VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20241011

[Page version: 20241120 00:41:33]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.20 0.21 0.22 T:tiaoxinv1 0.20? 0.22? 0.23? T:tiaoxinv2 0.24 0.25 0.26 aegis128l 0.25 0.26 0.26 T:aegis128l 0.40 0.41 0.41 aegis256 0.48 0.48 0.49 T:aegis128 0.61 0.62 0.63 T:aezv5 0.58? 0.63? 0.65? T:aeadaes128ocbtaglen128v1 0.62 0.63 0.63 T:aezv3 0.62 0.63 0.63 T:aezv4 0.63 0.63 0.64 T:morus1280256v2 0.63 0.63 0.64 T:morus1280128v1 0.63 0.64 0.64 T:morus1280256v1 0.63 0.64 0.64 T:morus1280128v2 0.63 0.64 0.65 T:aes128otrcv3 0.65 0.66 0.67 T:aes128otrpv3 0.65 0.67 0.67 T:aes128otrsv3 0.64? 0.68? 0.72? T:aes128gcmv1 0.40? 0.75? 0.81? T:aeadaes192ocbtaglen128v1 0.85 0.86 0.86 T:aes256otrcv3 0.85 0.88 0.88 T:deoxysi128v141 0.88 0.89 0.90 T:aes256otrsv3 0.87 0.89 0.91 T:aeadaes256ocbtaglen128v1 0.88 0.89 0.90 T:aes256otrpv3 0.92 0.93 0.94 T:deoxysneq128128v1 0.88 0.93 0.96 T:aes256gcmv1 0.99 1.00 1.00 T:deoxysneq256128v1 1.01 1.03 1.05 T:deoxysi256v141 1.08 1.09 1.10 T:morus640128v1 1.08 1.09 1.10 T:morus640128v2 1.12 1.15 1.17 T:norx6444v3 1.58 1.60 1.61 T:colm0v1 1.72 1.75 1.76 T:deoxysii128v141 1.76 1.77 1.78 T:deoxyseq128128v1 2.00 2.01 2.01 T:deoxysii256v141 2.00 2.02 2.04 T:deoxyseq256128v1 2.05 2.09 2.16 T:lunarkeyakv2 2.10 2.12 2.13 T:norx6441v2 2.17 2.18 2.21 T:norx6441v3 2.54 2.57 2.58 T:norx6441v1 2.74 2.75 2.77 T:aes128n12t8clocv2 2.75 2.75 2.76 T:aes128n12t8silcv2 2.75 2.75 2.76 T:aes128n8t8clocv2 2.75 2.75 2.76 T:aes128n12t8clocv3 2.75 2.76 2.76 T:aes128n12t8silcv3 2.75 2.76 2.76 T:aes128n8t8silcv2 2.77 2.80 2.83 T:seakeyakv2 2.79 2.86 2.91 T:oceankeyakv2 3.23 3.25 3.27 T:norx6461v2 3.23 3.27 3.28 T:norx6461v3 3.53 3.57 3.60 T:norx6444v1 3.76 3.77 3.80 T:norx6444v2 3.92 3.94 3.97 T:norx6461v1 3.96 3.97 3.98 T:norx3241v2 3.96 3.98 4.00 T:norx3241v3 4.16 4.18 4.20 T:lakekeyakv1 4.41 4.44 4.45 T:lakekeyakv2 4.78 4.79 4.81 T:norx3241v1 5.84 5.85 5.85 T:aesjambuv1 5.88 5.89 5.91 T:norx3261v3 6.10 6.13 6.15 T:norx3261v2 7.18 7.21 7.22 T:norx3261v1 7.42 7.46 7.52 ascon128av12 7.49 7.52 7.55 T:ascon128av11 7.50 7.54 7.56 T:ascon96v1 7.99 8.03 8.15 T:ketjemajorv2 9.21 9.28 9.38 T:ketjeminorv2 9.64 9.68 9.69 T:riverkeyakv2 10.84 10.87 10.90 ascon128v12 10.88 10.91 10.93 T:ascon128v1 10.90 10.91 10.93 T:ascon128v11 13.47 13.55 13.97 T:oceankeyakv1 14.25 14.28 14.31 T:aes128otrpv2 14.26 14.31 14.35 T:aes128otrpv1 14.38 14.45 14.63 T:aes128otrsv2 14.54 14.59 14.63 T:aes128otrsv1 15.55 15.57 15.60 T:twine80n6t4clocv2 15.86 15.92 15.94 T:twine80n6t4clocv3 18.19 18.24 18.26 T:aes256otrsv1 18.26 18.29 18.31 T:aes256otrsv2 18.26 18.30 18.31 T:aes256otrpv1 18.28 18.30 18.34 T:aes256otrpv2 23.05 23.07 23.09 T:aes128n12clocv1 23.18 23.25 23.27 T:aes128n8clocv1 24.21 24.23 24.26 T:aes128n8silcv1 24.22 24.25 24.29 T:aes128n12silcv1 25.91 25.94 25.96 T:proest256otrv1 31.34 31.40 31.51 T:riverkeyakv1 34.75 35.13 35.35 T:ketjesrv1 37.29 37.31 37.35 T:ketjesrv2 59.99 60.09 60.19 T:ketjejrv1 62.08 62.12 62.20 T:proest128otrv1 71.33 71.84 72.22 T:seakeyakv1 75.47 75.49 75.52 T:present80n6t4silcv3 77.90 77.99 78.07 T:deoxysneq128128v13 93.41 93.76 97.50 T:ketjejrv2 121.01 121.33 122.53 T:twine80n6clocv1 129.18 129.23 129.52 T:deoxysneq256128v13 130.78 130.82 130.88 T:led80n6t4silcv3 157.59 157.78 158.13 T:deoxyseq128128v13 166.94 167.32 168.00 T:aezv1 226.90 227.25 227.97 T:deoxyseq256128v13 304.14 304.26 305.20 aes256gcmv1 337.57 347.34 358.59 T:acorn128v3 379.05 380.43 380.96 T:acorn128 369.15 381.36 383.72 T:acorn128v2 3159.82 3160.07 3160.58 T:led80n6silcv1 3163.26 3163.58 3164.03 T:led80n6t4silcv2 4409.92 4411.84 4414.49 T:present80n6silcv1 4411.89 4413.79 4416.51 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.24 0.25 0.26 aegis128l 0.25 0.26 0.27 T:aegis128l 0.36 0.37 0.39 T:tiaoxinv1 0.37 0.38 0.39 T:tiaoxinv2 0.41 0.41 0.41 aegis256 0.44 0.44 0.45 T:aegis128 0.62 0.62 0.63 T:aezv4 0.62 0.62 0.66 T:aezv5 0.62 0.63 0.63 T:aeadaes128ocbtaglen128v1 0.62 0.63 0.66 T:aezv3 0.64 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v1 0.65 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280256v1 0.58? 0.66? 0.76? T:aes128gcmv1 0.68 0.69 0.70 T:aes128otrcv3 0.69 0.70 0.72 T:aes128otrsv3 0.68 0.71 0.72 T:aes128otrpv3 0.73 0.75 0.76 T:aeadaes192ocbtaglen128v1 0.82? 0.87? 0.93? T:aes256gcmv1 0.86 0.87 0.88 T:aeadaes256ocbtaglen128v1 0.90 0.91 0.92 T:aes256otrcv3 0.91 0.92 0.95 T:aes256otrsv3 0.92 0.93 0.95 T:aes256otrpv3 1.08 1.09 1.10 T:morus640128v2 1.09 1.10 1.10 T:morus640128v1 1.14 1.16 1.17 T:norx6444v3 1.15 1.17 1.18 T:deoxysi128v141 1.20 1.21 1.24 T:deoxysneq128128v1 1.29 1.30 1.31 T:deoxysi256v141 1.31 1.31 1.32 T:deoxysneq256128v1 1.66 1.67 1.70 T:colm0v1 1.73 1.75 1.78 T:deoxysii128v141 1.98 2.01 2.02 T:deoxysii256v141 2.01 2.03 2.07 T:norx6441v2 2.03 2.05 2.08 T:norx6441v3 2.07 2.14 2.22 T:lunarkeyakv2 2.41 2.42 2.43 T:deoxyseq128128v1 2.47 2.48 2.50 T:norx6441v1 2.61 2.62 2.63 T:deoxyseq256128v1 2.71 2.72 2.75 T:aes128n12t8silcv3 2.72 2.73 2.75 T:aes128n8t8silcv2 2.71 2.73 2.75 T:aes128n12t8clocv2 2.71 2.73 2.75 T:aes128n8t8clocv2 2.72 2.74 2.75 T:aes128n12t8clocv3 2.72 2.75 2.77 T:aes128n12t8silcv2 2.81 2.87 2.89 T:seakeyakv2 2.84 2.94 2.98 T:oceankeyakv2 3.14 3.16 3.19 T:norx6461v3 3.13 3.17 3.20 T:norx6461v2 3.43 3.55 3.76 T:norx6444v1 3.71 3.73 3.77 T:norx6444v2 3.73 3.77 3.78 T:norx3241v2 3.75 3.77 3.81 T:norx6461v1 3.79 3.81 3.83 T:norx3241v3 4.12 4.16 4.20 T:lakekeyakv1 4.52 4.53 4.58 T:norx3241v1 4.51 4.54 4.57 T:lakekeyakv2 5.71 5.74 5.77 T:norx3261v3 5.93 5.96 5.98 T:norx3261v2 6.09 6.10 6.10 T:aesjambuv1 7.06 7.08 7.09 T:norx3261v1 7.39 7.43 7.44 ascon128av12 7.62 7.64 7.67 T:ascon96v1 7.72 7.79 7.84 T:ascon128av11 8.03 8.11 8.24 T:ketjemajorv2 9.49 9.52 9.56 T:ketjeminorv2 9.79 9.83 9.85 T:riverkeyakv2 10.51 10.57 10.58 T:ascon128v1 10.53 10.57 10.60 T:ascon128v11 10.94 10.97 11.00 ascon128v12 13.57 13.81 14.05 T:oceankeyakv1 14.59 14.62 14.67 T:aes128otrpv2 14.58 14.65 14.69 T:aes128otrpv1 14.92 14.99 15.04 T:aes128otrsv2 14.97 15.00 15.04 T:aes128otrsv1 15.57 15.59 15.60 T:twine80n6t4clocv2 15.82 15.88 15.90 T:twine80n6t4clocv3 18.61 18.65 18.69 T:aes256otrpv2 18.60 18.65 18.71 T:aes256otrpv1 18.69 18.75 18.79 T:aes256otrsv2 18.74 18.78 18.82 T:aes256otrsv1 22.05 22.07 22.11 T:aes128n12clocv1 22.58 22.63 22.67 T:aes128n8clocv1 24.17 24.21 24.25 T:aes128n8silcv1 24.21 24.24 24.27 T:aes128n12silcv1 25.65 25.73 25.88 T:proest256otrv1 31.56 31.63 31.72 T:riverkeyakv1 35.01 35.19 35.48 T:ketjesrv1 37.37 37.60 37.73 T:ketjesrv2 59.92 60.02 60.06 T:ketjejrv1 60.29 60.31 60.37 T:proest128otrv1 72.95 73.19 73.45 T:seakeyakv1 75.94 75.98 76.03 T:present80n6t4silcv3 89.40 89.49 89.64 T:ketjejrv2 105.43 105.56 105.69 T:deoxysneq128128v13 120.79 120.90 122.35 T:twine80n6clocv1 131.69 131.80 131.83 T:led80n6t4silcv3 158.19 158.45 159.01 T:deoxyseq128128v13 159.54 159.67 159.92 T:deoxysneq256128v13 167.12 167.59 167.86 T:aezv1 227.21 227.41 227.77 T:deoxyseq256128v13 305.21 305.28 305.40 aes256gcmv1 331.23 339.31 350.94 T:acorn128v3 366.69 370.73 384.14 T:acorn128 378.96 380.46 380.55 T:acorn128v2 3160.51 3160.80 3161.45 T:led80n6silcv1 3164.33 3164.64 3165.79 T:led80n6t4silcv2 4410.98 4411.20 4414.03 T:present80n6silcv1 4411.40 4414.14 4414.97 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.24 0.25 0.25 T:aezv4 0.23 0.25 0.25 T:aezv5 0.26 0.26 0.27 T:aegis128l 0.25 0.27 0.27 T:aezv3 0.25? 0.30? 0.31? aegis128l 0.34 0.37 0.37 T:tiaoxinv2 0.37 0.37 0.38 T:tiaoxinv1 0.44 0.44 0.45 T:aegis128 0.41? 0.46? 0.46? aegis256 0.62 0.63 0.63 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280256v1 0.65 0.65 0.66 T:morus1280256v2 0.62? 0.66? 0.69? T:aes128gcmv1 0.67 0.68 0.69 T:aes128otrcv3 0.69 0.69 0.70 T:aes128otrpv3 0.69 0.69 0.70 T:aes128otrsv3 0.74? 0.75? 1.10? T:aeadaes192ocbtaglen128v1 0.53? 0.88? 1.23? T:aeadaes256ocbtaglen128v1 0.86 0.88 0.93 T:aes256gcmv1 0.91 0.91 0.91 T:aes256otrcv3 0.91 0.92 0.93 T:aes256otrsv3 0.92 0.92 0.93 T:aes256otrpv3 1.08 1.10 1.10 T:morus640128v2 1.10 1.10 1.11 T:morus640128v1 1.14 1.15 1.16 T:norx6444v3 1.16 1.17 1.19 T:deoxysi128v141 1.21 1.21 1.23 T:deoxysneq128128v1 1.29 1.30 1.31 T:deoxysi256v141 1.30 1.31 1.32 T:deoxysneq256128v1 1.64 1.67 1.68 T:colm0v1 1.74 1.76 1.80 T:deoxysii128v141 2.00 2.01 2.01 T:deoxysii256v141 2.02 2.03 2.05 T:norx6441v2 2.02 2.04 2.06 T:norx6441v3 2.16 2.19 2.21 T:lunarkeyakv2 2.41 2.42 2.44 T:deoxyseq128128v1 2.45 2.48 2.50 T:norx6441v1 2.61 2.62 2.63 T:deoxyseq256128v1 2.67 2.71 2.74 T:aes128n12t8clocv2 2.68 2.71 2.73 T:aes128n12t8silcv2 2.69 2.72 2.74 T:aes128n8t8clocv2 2.72 2.73 2.75 T:aes128n12t8clocv3 2.71 2.74 2.75 T:aes128n12t8silcv3 2.70 2.74 2.75 T:aes128n8t8silcv2 2.88 2.90 2.95 T:seakeyakv2 2.92 2.95 2.99 T:oceankeyakv2 3.13 3.16 3.18 T:norx6461v3 3.13 3.16 3.19 T:norx6461v2 3.48 3.59 3.80 T:norx6444v1 3.74 3.76 3.79 T:norx6444v2 3.75 3.76 3.78 T:norx3241v2 3.78 3.80 3.83 T:norx6461v1 3.78 3.81 3.82 T:norx3241v3 4.15 4.17 4.19 T:lakekeyakv1 4.52 4.54 4.56 T:norx3241v1 4.55 4.56 4.58 T:lakekeyakv2 5.71 5.74 5.76 T:norx3261v3 5.93 5.95 5.96 T:norx3261v2 6.09 6.10 6.11 T:aesjambuv1 7.06 7.08 7.09 T:norx3261v1 7.39 7.42 7.45 ascon128av12 7.63 7.64 7.68 T:ascon96v1 7.75 7.78 7.83 T:ascon128av11 7.98 8.12 8.30 T:ketjemajorv2 9.53 9.57 9.60 T:ketjeminorv2 9.81 9.85 9.89 T:riverkeyakv2 10.50 10.53 10.56 T:ascon128v11 10.52 10.54 10.57 T:ascon128v1 10.94 10.96 10.98 ascon128v12 13.62 13.80 14.10 T:oceankeyakv1 14.63 14.64 14.66 T:aes128otrpv2 14.61 14.65 14.70 T:aes128otrpv1 14.94 15.00 15.06 T:aes128otrsv1 14.97 15.03 15.07 T:aes128otrsv2 15.57 15.58 15.59 T:twine80n6t4clocv2 15.82 15.85 15.88 T:twine80n6t4clocv3 18.65 18.67 18.72 T:aes256otrpv2 18.65 18.69 18.74 T:aes256otrpv1 18.72 18.79 18.82 T:aes256otrsv2 18.75 18.81 18.84 T:aes256otrsv1 22.06 22.10 22.15 T:aes128n12clocv1 22.60 22.64 22.67 T:aes128n8clocv1 24.18 24.21 24.25 T:aes128n12silcv1 24.17 24.22 24.25 T:aes128n8silcv1 25.84 25.86 25.87 T:proest256otrv1 31.55 31.65 31.71 T:riverkeyakv1 35.09 35.28 35.55 T:ketjesrv1 37.38 37.54 37.62 T:ketjesrv2 60.03 60.07 60.12 T:ketjejrv1 60.30 60.33 60.35 T:proest128otrv1 72.80 73.33 73.47 T:seakeyakv1 75.93 75.97 76.01 T:present80n6t4silcv3 89.45 89.59 89.75 T:ketjejrv2 105.42 105.53 105.68 T:deoxysneq128128v13 120.82 120.94 122.30 T:twine80n6clocv1 131.73 131.75 131.82 T:led80n6t4silcv3 157.81 157.96 158.63 T:deoxyseq128128v13 159.57 159.70 159.96 T:deoxysneq256128v13 166.10 167.05 167.16 T:aezv1 227.31 227.61 228.04 T:deoxyseq256128v13 292.24 292.33 292.39 aes256gcmv1 331.76 339.38 350.93 T:acorn128v3 366.71 370.94 384.15 T:acorn128 379.39 380.45 380.52 T:acorn128v2 3160.39 3160.81 3161.35 T:led80n6silcv1 3164.00 3164.61 3165.61 T:led80n6t4silcv2 4410.97 4411.41 4413.63 T:present80n6silcv1 4411.18 4414.35 4415.08 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.17? 0.20? 0.21? T:tiaoxinv2 0.18? 0.20? 0.20? T:tiaoxinv1 0.24 0.25 0.26 aegis128l 0.25 0.25 0.26 T:aegis128l 0.42 0.43 0.43 aegis256 0.42 0.43 0.45 T:aezv4 0.42 0.43 0.45 T:aezv3 0.42 0.43 0.45 T:aezv5 0.47 0.47 0.48 T:aegis128 0.50 0.52 0.53 T:aes128gcmv1 0.60 0.62 0.62 T:morus1280128v2 0.61 0.62 0.63 T:morus1280128v1 0.60 0.62 0.63 T:morus1280256v1 0.62 0.62 0.63 T:morus1280256v2 0.57? 0.63? 0.68? T:aeadaes128ocbtaglen128v1 0.62 0.64 0.65 T:aes256gcmv1 0.64 0.65 0.65 T:aes128otrpv3 0.65 0.65 0.66 T:aes128otrcv3 0.65? 0.74? 0.82? T:aeadaes192ocbtaglen128v1 0.85 0.87 0.90 T:deoxysi128v141 0.87 0.88 0.89 T:aes256otrcv3 0.69? 0.89? 1.05? T:aeadaes256ocbtaglen128v1 0.88 0.89 0.89 T:aes256otrpv3 0.89 0.90 0.92 T:deoxysneq128128v1 0.99 0.99 1.02 T:deoxysneq256128v1 0.99 1.01 1.03 T:deoxysi256v141 1.04 1.05 1.06 T:morus640128v2 1.04 1.05 1.07 T:morus640128v1 1.09 1.12 1.12 T:colm0v1 1.30 1.31 1.34 T:deoxysii128v141 1.31 1.32 1.34 T:deoxyseq128128v1 1.48 1.50 1.52 T:deoxysii256v141 1.49 1.51 1.53 T:deoxyseq256128v1 1.64 1.65 1.67 T:norx6444v3 1.70 1.70 1.70 T:aes128otrsv3 2.15 2.16 2.17 T:norx6441v2 2.16 2.17 2.18 T:norx6441v3 2.30 2.30 2.31 T:aes256otrsv3 2.35 2.38 2.39 T:seakeyakv2 2.36 2.40 2.44 T:oceankeyakv2 2.57 2.59 2.60 T:norx6441v1 2.72 2.72 2.72 T:aes128n12t8silcv3 2.72 2.72 2.72 T:aes128n12t8silcv2 2.72 2.72 2.72 T:aes128n8t8silcv2 2.73 2.73 2.75 T:aes128n8t8clocv2 2.74 2.74 2.74 T:aes128n12t8clocv3 2.73 2.74 2.74 T:aes128n12t8clocv2 2.87 2.91 2.93 T:lunarkeyakv2 3.28 3.30 3.32 T:norx6461v3 3.32 3.34 3.36 T:norx6461v2 3.51 3.52 3.55 T:norx6444v1 3.70 3.72 3.73 T:norx6444v2 3.90 3.92 3.94 T:lakekeyakv1 3.92 3.94 3.96 T:norx6461v1 3.96 3.97 4.00 T:norx3241v3 3.98 3.98 4.00 T:lakekeyakv2 3.98 3.99 4.01 T:norx3241v2 4.79 4.80 4.82 T:norx3241v1 5.79 5.80 5.81 T:aesjambuv1 5.99 6.01 6.03 T:norx3261v3 6.05 6.07 6.09 T:norx3261v2 6.61 6.64 6.70 T:ketjemajorv2 7.08 7.09 7.11 T:riverkeyakv2 7.20 7.21 7.23 T:norx3261v1 7.40 7.41 7.43 T:ascon128av11 7.41 7.43 7.46 ascon128av12 7.40 7.49 7.51 T:ascon96v1 8.44 8.48 8.57 T:ketjeminorv2 10.86 10.89 10.91 ascon128v12 10.89 10.92 10.93 T:ascon128v11 10.90 10.92 10.93 T:ascon128v1 13.07 13.12 13.26 T:aes128otrsv2 13.17 13.22 13.25 T:aes128otrsv1 13.42 13.52 13.76 T:oceankeyakv1 13.75 13.77 13.79 T:aes128otrpv2 13.76 13.80 13.82 T:aes128otrpv1 15.29 15.30 15.30 T:twine80n6t4clocv2 15.65 15.66 15.67 T:twine80n6t4clocv3 16.88 16.90 16.92 T:aes256otrsv1 16.90 16.94 16.98 T:aes256otrsv2 17.52 17.53 17.57 T:aes128n12clocv1 17.62 17.63 17.65 T:aes128n8clocv1 17.76 17.79 17.82 T:aes256otrpv1 17.81 17.83 17.86 T:aes256otrpv2 18.11 18.14 18.17 T:aes128n8silcv1 18.15 18.16 18.19 T:aes128n12silcv1 26.06 26.08 26.13 T:proest256otrv1 29.83 29.92 30.02 T:riverkeyakv1 32.42 32.59 32.70 T:ketjesrv1 34.21 34.27 34.40 T:ketjesrv2 55.05 55.33 55.37 T:ketjejrv1 60.95 60.99 61.01 T:proest128otrv1 71.23 71.66 71.92 T:seakeyakv1 75.20 75.21 75.23 T:present80n6t4silcv3 77.90 77.97 78.03 T:deoxysneq128128v13 90.49 90.64 91.69 T:twine80n6clocv1 90.23 91.12 94.91 T:ketjejrv2 109.34 109.54 110.01 T:aezv1 117.67 117.91 118.69 T:deoxyseq128128v13 128.87 128.96 129.04 T:deoxysneq256128v13 130.56 130.60 130.64 T:led80n6t4silcv3 169.63 169.85 170.04 T:deoxyseq256128v13 298.54 298.68 298.77 aes256gcmv1 334.80 342.97 352.80 T:acorn128v3 370.68 371.24 371.56 T:acorn128 361.44 371.78 373.23 T:acorn128v2 2369.97 2370.22 2370.55 T:led80n6silcv1 2373.04 2373.39 2373.75 T:led80n6t4silcv2 3310.06 3310.20 3310.45 T:present80n6silcv1 3310.27 3311.75 3422.27 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.23? 0.25? 0.26? aegis128l 0.25 0.25 0.26 T:aegis128l 0.26 0.28 0.28 T:tiaoxinv1 0.27 0.28 0.29 T:tiaoxinv2 0.41 0.41 0.42 aegis256 0.42 0.44 0.44 T:aezv4 0.43 0.44 0.44 T:aezv3 0.42 0.44 0.44 T:aezv5 0.45 0.45 0.45 T:aegis128 0.47? 0.51? 0.53? T:aes128gcmv1 0.59? 0.62? 0.66? T:aes256gcmv1 0.59 0.62 0.65 T:aeadaes128ocbtaglen128v1 0.61 0.62 0.63 T:morus1280256v2 0.62 0.63 0.63 T:morus1280128v1 0.62 0.63 0.64 T:morus1280128v2 0.62 0.63 0.63 T:morus1280256v1 0.67 0.68 0.68 T:aes128otrcv3 0.67 0.68 0.69 T:aes128otrpv3 0.57? 0.75? 0.92? T:aeadaes192ocbtaglen128v1 0.70? 0.87? 1.04? T:aeadaes256ocbtaglen128v1 0.90 0.91 0.92 T:aes256otrcv3 0.91 0.91 0.92 T:aes256otrpv3 1.01 1.03 1.04 T:deoxysi128v141 1.03 1.04 1.04 T:deoxysneq128128v1 1.06 1.06 1.07 T:morus640128v1 1.06 1.06 1.07 T:morus640128v2 1.13 1.15 1.16 T:deoxysi256v141 1.13 1.15 1.17 T:deoxysneq256128v1 1.14 1.18 1.21 T:colm0v1 1.29 1.32 1.34 T:deoxysii128v141 1.48 1.50 1.53 T:deoxysii256v141 1.63 1.65 1.65 T:deoxyseq128128v1 1.64 1.65 1.67 T:norx6444v3 1.72 1.73 1.73 T:aes128otrsv3 1.79 1.81 1.82 T:deoxyseq256128v1 2.08 2.09 2.11 T:norx6441v3 2.09 2.10 2.12 T:norx6441v2 2.32 2.32 2.34 T:aes256otrsv3 2.38 2.42 2.43 T:seakeyakv2 2.37 2.43 2.49 T:oceankeyakv2 2.54 2.55 2.57 T:norx6441v1 2.69 2.70 2.70 T:aes128n8t8silcv2 2.70 2.71 2.73 T:aes128n12t8silcv2 2.70 2.71 2.73 T:aes128n12t8clocv3 2.70 2.72 2.73 T:aes128n12t8silcv3 2.72 2.73 2.74 T:aes128n8t8clocv2 2.72 2.73 2.73 T:aes128n12t8clocv2 2.90 2.95 2.98 T:lunarkeyakv2 3.20 3.23 3.26 T:norx6461v3 3.23 3.26 3.27 T:norx6461v2 3.46 3.53 3.62 T:norx6444v1 3.68 3.70 3.71 T:norx6444v2 3.83 3.85 3.87 T:norx6461v1 3.89 3.90 3.91 T:norx3241v2 3.90 3.91 3.92 T:norx3241v3 3.92 3.95 3.97 T:lakekeyakv1 4.00 4.03 4.05 T:lakekeyakv2 4.68 4.69 4.71 T:norx3241v1 5.88 5.88 5.89 T:aesjambuv1 5.90 5.92 5.93 T:norx3261v3 5.96 5.99 6.01 T:norx3261v2 6.61 6.68 6.74 T:ketjemajorv2 7.12 7.14 7.15 T:norx3261v1 7.15 7.17 7.18 T:riverkeyakv2 7.39 7.41 7.42 ascon128av12 7.38 7.42 7.52 T:ascon128av11 7.44 7.47 7.50 T:ascon96v1 8.54 8.59 8.71 T:ketjeminorv2 10.72 10.75 10.77 T:ascon128v1 10.73 10.76 10.77 T:ascon128v11 10.85 10.89 10.92 ascon128v12 13.32 13.38 13.42 T:aes128otrsv2 13.35 13.39 13.41 T:aes128otrsv1 13.53 13.64 13.84 T:oceankeyakv1 13.90 13.94 14.00 T:aes128otrpv2 13.92 13.95 13.98 T:aes128otrpv1 15.29 15.30 15.32 T:twine80n6t4clocv2 15.62 15.65 15.67 T:twine80n6t4clocv3 17.04 17.07 17.11 T:aes128n12clocv1 17.10 17.13 17.15 T:aes256otrsv2 17.11 17.15 17.18 T:aes256otrsv1 17.32 17.34 17.38 T:aes128n8clocv1 17.88 17.92 17.98 T:aes256otrpv1 17.91 17.96 18.00 T:aes256otrpv2 18.10 18.12 18.15 T:aes128n8silcv1 18.10 18.14 18.18 T:aes128n12silcv1 25.94 25.97 26.05 T:proest256otrv1 29.96 30.02 30.08 T:riverkeyakv1 32.59 32.75 33.13 T:ketjesrv1 34.39 34.47 34.59 T:ketjesrv2 55.32 55.38 55.84 T:ketjejrv1 60.07 60.09 60.11 T:proest128otrv1 72.00 72.28 72.57 T:seakeyakv1 75.44 75.48 75.49 T:present80n6t4silcv3 88.51 88.57 88.76 T:ketjejrv2 90.37 90.46 91.49 T:twine80n6clocv1 91.74 91.82 91.94 T:deoxysneq128128v13 109.72 109.84 110.31 T:aezv1 117.75 117.91 118.09 T:deoxyseq128128v13 131.06 131.08 131.11 T:led80n6t4silcv3 144.10 144.17 144.37 T:deoxysneq256128v13 169.71 169.80 169.98 T:deoxyseq256128v13 298.70 298.80 298.92 aes256gcmv1 331.70 338.95 348.97 T:acorn128v3 356.22 358.66 373.68 T:acorn128 371.03 371.30 371.37 T:acorn128v2 2370.33 2370.50 2370.69 T:led80n6silcv1 2373.20 2373.60 2374.34 T:led80n6t4silcv2 3309.77 3310.20 3310.39 T:present80n6silcv1 3310.35 3311.66 3430.76 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.24 0.25 0.25 T:aezv3 0.24 0.25 0.25 T:aezv4 0.24 0.25 0.26 T:aezv5 0.25 0.25 0.26 aegis128l 0.25 0.25 0.25 T:aegis128l 0.26 0.28 0.28 T:tiaoxinv1 0.27 0.28 0.28 T:tiaoxinv2 0.41 0.44 0.44 aegis256 0.45 0.45 0.45 T:aegis128 0.48 0.50 0.52 T:aes128gcmv1 0.62 0.62 0.63 T:aeadaes128ocbtaglen128v1 0.62 0.62 0.63 T:morus1280256v2 0.62 0.63 0.63 T:morus1280128v2 0.62 0.63 0.63 T:morus1280128v1 0.61 0.63 0.65 T:aes256gcmv1 0.62 0.63 0.63 T:morus1280256v1 0.67 0.67 0.67 T:aes128otrpv3 0.67 0.68 0.69 T:aes128otrcv3 0.74 0.75 0.75 T:aeadaes192ocbtaglen128v1 0.87 0.87 0.88 T:aeadaes256ocbtaglen128v1 0.91 0.91 0.91 T:aes256otrcv3 0.90 0.91 0.91 T:aes256otrpv3 1.02 1.02 1.03 T:deoxysi128v141 1.03 1.04 1.04 T:deoxysneq128128v1 1.05 1.06 1.07 T:morus640128v2 1.05 1.06 1.07 T:morus640128v1 1.13 1.15 1.15 T:deoxysi256v141 1.15 1.15 1.17 T:deoxysneq256128v1 1.15 1.16 1.18 T:colm0v1 1.31 1.33 1.34 T:deoxysii128v141 1.50 1.50 1.51 T:deoxysii256v141 1.64 1.64 1.65 T:deoxyseq128128v1 1.65 1.66 1.68 T:norx6444v3 1.72 1.72 1.72 T:aes128otrsv3 1.80 1.81 1.82 T:deoxyseq256128v1 2.09 2.10 2.11 T:norx6441v3 2.08 2.11 2.12 T:norx6441v2 2.32 2.32 2.32 T:aes256otrsv3 2.42 2.43 2.45 T:seakeyakv2 2.42 2.45 2.46 T:oceankeyakv2 2.53 2.55 2.56 T:norx6441v1 2.70 2.70 2.71 T:aes128n8t8silcv2 2.69 2.70 2.73 T:aes128n12t8clocv3 2.70 2.71 2.72 T:aes128n12t8silcv2 2.71 2.72 2.72 T:aes128n12t8silcv3 2.72 2.72 2.74 T:aes128n12t8clocv2 2.72 2.73 2.74 T:aes128n8t8clocv2 2.93 2.96 2.98 T:lunarkeyakv2 3.21 3.23 3.23 T:norx6461v3 3.24 3.25 3.27 T:norx6461v2 3.48 3.54 3.64 T:norx6444v1 3.71 3.73 3.74 T:norx6444v2 3.82 3.84 3.86 T:norx6461v1 3.88 3.89 3.91 T:norx3241v2 3.89 3.91 3.93 T:norx3241v3 3.94 3.96 3.97 T:lakekeyakv1 4.03 4.04 4.05 T:lakekeyakv2 4.69 4.70 4.72 T:norx3241v1 5.87 5.88 5.88 T:aesjambuv1 5.92 5.93 5.96 T:norx3261v3 5.96 5.98 5.99 T:norx3261v2 6.62 6.65 6.69 T:ketjemajorv2 7.13 7.14 7.14 T:norx3261v1 7.16 7.18 7.21 T:riverkeyakv2 7.37 7.39 7.47 T:ascon128av11 7.39 7.41 7.43 ascon128av12 7.43 7.47 7.49 T:ascon96v1 8.58 8.61 8.70 T:ketjeminorv2 10.75 10.77 10.78 T:ascon128v11 10.75 10.77 10.78 T:ascon128v1 10.88 10.89 10.91 ascon128v12 13.37 13.40 13.41 T:aes128otrsv1 13.38 13.41 13.44 T:aes128otrsv2 13.51 13.60 13.82 T:oceankeyakv1 13.92 13.97 13.99 T:aes128otrpv2 13.95 13.98 14.02 T:aes128otrpv1 15.30 15.31 15.31 T:twine80n6t4clocv2 15.63 15.64 15.66 T:twine80n6t4clocv3 17.11 17.12 17.14 T:aes128n12clocv1 17.12 17.15 17.18 T:aes256otrsv1 17.12 17.15 17.18 T:aes256otrsv2 17.33 17.34 17.37 T:aes128n8clocv1 17.93 17.95 17.98 T:aes256otrpv1 17.92 17.95 17.99 T:aes256otrpv2 18.10 18.14 18.18 T:aes128n8silcv1 18.10 18.14 18.18 T:aes128n12silcv1 26.00 26.02 26.10 T:proest256otrv1 29.97 30.05 30.09 T:riverkeyakv1 32.75 32.89 33.06 T:ketjesrv1 34.41 34.50 34.53 T:ketjesrv2 55.35 55.38 55.62 T:ketjejrv1 60.05 60.09 60.12 T:proest128otrv1 72.04 72.25 72.57 T:seakeyakv1 75.45 75.46 75.50 T:present80n6t4silcv3 88.55 88.62 88.81 T:ketjejrv2 90.32 90.44 91.47 T:twine80n6clocv1 91.71 91.78 91.83 T:deoxysneq128128v13 109.46 109.64 109.72 T:aezv1 117.83 117.97 118.46 T:deoxyseq128128v13 131.04 131.07 131.10 T:led80n6t4silcv3 144.09 144.19 144.37 T:deoxysneq256128v13 169.74 169.90 169.99 T:deoxyseq256128v13 292.24 292.31 292.42 aes256gcmv1 331.68 339.01 348.99 T:acorn128v3 356.17 358.70 373.65 T:acorn128 370.73 371.28 371.35 T:acorn128v2 2370.26 2370.48 2370.78 T:led80n6silcv1 2373.28 2373.43 2373.96 T:led80n6t4silcv2 3309.90 3310.27 3310.56 T:present80n6silcv1 3310.40 3312.29 3431.87 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.18 0.19 0.19 T:tiaoxinv2 0.18? 0.19? 0.20? T:tiaoxinv1 0.22? 0.25? 0.27? T:aezv5 0.25 0.25 0.25 T:aegis128l 0.23? 0.25? 0.27? T:aezv4 0.24 0.25 0.26 aegis128l 0.24? 0.27? 0.28? T:aezv3 0.33? 0.36? 0.39? T:aes256gcmv1 0.34? 0.37? 0.41? T:aes128gcmv1 0.44 0.44 0.45 aegis256 0.45 0.46 0.46 T:aegis128 0.59 0.60 0.61 T:morus1280128v1 0.60 0.60 0.61 T:morus1280256v2 0.59 0.60 0.61 T:morus1280128v2 0.59 0.60 0.61 T:morus1280256v1 0.59 0.62 0.65 T:aeadaes128ocbtaglen128v1 0.61 0.62 0.63 T:colm0v1 0.63 0.66 0.67 T:aes128otrpv3 0.68 0.68 0.69 T:aes128otrcv3 0.70? 0.77? 1.10? T:aeadaes192ocbtaglen128v1 0.51? 0.87? 1.23? T:aeadaes256ocbtaglen128v1 0.85 0.87 0.89 T:deoxysneq128128v1 0.84 0.88 0.88 T:deoxyseq128128v1 0.87 0.88 0.88 T:deoxysii128v141 0.86 0.89 0.90 T:deoxysi128v141 0.88 0.90 0.92 T:aes256otrpv3 0.90 0.91 0.93 T:aes256otrcv3 0.95 0.99 1.00 T:deoxysneq256128v1 0.99 1.00 1.01 T:deoxysii256v141 0.99 1.00 1.00 T:deoxyseq256128v1 0.98 1.00 1.01 T:deoxysi256v141 0.98 1.01 1.03 T:morus640128v1 1.00 1.02 1.04 T:morus640128v2 1.84 1.87 1.91 T:lunarkeyakv2 1.85 1.90 1.93 T:oceankeyakv2 2.13 2.16 2.18 T:norx6441v2 2.13 2.16 2.18 T:norx6444v3 2.14 2.17 2.18 T:norx6441v3 2.31 2.32 2.35 T:seakeyakv2 2.58 2.61 2.62 T:norx6441v1 2.69 2.69 2.69 T:aes128n12t8silcv3 2.69 2.69 2.69 T:aes128n12t8silcv2 2.69 2.69 2.69 T:aes128n8t8silcv2 2.71 2.72 2.72 T:aes128n8t8clocv2 2.71 2.72 2.73 T:aes128n12t8clocv2 2.71 2.72 2.72 T:aes128n12t8clocv3 2.75 2.75 2.75 T:aes128otrsv3 3.32 3.36 3.38 T:norx6461v3 3.39 3.41 3.44 T:norx6461v2 3.48 3.49 3.52 T:norx6444v1 3.61 3.64 3.66 T:lakekeyakv2 3.66 3.69 3.70 T:norx6444v2 3.72 3.72 3.73 T:aes256otrsv3 3.70 3.73 3.74 T:lakekeyakv1 3.91 3.94 3.98 T:norx6461v1 3.94 3.96 3.98 T:norx3241v3 3.97 4.01 4.02 T:norx3241v2 4.82 4.84 4.85 T:norx3241v1 5.20 5.29 5.34 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 5.96 5.97 6.00 T:norx3261v2 6.06 6.10 6.10 T:norx3261v3 6.72 6.74 6.75 T:riverkeyakv2 7.22 7.23 7.25 T:norx3261v1 7.27 7.29 7.32 T:ascon128av11 7.35 7.37 7.41 ascon128av12 7.22 7.44 7.47 T:ascon96v1 7.76 7.82 7.96 T:ketjeminorv2 10.88 10.90 10.94 T:ascon128v11 10.89 10.91 10.95 ascon128v12 10.87 10.92 10.94 T:ascon128v1 11.73 11.75 11.81 T:aes128otrsv2 11.76 11.82 11.85 T:aes128otrsv1 12.16 12.19 12.23 T:aes128n8clocv1 12.16 12.20 12.24 T:aes128n12silcv1 12.13 12.20 12.22 T:aes128n8silcv1 12.17 12.20 12.23 T:aes128n12clocv1 13.14 13.23 13.27 T:aes128otrpv2 13.23 13.27 13.30 T:aes128otrpv1 13.32 13.46 13.76 T:oceankeyakv1 14.99 15.00 15.02 T:twine80n6t4clocv2 15.43 15.44 15.46 T:twine80n6t4clocv3 15.53 15.55 15.57 T:aes256otrsv1 15.55 15.59 15.62 T:aes256otrsv2 17.22 17.26 17.28 T:aes256otrpv1 17.23 17.29 17.33 T:aes256otrpv2 26.10 26.14 26.17 T:proest256otrv1 28.31 28.35 28.44 T:riverkeyakv1 30.53 30.86 30.91 T:ketjesrv1 31.39 31.44 31.53 T:ketjesrv2 49.95 50.45 51.67 T:ketjejrv1 52.57 52.61 52.67 T:aezv1 59.82 59.86 59.92 T:proest128otrv1 59.99 60.08 60.69 T:twine80n6clocv1 70.94 71.45 71.73 T:seakeyakv1 74.96 74.99 75.01 T:present80n6t4silcv3 77.69 77.80 77.85 T:deoxyseq128128v13 77.91 77.98 78.10 T:deoxysneq128128v13 87.24 87.65 92.57 T:ketjejrv2 112.34 112.52 112.61 T:deoxyseq256128v13 128.60 128.65 128.93 T:deoxysneq256128v13 130.34 130.39 130.43 T:led80n6t4silcv3 292.38 292.55 292.73 aes256gcmv1 329.62 338.54 349.50 T:acorn128v3 362.03 362.13 362.20 T:acorn128 351.96 362.13 364.11 T:acorn128v2 1579.83 1580.19 1580.50 T:led80n6silcv1 1582.21 1582.33 1582.55 T:led80n6t4silcv2 2206.04 2206.52 2206.89 T:present80n6silcv1 2206.72 2207.10 2207.69 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.18? 0.19? 0.22? T:tiaoxinv2 0.18? 0.20? 0.22? T:tiaoxinv1 0.25 0.25 0.26 T:aezv4 0.25 0.25 0.26 T:aezv3 0.25 0.25 0.26 T:aegis128l 0.25 0.25 0.26 T:aezv5 0.23? 0.26? 0.28? aegis128l 0.33? 0.36? 0.39? T:aes256gcmv1 0.31? 0.36? 0.42? T:aes128gcmv1 0.42 0.42 0.44 aegis256 0.45 0.46 0.46 T:aegis128 0.60 0.60 0.61 T:morus1280128v2 0.60 0.60 0.61 T:morus1280256v2 0.60 0.60 0.61 T:morus1280256v1 0.60 0.61 0.61 T:morus1280128v1 0.61 0.62 0.64 T:aeadaes128ocbtaglen128v1 0.63 0.63 0.64 T:colm0v1 0.64 0.65 0.65 T:aes128otrpv3 0.67 0.68 0.68 T:aes128otrcv3 0.39? 0.75? 0.75? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.87 T:deoxysneq128128v1 0.53? 0.87? 1.21? T:aeadaes256ocbtaglen128v1 0.86 0.87 0.88 T:deoxyseq128128v1 0.85 0.88 0.90 T:deoxysii128v141 0.84 0.88 0.89 T:deoxysi128v141 0.89 0.89 0.90 T:aes256otrpv3 0.91 0.91 0.92 T:aes256otrcv3 0.97 1.00 1.03 T:deoxysneq256128v1 0.96 1.00 1.01 T:deoxysi256v141 0.99 1.00 1.03 T:deoxysii256v141 1.00 1.00 1.01 T:deoxyseq256128v1 1.02 1.02 1.04 T:morus640128v1 1.01 1.04 1.05 T:morus640128v2 1.84 1.88 1.93 T:oceankeyakv2 1.83 1.88 1.92 T:lunarkeyakv2 2.11 2.15 2.17 T:norx6441v3 2.12 2.16 2.18 T:norx6441v2 2.15 2.17 2.19 T:norx6444v3 2.30 2.33 2.34 T:seakeyakv2 2.59 2.61 2.65 T:norx6441v1 2.66 2.69 2.71 T:aes128n8t8silcv2 2.68 2.71 2.72 T:aes128n12t8silcv2 2.69 2.71 2.72 T:aes128n12t8silcv3 2.72 2.72 2.72 T:aes128n12t8clocv3 2.72 2.73 2.75 T:aes128n8t8clocv2 2.73 2.75 2.75 T:aes128n12t8clocv2 2.75 2.75 2.75 T:aes128otrsv3 3.29 3.32 3.34 T:norx6461v3 3.31 3.34 3.37 T:norx6461v2 3.46 3.48 3.51 T:norx6444v1 3.61 3.63 3.68 T:lakekeyakv2 3.66 3.68 3.71 T:norx6444v2 3.71 3.72 3.73 T:aes256otrsv3 3.69 3.73 3.74 T:lakekeyakv1 3.89 3.91 3.95 T:norx6461v1 4.00 4.02 4.03 T:norx3241v3 4.00 4.02 4.03 T:norx3241v2 4.81 4.84 4.86 T:norx3241v1 5.21 5.29 5.36 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 5.99 6.01 6.03 T:norx3261v2 6.08 6.11 6.16 T:norx3261v3 6.70 6.72 6.75 T:riverkeyakv2 7.18 7.20 7.22 T:norx3261v1 7.25 7.28 7.30 T:ascon128av11 7.24 7.31 7.36 T:ascon96v1 7.35 7.37 7.39 ascon128av12 7.77 7.85 8.01 T:ketjeminorv2 10.70 10.79 10.83 ascon128v12 10.92 10.95 10.98 T:ascon128v1 10.92 10.97 10.99 T:ascon128v11 11.77 11.81 11.89 T:aes128otrsv2 11.79 11.86 11.90 T:aes128otrsv1 12.12 12.16 12.23 T:aes128n12silcv1 12.13 12.17 12.22 T:aes128n8silcv1 12.14 12.19 12.26 T:aes128n8clocv1 12.18 12.20 12.22 T:aes128n12clocv1 13.20 13.27 13.33 T:aes128otrpv2 13.28 13.33 13.38 T:aes128otrpv1 13.33 13.46 13.75 T:oceankeyakv1 15.01 15.02 15.03 T:twine80n6t4clocv2 15.40 15.42 15.46 T:twine80n6t4clocv3 15.55 15.58 15.66 T:aes256otrsv2 15.58 15.62 15.67 T:aes256otrsv1 17.28 17.32 17.38 T:aes256otrpv2 17.27 17.33 17.36 T:aes256otrpv1 26.11 26.13 26.15 T:proest256otrv1 28.31 28.41 28.47 T:riverkeyakv1 30.29 30.38 31.19 T:ketjesrv1 31.49 31.61 31.70 T:ketjesrv2 50.00 50.05 50.15 T:ketjejrv1 52.52 52.61 52.75 T:aezv1 59.80 59.84 59.89 T:proest128otrv1 59.97 60.08 60.74 T:twine80n6clocv1 71.04 71.43 71.85 T:seakeyakv1 74.99 75.02 75.07 T:present80n6t4silcv3 77.70 77.81 78.22 T:deoxyseq128128v13 77.91 78.00 78.08 T:deoxysneq128128v13 87.61 87.69 87.92 T:ketjejrv2 112.33 112.39 112.47 T:deoxyseq256128v13 128.65 128.71 128.89 T:deoxysneq256128v13 130.31 130.36 130.45 T:led80n6t4silcv3 292.20 292.39 292.46 aes256gcmv1 329.53 338.54 349.54 T:acorn128v3 342.13 346.55 366.25 T:acorn128 362.04 362.12 362.18 T:acorn128v2 1580.39 1580.56 1580.79 T:led80n6silcv1 1582.01 1582.25 1582.46 T:led80n6t4silcv2 2206.43 2206.76 2207.22 T:present80n6silcv1 2206.86 2207.33 2208.29 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.16? 0.19? 0.19? T:tiaoxinv2 0.19 0.19 0.20 T:tiaoxinv1 0.25 0.25 0.26 T:aezv4 0.23? 0.25? 0.27? aegis128l 0.25 0.25 0.26 T:aezv5 0.25 0.25 0.26 T:aegis128l 0.25 0.25 0.26 T:aezv3 0.32? 0.34? 0.38? T:aes256gcmv1 0.35? 0.40? 0.43? T:aes128gcmv1 0.42 0.42 0.42 aegis256 0.45 0.46 0.46 T:aegis128 0.60 0.60 0.61 T:morus1280256v2 0.60 0.61 0.61 T:morus1280256v1 0.60 0.61 0.61 T:morus1280128v1 0.60 0.61 0.61 T:morus1280128v2 0.62 0.62 0.63 T:aeadaes128ocbtaglen128v1 0.63 0.63 0.63 T:colm0v1 0.64 0.65 0.65 T:aes128otrpv3 0.68 0.68 0.68 T:aes128otrcv3 0.74? 0.75? 1.10? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.87 T:deoxysneq128128v1 0.86 0.87 0.88 T:deoxysii128v141 0.87 0.87 0.88 T:aeadaes256ocbtaglen128v1 0.87 0.87 0.88 T:deoxyseq128128v1 0.86 0.88 0.89 T:deoxysi128v141 0.89 0.89 0.90 T:aes256otrpv3 0.91 0.91 0.92 T:aes256otrcv3 0.99 1.00 1.00 T:deoxysneq256128v1 0.98 1.00 1.02 T:deoxysi256v141 1.00 1.00 1.00 T:deoxyseq256128v1 0.99 1.00 1.02 T:deoxysii256v141 1.00 1.02 1.03 T:morus640128v2 1.00 1.03 1.04 T:morus640128v1 1.86 1.89 1.91 T:oceankeyakv2 1.86 1.90 1.93 T:lunarkeyakv2 2.13 2.14 2.17 T:norx6441v2 2.14 2.16 2.18 T:norx6441v3 2.15 2.18 2.19 T:norx6444v3 2.29 2.32 2.33 T:seakeyakv2 2.59 2.61 2.63 T:norx6441v1 2.68 2.69 2.75 T:aes128n12t8silcv2 2.68 2.69 2.69 T:aes128n12t8silcv3 2.67 2.71 2.71 T:aes128n8t8silcv2 2.72 2.72 2.72 T:aes128n12t8clocv3 2.71 2.73 2.75 T:aes128n12t8clocv2 2.73 2.73 2.75 T:aes128n8t8clocv2 2.75 2.75 2.75 T:aes128otrsv3 3.27 3.31 3.33 T:norx6461v3 3.32 3.34 3.37 T:norx6461v2 3.47 3.48 3.50 T:norx6444v1 3.60 3.64 3.65 T:lakekeyakv2 3.65 3.68 3.71 T:norx6444v2 3.72 3.72 3.73 T:aes256otrsv3 3.70 3.73 3.75 T:lakekeyakv1 3.86 3.87 3.90 T:norx6461v1 3.98 4.00 4.03 T:norx3241v3 4.00 4.02 4.03 T:norx3241v2 4.82 4.83 4.85 T:norx3241v1 5.20 5.28 5.34 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 5.98 6.00 6.04 T:norx3261v2 6.08 6.10 6.13 T:norx3261v3 6.69 6.72 6.75 T:riverkeyakv2 7.18 7.20 7.22 T:norx3261v1 7.23 7.26 7.31 T:ascon128av11 7.28 7.33 7.36 T:ascon96v1 7.35 7.36 7.38 ascon128av12 7.76 7.81 8.00 T:ketjeminorv2 10.73 10.79 10.83 ascon128v12 10.93 10.95 11.00 T:ascon128v1 10.91 10.96 10.99 T:ascon128v11 11.77 11.83 11.88 T:aes128otrsv2 11.82 11.87 11.93 T:aes128otrsv1 12.12 12.17 12.22 T:aes128n8silcv1 12.12 12.17 12.24 T:aes128n12silcv1 12.17 12.20 12.23 T:aes128n12clocv1 12.17 12.21 12.24 T:aes128n8clocv1 13.24 13.31 13.36 T:aes128otrpv2 13.31 13.35 13.39 T:aes128otrpv1 13.31 13.42 13.74 T:oceankeyakv1 14.99 15.03 15.03 T:twine80n6t4clocv2 15.41 15.43 15.45 T:twine80n6t4clocv3 15.52 15.60 15.65 T:aes256otrsv2 15.59 15.63 15.65 T:aes256otrsv1 17.24 17.31 17.35 T:aes256otrpv1 17.30 17.38 17.42 T:aes256otrpv2 26.11 26.14 26.16 T:proest256otrv1 28.30 28.36 28.42 T:riverkeyakv1 30.43 31.19 31.21 T:ketjesrv1 31.43 31.50 31.55 T:ketjesrv2 50.57 50.65 50.72 T:ketjejrv1 52.52 52.60 52.69 T:aezv1 59.81 59.85 59.89 T:proest128otrv1 59.95 60.04 60.77 T:twine80n6clocv1 71.21 71.39 71.78 T:seakeyakv1 75.00 75.03 75.08 T:present80n6t4silcv3 77.71 77.81 77.89 T:deoxyseq128128v13 77.92 78.03 78.09 T:deoxysneq128128v13 87.60 87.71 87.93 T:ketjejrv2 112.35 112.43 112.55 T:deoxyseq256128v13 128.62 128.73 128.93 T:deoxysneq256128v13 130.31 130.36 130.40 T:led80n6t4silcv3 292.30 292.41 292.48 aes256gcmv1 329.57 338.58 349.48 T:acorn128v3 342.17 346.58 366.26 T:acorn128 362.04 362.12 362.18 T:acorn128v2 1579.85 1580.12 1580.76 T:led80n6silcv1 1581.93 1582.27 1582.51 T:led80n6t4silcv2 2206.29 2206.74 2207.25 T:present80n6silcv1 2206.83 2207.32 2208.30 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.29 0.29 0.29 T:tiaoxinv1 0.29 0.29 0.30 T:tiaoxinv2 0.32 0.32 0.33 T:aegis128l 0.32 0.33 0.34 aegis128l 0.50 0.50 0.50 aegis256 0.52 0.52 0.53 T:aezv4 0.52 0.52 0.52 T:aezv5 0.52 0.53 0.53 T:aezv3 0.52 0.53 0.53 T:aegis128 0.77 0.77 0.78 T:aes128otrpv3 0.78 0.78 0.78 T:morus1280256v1 0.77 0.78 0.78 T:morus1280128v1 0.79 0.79 0.80 T:morus1280128v2 0.79 0.79 0.80 T:morus1280256v2 0.79 0.79 0.81 T:aeadaes128ocbtaglen128v1 0.86 0.86 0.86 T:aes128otrcv3 0.92 0.92 0.98 T:aeadaes192ocbtaglen128v1 1.06 1.06 1.08 T:deoxysneq128128v1 1.07 1.07 1.07 T:aes256otrpv3 1.07 1.07 1.08 T:deoxysi128v141 1.07? 1.09? 1.29? T:aeadaes256ocbtaglen128v1 1.15 1.15 1.16 T:aes256otrcv3 1.16 1.16 1.17 T:deoxysneq256128v1 1.19 1.20 1.20 T:morus640128v1 1.20 1.21 1.22 T:morus640128v2 1.23 1.24 1.27 T:deoxysi256v141 1.26 1.26 1.27 T:colm0v1 1.52 1.52 1.53 T:deoxysii128v141 1.52 1.53 1.54 T:deoxyseq128128v1 1.65 1.66 1.67 T:aes128gcmv1 1.75 1.75 1.76 T:deoxysii256v141 1.75 1.75 1.76 T:deoxyseq256128v1 1.78 1.78 1.81 T:aes256gcmv1 1.81 1.81 1.82 T:aes128otrsv3 2.26 2.27 2.28 T:norx6444v3 2.46 2.47 2.47 T:aes256otrsv3 2.50 2.51 2.51 T:norx6441v2 2.53 2.54 2.54 T:norx6441v3 2.83 2.83 2.83 T:aes128n12t8clocv3 2.83 2.83 2.84 T:aes128n8t8clocv2 2.83 2.83 2.84 T:aes128n12t8clocv2 2.85 2.85 2.85 T:aes128n12t8silcv3 2.85 2.85 2.85 T:aes128n12t8silcv2 2.85 2.85 2.85 T:aes128n8t8silcv2 2.90 2.92 2.94 T:norx6441v1 3.46 3.47 3.48 T:seakeyakv2 3.80 3.82 3.82 T:norx6461v3 3.83 3.84 3.86 T:norx6461v2 4.31 4.32 4.32 T:norx3241v2 4.31 4.33 4.34 T:norx3241v3 4.39 4.41 4.42 T:lakekeyakv2 4.41 4.43 4.45 T:norx6461v1 4.60 4.61 4.62 T:lakekeyakv1 4.67 4.70 4.72 T:oceankeyakv2 4.95 4.97 4.99 T:norx6444v1 5.09 5.10 5.13 T:norx3241v1 5.32 5.34 5.37 T:norx6444v2 5.94 5.94 5.95 T:aesjambuv1 6.50 6.52 6.55 T:norx3261v3 6.54 6.57 6.59 T:norx3261v2 7.49 7.51 7.52 T:riverkeyakv2 7.59 7.61 7.64 T:ascon128av11 7.61 7.63 7.65 ascon128av12 7.62 7.63 7.66 T:norx3261v1 7.60 7.65 7.67 T:ascon96v1 8.00 8.02 8.04 T:lunarkeyakv2 9.09 9.11 9.18 T:ketjemajorv2 9.70 9.74 9.84 T:ketjeminorv2 11.06 11.07 11.09 ascon128v12 11.07 11.09 11.12 T:ascon128v1 11.10 11.11 11.11 T:ascon128v11 13.55 13.59 13.64 T:aes128otrsv2 13.62 13.64 13.66 T:aes128otrsv1 14.19 14.21 14.22 T:aes128otrpv1 14.17 14.22 14.24 T:aes128otrpv2 15.64 15.65 15.66 T:twine80n6t4clocv2 15.98 15.99 16.00 T:twine80n6t4clocv3 17.44 17.47 17.51 T:aes256otrsv1 17.44 17.49 17.50 T:aes256otrsv2 17.81 17.83 17.85 T:aes128n12clocv1 17.91 17.93 17.96 T:aes128n8clocv1 18.31 18.33 18.34 T:aes256otrpv1 18.37 18.38 18.41 T:aes256otrpv2 18.53 18.54 18.57 T:aes128n12silcv1 18.53 18.56 18.57 T:aes128n8silcv1 20.78 20.84 20.97 T:oceankeyakv1 28.37 28.40 28.41 T:proest256otrv1 31.18 31.21 31.25 T:riverkeyakv1 33.16 33.41 33.73 T:ketjesrv1 35.46 35.47 35.59 T:ketjesrv2 56.00 56.33 56.66 T:ketjejrv1 63.56 63.57 63.61 T:proest128otrv1 76.00 76.01 76.05 T:present80n6t4silcv3 78.44 78.47 78.51 T:deoxysneq128128v13 86.52 86.64 86.72 T:seakeyakv1 91.03 91.13 92.04 T:twine80n6clocv1 92.05 92.11 95.41 T:ketjejrv2 105.97 106.04 106.14 T:aezv1 119.09 119.14 119.75 T:deoxyseq128128v13 129.63 129.70 129.79 T:deoxysneq256128v13 131.66 131.70 131.73 T:led80n6t4silcv3 171.58 171.76 172.29 T:deoxyseq256128v13 300.39 300.53 300.65 aes256gcmv1 378.71 385.22 393.88 T:acorn128v3 415.09 415.72 416.08 T:acorn128 406.98 416.94 417.01 T:acorn128v2 2382.37 2382.56 2382.81 T:led80n6silcv1 2385.32 2385.61 2385.86 T:led80n6t4silcv2 3327.52 3327.73 3327.99 T:present80n6silcv1 3327.68 3327.86 3328.60 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.31 0.32 0.33 T:aegis128l 0.33 0.34 0.35 aegis128l 0.36 0.37 0.37 T:tiaoxinv1 0.36 0.37 0.37 T:tiaoxinv2 0.49 0.50 0.51 aegis256 0.51 0.51 0.52 T:aegis128 0.51 0.51 0.52 T:aezv4 0.51 0.51 0.52 T:aezv5 0.52 0.52 0.52 T:aezv3 0.80 0.80 0.81 T:morus1280256v1 0.80 0.80 0.81 T:morus1280128v1 0.80 0.80 0.81 T:aes128otrpv3 0.80 0.80 0.81 T:aeadaes128ocbtaglen128v1 0.81 0.81 0.82 T:morus1280256v2 0.81 0.81 0.82 T:morus1280128v2 0.89 0.89 0.89 T:aes128otrcv3 0.92? 0.93? 1.14? T:aeadaes192ocbtaglen128v1 1.08? 1.08? 1.29? T:aeadaes256ocbtaglen128v1 1.08 1.09 1.09 T:aes256otrpv3 1.19 1.20 1.20 T:aes256otrcv3 1.20 1.21 1.22 T:morus640128v1 1.21 1.22 1.23 T:morus640128v2 1.25 1.25 1.28 T:deoxysi128v141 1.27 1.27 1.27 T:deoxysneq128128v1 1.32 1.32 1.34 T:colm0v1 1.36 1.36 1.37 T:deoxysneq256128v1 1.42 1.42 1.43 T:deoxysi256v141 1.56 1.56 1.61 T:deoxysii128v141 1.64 1.64 1.66 T:aes128gcmv1 1.76 1.78 1.79 T:aes256gcmv1 1.81 1.81 1.82 T:deoxysii256v141 1.84 1.85 1.86 T:aes128otrsv3 1.91 1.91 1.92 T:deoxyseq128128v1 2.10 2.10 2.10 T:deoxyseq256128v1 2.26 2.27 2.28 T:norx6444v3 2.45 2.45 2.47 T:norx6441v2 2.44 2.46 2.47 T:norx6441v3 2.49 2.49 2.51 T:aes256otrsv3 2.80 2.81 2.83 T:aes128n12t8clocv3 2.82 2.83 2.84 T:aes128n12t8clocv2 2.82 2.83 2.83 T:aes128n8t8clocv2 2.82 2.84 2.85 T:aes128n8t8silcv2 2.82 2.84 2.86 T:aes128n12t8silcv3 2.84 2.85 2.86 T:aes128n12t8silcv2 2.87 2.88 2.89 T:norx6441v1 3.49 3.50 3.51 T:seakeyakv2 3.73 3.75 3.76 T:norx6461v3 3.78 3.78 3.79 T:norx6461v2 4.22 4.23 4.26 T:norx3241v3 4.24 4.25 4.27 T:norx3241v2 4.33 4.35 4.37 T:norx6461v1 4.42 4.44 4.45 T:lakekeyakv2 4.62 4.63 4.64 T:lakekeyakv1 4.72 4.74 4.80 T:oceankeyakv2 4.95 4.97 5.06 T:norx6444v1 4.97 4.98 4.99 T:norx3241v1 5.30 5.32 5.33 T:norx6444v2 6.04 6.04 6.04 T:aesjambuv1 6.44 6.47 6.48 T:norx3261v3 6.46 6.47 6.50 T:norx3261v2 7.55 7.55 7.57 T:norx3261v1 7.56 7.57 7.58 T:riverkeyakv2 7.59 7.60 7.62 ascon128av12 7.56 7.61 7.72 T:ascon128av11 7.64 7.66 7.68 T:ascon96v1 8.07 8.09 8.10 T:lunarkeyakv2 9.12 9.17 9.25 T:ketjemajorv2 9.81 9.83 9.90 T:ketjeminorv2 10.93 10.94 10.96 T:ascon128v1 10.92 10.95 11.02 T:ascon128v11 11.05 11.08 11.09 ascon128v12 13.78 13.83 13.85 T:aes128otrsv2 13.84 13.85 13.87 T:aes128otrsv1 14.40 14.41 14.43 T:aes128otrpv1 14.37 14.41 14.47 T:aes128otrpv2 15.66 15.67 15.67 T:twine80n6t4clocv2 15.96 15.97 15.98 T:twine80n6t4clocv3 17.35 17.38 17.40 T:aes128n12clocv1 17.63 17.65 17.68 T:aes128n8clocv1 17.71 17.72 17.75 T:aes256otrsv2 17.72 17.74 17.81 T:aes256otrsv1 18.49 18.51 18.53 T:aes128n8silcv1 18.52 18.54 18.57 T:aes128n12silcv1 18.52 18.55 18.57 T:aes256otrpv1 18.58 18.60 18.63 T:aes256otrpv2 20.88 20.94 21.04 T:oceankeyakv1 28.38 28.40 28.44 T:proest256otrv1 31.26 31.29 31.36 T:riverkeyakv1 33.70 33.77 33.84 T:ketjesrv1 35.62 35.69 35.76 T:ketjesrv2 56.16 56.18 56.54 T:ketjejrv1 62.64 62.67 62.68 T:proest128otrv1 76.29 76.30 76.33 T:present80n6t4silcv3 86.90 87.12 87.34 T:seakeyakv1 89.93 90.03 90.18 T:ketjejrv2 90.93 90.98 91.92 T:twine80n6clocv1 92.20 92.23 92.30 T:deoxysneq128128v13 106.27 106.39 106.61 T:aezv1 119.31 119.51 119.73 T:deoxyseq128128v13 132.23 132.26 132.28 T:led80n6t4silcv3 144.82 144.96 145.10 T:deoxysneq256128v13 171.74 171.97 172.12 T:deoxyseq256128v13 300.51 300.62 300.73 aes256gcmv1 375.82 381.38 390.13 T:acorn128v3 397.97 401.18 415.69 T:acorn128 416.15 416.45 416.49 T:acorn128v2 2382.86 2383.13 2383.34 T:led80n6silcv1 2385.62 2385.92 2386.33 T:led80n6t4silcv2 3327.39 3327.60 3328.41 T:present80n6silcv1 3327.55 3327.92 3328.78 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.31 0.32 0.32 T:aegis128l 0.31 0.32 0.32 T:aezv4 0.32 0.32 0.32 T:aezv5 0.32 0.33 0.33 T:aezv3 0.33 0.35 0.36 aegis128l 0.36 0.36 0.37 T:tiaoxinv2 0.36 0.36 0.38 T:tiaoxinv1 0.51 0.51 0.52 T:aegis128 0.51 0.52 0.52 aegis256 0.80 0.80 0.80 T:morus1280128v1 0.80 0.80 0.80 T:aes128otrpv3 0.80 0.80 0.80 T:aeadaes128ocbtaglen128v1 0.80 0.80 0.80 T:morus1280256v1 0.81 0.81 0.81 T:morus1280256v2 0.81 0.81 0.82 T:morus1280128v2 0.89 0.89 0.89 T:aes128otrcv3 0.92 0.92 0.93 T:aeadaes192ocbtaglen128v1 1.08 1.08 1.08 T:aeadaes256ocbtaglen128v1 1.08 1.08 1.09 T:aes256otrpv3 1.19 1.19 1.20 T:aes256otrcv3 1.19 1.20 1.21 T:morus640128v1 1.22 1.22 1.22 T:morus640128v2 1.25 1.25 1.26 T:deoxysi128v141 1.26 1.27 1.27 T:deoxysneq128128v1 1.33 1.33 1.34 T:colm0v1 1.35 1.36 1.37 T:deoxysneq256128v1 1.42 1.42 1.42 T:deoxysi256v141 1.56 1.57 1.58 T:deoxysii128v141 1.63 1.64 1.65 T:aes128gcmv1 1.76 1.77 1.79 T:aes256gcmv1 1.81 1.81 1.81 T:deoxysii256v141 1.84 1.84 1.84 T:aes128otrsv3 1.91 1.91 1.92 T:deoxyseq128128v1 2.10 2.10 2.11 T:deoxyseq256128v1 2.26 2.27 2.28 T:norx6444v3 2.44 2.46 2.48 T:norx6441v2 2.45 2.46 2.48 T:norx6441v3 2.48 2.49 2.49 T:aes256otrsv3 2.80 2.82 2.83 T:aes128n12t8clocv3 2.82 2.83 2.83 T:aes128n12t8clocv2 2.82 2.83 2.84 T:aes128n8t8clocv2 2.83 2.83 2.85 T:aes128n8t8silcv2 2.83 2.84 2.85 T:aes128n12t8silcv2 2.83 2.85 2.85 T:aes128n12t8silcv3 2.87 2.88 2.88 T:norx6441v1 3.51 3.51 3.54 T:seakeyakv2 3.75 3.76 3.77 T:norx6461v3 3.76 3.79 3.79 T:norx6461v2 4.21 4.22 4.24 T:norx3241v2 4.24 4.24 4.27 T:norx3241v3 4.33 4.34 4.35 T:norx6461v1 4.44 4.45 4.47 T:lakekeyakv2 4.63 4.64 4.65 T:lakekeyakv1 4.72 4.74 4.76 T:oceankeyakv2 4.96 4.98 5.07 T:norx6444v1 4.97 4.99 5.00 T:norx3241v1 5.32 5.33 5.34 T:norx6444v2 6.03 6.03 6.04 T:aesjambuv1 6.45 6.47 6.48 T:norx3261v3 6.45 6.48 6.49 T:norx3261v2 7.55 7.56 7.57 T:norx3261v1 7.57 7.58 7.67 T:ascon128av11 7.58 7.59 7.60 T:riverkeyakv2 7.58 7.59 7.60 ascon128av12 7.63 7.65 7.66 T:ascon96v1 8.09 8.10 8.12 T:lunarkeyakv2 9.09 9.13 9.18 T:ketjemajorv2 9.85 9.89 9.96 T:ketjeminorv2 10.92 10.93 10.94 T:ascon128v1 10.92 10.95 10.99 T:ascon128v11 11.05 11.07 11.08 ascon128v12 13.82 13.84 13.85 T:aes128otrsv2 13.84 13.86 13.88 T:aes128otrsv1 14.40 14.43 14.44 T:aes128otrpv2 14.41 14.43 14.45 T:aes128otrpv1 15.66 15.67 15.68 T:twine80n6t4clocv2 15.95 15.96 15.97 T:twine80n6t4clocv3 17.37 17.38 17.40 T:aes128n12clocv1 17.62 17.64 17.68 T:aes128n8clocv1 17.73 17.74 17.77 T:aes256otrsv2 17.72 17.75 17.78 T:aes256otrsv1 18.52 18.53 18.55 T:aes128n8silcv1 18.51 18.54 18.57 T:aes128n12silcv1 18.55 18.57 18.60 T:aes256otrpv1 18.57 18.60 18.63 T:aes256otrpv2 20.86 20.93 21.10 T:oceankeyakv1 28.37 28.38 28.40 T:proest256otrv1 31.28 31.32 31.37 T:riverkeyakv1 33.71 33.89 34.18 T:ketjesrv1 35.72 35.75 35.79 T:ketjesrv2 56.01 56.23 56.54 T:ketjejrv1 62.63 62.64 62.67 T:proest128otrv1 76.31 76.33 76.34 T:present80n6t4silcv3 87.10 87.33 87.51 T:seakeyakv1 90.03 90.08 90.22 T:ketjejrv2 90.91 91.00 91.93 T:twine80n6clocv1 92.28 92.34 92.38 T:deoxysneq128128v13 106.09 106.14 106.19 T:aezv1 119.40 119.56 119.96 T:deoxyseq128128v13 132.20 132.23 132.25 T:led80n6t4silcv3 144.92 144.95 145.18 T:deoxysneq256128v13 171.76 171.85 172.05 T:deoxyseq256128v13 294.03 294.08 294.12 aes256gcmv1 375.79 381.28 390.11 T:acorn128v3 401.07 401.12 415.70 T:acorn128 415.94 416.44 416.49 T:acorn128v2 2382.84 2383.00 2383.16 T:led80n6silcv1 2385.50 2385.73 2386.15 T:led80n6t4silcv2 3327.51 3327.63 3327.81 T:present80n6silcv1 3327.56 3327.87 3329.70 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.77 1.78 1.79 T:aegis128 1.79 1.80 1.86 T:aegis128l 1.79? 1.91? 2.24? aegis128l 2.12 2.13 2.17 aegis256 2.28? 2.30? 2.62? T:aezv5 2.30? 2.31? 2.77? T:aezv4 2.34? 2.35? 2.66? T:tiaoxinv2 2.34? 2.36? 2.70? T:tiaoxinv1 2.38? 2.55? 2.80? T:aezv3 3.69 3.73 3.75 T:aes128otrpv3 4.01 4.02 4.29 T:deoxysneq128128v1 4.25 4.27 4.29 T:aes128otrsv3 4.20 4.29 4.37 T:morus640128v1 4.36 4.39 4.67 T:morus1280128v1 4.34 4.41 4.67 T:morus1280256v1 4.50 4.52 4.99 T:colm0v1 4.66 4.66 4.73 T:morus1280256v2 4.60 4.67 4.77 T:morus640128v2 4.68 4.77 4.91 T:morus1280128v2 4.77 4.81 4.92 T:aes256otrpv3 4.79 4.82 4.97 T:deoxysneq256128v1 4.85? 4.92? 7.45? T:aeadaes128ocbtaglen128v1 4.98 4.99 5.01 T:aes128n12t8clocv3 5.08 5.13 5.23 T:aes128otrcv3 5.01 5.14 5.20 T:aes128n12t8clocv2 5.02 5.20 5.22 T:aes128n8t8clocv2 5.30 5.34 5.45 T:deoxysi128v141 5.48 5.50 5.72 T:aes256otrsv3 5.23? 5.68? 10.80? T:aeadaes192ocbtaglen128v1 5.83 5.84 5.84 T:aes128n12t8silcv2 5.84 5.84 5.85 T:aes128n12t8silcv3 5.84 5.86 5.87 T:aes128n8t8silcv2 5.77? 6.18? 11.10? T:aeadaes256ocbtaglen128v1 6.34 6.42 6.52 T:deoxysi256v141 6.49 6.57 6.62 T:aes256otrcv3 6.60 6.62 6.78 T:deoxyseq128128v1 8.41 8.48 8.77 T:norx6441v2 8.44 8.50 8.69 T:deoxysii128v141 8.52 8.59 8.66 T:norx6441v1 8.42 8.63 8.74 T:norx6441v3 9.10 9.16 9.38 T:deoxyseq256128v1 9.27 9.30 9.33 T:aesjambuv1 9.99 10.04 10.16 T:deoxysii256v141 10.65 10.75 10.82 T:norx3241v1 10.75 10.84 10.88 T:norx3241v3 10.84 10.91 10.98 T:norx3241v2 11.51 11.68 12.03 T:ascon128av11 11.59 11.82 11.88 T:ascon96v1 11.86 12.12 12.47 ascon128av12 12.37 12.55 12.73 T:norx6461v3 12.43 12.59 12.74 T:norx6461v2 12.57 12.63 12.73 T:norx6461v1 14.69 14.83 15.19 T:norx6444v3 15.04 15.20 15.63 T:ascon128v11 14.99 15.23 15.66 ascon128v12 15.06 15.31 15.80 T:ascon128v1 15.58 15.68 15.87 T:lakekeyakv1 15.98 16.11 16.15 T:norx3261v2 16.11 16.18 16.29 T:norx3261v3 16.20 16.27 16.38 T:norx3261v1 17.79 17.87 18.27 T:riverkeyakv2 19.51 19.62 19.80 T:lakekeyakv2 22.47 22.59 22.70 T:aes128n12clocv1 22.45 22.73 23.02 T:aes128n8clocv1 23.14 23.49 24.06 T:aes128otrsv2 23.49 23.53 23.58 T:twine80n6t4clocv3 23.47 23.69 24.28 T:aes128otrpv1 23.88 23.89 23.93 T:twine80n6t4clocv2 22.96 23.96 24.20 T:aes128otrsv1 24.21 24.30 24.60 T:aes128otrpv2 25.70 25.82 26.37 T:aes128n8silcv1 25.87 25.96 26.30 T:aes128n12silcv1 28.09 28.22 28.45 T:aes128gcmv1 28.72 28.91 29.20 T:aes256gcmv1 29.59 29.71 30.08 T:aes256otrsv2 29.45 29.74 30.00 T:aes256otrsv1 30.12 30.44 31.12 T:aes256otrpv1 31.20 31.30 31.44 T:aes256otrpv2 31.88 31.98 32.12 T:seakeyakv2 35.02 35.19 35.36 T:norx6444v1 37.14 37.32 37.62 T:ketjeminorv2 37.36 37.48 37.62 T:norx6444v2 53.01 53.57 54.41 T:oceankeyakv2 55.63 55.83 56.17 T:ketjesrv1 55.88 56.12 56.61 T:riverkeyakv1 63.51 64.20 64.58 T:ketjesrv2 64.39 64.66 65.38 T:ketjemajorv2 74.68 74.81 75.07 T:ketjejrv1 82.22 82.41 82.59 T:proest256otrv1 88.55 88.68 88.98 T:deoxysneq128128v13 94.21 94.43 94.62 T:present80n6t4silcv3 102.25 102.77 102.89 T:twine80n6clocv1 117.58 117.75 118.15 T:aezv1 122.16 122.22 122.49 T:proest128otrv1 123.77 124.66 128.26 T:ketjejrv2 131.22 131.49 132.23 T:lunarkeyakv2 146.02 146.35 146.80 T:deoxysneq256128v13 149.12 150.22 152.12 T:deoxyseq128128v13 156.77 156.95 157.18 T:led80n6t4silcv3 214.52 214.68 215.05 T:deoxyseq256128v13 226.23 227.02 229.12 T:oceankeyakv1 339.16 339.45 339.62 aes256gcmv1 634.39 635.96 640.34 T:seakeyakv1 1337.84 1358.98 1389.00 T:acorn128v3 1437.76 1438.11 1438.51 T:acorn128 1423.52 1455.95 1456.27 T:acorn128v2 2668.89 2669.54 2670.66 T:led80n6silcv1 2671.15 2671.58 2672.03 T:led80n6t4silcv2 3727.01 3727.93 3728.52 T:present80n6silcv1 3727.45 3728.37 3728.68 T:present80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.79? 1.80? 2.07? T:aegis128l 1.96 1.98 1.98 T:aegis128 2.07? 2.20? 2.45? aegis128l 2.28? 2.29? 2.66? T:aezv5 2.28 2.30 2.34 T:aezv4 2.32 2.34 2.37 aegis256 2.38? 2.38? 2.95? T:tiaoxinv1 2.37 2.38 2.45 T:tiaoxinv2 2.38 2.39 2.45 T:aezv3 3.88 3.88 3.93 T:aes128otrpv3 4.41 4.44 4.55 T:morus640128v1 4.51 4.52 4.54 T:aes128otrsv3 4.77 4.84 5.21 T:morus1280256v1 4.86 4.88 4.91 T:morus1280128v1 4.82 4.90 4.98 T:morus640128v2 4.91 4.95 5.02 T:aes256otrpv3 5.02 5.02 5.04 T:aes128n12t8clocv3 5.05 5.10 5.28 T:morus1280256v2 5.08 5.16 5.28 T:morus1280128v2 5.02 5.17 5.27 T:aes128n12t8clocv2 5.03 5.22 5.24 T:aes128n8t8clocv2 5.26? 5.27? 7.88? T:aeadaes128ocbtaglen128v1 5.26 5.27 5.29 T:aes128otrcv3 5.27 5.29 5.62 T:colm0v1 5.56? 5.62? 8.09? T:aeadaes192ocbtaglen128v1 5.77 5.80 6.07 T:deoxysneq256128v1 5.81 5.87 5.95 T:aes256otrsv3 5.84? 5.92? 11.01? T:aeadaes256ocbtaglen128v1 5.91 5.92 5.93 T:aes128n12t8silcv3 5.91 5.92 5.98 T:aes128n12t8silcv2 5.93 5.95 6.35 T:aes128n8t8silcv2 6.16 6.19 6.34 T:deoxysneq128128v1 6.87 6.90 6.91 T:aes256otrcv3 6.86 7.02 7.27 T:deoxysi128v141 7.97 8.03 8.10 T:deoxysi256v141 8.70 8.74 8.77 T:norx6441v1 8.71 8.77 9.08 T:norx6441v2 8.61 8.81 9.01 T:norx6441v3 9.20 9.23 9.37 T:deoxyseq128128v1 9.39 9.45 9.50 T:deoxysii128v141 9.48 9.48 9.50 T:aesjambuv1 10.82 10.90 10.98 T:norx3241v1 10.87 10.91 11.03 T:deoxyseq256128v1 10.90 10.98 11.05 T:norx3241v3 10.91 11.02 11.09 T:norx3241v2 11.44 11.50 11.58 T:deoxysii256v141 11.55 11.65 11.77 T:ascon96v1 11.62 11.80 11.94 T:ascon128av11 11.93 12.19 12.78 ascon128av12 12.77 12.80 12.99 T:norx6461v1 12.69 12.83 13.03 T:norx6461v3 12.93 12.98 13.10 T:norx6461v2 14.80 14.93 15.07 T:norx6444v3 14.86 15.09 15.41 T:ascon128v1 15.04 15.21 15.74 ascon128v12 15.11 15.30 15.66 T:ascon128v11 15.49 15.72 15.91 T:lakekeyakv1 16.24 16.27 16.35 T:norx3261v2 16.30 16.39 16.53 T:norx3261v3 16.38 16.44 16.52 T:norx3261v1 17.83 17.89 18.12 T:riverkeyakv2 19.45 19.50 19.82 T:lakekeyakv2 22.38 22.42 22.53 T:aes128n12clocv1 22.32 22.48 22.84 T:aes128n8clocv1 23.47 23.52 23.59 T:twine80n6t4clocv3 23.41 23.66 24.48 T:aes128otrsv2 23.55 23.75 24.35 T:aes128otrsv1 23.96 23.99 24.06 T:twine80n6t4clocv2 23.98 24.41 24.95 T:aes128otrpv1 24.90 25.04 25.15 T:aes128otrpv2 25.96 26.23 26.48 T:aes128n8silcv1 26.08 26.60 26.84 T:aes128n12silcv1 27.95 28.14 29.16 T:aes128gcmv1 28.27 28.45 28.91 T:aes256gcmv1 29.86 30.04 30.27 T:aes256otrsv1 29.90 30.09 30.53 T:aes256otrsv2 30.70 30.85 30.97 T:aes256otrpv1 31.85 31.90 32.34 T:aes256otrpv2 31.99 32.25 32.75 T:seakeyakv2 35.44 35.58 36.91 T:norx6444v1 36.61 36.98 37.30 T:ketjeminorv2 37.59 37.86 38.02 T:norx6444v2 53.18 53.54 53.97 T:oceankeyakv2 55.98 56.27 56.54 T:riverkeyakv1 56.28 56.68 57.51 T:ketjesrv1 63.68 64.17 64.38 T:ketjesrv2 64.62 65.16 65.63 T:ketjemajorv2 74.49 74.65 76.25 T:ketjejrv1 83.16 83.43 83.75 T:proest256otrv1 95.66 95.95 96.07 T:present80n6t4silcv3 102.23 102.64 103.12 T:deoxysneq128128v13 102.23 102.68 103.01 T:twine80n6clocv1 121.09 121.27 121.48 T:aezv1 121.66 122.58 125.07 T:proest128otrv1 122.51 123.11 123.27 T:ketjejrv2 131.70 132.40 132.77 T:lunarkeyakv2 149.45 150.81 151.68 T:deoxyseq128128v13 158.43 158.62 158.82 T:led80n6t4silcv3 161.47 161.88 162.57 T:deoxysneq256128v13 215.70 216.12 216.62 T:deoxyseq256128v13 226.43 227.55 228.48 T:oceankeyakv1 339.75 340.09 340.24 aes256gcmv1 635.83 637.05 639.34 T:seakeyakv1 1334.52 1357.58 1385.04 T:acorn128v3 1378.38 1379.07 1437.19 T:acorn128 1453.85 1454.10 1454.59 T:acorn128v2 2669.64 2670.57 2670.94 T:led80n6silcv1 2671.82 2672.18 2672.55 T:led80n6t4silcv2 3726.71 3727.16 3729.21 T:present80n6t4silcv2 3727.39 3728.23 3729.43 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.80 1.80 1.80 T:aegis128l 1.95? 1.95? 2.30? T:aezv4 1.95 1.97 1.98 T:aezv5 1.95 1.98 1.98 T:aegis128 2.04? 2.05? 2.36? T:aezv3 2.01? 2.34? 2.46? aegis128l 2.34 2.35 2.52 T:tiaoxinv1 2.36 2.37 2.60 T:tiaoxinv2 2.36? 2.37? 2.73? aegis256 3.88 3.90 3.91 T:aes128otrpv3 4.38 4.41 4.51 T:morus640128v1 4.50 4.52 4.53 T:aes128otrsv3 4.79 4.82 4.87 T:morus1280256v1 4.82 4.83 4.91 T:morus1280128v1 4.77 4.87 4.95 T:morus640128v2 4.89 4.93 4.99 T:aes256otrpv3 4.95 5.00 5.29 T:aes128n8t8clocv2 4.98 5.00 5.04 T:aes128n12t8clocv3 5.06 5.09 5.10 T:morus1280256v2 5.08 5.11 5.16 T:morus1280128v2 4.97 5.16 5.20 T:aes128n12t8clocv2 5.21 5.23 5.35 T:aeadaes128ocbtaglen128v1 5.26 5.29 5.30 T:aes128otrcv3 5.31 5.34 5.62 T:colm0v1 5.52? 5.57? 10.91? T:aeadaes192ocbtaglen128v1 5.63 5.65 6.07 T:deoxysneq256128v1 5.84 5.84 5.88 T:aes128n12t8silcv3 5.83 5.85 5.86 T:aes128n12t8silcv2 5.84 5.85 5.88 T:aes128n8t8silcv2 5.84 5.88 5.92 T:aeadaes256ocbtaglen128v1 5.77 5.89 5.93 T:aes256otrsv3 6.04 6.05 6.12 T:deoxysneq128128v1 6.83 6.86 6.90 T:aes256otrcv3 6.88 6.95 7.34 T:deoxysi128v141 7.97 8.02 8.05 T:deoxysi256v141 8.64 8.69 8.79 T:norx6441v1 8.72 8.81 8.91 T:norx6441v3 8.74 8.82 8.91 T:norx6441v2 9.18 9.23 9.30 T:deoxyseq128128v1 9.37 9.41 9.45 T:deoxysii128v141 9.48 9.48 9.50 T:aesjambuv1 10.83 10.84 10.89 T:norx3241v1 10.84 10.85 10.95 T:norx3241v2 10.80 10.88 10.99 T:norx3241v3 10.93 10.99 11.07 T:deoxyseq256128v1 11.47 11.51 11.59 T:deoxysii256v141 11.52 11.66 11.84 T:ascon96v1 11.57 11.82 11.95 T:ascon128av11 11.87 11.98 12.16 ascon128av12 12.62 12.73 12.87 T:norx6461v2 12.65 12.76 12.84 T:norx6461v3 12.73 12.87 13.01 T:norx6461v1 14.77 14.87 14.95 T:norx6444v3 14.77 14.97 15.22 T:ascon128v1 14.93 15.08 15.23 T:ascon128v11 15.05 15.12 15.20 ascon128v12 15.54 15.59 15.67 T:lakekeyakv1 15.99 16.16 16.34 T:norx3261v2 16.27 16.34 16.44 T:norx3261v3 16.34 16.36 16.44 T:norx3261v1 17.88 17.98 18.10 T:riverkeyakv2 19.54 19.56 19.69 T:lakekeyakv2 22.23 22.27 22.45 T:aes128n12clocv1 22.31 22.48 22.73 T:aes128n8clocv1 23.41 23.43 23.57 T:twine80n6t4clocv3 23.47 23.55 23.74 T:aes128otrsv1 23.57 23.63 23.83 T:aes128otrsv2 23.95 23.97 23.99 T:twine80n6t4clocv2 24.38 24.60 24.70 T:aes128otrpv1 25.03 25.16 25.30 T:aes128otrpv2 25.99 26.10 26.44 T:aes128n12silcv1 25.95 26.18 26.34 T:aes128n8silcv1 27.74 27.98 28.29 T:aes128gcmv1 28.23 28.37 28.72 T:aes256gcmv1 29.92 30.09 30.39 T:aes256otrsv1 29.93 30.13 30.23 T:aes256otrsv2 30.89 31.30 31.68 T:aes256otrpv1 32.03 32.14 32.30 T:seakeyakv2 31.91 32.25 32.52 T:aes256otrpv2 35.41 35.55 36.87 T:norx6444v1 36.98 37.12 37.48 T:ketjeminorv2 37.69 37.82 38.16 T:norx6444v2 53.66 53.80 54.03 T:oceankeyakv2 55.98 56.23 56.43 T:riverkeyakv1 57.36 57.57 58.05 T:ketjesrv1 64.30 65.10 65.90 T:ketjesrv2 64.78 65.12 65.56 T:ketjemajorv2 75.89 76.27 76.48 T:ketjejrv1 81.12 81.19 81.41 T:proest256otrv1 95.39 95.57 95.68 T:present80n6t4silcv3 101.96 102.48 103.34 T:twine80n6clocv1 103.37 103.52 103.87 T:deoxysneq128128v13 120.60 120.88 120.98 T:aezv1 121.40 121.60 121.64 T:proest128otrv1 122.91 123.13 123.53 T:ketjejrv2 131.73 132.02 132.38 T:lunarkeyakv2 150.34 151.91 153.04 T:deoxyseq128128v13 158.07 158.34 158.54 T:led80n6t4silcv3 162.34 162.84 163.12 T:deoxysneq256128v13 215.90 216.07 216.27 T:deoxyseq256128v13 225.96 226.83 229.26 T:oceankeyakv1 332.96 333.26 333.70 aes256gcmv1 634.90 638.27 641.41 T:seakeyakv1 1336.04 1355.13 1385.09 T:acorn128v3 1378.34 1379.35 1436.94 T:acorn128 1454.04 1454.38 1454.72 T:acorn128v2 2669.16 2669.84 2671.29 T:led80n6silcv1 2671.80 2672.55 2674.36 T:led80n6t4silcv2 3726.80 3727.57 3728.63 T:present80n6t4silcv2 3727.35 3727.83 3728.69 T:present80n6silcv1