VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20260627

[Page version: 20260629 16:04:42]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.13 0.14 0.14 T:tiaoxinv2 0.13 0.14 0.14 T:tiaoxinv1 0.08? 0.18? 0.29? T:aeadaes128ocbtaglen128v1 0.18 0.19 0.19 T:aegis128l 0.19 0.19 0.20 aegis128l 0.15? 0.25? 0.41? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.32 aegis256 0.32 0.33 0.34 T:aegis256 0.36 0.37 0.37 T:aezv4 0.36 0.37 0.37 T:aezv3 0.38 0.38 0.39 T:aezv5 0.24? 0.40? 0.57? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.42 T:aes128otrcv3 0.41 0.42 0.42 T:aes128otrsv3 0.43 0.44 0.44 T:aes128otrpv3 0.46 0.47 0.48 T:morus1280256v1 0.47 0.48 0.50 T:morus1280128v1 0.47 0.49 0.50 T:morus1280128v2 0.50 0.51 0.52 T:morus1280256v2 0.53 0.53 0.54 T:deoxysi128v141 0.54 0.55 0.55 T:aes256otrsv3 0.54 0.55 0.55 T:aes256otrcv3 0.55 0.56 0.57 aes256gcmv1 0.57 0.57 0.58 T:aes256otrpv3 0.59 0.60 0.61 T:deoxysi256v141 0.60 0.62 0.64 T:deoxysneq128128v1 0.69 0.71 0.72 T:deoxysneq256128v1 0.74? 0.77? 0.84? T:lunarkeyakv2 0.74 0.78 0.81 T:oceankeyakv2 0.78 0.78 0.79 T:aes128gcmv1 0.81 0.81 0.82 T:morus640128v2 0.81 0.82 0.82 T:morus640128v1 0.89 0.91 0.92 T:norx6444v3 1.05 1.06 1.07 T:deoxysii128v141 1.19 1.20 1.21 T:deoxysii256v141 1.24 1.25 1.26 T:deoxyseq128128v1 1.28 1.29 1.30 T:colm0v1 1.41 1.42 1.43 T:seakeyakv2 1.43 1.45 1.47 T:deoxyseq256128v1 2.12 2.13 2.14 T:norx6441v3 2.13 2.14 2.19 T:norx6441v2 2.56 2.57 2.65 T:norx6441v1 2.62 2.62 2.63 T:aes128n12t8silcv2 2.62 2.63 2.63 T:aes128n12t8silcv3 2.62 2.63 2.63 T:aes128n12t8clocv3 2.62 2.63 2.63 T:aes128n12t8clocv2 2.62 2.63 2.63 T:aes128n8t8silcv2 2.62 2.63 2.63 T:aes128n8t8clocv2 2.95 2.98 3.02 T:norx6444v2 3.10 3.14 3.22 T:lakekeyakv2 3.19 3.20 3.29 T:norx6461v3 3.22 3.26 3.32 T:lakekeyakv1 3.20 3.30 3.32 T:norx6461v2 3.42 3.45 3.51 T:norx6444v1 3.69 3.70 3.88 T:norx3241v2 3.76 3.76 3.91 T:norx3241v3 3.94 3.95 3.97 T:norx6461v1 4.52 4.66 4.69 T:norx3241v1 5.18 5.21 5.23 T:ketjemajorv2 5.35 5.35 5.36 T:aesjambuv1 5.60 5.79 5.84 T:norx3261v2 5.60 5.82 5.85 T:norx3261v3 6.07 6.07 6.07 ascon128av12 6.75 6.75 6.75 T:acorn128v3 7.25 7.25 7.25 T:acorn128v2 7.49 7.50 7.52 T:riverkeyakv2 7.52 7.53 7.53 T:norx3261v1 8.45 8.46 8.48 T:ascon96v1 8.46 8.48 8.48 T:ascon128av11 8.62 8.63 8.63 ascon128v12 8.63 8.63 8.63 T:ascon128v11 8.63 8.63 8.63 T:ascon128v1 8.89 8.91 8.94 T:ketjeminorv2 14.54 14.57 14.62 T:aes128otrsv2 14.57 14.59 14.61 T:aes128otrpv1 14.56 14.60 14.65 T:aes128otrpv2 14.61 14.64 14.67 T:aes128otrsv1 17.00 17.03 17.05 T:proest256otrv1 18.55 18.58 18.61 T:aes256otrpv1 18.55 18.60 18.67 T:aes256otrpv2 18.58 18.61 18.63 T:aes256otrsv1 18.49 18.61 19.46 T:aes256otrsv2 17.34? 18.78? 19.73? T:twine80n6t4clocv2 19.13 19.36 19.53 T:twine80n6t4clocv3 20.75 20.86 20.92 T:aeadaes128ocbtaglen96v1 20.76 20.86 20.97 T:aeadaes128ocbtaglen64v1 22.49 22.52 22.58 T:aes128n12clocv1 22.49 22.54 22.57 T:aes128n8clocv1 24.68 24.72 24.75 T:aeadaes192ocbtaglen96v1 24.61 24.73 24.83 T:aeadaes192ocbtaglen64v1 28.46 28.48 28.64 T:aeadaes256ocbtaglen64v1 28.46 28.49 28.60 T:aeadaes256ocbtaglen96v1 29.23 29.32 29.44 T:ketjesrv1 34.31 34.37 34.41 T:ketjesrv2 45.07 45.22 45.35 T:proest128otrv1 45.51 45.53 45.55 T:ketjejrv1 46.29 46.34 46.42 T:colm127v1 67.29 67.37 67.57 T:present80n6t4silcv3 74.12 74.20 74.26 T:ketjejrv2 83.46 83.56 83.67 T:deoxysneq128128v13 88.07 91.01 95.46 T:led80n6t4silcv3 115.26 115.47 115.87 T:deoxysneq256128v13 157.74 158.21 159.17 T:aezv1 168.27 168.54 168.78 T:deoxyseq128128v13 231.65 231.99 232.24 T:deoxyseq256128v13 545.99 560.41 575.73 T:acorn128 3247.56 3255.93 3300.10 T:led80n6t4silcv2 3254.59 3273.45 3302.21 T:led80n6silcv1 3472.11 3472.51 3472.91 T:present80n6t4silcv2 3475.42 3476.51 3477.85 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.08? 0.18? 0.27? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 aegis128l 0.16? 0.19? 0.23? T:aegis128l 0.07? 0.25? 0.34? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.31 0.33 0.34 aegis256 0.32 0.33 0.34 T:aegis256 0.31 0.34 0.34 T:tiaoxinv1 0.32 0.34 0.34 T:tiaoxinv2 0.36 0.37 0.37 T:aezv4 0.36 0.37 0.38 T:aezv3 0.37 0.38 0.38 T:aezv5 0.23? 0.41? 0.50? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrsv3 0.42 0.42 0.43 T:aes128otrcv3 0.45 0.45 0.46 T:aes128otrpv3 0.47 0.48 0.49 aes256gcmv1 0.49 0.50 0.51 T:morus1280256v2 0.50 0.51 0.52 T:morus1280128v2 0.50 0.51 0.52 T:morus1280256v1 0.50 0.51 0.52 T:morus1280128v1 0.54 0.54 0.55 T:aes256otrcv3 0.54 0.55 0.55 T:aes256otrsv3 0.58 0.59 0.59 T:aes256otrpv3 0.58 0.59 0.60 T:deoxysi128v141 0.66 0.67 0.67 T:deoxysneq128128v1 0.68 0.69 0.69 T:deoxysi256v141 0.70 0.71 0.72 T:deoxysneq256128v1 0.72 0.76 0.79 T:oceankeyakv2 0.78 0.79 0.79 T:morus640128v1 0.78 0.79 0.82 T:aes128gcmv1 0.81 0.83 0.83 T:morus640128v2 0.79? 0.86? 0.94? T:lunarkeyakv2 0.89 0.91 0.93 T:norx6444v3 1.06 1.07 1.07 T:deoxysii128v141 1.18 1.18 1.19 T:colm0v1 1.19 1.20 1.20 T:deoxysii256v141 1.35 1.37 1.38 T:deoxyseq128128v1 1.41 1.42 1.43 T:deoxyseq256128v1 1.47 1.49 1.51 T:seakeyakv2 2.09 2.13 2.15 T:norx6441v3 2.09 2.13 2.15 T:norx6441v2 2.56 2.56 2.57 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n8t8clocv2 2.50 2.56 2.58 T:norx6441v1 2.54 2.57 2.58 T:aes128n8t8silcv2 2.56 2.57 2.58 T:aes128n12t8silcv3 2.95 3.04 3.07 T:norx6444v2 3.07 3.17 3.22 T:lakekeyakv2 3.21 3.24 3.29 T:lakekeyakv1 3.17 3.25 3.27 T:norx6461v2 3.17 3.25 3.27 T:norx6461v3 3.44 3.48 3.51 T:norx6444v1 3.70 3.74 3.88 T:norx6461v1 3.71 3.77 3.87 T:norx3241v2 3.77 3.89 3.90 T:norx3241v3 4.43 4.46 4.48 T:norx3241v1 5.06 5.09 5.12 T:ketjemajorv2 5.60 5.63 5.77 T:norx3261v3 5.73 5.76 5.86 T:aesjambuv1 5.78 5.80 5.82 T:norx3261v2 6.06 6.06 6.07 ascon128av12 6.75 6.75 6.78 T:acorn128v3 7.12 7.12 7.13 T:acorn128v2 7.37 7.40 7.40 T:norx3261v1 7.63 7.66 7.69 T:riverkeyakv2 8.37 8.38 8.38 T:ascon128v11 8.37 8.38 8.39 T:ascon128v1 8.88 8.88 8.88 ascon128v12 8.86 8.90 8.91 T:ascon96v1 8.90 8.92 8.95 T:ascon128av11 9.39 9.43 9.44 T:ketjeminorv2 14.80 14.84 14.90 T:aes128otrpv1 14.82 14.84 14.87 T:aes128otrsv1 14.87 14.92 14.96 T:aes128otrsv2 14.90 14.95 14.97 T:aes128otrpv2 17.17? 17.35? 19.57? T:twine80n6t4clocv2 17.43 17.47 17.50 T:proest256otrv1 18.81 18.84 18.90 T:aes256otrpv1 18.83 18.86 18.90 T:aes256otrsv1 18.87 18.90 18.93 T:aes256otrpv2 18.78 18.95 19.78 T:aes256otrsv2 19.01 19.09 19.41 T:twine80n6t4clocv3 21.27 21.31 21.34 T:aes128n12clocv1 21.35 21.39 21.43 T:aes128n8clocv1 28.81 28.87 29.00 T:aeadaes128ocbtaglen96v1 28.74 28.90 29.06 T:ketjesrv2 28.88 29.04 29.13 T:aeadaes128ocbtaglen64v1 31.21 31.28 31.36 T:ketjesrv1 34.41 34.46 34.50 T:aeadaes192ocbtaglen96v1 34.42 34.46 34.51 T:aeadaes192ocbtaglen64v1 40.05 40.09 40.15 T:aeadaes256ocbtaglen64v1 40.11 40.20 40.40 T:aeadaes256ocbtaglen96v1 45.66 45.77 46.85 T:proest128otrv1 50.45 50.50 50.51 T:ketjejrv1 62.79 62.84 62.89 T:colm127v1 66.74 66.84 66.92 T:present80n6t4silcv3 78.36 78.54 81.49 T:ketjejrv2 86.71? 91.95? 97.22? T:led80n6t4silcv3 137.39 137.50 137.65 T:deoxysneq128128v13 156.66 157.08 158.54 T:aezv1 168.86 169.17 169.66 T:deoxyseq128128v13 179.96 180.19 180.46 T:deoxysneq256128v13 233.61 233.95 234.23 T:deoxyseq256128v13 536.83? 554.10? 670.49? T:acorn128 3239.47 3246.49 3283.33 T:led80n6t4silcv2 3260.51 3270.80 3302.66 T:led80n6silcv1 3475.87 3476.54 3477.24 T:present80n6t4silcv2 3475.90 3477.61 3480.28 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13? 0.14? 0.15? T:aezv4 0.14 0.14 0.15 T:aezv3 0.14 0.15 0.15 T:aezv5 0.09? 0.18? 0.27? T:aeadaes128ocbtaglen128v1 0.16? 0.19? 0.22? T:aegis128l 0.23 0.24 0.25 aegis128l 0.07? 0.25? 0.34? T:aeadaes256ocbtaglen128v1 0.29? 0.31? 0.34? T:tiaoxinv2 0.31 0.31 0.32 T:aegis128 0.30? 0.32? 0.34? T:tiaoxinv1 0.32 0.33 0.34 T:aegis256 0.36 0.38 0.39 aegis256 0.31? 0.40? 0.57? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrsv3 0.42 0.42 0.43 T:aes128otrcv3 0.45 0.45 0.46 T:aes128otrpv3 0.47 0.48 0.49 aes256gcmv1 0.50 0.50 0.51 T:morus1280128v2 0.50 0.50 0.51 T:morus1280128v1 0.50 0.51 0.52 T:morus1280256v1 0.50 0.51 0.52 T:morus1280256v2 0.54 0.54 0.55 T:aes256otrcv3 0.54 0.54 0.55 T:aes256otrsv3 0.58 0.58 0.59 T:aes256otrpv3 0.59 0.59 0.60 T:deoxysi128v141 0.65 0.66 0.67 T:deoxysneq128128v1 0.68 0.69 0.69 T:deoxysi256v141 0.70 0.71 0.72 T:deoxysneq256128v1 0.78 0.78 0.79 T:morus640128v1 0.74? 0.79? 0.83? T:oceankeyakv2 0.78 0.79 0.82 T:aes128gcmv1 0.81 0.82 0.83 T:morus640128v2 0.90 0.91 0.93 T:norx6444v3 0.88? 0.94? 0.99? T:lunarkeyakv2 1.06 1.07 1.08 T:deoxysii128v141 1.18 1.18 1.19 T:colm0v1 1.20 1.20 1.20 T:deoxysii256v141 1.35 1.37 1.38 T:deoxyseq128128v1 1.41 1.42 1.45 T:deoxyseq256128v1 1.50 1.53 1.54 T:seakeyakv2 2.09 2.13 2.14 T:norx6441v2 2.09 2.14 2.15 T:norx6441v3 2.49 2.51 2.58 T:norx6441v1 2.56 2.56 2.56 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128n12t8silcv3 3.03 3.10 3.15 T:norx6444v2 3.15 3.16 3.26 T:norx6461v3 3.13 3.17 3.22 T:lakekeyakv2 3.16 3.24 3.27 T:norx6461v2 3.24 3.28 3.32 T:lakekeyakv1 3.46 3.51 3.56 T:norx6444v1 3.73 3.75 3.78 T:norx3241v3 3.72 3.76 3.88 T:norx6461v1 3.76 3.85 3.87 T:norx3241v2 4.39 4.45 4.48 T:norx3241v1 5.09 5.11 5.14 T:ketjemajorv2 5.73 5.76 5.86 T:aesjambuv1 5.60 5.78 5.80 T:norx3261v3 5.61 5.79 5.83 T:norx3261v2 6.06 6.07 6.07 ascon128av12 6.75 6.75 6.77 T:acorn128v3 7.12 7.12 7.13 T:acorn128v2 7.35 7.37 7.39 T:norx3261v1 7.66 7.69 7.71 T:riverkeyakv2 7.82 7.87 7.88 T:ascon96v1 7.87 7.87 7.88 T:ascon128av11 8.38 8.38 8.39 T:ascon128v1 8.38 8.38 8.38 T:ascon128v11 8.88 8.88 8.88 ascon128v12 9.41 9.44 9.46 T:ketjeminorv2 14.82 14.85 14.87 T:aes128otrpv1 14.86 14.89 14.91 T:aes128otrsv1 14.89 14.93 14.96 T:aes128otrsv2 14.91 14.94 14.97 T:aes128otrpv2 17.45 17.47 17.49 T:proest256otrv1 17.17? 18.38? 19.59? T:twine80n6t4clocv2 18.84 18.87 18.90 T:aes256otrpv1 18.86 18.89 18.90 T:aes256otrsv1 18.81 18.94 19.74 T:aes256otrsv2 18.91 18.94 18.98 T:aes256otrpv2 18.99 19.19 19.40 T:twine80n6t4clocv3 21.27 21.31 21.36 T:aes128n12clocv1 21.33 21.39 21.42 T:aes128n8clocv1 28.78 28.83 28.86 T:aeadaes128ocbtaglen96v1 28.80 28.84 29.02 T:aeadaes128ocbtaglen64v1 28.83 28.94 29.08 T:ketjesrv2 31.25 31.33 31.40 T:ketjesrv1 34.40 34.46 34.55 T:aeadaes192ocbtaglen64v1 34.47 34.58 34.64 T:aeadaes192ocbtaglen96v1 40.07 40.14 40.32 T:aeadaes256ocbtaglen64v1 40.09 40.16 40.25 T:aeadaes256ocbtaglen96v1 45.63 45.78 45.89 T:proest128otrv1 50.52 50.55 50.56 T:ketjejrv1 61.34 61.45 61.54 T:colm127v1 66.83 66.92 67.06 T:present80n6t4silcv3 78.33 78.43 78.54 T:ketjejrv2 86.88 90.00 94.17 T:led80n6t4silcv3 137.65 137.77 137.90 T:deoxysneq128128v13 156.90 157.12 158.54 T:aezv1 168.96 169.40 169.73 T:deoxyseq128128v13 179.82 180.22 180.59 T:deoxysneq256128v13 233.51 234.19 234.80 T:deoxyseq256128v13 512.49? 545.51? 593.62? T:acorn128 3252.61 3259.02 3298.11 T:led80n6silcv1 3245.19 3261.17 3289.38 T:led80n6t4silcv2 3474.90 3476.38 3477.01 T:present80n6t4silcv2 3475.93 3476.55 3477.12 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.11 0.12 0.12 T:tiaoxinv1 0.12 0.12 0.12 T:tiaoxinv2 0.12? 0.17? 0.22? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.17 T:aegis128l 0.18 0.18 0.18 aegis128l 0.18? 0.23? 0.29? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.26 T:aezv5 0.25 0.25 0.26 T:aezv4 0.31 0.31 0.31 T:aegis128 0.31 0.32 0.32 aegis256 0.32 0.32 0.32 T:aegis256 0.32? 0.39? 0.44? T:aeadaes192ocbtaglen128v1 0.40 0.41 0.41 T:aes128otrcv3 0.41 0.42 0.42 T:aes128otrpv3 0.46 0.47 0.47 aes256gcmv1 0.47 0.48 0.49 T:morus1280128v1 0.48 0.48 0.49 T:morus1280256v1 0.48 0.49 0.50 T:morus1280256v2 0.48 0.50 0.50 T:morus1280128v2 0.54 0.54 0.54 T:deoxysi128v141 0.54 0.54 0.55 T:aes256otrcv3 0.55 0.55 0.55 T:aes256otrpv3 0.58 0.59 0.59 T:aes128gcmv1 0.59 0.60 0.61 T:deoxysi256v141 0.61 0.62 0.62 T:deoxysneq128128v1 0.65 0.67 0.69 T:oceankeyakv2 0.70 0.71 0.72 T:deoxysneq256128v1 0.76 0.76 0.77 T:morus640128v2 0.76 0.77 0.78 T:morus640128v1 0.79 0.80 0.80 T:deoxysii128v141 0.89 0.90 0.90 T:colm0v1 0.90 0.90 0.90 T:deoxysii256v141 0.89 0.90 0.96 T:lunarkeyakv2 0.93 0.93 0.94 T:deoxyseq128128v1 1.09 1.09 1.11 T:deoxyseq256128v1 1.19 1.20 1.21 T:seakeyakv2 1.49 1.49 1.49 T:aes128otrsv3 1.48 1.51 1.55 T:norx6444v3 2.05 2.05 2.06 T:aes256otrsv3 2.11 2.13 2.18 T:norx6441v3 2.17 2.18 2.19 T:norx6441v2 2.50 2.51 2.62 T:norx6441v1 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.59 T:aes128n12t8silcv2 2.59 2.59 2.59 T:aes128n8t8clocv2 2.59 2.59 2.59 T:aes128n12t8silcv3 2.59 2.59 2.59 T:aes128n12t8clocv3 2.59 2.59 2.59 T:aes128n12t8clocv2 2.71 2.76 2.79 T:lakekeyakv2 2.95 2.97 3.00 T:norx6444v2 2.98 3.03 3.09 T:lakekeyakv1 3.15 3.15 3.30 T:norx6461v3 3.16 3.18 3.29 T:norx6461v2 3.35 3.36 3.40 T:norx6444v1 3.68 3.69 3.79 T:norx3241v2 3.78 3.84 3.84 T:norx3241v3 3.92 3.93 3.94 T:norx6461v1 4.50 4.51 4.53 T:ketjemajorv2 4.52 4.59 4.68 T:norx3241v1 5.30 5.33 5.39 T:aesjambuv1 5.37 5.40 5.43 T:riverkeyakv2 5.54 5.67 5.71 T:norx3261v2 5.56 5.73 5.77 T:norx3261v3 5.88 5.88 5.89 ascon128av12 6.76 6.76 6.76 T:acorn128v3 7.26 7.26 7.26 T:acorn128v2 7.52 7.53 7.53 T:norx3261v1 8.03 8.03 8.05 T:ketjeminorv2 8.44 8.45 8.45 T:ascon128av11 8.45 8.45 8.46 T:ascon96v1 8.56 8.56 8.56 T:ascon128v1 8.56 8.56 8.56 T:ascon128v11 8.75 8.75 8.75 ascon128v12 13.48 13.50 13.52 T:aes128otrsv2 13.49 13.51 13.53 T:aes128otrsv1 14.36 14.38 14.41 T:aes128otrpv2 14.38 14.41 14.44 T:aes128otrpv1 17.22 17.25 17.27 T:aes128n12clocv1 17.23 17.27 17.29 T:aes128n8clocv1 17.42 17.45 17.47 T:proest256otrv1 17.44 17.52 18.24 T:aes256otrsv2 17.52 17.54 17.56 T:aes256otrsv1 17.08 18.18 18.81 T:twine80n6t4clocv2 18.36 18.38 18.41 T:aes256otrpv2 18.38 18.40 18.42 T:aes256otrpv1 18.93 19.04 19.31 T:twine80n6t4clocv3 20.66 20.69 20.72 T:aeadaes128ocbtaglen96v1 20.66 20.75 20.81 T:aeadaes128ocbtaglen64v1 24.45 24.51 24.59 T:aeadaes192ocbtaglen96v1 24.57 24.60 24.69 T:aeadaes192ocbtaglen64v1 28.13 28.20 28.28 T:ketjesrv1 28.37 28.39 28.45 T:aeadaes256ocbtaglen96v1 28.36 28.40 28.44 T:aeadaes256ocbtaglen64v1 30.27 30.31 30.37 T:ketjesrv2 34.36 34.38 34.68 T:colm127v1 45.65 45.75 45.91 T:proest128otrv1 45.98 46.08 46.13 T:ketjejrv1 67.07 67.13 67.23 T:present80n6t4silcv3 71.58 71.65 73.39 T:ketjejrv2 83.76 83.92 84.03 T:deoxysneq128128v13 89.12 90.95 92.33 T:led80n6t4silcv3 104.22 104.64 105.73 T:aezv1 115.71 115.81 115.94 T:deoxysneq256128v13 126.07 126.24 126.44 T:deoxyseq128128v13 173.68 174.05 174.65 T:deoxyseq256128v13 502.77 520.74 533.78 T:acorn128 2443.66 2452.56 2464.87 T:led80n6silcv1 2436.02 2457.00 2460.94 T:led80n6t4silcv2 2604.20 2605.26 2606.68 T:present80n6t4silcv2 2605.96 2606.92 2608.82 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.11? 0.17? 0.22? T:aeadaes128ocbtaglen128v1 0.16? 0.18? 0.19? T:aegis128l 0.18 0.18 0.18 aegis128l 0.20 0.21 0.22 T:tiaoxinv2 0.20 0.21 0.22 T:tiaoxinv1 0.15? 0.24? 0.30? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aezv4 0.25 0.26 0.26 T:aezv5 0.31 0.31 0.31 T:aegis128 0.31 0.32 0.32 aegis256 0.32 0.32 0.32 T:aegis256 0.33? 0.39? 0.47? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.42 T:aes128otrcv3 0.42 0.43 0.43 aes256gcmv1 0.43 0.43 0.43 T:aes128otrpv3 0.49 0.50 0.51 T:morus1280256v1 0.49 0.50 0.50 T:morus1280128v2 0.49 0.50 0.51 T:morus1280128v1 0.50 0.50 0.51 T:morus1280256v2 0.54 0.54 0.55 T:aes256otrcv3 0.55 0.55 0.56 T:aes256otrpv3 0.56 0.57 0.57 T:deoxysi128v141 0.58 0.59 0.60 T:aes128gcmv1 0.64 0.65 0.65 T:deoxysneq128128v1 0.64 0.65 0.65 T:deoxysi256v141 0.63 0.66 0.67 T:oceankeyakv2 0.70 0.71 0.72 T:deoxysneq256128v1 0.75 0.75 0.76 T:morus640128v1 0.79 0.80 0.80 T:deoxysii128v141 0.79 0.80 0.81 T:morus640128v2 0.83 0.84 0.85 T:colm0v1 0.89 0.90 0.90 T:deoxysii256v141 0.98 0.99 1.00 T:deoxyseq128128v1 0.94 0.99 1.03 T:lunarkeyakv2 1.10 1.11 1.13 T:deoxyseq256128v1 1.21 1.22 1.23 T:seakeyakv2 1.49 1.49 1.49 T:aes128otrsv3 1.50 1.54 1.56 T:norx6444v3 2.06 2.06 2.06 T:aes256otrsv3 2.06 2.07 2.15 T:norx6441v2 2.15 2.16 2.17 T:norx6441v3 2.56 2.56 2.57 T:aes128n8t8clocv2 2.55 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128n12t8clocv3 2.56 2.56 2.58 T:aes128n12t8clocv2 2.56 2.57 2.57 T:aes128n8t8silcv2 2.55 2.57 2.58 T:aes128n12t8silcv3 2.49 2.60 2.62 T:norx6441v1 2.74 2.78 2.81 T:lakekeyakv2 2.90 2.93 2.96 T:norx6444v2 3.07 3.09 3.09 T:lakekeyakv1 3.10 3.13 3.26 T:norx6461v2 3.10 3.14 3.26 T:norx6461v3 3.36 3.37 3.39 T:norx6444v1 3.66 3.71 3.89 T:norx6461v1 3.82 3.82 3.89 T:norx3241v3 3.77 3.83 3.87 T:norx3241v2 4.44 4.45 4.47 T:ketjemajorv2 4.51 4.59 4.62 T:norx3241v1 5.46 5.48 5.50 T:riverkeyakv2 5.51 5.54 5.55 T:aesjambuv1 5.67 5.74 5.86 T:norx3261v2 5.72 5.82 5.84 T:norx3261v3 5.83 5.85 5.85 ascon128av12 6.88 6.89 6.89 T:acorn128v3 7.19 7.19 7.20 T:acorn128v2 7.45 7.46 7.47 T:norx3261v1 8.27 8.28 8.28 T:ketjeminorv2 8.37 8.38 8.38 T:ascon128v1 8.37 8.38 8.38 T:ascon128v11 8.65 8.66 8.68 T:ascon96v1 8.67 8.68 8.68 T:ascon128av11 9.00 9.00 9.00 ascon128v12 13.61 13.63 13.65 T:aes128otrsv1 13.62 13.66 13.68 T:aes128otrsv2 14.52 14.54 14.57 T:aes128otrpv1 14.52 14.55 14.58 T:aes128otrpv2 16.59 16.62 16.66 T:aes128n12clocv1 16.65 16.67 16.69 T:aes128n8clocv1 17.62 17.65 17.67 T:aes256otrsv1 17.58 17.67 18.29 T:aes256otrsv2 17.64 17.68 17.71 T:proest256otrv1 17.01 17.81 18.83 T:twine80n6t4clocv2 18.49 18.51 18.54 T:aes256otrpv1 18.52 18.55 18.58 T:aes256otrpv2 18.88 19.08 19.39 T:twine80n6t4clocv3 24.64 24.72 24.97 T:aeadaes128ocbtaglen64v1 24.71 24.72 24.79 T:aeadaes128ocbtaglen96v1 27.53 27.62 27.70 T:ketjesrv2 29.09 29.16 29.23 T:ketjesrv1 29.37 29.41 29.42 T:aeadaes192ocbtaglen96v1 29.41 29.47 29.54 T:aeadaes192ocbtaglen64v1 34.10 34.13 34.30 T:aeadaes256ocbtaglen64v1 34.14 34.27 34.40 T:aeadaes256ocbtaglen96v1 42.39 42.40 42.44 T:colm127v1 46.00 46.04 46.08 T:proest128otrv1 48.49 48.53 48.58 T:ketjejrv1 66.81 66.87 66.98 T:present80n6t4silcv3 73.72 73.79 73.86 T:ketjejrv2 88.98 91.39 92.39 T:led80n6t4silcv3 103.54 103.82 106.06 T:aezv1 110.45 110.59 110.79 T:deoxysneq128128v13 126.21 126.57 126.83 T:deoxyseq128128v13 147.86 148.12 148.45 T:deoxysneq256128v13 175.11 175.35 175.63 T:deoxyseq256128v13 495.03? 514.63? 563.49? T:acorn128 2431.89 2434.82 2453.65 T:led80n6t4silcv2 2442.13 2452.26 2460.67 T:led80n6silcv1 2605.72 2606.27 2607.06 T:present80n6silcv1 2606.21 2607.96 2610.49 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.13 0.13 0.14 T:aezv3 0.13 0.14 0.14 T:aezv4 0.13 0.14 0.14 T:aezv5 0.12? 0.17? 0.21? T:aeadaes128ocbtaglen128v1 0.16? 0.18? 0.19? T:aegis128l 0.20 0.21 0.21 aegis128l 0.20 0.21 0.22 T:tiaoxinv2 0.20 0.21 0.22 T:tiaoxinv1 0.15? 0.24? 0.33? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.31 T:aegis128 0.32 0.32 0.33 T:aegis256 0.34 0.35 0.35 aegis256 0.31? 0.39? 0.43? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.43 0.43 0.43 T:aes128otrpv3 0.42 0.43 0.44 aes256gcmv1 0.50 0.50 0.50 T:morus1280256v1 0.49 0.50 0.51 T:morus1280256v2 0.49 0.50 0.51 T:morus1280128v1 0.50 0.50 0.51 T:morus1280128v2 0.54 0.54 0.55 T:aes256otrcv3 0.55 0.55 0.56 T:aes256otrpv3 0.57 0.57 0.57 T:deoxysi128v141 0.58 0.59 0.59 T:aes128gcmv1 0.64 0.64 0.65 T:deoxysneq128128v1 0.64 0.65 0.65 T:deoxysi256v141 0.66 0.67 0.68 T:oceankeyakv2 0.70 0.71 0.72 T:deoxysneq256128v1 0.75 0.75 0.76 T:morus640128v1 0.79 0.80 0.80 T:deoxysii128v141 0.79 0.80 0.81 T:morus640128v2 0.84 0.85 0.85 T:colm0v1 0.89 0.90 0.90 T:deoxysii256v141 0.99 1.00 1.00 T:deoxyseq128128v1 0.97 1.00 1.04 T:lunarkeyakv2 1.09 1.10 1.10 T:deoxyseq256128v1 1.22 1.23 1.24 T:seakeyakv2 1.49 1.49 1.49 T:aes128otrsv3 1.52 1.55 1.56 T:norx6444v3 2.06 2.06 2.06 T:aes256otrsv3 2.09 2.15 2.17 T:norx6441v3 2.11 2.16 2.17 T:norx6441v2 2.45 2.45 2.58 T:norx6441v1 2.56 2.56 2.56 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.57 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n8t8clocv2 2.77 2.78 2.79 T:lakekeyakv2 2.92 2.97 3.02 T:norx6444v2 3.08 3.10 3.13 T:lakekeyakv1 3.10 3.13 3.20 T:norx6461v2 3.17 3.27 3.29 T:norx6461v3 3.38 3.39 3.42 T:norx6444v1 3.72 3.77 3.82 T:norx3241v2 3.77 3.82 3.89 T:norx3241v3 3.74 3.91 3.93 T:norx6461v1 4.46 4.47 4.49 T:ketjemajorv2 4.51 4.58 4.59 T:norx3241v1 5.48 5.50 5.52 T:riverkeyakv2 5.50 5.54 5.54 T:aesjambuv1 5.56 5.72 5.80 T:norx3261v3 5.71 5.73 5.76 T:norx3261v2 5.83 5.85 5.85 ascon128av12 6.88 6.88 6.89 T:acorn128v3 7.19 7.19 7.19 T:acorn128v2 7.44 7.45 7.45 T:norx3261v1 8.13 8.14 8.17 T:ascon96v1 8.14 8.15 8.17 T:ascon128av11 8.28 8.29 8.29 T:ketjeminorv2 8.37 8.38 8.38 T:ascon128v11 8.37 8.38 8.38 T:ascon128v1 9.00 9.00 9.00 ascon128v12 13.63 13.65 13.67 T:aes128otrsv1 13.66 13.68 13.70 T:aes128otrsv2 14.49 14.52 14.55 T:aes128otrpv1 14.58 14.60 14.63 T:aes128otrpv2 16.60 16.63 16.65 T:aes128n12clocv1 16.64 16.66 16.68 T:aes128n8clocv1 17.64 17.66 17.68 T:proest256otrv1 17.64 17.67 17.68 T:aes256otrsv1 17.62 17.70 18.30 T:aes256otrsv2 17.01 17.91 18.73 T:twine80n6t4clocv2 18.51 18.52 18.54 T:aes256otrpv1 18.56 18.58 18.60 T:aes256otrpv2 18.85 18.89 18.95 T:twine80n6t4clocv3 24.64 24.68 24.72 T:aeadaes128ocbtaglen96v1 24.72 24.74 24.81 T:aeadaes128ocbtaglen64v1 27.56 27.65 27.74 T:ketjesrv2 29.12 29.19 29.26 T:ketjesrv1 29.39 29.42 29.47 T:aeadaes192ocbtaglen96v1 29.43 29.49 29.58 T:aeadaes192ocbtaglen64v1 34.09 34.14 34.37 T:aeadaes256ocbtaglen96v1 34.12 34.16 34.29 T:aeadaes256ocbtaglen64v1 41.78 41.81 41.86 T:colm127v1 46.02 46.13 46.28 T:proest128otrv1 48.45 48.52 48.60 T:ketjejrv1 66.87 66.96 67.01 T:present80n6t4silcv3 73.51 73.76 73.83 T:ketjejrv2 89.08 90.20 92.26 T:led80n6t4silcv3 103.58 103.91 105.82 T:aezv1 110.45 110.58 110.79 T:deoxysneq128128v13 126.06 126.17 126.30 T:deoxyseq128128v13 147.42 148.01 148.33 T:deoxysneq256128v13 174.37 174.60 174.77 T:deoxyseq256128v13 489.92? 515.82? 546.38? T:acorn128 2430.65 2439.13 2455.81 T:led80n6t4silcv2 2444.56 2458.23 2468.95 T:led80n6silcv1 2605.90 2606.41 2607.18 T:present80n6silcv1 2606.20 2609.30 2610.51 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv1 0.10 0.10 0.11 T:tiaoxinv2 0.13 0.13 0.14 T:aezv5 0.13? 0.14? 0.15? T:aezv3 0.14 0.14 0.15 T:aezv4 0.16 0.16 0.16 T:aegis128l 0.05? 0.17? 0.26? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 aegis128l 0.07? 0.24? 0.34? T:aeadaes256ocbtaglen128v1 0.30 0.30 0.31 T:aegis128 0.31 0.31 0.31 aegis256 0.31 0.31 0.32 T:aegis256 0.26? 0.38? 0.47? T:aeadaes192ocbtaglen128v1 0.38 0.39 0.40 T:aes128gcmv1 0.38 0.39 0.40 aes256gcmv1 0.39 0.40 0.41 T:aes128otrpv3 0.41 0.42 0.42 T:aes128otrcv3 0.46 0.48 0.50 T:morus1280256v2 0.48 0.49 0.51 T:morus1280128v1 0.48 0.49 0.50 T:morus1280128v2 0.48 0.49 0.50 T:morus1280256v1 0.47? 0.50? 0.53? T:oceankeyakv2 0.50 0.50 0.51 T:colm0v1 0.53 0.53 0.54 T:aes256otrpv3 0.53 0.54 0.55 T:deoxysii128v141 0.54 0.54 0.55 T:deoxysi128v141 0.55 0.55 0.56 T:aes256otrcv3 0.59 0.59 0.60 T:deoxysi256v141 0.60 0.61 0.61 T:deoxysii256v141 0.61 0.62 0.63 T:deoxyseq128128v1 0.61 0.63 0.63 T:deoxysneq128128v1 0.58? 0.65? 0.68? T:lunarkeyakv2 0.69 0.70 0.72 T:deoxysneq256128v1 0.71 0.72 0.72 T:deoxyseq256128v1 0.71 0.72 0.73 T:morus640128v1 0.71 0.72 0.74 T:morus640128v2 1.10 1.12 1.13 T:seakeyakv2 2.06 2.09 2.12 T:norx6441v2 2.07 2.16 2.20 T:norx6444v3 2.10 2.17 2.19 T:norx6441v3 2.43 2.49 2.55 T:lakekeyakv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n8t8silcv2 2.56 2.56 2.57 T:aes128otrsv3 2.56 2.56 2.57 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.47 2.60 2.62 T:norx6441v1 2.75 2.82 2.85 T:lakekeyakv1 2.82 2.86 2.89 T:norx6444v2 3.26 3.27 3.28 T:norx6444v1 3.15 3.30 3.31 T:norx6461v2 3.13 3.31 3.34 T:norx6461v3 3.56 3.56 3.56 T:aes256otrsv3 3.69 3.75 3.79 T:norx3241v2 3.75 3.82 3.85 T:norx3241v3 3.66 3.82 3.96 T:norx6461v1 3.85 3.89 3.91 T:ketjemajorv2 4.55 4.68 4.74 T:norx3241v1 5.07 5.09 5.11 T:riverkeyakv2 5.25 5.36 5.43 T:aesjambuv1 5.47 5.51 5.58 T:norx3261v2 5.58 5.64 5.68 T:norx3261v3 5.68 5.69 5.69 ascon128av12 6.75 6.75 6.75 T:acorn128v3 7.15 7.18 7.19 T:ketjeminorv2 7.25 7.25 7.26 T:acorn128v2 7.52 7.52 7.53 T:norx3261v1 8.43 8.44 8.55 T:ascon128av11 8.44 8.46 8.48 T:ascon96v1 8.50 8.50 8.50 T:ascon128v11 8.50 8.50 8.50 T:ascon128v1 8.87 8.88 8.88 ascon128v12 11.89 11.91 11.93 T:aes128n12clocv1 11.93 11.95 11.97 T:aes128n8clocv1 12.32 12.40 12.44 T:aes128otrsv2 12.35 12.44 12.46 T:aes128otrsv1 14.20 14.23 14.27 T:aes128otrpv2 14.21 14.23 14.25 T:aes128otrpv1 16.40 16.44 16.45 T:aes256otrsv1 16.43 16.58 17.13 T:aes256otrsv2 16.85 17.30 17.76 T:twine80n6t4clocv2 17.90 17.92 17.96 T:proest256otrv1 18.15 18.18 18.22 T:aes256otrpv2 18.17 18.20 18.23 T:aes256otrpv1 18.78 19.05 19.49 T:twine80n6t4clocv3 20.48 20.54 20.56 T:aeadaes128ocbtaglen64v1 20.57 20.58 20.61 T:aeadaes128ocbtaglen96v1 22.24 22.29 22.34 T:colm127v1 24.28 24.30 24.41 T:aeadaes192ocbtaglen96v1 24.35 24.44 24.48 T:aeadaes192ocbtaglen64v1 26.22 26.29 26.36 T:ketjesrv2 26.95 27.04 27.15 T:ketjesrv1 28.09 28.11 28.28 T:aeadaes256ocbtaglen64v1 28.13 28.30 28.45 T:aeadaes256ocbtaglen96v1 46.21 46.35 46.57 T:proest128otrv1 46.12 46.57 46.67 T:ketjejrv1 49.95 50.07 51.11 T:aezv1 66.78 66.81 66.86 T:present80n6t4silcv3 68.86 69.15 69.28 T:ketjejrv2 83.57 83.64 83.75 T:deoxysneq128128v13 83.55 83.80 84.16 T:deoxyseq128128v13 88.68 88.84 92.95 T:led80n6t4silcv3 115.54 115.69 115.83 T:deoxysneq256128v13 115.57 115.76 116.03 T:deoxyseq256128v13 499.65? 534.07? 615.10? T:acorn128 1620.97 1626.57 1643.10 T:led80n6t4silcv2 1623.27 1627.83 1648.65 T:led80n6silcv1 1735.93 1736.27 1736.91 T:present80n6silcv1 1735.89 1736.67 1737.28 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv2 0.10 0.10 0.11 T:tiaoxinv1 0.13 0.13 0.14 T:aezv4 0.13 0.14 0.14 T:aezv5 0.13 0.14 0.14 T:aezv3 0.12? 0.16? 0.19? T:aegis128l 0.08? 0.17? 0.26? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 aegis128l 0.07? 0.24? 0.40? T:aeadaes256ocbtaglen128v1 0.30 0.30 0.31 T:aegis128 0.31 0.31 0.32 aegis256 0.31 0.31 0.31 T:aegis256 0.29? 0.37? 0.47? T:aeadaes192ocbtaglen128v1 0.37 0.39 0.40 aes256gcmv1 0.40 0.40 0.41 T:aes128gcmv1 0.40 0.41 0.41 T:aes128otrpv3 0.41 0.42 0.42 T:aes128otrcv3 0.47 0.49 0.51 T:morus1280256v1 0.48 0.49 0.50 T:morus1280128v1 0.48 0.49 0.51 T:morus1280256v2 0.49 0.50 0.50 T:colm0v1 0.46? 0.50? 0.53? T:oceankeyakv2 0.48 0.50 0.51 T:morus1280128v2 0.53 0.53 0.55 T:aes256otrpv3 0.52 0.54 0.54 T:deoxysii128v141 0.54 0.54 0.54 T:deoxysi128v141 0.55 0.55 0.56 T:aes256otrcv3 0.52? 0.56? 0.64? T:lunarkeyakv2 0.59 0.59 0.59 T:deoxysii256v141 0.60 0.60 0.61 T:deoxysi256v141 0.60 0.61 0.62 T:deoxyseq128128v1 0.61 0.62 0.63 T:deoxysneq128128v1 0.69 0.70 0.71 T:deoxyseq256128v1 0.69 0.70 0.72 T:deoxysneq256128v1 0.71 0.72 0.73 T:morus640128v1 0.75 0.77 0.79 T:morus640128v2 1.10 1.12 1.13 T:seakeyakv2 2.17 2.18 2.19 T:norx6444v3 2.17 2.18 2.20 T:norx6441v2 2.12 2.19 2.20 T:norx6441v3 2.43 2.50 2.56 T:lakekeyakv2 2.56 2.56 2.57 T:aes128otrsv3 2.55 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.57 2.57 T:aes128n12t8clocv3 2.55 2.57 2.58 T:aes128n12t8clocv2 2.58 2.58 2.58 T:aes128n8t8silcv2 2.43 2.61 2.64 T:norx6441v1 2.77 2.81 2.85 T:lakekeyakv1 2.86 2.88 2.90 T:norx6444v2 3.03 3.12 3.27 T:norx6461v3 3.26 3.28 3.29 T:norx6444v1 3.26 3.28 3.30 T:norx6461v2 3.56 3.57 3.57 T:aes256otrsv3 3.77 3.80 3.83 T:norx3241v2 3.71 3.80 3.81 T:norx3241v3 3.86 3.89 3.93 T:ketjemajorv2 3.94 3.95 3.97 T:norx6461v1 4.44 4.54 4.58 T:norx3241v1 5.07 5.09 5.11 T:riverkeyakv2 5.26 5.27 5.34 T:aesjambuv1 5.56 5.56 5.57 ascon128av12 5.60 5.65 5.78 T:norx3261v2 5.64 5.75 5.90 T:norx3261v3 7.00 7.00 7.00 T:acorn128v3 7.16 7.18 7.20 T:ketjeminorv2 7.25 7.25 7.25 T:acorn128v2 7.52 7.52 7.53 T:norx3261v1 8.38 8.38 8.38 T:ascon128v11 8.38 8.38 8.39 T:ascon128v1 8.43 8.45 8.46 T:ascon128av11 8.46 8.47 8.49 T:ascon96v1 9.12 9.12 9.12 ascon128v12 11.92 11.94 11.97 T:aes128n12clocv1 11.92 11.95 11.98 T:aes128n8clocv1 12.34 12.40 12.44 T:aes128otrsv2 12.39 12.43 12.47 T:aes128otrsv1 14.14 14.17 14.21 T:aes128otrpv2 14.19 14.20 14.24 T:aes128otrpv1 16.38 16.43 16.48 T:aes256otrsv1 16.41 16.45 16.98 T:aes256otrsv2 16.83 17.17 17.72 T:twine80n6t4clocv2 17.85 17.90 17.95 T:proest256otrv1 18.17 18.21 18.23 T:aes256otrpv2 18.17 18.23 18.26 T:aes256otrpv1 18.74 18.88 18.97 T:twine80n6t4clocv3 20.48 20.57 20.59 T:aeadaes128ocbtaglen64v1 20.58 20.69 20.89 T:aeadaes128ocbtaglen96v1 22.28 22.30 22.32 T:colm127v1 24.34 24.46 24.72 T:aeadaes192ocbtaglen96v1 24.40 24.46 24.56 T:aeadaes192ocbtaglen64v1 26.22 26.30 26.40 T:ketjesrv2 26.85 26.92 27.08 T:ketjesrv1 28.08 28.11 28.33 T:aeadaes256ocbtaglen96v1 28.07 28.13 28.26 T:aeadaes256ocbtaglen64v1 46.25 46.32 46.39 T:proest128otrv1 46.57 46.61 46.68 T:ketjejrv1 49.95 50.08 50.34 T:aezv1 66.80 66.84 66.93 T:present80n6t4silcv3 68.94 71.17 73.02 T:ketjejrv2 83.56 83.79 83.91 T:deoxyseq128128v13 83.69 83.88 84.47 T:deoxysneq128128v13 88.68 88.76 92.48 T:led80n6t4silcv3 115.46 115.59 115.78 T:deoxyseq256128v13 115.60 115.78 116.44 T:deoxysneq256128v13 538.65 560.06 597.21 T:acorn128 1622.56 1623.51 1628.36 T:led80n6t4silcv2 1633.74 1638.21 1648.69 T:led80n6silcv1 1735.89 1736.33 1736.62 T:present80n6silcv1 1735.54 1736.38 1737.08 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv1 0.10 0.10 0.11 T:tiaoxinv2 0.13 0.14 0.14 T:aezv5 0.13 0.14 0.14 T:aezv4 0.13 0.14 0.14 T:aezv3 0.12? 0.16? 0.19? T:aegis128l 0.09? 0.17? 0.25? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.17 aegis128l 0.15? 0.24? 0.41? T:aeadaes256ocbtaglen128v1 0.30 0.30 0.31 T:aegis128 0.31 0.31 0.31 T:aegis256 0.31 0.31 0.32 aegis256 0.29? 0.37? 0.46? T:aeadaes192ocbtaglen128v1 0.37 0.38 0.40 aes256gcmv1 0.40 0.40 0.41 T:aes128gcmv1 0.40 0.41 0.41 T:aes128otrpv3 0.41 0.42 0.42 T:aes128otrcv3 0.48 0.49 0.50 T:morus1280256v1 0.48 0.49 0.50 T:morus1280128v1 0.49 0.50 0.51 T:morus1280128v2 0.47? 0.50? 0.53? T:oceankeyakv2 0.49 0.50 0.51 T:morus1280256v2 0.49 0.51 0.51 T:colm0v1 0.52 0.53 0.54 T:deoxysii128v141 0.53 0.53 0.55 T:aes256otrpv3 0.53 0.54 0.54 T:deoxysi128v141 0.55 0.55 0.56 T:aes256otrcv3 0.59 0.59 0.59 T:deoxysii256v141 0.60 0.60 0.61 T:deoxysi256v141 0.61 0.62 0.63 T:deoxysneq128128v1 0.61 0.62 0.63 T:deoxyseq128128v1 0.59? 0.62? 0.67? T:lunarkeyakv2 0.69 0.70 0.72 T:deoxysneq256128v1 0.69 0.70 0.71 T:deoxyseq256128v1 0.72 0.72 0.74 T:morus640128v1 0.75 0.75 0.77 T:morus640128v2 1.11 1.12 1.13 T:seakeyakv2 2.07 2.08 2.17 T:norx6441v2 2.07 2.17 2.19 T:norx6441v3 2.11 2.18 2.20 T:norx6444v3 2.49 2.53 2.54 T:lakekeyakv2 2.53 2.56 2.57 T:aes128n12t8silcv2 2.55 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128otrsv3 2.55 2.56 2.57 T:aes128n12t8clocv3 2.55 2.56 2.58 T:aes128n12t8silcv3 2.56 2.56 2.56 T:aes128n8t8silcv2 2.54 2.56 2.56 T:aes128n12t8clocv2 2.44 2.60 2.63 T:norx6441v1 2.79 2.82 2.85 T:lakekeyakv1 2.82 2.87 2.91 T:norx6444v2 3.01 3.01 3.25 T:norx6461v3 3.26 3.27 3.29 T:norx6444v1 3.27 3.29 3.31 T:norx6461v2 3.56 3.57 3.57 T:aes256otrsv3 3.78 3.79 3.80 T:norx3241v3 3.75 3.79 3.82 T:norx3241v2 3.86 3.88 3.93 T:ketjemajorv2 3.70 3.91 3.96 T:norx6461v1 4.43 4.55 4.59 T:norx3241v1 5.07 5.09 5.10 T:riverkeyakv2 5.26 5.27 5.33 T:aesjambuv1 5.56 5.56 5.57 ascon128av12 5.52 5.62 5.68 T:norx3261v2 5.52 5.63 5.70 T:norx3261v3 7.00 7.00 7.00 T:acorn128v3 7.16 7.18 7.20 T:ketjeminorv2 7.25 7.25 7.25 T:acorn128v2 7.52 7.52 7.53 T:norx3261v1 8.38 8.38 8.38 T:ascon128v11 8.38 8.38 8.39 T:ascon128v1 8.44 8.45 8.53 T:ascon128av11 8.45 8.46 8.49 T:ascon96v1 9.12 9.12 9.12 ascon128v12 11.92 11.93 11.97 T:aes128n12clocv1 11.91 11.95 11.98 T:aes128n8clocv1 12.33 12.38 12.46 T:aes128otrsv2 12.39 12.42 12.46 T:aes128otrsv1 14.13 14.17 14.22 T:aes128otrpv2 14.20 14.23 14.24 T:aes128otrpv1 16.41 16.42 16.45 T:aes256otrsv1 16.40 16.49 16.94 T:aes256otrsv2 16.86 17.24 18.02 T:twine80n6t4clocv2 17.88 17.92 17.97 T:proest256otrv1 18.17 18.21 18.24 T:aes256otrpv1 18.19 18.24 18.29 T:aes256otrpv2 18.77 18.83 19.31 T:twine80n6t4clocv3 20.49 20.59 20.65 T:aeadaes128ocbtaglen64v1 20.55 20.60 20.65 T:aeadaes128ocbtaglen96v1 22.22 22.26 22.31 T:colm127v1 24.42 24.49 24.70 T:aeadaes192ocbtaglen96v1 24.37 24.49 24.51 T:aeadaes192ocbtaglen64v1 26.20 26.29 26.38 T:ketjesrv2 26.90 26.97 27.11 T:ketjesrv1 28.18 28.25 28.34 T:aeadaes256ocbtaglen96v1 28.17 28.26 28.33 T:aeadaes256ocbtaglen64v1 46.38 46.47 46.55 T:proest128otrv1 46.00 46.58 46.73 T:ketjejrv1 50.06 50.17 50.42 T:aezv1 66.77 66.85 66.91 T:present80n6t4silcv3 68.83 69.11 69.22 T:ketjejrv2 83.56 83.66 83.78 T:deoxyseq128128v13 83.69 83.91 84.02 T:deoxysneq128128v13 88.68 89.08 93.03 T:led80n6t4silcv3 115.41 115.75 116.01 T:deoxyseq256128v13 115.64 115.82 116.06 T:deoxysneq256128v13 463.83? 548.18? 554.64? T:acorn128 1618.87 1624.86 1650.29 T:led80n6silcv1 1627.29 1628.81 1631.44 T:led80n6t4silcv2 1736.08 1736.35 1736.68 T:present80n6silcv1 1735.73 1736.59 1737.15 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.16 0.16 0.17 T:tiaoxinv2 0.16 0.16 0.17 T:tiaoxinv1 0.20 0.20 0.20 T:aegis128l 0.21 0.21 0.21 aegis128l 0.27? 0.28? 0.34? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.30 T:aezv5 0.30 0.30 0.30 T:aezv4 0.34 0.34 0.34 T:aegis128 0.35 0.36 0.36 aegis256 0.36 0.36 0.36 T:aegis256 0.37? 0.38? 0.44? T:aeadaes256ocbtaglen128v1 0.49? 0.50? 0.60? T:aeadaes192ocbtaglen128v1 0.53 0.54 0.54 T:aes128otrcv3 0.54 0.54 0.54 T:aes128otrpv3 0.55 0.56 0.56 aes256gcmv1 0.59 0.59 0.60 T:morus1280256v1 0.58 0.60 0.61 T:morus1280128v1 0.60 0.61 0.62 T:morus1280128v2 0.60 0.61 0.62 T:morus1280256v2 0.63 0.63 0.63 T:deoxysi128v141 0.68 0.69 0.69 T:aes128gcmv1 0.69 0.69 0.70 T:aes256otrpv3 0.70 0.71 0.71 T:deoxysi256v141 0.71 0.72 0.72 T:deoxysneq128128v1 0.72 0.72 0.72 T:aes256otrcv3 0.83 0.84 0.84 T:deoxysneq256128v1 0.84 0.85 0.85 T:morus640128v1 0.85 0.85 0.86 T:morus640128v2 0.91 0.91 0.91 T:deoxysii128v141 0.96 0.97 0.97 T:colm0v1 1.03 1.03 1.04 T:deoxysii256v141 1.05 1.06 1.07 T:deoxyseq128128v1 1.25 1.26 1.27 T:deoxyseq256128v1 1.42 1.43 1.45 T:oceankeyakv2 1.53 1.53 1.54 T:aes128otrsv3 1.76 1.76 1.77 T:seakeyakv2 2.06 2.09 2.13 T:norx6444v3 2.13 2.13 2.13 T:aes256otrsv3 2.44 2.44 2.46 T:norx6441v3 2.42 2.44 2.47 T:lunarkeyakv2 2.46 2.52 2.52 T:norx6441v2 2.61 2.61 2.61 T:aes128n8t8silcv2 2.61 2.61 2.61 T:aes128n12t8silcv2 2.61 2.61 2.61 T:aes128n12t8silcv3 2.61 2.61 2.61 T:aes128n12t8clocv3 2.61 2.61 2.61 T:aes128n8t8clocv2 2.61 2.61 2.61 T:aes128n12t8clocv2 2.84 2.93 2.94 T:norx6441v1 3.03 3.05 3.08 T:lakekeyakv2 3.58 3.60 3.62 T:lakekeyakv1 3.67 3.67 3.67 T:norx6461v3 3.81 3.82 3.82 T:norx6461v2 3.96 3.99 4.09 T:norx3241v2 4.03 4.08 4.16 T:norx3241v3 4.15 4.18 4.22 T:norx6444v2 4.21 4.22 4.38 T:norx6461v1 4.75 4.76 4.81 T:norx6444v1 4.72 4.77 4.84 T:norx3241v1 5.34 5.35 5.40 T:aesjambuv1 5.66 5.67 5.69 T:riverkeyakv2 5.76 5.77 5.78 T:ketjemajorv2 6.02 6.02 6.02 ascon128av12 5.98 6.12 6.18 T:norx3261v2 6.17 6.17 6.21 T:norx3261v3 7.66 7.66 7.67 T:acorn128v3 7.92 7.92 7.92 T:norx3261v1 8.19 8.19 8.20 T:acorn128v2 8.64 8.64 8.64 T:ascon128av11 8.64 8.64 8.66 T:ascon96v1 8.68 8.68 8.69 T:ascon128v1 8.68 8.68 8.68 T:ascon128v11 8.80 8.82 8.83 T:ketjeminorv2 8.88 8.88 8.88 ascon128v12 13.81 13.83 13.87 T:aes128otrsv1 13.82 13.84 13.86 T:aes128otrsv2 14.70 14.73 14.76 T:aes128otrpv1 14.72 14.74 14.77 T:aes128otrpv2 17.40 17.41 17.43 T:aes128n12clocv1 17.40 17.43 17.46 T:aes128n8clocv1 17.92 17.94 17.97 T:aes256otrsv1 17.96 17.98 18.58 T:aes256otrsv2 17.55 18.24 18.90 T:twine80n6t4clocv2 18.78 18.80 18.84 T:aes256otrpv1 18.80 18.83 18.85 T:aes256otrpv2 18.94 18.95 18.96 T:proest256otrv1 19.19 19.32 19.69 T:twine80n6t4clocv3 21.24 21.27 21.40 T:aeadaes128ocbtaglen96v1 21.24 21.32 21.44 T:aeadaes128ocbtaglen64v1 25.20 25.24 25.26 T:aeadaes192ocbtaglen64v1 25.15 25.34 25.35 T:aeadaes192ocbtaglen96v1 28.84 28.89 28.96 T:ketjesrv1 29.07 29.13 29.21 T:aeadaes256ocbtaglen96v1 29.11 29.13 29.14 T:aeadaes256ocbtaglen64v1 31.18 31.21 31.24 T:ketjesrv2 34.94 35.01 35.31 T:colm127v1 46.65 46.73 46.77 T:ketjejrv1 47.80 47.85 47.90 T:proest128otrv1 67.72 67.74 67.83 T:present80n6t4silcv3 72.55 72.60 72.65 T:ketjejrv2 84.18 84.32 84.39 T:deoxysneq128128v13 90.19 91.02 92.80 T:led80n6t4silcv3 100.90 101.18 101.95 T:aezv1 116.07 116.13 116.21 T:deoxysneq256128v13 127.16 127.35 127.69 T:deoxyseq128128v13 175.82 176.07 177.43 T:deoxyseq256128v13 618.24? 623.87? 692.12? T:acorn128 2458.12 2458.48 2470.22 T:led80n6t4silcv2 2457.51 2464.75 2483.27 T:led80n6silcv1 2617.99 2618.45 2619.56 T:present80n6t4silcv2 2619.56 2619.97 2620.84 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.20? 0.20? 0.23? T:aegis128l 0.22 0.22 0.22 aegis128l 0.25 0.26 0.26 T:tiaoxinv1 0.25 0.26 0.27 T:tiaoxinv2 0.27? 0.28? 0.34? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.30 T:aezv5 0.30 0.31 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.36 T:aegis256 0.36 0.36 0.36 aegis256 0.38? 0.38? 0.45? T:aeadaes256ocbtaglen128v1 0.47? 0.47? 0.54? T:aeadaes192ocbtaglen128v1 0.51 0.51 0.52 aes256gcmv1 0.55 0.55 0.55 T:aes128otrcv3 0.56 0.56 0.57 T:aes128otrpv3 0.61 0.62 0.62 T:morus1280128v1 0.61 0.62 0.62 T:morus1280256v1 0.62 0.63 0.63 T:morus1280256v2 0.62 0.63 0.63 T:morus1280128v2 0.68 0.68 0.69 T:aes128gcmv1 0.72 0.72 0.73 T:aes256otrpv3 0.72 0.73 0.73 T:aes256otrcv3 0.73 0.73 0.73 T:deoxysi128v141 0.81 0.81 0.82 T:deoxysneq128128v1 0.83 0.83 0.84 T:morus640128v1 0.85 0.85 0.85 T:deoxysi256v141 0.85 0.86 0.86 T:deoxysneq256128v1 0.88 0.89 0.90 T:morus640128v2 0.92 0.92 0.93 T:deoxysii128v141 0.94 0.94 0.95 T:colm0v1 1.05 1.05 1.06 T:deoxysii256v141 1.20 1.20 1.22 T:deoxyseq128128v1 1.29 1.30 1.31 T:deoxyseq256128v1 1.42 1.43 1.44 T:oceankeyakv2 1.54 1.55 1.55 T:aes128otrsv3 1.78 1.79 1.79 T:seakeyakv2 2.07 2.08 2.12 T:norx6444v3 2.13 2.13 2.13 T:aes256otrsv3 2.42 2.44 2.44 T:norx6441v2 2.46 2.50 2.50 T:norx6441v3 2.50 2.53 2.56 T:lunarkeyakv2 2.58 2.58 2.58 T:aes128n12t8silcv3 2.58 2.58 2.58 T:aes128n12t8silcv2 2.58 2.58 2.58 T:aes128n8t8silcv2 2.58 2.59 2.60 T:aes128n12t8clocv3 2.58 2.59 2.59 T:aes128n12t8clocv2 2.58 2.59 2.59 T:aes128n8t8clocv2 2.77 2.80 2.88 T:norx6441v1 3.07 3.08 3.10 T:lakekeyakv2 3.62 3.62 3.63 T:lakekeyakv1 3.65 3.78 3.79 T:norx6461v2 3.65 3.78 3.79 T:norx6461v3 4.02 4.02 4.15 T:norx3241v3 4.03 4.06 4.13 T:norx3241v2 4.15 4.17 4.19 T:norx6444v2 4.37 4.38 4.38 T:norx6461v1 4.76 4.77 4.78 T:norx6444v1 4.76 4.78 4.92 T:norx3241v1 5.58 5.58 5.58 T:aesjambuv1 5.71 5.72 5.73 T:ketjemajorv2 5.74 5.75 5.76 T:riverkeyakv2 5.98 5.99 5.99 ascon128av12 5.98 6.07 6.08 T:norx3261v3 6.07 6.17 6.24 T:norx3261v2 7.77 7.77 7.79 T:acorn128v3 7.85 7.85 7.86 T:norx3261v1 8.15 8.15 8.15 T:acorn128v2 8.50 8.50 8.50 T:ascon128v11 8.50 8.50 8.50 T:ascon128v1 8.84 8.85 8.86 T:ascon96v1 8.87 8.88 8.88 T:ascon128av11 9.05 9.05 9.06 T:ketjeminorv2 9.13 9.13 9.13 ascon128v12 13.94 13.96 13.98 T:aes128otrsv1 13.98 14.00 14.02 T:aes128otrsv2 14.82 14.83 14.85 T:aes128otrpv1 14.85 14.89 14.91 T:aes128otrpv2 16.79 16.80 16.82 T:aes128n12clocv1 16.84 16.86 16.87 T:aes128n8clocv1 17.49 18.03 19.16 T:twine80n6t4clocv2 18.04 18.06 18.07 T:aes256otrsv1 18.11 18.13 18.75 T:aes256otrsv2 18.92 18.93 18.94 T:aes256otrpv1 18.98 18.99 19.01 T:aes256otrpv2 19.11 19.13 19.43 T:twine80n6t4clocv3 19.27 19.28 19.30 T:proest256otrv1 25.39 25.40 25.50 T:aeadaes128ocbtaglen96v1 25.45 25.48 25.54 T:aeadaes128ocbtaglen64v1 28.51 28.55 28.60 T:ketjesrv2 29.83 29.88 29.93 T:ketjesrv1 30.19 30.22 30.25 T:aeadaes192ocbtaglen96v1 30.24 30.26 30.27 T:aeadaes192ocbtaglen64v1 35.07 35.11 35.13 T:aeadaes256ocbtaglen64v1 35.11 35.13 35.24 T:aeadaes256ocbtaglen96v1 43.05 43.09 43.13 T:colm127v1 47.95 48.10 48.14 T:proest128otrv1 49.22 49.22 49.26 T:ketjejrv1 67.47 67.52 67.60 T:present80n6t4silcv3 74.70 74.75 74.80 T:ketjejrv2 90.30 90.93 92.78 T:led80n6t4silcv3 100.65 100.88 101.88 T:aezv1 111.04 111.10 111.26 T:deoxysneq128128v13 127.45 127.60 127.91 T:deoxyseq128128v13 148.46 148.77 149.02 T:deoxysneq256128v13 176.51 177.05 177.59 T:deoxyseq256128v13 580.78 581.75 584.42 T:acorn128 2446.39 2449.12 2469.36 T:led80n6t4silcv2 2456.32 2472.70 2474.98 T:led80n6silcv1 2619.80 2620.34 2621.54 T:present80n6t4silcv2 2619.82 2620.37 2622.39 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17 0.17 0.18 T:aezv5 0.18 0.18 0.18 T:aezv3 0.18 0.18 0.18 T:aezv4 0.20 0.20 0.22 T:aegis128l 0.22 0.23 0.24 aegis128l 0.26 0.26 0.27 T:tiaoxinv1 0.26 0.26 0.27 T:tiaoxinv2 0.27? 0.28? 0.33? T:aeadaes128ocbtaglen128v1 0.34 0.34 0.34 T:aegis128 0.35 0.36 0.36 T:aegis256 0.38? 0.38? 0.48? T:aeadaes256ocbtaglen128v1 0.38 0.38 0.38 aegis256 0.47? 0.47? 0.57? T:aeadaes192ocbtaglen128v1 0.51 0.51 0.52 aes256gcmv1 0.55 0.56 0.56 T:aes128otrcv3 0.56 0.56 0.57 T:aes128otrpv3 0.61 0.62 0.62 T:morus1280256v1 0.61 0.62 0.63 T:morus1280128v1 0.62 0.63 0.64 T:morus1280128v2 0.62 0.63 0.64 T:morus1280256v2 0.68 0.68 0.69 T:aes128gcmv1 0.72 0.72 0.73 T:aes256otrpv3 0.72 0.73 0.73 T:aes256otrcv3 0.73 0.73 0.73 T:deoxysi128v141 0.82 0.82 0.82 T:deoxysneq128128v1 0.83 0.83 0.84 T:morus640128v1 0.84 0.85 0.85 T:deoxysi256v141 0.85 0.86 0.87 T:deoxysneq256128v1 0.89 0.90 0.90 T:morus640128v2 0.92 0.92 0.93 T:deoxysii128v141 0.94 0.94 0.95 T:colm0v1 1.05 1.05 1.05 T:deoxysii256v141 1.19 1.20 1.22 T:deoxyseq128128v1 1.29 1.29 1.31 T:deoxyseq256128v1 1.44 1.44 1.45 T:oceankeyakv2 1.54 1.54 1.54 T:aes128otrsv3 1.80 1.80 1.81 T:seakeyakv2 2.09 2.11 2.15 T:norx6444v3 2.13 2.13 2.13 T:aes256otrsv3 2.42 2.42 2.48 T:norx6441v3 2.50 2.50 2.51 T:norx6441v2 2.50 2.54 2.55 T:lunarkeyakv2 2.58 2.58 2.60 T:aes128n12t8silcv3 2.58 2.58 2.60 T:aes128n12t8silcv2 2.58 2.58 2.60 T:aes128n8t8silcv2 2.58 2.58 2.59 T:aes128n8t8clocv2 2.58 2.58 2.60 T:aes128n12t8clocv2 2.58 2.58 2.59 T:aes128n12t8clocv3 2.77 2.79 2.80 T:norx6441v1 3.09 3.10 3.11 T:lakekeyakv2 3.63 3.64 3.65 T:lakekeyakv1 3.64 3.66 3.77 T:norx6461v2 3.67 3.78 3.79 T:norx6461v3 4.02 4.06 4.12 T:norx3241v2 4.15 4.17 4.17 T:norx3241v3 4.13 4.19 4.34 T:norx6461v1 4.21 4.22 4.27 T:norx6444v2 4.72 4.78 4.85 T:norx3241v1 4.78 4.79 4.80 T:norx6444v1 5.58 5.58 5.58 T:aesjambuv1 5.73 5.73 5.74 T:ketjemajorv2 5.75 5.76 5.76 T:riverkeyakv2 5.97 5.99 5.99 ascon128av12 6.07 6.11 6.26 T:norx3261v3 6.07 6.18 6.23 T:norx3261v2 7.77 7.77 7.79 T:acorn128v3 7.85 7.85 7.86 T:norx3261v1 8.15 8.15 8.15 T:acorn128v2 8.33 8.33 8.34 T:ascon128av11 8.33 8.33 8.35 T:ascon96v1 8.50 8.50 8.50 T:ascon128v11 8.50 8.50 8.50 T:ascon128v1 9.06 9.06 9.07 T:ketjeminorv2 9.13 9.13 9.13 ascon128v12 13.95 13.96 13.98 T:aes128otrsv1 14.01 14.02 14.03 T:aes128otrsv2 14.83 14.86 14.87 T:aes128otrpv1 14.87 14.91 14.93 T:aes128otrpv2 16.80 16.81 16.83 T:aes128n12clocv1 16.83 16.85 16.87 T:aes128n8clocv1 17.50 17.97 19.02 T:twine80n6t4clocv2 18.06 18.08 18.09 T:aes256otrsv1 18.11 18.14 18.72 T:aes256otrsv2 18.93 18.95 18.97 T:aes256otrpv1 18.96 18.98 19.01 T:aes256otrpv2 19.26 19.28 19.28 T:proest256otrv1 19.12 19.28 19.36 T:twine80n6t4clocv3 25.35 25.40 25.44 T:aeadaes128ocbtaglen96v1 25.40 25.43 25.54 T:aeadaes128ocbtaglen64v1 28.46 28.51 28.58 T:ketjesrv2 29.85 29.92 29.97 T:ketjesrv1 30.14 30.21 30.22 T:aeadaes192ocbtaglen64v1 30.21 30.22 30.22 T:aeadaes192ocbtaglen96v1 35.11 35.14 35.25 T:aeadaes256ocbtaglen64v1 35.09 35.23 35.26 T:aeadaes256ocbtaglen96v1 43.00 43.10 43.14 T:colm127v1 47.96 48.00 48.08 T:proest128otrv1 49.21 49.25 49.26 T:ketjejrv1 67.53 67.58 67.63 T:present80n6t4silcv3 74.72 76.80 78.24 T:ketjejrv2 90.20 91.68 92.89 T:led80n6t4silcv3 100.68 100.88 102.05 T:aezv1 111.00 111.13 111.22 T:deoxysneq128128v13 127.34 127.50 127.87 T:deoxyseq128128v13 148.58 148.70 148.87 T:deoxysneq256128v13 177.38 177.61 178.06 T:deoxyseq256128v13 571.78 581.93 605.91 T:acorn128 2448.39 2453.05 2464.53 T:led80n6t4silcv2 2461.14 2465.41 2470.29 T:led80n6silcv1 2619.79 2620.02 2620.63 T:present80n6silcv1 2619.68 2620.20 2620.65 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.83? 0.88? 0.93? T:aegis128 0.87 0.88 0.90 T:aegis128l 0.91 0.93 0.96 aegis128l 1.17 1.18 1.18 aegis256 1.17 1.18 1.19 T:aegis256 1.21 1.22 1.24 T:tiaoxinv1 1.21 1.23 1.24 T:tiaoxinv2 1.38 1.38 1.40 T:aezv5 1.38 1.43 1.45 T:aezv3 1.48 1.50 1.52 T:aezv4 2.40 2.43 2.47 T:aes128otrsv3 2.40 2.43 2.46 T:colm0v1 2.54 2.68 2.76 T:morus640128v1 2.78? 2.82? 4.56? T:aeadaes128ocbtaglen128v1 2.92 2.92 2.92 T:aes128otrpv3 2.89 2.93 2.96 T:morus640128v2 2.99 3.00 3.00 T:aes128n8t8silcv2 3.00 3.01 3.02 T:aes128n12t8silcv2 3.00 3.02 3.04 T:aes128n12t8silcv3 3.03 3.04 3.05 T:aes128n12t8clocv2 3.03 3.05 3.08 T:aes128n8t8clocv2 2.97 3.05 3.16 T:aes128otrcv3 3.04 3.06 3.07 T:aes128n12t8clocv3 3.02 3.08 3.13 T:deoxysneq128128v1 3.13 3.17 3.22 T:morus1280128v1 3.15 3.18 3.21 T:morus1280256v1 3.28 3.31 3.36 T:aes256otrsv3 3.31 3.35 3.40 T:morus1280256v2 3.43 3.46 3.51 T:morus1280128v2 3.60? 3.64? 5.11? T:aeadaes256ocbtaglen128v1 3.80 3.82 3.85 T:aes256otrpv3 3.81 3.87 3.89 T:deoxysi128v141 3.94 3.95 4.02 T:deoxysneq256128v1 3.92 3.98 4.06 T:aes256otrcv3 3.86? 4.00? 6.26? T:aeadaes192ocbtaglen128v1 4.62 4.69 4.73 aes256gcmv1 4.63 4.70 4.76 T:deoxysi256v141 4.75 4.80 4.86 T:deoxyseq128128v1 4.83 4.86 4.91 T:aes128gcmv1 5.12 5.15 5.17 T:deoxysii128v141 5.95 6.01 6.03 T:deoxyseq256128v1 6.02 6.07 6.10 T:deoxysii256v141 6.25 6.28 6.30 T:aesjambuv1 7.87 7.99 8.04 T:norx6441v1 7.93 8.00 8.10 T:norx6441v2 8.10 8.15 8.21 T:norx6441v3 9.34 9.34 9.38 ascon128av12 9.70 9.88 10.01 T:norx3241v1 9.83 9.90 9.95 T:norx3241v3 9.71 10.00 10.11 T:norx3241v2 11.45 11.46 11.46 T:ascon128v1 11.46 11.46 11.46 T:ascon128v11 11.63 11.72 11.76 T:lakekeyakv1 11.69 11.74 11.78 T:norx6461v1 11.75 11.76 11.81 ascon128v12 12.28 12.35 12.44 T:norx6461v2 12.35 12.42 12.48 T:norx6461v3 12.88 12.89 13.02 T:ascon96v1 13.03 13.07 13.36 T:ascon128av11 13.29 13.35 13.63 T:riverkeyakv2 13.30 13.45 13.80 T:lakekeyakv2 13.99 14.09 14.20 T:norx6444v3 14.49 14.63 14.91 T:norx3261v2 14.70 14.84 15.00 T:norx3261v3 16.02 16.06 16.07 T:norx3261v1 16.66 16.78 16.86 T:seakeyakv2 17.25 17.42 17.74 T:oceankeyakv2 21.38 21.39 21.51 T:aes128otrsv1 21.33 21.49 21.88 T:aes128n8clocv1 21.27 21.65 21.98 T:aes128n12clocv1 21.65 21.74 21.92 T:aes128otrsv2 22.16 22.25 22.31 T:aes128otrpv1 22.24 22.29 22.41 T:aes128otrpv2 24.17 24.28 24.45 T:twine80n6t4clocv3 26.38 26.39 26.53 T:ketjeminorv2 26.17 27.01 27.53 T:twine80n6t4clocv2 27.40 27.55 27.70 T:aes256otrsv1 27.80 27.99 28.50 T:aes256otrsv2 28.16 28.21 28.26 T:aes256otrpv1 28.37 28.51 28.63 T:aes256otrpv2 28.54 28.55 28.61 T:acorn128v3 29.70 29.70 29.74 T:acorn128v2 29.87 30.14 30.31 T:norx6444v2 34.11 34.27 34.42 T:ketjemajorv2 34.40 34.49 34.82 T:norx6444v1 34.35 34.57 34.63 T:aeadaes128ocbtaglen96v1 34.52? 34.85? 48.37? T:aeadaes128ocbtaglen64v1 38.44 39.09 39.34 T:lunarkeyakv2 39.82 39.87 40.00 T:aeadaes192ocbtaglen64v1 39.82 39.98 40.27 T:aeadaes192ocbtaglen96v1 45.11 45.33 45.79 T:ketjesrv1 46.53 46.64 46.82 T:aeadaes256ocbtaglen64v1 46.60 46.67 46.78 T:aeadaes256ocbtaglen96v1 50.52 50.65 50.72 T:colm127v1 51.17 51.46 51.73 T:ketjesrv2 53.94 54.02 54.41 T:proest256otrv1 61.72 61.94 62.22 T:ketjejrv1 82.88 82.99 83.21 T:present80n6t4silcv3 92.67 92.89 93.11 T:proest128otrv1 94.23 94.53 94.80 T:deoxysneq128128v13 95.36 98.55 99.39 T:ketjejrv2 106.26 109.02 112.20 T:led80n6t4silcv3 111.65 112.17 112.65 T:aezv1 130.32 130.56 131.00 T:deoxysneq256128v13 157.55 158.14 158.78 T:deoxyseq128128v13 217.28 217.66 218.15 T:deoxyseq256128v13 1976.04 1996.22 2090.43 T:acorn128 2754.34 2761.08 2764.00 T:led80n6t4silcv2 2756.49 2766.57 2775.73 T:led80n6silcv1 2930.80 2931.45 2932.68 T:present80n6t4silcv2 2931.72 2932.66 2935.70 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.85? 0.92? 1.00? T:aegis128 0.91? 0.99? 1.44? T:aegis128l 0.98 1.01 1.04 aegis128l 1.17 1.17 1.18 T:aegis256 1.22 1.23 1.26 T:tiaoxinv2 1.22 1.24 1.25 T:tiaoxinv1 1.24 1.26 1.28 aegis256 1.39 1.40 1.41 T:aezv5 1.38 1.41 1.43 T:aezv3 1.46 1.48 1.50 T:aezv4 2.47 2.49 2.52 T:aes128otrsv3 2.71 2.75 2.76 T:morus640128v1 2.76? 2.82? 4.36? T:aeadaes128ocbtaglen128v1 2.92 2.94 2.97 T:colm0v1 3.01 3.05 3.08 T:morus640128v2 3.06 3.07 3.16 T:aes128n8t8clocv2 3.06 3.11 3.24 T:aes128n8t8silcv2 3.11 3.12 3.13 T:aes128n12t8clocv2 3.12 3.13 3.15 T:aes128n12t8clocv3 3.10 3.22 3.35 T:aes128n12t8silcv2 3.11 3.23 3.36 T:aes128n12t8silcv3 3.26 3.32 3.36 T:aes128otrcv3 3.31 3.34 3.38 T:morus1280128v1 3.33 3.35 3.39 T:morus1280256v1 3.36 3.38 3.38 T:aes128otrpv3 3.46 3.48 3.50 T:aes256otrsv3 3.52 3.52 3.56 T:morus1280128v2 3.52 3.56 3.63 T:morus1280256v2 3.49? 3.62? 6.14? T:aeadaes256ocbtaglen128v1 4.10? 4.17? 5.97? T:aeadaes192ocbtaglen128v1 4.24 4.28 4.33 T:aes256otrpv3 4.30 4.31 4.36 T:aes256otrcv3 4.35 4.36 4.38 T:deoxysneq128128v1 4.32 4.38 4.43 T:deoxysneq256128v1 4.75 4.78 4.86 T:deoxysi128v141 4.97 5.06 5.10 aes256gcmv1 5.01 5.10 5.14 T:aes128gcmv1 5.42 5.50 5.56 T:deoxysii128v141 5.66 5.67 5.73 T:deoxysi256v141 6.22 6.43 6.71 T:aesjambuv1 6.47 6.51 6.55 T:deoxyseq256128v1 6.77 6.81 6.84 T:deoxyseq128128v1 6.77 6.82 6.94 T:deoxysii256v141 8.02 8.10 8.22 T:norx6441v2 8.10 8.16 8.22 T:norx6441v3 8.16 8.20 8.26 T:norx6441v1 9.27 9.29 9.34 ascon128av12 10.03 10.15 10.31 T:norx3241v1 10.09 10.16 10.26 T:norx3241v3 10.41 10.46 10.56 T:norx3241v2 11.30 11.30 11.31 T:ascon128v11 11.30 11.30 11.38 T:ascon128v1 11.50 11.53 11.64 T:lakekeyakv1 11.93 12.02 12.18 T:norx6461v1 12.06 12.06 12.06 ascon128v12 11.91 12.09 12.40 T:norx6461v2 12.17 12.46 12.53 T:norx6461v3 13.10 13.11 13.12 T:ascon96v1 13.27 13.30 13.40 T:ascon128av11 13.42 13.46 13.80 T:riverkeyakv2 13.34 13.47 13.85 T:lakekeyakv2 14.09 14.20 14.29 T:norx6444v3 14.93 15.09 15.42 T:norx3261v3 14.97 15.26 15.44 T:norx3261v2 16.20 16.22 16.26 T:norx3261v1 16.75 16.83 16.98 T:seakeyakv2 17.20 17.35 17.63 T:oceankeyakv2 20.79 20.91 21.20 T:aes128n8clocv1 20.97 21.29 21.54 T:aes128n12clocv1 21.56 21.64 21.69 T:aes128otrsv1 21.84 21.95 22.19 T:aes128otrsv2 22.27 22.34 22.39 T:aes128otrpv1 22.39 22.48 22.75 T:aes128otrpv2 24.16 24.36 24.73 T:twine80n6t4clocv3 26.52 26.55 26.95 T:ketjeminorv2 26.11 26.89 27.63 T:twine80n6t4clocv2 27.70 27.72 27.80 T:aes256otrsv1 27.93 28.19 29.14 T:aes256otrsv2 28.37 28.38 28.43 T:acorn128v3 28.29 28.39 28.51 T:aes256otrpv1 28.55 28.64 28.93 T:aes256otrpv2 29.81 30.06 30.24 T:norx6444v2 30.25 30.27 30.29 T:acorn128v2 34.32 34.40 34.46 T:norx6444v1 34.40 34.50 34.59 T:ketjemajorv2 38.19 38.96 39.35 T:lunarkeyakv2 41.80 42.04 42.23 T:aeadaes128ocbtaglen96v1 42.12? 42.30? 58.54? T:aeadaes128ocbtaglen64v1 46.36 46.71 46.94 T:ketjesrv1 48.47 48.59 48.78 T:aeadaes192ocbtaglen96v1 48.47 48.64 48.68 T:aeadaes192ocbtaglen64v1 48.81 49.14 49.43 T:ketjesrv2 56.04 56.34 56.77 T:proest256otrv1 56.92 57.21 57.52 T:aeadaes256ocbtaglen64v1 56.93 57.24 57.53 T:aeadaes256ocbtaglen96v1 58.89 58.96 59.23 T:colm127v1 63.91 64.26 64.80 T:ketjejrv1 82.67 82.91 83.05 T:present80n6t4silcv3 94.01 94.19 94.51 T:proest128otrv1 97.58 100.65 101.61 T:ketjejrv2 106.19 109.98 112.94 T:led80n6t4silcv3 113.98 114.53 115.10 T:aezv1 121.08 121.33 121.66 T:deoxysneq128128v13 157.69 158.13 158.73 T:deoxyseq128128v13 162.47 163.02 163.59 T:deoxysneq256128v13 217.35 217.84 218.71 T:deoxyseq256128v13 1979.47 1982.53 2111.36 T:acorn128 2743.53 2764.95 2770.81 T:led80n6t4silcv2 2757.43 2765.44 2772.42 T:led80n6silcv1 2931.64 2932.30 2933.08 T:present80n6t4silcv2 2932.49 2933.70 2936.25 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.86 0.90 0.93 T:aegis128 0.90? 0.92? 1.37? T:aegis128l 1.00? 1.00? 1.27? T:aezv5 0.98 1.03 1.06 aegis128l 1.04 1.05 1.11 T:aezv3 1.16 1.17 1.17 T:aegis256 1.19 1.19 1.28 T:aezv4 1.20 1.22 1.25 T:tiaoxinv1 1.21 1.23 1.25 T:tiaoxinv2 1.25 1.26 1.28 aegis256 2.47 2.49 2.53 T:aes128otrsv3 2.73 2.75 2.77 T:morus640128v1 2.76? 2.81? 4.15? T:aeadaes128ocbtaglen128v1 2.86 2.87 2.89 T:aes128n8t8silcv2 2.87 2.89 2.91 T:aes128n12t8silcv3 2.88 2.89 3.06 T:aes128n12t8silcv2 2.94 3.01 3.07 T:colm0v1 3.02 3.03 3.07 T:aes128n8t8clocv2 3.01 3.05 3.09 T:morus640128v2 3.09 3.10 3.11 T:aes128n12t8clocv3 3.08 3.10 3.13 T:aes128n12t8clocv2 3.22 3.30 3.39 T:aes128otrcv3 3.31 3.34 3.39 T:morus1280128v1 3.32 3.37 3.41 T:morus1280256v1 3.38 3.38 3.40 T:aes128otrpv3 3.45 3.47 3.50 T:aes256otrsv3 3.53 3.57 3.60 T:morus1280128v2 3.52? 3.62? 6.16? T:aeadaes256ocbtaglen128v1 3.57 3.63 3.66 T:morus1280256v2 4.04? 4.16? 5.57? T:aeadaes192ocbtaglen128v1 4.25 4.28 4.34 T:aes256otrpv3 4.30 4.32 4.35 T:aes256otrcv3 4.34 4.36 4.39 T:deoxysneq128128v1 4.32 4.38 4.53 T:deoxysneq256128v1 4.77 4.80 4.83 T:deoxysi128v141 4.97 5.05 5.09 aes256gcmv1 5.01 5.10 5.13 T:aes128gcmv1 5.41 5.47 5.54 T:deoxysii128v141 5.64 5.66 5.68 T:deoxysi256v141 6.21 6.43 6.72 T:aesjambuv1 6.44 6.50 6.56 T:deoxyseq256128v1 6.75 6.76 6.78 T:deoxysii256v141 6.73 6.78 6.85 T:deoxyseq128128v1 8.06 8.17 8.24 T:norx6441v1 8.11 8.19 8.27 T:norx6441v2 8.23 8.26 8.31 T:norx6441v3 9.27 9.29 9.32 ascon128av12 10.09 10.17 10.26 T:norx3241v1 10.29 10.38 10.46 T:norx3241v3 10.44 10.49 10.64 T:norx3241v2 11.26 11.26 11.26 T:ascon128v1 11.26 11.26 11.26 T:ascon128v11 11.54 11.63 11.64 T:lakekeyakv1 11.92 11.92 12.38 T:norx6461v3 11.99 12.06 12.26 T:norx6461v1 12.06 12.06 12.06 ascon128v12 12.44 12.49 12.55 T:norx6461v2 12.51 12.53 12.55 T:ascon96v1 12.54 12.56 12.65 T:ascon128av11 13.42 13.44 13.64 T:riverkeyakv2 14.03 14.13 14.23 T:norx6444v3 14.37 14.45 14.81 T:lakekeyakv2 15.31 15.38 15.45 T:norx3261v2 15.31 15.47 15.61 T:norx3261v3 16.19 16.21 16.24 T:norx3261v1 16.67 16.77 16.86 T:seakeyakv2 17.15 17.32 17.77 T:oceankeyakv2 20.78 20.98 21.23 T:aes128n8clocv1 20.94 21.25 21.50 T:aes128n12clocv1 21.69 21.74 21.81 T:aes128otrsv1 21.95 22.00 22.11 T:aes128otrsv2 22.28 22.35 22.43 T:aes128otrpv1 22.49 22.54 22.67 T:aes128otrpv2 24.18 24.29 24.55 T:twine80n6t4clocv3 26.55 26.59 26.85 T:ketjeminorv2 26.17 26.88 27.84 T:twine80n6t4clocv2 27.71 27.82 28.05 T:aes256otrsv1 28.06 28.16 29.16 T:aes256otrsv2 28.37 28.37 28.38 T:acorn128v3 28.38 28.45 28.56 T:aes256otrpv1 28.54 28.69 29.02 T:aes256otrpv2 29.97 30.11 30.46 T:norx6444v2 30.24 30.27 30.28 T:acorn128v2 34.30 34.45 34.63 T:norx6444v1 34.46 34.55 34.76 T:ketjemajorv2 38.29 38.87 39.28 T:lunarkeyakv2 41.77 42.05 42.17 T:aeadaes128ocbtaglen96v1 42.10? 42.29? 58.11? T:aeadaes128ocbtaglen64v1 46.31 46.56 47.05 T:ketjesrv1 48.46 48.67 48.74 T:aeadaes192ocbtaglen96v1 48.56 48.67 48.98 T:aeadaes192ocbtaglen64v1 48.96 49.22 49.65 T:ketjesrv2 54.54 54.81 55.23 T:proest256otrv1 56.93 57.23 57.56 T:aeadaes256ocbtaglen96v1 57.08 57.24 57.45 T:aeadaes256ocbtaglen64v1 58.82 58.87 59.15 T:colm127v1 63.91 64.31 64.98 T:ketjejrv1 82.72 82.86 82.93 T:present80n6t4silcv3 93.75 94.00 94.31 T:proest128otrv1 97.39 100.80 101.56 T:ketjejrv2 106.16 108.23 112.92 T:led80n6t4silcv3 113.63 114.19 114.68 T:aezv1 121.02 121.30 121.67 T:deoxysneq128128v13 157.63 158.22 158.52 T:deoxyseq128128v13 162.65 163.38 164.36 T:deoxysneq256128v13 217.95 218.90 219.68 T:deoxyseq256128v13 1971.42 2004.42 2066.48 T:acorn128 2739.89 2753.79 2758.75 T:led80n6t4silcv2 2757.16 2763.97 2772.37 T:led80n6silcv1 2931.89 2932.54 2933.44 T:present80n6t4silcv2 2931.78 2932.60 2934.54 T:present80n6silcv1