VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, LPE cores; 2 x 700MHz; meteor,tiny, supercop-20261018

[Page version: 20261103 15:52:22]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.22 0.22 0.23 T:tiaoxinv1 0.22 0.22 0.23 T:tiaoxinv2 0.24 0.25 0.25 aegis128l 0.38 0.38 0.39 T:aegis128 0.42 0.43 0.44 T:aezv4 0.42 0.43 0.43 aegis256 0.43 0.44 0.44 T:aezv3 0.46 0.47 0.47 T:aezv5 0.46 0.47 0.47 T:aeadaes128ocbtaglen128v1 0.51 0.51 0.52 T:aes128otrcv3 0.52 0.53 0.54 T:aes128otrsv3 0.53 0.54 0.54 T:aes128otrpv3 0.35? 0.57? 0.82? T:aeadaes192ocbtaglen128v1 0.58 0.59 0.60 T:aeadaes256ocbtaglen128v1 0.66 0.67 0.68 T:aes256otrsv3 0.66 0.67 0.68 T:aes256otrcv3 0.66 0.67 0.68 T:aes256otrpv3 0.80 0.81 0.82 T:deoxysi128v141 0.86 0.87 0.88 T:deoxysneq128128v1 0.90 0.91 0.92 T:aes128gcmv1 0.91 0.92 0.93 T:deoxysi256v141 0.96 0.97 0.98 T:deoxysneq256128v1 0.96 0.97 0.98 T:morus1280256v1 0.97 0.97 0.99 T:morus1280256v2 0.97 0.98 0.99 T:morus1280128v1 0.97 0.98 0.99 T:morus1280128v2 1.07 1.07 1.08 aes256gcmv1 1.11 1.14 1.16 T:morus640128v2 1.13 1.15 1.17 T:morus640128v1 1.61 1.62 1.63 T:deoxysii128v141 1.73 1.75 1.76 T:colm0v1 1.79 1.81 1.82 T:deoxyseq128128v1 1.81 1.83 1.84 T:deoxysii256v141 1.96 2.00 2.05 T:lunarkeyakv2 2.04 2.06 2.07 T:deoxyseq256128v1 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.12 2.13 T:aes128n12t8clocv2 2.12 2.12 2.13 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n8t8clocv2 2.12 2.13 2.13 T:aes128n12t8silcv2 2.12 2.13 2.13 T:aes128n12t8silcv3 2.32 2.35 2.37 T:norx6444v3 2.57 2.62 2.67 T:norx6441v2 2.61 2.65 2.69 T:norx6441v3 2.70 2.71 2.72 T:seakeyakv2 2.71 2.75 2.78 T:oceankeyakv2 3.01 3.02 3.09 T:lakekeyakv1 3.07 3.10 3.13 T:norx6441v1 3.18 3.19 3.21 T:lakekeyakv2 3.35 3.39 3.42 T:norx6444v2 3.74 3.79 3.84 T:norx3241v3 3.75 3.82 3.90 T:norx3241v2 3.79 3.86 3.90 T:norx6444v1 3.85 3.90 3.94 T:norx6461v2 3.91 3.97 4.04 T:norx6461v3 4.23 4.24 4.25 T:aesjambuv1 4.50 4.56 4.68 T:norx3241v1 4.66 4.71 4.76 T:norx6461v1 5.03 5.06 5.33 T:acorn128v2 5.03 5.14 5.41 T:acorn128v3 5.63 5.80 5.91 T:ketjemajorv2 5.76 5.82 5.90 T:norx3261v3 5.88 5.94 6.00 T:norx3261v2 6.20 6.22 6.23 ascon128av12 6.33 6.35 6.37 T:ascon128av11 6.35 6.37 6.39 T:ascon96v1 7.01 7.15 7.19 T:ketjeminorv2 7.21 7.23 7.26 T:riverkeyakv2 7.32 7.37 7.41 T:norx3261v1 9.08 9.11 9.19 T:ascon128v11 9.11 9.19 9.21 T:ascon128v1 9.19 9.20 9.21 ascon128v12 11.76 11.78 11.80 T:aes128otrpv2 11.76 11.78 11.81 T:aes128otrpv1 12.24 12.27 12.31 T:aes128otrsv2 12.26 12.30 12.33 T:aes128otrsv1 14.51 14.53 14.54 T:twine80n6t4clocv3 15.25 15.28 15.30 T:aes256otrpv1 15.27 15.29 15.31 T:aes256otrpv2 15.36 15.40 15.44 T:aes256otrsv1 15.41 15.44 15.47 T:aes256otrsv2 15.49 15.54 15.60 T:twine80n6t4clocv2 18.79 18.83 19.51 T:proest256otrv1 20.41 20.44 20.46 T:aes128n12clocv1 20.46 20.49 20.51 T:aes128n8clocv1 22.42 22.44 22.47 T:aeadaes128ocbtaglen96v1 22.42 22.44 22.47 T:aeadaes128ocbtaglen64v1 26.58 26.60 26.63 T:aeadaes192ocbtaglen96v1 26.57 26.60 26.63 T:aeadaes192ocbtaglen64v1 26.83 27.00 27.24 T:ketjesrv2 26.95 27.11 27.23 T:ketjesrv1 30.81 30.83 30.87 T:aeadaes256ocbtaglen64v1 30.82 30.85 30.89 T:aeadaes256ocbtaglen96v1 43.28 43.45 44.47 T:proest128otrv1 48.38 48.41 48.45 T:colm127v1 48.29 48.54 48.58 T:ketjejrv1 63.35 64.74 65.12 T:deoxysneq128128v13 68.80 70.75 71.10 T:ketjejrv2 70.84 70.99 71.18 T:present80n6t4silcv3 102.94 104.36 105.04 T:deoxysneq256128v13 126.29 126.36 126.42 T:led80n6t4silcv3 126.93 128.65 129.19 T:deoxyseq128128v13 128.46 135.89 136.08 T:aezv1 205.73 207.77 209.54 T:deoxyseq256128v13 405.78 413.60 427.40 T:acorn128 3546.46 3549.33 3556.14 T:led80n6silcv1 3550.76 3561.86 3567.67 T:led80n6t4silcv2 3802.86 3806.09 3807.28 T:present80n6silcv1 3796.19 3811.15 3815.89 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.26 0.27 0.28 aegis128l 0.33 0.34 0.34 T:tiaoxinv1 0.33 0.34 0.34 T:tiaoxinv2 0.40 0.40 0.41 T:aegis128 0.41 0.42 0.42 aegis256 0.43 0.43 0.44 T:aezv3 0.39? 0.43? 0.46? T:aezv4 0.47 0.47 0.48 T:aezv5 0.48 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.55 0.56 0.57 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrpv3 0.56 0.57 0.58 T:aes128otrsv3 0.33? 0.58? 0.72? T:aeadaes192ocbtaglen128v1 0.64 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.69 0.69 0.71 T:aes256otrcv3 0.70 0.71 0.71 T:aes256otrpv3 0.70 0.72 0.73 T:aes256otrsv3 0.87 0.88 0.90 T:deoxysi128v141 0.94 0.96 0.96 T:morus1280128v2 0.94 0.96 0.97 T:aes128gcmv1 0.94 0.96 0.96 T:deoxysneq128128v1 0.97 0.98 0.99 T:morus1280128v1 0.97 0.98 0.99 T:morus1280256v2 0.97 0.98 0.99 T:deoxysi256v141 0.97 0.98 0.99 T:morus1280256v1 1.06 1.07 1.07 T:deoxysneq256128v1 1.11 1.14 1.16 T:morus640128v1 1.12 1.15 1.17 T:morus640128v2 1.16 1.17 1.18 aes256gcmv1 1.61 1.62 1.63 T:deoxysii128v141 1.80 1.81 1.83 T:deoxysii256v141 1.83 1.84 1.86 T:deoxyseq128128v1 1.84 1.85 1.86 T:colm0v1 1.99 2.04 2.08 T:lunarkeyakv2 2.04 2.06 2.08 T:deoxyseq256128v1 2.05 2.06 2.07 T:aes128n12t8silcv2 2.05 2.06 2.08 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.06 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128n12t8clocv2 2.06 2.06 2.06 T:aes128n8t8clocv2 2.31 2.35 2.38 T:norx6444v3 2.47 2.50 2.55 T:norx6441v3 2.51 2.54 2.58 T:norx6441v2 2.74 2.76 2.78 T:seakeyakv2 2.77 2.83 2.88 T:oceankeyakv2 3.03 3.08 3.11 T:norx6441v1 3.07 3.09 3.16 T:lakekeyakv1 3.18 3.18 3.21 T:lakekeyakv2 3.36 3.40 3.44 T:norx6444v2 3.65 3.71 3.80 T:norx3241v3 3.69 3.74 3.82 T:norx3241v2 3.73 3.77 3.81 T:norx6461v3 3.79 3.85 3.89 T:norx6444v1 3.82 3.87 3.90 T:norx6461v2 4.34 4.41 4.47 T:norx3241v1 4.56 4.56 4.57 T:aesjambuv1 4.51 4.58 4.62 T:norx6461v1 5.15? 5.19? 5.94? T:acorn128v2 5.05? 5.28? 5.66? T:acorn128v3 5.39 5.49 5.67 T:ketjemajorv2 5.68 5.76 5.84 T:norx3261v3 5.75 5.80 5.86 T:norx3261v2 6.18 6.19 6.20 ascon128av12 6.27 6.30 6.32 T:ascon128av11 6.29 6.31 6.35 T:ascon96v1 7.20 7.23 7.26 T:norx3261v1 7.25 7.33 7.41 T:ketjeminorv2 7.39 7.43 7.47 T:riverkeyakv2 8.94 9.04 9.17 T:ascon128v1 8.97 9.08 9.15 T:ascon128v11 9.20 9.21 9.22 ascon128v12 11.89 11.93 11.98 T:aes128otrpv1 11.93 12.07 12.14 T:aes128otrpv2 12.55 12.58 12.61 T:aes128otrsv2 12.55 12.60 12.63 T:aes128otrsv1 14.50 14.53 14.55 T:twine80n6t4clocv3 15.38 15.43 15.51 T:aes256otrpv1 15.44 15.49 15.65 T:aes256otrpv2 15.55 15.58 15.60 T:twine80n6t4clocv2 15.65 15.70 15.73 T:aes256otrsv1 15.70 15.75 15.77 T:aes256otrsv2 18.74 18.82 19.49 T:proest256otrv1 20.09 20.12 20.16 T:aes128n8clocv1 20.12 20.15 20.17 T:aes128n12clocv1 27.62 27.71 27.77 T:ketjesrv2 27.79 28.12 28.27 T:ketjesrv1 30.44 30.47 30.50 T:aeadaes128ocbtaglen64v1 30.45 30.48 30.51 T:aeadaes128ocbtaglen96v1 36.36 36.41 36.45 T:aeadaes192ocbtaglen64v1 36.37 36.41 36.44 T:aeadaes192ocbtaglen96v1 42.35 42.39 42.43 T:aeadaes256ocbtaglen96v1 42.34 42.39 42.47 T:aeadaes256ocbtaglen64v1 42.32 42.49 43.46 T:proest128otrv1 47.98 48.39 48.66 T:ketjejrv1 64.39 64.45 64.58 T:colm127v1 70.82 70.97 71.03 T:present80n6t4silcv3 69.97 71.53 71.70 T:ketjejrv2 86.57 87.67 88.41 T:deoxysneq128128v13 126.02 126.33 127.01 T:led80n6t4silcv3 127.03 128.64 129.46 T:deoxyseq128128v13 129.89 131.01 132.08 T:deoxysneq256128v13 128.46 136.02 136.26 T:aezv1 205.63 206.67 209.41 T:deoxyseq256128v13 395.95 403.80 406.50 T:acorn128 3550.19 3555.93 3559.62 T:led80n6silcv1 3549.11 3560.75 3565.53 T:led80n6t4silcv2 3803.17 3806.38 3807.95 T:present80n6silcv1 3796.33 3808.13 3810.93 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.15? 0.16? 0.17? T:aezv4 0.16 0.16 0.16 T:aezv3 0.18 0.19 0.19 T:aezv5 0.26 0.27 0.28 aegis128l 0.33 0.34 0.35 T:tiaoxinv1 0.33 0.34 0.35 T:tiaoxinv2 0.40 0.40 0.41 T:aegis128 0.46 0.47 0.47 aegis256 0.48 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.55 0.57 0.57 T:aes128otrpv3 0.56 0.57 0.58 T:aes128otrsv3 0.45? 0.58? 0.83? T:aeadaes192ocbtaglen128v1 0.64 0.64 0.65 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.71 T:aes256otrcv3 0.69 0.70 0.71 T:aes256otrpv3 0.70 0.71 0.73 T:aes256otrsv3 0.87 0.89 0.90 T:deoxysi128v141 0.93 0.95 0.96 T:deoxysneq128128v1 0.95 0.96 0.96 T:aes128gcmv1 0.95 0.96 0.98 T:morus1280128v2 0.97 0.98 0.99 T:morus1280128v1 0.97 0.98 0.99 T:morus1280256v2 0.97 0.98 0.99 T:morus1280256v1 0.98 0.99 1.00 T:deoxysi256v141 1.05 1.07 1.08 T:deoxysneq256128v1 1.11 1.13 1.15 T:morus640128v1 1.14 1.16 1.17 T:morus640128v2 1.16 1.17 1.18 aes256gcmv1 1.61 1.62 1.63 T:deoxysii128v141 1.80 1.82 1.83 T:deoxysii256v141 1.83 1.85 1.85 T:colm0v1 1.84 1.85 1.85 T:deoxyseq128128v1 2.04 2.05 2.07 T:deoxyseq256128v1 2.04 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.08 T:aes128n12t8clocv2 2.06 2.06 2.08 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.05 2.06 2.08 T:aes128n12t8silcv3 2.05 2.13 2.18 T:lunarkeyakv2 2.32 2.34 2.37 T:norx6444v3 2.48 2.52 2.56 T:norx6441v3 2.51 2.55 2.59 T:norx6441v2 2.79 2.80 2.82 T:seakeyakv2 2.83 2.85 2.89 T:oceankeyakv2 3.04 3.07 3.10 T:norx6441v1 3.09 3.11 3.22 T:lakekeyakv1 3.20 3.21 3.22 T:lakekeyakv2 3.41 3.44 3.48 T:norx6444v2 3.66 3.73 3.81 T:norx3241v3 3.69 3.75 3.79 T:norx3241v2 3.71 3.75 3.81 T:norx6461v3 3.83 3.88 3.91 T:norx6461v2 3.81 3.89 3.93 T:norx6444v1 4.34 4.40 4.47 T:norx3241v1 4.56 4.57 4.57 T:aesjambuv1 4.54 4.59 4.64 T:norx6461v1 5.15? 5.19? 5.96? T:acorn128v2 5.07? 5.30? 5.67? T:acorn128v3 5.40 5.53 5.70 T:ketjemajorv2 5.68 5.73 5.81 T:norx3261v3 5.74 5.79 5.86 T:norx3261v2 6.18 6.20 6.21 ascon128av12 6.26 6.29 6.31 T:ascon128av11 6.29 6.31 6.33 T:ascon96v1 7.19 7.23 7.26 T:norx3261v1 7.31 7.37 7.41 T:ketjeminorv2 7.42 7.44 7.45 T:riverkeyakv2 8.96 9.07 9.15 T:ascon128v11 9.07 9.14 9.17 T:ascon128v1 9.20 9.21 9.22 ascon128v12 11.95 11.99 12.17 T:aes128otrpv2 11.98 12.00 12.03 T:aes128otrpv1 12.59 12.61 12.64 T:aes128otrsv2 12.59 12.62 12.66 T:aes128otrsv1 14.51 14.53 14.55 T:twine80n6t4clocv3 15.42 15.49 15.53 T:aes256otrpv1 15.56 15.58 15.61 T:twine80n6t4clocv2 15.47 15.61 15.70 T:aes256otrpv2 15.69 15.73 15.76 T:aes256otrsv1 15.75 15.78 15.82 T:aes256otrsv2 18.74 18.81 19.51 T:proest256otrv1 20.10 20.13 20.16 T:aes128n8clocv1 20.12 20.15 20.18 T:aes128n12clocv1 27.65 27.70 27.79 T:ketjesrv2 27.84 28.17 28.30 T:ketjesrv1 30.45 30.48 30.52 T:aeadaes128ocbtaglen64v1 30.45 30.49 30.53 T:aeadaes128ocbtaglen96v1 36.36 36.39 36.43 T:aeadaes192ocbtaglen64v1 36.38 36.42 36.45 T:aeadaes192ocbtaglen96v1 42.34 42.38 42.46 T:aeadaes256ocbtaglen64v1 42.28 42.38 43.39 T:proest128otrv1 42.37 42.40 42.44 T:aeadaes256ocbtaglen96v1 47.88 48.46 48.63 T:ketjejrv1 63.40 63.48 63.56 T:colm127v1 70.88 70.97 71.04 T:present80n6t4silcv3 70.02 71.54 71.75 T:ketjejrv2 86.60 87.74 88.37 T:deoxysneq128128v13 126.02 126.29 126.97 T:led80n6t4silcv3 127.13 128.66 129.55 T:deoxyseq128128v13 129.90 130.92 131.88 T:deoxysneq256128v13 128.41 135.93 136.21 T:aezv1 205.62 206.73 209.44 T:deoxyseq256128v13 396.03 403.74 406.54 T:acorn128 3547.17 3555.57 3562.26 T:led80n6silcv1 3546.85 3558.83 3568.17 T:led80n6t4silcv2 3802.75 3806.10 3807.64 T:present80n6silcv1 3794.81 3808.38 3810.74 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.17 0.18 0.18 T:tiaoxinv2 0.17 0.18 0.18 T:tiaoxinv1 0.20 0.21 0.21 aegis128l 0.31 0.31 0.32 T:aezv4 0.31 0.32 0.33 T:aezv3 0.34 0.35 0.35 T:aezv5 0.36 0.36 0.37 aegis256 0.36 0.37 0.38 T:aegis128 0.43 0.44 0.45 T:aeadaes128ocbtaglen128v1 0.39? 0.51? 0.61? T:aeadaes192ocbtaglen128v1 0.53 0.54 0.54 T:aes128otrcv3 0.54 0.55 0.55 T:aes128otrpv3 0.62 0.62 0.63 T:aeadaes256ocbtaglen128v1 0.67 0.68 0.68 T:aes128gcmv1 0.69 0.69 0.70 T:aes256otrcv3 0.69 0.70 0.71 T:aes256otrpv3 0.74 0.75 0.76 aes256gcmv1 0.81 0.81 0.82 T:deoxysi128v141 0.86 0.87 0.87 T:deoxysneq128128v1 0.91 0.91 0.92 T:morus1280256v1 0.90 0.92 0.94 T:morus1280128v1 0.91 0.92 0.92 T:deoxysi256v141 0.92 0.92 0.93 T:morus1280256v2 0.92 0.93 0.94 T:morus1280128v2 0.96 0.97 0.98 T:deoxysneq256128v1 1.08 1.10 1.11 T:morus640128v2 1.09 1.10 1.11 T:morus640128v1 1.21 1.22 1.22 T:deoxysii128v141 1.22 1.23 1.24 T:colm0v1 1.29 1.30 1.30 T:aes128otrsv3 1.35 1.36 1.37 T:deoxyseq128128v1 1.36 1.37 1.37 T:deoxysii256v141 1.53 1.54 1.55 T:deoxyseq256128v1 1.74 1.74 1.75 T:aes256otrsv3 2.09 2.09 2.09 T:aes128n8t8clocv2 2.09 2.09 2.09 T:aes128n12t8clocv2 2.09 2.09 2.10 T:aes128n12t8silcv3 2.09 2.09 2.09 T:aes128n12t8clocv3 2.09 2.09 2.10 T:aes128n12t8silcv2 2.09 2.09 2.10 T:aes128n8t8silcv2 2.26 2.27 2.30 T:seakeyakv2 2.28 2.31 2.33 T:oceankeyakv2 2.57 2.60 2.64 T:norx6441v2 2.61 2.64 2.67 T:norx6441v3 2.79 2.80 2.83 T:lunarkeyakv2 2.80 2.81 2.83 T:lakekeyakv2 2.82 2.84 2.86 T:norx6444v3 2.88 2.90 2.92 T:lakekeyakv1 3.06 3.10 3.13 T:norx6441v1 3.26 3.27 3.30 T:norx6444v2 3.84 3.87 3.90 T:norx6444v1 3.85 3.88 3.90 T:norx6461v2 3.86 3.90 3.96 T:norx3241v3 3.85 3.90 3.97 T:norx3241v2 3.90 3.95 4.01 T:norx6461v3 4.21 4.22 4.22 T:aesjambuv1 4.56 4.60 4.65 T:norx6461v1 4.68 4.73 4.80 T:norx3241v1 4.90 4.95 5.11 T:ketjemajorv2 4.89 4.96 5.01 T:acorn128v3 4.98 5.01 5.35 T:acorn128v2 5.16 5.19 5.30 T:riverkeyakv2 5.88 5.91 5.96 T:norx3261v3 5.87 5.94 6.03 T:norx3261v2 6.18 6.19 6.21 ascon128av12 6.32 6.34 6.35 T:ascon128av11 6.32 6.34 6.35 T:ascon96v1 6.71 6.86 7.32 T:ketjeminorv2 7.34 7.37 7.40 T:norx3261v1 9.09 9.14 9.15 T:ascon128v1 9.14 9.16 9.17 T:ascon128v11 9.20 9.21 9.26 ascon128v12 10.99 11.01 11.05 T:aes128otrsv1 11.01 11.04 11.06 T:aes128otrsv2 11.29 11.31 11.33 T:aes128otrpv1 11.30 11.32 11.35 T:aes128otrpv2 14.13 14.15 14.17 T:aes256otrsv1 14.18 14.20 14.22 T:aes256otrsv2 14.32 14.33 14.33 T:twine80n6t4clocv3 14.83 14.86 14.88 T:aes256otrpv1 14.84 14.87 14.89 T:aes256otrpv2 15.22 15.28 15.30 T:twine80n6t4clocv2 15.61 15.62 15.64 T:aes128n12clocv1 15.61 15.64 15.69 T:aes128n8clocv1 19.02 19.13 19.40 T:proest256otrv1 22.13 22.15 22.19 T:aeadaes128ocbtaglen96v1 22.14 22.17 22.19 T:aeadaes128ocbtaglen64v1 26.02 26.16 26.25 T:ketjesrv1 26.30 26.32 26.34 T:aeadaes192ocbtaglen96v1 26.30 26.32 26.34 T:aeadaes192ocbtaglen64v1 26.19 26.33 26.65 T:ketjesrv2 30.50 30.54 30.57 T:aeadaes256ocbtaglen64v1 30.52 30.55 30.58 T:aeadaes256ocbtaglen96v1 35.72 35.76 35.78 T:colm127v1 43.53 43.73 44.17 T:proest128otrv1 44.47 44.56 44.79 T:ketjejrv1 63.50 63.99 64.52 T:deoxysneq128128v13 67.58 69.46 69.73 T:ketjejrv2 70.09 70.15 70.23 T:present80n6t4silcv3 86.22 89.83 90.29 T:aezv1 95.10 95.29 96.45 T:deoxyseq128128v13 103.96 104.12 104.39 T:deoxysneq256128v13 125.71 125.76 125.81 T:led80n6t4silcv3 155.46 155.64 155.75 T:deoxyseq256128v13 402.79 407.00 417.43 T:acorn128 2666.69 2669.85 2676.60 T:led80n6silcv1 2655.24 2675.41 2694.53 T:led80n6t4silcv2 2849.65 2852.01 2857.23 T:present80n6t4silcv2 2851.57 2854.40 2857.01 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.21 0.22 0.22 aegis128l 0.22 0.23 0.24 T:tiaoxinv2 0.23 0.23 0.24 T:tiaoxinv1 0.29? 0.31? 0.33? T:aezv4 0.31 0.32 0.33 T:aezv3 0.34 0.35 0.35 T:aezv5 0.35 0.36 0.36 T:aegis128 0.36 0.37 0.37 aegis256 0.45 0.46 0.46 T:aeadaes128ocbtaglen128v1 0.43? 0.53? 0.66? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.57 0.57 0.58 T:aes128otrpv3 0.64 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.71 T:aes128gcmv1 0.71 0.72 0.72 T:aes256otrpv3 0.71 0.72 0.72 T:aes256otrcv3 0.79 0.80 0.80 aes256gcmv1 0.85 0.85 0.86 T:deoxysi128v141 0.90 0.91 0.91 T:deoxysneq128128v1 0.90 0.92 0.92 T:morus1280128v1 0.91 0.92 0.92 T:morus1280256v1 0.91 0.92 0.93 T:morus1280256v2 0.91 0.92 0.94 T:morus1280128v2 0.94 0.95 0.96 T:deoxysi256v141 1.01 1.02 1.03 T:deoxysneq256128v1 1.09 1.10 1.11 T:morus640128v1 1.09 1.10 1.12 T:morus640128v2 1.21 1.21 1.22 T:deoxysii128v141 1.27 1.28 1.29 T:colm0v1 1.32 1.32 1.32 T:aes128otrsv3 1.36 1.37 1.38 T:deoxysii256v141 1.36 1.37 1.38 T:deoxyseq128128v1 1.54 1.55 1.56 T:deoxyseq256128v1 1.75 1.76 1.76 T:aes256otrsv3 2.05 2.06 2.06 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128n12t8clocv3 2.05 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.31 2.33 2.36 T:seakeyakv2 2.33 2.35 2.37 T:oceankeyakv2 2.54 2.57 2.59 T:norx6441v3 2.56 2.59 2.61 T:norx6441v2 2.78 2.81 2.84 T:lunarkeyakv2 2.82 2.83 2.85 T:lakekeyakv2 2.82 2.83 2.85 T:norx6444v3 2.90 2.92 2.94 T:lakekeyakv1 3.04 3.08 3.12 T:norx6441v1 3.22 3.25 3.29 T:norx6444v2 3.79 3.84 3.87 T:norx6461v3 3.83 3.85 3.88 T:norx6461v2 3.82 3.86 3.91 T:norx3241v2 3.85 3.88 3.93 T:norx6444v1 3.85 3.90 3.94 T:norx3241v3 4.39 4.39 4.39 T:aesjambuv1 4.56 4.60 4.65 T:norx3241v1 4.58 4.62 4.67 T:norx6461v1 4.83 4.89 4.95 T:ketjemajorv2 4.99 5.03 5.14 T:acorn128v3 5.12 5.14 5.28 T:acorn128v2 5.26 5.29 5.30 T:riverkeyakv2 5.79 5.86 5.91 T:norx3261v2 5.85 5.92 5.96 T:norx3261v3 6.16 6.17 6.19 ascon128av12 6.30 6.31 6.32 T:ascon128av11 6.31 6.32 6.34 T:ascon96v1 6.84 6.89 7.03 T:ketjeminorv2 7.31 7.33 7.35 T:norx3261v1 9.04 9.05 9.09 T:ascon128v11 9.04 9.09 9.11 T:ascon128v1 9.18 9.19 9.20 ascon128v12 11.12 11.17 11.20 T:aes128otrsv1 11.16 11.18 11.20 T:aes128otrsv2 11.38 11.40 11.43 T:aes128otrpv1 11.40 11.44 11.50 T:aes128otrpv2 14.27 14.30 14.31 T:aes256otrsv1 14.31 14.33 14.33 T:twine80n6t4clocv3 14.34 14.35 14.37 T:aes256otrsv2 14.90 14.93 14.95 T:aes256otrpv1 15.02 15.04 15.06 T:aes256otrpv2 15.27 15.28 15.29 T:twine80n6t4clocv2 15.43 15.45 15.48 T:aes128n8clocv1 15.45 15.47 15.49 T:aes128n12clocv1 19.00 19.12 19.39 T:proest256otrv1 26.14 26.18 26.27 T:aeadaes128ocbtaglen96v1 26.15 26.19 26.22 T:aeadaes128ocbtaglen64v1 26.35 26.55 26.70 T:ketjesrv1 26.70 26.75 27.04 T:ketjesrv2 31.20 31.22 31.24 T:aeadaes192ocbtaglen96v1 31.20 31.22 31.25 T:aeadaes192ocbtaglen64v1 36.29 36.33 36.36 T:aeadaes256ocbtaglen64v1 36.30 36.33 36.37 T:aeadaes256ocbtaglen96v1 43.05 43.18 43.77 T:proest128otrv1 43.76 43.80 43.83 T:colm127v1 44.47 44.66 44.73 T:ketjejrv1 68.21 69.83 70.08 T:ketjejrv2 70.09 70.13 70.19 T:present80n6t4silcv3 75.31 75.53 75.96 T:deoxysneq128128v13 86.25 89.96 90.38 T:aezv1 95.11 95.55 96.39 T:deoxyseq128128v13 117.37 117.59 117.83 T:deoxysneq256128v13 125.57 125.62 125.78 T:led80n6t4silcv3 155.00 155.67 155.79 T:deoxyseq256128v13 397.25 402.20 404.17 T:acorn128 2656.31 2663.82 2694.85 T:led80n6t4silcv2 2663.24 2666.49 2675.01 T:led80n6silcv1 2852.31 2854.27 2857.01 T:present80n6silcv1 2852.15 2857.95 2860.56 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.17 0.18 0.18 T:aezv4 0.17? 0.18? 0.19? T:aezv3 0.19 0.20 0.20 T:aezv5 0.21 0.22 0.22 aegis128l 0.23 0.23 0.23 T:tiaoxinv1 0.23 0.23 0.24 T:tiaoxinv2 0.35 0.36 0.36 T:aegis128 0.39 0.40 0.40 aegis256 0.45 0.45 0.46 T:aeadaes128ocbtaglen128v1 0.40? 0.53? 0.60? T:aeadaes192ocbtaglen128v1 0.55 0.56 0.56 T:aes128otrcv3 0.57 0.57 0.57 T:aes128otrpv3 0.64 0.65 0.65 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.71 T:aes128gcmv1 0.71 0.72 0.72 T:aes256otrpv3 0.72 0.72 0.73 T:aes256otrcv3 0.79 0.80 0.80 aes256gcmv1 0.84 0.85 0.86 T:deoxysi128v141 0.90 0.91 0.92 T:deoxysneq128128v1 0.91 0.92 0.92 T:morus1280128v1 0.91 0.92 0.92 T:morus1280256v1 0.91 0.92 0.93 T:morus1280128v2 0.91 0.92 0.93 T:morus1280256v2 0.94 0.95 0.96 T:deoxysi256v141 1.01 1.02 1.03 T:deoxysneq256128v1 1.08 1.10 1.11 T:morus640128v1 1.08 1.10 1.12 T:morus640128v2 1.21 1.22 1.22 T:deoxysii128v141 1.27 1.28 1.29 T:colm0v1 1.32 1.32 1.32 T:aes128otrsv3 1.36 1.37 1.38 T:deoxysii256v141 1.37 1.37 1.38 T:deoxyseq128128v1 1.54 1.55 1.56 T:deoxyseq256128v1 1.75 1.76 1.76 T:aes256otrsv3 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.33 2.34 2.38 T:seakeyakv2 2.35 2.37 2.39 T:oceankeyakv2 2.54 2.56 2.59 T:norx6441v3 2.55 2.58 2.61 T:norx6441v2 2.83 2.84 2.86 T:lakekeyakv2 2.82 2.84 2.86 T:norx6444v3 2.82 2.85 2.88 T:lunarkeyakv2 2.92 2.93 2.95 T:lakekeyakv1 3.07 3.09 3.11 T:norx6441v1 3.25 3.27 3.29 T:norx6444v2 3.80 3.84 3.88 T:norx6461v3 3.83 3.86 3.88 T:norx6461v2 3.83 3.86 3.90 T:norx3241v2 3.84 3.89 3.95 T:norx3241v3 3.88 3.90 3.95 T:norx6444v1 4.39 4.39 4.39 T:aesjambuv1 4.58 4.60 4.64 T:norx6461v1 4.57 4.61 4.67 T:norx3241v1 4.86 4.93 4.97 T:ketjemajorv2 5.01 5.05 5.14 T:acorn128v3 5.12 5.15 5.29 T:acorn128v2 5.27 5.28 5.30 T:riverkeyakv2 5.83 5.85 5.88 T:norx3261v3 5.82 5.87 5.92 T:norx3261v2 6.16 6.17 6.18 ascon128av12 6.30 6.31 6.32 T:ascon128av11 6.31 6.32 6.34 T:ascon96v1 6.87 6.91 7.06 T:ketjeminorv2 7.32 7.34 7.35 T:norx3261v1 9.05 9.07 9.10 T:ascon128v1 9.04 9.07 9.10 T:ascon128v11 9.16 9.17 9.20 ascon128v12 11.14 11.18 11.22 T:aes128otrsv1 11.18 11.20 11.22 T:aes128otrsv2 11.39 11.41 11.44 T:aes128otrpv1 11.39 11.43 11.52 T:aes128otrpv2 14.28 14.31 14.34 T:aes256otrsv1 14.31 14.32 14.34 T:twine80n6t4clocv3 14.35 14.38 14.40 T:aes256otrsv2 14.93 14.97 15.00 T:aes256otrpv1 14.95 15.02 15.06 T:aes256otrpv2 15.26 15.28 15.30 T:twine80n6t4clocv2 15.42 15.44 15.46 T:aes128n8clocv1 15.46 15.47 15.50 T:aes128n12clocv1 19.01 19.12 19.38 T:proest256otrv1 26.14 26.18 26.23 T:aeadaes128ocbtaglen96v1 26.15 26.19 26.22 T:aeadaes128ocbtaglen64v1 26.33 26.58 26.72 T:ketjesrv1 26.71 26.75 27.04 T:ketjesrv2 31.20 31.23 31.25 T:aeadaes192ocbtaglen96v1 31.21 31.23 31.26 T:aeadaes192ocbtaglen64v1 36.30 36.33 36.35 T:aeadaes256ocbtaglen64v1 36.31 36.34 36.37 T:aeadaes256ocbtaglen96v1 43.03 43.15 43.76 T:proest128otrv1 43.28 43.31 43.34 T:colm127v1 44.54 44.67 44.80 T:ketjejrv1 68.22 70.03 70.21 T:ketjejrv2 70.09 70.13 70.18 T:present80n6t4silcv3 75.16 75.66 75.93 T:deoxysneq128128v13 86.18 89.93 90.32 T:aezv1 94.92 95.12 96.34 T:deoxyseq128128v13 117.38 117.60 117.85 T:deoxysneq256128v13 125.55 125.61 125.69 T:led80n6t4silcv3 155.09 155.64 155.71 T:deoxyseq256128v13 396.65 402.12 405.03 T:acorn128 2655.56 2664.69 2693.96 T:led80n6t4silcv2 2668.72 2671.94 2674.69 T:led80n6silcv1 2852.09 2856.56 2862.41 T:present80n6silcv1 2852.04 2862.25 3011.47 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.12 0.13 0.13 T:tiaoxinv1 0.12 0.13 0.13 T:tiaoxinv2 0.16? 0.17? 0.18? aegis128l 0.18? 0.19? 0.20? T:aezv4 0.20 0.21 0.21 T:aezv3 0.21 0.22 0.23 T:aezv5 0.31 0.32 0.32 aegis256 0.38 0.38 0.38 T:aegis128 0.42 0.43 0.44 T:aes128gcmv1 0.43 0.43 0.44 T:aeadaes128ocbtaglen128v1 0.43 0.43 0.44 aes256gcmv1 0.27? 0.46? 0.61? T:aeadaes192ocbtaglen128v1 0.54 0.56 0.56 T:aes128otrcv3 0.55 0.56 0.57 T:aes128otrpv3 0.64 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.72 T:colm0v1 0.71 0.72 0.72 T:aes256otrcv3 0.72 0.73 0.74 T:aes256otrpv3 0.80 0.81 0.82 T:deoxysii128v141 0.81 0.82 0.83 T:deoxysi128v141 0.85 0.86 0.87 T:morus1280128v1 0.85 0.86 0.87 T:morus1280256v1 0.86 0.87 0.87 T:deoxysneq128128v1 0.87 0.88 0.89 T:morus1280256v2 0.86 0.88 0.90 T:morus1280128v2 0.89 0.90 0.91 T:deoxyseq128128v1 0.90 0.91 0.92 T:deoxysii256v141 0.91 0.92 0.92 T:deoxysi256v141 0.96 0.97 0.97 T:deoxysneq256128v1 1.02 1.03 1.04 T:deoxyseq256128v1 1.04 1.06 1.08 T:morus640128v1 1.03 1.06 1.09 T:morus640128v2 1.79 1.82 1.86 T:lunarkeyakv2 1.80 1.82 1.85 T:oceankeyakv2 2.06 2.06 2.06 T:aes128n12t8silcv2 2.06 2.06 2.06 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.05 2.06 2.07 T:aes128otrsv3 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n8t8clocv2 2.21 2.22 2.24 T:seakeyakv2 2.53 2.54 2.55 T:lakekeyakv2 2.54 2.59 2.64 T:norx6441v2 2.53 2.61 2.68 T:norx6441v3 2.69 2.71 2.75 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.05 3.10 3.13 T:norx6441v1 3.13 3.14 3.16 T:norx6444v2 3.30 3.33 3.36 T:norx6444v3 3.82 3.84 3.88 T:norx6444v1 3.82 3.87 3.90 T:norx6461v2 3.81 3.89 3.99 T:norx6461v3 3.93 3.98 4.05 T:norx3241v2 3.91 4.00 4.05 T:norx3241v3 4.07 4.15 4.38 T:ketjemajorv2 4.19 4.20 4.20 T:aesjambuv1 4.54 4.59 4.64 T:norx6461v1 4.80 4.81 4.83 T:riverkeyakv2 4.79 4.84 4.93 T:norx3241v1 4.89 4.98 5.05 T:acorn128v3 5.16 5.27 5.48 T:acorn128v2 5.80 5.89 5.98 T:norx3261v2 6.01 6.06 6.14 T:norx3261v3 6.15 6.16 6.17 ascon128av12 6.14 6.19 6.29 T:ketjeminorv2 6.28 6.31 6.34 T:ascon96v1 6.30 6.32 6.34 T:ascon128av11 7.37 7.38 7.40 T:norx3261v1 9.02 9.04 9.07 T:ascon128v11 9.04 9.06 9.07 T:ascon128v1 9.14 9.15 9.20 ascon128v12 9.78 9.79 9.81 T:aes128otrsv2 9.78 9.82 10.02 T:aes128otrsv1 10.76 10.78 10.80 T:aes128n12clocv1 10.78 10.80 10.82 T:aes128n8clocv1 10.84 10.87 10.90 T:aes128otrpv1 10.85 10.87 10.90 T:aes128otrpv2 12.88 12.91 12.93 T:aes256otrsv1 12.93 12.96 12.99 T:aes256otrsv2 14.11 14.13 14.14 T:twine80n6t4clocv3 14.41 14.43 14.45 T:aes256otrpv2 14.37 14.43 14.46 T:aes256otrpv1 14.95 14.96 14.97 T:twine80n6t4clocv2 19.23 19.50 19.61 T:proest256otrv1 21.83 21.87 21.91 T:aeadaes128ocbtaglen64v1 21.84 21.89 21.94 T:aeadaes128ocbtaglen96v1 23.21 23.28 23.33 T:colm127v1 24.90 25.09 25.19 T:ketjesrv1 25.85 26.00 26.23 T:ketjesrv2 26.00 26.03 26.07 T:aeadaes192ocbtaglen64v1 26.02 26.05 26.09 T:aeadaes192ocbtaglen96v1 30.20 30.24 30.27 T:aeadaes256ocbtaglen64v1 30.23 30.27 30.29 T:aeadaes256ocbtaglen96v1 40.78 40.87 40.93 T:ketjejrv1 41.04 43.32 44.12 T:aezv1 43.39 43.82 44.11 T:proest128otrv1 62.13 63.03 63.91 T:deoxysneq128128v13 62.85 63.28 63.99 T:deoxyseq128128v13 66.40 68.33 68.63 T:ketjejrv2 69.25 69.27 69.37 T:present80n6t4silcv3 102.90 103.36 104.45 T:deoxyseq256128v13 103.01 103.59 104.54 T:deoxysneq256128v13 125.10 125.17 125.23 T:led80n6t4silcv3 401.36 405.97 411.23 T:acorn128 1770.61 1773.44 1779.33 T:led80n6t4silcv2 1780.30 1782.47 1783.75 T:led80n6silcv1 1897.83 1898.84 1899.35 T:present80n6t4silcv2 1898.89 1899.79 1901.00 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.12? 0.13? 0.14? T:tiaoxinv1 0.12? 0.13? 0.14? T:tiaoxinv2 0.16? 0.17? 0.18? aegis128l 0.18? 0.19? 0.20? T:aezv4 0.20 0.20 0.21 T:aezv3 0.21 0.22 0.22 T:aezv5 0.31 0.31 0.32 T:aegis128 0.31 0.32 0.34 aegis256 0.42 0.43 0.43 T:aeadaes128ocbtaglen128v1 0.42 0.43 0.44 T:aes128gcmv1 0.42 0.43 0.44 aes256gcmv1 0.33? 0.46? 0.60? T:aeadaes192ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrcv3 0.56 0.56 0.57 T:aes128otrpv3 0.65 0.66 0.67 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.73 T:aes256otrcv3 0.70 0.71 0.72 T:aes256otrpv3 0.70 0.71 0.72 T:colm0v1 0.80 0.82 0.83 T:deoxysii128v141 0.80 0.82 0.83 T:deoxysi128v141 0.85 0.86 0.87 T:morus1280128v1 0.85 0.86 0.86 T:morus1280256v2 0.85 0.86 0.87 T:morus1280256v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.86 0.88 0.89 T:morus1280128v2 0.88 0.90 0.91 T:deoxyseq128128v1 0.90 0.91 0.92 T:deoxysii256v141 0.90 0.91 0.92 T:deoxysi256v141 0.96 0.97 0.98 T:deoxysneq256128v1 1.02 1.03 1.04 T:deoxyseq256128v1 1.03 1.05 1.07 T:morus640128v2 1.04 1.06 1.08 T:morus640128v1 1.77 1.81 1.87 T:lunarkeyakv2 1.79 1.83 1.86 T:oceankeyakv2 2.05 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.21 2.22 2.23 T:seakeyakv2 2.54 2.55 2.56 T:lakekeyakv2 2.55 2.59 2.63 T:norx6441v3 2.57 2.62 2.66 T:norx6441v2 2.69 2.70 2.72 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.05 3.09 3.12 T:norx6441v1 3.08 3.10 3.12 T:norx6444v2 3.31 3.34 3.37 T:norx6444v3 3.80 3.84 3.87 T:norx6461v2 3.82 3.86 3.89 T:norx6444v1 3.84 3.91 3.98 T:norx6461v3 3.94 3.99 4.07 T:norx3241v2 3.98 4.03 4.07 T:norx3241v3 4.04 4.10 4.38 T:ketjemajorv2 4.21 4.22 4.23 T:aesjambuv1 4.59 4.64 4.71 T:norx6461v1 4.71 4.78 4.87 T:norx3241v1 4.80 4.81 4.83 T:riverkeyakv2 4.98 5.01 5.06 T:acorn128v3 5.02 5.07 5.11 T:acorn128v2 5.87 5.96 6.04 T:norx3261v2 6.00 6.09 6.19 T:norx3261v3 6.14 6.17 6.18 ascon128av12 6.11 6.19 6.28 T:ketjeminorv2 6.30 6.32 6.34 T:ascon96v1 6.30 6.32 6.34 T:ascon128av11 7.38 7.39 7.41 T:norx3261v1 9.09 9.12 9.15 T:ascon128v11 9.12 9.14 9.18 T:ascon128v1 9.15 9.17 9.18 ascon128v12 9.77 9.79 9.81 T:aes128otrsv2 9.78 9.82 10.03 T:aes128otrsv1 10.76 10.78 10.79 T:aes128n12clocv1 10.79 10.81 10.83 T:aes128n8clocv1 10.84 10.88 10.90 T:aes128otrpv1 10.86 10.88 10.90 T:aes128otrpv2 12.87 12.91 12.94 T:aes256otrsv1 12.93 12.97 12.99 T:aes256otrsv2 14.10 14.13 14.15 T:twine80n6t4clocv3 14.37 14.43 14.46 T:aes256otrpv1 14.41 14.43 14.46 T:aes256otrpv2 14.94 14.96 14.98 T:twine80n6t4clocv2 19.22 19.39 19.59 T:proest256otrv1 21.81 21.87 21.91 T:aeadaes128ocbtaglen64v1 21.80 21.90 21.96 T:aeadaes128ocbtaglen96v1 23.15 23.26 23.37 T:colm127v1 24.89 25.04 25.18 T:ketjesrv1 25.84 25.93 26.21 T:ketjesrv2 26.00 26.03 26.06 T:aeadaes192ocbtaglen96v1 26.01 26.04 26.08 T:aeadaes192ocbtaglen64v1 30.23 30.26 30.30 T:aeadaes256ocbtaglen64v1 30.26 30.28 30.30 T:aeadaes256ocbtaglen96v1 40.48 40.78 40.89 T:ketjejrv1 40.99 43.35 44.16 T:aezv1 43.66 43.76 43.90 T:proest128otrv1 62.38 63.12 63.90 T:deoxysneq128128v13 62.86 63.35 63.99 T:deoxyseq128128v13 66.32 68.40 68.60 T:ketjejrv2 69.23 69.29 69.37 T:present80n6t4silcv3 102.85 103.34 104.43 T:deoxyseq256128v13 103.01 103.60 104.56 T:deoxysneq256128v13 125.10 125.18 125.25 T:led80n6t4silcv3 391.25 400.05 404.77 T:acorn128 1770.56 1774.90 1785.76 T:led80n6t4silcv2 1774.50 1779.16 1783.01 T:led80n6silcv1 1898.88 1899.65 1900.95 T:present80n6silcv1 1898.69 1899.86 1901.99 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.12 0.13 0.13 T:tiaoxinv2 0.12 0.13 0.13 T:tiaoxinv1 0.16 0.17 0.17 aegis128l 0.18 0.19 0.19 T:aezv4 0.20 0.20 0.21 T:aezv3 0.21 0.22 0.22 T:aezv5 0.31 0.31 0.32 T:aegis128 0.31 0.32 0.33 aegis256 0.42 0.43 0.45 T:aeadaes128ocbtaglen128v1 0.43 0.43 0.44 T:aes128gcmv1 0.42 0.43 0.44 aes256gcmv1 0.33? 0.47? 0.60? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.65 0.66 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.72 T:colm0v1 0.70 0.72 0.73 T:aes256otrcv3 0.71 0.72 0.73 T:aes256otrpv3 0.81 0.82 0.83 T:deoxysii128v141 0.81 0.82 0.84 T:deoxysi128v141 0.85 0.85 0.86 T:morus1280256v2 0.85 0.86 0.87 T:morus1280128v1 0.85 0.86 0.87 T:morus1280256v1 0.87 0.88 0.89 T:deoxysneq128128v1 0.86 0.88 0.90 T:morus1280128v2 0.89 0.90 0.91 T:deoxyseq128128v1 0.90 0.91 0.92 T:deoxysii256v141 0.90 0.92 0.94 T:deoxysi256v141 0.95 0.97 0.98 T:deoxysneq256128v1 1.02 1.03 1.04 T:deoxyseq256128v1 1.04 1.06 1.08 T:morus640128v1 1.05 1.07 1.09 T:morus640128v2 1.78 1.81 1.84 T:lunarkeyakv2 1.79 1.82 1.85 T:oceankeyakv2 2.05 2.06 2.08 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.19 2.22 2.23 T:seakeyakv2 2.53 2.54 2.56 T:lakekeyakv2 2.54 2.60 2.65 T:norx6441v3 2.56 2.60 2.66 T:norx6441v2 2.70 2.71 2.74 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.05 3.10 3.14 T:norx6441v1 3.09 3.10 3.12 T:norx6444v2 3.30 3.33 3.37 T:norx6444v3 3.80 3.84 3.88 T:norx6461v2 3.82 3.86 3.89 T:norx6444v1 3.84 3.89 3.97 T:norx6461v3 3.92 4.00 4.06 T:norx3241v2 3.95 4.00 4.09 T:norx3241v3 4.21 4.22 4.22 T:aesjambuv1 4.06 4.23 4.37 T:ketjemajorv2 4.61 4.66 4.71 T:norx6461v1 4.73 4.80 4.89 T:norx3241v1 4.80 4.81 4.83 T:riverkeyakv2 4.97 5.03 5.07 T:acorn128v3 5.04 5.07 5.11 T:acorn128v2 5.71 5.81 5.93 T:norx3261v2 5.97 6.06 6.12 T:norx3261v3 6.09 6.15 6.28 T:ketjeminorv2 6.15 6.16 6.19 ascon128av12 6.31 6.33 6.34 T:ascon96v1 6.31 6.33 6.35 T:ascon128av11 7.38 7.39 7.40 T:norx3261v1 9.10 9.13 9.16 T:ascon128v11 9.11 9.13 9.16 T:ascon128v1 9.15 9.16 9.18 ascon128v12 9.77 9.80 9.84 T:aes128otrsv2 9.78 9.84 10.04 T:aes128otrsv1 10.74 10.78 10.80 T:aes128n12clocv1 10.78 10.80 10.83 T:aes128n8clocv1 10.83 10.87 10.90 T:aes128otrpv1 10.86 10.88 10.90 T:aes128otrpv2 12.87 12.91 12.96 T:aes256otrsv1 12.92 12.96 12.99 T:aes256otrsv2 14.10 14.13 14.15 T:twine80n6t4clocv3 14.35 14.42 14.45 T:aes256otrpv1 14.40 14.43 14.46 T:aes256otrpv2 14.95 14.96 14.99 T:twine80n6t4clocv2 19.23 19.50 19.62 T:proest256otrv1 21.79 21.85 21.95 T:aeadaes128ocbtaglen64v1 21.82 21.89 21.94 T:aeadaes128ocbtaglen96v1 23.20 23.35 23.47 T:colm127v1 24.91 25.08 25.20 T:ketjesrv1 25.85 25.99 26.23 T:ketjesrv2 26.00 26.03 26.06 T:aeadaes192ocbtaglen96v1 26.01 26.03 26.08 T:aeadaes192ocbtaglen64v1 30.21 30.26 30.30 T:aeadaes256ocbtaglen96v1 30.22 30.26 30.31 T:aeadaes256ocbtaglen64v1 40.48 40.79 40.90 T:ketjejrv1 40.98 43.34 44.13 T:aezv1 43.68 43.75 43.91 T:proest128otrv1 62.39 63.02 63.99 T:deoxysneq128128v13 62.85 63.26 64.07 T:deoxyseq128128v13 66.34 68.44 68.65 T:ketjejrv2 69.23 69.29 69.36 T:present80n6t4silcv3 102.86 103.35 104.42 T:deoxyseq256128v13 103.01 103.59 104.59 T:deoxysneq256128v13 125.12 125.17 125.34 T:led80n6t4silcv3 395.54 399.71 405.40 T:acorn128 1763.58 1773.27 1779.74 T:led80n6t4silcv2 1773.24 1778.48 1782.65 T:led80n6silcv1 1897.18 1899.88 1901.08 T:present80n6silcv1 1899.24 1901.42 1901.82 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.22 0.22 0.22 T:tiaoxinv2 0.22 0.22 0.22 T:tiaoxinv1 0.24 0.25 0.25 aegis128l 0.35 0.36 0.36 T:aezv4 0.37 0.37 0.37 T:aezv3 0.38 0.39 0.39 T:aezv5 0.39 0.40 0.41 T:aegis128 0.41 0.41 0.42 aegis256 0.49 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.60? 0.61? 0.77? T:aeadaes192ocbtaglen128v1 0.61 0.62 0.62 T:aes128otrpv3 0.64 0.64 0.65 T:aes128otrcv3 0.66 0.67 0.68 T:aeadaes256ocbtaglen128v1 0.76 0.77 0.77 T:aes128gcmv1 0.78 0.79 0.79 T:aes256otrpv3 0.83 0.84 0.85 T:aes256otrcv3 0.85 0.85 0.86 aes256gcmv1 0.93 0.94 0.94 T:deoxysi128v141 0.95 0.95 0.96 T:deoxysneq128128v1 1.06 1.07 1.08 T:deoxysi256v141 1.07 1.08 1.09 T:deoxysneq256128v1 1.12 1.12 1.13 T:morus1280256v1 1.12 1.13 1.13 T:morus1280128v1 1.14 1.14 1.15 T:morus1280256v2 1.14 1.15 1.15 T:morus1280128v2 1.22 1.23 1.24 T:morus640128v1 1.23 1.24 1.25 T:morus640128v2 1.28 1.29 1.30 T:colm0v1 1.34 1.34 1.35 T:aes128otrsv3 1.36 1.37 1.38 T:deoxysii128v141 1.46 1.47 1.47 T:deoxyseq128128v1 1.54 1.54 1.55 T:deoxysii256v141 1.67 1.68 1.69 T:deoxyseq256128v1 1.81 1.81 1.82 T:aes256otrsv3 2.11 2.11 2.11 T:aes128n12t8clocv3 2.11 2.11 2.11 T:aes128n12t8clocv2 2.11 2.11 2.12 T:aes128n8t8clocv2 2.12 2.12 2.12 T:aes128n8t8silcv2 2.12 2.12 2.12 T:aes128n12t8silcv3 2.12 2.12 2.12 T:aes128n12t8silcv2 2.97 3.00 3.03 T:norx6441v2 3.00 3.05 3.08 T:norx6441v3 3.05 3.06 3.08 T:lakekeyakv2 3.24 3.25 3.26 T:seakeyakv2 3.35 3.36 3.38 T:lakekeyakv1 3.46 3.50 3.51 T:norx6441v1 3.80 3.82 3.84 T:norx6444v3 4.16 4.19 4.23 T:norx3241v2 4.15 4.20 4.25 T:norx3241v3 4.27 4.28 4.28 T:aesjambuv1 4.28 4.29 4.31 T:oceankeyakv2 4.49 4.52 4.54 T:norx6461v2 4.51 4.59 4.73 T:norx6461v3 4.63 4.64 4.68 T:norx6444v2 4.95 4.99 5.03 T:norx3241v1 5.19 5.21 5.24 T:norx6461v1 5.41 5.44 5.52 T:riverkeyakv2 5.44 5.46 5.49 T:norx6444v1 5.84 5.89 5.90 T:acorn128v3 5.92 5.95 6.23 T:acorn128v2 6.31 6.32 6.33 ascon128av12 6.32 6.40 6.46 T:norx3261v2 6.39 6.41 6.44 T:norx3261v3 6.46 6.47 6.48 T:ascon96v1 6.46 6.47 6.48 T:ascon128av11 6.32 6.53 6.54 T:ketjemajorv2 7.36 7.37 7.39 T:lunarkeyakv2 7.49 7.52 7.60 T:ketjeminorv2 7.78 7.80 7.81 T:norx3261v1 9.26 9.27 9.27 T:ascon128v11 9.23 9.27 9.28 T:ascon128v1 9.32 9.33 9.34 ascon128v12 11.33 11.35 11.36 T:aes128otrsv2 11.36 11.39 11.54 T:aes128otrsv1 11.61 11.63 11.64 T:aes128otrpv1 11.63 11.64 11.66 T:aes128otrpv2 14.50 14.50 14.51 T:twine80n6t4clocv3 14.52 14.54 14.55 T:aes256otrsv1 14.59 14.61 14.63 T:aes256otrsv2 15.23 15.24 15.26 T:aes256otrpv1 15.26 15.28 15.29 T:aes256otrpv2 15.36 15.37 15.41 T:twine80n6t4clocv2 15.78 15.79 15.80 T:aes128n12clocv1 15.80 15.84 15.86 T:aes128n8clocv1 20.75 20.81 21.07 T:proest256otrv1 22.69 22.71 22.73 T:aeadaes128ocbtaglen96v1 22.71 22.72 22.73 T:aeadaes128ocbtaglen64v1 26.64 26.76 26.86 T:ketjesrv1 26.92 26.94 26.96 T:aeadaes192ocbtaglen96v1 26.93 26.95 26.97 T:aeadaes192ocbtaglen64v1 27.10 27.20 27.48 T:ketjesrv2 31.26 31.27 31.29 T:aeadaes256ocbtaglen96v1 31.26 31.28 31.31 T:aeadaes256ocbtaglen64v1 36.39 36.43 36.49 T:colm127v1 44.93 45.12 45.68 T:proest128otrv1 45.14 45.22 45.57 T:ketjejrv1 63.54 64.09 64.68 T:deoxysneq128128v13 68.77 70.52 70.68 T:ketjejrv2 70.79 70.85 70.88 T:present80n6t4silcv3 82.68 87.11 89.36 T:aezv1 96.54 96.66 97.07 T:deoxyseq128128v13 104.13 104.52 104.56 T:deoxysneq256128v13 126.66 126.76 126.80 T:led80n6t4silcv3 156.67 157.31 157.69 T:deoxyseq256128v13 454.60 457.19 467.45 T:acorn128 2668.53 2675.13 2681.35 T:led80n6t4silcv2 2674.20 2681.30 2686.61 T:led80n6silcv1 2860.50 2864.84 2870.67 T:present80n6silcv1 2863.51 2864.96 2865.36 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.25 0.26 0.26 aegis128l 0.28 0.28 0.28 T:tiaoxinv1 0.28 0.28 0.28 T:tiaoxinv2 0.35? 0.36? 0.39? T:aezv4 0.36 0.37 0.37 T:aezv3 0.38 0.39 0.39 T:aegis128 0.38 0.39 0.39 T:aezv5 0.41 0.41 0.42 aegis256 0.51 0.51 0.51 T:aeadaes128ocbtaglen128v1 0.62? 0.63? 0.73? T:aeadaes192ocbtaglen128v1 0.62 0.63 0.63 T:aes128otrpv3 0.66 0.66 0.67 T:aes128otrcv3 0.71 0.71 0.72 T:aeadaes256ocbtaglen128v1 0.78 0.79 0.79 T:aes128gcmv1 0.80 0.81 0.81 T:aes256otrpv3 0.86 0.87 0.88 T:aes256otrcv3 0.90 0.90 0.91 aes256gcmv1 1.01 1.02 1.02 T:deoxysi128v141 1.05 1.06 1.06 T:deoxysneq128128v1 1.12 1.13 1.13 T:morus1280256v1 1.12 1.13 1.14 T:morus1280128v1 1.13 1.13 1.14 T:morus1280256v2 1.13 1.14 1.14 T:morus1280128v2 1.14 1.15 1.16 T:deoxysi256v141 1.16 1.17 1.18 T:deoxysneq256128v1 1.21 1.23 1.24 T:morus640128v1 1.22 1.24 1.26 T:morus640128v2 1.34 1.35 1.36 T:colm0v1 1.36 1.36 1.37 T:aes128otrsv3 1.39 1.39 1.40 T:deoxysii128v141 1.54 1.54 1.55 T:deoxyseq128128v1 1.59 1.60 1.60 T:deoxysii256v141 1.70 1.72 1.72 T:deoxyseq256128v1 1.84 1.84 1.84 T:aes256otrsv3 2.08 2.08 2.09 T:aes128n12t8clocv3 2.08 2.08 2.09 T:aes128n8t8clocv2 2.08 2.08 2.09 T:aes128n12t8clocv2 2.10 2.10 2.11 T:aes128n12t8silcv3 2.10 2.10 2.11 T:aes128n12t8silcv2 2.10 2.10 2.11 T:aes128n8t8silcv2 2.95 2.97 2.99 T:norx6441v3 2.98 3.01 3.04 T:norx6441v2 3.07 3.08 3.09 T:lakekeyakv2 3.28 3.29 3.29 T:seakeyakv2 3.37 3.38 3.41 T:lakekeyakv1 3.45 3.47 3.51 T:norx6441v1 3.81 3.82 3.85 T:norx6444v3 4.13 4.17 4.21 T:norx3241v2 4.15 4.19 4.23 T:norx3241v3 4.33 4.33 4.35 T:oceankeyakv2 4.44 4.45 4.45 T:aesjambuv1 4.44 4.48 4.61 T:norx6461v3 4.46 4.49 4.51 T:norx6461v2 4.62 4.62 4.66 T:norx6444v2 4.83 4.88 4.94 T:norx3241v1 5.16 5.18 5.23 T:norx6461v1 5.46 5.49 5.52 T:norx6444v1 5.54 5.55 5.57 T:riverkeyakv2 6.00 6.07 6.14 T:acorn128v3 6.07 6.11 6.48 T:acorn128v2 6.23 6.31 6.36 T:ketjemajorv2 6.30 6.31 6.32 ascon128av12 6.29 6.33 6.38 T:norx3261v2 6.36 6.41 6.44 T:norx3261v3 6.43 6.44 6.46 T:ascon128av11 6.44 6.45 6.48 T:ascon96v1 7.41 7.42 7.46 T:lunarkeyakv2 7.60 7.67 7.84 T:ketjeminorv2 7.72 7.74 7.77 T:norx3261v1 9.16 9.18 9.19 T:ascon128v11 9.17 9.21 9.23 T:ascon128v1 9.31 9.33 9.35 ascon128v12 11.49 11.50 11.52 T:aes128otrsv2 11.50 11.54 11.69 T:aes128otrsv1 11.71 11.74 11.76 T:aes128otrpv1 11.74 11.79 11.83 T:aes128otrpv2 14.50 14.51 14.52 T:twine80n6t4clocv3 14.66 14.68 14.70 T:aes256otrsv1 14.75 14.76 14.78 T:aes256otrsv2 15.34 15.35 15.37 T:aes256otrpv1 15.38 15.44 15.47 T:aes256otrpv2 15.44 15.45 15.46 T:twine80n6t4clocv2 15.61 15.62 15.63 T:aes128n8clocv1 15.62 15.64 15.65 T:aes128n12clocv1 20.77 20.84 21.12 T:proest256otrv1 26.86 26.88 26.90 T:aeadaes128ocbtaglen96v1 26.89 26.92 26.93 T:aeadaes128ocbtaglen64v1 26.99 27.18 27.23 T:ketjesrv1 27.59 27.62 27.82 T:ketjesrv2 32.00 32.02 32.05 T:aeadaes192ocbtaglen64v1 32.01 32.03 32.05 T:aeadaes192ocbtaglen96v1 37.24 37.27 37.30 T:aeadaes256ocbtaglen64v1 37.25 37.27 37.30 T:aeadaes256ocbtaglen96v1 44.44 44.47 44.51 T:colm127v1 44.48 44.53 45.42 T:proest128otrv1 45.13 45.39 45.55 T:ketjejrv1 70.82 70.84 70.89 T:present80n6t4silcv3 69.33 70.94 71.01 T:ketjejrv2 75.20 75.66 76.32 T:deoxysneq128128v13 83.13 87.48 89.89 T:aezv1 95.70 96.36 96.87 T:deoxyseq128128v13 117.58 117.92 118.05 T:deoxysneq256128v13 126.60 126.63 126.74 T:led80n6t4silcv3 156.71 157.23 157.31 T:deoxyseq256128v13 448.05 452.52 453.55 T:acorn128 2667.51 2669.71 2672.81 T:led80n6t4silcv2 2674.90 2681.40 2686.03 T:led80n6silcv1 2860.41 2865.09 2873.18 T:present80n6silcv1 2863.86 2865.19 2865.39 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.21 0.21 0.21 T:aezv4 0.22 0.22 0.22 T:aezv3 0.23 0.23 0.24 T:aezv5 0.25 0.26 0.26 aegis128l 0.28 0.28 0.28 T:tiaoxinv2 0.27 0.28 0.28 T:tiaoxinv1 0.38 0.39 0.39 T:aegis128 0.43 0.44 0.44 aegis256 0.51 0.51 0.51 T:aeadaes128ocbtaglen128v1 0.62? 0.63? 0.78? T:aeadaes192ocbtaglen128v1 0.62 0.63 0.63 T:aes128otrpv3 0.66 0.66 0.67 T:aes128otrcv3 0.71 0.71 0.71 T:aeadaes256ocbtaglen128v1 0.78 0.79 0.79 T:aes128gcmv1 0.80 0.80 0.81 T:aes256otrpv3 0.87 0.87 0.88 T:aes256otrcv3 0.90 0.90 0.91 aes256gcmv1 1.01 1.01 1.02 T:deoxysi128v141 1.05 1.06 1.06 T:deoxysneq128128v1 1.12 1.13 1.13 T:morus1280256v1 1.13 1.13 1.14 T:morus1280128v1 1.13 1.13 1.14 T:morus1280128v2 1.13 1.13 1.14 T:morus1280256v2 1.14 1.15 1.15 T:deoxysi256v141 1.16 1.17 1.18 T:deoxysneq256128v1 1.21 1.23 1.24 T:morus640128v1 1.23 1.24 1.26 T:morus640128v2 1.35 1.35 1.36 T:colm0v1 1.36 1.36 1.36 T:aes128otrsv3 1.39 1.39 1.40 T:deoxysii128v141 1.53 1.54 1.55 T:deoxyseq128128v1 1.58 1.59 1.60 T:deoxysii256v141 1.71 1.71 1.72 T:deoxyseq256128v1 1.84 1.84 1.85 T:aes256otrsv3 2.08 2.08 2.08 T:aes128n12t8clocv2 2.08 2.08 2.08 T:aes128n12t8clocv3 2.08 2.08 2.09 T:aes128n8t8clocv2 2.09 2.09 2.09 T:aes128n12t8silcv2 2.09 2.09 2.09 T:aes128n8t8silcv2 2.09 2.09 2.09 T:aes128n12t8silcv3 2.96 2.98 3.02 T:norx6441v3 2.98 3.00 3.02 T:norx6441v2 3.08 3.08 3.10 T:lakekeyakv2 3.30 3.30 3.31 T:seakeyakv2 3.40 3.41 3.43 T:lakekeyakv1 3.45 3.46 3.49 T:norx6441v1 3.81 3.84 3.86 T:norx6444v3 4.15 4.18 4.21 T:norx3241v2 4.15 4.19 4.23 T:norx3241v3 4.33 4.35 4.36 T:oceankeyakv2 4.44 4.45 4.45 T:aesjambuv1 4.47 4.49 4.51 T:norx6461v2 4.47 4.52 4.62 T:norx6461v3 4.64 4.65 4.66 T:norx6444v2 4.84 4.87 4.93 T:norx3241v1 5.17 5.20 5.23 T:norx6461v1 5.48 5.52 5.64 T:norx6444v1 5.55 5.56 5.57 T:riverkeyakv2 6.00 6.08 6.15 T:acorn128v3 6.08 6.11 6.49 T:acorn128v2 6.30 6.31 6.32 ascon128av12 6.25 6.32 6.39 T:ketjemajorv2 6.30 6.35 6.40 T:norx3261v2 6.36 6.41 6.43 T:norx3261v3 6.43 6.44 6.45 T:ascon128av11 6.44 6.45 6.46 T:ascon96v1 7.42 7.43 7.45 T:lunarkeyakv2 7.62 7.70 7.87 T:ketjeminorv2 7.72 7.74 7.77 T:norx3261v1 9.15 9.17 9.20 T:ascon128v11 9.18 9.20 9.24 T:ascon128v1 9.30 9.31 9.34 ascon128v12 11.51 11.52 11.54 T:aes128otrsv2 11.52 11.57 11.72 T:aes128otrsv1 11.73 11.76 11.77 T:aes128otrpv1 11.78 11.83 11.85 T:aes128otrpv2 14.50 14.50 14.51 T:twine80n6t4clocv3 14.68 14.70 14.71 T:aes256otrsv1 14.77 14.79 14.80 T:aes256otrsv2 15.33 15.35 15.38 T:aes256otrpv1 15.38 15.43 15.48 T:aes256otrpv2 15.44 15.45 15.46 T:twine80n6t4clocv2 15.61 15.62 15.64 T:aes128n8clocv1 15.63 15.64 15.65 T:aes128n12clocv1 20.77 20.83 21.13 T:proest256otrv1 26.86 26.87 26.89 T:aeadaes128ocbtaglen96v1 26.88 26.91 26.94 T:aeadaes128ocbtaglen64v1 27.00 27.24 27.34 T:ketjesrv1 27.63 27.65 27.85 T:ketjesrv2 31.99 32.01 32.03 T:aeadaes192ocbtaglen96v1 31.99 32.02 32.05 T:aeadaes192ocbtaglen64v1 37.24 37.26 37.29 T:aeadaes256ocbtaglen64v1 37.25 37.27 37.29 T:aeadaes256ocbtaglen96v1 44.40 44.43 44.47 T:colm127v1 44.50 44.54 45.41 T:proest128otrv1 45.13 45.40 45.61 T:ketjejrv1 70.80 70.84 70.87 T:present80n6t4silcv3 69.41 70.97 71.07 T:ketjejrv2 75.27 75.78 76.18 T:deoxysneq128128v13 83.07 87.46 89.95 T:aezv1 95.54 96.16 96.54 T:deoxyseq128128v13 117.62 117.97 118.90 T:deoxysneq256128v13 126.60 126.65 126.78 T:led80n6t4silcv3 156.73 157.25 157.34 T:deoxyseq256128v13 446.93 452.08 453.27 T:acorn128 2670.77 2676.41 2687.39 T:led80n6t4silcv2 2675.22 2680.61 2686.83 T:led80n6silcv1 2863.14 2865.34 2866.21 T:present80n6t4silcv2 2860.83 2865.73 2875.83 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.96 0.99 1.04 T:aegis128 1.09 1.12 1.15 aegis128l 1.25 1.27 1.31 T:tiaoxinv2 1.26 1.28 1.31 T:tiaoxinv1 1.29 1.32 1.42 aegis256 1.35 1.36 1.40 T:aezv5 1.36 1.39 1.42 T:aezv4 1.48 1.49 1.51 T:aezv3 1.46 1.52 1.58 T:aeadaes128ocbtaglen128v1 1.90 1.92 1.96 T:aes128otrpv3 1.99 2.02 2.05 T:aeadaes256ocbtaglen128v1 2.22 2.24 2.25 T:aes128otrsv3 2.44 2.47 2.49 T:aes256otrpv3 2.52 2.55 2.58 T:aes128n12t8clocv2 2.55 2.57 2.57 T:aes128n12t8clocv3 2.53 2.57 2.59 T:aes128n8t8clocv2 2.67 2.70 2.73 T:colm0v1 2.69 2.74 2.75 T:aes128otrcv3 2.74 2.75 2.78 T:aes128n12t8silcv3 2.74 2.76 2.79 T:aes128n8t8silcv2 2.75 2.77 2.80 T:aes128n12t8silcv2 2.99 3.01 3.02 T:aes256otrsv3 3.04? 3.10? 5.36? T:aeadaes192ocbtaglen128v1 3.12 3.14 3.18 T:deoxysneq128128v1 3.36 3.39 3.44 T:deoxysi128v141 3.49 3.55 3.57 T:aes256otrcv3 3.79 3.83 3.87 T:deoxysneq256128v1 3.97 4.07 4.15 T:morus640128v1 4.06 4.11 4.16 T:deoxysi256v141 4.27 4.38 4.50 T:morus640128v2 4.59 4.62 4.67 T:deoxyseq128128v1 4.70 4.73 4.76 T:deoxysii128v141 4.71 4.77 4.87 aes256gcmv1 5.32 5.38 5.44 T:aes128gcmv1 5.49 5.53 5.59 T:deoxysii256v141 5.56 5.57 5.60 T:aesjambuv1 5.56 5.60 5.63 T:deoxyseq256128v1 5.73 5.78 5.84 T:morus1280128v1 5.76 5.81 5.86 T:morus1280256v1 6.09 6.13 6.20 T:morus1280256v2 6.13 6.21 6.30 T:morus1280128v2 9.47 9.52 9.62 ascon128av12 9.54 9.60 9.68 T:ascon96v1 9.56 9.63 9.73 T:ascon128av11 9.63 9.86 10.23 T:norx6441v2 9.72 9.89 10.12 T:norx6441v3 9.91 10.06 10.18 T:norx6441v1 10.00 10.19 10.44 T:norx3241v3 10.02 10.21 10.39 T:norx3241v2 10.11 10.33 10.45 T:norx3241v1 10.94 11.00 11.18 T:lakekeyakv1 12.01 12.08 12.16 T:ascon128v11 12.08 12.15 12.23 T:ascon128v1 12.22 12.29 12.44 ascon128v12 12.40 12.44 12.54 T:riverkeyakv2 13.02 13.05 13.07 T:lakekeyakv2 14.46 14.63 14.93 T:norx6461v1 14.61 14.87 15.17 T:norx6461v3 14.90 15.08 15.30 T:norx6461v2 15.22 15.42 15.65 T:norx3261v2 16.05 16.25 16.27 T:norx3261v3 16.61 16.71 16.78 T:norx3261v1 18.38 18.60 18.75 T:twine80n6t4clocv3 18.63 18.70 18.81 T:aes128otrsv1 18.61 18.71 18.87 T:aes128otrpv1 18.66 18.76 18.83 T:aes128otrsv2 18.73 18.81 18.94 T:aes128otrpv2 19.12 19.20 19.38 T:aes128n8clocv1 19.13 19.21 19.36 T:aes128n12clocv1 19.38 19.40 19.52 T:twine80n6t4clocv2 23.26 23.40 23.59 T:norx6444v3 23.75 23.85 24.08 T:aes256otrsv1 23.87 23.97 24.19 T:aes256otrsv2 24.25 24.38 24.53 T:aes256otrpv1 24.57 24.65 24.83 T:aes256otrpv2 25.38 25.60 25.82 T:ketjeminorv2 25.81 25.98 26.07 T:acorn128v2 26.24 26.43 26.70 T:acorn128v3 29.58 29.65 29.77 T:seakeyakv2 33.04 33.14 33.32 T:norx6444v2 35.22 35.39 35.87 T:aeadaes128ocbtaglen96v1 35.26 35.55 35.84 T:aeadaes128ocbtaglen64v1 37.74 37.92 38.61 T:ketjemajorv2 38.99 39.36 39.68 T:norx6444v1 41.32 41.39 41.55 T:aeadaes192ocbtaglen64v1 41.33 41.42 41.54 T:aeadaes192ocbtaglen96v1 42.11 42.28 42.56 T:ketjesrv1 46.22 46.50 46.79 T:oceankeyakv2 47.20 47.50 47.95 T:ketjesrv2 48.24 48.34 48.53 T:aeadaes256ocbtaglen64v1 48.25 48.45 48.75 T:aeadaes256ocbtaglen96v1 53.10 53.25 53.46 T:colm127v1 58.06 58.46 58.71 T:ketjejrv1 60.20 60.55 60.65 T:proest256otrv1 71.93 72.68 72.90 T:deoxysneq128128v13 86.97 87.17 87.36 T:present80n6t4silcv3 86.94 87.38 87.57 T:proest128otrv1 92.99 95.07 95.44 T:ketjejrv2 94.84 95.20 102.16 T:aezv1 116.99 117.18 118.62 T:deoxysneq256128v13 118.85 119.12 119.43 T:lunarkeyakv2 119.49 120.09 120.45 T:deoxyseq128128v13 149.72 150.01 150.23 T:led80n6t4silcv3 194.61 194.99 195.37 T:deoxyseq256128v13 1621.86 1627.27 1651.22 T:acorn128 2990.60 3002.79 3009.82 T:led80n6t4silcv2 3005.23 3007.96 3010.83 T:led80n6silcv1 3201.01 3206.09 3211.36 T:present80n6silcv1 3207.84 3209.94 3211.53 T:present80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.02 1.05 1.10 T:aegis128 1.12 1.15 1.23 aegis128l 1.31 1.36 1.43 T:tiaoxinv2 1.33 1.36 1.41 T:tiaoxinv1 1.35 1.36 1.38 T:aezv5 1.37 1.41 1.43 aegis256 1.38 1.41 1.43 T:aezv4 1.49 1.50 1.50 T:aezv3 1.63 1.65 1.69 T:aeadaes128ocbtaglen128v1 1.93 1.94 1.96 T:aes128otrpv3 2.27 2.28 2.31 T:aeadaes256ocbtaglen128v1 2.29 2.30 2.32 T:aes128otrsv3 2.41 2.42 2.44 T:aes256otrpv3 2.54 2.58 2.60 T:aes128n12t8clocv2 2.56 2.59 2.61 T:aes128n12t8clocv3 2.56 2.59 2.62 T:aes128n8t8clocv2 2.80 2.81 2.82 T:aes128otrcv3 2.90 2.93 2.95 T:aes128n8t8silcv2 2.92 2.96 3.00 T:aes128n12t8silcv2 2.92 2.96 3.00 T:aes128n12t8silcv3 3.08 3.12 3.17 T:colm0v1 3.27 3.28 3.29 T:aes256otrsv3 3.39? 3.42? 5.85? T:aeadaes192ocbtaglen128v1 3.70 3.72 3.74 T:aes256otrcv3 4.09 4.17 4.29 T:morus640128v1 4.42 4.49 4.61 T:morus640128v2 4.70 4.75 4.80 aes256gcmv1 4.86 4.89 4.93 T:deoxysneq128128v1 4.90 4.93 5.00 T:deoxysi128v141 4.94 5.00 5.07 T:deoxysneq256128v1 5.29 5.34 5.39 T:deoxysii128v141 5.33 5.38 5.42 T:aes128gcmv1 5.74 5.75 5.77 T:aesjambuv1 5.74 5.79 5.86 T:deoxysi256v141 5.86 5.91 5.96 T:morus1280128v1 5.89 5.94 6.02 T:morus1280256v1 6.09 6.14 6.23 T:morus1280256v2 6.11 6.18 6.32 T:morus1280128v2 6.56 6.59 6.63 T:deoxyseq128128v1 6.55 6.61 6.68 T:deoxysii256v141 6.66 6.71 6.76 T:deoxyseq256128v1 9.44 9.51 9.63 ascon128av12 9.56 9.60 9.69 T:ascon128av11 9.60 9.65 9.74 T:ascon96v1 9.93 10.06 10.24 T:norx6441v1 10.06 10.23 10.54 T:norx6441v2 10.14 10.35 10.54 T:norx6441v3 10.17 10.38 10.64 T:norx3241v2 10.34 10.49 10.67 T:norx3241v3 10.34 10.55 10.71 T:norx3241v1 11.04 11.10 11.29 T:lakekeyakv1 11.98 12.06 12.20 T:ascon128v11 11.99 12.10 12.19 T:ascon128v1 12.17 12.22 12.31 ascon128v12 12.50 12.54 12.65 T:riverkeyakv2 13.04 13.09 13.14 T:lakekeyakv2 14.49 14.70 14.87 T:norx6461v1 14.90 15.08 15.23 T:norx6461v2 14.98 15.21 15.54 T:norx6461v3 15.39 15.58 15.91 T:norx3261v2 15.77 15.84 15.89 T:norx3261v3 16.45 16.52 16.60 T:norx3261v1 18.50 18.72 18.93 T:twine80n6t4clocv3 18.72 18.82 18.96 T:aes128otrsv1 18.80 18.88 18.98 T:aes128otrsv2 18.95 19.01 19.07 T:aes128otrpv1 19.05 19.12 19.33 T:aes128n8clocv1 19.03 19.15 19.20 T:aes128otrpv2 19.09 19.17 19.31 T:aes128n12clocv1 19.46 19.49 19.65 T:twine80n6t4clocv2 23.40 23.52 23.70 T:norx6444v3 23.94 24.11 24.31 T:aes256otrsv1 24.00 24.11 24.35 T:aes256otrsv2 24.62 24.70 24.80 T:aes256otrpv1 24.82 24.89 25.06 T:aes256otrpv2 25.55 25.66 26.16 T:ketjeminorv2 26.04 26.34 26.55 T:acorn128v2 26.89 26.95 27.11 T:acorn128v3 29.63 29.71 29.80 T:seakeyakv2 33.21 33.30 33.54 T:norx6444v2 37.74 38.04 38.46 T:ketjemajorv2 39.06 39.51 39.73 T:norx6444v1 42.51 42.70 43.16 T:ketjesrv1 42.89 43.05 43.81 T:aeadaes128ocbtaglen64v1 42.81 43.05 43.79 T:aeadaes128ocbtaglen96v1 46.26 46.60 46.97 T:oceankeyakv2 47.55 47.82 48.25 T:ketjesrv2 50.29 50.38 50.55 T:aeadaes192ocbtaglen64v1 50.31 50.41 50.58 T:aeadaes192ocbtaglen96v1 58.24 58.73 59.24 T:ketjejrv1 58.92 59.04 59.24 T:aeadaes256ocbtaglen64v1 59.16 59.32 59.49 T:aeadaes256ocbtaglen96v1 61.02 61.25 61.38 T:proest256otrv1 61.33 61.50 61.72 T:colm127v1 83.80 84.37 84.86 T:deoxysneq128128v13 86.97 87.09 87.32 T:present80n6t4silcv3 86.88 87.30 88.38 T:proest128otrv1 93.60 95.37 95.87 T:ketjejrv2 101.43 101.83 109.67 T:aezv1 119.14 119.35 119.75 T:lunarkeyakv2 119.36 119.84 120.05 T:deoxyseq128128v13 130.27 130.75 131.98 T:deoxysneq256128v13 149.69 149.90 150.19 T:led80n6t4silcv3 194.48 194.84 195.29 T:deoxyseq256128v13 1602.32 1619.90 1625.66 T:acorn128 2986.66 3004.07 3011.57 T:led80n6t4silcv2 3007.52 3010.09 3012.22 T:led80n6silcv1 3203.60 3206.26 3209.08 T:present80n6silcv1 3207.75 3210.14 3212.13 T:present80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.01 1.03 1.06 T:aegis128 1.09 1.09 1.21 T:aezv5 1.09 1.09 1.09 T:aezv4 1.13 1.17 1.20 aegis128l 1.17 1.18 1.19 T:aezv3 1.32 1.34 1.38 T:tiaoxinv2 1.35 1.38 1.48 T:tiaoxinv1 1.40 1.43 1.47 aegis256 1.63 1.67 1.71 T:aeadaes128ocbtaglen128v1 1.93 1.94 1.97 T:aes128otrpv3 2.28 2.30 2.31 T:aeadaes256ocbtaglen128v1 2.29 2.30 2.31 T:aes128otrsv3 2.40 2.42 2.44 T:aes256otrpv3 2.45? 2.48? 2.83? T:aes128n12t8clocv2 2.46 2.49 2.51 T:aes128n8t8clocv2 2.47 2.50 2.58 T:aes128n12t8clocv3 2.76 2.77 2.81 T:aes128n12t8silcv2 2.76 2.78 2.82 T:aes128n8t8silcv2 2.76? 2.79? 3.28? T:aes128n12t8silcv3 2.80 2.81 2.82 T:aes128otrcv3 3.13 3.16 3.42 T:colm0v1 3.28 3.29 3.30 T:aes256otrsv3 3.39? 3.44? 5.29? T:aeadaes192ocbtaglen128v1 3.67 3.71 3.74 T:aes256otrcv3 4.07 4.13 4.19 T:morus640128v1 4.40 4.47 4.56 T:morus640128v2 4.69 4.73 4.78 aes256gcmv1 4.70 4.76 4.84 T:deoxysneq128128v1 4.80 4.87 4.94 T:deoxysneq256128v1 4.93 5.00 5.05 T:deoxysi128v141 5.30 5.36 5.43 T:aes128gcmv1 5.29 5.36 5.41 T:deoxysii128v141 5.74 5.76 5.77 T:aesjambuv1 5.69 5.80 5.92 T:deoxysi256v141 5.88 5.93 5.97 T:morus1280128v1 5.90 5.95 5.99 T:morus1280256v1 6.10 6.14 6.20 T:morus1280256v2 6.09 6.19 6.30 T:morus1280128v2 6.54 6.58 6.62 T:deoxyseq128128v1 6.54 6.61 6.67 T:deoxysii256v141 6.66 6.71 6.77 T:deoxyseq256128v1 9.42 9.46 9.56 ascon128av12 9.47 9.57 9.69 T:ascon128av11 9.55 9.60 9.67 T:ascon96v1 9.93 10.07 10.19 T:norx6441v1 10.02 10.21 10.42 T:norx6441v3 10.16 10.30 10.54 T:norx6441v2 10.15 10.30 10.50 T:norx3241v2 10.28 10.41 10.59 T:norx3241v3 10.27 10.50 10.68 T:norx3241v1 11.07 11.11 11.25 T:lakekeyakv1 11.96 12.02 12.20 T:ascon128v11 11.99 12.06 12.18 T:ascon128v1 12.20 12.25 12.35 ascon128v12 12.57 12.60 12.65 T:riverkeyakv2 13.09 13.12 13.19 T:lakekeyakv2 14.40 14.60 14.90 T:norx6461v1 14.96 15.15 15.30 T:norx6461v2 14.92 15.17 15.45 T:norx6461v3 15.34 15.57 15.79 T:norx3261v2 15.78 15.83 15.89 T:norx3261v3 16.43 16.52 16.58 T:norx3261v1 18.40 18.64 18.84 T:twine80n6t4clocv3 18.75 18.86 19.05 T:aes128otrsv1 18.81 18.92 19.09 T:aes128otrsv2 18.98 19.07 19.19 T:aes128otrpv1 19.03 19.12 19.23 T:aes128n8clocv1 19.07 19.15 19.22 T:aes128otrpv2 19.09 19.15 19.25 T:aes128n12clocv1 19.43 19.48 19.67 T:twine80n6t4clocv2 23.38 23.55 23.76 T:norx6444v3 24.05 24.15 24.54 T:aes256otrsv2 23.99 24.15 24.42 T:aes256otrsv1 24.68 24.73 24.87 T:aes256otrpv1 24.94 25.04 25.20 T:aes256otrpv2 25.48 25.68 26.15 T:ketjeminorv2 25.96 26.30 26.56 T:acorn128v2 26.83 26.88 26.97 T:acorn128v3 29.62 29.72 29.87 T:seakeyakv2 33.31 33.50 33.80 T:norx6444v2 37.77 38.04 38.54 T:ketjemajorv2 39.04 39.47 39.79 T:norx6444v1 42.58 42.81 43.24 T:ketjesrv1 42.81 42.96 43.83 T:aeadaes128ocbtaglen96v1 42.87 43.03 43.78 T:aeadaes128ocbtaglen64v1 46.21 46.47 46.91 T:oceankeyakv2 47.56 47.87 48.20 T:ketjesrv2 50.19 50.29 50.46 T:aeadaes192ocbtaglen64v1 50.23 50.33 50.42 T:aeadaes192ocbtaglen96v1 58.22 58.77 59.34 T:ketjejrv1 58.96 59.08 59.18 T:aeadaes256ocbtaglen64v1 59.13 59.26 59.39 T:aeadaes256ocbtaglen96v1 59.27 59.77 59.93 T:proest256otrv1 61.09 61.28 61.53 T:colm127v1 83.94 84.59 84.93 T:deoxysneq128128v13 86.99 87.21 87.62 T:present80n6t4silcv3 86.41 87.23 87.38 T:proest128otrv1 93.73 95.45 95.91 T:ketjejrv2 101.45 101.83 109.24 T:aezv1 119.38 119.58 119.89 T:lunarkeyakv2 119.26 120.07 120.27 T:deoxyseq128128v13 130.28 130.65 132.07 T:deoxysneq256128v13 149.74 149.89 150.17 T:led80n6t4silcv3 194.39 194.67 195.27 T:deoxyseq256128v13 1600.38 1609.07 1624.98 T:acorn128 2986.44 3001.24 3004.69 T:led80n6t4silcv2 3005.19 3008.17 3011.85 T:led80n6silcv1 3203.58 3205.95 3209.00 T:present80n6silcv1 3207.40 3208.57 3210.75 T:present80n6t4silcv2