VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20240716

[Page version: 20240726 23:46:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.20? 0.21? 0.23? T:tiaoxinv2 0.20? 0.21? 0.23? T:tiaoxinv1 0.25 0.25 0.26 aegis128l 0.25 0.25 0.26 T:aegis128l 0.42 0.42 0.43 aegis256 0.46 0.47 0.48 T:aegis128 0.62 0.62 0.63 T:aezv3 0.62 0.63 0.64 T:aezv5 0.62 0.63 0.63 T:aezv4 0.57? 0.63? 0.66? T:aeadaes128ocbtaglen128v1 0.63 0.64 0.64 T:morus1280128v2 0.63 0.64 0.64 T:aes128otrcv3 0.63 0.64 0.64 T:morus1280256v2 0.63 0.64 0.64 T:morus1280256v1 0.63 0.64 0.65 T:morus1280128v1 0.65 0.66 0.67 T:aes128otrsv3 0.66 0.66 0.68 T:aes128otrpv3 0.65 0.68 0.70 T:aes128gcmv1 0.40? 0.76? 0.79? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.86 0.87 0.88 T:aes256otrcv3 0.84 0.88 0.88 T:aeadaes256ocbtaglen128v1 0.87 0.88 0.89 T:aes256otrpv3 0.89 0.89 0.90 T:aes256otrsv3 0.88 0.91 0.94 T:aes256gcmv1 0.91 0.93 0.96 T:deoxysi128v141 0.96 0.99 1.01 T:deoxysi256v141 0.99 0.99 1.01 T:deoxysneq256128v1 1.02 1.04 1.05 T:morus640128v2 1.02 1.05 1.06 T:morus640128v1 1.16 1.17 1.20 T:norx6444v3 1.62 1.64 1.65 T:colm0v1 1.76 1.77 1.78 T:deoxyseq128128v1 1.76 1.78 1.79 T:deoxysii128v141 1.98 2.01 2.04 T:deoxysii256v141 2.04 2.05 2.06 T:deoxyseq256128v1 2.04 2.08 2.18 T:lunarkeyakv2 2.08 2.10 2.12 T:norx6441v2 2.09 2.11 2.14 T:norx6441v3 2.49 2.50 2.52 T:norx6441v1 2.73 2.77 2.80 T:seakeyakv2 2.79 2.80 2.81 T:aes128n12t8clocv3 2.81 2.81 2.82 T:aes128n8t8clocv2 2.81 2.81 2.82 T:aes128n12t8silcv3 2.81 2.81 2.81 T:aes128n12t8clocv2 2.81 2.81 2.81 T:aes128n8t8silcv2 2.81 2.81 2.82 T:aes128n12t8silcv2 2.82 2.86 2.92 T:oceankeyakv2 3.18 3.20 3.21 T:norx6461v3 3.17 3.20 3.22 T:norx6461v2 3.51 3.53 3.59 T:norx6444v2 3.74 3.76 3.78 T:norx3241v2 3.76 3.78 3.79 T:norx3241v3 3.74 3.83 3.92 T:norx6444v1 3.84 3.86 3.86 T:norx6461v1 4.16 4.19 4.22 T:lakekeyakv1 4.41 4.43 4.47 T:lakekeyakv2 4.42 4.44 4.47 T:norx3241v1 5.70 5.72 5.73 T:aesjambuv1 5.75 5.76 5.79 T:norx3261v3 5.92 5.94 5.97 T:norx3261v2 7.12 7.13 7.16 T:ascon96v1 7.11 7.13 7.15 T:ascon128av11 7.22 7.24 7.28 T:norx3261v1 7.41 7.44 7.46 ascon128av12 7.63 7.73 7.78 T:ketjemajorv2 9.61 9.64 9.68 T:riverkeyakv2 9.97 10.00 10.01 T:ketjeminorv2 10.50 10.53 10.57 T:ascon128v11 10.51 10.53 10.55 T:ascon128v1 10.79 10.85 11.10 ascon128v12 14.06 14.08 14.10 T:aes128otrpv1 14.06 14.12 14.15 T:aes128otrsv2 14.08 14.12 14.14 T:aes128otrpv2 14.13 14.16 14.20 T:aes128otrsv1 14.35 14.43 14.50 T:oceankeyakv1 15.60 15.62 15.63 T:twine80n6t4clocv2 15.88 15.92 15.94 T:twine80n6t4clocv3 17.85 17.89 17.93 T:aes256otrpv1 17.86 17.90 17.95 T:aes256otrsv1 17.88 17.92 17.94 T:aes256otrsv2 17.90 17.93 17.98 T:aes256otrpv2 18.02 18.05 18.09 T:seakeyakv1 23.10 23.13 23.16 T:aes128n8clocv1 23.12 23.16 23.19 T:aes128n12clocv1 24.64 24.78 24.83 T:aes128n8silcv1 24.79 24.83 24.86 T:aes128n12silcv1 24.96 24.98 25.01 T:proest256otrv1 31.18 31.20 31.22 T:riverkeyakv1 34.96 35.01 35.30 T:ketjesrv1 35.46 35.51 35.54 T:ketjesrv2 57.75? 58.32? 64.40? T:proest128otrv1 60.50 60.61 60.68 T:ketjejrv1 75.59 76.15 83.42 T:present80n6t4silcv3 78.38 78.64 78.73 T:deoxysneq128128v13 94.58 94.65 95.23 T:ketjejrv2 105.30 105.35 105.43 T:deoxysneq256128v13 121.26 123.03 123.25 T:twine80n6clocv1 130.68 130.70 130.80 T:led80n6t4silcv3 157.19 157.23 157.32 T:deoxyseq128128v13 181.26 181.59 182.58 T:aezv1 214.34 214.45 214.57 T:deoxyseq256128v13 299.67 299.85 300.13 aes256gcmv1 282.86? 349.65? 659.95? T:acorn128v3 344.89 363.03 365.42 T:acorn128 353.61 363.21 365.19 T:acorn128v2 4157.82 4158.05 4158.29 T:present80n6t4silcv2 4159.39 4160.73 4163.19 T:present80n6silcv1 8445.09 8449.13 8632.93 T:led80n6t4silcv2 8497.17 8500.51 8503.58 T:led80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.25 0.26 0.27 T:aegis128l 0.25 0.26 0.27 aegis128l 0.36 0.37 0.38 T:tiaoxinv1 0.37 0.37 0.38 T:tiaoxinv2 0.46 0.46 0.46 T:aegis128 0.47 0.48 0.49 aegis256 0.62 0.62 0.63 T:aezv3 0.62 0.62 0.63 T:aezv5 0.62 0.62 0.66 T:aezv4 0.61 0.62 0.64 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.66 T:morus1280128v2 0.65 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v1 0.65 0.65 0.66 T:morus1280256v1 0.67 0.67 0.69 T:aes128otrsv3 0.60? 0.68? 0.70? T:aes128gcmv1 0.68 0.69 0.69 T:aes128otrcv3 0.72 0.73 0.75 T:aes128otrpv3 0.68? 0.76? 0.78? T:aeadaes192ocbtaglen128v1 0.86 0.88 0.89 T:aeadaes256ocbtaglen128v1 0.83? 0.91? 0.93? T:aes256gcmv1 0.90 0.91 0.91 T:aes256otrsv3 0.91 0.93 0.93 T:aes256otrcv3 0.94 0.96 0.97 T:aes256otrpv3 1.01 1.02 1.03 T:morus640128v2 1.04 1.05 1.06 T:morus640128v1 1.15 1.18 1.19 T:deoxysi128v141 1.17 1.18 1.20 T:norx6444v3 1.21 1.21 1.23 T:deoxysneq128128v1 1.26 1.27 1.28 T:deoxysi256v141 1.29 1.30 1.31 T:deoxysneq256128v1 1.65 1.66 1.67 T:colm0v1 1.76 1.79 1.81 T:deoxysii128v141 1.99 2.01 2.03 T:norx6441v3 1.98 2.01 2.07 T:deoxysii256v141 2.04 2.06 2.09 T:norx6441v2 2.06? 2.20? 2.29? T:lunarkeyakv2 2.43 2.44 2.45 T:deoxyseq128128v1 2.47 2.50 2.51 T:norx6441v1 2.63 2.65 2.66 T:deoxyseq256128v1 2.74 2.75 2.78 T:aes128n12t8silcv2 2.74 2.75 2.77 T:aes128n12t8silcv3 2.74 2.75 2.77 T:aes128n8t8clocv2 2.75 2.76 2.78 T:aes128n8t8silcv2 2.75 2.76 2.78 T:aes128n12t8clocv3 2.74 2.76 2.78 T:aes128n12t8clocv2 2.82 2.85 2.90 T:seakeyakv2 2.85 2.93 2.97 T:oceankeyakv2 3.11 3.12 3.14 T:norx6461v2 3.13 3.14 3.17 T:norx6461v3 3.48 3.50 3.52 T:norx6444v2 3.67 3.69 3.71 T:norx3241v3 3.68 3.70 3.71 T:norx3241v2 3.74 3.75 3.77 T:norx6444v1 3.85 3.88 3.90 T:norx6461v1 4.23 4.27 4.29 T:lakekeyakv1 4.33 4.35 4.41 T:norx3241v1 4.48 4.51 4.53 T:lakekeyakv2 5.70 5.73 5.78 T:norx3261v3 5.79 5.81 5.83 T:norx3261v2 5.87 5.87 5.87 T:aesjambuv1 7.00 7.03 7.04 T:norx3261v1 7.15 7.18 7.21 T:ascon128av11 7.15 7.19 7.22 T:ascon96v1 7.29 7.32 7.36 ascon128av12 7.89 7.94 7.99 T:ketjemajorv2 9.12 9.19 9.22 T:ketjeminorv2 9.77 9.81 9.85 T:riverkeyakv2 10.46 10.49 10.50 T:ascon128v11 10.46 10.49 10.51 T:ascon128v1 10.95 10.98 11.00 ascon128v12 14.26 14.29 14.30 T:aes128otrpv2 14.27 14.30 14.33 T:aes128otrsv2 14.26 14.31 14.33 T:aes128otrpv1 14.28 14.33 14.35 T:aes128otrsv1 14.48 14.53 14.62 T:oceankeyakv1 15.64 15.66 15.70 T:twine80n6t4clocv2 15.80 15.82 15.86 T:twine80n6t4clocv3 17.96 18.00 18.03 T:aes256otrsv2 17.96 18.01 18.02 T:aes256otrpv1 17.99 18.03 18.05 T:aes256otrsv1 18.01 18.06 18.09 T:aes256otrpv2 18.09 18.13 18.18 T:seakeyakv1 22.18 22.27 22.32 T:aes128n12clocv1 22.50 22.55 22.60 T:aes128n8clocv1 24.56 24.65 24.91 T:proest256otrv1 24.97 25.02 25.07 T:aes128n8silcv1 24.99 25.06 25.12 T:aes128n12silcv1 31.15 31.19 31.23 T:riverkeyakv1 35.70 35.74 35.79 T:ketjesrv2 35.66 35.78 35.85 T:ketjesrv1 58.51 58.77 59.83 T:proest128otrv1 61.19 61.30 61.62 T:ketjejrv1 76.19 77.12 84.11 T:present80n6t4silcv3 94.40 94.48 94.61 T:ketjejrv2 111.01 111.45 111.83 T:deoxysneq128128v13 120.88 122.61 122.78 T:twine80n6clocv1 131.10 131.15 131.23 T:led80n6t4silcv3 144.61 144.94 145.31 T:deoxysneq256128v13 157.25 157.30 157.37 T:deoxyseq128128v13 181.15 181.43 181.56 T:aezv1 214.11 214.20 214.30 T:deoxyseq256128v13 299.63 299.78 299.82 aes256gcmv1 276.25? 342.27? 652.09? T:acorn128v3 345.87 349.58 359.50 T:acorn128v2 336.66 355.10 357.84 T:acorn128 4157.53 4157.80 4158.04 T:present80n6t4silcv2 4157.37 4158.25 4162.44 T:present80n6silcv1 8455.67 8469.36 8633.87 T:led80n6t4silcv2 8504.66 8509.12 8515.49 T:led80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.25 T:aezv3 0.25 0.26 0.27 T:aegis128l 0.25 0.27 0.27 T:aezv4 0.27? 0.28? 0.31? aegis128l 0.36 0.36 0.37 T:tiaoxinv1 0.37 0.37 0.40 T:tiaoxinv2 0.45 0.46 0.46 T:aegis128 0.47 0.49 0.49 aegis256 0.62 0.63 0.63 T:aeadaes128ocbtaglen128v1 0.65 0.65 0.66 T:morus1280256v1 0.65 0.65 0.66 T:morus1280256v2 0.65 0.65 0.66 T:morus1280128v2 0.65 0.66 0.66 T:morus1280128v1 0.63 0.66 0.68 T:aes128gcmv1 0.67 0.67 0.68 T:aes128otrsv3 0.68 0.69 0.69 T:aes128otrcv3 0.72 0.72 0.72 T:aes128otrpv3 0.75? 0.75? 1.10? T:aeadaes192ocbtaglen128v1 0.54? 0.88? 1.21? T:aeadaes256ocbtaglen128v1 0.83 0.89 0.91 T:aes256gcmv1 0.90 0.91 0.91 T:aes256otrsv3 0.91 0.92 0.93 T:aes256otrcv3 0.95 0.95 0.97 T:aes256otrpv3 1.02 1.02 1.03 T:morus640128v2 1.04 1.05 1.06 T:morus640128v1 1.15 1.17 1.19 T:deoxysi128v141 1.18 1.19 1.21 T:norx6444v3 1.21 1.21 1.22 T:deoxysneq128128v1 1.26 1.27 1.29 T:deoxysi256v141 1.29 1.30 1.32 T:deoxysneq256128v1 1.64 1.65 1.68 T:colm0v1 1.78 1.79 1.81 T:deoxysii128v141 2.01 2.02 2.06 T:deoxysii256v141 2.00 2.02 2.03 T:norx6441v3 2.04 2.07 2.10 T:norx6441v2 2.15 2.20 2.23 T:lunarkeyakv2 2.42 2.44 2.45 T:deoxyseq128128v1 2.49 2.50 2.51 T:norx6441v1 2.64 2.65 2.67 T:deoxyseq256128v1 2.70 2.74 2.77 T:aes128n8t8clocv2 2.72 2.75 2.76 T:aes128n12t8silcv2 2.74 2.75 2.77 T:aes128n12t8clocv2 2.74 2.75 2.78 T:aes128n12t8silcv3 2.75 2.76 2.78 T:aes128n8t8silcv2 2.73 2.77 2.77 T:aes128n12t8clocv3 2.87 2.90 2.95 T:seakeyakv2 2.91 2.96 2.99 T:oceankeyakv2 3.09 3.12 3.16 T:norx6461v2 3.13 3.14 3.16 T:norx6461v3 3.51 3.52 3.56 T:norx6444v2 3.67 3.68 3.71 T:norx3241v2 3.68 3.70 3.71 T:norx3241v3 3.76 3.78 3.80 T:norx6444v1 3.83 3.85 3.88 T:norx6461v1 4.26 4.29 4.30 T:lakekeyakv1 4.34 4.36 4.39 T:norx3241v1 4.51 4.52 4.53 T:lakekeyakv2 5.71 5.72 5.77 T:norx3261v3 5.79 5.81 5.82 T:norx3261v2 5.87 5.87 5.87 T:aesjambuv1 7.01 7.03 7.04 T:norx3261v1 7.16 7.18 7.21 T:ascon128av11 7.16 7.19 7.22 T:ascon96v1 7.30 7.32 7.34 ascon128av12 7.90 7.96 8.02 T:ketjemajorv2 9.22 9.25 9.30 T:ketjeminorv2 9.78 9.82 9.85 T:riverkeyakv2 10.46 10.48 10.49 T:ascon128v1 10.45 10.49 10.50 T:ascon128v11 10.97 10.99 11.01 ascon128v12 14.26 14.30 14.33 T:aes128otrpv2 14.30 14.31 14.34 T:aes128otrsv2 14.29 14.31 14.35 T:aes128otrsv1 14.31 14.35 14.38 T:aes128otrpv1 14.49 14.55 14.64 T:oceankeyakv1 15.64 15.68 15.68 T:twine80n6t4clocv2 15.79 15.82 15.84 T:twine80n6t4clocv3 18.00 18.02 18.06 T:aes256otrsv2 17.99 18.02 18.05 T:aes256otrpv1 17.99 18.03 18.06 T:aes256otrsv1 18.05 18.08 18.11 T:aes256otrpv2 18.13 18.16 18.19 T:seakeyakv1 22.24 22.26 22.32 T:aes128n12clocv1 22.53 22.56 22.60 T:aes128n8clocv1 24.82 24.86 24.91 T:proest256otrv1 24.97 25.02 25.11 T:aes128n8silcv1 24.98 25.03 25.07 T:aes128n12silcv1 31.12 31.17 31.22 T:riverkeyakv1 35.71 35.78 35.82 T:ketjesrv2 35.71 35.80 35.98 T:ketjesrv1 58.55 58.81 59.80 T:proest128otrv1 61.20 61.29 61.59 T:ketjejrv1 76.26 77.22 84.00 T:present80n6t4silcv3 94.52 94.60 94.69 T:ketjejrv2 111.04 111.43 111.90 T:deoxysneq128128v13 121.16 122.63 122.91 T:twine80n6clocv1 131.08 131.17 131.23 T:led80n6t4silcv3 144.69 144.94 145.40 T:deoxysneq256128v13 157.26 157.35 157.41 T:deoxyseq128128v13 181.06 181.17 181.34 T:aezv1 214.24 214.51 214.96 T:deoxyseq256128v13 287.31 287.37 287.46 aes256gcmv1 276.04? 342.45? 652.12? T:acorn128v3 345.86 349.39 359.56 T:acorn128v2 336.99 355.11 357.87 T:acorn128 4157.44 4157.78 4158.15 T:present80n6t4silcv2 4157.10 4157.89 4162.40 T:present80n6silcv1 8452.09 8465.57 8634.36 T:led80n6t4silcv2 8501.48 8505.49 8513.50 T:led80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.19 0.20 0.21 T:tiaoxinv2 0.19? 0.20? 0.22? T:tiaoxinv1 0.25 0.25 0.26 aegis128l 0.25 0.25 0.26 T:aegis128l 0.39 0.39 0.40 aegis256 0.42 0.44 0.44 T:aezv5 0.42 0.44 0.45 T:aezv4 0.42 0.44 0.45 T:aezv3 0.45 0.46 0.46 T:aegis128 0.51 0.51 0.52 T:aes128gcmv1 0.61 0.61 0.62 T:morus1280256v2 0.61 0.62 0.63 T:morus1280256v1 0.61 0.62 0.63 T:morus1280128v1 0.61 0.62 0.63 T:morus1280128v2 0.57? 0.62? 0.67? T:aeadaes128ocbtaglen128v1 0.62 0.63 0.64 T:aes256gcmv1 0.64 0.65 0.65 T:aes128otrpv3 0.66 0.66 0.66 T:aes128otrcv3 0.67? 0.74? 0.79? T:aeadaes192ocbtaglen128v1 0.85 0.86 0.90 T:deoxysneq128128v1 0.88 0.89 0.89 T:aes256otrpv3 0.88 0.89 0.90 T:aes256otrcv3 0.71? 0.89? 1.05? T:aeadaes256ocbtaglen128v1 0.87 0.91 0.94 T:deoxysi128v141 0.98 0.99 1.02 T:deoxysneq256128v1 0.98 1.00 1.03 T:deoxysi256v141 1.00 1.01 1.01 T:morus640128v1 1.00 1.01 1.02 T:morus640128v2 1.12 1.14 1.15 T:colm0v1 1.31 1.33 1.34 T:deoxysii128v141 1.34 1.36 1.39 T:deoxyseq128128v1 1.47 1.50 1.52 T:deoxysii256v141 1.53 1.53 1.54 T:deoxyseq256128v1 1.65 1.67 1.68 T:norx6444v3 1.67 1.67 1.68 T:aes128otrsv3 2.09 2.10 2.11 T:norx6441v2 2.12 2.13 2.14 T:norx6441v3 2.28 2.29 2.29 T:aes256otrsv3 2.35 2.37 2.39 T:seakeyakv2 2.37 2.41 2.47 T:oceankeyakv2 2.48 2.50 2.51 T:norx6441v1 2.75 2.75 2.75 T:aes128n8t8silcv2 2.75 2.75 2.75 T:aes128n12t8silcv3 2.75 2.75 2.76 T:aes128n12t8silcv2 2.76 2.76 2.77 T:aes128n8t8clocv2 2.76 2.76 2.77 T:aes128n12t8clocv2 2.76 2.77 2.77 T:aes128n12t8clocv3 2.89 2.91 2.93 T:lunarkeyakv2 3.22 3.24 3.25 T:norx6461v3 3.25 3.26 3.28 T:norx6461v2 3.50 3.51 3.52 T:norx6444v2 3.77 3.79 3.80 T:norx3241v2 3.78 3.79 3.81 T:norx3241v3 3.75 3.79 3.85 T:norx6444v1 3.84 3.85 3.87 T:norx6461v1 3.92 3.94 3.96 T:lakekeyakv1 3.95 3.96 3.98 T:lakekeyakv2 4.42 4.45 4.46 T:norx3241v1 5.73 5.73 5.73 T:aesjambuv1 5.81 5.82 5.83 T:norx3261v2 5.82 5.83 5.84 T:norx3261v3 6.41 6.43 6.48 T:ketjemajorv2 6.90 6.91 6.94 T:riverkeyakv2 7.08 7.10 7.12 T:ascon96v1 7.07 7.10 7.12 T:ascon128av11 7.22 7.24 7.26 T:norx3261v1 7.43 7.45 7.47 ascon128av12 8.62 8.63 8.64 T:ketjeminorv2 10.50 10.52 10.55 T:ascon128v11 10.50 10.53 10.55 T:ascon128v1 10.84 10.87 10.88 ascon128v12 12.90 12.93 12.95 T:aes128otrsv1 12.92 12.94 12.96 T:aes128otrsv2 14.31 14.36 14.40 T:oceankeyakv1 14.57 14.60 14.66 T:aes128otrpv1 14.61 14.65 14.70 T:aes128otrpv2 15.34 15.36 15.37 T:twine80n6t4clocv2 15.68 15.69 15.70 T:twine80n6t4clocv3 16.61 16.62 16.67 T:aes256otrsv1 16.61 16.64 16.67 T:aes256otrsv2 17.62 17.64 17.68 T:aes128n8clocv1 17.62 17.65 17.70 T:aes128n12clocv1 17.93 17.96 17.97 T:seakeyakv1 18.33 18.35 18.37 T:aes256otrpv2 18.36 18.38 18.43 T:aes256otrpv1 18.44 18.47 18.52 T:aes128n8silcv1 18.44 18.48 18.50 T:aes128n12silcv1 25.17 25.19 25.22 T:proest256otrv1 29.45 29.48 29.52 T:riverkeyakv1 32.07 32.10 32.23 T:ketjesrv1 33.24 33.27 33.32 T:ketjesrv2 56.66 56.70 56.76 T:ketjejrv1 58.40 58.65 61.73 T:proest128otrv1 75.35 75.91 83.34 T:present80n6t4silcv3 77.90 78.01 78.72 T:deoxysneq128128v13 90.69 91.76 91.93 T:twine80n6clocv1 92.37 92.61 92.65 T:ketjejrv2 105.20 105.26 105.47 T:deoxysneq256128v13 117.77 117.80 117.87 T:deoxyseq128128v13 119.56 119.68 119.85 T:aezv1 130.39 130.41 130.46 T:led80n6t4silcv3 160.35 160.43 160.54 T:deoxyseq256128v13 293.63 293.72 295.35 aes256gcmv1 306.62? 348.16? 634.28? T:acorn128v3 345.38 362.51 364.29 T:acorn128 353.65 362.63 363.73 T:acorn128v2 3119.60 3120.13 3121.39 T:present80n6silcv1 3120.13 3121.30 3121.92 T:present80n6t4silcv2 6323.42 6332.96 6362.16 T:led80n6t4silcv2 6368.30 6370.88 6375.52 T:led80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.25 0.25 0.26 T:aegis128l 0.25 0.25 0.26 aegis128l 0.27 0.28 0.28 T:tiaoxinv1 0.26 0.28 0.28 T:tiaoxinv2 0.42 0.43 0.45 T:aezv3 0.43 0.43 0.44 T:aezv4 0.43 0.44 0.44 T:aezv5 0.44 0.44 0.45 aegis256 0.46 0.46 0.46 T:aegis128 0.48 0.51 0.52 T:aes128gcmv1 0.60 0.61 0.63 T:aes256gcmv1 0.62 0.62 0.63 T:morus1280256v1 0.58? 0.62? 0.69? T:aeadaes128ocbtaglen128v1 0.62 0.62 0.63 T:morus1280128v1 0.62 0.63 0.63 T:morus1280128v2 0.62 0.63 0.63 T:morus1280256v2 0.68 0.69 0.69 T:aes128otrcv3 0.67 0.69 0.69 T:aes128otrpv3 0.57? 0.75? 0.92? T:aeadaes192ocbtaglen128v1 0.71? 0.88? 1.05? T:aeadaes256ocbtaglen128v1 0.91 0.92 0.93 T:aes256otrcv3 0.92 0.93 0.94 T:aes256otrpv3 0.98 0.99 1.00 T:morus640128v2 0.99 1.00 1.01 T:morus640128v1 0.99 1.02 1.05 T:deoxysi128v141 1.03 1.04 1.05 T:deoxysneq128128v1 1.11 1.13 1.16 T:deoxysi256v141 1.13 1.15 1.16 T:deoxysneq256128v1 1.14 1.16 1.17 T:colm0v1 1.29 1.31 1.33 T:deoxysii128v141 1.47 1.50 1.54 T:deoxysii256v141 1.64 1.66 1.67 T:norx6444v3 1.68 1.68 1.69 T:aes128otrsv3 1.69 1.70 1.73 T:deoxyseq128128v1 1.82 1.83 1.84 T:deoxyseq256128v1 2.05 2.07 2.08 T:norx6441v2 2.07 2.08 2.09 T:norx6441v3 2.29 2.30 2.30 T:aes256otrsv3 2.38 2.39 2.40 T:seakeyakv2 2.41 2.45 2.50 T:oceankeyakv2 2.47 2.48 2.51 T:norx6441v1 2.70 2.72 2.73 T:aes128n8t8silcv2 2.70 2.72 2.74 T:aes128n12t8silcv3 2.72 2.72 2.74 T:aes128n12t8silcv2 2.73 2.73 2.75 T:aes128n12t8clocv3 2.73 2.73 2.74 T:aes128n12t8clocv2 2.73 2.74 2.75 T:aes128n8t8clocv2 2.88 2.94 2.97 T:lunarkeyakv2 3.18 3.19 3.22 T:norx6461v3 3.19 3.20 3.22 T:norx6461v2 3.46 3.48 3.49 T:norx6444v2 3.75 3.76 3.78 T:norx3241v2 3.75 3.76 3.76 T:norx6444v1 3.75 3.77 3.79 T:norx3241v3 3.80 3.84 3.86 T:norx6461v1 3.97 3.99 4.01 T:lakekeyakv1 3.99 4.01 4.04 T:lakekeyakv2 4.44 4.46 4.48 T:norx3241v1 5.74 5.76 5.77 T:norx3261v2 5.81 5.81 5.81 T:aesjambuv1 5.80 5.83 5.86 T:norx3261v3 6.51 6.54 6.57 T:ketjemajorv2 7.03 7.06 7.08 T:riverkeyakv2 7.10 7.11 7.14 T:ascon96v1 7.11 7.13 7.15 T:ascon128av11 7.11 7.14 7.15 T:norx3261v1 7.38 7.40 7.43 ascon128av12 8.24 8.27 8.28 T:ketjeminorv2 10.53 10.56 10.58 T:ascon128v11 10.54 10.56 10.58 T:ascon128v1 10.95 10.99 11.01 ascon128v12 12.99 13.02 13.04 T:aes128otrsv2 13.00 13.02 13.04 T:aes128otrsv1 14.34 14.38 14.45 T:oceankeyakv1 14.68 14.72 14.73 T:aes128otrpv1 14.71 14.73 14.75 T:aes128otrpv2 15.38 15.41 15.43 T:twine80n6t4clocv2 15.64 15.66 15.72 T:twine80n6t4clocv3 16.64 16.66 16.69 T:aes256otrsv1 16.65 16.67 16.70 T:aes256otrsv2 17.13 17.21 17.25 T:aes128n12clocv1 17.32 17.38 17.42 T:aes128n8clocv1 17.96 18.00 18.04 T:seakeyakv1 18.40 18.41 18.43 T:aes256otrpv1 18.42 18.44 18.46 T:aes256otrpv2 18.55 18.57 18.61 T:aes128n12silcv1 18.56 18.60 18.64 T:aes128n8silcv1 25.00 25.03 25.13 T:proest256otrv1 29.44 29.51 29.56 T:riverkeyakv1 32.42 32.47 32.56 T:ketjesrv1 33.36 33.38 33.40 T:ketjesrv2 56.98 57.06 57.24 T:ketjejrv1 58.72 58.90 59.61 T:proest128otrv1 76.34 79.71 80.03 T:present80n6t4silcv3 90.62 91.58 91.70 T:twine80n6clocv1 92.30 92.46 92.53 T:ketjejrv2 95.15 95.28 95.49 T:deoxysneq128128v13 117.79 117.82 117.86 T:deoxyseq128128v13 119.83 119.91 120.09 T:aezv1 125.11 125.74 125.90 T:deoxysneq256128v13 130.56 130.62 130.66 T:led80n6t4silcv3 160.38 160.42 160.52 T:deoxyseq256128v13 293.60 293.77 294.11 aes256gcmv1 303.20? 344.54? 630.33? T:acorn128v3 345.69 348.09 361.40 T:acorn128v2 341.47 358.57 360.49 T:acorn128 3118.74 3119.49 3120.45 T:present80n6t4silcv2 3118.40 3120.01 3120.98 T:present80n6silcv1 6326.46 6339.45 6342.81 T:led80n6t4silcv2 6373.36 6374.32 6379.61 T:led80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.24 0.25 0.26 T:aezv4 0.24 0.25 0.26 T:aezv5 0.25 0.25 0.25 T:aegis128l 0.24 0.25 0.26 T:aezv3 0.25 0.26 0.27 aegis128l 0.26 0.28 0.28 T:tiaoxinv1 0.28 0.28 0.28 T:tiaoxinv2 0.44 0.44 0.45 aegis256 0.46 0.46 0.46 T:aegis128 0.48 0.50 0.52 T:aes128gcmv1 0.61 0.62 0.63 T:aes256gcmv1 0.62 0.62 0.63 T:morus1280128v1 0.62 0.62 0.63 T:morus1280256v2 0.61 0.62 0.63 T:aeadaes128ocbtaglen128v1 0.62 0.63 0.63 T:morus1280256v1 0.62 0.63 0.63 T:morus1280128v2 0.68 0.68 0.68 T:aes128otrpv3 0.68 0.69 0.69 T:aes128otrcv3 0.74 0.75 0.76 T:aeadaes192ocbtaglen128v1 0.87 0.88 0.88 T:aeadaes256ocbtaglen128v1 0.91 0.92 0.93 T:aes256otrcv3 0.92 0.93 0.93 T:aes256otrpv3 0.98 0.99 1.00 T:morus640128v2 1.00 1.01 1.01 T:morus640128v1 1.01 1.02 1.04 T:deoxysi128v141 1.04 1.04 1.04 T:deoxysneq128128v1 1.13 1.14 1.15 T:deoxysi256v141 1.14 1.15 1.15 T:deoxysneq256128v1 1.14 1.15 1.17 T:colm0v1 1.30 1.32 1.33 T:deoxysii128v141 1.49 1.51 1.53 T:deoxysii256v141 1.64 1.66 1.67 T:norx6444v3 1.68 1.68 1.68 T:aes128otrsv3 1.69 1.70 1.72 T:deoxyseq128128v1 1.82 1.84 1.84 T:deoxyseq256128v1 2.05 2.06 2.08 T:norx6441v2 2.07 2.08 2.10 T:norx6441v3 2.29 2.29 2.30 T:aes256otrsv3 2.39 2.41 2.42 T:seakeyakv2 2.45 2.46 2.47 T:oceankeyakv2 2.49 2.51 2.52 T:norx6441v1 2.69 2.72 2.73 T:aes128n12t8silcv2 2.71 2.72 2.74 T:aes128n12t8silcv3 2.69 2.72 2.73 T:aes128n8t8silcv2 2.73 2.73 2.74 T:aes128n8t8clocv2 2.72 2.73 2.74 T:aes128n12t8clocv2 2.73 2.74 2.74 T:aes128n12t8clocv3 2.93 2.97 2.99 T:lunarkeyakv2 3.17 3.19 3.19 T:norx6461v2 3.18 3.19 3.22 T:norx6461v3 3.47 3.50 3.51 T:norx6444v2 3.73 3.75 3.77 T:norx3241v2 3.75 3.76 3.78 T:norx6444v1 3.75 3.77 3.78 T:norx3241v3 3.75 3.82 3.84 T:norx6461v1 3.96 3.98 4.01 T:lakekeyakv1 4.01 4.02 4.04 T:lakekeyakv2 4.43 4.45 4.47 T:norx3241v1 5.73 5.76 5.78 T:norx3261v2 5.81 5.81 5.81 T:aesjambuv1 5.81 5.83 5.86 T:norx3261v3 6.52 6.56 6.59 T:ketjemajorv2 7.03 7.05 7.09 T:riverkeyakv2 7.10 7.12 7.13 T:ascon96v1 7.12 7.13 7.14 T:norx3261v1 7.11 7.13 7.16 T:ascon128av11 7.38 7.40 7.42 ascon128av12 8.26 8.27 8.29 T:ketjeminorv2 10.54 10.56 10.57 T:ascon128v11 10.55 10.56 10.58 T:ascon128v1 10.96 10.98 11.00 ascon128v12 13.01 13.02 13.06 T:aes128otrsv2 13.02 13.03 13.06 T:aes128otrsv1 14.37 14.40 14.46 T:oceankeyakv1 14.70 14.72 14.75 T:aes128otrpv1 14.69 14.74 14.76 T:aes128otrpv2 15.38 15.40 15.42 T:twine80n6t4clocv2 15.64 15.65 15.68 T:twine80n6t4clocv3 16.66 16.67 16.71 T:aes256otrsv2 16.66 16.67 16.70 T:aes256otrsv1 17.20 17.24 17.26 T:aes128n12clocv1 17.37 17.39 17.42 T:aes128n8clocv1 17.98 18.01 18.04 T:seakeyakv1 18.39 18.41 18.43 T:aes256otrpv1 18.41 18.46 18.47 T:aes256otrpv2 18.57 18.60 18.64 T:aes128n12silcv1 18.60 18.64 18.68 T:aes128n8silcv1 25.09 25.10 25.13 T:proest256otrv1 29.46 29.49 29.51 T:riverkeyakv1 32.47 32.53 32.58 T:ketjesrv1 33.35 33.39 33.42 T:ketjesrv2 57.00 57.06 57.22 T:ketjejrv1 58.78 58.89 59.46 T:proest128otrv1 76.44 79.70 80.09 T:present80n6t4silcv3 90.54 91.65 91.76 T:twine80n6clocv1 92.32 92.37 92.49 T:ketjejrv2 95.20 95.35 95.53 T:deoxysneq128128v13 117.80 117.87 117.91 T:deoxyseq128128v13 119.77 119.82 119.90 T:aezv1 125.12 125.79 125.95 T:deoxysneq256128v13 130.61 130.64 130.68 T:led80n6t4silcv3 160.42 160.45 160.57 T:deoxyseq256128v13 287.36 287.45 288.35 aes256gcmv1 303.37? 344.65? 630.35? T:acorn128v3 345.64 348.17 361.43 T:acorn128v2 341.50 358.57 360.48 T:acorn128 3118.70 3119.30 3119.74 T:present80n6t4silcv2 3118.60 3120.07 3120.94 T:present80n6silcv1 6327.30 6340.86 6454.30 T:led80n6t4silcv2 6372.23 6373.58 6380.21 T:led80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.18? 0.19? 0.20? T:tiaoxinv2 0.18? 0.19? 0.20? T:tiaoxinv1 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 aegis128l 0.23? 0.25? 0.26? T:aezv5 0.25 0.25 0.26 T:aezv3 0.23? 0.25? 0.27? T:aezv4 0.33? 0.36? 0.38? T:aes256gcmv1 0.34? 0.37? 0.39? T:aes128gcmv1 0.40 0.41 0.41 aegis256 0.45 0.46 0.47 T:aegis128 0.59 0.60 0.60 T:morus1280256v1 0.59 0.60 0.60 T:morus1280256v2 0.59 0.60 0.61 T:morus1280128v2 0.60 0.60 0.61 T:morus1280128v1 0.59 0.62 0.64 T:aeadaes128ocbtaglen128v1 0.61 0.63 0.63 T:colm0v1 0.61 0.65 0.67 T:aes128otrpv3 0.68 0.68 0.69 T:aes128otrcv3 0.61? 0.75? 1.11? T:aeadaes192ocbtaglen128v1 0.85 0.86 0.88 T:deoxysneq128128v1 0.86 0.88 0.90 T:deoxysi128v141 0.87 0.88 0.88 T:deoxysii128v141 0.54? 0.88? 1.22? T:aeadaes256ocbtaglen128v1 0.88 0.90 0.92 T:aes256otrpv3 0.92 0.93 0.94 T:aes256otrcv3 0.93 0.94 0.96 T:deoxyseq128128v1 0.94 0.95 0.97 T:morus640128v1 0.95 0.96 0.97 T:morus640128v2 0.97 0.99 1.01 T:deoxysii256v141 0.97 1.00 1.02 T:deoxysi256v141 0.97 1.00 1.01 T:deoxysneq256128v1 1.02 1.02 1.03 T:deoxyseq256128v1 1.82 1.87 1.96 T:lunarkeyakv2 1.84 1.90 1.93 T:oceankeyakv2 2.08 2.10 2.13 T:norx6441v2 2.12 2.13 2.15 T:norx6444v3 2.12 2.14 2.16 T:norx6441v3 2.25 2.28 2.32 T:seakeyakv2 2.48 2.51 2.52 T:norx6441v1 2.68 2.68 2.69 T:aes128n12t8silcv3 2.69 2.69 2.70 T:aes128otrsv3 2.68 2.69 2.75 T:aes128n8t8silcv2 2.71 2.71 2.72 T:aes128n12t8clocv2 2.71 2.72 2.72 T:aes128n8t8clocv2 2.71 2.72 2.72 T:aes128n12t8clocv3 2.68 2.75 2.75 T:aes128n12t8silcv2 3.24 3.28 3.29 T:norx6461v3 3.30 3.32 3.33 T:norx6461v2 3.43 3.46 3.48 T:norx6444v2 3.61 3.66 3.68 T:lakekeyakv2 3.68 3.69 3.70 T:aes256otrsv3 3.69 3.74 3.76 T:lakekeyakv1 3.75 3.76 3.77 T:norx6444v1 3.78 3.80 3.83 T:norx3241v3 3.78 3.81 3.84 T:norx3241v2 3.85 3.86 3.88 T:norx6461v1 4.45 4.48 4.50 T:norx3241v1 5.16 5.19 5.26 T:ketjemajorv2 5.69 5.69 5.72 T:norx3261v2 5.75 5.75 5.75 T:aesjambuv1 5.86 5.88 5.91 T:norx3261v3 6.40 6.46 6.48 T:riverkeyakv2 7.02 7.05 7.07 T:ascon96v1 7.04 7.06 7.09 T:ascon128av11 7.23 7.24 7.27 T:norx3261v1 7.40 7.44 7.45 T:ketjeminorv2 7.42 7.45 7.47 ascon128av12 10.49 10.51 10.53 T:ascon128v1 10.49 10.52 10.54 T:ascon128v11 10.87 10.90 10.93 ascon128v12 11.70 11.72 11.74 T:aes128otrsv2 11.71 11.72 11.76 T:aes128otrsv1 12.17 12.22 12.25 T:aes128n8clocv1 12.20 12.22 12.26 T:aes128n12clocv1 12.21 12.23 12.26 T:aes128n8silcv1 12.20 12.25 12.28 T:aes128n12silcv1 14.23 14.28 14.31 T:oceankeyakv1 15.05 15.07 15.10 T:aes128otrpv1 15.09 15.10 15.12 T:twine80n6t4clocv2 15.18 15.22 15.24 T:aes128otrpv2 15.36 15.37 15.40 T:aes256otrsv2 15.39 15.42 15.44 T:aes256otrsv1 15.45 15.46 15.47 T:twine80n6t4clocv3 17.79 17.83 17.87 T:seakeyakv1 18.81 18.85 18.87 T:aes256otrpv1 18.83 18.86 18.92 T:aes256otrpv2 25.30 25.33 25.36 T:proest256otrv1 27.81 27.86 27.93 T:riverkeyakv1 29.20 29.22 29.24 T:ketjesrv1 30.97 30.99 31.02 T:ketjesrv2 52.70 52.80 52.84 T:ketjejrv1 58.31 58.41 59.17 T:aezv1 58.81 58.96 59.04 T:proest128otrv1 60.13 60.77 60.84 T:twine80n6clocv1 75.15 75.71 83.27 T:present80n6t4silcv3 78.32 78.34 78.40 T:deoxyseq128128v13 78.36 79.16 79.48 T:deoxysneq128128v13 89.92 89.99 90.16 T:ketjejrv2 105.20 105.29 105.36 T:deoxysneq256128v13 106.53 106.66 106.73 T:deoxyseq256128v13 130.09 130.14 130.20 T:led80n6t4silcv3 287.20 287.31 287.36 aes256gcmv1 280.85? 346.74? 658.04? T:acorn128v3 344.62 362.02 364.50 T:acorn128 352.21 362.09 364.12 T:acorn128v2 2079.31 2079.63 2079.83 T:present80n6silcv1 2081.90 2083.41 2083.76 T:present80n6t4silcv2 4247.74 4251.49 4253.73 T:led80n6silcv1 4215.01 4282.99 4311.94 T:led80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.17? 0.19? 0.22? T:tiaoxinv1 0.17? 0.19? 0.20? T:tiaoxinv2 0.25 0.25 0.26 T:aezv5 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aezv4 0.24? 0.25? 0.27? aegis128l 0.33? 0.36? 0.39? T:aes128gcmv1 0.33? 0.36? 0.38? T:aes256gcmv1 0.40 0.41 0.41 aegis256 0.46 0.46 0.47 T:aegis128 0.58 0.59 0.60 T:morus1280256v2 0.58 0.59 0.60 T:morus1280128v1 0.58 0.59 0.60 T:morus1280256v1 0.59 0.59 0.60 T:morus1280128v2 0.62 0.63 0.64 T:aeadaes128ocbtaglen128v1 0.63 0.63 0.63 T:colm0v1 0.63 0.64 0.65 T:aes128otrpv3 0.68 0.69 0.69 T:aes128otrcv3 0.40? 0.73? 0.77? T:aeadaes192ocbtaglen128v1 0.84 0.87 0.89 T:deoxysi128v141 0.85 0.87 0.88 T:deoxysneq128128v1 0.86 0.88 0.90 T:deoxysii128v141 0.55? 0.88? 1.22? T:aeadaes256ocbtaglen128v1 0.88 0.90 0.90 T:aes256otrpv3 0.92 0.93 0.94 T:aes256otrcv3 0.94 0.95 0.96 T:morus640128v2 0.94 0.95 0.96 T:morus640128v1 0.95 0.96 0.97 T:deoxyseq128128v1 0.97 1.00 1.02 T:deoxysi256v141 0.95 1.00 1.02 T:deoxysii256v141 0.96 1.01 1.04 T:deoxysneq256128v1 1.01 1.03 1.03 T:deoxyseq256128v1 1.81 1.87 1.92 T:lunarkeyakv2 1.82 1.89 1.92 T:oceankeyakv2 2.09 2.10 2.11 T:norx6441v2 2.10 2.11 2.12 T:norx6441v3 2.10 2.13 2.14 T:norx6444v3 2.25 2.29 2.33 T:seakeyakv2 2.52 2.54 2.55 T:norx6441v1 2.68 2.69 2.69 T:aes128otrsv3 2.66 2.71 2.72 T:aes128n12t8silcv2 2.69 2.71 2.75 T:aes128n8t8silcv2 2.71 2.71 2.72 T:aes128n12t8silcv3 2.71 2.71 2.73 T:aes128n12t8clocv3 2.72 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.74 T:aes128n12t8clocv2 3.23 3.26 3.28 T:norx6461v3 3.25 3.26 3.29 T:norx6461v2 3.44 3.46 3.49 T:norx6444v2 3.62 3.65 3.66 T:lakekeyakv2 3.68 3.69 3.69 T:aes256otrsv3 3.71 3.74 3.75 T:lakekeyakv1 3.74 3.76 3.77 T:norx6444v1 3.80 3.82 3.83 T:norx6461v1 3.81 3.84 3.87 T:norx3241v2 3.82 3.84 3.88 T:norx3241v3 4.45 4.48 4.51 T:norx3241v1 5.15 5.19 5.23 T:ketjemajorv2 5.68 5.69 5.73 T:norx3261v2 5.75 5.75 5.75 T:aesjambuv1 5.90 5.92 5.93 T:norx3261v3 6.43 6.45 6.47 T:riverkeyakv2 7.00 7.05 7.09 T:ascon96v1 7.03 7.08 7.11 T:ascon128av11 7.23 7.25 7.26 T:norx3261v1 7.40 7.41 7.43 T:ketjeminorv2 7.42 7.44 7.46 ascon128av12 10.58 10.61 10.62 T:ascon128v11 10.58 10.61 10.65 T:ascon128v1 10.93 10.96 11.00 ascon128v12 11.75 11.79 11.81 T:aes128otrsv2 11.76 11.80 11.82 T:aes128otrsv1 12.20 12.23 12.25 T:aes128n8silcv1 12.20 12.24 12.26 T:aes128n8clocv1 12.20 12.24 12.28 T:aes128n12silcv1 12.20 12.25 12.29 T:aes128n12clocv1 14.20 14.24 14.28 T:oceankeyakv1 15.11 15.14 15.17 T:twine80n6t4clocv2 15.11 15.15 15.18 T:aes128otrpv1 15.21 15.24 15.27 T:aes128otrpv2 15.43 15.45 15.48 T:twine80n6t4clocv3 15.41 15.46 15.48 T:aes256otrsv2 15.43 15.47 15.50 T:aes256otrsv1 17.77 17.81 17.85 T:seakeyakv1 18.87 18.92 18.95 T:aes256otrpv2 18.86 18.92 18.95 T:aes256otrpv1 25.29 25.34 25.37 T:proest256otrv1 27.80 27.83 27.86 T:riverkeyakv1 29.17 29.22 29.27 T:ketjesrv1 30.93 30.98 31.05 T:ketjesrv2 52.67 52.79 52.89 T:ketjejrv1 58.45 58.61 59.00 T:aezv1 58.87 59.05 59.14 T:proest128otrv1 60.09 60.81 60.86 T:twine80n6clocv1 75.24 75.80 83.37 T:present80n6t4silcv3 78.29 78.34 78.41 T:deoxyseq128128v13 78.36 79.29 79.40 T:deoxysneq128128v13 90.49 90.79 90.91 T:ketjejrv2 105.38 105.55 106.51 T:deoxysneq256128v13 106.58 106.66 106.72 T:deoxyseq256128v13 130.08 130.13 130.20 T:led80n6t4silcv3 287.32 287.44 287.55 aes256gcmv1 280.84? 346.61? 658.02? T:acorn128v3 342.59 346.81 366.28 T:acorn128v2 344.26 362.02 364.77 T:acorn128 2079.42 2080.17 2082.16 T:present80n6silcv1 2079.35 2080.54 2080.84 T:present80n6t4silcv2 4222.22 4230.09 4314.27 T:led80n6t4silcv2 4251.04 4252.91 4254.10 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.19 0.19 0.19 T:tiaoxinv2 0.19 0.19 0.19 T:tiaoxinv1 0.25 0.25 0.25 T:aegis128l 0.24 0.25 0.26 aegis128l 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aezv4 0.34 0.35 0.37 T:aes128gcmv1 0.34? 0.36? 0.39? T:aes256gcmv1 0.40 0.41 0.41 aegis256 0.46 0.46 0.47 T:aegis128 0.58 0.59 0.59 T:morus1280128v1 0.58 0.59 0.60 T:morus1280256v2 0.58 0.59 0.60 T:morus1280256v1 0.59 0.60 0.60 T:morus1280128v2 0.62 0.63 0.63 T:aeadaes128ocbtaglen128v1 0.63 0.63 0.64 T:colm0v1 0.64 0.65 0.65 T:aes128otrpv3 0.68 0.69 0.69 T:aes128otrcv3 0.74? 0.75? 1.10? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.86 0.87 0.89 T:deoxysi128v141 0.86 0.88 0.90 T:deoxysii128v141 0.88 0.89 0.89 T:aeadaes256ocbtaglen128v1 0.89 0.90 0.90 T:aes256otrpv3 0.92 0.93 0.94 T:aes256otrcv3 0.94 0.95 0.96 T:morus640128v1 0.95 0.96 0.97 T:morus640128v2 0.95 0.96 0.97 T:deoxyseq128128v1 0.97 0.99 1.01 T:deoxysi256v141 0.99 1.00 1.00 T:deoxysneq256128v1 0.99 1.00 1.01 T:deoxysii256v141 1.02 1.03 1.03 T:deoxyseq256128v1 1.84 1.87 1.89 T:oceankeyakv2 1.85 1.90 1.94 T:lunarkeyakv2 2.08 2.10 2.12 T:norx6441v2 2.09 2.10 2.12 T:norx6441v3 2.11 2.12 2.14 T:norx6444v3 2.27 2.29 2.31 T:seakeyakv2 2.51 2.52 2.54 T:norx6441v1 2.69 2.69 2.69 T:aes128otrsv3 2.69 2.71 2.75 T:aes128n12t8silcv2 2.69 2.71 2.75 T:aes128n12t8silcv3 2.69 2.71 2.72 T:aes128n8t8clocv2 2.68 2.71 2.72 T:aes128n12t8clocv2 2.71 2.73 2.73 T:aes128n12t8clocv3 2.67 2.75 2.75 T:aes128n8t8silcv2 3.21 3.24 3.27 T:norx6461v3 3.25 3.25 3.28 T:norx6461v2 3.43 3.45 3.49 T:norx6444v2 3.62 3.64 3.66 T:lakekeyakv2 3.68 3.69 3.69 T:aes256otrsv3 3.73 3.75 3.76 T:lakekeyakv1 3.74 3.75 3.76 T:norx6444v1 3.80 3.82 3.85 T:norx6461v1 3.82 3.85 3.87 T:norx3241v3 3.81 3.86 3.87 T:norx3241v2 4.45 4.47 4.50 T:norx3241v1 5.18 5.21 5.25 T:ketjemajorv2 5.67 5.69 5.74 T:norx3261v2 5.75 5.75 5.75 T:aesjambuv1 5.89 5.92 5.94 T:norx3261v3 6.40 6.43 6.47 T:riverkeyakv2 7.03 7.05 7.09 T:ascon96v1 7.04 7.07 7.10 T:ascon128av11 7.22 7.24 7.25 T:norx3261v1 7.40 7.43 7.49 T:ketjeminorv2 7.43 7.44 7.46 ascon128av12 10.57 10.60 10.63 T:ascon128v1 10.59 10.61 10.63 T:ascon128v11 10.95 10.96 10.99 ascon128v12 11.75 11.76 11.81 T:aes128otrsv1 11.76 11.78 11.80 T:aes128otrsv2 12.21 12.22 12.27 T:aes128n8clocv1 12.21 12.23 12.27 T:aes128n8silcv1 12.19 12.25 12.27 T:aes128n12clocv1 12.21 12.25 12.28 T:aes128n12silcv1 14.20 14.26 14.34 T:oceankeyakv1 15.12 15.14 15.17 T:twine80n6t4clocv2 15.12 15.15 15.17 T:aes128otrpv1 15.20 15.24 15.28 T:aes128otrpv2 15.41 15.45 15.49 T:aes256otrsv2 15.43 15.45 15.48 T:twine80n6t4clocv3 15.43 15.46 15.48 T:aes256otrsv1 17.80 17.84 17.86 T:seakeyakv1 18.88 18.90 18.94 T:aes256otrpv1 18.86 18.91 18.96 T:aes256otrpv2 25.30 25.32 25.36 T:proest256otrv1 27.82 27.86 27.90 T:riverkeyakv1 29.17 29.20 29.27 T:ketjesrv1 30.96 31.03 31.05 T:ketjesrv2 52.74 52.80 52.86 T:ketjejrv1 58.41 58.64 59.02 T:aezv1 58.75 59.00 59.06 T:proest128otrv1 60.18 60.80 60.88 T:twine80n6clocv1 75.23 75.80 83.54 T:present80n6t4silcv3 78.31 78.34 78.39 T:deoxyseq128128v13 78.36 79.31 79.44 T:deoxysneq128128v13 89.94 90.07 90.52 T:ketjejrv2 105.46 105.75 106.59 T:deoxysneq256128v13 106.55 106.64 106.77 T:deoxyseq256128v13 130.11 130.17 130.21 T:led80n6t4silcv3 287.31 287.40 287.48 aes256gcmv1 342.59 346.60 366.31 T:acorn128v2 280.88? 346.63? 657.95? T:acorn128v3 344.23 362.03 364.76 T:acorn128 2079.26 2079.87 2081.95 T:present80n6silcv1 2079.88 2080.57 2080.88 T:present80n6t4silcv2 4222.01 4230.96 4313.56 T:led80n6t4silcv2 4251.60 4253.19 4254.53 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.29 0.29 0.32 T:tiaoxinv2 0.29 0.29 0.30 T:tiaoxinv1 0.31 0.32 0.33 T:aegis128l 0.32 0.32 0.32 aegis128l 0.48 0.48 0.49 aegis256 0.51 0.51 0.52 T:aezv5 0.51 0.52 0.52 T:aezv4 0.52 0.52 0.53 T:aegis128 0.52 0.52 0.54 T:aezv3 0.77 0.78 0.79 T:morus1280256v1 0.78 0.78 0.78 T:aes128otrpv3 0.77 0.78 0.78 T:morus1280128v1 0.78 0.78 0.83 T:aeadaes128ocbtaglen128v1 0.78 0.78 0.79 T:morus1280256v2 0.78 0.79 0.80 T:morus1280128v2 0.86 0.86 0.87 T:aes128otrcv3 0.94 0.94 0.98 T:aeadaes192ocbtaglen128v1 1.03 1.03 1.05 T:deoxysneq128128v1 1.06 1.07 1.07 T:aes256otrpv3 1.09 1.09 1.12 T:deoxysi128v141 1.10? 1.10? 1.31? T:aeadaes256ocbtaglen128v1 1.14 1.15 1.15 T:morus640128v1 1.15 1.16 1.17 T:morus640128v2 1.16 1.16 1.18 T:deoxysneq256128v1 1.17 1.17 1.17 T:aes256otrcv3 1.23 1.23 1.25 T:deoxysi256v141 1.28 1.29 1.29 T:colm0v1 1.57 1.57 1.59 T:deoxysii128v141 1.57 1.58 1.60 T:deoxyseq128128v1 1.60 1.61 1.61 T:aes128gcmv1 1.74 1.74 1.75 T:aes256gcmv1 1.77 1.78 1.78 T:deoxyseq256128v1 1.77 1.78 1.78 T:deoxysii256v141 1.81 1.81 1.81 T:aes128otrsv3 2.27 2.28 2.30 T:norx6444v3 2.46 2.47 2.47 T:aes256otrsv3 2.45 2.47 2.48 T:norx6441v2 2.47 2.48 2.50 T:norx6441v3 2.83 2.83 2.83 T:aes128n12t8clocv2 2.83 2.83 2.83 T:aes128n8t8clocv2 2.83 2.83 2.84 T:aes128n12t8clocv3 2.83 2.84 2.85 T:norx6441v1 2.88 2.88 2.89 T:aes128n8t8silcv2 2.89 2.89 2.91 T:aes128n12t8silcv3 2.89 2.91 2.92 T:aes128n12t8silcv2 3.45 3.47 3.47 T:seakeyakv2 3.73 3.75 3.77 T:norx6461v3 3.77 3.78 3.78 T:norx6461v2 4.03 4.05 4.11 T:norx3241v2 4.04 4.07 4.11 T:norx3241v3 4.32 4.33 4.35 T:norx6461v1 4.37 4.38 4.39 T:lakekeyakv2 4.60 4.61 4.63 T:lakekeyakv1 4.65 4.66 4.67 T:oceankeyakv2 4.71 4.72 4.73 T:norx3241v1 4.96 4.98 5.00 T:norx6444v2 5.33 5.35 5.39 T:norx6444v1 5.88 5.88 5.88 T:aesjambuv1 6.22 6.31 6.33 T:norx3261v2 6.26 6.33 6.38 T:norx3261v3 7.27 7.28 7.30 T:ascon128av11 7.27 7.28 7.30 T:ascon96v1 7.27 7.29 7.31 T:riverkeyakv2 7.62 7.63 7.65 ascon128av12 7.67 7.68 7.70 T:norx3261v1 8.00 8.01 8.03 T:lunarkeyakv2 8.78 8.80 8.82 T:ketjemajorv2 9.85 9.87 9.88 T:ketjeminorv2 10.71 10.72 10.74 T:ascon128v1 10.72 10.73 10.74 T:ascon128v11 11.03 11.04 11.08 ascon128v12 13.33 13.36 13.37 T:aes128otrsv2 13.36 13.37 13.39 T:aes128otrsv1 15.00 15.02 15.07 T:aes128otrpv1 15.07 15.09 15.12 T:aes128otrpv2 15.75 15.75 15.77 T:twine80n6t4clocv2 16.01 16.01 16.02 T:twine80n6t4clocv3 17.18 17.19 17.21 T:aes256otrsv1 17.19 17.21 17.60 T:aes256otrsv2 17.88 17.89 17.91 T:aes128n8clocv1 17.89 17.90 17.92 T:aes128n12clocv1 18.80 18.86 18.89 T:aes128n12silcv1 18.84 18.88 18.89 T:aes128n8silcv1 18.88 18.92 18.94 T:aes256otrpv2 18.91 18.94 18.96 T:aes256otrpv1 21.84 21.86 21.88 T:seakeyakv1 22.00 22.03 22.07 T:oceankeyakv1 27.39 27.40 27.44 T:proest256otrv1 30.69 30.71 30.74 T:riverkeyakv1 32.91 32.93 33.06 T:ketjesrv1 34.30 34.31 34.39 T:ketjesrv2 57.52 57.56 57.59 T:ketjejrv1 61.15 61.23 64.05 T:proest128otrv1 76.68 76.71 83.71 T:present80n6t4silcv3 78.42 78.46 79.39 T:deoxysneq128128v13 91.34 92.33 92.43 T:twine80n6clocv1 93.72 94.05 94.11 T:ketjejrv2 105.89 105.94 106.03 T:deoxysneq256128v13 112.54 112.67 112.74 T:aezv1 119.03 119.11 120.62 T:deoxyseq128128v13 131.50 131.53 131.57 T:led80n6t4silcv3 162.10 162.15 162.24 T:deoxyseq256128v13 295.25 295.28 295.38 aes256gcmv1 390.88? 391.39? 667.17? T:acorn128v3 390.98 407.28 407.29 T:acorn128 399.08 407.82 407.95 T:acorn128v2 3135.62 3136.37 3137.87 T:present80n6silcv1 3136.65 3138.19 3138.49 T:present80n6t4silcv2 6366.99 6393.77 6493.35 T:led80n6t4silcv2 6402.53 6404.61 6406.52 T:led80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.32 0.32 0.33 T:aegis128l 0.32 0.33 0.33 aegis128l 0.36 0.36 0.37 T:tiaoxinv1 0.36 0.37 0.37 T:tiaoxinv2 0.51 0.51 0.52 T:aezv5 0.51 0.51 0.52 T:aezv4 0.52 0.52 0.52 T:aezv3 0.53 0.53 0.53 T:aegis128 0.53 0.53 0.53 aegis256 0.78 0.79 0.82 T:aeadaes128ocbtaglen128v1 0.79 0.79 0.80 T:morus1280128v1 0.79 0.80 0.81 T:morus1280256v1 0.81 0.81 0.82 T:morus1280256v2 0.81 0.81 0.81 T:morus1280128v2 0.81 0.81 0.81 T:aes128otrpv3 0.89 0.89 0.90 T:aes128otrcv3 0.92? 0.93? 1.14? T:aeadaes192ocbtaglen128v1 1.08? 1.09? 1.29? T:aeadaes256ocbtaglen128v1 1.10 1.10 1.11 T:aes256otrpv3 1.14 1.15 1.15 T:morus640128v1 1.15 1.15 1.16 T:morus640128v2 1.21 1.21 1.22 T:aes256otrcv3 1.25 1.26 1.28 T:deoxysi128v141 1.27 1.27 1.28 T:deoxysneq128128v1 1.32 1.33 1.34 T:colm0v1 1.34 1.35 1.36 T:deoxysneq256128v1 1.40 1.40 1.41 T:deoxysi256v141 1.57 1.58 1.59 T:aes128gcmv1 1.61 1.62 1.64 T:deoxysii128v141 1.70 1.72 1.72 T:aes256gcmv1 1.81 1.81 1.82 T:aes128otrsv3 1.82 1.83 1.84 T:deoxysii256v141 1.98 1.99 1.99 T:deoxyseq128128v1 2.12 2.12 2.13 T:deoxyseq256128v1 2.28 2.28 2.29 T:norx6444v3 2.42 2.44 2.45 T:norx6441v2 2.44 2.44 2.46 T:norx6441v3 2.47 2.47 2.47 T:aes256otrsv3 2.80 2.81 2.83 T:aes128n12t8clocv2 2.82 2.82 2.83 T:aes128n8t8clocv2 2.81 2.82 2.83 T:aes128n12t8clocv3 2.81 2.83 2.85 T:norx6441v1 2.86 2.86 2.88 T:aes128n12t8silcv2 2.86 2.86 2.87 T:aes128n12t8silcv3 2.86 2.87 2.88 T:aes128n8t8silcv2 3.48 3.49 3.54 T:seakeyakv2 3.70 3.72 3.73 T:norx6461v3 3.71 3.72 3.73 T:norx6461v2 4.00 4.01 4.02 T:norx3241v2 4.02 4.03 4.03 T:norx3241v3 4.23 4.24 4.29 T:norx6461v1 4.40 4.41 4.43 T:lakekeyakv2 4.64 4.67 4.72 T:lakekeyakv1 4.68 4.70 4.75 T:oceankeyakv2 4.68 4.70 4.71 T:norx3241v1 4.95 4.95 4.96 T:norx6444v2 5.28 5.28 5.30 T:norx6444v1 5.96 5.96 5.96 T:aesjambuv1 6.15 6.18 6.19 T:norx3261v2 6.23 6.24 6.27 T:norx3261v3 7.31 7.32 7.34 T:ascon96v1 7.32 7.32 7.34 T:ascon128av11 7.41 7.42 7.43 T:riverkeyakv2 7.55 7.56 7.57 T:norx3261v1 7.56 7.57 7.58 ascon128av12 8.06 8.07 8.09 T:lunarkeyakv2 8.90 8.91 8.94 T:ketjemajorv2 9.46 9.49 9.50 T:ketjeminorv2 10.72 10.74 10.75 T:ascon128v11 10.73 10.75 10.76 T:ascon128v1 11.14 11.15 11.18 ascon128v12 13.44 13.45 13.47 T:aes128otrsv2 13.46 13.47 13.49 T:aes128otrsv1 15.12 15.14 15.16 T:aes128otrpv1 15.16 15.17 15.19 T:aes128otrpv2 15.79 15.80 15.81 T:twine80n6t4clocv2 15.96 15.97 15.98 T:twine80n6t4clocv3 17.24 17.26 17.29 T:aes256otrsv1 17.26 17.29 17.86 T:aes256otrsv2 17.47 17.50 17.51 T:aes128n12clocv1 17.61 17.62 17.63 T:aes128n8clocv1 18.96 18.99 19.02 T:aes128n12silcv1 18.96 18.99 19.02 T:aes128n8silcv1 18.97 19.00 19.04 T:aes256otrpv1 19.01 19.03 19.06 T:aes256otrpv2 21.91 21.93 21.98 T:seakeyakv1 22.07 22.12 22.15 T:oceankeyakv1 27.36 27.37 27.38 T:proest256otrv1 30.75 30.76 30.86 T:riverkeyakv1 33.30 33.34 33.41 T:ketjesrv1 34.43 34.44 34.46 T:ketjesrv2 57.85 57.93 58.07 T:ketjejrv1 61.38 61.42 62.13 T:proest128otrv1 77.37 80.51 80.68 T:present80n6t4silcv3 91.20 92.19 92.20 T:twine80n6clocv1 93.77 93.85 93.94 T:ketjejrv2 95.59 95.72 95.82 T:deoxysneq128128v13 112.96 113.11 113.43 T:aezv1 119.10 119.13 120.44 T:deoxyseq128128v13 126.00 126.16 126.49 T:deoxysneq256128v13 131.71 131.76 131.78 T:led80n6t4silcv3 162.12 162.15 162.26 T:deoxyseq256128v13 295.20 295.24 295.30 aes256gcmv1 387.66? 387.78? 663.33? T:acorn128v3 391.35 391.54 404.33 T:acorn128v2 387.08 403.37 403.52 T:acorn128 3135.09 3135.44 3135.89 T:present80n6t4silcv2 3135.44 3136.07 3137.05 T:present80n6silcv1 6370.90 6372.55 6497.84 T:led80n6t4silcv2 6406.02 6407.10 6408.39 T:led80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.32 0.32 0.32 T:aezv5 0.32 0.32 0.32 T:aezv4 0.32 0.32 0.32 T:aegis128l 0.32 0.32 0.32 T:aezv3 0.33 0.33 0.33 aegis128l 0.36 0.37 0.38 T:tiaoxinv1 0.36 0.37 0.37 T:tiaoxinv2 0.53 0.53 0.53 T:aegis128 0.53 0.53 0.53 aegis256 0.78 0.78 0.79 T:aeadaes128ocbtaglen128v1 0.79 0.79 0.80 T:morus1280128v1 0.79 0.80 0.80 T:morus1280256v1 0.81 0.81 0.81 T:morus1280128v2 0.81 0.81 0.81 T:aes128otrpv3 0.81 0.81 0.81 T:morus1280256v2 0.89 0.89 0.89 T:aes128otrcv3 0.92 0.92 0.93 T:aeadaes192ocbtaglen128v1 1.08 1.08 1.08 T:aeadaes256ocbtaglen128v1 1.09 1.10 1.11 T:aes256otrpv3 1.14 1.15 1.15 T:morus640128v1 1.15 1.15 1.16 T:morus640128v2 1.21 1.21 1.22 T:aes256otrcv3 1.25 1.26 1.27 T:deoxysi128v141 1.27 1.27 1.27 T:deoxysneq128128v1 1.33 1.33 1.34 T:colm0v1 1.34 1.34 1.35 T:deoxysneq256128v1 1.40 1.40 1.41 T:deoxysi256v141 1.57 1.57 1.58 T:aes128gcmv1 1.61 1.61 1.62 T:deoxysii128v141 1.70 1.70 1.71 T:aes256gcmv1 1.81 1.81 1.81 T:aes128otrsv3 1.82 1.83 1.84 T:deoxysii256v141 1.98 1.98 1.99 T:deoxyseq128128v1 2.12 2.12 2.13 T:deoxyseq256128v1 2.28 2.28 2.29 T:norx6444v3 2.43 2.43 2.45 T:norx6441v2 2.43 2.45 2.46 T:norx6441v3 2.47 2.47 2.47 T:aes256otrsv3 2.80 2.81 2.83 T:aes128n12t8clocv2 2.81 2.81 2.82 T:aes128n8t8clocv2 2.82 2.83 2.83 T:aes128n12t8clocv3 2.84 2.85 2.85 T:norx6441v1 2.84 2.85 2.86 T:aes128n8t8silcv2 2.84 2.85 2.87 T:aes128n12t8silcv3 2.85 2.85 2.87 T:aes128n12t8silcv2 3.50 3.51 3.52 T:seakeyakv2 3.71 3.71 3.72 T:norx6461v2 3.70 3.71 3.73 T:norx6461v3 4.00 4.01 4.02 T:norx3241v2 4.01 4.03 4.04 T:norx3241v3 4.21 4.22 4.25 T:norx6461v1 4.42 4.42 4.43 T:lakekeyakv2 4.65 4.67 4.70 T:lakekeyakv1 4.66 4.69 4.70 T:norx3241v1 4.69 4.70 4.72 T:oceankeyakv2 4.95 4.96 4.97 T:norx6444v2 5.28 5.29 5.30 T:norx6444v1 5.96 5.96 5.96 T:aesjambuv1 6.16 6.17 6.19 T:norx3261v2 6.22 6.24 6.26 T:norx3261v3 7.30 7.31 7.32 T:ascon96v1 7.30 7.33 7.33 T:ascon128av11 7.43 7.45 7.46 T:riverkeyakv2 7.55 7.55 7.57 T:norx3261v1 7.56 7.57 7.59 ascon128av12 8.06 8.08 8.10 T:lunarkeyakv2 8.93 8.94 8.96 T:ketjemajorv2 9.52 9.53 9.54 T:ketjeminorv2 10.72 10.73 10.74 T:ascon128v1 10.72 10.74 10.75 T:ascon128v11 11.15 11.17 11.18 ascon128v12 13.46 13.47 13.49 T:aes128otrsv2 13.45 13.47 13.49 T:aes128otrsv1 15.13 15.15 15.16 T:aes128otrpv1 15.17 15.19 15.20 T:aes128otrpv2 15.78 15.79 15.80 T:twine80n6t4clocv2 15.96 15.97 15.98 T:twine80n6t4clocv3 17.26 17.27 17.29 T:aes256otrsv1 17.27 17.29 17.79 T:aes256otrsv2 17.47 17.48 17.49 T:aes128n12clocv1 17.60 17.61 17.62 T:aes128n8clocv1 18.94 18.98 18.99 T:aes128n8silcv1 19.00 19.02 19.04 T:aes256otrpv1 19.01 19.02 19.05 T:aes128n12silcv1 19.01 19.02 19.04 T:aes256otrpv2 21.92 21.94 21.96 T:seakeyakv1 22.08 22.10 22.13 T:oceankeyakv1 27.35 27.37 27.38 T:proest256otrv1 30.75 30.76 30.79 T:riverkeyakv1 33.36 33.39 33.43 T:ketjesrv1 34.45 34.47 34.51 T:ketjesrv2 57.91 57.94 58.01 T:ketjejrv1 61.33 61.48 62.02 T:proest128otrv1 77.42 80.48 80.65 T:present80n6t4silcv3 91.21 92.12 92.16 T:twine80n6clocv1 93.77 93.80 93.90 T:ketjejrv2 95.68 95.76 95.84 T:deoxysneq128128v13 112.80 113.08 113.34 T:aezv1 119.13 119.17 120.46 T:deoxyseq128128v13 125.80 126.15 126.53 T:deoxysneq256128v13 131.69 131.71 131.74 T:led80n6t4silcv3 162.15 162.19 162.26 T:deoxyseq256128v13 289.08 289.10 289.14 aes256gcmv1 387.52? 387.90? 663.34? T:acorn128v3 391.47 391.52 404.33 T:acorn128v2 387.30 403.34 403.49 T:acorn128 3135.14 3135.47 3135.76 T:present80n6t4silcv2 3136.08 3136.44 3137.06 T:present80n6silcv1 6371.16 6372.59 6500.70 T:led80n6t4silcv2 6404.44 6405.90 6408.73 T:led80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.79? 1.82? 1.99? T:aegis128l 1.81? 1.84? 2.05? aegis128l 1.99 2.02 2.03 T:aegis128 2.17? 2.20? 2.60? T:aezv5 2.27? 2.30? 2.69? T:aezv4 2.34 2.36 2.59 T:tiaoxinv2 2.33? 2.37? 2.62? T:tiaoxinv1 2.44 2.46 2.62 T:aezv3 2.48? 2.52? 2.77? aegis256 3.77 3.80 3.91 T:aes128otrpv3 4.05 4.06 4.27 T:deoxysneq128128v1 4.24 4.38 4.52 T:morus640128v1 4.38 4.42 4.65 T:morus1280256v1 4.38 4.44 4.60 T:morus1280128v1 4.52? 4.53? 5.10? T:colm0v1 4.51 4.55 4.70 T:morus640128v2 4.62 4.63 4.66 T:aes128otrsv3 4.62 4.67 5.00 T:morus1280256v2 4.65 4.70 4.81 T:morus1280128v2 4.79 4.83 4.99 T:deoxysneq256128v1 4.59? 4.85? 6.47? T:aeadaes128ocbtaglen128v1 4.84 4.85 4.91 T:aes256otrpv3 4.92 4.93 4.96 T:aes128n8t8clocv2 4.95 4.95 5.01 T:aes128n12t8clocv2 4.95 4.99 5.18 T:aes128n12t8clocv3 5.19 5.21 5.26 T:aes128otrcv3 5.38 5.52 5.64 T:deoxysi128v141 5.85 5.85 5.87 T:aes128n12t8silcv2 5.84 5.86 5.87 T:aes128n12t8silcv3 5.84 5.86 5.88 T:aes128n8t8silcv2 5.91 5.96 6.13 T:deoxysi256v141 5.98 6.02 6.10 T:aes256otrsv3 6.13? 6.22? 11.24? T:aeadaes256ocbtaglen128v1 6.61 6.75 6.98 T:aes256otrcv3 6.51? 6.86? 11.95? T:aeadaes192ocbtaglen128v1 7.27 7.45 7.51 T:deoxyseq128128v1 8.12 8.16 8.34 T:deoxysii256v141 8.44 8.52 8.60 T:norx6441v1 8.51 8.57 8.66 T:norx6441v3 8.52 8.60 8.69 T:norx6441v2 9.20 9.25 9.33 T:deoxyseq256128v1 9.28 9.29 9.30 T:aesjambuv1 9.70 9.73 9.89 T:deoxysii128v141 10.29 10.35 10.48 T:norx3241v1 10.53 10.59 10.63 T:norx3241v2 10.55 10.60 10.66 T:norx3241v3 11.42 11.51 11.88 T:ascon96v1 11.45 11.56 11.88 T:ascon128av11 11.98 12.17 12.38 ascon128av12 12.40 12.50 12.51 T:norx6461v1 12.45 12.52 12.62 T:norx6461v3 12.55 12.59 12.70 T:norx6461v2 14.70 14.92 15.20 T:ascon128v1 14.81 14.96 15.31 T:ascon128v11 14.94 15.05 15.13 T:norx6444v3 15.19 15.25 15.73 T:lakekeyakv1 15.50 15.54 15.60 T:norx3261v2 15.05 15.56 15.84 ascon128v12 15.73 15.86 15.95 T:norx3261v3 16.09 16.25 16.30 T:norx3261v1 17.46 17.59 17.85 T:riverkeyakv2 19.13 19.21 19.35 T:lakekeyakv2 22.88 22.92 23.02 T:aes128n8clocv1 23.00 23.15 23.34 T:aes128n12clocv1 23.20 23.32 23.54 T:aes128otrsv1 23.12 23.38 23.63 T:aes128otrsv2 23.41 23.43 23.46 T:twine80n6t4clocv3 24.01 24.14 24.31 T:twine80n6t4clocv2 24.57 24.72 24.91 T:aes128otrpv1 24.68 24.73 25.05 T:aes128otrpv2 26.68 26.84 27.50 T:aes128n8silcv1 26.63 27.07 27.62 T:aes128n12silcv1 27.09 27.23 27.45 T:aes128gcmv1 27.73 27.85 28.10 T:aes256gcmv1 29.45 29.60 29.73 T:aes256otrsv2 29.61 29.80 29.93 T:aes256otrsv1 30.79 31.02 31.17 T:aes256otrpv1 30.98 31.16 31.41 T:aes256otrpv2 31.97 32.20 32.36 T:seakeyakv2 34.82 34.94 35.08 T:norx6444v2 36.73 37.01 37.16 T:ketjeminorv2 37.93 38.08 38.72 T:norx6444v1 51.62 51.86 52.26 T:ketjesrv1 52.26 52.55 53.28 T:oceankeyakv2 54.86 55.18 55.27 T:riverkeyakv1 58.23 58.45 58.54 T:ketjesrv2 62.40 62.69 62.90 T:ketjemajorv2 75.90 76.30 76.63 T:ketjejrv1 78.33 78.59 78.86 T:proest256otrv1 89.69 89.90 90.16 T:deoxysneq128128v13 95.05 95.42 102.89 T:present80n6t4silcv3 103.05 103.89 104.23 T:twine80n6clocv1 116.45 116.74 117.08 T:aezv1 119.13 119.42 123.47 T:proest128otrv1 119.54 119.82 120.10 T:deoxysneq256128v13 125.28 125.78 126.41 T:ketjejrv2 131.38 131.77 132.44 T:lunarkeyakv2 147.88 148.22 148.48 T:deoxyseq128128v13 156.60 156.76 156.98 T:led80n6t4silcv3 163.59 164.02 164.48 T:seakeyakv1 201.60 201.95 202.28 T:deoxyseq256128v13 240.03 240.43 240.63 T:oceankeyakv1 333.52 333.73 334.14 aes256gcmv1 1381.83? 1382.69? 2369.07? T:acorn128v3 1399.70 1436.87 1437.29 T:acorn128 1416.34 1446.63 1446.86 T:acorn128v2 3512.48 3513.23 3513.87 T:present80n6t4silcv2 3514.85 3515.77 3517.52 T:present80n6silcv1 7060.76 7102.94 7253.48 T:led80n6t4silcv2 7088.75 7104.08 7137.22 T:led80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.87? 1.88? 2.09? T:aegis128l 1.98? 2.05? 2.50? aegis128l 2.08 2.09 2.20 T:aegis128 2.22 2.23 2.26 T:aezv5 2.31 2.32 2.34 T:aezv4 2.38 2.38 2.62 T:tiaoxinv1 2.38 2.39 2.55 T:tiaoxinv2 2.43 2.45 2.64 T:aezv3 2.52 2.60 2.73 aegis256 3.92 3.98 4.02 T:aes128otrpv3 4.30 4.37 4.45 T:morus640128v1 4.49 4.50 4.51 T:aes128otrsv3 4.76 4.77 4.96 T:morus1280128v1 4.78 4.83 4.95 T:morus1280256v1 4.82 4.88 5.03 T:morus640128v2 4.95 4.97 5.03 T:aes256otrpv3 4.97 5.00 5.03 T:aes128n8t8clocv2 5.00 5.03 5.05 T:aes128n12t8clocv2 5.03 5.03 5.27 T:morus1280256v2 4.98 5.04 5.19 T:aes128n12t8clocv3 5.05 5.11 5.20 T:morus1280128v2 5.25 5.27 5.45 T:colm0v1 4.96? 5.30? 7.12? T:aeadaes128ocbtaglen128v1 5.34 5.34 5.37 T:aes128otrcv3 5.70? 5.74? 10.73? T:aeadaes256ocbtaglen128v1 5.89 5.91 5.99 T:aes256otrsv3 5.91 5.91 5.94 T:aes128n12t8silcv3 5.91 5.91 5.92 T:aes128n12t8silcv2 5.93 5.95 5.96 T:aes128n8t8silcv2 6.09 6.10 6.12 T:deoxysneq128128v1 6.29 6.33 6.51 T:deoxysneq256128v1 6.38? 6.54? 8.24? T:aeadaes192ocbtaglen128v1 6.92 7.01 7.16 T:deoxysi128v141 6.98 7.01 7.07 T:aes256otrcv3 7.65 7.73 7.79 T:deoxysi256v141 8.65 8.70 8.77 T:norx6441v1 8.63 8.71 8.80 T:norx6441v3 8.62 8.73 8.77 T:norx6441v2 9.41 9.43 9.45 T:aesjambuv1 9.42 9.45 9.50 T:deoxysii256v141 9.88 9.91 10.15 T:deoxyseq128128v1 10.37 10.43 10.55 T:norx3241v1 10.52 10.56 10.62 T:norx3241v2 10.58 10.63 10.75 T:norx3241v3 10.56 10.69 10.84 T:deoxysii128v141 10.97 11.03 11.08 T:deoxyseq256128v1 11.62 11.83 12.03 T:ascon96v1 11.66 11.83 12.09 T:ascon128av11 12.01 12.34 12.51 ascon128av12 12.48 12.62 12.70 T:norx6461v1 12.62 12.72 12.77 T:norx6461v3 12.72 12.84 12.91 T:norx6461v2 14.73 14.84 15.14 T:ascon128v11 14.70 14.90 15.21 T:ascon128v1 14.84 15.00 15.12 T:norx6444v3 15.24 15.45 15.71 T:lakekeyakv1 15.22 15.46 15.57 ascon128v12 15.68 15.79 15.86 T:norx3261v2 15.73 15.80 15.92 T:norx3261v3 16.23 16.27 16.32 T:norx3261v1 17.66 17.72 18.04 T:riverkeyakv2 19.01 19.09 19.38 T:lakekeyakv2 22.76 22.80 22.92 T:aes128n8clocv1 22.75 22.83 23.12 T:aes128n12clocv1 23.40 23.41 23.74 T:twine80n6t4clocv3 23.29 23.42 23.62 T:aes128otrsv2 23.30 23.46 23.66 T:aes128otrsv1 24.04 24.12 24.40 T:twine80n6t4clocv2 24.61 24.85 25.04 T:aes128otrpv1 24.77 24.95 25.19 T:aes128otrpv2 26.73 26.84 27.37 T:aes128n8silcv1 26.38 26.90 27.09 T:aes128gcmv1 27.16 27.23 27.59 T:aes256gcmv1 26.86 27.44 28.27 T:aes128n12silcv1 29.39 29.62 30.00 T:aes256otrsv2 29.72 29.93 30.38 T:aes256otrsv1 30.95 31.02 31.30 T:aes256otrpv1 31.16 31.48 31.95 T:aes256otrpv2 32.21 32.41 32.52 T:seakeyakv2 35.02 35.21 35.41 T:norx6444v2 36.45 36.63 36.75 T:ketjeminorv2 37.52 37.70 37.76 T:norx6444v1 52.16 52.34 53.09 T:ketjesrv1 52.55 52.85 53.59 T:oceankeyakv2 54.95 55.49 55.63 T:riverkeyakv1 58.45 58.60 59.27 T:ketjesrv2 62.65 62.82 63.05 T:ketjemajorv2 76.36 76.70 77.95 T:ketjejrv1 79.63 80.08 80.41 T:proest256otrv1 96.22 99.55 99.84 T:present80n6t4silcv3 103.27 103.59 103.95 T:twine80n6clocv1 105.93 106.27 106.40 T:deoxysneq128128v13 120.39 120.55 120.60 T:aezv1 121.35 122.87 124.12 T:proest128otrv1 125.20 126.82 127.23 T:ketjejrv2 131.48 131.95 132.31 T:lunarkeyakv2 139.99 140.45 140.84 T:deoxysneq256128v13 148.09 148.50 148.99 T:deoxyseq128128v13 156.86 157.00 157.55 T:led80n6t4silcv3 163.15 163.67 163.82 T:seakeyakv1 201.44 201.61 202.21 T:deoxyseq256128v13 240.16 240.34 240.97 T:oceankeyakv1 333.62 334.08 334.88 aes256gcmv1 1379.77? 1381.13? 2365.30? T:acorn128v3 1386.51 1387.09 1443.09 T:acorn128v2 1395.48 1432.93 1436.59 T:acorn128 3510.78 3511.87 3513.61 T:present80n6t4silcv2 3514.46 3516.11 3517.55 T:present80n6silcv1 7025.25 7041.05 7251.93 T:led80n6t4silcv2 7079.34 7083.70 7095.12 T:led80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.87 1.88 2.02 T:aegis128l 1.91 1.93 1.94 T:aezv5 1.98 2.00 2.02 T:aezv4 2.00 2.06 2.12 aegis128l 2.06 2.08 2.27 T:aezv3 2.08 2.09 2.17 T:aegis128 2.36 2.37 2.48 T:tiaoxinv1 2.38 2.41 2.48 T:tiaoxinv2 2.51 2.55 2.61 aegis256 3.92 3.95 4.01 T:aes128otrpv3 4.30 4.35 4.38 T:morus640128v1 4.48 4.50 4.52 T:aes128otrsv3 4.74 4.77 4.80 T:morus1280128v1 4.75 4.77 4.80 T:morus1280256v1 4.81 4.88 4.90 T:morus640128v2 4.95 4.96 5.00 T:aes256otrpv3 4.95 4.98 5.03 T:aeadaes128ocbtaglen128v1 4.95 4.98 5.02 T:aes128n8t8clocv2 4.95 4.98 5.29 T:aes128n12t8clocv3 4.96 4.98 5.02 T:aes128n12t8clocv2 5.03 5.04 5.10 T:morus1280256v2 5.02 5.05 5.09 T:morus1280128v2 5.31 5.34 5.38 T:colm0v1 5.32 5.34 5.38 T:aes128otrcv3 5.68 5.71 5.75 T:aeadaes256ocbtaglen128v1 5.84 5.85 5.87 T:aes128n12t8silcv2 5.84 5.85 6.14 T:aes128n12t8silcv3 5.85 5.87 5.88 T:aes128n8t8silcv2 5.88 5.92 5.98 T:aes256otrsv3 5.95 5.97 6.00 T:deoxysneq128128v1 6.17 6.19 6.28 T:deoxysneq256128v1 6.38? 6.42? 11.54? T:aeadaes192ocbtaglen128v1 6.88 6.96 7.33 T:deoxysi128v141 6.97 6.99 7.02 T:aes256otrcv3 7.66 7.70 7.73 T:deoxysi256v141 8.65 8.67 8.75 T:norx6441v3 8.70 8.75 8.80 T:norx6441v2 8.70 8.75 8.79 T:norx6441v1 9.34 9.40 9.45 T:deoxysii256v141 9.41 9.44 9.45 T:aesjambuv1 9.88 10.05 10.15 T:deoxyseq128128v1 10.39 10.42 10.50 T:norx3241v1 10.51 10.53 10.70 T:deoxysii128v141 10.50 10.60 10.65 T:norx3241v2 10.61 10.68 10.71 T:norx3241v3 11.03 11.09 11.16 T:deoxyseq256128v1 11.51 11.63 11.74 T:ascon96v1 11.54 11.70 11.85 T:ascon128av11 11.74 11.88 12.02 ascon128av12 12.43 12.56 12.73 T:norx6461v1 12.62 12.69 12.88 T:norx6461v3 12.70 12.80 12.91 T:norx6461v2 14.57 14.65 14.89 T:ascon128v11 14.56 14.74 14.86 T:ascon128v1 14.73 14.83 15.01 T:norx6444v3 15.12 15.14 15.41 ascon128v12 15.34 15.40 15.59 T:lakekeyakv1 15.54 15.73 15.87 T:norx3261v2 15.66 15.84 15.93 T:norx3261v3 16.24 16.30 16.39 T:norx3261v1 17.73 17.82 18.43 T:riverkeyakv2 19.01 19.03 19.21 T:lakekeyakv2 22.66 22.70 22.77 T:aes128n8clocv1 22.77 22.84 22.98 T:aes128n12clocv1 23.29 23.35 23.68 T:aes128otrsv2 23.38 23.41 23.70 T:twine80n6t4clocv3 23.43 23.55 23.62 T:aes128otrsv1 24.04 24.12 24.32 T:twine80n6t4clocv2 24.72 24.89 25.07 T:aes128otrpv1 24.74 24.96 25.16 T:aes128otrpv2 26.60 26.67 27.05 T:aes128gcmv1 26.66 26.76 27.17 T:aes128n8silcv1 26.70 27.12 27.50 T:aes128n12silcv1 27.07 27.16 27.36 T:aes256gcmv1 29.71 29.77 29.88 T:aes256otrsv2 29.83 30.15 30.32 T:aes256otrsv1 31.24 31.38 31.67 T:aes256otrpv1 31.25 31.38 31.58 T:aes256otrpv2 32.14 32.30 32.40 T:seakeyakv2 35.13 35.30 35.42 T:norx6444v2 36.52 36.73 36.84 T:ketjeminorv2 37.52 37.58 37.73 T:norx6444v1 52.59 52.84 53.14 T:oceankeyakv2 52.91 53.64 53.83 T:ketjesrv1 55.04 55.10 55.33 T:riverkeyakv1 59.20 59.40 60.05 T:ketjesrv2 62.78 63.12 63.44 T:ketjemajorv2 77.32 77.66 77.73 T:proest256otrv1 77.82 78.07 78.37 T:ketjejrv1 95.95 99.17 99.47 T:present80n6t4silcv3 103.14 103.59 103.93 T:twine80n6clocv1 105.82 105.99 106.30 T:deoxysneq128128v13 119.65 119.86 122.09 T:proest128otrv1 120.22 120.49 120.81 T:aezv1 126.73 126.90 127.13 T:ketjejrv2 131.67 132.03 132.47 T:lunarkeyakv2 139.84 140.13 140.49 T:deoxysneq256128v13 147.99 148.16 148.45 T:deoxyseq128128v13 156.79 156.98 157.20 T:led80n6t4silcv3 163.37 163.66 163.90 T:seakeyakv1 201.48 201.63 202.06 T:deoxyseq256128v13 240.23 240.60 240.94 T:oceankeyakv1 327.34 327.88 328.16 aes256gcmv1 1379.54? 1381.14? 2365.45? T:acorn128v3 1386.43 1386.91 1442.84 T:acorn128v2 1395.16 1433.28 1436.58 T:acorn128 3511.02 3512.00 3513.42 T:present80n6t4silcv2 3513.91 3515.27 3517.20 T:present80n6silcv1 7028.59 7040.70 7254.40 T:led80n6t4silcv2 7085.93 7095.91 7110.17 T:led80n6silcv1