VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1220 v3; 4 x 3100MHz; hiphop, supercop-20231107

[Page version: 20240726 23:46:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.23? 0.25? 0.26? T:tiaoxinv2 0.23? 0.25? 0.27? T:tiaoxinv1 0.28 0.29 0.30 T:aegis128l 0.29 0.30 0.30 aegis128l 0.53 0.54 0.54 aegis256 0.56 0.56 0.57 T:aegis128 0.65 0.65 0.66 T:morus1280128v2 0.65 0.66 0.67 T:morus1280256v2 0.65 0.66 0.67 T:morus1280256v1 0.65 0.66 0.67 T:morus1280128v1 0.58? 0.69? 0.75? T:aeadaes128ocbtaglen128v1 0.70 0.71 0.72 T:aezv4 0.72 0.72 0.72 T:aezv3 0.72 0.73 0.73 T:aes128otrcv3 0.72 0.73 0.74 T:aes128otrpv3 0.74 0.76 0.77 T:aezv5 0.77 0.78 0.79 T:aes128otrsv3 0.44? 0.79? 0.84? T:aeadaes192ocbtaglen128v1 0.93 0.94 0.95 T:aes256otrsv3 0.93 0.94 0.94 T:aes256otrcv3 0.93 0.96 0.97 T:deoxysi128v141 0.96 0.97 0.97 T:aes256otrpv3 0.99 1.06 1.09 T:aeadaes256ocbtaglen128v1 1.07 1.07 1.08 T:morus640128v1 1.06 1.08 1.09 T:morus640128v2 1.07 1.09 1.10 T:deoxysi256v141 1.21? 1.28? 1.40? T:norx6444v3 1.33 1.34 1.34 T:deoxysneq128128v1 1.52 1.54 1.55 T:deoxysneq256128v1 1.78 1.79 1.82 T:aes128gcmv1 1.87 1.90 1.93 T:deoxysii128v141 2.13 2.14 2.15 T:norx6441v2 2.13 2.15 2.18 aes256gcmv1 2.14 2.16 2.17 T:norx6441v3 2.10 2.16 2.18 T:deoxysii256v141 2.19 2.27 2.34 T:lunarkeyakv2 2.31 2.32 2.32 T:colm0v1 2.35 2.37 2.38 T:deoxyseq128128v1 2.51 2.57 2.59 T:deoxyseq256128v1 2.57 2.59 2.60 T:norx6441v1 2.86 2.91 2.97 T:seakeyakv2 2.99 3.09 3.12 T:oceankeyakv2 3.23 3.25 3.26 T:norx6461v2 3.24 3.25 3.26 T:norx6461v3 3.73 3.76 3.83 T:norx6444v2 3.86 3.87 3.91 T:norx3241v3 3.87 3.88 3.90 T:norx3241v2 3.88 3.91 3.94 T:norx6461v1 3.95? 4.09? 4.39? T:norx6444v1 4.11 4.17 4.20 T:lakekeyakv1 4.43 4.47 4.49 T:lakekeyakv2 4.56 4.56 4.57 T:aes128n8t8silcv2 4.56 4.56 4.56 T:aes128n8t8clocv2 4.56 4.56 4.56 T:aes128n12t8clocv2 4.56 4.56 4.56 T:aes128n12t8clocv3 4.56 4.56 4.57 T:aes128n12t8silcv3 4.56 4.56 4.57 T:aes128n12t8silcv2 4.68 4.70 4.72 T:norx3241v1 5.82 5.84 5.87 T:acorn128v3 5.85 5.86 5.89 T:norx3261v3 5.90 5.91 5.93 T:norx3261v2 5.98 6.01 6.03 T:acorn128v2 6.81 6.83 6.85 T:ascon96v1 6.83 6.85 6.88 T:ascon128av11 7.18 7.20 7.22 ascon128av12 7.28 7.33 7.48 T:ketjemajorv2 7.45 7.47 7.48 T:norx3261v1 9.12 9.13 9.14 T:aesjambuv1 9.38 9.38 9.42 T:ketjeminorv2 9.68 9.72 10.35 T:riverkeyakv2 10.21 10.26 10.31 T:ascon128v1 10.21 10.27 10.32 T:ascon128v11 10.57 10.60 10.63 ascon128v12 14.32 14.48 14.80 T:oceankeyakv1 14.44 14.53 14.59 T:seakeyakv1 15.60 15.63 15.65 T:twine80n6t4clocv2 15.76 15.78 15.79 T:aes128otrpv1 15.76 15.79 15.80 T:aes128otrsv2 15.77 15.79 15.82 T:aes128otrsv1 15.79 15.82 15.85 T:aes128otrpv2 16.07 16.11 16.13 T:twine80n6t4clocv3 19.67 19.70 19.74 T:aes256otrpv2 19.68 19.70 19.77 T:aes256otrsv1 19.74 19.76 19.81 T:aes256otrsv2 19.77 19.79 19.84 T:aes256otrpv1 24.22 24.32 24.38 T:proest256otrv1 24.74 24.82 24.87 T:aes128n8clocv1 25.01 25.12 25.18 T:aes128n12clocv1 26.83 26.90 26.94 T:aes128n8silcv1 26.83 26.94 27.39 T:aes128n12silcv1 32.85 32.97 33.05 T:riverkeyakv1 35.95 35.98 35.99 T:ketjesrv1 37.43 37.55 37.74 T:ketjesrv2 58.85 59.92 59.98 T:proest128otrv1 63.46 63.56 63.67 T:ketjejrv1 74.51 75.20 79.50 T:deoxysneq128128v13 75.62 75.71 75.75 T:present80n6t4silcv3 105.06 105.14 105.21 T:ketjejrv2 115.86 116.06 119.27 T:deoxysneq256128v13 130.80 130.86 130.91 T:led80n6t4silcv3 135.93 136.10 136.19 T:twine80n6clocv1 151.86 152.37 159.56 T:deoxyseq128128v13 196.47 196.83 198.22 T:aezv1 232.71 232.94 233.01 T:deoxyseq256128v13 142.30? 363.01? 1374.17? T:acorn128 4514.84 4515.55 4518.81 T:present80n6t4silcv2 4515.17 4516.20 4519.32 T:present80n6silcv1 8312.05 8319.36 8333.04 T:led80n6silcv1 8341.78 8348.70 8356.70 T:led80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.29 0.29 0.30 T:aegis128l 0.30 0.30 0.31 aegis128l 0.38 0.39 0.40 T:tiaoxinv1 0.38 0.40 0.41 T:tiaoxinv2 0.55 0.56 0.56 aegis256 0.56 0.57 0.57 T:aegis128 0.67 0.68 0.68 T:morus1280256v2 0.67 0.68 0.68 T:morus1280128v2 0.67 0.68 0.68 T:morus1280128v1 0.67 0.68 0.69 T:morus1280256v1 0.69 0.70 0.71 T:aezv4 0.70 0.70 0.71 T:aezv3 0.63? 0.73? 0.74? T:aeadaes128ocbtaglen128v1 0.74 0.75 0.76 T:aezv5 0.75 0.75 0.76 T:aes128otrcv3 0.75 0.76 0.78 T:aes128otrpv3 0.76 0.76 0.77 T:aes128otrsv3 0.76? 0.85? 0.85? T:aeadaes192ocbtaglen128v1 0.97 0.97 0.97 T:aes256otrcv3 0.96 0.97 0.98 T:aes256otrsv3 1.01 1.03 1.04 T:aes256otrpv3 1.07 1.08 1.08 T:morus640128v2 1.06 1.08 1.08 T:morus640128v1 1.03 1.08 1.09 T:aeadaes256ocbtaglen128v1 1.21 1.24 1.29 T:norx6444v3 1.24 1.26 1.30 T:deoxysi128v141 1.36 1.38 1.39 T:deoxysi256v141 1.52 1.53 1.54 T:deoxysneq256128v1 1.62 1.64 1.65 T:deoxysneq128128v1 1.83 1.84 1.85 T:aes128gcmv1 1.85 1.89 1.94 T:deoxysii128v141 2.07 2.08 2.09 T:norx6441v2 2.08 2.09 2.10 T:norx6441v3 2.13 2.16 2.18 T:deoxysii256v141 2.21 2.23 2.25 aes256gcmv1 2.26 2.28 2.31 T:colm0v1 2.22 2.34 2.41 T:lunarkeyakv2 2.52 2.53 2.54 T:norx6441v1 2.92 2.97 3.00 T:seakeyakv2 3.04 3.15 3.19 T:oceankeyakv2 3.16 3.18 3.20 T:norx6461v2 3.17 3.19 3.21 T:norx6461v3 3.17 3.19 3.21 T:deoxyseq128128v1 3.33 3.36 3.36 T:deoxyseq256128v1 3.68 3.71 3.79 T:norx6444v2 3.77 3.78 3.79 T:norx3241v2 3.78 3.80 3.81 T:norx3241v3 3.82 3.84 3.85 T:norx6461v1 3.99 4.00 4.01 T:norx6444v1 4.21 4.27 4.30 T:lakekeyakv1 4.48 4.50 4.50 T:aes128n12t8clocv3 4.50 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128n8t8clocv2 4.50 4.53 4.57 T:lakekeyakv2 4.57 4.58 4.59 T:norx3241v1 5.82 5.84 5.85 T:norx3261v3 5.85 5.86 5.87 T:norx3261v2 5.93 5.99 6.02 T:acorn128v2 6.77 6.80 6.81 T:acorn128v3 7.09 7.10 7.12 T:ascon96v1 7.08 7.12 7.13 T:ascon128av11 7.15 7.16 7.18 ascon128av12 7.37 7.39 7.39 T:norx3261v1 8.21 8.32 8.39 T:ketjemajorv2 9.12 9.15 9.19 T:ketjeminorv2 9.43 9.44 9.44 T:aesjambuv1 10.00 10.07 10.12 T:riverkeyakv2 10.22 10.27 10.45 T:ascon128v11 10.22 10.36 10.47 T:ascon128v1 10.51 10.60 10.63 ascon128v12 14.52 14.62 14.72 T:seakeyakv1 14.50 14.65 14.99 T:oceankeyakv1 15.56 15.59 15.63 T:twine80n6t4clocv2 15.76 15.78 15.81 T:aes128otrpv1 15.78 15.80 15.87 T:aes128otrsv1 15.78 15.82 15.92 T:aes128otrpv2 15.78 15.82 15.85 T:aes128otrsv2 16.07 16.09 16.12 T:twine80n6t4clocv3 19.67 19.73 19.75 T:aes256otrpv2 19.67 19.73 19.76 T:aes256otrsv1 19.71 19.74 19.80 T:aes256otrsv2 19.72 19.76 19.83 T:aes256otrpv1 24.00 24.11 24.16 T:proest256otrv1 24.14 24.22 24.33 T:aes128n12clocv1 25.68 25.71 25.78 T:aes128n8clocv1 26.92 26.99 27.06 T:aes128n8silcv1 26.95 27.05 27.50 T:aes128n12silcv1 33.58 33.69 33.78 T:riverkeyakv1 36.15 36.39 36.43 T:ketjesrv2 36.60 36.64 36.69 T:ketjesrv1 59.80 59.90 59.95 T:proest128otrv1 64.22 64.30 64.47 T:ketjejrv1 76.39 76.43 76.47 T:present80n6t4silcv3 104.87 105.22 105.37 T:deoxysneq128128v13 106.87 106.97 107.16 T:ketjejrv2 131.61 131.66 131.70 T:led80n6t4silcv3 136.09 136.20 136.35 T:twine80n6clocv1 149.60 149.90 153.55 T:deoxysneq256128v13 151.98 152.39 163.28 T:deoxyseq128128v13 196.75 197.05 198.73 T:aezv1 233.21 233.41 233.66 T:deoxyseq256128v13 134.11? 356.79? 1378.60? T:acorn128 4514.84 4519.40 4523.03 T:present80n6t4silcv2 4515.71 4520.03 4526.69 T:present80n6silcv1 8310.82 8318.11 8351.36 T:led80n6silcv1 8350.74 8356.41 8362.30 T:led80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.26 0.27 0.28 T:aezv4 0.27 0.28 0.28 T:aezv3 0.29 0.29 0.30 T:aegis128l 0.29 0.29 0.30 T:aezv5 0.31 0.33 0.34 aegis128l 0.38 0.39 0.40 T:tiaoxinv2 0.39 0.39 0.41 T:tiaoxinv1 0.56 0.57 0.57 T:aegis128 0.58 0.59 0.59 aegis256 0.67 0.67 0.68 T:morus1280256v2 0.67 0.68 0.68 T:morus1280256v1 0.67 0.68 0.69 T:morus1280128v1 0.68 0.68 0.69 T:morus1280128v2 0.71 0.72 0.74 T:aeadaes128ocbtaglen128v1 0.75 0.75 0.75 T:aes128otrcv3 0.75 0.75 0.75 T:aes128otrpv3 0.76 0.77 0.77 T:aes128otrsv3 0.83? 0.84? 1.20? T:aeadaes192ocbtaglen128v1 0.96 0.97 0.97 T:aes256otrsv3 0.97 0.97 0.97 T:aes256otrcv3 1.01 1.02 1.02 T:aes256otrpv3 1.06 1.07 1.08 T:morus640128v2 1.06 1.07 1.08 T:morus640128v1 0.72? 1.09? 1.41? T:aeadaes256ocbtaglen128v1 1.22 1.25 1.30 T:norx6444v3 1.24 1.26 1.29 T:deoxysi128v141 1.38 1.39 1.40 T:deoxysi256v141 1.53 1.54 1.55 T:deoxysneq256128v1 1.61 1.63 1.65 T:deoxysneq128128v1 1.83 1.84 1.84 T:aes128gcmv1 1.89 1.91 1.92 T:deoxysii128v141 2.07 2.08 2.09 T:norx6441v2 2.08 2.10 2.11 T:norx6441v3 2.14 2.16 2.18 T:deoxysii256v141 2.21 2.24 2.26 aes256gcmv1 2.27 2.29 2.31 T:colm0v1 2.31 2.34 2.42 T:lunarkeyakv2 2.51 2.53 2.54 T:norx6441v1 2.98 3.00 3.02 T:seakeyakv2 3.08 3.14 3.15 T:oceankeyakv2 3.16 3.17 3.18 T:norx6461v2 3.17 3.17 3.19 T:norx6461v3 3.17 3.19 3.22 T:deoxyseq128128v1 3.33 3.35 3.38 T:deoxyseq256128v1 3.72 3.75 3.83 T:norx6444v2 3.77 3.78 3.79 T:norx3241v2 3.78 3.80 3.81 T:norx3241v3 3.82 3.83 3.85 T:norx6461v1 4.01 4.03 4.08 T:norx6444v1 4.25 4.28 4.30 T:lakekeyakv1 4.48 4.48 4.50 T:aes128n12t8clocv3 4.50 4.50 4.50 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n8t8clocv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128n8t8silcv2 4.51 4.54 4.56 T:lakekeyakv2 4.57 4.58 4.59 T:norx3241v1 5.81 5.82 5.84 T:norx3261v3 5.84 5.86 5.88 T:norx3261v2 5.95 5.99 6.00 T:acorn128v2 6.79 6.80 6.81 T:acorn128v3 7.06 7.09 7.12 T:ascon128av11 7.07 7.10 7.12 T:ascon96v1 7.12 7.15 7.16 ascon128av12 7.36 7.37 7.38 T:norx3261v1 8.24 8.32 8.39 T:ketjemajorv2 9.14 9.17 9.21 T:ketjeminorv2 9.43 9.43 9.44 T:aesjambuv1 10.10 10.14 10.17 T:riverkeyakv2 10.16 10.23 10.43 T:ascon128v11 10.20 10.23 10.45 T:ascon128v1 10.55 10.60 10.62 ascon128v12 14.53 14.66 14.71 T:seakeyakv1 14.52 14.73 14.98 T:oceankeyakv1 15.57 15.59 15.63 T:twine80n6t4clocv2 15.79 15.82 15.85 T:aes128otrpv1 15.79 15.83 15.86 T:aes128otrsv1 15.83 15.85 15.92 T:aes128otrsv2 15.83 15.87 15.94 T:aes128otrpv2 16.07 16.09 16.14 T:twine80n6t4clocv3 19.71 19.74 19.81 T:aes256otrsv1 19.73 19.75 19.81 T:aes256otrpv1 19.73 19.77 19.81 T:aes256otrpv2 19.74 19.77 19.80 T:aes256otrsv2 23.99 24.11 24.23 T:proest256otrv1 24.07 24.16 24.27 T:aes128n12clocv1 25.66 25.73 25.79 T:aes128n8clocv1 26.90 26.97 27.02 T:aes128n8silcv1 26.93 27.06 27.50 T:aes128n12silcv1 33.63 33.72 34.01 T:riverkeyakv1 36.27 36.44 36.57 T:ketjesrv2 36.62 36.64 36.69 T:ketjesrv1 59.84 59.89 60.01 T:proest128otrv1 64.25 64.46 64.61 T:ketjejrv1 76.40 76.44 76.46 T:present80n6t4silcv3 104.66 105.27 105.60 T:deoxysneq128128v13 106.84 107.00 107.13 T:ketjejrv2 131.62 131.65 131.70 T:led80n6t4silcv3 136.12 136.32 136.48 T:twine80n6clocv1 149.62 149.89 153.59 T:deoxysneq256128v13 151.14 152.51 163.39 T:deoxyseq128128v13 196.55 197.08 198.67 T:aezv1 233.19 233.48 233.62 T:deoxyseq256128v13 134.08? 356.75? 1374.91? T:acorn128 4514.53 4519.00 4524.34 T:present80n6t4silcv2 4515.59 4520.91 4522.58 T:present80n6silcv1 8315.43 8327.09 8355.73 T:led80n6silcv1 8350.11 8360.32 8366.08 T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.21 0.22 0.23 T:tiaoxinv1 0.21? 0.22? 0.24? T:tiaoxinv2 0.28 0.29 0.30 T:aegis128l 0.29 0.29 0.29 aegis128l 0.49 0.50 0.52 T:aezv4 0.51 0.52 0.53 T:aezv3 0.53 0.53 0.54 aegis256 0.53 0.54 0.55 T:aezv5 0.56 0.56 0.57 T:aegis128 0.63 0.64 0.64 T:morus1280128v2 0.64 0.64 0.65 T:morus1280256v2 0.63 0.64 0.64 T:morus1280256v1 0.64 0.64 0.65 T:morus1280128v1 0.60? 0.66? 0.70? T:aeadaes128ocbtaglen128v1 0.74 0.74 0.74 T:aes128otrcv3 0.63? 0.78? 0.86? T:aeadaes192ocbtaglen128v1 0.82 0.82 0.83 T:aes128otrpv3 0.91 0.94 0.97 T:deoxysi128v141 0.95 0.96 0.96 T:aes256otrcv3 1.01 1.02 1.03 T:morus640128v2 1.02 1.02 1.03 T:morus640128v1 0.85? 1.06? 1.23? T:aeadaes256ocbtaglen128v1 1.04 1.06 1.09 T:deoxysi256v141 1.07 1.07 1.08 T:aes256otrpv3 1.19 1.21 1.23 T:aes128gcmv1 1.33 1.35 1.36 T:deoxysneq128128v1 1.37 1.39 1.41 aes256gcmv1 1.39 1.42 1.44 T:deoxysii128v141 1.53 1.54 1.55 T:deoxysneq256128v1 1.57 1.61 1.63 T:deoxysii256v141 1.63 1.64 1.64 T:colm0v1 1.70 1.72 1.78 T:norx6444v3 1.77 1.78 1.79 T:deoxyseq128128v1 1.92 1.93 1.95 T:deoxyseq256128v1 2.14 2.15 2.16 T:norx6441v2 2.14 2.15 2.16 T:norx6441v3 2.46 2.48 2.49 T:seakeyakv2 2.58 2.58 2.59 T:norx6441v1 2.57 2.59 2.61 T:oceankeyakv2 2.63 2.64 2.64 T:aes128otrsv3 3.07 3.11 3.16 T:lunarkeyakv2 3.24 3.26 3.27 T:norx6461v3 3.27 3.28 3.30 T:norx6461v2 3.59 3.60 3.60 T:aes256otrsv3 3.70 3.72 3.75 T:norx6444v2 3.87 3.87 3.89 T:norx3241v2 3.87 3.88 3.90 T:norx3241v3 3.88 3.90 3.92 T:norx6461v1 3.94 3.97 3.98 T:lakekeyakv1 3.95 3.97 3.98 T:lakekeyakv2 3.99 4.05 4.21 T:norx6444v1 4.53 4.53 4.53 T:aes128n8t8clocv2 4.53 4.53 4.53 T:aes128n12t8clocv2 4.53 4.53 4.53 T:aes128n12t8silcv2 4.53 4.53 4.53 T:aes128n12t8silcv3 4.53 4.53 4.53 T:aes128n8t8silcv2 4.53 4.53 4.53 T:aes128n12t8clocv3 4.69 4.70 4.72 T:norx3241v1 5.84 5.85 5.87 T:norx3261v3 5.86 5.88 5.89 T:norx3261v2 6.20 6.23 6.25 T:acorn128v3 6.41 6.45 6.49 T:ketjemajorv2 6.76 6.79 6.89 T:ascon128av11 6.77 6.80 6.83 T:ascon96v1 6.98 7.02 7.36 T:riverkeyakv2 7.16 7.18 7.20 ascon128av12 7.27 7.28 7.29 T:acorn128v2 7.46 7.47 7.49 T:norx3261v1 8.34 8.36 8.39 T:ketjeminorv2 9.17 9.17 9.17 T:aesjambuv1 10.04 10.17 10.20 T:ascon128v1 10.05 10.18 10.23 T:ascon128v11 10.59 10.61 10.62 ascon128v12 14.15 14.17 14.19 T:aes128otrsv1 14.16 14.17 14.19 T:aes128otrsv2 14.37 14.42 14.46 T:seakeyakv1 14.32 14.44 14.64 T:oceankeyakv1 15.34 15.36 15.37 T:twine80n6t4clocv2 15.80 15.82 15.87 T:aes128otrpv1 15.81 15.83 15.88 T:aes128otrpv2 15.90 15.91 15.92 T:twine80n6t4clocv3 18.07 18.11 18.15 T:aes256otrsv1 18.11 18.15 18.18 T:aes256otrsv2 18.73 18.77 18.80 T:aes128n8clocv1 19.14 19.20 19.24 T:aes128n12clocv1 19.75 19.77 19.79 T:aes256otrpv2 19.76 19.79 19.83 T:aes256otrpv1 20.05 20.10 20.34 T:aes128n12silcv1 20.08 20.10 20.14 T:aes128n8silcv1 24.49 24.58 24.61 T:proest256otrv1 31.05 31.14 31.19 T:riverkeyakv1 32.88 32.91 32.92 T:ketjesrv1 34.41 34.54 34.65 T:ketjesrv2 59.53 60.04 60.11 T:proest128otrv1 60.32 60.48 60.60 T:ketjejrv1 75.21 75.41 80.59 T:deoxysneq128128v13 75.50 75.53 75.55 T:present80n6t4silcv3 101.88 101.95 102.05 T:twine80n6clocv1 106.53 107.04 107.28 T:ketjejrv2 113.45 114.02 118.20 T:deoxyseq128128v13 115.78 116.00 119.39 T:deoxysneq256128v13 129.93 130.29 130.59 T:aezv1 130.62 130.66 130.68 T:led80n6t4silcv3 174.29 174.37 174.45 T:deoxyseq256128v13 226.68? 362.54? 1279.87? T:acorn128 3385.36 3385.84 3391.02 T:present80n6silcv1 3386.00 3386.51 3389.75 T:present80n6t4silcv2 6234.16 6237.96 6240.57 T:led80n6silcv1 6266.24 6268.53 6271.66 T:led80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.27 0.29 0.30 T:tiaoxinv2 0.29 0.29 0.30 T:tiaoxinv1 0.29 0.29 0.30 T:aegis128l 0.29 0.30 0.31 aegis128l 0.48 0.50 0.50 T:aezv4 0.50 0.51 0.52 T:aezv3 0.52 0.54 0.54 T:aezv5 0.54 0.54 0.55 aegis256 0.56 0.56 0.57 T:aegis128 0.64 0.64 0.65 T:morus1280128v1 0.64 0.64 0.65 T:morus1280256v2 0.64 0.65 0.65 T:morus1280256v1 0.64 0.65 0.65 T:morus1280128v2 0.58? 0.67? 0.71? T:aeadaes128ocbtaglen128v1 0.75 0.75 0.75 T:aes128otrcv3 0.61? 0.79? 0.98? T:aeadaes192ocbtaglen128v1 0.83 0.84 0.85 T:aes128otrpv3 0.97 0.97 0.97 T:aes256otrcv3 1.02 1.03 1.04 T:morus640128v1 1.02 1.03 1.04 T:morus640128v2 0.87? 1.06? 1.21? T:aeadaes256ocbtaglen128v1 1.07 1.10 1.13 T:deoxysi128v141 1.10 1.10 1.12 T:aes256otrpv3 1.19 1.22 1.23 T:deoxysi256v141 1.20 1.22 1.24 T:aes128gcmv1 1.39 1.43 1.44 T:deoxysii128v141 1.42 1.43 1.45 aes256gcmv1 1.47 1.48 1.51 T:deoxysneq128128v1 1.54 1.55 1.56 T:deoxysneq256128v1 1.57 1.62 1.63 T:deoxysii256v141 1.61 1.63 1.63 T:colm0v1 1.70 1.72 1.74 T:norx6444v3 2.12 2.12 2.14 T:norx6441v2 2.12 2.12 2.13 T:norx6441v3 2.18 2.19 2.20 T:deoxyseq128128v1 2.30 2.32 2.33 T:deoxyseq256128v1 2.49 2.50 2.56 T:seakeyakv2 2.56 2.56 2.57 T:norx6441v1 2.57 2.60 2.64 T:oceankeyakv2 2.63 2.63 2.64 T:aes128otrsv3 3.09 3.15 3.20 T:lunarkeyakv2 3.20 3.22 3.23 T:norx6461v3 3.22 3.23 3.24 T:norx6461v2 3.61 3.61 3.61 T:aes256otrsv3 3.67 3.69 3.73 T:norx6444v2 3.83 3.84 3.86 T:norx6461v1 3.83 3.85 3.87 T:norx3241v3 3.84 3.85 3.86 T:norx3241v2 3.98 4.00 4.02 T:lakekeyakv1 4.00 4.00 4.02 T:norx6444v1 3.99 4.02 4.04 T:lakekeyakv2 4.50 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128n8t8clocv2 4.50 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.51 T:aes128n12t8clocv2 4.50 4.50 4.51 T:aes128n12t8clocv3 4.62 4.64 4.64 T:norx3241v1 5.82 5.84 5.85 T:norx3261v2 5.83 5.84 5.85 T:norx3261v3 6.71 6.72 6.73 T:acorn128v3 6.89 6.91 6.95 T:ascon96v1 6.91 6.96 7.00 T:ketjemajorv2 6.94 6.96 6.98 T:ascon128av11 7.15 7.16 7.18 ascon128av12 7.17 7.23 7.26 T:riverkeyakv2 7.23 7.27 7.30 T:acorn128v2 7.42 7.43 7.44 T:norx3261v1 8.19 8.21 8.24 T:ketjeminorv2 9.32 9.33 9.33 T:aesjambuv1 10.22 10.27 10.30 T:ascon128v1 10.15 10.27 10.30 T:ascon128v11 10.49 10.52 10.53 ascon128v12 14.15 14.17 14.20 T:aes128otrsv1 14.16 14.18 14.21 T:aes128otrsv2 14.44 14.48 14.52 T:seakeyakv1 14.38 14.48 14.70 T:oceankeyakv1 15.33 15.35 15.37 T:twine80n6t4clocv2 15.80 15.81 15.85 T:aes128otrpv1 15.80 15.84 15.92 T:aes128otrpv2 15.88 15.91 15.93 T:twine80n6t4clocv3 18.09 18.14 18.16 T:aes256otrsv1 18.10 18.15 18.18 T:aes256otrsv2 18.71 18.78 18.85 T:aes128n12clocv1 19.17 19.20 19.24 T:aes128n8clocv1 19.74 19.79 19.84 T:aes256otrpv2 19.76 19.79 19.84 T:aes256otrpv1 20.09 20.16 20.19 T:aes128n8silcv1 20.10 20.19 20.41 T:aes128n12silcv1 24.36 24.42 24.50 T:proest256otrv1 31.37 31.45 31.50 T:riverkeyakv1 33.20 33.23 33.28 T:ketjesrv1 33.75 33.90 34.50 T:ketjesrv2 59.97 60.08 60.12 T:proest128otrv1 60.64 60.69 60.82 T:ketjejrv1 75.83 75.87 75.89 T:present80n6t4silcv3 90.43 90.60 92.81 T:deoxysneq128128v13 102.01 102.11 102.19 T:twine80n6clocv1 103.19 103.29 103.40 T:ketjejrv2 113.63 114.09 119.80 T:deoxyseq128128v13 130.01 130.78 132.00 T:aezv1 131.04 131.07 131.55 T:led80n6t4silcv3 132.87 133.12 135.83 T:deoxysneq256128v13 174.47 174.65 174.78 T:deoxyseq256128v13 222.33? 359.49? 1280.18? T:acorn128 3386.31 3391.75 3392.09 T:present80n6t4silcv2 3385.95 3392.21 3393.69 T:present80n6silcv1 6236.69 6239.55 6251.34 T:led80n6silcv1 6265.44 6269.19 6271.39 T:led80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.27 0.29 0.29 T:aezv4 0.28 0.29 0.30 T:tiaoxinv2 0.29 0.29 0.30 T:tiaoxinv1 0.29 0.29 0.32 T:aegis128l 0.29 0.30 0.32 T:aezv3 0.30 0.31 0.33 T:aezv5 0.31 0.31 0.32 aegis128l 0.55 0.56 0.56 aegis256 0.56 0.56 0.57 T:aegis128 0.64 0.64 0.65 T:morus1280256v2 0.64 0.64 0.65 T:morus1280128v1 0.64 0.65 0.65 T:morus1280128v2 0.64 0.65 0.65 T:morus1280256v1 0.66 0.68 0.69 T:aeadaes128ocbtaglen128v1 0.75 0.75 0.75 T:aes128otrcv3 0.79 0.80 0.80 T:aeadaes192ocbtaglen128v1 0.83 0.84 0.84 T:aes128otrpv3 0.97 0.97 0.97 T:aes256otrcv3 1.03 1.03 1.04 T:morus640128v2 1.03 1.03 1.04 T:morus640128v1 1.03 1.05 1.06 T:aeadaes256ocbtaglen128v1 1.07 1.09 1.13 T:deoxysi128v141 1.10 1.11 1.11 T:aes256otrpv3 1.21 1.22 1.22 T:deoxysi256v141 1.21 1.23 1.23 T:aes128gcmv1 1.41 1.42 1.43 aes256gcmv1 1.40 1.43 1.44 T:deoxysii128v141 1.46 1.50 1.51 T:deoxysneq128128v1 1.54 1.55 1.56 T:deoxysneq256128v1 1.58 1.60 1.62 T:deoxysii256v141 1.61 1.62 1.63 T:colm0v1 1.70 1.72 1.74 T:norx6444v3 2.11 2.12 2.12 T:norx6441v3 2.11 2.12 2.12 T:norx6441v2 2.18 2.19 2.20 T:deoxyseq128128v1 2.31 2.33 2.34 T:deoxyseq256128v1 2.51 2.52 2.54 T:seakeyakv2 2.55 2.56 2.57 T:norx6441v1 2.60 2.62 2.63 T:oceankeyakv2 2.63 2.63 2.63 T:aes128otrsv3 3.10 3.14 3.21 T:lunarkeyakv2 3.21 3.22 3.23 T:norx6461v3 3.21 3.22 3.24 T:norx6461v2 3.61 3.61 3.61 T:aes256otrsv3 3.69 3.70 3.74 T:norx6444v2 3.84 3.85 3.86 T:norx3241v3 3.83 3.85 3.85 T:norx6461v1 3.84 3.85 3.86 T:norx3241v2 3.99 4.01 4.02 T:lakekeyakv1 4.02 4.02 4.03 T:norx6444v1 4.00 4.03 4.05 T:lakekeyakv2 4.49 4.50 4.51 T:aes128n8t8clocv2 4.49 4.50 4.50 T:aes128n8t8silcv2 4.49 4.50 4.50 T:aes128n12t8silcv3 4.49 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.51 T:aes128n12t8clocv2 4.50 4.50 4.51 T:aes128n12t8clocv3 4.62 4.63 4.64 T:norx3241v1 5.83 5.84 5.85 T:norx3261v3 5.82 5.84 5.85 T:norx3261v2 6.70 6.71 6.73 T:acorn128v3 6.88 6.93 6.96 T:ascon96v1 6.93 6.95 6.97 T:ascon128av11 6.92 6.99 7.02 T:ketjemajorv2 7.15 7.16 7.19 ascon128av12 7.19 7.24 7.26 T:riverkeyakv2 7.26 7.29 7.29 T:acorn128v2 7.42 7.43 7.44 T:norx3261v1 8.21 8.23 8.27 T:ketjeminorv2 9.32 9.32 9.33 T:aesjambuv1 10.08 10.11 10.26 T:ascon128v11 10.13 10.25 10.28 T:ascon128v1 10.50 10.52 10.55 ascon128v12 14.16 14.18 14.21 T:aes128otrsv1 14.17 14.20 14.22 T:aes128otrsv2 14.46 14.49 14.51 T:seakeyakv1 14.34 14.54 14.70 T:oceankeyakv1 15.33 15.35 15.37 T:twine80n6t4clocv2 15.80 15.83 15.84 T:aes128otrpv1 15.84 15.86 15.94 T:aes128otrpv2 15.87 15.89 15.92 T:twine80n6t4clocv3 18.09 18.11 18.14 T:aes256otrsv1 18.12 18.15 18.17 T:aes256otrsv2 18.72 18.78 18.82 T:aes128n12clocv1 19.18 19.21 19.28 T:aes128n8clocv1 19.77 19.79 19.81 T:aes256otrpv1 19.78 19.81 19.89 T:aes256otrpv2 20.09 20.13 20.18 T:aes128n8silcv1 20.10 20.17 20.41 T:aes128n12silcv1 24.38 24.42 24.47 T:proest256otrv1 31.44 31.51 31.58 T:riverkeyakv1 33.23 33.24 33.27 T:ketjesrv1 33.78 33.89 34.41 T:ketjesrv2 60.08 60.13 60.16 T:proest128otrv1 60.62 60.74 60.85 T:ketjejrv1 75.84 75.88 75.91 T:present80n6t4silcv3 90.46 90.71 92.83 T:deoxysneq128128v13 102.02 102.09 102.13 T:twine80n6clocv1 103.03 103.30 103.52 T:ketjejrv2 113.69 114.10 120.06 T:deoxyseq128128v13 129.88 130.68 131.93 T:aezv1 131.00 131.07 131.52 T:led80n6t4silcv3 132.78 133.16 135.84 T:deoxysneq256128v13 174.51 174.62 174.75 T:deoxyseq256128v13 222.47? 359.43? 1280.26? T:acorn128 3387.30 3391.74 3392.31 T:present80n6t4silcv2 3386.58 3391.95 3392.85 T:present80n6silcv1 6238.56 6241.53 6249.20 T:led80n6silcv1 6264.25 6269.14 6272.92 T:led80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.17? 0.19? 0.20? T:tiaoxinv1 0.18? 0.19? 0.20? T:tiaoxinv2 0.29 0.29 0.29 aegis128l 0.29 0.30 0.30 T:aegis128l 0.29 0.30 0.30 T:aezv4 0.31 0.32 0.33 T:aezv3 0.32 0.33 0.34 T:aezv5 0.52 0.53 0.53 aegis256 0.56 0.56 0.57 T:aegis128 0.61 0.62 0.63 T:morus1280256v2 0.61 0.62 0.63 T:morus1280128v2 0.61 0.62 0.63 T:morus1280256v1 0.52? 0.62? 0.65? T:aeadaes128ocbtaglen128v1 0.61 0.62 0.63 T:morus1280128v1 0.60 0.62 0.66 aes256gcmv1 0.60 0.63 0.66 T:aes128gcmv1 0.75 0.75 0.75 T:aes128otrcv3 0.62? 0.76? 1.10? T:aeadaes192ocbtaglen128v1 0.92 0.93 0.94 T:aes128otrpv3 0.91 0.93 0.94 T:deoxysii128v141 0.90 0.93 0.96 T:deoxysi128v141 0.96 0.97 0.98 T:morus640128v1 0.97 0.97 0.97 T:aes256otrcv3 0.97 0.97 0.97 T:colm0v1 0.97 0.97 0.98 T:morus640128v2 0.65? 1.03? 1.37? T:aeadaes256ocbtaglen128v1 1.03 1.04 1.07 T:deoxysi256v141 1.03 1.05 1.06 T:deoxysii256v141 1.17 1.18 1.20 T:deoxyseq128128v1 1.18 1.20 1.21 T:aes256otrpv3 1.28 1.29 1.31 T:deoxyseq256128v1 1.32 1.36 1.37 T:deoxysneq128128v1 1.51 1.54 1.55 T:deoxysneq256128v1 1.96 2.00 2.03 T:oceankeyakv2 1.97 2.03 2.15 T:lunarkeyakv2 2.13 2.14 2.15 T:norx6441v3 2.13 2.15 2.17 T:norx6441v2 2.14 2.16 2.17 T:norx6444v3 2.36 2.37 2.40 T:seakeyakv2 2.57 2.58 2.60 T:norx6441v1 3.25 3.26 3.28 T:norx6461v3 3.28 3.29 3.30 T:norx6461v2 3.59 3.61 3.63 T:lakekeyakv2 3.66 3.66 3.67 T:norx6444v2 3.66 3.71 3.74 T:lakekeyakv1 3.84 3.86 3.88 T:norx3241v2 3.86 3.88 3.90 T:norx3241v3 3.88 3.89 3.91 T:norx6461v1 4.00 4.01 4.03 T:norx6444v1 4.49 4.50 4.50 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128n8t8clocv2 4.50 4.50 4.50 T:aes128n8t8silcv2 4.49 4.50 4.50 T:aes128n12t8clocv3 4.50 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128otrsv3 4.68 4.71 4.72 T:norx3241v1 5.52 5.55 5.57 T:ketjemajorv2 5.81 5.82 5.84 T:norx3261v2 5.83 5.85 5.88 T:norx3261v3 6.25 6.25 6.25 T:aes256otrsv3 6.57 6.61 6.66 T:acorn128v3 6.58 6.64 6.68 T:riverkeyakv2 6.67 6.68 6.72 T:ascon128av11 6.67 6.70 6.76 T:ascon96v1 7.09 7.12 7.13 ascon128av12 7.22 7.28 7.31 T:ketjeminorv2 7.48 7.49 7.51 T:norx3261v1 8.51 8.54 8.56 T:acorn128v2 9.21 9.21 9.22 T:aesjambuv1 9.81 9.86 10.10 T:ascon128v1 9.82 10.08 10.12 T:ascon128v11 10.57 10.58 10.63 ascon128v12 12.47 12.50 12.52 T:aes128otrsv1 12.48 12.50 12.52 T:aes128otrsv2 12.67 12.68 12.70 T:aes128n8clocv1 13.16 13.25 13.33 T:aes128n12clocv1 13.27 13.30 13.33 T:aes128n12silcv1 13.28 13.31 13.33 T:aes128n8silcv1 14.19 14.30 14.37 T:seakeyakv1 14.18 14.36 14.57 T:oceankeyakv1 15.09 15.10 15.11 T:twine80n6t4clocv2 15.67 15.69 15.71 T:twine80n6t4clocv3 15.77 15.80 15.82 T:aes128otrpv1 15.78 15.82 15.88 T:aes128otrpv2 16.40 16.42 16.49 T:aes256otrsv2 16.38 16.45 16.52 T:aes256otrsv1 19.73 19.75 19.77 T:aes256otrpv1 19.75 19.79 19.83 T:aes256otrpv2 24.73 24.77 24.84 T:proest256otrv1 29.14 29.20 29.29 T:riverkeyakv1 29.83 29.85 29.89 T:ketjesrv1 31.22 31.39 31.94 T:ketjesrv2 57.04 57.20 57.51 T:ketjejrv1 60.01 60.08 60.15 T:proest128otrv1 63.31 63.59 63.66 T:aezv1 67.92 67.97 68.05 T:twine80n6clocv1 75.33 75.35 75.39 T:present80n6t4silcv3 75.46 75.73 80.20 T:deoxysneq128128v13 74.98 75.81 77.90 T:deoxyseq128128v13 99.10 99.20 99.26 T:ketjejrv2 115.70 115.85 115.97 T:deoxyseq256128v13 115.70 116.06 118.67 T:deoxysneq256128v13 130.42 130.49 130.54 T:led80n6t4silcv3 142.59? 362.04? 1353.76? T:acorn128 2256.18 2257.04 2264.23 T:present80n6silcv1 2257.74 2258.27 2260.18 T:present80n6t4silcv2 4160.22 4168.25 4173.51 T:led80n6silcv1 4178.21 4181.43 4185.32 T:led80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.17? 0.19? 0.21? T:tiaoxinv2 0.18? 0.19? 0.21? T:tiaoxinv1 0.28 0.29 0.29 T:aegis128l 0.28 0.29 0.29 aegis128l 0.29 0.30 0.30 T:aezv4 0.31 0.32 0.33 T:aezv3 0.32 0.33 0.33 T:aezv5 0.51 0.51 0.53 aegis256 0.56 0.56 0.57 T:aegis128 0.59 0.60 0.62 aes256gcmv1 0.60 0.61 0.62 T:morus1280256v1 0.60 0.61 0.62 T:morus1280128v2 0.59 0.61 0.63 T:aes128gcmv1 0.61 0.61 0.62 T:morus1280256v2 0.61 0.62 0.62 T:morus1280128v1 0.60 0.62 0.64 T:aeadaes128ocbtaglen128v1 0.75 0.75 0.75 T:aes128otrcv3 0.38? 0.75? 0.77? T:aeadaes192ocbtaglen128v1 0.91 0.92 0.93 T:aes128otrpv3 0.91 0.93 0.95 T:deoxysii128v141 0.91 0.94 0.97 T:deoxysi128v141 0.97 0.97 0.97 T:colm0v1 0.97 0.97 0.97 T:aes256otrcv3 0.98 0.99 1.00 T:morus640128v2 0.98 0.99 1.00 T:morus640128v1 0.67? 1.02? 1.36? T:aeadaes256ocbtaglen128v1 1.03 1.04 1.05 T:deoxysi256v141 1.01 1.06 1.07 T:deoxysii256v141 1.13 1.18 1.22 T:deoxyseq128128v1 1.19 1.19 1.20 T:aes256otrpv3 1.24 1.28 1.34 T:deoxyseq256128v1 1.30 1.34 1.38 T:deoxysneq128128v1 1.53 1.55 1.55 T:deoxysneq256128v1 1.97 1.99 2.03 T:oceankeyakv2 1.97 2.02 2.09 T:lunarkeyakv2 2.14 2.15 2.16 T:norx6441v2 2.13 2.15 2.16 T:norx6441v3 2.17 2.19 2.20 T:norx6444v3 2.36 2.39 2.43 T:seakeyakv2 2.58 2.60 2.62 T:norx6441v1 3.24 3.25 3.27 T:norx6461v3 3.26 3.27 3.29 T:norx6461v2 3.56 3.58 3.61 T:lakekeyakv2 3.65 3.67 3.68 T:norx6444v2 3.69 3.71 3.74 T:lakekeyakv1 3.86 3.88 3.89 T:norx6461v1 3.88 3.90 3.91 T:norx3241v3 3.90 3.91 3.93 T:norx3241v2 3.98 4.00 4.02 T:norx6444v1 4.49 4.50 4.50 T:aes128n12t8clocv3 4.50 4.50 4.50 T:aes128n8t8clocv2 4.50 4.50 4.50 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128otrsv3 4.50 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128n8t8silcv2 4.68 4.70 4.71 T:norx3241v1 5.48 5.52 5.56 T:ketjemajorv2 5.80 5.83 5.85 T:norx3261v2 5.84 5.85 5.88 T:norx3261v3 6.25 6.25 6.25 T:aes256otrsv3 6.61 6.62 6.65 T:acorn128v3 6.61 6.63 6.65 T:riverkeyakv2 6.69 6.73 6.79 T:ascon96v1 6.68 6.76 6.82 T:ascon128av11 7.13 7.16 7.18 ascon128av12 7.22 7.24 7.29 T:ketjeminorv2 7.46 7.48 7.49 T:norx3261v1 8.51 8.56 8.59 T:acorn128v2 9.21 9.21 9.22 T:aesjambuv1 9.81 10.07 10.12 T:ascon128v11 9.88 10.08 10.15 T:ascon128v1 10.46 10.48 10.53 ascon128v12 12.47 12.50 12.53 T:aes128otrsv2 12.47 12.51 12.55 T:aes128otrsv1 12.68 12.70 12.72 T:aes128n8clocv1 13.13 13.28 13.35 T:aes128n12clocv1 13.26 13.29 13.34 T:aes128n8silcv1 13.27 13.29 13.33 T:aes128n12silcv1 14.16 14.28 14.33 T:seakeyakv1 14.26 14.38 14.60 T:oceankeyakv1 15.04 15.06 15.10 T:twine80n6t4clocv2 15.65 15.69 15.72 T:twine80n6t4clocv3 15.74 15.77 15.83 T:aes128otrpv2 15.78 15.79 15.83 T:aes128otrpv1 16.37 16.41 16.48 T:aes256otrsv2 16.39 16.47 16.50 T:aes256otrsv1 19.69 19.76 19.80 T:aes256otrpv2 19.73 19.78 19.83 T:aes256otrpv1 24.69 24.78 24.89 T:proest256otrv1 29.16 29.21 29.34 T:riverkeyakv1 29.80 29.83 29.86 T:ketjesrv1 31.19 31.70 32.61 T:ketjesrv2 56.88 57.07 57.41 T:ketjejrv1 60.04 60.10 60.17 T:proest128otrv1 63.28 63.48 63.59 T:aezv1 67.89 67.97 68.01 T:twine80n6clocv1 75.33 75.37 75.56 T:present80n6t4silcv3 75.38 75.72 78.43 T:deoxysneq128128v13 74.94 75.76 80.30 T:deoxyseq128128v13 99.20 99.25 99.52 T:ketjejrv2 115.86 115.92 116.02 T:deoxyseq256128v13 115.90 116.25 119.01 T:deoxysneq256128v13 130.43 130.48 130.52 T:led80n6t4silcv3 142.67? 361.98? 1353.75? T:acorn128 2256.69 2257.45 2264.12 T:present80n6silcv1 2258.04 2260.43 2263.46 T:present80n6t4silcv2 4168.23 4170.19 4174.86 T:led80n6silcv1 4179.47 4182.46 4185.63 T:led80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.18? 0.19? 0.21? T:tiaoxinv2 0.19? 0.19? 0.22? T:tiaoxinv1 0.29 0.29 0.29 aegis128l 0.29 0.29 0.30 T:aegis128l 0.29 0.30 0.30 T:aezv4 0.32 0.32 0.33 T:aezv3 0.32 0.33 0.33 T:aezv5 0.52 0.53 0.53 aegis256 0.56 0.56 0.57 T:aegis128 0.60 0.60 0.62 aes256gcmv1 0.61 0.61 0.62 T:morus1280128v1 0.61 0.61 0.62 T:morus1280256v1 0.60 0.61 0.62 T:morus1280128v2 0.61 0.61 0.62 T:morus1280256v2 0.61 0.62 0.64 T:aes128gcmv1 0.61 0.62 0.65 T:aeadaes128ocbtaglen128v1 0.75 0.75 0.75 T:aes128otrcv3 0.74? 0.75? 1.10? T:aeadaes192ocbtaglen128v1 0.92 0.92 0.93 T:aes128otrpv3 0.91 0.93 0.96 T:deoxysi128v141 0.92 0.93 0.94 T:deoxysii128v141 0.97 0.97 0.97 T:colm0v1 0.97 0.97 0.97 T:aes256otrcv3 0.98 0.99 1.00 T:morus640128v2 0.99 1.00 1.01 T:morus640128v1 1.00 1.01 1.04 T:aeadaes256ocbtaglen128v1 1.04 1.05 1.07 T:deoxysi256v141 1.03 1.05 1.06 T:deoxysii256v141 1.13 1.18 1.23 T:deoxyseq128128v1 1.19 1.19 1.20 T:aes256otrpv3 1.24 1.29 1.34 T:deoxyseq256128v1 1.30 1.35 1.38 T:deoxysneq128128v1 1.53 1.55 1.56 T:deoxysneq256128v1 1.98 1.99 2.03 T:oceankeyakv2 1.96 2.02 2.08 T:lunarkeyakv2 2.14 2.15 2.17 T:norx6441v3 2.14 2.16 2.17 T:norx6441v2 2.18 2.19 2.20 T:norx6444v3 2.36 2.38 2.41 T:seakeyakv2 2.58 2.60 2.61 T:norx6441v1 3.23 3.24 3.26 T:norx6461v3 3.26 3.26 3.28 T:norx6461v2 3.57 3.60 3.61 T:lakekeyakv2 3.65 3.67 3.69 T:norx6444v2 3.70 3.72 3.73 T:lakekeyakv1 3.85 3.87 3.88 T:norx6461v1 3.88 3.90 3.91 T:norx3241v3 3.90 3.92 3.94 T:norx3241v2 3.97 4.01 4.03 T:norx6444v1 4.48 4.49 4.50 T:aes128n12t8clocv2 4.48 4.50 4.50 T:aes128n12t8clocv3 4.49 4.50 4.50 T:aes128n8t8clocv2 4.50 4.50 4.50 T:aes128otrsv3 4.50 4.50 4.50 T:aes128n12t8silcv3 4.48 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n8t8silcv2 4.68 4.70 4.71 T:norx3241v1 5.47 5.52 5.57 T:ketjemajorv2 5.80 5.83 5.84 T:norx3261v2 5.84 5.85 5.87 T:norx3261v3 6.25 6.25 6.25 T:aes256otrsv3 6.59 6.63 6.67 T:riverkeyakv2 6.63 6.65 6.67 T:acorn128v3 6.67 6.76 6.83 T:ascon128av11 6.70 6.78 6.82 T:ascon96v1 7.15 7.17 7.18 ascon128av12 7.21 7.24 7.28 T:ketjeminorv2 7.45 7.46 7.47 T:norx3261v1 8.52 8.57 8.60 T:acorn128v2 9.21 9.21 9.22 T:aesjambuv1 9.83 9.87 10.06 T:ascon128v1 9.78 9.88 10.13 T:ascon128v11 10.47 10.49 10.52 ascon128v12 12.47 12.49 12.54 T:aes128otrsv1 12.47 12.50 12.54 T:aes128otrsv2 12.66 12.69 12.71 T:aes128n8clocv1 13.14 13.26 13.33 T:aes128n12clocv1 13.29 13.31 13.34 T:aes128n8silcv1 13.27 13.31 13.33 T:aes128n12silcv1 14.20 14.29 14.36 T:seakeyakv1 14.26 14.40 14.58 T:oceankeyakv1 15.05 15.06 15.10 T:twine80n6t4clocv2 15.64 15.68 15.70 T:twine80n6t4clocv3 15.78 15.81 15.84 T:aes128otrpv1 15.78 15.83 15.87 T:aes128otrpv2 16.38 16.39 16.45 T:aes256otrsv2 16.36 16.40 16.47 T:aes256otrsv1 19.73 19.76 19.79 T:aes256otrpv2 19.74 19.77 19.80 T:aes256otrpv1 24.73 24.81 24.88 T:proest256otrv1 29.15 29.24 29.35 T:riverkeyakv1 29.78 29.83 29.89 T:ketjesrv1 31.13 31.43 32.64 T:ketjesrv2 56.98 57.23 57.47 T:ketjejrv1 60.02 60.10 60.15 T:proest128otrv1 63.28 63.50 63.62 T:aezv1 67.89 67.98 68.03 T:twine80n6clocv1 75.32 75.34 75.40 T:present80n6t4silcv3 74.93 75.36 78.40 T:deoxysneq128128v13 75.45 75.97 80.34 T:deoxyseq128128v13 98.99 99.44 99.52 T:ketjejrv2 115.83 115.91 115.98 T:deoxyseq256128v13 115.93 116.23 119.02 T:deoxysneq256128v13 130.42 130.48 130.53 T:led80n6t4silcv3 142.59? 362.06? 1353.82? T:acorn128 2256.56 2258.19 2264.11 T:present80n6silcv1 2257.87 2260.01 2263.48 T:present80n6t4silcv2 4165.60 4169.13 4177.40 T:led80n6silcv1 4180.77 4187.36 4191.16 T:led80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.31 0.31 0.32 T:tiaoxinv1 0.31 0.31 0.32 T:tiaoxinv2 0.36 0.36 0.36 aegis128l 0.36 0.37 0.37 T:aegis128l 0.61 0.61 0.62 T:aezv4 0.63 0.63 0.63 aegis256 0.63 0.63 0.64 T:aegis128 0.64 0.64 0.66 T:aezv3 0.64 0.64 0.65 T:aezv5 0.80 0.80 0.81 T:morus1280128v1 0.80 0.81 0.81 T:morus1280256v1 0.81 0.82 0.82 T:morus1280256v2 0.81 0.82 0.82 T:morus1280128v2 0.83 0.83 0.88 T:aeadaes128ocbtaglen128v1 0.96? 0.97? 1.08? T:aeadaes192ocbtaglen128v1 1.02 1.02 1.02 T:aes128otrpv3 1.05 1.06 1.06 T:aes128otrcv3 1.14 1.14 1.15 T:deoxysi128v141 1.16 1.17 1.17 T:morus640128v1 1.17 1.18 1.18 T:morus640128v2 1.25? 1.27? 1.48? T:aeadaes256ocbtaglen128v1 1.31 1.32 1.33 T:deoxysi256v141 1.33 1.34 1.34 T:aes256otrpv3 1.37 1.37 1.40 T:aes128gcmv1 1.40 1.40 1.41 T:aes256otrcv3 1.49 1.50 1.50 T:deoxysneq128128v1 1.57 1.58 1.59 aes256gcmv1 1.65 1.67 1.69 T:deoxysii128v141 1.71 1.71 1.71 T:deoxysneq256128v1 1.88 1.88 1.88 T:colm0v1 1.89 1.90 1.94 T:deoxysii256v141 2.00 2.01 2.01 T:deoxyseq128128v1 2.19 2.21 2.21 T:deoxyseq256128v1 2.34 2.37 2.43 T:norx6444v3 2.52 2.53 2.55 T:norx6441v2 2.52 2.53 2.55 T:norx6441v3 2.79 2.79 2.80 T:aes128otrsv3 2.91 2.92 2.93 T:norx6441v1 3.61 3.62 3.63 T:seakeyakv2 3.79 3.79 3.80 T:norx6461v3 3.80 3.80 3.81 T:norx6461v2 3.82 3.82 3.82 T:aes256otrsv3 4.19 4.21 4.24 T:norx3241v2 4.21 4.23 4.23 T:norx3241v3 4.36 4.38 4.39 T:lakekeyakv2 4.38 4.39 4.41 T:norx6461v1 4.63 4.63 4.63 T:aes128n8t8clocv2 4.63 4.63 4.63 T:aes128n12t8clocv2 4.63 4.63 4.63 T:aes128n12t8clocv3 4.62 4.63 4.64 T:lakekeyakv1 4.69 4.69 4.69 T:aes128n12t8silcv3 4.69 4.69 4.69 T:aes128n12t8silcv2 4.69 4.69 4.69 T:aes128n8t8silcv2 4.88 4.89 4.90 T:oceankeyakv2 4.96 4.98 4.99 T:norx3241v1 5.28 5.31 5.34 T:norx6444v2 5.71 5.74 5.88 T:norx6444v1 6.33 6.34 6.37 T:norx3261v3 6.36 6.37 6.39 T:norx3261v2 6.94 6.97 6.99 T:ascon96v1 6.95 6.98 7.08 T:ascon128av11 7.23 7.25 7.27 T:acorn128v3 7.34 7.35 7.36 ascon128av12 7.41 7.42 7.71 T:riverkeyakv2 7.89 7.90 7.91 T:norx3261v1 8.23 8.23 8.24 T:acorn128v2 8.39 8.40 8.44 T:lunarkeyakv2 8.79 8.81 8.83 T:ketjemajorv2 9.34 9.34 9.34 T:aesjambuv1 9.49 9.52 9.54 T:ketjeminorv2 10.19 10.22 10.39 T:ascon128v1 10.21 10.33 10.40 T:ascon128v11 10.74 10.77 10.79 ascon128v12 14.60 14.63 14.64 T:aes128otrsv1 14.62 14.65 14.66 T:aes128otrsv2 15.72 15.73 15.75 T:twine80n6t4clocv2 16.23 16.25 16.26 T:twine80n6t4clocv3 16.26 16.28 16.29 T:aes128otrpv1 16.28 16.29 16.33 T:aes128otrpv2 17.62 17.65 17.67 T:seakeyakv1 18.68 18.69 18.73 T:aes256otrsv1 18.69 18.71 18.77 T:aes256otrsv2 19.00 19.02 19.03 T:aes128n8clocv1 19.42 19.45 19.50 T:aes128n12clocv1 20.35 20.36 20.38 T:aes256otrpv2 20.35 20.36 20.39 T:aes256otrpv1 20.45 20.48 20.53 T:aes128n8silcv1 20.46 20.54 20.73 T:aes128n12silcv1 22.25 22.26 22.41 T:oceankeyakv1 26.70 26.73 26.75 T:proest256otrv1 32.41 32.47 32.60 T:riverkeyakv1 33.73 33.76 33.77 T:ketjesrv1 35.46 35.63 35.76 T:ketjesrv2 61.29 61.37 61.44 T:ketjejrv1 62.10 62.57 62.63 T:proest128otrv1 75.76 75.84 77.85 T:deoxysneq128128v13 76.30 76.32 76.34 T:present80n6t4silcv3 102.48 102.50 102.60 T:twine80n6clocv1 104.70 108.69 109.42 T:ketjejrv2 114.61 114.78 119.59 T:deoxyseq128128v13 116.68 116.74 119.25 T:deoxysneq256128v13 123.38 123.90 124.36 T:aezv1 131.74 131.76 131.79 T:led80n6t4silcv3 176.16 176.21 176.27 T:deoxyseq256128v13 407.65? 407.76? 1293.78? T:acorn128 3403.50 3403.94 3408.42 T:present80n6silcv1 3404.11 3405.00 3407.07 T:present80n6t4silcv2 6266.71 6273.11 6275.68 T:led80n6silcv1 6295.88 6298.21 6301.89 T:led80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.37 0.37 0.38 T:aegis128l 0.37 0.38 0.38 aegis128l 0.38 0.38 0.38 T:tiaoxinv1 0.38 0.38 0.38 T:tiaoxinv2 0.61 0.61 0.62 T:aezv4 0.63 0.63 0.64 T:aezv3 0.64 0.64 0.64 T:aegis128 0.64 0.64 0.65 T:aezv5 0.64 0.64 0.65 aegis256 0.82 0.82 0.82 T:morus1280128v1 0.82 0.82 0.83 T:morus1280256v1 0.83 0.84 0.84 T:morus1280256v2 0.83 0.84 0.84 T:morus1280128v2 0.86 0.86 0.88 T:aeadaes128ocbtaglen128v1 0.99? 1.00? 1.22? T:aeadaes192ocbtaglen128v1 1.04 1.04 1.04 T:aes128otrpv3 1.09 1.09 1.09 T:aes128otrcv3 1.18 1.19 1.19 T:morus640128v1 1.19 1.19 1.20 T:morus640128v2 1.29? 1.31? 1.49? T:aeadaes256ocbtaglen128v1 1.35 1.35 1.36 T:aes256otrpv3 1.37 1.39 1.41 T:deoxysi128v141 1.38 1.39 1.40 T:aes128gcmv1 1.44 1.44 1.45 T:aes256otrcv3 1.54 1.55 1.57 T:deoxysi256v141 1.60 1.61 1.62 aes256gcmv1 1.69 1.70 1.72 T:deoxysii128v141 1.74 1.76 1.77 T:deoxysneq128128v1 1.78 1.78 1.79 T:deoxysneq256128v1 1.89 1.89 1.91 T:colm0v1 1.94 1.96 1.98 T:deoxysii256v141 2.37 2.39 2.41 T:norx6444v3 2.49 2.49 2.50 T:norx6441v3 2.49 2.49 2.50 T:norx6441v2 2.54 2.55 2.55 T:deoxyseq128128v1 2.66 2.67 2.70 T:deoxyseq256128v1 2.81 2.81 2.81 T:aes128otrsv3 2.90 2.91 2.92 T:norx6441v1 3.66 3.67 3.69 T:seakeyakv2 3.75 3.76 3.78 T:norx6461v3 3.76 3.77 3.78 T:norx6461v2 3.85 3.85 3.86 T:aes256otrsv3 4.18 4.19 4.19 T:norx3241v3 4.19 4.19 4.20 T:norx3241v2 4.35 4.36 4.37 T:norx6461v1 4.40 4.42 4.43 T:lakekeyakv2 4.60 4.60 4.60 T:aes128n8t8clocv2 4.60 4.60 4.61 T:aes128n12t8clocv2 4.60 4.60 4.60 T:aes128n12t8clocv3 4.66 4.66 4.66 T:aes128n12t8silcv2 4.66 4.66 4.66 T:aes128n8t8silcv2 4.66 4.66 4.66 T:aes128n12t8silcv3 4.66 4.67 4.68 T:lakekeyakv1 4.92 4.93 4.93 T:norx3241v1 4.95 4.97 4.98 T:oceankeyakv2 5.26 5.27 5.30 T:norx6444v2 5.64 5.65 5.66 T:norx6444v1 6.32 6.33 6.34 T:norx3261v2 6.32 6.34 6.35 T:norx3261v3 7.10 7.12 7.16 T:ascon96v1 7.11 7.13 7.14 T:ascon128av11 7.34 7.35 7.38 ascon128av12 7.59 7.61 7.63 T:riverkeyakv2 7.71 7.72 7.72 T:acorn128v3 7.85 7.86 7.87 T:norx3261v1 8.21 8.22 8.24 T:acorn128v2 8.43 8.48 8.53 T:lunarkeyakv2 9.30 9.31 9.34 T:ketjemajorv2 9.35 9.37 9.39 T:ketjeminorv2 9.49 9.50 9.50 T:aesjambuv1 10.29 10.34 10.41 T:ascon128v11 10.32 10.37 10.42 T:ascon128v1 10.66 10.68 10.70 ascon128v12 14.62 14.64 14.66 T:aes128otrsv1 14.64 14.65 14.73 T:aes128otrsv2 15.71 15.73 15.75 T:twine80n6t4clocv2 16.22 16.23 16.26 T:twine80n6t4clocv3 16.28 16.29 16.37 T:aes128otrpv2 16.27 16.30 16.34 T:aes128otrpv1 17.65 17.73 17.74 T:seakeyakv1 18.67 18.72 18.74 T:aes256otrsv2 18.69 18.73 18.75 T:aes256otrsv1 19.02 19.07 19.10 T:aes128n12clocv1 19.44 19.46 19.50 T:aes128n8clocv1 20.34 20.36 20.38 T:aes256otrpv2 20.34 20.38 20.39 T:aes256otrpv1 20.51 20.53 20.55 T:aes128n8silcv1 20.48 20.56 20.78 T:aes128n12silcv1 22.29 22.35 22.49 T:oceankeyakv1 26.61 26.64 26.69 T:proest256otrv1 32.75 32.81 32.88 T:riverkeyakv1 34.05 34.08 34.12 T:ketjesrv1 34.91 35.03 35.63 T:ketjesrv2 61.61 61.72 61.80 T:ketjejrv1 62.58 62.66 62.70 T:proest128otrv1 76.65 76.67 76.71 T:present80n6t4silcv3 91.01 91.13 93.23 T:deoxysneq128128v13 102.60 102.69 102.76 T:twine80n6clocv1 104.66 104.86 105.06 T:ketjejrv2 114.61 114.69 121.22 T:deoxyseq128128v13 123.61 123.93 123.99 T:aezv1 132.16 132.19 132.62 T:led80n6t4silcv3 133.60 133.80 136.67 T:deoxysneq256128v13 176.32 176.40 176.48 T:deoxyseq256128v13 403.96? 404.41? 1294.15? T:acorn128 3404.33 3409.69 3410.11 T:present80n6t4silcv2 3404.54 3409.86 3410.35 T:present80n6silcv1 6264.52 6267.81 6278.61 T:led80n6silcv1 6297.21 6300.72 6303.02 T:led80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.37 0.37 0.41 T:aegis128l 0.38 0.38 0.39 T:tiaoxinv1 0.38 0.38 0.39 T:tiaoxinv2 0.38 0.38 0.39 T:aezv4 0.39 0.39 0.40 aegis128l 0.40 0.40 0.41 T:aezv5 0.40 0.40 0.40 T:aezv3 0.64 0.64 0.64 T:aegis128 0.66 0.66 0.66 aegis256 0.82 0.82 0.83 T:morus1280128v1 0.82 0.82 0.82 T:morus1280256v1 0.83 0.83 0.84 T:morus1280256v2 0.83 0.84 0.84 T:morus1280128v2 0.86 0.86 0.87 T:aeadaes128ocbtaglen128v1 0.99 0.99 1.00 T:aeadaes192ocbtaglen128v1 1.03 1.04 1.04 T:aes128otrpv3 1.09 1.09 1.09 T:aes128otrcv3 1.18 1.19 1.19 T:morus640128v1 1.19 1.20 1.20 T:morus640128v2 1.28 1.30 1.30 T:aeadaes256ocbtaglen128v1 1.35 1.35 1.35 T:aes256otrpv3 1.36 1.38 1.40 T:deoxysi128v141 1.38 1.39 1.40 T:aes128gcmv1 1.44 1.44 1.44 T:aes256otrcv3 1.54 1.54 1.55 T:deoxysi256v141 1.60 1.61 1.62 aes256gcmv1 1.68 1.69 1.71 T:deoxysii128v141 1.74 1.75 1.77 T:deoxysneq128128v1 1.77 1.78 1.78 T:deoxysneq256128v1 1.89 1.90 1.90 T:colm0v1 1.93 1.94 1.96 T:deoxysii256v141 2.36 2.37 2.39 T:norx6444v3 2.48 2.49 2.49 T:norx6441v3 2.49 2.50 2.50 T:norx6441v2 2.53 2.54 2.55 T:deoxyseq128128v1 2.67 2.67 2.68 T:deoxyseq256128v1 2.80 2.81 2.81 T:aes128otrsv3 2.90 2.91 2.91 T:norx6441v1 3.68 3.68 3.70 T:seakeyakv2 3.75 3.75 3.76 T:norx6461v3 3.76 3.76 3.76 T:norx6461v2 3.85 3.85 3.85 T:aes256otrsv3 4.17 4.18 4.19 T:norx3241v3 4.19 4.19 4.20 T:norx3241v2 4.35 4.35 4.36 T:norx6461v1 4.42 4.43 4.44 T:lakekeyakv2 4.60 4.60 4.61 T:aes128n8t8clocv2 4.60 4.60 4.61 T:aes128n12t8clocv3 4.60 4.61 4.61 T:aes128n12t8clocv2 4.65 4.65 4.65 T:aes128n12t8silcv3 4.65 4.65 4.65 T:aes128n12t8silcv2 4.65 4.65 4.65 T:aes128n8t8silcv2 4.68 4.68 4.69 T:lakekeyakv1 4.92 4.93 4.93 T:norx3241v1 4.94 4.96 4.97 T:oceankeyakv2 5.28 5.29 5.31 T:norx6444v2 5.66 5.67 5.68 T:norx6444v1 6.31 6.32 6.33 T:norx3261v2 6.32 6.33 6.34 T:norx3261v3 7.08 7.10 7.13 T:ascon96v1 7.11 7.13 7.16 T:ascon128av11 7.33 7.34 7.35 ascon128av12 7.59 7.61 7.65 T:riverkeyakv2 7.70 7.71 7.72 T:acorn128v3 7.85 7.86 7.86 T:norx3261v1 8.23 8.23 8.24 T:acorn128v2 8.45 8.46 8.53 T:lunarkeyakv2 9.31 9.33 9.35 T:ketjemajorv2 9.38 9.40 9.42 T:ketjeminorv2 9.49 9.49 9.50 T:aesjambuv1 10.26 10.30 10.43 T:ascon128v11 10.29 10.33 10.40 T:ascon128v1 10.66 10.68 10.70 ascon128v12 14.65 14.66 14.67 T:aes128otrsv1 14.66 14.66 14.70 T:aes128otrsv2 15.72 15.74 15.75 T:twine80n6t4clocv2 16.22 16.22 16.25 T:twine80n6t4clocv3 16.29 16.31 16.37 T:aes128otrpv1 16.33 16.35 16.39 T:aes128otrpv2 17.68 17.74 17.78 T:seakeyakv1 18.70 18.71 18.74 T:aes256otrsv1 18.71 18.74 18.76 T:aes256otrsv2 18.98 19.02 19.12 T:aes128n12clocv1 19.44 19.46 19.49 T:aes128n8clocv1 20.36 20.37 20.38 T:aes256otrpv1 20.36 20.38 20.41 T:aes256otrpv2 20.51 20.54 20.75 T:aes128n12silcv1 20.52 20.54 20.58 T:aes128n8silcv1 22.29 22.36 22.48 T:oceankeyakv1 26.61 26.64 26.71 T:proest256otrv1 32.75 32.81 32.84 T:riverkeyakv1 34.06 34.09 34.13 T:ketjesrv1 34.92 35.03 35.62 T:ketjesrv2 61.68 61.77 61.82 T:ketjejrv1 62.57 62.62 62.71 T:proest128otrv1 76.66 76.70 76.72 T:present80n6t4silcv3 90.91 91.08 93.30 T:deoxysneq128128v13 102.54 102.63 102.70 T:twine80n6clocv1 104.67 104.80 105.15 T:ketjejrv2 114.67 114.92 121.29 T:deoxyseq128128v13 123.44 123.78 123.88 T:aezv1 132.12 132.20 132.66 T:led80n6t4silcv3 133.62 133.88 136.70 T:deoxysneq256128v13 176.34 176.47 176.54 T:deoxyseq256128v13 403.98? 404.61? 1293.96? T:acorn128 3404.42 3409.70 3409.82 T:present80n6t4silcv2 3404.57 3410.03 3410.70 T:present80n6silcv1 6270.49 6274.73 6285.18 T:led80n6silcv1 6298.38 6299.93 6303.51 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.97 1.98 2.15 aegis128l 2.12 2.17 2.21 T:aegis128l 2.19 2.27 2.29 T:aegis128 2.43 2.45 2.59 T:tiaoxinv1 2.42 2.52 2.57 T:tiaoxinv2 2.80 2.83 2.88 aegis256 2.87 2.91 3.06 T:aezv5 3.15 3.19 3.47 T:aezv4 3.34 3.34 3.48 T:aezv3 4.38 4.42 4.52 T:morus640128v1 4.53 4.58 4.61 T:morus1280128v1 4.49 4.62 4.67 T:morus1280256v1 4.62 4.64 4.73 T:morus640128v2 4.79 4.81 4.96 T:morus1280256v2 4.78 4.89 4.97 T:morus1280128v2 5.02 5.02 5.03 T:aes128otrpv3 5.15? 5.27? 6.89? T:aeadaes128ocbtaglen128v1 5.23 5.28 5.41 T:deoxysneq128128v1 5.43? 5.51? 10.91? T:aeadaes192ocbtaglen128v1 5.96 5.98 6.07 T:aes128otrsv3 6.03 6.09 6.16 T:deoxysneq256128v1 6.45 6.46 6.47 T:aes256otrpv3 6.35 6.50 6.56 T:colm0v1 6.38? 6.54? 11.81? T:aeadaes256ocbtaglen128v1 6.83 6.87 6.95 T:aes128otrcv3 6.89 6.95 7.01 T:aes128n12t8clocv2 6.86 6.96 7.02 T:aes128n8t8clocv2 6.90 6.99 7.04 T:aes128n12t8clocv3 7.07 7.13 7.18 T:deoxysi128v141 7.27 7.30 7.34 T:aes128gcmv1 7.70 7.72 7.73 T:aes256otrsv3 7.95 7.98 8.05 aes256gcmv1 8.23 8.25 8.27 T:aes128n12t8silcv3 8.23 8.26 8.27 T:aes128n12t8silcv2 8.23 8.26 8.27 T:aes128n8t8silcv2 8.27 8.38 8.44 T:deoxysi256v141 8.61 8.67 8.80 T:norx6441v1 8.85 8.94 9.00 T:norx6441v2 8.77 8.98 9.02 T:deoxyseq128128v1 8.95 8.99 9.02 T:norx6441v3 9.03 9.07 9.11 T:deoxysii128v141 9.10 9.15 9.30 T:aes256otrcv3 10.62 10.70 10.82 T:deoxyseq256128v1 10.62 10.73 10.88 T:norx3241v1 10.73 10.78 10.95 T:ascon128av11 10.77 10.81 10.91 T:norx3241v2 10.62 10.84 11.24 T:ascon96v1 10.87 10.91 11.00 T:deoxysii256v141 10.88 10.95 11.14 T:norx3241v3 11.24 11.34 11.50 ascon128av12 12.74 12.83 12.91 T:norx6461v1 12.98 13.02 13.09 T:norx6461v3 13.00 13.03 13.09 T:norx6461v2 13.21 13.23 13.26 T:aesjambuv1 13.75 13.80 14.05 T:ascon128v11 13.79 13.90 14.10 T:ascon128v1 14.32 14.37 14.56 ascon128v12 15.56 15.66 16.01 T:lakekeyakv1 15.91 15.95 16.12 T:norx6444v3 15.88 15.96 16.02 T:norx3261v3 15.93 16.05 16.09 T:norx3261v2 16.72 16.79 16.84 T:norx3261v1 18.20 18.29 18.59 T:riverkeyakv2 19.13 19.19 19.55 T:lakekeyakv2 23.59 23.85 23.95 T:twine80n6t4clocv3 24.11 24.29 24.45 T:twine80n6t4clocv2 24.41 24.47 24.73 T:aes128n8clocv1 24.76 24.94 25.20 T:aes128otrsv1 24.75 24.95 25.78 T:aes128n12clocv1 24.84 24.95 25.05 T:aes128otrsv2 26.52 26.66 26.78 T:aes128otrpv2 26.55 26.69 27.05 T:aes128otrpv1 28.52 28.80 29.09 T:aes128n8silcv1 28.82 28.95 29.04 T:aes128n12silcv1 30.09 30.23 30.38 T:acorn128v2 30.51 30.59 30.71 T:acorn128v3 31.62 31.77 31.91 T:aes256otrsv2 31.69 31.91 32.07 T:aes256otrsv1 33.23 33.49 33.62 T:aes256otrpv2 33.35 33.56 33.70 T:aes256otrpv1 33.91 34.05 35.94 T:seakeyakv2 35.64 35.75 35.88 T:ketjeminorv2 37.48 37.65 37.75 T:norx6444v2 40.86 42.00 42.61 T:norx6444v1 52.71 52.80 52.99 T:ketjesrv1 53.95 54.30 54.65 T:oceankeyakv2 58.09 58.30 58.67 T:riverkeyakv1 59.72 60.06 60.37 T:ketjesrv2 63.20 63.32 63.72 T:ketjemajorv2 76.66 77.26 77.94 T:proest256otrv1 80.94 81.39 82.26 T:ketjejrv1 86.10 86.77 89.39 T:deoxysneq128128v13 94.42 94.62 94.91 T:present80n6t4silcv3 113.96 114.33 114.81 T:twine80n6clocv1 121.58 121.98 122.20 T:proest128otrv1 129.66 129.85 130.27 T:aezv1 131.68 132.29 135.09 T:deoxysneq256128v13 132.80 133.39 133.76 T:seakeyakv1 136.58 137.15 137.91 T:lunarkeyakv2 138.01 138.30 138.70 T:ketjejrv2 143.02 143.83 149.84 T:deoxyseq128128v13 156.93 157.23 157.40 T:led80n6t4silcv3 218.94 219.48 219.89 T:deoxyseq256128v13 243.09 243.54 244.92 T:oceankeyakv1 1444.92? 1446.98? 4743.41? T:acorn128 3813.42 3815.14 3819.84 T:present80n6t4silcv2 3814.89 3816.05 3820.41 T:present80n6silcv1 6963.06 6980.06 6997.97 T:led80n6silcv1 6999.07 7025.54 7052.77 T:led80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 2.13 2.17 2.32 aegis128l 2.19 2.23 2.27 T:aegis128l 2.33 2.35 2.37 T:aegis128 2.51 2.54 2.77 T:tiaoxinv1 2.49 2.59 2.69 T:tiaoxinv2 2.91? 2.93? 3.75? T:aezv5 2.99 3.01 3.03 aegis256 3.14 3.19 3.30 T:aezv4 3.30 3.30 3.31 T:aezv3 4.60 4.70 4.82 T:morus640128v1 4.83 4.87 5.04 T:morus640128v2 4.84 4.87 4.96 T:morus1280256v1 4.88 4.95 5.03 T:morus1280128v1 5.11 5.14 5.18 T:aes128otrpv3 5.20 5.24 5.29 T:morus1280256v2 5.19 5.26 5.45 T:morus1280128v2 5.77? 5.81? 8.45? T:aeadaes128ocbtaglen128v1 5.97 5.98 5.99 T:aes128otrsv3 6.25? 6.28? 8.24? T:aeadaes192ocbtaglen128v1 6.56 6.58 6.60 T:aes256otrpv3 6.91 6.93 7.02 T:aes128n8t8clocv2 6.91 6.95 6.96 T:aes128n12t8clocv3 6.95 6.97 7.00 T:aes128n12t8clocv2 6.80? 7.02? 12.09? T:aeadaes256ocbtaglen128v1 7.06 7.09 7.16 T:aes128otrcv3 7.11 7.16 7.20 T:aes128gcmv1 7.27 7.46 7.77 T:colm0v1 7.86 7.88 7.93 aes256gcmv1 7.97 7.99 8.17 T:aes256otrsv3 8.26 8.27 8.30 T:aes128n12t8silcv2 8.27 8.27 8.30 T:aes128n12t8silcv3 8.27 8.28 8.34 T:aes128n8t8silcv2 8.76 8.81 8.88 T:norx6441v1 8.86 8.91 8.98 T:deoxysneq256128v1 8.83 8.92 8.95 T:norx6441v2 8.88 8.93 9.37 T:deoxysneq128128v1 8.89 8.98 9.02 T:norx6441v3 9.40 9.44 9.53 T:aes256otrcv3 9.64 9.70 9.78 T:deoxysii128v141 10.07 10.12 10.21 T:deoxysi128v141 10.88 10.89 10.91 T:norx3241v1 10.88 11.02 11.26 T:ascon96v1 11.01 11.02 11.18 T:norx3241v2 11.05 11.11 11.19 T:norx3241v3 10.88 11.16 11.33 T:ascon128av11 11.34 11.42 11.73 ascon128av12 11.55 11.64 11.70 T:deoxysi256v141 11.88 11.95 12.01 T:deoxysii256v141 12.66 12.79 12.90 T:deoxyseq128128v1 12.82 12.87 12.95 T:norx6461v1 12.84 12.93 13.07 T:norx6461v2 13.02 13.08 13.15 T:norx6461v3 13.37 13.41 13.43 T:aesjambuv1 13.15 13.52 13.85 T:deoxyseq256128v1 13.85 13.90 14.02 T:ascon128v11 13.84 13.95 14.16 T:ascon128v1 14.23 14.36 14.52 ascon128v12 15.55 15.64 16.16 T:lakekeyakv1 15.79 15.82 16.19 T:norx6444v3 16.09 16.12 16.21 T:norx3261v3 16.11 16.17 16.37 T:norx3261v2 16.89 16.92 16.98 T:norx3261v1 18.48 18.77 19.06 T:riverkeyakv2 19.23 19.32 19.63 T:lakekeyakv2 23.66 23.77 24.11 T:twine80n6t4clocv3 24.13 24.17 24.20 T:twine80n6t4clocv2 24.57 24.73 25.87 T:aes128n12clocv1 24.79 24.98 25.18 T:aes128n8clocv1 24.97 25.03 25.27 T:aes128otrsv2 24.96 25.05 25.13 T:aes128otrsv1 26.70 26.75 26.94 T:aes128otrpv1 26.66 26.78 27.00 T:aes128otrpv2 28.72 29.02 29.53 T:aes128n8silcv1 28.75 29.13 29.53 T:aes128n12silcv1 30.25 30.30 30.34 T:acorn128v2 30.73 30.79 30.91 T:acorn128v3 31.74 31.89 32.15 T:aes256otrsv2 31.73 31.99 32.17 T:aes256otrsv1 33.59 33.70 34.02 T:aes256otrpv2 33.45 33.74 34.00 T:aes256otrpv1 34.00 34.10 34.34 T:seakeyakv2 35.17 35.54 35.59 T:ketjeminorv2 37.82 37.95 38.10 T:norx6444v2 40.37 40.43 40.55 T:norx6444v1 53.24 53.66 53.83 T:ketjesrv1 54.66 55.02 55.20 T:oceankeyakv2 58.42 58.59 59.03 T:riverkeyakv1 59.79 60.33 60.61 T:ketjesrv2 62.77 63.05 63.67 T:ketjemajorv2 77.55 78.18 78.49 T:proest256otrv1 81.77 82.18 83.26 T:ketjejrv1 94.93 95.16 95.46 T:present80n6t4silcv3 101.21 101.78 103.59 T:deoxysneq128128v13 114.41 114.76 115.23 T:twine80n6clocv1 122.55 123.37 125.23 T:proest128otrv1 132.96 133.23 133.59 T:aezv1 133.25 133.64 133.95 T:seakeyakv1 137.48 137.81 138.42 T:lunarkeyakv2 139.05 139.37 139.80 T:ketjejrv2 143.16 144.23 150.50 T:deoxyseq128128v13 148.61 149.23 152.52 T:deoxysneq256128v13 157.45 157.86 158.02 T:led80n6t4silcv3 219.31 219.72 220.00 T:deoxyseq256128v13 243.76 244.35 245.71 T:oceankeyakv1 1442.73? 1445.18? 4746.88? T:acorn128 3815.14 3818.63 3819.42 T:present80n6t4silcv2 3815.65 3820.55 3822.13 T:present80n6silcv1 6941.61 6956.48 6974.22 T:led80n6silcv1 6979.66 6992.54 6996.98 T:led80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 2.16? 2.20? 2.81? aegis128l 2.18 2.22 2.23 T:aegis128l 2.29 2.34 2.36 T:aegis128 2.51? 2.52? 2.86? T:tiaoxinv1 2.52? 2.58? 2.88? T:tiaoxinv2 2.55? 2.58? 2.92? T:aezv5 2.70 2.77 2.88 T:aezv4 2.87? 2.88? 3.19? T:aezv3 2.98 3.02 3.24 aegis256 4.54 4.56 4.61 T:morus640128v1 4.87 4.88 4.98 T:morus640128v2 4.84 4.91 4.93 T:morus1280256v1 4.88 4.91 4.98 T:morus1280128v1 5.09 5.12 5.15 T:aes128otrpv3 5.13 5.17 5.24 T:morus1280256v2 5.16 5.19 5.23 T:morus1280128v2 5.65 5.76 5.98 T:aeadaes128ocbtaglen128v1 5.95 5.96 5.99 T:aes128otrsv3 6.26? 6.27? 11.59? T:aeadaes192ocbtaglen128v1 6.55 6.56 6.58 T:aes256otrpv3 6.77 6.80 6.89 T:aeadaes256ocbtaglen128v1 6.85 6.86 7.14 T:aes128n8t8clocv2 6.86 6.89 6.99 T:aes128n12t8clocv2 6.89 6.96 7.16 T:aes128n12t8clocv3 7.06 7.09 7.16 T:aes128otrcv3 7.15 7.18 7.21 T:aes128gcmv1 7.38 7.48 7.73 T:colm0v1 7.80 7.89 7.91 aes256gcmv1 7.96 7.98 7.99 T:aes256otrsv3 8.19 8.20 8.49 T:aes128n8t8silcv2 8.20 8.20 8.21 T:aes128n12t8silcv2 8.20 8.20 8.23 T:aes128n12t8silcv3 8.69 8.77 8.80 T:deoxysneq256128v1 8.77 8.80 8.85 T:norx6441v1 8.87 8.90 8.95 T:norx6441v3 8.88 8.91 8.95 T:norx6441v2 8.80 8.93 9.27 T:deoxysneq128128v1 9.41 9.44 9.48 T:aes256otrcv3 9.66 9.68 9.77 T:deoxysii128v141 10.07 10.12 10.27 T:deoxysi128v141 10.88 10.89 10.93 T:norx3241v1 10.86 10.98 11.52 T:ascon128av11 10.86 10.99 11.09 T:ascon96v1 11.01 11.02 11.09 T:norx3241v2 11.09 11.11 11.16 T:norx3241v3 11.30 11.36 11.55 ascon128av12 11.50 11.61 11.81 T:deoxysi256v141 11.83 11.94 11.98 T:deoxysii256v141 12.62 12.70 12.87 T:deoxyseq128128v1 12.80 12.87 12.95 T:norx6461v1 12.89 12.95 13.00 T:norx6461v2 12.96 13.02 13.09 T:norx6461v3 13.09 13.18 13.77 T:deoxyseq256128v1 13.35 13.36 13.41 T:aesjambuv1 13.72 13.88 14.32 T:ascon128v11 13.82 13.93 14.23 T:ascon128v1 14.18 14.34 14.62 ascon128v12 15.70 15.79 16.13 T:lakekeyakv1 15.67 15.80 16.21 T:norx6444v3 16.02 16.12 16.20 T:norx3261v3 16.17 16.23 16.30 T:norx3261v2 16.89 16.94 16.98 T:norx3261v1 18.57 18.62 18.96 T:riverkeyakv2 19.27 19.37 19.57 T:lakekeyakv2 23.59 23.71 23.82 T:twine80n6t4clocv3 24.16 24.29 24.52 T:twine80n6t4clocv2 24.59 24.74 25.81 T:aes128n12clocv1 24.75 24.85 25.12 T:aes128n8clocv1 25.09 25.17 25.45 T:aes128otrsv2 24.98 25.26 25.45 T:aes128otrsv1 26.84 26.93 27.12 T:aes128otrpv2 26.88 27.18 27.32 T:aes128otrpv1 28.62 28.79 29.20 T:aes128n12silcv1 28.66 28.89 29.16 T:aes128n8silcv1 30.16 30.23 30.28 T:acorn128v2 30.73 30.77 30.81 T:acorn128v3 31.79 31.88 32.21 T:aes256otrsv2 31.47 31.92 32.14 T:aes256otrsv1 33.38 33.49 33.79 T:aes256otrpv2 33.62 33.81 33.95 T:aes256otrpv1 34.17 34.23 34.44 T:seakeyakv2 35.37 35.60 35.72 T:ketjeminorv2 37.84 37.96 38.20 T:norx6444v2 40.40 40.48 40.65 T:norx6444v1 53.34 53.60 53.78 T:ketjesrv1 54.59 54.72 54.88 T:oceankeyakv2 58.57 58.77 59.34 T:riverkeyakv1 59.77 59.95 60.81 T:ketjesrv2 62.86 63.32 64.10 T:ketjemajorv2 75.02 75.58 76.57 T:proest256otrv1 81.54 82.07 82.91 T:ketjejrv1 94.81 94.89 95.23 T:present80n6t4silcv3 101.16 101.80 103.48 T:deoxysneq128128v13 113.84 114.34 114.48 T:twine80n6clocv1 121.94 122.05 122.31 T:proest128otrv1 132.48 132.89 133.48 T:aezv1 133.05 133.46 133.66 T:seakeyakv1 137.52 137.86 138.18 T:lunarkeyakv2 139.00 139.27 139.94 T:ketjejrv2 143.19 144.42 150.41 T:deoxyseq128128v13 148.62 149.41 152.57 T:deoxysneq256128v13 157.27 157.54 157.76 T:led80n6t4silcv3 219.95 220.45 220.79 T:deoxyseq256128v13 242.91 243.73 244.98 T:oceankeyakv1 1443.21? 1444.83? 4746.07? T:acorn128 3813.93 3817.70 3819.68 T:present80n6t4silcv2 3817.29 3820.56 3822.65 T:present80n6silcv1 6946.07 6964.91 6970.55 T:led80n6silcv1 6969.29 6981.19 6989.61 T:led80n6t4silcv2