VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20260330

[Page version: 20260408 07:15:09]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.24 0.25 0.25 T:tiaoxinv1 0.24 0.25 0.26 T:tiaoxinv2 0.28 0.29 0.29 aegis128l 0.50 0.51 0.51 aegis256 0.51 0.52 0.53 T:aegis128 -0.44? 0.65? 1.76? T:aeadaes128ocbtaglen128v1 0.65 0.66 0.67 T:morus1280256v2 0.65 0.66 0.67 T:morus1280128v2 0.65 0.66 0.67 T:morus1280256v1 0.65 0.66 0.67 T:morus1280128v1 0.71 0.72 0.72 T:aes128otrcv3 0.71 0.72 0.72 T:aes128otrsv3 0.71 0.72 0.73 T:aezv3 0.72 0.73 0.73 T:aezv4 0.73 0.74 0.75 T:aes128otrpv3 0.75 0.76 0.77 T:aezv5 -0.37? 0.81? 1.98? T:aeadaes192ocbtaglen128v1 0.92 0.93 0.94 T:aes256otrcv3 0.93 0.93 0.94 T:aes256otrsv3 0.95 0.96 0.97 T:aes256otrpv3 0.97 1.00 1.02 T:deoxysi128v141 1.02 1.02 1.04 T:aeadaes256ocbtaglen128v1 1.09 1.10 1.12 T:deoxysi256v141 1.09 1.10 1.11 T:morus640128v1 1.10 1.11 1.12 T:morus640128v2 1.14 1.15 1.17 T:deoxysneq128128v1 1.19? 1.23? 1.37? T:norx6444v3 1.26 1.27 1.29 T:deoxysneq256128v1 1.41 1.42 1.42 T:aes128gcmv1 1.67 1.68 1.69 aes256gcmv1 1.94 1.96 1.98 T:deoxysii128v141 2.13 2.15 2.16 T:norx6441v2 2.15 2.16 2.18 T:norx6441v3 2.16 2.19 2.21 T:deoxysii256v141 2.15 2.21 2.28 T:lunarkeyakv2 2.28 2.32 2.36 T:deoxyseq128128v1 2.31 2.32 2.33 T:colm0v1 2.52 2.54 2.56 T:deoxyseq256128v1 2.59 2.60 2.62 T:norx6441v1 2.90 2.92 2.95 T:seakeyakv2 3.04 3.08 3.11 T:oceankeyakv2 3.23 3.25 3.26 T:norx6461v2 3.23 3.25 3.26 T:norx6461v3 3.86 3.87 3.89 T:norx3241v2 3.87 3.88 3.90 T:norx3241v3 3.88 3.91 3.95 T:norx6461v1 3.97 3.99 4.01 T:norx6444v2 4.10 4.11 4.14 T:lakekeyakv1 4.40 4.48 4.54 T:norx6444v1 4.45 4.48 4.51 T:lakekeyakv2 4.56 4.56 4.57 T:aes128n12t8silcv3 4.56 4.56 4.57 T:aes128n8t8silcv2 4.56 4.56 4.57 T:aes128n12t8silcv2 4.56 4.57 4.57 T:aes128n8t8clocv2 4.57 4.57 4.57 T:aes128n12t8clocv3 4.57 4.57 4.57 T:aes128n12t8clocv2 4.69 4.71 4.73 T:norx3241v1 5.83 5.85 5.88 T:norx3261v3 5.89 5.91 5.93 T:norx3261v2 6.02 6.03 6.05 T:acorn128v3 7.20 7.21 7.23 T:ascon128av11 7.20 7.22 7.24 T:ascon96v1 7.22 7.24 7.26 ascon128av12 7.45 7.48 7.51 T:ketjemajorv2 7.47 7.48 7.50 T:norx3261v1 7.58 7.63 7.66 T:acorn128v2 9.12 9.14 9.14 T:aesjambuv1 9.45 9.49 9.53 T:ketjeminorv2 9.90 9.93 9.96 T:riverkeyakv2 10.55 10.58 10.60 T:ascon128v1 10.55 10.58 10.59 T:ascon128v11 10.59 10.70 10.73 ascon128v12 14.58 14.59 14.60 T:twine80n6t4clocv3 14.80 14.82 14.86 T:aes128otrpv1 14.82 14.85 14.88 T:aes128otrpv2 15.23 15.27 15.30 T:aes128otrsv1 15.35 15.42 15.68 T:aes128otrsv2 15.64 15.66 15.68 T:twine80n6t4clocv2 19.04 19.12 19.17 T:aes256otrsv1 19.22 19.28 19.35 T:aes256otrsv2 19.29 19.32 19.35 T:aes256otrpv1 19.56 19.58 19.61 T:aes256otrpv2 24.62 24.69 24.75 T:aes128n12clocv1 24.71 24.75 24.80 T:aes128n8clocv1 24.78 24.81 24.83 T:aeadaes128ocbtaglen64v1 24.81 24.84 24.86 T:aeadaes128ocbtaglen96v1 26.12 26.18 26.21 T:proest256otrv1 29.18 29.21 29.23 T:aeadaes192ocbtaglen64v1 29.21 29.25 29.27 T:aeadaes192ocbtaglen96v1 29.76 29.87 30.13 T:ketjesrv1 30.59 30.63 31.09 T:ketjesrv2 33.63 33.67 33.71 T:aeadaes256ocbtaglen64v1 33.69 33.73 33.79 T:aeadaes256ocbtaglen96v1 54.41 54.45 54.48 T:proest128otrv1 54.98 55.02 55.07 T:colm127v1 59.98 60.35 60.96 T:ketjejrv1 68.44 68.47 68.49 T:present80n6t4silcv3 76.64 76.94 77.10 T:deoxysneq128128v13 93.85 94.59 94.87 T:ketjejrv2 121.51 121.66 122.64 T:deoxysneq256128v13 128.54 128.62 128.73 T:led80n6t4silcv3 156.86 157.70 158.09 T:deoxyseq128128v13 177.55 177.73 178.10 T:aezv1 244.35 245.21 248.71 T:deoxyseq256128v13 283.08? 342.44? 614.44? T:acorn128 4073.90 4081.33 4129.38 T:led80n6silcv1 4085.53 4088.18 4090.90 T:led80n6t4silcv2 4539.33 4542.59 4544.55 T:present80n6t4silcv2 4540.25 4543.24 4545.40 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.29 0.30 0.31 aegis128l 0.38 0.39 0.39 T:tiaoxinv1 0.39 0.39 0.39 T:tiaoxinv2 0.56 0.56 0.57 T:aegis128 0.59 0.59 0.60 aegis256 0.66 0.67 0.68 T:morus1280256v2 0.66 0.68 0.69 T:morus1280128v2 0.67 0.68 0.69 T:morus1280128v1 0.67 0.68 0.69 T:morus1280256v1 0.70 0.70 0.71 T:aezv4 0.70 0.71 0.72 T:aezv3 0.71 0.72 0.73 T:aezv5 -0.39? 0.72? 1.81? T:aeadaes128ocbtaglen128v1 0.74 0.74 0.75 T:aes128otrsv3 0.74 0.74 0.75 T:aes128otrcv3 0.74 0.75 0.76 T:aes128otrpv3 -0.32? 0.84? 1.98? T:aeadaes192ocbtaglen128v1 0.95 0.96 0.97 T:aes256otrcv3 0.95 0.96 0.97 T:aes256otrsv3 0.97 0.98 1.00 T:aes256otrpv3 1.09 1.10 1.11 T:morus640128v1 1.09 1.11 1.12 T:morus640128v2 1.11 1.12 1.13 T:aeadaes256ocbtaglen128v1 1.19 1.20 1.21 T:deoxysi128v141 1.21 1.24 1.30 T:norx6444v3 1.32 1.33 1.34 T:deoxysi256v141 1.52 1.53 1.54 T:deoxysneq128128v1 1.63 1.64 1.65 T:deoxysneq256128v1 1.75 1.76 1.77 T:aes128gcmv1 1.93 1.97 1.98 T:deoxysii128v141 2.07 2.09 2.10 T:norx6441v3 2.07 2.09 2.10 T:norx6441v2 2.16 2.18 2.19 T:deoxysii256v141 2.21 2.29 2.35 T:lunarkeyakv2 2.28 2.31 2.34 T:colm0v1 2.39 2.41 2.42 aes256gcmv1 2.54 2.56 2.57 T:norx6441v1 2.95 2.98 3.00 T:seakeyakv2 3.05 3.06 3.08 T:deoxyseq128128v1 3.10 3.13 3.17 T:oceankeyakv2 3.16 3.18 3.20 T:norx6461v3 3.17 3.18 3.20 T:norx6461v2 3.27 3.28 3.30 T:deoxyseq256128v1 3.78 3.79 3.81 T:norx3241v3 3.79 3.80 3.81 T:norx3241v2 3.85 3.87 3.89 T:norx6461v1 3.96 3.99 4.03 T:norx6444v2 4.17 4.20 4.22 T:lakekeyakv1 4.40 4.43 4.47 T:norx6444v1 4.43 4.46 4.49 T:lakekeyakv2 4.49 4.50 4.51 T:aes128n12t8silcv2 4.49 4.50 4.50 T:aes128n12t8silcv3 4.49 4.50 4.51 T:aes128n8t8silcv2 4.50 4.50 4.50 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128n12t8clocv3 4.50 4.50 4.50 T:aes128n8t8clocv2 4.56 4.57 4.59 T:norx3241v1 5.80 5.83 5.85 T:norx3261v3 5.84 5.86 5.88 T:norx3261v2 6.78 6.79 6.82 T:acorn128v3 7.26 7.28 7.32 ascon128av12 7.31 7.34 7.36 T:ascon128av11 7.29 7.37 7.43 T:ascon96v1 7.33 7.37 7.41 T:ketjemajorv2 7.36 7.38 7.40 T:norx3261v1 7.78 7.80 7.82 T:acorn128v2 9.43 9.43 9.44 T:aesjambuv1 10.07 10.09 10.11 T:riverkeyakv2 10.31 10.34 10.38 T:ketjeminorv2 10.50 10.54 10.56 T:ascon128v11 10.52 10.54 10.56 T:ascon128v1 10.64 10.67 10.70 ascon128v12 14.76 14.79 14.80 T:twine80n6t4clocv3 15.07 15.10 15.14 T:aes128otrpv1 15.19 15.33 15.40 T:aes128otrpv2 15.54 15.56 15.58 T:twine80n6t4clocv2 15.64 15.68 15.72 T:aes128otrsv1 15.63 15.69 15.97 T:aes128otrsv2 19.64 19.68 19.72 T:aes256otrpv1 19.64 19.70 19.75 T:aes256otrsv2 19.74 19.78 19.81 T:aes256otrpv2 19.76 19.83 19.90 T:aes256otrsv1 23.63 23.68 23.74 T:aes128n12clocv1 24.21 24.27 24.31 T:aes128n8clocv1 25.97 26.01 26.06 T:proest256otrv1 31.02 31.13 31.33 T:ketjesrv1 31.51 31.56 31.62 T:ketjesrv2 33.43 33.47 33.52 T:aeadaes128ocbtaglen64v1 33.42 33.52 33.58 T:aeadaes128ocbtaglen96v1 39.86 39.92 39.96 T:aeadaes192ocbtaglen64v1 39.86 39.92 39.99 T:aeadaes192ocbtaglen96v1 46.36 46.44 46.53 T:aeadaes256ocbtaglen96v1 46.36 46.47 46.58 T:aeadaes256ocbtaglen64v1 54.70 54.75 54.80 T:proest128otrv1 61.33 61.59 62.15 T:ketjejrv1 68.59 68.63 68.65 T:present80n6t4silcv3 72.39 72.45 72.53 T:colm127v1 94.39 95.51 95.70 T:ketjejrv2 108.82 109.00 109.09 T:deoxysneq128128v13 128.82 128.97 129.01 T:led80n6t4silcv3 156.59 156.88 157.78 T:deoxyseq128128v13 157.57 157.97 158.57 T:deoxysneq256128v13 177.20 177.44 177.83 T:aezv1 244.08 244.98 248.47 T:deoxyseq256128v13 303.54? 362.11? 643.22? T:acorn128 4076.48 4079.33 4082.86 T:led80n6silcv1 4082.84 4086.55 4088.62 T:led80n6t4silcv2 4539.69 4542.32 4545.01 T:present80n6t4silcv2 4538.28 4542.61 4544.33 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.26 0.27 0.28 T:aezv4 0.27 0.28 0.28 T:aezv3 0.28 0.28 0.29 T:aezv5 0.29 0.30 0.31 aegis128l 0.38 0.39 0.40 T:tiaoxinv2 0.38 0.39 0.40 T:tiaoxinv1 0.56 0.56 0.57 T:aegis128 0.59 0.60 0.60 aegis256 0.66 0.67 0.68 T:morus1280256v1 0.67 0.67 0.68 T:morus1280128v1 0.67 0.68 0.68 T:morus1280128v2 0.67 0.68 0.69 T:morus1280256v2 -0.33? 0.72? 1.78? T:aeadaes128ocbtaglen128v1 0.74 0.74 0.75 T:aes128otrcv3 0.74 0.75 0.75 T:aes128otrsv3 0.74 0.75 0.76 T:aes128otrpv3 -0.24? 0.84? 2.01? T:aeadaes192ocbtaglen128v1 0.95 0.96 0.97 T:aes256otrsv3 0.95 0.96 0.97 T:aes256otrcv3 0.97 0.98 0.99 T:aes256otrpv3 1.10 1.10 1.11 T:morus640128v1 1.10 1.11 1.12 T:morus640128v2 1.11 1.12 1.13 T:aeadaes256ocbtaglen128v1 1.19 1.20 1.21 T:deoxysi128v141 1.22 1.25 1.30 T:norx6444v3 1.32 1.32 1.33 T:deoxysi256v141 1.52 1.53 1.54 T:deoxysneq128128v1 1.63 1.64 1.65 T:deoxysneq256128v1 1.75 1.76 1.77 T:aes128gcmv1 1.92 1.97 1.98 T:deoxysii128v141 2.07 2.08 2.10 T:norx6441v3 2.08 2.09 2.10 T:norx6441v2 2.16 2.18 2.20 T:deoxysii256v141 2.28 2.30 2.32 T:colm0v1 2.21 2.31 2.39 T:lunarkeyakv2 2.39 2.41 2.42 aes256gcmv1 2.54 2.55 2.57 T:norx6441v1 2.98 3.00 3.02 T:seakeyakv2 3.06 3.07 3.08 T:deoxyseq128128v1 3.13 3.15 3.18 T:oceankeyakv2 3.16 3.18 3.20 T:norx6461v3 3.17 3.18 3.20 T:norx6461v2 3.27 3.29 3.31 T:deoxyseq256128v1 3.78 3.79 3.81 T:norx3241v3 3.78 3.80 3.81 T:norx3241v2 3.85 3.87 3.88 T:norx6461v1 4.01 4.03 4.05 T:norx6444v2 4.18 4.21 4.23 T:lakekeyakv1 4.43 4.46 4.49 T:norx6444v1 4.44 4.47 4.50 T:lakekeyakv2 4.48 4.50 4.51 T:aes128n8t8silcv2 4.48 4.50 4.51 T:aes128n12t8silcv3 4.49 4.50 4.51 T:aes128n12t8silcv2 4.50 4.50 4.51 T:aes128n8t8clocv2 4.50 4.50 4.51 T:aes128n12t8clocv3 4.49 4.51 4.51 T:aes128n12t8clocv2 4.55 4.57 4.58 T:norx3241v1 5.80 5.83 5.85 T:norx3261v3 5.83 5.85 5.87 T:norx3261v2 6.78 6.80 6.82 T:acorn128v3 7.27 7.29 7.32 ascon128av12 7.31 7.34 7.36 T:ascon128av11 7.29 7.36 7.42 T:ascon96v1 7.36 7.38 7.40 T:norx3261v1 7.36 7.40 7.44 T:ketjemajorv2 7.77 7.79 7.81 T:acorn128v2 9.43 9.43 9.44 T:aesjambuv1 10.09 10.10 10.13 T:riverkeyakv2 10.33 10.37 10.41 T:ketjeminorv2 10.50 10.53 10.55 T:ascon128v1 10.50 10.54 10.58 T:ascon128v11 10.65 10.67 10.70 ascon128v12 14.76 14.78 14.79 T:twine80n6t4clocv3 15.12 15.15 15.17 T:aes128otrpv1 15.22 15.35 15.43 T:aes128otrpv2 15.52 15.55 15.58 T:twine80n6t4clocv2 15.69 15.72 15.76 T:aes128otrsv1 15.67 15.74 15.99 T:aes128otrsv2 19.65 19.71 19.78 T:aes256otrsv2 19.69 19.72 19.77 T:aes256otrpv1 19.75 19.78 19.82 T:aes256otrpv2 19.79 19.87 19.96 T:aes256otrsv1 23.61 23.66 23.71 T:aes128n12clocv1 24.19 24.25 24.30 T:aes128n8clocv1 25.96 26.02 26.05 T:proest256otrv1 31.15 31.20 31.42 T:ketjesrv1 31.56 31.60 31.62 T:ketjesrv2 33.43 33.46 33.50 T:aeadaes128ocbtaglen64v1 33.41 33.51 33.57 T:aeadaes128ocbtaglen96v1 39.86 39.91 39.93 T:aeadaes192ocbtaglen64v1 39.86 39.93 39.97 T:aeadaes192ocbtaglen96v1 46.35 46.41 46.54 T:aeadaes256ocbtaglen96v1 46.35 46.50 46.58 T:aeadaes256ocbtaglen64v1 54.72 54.76 54.79 T:proest128otrv1 61.33 61.54 62.07 T:ketjejrv1 68.59 68.62 68.66 T:present80n6t4silcv3 71.25 71.31 71.38 T:colm127v1 94.41 95.59 95.76 T:ketjejrv2 108.75 109.02 109.13 T:deoxysneq128128v13 128.87 128.94 129.02 T:led80n6t4silcv3 156.65 157.40 157.95 T:deoxyseq128128v13 157.58 158.03 158.48 T:deoxysneq256128v13 177.11 177.26 177.47 T:aezv1 244.06 244.69 248.36 T:deoxyseq256128v13 305.20? 361.56? 644.33? T:acorn128 4076.72 4079.50 4083.39 T:led80n6silcv1 4082.35 4086.45 4088.73 T:led80n6t4silcv2 4539.51 4542.43 4544.86 T:present80n6t4silcv2 4539.09 4542.67 4547.05 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.21 0.22 0.22 T:tiaoxinv1 0.22 0.22 0.22 T:tiaoxinv2 0.26 0.27 0.27 aegis128l 0.50 0.51 0.51 aegis256 0.50 0.51 0.51 T:aezv3 0.51 0.51 0.52 T:aezv4 0.54 0.54 0.55 T:aegis128 0.53 0.54 0.55 T:aezv5 0.63 0.64 0.65 T:morus1280128v1 0.64 0.64 0.65 T:morus1280128v2 0.64 0.64 0.65 T:morus1280256v1 0.63 0.64 0.65 T:morus1280256v2 0.03? 0.64? 1.21? T:aeadaes128ocbtaglen128v1 0.73 0.73 0.73 T:aes128otrcv3 0.20? 0.78? 1.37? T:aeadaes192ocbtaglen128v1 0.81 0.81 0.81 T:aes128otrpv3 0.94 0.95 0.95 T:aes256otrcv3 0.95 0.98 0.99 T:deoxysi128v141 1.03 1.04 1.05 T:aes256otrpv3 1.04 1.05 1.06 T:aes128gcmv1 1.07 1.07 1.08 T:morus640128v1 1.07 1.08 1.08 T:morus640128v2 1.07 1.08 1.09 T:aeadaes256ocbtaglen128v1 1.09 1.10 1.11 T:deoxysi256v141 1.14 1.14 1.15 T:deoxysneq128128v1 1.16 1.17 1.19 aes256gcmv1 1.25 1.26 1.26 T:deoxysneq256128v1 1.44 1.46 1.47 T:deoxysii128v141 1.60 1.62 1.63 T:deoxysii256v141 1.62 1.62 1.63 T:colm0v1 1.67 1.70 1.76 T:norx6444v3 1.73 1.75 1.77 T:deoxyseq128128v1 1.89 1.90 1.91 T:deoxyseq256128v1 2.14 2.15 2.16 T:norx6441v2 2.14 2.15 2.16 T:norx6441v3 2.47 2.49 2.51 T:seakeyakv2 2.56 2.58 2.59 T:oceankeyakv2 2.59 2.59 2.60 T:norx6441v1 2.61 2.61 2.61 T:aes128otrsv3 3.05 3.09 3.12 T:lunarkeyakv2 3.24 3.25 3.27 T:norx6461v3 3.25 3.27 3.28 T:norx6461v2 3.58 3.59 3.60 T:aes256otrsv3 3.68 3.70 3.72 T:norx6444v2 3.87 3.88 3.90 T:norx3241v2 3.88 3.89 3.90 T:norx3241v3 3.89 3.90 3.92 T:lakekeyakv1 3.89 3.91 3.93 T:norx6461v1 3.95 3.96 3.98 T:lakekeyakv2 4.37 4.41 4.43 T:norx6444v1 4.53 4.53 4.53 T:aes128n12t8silcv3 4.53 4.53 4.53 T:aes128n12t8silcv2 4.53 4.53 4.53 T:aes128n8t8silcv2 4.53 4.53 4.54 T:aes128n12t8clocv3 4.53 4.53 4.54 T:aes128n12t8clocv2 4.53 4.54 4.54 T:aes128n8t8clocv2 4.69 4.70 4.72 T:norx3241v1 5.84 5.86 5.87 T:norx3261v3 5.86 5.87 5.89 T:norx3261v2 6.49 6.50 6.51 T:acorn128v3 6.59 6.61 6.62 T:ketjemajorv2 7.11 7.13 7.15 T:ascon128av11 7.12 7.15 7.17 T:ascon96v1 7.19 7.20 7.24 ascon128av12 7.20 7.22 7.23 T:riverkeyakv2 7.22 7.25 7.26 T:acorn128v2 7.46 7.48 7.50 T:norx3261v1 8.60 8.64 8.67 T:ketjeminorv2 9.06 9.07 9.07 T:aesjambuv1 10.54 10.55 10.57 T:ascon128v11 10.53 10.55 10.57 T:ascon128v1 10.65 10.67 10.68 ascon128v12 13.92 13.95 13.96 T:aes128otrsv1 13.93 14.01 14.15 T:aes128otrsv2 14.16 14.20 14.21 T:aes128otrpv1 14.28 14.34 14.37 T:aes128otrpv2 14.37 14.38 14.40 T:twine80n6t4clocv3 15.37 15.38 15.39 T:twine80n6t4clocv2 17.75 17.79 17.83 T:aes256otrsv1 17.82 17.87 17.96 T:aes256otrsv2 18.68 18.71 18.72 T:aes256otrpv1 18.82 18.84 18.85 T:aes256otrpv2 18.87 18.90 18.94 T:aes128n12clocv1 18.90 18.93 18.95 T:aes128n8clocv1 24.50 24.51 24.53 T:aeadaes128ocbtaglen64v1 24.51 24.53 24.55 T:aeadaes128ocbtaglen96v1 26.34 26.35 26.37 T:proest256otrv1 26.53 26.59 26.85 T:ketjesrv1 28.47 28.49 28.71 T:ketjesrv2 28.89 28.92 28.94 T:aeadaes192ocbtaglen64v1 28.91 28.93 28.94 T:aeadaes192ocbtaglen96v1 33.34 33.35 33.38 T:aeadaes256ocbtaglen64v1 33.37 33.40 33.42 T:aeadaes256ocbtaglen96v1 40.44 40.47 40.49 T:colm127v1 54.95 54.99 55.06 T:proest128otrv1 55.31 55.48 56.82 T:ketjejrv1 67.88 67.89 67.91 T:present80n6t4silcv3 76.82 77.08 77.17 T:deoxysneq128128v13 90.78 91.25 91.98 T:ketjejrv2 116.52 116.71 116.82 T:aezv1 117.01 117.17 119.40 T:deoxyseq128128v13 121.38 121.58 122.68 T:deoxysneq256128v13 127.87 128.93 134.22 T:led80n6t4silcv3 182.64 183.24 186.23 T:deoxyseq256128v13 299.39? 336.00? 568.80? T:acorn128 3056.92 3059.53 3081.18 T:led80n6silcv1 3064.06 3065.06 3065.95 T:led80n6t4silcv2 3405.29 3406.02 3407.23 T:present80n6t4silcv2 3405.27 3406.45 3407.72 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.27 0.28 0.28 aegis128l 0.28 0.29 0.29 T:tiaoxinv1 0.29 0.29 0.29 T:tiaoxinv2 0.50 0.50 0.50 T:aezv4 0.49 0.50 0.51 T:aezv3 0.52 0.52 0.53 T:aezv5 0.54 0.54 0.55 T:aegis128 0.55 0.55 0.55 aegis256 0.64 0.65 0.65 T:morus1280128v2 0.64 0.65 0.65 T:morus1280256v1 0.65 0.65 0.66 T:morus1280256v2 0.65 0.65 0.66 T:morus1280128v1 0.07? 0.67? 1.23? T:aeadaes128ocbtaglen128v1 0.74 0.74 0.75 T:aes128otrcv3 0.25? 0.80? 1.37? T:aeadaes192ocbtaglen128v1 0.82 0.82 0.83 T:aes128otrpv3 0.96 0.96 0.97 T:aes256otrcv3 1.06 1.07 1.07 T:morus640128v2 1.07 1.08 1.08 T:deoxysi128v141 1.07 1.08 1.09 T:morus640128v1 1.06 1.08 1.09 T:aes256otrpv3 1.12 1.13 1.13 T:aeadaes256ocbtaglen128v1 1.20 1.21 1.22 T:deoxysi256v141 1.20 1.22 1.24 T:aes128gcmv1 1.32 1.33 1.34 T:deoxysneq128128v1 1.43 1.44 1.44 T:deoxysneq256128v1 1.43 1.46 1.47 T:deoxysii128v141 1.53 1.55 1.56 aes256gcmv1 1.60 1.61 1.62 T:colm0v1 1.60 1.61 1.63 T:deoxysii256v141 1.68 1.70 1.73 T:norx6444v3 2.11 2.12 2.13 T:norx6441v3 2.11 2.12 2.13 T:norx6441v2 2.11 2.12 2.13 T:deoxyseq128128v1 2.28 2.29 2.30 T:deoxyseq256128v1 2.51 2.53 2.54 T:seakeyakv2 2.56 2.57 2.58 T:norx6441v1 2.59 2.61 2.64 T:oceankeyakv2 2.62 2.62 2.63 T:aes128otrsv3 3.09 3.12 3.15 T:lunarkeyakv2 3.20 3.21 3.23 T:norx6461v3 3.21 3.23 3.24 T:norx6461v2 3.60 3.61 3.61 T:aes256otrsv3 3.70 3.72 3.73 T:norx6444v2 3.83 3.85 3.86 T:norx3241v3 3.84 3.85 3.86 T:norx3241v2 3.84 3.86 3.87 T:norx6461v1 3.93 3.95 3.97 T:lakekeyakv2 3.94 3.95 3.97 T:lakekeyakv1 4.37 4.38 4.40 T:norx6444v1 4.50 4.50 4.51 T:aes128n12t8clocv3 4.50 4.50 4.50 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.51 T:aes128n8t8silcv2 4.50 4.50 4.51 T:aes128n8t8clocv2 4.62 4.63 4.64 T:norx3241v1 5.83 5.84 5.85 T:norx3261v2 5.82 5.84 5.86 T:norx3261v3 6.56 6.58 6.60 T:ketjemajorv2 6.87 6.88 6.89 T:acorn128v3 7.18 7.23 7.27 ascon128av12 7.21 7.25 7.26 T:ascon128av11 7.22 7.26 7.29 T:ascon96v1 7.26 7.27 7.29 T:riverkeyakv2 7.29 7.32 7.40 T:acorn128v2 7.42 7.43 7.45 T:norx3261v1 9.01 9.05 9.08 T:ketjeminorv2 9.22 9.22 9.22 T:aesjambuv1 10.37 10.44 10.50 T:ascon128v11 10.39 10.45 10.51 T:ascon128v1 10.61 10.63 10.65 ascon128v12 14.10 14.13 14.17 T:aes128otrsv1 14.09 14.15 14.34 T:aes128otrsv2 14.31 14.34 14.36 T:aes128otrpv1 14.46 14.48 14.50 T:twine80n6t4clocv3 14.44 14.53 14.58 T:aes128otrpv2 15.33 15.35 15.36 T:twine80n6t4clocv2 18.04 18.07 18.18 T:aes256otrsv2 18.12 18.16 18.19 T:aes256otrsv1 18.36 18.39 18.42 T:aes128n12clocv1 18.67 18.71 18.74 T:aes128n8clocv1 18.87 18.90 18.92 T:aes256otrpv1 18.93 18.95 18.97 T:aes256otrpv2 26.26 26.29 26.31 T:proest256otrv1 27.19 27.25 27.48 T:ketjesrv1 28.82 28.85 28.88 T:aeadaes128ocbtaglen64v1 28.85 28.90 28.93 T:aeadaes128ocbtaglen96v1 28.92 28.94 28.96 T:ketjesrv2 34.25 34.28 34.30 T:aeadaes192ocbtaglen64v1 34.25 34.28 34.32 T:aeadaes192ocbtaglen96v1 39.72 39.77 39.80 T:aeadaes256ocbtaglen96v1 39.75 39.80 39.84 T:aeadaes256ocbtaglen64v1 49.17 49.21 49.26 T:colm127v1 55.09 55.11 55.14 T:proest128otrv1 55.95 56.09 57.19 T:ketjejrv1 67.98 68.03 68.05 T:present80n6t4silcv3 91.61 91.72 91.90 T:ketjejrv2 92.99 93.28 94.08 T:deoxysneq128128v13 116.47 116.63 117.11 T:aezv1 117.02 117.21 119.44 T:deoxyseq128128v13 128.09 128.14 128.21 T:led80n6t4silcv3 139.37 139.77 140.59 T:deoxysneq256128v13 182.47 182.95 186.03 T:deoxyseq256128v13 311.92? 349.41? 594.17? T:acorn128 3057.47 3059.58 3061.87 T:led80n6silcv1 3064.44 3065.37 3066.12 T:led80n6t4silcv2 3404.47 3405.89 3407.41 T:present80n6silcv1 3405.24 3406.23 3407.74 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.27 0.28 0.28 aegis128l 0.28 0.29 0.29 T:aezv4 0.28 0.29 0.29 T:aezv3 0.28 0.29 0.29 T:tiaoxinv2 0.29 0.29 0.29 T:tiaoxinv1 0.30 0.31 0.31 T:aezv5 0.54 0.54 0.55 T:aegis128 0.55 0.55 0.55 aegis256 0.64 0.65 0.65 T:morus1280128v2 0.64 0.65 0.65 T:morus1280256v1 0.64 0.65 0.66 T:morus1280256v2 0.65 0.65 0.66 T:morus1280128v1 0.10? 0.67? 1.22? T:aeadaes128ocbtaglen128v1 0.74 0.74 0.75 T:aes128otrcv3 0.26? 0.80? 1.35? T:aeadaes192ocbtaglen128v1 0.82 0.82 0.83 T:aes128otrpv3 0.96 0.96 0.96 T:aes256otrcv3 1.06 1.07 1.07 T:morus640128v2 1.06 1.07 1.08 T:deoxysi128v141 1.06 1.08 1.08 T:aes256otrpv3 1.08 1.08 1.09 T:morus640128v1 1.12 1.13 1.13 T:aeadaes256ocbtaglen128v1 1.20 1.21 1.22 T:deoxysi256v141 1.21 1.23 1.24 T:aes128gcmv1 1.33 1.33 1.34 T:deoxysneq128128v1 1.42 1.43 1.44 T:deoxysneq256128v1 1.42 1.46 1.48 T:deoxysii128v141 1.53 1.54 1.56 aes256gcmv1 1.60 1.61 1.62 T:colm0v1 1.61 1.62 1.63 T:deoxysii256v141 1.68 1.70 1.73 T:norx6444v3 2.11 2.12 2.13 T:norx6441v3 2.11 2.12 2.13 T:norx6441v2 2.12 2.12 2.13 T:deoxyseq128128v1 2.28 2.29 2.30 T:deoxyseq256128v1 2.52 2.53 2.55 T:seakeyakv2 2.55 2.57 2.58 T:norx6441v1 2.60 2.62 2.63 T:oceankeyakv2 2.62 2.62 2.63 T:aes128otrsv3 3.08 3.13 3.18 T:lunarkeyakv2 3.20 3.21 3.22 T:norx6461v3 3.21 3.22 3.23 T:norx6461v2 3.60 3.61 3.61 T:aes256otrsv3 3.72 3.73 3.75 T:norx6444v2 3.84 3.85 3.86 T:norx3241v3 3.84 3.85 3.86 T:norx3241v2 3.84 3.85 3.87 T:norx6461v1 3.95 3.96 3.97 T:lakekeyakv2 3.95 3.97 3.98 T:lakekeyakv1 4.39 4.41 4.42 T:norx6444v1 4.49 4.50 4.50 T:aes128n12t8silcv2 4.49 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.51 T:aes128n12t8silcv3 4.50 4.50 4.51 T:aes128n12t8clocv3 4.50 4.50 4.52 T:aes128n12t8clocv2 4.50 4.50 4.52 T:aes128n8t8clocv2 4.62 4.63 4.64 T:norx3241v1 5.83 5.84 5.85 T:norx3261v3 5.83 5.84 5.85 T:norx3261v2 6.58 6.60 6.62 T:ketjemajorv2 6.87 6.88 6.89 T:acorn128v3 7.15 7.17 7.26 T:ascon128av11 7.17 7.23 7.26 ascon128av12 7.21 7.24 7.26 T:ascon96v1 7.27 7.29 7.30 T:riverkeyakv2 7.35 7.39 7.41 T:acorn128v2 7.42 7.43 7.44 T:norx3261v1 9.05 9.07 9.10 T:ketjeminorv2 9.22 9.22 9.22 T:aesjambuv1 10.41 10.43 10.45 T:ascon128v1 10.41 10.44 10.49 T:ascon128v11 10.61 10.63 10.65 ascon128v12 14.11 14.15 14.17 T:aes128otrsv1 14.09 14.17 14.36 T:aes128otrsv2 14.35 14.38 14.40 T:aes128otrpv1 14.46 14.47 14.49 T:twine80n6t4clocv3 14.45 14.53 14.59 T:aes128otrpv2 15.33 15.35 15.36 T:twine80n6t4clocv2 18.07 18.11 18.21 T:aes256otrsv2 18.14 18.17 18.20 T:aes256otrsv1 18.35 18.38 18.42 T:aes128n12clocv1 18.66 18.71 18.73 T:aes128n8clocv1 18.89 18.91 18.92 T:aes256otrpv1 18.94 18.96 18.98 T:aes256otrpv2 26.26 26.28 26.32 T:proest256otrv1 27.26 27.31 27.52 T:ketjesrv1 28.83 28.86 28.88 T:aeadaes128ocbtaglen64v1 28.85 28.90 28.93 T:aeadaes128ocbtaglen96v1 28.96 28.98 29.00 T:ketjesrv2 34.25 34.28 34.32 T:aeadaes192ocbtaglen64v1 34.26 34.29 34.33 T:aeadaes192ocbtaglen96v1 39.72 39.76 39.78 T:aeadaes256ocbtaglen96v1 39.73 39.79 39.84 T:aeadaes256ocbtaglen64v1 48.58 48.61 48.69 T:colm127v1 55.09 55.12 55.15 T:proest128otrv1 55.96 56.14 57.23 T:ketjejrv1 67.99 68.04 68.06 T:present80n6t4silcv3 91.60 91.76 91.92 T:ketjejrv2 93.06 93.42 94.20 T:deoxysneq128128v13 116.38 116.56 116.64 T:aezv1 117.04 117.20 119.26 T:deoxyseq128128v13 128.05 128.14 128.18 T:led80n6t4silcv3 139.31 139.81 140.53 T:deoxysneq256128v13 182.42 182.94 186.02 T:deoxyseq256128v13 312.16? 349.41? 595.16? T:acorn128 3058.03 3059.56 3061.36 T:led80n6silcv1 3064.80 3065.68 3066.68 T:led80n6t4silcv2 3404.93 3405.78 3407.01 T:present80n6silcv1 3405.12 3405.87 3407.11 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.18 0.19 0.19 T:tiaoxinv2 0.18? 0.19? 0.20? T:tiaoxinv1 0.25 0.26 0.26 aegis128l 0.28 0.29 0.30 T:aezv3 0.29 0.29 0.30 T:aezv4 0.32 0.32 0.33 T:aezv5 0.50 0.50 0.51 aegis256 0.56 0.57 0.57 T:aegis128 0.61 0.62 0.63 T:morus1280256v2 0.61 0.62 0.63 T:morus1280128v1 0.61 0.62 0.63 T:morus1280128v2 0.61 0.62 0.63 T:morus1280256v1 -0.48? 0.63? 1.72? T:aeadaes128ocbtaglen128v1 0.65 0.67 0.69 T:aes128gcmv1 0.65 0.68 0.71 aes256gcmv1 0.74 0.74 0.75 T:aes128otrcv3 -1.53? 0.75? 1.88? T:aeadaes192ocbtaglen128v1 0.89 0.90 0.91 T:aes128otrpv3 0.92 0.93 0.94 T:colm0v1 0.93 0.95 0.97 T:deoxysii128v141 0.96 0.96 0.97 T:aes256otrcv3 0.94 0.96 0.98 T:deoxysi128v141 1.04 1.05 1.05 T:morus640128v2 1.04 1.05 1.06 T:morus640128v1 1.05 1.06 1.07 T:deoxysii256v141 1.08 1.09 1.10 T:deoxysi256v141 1.13 1.14 1.14 T:deoxysneq128128v1 1.15 1.17 1.18 T:deoxyseq128128v1 1.17 1.17 1.20 T:aes256otrpv3 1.16 1.17 1.19 T:aeadaes256ocbtaglen128v1 1.23 1.24 1.25 T:deoxysneq256128v1 1.25 1.26 1.26 T:deoxyseq256128v1 1.93 1.99 2.05 T:lunarkeyakv2 1.98 2.02 2.06 T:oceankeyakv2 2.13 2.15 2.16 T:norx6441v3 2.14 2.15 2.17 T:norx6441v2 2.14 2.15 2.17 T:norx6444v3 2.35 2.38 2.40 T:seakeyakv2 2.56 2.58 2.60 T:norx6441v1 3.24 3.26 3.27 T:norx6461v3 3.27 3.29 3.31 T:norx6461v2 3.39 3.40 3.41 T:norx6444v2 3.56 3.58 3.61 T:lakekeyakv2 3.64 3.66 3.69 T:lakekeyakv1 3.85 3.86 3.89 T:norx6461v1 3.86 3.89 3.90 T:norx3241v3 3.88 3.90 3.92 T:norx3241v2 4.32 4.33 4.35 T:norx6444v1 4.50 4.50 4.51 T:aes128n8t8clocv2 4.50 4.50 4.51 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128otrsv3 4.50 4.50 4.50 T:aes128n12t8clocv3 4.50 4.50 4.51 T:aes128n8t8silcv2 4.50 4.50 4.51 T:aes128n12t8silcv3 4.50 4.50 4.51 T:aes128n12t8silcv2 4.66 4.68 4.70 T:norx3241v1 5.68 5.72 5.75 T:ketjemajorv2 5.81 5.83 5.85 T:norx3261v2 5.83 5.86 5.88 T:norx3261v3 6.25 6.25 6.25 T:aes256otrsv3 6.84 6.86 6.88 T:riverkeyakv2 6.84 6.86 6.89 T:acorn128v2 6.95 6.96 6.99 T:acorn128v3 7.00 7.02 7.04 T:ascon128av11 7.02 7.08 7.09 T:ascon96v1 7.14 7.16 7.17 ascon128av12 7.47 7.48 7.50 T:norx3261v1 7.67 7.71 7.73 T:ketjeminorv2 9.00 9.00 9.01 T:aesjambuv1 10.49 10.52 10.54 T:ascon128v1 10.50 10.52 10.55 T:ascon128v11 10.59 10.62 10.65 ascon128v12 12.43 12.48 12.52 T:aes128otrsv1 12.45 12.52 12.62 T:aes128otrsv2 13.04 13.06 13.08 T:aes128n12clocv1 13.04 13.06 13.09 T:aes128n8clocv1 13.42 13.46 13.55 T:aes128otrpv1 13.67 13.71 13.82 T:aes128otrpv2 14.17 14.20 14.20 T:twine80n6t4clocv3 15.10 15.13 15.14 T:twine80n6t4clocv2 16.37 16.40 16.43 T:aes256otrsv1 16.42 16.46 16.52 T:aes256otrsv2 18.00 18.04 18.07 T:aes256otrpv2 18.03 18.05 18.08 T:aes256otrpv1 23.34 23.42 23.59 T:ketjesrv1 24.19 24.22 24.24 T:aeadaes128ocbtaglen64v1 24.21 24.24 24.27 T:aeadaes128ocbtaglen96v1 25.89 25.92 25.95 T:colm127v1 26.33 26.36 26.38 T:ketjesrv2 26.50 26.55 26.59 T:proest256otrv1 28.60 28.63 28.66 T:aeadaes192ocbtaglen64v1 28.63 28.64 28.66 T:aeadaes192ocbtaglen96v1 33.07 33.09 33.11 T:aeadaes256ocbtaglen96v1 33.07 33.10 33.12 T:aeadaes256ocbtaglen64v1 50.47 50.71 52.44 T:ketjejrv1 55.47 55.53 55.57 T:proest128otrv1 55.89 55.96 56.03 T:aezv1 67.32 67.35 67.38 T:present80n6t4silcv3 77.21 77.33 77.69 T:deoxysneq128128v13 77.24 77.37 79.21 T:deoxyseq128128v13 87.62 87.89 89.34 T:ketjejrv2 120.68 121.11 122.03 T:deoxyseq256128v13 121.25 121.50 122.27 T:deoxysneq256128v13 127.15 129.14 139.17 T:led80n6t4silcv3 271.97? 328.82? 602.79? T:acorn128 2036.72 2038.78 2043.42 T:led80n6silcv1 2040.25 2042.09 2046.04 T:led80n6t4silcv2 2267.55 2269.07 2273.31 T:present80n6t4silcv2 2267.33 2269.70 2274.02 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.18? 0.19? 0.20? T:tiaoxinv2 0.19 0.19 0.19 T:tiaoxinv1 0.25 0.26 0.26 aegis128l 0.29 0.29 0.30 T:aezv4 0.29 0.30 0.30 T:aezv3 0.32 0.33 0.33 T:aezv5 0.49 0.50 0.50 aegis256 0.52 0.52 0.53 T:aegis128 0.61 0.62 0.63 T:morus1280256v1 0.61 0.62 0.63 T:morus1280128v2 0.61 0.62 0.63 T:morus1280128v1 0.62 0.63 0.63 T:morus1280256v2 -0.42? 0.63? 1.76? T:aeadaes128ocbtaglen128v1 0.65 0.69 0.71 T:aes128gcmv1 0.68 0.69 0.70 aes256gcmv1 0.74 0.74 0.75 T:aes128otrcv3 -0.40? 0.75? 2.99? T:aeadaes192ocbtaglen128v1 0.89 0.90 0.90 T:aes128otrpv3 0.93 0.93 0.94 T:colm0v1 0.93 0.94 0.95 T:deoxysi128v141 0.93 0.96 0.98 T:deoxysii128v141 0.96 0.96 0.96 T:aes256otrcv3 1.01 1.02 1.03 T:morus640128v2 1.04 1.04 1.05 T:morus640128v1 1.04 1.06 1.08 T:deoxysii256v141 1.06 1.09 1.11 T:deoxysi256v141 1.12 1.13 1.15 T:deoxysneq128128v1 1.17 1.17 1.20 T:aes256otrpv3 1.16 1.17 1.19 T:aeadaes256ocbtaglen128v1 1.17 1.18 1.20 T:deoxyseq128128v1 1.22 1.23 1.24 T:deoxysneq256128v1 1.26 1.28 1.30 T:deoxyseq256128v1 1.90 1.98 2.06 T:lunarkeyakv2 1.97 2.01 2.04 T:oceankeyakv2 2.14 2.15 2.17 T:norx6444v3 2.14 2.15 2.17 T:norx6441v3 2.14 2.15 2.17 T:norx6441v2 2.35 2.38 2.40 T:seakeyakv2 2.58 2.59 2.60 T:norx6441v1 3.23 3.24 3.26 T:norx6461v3 3.25 3.27 3.28 T:norx6461v2 3.40 3.41 3.44 T:norx6444v2 3.56 3.58 3.59 T:lakekeyakv2 3.65 3.66 3.69 T:lakekeyakv1 3.83 3.85 3.87 T:norx6461v1 3.89 3.90 3.91 T:norx3241v3 3.89 3.90 3.92 T:norx3241v2 4.31 4.33 4.35 T:norx6444v1 4.49 4.50 4.50 T:aes128n12t8clocv2 4.49 4.50 4.50 T:aes128n8t8clocv2 4.50 4.50 4.50 T:aes128n12t8clocv3 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.50 T:aes128otrsv3 4.68 4.70 4.72 T:norx3241v1 5.68 5.73 5.80 T:ketjemajorv2 5.81 5.82 5.84 T:norx3261v2 5.83 5.85 5.87 T:norx3261v3 6.25 6.25 6.26 T:aes256otrsv3 6.83 6.86 6.88 T:riverkeyakv2 6.97 6.99 7.01 T:acorn128v3 6.90 7.01 7.04 T:acorn128v2 6.97 7.10 7.18 T:ascon128av11 7.08 7.12 7.15 T:ascon96v1 7.10 7.21 7.25 ascon128av12 7.48 7.50 7.52 T:norx3261v1 7.68 7.72 7.76 T:ketjeminorv2 9.00 9.00 9.00 T:aesjambuv1 10.32 10.36 10.43 T:ascon128v1 10.33 10.36 10.43 T:ascon128v11 10.61 10.63 10.65 ascon128v12 12.44 12.49 12.53 T:aes128otrsv1 12.46 12.54 12.61 T:aes128otrsv2 13.04 13.06 13.09 T:aes128n12clocv1 13.04 13.07 13.09 T:aes128n8clocv1 13.54 13.55 13.56 T:aes128otrpv1 13.67 13.70 13.74 T:aes128otrpv2 14.17 14.18 14.20 T:twine80n6t4clocv3 15.10 15.13 15.15 T:twine80n6t4clocv2 16.37 16.40 16.44 T:aes256otrsv1 16.39 16.43 16.51 T:aes256otrsv2 18.02 18.06 18.09 T:aes256otrpv1 18.03 18.06 18.10 T:aes256otrpv2 23.32 23.38 23.59 T:ketjesrv1 24.21 24.23 24.26 T:aeadaes128ocbtaglen64v1 24.20 24.23 24.27 T:aeadaes128ocbtaglen96v1 25.92 25.98 26.01 T:colm127v1 26.27 26.33 26.35 T:ketjesrv2 26.48 26.52 26.57 T:proest256otrv1 28.61 28.64 28.67 T:aeadaes192ocbtaglen64v1 28.63 28.65 28.69 T:aeadaes192ocbtaglen96v1 33.08 33.10 33.14 T:aeadaes256ocbtaglen64v1 33.08 33.11 33.14 T:aeadaes256ocbtaglen96v1 50.34 50.57 52.45 T:ketjejrv1 55.49 55.53 55.56 T:proest128otrv1 55.82 55.88 56.09 T:aezv1 67.33 67.37 67.41 T:present80n6t4silcv3 77.22 77.40 78.15 T:deoxysneq128128v13 77.31 77.42 79.19 T:deoxyseq128128v13 87.58 87.75 89.25 T:ketjejrv2 120.78 121.10 122.07 T:deoxyseq256128v13 121.17 121.46 122.23 T:deoxysneq256128v13 127.34 127.41 127.53 T:led80n6t4silcv3 282.84? 337.44? 588.39? T:acorn128 2037.20 2040.06 2043.82 T:led80n6silcv1 2039.74 2041.37 2044.87 T:led80n6t4silcv2 2267.38 2269.58 2274.29 T:present80n6silcv1 2267.50 2269.75 2273.09 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.18 0.19 0.19 T:tiaoxinv2 0.19 0.19 0.20 T:tiaoxinv1 0.25 0.26 0.26 aegis128l 0.29 0.29 0.30 T:aezv3 0.29 0.29 0.30 T:aezv4 0.32 0.33 0.33 T:aezv5 0.50 0.50 0.51 aegis256 0.52 0.52 0.52 T:aegis128 -0.42? 0.62? 1.70? T:aeadaes128ocbtaglen128v1 0.61 0.62 0.63 T:morus1280128v2 0.61 0.62 0.63 T:morus1280256v1 0.62 0.62 0.63 T:morus1280128v1 0.62 0.63 0.63 T:morus1280256v2 0.64 0.69 0.71 T:aes128gcmv1 0.67 0.69 0.70 aes256gcmv1 0.74 0.74 0.75 T:aes128otrcv3 -1.50? 0.75? 1.80? T:aeadaes192ocbtaglen128v1 0.89 0.90 0.90 T:aes128otrpv3 0.92 0.94 0.96 T:colm0v1 0.94 0.94 0.96 T:deoxysi128v141 0.92 0.96 0.98 T:deoxysii128v141 0.96 0.96 0.96 T:aes256otrcv3 1.01 1.02 1.03 T:morus640128v2 1.04 1.05 1.06 T:morus640128v1 1.05 1.06 1.09 T:deoxysii256v141 1.07 1.09 1.12 T:deoxysi256v141 1.12 1.14 1.15 T:deoxysneq128128v1 1.13 1.16 1.20 T:aes256otrpv3 1.16 1.17 1.18 T:aeadaes256ocbtaglen128v1 1.18 1.19 1.20 T:deoxyseq128128v1 1.22 1.23 1.25 T:deoxysneq256128v1 1.27 1.29 1.30 T:deoxyseq256128v1 1.89 1.99 2.08 T:lunarkeyakv2 1.99 2.02 2.04 T:oceankeyakv2 2.14 2.15 2.16 T:norx6441v2 2.14 2.15 2.17 T:norx6444v3 2.14 2.15 2.17 T:norx6441v3 2.36 2.38 2.40 T:seakeyakv2 2.57 2.59 2.60 T:norx6441v1 3.23 3.24 3.26 T:norx6461v3 3.25 3.27 3.28 T:norx6461v2 3.40 3.42 3.45 T:norx6444v2 3.56 3.58 3.59 T:lakekeyakv2 3.64 3.66 3.69 T:lakekeyakv1 3.83 3.85 3.87 T:norx6461v1 3.89 3.90 3.92 T:norx3241v3 3.89 3.91 3.92 T:norx3241v2 4.31 4.34 4.36 T:norx6444v1 4.48 4.50 4.51 T:aes128n8t8clocv2 4.48 4.50 4.51 T:aes128n12t8clocv2 4.48 4.50 4.51 T:aes128n12t8clocv3 4.49 4.50 4.50 T:aes128n12t8silcv2 4.48 4.50 4.50 T:aes128n12t8silcv3 4.47 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.50 T:aes128otrsv3 4.68 4.70 4.72 T:norx3241v1 5.67 5.72 5.77 T:ketjemajorv2 5.81 5.84 5.87 T:norx3261v2 5.83 5.85 5.87 T:norx3261v3 6.25 6.25 6.26 T:aes256otrsv3 6.84 6.86 6.88 T:riverkeyakv2 6.94 6.98 7.09 T:ascon128av11 6.97 6.99 7.02 T:acorn128v3 6.83 7.00 7.03 T:acorn128v2 7.07 7.10 7.14 T:ascon96v1 7.12 7.21 7.24 ascon128av12 7.47 7.49 7.51 T:norx3261v1 7.69 7.73 7.76 T:ketjeminorv2 9.00 9.00 9.00 T:aesjambuv1 10.32 10.36 10.45 T:ascon128v11 10.35 10.40 10.46 T:ascon128v1 10.59 10.62 10.64 ascon128v12 12.45 12.48 12.52 T:aes128otrsv1 12.49 12.53 12.63 T:aes128otrsv2 13.04 13.06 13.08 T:aes128n12clocv1 13.05 13.08 13.10 T:aes128n8clocv1 13.53 13.55 13.57 T:aes128otrpv1 13.66 13.70 13.74 T:aes128otrpv2 14.16 14.19 14.20 T:twine80n6t4clocv3 15.08 15.12 15.14 T:twine80n6t4clocv2 16.36 16.40 16.44 T:aes256otrsv1 16.37 16.44 16.50 T:aes256otrsv2 18.02 18.06 18.08 T:aes256otrpv1 18.02 18.07 18.11 T:aes256otrpv2 23.35 23.39 23.59 T:ketjesrv1 24.21 24.24 24.28 T:aeadaes128ocbtaglen64v1 24.22 24.24 24.27 T:aeadaes128ocbtaglen96v1 25.91 25.96 26.00 T:colm127v1 26.30 26.36 26.39 T:ketjesrv2 26.48 26.52 26.57 T:proest256otrv1 28.62 28.66 28.69 T:aeadaes192ocbtaglen64v1 28.66 28.67 28.71 T:aeadaes192ocbtaglen96v1 33.09 33.11 33.15 T:aeadaes256ocbtaglen64v1 33.09 33.12 33.16 T:aeadaes256ocbtaglen96v1 50.42 50.70 52.32 T:ketjejrv1 55.47 55.51 55.55 T:proest128otrv1 55.81 55.86 55.92 T:aezv1 67.36 67.38 67.39 T:present80n6t4silcv3 77.22 77.34 78.06 T:deoxysneq128128v13 77.31 77.42 79.36 T:deoxyseq128128v13 87.59 87.88 89.23 T:ketjejrv2 120.78 121.22 122.19 T:deoxyseq256128v13 121.00 121.38 122.15 T:deoxysneq256128v13 127.34 127.40 127.46 T:led80n6t4silcv3 283.19? 338.18? 588.37? T:acorn128 2037.38 2039.44 2042.59 T:led80n6silcv1 2039.88 2041.56 2046.06 T:led80n6t4silcv2 2267.15 2268.90 2273.47 T:present80n6silcv1 2267.59 2269.37 2273.42 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.29 0.30 0.30 T:tiaoxinv1 0.29 0.30 0.30 T:tiaoxinv2 0.33 0.33 0.34 aegis128l 0.57 0.58 0.59 aegis256 0.59 0.59 0.59 T:aegis128 0.60 0.60 0.60 T:aezv4 0.60 0.61 0.61 T:aezv3 0.63 0.63 0.64 T:aezv5 0.79? 0.79? 1.53? T:aeadaes128ocbtaglen128v1 0.79 0.79 0.80 T:morus1280128v1 0.79 0.79 0.80 T:morus1280256v1 0.80 0.80 0.81 T:morus1280256v2 0.80 0.81 0.81 T:morus1280128v2 0.94? 0.94? 1.65? T:aeadaes192ocbtaglen128v1 0.96 0.96 0.96 T:aes128otrpv3 1.00 1.01 1.01 T:aes128otrcv3 1.15 1.17 1.18 T:deoxysi128v141 1.18 1.19 1.20 T:aes128gcmv1 1.19 1.20 1.20 T:aeadaes256ocbtaglen128v1 1.20 1.21 1.21 T:morus640128v1 1.21 1.21 1.22 T:morus640128v2 1.28 1.30 1.30 T:aes256otrpv3 1.31 1.31 1.32 T:deoxysneq128128v1 1.32 1.33 1.34 T:deoxysi256v141 1.33 1.34 1.35 aes256gcmv1 1.34 1.34 1.35 T:aes256otrcv3 1.42 1.43 1.44 T:deoxysneq256128v1 1.64 1.66 1.67 T:deoxysii128v141 1.82 1.82 1.87 T:colm0v1 1.85 1.86 1.88 T:deoxysii256v141 1.93 1.95 1.97 T:deoxyseq128128v1 2.14 2.15 2.15 T:deoxyseq256128v1 2.31 2.32 2.39 T:norx6444v3 2.48 2.49 2.50 T:norx6441v2 2.49 2.50 2.50 T:norx6441v3 2.74 2.74 2.74 T:aes128otrsv3 2.90 2.91 2.92 T:norx6441v1 3.60 3.61 3.62 T:seakeyakv2 3.75 3.76 3.77 T:norx6461v3 3.77 3.78 3.79 T:norx6461v2 3.78 3.78 3.78 T:aes256otrsv3 4.19 4.20 4.21 T:norx3241v2 4.19 4.20 4.21 T:norx3241v3 4.34 4.35 4.36 T:lakekeyakv2 4.37 4.38 4.40 T:norx6461v1 4.55 4.55 4.56 T:lakekeyakv1 4.59 4.59 4.59 T:aes128n12t8clocv2 4.59 4.59 4.59 T:aes128n8t8clocv2 4.59 4.59 4.60 T:aes128n12t8clocv3 4.63 4.63 4.63 T:aes128n8t8silcv2 4.63 4.63 4.63 T:aes128n12t8silcv3 4.63 4.63 4.63 T:aes128n12t8silcv2 4.85 4.86 4.88 T:oceankeyakv2 4.95 4.96 4.97 T:norx3241v1 5.25 5.26 5.27 T:norx6444v2 6.19 6.21 6.24 T:norx6444v1 6.31 6.32 6.33 T:norx3261v3 6.32 6.32 6.34 T:norx3261v2 7.27 7.29 7.30 T:ascon128av11 7.28 7.30 7.32 T:ascon96v1 7.37 7.38 7.40 ascon128av12 7.50 7.51 7.52 T:acorn128v3 7.58 7.59 7.60 T:riverkeyakv2 7.88 7.89 7.91 T:norx3261v1 8.29 8.31 8.33 T:acorn128v2 8.40 8.41 8.43 T:ketjemajorv2 8.40 8.43 8.45 T:lunarkeyakv2 9.22 9.23 9.23 T:aesjambuv1 9.64 9.66 9.67 T:ketjeminorv2 10.70 10.71 10.73 T:ascon128v1 10.70 10.71 10.72 T:ascon128v11 10.81 10.83 10.84 ascon128v12 14.35 14.36 14.40 T:aes128otrsv1 14.38 14.44 14.59 T:aes128otrsv2 14.62 14.63 14.64 T:twine80n6t4clocv3 14.63 14.65 14.67 T:aes128otrpv1 14.74 14.77 14.82 T:aes128otrpv2 15.64 15.66 15.67 T:twine80n6t4clocv2 18.32 18.34 18.36 T:aes256otrsv1 18.42 18.44 18.47 T:aes256otrsv2 19.07 19.09 19.12 T:aes128n12clocv1 19.07 19.10 19.12 T:aes128n8clocv1 19.29 19.30 19.31 T:aes256otrpv1 19.40 19.41 19.42 T:aes256otrpv2 25.13 25.14 25.15 T:aeadaes128ocbtaglen64v1 25.14 25.16 25.18 T:aeadaes128ocbtaglen96v1 27.27 27.33 27.54 T:ketjesrv1 28.65 28.67 28.68 T:proest256otrv1 29.43 29.44 29.63 T:ketjesrv2 29.60 29.62 29.63 T:aeadaes192ocbtaglen64v1 29.61 29.62 29.64 T:aeadaes192ocbtaglen96v1 34.18 34.19 34.21 T:aeadaes256ocbtaglen64v1 34.21 34.24 34.26 T:aeadaes256ocbtaglen96v1 41.19 41.21 41.22 T:colm127v1 56.26 56.37 57.60 T:ketjejrv1 57.30 57.32 57.35 T:proest128otrv1 68.61 68.62 68.64 T:present80n6t4silcv3 77.52 77.55 77.71 T:deoxysneq128128v13 92.35 92.79 93.30 T:ketjejrv2 114.37 114.44 114.53 T:aezv1 118.35 118.43 120.86 T:deoxyseq128128v13 122.16 122.36 123.21 T:deoxysneq256128v13 129.28 130.02 135.05 T:led80n6t4silcv3 184.74 184.85 187.75 T:deoxyseq256128v13 375.84? 377.54? 601.68? T:acorn128 3074.53 3077.31 3095.91 T:led80n6silcv1 3078.84 3081.04 3082.38 T:led80n6t4silcv2 3422.60 3423.86 3425.52 T:present80n6t4silcv2 3423.02 3424.43 3425.86 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.34 0.35 0.35 aegis128l 0.36 0.36 0.37 T:tiaoxinv1 0.36 0.37 0.37 T:tiaoxinv2 0.59 0.59 0.60 T:aezv4 0.59 0.59 0.60 T:aegis128 0.60 0.60 0.60 T:aezv3 0.61 0.61 0.62 T:aezv5 0.62 0.62 0.63 aegis256 0.80 0.81 0.81 T:morus1280128v1 0.81 0.81 0.81 T:morus1280256v1 0.81 0.82 0.82 T:morus1280128v2 0.82 0.82 0.82 T:morus1280256v2 0.83? 0.83? 1.56? T:aeadaes128ocbtaglen128v1 0.96? 0.96? 1.64? T:aeadaes192ocbtaglen128v1 0.97 0.98 0.98 T:aes128otrpv3 1.03 1.03 1.03 T:aes128otrcv3 1.20 1.21 1.21 T:morus640128v1 1.21 1.22 1.22 T:morus640128v2 1.25 1.26 1.26 T:aeadaes256ocbtaglen128v1 1.30 1.32 1.32 T:aes256otrpv3 1.33 1.33 1.34 T:deoxysi128v141 1.34 1.37 1.38 T:aes128gcmv1 1.37 1.37 1.37 T:aes256otrcv3 1.52 1.52 1.53 T:deoxysi256v141 1.60 1.61 1.61 T:deoxysneq128128v1 1.69 1.70 1.70 T:deoxysneq256128v1 1.68 1.70 1.72 T:deoxysii128v141 1.71 1.72 1.72 aes256gcmv1 1.85 1.85 1.86 T:colm0v1 1.92 1.93 1.94 T:deoxysii256v141 2.31 2.33 2.36 T:norx6444v3 2.44 2.44 2.45 T:deoxyseq128128v1 2.46 2.47 2.48 T:norx6441v3 2.46 2.47 2.47 T:norx6441v2 2.60 2.60 2.61 T:deoxyseq256128v1 2.76 2.76 2.76 T:aes128otrsv3 2.89 2.90 2.90 T:norx6441v1 3.64 3.65 3.66 T:seakeyakv2 3.72 3.73 3.74 T:norx6461v3 3.73 3.74 3.75 T:norx6461v2 3.81 3.81 3.81 T:aes256otrsv3 4.15 4.16 4.17 T:norx3241v3 4.17 4.17 4.18 T:norx3241v2 4.33 4.34 4.36 T:lakekeyakv2 4.34 4.35 4.36 T:norx6461v1 4.56 4.56 4.58 T:aes128n8t8clocv2 4.56 4.57 4.57 T:aes128n12t8clocv2 4.57 4.57 4.57 T:aes128n12t8clocv3 4.60 4.60 4.62 T:lakekeyakv1 4.61 4.61 4.61 T:aes128n12t8silcv2 4.61 4.61 4.61 T:aes128n12t8silcv3 4.60 4.61 4.61 T:aes128n8t8silcv2 4.89 4.90 4.91 T:norx3241v1 4.90 4.92 4.94 T:oceankeyakv2 5.27 5.28 5.29 T:norx6444v2 6.17 6.18 6.20 T:norx6444v1 6.30 6.31 6.32 T:norx3261v2 6.30 6.31 6.33 T:norx3261v3 7.37 7.40 7.42 T:ascon128av11 7.39 7.41 7.44 T:ascon96v1 7.36 7.42 7.44 ascon128av12 7.65 7.66 7.68 T:riverkeyakv2 7.85 7.85 7.87 T:norx3261v1 7.87 7.87 7.88 T:acorn128v3 8.41 8.43 8.46 T:ketjemajorv2 8.40 8.46 8.47 T:acorn128v2 8.44 8.47 8.49 T:lunarkeyakv2 9.35 9.36 9.36 T:aesjambuv1 10.04 10.06 10.08 T:ketjeminorv2 10.53 10.60 10.65 T:ascon128v1 10.52 10.60 10.66 T:ascon128v11 10.78 10.79 10.82 ascon128v12 14.52 14.56 14.76 T:aes128otrsv2 14.55 14.57 14.60 T:aes128otrsv1 14.74 14.76 14.76 T:twine80n6t4clocv3 14.77 14.80 14.82 T:aes128otrpv1 14.91 14.98 15.03 T:aes128otrpv2 15.62 15.63 15.63 T:twine80n6t4clocv2 18.55 18.57 18.60 T:aes128n12clocv1 18.63 18.65 18.70 T:aes256otrsv2 18.69 18.72 18.74 T:aes256otrsv1 18.86 18.88 18.91 T:aes128n8clocv1 19.48 19.50 19.52 T:aes256otrpv1 19.52 19.54 19.56 T:aes256otrpv2 27.95 27.99 28.19 T:ketjesrv1 28.66 28.67 28.68 T:proest256otrv1 29.62 29.65 29.68 T:aeadaes128ocbtaglen64v1 29.64 29.69 29.72 T:aeadaes128ocbtaglen96v1 29.92 29.93 29.96 T:ketjesrv2 35.14 35.17 35.19 T:aeadaes192ocbtaglen64v1 35.15 35.17 35.21 T:aeadaes192ocbtaglen96v1 40.81 40.84 40.88 T:aeadaes256ocbtaglen96v1 40.82 40.87 40.91 T:aeadaes256ocbtaglen64v1 49.91 49.94 49.99 T:colm127v1 56.94 57.03 57.96 T:ketjejrv1 57.47 57.49 57.52 T:proest128otrv1 68.68 68.71 68.76 T:present80n6t4silcv3 93.00 93.13 93.31 T:ketjejrv2 93.65 93.78 94.70 T:deoxysneq128128v13 114.36 114.48 114.63 T:aezv1 118.35 118.44 120.68 T:deoxyseq128128v13 129.15 129.21 129.25 T:led80n6t4silcv3 140.01 140.36 141.02 T:deoxysneq256128v13 184.56 185.07 187.72 T:deoxyseq256128v13 389.55? 391.03? 627.79? T:acorn128 3074.47 3076.43 3078.00 T:led80n6silcv1 3079.68 3081.04 3082.26 T:led80n6t4silcv2 3422.71 3423.82 3424.91 T:present80n6t4silcv2 3422.78 3424.31 3425.87 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.34 0.35 0.35 aegis128l 0.36 0.36 0.36 T:aezv4 0.36 0.36 0.37 T:tiaoxinv1 0.36 0.36 0.37 T:tiaoxinv2 0.36 0.37 0.37 T:aezv3 0.38 0.38 0.38 T:aezv5 0.59 0.59 0.60 T:aegis128 0.62 0.62 0.62 aegis256 0.81 0.81 0.81 T:morus1280256v1 0.81 0.81 0.81 T:morus1280128v1 0.81 0.82 0.82 T:morus1280128v2 0.82 0.82 0.82 T:morus1280256v2 0.83? 0.83? 1.55? T:aeadaes128ocbtaglen128v1 0.96? 0.96? 1.65? T:aeadaes192ocbtaglen128v1 0.97 0.98 0.98 T:aes128otrpv3 1.02 1.03 1.03 T:aes128otrcv3 1.21 1.21 1.21 T:morus640128v1 1.21 1.21 1.22 T:morus640128v2 1.25 1.26 1.26 T:aeadaes256ocbtaglen128v1 1.29 1.30 1.32 T:aes256otrpv3 1.33 1.33 1.34 T:deoxysi128v141 1.34 1.37 1.38 T:aes128gcmv1 1.37 1.37 1.37 T:aes256otrcv3 1.51 1.52 1.53 T:deoxysi256v141 1.58 1.59 1.60 T:deoxysneq128128v1 1.67 1.68 1.68 T:deoxysneq256128v1 1.68 1.70 1.72 T:deoxysii128v141 1.71 1.72 1.72 aes256gcmv1 1.85 1.85 1.86 T:colm0v1 1.92 1.92 1.94 T:deoxysii256v141 2.31 2.33 2.35 T:norx6444v3 2.44 2.44 2.45 T:deoxyseq128128v1 2.46 2.47 2.47 T:norx6441v3 2.46 2.47 2.47 T:norx6441v2 2.59 2.60 2.61 T:deoxyseq256128v1 2.76 2.76 2.76 T:aes128otrsv3 2.89 2.90 2.90 T:norx6441v1 3.64 3.65 3.66 T:seakeyakv2 3.72 3.73 3.74 T:norx6461v3 3.73 3.74 3.75 T:norx6461v2 3.81 3.81 3.81 T:aes256otrsv3 4.15 4.16 4.17 T:norx3241v3 4.16 4.17 4.18 T:norx3241v2 4.34 4.35 4.36 T:norx6461v1 4.34 4.35 4.37 T:lakekeyakv2 4.56 4.56 4.57 T:aes128n12t8clocv2 4.56 4.56 4.59 T:aes128n8t8clocv2 4.56 4.56 4.57 T:aes128n12t8clocv3 4.60 4.60 4.60 T:aes128n8t8silcv2 4.60 4.60 4.60 T:aes128n12t8silcv2 4.60 4.60 4.61 T:aes128n12t8silcv3 4.61 4.62 4.63 T:lakekeyakv1 4.89 4.90 4.91 T:norx3241v1 4.91 4.92 4.94 T:oceankeyakv2 5.29 5.30 5.31 T:norx6444v2 6.19 6.20 6.21 T:norx6444v1 6.30 6.31 6.32 T:norx3261v3 6.30 6.31 6.32 T:norx3261v2 7.31 7.33 7.37 T:ascon128av11 7.36 7.38 7.41 T:ascon96v1 7.34 7.41 7.43 ascon128av12 7.66 7.67 7.69 T:riverkeyakv2 7.84 7.85 7.86 T:norx3261v1 7.87 7.88 7.88 T:acorn128v3 8.43 8.45 8.47 T:ketjemajorv2 8.41 8.45 8.47 T:acorn128v2 8.45 8.50 8.52 T:lunarkeyakv2 9.35 9.36 9.36 T:aesjambuv1 10.05 10.07 10.09 T:ketjeminorv2 10.57 10.59 10.62 T:ascon128v11 10.58 10.60 10.61 T:ascon128v1 10.77 10.78 10.80 ascon128v12 14.56 14.58 14.78 T:aes128otrsv2 14.57 14.59 14.62 T:aes128otrsv1 14.74 14.76 14.77 T:twine80n6t4clocv3 14.80 14.83 14.86 T:aes128otrpv1 14.96 15.01 15.05 T:aes128otrpv2 15.62 15.63 15.64 T:twine80n6t4clocv2 18.56 18.58 18.61 T:aes128n12clocv1 18.65 18.68 18.71 T:aes256otrsv2 18.69 18.74 18.76 T:aes256otrsv1 18.85 18.88 18.90 T:aes128n8clocv1 19.51 19.52 19.54 T:aes256otrpv1 19.53 19.54 19.56 T:aes256otrpv2 28.02 28.05 28.20 T:ketjesrv1 28.65 28.67 28.68 T:proest256otrv1 29.63 29.66 29.69 T:aeadaes128ocbtaglen64v1 29.64 29.69 29.73 T:aeadaes128ocbtaglen96v1 29.94 29.95 29.97 T:ketjesrv2 35.14 35.16 35.18 T:aeadaes192ocbtaglen64v1 35.16 35.18 35.21 T:aeadaes192ocbtaglen96v1 40.80 40.84 40.87 T:aeadaes256ocbtaglen96v1 40.82 40.88 40.91 T:aeadaes256ocbtaglen64v1 49.88 49.92 49.96 T:colm127v1 56.91 57.11 58.10 T:ketjejrv1 57.48 57.49 57.51 T:proest128otrv1 68.69 68.71 68.77 T:present80n6t4silcv3 93.01 93.11 93.27 T:ketjejrv2 93.66 93.82 94.75 T:deoxysneq128128v13 114.19 114.33 114.44 T:aezv1 118.37 118.51 120.85 T:deoxyseq128128v13 129.18 129.22 129.25 T:led80n6t4silcv3 140.03 140.40 141.13 T:deoxysneq256128v13 184.53 184.74 187.45 T:deoxyseq256128v13 389.57? 390.99? 631.91? T:acorn128 3074.54 3075.94 3077.91 T:led80n6silcv1 3079.12 3080.68 3082.05 T:led80n6t4silcv2 3422.71 3423.84 3424.77 T:present80n6t4silcv2 3422.89 3424.29 3426.06 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.59 1.65 1.70 T:aegis128 1.72 1.80 1.90 aegis128l 2.11 2.15 2.33 T:tiaoxinv2 2.12 2.15 2.21 aegis256 2.14 2.17 2.23 T:tiaoxinv1 2.62 2.65 2.69 T:aezv4 2.71 2.76 2.81 T:aezv5 2.95 2.98 3.03 T:aezv3 3.64 3.76 3.89 T:aeadaes256ocbtaglen128v1 4.01 4.03 4.07 T:aes128otrpv3 4.11 4.15 4.24 T:morus640128v1 4.24 4.29 4.38 T:morus1280128v1 4.26 4.33 4.40 T:morus1280256v1 4.29 4.34 4.43 T:morus640128v2 4.33? 4.42? 21.44? T:aeadaes128ocbtaglen128v1 4.55 4.59 4.65 T:morus1280256v2 4.54 4.60 4.67 T:morus1280128v2 4.67? 4.89? 23.24? T:aeadaes192ocbtaglen128v1 4.98 5.00 5.04 T:aes128otrsv3 5.56 5.66 5.73 T:deoxysneq128128v1 5.62 5.67 5.73 T:colm0v1 5.78 5.82 5.87 T:aes128otrcv3 5.82 5.87 5.92 T:deoxysi128v141 5.88 5.91 5.96 T:aes128n12t8clocv2 5.88 5.92 5.97 T:aes128n12t8clocv3 5.90 5.92 5.95 T:aes128n8t8clocv2 6.06 6.06 6.08 T:aes256otrpv3 6.28 6.35 6.45 T:deoxysneq256128v1 6.46 6.52 6.57 T:aes128gcmv1 6.77 6.83 6.92 T:aes128n12t8silcv3 6.78 6.83 6.88 T:aes128n8t8silcv2 6.77 6.84 6.90 T:aes128n12t8silcv2 6.82 6.89 6.96 T:deoxysi256v141 6.94 6.96 6.99 T:aes256otrsv3 7.47 7.52 7.59 aes256gcmv1 7.83 7.87 7.91 T:aes256otrcv3 7.95 8.03 8.09 T:deoxyseq128128v1 8.24 8.27 8.36 T:norx6441v1 8.24 8.30 8.35 T:norx6441v2 8.27 8.33 8.40 T:norx6441v3 9.77 9.84 9.93 T:deoxyseq256128v1 10.25 10.31 10.41 T:norx3241v1 10.30 10.40 10.48 T:norx3241v2 10.34 10.43 10.49 T:norx3241v3 10.57 10.61 10.67 T:deoxysii128v141 10.79 10.91 11.09 T:ascon96v1 10.85 10.95 11.04 T:ascon128av11 11.14 11.23 11.39 ascon128av12 12.24 12.32 12.40 T:deoxysii256v141 12.25 12.33 12.40 T:norx6461v1 12.31 12.35 12.38 T:aesjambuv1 12.37 12.45 12.55 T:norx6461v3 12.39 12.49 12.65 T:norx6461v2 13.98 14.08 14.27 T:ascon128v11 14.03 14.11 14.25 T:ascon128v1 14.26 14.35 14.52 ascon128v12 15.12 15.18 15.50 T:lakekeyakv1 15.09 15.26 15.67 T:norx6444v3 15.41 15.54 15.66 T:norx3261v3 15.51 15.59 15.68 T:norx3261v2 16.38 16.43 16.55 T:norx3261v1 17.70 17.80 18.01 T:riverkeyakv2 18.73 18.76 18.90 T:lakekeyakv2 20.73 20.79 20.88 T:twine80n6t4clocv3 21.63 21.69 21.81 T:twine80n6t4clocv2 23.01 23.09 23.24 T:aes128n8clocv1 23.01 23.09 23.30 T:aes128n12clocv1 24.40 24.49 24.68 T:aes128otrsv1 24.32 24.58 25.01 T:aes128otrsv2 24.95 25.05 25.18 T:aes128otrpv2 25.18 25.27 25.34 T:aes128otrpv1 30.75 30.81 30.91 T:acorn128v3 30.89 31.02 31.45 T:aes256otrsv2 30.98 31.12 31.53 T:aes256otrsv1 32.24 32.37 32.71 T:ketjeminorv2 32.42 32.49 32.64 T:aes256otrpv2 32.63 32.71 32.90 T:acorn128v2 32.84 32.95 33.11 T:aes256otrpv1 33.51 33.57 33.65 T:seakeyakv2 37.83 37.99 38.20 T:norx6444v2 39.75 39.78 39.93 T:aeadaes128ocbtaglen64v1 39.76 39.79 39.95 T:aeadaes128ocbtaglen96v1 43.61 43.92 44.22 T:ketjesrv1 44.08 44.37 44.83 T:norx6444v1 46.02 46.05 46.31 T:aeadaes192ocbtaglen64v1 46.03 46.09 46.40 T:aeadaes192ocbtaglen96v1 49.22 49.46 49.89 T:ketjemajorv2 50.74 50.88 51.03 T:ketjesrv2 53.55 53.58 53.80 T:aeadaes256ocbtaglen96v1 53.62 53.71 53.96 T:oceankeyakv2 53.61 53.71 53.90 T:aeadaes256ocbtaglen64v1 60.55 60.62 60.88 T:colm127v1 74.90 75.56 76.72 T:ketjejrv1 82.13 82.40 82.77 T:proest256otrv1 84.76 84.89 85.05 T:present80n6t4silcv3 87.39 87.70 88.39 T:deoxysneq128128v13 110.70 110.95 111.17 T:proest128otrv1 122.79 123.19 124.02 T:ketjejrv2 131.92 132.14 132.40 T:aezv1 137.23 137.78 138.29 T:lunarkeyakv2 137.40 137.80 138.55 T:deoxysneq256128v13 146.94 147.11 150.22 T:deoxyseq128128v13 153.25 154.27 158.98 T:led80n6t4silcv3 229.42 229.85 232.36 T:deoxyseq256128v13 1326.18? 1327.67? 2096.98? T:acorn128 3440.21 3443.29 3466.62 T:led80n6silcv1 3445.93 3446.88 3447.71 T:led80n6t4silcv2 3829.32 3830.33 3831.84 T:present80n6t4silcv2 3832.07 3833.81 3836.74 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.71 1.75 1.78 T:aegis128 1.83 1.86 1.90 aegis128l 2.12 2.16 2.24 T:tiaoxinv1 2.12 2.16 2.21 T:tiaoxinv2 2.27 2.30 2.35 aegis256 2.61 2.67 2.71 T:aezv4 2.71 2.73 2.79 T:aezv5 2.97 2.97 3.02 T:aezv3 4.06 4.08 4.10 T:aes128otrpv3 4.12 4.17 4.27 T:morus640128v1 4.25 4.29 4.38 T:aeadaes256ocbtaglen128v1 4.39 4.45 4.49 T:morus1280128v1 4.44 4.49 4.59 T:morus640128v2 4.42 4.50 4.61 T:morus1280256v1 4.65 4.71 4.78 T:morus1280128v2 4.67 4.72 4.77 T:morus1280256v2 4.90? 4.96? 22.28? T:aeadaes128ocbtaglen128v1 5.20 5.22 5.25 T:aes128otrsv3 5.39? 5.45? 38.22? T:aeadaes192ocbtaglen128v1 5.99 6.04 6.12 T:aes128otrcv3 6.01 6.04 6.07 T:aes128n8t8clocv2 6.05 6.08 6.12 T:aes128n12t8clocv2 6.05 6.09 6.11 T:aes128n12t8clocv3 6.14 6.16 6.19 T:aes256otrpv3 6.51 6.55 6.62 T:colm0v1 6.61 6.67 6.74 T:aes128gcmv1 7.03 7.08 7.15 T:aes128n12t8silcv2 7.01 7.08 7.13 T:aes128n8t8silcv2 7.04 7.11 7.25 T:aes128n12t8silcv3 7.09 7.12 7.16 T:aes256otrsv3 7.66 7.70 7.75 aes256gcmv1 8.07 8.10 8.14 T:aes256otrcv3 8.34 8.39 8.45 T:norx6441v1 8.40 8.46 8.54 T:norx6441v3 8.40 8.47 8.54 T:norx6441v2 8.68 8.73 8.80 T:deoxysi128v141 8.78 8.83 8.88 T:deoxysneq256128v1 8.97 9.00 9.08 T:deoxysneq128128v1 9.79 9.85 9.92 T:deoxysi256v141 10.41 10.48 10.58 T:norx3241v1 10.49 10.57 10.66 T:norx3241v3 10.52 10.59 10.67 T:norx3241v2 10.84 10.94 11.05 T:ascon96v1 10.91 11.00 11.16 T:ascon128av11 11.23 11.31 11.51 ascon128av12 11.59 11.69 11.83 T:deoxysii128v141 11.79 11.86 11.91 T:deoxyseq128128v1 12.11 12.21 12.34 T:deoxyseq256128v1 12.43 12.49 12.58 T:norx6461v1 12.49 12.53 12.55 T:aesjambuv1 12.52 12.62 12.93 T:norx6461v2 12.63 12.72 12.80 T:norx6461v3 13.80 13.86 13.92 T:deoxysii256v141 13.91 14.01 14.15 T:ascon128v11 13.96 14.04 14.15 T:ascon128v1 14.21 14.33 14.48 ascon128v12 15.00 15.11 15.41 T:lakekeyakv1 15.17 15.31 15.63 T:norx6444v3 15.69 15.77 15.88 T:norx3261v2 15.89 15.98 16.10 T:norx3261v3 16.56 16.64 16.72 T:norx3261v1 17.83 17.92 18.03 T:riverkeyakv2 18.67 18.71 18.92 T:lakekeyakv2 20.99 21.07 21.16 T:twine80n6t4clocv3 21.74 21.85 21.95 T:twine80n6t4clocv2 22.81 22.86 22.97 T:aes128n12clocv1 22.97 23.03 23.14 T:aes128n8clocv1 24.52 24.61 24.84 T:aes128otrsv2 24.65 24.72 24.91 T:aes128otrsv1 25.20 25.33 25.41 T:aes128otrpv2 25.33 25.51 25.65 T:aes128otrpv1 30.52 30.58 30.66 T:acorn128v3 31.28 31.43 31.72 T:aes256otrsv2 31.35 31.53 31.93 T:aes256otrsv1 32.38 32.53 32.80 T:ketjeminorv2 32.80 32.90 33.05 T:aes256otrpv2 32.86 32.96 33.08 T:aes256otrpv1 32.97 33.02 33.12 T:acorn128v2 33.59 33.67 33.94 T:seakeyakv2 37.99 38.10 38.40 T:norx6444v2 44.07 44.20 44.33 T:norx6444v1 44.30 44.67 45.03 T:ketjesrv1 48.06 48.15 48.30 T:aeadaes128ocbtaglen96v1 48.09 48.19 48.31 T:aeadaes128ocbtaglen64v1 49.78 49.98 50.34 T:ketjemajorv2 51.92 52.32 52.62 T:ketjesrv2 53.93 54.07 54.32 T:oceankeyakv2 55.72 55.83 56.05 T:aeadaes192ocbtaglen64v1 55.80 55.91 56.14 T:aeadaes192ocbtaglen96v1 65.16 65.29 65.56 T:aeadaes256ocbtaglen96v1 65.32 65.48 65.77 T:aeadaes256ocbtaglen64v1 69.82 69.92 70.12 T:colm127v1 75.78 76.62 77.89 T:ketjejrv1 83.28 83.50 83.92 T:proest256otrv1 84.74 84.86 85.08 T:present80n6t4silcv3 103.26 103.52 103.69 T:deoxysneq128128v13 111.68 111.93 112.28 T:proest128otrv1 123.84 124.29 125.26 T:ketjejrv2 135.53 135.73 136.09 T:aezv1 137.32 138.01 138.35 T:lunarkeyakv2 146.81 147.18 149.99 T:deoxyseq128128v13 152.74 152.97 153.25 T:led80n6t4silcv3 155.29 155.85 156.59 T:deoxysneq256128v13 229.16 229.60 231.85 T:deoxyseq256128v13 1348.99? 1349.97? 2161.80? T:acorn128 3440.82 3442.33 3444.29 T:led80n6silcv1 3446.54 3447.06 3448.47 T:led80n6t4silcv2 3829.18 3829.81 3832.02 T:present80n6t4silcv2 3832.03 3833.83 3843.82 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.71 1.75 1.78 T:aegis128 1.82 1.85 1.89 aegis128l 2.11 2.14 2.21 T:tiaoxinv2 2.11 2.16 2.21 T:tiaoxinv1 2.14 2.17 2.19 T:aezv4 2.19 2.23 2.26 T:aezv5 2.23 2.25 2.27 T:aezv3 2.27 2.32 2.36 aegis256 4.06 4.07 4.10 T:aes128otrpv3 4.11 4.16 4.21 T:morus640128v1 4.26 4.30 4.34 T:aeadaes256ocbtaglen128v1 4.38 4.43 4.46 T:morus1280128v1 4.41 4.47 4.53 T:morus640128v2 4.42 4.49 4.55 T:morus1280256v1 4.66 4.70 4.73 T:morus1280128v2 4.66 4.72 4.78 T:morus1280256v2 4.88? 4.93? 21.58? T:aeadaes128ocbtaglen128v1 5.20 5.23 5.25 T:aes128otrsv3 5.38? 5.44? 21.46? T:aeadaes192ocbtaglen128v1 5.91 5.94 6.11 T:aes128n8t8clocv2 5.91 5.94 6.04 T:aes128n12t8clocv3 5.91 5.94 6.11 T:aes128n12t8clocv2 5.99 6.02 6.10 T:aes128otrcv3 6.14 6.17 6.19 T:aes256otrpv3 6.55 6.59 6.72 T:colm0v1 6.61 6.67 6.75 T:aes128gcmv1 6.70 6.79 6.90 T:aes128n12t8silcv3 6.71 6.80 7.05 T:aes128n8t8silcv2 6.76 6.80 6.90 T:aes128n12t8silcv2 7.10 7.13 7.16 T:aes256otrsv3 7.63 7.68 7.75 aes256gcmv1 8.07 8.10 8.14 T:aes256otrcv3 8.32 8.36 8.46 T:deoxysneq256128v1 8.30 8.39 8.44 T:norx6441v1 8.42 8.48 8.54 T:norx6441v2 8.43 8.48 8.57 T:norx6441v3 8.45 8.54 8.62 T:deoxysneq128128v1 8.65 8.71 8.81 T:deoxysi128v141 9.84 9.89 9.92 T:deoxysi256v141 10.42 10.48 10.54 T:norx3241v1 10.51 10.59 10.66 T:norx3241v3 10.56 10.61 10.65 T:norx3241v2 10.83 10.94 11.10 T:ascon96v1 10.83 10.95 11.09 T:ascon128av11 11.24 11.35 11.45 ascon128av12 11.61 11.68 11.80 T:deoxysii128v141 11.82 11.86 11.92 T:deoxyseq128128v1 12.13 12.24 12.39 T:deoxyseq256128v1 12.41 12.49 12.55 T:norx6461v1 12.49 12.53 12.55 T:aesjambuv1 12.50 12.59 12.73 T:norx6461v2 12.65 12.71 12.77 T:norx6461v3 13.81 13.86 13.89 T:deoxysii256v141 13.90 13.96 14.10 T:ascon128v1 13.90 13.98 14.14 T:ascon128v11 14.26 14.35 14.47 ascon128v12 15.09 15.17 15.42 T:lakekeyakv1 15.15 15.32 15.59 T:norx6444v3 15.73 15.84 15.91 T:norx3261v2 15.85 15.95 16.04 T:norx3261v3 16.56 16.61 16.65 T:norx3261v1 17.84 17.91 18.14 T:riverkeyakv2 18.71 18.74 18.92 T:lakekeyakv2 20.93 21.02 21.18 T:twine80n6t4clocv3 21.69 21.74 21.84 T:twine80n6t4clocv2 22.74 22.83 22.98 T:aes128n12clocv1 22.88 22.97 23.19 T:aes128n8clocv1 24.35 24.72 25.14 T:aes128otrsv2 24.77 24.85 24.99 T:aes128otrsv1 25.32 25.44 25.65 T:aes128otrpv2 25.33 25.49 25.69 T:aes128otrpv1 30.50 30.55 30.61 T:acorn128v3 31.27 31.40 31.69 T:aes256otrsv2 31.47 31.62 31.85 T:aes256otrsv1 32.43 32.62 32.86 T:ketjeminorv2 32.87 33.01 33.24 T:aes256otrpv2 32.94 33.01 33.07 T:acorn128v2 32.98 33.06 33.22 T:aes256otrpv1 33.68 33.74 33.93 T:seakeyakv2 38.04 38.28 38.82 T:norx6444v2 44.05 44.17 44.34 T:norx6444v1 44.35 44.74 45.00 T:ketjesrv1 48.04 48.14 48.24 T:aeadaes128ocbtaglen96v1 48.11 48.20 48.30 T:aeadaes128ocbtaglen64v1 49.85 50.12 50.36 T:ketjemajorv2 51.55 51.72 52.16 T:ketjesrv2 54.04 54.18 54.41 T:oceankeyakv2 55.78 55.85 55.95 T:aeadaes192ocbtaglen64v1 55.79 55.86 55.95 T:aeadaes192ocbtaglen96v1 65.12 65.21 65.38 T:aeadaes256ocbtaglen96v1 65.30 65.49 65.64 T:aeadaes256ocbtaglen64v1 69.56 69.62 69.76 T:colm127v1 75.58 76.56 77.69 T:ketjejrv1 80.80 80.93 81.36 T:proest256otrv1 84.65 84.80 84.96 T:present80n6t4silcv3 103.25 103.49 103.91 T:deoxysneq128128v13 111.66 111.86 112.09 T:proest128otrv1 123.98 124.69 125.45 T:ketjejrv2 135.54 135.66 135.97 T:aezv1 137.38 138.39 138.88 T:lunarkeyakv2 146.97 147.29 150.09 T:deoxyseq128128v13 152.77 153.06 153.34 T:led80n6t4silcv3 155.32 156.01 156.71 T:deoxysneq256128v13 229.31 229.72 232.24 T:deoxyseq256128v13 1349.06? 1349.77? 2161.58? T:acorn128 3440.33 3442.01 3445.05 T:led80n6silcv1 3446.49 3447.26 3448.34 T:led80n6t4silcv2 3829.42 3830.48 3831.44 T:present80n6t4silcv2 3831.75 3833.27 3836.66 T:present80n6silcv1