VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20240625

[Page version: 20240726 23:46:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.32? 0.34? 0.38? T:tiaoxinv1 0.31? 0.35? 0.39? T:tiaoxinv2 0.38 0.40 0.41 aegis128l 0.36? 0.41? 0.42? T:aegis128l 0.60 0.61 0.62 aegis256 0.60 0.61 0.62 T:aegis128 0.74? 0.82? 0.92? T:aeadaes128ocbtaglen128v1 0.87 0.88 0.89 T:aes128otrsv3 0.88 0.90 0.92 T:aes128otrpv3 0.63? 0.93? 1.07? T:aeadaes192ocbtaglen128v1 0.93 0.95 0.96 T:aes128otrcv3 0.99 1.00 1.01 T:aezv4 1.02 1.03 1.06 T:aezv5 1.03 1.04 1.05 T:aezv3 1.10 1.11 1.13 T:morus1280128v2 1.11 1.12 1.15 T:aes256otrpv3 1.11 1.13 1.14 T:aes256otrsv3 1.17 1.18 1.20 T:aes256otrcv3 1.29 1.31 1.40 T:deoxysi128v141 1.29 1.33 1.41 T:deoxysneq128128v1 1.39 1.41 1.42 T:morus1280256v1 1.40 1.42 1.48 T:morus1280256v2 1.46 1.51 1.59 T:deoxysi256v141 1.51 1.52 1.52 T:morus640128v2 1.48 1.52 1.54 T:deoxysneq256128v1 1.51 1.52 1.54 T:morus640128v1 1.66 1.76 1.82 T:aeadaes256ocbtaglen128v1 1.97 2.03 2.08 T:morus1280128v1 2.30 2.40 2.47 T:lunarkeyakv2 2.48 2.49 2.51 T:colm0v1 2.49 2.59 2.69 T:aes128gcmv1 2.74 2.78 2.79 T:norx6441v2 2.72 2.81 2.88 T:deoxysii128v141 2.81 2.83 2.85 T:norx6441v3 2.68? 2.90? 3.08? T:aes256gcmv1 2.89 3.08 3.16 T:deoxyseq128128v1 3.08 3.15 3.28 T:seakeyakv2 3.25 3.28 3.33 T:oceankeyakv2 3.18 3.32 3.45 T:deoxysii256v141 3.30 3.34 3.35 T:norx6441v1 3.47 3.65 3.81 T:deoxyseq256128v1 3.82 3.84 3.87 T:norx3241v3 3.87 3.88 3.89 T:norx3241v2 4.17 4.19 4.22 T:norx6461v2 4.21 4.23 4.25 T:norx6461v3 4.64 4.66 4.67 T:norx3241v1 4.98 5.00 5.02 T:norx6461v1 5.22 5.23 5.23 T:aes128n12t8clocv3 5.22 5.23 5.23 T:aes128n8t8clocv2 5.23 5.23 5.23 T:aes128n12t8silcv3 5.23 5.23 5.23 T:aes128n8t8silcv2 5.22 5.23 5.24 T:aes128n12t8clocv2 5.23 5.23 5.24 T:aes128n12t8silcv2 5.26 5.32 5.39 T:lakekeyakv1 5.44 5.47 5.51 T:norx6444v3 5.44 5.47 5.48 T:norx6444v2 5.55 5.62 5.66 T:lakekeyakv2 5.91 5.92 5.97 T:norx3261v3 5.93 5.95 5.98 T:norx3261v2 6.53 6.56 6.61 T:norx6444v1 7.67 7.69 7.72 T:norx3261v1 10.49 10.49 10.50 T:aesjambuv1 10.99 11.10 11.16 T:ketjemajorv2 12.25 12.28 12.30 ascon128av12 12.64 12.66 12.69 T:ascon96v1 12.69 12.72 12.74 T:ascon128av11 13.60 13.74 13.94 T:ketjeminorv2 15.47 15.51 15.54 T:riverkeyakv2 15.89 15.92 15.95 T:twine80n6t4clocv2 16.30 16.31 16.34 T:twine80n6t4clocv3 18.14 18.18 18.20 ascon128v12 18.54 18.80 19.09 T:oceankeyakv1 18.80 18.82 18.87 T:ascon128v1 18.81 18.83 18.85 T:ascon128v11 19.30 19.33 19.36 T:aes128otrpv2 19.30 19.38 19.47 T:aes128otrsv2 19.40 19.44 19.47 T:aes128otrpv1 19.45 19.52 19.57 T:aes128otrsv1 24.37 24.43 24.45 T:aes256otrpv2 24.39 24.46 24.50 T:aes256otrsv2 24.58 24.66 24.74 T:aes256otrpv1 24.65 24.75 24.79 T:aes256otrsv1 30.35 30.40 30.44 T:proest256otrv1 30.96 31.06 31.14 T:aes128n12clocv1 31.04 31.09 31.13 T:aes128n8clocv1 34.72 34.77 34.82 T:aes128n8silcv1 34.77 34.83 34.87 T:aes128n12silcv1 44.09 44.38 44.80 T:riverkeyakv1 53.05 54.97 55.20 T:ketjesrv1 57.54 58.24 59.90 T:ketjesrv2 78.87 78.90 78.96 T:present80n6t4silcv3 84.43 85.42 85.77 T:ketjejrv1 100.90 101.19 101.36 T:seakeyakv1 107.00 107.14 107.63 T:proest128otrv1 116.21 116.26 116.32 T:led80n6t4silcv3 120.49 120.73 120.76 T:deoxysneq128128v13 127.22 127.76 128.29 T:ketjejrv2 153.02 153.13 153.17 T:deoxysneq256128v13 159.78 160.17 160.38 T:twine80n6clocv1 241.64 241.90 247.13 T:deoxyseq128128v13 246.80 247.85 248.71 T:aezv1 307.14 307.47 308.79 T:deoxyseq256128v13 415.02 415.44 415.82 aes256gcmv1 521.44 521.87 522.51 T:acorn128v3 472.51? 523.92? 753.81? T:acorn128 470.06? 524.16? 778.46? T:acorn128v2 6913.97 6918.50 6920.42 T:present80n6silcv1 6924.40 6926.96 6932.60 T:present80n6t4silcv2 12792.88 12806.29 12833.39 T:led80n6silcv1 12834.32 12838.10 12840.59 T:led80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.36? 0.40? 0.42? T:aegis128l 0.39 0.41 0.42 aegis128l 0.43 0.45 0.46 T:tiaoxinv2 0.44 0.46 0.48 T:tiaoxinv1 0.60 0.62 0.63 T:aegis128 0.64 0.65 0.66 aegis256 0.70? 0.82? 0.91? T:aeadaes128ocbtaglen128v1 0.88 0.89 0.90 T:aes128otrsv3 0.88 0.90 0.92 T:aes128otrpv3 0.93 0.95 0.96 T:aes128otrcv3 0.88? 0.95? 1.02? T:aeadaes192ocbtaglen128v1 0.98 0.99 1.00 T:aezv4 1.00 1.01 1.02 T:aezv3 1.01 1.03 1.06 T:aezv5 1.09 1.10 1.13 T:aes256otrpv3 1.11 1.12 1.13 T:aes256otrsv3 1.11 1.12 1.14 T:morus1280128v2 1.18 1.18 1.19 T:aes256otrcv3 1.39 1.41 1.42 T:morus1280256v1 1.42 1.47 1.56 T:morus1280256v2 1.50 1.54 1.61 T:deoxysi128v141 1.53 1.55 1.56 T:morus640128v1 1.55 1.56 1.57 T:morus640128v2 1.54 1.58 1.62 T:deoxysneq128128v1 1.69 1.77 1.81 T:aeadaes256ocbtaglen128v1 1.74 1.77 1.84 T:deoxysi256v141 1.83 1.87 1.88 T:deoxysneq256128v1 2.03 2.06 2.10 T:morus1280128v1 2.38 2.46 2.60 T:lunarkeyakv2 2.47 2.53 2.57 T:colm0v1 2.46 2.58 2.72 T:aes128gcmv1 2.75 2.77 2.79 T:norx6441v2 2.80 2.83 2.84 T:norx6441v3 2.84 2.88 2.91 T:deoxysii128v141 2.81 2.94 3.01 T:aes256gcmv1 3.14 3.19 3.39 T:seakeyakv2 3.15 3.20 3.24 T:deoxysii256v141 3.22 3.38 3.49 T:oceankeyakv2 3.38 3.40 3.42 T:norx6441v1 3.37 3.49 3.52 T:deoxyseq128128v1 3.78 3.79 3.81 T:norx3241v2 3.79 3.81 3.82 T:norx3241v3 4.07 4.11 4.13 T:norx6461v2 4.00 4.14 4.33 T:deoxyseq256128v1 4.17 4.19 4.22 T:norx6461v3 4.53 4.55 4.57 T:norx3241v1 5.12 5.14 5.15 T:aes128n8t8clocv2 5.11 5.14 5.15 T:aes128n12t8silcv3 5.12 5.14 5.15 T:aes128n12t8clocv2 5.12 5.14 5.15 T:aes128n8t8silcv2 5.12 5.14 5.15 T:aes128n12t8silcv2 5.13 5.14 5.15 T:norx6461v1 5.14 5.15 5.17 T:aes128n12t8clocv3 5.17 5.25 5.31 T:lakekeyakv1 5.42 5.45 5.47 T:norx6444v2 5.42 5.47 5.50 T:norx6444v3 5.60 5.64 5.70 T:lakekeyakv2 5.85 5.87 5.89 T:norx3261v3 5.86 5.89 5.92 T:norx3261v2 6.49 6.53 6.58 T:norx6444v1 7.51 7.53 7.55 T:norx3261v1 10.64 10.64 10.69 T:aesjambuv1 10.87 10.92 10.99 T:ketjemajorv2 12.17 12.19 12.21 ascon128av12 12.56 12.57 12.60 T:ascon128av11 12.79 12.80 12.83 T:ascon96v1 14.35 14.40 14.45 T:ketjeminorv2 15.43 15.45 15.48 T:riverkeyakv2 15.71 15.74 15.75 T:twine80n6t4clocv2 16.23 16.27 16.34 T:twine80n6t4clocv3 18.17 18.19 18.21 ascon128v12 18.78 18.80 18.84 T:ascon128v1 18.78 18.81 18.86 T:ascon128v11 18.65 18.92 19.21 T:oceankeyakv1 18.91 18.93 18.98 T:aes128otrpv2 18.90 18.95 18.97 T:aes128otrsv2 19.06 19.08 19.12 T:aes128otrpv1 19.07 19.11 19.21 T:aes128otrsv1 23.99 24.03 24.08 T:aes256otrsv2 24.01 24.05 24.09 T:aes256otrpv2 24.25 24.31 24.34 T:aes256otrpv1 24.28 24.31 24.38 T:aes256otrsv1 30.03 30.07 30.16 T:proest256otrv1 30.53 30.72 30.83 T:aes128n12clocv1 30.82 30.88 30.92 T:aes128n8clocv1 34.78 34.86 34.94 T:aes128n8silcv1 34.83 34.90 34.94 T:aes128n12silcv1 44.34 44.62 45.00 T:riverkeyakv1 53.75 53.93 54.33 T:ketjesrv2 53.80 54.00 54.41 T:ketjesrv1 79.63 79.66 79.71 T:present80n6t4silcv3 83.62 83.75 83.95 T:ketjejrv1 103.11 103.31 103.88 T:seakeyakv1 105.76 105.88 107.03 T:proest128otrv1 116.96 117.12 117.23 T:led80n6t4silcv3 124.08 124.41 129.73 T:ketjejrv2 156.41 156.56 156.63 T:deoxysneq128128v13 159.96 160.08 160.18 T:twine80n6clocv1 193.75 194.11 194.30 T:deoxysneq256128v13 241.46 241.79 244.81 T:deoxyseq128128v13 246.51 247.06 248.43 T:aezv1 306.63 306.95 308.23 T:deoxyseq256128v13 414.31 414.96 415.29 aes256gcmv1 565.39 566.42 567.05 T:acorn128v3 530.46? 581.94? 813.98? T:acorn128 530.82? 583.26? 813.89? T:acorn128v2 6908.98 6916.25 6917.60 T:present80n6t4silcv2 6913.82 6920.97 6924.60 T:present80n6silcv1 12801.74 12813.02 12848.36 T:led80n6silcv1 12837.75 12839.69 12841.77 T:led80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.36? 0.38? 0.40? T:aezv3 0.36 0.38 0.39 T:aezv4 0.38 0.39 0.40 T:aezv5 0.39 0.40 0.42 T:aegis128l 0.40 0.41 0.42 aegis128l 0.42? 0.45? 0.48? T:tiaoxinv2 0.44 0.45 0.47 T:tiaoxinv1 0.61 0.62 0.63 T:aegis128 0.63 0.64 0.65 aegis256 0.77? 0.83? 0.88? T:aeadaes128ocbtaglen128v1 0.88 0.88 0.89 T:aes128otrsv3 0.88 0.89 0.91 T:aes128otrpv3 0.93 0.93 0.94 T:aes128otrcv3 0.88? 0.96? 1.26? T:aeadaes192ocbtaglen128v1 1.09 1.10 1.11 T:aes256otrpv3 1.11 1.12 1.13 T:aes256otrsv3 1.11 1.12 1.14 T:morus1280128v2 1.17 1.18 1.19 T:aes256otrcv3 1.40 1.41 1.42 T:morus1280256v1 1.42 1.44 1.56 T:morus1280256v2 1.48 1.53 1.55 T:deoxysi128v141 1.55 1.55 1.56 T:morus640128v1 1.55 1.56 1.57 T:morus640128v2 1.54 1.57 1.62 T:deoxysneq128128v1 1.48? 1.76? 2.05? T:aeadaes256ocbtaglen128v1 1.73 1.78 1.80 T:deoxysi256v141 1.82 1.87 1.90 T:deoxysneq256128v1 2.01 2.04 2.10 T:morus1280128v1 2.40? 2.53? 2.71? T:lunarkeyakv2 2.45 2.54 2.56 T:colm0v1 2.46 2.56 2.73 T:aes128gcmv1 2.75 2.78 2.79 T:norx6441v2 2.81 2.82 2.83 T:norx6441v3 2.84 2.87 2.91 T:deoxysii128v141 2.78? 2.87? 3.15? T:aes256gcmv1 3.15 3.17 3.25 T:deoxysii256v141 3.22 3.29 3.45 T:seakeyakv2 3.37 3.38 3.40 T:norx6441v1 3.35 3.38 3.44 T:oceankeyakv2 3.38 3.44 3.49 T:deoxyseq128128v1 3.77 3.79 3.80 T:norx3241v2 3.79 3.81 3.82 T:norx3241v3 4.04 4.08 4.12 T:norx6461v2 4.16 4.18 4.21 T:norx6461v3 4.15 4.23 4.25 T:deoxyseq256128v1 4.55 4.56 4.57 T:norx3241v1 5.12 5.14 5.15 T:aes128n8t8clocv2 5.13 5.14 5.15 T:aes128n12t8clocv2 5.11 5.15 5.15 T:aes128n12t8silcv3 5.11 5.15 5.15 T:aes128n12t8silcv2 5.12 5.15 5.16 T:aes128n12t8clocv3 5.12 5.15 5.19 T:norx6461v1 5.12 5.15 5.15 T:aes128n8t8silcv2 5.25 5.29 5.35 T:lakekeyakv1 5.47 5.49 5.51 T:norx6444v2 5.52 5.54 5.58 T:norx6444v3 5.66 5.68 5.71 T:lakekeyakv2 5.84 5.85 5.88 T:norx3261v3 5.86 5.88 5.90 T:norx3261v2 6.52 6.56 6.59 T:norx6444v1 7.50 7.52 7.55 T:norx3261v1 10.63 10.64 10.69 T:aesjambuv1 10.91 11.01 11.10 T:ketjemajorv2 12.17 12.21 12.23 ascon128av12 12.55 12.57 12.59 T:ascon128av11 12.80 12.81 12.83 T:ascon96v1 14.38 14.46 14.49 T:ketjeminorv2 15.47 15.51 15.54 T:riverkeyakv2 15.71 15.72 15.74 T:twine80n6t4clocv2 16.24 16.27 16.31 T:twine80n6t4clocv3 18.16 18.18 18.19 ascon128v12 18.78 18.80 18.84 T:ascon128v11 18.78 18.82 18.84 T:ascon128v1 18.72 18.96 19.32 T:oceankeyakv1 18.96 18.99 19.04 T:aes128otrsv2 18.98 19.00 19.04 T:aes128otrpv2 19.12 19.15 19.19 T:aes128otrpv1 19.12 19.16 19.29 T:aes128otrsv1 24.06 24.08 24.12 T:aes256otrsv2 24.06 24.09 24.13 T:aes256otrpv2 24.29 24.32 24.37 T:aes256otrpv1 24.35 24.37 24.40 T:aes256otrsv1 30.05 30.08 30.14 T:proest256otrv1 30.58 30.84 31.00 T:aes128n12clocv1 30.77 30.88 30.98 T:aes128n8clocv1 34.80 34.86 34.95 T:aes128n8silcv1 34.82 34.88 34.98 T:aes128n12silcv1 44.43 44.69 44.95 T:riverkeyakv1 53.82 53.98 54.39 T:ketjesrv2 53.88 54.05 54.46 T:ketjesrv1 79.65 79.70 79.75 T:present80n6t4silcv3 83.59 83.80 83.97 T:ketjejrv1 103.12 103.25 103.51 T:seakeyakv1 105.79 105.93 106.99 T:proest128otrv1 116.95 117.07 117.18 T:led80n6t4silcv3 124.06 124.51 129.78 T:ketjejrv2 156.38 156.50 156.65 T:deoxysneq128128v13 159.96 160.08 160.18 T:twine80n6clocv1 193.82 193.99 194.25 T:deoxysneq256128v13 241.66 242.08 245.00 T:deoxyseq128128v13 245.64 246.07 247.33 T:aezv1 306.59 306.95 308.34 T:deoxyseq256128v13 404.08 404.44 404.87 aes256gcmv1 565.70 566.68 567.05 T:acorn128v3 530.57? 581.92? 815.20? T:acorn128 530.58? 583.10? 813.80? T:acorn128v2 6907.63 6915.46 6916.95 T:present80n6t4silcv2 6917.97 6919.91 6922.42 T:present80n6silcv1 12803.78 12812.32 12847.52 T:led80n6silcv1 12837.55 12840.22 12843.77 T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.28? 0.29? 0.33? T:tiaoxinv2 0.27? 0.30? 0.33? T:tiaoxinv1 0.32? 0.34? 0.37? T:aegis128l 0.35 0.36 0.38 aegis128l 0.57 0.58 0.59 aegis256 0.59 0.61 0.61 T:aegis128 0.69 0.71 0.73 T:aezv4 0.69 0.72 0.75 T:aezv5 0.71 0.72 0.73 T:aezv3 0.72? 0.81? 0.87? T:aeadaes128ocbtaglen128v1 0.76? 0.94? 1.06? T:aeadaes192ocbtaglen128v1 0.93 0.96 0.97 T:aes128otrcv3 0.95 0.96 0.97 T:aes128otrpv3 1.10 1.12 1.13 T:morus1280128v2 1.18 1.19 1.20 T:aes256otrcv3 1.22 1.23 1.25 T:aes256otrpv3 1.30 1.34 1.41 T:deoxysi128v141 1.33 1.40 1.43 T:deoxysneq128128v1 1.41 1.43 1.52 T:morus1280256v2 1.41 1.44 1.45 T:morus1280256v1 1.51 1.52 1.52 T:morus640128v2 1.51 1.52 1.53 T:morus640128v1 1.55 1.56 1.60 T:deoxysneq256128v1 1.56 1.59 1.65 T:deoxysi256v141 1.54? 1.69? 1.86? T:aeadaes256ocbtaglen128v1 1.79 1.80 1.82 T:colm0v1 1.96 2.00 2.05 T:morus1280128v1 2.14 2.20 2.23 T:aes128gcmv1 2.26 2.31 2.34 T:deoxyseq128128v1 2.28 2.32 2.35 T:deoxysii128v141 2.28 2.37 2.42 T:aes256gcmv1 2.60 2.64 2.69 T:deoxysii256v141 2.64 2.69 2.79 T:seakeyakv2 2.69 2.74 2.78 T:oceankeyakv2 2.76 2.78 2.78 T:norx6441v2 2.74 2.81 2.86 T:deoxyseq256128v1 2.82 2.83 2.84 T:norx6441v3 3.00 3.01 3.02 T:aes128otrsv3 3.27 3.30 3.33 T:lunarkeyakv2 3.34 3.36 3.38 T:norx6441v1 3.85 3.86 3.87 T:norx3241v3 3.87 3.89 3.90 T:norx3241v2 4.12 4.13 4.14 T:aes256otrsv3 4.17 4.19 4.20 T:norx6461v2 4.23 4.24 4.25 T:norx6461v3 4.65 4.66 4.67 T:norx3241v1 4.95 4.99 5.02 T:lakekeyakv2 5.03 5.05 5.06 T:norx6461v1 5.17 5.18 5.18 T:aes128n8t8clocv2 5.17 5.18 5.18 T:aes128n8t8silcv2 5.17 5.18 5.18 T:aes128n12t8clocv3 5.17 5.18 5.18 T:aes128n12t8clocv2 5.18 5.18 5.18 T:aes128n12t8silcv3 5.18 5.18 5.18 T:aes128n12t8silcv2 5.29 5.35 5.45 T:lakekeyakv1 5.40 5.40 5.42 T:norx6444v3 5.40 5.41 5.42 T:norx6444v2 5.90 5.91 5.93 T:norx3261v2 5.93 5.94 5.96 T:norx3261v3 6.31 6.33 6.35 T:norx6444v1 7.68 7.70 7.72 T:norx3261v1 9.58 9.63 9.68 T:ketjemajorv2 10.45 10.45 10.46 T:aesjambuv1 11.04 11.07 11.10 T:riverkeyakv2 12.13 12.14 12.17 ascon128av12 12.39 12.49 12.62 T:ketjeminorv2 12.62 12.64 12.66 T:ascon96v1 12.68 12.71 12.72 T:ascon128av11 15.58 15.63 15.92 T:twine80n6t4clocv2 16.11 16.13 16.15 T:twine80n6t4clocv3 17.38 17.44 17.48 T:aes128otrsv2 17.52 17.56 17.60 T:aes128otrsv1 18.20 18.25 18.27 ascon128v12 18.46 18.56 18.91 T:oceankeyakv1 18.77 18.80 18.84 T:ascon128v11 18.78 18.81 18.83 T:ascon128v1 19.37 19.40 19.44 T:aes128otrpv2 19.45 19.50 19.54 T:aes128otrpv1 22.43 22.45 22.53 T:aes256otrsv2 22.73 22.78 22.81 T:aes256otrsv1 23.44 23.49 23.55 T:aes128n12clocv1 23.47 23.52 23.57 T:aes128n8clocv1 24.46 24.50 24.56 T:aes256otrpv2 24.72 24.76 24.94 T:aes256otrpv1 25.40 25.44 25.47 T:aes128n8silcv1 25.43 25.47 25.68 T:aes128n12silcv1 30.55 30.58 30.62 T:proest256otrv1 41.75 41.98 43.59 T:riverkeyakv1 50.57 52.40 52.62 T:ketjesrv1 54.25 54.46 56.06 T:ketjesrv2 78.72 78.74 78.78 T:present80n6t4silcv3 80.39 81.19 81.48 T:ketjejrv1 100.93 101.12 101.38 T:seakeyakv1 106.51 106.59 106.69 T:proest128otrv1 116.06 116.11 116.16 T:led80n6t4silcv3 119.71 119.77 119.91 T:twine80n6clocv1 120.58 120.74 120.98 T:deoxysneq128128v13 121.58 121.83 122.18 T:ketjejrv2 153.12 153.17 153.29 T:deoxysneq256128v13 162.16 162.32 163.45 T:aezv1 181.07 181.29 184.20 T:deoxyseq128128v13 229.56 229.71 230.55 T:deoxyseq256128v13 409.08 409.73 410.22 aes256gcmv1 512.68 513.38 513.77 T:acorn128v3 483.33? 515.41? 732.54? T:acorn128 482.65? 515.63? 748.58? T:acorn128v2 5184.43 5185.93 5187.97 T:present80n6silcv1 5193.20 5194.55 5195.58 T:present80n6t4silcv2 9598.69 9604.68 9612.35 T:led80n6silcv1 9627.11 9629.85 9631.57 T:led80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.31? 0.35? 0.37? T:aegis128l 0.33? 0.35? 0.37? T:tiaoxinv1 0.34? 0.36? 0.38? T:tiaoxinv2 0.34 0.36 0.37 aegis128l 0.58 0.60 0.61 T:aegis128 0.59 0.60 0.61 aegis256 0.69 0.70 0.72 T:aezv3 0.69 0.70 0.73 T:aezv4 0.70 0.71 0.75 T:aezv5 0.72? 0.80? 0.90? T:aeadaes128ocbtaglen128v1 0.92 0.93 0.94 T:aes128otrcv3 0.77? 0.94? 1.09? T:aeadaes192ocbtaglen128v1 0.95 0.96 0.97 T:aes128otrpv3 1.10 1.11 1.12 T:morus1280128v2 1.17 1.17 1.18 T:aes256otrcv3 1.22 1.24 1.25 T:aes256otrpv3 1.41 1.42 1.55 T:morus1280256v2 1.41 1.43 1.44 T:morus1280256v1 1.47 1.50 1.58 T:deoxysi128v141 1.47 1.50 1.55 T:deoxysneq128128v1 1.52 1.53 1.54 T:morus640128v1 1.53 1.54 1.55 T:morus640128v2 1.55? 1.69? 1.83? T:aeadaes256ocbtaglen128v1 1.72 1.75 1.79 T:deoxysneq256128v1 1.73 1.75 1.80 T:deoxysi256v141 1.80 1.82 1.86 T:colm0v1 1.98 2.01 2.05 T:morus1280128v1 2.12 2.21 2.33 T:aes128gcmv1 2.26 2.30 2.32 T:deoxysii128v141 2.30 2.36 2.44 T:aes256gcmv1 2.43 2.51 2.53 T:deoxyseq128128v1 2.55 2.60 2.62 T:deoxysii256v141 2.68 2.72 2.88 T:seakeyakv2 2.75 2.78 2.83 T:oceankeyakv2 2.77 2.78 2.80 T:norx6441v2 2.79 2.81 2.82 T:norx6441v3 3.00 3.01 3.02 T:aes128otrsv3 3.05 3.09 3.12 T:deoxyseq256128v1 3.31 3.38 3.46 T:lunarkeyakv2 3.36 3.38 3.40 T:norx6441v1 3.83 3.85 3.86 T:norx3241v2 3.84 3.85 3.86 T:norx3241v3 4.12 4.12 4.13 T:aes256otrsv3 4.12 4.14 4.16 T:norx6461v2 4.18 4.21 4.22 T:norx6461v3 4.60 4.61 4.62 T:norx3241v1 4.96 4.99 5.03 T:lakekeyakv2 5.09 5.10 5.12 T:norx6461v1 5.12 5.12 5.13 T:aes128n12t8silcv2 5.12 5.13 5.14 T:aes128n8t8clocv2 5.12 5.13 5.15 T:aes128n12t8clocv3 5.12 5.13 5.14 T:aes128n8t8silcv2 5.12 5.14 5.14 T:aes128n12t8clocv2 5.12 5.14 5.14 T:aes128n12t8silcv3 5.26 5.31 5.46 T:lakekeyakv1 5.38 5.39 5.42 T:norx6444v2 5.39 5.42 5.44 T:norx6444v3 5.86 5.88 5.89 T:norx3261v3 5.87 5.89 5.92 T:norx3261v2 6.27 6.30 6.33 T:norx6444v1 7.60 7.62 7.64 T:norx3261v1 9.47 9.53 9.59 T:ketjemajorv2 10.52 10.53 10.54 T:aesjambuv1 11.02 11.05 11.06 T:riverkeyakv2 12.14 12.16 12.17 ascon128av12 12.63 12.66 12.68 T:ascon128av11 12.70 12.72 12.75 T:ascon96v1 12.77 12.80 12.94 T:ketjeminorv2 15.47 15.51 15.83 T:twine80n6t4clocv2 16.09 16.11 16.14 T:twine80n6t4clocv3 17.17 17.20 17.22 T:aes128otrsv2 17.32 17.39 17.43 T:aes128otrsv1 18.11 18.13 18.18 ascon128v12 18.52 18.63 18.94 T:oceankeyakv1 18.91 18.92 18.94 T:ascon128v1 18.91 18.93 18.95 T:ascon128v11 19.19 19.21 19.23 T:aes128otrpv2 19.30 19.34 19.39 T:aes128otrpv1 22.26 22.28 22.30 T:aes256otrsv2 22.54 22.57 22.59 T:aes256otrsv1 23.24 23.31 23.44 T:aes128n12clocv1 23.41 23.45 23.49 T:aes128n8clocv1 24.28 24.30 24.32 T:aes256otrpv2 24.51 24.61 24.73 T:aes256otrpv1 25.46 25.53 25.62 T:aes128n8silcv1 25.48 25.55 25.75 T:aes128n12silcv1 30.43 30.46 30.50 T:proest256otrv1 41.91 42.14 43.72 T:riverkeyakv1 51.17 51.29 51.43 T:ketjesrv1 52.31 52.48 52.63 T:ketjesrv2 79.09 79.11 79.15 T:present80n6t4silcv3 79.81 80.03 80.21 T:ketjejrv1 101.84 101.98 102.20 T:seakeyakv1 105.84 106.02 106.59 T:proest128otrv1 116.44 116.51 116.57 T:led80n6t4silcv3 119.67 119.77 119.99 T:twine80n6clocv1 119.90 120.05 122.18 T:ketjejrv2 138.44 138.52 138.63 T:deoxysneq128128v13 162.53 163.28 163.68 T:aezv1 173.59 173.86 174.10 T:deoxysneq256128v13 180.75 181.18 182.17 T:deoxyseq128128v13 229.08 229.38 231.07 T:deoxyseq256128v13 409.23 409.74 409.95 aes256gcmv1 534.45 534.98 537.22 T:acorn128v3 512.35? 544.41? 761.35? T:acorn128 512.70? 545.42? 767.30? T:acorn128v2 5186.99 5187.75 5188.74 T:present80n6t4silcv2 5189.22 5190.83 5192.48 T:present80n6silcv1 9601.40 9607.50 9618.27 T:led80n6silcv1 9627.63 9628.70 9630.59 T:led80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.33 0.34 0.35 T:aegis128l 0.33? 0.36? 0.37? T:tiaoxinv2 0.34 0.36 0.37 aegis128l 0.34 0.36 0.37 T:tiaoxinv1 0.36 0.38 0.39 T:aezv3 0.39 0.40 0.40 T:aezv5 0.38 0.40 0.41 T:aezv4 0.58 0.60 0.60 aegis256 0.59 0.60 0.61 T:aegis128 0.77 0.80 0.84 T:aeadaes128ocbtaglen128v1 0.91 0.93 0.98 T:aeadaes192ocbtaglen128v1 0.93 0.94 0.94 T:aes128otrcv3 0.95 0.96 0.98 T:aes128otrpv3 1.10 1.11 1.12 T:morus1280128v2 1.17 1.17 1.18 T:aes256otrcv3 1.21 1.22 1.23 T:aes256otrpv3 1.41 1.42 1.55 T:morus1280256v2 1.42 1.43 1.44 T:morus1280256v1 1.44 1.48 1.50 T:deoxysi128v141 1.49 1.51 1.54 T:deoxysneq128128v1 1.53 1.53 1.54 T:morus640128v1 1.53 1.54 1.54 T:morus640128v2 1.68 1.70 1.71 T:aeadaes256ocbtaglen128v1 1.71 1.75 1.78 T:deoxysi256v141 1.73 1.75 1.79 T:deoxysneq256128v1 1.79 1.83 1.85 T:colm0v1 1.98 2.02 2.03 T:morus1280128v1 2.13 2.19 2.24 T:aes128gcmv1 2.27 2.30 2.32 T:deoxysii128v141 2.27 2.34 2.41 T:aes256gcmv1 2.46 2.50 2.52 T:deoxyseq128128v1 2.59 2.60 2.64 T:deoxysii256v141 2.70 2.73 2.88 T:seakeyakv2 2.78 2.79 2.80 T:norx6441v2 2.80 2.80 2.82 T:norx6441v3 2.77 2.81 2.86 T:oceankeyakv2 3.00 3.01 3.02 T:aes128otrsv3 3.04 3.08 3.12 T:deoxyseq256128v1 3.36 3.38 3.38 T:norx6441v1 3.34 3.41 3.48 T:lunarkeyakv2 3.83 3.84 3.86 T:norx3241v2 3.84 3.85 3.86 T:norx3241v3 4.12 4.13 4.13 T:aes256otrsv3 4.13 4.14 4.15 T:norx6461v2 4.19 4.20 4.22 T:norx6461v3 4.60 4.61 4.62 T:norx3241v1 4.99 5.01 5.06 T:lakekeyakv2 5.08 5.09 5.10 T:norx6461v1 5.11 5.13 5.14 T:aes128n8t8clocv2 5.12 5.13 5.14 T:aes128n8t8silcv2 5.12 5.14 5.14 T:aes128n12t8silcv2 5.13 5.14 5.14 T:aes128n12t8silcv3 5.12 5.14 5.14 T:aes128n12t8clocv3 5.12 5.14 5.14 T:aes128n12t8clocv2 5.27 5.30 5.37 T:lakekeyakv1 5.41 5.42 5.44 T:norx6444v2 5.42 5.44 5.46 T:norx6444v3 5.87 5.89 5.90 T:norx3261v2 5.87 5.89 5.90 T:norx3261v3 6.30 6.32 6.35 T:norx6444v1 7.60 7.62 7.63 T:norx3261v1 9.52 9.55 9.61 T:ketjemajorv2 10.53 10.53 10.55 T:aesjambuv1 11.06 11.08 11.09 T:riverkeyakv2 12.12 12.14 12.15 ascon128av12 12.62 12.63 12.65 T:ascon128av11 12.72 12.73 12.74 T:ascon96v1 12.80 12.84 12.90 T:ketjeminorv2 15.50 15.52 15.74 T:twine80n6t4clocv2 16.09 16.11 16.12 T:twine80n6t4clocv3 17.22 17.24 17.27 T:aes128otrsv2 17.37 17.41 17.46 T:aes128otrsv1 18.11 18.11 18.14 ascon128v12 18.55 18.73 18.98 T:oceankeyakv1 18.90 18.91 18.94 T:ascon128v1 18.90 18.92 18.94 T:ascon128v11 19.22 19.24 19.26 T:aes128otrpv2 19.34 19.38 19.41 T:aes128otrpv1 22.28 22.31 22.35 T:aes256otrsv2 22.57 22.59 22.63 T:aes256otrsv1 23.23 23.34 23.43 T:aes128n12clocv1 23.39 23.43 23.47 T:aes128n8clocv1 24.31 24.35 24.52 T:aes256otrpv2 24.56 24.60 24.75 T:aes256otrpv1 25.47 25.53 25.60 T:aes128n8silcv1 25.49 25.54 25.77 T:aes128n12silcv1 30.43 30.48 30.51 T:proest256otrv1 41.90 42.12 43.70 T:riverkeyakv1 51.22 51.30 51.43 T:ketjesrv1 52.36 52.44 52.69 T:ketjesrv2 79.09 79.11 79.15 T:present80n6t4silcv3 79.90 80.07 80.13 T:ketjejrv1 101.92 102.05 102.20 T:seakeyakv1 105.86 106.18 106.49 T:proest128otrv1 116.40 116.44 116.53 T:led80n6t4silcv3 119.69 119.77 119.94 T:twine80n6clocv1 119.92 120.14 121.63 T:ketjejrv2 138.46 138.54 138.69 T:deoxysneq128128v13 162.31 162.66 163.23 T:aezv1 173.63 173.78 174.12 T:deoxysneq256128v13 180.65 181.21 182.09 T:deoxyseq128128v13 229.28 229.38 231.09 T:deoxyseq256128v13 404.70 405.03 405.38 aes256gcmv1 534.75 535.15 537.38 T:acorn128v3 512.46? 544.49? 761.28? T:acorn128 512.77? 545.42? 767.45? T:acorn128v2 5184.34 5188.02 5189.92 T:present80n6t4silcv2 5190.04 5191.57 5192.26 T:present80n6silcv1 9599.41 9607.27 9621.85 T:led80n6silcv1 9629.06 9630.29 9631.66 T:led80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.21? 0.25? 0.30? T:tiaoxinv1 0.22? 0.27? 0.31? T:tiaoxinv2 0.26? 0.31? 0.34? T:aegis128l 0.30 0.32 0.33 aegis128l 0.38 0.39 0.42 T:aezv3 0.36? 0.40? 0.42? T:aezv5 0.40 0.42 0.44 T:aezv4 0.54 0.56 0.57 aegis256 0.59 0.60 0.60 T:aegis128 0.70? 0.80? 0.88? T:aeadaes128ocbtaglen128v1 0.76? 0.94? 1.26? T:aeadaes192ocbtaglen128v1 0.94 0.95 0.96 T:aes128otrcv3 1.02 1.03 1.04 T:aes128otrpv3 1.08 1.11 1.14 T:colm0v1 1.11 1.12 1.14 T:morus1280128v2 1.18 1.19 1.20 T:aes256otrcv3 1.28 1.32 1.36 T:deoxysneq128128v1 1.31 1.32 1.35 T:aes256otrpv3 1.24? 1.33? 1.38? T:deoxysi128v141 1.30 1.34 1.39 T:deoxysii128v141 1.35 1.37 1.41 T:deoxyseq128128v1 1.40 1.42 1.54 T:morus1280256v2 1.44 1.45 1.46 T:morus1280256v1 1.40 1.46 1.52 T:deoxysi256v141 1.45 1.48 1.58 T:deoxysneq256128v1 1.50 1.51 1.52 T:morus640128v1 1.50 1.51 1.52 T:morus640128v2 1.53 1.56 1.67 T:deoxysii256v141 1.32? 1.62? 1.92? T:aeadaes256ocbtaglen128v1 1.54 1.63 1.67 T:deoxyseq256128v1 1.65? 1.76? 1.95? T:aes256gcmv1 1.68? 1.78? 1.87? T:aes128gcmv1 1.93 1.96 1.98 T:morus1280128v1 2.09 2.13 2.22 T:oceankeyakv2 2.09 2.15 2.22 T:lunarkeyakv2 2.53 2.59 2.71 T:seakeyakv2 2.76 2.79 2.81 T:norx6441v2 2.81 2.83 2.86 T:norx6441v3 3.37 3.39 3.43 T:norx6441v1 3.87 3.88 3.89 T:norx3241v3 3.87 3.88 3.89 T:norx3241v2 4.16 4.20 4.22 T:norx6461v2 4.22 4.25 4.28 T:norx6461v3 4.35 4.37 4.41 T:lakekeyakv2 4.60 4.67 4.71 T:lakekeyakv1 4.64 4.67 4.69 T:norx3241v1 5.04 5.06 5.08 T:norx6461v1 5.12 5.12 5.12 T:aes128n12t8clocv3 5.12 5.12 5.13 T:aes128n8t8clocv2 5.12 5.12 5.13 T:aes128n12t8silcv2 5.12 5.13 5.13 T:aes128n8t8silcv2 5.12 5.13 5.13 T:aes128n12t8silcv3 5.12 5.13 5.13 T:aes128otrsv3 5.12 5.13 5.13 T:aes128n12t8clocv2 5.31 5.34 5.39 T:norx6444v3 5.33 5.35 5.38 T:norx6444v2 5.88 5.89 5.91 T:norx3261v2 5.92 5.94 6.00 T:norx3261v3 6.05 6.07 6.09 T:norx6444v1 7.12 7.13 7.13 T:aes256otrsv3 7.70 7.71 7.73 T:norx3261v1 8.04 8.11 8.24 T:ketjemajorv2 10.02 10.10 10.14 T:riverkeyakv2 10.42 10.43 10.44 T:aesjambuv1 11.03 11.10 11.20 T:ketjeminorv2 11.98 12.01 12.03 ascon128av12 12.57 12.60 12.61 T:ascon96v1 12.65 12.68 12.71 T:ascon128av11 15.27 15.33 16.16 T:twine80n6t4clocv2 15.42 15.45 15.49 T:aes128otrsv2 15.61 15.64 15.66 T:aes128otrsv1 15.92 15.95 15.98 T:twine80n6t4clocv3 15.91 15.98 16.05 T:aes128n12clocv1 15.96 16.00 16.06 T:aes128n8clocv1 16.03 16.07 16.12 T:aes128n8silcv1 16.03 16.08 16.46 T:aes128n12silcv1 18.28 18.32 18.37 ascon128v12 18.30 18.39 18.77 T:oceankeyakv1 18.72 18.74 18.79 T:ascon128v11 18.73 18.75 18.77 T:ascon128v1 19.42 19.46 19.50 T:aes128otrpv2 19.50 19.54 19.57 T:aes128otrpv1 20.49 20.52 20.55 T:aes256otrsv2 20.77 20.81 20.85 T:aes256otrsv1 24.51 24.58 24.79 T:aes256otrpv2 24.75 24.81 25.26 T:aes256otrpv1 30.78 30.82 30.84 T:proest256otrv1 39.40 39.69 42.46 T:riverkeyakv1 48.14 49.80 50.08 T:ketjesrv1 50.59 50.74 52.28 T:ketjesrv2 76.41 77.40 77.61 T:ketjejrv1 78.56 78.59 78.62 T:present80n6t4silcv3 78.37 78.63 78.74 T:aezv1 79.49 79.62 79.82 T:twine80n6clocv1 100.62 100.83 101.31 T:seakeyakv1 105.86 106.06 106.19 T:proest128otrv1 115.83 115.92 115.98 T:led80n6t4silcv3 115.75 115.96 116.10 T:ketjejrv2 120.00 120.28 122.11 T:deoxyseq128128v13 120.45 120.55 121.03 T:deoxysneq128128v13 152.96 153.06 153.99 T:deoxyseq256128v13 153.11 153.17 153.34 T:deoxysneq256128v13 403.85 404.89 405.67 aes256gcmv1 503.37 503.99 506.78 T:acorn128v3 454.76? 506.81? 748.82? T:acorn128 454.65? 508.51? 760.54? T:acorn128v2 3457.92 3460.64 3463.30 T:present80n6silcv1 3454.56 3460.98 3462.63 T:present80n6t4silcv2 6395.84 6397.62 6402.79 T:led80n6silcv1 6419.86 6423.64 6425.80 T:led80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.20? 0.25? 0.29? T:tiaoxinv2 0.22? 0.28? 0.31? T:tiaoxinv1 0.26? 0.31? 0.34? T:aegis128l 0.30 0.32 0.33 aegis128l 0.38 0.39 0.40 T:aezv3 0.39 0.40 0.42 T:aezv5 0.41 0.42 0.43 T:aezv4 0.54 0.55 0.56 aegis256 0.57 0.59 0.60 T:aegis128 0.69? 0.78? 0.90? T:aeadaes128ocbtaglen128v1 0.60? 0.90? 0.98? T:aeadaes192ocbtaglen128v1 0.92 0.93 0.94 T:aes128otrcv3 1.01 1.03 1.06 T:aes128otrpv3 1.09 1.11 1.13 T:morus1280128v2 1.11 1.12 1.15 T:colm0v1 1.17 1.18 1.19 T:aes256otrcv3 1.23 1.27 1.32 T:deoxysi128v141 1.25 1.32 1.38 T:deoxysneq128128v1 1.31 1.33 1.35 T:aes256otrpv3 1.28? 1.33? 1.49? T:deoxysii128v141 1.33 1.36 1.41 T:deoxyseq128128v1 1.41 1.42 1.55 T:morus1280256v2 1.44 1.45 1.45 T:morus1280256v1 1.42 1.46 1.48 T:deoxysi256v141 1.47 1.51 1.56 T:deoxysneq256128v1 1.50 1.51 1.52 T:morus640128v1 1.48? 1.51? 1.70? T:deoxysii256v141 1.50 1.51 1.52 T:morus640128v2 1.58 1.60 1.62 T:deoxyseq256128v1 1.33? 1.62? 1.92? T:aeadaes256ocbtaglen128v1 1.68? 1.80? 1.89? T:aes128gcmv1 1.70? 1.82? 1.92? T:aes256gcmv1 1.95 1.98 2.01 T:morus1280128v1 2.04 2.11 2.22 T:lunarkeyakv2 2.11 2.14 2.19 T:oceankeyakv2 2.52 2.58 2.73 T:seakeyakv2 2.77 2.79 2.82 T:norx6441v2 2.77 2.79 2.81 T:norx6441v3 3.34 3.37 3.40 T:norx6441v1 3.88 3.89 3.91 T:norx3241v2 3.87 3.89 3.92 T:norx3241v3 4.15 4.19 4.21 T:norx6461v2 4.23 4.25 4.29 T:norx6461v3 4.31 4.35 4.39 T:lakekeyakv2 4.59 4.65 4.71 T:lakekeyakv1 4.65 4.67 4.69 T:norx3241v1 5.02 5.05 5.08 T:norx6461v1 5.10 5.12 5.13 T:aes128n12t8clocv3 5.11 5.12 5.13 T:aes128n12t8clocv2 5.12 5.12 5.13 T:aes128n8t8clocv2 5.12 5.12 5.13 T:aes128n12t8silcv2 5.12 5.12 5.13 T:aes128n8t8silcv2 5.12 5.12 5.13 T:aes128n12t8silcv3 5.12 5.13 5.13 T:aes128otrsv3 5.33 5.35 5.37 T:norx6444v3 5.32 5.35 5.37 T:norx6444v2 5.87 5.88 5.91 T:norx3261v2 5.87 5.90 5.91 T:norx3261v3 6.04 6.07 6.10 T:norx6444v1 7.12 7.12 7.13 T:aes256otrsv3 7.68 7.71 7.73 T:norx3261v1 8.01 8.11 8.24 T:ketjemajorv2 10.07 10.10 10.14 T:riverkeyakv2 10.41 10.42 10.43 T:aesjambuv1 11.08 11.13 11.22 T:ketjeminorv2 12.10 12.12 12.15 ascon128av12 12.60 12.63 12.66 T:ascon96v1 12.68 12.72 12.76 T:ascon128av11 15.26 15.41 16.18 T:twine80n6t4clocv2 15.42 15.47 15.51 T:aes128otrsv2 15.62 15.65 15.69 T:aes128otrsv1 15.89 15.93 15.97 T:twine80n6t4clocv3 15.93 15.97 16.03 T:aes128n12clocv1 15.94 15.98 16.03 T:aes128n8clocv1 16.04 16.11 16.56 T:aes128n12silcv1 16.05 16.11 16.17 T:aes128n8silcv1 18.05 18.08 18.11 ascon128v12 18.33 18.45 18.78 T:oceankeyakv1 18.97 19.01 19.04 T:ascon128v11 18.97 19.01 19.05 T:ascon128v1 19.42 19.45 19.49 T:aes128otrpv2 19.52 19.55 19.59 T:aes128otrpv1 20.47 20.50 20.56 T:aes256otrsv2 20.78 20.83 20.87 T:aes256otrsv1 24.48 24.54 24.58 T:aes256otrpv2 24.72 24.83 25.13 T:aes256otrpv1 30.77 30.84 30.88 T:proest256otrv1 39.36 39.65 42.55 T:riverkeyakv1 48.13 48.59 48.72 T:ketjesrv1 50.93 51.00 51.08 T:ketjesrv2 76.23 76.33 76.63 T:ketjejrv1 78.40 78.57 78.69 T:aezv1 78.53 78.57 78.63 T:present80n6t4silcv3 79.42 79.57 79.85 T:twine80n6clocv1 100.56 100.78 100.98 T:seakeyakv1 105.76 105.87 105.99 T:proest128otrv1 115.35 115.56 115.70 T:ketjejrv2 115.87 115.98 116.05 T:led80n6t4silcv3 119.99 120.32 121.77 T:deoxyseq128128v13 120.77 120.95 121.02 T:deoxysneq128128v13 152.52 152.60 154.10 T:deoxyseq256128v13 152.88 153.04 153.27 T:deoxysneq256128v13 403.87 404.73 404.96 aes256gcmv1 503.11 503.90 507.73 T:acorn128v3 455.20? 507.05? 746.90? T:acorn128 454.36? 509.30? 759.96? T:acorn128v2 3455.86 3458.83 3461.73 T:present80n6t4silcv2 3456.54 3460.73 3462.63 T:present80n6silcv1 6397.32 6399.06 6402.44 T:led80n6silcv1 6418.61 6420.23 6421.58 T:led80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.22? 0.25? 0.29? T:tiaoxinv1 0.24? 0.25? 0.29? T:tiaoxinv2 0.29 0.30 0.31 T:aegis128l 0.31 0.32 0.33 aegis128l 0.37 0.39 0.40 T:aezv3 0.39 0.40 0.41 T:aezv5 0.41 0.42 0.43 T:aezv4 0.55 0.56 0.57 aegis256 0.58 0.59 0.60 T:aegis128 0.74 0.79 0.82 T:aeadaes128ocbtaglen128v1 0.92 0.94 0.95 T:aes128otrcv3 0.87? 0.94? 1.25? T:aeadaes192ocbtaglen128v1 1.02 1.02 1.03 T:aes128otrpv3 1.10 1.11 1.14 T:colm0v1 1.09 1.11 1.12 T:morus1280128v2 1.17 1.18 1.18 T:aes256otrcv3 1.26 1.30 1.32 T:deoxysi128v141 1.26 1.30 1.36 T:deoxysneq128128v1 1.30 1.33 1.40 T:deoxysii128v141 1.33 1.34 1.35 T:aes256otrpv3 1.35 1.37 1.41 T:deoxyseq128128v1 1.41 1.43 1.55 T:morus1280256v2 1.45 1.45 1.46 T:morus1280256v1 1.43 1.47 1.49 T:deoxysi256v141 1.49 1.51 1.55 T:deoxysii256v141 1.48 1.51 1.52 T:deoxysneq256128v1 1.50 1.51 1.52 T:morus640128v1 1.51 1.52 1.52 T:morus640128v2 1.57 1.60 1.63 T:deoxyseq256128v1 1.57 1.61 1.66 T:aeadaes256ocbtaglen128v1 1.67? 1.80? 1.89? T:aes256gcmv1 1.70? 1.80? 1.91? T:aes128gcmv1 1.92 1.95 1.98 T:morus1280128v1 2.11 2.16 2.19 T:oceankeyakv2 2.04? 2.18? 2.27? T:lunarkeyakv2 2.52 2.57 2.72 T:seakeyakv2 2.78 2.79 2.81 T:norx6441v2 2.78 2.80 2.82 T:norx6441v3 3.33 3.34 3.36 T:norx6441v1 3.88 3.90 3.92 T:norx3241v3 3.87 3.90 3.92 T:norx3241v2 4.16 4.18 4.20 T:norx6461v2 4.20 4.22 4.25 T:norx6461v3 4.32 4.36 4.38 T:lakekeyakv2 4.64 4.66 4.69 T:norx3241v1 4.60 4.66 4.72 T:lakekeyakv1 5.03 5.05 5.07 T:norx6461v1 5.10 5.11 5.13 T:aes128n12t8silcv2 5.11 5.12 5.13 T:aes128n12t8clocv3 5.10 5.12 5.13 T:aes128n12t8silcv3 5.10 5.12 5.13 T:aes128n8t8clocv2 5.12 5.13 5.13 T:aes128n8t8silcv2 5.12 5.13 5.13 T:aes128n12t8clocv2 5.12 5.13 5.13 T:aes128otrsv3 5.33 5.34 5.36 T:norx6444v2 5.33 5.36 5.37 T:norx6444v3 5.87 5.89 5.91 T:norx3261v3 5.86 5.89 5.91 T:norx3261v2 6.03 6.05 6.09 T:norx6444v1 7.12 7.13 7.13 T:aes256otrsv3 7.68 7.70 7.71 T:norx3261v1 8.04 8.12 8.19 T:ketjemajorv2 10.07 10.09 10.12 T:riverkeyakv2 10.42 10.43 10.44 T:aesjambuv1 11.09 11.14 11.22 T:ketjeminorv2 12.08 12.10 12.14 ascon128av12 12.60 12.63 12.65 T:ascon96v1 12.68 12.70 12.73 T:ascon128av11 15.26 15.32 16.16 T:twine80n6t4clocv2 15.46 15.50 15.53 T:aes128otrsv2 15.60 15.64 15.68 T:aes128otrsv1 15.89 15.94 15.97 T:twine80n6t4clocv3 15.89 15.95 15.99 T:aes128n12clocv1 15.92 15.97 16.02 T:aes128n8clocv1 16.05 16.08 16.15 T:aes128n8silcv1 16.03 16.09 16.57 T:aes128n12silcv1 18.05 18.07 18.11 ascon128v12 18.29 18.48 18.73 T:oceankeyakv1 18.99 19.02 19.04 T:ascon128v11 18.99 19.03 19.07 T:ascon128v1 19.42 19.44 19.47 T:aes128otrpv2 19.52 19.55 19.59 T:aes128otrpv1 20.49 20.52 20.57 T:aes256otrsv2 20.79 20.83 20.87 T:aes256otrsv1 24.53 24.56 24.59 T:aes256otrpv2 24.75 24.83 25.13 T:aes256otrpv1 30.77 30.80 30.86 T:proest256otrv1 39.38 39.80 42.55 T:riverkeyakv1 48.20 48.69 48.88 T:ketjesrv1 50.90 51.02 51.28 T:ketjesrv2 76.23 76.43 76.60 T:ketjejrv1 78.30 78.49 78.67 T:aezv1 78.53 78.58 78.59 T:present80n6t4silcv3 79.40 79.56 79.90 T:twine80n6clocv1 100.59 100.80 101.17 T:seakeyakv1 105.72 105.81 106.08 T:proest128otrv1 115.54 115.64 115.76 T:ketjejrv2 115.82 115.93 116.08 T:led80n6t4silcv3 119.99 120.44 121.72 T:deoxyseq128128v13 120.77 120.98 121.04 T:deoxysneq128128v13 152.49 152.56 154.08 T:deoxyseq256128v13 152.89 152.96 153.28 T:deoxysneq256128v13 403.60 404.96 405.57 aes256gcmv1 502.98 503.70 507.75 T:acorn128v3 455.09? 507.00? 747.25? T:acorn128 454.41? 509.66? 759.77? T:acorn128v2 3455.64 3458.10 3460.58 T:present80n6silcv1 3456.41 3458.90 3461.67 T:present80n6t4silcv2 6396.82 6399.12 6403.57 T:led80n6silcv1 6416.32 6418.73 6420.02 T:led80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.42 0.42 0.44 T:tiaoxinv2 0.42 0.43 0.45 T:tiaoxinv1 0.43 0.44 0.46 T:aegis128l 0.45 0.46 0.49 aegis128l 0.69 0.69 0.69 T:aegis128 0.68 0.69 0.71 aegis256 0.87 0.87 0.89 T:aezv4 0.87 0.88 0.91 T:aezv5 0.88 0.89 0.91 T:aezv3 1.00 1.03 1.08 T:aeadaes128ocbtaglen128v1 1.16? 1.18? 1.33? T:aeadaes192ocbtaglen128v1 1.22 1.22 1.24 T:aes128otrpv3 1.34 1.35 1.36 T:aes128otrcv3 1.39 1.39 1.40 T:morus1280128v2 1.56 1.58 1.61 T:deoxysneq128128v1 1.58 1.59 1.61 T:aes256otrpv3 1.56 1.62 1.65 T:deoxysi128v141 1.69 1.69 1.71 T:morus1280256v1 1.70 1.70 1.71 T:morus640128v1 1.71 1.71 1.72 T:morus640128v2 1.73 1.75 1.82 T:morus1280256v2 1.79 1.80 1.81 T:aes256otrcv3 1.81 1.82 1.84 T:deoxysneq256128v1 1.90 1.91 1.95 T:deoxysi256v141 1.94 1.95 2.12 T:aeadaes256ocbtaglen128v1 2.12 2.13 2.14 T:colm0v1 2.43 2.45 2.49 T:morus1280128v1 2.61 2.62 2.68 T:deoxyseq128128v1 2.66 2.68 2.70 T:deoxysii128v141 3.05 3.06 3.12 T:deoxysii256v141 3.15 3.19 3.20 T:deoxyseq256128v1 3.22 3.22 3.24 T:aes128otrsv3 3.27 3.27 3.29 T:norx6441v2 3.33 3.34 3.36 T:norx6441v3 3.64 3.66 3.72 T:aes128gcmv1 3.78 3.79 3.81 T:norx6441v1 3.85 3.89 3.93 T:aes256gcmv1 3.90 3.92 4.04 T:seakeyakv2 4.18 4.20 4.21 T:norx3241v3 4.21 4.22 4.24 T:norx3241v2 4.43 4.44 4.44 T:aes256otrsv3 4.88 4.89 4.91 T:norx6461v2 4.92 4.94 4.95 T:norx3241v1 4.95 4.96 4.97 T:norx6461v3 5.28 5.29 5.32 T:oceankeyakv2 5.29 5.29 5.29 T:aes128n8t8clocv2 5.29 5.29 5.29 T:aes128n12t8clocv3 5.29 5.29 5.29 T:aes128n12t8clocv2 5.34 5.34 5.35 T:aes128n8t8silcv2 5.34 5.34 5.35 T:aes128n12t8silcv3 5.34 5.35 5.35 T:aes128n12t8silcv2 5.50 5.50 5.53 T:lakekeyakv2 5.67 5.69 5.70 T:norx6461v1 6.39 6.40 6.41 T:norx3261v2 6.44 6.44 6.47 T:norx3261v3 6.38 6.45 6.49 T:lakekeyakv1 7.73 7.75 7.76 T:norx6444v2 7.78 7.79 7.80 T:norx6444v3 8.14 8.15 8.18 T:norx3261v1 9.03 9.05 9.07 T:norx6444v1 9.07 9.08 9.13 T:lunarkeyakv2 10.65 10.66 10.66 T:aesjambuv1 11.63 11.64 11.70 T:riverkeyakv2 12.01 12.03 12.07 T:ketjemajorv2 12.40 12.42 12.45 ascon128av12 12.92 12.93 12.95 T:ascon96v1 12.98 13.00 13.02 T:ascon128av11 13.95 14.02 14.12 T:ketjeminorv2 15.92 16.01 16.04 T:twine80n6t4clocv2 16.48 16.50 16.50 T:twine80n6t4clocv3 17.92 17.94 17.96 T:aes128otrsv2 18.07 18.09 18.13 T:aes128otrsv1 18.49 18.51 18.52 ascon128v12 19.06 19.07 19.09 T:ascon128v11 19.07 19.08 19.10 T:ascon128v1 19.89 19.90 19.95 T:aes128otrpv2 20.02 20.04 20.08 T:aes128otrpv1 23.13 23.15 23.16 T:aes256otrsv2 23.42 23.45 23.49 T:aes256otrsv1 23.76 23.78 23.82 T:aes128n12clocv1 23.80 23.82 23.85 T:aes128n8clocv1 25.13 25.16 25.20 T:aes256otrpv2 25.39 25.48 25.61 T:aes256otrpv1 25.89 25.90 25.95 T:aes128n8silcv1 25.91 25.98 26.14 T:aes128n12silcv1 28.43 28.55 28.82 T:oceankeyakv1 33.25 33.26 33.28 T:proest256otrv1 43.73 43.78 45.28 T:riverkeyakv1 52.04 53.84 53.91 T:ketjesrv1 55.85 56.11 57.63 T:ketjesrv2 79.55 79.59 79.61 T:present80n6t4silcv3 81.69 82.63 82.75 T:ketjejrv1 111.27 111.34 111.40 T:proest128otrv1 117.04 117.07 117.12 T:led80n6t4silcv3 120.27 120.36 120.49 T:twine80n6clocv1 121.34 121.39 121.56 T:deoxysneq128128v13 121.47 121.62 121.79 T:seakeyakv1 123.33 123.68 123.93 T:ketjejrv2 154.12 154.17 154.21 T:deoxysneq256128v13 156.41 156.67 157.23 T:aezv1 182.98 183.23 184.26 T:deoxyseq128128v13 232.32 232.48 233.87 T:deoxyseq256128v13 411.35 411.76 412.29 aes256gcmv1 576.56? 576.76? 786.18? T:acorn128 576.08 576.93 577.59 T:acorn128v3 579.54? 579.78? 804.15? T:acorn128v2 5210.11 5214.35 5216.59 T:present80n6silcv1 5220.00 5221.53 5224.00 T:present80n6t4silcv2 9647.37 9653.34 9663.67 T:led80n6silcv1 9676.31 9679.37 9680.51 T:led80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.44 0.45 0.46 T:aegis128l 0.46 0.47 0.49 aegis128l 0.47 0.47 0.48 T:tiaoxinv1 0.47 0.48 0.49 T:tiaoxinv2 0.68 0.69 0.69 T:aegis128 0.70 0.71 0.72 aegis256 0.86 0.87 0.88 T:aezv4 0.87 0.87 0.89 T:aezv5 0.87 0.88 0.89 T:aezv3 1.00 1.01 1.10 T:aeadaes128ocbtaglen128v1 1.15? 1.19? 1.34? T:aeadaes192ocbtaglen128v1 1.22 1.22 1.24 T:aes128otrpv3 1.34 1.35 1.35 T:aes128otrcv3 1.38 1.39 1.40 T:morus1280128v2 1.58 1.59 1.60 T:aes256otrpv3 1.68 1.69 1.69 T:morus1280256v1 1.69 1.70 1.70 T:morus640128v1 1.70 1.71 1.82 T:morus1280256v2 1.73 1.74 1.74 T:morus640128v2 1.81 1.81 1.81 T:aes256otrcv3 1.79 1.83 1.94 T:deoxysi128v141 1.83 1.85 1.87 T:deoxysneq128128v1 1.96 1.97 2.12 T:aeadaes256ocbtaglen128v1 2.03 2.05 2.07 T:deoxysneq256128v1 2.11 2.13 2.19 T:deoxysi256v141 2.15 2.19 2.20 T:colm0v1 2.49 2.51 2.55 T:morus1280128v1 2.72 2.74 2.75 T:deoxysii128v141 2.94 2.95 3.03 T:deoxyseq128128v1 3.07 3.08 3.11 T:deoxysii256v141 3.23 3.23 3.24 T:aes128otrsv3 3.28 3.28 3.30 T:norx6441v2 3.31 3.32 3.33 T:norx6441v3 3.46 3.53 3.55 T:deoxyseq256128v1 3.62 3.63 3.71 T:aes128gcmv1 3.79 3.82 3.89 T:aes256gcmv1 3.81 3.82 3.84 T:norx6441v1 3.95 3.96 4.12 T:seakeyakv2 4.17 4.17 4.19 T:norx3241v2 4.17 4.18 4.19 T:norx3241v3 4.46 4.46 4.48 T:aes256otrsv3 4.84 4.86 4.88 T:norx6461v2 4.88 4.89 4.90 T:norx3241v1 4.90 4.92 4.94 T:norx6461v3 5.25 5.25 5.26 T:aes128n12t8clocv2 5.25 5.25 5.26 T:aes128n8t8clocv2 5.26 5.26 5.26 T:aes128n12t8clocv3 5.29 5.30 5.31 T:aes128n12t8silcv2 5.29 5.31 5.31 T:aes128n8t8silcv2 5.29 5.31 5.31 T:aes128n12t8silcv3 5.36 5.39 5.39 T:oceankeyakv2 5.49 5.51 5.56 T:lakekeyakv2 5.74 5.76 5.78 T:norx6461v1 6.36 6.38 6.40 T:norx3261v3 6.38 6.39 6.41 T:norx3261v2 6.38 6.41 6.60 T:lakekeyakv1 7.75 7.76 7.78 T:norx6444v2 7.79 7.81 7.82 T:norx6444v3 8.05 8.05 8.07 T:norx3261v1 8.94 8.97 8.99 T:norx6444v1 9.18 9.21 9.30 T:lunarkeyakv2 10.73 10.73 10.74 T:aesjambuv1 11.63 11.64 11.66 T:riverkeyakv2 11.96 12.02 12.09 T:ketjemajorv2 12.40 12.43 12.44 ascon128av12 12.92 12.93 12.95 T:ascon128av11 12.99 13.01 13.02 T:ascon96v1 14.32 14.41 14.48 T:ketjeminorv2 15.92 15.97 16.32 T:twine80n6t4clocv2 16.46 16.47 16.49 T:twine80n6t4clocv3 17.70 17.72 17.74 T:aes128otrsv2 17.89 17.90 17.97 T:aes128otrsv1 18.38 18.39 18.41 ascon128v12 19.19 19.20 19.21 T:ascon128v1 19.19 19.20 19.23 T:ascon128v11 19.71 19.74 19.76 T:aes128otrpv2 19.85 19.87 19.93 T:aes128otrpv1 22.95 22.95 22.98 T:aes256otrsv2 23.22 23.25 23.27 T:aes256otrsv1 23.56 23.61 23.70 T:aes128n12clocv1 23.71 23.73 23.77 T:aes128n8clocv1 24.97 24.99 25.00 T:aes256otrpv2 25.21 25.27 25.39 T:aes256otrpv1 25.95 26.00 26.06 T:aes128n8silcv1 25.97 26.04 26.21 T:aes128n12silcv1 28.53 28.67 28.92 T:oceankeyakv1 33.20 33.21 33.29 T:proest256otrv1 43.83 43.89 45.38 T:riverkeyakv1 52.55 52.62 52.73 T:ketjesrv1 54.04 54.09 54.34 T:ketjesrv2 79.94 79.96 80.00 T:present80n6t4silcv3 81.18 81.32 81.37 T:ketjejrv1 110.77 111.03 111.50 T:proest128otrv1 117.45 117.50 117.63 T:led80n6t4silcv3 120.31 120.37 120.45 T:twine80n6clocv1 121.83 121.87 123.83 T:ketjejrv2 122.40 122.46 122.66 T:seakeyakv1 139.35 139.45 139.52 T:deoxysneq128128v13 157.04 157.31 157.62 T:aezv1 174.35 174.39 174.72 T:deoxysneq256128v13 182.87 183.13 183.63 T:deoxyseq128128v13 231.95 232.36 233.32 T:deoxyseq256128v13 411.87 412.24 412.75 aes256gcmv1 598.32 598.78 600.72 T:acorn128v3 605.64? 605.71? 815.51? T:acorn128 609.18? 609.60? 823.79? T:acorn128v2 5207.77 5214.72 5215.63 T:present80n6t4silcv2 5216.89 5218.41 5220.27 T:present80n6silcv1 9651.13 9658.75 9669.59 T:led80n6silcv1 9675.65 9678.26 9679.55 T:led80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.43 0.44 0.44 T:aegis128l 0.46 0.46 0.47 aegis128l 0.47 0.47 0.48 T:tiaoxinv1 0.47 0.47 0.49 T:tiaoxinv2 0.51 0.51 0.52 T:aezv5 0.51 0.51 0.53 T:aezv3 0.52 0.52 0.53 T:aezv4 0.69 0.69 0.69 T:aegis128 0.70 0.71 0.71 aegis256 1.00 1.01 1.04 T:aeadaes128ocbtaglen128v1 1.15 1.16 1.19 T:aeadaes192ocbtaglen128v1 1.21 1.22 1.23 T:aes128otrpv3 1.34 1.35 1.35 T:aes128otrcv3 1.38 1.39 1.39 T:morus1280128v2 1.57 1.58 1.58 T:aes256otrpv3 1.68 1.69 1.69 T:morus1280256v1 1.69 1.70 1.70 T:morus640128v1 1.70 1.71 1.82 T:morus1280256v2 1.73 1.74 1.74 T:morus640128v2 1.79 1.80 1.82 T:deoxysi128v141 1.81 1.81 1.81 T:aes256otrcv3 1.82 1.83 1.87 T:deoxysneq128128v1 1.94 1.96 1.97 T:aeadaes256ocbtaglen128v1 2.02 2.03 2.04 T:deoxysneq256128v1 2.11 2.12 2.14 T:deoxysi256v141 2.16 2.18 2.23 T:colm0v1 2.48 2.49 2.51 T:morus1280128v1 2.71 2.73 2.78 T:deoxysii128v141 2.96 2.96 2.97 T:deoxyseq128128v1 3.07 3.07 3.10 T:deoxysii256v141 3.23 3.23 3.24 T:aes128otrsv3 3.27 3.29 3.30 T:norx6441v2 3.30 3.32 3.32 T:norx6441v3 3.48 3.50 3.54 T:deoxyseq256128v1 3.62 3.64 3.69 T:aes128gcmv1 3.78 3.80 3.86 T:aes256gcmv1 3.80 3.81 3.82 T:norx6441v1 3.98 3.99 4.14 T:seakeyakv2 4.17 4.18 4.19 T:norx3241v2 4.17 4.18 4.19 T:norx3241v3 4.45 4.46 4.47 T:aes256otrsv3 4.83 4.85 4.85 T:norx6461v2 4.88 4.89 4.90 T:norx3241v1 4.91 4.91 4.93 T:norx6461v3 5.24 5.25 5.26 T:aes128n8t8clocv2 5.24 5.26 5.26 T:aes128n12t8clocv2 5.26 5.26 5.27 T:aes128n12t8clocv3 5.29 5.30 5.31 T:aes128n8t8silcv2 5.29 5.30 5.31 T:aes128n12t8silcv3 5.30 5.30 5.31 T:aes128n12t8silcv2 5.38 5.39 5.41 T:oceankeyakv2 5.53 5.55 5.57 T:lakekeyakv2 5.74 5.75 5.76 T:norx6461v1 6.35 6.37 6.39 T:norx3261v2 6.37 6.38 6.39 T:norx3261v3 6.43 6.48 6.52 T:lakekeyakv1 7.78 7.79 7.80 T:norx6444v2 7.83 7.84 7.86 T:norx6444v3 8.04 8.05 8.06 T:norx3261v1 8.98 9.00 9.00 T:norx6444v1 9.19 9.23 9.34 T:lunarkeyakv2 10.73 10.73 10.73 T:aesjambuv1 11.72 11.73 11.75 T:riverkeyakv2 11.98 12.02 12.05 T:ketjemajorv2 12.39 12.40 12.42 ascon128av12 12.92 12.94 12.95 T:ascon128av11 13.00 13.01 13.01 T:ascon96v1 14.35 14.36 14.38 T:ketjeminorv2 15.92 15.93 16.31 T:twine80n6t4clocv2 16.46 16.47 16.49 T:twine80n6t4clocv3 17.76 17.77 17.79 T:aes128otrsv2 17.94 17.95 17.99 T:aes128otrsv1 18.38 18.38 18.40 ascon128v12 19.17 19.19 19.22 T:ascon128v1 19.18 19.19 19.21 T:ascon128v11 19.74 19.76 19.79 T:aes128otrpv2 19.88 19.90 19.93 T:aes128otrpv1 22.96 22.99 23.03 T:aes256otrsv2 23.25 23.28 23.29 T:aes256otrsv1 23.58 23.67 23.76 T:aes128n12clocv1 23.71 23.75 23.77 T:aes128n8clocv1 24.98 24.99 25.01 T:aes256otrpv2 25.24 25.31 25.42 T:aes256otrpv1 25.94 25.98 26.02 T:aes128n8silcv1 25.95 26.04 26.19 T:aes128n12silcv1 28.56 28.66 28.91 T:oceankeyakv1 33.19 33.22 33.28 T:proest256otrv1 43.86 43.92 45.37 T:riverkeyakv1 52.62 52.67 52.76 T:ketjesrv1 54.01 54.17 54.36 T:ketjesrv2 79.94 79.96 79.98 T:present80n6t4silcv3 81.16 81.32 81.40 T:ketjejrv1 110.79 110.89 111.18 T:proest128otrv1 117.42 117.46 117.53 T:led80n6t4silcv3 120.28 120.33 120.47 T:twine80n6clocv1 121.91 122.04 123.53 T:ketjejrv2 122.56 122.63 122.68 T:seakeyakv1 139.38 139.44 139.56 T:deoxysneq128128v13 156.40 156.64 157.28 T:aezv1 174.38 174.51 174.61 T:deoxysneq256128v13 182.78 183.16 183.77 T:deoxyseq128128v13 231.94 232.36 233.23 T:deoxyseq256128v13 406.77 407.09 407.58 aes256gcmv1 598.43 598.87 600.68 T:acorn128v3 605.74? 605.96? 814.73? T:acorn128 609.07? 609.36? 823.99? T:acorn128v2 5202.68 5214.38 5216.08 T:present80n6t4silcv2 5217.39 5217.88 5218.49 T:present80n6silcv1 9648.96 9656.77 9670.17 T:led80n6silcv1 9675.60 9676.88 9678.38 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 2.44? 2.53? 2.77? T:aegis128 2.62? 2.77? 3.30? aegis128l 2.63? 2.93? 3.15? T:aegis128l 2.96? 3.24? 3.66? aegis256 3.20 3.33 3.55 T:tiaoxinv1 3.17? 3.35? 3.73? T:tiaoxinv2 3.81? 3.87? 4.27? T:aezv5 4.02 4.17 4.35 T:aezv4 4.24 4.34 4.66 T:aezv3 5.77 5.79 5.97 T:morus640128v1 5.75 5.82 6.07 T:deoxysneq128128v1 6.03 6.07 6.23 T:morus640128v2 5.73? 6.27? 10.20? T:aeadaes128ocbtaglen128v1 6.33 6.34 6.38 T:aes128otrpv3 6.81 6.89 7.09 T:deoxysneq256128v1 6.91 6.93 6.95 T:aes128otrsv3 6.42? 7.51? 12.38? T:aeadaes192ocbtaglen128v1 7.53 7.62 7.97 T:morus1280256v1 7.70 7.73 7.88 T:colm0v1 7.88 7.88 7.91 T:aes128n12t8clocv3 7.63 7.89 8.03 T:morus1280128v2 7.88 7.91 7.93 T:aes128n8t8clocv2 7.89 7.92 7.97 T:aes128n12t8clocv2 7.91 8.02 8.16 T:deoxysi128v141 7.79? 8.16? 12.36? T:aeadaes256ocbtaglen128v1 8.18 8.20 8.28 T:aes256otrpv3 8.34 8.41 8.50 T:aes128otrcv3 8.74 8.79 8.98 T:morus1280256v2 9.16 9.17 9.17 T:aes128n12t8silcv3 9.17 9.18 9.20 T:aes128n8t8silcv2 9.16 9.19 9.23 T:aes128n12t8silcv2 9.17 9.20 9.28 T:aes256otrsv3 9.24 9.30 9.35 T:deoxysi256v141 10.52 10.63 10.71 T:norx3241v1 10.77 10.81 10.92 T:norx3241v2 10.75 10.84 11.09 T:norx3241v3 11.24 11.26 11.27 T:aes256otrcv3 11.21 11.32 11.43 T:norx6441v1 11.75 11.84 11.92 T:deoxyseq128128v1 11.92 12.03 12.11 T:norx6441v3 11.97 12.05 12.13 T:norx6441v2 12.84 13.01 13.68 T:morus1280128v1 13.19 13.24 13.36 T:deoxyseq256128v1 13.73 13.95 14.55 T:deoxysii128v141 15.14 15.15 15.16 T:aesjambuv1 15.85 15.93 16.22 T:deoxysii256v141 16.01 16.13 16.20 T:norx3261v2 16.10 16.18 16.26 T:norx3261v3 16.56 16.57 16.73 T:norx6461v1 16.73 16.85 16.98 T:norx6461v3 17.09 17.20 17.34 T:norx3261v1 17.16 17.21 17.34 T:norx6461v2 18.78 18.89 18.95 ascon128av12 19.38 19.55 19.84 T:ascon96v1 19.35 19.59 19.83 T:ascon128av11 22.77 23.19 23.55 T:lakekeyakv1 23.92 24.29 24.97 T:lakekeyakv2 24.26 24.41 24.61 ascon128v12 24.45 24.52 24.68 T:twine80n6t4clocv3 25.02 25.18 25.35 T:twine80n6t4clocv2 25.09 25.20 25.53 T:ascon128v11 25.07 25.23 25.62 T:ascon128v1 27.70 27.84 28.05 T:riverkeyakv2 29.54 29.79 30.41 T:aes128otrsv2 30.02 30.17 30.42 T:aes128otrsv1 30.09 30.17 30.90 T:aes128n8clocv1 30.12 30.30 30.79 T:aes128n12clocv1 31.50 31.63 32.30 T:aes128otrpv2 32.05 32.14 32.43 T:aes128otrpv1 35.95 36.12 36.60 T:aes128n8silcv1 36.28 36.48 36.75 T:aes128n12silcv1 36.38 36.88 39.55 T:aes128gcmv1 36.82 37.12 37.78 T:seakeyakv2 38.12 38.33 38.68 T:aes256otrsv2 38.31 38.41 38.84 T:aes256otrsv1 37.67 39.31 39.84 T:aes256gcmv1 39.77 39.94 40.15 T:aes256otrpv2 40.41 40.70 41.24 T:aes256otrpv1 47.62 48.13 49.23 T:ketjeminorv2 56.02 56.12 56.27 T:norx6444v2 57.07 57.28 57.53 T:norx6444v3 59.50 59.92 60.20 T:oceankeyakv2 66.44 67.36 67.88 T:ketjemajorv2 67.84 68.05 68.26 T:norx6444v1 76.68 77.32 81.05 T:riverkeyakv1 82.50 85.47 85.84 T:ketjesrv1 94.48 94.83 96.47 T:ketjesrv2 95.39 95.61 95.80 T:proest256otrv1 98.38 98.48 98.62 T:present80n6t4silcv3 109.06 110.04 110.55 T:ketjejrv1 132.05 132.56 132.84 T:twine80n6clocv1 136.60 137.10 137.95 T:deoxysneq128128v13 139.62 139.82 140.02 T:led80n6t4silcv3 148.72 149.18 149.91 T:lunarkeyakv2 163.48 164.09 164.75 T:ketjejrv2 170.59 171.55 172.12 T:aezv1 173.38 173.60 173.89 T:deoxysneq256128v13 219.09 219.91 221.35 T:proest128otrv1 226.42 227.06 228.57 T:deoxyseq128128v13 288.78 289.15 290.61 T:deoxyseq256128v13 309.59 311.12 313.42 T:oceankeyakv1 463.03 463.77 464.97 aes256gcmv1 888.00 889.46 890.50 T:seakeyakv1 1989.35? 1990.81? 2762.52? T:acorn128 2039.52 2040.97 2043.23 T:acorn128v3 2053.62? 2055.14? 2840.99? T:acorn128v2 5841.05 5842.65 5846.16 T:present80n6t4silcv2 5842.36 5844.77 5850.64 T:present80n6silcv1 10776.91 10783.48 10794.35 T:led80n6silcv1 10815.20 10821.50 10829.29 T:led80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 2.52? 2.59? 2.99? T:aegis128 2.69? 2.98? 3.25? aegis128l 2.79? 3.09? 3.48? T:aegis128l 3.06? 3.19? 3.57? aegis256 3.26? 3.30? 3.64? T:tiaoxinv2 3.21? 3.38? 3.71? T:tiaoxinv1 3.88 3.91 4.03 T:aezv5 4.09 4.16 4.41 T:aezv4 4.32 4.39 4.50 T:aezv3 5.37 5.44 5.59 T:morus640128v1 6.10 6.12 6.28 T:morus640128v2 6.11 6.12 6.16 T:aes128otrpv3 6.36? 6.52? 10.78? T:aeadaes128ocbtaglen128v1 7.11 7.15 7.20 T:aes128otrsv3 7.21? 7.47? 11.23? T:aeadaes192ocbtaglen128v1 7.50 7.58 7.79 T:morus1280256v1 7.70 7.77 8.12 T:morus1280128v2 7.96 8.02 8.30 T:morus1280256v2 7.99 8.02 8.05 T:aes128n8t8clocv2 7.80? 8.03? 12.45? T:aeadaes256ocbtaglen128v1 8.03 8.05 8.08 T:aes128n12t8clocv3 8.05 8.05 8.09 T:aes128n12t8clocv2 8.26 8.35 8.39 T:aes256otrpv3 8.52 8.60 8.71 T:colm0v1 8.65 8.70 8.81 T:aes128otrcv3 9.18 9.20 9.22 T:aes128n12t8silcv2 9.19 9.20 9.24 T:aes128n8t8silcv2 9.12 9.22 9.48 T:deoxysneq128128v1 9.19 9.22 9.49 T:aes128n12t8silcv3 9.33 9.38 9.49 T:deoxysneq256128v1 9.98 10.02 10.38 T:aes256otrsv3 10.17 10.48 10.58 T:deoxysi128v141 10.65 10.77 10.88 T:norx3241v1 10.83 10.88 10.98 T:norx3241v2 10.92 11.01 11.12 T:norx3241v3 11.35 11.47 11.53 T:norx6441v1 11.51 11.58 11.94 T:deoxysi256v141 11.94 11.98 12.01 T:aes256otrcv3 11.96 12.10 12.16 T:norx6441v2 12.04 12.12 12.19 T:norx6441v3 12.79 12.94 13.38 T:morus1280128v1 14.65 14.68 14.96 T:deoxysii128v141 15.28 15.30 15.32 T:aesjambuv1 15.77 15.84 15.91 T:deoxyseq256128v1 16.27 16.41 16.58 T:norx3261v3 16.34 16.41 16.62 T:norx3261v2 16.70 16.75 16.80 T:norx6461v3 16.69 16.78 16.88 T:norx6461v1 16.41 16.91 17.59 T:deoxyseq128128v1 17.27 17.34 17.41 T:norx3261v1 17.37 17.44 17.52 T:norx6461v2 17.09 17.51 18.06 T:deoxysii256v141 18.81 18.94 19.01 ascon128av12 19.38 19.48 19.76 T:ascon128av11 19.41 19.59 19.67 T:ascon96v1 22.48 22.61 23.03 T:lakekeyakv1 23.91 24.05 24.23 T:lakekeyakv2 24.26 24.39 24.67 ascon128v12 24.45 24.55 24.78 T:twine80n6t4clocv3 24.97 25.01 25.10 T:twine80n6t4clocv2 25.26 25.40 25.50 T:ascon128v1 25.38 25.48 25.87 T:ascon128v11 27.90 27.99 28.16 T:riverkeyakv2 29.71 29.97 30.50 T:aes128otrsv2 29.94 30.18 30.30 T:aes128otrsv1 30.10 30.22 30.57 T:aes128n8clocv1 30.14 30.25 30.89 T:aes128n12clocv1 31.42 31.59 31.82 T:aes128otrpv2 31.76 32.03 32.41 T:aes128otrpv1 36.23 36.47 36.97 T:aes128n8silcv1 36.19 36.50 37.22 T:aes128n12silcv1 35.76 36.70 37.95 T:aes128gcmv1 36.89 37.15 37.80 T:seakeyakv2 36.62 37.66 39.34 T:aes256gcmv1 37.81 37.97 38.23 T:aes256otrsv2 38.42 38.55 38.73 T:aes256otrsv1 39.74 39.89 40.34 T:aes256otrpv2 40.22 40.38 40.84 T:aes256otrpv1 48.05 48.24 48.62 T:ketjeminorv2 56.73 56.78 57.17 T:norx6444v2 57.38 57.59 57.78 T:norx6444v3 60.07 60.34 60.99 T:oceankeyakv2 66.11 66.52 66.90 T:norx6444v1 67.17 68.07 68.85 T:ketjemajorv2 76.86 77.05 80.98 T:riverkeyakv1 83.42 84.21 84.76 T:ketjesrv1 92.75 92.94 93.48 T:ketjesrv2 97.28 97.40 97.71 T:proest256otrv1 98.87 99.12 99.30 T:present80n6t4silcv3 108.12 108.83 109.65 T:ketjejrv1 132.37 132.74 133.03 T:twine80n6clocv1 139.93 140.34 140.67 T:led80n6t4silcv3 149.11 149.88 150.44 T:lunarkeyakv2 155.16 155.52 156.17 T:deoxysneq128128v13 162.27 162.82 164.01 T:ketjejrv2 175.43 176.02 176.87 T:aezv1 193.86 194.19 194.68 T:deoxysneq256128v13 218.59 222.01 223.14 T:proest128otrv1 226.48 227.19 230.05 T:deoxyseq128128v13 288.09 289.05 290.30 T:deoxyseq256128v13 309.44 310.52 312.92 T:oceankeyakv1 463.84 464.98 465.60 aes256gcmv1 889.34 890.45 891.20 T:seakeyakv1 2019.62? 2021.43? 2791.64? T:acorn128 2060.99 2062.55 2067.76 T:acorn128v3 2082.88? 2085.91? 2860.62? T:acorn128v2 5836.34 5839.92 5842.65 T:present80n6t4silcv2 5841.86 5845.89 5850.02 T:present80n6silcv1 10771.12 10775.93 10780.64 T:led80n6silcv1 10811.26 10814.15 10819.23 T:led80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 2.51 2.57 2.66 T:aegis128 2.65? 2.83? 2.95? aegis128l 2.76 2.88 2.95 T:aegis128l 3.05 3.06 3.09 T:aezv5 3.05 3.17 3.36 aegis256 3.22 3.23 3.52 T:aezv4 3.20? 3.40? 3.72? T:tiaoxinv1 3.18? 3.45? 3.73? T:tiaoxinv2 3.39 3.46 3.55 T:aezv3 5.35 5.39 5.41 T:morus640128v1 6.11 6.14 6.16 T:aes128otrpv3 6.14 6.17 6.24 T:morus640128v2 6.32? 6.36? 7.73? T:aeadaes128ocbtaglen128v1 7.11 7.12 7.14 T:aes128otrsv3 7.51 7.55 7.66 T:morus1280256v1 7.67 7.71 7.81 T:morus1280128v2 7.72 7.77 8.15 T:aeadaes256ocbtaglen128v1 7.21? 7.85? 12.42? T:aeadaes192ocbtaglen128v1 7.91 7.95 7.99 T:aes128n8t8clocv2 7.98 7.99 8.02 T:aes128n12t8clocv3 7.93 8.02 8.14 T:morus1280256v2 8.00 8.07 8.25 T:aes128n12t8clocv2 8.23 8.32 8.38 T:aes256otrpv3 8.62 8.67 8.73 T:aes128otrcv3 8.70 8.73 9.04 T:colm0v1 8.95 9.02 9.38 T:deoxysneq128128v1 8.99 9.06 9.14 T:deoxysneq256128v1 9.11 9.12 9.14 T:aes128n12t8silcv2 9.12 9.12 9.14 T:aes128n12t8silcv3 9.12 9.13 9.20 T:aes128n8t8silcv2 9.91 9.95 10.02 T:aes256otrsv3 10.25 10.44 10.60 T:deoxysi128v141 10.65 10.75 10.82 T:norx3241v1 10.80 10.91 11.00 T:norx3241v2 10.93 10.99 11.05 T:norx3241v3 11.35 11.42 11.47 T:norx6441v1 11.44 11.63 11.73 T:deoxysi256v141 11.94 11.96 11.98 T:aes256otrcv3 11.92 11.97 12.09 T:norx6441v2 12.05 12.11 12.17 T:norx6441v3 12.74 12.84 13.24 T:morus1280128v1 14.60 14.62 14.75 T:deoxysii128v141 15.28 15.30 15.32 T:aesjambuv1 15.81 15.87 16.02 T:deoxyseq256128v1 16.29 16.38 16.39 T:norx3261v2 16.30 16.38 16.44 T:norx3261v3 16.49 16.72 17.67 T:deoxyseq128128v1 16.68 16.74 16.80 T:norx6461v1 16.70 16.76 16.90 T:norx6461v3 17.03 17.19 17.98 T:deoxysii256v141 17.20 17.31 17.38 T:norx3261v1 17.23 17.38 17.47 T:norx6461v2 18.81 18.87 19.02 ascon128av12 19.39 19.50 19.75 T:ascon96v1 19.39 19.52 19.68 T:ascon128av11 23.62 23.71 24.21 T:lakekeyakv1 24.13 24.23 24.38 ascon128v12 24.15 24.36 24.95 T:lakekeyakv2 24.42 24.58 25.00 T:twine80n6t4clocv3 25.04 25.11 25.24 T:twine80n6t4clocv2 25.30 25.38 25.62 T:ascon128v1 25.20 25.39 25.59 T:ascon128v11 29.01 29.09 29.23 T:riverkeyakv2 29.71 29.86 30.09 T:aes128otrsv2 30.01 30.09 30.30 T:aes128n12clocv1 30.09 30.18 30.37 T:aes128n8clocv1 30.07 30.21 30.38 T:aes128otrsv1 31.42 31.50 31.79 T:aes128otrpv2 31.91 32.06 32.30 T:aes128otrpv1 36.03 36.31 36.72 T:aes128n12silcv1 35.97 36.33 36.94 T:aes128n8silcv1 35.83 36.34 37.36 T:aes128gcmv1 36.81 36.97 37.87 T:seakeyakv2 36.33 37.42 37.80 T:aes256gcmv1 37.98 38.12 38.64 T:aes256otrsv2 38.38 38.70 38.83 T:aes256otrsv1 39.83 39.96 40.16 T:aes256otrpv2 40.60 40.71 40.94 T:aes256otrpv1 48.08 48.42 48.95 T:ketjeminorv2 56.74 57.00 57.12 T:norx6444v2 57.41 57.67 57.88 T:norx6444v3 59.98 60.13 60.62 T:oceankeyakv2 66.43 66.68 66.87 T:norx6444v1 67.12 67.87 68.54 T:ketjemajorv2 76.87 76.97 81.24 T:riverkeyakv1 83.59 84.02 84.72 T:ketjesrv1 92.77 93.20 93.83 T:ketjesrv2 93.71 93.86 94.05 T:proest256otrv1 98.77 99.16 99.31 T:present80n6t4silcv3 108.05 109.15 109.94 T:ketjejrv1 132.37 132.62 132.86 T:twine80n6clocv1 140.03 140.21 140.39 T:led80n6t4silcv3 149.14 149.66 150.57 T:lunarkeyakv2 154.91 155.43 155.99 T:deoxysneq128128v13 162.05 162.84 163.80 T:ketjejrv2 175.74 176.56 177.05 T:aezv1 193.77 194.14 194.69 T:deoxysneq256128v13 218.51 218.91 219.63 T:proest128otrv1 226.73 227.45 229.25 T:deoxyseq128128v13 287.66 288.21 289.24 T:deoxyseq256128v13 309.70 310.38 311.80 T:oceankeyakv1 458.84 459.27 460.59 aes256gcmv1 890.27 891.64 894.14 T:seakeyakv1 2019.62? 2020.85? 2793.27? T:acorn128 2060.98 2062.07 2068.44 T:acorn128v3 2082.70? 2084.72? 2860.00? T:acorn128v2 5826.59 5834.09 5845.52 T:present80n6silcv1 5827.93 5836.47 5839.14 T:present80n6t4silcv2 10776.54 10783.23 10791.62 T:led80n6silcv1 10805.95 10810.21 10814.63 T:led80n6t4silcv2