VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, E cores; 8 x 700MHz; meteor,little, supercop-20261018

[Page version: 20261103 15:52:22]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.22 0.22 0.23 T:tiaoxinv2 0.22 0.22 0.23 T:tiaoxinv1 0.24 0.25 0.26 aegis128l 0.37 0.38 0.39 T:aegis128 0.41 0.42 0.43 aegis256 0.42 0.43 0.43 T:aezv4 0.43 0.43 0.44 T:aezv3 0.46 0.46 0.47 T:aeadaes128ocbtaglen128v1 0.46 0.47 0.48 T:aezv5 0.51 0.51 0.52 T:aes128otrcv3 0.53 0.53 0.54 T:aes128otrsv3 0.52 0.54 0.55 T:aes128otrpv3 0.33? 0.56? 0.81? T:aeadaes192ocbtaglen128v1 0.58 0.59 0.60 T:aeadaes256ocbtaglen128v1 0.66 0.67 0.68 T:aes256otrcv3 0.67 0.67 0.68 T:aes256otrsv3 0.68 0.68 0.70 T:aes256otrpv3 0.81 0.81 0.82 T:deoxysi128v141 0.85 0.86 0.87 T:deoxysneq128128v1 0.90 0.91 0.92 T:deoxysi256v141 0.91 0.92 0.93 T:aes128gcmv1 0.95 0.96 0.98 T:deoxysneq256128v1 0.96 0.97 0.98 T:morus1280256v2 0.97 0.97 0.98 T:morus1280256v1 0.97 0.98 0.99 T:morus1280128v1 0.98 0.99 1.01 T:morus1280128v2 1.07 1.07 1.08 aes256gcmv1 1.08 1.11 1.13 T:morus640128v2 1.13 1.15 1.17 T:morus640128v1 1.60 1.62 1.63 T:deoxysii128v141 1.74 1.75 1.76 T:colm0v1 1.79 1.80 1.82 T:deoxyseq128128v1 1.81 1.82 1.84 T:deoxysii256v141 1.96 2.03 2.11 T:lunarkeyakv2 2.04 2.06 2.07 T:deoxyseq256128v1 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.13 T:aes128n12t8clocv2 2.12 2.13 2.13 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n8t8clocv2 2.12 2.13 2.13 T:aes128n12t8silcv3 2.29 2.32 2.35 T:norx6444v3 2.55 2.59 2.64 T:norx6441v2 2.59 2.66 2.70 T:norx6441v3 2.68 2.70 2.72 T:seakeyakv2 2.71 2.75 2.78 T:oceankeyakv2 3.03 3.04 3.06 T:lakekeyakv1 3.10 3.14 3.16 T:norx6441v1 3.17 3.18 3.20 T:lakekeyakv2 3.38 3.40 3.43 T:norx6444v2 3.72 3.79 3.86 T:norx3241v3 3.76 3.83 3.89 T:norx3241v2 3.79 3.83 3.86 T:norx6444v1 3.84 3.88 3.92 T:norx6461v2 3.85 3.89 3.94 T:norx6461v3 4.23 4.24 4.25 T:aesjambuv1 4.53 4.61 4.70 T:norx3241v1 4.66 4.71 4.75 T:norx6461v1 4.87 4.90 5.02 T:acorn128v2 5.25 5.28 5.52 T:acorn128v3 5.55 5.65 5.72 T:ketjemajorv2 5.76 5.81 5.87 T:norx3261v3 5.82 5.90 5.98 T:norx3261v2 6.20 6.21 6.23 ascon128av12 6.32 6.34 6.36 T:ascon96v1 6.33 6.35 6.38 T:ascon128av11 7.08 7.11 7.17 T:ketjeminorv2 7.18 7.22 7.28 T:riverkeyakv2 7.37 7.40 7.44 T:norx3261v1 9.07 9.11 9.20 T:ascon128v1 9.09 9.15 9.17 T:ascon128v11 9.23 9.26 9.27 ascon128v12 11.75 11.78 11.80 T:aes128otrpv1 11.77 11.79 11.81 T:aes128otrpv2 12.25 12.29 12.32 T:aes128otrsv2 12.28 12.31 12.35 T:aes128otrsv1 14.51 14.52 14.54 T:twine80n6t4clocv3 15.27 15.29 15.31 T:aes256otrpv1 15.27 15.29 15.31 T:aes256otrpv2 15.39 15.41 15.44 T:aes256otrsv1 15.41 15.44 15.47 T:aes256otrsv2 15.49 15.56 15.62 T:twine80n6t4clocv2 18.97 19.20 19.22 T:proest256otrv1 20.43 20.46 20.48 T:aes128n12clocv1 20.43 20.46 20.49 T:aes128n8clocv1 22.41 22.43 22.46 T:aeadaes128ocbtaglen64v1 22.41 22.44 22.48 T:aeadaes128ocbtaglen96v1 26.56 26.59 26.62 T:aeadaes192ocbtaglen64v1 26.57 26.60 26.62 T:aeadaes192ocbtaglen96v1 26.71 26.86 27.19 T:ketjesrv2 26.86 26.92 27.07 T:ketjesrv1 30.80 30.83 30.86 T:aeadaes256ocbtaglen96v1 30.81 30.85 30.89 T:aeadaes256ocbtaglen64v1 43.66 43.69 43.74 T:proest128otrv1 48.05 48.16 48.28 T:ketjejrv1 48.33 48.39 48.44 T:colm127v1 63.41 63.70 63.95 T:deoxysneq128128v13 68.57 68.68 68.78 T:ketjejrv2 70.86 71.04 71.17 T:present80n6t4silcv3 104.10 104.29 105.04 T:deoxysneq256128v13 125.38 125.61 127.82 T:deoxyseq128128v13 126.25 126.29 126.36 T:led80n6t4silcv3 128.13 135.78 136.15 T:aezv1 205.74 206.08 208.21 T:deoxyseq256128v13 416.99 417.22 417.62 T:acorn128 3539.42 3555.67 3581.40 T:led80n6silcv1 3554.04 3558.66 3566.83 T:led80n6t4silcv2 3796.34 3798.31 3803.62 T:present80n6t4silcv2 3795.04 3799.24 3800.73 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.25 0.26 0.27 aegis128l 0.33 0.34 0.35 T:tiaoxinv1 0.33 0.34 0.35 T:tiaoxinv2 0.39 0.40 0.41 T:aegis128 0.41 0.41 0.42 aegis256 0.42 0.42 0.43 T:aezv4 0.42 0.43 0.44 T:aezv3 0.46 0.47 0.48 T:aezv5 0.47 0.48 0.50 T:aeadaes128ocbtaglen128v1 0.54 0.55 0.57 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.56 0.57 0.57 T:aes128otrsv3 0.34? 0.59? 0.73? T:aeadaes192ocbtaglen128v1 0.64 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.71 T:aes256otrpv3 0.70 0.71 0.71 T:aes256otrsv3 0.70 0.71 0.72 T:aes256otrcv3 0.87 0.89 0.89 T:deoxysi128v141 0.93 0.94 0.96 T:deoxysneq128128v1 0.94 0.96 0.96 T:aes128gcmv1 0.95 0.96 0.97 T:morus1280128v2 0.97 0.97 0.98 T:morus1280128v1 0.97 0.98 0.99 T:morus1280256v2 0.97 0.98 0.99 T:morus1280256v1 0.97 0.98 1.00 T:deoxysi256v141 1.06 1.07 1.08 T:deoxysneq256128v1 1.10 1.13 1.16 T:morus640128v2 1.11 1.13 1.15 T:morus640128v1 1.15 1.16 1.18 aes256gcmv1 1.59 1.60 1.62 T:deoxysii128v141 1.81 1.82 1.83 T:deoxysii256v141 1.82 1.84 1.86 T:colm0v1 1.83 1.84 1.85 T:deoxyseq128128v1 2.04 2.05 2.07 T:deoxyseq256128v1 2.05 2.06 2.08 T:aes128n12t8silcv2 2.06 2.06 2.06 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128n12t8clocv2 2.05 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.03 2.09 2.16 T:lunarkeyakv2 2.28 2.32 2.35 T:norx6444v3 2.47 2.53 2.55 T:norx6441v3 2.51 2.56 2.60 T:norx6441v2 2.75 2.76 2.78 T:seakeyakv2 2.78 2.82 2.85 T:oceankeyakv2 3.01 3.05 3.09 T:norx6441v1 3.06 3.08 3.11 T:lakekeyakv1 3.17 3.19 3.21 T:lakekeyakv2 3.38 3.40 3.45 T:norx6444v2 3.64 3.70 3.75 T:norx3241v3 3.70 3.75 3.80 T:norx3241v2 3.80 3.84 3.86 T:norx6444v1 3.83 3.86 3.89 T:norx6461v2 3.82 3.87 3.91 T:norx6461v3 4.36 4.42 4.50 T:norx3241v1 4.56 4.56 4.57 T:aesjambuv1 4.54 4.59 4.62 T:norx6461v1 4.90 5.11 5.28 T:acorn128v3 5.24 5.42 5.53 T:acorn128v2 5.52 5.57 5.62 T:ketjemajorv2 5.71 5.75 5.82 T:norx3261v3 5.76 5.81 5.88 T:norx3261v2 6.17 6.19 6.21 ascon128av12 6.27 6.29 6.32 T:ascon96v1 6.28 6.30 6.31 T:ascon128av11 7.22 7.25 7.28 T:norx3261v1 7.29 7.40 7.43 T:ketjeminorv2 7.36 7.40 7.44 T:riverkeyakv2 8.96 9.05 9.12 T:ascon128v1 9.10 9.13 9.15 T:ascon128v11 9.20 9.22 9.23 ascon128v12 11.90 11.96 11.99 T:aes128otrpv1 11.93 12.07 12.16 T:aes128otrpv2 12.52 12.56 12.59 T:aes128otrsv2 12.57 12.61 12.65 T:aes128otrsv1 14.51 14.53 14.54 T:twine80n6t4clocv3 15.41 15.44 15.48 T:aes256otrpv2 15.41 15.48 15.52 T:aes256otrpv1 15.55 15.57 15.61 T:twine80n6t4clocv2 15.65 15.69 15.72 T:aes256otrsv1 15.71 15.75 15.80 T:aes256otrsv2 18.90 19.14 19.21 T:proest256otrv1 21.15 21.19 21.23 T:aes128n12clocv1 21.18 21.22 21.25 T:aes128n8clocv1 27.66 27.72 27.77 T:ketjesrv2 27.58 27.80 28.26 T:ketjesrv1 30.44 30.46 30.49 T:aeadaes128ocbtaglen64v1 30.46 30.49 30.52 T:aeadaes128ocbtaglen96v1 36.37 36.40 36.43 T:aeadaes192ocbtaglen96v1 36.38 36.41 36.45 T:aeadaes192ocbtaglen64v1 42.36 42.39 42.44 T:aeadaes256ocbtaglen96v1 42.29 42.41 42.45 T:aeadaes256ocbtaglen64v1 42.69 42.76 42.84 T:proest128otrv1 47.52 47.96 48.39 T:ketjejrv1 64.40 64.48 64.58 T:colm127v1 69.72 69.82 69.96 T:ketjejrv2 70.81 70.97 71.03 T:present80n6t4silcv3 86.64 87.07 87.43 T:deoxysneq128128v13 125.69 125.78 126.10 T:deoxyseq128128v13 125.98 126.03 126.12 T:led80n6t4silcv3 130.77 131.05 131.97 T:deoxysneq256128v13 128.31 135.91 136.26 T:aezv1 205.74 206.00 208.12 T:deoxyseq256128v13 404.26 405.04 405.40 T:acorn128 3554.24 3555.98 3563.50 T:led80n6t4silcv2 3547.11 3557.55 3591.21 T:led80n6silcv1 3795.82 3797.63 3804.55 T:present80n6t4silcv2 3796.23 3798.95 3799.80 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.15 0.16 0.16 T:aezv4 0.16 0.16 0.16 T:aezv3 0.18 0.18 0.19 T:aezv5 0.26 0.27 0.28 aegis128l 0.33 0.34 0.35 T:tiaoxinv1 0.33 0.34 0.35 T:tiaoxinv2 0.39 0.40 0.41 T:aegis128 0.46 0.47 0.47 aegis256 0.48 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.57 0.57 0.58 T:aes128otrsv3 0.46? 0.59? 0.84? T:aeadaes192ocbtaglen128v1 0.64 0.65 0.65 T:aeadaes256ocbtaglen128v1 0.70 0.70 0.71 T:aes256otrpv3 0.71 0.71 0.72 T:aes256otrcv3 0.71 0.72 0.73 T:aes256otrsv3 0.88 0.89 0.90 T:deoxysi128v141 0.93 0.94 0.95 T:deoxysneq128128v1 0.95 0.96 0.97 T:aes128gcmv1 0.95 0.96 0.97 T:morus1280128v2 0.97 0.97 0.98 T:morus1280128v1 0.97 0.98 0.99 T:morus1280256v1 0.97 0.98 0.99 T:morus1280256v2 0.97 0.98 1.00 T:deoxysi256v141 1.06 1.07 1.08 T:deoxysneq256128v1 1.11 1.14 1.15 T:morus640128v1 1.11 1.15 1.17 T:morus640128v2 1.16 1.16 1.17 aes256gcmv1 1.59 1.60 1.62 T:deoxysii128v141 1.81 1.82 1.83 T:deoxysii256v141 1.82 1.83 1.84 T:colm0v1 1.84 1.85 1.86 T:deoxyseq128128v1 2.04 2.06 2.07 T:deoxyseq256128v1 2.06 2.06 2.06 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128n12t8clocv3 2.05 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.08 T:aes128n8t8clocv2 2.05 2.12 2.20 T:lunarkeyakv2 2.27 2.30 2.33 T:norx6444v3 2.45 2.49 2.53 T:norx6441v3 2.52 2.55 2.60 T:norx6441v2 2.79 2.80 2.82 T:seakeyakv2 2.82 2.85 2.87 T:oceankeyakv2 3.02 3.06 3.09 T:norx6441v1 3.08 3.10 3.13 T:lakekeyakv1 3.20 3.21 3.22 T:lakekeyakv2 3.42 3.44 3.46 T:norx6444v2 3.67 3.71 3.76 T:norx3241v2 3.67 3.73 3.78 T:norx3241v3 3.82 3.86 3.91 T:norx6461v3 3.81 3.87 3.92 T:norx6461v2 3.82 3.87 3.90 T:norx6444v1 4.40 4.46 4.50 T:norx3241v1 4.56 4.56 4.57 T:aesjambuv1 4.53 4.58 4.62 T:norx6461v1 4.91 5.11 5.27 T:acorn128v3 5.24 5.42 5.53 T:acorn128v2 5.55 5.59 5.67 T:ketjemajorv2 5.71 5.76 5.81 T:norx3261v3 5.78 5.83 5.90 T:norx3261v2 6.17 6.19 6.21 ascon128av12 6.27 6.29 6.32 T:ascon128av11 6.27 6.30 6.32 T:ascon96v1 7.23 7.26 7.29 T:norx3261v1 7.39 7.42 7.46 T:riverkeyakv2 7.33 7.43 7.48 T:ketjeminorv2 9.10 9.12 9.14 T:ascon128v11 9.02 9.12 9.18 T:ascon128v1 9.21 9.22 9.23 ascon128v12 11.90 11.93 11.95 T:aes128otrpv1 11.98 12.03 12.19 T:aes128otrpv2 12.57 12.60 12.63 T:aes128otrsv2 12.59 12.64 12.68 T:aes128otrsv1 14.51 14.53 14.55 T:twine80n6t4clocv3 15.42 15.49 15.54 T:aes256otrpv1 15.56 15.59 15.62 T:twine80n6t4clocv2 15.47 15.60 15.68 T:aes256otrpv2 15.68 15.72 15.76 T:aes256otrsv1 15.75 15.79 15.82 T:aes256otrsv2 18.91 19.16 19.20 T:proest256otrv1 21.16 21.19 21.22 T:aes128n12clocv1 21.18 21.22 21.25 T:aes128n8clocv1 27.71 27.77 27.81 T:ketjesrv2 27.78 27.93 28.19 T:ketjesrv1 30.44 30.48 30.51 T:aeadaes128ocbtaglen64v1 30.45 30.48 30.53 T:aeadaes128ocbtaglen96v1 36.38 36.40 36.43 T:aeadaes192ocbtaglen64v1 36.38 36.42 36.46 T:aeadaes192ocbtaglen96v1 42.36 42.38 42.42 T:aeadaes256ocbtaglen96v1 42.32 42.40 42.45 T:aeadaes256ocbtaglen64v1 42.68 42.72 42.82 T:proest128otrv1 47.72 48.14 48.33 T:ketjejrv1 63.42 63.47 63.54 T:colm127v1 69.75 69.88 69.99 T:ketjejrv2 70.87 70.97 71.04 T:present80n6t4silcv3 86.76 87.13 87.47 T:deoxysneq128128v13 125.62 125.75 126.14 T:deoxyseq128128v13 125.97 126.02 126.16 T:led80n6t4silcv3 130.90 131.13 132.00 T:deoxysneq256128v13 128.23 135.93 136.27 T:aezv1 205.76 206.03 208.17 T:deoxyseq256128v13 404.21 404.67 405.38 T:acorn128 3544.19 3556.68 3579.30 T:led80n6silcv1 3554.66 3558.22 3563.23 T:led80n6t4silcv2 3795.76 3797.69 3804.30 T:present80n6t4silcv2 3796.38 3798.93 3799.66 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.17 0.17 0.18 T:tiaoxinv1 0.17 0.18 0.18 T:tiaoxinv2 0.20 0.21 0.21 aegis128l 0.31 0.31 0.32 T:aezv4 0.31 0.32 0.33 T:aezv3 0.34 0.35 0.35 T:aezv5 0.36 0.36 0.37 aegis256 0.37 0.37 0.38 T:aegis128 0.44 0.45 0.45 T:aeadaes128ocbtaglen128v1 0.38? 0.51? 0.61? T:aeadaes192ocbtaglen128v1 0.53 0.54 0.54 T:aes128otrcv3 0.54 0.55 0.55 T:aes128otrpv3 0.62 0.62 0.63 T:aeadaes256ocbtaglen128v1 0.67 0.68 0.69 T:aes128gcmv1 0.69 0.69 0.70 T:aes256otrcv3 0.70 0.70 0.71 T:aes256otrpv3 0.75 0.75 0.76 aes256gcmv1 0.81 0.81 0.82 T:deoxysi128v141 0.86 0.87 0.87 T:deoxysneq128128v1 0.90 0.91 0.92 T:morus1280256v1 0.91 0.91 0.93 T:morus1280128v2 0.91 0.92 0.93 T:deoxysi256v141 0.91 0.92 0.93 T:morus1280128v1 0.92 0.93 0.93 T:morus1280256v2 0.96 0.97 0.98 T:deoxysneq256128v1 1.09 1.10 1.11 T:morus640128v1 1.09 1.11 1.12 T:morus640128v2 1.21 1.22 1.23 T:deoxysii128v141 1.22 1.23 1.24 T:colm0v1 1.29 1.30 1.30 T:aes128otrsv3 1.35 1.36 1.37 T:deoxyseq128128v1 1.36 1.37 1.38 T:deoxysii256v141 1.53 1.54 1.55 T:deoxyseq256128v1 1.74 1.74 1.75 T:aes256otrsv3 2.09 2.09 2.10 T:aes128n12t8clocv3 2.09 2.09 2.10 T:aes128n12t8silcv3 2.09 2.09 2.10 T:aes128n12t8clocv2 2.09 2.09 2.10 T:aes128n8t8silcv2 2.09 2.09 2.10 T:aes128n12t8silcv2 2.09 2.09 2.10 T:aes128n8t8clocv2 2.26 2.27 2.28 T:seakeyakv2 2.30 2.31 2.33 T:oceankeyakv2 2.57 2.60 2.62 T:norx6441v2 2.60 2.64 2.67 T:norx6441v3 2.78 2.81 2.83 T:lakekeyakv2 2.76 2.81 2.86 T:lunarkeyakv2 2.81 2.83 2.86 T:norx6444v3 2.88 2.89 2.91 T:lakekeyakv1 3.04 3.06 3.09 T:norx6441v1 3.24 3.27 3.29 T:norx6444v2 3.77 3.82 3.84 T:norx6444v1 3.85 3.87 3.90 T:norx6461v3 3.83 3.88 3.93 T:norx3241v2 3.85 3.88 3.91 T:norx6461v2 3.85 3.91 3.96 T:norx3241v3 4.21 4.22 4.22 T:aesjambuv1 4.55 4.59 4.63 T:norx6461v1 4.68 4.74 4.81 T:norx3241v1 4.94 4.95 4.99 T:ketjemajorv2 4.98 5.02 5.17 T:acorn128v3 5.00 5.03 5.08 T:acorn128v2 5.15 5.18 5.21 T:riverkeyakv2 5.84 5.90 5.96 T:norx3261v2 5.89 5.95 5.99 T:norx3261v3 6.18 6.19 6.20 ascon128av12 6.33 6.34 6.35 T:ascon128av11 6.33 6.35 6.36 T:ascon96v1 6.70 6.74 6.80 T:ketjeminorv2 7.37 7.39 7.42 T:norx3261v1 9.10 9.13 9.14 T:ascon128v11 9.12 9.14 9.15 T:ascon128v1 9.18 9.20 9.23 ascon128v12 11.01 11.03 11.05 T:aes128otrsv2 11.02 11.04 11.06 T:aes128otrsv1 11.31 11.33 11.35 T:aes128otrpv2 11.32 11.33 11.35 T:aes128otrpv1 14.15 14.19 14.43 T:aes256otrsv1 14.18 14.20 14.23 T:aes256otrsv2 14.32 14.33 14.33 T:twine80n6t4clocv3 14.84 14.86 14.88 T:aes256otrpv1 14.85 14.87 14.89 T:aes256otrpv2 15.18 15.20 15.25 T:twine80n6t4clocv2 15.27 15.29 15.31 T:aes128n12clocv1 15.28 15.30 15.32 T:aes128n8clocv1 18.75 19.09 19.29 T:proest256otrv1 22.13 22.15 22.18 T:aeadaes128ocbtaglen64v1 22.14 22.16 22.19 T:aeadaes128ocbtaglen96v1 25.71 25.89 26.06 T:ketjesrv1 26.29 26.31 26.33 T:aeadaes192ocbtaglen64v1 26.29 26.31 26.33 T:aeadaes192ocbtaglen96v1 26.37 26.44 26.47 T:ketjesrv2 30.50 30.53 30.57 T:aeadaes256ocbtaglen64v1 30.52 30.54 30.55 T:aeadaes256ocbtaglen96v1 35.72 35.77 35.80 T:colm127v1 43.50 43.69 43.99 T:proest128otrv1 44.92 44.96 45.04 T:ketjejrv1 63.46 64.04 64.13 T:deoxysneq128128v13 67.27 67.35 67.43 T:ketjejrv2 70.09 70.23 70.27 T:present80n6t4silcv3 90.89 91.43 92.30 T:aezv1 92.96 93.31 94.33 T:deoxyseq128128v13 103.77 104.15 104.32 T:deoxysneq256128v13 125.73 125.77 125.93 T:led80n6t4silcv3 154.98 155.60 155.90 T:deoxyseq256128v13 413.24 414.39 415.30 T:acorn128 2637.39 2666.00 2673.54 T:led80n6t4silcv2 2659.29 2666.04 2671.27 T:led80n6silcv1 2847.18 2848.56 2856.37 T:present80n6silcv1 2849.42 2851.06 2856.11 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.21 0.22 0.22 aegis128l 0.23 0.23 0.23 T:tiaoxinv2 0.23 0.23 0.23 T:tiaoxinv1 0.31 0.31 0.31 T:aezv4 0.31 0.32 0.32 T:aezv3 0.34 0.35 0.35 T:aezv5 0.35 0.36 0.36 T:aegis128 0.36 0.37 0.37 aegis256 0.45 0.46 0.46 T:aeadaes128ocbtaglen128v1 0.43? 0.53? 0.66? T:aeadaes192ocbtaglen128v1 0.55 0.56 0.56 T:aes128otrcv3 0.57 0.57 0.57 T:aes128otrpv3 0.65 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.71 T:aes128gcmv1 0.71 0.72 0.72 T:aes256otrpv3 0.71 0.72 0.73 T:aes256otrcv3 0.79 0.80 0.81 aes256gcmv1 0.84 0.85 0.86 T:deoxysi128v141 0.90 0.91 0.91 T:deoxysneq128128v1 0.91 0.92 0.92 T:morus1280256v2 0.91 0.92 0.92 T:morus1280128v1 0.91 0.92 0.93 T:morus1280256v1 0.91 0.92 0.93 T:morus1280128v2 0.94 0.95 0.96 T:deoxysi256v141 1.01 1.02 1.03 T:deoxysneq256128v1 1.08 1.09 1.11 T:morus640128v1 1.09 1.11 1.12 T:morus640128v2 1.20 1.22 1.23 T:deoxysii128v141 1.27 1.28 1.29 T:colm0v1 1.31 1.32 1.32 T:aes128otrsv3 1.36 1.37 1.38 T:deoxysii256v141 1.36 1.38 1.38 T:deoxyseq128128v1 1.54 1.55 1.56 T:deoxyseq256128v1 1.75 1.76 1.76 T:aes256otrsv3 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.06 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128n12t8clocv2 2.06 2.06 2.06 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128n8t8clocv2 2.31 2.32 2.33 T:seakeyakv2 2.33 2.35 2.37 T:oceankeyakv2 2.54 2.57 2.59 T:norx6441v3 2.54 2.59 2.63 T:norx6441v2 2.79 2.81 2.83 T:lakekeyakv2 2.77 2.83 2.89 T:lunarkeyakv2 2.81 2.83 2.87 T:norx6444v3 2.91 2.92 2.95 T:lakekeyakv1 3.06 3.08 3.10 T:norx6441v1 3.21 3.24 3.27 T:norx6444v2 3.80 3.84 3.86 T:norx6444v1 3.82 3.85 3.87 T:norx6461v2 3.79 3.87 3.94 T:norx3241v3 3.82 3.87 3.93 T:norx3241v2 3.84 3.88 3.90 T:norx6461v3 4.39 4.39 4.40 T:aesjambuv1 4.55 4.59 4.65 T:norx3241v1 4.60 4.64 4.67 T:norx6461v1 4.84 4.88 4.90 T:ketjemajorv2 4.92 5.12 5.14 T:acorn128v3 5.20 5.25 5.57 T:acorn128v2 5.26 5.29 5.31 T:riverkeyakv2 5.77 5.83 5.88 T:norx3261v2 5.87 5.93 5.98 T:norx3261v3 6.16 6.17 6.18 ascon128av12 6.29 6.31 6.32 T:ascon96v1 6.30 6.31 6.32 T:ascon128av11 6.77 6.87 6.98 T:ketjeminorv2 7.31 7.33 7.36 T:norx3261v1 9.05 9.08 9.10 T:ascon128v1 9.10 9.11 9.13 T:ascon128v11 9.18 9.19 9.21 ascon128v12 11.15 11.17 11.18 T:aes128otrsv2 11.15 11.17 11.19 T:aes128otrsv1 11.38 11.41 11.44 T:aes128otrpv1 11.40 11.45 11.50 T:aes128otrpv2 14.32 14.32 14.33 T:twine80n6t4clocv3 14.30 14.34 14.59 T:aes256otrsv1 14.33 14.36 14.38 T:aes256otrsv2 14.94 14.96 14.98 T:aes256otrpv1 14.93 15.01 15.06 T:aes256otrpv2 15.21 15.26 15.28 T:twine80n6t4clocv2 15.63 15.65 15.67 T:aes128n12clocv1 15.65 15.67 15.69 T:aes128n8clocv1 18.75 19.05 19.26 T:proest256otrv1 25.90 26.05 26.49 T:ketjesrv1 26.14 26.17 26.21 T:aeadaes128ocbtaglen96v1 26.14 26.18 26.20 T:aeadaes128ocbtaglen64v1 26.91 26.97 27.02 T:ketjesrv2 31.19 31.22 31.24 T:aeadaes192ocbtaglen64v1 31.21 31.23 31.24 T:aeadaes192ocbtaglen96v1 36.27 36.32 36.35 T:aeadaes256ocbtaglen64v1 36.30 36.33 36.36 T:aeadaes256ocbtaglen96v1 43.01 43.04 43.49 T:proest128otrv1 43.79 43.83 43.86 T:colm127v1 44.82 44.92 44.99 T:ketjejrv1 67.93 67.99 68.05 T:ketjejrv2 70.04 70.12 70.21 T:present80n6t4silcv3 75.31 75.87 75.95 T:deoxysneq128128v13 90.99 91.56 92.21 T:aezv1 93.05 93.39 93.70 T:deoxyseq128128v13 117.23 117.53 117.81 T:deoxysneq256128v13 125.56 125.76 126.11 T:led80n6t4silcv3 154.97 155.56 155.88 T:deoxyseq256128v13 401.83 405.14 407.15 T:acorn128 2636.91 2659.87 2678.23 T:led80n6t4silcv2 2660.76 2668.03 2681.84 T:led80n6silcv1 2846.97 2848.82 2855.85 T:present80n6silcv1 2850.42 2851.27 2855.87 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.17 0.17 0.18 T:aezv4 0.18 0.18 0.18 T:aezv3 0.20 0.20 0.20 T:aezv5 0.21 0.22 0.22 aegis128l 0.23 0.23 0.24 T:tiaoxinv1 0.23 0.23 0.24 T:tiaoxinv2 0.35 0.36 0.36 T:aegis128 0.40 0.40 0.40 aegis256 0.45 0.46 0.46 T:aeadaes128ocbtaglen128v1 0.40? 0.53? 0.61? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.57 0.57 0.58 T:aes128otrpv3 0.65 0.65 0.65 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.70 T:aes128gcmv1 0.71 0.72 0.72 T:aes256otrcv3 0.71 0.72 0.72 T:aes256otrpv3 0.79 0.80 0.80 aes256gcmv1 0.84 0.85 0.86 T:deoxysi128v141 0.90 0.91 0.91 T:deoxysneq128128v1 0.91 0.91 0.92 T:morus1280128v2 0.91 0.92 0.93 T:morus1280128v1 0.91 0.92 0.92 T:morus1280256v1 0.91 0.92 0.93 T:morus1280256v2 0.94 0.95 0.96 T:deoxysi256v141 1.01 1.02 1.03 T:deoxysneq256128v1 1.08 1.09 1.11 T:morus640128v1 1.09 1.10 1.12 T:morus640128v2 1.21 1.21 1.23 T:deoxysii128v141 1.26 1.28 1.29 T:colm0v1 1.31 1.32 1.32 T:aes128otrsv3 1.36 1.37 1.38 T:deoxysii256v141 1.37 1.37 1.38 T:deoxyseq128128v1 1.54 1.54 1.56 T:deoxyseq256128v1 1.75 1.76 1.76 T:aes256otrsv3 2.05 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.08 T:aes128n8t8silcv2 2.06 2.06 2.08 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.32 2.34 2.35 T:seakeyakv2 2.35 2.36 2.38 T:oceankeyakv2 2.54 2.57 2.60 T:norx6441v3 2.54 2.58 2.62 T:norx6441v2 2.81 2.82 2.84 T:lakekeyakv2 2.81 2.84 2.86 T:norx6444v3 2.79 2.85 2.90 T:lunarkeyakv2 2.93 2.94 2.96 T:lakekeyakv1 3.06 3.08 3.11 T:norx6441v1 3.23 3.27 3.30 T:norx6444v2 3.83 3.85 3.88 T:norx6461v2 3.83 3.86 3.89 T:norx6461v3 3.82 3.86 3.88 T:norx6444v1 3.83 3.87 3.92 T:norx3241v2 3.81 3.88 3.93 T:norx3241v3 4.39 4.39 4.40 T:aesjambuv1 4.57 4.62 4.66 T:norx3241v1 4.62 4.65 4.68 T:norx6461v1 4.87 4.89 4.92 T:ketjemajorv2 4.95 5.12 5.14 T:acorn128v3 5.21 5.25 5.57 T:acorn128v2 5.27 5.30 5.32 T:riverkeyakv2 5.78 5.84 5.90 T:norx3261v2 5.83 5.88 5.91 T:norx3261v3 6.16 6.18 6.19 ascon128av12 6.29 6.31 6.32 T:ascon128av11 6.29 6.31 6.32 T:ascon96v1 6.79 6.89 7.00 T:ketjeminorv2 7.32 7.34 7.36 T:norx3261v1 9.05 9.08 9.10 T:ascon128v1 9.09 9.11 9.13 T:ascon128v11 9.18 9.19 9.20 ascon128v12 11.17 11.18 11.20 T:aes128otrsv2 11.17 11.19 11.21 T:aes128otrsv1 11.41 11.43 11.46 T:aes128otrpv1 11.43 11.52 11.54 T:aes128otrpv2 14.32 14.33 14.33 T:twine80n6t4clocv3 14.31 14.36 14.59 T:aes256otrsv1 14.35 14.38 14.40 T:aes256otrsv2 14.92 14.95 14.98 T:aes256otrpv1 14.96 15.03 15.07 T:aes256otrpv2 15.21 15.26 15.28 T:twine80n6t4clocv2 15.64 15.65 15.68 T:aes128n12clocv1 15.65 15.67 15.70 T:aes128n8clocv1 18.74 19.05 19.27 T:proest256otrv1 26.14 26.18 26.22 T:aeadaes128ocbtaglen96v1 26.15 26.19 26.21 T:aeadaes128ocbtaglen64v1 26.06 26.30 26.64 T:ketjesrv1 26.96 27.04 27.06 T:ketjesrv2 31.20 31.22 31.24 T:aeadaes192ocbtaglen96v1 31.21 31.22 31.25 T:aeadaes192ocbtaglen64v1 36.29 36.32 36.35 T:aeadaes256ocbtaglen64v1 36.29 36.32 36.36 T:aeadaes256ocbtaglen96v1 43.00 43.05 43.50 T:proest128otrv1 43.27 43.32 43.38 T:colm127v1 44.84 44.96 45.01 T:ketjejrv1 67.94 68.00 68.07 T:ketjejrv2 70.09 70.12 70.18 T:present80n6t4silcv3 75.37 75.90 76.00 T:deoxysneq128128v13 90.98 91.48 92.12 T:aezv1 93.07 93.41 93.70 T:deoxyseq128128v13 117.12 117.28 117.51 T:deoxysneq256128v13 125.56 125.71 126.10 T:led80n6t4silcv3 155.01 155.58 155.91 T:deoxyseq256128v13 401.75 404.49 407.18 T:acorn128 2642.26 2651.07 2668.34 T:led80n6t4silcv2 2659.38 2661.88 2674.99 T:led80n6silcv1 2846.37 2848.71 2855.80 T:present80n6silcv1 2848.74 2851.07 2851.92 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.12 0.13 0.13 T:tiaoxinv2 0.12 0.13 0.13 T:tiaoxinv1 0.16 0.16 0.17 aegis128l 0.18? 0.19? 0.20? T:aezv4 0.20 0.20 0.21 T:aezv3 0.21 0.22 0.23 T:aezv5 0.31 0.32 0.33 aegis256 0.37 0.38 0.38 T:aegis128 0.43 0.43 0.44 aes256gcmv1 0.43 0.43 0.44 T:aeadaes128ocbtaglen128v1 0.43 0.44 0.44 T:aes128gcmv1 0.27? 0.46? 0.60? T:aeadaes192ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrcv3 0.55 0.56 0.57 T:aes128otrpv3 0.64 0.65 0.65 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.72 T:aes256otrcv3 0.70 0.71 0.72 T:colm0v1 0.72 0.73 0.74 T:aes256otrpv3 0.81 0.81 0.82 T:deoxysii128v141 0.81 0.81 0.82 T:deoxysi128v141 0.85 0.86 0.87 T:morus1280256v1 0.85 0.86 0.87 T:morus1280128v1 0.85 0.86 0.87 T:deoxysneq128128v1 0.86 0.87 0.88 T:morus1280128v2 0.87 0.88 0.88 T:morus1280256v2 0.90 0.90 0.92 T:deoxyseq128128v1 0.90 0.92 0.93 T:deoxysi256v141 0.90 0.92 0.93 T:deoxysii256v141 0.96 0.97 0.98 T:deoxysneq256128v1 1.01 1.02 1.03 T:deoxyseq256128v1 1.03 1.06 1.07 T:morus640128v1 1.04 1.06 1.08 T:morus640128v2 1.79 1.82 1.85 T:lunarkeyakv2 1.81 1.84 1.87 T:oceankeyakv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.20 2.22 2.23 T:seakeyakv2 2.53 2.54 2.54 T:lakekeyakv2 2.53 2.58 2.62 T:norx6441v2 2.53 2.59 2.67 T:norx6441v3 2.69 2.70 2.71 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.03 3.07 3.11 T:norx6441v1 3.11 3.13 3.16 T:norx6444v2 3.34 3.37 3.41 T:norx6444v3 3.83 3.84 3.86 T:norx6444v1 3.81 3.84 3.89 T:norx6461v2 3.81 3.85 3.90 T:norx6461v3 3.86 3.94 4.02 T:norx3241v2 3.92 4.00 4.08 T:norx3241v3 4.02 4.09 4.15 T:ketjemajorv2 4.19 4.20 4.20 T:aesjambuv1 4.53 4.58 4.63 T:norx6461v1 4.79 4.82 4.85 T:riverkeyakv2 4.79 4.87 4.94 T:norx3241v1 4.97 5.00 5.02 T:acorn128v3 5.25 5.48 5.55 T:acorn128v2 5.84 5.92 5.99 T:norx3261v2 5.98 6.08 6.12 T:norx3261v3 6.03 6.10 6.16 T:ketjeminorv2 6.15 6.17 6.18 ascon128av12 6.31 6.32 6.34 T:ascon128av11 6.32 6.33 6.35 T:ascon96v1 7.35 7.38 7.43 T:norx3261v1 9.05 9.06 9.07 T:ascon128v1 8.93 9.08 9.11 T:ascon128v11 9.15 9.18 9.21 ascon128v12 9.76 9.79 9.81 T:aes128otrsv1 9.77 9.79 9.83 T:aes128otrsv2 10.09 10.12 10.13 T:aes128n12clocv1 10.11 10.14 10.16 T:aes128n8clocv1 10.86 10.87 10.90 T:aes128otrpv2 10.86 10.88 10.90 T:aes128otrpv1 12.89 12.93 12.96 T:aes256otrsv1 12.95 12.96 12.99 T:aes256otrsv2 14.11 14.12 14.14 T:twine80n6t4clocv3 14.41 14.43 14.46 T:aes256otrpv1 14.41 14.44 14.46 T:aes256otrpv2 14.95 14.96 14.97 T:twine80n6t4clocv2 19.06 19.55 19.59 T:proest256otrv1 21.81 21.85 21.88 T:aeadaes128ocbtaglen96v1 21.84 21.87 21.90 T:aeadaes128ocbtaglen64v1 23.14 23.20 23.31 T:colm127v1 24.78 24.92 25.16 T:ketjesrv1 25.99 26.02 26.05 T:aeadaes192ocbtaglen96v1 26.01 26.04 26.07 T:aeadaes192ocbtaglen64v1 26.17 26.19 26.22 T:ketjesrv2 30.19 30.23 30.27 T:aeadaes256ocbtaglen96v1 30.22 30.25 30.28 T:aeadaes256ocbtaglen64v1 40.45 40.62 40.77 T:ketjejrv1 41.43 43.44 43.79 T:aezv1 43.08 44.06 44.52 T:proest128otrv1 62.17 62.35 63.17 T:deoxysneq128128v13 62.32 62.48 62.77 T:deoxyseq128128v13 65.99 66.05 66.12 T:ketjejrv2 69.23 69.26 69.29 T:present80n6t4silcv3 102.23 102.63 103.70 T:deoxyseq256128v13 103.58 104.37 104.51 T:deoxysneq256128v13 125.02 125.16 125.27 T:led80n6t4silcv3 408.32 409.37 412.04 T:acorn128 1771.09 1775.44 1779.26 T:led80n6silcv1 1775.25 1784.04 1788.11 T:led80n6t4silcv2 1900.14 1901.14 1903.18 T:present80n6silcv1 1900.14 1903.72 1909.03 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.12 0.13 0.13 T:tiaoxinv1 0.12 0.13 0.13 T:tiaoxinv2 0.16? 0.17? 0.18? aegis128l 0.18? 0.19? 0.20? T:aezv4 0.20 0.21 0.22 T:aezv3 0.21 0.22 0.22 T:aezv5 0.31 0.31 0.32 T:aegis128 0.31 0.32 0.34 aegis256 0.42 0.43 0.44 T:aeadaes128ocbtaglen128v1 0.43 0.43 0.44 aes256gcmv1 0.43 0.44 0.45 T:aes128gcmv1 0.32? 0.46? 0.60? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.56 0.57 T:aes128otrpv3 0.65 0.66 0.66 T:aeadaes256ocbtaglen128v1 0.69 0.71 0.73 T:colm0v1 0.71 0.72 0.74 T:aes256otrcv3 0.73 0.73 0.74 T:aes256otrpv3 0.80 0.81 0.82 T:deoxysii128v141 0.81 0.82 0.83 T:deoxysi128v141 0.85 0.85 0.86 T:morus1280256v1 0.85 0.86 0.87 T:morus1280256v2 0.85 0.86 0.87 T:morus1280128v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.87 0.89 0.90 T:morus1280128v2 0.89 0.90 0.91 T:deoxyseq128128v1 0.90 0.91 0.92 T:deoxysii256v141 0.90 0.91 0.92 T:deoxysi256v141 0.96 0.98 0.99 T:deoxysneq256128v1 1.02 1.03 1.04 T:deoxyseq256128v1 1.03 1.05 1.08 T:morus640128v2 1.03 1.06 1.08 T:morus640128v1 1.78 1.82 1.85 T:lunarkeyakv2 1.80 1.84 1.88 T:oceankeyakv2 2.06 2.06 2.07 T:aes128n8t8clocv2 2.05 2.06 2.08 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.07 T:aes128n12t8clocv2 2.06 2.07 2.07 T:aes128n12t8silcv2 2.06 2.07 2.07 T:aes128n12t8silcv3 2.19 2.22 2.24 T:seakeyakv2 2.53 2.54 2.55 T:lakekeyakv2 2.55 2.60 2.66 T:norx6441v3 2.55 2.61 2.67 T:norx6441v2 2.69 2.70 2.71 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.07 3.10 3.13 T:norx6441v1 3.08 3.10 3.12 T:norx6444v2 3.33 3.36 3.40 T:norx6444v3 3.80 3.83 3.86 T:norx6461v2 3.83 3.87 3.91 T:norx6461v3 3.86 3.88 3.91 T:norx6444v1 3.91 3.98 4.06 T:norx3241v2 3.97 4.02 4.06 T:norx3241v3 4.01 4.08 4.15 T:ketjemajorv2 4.21 4.22 4.23 T:aesjambuv1 4.59 4.66 4.73 T:norx6461v1 4.80 4.83 4.85 T:riverkeyakv2 4.75 4.83 4.92 T:norx3241v1 4.99 5.03 5.25 T:acorn128v3 4.91 5.04 5.28 T:acorn128v2 5.73 5.84 5.95 T:norx3261v2 5.94 6.01 6.09 T:norx3261v3 6.05 6.11 6.17 T:ketjeminorv2 6.15 6.16 6.18 ascon128av12 6.31 6.32 6.35 T:ascon128av11 6.30 6.32 6.35 T:ascon96v1 7.39 7.43 7.45 T:norx3261v1 9.10 9.12 9.15 T:ascon128v11 9.12 9.14 9.16 T:ascon128v1 9.19 9.22 9.22 ascon128v12 9.77 9.79 9.83 T:aes128otrsv1 9.77 9.80 9.84 T:aes128otrsv2 10.10 10.12 10.14 T:aes128n12clocv1 10.12 10.14 10.16 T:aes128n8clocv1 10.86 10.88 10.91 T:aes128otrpv2 10.86 10.88 10.90 T:aes128otrpv1 12.88 12.92 12.95 T:aes256otrsv1 12.93 12.97 13.00 T:aes256otrsv2 14.11 14.12 14.14 T:twine80n6t4clocv3 14.40 14.43 14.46 T:aes256otrpv2 14.40 14.43 14.46 T:aes256otrpv1 14.95 14.96 14.99 T:twine80n6t4clocv2 19.05 19.52 19.56 T:proest256otrv1 21.81 21.86 21.91 T:aeadaes128ocbtaglen96v1 21.84 21.86 21.90 T:aeadaes128ocbtaglen64v1 23.19 23.24 23.32 T:colm127v1 24.77 24.92 25.15 T:ketjesrv1 26.01 26.04 26.07 T:aeadaes192ocbtaglen64v1 26.01 26.04 26.08 T:aeadaes192ocbtaglen96v1 26.16 26.21 26.26 T:ketjesrv2 30.21 30.25 30.30 T:aeadaes256ocbtaglen64v1 30.22 30.26 30.30 T:aeadaes256ocbtaglen96v1 40.44 40.60 40.79 T:ketjejrv1 41.51 43.49 43.76 T:aezv1 43.15 44.04 44.18 T:proest128otrv1 62.21 62.39 63.20 T:deoxysneq128128v13 62.37 62.67 62.93 T:deoxyseq128128v13 65.92 66.01 66.11 T:ketjejrv2 69.21 69.27 69.33 T:present80n6t4silcv3 102.23 102.62 103.71 T:deoxyseq256128v13 103.57 104.35 104.52 T:deoxysneq256128v13 125.11 125.19 125.48 T:led80n6t4silcv3 398.58 401.81 409.12 T:acorn128 1776.07 1780.91 1784.02 T:led80n6silcv1 1774.15 1784.61 1789.45 T:led80n6t4silcv2 1900.19 1901.46 1903.19 T:present80n6silcv1 1902.32 1903.23 1907.60 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.12 0.13 0.13 T:tiaoxinv2 0.12? 0.13? 0.14? T:tiaoxinv1 0.16 0.17 0.17 aegis128l 0.18? 0.19? 0.20? T:aezv4 0.20 0.20 0.21 T:aezv3 0.21 0.22 0.22 T:aezv5 0.31 0.31 0.32 T:aegis128 0.31 0.32 0.33 aegis256 0.42 0.43 0.43 T:aeadaes128ocbtaglen128v1 0.42 0.43 0.44 aes256gcmv1 0.43 0.43 0.44 T:aes128gcmv1 0.33? 0.46? 0.59? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.65 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.72 T:colm0v1 0.71 0.72 0.74 T:aes256otrcv3 0.72 0.73 0.74 T:aes256otrpv3 0.81 0.81 0.83 T:deoxysii128v141 0.81 0.82 0.84 T:deoxysi128v141 0.84 0.85 0.86 T:morus1280128v1 0.85 0.86 0.86 T:morus1280256v1 0.85 0.86 0.87 T:morus1280256v2 0.86 0.86 0.89 T:deoxysneq128128v1 0.86 0.88 0.90 T:morus1280128v2 0.89 0.90 0.91 T:deoxyseq128128v1 0.90 0.91 0.92 T:deoxysii256v141 0.90 0.91 0.93 T:deoxysi256v141 0.96 0.97 0.98 T:deoxysneq256128v1 1.03 1.04 1.04 T:deoxyseq256128v1 1.04 1.06 1.08 T:morus640128v1 1.05 1.07 1.09 T:morus640128v2 1.78 1.82 1.85 T:lunarkeyakv2 1.81 1.84 1.88 T:oceankeyakv2 2.06 2.06 2.06 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.07 2.07 T:aes128n12t8clocv2 2.20 2.21 2.23 T:seakeyakv2 2.53 2.53 2.55 T:lakekeyakv2 2.55 2.60 2.65 T:norx6441v2 2.56 2.60 2.64 T:norx6441v3 2.69 2.70 2.71 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.08 3.09 3.11 T:norx6444v2 3.07 3.11 3.16 T:norx6441v1 3.33 3.37 3.40 T:norx6444v3 3.79 3.83 3.87 T:norx6461v2 3.82 3.87 3.91 T:norx6461v3 3.86 3.88 3.91 T:norx6444v1 3.93 3.97 4.03 T:norx3241v2 3.97 4.02 4.09 T:norx3241v3 4.01 4.08 4.14 T:ketjemajorv2 4.21 4.22 4.23 T:aesjambuv1 4.58 4.65 4.71 T:norx6461v1 4.73 4.80 4.93 T:norx3241v1 4.80 4.83 4.85 T:riverkeyakv2 4.98 5.05 5.25 T:acorn128v3 4.91 5.05 5.27 T:acorn128v2 5.77 5.87 5.97 T:norx3261v2 5.96 6.05 6.19 T:norx3261v3 6.05 6.12 6.17 T:ketjeminorv2 6.15 6.17 6.19 ascon128av12 6.29 6.31 6.34 T:ascon96v1 6.31 6.32 6.35 T:ascon128av11 7.38 7.41 7.44 T:norx3261v1 9.10 9.13 9.15 T:ascon128v11 9.11 9.13 9.15 T:ascon128v1 9.21 9.22 9.23 ascon128v12 9.77 9.80 9.83 T:aes128otrsv1 9.77 9.81 9.84 T:aes128otrsv2 10.11 10.13 10.15 T:aes128n12clocv1 10.12 10.14 10.16 T:aes128n8clocv1 10.85 10.88 10.90 T:aes128otrpv2 10.87 10.89 10.91 T:aes128otrpv1 12.89 12.93 12.97 T:aes256otrsv1 12.93 12.97 12.99 T:aes256otrsv2 14.11 14.12 14.14 T:twine80n6t4clocv3 14.40 14.44 14.46 T:aes256otrpv2 14.40 14.44 14.47 T:aes256otrpv1 14.96 14.96 14.99 T:twine80n6t4clocv2 19.04 19.51 19.56 T:proest256otrv1 21.81 21.87 21.90 T:aeadaes128ocbtaglen96v1 21.85 21.88 21.91 T:aeadaes128ocbtaglen64v1 23.20 23.25 23.33 T:colm127v1 24.82 24.93 25.13 T:ketjesrv1 26.00 26.03 26.06 T:aeadaes192ocbtaglen64v1 25.99 26.03 26.07 T:aeadaes192ocbtaglen96v1 26.16 26.21 26.24 T:ketjesrv2 30.22 30.25 30.29 T:aeadaes256ocbtaglen64v1 30.23 30.26 30.28 T:aeadaes256ocbtaglen96v1 40.45 40.62 40.79 T:ketjejrv1 41.48 43.50 43.76 T:aezv1 43.15 44.04 44.18 T:proest128otrv1 62.26 62.39 63.25 T:deoxysneq128128v13 62.38 62.53 62.79 T:deoxyseq128128v13 65.97 66.05 66.14 T:ketjejrv2 69.24 69.30 69.36 T:present80n6t4silcv3 102.18 102.61 103.66 T:deoxyseq256128v13 103.57 104.34 104.52 T:deoxysneq256128v13 125.13 125.19 125.37 T:led80n6t4silcv3 398.51 406.24 409.68 T:acorn128 1770.39 1771.97 1777.74 T:led80n6silcv1 1774.01 1777.99 1787.01 T:led80n6t4silcv2 1900.52 1903.13 1903.45 T:present80n6silcv1 1900.40 1903.42 1907.65 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.22 0.22 0.23 T:tiaoxinv2 0.22 0.22 0.22 T:tiaoxinv1 0.24 0.25 0.25 aegis128l 0.35 0.35 0.36 T:aezv4 0.36 0.37 0.37 T:aezv3 0.38 0.39 0.39 T:aezv5 0.39 0.40 0.41 T:aegis128 0.41 0.41 0.42 aegis256 0.49 0.49 0.49 T:aeadaes128ocbtaglen128v1 0.60? 0.60? 0.79? T:aeadaes192ocbtaglen128v1 0.61 0.61 0.61 T:aes128otrpv3 0.64 0.64 0.65 T:aes128otrcv3 0.66 0.67 0.67 T:aeadaes256ocbtaglen128v1 0.76 0.77 0.77 T:aes128gcmv1 0.78 0.79 0.79 T:aes256otrpv3 0.83 0.84 0.85 T:aes256otrcv3 0.85 0.86 0.86 aes256gcmv1 0.93 0.94 0.94 T:deoxysi128v141 0.95 0.95 0.96 T:deoxysneq128128v1 1.06 1.07 1.07 T:deoxysi256v141 1.08 1.08 1.09 T:deoxysneq256128v1 1.12 1.12 1.13 T:morus1280256v1 1.12 1.12 1.13 T:morus1280128v1 1.13 1.14 1.15 T:morus1280128v2 1.14 1.14 1.15 T:morus1280256v2 1.21 1.22 1.23 T:morus640128v1 1.21 1.22 1.24 T:morus640128v2 1.28 1.29 1.30 T:colm0v1 1.34 1.34 1.35 T:aes128otrsv3 1.36 1.37 1.38 T:deoxysii128v141 1.46 1.47 1.48 T:deoxyseq128128v1 1.54 1.55 1.56 T:deoxysii256v141 1.67 1.68 1.69 T:deoxyseq256128v1 1.81 1.81 1.82 T:aes256otrsv3 2.11 2.11 2.11 T:aes128n12t8clocv2 2.11 2.11 2.11 T:aes128n12t8clocv3 2.11 2.11 2.11 T:aes128n8t8clocv2 2.12 2.12 2.12 T:aes128n8t8silcv2 2.12 2.12 2.12 T:aes128n12t8silcv3 2.12 2.12 2.12 T:aes128n12t8silcv2 2.97 3.00 3.03 T:norx6441v2 3.04 3.05 3.06 T:lakekeyakv2 3.02 3.06 3.09 T:norx6441v3 3.24 3.25 3.26 T:seakeyakv2 3.36 3.37 3.38 T:lakekeyakv1 3.45 3.47 3.49 T:norx6441v1 3.80 3.83 3.83 T:norx6444v3 4.15 4.20 4.24 T:norx3241v2 4.16 4.20 4.24 T:norx3241v3 4.27 4.28 4.28 T:aesjambuv1 4.29 4.30 4.31 T:oceankeyakv2 4.49 4.50 4.53 T:norx6461v3 4.48 4.50 4.53 T:norx6461v2 4.63 4.65 4.67 T:norx6444v2 4.94 5.00 5.05 T:norx3241v1 5.15 5.18 5.20 T:norx6461v1 5.40 5.42 5.43 T:riverkeyakv2 5.40 5.43 5.44 T:norx6444v1 5.87 5.90 6.03 T:acorn128v2 5.92 6.00 6.07 T:acorn128v3 6.31 6.32 6.33 ascon128av12 6.31 6.34 6.37 T:ketjemajorv2 6.32 6.38 6.43 T:norx3261v2 6.37 6.42 6.47 T:norx3261v3 6.45 6.46 6.48 T:ascon128av11 6.47 6.48 6.49 T:ascon96v1 7.37 7.39 7.44 T:lunarkeyakv2 7.45 7.50 7.60 T:ketjeminorv2 7.77 7.79 7.81 T:norx3261v1 9.21 9.23 9.25 T:ascon128v11 9.22 9.25 9.27 T:ascon128v1 9.31 9.33 9.36 ascon128v12 11.33 11.35 11.37 T:aes128otrsv2 11.36 11.37 11.39 T:aes128otrsv1 11.63 11.64 11.65 T:aes128otrpv1 11.63 11.64 11.66 T:aes128otrpv2 14.50 14.50 14.51 T:twine80n6t4clocv3 14.60 14.61 14.63 T:aes256otrsv2 14.64 14.85 14.87 T:aes256otrsv1 15.25 15.26 15.27 T:aes256otrpv1 15.27 15.28 15.29 T:aes256otrpv2 15.36 15.40 15.44 T:twine80n6t4clocv2 15.45 15.46 15.48 T:aes128n12clocv1 15.46 15.47 15.48 T:aes128n8clocv1 20.46 21.15 21.24 T:proest256otrv1 22.70 22.70 22.72 T:aeadaes128ocbtaglen64v1 22.70 22.71 22.73 T:aeadaes128ocbtaglen96v1 26.43 26.52 26.64 T:ketjesrv1 26.92 26.94 26.96 T:aeadaes192ocbtaglen96v1 26.94 26.95 26.96 T:aeadaes192ocbtaglen64v1 27.33 27.37 27.51 T:ketjesrv2 31.24 31.26 31.28 T:aeadaes256ocbtaglen64v1 31.26 31.28 31.30 T:aeadaes256ocbtaglen96v1 36.39 36.41 36.44 T:colm127v1 45.09 45.48 45.54 T:ketjejrv1 45.09 45.67 45.85 T:proest128otrv1 63.83 64.62 64.68 T:deoxysneq128128v13 68.31 68.38 68.45 T:ketjejrv2 70.81 70.89 70.97 T:present80n6t4silcv3 84.46 87.92 88.65 T:aezv1 94.86 95.09 96.34 T:deoxyseq128128v13 104.48 104.69 105.33 T:deoxysneq256128v13 126.72 126.77 126.81 T:led80n6t4silcv3 155.94 157.00 157.18 T:deoxyseq256128v13 464.79 465.35 466.34 T:acorn128 2668.57 2672.50 2677.00 T:led80n6silcv1 2671.26 2684.85 2697.59 T:led80n6t4silcv2 2862.55 2863.96 2866.65 T:present80n6silcv1 2862.62 2864.59 2865.68 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.25 0.26 0.27 aegis128l 0.28 0.28 0.28 T:tiaoxinv2 0.28 0.28 0.28 T:tiaoxinv1 0.35 0.36 0.36 T:aezv4 0.36 0.37 0.37 T:aezv3 0.38 0.39 0.39 T:aegis128 0.38 0.39 0.40 T:aezv5 0.41 0.41 0.42 aegis256 0.51 0.51 0.51 T:aeadaes128ocbtaglen128v1 0.62? 0.63? 0.75? T:aeadaes192ocbtaglen128v1 0.62 0.63 0.63 T:aes128otrpv3 0.66 0.67 0.67 T:aes128otrcv3 0.71 0.71 0.72 T:aeadaes256ocbtaglen128v1 0.78 0.79 0.80 T:aes128gcmv1 0.80 0.80 0.81 T:aes256otrpv3 0.87 0.87 0.88 T:aes256otrcv3 0.90 0.90 0.91 aes256gcmv1 1.01 1.02 1.02 T:deoxysi128v141 1.05 1.06 1.06 T:deoxysneq128128v1 1.12 1.13 1.13 T:morus1280256v1 1.13 1.13 1.14 T:morus1280128v1 1.13 1.14 1.14 T:morus1280128v2 1.13 1.14 1.14 T:morus1280256v2 1.14 1.15 1.15 T:deoxysi256v141 1.17 1.17 1.18 T:deoxysneq256128v1 1.21 1.23 1.24 T:morus640128v1 1.23 1.25 1.26 T:morus640128v2 1.34 1.35 1.36 T:colm0v1 1.36 1.36 1.37 T:aes128otrsv3 1.39 1.40 1.41 T:deoxysii128v141 1.53 1.54 1.55 T:deoxyseq128128v1 1.59 1.60 1.60 T:deoxysii256v141 1.70 1.71 1.72 T:deoxyseq256128v1 1.84 1.84 1.85 T:aes256otrsv3 2.08 2.08 2.09 T:aes128n8t8clocv2 2.08 2.08 2.10 T:aes128n12t8clocv3 2.08 2.08 2.09 T:aes128n12t8clocv2 2.10 2.10 2.11 T:aes128n12t8silcv2 2.10 2.10 2.11 T:aes128n12t8silcv3 2.10 2.10 2.10 T:aes128n8t8silcv2 2.97 2.98 3.00 T:norx6441v3 3.00 3.02 3.05 T:norx6441v2 3.05 3.06 3.07 T:lakekeyakv2 3.28 3.29 3.29 T:seakeyakv2 3.37 3.39 3.42 T:lakekeyakv1 3.45 3.47 3.50 T:norx6441v1 3.80 3.81 3.84 T:norx6444v3 4.15 4.18 4.23 T:norx3241v2 4.17 4.20 4.25 T:norx3241v3 4.33 4.34 4.36 T:oceankeyakv2 4.44 4.45 4.45 T:aesjambuv1 4.46 4.48 4.50 T:norx6461v2 4.48 4.51 4.53 T:norx6461v3 4.62 4.63 4.65 T:norx6444v2 4.84 4.88 4.93 T:norx3241v1 5.18 5.21 5.24 T:norx6461v1 5.43 5.45 5.47 T:norx6444v1 5.51 5.52 5.54 T:riverkeyakv2 6.01 6.03 6.07 T:acorn128v3 6.14 6.18 6.26 T:acorn128v2 6.20 6.22 6.31 T:ketjemajorv2 6.24 6.28 6.34 T:norx3261v2 6.30 6.31 6.32 ascon128av12 6.33 6.35 6.39 T:norx3261v3 6.43 6.44 6.45 T:ascon128av11 6.43 6.44 6.45 T:ascon96v1 7.41 7.44 7.49 T:lunarkeyakv2 7.53 7.65 7.75 T:ketjeminorv2 7.73 7.75 7.77 T:norx3261v1 9.19 9.22 9.24 T:ascon128v1 9.21 9.23 9.24 T:ascon128v11 9.32 9.32 9.33 ascon128v12 11.48 11.49 11.51 T:aes128otrsv2 11.49 11.51 11.53 T:aes128otrsv1 11.71 11.74 11.76 T:aes128otrpv1 11.73 11.78 11.83 T:aes128otrpv2 14.51 14.51 14.51 T:twine80n6t4clocv3 14.75 14.77 14.79 T:aes256otrsv2 14.78 14.99 15.01 T:aes256otrsv1 15.32 15.33 15.35 T:aes256otrpv1 15.44 15.45 15.46 T:twine80n6t4clocv2 15.40 15.45 15.47 T:aes256otrpv2 15.83 15.85 15.86 T:aes128n12clocv1 15.84 15.86 15.89 T:aes128n8clocv1 20.50 21.18 21.26 T:proest256otrv1 26.86 26.88 26.90 T:aeadaes128ocbtaglen64v1 26.87 26.89 26.92 T:aeadaes128ocbtaglen96v1 26.81 27.01 27.26 T:ketjesrv1 27.83 27.91 27.93 T:ketjesrv2 32.00 32.01 32.03 T:aeadaes192ocbtaglen96v1 32.00 32.02 32.04 T:aeadaes192ocbtaglen64v1 37.26 37.28 37.29 T:aeadaes256ocbtaglen64v1 37.25 37.28 37.30 T:aeadaes256ocbtaglen96v1 44.44 44.46 44.50 T:colm127v1 44.60 45.03 45.33 T:proest128otrv1 44.92 45.48 45.53 T:ketjejrv1 68.97 69.03 69.07 T:ketjejrv2 70.81 70.83 70.85 T:present80n6t4silcv3 75.52 76.36 76.46 T:deoxysneq128128v13 84.72 88.40 89.03 T:aezv1 94.56 94.89 96.33 T:deoxyseq128128v13 117.92 118.03 118.74 T:deoxysneq256128v13 126.61 126.65 126.74 T:led80n6t4silcv3 155.92 156.95 157.15 T:deoxyseq256128v13 452.45 453.26 456.94 T:acorn128 2673.40 2677.92 2687.29 T:led80n6silcv1 2674.27 2683.91 2697.52 T:led80n6t4silcv2 2862.84 2863.91 2864.56 T:present80n6t4silcv2 2863.66 2865.01 2866.82 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.21 0.21 0.22 T:aezv4 0.22 0.22 0.22 T:aezv3 0.23 0.23 0.24 T:aezv5 0.25 0.26 0.26 aegis128l 0.28 0.28 0.28 T:tiaoxinv1 0.28 0.28 0.28 T:tiaoxinv2 0.38 0.39 0.39 T:aegis128 0.43 0.44 0.44 aegis256 0.51 0.51 0.51 T:aeadaes128ocbtaglen128v1 0.62? 0.63? 0.78? T:aeadaes192ocbtaglen128v1 0.62 0.63 0.64 T:aes128otrpv3 0.66 0.67 0.67 T:aes128otrcv3 0.71 0.71 0.72 T:aeadaes256ocbtaglen128v1 0.79 0.79 0.80 T:aes128gcmv1 0.80 0.80 0.81 T:aes256otrpv3 0.87 0.87 0.88 T:aes256otrcv3 0.90 0.90 0.91 aes256gcmv1 1.01 1.02 1.02 T:deoxysi128v141 1.05 1.05 1.06 T:deoxysneq128128v1 1.12 1.13 1.13 T:morus1280256v1 1.12 1.13 1.14 T:morus1280128v1 1.13 1.14 1.14 T:morus1280128v2 1.14 1.14 1.14 T:morus1280256v2 1.14 1.15 1.15 T:deoxysi256v141 1.16 1.17 1.17 T:deoxysneq256128v1 1.21 1.23 1.24 T:morus640128v1 1.23 1.24 1.25 T:morus640128v2 1.34 1.35 1.35 T:colm0v1 1.36 1.36 1.36 T:aes128otrsv3 1.39 1.40 1.41 T:deoxysii128v141 1.53 1.54 1.55 T:deoxyseq128128v1 1.58 1.59 1.60 T:deoxysii256v141 1.70 1.71 1.72 T:deoxyseq256128v1 1.83 1.84 1.84 T:aes256otrsv3 2.08 2.08 2.08 T:aes128n8t8clocv2 2.08 2.08 2.08 T:aes128n12t8clocv3 2.08 2.08 2.08 T:aes128n12t8clocv2 2.09 2.09 2.09 T:aes128n12t8silcv2 2.09 2.09 2.09 T:aes128n8t8silcv2 2.09 2.09 2.10 T:aes128n12t8silcv3 2.96 2.98 3.00 T:norx6441v3 2.97 2.99 3.03 T:norx6441v2 3.07 3.07 3.08 T:lakekeyakv2 3.30 3.30 3.31 T:seakeyakv2 3.40 3.42 3.44 T:lakekeyakv1 3.44 3.46 3.48 T:norx6441v1 3.80 3.82 3.84 T:norx6444v3 4.14 4.19 4.24 T:norx3241v2 4.17 4.21 4.24 T:norx3241v3 4.34 4.36 4.38 T:oceankeyakv2 4.44 4.45 4.45 T:aesjambuv1 4.47 4.48 4.51 T:norx6461v2 4.49 4.50 4.52 T:norx6461v3 4.62 4.64 4.64 T:norx6444v2 4.83 4.87 4.92 T:norx3241v1 5.17 5.22 5.24 T:norx6461v1 5.45 5.47 5.48 T:norx6444v1 5.52 5.53 5.54 T:riverkeyakv2 6.02 6.03 6.06 T:acorn128v3 6.14 6.17 6.26 T:acorn128v2 6.21 6.24 6.36 T:ketjemajorv2 6.27 6.31 6.37 T:norx3261v2 6.31 6.32 6.33 ascon128av12 6.35 6.37 6.39 T:norx3261v3 6.43 6.44 6.46 T:ascon96v1 6.43 6.45 6.46 T:ascon128av11 7.42 7.44 7.49 T:lunarkeyakv2 7.56 7.68 7.77 T:ketjeminorv2 7.73 7.74 7.76 T:norx3261v1 9.18 9.21 9.23 T:ascon128v1 9.22 9.24 9.26 T:ascon128v11 9.32 9.32 9.34 ascon128v12 11.50 11.51 11.53 T:aes128otrsv2 11.51 11.54 11.56 T:aes128otrsv1 11.72 11.74 11.77 T:aes128otrpv1 11.76 11.78 11.85 T:aes128otrpv2 14.50 14.51 14.51 T:twine80n6t4clocv3 14.78 14.79 14.81 T:aes256otrsv2 14.81 15.01 15.04 T:aes256otrsv1 15.35 15.38 15.40 T:aes256otrpv1 15.38 15.44 15.49 T:aes256otrpv2 15.44 15.45 15.47 T:twine80n6t4clocv2 15.83 15.84 15.86 T:aes128n12clocv1 15.84 15.86 15.88 T:aes128n8clocv1 20.50 21.18 21.25 T:proest256otrv1 26.87 26.89 26.91 T:aeadaes128ocbtaglen64v1 26.87 26.90 26.92 T:aeadaes128ocbtaglen96v1 26.73 26.94 27.17 T:ketjesrv1 27.85 27.91 27.94 T:ketjesrv2 32.00 32.01 32.04 T:aeadaes192ocbtaglen64v1 32.01 32.03 32.05 T:aeadaes192ocbtaglen96v1 37.24 37.26 37.28 T:aeadaes256ocbtaglen96v1 37.25 37.27 37.31 T:aeadaes256ocbtaglen64v1 44.40 44.43 44.47 T:colm127v1 44.32 45.03 45.32 T:proest128otrv1 44.92 45.46 45.55 T:ketjejrv1 68.99 69.03 69.07 T:ketjejrv2 70.80 70.83 70.86 T:present80n6t4silcv3 75.55 76.40 76.52 T:deoxysneq128128v13 84.62 88.36 88.96 T:aezv1 93.62 94.46 96.19 T:deoxyseq128128v13 117.91 118.03 118.73 T:deoxysneq256128v13 126.60 126.66 126.77 T:led80n6t4silcv3 155.97 156.99 157.13 T:deoxyseq256128v13 452.43 454.67 457.05 T:acorn128 2675.80 2682.17 2685.52 T:led80n6silcv1 2671.58 2683.23 2696.76 T:led80n6t4silcv2 2862.76 2863.97 2864.65 T:present80n6t4silcv2 2864.38 2866.00 2866.98 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.97 0.99 1.02 T:aegis128 1.08 1.11 1.17 aegis128l 1.26 1.28 1.32 T:tiaoxinv2 1.26 1.29 1.34 T:tiaoxinv1 1.28 1.30 1.33 aegis256 1.35 1.35 1.37 T:aezv5 1.37 1.38 1.40 T:aezv4 1.48 1.48 1.49 T:aezv3 1.57 1.59 1.61 T:aeadaes128ocbtaglen128v1 1.90 1.92 1.95 T:aes128otrpv3 2.00 2.03 2.05 T:aeadaes256ocbtaglen128v1 2.21 2.23 2.24 T:aes128otrsv3 2.49 2.51 2.55 T:aes256otrpv3 2.52 2.53 2.55 T:aes128n8t8clocv2 2.52 2.54 2.57 T:aes128n12t8clocv3 2.51 2.54 2.56 T:aes128n12t8clocv2 2.66 2.68 2.72 T:colm0v1 2.74 2.76 2.79 T:aes128n8t8silcv2 2.74 2.77 2.82 T:aes128n12t8silcv3 2.71 2.78 2.80 T:aes128otrcv3 2.76 2.78 2.82 T:aes128n12t8silcv2 3.00 3.01 3.02 T:aes256otrsv3 3.02? 3.07? 5.40? T:aeadaes192ocbtaglen128v1 3.13 3.16 3.20 T:deoxysneq128128v1 3.33 3.37 3.41 T:deoxysi128v141 3.51 3.52 3.54 T:aes256otrcv3 3.80 3.83 3.88 T:deoxysneq256128v1 4.03 4.08 4.11 T:deoxysi256v141 3.98 4.08 4.23 T:morus640128v1 4.26 4.35 4.50 T:morus640128v2 4.31 4.37 4.43 T:aes128gcmv1 4.60 4.62 4.64 T:deoxyseq128128v1 4.65 4.68 4.76 T:deoxysii128v141 4.69 4.77 4.87 aes256gcmv1 5.48 5.52 5.60 T:deoxysii256v141 5.55 5.58 5.59 T:aesjambuv1 5.56 5.59 5.64 T:deoxyseq256128v1 5.72 5.78 5.86 T:morus1280128v1 5.77 5.82 5.88 T:morus1280256v1 6.07 6.11 6.17 T:morus1280256v2 6.12 6.22 6.32 T:morus1280128v2 9.46 9.52 9.59 ascon128av12 9.58 9.64 9.74 T:ascon128av11 9.63 9.71 9.78 T:ascon96v1 9.70 9.81 9.99 T:norx6441v1 9.60 9.83 10.01 T:norx6441v2 9.70 9.90 10.15 T:norx6441v3 10.07 10.26 10.44 T:norx3241v2 10.16 10.31 10.52 T:norx3241v1 10.12 10.32 10.53 T:norx3241v3 10.91 10.95 11.07 T:lakekeyakv1 12.02 12.08 12.16 T:ascon128v11 12.05 12.11 12.20 T:ascon128v1 12.22 12.29 12.41 ascon128v12 12.38 12.44 12.49 T:riverkeyakv2 13.02 13.07 13.11 T:lakekeyakv2 14.33 14.54 14.74 T:norx6461v1 14.83 15.02 15.22 T:norx6461v3 14.93 15.09 15.29 T:norx6461v2 15.25 15.46 15.65 T:norx3261v2 15.96 16.07 16.23 T:norx3261v1 16.19 16.25 16.32 T:norx3261v3 18.57 18.60 18.70 T:twine80n6t4clocv3 18.63 18.69 18.85 T:aes128otrpv1 18.63 18.69 18.79 T:aes128otrsv1 18.66 18.73 18.82 T:aes128otrsv2 18.76 18.82 18.96 T:aes128otrpv2 19.20 19.28 19.50 T:aes128n8clocv1 19.21 19.28 19.42 T:aes128n12clocv1 19.21 19.33 19.41 T:twine80n6t4clocv2 23.50 23.65 23.84 T:norx6444v3 23.80 23.88 24.03 T:aes256otrsv1 23.89 23.98 24.16 T:aes256otrsv2 24.41 24.52 24.69 T:aes256otrpv1 24.56 24.65 24.80 T:aes256otrpv2 25.24 25.33 25.53 T:ketjeminorv2 25.77 26.15 26.34 T:acorn128v2 26.26 26.41 27.65 T:acorn128v3 29.57 29.68 29.81 T:seakeyakv2 33.20 33.38 33.59 T:norx6444v2 35.24 35.42 35.90 T:aeadaes128ocbtaglen64v1 35.27 35.44 35.83 T:aeadaes128ocbtaglen96v1 37.71 37.94 38.32 T:ketjemajorv2 38.95 39.10 39.41 T:norx6444v1 41.28 41.35 41.44 T:aeadaes192ocbtaglen64v1 41.34 41.43 41.65 T:aeadaes192ocbtaglen96v1 41.83 42.00 42.44 T:ketjesrv1 46.66 46.75 46.92 T:oceankeyakv2 48.07 48.20 48.55 T:ketjesrv2 48.24 48.33 48.59 T:aeadaes256ocbtaglen96v1 48.23 48.36 48.84 T:aeadaes256ocbtaglen64v1 53.04 53.20 53.55 T:colm127v1 58.03 58.29 58.55 T:ketjejrv1 59.94 60.41 60.62 T:proest256otrv1 72.58 73.01 73.47 T:deoxysneq128128v13 87.01 87.15 87.28 T:present80n6t4silcv3 87.33 87.83 87.92 T:proest128otrv1 91.78 92.06 92.50 T:ketjejrv2 95.14 96.51 102.83 T:aezv1 117.25 118.52 118.79 T:deoxysneq256128v13 118.51 118.72 119.00 T:deoxyseq128128v13 118.92 119.49 120.28 T:lunarkeyakv2 149.75 150.02 150.29 T:led80n6t4silcv3 193.04 194.13 196.05 T:deoxyseq256128v13 1643.08 1648.66 1654.15 T:acorn128 2998.20 3006.87 3008.72 T:led80n6t4silcv2 2998.96 3015.60 3018.07 T:led80n6silcv1 3207.83 3209.06 3212.16 T:present80n6silcv1 3205.28 3210.03 3222.75 T:present80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.01 1.05 1.07 T:aegis128 1.13 1.16 1.22 aegis128l 1.32 1.34 1.40 T:tiaoxinv2 1.31 1.35 1.41 T:tiaoxinv1 1.35 1.36 1.39 T:aezv5 1.38 1.40 1.43 T:aezv4 1.38 1.40 1.43 aegis256 1.49 1.50 1.51 T:aezv3 1.72 1.74 1.78 T:aeadaes128ocbtaglen128v1 1.92 1.94 1.99 T:aes128otrpv3 2.26 2.28 2.30 T:aeadaes256ocbtaglen128v1 2.28 2.29 2.32 T:aes128otrsv3 2.47 2.49 2.50 T:aes256otrpv3 2.54 2.56 2.59 T:aes128n8t8clocv2 2.53 2.57 2.59 T:aes128n12t8clocv3 2.55 2.57 2.59 T:aes128n12t8clocv2 2.81 2.83 2.86 T:aes128otrcv3 2.90 2.92 2.96 T:aes128n8t8silcv2 2.93 2.95 3.00 T:aes128n12t8silcv2 2.93 2.96 3.01 T:aes128n12t8silcv3 3.07 3.09 3.17 T:colm0v1 3.28 3.29 3.30 T:aes256otrsv3 3.38? 3.41? 5.88? T:aeadaes192ocbtaglen128v1 3.68 3.69 3.69 T:aes256otrcv3 4.12 4.20 4.29 T:morus640128v1 4.28 4.34 4.42 T:aes128gcmv1 4.41 4.49 4.56 T:morus640128v2 4.71 4.77 4.83 aes256gcmv1 4.86 4.90 4.94 T:deoxysneq128128v1 4.95 4.99 5.05 T:deoxysneq256128v1 4.96 5.01 5.05 T:deoxysi128v141 5.32 5.36 5.42 T:deoxysii128v141 5.74 5.75 5.77 T:aesjambuv1 5.72 5.79 5.89 T:deoxysi256v141 5.89 5.94 6.05 T:morus1280256v1 5.90 5.94 6.03 T:morus1280128v1 6.08 6.15 6.27 T:morus1280128v2 6.11 6.15 6.23 T:morus1280256v2 6.53 6.57 6.61 T:deoxyseq128128v1 6.61 6.65 6.73 T:deoxysii256v141 6.68 6.71 6.76 T:deoxyseq256128v1 9.46 9.53 9.64 ascon128av12 9.58 9.64 9.74 T:ascon128av11 9.56 9.65 9.72 T:ascon96v1 9.70 9.83 10.06 T:norx6441v1 10.02 10.18 10.39 T:norx6441v2 10.02 10.25 10.48 T:norx6441v3 10.16 10.32 10.57 T:norx3241v3 10.24 10.44 10.65 T:norx3241v1 10.24 10.47 10.69 T:norx3241v2 10.94 10.99 11.10 T:lakekeyakv1 12.03 12.10 12.18 T:ascon128v1 12.08 12.13 12.21 T:ascon128v11 12.21 12.25 12.33 ascon128v12 12.48 12.55 12.64 T:riverkeyakv2 13.07 13.11 13.17 T:lakekeyakv2 14.46 14.65 14.89 T:norx6461v1 15.03 15.16 15.35 T:norx6461v2 15.03 15.21 15.43 T:norx6461v3 15.35 15.54 15.80 T:norx3261v2 16.00 16.05 16.23 T:norx3261v3 16.20 16.29 16.45 T:norx3261v1 18.64 18.71 18.86 T:twine80n6t4clocv3 18.76 18.83 18.97 T:aes128otrsv1 18.79 18.89 19.01 T:aes128otrsv2 19.03 19.08 19.16 T:aes128otrpv1 19.04 19.10 19.19 T:aes128otrpv2 19.32 19.43 19.50 T:twine80n6t4clocv2 19.75 19.82 19.95 T:aes128n8clocv1 19.76 19.86 19.97 T:aes128n12clocv1 23.42 23.62 23.85 T:norx6444v3 23.89 23.96 24.10 T:aes256otrsv1 24.04 24.11 24.31 T:aes256otrsv2 24.80 24.87 24.95 T:aes256otrpv2 24.80 24.88 24.99 T:aes256otrpv1 25.39 25.48 26.23 T:ketjeminorv2 26.21 26.60 27.80 T:acorn128v3 26.33 26.63 26.79 T:acorn128v2 29.61 29.70 29.85 T:seakeyakv2 33.17 33.29 33.43 T:norx6444v2 37.64 37.94 38.33 T:ketjemajorv2 39.05 39.23 39.49 T:norx6444v1 42.30 42.62 43.11 T:ketjesrv1 42.83 43.02 43.63 T:aeadaes128ocbtaglen64v1 42.88 43.07 43.66 T:aeadaes128ocbtaglen96v1 46.51 46.67 47.09 T:oceankeyakv2 48.41 48.45 48.89 T:ketjesrv2 50.24 50.33 50.46 T:aeadaes192ocbtaglen64v1 50.27 50.40 50.62 T:aeadaes192ocbtaglen96v1 58.17 58.49 58.79 T:ketjejrv1 58.90 59.16 59.89 T:aeadaes256ocbtaglen64v1 59.05 59.18 59.34 T:aeadaes256ocbtaglen96v1 60.57 61.14 61.57 T:proest256otrv1 61.26 61.39 61.51 T:colm127v1 84.24 84.65 85.14 T:deoxysneq128128v13 87.04 87.21 87.53 T:present80n6t4silcv3 87.11 87.57 88.85 T:proest128otrv1 92.48 92.76 93.22 T:ketjejrv2 101.83 103.32 109.75 T:aezv1 118.43 118.66 119.09 T:deoxyseq128128v13 119.16 119.78 120.48 T:lunarkeyakv2 131.04 131.83 132.05 T:deoxysneq256128v13 149.80 150.08 150.36 T:led80n6t4silcv3 193.08 194.19 195.98 T:deoxyseq256128v13 1602.16 1613.04 1622.10 T:acorn128 2992.58 2995.02 2997.06 T:led80n6t4silcv2 2999.75 3011.72 3017.41 T:led80n6silcv1 3208.72 3212.15 3215.18 T:present80n6silcv1 3205.51 3213.16 3223.40 T:present80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.00 1.03 1.06 T:aegis128 1.07 1.09 1.09 T:aezv5 1.09 1.09 1.09 T:aezv4 1.12 1.15 1.18 aegis128l 1.17 1.18 1.20 T:aezv3 1.30 1.33 1.38 T:tiaoxinv2 1.32 1.36 1.45 T:tiaoxinv1 1.40 1.43 1.46 aegis256 1.73 1.75 1.79 T:aeadaes128ocbtaglen128v1 1.92 1.94 1.95 T:aes128otrpv3 2.27 2.29 2.31 T:aeadaes256ocbtaglen128v1 2.28 2.30 2.32 T:aes128otrsv3 2.45 2.45 2.46 T:aes128n8t8clocv2 2.45 2.46 2.71 T:aes128n12t8clocv3 2.45? 2.47? 2.78? T:aes128n12t8clocv2 2.47 2.48 2.50 T:aes256otrpv3 2.76 2.77 2.80 T:aes128n12t8silcv2 2.76 2.77 2.81 T:aes128n8t8silcv2 2.76 2.78 2.81 T:aes128n12t8silcv3 2.80 2.83 2.88 T:aes128otrcv3 3.12 3.15 3.18 T:colm0v1 3.29 3.29 3.30 T:aes256otrsv3 3.37? 3.41? 5.30? T:aeadaes192ocbtaglen128v1 3.68 3.69 3.69 T:aes256otrcv3 4.04 4.10 4.17 T:morus640128v1 4.26 4.32 4.38 T:aes128gcmv1 4.38 4.45 4.53 T:morus640128v2 4.69 4.73 4.78 aes256gcmv1 4.73 4.78 4.86 T:deoxysneq128128v1 4.83 4.88 4.93 T:deoxysneq256128v1 4.98 5.00 5.05 T:deoxysi128v141 5.31 5.35 5.39 T:deoxysii128v141 5.73 5.75 5.78 T:aesjambuv1 5.72 5.79 5.96 T:deoxysi256v141 5.88 5.92 5.97 T:morus1280128v1 5.91 5.95 5.99 T:morus1280256v1 6.09 6.11 6.22 T:morus1280128v2 6.10 6.14 6.21 T:morus1280256v2 6.57 6.60 6.62 T:deoxyseq128128v1 6.59 6.65 6.69 T:deoxysii256v141 6.64 6.69 6.76 T:deoxyseq256128v1 9.45 9.51 9.57 ascon128av12 9.55 9.59 9.67 T:ascon128av11 9.54 9.60 9.71 T:ascon96v1 9.69 9.81 9.93 T:norx6441v1 10.04 10.23 10.44 T:norx6441v2 10.08 10.25 10.35 T:norx6441v3 10.21 10.38 10.50 T:norx3241v2 10.21 10.38 10.57 T:norx3241v3 10.35 10.48 10.62 T:norx3241v1 11.01 11.05 11.11 T:lakekeyakv1 12.01 12.09 12.23 T:ascon128v1 12.05 12.12 12.26 T:ascon128v11 12.19 12.26 12.35 ascon128v12 12.57 12.63 12.69 T:riverkeyakv2 13.11 13.14 13.21 T:lakekeyakv2 14.46 14.64 14.87 T:norx6461v1 14.97 15.14 15.33 T:norx6461v2 15.09 15.24 15.39 T:norx6461v3 15.45 15.69 15.97 T:norx3261v2 16.00 16.05 16.24 T:norx3261v3 16.18 16.27 16.41 T:norx3261v1 18.55 18.63 18.76 T:twine80n6t4clocv3 18.78 18.86 19.10 T:aes128otrsv1 18.81 18.89 18.99 T:aes128otrsv2 19.07 19.13 19.27 T:aes128otrpv1 19.10 19.19 19.29 T:aes128otrpv2 19.27 19.39 19.47 T:twine80n6t4clocv2 19.64 19.70 19.86 T:aes128n8clocv1 19.64 19.74 19.83 T:aes128n12clocv1 23.35 23.51 23.66 T:norx6444v3 23.91 23.99 24.28 T:aes256otrsv1 24.08 24.17 24.37 T:aes256otrsv2 24.87 24.94 25.14 T:aes256otrpv2 24.89 24.95 25.13 T:aes256otrpv1 25.42 25.52 26.18 T:ketjeminorv2 26.16 26.42 26.82 T:acorn128v2 26.20 26.54 27.69 T:acorn128v3 29.57 29.70 29.86 T:seakeyakv2 33.23 33.30 33.46 T:norx6444v2 37.68 37.92 38.26 T:ketjemajorv2 39.10 39.23 39.41 T:norx6444v1 42.11 42.54 43.01 T:ketjesrv1 42.82 42.95 43.64 T:aeadaes128ocbtaglen96v1 42.81 42.99 43.54 T:aeadaes128ocbtaglen64v1 46.59 46.72 47.04 T:oceankeyakv2 48.45 48.57 48.96 T:ketjesrv2 50.24 50.34 50.48 T:aeadaes192ocbtaglen64v1 50.29 50.39 50.49 T:aeadaes192ocbtaglen96v1 58.30 58.59 58.86 T:ketjejrv1 58.90 59.07 59.41 T:aeadaes256ocbtaglen64v1 59.04 59.19 59.32 T:aeadaes256ocbtaglen96v1 58.80 59.61 59.81 T:proest256otrv1 61.09 61.24 61.45 T:colm127v1 84.41 84.71 85.10 T:deoxysneq128128v13 86.96 87.17 87.60 T:present80n6t4silcv3 86.82 87.51 87.67 T:proest128otrv1 92.57 92.78 93.25 T:ketjejrv2 101.63 102.62 109.32 T:aezv1 118.41 118.66 118.87 T:deoxyseq128128v13 119.11 119.52 120.44 T:lunarkeyakv2 130.99 131.91 132.18 T:deoxysneq256128v13 149.64 149.79 150.05 T:led80n6t4silcv3 193.01 194.06 196.07 T:deoxyseq256128v13 1602.13 1611.87 1622.07 T:acorn128 2995.38 2998.32 3006.53 T:led80n6t4silcv2 2995.44 3004.85 3014.57 T:led80n6silcv1 3207.59 3210.24 3211.99 T:present80n6silcv1 3203.90 3212.60 3223.14 T:present80n6t4silcv2