VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20250307

[Page version: 20250328 20:58:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.24 0.25 0.26 T:tiaoxinv2 0.24 0.25 0.26 T:tiaoxinv1 0.28 0.28 0.29 aegis128l 0.51 0.52 0.53 aegis256 0.51 0.52 0.53 T:aegis128 0.65 0.66 0.67 T:morus1280128v1 0.65 0.66 0.67 T:morus1280128v2 0.65 0.66 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280256v2 -3.94? 0.68? 5.30? T:aeadaes128ocbtaglen128v1 0.70 0.71 0.72 T:aes128otrcv3 0.71 0.72 0.72 T:aes128otrsv3 0.71 0.72 0.72 T:aezv3 0.72 0.73 0.74 T:aezv4 0.72 0.74 0.75 T:aes128otrpv3 0.74 0.75 0.76 T:aezv5 0.62? 0.84? 5.08? T:aeadaes192ocbtaglen128v1 0.93 0.93 0.96 T:aes256otrsv3 0.92 0.94 0.95 T:aes256otrcv3 0.95 0.97 0.98 T:aes256otrpv3 0.96 0.98 0.99 T:deoxysi128v141 -3.16? 1.05? 5.57? T:aeadaes256ocbtaglen128v1 1.06 1.09 1.10 T:deoxysi256v141 1.10 1.10 1.12 T:morus640128v1 1.10 1.10 1.11 T:morus640128v2 1.14 1.14 1.15 T:deoxysneq128128v1 -0.62? 1.23? 5.34? T:norx6444v3 1.30 1.32 1.34 T:deoxysneq256128v1 1.40 1.42 1.43 T:aes128gcmv1 1.67 1.68 1.69 aes256gcmv1 1.90 1.93 1.95 T:deoxysii128v141 2.13 2.14 2.16 T:norx6441v2 2.15 2.16 2.17 T:norx6441v3 2.15 2.19 2.22 T:deoxysii256v141 2.17 2.22 2.26 T:lunarkeyakv2 2.32 2.33 2.33 T:colm0v1 2.30 2.35 2.36 T:deoxyseq128128v1 2.51 2.54 2.55 T:deoxyseq256128v1 2.59 2.61 2.62 T:norx6441v1 2.89 2.92 2.96 T:seakeyakv2 2.98 3.07 3.10 T:oceankeyakv2 3.23 3.24 3.26 T:norx6461v2 3.24 3.25 3.27 T:norx6461v3 3.85 3.88 3.90 T:norx3241v3 3.87 3.88 3.89 T:norx3241v2 3.91 3.94 3.95 T:norx6461v1 3.97 3.99 4.00 T:norx6444v2 4.05 4.12 4.15 T:lakekeyakv1 4.45 4.47 4.51 T:norx6444v1 4.42 4.48 4.50 T:lakekeyakv2 4.56 4.56 4.57 T:aes128n12t8silcv2 4.56 4.56 4.58 T:aes128n12t8silcv3 4.56 4.57 4.58 T:aes128n8t8silcv2 4.56 4.57 4.57 T:aes128n12t8clocv2 4.56 4.57 4.57 T:aes128n12t8clocv3 4.56 4.57 4.57 T:aes128n8t8clocv2 4.68 4.70 4.72 T:norx3241v1 3.41? 5.79? 8.13? T:acorn128v3 5.85 5.88 5.89 T:norx3261v3 5.90 5.92 5.95 T:norx3261v2 7.19 7.22 7.24 T:ascon128av11 7.19 7.22 7.24 T:ascon96v1 7.22 7.23 7.25 ascon128av12 7.38 7.42 7.44 T:ketjemajorv2 7.46 7.49 7.50 T:norx3261v1 7.75 7.80 7.84 T:acorn128v2 9.12 9.13 9.14 T:aesjambuv1 9.41 9.49 9.54 T:ketjeminorv2 9.90 9.93 9.98 T:riverkeyakv2 10.55 10.57 10.59 T:ascon128v11 10.55 10.59 10.61 ascon128v12 10.65 10.68 10.70 T:ascon128v1 14.58 14.60 14.60 T:twine80n6t4clocv3 14.81 14.83 14.86 T:aes128otrpv1 14.84 14.87 14.89 T:aes128otrpv2 15.31 15.35 15.37 T:aes128otrsv1 15.37 15.41 15.43 T:aes128otrsv2 15.67 15.68 15.69 T:twine80n6t4clocv2 19.03 19.09 19.13 T:aes256otrsv1 19.34 19.35 19.39 T:aes256otrpv2 19.23 19.36 19.61 T:aes256otrsv2 19.33 19.36 19.38 T:aes256otrpv1 24.65 24.77 24.87 T:aes128n12clocv1 24.72 24.79 24.84 T:aes128n8clocv1 24.74 24.79 24.82 T:aeadaes128ocbtaglen64v1 24.77 24.84 24.86 T:aeadaes128ocbtaglen96v1 26.14 26.18 26.22 T:proest256otrv1 29.14 29.19 29.22 T:aeadaes192ocbtaglen64v1 29.16 29.20 29.28 T:aeadaes192ocbtaglen96v1 29.93 30.03 30.05 T:ketjesrv1 30.60 31.08 31.12 T:ketjesrv2 33.60 33.67 33.69 T:aeadaes256ocbtaglen64v1 33.64 33.70 33.75 T:aeadaes256ocbtaglen96v1 54.41 54.48 54.51 T:proest128otrv1 55.41 55.46 55.68 T:colm127v1 66.58 66.62 66.66 T:ketjejrv1 68.43 68.47 68.51 T:present80n6t4silcv3 77.33 78.06 82.94 T:deoxysneq128128v13 93.43 93.57 93.99 T:ketjejrv2 121.83 122.35 122.78 T:deoxysneq256128v13 128.36 128.44 128.52 T:led80n6t4silcv3 154.88 163.42 166.32 T:deoxyseq128128v13 178.12 178.26 178.71 T:aezv1 244.28 244.37 244.47 T:deoxyseq256128v13 380.55 387.35 388.09 T:acorn128 4074.07 4079.36 4082.41 T:led80n6silcv1 4085.80 4091.45 4094.00 T:led80n6t4silcv2 4542.36 4546.08 4548.19 T:present80n6t4silcv2 4542.10 4546.89 4550.86 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.29 0.30 0.30 aegis128l 0.38 0.39 0.39 T:tiaoxinv1 0.39 0.39 0.41 T:tiaoxinv2 0.56 0.56 0.57 T:aegis128 0.59 0.59 0.60 aegis256 0.66 0.68 0.69 T:morus1280128v1 0.67 0.68 0.68 T:morus1280128v2 0.66 0.68 0.69 T:morus1280256v1 0.67 0.68 0.69 T:morus1280256v2 0.70 0.70 0.71 T:aezv3 0.68 0.71 0.73 T:aezv4 0.71 0.72 0.74 T:aezv5 0.61? 0.72? 0.73? T:aeadaes128ocbtaglen128v1 0.72 0.74 0.76 T:aes128otrcv3 0.74 0.74 0.75 T:aes128otrsv3 0.77 0.78 0.79 T:aes128otrpv3 -3.35? 0.84? 0.85? T:aeadaes192ocbtaglen128v1 0.95 0.96 0.97 T:aes256otrsv3 0.95 0.96 0.98 T:aes256otrcv3 0.97 0.99 1.01 T:aes256otrpv3 1.04 1.08 1.09 T:aeadaes256ocbtaglen128v1 1.08 1.10 1.12 T:morus640128v1 1.10 1.12 1.12 T:morus640128v2 1.19 1.21 1.22 T:deoxysi128v141 -0.62? 1.25? 5.35? T:norx6444v3 1.38 1.39 1.40 T:deoxysi256v141 1.52 1.53 1.54 T:deoxysneq128128v1 1.63 1.65 1.67 T:deoxysneq256128v1 1.73 1.75 1.77 T:aes128gcmv1 1.90 1.94 1.96 T:deoxysii128v141 2.07 2.09 2.10 T:norx6441v3 2.08 2.09 2.10 T:norx6441v2 2.18 2.21 2.24 T:deoxysii256v141 2.22 2.25 2.35 T:colm0v1 2.24 2.28 2.34 T:lunarkeyakv2 2.39 2.40 2.42 aes256gcmv1 2.55 2.56 2.58 T:norx6441v1 2.96 2.99 3.02 T:seakeyakv2 3.06 3.08 3.12 T:deoxyseq128128v1 3.05 3.15 3.18 T:oceankeyakv2 3.16 3.17 3.19 T:norx6461v3 3.16 3.19 3.21 T:norx6461v2 3.28 3.30 3.31 T:deoxyseq256128v1 3.78 3.79 3.81 T:norx3241v2 3.78 3.80 3.82 T:norx3241v3 3.86 3.88 3.90 T:norx6461v1 3.97 4.00 4.03 T:norx6444v2 4.19 4.23 4.28 T:lakekeyakv1 4.40 4.42 4.45 T:norx6444v1 4.42 4.48 4.50 T:lakekeyakv2 4.48 4.50 4.51 T:aes128n8t8silcv2 4.49 4.50 4.51 T:aes128n12t8silcv2 4.45 4.50 4.51 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128n12t8clocv3 4.50 4.50 4.50 T:aes128n8t8clocv2 4.55 4.57 4.59 T:norx3241v1 5.80 5.83 5.85 T:norx3261v3 5.83 5.86 5.89 T:norx3261v2 6.78 6.80 6.81 T:acorn128v3 7.26 7.28 7.31 ascon128av12 7.32 7.34 7.36 T:ascon128av11 7.32 7.35 7.38 T:ascon96v1 7.36 7.39 7.41 T:norx3261v1 7.36 7.44 7.51 T:ketjemajorv2 8.04 8.05 8.07 T:acorn128v2 9.43 9.43 9.44 T:aesjambuv1 10.10 10.14 10.16 T:riverkeyakv2 10.21 10.27 10.39 T:ketjeminorv2 10.50 10.52 10.56 T:ascon128v11 10.50 10.52 10.54 T:ascon128v1 10.61 10.64 10.66 ascon128v12 14.75 14.79 14.82 T:twine80n6t4clocv3 15.06 15.10 15.15 T:aes128otrpv1 15.19 15.32 15.39 T:aes128otrpv2 15.51 15.55 15.59 T:twine80n6t4clocv2 15.65 15.68 15.74 T:aes128otrsv2 15.70 15.75 15.78 T:aes128otrsv1 19.67 19.70 19.73 T:aes256otrpv1 19.74 19.78 19.84 T:aes256otrsv1 19.80 19.83 19.91 T:aes256otrpv2 19.81 19.85 19.90 T:aes256otrsv2 23.62 23.73 23.80 T:aes128n12clocv1 24.24 24.27 24.33 T:aes128n8clocv1 25.88 25.98 26.05 T:proest256otrv1 30.56 30.62 30.69 T:ketjesrv2 31.33 31.35 31.44 T:ketjesrv1 33.35 33.41 33.50 T:aeadaes128ocbtaglen64v1 33.48 33.53 33.59 T:aeadaes128ocbtaglen96v1 39.82 39.88 39.91 T:aeadaes192ocbtaglen64v1 39.87 39.96 40.00 T:aeadaes192ocbtaglen96v1 46.21 46.32 46.39 T:aeadaes256ocbtaglen96v1 46.32 46.37 46.42 T:aeadaes256ocbtaglen64v1 54.72 54.77 54.80 T:proest128otrv1 61.15 66.06 66.15 T:ketjejrv1 68.58 68.61 68.65 T:present80n6t4silcv3 72.39 72.66 72.73 T:colm127v1 95.36 95.44 95.55 T:ketjejrv2 109.24 109.76 115.77 T:deoxysneq128128v13 129.36 129.61 129.88 T:led80n6t4silcv3 157.57 157.66 159.23 T:deoxysneq256128v13 154.80 163.68 166.16 T:deoxyseq128128v13 178.10 178.25 178.60 T:aezv1 244.12 244.24 244.37 T:deoxyseq256128v13 371.39 372.94 395.01 T:acorn128 4073.37 4078.29 4081.65 T:led80n6silcv1 4082.42 4086.30 4090.07 T:led80n6t4silcv2 4542.90 4544.61 4547.59 T:present80n6silcv1 4542.91 4545.24 4550.15 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.27 0.28 0.28 T:aezv4 0.27 0.28 0.28 T:aezv3 0.24? 0.28? 0.29? T:aezv5 0.29 0.30 0.31 aegis128l 0.36? 0.39? 0.40? T:tiaoxinv1 0.36? 0.39? 0.42? T:tiaoxinv2 0.56 0.56 0.57 T:aegis128 0.59 0.60 0.61 aegis256 0.67 0.68 0.69 T:morus1280256v1 0.66 0.68 0.69 T:morus1280128v2 0.67 0.68 0.69 T:morus1280256v2 0.68 0.68 0.69 T:morus1280128v1 -3.72? 0.72? 5.19? T:aeadaes128ocbtaglen128v1 0.74 0.74 0.75 T:aes128otrcv3 0.74 0.75 0.75 T:aes128otrsv3 0.76 0.77 0.78 T:aes128otrpv3 0.83? 0.84? 5.16? T:aeadaes192ocbtaglen128v1 0.94 0.95 0.97 T:aes256otrsv3 0.95 0.96 0.97 T:aes256otrcv3 0.97 0.98 0.99 T:aes256otrpv3 1.04 1.08 1.10 T:aeadaes256ocbtaglen128v1 1.10 1.11 1.11 T:morus640128v1 1.11 1.11 1.12 T:morus640128v2 1.20 1.20 1.21 T:deoxysi128v141 -0.62? 1.25? 5.37? T:norx6444v3 1.35 1.38 1.43 T:deoxysi256v141 1.50 1.53 1.57 T:deoxysneq128128v1 1.60 1.65 1.69 T:deoxysneq256128v1 1.75 1.75 1.77 T:aes128gcmv1 1.91 1.94 1.96 T:deoxysii128v141 2.08 2.09 2.10 T:norx6441v3 2.07 2.09 2.10 T:norx6441v2 2.19 2.21 2.24 T:deoxysii256v141 2.26 2.32 2.36 T:lunarkeyakv2 2.24 2.34 2.35 T:colm0v1 2.40 2.41 2.42 aes256gcmv1 2.54 2.56 2.57 T:norx6441v1 2.98 3.02 3.05 T:seakeyakv2 3.03 3.09 3.10 T:deoxyseq128128v1 3.10 3.15 3.18 T:oceankeyakv2 3.16 3.18 3.19 T:norx6461v2 3.17 3.18 3.19 T:norx6461v3 3.28 3.29 3.33 T:deoxyseq256128v1 3.78 3.78 3.79 T:norx3241v2 3.77 3.80 3.82 T:norx3241v3 3.84 3.86 3.88 T:norx6461v1 4.02 4.03 4.05 T:norx6444v2 4.17 4.24 4.26 T:lakekeyakv1 4.43 4.45 4.48 T:norx6444v1 4.44 4.46 4.51 T:lakekeyakv2 4.49 4.50 4.51 T:aes128n8t8silcv2 4.49 4.50 4.50 T:aes128n12t8silcv2 4.49 4.50 4.51 T:aes128n12t8silcv3 4.45 4.50 4.51 T:aes128n12t8clocv2 4.50 4.50 4.51 T:aes128n8t8clocv2 4.45 4.51 4.51 T:aes128n12t8clocv3 4.56 4.58 4.59 T:norx3241v1 5.82 5.84 5.85 T:norx3261v3 5.84 5.86 5.88 T:norx3261v2 6.77 6.78 6.81 T:acorn128v3 7.26 7.29 7.31 ascon128av12 7.32 7.35 7.37 T:ascon96v1 7.31 7.35 7.37 T:ascon128av11 7.36 7.38 7.39 T:norx3261v1 7.39 7.52 7.58 T:ketjemajorv2 8.03 8.05 8.07 T:acorn128v2 9.43 9.43 9.44 T:aesjambuv1 10.11 10.15 10.17 T:riverkeyakv2 10.26 10.33 10.38 T:ketjeminorv2 10.47 10.50 10.56 T:ascon128v1 10.51 10.54 10.57 T:ascon128v11 10.61 10.64 10.70 ascon128v12 14.74 14.79 14.81 T:twine80n6t4clocv3 15.11 15.14 15.18 T:aes128otrpv1 15.20 15.38 15.43 T:aes128otrpv2 15.54 15.56 15.59 T:twine80n6t4clocv2 15.68 15.73 15.75 T:aes128otrsv2 15.71 15.75 15.79 T:aes128otrsv1 19.69 19.73 19.78 T:aes256otrpv1 19.76 19.81 19.84 T:aes256otrsv1 19.77 19.86 19.96 T:aes256otrsv2 19.84 19.87 19.92 T:aes256otrpv2 23.61 23.73 23.84 T:aes128n12clocv1 24.21 24.25 24.35 T:aes128n8clocv1 25.99 26.06 26.09 T:proest256otrv1 30.60 30.63 30.68 T:ketjesrv2 31.31 31.34 31.40 T:ketjesrv1 33.39 33.46 33.53 T:aeadaes128ocbtaglen64v1 33.49 33.56 33.64 T:aeadaes128ocbtaglen96v1 39.83 39.86 39.88 T:aeadaes192ocbtaglen64v1 39.91 39.96 40.01 T:aeadaes192ocbtaglen96v1 46.27 46.34 46.40 T:aeadaes256ocbtaglen64v1 46.30 46.35 46.38 T:aeadaes256ocbtaglen96v1 54.71 54.76 54.80 T:proest128otrv1 66.09 66.56 66.63 T:ketjejrv1 68.57 68.62 68.64 T:present80n6t4silcv3 71.30 71.56 71.62 T:colm127v1 95.36 95.42 95.56 T:ketjejrv2 109.18 109.84 115.72 T:deoxysneq128128v13 129.49 129.64 131.68 T:led80n6t4silcv3 157.45 157.72 159.21 T:deoxysneq256128v13 154.65 163.56 166.11 T:deoxyseq128128v13 177.82 177.91 178.08 T:aezv1 244.15 244.24 244.31 T:deoxyseq256128v13 371.46 372.86 395.00 T:acorn128 4073.67 4079.10 4081.51 T:led80n6silcv1 4080.68 4086.86 4089.50 T:led80n6t4silcv2 4540.12 4545.02 4548.45 T:present80n6silcv1 4544.41 4545.76 4548.96 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.20? 0.22? 0.23? T:tiaoxinv2 0.20? 0.22? 0.23? T:tiaoxinv1 0.26 0.27 0.28 aegis128l 0.49 0.50 0.52 T:aezv3 0.50 0.51 0.52 aegis256 0.49 0.51 0.52 T:aezv4 0.52 0.54 0.55 T:aezv5 0.54 0.54 0.55 T:aegis128 0.63 0.64 0.64 T:morus1280128v1 0.63 0.64 0.64 T:morus1280128v2 0.63 0.64 0.65 T:morus1280256v2 0.64 0.64 0.65 T:morus1280256v1 -1.51? 0.66? 2.79? T:aeadaes128ocbtaglen128v1 0.73 0.73 0.74 T:aes128otrcv3 0.66? 0.78? 0.86? T:aeadaes192ocbtaglen128v1 0.81 0.82 0.82 T:aes128otrpv3 0.94 0.95 0.96 T:aes256otrcv3 0.94 0.97 1.00 T:deoxysi128v141 0.96? 1.01? 1.07? T:aeadaes256ocbtaglen128v1 1.03 1.05 1.06 T:aes128gcmv1 1.06 1.06 1.07 T:aes256otrpv3 1.06 1.07 1.09 T:deoxysi256v141 1.07 1.07 1.08 T:morus640128v1 1.07 1.08 1.08 T:morus640128v2 1.13 1.16 1.16 T:deoxysneq128128v1 1.15 1.18 1.19 aes256gcmv1 1.26 1.29 1.29 T:deoxysneq256128v1 1.41 1.43 1.44 T:deoxysii128v141 1.59 1.62 1.65 T:deoxysii256v141 1.61 1.62 1.63 T:colm0v1 1.69 1.69 1.71 T:norx6444v3 1.74 1.75 1.76 T:deoxyseq128128v1 1.89 1.90 1.92 T:deoxyseq256128v1 2.14 2.16 2.16 T:norx6441v2 2.15 2.16 2.16 T:norx6441v3 2.46 2.50 2.52 T:seakeyakv2 2.55 2.58 2.60 T:oceankeyakv2 2.58 2.59 2.60 T:norx6441v1 2.60 2.61 2.61 T:aes128otrsv3 3.04 3.08 3.10 T:lunarkeyakv2 3.25 3.27 3.27 T:norx6461v3 3.27 3.28 3.30 T:norx6461v2 3.59 3.59 3.60 T:aes256otrsv3 3.69 3.71 3.73 T:norx6444v2 3.87 3.88 3.89 T:norx3241v3 3.87 3.89 3.90 T:norx3241v2 3.88 3.89 3.91 T:norx6461v1 3.89 3.91 3.94 T:lakekeyakv1 3.93 3.95 3.96 T:lakekeyakv2 4.39 4.41 4.43 T:norx6444v1 4.53 4.53 4.54 T:aes128n12t8silcv3 4.53 4.53 4.54 T:aes128n12t8silcv2 4.53 4.53 4.54 T:aes128n8t8silcv2 4.53 4.53 4.54 T:aes128n8t8clocv2 4.53 4.53 4.54 T:aes128n12t8clocv3 4.53 4.54 4.54 T:aes128n12t8clocv2 4.69 4.70 4.71 T:norx3241v1 5.85 5.86 5.88 T:norx3261v3 5.86 5.87 5.89 T:norx3261v2 5.16? 6.38? 7.58? T:acorn128v3 6.56 6.58 6.59 T:ketjemajorv2 7.12 7.13 7.15 T:ascon128av11 7.13 7.15 7.18 T:ascon96v1 7.18 7.20 7.22 ascon128av12 7.19 7.21 7.23 T:riverkeyakv2 7.32 7.33 7.35 T:acorn128v2 7.47 7.49 7.50 T:norx3261v1 8.55 8.61 8.66 T:ketjeminorv2 9.06 9.07 9.07 T:aesjambuv1 10.52 10.55 10.57 T:ascon128v1 10.55 10.57 10.58 T:ascon128v11 10.59 10.61 10.68 ascon128v12 13.91 13.97 14.00 T:aes128otrsv1 13.92 13.97 14.01 T:aes128otrsv2 14.13 14.16 14.22 T:aes128otrpv1 14.29 14.32 14.33 T:aes128otrpv2 14.36 14.38 14.41 T:twine80n6t4clocv3 15.38 15.40 15.41 T:twine80n6t4clocv2 17.82 17.86 18.03 T:aes256otrsv2 17.77 17.87 17.98 T:aes256otrsv1 18.67 18.69 18.70 T:aes256otrpv1 18.73 18.84 19.27 T:aes256otrpv2 18.89 18.96 19.00 T:aes128n12clocv1 18.91 18.96 18.98 T:aes128n8clocv1 24.47 24.50 24.52 T:aeadaes128ocbtaglen64v1 24.47 24.52 24.55 T:aeadaes128ocbtaglen96v1 26.34 26.36 26.39 T:proest256otrv1 26.78 26.82 26.84 T:ketjesrv1 28.19 28.44 28.46 T:ketjesrv2 28.89 28.90 28.94 T:aeadaes192ocbtaglen96v1 28.87 28.92 30.55 T:aeadaes192ocbtaglen64v1 33.34 33.37 33.41 T:aeadaes256ocbtaglen64v1 33.36 33.40 33.43 T:aeadaes256ocbtaglen96v1 40.74 40.77 40.86 T:colm127v1 54.94 54.96 54.99 T:proest128otrv1 61.86 61.88 62.18 T:ketjejrv1 67.87 67.89 67.94 T:present80n6t4silcv3 77.86 78.25 82.58 T:deoxysneq128128v13 90.61 90.77 90.86 T:ketjejrv2 116.78 116.99 117.09 T:aezv1 121.54 122.03 122.84 T:deoxysneq256128v13 115.83 124.03 124.97 T:deoxyseq128128v13 127.90 127.96 128.12 T:led80n6t4silcv3 182.47 182.53 182.71 T:deoxyseq256128v13 365.03 366.78 372.74 T:acorn128 3058.83 3059.55 3060.63 T:led80n6silcv1 3063.69 3064.84 3066.00 T:led80n6t4silcv2 3405.52 3406.94 3408.02 T:present80n6silcv1 3407.04 3407.87 3408.86 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.28 0.28 0.28 aegis128l 0.27 0.29 0.30 T:tiaoxinv1 0.27? 0.29? 0.31? T:tiaoxinv2 0.49 0.50 0.51 T:aezv4 0.49 0.50 0.51 T:aezv3 0.51 0.52 0.53 T:aezv5 0.54 0.54 0.54 T:aegis128 0.54 0.55 0.56 aegis256 0.64 0.65 0.65 T:morus1280128v1 0.64 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280256v1 0.65 0.65 0.66 T:morus1280128v2 0.62? 0.67? 0.74? T:aeadaes128ocbtaglen128v1 0.74 0.74 0.76 T:aes128otrcv3 0.75? 0.80? 0.86? T:aeadaes192ocbtaglen128v1 0.83 0.84 0.84 T:aes128otrpv3 0.95 0.96 0.98 T:aes256otrcv3 -1.24? 1.04? 3.24? T:aeadaes256ocbtaglen128v1 1.06 1.07 1.08 T:aes256otrpv3 1.06 1.07 1.08 T:morus640128v2 1.06 1.08 1.09 T:morus640128v1 1.06 1.08 1.09 T:deoxysi128v141 1.18 1.22 1.23 T:aes128gcmv1 1.20 1.23 1.24 T:deoxysi256v141 1.32 1.33 1.34 T:deoxysneq128128v1 1.40 1.43 1.43 T:deoxysii128v141 1.43 1.43 1.44 T:deoxysneq256128v1 1.52 1.55 1.56 aes256gcmv1 1.57 1.61 1.65 T:colm0v1 1.61 1.64 1.65 T:deoxysii256v141 1.69 1.70 1.71 T:norx6444v3 2.11 2.12 2.13 T:norx6441v3 2.11 2.12 2.14 T:norx6441v2 2.12 2.13 2.14 T:deoxyseq128128v1 2.27 2.29 2.30 T:deoxyseq256128v1 2.49 2.51 2.53 T:seakeyakv2 2.56 2.57 2.60 T:norx6441v1 2.62 2.63 2.63 T:aes128otrsv3 2.58 2.63 2.67 T:oceankeyakv2 3.09 3.12 3.14 T:lunarkeyakv2 3.21 3.21 3.23 T:norx6461v3 3.21 3.23 3.24 T:norx6461v2 3.60 3.60 3.61 T:aes256otrsv3 3.70 3.72 3.74 T:norx6444v2 3.84 3.84 3.86 T:norx3241v3 3.83 3.85 3.86 T:norx3241v2 3.84 3.85 3.86 T:norx6461v1 3.93 3.96 3.98 T:lakekeyakv2 3.93 3.96 3.99 T:lakekeyakv1 4.36 4.38 4.40 T:norx6444v1 4.49 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.51 T:aes128n12t8silcv2 4.50 4.50 4.53 T:aes128n8t8clocv2 4.50 4.51 4.53 T:aes128n12t8clocv3 4.50 4.52 4.53 T:aes128n12t8clocv2 4.62 4.64 4.64 T:norx3241v1 5.82 5.85 5.86 T:norx3261v3 5.83 5.85 5.85 T:norx3261v2 6.57 6.59 6.63 T:ketjemajorv2 6.86 6.88 6.90 T:acorn128v3 7.15 7.18 7.26 T:ascon128av11 7.17 7.19 7.21 T:ascon96v1 7.20 7.22 7.24 ascon128av12 7.24 7.27 7.28 T:riverkeyakv2 7.42 7.43 7.45 T:norx3261v1 7.51 7.53 7.54 T:acorn128v2 8.96 8.98 9.03 T:ketjeminorv2 9.21 9.22 9.22 T:aesjambuv1 10.34 10.38 10.45 T:ascon128v11 10.43 10.47 10.49 T:ascon128v1 10.63 10.65 10.67 ascon128v12 14.07 14.09 14.16 T:aes128otrsv2 14.13 14.17 14.23 T:aes128otrsv1 14.30 14.33 14.36 T:aes128otrpv1 14.44 14.47 14.55 T:aes128otrpv2 14.45 14.47 14.49 T:twine80n6t4clocv3 15.31 15.36 15.37 T:twine80n6t4clocv2 18.09 18.16 18.20 T:aes256otrsv2 18.13 18.19 18.33 T:aes256otrsv1 18.39 18.43 18.49 T:aes128n12clocv1 18.68 18.72 18.75 T:aes128n8clocv1 18.85 18.86 18.89 T:aes256otrpv1 18.93 19.20 19.76 T:aes256otrpv2 26.26 26.29 26.31 T:proest256otrv1 27.44 27.47 27.50 T:ketjesrv1 28.20 28.23 28.51 T:ketjesrv2 28.80 28.84 28.89 T:aeadaes128ocbtaglen64v1 28.87 28.91 28.96 T:aeadaes128ocbtaglen96v1 34.24 34.28 34.41 T:aeadaes192ocbtaglen64v1 34.28 34.29 34.34 T:aeadaes192ocbtaglen96v1 39.67 39.73 39.76 T:aeadaes256ocbtaglen64v1 39.69 39.73 39.76 T:aeadaes256ocbtaglen96v1 49.20 49.34 49.41 T:colm127v1 55.09 55.12 55.14 T:proest128otrv1 61.57 61.61 61.97 T:ketjejrv1 67.94 67.96 67.98 T:present80n6t4silcv3 91.50 91.57 91.63 T:ketjejrv2 93.83 94.16 99.37 T:deoxysneq128128v13 116.91 117.27 118.07 T:aezv1 116.06 123.86 124.94 T:deoxyseq128128v13 127.44 127.59 128.53 T:led80n6t4silcv3 139.47 140.14 140.88 T:deoxysneq256128v13 182.47 182.57 182.66 T:deoxyseq256128v13 366.80 367.48 378.64 T:acorn128 3058.35 3059.36 3059.85 T:led80n6silcv1 3063.39 3066.22 3071.13 T:led80n6t4silcv2 3405.30 3406.12 3407.11 T:present80n6silcv1 3406.41 3408.11 3409.21 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.27 0.28 0.28 aegis128l 0.26? 0.29? 0.29? T:aezv4 0.28 0.29 0.29 T:aezv3 0.28 0.29 0.31 T:tiaoxinv2 0.28 0.29 0.30 T:tiaoxinv1 0.31 0.31 0.31 T:aezv5 0.54 0.54 0.54 T:aegis128 0.54 0.55 0.56 aegis256 0.64 0.65 0.66 T:morus1280256v2 0.65 0.65 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280128v2 0.65 0.65 0.66 T:morus1280128v1 -1.51? 0.67? 3.03? T:aeadaes128ocbtaglen128v1 0.75 0.75 0.76 T:aes128otrcv3 -1.48? 0.80? 2.93? T:aeadaes192ocbtaglen128v1 0.83 0.83 0.84 T:aes128otrpv3 0.96 0.96 0.98 T:aes256otrcv3 -1.16? 1.04? 3.20? T:aeadaes256ocbtaglen128v1 1.06 1.06 1.07 T:aes256otrpv3 1.07 1.07 1.07 T:morus640128v2 1.07 1.08 1.09 T:morus640128v1 1.07 1.08 1.09 T:deoxysi128v141 1.20 1.22 1.23 T:aes128gcmv1 1.21 1.22 1.24 T:deoxysi256v141 1.32 1.33 1.36 T:deoxysneq128128v1 1.40 1.43 1.44 T:deoxysii128v141 1.41 1.43 1.44 T:deoxysneq256128v1 1.53 1.54 1.56 aes256gcmv1 1.58 1.61 1.64 T:colm0v1 1.62 1.64 1.65 T:deoxysii256v141 1.69 1.70 1.71 T:norx6444v3 2.11 2.12 2.13 T:norx6441v2 2.11 2.12 2.13 T:norx6441v3 2.11 2.14 2.15 T:deoxyseq128128v1 2.28 2.29 2.31 T:deoxyseq256128v1 2.52 2.53 2.54 T:seakeyakv2 2.56 2.57 2.58 T:norx6441v1 2.62 2.62 2.63 T:aes128otrsv3 2.62 2.63 2.66 T:oceankeyakv2 3.10 3.13 3.16 T:lunarkeyakv2 3.20 3.21 3.22 T:norx6461v3 3.21 3.22 3.23 T:norx6461v2 3.60 3.61 3.61 T:aes256otrsv3 3.71 3.73 3.75 T:norx6444v2 3.84 3.84 3.85 T:norx3241v2 3.83 3.85 3.86 T:norx6461v1 3.84 3.85 3.86 T:norx3241v3 3.94 3.96 3.98 T:lakekeyakv2 3.93 3.97 3.99 T:lakekeyakv1 4.39 4.40 4.42 T:norx6444v1 4.47 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.51 4.53 T:aes128n12t8clocv2 4.50 4.53 4.53 T:aes128n8t8clocv2 4.51 4.53 4.53 T:aes128n12t8clocv3 4.63 4.64 4.65 T:norx3241v1 5.83 5.84 5.85 T:norx3261v3 5.83 5.84 5.85 T:norx3261v2 6.59 6.63 6.69 T:ketjemajorv2 6.87 6.88 6.89 T:acorn128v3 7.16 7.17 7.19 T:ascon128av11 7.18 7.20 7.22 T:ascon96v1 7.20 7.22 7.23 ascon128av12 7.26 7.28 7.29 T:riverkeyakv2 7.42 7.43 7.44 T:norx3261v1 7.43 7.52 7.53 T:acorn128v2 8.95 9.01 9.07 T:ketjeminorv2 9.21 9.22 9.22 T:aesjambuv1 10.41 10.44 10.47 T:ascon128v11 10.43 10.46 10.47 T:ascon128v1 10.63 10.65 10.67 ascon128v12 14.09 14.11 14.16 T:aes128otrsv2 14.15 14.20 14.25 T:aes128otrsv1 14.32 14.35 14.38 T:aes128otrpv1 14.44 14.47 14.49 T:twine80n6t4clocv3 14.44 14.49 14.55 T:aes128otrpv2 15.32 15.34 15.37 T:twine80n6t4clocv2 18.10 18.17 18.22 T:aes256otrsv2 18.16 18.22 18.34 T:aes256otrsv1 18.41 18.46 18.50 T:aes128n12clocv1 18.67 18.72 18.78 T:aes128n8clocv1 18.87 18.89 18.93 T:aes256otrpv1 18.96 19.19 19.65 T:aes256otrpv2 26.27 26.29 26.32 T:proest256otrv1 27.44 27.48 27.51 T:ketjesrv1 28.19 28.22 28.24 T:ketjesrv2 28.83 28.86 28.90 T:aeadaes128ocbtaglen64v1 28.86 28.90 28.98 T:aeadaes128ocbtaglen96v1 34.24 34.28 34.30 T:aeadaes192ocbtaglen64v1 34.27 34.31 34.34 T:aeadaes192ocbtaglen96v1 39.68 39.70 39.75 T:aeadaes256ocbtaglen64v1 39.68 39.74 39.76 T:aeadaes256ocbtaglen96v1 48.67 48.80 48.87 T:colm127v1 55.09 55.12 55.15 T:proest128otrv1 61.58 61.60 61.64 T:ketjejrv1 67.95 67.97 68.00 T:present80n6t4silcv3 91.52 91.56 91.59 T:ketjejrv2 93.84 94.27 99.42 T:deoxysneq128128v13 116.76 116.96 117.14 T:aezv1 115.82 123.85 124.91 T:deoxyseq128128v13 127.45 127.53 128.47 T:led80n6t4silcv3 139.46 139.61 140.91 T:deoxysneq256128v13 182.36 182.58 182.69 T:deoxyseq256128v13 366.76 368.88 378.54 T:acorn128 3058.27 3059.31 3060.26 T:led80n6silcv1 3064.27 3066.26 3071.20 T:led80n6t4silcv2 3405.45 3406.38 3407.62 T:present80n6silcv1 3406.59 3407.82 3408.93 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.18 0.19 0.19 T:tiaoxinv2 0.17? 0.19? 0.20? T:tiaoxinv1 0.24? 0.26? 0.27? aegis128l 0.29 0.29 0.30 T:aezv4 0.26? 0.30? 0.31? T:aezv3 0.31 0.33 0.33 T:aezv5 0.49 0.50 0.51 aegis256 0.56 0.56 0.57 T:aegis128 -3.57? 0.61? 4.78? T:aeadaes128ocbtaglen128v1 0.61 0.62 0.62 T:morus1280128v2 0.61 0.62 0.63 T:morus1280256v2 0.61 0.62 0.63 T:morus1280256v1 0.61 0.62 0.63 T:morus1280128v1 0.64 0.68 0.70 aes256gcmv1 0.64 0.68 0.70 T:aes128gcmv1 0.74 0.74 0.76 T:aes128otrcv3 0.55? 0.76? 5.00? T:aeadaes192ocbtaglen128v1 0.88 0.91 0.93 T:aes128otrpv3 0.91 0.93 0.94 T:deoxysii128v141 0.93 0.94 0.94 T:colm0v1 0.92 0.96 0.97 T:deoxysi128v141 0.95 0.96 0.97 T:aes256otrcv3 0.95 1.00 1.05 T:aeadaes256ocbtaglen128v1 1.03 1.05 1.06 T:morus640128v2 1.04 1.05 1.06 T:morus640128v1 1.04 1.06 1.10 T:deoxysii256v141 1.03 1.07 1.08 T:deoxysi256v141 1.10 1.13 1.14 T:deoxysneq128128v1 1.16 1.17 1.18 T:deoxyseq128128v1 1.11 1.17 1.19 T:aes256otrpv3 1.23 1.24 1.26 T:deoxysneq256128v1 1.23 1.25 1.26 T:deoxyseq256128v1 1.96 1.99 2.05 T:lunarkeyakv2 1.98 2.03 2.07 T:oceankeyakv2 2.13 2.15 2.16 T:norx6441v2 2.13 2.15 2.16 T:norx6441v3 2.14 2.16 2.17 T:norx6444v3 2.36 2.40 2.43 T:seakeyakv2 2.56 2.58 2.60 T:norx6441v1 3.25 3.26 3.27 T:norx6461v3 3.28 3.29 3.31 T:norx6461v2 3.37 3.40 3.41 T:norx6444v2 3.55 3.60 3.63 T:lakekeyakv2 3.54 3.68 3.73 T:lakekeyakv1 3.86 3.88 3.91 T:norx3241v3 3.85 3.89 3.91 T:norx6461v1 3.88 3.90 3.92 T:norx3241v2 4.30 4.33 4.35 T:norx6444v1 4.50 4.50 4.50 T:aes128otrsv3 4.50 4.50 4.51 T:aes128n12t8clocv3 4.50 4.50 4.51 T:aes128n8t8silcv2 4.50 4.50 4.51 T:aes128n12t8silcv3 4.50 4.50 4.51 T:aes128n8t8clocv2 4.50 4.50 4.52 T:aes128n12t8clocv2 4.50 4.51 4.51 T:aes128n12t8silcv2 4.67 4.69 4.72 T:norx3241v1 5.71 5.76 5.81 T:ketjemajorv2 5.82 5.84 5.86 T:norx3261v2 5.84 5.86 5.89 T:norx3261v3 6.25 6.25 6.25 T:aes256otrsv3 6.83 6.86 6.89 T:acorn128v2 6.83 6.87 6.89 T:riverkeyakv2 4.59? 6.99? 9.32? T:acorn128v3 7.00 7.02 7.06 T:ascon128av11 7.03 7.06 7.13 T:ascon96v1 7.14 7.15 7.21 ascon128av12 7.48 7.49 7.51 T:norx3261v1 7.60 7.66 7.72 T:ketjeminorv2 9.00 9.00 9.00 T:aesjambuv1 10.34 10.39 10.43 T:ascon128v1 10.52 10.54 10.57 T:ascon128v11 10.58 10.62 10.65 ascon128v12 12.44 12.47 12.51 T:aes128otrsv2 12.56 12.62 12.66 T:aes128otrsv1 13.08 13.12 13.16 T:aes128n8clocv1 13.01 13.12 13.17 T:aes128n12clocv1 13.42 13.49 13.54 T:aes128otrpv1 13.66 13.69 13.73 T:aes128otrpv2 14.16 14.18 14.19 T:twine80n6t4clocv3 15.10 15.14 15.15 T:twine80n6t4clocv2 16.40 16.43 16.44 T:aes256otrsv2 16.35 16.45 16.67 T:aes256otrsv1 17.97 18.00 18.02 T:aes256otrpv1 18.00 18.05 18.30 T:aes256otrpv2 23.58 23.63 23.69 T:ketjesrv1 24.17 24.22 24.26 T:aeadaes128ocbtaglen64v1 24.19 24.22 24.26 T:aeadaes128ocbtaglen96v1 25.84 25.86 25.90 T:ketjesrv2 26.04 26.06 26.10 T:colm127v1 26.52 26.55 26.62 T:proest256otrv1 28.56 28.60 28.66 T:aeadaes192ocbtaglen64v1 28.61 28.65 28.68 T:aeadaes192ocbtaglen96v1 33.06 33.08 33.10 T:aeadaes256ocbtaglen64v1 33.08 33.10 33.11 T:aeadaes256ocbtaglen96v1 55.46 55.50 55.53 T:proest128otrv1 56.11 56.17 56.65 T:aezv1 57.14 57.18 57.20 T:ketjejrv1 67.36 67.39 67.40 T:present80n6t4silcv3 77.85 78.54 83.27 T:deoxysneq128128v13 76.46 80.54 81.36 T:deoxyseq128128v13 87.67 87.72 87.78 T:ketjejrv2 120.71 120.96 121.03 T:deoxyseq256128v13 121.27 121.41 122.43 T:deoxysneq256128v13 127.48 127.55 127.80 T:led80n6t4silcv3 342.23 346.59 366.09 T:acorn128 2038.47 2039.06 2044.56 T:led80n6silcv1 2038.89 2041.43 2047.74 T:led80n6t4silcv2 2267.58 2268.26 2273.16 T:present80n6silcv1 2269.90 2271.95 2275.72 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.17? 0.19? 0.20? T:tiaoxinv2 0.17? 0.19? 0.22? T:tiaoxinv1 0.25 0.26 0.26 aegis128l 0.29 0.29 0.30 T:aezv4 0.29 0.30 0.30 T:aezv3 0.32 0.33 0.33 T:aezv5 0.49 0.50 0.51 aegis256 0.52 0.52 0.53 T:aegis128 0.61 0.62 0.62 T:morus1280256v1 0.62 0.62 0.63 T:morus1280128v1 0.62 0.63 0.64 T:morus1280128v2 0.62 0.63 0.64 T:morus1280256v2 0.59? 0.63? 0.67? T:aeadaes128ocbtaglen128v1 0.61? 0.68? 0.71? T:aes128gcmv1 0.66 0.69 0.71 aes256gcmv1 0.74 0.74 0.75 T:aes128otrcv3 0.74 0.75 0.76 T:aeadaes192ocbtaglen128v1 0.89 0.90 0.90 T:aes128otrpv3 0.90 0.93 0.95 T:deoxysii128v141 0.94 0.94 0.95 T:colm0v1 0.96 0.96 0.96 T:aes256otrcv3 0.94 0.96 0.98 T:deoxysi128v141 -3.23? 1.00? 5.45? T:aeadaes256ocbtaglen128v1 1.02 1.03 1.04 T:morus640128v2 1.04 1.05 1.06 T:morus640128v1 1.04 1.06 1.08 T:deoxysi256v141 1.05 1.07 1.10 T:deoxysii256v141 1.11 1.13 1.14 T:deoxysneq128128v1 1.12 1.16 1.16 T:aes256otrpv3 1.16 1.18 1.20 T:deoxyseq128128v1 1.22 1.24 1.26 T:deoxysneq256128v1 1.26 1.29 1.31 T:deoxyseq256128v1 1.93 2.01 2.06 T:lunarkeyakv2 1.93 2.01 2.08 T:oceankeyakv2 2.13 2.15 2.16 T:norx6441v3 2.13 2.15 2.16 T:norx6444v3 2.14 2.15 2.16 T:norx6441v2 2.37 2.40 2.44 T:seakeyakv2 2.56 2.59 2.61 T:norx6441v1 3.23 3.25 3.26 T:norx6461v3 3.25 3.27 3.28 T:norx6461v2 3.40 3.44 3.46 T:norx6444v2 3.56 3.58 3.61 T:lakekeyakv2 3.57 3.67 3.72 T:lakekeyakv1 3.84 3.85 3.89 T:norx6461v1 3.88 3.90 3.92 T:norx3241v3 3.89 3.91 3.92 T:norx3241v2 4.30 4.32 4.35 T:norx6444v1 4.49 4.50 4.51 T:aes128n12t8silcv3 4.49 4.50 4.50 T:aes128n12t8clocv2 4.49 4.50 4.50 T:aes128n8t8silcv2 4.49 4.50 4.51 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128otrsv3 4.49 4.50 4.50 T:aes128n8t8clocv2 4.49 4.50 4.51 T:aes128n12t8clocv3 4.67 4.69 4.73 T:norx3241v1 5.68 5.74 5.78 T:ketjemajorv2 5.81 5.84 5.85 T:norx3261v2 5.84 5.85 5.88 T:norx3261v3 6.25 6.25 6.25 T:aes256otrsv3 6.82 6.85 6.88 T:riverkeyakv2 6.94 6.98 7.03 T:ascon128av11 6.95 6.98 7.00 T:acorn128v3 6.96 7.00 7.04 T:acorn128v2 6.99 7.01 7.04 T:ascon96v1 7.12 7.15 7.17 ascon128av12 7.49 7.51 7.52 T:norx3261v1 7.61 7.67 7.74 T:ketjeminorv2 9.00 9.00 9.00 T:aesjambuv1 10.28 10.33 10.36 T:ascon128v11 10.36 10.40 10.43 T:ascon128v1 10.58 10.63 10.65 ascon128v12 12.41 12.45 12.53 T:aes128otrsv2 12.55 12.62 12.67 T:aes128otrsv1 13.06 13.09 13.12 T:aes128n8clocv1 13.02 13.12 13.17 T:aes128n12clocv1 13.50 13.53 13.57 T:aes128otrpv1 13.64 13.67 13.72 T:aes128otrpv2 14.12 14.17 14.20 T:twine80n6t4clocv3 15.06 15.10 15.15 T:twine80n6t4clocv2 16.36 16.43 16.48 T:aes256otrsv2 16.39 16.46 16.73 T:aes256otrsv1 17.96 17.97 18.01 T:aes256otrpv1 17.98 18.03 18.46 T:aes256otrpv2 23.57 23.60 23.66 T:ketjesrv1 24.17 24.20 24.26 T:aeadaes128ocbtaglen96v1 24.19 24.23 24.27 T:aeadaes128ocbtaglen64v1 25.84 25.89 25.94 T:ketjesrv2 26.00 26.05 26.10 T:colm127v1 26.48 26.54 26.58 T:proest256otrv1 28.60 28.64 28.68 T:aeadaes192ocbtaglen64v1 28.64 28.68 28.70 T:aeadaes192ocbtaglen96v1 33.04 33.08 33.13 T:aeadaes256ocbtaglen64v1 33.06 33.09 33.13 T:aeadaes256ocbtaglen96v1 55.46 55.50 55.54 T:proest128otrv1 55.92 56.15 56.63 T:aezv1 57.12 57.17 57.20 T:ketjejrv1 67.35 67.39 67.44 T:present80n6t4silcv3 77.88 78.53 85.07 T:deoxysneq128128v13 76.43 80.45 81.43 T:deoxyseq128128v13 87.63 87.72 87.79 T:ketjejrv2 120.61 120.65 120.71 T:deoxyseq256128v13 121.14 121.30 122.73 T:deoxysneq256128v13 127.41 127.48 127.59 T:led80n6t4silcv3 362.02 362.10 362.29 T:acorn128 2038.60 2039.09 2044.67 T:led80n6silcv1 2039.80 2045.86 2055.75 T:led80n6t4silcv2 2269.61 2270.75 2278.45 T:present80n6t4silcv2 2269.60 2271.62 2275.99 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.18? 0.19? 0.22? T:tiaoxinv1 0.19 0.19 0.20 T:tiaoxinv2 0.25 0.26 0.26 aegis128l 0.29 0.29 0.30 T:aezv3 0.29 0.30 0.30 T:aezv4 0.32 0.33 0.34 T:aezv5 0.49 0.50 0.51 aegis256 0.52 0.52 0.53 T:aegis128 0.62 0.62 0.63 T:morus1280256v1 0.62 0.62 0.63 T:morus1280128v1 0.62 0.62 0.63 T:morus1280128v2 -3.64? 0.63? 5.04? T:aeadaes128ocbtaglen128v1 0.62 0.63 0.64 T:morus1280256v2 0.67 0.69 0.70 aes256gcmv1 0.60? 0.69? 0.71? T:aes128gcmv1 0.74 0.74 0.75 T:aes128otrcv3 -3.45? 0.75? 0.77? T:aeadaes192ocbtaglen128v1 0.89 0.90 0.90 T:aes128otrpv3 0.92 0.93 0.94 T:deoxysii128v141 0.94 0.95 1.00 T:deoxysi128v141 0.95 0.96 0.96 T:aes256otrcv3 0.89? 0.98? 0.99? T:colm0v1 -3.33? 1.00? 5.42? T:aeadaes256ocbtaglen128v1 1.02 1.02 1.03 T:morus640128v2 1.00 1.05 1.09 T:deoxysi256v141 1.05 1.05 1.06 T:morus640128v1 1.06 1.08 1.11 T:deoxysii256v141 1.10 1.16 1.18 T:deoxysneq128128v1 1.15 1.16 1.17 T:aes256otrpv3 1.18 1.19 1.20 T:deoxyseq128128v1 1.24 1.27 1.28 T:deoxysneq256128v1 1.27 1.29 1.31 T:deoxyseq256128v1 1.95 2.00 2.06 T:lunarkeyakv2 1.97 2.03 2.06 T:oceankeyakv2 2.13 2.15 2.16 T:norx6444v3 2.14 2.15 2.16 T:norx6441v2 2.14 2.15 2.17 T:norx6441v3 2.40 2.42 2.45 T:seakeyakv2 2.58 2.59 2.61 T:norx6441v1 3.22 3.24 3.25 T:norx6461v3 3.25 3.26 3.28 T:norx6461v2 3.40 3.44 3.46 T:norx6444v2 3.55 3.57 3.59 T:lakekeyakv2 3.61 3.67 3.72 T:lakekeyakv1 3.81 3.84 3.86 T:norx6461v1 3.89 3.89 3.91 T:norx3241v3 3.89 3.90 3.91 T:norx3241v2 4.30 4.33 4.36 T:norx6444v1 4.44 4.50 4.50 T:aes128n8t8silcv2 4.44 4.50 4.50 T:aes128n12t8silcv3 4.44 4.50 4.51 T:aes128n12t8clocv2 4.44 4.50 4.50 T:aes128n8t8clocv2 4.45 4.50 4.51 T:aes128n12t8clocv3 4.49 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128otrsv3 4.68 4.71 4.72 T:norx3241v1 5.68 5.71 5.80 T:ketjemajorv2 5.80 5.83 5.86 T:norx3261v2 5.83 5.85 5.86 T:norx3261v3 6.25 6.25 6.25 T:aes256otrsv3 6.84 6.85 6.88 T:riverkeyakv2 6.96 6.98 7.01 T:acorn128v3 6.96 7.00 7.17 T:ascon128av11 6.80 7.00 7.03 T:acorn128v2 6.98 7.01 7.03 T:ascon96v1 7.12 7.15 7.16 ascon128av12 7.46 7.48 7.50 T:norx3261v1 7.62 7.68 7.74 T:ketjeminorv2 9.00 9.00 9.00 T:aesjambuv1 10.32 10.37 10.49 T:ascon128v11 10.38 10.41 10.43 T:ascon128v1 10.59 10.62 10.65 ascon128v12 12.40 12.46 12.50 T:aes128otrsv2 12.54 12.57 12.64 T:aes128otrsv1 13.08 13.10 13.13 T:aes128n8clocv1 13.04 13.13 13.18 T:aes128n12clocv1 13.52 13.56 13.59 T:aes128otrpv1 13.66 13.68 13.73 T:aes128otrpv2 14.15 14.18 14.23 T:twine80n6t4clocv3 15.09 15.12 15.18 T:twine80n6t4clocv2 16.36 16.41 16.46 T:aes256otrsv2 16.37 16.47 16.69 T:aes256otrsv1 17.96 17.99 18.03 T:aes256otrpv1 17.97 18.03 18.44 T:aes256otrpv2 23.56 23.61 23.65 T:ketjesrv1 24.19 24.23 24.27 T:aeadaes128ocbtaglen96v1 24.22 24.25 24.29 T:aeadaes128ocbtaglen64v1 25.82 25.87 25.92 T:ketjesrv2 26.01 26.04 26.09 T:colm127v1 26.50 26.53 26.58 T:proest256otrv1 28.63 28.65 28.68 T:aeadaes192ocbtaglen64v1 28.66 28.67 28.71 T:aeadaes192ocbtaglen96v1 33.05 33.11 33.12 T:aeadaes256ocbtaglen64v1 33.09 33.11 33.13 T:aeadaes256ocbtaglen96v1 55.45 55.49 55.54 T:proest128otrv1 56.00 56.09 56.66 T:aezv1 50.22? 57.15? 57.20? T:ketjejrv1 67.37 67.39 67.42 T:present80n6t4silcv3 77.98 78.52 85.20 T:deoxysneq128128v13 76.43 80.50 81.44 T:deoxyseq128128v13 87.63 87.68 87.78 T:ketjejrv2 120.67 120.96 121.08 T:deoxyseq256128v13 121.39 121.52 122.73 T:deoxysneq256128v13 127.35 127.42 127.51 T:led80n6t4silcv3 362.04 362.15 362.48 T:acorn128 2038.49 2039.10 2045.68 T:led80n6silcv1 2040.55 2046.50 2055.53 T:led80n6t4silcv2 2268.17 2270.41 2277.55 T:present80n6silcv1 2270.21 2272.38 2277.30 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.29 0.30 0.31 T:tiaoxinv1 0.29 0.30 0.31 T:tiaoxinv2 0.33 0.33 0.34 aegis128l 0.58 0.58 0.60 aegis256 0.59 0.59 0.59 T:aegis128 0.60 0.60 0.61 T:aezv4 0.61 0.61 0.62 T:aezv3 0.63 0.63 0.63 T:aezv5 0.79 0.79 0.80 T:morus1280256v1 0.79 0.79 0.80 T:morus1280128v1 0.80 0.80 0.81 T:morus1280256v2 0.80 0.81 0.81 T:morus1280128v2 0.80? 0.81? 3.64? T:aeadaes128ocbtaglen128v1 0.94 0.94 1.04 T:aeadaes192ocbtaglen128v1 0.97 0.97 0.98 T:aes128otrpv3 1.01 1.01 1.02 T:aes128otrcv3 1.16 1.17 1.18 T:deoxysi128v141 1.18 1.19 1.20 T:aes128gcmv1 1.19 1.20 1.27 T:aeadaes256ocbtaglen128v1 1.20 1.21 1.21 T:morus640128v1 1.21 1.22 1.23 T:morus640128v2 1.27 1.28 1.29 T:aes256otrpv3 1.29 1.30 1.32 T:deoxysi256v141 1.32 1.33 1.34 T:deoxysneq128128v1 1.33 1.33 1.35 aes256gcmv1 1.35 1.35 1.35 T:aes256otrcv3 1.42 1.43 1.44 T:deoxysneq256128v1 1.62 1.63 1.65 T:deoxysii128v141 1.82 1.82 1.83 T:colm0v1 1.85 1.86 1.90 T:deoxysii256v141 1.93 1.95 1.97 T:deoxyseq128128v1 2.14 2.16 2.17 T:deoxyseq256128v1 2.32 2.32 2.35 T:norx6444v3 2.49 2.50 2.51 T:norx6441v2 2.49 2.50 2.51 T:norx6441v3 2.74 2.74 2.74 T:aes128otrsv3 2.90 2.91 2.93 T:norx6441v1 3.60 3.61 3.63 T:seakeyakv2 3.76 3.76 3.76 T:norx6461v3 3.77 3.78 3.78 T:norx6461v2 3.78 3.78 3.79 T:aes256otrsv3 4.19 4.20 4.21 T:norx3241v3 4.20 4.21 4.21 T:norx3241v2 4.33 4.34 4.36 T:lakekeyakv2 4.36 4.37 4.39 T:norx6461v1 4.57 4.58 4.59 T:lakekeyakv1 4.59 4.59 4.60 T:aes128n12t8clocv2 4.59 4.59 4.60 T:aes128n8t8clocv2 4.59 4.59 4.60 T:aes128n12t8clocv3 4.62 4.63 4.63 T:aes128n8t8silcv2 4.63 4.63 4.63 T:aes128n12t8silcv2 4.63 4.63 4.63 T:aes128n12t8silcv3 4.86 4.86 4.92 T:oceankeyakv2 4.95 4.97 4.98 T:norx3241v1 5.26 5.28 5.28 T:norx6444v2 6.19 6.20 6.23 T:norx6444v1 6.32 6.33 6.34 T:norx3261v3 6.33 6.34 6.37 T:norx3261v2 7.27 7.29 7.30 T:ascon128av11 7.31 7.32 7.34 T:ascon96v1 7.36 7.37 7.38 ascon128av12 7.38? 7.39? 8.86? T:acorn128v3 7.58 7.59 7.61 T:riverkeyakv2 7.90 7.91 7.92 T:norx3261v1 8.37 8.38 8.39 T:lunarkeyakv2 8.39 8.40 8.42 T:acorn128v2 8.41 8.42 8.43 T:ketjemajorv2 9.20 9.21 9.21 T:aesjambuv1 9.62 9.64 9.67 T:ketjeminorv2 10.67 10.69 10.69 T:ascon128v1 10.70 10.72 10.73 T:ascon128v11 10.76 10.80 10.82 ascon128v12 14.39 14.41 14.46 T:aes128otrsv2 14.40 14.41 14.45 T:aes128otrsv1 14.62 14.63 14.65 T:twine80n6t4clocv3 14.61 14.65 14.67 T:aes128otrpv1 14.74 14.76 14.80 T:aes128otrpv2 15.65 15.66 15.68 T:twine80n6t4clocv2 18.36 18.41 18.51 T:aes256otrsv1 18.42 18.48 18.57 T:aes256otrsv2 19.15 19.19 19.21 T:aes128n8clocv1 19.14 19.19 19.22 T:aes128n12clocv1 19.27 19.30 19.34 T:aes256otrpv1 19.31 19.33 19.43 T:aes256otrpv2 25.11 25.12 25.13 T:aeadaes128ocbtaglen64v1 25.14 25.17 25.18 T:aeadaes128ocbtaglen96v1 27.52 27.55 27.58 T:ketjesrv1 28.68 28.70 28.71 T:proest256otrv1 29.17 29.39 29.41 T:ketjesrv2 29.60 29.61 29.63 T:aeadaes192ocbtaglen96v1 29.60 29.64 31.06 T:aeadaes192ocbtaglen64v1 34.19 34.21 34.23 T:aeadaes256ocbtaglen64v1 34.23 34.24 34.26 T:aeadaes256ocbtaglen96v1 41.53 41.55 41.57 T:colm127v1 57.29 57.32 57.33 T:proest128otrv1 62.76 62.78 62.86 T:ketjejrv1 68.59 68.60 68.62 T:present80n6t4silcv3 78.66 78.72 82.09 T:deoxysneq128128v13 91.88 91.96 92.19 T:ketjejrv2 114.38 114.52 114.86 T:aezv1 122.29 122.39 123.33 T:deoxysneq256128v13 117.82 122.98 125.72 T:deoxyseq128128v13 128.98 128.99 129.05 T:led80n6t4silcv3 184.44 184.56 184.71 T:deoxyseq256128v13 409.14 409.45 415.16 T:acorn128 3074.21 3075.95 3077.53 T:led80n6silcv1 3080.80 3081.81 3083.03 T:led80n6t4silcv2 3424.12 3426.13 3427.23 T:present80n6silcv1 3426.16 3426.94 3427.88 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.35 0.35 0.35 aegis128l 0.36 0.36 0.37 T:tiaoxinv1 0.36 0.37 0.37 T:tiaoxinv2 0.59 0.59 0.60 T:aezv4 0.59 0.59 0.60 T:aegis128 0.60 0.60 0.62 T:aezv3 0.61 0.61 0.62 T:aezv5 0.62 0.63 0.63 aegis256 0.81 0.81 0.82 T:morus1280256v1 0.81 0.81 0.81 T:morus1280128v1 0.82 0.82 0.83 T:morus1280256v2 0.82 0.82 0.82 T:morus1280128v2 0.83 0.83 0.92 T:aeadaes128ocbtaglen128v1 0.96 0.96 1.03 T:aeadaes192ocbtaglen128v1 0.98 0.98 0.99 T:aes128otrpv3 1.02 1.03 1.04 T:aes128otrcv3 1.20 1.21 1.21 T:morus640128v1 1.21 1.22 1.22 T:morus640128v2 1.23? 1.24? 3.94? T:aeadaes256ocbtaglen128v1 1.28 1.28 1.29 T:aes256otrpv3 1.34 1.34 1.36 T:deoxysi128v141 1.35 1.36 1.38 T:aes128gcmv1 1.37 1.37 1.38 T:aes256otrcv3 1.54 1.55 1.55 T:deoxysi256v141 1.61 1.61 1.62 T:deoxysneq128128v1 1.67 1.68 1.69 T:deoxysii128v141 1.69 1.69 1.71 T:deoxysneq256128v1 1.71 1.72 1.73 aes256gcmv1 1.84 1.85 1.89 T:colm0v1 1.94 1.95 1.98 T:deoxysii256v141 2.31 2.32 2.33 T:norx6444v3 2.45 2.45 2.48 T:deoxyseq128128v1 2.46 2.47 2.47 T:norx6441v2 2.47 2.47 2.47 T:norx6441v3 2.60 2.60 2.61 T:deoxyseq256128v1 2.76 2.76 2.76 T:aes128otrsv3 2.89 2.90 2.91 T:norx6441v1 3.64 3.66 3.68 T:seakeyakv2 3.72 3.73 3.73 T:norx6461v3 3.73 3.74 3.75 T:norx6461v2 3.80 3.81 3.81 T:aes256otrsv3 4.16 4.16 4.18 T:norx3241v2 4.16 4.17 4.17 T:norx3241v3 4.32 4.34 4.34 T:lakekeyakv2 4.35 4.35 4.36 T:norx6461v1 4.56 4.57 4.60 T:aes128n12t8clocv2 4.56 4.57 4.60 T:aes128n12t8clocv3 4.56 4.60 4.60 T:aes128n8t8clocv2 4.60 4.61 4.61 T:aes128n8t8silcv2 4.60 4.61 4.62 T:aes128n12t8silcv3 4.61 4.61 4.61 T:aes128n12t8silcv2 4.60 4.62 4.64 T:lakekeyakv1 4.90 4.90 4.91 T:norx3241v1 4.92 4.93 4.97 T:oceankeyakv2 5.28 5.30 5.32 T:norx6444v2 6.17 6.19 6.19 T:norx6444v1 6.32 6.32 6.33 T:norx3261v3 6.31 6.32 6.33 T:norx3261v2 7.32 7.33 7.42 T:ascon128av11 7.34 7.35 7.37 T:ascon96v1 7.38 7.39 7.40 ascon128av12 7.65 7.66 7.68 T:riverkeyakv2 7.85 7.85 7.86 T:norx3261v1 7.85 7.86 7.87 T:acorn128v3 8.40 8.42 8.45 T:lunarkeyakv2 8.44 8.45 8.48 T:ketjemajorv2 8.51 8.59 8.61 T:acorn128v2 9.35 9.36 9.36 T:aesjambuv1 9.99 10.00 10.03 T:ketjeminorv2 10.56 10.59 10.61 T:ascon128v11 10.61 10.63 10.65 T:ascon128v1 10.79 10.82 10.84 ascon128v12 14.52 14.55 14.61 T:aes128otrsv2 14.61 14.63 14.70 T:aes128otrsv1 14.72 14.73 14.74 T:twine80n6t4clocv3 14.80 14.82 14.84 T:aes128otrpv1 14.98 15.02 15.04 T:aes128otrpv2 15.62 15.63 15.64 T:twine80n6t4clocv2 18.64 18.68 18.75 T:aes128n12clocv1 18.72 18.75 18.78 T:aes256otrsv2 18.72 18.78 18.83 T:aes256otrsv1 18.92 18.93 18.98 T:aes128n8clocv1 19.48 19.48 19.52 T:aes256otrpv1 19.58 19.62 19.79 T:aes256otrpv2 28.20 28.22 28.25 T:ketjesrv1 28.66 28.67 28.68 T:proest256otrv1 29.18 29.20 29.44 T:ketjesrv2 29.61 29.63 29.71 T:aeadaes128ocbtaglen64v1 29.71 29.72 29.75 T:aeadaes128ocbtaglen96v1 35.16 35.18 36.43 T:aeadaes192ocbtaglen64v1 35.17 35.19 35.25 T:aeadaes192ocbtaglen96v1 40.77 40.81 40.84 T:aeadaes256ocbtaglen96v1 40.77 40.81 40.84 T:aeadaes256ocbtaglen64v1 49.95 50.06 50.12 T:colm127v1 57.49 57.51 57.53 T:proest128otrv1 62.51 62.53 62.54 T:ketjejrv1 68.69 68.70 68.72 T:present80n6t4silcv3 92.92 92.95 93.00 T:ketjejrv2 94.62 94.65 99.05 T:deoxysneq128128v13 114.64 115.03 115.42 T:aezv1 117.70 122.79 125.70 T:deoxyseq128128v13 128.68 128.72 129.52 T:led80n6t4silcv3 140.13 140.26 141.35 T:deoxysneq256128v13 184.44 184.49 184.56 T:deoxyseq256128v13 411.63 411.68 422.02 T:acorn128 3074.66 3076.55 3078.05 T:led80n6silcv1 3082.27 3083.90 3088.91 T:led80n6t4silcv2 3424.55 3426.54 3428.47 T:present80n6silcv1 3425.91 3426.61 3427.79 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.35 0.35 0.35 aegis128l 0.36 0.36 0.36 T:aezv4 0.36 0.36 0.38 T:tiaoxinv2 0.36 0.37 0.38 T:tiaoxinv1 0.36 0.37 0.37 T:aezv3 0.38 0.38 0.39 T:aezv5 0.59 0.59 0.60 T:aegis128 0.62 0.62 0.63 aegis256 0.81 0.81 0.82 T:morus1280128v1 0.81 0.81 0.82 T:morus1280256v1 0.82 0.82 0.82 T:morus1280256v2 0.82 0.82 0.83 T:morus1280128v2 0.83? 0.84? 3.54? T:aeadaes128ocbtaglen128v1 0.96? 0.96? 3.76? T:aeadaes192ocbtaglen128v1 0.98 0.98 0.99 T:aes128otrpv3 1.02 1.03 1.03 T:aes128otrcv3 1.20 1.21 1.21 T:morus640128v1 1.21 1.22 1.22 T:morus640128v2 1.23? 1.25? 3.92? T:aeadaes256ocbtaglen128v1 1.28 1.28 1.29 T:aes256otrpv3 1.33 1.34 1.35 T:deoxysi128v141 1.34 1.35 1.36 T:aes128gcmv1 1.37 1.37 1.38 T:aes256otrcv3 1.54 1.54 1.56 T:deoxysi256v141 1.58 1.59 1.61 T:deoxysneq128128v1 1.66 1.67 1.68 T:deoxysii128v141 1.67 1.68 1.70 T:deoxysneq256128v1 1.71 1.71 1.73 aes256gcmv1 1.84 1.88 1.88 T:colm0v1 1.93 1.94 1.96 T:deoxysii256v141 2.31 2.31 2.32 T:norx6444v3 2.45 2.46 2.49 T:deoxyseq128128v1 2.46 2.47 2.48 T:norx6441v3 2.46 2.47 2.48 T:norx6441v2 2.60 2.61 2.62 T:deoxyseq256128v1 2.76 2.76 2.76 T:aes128otrsv3 2.90 2.91 2.91 T:norx6441v1 3.66 3.67 3.69 T:seakeyakv2 3.72 3.73 3.74 T:norx6461v3 3.73 3.74 3.75 T:norx6461v2 3.80 3.80 3.81 T:aes256otrsv3 4.15 4.16 4.17 T:norx3241v3 4.15 4.16 4.18 T:norx3241v2 4.33 4.34 4.35 T:norx6461v1 4.34 4.35 4.36 T:lakekeyakv2 4.56 4.56 4.60 T:aes128n12t8clocv3 4.56 4.59 4.60 T:aes128n8t8clocv2 4.57 4.59 4.60 T:aes128n12t8clocv2 4.59 4.60 4.60 T:aes128n8t8silcv2 4.60 4.60 4.60 T:aes128n12t8silcv3 4.60 4.60 4.60 T:aes128n12t8silcv2 4.63 4.64 4.66 T:lakekeyakv1 4.89 4.90 4.91 T:norx3241v1 4.92 4.94 4.95 T:oceankeyakv2 5.30 5.30 5.31 T:norx6444v2 6.17 6.18 6.20 T:norx6444v1 6.30 6.31 6.32 T:norx3261v3 6.30 6.31 6.32 T:norx3261v2 7.31 7.32 7.34 T:ascon128av11 7.35 7.36 7.37 T:ascon96v1 7.38 7.39 7.40 ascon128av12 7.66 7.67 7.68 T:riverkeyakv2 7.85 7.86 7.88 T:acorn128v3 7.85 7.86 7.86 T:norx3261v1 8.42 8.43 8.45 T:lunarkeyakv2 8.47 8.49 8.51 T:ketjemajorv2 8.50 8.57 8.60 T:acorn128v2 9.35 9.36 9.36 T:aesjambuv1 10.02 10.03 10.05 T:ketjeminorv2 10.60 10.60 10.63 T:ascon128v11 10.60 10.62 10.63 T:ascon128v1 10.79 10.81 10.83 ascon128v12 14.53 14.59 14.61 T:aes128otrsv2 14.61 14.65 14.69 T:aes128otrsv1 14.72 14.73 14.74 T:twine80n6t4clocv3 14.81 14.83 14.86 T:aes128otrpv1 15.01 15.03 15.05 T:aes128otrpv2 15.62 15.62 15.63 T:twine80n6t4clocv2 18.67 18.69 18.72 T:aes128n12clocv1 18.71 18.75 18.85 T:aes256otrsv1 18.74 18.77 18.82 T:aes256otrsv2 18.92 18.94 18.95 T:aes128n8clocv1 19.49 19.50 19.53 T:aes256otrpv1 19.59 19.61 19.79 T:aes256otrpv2 28.20 28.24 28.26 T:ketjesrv1 28.66 28.67 28.70 T:proest256otrv1 29.19 29.22 29.44 T:ketjesrv2 29.61 29.63 29.68 T:aeadaes128ocbtaglen64v1 29.69 29.72 29.73 T:aeadaes128ocbtaglen96v1 35.14 35.17 36.40 T:aeadaes192ocbtaglen64v1 35.15 35.19 35.21 T:aeadaes192ocbtaglen96v1 40.76 40.79 40.83 T:aeadaes256ocbtaglen64v1 40.78 40.80 40.86 T:aeadaes256ocbtaglen96v1 49.96 50.04 50.09 T:colm127v1 57.48 57.50 57.51 T:proest128otrv1 62.55 62.57 62.77 T:ketjejrv1 68.69 68.70 68.72 T:present80n6t4silcv3 92.95 92.97 93.04 T:ketjejrv2 94.66 94.70 99.11 T:deoxysneq128128v13 114.50 114.55 115.05 T:aezv1 118.05 122.81 125.71 T:deoxyseq128128v13 128.63 128.71 129.47 T:led80n6t4silcv3 140.22 140.47 141.46 T:deoxysneq256128v13 184.36 184.54 184.70 T:deoxyseq256128v13 411.59 411.67 422.06 T:acorn128 3074.71 3076.23 3078.38 T:led80n6silcv1 3081.92 3084.40 3088.50 T:led80n6t4silcv2 3423.83 3426.10 3428.16 T:present80n6t4silcv2 3423.58 3427.63 3428.60 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.59 1.66 1.72 T:aegis128 1.75? 1.84? 2.06? aegis128l 2.09? 2.16? 2.34? T:tiaoxinv1 2.12? 2.22? 2.59? T:tiaoxinv2 2.19 2.28 2.31 aegis256 2.62? 2.69? 3.00? T:aezv4 2.72? 2.78? 3.28? T:aezv5 2.91? 2.94? 3.38? T:aezv3 4.03 4.09 4.25 T:aes128otrpv3 4.12 4.16 4.28 T:morus640128v1 4.25 4.34 4.50 T:morus1280256v1 4.28 4.34 4.56 T:morus1280128v1 4.38 4.41 4.56 T:morus640128v2 4.31? 4.53? 72.06? T:aeadaes128ocbtaglen128v1 4.53 4.59 4.75 T:morus1280256v2 4.53 4.62 4.81 T:morus1280128v2 4.69? 4.84? 68.22? T:aeadaes192ocbtaglen128v1 5.00 5.03 5.09 T:aes128otrsv3 5.41 5.44 5.53 T:aes256otrpv3 5.41? 5.47? 7.41? T:aeadaes256ocbtaglen128v1 5.66 5.81 5.91 T:colm0v1 5.69 5.84 6.06 T:deoxysneq128128v1 5.81 5.84 5.91 T:aes128otrcv3 5.75 5.88 5.94 T:deoxysi128v141 5.91 5.91 5.97 T:aes128n12t8clocv2 5.91 5.97 6.00 T:aes128n8t8clocv2 5.94 5.97 6.03 T:aes128n12t8clocv3 6.28 6.38 6.47 T:deoxysneq256128v1 6.50 6.53 6.62 T:aes128gcmv1 6.66 6.81 6.91 T:aes128n12t8silcv2 6.69 6.81 6.91 T:aes128n8t8silcv2 6.72 6.81 6.84 T:aes128n12t8silcv3 6.84 6.88 6.91 T:aes256otrsv3 7.16 7.28 7.34 T:deoxysi256v141 7.47 7.53 7.62 aes256gcmv1 7.88 7.91 7.94 T:aes256otrcv3 8.06 8.12 8.25 T:deoxyseq128128v1 8.22 8.28 8.34 T:norx6441v2 8.28 8.31 8.38 T:norx6441v3 8.22 8.38 8.50 T:norx6441v1 9.91 10.03 10.22 T:deoxyseq256128v1 10.31 10.38 10.53 T:norx3241v1 10.34 10.41 10.56 T:norx3241v2 10.34 10.47 10.72 T:norx3241v3 10.50 10.69 10.72 T:deoxysii128v141 10.81 11.03 11.22 T:ascon128av11 11.03 11.16 11.56 T:ascon96v1 11.19 11.31 11.53 ascon128av12 12.25 12.28 12.38 T:deoxysii256v141 12.28 12.34 12.38 T:aesjambuv1 12.31 12.34 12.50 T:norx6461v1 12.38 12.44 12.50 T:norx6461v3 12.41 12.50 12.59 T:norx6461v2 14.03 14.16 14.28 T:ascon128v1 14.03 14.16 14.41 T:ascon128v11 14.38 14.44 14.56 ascon128v12 15.12 15.25 15.38 T:norx6444v3 15.12 15.47 15.94 T:lakekeyakv1 15.50 15.59 15.69 T:norx3261v2 15.53 15.59 15.72 T:norx3261v3 16.38 16.47 16.50 T:norx3261v1 17.72 18.06 18.19 T:riverkeyakv2 18.69 18.88 19.22 T:lakekeyakv2 20.75 20.78 20.84 T:twine80n6t4clocv3 21.72 21.75 21.81 T:twine80n6t4clocv2 23.88 23.97 24.22 T:aes128n8clocv1 24.41 24.47 25.03 T:aes128otrsv2 24.12 24.59 25.53 T:aes128n12clocv1 24.56 24.75 24.94 T:aes128otrsv1 24.94 25.00 25.19 T:aes128otrpv2 25.03 25.19 25.28 T:aes128otrpv1 30.50? 30.69? 66.56? T:acorn128v3 31.12 31.41 31.62 T:aes256otrsv2 31.34 31.53 31.97 T:aes256otrsv1 32.41 32.53 32.88 T:ketjeminorv2 32.69 32.94 33.12 T:acorn128v2 32.78 32.94 33.16 T:aes256otrpv2 32.81 32.94 33.06 T:aes256otrpv1 33.47 33.59 33.97 T:seakeyakv2 37.94 38.22 38.41 T:norx6444v2 39.84 39.88 40.12 T:aeadaes128ocbtaglen64v1 39.84 40.00 40.78 T:aeadaes128ocbtaglen96v1 44.19 44.41 44.62 T:norx6444v1 44.34 44.44 44.91 T:ketjesrv1 46.06 46.25 46.72 T:aeadaes192ocbtaglen64v1 46.06 46.31 46.81 T:aeadaes192ocbtaglen96v1 49.41 49.59 49.88 T:ketjemajorv2 50.84 51.22 51.56 T:ketjesrv2 53.75 53.81 54.19 T:aeadaes256ocbtaglen64v1 53.59 53.84 54.19 T:aeadaes256ocbtaglen96v1 53.75 54.03 55.25 T:oceankeyakv2 59.78 60.00 60.31 T:colm127v1 82.12 82.44 82.72 T:proest256otrv1 82.84 83.41 84.03 T:ketjejrv1 84.81 85.03 85.22 T:present80n6t4silcv3 88.50 88.84 94.53 T:deoxysneq128128v13 110.72 110.91 111.06 T:proest128otrv1 122.91 123.00 123.22 T:ketjejrv2 132.66 132.84 133.06 T:aezv1 136.44 136.72 137.41 T:lunarkeyakv2 137.53 137.94 138.69 T:deoxysneq256128v13 152.97 153.12 153.53 T:led80n6t4silcv3 147.00 154.91 157.03 T:deoxyseq128128v13 228.91 229.06 229.69 T:deoxyseq256128v13 1381.75 1382.25 1429.53 T:acorn128 3441.41 3442.09 3443.25 T:led80n6silcv1 3447.31 3448.19 3449.09 T:led80n6t4silcv2 3831.47 3833.19 3836.38 T:present80n6t4silcv2 3834.00 3835.00 3836.50 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.72 1.75 1.78 T:aegis128 1.81 1.88 1.97 aegis128l 2.12? 2.16? 2.66? T:tiaoxinv2 2.12? 2.22? 2.38? T:tiaoxinv1 2.31 2.41 2.47 aegis256 2.66 2.69 2.78 T:aezv4 2.72 2.78 2.81 T:aezv5 2.91 2.97 3.16 T:aezv3 4.06 4.09 4.12 T:aes128otrpv3 4.12 4.22 4.38 T:morus640128v1 4.41 4.47 4.59 T:morus1280256v1 4.44 4.47 4.59 T:morus1280128v1 4.44 4.50 4.56 T:morus640128v2 4.69 4.72 4.84 T:morus1280128v2 4.72 4.75 4.81 T:morus1280256v2 4.84? 4.94? 7.84? T:aeadaes128ocbtaglen128v1 5.22 5.22 5.25 T:aes128otrsv3 5.25? 5.47? 7.78? T:aeadaes192ocbtaglen128v1 5.47 5.50 6.06 T:aes256otrpv3 5.84? 6.03? 73.16? T:aeadaes256ocbtaglen128v1 6.00 6.03 6.06 T:aes128n12t8clocv2 6.00 6.06 6.22 T:aes128otrcv3 6.03 6.06 6.09 T:aes128n12t8clocv3 6.06 6.06 6.06 T:aes128n8t8clocv2 6.44? 6.50? 7.59? T:colm0v1 6.59 6.69 6.78 T:aes128gcmv1 7.00 7.06 7.12 T:aes128n8t8silcv2 7.00 7.06 7.16 T:aes128n12t8silcv2 7.03 7.06 7.19 T:aes256otrsv3 7.06 7.12 7.59 T:aes128n12t8silcv3 7.69 7.75 7.84 aes256gcmv1 8.06 8.12 8.31 T:aes256otrcv3 8.38 8.44 8.53 T:norx6441v1 8.41 8.47 8.53 T:norx6441v2 8.44 8.50 8.62 T:norx6441v3 8.66 8.75 8.84 T:deoxysi128v141 8.81 8.88 8.91 T:deoxysneq256128v1 9.03 9.09 9.19 T:deoxysneq128128v1 10.47 10.50 10.56 T:norx3241v1 10.53 10.59 10.66 T:norx3241v2 10.56 10.72 10.81 T:norx3241v3 10.94 11.09 11.47 T:ascon128av11 10.97 11.16 11.38 T:ascon96v1 11.28 11.44 11.53 ascon128av12 11.41 11.50 11.59 T:deoxysi256v141 11.62 11.75 11.84 T:deoxysii128v141 11.88 11.91 12.06 T:deoxyseq128128v1 12.06 12.25 12.41 T:deoxyseq256128v1 12.50 12.50 12.53 T:aesjambuv1 12.47 12.53 12.62 T:norx6461v1 12.53 12.56 12.66 T:norx6461v3 12.56 12.62 12.72 T:norx6461v2 13.78 13.81 13.84 T:deoxysii256v141 14.00 14.06 14.25 T:ascon128v11 14.03 14.12 14.34 T:ascon128v1 14.34 14.53 14.66 ascon128v12 15.03 15.28 15.69 T:lakekeyakv1 15.25 15.34 15.44 T:norx6444v3 15.62 15.78 15.84 T:norx3261v2 15.75 15.88 16.00 T:norx3261v3 16.56 16.62 16.69 T:norx3261v1 17.91 18.03 18.38 T:riverkeyakv2 18.75 18.97 19.34 T:lakekeyakv2 20.84 20.91 21.09 T:twine80n6t4clocv3 21.75 21.81 22.03 T:twine80n6t4clocv2 23.81 23.84 24.28 T:aes128n8clocv1 23.75 24.12 25.03 T:aes128n12clocv1 24.62 24.69 25.03 T:aes128otrsv1 24.44 24.72 25.31 T:aes128otrsv2 25.28 25.38 25.75 T:aes128otrpv1 25.19 25.41 25.69 T:aes128otrpv2 30.56 30.56 30.62 T:acorn128v3 31.25 32.00 32.44 T:aes256otrsv2 31.31 32.12 32.31 T:aes256otrsv1 32.38 32.69 32.88 T:ketjeminorv2 33.06 33.12 33.28 T:acorn128v2 32.97 33.22 33.44 T:aes256otrpv1 33.12 33.34 33.66 T:aes256otrpv2 33.69 33.81 34.19 T:seakeyakv2 38.00 38.34 38.66 T:norx6444v2 44.25 44.31 44.50 T:norx6444v1 44.94 45.25 45.56 T:ketjesrv1 48.16 48.25 48.62 T:aeadaes128ocbtaglen64v1 48.12 48.59 48.75 T:aeadaes128ocbtaglen96v1 49.84 50.03 50.38 T:ketjemajorv2 50.38 50.72 51.09 T:ketjesrv2 54.16 54.44 55.28 T:oceankeyakv2 55.72 55.88 56.09 T:aeadaes192ocbtaglen64v1 55.78 55.88 56.44 T:aeadaes192ocbtaglen96v1 65.25 65.50 66.16 T:aeadaes256ocbtaglen96v1 65.19 65.81 65.91 T:aeadaes256ocbtaglen64v1 68.97 69.22 69.59 T:colm127v1 82.94 83.38 83.75 T:ketjejrv1 83.34 83.47 84.06 T:proest256otrv1 84.81 84.94 85.38 T:present80n6t4silcv3 104.41 105.22 109.69 T:deoxysneq128128v13 112.00 113.50 114.66 T:proest128otrv1 123.84 124.19 124.66 T:ketjejrv2 135.75 136.00 136.47 T:aezv1 136.53 136.81 137.31 T:lunarkeyakv2 153.28 153.81 154.66 T:led80n6t4silcv3 146.62 155.41 156.88 T:deoxyseq128128v13 155.56 155.88 156.75 T:deoxysneq256128v13 228.97 229.34 229.78 T:deoxyseq256128v13 1426.91 1429.19 1435.84 T:acorn128 3440.03 3441.69 3442.44 T:led80n6silcv1 3448.81 3450.94 3456.81 T:led80n6t4silcv2 3831.31 3832.28 3833.84 T:present80n6t4silcv2 3834.88 3836.34 3838.06 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.75 1.75 1.78 T:aegis128 1.84 1.88 1.94 aegis128l 2.09 2.12 2.31 T:tiaoxinv1 2.12? 2.16? 2.50? T:tiaoxinv2 2.12? 2.16? 2.78? T:aezv4 2.22? 2.25? 2.97? T:aezv3 2.22? 2.25? 3.00? T:aezv5 2.31 2.34 2.41 aegis256 4.06 4.09 4.12 T:aes128otrpv3 4.12 4.16 4.22 T:morus640128v1 4.38 4.44 4.47 T:morus1280256v1 4.41 4.44 4.44 T:morus1280128v1 4.44 4.44 4.56 T:morus640128v2 4.66 4.69 4.75 T:morus1280256v2 4.69 4.72 4.81 T:morus1280128v2 4.84? 4.94? 72.00? T:aeadaes128ocbtaglen128v1 5.22 5.25 5.28 T:aes128otrsv3 5.38 5.41 5.47 T:aeadaes192ocbtaglen128v1 5.47 5.50 5.56 T:aes256otrpv3 5.84? 5.97? 73.69? T:aeadaes256ocbtaglen128v1 5.94 5.97 5.97 T:aes128n12t8clocv3 5.94 5.97 6.00 T:aes128n12t8clocv2 5.94 5.97 6.00 T:aes128n8t8clocv2 6.00 6.03 6.03 T:aes128otrcv3 6.66 6.75 6.81 T:aes128gcmv1 6.69? 6.81? 7.78? T:aes128n12t8silcv3 6.72? 6.91? 7.84? T:aes128n8t8silcv2 6.75? 6.91? 7.81? T:aes128n12t8silcv2 7.00 7.03 7.03 T:aes256otrsv3 6.53? 7.31? 7.56? T:colm0v1 7.69 7.72 7.75 aes256gcmv1 8.09 8.09 8.16 T:aes256otrcv3 8.38 8.41 8.97 T:deoxysneq256128v1 8.38 8.44 8.50 T:norx6441v1 8.41 8.47 8.56 T:norx6441v2 8.47 8.50 8.50 T:norx6441v3 8.53 8.59 8.72 T:deoxysneq128128v1 8.66 8.75 8.88 T:deoxysi128v141 10.41 10.47 10.56 T:norx3241v1 10.56 10.66 10.69 T:norx3241v2 10.66 10.66 10.75 T:norx3241v3 10.88 10.94 11.12 T:ascon128av11 10.94 11.00 11.25 T:ascon96v1 11.38 11.44 11.56 ascon128av12 11.44 11.53 11.69 T:deoxysi256v141 11.59 11.66 11.75 T:deoxysii128v141 11.84 11.91 11.97 T:deoxyseq128128v1 12.12 12.16 12.22 T:deoxyseq256128v1 12.41 12.53 12.59 T:norx6461v1 12.50 12.53 12.56 T:aesjambuv1 12.56 12.59 12.69 T:norx6461v2 12.56 12.59 12.69 T:norx6461v3 13.72 13.81 13.91 T:deoxysii256v141 13.91 14.00 14.28 T:ascon128v11 14.00 14.16 14.44 T:ascon128v1 14.34 14.41 14.44 ascon128v12 15.16 15.41 15.69 T:lakekeyakv1 15.28 15.41 15.53 T:norx6444v3 15.75 15.81 15.84 T:norx3261v2 15.78 15.88 15.94 T:norx3261v3 16.56 16.62 16.69 T:norx3261v1 17.91 18.03 18.25 T:riverkeyakv2 18.84 18.97 19.25 T:lakekeyakv2 20.88 21.06 21.31 T:twine80n6t4clocv3 21.72 21.78 22.09 T:twine80n6t4clocv2 23.59 23.75 24.88 T:aes128n12clocv1 23.78 23.88 24.09 T:aes128n8clocv1 24.53 24.66 25.19 T:aes128otrsv2 24.56 24.72 24.91 T:aes128otrsv1 25.34 25.59 25.94 T:aes128otrpv1 25.31 25.66 25.94 T:aes128otrpv2 30.50 30.56 30.69 T:acorn128v3 31.47 31.62 32.16 T:aes256otrsv2 31.53 31.78 31.94 T:aes256otrsv1 32.72 32.91 33.25 T:ketjeminorv2 33.00 33.09 33.16 T:acorn128v2 33.06 33.25 33.44 T:aes256otrpv1 33.25 33.59 33.72 T:aes256otrpv2 33.81 33.94 34.03 T:seakeyakv2 38.34 38.94 39.12 T:norx6444v2 44.06 44.16 44.22 T:norx6444v1 45.47 45.50 45.69 T:ketjesrv1 48.03 48.22 48.31 T:aeadaes128ocbtaglen64v1 48.09 48.34 48.69 T:aeadaes128ocbtaglen96v1 49.66 49.91 50.38 T:ketjemajorv2 50.72 51.09 51.47 T:ketjesrv2 54.22 54.47 55.00 T:oceankeyakv2 55.72 55.75 55.91 T:aeadaes192ocbtaglen64v1 55.69 55.81 56.03 T:aeadaes192ocbtaglen96v1 65.09 65.12 65.34 T:aeadaes256ocbtaglen96v1 65.19 65.47 65.81 T:aeadaes256ocbtaglen64v1 68.72 68.81 69.06 T:colm127v1 80.81 81.31 81.47 T:proest256otrv1 82.62 83.09 83.66 T:ketjejrv1 84.69 84.84 85.19 T:present80n6t4silcv3 104.41 105.22 109.97 T:deoxysneq128128v13 111.75 111.91 112.25 T:proest128otrv1 124.09 124.31 124.62 T:ketjejrv2 135.91 136.22 136.50 T:aezv1 136.50 136.88 137.44 T:lunarkeyakv2 153.03 153.78 154.19 T:led80n6t4silcv3 146.56 155.31 157.53 T:deoxyseq128128v13 155.16 155.47 156.38 T:deoxysneq256128v13 229.06 229.31 229.97 T:deoxyseq256128v13 1427.41 1428.62 1436.38 T:acorn128 3439.62 3441.00 3442.66 T:led80n6silcv1 3448.59 3450.47 3456.31 T:led80n6t4silcv2 3830.53 3832.25 3833.09 T:present80n6t4silcv2 3834.62 3835.88 3837.25 T:present80n6silcv1