VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20261018

[Page version: 20261103 15:52:22]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.13 0.13 0.14 T:tiaoxinv2 0.13? 0.14? 0.15? T:tiaoxinv1 0.08? 0.18? 0.28? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.19 T:aegis128l 0.19 0.19 0.19 aegis128l 0.16? 0.26? 0.41? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.31 T:aegis128 0.32 0.33 0.33 aegis256 0.32 0.33 0.33 T:aegis256 0.36 0.37 0.37 T:aezv4 0.36 0.37 0.37 T:aezv3 0.37 0.38 0.38 T:aezv5 0.24? 0.40? 0.57? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.42 T:aes128otrsv3 0.41 0.42 0.42 T:aes128otrcv3 0.43 0.44 0.46 T:aes128otrpv3 0.47 0.48 0.48 T:morus1280128v2 0.48 0.49 0.50 T:morus1280256v1 0.49 0.50 0.50 T:morus1280128v1 0.49 0.50 0.51 T:morus1280256v2 0.53 0.53 0.54 T:aes256otrcv3 0.53 0.54 0.54 T:deoxysi128v141 0.55 0.55 0.55 T:aes256otrsv3 0.55 0.56 0.57 aes256gcmv1 0.57 0.57 0.58 T:aes256otrpv3 0.60 0.60 0.61 T:deoxysi256v141 0.61 0.62 0.63 T:deoxysneq128128v1 0.71 0.71 0.71 T:deoxysneq256128v1 0.70? 0.76? 0.82? T:lunarkeyakv2 0.74 0.77 0.79 T:oceankeyakv2 0.78 0.78 0.79 T:aes128gcmv1 0.80 0.81 0.82 T:morus640128v2 0.81 0.82 0.82 T:morus640128v1 0.89 0.91 0.93 T:norx6444v3 1.05 1.06 1.07 T:deoxysii128v141 1.19 1.20 1.21 T:deoxysii256v141 1.24 1.25 1.25 T:deoxyseq128128v1 1.28 1.29 1.30 T:colm0v1 1.44 1.44 1.45 T:deoxyseq256128v1 1.42 1.44 1.46 T:seakeyakv2 2.11 2.17 2.18 T:norx6441v2 2.14 2.18 2.19 T:norx6441v3 2.56 2.58 2.65 T:norx6441v1 2.62 2.62 2.63 T:aes128n8t8silcv2 2.62 2.63 2.63 T:aes128n12t8clocv3 2.62 2.63 2.63 T:aes128n8t8clocv2 2.63 2.63 2.63 T:aes128n12t8silcv3 2.62 2.63 2.63 T:aes128n12t8silcv2 2.63 2.63 2.63 T:aes128n12t8clocv2 3.14 3.16 3.17 T:norx6461v2 3.08 3.17 3.23 T:lakekeyakv2 3.23 3.24 3.28 T:lakekeyakv1 3.20 3.29 3.32 T:norx6461v3 3.70 3.71 3.91 T:norx3241v3 3.76 3.84 4.03 T:norx6444v1 3.83 3.84 3.86 T:norx6461v1 3.89 3.91 3.93 T:norx3241v2 3.91 3.94 3.97 T:norx6444v2 4.52 4.65 4.68 T:norx3241v1 5.21 5.24 5.68 T:ketjemajorv2 5.23 5.25 5.29 T:acorn128v2 5.31 5.31 5.31 ascon128av12 5.31 5.32 5.32 T:ascon96v1 5.35 5.35 5.36 T:aesjambuv1 5.44 5.44 5.44 T:ascon128av11 5.58 5.79 5.83 T:norx3261v2 5.58 5.81 5.84 T:norx3261v3 6.75 6.75 6.75 T:acorn128v3 7.45 7.48 7.51 T:riverkeyakv2 7.52 7.52 7.53 T:norx3261v1 7.55 7.56 7.59 T:ketjeminorv2 7.75 7.76 7.79 ascon128v12 8.25 8.25 8.25 T:ascon128v11 8.25 8.25 8.25 T:ascon128v1 14.55 14.58 14.61 T:aes128otrsv2 14.59 14.61 14.63 T:aes128otrpv1 14.56 14.62 14.65 T:aes128otrpv2 14.58 14.63 14.67 T:aes128otrsv1 16.99 17.02 17.05 T:proest256otrv1 17.23? 18.26? 20.31? T:twine80n6t4clocv2 18.53 18.56 18.59 T:aes256otrsv2 18.55 18.57 18.60 T:aes256otrpv2 18.55 18.58 18.60 T:aes256otrpv1 18.65 18.68 18.73 T:aes256otrsv1 18.13? 19.20? 20.48? T:twine80n6t4clocv3 21.56 21.57 21.71 T:aeadaes128ocbtaglen64v1 21.55 21.59 21.67 T:aeadaes128ocbtaglen96v1 22.50 22.54 22.62 T:aes128n12clocv1 22.52 22.58 22.63 T:aes128n8clocv1 25.47 25.54 25.57 T:aeadaes192ocbtaglen96v1 25.45 25.54 25.64 T:aeadaes192ocbtaglen64v1 28.40 28.73 29.08 T:ketjesrv1 29.40 29.42 29.45 T:aeadaes256ocbtaglen64v1 29.41 29.44 29.55 T:aeadaes256ocbtaglen96v1 33.87 34.10 34.35 T:ketjesrv2 45.29 45.44 45.72 T:proest128otrv1 46.60 46.95 47.05 T:colm127v1 58.24 58.37 58.70 T:ketjejrv1 67.38 67.43 67.51 T:present80n6t4silcv3 69.73 69.92 70.23 T:deoxysneq128128v13 74.04 74.18 77.22 T:ketjejrv2 90.28 90.40 90.53 T:deoxysneq256128v13 88.58 90.45 94.51 T:led80n6t4silcv3 141.65 141.85 141.95 T:deoxyseq128128v13 158.01 158.33 158.66 T:aezv1 204.76 205.15 205.51 T:deoxyseq256128v13 518.60 525.09 559.30 T:acorn128 3294.38 3313.78 3320.76 T:led80n6silcv1 3314.51 3316.99 3324.74 T:led80n6t4silcv2 3471.67 3472.52 3473.00 T:present80n6t4silcv2 3475.46 3476.35 3477.58 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.08? 0.18? 0.27? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.19 0.19 0.20 aegis128l 0.08? 0.25? 0.34? T:aeadaes256ocbtaglen128v1 0.31 0.32 0.32 T:aegis128 0.32 0.32 0.32 aegis256 0.33 0.34 0.34 T:aegis256 0.33 0.34 0.36 T:tiaoxinv1 0.33 0.35 0.36 T:tiaoxinv2 0.36 0.37 0.37 T:aezv4 0.36 0.37 0.38 T:aezv3 0.37 0.38 0.38 T:aezv5 0.24? 0.40? 0.49? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.41 0.42 0.42 T:aes128otrsv3 0.45 0.46 0.48 T:aes128otrpv3 0.47 0.48 0.49 aes256gcmv1 0.50 0.51 0.51 T:morus1280256v2 0.50 0.51 0.52 T:morus1280128v2 0.50 0.51 0.52 T:morus1280128v1 0.50 0.51 0.52 T:morus1280256v1 0.54 0.55 0.55 T:aes256otrsv3 0.54 0.55 0.56 T:aes256otrcv3 0.58 0.59 0.59 T:aes256otrpv3 0.58 0.59 0.60 T:deoxysi128v141 0.65 0.67 0.68 T:deoxysneq128128v1 0.68 0.68 0.69 T:deoxysi256v141 0.70 0.71 0.72 T:deoxysneq256128v1 0.72 0.75 0.77 T:oceankeyakv2 0.78 0.78 0.79 T:morus640128v1 0.80 0.80 0.81 T:aes128gcmv1 0.80 0.82 0.83 T:morus640128v2 0.83? 0.90? 0.98? T:lunarkeyakv2 0.89 0.91 0.93 T:norx6444v3 1.06 1.06 1.07 T:deoxysii128v141 1.18 1.18 1.19 T:colm0v1 1.18 1.19 1.20 T:deoxysii256v141 1.35 1.36 1.38 T:deoxyseq128128v1 1.40 1.42 1.44 T:deoxyseq256128v1 1.42 1.47 1.49 T:seakeyakv2 2.08 2.09 2.14 T:norx6441v3 2.07 2.13 2.14 T:norx6441v2 2.50 2.52 2.56 T:norx6441v1 2.55 2.56 2.56 T:aes128n12t8silcv3 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.57 2.57 T:aes128n8t8silcv2 3.12 3.16 3.23 T:lakekeyakv2 3.15 3.17 3.25 T:norx6461v3 3.12 3.19 3.21 T:norx6461v2 3.17 3.19 3.22 T:lakekeyakv1 3.64 3.71 3.88 T:norx6461v1 3.79 3.81 3.82 T:norx6444v1 3.77 3.86 3.89 T:norx3241v2 3.77 3.88 3.90 T:norx3241v3 3.89 3.95 4.01 T:norx6444v2 4.45 4.48 4.54 T:norx3241v1 5.07 5.12 5.53 T:ketjemajorv2 5.19 5.19 5.19 T:ascon128av11 5.21 5.23 5.27 T:acorn128v2 5.31 5.31 5.31 ascon128av12 5.44 5.44 5.44 T:ascon96v1 5.58 5.60 5.61 T:norx3261v3 5.73 5.76 5.86 T:aesjambuv1 5.60 5.78 5.82 T:norx3261v2 6.75 6.75 6.75 T:acorn128v3 7.36 7.37 7.40 T:norx3261v1 7.63 7.64 7.64 ascon128v12 7.63 7.65 7.67 T:riverkeyakv2 7.87 7.88 7.88 T:ascon128v11 7.87 7.88 7.88 T:ascon128v1 7.88 7.90 7.93 T:ketjeminorv2 14.81 14.82 14.86 T:aes128otrpv1 14.82 14.84 14.86 T:aes128otrsv1 14.89 14.91 14.94 T:aes128otrsv2 14.89 14.91 14.94 T:aes128otrpv2 17.45 17.48 17.49 T:proest256otrv1 17.08? 18.27? 20.86? T:twine80n6t4clocv2 18.82 18.85 18.89 T:aes256otrpv1 18.83 18.85 18.87 T:aes256otrsv1 18.89 18.90 18.93 T:aes256otrsv2 18.87 18.92 18.96 T:aes256otrpv2 19.40 19.71 19.71 T:twine80n6t4clocv3 21.27 21.31 21.35 T:aes128n12clocv1 21.31 21.32 21.35 T:aes128n8clocv1 26.57 26.70 26.78 T:ketjesrv2 29.16 29.29 29.52 T:ketjesrv1 29.28 29.36 29.42 T:aeadaes128ocbtaglen96v1 29.30 29.37 29.43 T:aeadaes128ocbtaglen64v1 34.88 34.97 35.04 T:aeadaes192ocbtaglen96v1 34.91 35.03 35.12 T:aeadaes192ocbtaglen64v1 40.51 40.60 40.64 T:aeadaes256ocbtaglen64v1 40.61 40.66 40.70 T:aeadaes256ocbtaglen96v1 45.66 45.75 45.85 T:proest128otrv1 60.89 61.00 61.06 T:ketjejrv1 62.50 62.66 62.83 T:colm127v1 66.83 66.85 67.03 T:present80n6t4silcv3 78.33 78.41 78.49 T:ketjejrv2 89.50 91.20 94.65 T:led80n6t4silcv3 108.61 108.82 109.06 T:deoxysneq128128v13 141.66 141.99 142.49 T:deoxyseq128128v13 149.65 150.05 151.06 T:deoxysneq256128v13 157.10 157.34 157.69 T:aezv1 203.77 204.30 205.11 T:deoxyseq256128v13 479.87? 536.07? 564.32? T:acorn128 3274.76 3308.12 3313.51 T:led80n6silcv1 3297.91 3313.65 3354.49 T:led80n6t4silcv2 3475.20 3476.12 3476.68 T:present80n6t4silcv2 3475.13 3476.14 3479.76 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13? 0.14? 0.15? T:aezv3 0.14 0.14 0.15 T:aezv4 0.15 0.15 0.15 T:aezv5 0.07? 0.18? 0.26? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.22 0.24 0.24 aegis128l 0.08? 0.25? 0.34? T:aeadaes256ocbtaglen128v1 0.31 0.32 0.32 T:aegis128 0.32 0.34 0.34 T:aegis256 0.33 0.35 0.36 T:tiaoxinv2 0.34 0.35 0.37 T:tiaoxinv1 0.36 0.38 0.38 aegis256 0.31? 0.40? 0.56? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrsv3 0.41 0.42 0.43 T:aes128otrcv3 0.45 0.46 0.48 T:aes128otrpv3 0.47 0.48 0.49 aes256gcmv1 0.50 0.50 0.51 T:morus1280128v1 0.50 0.51 0.51 T:morus1280256v2 0.50 0.51 0.52 T:morus1280256v1 0.50 0.51 0.52 T:morus1280128v2 0.54 0.55 0.56 T:aes256otrcv3 0.54 0.55 0.56 T:aes256otrsv3 0.58 0.59 0.59 T:aes256otrpv3 0.59 0.59 0.60 T:deoxysi128v141 0.66 0.67 0.67 T:deoxysneq128128v1 0.68 0.69 0.70 T:deoxysi256v141 0.71 0.72 0.74 T:deoxysneq256128v1 0.72? 0.76? 0.83? T:oceankeyakv2 0.78 0.78 0.79 T:morus640128v1 0.80 0.80 0.80 T:aes128gcmv1 0.81 0.82 0.83 T:morus640128v2 0.90 0.91 0.93 T:norx6444v3 0.87? 0.93? 0.99? T:lunarkeyakv2 1.06 1.07 1.07 T:deoxysii128v141 1.17 1.19 1.20 T:colm0v1 1.19 1.19 1.20 T:deoxysii256v141 1.34 1.36 1.38 T:deoxyseq128128v1 1.40 1.41 1.44 T:deoxyseq256128v1 1.47 1.50 1.52 T:seakeyakv2 2.07 2.11 2.13 T:norx6441v2 2.09 2.13 2.14 T:norx6441v3 2.46 2.50 2.52 T:norx6441v1 2.55 2.56 2.57 T:aes128n8t8clocv2 2.55 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n12t8silcv3 2.56 2.56 2.56 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128n12t8silcv2 3.10 3.12 3.19 T:norx6461v2 3.17 3.19 3.20 T:lakekeyakv2 3.18 3.20 3.22 T:lakekeyakv1 3.17 3.26 3.28 T:norx6461v3 3.71 3.78 3.87 T:norx3241v2 3.81 3.83 3.83 T:norx6444v1 3.76 3.87 3.89 T:norx3241v3 3.87 3.90 3.92 T:norx6461v1 3.91 3.98 4.02 T:norx6444v2 4.46 4.58 4.69 T:norx3241v1 5.09 5.12 5.56 T:ketjemajorv2 5.19 5.19 5.19 T:ascon128av11 5.22 5.25 5.27 T:acorn128v2 5.31 5.31 5.31 ascon128av12 5.44 5.44 5.44 T:ascon96v1 5.56 5.59 5.75 T:norx3261v3 5.55 5.59 5.77 T:norx3261v2 5.73 5.79 5.86 T:aesjambuv1 6.75 6.75 6.75 T:acorn128v3 7.36 7.37 7.40 T:norx3261v1 7.64 7.64 7.64 ascon128v12 7.64 7.65 7.68 T:riverkeyakv2 7.88 7.88 7.89 T:ascon128v1 7.88 7.88 7.89 T:ascon128v11 7.91 7.92 7.95 T:ketjeminorv2 14.81 14.85 14.93 T:aes128otrpv1 14.85 14.89 14.93 T:aes128otrsv1 14.91 14.93 14.95 T:aes128otrpv2 14.93 14.96 14.97 T:aes128otrsv2 17.45 17.46 17.48 T:proest256otrv1 17.07? 17.50? 20.54? T:twine80n6t4clocv2 18.83 18.86 18.88 T:aes256otrpv1 18.89 18.92 18.94 T:aes256otrsv1 18.90 18.92 18.97 T:aes256otrpv2 18.95 18.98 19.01 T:aes256otrsv2 19.70 19.71 19.72 T:twine80n6t4clocv3 21.26 21.29 21.32 T:aes128n12clocv1 21.33 21.36 21.38 T:aes128n8clocv1 26.59 26.75 26.83 T:ketjesrv2 29.22 29.33 29.38 T:aeadaes128ocbtaglen64v1 29.33 29.37 29.40 T:aeadaes128ocbtaglen96v1 29.31 30.02 30.49 T:ketjesrv1 34.90 35.01 35.11 T:aeadaes192ocbtaglen64v1 35.01 35.06 35.22 T:aeadaes192ocbtaglen96v1 40.55 40.62 40.81 T:aeadaes256ocbtaglen64v1 40.58 40.63 40.69 T:aeadaes256ocbtaglen96v1 45.71 45.74 45.82 T:proest128otrv1 60.78 60.93 61.14 T:ketjejrv1 61.56 61.59 62.23 T:colm127v1 66.95 67.00 67.13 T:present80n6t4silcv3 78.35 78.60 81.57 T:ketjejrv2 88.79 91.55 91.56 T:led80n6t4silcv3 108.57 108.78 109.19 T:deoxysneq128128v13 141.42 141.73 142.54 T:deoxyseq128128v13 149.90 150.09 151.13 T:deoxysneq256128v13 157.11 157.50 157.72 T:aezv1 203.98 205.16 206.28 T:deoxyseq256128v13 514.26? 535.36? 586.17? T:acorn128 3312.66 3313.58 3315.10 T:led80n6silcv1 3316.93 3322.34 3346.56 T:led80n6t4silcv2 3475.75 3476.49 3476.96 T:present80n6t4silcv2 3475.86 3476.79 3479.23 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.12 0.12 0.12 T:tiaoxinv2 0.12 0.12 0.13 T:tiaoxinv1 0.12? 0.17? 0.22? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.17 T:aegis128l 0.18 0.18 0.18 aegis128l 0.18? 0.24? 0.29? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.26 T:aezv5 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.32 aegis256 0.32 0.32 0.32 T:aegis256 0.31? 0.39? 0.45? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.41 T:aes128otrcv3 0.42 0.42 0.45 T:aes128otrpv3 0.46 0.47 0.47 aes256gcmv1 0.48 0.48 0.49 T:morus1280256v1 0.48 0.49 0.50 T:morus1280128v2 0.48 0.49 0.50 T:morus1280256v2 0.48 0.50 0.50 T:morus1280128v1 0.54 0.54 0.54 T:deoxysi128v141 0.53 0.54 0.56 T:aes256otrcv3 0.55 0.55 0.55 T:aes256otrpv3 0.60 0.60 0.60 T:aes128gcmv1 0.59 0.60 0.60 T:deoxysi256v141 0.61 0.62 0.62 T:deoxysneq128128v1 0.63 0.64 0.65 T:oceankeyakv2 0.70 0.71 0.72 T:deoxysneq256128v1 0.76 0.77 0.77 T:morus640128v1 0.76 0.77 0.77 T:morus640128v2 0.79 0.80 0.80 T:deoxysii128v141 0.89 0.90 0.90 T:colm0v1 0.90 0.90 0.91 T:deoxysii256v141 0.93 0.93 0.94 T:deoxyseq128128v1 0.90 0.93 0.98 T:lunarkeyakv2 1.09 1.10 1.11 T:deoxyseq256128v1 1.19 1.21 1.22 T:seakeyakv2 1.49 1.49 1.49 T:aes128otrsv3 1.49 1.52 1.55 T:norx6444v3 2.05 2.05 2.06 T:aes256otrsv3 2.09 2.11 2.13 T:norx6441v3 2.18 2.18 2.19 T:norx6441v2 2.59 2.59 2.59 T:aes128n8t8clocv2 2.59 2.59 2.60 T:aes128n12t8clocv2 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.60 T:aes128n12t8silcv2 2.59 2.59 2.59 T:aes128n12t8clocv3 2.59 2.59 2.60 T:aes128n12t8silcv3 2.63 2.64 2.65 T:norx6441v1 2.73 2.76 2.79 T:lakekeyakv2 3.04 3.05 3.07 T:lakekeyakv1 3.15 3.15 3.29 T:norx6461v3 3.16 3.19 3.25 T:norx6461v2 3.23 3.26 3.32 T:norx6444v2 3.68 3.69 3.80 T:norx3241v2 3.70 3.76 3.88 T:norx3241v3 3.76 3.80 3.89 T:norx6444v1 3.80 3.95 3.96 T:norx6461v1 4.50 4.51 4.58 T:ketjemajorv2 4.52 4.59 4.69 T:norx3241v1 5.22 5.22 5.22 T:ascon96v1 5.28 5.28 5.29 ascon128av12 5.30 5.33 5.39 T:aesjambuv1 5.34 5.34 5.35 T:ascon128av11 5.40 5.42 5.44 T:riverkeyakv2 5.47 5.55 5.67 T:norx3261v2 5.58 5.59 5.72 T:norx3261v3 6.45 6.52 6.56 T:acorn128v2 6.76 6.76 6.76 T:acorn128v3 7.07 7.07 7.08 T:ketjeminorv2 7.52 7.53 7.53 T:norx3261v1 7.62 7.63 7.64 ascon128v12 8.06 8.06 8.06 T:ascon128v1 8.06 8.06 8.06 T:ascon128v11 13.47 13.49 13.51 T:aes128otrsv2 13.50 13.51 13.54 T:aes128otrsv1 14.37 14.38 14.40 T:aes128otrpv2 14.38 14.40 14.42 T:aes128otrpv1 17.20 17.23 17.26 T:aes128n12clocv1 17.22 17.23 17.27 T:aes128n8clocv1 17.42 17.46 17.50 T:proest256otrv1 17.48 17.51 17.54 T:aes256otrsv2 17.54 17.55 17.59 T:aes256otrsv1 17.07? 17.73? 19.25? T:twine80n6t4clocv2 18.37 18.38 18.41 T:aes256otrpv1 18.38 18.39 18.41 T:aes256otrpv2 18.14? 19.53? 20.48? T:twine80n6t4clocv3 21.31 21.42 21.44 T:aeadaes128ocbtaglen64v1 21.34 21.42 21.53 T:aeadaes128ocbtaglen96v1 25.22 25.27 25.36 T:aeadaes192ocbtaglen64v1 25.20 25.30 25.32 T:aeadaes192ocbtaglen96v1 25.64 25.68 25.94 T:ketjesrv1 29.14 29.19 29.28 T:aeadaes256ocbtaglen96v1 29.14 29.20 29.33 T:aeadaes256ocbtaglen64v1 29.97 30.14 30.77 T:ketjesrv2 34.40 34.54 34.88 T:colm127v1 45.72 45.86 45.98 T:proest128otrv1 53.58 53.78 54.09 T:ketjejrv1 67.03 67.09 67.18 T:present80n6t4silcv3 70.32 70.41 70.86 T:deoxysneq128128v13 71.59 71.67 74.81 T:ketjejrv2 88.71 90.38 93.79 T:led80n6t4silcv3 90.43 90.54 90.70 T:deoxysneq256128v13 103.81 104.05 104.20 T:aezv1 105.77 105.95 107.11 T:deoxyseq128128v13 152.88 153.45 154.28 T:deoxyseq256128v13 513.96 535.79 547.29 T:acorn128 2477.15 2485.73 2488.06 T:led80n6silcv1 2489.83 2494.00 2498.04 T:led80n6t4silcv2 2603.93 2604.26 2604.53 T:present80n6t4silcv2 2606.00 2607.02 2609.77 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.12? 0.17? 0.23? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 T:aegis128l 0.18 0.18 0.18 aegis128l 0.20 0.21 0.22 T:tiaoxinv1 0.20 0.22 0.22 T:tiaoxinv2 0.15? 0.24? 0.29? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.26 T:aezv4 0.25 0.26 0.26 T:aezv5 0.31 0.32 0.32 T:aegis128 0.33 0.33 0.33 T:aegis256 0.33 0.33 0.33 aegis256 0.34? 0.39? 0.47? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.42 0.42 0.43 aes256gcmv1 0.43 0.43 0.46 T:aes128otrpv3 0.49 0.50 0.50 T:morus1280128v2 0.49 0.50 0.50 T:morus1280128v1 0.49 0.50 0.50 T:morus1280256v1 0.49 0.50 0.51 T:morus1280256v2 0.53 0.55 0.56 T:aes256otrcv3 0.55 0.55 0.56 T:aes256otrpv3 0.56 0.57 0.57 T:deoxysi128v141 0.60 0.60 0.60 T:aes128gcmv1 0.63 0.64 0.64 T:oceankeyakv2 0.64 0.64 0.65 T:deoxysneq128128v1 0.64 0.65 0.65 T:deoxysi256v141 0.70 0.71 0.72 T:deoxysneq256128v1 0.75 0.75 0.76 T:morus640128v1 0.78 0.79 0.81 T:morus640128v2 0.79 0.80 0.80 T:deoxysii128v141 0.83 0.84 0.85 T:colm0v1 0.89 0.90 0.91 T:deoxysii256v141 0.94 0.97 1.02 T:lunarkeyakv2 0.99 0.99 1.01 T:deoxyseq128128v1 1.11 1.11 1.12 T:deoxyseq256128v1 1.17 1.19 1.23 T:seakeyakv2 1.49 1.49 1.49 T:aes128otrsv3 1.52 1.54 1.56 T:norx6444v3 2.05 2.06 2.06 T:aes256otrsv3 2.09 2.14 2.15 T:norx6441v2 2.15 2.16 2.17 T:norx6441v3 2.45 2.45 2.47 T:norx6441v1 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.57 2.57 T:aes128n12t8silcv2 2.56 2.57 2.57 T:aes128n12t8silcv3 2.56 2.57 2.57 T:aes128n8t8silcv2 2.74 2.77 2.81 T:lakekeyakv2 3.03 3.05 3.07 T:lakekeyakv1 3.09 3.13 3.26 T:norx6461v3 3.17 3.22 3.24 T:norx6461v2 3.27 3.30 3.32 T:norx6444v2 3.76 3.77 3.87 T:norx3241v3 3.77 3.78 3.79 T:norx6444v1 3.77 3.82 3.88 T:norx3241v2 3.73 3.89 3.92 T:norx6461v1 4.45 4.46 4.66 T:ketjemajorv2 4.59 4.60 4.61 T:norx3241v1 5.19 5.19 5.19 T:ascon128av11 5.28 5.29 5.29 ascon128av12 5.31 5.32 5.32 T:ascon96v1 5.47 5.48 5.49 T:riverkeyakv2 5.50 5.54 5.54 T:aesjambuv1 5.57 5.60 5.75 T:norx3261v2 5.61 5.72 5.82 T:norx3261v3 6.48 6.49 6.54 T:acorn128v2 6.88 6.88 6.88 T:acorn128v3 7.22 7.23 7.24 T:ketjeminorv2 7.44 7.44 7.46 T:norx3261v1 7.62 7.63 7.75 ascon128v12 7.81 7.81 7.81 T:ascon128v11 7.81 7.81 7.81 T:ascon128v1 13.61 13.64 13.65 T:aes128otrsv1 13.63 13.64 13.66 T:aes128otrsv2 14.50 14.53 14.57 T:aes128otrpv1 14.54 14.57 14.61 T:aes128otrpv2 16.56 16.59 16.61 T:aes128n12clocv1 16.64 16.66 16.68 T:aes128n8clocv1 17.62 17.65 17.66 T:aes256otrsv1 17.04 17.67 18.42 T:twine80n6t4clocv2 17.65 17.68 17.71 T:proest256otrv1 17.66 17.68 17.70 T:aes256otrsv2 18.51 18.52 18.54 T:aes256otrpv1 18.55 18.56 18.61 T:aes256otrpv2 19.50 19.52 20.83 T:twine80n6t4clocv3 25.25 25.28 25.30 T:aeadaes128ocbtaglen64v1 25.26 25.30 25.35 T:aeadaes128ocbtaglen96v1 26.08 26.14 26.37 T:ketjesrv1 26.27 26.33 27.37 T:ketjesrv2 29.89 29.99 30.18 T:aeadaes192ocbtaglen64v1 29.98 30.02 30.05 T:aeadaes192ocbtaglen96v1 34.66 34.75 34.82 T:aeadaes256ocbtaglen64v1 34.74 34.78 34.83 T:aeadaes256ocbtaglen96v1 42.52 42.53 42.57 T:colm127v1 45.96 46.04 46.20 T:proest128otrv1 54.68 54.77 55.06 T:ketjejrv1 66.78 66.84 66.96 T:present80n6t4silcv3 73.72 73.83 74.01 T:ketjejrv2 89.87 89.93 90.03 T:deoxysneq128128v13 89.19 91.80 92.34 T:led80n6t4silcv3 103.50 103.82 104.03 T:aezv1 106.05 106.47 106.97 T:deoxyseq128128v13 120.14 120.39 121.06 T:deoxysneq256128v13 152.42 152.76 153.06 T:deoxyseq256128v13 506.54 517.90 523.64 T:acorn128 2484.04 2484.40 2488.49 T:led80n6silcv1 2505.79 2510.97 2514.07 T:led80n6t4silcv2 2605.74 2606.42 2607.04 T:present80n6silcv1 2606.16 2606.48 2607.14 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.13 0.13 0.13 T:aezv3 0.13 0.14 0.14 T:aezv5 0.13 0.14 0.14 T:aezv4 0.17 0.17 0.18 T:aegis128l 0.12? 0.18? 0.22? T:aeadaes128ocbtaglen128v1 0.20 0.20 0.21 aegis128l 0.20 0.21 0.22 T:tiaoxinv1 0.20 0.21 0.22 T:tiaoxinv2 0.15? 0.24? 0.33? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.33 0.33 0.33 T:aegis256 0.35 0.36 0.36 aegis256 0.31? 0.39? 0.43? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.42 0.43 0.43 aes256gcmv1 0.43 0.43 0.46 T:aes128otrpv3 0.49 0.50 0.50 T:morus1280128v2 0.50 0.50 0.50 T:morus1280256v1 0.50 0.50 0.51 T:morus1280128v1 0.50 0.51 0.51 T:morus1280256v2 0.53 0.55 0.56 T:aes256otrcv3 0.55 0.55 0.55 T:aes256otrpv3 0.56 0.57 0.57 T:deoxysi128v141 0.60 0.60 0.60 T:aes128gcmv1 0.64 0.64 0.65 T:deoxysneq128128v1 0.64 0.65 0.65 T:deoxysi256v141 0.64 0.66 0.69 T:oceankeyakv2 0.70 0.71 0.72 T:deoxysneq256128v1 0.75 0.75 0.76 T:morus640128v1 0.79 0.80 0.80 T:deoxysii128v141 0.79 0.80 0.81 T:morus640128v2 0.84 0.85 0.85 T:colm0v1 0.89 0.90 0.90 T:deoxysii256v141 0.99 1.00 1.00 T:deoxyseq128128v1 0.98 1.00 1.05 T:lunarkeyakv2 1.09 1.10 1.11 T:deoxyseq256128v1 1.19 1.22 1.24 T:seakeyakv2 1.49 1.49 1.49 T:aes128otrsv3 1.51 1.55 1.56 T:norx6444v3 2.05 2.05 2.06 T:aes256otrsv3 2.07 2.09 2.10 T:norx6441v3 2.10 2.11 2.15 T:norx6441v2 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128n12t8silcv3 2.55 2.56 2.56 T:aes128n8t8clocv2 2.55 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n8t8silcv2 2.50 2.61 2.62 T:norx6441v1 2.78 2.79 2.81 T:lakekeyakv2 3.04 3.06 3.07 T:lakekeyakv1 3.15 3.16 3.23 T:norx6461v2 3.26 3.27 3.29 T:norx6461v3 3.31 3.34 3.36 T:norx6444v2 3.76 3.76 3.83 T:norx3241v3 3.78 3.79 3.81 T:norx6444v1 3.76 3.82 3.87 T:norx3241v2 3.70 3.90 3.93 T:norx6461v1 4.46 4.48 4.63 T:ketjemajorv2 4.45 4.50 4.52 T:norx3241v1 5.19 5.19 5.19 T:ascon128av11 5.28 5.29 5.29 ascon128av12 5.31 5.31 5.31 T:ascon96v1 5.48 5.50 5.51 T:riverkeyakv2 5.53 5.53 5.70 T:norx3261v3 5.51 5.54 5.55 T:aesjambuv1 5.60 5.63 5.76 T:norx3261v2 6.53 6.55 6.57 T:acorn128v2 6.88 6.88 6.88 T:acorn128v3 7.25 7.26 7.28 T:ketjeminorv2 7.44 7.45 7.47 T:norx3261v1 7.62 7.62 7.75 ascon128v12 7.81 7.81 7.81 T:ascon128v1 7.81 7.82 7.82 T:ascon128v11 13.62 13.64 13.69 T:aes128otrsv2 13.65 13.67 13.68 T:aes128otrsv1 14.54 14.55 14.57 T:aes128otrpv2 14.55 14.59 14.62 T:aes128otrpv1 16.59 16.62 16.66 T:aes128n12clocv1 16.65 16.67 16.69 T:aes128n8clocv1 17.64 17.66 17.68 T:aes256otrsv1 17.65 17.69 17.71 T:proest256otrv1 17.67 17.72 17.74 T:aes256otrsv2 17.05? 17.80? 19.07? T:twine80n6t4clocv2 17.90 18.00 19.43 T:twine80n6t4clocv3 18.51 18.53 18.54 T:aes256otrpv1 18.58 18.61 18.65 T:aes256otrpv2 25.18 25.22 25.24 T:aeadaes128ocbtaglen64v1 25.25 25.28 25.43 T:aeadaes128ocbtaglen96v1 26.03 26.09 26.39 T:ketjesrv1 26.25 26.41 26.48 T:ketjesrv2 29.96 29.99 30.05 T:aeadaes192ocbtaglen96v1 29.86 30.00 30.05 T:aeadaes192ocbtaglen64v1 34.65 34.70 34.75 T:aeadaes256ocbtaglen96v1 34.70 34.74 34.90 T:aeadaes256ocbtaglen64v1 41.94 42.04 42.22 T:colm127v1 45.96 46.02 46.09 T:proest128otrv1 54.83 55.06 55.37 T:ketjejrv1 66.81 66.86 66.97 T:present80n6t4silcv3 73.66 73.72 73.79 T:ketjejrv2 88.97 89.44 91.52 T:led80n6t4silcv3 89.81 89.98 90.19 T:deoxysneq128128v13 103.76 103.89 104.08 T:aezv1 106.15 106.42 106.98 T:deoxyseq128128v13 120.23 120.49 120.92 T:deoxysneq256128v13 152.98 153.37 154.62 T:deoxyseq256128v13 512.18 540.37 546.62 T:acorn128 2473.35 2484.16 2485.49 T:led80n6silcv1 2499.94 2502.59 2509.90 T:led80n6t4silcv2 2606.11 2606.44 2606.71 T:present80n6t4silcv2 2605.93 2606.61 2607.13 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.11 0.11 0.11 T:tiaoxinv1 0.11 0.11 0.11 T:tiaoxinv2 0.12? 0.13? 0.14? T:aezv5 0.13? 0.14? 0.15? T:aezv3 0.14 0.14 0.15 T:aezv4 0.16 0.16 0.16 T:aegis128l 0.06? 0.17? 0.26? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.17 aegis128l 0.08? 0.24? 0.33? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.31 T:aegis128 0.31 0.31 0.32 T:aegis256 0.31 0.31 0.32 aegis256 0.27? 0.38? 0.47? T:aeadaes192ocbtaglen128v1 0.37 0.38 0.39 aes256gcmv1 0.39 0.40 0.40 T:aes128otrpv3 0.41 0.42 0.43 T:aes128otrcv3 0.41 0.42 0.42 T:aes128gcmv1 0.46 0.47 0.47 T:morus1280128v1 0.46 0.48 0.50 T:morus1280256v2 0.46 0.49 0.50 T:morus1280256v1 0.49 0.49 0.50 T:morus1280128v2 0.50 0.50 0.51 T:colm0v1 0.48? 0.52? 0.55? T:oceankeyakv2 0.53 0.53 0.53 T:aes256otrpv3 0.53 0.54 0.54 T:deoxysii128v141 0.54 0.54 0.55 T:deoxysi128v141 0.52? 0.56? 0.59? T:aes256otrcv3 0.53? 0.60? 0.67? T:lunarkeyakv2 0.59 0.60 0.60 T:deoxysi256v141 0.60 0.61 0.61 T:deoxysii256v141 0.61 0.62 0.63 T:deoxyseq128128v1 0.61 0.63 0.64 T:deoxysneq128128v1 0.70 0.70 0.71 T:deoxysneq256128v1 0.71 0.72 0.72 T:deoxyseq256128v1 0.71 0.72 0.73 T:morus640128v2 0.71 0.72 0.73 T:morus640128v1 1.10 1.13 1.14 T:seakeyakv2 2.05 2.10 2.13 T:norx6441v3 2.14 2.15 2.16 T:norx6441v2 2.10 2.18 2.20 T:norx6444v3 2.41 2.45 2.51 T:lakekeyakv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128n8t8silcv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.57 T:aes128otrsv3 2.56 2.56 2.57 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n8t8clocv2 2.56 2.58 2.66 T:norx6444v2 2.47 2.61 2.64 T:norx6441v1 2.77 2.79 2.80 T:lakekeyakv1 3.20 3.22 3.26 T:norx6461v2 3.29 3.31 3.33 T:norx6461v3 3.55 3.56 3.57 T:aes256otrsv3 3.65 3.68 3.87 T:norx6461v1 3.65 3.68 3.69 T:norx3241v2 3.75 3.76 3.77 T:norx6444v1 3.69 3.78 3.82 T:norx3241v3 3.86 3.88 3.91 T:ketjemajorv2 4.67 4.68 4.70 T:norx3241v1 5.07 5.09 5.10 T:riverkeyakv2 5.12 5.12 5.13 T:ascon96v1 5.25 5.25 5.25 T:ascon128av11 5.25 5.25 5.25 ascon128av12 5.27 5.39 5.45 T:aesjambuv1 5.38 5.50 5.62 T:norx3261v2 5.55 5.63 5.67 T:norx3261v3 6.59 6.61 6.64 T:ketjeminorv2 6.75 6.75 6.75 T:acorn128v3 7.50 7.50 7.50 ascon128v12 7.52 7.52 7.53 T:norx3261v1 7.64 7.71 7.84 T:acorn128v2 7.87 7.88 7.88 T:ascon128v1 7.87 7.88 7.88 T:ascon128v11 11.91 11.94 11.96 T:aes128n12clocv1 11.93 11.96 11.98 T:aes128n8clocv1 12.35 12.39 12.43 T:aes128otrsv2 12.38 12.41 12.43 T:aes128otrsv1 14.17 14.20 14.28 T:aes128otrpv2 14.17 14.21 14.25 T:aes128otrpv1 16.40 16.42 16.45 T:aes256otrsv1 16.42 16.46 16.49 T:aes256otrsv2 16.92 17.31 18.07 T:twine80n6t4clocv2 17.86 17.91 17.96 T:proest256otrv1 17.80? 17.91? 20.19? T:twine80n6t4clocv3 18.16 18.21 18.23 T:aes256otrpv1 18.21 18.26 18.28 T:aes256otrpv2 21.06 21.09 21.12 T:aeadaes128ocbtaglen96v1 21.20 21.22 21.27 T:aeadaes128ocbtaglen64v1 22.23 22.32 22.36 T:colm127v1 22.79 22.96 23.03 T:ketjesrv1 24.88 24.92 24.98 T:aeadaes192ocbtaglen64v1 24.97 25.06 25.27 T:aeadaes192ocbtaglen96v1 25.73 25.82 25.89 T:ketjesrv2 28.87 28.93 29.18 T:aeadaes256ocbtaglen64v1 28.89 28.95 29.02 T:aeadaes256ocbtaglen96v1 46.27 46.42 46.64 T:proest128otrv1 48.48 48.65 48.79 T:ketjejrv1 50.11 50.17 50.27 T:aezv1 66.79 66.80 66.85 T:present80n6t4silcv3 69.07 69.18 72.44 T:ketjejrv2 70.49 70.62 70.73 T:deoxyseq128128v13 70.63 70.78 71.24 T:deoxysneq128128v13 90.29 90.63 90.72 T:deoxysneq256128v13 89.47 93.37 93.40 T:led80n6t4silcv3 101.47 101.97 102.28 T:deoxyseq256128v13 538.69? 568.09? 634.31? T:acorn128 1656.53 1657.84 1659.09 T:led80n6silcv1 1656.19 1661.52 1679.63 T:led80n6t4silcv2 1736.16 1736.44 1737.40 T:present80n6t4silcv2 1736.88 1737.60 1740.37 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.10 0.10 0.10 T:tiaoxinv2 0.10 0.10 0.11 T:tiaoxinv1 0.13 0.13 0.14 T:aezv4 0.13 0.13 0.14 T:aezv5 0.13 0.14 0.14 T:aezv3 0.15 0.16 0.16 T:aegis128l 0.08? 0.17? 0.26? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 aegis128l 0.07? 0.24? 0.40? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.31 T:aegis128 0.31 0.31 0.32 T:aegis256 0.33 0.34 0.35 aegis256 0.28? 0.36? 0.45? T:aeadaes192ocbtaglen128v1 0.37 0.38 0.40 aes256gcmv1 0.40 0.40 0.41 T:aes128gcmv1 0.40 0.40 0.41 T:aes128otrpv3 0.41 0.42 0.42 T:aes128otrcv3 0.47 0.48 0.50 T:morus1280256v2 0.47 0.49 0.50 T:morus1280128v2 0.47 0.49 0.50 T:morus1280128v1 0.49 0.50 0.51 T:colm0v1 0.47? 0.50? 0.53? T:oceankeyakv2 0.49 0.50 0.51 T:morus1280256v1 0.52 0.53 0.53 T:aes256otrpv3 0.52 0.53 0.54 T:deoxysii128v141 0.53 0.54 0.55 T:deoxysi128v141 0.52 0.56 0.57 T:aes256otrcv3 0.54? 0.58? 0.67? T:lunarkeyakv2 0.58 0.59 0.60 T:deoxysii256v141 0.60 0.60 0.61 T:deoxysi256v141 0.60 0.61 0.64 T:deoxyseq128128v1 0.61 0.62 0.63 T:deoxysneq128128v1 0.69 0.70 0.71 T:deoxyseq256128v1 0.70 0.71 0.72 T:deoxysneq256128v1 0.71 0.72 0.73 T:morus640128v1 0.77 0.78 0.80 T:morus640128v2 1.12 1.13 1.20 T:seakeyakv2 2.05 2.06 2.10 T:norx6441v3 2.09 2.10 2.16 T:norx6444v3 2.15 2.18 2.19 T:norx6441v2 2.42 2.46 2.54 T:lakekeyakv2 2.55 2.55 2.56 T:aes128n12t8clocv3 2.56 2.56 2.58 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.57 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n8t8silcv2 2.56 2.57 2.57 T:aes128otrsv3 2.56 2.57 2.57 T:aes128n8t8clocv2 2.60 2.62 2.68 T:norx6444v2 2.60 2.62 2.64 T:norx6441v1 2.78 2.79 2.80 T:lakekeyakv1 3.00 3.01 3.26 T:norx6461v3 3.21 3.23 3.27 T:norx6461v2 3.55 3.56 3.57 T:aes256otrsv3 3.75 3.77 3.80 T:norx6444v1 3.75 3.79 3.83 T:norx3241v2 3.68 3.81 3.82 T:norx3241v3 3.86 3.89 3.91 T:ketjemajorv2 3.68 3.91 3.96 T:norx6461v1 4.48 4.54 4.63 T:norx3241v1 5.08 5.09 5.11 T:riverkeyakv2 5.19 5.19 5.19 T:ascon96v1 5.19 5.19 5.19 T:ascon128av11 5.26 5.26 5.26 ascon128av12 5.26 5.28 5.36 T:aesjambuv1 5.60 5.63 5.76 T:norx3261v2 5.62 5.64 5.67 T:norx3261v3 6.58 6.60 6.62 T:ketjeminorv2 6.99 7.00 7.00 T:acorn128v3 7.52 7.52 7.53 T:norx3261v1 7.62 7.62 7.63 ascon128v12 7.75 7.75 7.76 T:ascon128v11 7.75 7.75 7.76 T:ascon128v1 7.68 7.77 7.86 T:acorn128v2 11.92 11.93 11.95 T:aes128n12clocv1 11.94 11.95 11.99 T:aes128n8clocv1 12.37 12.40 12.43 T:aes128otrsv2 12.40 12.42 12.45 T:aes128otrsv1 14.16 14.18 14.20 T:aes128otrpv1 14.20 14.22 14.25 T:aes128otrpv2 16.37 16.43 16.47 T:aes256otrsv2 16.42 16.45 16.46 T:aes256otrsv1 16.84 17.23 18.14 T:twine80n6t4clocv2 17.86 17.89 17.92 T:proest256otrv1 17.82 17.96 18.29 T:twine80n6t4clocv3 18.17 18.21 18.25 T:aes256otrpv2 18.16 18.21 18.33 T:aes256otrpv1 21.10 21.14 21.17 T:aeadaes128ocbtaglen64v1 21.13 21.16 21.26 T:aeadaes128ocbtaglen96v1 22.29 22.38 22.42 T:colm127v1 22.87 23.03 23.09 T:ketjesrv1 24.81 24.83 25.01 T:aeadaes192ocbtaglen64v1 25.00 25.03 25.06 T:aeadaes192ocbtaglen96v1 25.77 25.87 25.99 T:ketjesrv2 28.71 28.74 29.01 T:aeadaes256ocbtaglen64v1 28.80 29.00 29.03 T:aeadaes256ocbtaglen96v1 46.26 46.37 46.54 T:proest128otrv1 48.40 48.67 48.75 T:ketjejrv1 50.07 50.14 50.31 T:aezv1 66.78 66.80 66.89 T:present80n6t4silcv3 69.03 69.11 69.23 T:ketjejrv2 70.47 70.56 70.67 T:deoxyseq128128v13 70.61 70.75 70.91 T:deoxysneq128128v13 90.17 90.28 90.61 T:deoxysneq256128v13 93.05 93.07 93.36 T:led80n6t4silcv3 100.95 101.28 101.63 T:deoxyseq256128v13 513.16 526.12 546.45 T:acorn128 1656.18 1657.69 1660.24 T:led80n6silcv1 1658.69 1683.40 1685.12 T:led80n6t4silcv2 1735.99 1736.32 1736.49 T:present80n6t4silcv2 1736.03 1736.75 1737.73 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv2 0.10 0.10 0.11 T:tiaoxinv1 0.13 0.13 0.14 T:aezv4 0.13 0.14 0.14 T:aezv5 0.13 0.14 0.14 T:aezv3 0.16 0.16 0.16 T:aegis128l 0.09? 0.17? 0.25? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 aegis128l 0.15? 0.24? 0.40? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.31 T:aegis128 0.31 0.31 0.31 T:aegis256 0.33 0.34 0.34 aegis256 0.28? 0.36? 0.45? T:aeadaes192ocbtaglen128v1 0.37 0.38 0.40 aes256gcmv1 0.40 0.40 0.40 T:aes128gcmv1 0.40 0.41 0.42 T:aes128otrpv3 0.41 0.42 0.42 T:aes128otrcv3 0.48 0.49 0.50 T:morus1280128v2 0.48 0.49 0.50 T:morus1280128v1 0.47 0.49 0.50 T:morus1280256v1 0.48 0.49 0.50 T:morus1280256v2 0.49 0.50 0.51 T:colm0v1 0.52 0.53 0.53 T:aes256otrpv3 0.49? 0.53? 0.56? T:oceankeyakv2 0.52 0.53 0.54 T:deoxysii128v141 0.53 0.54 0.54 T:deoxysi128v141 0.53 0.56 0.57 T:aes256otrcv3 0.59 0.59 0.60 T:deoxysii256v141 0.60 0.60 0.61 T:deoxysi256v141 0.53? 0.60? 0.67? T:lunarkeyakv2 0.61 0.61 0.63 T:deoxysneq128128v1 0.61 0.62 0.63 T:deoxyseq128128v1 0.70 0.70 0.71 T:deoxyseq256128v1 0.69 0.70 0.72 T:deoxysneq256128v1 0.71 0.72 0.73 T:morus640128v1 0.76 0.78 0.80 T:morus640128v2 1.11 1.13 1.15 T:seakeyakv2 2.14 2.16 2.19 T:norx6441v2 2.07 2.18 2.20 T:norx6441v3 2.18 2.19 2.20 T:norx6444v3 2.41 2.43 2.60 T:norx6441v1 2.51 2.51 2.52 T:lakekeyakv2 2.55 2.56 2.56 T:aes128n8t8silcv2 2.55 2.56 2.58 T:aes128n12t8silcv3 2.55 2.56 2.56 T:aes128n12t8clocv3 2.55 2.56 2.58 T:aes128n12t8silcv2 2.55 2.56 2.56 T:aes128n8t8clocv2 2.54 2.56 2.56 T:aes128n12t8clocv2 2.56 2.57 2.57 T:aes128otrsv3 2.60 2.61 2.67 T:norx6444v2 2.79 2.79 2.81 T:lakekeyakv1 3.22 3.26 3.28 T:norx6461v2 3.13 3.29 3.31 T:norx6461v3 3.55 3.56 3.57 T:aes256otrsv3 3.64 3.67 3.90 T:norx6461v1 3.68 3.74 3.80 T:norx3241v2 3.75 3.77 3.81 T:norx6444v1 3.67 3.78 3.90 T:norx3241v3 3.85 3.89 3.92 T:ketjemajorv2 4.50 4.54 4.70 T:norx3241v1 5.07 5.08 5.10 T:riverkeyakv2 5.18 5.19 5.19 T:ascon128av11 5.19 5.19 5.19 T:ascon96v1 5.26 5.26 5.26 ascon128av12 5.26 5.27 5.33 T:aesjambuv1 5.59 5.64 5.77 T:norx3261v2 5.54 5.65 5.83 T:norx3261v3 6.58 6.60 6.63 T:ketjeminorv2 7.00 7.00 7.00 T:acorn128v3 7.52 7.52 7.53 T:norx3261v1 7.62 7.62 7.62 ascon128v12 7.75 7.75 7.75 T:ascon128v1 7.75 7.75 7.76 T:ascon128v11 7.72 7.83 7.86 T:acorn128v2 11.92 11.94 11.96 T:aes128n8clocv1 11.90 11.95 11.96 T:aes128n12clocv1 12.37 12.39 12.43 T:aes128otrsv1 12.37 12.41 12.44 T:aes128otrsv2 14.18 14.21 14.23 T:aes128otrpv1 14.19 14.22 14.27 T:aes128otrpv2 16.38 16.43 16.47 T:aes256otrsv2 16.40 16.43 16.46 T:aes256otrsv1 16.83 17.15 17.86 T:twine80n6t4clocv2 17.83 17.88 17.90 T:proest256otrv1 17.89? 18.03? 20.20? T:twine80n6t4clocv3 18.21 18.25 18.28 T:aes256otrpv1 18.20 18.25 18.29 T:aes256otrpv2 21.08 21.16 21.23 T:aeadaes128ocbtaglen96v1 21.08 21.17 21.18 T:aeadaes128ocbtaglen64v1 22.43 22.45 22.47 T:colm127v1 22.83 23.01 23.12 T:ketjesrv1 24.80 24.87 25.01 T:aeadaes192ocbtaglen96v1 24.87 25.03 25.06 T:aeadaes192ocbtaglen64v1 25.83 25.89 25.95 T:ketjesrv2 28.71 28.87 28.99 T:aeadaes256ocbtaglen64v1 28.85 28.89 29.15 T:aeadaes256ocbtaglen96v1 46.26 46.31 46.38 T:proest128otrv1 48.79 48.98 49.65 T:ketjejrv1 49.97 50.09 50.28 T:aezv1 66.77 66.80 66.89 T:present80n6t4silcv3 69.08 69.20 72.34 T:ketjejrv2 70.68 70.79 71.14 T:deoxysneq128128v13 70.68 70.90 71.16 T:deoxyseq128128v13 88.68 90.12 93.07 T:led80n6t4silcv3 90.42 90.49 90.56 T:deoxysneq256128v13 100.95 101.12 101.33 T:deoxyseq256128v13 493.95 502.27 531.14 T:acorn128 1656.38 1659.18 1660.29 T:led80n6silcv1 1662.59 1677.13 1683.08 T:led80n6t4silcv2 1736.07 1736.34 1736.51 T:present80n6t4silcv2 1736.23 1737.25 1740.69 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.16 0.16 0.17 T:tiaoxinv2 0.16 0.17 0.17 T:tiaoxinv1 0.20 0.20 0.20 T:aegis128l 0.21 0.21 0.21 aegis128l 0.27? 0.28? 0.34? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.30 T:aezv5 0.30 0.30 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.35 0.36 0.36 aegis256 0.36 0.36 0.36 T:aegis256 0.37? 0.38? 0.44? T:aeadaes256ocbtaglen128v1 0.49? 0.50? 0.60? T:aeadaes192ocbtaglen128v1 0.53 0.53 0.55 T:aes128otrpv3 0.53 0.54 0.54 T:aes128otrcv3 0.55 0.55 0.56 aes256gcmv1 0.60 0.61 0.62 T:morus1280128v2 0.60 0.61 0.61 T:morus1280128v1 0.61 0.61 0.61 T:morus1280256v1 0.60 0.61 0.62 T:morus1280256v2 0.63 0.63 0.63 T:deoxysi128v141 0.69 0.69 0.69 T:aes256otrpv3 0.69 0.70 0.70 T:aes128gcmv1 0.70 0.71 0.71 T:deoxysi256v141 0.72 0.72 0.73 T:aes256otrcv3 0.71 0.72 0.73 T:deoxysneq128128v1 0.83 0.84 0.85 T:deoxysneq256128v1 0.84 0.84 0.85 T:morus640128v1 0.85 0.86 0.87 T:morus640128v2 0.91 0.91 0.91 T:deoxysii128v141 0.96 0.97 0.98 T:colm0v1 1.03 1.03 1.04 T:deoxysii256v141 1.05 1.05 1.07 T:deoxyseq128128v1 1.26 1.27 1.28 T:deoxyseq256128v1 1.40 1.40 1.40 T:oceankeyakv2 1.54 1.54 1.54 T:aes128otrsv3 1.75 1.75 1.77 T:seakeyakv2 2.07 2.10 2.14 T:norx6444v3 2.13 2.13 2.13 T:aes256otrsv3 2.41 2.44 2.46 T:lunarkeyakv2 2.45 2.46 2.49 T:norx6441v2 2.46 2.46 2.51 T:norx6441v3 2.61 2.61 2.61 T:aes128n8t8silcv2 2.61 2.61 2.61 T:aes128n12t8silcv2 2.61 2.61 2.61 T:aes128n8t8clocv2 2.61 2.61 2.61 T:aes128n12t8clocv2 2.61 2.61 2.61 T:aes128n12t8silcv3 2.61 2.61 2.61 T:aes128n12t8clocv3 2.82 2.82 2.91 T:norx6441v1 3.03 3.03 3.06 T:lakekeyakv2 3.61 3.65 3.66 T:lakekeyakv1 3.67 3.67 3.77 T:norx6461v3 3.67 3.68 3.74 T:norx6461v2 3.97 4.01 4.13 T:norx3241v2 4.01 4.05 4.13 T:norx3241v3 4.25 4.39 4.40 T:norx6461v1 4.67 4.73 4.78 T:norx6444v2 4.71 4.75 4.77 T:norx3241v1 5.34 5.34 5.35 T:ascon96v1 5.34 5.35 5.44 T:norx6444v1 5.35 5.35 5.35 T:aesjambuv1 5.41 5.41 5.42 ascon128av12 5.47 5.47 5.47 T:ascon128av11 5.65 5.67 5.69 T:riverkeyakv2 5.76 5.78 5.84 T:ketjemajorv2 5.98 6.12 6.19 T:norx3261v2 6.06 6.17 6.20 T:norx3261v3 7.59 7.64 7.68 T:acorn128v2 7.66 7.67 7.68 T:acorn128v3 7.74 7.74 7.75 ascon128v12 7.81 7.82 7.84 T:ketjeminorv2 7.92 7.92 7.92 T:norx3261v1 8.18 8.18 8.20 T:ascon128v11 8.18 8.18 8.18 T:ascon128v1 13.82 13.84 13.86 T:aes128otrsv1 13.84 13.85 13.86 T:aes128otrsv2 14.71 14.72 14.74 T:aes128otrpv2 14.71 14.73 14.74 T:aes128otrpv1 17.39 17.41 17.42 T:aes128n12clocv1 17.41 17.43 17.44 T:aes128n8clocv1 17.93 17.94 17.95 T:aes256otrsv2 17.93 17.96 17.98 T:aes256otrsv1 17.50 18.00 19.16 T:twine80n6t4clocv2 18.44 18.48 18.51 T:twine80n6t4clocv3 18.78 18.80 18.81 T:aes256otrpv1 18.80 18.81 18.82 T:aes256otrpv2 18.97 18.98 18.99 T:proest256otrv1 21.89 21.94 22.00 T:aeadaes128ocbtaglen64v1 21.91 22.02 22.03 T:aeadaes128ocbtaglen96v1 25.88 25.91 25.98 T:aeadaes192ocbtaglen64v1 25.91 25.93 25.94 T:aeadaes192ocbtaglen96v1 26.43 26.52 26.59 T:ketjesrv1 29.86 29.92 29.97 T:aeadaes256ocbtaglen64v1 29.88 29.95 29.99 T:aeadaes256ocbtaglen96v1 30.81 30.83 30.86 T:ketjesrv2 35.22 35.24 35.26 T:colm127v1 47.65 47.72 48.00 T:proest128otrv1 54.33 54.40 54.45 T:ketjejrv1 67.75 67.80 67.88 T:present80n6t4silcv3 70.59 70.65 70.89 T:deoxysneq128128v13 72.58 72.62 72.65 T:ketjejrv2 90.79 90.91 91.23 T:deoxysneq256128v13 90.05 92.36 93.83 T:led80n6t4silcv3 100.79 100.96 101.50 T:aezv1 107.07 107.15 107.50 T:deoxyseq128128v13 154.17 154.47 154.75 T:deoxyseq256128v13 570.78 596.33 611.57 T:acorn128 2488.89 2498.22 2502.77 T:led80n6silcv1 2497.74 2501.00 2516.46 T:led80n6t4silcv2 2617.74 2617.88 2618.13 T:present80n6t4silcv2 2620.17 2621.60 2622.89 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.21 0.21 0.21 T:aegis128l 0.22 0.22 0.22 aegis128l 0.25 0.26 0.27 T:tiaoxinv1 0.25 0.26 0.26 T:tiaoxinv2 0.27? 0.28? 0.34? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.30 T:aezv5 0.30 0.31 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.37 T:aegis256 0.37 0.37 0.37 aegis256 0.38? 0.38? 0.45? T:aeadaes256ocbtaglen128v1 0.47? 0.47? 0.54? T:aeadaes192ocbtaglen128v1 0.51 0.51 0.52 aes256gcmv1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.56 0.58 T:aes128otrpv3 0.61 0.61 0.62 T:morus1280256v1 0.61 0.62 0.62 T:morus1280128v1 0.62 0.62 0.62 T:morus1280256v2 0.62 0.63 0.63 T:morus1280128v2 0.69 0.69 0.69 T:aes128gcmv1 0.72 0.72 0.72 T:aes256otrpv3 0.73 0.73 0.73 T:deoxysi128v141 0.73 0.74 0.76 T:aes256otrcv3 0.81 0.81 0.82 T:deoxysneq128128v1 0.83 0.83 0.84 T:morus640128v1 0.85 0.85 0.85 T:deoxysi256v141 0.85 0.86 0.86 T:deoxysneq256128v1 0.89 0.89 0.90 T:morus640128v2 0.92 0.93 0.93 T:deoxysii128v141 0.94 0.95 0.95 T:colm0v1 1.05 1.05 1.06 T:deoxysii256v141 1.20 1.20 1.22 T:deoxyseq128128v1 1.29 1.30 1.31 T:deoxyseq256128v1 1.39 1.40 1.41 T:oceankeyakv2 1.55 1.55 1.55 T:aes128otrsv3 1.78 1.79 1.80 T:seakeyakv2 2.08 2.12 2.15 T:norx6444v3 2.13 2.14 2.14 T:aes256otrsv3 2.43 2.44 2.48 T:norx6441v2 2.43 2.44 2.50 T:norx6441v3 2.48 2.50 2.53 T:lunarkeyakv2 2.58 2.58 2.59 T:aes128n12t8clocv2 2.58 2.59 2.59 T:aes128n8t8clocv2 2.58 2.59 2.59 T:aes128n12t8clocv3 2.59 2.59 2.59 T:aes128n12t8silcv3 2.59 2.59 2.59 T:aes128n12t8silcv2 2.59 2.59 2.60 T:aes128n8t8silcv2 2.80 2.90 2.91 T:norx6441v1 3.07 3.08 3.09 T:lakekeyakv2 3.57 3.59 3.60 T:lakekeyakv1 3.66 3.67 3.67 T:norx6461v2 3.65 3.78 3.79 T:norx6461v3 4.02 4.06 4.13 T:norx3241v2 4.05 4.14 4.20 T:norx3241v3 4.21 4.37 4.38 T:norx6461v1 4.71 4.77 4.80 T:norx3241v1 4.76 4.79 4.82 T:norx6444v2 5.30 5.31 5.31 T:norx6444v1 5.31 5.31 5.31 T:ascon128av11 5.41 5.41 5.41 ascon128av12 5.44 5.44 5.45 T:ascon96v1 5.58 5.58 5.58 T:aesjambuv1 5.71 5.72 5.98 T:ketjemajorv2 5.74 5.75 5.76 T:riverkeyakv2 5.98 5.98 6.06 T:norx3261v3 6.02 6.06 6.17 T:norx3261v2 7.69 7.71 7.72 T:acorn128v2 7.74 7.74 7.74 ascon128v12 7.77 7.77 7.78 T:acorn128v3 7.85 7.85 7.87 T:norx3261v1 7.93 7.93 7.93 T:ascon128v11 7.93 7.93 7.93 T:ascon128v1 7.98 7.99 8.00 T:ketjeminorv2 13.96 13.99 14.03 T:aes128otrsv1 14.00 14.00 14.02 T:aes128otrsv2 14.84 14.85 14.87 T:aes128otrpv1 14.88 14.90 14.92 T:aes128otrpv2 16.77 16.79 16.82 T:aes128n12clocv1 16.81 16.82 16.85 T:aes128n8clocv1 17.44? 18.08? 19.42? T:twine80n6t4clocv2 18.07 18.08 18.10 T:aes256otrsv1 18.10 18.11 18.12 T:aes256otrsv2 18.40 18.50 19.54 T:twine80n6t4clocv3 18.92 18.93 18.96 T:aes256otrpv1 18.95 18.97 18.98 T:aes256otrpv2 19.27 19.29 19.32 T:proest256otrv1 25.93 25.96 25.98 T:aeadaes128ocbtaglen64v1 26.00 26.07 26.08 T:aeadaes128ocbtaglen96v1 26.82 26.87 27.06 T:ketjesrv1 27.21 27.26 27.72 T:ketjesrv2 30.74 30.77 30.93 T:aeadaes192ocbtaglen64v1 30.78 30.86 30.90 T:aeadaes192ocbtaglen96v1 35.68 35.74 35.83 T:aeadaes256ocbtaglen64v1 35.73 35.78 35.79 T:aeadaes256ocbtaglen96v1 43.07 43.14 43.24 T:colm127v1 48.01 48.03 48.06 T:proest128otrv1 55.55 55.65 55.71 T:ketjejrv1 67.61 67.63 67.70 T:present80n6t4silcv3 74.70 74.77 74.81 T:ketjejrv2 90.29 90.39 90.51 T:deoxysneq128128v13 91.71 93.13 95.36 T:led80n6t4silcv3 100.50 100.64 101.04 T:aezv1 107.36 107.44 107.57 T:deoxyseq128128v13 120.66 120.86 121.12 T:deoxysneq256128v13 153.82 154.19 154.62 T:deoxyseq256128v13 566.97 596.39 611.39 T:acorn128 2486.64 2497.07 2498.13 T:led80n6silcv1 2516.90 2521.78 2523.56 T:led80n6t4silcv2 2619.53 2620.03 2620.90 T:present80n6silcv1 2620.16 2621.20 2621.60 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.18 0.18 0.18 T:aezv3 0.18 0.18 0.18 T:aezv5 0.18 0.18 0.18 T:aezv4 0.20 0.21 0.21 T:aegis128l 0.23 0.23 0.23 aegis128l 0.25 0.26 0.27 T:tiaoxinv1 0.25 0.26 0.27 T:tiaoxinv2 0.27? 0.28? 0.33? T:aeadaes128ocbtaglen128v1 0.34 0.34 0.34 T:aegis128 0.36 0.37 0.37 T:aegis256 0.37? 0.38? 0.48? T:aeadaes256ocbtaglen128v1 0.39 0.39 0.40 aegis256 0.47? 0.47? 0.57? T:aeadaes192ocbtaglen128v1 0.51 0.51 0.52 aes256gcmv1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.56 0.59 T:aes128otrpv3 0.61 0.62 0.62 T:morus1280128v1 0.62 0.62 0.63 T:morus1280256v1 0.62 0.63 0.64 T:morus1280128v2 0.62 0.63 0.63 T:morus1280256v2 0.69 0.69 0.69 T:aes128gcmv1 0.72 0.72 0.72 T:aes256otrpv3 0.73 0.73 0.73 T:deoxysi128v141 0.73 0.74 0.76 T:aes256otrcv3 0.81 0.81 0.82 T:deoxysneq128128v1 0.83 0.83 0.84 T:morus640128v1 0.84 0.84 0.85 T:deoxysi256v141 0.86 0.86 0.87 T:deoxysneq256128v1 0.87 0.89 0.90 T:morus640128v2 0.92 0.93 0.93 T:deoxysii128v141 0.94 0.95 0.95 T:colm0v1 1.05 1.05 1.05 T:deoxysii256v141 1.20 1.20 1.21 T:deoxyseq128128v1 1.29 1.29 1.30 T:deoxyseq256128v1 1.42 1.44 1.47 T:oceankeyakv2 1.55 1.55 1.55 T:aes128otrsv3 1.80 1.80 1.81 T:seakeyakv2 2.08 2.12 2.15 T:norx6444v3 2.13 2.14 2.14 T:aes256otrsv3 2.42 2.44 2.45 T:norx6441v3 2.48 2.49 2.49 T:norx6441v2 2.50 2.52 2.56 T:lunarkeyakv2 2.58 2.58 2.60 T:aes128n12t8silcv2 2.58 2.58 2.60 T:aes128n12t8silcv3 2.58 2.58 2.60 T:aes128n8t8silcv2 2.58 2.58 2.59 T:aes128n12t8clocv3 2.58 2.58 2.58 T:aes128n8t8clocv2 2.58 2.58 2.59 T:aes128n12t8clocv2 2.76 2.78 2.81 T:norx6441v1 3.08 3.09 3.09 T:lakekeyakv2 3.56 3.58 3.60 T:lakekeyakv1 3.73 3.73 3.74 T:norx6461v2 3.64 3.79 3.80 T:norx6461v3 4.02 4.04 4.06 T:norx3241v2 4.06 4.07 4.08 T:norx3241v3 4.14 4.19 4.34 T:norx6461v1 4.76 4.78 4.91 T:norx3241v1 4.78 4.79 4.81 T:norx6444v2 5.31 5.31 5.31 T:ascon128av11 5.32 5.32 5.33 T:norx6444v1 5.41 5.41 5.41 ascon128av12 5.44 5.44 5.44 T:ascon96v1 5.58 5.58 5.58 T:aesjambuv1 5.73 5.75 6.02 T:ketjemajorv2 5.76 5.76 5.78 T:riverkeyakv2 6.01 6.06 6.17 T:norx3261v2 6.00 6.08 6.23 T:norx3261v3 7.65 7.67 7.71 T:acorn128v2 7.74 7.74 7.74 ascon128v12 7.77 7.77 7.77 T:acorn128v3 7.85 7.85 7.86 T:norx3261v1 7.93 7.93 7.93 T:ascon128v1 7.93 7.93 7.93 T:ascon128v11 8.00 8.01 8.01 T:ketjeminorv2 13.95 13.99 14.01 T:aes128otrsv1 14.00 14.02 14.03 T:aes128otrsv2 14.84 14.85 14.87 T:aes128otrpv1 14.89 14.91 14.92 T:aes128otrpv2 16.77 16.80 16.82 T:aes128n12clocv1 16.82 16.85 16.89 T:aes128n8clocv1 17.46 17.81 19.21 T:twine80n6t4clocv2 18.06 18.07 18.09 T:aes256otrsv1 18.10 18.13 18.14 T:aes256otrsv2 18.92 18.93 18.95 T:aes256otrpv1 18.99 19.01 19.03 T:aes256otrpv2 19.25 19.26 19.28 T:proest256otrv1 20.31 21.23 21.23 T:twine80n6t4clocv3 25.88 25.92 25.94 T:aeadaes128ocbtaglen64v1 25.93 26.01 26.05 T:aeadaes128ocbtaglen96v1 26.83 26.87 27.05 T:ketjesrv1 27.23 27.25 27.27 T:ketjesrv2 30.79 30.81 30.89 T:aeadaes192ocbtaglen96v1 30.80 30.82 30.91 T:aeadaes192ocbtaglen64v1 35.69 35.74 35.83 T:aeadaes256ocbtaglen96v1 35.72 35.80 35.82 T:aeadaes256ocbtaglen64v1 42.99 43.13 43.28 T:colm127v1 48.03 48.10 48.30 T:proest128otrv1 55.63 55.67 55.71 T:ketjejrv1 67.54 67.61 67.63 T:present80n6t4silcv3 74.65 74.70 74.77 T:ketjejrv2 90.18 90.29 90.54 T:deoxysneq128128v13 91.52 92.89 93.64 T:led80n6t4silcv3 100.51 100.65 100.93 T:aezv1 107.01 107.11 107.71 T:deoxyseq128128v13 120.74 120.83 121.10 T:deoxysneq256128v13 154.11 154.34 154.57 T:deoxyseq256128v13 558.96 574.74 604.45 T:acorn128 2481.46 2497.15 2497.53 T:led80n6silcv1 2510.12 2511.67 2521.86 T:led80n6t4silcv2 2619.32 2619.83 2621.13 T:present80n6t4silcv2 2619.58 2620.08 2620.98 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.82 0.87 0.90 T:aegis128 0.86 0.88 0.89 T:aegis128l 0.88 0.88 0.95 aegis128l 1.12 1.13 1.16 T:aegis256 1.17 1.19 1.21 aegis256 1.21 1.22 1.24 T:tiaoxinv2 1.20 1.22 1.23 T:tiaoxinv1 1.39 1.41 1.43 T:aezv5 1.40 1.44 1.48 T:aezv3 1.49 1.50 1.51 T:aezv4 2.38 2.39 2.42 T:colm0v1 2.48 2.56 2.64 T:aes128otrsv3 2.72 2.76 2.79 T:morus640128v1 2.76? 2.79? 4.32? T:aeadaes128ocbtaglen128v1 2.87 2.91 2.95 T:morus640128v2 2.91 2.92 2.93 T:aes128otrpv3 2.98 2.98 3.00 T:aes128n8t8silcv2 2.97 3.00 3.02 T:aes128n12t8silcv3 2.95 3.00 3.06 T:aes128otrcv3 3.01 3.01 3.03 T:aes128n12t8silcv2 3.03 3.04 3.08 T:aes128n12t8clocv3 3.05 3.05 3.09 T:aes128n8t8clocv2 3.03 3.07 3.10 T:aes128n12t8clocv2 3.03 3.09 3.14 T:deoxysneq128128v1 3.11 3.14 3.18 T:morus1280256v1 3.09 3.15 3.18 T:morus1280128v1 3.29 3.35 3.41 T:morus1280256v2 3.39 3.44 3.49 T:morus1280128v2 3.33 3.46 3.49 T:aes256otrsv3 3.44? 3.48? 5.09? T:aeadaes256ocbtaglen128v1 3.58? 3.65? 6.03? T:aeadaes192ocbtaglen128v1 3.79 3.80 3.84 T:aes256otrpv3 3.81 3.84 3.90 T:deoxysi128v141 3.94 3.94 3.98 T:deoxysneq256128v1 3.97 4.03 4.08 T:aes256otrcv3 4.05 4.11 4.16 T:aes128gcmv1 4.62 4.69 4.76 T:deoxysi256v141 4.65 4.70 4.82 aes256gcmv1 4.74 4.82 4.91 T:deoxyseq128128v1 5.14 5.16 5.19 T:deoxysii128v141 5.94 6.01 6.03 T:deoxyseq256128v1 6.07 6.10 6.13 T:deoxysii256v141 6.26 6.28 6.30 T:aesjambuv1 7.77 7.83 7.90 T:norx6441v2 7.80 7.86 8.00 T:norx6441v1 8.04 8.12 8.19 T:norx6441v3 8.22 8.22 8.22 T:ascon96v1 8.34 8.34 8.36 T:ascon128av11 8.40 8.40 8.56 ascon128av12 9.60 9.65 9.66 T:norx3241v1 9.94 10.03 10.14 T:norx3241v2 10.00 10.12 10.22 T:norx3241v3 10.48 10.49 10.49 ascon128v12 10.90 10.90 10.90 T:ascon128v1 10.90 10.90 10.90 T:ascon128v11 11.45 11.55 11.73 T:lakekeyakv1 11.63 11.69 11.95 T:norx6461v2 11.81 12.03 12.13 T:norx6461v1 11.99 12.12 12.34 T:norx6461v3 13.25 13.32 13.35 T:lakekeyakv2 13.29 13.34 13.58 T:riverkeyakv2 14.00 14.10 14.21 T:norx6444v3 14.50 14.64 14.81 T:norx3261v2 14.90 15.08 15.16 T:norx3261v3 15.99 16.00 16.03 T:norx3261v1 16.66 16.75 16.97 T:seakeyakv2 17.22 17.34 17.43 T:oceankeyakv2 21.42 21.44 21.55 T:aes128otrsv1 21.20 21.54 21.76 T:aes128n12clocv1 21.43 21.59 21.93 T:aes128n8clocv1 21.66 21.70 21.82 T:aes128otrsv2 22.06 22.07 22.14 T:aes128otrpv1 22.17 22.22 22.29 T:aes128otrpv2 24.38 24.41 24.46 T:ketjeminorv2 24.88 25.52 26.40 T:twine80n6t4clocv2 27.54 27.62 27.79 T:aes256otrsv1 27.63 27.77 27.91 T:aes256otrsv2 26.32 27.96 28.25 T:twine80n6t4clocv3 28.18 28.19 28.21 T:aes256otrpv1 28.35 28.39 28.50 T:aes256otrpv2 28.55 28.57 28.62 T:acorn128v3 33.53 33.71 33.90 T:acorn128v2 34.13 34.17 34.29 T:ketjemajorv2 34.37 34.61 34.88 T:norx6444v2 34.95 35.11 35.41 T:aeadaes128ocbtaglen64v1 35.16 35.44 35.60 T:aeadaes128ocbtaglen96v1 38.26 38.41 39.84 T:norx6444v1 38.79 39.05 39.27 T:lunarkeyakv2 40.45 40.57 40.84 T:aeadaes192ocbtaglen64v1 40.43 40.64 41.06 T:aeadaes192ocbtaglen96v1 43.34 43.60 43.85 T:ketjesrv1 47.39 47.48 47.60 T:aeadaes256ocbtaglen96v1 47.37 47.60 47.87 T:aeadaes256ocbtaglen64v1 50.94 51.27 52.15 T:colm127v1 51.80 51.95 52.21 T:ketjesrv2 53.94 54.02 54.26 T:proest256otrv1 72.70 73.03 73.27 T:ketjejrv1 79.34 79.62 79.93 T:deoxysneq128128v13 83.19 83.26 83.36 T:present80n6t4silcv3 92.37 92.66 92.97 T:proest128otrv1 94.04 94.48 94.93 T:ketjejrv2 102.12 102.32 102.60 T:deoxysneq256128v13 110.68 110.68 111.77 T:led80n6t4silcv3 111.05 111.62 112.29 T:aezv1 132.87 133.22 133.71 T:deoxyseq128128v13 190.43 191.15 191.77 T:deoxyseq256128v13 2011.61 2048.52 2191.59 T:acorn128 2790.31 2795.94 2799.77 T:led80n6silcv1 2795.62 2797.53 2812.39 T:led80n6t4silcv2 2930.89 2932.45 2934.93 T:present80n6t4silcv2 2932.67 2933.44 2935.91 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.87 0.90 0.90 T:aegis128 0.90 0.91 0.92 T:aegis128l 0.98 0.99 1.03 aegis128l 1.15 1.17 1.20 T:aegis256 1.20 1.23 1.26 T:tiaoxinv1 1.21 1.23 1.24 aegis256 1.21 1.23 1.26 T:tiaoxinv2 1.39 1.40 1.41 T:aezv5 1.40? 1.43? 1.61? T:aezv3 1.46 1.48 1.49 T:aezv4 2.62 2.62 2.62 T:aes128otrsv3 2.70 2.74 2.77 T:morus640128v1 2.76? 2.80? 4.32? T:aeadaes128ocbtaglen128v1 2.90 2.94 3.01 T:colm0v1 3.02 3.06 3.09 T:morus640128v2 3.06 3.11 3.14 T:aes128n8t8clocv2 3.10 3.12 3.13 T:aes128n12t8clocv3 3.11 3.13 3.26 T:aes128n12t8silcv3 3.13 3.14 3.15 T:aes128n12t8clocv2 3.11 3.18 3.31 T:aes128n8t8silcv2 3.19 3.27 3.36 T:aes128n12t8silcv2 3.26 3.29 3.34 T:morus1280128v1 3.27 3.33 3.39 T:aes128otrcv3 3.32 3.35 3.40 T:morus1280256v1 3.37 3.38 3.40 T:aes128otrpv3 3.48? 3.57? 6.09? T:aeadaes256ocbtaglen128v1 3.53 3.57 3.61 T:morus1280128v2 3.52 3.58 3.65 T:morus1280256v2 3.50 3.64 3.67 T:aes256otrsv3 3.72? 3.81? 5.86? T:aeadaes192ocbtaglen128v1 4.07 4.10 4.14 T:aes128gcmv1 4.17 4.21 4.23 T:aes256otrcv3 4.25 4.27 4.29 T:aes256otrpv3 4.35 4.35 4.39 T:deoxysneq128128v1 4.31 4.35 4.40 T:deoxysneq256128v1 4.81 4.86 4.87 T:deoxysi128v141 4.92 4.99 5.21 aes256gcmv1 5.49 5.51 5.57 T:deoxysii128v141 5.66 5.67 5.72 T:deoxysi256v141 6.23 6.43 6.70 T:aesjambuv1 6.48 6.50 6.54 T:deoxyseq256128v1 6.72 6.73 6.82 T:deoxyseq128128v1 6.77 6.88 6.94 T:deoxysii256v141 7.89 7.97 8.10 T:norx6441v2 7.97 8.00 8.04 T:norx6441v1 8.16 8.16 8.19 T:ascon128av11 8.16 8.21 8.26 T:norx6441v3 8.29 8.30 8.38 ascon128av12 8.34 8.34 8.34 T:ascon96v1 10.04 10.10 10.27 T:norx3241v1 10.15 10.19 10.42 T:norx3241v2 10.42 10.42 10.47 ascon128v12 10.43 10.53 10.62 T:norx3241v3 10.56 10.56 10.57 T:ascon128v1 10.56 10.56 10.60 T:ascon128v11 11.43 11.49 11.54 T:lakekeyakv1 11.98 12.10 12.15 T:norx6461v2 12.08 12.12 12.41 T:norx6461v3 12.22 12.29 12.34 T:norx6461v1 13.28 13.29 13.42 T:lakekeyakv2 13.32 13.36 13.64 T:riverkeyakv2 14.10 14.18 14.28 T:norx6444v3 14.81 14.86 15.19 T:norx3261v2 15.09 15.36 15.56 T:norx3261v3 16.19 16.21 16.28 T:norx3261v1 17.23 17.29 17.37 T:oceankeyakv2 19.52 20.27 20.43 T:seakeyakv2 20.70 20.78 21.17 T:aes128n8clocv1 20.93 21.54 21.76 T:aes128n12clocv1 21.62 21.68 21.79 T:aes128otrsv1 21.77 21.85 21.92 T:aes128otrsv2 22.26 22.34 22.43 T:aes128otrpv1 22.49 22.53 22.63 T:aes128otrpv2 24.73 24.78 24.90 T:ketjeminorv2 24.64 24.89 25.74 T:twine80n6t4clocv2 25.87 26.43 27.43 T:twine80n6t4clocv3 27.63 27.79 27.94 T:aes256otrsv1 27.93 28.05 28.13 T:aes256otrsv2 28.29 28.34 28.43 T:aes256otrpv1 28.37 28.38 28.44 T:acorn128v3 28.58 28.69 28.76 T:aes256otrpv2 34.13 34.36 34.60 T:acorn128v2 34.43 34.50 34.79 T:ketjemajorv2 34.66 34.80 34.88 T:norx6444v2 37.63 37.65 37.74 T:norx6444v1 38.29 38.85 39.16 T:lunarkeyakv2 42.49 42.53 42.65 T:aeadaes128ocbtaglen64v1 42.52 42.89 42.97 T:aeadaes128ocbtaglen96v1 43.72 43.97 44.27 T:ketjesrv1 48.54 48.81 49.24 T:ketjesrv2 49.11 49.38 49.76 T:aeadaes192ocbtaglen64v1 49.29 49.51 49.79 T:aeadaes192ocbtaglen96v1 56.00 56.26 56.82 T:proest256otrv1 57.92 58.30 58.60 T:aeadaes256ocbtaglen96v1 58.33 58.54 58.71 T:aeadaes256ocbtaglen64v1 59.21 59.24 60.03 T:colm127v1 73.79 74.05 74.34 T:ketjejrv1 82.86 83.03 83.07 T:present80n6t4silcv3 93.64 93.77 93.81 T:proest128otrv1 96.30 96.66 97.36 T:ketjejrv2 98.72 98.98 99.34 T:deoxysneq128128v13 107.97 112.43 112.54 T:led80n6t4silcv3 113.65 114.27 115.23 T:aezv1 131.63 131.84 132.51 T:deoxysneq256128v13 132.86 133.17 133.56 T:deoxyseq128128v13 190.11 190.74 191.42 T:deoxyseq256128v13 2001.47 2022.71 2127.33 T:acorn128 2793.53 2794.83 2798.50 T:led80n6silcv1 2815.17 2818.85 2819.45 T:led80n6t4silcv2 2931.48 2932.32 2933.79 T:present80n6t4silcv2 2932.28 2933.04 2935.31 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.84 0.89 0.92 T:aegis128 0.91 0.91 0.91 T:aegis128l 1.00 1.00 1.05 T:aezv5 1.00 1.01 1.04 aegis128l 1.04 1.07 1.13 T:aezv3 1.14 1.16 1.18 T:aegis256 1.19 1.19 1.28 T:aezv4 1.20 1.22 1.24 T:tiaoxinv2 1.21 1.22 1.24 T:tiaoxinv1 1.26 1.28 1.32 aegis256 2.60 2.62 2.62 T:aes128otrsv3 2.70 2.74 2.76 T:morus640128v1 2.76? 2.80? 4.09? T:aeadaes128ocbtaglen128v1 2.90 2.90 2.90 T:aes128n12t8silcv2 2.90 2.90 2.93 T:aes128n12t8silcv3 2.89 2.91 2.95 T:aes128n8t8silcv2 2.97 2.98 3.04 T:colm0v1 3.00 3.04 3.07 T:morus640128v2 3.03 3.06 3.10 T:aes128n8t8clocv2 3.08 3.11 3.14 T:aes128n12t8clocv3 3.08 3.12 3.14 T:aes128n12t8clocv2 3.25 3.30 3.34 T:morus1280128v1 3.28 3.32 3.37 T:aes128otrcv3 3.30 3.34 3.38 T:morus1280256v1 3.37 3.38 3.39 T:aes128otrpv3 3.52 3.55 3.59 T:morus1280256v2 3.52 3.56 3.64 T:morus1280128v2 3.51? 3.59? 6.12? T:aeadaes256ocbtaglen128v1 3.50 3.64 3.66 T:aes256otrsv3 3.70? 3.82? 5.20? T:aeadaes192ocbtaglen128v1 4.09 4.13 4.14 T:aes128gcmv1 4.18 4.22 4.22 T:aes256otrcv3 4.26 4.29 4.30 T:aes256otrpv3 4.34 4.36 4.39 T:deoxysneq128128v1 4.32 4.37 4.43 T:deoxysneq256128v1 4.79? 4.85? 5.77? T:deoxysi128v141 4.93 5.00 5.15 aes256gcmv1 5.44 5.50 5.55 T:deoxysii128v141 5.64 5.67 5.71 T:deoxysi256v141 6.22 6.40 6.71 T:aesjambuv1 6.44 6.50 6.57 T:deoxyseq256128v1 6.73 6.76 6.81 T:deoxyseq128128v1 6.75 6.77 6.90 T:deoxysii256v141 7.96 8.04 8.07 T:norx6441v2 8.01 8.08 8.13 T:norx6441v3 8.12 8.12 8.12 T:ascon128av11 8.03 8.17 8.25 T:norx6441v1 8.29 8.29 8.31 ascon128av12 8.30 8.30 8.30 T:ascon96v1 10.09 10.17 10.26 T:norx3241v1 10.09 10.18 10.42 T:norx3241v3 10.25 10.38 10.54 T:norx3241v2 10.42 10.42 10.42 ascon128v12 10.53 10.53 10.54 T:ascon128v1 10.53 10.53 10.54 T:ascon128v11 11.49 11.59 11.66 T:lakekeyakv1 11.91 12.00 12.22 T:norx6461v1 11.95 12.10 12.18 T:norx6461v2 12.12 12.43 12.50 T:norx6461v3 13.40 13.62 13.76 T:riverkeyakv2 14.02 14.14 14.21 T:norx6444v3 14.33 14.37 14.41 T:lakekeyakv2 14.91 15.09 15.31 T:norx3261v3 15.33 15.33 15.33 T:norx3261v2 16.19 16.20 16.22 T:norx3261v1 18.05 18.11 18.30 T:oceankeyakv2 19.13 19.49 20.23 T:seakeyakv2 20.69 20.89 21.26 T:aes128n8clocv1 20.79 21.03 21.66 T:aes128n12clocv1 21.64 21.71 21.81 T:aes128otrsv1 21.79 21.87 22.01 T:aes128otrsv2 22.27 22.34 22.43 T:aes128otrpv1 22.57 22.64 22.90 T:aes128otrpv2 24.75 24.80 24.98 T:ketjeminorv2 24.63 25.10 26.15 T:twine80n6t4clocv2 26.63 27.40 28.61 T:twine80n6t4clocv3 27.75 27.90 28.09 T:aes256otrsv1 27.95 28.03 28.25 T:aes256otrsv2 28.37 28.38 28.39 T:acorn128v3 28.32 28.39 28.59 T:aes256otrpv1 28.54 28.60 28.74 T:aes256otrpv2 34.10 34.36 34.67 T:acorn128v2 34.43 34.62 34.84 T:ketjemajorv2 34.74 34.80 34.89 T:norx6444v2 37.69 37.76 37.84 T:norx6444v1 38.64 38.99 39.30 T:lunarkeyakv2 42.39 42.53 42.64 T:aeadaes128ocbtaglen64v1 42.69 42.81 42.86 T:aeadaes128ocbtaglen96v1 43.98 44.20 44.38 T:ketjesrv1 48.72 48.99 49.28 T:ketjesrv2 49.08 49.37 49.73 T:aeadaes192ocbtaglen64v1 49.21 49.46 49.74 T:aeadaes192ocbtaglen96v1 54.59 54.75 55.15 T:proest256otrv1 57.90 58.17 58.42 T:aeadaes256ocbtaglen96v1 58.39 58.53 58.63 T:aeadaes256ocbtaglen64v1 59.04 59.12 59.68 T:colm127v1 74.01 74.23 74.44 T:ketjejrv1 82.88 82.99 83.05 T:present80n6t4silcv3 93.63 93.76 93.83 T:proest128otrv1 96.37 96.73 97.32 T:ketjejrv2 98.73 98.98 99.24 T:deoxysneq128128v13 105.41 105.70 109.22 T:led80n6t4silcv3 113.61 114.33 115.05 T:aezv1 131.97 132.35 132.76 T:deoxysneq256128v13 133.17 133.44 133.82 T:deoxyseq128128v13 190.11 190.86 191.71 T:deoxyseq256128v13 2111.70 2156.93 2200.56 T:acorn128 2782.52 2793.15 2794.98 T:led80n6silcv1 2806.63 2814.74 2827.10 T:led80n6t4silcv2 2931.47 2932.15 2933.11 T:present80n6t4silcv2 2932.25 2933.79 2935.87 T:present80n6silcv1