VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen 3 (a20f10); 2020 AMD Ryzen 5 5600X; 6 x 3700MHz; unstable; spawn, supercop-20231215

[Page version: 20240726 23:46:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.13? 0.13? 0.15? T:tiaoxinv1 0.13? 0.15? 0.17? T:tiaoxinv2 0.17 0.17 0.17 aegis128l 0.12? 0.19? 0.27? T:aeadaes128ocbtaglen128v1 0.17? 0.25? 0.33? T:aeadaes256ocbtaglen128v1 0.27 0.29 0.29 aegis256 0.29 0.29 0.29 T:aegis128 0.33 0.33 0.35 T:aezv4 -2.00? 0.35? 0.46? T:aeadaes192ocbtaglen128v1 0.29? 0.35? 0.44? T:aezv5 0.33 0.35 0.35 T:aezv3 0.37 0.37 0.39 T:aes128otrcv3 0.37 0.37 0.39 T:aes128otrpv3 0.37 0.39 0.39 T:aes128otrsv3 0.48 0.48 0.50 T:aes256otrcv3 0.44? 0.50? 0.50? T:aes256otrpv3 0.48 0.50 0.52 T:aes256otrsv3 0.46? 0.52? 0.58? T:deoxysi128v141 0.48? 0.54? 0.58? T:deoxysneq128128v1 0.50? 0.56? 0.60? T:deoxysi256v141 0.58 0.60 0.62 T:deoxysneq256128v1 0.62 0.62 0.64 T:morus1280128v2 0.62 0.62 0.66 T:morus1280128v1 0.62 0.62 0.66 T:morus1280256v1 0.62 0.64 0.66 T:morus1280256v2 0.75 0.77 0.79 T:norx6444v3 0.94? 1.04? 1.12? T:deoxysii128v141 1.04? 1.18? 1.25? T:deoxysii256v141 1.16 1.19 1.21 T:deoxyseq128128v1 1.31 1.33 1.33 T:morus640128v2 1.33 1.33 1.33 T:morus640128v1 1.35 1.35 1.35 T:colm0v1 1.33? 1.39? 1.54? T:deoxyseq256128v1 1.41 1.41 1.43 T:aes128gcmv1 1.35? 1.50? 1.64? T:lunarkeyakv2 1.54 1.54 1.54 aes256gcmv1 1.85 1.89 1.95 T:seakeyakv2 1.89 1.95 1.98 T:oceankeyakv2 1.95 1.95 1.97 T:norx6441v3 1.93 1.97 1.98 T:norx6441v2 2.22 2.22 2.25 T:aes128n12t8silcv2 2.22 2.22 2.25 T:aes128n8t8silcv2 2.22 2.24 2.24 T:aes128n12t8silcv3 2.22 2.24 2.24 T:aes128n8t8clocv2 2.24 2.24 2.25 T:aes128n12t8clocv2 2.24 2.24 2.25 T:aes128n12t8clocv3 2.33 2.33 2.35 T:norx6441v1 2.81 2.83 2.93 T:lakekeyakv1 2.89 2.91 2.91 T:norx6461v3 2.89 2.91 2.93 T:norx6461v2 2.89 2.95 3.04 T:norx6444v2 3.04 3.04 3.08 T:norx3241v3 3.08 3.10 3.10 T:norx3241v2 3.14 3.18 3.33 T:norx6444v1 3.20 3.28 3.28 T:lakekeyakv2 3.45 3.49 3.51 T:norx6461v1 3.66 3.68 3.70 T:norx3241v1 4.55 4.59 4.61 T:norx3261v3 4.57 4.61 4.64 T:aesjambuv1 4.61 4.66 4.66 T:norx3261v2 4.86 4.89 4.91 T:ascon96v1 4.88 4.89 4.95 T:ascon128av11 5.18 5.18 5.26 ascon128av12 5.47 5.53 5.63 T:ketjemajorv2 5.76 5.82 5.86 T:acorn128v2 6.01 6.01 6.03 T:norx3261v1 6.24 6.26 6.30 T:acorn128v3 6.67 6.74 6.78 T:riverkeyakv2 7.13 7.17 7.23 T:ascon128v11 7.13 7.21 7.27 T:ascon128v1 7.38 7.42 7.50 T:ketjeminorv2 7.48 7.50 7.53 ascon128v12 9.62 9.91 10.19 T:oceankeyakv1 9.96 10.14 10.25 T:seakeyakv1 12.80 12.91 12.95 T:twine80n6t4clocv2 13.05 13.10 13.72 T:aes128otrpv1 12.60 13.12 13.26 T:aes128otrsv1 12.99? 13.24? 14.51? T:aes128otrsv2 13.12 13.28 13.34 T:aes128otrpv2 13.84 14.01 14.11 T:twine80n6t4clocv3 14.36 14.41 14.47 T:proest256otrv1 16.23 16.25 16.42 T:aes256otrpv1 16.23 16.30 16.38 T:aes256otrsv2 16.28 16.44 16.59 T:aes256otrsv1 17.38 17.48 17.65 T:aes256otrpv2 18.10 18.13 18.21 T:aes128n12clocv1 18.04 18.15 18.25 T:aes128n8clocv1 19.37 19.41 19.48 T:aes128n12silcv1 19.46 19.54 19.60 T:aes128n8silcv1 20.10 20.22 20.29 T:riverkeyakv1 44.19 44.30 44.55 T:colm127v1 44.53 44.80 44.94 T:ketjesrv1 45.07 45.31 45.61 T:ketjesrv2 46.35 46.62 46.77 T:proest128otrv1 54.15 54.40 55.46 T:ketjejrv1 62.30 62.38 63.05 T:present80n6t4silcv3 69.53 69.93 72.15 T:deoxysneq128128v13 87.95 88.43 90.46 T:ketjejrv2 91.81 92.17 94.25 T:deoxysneq256128v13 103.72 105.41 105.62 T:twine80n6clocv1 112.64 112.70 112.87 T:led80n6t4silcv3 137.90 139.14 140.60 T:deoxyseq128128v13 139.42 140.33 140.52 T:aezv1 180.57 184.85 190.59 T:deoxyseq256128v13 373.35 376.90 393.09 T:acorn128 2915.70 2918.34 2929.32 T:present80n6silcv1 2913.42 2921.48 2925.97 T:present80n6t4silcv2 5374.37 5657.70 5674.37 T:led80n6t4silcv2 5645.45 5688.00 5702.82 T:led80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.10? 0.19? 0.31? T:aeadaes128ocbtaglen128v1 0.15? 0.19? 0.19? aegis128l 0.21? 0.27? 0.37? T:aeadaes256ocbtaglen128v1 0.25 0.27 0.27 T:tiaoxinv1 0.25? 0.29? 0.33? aegis256 0.27 0.29 0.29 T:aegis128 0.29 0.29 0.31 T:tiaoxinv2 0.33 0.33 0.35 T:aezv3 0.33 0.33 0.35 T:aezv4 0.31? 0.35? 0.44? T:aezv5 0.31? 0.37? 0.39? T:aeadaes192ocbtaglen128v1 0.39 0.39 0.40 T:aes128otrsv3 0.39 0.40 0.40 T:aes128otrpv3 0.39? 0.40? 0.46? T:aes128otrcv3 0.46? 0.52? 0.52? T:aes256otrpv3 0.50? 0.52? 0.60? T:aes256otrcv3 0.50 0.54 0.54 T:aes256otrsv3 0.48? 0.56? 0.62? T:deoxysi128v141 0.56 0.60 0.60 T:deoxysneq128128v1 0.56? 0.64? 0.67? T:deoxysi256v141 0.62 0.64 0.66 T:deoxysneq256128v1 0.66 0.67 0.69 T:morus1280128v1 0.66 0.67 0.69 T:morus1280128v2 0.66 0.67 0.69 T:morus1280256v2 0.66 0.69 0.69 T:morus1280256v1 0.75 0.75 0.79 T:norx6444v3 0.91? 1.02? 1.08? T:deoxysii128v141 1.16 1.21 1.27 T:deoxyseq128128v1 1.08? 1.23? 1.29? T:deoxysii256v141 1.23 1.23 1.25 T:colm0v1 1.31 1.35 1.35 T:morus640128v1 1.31 1.35 1.35 T:morus640128v2 1.37? 1.41? 1.62? T:deoxyseq256128v1 1.41 1.43 1.43 T:aes128gcmv1 1.43? 1.56? 1.72? T:lunarkeyakv2 1.52 1.56 1.58 aes256gcmv1 1.87 1.89 1.91 T:norx6441v3 1.89 1.91 1.93 T:norx6441v2 1.95 1.98 2.00 T:seakeyakv2 1.97 2.02 2.06 T:oceankeyakv2 2.14 2.16 2.22 T:aes128n8t8silcv2 2.16 2.16 2.20 T:aes128n12t8clocv3 2.16 2.16 2.20 T:aes128n12t8silcv2 2.16 2.16 2.24 T:aes128n8t8clocv2 2.16 2.18 2.22 T:aes128n12t8clocv2 2.16 2.18 2.22 T:aes128n12t8silcv3 2.27 2.29 2.31 T:norx6441v1 2.77 2.81 2.83 T:lakekeyakv1 2.85 2.87 2.89 T:norx6461v2 2.85 2.87 2.89 T:norx6461v3 2.89 2.95 2.99 T:norx6444v2 2.97 2.99 2.99 T:norx3241v3 3.01 3.04 3.06 T:norx3241v2 3.18 3.22 3.24 T:norx6444v1 3.41 3.41 3.45 T:norx6461v1 3.57 3.58 3.62 T:norx3241v1 3.55 3.60 3.62 T:lakekeyakv2 4.51 4.57 4.59 T:norx3261v3 4.55 4.59 4.61 T:norx3261v2 4.70 4.74 4.78 T:ascon96v1 4.72 4.74 4.78 T:aesjambuv1 4.76 4.80 4.86 T:ascon128av11 4.88 4.88 4.95 ascon128av12 5.16 5.20 5.26 T:ketjemajorv2 5.88 5.90 5.90 T:norx3261v1 5.94 5.99 6.03 T:acorn128v2 6.05 6.09 6.09 T:acorn128v3 6.78 6.82 6.88 T:riverkeyakv2 7.25 7.30 7.34 T:ascon128v11 7.27 7.30 7.32 ascon128v12 7.27 7.34 7.36 T:ascon128v1 7.30 7.42 7.44 T:ketjeminorv2 9.71 9.87 10.14 T:oceankeyakv1 10.08 10.18 10.35 T:seakeyakv1 12.76 12.82 12.95 T:aes128otrpv2 12.78 12.85 12.93 T:twine80n6t4clocv2 12.45 12.91 12.93 T:aes128otrsv1 12.83 12.91 13.30 T:aes128otrpv1 12.74? 13.01? 14.47? T:aes128otrsv2 13.74 13.97 14.05 T:twine80n6t4clocv3 14.11 14.28 14.30 T:proest256otrv1 15.92 15.98 16.13 T:aes256otrpv1 15.94 16.01 16.15 T:aes256otrsv2 15.94 16.07 16.34 T:aes256otrsv1 17.23 17.50 17.69 T:aes256otrpv2 19.10 19.16 19.19 T:aes128n12silcv1 19.14 19.21 19.29 T:aes128n8clocv1 19.16 19.23 19.31 T:aes128n8silcv1 19.19 19.25 19.44 T:aes128n12clocv1 20.16 20.23 20.31 T:riverkeyakv1 40.68 41.07 41.22 T:ketjesrv2 45.69 46.13 46.25 T:ketjesrv1 46.04 46.38 47.39 T:proest128otrv1 53.73 54.88 55.04 T:ketjejrv1 56.77 57.60 58.04 T:colm127v1 63.25 63.38 64.13 T:present80n6t4silcv3 81.03 81.84 82.06 T:ketjejrv2 88.93 89.20 89.72 T:deoxysneq128128v13 104.43 104.60 109.15 T:twine80n6clocv1 113.68 113.72 113.81 T:led80n6t4silcv3 113.58 113.78 115.74 T:deoxysneq256128v13 138.63 139.54 140.64 T:deoxyseq128128v13 140.41 140.73 141.14 T:aezv1 180.32 183.36 186.58 T:deoxyseq256128v13 372.77 377.40 395.57 T:acorn128 2914.58 2918.93 2922.61 T:present80n6t4silcv2 2917.06 2921.54 2924.16 T:present80n6silcv1 5432.10 5653.99 5674.34 T:led80n6t4silcv2 5640.52 5701.76 5762.90 T:led80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.12 0.12 0.13 T:aezv4 0.12? 0.12? 0.15? T:aezv3 0.10? 0.13? 0.17? T:aezv5 0.15? 0.19? 0.27? T:aeadaes128ocbtaglen128v1 0.17? 0.23? 0.23? aegis128l 0.23? 0.25? 0.29? T:tiaoxinv1 -1.87? 0.27? 2.43? T:aeadaes256ocbtaglen128v1 0.25? 0.29? 0.31? T:tiaoxinv2 0.29 0.29 0.29 T:aegis128 0.29? 0.31? 0.35? aegis256 0.33? 0.35? 2.68? T:aeadaes192ocbtaglen128v1 0.35? 0.40? 0.44? T:aes128otrcv3 0.39 0.40 0.42 T:aes128otrsv3 0.39? 0.40? 0.44? T:aes128otrpv3 0.46? 0.52? 0.52? T:aes256otrpv3 0.46? 0.52? 0.58? T:aes256otrcv3 0.50 0.52 0.54 T:aes256otrsv3 0.50? 0.56? 0.60? T:deoxysi128v141 0.60 0.60 0.64 T:deoxysneq128128v1 0.50? 0.64? 0.69? T:deoxysi256v141 0.62 0.64 0.66 T:deoxysneq256128v1 0.66 0.67 0.69 T:morus1280256v2 0.67 0.67 0.69 T:morus1280128v2 0.66 0.69 0.69 T:morus1280128v1 0.66 0.69 0.69 T:morus1280256v1 0.75 0.77 0.79 T:norx6444v3 0.93? 1.06? 1.10? T:deoxysii128v141 1.18? 1.21? 1.33? T:deoxyseq128128v1 1.08? 1.23? 1.27? T:deoxysii256v141 1.19 1.23 1.29 T:colm0v1 1.31 1.35 1.35 T:morus640128v1 1.31 1.35 1.35 T:morus640128v2 1.29 1.39 1.41 T:deoxyseq256128v1 1.39 1.43 1.43 T:aes128gcmv1 1.52 1.56 1.56 aes256gcmv1 1.48? 1.58? 1.72? T:lunarkeyakv2 1.87 1.89 1.91 T:norx6441v3 1.89 1.91 1.93 T:norx6441v2 1.95 2.00 2.02 T:seakeyakv2 1.98 2.02 2.06 T:oceankeyakv2 2.12 2.16 2.18 T:aes128n12t8clocv2 2.14 2.16 2.22 T:aes128n8t8silcv2 2.16 2.16 2.22 T:aes128n12t8clocv3 2.12 2.18 2.22 T:aes128n12t8silcv2 2.12 2.18 2.22 T:aes128n8t8clocv2 2.16 2.20 2.24 T:aes128n12t8silcv3 2.27 2.29 2.33 T:norx6441v1 2.77 2.79 2.83 T:lakekeyakv1 2.85 2.85 2.89 T:norx6461v3 2.83 2.87 2.87 T:norx6461v2 2.91 2.97 3.03 T:norx6444v2 2.97 2.99 2.99 T:norx3241v3 3.01 3.03 3.04 T:norx3241v2 3.18 3.22 3.24 T:norx6444v1 3.41 3.41 3.47 T:norx6461v1 3.57 3.62 3.64 T:lakekeyakv2 3.57 3.62 3.64 T:norx3241v1 4.51 4.57 4.57 T:norx3261v3 4.53 4.59 4.61 T:norx3261v2 4.70 4.74 4.78 T:aesjambuv1 4.72 4.76 4.78 T:ascon96v1 4.76 4.80 4.86 T:ascon128av11 4.88 4.89 4.95 ascon128av12 5.15 5.22 5.32 T:ketjemajorv2 5.88 5.90 5.90 T:norx3261v1 5.95 6.01 6.05 T:acorn128v2 6.07 6.09 6.11 T:acorn128v3 6.80 6.84 6.88 T:riverkeyakv2 7.27 7.28 7.32 ascon128v12 7.25 7.30 7.32 T:ascon128v11 7.25 7.34 7.38 T:ascon128v1 7.36 7.42 7.48 T:ketjeminorv2 9.77 9.92 10.14 T:oceankeyakv1 10.00 10.23 10.35 T:seakeyakv1 12.74 12.85 12.99 T:aes128otrpv2 12.78 12.87 12.93 T:twine80n6t4clocv2 12.62 12.91 12.99 T:aes128otrsv1 12.83 12.91 13.45 T:aes128otrpv1 12.82? 13.07? 14.45? T:aes128otrsv2 13.91 13.99 14.07 T:twine80n6t4clocv3 14.22 14.28 14.41 T:proest256otrv1 15.92 16.01 16.17 T:aes256otrpv1 15.96 16.03 16.17 T:aes256otrsv2 15.99 16.07 16.30 T:aes256otrsv1 18.11 18.31 18.56 T:aes256otrpv2 19.08 19.12 19.16 T:aes128n12silcv1 19.10 19.17 19.29 T:aes128n8clocv1 19.16 19.27 19.31 T:aes128n8silcv1 19.21 19.29 19.35 T:aes128n12clocv1 20.16 20.23 20.37 T:riverkeyakv1 40.72 40.95 41.24 T:ketjesrv2 45.79 45.92 46.19 T:ketjesrv1 45.94 46.33 47.39 T:proest128otrv1 53.32 54.19 54.46 T:ketjejrv1 55.79 56.60 56.95 T:colm127v1 63.32 63.38 64.15 T:present80n6t4silcv3 81.01 81.79 83.94 T:ketjejrv2 88.84 88.92 91.44 T:deoxysneq128128v13 103.39 104.45 104.78 T:twine80n6clocv1 113.56 113.68 113.93 T:led80n6t4silcv3 113.16 114.31 114.95 T:deoxysneq256128v13 136.75 139.12 140.21 T:deoxyseq128128v13 140.21 140.45 141.00 T:aezv1 184.06 184.19 184.34 T:deoxyseq256128v13 385.07 390.72 396.11 T:acorn128 2916.70 2921.23 2924.70 T:present80n6silcv1 2915.77 2922.61 2955.34 T:present80n6t4silcv2 5429.08 5644.89 5687.52 T:led80n6t4silcv2 5650.92 5693.57 5711.99 T:led80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.09? 0.12? 0.13? T:tiaoxinv1 0.10? 0.12? 0.13? T:tiaoxinv2 0.15 0.16 0.16 aegis128l 0.13? 0.17? 0.21? T:aeadaes128ocbtaglen128v1 0.22 0.23 0.24 T:aezv4 0.23 0.23 0.23 T:aezv3 0.21? 0.24? 0.24? T:aezv5 -0.88? 0.25? 1.44? T:aeadaes256ocbtaglen128v1 0.28 0.28 0.28 T:aegis128 0.28 0.29 0.29 aegis256 0.26? 0.34? 0.38? T:aeadaes192ocbtaglen128v1 0.38 0.38 0.39 T:aes128otrpv3 0.39 0.39 0.39 T:aes128otrcv3 0.49 0.50 0.52 T:aes256otrpv3 0.50 0.50 0.50 T:aes256otrcv3 0.44? 0.53? 0.57? T:deoxysi128v141 0.52? 0.58? 0.63? T:deoxysneq128128v1 0.49? 0.59? 0.65? T:deoxysi256v141 0.61 0.61 0.62 T:morus1280256v1 0.61 0.61 0.62 T:morus1280256v2 0.61 0.61 0.63 T:morus1280128v1 0.61 0.62 0.62 T:morus1280128v2 0.62? 0.64? 0.69? T:deoxysneq256128v1 0.66? 0.77? 0.83? T:deoxysii128v141 0.80? 0.86? 0.91? T:deoxysii256v141 0.89 0.91 0.91 T:aes128gcmv1 0.94 0.94 0.94 T:colm0v1 0.94 0.94 0.96 aes256gcmv1 0.92 0.95 0.95 T:deoxyseq128128v1 1.00 1.04 1.06 T:deoxyseq256128v1 1.26 1.27 1.27 T:aes128otrsv3 1.30 1.32 1.34 T:morus640128v2 1.31 1.32 1.33 T:morus640128v1 1.35 1.35 1.37 T:norx6444v3 1.60 1.62 1.65 T:seakeyakv2 1.63 1.66 1.68 T:oceankeyakv2 1.75 1.76 1.76 T:aes256otrsv3 1.94 1.96 1.96 T:norx6441v3 1.95 1.96 1.98 T:norx6441v2 2.01 2.05 2.08 T:lunarkeyakv2 2.18 2.19 2.21 T:aes128n8t8clocv2 2.19 2.19 2.21 T:aes128n12t8clocv2 2.18 2.20 2.21 T:aes128n12t8silcv3 2.19 2.20 2.20 T:aes128n8t8silcv2 2.19 2.20 2.23 T:aes128n12t8clocv3 2.19 2.22 2.23 T:aes128n12t8silcv2 2.33 2.35 2.36 T:norx6441v1 2.70? 2.73? 3.13? T:lakekeyakv1 2.93 2.93 2.94 T:norx6461v3 2.94 2.94 2.96 T:norx6461v2 2.98 2.99 3.02 T:norx6444v2 3.01 3.03 3.04 T:lakekeyakv2 3.04 3.04 3.05 T:norx3241v3 3.05 3.07 3.08 T:norx3241v2 3.05 3.07 3.09 T:norx6444v1 3.48 3.50 3.52 T:norx6461v1 3.69 3.71 3.73 T:norx3241v1 4.56 4.58 4.62 T:norx3261v2 4.57 4.59 4.61 T:norx3261v3 4.61 4.62 4.63 T:aesjambuv1 4.75 4.78 4.79 T:riverkeyakv2 4.76 4.79 4.85 T:ascon128av11 4.82 4.84 4.86 T:ketjemajorv2 4.87 4.88 4.93 T:ascon96v1 5.02 5.04 5.07 ascon128av12 5.81 5.83 5.84 T:acorn128v2 6.00 6.01 6.02 T:norx3261v1 6.23 6.27 6.35 T:acorn128v3 6.59 6.68 6.70 T:ketjeminorv2 7.13 7.17 7.27 T:ascon128v1 7.13 7.18 7.22 T:ascon128v11 7.33 7.34 7.37 ascon128v12 9.79 9.92 10.18 T:oceankeyakv1 9.93 10.02 10.08 T:seakeyakv1 11.40 11.43 11.46 T:aes128otrsv1 11.27? 11.46? 12.56? T:aes128otrsv2 12.43 12.55 12.69 T:twine80n6t4clocv2 12.77 12.93 13.08 T:aes128otrpv1 12.95 13.04 13.15 T:aes128otrpv2 13.57 13.61 13.77 T:twine80n6t4clocv3 13.80 13.88 13.92 T:aes128n8clocv1 13.40 13.91 13.97 T:aes128n12clocv1 14.47 14.50 14.60 T:aes256otrsv2 14.67 14.70 14.72 T:proest256otrv1 14.48 14.71 14.78 T:aes256otrsv1 14.76 14.81 14.91 T:aes128n8silcv1 14.80 14.85 14.88 T:aes128n12silcv1 15.89 15.98 16.07 T:aes256otrpv1 16.90 17.05 17.26 T:aes256otrpv2 19.16 19.31 19.56 T:riverkeyakv1 31.75 31.94 32.10 T:colm127v1 42.52 42.69 42.75 T:ketjesrv2 42.60 43.15 43.59 T:ketjesrv1 45.71 46.12 46.20 T:proest128otrv1 52.93 53.54 53.78 T:ketjejrv1 62.19 62.50 62.57 T:present80n6t4silcv3 70.96 71.05 72.51 T:deoxysneq128128v13 77.36 78.34 81.03 T:twine80n6clocv1 86.63 87.07 88.38 T:ketjejrv2 90.10 91.14 91.37 T:deoxysneq256128v13 92.24 92.37 92.83 T:aezv1 103.25 103.64 104.98 T:deoxyseq128128v13 111.94 112.57 113.27 T:led80n6t4silcv3 137.73 137.95 138.50 T:deoxyseq256128v13 365.90 373.43 376.46 T:acorn128 2135.91 2181.76 2186.82 T:present80n6silcv1 2179.90 2184.84 2191.31 T:present80n6t4silcv2 4203.41 4209.66 4217.11 T:led80n6t4silcv2 4214.96 4227.59 4234.07 T:led80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.15? 0.15? 0.17? aegis128l 0.16? 0.17? 0.18? T:tiaoxinv1 0.15? 0.18? 0.23? T:aeadaes128ocbtaglen128v1 0.17 0.18 0.18 T:tiaoxinv2 0.22 0.22 0.24 T:aezv4 0.22 0.23 0.24 T:aezv3 0.21? 0.24? 0.24? T:aezv5 -0.83? 0.26? 1.36? T:aeadaes256ocbtaglen128v1 0.28 0.28 0.28 T:aegis128 0.28 0.29 0.31 aegis256 -0.81? 0.34? 1.53? T:aeadaes192ocbtaglen128v1 0.40 0.40 0.40 T:aes128otrpv3 0.40 0.40 0.42 T:aes128otrcv3 0.51 0.51 0.52 T:aes256otrpv3 0.52 0.53 0.53 T:aes256otrcv3 0.48? 0.57? 0.62? T:deoxysi128v141 0.52? 0.60? 0.66? T:deoxysi256v141 0.53? 0.60? 0.61? T:deoxysneq128128v1 0.57? 0.63? 0.65? T:deoxysneq256128v1 0.63 0.64 0.65 T:morus1280128v1 0.63 0.64 0.65 T:morus1280128v2 0.63 0.64 0.65 T:morus1280256v1 0.63 0.64 0.65 T:morus1280256v2 0.65? 0.76? 0.82? T:deoxysii128v141 0.83 0.88 0.89 T:deoxysii256v141 0.89 0.90 0.92 T:colm0v1 0.90 0.90 0.91 T:aes128gcmv1 0.94 0.94 0.95 aes256gcmv1 0.93 0.99 1.00 T:deoxyseq128128v1 1.01 1.05 1.06 T:deoxyseq256128v1 1.27 1.27 1.29 T:aes128otrsv3 1.31 1.33 1.34 T:morus640128v2 1.32 1.33 1.34 T:morus640128v1 1.35 1.35 1.37 T:norx6444v3 1.64 1.66 1.67 T:seakeyakv2 1.66 1.69 1.72 T:oceankeyakv2 1.77 1.77 1.78 T:aes256otrsv3 1.92 1.92 1.94 T:norx6441v3 1.93 1.94 1.95 T:norx6441v2 2.03 2.08 2.11 T:lunarkeyakv2 2.15 2.16 2.17 T:aes128n12t8clocv2 2.15 2.17 2.18 T:aes128n8t8clocv2 2.15 2.17 2.19 T:aes128n8t8silcv2 2.15 2.18 2.20 T:aes128n12t8silcv2 2.16 2.18 2.19 T:aes128n12t8silcv3 2.16 2.18 2.20 T:aes128n12t8clocv3 2.31 2.32 2.34 T:norx6441v1 2.69 2.70 2.75 T:lakekeyakv1 2.89 2.90 2.90 T:norx6461v3 2.89 2.92 2.92 T:norx6461v2 2.97 3.00 3.05 T:norx6444v2 3.01 3.02 3.03 T:norx3241v3 3.02 3.04 3.05 T:norx3241v2 3.10 3.12 3.14 T:lakekeyakv2 3.11 3.14 3.17 T:norx6444v1 3.44 3.46 3.47 T:norx6461v1 3.65 3.67 3.69 T:norx3241v1 4.53 4.56 4.57 T:norx3261v2 4.56 4.58 4.60 T:norx3261v3 4.62 4.66 4.68 T:ketjemajorv2 4.68 4.70 4.70 T:aesjambuv1 4.74 4.77 4.82 T:ascon128av11 4.79 4.80 4.85 T:ascon96v1 4.82 4.83 4.85 T:riverkeyakv2 4.89 4.92 4.94 ascon128av12 5.89 5.92 5.93 T:acorn128v2 5.94 5.95 5.96 T:norx3261v1 6.13 6.17 6.24 T:acorn128v3 6.56 6.65 6.67 T:ketjeminorv2 7.19 7.23 7.27 T:ascon128v11 7.19 7.23 7.31 T:ascon128v1 7.22 7.24 7.27 ascon128v12 9.45 9.91 10.08 T:oceankeyakv1 9.95 10.04 10.09 T:seakeyakv1 11.27 11.31 11.35 T:aes128otrsv1 11.15? 11.39? 12.60? T:aes128otrsv2 12.39 12.53 12.64 T:twine80n6t4clocv2 12.61 12.70 12.93 T:aes128otrpv1 12.80 12.83 12.87 T:aes128otrpv2 13.52 13.59 13.75 T:twine80n6t4clocv3 14.33 14.40 14.47 T:aes128n8clocv1 14.40 14.43 14.48 T:aes256otrsv2 13.96 14.44 14.53 T:aes128n12clocv1 14.30 14.44 14.53 T:aes256otrsv1 14.62 14.67 14.68 T:proest256otrv1 14.64 14.67 14.73 T:aes128n8silcv1 14.65 14.69 14.75 T:aes128n12silcv1 15.77 15.81 15.97 T:aes256otrpv1 16.92? 17.11? 33.73? T:aes256otrpv2 19.26 19.33 19.41 T:riverkeyakv1 38.19 38.50 38.71 T:colm127v1 40.19 40.73 40.84 T:ketjesrv2 43.43 44.05 44.10 T:ketjesrv1 45.72 45.87 46.24 T:proest128otrv1 51.75 52.68 53.61 T:ketjejrv1 62.64 62.71 63.04 T:present80n6t4silcv3 77.41 78.07 78.38 T:twine80n6clocv1 78.57 78.78 79.72 T:deoxysneq128128v13 79.47 80.08 82.24 T:ketjejrv2 92.90 93.08 93.67 T:aezv1 102.11 103.07 104.70 T:deoxysneq256128v13 103.41 104.37 106.10 T:deoxyseq128128v13 112.51 113.06 113.79 T:led80n6t4silcv3 136.85 137.44 138.46 T:deoxyseq256128v13 379.96 381.18 382.73 T:acorn128 2131.20 2180.94 2185.27 T:present80n6silcv1 2180.07 2183.39 2189.44 T:present80n6t4silcv2 4202.80 4209.22 4218.94 T:led80n6t4silcv2 4216.24 4227.51 4236.68 T:led80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.11? 0.12? 0.14? T:aezv5 0.12 0.13 0.13 T:aezv3 0.12 0.13 0.13 T:aezv4 0.16 0.17 0.17 aegis128l 0.15? 0.18? 0.19? T:tiaoxinv1 0.17 0.18 0.18 T:tiaoxinv2 0.17? 0.18? 0.19? T:aeadaes128ocbtaglen128v1 0.24 0.26 0.26 T:aeadaes256ocbtaglen128v1 0.28 0.28 0.28 T:aegis128 0.30 0.31 0.32 aegis256 0.34 0.35 0.36 T:aeadaes192ocbtaglen128v1 0.39 0.40 0.42 T:aes128otrpv3 0.40 0.40 0.41 T:aes128otrcv3 0.50 0.51 0.52 T:aes256otrpv3 0.52 0.53 0.54 T:aes256otrcv3 0.56 0.57 0.59 T:deoxysi128v141 0.52? 0.59? 0.66? T:deoxysi256v141 0.57 0.61 0.63 T:deoxysneq128128v1 0.63 0.63 0.65 T:morus1280256v2 0.62 0.64 0.65 T:deoxysneq256128v1 0.63 0.64 0.65 T:morus1280128v1 0.63 0.64 0.65 T:morus1280128v2 0.63 0.65 0.65 T:morus1280256v1 0.70 0.77 0.77 T:deoxysii128v141 0.85 0.87 0.88 T:deoxysii256v141 0.89 0.90 0.93 T:colm0v1 0.90 0.90 0.91 T:aes128gcmv1 0.94 0.94 0.96 aes256gcmv1 0.96 0.98 1.00 T:deoxyseq128128v1 1.00 1.05 1.07 T:deoxyseq256128v1 1.27 1.28 1.29 T:aes128otrsv3 1.31 1.33 1.34 T:morus640128v2 1.32 1.33 1.33 T:morus640128v1 1.35 1.36 1.37 T:norx6444v3 1.65 1.67 1.69 T:seakeyakv2 1.69 1.70 1.74 T:oceankeyakv2 1.76 1.77 1.78 T:aes256otrsv3 1.92 1.92 1.93 T:norx6441v3 1.92 1.94 1.95 T:norx6441v2 2.04 2.07 2.11 T:lunarkeyakv2 2.14 2.17 2.18 T:aes128n8t8silcv2 2.15 2.17 2.18 T:aes128n8t8clocv2 2.14 2.18 2.19 T:aes128n12t8silcv3 2.14 2.18 2.21 T:aes128n12t8silcv2 2.15 2.18 2.18 T:aes128n12t8clocv2 2.15 2.18 2.22 T:aes128n12t8clocv3 2.30 2.32 2.34 T:norx6441v1 2.68 2.71 2.74 T:lakekeyakv1 2.89 2.90 2.90 T:norx6461v3 2.89 2.91 2.92 T:norx6461v2 2.99 3.00 3.03 T:norx6444v2 3.01 3.02 3.03 T:norx3241v3 3.03 3.04 3.05 T:norx3241v2 3.04 3.09 3.15 T:lakekeyakv2 3.11 3.14 3.16 T:norx6444v1 3.44 3.45 3.47 T:norx6461v1 3.65 3.66 3.68 T:norx3241v1 4.54 4.56 4.58 T:norx3261v2 4.56 4.58 4.60 T:norx3261v3 4.63 4.66 4.69 T:ketjemajorv2 4.67 4.69 4.72 T:aesjambuv1 4.74 4.77 4.82 T:ascon128av11 4.78 4.80 4.85 T:ascon96v1 4.83 4.85 4.88 T:riverkeyakv2 4.88 4.91 4.94 ascon128av12 5.87 5.93 5.94 T:acorn128v2 5.93 5.95 5.96 T:norx3261v1 6.12 6.19 6.25 T:acorn128v3 6.57 6.65 6.67 T:ketjeminorv2 7.19 7.23 7.27 T:ascon128v11 7.19 7.23 7.31 T:ascon128v1 7.22 7.24 7.27 ascon128v12 9.73 10.00 10.15 T:oceankeyakv1 9.89 10.06 10.14 T:seakeyakv1 11.29 11.33 11.38 T:aes128otrsv1 11.16? 11.41? 12.66? T:aes128otrsv2 12.48 12.53 12.62 T:twine80n6t4clocv2 12.77 12.82 12.95 T:aes128otrpv2 12.62 12.85 12.95 T:aes128otrpv1 13.52 13.60 13.75 T:twine80n6t4clocv3 14.31 14.40 14.49 T:aes128n8clocv1 13.95 14.42 14.47 T:aes128n12clocv1 14.42 14.45 14.49 T:aes256otrsv2 14.32 14.46 14.55 T:aes256otrsv1 14.60 14.64 14.69 T:proest256otrv1 14.64 14.67 14.72 T:aes128n8silcv1 14.65 14.73 14.88 T:aes128n12silcv1 15.72 15.77 15.81 T:aes256otrpv1 17.32? 17.43? 35.30? T:aes256otrpv2 19.24 19.31 19.38 T:riverkeyakv1 37.51 37.89 38.19 T:colm127v1 40.19 40.44 40.73 T:ketjesrv2 43.84 44.00 44.43 T:ketjesrv1 45.42 45.76 46.26 T:proest128otrv1 51.92 52.44 52.63 T:ketjejrv1 62.65 62.67 62.71 T:present80n6t4silcv3 76.85 77.31 82.19 T:twine80n6clocv1 78.61 79.43 79.79 T:deoxysneq128128v13 78.91 80.59 81.72 T:ketjejrv2 92.64 92.87 93.55 T:aezv1 101.77 102.74 103.18 T:deoxysneq256128v13 103.17 104.96 106.72 T:deoxyseq128128v13 112.47 113.07 113.72 T:led80n6t4silcv3 136.50 137.23 139.34 T:deoxyseq256128v13 367.88 371.54 376.16 T:acorn128 2132.14 2178.71 2193.85 T:present80n6silcv1 2173.50 2178.96 2185.54 T:present80n6t4silcv2 4198.78 4202.89 4216.73 T:led80n6t4silcv2 4228.18 4231.92 4254.34 T:led80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.08? 0.08? 0.10? T:tiaoxinv2 0.08? 0.08? 0.12? T:tiaoxinv1 0.12? 0.12? 0.15? T:aezv3 0.10? 0.13? 0.13? T:aezv4 0.12? 0.13? 0.15? T:aezv5 0.13? 0.13? 0.15? aegis128l 0.13? 0.17? 0.19? T:aeadaes128ocbtaglen128v1 -1.91? 0.25? 2.39? T:aeadaes256ocbtaglen128v1 0.25 0.27 0.27 T:aegis128 0.25? 0.29? 0.29? aegis256 0.31? 0.35? 2.62? T:aeadaes192ocbtaglen128v1 0.37 0.37 0.37 aes256gcmv1 0.35? 0.39? 0.39? T:aes128gcmv1 0.37 0.40 0.40 T:aes128otrpv3 0.40 0.40 0.40 T:aes128otrcv3 0.48? 0.50? 0.54? T:deoxysi128v141 0.50 0.50 0.52 T:aes256otrpv3 0.46? 0.54? 0.60? T:deoxysneq128128v1 0.46? 0.54? 0.66? T:deoxysi256v141 0.48? 0.54? 0.64? T:deoxysii128v141 0.52 0.54 0.54 T:aes256otrcv3 0.54 0.56 0.56 T:colm0v1 0.50? 0.58? 0.62? T:deoxysii256v141 0.58 0.58 0.60 T:morus1280128v2 0.58 0.58 0.60 T:morus1280256v2 0.58 0.60 0.60 T:morus1280128v1 0.60 0.60 0.60 T:morus1280256v1 0.54? 0.62? 0.64? T:deoxysneq256128v1 0.64 0.66 0.66 T:deoxyseq128128v1 0.64 0.66 0.67 T:deoxyseq256128v1 1.31 1.31 1.33 T:morus640128v1 1.33 1.33 1.33 T:morus640128v2 1.31 1.35 1.37 T:oceankeyakv2 1.27? 1.37? 1.43? T:lunarkeyakv2 1.54 1.58 1.60 T:seakeyakv2 1.93 1.93 1.95 T:norx6444v3 1.93 1.95 1.97 T:norx6441v3 1.95 1.97 1.97 T:norx6441v2 2.12 2.16 2.16 T:aes128n8t8silcv2 2.12 2.16 2.18 T:aes128n12t8silcv2 2.14 2.16 2.18 T:aes128n12t8silcv3 2.14 2.16 2.18 T:aes128n8t8clocv2 2.14 2.16 2.20 T:aes128n12t8clocv3 2.14 2.18 2.18 T:aes128otrsv3 2.16 2.18 2.18 T:aes128n12t8clocv2 2.31 2.33 2.35 T:norx6441v1 2.45 2.52 2.54 T:lakekeyakv1 2.64 2.66 2.68 T:lakekeyakv2 2.93 2.95 2.97 T:norx6461v2 2.93 2.95 2.97 T:norx6461v3 2.95 2.95 3.08 T:norx6444v1 2.99 3.01 3.03 T:aes256otrsv3 3.03 3.04 3.08 T:norx3241v3 3.04 3.04 3.06 T:norx3241v2 3.06 3.08 3.12 T:norx6444v2 3.49 3.51 3.53 T:norx6461v1 3.64 3.68 3.70 T:norx3241v1 4.10 4.16 4.18 T:ketjemajorv2 4.49 4.51 4.55 T:riverkeyakv2 4.53 4.55 4.59 T:norx3261v2 4.55 4.57 4.61 T:norx3261v3 4.62 4.66 4.68 T:aesjambuv1 4.64 4.68 4.74 T:ascon128av11 4.82 4.82 4.84 T:ascon96v1 4.86 4.89 4.93 ascon128av12 5.80 5.82 5.84 T:acorn128v2 5.88? 5.99? 7.27? T:ketjeminorv2 5.99 6.01 6.05 T:norx3261v1 6.24 6.28 6.30 T:acorn128v3 7.13 7.13 7.21 ascon128v12 7.15 7.19 7.21 T:ascon128v11 7.13 7.23 7.27 T:ascon128v1 9.56 9.62 9.71 T:aes128n8clocv1 9.56 9.64 9.67 T:aes128n12clocv1 9.56? 9.69? 10.66? T:aes128otrsv2 9.44 9.73 10.10 T:oceankeyakv1 9.75 9.81 9.85 T:aes128otrsv1 9.77 9.89 10.14 T:seakeyakv1 10.12 10.16 10.19 T:aes128n8silcv1 10.14 10.16 10.19 T:aes128n12silcv1 12.31 12.45 12.53 T:twine80n6t4clocv2 12.39 12.47 12.53 T:aes128otrpv1 12.82 12.87 12.91 T:aes256otrsv2 12.83 12.87 12.95 T:aes128otrpv2 11.79 12.95 13.01 T:aes256otrsv1 13.43 13.47 13.78 T:twine80n6t4clocv3 15.09 15.13 15.22 T:proest256otrv1 15.53 15.57 15.63 T:aes256otrpv1 14.99? 16.61? 17.05? T:aes256otrpv2 18.25 18.37 18.42 T:riverkeyakv1 19.41 19.60 19.73 T:colm127v1 38.68 39.10 39.56 T:ketjesrv2 40.30 41.28 41.95 T:ketjesrv1 44.48 44.55 44.88 T:aezv1 45.31 45.42 45.52 T:proest128otrv1 51.68 51.74 55.60 T:twine80n6clocv1 52.22 52.32 52.49 T:ketjejrv1 62.07 62.40 62.46 T:present80n6t4silcv3 68.82 69.36 69.74 T:deoxyseq128128v13 71.46 71.90 73.56 T:deoxysneq128128v13 86.58 86.83 87.45 T:ketjejrv2 90.88 91.00 91.75 T:deoxyseq256128v13 91.32 91.98 94.83 T:deoxysneq256128v13 111.91 112.39 112.97 T:led80n6t4silcv3 378.58 384.36 394.49 T:acorn128 1454.81 1457.76 1462.17 T:present80n6silcv1 1453.62 1458.76 1460.38 T:present80n6t4silcv2 2820.67 2835.18 2844.91 T:led80n6t4silcv2 2813.39 2836.80 2849.58 T:led80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.08? 0.08? 0.12? T:tiaoxinv2 0.06? 0.10? 0.10? T:tiaoxinv1 0.12 0.13 0.13 T:aezv3 0.12? 0.13? 0.15? T:aezv5 0.13 0.13 0.13 T:aezv4 0.13? 0.13? 0.15? aegis128l 0.15? 0.17? 0.21? T:aeadaes128ocbtaglen128v1 -1.85? 0.23? 2.45? T:aeadaes256ocbtaglen128v1 0.25 0.27 0.27 T:aegis128 0.27? 0.27? 0.31? aegis256 -1.97? 0.33? 0.33? T:aeadaes192ocbtaglen128v1 0.35 0.37 0.37 aes256gcmv1 0.37 0.39 0.39 T:aes128gcmv1 0.37 0.40 0.40 T:aes128otrpv3 0.40 0.40 0.44 T:aes128otrcv3 0.42? 0.48? 0.56? T:deoxysi128v141 0.50 0.50 0.52 T:aes256otrpv3 0.52 0.52 0.56 T:aes256otrcv3 0.46? 0.54? 0.56? T:deoxysneq128128v1 0.54 0.54 0.58 T:colm0v1 0.46? 0.56? 0.64? T:deoxysi256v141 0.48? 0.56? 0.62? T:deoxysii128v141 0.56? 0.56? 0.66? T:deoxyseq128128v1 0.48? 0.58? 0.64? T:deoxysii256v141 0.58 0.58 0.60 T:morus1280256v1 0.58 0.58 0.62 T:morus1280128v2 0.58 0.60 0.60 T:morus1280128v1 0.60 0.60 0.60 T:morus1280256v2 0.54? 0.62? 0.64? T:deoxysneq256128v1 0.58? 0.62? 0.66? T:deoxyseq256128v1 1.25? 1.33? 1.45? T:lunarkeyakv2 1.29 1.33 1.33 T:morus640128v1 1.31 1.33 1.35 T:morus640128v2 1.31 1.35 1.39 T:oceankeyakv2 1.56 1.60 1.62 T:seakeyakv2 1.93 1.93 1.95 T:norx6441v3 1.93 1.93 1.97 T:norx6444v3 1.95 1.95 1.97 T:norx6441v2 2.14 2.14 2.20 T:aes128n12t8silcv2 2.14 2.16 2.22 T:aes128n12t8silcv3 2.14 2.16 2.22 T:aes128n8t8silcv2 2.16 2.16 2.18 T:aes128otrsv3 2.16 2.16 2.20 T:aes128n12t8clocv3 2.16 2.16 2.20 T:aes128n8t8clocv2 2.16 2.18 2.20 T:aes128n12t8clocv2 2.31 2.33 2.35 T:norx6441v1 2.49 2.52 2.54 T:lakekeyakv1 2.62 2.66 2.68 T:lakekeyakv2 2.91 2.93 2.95 T:norx6461v2 2.91 2.93 2.95 T:norx6461v3 2.95 2.97 2.97 T:norx6444v1 2.99 3.01 3.04 T:aes256otrsv3 3.03 3.04 3.08 T:norx3241v3 3.04 3.06 3.08 T:norx3241v2 3.04 3.08 3.12 T:norx6444v2 3.47 3.51 3.53 T:norx6461v1 3.64 3.68 3.70 T:norx3241v1 4.12 4.16 4.20 T:ketjemajorv2 4.49 4.51 4.53 T:riverkeyakv2 4.55 4.55 4.61 T:norx3261v2 4.55 4.57 4.59 T:norx3261v3 4.64 4.66 4.70 T:aesjambuv1 4.70 4.74 4.80 T:ascon128av11 4.82 4.84 4.86 T:ascon96v1 4.89 4.93 4.99 ascon128av12 5.78 5.82 5.84 T:acorn128v2 5.88 5.94 5.99 T:ketjeminorv2 5.99 6.01 6.05 T:norx3261v1 6.24 6.28 6.30 T:acorn128v3 7.13 7.13 7.21 ascon128v12 7.15 7.19 7.23 T:ascon128v11 7.13 7.23 7.27 T:ascon128v1 9.56 9.62 9.75 T:aes128n8clocv1 9.58 9.64 9.67 T:aes128n12clocv1 9.54? 9.71? 10.95? T:aes128otrsv2 9.46 9.79 10.12 T:oceankeyakv1 9.75 9.79 9.94 T:aes128otrsv1 9.73 9.87 10.02 T:seakeyakv1 10.10 10.16 10.25 T:aes128n12silcv1 10.14 10.16 10.21 T:aes128n8silcv1 12.31 12.45 12.53 T:twine80n6t4clocv2 12.35 12.51 12.55 T:aes128otrpv1 11.89 12.76 13.01 T:aes256otrsv1 12.74 12.80 12.91 T:aes256otrsv2 12.91 12.95 12.99 T:aes128otrpv2 13.43 13.51 13.76 T:twine80n6t4clocv3 15.01 15.05 15.13 T:proest256otrv1 15.49 15.57 15.72 T:aes256otrpv1 15.17? 16.67? 17.07? T:aes256otrpv2 18.38 18.50 18.71 T:riverkeyakv1 19.29 19.48 19.62 T:colm127v1 39.97 40.08 40.20 T:ketjesrv2 40.80 41.30 41.78 T:ketjesrv1 44.46 44.59 45.07 T:aezv1 44.84 45.11 45.73 T:proest128otrv1 50.28 50.43 50.89 T:ketjejrv1 51.38 51.51 51.68 T:twine80n6clocv1 62.05 62.42 62.75 T:present80n6t4silcv3 69.57 69.93 70.24 T:deoxysneq128128v13 69.91 70.59 71.05 T:deoxyseq128128v13 77.24 79.82 82.81 T:ketjejrv2 90.32 91.07 92.63 T:deoxyseq256128v13 91.29 91.67 93.81 T:deoxysneq256128v13 111.25 112.54 113.10 T:led80n6t4silcv3 371.35 380.93 386.86 T:acorn128 1455.39 1457.95 1458.44 T:present80n6t4silcv2 1458.01 1458.65 1460.83 T:present80n6silcv1 2809.71 2829.17 2839.35 T:led80n6t4silcv2 2820.32 2835.28 2849.35 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.06? 0.08? 0.12? T:tiaoxinv2 0.06? 0.10? 0.12? T:tiaoxinv1 0.10? 0.13? 0.17? aegis128l 0.12 0.13 0.13 T:aezv3 0.12 0.13 0.13 T:aezv4 0.12? 0.13? 0.17? T:aezv5 0.15? 0.17? 0.19? T:aeadaes128ocbtaglen128v1 0.21? 0.23? 0.25? T:aeadaes256ocbtaglen128v1 0.23? 0.27? 0.29? T:aegis128 0.27? 0.31? 0.33? aegis256 0.31? 0.33? 2.52? T:aeadaes192ocbtaglen128v1 0.35 0.37 0.37 aes256gcmv1 0.35? 0.39? 0.39? T:aes128gcmv1 0.37? 0.40? 0.44? T:aes128otrcv3 0.39? 0.40? 0.44? T:aes128otrpv3 0.44? 0.50? 0.52? T:deoxysi128v141 0.50 0.50 0.52 T:aes256otrpv3 0.46? 0.54? 0.62? T:deoxysii128v141 0.48? 0.54? 0.56? T:aes256otrcv3 0.50 0.54 0.54 T:deoxysneq128128v1 0.48? 0.56? 0.64? T:deoxysi256v141 0.52 0.56 0.56 T:colm0v1 0.52? 0.58? 0.60? T:deoxysii256v141 0.56? 0.58? 0.64? T:deoxyseq128128v1 0.58 0.58 0.62 T:morus1280128v2 0.58 0.60 0.60 T:morus1280128v1 0.58 0.60 0.60 T:morus1280256v1 0.60 0.60 0.60 T:morus1280256v2 0.60 0.60 0.62 T:deoxysneq256128v1 0.64 0.66 0.66 T:deoxyseq256128v1 1.31 1.33 1.33 T:morus640128v1 1.31 1.33 1.35 T:morus640128v2 1.31 1.33 1.37 T:oceankeyakv2 1.29? 1.35? 1.45? T:lunarkeyakv2 1.56 1.58 1.60 T:seakeyakv2 1.93 1.93 1.97 T:norx6441v3 1.93 1.95 1.97 T:norx6444v3 1.95 1.95 1.97 T:norx6441v2 2.12 2.16 2.20 T:aes128n8t8silcv2 2.16 2.16 2.20 T:aes128otrsv3 2.10 2.18 2.20 T:aes128n12t8silcv2 2.12 2.18 2.22 T:aes128n12t8silcv3 2.16 2.18 2.20 T:aes128n12t8clocv2 2.16 2.18 2.20 T:aes128n12t8clocv3 2.16 2.18 2.20 T:aes128n8t8clocv2 2.31 2.33 2.35 T:norx6441v1 2.47 2.51 2.54 T:lakekeyakv1 2.62 2.64 2.66 T:lakekeyakv2 2.89 2.91 2.95 T:norx6461v3 2.91 2.91 2.93 T:norx6461v2 2.93 2.95 2.99 T:norx6444v1 2.99 3.01 3.04 T:aes256otrsv3 3.04 3.06 3.06 T:norx3241v3 3.04 3.06 3.08 T:norx3241v2 3.04 3.08 3.12 T:norx6444v2 3.47 3.49 3.53 T:norx6461v1 3.66 3.70 3.70 T:norx3241v1 4.12 4.16 4.20 T:ketjemajorv2 4.49 4.49 4.51 T:riverkeyakv2 4.55 4.55 4.59 T:norx3261v2 4.57 4.57 4.61 T:norx3261v3 4.64 4.66 4.68 T:aesjambuv1 4.72 4.76 4.80 T:ascon128av11 4.82 4.84 4.86 T:ascon96v1 4.91 4.95 4.99 ascon128av12 5.80 5.84 5.84 T:acorn128v2 5.88 5.97 6.01 T:ketjeminorv2 5.99 6.01 6.05 T:norx3261v1 6.26 6.28 6.30 T:acorn128v3 7.13 7.13 7.21 ascon128v12 7.13 7.19 7.23 T:ascon128v11 7.13 7.25 7.27 T:ascon128v1 9.52 9.62 9.75 T:aes128n8clocv1 9.60 9.64 9.69 T:aes128n12clocv1 9.44 9.71 10.12 T:oceankeyakv1 9.58? 9.73? 10.98? T:aes128otrsv2 9.73 9.79 9.94 T:aes128otrsv1 9.75 9.85 10.02 T:seakeyakv1 10.16 10.18 10.21 T:aes128n12silcv1 10.16 10.19 10.21 T:aes128n8silcv1 12.31 12.47 12.55 T:twine80n6t4clocv2 12.35 12.51 12.56 T:aes128otrpv1 11.87 12.76 13.01 T:aes256otrsv1 12.72 12.80 12.93 T:aes256otrsv2 12.82 12.89 12.99 T:aes128otrpv2 13.41 13.47 13.80 T:twine80n6t4clocv3 15.03 15.09 15.17 T:proest256otrv1 15.59 15.65 15.71 T:aes256otrpv1 15.07? 16.63? 17.11? T:aes256otrpv2 18.25 18.35 18.48 T:riverkeyakv1 19.43 19.46 19.62 T:colm127v1 39.56 40.03 40.12 T:ketjesrv2 41.80 42.05 42.15 T:ketjesrv1 44.44 44.57 44.84 T:aezv1 44.75 45.11 45.90 T:proest128otrv1 50.05 50.35 51.40 T:ketjejrv1 51.41 51.68 55.11 T:twine80n6clocv1 62.28 62.48 62.82 T:present80n6t4silcv3 69.28 69.80 70.11 T:deoxysneq128128v13 70.78 71.22 71.61 T:deoxyseq128128v13 77.51 80.82 82.06 T:ketjejrv2 89.94 91.34 92.10 T:deoxyseq256128v13 91.52 91.94 93.81 T:deoxysneq256128v13 111.08 112.43 113.08 T:led80n6t4silcv3 364.80 382.72 385.82 T:acorn128 1456.88 1458.42 1465.08 T:present80n6silcv1 1457.11 1458.57 1460.42 T:present80n6t4silcv2 2814.08 2828.55 2842.72 T:led80n6t4silcv2 2816.61 2841.66 2855.03 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.16 0.16 0.17 T:tiaoxinv1 0.16 0.17 0.17 T:tiaoxinv2 0.18 0.19 0.19 aegis128l 0.28 0.28 0.29 T:aezv4 0.28 0.29 0.29 T:aezv3 0.29 0.29 0.30 T:aezv5 0.30 0.30 0.31 T:aegis128 0.30? 0.30? 0.36? T:aeadaes128ocbtaglen128v1 0.31 0.33 0.33 aegis256 0.40? 0.41? 1.75? T:aeadaes256ocbtaglen128v1 0.45 0.46 0.48 T:aeadaes192ocbtaglen128v1 0.47 0.47 0.49 T:aes128otrpv3 0.52 0.52 0.53 T:aes128otrcv3 0.61 0.61 0.63 T:aes256otrpv3 0.66 0.67 0.72 T:deoxysneq128128v1 0.69 0.70 0.70 T:aes256otrcv3 0.65? 0.71? 0.77? T:deoxysi128v141 0.75 0.76 0.77 T:deoxysneq256128v1 0.77 0.81 0.83 T:deoxysi256v141 0.84 0.84 0.84 T:morus1280128v1 0.84 0.84 0.84 T:morus1280256v1 0.86 0.86 0.86 T:morus1280256v2 0.86 0.87 0.87 T:morus1280128v2 0.94 0.95 1.00 T:deoxysii128v141 0.98 0.99 0.99 T:aes128gcmv1 1.02 1.04 1.04 T:colm0v1 1.05 1.05 1.06 aes256gcmv1 1.08 1.10 1.12 T:deoxyseq128128v1 1.12 1.13 1.17 T:deoxysii256v141 1.18 1.18 1.19 T:deoxyseq256128v1 1.32 1.34 1.34 T:aes128otrsv3 1.48 1.48 1.48 T:morus640128v1 1.49 1.51 1.51 T:morus640128v2 1.83 1.85 1.85 T:aes256otrsv3 1.88 1.89 1.90 T:norx6444v3 2.23 2.24 2.24 T:aes128n12t8clocv2 2.23 2.24 2.24 T:aes128n12t8clocv3 2.24 2.24 2.25 T:aes128n8t8clocv2 2.24 2.24 2.28 T:norx6441v3 2.24 2.25 2.25 T:aes128n12t8silcv2 2.24 2.25 2.25 T:aes128n12t8silcv3 2.24 2.25 2.26 T:aes128n8t8silcv2 2.26 2.26 2.28 T:norx6441v2 2.35 2.36 2.37 T:seakeyakv2 2.61 2.63 2.64 T:norx6441v1 3.20 3.22 3.23 T:oceankeyakv2 3.28 3.30 3.32 T:norx3241v3 3.30 3.31 3.34 T:lakekeyakv2 3.31 3.32 3.34 T:norx3241v2 3.35 3.36 3.37 T:lakekeyakv1 3.37 3.38 3.41 T:norx6461v3 3.38 3.41 3.42 T:norx6461v2 3.87 3.88 3.94 T:norx3241v1 3.90 3.91 3.93 T:norx6461v1 4.35 4.36 4.36 T:norx6444v2 4.41 4.46 4.46 T:norx6444v1 4.65 4.65 4.66 T:aesjambuv1 4.89 4.90 4.95 T:ascon128av11 4.93 4.95 4.96 T:norx3261v3 4.95 4.96 4.99 T:norx3261v2 4.99 5.00 5.00 T:ascon96v1 5.02 5.03 5.06 T:riverkeyakv2 5.14 5.17 5.19 ascon128av12 5.52 5.54 5.59 T:lunarkeyakv2 5.97 6.01 6.02 T:ketjemajorv2 6.32 6.34 6.35 T:norx3261v1 6.60 6.60 6.61 T:acorn128v2 7.02 7.05 7.06 T:acorn128v3 7.25 7.32 7.36 T:ascon128v11 7.32 7.32 7.36 T:ascon128v1 7.31 7.36 7.37 T:ketjeminorv2 7.42 7.46 7.46 ascon128v12 11.67 11.69 12.66 T:aes128otrsv2 11.68 11.71 11.74 T:aes128otrsv1 12.20 12.22 12.26 T:seakeyakv1 12.89 12.91 12.91 T:twine80n6t4clocv2 13.12 13.20 13.54 T:aes128otrpv1 13.24 13.27 13.35 T:aes128otrpv2 13.84 13.85 13.98 T:twine80n6t4clocv3 14.03 14.14 14.15 T:aes128n8clocv1 14.09? 14.14? 19.55? T:aes128n12clocv1 14.78 14.90 14.98 T:aes256otrsv1 14.87 14.92 15.04 T:aes256otrsv2 14.92 15.07 15.39 T:aes128n12silcv1 15.01 15.08 15.14 T:aes128n8silcv1 15.18 15.26 15.31 T:oceankeyakv1 15.99 16.02 16.09 T:proest256otrv1 16.15? 16.37? 21.04? T:aes256otrpv1 17.36 17.49 17.64 T:aes256otrpv2 20.15 20.32 20.43 T:riverkeyakv1 32.35 32.62 32.70 T:colm127v1 43.37 43.54 44.05 T:ketjesrv2 43.72 43.91 44.55 T:ketjesrv1 48.03 48.20 48.39 T:proest128otrv1 54.02 54.36 54.68 T:ketjejrv1 62.81 63.15 63.16 T:present80n6t4silcv3 70.21 70.42 71.52 T:deoxysneq128128v13 77.85 78.37 78.60 T:twine80n6clocv1 89.69 89.84 89.99 T:aezv1 88.93 89.96 90.65 T:ketjejrv2 91.71 92.15 92.26 T:deoxysneq256128v13 105.60 105.74 106.52 T:deoxyseq128128v13 112.93 113.52 114.83 T:led80n6t4silcv3 138.49 138.71 142.53 T:deoxyseq256128v13 420.50 422.90 424.98 T:acorn128 2189.84 2193.56 2196.16 T:present80n6silcv1 2194.31 2196.91 2206.28 T:present80n6t4silcv2 4216.15 4224.60 4245.76 T:led80n6t4silcv2 4220.22 4236.11 4286.06 T:led80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.19 0.19 0.19 aegis128l 0.22 0.22 0.24 T:tiaoxinv1 0.22 0.23 0.24 T:tiaoxinv2 0.28 0.28 0.29 T:aezv3 0.28 0.28 0.29 T:aezv4 0.29 0.29 0.29 T:aezv5 0.30 0.30 0.31 T:aegis128 0.31? 0.33? 0.39? T:aeadaes128ocbtaglen128v1 0.33 0.33 0.34 aegis256 0.41? 0.42? 1.78? T:aeadaes256ocbtaglen128v1 0.45? 0.46? 1.85? T:aeadaes192ocbtaglen128v1 0.47 0.47 0.48 T:aes128otrpv3 0.54 0.54 0.55 T:aes128otrcv3 0.63 0.63 0.63 T:aes256otrpv3 0.71 0.72 0.72 T:aes256otrcv3 0.73 0.75 0.76 T:deoxysneq128128v1 0.77 0.78 0.79 T:deoxysneq256128v1 0.73? 0.82? 0.90? T:deoxysi128v141 0.81 0.82 0.82 T:morus1280128v1 0.81 0.82 0.82 T:morus1280256v1 0.82 0.82 0.90 T:deoxysi256v141 0.89 0.89 0.89 T:morus1280256v2 0.89 0.90 0.90 T:morus1280128v2 0.95 0.96 1.02 T:deoxysii128v141 0.99 0.99 1.00 T:aes128gcmv1 1.00 1.01 1.01 T:colm0v1 1.05 1.06 1.06 aes256gcmv1 1.17 1.18 1.20 T:deoxyseq128128v1 1.22 1.23 1.24 T:deoxysii256v141 1.23 1.24 1.25 T:deoxyseq256128v1 1.35 1.36 1.36 T:aes128otrsv3 1.51 1.51 1.52 T:morus640128v1 1.51 1.52 1.53 T:morus640128v2 1.85 1.88 1.88 T:aes256otrsv3 1.88 1.89 1.89 T:norx6444v3 2.20 2.22 2.22 T:aes128n12t8clocv2 2.20 2.22 2.22 T:aes128n12t8clocv3 2.20 2.22 2.23 T:aes128n12t8silcv2 2.20 2.22 2.23 T:aes128n8t8clocv2 2.22 2.22 2.25 T:norx6441v3 2.22 2.23 2.23 T:aes128n12t8silcv3 2.22 2.23 2.24 T:aes128n8t8silcv2 2.24 2.25 2.25 T:norx6441v2 2.41 2.41 2.42 T:seakeyakv2 2.60 2.60 2.61 T:norx6441v1 3.25 3.26 3.28 T:oceankeyakv2 3.26 3.28 3.31 T:norx3241v3 3.29 3.30 3.31 T:norx3241v2 3.36 3.37 3.38 T:norx6461v3 3.36 3.38 3.40 T:norx6461v2 3.37 3.38 3.38 T:lakekeyakv1 3.37 3.42 3.46 T:lakekeyakv2 3.83 3.87 3.90 T:norx3241v1 3.88 3.89 3.90 T:norx6461v1 4.44 4.46 4.48 T:norx6444v2 4.46 4.47 4.54 T:norx6444v1 4.72 4.73 4.75 T:aesjambuv1 4.87 4.87 4.91 T:ascon128av11 4.90 4.91 4.93 T:ascon96v1 4.93 4.93 4.95 T:norx3261v2 4.93 4.94 4.96 T:norx3261v3 5.01 5.03 5.06 ascon128av12 5.09 5.11 5.12 T:riverkeyakv2 5.54 5.58 5.64 T:lunarkeyakv2 5.82 5.84 5.87 T:ketjemajorv2 6.29 6.30 6.30 T:norx3261v1 6.67 6.71 6.72 T:acorn128v2 6.94 6.96 6.97 T:acorn128v3 7.30 7.35 7.36 T:ketjeminorv2 7.32 7.35 7.35 ascon128v12 7.31 7.37 7.41 T:ascon128v11 7.37 7.38 7.42 T:ascon128v1 11.50 11.60 11.67 T:aes128otrsv1 11.57 11.60 12.69 T:aes128otrsv2 12.18 12.20 12.25 T:seakeyakv1 12.86 12.96 13.00 T:twine80n6t4clocv2 12.98 13.02 13.07 T:aes128otrpv2 12.90 13.12 13.31 T:aes128otrpv1 13.83 13.86 14.01 T:twine80n6t4clocv3 14.55 14.67 14.69 T:aes128n8clocv1 14.65? 14.72? 20.20? T:aes128n12clocv1 14.63 14.78 14.83 T:aes256otrsv1 14.75 14.81 15.01 T:aes256otrsv2 14.85 14.91 15.00 T:aes128n8silcv1 14.78 14.92 15.25 T:aes128n12silcv1 15.21 15.24 15.32 T:oceankeyakv1 16.01 16.03 16.07 T:proest256otrv1 16.02? 16.12? 20.70? T:aes256otrpv1 17.44 17.56 17.61 T:aes256otrpv2 20.08 20.16 20.32 T:riverkeyakv1 38.67 39.01 39.23 T:colm127v1 41.56 41.88 42.22 T:ketjesrv2 44.56 44.82 45.03 T:ketjesrv1 47.57 48.08 48.47 T:proest128otrv1 52.86 53.13 53.21 T:ketjejrv1 63.33 63.65 63.67 T:present80n6t4silcv3 78.31 78.53 78.67 T:twine80n6clocv1 78.66 79.14 80.00 T:deoxysneq128128v13 82.13 82.27 82.50 T:ketjejrv2 90.04 90.22 90.42 T:aezv1 102.40 104.38 105.19 T:deoxysneq256128v13 105.75 106.35 110.67 T:deoxyseq128128v13 113.58 114.06 114.69 T:led80n6t4silcv3 138.80 139.03 139.70 T:deoxyseq256128v13 419.71 426.61 432.86 T:acorn128 2190.71 2192.91 2201.43 T:present80n6silcv1 2195.73 2200.85 2209.23 T:present80n6t4silcv2 4203.88 4231.89 4256.76 T:led80n6t4silcv2 4224.44 4248.36 4280.43 T:led80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.16 0.17 0.17 T:aezv4 0.16 0.17 0.17 T:aezv5 0.16? 0.17? 0.19? T:aezv3 0.20 0.20 0.22 aegis128l 0.22 0.22 0.23 T:tiaoxinv1 0.22 0.23 0.23 T:tiaoxinv2 0.30 0.30 0.31 T:aegis128 0.31? 0.33? 0.35? T:aeadaes128ocbtaglen128v1 0.34 0.35 0.36 aegis256 0.41 0.42 0.42 T:aeadaes256ocbtaglen128v1 0.45 0.45 0.46 T:aeadaes192ocbtaglen128v1 0.47 0.48 0.51 T:aes128otrpv3 0.54 0.57 0.57 T:aes128otrcv3 0.63 0.63 0.63 T:aes256otrpv3 0.72 0.73 0.73 T:aes256otrcv3 0.73? 0.75? 0.87? T:deoxysi128v141 0.75 0.76 0.77 T:deoxysneq128128v1 0.77 0.78 0.78 T:deoxysneq256128v1 0.81 0.81 0.82 T:morus1280128v1 0.81 0.82 0.82 T:morus1280256v1 0.82 0.82 0.89 T:deoxysi256v141 0.88 0.89 0.89 T:morus1280256v2 0.89 0.90 0.90 T:morus1280128v2 0.99 0.99 0.99 T:aes128gcmv1 0.99 1.00 1.04 T:deoxysii128v141 1.00 1.01 1.01 T:colm0v1 1.05 1.05 1.06 aes256gcmv1 1.17 1.18 1.19 T:deoxyseq128128v1 1.22 1.23 1.24 T:deoxysii256v141 1.23 1.24 1.25 T:deoxyseq256128v1 1.35 1.35 1.36 T:aes128otrsv3 1.51 1.51 1.52 T:morus640128v1 1.51 1.52 1.53 T:morus640128v2 1.85 1.87 1.88 T:aes256otrsv3 1.88 1.88 1.89 T:norx6444v3 2.20 2.22 2.23 T:aes128n12t8clocv2 2.20 2.22 2.23 T:aes128n12t8clocv3 2.20 2.22 2.24 T:aes128n12t8silcv2 2.22 2.22 2.23 T:aes128n12t8silcv3 2.22 2.22 2.24 T:aes128n8t8clocv2 2.22 2.23 2.24 T:aes128n8t8silcv2 2.22 2.24 2.25 T:norx6441v3 2.24 2.25 2.26 T:norx6441v2 2.41 2.41 2.42 T:seakeyakv2 2.60 2.61 2.61 T:norx6441v1 3.24 3.26 3.29 T:norx3241v3 3.25 3.26 3.28 T:oceankeyakv2 3.29 3.30 3.30 T:norx3241v2 3.35 3.37 3.38 T:norx6461v2 3.36 3.37 3.38 T:norx6461v3 3.38 3.40 3.40 T:lakekeyakv1 3.38 3.44 3.47 T:lakekeyakv2 3.84 3.87 3.91 T:norx3241v1 3.89 3.90 3.91 T:norx6461v1 4.43 4.46 4.53 T:norx6444v1 4.46 4.48 4.50 T:norx6444v2 4.73 4.75 4.76 T:aesjambuv1 4.87 4.88 4.91 T:ascon128av11 4.90 4.91 4.93 T:ascon96v1 4.93 4.94 4.95 T:norx3261v2 4.93 4.94 4.95 T:norx3261v3 5.01 5.03 5.06 ascon128av12 5.11 5.11 5.12 T:riverkeyakv2 5.58 5.60 5.61 T:lunarkeyakv2 5.84 5.85 5.87 T:ketjemajorv2 6.29 6.30 6.30 T:norx3261v1 6.67 6.67 6.71 T:acorn128v2 6.95 6.96 6.97 T:acorn128v3 7.32 7.35 7.36 ascon128v12 7.30 7.36 7.38 T:ketjeminorv2 7.31 7.38 7.42 T:ascon128v11 7.37 7.38 7.42 T:ascon128v1 11.56 11.62 12.75 T:aes128otrsv2 11.61 11.65 11.67 T:aes128otrsv1 12.16 12.22 12.31 T:seakeyakv1 12.85 12.95 13.01 T:twine80n6t4clocv2 13.02 13.03 13.21 T:aes128otrpv2 13.03 13.10 13.32 T:aes128otrpv1 13.81 13.85 14.03 T:twine80n6t4clocv3 14.57 14.67 14.68 T:aes128n8clocv1 14.69 14.72 14.81 T:aes128n12clocv1 14.66 14.77 14.85 T:aes256otrsv1 14.73 14.81 14.93 T:aes256otrsv2 14.79 14.92 15.22 T:aes128n12silcv1 14.83 14.92 14.98 T:aes128n8silcv1 15.18 15.22 15.25 T:oceankeyakv1 15.98 16.01 16.03 T:proest256otrv1 15.99? 16.14? 18.32? T:aes256otrpv1 17.86 17.96 18.05 T:aes256otrpv2 20.11 20.16 20.23 T:riverkeyakv1 38.57 38.78 39.12 T:colm127v1 41.60 41.91 42.36 T:ketjesrv2 44.60 45.11 45.15 T:ketjesrv1 47.57 48.06 48.48 T:proest128otrv1 52.93 53.07 53.80 T:ketjejrv1 63.33 63.35 63.64 T:present80n6t4silcv3 78.59 78.70 80.20 T:deoxysneq128128v13 78.02 78.72 83.43 T:twine80n6clocv1 80.72 83.43 84.92 T:ketjejrv2 90.13 90.16 90.67 T:aezv1 101.73 103.11 103.20 T:deoxysneq256128v13 106.39 107.31 108.22 T:deoxyseq128128v13 112.82 114.02 114.63 T:led80n6t4silcv3 137.17 138.04 141.36 T:deoxyseq256128v13 419.45 421.56 446.42 T:acorn128 2192.47 2194.98 2199.49 T:present80n6silcv1 2192.01 2198.09 2199.91 T:present80n6t4silcv2 4223.61 4227.13 4254.25 T:led80n6silcv1 4209.22 4227.89 4236.68 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.58? 0.87? 0.87? aegis128l 0.87 0.87 0.87 T:aegis128 0.87? 1.16? 1.45? T:tiaoxinv1 1.16 1.16 1.16 aegis256 1.16? 1.16? 1.45? T:tiaoxinv2 1.16? 1.45? 1.45? T:aezv3 1.45 1.45 1.45 T:aezv4 1.45? 1.45? 2.02? T:aezv5 2.31? 2.31? 2.60? T:aes128otrpv3 2.31? 2.60? 2.60? T:colm0v1 2.31? 2.60? 2.60? T:deoxysneq128128v1 2.60 2.60 2.60 T:aes128otrsv3 3.18 3.18 3.18 T:aes128n12t8clocv2 3.18 3.18 3.18 T:aes128n12t8clocv3 3.18 3.18 3.18 T:aes128n8t8clocv2 3.18 3.18 3.18 T:aes256otrpv3 3.18 3.18 3.47 T:aes128otrcv3 3.18? 3.18? 4.05? T:aeadaes128ocbtaglen128v1 3.18 3.47 3.47 T:aes256otrsv3 3.18? 3.47? 38.16? T:aeadaes192ocbtaglen128v1 3.47 3.47 3.47 T:deoxysneq256128v1 3.47 3.47 3.76 T:deoxysi128v141 3.47 3.76 3.76 T:aes128n12t8silcv2 3.47 3.76 3.76 T:aes128n8t8silcv2 3.76 3.76 3.76 T:aes128n12t8silcv3 3.76? 4.05? 36.13? T:aeadaes256ocbtaglen128v1 4.05 4.05 4.34 T:aes256otrcv3 4.34 4.34 4.62 T:deoxyseq128128v1 4.34 4.62 4.62 T:aes128gcmv1 4.34 4.62 4.62 T:deoxysi256v141 4.62 4.62 4.91 T:deoxysii128v141 4.62 4.91 4.91 aes256gcmv1 5.20 5.20 5.20 T:deoxyseq256128v1 5.20 5.20 5.49 T:morus640128v1 5.49 5.49 5.49 T:aesjambuv1 5.49 5.49 5.49 T:morus640128v2 5.49 5.49 5.78 T:deoxysii256v141 6.07 6.36 6.36 T:morus1280128v1 6.07 6.36 6.36 T:morus1280256v1 6.65 6.65 6.65 T:morus1280128v2 6.65 6.65 6.65 T:morus1280256v2 7.23 7.23 7.23 T:norx6441v1 7.23 7.23 7.23 T:norx6441v3 7.23 7.23 7.52 T:norx6441v2 7.23 7.52 7.52 T:ascon128av11 7.52 7.52 7.52 T:ascon96v1 7.80 8.09 8.09 ascon128av12 7.80 8.09 8.09 T:norx3241v1 8.09 8.09 8.09 T:norx3241v2 8.09 8.09 8.09 T:norx3241v3 9.54 9.54 9.54 T:ascon128v11 9.54 9.54 9.83 T:ascon128v1 10.12 10.12 10.41 ascon128v12 10.98 10.98 10.98 T:norx6461v1 10.98 10.98 10.98 T:norx6461v2 10.98 10.98 10.98 T:norx6461v3 11.85 12.14 12.14 T:norx3261v3 12.14 12.14 12.14 T:norx3261v2 12.14 12.43 12.43 T:riverkeyakv2 12.43 12.43 12.72 T:norx6444v3 12.72 12.72 13.01 T:lakekeyakv1 13.01 13.01 13.01 T:norx3261v1 14.45 14.74 15.32 T:lakekeyakv2 17.63 17.92 18.21 T:aes128otrsv1 17.63 17.92 19.37 T:aes128otrsv2 18.21 18.21 18.50 T:aes128n8clocv1 18.21 18.50 18.79 T:aes128n12clocv1 18.79 19.08 19.08 T:aes128otrpv1 18.79 19.08 19.66 T:twine80n6t4clocv3 19.37 19.37 19.37 T:aes128otrpv2 19.66 19.66 19.95 T:twine80n6t4clocv2 20.52 20.81 20.81 T:aes128n12silcv1 20.81 20.81 21.10 T:aes128n8silcv1 21.97 22.26 22.55 T:seakeyakv2 22.26 22.55 22.84 T:aes256otrsv1 22.26 22.55 22.84 T:aes256otrsv2 22.84 23.12 23.41 T:ketjeminorv2 23.41 23.41 23.70 T:aes256otrpv1 23.99 24.28 24.28 T:acorn128v2 24.57 24.86 24.86 T:acorn128v3 27.46 27.75 28.04 T:aes256otrpv2 32.09 32.38 32.38 T:ketjemajorv2 32.38 32.66 32.66 T:norx6444v2 33.53 33.53 33.53 T:norx6444v1 36.13 36.42 37.00 T:oceankeyakv2 36.71 37.00 38.16 T:riverkeyakv1 46.54 46.54 46.83 T:proest256otrv1 46.83 46.83 47.12 T:colm127v1 67.93 68.51 69.38 T:ketjesrv1 70.24 70.82 71.40 T:ketjejrv1 71.40 71.98 72.27 T:ketjesrv2 77.18 77.47 77.76 T:present80n6t4silcv3 79.78 79.78 81.23 T:deoxysneq128128v13 85.56 86.14 86.72 T:twine80n6clocv1 90.77 91.34 92.50 T:lunarkeyakv2 91.34 91.92 93.08 T:seakeyakv1 93.37 93.95 94.23 T:proest128otrv1 98.28 98.86 99.73 T:aezv1 104.06 104.35 105.22 T:deoxysneq256128v13 117.36 118.52 119.09 T:ketjejrv2 129.50 130.37 131.23 T:deoxyseq128128v13 134.12 134.99 135.28 T:led80n6t4silcv3 165.63 166.79 171.99 T:oceankeyakv1 170.55 172.28 174.02 T:deoxyseq256128v13 1499.66 1505.73 1511.51 T:acorn128 2450.38 2459.05 2463.68 T:present80n6silcv1 2464.55 2465.70 2478.42 T:present80n6t4silcv2 4577.02 4601.01 4678.48 T:led80n6silcv1 4615.75? 4701.60? 7162.39? T:led80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.87? 0.87? 1.16? T:aegis128 0.87? 0.87? 1.16? aegis128l 1.16 1.16 1.16 aegis256 1.16? 1.16? 1.45? T:tiaoxinv1 1.16? 1.16? 1.45? T:tiaoxinv2 1.16? 1.45? 1.45? T:aezv3 1.16? 1.45? 1.45? T:aezv4 1.45? 1.45? 2.02? T:aezv5 2.31 2.31 2.31 T:aes128otrpv3 2.60 2.60 2.60 T:aes128otrsv3 2.89 2.89 2.89 T:aes256otrpv3 3.18 3.18 3.47 T:colm0v1 3.47 3.47 3.47 T:aes128n12t8clocv2 3.47 3.47 3.47 T:aes128n12t8clocv3 3.47 3.47 3.47 T:aes128n8t8clocv2 3.47 3.47 3.47 T:aes128otrcv3 3.47 3.47 3.47 T:aes256otrsv3 3.47? 3.47? 5.20? T:aeadaes192ocbtaglen128v1 3.47 3.76 3.76 T:aes128n8t8silcv2 3.47? 3.76? 4.34? T:aeadaes128ocbtaglen128v1 3.76 3.76 3.76 T:aes128n12t8silcv2 3.76 3.76 3.76 T:aes128n12t8silcv3 3.76 3.76 3.76 T:deoxysneq128128v1 4.34? 4.34? 36.42? T:aeadaes256ocbtaglen128v1 4.34 4.34 4.34 T:aes128gcmv1 4.34 4.34 4.34 T:aes256otrcv3 4.34 4.34 4.34 T:deoxysneq256128v1 4.34 4.34 4.62 T:deoxysi128v141 4.62 4.62 4.62 aes256gcmv1 4.91 4.91 4.91 T:morus1280128v1 4.91 4.91 4.91 T:morus1280256v1 5.20 5.20 5.49 T:deoxysii128v141 5.49 5.49 5.78 T:morus640128v1 5.78 5.78 6.07 T:aesjambuv1 5.78 5.78 6.07 T:deoxysi256v141 5.78 5.78 6.07 T:morus640128v2 5.78 6.07 6.07 T:deoxyseq128128v1 6.36 6.36 6.36 T:deoxyseq256128v1 6.36 6.36 6.65 T:deoxysii256v141 6.65 6.65 6.94 T:morus1280256v2 6.94 6.94 6.94 T:morus1280128v2 7.23 7.23 7.52 T:norx6441v1 7.23 7.52 7.52 T:ascon128av11 7.23 7.52 7.52 T:ascon96v1 7.23 7.52 7.52 T:norx6441v3 7.52 7.52 7.52 T:norx6441v2 7.80 7.80 8.09 ascon128av12 8.09 8.09 8.09 T:norx3241v1 8.09 8.09 8.38 T:norx3241v3 8.09 8.38 8.38 T:norx3241v2 9.54 9.54 9.83 T:ascon128v1 9.54 9.54 9.83 T:ascon128v11 10.12 10.12 10.41 ascon128v12 10.98 10.98 10.98 T:norx6461v2 10.98 10.98 11.27 T:norx6461v3 10.98 11.27 11.27 T:norx6461v1 12.14 12.14 12.43 T:norx3261v2 12.14 12.14 12.43 T:norx3261v3 12.43 12.43 12.72 T:norx6444v3 12.43 12.43 12.72 T:riverkeyakv2 12.72 12.72 13.01 T:lakekeyakv1 13.01 13.30 13.30 T:norx3261v1 14.45 14.74 14.74 T:lakekeyakv2 17.34 17.63 17.63 T:aes128otrsv1 17.34? 17.63? 19.37? T:aes128otrsv2 18.50 18.79 19.08 T:aes128n8clocv1 18.79 18.79 19.08 T:aes128otrpv1 18.79 19.08 19.08 T:aes128n12clocv1 19.08 19.08 19.37 T:aes128otrpv2 19.08 19.08 19.66 T:twine80n6t4clocv3 19.37 19.66 19.95 T:twine80n6t4clocv2 20.52 20.52 20.81 T:aes128n12silcv1 20.52 20.81 20.81 T:aes128n8silcv1 21.97 22.26 22.55 T:aes256otrsv1 22.26 22.26 22.26 T:seakeyakv2 22.26 22.26 22.55 T:aes256otrsv2 23.12 23.12 23.41 T:ketjeminorv2 23.41 23.41 23.70 T:aes256otrpv1 24.86 24.86 25.15 T:acorn128v2 25.15 25.15 25.44 T:acorn128v3 27.17 27.46 27.75 T:aes256otrpv2 32.66 32.66 33.24 T:ketjemajorv2 33.53 33.53 33.82 T:norx6444v1 34.40 34.69 34.98 T:norx6444v2 36.13 36.42 36.71 T:oceankeyakv2 36.71 37.00 38.16 T:riverkeyakv1 47.41 47.70 48.27 T:proest256otrv1 53.48 53.77 54.34 T:colm127v1 68.51 69.38 69.66 T:ketjesrv1 68.80 69.66 70.24 T:ketjejrv1 70.53 71.40 72.27 T:ketjesrv2 77.76 78.05 78.91 T:present80n6t4silcv3 85.85 86.72 91.05 T:twine80n6clocv1 88.16 88.45 89.32 T:deoxysneq128128v13 90.19 90.77 91.34 T:lunarkeyakv2 91.92 92.21 93.08 T:seakeyakv1 93.95 95.39 96.84 T:proest128otrv1 101.46 101.75 102.33 T:aezv1 105.51 108.69 109.27 T:ketjejrv2 115.05 116.49 117.07 T:deoxysneq256128v13 128.92 130.66 132.39 T:deoxyseq128128v13 134.70 135.57 135.86 T:led80n6t4silcv3 165.05 165.92 171.12 T:oceankeyakv1 169.39 171.12 171.99 T:deoxyseq256128v13 1480.58 1530.30 1608.34 T:acorn128 2450.96 2452.70 2463.68 T:present80n6silcv1 2466.28 2478.42 2483.05 T:present80n6t4silcv2 4540.30 4551.87 4575.28 T:led80n6silcv1 4569.50? 4592.05? 7289.58? T:led80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.87 0.87 0.87 T:aegis128 0.87? 0.87? 1.45? aegis128l 1.16 1.16 1.16 T:aezv4 1.16? 1.16? 1.45? T:aezv5 1.16? 1.16? 1.45? T:tiaoxinv2 1.16? 1.16? 1.73? T:aezv3 1.16? 1.45? 1.45? T:tiaoxinv1 1.16? 1.45? 1.73? aegis256 2.31 2.31 2.31 T:aes128otrpv3 2.60 2.60 2.60 T:aes128otrsv3 2.89 2.89 2.89 T:aes256otrpv3 3.18 3.18 3.47 T:colm0v1 3.18 3.47 3.47 T:aes128n12t8clocv2 3.18 3.47 3.47 T:aes128n12t8clocv3 3.18 3.47 3.47 T:aes128n8t8clocv2 3.47 3.47 3.47 T:aes128otrcv3 3.47 3.47 3.47 T:aes256otrsv3 3.47 3.47 3.76 T:aeadaes128ocbtaglen128v1 3.47 3.47 3.76 T:deoxysneq128128v1 3.47? 3.47? 37.87? T:aeadaes192ocbtaglen128v1 3.47 3.76 3.76 T:aes128n12t8silcv2 3.47 3.76 3.76 T:aes128n12t8silcv3 3.47 3.76 3.76 T:aes128n8t8silcv2 4.05 4.34 4.34 T:deoxysneq256128v1 4.34 4.34 4.34 T:aes128gcmv1 4.34 4.34 4.62 T:aeadaes256ocbtaglen128v1 4.34 4.34 4.62 T:aes256otrcv3 4.34 4.34 4.62 T:deoxysi128v141 4.62 4.62 4.62 aes256gcmv1 4.91 4.91 4.91 T:morus1280128v1 4.91 4.91 4.91 T:morus1280256v1 5.20 5.20 5.20 T:deoxysii128v141 5.49 5.49 5.78 T:morus640128v1 5.78 5.78 5.78 T:aesjambuv1 5.78 5.78 6.07 T:deoxysi256v141 5.78 6.07 6.07 T:deoxyseq128128v1 5.78 6.07 6.07 T:morus640128v2 6.36 6.36 6.36 T:deoxyseq256128v1 6.36 6.36 6.65 T:deoxysii256v141 6.65 6.65 6.94 T:morus1280256v2 6.94 6.94 7.23 T:morus1280128v2 7.23 7.23 7.52 T:ascon128av11 7.23 7.52 7.52 T:ascon96v1 7.23 7.52 7.52 T:norx6441v1 7.23 7.52 7.52 T:norx6441v3 7.52 7.52 7.52 T:norx6441v2 7.80 7.80 7.80 ascon128av12 8.09 8.09 8.09 T:norx3241v1 8.09 8.09 8.38 T:norx3241v3 8.09 8.38 8.38 T:norx3241v2 9.54 9.54 9.83 T:ascon128v11 9.54 9.83 9.83 T:ascon128v1 10.12 10.12 10.12 ascon128v12 10.98 10.98 10.98 T:norx6461v2 10.98 10.98 11.27 T:norx6461v3 11.27 11.27 11.27 T:norx6461v1 12.14 12.14 12.43 T:norx3261v2 12.14 12.14 12.43 T:norx3261v3 12.43 12.43 12.43 T:norx6444v3 12.43 12.43 12.43 T:riverkeyakv2 12.72 13.01 13.01 T:lakekeyakv1 13.30 13.30 13.30 T:norx3261v1 14.45 14.74 15.03 T:lakekeyakv2 17.34 17.63 17.92 T:aes128otrsv1 17.34? 17.92? 19.37? T:aes128otrsv2 18.50 18.79 19.08 T:aes128n8clocv1 18.79 18.79 19.08 T:aes128n12clocv1 18.79 19.08 19.37 T:aes128otrpv1 19.08 19.37 19.66 T:aes128otrpv2 19.08 19.37 19.66 T:twine80n6t4clocv3 19.37 19.95 19.95 T:twine80n6t4clocv2 20.52 20.52 20.81 T:aes128n12silcv1 20.52 20.81 21.10 T:aes128n8silcv1 21.97 22.26 22.55 T:aes256otrsv1 22.26 22.26 22.55 T:seakeyakv2 22.26 22.55 22.84 T:aes256otrsv2 23.41 23.41 23.70 T:ketjeminorv2 23.41 23.70 23.99 T:aes256otrpv1 24.28 24.57 24.57 T:acorn128v2 24.86 25.15 25.15 T:acorn128v3 27.46 27.75 28.33 T:aes256otrpv2 32.38 32.66 33.24 T:ketjemajorv2 33.53 33.82 34.11 T:norx6444v1 34.40 34.69 35.27 T:norx6444v2 36.42 36.42 36.71 T:oceankeyakv2 36.42 37.00 37.58 T:riverkeyakv1 45.67 45.67 45.96 T:proest256otrv1 53.19 53.77 54.05 T:colm127v1 68.51 68.80 69.38 T:ketjejrv1 69.09 69.66 70.24 T:ketjesrv1 71.11 71.40 72.27 T:ketjesrv2 77.76 78.05 78.34 T:present80n6t4silcv3 85.85 86.72 90.77 T:twine80n6clocv1 88.16 88.45 89.32 T:deoxysneq128128v13 90.48 91.05 91.63 T:lunarkeyakv2 91.34 91.92 92.50 T:seakeyakv1 93.66 94.23 95.68 T:proest128otrv1 101.17 101.75 102.33 T:aezv1 105.51 106.95 107.82 T:ketjejrv2 114.76 115.62 115.91 T:deoxysneq256128v13 129.50 130.95 132.68 T:deoxyseq128128v13 134.99 135.28 135.57 T:led80n6t4silcv3 165.34 167.08 169.10 T:oceankeyakv1 169.39 170.55 171.12 T:deoxyseq256128v13 1511.22 1517.00 1528.27 T:acorn128 2450.09 2451.83 2485.36 T:present80n6t4silcv2 2453.56 2463.97 2465.12 T:present80n6silcv1 4552.16 4582.80 4602.45 T:led80n6silcv1 4589.16? 4608.23? 6766.09? T:led80n6t4silcv2