VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen 4 (a70f41); 2023 AMD Ryzen 5 7640HS; 6 x 4300MHz; phoenix, supercop-20250415

[Page version: 20250828 09:44:27]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.14? 0.15? 0.16? T:tiaoxinv2 0.14? 0.16? 0.16? T:tiaoxinv1 0.15? 0.18? 0.21? T:aeadaes128ocbtaglen128v1 0.18 0.19 0.19 T:aegis128l 0.19 0.19 0.20 aegis128l 0.23? 0.25? 0.29? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.32 aegis256 0.36 0.37 0.37 T:aezv3 0.37 0.37 0.37 T:aezv4 0.38 0.38 0.39 T:aezv5 0.10? 0.39? 0.42? T:aeadaes192ocbtaglen128v1 0.40 0.41 0.42 T:aes128otrsv3 0.40 0.41 0.42 T:aes128otrcv3 0.47 0.48 0.50 T:morus1280128v2 0.48 0.49 0.50 T:morus1280256v1 0.47 0.49 0.51 T:morus1280128v1 0.48 0.50 0.50 T:morus1280256v2 0.53 0.53 0.53 T:aes256otrcv3 0.51? 0.54? 0.57? T:deoxysi128v141 0.54 0.55 0.55 T:aes256otrsv3 0.55 0.58 0.59 aes256gcmv1 0.58? 0.61? 0.65? T:deoxysi256v141 0.59 0.61 0.62 T:deoxysneq128128v1 0.70 0.71 0.72 T:deoxysneq256128v1 0.71 0.75 0.76 T:oceankeyakv2 0.74 0.75 0.76 T:morus640128v2 0.74 0.76 0.76 T:morus640128v1 0.72? 0.78? 0.80? T:aes128gcmv1 0.77 0.79 0.84 T:lunarkeyakv2 0.85 0.87 0.88 T:norx6444v3 0.96 0.98 1.01 T:aes128otrpv3 1.10 1.11 1.13 T:deoxysii128v141 1.14? 1.18? 1.30? T:aes256otrpv3 1.18 1.19 1.19 T:colm0v1 1.10? 1.19? 1.24? T:deoxysii256v141 1.19 1.27 1.29 T:deoxyseq128128v1 1.36 1.40 1.41 T:seakeyakv2 1.42 1.45 1.48 T:deoxyseq256128v1 2.16 2.17 2.19 T:norx6441v2 2.17 2.18 2.19 T:norx6441v3 2.61 2.62 2.63 T:norx6441v1 2.62 2.62 2.63 T:aes128n12t8clocv3 2.62 2.63 2.63 T:aes128n12t8silcv2 2.62 2.63 2.63 T:aes128n8t8silcv2 2.62 2.63 2.63 T:aes128n12t8clocv2 2.62 2.63 2.63 T:aes128n8t8clocv2 2.62 2.63 2.63 T:aes128n12t8silcv3 3.10 3.18 3.26 T:lakekeyakv1 3.23 3.24 3.25 T:norx6461v3 3.23 3.24 3.25 T:norx6461v2 3.22 3.27 3.29 T:norx6444v2 3.30 3.35 3.41 T:lakekeyakv2 3.52 3.52 3.53 T:norx3241v2 3.52 3.52 3.53 T:norx3241v3 3.64 3.67 3.71 T:norx6444v1 3.86 3.88 3.89 T:norx6461v1 4.22 4.22 4.23 T:norx3241v1 4.99 5.00 5.01 T:acorn128v3 5.02 5.11 5.14 T:ketjemajorv2 5.11 5.12 5.15 T:acorn128v2 5.27 5.27 5.28 T:norx3261v3 5.27 5.27 5.28 T:norx3261v2 5.28 5.28 5.29 T:aesjambuv1 5.31 5.31 5.31 ascon128av12 5.44 5.44 5.44 T:ascon128av11 5.57 5.57 5.57 T:ascon96v1 6.43 6.49 6.58 T:ketjeminorv2 7.43 7.46 7.55 T:riverkeyakv2 7.52 7.53 7.53 T:norx3261v1 7.75 7.75 7.75 ascon128v12 8.24 8.25 8.26 T:ascon128v11 8.24 8.25 8.25 T:ascon128v1 12.92 12.94 12.97 T:aes128otrpv2 12.96 12.98 13.01 T:aes128otrsv1 12.97 12.99 13.08 T:aes128otrsv2 12.97 13.00 13.01 T:aes128otrpv1 16.86 16.90 16.93 T:aes256otrpv1 16.88 16.90 16.93 T:aes256otrsv1 16.92 16.94 17.02 T:aes256otrpv2 16.96 17.00 17.02 T:aes256otrsv2 18.14 18.17 18.24 T:proest256otrv1 19.20 19.27 19.37 T:twine80n6t4clocv3 20.18 20.30 20.60 T:twine80n6t4clocv2 20.26 21.19 21.25 T:aeadaes128ocbtaglen64v1 21.18 21.21 21.28 T:aeadaes128ocbtaglen96v1 21.81 21.83 21.84 T:aes128n8clocv1 21.82 21.87 21.89 T:aes128n12clocv1 24.93 25.00 25.18 T:aeadaes192ocbtaglen64v1 24.99 25.08 25.20 T:aeadaes192ocbtaglen96v1 26.72 26.75 26.78 T:ketjesrv1 29.00 29.05 29.41 T:aeadaes256ocbtaglen64v1 28.79 29.05 29.25 T:aeadaes256ocbtaglen96v1 30.11 30.17 30.36 T:ketjesrv2 42.79 42.84 42.89 T:ketjejrv1 44.14 44.18 45.07 T:proest128otrv1 46.61 46.92 47.46 T:colm127v1 64.65 64.72 64.78 T:deoxysneq128128v13 68.12 68.25 68.29 T:present80n6t4silcv3 69.32 69.50 70.17 T:ketjejrv2 96.64 99.85 103.65 T:led80n6t4silcv3 106.55 106.76 106.92 T:deoxysneq256128v13 129.73 129.84 130.18 T:deoxyseq128128v13 141.38 141.78 143.86 T:aezv1 213.05 213.75 216.51 T:deoxyseq256128v13 472.28? 483.57? 567.87? T:acorn128 3029.47 3030.37 3032.91 T:led80n6silcv1 3023.00 3033.27 3035.11 T:led80n6t4silcv2 3612.75 3613.69 3614.08 T:present80n6t4silcv2 3616.99 3617.38 3618.88 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.16? 0.18? 0.19? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.15? 0.19? 0.20? aegis128l 0.25 0.25 0.27 T:aeadaes256ocbtaglen128v1 0.28 0.29 0.30 T:tiaoxinv2 0.27 0.29 0.30 T:tiaoxinv1 0.31 0.31 0.32 T:aegis128 0.31 0.32 0.32 aegis256 0.36 0.37 0.37 T:aezv4 0.36 0.37 0.37 T:aezv3 0.38 0.38 0.39 T:aezv5 0.33? 0.40? 0.42? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrsv3 0.42 0.42 0.42 T:aes128otrcv3 0.49 0.49 0.50 aes256gcmv1 0.48 0.50 0.50 T:morus1280128v2 0.49 0.50 0.51 T:morus1280256v2 0.50 0.51 0.51 T:morus1280256v1 0.50 0.51 0.52 T:morus1280128v1 0.54 0.55 0.55 T:aes256otrsv3 0.55 0.55 0.55 T:aes256otrcv3 0.57 0.59 0.60 T:deoxysi128v141 0.63 0.66 0.66 T:deoxysneq128128v1 0.64 0.68 0.70 T:deoxysi256v141 0.69 0.71 0.72 T:deoxysneq256128v1 0.69? 0.74? 0.82? T:oceankeyakv2 0.76 0.78 0.79 T:aes128gcmv1 0.76 0.78 0.79 T:morus640128v1 0.78 0.79 0.79 T:morus640128v2 0.86 0.88 0.89 T:norx6444v3 0.88? 0.94? 1.03? T:aes128otrpv3 0.88? 0.95? 1.00? T:lunarkeyakv2 1.06 1.11 1.12 T:deoxysii128v141 1.15 1.17 1.23 T:colm0v1 1.11? 1.22? 1.27? T:deoxysii256v141 1.19? 1.27? 1.34? T:aes256otrpv3 1.31 1.33 1.36 T:deoxyseq128128v1 1.40 1.43 1.45 T:seakeyakv2 1.42 1.43 1.46 T:deoxyseq256128v1 2.14 2.15 2.16 T:norx6441v3 2.14 2.16 2.19 T:norx6441v2 2.55 2.56 2.58 T:aes128n12t8silcv3 2.56 2.56 2.56 T:aes128n8t8silcv2 2.56 2.56 2.57 T:aes128n12t8clocv3 2.55 2.56 2.57 T:aes128n12t8silcv2 2.55 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.57 T:aes128n12t8clocv2 2.58 2.60 2.62 T:norx6441v1 3.21 3.22 3.23 T:norx6461v2 3.22 3.24 3.26 T:norx6461v3 3.23 3.26 3.29 T:norx6444v2 3.21 3.29 3.34 T:lakekeyakv1 3.24 3.38 3.44 T:lakekeyakv2 3.56 3.57 3.58 T:norx3241v3 3.58 3.58 3.60 T:norx3241v2 3.63 3.64 3.71 T:norx6444v1 3.85 3.87 4.03 T:norx6461v1 4.33 4.36 4.39 T:norx3241v1 4.92 4.96 5.02 T:ketjemajorv2 5.23 5.25 5.28 T:acorn128v3 5.24 5.25 5.28 T:acorn128v2 5.25 5.25 5.26 T:ascon128av11 5.31 5.31 5.31 ascon128av12 5.32 5.32 5.33 T:norx3261v2 5.31 5.32 5.33 T:norx3261v3 5.50 5.50 5.50 T:ascon96v1 5.72 5.78 5.86 T:aesjambuv1 7.07 7.12 7.20 T:ketjeminorv2 7.40 7.40 7.41 T:norx3261v1 7.60 7.61 7.64 ascon128v12 7.69 7.75 7.80 T:riverkeyakv2 7.85 7.88 7.88 T:ascon128v11 7.87 7.88 7.89 T:ascon128v1 13.28 13.32 13.35 T:aes128otrsv2 13.30 13.33 13.40 T:aes128otrsv1 13.28 13.34 13.38 T:aes128otrpv2 13.32 13.36 13.40 T:aes128otrpv1 17.22 17.27 17.33 T:aes256otrpv1 17.26 17.29 17.32 T:aes256otrsv1 17.27 17.31 17.33 T:aes256otrpv2 17.55 17.62 17.66 T:aes256otrsv2 18.74 18.77 18.81 T:proest256otrv1 19.01 19.23 19.28 T:twine80n6t4clocv3 20.23 20.28 20.30 T:twine80n6t4clocv2 22.69 22.78 22.88 T:ketjesrv2 22.82 22.87 22.89 T:aes128n8clocv1 22.91 22.98 23.02 T:aes128n12clocv1 27.80 27.86 27.95 T:ketjesrv1 29.04 29.08 29.21 T:aeadaes128ocbtaglen96v1 29.05 29.10 29.14 T:aeadaes128ocbtaglen64v1 34.67 34.70 35.03 T:aeadaes192ocbtaglen64v1 34.64 34.78 35.01 T:aeadaes192ocbtaglen96v1 40.27 40.35 40.41 T:aeadaes256ocbtaglen96v1 40.37 40.40 40.44 T:aeadaes256ocbtaglen64v1 42.65 42.71 42.97 T:proest128otrv1 44.11 44.17 44.22 T:ketjejrv1 62.86 62.89 63.45 T:colm127v1 68.03 68.21 68.88 T:ketjejrv2 68.11 68.31 68.39 T:present80n6t4silcv3 86.18 86.56 88.23 T:deoxysneq128128v13 97.31 97.35 102.30 T:led80n6t4silcv3 128.83 129.08 129.83 T:deoxyseq128128v13 130.70 130.83 131.20 T:deoxysneq256128v13 141.21 141.82 143.64 T:aezv1 212.88 213.55 216.04 T:deoxyseq256128v13 508.62 537.16 562.76 T:acorn128 3016.54 3023.61 3032.37 T:led80n6t4silcv2 3024.01 3027.93 3029.10 T:led80n6silcv1 3612.34 3614.18 3615.73 T:present80n6t4silcv2 3618.65 3620.33 3620.90 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13? 0.14? 0.19? T:aezv3 0.08? 0.14? 0.15? T:aezv4 0.13? 0.15? 0.15? T:aezv5 0.18 0.18 0.19 T:aeadaes128ocbtaglen128v1 0.19 0.19 0.19 T:aegis128l 0.18? 0.24? 0.25? aegis128l -0.02? 0.26? 0.53? T:aeadaes256ocbtaglen128v1 0.28 0.29 0.30 T:tiaoxinv2 0.28 0.30 0.30 T:tiaoxinv1 0.31 0.31 0.32 T:aegis128 0.37 0.37 0.38 aegis256 0.40? 0.40? 0.67? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrsv3 0.42 0.42 0.42 T:aes128otrcv3 0.48 0.49 0.49 aes256gcmv1 0.49 0.50 0.51 T:morus1280128v1 0.50 0.51 0.51 T:morus1280256v2 0.48 0.51 0.51 T:morus1280128v2 0.50 0.51 0.52 T:morus1280256v1 0.54 0.54 0.55 T:aes256otrsv3 0.55 0.55 0.55 T:aes256otrcv3 0.58 0.59 0.60 T:deoxysi128v141 0.64 0.65 0.66 T:deoxysneq128128v1 0.67 0.68 0.69 T:deoxysi256v141 0.68 0.70 0.71 T:deoxysneq256128v1 0.78 0.78 0.80 T:aes128gcmv1 0.76 0.78 0.79 T:morus640128v1 0.78 0.79 0.80 T:morus640128v2 0.73? 0.80? 0.83? T:oceankeyakv2 0.86 0.87 0.88 T:norx6444v3 0.85? 0.93? 1.00? T:aes128otrpv3 0.92 0.96 0.99 T:lunarkeyakv2 1.10 1.11 1.12 T:deoxysii128v141 1.07? 1.16? 1.23? T:colm0v1 1.21 1.22 1.25 T:deoxysii256v141 1.18? 1.28? 1.33? T:aes256otrpv3 1.32 1.34 1.34 T:deoxyseq128128v1 1.40 1.42 1.44 T:deoxyseq256128v1 1.45 1.47 1.49 T:seakeyakv2 2.13 2.15 2.16 T:norx6441v3 2.16 2.18 2.20 T:norx6441v2 2.45 2.56 2.56 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.45 2.56 2.57 T:aes128n12t8silcv3 2.50 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128n12t8silcv2 2.58 2.61 2.64 T:norx6441v1 3.21 3.23 3.26 T:norx6461v3 3.26 3.27 3.37 T:lakekeyakv2 3.27 3.28 3.30 T:norx6461v2 3.23 3.31 3.34 T:norx6444v2 3.33 3.38 3.40 T:lakekeyakv1 3.58 3.59 3.60 T:norx3241v2 3.58 3.60 3.61 T:norx3241v3 3.65 3.68 3.73 T:norx6444v1 3.86 4.02 4.03 T:norx6461v1 4.33 4.35 4.39 T:norx3241v1 4.94 4.97 5.00 T:ketjemajorv2 5.25 5.25 5.25 T:acorn128v2 5.25 5.25 5.25 T:acorn128v3 5.25 5.25 5.25 T:ascon128av11 5.31 5.31 5.31 ascon128av12 5.32 5.33 5.33 T:norx3261v3 5.32 5.33 5.35 T:norx3261v2 5.50 5.50 5.50 T:ascon96v1 5.72 5.81 5.86 T:aesjambuv1 7.16 7.21 7.24 T:ketjeminorv2 7.35 7.36 7.36 T:norx3261v1 7.62 7.62 7.64 ascon128v12 7.71 7.75 7.81 T:riverkeyakv2 7.86 7.88 7.90 T:ascon128v11 7.86 7.88 7.90 T:ascon128v1 13.28 13.34 13.40 T:aes128otrpv2 13.30 13.36 13.39 T:aes128otrsv2 13.34 13.37 13.41 T:aes128otrpv1 13.33 13.38 13.42 T:aes128otrsv1 17.25 17.29 17.34 T:aes256otrpv1 17.27 17.31 17.35 T:aes256otrsv1 17.29 17.32 17.35 T:aes256otrpv2 17.58 17.63 17.66 T:aes256otrsv2 18.71 18.72 18.77 T:proest256otrv1 19.04 19.16 19.24 T:twine80n6t4clocv3 19.81 20.26 20.30 T:twine80n6t4clocv2 22.73 22.80 22.95 T:ketjesrv2 22.83 22.86 22.90 T:aes128n8clocv1 22.93 22.96 23.02 T:aes128n12clocv1 27.87 27.95 28.00 T:ketjesrv1 28.98 29.02 29.12 T:aeadaes128ocbtaglen96v1 28.96 29.06 29.14 T:aeadaes128ocbtaglen64v1 34.63 34.65 34.79 T:aeadaes192ocbtaglen64v1 34.66 34.67 34.80 T:aeadaes192ocbtaglen96v1 40.33 40.36 40.38 T:aeadaes256ocbtaglen64v1 40.27 40.37 40.45 T:aeadaes256ocbtaglen96v1 42.65 42.70 42.96 T:proest128otrv1 44.16 44.22 44.27 T:ketjejrv1 61.93 62.36 62.39 T:colm127v1 68.06 68.18 68.40 T:present80n6t4silcv3 68.09 68.23 68.46 T:ketjejrv2 86.14 86.71 88.57 T:deoxysneq128128v13 96.99 102.26 102.29 T:led80n6t4silcv3 128.79 128.87 129.24 T:deoxyseq128128v13 130.93 131.08 131.21 T:deoxysneq256128v13 141.12 141.39 143.70 T:aezv1 212.98 213.65 216.11 T:deoxyseq256128v13 449.03? 501.67? 563.19? T:acorn128 3020.72 3021.96 3026.11 T:led80n6t4silcv2 3023.66 3027.12 3027.98 T:led80n6silcv1 3612.93 3613.72 3614.10 T:present80n6t4silcv2 3619.07 3620.05 3621.00 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.11? 0.13? 0.13? T:tiaoxinv2 0.11? 0.13? 0.14? T:tiaoxinv1 0.14? 0.17? 0.22? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 T:aegis128l 0.17 0.17 0.18 aegis128l 0.11? 0.22? 0.37? T:aeadaes256ocbtaglen128v1 0.24 0.25 0.26 T:aezv3 0.25 0.25 0.26 T:aezv4 0.24 0.26 0.26 T:aezv5 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.33 aegis256 0.28? 0.39? 0.47? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.42 T:aes128otrcv3 0.47 0.48 0.49 T:morus1280256v1 0.47 0.48 0.48 T:morus1280128v1 0.46 0.48 0.49 T:morus1280128v2 0.47 0.48 0.49 T:morus1280256v2 0.47 0.48 0.49 aes256gcmv1 0.54 0.54 0.54 T:aes256otrcv3 0.50? 0.55? 0.57? T:deoxysi128v141 0.58 0.59 0.60 T:aes128gcmv1 0.55? 0.60? 0.63? T:deoxysi256v141 0.59 0.62 0.63 T:deoxysneq128128v1 0.62 0.63 0.64 T:oceankeyakv2 0.68 0.70 0.74 T:deoxysneq256128v1 0.73 0.74 0.75 T:morus640128v1 0.73 0.76 0.76 T:morus640128v2 0.79 0.83 0.86 T:deoxysii128v141 0.84 0.85 0.85 T:colm0v1 0.83? 0.90? 0.93? T:deoxysii256v141 0.87? 0.94? 1.03? T:deoxyseq128128v1 0.94 0.96 0.98 T:lunarkeyakv2 0.97 0.99 1.00 T:aes128otrpv3 1.05 1.09 1.14 T:deoxyseq256128v1 1.16 1.17 1.20 T:seakeyakv2 1.22 1.24 1.25 T:aes256otrpv3 1.48 1.49 1.49 T:aes128otrsv3 1.50 1.51 1.52 T:norx6444v3 2.05 2.05 2.06 T:aes256otrsv3 2.10 2.11 2.12 T:norx6441v2 2.11 2.12 2.12 T:norx6441v3 2.56 2.57 2.58 T:norx6441v1 2.59 2.59 2.59 T:aes128n12t8clocv2 2.59 2.59 2.60 T:aes128n12t8clocv3 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.59 T:aes128n12t8silcv2 2.59 2.59 2.59 T:aes128n12t8silcv3 2.59 2.59 2.60 T:aes128n8t8clocv2 2.81 2.84 2.84 T:lakekeyakv2 2.94 2.96 2.99 T:norx6444v2 3.05 3.11 3.13 T:lakekeyakv1 3.12 3.13 3.13 T:norx6461v3 3.13 3.18 3.20 T:norx6461v2 3.52 3.52 3.52 T:norx3241v3 3.52 3.52 3.53 T:norx3241v2 3.55 3.56 3.59 T:norx6444v1 3.76 3.83 3.84 T:norx6461v1 4.22 4.23 4.23 T:norx3241v1 4.49 4.53 4.62 T:ketjemajorv2 5.00 5.01 5.03 T:acorn128v3 5.15 5.15 5.17 T:acorn128v2 5.27 5.27 5.27 T:norx3261v3 5.27 5.27 5.27 T:norx3261v2 5.26 5.28 5.31 ascon128av12 5.27 5.28 5.29 T:aesjambuv1 5.34 5.34 5.35 T:ascon128av11 5.37 5.38 5.38 T:ascon96v1 5.37 5.42 5.44 T:riverkeyakv2 6.24 6.27 6.30 T:ketjeminorv2 7.52 7.52 7.53 T:norx3261v1 7.62 7.62 7.63 ascon128v12 8.06 8.06 8.07 T:ascon128v11 8.06 8.06 8.07 T:ascon128v1 12.34 12.35 12.43 T:aes128otrpv2 12.33 12.36 12.39 T:aes128otrpv1 12.51 12.54 12.60 T:aes128otrsv1 12.53 12.57 12.62 T:aes128otrsv2 16.27 16.30 16.36 T:aes256otrpv2 16.34 16.44 16.47 T:aes256otrpv1 16.45 16.49 16.51 T:aes256otrsv1 16.54 16.57 16.62 T:aes256otrsv2 16.71 16.74 16.77 T:aes128n8clocv1 16.73 16.76 16.79 T:aes128n12clocv1 19.03 19.03 19.15 T:twine80n6t4clocv3 18.57 19.20 19.27 T:proest256otrv1 19.90 20.32 20.34 T:twine80n6t4clocv2 20.78 20.80 20.90 T:aeadaes128ocbtaglen64v1 20.87 20.90 20.94 T:aeadaes128ocbtaglen96v1 24.45 24.50 24.64 T:ketjesrv1 24.65 24.68 24.92 T:aeadaes192ocbtaglen64v1 24.56 24.78 25.02 T:aeadaes192ocbtaglen96v1 25.68 25.72 25.80 T:ketjesrv2 28.60 28.65 28.66 T:aeadaes256ocbtaglen96v1 28.52 28.66 28.77 T:aeadaes256ocbtaglen64v1 34.55 34.77 35.33 T:colm127v1 41.17 41.20 41.23 T:ketjejrv1 43.09 43.11 43.59 T:proest128otrv1 64.31 64.36 64.48 T:deoxysneq128128v13 67.13 67.37 67.47 T:ketjejrv2 67.49 67.55 67.68 T:present80n6t4silcv3 94.05 94.45 95.30 T:aezv1 96.48 96.58 97.47 T:deoxyseq128128v13 98.11 100.05 103.41 T:led80n6t4silcv3 106.34 106.42 106.48 T:deoxysneq256128v13 159.30 160.01 161.17 T:deoxyseq256128v13 484.18? 534.17? 549.61? T:acorn128 2263.82 2266.60 2272.15 T:led80n6t4silcv2 2274.57 2282.56 2288.59 T:led80n6silcv1 2708.69 2709.87 2710.68 T:present80n6t4silcv2 2710.12 2712.30 2717.47 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.17 0.17 0.18 aegis128l 0.17 0.18 0.18 T:aegis128l 0.13? 0.18? 0.22? T:aeadaes128ocbtaglen128v1 0.19 0.20 0.20 T:tiaoxinv2 0.19 0.20 0.20 T:tiaoxinv1 0.11? 0.23? 0.38? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.26 T:aezv4 0.25 0.25 0.26 T:aezv3 0.25 0.26 0.26 T:aezv5 0.31 0.32 0.32 T:aegis128 0.31 0.32 0.34 aegis256 0.26? 0.39? 0.53? T:aeadaes192ocbtaglen128v1 0.42 0.42 0.43 T:aes128otrcv3 0.43 0.43 0.44 aes256gcmv1 0.45 0.47 0.48 T:morus1280128v2 0.48 0.49 0.50 T:morus1280256v1 0.48 0.49 0.50 T:morus1280256v2 0.48 0.50 0.50 T:morus1280128v1 0.55 0.55 0.55 T:aes256otrcv3 0.51? 0.56? 0.59? T:deoxysi128v141 0.56 0.58 0.59 T:aes128gcmv1 0.58? 0.64? 0.66? T:deoxysneq128128v1 0.59? 0.64? 0.66? T:deoxysi256v141 0.62 0.65 0.66 T:oceankeyakv2 0.67 0.70 0.71 T:deoxysneq256128v1 0.73 0.74 0.76 T:morus640128v2 0.74 0.75 0.76 T:morus640128v1 0.78 0.82 0.85 T:deoxysii128v141 0.82 0.83 0.83 T:colm0v1 0.84? 0.92? 0.97? T:deoxysii256v141 0.94 0.96 0.97 T:aes128otrpv3 0.92? 0.98? 1.06? T:deoxyseq128128v1 1.00 1.02 1.05 T:lunarkeyakv2 1.04 1.08 1.12 T:deoxyseq256128v1 1.18 1.19 1.21 T:seakeyakv2 1.25 1.26 1.27 T:aes256otrpv3 1.49 1.49 1.50 T:aes128otrsv3 1.51 1.51 1.52 T:norx6444v3 2.06 2.06 2.06 T:aes256otrsv3 2.10 2.11 2.13 T:norx6441v2 2.10 2.12 2.13 T:norx6441v3 2.54 2.55 2.56 T:norx6441v1 2.55 2.56 2.57 T:aes128n8t8silcv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128n8t8clocv2 2.85 2.86 2.90 T:lakekeyakv2 2.89 2.90 2.94 T:norx6444v2 3.09 3.13 3.18 T:lakekeyakv1 3.13 3.14 3.15 T:norx6461v3 3.14 3.15 3.18 T:norx6461v2 3.55 3.55 3.56 T:norx3241v2 3.55 3.56 3.56 T:norx3241v3 3.60 3.64 3.65 T:norx6444v1 3.79 3.81 3.82 T:norx6461v1 4.28 4.29 4.31 T:norx3241v1 4.38 4.43 4.45 T:ketjemajorv2 5.12 5.13 5.15 T:acorn128v3 5.12 5.13 5.14 T:acorn128v2 5.22 5.22 5.22 T:ascon128av11 5.28 5.28 5.30 ascon128av12 5.29 5.30 5.31 T:norx3261v3 5.30 5.31 5.31 T:norx3261v2 5.34 5.34 5.35 T:ascon96v1 5.49 5.50 5.57 T:aesjambuv1 5.50 5.51 5.54 T:riverkeyakv2 6.51 6.54 6.60 T:ketjeminorv2 7.46 7.46 7.46 T:norx3261v1 7.62 7.62 7.63 ascon128v12 7.80 7.81 7.82 T:ascon128v11 7.87 7.88 7.89 T:ascon128v1 12.50 12.53 12.55 T:aes128otrpv2 12.50 12.55 12.59 T:aes128otrpv1 12.68 12.70 12.73 T:aes128otrsv2 12.70 12.72 12.76 T:aes128otrsv1 16.46 16.52 16.57 T:aes256otrpv2 16.46 16.63 16.66 T:aes256otrpv1 16.63 16.66 16.68 T:aes256otrsv1 16.82 16.85 16.87 T:aes256otrsv2 17.21 17.23 17.27 T:aes128n8clocv1 17.28 17.32 17.35 T:aes128n12clocv1 18.94 19.05 19.07 T:twine80n6t4clocv3 18.88 19.14 19.53 T:proest256otrv1 19.71 19.72 20.14 T:twine80n6t4clocv2 21.94 22.01 22.09 T:ketjesrv2 24.73 24.76 24.79 T:aeadaes128ocbtaglen96v1 24.73 24.77 24.79 T:aeadaes128ocbtaglen64v1 25.06 25.12 25.14 T:ketjesrv1 29.53 29.57 29.62 T:aeadaes192ocbtaglen64v1 29.43 29.58 29.62 T:aeadaes192ocbtaglen96v1 34.27 34.28 34.31 T:aeadaes256ocbtaglen96v1 34.17 34.30 34.51 T:aeadaes256ocbtaglen64v1 41.85 41.88 41.92 T:ketjejrv1 42.33 42.37 42.66 T:proest128otrv1 42.77 42.80 42.96 T:colm127v1 66.57 66.68 66.77 T:ketjejrv2 67.41 67.49 67.52 T:present80n6t4silcv3 75.04 75.30 76.35 T:deoxysneq128128v13 93.98 94.26 94.71 T:aezv1 96.21 96.32 96.60 T:deoxyseq128128v13 98.20 101.43 102.11 T:led80n6t4silcv3 118.37 118.46 118.85 T:deoxysneq256128v13 159.52 160.11 160.99 T:deoxyseq256128v13 456.52? 516.55? 592.37? T:acorn128 2265.80 2268.84 2269.61 T:led80n6t4silcv2 2271.19 2279.18 2285.62 T:led80n6silcv1 2709.38 2710.63 2711.79 T:present80n6t4silcv2 2710.48 2713.36 2716.14 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.10? 0.13? 0.14? T:aezv3 0.13 0.14 0.14 T:aezv4 0.13 0.14 0.14 T:aezv5 0.17 0.17 0.17 T:aegis128l 0.17 0.18 0.18 T:aeadaes128ocbtaglen128v1 0.19 0.20 0.20 T:tiaoxinv2 0.19 0.20 0.21 T:tiaoxinv1 0.17? 0.20? 0.21? aegis128l 0.24 0.25 0.25 T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.31? 0.34? 0.35? aegis256 0.39 0.39 0.40 T:aeadaes192ocbtaglen128v1 0.42 0.42 0.42 T:aes128otrcv3 0.43 0.43 0.44 aes256gcmv1 0.45 0.47 0.48 T:morus1280128v2 0.48 0.49 0.50 T:morus1280128v1 0.48 0.49 0.50 T:morus1280256v2 0.49 0.49 0.50 T:morus1280256v1 0.54 0.55 0.55 T:aes256otrcv3 0.55 0.56 0.56 T:deoxysi128v141 0.58 0.58 0.58 T:aes128gcmv1 0.63 0.63 0.64 T:deoxysneq128128v1 0.64 0.64 0.64 T:deoxysi256v141 0.65 0.66 0.67 T:oceankeyakv2 0.69 0.70 0.73 T:deoxysneq256128v1 0.74 0.75 0.75 T:morus640128v2 0.75 0.75 0.76 T:morus640128v1 0.82 0.82 0.83 T:deoxysii128v141 0.79 0.83 0.86 T:colm0v1 0.90 0.92 0.94 T:deoxysii256v141 0.94 0.96 0.99 T:aes128otrpv3 0.97 0.98 1.03 T:deoxyseq128128v1 1.01 1.03 1.05 T:lunarkeyakv2 1.06 1.08 1.09 T:deoxyseq256128v1 1.20 1.21 1.22 T:seakeyakv2 1.25 1.26 1.27 T:aes256otrpv3 1.49 1.49 1.50 T:aes128otrsv3 1.50 1.51 1.52 T:norx6444v3 2.05 2.06 2.06 T:aes256otrsv3 2.09 2.11 2.13 T:norx6441v3 2.11 2.12 2.14 T:norx6441v2 2.53 2.54 2.55 T:norx6441v1 2.52 2.56 2.60 T:aes128n12t8clocv2 2.56 2.56 2.60 T:aes128n12t8clocv3 2.56 2.56 2.60 T:aes128n8t8clocv2 2.51 2.56 2.56 T:aes128n12t8silcv3 2.56 2.56 2.62 T:aes128n12t8silcv2 2.50 2.56 2.57 T:aes128n8t8silcv2 2.85 2.86 2.87 T:lakekeyakv2 2.88 2.91 2.95 T:norx6444v2 3.13 3.14 3.19 T:norx6461v3 3.14 3.15 3.20 T:norx6461v2 3.14 3.17 3.20 T:lakekeyakv1 3.55 3.55 3.56 T:norx3241v3 3.53 3.55 3.55 T:norx3241v2 3.61 3.66 3.67 T:norx6444v1 3.81 3.83 3.84 T:norx6461v1 4.27 4.27 4.28 T:norx3241v1 4.41 4.45 4.48 T:ketjemajorv2 5.13 5.13 5.13 T:acorn128v3 5.13 5.13 5.14 T:acorn128v2 5.22 5.22 5.22 T:ascon128av11 5.28 5.28 5.28 ascon128av12 5.29 5.30 5.31 T:norx3261v2 5.29 5.31 5.31 T:norx3261v3 5.34 5.34 5.35 T:ascon96v1 5.49 5.51 5.57 T:aesjambuv1 5.53 5.54 5.55 T:riverkeyakv2 6.54 6.57 6.59 T:ketjeminorv2 7.44 7.45 7.46 T:norx3261v1 7.62 7.62 7.63 ascon128v12 7.81 7.81 7.83 T:ascon128v11 7.87 7.88 7.89 T:ascon128v1 12.51 12.53 12.56 T:aes128otrpv2 12.51 12.54 12.58 T:aes128otrpv1 12.70 12.72 12.75 T:aes128otrsv1 12.72 12.74 12.76 T:aes128otrsv2 16.48 16.53 16.58 T:aes256otrpv2 16.49 16.59 16.65 T:aes256otrpv1 16.67 16.69 16.73 T:aes256otrsv1 16.82 16.84 16.88 T:aes256otrsv2 17.24 17.27 17.30 T:aes128n8clocv1 17.29 17.32 17.35 T:aes128n12clocv1 18.94 19.04 19.07 T:twine80n6t4clocv3 18.94 19.48 19.53 T:proest256otrv1 19.73 20.14 20.17 T:twine80n6t4clocv2 21.94 22.01 22.10 T:ketjesrv2 24.68 24.83 24.92 T:aeadaes128ocbtaglen96v1 24.68 24.85 24.88 T:aeadaes128ocbtaglen64v1 25.06 25.10 25.17 T:ketjesrv1 29.54 29.55 29.63 T:aeadaes192ocbtaglen64v1 29.56 29.62 29.86 T:aeadaes192ocbtaglen96v1 34.22 34.27 34.42 T:aeadaes256ocbtaglen64v1 34.26 34.27 34.30 T:aeadaes256ocbtaglen96v1 41.87 41.90 41.93 T:ketjejrv1 42.30 42.34 42.65 T:proest128otrv1 42.28 42.46 42.48 T:colm127v1 66.59 66.68 66.77 T:ketjejrv2 67.42 67.52 67.66 T:present80n6t4silcv3 75.23 75.40 76.27 T:deoxysneq128128v13 93.69 93.78 93.95 T:aezv1 96.10 96.23 96.71 T:deoxyseq128128v13 97.04 102.23 102.41 T:led80n6t4silcv3 118.34 118.73 119.12 T:deoxysneq256128v13 159.33 159.99 160.89 T:deoxyseq256128v13 473.09? 535.25? 539.23? T:acorn128 2268.81 2269.22 2271.61 T:led80n6t4silcv2 2269.33 2279.11 2284.45 T:led80n6silcv1 2712.82 2714.42 2717.10 T:present80n6t4silcv2 2711.04 2714.59 2715.74 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.10? 0.10? 0.12? T:tiaoxinv2 0.10? 0.10? 0.12? T:tiaoxinv1 0.12? 0.13? 0.15? T:aezv5 0.13? 0.14? 0.16? T:aezv4 0.14? 0.15? 0.16? T:aezv3 0.12? 0.16? 0.16? aegis128l 0.15 0.16 0.16 T:aegis128l 0.12? 0.17? 0.18? T:aeadaes128ocbtaglen128v1 -0.03? 0.25? 0.50? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.31 T:aegis128 0.31 0.31 0.32 aegis256 0.34? 0.38? 0.67? T:aeadaes192ocbtaglen128v1 0.39 0.40 0.41 aes256gcmv1 0.38? 0.40? 0.43? T:aes128gcmv1 0.41 0.41 0.42 T:aes128otrcv3 0.45 0.45 0.47 T:morus1280128v1 0.45 0.47 0.50 T:morus1280256v2 0.47 0.48 0.49 T:morus1280128v2 0.45 0.48 0.50 T:morus1280256v1 0.48 0.49 0.51 T:oceankeyakv2 0.50 0.51 0.51 T:colm0v1 0.50 0.54 0.55 T:deoxysi128v141 0.54 0.55 0.56 T:deoxysii128v141 0.55 0.55 0.56 T:aes256otrcv3 0.58 0.60 0.60 T:deoxysii256v141 0.59 0.60 0.62 T:lunarkeyakv2 0.56 0.60 0.62 T:deoxysi256v141 0.57 0.61 0.62 T:deoxysneq128128v1 0.57? 0.63? 0.68? T:deoxyseq128128v1 0.67 0.70 0.71 T:deoxysneq256128v1 0.66 0.70 0.72 T:deoxyseq256128v1 0.70 0.72 0.73 T:morus640128v1 0.68 0.75 0.75 T:morus640128v2 0.97 1.00 1.02 T:aes128otrpv3 1.09 1.11 1.13 T:seakeyakv2 1.19 1.19 1.20 T:aes256otrpv3 2.03 2.04 2.10 T:norx6441v2 2.03 2.09 2.12 T:norx6441v3 2.14 2.15 2.15 T:norx6444v3 2.51 2.53 2.53 T:norx6441v1 2.55 2.55 2.56 T:aes128n12t8silcv3 2.55 2.56 2.58 T:aes128n12t8silcv2 2.55 2.56 2.59 T:aes128n8t8silcv2 2.56 2.56 2.58 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128otrsv3 2.56 2.57 2.58 T:aes128n12t8clocv3 2.56 2.57 2.57 T:aes128n12t8clocv2 2.59 2.61 2.66 T:lakekeyakv2 2.65 2.66 2.67 T:norx6444v2 2.79 2.89 2.99 T:lakekeyakv1 3.01 3.03 3.03 T:norx6461v3 3.03 3.15 3.17 T:norx6461v2 3.44 3.45 3.47 T:norx6444v1 3.52 3.52 3.52 T:norx3241v2 3.52 3.52 3.52 T:norx3241v3 3.56 3.56 3.56 T:aes256otrsv3 3.62 3.63 3.65 T:norx6461v1 3.86 3.92 4.01 T:ketjemajorv2 4.22 4.22 4.23 T:norx3241v1 4.99 5.00 5.04 T:acorn128v3 5.16 5.17 5.18 T:acorn128v2 5.14 5.17 5.18 T:riverkeyakv2 5.19 5.19 5.19 T:ascon96v1 5.24 5.25 5.28 T:aesjambuv1 5.25 5.25 5.25 ascon128av12 5.25 5.25 5.25 T:ascon128av11 5.27 5.27 5.27 T:norx3261v2 5.27 5.27 5.27 T:norx3261v3 5.87 5.94 5.99 T:ketjeminorv2 7.49 7.49 7.50 ascon128v12 7.52 7.52 7.53 T:norx3261v1 7.86 7.87 7.89 T:ascon128v11 7.87 7.88 7.88 T:ascon128v1 11.62 11.64 11.66 T:aes128n12clocv1 11.61 11.64 11.68 T:aes128n8clocv1 11.66 11.70 11.72 T:aes128otrpv1 11.68 11.70 11.72 T:aes128otrpv2 12.07 12.07 12.11 T:aes128otrsv1 12.05 12.09 12.10 T:aes128otrsv2 15.65 15.68 15.77 T:aes256otrpv2 15.66 15.94 15.98 T:aes256otrpv1 16.04 16.06 16.09 T:aes256otrsv1 16.05 16.08 16.09 T:aes256otrsv2 18.83 18.87 19.04 T:twine80n6t4clocv3 19.61 19.99 20.05 T:twine80n6t4clocv2 19.13 20.16 20.31 T:proest256otrv1 20.32 20.34 20.49 T:aeadaes128ocbtaglen96v1 20.37 20.53 20.64 T:aeadaes128ocbtaglen64v1 21.13 21.17 21.25 T:ketjesrv2 22.18 22.27 22.56 T:ketjesrv1 22.64 22.98 23.00 T:colm127v1 24.35 24.44 24.64 T:aeadaes192ocbtaglen96v1 24.14 24.48 24.50 T:aeadaes192ocbtaglen64v1 28.01 28.25 28.29 T:aeadaes256ocbtaglen96v1 28.17 28.26 28.37 T:aeadaes256ocbtaglen64v1 39.52 39.56 39.62 T:ketjejrv1 42.04 42.08 42.12 T:proest128otrv1 45.75 45.91 46.96 T:aezv1 63.61 63.67 64.59 T:deoxyseq128128v13 64.12 64.16 64.23 T:deoxysneq128128v13 64.97 65.22 65.34 T:ketjejrv2 66.79 66.82 66.91 T:present80n6t4silcv3 96.98 97.01 103.07 T:led80n6t4silcv3 105.85 106.11 106.18 T:deoxysneq256128v13 106.10 106.14 106.41 T:deoxyseq256128v13 478.87? 518.33? 543.77? T:acorn128 1509.47 1511.14 1512.14 T:led80n6t4silcv2 1514.67 1515.23 1516.40 T:led80n6silcv1 1799.56 1807.32 1811.60 T:present80n6t4silcv2 1807.50 1808.09 1808.58 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.09? 0.10? 0.12? T:tiaoxinv1 0.10? 0.10? 0.17? T:tiaoxinv2 0.13 0.14 0.14 T:aezv5 0.13? 0.14? 0.15? T:aezv4 0.13? 0.14? 0.15? T:aezv3 0.15 0.16 0.16 T:aegis128l 0.15 0.16 0.16 aegis128l 0.16? 0.17? 0.19? T:aeadaes128ocbtaglen128v1 -0.03? 0.24? 0.51? T:aeadaes256ocbtaglen128v1 0.29 0.30 0.32 T:aegis128 0.31 0.32 0.32 aegis256 0.12? 0.37? 0.38? T:aeadaes192ocbtaglen128v1 0.38 0.40 0.42 T:aes128gcmv1 0.39 0.40 0.41 aes256gcmv1 0.41 0.42 0.42 T:aes128otrcv3 0.44? 0.46? 0.49? T:morus1280128v2 0.45? 0.47? 0.54? T:oceankeyakv2 0.46 0.47 0.49 T:morus1280128v1 0.47 0.48 0.49 T:morus1280256v1 0.45 0.48 0.50 T:morus1280256v2 0.49 0.50 0.53 T:colm0v1 0.53 0.53 0.54 T:deoxysi128v141 0.48? 0.54? 0.57? T:deoxysii128v141 0.54 0.55 0.56 T:aes256otrcv3 0.57 0.60 0.61 T:deoxysi256v141 0.53? 0.61? 0.62? T:deoxysii256v141 0.56? 0.62? 0.63? T:deoxysneq128128v1 0.57 0.62 0.63 T:deoxyseq128128v1 0.59 0.63 0.64 T:lunarkeyakv2 0.69 0.70 0.72 T:deoxyseq256128v1 0.69 0.71 0.72 T:deoxysneq256128v1 0.69 0.72 0.73 T:morus640128v2 0.71 0.72 0.73 T:morus640128v1 0.99 1.00 1.01 T:aes128otrpv3 1.09 1.10 1.13 T:seakeyakv2 1.19 1.19 1.20 T:aes256otrpv3 2.05 2.09 2.13 T:norx6441v2 2.09 2.11 2.12 T:norx6441v3 2.14 2.16 2.16 T:norx6444v3 2.45 2.46 2.52 T:norx6441v1 2.48 2.56 2.56 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128n12t8silcv2 2.56 2.56 2.58 T:norx6444v2 2.48 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.58 T:aes128n8t8clocv2 2.56 2.57 2.58 T:aes128otrsv3 2.55 2.57 2.57 T:aes128n12t8clocv3 2.53 2.57 2.58 T:aes128n12t8clocv2 2.60 2.61 2.63 T:lakekeyakv2 3.01 3.02 3.04 T:norx6461v3 2.96 3.03 3.08 T:lakekeyakv1 3.03 3.15 3.17 T:norx6461v2 3.52 3.52 3.52 T:norx3241v3 3.52 3.52 3.52 T:norx3241v2 3.56 3.56 3.56 T:aes256otrsv3 3.56 3.57 3.59 T:norx6444v1 3.64 3.79 3.80 T:norx6461v1 3.90 3.93 4.02 T:ketjemajorv2 4.22 4.23 4.23 T:norx3241v1 4.99 5.00 5.02 T:acorn128v2 4.98 5.00 5.03 T:acorn128v3 5.11 5.11 5.18 T:riverkeyakv2 5.18 5.19 5.19 T:ascon128av11 5.19 5.19 5.19 T:ascon96v1 5.24 5.26 5.26 ascon128av12 5.27 5.27 5.27 T:norx3261v2 5.27 5.27 5.27 T:norx3261v3 5.24 5.28 5.28 T:aesjambuv1 5.91 5.98 6.02 T:ketjeminorv2 7.52 7.52 7.53 T:norx3261v1 7.62 7.62 7.62 ascon128v12 7.73 7.75 7.76 T:ascon128v11 7.85 7.88 7.88 T:ascon128v1 11.61 11.62 11.65 T:aes128n12clocv1 11.59 11.64 11.66 T:aes128n8clocv1 11.70 11.71 11.73 T:aes128otrpv1 11.69 11.72 11.75 T:aes128otrpv2 12.07 12.09 12.12 T:aes128otrsv1 12.06 12.09 12.12 T:aes128otrsv2 15.65 15.69 15.80 T:aes256otrpv2 15.66 15.95 15.99 T:aes256otrpv1 16.05 16.06 16.09 T:aes256otrsv1 16.06 16.10 16.13 T:aes256otrsv2 18.83 18.89 18.96 T:twine80n6t4clocv3 19.62 20.02 20.03 T:twine80n6t4clocv2 18.98 20.10 20.20 T:proest256otrv1 20.32 20.39 20.72 T:aeadaes128ocbtaglen96v1 20.47 20.48 20.58 T:aeadaes128ocbtaglen64v1 21.14 21.22 21.29 T:ketjesrv2 22.23 22.32 22.40 T:ketjesrv1 22.66 22.77 22.79 T:colm127v1 24.37 24.49 24.51 T:aeadaes192ocbtaglen64v1 24.29 24.50 24.63 T:aeadaes192ocbtaglen96v1 27.98 28.08 28.40 T:aeadaes256ocbtaglen64v1 28.13 28.19 28.25 T:aeadaes256ocbtaglen96v1 39.54 39.58 39.69 T:ketjejrv1 42.00 42.07 42.36 T:proest128otrv1 45.86 46.08 46.97 T:aezv1 63.89 63.95 64.31 T:deoxysneq128128v13 63.54 64.05 64.09 T:deoxyseq128128v13 65.20 65.55 66.16 T:ketjejrv2 66.78 66.84 66.87 T:present80n6t4silcv3 96.64 103.05 103.09 T:led80n6t4silcv3 105.93 106.04 106.16 T:deoxysneq256128v13 106.00 106.06 106.24 T:deoxyseq256128v13 499.74? 515.56? 569.76? T:acorn128 1511.96 1513.32 1513.99 T:led80n6t4silcv2 1513.06 1514.56 1516.19 T:led80n6silcv1 1801.26 1804.14 1812.02 T:present80n6t4silcv2 1807.02 1808.03 1808.42 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv2 0.09? 0.10? 0.11? T:tiaoxinv1 0.13 0.13 0.14 T:aezv5 0.13? 0.14? 0.15? T:aezv4 0.13? 0.14? 0.15? T:aezv3 0.15 0.16 0.16 T:aegis128l 0.15? 0.16? 0.17? aegis128l 0.17 0.17 0.18 T:aeadaes128ocbtaglen128v1 0.24 0.24 0.25 T:aeadaes256ocbtaglen128v1 0.30 0.31 0.32 T:aegis128 0.31 0.31 0.32 aegis256 0.37? 0.37? 0.64? T:aeadaes192ocbtaglen128v1 0.39 0.40 0.41 T:aes128gcmv1 0.39 0.40 0.41 aes256gcmv1 0.41 0.42 0.42 T:aes128otrcv3 0.45 0.46 0.50 T:morus1280256v1 0.44? 0.48? 0.49? T:morus1280128v2 0.46 0.48 0.50 T:morus1280128v1 0.46 0.49 0.50 T:morus1280256v2 0.47 0.49 0.51 T:colm0v1 0.45? 0.49? 0.53? T:oceankeyakv2 0.53 0.53 0.54 T:deoxysi128v141 0.53 0.54 0.55 T:deoxysii128v141 0.55 0.55 0.56 T:aes256otrcv3 0.60 0.60 0.61 T:deoxysi256v141 0.61 0.61 0.62 T:deoxysii256v141 0.61 0.61 0.63 T:deoxyseq128128v1 0.61 0.62 0.65 T:deoxysneq128128v1 0.59 0.62 0.64 T:lunarkeyakv2 0.69 0.70 0.71 T:deoxysneq256128v1 0.69 0.71 0.71 T:deoxyseq256128v1 0.70 0.72 0.73 T:morus640128v1 0.69 0.73 0.73 T:morus640128v2 0.95? 1.00? 1.06? T:aes128otrpv3 1.09 1.10 1.15 T:seakeyakv2 1.19 1.19 1.24 T:aes256otrpv3 2.04 2.05 2.12 T:norx6441v2 2.03 2.11 2.12 T:norx6441v3 2.15 2.16 2.16 T:norx6444v3 2.45 2.51 2.53 T:norx6441v1 2.47 2.52 2.56 T:aes128n12t8clocv2 2.47 2.56 2.65 T:aes128n8t8silcv2 2.51 2.56 2.62 T:norx6444v2 2.47 2.56 2.56 T:aes128n8t8clocv2 2.47 2.56 2.66 T:aes128n12t8clocv3 2.48 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128otrsv3 2.48 2.57 2.65 T:aes128n12t8silcv3 2.60 2.61 2.63 T:lakekeyakv2 2.94 2.98 3.07 T:lakekeyakv1 3.01 3.03 3.05 T:norx6461v3 3.02 3.04 3.15 T:norx6461v2 3.52 3.52 3.52 T:norx3241v2 3.52 3.52 3.52 T:norx3241v3 3.54 3.56 3.58 T:norx6444v1 3.56 3.56 3.56 T:aes256otrsv3 3.63 3.78 3.80 T:norx6461v1 3.91 3.98 4.03 T:ketjemajorv2 4.22 4.22 4.23 T:norx3241v1 5.00 5.00 5.00 T:acorn128v3 5.00 5.00 5.00 T:acorn128v2 5.13 5.17 5.18 T:riverkeyakv2 5.16 5.19 5.19 T:ascon128av11 5.17 5.19 5.19 T:ascon96v1 5.25 5.25 5.25 ascon128av12 5.27 5.27 5.27 T:norx3261v2 5.27 5.27 5.27 T:norx3261v3 5.25 5.27 5.28 T:aesjambuv1 5.81 5.89 5.96 T:ketjeminorv2 7.52 7.52 7.53 T:norx3261v1 7.62 7.62 7.63 ascon128v12 7.74 7.75 7.77 T:ascon128v11 7.87 7.88 7.89 T:ascon128v1 11.59 11.63 11.65 T:aes128n8clocv1 11.62 11.65 11.67 T:aes128n12clocv1 11.68 11.71 11.74 T:aes128otrpv2 11.68 11.72 11.74 T:aes128otrpv1 12.05 12.07 12.10 T:aes128otrsv2 12.04 12.08 12.10 T:aes128otrsv1 15.67 15.71 15.81 T:aes256otrpv2 15.65 15.97 16.02 T:aes256otrpv1 16.01 16.04 16.09 T:aes256otrsv1 16.03 16.08 16.12 T:aes256otrsv2 18.82 18.88 18.93 T:twine80n6t4clocv3 19.60 20.01 20.04 T:twine80n6t4clocv2 19.05 20.15 20.33 T:proest256otrv1 20.37 20.48 20.51 T:aeadaes128ocbtaglen64v1 20.33 20.50 20.65 T:aeadaes128ocbtaglen96v1 21.12 21.19 21.29 T:ketjesrv2 22.20 22.30 22.46 T:ketjesrv1 22.64 22.74 22.82 T:colm127v1 24.30 24.47 24.62 T:aeadaes192ocbtaglen96v1 24.31 24.76 24.80 T:aeadaes192ocbtaglen64v1 28.14 28.26 28.38 T:aeadaes256ocbtaglen96v1 28.20 28.32 28.41 T:aeadaes256ocbtaglen64v1 39.52 39.55 39.62 T:ketjejrv1 42.01 42.08 42.40 T:proest128otrv1 45.48 45.91 46.94 T:aezv1 63.66 63.99 64.13 T:deoxyseq128128v13 63.98 64.23 64.34 T:deoxysneq128128v13 65.03 65.16 65.74 T:ketjejrv2 66.73 66.84 66.91 T:present80n6t4silcv3 96.57 96.99 97.08 T:led80n6t4silcv3 105.91 105.96 106.23 T:deoxyseq256128v13 105.85 106.09 106.65 T:deoxysneq256128v13 445.74? 581.44? 726.42? T:acorn128 1509.50 1511.92 1515.22 T:led80n6t4silcv2 1507.84 1512.72 1513.17 T:led80n6silcv1 1804.64 1806.03 1812.17 T:present80n6t4silcv2 1807.15 1808.95 1812.08 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.17 0.17 0.18 T:tiaoxinv2 0.17 0.17 0.18 T:tiaoxinv1 0.20 0.20 0.21 T:aegis128l 0.20 0.21 0.21 aegis128l 0.27? 0.28? 0.33? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.31 T:aezv5 0.30 0.31 0.32 T:aezv4 0.34 0.34 0.34 T:aegis128 0.35 0.36 0.37 aegis256 0.37? 0.38? 0.53? T:aeadaes256ocbtaglen128v1 0.49? 0.50? 0.60? T:aeadaes192ocbtaglen128v1 0.53 0.54 0.54 T:aes128otrcv3 0.57 0.57 0.58 aes256gcmv1 0.59 0.59 0.60 T:morus1280256v1 0.60 0.60 0.61 T:morus1280128v1 0.59 0.60 0.62 T:morus1280256v2 0.57 0.60 0.61 T:morus1280128v2 0.67 0.67 0.70 T:deoxysi128v141 0.68 0.68 0.70 T:aes128gcmv1 0.71 0.72 0.72 T:aes256otrcv3 0.73 0.74 0.75 T:deoxysneq128128v1 0.76 0.77 0.78 T:deoxysi256v141 0.81 0.81 0.82 T:morus640128v1 0.83 0.83 0.85 T:deoxysneq256128v1 0.82 0.83 0.84 T:morus640128v2 0.92 0.92 0.93 T:colm0v1 0.98 0.99 1.01 T:deoxysii128v141 1.07? 1.08? 1.21? T:deoxyseq128128v1 1.08 1.08 1.11 T:aes128otrpv3 1.14 1.14 1.17 T:deoxysii256v141 1.25 1.26 1.32 T:deoxyseq256128v1 1.38 1.38 1.40 T:aes256otrpv3 1.38 1.39 1.40 T:oceankeyakv2 1.53 1.54 1.54 T:aes128otrsv3 1.73 1.74 1.76 T:seakeyakv2 2.09 2.09 2.10 T:norx6444v3 2.13 2.14 2.14 T:aes256otrsv3 2.46 2.46 2.48 T:lunarkeyakv2 2.46 2.47 2.47 T:norx6441v2 2.47 2.48 2.49 T:norx6441v3 2.61 2.61 2.61 T:aes128n8t8clocv2 2.61 2.61 2.61 T:aes128n8t8silcv2 2.61 2.61 2.61 T:aes128n12t8clocv3 2.61 2.61 2.61 T:aes128n12t8clocv2 2.61 2.61 2.61 T:aes128n12t8silcv2 2.61 2.61 2.61 T:aes128n12t8silcv3 2.86 2.86 2.87 T:norx6441v1 3.10 3.10 3.10 T:lakekeyakv2 3.61 3.63 3.67 T:lakekeyakv1 3.65 3.70 3.71 T:norx6461v2 3.64 3.70 3.72 T:norx6461v3 3.79 3.79 3.79 T:norx3241v2 3.79 3.79 3.80 T:norx3241v3 4.23 4.24 4.29 T:norx6461v1 4.31 4.32 4.33 T:norx6444v2 4.45 4.45 4.46 T:norx3241v1 5.05 5.06 5.08 T:norx6444v1 5.31 5.33 5.33 T:aesjambuv1 5.41 5.42 5.43 ascon128av12 5.47 5.47 5.48 T:ascon128av11 5.50 5.50 5.51 T:ascon96v1 5.68 5.68 5.68 T:norx3261v2 5.68 5.68 5.68 T:norx3261v3 5.67 5.68 5.69 T:riverkeyakv2 5.76 5.80 5.88 T:ketjemajorv2 5.81 5.81 5.84 T:acorn128v3 5.99 6.00 6.02 T:acorn128v2 7.10 7.13 7.14 T:ketjeminorv2 7.74 7.75 7.75 ascon128v12 7.92 7.92 7.92 T:norx3261v1 8.18 8.18 8.19 T:ascon128v1 8.18 8.19 8.20 T:ascon128v11 12.67 12.68 12.71 T:aes128otrpv2 12.67 12.70 12.71 T:aes128otrpv1 12.81 12.83 12.86 T:aes128otrsv2 12.85 12.86 12.88 T:aes128otrsv1 16.73 16.74 16.90 T:aes256otrpv1 16.73 16.77 16.80 T:aes256otrpv2 16.88 16.89 16.91 T:aes256otrsv1 16.90 16.92 16.95 T:aes128n8clocv1 16.93 16.95 16.97 T:aes128n12clocv1 16.96 16.98 17.01 T:aes256otrsv2 19.31 19.40 19.43 T:twine80n6t4clocv3 20.23 20.53 20.55 T:twine80n6t4clocv2 20.32 20.77 20.80 T:proest256otrv1 21.41 21.44 21.46 T:aeadaes128ocbtaglen96v1 21.47 21.52 21.64 T:aeadaes128ocbtaglen64v1 25.14 25.19 25.34 T:ketjesrv1 25.32 25.35 25.43 T:aeadaes192ocbtaglen64v1 25.33 25.47 25.49 T:aeadaes192ocbtaglen96v1 26.52 26.53 26.59 T:ketjesrv2 29.23 29.25 29.34 T:aeadaes256ocbtaglen96v1 29.33 29.39 29.49 T:aeadaes256ocbtaglen64v1 35.25 35.48 35.83 T:colm127v1 41.76 41.78 41.80 T:ketjejrv1 44.94 44.97 45.39 T:proest128otrv1 64.69 64.86 65.01 T:deoxysneq128128v13 68.13 68.22 68.34 T:present80n6t4silcv3 68.13 68.31 68.43 T:ketjejrv2 92.22 92.80 93.38 T:aezv1 97.74 98.08 98.12 T:deoxyseq128128v13 97.89 99.22 102.11 T:led80n6t4silcv3 106.94 107.01 107.72 T:deoxysneq256128v13 161.02 161.81 162.98 T:deoxyseq256128v13 551.30? 556.06? 650.84? T:acorn128 2282.40 2282.76 2284.07 T:led80n6t4silcv2 2280.13 2283.13 2293.96 T:led80n6silcv1 2721.58 2723.09 2725.79 T:present80n6t4silcv2 2724.69 2726.88 2727.12 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.20 0.21 0.21 T:aegis128l 0.21 0.21 0.21 aegis128l 0.24 0.24 0.24 T:tiaoxinv1 0.24 0.24 0.25 T:tiaoxinv2 0.28 0.28 0.31 T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.31 T:aezv5 0.30 0.30 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.35 0.36 0.37 aegis256 0.38? 0.39? 0.55? T:aeadaes256ocbtaglen128v1 0.48? 0.48? 0.64? T:aeadaes192ocbtaglen128v1 0.52 0.53 0.53 aes256gcmv1 0.55 0.55 0.56 T:aes128otrcv3 0.60 0.61 0.62 T:morus1280128v1 0.60 0.61 0.62 T:morus1280256v1 0.61 0.62 0.62 T:morus1280128v2 0.61 0.62 0.63 T:morus1280256v2 0.67 0.67 0.68 T:aes128gcmv1 0.73 0.73 0.74 T:aes256otrcv3 0.74 0.74 0.77 T:deoxysi128v141 0.81 0.82 0.85 T:deoxysneq128128v1 0.82 0.83 0.84 T:morus640128v1 0.83 0.84 0.85 T:morus640128v2 0.85 0.86 0.89 T:deoxysi256v141 0.86 0.86 0.87 T:deoxysneq256128v1 0.93 0.94 0.94 T:colm0v1 1.01 1.02 1.02 T:deoxysii128v141 1.12 1.13 1.15 T:aes128otrpv3 1.17 1.19 1.24 T:deoxyseq128128v1 1.19 1.19 1.26 T:deoxysii256v141 1.26 1.29 1.34 T:deoxyseq256128v1 1.40 1.42 1.43 T:oceankeyakv2 1.43 1.43 1.44 T:aes256otrpv3 1.54 1.55 1.55 T:aes128otrsv3 1.76 1.76 1.78 T:seakeyakv2 2.09 2.10 2.10 T:norx6444v3 2.14 2.14 2.14 T:aes256otrsv3 2.45 2.45 2.46 T:norx6441v3 2.45 2.46 2.46 T:norx6441v2 2.54 2.56 2.60 T:lunarkeyakv2 2.58 2.58 2.59 T:aes128n12t8clocv2 2.58 2.58 2.59 T:aes128n12t8clocv3 2.58 2.58 2.59 T:aes128n8t8clocv2 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.60 T:aes128n12t8silcv3 2.59 2.59 2.60 T:aes128n12t8silcv2 2.86 2.87 2.87 T:norx6441v1 3.11 3.13 3.20 T:lakekeyakv2 3.66 3.67 3.71 T:norx6461v3 3.69 3.70 3.74 T:lakekeyakv1 3.70 3.71 3.72 T:norx6461v2 3.83 3.84 3.84 T:norx3241v3 3.84 3.84 3.84 T:norx3241v2 4.24 4.27 4.31 T:norx6444v2 4.28 4.29 4.31 T:norx6461v1 4.53 4.53 4.54 T:norx3241v1 5.13 5.14 5.15 T:norx6444v1 5.34 5.34 5.35 T:ascon128av11 5.41 5.41 5.42 ascon128av12 5.47 5.47 5.47 T:ascon96v1 5.54 5.57 5.60 T:aesjambuv1 5.71 5.72 5.73 T:norx3261v3 5.70 5.72 5.77 T:ketjemajorv2 5.72 5.72 5.72 T:norx3261v2 5.81 5.82 5.87 T:riverkeyakv2 5.94 5.95 5.97 T:acorn128v3 5.97 5.97 5.99 T:acorn128v2 7.38 7.40 7.45 T:ketjeminorv2 7.74 7.74 7.75 ascon128v12 7.85 7.85 7.87 T:norx3261v1 7.93 7.93 7.94 T:ascon128v11 7.99 7.99 8.00 T:ascon128v1 12.86 12.89 12.92 T:aes128otrpv2 12.88 12.89 12.92 T:aes128otrpv1 13.00 13.05 13.07 T:aes128otrsv2 13.05 13.08 13.11 T:aes128otrsv1 16.91 16.93 17.08 T:aes256otrpv1 16.91 16.94 16.98 T:aes256otrpv2 17.06 17.10 17.13 T:aes256otrsv1 17.26 17.26 17.28 T:aes256otrsv2 17.43 17.45 17.47 T:aes128n8clocv1 17.48 17.50 17.52 T:aes128n12clocv1 19.23 19.32 19.34 T:twine80n6t4clocv3 19.95 19.96 20.34 T:twine80n6t4clocv2 20.69 21.00 21.19 T:proest256otrv1 22.80 22.84 22.91 T:ketjesrv2 25.41 25.44 25.46 T:aeadaes128ocbtaglen96v1 25.46 25.51 25.57 T:aeadaes128ocbtaglen64v1 25.77 25.82 25.84 T:ketjesrv1 30.36 30.37 30.40 T:aeadaes192ocbtaglen64v1 30.34 30.40 30.48 T:aeadaes192ocbtaglen96v1 35.20 35.25 35.39 T:aeadaes256ocbtaglen64v1 35.23 35.27 35.38 T:aeadaes256ocbtaglen96v1 42.43 42.45 42.48 T:ketjejrv1 43.37 43.40 43.55 T:colm127v1 44.21 44.26 44.46 T:proest128otrv1 67.75 67.86 68.06 T:ketjejrv2 68.15 68.23 68.28 T:present80n6t4silcv3 75.60 75.64 76.75 T:deoxysneq128128v13 92.31 92.51 93.74 T:aezv1 97.19 97.29 97.53 T:deoxyseq128128v13 102.87 102.87 102.88 T:led80n6t4silcv3 118.97 119.20 119.29 T:deoxysneq256128v13 161.22 161.73 162.82 T:deoxyseq256128v13 585.56 607.69 642.94 T:acorn128 2276.14 2279.98 2283.46 T:led80n6t4silcv2 2283.89 2284.85 2288.69 T:led80n6silcv1 2725.95 2726.75 2727.87 T:present80n6t4silcv2 2727.26 2728.14 2728.36 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17 0.17 0.18 T:aezv3 0.18 0.18 0.18 T:aezv5 0.18 0.18 0.18 T:aezv4 0.20 0.20 0.21 T:aegis128l 0.23 0.23 0.25 aegis128l 0.24 0.24 0.25 T:tiaoxinv2 0.24 0.24 0.25 T:tiaoxinv1 0.28 0.28 0.29 T:aeadaes128ocbtaglen128v1 0.34 0.34 0.34 T:aegis128 0.36? 0.37? 0.40? aegis256 0.38 0.38 0.38 T:aeadaes256ocbtaglen128v1 0.48 0.48 0.48 T:aeadaes192ocbtaglen128v1 0.52 0.53 0.53 aes256gcmv1 0.55 0.55 0.56 T:aes128otrcv3 0.59 0.60 0.61 T:morus1280128v2 0.60 0.61 0.62 T:morus1280128v1 0.60 0.61 0.62 T:morus1280256v1 0.61 0.62 0.63 T:morus1280256v2 0.67 0.67 0.67 T:aes128gcmv1 0.73 0.73 0.74 T:aes256otrcv3 0.74 0.74 0.74 T:deoxysi128v141 0.80 0.81 0.82 T:deoxysneq128128v1 0.83 0.83 0.84 T:morus640128v1 0.83 0.84 0.85 T:morus640128v2 0.85 0.86 0.86 T:deoxysi256v141 0.85 0.86 0.87 T:deoxysneq256128v1 0.93 0.94 0.94 T:colm0v1 1.01 1.01 1.02 T:deoxysii128v141 1.11 1.13 1.14 T:aes128otrpv3 1.17 1.18 1.25 T:deoxyseq128128v1 1.19 1.19 1.22 T:deoxysii256v141 1.27 1.28 1.29 T:deoxyseq256128v1 1.42 1.42 1.43 T:oceankeyakv2 1.41 1.43 1.44 T:aes256otrpv3 1.54 1.55 1.55 T:aes128otrsv3 1.76 1.77 1.78 T:seakeyakv2 2.09 2.10 2.10 T:norx6444v3 2.14 2.14 2.15 T:aes256otrsv3 2.46 2.46 2.49 T:norx6441v2 2.47 2.47 2.48 T:norx6441v3 2.54 2.56 2.56 T:lunarkeyakv2 2.58 2.58 2.65 T:aes128n12t8silcv3 2.58 2.58 2.65 T:aes128n8t8silcv2 2.58 2.58 2.58 T:aes128n12t8silcv2 2.58 2.58 2.63 T:aes128n12t8clocv2 2.58 2.58 2.63 T:aes128n8t8clocv2 2.58 2.58 2.63 T:aes128n12t8clocv3 2.86 2.87 2.88 T:norx6441v1 3.12 3.13 3.21 T:lakekeyakv2 3.66 3.67 3.71 T:norx6461v2 3.67 3.71 3.72 T:norx6461v3 3.74 3.75 3.77 T:lakekeyakv1 3.84 3.84 3.84 T:norx3241v2 3.83 3.84 3.85 T:norx3241v3 4.26 4.26 4.33 T:norx6444v2 4.31 4.31 4.32 T:norx6461v1 4.52 4.53 4.54 T:norx3241v1 5.14 5.14 5.15 T:norx6444v1 5.34 5.34 5.34 T:ascon128av11 5.41 5.41 5.41 ascon128av12 5.46 5.47 5.47 T:ascon96v1 5.54 5.55 5.60 T:aesjambuv1 5.70 5.72 5.76 T:ketjemajorv2 5.72 5.72 5.74 T:norx3261v3 5.72 5.72 5.72 T:norx3261v2 5.80 5.82 5.82 T:riverkeyakv2 5.94 5.94 5.94 T:acorn128v3 5.97 5.97 5.97 T:acorn128v2 7.39 7.43 7.47 T:ketjeminorv2 7.74 7.74 7.74 ascon128v12 7.84 7.85 7.85 T:norx3261v1 7.93 7.93 7.94 T:ascon128v11 7.99 7.99 8.00 T:ascon128v1 12.87 12.88 12.90 T:aes128otrpv2 12.87 12.89 12.91 T:aes128otrpv1 13.03 13.04 13.06 T:aes128otrsv2 13.05 13.07 13.19 T:aes128otrsv1 16.89 16.92 17.11 T:aes256otrpv1 16.91 16.96 16.97 T:aes256otrpv2 17.08 17.12 17.13 T:aes256otrsv1 17.26 17.28 17.31 T:aes256otrsv2 17.42 17.44 17.47 T:aes128n8clocv1 17.46 17.51 17.53 T:aes128n12clocv1 19.24 19.27 19.33 T:twine80n6t4clocv3 19.99 20.34 20.37 T:twine80n6t4clocv2 20.60 20.97 21.25 T:proest256otrv1 22.83 22.87 22.91 T:ketjesrv2 25.43 25.49 25.62 T:aeadaes128ocbtaglen96v1 25.50 25.54 25.55 T:aeadaes128ocbtaglen64v1 25.77 25.82 25.87 T:ketjesrv1 30.27 30.28 30.39 T:aeadaes192ocbtaglen96v1 30.33 30.33 30.34 T:aeadaes192ocbtaglen64v1 35.18 35.21 35.31 T:aeadaes256ocbtaglen96v1 35.30 35.31 35.42 T:aeadaes256ocbtaglen64v1 42.44 42.45 42.53 T:ketjejrv1 43.47 43.55 43.57 T:colm127v1 44.14 44.18 44.42 T:proest128otrv1 67.63 67.71 67.80 T:ketjejrv2 68.15 68.15 68.19 T:present80n6t4silcv3 75.53 75.68 76.63 T:deoxysneq128128v13 92.21 92.55 93.60 T:aezv1 97.23 97.82 98.19 T:deoxyseq128128v13 98.12 102.87 105.42 T:led80n6t4silcv3 118.86 118.93 119.00 T:deoxysneq256128v13 161.22 161.62 162.96 T:deoxyseq256128v13 556.32? 598.52? 668.28? T:acorn128 2280.50 2282.49 2290.89 T:led80n6silcv1 2281.30 2283.06 2283.68 T:led80n6t4silcv2 2722.03 2724.07 2725.51 T:present80n6t4silcv2 2724.59 2730.25 2732.25 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.90? 0.91? 1.12? aegis128l 0.90 0.93 0.95 T:aegis128l 0.81? 0.94? 1.00? T:aegis128 1.12? 1.14? 1.36? T:tiaoxinv1 1.14 1.17 1.19 aegis256 1.20? 1.20? 1.37? T:tiaoxinv2 1.38 1.38 1.41 T:aezv5 1.38 1.41 1.48 T:aezv3 1.48 1.49 1.49 T:aezv4 2.35 2.38 2.41 T:colm0v1 2.45 2.46 2.48 T:aes128otrsv3 2.63 2.69 2.73 T:morus640128v1 2.79 2.86 2.89 T:morus640128v2 2.80? 2.87? 3.88? T:aeadaes128ocbtaglen128v1 2.99 2.99 3.02 T:aes128n8t8silcv2 3.01 3.02 3.04 T:aes128n12t8silcv2 3.01 3.04 3.05 T:aes128n12t8silcv3 3.01 3.04 3.05 T:aes128n8t8clocv2 3.03 3.04 3.05 T:aes128n12t8clocv2 3.03 3.04 3.05 T:aes128n12t8clocv3 3.02 3.06 3.17 T:morus1280128v1 2.77? 3.11? 3.18? T:aes128otrcv3 3.16 3.20 3.27 T:morus1280256v1 3.23 3.26 3.31 T:deoxysneq128128v1 3.27 3.30 3.40 T:morus1280128v2 3.30 3.34 3.38 T:morus1280256v2 3.36 3.38 3.42 T:aes128otrpv3 3.38 3.46 3.52 T:deoxysi128v141 3.47 3.48 3.49 T:aes256otrsv3 3.49? 3.56? 7.40? T:aeadaes256ocbtaglen128v1 3.67 3.70 3.74 T:deoxysneq256128v1 3.95 4.00 4.04 T:aes256otrcv3 4.05 4.08 4.13 T:deoxysi256v141 4.09 4.12 4.17 T:aes256otrpv3 4.12? 4.42? 8.32? T:aeadaes192ocbtaglen128v1 4.67 4.68 4.79 aes256gcmv1 4.80 4.86 4.91 T:aes128gcmv1 4.87 4.91 4.95 T:deoxyseq128128v1 6.02 6.03 6.11 T:deoxyseq256128v1 6.17 6.23 6.30 T:aesjambuv1 6.20 6.26 6.34 T:deoxysii128v141 6.50 6.60 6.67 T:deoxysii256v141 7.97 8.01 8.12 T:norx6441v2 7.93 8.02 8.05 T:norx6441v1 8.21 8.26 8.29 T:norx6441v3 8.35 8.35 8.55 T:ascon128av11 8.38 8.38 8.54 T:ascon96v1 8.40 8.40 9.09 ascon128av12 9.15 9.16 9.17 T:norx3241v1 9.31 9.35 9.55 T:norx3241v2 9.37 9.38 9.41 T:norx3241v3 10.52 10.60 10.66 ascon128v12 10.92 10.93 10.94 T:ascon128v1 10.92 11.08 11.09 T:ascon128v11 11.51 11.54 12.08 T:lakekeyakv1 11.91 12.03 12.08 T:norx6461v1 12.15 12.24 12.28 T:norx6461v2 12.18 12.26 12.32 T:norx6461v3 13.48 13.50 13.58 T:lakekeyakv2 13.29 13.64 13.70 T:riverkeyakv2 13.84 13.90 14.00 T:norx6444v3 13.93 13.95 13.96 T:norx3261v2 13.96 13.98 13.99 T:norx3261v3 15.96 16.00 16.02 T:norx3261v1 16.46 16.55 17.09 T:seakeyakv2 16.99 17.05 17.35 T:oceankeyakv2 19.89 20.11 20.31 T:aes128otrsv1 19.95 20.20 20.35 T:aes128otrsv2 20.38 20.44 20.69 T:aes128otrpv2 20.46 20.62 20.73 T:aes128otrpv1 20.92 21.00 21.15 T:aes128n8clocv1 21.17 21.38 21.56 T:aes128n12clocv1 24.35 24.35 24.79 T:acorn128v3 25.44 25.44 25.72 T:acorn128v2 25.64 25.74 25.80 T:twine80n6t4clocv3 25.44 25.77 25.94 T:twine80n6t4clocv2 25.92 26.00 26.21 T:aes256otrsv1 26.37 26.50 26.67 T:aes256otrpv1 26.40 26.52 26.66 T:aes256otrpv2 26.66 26.78 26.98 T:aes256otrsv2 26.95 27.08 27.87 T:ketjeminorv2 31.98 32.18 32.38 T:norx6444v2 34.70 34.77 35.41 T:aeadaes128ocbtaglen96v1 34.75 34.80 34.96 T:aeadaes128ocbtaglen64v1 34.77 34.81 34.90 T:ketjemajorv2 36.49 36.59 37.05 T:norx6444v1 38.19 38.30 38.73 T:lunarkeyakv2 39.97 40.15 40.38 T:aeadaes192ocbtaglen96v1 40.00 40.21 40.49 T:aeadaes192ocbtaglen64v1 41.45 41.88 42.29 T:ketjesrv1 46.02 46.18 46.53 T:ketjesrv2 46.62 46.95 47.05 T:aeadaes256ocbtaglen96v1 46.93 47.12 47.33 T:aeadaes256ocbtaglen64v1 51.72 51.94 52.37 T:colm127v1 54.26 54.47 54.93 T:ketjejrv1 57.62 58.06 58.14 T:proest256otrv1 72.80 73.04 73.36 T:deoxysneq128128v13 83.47 83.63 83.70 T:present80n6t4silcv3 87.02 87.16 87.66 T:proest128otrv1 90.73 91.20 91.61 T:ketjejrv2 109.15 109.27 109.76 T:aezv1 116.54 116.78 122.12 T:led80n6t4silcv3 119.88 120.29 120.49 T:deoxysneq256128v13 121.23 121.51 122.08 T:deoxyseq128128v13 200.71 201.25 202.40 T:deoxyseq256128v13 1903.45? 2043.58? 2124.92? T:acorn128 2553.05 2556.42 2558.79 T:led80n6t4silcv2 2556.18 2556.83 2558.69 T:led80n6silcv1 3048.74 3050.29 3051.59 T:present80n6t4silcv2 3051.71 3052.56 3053.11 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.88? 0.91? 1.04? T:aegis128 0.89? 0.91? 1.05? T:aegis128l 0.98? 1.04? 1.27? aegis128l 1.24 1.25 1.31 T:tiaoxinv2 1.23 1.26 1.27 T:tiaoxinv1 1.26 1.27 1.27 aegis256 1.37 1.40 1.41 T:aezv5 1.37 1.41 1.44 T:aezv3 1.38 1.48 1.48 T:aezv4 2.59 2.64 2.69 T:aes128otrsv3 2.69 2.73 2.77 T:morus640128v1 2.74? 2.79? 3.55? T:aeadaes128ocbtaglen128v1 2.88 2.93 2.96 T:colm0v1 2.94 2.97 3.02 T:morus640128v2 3.05 3.08 3.11 T:aes128n8t8clocv2 3.09 3.13 3.16 T:aes128n12t8clocv3 3.12 3.13 3.14 T:aes128n12t8clocv2 3.12 3.13 3.29 T:aes128n12t8silcv2 3.12 3.16 3.24 T:aes128n12t8silcv3 3.11 3.21 3.37 T:aes128n8t8silcv2 3.24 3.31 3.37 T:morus1280256v1 3.26 3.31 3.35 T:aes128otrcv3 3.27 3.36 3.42 T:morus1280128v1 3.42? 3.55? 7.73? T:aeadaes256ocbtaglen128v1 3.48 3.55 3.60 T:morus1280256v2 3.59 3.64 3.73 T:morus1280128v2 3.64 3.66 3.66 T:aes256otrsv3 4.21 4.21 4.27 T:aes256otrcv3 4.12? 4.27? 5.83? T:aeadaes192ocbtaglen128v1 4.23 4.29 4.39 T:aes128otrpv3 4.67 4.71 4.74 T:deoxysneq128128v1 4.69 4.74 4.88 T:deoxysneq256128v1 5.01 5.02 5.05 T:aes256otrpv3 4.98 5.03 5.06 aes256gcmv1 5.07 5.09 5.10 T:aes128gcmv1 5.16 5.20 5.23 T:deoxysi128v141 6.02 6.05 6.08 T:deoxysi256v141 6.27 6.31 6.66 T:aesjambuv1 6.81 6.86 6.94 T:deoxysii128v141 6.93 7.03 7.08 T:deoxyseq128128v1 7.06 7.13 7.25 T:deoxyseq256128v1 7.32 7.39 7.41 T:deoxysii256v141 8.05 8.12 8.30 T:norx6441v1 8.07 8.12 8.20 T:norx6441v2 8.15 8.15 8.22 T:ascon128av11 8.29 8.29 8.45 T:ascon96v1 8.35 8.40 8.44 T:norx6441v3 8.36 8.59 8.95 ascon128av12 9.62 9.64 9.67 T:norx3241v1 9.68 9.73 9.77 T:norx3241v3 9.73 9.75 9.91 T:norx3241v2 10.45 10.55 10.66 ascon128v12 10.56 10.61 10.80 T:ascon128v11 10.65 10.65 10.93 T:ascon128v1 11.55 11.92 12.50 T:lakekeyakv1 12.22 12.26 12.32 T:norx6461v2 12.17 12.28 12.36 T:norx6461v3 12.25 12.34 12.39 T:norx6461v1 13.49 13.53 14.20 T:lakekeyakv2 13.45 13.79 14.11 T:riverkeyakv2 13.94 14.00 14.04 T:norx6444v3 14.30 14.32 14.34 T:norx3261v3 14.32 14.37 14.38 T:norx3261v2 16.18 16.21 16.22 T:norx3261v1 16.52 16.61 16.84 T:seakeyakv2 16.99 17.14 17.59 T:oceankeyakv2 20.14 20.27 20.51 T:aes128otrsv1 20.24 20.40 20.71 T:aes128otrsv2 20.75 20.90 21.05 T:aes128otrpv1 20.76 20.90 21.20 T:aes128otrpv2 21.45 21.77 22.06 T:aes128n8clocv1 21.64 21.78 21.96 T:aes128n12clocv1 24.65 24.65 25.10 T:acorn128v3 25.05 25.41 25.52 T:twine80n6t4clocv2 25.46 25.48 25.73 T:acorn128v2 25.62 25.72 25.75 T:twine80n6t4clocv3 26.26 26.37 26.65 T:aes256otrsv1 26.79 26.83 26.92 T:aes256otrpv1 26.76 26.84 26.85 T:aes256otrpv2 26.71 26.85 27.16 T:aes256otrsv2 27.21 27.38 28.12 T:ketjeminorv2 32.09 32.19 32.23 T:norx6444v2 34.94 34.97 34.98 T:ketjemajorv2 36.93 37.41 37.55 T:norx6444v1 38.41 38.50 38.89 T:lunarkeyakv2 41.96 42.11 42.52 T:aeadaes128ocbtaglen96v1 42.03 42.15 42.24 T:aeadaes128ocbtaglen64v1 42.23 42.51 42.64 T:ketjesrv1 42.91 43.21 43.48 T:ketjesrv2 48.78 48.82 48.98 T:aeadaes192ocbtaglen64v1 48.88 48.91 49.03 T:aeadaes192ocbtaglen96v1 54.70 55.07 55.51 T:ketjejrv1 57.34 57.41 57.71 T:aeadaes256ocbtaglen96v1 57.39 57.65 58.07 T:aeadaes256ocbtaglen64v1 59.38 59.95 60.12 T:proest256otrv1 59.94 60.05 60.15 T:colm127v1 83.47 83.58 83.67 T:present80n6t4silcv3 83.77 84.00 84.52 T:deoxysneq128128v13 85.92 86.21 86.55 T:proest128otrv1 90.30 90.76 91.02 T:ketjejrv2 113.46 114.28 114.67 T:aezv1 118.74 119.00 124.28 T:led80n6t4silcv3 120.70 120.88 121.40 T:deoxyseq128128v13 132.11 132.53 132.91 T:deoxysneq256128v13 200.91 201.39 201.89 T:deoxyseq256128v13 1918.98? 2086.53? 2242.20? T:acorn128 2552.93 2553.73 2554.13 T:led80n6t4silcv2 2557.04 2558.12 2564.78 T:led80n6silcv1 3049.55 3052.18 3053.84 T:present80n6t4silcv2 3051.77 3054.25 3055.52 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.89 0.89 0.91 T:aegis128l 0.87 0.90 0.91 T:aegis128 1.00? 1.01? 1.18? T:aezv5 1.05? 1.05? 1.23? T:aezv3 1.02? 1.06? 1.17? aegis128l 1.06? 1.08? 1.29? T:aezv4 1.27 1.28 1.31 aegis256 1.27 1.28 1.33 T:tiaoxinv2 1.27 1.29 1.31 T:tiaoxinv1 2.62 2.66 2.71 T:aes128otrsv3 2.67 2.72 2.76 T:morus640128v1 2.73 2.77 2.83 T:aeadaes128ocbtaglen128v1 2.87 2.90 2.95 T:aes128n8t8silcv2 2.88 2.91 2.94 T:aes128n12t8silcv3 2.90? 2.94? 4.73? T:aes128n12t8silcv2 2.94 2.95 2.99 T:morus640128v2 2.92? 3.01? 4.11? T:colm0v1 3.04 3.06 3.08 T:aes128n8t8clocv2 3.06 3.10 3.11 T:aes128n12t8clocv2 3.09 3.12 3.13 T:aes128n12t8clocv3 3.26 3.30 3.34 T:morus1280256v1 3.20 3.30 3.37 T:aes128otrcv3 3.26 3.34 3.37 T:morus1280128v1 3.49 3.54 3.56 T:aeadaes256ocbtaglen128v1 3.52 3.56 3.60 T:morus1280256v2 3.64 3.65 3.65 T:aes256otrsv3 3.59 3.66 3.72 T:morus1280128v2 4.21 4.23 4.27 T:aes256otrcv3 4.16? 4.28? 8.12? T:aeadaes192ocbtaglen128v1 4.29 4.31 4.43 T:aes128otrpv3 4.55 4.59 4.60 T:deoxysneq128128v1 4.57 4.66 4.73 T:deoxysneq256128v1 4.97 5.00 5.02 aes256gcmv1 5.02 5.07 5.08 T:aes256otrpv3 5.09 5.12 5.13 T:aes128gcmv1 5.17 5.23 5.71 T:deoxysi128v141 6.04 6.07 6.11 T:deoxysi256v141 6.27 6.38 6.69 T:aesjambuv1 6.80 6.84 6.88 T:deoxysii128v141 7.00 7.02 7.12 T:deoxyseq128128v1 7.11 7.13 7.19 T:deoxyseq256128v1 7.34 7.38 7.41 T:deoxysii256v141 8.05 8.12 8.29 T:norx6441v1 8.12 8.12 8.28 T:ascon128av11 8.16 8.22 8.27 T:norx6441v2 8.24 8.24 8.52 T:ascon96v1 8.34 8.36 8.36 ascon128av12 8.34 8.40 8.45 T:norx6441v3 9.61 9.63 9.65 T:norx3241v1 9.71 9.73 9.74 T:norx3241v3 9.73 9.77 9.94 T:norx3241v2 10.42 10.45 10.55 ascon128v12 10.53 10.58 10.77 T:ascon128v11 10.62 10.62 10.79 T:ascon128v1 11.55 11.95 12.34 T:lakekeyakv1 11.96 12.15 12.21 T:norx6461v1 12.24 12.29 12.37 T:norx6461v3 12.26 12.33 12.38 T:norx6461v2 13.57 13.60 14.26 T:lakekeyakv2 13.47 13.62 13.92 T:riverkeyakv2 13.89 13.95 14.02 T:norx6444v3 14.27 14.29 14.34 T:norx3261v3 14.31 14.34 14.37 T:norx3261v2 16.18 16.22 16.26 T:norx3261v1 16.54 16.64 17.00 T:seakeyakv2 16.97 17.10 17.80 T:oceankeyakv2 20.23 20.30 20.72 T:aes128otrsv2 20.22 20.30 20.49 T:aes128otrsv1 20.82 21.02 21.29 T:aes128otrpv2 20.78 21.11 21.48 T:aes128otrpv1 21.35 21.54 21.91 T:aes128n8clocv1 21.42 21.87 22.06 T:aes128n12clocv1 24.65 24.65 24.65 T:acorn128v3 25.09 25.41 25.57 T:twine80n6t4clocv2 25.43 25.46 25.48 T:acorn128v2 25.62 25.64 25.73 T:twine80n6t4clocv3 26.22 26.28 26.68 T:aes256otrsv1 26.81 26.94 27.14 T:aes256otrpv1 26.89 26.98 27.49 T:aes256otrpv2 26.91 27.11 27.61 T:aes256otrsv2 27.26 27.41 28.27 T:ketjeminorv2 32.16 32.38 32.45 T:norx6444v2 34.98 35.06 35.37 T:ketjemajorv2 36.98 37.52 37.68 T:norx6444v1 38.32 38.70 38.99 T:lunarkeyakv2 41.98 41.98 42.04 T:aeadaes128ocbtaglen64v1 41.78 42.16 42.41 T:aeadaes128ocbtaglen96v1 42.18 42.49 42.87 T:ketjesrv1 43.37 43.52 43.92 T:ketjesrv2 48.56 48.80 48.84 T:aeadaes192ocbtaglen96v1 48.78 48.92 49.00 T:aeadaes192ocbtaglen64v1 54.82 55.23 55.45 T:ketjejrv1 57.41 57.45 57.98 T:aeadaes256ocbtaglen64v1 57.32 57.49 57.61 T:aeadaes256ocbtaglen96v1 58.08 58.33 58.73 T:proest256otrv1 59.74 59.84 60.10 T:colm127v1 83.50 83.59 83.69 T:present80n6t4silcv3 83.82 84.04 84.28 T:deoxysneq128128v13 85.89 86.05 86.39 T:proest128otrv1 90.77 91.20 92.02 T:ketjejrv2 113.63 114.14 115.00 T:aezv1 116.51 117.01 118.73 T:led80n6t4silcv3 120.90 121.23 121.66 T:deoxyseq128128v13 132.12 132.32 132.89 T:deoxysneq256128v13 200.38 200.69 201.27 T:deoxyseq256128v13 2085.06? 2090.05? 2475.93? T:acorn128 2553.04 2553.78 2555.70 T:led80n6t4silcv2 2554.45 2555.61 2557.02 T:led80n6silcv1 3050.88 3052.18 3053.64 T:present80n6t4silcv2 3053.78 3056.57 3058.00 T:present80n6silcv1