VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20240625

[Page version: 20240726 23:46:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.69 1.70 1.71 T:morus1280256v2 1.75 1.76 1.77 T:morus1280256v1 1.76 1.78 1.79 T:morus1280128v2 1.80 1.81 1.82 T:morus640128v1 1.80 1.82 1.83 T:morus640128v2 2.12 2.13 2.18 T:morus1280128v1 3.23 3.29 3.42 T:lunarkeyakv2 4.20 4.27 4.36 T:seakeyakv2 4.42 4.51 4.60 T:oceankeyakv2 4.64 4.64 4.64 T:norx6441v3 4.63 4.65 4.66 T:norx6441v2 5.51 5.52 5.53 T:norx6441v1 5.83 5.85 5.88 T:norx6444v3 5.92 5.93 5.95 T:norx6444v2 5.92 6.02 6.08 T:lakekeyakv1 6.25 6.26 6.27 T:norx3241v3 6.19 6.32 6.35 T:lakekeyakv2 6.27 6.43 6.43 T:norx3241v2 6.70 6.73 6.74 T:norx6461v2 6.71 6.74 6.74 T:tiaoxinv2 6.76 6.76 6.77 T:norx6461v3 7.02 7.03 7.06 T:norx6444v1 7.02 7.05 7.08 T:tiaoxinv1 7.69 7.71 7.78 T:norx3241v1 8.12 8.15 8.15 T:norx6461v1 9.37 9.38 9.39 T:norx3261v2 9.39 9.42 9.44 T:norx3261v3 10.04 10.10 10.13 T:ascon96v1 10.15 10.17 10.18 T:ascon128av11 10.15 10.17 10.19 T:aegis128l 10.17 10.19 10.20 ascon128av12 10.63 10.74 11.63 T:ketjemajorv2 11.56 11.58 11.63 T:norx3261v1 12.45 12.48 12.49 T:aegis128 14.21 14.36 14.57 T:ketjeminorv2 14.34 14.45 14.54 T:riverkeyakv2 14.95 14.97 15.00 T:aegis256 15.25 15.26 15.26 ascon128v12 15.30 15.32 15.32 T:ascon128v1 15.30 15.32 15.32 T:ascon128v11 16.06 16.12 16.15 T:deoxysi128v141 16.69 16.93 17.03 T:aes128gcmv1 18.19 18.27 18.34 T:deoxysi256v141 19.76 19.80 19.82 T:aes128otrcv3 19.91 20.04 20.28 T:aes256gcmv1 22.33 22.64 23.23 T:oceankeyakv1 22.83 22.88 23.04 T:aes128otrpv2 22.68 22.89 22.96 T:aes128otrpv1 23.13 23.16 23.19 T:aes128otrsv2 23.16 23.22 23.24 T:aes128otrsv1 23.61 23.90 23.95 T:aes128otrsv3 23.61 23.97 24.03 T:aes128otrpv3 21.75? 24.16? 25.81? T:aeadaes128ocbtaglen128v1 25.70 25.72 25.86 T:aes256otrcv3 26.67 27.18 27.51 T:seakeyakv1 28.77 28.95 29.11 T:aes256otrpv1 28.92 28.96 29.00 T:aes256otrpv2 28.91 28.97 28.98 T:aes256otrsv2 29.03 29.09 29.15 T:aes256otrsv1 29.44 29.51 29.68 T:twine80n6t4clocv3 29.59 29.63 29.64 T:aesjambuv1 30.24 30.35 30.36 T:aes256otrpv3 30.44 30.60 30.78 T:aes256otrsv3 31.48 31.51 31.53 T:twine80n6t4clocv2 31.37 31.86 33.68 T:proest256otrv1 31.99 32.06 32.07 T:aes128n12t8clocv2 32.11 32.13 32.14 T:aes128n8clocv1 32.47 32.50 32.50 T:aes128n12clocv1 32.52 32.54 32.56 T:aes128n8t8clocv2 32.51 32.56 32.57 T:aes128n12t8clocv3 30.54? 33.17? 34.88? T:aeadaes256ocbtaglen128v1 34.19 34.20 34.20 T:aes128n12t8silcv3 34.19 34.20 34.23 T:aes128n8t8silcv2 34.19 34.21 34.24 T:aes128n12t8silcv2 34.32 34.34 34.35 T:aes128n8silcv1 34.30 34.34 34.39 T:aes128n12silcv1 34.40 34.52 34.81 T:deoxysii128v141 39.05 39.06 39.18 T:deoxysii256v141 60.24 60.28 60.38 T:riverkeyakv1 65.68 66.32 72.71 T:ketjesrv2 66.53 67.46 72.77 T:ketjesrv1 105.86 105.99 106.23 T:proest128otrv1 107.40 108.27 109.19 T:ketjejrv1 113.68 114.22 116.11 T:aezv4 113.80 114.55 116.08 T:deoxysneq128128v1 113.35 114.73 115.63 T:deoxysneq128128v13 124.76 127.25 127.42 T:present80n6t4silcv3 133.48 133.86 134.10 T:aezv5 153.96 159.00 159.44 T:ketjejrv2 180.42? 182.16? 214.61? T:deoxysneq256128v1 182.05 182.36 199.48 T:deoxysneq256128v13 219.11 219.53 220.16 T:led80n6t4silcv3 231.98 233.16 233.42 T:deoxyseq128128v13 231.55 234.81 240.18 T:deoxyseq128128v1 275.56 276.14 276.72 T:aezv3 283.53 284.03 284.06 T:twine80n6clocv1 354.04 356.89 357.54 T:aezv1 367.66 368.88 378.56 T:deoxyseq256128v13 366.80 369.26 393.52 T:deoxyseq256128v1 687.36 689.58 700.79 T:acorn128v3 690.98 693.04 694.01 T:acorn128 687.13 695.02 707.59 T:acorn128v2 8508.07 8517.07 8583.13 T:led80n6silcv1 8492.39 8521.07 8564.58 T:led80n6t4silcv2 8538.63 8538.71 8538.94 T:present80n6silcv1 8539.34 8539.42 8539.52 T:present80n6t4silcv2 28402.63 28403.03 28405.51 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.68 1.69 1.70 T:morus1280128v2 1.76 1.78 1.81 T:morus1280256v2 1.76 1.78 1.80 T:morus1280256v1 1.81 1.84 1.85 T:morus640128v1 1.83 1.85 1.87 T:morus640128v2 2.09 2.11 2.22 T:morus1280128v1 2.95? 3.36? 3.61? T:lunarkeyakv2 4.20 4.33 4.46 T:seakeyakv2 4.40 4.53 4.58 T:oceankeyakv2 4.77 4.78 4.78 T:norx6441v3 4.86 4.87 4.88 T:norx6441v2 5.56 5.58 5.59 T:norx6441v1 5.88 5.92 5.94 T:norx6444v3 5.92 5.96 5.97 T:norx6444v2 5.82 5.98 6.07 T:lakekeyakv1 6.31 6.31 6.32 T:norx3241v3 6.33 6.33 6.33 T:norx3241v2 6.41 6.47 6.54 T:lakekeyakv2 6.87 6.93 7.01 T:norx6461v2 6.98 6.98 6.99 T:norx6461v3 7.00 7.00 7.04 T:norx6444v1 7.67 7.68 7.69 T:norx3241v1 8.11 8.12 8.12 T:norx6461v1 8.27 8.29 8.48 T:tiaoxinv2 8.35 8.39 8.43 T:tiaoxinv1 9.34 9.34 9.34 T:norx3261v3 9.38 9.38 9.40 T:norx3261v2 10.11 10.18 10.18 T:ascon96v1 10.18 10.18 10.20 T:aegis128l 10.17 10.22 10.25 ascon128av12 10.21 10.24 10.27 T:ascon128av11 10.79 10.99 11.07 T:ketjemajorv2 11.42 11.45 11.48 T:norx3261v1 12.44 12.48 12.49 T:aegis128 14.29 14.36 14.41 T:riverkeyakv2 14.77 14.87 14.91 T:ketjeminorv2 15.01 15.02 15.06 T:aegis256 15.23 15.28 15.28 T:ascon128v1 15.23 15.28 15.28 T:ascon128v11 15.30 15.31 15.31 ascon128v12 16.74 16.94 17.06 T:aes128gcmv1 19.72 19.73 19.80 T:aes128otrcv3 19.96 20.24 20.29 T:aes256gcmv1 20.79 20.85 20.93 T:deoxysi128v141 22.60 22.77 23.15 T:oceankeyakv1 23.36 23.39 23.42 T:aes128otrpv3 23.47 23.53 23.61 T:aes128otrsv1 23.50 23.53 23.56 T:aes128otrsv3 23.45 23.62 23.65 T:aes128otrsv2 23.63 23.68 23.75 T:deoxysi256v141 23.83 23.86 24.17 T:aes128otrpv1 24.11 24.28 24.34 T:aes128otrpv2 25.55 25.62 25.78 T:aes256otrcv3 27.27 27.41 27.78 T:seakeyakv1 25.05? 27.56? 30.04? T:aeadaes128ocbtaglen128v1 28.92 28.98 29.04 T:twine80n6t4clocv3 29.30 29.44 29.51 T:aes256otrsv1 29.44 29.49 29.53 T:aes256otrsv2 29.54 29.61 29.84 T:aes256otrpv3 29.76 29.80 29.84 T:aesjambuv1 30.30 30.39 30.43 T:aes256otrpv1 30.45 30.56 30.59 T:aes256otrpv2 30.74 30.77 30.80 T:twine80n6t4clocv2 30.62 30.82 32.78 T:proest256otrv1 32.06 32.19 32.27 T:aes256otrsv3 32.74 32.83 32.88 T:aes128n8t8clocv2 32.80 32.87 32.93 T:aes128n12clocv1 32.82 32.89 32.91 T:aes128n12t8clocv3 33.84 33.94 33.95 T:aes128n12t8clocv2 33.90 33.95 33.97 T:aes128n8clocv1 34.18 34.19 34.23 T:aes128n12t8silcv3 34.18 34.20 34.26 T:aes128n8t8silcv2 34.19 34.24 34.27 T:aes128n12t8silcv2 34.37 34.39 34.41 T:aes128n8silcv1 34.36 34.41 34.47 T:aes128n12silcv1 34.53 34.68 34.82 T:deoxysii128v141 35.88? 38.21? 40.69? T:aeadaes256ocbtaglen128v1 39.48 39.52 39.71 T:deoxysii256v141 60.52 60.59 60.65 T:riverkeyakv1 68.07 69.11 73.79 T:ketjesrv1 68.51 69.14 75.43 T:ketjesrv2 106.68 106.79 107.27 T:proest128otrv1 106.42 107.32 108.34 T:ketjejrv1 113.02 113.47 113.87 T:aezv4 125.88 126.26 126.88 T:present80n6t4silcv3 132.54 133.39 133.74 T:aezv5 151.54 151.65 151.69 T:ketjejrv2 159.17 159.56 160.03 T:deoxysneq128128v1 158.38 160.52 160.83 T:deoxysneq128128v13 219.03 219.17 219.28 T:led80n6t4silcv3 231.66 232.45 250.21 T:deoxysneq256128v13 231.92 232.63 235.40 T:deoxyseq128128v13 230.96 232.82 250.54 T:deoxysneq256128v1 276.70 277.76 278.12 T:aezv3 285.78 286.25 287.20 T:twine80n6clocv1 318.83 319.40 322.12 T:deoxyseq128128v1 353.89 355.58 357.17 T:aezv1 368.53 369.05 377.83 T:deoxyseq256128v13 463.22 465.57 468.16 T:deoxyseq256128v1 671.92 675.04 679.68 T:acorn128 678.97 679.05 679.56 T:acorn128v3 674.23 683.45 687.06 T:acorn128v2 8508.82 8536.11 8565.46 T:led80n6silcv1 8537.91 8538.44 8538.52 T:present80n6t4silcv2 8539.23 8539.56 8539.95 T:present80n6silcv1 8518.32 8549.43 8611.57 T:led80n6t4silcv2 28396.93 28399.65 28406.21 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.69 1.69 1.69 T:morus1280128v2 1.77 1.78 1.79 T:morus1280256v2 1.77 1.78 1.78 T:morus1280256v1 1.82 1.83 1.84 T:morus640128v1 1.84 1.85 1.85 T:morus640128v2 2.09 2.11 2.22 T:morus1280128v1 3.02? 3.35? 3.67? T:lunarkeyakv2 4.25 4.36 4.45 T:seakeyakv2 4.50 4.54 4.61 T:oceankeyakv2 4.77 4.78 4.78 T:norx6441v3 4.80 4.81 4.88 T:norx6441v2 5.52 5.52 5.53 T:norx6441v1 5.92 5.95 5.98 T:norx6444v3 5.96 5.99 6.16 T:lakekeyakv1 5.98 6.02 6.04 T:norx6444v2 6.31 6.31 6.32 T:norx3241v3 6.33 6.33 6.33 T:norx3241v2 6.50 6.53 6.54 T:lakekeyakv2 6.87 6.91 7.01 T:norx6461v2 6.96 6.98 7.00 T:norx6461v3 7.06 7.07 7.10 T:norx6444v1 7.66 7.67 7.68 T:norx3241v1 8.10 8.10 8.12 T:norx6461v1 8.28 8.30 8.50 T:tiaoxinv2 8.39 8.40 8.41 T:tiaoxinv1 9.34 9.34 9.34 T:norx3261v3 9.38 9.38 9.40 T:norx3261v2 10.11 10.18 10.18 T:ascon96v1 10.18 10.19 10.20 T:aegis128l 10.19 10.22 10.25 ascon128av12 10.22 10.25 10.26 T:ascon128av11 10.90 10.99 11.08 T:ketjemajorv2 11.45 11.47 11.47 T:norx3261v1 12.48 12.48 12.49 T:aegis128 14.41 14.43 14.44 T:riverkeyakv2 14.82 14.93 14.98 T:ketjeminorv2 15.02 15.02 15.06 T:aegis256 15.24 15.28 15.28 T:ascon128v1 15.24 15.28 15.28 T:ascon128v11 15.16 15.31 15.31 ascon128v12 16.81 16.91 17.11 T:aes128gcmv1 19.72 19.76 19.80 T:aes128otrcv3 19.88 20.17 20.29 T:aes256gcmv1 20.84 20.88 20.92 T:deoxysi128v141 22.67 22.82 23.43 T:oceankeyakv1 23.43 23.45 23.52 T:aes128otrpv3 23.55 23.60 23.63 T:aes128otrsv3 23.55 23.60 23.67 T:aes128otrsv1 23.52 23.67 23.69 T:aes128otrsv2 23.69 23.75 23.82 T:deoxysi256v141 23.89 23.92 24.23 T:aes128otrpv1 24.18 24.34 24.42 T:aes128otrpv2 25.57 25.61 25.77 T:aes256otrcv3 27.35 27.50 27.84 T:seakeyakv1 25.44? 27.62? 29.69? T:aeadaes128ocbtaglen128v1 28.91 28.97 29.02 T:twine80n6t4clocv3 29.36 29.50 29.57 T:aes256otrsv1 29.54 29.58 29.64 T:aes256otrsv2 29.61 29.66 29.90 T:aes256otrpv3 29.78 29.79 29.82 T:aesjambuv1 30.43 30.46 30.50 T:aes256otrpv1 30.53 30.63 30.65 T:aes256otrpv2 30.74 30.77 30.81 T:twine80n6t4clocv2 30.62 30.85 32.78 T:proest256otrv1 32.16 32.29 32.33 T:aes256otrsv3 32.78 32.82 32.85 T:aes128n12clocv1 32.76 32.82 32.88 T:aes128n8t8clocv2 32.84 32.91 32.92 T:aes128n12t8clocv3 33.61 33.94 33.95 T:aes128n12t8clocv2 33.89 33.94 33.97 T:aes128n8clocv1 34.17 34.20 34.22 T:aes128n12t8silcv3 34.18 34.23 34.26 T:aes128n8t8silcv2 34.24 34.27 34.30 T:aes128n12t8silcv2 34.36 34.38 34.44 T:aes128n12silcv1 34.37 34.38 34.41 T:aes128n8silcv1 34.66 34.77 34.83 T:deoxysii128v141 36.05? 38.25? 40.45? T:aeadaes256ocbtaglen128v1 39.68 39.82 39.96 T:deoxysii256v141 60.59 60.66 60.71 T:riverkeyakv1 68.55 69.21 75.49 T:ketjesrv2 68.12 69.23 73.89 T:ketjesrv1 106.76 106.83 107.27 T:proest128otrv1 106.45 107.09 108.40 T:ketjejrv1 112.86 113.03 113.77 T:aezv4 125.88 126.83 126.89 T:present80n6t4silcv3 132.31 132.51 133.77 T:aezv5 151.57 151.70 151.75 T:ketjejrv2 159.13 159.56 160.02 T:deoxysneq128128v1 158.40 160.58 160.89 T:deoxysneq128128v13 218.82 219.19 219.28 T:led80n6t4silcv3 231.77 232.50 250.26 T:deoxysneq256128v13 230.95 232.83 250.53 T:deoxysneq256128v1 232.58 232.87 235.61 T:deoxyseq128128v13 276.79 277.64 277.84 T:aezv3 285.23 286.27 287.13 T:twine80n6clocv1 318.67 318.99 322.12 T:deoxyseq128128v1 352.78 356.85 357.33 T:aezv1 368.65 369.16 377.90 T:deoxyseq256128v13 463.23 465.65 468.19 T:deoxyseq256128v1 671.91 675.01 679.62 T:acorn128 678.97 679.04 679.48 T:acorn128v3 674.12 684.06 687.61 T:acorn128v2 860.74 862.70 870.79 aes256gcmv1 8508.52 8534.95 8565.01 T:led80n6silcv1 8538.34 8538.43 8538.52 T:present80n6t4silcv2 8539.40 8539.51 8539.88 T:present80n6silcv1 8516.69 8604.69 8615.95 T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.53 1.54 1.55 T:morus1280256v2 1.56 1.57 1.58 T:morus1280256v1 1.57 1.57 1.59 T:morus1280128v2 1.70 1.71 1.73 T:morus640128v1 1.70 1.72 1.74 T:morus640128v2 2.12 2.15 2.15 T:morus1280128v1 3.58 3.59 3.60 T:seakeyakv2 3.62 3.70 3.74 T:oceankeyakv2 4.40 4.48 4.53 T:lunarkeyakv2 4.52 4.52 4.55 T:norx6441v3 4.51 4.53 4.55 T:norx6441v2 5.43 5.44 5.46 T:norx6441v1 5.44 5.49 5.53 T:lakekeyakv2 5.62 5.67 5.72 T:lakekeyakv1 5.75 5.77 5.79 T:norx6444v3 5.79 5.81 5.82 T:norx6444v2 6.23 6.23 6.23 T:norx3241v3 6.25 6.26 6.26 T:norx3241v2 6.30 6.31 6.33 T:tiaoxinv2 6.38 6.40 6.42 T:tiaoxinv1 6.68 6.69 6.70 T:norx6461v3 6.80 6.80 6.81 T:norx6461v2 6.93 6.96 7.03 T:norx6444v1 7.72 7.73 7.75 T:norx3241v1 8.02 8.03 8.04 T:norx6461v1 9.31 9.32 9.36 T:norx3261v2 9.39 9.39 9.41 T:norx3261v3 9.33 9.42 10.30 T:ketjemajorv2 10.00 10.04 10.04 T:ascon96v1 10.08 10.09 10.11 T:aegis128l 10.08 10.11 10.11 T:ascon128av11 10.11 10.12 10.15 ascon128av12 10.37 10.37 10.44 T:riverkeyakv2 11.57 11.60 11.61 T:norx3261v1 12.43 12.44 12.45 T:aegis128 12.46 12.51 12.64 T:aes128gcmv1 12.91 12.97 13.02 T:ketjeminorv2 13.98 14.10 14.21 T:aes256gcmv1 14.89 14.91 14.92 T:aegis256 15.09 15.11 15.12 ascon128v12 15.30 15.32 15.32 T:ascon128v1 15.30 15.32 15.32 T:ascon128v11 17.06 17.13 17.38 T:deoxysi128v141 18.96 19.08 19.19 T:deoxysi256v141 19.72 19.74 19.77 T:aes128otrcv3 20.29 20.32 20.33 T:aes128otrsv2 20.25 20.34 20.35 T:aes128otrsv1 21.12 21.24 21.41 T:aes128otrsv3 22.40 22.50 22.74 T:oceankeyakv1 22.90 22.95 23.01 T:aes128otrpv1 22.95 22.97 23.13 T:aes128otrpv2 22.25 23.05 24.60 T:aeadaes128ocbtaglen128v1 23.97 24.00 24.02 T:aes128n12t8clocv2 24.01 24.05 24.07 T:aes128n8clocv1 23.97 24.15 24.15 T:aes128otrpv3 24.36 24.37 24.38 T:aes128n12clocv1 24.39 24.39 24.48 T:aes128n8t8clocv2 24.39 24.41 24.44 T:aes128n12t8clocv3 25.58 25.59 25.59 T:aes128n12t8silcv3 25.58 25.60 25.60 T:aes128n8t8silcv2 25.59 25.60 25.61 T:aes128n12t8silcv2 25.58 25.63 25.79 T:aes256otrcv3 25.63 25.65 25.65 T:aes128n8silcv1 25.55 25.74 26.55 T:aes128n12silcv1 26.13 26.14 26.16 T:aes256otrsv2 26.19 26.21 26.24 T:aes256otrsv1 26.38 26.46 26.65 T:deoxysii128v141 26.99 27.02 27.07 T:aes256otrsv3 26.69 27.03 27.23 T:seakeyakv1 28.82 28.86 28.91 T:twine80n6t4clocv3 28.94 29.06 29.09 T:aes256otrpv1 29.11 29.14 29.17 T:aes256otrpv2 29.30 29.34 29.38 T:deoxysii256v141 29.53 29.55 29.58 T:aesjambuv1 30.08 30.09 30.69 T:twine80n6t4clocv2 30.19 30.27 30.30 T:aes256otrpv3 31.19 31.97 33.50 T:aeadaes256ocbtaglen128v1 31.18 32.36 33.58 T:proest256otrv1 57.63 57.70 57.77 T:riverkeyakv1 62.46 63.02 68.72 T:ketjesrv1 63.77 64.27 70.14 T:ketjesrv2 101.59 102.11 104.23 T:ketjejrv1 106.56 106.87 107.84 T:proest128otrv1 107.84 107.95 108.87 T:aezv4 112.77 113.03 113.08 T:aezv5 114.17 114.68 115.87 T:deoxysneq128128v13 114.35 116.05 116.69 T:deoxysneq128128v1 124.10 124.51 126.75 T:present80n6t4silcv3 150.49 152.99 153.22 T:ketjejrv2 171.92 172.64 174.36 T:deoxyseq128128v13 172.24 174.26 179.79 T:deoxyseq128128v1 182.95 199.81 200.49 T:deoxysneq256128v1 182.53 200.39 200.54 T:deoxysneq256128v13 208.69 208.74 208.87 T:twine80n6clocv1 218.83 219.02 219.28 T:aezv3 218.73 219.50 219.58 T:led80n6t4silcv3 233.13 233.27 233.62 T:aezv1 274.50 275.25 277.36 T:deoxyseq256128v1 275.36 282.03 293.27 T:deoxyseq256128v13 673.17 674.45 678.88 T:acorn128v3 677.00 681.03 683.78 T:acorn128 674.62 683.43 694.84 T:acorn128v2 6381.60 6389.44 6391.00 T:led80n6silcv1 6402.93 6403.24 6403.42 T:present80n6silcv1 6403.34 6403.64 6403.71 T:present80n6t4silcv2 6381.59 6418.91 6426.24 T:led80n6t4silcv2 14631.99 14632.65 14633.84 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.51 1.52 1.54 T:morus1280128v2 1.54 1.55 1.56 T:morus1280256v2 1.54 1.55 1.56 T:morus1280256v1 1.73 1.73 1.74 T:morus640128v1 1.73 1.74 1.75 T:morus640128v2 2.10 2.12 2.17 T:morus1280128v1 3.50 3.56 3.62 T:seakeyakv2 3.62 3.69 3.76 T:oceankeyakv2 4.37 4.54 4.76 T:lunarkeyakv2 4.61 4.62 4.63 T:norx6441v3 4.67 4.69 4.72 T:norx6441v2 5.43 5.43 5.43 T:norx6441v1 5.54 5.56 5.60 T:lakekeyakv2 5.63 5.69 5.77 T:lakekeyakv1 5.78 5.81 5.84 T:norx6444v3 5.81 5.82 5.84 T:norx6444v2 6.23 6.26 6.27 T:norx3241v2 6.26 6.27 6.27 T:norx3241v3 6.81 6.82 6.84 T:norx6461v3 6.85 6.85 6.86 T:norx6461v2 6.94 6.95 6.96 T:norx6444v1 7.04 7.08 7.09 T:tiaoxinv1 7.07 7.12 7.19 T:tiaoxinv2 7.70 7.70 7.71 T:norx3241v1 7.97 7.99 7.99 T:norx6461v1 9.31 9.31 9.36 T:norx3261v3 9.32 9.35 9.36 T:norx3261v2 9.51 9.58 9.66 T:ketjemajorv2 10.09 10.10 10.11 T:aegis128l 10.10 10.10 10.13 ascon128av12 10.09 10.10 10.13 T:ascon128av11 10.05 10.11 10.11 T:ascon96v1 10.50 10.50 10.53 T:riverkeyakv2 11.48 11.50 11.50 T:norx3261v1 12.43 12.45 12.45 T:aegis128 12.45 12.51 12.58 T:aes128gcmv1 13.22 13.26 13.34 T:ketjeminorv2 14.02 14.14 14.20 T:aes256gcmv1 14.92 14.94 14.95 T:aegis256 15.13 15.14 15.14 ascon128v12 15.26 15.28 15.28 T:ascon128v11 15.26 15.28 15.28 T:ascon128v1 19.57 19.62 19.74 T:deoxysi128v141 19.72 19.74 19.77 T:aes128otrcv3 20.51 20.53 20.55 T:aes128otrsv2 20.48 20.54 20.65 T:aes128otrsv1 21.04 21.08 21.13 T:aes128otrsv3 21.85 21.90 22.01 T:deoxysi256v141 22.52 22.56 22.91 T:oceankeyakv1 23.48 23.53 23.57 T:aes128otrpv1 23.65 23.77 23.78 T:aes128otrpv2 23.83 23.85 23.86 T:aes128otrpv3 24.51 24.53 24.57 T:aes128n12t8clocv3 24.51 24.54 24.57 T:aes128n8t8clocv2 24.55 24.57 24.59 T:aes128n12clocv1 24.77 24.80 24.83 T:aes128n12t8clocv2 24.90 24.92 24.97 T:aes128n8clocv1 25.58 25.59 25.59 T:aes128n12t8silcv3 25.58 25.59 25.61 T:aes128n8t8silcv2 25.59 25.61 25.77 T:aes256otrcv3 25.61 25.62 25.63 T:aes128n12t8silcv2 25.58 25.66 26.60 T:aes128n12silcv1 25.66 25.67 25.68 T:aes128n8silcv1 26.35 26.43 26.49 T:deoxysii128v141 26.40 26.44 26.45 T:aes256otrsv2 26.36 26.45 26.73 T:aes256otrsv1 24.17 26.47 26.83 T:aeadaes128ocbtaglen128v1 27.10 27.16 27.36 T:seakeyakv1 27.75 27.77 27.79 T:aes256otrsv3 28.48 28.51 28.79 T:twine80n6t4clocv3 29.12 29.34 29.48 T:deoxysii256v141 29.62 29.65 29.66 T:aesjambuv1 29.66 29.75 29.78 T:aes256otrpv1 29.83 29.86 29.90 T:aes256otrpv2 29.85 29.93 30.03 T:aes256otrpv3 30.31 30.35 30.40 T:twine80n6t4clocv2 31.01 31.11 31.99 T:proest256otrv1 34.00 35.86 36.42 T:aeadaes256ocbtaglen128v1 57.78 57.83 57.85 T:riverkeyakv1 63.74 64.20 69.17 T:ketjesrv1 65.26 65.70 71.48 T:ketjesrv2 101.40 102.20 102.59 T:ketjejrv1 106.77 107.07 108.36 T:proest128otrv1 107.31 107.34 107.68 T:aezv4 112.12 112.62 112.97 T:aezv5 124.70 124.77 125.59 T:present80n6t4silcv3 136.59 136.78 139.49 T:deoxysneq128128v1 137.49 137.68 138.04 T:deoxysneq128128v13 148.28 148.31 148.34 T:ketjejrv2 173.54 173.77 173.81 T:deoxyseq128128v13 208.03 208.12 226.38 T:deoxysneq256128v1 209.56 209.75 210.33 T:twine80n6clocv1 215.69 217.71 219.37 T:deoxyseq128128v1 218.83 219.13 219.47 T:led80n6t4silcv3 219.23 219.73 220.01 T:aezv3 207.29 225.45 225.49 T:deoxysneq256128v13 233.50 233.54 233.94 T:aezv1 275.45 281.71 292.26 T:deoxyseq256128v13 322.52 323.34 326.07 T:deoxyseq256128v1 668.99 669.08 669.31 T:acorn128v3 670.14 674.67 679.17 T:acorn128 673.09 676.00 684.08 T:acorn128v2 6396.30 6400.74 6414.27 T:led80n6t4silcv2 6402.84 6403.19 6403.27 T:present80n6t4silcv2 6403.45 6403.69 6403.94 T:present80n6silcv1 6389.55 6415.04 6456.04 T:led80n6silcv1 14629.33 14630.49 14638.38 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 1.52 1.52 1.53 T:morus1280128v2 1.54 1.54 1.55 T:morus1280256v2 1.55 1.55 1.55 T:morus1280256v1 1.72 1.74 1.74 T:morus640128v1 1.74 1.74 1.75 T:morus640128v2 2.11 2.11 2.17 T:morus1280128v1 3.56 3.60 3.62 T:seakeyakv2 3.70 3.71 3.75 T:oceankeyakv2 4.41 4.61 4.80 T:lunarkeyakv2 4.61 4.62 4.63 T:norx6441v3 4.68 4.69 4.71 T:norx6441v2 5.42 5.42 5.42 T:norx6441v1 5.58 5.59 5.60 T:lakekeyakv2 5.68 5.77 5.84 T:lakekeyakv1 5.79 5.81 5.83 T:norx6444v3 5.84 5.85 5.87 T:norx6444v2 6.23 6.26 6.27 T:norx3241v2 6.26 6.26 6.27 T:norx3241v3 6.80 6.82 6.83 T:norx6461v3 6.84 6.85 6.86 T:norx6461v2 6.97 7.00 7.00 T:norx6444v1 7.05 7.06 7.09 T:tiaoxinv1 7.07 7.09 7.12 T:tiaoxinv2 7.70 7.70 7.70 T:norx3241v1 8.04 8.05 8.05 T:norx6461v1 9.31 9.31 9.32 T:norx3261v3 9.32 9.32 9.35 T:norx3261v2 9.56 9.61 9.69 T:ketjemajorv2 10.06 10.10 10.12 T:ascon96v1 10.10 10.10 10.10 T:aegis128l 10.10 10.11 10.13 T:ascon128av11 10.10 10.12 10.13 ascon128av12 10.54 10.55 10.56 T:riverkeyakv2 11.46 11.46 11.50 T:norx3261v1 12.44 12.44 12.45 T:aegis128 12.49 12.52 12.57 T:aes128gcmv1 13.30 13.36 13.39 T:ketjeminorv2 14.03 14.11 14.20 T:aes256gcmv1 14.93 14.94 14.94 T:aegis256 15.14 15.14 15.14 ascon128v12 15.27 15.28 15.28 T:ascon128v1 15.27 15.28 15.28 T:ascon128v11 19.67 19.69 19.78 T:deoxysi128v141 19.72 19.75 19.79 T:aes128otrcv3 20.52 20.56 20.68 T:aes128otrsv1 20.54 20.56 20.58 T:aes128otrsv2 21.09 21.14 21.16 T:aes128otrsv3 21.92 21.95 21.97 T:deoxysi256v141 22.53 22.59 22.94 T:oceankeyakv1 23.52 23.56 23.61 T:aes128otrpv1 23.69 23.81 23.85 T:aes128otrpv2 23.87 23.88 23.89 T:aes128otrpv3 24.51 24.52 24.58 T:aes128n12t8clocv3 24.54 24.56 24.56 T:aes128n12clocv1 24.52 24.60 24.61 T:aes128n8t8clocv2 24.10 24.76 26.74 T:aeadaes128ocbtaglen128v1 24.78 24.79 24.83 T:aes128n12t8clocv2 24.91 24.93 24.97 T:aes128n8clocv1 25.58 25.59 25.60 T:aes128n12t8silcv3 25.58 25.60 25.62 T:aes128n8t8silcv2 25.59 25.62 25.62 T:aes128n12t8silcv2 25.66 25.67 25.68 T:aes128n8silcv1 25.58 25.67 26.59 T:aes128n12silcv1 25.59 25.69 25.77 T:aes256otrcv3 26.39 26.44 26.49 T:aes256otrsv1 26.36 26.45 26.57 T:deoxysii128v141 26.43 26.47 26.48 T:aes256otrsv2 27.12 27.18 27.39 T:seakeyakv1 27.78 27.82 27.87 T:aes256otrsv3 28.47 28.50 28.84 T:twine80n6t4clocv3 29.15 29.36 29.50 T:deoxysii256v141 29.62 29.64 29.75 T:aesjambuv1 29.70 29.74 29.79 T:aes256otrpv1 29.86 29.90 29.97 T:aes256otrpv2 29.91 29.97 30.06 T:aes256otrpv3 30.25 30.34 30.40 T:twine80n6t4clocv2 30.95 31.10 31.99 T:proest256otrv1 33.95 34.86 36.44 T:aeadaes256ocbtaglen128v1 57.79 57.85 57.89 T:riverkeyakv1 63.80 64.43 69.24 T:ketjesrv1 65.30 65.72 71.50 T:ketjesrv2 101.77 102.23 102.40 T:ketjejrv1 106.97 107.09 108.35 T:proest128otrv1 107.24 107.50 107.68 T:aezv4 112.46 112.57 112.91 T:aezv5 124.71 125.57 125.85 T:present80n6t4silcv3 136.64 136.69 139.50 T:deoxysneq128128v1 137.55 137.70 137.99 T:deoxysneq128128v13 148.33 148.35 148.40 T:ketjejrv2 173.62 173.74 173.91 T:deoxyseq128128v13 207.96 208.09 215.93 T:deoxysneq256128v1 209.35 209.74 210.33 T:twine80n6clocv1 216.03 217.72 219.37 T:deoxyseq128128v1 218.79 219.15 219.55 T:led80n6t4silcv3 219.14 219.25 219.92 T:aezv3 207.33 225.25 225.52 T:deoxysneq256128v13 233.41 233.65 233.92 T:aezv1 275.48 281.73 282.14 T:deoxyseq256128v13 322.52 323.40 326.09 T:deoxyseq256128v1 669.00 669.07 669.31 T:acorn128v3 670.30 674.67 678.90 T:acorn128 671.72 677.73 684.07 T:acorn128v2 861.30 862.02 870.45 aes256gcmv1 6394.54 6400.24 6414.12 T:led80n6t4silcv2 6402.91 6403.24 6403.40 T:present80n6t4silcv2 6403.47 6403.69 6403.85 T:present80n6silcv1 6391.75 6414.42 6456.73 T:led80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.37 1.37 1.37 T:morus1280256v1 1.37 1.38 1.39 T:morus1280128v2 1.36 1.38 1.38 T:morus1280256v2 1.61 1.62 1.64 T:morus640128v2 1.62 1.63 1.64 T:morus640128v1 2.11 2.13 2.13 T:morus1280128v1 2.78 2.83 2.93 T:oceankeyakv2 2.81 2.90 2.95 T:lunarkeyakv2 3.27 3.35 3.38 T:seakeyakv2 4.39 4.42 4.44 T:norx6441v2 4.46 4.46 4.46 T:norx6441v3 4.71 4.76 4.79 T:lakekeyakv2 5.16 5.22 5.29 T:lakekeyakv1 5.36 5.36 5.36 T:norx6441v1 5.67 5.68 5.69 T:norx6444v3 5.70 5.72 5.74 T:norx6444v2 5.71 5.74 5.75 T:tiaoxinv1 5.87 5.88 5.91 T:tiaoxinv2 6.19 6.21 6.23 T:norx3241v3 6.23 6.24 6.25 T:norx3241v2 6.64 6.66 6.67 T:norx6461v3 6.88 6.88 6.90 T:norx6461v2 6.85 6.93 7.04 T:norx6444v1 7.74 7.74 7.78 T:norx3241v1 7.94 7.94 7.94 T:norx6461v1 7.92 8.02 8.09 T:aes256gcmv1 8.08 8.10 8.17 T:aes128gcmv1 8.06? 8.14? 9.06? T:ketjemajorv2 9.20 9.21 9.30 T:norx3261v2 9.20 9.36 9.39 T:riverkeyakv2 9.35 9.36 9.38 T:norx3261v3 9.93 9.99 9.99 T:ascon96v1 9.98 10.00 10.00 T:ascon128av11 10.01 10.02 10.02 T:aegis128l 10.00 10.03 10.06 ascon128av12 11.55 11.56 11.59 T:norx3261v1 11.51 11.57 11.63 T:ketjeminorv2 12.39 12.40 12.41 T:aegis128 14.83 14.85 14.85 T:aegis256 14.93 14.95 14.95 ascon128v12 15.33 15.34 15.34 T:ascon128v1 15.33 15.34 15.34 T:ascon128v11 15.90 15.92 15.93 T:aes128n8clocv1 15.90 15.95 16.00 T:aes128n12t8clocv2 16.23 16.24 16.25 T:aes128n12clocv1 16.25 16.25 16.29 T:aes128n12t8clocv3 16.25 16.26 16.31 T:aes128n8t8clocv2 16.93 16.94 16.97 T:aes128n8silcv1 16.78? 16.95? 18.81? T:aes128n12silcv1 16.97 16.98 16.99 T:aes128n12t8silcv3 16.97 16.98 16.99 T:aes128n8t8silcv2 16.97 16.99 17.00 T:aes128n12t8silcv2 17.38 17.43 17.45 T:deoxysii128v141 17.43 17.44 17.63 T:aes128otrsv1 17.43 17.45 17.46 T:aes128otrsv2 17.40 17.46 17.60 T:deoxysi128v141 18.59 18.63 18.70 T:deoxysii256v141 18.56 18.70 18.98 T:aes128otrsv3 18.65 18.77 18.91 T:deoxysi256v141 19.60 19.69 19.74 T:aes128otrcv3 22.13 22.54 22.93 T:oceankeyakv1 21.01? 23.12? 25.49? T:aeadaes128ocbtaglen128v1 23.12 23.16 23.18 T:aes128otrpv2 23.16 23.19 23.21 T:aes128otrpv1 23.24 23.28 23.32 T:aes256otrsv2 23.27 23.34 23.36 T:aes256otrsv1 23.32 23.34 23.36 T:aes256otrsv3 24.29 24.30 24.32 T:aes128otrpv3 25.60 25.73 25.82 T:aes256otrcv3 26.71 26.84 27.14 T:seakeyakv1 28.23 28.25 28.27 T:twine80n6t4clocv3 29.15 29.17 29.20 T:aes256otrpv1 29.32 29.34 29.42 T:aes256otrpv2 29.47 29.48 29.50 T:aesjambuv1 29.89 29.89 29.89 T:twine80n6t4clocv2 30.16 30.19 30.24 T:aes256otrpv3 30.71? 31.28? 35.35? T:proest256otrv1 30.02? 31.94? 34.40? T:aeadaes256ocbtaglen128v1 54.95 54.99 55.03 T:riverkeyakv1 58.00? 58.62? 64.85? T:ketjesrv1 61.72 62.20 67.80 T:ketjesrv2 91.52 92.13 92.13 T:aezv5 95.79 95.99 98.20 T:ketjejrv1 101.50 101.53 101.55 T:aezv4 107.04 107.38 109.47 T:proest128otrv1 113.84 114.12 114.81 T:deoxyseq128128v13 114.26 114.64 116.14 T:deoxysneq128128v13 113.54 114.95 115.32 T:aezv1 113.27 115.71 119.87 T:deoxyseq128128v1 115.49 115.89 119.24 T:deoxysneq128128v1 124.14 124.29 126.03 T:present80n6t4silcv3 133.04 133.43 133.66 T:twine80n6clocv1 147.00 147.02 147.03 T:ketjejrv2 161.37 161.77 162.47 T:aezv3 182.66 183.39 183.43 T:deoxysneq256128v13 182.80 193.28 200.34 T:deoxyseq256128v13 183.18 195.58 200.54 T:deoxyseq256128v1 183.24 198.24 200.79 T:deoxysneq256128v1 218.33 218.40 219.32 T:led80n6t4silcv3 658.99 659.01 659.55 T:acorn128v3 663.74 667.82 674.39 T:acorn128 658.92 671.79 688.03 T:acorn128v2 861.58 861.95 862.09 aes256gcmv1 4248.07 4252.51 4299.76 T:led80n6t4silcv2 4255.21 4262.38 4265.33 T:led80n6silcv1 4267.87 4267.89 4267.92 T:present80n6t4silcv2 4267.88 4268.05 4268.17 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.29 1.30 1.32 T:morus1280256v2 1.30 1.31 1.33 T:morus1280256v1 1.35 1.36 1.39 T:morus1280128v2 1.61 1.62 1.63 T:morus640128v2 1.62 1.62 1.63 T:morus640128v1 2.11 2.13 2.13 T:morus1280128v1 2.48? 2.87? 3.27? T:lunarkeyakv2 2.78 2.87 2.95 T:oceankeyakv2 3.26 3.35 3.42 T:seakeyakv2 4.45 4.47 4.48 T:norx6441v3 4.51 4.53 4.59 T:norx6441v2 4.73 4.76 4.78 T:lakekeyakv2 5.17 5.24 5.30 T:lakekeyakv1 5.34 5.34 5.35 T:norx6441v1 5.68 5.69 5.70 T:norx6444v2 5.67 5.70 5.70 T:norx6444v3 5.71 5.73 5.76 T:tiaoxinv1 5.87 5.88 5.91 T:tiaoxinv2 6.21 6.21 6.21 T:norx3241v2 6.20 6.21 6.21 T:norx3241v3 6.64 6.66 6.68 T:norx6461v3 6.76 6.78 6.86 T:norx6461v2 6.82 6.88 6.91 T:norx6444v1 7.72 7.74 7.76 T:norx3241v1 7.84 7.85 7.85 T:norx6461v1 7.99 8.07 8.15 T:aes256gcmv1 8.01 8.11 8.17 T:aes128gcmv1 8.11 8.14 8.54 T:ketjemajorv2 9.29 9.29 9.29 T:norx3261v3 9.30 9.30 9.30 T:norx3261v2 9.27 9.32 9.37 T:riverkeyakv2 9.91 9.96 9.99 T:ascon128av11 10.00 10.01 10.02 T:aegis128l 9.94 10.02 10.04 T:ascon96v1 10.00 10.04 10.07 ascon128av12 11.54 11.56 11.61 T:norx3261v1 11.49 11.70 11.81 T:ketjeminorv2 12.39 12.40 12.41 T:aegis128 14.83 14.84 14.85 T:aegis256 14.90 14.91 14.91 ascon128v12 15.31 15.34 15.37 T:ascon128v1 15.31 15.34 15.37 T:ascon128v11 15.90 15.92 15.94 T:aes128n8clocv1 15.87 15.96 15.99 T:aes128n12t8clocv2 16.22 16.25 16.27 T:aes128n12clocv1 16.23 16.26 16.29 T:aes128n12t8clocv3 16.23 16.27 16.31 T:aes128n8t8clocv2 16.79? 16.95? 18.81? T:aes128n12silcv1 16.93 16.96 16.97 T:aes128n8silcv1 16.95 16.98 17.00 T:aes128n12t8silcv3 16.95 16.98 17.00 T:aes128n8t8silcv2 16.96 16.99 17.00 T:aes128n12t8silcv2 17.40 17.43 17.45 T:deoxysii128v141 17.43 17.45 17.62 T:aes128otrsv2 17.42 17.46 17.77 T:aes128otrsv1 17.43 17.47 17.50 T:deoxysi128v141 18.59 18.62 18.76 T:aes128otrsv3 18.61 18.63 18.67 T:deoxysii256v141 18.71 18.77 18.85 T:deoxysi256v141 19.69 19.73 19.83 T:aes128otrcv3 22.13 22.49 22.95 T:oceankeyakv1 23.07 23.10 23.13 T:aes128otrpv1 23.08 23.13 23.15 T:aes128otrpv2 23.29 23.35 23.48 T:aes256otrsv1 23.27 23.35 23.36 T:aes256otrsv3 23.25 23.35 23.38 T:aes256otrsv2 24.29 24.31 24.32 T:aes128otrpv3 21.22? 24.53? 25.76? T:aeadaes128ocbtaglen128v1 25.57 25.65 25.72 T:aes256otrcv3 26.45 26.74 27.14 T:seakeyakv1 28.17 28.23 28.26 T:twine80n6t4clocv3 29.13 29.17 29.21 T:aes256otrpv1 29.30 29.33 29.34 T:aes256otrpv2 29.45 29.46 29.52 T:aesjambuv1 29.85 29.87 29.90 T:twine80n6t4clocv2 30.15 30.20 30.25 T:aes256otrpv3 31.19 31.24 31.38 T:proest256otrv1 30.13? 33.33? 34.69? T:aeadaes256ocbtaglen128v1 54.93 55.00 55.03 T:riverkeyakv1 58.84 59.74 64.76 T:ketjesrv1 61.68 62.26 67.82 T:ketjesrv2 91.56 91.61 92.17 T:aezv5 95.83 96.08 98.16 T:ketjejrv1 101.48 101.52 101.55 T:aezv4 107.08 107.36 109.45 T:proest128otrv1 113.71 114.07 114.87 T:deoxyseq128128v13 114.23 114.42 114.44 T:deoxysneq128128v13 113.68 114.66 114.95 T:aezv1 113.48 115.79 119.71 T:deoxyseq128128v1 114.48 115.85 116.88 T:deoxysneq128128v1 124.16 124.30 126.04 T:present80n6t4silcv3 133.26 133.50 133.53 T:twine80n6clocv1 144.99 145.01 145.05 T:ketjejrv2 162.36 162.39 162.70 T:aezv3 182.16 182.94 183.03 T:deoxysneq256128v13 182.69 183.90 184.08 T:deoxysneq256128v1 182.08 193.25 200.85 T:deoxyseq256128v13 183.16 196.10 200.54 T:deoxyseq256128v1 218.33 219.23 219.27 T:led80n6t4silcv3 658.92 659.01 660.04 T:acorn128v3 668.45 671.28 683.25 T:acorn128v2 665.87 674.27 681.22 T:acorn128 861.28 862.79 870.26 aes256gcmv1 4246.38 4261.45 4278.00 T:led80n6t4silcv2 4267.78 4267.87 4267.96 T:present80n6t4silcv2 4267.83 4268.04 4268.14 T:present80n6silcv1 4248.40 4287.88 4376.54 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.30 1.31 1.32 T:morus1280256v1 1.30 1.31 1.32 T:morus1280256v2 1.36 1.36 1.37 T:morus1280128v2 1.62 1.62 1.63 T:morus640128v2 1.62 1.62 1.63 T:morus640128v1 2.12 2.13 2.13 T:morus1280128v1 2.80 2.85 2.93 T:oceankeyakv2 2.44? 2.86? 3.24? T:lunarkeyakv2 3.30 3.39 3.43 T:seakeyakv2 4.45 4.47 4.49 T:norx6441v3 4.51 4.55 4.60 T:norx6441v2 4.74 4.76 4.77 T:lakekeyakv2 5.13 5.28 5.32 T:lakekeyakv1 5.33 5.33 5.33 T:norx6441v1 5.64 5.68 5.70 T:norx6444v3 5.65 5.69 5.70 T:norx6444v2 5.72 5.74 5.75 T:tiaoxinv1 5.87 5.88 5.90 T:tiaoxinv2 6.21 6.21 6.21 T:norx3241v2 6.20 6.21 6.21 T:norx3241v3 6.64 6.65 6.68 T:norx6461v3 6.76 6.78 6.86 T:norx6461v2 6.82 6.88 6.90 T:norx6444v1 7.72 7.73 7.74 T:norx3241v1 7.99 7.99 7.99 T:norx6461v1 7.98 8.07 8.17 T:aes256gcmv1 7.99 8.11 8.21 T:aes128gcmv1 8.11 8.15 8.54 T:ketjemajorv2 9.29 9.29 9.29 T:norx3261v3 9.30 9.30 9.30 T:norx3261v2 9.28 9.30 9.37 T:riverkeyakv2 9.94 9.96 9.99 T:ascon128av11 10.01 10.01 10.01 T:aegis128l 9.96 10.02 10.03 T:ascon96v1 10.04 10.05 10.07 ascon128av12 11.56 11.57 11.58 T:norx3261v1 11.55 11.77 11.83 T:ketjeminorv2 12.40 12.41 12.41 T:aegis128 14.83 14.84 14.85 T:aegis256 14.91 14.91 15.01 ascon128v12 15.31 15.34 15.34 T:ascon128v1 15.31 15.34 15.34 T:ascon128v11 15.90 15.92 15.94 T:aes128n8clocv1 15.88 15.96 15.99 T:aes128n12t8clocv2 16.22 16.25 16.27 T:aes128n12clocv1 16.23 16.26 16.29 T:aes128n12t8clocv3 16.23 16.27 16.31 T:aes128n8t8clocv2 16.79? 16.95? 18.81? T:aes128n12silcv1 16.93 16.96 16.97 T:aes128n8silcv1 16.95 16.98 17.01 T:aes128n8t8silcv2 16.95 16.98 17.00 T:aes128n12t8silcv3 16.96 16.99 17.01 T:aes128n12t8silcv2 17.40 17.42 17.44 T:deoxysii128v141 17.43 17.44 17.77 T:aes128otrsv1 17.41 17.45 17.50 T:deoxysi128v141 17.44 17.46 17.62 T:aes128otrsv2 18.59 18.63 18.75 T:aes128otrsv3 18.58 18.64 18.75 T:deoxysii256v141 18.58 18.67 18.82 T:deoxysi256v141 19.71 19.75 19.77 T:aes128otrcv3 22.10 22.54 23.08 T:oceankeyakv1 23.07 23.10 23.14 T:aes128otrpv1 23.12 23.14 23.21 T:aes128otrpv2 21.21? 23.28? 25.59? T:aeadaes128ocbtaglen128v1 23.31 23.34 23.48 T:aes256otrsv1 23.26 23.35 23.38 T:aes256otrsv2 23.31 23.35 23.37 T:aes256otrsv3 24.28 24.31 24.33 T:aes128otrpv3 25.58 25.62 25.71 T:aes256otrcv3 26.47 26.77 27.18 T:seakeyakv1 28.18 28.25 28.29 T:twine80n6t4clocv3 29.11 29.17 29.21 T:aes256otrpv1 29.30 29.31 29.34 T:aes256otrpv2 29.45 29.46 29.52 T:aesjambuv1 29.86 29.88 29.90 T:twine80n6t4clocv2 30.16 30.20 30.25 T:aes256otrpv3 31.17 31.26 31.41 T:proest256otrv1 30.61? 32.31? 34.48? T:aeadaes256ocbtaglen128v1 54.95 55.00 55.04 T:riverkeyakv1 58.84 59.67 64.73 T:ketjesrv1 61.68 62.29 67.82 T:ketjesrv2 91.56 91.61 92.09 T:aezv5 95.82 96.03 98.16 T:ketjejrv1 101.48 101.53 101.57 T:aezv4 107.07 107.37 109.45 T:proest128otrv1 114.01 114.10 114.87 T:deoxyseq128128v13 113.63 114.42 114.44 T:deoxysneq128128v13 113.64 114.67 114.96 T:aezv1 113.56 115.79 119.56 T:deoxyseq128128v1 113.99 115.85 116.89 T:deoxysneq128128v1 123.60 124.27 126.06 T:present80n6t4silcv3 133.25 133.44 133.56 T:twine80n6clocv1 144.99 145.01 145.08 T:ketjejrv2 162.27 162.38 162.76 T:aezv3 182.17 182.86 183.05 T:deoxysneq256128v13 182.62 183.88 184.08 T:deoxysneq256128v1 182.08 193.26 200.85 T:deoxyseq256128v13 183.83 195.92 200.27 T:deoxyseq256128v1 218.41 219.24 219.29 T:led80n6t4silcv3 658.94 659.00 659.62 T:acorn128v3 668.46 670.53 682.77 T:acorn128v2 665.85 674.25 681.28 T:acorn128 861.29 862.81 870.24 aes256gcmv1 4246.60 4261.57 4278.72 T:led80n6t4silcv2 4267.80 4267.89 4267.92 T:present80n6t4silcv2 4268.01 4268.07 4268.12 T:present80n6silcv1 4248.23 4287.85 4376.61 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.89 1.89 1.91 T:morus1280256v2 1.90 1.90 1.91 T:morus1280256v1 1.93 1.93 1.95 T:morus1280128v2 1.93 1.93 1.95 T:morus640128v1 1.97 1.97 1.97 T:morus640128v2 2.61 2.63 2.64 T:morus1280128v1 5.25 5.25 5.26 T:seakeyakv2 5.27 5.28 5.28 T:norx6441v2 5.32 5.32 5.33 T:norx6441v3 6.07 6.11 6.13 T:lakekeyakv2 6.15 6.15 6.18 T:norx6441v1 6.77 6.79 6.79 T:norx3241v3 6.80 6.80 6.83 T:norx3241v2 6.78 6.82 6.90 T:lakekeyakv1 6.95 6.97 7.00 T:oceankeyakv2 7.79 7.79 7.84 T:norx6461v3 7.90 7.91 7.94 T:norx6461v2 8.17 8.17 8.21 T:norx3241v1 8.38 8.39 8.42 T:norx6444v3 8.40 8.42 8.43 T:norx6444v2 8.50 8.51 8.52 T:tiaoxinv2 8.59 8.61 8.61 T:tiaoxinv1 9.09 9.09 9.09 T:norx6461v1 9.90 9.93 9.97 T:norx6444v1 10.08 10.08 10.14 T:norx3261v2 10.15 10.15 10.17 T:norx3261v3 10.25 10.26 10.26 T:ascon96v1 10.32 10.32 10.33 T:ascon128av11 10.35 10.36 10.36 ascon128av12 10.96 11.01 11.02 T:riverkeyakv2 11.73 11.75 11.80 T:lunarkeyakv2 11.89 11.90 11.93 T:aegis128l 12.24 12.24 12.28 T:norx3261v1 12.49 12.51 13.33 T:ketjemajorv2 13.56 13.57 13.57 T:aegis128 14.38 14.39 14.44 T:ketjeminorv2 14.94 15.02 15.05 T:aes128gcmv1 15.32 15.32 15.34 ascon128v12 15.55 15.55 15.56 T:ascon128v11 15.55 15.56 15.56 T:ascon128v1 16.68 16.69 16.69 T:aegis256 16.76 16.81 16.85 T:aes256gcmv1 18.29 18.33 18.63 T:deoxysi128v141 20.49 20.52 20.53 T:aes128otrcv3 20.69 20.72 20.85 T:deoxysi256v141 20.94 20.95 20.97 T:aes128otrsv2 20.97 20.97 20.99 T:aes128otrsv1 21.86 21.91 22.11 T:aes128otrsv3 23.55 23.56 23.58 T:aes128otrpv1 23.60 23.61 23.78 T:aes128otrpv2 24.27 24.28 24.31 T:aes128n12t8clocv2 24.35 24.37 24.39 T:aes128n8clocv1 24.66 24.67 24.68 T:aes128n8t8clocv2 24.68 24.69 24.70 T:aes128n12t8clocv3 24.70 24.70 24.71 T:aes128n12clocv1 24.65 24.79 24.82 T:aes128otrpv3 26.01 26.02 26.02 T:aes128n8t8silcv2 26.01 26.02 26.04 T:aes128n12t8silcv2 26.03 26.03 26.03 T:aes128n12t8silcv3 26.13 26.13 26.14 T:aes128n8silcv1 26.13 26.14 26.99 T:aes128n12silcv1 26.59 26.62 26.77 T:aes256otrcv3 26.91 26.92 26.93 T:aes256otrsv2 26.99 27.00 27.02 T:aes256otrsv1 26.51 27.35 27.88 T:aeadaes128ocbtaglen128v1 27.79 27.79 27.84 T:aes256otrsv3 27.97 28.00 28.28 T:deoxysii128v141 29.34 29.35 29.37 T:twine80n6t4clocv3 29.80 29.86 29.92 T:aes256otrpv1 29.93 29.98 30.00 T:aes256otrpv2 30.01 30.02 30.03 T:aesjambuv1 30.65 30.67 31.23 T:twine80n6t4clocv2 31.06 31.11 31.13 T:aes256otrpv3 31.89 31.93 32.00 T:deoxysii256v141 32.76 33.04 33.16 T:seakeyakv1 34.44 34.55 34.83 T:oceankeyakv1 34.41 35.34 36.43 T:proest256otrv1 35.60 36.44 37.02 T:aeadaes256ocbtaglen128v1 59.93 59.98 60.02 T:riverkeyakv1 64.51 64.67 70.01 T:ketjesrv1 66.22 66.25 71.75 T:ketjesrv2 101.32 101.73 102.54 T:aezv4 103.25 103.56 105.61 T:ketjejrv1 106.97 107.31 107.41 T:aezv5 111.27 111.29 112.38 T:proest128otrv1 114.55 114.98 116.18 T:deoxysneq128128v13 115.84 116.06 116.71 T:deoxysneq128128v1 125.66 126.04 128.05 T:present80n6t4silcv3 152.84 155.13 155.13 T:ketjejrv2 174.01 174.12 174.53 T:deoxyseq128128v13 175.26 175.85 188.03 T:deoxyseq128128v1 184.67 194.03 198.60 T:deoxysneq256128v1 184.23 194.15 200.24 T:deoxysneq256128v13 209.37 209.48 209.88 T:twine80n6clocv1 215.75 215.92 216.06 T:aezv3 219.82 219.87 220.17 T:aezv1 220.98 221.26 221.33 T:led80n6t4silcv3 278.29 278.49 295.26 T:deoxyseq256128v1 278.66 278.99 280.88 T:deoxyseq256128v13 754.00 754.39 760.57 T:acorn128v3 763.85 766.32 769.35 T:acorn128 760.85 767.35 777.33 T:acorn128v2 6412.22 6412.57 6412.99 T:led80n6t4silcv2 6417.25 6421.43 6422.25 T:led80n6silcv1 6436.64 6436.69 6436.79 T:present80n6silcv1 6436.92 6436.96 6437.12 T:present80n6t4silcv2 14923.51 14924.15 14924.96 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.89 1.90 1.92 T:morus1280128v2 1.90 1.90 1.91 T:morus1280256v1 1.91 1.91 1.93 T:morus1280256v2 1.97 1.98 1.98 T:morus640128v1 1.99 1.99 2.01 T:morus640128v2 2.59 2.60 2.60 T:morus1280128v1 5.23 5.25 5.31 T:seakeyakv2 5.38 5.39 5.39 T:norx6441v3 5.46 5.47 5.50 T:norx6441v2 6.15 6.15 6.20 T:lakekeyakv2 6.15 6.15 6.15 T:norx6441v1 6.73 6.75 6.82 T:lakekeyakv1 6.80 6.80 6.81 T:norx3241v2 6.80 6.81 6.82 T:norx3241v3 6.96 6.98 7.02 T:oceankeyakv2 7.93 7.93 7.94 T:norx6461v3 7.94 7.95 7.97 T:norx6461v2 8.14 8.15 8.16 T:norx3241v1 8.39 8.41 8.45 T:norx6444v2 8.41 8.42 8.45 T:norx6444v3 9.00 9.00 9.01 T:norx6461v1 9.28 9.29 9.31 T:tiaoxinv1 9.32 9.34 9.41 T:tiaoxinv2 9.91 9.91 9.93 T:norx6444v1 10.10 10.10 10.11 T:norx3261v2 10.12 10.12 10.12 T:norx3261v3 10.31 10.32 10.33 T:ascon96v1 10.35 10.36 10.37 T:ascon128av11 10.35 10.36 10.38 ascon128av12 11.08 11.09 11.12 T:riverkeyakv2 11.90 11.90 11.93 T:aegis128l 11.85 11.93 12.14 T:lunarkeyakv2 12.17 12.17 12.18 T:norx3261v1 12.62 12.66 12.74 T:ketjemajorv2 13.57 13.57 13.57 T:aegis128 14.67 14.71 14.78 T:ketjeminorv2 14.96 14.96 15.04 T:aes128gcmv1 15.37 15.37 15.37 ascon128v12 15.51 15.51 15.51 T:ascon128v1 15.51 15.51 15.51 T:ascon128v11 16.71 16.73 16.73 T:aegis256 16.71 16.76 16.82 T:aes256gcmv1 20.51 20.53 20.57 T:aes128otrcv3 20.77 20.80 20.93 T:deoxysi128v141 21.15 21.15 21.18 T:aes128otrsv2 21.13 21.16 21.27 T:aes128otrsv1 21.76 21.76 21.83 T:aes128otrsv3 23.41 23.45 23.59 T:deoxysi256v141 24.14 24.15 24.26 T:aes128otrpv1 24.36 24.37 24.40 T:aes128otrpv2 24.52 24.54 24.54 T:aes128otrpv3 24.78 24.80 24.84 T:aes128n8t8clocv2 24.82 24.84 24.88 T:aes128n12t8clocv3 24.85 24.86 24.87 T:aes128n12clocv1 25.08 25.09 25.10 T:aes128n12t8clocv2 25.26 25.28 25.31 T:aes128n8clocv1 26.01 26.01 26.04 T:aes128n8t8silcv2 26.03 26.03 26.04 T:aes128n12t8silcv3 26.02 26.04 26.04 T:aes128n12t8silcv2 26.15 26.16 27.02 T:aes128n12silcv1 26.16 26.16 26.18 T:aes128n8silcv1 26.56 26.59 26.74 T:aes256otrcv3 27.15 27.18 27.21 T:aes256otrsv1 27.18 27.20 27.22 T:aes256otrsv2 27.84 27.85 27.95 T:deoxysii128v141 28.52 28.53 28.57 T:aes256otrsv3 28.98 29.01 29.43 T:twine80n6t4clocv3 28.47 29.93 30.30 T:aeadaes128ocbtaglen128v1 30.10 30.13 30.14 T:aesjambuv1 30.50 30.57 30.60 T:aes256otrpv1 30.67 30.68 30.71 T:aes256otrpv2 30.77 30.81 30.85 T:aes256otrpv3 30.89 30.93 30.96 T:twine80n6t4clocv2 31.63 31.64 31.80 T:deoxysii256v141 33.12 33.14 33.32 T:seakeyakv1 34.02 34.06 34.88 T:proest256otrv1 34.59 34.65 34.92 T:oceankeyakv1 38.67 39.39 40.17 T:aeadaes256ocbtaglen128v1 60.13 60.17 60.19 T:riverkeyakv1 65.68 66.01 70.54 T:ketjesrv1 67.61 67.65 72.99 T:ketjesrv2 101.10 101.14 101.45 T:aezv4 103.03 103.66 103.99 T:ketjejrv1 106.53 106.99 107.28 T:aezv5 111.53 111.71 112.90 T:proest128otrv1 126.20 126.23 127.36 T:present80n6t4silcv3 136.97 137.80 138.17 T:deoxysneq128128v1 136.98 138.00 138.80 T:deoxysneq128128v13 150.38 150.41 150.46 T:ketjejrv2 175.38 176.69 177.01 T:deoxyseq128128v13 210.15 210.50 211.01 T:twine80n6clocv1 209.52 210.50 219.71 T:deoxysneq256128v1 216.21 216.78 216.85 T:aezv3 218.10 218.58 222.53 T:deoxyseq128128v1 208.84 219.23 225.16 T:deoxysneq256128v13 220.15 220.21 220.49 T:aezv1 220.74 221.15 221.25 T:led80n6t4silcv3 278.71 278.94 280.54 T:deoxyseq256128v13 326.56 326.74 327.40 T:deoxyseq256128v1 750.06 750.09 750.50 T:acorn128v3 759.01 760.13 767.68 T:acorn128v2 757.69 761.71 764.65 T:acorn128 6412.22 6423.16 6431.12 T:led80n6t4silcv2 6436.59 6436.65 6436.77 T:present80n6t4silcv2 6437.09 6437.24 6437.35 T:present80n6silcv1 6433.60 6441.37 6521.11 T:led80n6silcv1 14921.68 14922.31 14929.53 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.89 1.90 1.90 T:morus1280128v2 1.89 1.90 1.90 T:morus1280256v1 1.91 1.91 1.92 T:morus1280256v2 1.97 1.97 1.97 T:morus640128v1 1.99 1.99 2.00 T:morus640128v2 2.59 2.59 2.60 T:morus1280128v1 5.30 5.30 5.33 T:seakeyakv2 5.38 5.40 5.40 T:norx6441v3 5.47 5.48 5.49 T:norx6441v2 6.13 6.14 6.14 T:norx6441v1 6.19 6.19 6.19 T:lakekeyakv2 6.80 6.80 6.80 T:norx3241v2 6.81 6.81 6.81 T:norx3241v3 6.85 6.86 6.91 T:lakekeyakv1 6.94 6.96 6.99 T:oceankeyakv2 7.91 7.93 7.94 T:norx6461v3 7.94 7.95 7.97 T:norx6461v2 8.08 8.14 8.15 T:norx3241v1 8.45 8.45 8.48 T:norx6444v2 8.46 8.47 8.49 T:norx6444v3 9.06 9.06 9.06 T:norx6461v1 9.26 9.26 9.28 T:tiaoxinv1 9.31 9.31 9.40 T:tiaoxinv2 9.95 9.96 9.97 T:norx6444v1 10.10 10.10 10.10 T:norx3261v2 10.12 10.12 10.12 T:norx3261v3 10.30 10.32 10.33 T:ascon96v1 10.34 10.36 10.37 T:ascon128av11 10.34 10.37 10.38 ascon128av12 11.13 11.13 11.13 T:riverkeyakv2 11.90 11.91 11.91 T:aegis128l 11.87 12.12 12.18 T:lunarkeyakv2 12.17 12.17 12.17 T:norx3261v1 12.69 12.71 12.88 T:ketjemajorv2 13.56 13.57 13.57 T:aegis128 14.76 14.79 14.83 T:ketjeminorv2 14.94 14.97 15.05 T:aes128gcmv1 15.37 15.37 15.37 ascon128v12 15.51 15.51 15.51 T:ascon128v1 15.51 15.51 15.51 T:ascon128v11 16.71 16.72 16.73 T:aegis256 16.71 16.77 16.81 T:aes256gcmv1 20.51 20.52 20.57 T:aes128otrcv3 20.91 20.93 20.97 T:deoxysi128v141 21.16 21.19 21.32 T:aes128otrsv1 21.19 21.20 21.21 T:aes128otrsv2 21.79 21.80 21.86 T:aes128otrsv3 23.56 23.58 23.64 T:deoxysi256v141 24.19 24.21 24.29 T:aes128otrpv1 24.40 24.40 24.44 T:aes128otrpv2 24.56 24.57 24.58 T:aes128otrpv3 24.78 24.78 24.82 T:aes128n8t8clocv2 24.80 24.81 24.82 T:aes128n12t8clocv3 24.85 24.86 24.86 T:aes128n12clocv1 25.08 25.08 25.09 T:aes128n12t8clocv2 25.27 25.28 25.32 T:aes128n8clocv1 26.01 26.02 26.03 T:aes128n8t8silcv2 26.03 26.03 26.03 T:aes128n12t8silcv3 26.01 26.03 26.04 T:aes128n12t8silcv2 26.15 26.16 26.16 T:aes128n8silcv1 26.15 26.17 27.02 T:aes128n12silcv1 26.56 26.57 26.73 T:aes256otrcv3 27.20 27.22 27.25 T:aes256otrsv1 27.22 27.23 27.26 T:aes256otrsv2 27.89 27.91 28.13 T:deoxysii128v141 28.36 28.49 30.06 T:aeadaes128ocbtaglen128v1 28.56 28.58 28.62 T:aes256otrsv3 28.98 29.01 29.44 T:twine80n6t4clocv3 30.09 30.13 30.14 T:aesjambuv1 30.53 30.57 30.63 T:aes256otrpv1 30.72 30.73 30.75 T:aes256otrpv2 30.84 30.86 30.90 T:aes256otrpv3 30.89 30.89 30.96 T:twine80n6t4clocv2 31.70 31.71 31.92 T:deoxysii256v141 33.18 33.19 33.35 T:seakeyakv1 33.99 34.06 34.88 T:proest256otrv1 34.63 34.69 34.97 T:oceankeyakv1 38.43 38.93 40.01 T:aeadaes256ocbtaglen128v1 60.21 60.23 60.32 T:riverkeyakv1 65.73 66.05 70.60 T:ketjesrv1 67.65 67.68 73.01 T:ketjesrv2 101.06 101.10 101.40 T:aezv4 103.12 103.70 104.03 T:ketjejrv1 106.47 107.04 107.21 T:aezv5 111.52 111.70 112.90 T:proest128otrv1 126.22 126.22 127.36 T:present80n6t4silcv3 136.96 137.81 138.20 T:deoxysneq128128v1 137.02 138.05 138.83 T:deoxysneq128128v13 150.42 150.45 150.53 T:ketjejrv2 175.44 176.73 177.20 T:deoxyseq128128v13 209.07 210.49 219.70 T:deoxysneq256128v1 210.30 210.64 211.00 T:twine80n6clocv1 216.16 216.76 216.85 T:aezv3 218.53 218.53 222.58 T:deoxyseq128128v1 208.89 219.27 225.19 T:deoxysneq256128v13 219.94 220.26 220.30 T:aezv1 220.74 221.15 221.49 T:led80n6t4silcv3 278.69 278.75 280.58 T:deoxyseq256128v13 326.40 326.71 327.40 T:deoxyseq256128v1 750.06 750.09 750.34 T:acorn128v3 757.53 760.15 767.72 T:acorn128v2 757.57 761.70 764.63 T:acorn128 1153.45 1153.67 1161.35 aes256gcmv1 6413.52 6430.25 6430.54 T:led80n6t4silcv2 6436.48 6436.54 6436.75 T:present80n6t4silcv2 6437.06 6437.13 6437.26 T:present80n6silcv1 6434.87 6443.18 6474.30 T:led80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.90 6.90 7.27 T:morus640128v1 7.27 7.27 7.45 T:morus640128v2 9.61 9.61 9.66 T:morus1280256v1 10.02 10.02 10.09 T:morus1280256v2 10.09 10.14 10.17 T:morus1280128v2 13.70 13.73 14.03 T:morus1280128v1 15.66 15.66 15.73 T:ascon96v1 15.57 15.69 15.92 T:ascon128av11 15.87 15.92 16.34 ascon128av12 17.27 17.27 17.48 T:norx3241v1 17.61 17.66 17.74 T:norx3241v3 17.74 17.89 17.89 T:norx3241v2 18.02 18.03 18.05 T:norx6441v2 18.75 18.77 18.87 T:norx6441v3 18.77 18.77 18.77 T:norx6441v1 20.45 20.45 20.52 ascon128v12 20.80 20.80 20.91 T:ascon128v1 20.80 20.80 20.91 T:ascon128v11 25.41 25.48 27.11 T:lakekeyakv1 25.64 25.64 26.23 T:norx3261v1 25.77 25.77 25.77 T:norx3261v3 25.84 25.84 25.89 T:norx3261v2 26.39 26.39 26.39 T:norx6461v2 26.64 26.84 26.87 T:norx6461v3 26.90 26.90 26.90 T:norx6461v1 27.02 27.05 28.71 T:lakekeyakv2 26.92 27.57 28.13 T:riverkeyakv2 30.37 30.38 30.65 T:aes128n12t8clocv2 30.51 30.73 30.81 T:aes128n8t8clocv2 31.02 31.05 31.41 T:aes128n12t8clocv3 31.86 31.92 32.23 T:aes128n8clocv1 32.00 32.06 32.30 T:aes128n12clocv1 35.52 35.60 36.21 T:aes128otrsv1 35.52 35.60 35.95 T:aes128otrsv2 35.72 35.72 35.86 T:aes128n8t8silcv2 35.77 35.78 35.91 T:aes128n12t8silcv2 36.27 36.27 36.40 T:aes128n12t8silcv3 37.14 37.15 37.20 T:aes128otrsv3 37.45 37.55 37.66 T:aes128n8silcv1 37.41 37.72 38.82 T:aes128n12silcv1 37.98 38.02 38.84 T:aes128otrcv3 38.07 38.18 38.52 T:aes128otrpv1 38.23 38.37 38.66 T:aes128otrpv2 39.26 39.30 39.75 T:aegis128 39.80 39.86 40.08 T:aes128otrpv3 40.11 40.19 40.29 T:twine80n6t4clocv3 40.51 40.52 40.80 T:aesjambuv1 43.56 43.74 43.80 T:twine80n6t4clocv2 44.68 44.89 45.36 T:aes256otrsv2 44.59 45.00 45.39 T:aes256otrsv1 45.84 45.90 46.23 T:aes256otrsv3 46.96 47.37 50.14 T:ketjeminorv2 48.28 48.35 49.91 T:seakeyakv2 48.40 48.40 49.83 T:aes256otrcv3 48.73 48.80 49.10 T:aes256otrpv2 48.59 48.81 49.03 T:aes256otrpv1 50.25 50.49 50.79 T:aes256otrpv3 53.21 53.25 53.39 T:aegis128l 57.38 57.43 57.88 T:deoxysi128v141 57.43 57.48 57.60 T:aegis256 58.90 58.97 59.15 T:tiaoxinv2 59.08 59.25 59.27 T:tiaoxinv1 61.82 61.99 62.89 T:norx6444v2 62.55 62.64 62.83 T:norx6444v3 72.70 72.82 72.83 T:norx6444v1 74.48 74.79 75.91 T:oceankeyakv2 77.76 78.12 78.30 T:deoxysii128v141 78.68 79.37 79.66 T:aes128gcmv1 82.48 83.87 85.06 T:ketjemajorv2 87.45 87.72 88.41 T:deoxysi256v141 87.55 88.06 88.95 T:aes256gcmv1 102.06 102.40 109.90 T:ketjesrv1 101.94 103.54 109.35 T:proest256otrv1 104.07 104.19 105.16 T:riverkeyakv1 111.40 111.62 119.74 T:ketjesrv2 96.95? 113.38? 129.90? T:aeadaes128ocbtaglen128v1 115.75 116.94 118.42 T:aezv4 111.09? 128.90? 143.88? T:aeadaes256ocbtaglen128v1 129.29 129.62 130.61 T:deoxysneq128128v13 129.69 130.14 133.55 T:deoxysneq128128v1 131.11 131.61 133.32 T:aezv5 135.55 136.80 139.50 T:ketjejrv1 158.45 159.02 159.11 T:present80n6t4silcv3 187.52 187.99 188.53 T:lunarkeyakv2 204.66 204.88 211.54 T:deoxyseq128128v1 202.18 205.09 205.19 T:ketjejrv2 206.94 207.18 207.40 T:deoxysneq256128v13 207.73 207.93 223.80 T:deoxysneq256128v1 217.05 217.18 219.08 T:proest128otrv1 217.04 217.43 217.73 T:deoxyseq128128v13 220.03 220.61 220.91 T:aezv1 221.83 222.38 222.93 T:deoxysii256v141 225.66 225.80 231.38 T:twine80n6clocv1 249.19 250.99 252.40 T:seakeyakv1 262.09 262.39 263.23 T:led80n6t4silcv3 299.93 300.62 302.54 T:aezv3 326.62 340.16 350.80 T:deoxyseq256128v1 345.03 345.61 352.25 T:deoxyseq256128v13 374.16 377.70 378.02 T:oceankeyakv1 2627.81 2627.91 2628.35 T:acorn128v3 2647.37 2699.59 2739.02 T:acorn128v2 2728.51 2746.77 2763.05 T:acorn128 7131.26 7140.81 7150.42 T:led80n6silcv1 7077.66 7154.91 7160.97 T:led80n6t4silcv2 7204.45 7204.79 7205.14 T:present80n6t4silcv2 7205.59 7205.88 7212.09 T:present80n6silcv1 21624.88 21626.34 21631.31 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 7.25 7.41 7.75 T:morus640128v1 7.92 8.10 8.27 T:morus640128v2 9.88 9.93 10.14 T:morus1280256v1 10.30 10.34 10.51 T:morus1280256v2 10.39 10.39 10.55 T:morus1280128v2 13.60 13.61 13.77 T:morus1280128v1 15.74 15.83 16.05 T:ascon128av11 15.80 15.88 16.13 T:ascon96v1 15.84 16.09 16.26 ascon128av12 17.44 17.50 17.63 T:norx3241v2 17.47 17.59 17.73 T:norx3241v1 17.64 17.75 17.76 T:norx3241v3 17.97 17.97 18.02 T:norx6441v1 18.45 18.55 18.55 T:norx6441v3 18.62 18.77 18.82 T:norx6441v2 20.71 20.71 21.03 T:ascon128v1 20.71 20.71 21.16 T:ascon128v11 20.83 20.83 20.98 ascon128v12 25.11 25.12 26.21 T:lakekeyakv1 25.74 25.74 25.95 T:norx3261v3 25.80 25.80 26.00 T:norx3261v2 25.81 26.14 26.14 T:norx3261v1 26.17 26.17 26.45 T:norx6461v2 26.54 26.54 26.54 T:norx6461v1 26.88 26.95 26.98 T:norx6461v3 26.82 27.08 27.72 T:riverkeyakv2 27.08 27.12 27.88 T:lakekeyakv2 30.80 30.84 31.30 T:aes128n8t8clocv2 31.19 31.30 31.42 T:aes128n12t8clocv3 31.31 31.41 31.89 T:aes128n12t8clocv2 32.27 32.30 32.38 T:aes128n12clocv1 32.98 33.17 33.44 T:aes128n8clocv1 35.56 35.67 35.95 T:aes128otrsv1 35.55 35.82 35.95 T:aes128otrsv2 35.81 35.84 36.45 T:aes128n8t8silcv2 35.84 35.88 36.26 T:aes128n12t8silcv2 36.30 36.41 36.96 T:aes128n12t8silcv3 37.45 37.52 37.80 T:aes128n8silcv1 37.39 37.54 37.70 T:aes128otrsv3 37.48 37.93 38.88 T:aes128n12silcv1 38.16 38.18 38.33 T:aes128otrcv3 38.70 39.02 39.21 T:aes128otrpv1 39.10 39.16 39.32 T:aes128otrpv2 39.27 39.30 39.78 T:aegis128 39.82 40.05 40.46 T:twine80n6t4clocv3 40.16 40.23 40.38 T:aes128otrpv3 40.84 40.93 41.56 T:aesjambuv1 43.74 43.84 44.07 T:twine80n6t4clocv2 44.77 44.82 45.09 T:aes256otrsv2 44.91 44.98 45.30 T:aes256otrsv1 46.43 46.51 46.62 T:aes256otrsv3 47.34 47.51 49.45 T:ketjeminorv2 48.30 48.40 48.76 T:aes256otrcv3 48.46 48.97 50.44 T:seakeyakv2 49.35 49.49 49.84 T:aes256otrpv1 49.46 49.54 49.77 T:aes256otrpv2 50.66 50.83 50.99 T:aes256otrpv3 53.42 53.42 53.42 T:aegis128l 57.69 57.77 57.80 T:aegis256 60.12 60.15 60.30 T:tiaoxinv1 60.69 60.70 60.89 T:tiaoxinv2 62.34 62.48 62.63 T:norx6444v2 63.25 63.28 63.76 T:norx6444v3 63.85 64.18 64.37 T:deoxysi128v141 72.82 73.09 73.23 T:norx6444v1 74.41 74.55 76.15 T:oceankeyakv2 78.19 78.22 78.46 T:deoxysii128v141 77.80 78.52 79.48 T:aes128gcmv1 83.13 83.46 84.30 T:ketjemajorv2 86.76 87.09 87.95 T:aes256gcmv1 95.52 95.98 96.31 T:deoxysi256v141 102.41 103.11 105.19 T:proest256otrv1 104.34 104.43 104.98 T:riverkeyakv1 103.52 104.60 111.38 T:ketjesrv1 111.50 112.05 119.56 T:ketjesrv2 115.09 115.27 116.05 T:aezv4 100.38? 120.89? 134.45? T:aeadaes128ocbtaglen128v1 130.23 131.11 131.88 T:aezv5 116.07? 136.03? 149.69? T:aeadaes256ocbtaglen128v1 136.00 136.70 138.37 T:ketjejrv1 152.30 152.76 154.18 T:deoxysneq128128v1 152.88 153.48 153.77 T:deoxysneq128128v13 158.56 158.64 159.47 T:present80n6t4silcv3 188.59 189.66 193.62 T:lunarkeyakv2 198.96 199.22 199.31 T:ketjejrv2 217.10 218.46 218.80 T:deoxyseq128128v13 218.05 218.62 220.15 T:proest128otrv1 221.27 222.02 222.20 T:deoxysii256v141 225.75 226.16 226.55 T:aezv1 226.79 227.56 227.82 T:twine80n6clocv1 232.16 232.25 232.75 T:deoxysneq256128v13 232.18 232.76 233.88 T:deoxysneq256128v1 246.66 246.91 250.64 T:deoxyseq128128v1 248.20 250.31 252.70 T:seakeyakv1 261.83 262.39 263.12 T:led80n6t4silcv3 300.25 301.26 302.02 T:aezv3 345.23 346.04 350.35 T:deoxyseq256128v13 374.34 377.84 378.02 T:oceankeyakv1 373.85 389.01 399.48 T:deoxyseq256128v1 2613.75 2614.19 2614.54 T:acorn128v3 2683.26 2702.06 2726.61 T:acorn128v2 2719.69 2763.07 2763.74 T:acorn128 7088.66 7150.19 7173.98 T:led80n6t4silcv2 7163.59 7165.54 7207.82 T:led80n6silcv1 7204.47 7204.62 7204.75 T:present80n6t4silcv2 7206.03 7206.31 7208.09 T:present80n6silcv1 21625.88 21631.61 21633.98 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 7.24 7.25 7.41 T:morus640128v1 7.91 7.92 7.92 T:morus640128v2 9.86 9.91 9.93 T:morus1280256v1 10.30 10.34 10.48 T:morus1280256v2 10.39 10.39 10.41 T:morus1280128v2 13.60 13.61 13.61 T:morus1280128v1 15.74 15.74 16.17 T:ascon128av11 15.70 15.77 16.20 T:ascon96v1 15.84 15.91 16.11 ascon128av12 17.44 17.44 17.50 T:norx3241v2 17.52 17.59 17.59 T:norx3241v1 17.58 17.64 17.76 T:norx3241v3 18.01 18.01 18.01 T:norx6441v1 18.45 18.45 18.67 T:norx6441v3 18.57 18.59 18.67 T:norx6441v2 20.66 20.66 21.10 T:ascon128v1 20.66 20.66 21.10 T:ascon128v11 20.70 20.70 20.80 ascon128v12 25.37 25.46 25.72 T:lakekeyakv1 25.74 25.74 25.74 T:norx3261v3 25.80 25.80 25.80 T:norx3261v2 25.81 25.81 26.14 T:norx3261v1 26.17 26.45 26.45 T:norx6461v2 26.53 26.53 26.62 T:norx6461v1 26.89 26.89 27.05 T:norx6461v3 27.24 27.27 27.52 T:lakekeyakv2 27.16 27.57 28.16 T:riverkeyakv2 30.71 30.73 31.12 T:aes128n8t8clocv2 31.06 31.27 31.47 T:aes128n12t8clocv3 31.17 31.30 31.70 T:aes128n12t8clocv2 32.13 32.19 32.57 T:aes128n12clocv1 33.20 33.23 33.27 T:aes128n8clocv1 35.70 35.71 36.12 T:aes128n8t8silcv2 35.73 35.78 36.17 T:aes128n12t8silcv2 35.82 35.95 36.31 T:aes128otrsv1 35.80 36.07 36.15 T:aes128otrsv2 36.20 36.29 36.59 T:aes128n12t8silcv3 37.38 37.43 37.80 T:aes128n8silcv1 37.49 37.65 37.82 T:aes128otrsv3 37.37 37.73 38.80 T:aes128n12silcv1 38.16 38.16 38.21 T:aes128otrcv3 39.23 39.28 39.32 T:aegis128 39.27 39.35 39.45 T:aes128otrpv2 39.27 39.55 39.81 T:aes128otrpv1 39.98 40.05 40.09 T:twine80n6t4clocv3 40.38 40.43 40.57 T:aes128otrpv3 40.84 40.91 41.14 T:aesjambuv1 43.79 43.99 44.09 T:twine80n6t4clocv2 45.02 45.07 45.34 T:aes256otrsv2 45.16 45.23 45.52 T:aes256otrsv1 46.65 46.77 46.91 T:aes256otrsv3 47.48 47.71 49.85 T:ketjeminorv2 48.28 48.41 48.55 T:aes256otrcv3 48.48 48.84 49.75 T:seakeyakv2 49.64 49.76 49.80 T:aes256otrpv2 49.83 49.96 50.26 T:aes256otrpv1 50.88 50.99 51.25 T:aes256otrpv3 53.41 53.42 53.43 T:aegis128l 57.57 57.66 57.67 T:aegis256 59.82 59.87 59.91 T:tiaoxinv1 60.46 60.49 60.60 T:tiaoxinv2 62.54 62.55 63.15 T:norx6444v2 63.46 63.49 63.98 T:norx6444v3 63.92 64.35 64.63 T:deoxysi128v141 73.27 73.30 73.43 T:norx6444v1 74.55 74.79 75.13 T:oceankeyakv2 78.05 78.30 78.36 T:deoxysii128v141 77.98 78.71 79.18 T:aes128gcmv1 83.12 83.85 85.00 T:ketjemajorv2 86.70 87.12 87.87 T:aes256gcmv1 95.66 96.20 96.49 T:deoxysi256v141 98.84 98.96 101.63 T:proest256otrv1 103.05 104.17 110.62 T:ketjesrv1 104.55 104.64 104.84 T:riverkeyakv1 111.44 112.32 119.62 T:ketjesrv2 114.95 115.13 115.88 T:aezv4 100.39? 120.19? 135.95? T:aeadaes128ocbtaglen128v1 129.99 130.54 131.63 T:aezv5 115.88? 135.44? 150.23? T:aeadaes256ocbtaglen128v1 135.62 136.88 138.37 T:ketjejrv1 152.32 152.81 154.05 T:deoxysneq128128v1 152.81 153.04 153.73 T:deoxysneq128128v13 158.75 158.79 159.40 T:present80n6t4silcv3 188.73 189.48 194.52 T:lunarkeyakv2 199.16 199.42 199.66 T:ketjejrv2 218.05 218.20 220.07 T:proest128otrv1 217.06 218.55 218.95 T:deoxyseq128128v13 221.36 221.88 222.34 T:deoxysii256v141 225.48 225.95 226.24 T:aezv1 226.54 227.52 228.45 T:twine80n6clocv1 232.23 232.36 232.77 T:deoxysneq256128v13 232.19 232.92 233.84 T:deoxysneq256128v1 246.38 246.86 251.17 T:deoxyseq128128v1 248.40 251.31 252.81 T:seakeyakv1 261.78 262.42 262.69 T:led80n6t4silcv3 300.57 300.91 301.85 T:aezv3 345.38 345.69 350.45 T:deoxyseq256128v13 375.05 378.02 378.72 T:oceankeyakv1 372.70 389.02 399.54 T:deoxyseq256128v1 2613.83 2613.85 2614.73 T:acorn128v3 2682.47 2702.06 2726.69 T:acorn128v2 2719.52 2763.07 2763.74 T:acorn128 7103.48 7146.95 7159.35 T:led80n6t4silcv2 7155.45 7156.03 7215.06 T:led80n6silcv1 7204.51 7204.70 7205.02 T:present80n6t4silcv2 7205.91 7206.20 7208.30 T:present80n6silcv1 7855.71 7856.75 7864.16 aes256gcmv1