VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20240716

[Page version: 20240726 23:46:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.30? 0.33? 0.36? T:tiaoxinv2 0.31? 0.33? 0.37? T:tiaoxinv1 0.37 0.38 0.39 T:aegis128l 0.38 0.40 0.41 aegis128l 0.57 0.58 0.59 T:aegis128 0.57 0.60 0.61 aegis256 0.50? 0.81? 0.90? T:aeadaes128ocbtaglen128v1 0.86 0.87 0.88 T:aes128otrsv3 0.86 0.87 0.88 T:aes128otrcv3 0.88 0.89 0.92 T:aes128otrpv3 0.92 0.92 0.93 T:aezv4 0.94 0.95 0.96 T:morus1280256v1 0.62? 0.96? 1.05? T:aeadaes192ocbtaglen128v1 0.95 0.97 0.98 T:morus1280128v2 0.96 0.97 0.98 T:aezv3 0.97 0.99 1.00 T:morus1280256v2 0.99 1.00 1.01 T:aezv5 1.08 1.09 1.10 T:aes256otrsv3 1.09 1.11 1.13 T:aes256otrcv3 1.11 1.13 1.14 T:aes256otrpv3 1.12 1.14 1.15 T:morus640128v1 1.13 1.14 1.15 T:morus640128v2 1.29 1.32 1.39 T:deoxysneq128128v1 1.29 1.33 1.37 T:deoxysi128v141 1.44 1.48 1.52 T:deoxysi256v141 1.49 1.51 1.53 T:deoxysneq256128v1 1.69 1.72 1.73 T:morus1280128v1 1.53? 1.74? 1.80? T:aeadaes256ocbtaglen128v1 2.30 2.35 2.40 T:lunarkeyakv2 2.46 2.48 2.62 T:colm0v1 2.69 2.75 2.85 T:deoxysii128v141 2.50? 2.76? 2.89? T:aes128gcmv1 2.75 2.78 2.82 T:norx6441v2 2.76 2.79 2.82 T:norx6441v3 2.75 2.87 2.95 T:deoxyseq128128v1 2.55? 2.93? 3.29? T:aes256gcmv1 2.94 3.02 3.19 T:deoxysii256v141 3.02 3.05 3.06 T:seakeyakv2 3.14 3.16 3.23 T:oceankeyakv2 3.29 3.33 3.36 T:norx6441v1 3.37 3.42 3.73 T:deoxyseq256128v1 3.85 3.87 3.88 T:norx3241v3 3.86 3.88 3.90 T:norx3241v2 4.14 4.18 4.21 T:norx6461v2 4.15 4.18 4.22 T:norx6444v3 4.15 4.19 4.20 T:norx6444v2 4.23 4.24 4.26 T:norx6461v3 4.65 4.66 4.67 T:norx3241v1 4.94 4.97 4.99 T:norx6444v1 4.99 5.02 5.05 T:norx6461v1 5.06 5.11 5.20 T:lakekeyakv2 5.16 5.19 5.26 T:lakekeyakv1 5.20 5.20 5.22 T:aes128n8t8clocv2 5.20 5.21 5.22 T:aes128n12t8clocv2 5.20 5.21 5.22 T:aes128n12t8clocv3 5.21 5.21 5.21 T:aes128n8t8silcv2 5.20 5.21 5.22 T:aes128n12t8silcv2 5.21 5.21 5.22 T:aes128n12t8silcv3 5.77 5.78 5.81 T:norx3261v3 5.82 5.84 5.85 T:norx3261v2 7.56 7.58 7.59 T:norx3261v1 8.36 8.37 8.37 T:ascon96v1 8.38 8.39 8.41 T:ascon128av11 8.62 8.63 8.65 ascon128av12 9.49 9.58 9.64 T:ketjemajorv2 10.36 10.36 10.37 T:aesjambuv1 12.23 12.28 12.42 T:ketjeminorv2 12.26 12.28 12.31 T:ascon128v1 12.26 12.28 12.31 T:ascon128v11 12.64 12.67 12.68 T:riverkeyakv2 12.81 12.83 12.84 ascon128v12 15.81 15.83 15.85 T:twine80n6t4clocv2 16.26 16.29 16.29 T:twine80n6t4clocv3 15.24? 17.62? 19.05? T:oceankeyakv1 17.72 17.76 17.80 T:aes128otrsv2 17.74 17.77 17.81 T:aes128otrpv2 17.75 17.77 17.81 T:aes128otrsv1 18.16 18.18 18.20 T:aes128otrpv1 22.21 22.25 22.29 T:aes256otrsv2 22.23 22.26 22.32 T:aes256otrsv1 22.24 22.26 22.30 T:aes256otrpv2 22.23 22.26 22.35 T:aes256otrpv1 22.29 22.46 22.53 T:seakeyakv1 25.75 25.80 25.82 T:proest256otrv1 27.71 27.78 27.82 T:aes128n8clocv1 27.76 27.80 27.83 T:aes128n12clocv1 30.61 30.70 30.81 T:aes128n12silcv1 30.69 30.73 30.80 T:aes128n8silcv1 34.03 34.07 34.20 T:ketjesrv1 35.97 36.04 36.10 T:ketjesrv2 38.61 38.65 38.69 T:riverkeyakv1 63.73 63.99 65.78 T:proest128otrv1 71.49 71.67 71.82 T:ketjejrv1 74.95 74.96 75.00 T:present80n6t4silcv3 83.24 83.40 83.46 T:deoxysneq128128v13 113.85 114.32 114.75 T:ketjejrv2 116.60 116.67 116.74 T:led80n6t4silcv3 131.76 131.85 131.93 T:deoxysneq256128v13 148.52 148.58 148.72 T:twine80n6clocv1 168.82 168.96 169.14 T:deoxyseq128128v13 182.86 189.91 190.18 T:aezv1 265.49 265.78 267.35 T:deoxyseq256128v13 347.36 347.56 347.92 aes256gcmv1 445.34 447.77 452.51 T:acorn128v3 455.66 456.43 457.45 T:acorn128v2 378.54? 456.88? 789.86? T:acorn128 5645.28 5645.62 5646.59 T:present80n6t4silcv2 5646.11 5646.22 5646.62 T:present80n6silcv1 8407.82 8419.47 8578.10 T:led80n6silcv1 8427.79 8435.79 8536.35 T:led80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.38 0.39 0.40 T:aegis128l 0.39 0.40 0.41 aegis128l 0.41? 0.44? 0.47? T:tiaoxinv1 0.41? 0.45? 0.47? T:tiaoxinv2 0.59 0.60 0.61 T:aegis128 0.62 0.64 0.64 aegis256 0.44? 0.78? 0.92? T:aeadaes128ocbtaglen128v1 0.86 0.87 0.87 T:aes128otrsv3 0.86 0.88 0.90 T:aes128otrcv3 0.87 0.88 0.91 T:aes128otrpv3 0.60? 0.91? 1.05? T:aeadaes192ocbtaglen128v1 0.90 0.93 0.94 T:aezv4 0.93 0.93 0.94 T:morus1280256v1 0.92 0.94 0.95 T:morus1280128v2 0.92 0.94 0.95 T:morus1280256v2 0.95 0.98 1.02 T:aezv3 0.98 1.00 1.00 T:aezv5 1.09 1.11 1.13 T:aes256otrsv3 1.09 1.11 1.12 T:aes256otrcv3 1.10 1.11 1.12 T:aes256otrpv3 1.14 1.14 1.16 T:morus640128v1 1.13 1.15 1.16 T:morus640128v2 1.46? 1.52? 1.63? T:deoxysi128v141 1.59 1.61 1.62 T:deoxysneq128128v1 1.72 1.75 1.77 T:morus1280128v1 1.71 1.75 1.79 T:deoxysi256v141 1.51? 1.75? 1.82? T:aeadaes256ocbtaglen128v1 1.80 1.81 1.83 T:deoxysneq256128v1 2.37 2.42 2.47 T:colm0v1 2.39 2.45 2.54 T:lunarkeyakv2 2.24? 2.70? 2.96? T:aes128gcmv1 2.70 2.72 2.74 T:norx6441v2 2.73 2.75 2.78 T:norx6441v3 2.76 2.80 2.83 T:deoxysii128v141 2.59? 2.91? 3.24? T:aes256gcmv1 2.98 3.09 3.17 T:deoxysii256v141 3.09 3.16 3.19 T:seakeyakv2 3.24 3.28 3.34 T:oceankeyakv2 3.26 3.30 3.32 T:deoxyseq128128v1 3.29 3.32 3.33 T:norx6441v1 3.79 3.80 3.82 T:norx3241v3 3.81 3.82 3.84 T:norx3241v2 3.91 4.06 4.17 T:deoxyseq256128v1 4.04 4.06 4.07 T:norx6461v2 4.13 4.17 4.20 T:norx6444v2 4.02 4.17 4.34 T:norx6444v3 4.17 4.20 4.22 T:norx6461v3 4.52 4.54 4.55 T:norx3241v1 4.91 4.95 5.00 T:norx6444v1 4.95 4.96 4.99 T:norx6461v1 4.97 5.03 5.06 T:lakekeyakv1 5.10 5.11 5.14 T:aes128n12t8silcv3 5.11 5.12 5.15 T:aes128n12t8clocv2 5.10 5.12 5.14 T:aes128n8t8silcv2 5.12 5.13 5.15 T:aes128n12t8silcv2 5.12 5.13 5.15 T:aes128n12t8clocv3 5.11 5.14 5.15 T:aes128n8t8clocv2 5.13 5.19 5.22 T:lakekeyakv2 5.71 5.73 5.74 T:norx3261v3 5.75 5.79 5.82 T:norx3261v2 7.41 7.42 7.44 T:norx3261v1 8.46 8.47 8.49 T:ascon96v1 8.47 8.49 8.52 T:ascon128av11 8.53 8.60 8.63 ascon128av12 9.62 9.67 9.73 T:ketjemajorv2 10.69 10.70 10.70 T:aesjambuv1 11.91 11.96 12.17 T:ketjeminorv2 12.54 12.56 12.59 T:ascon128v1 12.54 12.56 12.59 T:ascon128v11 12.79 12.80 12.80 ascon128v12 12.81 12.86 12.90 T:riverkeyakv2 15.51 15.53 15.56 T:twine80n6t4clocv2 16.20 16.23 16.27 T:twine80n6t4clocv3 17.35 17.37 17.41 T:aes128otrsv2 17.35 17.39 17.43 T:aes128otrsv1 17.37 17.40 17.45 T:aes128otrpv2 15.36? 17.76? 19.20? T:oceankeyakv1 18.73 18.76 18.84 T:aes128otrpv1 21.81 21.84 21.90 T:aes256otrpv2 21.83 21.85 21.89 T:aes256otrsv2 21.80 21.86 21.89 T:aes256otrpv1 21.81 21.88 21.93 T:aes256otrsv1 22.40 22.58 22.66 T:seakeyakv1 25.64 25.69 25.73 T:proest256otrv1 26.83 26.88 26.94 T:aes128n12clocv1 27.32 27.35 27.41 T:aes128n8clocv1 30.75 30.85 31.80 T:aes128n8silcv1 30.72 30.87 31.87 T:aes128n12silcv1 35.55 35.66 35.74 T:ketjesrv1 36.56 36.67 36.83 T:ketjesrv2 38.88 38.95 38.99 T:riverkeyakv1 62.01 62.11 62.15 T:proest128otrv1 73.14 73.34 73.50 T:ketjejrv1 75.72 75.74 75.77 T:present80n6t4silcv3 113.86 113.99 114.16 T:ketjejrv2 117.02 117.19 117.94 T:deoxysneq128128v13 117.27 117.31 117.42 T:led80n6t4silcv3 148.71 148.92 148.98 T:twine80n6clocv1 169.03 169.14 169.36 T:deoxyseq128128v13 168.60 169.71 170.41 T:deoxysneq256128v13 181.32 189.80 190.12 T:aezv1 265.44 266.45 268.28 T:deoxyseq256128v13 346.65 347.00 347.27 aes256gcmv1 438.73 441.81 448.08 T:acorn128v3 445.90 449.91 450.87 T:acorn128v2 373.59? 451.25? 781.45? T:acorn128 5644.15 5644.63 5644.89 T:present80n6silcv1 5644.94 5645.16 5645.48 T:present80n6t4silcv2 8437.65 8466.66 8471.49 T:led80n6t4silcv2 8582.43 8594.61 8601.45 T:led80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.36 0.37 0.38 T:aezv4 0.34? 0.37? 0.39? T:aezv3 0.38 0.39 0.40 T:aegis128l 0.38 0.39 0.41 T:aezv5 0.43 0.44 0.47 T:tiaoxinv1 0.42? 0.45? 0.47? T:tiaoxinv2 0.44? 0.47? 0.49? aegis128l 0.60 0.60 0.61 T:aegis128 0.63 0.64 0.65 aegis256 0.47? 0.78? 0.85? T:aeadaes128ocbtaglen128v1 0.87 0.88 0.89 T:aes128otrcv3 0.86 0.88 0.88 T:aes128otrsv3 0.87 0.89 0.89 T:aes128otrpv3 0.67? 0.93? 1.27? T:aeadaes192ocbtaglen128v1 0.91 0.93 0.95 T:morus1280128v2 0.92 0.93 0.94 T:morus1280256v1 0.92 0.94 0.94 T:morus1280256v2 1.09 1.10 1.12 T:aes256otrsv3 1.10 1.10 1.11 T:aes256otrcv3 1.11 1.11 1.11 T:aes256otrpv3 1.13 1.14 1.15 T:morus640128v1 1.14 1.15 1.16 T:morus640128v2 1.48 1.52 1.56 T:deoxysi128v141 1.58 1.60 1.62 T:deoxysneq128128v1 1.72 1.75 1.77 T:morus1280128v1 1.46? 1.75? 2.05? T:aeadaes256ocbtaglen128v1 1.70 1.75 1.78 T:deoxysi256v141 1.80 1.81 1.83 T:deoxysneq256128v1 2.35 2.44 2.47 T:colm0v1 2.44 2.50 2.59 T:lunarkeyakv2 2.69 2.72 2.73 T:norx6441v2 2.31? 2.75? 2.87? T:aes128gcmv1 2.73 2.76 2.78 T:norx6441v3 2.78 2.80 2.82 T:deoxysii128v141 2.66? 2.91? 3.14? T:aes256gcmv1 2.97 3.01 3.05 T:deoxysii256v141 3.15 3.19 3.24 T:seakeyakv2 3.19 3.28 3.35 T:deoxyseq128128v1 3.27 3.30 3.32 T:norx6441v1 3.36 3.39 3.43 T:oceankeyakv2 3.78 3.80 3.81 T:norx3241v3 3.80 3.82 3.84 T:norx3241v2 4.01 4.04 4.05 T:norx6461v2 3.96 4.09 4.14 T:deoxyseq256128v1 4.18 4.20 4.22 T:norx6461v3 4.20 4.22 4.26 T:norx6444v2 4.08 4.24 4.34 T:norx6444v3 4.52 4.53 4.55 T:norx3241v1 4.93 4.95 4.97 T:norx6461v1 4.96 5.00 5.02 T:norx6444v1 5.01 5.04 5.10 T:lakekeyakv1 5.10 5.12 5.15 T:aes128n8t8silcv2 5.10 5.12 5.15 T:aes128n12t8silcv3 5.09 5.12 5.15 T:aes128n12t8clocv2 5.10 5.13 5.14 T:aes128n8t8clocv2 5.10 5.14 5.15 T:aes128n12t8silcv2 5.12 5.14 5.15 T:aes128n12t8clocv3 5.19 5.23 5.28 T:lakekeyakv2 5.71 5.72 5.75 T:norx3261v3 5.74 5.76 5.77 T:norx3261v2 7.41 7.42 7.43 T:norx3261v1 8.46 8.48 8.51 T:ascon128av11 8.45 8.48 8.49 T:ascon96v1 8.59 8.59 8.62 ascon128av12 9.69 9.72 9.76 T:ketjemajorv2 10.69 10.70 10.70 T:aesjambuv1 11.97 12.02 12.25 T:ketjeminorv2 12.51 12.55 12.60 T:ascon128v1 12.52 12.56 12.60 T:ascon128v11 12.78 12.80 12.81 ascon128v12 12.86 12.90 12.95 T:riverkeyakv2 15.50 15.54 15.58 T:twine80n6t4clocv2 16.20 16.22 16.27 T:twine80n6t4clocv3 17.39 17.43 17.49 T:aes128otrsv1 17.42 17.43 17.46 T:aes128otrsv2 17.43 17.45 17.51 T:aes128otrpv2 15.33? 17.80? 19.26? T:oceankeyakv1 18.78 18.82 18.86 T:aes128otrpv1 21.88 21.90 21.94 T:aes256otrsv2 21.87 21.91 21.94 T:aes256otrpv2 21.87 21.91 21.97 T:aes256otrpv1 21.87 21.93 21.99 T:aes256otrsv1 22.49 22.58 22.67 T:seakeyakv1 25.65 25.70 25.73 T:proest256otrv1 26.88 26.90 26.93 T:aes128n12clocv1 27.28 27.34 27.39 T:aes128n8clocv1 30.69 30.81 31.80 T:aes128n8silcv1 30.70 30.81 31.86 T:aes128n12silcv1 35.62 35.69 35.77 T:ketjesrv1 36.43 36.73 36.91 T:ketjesrv2 38.93 38.98 39.05 T:riverkeyakv1 62.02 62.12 62.17 T:proest128otrv1 73.25 73.42 73.49 T:ketjejrv1 75.72 75.74 75.79 T:present80n6t4silcv3 113.89 114.07 114.18 T:ketjejrv2 117.00 117.19 118.00 T:deoxysneq128128v13 117.25 117.31 117.39 T:led80n6t4silcv3 148.55 148.85 148.97 T:twine80n6clocv1 169.02 169.19 169.57 T:deoxyseq128128v13 168.68 169.80 170.47 T:deoxysneq256128v13 182.18 189.45 189.76 T:aezv1 265.56 266.44 268.12 T:deoxyseq256128v13 336.17 336.52 336.99 aes256gcmv1 439.15 441.83 448.06 T:acorn128v3 445.98 449.91 451.10 T:acorn128v2 373.80? 451.26? 780.97? T:acorn128 5644.63 5644.74 5644.97 T:present80n6silcv1 5644.92 5645.22 5645.38 T:present80n6t4silcv2 8438.48 8459.23 8470.54 T:led80n6t4silcv2 8584.16 8592.26 8599.66 T:led80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.27? 0.29? 0.32? T:tiaoxinv2 0.27? 0.29? 0.32? T:tiaoxinv1 0.31? 0.34? 0.35? T:aegis128l 0.35 0.37 0.37 aegis128l 0.54 0.55 0.56 T:aegis128 0.55 0.56 0.57 aegis256 0.64 0.67 0.68 T:aezv4 0.68 0.69 0.71 T:aezv3 0.69 0.70 0.72 T:aezv5 0.72? 0.80? 0.87? T:aeadaes128ocbtaglen128v1 0.86 0.87 0.87 T:aes128otrcv3 0.89 0.91 0.94 T:morus1280128v2 0.79? 0.92? 1.04? T:aeadaes192ocbtaglen128v1 0.92 0.93 0.94 T:morus1280256v1 0.92 0.95 0.96 T:morus1280256v2 0.95 0.95 0.96 T:aes128otrpv3 1.09 1.09 1.10 T:morus640128v2 1.09 1.10 1.10 T:morus640128v1 1.09 1.10 1.11 T:aes256otrcv3 1.21 1.22 1.24 T:aes256otrpv3 1.28 1.31 1.36 T:deoxysi128v141 1.37 1.38 1.42 T:deoxysneq128128v1 1.52 1.53 1.55 T:deoxysneq256128v1 1.52 1.56 1.58 T:deoxysi256v141 1.54? 1.70? 1.84? T:aeadaes256ocbtaglen128v1 1.72 1.74 1.75 T:morus1280128v1 1.77 1.79 1.86 T:colm0v1 2.15 2.18 2.29 T:aes128gcmv1 2.16 2.18 2.23 T:deoxyseq128128v1 2.18 2.22 2.27 T:deoxysii128v141 2.30 2.35 2.47 T:aes256gcmv1 2.46 2.50 2.52 T:deoxysii256v141 2.57 2.59 2.61 T:seakeyakv2 2.64 2.68 2.71 T:oceankeyakv2 2.67 2.73 2.78 T:deoxyseq256128v1 2.77 2.78 2.80 T:norx6441v2 2.79 2.79 2.80 T:norx6441v3 2.99 2.99 2.99 T:aes128otrsv3 3.21 3.26 3.31 T:lunarkeyakv2 3.33 3.35 3.38 T:norx6441v1 3.85 3.86 3.87 T:norx3241v2 3.86 3.86 3.87 T:norx3241v3 4.11 4.11 4.12 T:aes256otrsv3 4.12 4.14 4.15 T:norx6444v2 4.12 4.14 4.17 T:norx6444v3 4.17 4.18 4.20 T:norx6461v2 4.18 4.20 4.23 T:norx6461v3 4.52 4.54 4.57 T:lakekeyakv2 4.64 4.65 4.66 T:norx3241v1 4.89 4.91 4.93 T:norx6444v1 4.88 4.92 4.95 T:lakekeyakv1 5.02 5.03 5.04 T:norx6461v1 5.17 5.17 5.17 T:aes128n8t8silcv2 5.16 5.17 5.17 T:aes128n12t8clocv3 5.17 5.17 5.17 T:aes128n12t8silcv3 5.16 5.17 5.17 T:aes128n8t8clocv2 5.16 5.17 5.17 T:aes128n12t8clocv2 5.16 5.17 5.17 T:aes128n12t8silcv2 5.78 5.79 5.81 T:norx3261v2 5.81 5.82 5.83 T:norx3261v3 7.60 7.61 7.62 T:norx3261v1 8.05 8.09 8.10 T:ketjemajorv2 8.33 8.35 8.37 T:ascon96v1 8.34 8.36 8.38 T:ascon128av11 8.56 8.57 8.60 ascon128av12 9.12 9.14 9.16 T:riverkeyakv2 10.40 10.40 10.40 T:aesjambuv1 10.75 10.78 10.93 T:ketjeminorv2 12.25 12.28 12.31 T:ascon128v1 12.25 12.28 12.30 T:ascon128v11 12.69 12.72 12.73 ascon128v12 15.45 15.47 15.51 T:twine80n6t4clocv2 15.80 15.85 15.95 T:aes128otrsv1 15.83 15.85 15.87 T:aes128otrsv2 16.08 16.09 16.11 T:twine80n6t4clocv3 17.35 17.37 17.39 T:aes128otrpv1 15.75? 17.52? 17.92? T:oceankeyakv1 17.63 17.65 17.68 T:aes128otrpv2 20.33 20.35 20.39 T:aes256otrsv2 20.34 20.36 20.45 T:aes256otrsv1 21.04 21.08 21.11 T:aes128n8clocv1 21.09 21.11 21.14 T:aes128n12clocv1 22.12 22.15 22.18 T:aes256otrpv1 22.13 22.16 22.18 T:aes256otrpv2 22.19 22.28 22.66 T:seakeyakv1 22.57 22.60 22.65 T:aes128n8silcv1 22.56 22.61 22.65 T:aes128n12silcv1 26.07 26.09 26.11 T:proest256otrv1 31.70 31.78 31.88 T:ketjesrv1 33.73 33.77 33.80 T:ketjesrv2 36.42 36.46 36.50 T:riverkeyakv1 61.33 61.52 63.30 T:proest128otrv1 68.12 68.20 68.28 T:ketjejrv1 74.75 74.79 74.81 T:present80n6t4silcv3 83.32 83.40 83.47 T:deoxysneq128128v13 111.02 111.24 111.56 T:ketjejrv2 111.31 111.37 111.41 T:twine80n6clocv1 116.42 116.46 116.54 T:led80n6t4silcv3 124.92 125.04 125.43 T:aezv1 126.02 126.08 126.29 T:deoxyseq128128v13 131.69 131.77 131.82 T:deoxysneq256128v13 198.18 198.37 200.19 T:deoxyseq256128v13 341.50 342.11 342.68 aes256gcmv1 441.89 443.42 449.01 T:acorn128v3 452.83 454.03 454.75 T:acorn128v2 405.40? 454.97? 762.65? T:acorn128 4233.55 4233.82 4234.11 T:present80n6t4silcv2 4233.88 4234.02 4234.21 T:present80n6silcv1 6315.26 6322.41 6375.50 T:led80n6t4silcv2 6350.35 6354.62 6404.06 T:led80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.32? 0.34? 0.36? T:aegis128l 0.32? 0.35? 0.36? T:tiaoxinv1 0.34 0.37 0.37 aegis128l 0.33? 0.37? 0.38? T:tiaoxinv2 0.56 0.57 0.58 aegis256 0.55 0.57 0.57 T:aegis128 0.65 0.67 0.68 T:aezv4 0.68 0.70 0.70 T:aezv3 0.70 0.71 0.72 T:aezv5 0.71? 0.80? 0.90? T:aeadaes128ocbtaglen128v1 0.86 0.87 0.88 T:aes128otrcv3 0.87 0.88 0.88 T:morus1280256v1 0.86 0.88 0.89 T:morus1280256v2 0.86 0.88 0.89 T:morus1280128v2 0.77? 0.93? 1.09? T:aeadaes192ocbtaglen128v1 0.95 0.95 0.96 T:aes128otrpv3 1.09 1.10 1.11 T:morus640128v2 1.09 1.10 1.11 T:aes256otrcv3 1.10 1.11 1.11 T:morus640128v1 1.22 1.23 1.23 T:aes256otrpv3 1.45 1.47 1.54 T:deoxysi128v141 1.50 1.53 1.54 T:deoxysneq128128v1 1.66 1.68 1.72 T:deoxysneq256128v1 1.54? 1.70? 1.83? T:aeadaes256ocbtaglen128v1 1.69 1.72 1.77 T:deoxysi256v141 1.73 1.76 1.77 T:morus1280128v1 1.73 1.77 1.80 T:colm0v1 2.20 2.22 2.23 T:deoxysii128v141 2.20 2.26 2.30 T:aes128gcmv1 2.28 2.37 2.49 T:aes256gcmv1 2.37 2.45 2.47 T:deoxyseq128128v1 2.49 2.51 2.54 T:deoxysii256v141 2.62 2.64 2.65 T:seakeyakv2 2.69 2.73 2.75 T:oceankeyakv2 2.74 2.75 2.77 T:norx6441v2 2.75 2.76 2.77 T:norx6441v3 2.95 2.98 2.99 T:deoxyseq256128v1 2.99 3.00 3.00 T:aes128otrsv3 3.21 3.29 3.36 T:lunarkeyakv2 3.33 3.35 3.36 T:norx6441v1 3.83 3.83 3.85 T:norx3241v2 3.83 3.84 3.86 T:norx3241v3 4.11 4.13 4.13 T:aes256otrsv3 4.11 4.13 4.15 T:norx6444v2 4.12 4.13 4.16 T:norx6461v2 4.08 4.14 4.18 T:norx6444v3 4.13 4.16 4.18 T:norx6461v3 4.54 4.56 4.60 T:lakekeyakv2 4.61 4.63 4.64 T:norx3241v1 4.79 4.81 4.83 T:lakekeyakv1 4.87 4.90 4.93 T:norx6444v1 4.99 5.03 5.06 T:norx6461v1 5.11 5.12 5.14 T:aes128n8t8silcv2 5.11 5.12 5.14 T:aes128n12t8silcv3 5.12 5.13 5.14 T:aes128n8t8clocv2 5.12 5.13 5.14 T:aes128n12t8clocv2 5.12 5.13 5.14 T:aes128n12t8clocv3 5.12 5.13 5.14 T:aes128n12t8silcv2 5.75 5.76 5.78 T:norx3261v3 5.77 5.78 5.80 T:norx3261v2 7.49 7.51 7.52 T:norx3261v1 8.08 8.12 8.16 T:ketjemajorv2 8.33 8.38 8.40 T:ascon96v1 8.39 8.39 8.40 T:ascon128av11 8.53 8.56 8.59 ascon128av12 9.17 9.21 9.23 T:riverkeyakv2 10.56 10.57 10.57 T:aesjambuv1 10.57 10.66 10.80 T:ketjeminorv2 12.32 12.34 12.37 T:ascon128v1 12.32 12.35 12.37 T:ascon128v11 12.69 12.72 12.74 ascon128v12 15.23 15.26 15.34 T:twine80n6t4clocv2 15.63 15.64 15.67 T:aes128otrsv2 15.62 15.65 15.72 T:aes128otrsv1 16.06 16.08 16.12 T:twine80n6t4clocv3 17.42 17.44 17.47 T:aes128otrpv2 15.76? 17.54? 18.37? T:oceankeyakv1 17.62 17.65 17.69 T:aes128otrpv1 20.11 20.14 20.16 T:aes256otrsv2 20.11 20.15 20.23 T:aes256otrsv1 20.62 20.64 20.68 T:aes128n12clocv1 20.82 20.84 20.89 T:aes128n8clocv1 21.88 21.92 21.97 T:aes256otrpv1 21.90 21.93 21.97 T:aes256otrpv2 22.23 22.32 22.40 T:seakeyakv1 22.63 22.67 23.20 T:aes128n8silcv1 22.63 22.68 23.17 T:aes128n12silcv1 26.02 26.06 26.08 T:proest256otrv1 32.62 32.66 32.73 T:ketjesrv1 33.95 34.13 34.20 T:ketjesrv2 36.54 36.59 36.63 T:riverkeyakv1 60.49 60.59 61.44 T:proest128otrv1 69.06 69.13 69.19 T:ketjejrv1 75.12 75.17 75.20 T:present80n6t4silcv3 100.02 100.14 100.80 T:deoxysneq128128v13 110.52 110.70 110.82 T:ketjejrv2 111.42 111.49 111.55 T:twine80n6clocv1 116.73 116.78 116.84 T:led80n6t4silcv3 121.29 125.48 125.79 T:aezv1 125.84 126.03 126.29 T:deoxyseq128128v13 150.40 150.50 150.94 T:deoxysneq256128v13 198.57 198.71 200.19 T:deoxyseq256128v13 341.78 342.46 342.71 aes256gcmv1 439.35 442.32 446.96 T:acorn128v3 445.85 447.95 450.63 T:acorn128v2 401.64? 451.29? 756.53? T:acorn128 4233.34 4233.43 4233.57 T:present80n6t4silcv2 4233.14 4233.53 4233.70 T:present80n6silcv1 6319.76 6388.94 6397.43 T:led80n6t4silcv2 6397.73 6401.99 6405.68 T:led80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.33 0.34 0.35 T:aegis128l 0.32 0.35 0.35 T:tiaoxinv1 0.32? 0.36? 0.37? T:tiaoxinv2 0.38 0.39 0.40 T:aezv4 0.38 0.39 0.41 T:aezv3 0.37 0.40 0.41 aegis128l 0.39 0.40 0.41 T:aezv5 0.56 0.57 0.57 T:aegis128 0.57 0.57 0.58 aegis256 0.77 0.80 0.83 T:aeadaes128ocbtaglen128v1 0.87 0.87 0.88 T:morus1280256v2 0.87 0.87 0.88 T:aes128otrcv3 0.87 0.88 0.88 T:morus1280128v2 0.88 0.88 0.88 T:morus1280256v1 0.92 0.94 0.97 T:aeadaes192ocbtaglen128v1 0.95 0.96 0.96 T:aes128otrpv3 1.09 1.10 1.11 T:aes256otrcv3 1.10 1.11 1.11 T:morus640128v1 1.10 1.11 1.11 T:morus640128v2 1.21 1.22 1.23 T:aes256otrpv3 1.43 1.46 1.48 T:deoxysi128v141 1.51 1.52 1.53 T:deoxysneq128128v1 1.67 1.68 1.70 T:deoxysneq256128v1 1.68 1.70 1.71 T:aeadaes256ocbtaglen128v1 1.68 1.71 1.74 T:deoxysi256v141 1.74 1.75 1.76 T:morus1280128v1 1.73 1.75 1.79 T:colm0v1 2.14 2.19 2.29 T:aes128gcmv1 2.21 2.22 2.24 T:deoxysii128v141 2.29 2.38 2.47 T:aes256gcmv1 2.42 2.44 2.47 T:deoxyseq128128v1 2.48 2.51 2.54 T:deoxysii256v141 2.66 2.67 2.68 T:seakeyakv2 2.74 2.75 2.76 T:norx6441v2 2.75 2.76 2.77 T:norx6441v3 2.77 2.78 2.80 T:oceankeyakv2 2.96 2.98 3.01 T:deoxyseq256128v1 3.00 3.00 3.00 T:aes128otrsv3 3.28 3.31 3.35 T:lunarkeyakv2 3.33 3.34 3.34 T:norx6441v1 3.83 3.84 3.86 T:norx3241v3 3.83 3.84 3.84 T:norx3241v2 4.08 4.11 4.13 T:norx6461v2 4.11 4.12 4.13 T:aes256otrsv3 4.13 4.15 4.17 T:norx6461v3 4.14 4.16 4.17 T:norx6444v2 4.12 4.16 4.20 T:norx6444v3 4.57 4.59 4.61 T:lakekeyakv2 4.59 4.62 4.63 T:norx3241v1 4.83 4.86 4.89 T:lakekeyakv1 4.91 4.94 4.95 T:norx6444v1 4.99 5.01 5.02 T:norx6461v1 5.11 5.12 5.14 T:aes128n12t8silcv3 5.11 5.13 5.14 T:aes128n8t8silcv2 5.12 5.13 5.14 T:aes128n12t8clocv2 5.12 5.13 5.14 T:aes128n8t8clocv2 5.12 5.13 5.14 T:aes128n12t8silcv2 5.12 5.14 5.14 T:aes128n12t8clocv3 5.75 5.76 5.77 T:norx3261v3 5.77 5.78 5.79 T:norx3261v2 7.50 7.51 7.53 T:norx3261v1 8.14 8.17 8.19 T:ketjemajorv2 8.36 8.39 8.40 T:ascon96v1 8.39 8.41 8.44 T:ascon128av11 8.52 8.54 8.57 ascon128av12 9.22 9.22 9.24 T:riverkeyakv2 10.56 10.57 10.57 T:aesjambuv1 10.61 10.63 10.83 T:ketjeminorv2 12.32 12.35 12.37 T:ascon128v1 12.32 12.35 12.37 T:ascon128v11 12.68 12.71 12.72 ascon128v12 15.25 15.27 15.35 T:twine80n6t4clocv2 15.65 15.67 15.69 T:aes128otrsv2 15.67 15.69 15.72 T:aes128otrsv1 16.07 16.07 16.10 T:twine80n6t4clocv3 17.45 17.48 17.52 T:aes128otrpv2 15.75? 17.59? 18.39? T:oceankeyakv1 17.66 17.68 17.72 T:aes128otrpv1 20.14 20.17 20.18 T:aes256otrsv2 20.15 20.17 20.27 T:aes256otrsv1 20.60 20.64 20.66 T:aes128n12clocv1 20.81 20.84 20.87 T:aes128n8clocv1 21.94 21.95 21.98 T:aes256otrpv1 21.95 21.96 21.99 T:aes256otrpv2 22.28 22.40 22.90 T:seakeyakv1 22.64 22.68 23.17 T:aes128n12silcv1 22.65 22.72 23.19 T:aes128n8silcv1 26.03 26.06 26.09 T:proest256otrv1 32.67 32.71 32.77 T:ketjesrv1 34.00 34.20 34.27 T:ketjesrv2 36.60 36.63 36.66 T:riverkeyakv1 60.51 60.59 61.40 T:proest128otrv1 69.08 69.16 69.25 T:ketjejrv1 75.11 75.19 75.21 T:present80n6t4silcv3 100.03 100.18 100.82 T:deoxysneq128128v13 110.49 110.59 110.72 T:ketjejrv2 111.39 111.46 111.54 T:twine80n6clocv1 116.71 116.75 116.81 T:led80n6t4silcv3 121.06 125.08 125.53 T:aezv1 126.01 126.13 126.34 T:deoxyseq128128v13 150.45 150.54 151.12 T:deoxysneq256128v13 198.55 198.69 200.27 T:deoxyseq256128v13 336.51 337.27 337.59 aes256gcmv1 438.44 442.87 446.82 T:acorn128v3 445.80 446.79 450.44 T:acorn128v2 401.74? 451.34? 756.60? T:acorn128 4233.28 4233.47 4233.67 T:present80n6silcv1 4233.36 4233.47 4233.89 T:present80n6t4silcv2 6322.47 6388.17 6395.12 T:led80n6t4silcv2 6394.86 6400.04 6403.31 T:led80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.21? 0.23? 0.29? T:tiaoxinv1 0.21? 0.24? 0.29? T:tiaoxinv2 0.28? 0.30? 0.32? T:aegis128l 0.30 0.32 0.33 aegis128l 0.39 0.42 0.43 T:aezv5 0.37? 0.42? 0.45? T:aezv4 0.40 0.43 0.43 T:aezv3 0.50 0.52 0.53 aegis256 0.50 0.53 0.53 T:aegis128 0.72? 0.80? 0.86? T:aeadaes128ocbtaglen128v1 0.85 0.87 0.88 T:morus1280128v2 0.87 0.88 0.90 T:aes128otrcv3 0.88 0.90 0.90 T:morus1280256v1 0.90 0.92 0.93 T:morus1280256v2 0.75? 0.98? 1.28? T:aeadaes192ocbtaglen128v1 1.00 1.02 1.04 T:aes128otrpv3 1.04 1.05 1.06 T:morus640128v2 1.04 1.05 1.06 T:morus640128v1 1.08 1.10 1.13 T:colm0v1 1.10 1.11 1.13 T:aes256otrcv3 1.25 1.30 1.32 T:deoxysi128v141 1.29 1.31 1.34 T:deoxysneq128128v1 1.31 1.33 1.34 T:aes256otrpv3 1.30 1.35 1.38 T:deoxysii128v141 1.35 1.37 1.45 T:deoxyseq128128v1 1.40? 1.45? 1.57? T:deoxysii256v141 1.40 1.46 1.51 T:deoxysi256v141 1.44 1.48 1.55 T:deoxysneq256128v1 1.51 1.54 1.61 T:deoxyseq256128v1 1.33? 1.65? 1.95? T:aeadaes256ocbtaglen128v1 1.75 1.77 1.78 T:morus1280128v1 1.70 1.79 1.88 T:aes128gcmv1 1.69? 1.81? 1.90? T:aes256gcmv1 2.08 2.11 2.14 T:oceankeyakv2 2.02 2.13 2.18 T:lunarkeyakv2 2.48 2.49 2.51 T:seakeyakv2 2.77 2.79 2.82 T:norx6441v2 2.79 2.81 2.83 T:norx6441v3 3.34 3.38 3.41 T:norx6441v1 3.83 3.85 3.87 T:norx3241v2 3.88 3.88 3.89 T:norx3241v3 4.03 4.08 4.11 T:lakekeyakv2 4.08 4.11 4.12 T:norx6444v2 4.10 4.11 4.13 T:norx6444v3 4.16 4.18 4.22 T:norx6461v3 4.16 4.19 4.22 T:norx6461v2 4.61 4.64 4.72 T:lakekeyakv1 4.65 4.66 4.68 T:norx3241v1 4.84 4.85 4.88 T:norx6444v1 5.02 5.04 5.06 T:norx6461v1 5.12 5.12 5.13 T:aes128n12t8silcv2 5.12 5.12 5.13 T:aes128n12t8silcv3 5.12 5.12 5.13 T:aes128n8t8silcv2 5.12 5.13 5.13 T:aes128n12t8clocv2 5.12 5.13 5.13 T:aes128n12t8clocv3 5.12 5.13 5.13 T:aes128otrsv3 5.12 5.13 5.14 T:aes128n8t8clocv2 5.75 5.77 5.78 T:norx3261v2 5.83 5.84 5.86 T:norx3261v3 6.57 6.61 6.66 T:ketjemajorv2 7.14 7.15 7.15 T:aes256otrsv3 7.59 7.61 7.62 T:norx3261v1 8.25 8.32 8.33 T:ascon128av11 8.32 8.33 8.34 T:ascon96v1 8.49 8.52 8.53 ascon128av12 8.55 8.58 8.60 T:riverkeyakv2 9.30 9.32 9.47 T:ketjeminorv2 10.43 10.43 10.44 T:aesjambuv1 12.24 12.28 12.29 T:ascon128v11 12.26 12.28 12.31 T:ascon128v1 12.53 12.56 12.61 ascon128v12 13.88 13.90 13.98 T:aes128otrsv1 13.88 13.90 13.94 T:aes128otrsv2 14.33 14.36 14.39 T:aes128n8silcv1 14.34 14.37 14.41 T:aes128n12silcv1 14.34 14.38 14.41 T:aes128n8clocv1 14.32 14.39 14.42 T:aes128n12clocv1 15.10 15.13 15.17 T:twine80n6t4clocv2 15.89 15.90 15.92 T:twine80n6t4clocv3 16.51 16.54 16.58 T:aes128otrpv1 15.35? 17.38? 18.35? T:oceankeyakv1 17.47 17.49 17.51 T:aes128otrpv2 18.38 18.39 18.42 T:aes256otrsv2 18.37 18.41 18.55 T:aes256otrsv1 21.97 22.00 22.06 T:aes256otrpv1 21.98 22.01 22.04 T:aes256otrpv2 22.05 22.15 22.19 T:seakeyakv1 26.37 26.40 26.46 T:proest256otrv1 29.37 29.51 29.73 T:ketjesrv1 31.44 31.51 31.57 T:ketjesrv2 34.17 34.21 34.29 T:riverkeyakv1 58.84 59.06 60.84 T:proest128otrv1 60.41 60.52 60.56 T:aezv1 64.67 64.87 65.04 T:ketjejrv1 74.07 74.13 74.20 T:twine80n6clocv1 74.60 74.63 74.66 T:present80n6t4silcv3 82.91 83.14 83.24 T:deoxyseq128128v13 83.29 83.36 83.53 T:deoxysneq128128v13 107.92 108.14 108.41 T:ketjejrv2 116.18 116.23 116.30 T:led80n6t4silcv3 131.06 131.20 132.56 T:deoxyseq256128v13 131.50 131.66 132.81 T:deoxysneq256128v13 336.53 336.97 337.38 aes256gcmv1 436.78 439.31 446.86 T:acorn128v3 449.23 450.88 452.38 T:acorn128v2 375.31? 452.97? 788.71? T:acorn128 2821.69 2821.97 2822.19 T:present80n6t4silcv2 2821.91 2822.05 2822.59 T:present80n6silcv1 4215.33 4223.88 4236.68 T:led80n6t4silcv2 4205.55 4302.68 4305.98 T:led80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.20? 0.24? 0.31? T:tiaoxinv2 0.19? 0.25? 0.29? T:tiaoxinv1 0.29 0.30 0.31 T:aegis128l 0.30 0.31 0.33 aegis128l 0.41 0.41 0.43 T:aezv5 0.41 0.42 0.43 T:aezv4 0.41 0.42 0.43 T:aezv3 0.51 0.52 0.53 aegis256 0.51 0.53 0.53 T:aegis128 0.70? 0.80? 0.91? T:aeadaes128ocbtaglen128v1 0.82 0.83 0.84 T:morus1280256v2 0.82 0.84 0.84 T:morus1280256v1 0.82 0.84 0.86 T:morus1280128v2 0.87 0.88 0.88 T:aes128otrcv3 0.59? 0.90? 1.00? T:aeadaes192ocbtaglen128v1 1.02 1.03 1.04 T:aes128otrpv3 1.04 1.07 1.08 T:morus640128v2 1.07 1.08 1.08 T:morus640128v1 1.09 1.09 1.10 T:aes256otrcv3 1.10 1.12 1.13 T:colm0v1 1.24 1.29 1.32 T:deoxysi128v141 1.27? 1.30? 1.44? T:deoxysii128v141 1.33 1.34 1.35 T:aes256otrpv3 1.33 1.38 1.41 T:deoxysneq128128v1 1.37 1.40 1.43 T:deoxyseq128128v1 1.38 1.42 1.47 T:deoxysi256v141 1.43 1.47 1.50 T:deoxysneq256128v1 1.42? 1.48? 1.62? T:deoxysii256v141 1.51 1.54 1.56 T:deoxyseq256128v1 1.31? 1.63? 1.94? T:aeadaes256ocbtaglen128v1 1.75 1.77 1.78 T:morus1280128v1 1.67? 1.77? 1.88? T:aes128gcmv1 1.71? 1.80? 1.92? T:aes256gcmv1 2.07 2.10 2.14 T:oceankeyakv2 2.05 2.12 2.22 T:lunarkeyakv2 2.49 2.51 2.53 T:seakeyakv2 2.75 2.77 2.79 T:norx6441v3 2.78 2.81 2.81 T:norx6441v2 3.35 3.37 3.39 T:norx6441v1 3.83 3.85 3.86 T:norx3241v2 3.87 3.88 3.89 T:norx3241v3 4.04 4.06 4.10 T:lakekeyakv2 4.07 4.09 4.13 T:norx6444v2 3.99 4.09 4.21 T:norx6444v3 4.11 4.15 4.17 T:norx6461v3 4.16 4.21 4.24 T:norx6461v2 4.61 4.63 4.66 T:lakekeyakv1 4.63 4.64 4.65 T:norx3241v1 4.85 4.87 4.89 T:norx6444v1 5.03 5.05 5.07 T:norx6461v1 5.10 5.11 5.13 T:aes128n12t8silcv3 5.10 5.11 5.13 T:aes128n8t8silcv2 5.10 5.11 5.13 T:aes128n8t8clocv2 5.10 5.11 5.14 T:aes128n12t8clocv2 5.12 5.12 5.13 T:aes128n12t8clocv3 5.12 5.12 5.13 T:aes128n12t8silcv2 5.13 5.13 5.13 T:aes128otrsv3 5.74 5.77 5.79 T:norx3261v3 5.77 5.79 5.80 T:norx3261v2 6.55 6.62 6.66 T:ketjemajorv2 7.14 7.15 7.15 T:aes256otrsv3 7.58 7.60 7.62 T:norx3261v1 8.27 8.34 8.35 T:ascon96v1 8.31 8.40 8.46 T:ascon128av11 8.52 8.53 8.54 ascon128av12 8.55 8.58 8.60 T:riverkeyakv2 9.28 9.33 9.50 T:ketjeminorv2 10.43 10.43 10.44 T:aesjambuv1 12.11 12.14 12.18 T:ascon128v1 12.11 12.15 12.19 T:ascon128v11 12.59 12.61 12.65 ascon128v12 13.85 13.89 14.04 T:aes128otrsv1 13.88 13.90 13.95 T:aes128otrsv2 14.31 14.35 14.39 T:aes128n12silcv1 14.28 14.36 14.38 T:aes128n8silcv1 14.36 14.39 14.42 T:aes128n8clocv1 14.36 14.40 14.43 T:aes128n12clocv1 15.09 15.13 15.16 T:twine80n6t4clocv2 15.86 15.88 15.93 T:twine80n6t4clocv3 16.50 16.53 16.55 T:aes128otrpv1 15.36? 17.36? 18.33? T:oceankeyakv1 17.44 17.47 17.50 T:aes128otrpv2 18.37 18.39 18.45 T:aes256otrsv2 18.37 18.45 18.54 T:aes256otrsv1 21.96 22.00 22.05 T:aes256otrpv2 21.96 22.00 22.05 T:aes256otrpv1 21.97 22.11 22.20 T:seakeyakv1 26.37 26.41 26.44 T:proest256otrv1 29.68 29.74 29.79 T:ketjesrv1 31.51 31.59 31.66 T:ketjesrv2 34.22 34.26 34.28 T:riverkeyakv1 58.92 59.09 60.84 T:proest128otrv1 60.39 60.43 60.60 T:aezv1 64.75 64.92 65.15 T:ketjejrv1 74.03 74.17 74.31 T:twine80n6clocv1 74.59 74.62 74.66 T:present80n6t4silcv3 82.76 82.84 83.16 T:deoxyseq128128v13 83.39 83.48 83.61 T:deoxysneq128128v13 106.94 107.22 107.36 T:ketjejrv2 116.16 116.23 116.29 T:led80n6t4silcv3 131.10 131.39 132.35 T:deoxyseq256128v13 131.65 131.80 133.09 T:deoxysneq256128v13 336.55 336.86 337.27 aes256gcmv1 438.23 440.66 446.86 T:acorn128v3 443.86 446.83 451.15 T:acorn128v2 372.42? 451.33? 788.51? T:acorn128 2821.67 2821.91 2822.09 T:present80n6t4silcv2 2822.24 2822.37 2822.53 T:present80n6silcv1 4216.77 4219.13 4225.16 T:led80n6silcv1 4219.71 4325.84 4334.02 T:led80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.21? 0.24? 0.30? T:tiaoxinv1 0.24? 0.26? 0.31? T:tiaoxinv2 0.29 0.30 0.30 T:aegis128l 0.30? 0.32? 0.34? aegis128l 0.41 0.42 0.42 T:aezv5 0.41 0.42 0.43 T:aezv4 0.42 0.42 0.42 T:aezv3 0.52 0.52 0.54 T:aegis128 0.52 0.53 0.53 aegis256 0.74? 0.80? 0.84? T:aeadaes128ocbtaglen128v1 0.81 0.83 0.84 T:morus1280256v2 0.82 0.83 0.85 T:morus1280128v2 0.83 0.83 0.84 T:morus1280256v1 0.87 0.88 0.89 T:aes128otrcv3 0.88? 0.95? 1.25? T:aeadaes192ocbtaglen128v1 1.02 1.02 1.03 T:aes128otrpv3 1.06 1.07 1.08 T:morus640128v2 1.07 1.07 1.08 T:morus640128v1 1.09 1.10 1.10 T:aes256otrcv3 1.10 1.12 1.13 T:colm0v1 1.26 1.33 1.35 T:deoxysi128v141 1.33 1.34 1.34 T:aes256otrpv3 1.30 1.34 1.37 T:deoxysii128v141 1.32 1.38 1.41 T:deoxysneq128128v1 1.37 1.38 1.40 T:deoxyseq128128v1 1.40 1.44 1.47 T:deoxysi256v141 1.45 1.46 1.49 T:deoxysneq256128v1 1.45 1.48 1.51 T:deoxysii256v141 1.53 1.55 1.57 T:deoxyseq256128v1 1.59 1.63 1.66 T:aeadaes256ocbtaglen128v1 1.74 1.75 1.77 T:morus1280128v1 1.74 1.81 1.88 T:aes128gcmv1 1.74 1.82 1.90 T:aes256gcmv1 2.08 2.10 2.12 T:oceankeyakv2 2.07 2.11 2.16 T:lunarkeyakv2 2.49 2.51 2.52 T:seakeyakv2 2.76 2.77 2.78 T:norx6441v3 2.77 2.78 2.80 T:norx6441v2 3.33 3.35 3.36 T:norx6441v1 3.84 3.85 3.87 T:norx3241v2 3.86 3.88 3.90 T:norx3241v3 4.02 4.06 4.09 T:lakekeyakv2 3.99 4.09 4.20 T:norx6444v3 4.07 4.10 4.14 T:norx6444v2 4.12 4.15 4.17 T:norx6461v3 4.14 4.16 4.20 T:norx6461v2 4.60 4.63 4.67 T:lakekeyakv1 4.63 4.65 4.66 T:norx3241v1 4.84 4.88 4.90 T:norx6444v1 5.03 5.04 5.06 T:norx6461v1 5.09 5.10 5.12 T:aes128n8t8clocv2 5.10 5.10 5.12 T:aes128n8t8silcv2 5.10 5.10 5.11 T:aes128n12t8silcv3 5.10 5.11 5.12 T:aes128n12t8clocv2 5.11 5.12 5.13 T:aes128n12t8clocv3 5.12 5.12 5.13 T:aes128n12t8silcv2 5.13 5.13 5.13 T:aes128otrsv3 5.75 5.77 5.79 T:norx3261v3 5.76 5.77 5.79 T:norx3261v2 6.58 6.62 6.66 T:ketjemajorv2 7.14 7.15 7.15 T:aes256otrsv3 7.58 7.59 7.62 T:norx3261v1 8.30 8.32 8.34 T:ascon96v1 8.32 8.34 8.41 T:ascon128av11 8.52 8.53 8.54 ascon128av12 8.55 8.57 8.59 T:riverkeyakv2 9.30 9.38 9.51 T:ketjeminorv2 10.43 10.43 10.44 T:aesjambuv1 12.11 12.13 12.16 T:ascon128v1 12.12 12.14 12.15 T:ascon128v11 12.60 12.64 12.66 ascon128v12 13.88 13.90 13.93 T:aes128otrsv2 13.86 13.91 14.03 T:aes128otrsv1 14.29 14.34 14.40 T:aes128n8silcv1 14.31 14.35 14.39 T:aes128n12silcv1 14.36 14.39 14.44 T:aes128n12clocv1 14.35 14.39 14.43 T:aes128n8clocv1 15.09 15.11 15.15 T:twine80n6t4clocv2 15.87 15.89 15.93 T:twine80n6t4clocv3 16.50 16.52 16.57 T:aes128otrpv1 15.43? 17.36? 18.35? T:oceankeyakv1 17.47 17.49 17.53 T:aes128otrpv2 18.38 18.41 18.45 T:aes256otrsv2 18.40 18.44 18.51 T:aes256otrsv1 21.98 22.01 22.04 T:aes256otrpv2 21.95 22.01 22.04 T:aes256otrpv1 22.05 22.10 22.16 T:seakeyakv1 26.37 26.40 26.45 T:proest256otrv1 29.63 29.75 29.79 T:ketjesrv1 31.52 31.59 31.62 T:ketjesrv2 34.20 34.24 34.29 T:riverkeyakv1 58.93 59.06 60.79 T:proest128otrv1 60.39 60.46 60.58 T:aezv1 64.74 64.85 64.97 T:ketjejrv1 74.02 74.09 74.36 T:twine80n6clocv1 74.61 74.64 74.67 T:present80n6t4silcv3 82.77 83.05 83.25 T:deoxyseq128128v13 83.38 83.44 83.60 T:deoxysneq128128v13 107.11 107.26 107.33 T:ketjejrv2 116.16 116.25 116.36 T:led80n6t4silcv3 130.99 131.42 132.35 T:deoxyseq256128v13 131.67 131.82 133.18 T:deoxysneq256128v13 336.32 336.59 337.16 aes256gcmv1 437.96 440.73 447.09 T:acorn128v3 443.87 446.49 450.98 T:acorn128v2 372.98? 451.28? 788.96? T:acorn128 2821.62 2821.87 2822.02 T:present80n6t4silcv2 2822.05 2822.17 2822.56 T:present80n6silcv1 4221.11 4223.80 4228.29 T:led80n6silcv1 4225.61 4328.79 4334.65 T:led80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.41 0.41 0.43 T:tiaoxinv2 0.41 0.41 0.43 T:tiaoxinv1 0.41 0.42 0.44 T:aegis128l 0.45 0.45 0.45 aegis128l 0.63 0.63 0.63 T:aegis128 0.67 0.68 0.68 aegis256 0.81 0.82 0.84 T:aezv4 0.84 0.84 0.87 T:aezv5 0.84 0.85 0.87 T:aezv3 0.99 1.02 1.07 T:aeadaes128ocbtaglen128v1 1.14 1.15 1.17 T:morus1280128v2 1.15 1.16 1.16 T:morus1280256v1 1.16? 1.17? 1.30? T:aeadaes192ocbtaglen128v1 1.18 1.18 1.20 T:morus1280256v2 1.20 1.21 1.22 T:aes128otrpv3 1.25 1.25 1.25 T:morus640128v1 1.26 1.27 1.27 T:morus640128v2 1.27 1.28 1.28 T:aes128otrcv3 1.55 1.56 1.63 T:deoxysi128v141 1.57 1.57 1.59 T:aes256otrpv3 1.63 1.63 1.63 T:deoxysneq128128v1 1.69 1.69 1.70 T:aes256otrcv3 1.78 1.80 1.82 T:deoxysneq256128v1 1.87 1.88 1.89 T:deoxysi256v141 1.93 1.96 2.12 T:aeadaes256ocbtaglen128v1 2.09 2.10 2.11 T:colm0v1 2.13 2.13 2.14 T:morus1280128v1 2.45 2.48 2.52 T:deoxyseq128128v1 2.56 2.56 2.58 T:deoxysii128v141 2.83 2.84 2.87 T:deoxysii256v141 3.08 3.12 3.37 T:deoxyseq256128v1 3.18 3.19 3.19 T:aes128otrsv3 3.28 3.29 3.30 T:norx6441v2 3.29 3.30 3.32 T:norx6441v3 3.62 3.72 3.74 T:aes128gcmv1 3.79 3.80 3.87 T:aes256gcmv1 3.78 3.80 3.81 T:norx6441v1 3.83 3.84 3.86 T:seakeyakv2 4.20 4.20 4.23 T:norx3241v3 4.19 4.20 4.23 T:norx3241v2 4.40 4.40 4.41 T:aes256otrsv3 4.87 4.88 4.89 T:norx6461v2 4.91 4.92 4.94 T:norx6461v3 4.92 4.93 4.95 T:norx3241v1 4.97 4.99 5.00 T:lakekeyakv2 5.24 5.25 5.26 T:oceankeyakv2 5.26 5.27 5.27 T:aes128n8t8clocv2 5.27 5.27 5.27 T:aes128n12t8clocv3 5.27 5.27 5.28 T:aes128n12t8clocv2 5.33 5.33 5.34 T:aes128n12t8silcv3 5.33 5.33 5.33 T:aes128n8t8silcv2 5.33 5.33 5.34 T:aes128n12t8silcv2 5.67 5.68 5.69 T:norx6461v1 5.71 5.73 5.77 T:lakekeyakv1 5.92 5.93 5.95 T:norx6444v2 5.93 5.97 6.01 T:norx6444v3 6.27 6.29 6.30 T:norx3261v2 6.30 6.31 6.33 T:norx3261v3 6.91 6.93 6.94 T:norx6444v1 8.03 8.04 8.05 T:norx3261v1 8.53 8.54 8.56 T:ascon96v1 8.54 8.56 8.58 T:ascon128av11 8.77 8.79 8.80 ascon128av12 8.91 8.94 8.96 T:lunarkeyakv2 9.60 9.61 9.64 T:riverkeyakv2 10.58 10.59 10.59 T:aesjambuv1 10.70 10.72 10.74 T:ketjemajorv2 12.18 12.20 12.33 T:ketjeminorv2 12.46 12.48 12.49 T:ascon128v11 12.47 12.48 12.49 T:ascon128v1 12.89 12.90 12.91 ascon128v12 15.81 15.83 15.85 T:twine80n6t4clocv2 16.31 16.33 16.39 T:aes128otrsv1 16.32 16.34 16.37 T:aes128otrsv2 16.42 16.44 16.44 T:twine80n6t4clocv3 17.90 17.91 17.94 T:aes128otrpv1 18.11 18.13 18.15 T:aes128otrpv2 20.95 20.97 20.99 T:aes256otrsv2 20.97 20.98 21.02 T:aes256otrsv1 21.32 21.34 21.37 T:aes128n8clocv1 21.33 21.35 21.37 T:aes128n12clocv1 22.75 22.76 22.80 T:aes256otrpv2 22.76 22.77 22.80 T:aes256otrpv1 22.98 23.01 23.06 T:aes128n8silcv1 22.99 23.02 23.10 T:aes128n12silcv1 25.10 26.77 26.99 T:oceankeyakv1 27.03 27.10 27.14 T:seakeyakv1 28.39 28.42 28.45 T:proest256otrv1 32.58 32.61 32.76 T:ketjesrv1 34.87 34.89 34.94 T:ketjesrv2 37.94 37.96 37.99 T:riverkeyakv1 64.14 64.17 65.85 T:proest128otrv1 69.26 69.33 69.39 T:ketjejrv1 75.59 75.59 75.61 T:present80n6t4silcv3 83.83 83.85 83.94 T:deoxysneq128128v13 111.83 111.86 111.93 T:twine80n6clocv1 112.58 112.98 113.27 T:ketjejrv2 117.42 117.45 117.50 T:led80n6t4silcv3 121.51 121.56 122.17 T:aezv1 127.30 127.36 127.42 T:deoxyseq128128v13 132.35 132.41 132.54 T:deoxysneq256128v13 200.51 200.65 202.16 T:deoxyseq256128v13 343.79 344.16 344.57 aes256gcmv1 496.95 497.27 502.90 T:acorn128v3 508.86 509.56 510.29 T:acorn128v2 506.54? 510.37? 805.49? T:acorn128 4255.76 4255.90 4256.22 T:present80n6t4silcv2 4256.22 4256.24 4256.35 T:present80n6silcv1 6345.82 6350.32 6398.40 T:led80n6t4silcv2 6378.28 6385.44 6422.05 T:led80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.42 0.43 0.46 T:aegis128l 0.46 0.46 0.46 aegis128l 0.46 0.46 0.48 T:tiaoxinv1 0.47 0.47 0.48 T:tiaoxinv2 0.64 0.64 0.65 T:aegis128 0.69 0.69 0.70 aegis256 0.81 0.82 0.82 T:aezv4 0.84 0.84 0.84 T:aezv5 0.84 0.85 0.85 T:aezv3 0.99? 1.00? 1.10? T:aeadaes128ocbtaglen128v1 1.10 1.10 1.11 T:morus1280256v1 1.11 1.11 1.12 T:morus1280256v2 1.12 1.13 1.14 T:morus1280128v2 1.14? 1.18? 1.34? T:aeadaes192ocbtaglen128v1 1.20 1.20 1.21 T:aes128otrpv3 1.26 1.26 1.27 T:morus640128v1 1.27 1.27 1.28 T:morus640128v2 1.29 1.30 1.31 T:aes128otrcv3 1.57 1.57 1.57 T:aes256otrpv3 1.73 1.73 1.74 T:aes256otrcv3 1.79 1.81 1.88 T:deoxysi128v141 1.88 1.89 1.90 T:deoxysneq128128v1 1.95 1.96 2.13 T:aeadaes256ocbtaglen128v1 1.97 1.98 2.01 T:deoxysneq256128v1 2.07 2.09 2.13 T:deoxysi256v141 2.11 2.11 2.13 T:colm0v1 2.14 2.14 2.16 T:morus1280128v1 2.61 2.62 2.63 T:deoxysii128v141 2.84 2.85 2.86 T:deoxyseq128128v1 2.89 2.89 2.92 T:deoxysii256v141 3.21 3.21 3.22 T:aes128otrsv3 3.24 3.25 3.26 T:norx6441v3 3.25 3.26 3.27 T:norx6441v2 3.36 3.40 3.47 T:deoxyseq256128v1 3.65 3.66 3.69 T:aes128gcmv1 3.76 3.78 3.80 T:norx6441v1 3.74 3.78 3.87 T:aes256gcmv1 3.87 3.87 3.89 T:seakeyakv2 4.17 4.18 4.19 T:norx3241v2 4.18 4.18 4.19 T:norx3241v3 4.44 4.44 4.45 T:aes256otrsv3 4.81 4.82 4.83 T:norx6461v2 4.85 4.88 4.88 T:norx6461v3 4.89 4.91 4.92 T:norx3241v1 4.99 5.00 5.02 T:lakekeyakv2 5.23 5.23 5.24 T:aes128n12t8clocv3 5.21 5.24 5.25 T:oceankeyakv2 5.23 5.24 5.25 T:aes128n12t8clocv2 5.23 5.24 5.25 T:aes128n8t8clocv2 5.29 5.29 5.30 T:aes128n12t8silcv3 5.29 5.30 5.31 T:aes128n12t8silcv2 5.29 5.30 5.31 T:aes128n8t8silcv2 5.60 5.61 5.67 T:lakekeyakv1 5.63 5.68 5.71 T:norx6461v1 5.91 5.91 5.93 T:norx6444v2 5.93 5.95 6.00 T:norx6444v3 6.23 6.24 6.25 T:norx3261v3 6.26 6.27 6.28 T:norx3261v2 6.90 6.92 6.93 T:norx6444v1 7.93 7.95 7.96 T:norx3261v1 8.57 8.59 8.64 T:ascon96v1 8.60 8.61 8.66 T:ascon128av11 8.74 8.75 8.79 ascon128av12 8.97 9.01 9.04 T:lunarkeyakv2 9.68 9.69 9.73 T:riverkeyakv2 10.75 10.75 10.76 T:aesjambuv1 10.77 10.79 10.80 T:ketjemajorv2 12.03 12.09 12.21 T:ketjeminorv2 12.53 12.54 12.56 T:ascon128v1 12.54 12.55 12.56 T:ascon128v11 12.90 12.92 12.93 ascon128v12 15.63 15.65 15.69 T:twine80n6t4clocv2 16.12 16.13 16.14 T:aes128otrsv2 16.12 16.15 16.18 T:aes128otrsv1 16.41 16.42 16.44 T:twine80n6t4clocv3 17.89 17.92 17.94 T:aes128otrpv2 18.19 18.20 18.22 T:aes128otrpv1 20.74 20.75 20.77 T:aes256otrsv2 20.75 20.78 20.85 T:aes256otrsv1 20.91 20.91 20.93 T:aes128n12clocv1 21.10 21.12 21.15 T:aes128n8clocv1 22.54 22.56 22.59 T:aes256otrpv2 22.53 22.57 22.61 T:aes256otrpv1 23.02 23.05 23.07 T:aes128n12silcv1 23.05 23.08 23.11 T:aes128n8silcv1 25.13 26.87 27.05 T:oceankeyakv1 27.06 27.20 27.24 T:seakeyakv1 28.41 28.42 28.44 T:proest256otrv1 33.52 33.54 33.57 T:ketjesrv1 35.14 35.26 35.34 T:ketjesrv2 38.08 38.12 38.16 T:riverkeyakv1 63.24 63.31 64.07 T:proest128otrv1 70.08 70.18 70.27 T:ketjejrv1 75.92 75.98 76.00 T:present80n6t4silcv3 100.70 100.85 101.22 T:deoxysneq128128v13 111.91 111.99 112.06 T:twine80n6clocv1 112.15 112.28 112.51 T:ketjejrv2 117.70 117.78 117.83 T:led80n6t4silcv3 121.86 122.22 122.44 T:aezv1 127.28 127.34 127.63 T:deoxyseq128128v13 151.17 151.22 151.62 T:deoxysneq256128v13 200.57 200.83 202.25 T:deoxyseq256128v13 343.88 344.17 344.35 aes256gcmv1 493.99 496.23 500.57 T:acorn128v3 501.70 503.53 505.53 T:acorn128v2 502.89? 506.77? 801.34? T:acorn128 4255.48 4255.61 4255.76 T:present80n6t4silcv2 4255.60 4255.70 4255.99 T:present80n6silcv1 6348.02 6411.27 6413.67 T:led80n6t4silcv2 6419.30 6422.79 6425.30 T:led80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.42 0.42 0.43 T:aegis128l 0.46 0.46 0.47 T:tiaoxinv1 0.46 0.47 0.49 T:tiaoxinv2 0.49 0.49 0.50 aegis128l 0.50 0.50 0.51 T:aezv4 0.51 0.51 0.52 T:aezv5 0.51 0.51 0.54 T:aezv3 0.64 0.64 0.64 T:aegis128 0.69 0.69 0.69 aegis256 0.99 1.00 1.02 T:aeadaes128ocbtaglen128v1 1.10 1.10 1.10 T:morus1280256v1 1.10 1.11 1.11 T:morus1280256v2 1.12 1.12 1.13 T:morus1280128v2 1.15 1.15 1.19 T:aeadaes192ocbtaglen128v1 1.19 1.20 1.20 T:aes128otrpv3 1.26 1.26 1.27 T:morus640128v1 1.27 1.27 1.28 T:morus640128v2 1.29 1.30 1.31 T:aes128otrcv3 1.56 1.56 1.57 T:aes256otrpv3 1.72 1.73 1.73 T:aes256otrcv3 1.77 1.77 1.78 T:deoxysi128v141 1.87 1.88 1.89 T:deoxysneq128128v1 1.94 1.95 1.96 T:aeadaes256ocbtaglen128v1 1.96 1.97 1.98 T:deoxysneq256128v1 2.04 2.07 2.10 T:deoxysi256v141 2.11 2.11 2.13 T:colm0v1 2.13 2.14 2.14 T:morus1280128v1 2.59 2.61 2.62 T:deoxysii128v141 2.81 2.84 2.87 T:deoxyseq128128v1 2.86 2.88 2.90 T:deoxysii256v141 3.21 3.21 3.21 T:aes128otrsv3 3.23 3.24 3.24 T:norx6441v2 3.25 3.26 3.26 T:norx6441v3 3.39 3.40 3.43 T:deoxyseq256128v1 3.65 3.67 3.71 T:aes128gcmv1 3.75 3.77 3.83 T:aes256gcmv1 3.76 3.77 3.77 T:norx6441v1 3.90 3.90 3.91 T:seakeyakv2 4.17 4.18 4.18 T:norx3241v2 4.16 4.18 4.19 T:norx3241v3 4.44 4.45 4.45 T:aes256otrsv3 4.78 4.82 4.82 T:norx6461v2 4.86 4.87 4.90 T:norx6461v3 4.87 4.89 4.90 T:norx3241v1 5.02 5.03 5.04 T:lakekeyakv2 5.22 5.23 5.24 T:aes128n12t8clocv3 5.23 5.24 5.24 T:aes128n8t8clocv2 5.23 5.24 5.24 T:aes128n12t8clocv2 5.28 5.29 5.29 T:oceankeyakv2 5.29 5.29 5.31 T:aes128n12t8silcv2 5.29 5.30 5.30 T:aes128n12t8silcv3 5.29 5.30 5.30 T:aes128n8t8silcv2 5.63 5.64 5.64 T:norx6461v1 5.63 5.65 5.68 T:lakekeyakv1 5.94 5.95 5.96 T:norx6444v2 5.96 5.97 6.03 T:norx6444v3 6.24 6.25 6.26 T:norx3261v3 6.26 6.27 6.27 T:norx3261v2 6.93 6.94 6.95 T:norx6444v1 7.94 7.95 7.96 T:norx3261v1 8.56 8.59 8.60 T:ascon96v1 8.61 8.62 8.63 T:ascon128av11 8.74 8.77 8.79 ascon128av12 9.00 9.02 9.07 T:lunarkeyakv2 9.71 9.72 9.76 T:riverkeyakv2 10.75 10.75 10.75 T:aesjambuv1 10.80 10.82 10.84 T:ketjemajorv2 12.06 12.07 12.25 T:ketjeminorv2 12.53 12.55 12.56 T:ascon128v1 12.53 12.55 12.56 T:ascon128v11 12.89 12.90 12.92 ascon128v12 15.61 15.64 15.71 T:twine80n6t4clocv2 16.15 16.17 16.19 T:aes128otrsv2 16.16 16.18 16.21 T:aes128otrsv1 16.41 16.43 16.44 T:twine80n6t4clocv3 17.95 17.96 17.99 T:aes128otrpv2 18.22 18.23 18.24 T:aes128otrpv1 20.76 20.78 20.80 T:aes256otrsv2 20.77 20.81 20.89 T:aes256otrsv1 20.90 20.92 20.95 T:aes128n12clocv1 21.10 21.12 21.13 T:aes128n8clocv1 22.55 22.57 22.61 T:aes256otrpv1 22.57 22.58 22.61 T:aes256otrpv2 23.02 23.05 23.07 T:aes128n12silcv1 23.04 23.07 23.10 T:aes128n8silcv1 25.18 26.91 27.07 T:oceankeyakv1 27.12 27.21 27.26 T:seakeyakv1 28.40 28.42 28.44 T:proest256otrv1 33.54 33.57 33.59 T:ketjesrv1 35.15 35.18 35.36 T:ketjesrv2 38.10 38.14 38.23 T:riverkeyakv1 63.22 63.27 64.05 T:proest128otrv1 70.10 70.17 70.23 T:ketjejrv1 75.94 75.98 76.01 T:present80n6t4silcv3 100.68 101.21 101.31 T:deoxysneq128128v13 111.93 111.98 112.05 T:twine80n6clocv1 112.16 112.27 112.37 T:ketjejrv2 117.74 117.77 117.82 T:led80n6t4silcv3 121.56 121.97 122.30 T:aezv1 127.30 127.38 127.62 T:deoxyseq128128v13 151.22 151.25 151.66 T:deoxysneq256128v13 200.56 200.82 202.24 T:deoxyseq256128v13 338.43 338.85 339.24 aes256gcmv1 494.32 495.81 500.47 T:acorn128v3 501.73 503.59 505.50 T:acorn128v2 502.87? 506.73? 801.34? T:acorn128 4255.24 4255.46 4255.61 T:present80n6t4silcv2 4255.52 4255.61 4255.76 T:present80n6silcv1 6349.62 6407.73 6413.07 T:led80n6t4silcv2 6417.95 6421.57 6426.71 T:led80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 2.18? 2.20? 2.56? T:aegis128 2.16? 2.36? 2.94? aegis128l 2.66? 2.70? 3.10? T:aegis128l 3.07? 3.12? 3.62? T:tiaoxinv2 2.98? 3.27? 3.55? aegis256 3.15? 3.41? 3.83? T:tiaoxinv1 3.71 3.73 3.98 T:aezv5 3.81 3.85 4.20 T:aezv4 4.04 4.10 4.20 T:aezv3 4.71 4.79 4.98 T:morus640128v1 4.99 5.06 5.30 T:morus640128v2 5.52? 5.83? 10.01? T:aeadaes128ocbtaglen128v1 6.22 6.27 6.31 T:aes128otrpv3 6.43 6.45 6.47 T:aes128otrsv3 6.43 6.46 6.73 T:deoxysneq128128v1 6.42 6.47 6.77 T:morus1280128v2 6.47 6.68 6.93 T:morus1280256v1 6.70 6.76 6.83 T:deoxysneq256128v1 6.66 6.84 7.17 T:morus1280256v2 6.34? 7.15? 12.42? T:aeadaes192ocbtaglen128v1 7.55 7.56 7.61 T:aes128n12t8clocv3 7.51 7.70 7.83 T:aes128n12t8clocv2 7.67 7.74 7.87 T:deoxysi128v141 7.69 7.74 7.80 T:aes128n8t8clocv2 7.70 7.74 7.80 T:colm0v1 8.07 8.10 8.15 T:aes128otrcv3 8.12 8.13 8.15 T:aes256otrpv3 7.64? 8.32? 12.04? T:aeadaes256ocbtaglen128v1 8.95 8.99 9.08 T:aes256otrsv3 8.91 9.02 9.09 T:deoxysi256v141 9.09 9.10 9.11 T:aes128n12t8silcv3 9.11 9.11 9.12 T:aes128n8t8silcv2 9.12 9.12 9.27 T:aes128n12t8silcv2 10.62 10.65 10.73 T:norx3241v1 10.59 10.72 10.80 T:deoxyseq128128v1 10.74 10.79 10.88 T:norx3241v3 10.74 10.87 11.06 T:norx3241v2 10.75 10.95 11.32 T:morus1280128v1 11.00 11.08 11.16 T:aes256otrcv3 11.22 11.24 11.34 T:norx6441v1 11.66 11.74 11.80 T:deoxysii256v141 11.84 11.91 12.05 T:norx6441v2 11.90 11.98 12.12 T:norx6441v3 12.90 12.96 13.33 T:ascon96v1 12.91 12.96 13.04 T:deoxyseq256128v1 12.98 13.13 13.56 T:deoxysii128v141 13.21 13.43 13.61 T:ascon128av11 13.40 13.45 13.68 ascon128av12 14.71 14.73 14.73 T:aesjambuv1 15.83 15.88 16.01 T:norx3261v2 15.74 15.89 16.09 T:norx3261v3 16.45 16.65 16.72 T:norx6461v1 16.79 16.79 17.03 T:ascon128v11 16.79 16.85 16.98 T:ascon128v1 16.96 16.96 17.12 T:norx3261v1 17.16 17.17 17.48 ascon128v12 17.16 17.21 17.29 T:norx6461v2 17.30 17.43 17.52 T:norx6461v3 18.81 19.02 19.20 T:lakekeyakv1 21.55 21.76 22.02 T:lakekeyakv2 22.56 22.65 22.88 T:riverkeyakv2 23.84 23.91 24.05 T:twine80n6t4clocv2 24.23 24.25 24.34 T:twine80n6t4clocv3 27.05 27.15 27.37 T:aes128n8clocv1 27.09 27.25 27.68 T:aes128n12clocv1 26.91 27.26 27.57 T:aes128otrsv1 27.20 27.34 27.50 T:aes128otrsv2 28.89 29.05 29.27 T:aes128otrpv2 30.16 30.27 30.35 T:aes128otrpv1 32.08 32.34 32.55 T:aes128n8silcv1 32.40 32.69 33.03 T:aes128n12silcv1 34.30 34.42 34.79 T:aes256otrsv1 34.74 34.84 35.10 T:aes256otrsv2 36.06 36.34 36.90 T:aes128gcmv1 36.27 36.39 36.62 T:aes256otrpv2 36.48 36.53 36.69 T:seakeyakv2 36.35 36.62 36.83 T:aes256otrpv1 36.55 37.02 39.48 T:aes256gcmv1 42.34 42.41 42.57 T:norx6444v2 42.73 42.88 43.13 T:norx6444v3 44.05 44.23 44.45 T:ketjeminorv2 49.23 49.33 49.46 T:norx6444v1 51.65 51.84 52.29 T:ketjesrv1 59.05 59.29 59.60 T:oceankeyakv2 60.74 61.00 61.38 T:ketjesrv2 67.12 67.39 67.71 T:riverkeyakv1 70.28 71.10 71.59 T:ketjemajorv2 81.55 81.68 82.04 T:proest256otrv1 91.84 92.58 93.41 T:ketjejrv1 93.73 93.87 94.07 T:present80n6t4silcv3 94.96 95.16 95.67 T:deoxysneq128128v13 123.14 123.48 124.57 T:twine80n6clocv1 124.98 125.48 127.91 T:proest128otrv1 135.40 135.66 135.85 T:aezv1 140.19 140.30 140.56 T:led80n6t4silcv3 146.56 146.88 147.23 T:lunarkeyakv2 149.25 149.68 150.23 T:deoxysneq256128v13 150.95 151.62 152.45 T:ketjejrv2 158.49 158.80 159.40 T:deoxyseq128128v13 202.89 203.30 203.55 T:seakeyakv1 249.02 249.78 251.43 T:deoxyseq256128v13 273.58 290.72 291.98 T:oceankeyakv1 388.34 389.14 389.30 aes256gcmv1 1740.11 1744.60 1765.74 T:acorn128v3 1773.69? 1786.23? 2894.62? T:acorn128 1790.29 1797.65 1804.45 T:acorn128v2 4763.73 4764.34 4764.89 T:present80n6t4silcv2 4765.01 4765.98 4771.84 T:present80n6silcv1 6967.47 6989.32 7038.77 T:led80n6t4silcv2 6977.27 7016.80 7081.03 T:led80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 2.28 2.30 2.48 T:aegis128 2.33? 2.41? 3.17? aegis128l 2.77 2.88 3.02 T:aegis128l 3.12? 3.27? 3.62? T:tiaoxinv2 3.21? 3.27? 3.70? T:tiaoxinv1 3.14? 3.46? 3.77? aegis256 3.71 3.76 3.83 T:aezv5 3.85 3.90 4.16 T:aezv4 4.03 4.07 4.12 T:aezv3 4.72 4.83 5.05 T:morus640128v1 5.12 5.28 5.57 T:morus640128v2 6.02 6.05 6.11 T:aes128otrpv3 6.09 6.34 6.60 T:morus1280256v1 6.38 6.57 6.60 T:morus1280256v2 6.24? 6.64? 9.97? T:aeadaes128ocbtaglen128v1 6.65 6.70 7.10 T:morus1280128v2 6.83 6.84 6.91 T:aes128otrsv3 7.08? 7.56? 11.35? T:aeadaes192ocbtaglen128v1 7.55 7.57 7.59 T:aes128n12t8clocv3 7.54 7.58 7.77 T:aes128n12t8clocv2 7.57 7.76 7.88 T:aes128n8t8clocv2 7.62? 8.06? 12.23? T:aeadaes256ocbtaglen128v1 8.13 8.15 8.18 T:aes256otrpv3 8.41 8.45 8.49 T:aes128otrcv3 8.45 8.47 8.68 T:colm0v1 9.03 9.10 9.27 T:deoxysneq256128v1 9.13 9.14 9.25 T:aes128n12t8silcv2 9.13 9.40 9.45 T:aes128n12t8silcv3 9.16 9.42 9.45 T:aes128n8t8silcv2 9.50 9.54 9.59 T:deoxysneq128128v1 9.76 9.81 10.00 T:aes256otrsv3 9.84 10.13 10.38 T:deoxysi128v141 10.77 10.87 10.95 T:norx3241v1 10.88 11.01 11.43 T:morus1280128v1 10.91 11.02 11.13 T:norx3241v3 10.93 11.05 11.11 T:norx3241v2 11.30 11.36 11.50 T:norx6441v1 11.46 11.62 11.88 T:deoxysi256v141 11.75 11.81 11.88 T:norx6441v2 11.79 11.82 12.03 T:aes256otrcv3 11.91 11.96 12.02 T:norx6441v3 12.84 12.88 12.99 T:deoxysii256v141 13.04 13.04 13.52 T:ascon96v1 13.44 13.52 13.91 T:ascon128av11 13.46 13.66 13.86 ascon128av12 13.77 13.86 13.93 T:deoxysii128v141 14.15 14.18 14.63 T:deoxyseq128128v1 15.02 15.03 15.05 T:aesjambuv1 15.36 15.41 15.45 T:deoxyseq256128v1 15.98 16.10 16.30 T:norx3261v3 16.02 16.10 16.24 T:norx3261v2 16.47 16.59 16.78 T:norx6461v1 16.84 16.89 17.34 T:ascon128v11 16.87 16.95 17.11 T:norx6461v2 16.86 16.98 17.20 T:ascon128v1 17.09 17.15 17.27 T:norx3261v1 17.09 17.20 17.27 T:norx6461v3 17.27 17.36 17.57 ascon128v12 18.60 18.74 18.97 T:lakekeyakv1 21.60 21.76 22.05 T:lakekeyakv2 22.67 22.78 23.02 T:riverkeyakv2 23.77 23.95 24.30 T:twine80n6t4clocv2 24.23 24.32 24.59 T:twine80n6t4clocv3 26.91 26.96 27.16 T:aes128n12clocv1 26.96 27.11 27.40 T:aes128n8clocv1 26.72 27.15 27.41 T:aes128otrsv1 27.18 27.23 27.46 T:aes128otrsv2 28.79 28.88 28.97 T:aes128otrpv2 30.48 30.57 30.67 T:aes128otrpv1 31.99 32.41 32.89 T:aes128n12silcv1 32.11 32.54 33.09 T:aes128n8silcv1 34.62 34.78 35.13 T:aes256otrsv2 34.49 34.99 35.27 T:aes256otrsv1 35.02 35.27 36.91 T:aes128gcmv1 35.36 35.66 37.33 T:aes256gcmv1 36.31 36.42 37.02 T:aes256otrpv1 36.23 36.52 36.66 T:aes256otrpv2 36.52 36.70 36.77 T:seakeyakv2 42.68 43.02 43.48 T:norx6444v2 43.25 43.83 45.09 T:norx6444v3 43.77 44.01 44.21 T:ketjeminorv2 49.47 49.54 49.80 T:norx6444v1 52.69 52.93 53.44 T:ketjesrv1 58.48 58.62 59.06 T:oceankeyakv2 61.41 61.74 62.23 T:ketjesrv2 67.35 67.56 67.80 T:riverkeyakv1 70.86 71.20 71.59 T:ketjemajorv2 83.06 83.17 83.34 T:proest256otrv1 93.11 94.16 95.34 T:ketjejrv1 94.28 94.53 94.91 T:present80n6t4silcv3 111.70 112.13 112.57 T:deoxysneq128128v13 123.56 123.74 124.46 T:twine80n6clocv1 125.41 127.41 128.78 T:proest128otrv1 138.88 139.12 139.38 T:aezv1 140.58 140.70 141.01 T:led80n6t4silcv3 146.86 146.97 147.45 T:lunarkeyakv2 149.35 150.80 151.59 T:ketjejrv2 158.45 158.84 159.41 T:deoxyseq128128v13 168.09 168.70 169.12 T:deoxysneq256128v13 202.84 203.34 203.53 T:seakeyakv1 249.39 250.74 251.68 T:deoxyseq256128v13 272.81 290.77 292.38 T:oceankeyakv1 388.74 388.88 389.30 aes256gcmv1 1730.18 1749.22 1768.91 T:acorn128v3 1770.60 1775.11 1790.14 T:acorn128v2 1771.97? 1782.95? 2890.42? T:acorn128 4763.63 4764.16 4765.16 T:present80n6t4silcv2 4764.25 4764.41 4765.61 T:present80n6silcv1 6885.60 6909.21 6942.37 T:led80n6t4silcv2 6916.79 6938.66 6955.79 T:led80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 2.27 2.30 2.37 T:aegis128 2.30? 2.49? 2.80? aegis128l 2.77 2.84 3.02 T:aegis128l 2.91? 2.95? 3.26? T:aezv5 2.99 3.02 3.07 T:aezv4 3.20 3.21 3.23 T:aezv3 3.09? 3.23? 3.64? T:tiaoxinv2 3.12? 3.27? 3.65? T:tiaoxinv1 3.08? 3.31? 3.46? aegis256 4.73 4.77 4.84 T:morus640128v1 5.07 5.09 5.16 T:morus640128v2 6.01 6.02 6.05 T:morus1280256v1 6.03 6.06 6.11 T:aes128otrpv3 6.16? 6.20? 7.09? T:aeadaes128ocbtaglen128v1 6.38 6.41 6.44 T:morus1280256v2 6.62 6.63 6.78 T:morus1280128v2 6.82 6.84 6.90 T:aes128otrsv3 7.49 7.55 7.78 T:aes128n12t8clocv3 7.58 7.63 8.04 T:aeadaes256ocbtaglen128v1 7.09? 7.64? 12.36? T:aeadaes192ocbtaglen128v1 7.49 7.65 7.87 T:aes128n8t8clocv2 7.49 7.74 7.89 T:aes128n12t8clocv2 8.13 8.17 8.19 T:aes256otrpv3 8.41 8.46 8.48 T:aes128otrcv3 8.49 8.55 8.68 T:colm0v1 8.88 8.95 9.23 T:deoxysneq256128v1 9.07 9.17 9.41 T:aes128n12t8silcv2 9.16 9.30 9.51 T:deoxysneq128128v1 9.06 9.34 9.38 T:aes128n12t8silcv3 9.07 9.35 9.39 T:aes128n8t8silcv2 9.77 9.83 9.95 T:aes256otrsv3 9.80 10.28 10.52 T:deoxysi128v141 10.75 10.82 10.91 T:norx3241v1 10.70 10.92 11.09 T:morus1280128v1 10.88 10.92 11.09 T:norx3241v2 10.99 11.08 11.12 T:norx3241v3 11.31 11.35 11.38 T:norx6441v1 11.28 11.39 11.57 T:deoxysi256v141 11.77 11.78 11.83 T:aes256otrcv3 11.77 11.87 11.93 T:norx6441v2 11.91 11.99 12.10 T:norx6441v3 12.85 12.91 12.97 T:deoxysii256v141 12.91 12.96 13.44 T:ascon96v1 13.36 13.45 13.58 T:ascon128av11 13.38 13.50 13.66 ascon128av12 13.70 13.74 13.94 T:deoxysii128v141 14.17 14.22 14.39 T:deoxyseq128128v1 15.02 15.03 15.05 T:aesjambuv1 15.42 15.45 15.74 T:deoxyseq256128v1 16.02 16.02 16.09 T:norx3261v2 16.03 16.11 16.23 T:norx3261v3 16.48 16.55 16.75 T:norx6461v1 16.66 16.81 17.09 T:ascon128v11 16.73 16.94 17.40 T:ascon128v1 16.95 17.05 17.11 T:norx6461v2 17.12 17.18 17.27 T:norx6461v3 17.17 17.20 17.23 T:norx3261v1 17.22 17.31 17.45 ascon128v12 18.69 19.00 19.31 T:lakekeyakv1 21.64 21.68 22.05 T:lakekeyakv2 22.69 22.73 23.09 T:riverkeyakv2 23.86 24.08 24.30 T:twine80n6t4clocv2 24.16 24.18 24.59 T:twine80n6t4clocv3 26.87 26.92 27.14 T:aes128n8clocv1 26.83 26.93 27.35 T:aes128n12clocv1 27.04 27.29 27.59 T:aes128otrsv1 27.30 27.35 27.64 T:aes128otrsv2 28.89 29.04 29.22 T:aes128otrpv2 30.53 30.70 30.91 T:aes128otrpv1 31.95 32.19 32.52 T:aes128n12silcv1 32.38 32.52 32.72 T:aes128n8silcv1 34.58 34.92 35.50 T:aes256otrsv1 34.81 35.08 35.19 T:aes256otrsv2 35.12 35.32 36.07 T:aes128gcmv1 35.23 35.54 36.63 T:aes256gcmv1 36.16 36.39 36.60 T:aes256otrpv1 36.35 36.42 36.59 T:aes256otrpv2 36.57 36.62 36.77 T:seakeyakv2 42.73 42.90 43.15 T:norx6444v2 43.32 43.63 45.00 T:norx6444v3 43.80 44.13 44.30 T:ketjeminorv2 49.42 49.62 49.77 T:norx6444v1 52.88 52.96 53.42 T:ketjesrv1 58.62 58.65 58.87 T:oceankeyakv2 61.16 61.36 61.77 T:ketjesrv2 67.25 67.45 67.66 T:riverkeyakv1 71.14 71.42 72.23 T:ketjemajorv2 80.05 80.19 80.33 T:proest256otrv1 93.19 93.48 94.90 T:ketjejrv1 94.15 94.42 94.54 T:present80n6t4silcv3 111.70 111.92 112.59 T:deoxysneq128128v13 123.28 123.48 124.40 T:twine80n6clocv1 124.23 124.67 125.76 T:proest128otrv1 138.94 139.09 139.32 T:aezv1 140.38 140.53 140.96 T:led80n6t4silcv3 146.84 147.06 147.41 T:lunarkeyakv2 149.97 150.64 151.42 T:ketjejrv2 158.41 158.63 158.96 T:deoxyseq128128v13 168.51 168.88 169.17 T:deoxysneq256128v13 203.04 203.63 204.05 T:seakeyakv1 249.46 250.34 251.78 T:deoxyseq256128v13 273.45 290.80 292.55 T:oceankeyakv1 382.98 383.41 384.13 aes256gcmv1 1730.26 1730.73 1762.69 T:acorn128v3 1770.68 1775.72 1790.05 T:acorn128v2 1770.88? 1782.48? 2890.34? T:acorn128 4763.65 4764.03 4764.29 T:present80n6t4silcv2 4764.05 4764.53 4765.07 T:present80n6silcv1 6877.09 6913.66 6941.82 T:led80n6t4silcv2 6893.28 6922.29 6939.31 T:led80n6silcv1