40 T:aes128otrpv3 3.32 3.38 3.41 T:aes128otrcv3 3.52 3.55 3.62 T:morus1280256v2 3.56 3.58 3.63 T:morus1280128v2 3.62 3.65 3.68 T:aes256otrsv3 3.59? 3.66? 6.04? T:aeadaes256ocbtaglen128v1 3.75? 3.87? 5.10? T:aeadaes192ocbtaglen128v1 3.88 3.92 3.98 aes256gcmv1 4.08 4.13 4.14 T:aes128gcmv1 4.19 4.24 4.29 T:aes256otrcv3 4.26 4.29 4.32 T:aes256otrpv3 4.31 4.38 4.45 T:deoxysneq256128v1 4.35 4.39 4.43 T:deoxysneq128128v1 4.75 4.79 4.89 T:deoxysi128v141 5.43 5.51 5.60 T:deoxysii128v141 5.62 5.66 5.71 T:deoxysi256v141 6.23 6.41 6.71 T:aesjambuv1 6.45 6.53 6.59 T:deoxyseq256128v1 6.73 6.76 6.82 T:deoxyseq128128v1 6.77 6.81 6.94 T:deoxysii256v141 8.12 8.12 8.14 T:ascon128av11 8.02 8.17 8.24 T:norx6441v1 8.08 8.18 8.27 T:norx6441v3 8.17 8.20 8.24 T:norx6441v2 8.29 8.29 8.29 ascon128av12 8.30 8.30 8.30 T:ascon96v1 10.21 10.27 10.45 T:norx3241v2 10.15 10.28 10.40 T:norx3241v1 10.17 10.36 10.54 T:norx3241v3 10.42 10.42 10.42 ascon128v12 10.53 10.53 10.54 T:ascon128v11 10.53 10.54 10.58 T:ascon128v1 11.50 11.52 11.53 T:lakekeyakv1 11.94 12.06 12.10 T:norx6461v3 12.07 12.12 12.15 T:norx6461v1 12.08 12.38 12.47 T:norx6461v2 13.35 13.38 13.55 T:riverkeyakv2 14.08 14.19 14.28 T:norx6444v3 14.36 14.55 14.95 T:lakekeyakv2 14.97 15.09 15.35 T:norx3261v3 15.12 15.54 15.72 T:norx3261v2 16.21 16.21 16.22 T:norx3261v1 16.77 16.83 16.93 T:seakeyakv2 17.03 17.31 17.45 T:oceankeyakv2 20.77 20.80 21.07 T:aes128n8clocv1 20.87 21.09 21.40 T:aes128n12clocv1 21.72 21.78 21.88 T:aes128otrsv1 21.90 21.97 22.20 T:aes128otrsv2 22.35 22.41 22.51 T:aes128otrpv1 22.54 22.67 22.84 T:aes128otrpv2 24.83 24.95 25.03 T:ketjeminorv2 24.72 25.12 26.14 T:twine80n6t4clocv2 26.40 27.39 27.42 T:twine80n6t4clocv3 27.80 27.84 28.00 T:aes256otrsv1 27.99 28.09 28.31 T:aes256otrsv2 28.37 28.38 28.40 T:acorn128v3 28.40 28.49 28.58 T:aes256otrpv1 28.54 28.60 28.68 T:aes256otrpv2 34.39 34.45 34.63 T:ketjemajorv2 34.26 34.64 34.80 T:acorn128v2 34.51 34.64 34.76 T:norx6444v2 37.87 37.98 38.07 T:norx6444v1 38.51 39.09 39.45 T:lunarkeyakv2 42.39 42.67 42.92 T:aeadaes128ocbtaglen64v1 42.55 42.75 42.96 T:aeadaes128ocbtaglen96v1 43.95 44.18 44.54 T:ketjesrv1 48.17 48.36 48.71 T:ketjesrv2 49.35 49.48 49.85 T:aeadaes192ocbtaglen96v1 49.32 49.54 49.71 T:aeadaes192ocbtaglen64v1 54.51 54.75 55.20 T:proest256otrv1 57.79 58.08 58.20 T:aeadaes256ocbtaglen64v1 57.99 58.12 58.33 T:aeadaes256ocbtaglen96v1 59.10 59.39 59.60 T:colm127v1 74.06 74.29 74.63 T:ketjejrv1 82.98 83.10 85.61 T:present80n6t4silcv3 93.62 93.70 94.36 T:proest128otrv1 96.20 96.71 97.28 T:ketjejrv2 99.28? 100.04? 110.98? T:deoxysneq128128v13 107.54 110.52 112.40 T:led80n6t4silcv3 114.05 114.81 115.29 T:aezv1 131.68? 132.15? 155.74? T:deoxysneq256128v13 132.87 133.27 133.43 T:deoxyseq128128v13 170.39 170.92 171.34 T:deoxyseq256128v13 1913.76 2021.43 2051.70 T:acorn128 2799.21 2806.23 2809.70 T:led80n6silcv1 2800.75 2816.28 2819.60 T:led80n6t4silcv2 2931.78 2932.64 2934.54 T:present80n6t4silcv2 2932.00 2932.76 2935.65 T:present80n6silcv1