VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20240716

[Page version: 20240726 23:46:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.13? 0.14? 0.15? T:tiaoxinv2 0.15 0.15 0.16 T:tiaoxinv1 0.16? 0.18? 0.21? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.19 T:aegis128l 0.18? 0.19? 0.20? aegis128l 0.20? 0.25? 0.28? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.33 T:aegis256 0.32 0.32 0.33 aegis256 0.36 0.36 0.37 T:aezv4 0.36 0.37 0.37 T:aezv3 0.38 0.39 0.40 T:aezv5 0.11? 0.39? 0.40? T:aeadaes192ocbtaglen128v1 0.39 0.41 0.42 T:aes128otrsv3 0.40 0.41 0.42 T:aes128otrcv3 0.38? 0.42? 0.45? T:aes128gcmv1 0.44 0.45 0.46 T:morus1280256v1 0.45? 0.48? 0.53? T:aes256gcmv1 0.48 0.48 0.50 T:morus1280128v1 0.48 0.49 0.50 T:morus1280256v2 0.47 0.50 0.51 T:morus1280128v2 0.54 0.55 0.55 T:aes256otrcv3 0.55 0.55 0.56 T:aes256otrsv3 0.53 0.55 0.57 T:deoxysi128v141 0.58 0.61 0.62 T:deoxysi256v141 0.60 0.62 0.63 T:deoxysneq128128v1 0.68 0.70 0.71 T:deoxysneq256128v1 0.72 0.74 0.75 T:oceankeyakv2 0.75 0.75 0.77 T:morus640128v1 0.76 0.77 0.78 T:morus640128v2 0.76? 0.80? 0.85? T:lunarkeyakv2 0.85 0.87 0.88 T:norx6444v3 1.16 1.19 1.22 T:deoxyseq128128v1 1.23 1.24 1.26 T:colm0v1 1.23 1.26 1.27 T:deoxysii128v141 1.28 1.28 1.29 T:aes128otrpv3 1.31 1.33 1.36 T:deoxyseq256128v1 1.36 1.40 1.45 T:seakeyakv2 1.48 1.50 1.52 T:deoxysii256v141 1.68 1.69 1.71 T:aes256otrpv3 2.16 2.17 2.20 T:norx6441v2 2.17 2.18 2.20 T:norx6441v3 2.62 2.62 2.62 T:aes128n12t8silcv2 2.62 2.62 2.62 T:aes128n12t8silcv3 2.62 2.62 2.62 T:aes128n8t8silcv2 2.62 2.63 2.63 T:aes128n8t8clocv2 2.62 2.63 2.63 T:aes128n12t8clocv2 2.61 2.63 2.64 T:norx6441v1 2.62 2.63 2.63 T:aes128n12t8clocv3 3.19 3.21 3.24 T:norx6444v2 3.22 3.24 3.26 T:norx6461v2 3.23 3.25 3.27 T:norx6461v3 3.19 3.26 3.32 T:lakekeyakv1 3.26 3.32 3.39 T:lakekeyakv2 3.52 3.52 3.52 T:norx3241v2 3.52 3.52 3.53 T:norx3241v3 3.68 3.70 3.73 T:norx6444v1 3.87 3.88 3.91 T:norx6461v1 4.22 4.23 4.23 T:norx3241v1 5.27 5.27 5.28 T:norx3261v2 5.27 5.27 5.27 T:norx3261v3 5.31 5.31 5.31 ascon128av12 5.34 5.34 5.36 T:aesjambuv1 5.44 5.44 5.45 T:ascon128av11 5.45 5.48 5.65 T:ketjemajorv2 5.57 5.57 5.57 T:ascon96v1 6.74 6.75 6.78 T:acorn128v2 7.00 7.01 7.01 T:acorn128v3 7.22 7.27 7.28 T:ketjeminorv2 7.53 7.53 7.53 T:norx3261v1 7.67 7.72 7.73 T:riverkeyakv2 7.75 7.75 7.76 ascon128v12 8.25 8.25 8.25 T:ascon128v11 8.25 8.25 8.25 T:ascon128v1 10.29? 12.18? 15.35? T:oceankeyakv1 12.75 12.77 12.80 T:aes128otrpv1 12.78 12.81 12.84 T:aes128otrsv1 12.78 12.81 12.82 T:aes128otrpv2 12.69? 12.91? 14.18? T:aes128otrsv2 16.64 16.66 16.70 T:aes256otrsv1 16.67 16.70 16.73 T:aes256otrpv2 16.68 16.71 16.75 T:aes256otrpv1 16.70 16.73 16.76 T:aes256otrsv2 18.42 18.47 18.56 T:proest256otrv1 19.85 20.32 20.35 T:twine80n6t4clocv2 21.52 21.73 22.11 T:twine80n6t4clocv3 21.99 22.03 22.09 T:aes128n8clocv1 22.00 22.05 22.06 T:aes128n12clocv1 23.19 23.24 23.52 T:aeadaes128ocbtaglen96v1 23.21 23.41 23.45 T:aeadaes128ocbtaglen64v1 24.75 24.78 25.03 T:aes128n12silcv1 24.73 24.78 24.80 T:aes128n8silcv1 25.81 25.84 25.89 T:ketjesrv2 26.87 27.02 27.22 T:aeadaes192ocbtaglen96v1 27.06 27.08 27.24 T:aeadaes192ocbtaglen64v1 27.20 27.23 27.37 T:ketjesrv1 30.68 30.91 30.98 T:aeadaes256ocbtaglen64v1 30.93 30.97 31.24 T:aeadaes256ocbtaglen96v1 29.71 30.99 31.41 T:riverkeyakv1 45.15 45.43 45.60 T:proest128otrv1 58.64 60.25 60.40 T:ketjejrv2 62.96 62.99 66.20 T:ketjejrv1 70.16 71.12 72.52 T:present80n6t4silcv3 76.19? 77.68? 97.06? T:deoxysneq128128v13 106.88 106.92 107.22 T:deoxysneq256128v13 122.23 122.81 123.02 T:twine80n6clocv1 128.31 136.12 136.61 T:led80n6t4silcv3 138.82 138.93 139.51 T:aezv1 157.45 157.77 158.02 T:deoxyseq128128v13 214.66 214.96 215.49 T:deoxyseq256128v13 277.23 279.85 280.80 aes256gcmv1 486.52? 503.73? 592.73? T:acorn128 2167.44 2173.44 2180.21 T:led80n6silcv1 2169.55 2180.12 2182.13 T:led80n6t4silcv2 3329.14 3330.40 3330.85 T:present80n6silcv1 3323.58 3331.77 3339.57 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.16? 0.18? 0.22? T:aeadaes128ocbtaglen128v1 0.18 0.19 0.19 aegis128l 0.19 0.19 0.20 T:aegis128l 0.19? 0.21? 0.26? T:aeadaes256ocbtaglen128v1 0.28 0.29 0.30 T:tiaoxinv1 0.32 0.32 0.32 T:aegis128 0.32 0.33 0.34 T:aegis256 0.32 0.33 0.34 aegis256 0.33 0.35 0.36 T:tiaoxinv2 0.36 0.37 0.37 T:aezv4 0.36 0.37 0.37 T:aezv3 0.38 0.39 0.39 T:aezv5 0.36? 0.40? 0.41? T:aeadaes192ocbtaglen128v1 0.39? 0.43? 0.47? T:aes128gcmv1 0.44 0.44 0.45 T:aes128otrcv3 0.44 0.45 0.46 T:aes128otrsv3 0.50 0.50 0.52 T:morus1280128v1 0.50 0.51 0.51 T:morus1280256v2 0.50 0.51 0.51 T:morus1280128v2 0.47? 0.51? 0.55? T:aes256gcmv1 0.52 0.54 0.55 T:morus1280256v1 0.57 0.58 0.59 T:aes256otrcv3 0.58 0.59 0.59 T:aes256otrsv3 0.56 0.60 0.61 T:deoxysi128v141 0.67 0.70 0.72 T:deoxysi256v141 0.69 0.73 0.75 T:oceankeyakv2 0.72 0.73 0.76 T:deoxysneq256128v1 0.74 0.76 0.78 T:deoxysneq128128v1 0.76 0.77 0.79 T:morus640128v1 0.78 0.79 0.80 T:morus640128v2 0.86 0.87 0.88 T:norx6444v3 0.88 0.94 0.97 T:lunarkeyakv2 1.21 1.23 1.31 T:colm0v1 1.24 1.26 1.27 T:deoxysii128v141 1.23? 1.30? 1.37? T:aes128otrpv3 1.35 1.38 1.40 T:deoxyseq128128v1 1.42 1.48 1.54 T:seakeyakv2 1.41 1.50 1.52 T:deoxysii256v141 1.55 1.56 1.58 T:deoxyseq256128v1 1.66 1.76 1.83 T:aes256otrpv3 2.13 2.14 2.16 T:norx6441v3 2.15 2.16 2.17 T:norx6441v2 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n12t8clocv3 2.55 2.57 2.67 T:aes128n8t8silcv2 2.56 2.57 2.67 T:aes128n12t8silcv3 2.56 2.57 2.67 T:aes128n12t8silcv2 2.59 2.66 2.68 T:norx6441v1 3.11 3.12 3.14 T:norx6444v2 3.08 3.19 3.25 T:lakekeyakv1 3.23 3.25 3.29 T:norx6461v3 3.24 3.27 3.30 T:norx6461v2 3.25 3.33 3.35 T:lakekeyakv2 3.58 3.59 3.60 T:norx3241v2 3.59 3.60 3.61 T:norx3241v3 3.63 3.66 3.71 T:norx6444v1 3.82 3.84 3.95 T:norx6461v1 4.30 4.34 4.36 T:norx3241v1 5.25 5.26 5.26 T:ascon128av11 5.31 5.31 5.31 ascon128av12 5.31 5.31 5.33 T:norx3261v3 5.32 5.33 5.33 T:norx3261v2 5.27 5.34 5.47 T:ketjemajorv2 5.50 5.50 5.51 T:ascon96v1 5.72 5.75 5.86 T:aesjambuv1 7.00 7.02 7.02 T:acorn128v3 7.25 7.26 7.28 T:acorn128v2 7.39 7.39 7.40 T:norx3261v1 7.50 7.56 7.61 T:ketjeminorv2 7.61 7.62 7.64 ascon128v12 7.87 7.88 7.89 T:ascon128v11 7.87 7.89 7.89 T:ascon128v1 7.92 7.94 8.01 T:riverkeyakv2 10.34? 11.95? 15.56? T:oceankeyakv1 13.16 13.20 13.24 T:aes128otrpv2 13.16 13.21 13.26 T:aes128otrpv1 13.18 13.26 13.75 T:aes128otrsv2 13.24 13.28 13.53 T:aes128otrsv1 17.08 17.12 17.14 T:aes256otrsv1 17.10 17.13 17.16 T:aes256otrpv1 17.06 17.14 17.18 T:aes256otrsv2 17.12 17.16 17.20 T:aes256otrpv2 18.29 18.40 18.43 T:proest256otrv1 19.92 19.99 20.44 T:twine80n6t4clocv2 21.44 21.71 21.81 T:twine80n6t4clocv3 22.92 22.96 23.04 T:aes128n12clocv1 22.94 23.00 23.10 T:aes128n8clocv1 23.17 23.26 23.31 T:ketjesrv2 24.68 24.71 24.76 T:aes128n8silcv1 24.66 24.77 25.16 T:aes128n12silcv1 28.81 28.84 28.89 T:ketjesrv1 29.88 30.54 30.96 T:riverkeyakv1 31.22 31.24 31.35 T:aeadaes128ocbtaglen64v1 31.42 31.45 31.52 T:aeadaes128ocbtaglen96v1 35.90 36.90 37.02 T:aeadaes192ocbtaglen64v1 36.89 36.94 36.99 T:aeadaes192ocbtaglen96v1 42.47 42.51 42.60 T:aeadaes256ocbtaglen64v1 42.53 42.61 42.76 T:aeadaes256ocbtaglen96v1 44.70 44.92 44.99 T:proest128otrv1 59.42 60.50 60.59 T:ketjejrv2 64.83 65.43 66.38 T:ketjejrv1 67.55 71.62 71.69 T:present80n6t4silcv3 114.77 115.09 116.68 T:deoxysneq128128v13 121.15 121.25 121.52 T:twine80n6clocv1 123.83 126.33 127.61 T:led80n6t4silcv3 139.17 139.67 140.06 T:aezv1 156.62 156.79 156.92 T:deoxyseq128128v13 165.25 165.53 165.61 T:deoxysneq256128v13 214.11 214.27 214.94 T:deoxyseq256128v13 277.48 279.40 301.12 aes256gcmv1 472.29 489.34 524.49 T:acorn128 2167.48 2177.06 2182.65 T:led80n6silcv1 2176.83 2183.70 2183.97 T:led80n6t4silcv2 3326.29 3328.82 3331.90 T:present80n6silcv1 3327.14 3329.88 3333.30 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.12? 0.14? 0.14? T:aezv3 0.13? 0.14? 0.15? T:aezv4 0.13? 0.15? 0.15? T:aezv5 0.17? 0.18? 0.19? T:aeadaes128ocbtaglen128v1 0.18? 0.19? 0.20? T:aegis128l 0.23 0.24 0.25 aegis128l -0.05? 0.24? 0.54? T:aeadaes256ocbtaglen128v1 0.28 0.29 0.30 T:tiaoxinv1 0.32 0.32 0.32 T:aegis128 0.32? 0.33? 0.36? T:tiaoxinv2 0.32 0.33 0.33 T:aegis256 0.32? 0.38? 0.39? aegis256 0.40? 0.40? 0.67? T:aeadaes192ocbtaglen128v1 0.40? 0.43? 0.45? T:aes128gcmv1 0.44 0.44 0.45 T:aes128otrsv3 0.44 0.44 0.45 T:aes128otrcv3 0.45? 0.49? 0.53? T:aes256gcmv1 0.50 0.50 0.51 T:morus1280128v1 0.50 0.51 0.51 T:morus1280128v2 0.49 0.51 0.51 T:morus1280256v2 0.52 0.53 0.55 T:morus1280256v1 0.58 0.58 0.59 T:aes256otrsv3 0.58 0.59 0.59 T:aes256otrcv3 0.59 0.60 0.61 T:deoxysi128v141 0.68 0.70 0.72 T:deoxysi256v141 0.72 0.73 0.77 T:deoxysneq256128v1 0.73 0.75 0.79 T:oceankeyakv2 0.76 0.76 0.78 T:deoxysneq128128v1 0.78 0.79 0.80 T:morus640128v2 0.76 0.79 0.80 T:morus640128v1 0.86 0.87 0.88 T:norx6444v3 0.89? 0.96? 1.06? T:lunarkeyakv2 1.14? 1.22? 1.30? T:colm0v1 1.25 1.26 1.27 T:deoxysii128v141 1.24 1.29 1.36 T:aes128otrpv3 1.35 1.37 1.39 T:deoxyseq128128v1 1.49 1.50 1.51 T:deoxysii256v141 1.46 1.51 1.58 T:seakeyakv2 1.55 1.56 1.58 T:deoxyseq256128v1 1.68 1.75 1.81 T:aes256otrpv3 2.14 2.15 2.17 T:norx6441v3 2.14 2.15 2.17 T:norx6441v2 2.45 2.56 2.67 T:aes128n8t8silcv2 2.45 2.56 2.67 T:aes128n12t8silcv2 2.56 2.56 2.61 T:aes128n12t8clocv2 2.56 2.56 2.62 T:aes128n12t8clocv3 2.56 2.56 2.62 T:aes128n8t8clocv2 2.59 2.61 2.64 T:norx6441v1 2.45 2.67 2.67 T:aes128n12t8silcv3 3.14 3.17 3.19 T:norx6444v2 3.17 3.22 3.26 T:lakekeyakv1 3.22 3.24 3.28 T:norx6461v3 3.22 3.24 3.30 T:norx6461v2 3.30 3.35 3.42 T:lakekeyakv2 3.58 3.59 3.61 T:norx3241v2 3.58 3.60 3.62 T:norx3241v3 3.69 3.72 3.75 T:norx6444v1 3.86 3.88 4.01 T:norx6461v1 4.30 4.34 4.35 T:norx3241v1 5.24 5.26 5.27 T:ascon128av11 5.31 5.31 5.32 ascon128av12 5.31 5.32 5.35 T:norx3261v3 5.32 5.33 5.34 T:norx3261v2 5.31 5.35 5.51 T:ketjemajorv2 5.50 5.50 5.52 T:ascon96v1 5.72 5.75 5.86 T:aesjambuv1 7.01 7.01 7.01 T:acorn128v3 7.26 7.26 7.28 T:acorn128v2 7.30 7.31 7.31 T:norx3261v1 7.59 7.61 7.64 T:ketjeminorv2 7.63 7.63 7.64 ascon128v12 7.87 7.88 7.89 T:ascon128v11 7.87 7.89 7.89 T:ascon128v1 7.93 7.95 7.99 T:riverkeyakv2 10.38? 12.03? 15.56? T:oceankeyakv1 13.19 13.23 13.26 T:aes128otrpv1 13.17 13.23 13.28 T:aes128otrpv2 13.16 13.26 13.75 T:aes128otrsv2 13.27 13.33 13.53 T:aes128otrsv1 17.07 17.08 17.14 T:aes256otrsv1 17.09 17.14 17.19 T:aes256otrsv2 17.11 17.14 17.19 T:aes256otrpv1 17.09 17.16 17.23 T:aes256otrpv2 18.34 18.38 18.42 T:proest256otrv1 19.96 20.43 20.49 T:twine80n6t4clocv2 21.40 21.43 21.73 T:twine80n6t4clocv3 22.95 22.98 23.01 T:aes128n12clocv1 22.96 23.01 23.06 T:aes128n8clocv1 23.23 23.27 23.38 T:ketjesrv2 24.66 24.69 24.75 T:aes128n8silcv1 24.66 24.74 25.14 T:aes128n12silcv1 28.77 28.83 28.88 T:ketjesrv1 29.96 30.53 30.96 T:riverkeyakv1 31.20 31.22 31.26 T:aeadaes128ocbtaglen64v1 31.34 31.44 31.48 T:aeadaes128ocbtaglen96v1 36.82 36.86 36.92 T:aeadaes192ocbtaglen64v1 36.89 37.00 37.18 T:aeadaes192ocbtaglen96v1 42.44 42.51 42.62 T:aeadaes256ocbtaglen96v1 42.51 42.57 42.70 T:aeadaes256ocbtaglen64v1 44.82 44.94 45.07 T:proest128otrv1 59.47 60.46 60.61 T:ketjejrv2 64.85 65.02 65.28 T:ketjejrv1 71.55 71.62 71.69 T:present80n6t4silcv3 115.07 115.43 116.58 T:deoxysneq128128v13 121.34 121.86 121.99 T:twine80n6clocv1 124.34 125.06 127.67 T:led80n6t4silcv3 138.46 138.62 138.97 T:aezv1 156.46 156.58 156.75 T:deoxyseq128128v13 165.34 165.40 165.51 T:deoxysneq256128v13 214.42 214.97 215.69 T:deoxyseq256128v13 271.61 273.74 282.11 aes256gcmv1 493.76 508.85 547.89 T:acorn128 2170.01 2171.19 2175.97 T:led80n6silcv1 2166.80 2184.77 2187.64 T:led80n6t4silcv2 3325.77 3328.10 3329.65 T:present80n6silcv1 3329.87 3330.72 3332.04 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.11? 0.12? 0.14? T:tiaoxinv2 0.12? 0.13? 0.14? T:tiaoxinv1 0.13? 0.17? 0.21? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 T:aegis128l 0.17 0.17 0.18 aegis128l 0.24 0.25 0.26 T:aezv3 0.12? 0.26? 0.38? T:aeadaes256ocbtaglen128v1 0.25 0.26 0.27 T:aezv5 0.24? 0.27? 0.31? T:aezv4 0.32 0.32 0.32 T:aegis128 0.32 0.32 0.32 T:aegis256 0.32 0.32 0.33 aegis256 0.33 0.35 0.36 T:aes128gcmv1 0.36? 0.38? 0.40? T:aes256gcmv1 0.19? 0.39? 0.41? T:aeadaes192ocbtaglen128v1 0.42 0.42 0.43 T:aes128otrcv3 0.43 0.45 0.45 T:morus1280256v1 0.48 0.48 0.49 T:morus1280128v1 0.48 0.48 0.49 T:morus1280256v2 0.48 0.49 0.50 T:morus1280128v2 0.56 0.56 0.56 T:aes256otrcv3 0.59 0.62 0.63 T:deoxysneq128128v1 0.61 0.63 0.65 T:oceankeyakv2 0.61 0.66 0.67 T:deoxysi128v141 0.70 0.73 0.75 T:morus640128v2 0.73 0.74 0.74 T:morus640128v1 0.71 0.75 0.76 T:deoxysi256v141 0.77 0.79 0.83 T:deoxysneq256128v1 0.86 0.88 0.90 T:colm0v1 0.91 0.93 0.99 T:lunarkeyakv2 0.96 1.00 1.01 T:deoxysii128v141 0.96 1.00 1.02 T:deoxyseq128128v1 1.17 1.19 1.22 T:seakeyakv2 1.16 1.19 1.21 T:deoxysii256v141 1.17 1.20 1.24 T:deoxyseq256128v1 1.24 1.24 1.25 T:aes128otrpv3 1.48 1.49 1.49 T:aes128otrsv3 1.50 1.51 1.51 T:norx6444v3 1.65 1.67 1.69 T:aes256otrpv3 2.05 2.06 2.06 T:aes256otrsv3 2.10 2.11 2.13 T:norx6441v3 2.13 2.14 2.14 T:norx6441v2 2.54 2.56 2.57 T:norx6441v1 2.58 2.58 2.59 T:aes128n12t8clocv2 2.59 2.59 2.59 T:aes128n8t8clocv2 2.59 2.59 2.59 T:aes128n12t8silcv3 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.59 T:aes128n12t8silcv2 2.59 2.59 2.59 T:aes128n12t8clocv3 2.91 2.94 2.99 T:lakekeyakv2 3.13 3.16 3.20 T:norx6461v3 3.15 3.19 3.23 T:lakekeyakv1 3.19 3.20 3.20 T:norx6461v2 3.28 3.30 3.32 T:norx6444v2 3.52 3.52 3.53 T:norx3241v2 3.52 3.52 3.52 T:norx3241v3 3.60 3.61 3.63 T:norx6444v1 3.76 3.82 3.84 T:norx6461v1 4.22 4.23 4.23 T:norx3241v1 4.80 4.85 4.91 T:ketjemajorv2 5.27 5.27 5.27 T:norx3261v2 5.27 5.27 5.27 T:norx3261v3 5.28 5.29 5.30 ascon128av12 5.29 5.31 5.33 T:aesjambuv1 5.34 5.35 5.36 T:ascon128av11 5.38 5.38 5.39 T:ascon96v1 5.52 5.56 5.59 T:riverkeyakv2 6.76 6.78 6.79 T:acorn128v2 6.81 6.84 6.86 T:ketjeminorv2 7.01 7.02 7.03 T:acorn128v3 7.52 7.52 7.53 T:norx3261v1 7.63 7.63 7.64 ascon128v12 8.06 8.07 8.08 T:ascon128v1 8.06 8.07 8.07 T:ascon128v11 11.12? 11.97? 14.51? T:oceankeyakv1 12.33 12.37 12.38 T:aes128otrpv1 11.80 12.37 12.39 T:aes128otrpv2 12.42 12.44 12.47 T:aes128otrsv1 12.38 12.55 13.25 T:aes128otrsv2 16.20 16.21 16.24 T:aes256otrpv1 16.24 16.28 16.30 T:aes256otrpv2 16.26 16.29 16.31 T:aes256otrsv2 16.26 16.29 16.31 T:aes256otrsv1 16.79 16.81 16.85 T:aes128n12clocv1 16.82 16.86 16.89 T:aes128n8clocv1 18.57 18.59 18.63 T:aes128n8silcv1 18.59 18.62 18.65 T:proest256otrv1 18.61 18.70 18.99 T:aes128n12silcv1 19.65 19.69 20.20 T:twine80n6t4clocv2 21.34 21.36 21.62 T:twine80n6t4clocv3 23.09 23.12 23.14 T:ketjesrv2 23.21 23.25 23.38 T:aeadaes128ocbtaglen64v1 23.25 23.32 23.36 T:aeadaes128ocbtaglen96v1 24.36 24.38 24.46 T:ketjesrv1 26.95 26.97 27.12 T:aeadaes192ocbtaglen64v1 26.97 27.04 27.14 T:aeadaes192ocbtaglen96v1 28.75? 29.44? 33.79? T:riverkeyakv1 30.83 30.89 31.22 T:aeadaes256ocbtaglen64v1 30.99 31.05 31.13 T:aeadaes256ocbtaglen96v1 45.55 45.66 46.22 T:proest128otrv1 58.65 58.75 58.78 T:ketjejrv1 58.39 58.95 59.10 T:ketjejrv2 67.44 67.73 71.02 T:present80n6t4silcv3 76.63? 77.97? 97.22? T:deoxysneq128128v13 91.67 91.95 92.04 T:aezv1 92.13 92.35 92.46 T:twine80n6clocv1 106.62 106.75 106.81 T:deoxysneq256128v13 117.69 117.89 118.44 T:deoxyseq128128v13 127.41 131.15 131.73 T:led80n6t4silcv3 160.93 161.53 161.59 T:deoxyseq256128v13 274.00 275.69 283.96 aes256gcmv1 505.27 524.77 531.27 T:acorn128 1630.80 1632.11 1633.29 T:led80n6silcv1 1634.76 1635.03 1638.17 T:led80n6t4silcv2 2494.14 2495.66 2499.48 T:present80n6t4silcv2 2495.57 2497.78 2499.58 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.17 0.17 0.18 T:aegis128l 0.14? 0.17? 0.20? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 aegis128l 0.18? 0.20? 0.20? T:tiaoxinv1 0.20? 0.22? 0.23? T:tiaoxinv2 0.10? 0.22? 0.38? T:aeadaes256ocbtaglen128v1 0.24 0.25 0.25 T:aezv3 0.25 0.26 0.26 T:aezv5 0.25? 0.26? 0.30? T:aezv4 0.32 0.32 0.32 T:aegis128 0.33 0.33 0.33 T:aegis256 0.32 0.33 0.33 aegis256 0.33? 0.35? 0.37? T:aes128gcmv1 0.36? 0.38? 0.40? T:aes256gcmv1 0.26? 0.39? 0.52? T:aeadaes192ocbtaglen128v1 0.44 0.44 0.45 T:aes128otrcv3 0.47 0.48 0.49 T:morus1280256v1 0.49 0.49 0.50 T:morus1280128v2 0.47 0.49 0.50 T:morus1280256v2 0.47 0.50 0.50 T:morus1280128v1 0.57 0.58 0.58 T:aes256otrcv3 0.61 0.63 0.65 T:oceankeyakv2 0.64 0.67 0.69 T:deoxysi128v141 0.70 0.73 0.76 T:deoxysneq128128v1 0.74 0.75 0.76 T:morus640128v2 0.75 0.75 0.76 T:morus640128v1 0.74 0.79 0.81 T:deoxysi256v141 0.76 0.81 0.84 T:deoxysneq256128v1 0.87 0.88 0.88 T:colm0v1 0.97 1.00 1.01 T:deoxysii128v141 0.95 1.00 1.04 T:lunarkeyakv2 1.05 1.08 1.12 T:deoxyseq128128v1 1.14 1.19 1.20 T:deoxysii256v141 1.20 1.22 1.24 T:seakeyakv2 1.22 1.25 1.25 T:aes128otrpv3 1.27 1.28 1.33 T:deoxyseq256128v1 1.50 1.50 1.51 T:aes128otrsv3 1.50 1.51 1.53 T:norx6444v3 1.64 1.66 1.68 T:aes256otrpv3 2.07 2.08 2.08 T:aes256otrsv3 2.10 2.12 2.14 T:norx6441v2 2.10 2.12 2.13 T:norx6441v3 2.53 2.55 2.56 T:norx6441v1 2.51 2.56 2.56 T:aes128n12t8silcv2 2.55 2.56 2.62 T:aes128n8t8silcv2 2.56 2.56 2.62 T:aes128n12t8silcv3 2.56 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n12t8clocv2 2.93 2.97 3.00 T:lakekeyakv2 3.12 3.15 3.19 T:lakekeyakv1 3.15 3.16 3.17 T:norx6461v2 3.15 3.16 3.20 T:norx6461v3 3.25 3.26 3.28 T:norx6444v2 3.55 3.55 3.56 T:norx3241v2 3.54 3.56 3.56 T:norx3241v3 3.61 3.62 3.64 T:norx6444v1 3.81 3.82 3.83 T:norx6461v1 4.28 4.29 4.29 T:norx3241v1 4.68 4.74 4.81 T:ketjemajorv2 5.22 5.22 5.23 T:ascon128av11 5.28 5.28 5.29 ascon128av12 5.29 5.30 5.30 T:norx3261v2 5.30 5.31 5.32 T:norx3261v3 5.34 5.35 5.35 T:ascon96v1 5.54 5.55 5.60 T:aesjambuv1 5.63 5.65 5.67 T:riverkeyakv2 6.98 7.00 7.04 T:ketjeminorv2 7.00 7.01 7.02 T:acorn128v3 7.00 7.01 7.02 T:acorn128v2 7.41 7.42 7.46 T:norx3261v1 7.62 7.63 7.64 ascon128v12 7.81 7.82 7.82 T:ascon128v1 7.81 7.82 7.83 T:ascon128v11 11.12? 11.93? 14.46? T:oceankeyakv1 12.57 12.58 12.61 T:aes128otrpv1 12.55 12.59 12.63 T:aes128otrpv2 12.61 12.65 12.75 T:aes128otrsv1 12.59 12.78 13.08 T:aes128otrsv2 16.44 16.47 16.56 T:aes256otrpv2 16.45 16.48 16.51 T:aes256otrpv1 16.47 16.50 16.55 T:aes256otrsv1 16.44 16.51 16.57 T:aes256otrsv2 17.26 17.28 17.29 T:aes128n8clocv1 17.27 17.30 17.31 T:aes128n12clocv1 18.54 18.57 18.60 T:aes128n8silcv1 18.54 18.58 18.61 T:proest256otrv1 18.57 18.63 19.06 T:aes128n12silcv1 19.67 19.70 20.00 T:twine80n6t4clocv2 21.32 21.62 21.64 T:twine80n6t4clocv3 21.82 21.87 21.91 T:ketjesrv2 25.16 25.20 25.22 T:ketjesrv1 27.18 27.19 27.23 T:aeadaes128ocbtaglen64v1 27.20 27.26 27.27 T:aeadaes128ocbtaglen96v1 28.72? 30.43? 34.03? T:riverkeyakv1 31.93 31.96 32.08 T:aeadaes192ocbtaglen64v1 31.97 31.99 32.08 T:aeadaes192ocbtaglen96v1 36.68 36.70 37.00 T:aeadaes256ocbtaglen96v1 36.66 36.72 36.76 T:aeadaes256ocbtaglen64v1 45.62 45.84 45.92 T:proest128otrv1 58.60 59.04 59.15 T:ketjejrv2 59.65 59.69 60.30 T:ketjejrv1 71.25 71.29 71.54 T:present80n6t4silcv3 90.99 91.44 91.52 T:twine80n6clocv1 91.52 91.72 91.88 T:aezv1 95.97? 96.76? 107.36? T:deoxysneq128128v13 117.19 117.33 117.50 T:deoxyseq128128v13 125.45 131.05 134.10 T:led80n6t4silcv3 136.13 136.20 136.29 T:deoxysneq256128v13 160.62 161.03 161.10 T:deoxyseq256128v13 272.98 282.36 295.47 aes256gcmv1 506.24 529.20 557.32 T:acorn128 1631.86 1632.84 1633.38 T:led80n6silcv1 1633.03 1634.21 1649.34 T:led80n6t4silcv2 2494.83 2495.64 2500.45 T:present80n6silcv1 2496.76 2498.48 2500.52 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.13? 0.13? 0.16? T:aezv3 0.11? 0.14? 0.14? T:aezv5 0.14? 0.17? 0.17? T:aezv4 0.17 0.17 0.17 T:aegis128l 0.17 0.17 0.18 T:aeadaes128ocbtaglen128v1 0.19? 0.19? 0.22? T:tiaoxinv1 0.17? 0.20? 0.21? aegis128l 0.21? 0.22? 0.24? T:tiaoxinv2 0.24 0.24 0.25 T:aeadaes256ocbtaglen128v1 0.31 0.32 0.32 T:aegis128 0.33 0.33 0.33 T:aegis256 0.34 0.35 0.36 aegis256 0.34 0.36 0.37 T:aes128gcmv1 0.36? 0.39? 0.40? T:aes256gcmv1 0.39 0.39 0.39 T:aeadaes192ocbtaglen128v1 0.44 0.44 0.45 T:aes128otrcv3 0.46 0.48 0.50 T:morus1280256v1 0.47 0.49 0.50 T:morus1280256v2 0.48 0.49 0.50 T:morus1280128v2 0.47 0.49 0.50 T:morus1280128v1 0.58 0.58 0.58 T:aes256otrcv3 0.63 0.64 0.65 T:oceankeyakv2 0.65 0.67 0.69 T:deoxysi128v141 0.73 0.73 0.78 T:deoxysneq128128v1 0.74 0.75 0.76 T:morus640128v2 0.75 0.75 0.76 T:morus640128v1 0.78 0.79 0.80 T:deoxysi256v141 0.80 0.81 0.82 T:deoxysneq256128v1 0.84 0.88 0.91 T:colm0v1 0.96 0.99 1.05 T:lunarkeyakv2 1.00 1.00 1.01 T:deoxysii128v141 1.07 1.07 1.08 T:deoxyseq128128v1 1.19 1.19 1.19 T:deoxysii256v141 1.19 1.22 1.24 T:seakeyakv2 1.22 1.25 1.29 T:aes128otrpv3 1.28 1.28 1.30 T:deoxyseq256128v1 1.50 1.50 1.51 T:aes128otrsv3 1.51 1.51 1.52 T:norx6444v3 1.61 1.67 1.70 T:aes256otrpv3 2.07 2.08 2.08 T:aes256otrsv3 2.09 2.10 2.13 T:norx6441v3 2.12 2.12 2.13 T:norx6441v2 2.53 2.55 2.57 T:norx6441v1 2.52 2.56 2.60 T:aes128n12t8clocv3 2.50 2.56 2.62 T:aes128n12t8silcv2 2.50 2.56 2.62 T:aes128n8t8silcv2 2.56 2.56 2.60 T:aes128n8t8clocv2 2.54 2.56 2.59 T:aes128n12t8clocv2 2.55 2.62 2.62 T:aes128n12t8silcv3 2.89 2.94 2.97 T:lakekeyakv2 3.14 3.15 3.20 T:norx6461v3 3.14 3.16 3.19 T:lakekeyakv1 3.16 3.18 3.19 T:norx6461v2 3.28 3.28 3.29 T:norx6444v2 3.54 3.55 3.56 T:norx3241v3 3.55 3.56 3.56 T:norx3241v2 3.61 3.63 3.64 T:norx6444v1 3.79 3.82 3.84 T:norx6461v1 4.28 4.29 4.30 T:norx3241v1 4.72 4.76 4.85 T:ketjemajorv2 5.22 5.22 5.23 T:ascon128av11 5.28 5.28 5.29 ascon128av12 5.29 5.29 5.29 T:norx3261v3 5.30 5.30 5.31 T:norx3261v2 5.34 5.35 5.36 T:ascon96v1 5.52 5.55 5.59 T:aesjambuv1 5.64 5.66 5.69 T:riverkeyakv2 7.01 7.01 7.02 T:acorn128v3 7.01 7.01 7.02 T:acorn128v2 7.00 7.03 7.06 T:ketjeminorv2 7.41 7.41 7.46 T:norx3261v1 7.63 7.63 7.63 ascon128v12 7.81 7.82 7.82 T:ascon128v11 7.81 7.82 7.82 T:ascon128v1 11.20? 12.20? 14.39? T:oceankeyakv1 12.55 12.59 12.61 T:aes128otrpv1 12.56 12.59 12.61 T:aes128otrpv2 12.62 12.69 12.79 T:aes128otrsv1 12.60 12.80 13.11 T:aes128otrsv2 16.44 16.48 16.50 T:aes256otrpv1 16.44 16.48 16.52 T:aes256otrpv2 16.48 16.51 16.54 T:aes256otrsv2 16.49 16.52 16.54 T:aes256otrsv1 17.27 17.30 17.32 T:aes128n12clocv1 17.29 17.32 17.34 T:aes128n8clocv1 18.55 18.59 18.61 T:aes128n8silcv1 18.57 18.60 18.62 T:proest256otrv1 18.55 18.61 19.03 T:aes128n12silcv1 19.70 20.20 20.22 T:twine80n6t4clocv2 21.27 21.28 21.29 T:twine80n6t4clocv3 21.79 21.89 21.90 T:ketjesrv2 25.13 25.20 25.21 T:ketjesrv1 27.17 27.20 27.23 T:aeadaes128ocbtaglen96v1 27.23 27.34 27.35 T:aeadaes128ocbtaglen64v1 28.96? 29.49? 33.85? T:riverkeyakv1 31.98 32.04 32.07 T:aeadaes192ocbtaglen96v1 31.93 32.08 32.11 T:aeadaes192ocbtaglen64v1 34.93 36.70 36.73 T:aeadaes256ocbtaglen96v1 36.65 36.70 36.74 T:aeadaes256ocbtaglen64v1 45.68 45.78 46.01 T:proest128otrv1 58.24 59.09 59.30 T:ketjejrv2 59.54 59.68 59.79 T:ketjejrv1 67.22 71.12 71.52 T:present80n6t4silcv3 91.34 91.53 92.06 T:twine80n6clocv1 91.53 91.66 92.15 T:aezv1 95.70? 96.70? 107.65? T:deoxysneq128128v13 117.33 117.41 117.53 T:deoxyseq128128v13 125.12 126.24 133.47 T:led80n6t4silcv3 135.93 136.04 136.08 T:deoxysneq256128v13 160.54 160.75 161.06 T:deoxyseq256128v13 271.99? 278.53? 303.64? aes256gcmv1 508.83 522.62 529.04 T:acorn128 1630.06 1632.73 1637.33 T:led80n6t4silcv2 1632.49 1635.42 1635.78 T:led80n6silcv1 2494.62 2495.47 2495.73 T:present80n6t4silcv2 2494.69 2496.27 2497.89 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv1 0.10? 0.11? 0.12? T:tiaoxinv2 0.12? 0.13? 0.16? T:aezv5 0.13 0.14 0.14 T:aezv4 0.13? 0.14? 0.15? T:aezv3 0.15 0.15 0.16 T:aegis128l 0.15 0.16 0.16 aegis128l 0.12? 0.17? 0.20? T:aeadaes128ocbtaglen128v1 -0.02? 0.24? 0.51? T:aeadaes256ocbtaglen128v1 0.23? 0.26? 0.32? T:aes256gcmv1 0.22? 0.26? 0.27? T:aes128gcmv1 0.30 0.30 0.32 T:aegis128 0.32 0.32 0.32 T:aegis256 0.32 0.32 0.32 aegis256 0.20? 0.38? 0.66? T:aeadaes192ocbtaglen128v1 0.41? 0.44? 0.54? T:aes128otrcv3 0.43 0.44 0.45 T:morus1280256v1 0.46 0.47 0.49 T:morus1280128v2 0.46 0.47 0.51 T:morus1280256v2 0.46 0.47 0.51 T:morus1280128v1 0.48 0.49 0.52 T:oceankeyakv2 0.49 0.53 0.54 T:colm0v1 0.58 0.59 0.59 T:aes256otrcv3 0.57? 0.62? 0.65? T:lunarkeyakv2 0.60 0.62 0.63 T:deoxysneq128128v1 0.70 0.72 0.72 T:morus640128v1 0.67 0.73 0.73 T:morus640128v2 0.73 0.73 0.74 T:deoxysii128v141 0.73 0.75 0.76 T:deoxysi128v141 0.77 0.78 0.80 T:deoxyseq128128v1 0.81? 0.88? 0.93? T:deoxysneq256128v1 0.87 0.89 0.90 T:deoxysii256v141 0.88 0.90 0.91 T:deoxysi256v141 1.03 1.04 1.05 T:deoxyseq256128v1 1.08 1.12 1.16 T:seakeyakv2 1.19 1.21 1.22 T:aes128otrpv3 1.62 1.63 1.68 T:aes256otrpv3 2.02 2.03 2.04 T:norx6441v3 2.03 2.04 2.05 T:norx6441v2 2.14 2.15 2.16 T:norx6444v3 2.45 2.46 2.52 T:norx6441v1 2.54 2.54 2.56 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n8t8silcv2 2.55 2.56 2.58 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128otrsv3 2.56 2.56 2.56 T:aes128n12t8silcv3 2.56 2.57 2.58 T:aes128n12t8clocv3 2.56 2.57 2.58 T:aes128n8t8clocv2 2.55 2.60 2.63 T:lakekeyakv2 2.89 2.96 3.07 T:lakekeyakv1 3.01 3.16 3.19 T:norx6461v3 3.15 3.16 3.18 T:norx6461v2 3.36 3.37 3.38 T:norx6444v2 3.52 3.52 3.53 T:norx3241v3 3.52 3.52 3.53 T:norx3241v2 3.52 3.54 3.56 T:norx6444v1 3.56 3.56 3.57 T:aes256otrsv3 3.63 3.64 3.78 T:norx6461v1 3.98 4.09 4.18 T:ketjemajorv2 4.22 4.23 4.23 T:norx3241v1 5.19 5.19 5.19 T:ascon96v1 5.24 5.24 5.25 ascon128av12 5.25 5.25 5.28 T:aesjambuv1 5.25 5.25 5.26 T:ascon128av11 5.27 5.27 5.27 T:norx3261v3 5.27 5.27 5.28 T:norx3261v2 5.30 5.32 5.32 T:riverkeyakv2 6.37 6.41 6.46 T:ketjeminorv2 6.73 6.75 6.76 T:acorn128v2 7.00 7.01 7.01 T:acorn128v3 7.49 7.50 7.50 ascon128v12 7.52 7.53 7.53 T:norx3261v1 7.86 7.88 7.88 T:ascon128v1 7.86 7.88 7.88 T:ascon128v11 11.58 11.62 11.64 T:aes128n8clocv1 11.60 11.62 11.63 T:aes128n12clocv1 11.87 11.93 11.96 T:aes128otrpv1 11.18 11.96 11.98 T:aes128otrpv2 12.03 12.05 12.08 T:aes128otrsv1 11.95 12.17 12.28 T:aes128otrsv2 10.85? 12.23? 14.59? T:oceankeyakv1 12.42 12.44 12.47 T:aes128n8silcv1 12.39 12.46 12.93 T:aes128n12silcv1 15.72 15.77 15.85 T:aes256otrpv1 15.73 15.78 15.81 T:aes256otrpv2 15.80 15.85 15.86 T:aes256otrsv1 15.84 15.86 15.90 T:aes256otrsv2 18.72 18.79 18.79 T:proest256otrv1 19.44 19.98 20.02 T:twine80n6t4clocv2 20.25 20.31 20.37 T:ketjesrv2 21.13 21.15 21.47 T:twine80n6t4clocv3 21.46 21.60 21.61 T:ketjesrv1 23.10 23.13 23.21 T:aeadaes128ocbtaglen96v1 23.13 23.15 23.24 T:aeadaes128ocbtaglen64v1 26.94 27.02 27.10 T:aeadaes192ocbtaglen64v1 27.06 27.11 27.15 T:aeadaes192ocbtaglen96v1 27.57? 28.82? 37.19? T:riverkeyakv1 30.80 30.87 31.02 T:aeadaes256ocbtaglen64v1 30.79 30.92 31.31 T:aeadaes256ocbtaglen96v1 44.36 44.55 44.67 T:aezv1 46.20 46.35 46.55 T:proest128otrv1 54.22 54.28 54.29 T:ketjejrv1 57.41 57.69 57.77 T:ketjejrv2 61.31 61.47 61.64 T:twine80n6clocv1 70.59 70.88 71.11 T:present80n6t4silcv3 76.66? 78.18? 96.86? T:deoxysneq128128v13 78.05 78.20 78.32 T:deoxyseq128128v13 106.53 106.65 106.77 T:deoxysneq256128v13 107.01 107.02 107.09 T:deoxyseq256128v13 125.31 126.60 126.65 T:led80n6t4silcv3 271.70 273.38 295.12 aes256gcmv1 502.72 519.62 537.13 T:acorn128 1086.73 1089.15 1089.82 T:led80n6silcv1 1087.56 1090.35 1090.72 T:led80n6t4silcv2 1660.62 1663.24 1663.84 T:present80n6t4silcv2 1663.80 1665.53 1670.92 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.08? 0.10? 0.11? T:tiaoxinv1 0.10? 0.11? 0.12? T:tiaoxinv2 0.13 0.13 0.14 T:aezv3 0.13? 0.14? 0.15? T:aezv5 0.14? 0.15? 0.16? T:aezv4 0.16 0.16 0.16 T:aegis128l 0.15 0.16 0.16 aegis128l 0.16? 0.17? 0.18? T:aeadaes128ocbtaglen128v1 -0.03? 0.23? 0.51? T:aeadaes256ocbtaglen128v1 0.26? 0.28? 0.30? T:aes128gcmv1 0.25? 0.28? 0.33? T:aes256gcmv1 0.30 0.31 0.31 T:aegis128 0.32 0.32 0.32 T:aegis256 0.32 0.32 0.32 aegis256 0.10? 0.37? 0.37? T:aeadaes192ocbtaglen128v1 0.42 0.43 0.44 T:morus1280256v1 0.44 0.45 0.45 T:aes128otrcv3 0.45 0.48 0.50 T:morus1280256v2 0.46 0.48 0.50 T:morus1280128v1 0.45? 0.48? 0.51? T:morus1280128v2 0.47 0.50 0.52 T:oceankeyakv2 0.51 0.53 0.54 T:colm0v1 0.58 0.59 0.59 T:aes256otrcv3 0.56? 0.61? 0.67? T:lunarkeyakv2 0.63? 0.70? 0.78? T:deoxysneq128128v1 0.71 0.72 0.73 T:morus640128v1 0.72 0.73 0.74 T:morus640128v2 0.73 0.74 0.74 T:deoxysii128v141 0.73 0.74 0.76 T:deoxysi128v141 0.77 0.78 0.79 T:deoxyseq128128v1 0.79? 0.88? 0.93? T:deoxysneq256128v1 0.88 0.89 0.90 T:deoxysii256v141 0.86 0.90 0.91 T:deoxysi256v141 0.99 1.00 1.02 T:deoxyseq256128v1 1.09 1.14 1.17 T:seakeyakv2 1.20 1.21 1.28 T:aes128otrpv3 1.61 1.64 1.76 T:aes256otrpv3 2.03 2.09 2.13 T:norx6441v3 2.08 2.10 2.12 T:norx6441v2 2.14 2.15 2.16 T:norx6444v3 2.50 2.52 2.54 T:norx6441v1 2.56 2.56 2.65 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128otrsv3 2.56 2.56 2.65 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.57 2.57 T:aes128n8t8clocv2 2.56 2.58 2.59 T:aes128n12t8clocv3 2.51 2.59 2.61 T:lakekeyakv2 3.00 3.02 3.03 T:norx6461v2 3.02 3.07 3.10 T:lakekeyakv1 3.01 3.14 3.16 T:norx6461v3 3.35 3.37 3.39 T:norx6444v2 3.52 3.52 3.53 T:norx3241v2 3.52 3.52 3.52 T:norx3241v3 3.52 3.56 3.57 T:norx6444v1 3.56 3.56 3.57 T:aes256otrsv3 3.62 3.78 3.80 T:norx6461v1 4.01 4.10 4.18 T:ketjemajorv2 4.22 4.22 4.23 T:norx3241v1 5.18 5.19 5.20 T:ascon128av11 5.19 5.19 5.20 T:ascon96v1 5.24 5.25 5.25 ascon128av12 5.25 5.25 5.28 T:aesjambuv1 5.27 5.27 5.28 T:norx3261v2 5.27 5.27 5.27 T:norx3261v3 5.30 5.32 5.34 T:riverkeyakv2 6.42 6.43 6.47 T:ketjeminorv2 6.75 6.77 6.77 T:acorn128v2 7.00 7.02 7.02 T:acorn128v3 7.52 7.53 7.53 T:norx3261v1 7.62 7.62 7.63 ascon128v12 7.74 7.75 7.77 T:ascon128v1 7.74 7.76 7.77 T:ascon128v11 11.57 11.60 11.63 T:aes128n12clocv1 11.61 11.63 11.65 T:aes128n8clocv1 11.16 11.92 11.99 T:aes128otrpv2 11.89 11.94 12.02 T:aes128otrpv1 10.86? 11.97? 14.71? T:oceankeyakv1 12.03 12.08 12.16 T:aes128otrsv1 11.96 12.16 12.29 T:aes128otrsv2 12.40 12.42 12.92 T:aes128n12silcv1 12.41 12.44 12.47 T:aes128n8silcv1 15.77 15.83 15.88 T:aes256otrpv1 15.77 15.83 15.86 T:aes256otrpv2 15.81 15.84 15.86 T:aes256otrsv1 15.83 15.87 15.92 T:aes256otrsv2 18.72 18.75 18.80 T:proest256otrv1 19.41 19.53 19.97 T:twine80n6t4clocv2 20.29 20.37 20.40 T:ketjesrv2 21.12 21.16 21.18 T:twine80n6t4clocv3 21.43 21.56 21.63 T:ketjesrv1 23.12 23.15 23.26 T:aeadaes128ocbtaglen64v1 23.11 23.21 23.24 T:aeadaes128ocbtaglen96v1 26.91 26.96 27.07 T:aeadaes192ocbtaglen96v1 26.91 27.08 27.33 T:aeadaes192ocbtaglen64v1 27.57? 28.57? 37.23? T:riverkeyakv1 30.83 30.93 30.99 T:aeadaes256ocbtaglen64v1 30.77 30.98 31.32 T:aeadaes256ocbtaglen96v1 44.57 44.65 44.81 T:aezv1 46.29 46.43 46.62 T:proest128otrv1 54.25 54.37 54.56 T:ketjejrv1 57.10 57.71 57.88 T:ketjejrv2 61.00 61.23 61.99 T:twine80n6clocv1 67.26 67.56 71.12 T:present80n6t4silcv3 78.07 78.16 78.27 T:deoxyseq128128v13 76.87? 78.30? 97.78? T:deoxysneq128128v13 106.61 106.64 106.68 T:deoxysneq256128v13 106.74 106.98 107.11 T:deoxyseq256128v13 126.62 126.75 126.84 T:led80n6t4silcv3 272.30 272.84 274.78 aes256gcmv1 478.05 486.65 507.47 T:acorn128 1085.75 1086.18 1098.39 T:led80n6silcv1 1086.65 1091.10 1091.97 T:led80n6t4silcv2 1661.94 1664.02 1665.79 T:present80n6silcv1 1662.42 1664.34 1665.18 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv1 0.07? 0.11? 0.12? T:tiaoxinv2 0.13 0.13 0.14 T:aezv5 0.13 0.14 0.14 T:aezv3 0.14 0.15 0.15 T:aezv4 0.16 0.16 0.16 T:aegis128l 0.15? 0.16? 0.17? aegis128l 0.17 0.17 0.18 T:aeadaes128ocbtaglen128v1 0.23 0.24 0.25 T:aeadaes256ocbtaglen128v1 0.25? 0.28? 0.31? T:aes256gcmv1 0.26? 0.28? 0.30? T:aes128gcmv1 0.30 0.31 0.31 T:aegis128 0.32 0.32 0.32 T:aegis256 0.32? 0.32? 0.39? aegis256 0.36? 0.36? 0.61? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.43 T:morus1280256v1 0.43 0.44 0.45 T:aes128otrcv3 0.44? 0.46? 0.50? T:morus1280128v2 0.44? 0.48? 0.51? T:morus1280256v2 0.44? 0.48? 0.49? T:morus1280128v1 0.46? 0.49? 0.53? T:oceankeyakv2 0.50 0.51 0.54 T:colm0v1 0.57 0.58 0.59 T:aes256otrcv3 0.52? 0.58? 0.66? T:lunarkeyakv2 0.69 0.70 0.74 T:deoxysneq128128v1 0.71 0.71 0.72 T:morus640128v2 0.72 0.72 0.73 T:morus640128v1 0.73 0.73 0.74 T:deoxysii128v141 0.73 0.74 0.76 T:deoxysi128v141 0.76 0.78 0.79 T:deoxyseq128128v1 0.80? 0.88? 0.96? T:deoxysneq256128v1 0.88 0.89 0.89 T:deoxysii256v141 0.88 0.89 0.90 T:deoxysi256v141 0.99 1.00 1.01 T:deoxyseq256128v1 1.08 1.15 1.18 T:seakeyakv2 1.19 1.26 1.26 T:aes128otrpv3 1.63 1.69 1.75 T:aes256otrpv3 2.03 2.04 2.10 T:norx6441v2 2.03 2.05 2.10 T:norx6441v3 2.15 2.16 2.17 T:norx6444v3 2.50 2.52 2.53 T:norx6441v1 2.56 2.56 2.61 T:aes128n12t8clocv2 2.47 2.56 2.66 T:aes128n8t8clocv2 2.47 2.56 2.66 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128otrsv3 2.56 2.57 2.57 T:aes128n12t8silcv3 2.59 2.62 2.68 T:lakekeyakv2 2.48 2.65 2.65 T:aes128n8t8silcv2 2.48 2.65 2.66 T:aes128n12t8silcv2 3.04 3.07 3.11 T:lakekeyakv1 3.01 3.15 3.17 T:norx6461v3 3.14 3.16 3.18 T:norx6461v2 3.33 3.37 3.42 T:norx6444v2 3.52 3.52 3.53 T:norx3241v3 3.52 3.52 3.53 T:norx3241v2 3.51 3.55 3.57 T:norx6444v1 3.56 3.56 3.63 T:aes256otrsv3 3.77 3.79 3.80 T:norx6461v1 3.99 4.06 4.16 T:ketjemajorv2 4.22 4.22 4.23 T:norx3241v1 5.17 5.19 5.19 T:ascon128av11 5.19 5.19 5.21 T:ascon96v1 5.25 5.25 5.26 ascon128av12 5.24 5.25 5.25 T:aesjambuv1 5.27 5.27 5.27 T:norx3261v2 5.27 5.27 5.28 T:norx3261v3 5.29 5.32 5.33 T:riverkeyakv2 6.39 6.43 6.49 T:ketjeminorv2 6.75 6.76 6.78 T:acorn128v2 7.01 7.01 7.02 T:acorn128v3 7.52 7.52 7.53 T:norx3261v1 7.62 7.62 7.62 ascon128v12 7.74 7.75 7.76 T:ascon128v1 7.74 7.76 7.77 T:ascon128v11 11.56 11.61 11.63 T:aes128n8clocv1 11.61 11.63 11.65 T:aes128n12clocv1 10.77? 11.85? 14.55? T:oceankeyakv1 11.33 11.90 11.99 T:aes128otrpv2 11.88 11.95 11.99 T:aes128otrpv1 12.01 12.09 12.12 T:aes128otrsv1 11.99 12.15 12.32 T:aes128otrsv2 12.41 12.44 12.45 T:aes128n8silcv1 12.41 12.44 12.94 T:aes128n12silcv1 15.74 15.81 15.85 T:aes256otrpv1 15.73 15.81 15.85 T:aes256otrpv2 15.78 15.83 15.87 T:aes256otrsv1 15.86 15.90 15.92 T:aes256otrsv2 18.74 18.80 18.84 T:proest256otrv1 19.49 19.87 20.09 T:twine80n6t4clocv2 20.31 20.35 20.47 T:ketjesrv2 21.15 21.19 21.48 T:twine80n6t4clocv3 21.49 21.54 21.62 T:ketjesrv1 23.15 23.22 23.27 T:aeadaes128ocbtaglen96v1 23.11 23.26 23.49 T:aeadaes128ocbtaglen64v1 26.90 26.95 27.28 T:aeadaes192ocbtaglen64v1 26.93 26.96 27.07 T:aeadaes192ocbtaglen96v1 27.71? 28.49? 37.16? T:riverkeyakv1 30.77 30.98 31.02 T:aeadaes256ocbtaglen96v1 30.83 30.99 31.11 T:aeadaes256ocbtaglen64v1 44.48 44.66 44.72 T:aezv1 46.24 46.48 46.61 T:proest128otrv1 54.25 54.46 54.55 T:ketjejrv1 57.11 57.73 57.86 T:ketjejrv2 61.03 61.28 61.77 T:twine80n6clocv1 67.30 71.07 71.13 T:present80n6t4silcv3 78.16 78.24 78.33 T:deoxyseq128128v13 77.03? 78.40? 98.23? T:deoxysneq128128v13 106.65 106.68 106.72 T:deoxysneq256128v13 106.77 106.85 107.30 T:deoxyseq256128v13 126.27? 126.72? 141.58? T:led80n6t4silcv3 271.20 272.75 278.27 aes256gcmv1 510.36? 580.48? 730.05? T:acorn128 1082.96 1085.39 1087.33 T:led80n6t4silcv2 1089.60 1091.85 1098.45 T:led80n6silcv1 1664.46 1664.72 1674.82 T:present80n6t4silcv2 1665.54 1668.89 1671.62 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.17 0.17 0.18 T:tiaoxinv2 0.17 0.17 0.18 T:tiaoxinv1 0.20 0.20 0.21 T:aegis128l 0.20 0.20 0.21 aegis128l 0.28? 0.28? 0.33? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.31 T:aezv5 0.30 0.30 0.32 T:aezv3 0.30 0.31 0.32 T:aezv4 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.36 aegis256 0.36 0.36 0.36 T:aegis256 0.38? 0.38? 0.55? T:aeadaes256ocbtaglen128v1 0.49 0.50 0.53 T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.57 0.58 0.58 T:morus1280256v1 0.58 0.59 0.60 T:morus1280128v1 0.60 0.60 0.61 T:morus1280128v2 0.60 0.60 0.61 T:morus1280256v2 0.73 0.74 0.74 T:aes256otrcv3 0.74 0.74 0.75 T:deoxysneq128128v1 0.77 0.78 0.78 T:deoxysi128v141 0.81 0.82 0.82 T:morus640128v1 0.81 0.82 0.83 T:morus640128v2 0.91 0.91 0.92 T:deoxysi256v141 0.91 0.91 0.94 T:deoxysneq256128v1 0.95 0.96 0.97 T:colm0v1 1.12 1.13 1.16 T:deoxyseq128128v1 1.17 1.18 1.21 T:deoxysii128v141 1.17 1.19 1.20 T:aes128gcmv1 1.21 1.22 1.25 T:aes256gcmv1 1.35 1.37 1.41 T:deoxyseq256128v1 1.37 1.39 1.40 T:oceankeyakv2 1.39 1.40 1.40 T:aes128otrpv3 1.41 1.42 1.44 T:deoxysii256v141 1.53 1.54 1.54 T:aes128otrsv3 1.76 1.78 1.80 T:seakeyakv2 1.86 1.87 1.90 T:aes256otrpv3 2.08 2.09 2.10 T:norx6444v3 2.13 2.13 2.13 T:aes256otrsv3 2.46 2.48 2.49 T:norx6441v3 2.47 2.48 2.49 T:norx6441v2 2.56 2.58 2.60 T:lunarkeyakv2 2.61 2.61 2.61 T:aes128n12t8clocv3 2.61 2.61 2.61 T:aes128n8t8silcv2 2.61 2.61 2.61 T:aes128n8t8clocv2 2.61 2.61 2.61 T:aes128n12t8silcv3 2.61 2.61 2.61 T:aes128n12t8silcv2 2.65 2.65 2.65 T:aes128n12t8clocv2 2.86 2.87 2.88 T:norx6441v1 3.24 3.27 3.29 T:lakekeyakv2 3.65 3.69 3.70 T:norx6461v2 3.64 3.69 3.71 T:norx6461v3 3.71 3.74 3.79 T:lakekeyakv1 3.79 3.79 3.80 T:norx3241v2 3.79 3.80 3.80 T:norx3241v3 4.28 4.29 4.29 T:norx6461v1 4.45 4.45 4.46 T:norx3241v1 4.76 4.78 4.80 T:norx6444v2 5.12 5.13 5.14 T:norx6444v1 5.34 5.34 5.34 T:aesjambuv1 5.42 5.43 5.44 ascon128av12 5.48 5.48 5.49 T:ascon128av11 5.50 5.50 5.51 T:ascon96v1 5.68 5.68 5.68 T:norx3261v3 5.68 5.68 5.68 T:norx3261v2 5.84 5.85 5.86 T:riverkeyakv2 6.09 6.13 6.18 T:ketjemajorv2 7.58 7.59 7.60 T:acorn128v2 7.60 7.61 7.66 T:ketjeminorv2 7.76 7.76 7.76 ascon128v12 7.92 7.92 7.93 T:acorn128v3 7.93 7.93 7.93 T:norx3261v1 8.18 8.19 8.20 T:ascon128v1 8.19 8.19 8.20 T:ascon128v11 12.71 12.72 12.74 T:aes128otrpv2 12.70 12.72 12.75 T:aes128otrpv1 12.74 12.76 12.77 T:aes128otrsv1 12.72 12.82 13.61 T:aes128otrsv2 16.64 16.65 16.68 T:aes256otrsv1 16.65 16.66 16.68 T:aes256otrsv2 16.66 16.68 16.70 T:aes256otrpv2 16.66 16.68 16.70 T:aes256otrpv1 17.02 17.04 17.06 T:aes128n12clocv1 17.03 17.05 17.06 T:aes128n8clocv1 18.22? 18.37? 20.60? T:oceankeyakv1 18.93 18.95 18.97 T:aes128n8silcv1 18.95 19.07 19.31 T:aes128n12silcv1 20.34 20.36 20.40 T:proest256otrv1 20.05 20.51 20.66 T:twine80n6t4clocv2 21.70 21.91 21.96 T:twine80n6t4clocv3 23.75 23.87 23.98 T:aeadaes128ocbtaglen96v1 23.85 23.88 23.93 T:aeadaes128ocbtaglen64v1 23.91 23.93 23.93 T:ketjesrv2 25.02 25.04 25.05 T:ketjesrv1 27.59 27.64 27.70 T:aeadaes192ocbtaglen64v1 27.58 27.73 27.75 T:aeadaes192ocbtaglen96v1 30.68? 30.81? 34.89? T:riverkeyakv1 31.65 31.70 31.73 T:aeadaes256ocbtaglen64v1 31.74 31.80 31.84 T:aeadaes256ocbtaglen96v1 47.64 47.68 47.75 T:proest128otrv1 59.58 59.61 59.63 T:ketjejrv1 59.28 59.79 59.85 T:ketjejrv2 71.31 71.72 71.72 T:present80n6t4silcv3 78.30? 78.36? 96.48? T:deoxysneq128128v13 90.38 90.50 90.56 T:aezv1 92.42 92.46 92.50 T:twine80n6clocv1 107.35 107.59 107.66 T:deoxysneq256128v13 118.87 119.15 119.29 T:deoxyseq128128v13 128.78 132.46 132.52 T:led80n6t4silcv3 162.48 162.88 162.94 T:deoxyseq256128v13 276.71 292.17 298.94 aes256gcmv1 591.83 599.73 621.28 T:acorn128 1640.83 1644.17 1651.30 T:led80n6silcv1 1644.43 1646.50 1649.64 T:led80n6t4silcv2 2508.01 2508.29 2510.21 T:present80n6t4silcv2 2511.02 2512.91 2515.19 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.20 0.21 0.21 T:aegis128l 0.21 0.21 0.21 aegis128l 0.24? 0.24? 0.27? T:tiaoxinv1 0.25 0.26 0.27 T:tiaoxinv2 0.28? 0.28? 0.32? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.31 T:aezv4 0.30 0.31 0.31 T:aezv5 0.34 0.34 0.34 T:aegis128 0.36 0.37 0.37 aegis256 0.36 0.37 0.37 T:aegis256 0.38? 0.39? 0.55? T:aeadaes256ocbtaglen128v1 0.47? 0.47? 0.64? T:aeadaes192ocbtaglen128v1 0.57 0.57 0.58 T:aes128otrcv3 0.61 0.61 0.61 T:morus1280128v1 0.60 0.62 0.63 T:morus1280128v2 0.60 0.62 0.63 T:morus1280256v2 0.63 0.63 0.64 T:morus1280256v1 0.76 0.76 0.77 T:aes256otrcv3 0.83 0.84 0.85 T:deoxysi128v141 0.83 0.84 0.85 T:morus640128v1 0.84 0.84 0.85 T:morus640128v2 0.90 0.91 0.93 T:deoxysneq128128v1 0.95 0.95 0.99 T:deoxysneq256128v1 0.98 0.99 0.99 T:colm0v1 0.99 0.99 1.00 T:deoxysi256v141 1.19 1.20 1.20 T:deoxysii128v141 1.20 1.22 1.22 T:aes128gcmv1 1.23 1.24 1.26 T:aes256gcmv1 1.26 1.28 1.33 T:deoxyseq128128v1 1.38 1.39 1.40 T:oceankeyakv2 1.43 1.43 1.44 T:deoxysii256v141 1.44 1.45 1.46 T:aes128otrpv3 1.49 1.50 1.52 T:deoxyseq256128v1 1.56 1.56 1.56 T:aes128otrsv3 1.81 1.81 1.85 T:seakeyakv2 1.89 1.90 1.93 T:aes256otrpv3 2.09 2.10 2.10 T:norx6444v3 2.16 2.16 2.16 T:aes256otrsv3 2.45 2.45 2.47 T:norx6441v3 2.46 2.46 2.48 T:norx6441v2 2.58 2.58 2.59 T:aes128n12t8clocv3 2.58 2.58 2.59 T:aes128n8t8clocv2 2.59 2.59 2.60 T:aes128n8t8silcv2 2.59 2.59 2.59 T:aes128n12t8silcv2 2.59 2.59 2.60 T:aes128n12t8silcv3 2.62 2.62 2.62 T:aes128n12t8clocv2 2.63 2.66 2.68 T:lunarkeyakv2 2.85 2.87 2.89 T:norx6441v1 3.22 3.24 3.26 T:lakekeyakv2 3.68 3.68 3.68 T:norx6461v2 3.71 3.72 3.73 T:norx6461v3 3.74 3.76 3.77 T:lakekeyakv1 3.84 3.84 3.85 T:norx3241v2 3.84 3.85 3.85 T:norx3241v3 4.29 4.29 4.30 T:norx6461v1 4.51 4.54 4.54 T:norx3241v1 4.75 4.75 4.76 T:norx6444v2 5.17 5.19 5.19 T:norx6444v1 5.34 5.34 5.35 T:ascon128av11 5.41 5.41 5.42 ascon128av12 5.47 5.47 5.48 T:ascon96v1 5.55 5.59 5.60 T:aesjambuv1 5.72 5.72 5.73 T:norx3261v3 5.72 5.72 5.73 T:norx3261v2 5.91 5.92 5.94 T:riverkeyakv2 6.00 6.07 6.14 T:ketjemajorv2 7.75 7.75 7.76 ascon128v12 7.76 7.79 7.84 T:ketjeminorv2 7.83 7.84 7.85 T:acorn128v2 7.83 7.87 7.87 T:norx3261v1 7.92 7.92 7.93 T:acorn128v3 7.93 7.93 7.95 T:ascon128v1 7.93 7.94 7.94 T:ascon128v11 12.89 12.92 12.97 T:aes128otrpv1 12.91 12.95 12.97 T:aes128otrpv2 12.96 12.99 13.12 T:aes128otrsv1 12.95 13.08 13.36 T:aes128otrsv2 16.87 16.89 16.92 T:aes256otrpv2 16.87 16.89 16.90 T:aes256otrpv1 16.89 16.89 16.91 T:aes256otrsv1 16.88 16.89 16.91 T:aes256otrsv2 17.50 17.51 17.55 T:aes128n12clocv1 17.50 17.52 17.54 T:aes128n8clocv1 18.34? 18.37? 20.68? T:oceankeyakv1 18.91 18.92 18.95 T:aes128n8silcv1 18.91 18.94 19.42 T:aes128n12silcv1 20.06 20.08 20.55 T:twine80n6t4clocv2 20.30 20.31 20.31 T:proest256otrv1 21.61 21.91 21.98 T:twine80n6t4clocv3 22.58 22.68 22.75 T:ketjesrv2 25.77 25.81 25.85 T:ketjesrv1 27.92 27.95 27.97 T:aeadaes128ocbtaglen64v1 27.93 27.95 28.02 T:aeadaes128ocbtaglen96v1 30.58? 30.81? 34.98? T:riverkeyakv1 32.68 32.75 32.79 T:aeadaes192ocbtaglen64v1 32.91 32.96 32.98 T:aeadaes192ocbtaglen96v1 37.67 37.69 37.80 T:aeadaes256ocbtaglen96v1 37.79 37.84 37.85 T:aeadaes256ocbtaglen64v1 47.62 47.70 47.88 T:proest128otrv1 59.37 59.76 59.93 T:ketjejrv2 60.60 60.63 60.65 T:ketjejrv1 68.24 72.01 72.02 T:present80n6t4silcv3 90.41 90.49 90.53 T:aezv1 91.79 92.14 93.26 T:twine80n6clocv1 97.00 97.24 107.18 T:deoxysneq128128v13 118.74 118.82 118.91 T:deoxyseq128128v13 127.01 127.11 128.13 T:led80n6t4silcv3 136.52 136.55 136.59 T:deoxysneq256128v13 162.31 162.76 162.78 T:deoxyseq256128v13 276.12 277.48 297.26 aes256gcmv1 587.40 606.05 620.55 T:acorn128 1639.09 1639.70 1646.35 T:led80n6silcv1 1642.01 1642.49 1644.09 T:led80n6t4silcv2 2508.88 2509.91 2514.18 T:present80n6t4silcv2 2509.19 2510.31 2513.05 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17? 0.18? 0.21? T:aezv3 0.18 0.18 0.18 T:aezv5 0.18? 0.19? 0.22? T:aezv4 0.20 0.20 0.21 T:aegis128l 0.22? 0.23? 0.25? aegis128l 0.24? 0.25? 0.27? T:tiaoxinv1 0.26 0.27 0.28 T:tiaoxinv2 0.28 0.28 0.28 T:aeadaes128ocbtaglen128v1 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.37 T:aegis256 0.37 0.38 0.38 aegis256 0.38 0.38 0.38 T:aeadaes256ocbtaglen128v1 0.47 0.47 0.48 T:aeadaes192ocbtaglen128v1 0.57 0.58 0.58 T:aes128otrcv3 0.60 0.61 0.63 T:morus1280256v2 0.61 0.61 0.61 T:morus1280128v1 0.60 0.62 0.63 T:morus1280128v2 0.62 0.64 0.64 T:morus1280256v1 0.76 0.76 0.77 T:aes256otrcv3 0.83 0.84 0.84 T:deoxysi128v141 0.83 0.84 0.84 T:morus640128v1 0.84 0.85 0.85 T:morus640128v2 0.90 0.90 0.95 T:deoxysneq128128v1 0.94 0.95 0.95 T:deoxysneq256128v1 0.97 0.99 1.02 T:colm0v1 0.98 1.00 1.00 T:deoxysi256v141 1.19 1.19 1.20 T:deoxysii128v141 1.19 1.21 1.21 T:aes128gcmv1 1.22 1.22 1.23 T:aes256gcmv1 1.26 1.27 1.28 T:deoxyseq128128v1 1.39 1.40 1.42 T:oceankeyakv2 1.43 1.43 1.43 T:deoxysii256v141 1.43 1.46 1.46 T:aes128otrpv3 1.50 1.50 1.50 T:deoxyseq256128v1 1.56 1.56 1.56 T:aes128otrsv3 1.81 1.83 1.85 T:seakeyakv2 1.89 1.90 1.94 T:aes256otrpv3 2.09 2.10 2.11 T:norx6444v3 2.16 2.16 2.16 T:aes256otrsv3 2.46 2.47 2.49 T:norx6441v2 2.46 2.48 2.49 T:norx6441v3 2.58 2.58 2.65 T:aes128n8t8silcv2 2.58 2.58 2.65 T:aes128n12t8silcv3 2.58 2.58 2.58 T:aes128n8t8clocv2 2.58 2.58 2.58 T:aes128n12t8clocv3 2.62 2.62 2.62 T:aes128n12t8clocv2 2.57 2.65 2.65 T:aes128n12t8silcv2 2.63 2.65 2.67 T:lunarkeyakv2 2.87 2.87 2.88 T:norx6441v1 3.22 3.23 3.25 T:lakekeyakv2 3.69 3.71 3.72 T:norx6461v2 3.67 3.71 3.72 T:norx6461v3 3.76 3.79 3.80 T:lakekeyakv1 3.84 3.84 3.86 T:norx3241v2 3.84 3.85 3.85 T:norx3241v3 4.28 4.29 4.30 T:norx6461v1 4.49 4.54 4.54 T:norx3241v1 4.76 4.76 4.78 T:norx6444v2 5.17 5.19 5.19 T:norx6444v1 5.34 5.34 5.34 T:ascon128av11 5.41 5.41 5.41 ascon128av12 5.47 5.47 5.47 T:ascon96v1 5.59 5.60 5.60 T:aesjambuv1 5.72 5.72 5.73 T:norx3261v2 5.72 5.73 5.73 T:norx3261v3 5.91 5.92 5.94 T:riverkeyakv2 6.04 6.06 6.14 T:ketjemajorv2 7.75 7.75 7.75 ascon128v12 7.78 7.79 7.83 T:ketjeminorv2 7.83 7.84 7.85 T:acorn128v2 7.83 7.87 7.87 T:norx3261v1 7.92 7.92 7.92 T:acorn128v3 7.93 7.93 7.94 T:ascon128v1 7.93 7.94 7.95 T:ascon128v11 12.91 12.94 12.96 T:aes128otrpv1 12.92 12.96 12.98 T:aes128otrpv2 12.99 13.02 13.11 T:aes128otrsv1 12.99 13.12 13.39 T:aes128otrsv2 16.88 16.89 16.92 T:aes256otrsv1 16.88 16.91 16.93 T:aes256otrsv2 16.88 16.92 16.96 T:aes256otrpv1 16.91 16.92 16.97 T:aes256otrpv2 17.50 17.51 17.53 T:aes128n12clocv1 17.49 17.51 17.52 T:aes128n8clocv1 18.23? 18.27? 20.74? T:oceankeyakv1 18.90 18.92 18.95 T:aes128n8silcv1 18.89 18.93 19.40 T:aes128n12silcv1 20.29 20.30 20.33 T:proest256otrv1 20.54 20.55 20.55 T:twine80n6t4clocv2 21.63 21.89 21.91 T:twine80n6t4clocv3 22.61 22.66 22.70 T:ketjesrv2 25.78 25.82 25.85 T:ketjesrv1 27.88 27.95 28.08 T:aeadaes128ocbtaglen64v1 27.97 28.00 28.02 T:aeadaes128ocbtaglen96v1 30.52? 30.81? 35.01? T:riverkeyakv1 32.76 32.78 32.80 T:aeadaes192ocbtaglen64v1 32.80 32.83 32.88 T:aeadaes192ocbtaglen96v1 37.69 37.77 37.79 T:aeadaes256ocbtaglen96v1 37.73 37.84 37.86 T:aeadaes256ocbtaglen64v1 47.78 47.86 47.91 T:proest128otrv1 59.14 59.95 60.03 T:ketjejrv2 60.53 60.63 61.32 T:ketjejrv1 71.98 72.00 72.02 T:present80n6t4silcv3 90.39 90.46 90.55 T:aezv1 91.98 92.36 92.40 T:twine80n6clocv1 96.96 96.99 107.54 T:deoxysneq128128v13 118.61 118.73 118.84 T:deoxyseq128128v13 127.01 128.49 134.99 T:led80n6t4silcv3 136.59 136.62 136.87 T:deoxysneq256128v13 162.35 162.48 163.06 T:deoxyseq256128v13 273.42 274.52 274.98 aes256gcmv1 546.24 550.68 601.37 T:acorn128 1642.22 1645.57 1648.61 T:led80n6t4silcv2 1639.17 1645.62 1648.64 T:led80n6silcv1 2509.53 2510.72 2512.73 T:present80n6silcv1 2509.28 2512.31 2514.74 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.88? 0.92? 1.08? T:aegis128 0.88? 0.92? 1.12? T:aegis128l 0.93? 0.97? 1.12? aegis128l 1.18 1.19 1.23 T:aegis256 1.19 1.20 1.20 aegis256 1.19? 1.22? 1.40? T:tiaoxinv1 1.19? 1.22? 1.45? T:tiaoxinv2 1.29 1.31 1.33 T:aezv5 1.37 1.41 1.45 T:aezv3 1.43 1.46 1.57 T:aezv4 2.41 2.45 2.58 T:colm0v1 2.52 2.55 2.59 T:aes128otrsv3 2.66 2.75 2.80 T:morus640128v1 2.74 2.80 2.81 T:morus640128v2 2.84? 2.86? 4.20? T:aeadaes128ocbtaglen128v1 2.99 3.00 3.02 T:aes128n8t8silcv2 3.00 3.01 3.02 T:aes128n12t8silcv2 2.98 3.02 3.04 T:aes128n12t8silcv3 2.92 3.03 3.18 T:morus1280128v1 3.05 3.08 3.27 T:aes128n12t8clocv3 3.13 3.19 3.26 T:aes128otrcv3 3.23 3.26 3.31 T:deoxysneq128128v1 3.23 3.27 3.30 T:morus1280256v2 3.06 3.30 3.32 T:aes128n8t8clocv2 3.20 3.31 3.39 T:morus1280128v2 3.30 3.34 3.41 T:deoxysi128v141 3.52 3.57 3.59 T:deoxysneq256128v1 3.55 3.61 3.68 T:aes256otrsv3 3.60? 3.78? 8.06? T:aeadaes192ocbtaglen128v1 3.80 3.86 4.17 T:morus1280256v1 3.98 4.01 4.02 T:deoxysi256v141 3.61? 4.03? 7.41? T:aeadaes256ocbtaglen128v1 4.10 4.14 4.19 T:aes256otrcv3 4.03 4.21 4.22 T:aes128n12t8clocv2 4.63 4.68 4.70 T:deoxyseq128128v1 4.64 4.73 4.76 T:aes128otrpv3 4.91 4.95 5.11 T:deoxysii128v141 5.77 5.85 5.92 T:deoxysii256v141 5.94 5.97 6.05 T:deoxyseq256128v1 5.91 5.98 6.02 T:aes256otrpv3 6.26 6.35 6.35 T:aesjambuv1 7.92 7.98 8.00 T:norx6441v1 7.97 8.01 8.11 T:norx6441v2 8.20 8.28 8.34 T:norx6441v3 8.30 8.30 8.67 T:ascon128av11 8.38 8.38 8.63 T:ascon96v1 8.41 8.53 8.85 ascon128av12 9.15 9.16 9.23 T:norx3241v1 9.37 9.41 9.42 T:norx3241v2 9.40 9.43 9.45 T:norx3241v3 10.45 10.45 10.53 ascon128v12 10.91 10.91 11.07 T:ascon128v1 10.91 10.91 11.21 T:ascon128v11 11.73 11.82 11.94 T:norx6461v1 11.98 12.04 12.08 T:norx6461v3 12.02 12.06 12.10 T:norx6461v2 12.33? 12.94? 14.04? T:lakekeyakv1 13.57 13.62 14.59 T:lakekeyakv2 13.64 13.94 14.41 T:riverkeyakv2 13.89 13.95 14.02 T:norx6444v3 13.95 13.98 14.02 T:norx3261v2 13.96 13.99 14.23 T:norx3261v3 16.30 16.31 16.33 T:norx3261v1 16.75 16.95 18.05 T:oceankeyakv2 16.87 17.13 17.39 T:seakeyakv2 19.88 20.01 20.23 T:aes128otrsv1 20.02 20.20 21.12 T:aes128otrsv2 20.38 20.45 20.52 T:aes128otrpv2 20.45 20.52 20.59 T:aes128otrpv1 20.14 20.53 21.00 T:aes128gcmv1 20.41? 21.02? 25.60? T:aes256gcmv1 21.54 21.62 21.84 T:aes128n8clocv1 21.68 21.84 21.97 T:aes128n12clocv1 24.62 24.88 25.00 T:ketjeminorv2 25.75 25.84 26.00 T:aes256otrsv2 25.77 25.91 26.05 T:aes256otrsv1 26.02 26.11 26.41 T:aes128n8silcv1 26.13 26.31 26.57 T:acorn128v2 26.29 26.32 26.38 T:aes256otrpv1 26.30 26.39 26.55 T:aes256otrpv2 26.23 26.46 26.90 T:aes128n12silcv1 28.00 28.10 28.39 T:twine80n6t4clocv2 28.52 28.66 28.73 T:acorn128v3 28.89 28.98 29.09 T:twine80n6t4clocv3 35.48 35.62 36.12 T:norx6444v2 35.27 35.64 35.88 T:ketjemajorv2 37.08 37.21 37.50 T:aeadaes128ocbtaglen96v1 36.78 37.23 37.55 T:aeadaes128ocbtaglen64v1 37.44 37.48 38.10 T:norx6444v1 39.55 39.61 39.73 T:ketjesrv1 41.02 41.20 41.32 T:lunarkeyakv2 42.38 42.51 42.79 T:aeadaes192ocbtaglen96v1 42.36 42.62 42.95 T:aeadaes192ocbtaglen64v1 42.48 42.70 42.85 T:ketjesrv2 49.12 49.19 49.66 T:aeadaes256ocbtaglen96v1 49.12 49.31 49.46 T:aeadaes256ocbtaglen64v1 53.38? 54.26? 64.41? T:riverkeyakv1 60.52 60.80 61.27 T:proest256otrv1 79.84 80.09 80.33 T:ketjejrv1 79.70 80.39 80.59 T:ketjejrv2 84.23 88.31 88.38 T:present80n6t4silcv3 88.66? 89.20? 108.47? T:deoxysneq128128v13 92.96 93.66 93.93 T:proest128otrv1 102.30 102.65 102.94 T:twine80n6clocv1 105.53 105.81 106.40 T:aezv1 120.86 121.23 121.52 T:deoxysneq256128v13 148.01 148.34 148.86 T:deoxyseq128128v13 152.00 152.23 156.09 T:led80n6t4silcv3 198.43? 199.39? 222.34? T:oceankeyakv1 201.94 202.48 203.11 T:deoxyseq256128v13 312.73 314.73 318.97 aes256gcmv1 1835.74 1838.20 1839.16 T:led80n6silcv1 1834.40 1838.29 1841.96 T:led80n6t4silcv2 1966.98 2015.66 2095.65 T:acorn128 2808.58 2809.51 2811.58 T:present80n6t4silcv2 2810.55 2815.94 2819.14 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.91? 0.95? 1.08? T:aegis128l 0.91? 1.00? 1.12? T:aegis128 1.02? 1.06? 1.17? aegis128l 1.17 1.19 1.21 T:aegis256 1.22 1.23 1.26 aegis256 1.25 1.27 1.28 T:tiaoxinv2 1.27 1.30 1.38 T:aezv5 1.29 1.32 1.35 T:tiaoxinv1 1.39 1.41 1.45 T:aezv3 1.41 1.45 1.48 T:aezv4 2.57 2.72 2.77 T:aes128otrsv3 2.73 2.79 2.82 T:morus640128v1 2.78? 2.91? 3.83? T:aeadaes128ocbtaglen128v1 2.88 2.95 3.02 T:morus640128v2 2.97 3.04 3.08 T:colm0v1 3.05 3.08 3.09 T:aes128n8t8clocv2 3.05 3.09 3.12 T:aes128n12t8clocv3 3.11 3.13 3.27 T:aes128n8t8silcv2 3.23 3.27 3.33 T:morus1280128v1 3.16 3.30 3.38 T:aes128n12t8silcv2 3.20 3.34 3.41 T:aes128n12t8silcv3 3.23 3.38 3.43 T:aes128otrcv3 3.48 3.52 3.60 T:morus1280128v2 3.45 3.57 3.65 T:morus1280256v2 3.73? 3.79? 7.85? T:aeadaes256ocbtaglen128v1 3.62 3.82 3.91 T:aes256otrsv3 3.65? 3.87? 5.45? T:aeadaes192ocbtaglen128v1 4.01 4.02 4.02 T:aes128n12t8clocv2 3.98 4.05 4.09 T:morus1280256v1 4.15 4.18 4.25 T:deoxysneq256128v1 4.31 4.38 4.41 T:aes256otrcv3 4.61 4.66 4.72 T:deoxysi128v141 4.63 4.70 4.82 T:deoxysneq128128v1 4.99 5.11 5.53 T:aes128otrpv3 5.23 5.26 5.30 T:deoxysii128v141 5.27 5.31 5.52 T:deoxysi256v141 6.26? 6.30? 7.23? T:aes256otrpv3 6.23 6.31 6.36 T:deoxysii256v141 6.38 6.53 6.60 T:aesjambuv1 6.51 6.58 6.66 T:deoxyseq128128v1 7.12 7.28 7.34 T:deoxyseq256128v1 8.12 8.12 8.31 T:ascon128av11 8.07 8.12 8.20 T:norx6441v2 8.16 8.19 8.27 T:norx6441v1 8.30 8.32 8.35 T:ascon96v1 8.35 8.46 8.51 T:norx6441v3 8.48 8.52 8.91 ascon128av12 9.59 9.61 9.62 T:norx3241v1 9.70 9.71 9.76 T:norx3241v2 9.73 9.76 9.79 T:norx3241v3 10.45 10.45 10.74 ascon128v12 10.55 10.55 10.67 T:ascon128v11 10.55 10.55 10.94 T:ascon128v1 12.07 12.21 12.26 T:norx6461v3 12.12 12.23 12.27 T:norx6461v2 12.25 12.33 12.37 T:norx6461v1 13.05 13.27 13.82 T:lakekeyakv1 13.48 13.55 13.77 T:lakekeyakv2 13.70 13.75 14.33 T:riverkeyakv2 13.83 13.89 13.96 T:norx6444v3 14.32 14.35 14.38 T:norx3261v2 14.31 14.36 14.48 T:norx3261v3 16.41 16.43 16.45 T:norx3261v1 16.68 17.14 17.25 T:oceankeyakv2 16.91 17.21 17.52 T:seakeyakv2 19.57? 20.11? 35.24? T:aes256gcmv1 19.76 20.11 21.41 T:aes128gcmv1 20.25 20.30 20.40 T:aes128otrsv1 20.41 20.86 21.14 T:aes128otrsv2 20.69 20.87 21.08 T:aes128otrpv2 20.71 20.88 21.08 T:aes128otrpv1 22.24 22.44 22.73 T:aes128n12clocv1 22.36 22.66 22.87 T:aes128n8clocv1 24.52 24.59 25.06 T:ketjeminorv2 25.91 25.98 26.05 T:aes256otrsv1 26.08 26.18 26.41 T:aes256otrsv2 26.52 26.55 26.66 T:acorn128v2 26.34 26.55 26.73 T:aes128n8silcv1 26.62 26.67 26.87 T:aes256otrpv2 26.62 26.77 26.86 T:aes256otrpv1 26.39 26.80 27.12 T:aes128n12silcv1 28.48 28.56 28.62 T:twine80n6t4clocv2 28.67 28.69 28.89 T:acorn128v3 28.87 28.98 29.02 T:twine80n6t4clocv3 35.48 35.66 36.50 T:ketjemajorv2 35.56 35.91 36.22 T:norx6444v2 38.48 38.48 39.59 T:norx6444v1 40.42 40.67 41.12 T:ketjesrv1 40.95 41.24 41.60 T:lunarkeyakv2 41.30 41.41 41.64 T:ketjesrv2 44.48 44.61 44.85 T:aeadaes128ocbtaglen96v1 44.37 44.74 44.95 T:aeadaes128ocbtaglen64v1 51.05 51.34 51.92 T:aeadaes192ocbtaglen96v1 51.38 51.54 51.85 T:aeadaes192ocbtaglen64v1 52.88? 53.36? 64.65? T:riverkeyakv1 59.55 59.60 59.82 T:aeadaes256ocbtaglen64v1 59.73 59.93 60.45 T:aeadaes256ocbtaglen96v1 60.95 61.43 62.02 T:proest256otrv1 79.84 80.77 81.46 T:ketjejrv2 80.95 81.79 82.22 T:ketjejrv1 86.62 88.79 89.33 T:present80n6t4silcv3 93.90 94.73 95.23 T:proest128otrv1 102.34 102.51 102.82 T:twine80n6clocv1 107.37 108.10 119.28 T:deoxysneq128128v13 109.90 110.30 110.65 T:aezv1 147.20 147.55 148.31 T:deoxyseq128128v13 150.11 150.24 150.49 T:deoxysneq256128v13 150.38 158.37 160.92 T:led80n6t4silcv3 199.95? 201.37? 222.71? T:oceankeyakv1 201.85 202.42 202.59 T:deoxyseq256128v13 310.52 311.14 320.29 aes256gcmv1 1836.33 1838.21 1849.10 T:led80n6t4silcv2 1838.30 1839.93 1844.73 T:led80n6silcv1 2101.48 2104.62 2106.46 T:acorn128 2809.98 2811.67 2815.12 T:present80n6t4silcv2 2809.88 2814.02 2816.16 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.83? 0.91? 0.96? T:aegis128 0.91 0.91 0.92 T:aegis128l 0.91? 0.99? 1.87? T:aezv5 1.02? 1.04? 1.87? aegis128l 1.05? 1.07? 1.20? T:aezv3 1.09? 1.09? 1.23? T:aezv4 1.16 1.17 1.21 T:aegis256 1.22 1.26 1.27 T:tiaoxinv2 1.25 1.29 1.31 aegis256 1.31 1.33 1.36 T:tiaoxinv1 2.52? 2.73? 2.83? T:aes128otrsv3 2.59 2.79 2.80 T:morus640128v1 2.77? 2.80? 3.26? T:aeadaes128ocbtaglen128v1 2.88 2.90 2.91 T:aes128n8t8silcv2 2.90? 2.92? 4.72? T:aes128n12t8silcv2 2.91? 2.94? 4.73? T:aes128n12t8silcv3 2.93 2.95 2.99 T:morus640128v2 3.00 3.05 3.14 T:colm0v1 3.06 3.08 3.09 T:aes128n8t8clocv2 3.10 3.12 3.34 T:aes128n12t8clocv3 3.23 3.26 3.30 T:morus1280128v1 3.31 3.37 3.40 T:aes128otrcv3 3.45 3.52 3.62 T:morus1280256v2 3.45 3.54 3.59 T:morus1280128v2 3.66 3.76 3.79 T:aeadaes256ocbtaglen128v1 3.79 3.81 3.89 T:aes256otrsv3 3.76? 3.86? 7.70? T:aeadaes192ocbtaglen128v1 3.95 3.97 3.97 T:aes128n12t8clocv2 3.96 4.02 4.09 T:morus1280256v1 4.02? 4.08? 4.64? T:deoxysneq256128v1 4.34 4.34 4.38 T:aes256otrcv3 4.60 4.63 4.71 T:deoxysneq128128v1 4.58 4.65 4.70 T:deoxysi128v141 5.23 5.24 5.28 T:deoxysii128v141 5.27 5.33 5.54 T:deoxysi256v141 5.00? 5.60? 5.73? T:aes128otrpv3 6.19 6.25 6.32 T:deoxysii256v141 6.33? 6.35? 7.32? T:aes256otrpv3 6.38 6.51 6.75 T:aesjambuv1 6.51 6.58 6.66 T:deoxyseq128128v1 7.20 7.33 7.93 T:deoxyseq256128v1 8.09 8.09 8.20 T:ascon128av11 8.12 8.16 8.23 T:norx6441v1 8.12 8.20 8.23 T:norx6441v2 8.25 8.29 8.37 T:ascon96v1 8.31 8.31 8.41 ascon128av12 8.36 8.41 8.46 T:norx6441v3 9.53 9.59 9.62 T:norx3241v1 9.70 9.76 9.78 T:norx3241v2 9.74 9.77 9.82 T:norx3241v3 10.45 10.45 10.45 ascon128v12 10.52 10.52 10.62 T:ascon128v1 10.52 10.52 10.66 T:ascon128v11 12.09 12.12 12.22 T:norx6461v2 12.10 12.18 12.26 T:norx6461v3 12.16 12.33 12.42 T:norx6461v1 13.52 13.57 13.88 T:lakekeyakv2 13.30 13.59 13.82 T:lakekeyakv1 13.70 13.78 13.95 T:riverkeyakv2 13.89 14.00 14.07 T:norx6444v3 14.33 14.36 14.37 T:norx3261v2 14.33 14.38 14.48 T:norx3261v3 16.43 16.45 16.45 T:norx3261v1 16.90 17.20 17.39 T:oceankeyakv2 16.81 17.23 17.54 T:seakeyakv2 19.39 19.56 19.74 T:aes128gcmv1 19.62? 19.91? 23.69? T:aes256gcmv1 20.15 20.32 20.73 T:aes128otrsv1 20.73 20.80 21.07 T:aes128otrpv2 20.66 20.84 21.20 T:aes128otrpv1 20.41 20.91 21.18 T:aes128otrsv2 22.34 22.38 22.51 T:aes128n8clocv1 22.20 22.40 22.56 T:aes128n12clocv1 25.02 25.14 25.48 T:ketjeminorv2 26.02 26.07 26.20 T:aes256otrsv1 25.94 26.09 26.34 T:aes256otrsv2 26.14 26.42 26.61 T:aes128n8silcv1 26.53 26.55 26.56 T:acorn128v2 26.07 26.60 26.81 T:aes128n12silcv1 26.62 26.66 26.78 T:aes256otrpv1 26.67 26.74 27.26 T:aes256otrpv2 28.04 28.50 28.53 T:twine80n6t4clocv2 28.66 28.66 28.73 T:acorn128v3 28.88 28.92 29.02 T:twine80n6t4clocv3 35.88 36.05 36.52 T:norx6444v2 35.91 36.09 37.02 T:ketjemajorv2 38.31 38.56 39.47 T:norx6444v1 40.30 40.87 41.23 T:ketjesrv1 40.75 41.39 42.11 T:lunarkeyakv2 41.84 42.46 42.51 T:ketjesrv2 44.49 44.59 44.94 T:aeadaes128ocbtaglen64v1 44.61 44.94 45.32 T:aeadaes128ocbtaglen96v1 51.38 51.52 51.80 T:aeadaes192ocbtaglen64v1 51.09 51.69 51.99 T:aeadaes192ocbtaglen96v1 53.11? 53.63? 64.61? T:riverkeyakv1 59.24 59.33 59.52 T:proest256otrv1 59.51 59.54 59.59 T:aeadaes256ocbtaglen64v1 59.72 60.09 60.63 T:aeadaes256ocbtaglen96v1 80.63 81.50 81.66 T:ketjejrv2 81.45 81.75 82.41 T:ketjejrv1 88.69 89.09 89.48 T:present80n6t4silcv3 91.95 93.35 94.94 T:proest128otrv1 101.99 102.27 102.61 T:twine80n6clocv1 107.29? 107.96? 128.07? T:deoxysneq128128v13 109.90 110.03 110.50 T:aezv1 147.98 148.39 148.73 T:deoxyseq128128v13 150.59 150.88 151.02 T:deoxysneq256128v13 151.27 152.12 159.70 T:led80n6t4silcv3 199.64? 200.36? 222.38? T:oceankeyakv1 202.19 202.62 203.00 T:deoxyseq256128v13 308.30 309.52 318.02 aes256gcmv1 1836.66 1840.98 1842.05 T:led80n6t4silcv2 1844.76 1845.41 1846.24 T:led80n6silcv1 1995.87 2011.30 2103.65 T:acorn128 2807.89 2808.96 2812.36 T:present80n6silcv1 2809.12 2816.97 2818.59 T:present80n6t4silcv2