VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20240716

[Page version: 20240726 23:46:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.20? 0.22? 0.23? T:tiaoxinv1 0.22? 0.23? 0.25? T:tiaoxinv2 0.24 0.25 0.26 T:aegis128l 0.25 0.26 0.27 aegis128l 0.39 0.42 0.42 aegis256 0.44? 0.49? 0.49? T:aegis128 0.60 0.62 0.64 T:aes128otrpv3 0.61 0.62 0.63 T:aezv3 0.62 0.62 0.64 T:aes128otrcv3 0.63 0.63 0.64 T:morus1280128v1 0.63 0.63 0.66 T:aezv5 0.63 0.64 0.64 T:aezv4 0.63 0.64 0.64 T:morus1280128v2 0.50? 0.64? 0.73? T:aeadaes128ocbtaglen128v1 0.63 0.64 0.65 T:morus1280256v1 0.63 0.64 0.65 T:morus1280256v2 0.65 0.66 0.68 T:aes128otrsv3 0.66 0.68 0.71 T:aes128gcmv1 -3.37? 0.76? 0.82? T:aeadaes192ocbtaglen128v1 0.85 0.86 0.88 T:aes256otrcv3 0.86 0.87 0.88 T:deoxysneq128128v1 0.85 0.88 0.89 T:deoxysi128v141 0.87 0.88 0.91 T:aes256otrpv3 0.81? 0.89? 0.91? T:aeadaes256ocbtaglen128v1 0.89 0.89 0.91 T:aes256otrsv3 0.87? 0.92? 1.13? T:aes256gcmv1 0.99 0.99 1.00 T:deoxysneq256128v1 0.98 1.00 1.01 T:deoxysi256v141 1.02 1.04 1.06 T:morus640128v2 1.03 1.04 1.06 T:morus640128v1 1.17 1.19 1.21 T:norx6444v3 1.63 1.64 1.65 T:colm0v1 1.73 1.75 1.78 T:deoxysii128v141 1.81 1.83 1.84 T:deoxyseq128128v1 1.96 2.01 2.01 T:deoxysii256v141 2.03 2.05 2.06 T:deoxyseq256128v1 2.10 2.10 2.11 T:norx6441v2 2.09 2.11 2.14 T:norx6441v3 1.98 2.12 2.18 T:lunarkeyakv2 2.48 2.50 2.52 T:norx6441v1 2.77 2.80 2.84 T:seakeyakv2 2.83 2.83 2.83 T:aes128n12t8silcv2 2.83 2.83 2.84 T:aes128n12t8silcv3 2.83 2.83 2.84 T:aes128n8t8silcv2 2.83 2.86 2.86 T:aes128n12t8clocv3 2.83 2.86 2.86 T:aes128n12t8clocv2 2.85 2.86 2.86 T:aes128n8t8clocv2 2.81 2.87 2.92 T:oceankeyakv2 3.17 3.20 3.22 T:norx6461v2 3.18 3.20 3.22 T:norx6461v3 3.49 3.51 3.55 T:norx6444v2 3.76 3.77 3.78 T:norx6444v1 3.77 3.79 3.80 T:norx3241v2 3.78 3.81 3.83 T:norx3241v3 3.83 3.85 3.88 T:norx6461v1 4.16 4.21 4.22 T:lakekeyakv1 4.40 4.41 4.44 T:norx3241v1 4.37 4.42 4.45 T:lakekeyakv2 5.70 5.71 5.73 T:aesjambuv1 5.76 5.77 5.81 T:norx3261v3 5.95 5.98 5.99 T:norx3261v2 7.09 7.12 7.15 T:ascon128av11 7.10 7.13 7.17 T:ketjemajorv2 7.11 7.13 7.15 T:ascon96v1 7.23 7.26 7.27 T:norx3261v1 7.42 7.45 7.47 ascon128av12 9.13 9.15 9.19 T:ketjeminorv2 9.57 9.60 9.63 T:riverkeyakv2 10.49 10.54 10.57 T:ascon128v11 10.52 10.54 10.58 T:ascon128v1 10.83 10.87 11.06 ascon128v12 14.03 14.07 14.11 T:aes128otrpv2 14.06 14.09 14.19 T:aes128otrsv1 14.06 14.10 14.13 T:aes128otrpv1 14.08 14.11 14.13 T:aes128otrsv2 13.74? 14.32? 16.77? T:oceankeyakv1 15.67 15.70 15.70 T:twine80n6t4clocv2 15.93 15.97 15.98 T:twine80n6t4clocv3 17.83 17.86 17.90 T:aes256otrpv1 17.81 17.87 17.93 T:aes256otrpv2 17.88 17.90 17.97 T:aes256otrsv1 17.88 17.93 17.96 T:aes256otrsv2 18.03 18.11 18.21 T:seakeyakv1 22.75 22.81 22.86 T:aes128n8clocv1 23.17 23.19 23.32 T:aes128n12clocv1 24.18 24.20 24.25 T:proest256otrv1 24.31 24.33 24.40 T:aes128n8silcv1 25.42 25.45 25.46 T:aes128n12silcv1 30.92 30.96 31.01 T:aeadaes192ocbtaglen96v1 30.76? 30.98? 36.84? T:riverkeyakv1 34.94 35.00 35.21 T:ketjesrv1 35.29 35.35 35.37 T:ketjesrv2 57.68 57.75 58.64 T:proest128otrv1 60.60 60.64 60.69 T:ketjejrv1 76.10 76.13 76.16 T:present80n6t4silcv3 79.49 80.02 83.91 T:deoxysneq128128v13 93.44 93.49 93.55 T:ketjejrv2 104.27 104.58 104.70 T:deoxysneq256128v13 120.37 120.44 120.54 T:twine80n6clocv1 130.51 130.55 130.61 T:led80n6t4silcv3 157.01 157.10 157.32 T:deoxyseq128128v13 181.32 182.01 182.89 T:aezv1 209.44 209.73 220.52 T:deoxyseq256128v13 295.13 295.25 295.36 aes256gcmv1 280.52? 355.21? 651.88? T:acorn128v3 284.41? 355.69? 679.99? T:acorn128 353.69 363.24 365.33 T:acorn128v2 4156.16 4160.37 4166.18 T:present80n6t4silcv2 4161.26 4167.56 4208.64 T:present80n6silcv1 8443.96 8451.25 8455.16 T:led80n6silcv1 8443.95 8451.98 8457.85 T:led80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.24 0.24 0.25 T:aegis128l 0.25? 0.26? 0.30? aegis128l 0.33 0.34 0.35 T:tiaoxinv2 0.36 0.37 0.38 T:tiaoxinv1 0.45 0.45 0.46 T:aegis128 0.48 0.48 0.49 aegis256 0.58 0.61 0.64 T:aeadaes128ocbtaglen128v1 0.62 0.62 0.64 T:aezv3 0.63 0.63 0.66 T:aezv4 0.62 0.63 0.64 T:aezv5 0.64 0.65 0.66 T:morus1280256v1 0.65 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v2 0.62? 0.66? 0.71? T:aes128gcmv1 0.67 0.68 0.70 T:aes128otrsv3 0.67 0.68 0.71 T:aes128otrpv3 0.68 0.68 0.70 T:aes128otrcv3 0.62? 0.74? 0.78? T:aeadaes192ocbtaglen128v1 0.86 0.88 0.88 T:aeadaes256ocbtaglen128v1 0.82? 0.89? 0.93? T:aes256gcmv1 0.90 0.91 0.94 T:aes256otrsv3 0.91 0.92 0.93 T:aes256otrcv3 0.93 0.96 0.97 T:aes256otrpv3 1.01 1.02 1.03 T:morus640128v2 1.04 1.05 1.06 T:morus640128v1 1.16 1.17 1.18 T:deoxysi128v141 1.16 1.18 1.20 T:norx6444v3 1.21 1.21 1.22 T:deoxysneq128128v1 1.26 1.28 1.30 T:deoxysi256v141 1.29 1.30 1.31 T:deoxysneq256128v1 1.57 1.72 1.74 T:colm0v1 1.69 1.75 1.77 T:deoxysii128v141 1.98 1.99 2.01 T:deoxysii256v141 1.98 2.01 2.05 T:norx6441v3 2.05 2.07 2.10 T:norx6441v2 2.11 2.16 2.23 T:lunarkeyakv2 2.43 2.44 2.47 T:deoxyseq128128v1 2.47 2.50 2.52 T:norx6441v1 2.66 2.66 2.68 T:deoxyseq256128v1 2.77 2.79 2.83 T:aes128n12t8clocv2 2.77 2.79 2.83 T:aes128n12t8clocv3 2.77 2.79 2.82 T:aes128n8t8clocv2 2.77 2.80 2.84 T:aes128n12t8silcv2 2.77 2.80 2.84 T:aes128n8t8silcv2 2.77 2.81 2.84 T:aes128n12t8silcv3 2.82 2.86 2.88 T:seakeyakv2 2.84 2.90 2.95 T:oceankeyakv2 3.09 3.12 3.14 T:norx6461v2 3.12 3.14 3.17 T:norx6461v3 3.45 3.50 3.52 T:norx6444v2 3.68 3.69 3.72 T:norx3241v2 3.69 3.72 3.74 T:norx3241v3 3.76 3.77 3.79 T:norx6444v1 3.83 3.86 3.90 T:norx6461v1 4.24 4.28 4.31 T:lakekeyakv1 4.31 4.35 4.40 T:norx3241v1 4.43 4.48 4.60 T:lakekeyakv2 5.70 5.74 5.78 T:norx3261v3 5.82 5.84 5.87 T:norx3261v2 5.86 5.87 5.88 T:aesjambuv1 7.00 7.01 7.03 T:norx3261v1 7.15 7.18 7.20 T:ascon128av11 7.14 7.18 7.22 T:ascon96v1 7.28 7.32 7.35 ascon128av12 7.81 7.87 7.98 T:ketjemajorv2 8.88 8.92 8.95 T:ketjeminorv2 9.73 9.76 9.80 T:riverkeyakv2 10.44 10.46 10.50 T:ascon128v11 10.47 10.50 10.54 T:ascon128v1 10.96 10.98 11.01 ascon128v12 14.30 14.33 14.38 T:aes128otrsv1 14.33 14.37 14.41 T:aes128otrpv2 14.32 14.38 14.43 T:aes128otrpv1 14.34 14.39 14.43 T:aes128otrsv2 13.83? 14.44? 16.90? T:oceankeyakv1 15.66 15.68 15.69 T:twine80n6t4clocv2 15.85 15.89 15.92 T:twine80n6t4clocv3 17.98 18.01 18.08 T:aes256otrsv2 17.95 18.01 18.06 T:aes256otrsv1 17.99 18.03 18.06 T:aes256otrpv1 18.00 18.05 18.08 T:aes256otrpv2 18.18 18.23 18.29 T:seakeyakv1 22.18 22.21 22.27 T:aes128n12clocv1 23.54 23.56 23.60 T:aes128n8clocv1 23.94 24.03 24.12 T:proest256otrv1 24.10 24.13 24.18 T:aes128n8silcv1 24.89 24.94 24.97 T:aes128n12silcv1 30.84? 35.03? 36.97? T:riverkeyakv1 35.63 35.72 35.81 T:ketjesrv1 35.70 35.79 35.84 T:ketjesrv2 41.87 41.91 43.53 T:aeadaes192ocbtaglen96v1 58.74 58.81 58.85 T:proest128otrv1 61.07 61.16 61.34 T:ketjejrv1 76.59 76.64 76.66 T:present80n6t4silcv3 94.62 94.80 97.23 T:ketjejrv2 107.58 107.75 107.87 T:deoxysneq128128v13 119.37 119.50 123.01 T:twine80n6clocv1 131.13 131.22 131.28 T:led80n6t4silcv3 143.62 143.83 144.14 T:deoxysneq256128v13 157.04 157.19 157.47 T:deoxyseq128128v13 181.23 182.38 183.70 T:aezv1 209.55 210.03 213.28 T:deoxyseq256128v13 292.66 292.85 293.05 aes256gcmv1 271.52? 347.71? 652.65? T:acorn128v3 277.83? 355.31? 673.59? T:acorn128 356.50 362.82 363.26 T:acorn128v2 4157.41 4159.28 4167.41 T:present80n6t4silcv2 4154.12 4162.44 4229.69 T:present80n6silcv1 8438.92 8452.32 8462.17 T:led80n6t4silcv2 8447.46 8454.68 8458.69 T:led80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.23 0.25 0.25 T:aezv3 0.24 0.25 0.25 T:aezv4 0.25 0.25 0.26 T:aegis128l 0.25? 0.26? 0.29? T:aezv5 0.28 0.29 0.31 aegis128l 0.33? 0.34? 0.37? T:tiaoxinv2 0.36 0.37 0.39 T:tiaoxinv1 0.45 0.46 0.46 T:aegis128 0.48 0.48 0.49 aegis256 0.58 0.63 0.64 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.66 T:morus1280256v2 0.61? 0.65? 0.68? T:aes128gcmv1 0.64 0.65 0.66 T:morus1280128v2 0.65 0.65 0.66 T:morus1280128v1 0.65 0.66 0.66 T:morus1280256v1 0.67 0.67 0.67 T:aes128otrsv3 0.67 0.68 0.70 T:aes128otrpv3 0.68 0.68 0.69 T:aes128otrcv3 0.74? 0.75? 4.88? T:aeadaes192ocbtaglen128v1 -3.09? 0.88? 4.87? T:aeadaes256ocbtaglen128v1 0.84 0.89 0.91 T:aes256gcmv1 0.90 0.91 0.92 T:aes256otrsv3 0.91 0.91 0.92 T:aes256otrcv3 0.94 0.95 0.95 T:aes256otrpv3 1.01 1.02 1.03 T:morus640128v2 1.04 1.05 1.06 T:morus640128v1 1.16 1.17 1.19 T:deoxysi128v141 1.17 1.19 1.21 T:norx6444v3 1.20 1.21 1.22 T:deoxysneq128128v1 1.23 1.27 1.31 T:deoxysi256v141 1.29 1.30 1.33 T:deoxysneq256128v1 1.57 1.65 1.74 T:colm0v1 1.74 1.75 1.76 T:deoxysii128v141 1.99 2.00 2.01 T:deoxysii256v141 2.00 2.01 2.07 T:norx6441v3 2.03 2.05 2.07 T:norx6441v2 2.14 2.17 2.22 T:lunarkeyakv2 2.43 2.44 2.45 T:deoxyseq128128v1 2.42 2.46 2.50 T:norx6441v1 2.66 2.66 2.68 T:deoxyseq256128v1 2.71 2.79 2.83 T:aes128n8t8clocv2 2.77 2.79 2.83 T:aes128n12t8clocv2 2.76 2.80 2.81 T:aes128n12t8silcv3 2.79 2.80 2.83 T:aes128n12t8clocv3 2.71 2.80 2.84 T:aes128n12t8silcv2 2.70 2.81 2.84 T:aes128n8t8silcv2 2.84 2.89 2.91 T:seakeyakv2 2.90 2.94 2.97 T:oceankeyakv2 3.10 3.12 3.14 T:norx6461v2 3.11 3.14 3.16 T:norx6461v3 3.45 3.52 3.56 T:norx6444v2 3.69 3.70 3.73 T:norx3241v2 3.70 3.73 3.74 T:norx3241v3 3.79 3.81 3.83 T:norx6444v1 3.84 3.86 3.88 T:norx6461v1 4.26 4.28 4.30 T:lakekeyakv1 4.33 4.34 4.37 T:norx3241v1 4.43 4.46 4.48 T:lakekeyakv2 5.71 5.76 5.82 T:norx3261v3 5.81 5.82 5.85 T:norx3261v2 5.87 5.87 5.88 T:aesjambuv1 6.99 7.01 7.02 T:norx3261v1 7.16 7.18 7.21 T:ascon128av11 7.16 7.19 7.21 T:ascon96v1 7.31 7.32 7.34 ascon128av12 7.76 7.81 7.98 T:ketjemajorv2 8.91 8.97 9.00 T:ketjeminorv2 9.75 9.78 9.80 T:riverkeyakv2 10.45 10.48 10.50 T:ascon128v1 10.44 10.48 10.52 T:ascon128v11 10.96 10.98 11.00 ascon128v12 14.30 14.35 14.44 T:aes128otrpv2 14.32 14.38 14.62 T:aes128otrsv1 14.35 14.38 14.43 T:aes128otrpv1 14.37 14.39 14.44 T:aes128otrsv2 13.87? 14.48? 16.92? T:oceankeyakv1 15.65 15.67 15.68 T:twine80n6t4clocv2 15.86 15.88 15.91 T:twine80n6t4clocv3 17.97 18.03 18.11 T:aes256otrsv1 18.00 18.05 18.10 T:aes256otrsv2 18.02 18.07 18.10 T:aes256otrpv2 18.02 18.07 18.12 T:aes256otrpv1 18.16 18.24 18.31 T:seakeyakv1 22.17 22.23 22.37 T:aes128n12clocv1 23.54 23.57 23.60 T:aes128n8clocv1 24.02 24.06 24.10 T:proest256otrv1 24.11 24.16 24.20 T:aes128n8silcv1 24.90 24.92 24.96 T:aes128n12silcv1 30.79? 31.04? 36.92? T:riverkeyakv1 35.63 35.68 35.87 T:ketjesrv1 35.68 35.77 35.83 T:ketjesrv2 41.72 41.84 41.90 T:aeadaes192ocbtaglen96v1 58.73 58.78 58.83 T:proest128otrv1 61.11 61.18 61.24 T:ketjejrv1 76.62 76.65 76.68 T:present80n6t4silcv3 94.67 94.87 97.29 T:ketjejrv2 107.73 107.85 107.91 T:deoxysneq128128v13 119.42 119.46 119.51 T:twine80n6clocv1 131.15 131.20 131.28 T:led80n6t4silcv3 143.61 143.91 144.11 T:deoxysneq256128v13 157.09 157.24 158.84 T:deoxyseq128128v13 181.02 182.38 183.71 T:aezv1 209.74 213.26 223.64 T:deoxyseq256128v13 280.45 280.54 280.77 aes256gcmv1 271.46? 347.73? 652.66? T:acorn128v3 277.88? 355.35? 673.54? T:acorn128 355.93 362.86 363.20 T:acorn128v2 4157.42 4160.24 4166.66 T:present80n6t4silcv2 4158.91 4163.58 4229.44 T:present80n6silcv1 8445.66 8450.12 8454.97 T:led80n6silcv1 8439.40 8452.73 8462.99 T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.19 0.20 0.21 T:tiaoxinv1 0.18? 0.21? 0.23? T:tiaoxinv2 0.23? 0.25? 0.26? T:aegis128l 0.24 0.25 0.26 aegis128l 0.39 0.39 0.41 aegis256 0.41 0.43 0.44 T:aezv5 0.43 0.44 0.47 T:aezv4 0.43 0.44 0.45 T:aezv3 0.45 0.46 0.48 T:aegis128 0.51 0.52 0.53 T:aes128gcmv1 0.61 0.61 0.62 T:morus1280256v1 0.61 0.61 0.62 T:morus1280128v2 0.61 0.62 0.62 T:morus1280256v2 0.61 0.62 0.63 T:morus1280128v1 0.50? 0.63? 0.71? T:aeadaes128ocbtaglen128v1 0.62? 0.64? 0.81? T:aes256gcmv1 0.64 0.64 0.65 T:aes128otrpv3 0.65 0.65 0.66 T:aes128otrcv3 0.65? 0.75? 0.81? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.85 0.87 0.88 T:deoxysi128v141 -1.11? 0.88? 3.18? T:aeadaes256ocbtaglen128v1 0.87 0.88 0.89 T:aes256otrpv3 0.88 0.89 0.90 T:aes256otrcv3 0.97 1.00 1.01 T:deoxysi256v141 0.99 1.00 1.02 T:deoxysneq256128v1 0.99 1.00 1.01 T:morus640128v1 1.00 1.00 1.01 T:morus640128v2 1.13 1.13 1.15 T:colm0v1 1.28 1.31 1.34 T:deoxysii128v141 1.37 1.38 1.40 T:deoxyseq128128v1 1.49 1.51 1.52 T:deoxysii256v141 1.52 1.53 1.54 T:deoxyseq256128v1 1.65 1.66 1.68 T:norx6444v3 1.66 1.67 1.67 T:aes128otrsv3 2.10 2.10 2.11 T:norx6441v2 2.11 2.13 2.15 T:norx6441v3 2.29 2.29 2.32 T:aes256otrsv3 2.34 2.35 2.39 T:seakeyakv2 2.35 2.40 2.44 T:oceankeyakv2 2.49 2.50 2.52 T:norx6441v1 2.76 2.76 2.76 T:aes128n12t8silcv3 2.76 2.76 2.79 T:aes128n8t8silcv2 2.78 2.78 2.79 T:aes128n8t8clocv2 2.78 2.79 2.79 T:aes128n12t8clocv3 2.76 2.79 2.80 T:aes128n12t8silcv2 2.79 2.80 2.80 T:aes128n12t8clocv2 2.86 2.91 2.95 T:lunarkeyakv2 3.22 3.25 3.27 T:norx6461v3 3.24 3.25 3.27 T:norx6461v2 3.42 3.45 3.47 T:norx6444v2 3.75 3.75 3.76 T:norx6444v1 3.79 3.80 3.82 T:norx3241v2 3.81 3.82 3.84 T:norx3241v3 3.82 3.83 3.85 T:norx6461v1 3.92 3.94 3.97 T:lakekeyakv1 3.94 3.96 3.98 T:lakekeyakv2 4.42 4.42 4.45 T:norx3241v1 5.72 5.73 5.76 T:aesjambuv1 5.83 5.84 5.85 T:norx3261v2 5.83 5.86 5.88 T:norx3261v3 6.13 6.14 6.17 T:ketjemajorv2 6.87 6.89 6.91 T:riverkeyakv2 7.06 7.09 7.11 T:ascon96v1 7.08 7.11 7.12 T:ascon128av11 7.24 7.26 7.26 T:norx3261v1 7.42 7.44 7.47 ascon128av12 8.04 8.06 8.09 T:ketjeminorv2 10.50 10.53 10.56 T:ascon128v1 10.50 10.53 10.55 T:ascon128v11 10.84 10.87 10.89 ascon128v12 12.88 12.91 12.94 T:aes128otrsv1 12.92 12.94 12.97 T:aes128otrsv2 14.56 14.59 14.63 T:aes128otrpv1 14.56 14.63 15.80 T:aes128otrpv2 15.39 15.41 15.43 T:twine80n6t4clocv2 15.67 15.69 15.70 T:twine80n6t4clocv3 14.04? 16.43? 16.50? T:oceankeyakv1 16.61 16.64 16.67 T:aes256otrsv1 16.63 16.68 18.33 T:aes256otrsv2 17.21 17.23 17.26 T:aes128n8clocv1 17.62 17.65 17.70 T:aes128n12clocv1 18.00 18.13 19.73 T:seakeyakv1 18.21 18.24 18.28 T:aes128n8silcv1 18.32 18.35 18.38 T:aes256otrpv2 18.36 18.42 18.45 T:aes256otrpv1 18.90 18.93 19.39 T:aes128n12silcv1 24.31 24.37 24.38 T:proest256otrv1 29.22 29.39 32.29 T:riverkeyakv1 30.84 30.90 30.94 T:aeadaes192ocbtaglen96v1 32.09 32.15 33.02 T:ketjesrv1 33.13 33.15 33.20 T:ketjesrv2 56.58 56.63 56.71 T:ketjejrv1 58.25 58.41 60.49 T:proest128otrv1 75.84 75.86 75.90 T:present80n6t4silcv3 79.93 80.28 85.43 T:deoxysneq128128v13 89.96 90.00 91.76 T:twine80n6clocv1 91.61 91.63 91.78 T:ketjejrv2 104.20 104.37 104.72 T:deoxysneq256128v13 117.67 117.83 117.92 T:deoxyseq128128v13 119.75 120.67 120.89 T:aezv1 130.30 130.34 130.36 T:led80n6t4silcv3 156.76 156.88 157.04 T:deoxyseq256128v13 288.04 295.15 303.50 aes256gcmv1 305.60? 355.10? 657.14? T:acorn128 309.60? 355.65? 634.81? T:acorn128v3 353.60 362.73 364.12 T:acorn128v2 3121.70 3122.90 3124.27 T:present80n6t4silcv2 3122.28 3123.78 3152.43 T:present80n6silcv1 6332.39 6335.72 6337.75 T:led80n6t4silcv2 6328.61 6528.72 6548.10 T:led80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.25 0.25 0.26 aegis128l 0.25 0.25 0.25 T:aegis128l 0.25 0.26 0.27 T:tiaoxinv2 0.27 0.28 0.28 T:tiaoxinv1 0.43 0.43 0.45 T:aezv5 0.41 0.44 0.44 T:aezv3 0.43 0.44 0.45 T:aezv4 0.44 0.44 0.45 aegis256 0.45 0.46 0.46 T:aegis128 0.47 0.50 0.51 T:aes128gcmv1 0.62 0.62 0.63 T:morus1280256v2 0.52? 0.62? 0.67? T:aeadaes128ocbtaglen128v1 0.61 0.62 0.63 T:morus1280256v1 0.60 0.62 0.65 T:aes256gcmv1 0.62 0.62 0.63 T:morus1280128v1 0.62 0.63 0.63 T:morus1280128v2 0.66 0.67 0.68 T:aes128otrpv3 0.68 0.68 0.70 T:aes128otrcv3 -1.31? 0.75? 2.77? T:aeadaes192ocbtaglen128v1 -1.13? 0.88? 3.03? T:aeadaes256ocbtaglen128v1 0.90 0.92 0.93 T:aes256otrpv3 0.93 0.93 0.95 T:aes256otrcv3 0.98 0.99 1.00 T:morus640128v2 1.01 1.02 1.02 T:morus640128v1 1.01 1.02 1.03 T:deoxysi128v141 1.03 1.04 1.05 T:deoxysneq128128v1 1.12 1.13 1.15 T:deoxysi256v141 1.13 1.14 1.15 T:deoxysneq256128v1 1.13 1.17 1.23 T:colm0v1 1.29 1.31 1.33 T:deoxysii128v141 1.48 1.50 1.52 T:deoxysii256v141 1.64 1.66 1.68 T:norx6444v3 1.68 1.68 1.68 T:aes128otrsv3 1.67 1.69 1.69 T:deoxyseq128128v1 1.84 1.84 1.85 T:deoxyseq256128v1 2.04 2.06 2.08 T:norx6441v2 2.04 2.07 2.10 T:norx6441v3 2.29 2.30 2.30 T:aes256otrsv3 2.35 2.38 2.43 T:seakeyakv2 2.40 2.43 2.50 T:oceankeyakv2 2.48 2.49 2.52 T:norx6441v1 2.71 2.73 2.76 T:aes128n12t8silcv2 2.71 2.73 2.76 T:aes128n12t8silcv3 2.73 2.75 2.78 T:aes128n8t8silcv2 2.75 2.76 2.78 T:aes128n12t8clocv3 2.75 2.76 2.79 T:aes128n8t8clocv2 2.74 2.77 2.78 T:aes128n12t8clocv2 2.90 2.94 3.00 T:lunarkeyakv2 3.17 3.18 3.47 T:norx6461v3 3.17 3.19 3.21 T:norx6461v2 3.40 3.43 3.44 T:norx6444v2 3.74 3.75 3.76 T:norx6444v1 3.75 3.77 3.79 T:norx3241v2 3.78 3.80 3.81 T:norx3241v3 3.79 3.83 3.85 T:norx6461v1 3.96 3.99 4.01 T:lakekeyakv2 3.98 3.99 4.01 T:lakekeyakv1 4.43 4.44 4.47 T:norx3241v1 5.75 5.77 5.80 T:norx3261v2 5.81? 5.81? 6.61? T:aesjambuv1 5.81 5.84 5.86 T:norx3261v3 6.48 6.52 6.58 T:ketjemajorv2 6.97 6.98 7.00 T:riverkeyakv2 7.11 7.13 7.16 T:ascon128av11 7.10 7.13 7.15 T:ascon96v1 7.12 7.14 7.16 T:norx3261v1 7.37 7.39 7.41 ascon128av12 7.90 7.93 7.95 T:ketjeminorv2 10.52 10.55 10.58 T:ascon128v1 10.53 10.56 10.58 T:ascon128v11 10.94 10.98 11.01 ascon128v12 13.02 13.04 13.07 T:aes128otrsv1 13.06 13.09 13.14 T:aes128otrsv2 14.02? 14.35? 16.47? T:oceankeyakv1 14.65 14.77 15.64 T:aes128otrpv1 14.74 14.85 15.70 T:aes128otrpv2 15.39 15.41 15.74 T:twine80n6t4clocv2 15.63 15.66 15.68 T:twine80n6t4clocv3 16.65 16.67 16.69 T:aes256otrsv1 16.65 16.68 16.71 T:aes256otrsv2 17.17 17.23 17.89 T:aes128n12clocv1 17.63 17.66 17.67 T:aes128n8clocv1 18.12 18.14 18.17 T:aes128n8silcv1 18.38 18.41 18.43 T:aes256otrpv2 18.38 18.43 18.45 T:aes256otrpv1 18.64 18.68 19.61 T:aes128n12silcv1 18.08? 18.93? 21.48? T:seakeyakv1 24.22 24.28 24.33 T:proest256otrv1 29.30 29.38 32.37 T:riverkeyakv1 32.46 32.54 34.37 T:ketjesrv1 33.34 33.38 33.41 T:ketjesrv2 36.31 36.34 36.40 T:aeadaes192ocbtaglen96v1 56.86 56.89 57.00 T:ketjejrv1 58.77 58.92 60.60 T:proest128otrv1 76.10 76.13 76.15 T:present80n6t4silcv3 89.48 89.81 95.44 T:twine80n6clocv1 92.23 92.35 94.21 T:ketjejrv2 94.08 94.15 94.22 T:deoxysneq128128v13 117.71 117.82 117.97 T:deoxyseq128128v13 120.67 120.80 121.99 T:aezv1 124.04 124.11 124.50 T:deoxysneq256128v13 130.63 130.67 130.73 T:led80n6t4silcv3 156.83 156.89 157.01 T:deoxyseq256128v13 287.34 290.88 302.07 aes256gcmv1 305.62? 354.25? 635.04? T:acorn128v3 308.25? 354.87? 653.72? T:acorn128 359.62 362.45 362.68 T:acorn128v2 3121.33 3122.52 3123.39 T:present80n6t4silcv2 3121.19 3122.57 3160.22 T:present80n6silcv1 6330.82 6335.59 6522.75 T:led80n6silcv1 6334.38 6337.54 6339.62 T:led80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.23 0.24 0.25 T:aezv3 0.24 0.25 0.25 T:aezv4 0.24? 0.25? 0.28? T:aezv5 0.25 0.25 0.25 T:aegis128l 0.25 0.26 0.26 T:tiaoxinv2 0.25 0.27 0.27 aegis128l 0.27 0.28 0.29 T:tiaoxinv1 0.44 0.44 0.45 aegis256 0.45 0.46 0.46 T:aegis128 0.48 0.50 0.52 T:aes128gcmv1 0.61 0.62 0.62 T:morus1280256v1 0.62 0.62 0.63 T:morus1280256v2 0.62 0.62 0.63 T:morus1280128v2 0.62 0.62 0.63 T:morus1280128v1 0.61 0.63 0.64 T:aeadaes128ocbtaglen128v1 0.61? 0.63? 0.77? T:aes256gcmv1 0.67 0.67 0.68 T:aes128otrpv3 0.68 0.69 0.70 T:aes128otrcv3 0.74 0.75 0.76 T:aeadaes192ocbtaglen128v1 0.87 0.87 0.88 T:aeadaes256ocbtaglen128v1 0.91 0.91 0.92 T:aes256otrpv3 0.93 0.94 0.95 T:aes256otrcv3 0.98 0.99 0.99 T:morus640128v2 1.00 1.01 1.02 T:morus640128v1 1.02 1.02 1.03 T:deoxysi128v141 1.03 1.04 1.04 T:deoxysneq128128v1 1.13 1.14 1.14 T:deoxysi256v141 1.10 1.14 1.21 T:colm0v1 1.14 1.14 1.15 T:deoxysneq256128v1 1.30 1.31 1.32 T:deoxysii128v141 1.50 1.50 1.51 T:deoxysii256v141 1.65 1.65 1.66 T:norx6444v3 1.68 1.68 1.68 T:aes128otrsv3 1.68 1.69 1.69 T:deoxyseq128128v1 1.84 1.84 1.85 T:deoxyseq256128v1 2.05 2.06 2.08 T:norx6441v3 2.04 2.06 2.09 T:norx6441v2 2.29 2.29 2.30 T:aes256otrsv3 2.37 2.39 2.41 T:seakeyakv2 2.41 2.42 2.45 T:oceankeyakv2 2.48 2.50 2.52 T:norx6441v1 2.68 2.71 2.74 T:aes128n12t8silcv2 2.71 2.73 2.75 T:aes128n12t8silcv3 2.70 2.74 2.77 T:aes128n8t8silcv2 2.72 2.76 2.78 T:aes128n8t8clocv2 2.75 2.76 2.76 T:aes128n12t8clocv3 2.74 2.77 2.79 T:aes128n12t8clocv2 2.91 2.93 2.95 T:lunarkeyakv2 3.17 3.19 3.21 T:norx6461v2 3.17 3.20 3.22 T:norx6461v3 3.41 3.45 3.46 T:norx6444v2 3.75 3.77 3.78 T:norx6444v1 3.76 3.77 3.79 T:norx3241v2 3.78 3.79 3.82 T:norx3241v3 3.75 3.81 3.84 T:norx6461v1 3.97 3.99 4.00 T:lakekeyakv1 3.98 4.01 4.02 T:lakekeyakv2 4.41 4.43 4.47 T:norx3241v1 5.76 5.79 5.80 T:norx3261v2 5.81 5.81 5.81 T:aesjambuv1 5.81 5.84 5.87 T:norx3261v3 6.48 6.52 6.54 T:ketjemajorv2 6.97 6.98 7.00 T:riverkeyakv2 7.10 7.12 7.13 T:ascon96v1 7.11 7.13 7.15 T:ascon128av11 7.13 7.14 7.15 T:norx3261v1 7.38 7.40 7.41 ascon128av12 7.91 7.94 7.97 T:ketjeminorv2 10.53 10.56 10.57 T:ascon128v11 10.54 10.56 10.57 T:ascon128v1 10.97 10.98 10.99 ascon128v12 13.02 13.06 13.09 T:aes128otrsv1 13.07 13.10 13.16 T:aes128otrsv2 14.69 14.76 14.84 T:aes128otrpv1 14.73? 14.89? 16.48? T:aes128otrpv2 15.38 15.39 15.41 T:twine80n6t4clocv2 15.65 15.66 15.68 T:twine80n6t4clocv3 14.05? 16.48? 16.90? T:oceankeyakv1 16.66 16.67 16.70 T:aes256otrsv1 16.67 16.70 16.74 T:aes256otrsv2 17.17 17.21 17.24 T:aes128n12clocv1 17.64 17.65 17.67 T:aes128n8clocv1 18.15 18.21 18.55 T:aes128n8silcv1 18.41 18.43 18.48 T:aes256otrpv1 18.41 18.43 18.46 T:aes256otrpv2 18.14? 18.66? 20.81? T:seakeyakv1 18.63 18.66 19.07 T:aes128n12silcv1 24.26 24.29 24.32 T:proest256otrv1 29.29 29.41 32.35 T:riverkeyakv1 32.45 32.48 32.56 T:ketjesrv1 33.32 33.35 33.40 T:ketjesrv2 36.30 36.34 36.38 T:aeadaes192ocbtaglen96v1 56.92 56.96 56.98 T:ketjejrv1 58.77 58.96 60.59 T:proest128otrv1 76.11 76.13 76.18 T:present80n6t4silcv3 89.46 89.54 95.56 T:twine80n6clocv1 92.22 92.39 94.10 T:ketjejrv2 94.09 94.17 94.26 T:deoxysneq128128v13 117.73 117.83 117.96 T:deoxyseq128128v13 119.93 120.71 121.90 T:aezv1 124.15 124.33 125.91 T:deoxysneq256128v13 130.64 130.70 130.76 T:led80n6t4silcv3 156.81 157.00 157.14 T:deoxyseq256128v13 281.06 288.03 298.80 aes256gcmv1 305.61? 352.21? 635.05? T:acorn128v3 304.05? 354.79? 653.74? T:acorn128 359.41 362.47 362.71 T:acorn128v2 3120.24 3121.47 3123.78 T:present80n6t4silcv2 3121.43 3124.16 3160.72 T:present80n6silcv1 6329.81 6334.21 6337.53 T:led80n6silcv1 6335.78 6337.72 6524.71 T:led80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.17? 0.19? 0.21? T:tiaoxinv2 0.18? 0.19? 0.20? T:tiaoxinv1 0.22? 0.25? 0.26? T:aezv5 0.23? 0.25? 0.26? T:aezv4 0.25 0.25 0.25 T:aegis128l 0.24 0.25 0.26 aegis128l 0.23? 0.26? 0.27? T:aezv3 0.33? 0.35? 0.37? T:aes128gcmv1 0.33? 0.36? 0.39? T:aes256gcmv1 0.40 0.41 0.41 aegis256 0.46 0.46 0.47 T:aegis128 0.59 0.60 0.61 T:morus1280128v2 0.58 0.60 0.61 T:morus1280128v1 0.59 0.60 0.61 T:morus1280256v1 0.59 0.60 0.61 T:morus1280256v2 0.53? 0.62? 0.70? T:aeadaes128ocbtaglen128v1 0.60 0.64 0.65 T:colm0v1 0.63 0.65 0.66 T:aes128otrpv3 0.68 0.69 0.69 T:aes128otrcv3 0.55? 0.76? 5.00? T:aeadaes192ocbtaglen128v1 0.87 0.87 0.88 T:deoxysneq128128v1 0.85 0.87 0.88 T:deoxysii128v141 0.86 0.87 0.88 T:deoxysi128v141 -3.19? 0.88? 4.87? T:aeadaes256ocbtaglen128v1 0.84 0.89 0.92 T:aes256otrpv3 0.91 0.92 0.94 T:aes256otrcv3 0.91 0.92 0.93 T:deoxyseq128128v1 0.93 0.95 0.96 T:morus640128v1 0.94 0.95 0.97 T:morus640128v2 0.98 1.00 1.02 T:deoxysi256v141 0.97 1.00 1.01 T:deoxysneq256128v1 0.98 1.00 1.02 T:deoxysii256v141 1.01 1.02 1.03 T:deoxyseq256128v1 1.82 1.86 1.92 T:oceankeyakv2 1.79? 1.90? 1.99? T:lunarkeyakv2 2.09 2.11 2.12 T:norx6441v2 2.11 2.12 2.16 T:norx6441v3 2.11 2.13 2.15 T:norx6444v3 2.26 2.29 2.33 T:seakeyakv2 2.49 2.50 2.53 T:norx6441v1 2.68 2.69 2.69 T:aes128otrsv3 2.68 2.69 2.69 T:aes128n12t8silcv2 2.68 2.69 2.75 T:aes128n12t8silcv3 2.72 2.73 2.75 T:aes128n8t8clocv2 2.73 2.74 2.74 T:aes128n12t8clocv3 2.73 2.74 2.75 T:aes128n12t8clocv2 2.75 2.75 2.77 T:aes128n8t8silcv2 3.26 3.27 3.30 T:norx6461v3 3.29 3.31 3.34 T:norx6461v2 3.33 3.42 3.46 T:norx6444v2 3.62 3.67 3.69 T:lakekeyakv2 3.68 3.68 3.69 T:aes256otrsv3 3.72 3.73 3.75 T:norx6444v1 3.71 3.77 3.80 T:lakekeyakv1 3.80 3.83 3.87 T:norx3241v3 3.81 3.83 3.85 T:norx3241v2 3.84 3.85 3.91 T:norx6461v1 4.44 4.45 4.47 T:norx3241v1 5.16 5.21 5.24 T:ketjemajorv2 5.68 5.71 5.73 T:norx3261v2 5.74 5.75 5.76 T:aesjambuv1 5.90 5.93 5.95 T:norx3261v3 6.39 6.45 6.49 T:riverkeyakv2 7.03 7.06 7.09 T:ascon96v1 7.06 7.08 7.10 T:ascon128av11 7.05 7.09 7.11 T:ketjeminorv2 7.22 7.24 7.26 T:norx3261v1 7.42 7.45 7.46 ascon128av12 10.49 10.51 10.54 T:ascon128v11 10.48? 10.54? 12.27? T:ascon128v1 10.88 10.91 10.93 ascon128v12 11.70 11.75 11.87 T:aes128otrsv1 11.73 11.76 11.83 T:aes128otrsv2 11.83 11.86 11.90 T:aes128n8clocv1 12.16 12.26 12.28 T:aes128n12clocv1 12.24 12.27 12.29 T:aes128n8silcv1 12.52 12.54 12.56 T:aes128n12silcv1 14.21? 14.23? 16.06? T:oceankeyakv1 15.06 15.08 15.14 T:aes128otrpv1 15.08 15.11 15.13 T:twine80n6t4clocv2 15.09 15.13 15.69 T:aes128otrpv2 15.38 15.41 15.43 T:aes256otrsv1 15.38 15.43 15.46 T:aes256otrsv2 15.48 15.49 15.51 T:twine80n6t4clocv3 17.87 17.94 18.02 T:seakeyakv1 18.81 18.83 18.86 T:aes256otrpv1 18.82 18.85 18.92 T:aes256otrpv2 24.45 24.50 24.56 T:proest256otrv1 27.68 27.74 27.81 T:riverkeyakv1 29.19 29.23 29.27 T:ketjesrv1 30.76 30.79 30.81 T:aeadaes192ocbtaglen96v1 30.97 30.99 31.00 T:ketjesrv2 52.63 52.67 52.77 T:ketjejrv1 58.22 58.31 58.80 T:aezv1 58.81 59.03 62.46 T:proest128otrv1 59.56 59.58 59.61 T:twine80n6clocv1 75.62 75.65 75.69 T:present80n6t4silcv3 78.32 78.36 78.44 T:deoxyseq128128v13 80.13 80.61 84.74 T:deoxysneq128128v13 89.80 89.85 89.88 T:ketjejrv2 104.13 104.20 104.31 T:deoxyseq256128v13 104.28 104.42 104.66 T:deoxysneq256128v13 130.08 130.12 130.16 T:led80n6t4silcv3 280.42 280.53 280.75 aes256gcmv1 269.21? 346.31? 668.99? T:acorn128v3 274.17? 354.45? 688.83? T:acorn128 351.97 362.19 364.36 T:acorn128v2 2073.79 2080.50 2086.35 T:present80n6silcv1 2080.50 2089.61 2153.27 T:present80n6t4silcv2 4220.42 4226.39 4230.56 T:led80n6silcv1 4221.61 4228.86 4339.02 T:led80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.17? 0.19? 0.20? T:tiaoxinv1 0.17? 0.20? 0.24? T:tiaoxinv2 0.24 0.24 0.25 T:aezv5 0.24 0.24 0.25 T:aezv4 0.24 0.25 0.26 T:aezv3 0.25 0.25 0.26 aegis128l 0.25 0.25 0.25 T:aegis128l 0.33? 0.36? 0.39? T:aes128gcmv1 0.34? 0.36? 0.39? T:aes256gcmv1 0.40 0.41 0.41 aegis256 0.45 0.46 0.46 T:aegis128 0.58 0.58 0.59 T:morus1280128v2 0.58 0.59 0.59 T:morus1280256v2 0.58 0.59 0.60 T:morus1280128v1 0.58 0.59 0.60 T:morus1280256v1 0.60 0.62 0.63 T:aeadaes128ocbtaglen128v1 0.63 0.64 0.67 T:colm0v1 0.65 0.65 0.66 T:aes128otrpv3 0.68 0.69 0.69 T:aes128otrcv3 -3.37? 0.73? 0.77? T:aeadaes192ocbtaglen128v1 -3.08? 0.87? 4.86? T:aeadaes256ocbtaglen128v1 0.85 0.87 0.87 T:deoxysneq128128v1 0.85 0.87 0.89 T:deoxysii128v141 0.87 0.87 0.89 T:deoxysi128v141 0.86 0.88 0.88 T:aes256otrpv3 0.91 0.92 0.93 T:aes256otrcv3 0.91 0.93 0.93 T:deoxyseq128128v1 0.94 0.96 0.97 T:morus640128v2 0.98 0.99 1.00 T:morus640128v1 0.99 1.00 1.01 T:deoxysii256v141 0.97 1.00 1.00 T:deoxysi256v141 0.97 1.00 1.03 T:deoxysneq256128v1 1.01 1.02 1.03 T:deoxyseq256128v1 1.80 1.86 1.89 T:oceankeyakv2 1.82 1.87 1.92 T:lunarkeyakv2 2.08 2.09 2.10 T:norx6441v2 2.08 2.11 2.13 T:norx6441v3 2.10 2.12 2.15 T:norx6444v3 2.27 2.30 2.33 T:seakeyakv2 2.51 2.53 2.55 T:norx6441v1 2.68 2.69 2.69 T:aes128otrsv3 2.69 2.69 2.76 T:aes128n8t8silcv2 2.71 2.72 2.73 T:aes128n8t8clocv2 2.72 2.73 2.73 T:aes128n12t8clocv3 2.68 2.76 2.76 T:aes128n12t8silcv2 2.75 2.76 2.76 T:aes128n12t8silcv3 2.76 2.77 2.78 T:aes128n12t8clocv2 3.23 3.24 3.26 T:norx6461v3 3.26 3.27 3.29 T:norx6461v2 3.32 3.34 3.38 T:norx6444v2 3.62 3.67 3.78 T:lakekeyakv2 3.68 3.69 3.69 T:aes256otrsv3 3.70 3.73 3.76 T:norx6444v1 3.72 3.77 3.79 T:lakekeyakv1 3.81 3.83 3.87 T:norx6461v1 3.85 3.87 3.89 T:norx3241v2 3.86 3.88 3.89 T:norx3241v3 4.47 4.50 4.51 T:norx3241v1 5.14 5.20 5.27 T:ketjemajorv2 5.70 5.71 5.74 T:norx3261v2 5.75 5.75 5.75 T:aesjambuv1 5.92 5.95 5.97 T:norx3261v3 6.41 6.44 6.47 T:riverkeyakv2 7.00 7.06 7.09 T:ascon96v1 7.04 7.07 7.12 T:ketjeminorv2 7.05 7.09 7.12 T:ascon128av11 7.24 7.25 7.26 T:norx3261v1 7.41 7.45 7.46 ascon128av12 10.56 10.60 10.64 T:ascon128v11 10.57? 10.63? 12.35? T:ascon128v1 10.96 10.97 11.02 ascon128v12 11.76 11.80 11.92 T:aes128otrsv1 11.80 11.84 11.86 T:aes128otrsv2 11.85 11.89 11.91 T:aes128n8clocv1 12.22 12.25 12.30 T:aes128n12clocv1 12.22 12.27 12.29 T:aes128n8silcv1 12.50 12.54 12.57 T:aes128n12silcv1 14.19? 14.28? 16.05? T:oceankeyakv1 15.08 15.10 15.14 T:twine80n6t4clocv2 15.17 15.21 15.34 T:aes128otrpv2 15.15? 15.36? 17.19? T:aes128otrpv1 15.43 15.47 15.51 T:twine80n6t4clocv3 15.44 15.48 15.52 T:aes256otrsv2 15.47 15.52 15.55 T:aes256otrsv1 17.87 17.94 18.02 T:seakeyakv1 18.88 18.92 18.96 T:aes256otrpv1 18.89 18.95 19.01 T:aes256otrpv2 24.43 24.52 24.58 T:proest256otrv1 27.71 27.74 27.77 T:riverkeyakv1 29.17 29.24 29.30 T:ketjesrv1 30.75 30.78 30.81 T:aeadaes192ocbtaglen96v1 30.91 30.98 31.07 T:ketjesrv2 52.57 52.69 52.78 T:ketjejrv1 58.31 58.44 59.14 T:aezv1 58.79 59.12 62.41 T:proest128otrv1 59.54 59.58 59.64 T:twine80n6clocv1 75.59 75.64 75.67 T:present80n6t4silcv3 78.32 78.39 78.44 T:deoxyseq128128v13 80.34 80.45 80.57 T:deoxysneq128128v13 89.77 89.94 91.16 T:ketjejrv2 103.87 104.04 104.16 T:deoxyseq256128v13 104.27 104.37 104.47 T:deoxysneq256128v13 130.07 130.14 130.19 T:led80n6t4silcv3 280.65 281.59 281.96 aes256gcmv1 269.31? 346.18? 668.98? T:acorn128v3 274.69? 354.07? 688.63? T:acorn128 361.97 362.02 362.31 T:acorn128v2 2073.56 2081.33 2086.00 T:present80n6silcv1 2077.87 2084.53 2128.74 T:present80n6t4silcv2 4225.55 4229.74 4232.48 T:led80n6silcv1 4226.70 4232.27 4354.33 T:led80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.18 0.19 0.19 T:tiaoxinv1 0.19? 0.19? 0.22? T:tiaoxinv2 0.24 0.24 0.25 T:aezv4 0.24 0.24 0.25 T:aezv5 0.24 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aegis128l 0.24? 0.25? 0.29? aegis128l 0.34? 0.35? 0.38? T:aes128gcmv1 0.35? 0.37? 0.72? T:aes256gcmv1 0.40 0.41 0.41 aegis256 0.45 0.46 0.47 T:aegis128 0.58 0.59 0.60 T:morus1280256v1 0.58 0.59 0.60 T:morus1280256v2 0.58 0.59 0.60 T:morus1280128v2 0.58 0.59 0.60 T:morus1280128v1 0.61 0.62 0.62 T:aeadaes128ocbtaglen128v1 0.65 0.65 0.65 T:aes128otrpv3 0.68 0.69 0.69 T:aes128otrcv3 0.63 0.69 0.69 T:colm0v1 0.73? 0.74? 4.76? T:aeadaes192ocbtaglen128v1 0.85 0.86 0.87 T:aeadaes256ocbtaglen128v1 0.87 0.87 0.91 T:deoxysneq128128v1 0.86 0.88 0.89 T:deoxysii128v141 0.86 0.88 0.89 T:aes256otrpv3 0.86 0.88 0.89 T:deoxysi128v141 0.91 0.92 0.93 T:aes256otrcv3 0.93 0.93 0.93 T:deoxyseq128128v1 0.94 0.95 0.96 T:morus640128v2 0.97 0.98 0.99 T:morus640128v1 0.98 1.00 1.05 T:deoxysneq256128v1 0.99 1.00 1.01 T:deoxysii256v141 0.99 1.00 1.03 T:deoxysi256v141 1.02 1.02 1.03 T:deoxyseq256128v1 1.82 1.84 1.89 T:oceankeyakv2 1.86 1.89 1.92 T:lunarkeyakv2 2.06 2.10 2.11 T:norx6441v2 2.08 2.10 2.12 T:norx6441v3 2.10 2.12 2.15 T:norx6444v3 2.28 2.29 2.32 T:seakeyakv2 2.51 2.52 2.54 T:norx6441v1 2.68 2.69 2.69 T:aes128otrsv3 2.62 2.69 2.76 T:aes128n12t8silcv3 2.65 2.72 2.73 T:aes128n12t8clocv3 2.72 2.73 2.73 T:aes128n8t8clocv2 2.68 2.75 2.76 T:aes128n12t8silcv2 2.69 2.75 2.76 T:aes128n8t8silcv2 2.65 2.77 2.79 T:aes128n12t8clocv2 3.20 3.23 3.25 T:norx6461v3 3.24 3.27 3.29 T:norx6461v2 3.34 3.35 3.39 T:norx6444v2 3.62 3.64 3.67 T:lakekeyakv2 3.68 3.69 3.69 T:aes256otrsv3 3.70 3.73 3.75 T:norx6444v1 3.73 3.77 3.79 T:lakekeyakv1 3.81 3.83 3.86 T:norx6461v1 3.83 3.85 3.89 T:norx3241v2 3.84 3.86 3.88 T:norx3241v3 4.44 4.46 4.52 T:norx3241v1 5.14 5.22 5.27 T:ketjemajorv2 5.68 5.71 5.73 T:norx3261v2 5.74 5.75 5.76 T:aesjambuv1 5.91 5.93 5.95 T:norx3261v3 6.41 6.45 6.47 T:riverkeyakv2 7.02 7.04 7.09 T:ascon96v1 7.06 7.08 7.12 T:ascon128av11 7.07 7.10 7.15 T:ketjeminorv2 7.23 7.25 7.26 T:norx3261v1 7.42 7.44 7.46 ascon128av12 10.57 10.60 10.63 T:ascon128v1 10.58 10.60 10.63 T:ascon128v11 10.94 10.97 10.99 ascon128v12 11.76 11.81 11.88 T:aes128otrsv1 11.80 11.85 11.89 T:aes128otrsv2 11.83 11.87 11.90 T:aes128n8clocv1 12.22 12.25 12.29 T:aes128n8silcv1 12.22 12.25 12.30 T:aes128n12clocv1 12.51 12.55 12.57 T:aes128n12silcv1 14.20? 14.25? 16.02? T:oceankeyakv1 15.08 15.10 15.13 T:twine80n6t4clocv2 15.15? 15.22? 17.01? T:aes128otrpv1 15.18 15.22 15.37 T:aes128otrpv2 15.45 15.46 15.50 T:twine80n6t4clocv3 15.46 15.50 15.54 T:aes256otrsv1 15.46 15.50 15.53 T:aes256otrsv2 17.85 17.92 17.98 T:seakeyakv1 18.89 18.92 18.95 T:aes256otrpv1 18.91 18.96 19.01 T:aes256otrpv2 24.43 24.47 24.52 T:proest256otrv1 27.70 27.73 27.79 T:riverkeyakv1 29.18 29.21 29.30 T:ketjesrv1 30.74 30.78 30.82 T:aeadaes192ocbtaglen96v1 30.90 30.98 31.05 T:ketjesrv2 52.60 52.65 52.69 T:ketjejrv1 58.34 58.42 59.17 T:aezv1 58.75 59.01 62.33 T:proest128otrv1 59.56 59.59 59.65 T:twine80n6clocv1 75.57 75.60 75.65 T:present80n6t4silcv3 78.29 78.33 78.44 T:deoxyseq128128v13 80.33 80.52 80.58 T:deoxysneq128128v13 89.69 89.90 91.04 T:ketjejrv2 102.22 104.00 104.09 T:deoxyseq256128v13 104.29 104.36 104.45 T:deoxysneq256128v13 130.11 130.16 130.22 T:led80n6t4silcv3 280.37 281.51 281.88 aes256gcmv1 269.70? 346.28? 668.74? T:acorn128v3 275.01? 354.10? 688.61? T:acorn128 361.98 362.04 362.26 T:acorn128v2 2073.64 2080.68 2083.98 T:present80n6silcv1 2078.03 2084.36 2129.27 T:present80n6t4silcv2 4223.64 4226.81 4231.48 T:led80n6silcv1 4227.98 4232.30 4327.21 T:led80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.27 0.27 0.28 T:tiaoxinv1 0.28 0.29 0.30 T:tiaoxinv2 0.30 0.30 0.31 T:aegis128l 0.30 0.30 0.31 aegis128l 0.45 0.45 0.46 aegis256 0.49 0.49 0.50 T:aezv5 0.49 0.49 0.51 T:aezv4 0.49 0.49 0.51 T:aezv3 0.49 0.50 0.51 T:aegis128 0.76 0.76 0.76 T:aes128otrpv3 0.76 0.76 0.77 T:morus1280256v1 0.75? 0.76? 0.88? T:aeadaes128ocbtaglen128v1 0.76 0.77 0.77 T:morus1280128v1 0.77 0.78 0.78 T:morus1280256v2 0.77 0.78 0.78 T:morus1280128v2 0.84 0.84 0.85 T:aes128otrcv3 0.91 0.91 0.97 T:aeadaes192ocbtaglen128v1 1.01 1.02 1.04 T:deoxysneq128128v1 1.03 1.04 1.04 T:aes256otrpv3 1.04 1.04 1.05 T:deoxysi128v141 1.04? 1.07? 3.56? T:aeadaes256ocbtaglen128v1 1.11 1.12 1.13 T:morus640128v1 1.13 1.14 1.15 T:morus640128v2 1.14 1.15 1.15 T:deoxysneq256128v1 1.15 1.15 1.15 T:aes256otrcv3 1.21 1.22 1.22 T:deoxysi256v141 1.25 1.26 1.27 T:colm0v1 1.52 1.52 1.53 T:deoxysii128v141 1.52 1.53 1.53 T:deoxyseq128128v1 1.60? 1.60? 1.79? T:aes128gcmv1 1.73 1.74 1.74 T:aes256gcmv1 1.76 1.76 1.76 T:deoxyseq256128v1 1.77 1.78 1.78 T:aes128otrsv3 1.78 1.79 1.81 T:deoxysii256v141 2.25 2.27 2.28 T:norx6444v3 2.42 2.43 2.45 T:aes256otrsv3 2.45 2.45 2.47 T:norx6441v2 2.46 2.47 2.49 T:norx6441v3 2.79 2.79 2.81 T:aes128n12t8clocv3 2.79 2.81 2.81 T:aes128n12t8clocv2 2.80 2.81 2.81 T:aes128n8t8clocv2 2.82 2.83 2.84 T:norx6441v1 2.86 2.86 2.89 T:aes128n12t8silcv3 2.86 2.88 2.89 T:aes128n12t8silcv2 2.86 2.89 2.89 T:aes128n8t8silcv2 3.43 3.44 3.46 T:seakeyakv2 3.73 3.74 3.75 T:norx6461v3 3.74 3.77 3.78 T:norx6461v2 4.00 4.01 4.03 T:norx3241v2 4.02 4.05 4.09 T:norx3241v3 4.30 4.32 4.34 T:norx6461v1 4.35 4.36 4.37 T:lakekeyakv2 4.60 4.61 4.62 T:lakekeyakv1 4.61 4.62 4.63 T:oceankeyakv2 4.68 4.70 4.73 T:norx3241v1 4.86 4.89 4.94 T:norx6444v2 5.26 5.26 5.27 T:norx6444v1 5.83 5.84 5.85 T:aesjambuv1 6.21 6.27 6.32 T:norx3261v2 6.24 6.30 6.40 T:norx3261v3 7.24 7.24 7.26 T:riverkeyakv2 7.25 7.27 7.29 T:ascon96v1 7.26 7.28 7.28 T:ascon128av11 7.61 7.63 7.64 ascon128av12 7.66 7.67 7.69 T:norx3261v1 7.90 7.90 7.95 T:lunarkeyakv2 8.29 8.30 8.31 T:ketjemajorv2 9.33 9.36 9.38 T:ketjeminorv2 10.70 10.71 10.73 T:ascon128v1 10.70 10.72 10.75 T:ascon128v11 11.05 11.06 11.11 ascon128v12 13.33 13.35 13.37 T:aes128otrsv1 13.35 13.38 13.40 T:aes128otrsv2 15.00 15.01 15.03 T:aes128otrpv1 14.98 15.02 15.27 T:aes128otrpv2 15.73 15.74 15.75 T:twine80n6t4clocv2 16.00 16.01 16.01 T:twine80n6t4clocv3 17.16 17.17 17.19 T:aes256otrsv1 17.18 17.18 17.32 T:aes256otrsv2 17.49 17.51 17.54 T:aes128n8clocv1 17.87 17.89 17.94 T:aes128n12clocv1 18.62 18.64 18.66 T:aes128n8silcv1 18.86? 18.91? 20.98? T:aes256otrpv2 18.89 18.91 18.93 T:aes256otrpv1 19.30 19.31 19.33 T:aes128n12silcv1 21.93 21.96 23.85 T:oceankeyakv1 21.94 21.98 22.05 T:seakeyakv1 26.46 26.49 26.51 T:proest256otrv1 30.55 30.59 33.24 T:riverkeyakv1 31.55 31.56 31.59 T:aeadaes192ocbtaglen96v1 32.91 32.93 32.99 T:ketjesrv1 34.15 34.16 34.18 T:ketjesrv2 57.39 57.44 57.48 T:ketjejrv1 60.94 60.98 62.91 T:proest128otrv1 76.65 76.68 76.70 T:present80n6t4silcv3 80.62 80.85 85.07 T:deoxysneq128128v13 90.45 90.48 90.55 T:twine80n6clocv1 92.97 92.99 93.02 T:ketjejrv2 104.90 105.00 105.14 T:deoxysneq256128v13 114.02 114.23 115.36 T:aezv1 119.11 120.13 120.26 T:deoxyseq128128v13 131.42 131.43 131.47 T:led80n6t4silcv3 158.46 158.62 159.13 T:deoxyseq256128v13 289.48 289.57 289.72 aes256gcmv1 387.52? 393.97? 671.40? T:acorn128v3 395.26? 399.46? 690.54? T:acorn128 399.29 407.84 407.88 T:acorn128v2 3137.73 3139.33 3141.64 T:present80n6t4silcv2 3137.95 3139.35 3139.94 T:present80n6silcv1 6361.50 6362.96 6364.56 T:led80n6silcv1 6366.47 6367.35 6370.13 T:led80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.30 0.30 0.30 T:aegis128l 0.30 0.31 0.32 aegis128l 0.33 0.33 0.35 T:tiaoxinv2 0.35 0.35 0.36 T:tiaoxinv1 0.49 0.49 0.52 T:aezv4 0.49 0.49 0.50 T:aezv3 0.49 0.49 0.54 T:aezv5 0.50 0.50 0.51 aegis256 0.50 0.50 0.50 T:aegis128 0.76? 0.76? 0.86? T:aeadaes128ocbtaglen128v1 0.78 0.78 0.78 T:morus1280128v1 0.78 0.78 0.79 T:morus1280256v1 0.78 0.79 0.79 T:aes128otrpv3 0.79 0.79 0.80 T:morus1280256v2 0.79 0.80 0.80 T:morus1280128v2 0.87 0.87 0.88 T:aes128otrcv3 0.90? 0.90? 3.55? T:aeadaes192ocbtaglen128v1 1.05? 1.07? 3.54? T:aeadaes256ocbtaglen128v1 1.07 1.07 1.08 T:aes256otrpv3 1.14 1.14 1.14 T:morus640128v2 1.13 1.14 1.15 T:morus640128v1 1.19 1.19 1.20 T:aes256otrcv3 1.24 1.24 1.25 T:deoxysi128v141 1.25 1.25 1.26 T:deoxysneq128128v1 1.27 1.28 1.32 T:colm0v1 1.33 1.33 1.34 T:deoxysneq256128v1 1.39 1.39 1.40 T:deoxysi256v141 1.55 1.55 1.56 T:deoxysii128v141 1.57 1.58 1.61 T:aes128gcmv1 1.69 1.71 1.74 T:aes256gcmv1 1.78 1.79 1.79 T:aes128otrsv3 1.84 1.84 1.86 T:deoxysii256v141 1.92 1.92 1.93 T:deoxyseq128128v1 2.11 2.12 2.12 T:deoxyseq256128v1 2.26 2.27 2.28 T:norx6444v3 2.42 2.43 2.44 T:norx6441v2 2.43 2.44 2.46 T:norx6441v3 2.44 2.44 2.45 T:aes256otrsv3 2.78 2.79 2.82 T:aes128n12t8clocv2 2.79 2.79 2.81 T:aes128n8t8clocv2 2.78 2.81 2.82 T:aes128n12t8clocv3 2.82 2.83 2.84 T:norx6441v1 2.83 2.84 2.87 T:aes128n8t8silcv2 2.83 2.85 2.86 T:aes128n12t8silcv2 2.82 2.86 2.87 T:aes128n12t8silcv3 3.46 3.46 3.47 T:seakeyakv2 3.69 3.70 3.72 T:norx6461v2 3.69 3.70 3.73 T:norx6461v3 3.97 3.99 4.01 T:norx3241v2 4.01 4.02 4.04 T:norx3241v3 4.23 4.24 4.26 T:norx6461v1 4.37 4.38 4.39 T:lakekeyakv2 4.64 4.65 4.66 T:lakekeyakv1 4.66 4.68 4.70 T:norx3241v1 4.63 4.71 4.86 T:oceankeyakv2 4.88 4.89 4.94 T:norx6444v2 5.27 5.28 5.30 T:norx6444v1 5.92 5.92 5.93 T:aesjambuv1 6.15 6.16 6.16 T:norx3261v2 6.22 6.23 6.25 T:norx3261v3 7.28 7.29 7.31 T:ascon96v1 7.30 7.32 7.34 T:ascon128av11 7.33 7.35 7.36 T:riverkeyakv2 7.53 7.55 7.57 T:norx3261v1 7.56 7.57 7.58 ascon128av12 7.94 7.94 7.97 T:lunarkeyakv2 8.64 8.66 8.75 T:ketjemajorv2 9.17 9.18 9.21 T:ketjeminorv2 10.73 10.74 10.77 T:ascon128v1 10.73 10.75 10.77 T:ascon128v11 11.15 11.16 11.19 ascon128v12 13.47 13.48 13.51 T:aes128otrsv1 13.48 13.52 13.54 T:aes128otrsv2 15.14 15.18 15.25 T:aes128otrpv1 15.16 15.23 15.27 T:aes128otrpv2 15.73 15.74 15.76 T:twine80n6t4clocv2 15.98 15.99 16.07 T:twine80n6t4clocv3 17.25 17.27 17.30 T:aes256otrsv1 17.27 17.29 17.32 T:aes256otrsv2 17.44 17.47 17.50 T:aes128n12clocv1 17.91 17.92 17.95 T:aes128n8clocv1 18.53 18.56 18.59 T:aes128n8silcv1 18.98 19.00 19.02 T:aes256otrpv2 18.99 19.00 19.01 T:aes256otrpv1 19.06 19.09 19.12 T:aes128n12silcv1 22.00 22.01 23.92 T:oceankeyakv1 21.99 22.03 22.08 T:seakeyakv1 26.44 26.46 26.50 T:proest256otrv1 30.61 30.66 33.38 T:riverkeyakv1 33.26 33.31 33.34 T:ketjesrv1 34.37 34.40 34.42 T:ketjesrv2 37.20 37.24 37.58 T:aeadaes192ocbtaglen96v1 57.72 57.77 57.81 T:ketjejrv1 61.46 61.59 63.06 T:proest128otrv1 76.91 76.92 76.93 T:present80n6t4silcv3 89.98 90.02 90.33 T:twine80n6clocv1 94.57 94.58 94.68 T:deoxysneq128128v13 93.80 95.39 95.62 T:ketjejrv2 113.91 114.92 115.74 T:aezv1 119.13 119.97 120.20 T:deoxyseq128128v13 124.64 124.68 124.76 T:deoxysneq256128v13 131.71 131.76 131.88 T:led80n6t4silcv3 158.58 158.63 159.10 T:deoxyseq256128v13 288.47 288.89 289.61 aes256gcmv1 381.53? 390.22? 671.25? T:acorn128v3 393.02? 399.34? 687.26? T:acorn128 404.45 407.56 407.60 T:acorn128v2 3137.51 3138.95 3139.74 T:present80n6t4silcv2 3137.31 3139.63 3140.72 T:present80n6silcv1 6361.56 6364.88 6366.55 T:led80n6silcv1 6365.42 6368.68 6371.30 T:led80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.29 0.29 0.29 T:aezv3 0.29 0.29 0.29 T:aezv4 0.29 0.29 0.32 T:aezv5 0.30 0.30 0.30 T:aegis128l 0.32 0.32 0.32 aegis128l 0.33 0.33 0.34 T:tiaoxinv2 0.35 0.35 0.36 T:tiaoxinv1 0.50 0.50 0.51 aegis256 0.50 0.50 0.50 T:aegis128 0.76 0.76 0.79 T:aeadaes128ocbtaglen128v1 0.77 0.78 0.78 T:morus1280256v1 0.78 0.78 0.78 T:morus1280128v1 0.78 0.79 0.79 T:aes128otrpv3 0.79 0.79 0.80 T:morus1280128v2 0.79 0.79 0.80 T:morus1280256v2 0.87 0.87 0.88 T:aes128otrcv3 0.89 0.90 0.90 T:aeadaes192ocbtaglen128v1 1.05 1.05 1.07 T:aeadaes256ocbtaglen128v1 1.07 1.07 1.08 T:aes256otrpv3 1.13 1.14 1.14 T:morus640128v2 1.13 1.14 1.15 T:morus640128v1 1.19 1.19 1.20 T:aes256otrcv3 1.24 1.24 1.24 T:deoxysi128v141 1.24 1.25 1.25 T:deoxysneq128128v1 1.27 1.28 1.32 T:colm0v1 1.32 1.32 1.33 T:deoxysneq256128v1 1.39 1.39 1.40 T:deoxysi256v141 1.54 1.54 1.56 T:deoxysii128v141 1.56? 1.57? 1.75? T:aes128gcmv1 1.69 1.70 1.73 T:aes256gcmv1 1.78 1.79 1.79 T:aes128otrsv3 1.84 1.84 1.84 T:deoxysii256v141 1.92 1.92 1.93 T:deoxyseq128128v1 2.11 2.12 2.12 T:deoxyseq256128v1 2.25 2.26 2.27 T:norx6444v3 2.42 2.43 2.43 T:norx6441v2 2.44 2.44 2.44 T:aes256otrsv3 2.43 2.44 2.45 T:norx6441v3 2.78 2.79 2.81 T:aes128n12t8clocv2 2.79 2.80 2.82 T:aes128n8t8clocv2 2.79 2.81 2.81 T:aes128n12t8clocv3 2.80 2.81 2.83 T:norx6441v1 2.81 2.82 2.86 T:aes128n12t8silcv3 2.81 2.82 2.86 T:aes128n12t8silcv2 2.83 2.85 2.87 T:aes128n8t8silcv2 3.46 3.47 3.48 T:seakeyakv2 3.69 3.70 3.71 T:norx6461v3 3.69 3.71 3.72 T:norx6461v2 3.98 3.99 4.01 T:norx3241v2 4.01 4.02 4.04 T:norx3241v3 4.22 4.24 4.29 T:norx6461v1 4.38 4.39 4.40 T:lakekeyakv2 4.65 4.66 4.67 T:lakekeyakv1 4.66 4.67 4.70 T:oceankeyakv2 4.66 4.68 4.71 T:norx3241v1 4.89 4.90 4.95 T:norx6444v2 5.28 5.29 5.29 T:norx6444v1 5.92 5.93 5.93 T:aesjambuv1 6.14 6.15 6.16 T:norx3261v2 6.22 6.23 6.24 T:norx3261v3 7.28 7.29 7.31 T:ascon96v1 7.29 7.30 7.31 T:ascon128av11 7.34 7.36 7.38 T:riverkeyakv2 7.53 7.54 7.55 T:norx3261v1 7.55 7.56 7.57 ascon128av12 7.94 7.95 7.97 T:lunarkeyakv2 8.64 8.68 8.82 T:ketjemajorv2 9.19 9.20 9.22 T:ketjeminorv2 10.71 10.73 10.74 T:ascon128v1 10.72 10.73 10.76 T:ascon128v11 11.16 11.18 12.18 ascon128v12 13.49 13.51 13.53 T:aes128otrsv1 13.52 13.53 13.56 T:aes128otrsv2 15.19 15.21 15.25 T:aes128otrpv1 15.15 15.25 15.34 T:aes128otrpv2 15.72 15.73 15.76 T:twine80n6t4clocv2 15.99 16.00 17.04 T:twine80n6t4clocv3 17.27 17.28 17.30 T:aes256otrsv1 17.29 17.31 17.40 T:aes256otrsv2 17.45 17.48 17.52 T:aes128n12clocv1 17.90 17.91 17.93 T:aes128n8clocv1 18.52 18.54 18.56 T:aes128n8silcv1 18.99 19.01 19.04 T:aes256otrpv2 19.01 19.02 19.06 T:aes256otrpv1 19.06 19.07 19.08 T:aes128n12silcv1 22.02 22.02 23.91 T:oceankeyakv1 22.00 22.03 22.08 T:seakeyakv1 26.42 26.44 26.46 T:proest256otrv1 30.62? 31.10? 35.75? T:riverkeyakv1 33.34 33.37 33.41 T:ketjesrv1 34.44 34.45 34.49 T:ketjesrv2 37.19 37.20 37.50 T:aeadaes192ocbtaglen96v1 57.78 57.80 57.84 T:ketjejrv1 61.45 61.48 63.04 T:proest128otrv1 76.90 76.92 76.93 T:present80n6t4silcv3 89.96 89.99 90.20 T:twine80n6clocv1 93.81 93.98 95.54 T:ketjejrv2 94.58 94.66 94.81 T:deoxysneq128128v13 113.87 114.87 116.19 T:aezv1 119.19 120.06 120.28 T:deoxyseq128128v13 124.68 124.72 124.77 T:deoxysneq256128v13 131.73 131.75 131.77 T:led80n6t4silcv3 158.53 158.58 158.92 T:deoxyseq256128v13 282.45 282.69 283.45 aes256gcmv1 381.11? 390.23? 678.87? T:acorn128v3 392.62? 399.25? 687.29? T:acorn128 404.72 407.55 407.57 T:acorn128v2 3138.42 3139.51 3141.43 T:present80n6silcv1 3137.44 3139.76 3140.96 T:present80n6t4silcv2 6360.18 6363.90 6364.83 T:led80n6silcv1 6366.20 6368.94 6371.52 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.35? 1.38? 1.64? T:aegis128l 1.32? 1.38? 1.57? aegis128l 1.37 1.44 1.46 T:aegis128 1.77? 1.77? 2.23? T:aezv4 1.77 1.79 1.83 aegis256 1.78? 1.81? 2.25? T:aezv3 1.77? 1.84? 2.16? T:aezv5 1.92? 1.95? 2.17? T:tiaoxinv1 2.12? 2.16? 2.50? T:tiaoxinv2 3.23 3.27 3.51 T:aes128otrpv3 3.70 3.72 3.78 T:deoxysneq128128v1 3.80 3.83 3.86 T:aes128otrsv3 3.89 3.92 4.24 T:colm0v1 3.91 3.94 4.00 T:morus640128v1 4.02 4.06 4.38 T:morus1280256v1 4.00 4.08 4.26 T:morus1280128v1 4.08 4.09 4.12 T:aes128n12t8clocv3 4.06 4.11 4.14 T:aes128n8t8clocv2 4.06 4.12 4.31 T:aes128n12t8clocv2 4.14 4.17 4.22 T:aes256otrpv3 4.17 4.19 4.38 T:morus640128v2 4.28 4.32 4.38 T:morus1280128v2 4.34 4.39 4.59 T:morus1280256v2 4.18? 4.45? 7.41? T:aeadaes128ocbtaglen128v1 4.41 4.46 4.52 T:deoxysneq256128v1 4.70 4.72 4.82 T:aes128otrcv3 4.93 4.96 4.98 T:aes128n12t8silcv2 4.93 4.97 4.99 T:aes128n12t8silcv3 4.95 4.98 5.01 T:aes128n8t8silcv2 4.99 5.07 5.13 T:deoxysi128v141 5.10 5.12 5.25 T:aes256otrsv3 5.05? 5.53? 63.52? T:aeadaes256ocbtaglen128v1 5.58 5.59 5.81 T:deoxysi256v141 6.14 6.20 6.43 T:aes256otrcv3 6.22 6.27 6.34 T:deoxyseq128128v1 6.38 6.42 6.65 T:deoxysii128v141 5.83? 6.51? 67.04? T:aeadaes192ocbtaglen128v1 8.12 8.20 8.29 T:norx6441v2 8.14 8.21 8.28 T:norx6441v1 8.17 8.23 8.38 T:norx6441v3 8.22 8.29 8.32 T:aesjambuv1 8.91 8.95 9.12 T:deoxyseq256128v1 9.98 10.03 10.09 T:norx3241v1 10.06 10.13 10.20 T:norx3241v3 10.19 10.23 10.38 T:norx3241v2 11.07 11.12 11.16 T:deoxysii256v141 11.27 11.48 11.88 T:ascon96v1 11.37 11.50 11.67 T:ascon128av11 11.55 11.70 11.92 ascon128av12 12.05 12.11 12.19 T:norx6461v1 12.00 12.16 12.23 T:norx6461v3 12.14 12.24 12.40 T:norx6461v2 14.47 14.63 14.80 T:norx6444v3 14.62 14.79 15.18 T:ascon128v11 14.60 14.82 15.22 T:ascon128v1 14.96 15.09 15.44 ascon128v12 15.04 15.17 15.31 T:norx3261v2 15.01 15.27 15.62 T:lakekeyakv1 15.35 15.44 15.53 T:norx3261v3 15.56 15.64 15.70 T:norx3261v1 17.20 17.39 17.56 T:riverkeyakv2 18.59 18.82 19.21 T:lakekeyakv2 22.18 22.24 22.37 T:aes128n8clocv1 22.73 22.77 23.00 T:aes128n12clocv1 22.70 23.00 23.09 T:aes128otrsv1 23.01 23.05 23.27 T:twine80n6t4clocv3 23.02 23.16 23.28 T:twine80n6t4clocv2 22.88 23.19 23.45 T:aes128otrsv2 23.98 24.10 24.66 T:aes128otrpv2 24.15 24.43 24.62 T:aes128otrpv1 26.27 26.37 26.76 T:aes128n8silcv1 26.73 26.98 27.08 T:aes128gcmv1 26.98 27.16 27.68 T:aes128n12silcv1 27.31 27.62 27.77 T:aes256gcmv1 29.24 29.30 29.64 T:aes256otrsv2 29.22 29.42 29.71 T:aes256otrsv1 30.54 30.68 31.54 T:aes256otrpv2 30.70 30.89 31.17 T:aes256otrpv1 31.72 31.77 32.20 T:seakeyakv2 34.24 34.28 34.41 T:norx6444v2 37.16 37.19 37.31 T:norx6444v1 37.25 37.31 37.50 T:ketjeminorv2 47.88 48.05 48.22 T:aeadaes192ocbtaglen96v1 51.34 51.41 51.54 T:ketjesrv1 51.85 52.31 53.19 T:oceankeyakv2 54.04 54.25 54.35 T:riverkeyakv1 56.78 57.23 57.30 T:ketjemajorv2 57.18 57.28 57.45 T:ketjesrv2 75.45 75.55 76.05 T:proest256otrv1 75.33 75.63 75.95 T:ketjejrv1 91.04 91.83 95.64 T:deoxysneq128128v13 94.68 94.74 94.88 T:present80n6t4silcv3 101.39 101.68 101.92 T:twine80n6clocv1 116.20 117.30 118.64 T:aezv1 118.05 118.41 119.14 T:deoxysneq256128v13 118.75 119.03 121.43 T:proest128otrv1 123.69 123.93 124.07 T:ketjejrv2 129.25 129.62 130.72 T:lunarkeyakv2 147.74 148.53 149.35 T:deoxyseq128128v13 156.23 156.41 156.66 T:led80n6t4silcv3 163.46 163.66 164.06 T:seakeyakv1 196.43 197.03 197.48 T:deoxyseq256128v13 239.66 239.95 248.28 T:oceankeyakv1 327.34 327.81 328.55 aes256gcmv1 1362.55? 1388.78? 2380.98? T:acorn128v3 1410.70? 1421.24? 2488.88? T:acorn128 1415.24 1445.91 1446.44 T:acorn128v2 3510.20 3510.88 3511.64 T:present80n6t4silcv2 3512.85 3514.11 3518.04 T:present80n6silcv1 7045.09 7070.21 7134.48 T:led80n6silcv1 7045.52 7070.85 7095.23 T:led80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.38? 1.45? 1.80? T:aegis128l 1.45 1.48 1.52 T:aegis128 1.48? 1.52? 1.81? aegis128l 1.74 1.77 1.80 T:aezv5 1.76 1.80 1.89 T:aezv4 1.78 1.84 1.91 T:aezv3 1.86 1.88 1.89 aegis256 1.95? 1.97? 2.21? T:tiaoxinv1 2.03? 2.07? 3.02? T:tiaoxinv2 3.29 3.31 3.36 T:aes128otrpv3 3.95 4.00 4.07 T:morus640128v1 3.98 4.02 4.19 T:aes128otrsv3 4.14? 4.19? 4.62? T:colm0v1 4.20? 4.25? 5.07? T:aes128n8t8clocv2 4.19 4.26 4.27 T:aes128n12t8clocv3 4.29 4.30 4.62 T:aes256otrpv3 4.23 4.35 4.59 T:aes128n12t8clocv2 4.33 4.37 4.41 T:morus1280128v1 4.35 4.40 4.43 T:morus1280256v1 4.32? 4.45? 8.34? T:aeadaes128ocbtaglen128v1 4.50 4.58 4.84 T:morus640128v2 4.63 4.68 4.75 T:morus1280128v2 4.66 4.70 4.93 T:morus1280256v2 4.85 4.88 5.05 T:aes128otrcv3 4.99 5.02 5.05 T:aes128n12t8silcv3 5.01 5.02 5.04 T:aes128n8t8silcv2 5.01 5.02 5.07 T:aes128n12t8silcv2 5.27 5.29 5.32 T:aes256otrsv3 5.21? 5.40? 67.26? T:aeadaes256ocbtaglen128v1 5.67 5.73 5.88 T:deoxysneq128128v1 5.89 5.92 6.10 T:deoxysneq256128v1 6.28 6.34 6.52 T:aes256otrcv3 6.23? 6.43? 9.46? T:aeadaes192ocbtaglen128v1 6.54 6.59 6.73 T:deoxysi128v141 7.02 7.11 7.23 T:deoxysii128v141 7.27 7.34 7.54 T:deoxysi256v141 8.23 8.28 8.34 T:norx6441v1 8.20 8.32 8.37 T:norx6441v2 8.30 8.38 8.46 T:norx6441v3 8.51 8.54 8.57 T:aesjambuv1 8.80 8.87 9.14 T:deoxyseq128128v1 10.05 10.12 10.18 T:norx3241v1 10.12 10.18 10.24 T:norx3241v2 10.20 10.28 10.38 T:norx3241v3 10.57 10.63 10.66 T:deoxyseq256128v1 11.34 11.62 11.91 T:ascon96v1 11.55 11.72 11.95 T:ascon128av11 11.46 11.86 12.23 ascon128av12 12.11 12.16 12.34 T:norx6461v1 12.19 12.30 12.39 T:norx6461v3 12.34 12.37 12.45 T:deoxysii256v141 12.27 12.39 12.46 T:norx6461v2 14.48 14.55 14.76 T:norx6444v3 14.52 14.59 14.87 T:ascon128v1 14.47 14.75 15.06 T:ascon128v11 14.94 15.04 15.37 ascon128v12 15.13 15.30 15.92 T:lakekeyakv1 15.29 15.32 15.41 T:norx3261v2 15.42 15.52 15.61 T:norx3261v3 15.77 15.84 15.90 T:norx3261v1 17.33 17.50 17.61 T:riverkeyakv2 18.70 18.76 19.02 T:lakekeyakv2 22.46 22.55 22.66 T:aes128n12clocv1 22.57 22.91 23.18 T:aes128n8clocv1 22.81 23.04 23.33 T:aes128otrsv1 23.01 23.06 23.11 T:twine80n6t4clocv2 23.06 23.10 23.23 T:aes128otrsv2 22.98 23.13 23.48 T:twine80n6t4clocv3 24.09 24.32 24.86 T:aes128otrpv2 24.32 24.51 24.73 T:aes128otrpv1 26.32 26.51 26.78 T:aes128gcmv1 26.34 26.88 26.97 T:aes128n8silcv1 26.87 26.96 27.59 T:aes128n12silcv1 26.97 27.12 27.28 T:aes256gcmv1 29.20 29.33 29.61 T:aes256otrsv2 29.19 29.41 29.52 T:aes256otrsv1 30.75 30.86 31.11 T:aes256otrpv1 30.51 30.88 31.08 T:aes256otrpv2 31.64 31.91 32.26 T:seakeyakv2 34.65 34.94 35.19 T:norx6444v2 36.40 36.68 36.89 T:ketjeminorv2 37.50 37.55 37.72 T:norx6444v1 51.59 51.80 53.02 T:ketjesrv1 52.10 52.30 53.55 T:oceankeyakv2 54.23 54.67 54.94 T:riverkeyakv1 56.64 57.12 57.46 T:ketjemajorv2 57.45 57.52 57.71 T:aeadaes192ocbtaglen96v1 57.48 57.62 58.84 T:ketjesrv2 76.38 76.58 76.82 T:proest256otrv1 76.03 77.16 77.45 T:ketjejrv1 94.84 94.92 95.34 T:present80n6t4silcv3 101.03 101.21 101.70 T:twine80n6clocv1 104.79 105.24 105.58 T:deoxysneq128128v13 120.26 121.08 121.34 T:aezv1 120.05 121.78 123.02 T:proest128otrv1 124.91 126.26 128.09 T:ketjejrv2 129.16 129.88 131.07 T:lunarkeyakv2 137.70 138.12 138.39 T:deoxysneq256128v13 147.93 148.48 149.21 T:deoxyseq128128v13 156.51 156.88 157.21 T:led80n6t4silcv3 163.38 163.59 163.80 T:seakeyakv1 196.38 196.91 197.37 T:deoxyseq256128v13 239.84 240.27 248.57 T:oceankeyakv1 327.07 327.83 327.97 aes256gcmv1 1358.32? 1384.55? 2380.84? T:acorn128v3 1405.32? 1420.52? 2488.39? T:acorn128 1444.52 1444.82 1445.30 T:acorn128v2 3509.29 3510.95 3513.14 T:present80n6t4silcv2 3513.69 3514.54 3516.41 T:present80n6silcv1 7019.44 7028.82 7039.50 T:led80n6silcv1 7037.31 7040.95 7053.30 T:led80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.40 1.41 1.44 T:aezv5 1.38 1.41 1.48 T:aegis128l 1.41 1.44 1.52 T:aezv3 1.42 1.45 1.50 T:aezv4 1.40 1.46 1.50 T:aegis128 1.49 1.53 1.57 aegis128l 1.84 1.88 1.89 aegis256 1.97? 2.00? 2.23? T:tiaoxinv1 2.03? 2.06? 2.28? T:tiaoxinv2 3.30 3.33 3.34 T:aes128otrpv3 3.94 3.98 4.09 T:morus640128v1 3.97 4.00 4.03 T:aes128otrsv3 4.05 4.11 4.16 T:aes128n8t8clocv2 4.06 4.12 4.17 T:aes128n12t8clocv3 4.09 4.16 4.45 T:aes128n12t8clocv2 4.27 4.27 4.30 T:aes256otrpv3 4.17 4.28 4.52 T:colm0v1 4.28 4.34 4.50 T:aeadaes128ocbtaglen128v1 4.33 4.37 4.41 T:morus1280128v1 4.34 4.37 4.42 T:morus1280256v1 4.50 4.55 4.69 T:morus640128v2 4.62 4.66 4.73 T:morus1280256v2 4.62 4.68 4.70 T:morus1280128v2 4.84 4.87 4.88 T:aes128otrcv3 4.93 4.95 4.98 T:aes128n12t8silcv3 4.93 4.96 4.98 T:aes128n12t8silcv2 4.96 4.98 5.01 T:aes128n8t8silcv2 5.13 5.16 5.21 T:aeadaes256ocbtaglen128v1 5.25 5.27 5.39 T:aes256otrsv3 5.55 5.59 5.67 T:deoxysneq128128v1 5.76 5.83 5.92 T:deoxysneq256128v1 6.30 6.34 6.46 T:aes256otrcv3 6.20? 6.38? 69.16? T:aeadaes192ocbtaglen128v1 6.54 6.59 6.68 T:deoxysi128v141 6.93 7.10 7.24 T:deoxysii128v141 7.25 7.32 7.38 T:deoxysi256v141 8.22 8.30 8.39 T:norx6441v3 8.26 8.30 8.37 T:norx6441v1 8.29 8.35 8.38 T:norx6441v2 8.51 8.55 8.59 T:aesjambuv1 8.80 8.85 9.00 T:deoxyseq128128v1 9.98 10.08 10.22 T:norx3241v1 10.16 10.24 10.33 T:norx3241v3 10.17 10.27 10.30 T:norx3241v2 10.66 10.73 10.77 T:deoxyseq256128v1 11.27 11.38 11.49 T:ascon96v1 11.47 11.56 11.70 T:ascon128av11 11.51 11.64 11.75 ascon128av12 12.09 12.21 12.31 T:norx6461v1 12.26 12.30 12.45 T:norx6461v3 12.30 12.39 12.51 T:norx6461v2 12.33 12.43 12.51 T:deoxysii256v141 14.30 14.37 14.71 T:ascon128v11 14.43 14.48 14.73 T:ascon128v1 14.40 14.52 14.70 T:norx6444v3 14.68 14.87 14.98 ascon128v12 15.18 15.27 15.53 T:lakekeyakv1 15.23 15.27 15.44 T:norx3261v2 15.38 15.45 15.50 T:norx3261v3 15.70 15.78 15.88 T:norx3261v1 17.41 17.47 17.66 T:riverkeyakv2 18.70 18.77 19.02 T:lakekeyakv2 22.46 22.74 22.98 T:aes128n8clocv1 22.57 22.88 23.48 T:aes128n12clocv1 22.93 23.03 23.07 T:twine80n6t4clocv2 23.00 23.12 23.52 T:aes128otrsv2 22.97 23.13 23.44 T:twine80n6t4clocv3 22.97 23.27 23.48 T:aes128otrsv1 24.24 24.37 24.77 T:aes128otrpv2 24.35 24.49 24.95 T:aes128otrpv1 26.27 26.38 26.45 T:aes128gcmv1 26.30 26.51 26.74 T:aes128n8silcv1 26.77 26.87 27.08 T:aes256gcmv1 26.80 27.03 27.20 T:aes128n12silcv1 29.19 29.38 29.58 T:aes256otrsv2 29.28 29.44 29.72 T:aes256otrsv1 30.78 30.84 31.03 T:aes256otrpv1 30.81 30.88 31.34 T:aes256otrpv2 31.72 31.87 31.94 T:seakeyakv2 34.70 34.77 35.19 T:norx6444v2 36.26 36.46 36.92 T:ketjeminorv2 37.52 37.58 37.80 T:norx6444v1 52.18 52.38 52.56 T:oceankeyakv2 52.87 52.97 53.79 T:ketjesrv1 54.41 54.70 54.88 T:riverkeyakv1 57.16 57.40 57.74 T:ketjemajorv2 57.41 57.54 57.87 T:aeadaes192ocbtaglen96v1 58.64 59.51 59.71 T:ketjesrv2 74.52 74.65 74.96 T:proest256otrv1 77.26 77.51 77.73 T:ketjejrv1 94.96 95.18 95.25 T:present80n6t4silcv3 100.88 101.02 101.38 T:twine80n6clocv1 105.92 106.16 106.90 T:deoxysneq128128v13 119.48 119.73 121.82 T:proest128otrv1 120.41 121.08 121.25 T:aezv1 126.15 126.40 128.49 T:ketjejrv2 129.45 129.59 130.30 T:lunarkeyakv2 137.73 138.11 138.34 T:deoxysneq256128v13 148.02 148.33 148.77 T:deoxyseq128128v13 156.56 156.81 157.13 T:led80n6t4silcv3 163.15 163.41 163.72 T:seakeyakv1 196.88 197.22 197.44 T:deoxyseq256128v13 239.75 240.15 248.52 T:oceankeyakv1 320.63 321.49 321.84 aes256gcmv1 1354.86? 1384.77? 2380.70? T:acorn128v3 1405.46? 1422.82? 2487.76? T:acorn128 1443.12 1444.75 1445.23 T:acorn128v2 3509.09 3511.31 3513.45 T:present80n6t4silcv2 3513.01 3514.35 3516.00 T:present80n6silcv1 7023.36 7031.27 7042.52 T:led80n6silcv1 7036.83 7047.20 7059.31 T:led80n6t4silcv2