VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Raptor Cove (b06a2); 2023 Intel Core i7-13700H, P cores; 6 x 4800MHz; raptor, supercop-20231107

[Page version: 20240726 23:46:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.19 0.19 0.20 T:tiaoxinv1 0.18? 0.19? 0.21? T:tiaoxinv2 0.23? 0.23? 0.30? aegis128l 0.23 0.23 0.24 T:aegis128l -0.04? 0.25? 0.38? T:aeadaes192ocbtaglen128v1 0.00? 0.29? 0.39? T:aeadaes128ocbtaglen128v1 0.23? 0.36? 0.45? T:aeadaes256ocbtaglen128v1 0.34? 0.36? 0.38? T:aezv4 0.35 0.36 0.37 T:aezv3 0.37 0.38 0.39 T:aegis128 0.37 0.38 0.38 T:aegis256 0.37 0.38 0.39 aegis256 0.37 0.39 0.41 T:aezv5 0.44 0.45 0.47 T:aes128otrsv3 0.44 0.46 0.47 T:aes128otrpv3 0.45 0.47 0.50 T:aes128otrcv3 0.58 0.61 0.64 T:aes256otrsv3 0.57? 0.61? 0.64? T:aes256otrpv3 0.56? 0.62? 0.76? T:aes256otrcv3 0.65 0.66 0.67 T:morus1280256v2 0.65 0.66 0.67 T:morus1280128v2 0.65 0.67 0.67 T:morus1280256v1 0.66 0.67 0.68 T:morus1280128v1 0.65 0.67 0.69 T:deoxysi128v141 0.71 0.73 0.74 T:deoxysneq128128v1 0.69 0.74 0.76 T:deoxysi256v141 0.81 0.82 0.84 T:deoxysneq256128v1 1.10 1.13 1.15 T:norx6444v3 1.19 1.21 1.24 T:morus640128v2 1.19 1.23 1.24 T:morus640128v1 1.31 1.32 1.34 T:deoxysii128v141 1.31 1.33 1.34 T:colm0v1 1.29? 1.41? 1.52? T:lunarkeyakv2 1.40 1.41 1.42 T:deoxyseq128128v1 1.41 1.42 1.43 T:aes128gcmv1 1.47 1.49 1.50 T:deoxysii256v141 1.46 1.54 1.56 aes256gcmv1 1.64 1.65 1.68 T:deoxyseq256128v1 1.82 1.91 1.98 T:oceankeyakv2 2.06 2.08 2.10 T:norx6441v3 2.06 2.08 2.11 T:norx6441v2 2.19 2.20 2.20 T:aes128n12t8silcv3 2.19 2.20 2.20 T:aes128n8t8silcv2 2.19 2.20 2.20 T:aes128n12t8silcv2 2.20 2.20 2.21 T:aes128n8t8clocv2 2.20 2.21 2.21 T:aes128n12t8clocv2 2.20 2.21 2.21 T:aes128n12t8clocv3 2.39 2.44 2.46 T:norx6441v1 2.57 2.61 2.70 T:seakeyakv2 2.64 2.67 2.74 T:lakekeyakv1 2.72 2.74 2.79 T:norx6444v2 2.83 2.92 2.98 T:lakekeyakv2 3.07 3.09 3.11 T:norx6461v2 3.07 3.09 3.11 T:norx6461v3 3.16 3.22 3.25 T:norx6444v1 3.59 3.61 3.64 T:norx3241v3 3.61 3.64 3.65 T:norx3241v2 3.70 3.72 3.74 T:norx6461v1 4.38 4.40 4.42 T:norx3241v1 4.44 4.45 4.46 T:aesjambuv1 4.50? 4.76? 5.54? T:acorn128v2 4.72 4.81 4.91 T:ketjemajorv2 4.85 4.93 4.96 T:acorn128v3 5.49 5.51 5.55 T:norx3261v3 5.56 5.60 5.62 T:norx3261v2 6.45 6.51 6.59 ascon128av12 6.59 6.63 6.66 T:ascon96v1 6.39 6.64 6.77 T:ketjeminorv2 6.67 6.70 6.73 T:ascon128av11 6.79 6.94 7.02 T:riverkeyakv2 7.50 7.52 7.53 T:norx3261v1 9.90 9.93 9.96 T:ascon128v11 9.90 9.94 9.96 T:ascon128v1 9.95 9.99 10.02 ascon128v12 11.65 11.69 11.73 T:aes128otrsv2 11.66 11.71 11.72 T:aes128otrsv1 11.70 11.74 11.76 T:aes128otrpv1 11.73 11.77 11.80 T:aes128otrpv2 12.59 12.68 12.78 T:seakeyakv1 11.90? 13.41? 13.97? T:oceankeyakv1 14.99 15.07 15.09 T:aes256otrsv2 15.05 15.08 15.12 T:aes256otrsv1 15.42 15.44 15.48 T:aes256otrpv2 15.41 15.45 15.50 T:aes256otrpv1 16.27 16.34 16.39 T:twine80n6t4clocv2 16.46 16.50 16.57 T:twine80n6t4clocv3 16.77 16.93 17.00 T:proest256otrv1 20.18 20.23 20.28 T:aes128n12silcv1 20.19 20.25 20.28 T:aes128n8silcv1 20.93 20.96 20.99 T:aes128n12clocv1 20.92 20.97 21.01 T:aes128n8clocv1 23.63 23.75 24.17 T:ketjesrv1 26.56 26.90 26.96 T:ketjesrv2 27.37 27.59 27.70 T:riverkeyakv1 38.12 38.22 38.32 T:ketjejrv1 41.30 41.66 41.81 T:proest128otrv1 58.41 59.24 59.48 T:deoxysneq128128v13 61.49 61.67 61.91 T:ketjejrv2 76.64 76.69 76.82 T:present80n6t4silcv3 84.80 84.86 87.25 T:deoxysneq256128v13 86.24? 89.86? 106.58? T:twine80n6clocv1 116.02 116.94 117.86 T:deoxyseq128128v13 125.13 127.21 128.15 T:led80n6t4silcv3 135.49 135.86 137.51 T:aezv1 171.00 171.12 171.31 T:deoxyseq256128v13 395.17 398.12 400.99 T:acorn128 3037.02 3040.48 3044.65 T:led80n6silcv1 3047.69 3049.23 3052.14 T:led80n6t4silcv2 3283.91 3287.93 3300.93 T:present80n6t4silcv2 3365.37 3372.47 3375.60 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.21? 0.23? 0.24? T:aegis128l 0.22? 0.24? 0.27? aegis128l 0.19? 0.30? 0.38? T:aeadaes128ocbtaglen128v1 0.26? 0.35? 0.45? T:aeadaes256ocbtaglen128v1 0.31? 0.36? 0.40? T:aezv3 0.35 0.36 0.37 T:aezv4 0.38 0.39 0.39 T:aegis256 0.38 0.39 0.40 T:aezv5 0.39 0.40 0.40 T:aegis128 0.39 0.40 0.42 aegis256 0.32? 0.42? 0.48? T:aeadaes192ocbtaglen128v1 0.43 0.44 0.45 T:tiaoxinv1 0.44 0.45 0.46 T:tiaoxinv2 0.49 0.50 0.52 T:aes128otrcv3 0.48? 0.52? 0.54? T:aes128otrpv3 0.50 0.52 0.53 T:aes128otrsv3 0.60? 0.65? 0.68? T:aes256otrsv3 0.61? 0.66? 0.68? T:aes256otrcv3 0.64 0.66 0.68 T:aes256otrpv3 0.66 0.67 0.68 T:morus1280256v2 0.66 0.67 0.68 T:morus1280128v2 0.67 0.68 0.69 T:morus1280128v1 0.67 0.68 0.69 T:morus1280256v1 0.76 0.77 0.78 T:deoxysi128v141 0.84 0.86 0.87 T:deoxysi256v141 0.88 0.89 0.91 T:deoxysneq128128v1 0.92 0.93 0.97 T:deoxysneq256128v1 1.10 1.12 1.14 T:norx6444v3 1.10 1.14 1.16 T:morus640128v2 1.20 1.21 1.25 T:aes128gcmv1 1.21 1.22 1.24 T:morus640128v1 1.30 1.32 1.33 T:deoxysii128v141 1.40 1.41 1.42 aes256gcmv1 1.34? 1.43? 1.56? T:lunarkeyakv2 1.48 1.50 1.51 T:deoxysii256v141 1.53 1.55 1.56 T:colm0v1 1.66 1.68 1.70 T:deoxyseq128128v1 1.76 1.77 1.85 T:deoxyseq256128v1 1.97 1.99 2.01 T:norx6441v3 1.97 2.00 2.02 T:norx6441v2 1.84? 2.02? 2.48? T:oceankeyakv2 2.02 2.06 2.13 T:aes128n8t8silcv2 1.99 2.07 2.13 T:aes128n12t8silcv2 2.11 2.12 2.13 T:aes128n8t8clocv2 2.11 2.12 2.13 T:aes128n12t8clocv3 2.12 2.12 2.23 T:aes128n12t8silcv3 2.11 2.13 2.15 T:aes128n12t8clocv2 2.34 2.38 2.44 T:norx6441v1 2.62 2.66 2.76 T:seakeyakv2 2.63 2.71 2.79 T:lakekeyakv1 2.66 2.73 2.80 T:norx6444v2 2.80 2.90 3.01 T:lakekeyakv2 3.04 3.07 3.10 T:norx6461v3 3.05 3.07 3.08 T:norx6461v2 3.15 3.21 3.28 T:norx6444v1 3.54 3.56 3.58 T:norx3241v3 3.55 3.56 3.58 T:norx3241v2 3.62 3.63 3.67 T:norx6461v1 4.24 4.26 4.30 T:norx3241v1 4.53 4.65 4.73 T:ketjemajorv2 4.71 4.72 4.73 T:aesjambuv1 5.48 5.52 5.56 T:acorn128v3 5.50 5.52 5.54 T:norx3261v2 5.50 5.53 5.55 T:norx3261v3 4.84? 5.54? 5.63? T:acorn128v2 6.39 6.42 6.45 T:ascon128av11 6.43 6.45 6.46 T:ascon96v1 6.41 6.46 6.47 ascon128av12 6.38 6.48 6.59 T:ketjeminorv2 6.75 7.03 7.28 T:riverkeyakv2 7.36 7.37 7.39 T:norx3261v1 9.67 9.72 9.89 ascon128v12 9.76 9.83 9.88 T:ascon128v11 9.76 9.84 9.87 T:ascon128v1 11.73 11.76 11.81 T:aes128otrpv2 11.77 11.79 11.85 T:aes128otrpv1 12.35 12.40 12.48 T:aes128otrsv2 12.37 12.43 12.49 T:aes128otrsv1 12.44 12.65 12.90 T:oceankeyakv1 12.64 12.81 12.88 T:seakeyakv1 15.40 15.47 15.50 T:aes256otrpv2 15.31 15.49 15.55 T:aes256otrpv1 15.63 15.70 15.80 T:aes256otrsv1 15.66 15.70 15.77 T:aes256otrsv2 16.30 16.41 16.44 T:twine80n6t4clocv2 16.44 16.51 16.58 T:twine80n6t4clocv3 16.55 16.76 16.86 T:proest256otrv1 18.71 18.79 19.14 T:aes128n12clocv1 19.08 19.16 19.24 T:aes128n8clocv1 20.35 20.43 20.51 T:aes128n8silcv1 20.35 20.45 20.75 T:aes128n12silcv1 24.43 24.57 24.78 T:ketjesrv1 24.90 25.02 25.25 T:ketjesrv2 27.35 27.57 27.78 T:riverkeyakv1 38.36 38.48 38.56 T:ketjejrv1 39.47 39.78 39.99 T:proest128otrv1 60.55 60.91 61.28 T:ketjejrv2 75.57 75.88 77.15 T:deoxysneq128128v13 77.27 77.31 77.53 T:present80n6t4silcv3 87.18? 87.68? 105.72? T:twine80n6clocv1 103.50 104.57 105.01 T:deoxysneq256128v13 115.42 115.77 117.30 T:deoxyseq128128v13 126.35 126.50 126.59 T:led80n6t4silcv3 133.96 134.12 136.65 T:aezv1 169.86 171.47 172.67 T:deoxyseq256128v13 375.83 378.91 392.25 T:acorn128 3035.82 3038.51 3041.48 T:led80n6silcv1 3045.73 3048.21 3052.79 T:led80n6t4silcv2 3283.82 3288.37 3296.64 T:present80n6t4silcv2 3361.55 3366.08 3374.77 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13 0.13 0.14 T:aezv4 0.13 0.14 0.14 T:aezv3 0.07? 0.14? 0.15? T:aezv5 0.23 0.23 0.24 T:aegis128l 0.23? 0.24? 0.29? aegis128l 0.22? 0.30? 0.39? T:aeadaes128ocbtaglen128v1 -0.04? 0.37? 0.74? T:aeadaes256ocbtaglen128v1 0.38 0.38 0.39 T:aegis256 0.39 0.40 0.40 T:aegis128 0.34? 0.41? 0.79? T:aeadaes192ocbtaglen128v1 0.35? 0.42? 0.44? aegis256 0.43? 0.44? 0.48? T:tiaoxinv2 0.44 0.45 0.45 T:tiaoxinv1 0.48 0.50 0.52 T:aes128otrcv3 0.49 0.51 0.53 T:aes128otrsv3 0.49 0.51 0.53 T:aes128otrpv3 0.60 0.62 0.64 T:aes256otrsv3 0.60 0.62 0.63 T:aes256otrcv3 0.60 0.63 0.64 T:aes256otrpv3 0.66 0.67 0.68 T:morus1280128v2 0.66 0.67 0.68 T:morus1280256v2 0.67 0.68 0.69 T:morus1280128v1 0.67 0.68 0.69 T:morus1280256v1 0.75 0.77 0.82 T:deoxysi128v141 0.84? 0.87? 1.03? T:deoxysi256v141 0.87 0.89 0.90 T:deoxysneq128128v1 0.91 0.92 0.93 T:deoxysneq256128v1 1.10 1.12 1.14 T:norx6444v3 1.12 1.14 1.15 T:morus640128v2 1.19 1.20 1.26 T:aes128gcmv1 1.21 1.23 1.26 T:morus640128v1 1.30 1.32 1.33 T:deoxysii128v141 1.34 1.39 1.45 T:lunarkeyakv2 1.40 1.41 1.42 aes256gcmv1 1.48 1.49 1.51 T:deoxysii256v141 1.44 1.55 1.56 T:colm0v1 1.66 1.68 1.72 T:deoxyseq128128v1 1.76 1.77 1.79 T:deoxyseq256128v1 1.84 1.93 1.99 T:oceankeyakv2 1.96 1.97 2.03 T:norx6441v3 1.99 2.01 2.03 T:norx6441v2 2.00 2.06 2.13 T:aes128n8t8silcv2 2.00 2.07 2.13 T:aes128n12t8silcv2 2.04 2.11 2.13 T:aes128n12t8silcv3 2.11 2.12 2.13 T:aes128n12t8clocv2 2.05 2.12 2.13 T:aes128n12t8clocv3 2.11 2.12 2.13 T:aes128n8t8clocv2 2.35 2.40 2.44 T:norx6441v1 2.61 2.68 2.76 T:lakekeyakv1 2.66 2.70 2.72 T:seakeyakv2 2.70 2.77 2.81 T:norx6444v2 2.83 2.88 2.93 T:lakekeyakv2 3.04 3.06 3.07 T:norx6461v2 3.06 3.07 3.09 T:norx6461v3 3.17 3.22 3.30 T:norx6444v1 3.54 3.56 3.58 T:norx3241v2 3.55 3.56 3.58 T:norx3241v3 3.64 3.66 3.71 T:norx6461v1 4.26 4.29 4.33 T:norx3241v1 4.56 4.64 4.76 T:ketjemajorv2 4.71 4.72 4.72 T:aesjambuv1 4.84 4.88 4.91 T:acorn128v2 5.49 5.51 5.54 T:norx3261v2 5.49 5.52 5.54 T:acorn128v3 5.51 5.53 5.55 T:norx3261v3 6.38 6.40 6.47 T:ascon128av11 6.41 6.45 6.47 T:ascon96v1 6.43 6.45 6.50 ascon128av12 6.41 6.46 6.57 T:ketjeminorv2 6.96 7.18 7.26 T:riverkeyakv2 7.37 7.37 7.39 T:norx3261v1 9.70 9.78 9.85 T:ascon128v1 9.66 9.81 9.91 ascon128v12 9.73 9.82 9.86 T:ascon128v11 11.72 11.77 11.84 T:aes128otrpv2 11.76 11.80 11.83 T:aes128otrpv1 12.37 12.40 12.50 T:aes128otrsv2 12.36 12.43 12.48 T:aes128otrsv1 12.67 12.80 12.93 T:seakeyakv1 12.36? 14.02? 15.08? T:oceankeyakv1 15.45 15.50 15.57 T:aes256otrpv2 15.47 15.52 15.58 T:aes256otrpv1 15.66 15.71 15.86 T:aes256otrsv2 15.67 15.72 15.80 T:aes256otrsv1 16.32 16.39 16.44 T:twine80n6t4clocv2 16.41 16.47 16.52 T:twine80n6t4clocv3 16.60 16.80 16.86 T:proest256otrv1 18.63 18.70 18.82 T:aes128n12clocv1 19.04 19.08 19.21 T:aes128n8clocv1 20.37 20.41 20.49 T:aes128n8silcv1 20.36 20.42 20.48 T:aes128n12silcv1 24.34 24.43 24.85 T:ketjesrv1 24.89 25.11 25.33 T:ketjesrv2 27.43 27.65 27.81 T:riverkeyakv1 38.38 38.60 38.71 T:ketjejrv1 39.45 39.64 40.71 T:proest128otrv1 60.89 61.02 61.31 T:ketjejrv2 75.48 75.82 77.05 T:deoxysneq128128v13 77.26 77.32 77.39 T:present80n6t4silcv3 103.96 104.26 104.52 T:deoxysneq256128v13 105.57 105.73 106.89 T:twine80n6clocv1 114.70 115.53 117.69 T:deoxyseq128128v13 126.34 126.47 126.61 T:led80n6t4silcv3 133.78 133.93 136.14 T:aezv1 169.24 169.57 170.99 T:deoxyseq256128v13 375.60 378.77 395.06 T:acorn128 3036.77 3038.97 3042.50 T:led80n6silcv1 3045.74 3047.82 3049.71 T:led80n6t4silcv2 3285.54 3289.96 3300.73 T:present80n6t4silcv2 3366.82 3369.78 3377.49 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.15 0.15 0.16 T:tiaoxinv2 0.13? 0.15? 0.17? T:tiaoxinv1 0.20 0.21 0.21 T:aegis128l 0.20 0.21 0.21 aegis128l 0.23? 0.24? 0.27? T:aezv3 0.23? 0.25? 0.27? T:aeadaes128ocbtaglen128v1 0.25? 0.27? 0.28? T:aezv4 0.25? 0.28? 0.31? T:aezv5 0.22? 0.33? 0.39? T:aeadaes192ocbtaglen128v1 0.14? 0.33? 0.50? T:aeadaes256ocbtaglen128v1 0.38 0.38 0.38 T:aegis256 0.38 0.38 0.39 aegis256 0.38 0.38 0.38 T:aegis128 0.45 0.46 0.48 T:aes128otrpv3 0.48 0.48 0.49 T:aes128otrcv3 0.59 0.60 0.62 T:aes256otrpv3 0.57 0.61 0.63 T:aes256otrcv3 0.63 0.64 0.65 T:morus1280128v2 0.63 0.64 0.65 T:morus1280256v2 0.63 0.64 0.65 T:morus1280128v1 0.64 0.65 0.65 T:morus1280256v1 0.67 0.67 0.68 T:deoxysi128v141 0.70 0.73 0.74 T:deoxysneq128128v1 0.74 0.75 0.76 T:deoxysi256v141 0.81 0.83 0.84 T:deoxysneq256128v1 0.85 0.86 0.87 T:aes128gcmv1 0.92 0.93 0.93 aes256gcmv1 0.92 0.94 0.96 T:colm0v1 0.98 1.00 1.02 T:deoxysii128v141 1.05 1.06 1.10 T:deoxyseq128128v1 1.11 1.12 1.13 T:deoxysii256v141 1.14 1.16 1.16 T:morus640128v2 1.15 1.17 1.18 T:morus640128v1 1.24 1.24 1.25 T:deoxyseq256128v1 1.28 1.29 1.31 T:aes128otrsv3 1.56 1.60 1.69 T:oceankeyakv2 1.60 1.61 1.63 T:norx6444v3 1.72 1.72 1.73 T:aes256otrsv3 1.89 1.94 2.00 T:lunarkeyakv2 2.05 2.06 2.07 T:norx6441v3 2.07 2.08 2.10 T:norx6441v2 2.15 2.16 2.16 T:aes128n12t8silcv3 2.16 2.16 2.16 T:aes128n8t8silcv2 2.15 2.16 2.16 T:aes128n12t8silcv2 2.17 2.17 2.18 T:aes128n12t8clocv3 2.16 2.18 2.18 T:aes128n12t8clocv2 2.17 2.18 2.18 T:aes128n8t8clocv2 2.17 2.23 2.26 T:seakeyakv2 2.48 2.48 2.50 T:norx6441v1 2.54 2.59 2.63 T:lakekeyakv1 2.55 2.63 2.65 T:lakekeyakv2 2.67 2.70 2.72 T:norx6444v2 3.09 3.10 3.12 T:norx6461v3 3.11 3.12 3.12 T:norx6461v2 3.24 3.26 3.29 T:norx6444v1 3.62 3.63 3.65 T:norx3241v3 3.66 3.67 3.68 T:norx3241v2 3.68 3.70 3.72 T:norx6461v1 4.15 4.20 4.23 T:ketjemajorv2 4.38 4.40 4.41 T:norx3241v1 4.44 4.44 4.44 T:aesjambuv1 4.70 4.78 4.85 T:acorn128v2 4.85 4.92 4.94 T:riverkeyakv2 4.83 5.15 5.16 T:acorn128v3 5.52 5.53 5.55 T:norx3261v3 5.52 5.55 5.56 T:norx3261v2 5.86 5.91 6.05 T:ketjeminorv2 6.47 6.49 6.53 ascon128av12 6.52 6.54 6.56 T:ascon128av11 6.54 6.56 6.58 T:ascon96v1 7.51 7.52 7.53 T:norx3261v1 9.80 9.83 9.84 T:ascon128v1 9.74 9.84 9.90 ascon128v12 9.79 9.84 9.85 T:ascon128v11 11.07 11.09 11.12 T:aes128otrsv1 11.09 11.13 11.15 T:aes128otrsv2 11.61 11.64 11.68 T:aes128otrpv2 11.64 11.67 11.69 T:aes128otrpv1 12.52 12.59 12.66 T:seakeyakv1 12.33? 13.15? 14.51? T:oceankeyakv1 14.41 14.44 14.46 T:aes256otrsv1 14.45 14.48 14.50 T:aes256otrsv2 15.23 15.26 15.29 T:aes128n12silcv1 15.24 15.26 15.28 T:aes128n8silcv1 15.31 15.36 15.38 T:aes256otrpv2 15.33 15.37 15.39 T:aes256otrpv1 16.06 16.11 16.14 T:twine80n6t4clocv2 16.12 16.14 16.18 T:aes128n12clocv1 16.14 16.14 16.19 T:aes128n8clocv1 16.29 16.31 16.34 T:twine80n6t4clocv3 17.04 17.10 17.16 T:proest256otrv1 22.75 22.89 22.98 T:ketjesrv1 24.73 24.79 25.00 T:ketjesrv2 25.73 25.89 26.11 T:riverkeyakv1 35.96 36.01 36.07 T:ketjejrv1 39.45 40.61 40.73 T:proest128otrv1 58.72 59.32 59.66 T:deoxysneq128128v13 59.46 59.75 59.95 T:ketjejrv2 76.13 76.90 76.95 T:present80n6t4silcv3 64.97? 79.25? 80.00? T:twine80n6clocv1 84.82 84.90 85.04 T:deoxysneq256128v13 85.99 87.22 87.56 T:deoxyseq128128v13 88.27 88.46 89.19 T:aezv1 124.82 125.88 126.71 T:led80n6t4silcv3 128.02 128.09 128.28 T:deoxyseq256128v13 389.25 392.42 394.56 T:acorn128 2279.26 2280.57 2282.73 T:led80n6silcv1 2285.29 2286.37 2288.93 T:led80n6t4silcv2 2468.30 2470.61 2482.18 T:present80n6t4silcv2 2525.49 2529.87 2533.74 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.20 0.21 0.21 T:aegis128l 0.20? 0.21? 0.23? aegis128l 0.22? 0.24? 0.26? T:aeadaes128ocbtaglen128v1 0.23? 0.25? 0.27? T:aezv3 0.25 0.26 0.27 T:aezv4 0.27 0.28 0.29 T:tiaoxinv2 0.27 0.28 0.28 T:tiaoxinv1 0.26? 0.28? 0.29? T:aezv5 0.13? 0.32? 0.52? T:aeadaes256ocbtaglen128v1 0.38 0.39 0.39 T:aegis256 0.38 0.39 0.39 aegis256 0.39 0.39 0.39 T:aegis128 0.21? 0.39? 0.58? T:aeadaes192ocbtaglen128v1 0.44? 0.49? 0.50? T:aes128otrpv3 0.49 0.50 0.52 T:aes128otrcv3 0.62 0.63 0.65 T:aes256otrpv3 0.61 0.63 0.65 T:aes256otrcv3 0.64 0.64 0.65 T:morus1280128v2 0.64 0.65 0.65 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v1 0.65 0.65 0.66 T:morus1280256v1 0.72 0.72 0.72 T:deoxysi128v141 0.75 0.77 0.78 T:aes128gcmv1 0.79 0.80 0.81 T:deoxysi256v141 0.80 0.80 0.81 T:deoxysneq128128v1 0.85 0.86 0.86 aes256gcmv1 0.87 0.87 0.88 T:deoxysneq256128v1 0.98 0.98 1.00 T:deoxysii128v141 1.04 1.06 1.07 T:colm0v1 1.11 1.12 1.13 T:deoxysii256v141 1.12 1.13 1.14 T:morus640128v2 1.17 1.19 1.20 T:deoxyseq128128v1 1.18 1.20 1.21 T:morus640128v1 1.28 1.29 1.30 T:deoxyseq256128v1 1.31 1.32 1.32 T:aes128otrsv3 1.56 1.59 1.64 T:oceankeyakv2 1.58 1.59 1.61 T:norx6444v3 1.74 1.76 1.77 T:aes256otrsv3 1.93 2.01 2.10 T:lunarkeyakv2 2.03 2.05 2.06 T:norx6441v2 2.04 2.05 2.06 T:norx6441v3 2.07 2.08 2.13 T:aes128n12t8silcv2 2.08 2.09 2.17 T:aes128n8t8silcv2 2.12 2.12 2.14 T:aes128n12t8clocv3 2.12 2.12 2.13 T:aes128n12t8silcv3 2.07 2.18 2.19 T:aes128n12t8clocv2 2.18 2.19 2.20 T:aes128n8t8clocv2 2.20 2.23 2.29 T:seakeyakv2 2.42 2.44 2.45 T:norx6441v1 2.55 2.58 2.64 T:lakekeyakv1 2.53? 2.61? 3.17? T:lakekeyakv2 2.69 2.70 2.75 T:norx6444v2 3.06 3.08 3.09 T:norx6461v3 3.07 3.09 3.10 T:norx6461v2 3.24 3.28 3.34 T:norx6444v1 3.60 3.61 3.63 T:norx3241v3 3.61 3.63 3.63 T:norx3241v2 3.66 3.70 3.81 T:norx6461v1 4.03 4.07 4.19 T:ketjemajorv2 4.33 4.36 4.37 T:norx3241v1 4.57 4.58 4.58 T:aesjambuv1 4.77 4.97 5.04 T:acorn128v2 4.84 5.00 5.10 T:riverkeyakv2 5.04 5.13 5.28 T:acorn128v3 5.49 5.52 5.54 T:norx3261v2 5.53 5.55 5.57 T:norx3261v3 5.81 5.86 5.93 T:ketjeminorv2 6.39 6.41 6.44 T:ascon96v1 6.39 6.42 6.45 T:ascon128av11 6.43 6.45 6.46 ascon128av12 7.42 7.44 7.45 T:norx3261v1 9.66 9.70 9.82 T:ascon128v1 9.67 9.72 9.78 T:ascon128v11 9.72 9.79 9.82 ascon128v12 11.39 11.43 11.48 T:aes128otrsv2 11.42 11.44 11.47 T:aes128otrsv1 11.67 11.69 11.72 T:aes128otrpv1 11.64 11.70 11.75 T:aes128otrpv2 12.59 12.67 12.78 T:seakeyakv1 13.32 13.95 14.50 T:oceankeyakv1 14.73 14.76 14.80 T:aes256otrsv2 14.74 14.77 14.83 T:aes256otrsv1 15.01 15.04 15.08 T:aes128n12clocv1 15.22 15.24 15.26 T:aes128n8clocv1 15.29 15.33 15.37 T:aes256otrpv2 15.33 15.36 15.39 T:aes256otrpv1 15.31 15.37 15.43 T:aes128n8silcv1 15.31 15.38 15.46 T:aes128n12silcv1 16.09 16.14 16.15 T:twine80n6t4clocv2 16.24 16.31 16.34 T:twine80n6t4clocv3 16.90 17.02 17.14 T:proest256otrv1 23.26 23.33 23.37 T:ketjesrv1 23.90 23.94 24.12 T:ketjesrv2 25.84 25.90 25.99 T:riverkeyakv1 36.10 36.18 36.25 T:ketjejrv1 39.39 39.58 39.97 T:proest128otrv1 59.41 59.49 59.69 T:ketjejrv2 66.73 66.91 67.56 T:deoxysneq128128v13 76.45 77.18 77.28 T:present80n6t4silcv3 73.26 79.32 79.80 T:twine80n6clocv1 85.24 86.38 86.84 T:deoxyseq128128v13 88.59 90.14 90.65 T:aezv1 94.72 94.88 95.43 T:deoxysneq256128v13 125.52 125.67 125.78 T:led80n6t4silcv3 127.88 128.02 128.43 T:deoxyseq256128v13 374.62 377.03 391.78 T:acorn128 2278.38 2279.53 2281.41 T:led80n6silcv1 2285.16 2286.75 2287.45 T:led80n6t4silcv2 2465.49 2470.59 2493.04 T:present80n6t4silcv2 2525.92 2528.83 2531.70 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.10? 0.14? 0.16? T:aezv3 0.15 0.15 0.15 T:aezv4 0.15? 0.16? 0.19? T:aezv5 0.20 0.21 0.21 T:aegis128l 0.21? 0.23? 0.31? aegis128l 0.23? 0.24? 0.26? T:aeadaes128ocbtaglen128v1 0.27 0.28 0.28 T:tiaoxinv2 0.27 0.28 0.30 T:tiaoxinv1 0.30 0.32 0.33 T:aeadaes256ocbtaglen128v1 0.38 0.38 0.38 T:aegis256 0.38 0.39 0.39 T:aegis128 0.38 0.39 0.42 aegis256 0.38 0.39 0.40 T:aeadaes192ocbtaglen128v1 0.49 0.49 0.50 T:aes128otrpv3 0.49 0.50 0.51 T:aes128otrcv3 0.61 0.62 0.63 T:aes256otrpv3 0.61 0.63 0.64 T:aes256otrcv3 0.64 0.64 0.65 T:morus1280256v2 0.64 0.65 0.65 T:morus1280128v2 0.64 0.65 0.66 T:morus1280128v1 0.65 0.65 0.66 T:morus1280256v1 0.71 0.72 0.72 T:deoxysi128v141 0.75 0.75 0.77 T:aes128gcmv1 0.79 0.80 0.81 T:deoxysneq128128v1 0.80 0.81 0.83 T:deoxysi256v141 0.85 0.85 0.86 aes256gcmv1 0.87 0.88 0.90 T:deoxysneq256128v1 0.99 1.00 1.00 T:deoxysii128v141 1.05 1.05 1.06 T:colm0v1 1.12 1.12 1.13 T:deoxysii256v141 1.13 1.14 1.14 T:morus640128v2 1.17 1.19 1.20 T:morus640128v1 1.19 1.20 1.20 T:deoxyseq128128v1 1.29 1.29 1.30 T:deoxyseq256128v1 1.31 1.32 1.32 T:aes128otrsv3 1.57 1.58 1.59 T:norx6444v3 1.54 1.61 1.64 T:oceankeyakv2 1.74 1.75 1.75 T:aes256otrsv3 1.94 1.99 2.04 T:lunarkeyakv2 2.04 2.04 2.06 T:norx6441v2 2.04 2.05 2.06 T:norx6441v3 2.08 2.09 2.17 T:aes128n12t8silcv2 2.07 2.11 2.18 T:aes128n12t8clocv2 2.12 2.12 2.19 T:aes128n12t8clocv3 2.06 2.12 2.13 T:aes128n8t8clocv2 2.08 2.12 2.17 T:aes128n8t8silcv2 2.12 2.16 2.17 T:aes128n12t8silcv3 2.22 2.25 2.27 T:seakeyakv2 2.43 2.45 2.45 T:norx6441v1 2.14? 2.57? 2.59? T:lakekeyakv2 2.57 2.62 2.85 T:lakekeyakv1 2.69 2.73 2.75 T:norx6444v2 3.05 3.07 3.09 T:norx6461v3 3.07 3.09 3.10 T:norx6461v2 3.25 3.27 3.31 T:norx6444v1 3.60 3.61 3.63 T:norx3241v3 3.61 3.61 3.63 T:norx3241v2 3.65 3.68 3.68 T:norx6461v1 4.03 4.08 4.18 T:ketjemajorv2 4.34 4.35 4.37 T:norx3241v1 4.57 4.57 4.57 T:aesjambuv1 4.95 4.99 5.02 T:acorn128v2 4.86 5.15 5.20 T:riverkeyakv2 5.26 5.28 5.30 T:acorn128v3 5.48 5.50 5.51 T:norx3261v2 5.53 5.55 5.56 T:norx3261v3 5.80 5.87 5.93 T:ketjeminorv2 6.38 6.40 6.43 T:ascon128av11 6.42 6.44 6.46 T:ascon96v1 6.44 6.45 6.46 ascon128av12 7.43 7.44 7.45 T:norx3261v1 9.65 9.70 9.79 T:ascon128v11 9.68 9.73 9.81 T:ascon128v1 9.70 9.77 9.82 ascon128v12 11.39 11.43 11.48 T:aes128otrsv1 11.43 11.45 11.51 T:aes128otrsv2 11.65 11.67 11.72 T:aes128otrpv2 11.62 11.70 11.72 T:aes128otrpv1 12.59 12.67 12.72 T:seakeyakv1 12.89? 13.35? 14.38? T:oceankeyakv1 14.71 14.73 14.75 T:aes256otrsv2 14.74 14.78 14.86 T:aes256otrsv1 15.00 15.04 15.08 T:aes128n12clocv1 15.17 15.20 15.22 T:aes128n8clocv1 15.32 15.36 15.40 T:aes128n8silcv1 15.32 15.36 15.38 T:aes256otrpv2 15.33 15.38 15.45 T:aes256otrpv1 15.32 15.38 15.44 T:aes128n12silcv1 16.08 16.13 16.18 T:twine80n6t4clocv2 16.28 16.32 16.34 T:twine80n6t4clocv3 16.95 17.02 17.06 T:proest256otrv1 23.13 23.22 23.36 T:ketjesrv1 23.84 23.91 24.11 T:ketjesrv2 25.92 26.07 26.19 T:riverkeyakv1 35.96 36.25 36.35 T:ketjejrv1 38.20 39.46 40.25 T:proest128otrv1 59.19 59.52 59.61 T:ketjejrv2 66.20 66.92 67.19 T:deoxysneq128128v13 76.95 77.22 77.28 T:present80n6t4silcv3 66.87? 79.51? 79.99? T:twine80n6clocv1 86.11 86.47 87.73 T:deoxyseq128128v13 88.47 88.87 90.73 T:aezv1 94.33 94.87 94.97 T:deoxysneq256128v13 125.45 125.52 125.68 T:led80n6t4silcv3 127.97 128.07 128.29 T:deoxyseq256128v13 374.43 377.11 391.60 T:acorn128 2278.38 2280.10 2281.39 T:led80n6silcv1 2284.27 2285.35 2287.34 T:led80n6t4silcv2 2465.39 2470.05 2475.43 T:present80n6t4silcv2 2526.26 2529.14 2535.98 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.10? 0.11? 0.14? T:tiaoxinv2 0.10? 0.11? 0.14? T:tiaoxinv1 0.14? 0.17? 0.19? T:aezv4 0.16? 0.17? 0.20? T:aezv3 0.15? 0.18? 0.19? T:aezv5 0.18 0.19 0.19 aegis128l 0.19 0.19 0.19 T:aegis128l 0.14? 0.24? 0.26? T:aeadaes128ocbtaglen128v1 -0.04? 0.30? 0.66? T:aeadaes256ocbtaglen128v1 0.29 0.31 0.32 T:aes128gcmv1 0.28? 0.31? 0.32? aes256gcmv1 0.37 0.38 0.38 aegis256 0.38 0.38 0.38 T:aegis256 0.38 0.38 0.38 T:aegis128 0.26? 0.41? 0.79? T:aeadaes192ocbtaglen128v1 0.37? 0.46? 0.50? T:aes128otrcv3 0.42? 0.47? 0.48? T:aes128otrpv3 0.55 0.56 0.58 T:colm0v1 0.58? 0.60? 0.65? T:aes256otrcv3 0.61 0.62 0.63 T:morus1280128v2 0.61 0.62 0.63 T:morus1280256v2 0.62 0.62 0.63 T:morus1280256v1 0.62 0.63 0.63 T:morus1280128v1 0.58? 0.64? 0.75? T:aes256otrpv3 0.58? 0.66? 0.67? T:deoxysi128v141 0.66 0.67 0.67 T:deoxysii128v141 0.70 0.71 0.72 T:deoxyseq128128v1 0.72 0.74 0.75 T:deoxysneq128128v1 0.74 0.75 0.77 T:deoxysii256v141 0.74 0.76 0.77 T:deoxysi256v141 0.81 0.82 0.83 T:deoxyseq256128v1 0.81 0.82 0.84 T:deoxysneq256128v1 1.09 1.11 1.13 T:morus640128v2 1.11 1.12 1.15 T:morus640128v1 1.20 1.27 1.33 T:oceankeyakv2 1.17? 1.28? 1.36? T:lunarkeyakv2 2.01 2.03 2.04 T:norx6441v3 2.01 2.06 2.09 T:norx6441v2 2.05 2.07 2.09 T:norx6444v3 2.03 2.10 2.12 T:aes128n8t8clocv2 2.11 2.11 2.12 T:aes128n12t8clocv3 2.10 2.11 2.12 T:aes128n12t8clocv2 2.12 2.12 2.12 T:aes128otrsv3 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.12 2.13 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128n12t8silcv2 2.09 2.13 2.18 T:seakeyakv2 2.23 2.30 2.38 T:lakekeyakv2 2.29 2.38 2.48 T:lakekeyakv1 2.42 2.46 2.50 T:norx6441v1 2.65 2.69 2.71 T:norx6444v2 2.87 2.88 2.88 T:aes256otrsv3 3.09 3.11 3.14 T:norx6461v3 3.11 3.12 3.14 T:norx6461v2 3.25 3.29 3.31 T:norx6444v1 3.46 3.54 3.62 T:ketjemajorv2 3.62 3.64 3.67 T:norx3241v3 3.66 3.67 3.69 T:norx3241v2 3.66 3.68 3.71 T:norx6461v1 4.38 4.41 4.42 T:norx3241v1 4.43 4.44 4.44 T:aesjambuv1 4.38 4.52 4.78 T:acorn128v2 4.66 4.74 4.81 T:riverkeyakv2 4.54? 4.77? 5.29? T:acorn128v3 5.17 5.23 5.30 T:ketjeminorv2 5.45 5.47 5.49 T:norx3261v2 5.52 5.56 5.59 T:norx3261v3 6.33 6.37 6.42 T:ascon128av11 6.43 6.45 6.47 ascon128av12 6.47 6.50 6.52 T:ascon96v1 7.50 7.51 7.53 T:norx3261v1 9.65 9.71 9.74 T:ascon128v1 9.65 9.71 9.74 T:ascon128v11 9.73 9.76 9.78 ascon128v12 10.27 10.30 10.33 T:aes128n12silcv1 10.25 10.30 10.33 T:aes128n8silcv1 10.38 10.42 10.47 T:aes128otrsv2 10.45 10.49 10.53 T:aes128otrsv1 11.10 11.37 11.43 T:aes128n8clocv1 11.33 11.38 11.92 T:aes128n12clocv1 11.51 11.53 11.58 T:aes128otrpv2 11.50 11.54 11.58 T:aes128otrpv1 12.43 12.54 12.70 T:seakeyakv1 12.57? 13.54? 14.48? T:oceankeyakv1 13.70 13.76 13.84 T:aes256otrsv1 13.77 13.80 13.82 T:aes256otrsv2 15.17 15.20 15.23 T:aes256otrpv2 15.19 15.23 15.27 T:aes256otrpv1 15.84 15.90 15.96 T:twine80n6t4clocv2 16.10 16.15 16.19 T:twine80n6t4clocv3 17.08 17.18 17.60 T:proest256otrv1 22.16 22.18 22.23 T:ketjesrv1 22.77 22.84 23.06 T:ketjesrv2 24.28 24.44 24.70 T:riverkeyakv1 33.79 33.91 34.25 T:ketjejrv1 38.75 39.46 39.61 T:proest128otrv1 41.25 42.99 43.11 T:aezv1 43.77? 53.01? 53.10? T:twine80n6clocv1 56.52 56.60 56.68 T:deoxyseq128128v13 56.88 57.09 58.21 T:deoxysneq128128v13 57.60 57.83 58.23 T:ketjejrv2 75.54 77.11 77.22 T:present80n6t4silcv3 84.02 84.42 85.27 T:deoxysneq256128v13 84.37 84.95 85.23 T:deoxyseq256128v13 124.31 124.45 124.59 T:led80n6t4silcv3 379.69 387.09 389.60 T:acorn128 1518.59 1520.16 1521.35 T:led80n6silcv1 1524.25 1524.86 1526.31 T:led80n6t4silcv2 1639.18 1642.09 1648.48 T:present80n6t4silcv2 1681.61 1682.46 1686.20 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.10? 0.11? 0.14? T:tiaoxinv1 0.09? 0.11? 0.13? T:tiaoxinv2 0.16 0.16 0.17 T:aezv4 0.16 0.17 0.17 T:aezv5 0.16? 0.17? 0.18? T:aezv3 0.18 0.18 0.19 aegis128l 0.18 0.19 0.19 T:aegis128l 0.15? 0.22? 0.26? T:aeadaes128ocbtaglen128v1 0.29 0.30 0.32 T:aes128gcmv1 0.30 0.31 0.33 aes256gcmv1 -0.07? 0.32? 0.67? T:aeadaes256ocbtaglen128v1 0.37 0.38 0.38 aegis256 0.38 0.38 0.38 T:aegis256 0.38 0.38 0.39 T:aegis128 0.01? 0.40? 0.45? T:aeadaes192ocbtaglen128v1 0.46 0.47 0.49 T:aes128otrpv3 0.45? 0.47? 0.52? T:aes128otrcv3 0.55 0.57 0.58 T:colm0v1 0.59 0.60 0.62 T:aes256otrcv3 0.61 0.62 0.62 T:morus1280256v2 0.61 0.62 0.63 T:morus1280128v1 0.61 0.62 0.63 T:morus1280128v2 0.61 0.62 0.63 T:morus1280256v1 0.58? 0.63? 0.73? T:aes256otrpv3 0.56? 0.67? 0.98? T:deoxysi128v141 0.66 0.67 0.68 T:deoxysii128v141 0.70 0.71 0.71 T:deoxyseq128128v1 0.72 0.73 0.74 T:deoxysneq128128v1 0.75 0.76 0.77 T:deoxysi256v141 0.75 0.76 0.77 T:deoxysii256v141 0.81 0.82 0.83 T:deoxyseq256128v1 0.81 0.82 0.84 T:deoxysneq256128v1 1.10 1.12 1.13 T:morus640128v2 1.11 1.13 1.15 T:morus640128v1 1.15? 1.23? 1.39? T:lunarkeyakv2 1.22 1.26 1.32 T:oceankeyakv2 2.04 2.06 2.07 T:norx6444v3 2.04 2.06 2.12 T:aes128n12t8silcv2 2.07 2.09 2.10 T:norx6441v3 2.07 2.09 2.10 T:norx6441v2 2.11 2.12 2.12 T:aes128otrsv3 2.11 2.12 2.13 T:aes128n8t8clocv2 2.09 2.12 2.13 T:aes128n12t8clocv3 2.12 2.12 2.13 T:aes128n12t8silcv3 2.04 2.13 2.21 T:aes128n8t8silcv2 2.12 2.13 2.13 T:aes128n12t8clocv2 2.10 2.15 2.17 T:seakeyakv2 2.24 2.29 2.37 T:lakekeyakv2 2.34 2.40 2.46 T:lakekeyakv1 2.42 2.44 2.48 T:norx6441v1 2.65 2.70 2.73 T:norx6444v2 2.87 2.87 2.88 T:aes256otrsv3 3.06 3.08 3.10 T:norx6461v3 3.08 3.11 3.14 T:norx6461v2 3.27 3.28 3.32 T:norx6444v1 3.44 3.60 3.67 T:ketjemajorv2 3.64 3.65 3.67 T:norx3241v3 3.66 3.67 3.70 T:norx6461v1 3.65 3.68 3.69 T:norx3241v2 4.39 4.40 4.43 T:norx3241v1 4.43 4.44 4.45 T:aesjambuv1 4.35 4.46 4.60 T:acorn128v2 4.54 4.66 5.01 T:acorn128v3 4.58 4.78 4.83 T:riverkeyakv2 5.05 5.20 5.28 T:ketjeminorv2 5.44 5.46 5.48 T:norx3261v2 5.53 5.54 5.57 T:norx3261v3 6.38 6.44 6.46 T:ascon96v1 6.42 6.46 6.51 T:ascon128av11 6.44 6.46 6.49 ascon128av12 7.49 7.51 7.54 T:norx3261v1 9.74 9.76 9.79 ascon128v12 9.53 9.77 9.83 T:ascon128v11 9.50 9.78 9.84 T:ascon128v1 10.23 10.26 10.34 T:aes128n8silcv1 10.25 10.28 10.37 T:aes128n12silcv1 10.41 10.47 10.52 T:aes128otrsv2 10.45 10.47 10.52 T:aes128otrsv1 11.35 11.36 11.42 T:aes128n12clocv1 11.34 11.37 11.41 T:aes128n8clocv1 11.51 11.56 11.64 T:aes128otrpv1 11.53 11.57 11.61 T:aes128otrpv2 12.49 12.57 12.62 T:seakeyakv1 13.72 13.76 13.83 T:aes256otrsv1 13.75 13.80 13.93 T:aes256otrsv2 12.56? 13.90? 14.51? T:oceankeyakv1 15.16 15.23 15.30 T:aes256otrpv2 15.21 15.24 15.31 T:aes256otrpv1 15.81 15.90 15.98 T:twine80n6t4clocv2 16.07 16.14 16.19 T:twine80n6t4clocv3 17.00 17.20 17.51 T:proest256otrv1 22.14 22.18 22.27 T:ketjesrv1 22.74 22.83 23.06 T:ketjesrv2 24.31 24.44 24.52 T:riverkeyakv1 33.63 33.67 34.00 T:ketjejrv1 39.62 39.85 40.13 T:proest128otrv1 41.27 42.71 43.19 T:aezv1 52.99 53.20 53.30 T:twine80n6clocv1 57.34 57.47 57.63 T:deoxyseq128128v13 57.52 57.69 57.96 T:deoxysneq128128v13 57.52 57.95 58.15 T:ketjejrv2 76.37 77.14 77.23 T:present80n6t4silcv3 84.85 85.10 85.37 T:deoxyseq256128v13 85.15 85.47 85.87 T:deoxysneq256128v13 124.43 124.54 124.79 T:led80n6t4silcv3 374.24 376.46 389.62 T:acorn128 1516.95 1519.87 1521.95 T:led80n6silcv1 1523.37 1524.67 1525.81 T:led80n6t4silcv2 1642.79 1646.42 1649.97 T:present80n6t4silcv2 1681.87 1684.53 1687.83 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.05? 0.10? 0.13? T:tiaoxinv1 0.10? 0.12? 0.15? T:tiaoxinv2 0.16 0.16 0.16 T:aezv4 0.16? 0.17? 0.18? T:aezv5 0.17 0.17 0.18 T:aezv3 0.18 0.19 0.19 T:aegis128l 0.14? 0.22? 0.25? T:aeadaes128ocbtaglen128v1 0.19? 0.23? 0.24? aegis128l 0.21? 0.29? 0.31? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.32 T:aes128gcmv1 0.30 0.31 0.33 aes256gcmv1 0.37 0.38 0.38 aegis256 0.37 0.38 0.38 T:aegis256 0.38 0.38 0.39 T:aegis128 0.36? 0.41? 0.79? T:aeadaes192ocbtaglen128v1 0.44 0.46 0.47 T:aes128otrpv3 0.45 0.46 0.49 T:aes128otrcv3 0.55? 0.56? 0.62? T:colm0v1 0.57 0.59 0.61 T:aes256otrcv3 0.61 0.62 0.62 T:morus1280256v2 0.61 0.62 0.63 T:morus1280128v2 0.60? 0.62? 0.72? T:aes256otrpv3 0.61 0.62 0.63 T:morus1280256v1 0.61 0.62 0.63 T:morus1280128v1 0.55? 0.67? 0.72? T:deoxysi128v141 0.66 0.67 0.68 T:deoxysii128v141 0.70 0.70 0.71 T:deoxyseq128128v1 0.72 0.73 0.75 T:deoxysneq128128v1 0.75 0.75 0.76 T:deoxysii256v141 0.75 0.76 0.80 T:deoxysi256v141 0.80 0.81 0.82 T:deoxyseq256128v1 0.81 0.82 0.87 T:deoxysneq256128v1 1.10 1.12 1.13 T:morus640128v2 1.11 1.14 1.16 T:morus640128v1 1.18? 1.26? 1.40? T:lunarkeyakv2 1.24 1.30 1.31 T:oceankeyakv2 2.04 2.06 2.08 T:norx6444v3 2.04 2.07 2.13 T:aes128n12t8silcv2 2.04 2.07 2.13 T:aes128n8t8silcv2 2.07 2.09 2.10 T:norx6441v3 2.08 2.09 2.11 T:norx6441v2 1.99 2.12 2.13 T:aes128n8t8clocv2 2.11 2.12 2.13 T:aes128n12t8clocv3 2.05 2.12 2.20 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128otrsv3 2.10 2.12 2.13 T:aes128n12t8clocv2 2.12 2.14 2.17 T:seakeyakv2 2.26 2.32 2.36 T:lakekeyakv2 2.30 2.39 2.44 T:lakekeyakv1 2.43 2.44 2.45 T:norx6441v1 2.64 2.66 2.70 T:norx6444v2 2.87 2.88 2.88 T:aes256otrsv3 3.07 3.08 3.09 T:norx6461v3 3.09 3.11 3.12 T:norx6461v2 3.23 3.29 3.31 T:norx6444v1 3.48 3.55 3.65 T:ketjemajorv2 3.63 3.66 3.67 T:norx3241v3 3.66 3.67 3.69 T:norx3241v2 3.65 3.68 3.70 T:norx6461v1 4.38 4.40 4.42 T:norx3241v1 4.43 4.44 4.45 T:aesjambuv1 4.41 4.51 4.59 T:acorn128v2 4.71 4.78 4.83 T:riverkeyakv2 4.59 4.94 5.03 T:acorn128v3 5.18 5.25 5.37 T:ketjeminorv2 5.45 5.47 5.49 T:norx3261v2 5.53 5.55 5.58 T:norx3261v3 6.36 6.41 6.47 T:ascon128av11 6.31 6.45 6.50 T:ascon96v1 6.44 6.46 6.49 ascon128av12 7.49 7.51 7.52 T:norx3261v1 9.54 9.58 9.82 T:ascon128v11 9.54 9.60 9.78 T:ascon128v1 9.76 9.78 9.81 ascon128v12 10.25 10.30 10.34 T:aes128n8silcv1 10.26 10.30 10.36 T:aes128n12silcv1 10.46 10.49 10.54 T:aes128otrsv1 10.46 10.49 10.53 T:aes128otrsv2 11.32 11.36 11.41 T:aes128n12clocv1 11.35 11.38 11.41 T:aes128n8clocv1 11.51 11.55 11.62 T:aes128otrpv2 11.53 11.57 11.61 T:aes128otrpv1 12.47 12.58 12.68 T:seakeyakv1 12.09? 13.70? 14.42? T:oceankeyakv1 13.68 13.76 13.89 T:aes256otrsv2 13.76 13.80 13.94 T:aes256otrsv1 15.18 15.22 15.27 T:aes256otrpv2 15.21 15.24 15.28 T:aes256otrpv1 15.90 15.97 16.03 T:twine80n6t4clocv2 16.08 16.15 16.19 T:twine80n6t4clocv3 17.06 17.23 17.44 T:proest256otrv1 22.10 22.16 22.25 T:ketjesrv1 22.69 22.90 23.05 T:ketjesrv2 24.20 24.29 24.56 T:riverkeyakv1 33.69 33.98 34.19 T:ketjejrv1 38.33 39.21 40.69 T:proest128otrv1 41.24 42.97 43.28 T:aezv1 51.02 53.10 53.27 T:twine80n6clocv1 56.92 57.16 57.49 T:deoxysneq128128v13 56.58 57.24 57.73 T:deoxyseq128128v13 57.45 57.76 58.06 T:ketjejrv2 75.48 76.36 77.27 T:present80n6t4silcv3 84.87 84.92 85.26 T:deoxyseq256128v13 85.05 85.46 85.79 T:deoxysneq256128v13 124.55 124.84 125.05 T:led80n6t4silcv3 375.24 378.25 389.92 T:acorn128 1519.79 1521.84 1529.38 T:led80n6silcv1 1523.27 1525.16 1526.25 T:led80n6t4silcv2 1640.67 1642.02 1646.72 T:present80n6t4silcv2 1681.52 1683.03 1687.35 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.20 0.20 0.21 T:tiaoxinv2 0.20 0.20 0.22 T:tiaoxinv1 0.24 0.24 0.24 T:aegis128l 0.24 0.24 0.24 aegis128l 0.31 0.31 0.32 T:aezv4 0.31 0.31 0.32 T:aezv3 0.32 0.32 0.34 T:aezv5 0.38? 0.41? 0.43? T:aeadaes128ocbtaglen128v1 0.41 0.41 0.41 T:aegis128 0.42 0.42 0.42 T:aegis256 0.42 0.42 0.43 aegis256 0.49? 0.51? 0.72? T:aeadaes256ocbtaglen128v1 0.51 0.52 0.55 T:aeadaes192ocbtaglen128v1 0.53 0.54 0.55 T:aes128otrpv3 0.60 0.60 0.61 T:aes128otrcv3 0.69 0.70 0.74 T:aes256otrpv3 0.78 0.78 0.80 T:deoxysi128v141 0.77 0.79 0.81 T:aes256otrcv3 0.79 0.80 0.80 T:morus1280128v1 0.79 0.80 0.80 T:morus1280256v1 0.79 0.80 0.80 T:morus1280128v2 0.80 0.80 0.81 T:morus1280256v2 0.81 0.81 0.82 T:deoxysneq128128v1 0.91 0.92 0.92 T:deoxysi256v141 0.92 0.92 0.95 T:deoxysneq256128v1 0.97 0.98 0.98 T:aes128gcmv1 1.01 1.01 1.03 T:colm0v1 1.05 1.05 1.06 aes256gcmv1 1.15 1.15 1.16 T:deoxysii128v141 1.16 1.16 1.20 T:deoxyseq128128v1 1.28 1.29 1.30 T:morus640128v2 1.29 1.30 1.31 T:morus640128v1 1.30 1.31 1.32 T:deoxysii256v141 1.35 1.35 1.36 T:aes128otrsv3 1.36 1.37 1.38 T:deoxyseq256128v1 1.81 1.81 1.81 T:aes256otrsv3 2.18 2.19 2.20 T:norx6444v3 2.20 2.21 2.21 T:aes128n12t8clocv2 2.20 2.21 2.21 T:aes128n12t8clocv3 2.20 2.21 2.21 T:aes128n8t8clocv2 2.23 2.23 2.23 T:aes128n8t8silcv2 2.23 2.23 2.23 T:aes128n12t8silcv2 2.22 2.23 2.24 T:aes128n12t8silcv3 2.37 2.38 2.39 T:norx6441v2 2.37 2.38 2.38 T:norx6441v3 2.75 2.76 2.78 T:norx6441v1 2.82 2.85 2.90 T:lakekeyakv2 2.96 2.98 3.03 T:oceankeyakv2 3.03 3.03 3.07 T:lakekeyakv1 3.15 3.18 3.19 T:seakeyakv2 3.57 3.60 3.61 T:norx6461v3 3.58 3.60 3.61 T:norx6461v2 3.92 3.93 3.93 T:norx3241v3 3.93 3.94 3.97 T:norx3241v2 3.94 3.96 4.00 T:norx6444v2 4.14 4.15 4.17 T:norx6461v1 4.46 4.47 4.47 T:aesjambuv1 4.63 4.64 4.65 T:norx3241v1 4.65 4.67 4.69 T:norx6444v1 5.15 5.19 5.23 T:riverkeyakv2 5.33 5.36 5.42 T:lunarkeyakv2 5.41 5.43 5.47 T:ketjemajorv2 5.55 5.57 5.59 T:acorn128v2 5.58 5.60 5.87 T:acorn128v3 5.94 5.95 5.97 T:norx3261v2 5.95 5.96 5.97 T:norx3261v3 6.50 6.54 6.87 T:ketjeminorv2 6.64 6.65 6.66 ascon128av12 6.66 6.69 6.74 T:ascon128av11 6.69 6.71 6.73 T:ascon96v1 7.91 7.92 7.94 T:norx3261v1 9.93 9.94 9.96 T:ascon128v1 9.94 9.95 9.98 T:ascon128v11 9.86 9.96 9.99 ascon128v12 11.38 11.39 11.41 T:aes128otrsv1 11.38 11.41 11.45 T:aes128otrsv2 11.98 12.00 12.01 T:aes128otrpv2 11.98 12.00 12.02 T:aes128otrpv1 14.81 14.83 14.86 T:aes256otrsv2 14.80 14.85 14.87 T:aes256otrsv1 15.34 15.39 15.45 T:seakeyakv1 15.51 15.53 15.56 T:aes128n12silcv1 15.53 15.54 15.56 T:aes128n8silcv1 15.78 15.79 15.80 T:aes256otrpv1 15.78 15.80 15.83 T:aes256otrpv2 16.29 16.31 16.33 T:aes128n12clocv1 16.29 16.31 16.34 T:aes128n8clocv1 16.26 16.35 16.37 T:twine80n6t4clocv2 16.51 16.52 16.54 T:twine80n6t4clocv3 18.55 18.58 18.74 T:proest256otrv1 19.82 21.07 21.39 T:oceankeyakv1 23.52 23.58 23.64 T:ketjesrv1 25.54 25.60 25.77 T:ketjesrv2 26.94 27.03 27.17 T:riverkeyakv1 36.36 36.51 36.55 T:ketjejrv1 41.07 41.89 42.15 T:proest128otrv1 58.22 58.30 58.82 T:deoxysneq128128v13 60.63 60.70 60.87 T:ketjejrv2 76.91 77.65 77.68 T:present80n6t4silcv3 79.52 79.63 79.93 T:twine80n6clocv1 84.39 85.34 85.41 T:deoxysneq256128v13 85.53 85.61 86.05 T:aezv1 86.95 88.22 89.03 T:deoxyseq128128v13 125.76 126.17 128.50 T:led80n6t4silcv3 129.53 129.71 129.84 T:deoxyseq256128v13 433.16 436.81 437.78 T:acorn128 2290.39 2291.71 2292.75 T:led80n6silcv1 2297.18 2298.92 2303.60 T:led80n6t4silcv2 2476.76 2480.94 2493.68 T:present80n6t4silcv2 2538.62 2541.22 2545.29 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.24 0.24 0.25 aegis128l 0.24 0.24 0.25 T:aegis128l 0.31 0.31 0.31 T:aezv4 0.31 0.31 0.32 T:aezv3 0.32 0.32 0.33 T:tiaoxinv2 0.32 0.32 0.33 T:aezv5 0.32 0.32 0.34 T:tiaoxinv1 0.38? 0.40? 0.43? T:aeadaes128ocbtaglen128v1 0.41 0.41 0.42 T:aegis128 0.42 0.42 0.42 T:aegis256 0.43 0.43 0.44 aegis256 0.48? 0.50? 0.72? T:aeadaes256ocbtaglen128v1 0.50? 0.52? 0.74? T:aeadaes192ocbtaglen128v1 0.56 0.57 0.58 T:aes128otrpv3 0.62 0.62 0.64 T:aes128otrcv3 0.72 0.73 0.75 T:aes256otrpv3 0.79 0.81 0.82 T:aes256otrcv3 0.81 0.82 0.82 T:morus1280128v2 0.81 0.82 0.83 T:morus1280256v2 0.81 0.82 0.82 T:morus1280128v1 0.82 0.82 0.82 T:morus1280256v1 0.86 0.86 0.86 T:deoxysi128v141 0.88 0.89 0.91 T:aes128gcmv1 0.94 0.95 0.95 T:deoxysneq128128v1 0.97 0.98 0.99 T:deoxysi256v141 0.99 0.99 1.00 aes256gcmv1 1.00 1.01 1.01 T:deoxysneq256128v1 1.12 1.13 1.14 T:colm0v1 1.16 1.17 1.17 T:deoxysii128v141 1.27 1.28 1.29 T:morus640128v2 1.32 1.33 1.35 T:morus640128v1 1.34 1.34 1.35 T:deoxyseq128128v1 1.34 1.35 1.35 T:deoxysii256v141 1.38 1.38 1.39 T:aes128otrsv3 1.44 1.45 1.45 T:deoxyseq256128v1 1.84 1.84 1.86 T:aes256otrsv3 2.14 2.14 2.15 T:aes128n12t8clocv2 2.14 2.14 2.22 T:aes128n8t8clocv2 2.16 2.18 2.18 T:norx6444v3 2.17 2.20 2.25 T:aes128n8t8silcv2 2.20 2.20 2.25 T:aes128n12t8silcv2 2.19 2.20 2.26 T:aes128n12t8silcv3 2.15 2.23 2.23 T:aes128n12t8clocv3 2.34 2.36 2.37 T:norx6441v3 2.37 2.39 2.39 T:norx6441v2 2.70 2.71 2.73 T:norx6441v1 2.83 2.87 2.91 T:lakekeyakv2 2.96 2.97 3.02 T:oceankeyakv2 3.05 3.07 3.15 T:lakekeyakv1 3.19 3.21 3.23 T:seakeyakv2 3.55 3.56 3.57 T:norx6461v3 3.57 3.59 3.59 T:norx6461v2 3.89 3.90 3.91 T:norx3241v3 3.90 3.91 3.92 T:norx3241v2 3.92 3.94 3.96 T:norx6444v2 4.14 4.16 4.18 T:norx6461v1 4.58 4.59 4.60 T:norx3241v1 4.60 4.61 4.62 T:aesjambuv1 4.64 4.66 4.68 T:norx6444v1 5.14 5.25 5.42 T:riverkeyakv2 5.33 5.34 5.38 T:ketjemajorv2 5.37 5.38 5.44 T:lunarkeyakv2 5.79 5.80 5.82 T:acorn128v2 5.85 5.91 6.04 T:acorn128v3 5.93 5.94 5.95 T:norx3261v2 5.97 5.98 5.99 T:norx3261v3 6.56 6.58 6.59 T:ascon96v1 6.56 6.59 6.59 T:ascon128av11 6.60 6.62 6.64 ascon128av12 6.61 6.66 6.82 T:ketjeminorv2 7.85 7.85 7.86 T:norx3261v1 9.74 9.77 9.90 T:ascon128v11 9.76 9.81 9.85 T:ascon128v1 9.87 9.93 9.99 ascon128v12 11.73 11.75 11.78 T:aes128otrsv2 11.76 11.77 11.83 T:aes128otrsv1 12.01 12.03 12.05 T:aes128otrpv2 12.04 12.07 12.08 T:aes128otrpv1 15.16 15.17 15.22 T:aes256otrsv2 15.15 15.18 15.22 T:aes256otrsv1 15.18 15.20 15.26 T:aes128n12clocv1 15.37 15.39 15.41 T:aes128n8clocv1 15.43 15.47 15.50 T:seakeyakv1 15.62 15.66 15.68 T:aes128n8silcv1 15.61 15.67 15.75 T:aes128n12silcv1 15.77 15.79 15.85 T:aes256otrpv2 15.79 15.81 15.84 T:aes256otrpv1 16.35 16.38 16.42 T:twine80n6t4clocv2 16.52 16.55 16.59 T:twine80n6t4clocv3 18.59 18.62 18.74 T:proest256otrv1 20.61 21.35 21.40 T:oceankeyakv1 23.98 24.04 24.12 T:ketjesrv1 24.70 24.73 24.94 T:ketjesrv2 26.90 27.04 27.25 T:riverkeyakv1 36.66 36.80 36.84 T:ketjejrv1 41.09 41.26 42.30 T:proest128otrv1 60.15 60.32 61.10 T:ketjejrv2 66.03 66.65 66.91 T:deoxysneq128128v13 77.65 77.88 78.23 T:present80n6t4silcv3 66.66? 78.40? 79.78? T:twine80n6clocv1 85.63 85.69 86.23 T:aezv1 86.87 87.64 88.34 T:deoxyseq128128v13 95.28 95.31 95.38 T:deoxysneq256128v13 126.44 126.52 126.81 T:led80n6t4silcv3 128.57 129.40 129.84 T:deoxyseq256128v13 420.64 421.65 435.86 T:acorn128 2289.23 2290.92 2292.56 T:led80n6silcv1 2296.74 2299.70 2302.80 T:led80n6t4silcv2 2477.91 2482.82 2493.69 T:present80n6t4silcv2 2538.93 2539.71 2546.19 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17 0.18 0.18 T:aezv3 0.18 0.18 0.18 T:aezv4 0.18 0.18 0.19 T:aezv5 0.24 0.24 0.24 T:aegis128l 0.24? 0.25? 0.28? aegis128l 0.32 0.32 0.32 T:tiaoxinv1 0.32 0.32 0.33 T:tiaoxinv2 0.38 0.39 0.40 T:aeadaes128ocbtaglen128v1 0.41 0.41 0.42 T:aegis128 0.42 0.42 0.42 T:aegis256 0.43 0.44 0.47 aegis256 0.48 0.48 0.51 T:aeadaes256ocbtaglen128v1 0.50 0.50 0.52 T:aeadaes192ocbtaglen128v1 0.56 0.56 0.57 T:aes128otrpv3 0.62 0.62 0.63 T:aes128otrcv3 0.71 0.72 0.73 T:aes256otrpv3 0.79 0.80 0.81 T:aes256otrcv3 0.81 0.82 0.82 T:morus1280128v1 0.81 0.82 0.82 T:morus1280256v2 0.81 0.82 0.82 T:morus1280256v1 0.81 0.82 0.82 T:morus1280128v2 0.85 0.86 0.86 T:deoxysi128v141 0.88 0.89 0.91 T:aes128gcmv1 0.93 0.94 0.95 T:deoxysneq128128v1 0.97 0.98 0.98 T:deoxysi256v141 0.99 0.99 1.00 aes256gcmv1 0.99 1.00 1.00 T:deoxysneq256128v1 1.12 1.13 1.13 T:colm0v1 1.16 1.16 1.17 T:deoxysii128v141 1.27 1.28 1.29 T:morus640128v2 1.31 1.32 1.33 T:morus640128v1 1.33 1.34 1.35 T:deoxyseq128128v1 1.34 1.35 1.35 T:deoxysii256v141 1.38 1.38 1.38 T:aes128otrsv3 1.44 1.44 1.45 T:deoxyseq256128v1 1.83 1.84 1.84 T:aes256otrsv3 2.14 2.14 2.14 T:aes128n12t8clocv3 2.14 2.14 2.22 T:aes128n8t8clocv2 2.14 2.14 2.22 T:aes128n12t8clocv2 2.16 2.17 2.18 T:norx6444v3 2.19 2.19 2.20 T:aes128n12t8silcv2 2.19 2.20 2.20 T:aes128n8t8silcv2 2.19 2.20 2.24 T:aes128n12t8silcv3 2.34 2.36 2.37 T:norx6441v3 2.36 2.37 2.38 T:norx6441v2 2.69 2.70 2.71 T:norx6441v1 2.86 2.88 2.92 T:lakekeyakv2 2.96 2.99 3.02 T:oceankeyakv2 3.05 3.07 3.08 T:lakekeyakv1 3.19 3.20 3.22 T:seakeyakv2 3.55 3.57 3.58 T:norx6461v3 3.58 3.58 3.59 T:norx6461v2 3.90 3.90 3.92 T:norx3241v3 3.90 3.91 3.92 T:norx3241v2 3.94 3.96 3.97 T:norx6444v2 4.14 4.16 4.17 T:norx6461v1 4.59 4.60 4.62 T:norx3241v1 4.60 4.61 4.61 T:aesjambuv1 4.67 4.68 4.74 T:norx6444v1 5.22 5.33 5.42 T:riverkeyakv2 5.35 5.36 5.39 T:lunarkeyakv2 5.35 5.37 5.42 T:ketjemajorv2 5.79 5.80 5.81 T:acorn128v2 5.92 5.95 5.96 T:norx3261v2 5.97 5.99 6.00 T:norx3261v3 5.87 6.04 6.05 T:acorn128v3 6.53 6.55 6.57 T:ascon96v1 6.54 6.57 6.59 T:ascon128av11 6.59 6.61 6.63 ascon128av12 6.60 6.63 7.07 T:ketjeminorv2 7.84 7.86 7.86 T:norx3261v1 9.74 9.77 9.82 T:ascon128v1 9.76 9.87 9.92 T:ascon128v11 9.85 9.88 9.94 ascon128v12 11.72 11.77 11.78 T:aes128otrsv1 11.77 11.79 11.82 T:aes128otrsv2 12.01 12.04 12.09 T:aes128otrpv2 12.04 12.08 12.10 T:aes128otrpv1 15.18 15.20 15.22 T:aes256otrsv1 15.18 15.21 15.22 T:aes256otrsv2 15.18 15.22 15.26 T:aes128n12clocv1 15.37 15.39 15.41 T:aes128n8clocv1 15.41 15.45 15.52 T:seakeyakv1 15.62 15.64 15.73 T:aes128n8silcv1 15.64 15.66 15.71 T:aes128n12silcv1 15.80 15.83 15.85 T:aes256otrpv2 15.81 15.83 15.84 T:aes256otrpv1 16.35 16.39 16.42 T:twine80n6t4clocv2 16.51 16.53 16.56 T:twine80n6t4clocv3 18.57 18.61 18.93 T:proest256otrv1 20.62 21.32 21.41 T:oceankeyakv1 23.93 24.02 24.12 T:ketjesrv1 24.70 24.75 24.90 T:ketjesrv2 26.96 27.14 27.21 T:riverkeyakv1 36.72 36.79 37.01 T:ketjejrv1 40.99 41.33 42.29 T:proest128otrv1 60.47 60.55 60.70 T:ketjejrv2 66.49 66.60 66.94 T:deoxysneq128128v13 77.70 77.88 78.01 T:present80n6t4silcv3 79.69 79.84 79.90 T:twine80n6clocv1 85.42 85.67 85.71 T:aezv1 88.00 88.11 88.26 T:deoxyseq128128v13 94.39 94.91 97.62 T:deoxysneq256128v13 126.57 126.80 126.84 T:led80n6t4silcv3 127.96 129.18 129.42 T:deoxyseq256128v13 420.45 421.47 435.52 T:acorn128 2289.82 2292.98 2294.33 T:led80n6silcv1 2296.02 2297.23 2298.86 T:led80n6t4silcv2 2479.56 2485.97 2489.25 T:present80n6t4silcv2 2537.44 2539.38 2546.17 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.93 0.97 0.98 T:aegis128 0.95? 0.98? 1.07? T:aegis128l 0.93? 0.99? 1.07? aegis128l 1.06? 1.13? 1.32? T:aezv5 1.06? 1.14? 2.05? T:aezv3 1.14? 1.24? 1.71? T:aezv4 1.21? 1.25? 1.65? T:tiaoxinv1 1.21? 1.30? 1.38? T:tiaoxinv2 1.28 1.30 1.38 T:aegis256 1.32 1.34 1.37 aegis256 2.14? 2.21? 2.66? T:aes128otrpv3 2.25? 2.30? 2.73? T:aes128otrsv3 2.47 2.52 2.57 T:deoxysneq128128v1 2.59? 2.67? 3.16? T:colm0v1 2.90 2.94 3.00 T:aes128n12t8clocv3 2.90 2.94 3.00 T:aes128n8t8clocv2 2.89? 2.96? 3.39? T:aes128n12t8clocv2 2.98? 3.06? 3.55? T:aes128otrcv3 2.92? 3.09? 3.64? T:aes256otrpv3 3.05 3.12 3.20 T:deoxysi128v141 3.25 3.37 3.43 T:deoxysneq256128v1 3.35 3.40 3.67 T:aes256otrsv3 3.61? 3.71? 4.96? T:aeadaes128ocbtaglen128v1 3.76 3.88 3.92 T:aes128n12t8silcv2 3.87 3.88 3.89 T:aes128n12t8silcv3 3.84 3.90 3.95 T:deoxysi256v141 3.84 3.94 4.03 T:aes128n8t8silcv2 4.10 4.13 4.18 T:deoxyseq128128v1 4.24 4.28 4.38 T:morus1280128v1 4.26 4.28 4.32 T:deoxysii128v141 4.22 4.30 4.34 T:morus1280256v1 4.29 4.34 4.38 T:morus640128v1 4.08? 4.38? 4.88? T:aes256otrcv3 4.29? 4.41? 9.45? T:aeadaes192ocbtaglen128v1 4.38 4.44 4.49 T:morus1280128v2 4.35 4.46 4.49 T:morus1280256v2 4.51 4.65 4.70 T:morus640128v2 4.58? 4.77? 9.64? T:aeadaes256ocbtaglen128v1 4.79 4.84 4.93 T:deoxyseq256128v1 5.12 5.14 5.18 T:deoxysii256v141 5.13 5.20 5.25 T:aesjambuv1 5.64 5.69 5.80 T:aes128gcmv1 5.89 5.95 6.13 aes256gcmv1 7.55 7.61 7.70 T:norx6441v1 7.55 7.63 7.79 T:norx6441v2 7.55 7.75 7.86 T:norx6441v3 9.48 9.55 9.67 T:norx3241v3 9.48 9.56 9.66 T:norx3241v1 9.53 9.61 9.77 T:norx3241v2 9.83 9.91 10.15 T:ascon128av11 9.77 10.00 10.10 T:ascon96v1 9.89 10.07 10.27 ascon128av12 10.43? 10.93? 11.65? T:lakekeyakv1 11.42 11.55 11.65 T:norx6461v3 11.49 11.59 11.80 T:norx6461v1 11.52 11.66 11.73 T:norx6461v2 12.51 12.78 13.11 T:lakekeyakv2 12.60 12.89 13.41 T:riverkeyakv2 12.83 12.89 12.95 T:ascon128v11 12.83 12.91 13.07 T:ascon128v1 12.88 12.95 13.10 ascon128v12 14.11 14.25 14.42 T:norx6444v3 14.34 14.45 14.66 T:norx3261v2 14.45 14.50 14.64 T:norx3261v3 16.10 16.23 16.34 T:norx3261v1 18.38 18.44 18.50 T:aes128otrsv1 18.47 18.55 18.72 T:aes128otrsv2 19.42 19.51 19.70 T:aes128n8clocv1 19.44 19.51 19.71 T:aes128n12clocv1 19.72 19.80 19.99 T:aes128otrpv1 19.80 19.94 20.16 T:aes128otrpv2 21.10 21.17 21.45 T:twine80n6t4clocv3 21.34 21.63 22.09 T:aes128n12silcv1 21.30 21.67 22.30 T:aes128n8silcv1 21.80 21.88 22.30 T:twine80n6t4clocv2 22.20 22.38 22.84 T:ketjeminorv2 23.23 23.52 25.63 T:acorn128v3 23.01 23.77 24.32 T:acorn128v2 23.84 23.94 24.12 T:aes256otrsv2 23.76 23.95 24.12 T:aes256otrsv1 25.70 25.83 25.91 T:aes256otrpv1 25.77 25.91 26.36 T:aes256otrpv2 28.32 28.57 28.86 T:norx6444v2 28.41 28.70 29.72 T:seakeyakv2 31.91 32.66 33.24 T:oceankeyakv2 33.31 33.43 33.65 T:norx6444v1 33.11 33.68 34.91 T:ketjemajorv2 38.74 38.93 39.57 T:ketjesrv1 44.18 44.50 44.91 T:ketjesrv2 47.91 48.09 48.45 T:riverkeyakv1 48.95 49.30 49.69 T:ketjejrv1 53.61 54.15 57.21 T:proest256otrv1 66.19 66.38 67.48 T:deoxysneq128128v13 74.28? 75.21? 86.34? T:twine80n6clocv1 80.59 81.19 82.20 T:proest128otrv1 81.50 81.76 82.68 T:ketjejrv2 87.27 87.73 88.91 T:lunarkeyakv2 95.22 95.52 95.65 T:present80n6t4silcv3 95.09 95.55 96.07 T:aezv1 96.51 96.59 96.84 T:deoxysneq256128v13 109.42 110.46 110.98 T:deoxyseq128128v13 116.04 116.40 117.52 T:seakeyakv1 149.38 149.96 150.46 T:led80n6t4silcv3 160.52 161.34 161.77 T:deoxyseq256128v13 219.10 231.98 233.37 T:oceankeyakv1 1462.77 1479.91 1483.30 T:acorn128 2561.19 2564.60 2568.06 T:led80n6silcv1 2571.24 2573.46 2575.41 T:led80n6t4silcv2 2773.95 2778.89 2808.20 T:present80n6t4silcv2 2837.20 2839.67 2856.77 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.94 0.98 1.03 T:aegis128 1.02 1.08 1.12 aegis128l 1.09? 1.11? 1.38? T:aezv5 1.02? 1.18? 1.32? T:aegis128l 1.10? 1.19? 1.24? T:aezv3 1.13? 1.22? 1.34? T:aezv4 1.27? 1.34? 1.42? T:tiaoxinv1 1.28? 1.34? 1.45? T:aegis256 1.33? 1.36? 1.59? T:tiaoxinv2 1.45 1.49 1.52 aegis256 2.16? 2.22? 2.70? T:aes128otrpv3 2.38? 2.45? 2.69? T:aes128otrsv3 2.54 2.58 2.73 T:aes128n8t8clocv2 2.53 2.59 2.70 T:aes128n12t8clocv3 2.51 2.62 2.76 T:aes128n12t8clocv2 2.76 2.85 2.91 T:colm0v1 2.91? 3.14? 3.30? T:aes256otrpv3 3.20 3.30 3.38 T:aes128otrcv3 3.43 3.46 3.66 T:aes256otrsv3 3.64? 3.82? 4.72? T:aeadaes128ocbtaglen128v1 3.87 3.91 3.93 T:aes128n12t8silcv3 3.89? 3.92? 5.14? T:aes128n8t8silcv2 3.91? 3.94? 5.12? T:aes128n12t8silcv2 3.92 3.97 4.05 T:deoxysneq256128v1 4.05 4.09 4.14 T:deoxysneq128128v1 3.80? 4.11? 8.90? T:aeadaes192ocbtaglen128v1 4.16 4.20 4.28 T:deoxysi128v141 4.18? 4.26? 4.98? T:aes256otrcv3 4.38 4.47 4.65 T:morus640128v1 4.59 4.62 4.70 T:morus1280128v1 4.62 4.65 4.72 T:morus1280256v1 4.73 4.82 4.88 T:morus1280256v2 4.79 4.84 4.85 T:morus1280128v2 4.81 4.88 4.91 T:deoxysii128v141 4.78 4.89 5.01 T:morus640128v2 4.97 5.04 5.09 T:deoxysi256v141 4.24? 5.17? 9.86? T:aeadaes256ocbtaglen128v1 5.37 5.39 5.45 T:aesjambuv1 5.42 5.48 5.55 T:aes128gcmv1 5.47 5.51 5.55 aes256gcmv1 5.50 5.55 5.61 T:deoxyseq128128v1 5.71 5.80 6.09 T:deoxyseq256128v1 6.11 6.15 6.24 T:deoxysii256v141 7.77 7.84 7.95 T:norx6441v1 7.81 7.85 7.91 T:norx6441v2 7.78 7.86 7.99 T:norx6441v3 9.56 9.64 9.74 T:ascon96v1 9.66 9.73 9.85 T:norx3241v1 9.70 9.77 10.01 T:ascon128av11 9.71 9.80 9.95 T:norx3241v3 9.69 9.85 10.30 T:norx3241v2 9.91 10.00 10.20 ascon128av12 10.48 10.92 11.28 T:lakekeyakv1 11.73 11.80 11.95 T:norx6461v2 11.73 11.83 11.88 T:norx6461v1 11.77 11.86 11.95 T:norx6461v3 12.28 12.48 12.81 T:lakekeyakv2 12.70 12.87 12.94 T:ascon128v11 12.72 12.91 13.15 T:ascon128v1 12.89 13.00 13.09 ascon128v12 12.78 13.11 13.74 T:riverkeyakv2 14.09 14.17 14.26 T:norx6444v3 14.55 14.74 14.78 T:norx3261v2 14.71 14.87 15.00 T:norx3261v3 16.32 16.38 16.55 T:norx3261v1 18.67 18.75 18.86 T:aes128otrsv1 18.68 18.91 19.16 T:aes128otrsv2 18.95 19.03 19.27 T:aes128n12clocv1 19.00 19.12 19.27 T:aes128n8clocv1 20.20 20.23 20.34 T:aes128otrpv1 20.16 20.30 20.68 T:aes128otrpv2 21.08 21.20 21.41 T:twine80n6t4clocv3 21.73 21.81 22.29 T:twine80n6t4clocv2 21.34 21.91 22.84 T:aes128n8silcv1 21.77? 23.01? 32.88? T:aes128n12silcv1 22.80 23.34 24.08 T:acorn128v2 23.28 23.66 24.27 T:acorn128v3 23.37 23.79 24.14 T:ketjeminorv2 24.15 24.20 24.53 T:aes256otrsv1 24.06 24.32 24.56 T:aes256otrsv2 26.12 26.31 26.42 T:aes256otrpv2 26.29 26.33 27.90 T:aes256otrpv1 28.41 28.81 29.02 T:norx6444v2 28.77 29.28 29.65 T:seakeyakv2 31.82 32.24 32.73 T:oceankeyakv2 33.55 33.77 34.33 T:norx6444v1 33.78 34.33 35.34 T:ketjemajorv2 39.38 39.64 40.30 T:ketjesrv1 43.58 43.72 44.81 T:ketjesrv2 47.70 48.10 48.52 T:riverkeyakv1 48.98 49.27 50.16 T:ketjejrv1 55.52 55.83 58.20 T:proest256otrv1 75.05 75.70 76.67 T:deoxysneq128128v13 80.74 81.73 83.21 T:proest128otrv1 81.30 81.77 82.54 T:ketjejrv2 76.49? 86.95? 87.76? T:twine80n6clocv1 86.70 87.26 88.37 T:lunarkeyakv2 95.52 95.73 96.16 T:present80n6t4silcv3 97.48 97.68 98.54 T:aezv1 106.85 107.51 109.98 T:deoxysneq256128v13 108.90 109.55 112.17 T:deoxyseq128128v13 115.85 116.00 117.09 T:seakeyakv1 150.08 151.12 151.30 T:led80n6t4silcv3 159.73 161.12 162.09 T:deoxyseq256128v13 230.72 232.05 233.45 T:oceankeyakv1 1450.83 1454.34 1475.91 T:acorn128 2560.41 2561.74 2567.55 T:led80n6silcv1 2567.88 2570.55 2572.49 T:led80n6t4silcv2 2772.70 2775.56 2790.86 T:present80n6t4silcv2 2837.27 2839.52 2846.95 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.74? 0.77? 0.92? T:aezv3 0.63? 0.81? 1.08? T:aezv5 0.75? 0.82? 0.91? T:aezv4 0.95 0.98 1.01 T:aegis128 1.00? 1.03? 1.13? T:aegis128l 1.05? 1.09? 1.23? aegis128l 1.30 1.33 1.36 T:aegis256 1.28? 1.34? 1.43? T:tiaoxinv2 1.30? 1.34? 1.55? T:tiaoxinv1 1.46 1.49 1.53 aegis256 2.18 2.20 2.30 T:aes128otrpv3 2.38? 2.48? 3.80? T:aes128n12t8clocv3 2.39 2.48 2.64 T:aes128n8t8clocv2 2.39? 2.55? 3.16? T:aes128n12t8clocv2 2.37? 2.59? 2.64? T:aes128otrsv3 2.81 2.83 2.97 T:colm0v1 2.96 3.01 3.10 T:aes256otrpv3 3.19 3.30 3.41 T:aes128otrcv3 3.39 3.44 3.51 T:aes256otrsv3 3.46 3.59 3.80 T:aeadaes128ocbtaglen128v1 3.74 3.79 3.87 T:deoxysneq256128v1 3.72? 3.80? 9.12? T:aeadaes192ocbtaglen128v1 3.75 3.84 3.96 T:aes128n12t8silcv3 3.88? 3.96? 4.41? T:deoxysneq128128v1 4.16? 4.20? 4.98? T:aes256otrcv3 4.16 4.20 4.25 T:deoxysi128v141 4.35 4.40 4.52 T:morus640128v1 4.29 4.41 4.64 T:aeadaes256ocbtaglen128v1 4.59 4.62 4.65 T:morus1280128v1 4.62 4.63 4.68 T:morus1280256v1 4.71 4.76 4.85 T:deoxysii128v141 4.75 4.77 4.81 T:morus1280256v2 4.77 4.80 4.85 T:morus1280128v2 4.77 4.83 4.88 T:morus640128v2 4.92 4.98 5.05 T:deoxysi256v141 3.84? 5.02? 5.09? T:aes128n12t8silcv2 3.87? 5.02? 5.09? T:aes128n8t8silcv2 5.39 5.43 5.45 T:aesjambuv1 5.41 5.45 5.53 T:aes128gcmv1 5.45 5.54 5.66 aes256gcmv1 5.47 5.55 5.59 T:deoxyseq128128v1 5.67 5.77 5.82 T:deoxyseq256128v1 6.05 6.11 6.15 T:deoxysii256v141 7.75 7.82 7.88 T:norx6441v1 7.77 7.84 7.91 T:norx6441v2 7.79 7.85 7.90 T:norx6441v3 9.58 9.65 9.91 T:ascon96v1 9.62 9.66 9.77 T:norx3241v2 9.71 9.74 9.84 T:norx3241v1 9.74 9.80 9.84 T:norx3241v3 9.66 9.80 10.12 T:ascon128av11 9.91 9.99 10.05 ascon128av12 10.48 10.78 11.32 T:lakekeyakv1 11.69 11.77 11.82 T:norx6461v1 11.70 11.79 11.95 T:norx6461v2 11.78 11.88 11.94 T:norx6461v3 12.32 12.62 12.80 T:lakekeyakv2 12.65 12.81 12.93 T:ascon128v11 12.67 12.85 13.03 T:ascon128v1 12.82 12.89 13.08 ascon128v12 12.98 13.38 13.87 T:riverkeyakv2 14.06 14.14 14.28 T:norx6444v3 14.61 14.76 14.85 T:norx3261v2 14.70 14.85 15.00 T:norx3261v3 16.36 16.41 16.46 T:norx3261v1 18.66 18.76 19.12 T:aes128otrsv2 18.77 18.89 19.53 T:aes128otrsv1 18.87 18.95 19.09 T:aes128n12clocv1 18.96 19.05 19.52 T:aes128n8clocv1 20.17 20.30 20.38 T:aes128otrpv2 20.31 20.43 21.11 T:aes128otrpv1 20.98 21.12 21.74 T:twine80n6t4clocv3 21.26 21.77 22.38 T:aes128n12silcv1 21.71 21.92 22.34 T:twine80n6t4clocv2 23.15 23.50 23.77 T:acorn128v3 22.23 23.86 24.40 T:ketjeminorv2 23.69 24.15 24.20 T:acorn128v2 24.26 24.33 24.96 T:aes256otrsv1 24.19 24.42 24.86 T:aes256otrsv2 26.09 26.20 26.30 T:aes256otrpv2 26.15 26.29 27.02 T:aes256otrpv1 28.54 28.71 28.90 T:norx6444v2 28.66 28.97 29.51 T:seakeyakv2 31.93 32.07 32.54 T:oceankeyakv2 33.49 33.95 34.73 T:norx6444v1 33.71 34.66 35.38 T:ketjemajorv2 22.23? 35.14? 36.70? T:aes128n8silcv1 39.16 39.33 39.90 T:ketjesrv1 43.59 43.91 44.77 T:ketjesrv2 47.65 48.06 48.53 T:riverkeyakv1 49.07 49.52 50.05 T:ketjejrv1 53.35 53.75 57.25 T:proest256otrv1 75.21 75.58 75.78 T:deoxysneq128128v13 74.34? 75.98? 86.82? T:twine80n6clocv1 78.70 79.53 82.01 T:proest128otrv1 81.45 81.98 85.59 T:ketjejrv2 86.55 87.55 88.44 T:lunarkeyakv2 95.64 95.80 95.99 T:present80n6t4silcv3 97.44 97.88 98.20 T:aezv1 106.03 108.93 109.59 T:deoxysneq256128v13 110.26 110.83 111.92 T:deoxyseq128128v13 115.74 116.11 117.27 T:seakeyakv1 150.35 150.94 151.60 T:led80n6t4silcv3 159.90 161.45 162.23 T:deoxyseq256128v13 219.38 232.09 233.37 T:oceankeyakv1 1452.23 1456.02 1474.20 T:acorn128 2560.70 2563.69 2568.80 T:led80n6silcv1 2566.23 2569.55 2573.52 T:led80n6t4silcv2 2770.85 2771.84 2778.00 T:present80n6t4silcv2 2835.54 2837.02 2844.81 T:present80n6silcv1