VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20261018

[Page version: 20261103 15:52:22]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.21 0.21 0.22 T:tiaoxinv1 0.20 0.21 0.22 T:tiaoxinv2 0.25 0.25 0.25 aegis128l 0.25 0.26 0.26 T:aegis128l 0.37 0.38 0.41 aegis256 0.41 0.41 0.41 T:aegis256 0.41 0.42 0.42 T:aegis128 0.61 0.62 0.62 T:aezv4 0.62 0.62 0.63 T:aezv3 0.61 0.62 0.63 T:aezv5 0.63 0.63 0.64 T:aes128otrcv3 0.63 0.63 0.64 T:morus1280128v1 0.63 0.64 0.65 T:morus1280256v2 0.63 0.64 0.64 T:morus1280128v2 0.63 0.64 0.64 T:morus1280256v1 0.64 0.64 0.66 T:aes128otrsv3 0.64 0.65 0.66 T:aes128otrpv3 0.66 0.67 0.67 T:aeadaes128ocbtaglen128v1 0.59? 0.75? 0.94? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.87 T:aes256otrcv3 0.86 0.87 0.87 T:deoxysneq128128v1 0.87 0.88 0.89 T:aes256otrsv3 0.86 0.88 0.89 T:deoxysi128v141 0.88 0.88 0.89 T:aes256otrpv3 0.90 0.91 0.91 T:aeadaes256ocbtaglen128v1 0.99 0.99 1.00 T:deoxysneq256128v1 0.99 1.00 1.01 T:deoxysi256v141 1.07 1.08 1.09 T:morus640128v2 1.07 1.08 1.09 T:morus640128v1 1.14 1.16 1.18 T:norx6444v3 1.18 1.19 1.20 T:aes128gcmv1 1.43 1.44 1.45 aes256gcmv1 1.59 1.60 1.60 T:colm0v1 1.75 1.75 1.76 T:deoxysii128v141 1.78 1.78 1.80 T:deoxyseq128128v1 2.01 2.01 2.02 T:deoxysii256v141 2.02 2.02 2.03 T:deoxyseq256128v1 2.04 2.08 2.14 T:lunarkeyakv2 2.09 2.12 2.15 T:norx6441v2 2.16 2.18 2.21 T:norx6441v3 2.54 2.56 2.58 T:norx6441v1 2.75 2.75 2.76 T:aes128n12t8clocv2 2.75 2.76 2.76 T:aes128n12t8clocv3 2.75 2.76 2.76 T:aes128n8t8clocv2 2.75 2.76 2.76 T:aes128n8t8silcv2 2.75 2.77 2.80 T:seakeyakv2 2.79 2.79 2.80 T:aes128n12t8silcv2 2.79 2.79 2.80 T:aes128n12t8silcv3 2.82 2.86 2.89 T:oceankeyakv2 3.22 3.24 3.28 T:norx6461v3 3.22 3.25 3.27 T:norx6461v2 3.77 3.79 3.81 T:norx6444v2 3.90 3.92 3.94 T:norx3241v2 3.93 3.96 3.99 T:norx6461v1 3.94 3.97 4.00 T:norx3241v3 4.10 4.12 4.14 T:lakekeyakv1 4.32 4.35 4.36 aes128gcmv1 4.39 4.41 4.43 T:lakekeyakv2 4.47 4.50 4.54 T:norx6444v1 4.74 4.77 4.80 T:norx3241v1 5.47 5.58 5.62 T:acorn128v3 5.83 5.84 5.85 T:aesjambuv1 5.99 6.01 6.07 T:norx3261v3 6.11 6.14 6.16 T:norx3261v2 6.76 6.79 6.81 T:acorn128v2 7.18 7.20 7.23 T:norx3261v1 7.38 7.46 7.57 T:ketjemajorv2 7.48 7.50 7.53 T:ascon96v1 7.48 7.52 7.55 T:ascon128av11 7.55 7.58 7.60 ascon128av12 9.77 9.81 9.92 T:riverkeyakv2 10.40 10.45 10.52 T:ketjeminorv2 10.88 10.91 10.94 T:ascon128v11 10.88 10.91 10.94 T:ascon128v1 10.92 10.95 10.98 ascon128v12 13.43 13.45 13.48 T:aes128otrsv1 13.45 13.48 13.52 T:aes128otrpv2 13.48 13.52 13.54 T:aes128otrsv2 13.65 13.67 13.70 T:aes128otrpv1 14.61 14.62 14.62 T:twine80n6t4clocv3 15.55 15.56 15.58 T:twine80n6t4clocv2 17.41 17.44 17.46 T:aes256otrsv1 17.42 17.44 17.46 T:aes256otrpv1 17.45 17.48 17.51 T:aes256otrpv2 17.59 17.62 17.64 T:aes256otrsv2 22.99 23.02 23.04 T:aes128n12clocv1 23.08 23.11 23.14 T:aes128n8clocv1 24.65 24.67 24.68 T:aeadaes128ocbtaglen96v1 24.67 24.68 24.69 T:aeadaes128ocbtaglen64v1 27.07 27.10 27.12 T:proest256otrv1 29.02 29.05 29.07 T:aeadaes192ocbtaglen96v1 29.03 29.06 29.08 T:aeadaes192ocbtaglen64v1 31.29 31.37 31.44 T:ketjesrv1 32.30 32.35 32.46 T:ketjesrv2 33.45 33.48 33.51 T:aeadaes256ocbtaglen64v1 33.46 33.50 33.52 T:aeadaes256ocbtaglen96v1 50.36 50.40 50.45 T:proest128otrv1 54.54 54.58 54.63 T:colm127v1 59.09 59.13 59.18 T:ketjejrv1 71.63 71.72 72.45 T:present80n6t4silcv3 79.92 79.97 80.02 T:deoxysneq128128v13 93.62 94.00 94.33 T:ketjejrv2 111.78 111.87 111.96 T:deoxysneq256128v13 125.09 125.18 125.24 T:led80n6t4silcv3 157.64 158.18 158.92 T:aezv1 159.51 159.62 159.71 T:deoxyseq128128v13 224.60 230.04 232.14 T:deoxyseq256128v13 266.93? 326.31? 592.38? T:acorn128 4033.00 4035.51 4036.96 T:led80n6silcv1 4041.53 4042.18 4043.97 T:led80n6t4silcv2 4332.99 4333.49 4334.15 T:present80n6t4silcv2 4334.13 4336.87 4337.59 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.25 0.25 0.26 T:aegis128l 0.25 0.25 0.25 aegis128l 0.36 0.37 0.37 T:tiaoxinv1 0.36 0.37 0.38 T:tiaoxinv2 0.40 0.40 0.40 T:aegis256 0.45 0.46 0.46 T:aegis128 0.48 0.49 0.49 aegis256 0.61 0.62 0.63 T:aezv3 0.61 0.62 0.62 T:aezv5 0.62 0.62 0.62 T:aezv4 0.64 0.65 0.67 T:morus1280256v2 0.65 0.65 0.66 T:morus1280128v2 0.65 0.65 0.66 T:morus1280256v1 0.65 0.65 0.66 T:morus1280128v1 0.65 0.66 0.66 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.68 T:aes128otrcv3 0.68 0.69 0.70 T:aes128otrsv3 0.68 0.69 0.70 T:aes128otrpv3 0.57? 0.75? 0.85? T:aeadaes192ocbtaglen128v1 0.90 0.91 0.91 T:aes256otrcv3 0.91 0.92 0.93 T:aes256otrsv3 0.91 0.92 0.92 T:aes256otrpv3 0.95 0.96 0.97 T:aeadaes256ocbtaglen128v1 1.05 1.05 1.06 T:aes128gcmv1 1.07 1.08 1.09 T:morus640128v1 1.09 1.10 1.11 T:morus640128v2 1.14 1.15 1.15 T:deoxysi128v141 1.14 1.16 1.18 T:norx6444v3 1.21 1.21 1.22 T:deoxysneq128128v1 1.28 1.30 1.32 T:deoxysi256v141 1.31 1.31 1.32 T:deoxysneq256128v1 1.42 1.43 1.44 aes256gcmv1 1.65 1.66 1.68 T:colm0v1 1.75 1.76 1.76 T:deoxysii128v141 2.00 2.00 2.01 T:deoxysii256v141 2.02 2.04 2.06 T:norx6441v2 2.02 2.05 2.08 T:norx6441v3 2.11 2.16 2.21 T:lunarkeyakv2 2.42 2.42 2.42 T:deoxyseq128128v1 2.45 2.47 2.49 T:norx6441v1 2.52 2.53 2.53 T:deoxyseq256128v1 2.69 2.70 2.72 T:aes128n12t8silcv2 2.69 2.70 2.72 T:aes128n12t8silcv3 2.72 2.73 2.73 T:aes128n12t8clocv2 2.72 2.73 2.74 T:aes128n8t8silcv2 2.72 2.73 2.73 T:aes128n12t8clocv3 2.72 2.73 2.74 T:aes128n8t8clocv2 2.83 2.87 2.89 T:seakeyakv2 2.89 2.92 2.97 T:oceankeyakv2 3.12 3.14 3.17 T:norx6461v3 3.13 3.15 3.17 T:norx6461v2 3.73 3.75 3.77 T:norx3241v2 3.76 3.79 3.82 T:norx6444v2 3.76 3.79 3.83 T:norx6461v1 3.77 3.79 3.81 T:norx3241v3 4.19 4.21 4.23 T:lakekeyakv1 4.30 4.31 4.34 aes128gcmv1 4.37 4.39 4.40 T:lakekeyakv2 4.47 4.50 4.54 T:norx6444v1 4.52 4.54 4.56 T:norx3241v1 5.79 5.82 5.85 T:norx3261v3 5.92 5.96 5.99 T:norx3261v2 6.05 6.10 6.10 T:aesjambuv1 6.93 6.96 6.98 T:acorn128v2 6.96 7.05 7.14 T:ketjemajorv2 7.06 7.07 7.08 T:norx3261v1 7.26 7.32 7.37 T:acorn128v3 7.39 7.42 7.44 ascon128av12 7.58 7.62 7.65 T:ascon128av11 7.60 7.64 7.67 T:ascon96v1 9.92 9.96 9.98 T:riverkeyakv2 10.24 10.28 10.31 T:ketjeminorv2 10.58 10.61 10.65 T:ascon128v11 10.58 10.61 10.69 T:ascon128v1 10.91 10.95 10.97 ascon128v12 13.93 13.95 13.98 T:aes128otrpv1 13.99 14.05 14.10 T:aes128otrpv2 14.03 14.07 14.11 T:aes128otrsv2 14.32 14.36 14.50 T:aes128otrsv1 14.61 14.63 14.64 T:twine80n6t4clocv3 15.48 15.52 15.59 T:twine80n6t4clocv2 17.97 18.03 18.19 T:aes256otrsv2 18.09 18.13 18.17 T:aes256otrpv2 18.24 18.31 18.78 T:aes256otrsv1 18.31 18.35 18.38 T:aes256otrpv1 22.02 22.05 22.07 T:aes128n12clocv1 22.47 22.51 22.55 T:aes128n8clocv1 27.02 27.06 27.09 T:proest256otrv1 32.02 32.08 32.16 T:ketjesrv2 31.99 32.08 32.14 T:ketjesrv1 33.22 33.26 33.30 T:aeadaes128ocbtaglen96v1 33.24 33.29 33.33 T:aeadaes128ocbtaglen64v1 39.66 39.72 39.80 T:aeadaes192ocbtaglen96v1 39.70 39.76 39.81 T:aeadaes192ocbtaglen64v1 46.13 46.20 46.27 T:aeadaes256ocbtaglen64v1 46.17 46.21 46.24 T:aeadaes256ocbtaglen96v1 50.79 50.84 50.87 T:proest128otrv1 60.00 60.06 60.11 T:ketjejrv1 71.48 71.63 72.31 T:present80n6t4silcv3 71.83 71.89 71.94 T:colm127v1 94.11 94.31 94.59 T:ketjejrv2 107.54 107.63 107.76 T:deoxysneq128128v13 124.99 125.07 125.18 T:led80n6t4silcv3 150.86 151.07 151.50 T:deoxysneq256128v13 157.93 158.32 159.20 T:aezv1 159.51 159.62 159.75 T:deoxyseq128128v13 224.36 229.94 231.99 T:deoxyseq256128v13 292.24? 348.77? 595.34? T:acorn128 4031.62 4032.57 4036.08 T:led80n6silcv1 4041.98 4042.31 4042.90 T:led80n6t4silcv2 4332.79 4333.09 4333.34 T:present80n6t4silcv2 4332.87 4333.33 4336.13 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.25 0.25 0.25 T:aezv3 0.24 0.25 0.25 T:aezv4 0.24 0.25 0.26 T:aezv5 0.25 0.25 0.26 T:aegis128l 0.27 0.27 0.28 aegis128l 0.36 0.37 0.37 T:tiaoxinv1 0.36 0.37 0.38 T:tiaoxinv2 0.40 0.40 0.40 T:aegis256 0.45 0.46 0.46 T:aegis128 0.47 0.48 0.49 aegis256 0.63 0.65 0.65 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v2 0.65 0.65 0.65 T:morus1280256v1 0.64 0.65 0.66 T:morus1280128v1 0.66 0.66 0.66 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.68 T:aes128otrcv3 0.68 0.69 0.69 T:aes128otrsv3 0.68 0.69 0.69 T:aes128otrpv3 0.65? 0.75? 0.94? T:aeadaes192ocbtaglen128v1 0.90 0.91 0.91 T:aes256otrcv3 0.91 0.91 0.92 T:aes256otrsv3 0.91 0.92 0.92 T:aes256otrpv3 0.95 0.96 0.96 T:aeadaes256ocbtaglen128v1 1.05 1.05 1.06 T:aes128gcmv1 1.07 1.08 1.08 T:morus640128v1 1.09 1.10 1.11 T:morus640128v2 1.14 1.15 1.16 T:deoxysi128v141 1.14 1.16 1.17 T:norx6444v3 1.21 1.21 1.22 T:deoxysneq128128v1 1.28 1.30 1.32 T:deoxysi256v141 1.30 1.31 1.32 T:deoxysneq256128v1 1.42 1.43 1.43 aes256gcmv1 1.65 1.66 1.68 T:colm0v1 1.75 1.76 1.77 T:deoxysii128v141 1.74 1.76 1.82 aes128gcmv1 2.00 2.01 2.01 T:deoxysii256v141 2.02 2.03 2.06 T:norx6441v2 2.02 2.04 2.05 T:norx6441v3 2.14 2.18 2.22 T:lunarkeyakv2 2.41 2.42 2.43 T:deoxyseq128128v1 2.45 2.47 2.49 T:norx6441v1 2.52 2.53 2.54 T:deoxyseq256128v1 2.69 2.70 2.70 T:aes128n12t8silcv2 2.70 2.70 2.71 T:aes128n12t8silcv3 2.72 2.73 2.73 T:aes128n8t8silcv2 2.72 2.73 2.74 T:aes128n12t8clocv2 2.72 2.73 2.74 T:aes128n12t8clocv3 2.72 2.73 2.75 T:aes128n8t8clocv2 2.87 2.89 2.92 T:seakeyakv2 2.93 2.95 2.98 T:oceankeyakv2 3.11 3.15 3.17 T:norx6461v3 3.13 3.15 3.17 T:norx6461v2 3.74 3.75 3.78 T:norx3241v2 3.76 3.78 3.81 T:norx6461v1 3.78 3.80 3.81 T:norx3241v3 3.77 3.81 3.85 T:norx6444v2 4.22 4.25 4.26 T:lakekeyakv1 4.39 4.40 4.42 T:lakekeyakv2 4.50 4.53 4.56 T:norx6444v1 4.52 4.54 4.56 T:norx3241v1 5.79 5.81 5.83 T:norx3261v3 5.94 5.97 5.99 T:norx3261v2 6.03 6.04 6.04 T:aesjambuv1 6.94 6.96 6.98 T:acorn128v2 6.99 7.07 7.11 T:ketjemajorv2 7.06 7.07 7.09 T:norx3261v1 7.26 7.32 7.37 T:acorn128v3 7.40 7.42 7.44 ascon128av12 7.59 7.63 7.66 T:ascon128av11 7.62 7.65 7.69 T:ascon96v1 9.97 10.00 10.03 T:riverkeyakv2 10.27 10.31 10.34 T:ketjeminorv2 10.58 10.61 10.72 T:ascon128v11 10.59 10.61 10.72 T:ascon128v1 10.91 10.95 10.97 ascon128v12 13.95 13.98 14.01 T:aes128otrpv1 14.07 14.11 14.15 T:aes128otrpv2 14.09 14.13 14.17 T:aes128otrsv2 14.34 14.38 14.52 T:aes128otrsv1 14.60 14.62 14.63 T:twine80n6t4clocv3 15.46 15.51 15.58 T:twine80n6t4clocv2 18.04 18.09 18.21 T:aes256otrsv2 18.12 18.15 18.18 T:aes256otrpv2 18.29 18.34 18.82 T:aes256otrsv1 18.33 18.37 18.40 T:aes256otrpv1 22.01 22.05 22.07 T:aes128n12clocv1 22.48 22.52 22.55 T:aes128n8clocv1 27.04 27.06 27.08 T:proest256otrv1 32.03 32.06 32.13 T:ketjesrv2 32.01 32.13 32.19 T:ketjesrv1 33.22 33.26 33.30 T:aeadaes128ocbtaglen96v1 33.23 33.28 33.32 T:aeadaes128ocbtaglen64v1 39.69 39.74 39.79 T:aeadaes192ocbtaglen96v1 39.70 39.75 39.80 T:aeadaes192ocbtaglen64v1 46.16 46.21 46.25 T:aeadaes256ocbtaglen64v1 46.18 46.22 46.27 T:aeadaes256ocbtaglen96v1 50.80 50.85 50.88 T:proest128otrv1 60.06 60.10 60.14 T:ketjejrv1 70.84 70.88 70.92 T:colm127v1 71.48 71.75 72.33 T:present80n6t4silcv3 94.18 94.35 94.60 T:ketjejrv2 107.60 107.68 107.80 T:deoxysneq128128v13 124.98 125.07 125.17 T:led80n6t4silcv3 150.96 151.10 151.56 T:deoxysneq256128v13 157.76 157.89 159.00 T:aezv1 159.46 159.58 159.76 T:deoxyseq128128v13 224.37 229.99 232.06 T:deoxyseq256128v13 292.20? 348.76? 595.33? T:acorn128 4031.76 4032.48 4036.10 T:led80n6silcv1 4042.03 4042.40 4043.05 T:led80n6t4silcv2 4332.96 4333.26 4333.56 T:present80n6t4silcv2 4333.14 4333.77 4336.19 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.20 0.20 0.20 T:tiaoxinv1 0.19 0.20 0.20 T:tiaoxinv2 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 aegis128l 0.39 0.40 0.40 aegis256 0.43 0.43 0.43 T:aegis256 0.43 0.43 0.44 T:aezv4 0.43 0.43 0.44 T:aezv5 0.43 0.43 0.44 T:aezv3 0.44 0.44 0.44 T:aegis128 0.61 0.61 0.62 T:morus1280256v1 0.61 0.61 0.62 T:morus1280128v1 0.61 0.61 0.62 T:morus1280128v2 0.61 0.61 0.62 T:morus1280256v2 0.64 0.64 0.64 T:aeadaes128ocbtaglen128v1 0.64 0.64 0.65 T:aes128otrpv3 0.65 0.65 0.65 T:aes128otrcv3 0.65? 0.75? 0.82? T:aeadaes192ocbtaglen128v1 0.80 0.80 0.81 T:aes128gcmv1 0.86 0.87 0.88 T:deoxysneq128128v1 0.87 0.88 0.88 T:deoxysi128v141 0.88 0.89 0.89 T:aes256otrcv3 0.89 0.89 0.89 T:aeadaes256ocbtaglen128v1 0.89 0.89 0.89 T:aes256otrpv3 0.92 0.93 0.93 aes256gcmv1 0.99 0.99 1.00 T:deoxysneq256128v1 1.00 1.01 1.02 T:deoxysi256v141 1.04 1.04 1.05 T:morus640128v1 1.04 1.05 1.05 T:morus640128v2 1.11 1.11 1.12 T:colm0v1 1.31 1.31 1.32 T:deoxysii128v141 1.32 1.33 1.34 T:deoxyseq128128v1 1.50 1.51 1.51 T:deoxysii256v141 1.50 1.51 1.52 T:deoxyseq256128v1 1.66 1.67 1.68 T:norx6444v3 1.70 1.70 1.70 T:aes128otrsv3 2.13 2.14 2.15 T:norx6441v2 2.16 2.18 2.19 T:norx6441v3 2.30 2.30 2.30 T:aes256otrsv3 2.30 2.31 2.33 T:seakeyakv2 2.36 2.39 2.41 T:oceankeyakv2 2.58 2.59 2.60 T:norx6441v1 2.74 2.74 2.74 T:aes128n12t8clocv3 2.74 2.74 2.74 T:aes128n8t8clocv2 2.74 2.74 2.74 T:aes128n12t8clocv2 2.75 2.75 2.76 T:aes128n12t8silcv2 2.75 2.75 2.75 T:aes128n8t8silcv2 2.75 2.75 2.76 T:aes128n12t8silcv3 2.86 2.88 2.90 T:lunarkeyakv2 3.03 3.04 3.06 aes128gcmv1 3.28 3.31 3.32 T:norx6461v3 3.31 3.33 3.35 T:norx6461v2 3.50 3.51 3.52 T:norx6444v2 3.88 3.89 3.90 T:lakekeyakv1 3.91 3.93 3.96 T:norx6461v1 3.93 3.94 3.95 T:lakekeyakv2 3.95 3.97 3.98 T:norx3241v2 3.96 3.97 4.00 T:norx3241v3 4.20 4.22 4.25 T:norx6444v1 4.77 4.80 4.83 T:norx3241v1 5.79 5.79 5.80 T:aesjambuv1 6.03 6.04 6.06 T:norx3261v3 6.03 6.05 6.08 T:norx3261v2 6.49 6.53 6.59 T:ketjemajorv2 6.53 6.57 6.60 T:acorn128v3 6.99 7.01 7.03 T:acorn128v2 7.13 7.16 7.17 T:riverkeyakv2 7.20 7.20 7.22 T:norx3261v1 7.40 7.41 7.42 T:ascon96v1 7.43 7.46 7.48 T:ascon128av11 7.47 7.49 7.52 ascon128av12 9.06 9.13 9.16 T:ketjeminorv2 10.88 10.89 10.92 T:ascon128v1 10.88 10.90 10.93 T:ascon128v11 10.93 10.96 10.98 ascon128v12 12.69 12.70 12.72 T:aes128otrsv1 12.72 12.74 12.77 T:aes128otrsv2 12.88 12.91 12.92 T:aes128otrpv2 12.91 12.95 12.97 T:aes128otrpv1 14.39 14.41 14.41 T:twine80n6t4clocv3 15.33 15.34 15.36 T:twine80n6t4clocv2 16.71 16.74 16.77 T:aes256otrsv1 16.77 16.80 16.83 T:aes256otrpv1 16.82 16.84 16.86 T:aes256otrsv2 16.82 16.85 16.87 T:aes256otrpv2 17.52 17.57 17.60 T:aes128n12clocv1 17.56 17.62 17.65 T:aes128n8clocv1 24.44 24.45 24.46 T:aeadaes128ocbtaglen96v1 24.44 24.45 24.46 T:aeadaes128ocbtaglen64v1 27.27 27.29 27.30 T:proest256otrv1 28.28 28.31 28.37 T:ketjesrv1 28.81 28.82 28.85 T:aeadaes192ocbtaglen96v1 28.81 28.83 28.84 T:aeadaes192ocbtaglen64v1 29.59 29.62 29.67 T:ketjesrv2 33.25 33.26 33.28 T:aeadaes256ocbtaglen64v1 33.25 33.27 33.30 T:aeadaes256ocbtaglen96v1 40.22 40.24 40.26 T:colm127v1 50.89 50.92 50.95 T:proest128otrv1 53.17 53.31 53.39 T:ketjejrv1 71.08 71.15 71.92 T:present80n6t4silcv3 79.56 79.60 79.64 T:deoxysneq128128v13 89.80 90.46 90.90 T:ketjejrv2 104.16 104.42 104.49 T:aezv1 111.53 111.59 111.65 T:deoxysneq256128v13 119.03 119.11 119.20 T:deoxyseq128128v13 124.69 124.74 124.81 T:led80n6t4silcv3 167.80 171.73 172.54 T:deoxyseq256128v13 279.83? 320.25? 576.96? T:acorn128 3024.93 3026.17 3027.89 T:led80n6silcv1 3031.75 3032.62 3033.92 T:led80n6t4silcv2 3249.43 3249.82 3250.05 T:present80n6t4silcv2 3249.64 3249.89 3250.59 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 aegis128l 0.27 0.28 0.28 T:tiaoxinv1 0.27 0.28 0.28 T:tiaoxinv2 0.40 0.40 0.40 T:aegis256 0.43 0.43 0.44 T:aezv5 0.43 0.43 0.44 T:aezv4 0.43 0.43 0.44 T:aezv3 0.43 0.44 0.44 T:aegis128 0.44 0.44 0.45 aegis256 0.62 0.63 0.63 T:morus1280128v2 0.62 0.63 0.63 T:morus1280128v1 0.62 0.63 0.63 T:morus1280256v2 0.62 0.63 0.63 T:morus1280256v1 0.63 0.63 0.64 T:aeadaes128ocbtaglen128v1 0.66 0.67 0.67 T:aes128otrpv3 0.67 0.67 0.68 T:aes128otrcv3 0.73 0.73 0.74 T:aes128gcmv1 0.67? 0.75? 0.84? T:aeadaes192ocbtaglen128v1 0.90 0.90 0.91 T:aes256otrcv3 0.91 0.91 0.91 T:aes256otrpv3 0.91 0.91 0.92 T:aeadaes256ocbtaglen128v1 0.91 0.92 0.92 aes256gcmv1 1.01 1.01 1.02 T:deoxysi128v141 1.03 1.04 1.04 T:morus640128v1 1.04 1.04 1.05 T:deoxysneq128128v1 1.05 1.05 1.06 T:morus640128v2 1.14 1.15 1.16 T:deoxysi256v141 1.15 1.15 1.17 T:deoxysneq256128v1 1.16 1.16 1.16 T:colm0v1 1.31 1.31 1.32 T:deoxysii128v141 1.50 1.50 1.51 T:deoxysii256v141 1.64 1.65 1.65 T:deoxyseq128128v1 1.65 1.67 1.69 T:norx6444v3 1.72 1.72 1.72 T:aes128otrsv3 1.76 1.77 1.77 T:deoxyseq256128v1 2.08 2.09 2.11 T:norx6441v3 2.09 2.11 2.13 T:norx6441v2 2.32 2.32 2.32 T:aes256otrsv3 2.38 2.39 2.41 T:seakeyakv2 2.41 2.43 2.45 T:oceankeyakv2 2.54 2.55 2.57 T:norx6441v1 2.69 2.69 2.71 T:aes128n8t8silcv2 2.70 2.71 2.72 T:aes128n12t8silcv2 2.71 2.71 2.72 T:aes128n12t8silcv3 2.72 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.72 T:aes128n12t8clocv2 2.72 2.72 2.72 T:aes128n12t8clocv3 2.88 2.91 2.95 T:lunarkeyakv2 3.02 3.03 3.06 aes128gcmv1 3.22 3.23 3.25 T:norx6461v3 3.23 3.25 3.27 T:norx6461v2 3.52 3.54 3.56 T:norx6444v2 3.80 3.82 3.84 T:norx6461v1 3.87 3.89 3.90 T:norx3241v2 3.88 3.89 3.91 T:norx3241v3 3.92 3.93 3.95 T:lakekeyakv2 3.92 3.94 3.95 T:lakekeyakv1 4.18 4.20 4.22 T:norx6444v1 4.65 4.66 4.68 T:norx3241v1 5.88 5.88 5.88 T:aesjambuv1 5.94 5.96 5.97 T:norx3261v3 5.96 5.97 5.99 T:norx3261v2 6.32 6.38 6.41 T:ketjemajorv2 7.14 7.15 7.16 T:norx3261v1 7.19 7.20 7.21 T:acorn128v2 7.21 7.23 7.26 T:riverkeyakv2 7.37 7.40 7.44 ascon128av12 7.39 7.43 7.46 T:acorn128v3 7.42 7.44 7.46 T:ascon128av11 7.43 7.46 7.49 T:ascon96v1 8.87 9.04 9.07 T:ketjeminorv2 10.77 10.79 10.81 T:ascon128v1 10.77 10.80 10.81 T:ascon128v11 10.90 10.92 10.94 ascon128v12 13.04 13.07 13.11 T:aes128otrsv2 13.05 13.07 13.10 T:aes128otrpv1 13.14 13.18 13.24 T:aes128otrsv1 13.17 13.19 13.21 T:aes128otrpv2 14.38 14.39 14.41 T:twine80n6t4clocv3 15.29 15.30 15.33 T:twine80n6t4clocv2 16.99 17.03 17.09 T:aes256otrsv2 17.07 17.12 17.14 T:aes128n12clocv1 17.10 17.14 17.38 T:aes256otrsv1 17.13 17.15 17.17 T:aes256otrpv2 17.20 17.23 17.26 T:aes256otrpv1 17.28 17.31 17.33 T:aes128n8clocv1 27.27 27.29 27.30 T:proest256otrv1 28.65 28.70 28.75 T:ketjesrv1 28.75 28.77 28.79 T:aeadaes128ocbtaglen96v1 28.75 28.78 28.80 T:aeadaes128ocbtaglen64v1 29.47 29.50 29.57 T:ketjesrv2 34.14 34.18 34.24 T:aeadaes192ocbtaglen96v1 34.16 34.19 34.21 T:aeadaes192ocbtaglen64v1 39.60 39.64 39.68 T:aeadaes256ocbtaglen64v1 39.64 39.67 39.70 T:aeadaes256ocbtaglen96v1 48.86 48.88 48.90 T:colm127v1 51.10 51.14 51.18 T:proest128otrv1 53.63 53.68 53.93 T:ketjejrv1 71.00 71.12 71.85 T:present80n6t4silcv3 90.55 90.60 90.99 T:ketjejrv2 93.34 93.43 93.56 T:deoxysneq128128v13 104.41 104.57 104.78 T:aezv1 119.01 119.12 119.22 T:deoxyseq128128v13 124.61 124.68 124.75 T:led80n6t4silcv3 131.12 131.25 131.62 T:deoxysneq256128v13 167.76 171.75 172.49 T:deoxyseq256128v13 302.28? 339.74? 579.32? T:acorn128 3023.64 3024.64 3034.27 T:led80n6silcv1 3031.84 3032.14 3032.79 T:led80n6t4silcv2 3249.43 3249.66 3249.83 T:present80n6t4silcv2 3249.38 3249.67 3250.13 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aegis128l 0.26 0.26 0.26 aegis128l 0.27 0.28 0.28 T:tiaoxinv1 0.27 0.28 0.28 T:tiaoxinv2 0.40 0.40 0.40 T:aegis256 0.43 0.44 0.44 T:aegis128 0.44 0.44 0.45 aegis256 0.61 0.62 0.63 T:morus1280256v2 0.62 0.62 0.63 T:morus1280128v2 0.62 0.62 0.63 T:morus1280256v1 0.62 0.63 0.63 T:morus1280128v1 0.63 0.63 0.64 T:aeadaes128ocbtaglen128v1 0.66 0.67 0.67 T:aes128otrpv3 0.67 0.67 0.68 T:aes128otrcv3 0.73 0.73 0.74 T:aes128gcmv1 0.66? 0.75? 0.80? T:aeadaes192ocbtaglen128v1 0.90 0.90 0.91 T:aes256otrcv3 0.91 0.91 0.91 T:aes256otrpv3 0.91 0.91 0.92 T:aeadaes256ocbtaglen128v1 0.91 0.92 0.92 aes256gcmv1 1.00 1.01 1.01 T:deoxysi128v141 1.03 1.04 1.04 T:morus640128v1 1.04 1.04 1.05 T:deoxysneq128128v1 1.05 1.07 1.07 T:morus640128v2 1.14 1.15 1.16 T:deoxysi256v141 1.15 1.15 1.16 T:deoxysneq256128v1 1.16 1.16 1.16 T:colm0v1 1.31 1.31 1.32 T:deoxysii128v141 1.50 1.50 1.51 T:deoxysii256v141 1.64 1.65 1.66 T:deoxyseq128128v1 1.66 1.67 1.68 T:norx6444v3 1.72 1.72 1.72 T:aes128otrsv3 1.74 1.75 1.79 aes128gcmv1 1.76 1.77 1.77 T:deoxyseq256128v1 2.09 2.10 2.11 T:norx6441v3 2.09 2.11 2.13 T:norx6441v2 2.32 2.32 2.32 T:aes256otrsv3 2.39 2.40 2.42 T:seakeyakv2 2.43 2.44 2.46 T:oceankeyakv2 2.54 2.55 2.57 T:norx6441v1 2.69 2.70 2.71 T:aes128n8t8silcv2 2.71 2.72 2.72 T:aes128n12t8silcv3 2.71 2.72 2.72 T:aes128n12t8silcv2 2.72 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.72 T:aes128n12t8clocv3 2.72 2.72 2.72 T:aes128n12t8clocv2 2.91 2.93 2.95 T:lunarkeyakv2 3.22 3.23 3.25 T:norx6461v3 3.23 3.24 3.27 T:norx6461v2 3.53 3.55 3.56 T:norx6444v2 3.80 3.82 3.84 T:norx6461v1 3.88 3.89 3.90 T:norx3241v2 3.88 3.89 3.91 T:norx3241v3 3.93 3.95 3.96 T:lakekeyakv1 3.94 3.95 3.97 T:lakekeyakv2 4.19 4.21 4.23 T:norx6444v1 4.65 4.66 4.68 T:norx3241v1 5.88 5.88 5.89 T:aesjambuv1 5.94 5.95 5.97 T:norx3261v3 5.95 5.97 5.99 T:norx3261v2 6.30 6.32 6.36 T:ketjemajorv2 7.14 7.15 7.16 T:norx3261v1 7.18 7.20 7.21 T:acorn128v2 7.24 7.26 7.29 T:riverkeyakv2 7.38 7.39 7.42 ascon128av12 7.40 7.44 7.46 T:acorn128v3 7.42 7.45 7.46 T:ascon128av11 7.43 7.46 7.48 T:ascon96v1 9.06 9.07 9.10 T:ketjeminorv2 10.78 10.80 10.82 T:ascon128v11 10.78 10.80 10.82 T:ascon128v1 10.90 10.92 10.94 ascon128v12 13.05 13.08 13.13 T:aes128otrsv2 13.06 13.09 13.12 T:aes128otrpv1 13.16 13.19 13.24 T:aes128otrsv1 13.18 13.20 13.23 T:aes128otrpv2 14.38 14.39 14.41 T:twine80n6t4clocv3 15.28 15.31 15.34 T:twine80n6t4clocv2 17.02 17.05 17.09 T:aes256otrsv2 17.08 17.11 17.13 T:aes128n12clocv1 17.14 17.16 17.20 T:aes256otrpv2 17.14 17.17 17.40 T:aes256otrsv1 17.20 17.23 17.26 T:aes256otrpv1 17.30 17.31 17.33 T:aes128n8clocv1 27.27 27.29 27.30 T:proest256otrv1 28.64 28.69 28.74 T:ketjesrv1 28.75 28.77 28.79 T:aeadaes128ocbtaglen96v1 28.76 28.78 28.80 T:aeadaes128ocbtaglen64v1 29.48 29.51 29.55 T:ketjesrv2 34.15 34.17 34.21 T:aeadaes192ocbtaglen96v1 34.15 34.17 34.20 T:aeadaes192ocbtaglen64v1 39.61 39.64 39.67 T:aeadaes256ocbtaglen64v1 39.64 39.66 39.69 T:aeadaes256ocbtaglen96v1 48.36 48.38 48.40 T:colm127v1 51.08 51.11 51.15 T:proest128otrv1 53.69 53.83 53.87 T:ketjejrv1 71.01 71.12 71.83 T:present80n6t4silcv3 90.58 90.68 90.99 T:ketjejrv2 93.40 93.46 93.56 T:deoxysneq128128v13 104.35 104.53 104.62 T:aezv1 119.00 119.09 119.21 T:deoxyseq128128v13 124.61 124.66 124.73 T:led80n6t4silcv3 131.11 131.24 131.66 T:deoxysneq256128v13 167.75 171.70 172.45 T:deoxyseq256128v13 302.26? 339.78? 579.29? T:acorn128 3023.56 3024.50 3033.64 T:led80n6silcv1 3031.90 3032.11 3032.33 T:led80n6t4silcv2 3249.31 3249.54 3249.84 T:present80n6t4silcv2 3249.33 3249.59 3249.98 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.19 0.19 0.19 T:tiaoxinv1 0.18? 0.19? 0.20? T:tiaoxinv2 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.26 T:aezv4 0.25 0.25 0.25 aegis128l 0.40 0.41 0.41 aegis256 0.40 0.41 0.42 T:aes128gcmv1 0.41 0.41 0.43 aes256gcmv1 0.45 0.46 0.46 T:aegis256 0.46 0.47 0.47 T:aegis128 0.59 0.59 0.60 T:morus1280128v1 0.59 0.60 0.60 T:morus1280256v1 0.59 0.60 0.61 T:morus1280128v2 0.59 0.60 0.61 T:morus1280256v2 0.62 0.63 0.63 T:colm0v1 0.64 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.66 T:aes128otrpv3 0.67 0.68 0.68 T:aes128otrcv3 0.61? 0.75? 0.85? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.86 0.87 0.88 T:deoxyseq128128v1 0.87 0.88 0.88 T:deoxysi128v141 0.87 0.88 0.88 T:deoxysii128v141 0.89 0.90 0.90 T:aeadaes256ocbtaglen128v1 0.90 0.90 0.91 T:aes256otrpv3 0.90 0.91 0.92 T:aes256otrcv3 0.98 0.99 1.01 T:deoxysneq256128v1 0.99 1.00 1.01 T:morus640128v1 1.00 1.00 1.01 T:deoxysii256v141 0.98 1.00 1.02 T:deoxyseq256128v1 1.00 1.01 1.02 T:deoxysi256v141 1.01 1.02 1.03 T:morus640128v2 1.66 1.69 1.80 aes128gcmv1 1.83 1.86 1.89 T:oceankeyakv2 1.85 1.89 1.94 T:lunarkeyakv2 2.13 2.15 2.17 T:norx6441v2 2.15 2.17 2.18 T:norx6441v3 2.16 2.18 2.21 T:norx6444v3 2.25 2.27 2.29 T:seakeyakv2 2.59 2.61 2.62 T:norx6441v1 2.71 2.71 2.72 T:aes128n12t8silcv2 2.71 2.71 2.72 T:aes128n12t8silcv3 2.72 2.72 2.72 T:aes128n12t8clocv3 2.72 2.72 2.72 T:aes128n12t8clocv2 2.72 2.72 2.72 T:aes128n8t8clocv2 2.75 2.75 2.75 T:aes128n8t8silcv2 2.75 2.75 2.75 T:aes128otrsv3 3.20 3.22 3.25 T:norx6444v2 3.32 3.34 3.37 T:norx6461v3 3.37 3.41 3.45 T:norx6461v2 3.59 3.61 3.63 T:lakekeyakv2 3.70 3.71 3.74 T:lakekeyakv1 3.72 3.72 3.73 T:aes256otrsv3 3.90 3.93 3.97 T:norx6461v1 3.90 3.93 3.96 T:norx6444v1 3.94 3.95 3.98 T:norx3241v3 3.96 3.98 4.03 T:norx3241v2 4.77 4.81 4.83 T:norx3241v1 5.54 5.61 5.71 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 5.93 5.96 6.00 T:norx3261v2 6.06 6.08 6.12 T:norx3261v3 6.75 6.78 6.81 T:riverkeyakv2 7.19 7.21 7.23 T:acorn128v2 7.19 7.21 7.22 T:norx3261v1 7.28 7.31 7.34 T:ascon96v1 7.37 7.40 7.43 ascon128av12 7.33 7.41 7.44 T:ascon128av11 7.47 7.55 7.60 T:acorn128v3 7.91 7.94 7.98 T:ketjeminorv2 10.86 10.88 10.91 T:ascon128v1 10.86 10.89 10.91 T:ascon128v11 10.89 10.94 10.97 ascon128v12 11.93 11.96 11.99 T:aes128otrsv2 11.93 11.98 12.02 T:aes128otrsv1 12.14 12.17 12.18 T:aes128n12clocv1 12.15 12.17 12.20 T:aes128n8clocv1 12.14 12.20 12.24 T:aes128otrpv1 12.27 12.30 12.33 T:aes128otrpv2 14.20 14.21 14.23 T:twine80n6t4clocv3 15.06 15.07 15.10 T:twine80n6t4clocv2 15.98 16.01 16.04 T:aes256otrsv2 16.00 16.04 16.07 T:aes256otrsv1 16.12 16.17 16.23 T:aes256otrpv1 16.16 16.20 16.24 T:aes256otrpv2 24.20 24.21 24.23 T:aeadaes128ocbtaglen96v1 24.20 24.22 24.28 T:aeadaes128ocbtaglen64v1 25.24 25.29 25.35 T:ketjesrv1 25.88 25.91 25.97 T:colm127v1 26.97 27.01 27.05 T:ketjesrv2 27.47 27.49 27.52 T:proest256otrv1 28.57 28.59 28.60 T:aeadaes192ocbtaglen64v1 28.58 28.60 28.61 T:aeadaes192ocbtaglen96v1 33.01 33.02 33.05 T:aeadaes256ocbtaglen64v1 33.00 33.05 33.10 T:aeadaes256ocbtaglen96v1 47.29 47.47 47.61 T:ketjejrv1 50.82 50.90 51.30 T:aezv1 51.39 51.43 51.49 T:proest128otrv1 70.56 70.64 71.40 T:present80n6t4silcv3 78.53 78.61 78.69 T:deoxyseq128128v13 79.14 79.20 79.26 T:deoxysneq128128v13 86.92 86.98 87.44 T:ketjejrv2 111.17 111.24 111.31 T:deoxysneq256128v13 111.07 114.46 115.41 T:deoxyseq256128v13 124.24 124.32 124.39 T:led80n6t4silcv3 248.54? 314.20? 605.55? T:acorn128 2016.58 2017.02 2018.54 T:led80n6silcv1 2021.88 2022.41 2023.24 T:led80n6t4silcv2 2165.72 2165.94 2166.18 T:present80n6t4silcv2 2165.63 2165.94 2166.31 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.18? 0.19? 0.20? T:tiaoxinv2 0.19 0.19 0.20 T:tiaoxinv1 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.26 aegis128l 0.40 0.41 0.41 T:aegis256 0.40 0.41 0.41 aes256gcmv1 0.40 0.41 0.41 aegis256 0.41 0.41 0.42 T:aes128gcmv1 0.41 0.41 0.42 T:aegis128 0.59 0.60 0.61 T:morus1280256v2 0.60 0.60 0.61 T:morus1280256v1 0.60 0.61 0.61 T:morus1280128v2 0.60 0.61 0.61 T:morus1280128v1 0.63 0.64 0.64 T:colm0v1 0.64 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.65 T:aes128otrpv3 0.67 0.67 0.68 T:aes128otrcv3 0.65? 0.75? 0.85? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.87 T:deoxysneq128128v1 0.87 0.87 0.88 T:deoxysi128v141 0.87 0.87 0.88 T:deoxyseq128128v1 0.87 0.88 0.88 T:deoxysii128v141 0.89 0.89 0.90 T:aeadaes256ocbtaglen128v1 0.90 0.90 0.90 T:aes256otrpv3 0.90 0.90 0.91 T:aes256otrcv3 0.98 0.99 1.00 T:deoxysneq256128v1 0.98 1.00 1.02 T:deoxysi256v141 0.99 1.00 1.01 T:deoxysii256v141 0.99 1.00 1.01 T:deoxyseq256128v1 1.00 1.01 1.02 T:morus640128v2 0.99 1.01 1.02 T:morus640128v1 1.66 1.69 1.77 aes128gcmv1 1.83 1.86 1.88 T:oceankeyakv2 1.84 1.89 1.92 T:lunarkeyakv2 2.14 2.15 2.18 T:norx6441v3 2.14 2.17 2.19 T:norx6441v2 2.16 2.19 2.21 T:norx6444v3 2.26 2.28 2.31 T:seakeyakv2 2.59 2.62 2.66 T:norx6441v1 2.69 2.69 2.71 T:aes128n8t8silcv2 2.71 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.72 T:aes128n12t8clocv3 2.72 2.72 2.72 T:aes128n12t8clocv2 2.73 2.73 2.74 T:aes128n12t8silcv2 2.73 2.73 2.73 T:aes128n12t8silcv3 2.75 2.75 2.75 T:aes128otrsv3 3.26 3.29 3.33 T:norx6461v3 3.28 3.30 3.33 T:norx6444v2 3.32 3.34 3.39 T:norx6461v2 3.60 3.61 3.63 T:lakekeyakv2 3.67 3.70 3.72 T:lakekeyakv1 3.72 3.72 3.72 T:aes256otrsv3 3.83 3.87 3.91 T:norx6461v1 3.86 3.89 3.93 T:norx6444v1 3.98 3.98 3.99 T:norx3241v3 3.99 4.02 4.03 T:norx3241v2 4.80 4.82 4.84 T:norx3241v1 5.54 5.62 5.67 T:ketjemajorv2 5.75 5.75 5.78 T:aesjambuv1 5.95 5.99 6.02 T:norx3261v2 6.07 6.10 6.14 T:norx3261v3 6.75 6.78 6.81 T:riverkeyakv2 7.21 7.23 7.24 T:norx3261v1 7.24 7.27 7.30 T:ascon96v1 7.24 7.27 7.29 T:ascon128av11 7.33 7.37 7.45 ascon128av12 7.40 7.42 7.44 T:acorn128v2 7.47 7.54 7.59 T:acorn128v3 7.91 7.94 7.97 T:ketjeminorv2 10.87 10.90 10.92 ascon128v12 10.87 10.90 10.94 T:ascon128v1 10.89 10.91 10.93 T:ascon128v11 12.00 12.04 12.06 T:aes128otrsv1 11.99 12.05 12.10 T:aes128otrsv2 12.14 12.17 12.19 T:aes128n8clocv1 12.16 12.18 12.20 T:aes128n12clocv1 12.18 12.24 12.28 T:aes128otrpv1 12.32 12.35 12.38 T:aes128otrpv2 14.20 14.23 14.27 T:twine80n6t4clocv3 15.07 15.10 15.12 T:twine80n6t4clocv2 16.03 16.07 16.10 T:aes256otrsv1 16.00 16.07 16.10 T:aes256otrsv2 16.14 16.18 16.22 T:aes256otrpv1 16.17 16.22 16.26 T:aes256otrpv2 24.20 24.21 24.23 T:aeadaes128ocbtaglen64v1 24.22 24.26 24.28 T:aeadaes128ocbtaglen96v1 25.23 25.31 25.36 T:ketjesrv1 25.86 25.88 25.90 T:colm127v1 26.95 27.00 27.04 T:ketjesrv2 27.48 27.51 27.54 T:proest256otrv1 28.58 28.60 28.62 T:aeadaes192ocbtaglen96v1 28.57 28.61 28.66 T:aeadaes192ocbtaglen64v1 33.01 33.04 33.07 T:aeadaes256ocbtaglen96v1 33.02 33.06 33.09 T:aeadaes256ocbtaglen64v1 47.27 47.45 47.80 T:ketjejrv1 50.80 50.89 51.29 T:aezv1 51.38 51.43 51.48 T:proest128otrv1 70.57 70.66 71.38 T:present80n6t4silcv3 78.56 78.63 78.72 T:deoxyseq128128v13 79.19 79.27 79.35 T:deoxysneq128128v13 86.92 86.98 87.45 T:ketjejrv2 111.07 111.16 111.26 T:deoxysneq256128v13 111.22 114.63 115.62 T:deoxyseq256128v13 124.20 124.30 124.37 T:led80n6t4silcv3 268.90? 330.93? 606.94? T:acorn128 2015.49 2016.87 2031.41 T:led80n6silcv1 2021.90 2022.33 2023.15 T:led80n6t4silcv2 2165.75 2166.12 2166.82 T:present80n6t4silcv2 2165.93 2166.25 2166.51 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.18 0.19 0.19 T:tiaoxinv2 0.19 0.19 0.19 T:tiaoxinv1 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.26 aegis128l 0.41 0.41 0.41 T:aegis256 0.40 0.41 0.41 aegis256 0.41 0.41 0.42 aes256gcmv1 0.41 0.41 0.42 T:aes128gcmv1 0.41 0.42 0.42 T:aegis128 0.59 0.60 0.60 T:morus1280256v1 0.59 0.60 0.61 T:morus1280128v1 0.59 0.60 0.61 T:morus1280128v2 0.59 0.61 0.62 T:morus1280256v2 0.63 0.64 0.64 T:colm0v1 0.64 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.65 T:aes128otrpv3 0.67 0.68 0.68 T:aes128otrcv3 0.65? 0.75? 0.85? T:aeadaes192ocbtaglen128v1 0.86 0.86 0.88 T:deoxysneq128128v1 0.86 0.87 0.88 T:deoxysi128v141 0.87 0.88 0.88 T:deoxyseq128128v1 0.87 0.88 0.88 T:deoxysii128v141 0.89 0.89 0.90 T:aeadaes256ocbtaglen128v1 0.90 0.90 0.90 T:aes256otrpv3 0.90 0.90 0.91 T:aes256otrcv3 0.98 0.99 1.01 T:deoxysneq256128v1 0.98 1.00 1.02 T:deoxysi256v141 0.99 1.00 1.02 T:deoxyseq256128v1 0.99 1.00 1.01 T:deoxysii256v141 1.00 1.01 1.01 T:morus640128v1 1.00 1.01 1.04 T:morus640128v2 1.67 1.69 1.78 aes128gcmv1 1.83 1.86 1.89 T:oceankeyakv2 1.84 1.87 1.90 T:lunarkeyakv2 2.14 2.15 2.18 T:norx6441v3 2.14 2.16 2.19 T:norx6441v2 2.16 2.20 2.22 T:norx6444v3 2.26 2.27 2.29 T:seakeyakv2 2.59 2.61 2.65 T:norx6441v1 2.68 2.69 2.69 T:aes128n8t8silcv2 2.71 2.71 2.72 T:aes128n12t8clocv3 2.71 2.72 2.72 T:aes128n8t8clocv2 2.71 2.72 2.72 T:aes128n12t8clocv2 2.73 2.73 2.73 T:aes128n12t8silcv2 2.73 2.73 2.73 T:aes128n12t8silcv3 2.75 2.75 2.75 T:aes128otrsv3 3.28 3.30 3.32 T:norx6444v2 3.29 3.31 3.33 T:norx6461v3 3.31 3.34 3.37 T:norx6461v2 3.59 3.60 3.61 T:lakekeyakv2 3.69 3.71 3.73 T:lakekeyakv1 3.72 3.72 3.72 T:aes256otrsv3 3.84 3.88 3.91 T:norx6461v1 3.88 3.89 3.92 T:norx6444v1 3.98 3.99 4.00 T:norx3241v3 3.99 4.00 4.02 T:norx3241v2 4.77 4.79 4.82 T:norx3241v1 5.53 5.60 5.75 T:ketjemajorv2 5.75 5.75 5.76 T:aesjambuv1 5.92 5.96 6.00 T:norx3261v2 6.07 6.09 6.12 T:norx3261v3 6.76 6.78 6.80 T:riverkeyakv2 7.20 7.22 7.24 T:norx3261v1 7.23 7.25 7.29 T:ascon96v1 7.24 7.27 7.29 T:ascon128av11 7.33 7.37 7.45 ascon128av12 7.39 7.41 7.44 T:acorn128v2 7.48 7.54 7.59 T:acorn128v3 7.91 7.94 7.98 T:ketjeminorv2 10.87 10.90 10.93 ascon128v12 10.86 10.90 10.93 T:ascon128v11 10.88 10.91 10.94 T:ascon128v1 11.99 12.03 12.07 T:aes128otrsv1 11.99 12.07 12.12 T:aes128otrsv2 12.15 12.17 12.19 T:aes128n8clocv1 12.15 12.18 12.20 T:aes128n12clocv1 12.18 12.25 12.29 T:aes128otrpv1 12.31 12.35 12.38 T:aes128otrpv2 14.21 14.25 14.28 T:twine80n6t4clocv3 15.06 15.09 15.11 T:twine80n6t4clocv2 16.03 16.07 16.10 T:aes256otrsv1 16.00 16.07 16.10 T:aes256otrsv2 16.15 16.19 16.25 T:aes256otrpv1 16.18 16.24 16.28 T:aes256otrpv2 24.19 24.22 24.25 T:aeadaes128ocbtaglen64v1 24.20 24.23 24.27 T:aeadaes128ocbtaglen96v1 25.25 25.30 25.34 T:ketjesrv1 25.85 25.88 25.91 T:colm127v1 26.94 26.99 27.02 T:ketjesrv2 27.46 27.49 27.52 T:proest256otrv1 28.58 28.59 28.62 T:aeadaes192ocbtaglen96v1 28.58 28.60 28.63 T:aeadaes192ocbtaglen64v1 33.01 33.04 33.07 T:aeadaes256ocbtaglen96v1 33.02 33.05 33.09 T:aeadaes256ocbtaglen64v1 47.27 47.35 47.65 T:ketjejrv1 50.80 50.94 51.28 T:aezv1 51.38 51.42 51.47 T:proest128otrv1 70.55 70.65 71.37 T:present80n6t4silcv3 78.61 78.68 78.79 T:deoxyseq128128v13 79.15 79.20 79.26 T:deoxysneq128128v13 86.92 86.98 87.45 T:ketjejrv2 111.16 111.23 111.30 T:deoxysneq256128v13 111.28 114.58 115.55 T:deoxyseq256128v13 124.19 124.29 124.40 T:led80n6t4silcv3 268.90? 330.88? 606.88? T:acorn128 2015.49 2016.87 2031.48 T:led80n6silcv1 2021.87 2022.35 2022.94 T:led80n6t4silcv2 2165.50 2165.76 2166.18 T:present80n6silcv1 2165.75 2166.05 2166.49 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.28 0.29 0.29 T:tiaoxinv1 0.29 0.29 0.29 T:tiaoxinv2 0.31 0.31 0.32 T:aegis128l 0.31 0.31 0.32 aegis128l 0.47 0.48 0.48 aegis256 0.49 0.49 0.50 T:aegis256 0.49 0.49 0.50 T:aegis128 0.51 0.51 0.51 T:aezv5 0.51 0.51 0.51 T:aezv4 0.52 0.52 0.52 T:aezv3 0.74 0.74 0.75 T:aeadaes128ocbtaglen128v1 0.76 0.76 0.76 T:aes128otrpv3 0.76 0.77 0.77 T:morus1280128v1 0.77 0.77 0.78 T:morus1280256v1 0.78 0.78 0.79 T:morus1280128v2 0.78 0.78 0.79 T:morus1280256v2 0.84 0.84 0.84 T:aes128otrcv3 0.89? 0.89? 1.01? T:aeadaes192ocbtaglen128v1 0.95 0.95 0.96 T:aes128gcmv1 1.02 1.02 1.02 T:aeadaes256ocbtaglen128v1 1.02 1.03 1.03 T:deoxysneq128128v1 1.05 1.05 1.05 T:aes256otrpv3 1.06 1.06 1.07 T:deoxysi128v141 1.11 1.11 1.11 aes256gcmv1 1.14 1.14 1.14 T:aes256otrcv3 1.15 1.16 1.16 T:deoxysneq256128v1 1.18 1.18 1.18 T:morus640128v1 1.19 1.19 1.20 T:morus640128v2 1.21 1.21 1.22 T:deoxysi256v141 1.26 1.26 1.26 T:colm0v1 1.51 1.51 1.52 T:deoxysii128v141 1.52 1.52 1.53 T:deoxyseq128128v1 1.70 1.70 1.71 T:deoxyseq256128v1 1.74 1.75 1.75 T:deoxysii256v141 1.81 1.81 1.81 T:aes128otrsv3 2.27 2.28 2.30 T:norx6444v3 2.45 2.45 2.45 T:aes256otrsv3 2.48 2.48 2.50 T:norx6441v2 2.52 2.53 2.53 T:norx6441v3 2.82 2.82 2.82 T:aes128n8t8clocv2 2.82 2.82 2.83 T:aes128n12t8clocv3 2.82 2.82 2.83 T:aes128n12t8clocv2 2.87 2.87 2.87 T:aes128n8t8silcv2 2.88 2.88 2.88 T:aes128n12t8silcv3 2.88 2.88 2.88 T:aes128n12t8silcv2 2.90 2.91 2.93 T:norx6441v1 3.19 3.22 3.23 aes128gcmv1 3.38 3.39 3.40 T:seakeyakv2 3.82 3.82 3.83 T:norx6461v3 3.84 3.85 3.87 T:norx6461v2 4.28 4.30 4.31 T:norx3241v2 4.30 4.31 4.32 T:norx3241v3 4.33 4.33 4.34 T:lakekeyakv2 4.38 4.40 4.42 T:norx6461v1 4.55 4.56 4.57 T:lakekeyakv1 4.56 4.57 4.59 T:oceankeyakv2 5.00 5.01 5.02 T:norx6444v2 5.06 5.08 5.09 T:norx3241v1 5.94 5.94 5.95 T:aesjambuv1 6.02 6.03 6.05 T:norx6444v1 6.54 6.55 6.56 T:norx3261v2 6.55 6.57 6.58 T:norx3261v3 7.52 7.53 7.55 T:riverkeyakv2 7.57 7.59 7.60 T:ascon96v1 7.61 7.62 7.64 T:acorn128v3 7.61 7.62 7.63 T:norx3261v1 7.59 7.62 7.65 T:ascon128av11 7.66 7.67 7.69 ascon128av12 7.86 7.87 7.89 T:lunarkeyakv2 8.04 8.05 8.06 T:acorn128v2 8.49 8.52 8.56 T:ketjemajorv2 10.21 10.23 10.25 T:ketjeminorv2 11.05 11.06 11.08 T:ascon128v11 11.05 11.07 11.08 T:ascon128v1 11.10 11.12 11.14 ascon128v12 13.09 13.11 13.12 T:aes128otrsv1 13.11 13.13 13.16 T:aes128otrsv2 13.27 13.29 13.30 T:aes128otrpv2 13.31 13.34 13.36 T:aes128otrpv1 14.71 14.73 14.74 T:twine80n6t4clocv3 15.60 15.61 15.62 T:twine80n6t4clocv2 17.23 17.24 17.26 T:aes256otrsv1 17.31 17.34 17.37 T:aes256otrpv1 17.33 17.35 17.37 T:aes256otrsv2 17.35 17.37 17.39 T:aes256otrpv2 17.74 17.76 17.77 T:aes128n12clocv1 17.80 17.81 17.83 T:aes128n8clocv1 25.07 25.08 25.09 T:aeadaes128ocbtaglen96v1 25.09 25.10 25.11 T:aeadaes128ocbtaglen64v1 29.05 29.08 29.10 T:ketjesrv1 29.53 29.53 29.55 T:aeadaes192ocbtaglen96v1 29.54 29.54 29.56 T:aeadaes192ocbtaglen64v1 29.65 29.67 29.68 T:proest256otrv1 30.60 30.62 30.67 T:ketjesrv2 34.10 34.11 34.13 T:aeadaes256ocbtaglen64v1 34.10 34.11 34.13 T:aeadaes256ocbtaglen96v1 40.91 40.92 40.93 T:colm127v1 53.05 53.07 53.11 T:proest128otrv1 53.98 54.07 54.17 T:ketjejrv1 71.91 71.94 72.65 T:present80n6t4silcv3 80.03 80.08 80.14 T:deoxysneq128128v13 91.24 91.68 92.10 T:ketjejrv2 102.30 102.38 102.78 T:aezv1 112.18 112.22 112.27 T:deoxysneq256128v13 120.36 120.42 120.51 T:deoxyseq128128v13 125.76 125.81 125.84 T:led80n6t4silcv3 170.24 174.77 175.54 T:deoxyseq256128v13 356.38? 360.19? 607.21? T:acorn128 3040.90 3042.21 3043.26 T:led80n6silcv1 3047.95 3048.31 3049.44 T:led80n6t4silcv2 3266.84 3267.04 3267.26 T:present80n6t4silcv2 3266.93 3267.15 3267.32 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.31 0.32 0.32 T:aegis128l 0.32 0.32 0.32 aegis128l 0.36 0.36 0.36 T:tiaoxinv1 0.36 0.36 0.37 T:tiaoxinv2 0.47 0.47 0.47 T:aegis256 0.49 0.49 0.50 T:aegis128 0.51 0.51 0.51 T:aezv5 0.51 0.51 0.51 T:aezv4 0.52 0.52 0.52 T:aezv3 0.52 0.52 0.53 aegis256 0.75 0.75 0.75 T:aeadaes128ocbtaglen128v1 0.78 0.78 0.79 T:aes128otrpv3 0.78 0.79 0.79 T:morus1280256v1 0.79 0.79 0.79 T:morus1280128v1 0.80 0.80 0.80 T:morus1280128v2 0.80 0.80 0.81 T:morus1280256v2 0.87 0.87 0.87 T:aes128otrcv3 0.88 0.88 0.89 T:aes128gcmv1 0.89 0.89 0.97 T:aeadaes192ocbtaglen128v1 1.05 1.05 1.06 T:aeadaes256ocbtaglen128v1 1.07 1.07 1.08 T:aes256otrpv3 1.10 1.10 1.11 aes256gcmv1 1.17 1.17 1.18 T:morus640128v1 1.17 1.18 1.18 T:aes256otrcv3 1.20 1.20 1.21 T:morus640128v2 1.23 1.23 1.24 T:deoxysi128v141 1.26 1.27 1.27 T:deoxysneq128128v1 1.32 1.32 1.32 T:colm0v1 1.36 1.36 1.36 T:deoxysneq256128v1 1.42 1.43 1.44 T:deoxysi256v141 1.55 1.56 1.56 T:deoxysii128v141 1.80 1.80 1.80 T:deoxysii256v141 1.83 1.83 1.83 T:aes128otrsv3 1.91 1.91 1.91 T:deoxyseq128128v1 2.02 2.02 2.02 T:deoxyseq256128v1 2.28 2.29 2.30 T:norx6444v3 2.45 2.46 2.47 T:norx6441v3 2.47 2.48 2.50 T:norx6441v2 2.48 2.48 2.49 T:aes256otrsv3 2.81 2.81 2.81 T:aes128n8t8clocv2 2.81 2.81 2.81 T:aes128n12t8clocv3 2.81 2.81 2.81 T:aes128n12t8clocv2 2.82 2.83 2.84 T:aes128n8t8silcv2 2.83 2.84 2.84 T:aes128n12t8silcv2 2.83 2.84 2.84 T:aes128n12t8silcv3 2.88 2.89 2.90 T:norx6441v1 3.20 3.21 3.24 aes128gcmv1 3.44 3.45 3.46 T:seakeyakv2 3.74 3.76 3.77 T:norx6461v3 3.77 3.78 3.80 T:norx6461v2 4.20 4.21 4.24 T:norx3241v2 4.20 4.22 4.24 T:norx3241v3 4.30 4.32 4.34 T:norx6461v1 4.32 4.33 4.34 T:lakekeyakv2 4.59 4.60 4.61 T:lakekeyakv1 4.59 4.60 4.62 T:oceankeyakv2 4.94 4.96 4.97 T:norx3241v1 5.04 5.06 5.07 T:norx6444v2 6.01 6.02 6.04 T:norx6444v1 6.03 6.03 6.03 T:aesjambuv1 6.44 6.44 6.45 T:norx3261v3 6.44 6.46 6.47 T:norx3261v2 7.56 7.57 7.58 T:norx3261v1 7.57 7.59 7.61 ascon128av12 7.60 7.61 7.63 T:ascon128av11 7.62 7.64 7.66 T:ascon96v1 7.63 7.64 7.66 T:riverkeyakv2 7.90 7.92 7.94 T:lunarkeyakv2 8.24 8.25 8.27 T:acorn128v2 8.29 8.30 8.33 T:ketjemajorv2 8.46 8.47 8.50 T:acorn128v3 10.13 10.14 10.15 T:ketjeminorv2 10.94 10.96 10.97 T:ascon128v11 10.95 10.96 10.98 T:ascon128v1 11.08 11.10 11.11 ascon128v12 13.44 13.47 13.50 T:aes128otrsv2 13.47 13.50 13.52 T:aes128otrpv1 13.55 13.58 13.63 T:aes128otrsv1 13.58 13.60 13.63 T:aes128otrpv2 14.71 14.73 14.74 T:twine80n6t4clocv3 15.56 15.58 15.60 T:twine80n6t4clocv2 17.29 17.31 17.33 T:aes128n12clocv1 17.50 17.51 17.54 T:aes128n8clocv1 17.57 17.59 17.65 T:aes256otrsv2 17.68 17.70 17.73 T:aes256otrpv2 17.69 17.72 17.95 T:aes256otrsv1 17.78 17.80 17.83 T:aes256otrpv1 29.41 29.45 29.50 T:ketjesrv1 29.52 29.54 29.56 T:aeadaes128ocbtaglen96v1 29.55 29.56 29.58 T:aeadaes128ocbtaglen64v1 29.71 29.72 29.74 T:proest256otrv1 30.51 30.52 30.58 T:ketjesrv2 35.05 35.07 35.10 T:aeadaes192ocbtaglen96v1 35.06 35.08 35.10 T:aeadaes192ocbtaglen64v1 40.68 40.70 40.73 T:aeadaes256ocbtaglen96v1 40.68 40.70 40.73 T:aeadaes256ocbtaglen64v1 49.57 49.59 49.61 T:colm127v1 53.32 53.35 53.38 T:proest128otrv1 54.44 54.47 54.57 T:ketjejrv1 71.83 71.91 72.55 T:present80n6t4silcv3 91.93 92.02 92.33 T:ketjejrv2 93.90 93.98 94.21 T:deoxysneq128128v13 102.73 102.91 103.25 T:aezv1 120.34 120.40 120.52 T:deoxyseq128128v13 125.71 125.75 125.80 T:led80n6t4silcv3 131.84 131.94 132.17 T:deoxysneq256128v13 170.28 174.82 175.54 T:deoxyseq256128v13 377.99? 380.09? 611.22? T:acorn128 3040.15 3040.48 3048.85 T:led80n6silcv1 3047.86 3048.03 3048.34 T:led80n6t4silcv2 3266.78 3266.94 3267.08 T:present80n6t4silcv2 3266.87 3267.14 3268.22 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.31 0.31 0.31 T:aegis128l 0.31 0.31 0.32 T:aezv5 0.32 0.32 0.32 T:aezv4 0.32 0.32 0.32 T:aezv3 0.33 0.33 0.33 aegis128l 0.36 0.36 0.37 T:tiaoxinv1 0.36 0.36 0.36 T:tiaoxinv2 0.47 0.47 0.47 T:aegis256 0.49 0.49 0.50 T:aegis128 0.52 0.52 0.53 aegis256 0.75 0.75 0.75 T:aeadaes128ocbtaglen128v1 0.78 0.78 0.79 T:aes128otrpv3 0.78 0.79 0.79 T:morus1280128v1 0.79 0.79 0.80 T:morus1280256v1 0.79 0.80 0.80 T:morus1280256v2 0.80 0.80 0.80 T:morus1280128v2 0.87 0.87 0.87 T:aes128otrcv3 0.88 0.88 0.89 T:aes128gcmv1 0.89? 0.90? 1.01? T:aeadaes192ocbtaglen128v1 1.05 1.05 1.06 T:aeadaes256ocbtaglen128v1 1.07 1.07 1.08 T:aes256otrpv3 1.10 1.10 1.10 aes256gcmv1 1.17 1.17 1.18 T:morus640128v1 1.17 1.18 1.18 T:aes256otrcv3 1.20 1.20 1.21 T:morus640128v2 1.23 1.23 1.23 T:deoxysi128v141 1.26 1.26 1.26 T:deoxysneq128128v1 1.32 1.32 1.32 T:colm0v1 1.35 1.35 1.36 T:deoxysneq256128v1 1.42 1.43 1.44 T:deoxysi256v141 1.55 1.56 1.56 T:deoxysii128v141 1.80 1.80 1.80 T:deoxysii256v141 1.83 1.83 1.83 T:aes128otrsv3 1.91 1.91 1.91 T:deoxyseq128128v1 1.95 1.97 2.01 aes128gcmv1 2.02 2.02 2.03 T:deoxyseq256128v1 2.27 2.28 2.29 T:norx6444v3 2.45 2.46 2.48 T:norx6441v3 2.45 2.46 2.48 T:norx6441v2 2.48 2.48 2.48 T:aes256otrsv3 2.80 2.80 2.81 T:aes128n8t8clocv2 2.80 2.81 2.81 T:aes128n12t8clocv3 2.81 2.81 2.81 T:aes128n12t8clocv2 2.82 2.83 2.84 T:aes128n8t8silcv2 2.83 2.84 2.84 T:aes128n12t8silcv2 2.84 2.84 2.84 T:aes128n12t8silcv3 2.87 2.88 2.90 T:norx6441v1 3.46 3.47 3.48 T:seakeyakv2 3.75 3.76 3.77 T:norx6461v3 3.77 3.78 3.81 T:norx6461v2 4.22 4.22 4.25 T:norx3241v2 4.22 4.23 4.24 T:norx3241v3 4.30 4.31 4.33 T:norx6461v1 4.34 4.34 4.35 T:lakekeyakv2 4.61 4.62 4.63 T:lakekeyakv1 4.61 4.62 4.63 T:oceankeyakv2 4.93 4.94 4.95 T:norx3241v1 5.05 5.06 5.08 T:norx6444v2 6.01 6.02 6.04 T:norx6444v1 6.03 6.03 6.03 T:aesjambuv1 6.44 6.46 6.47 T:norx3261v3 6.44 6.46 6.47 T:norx3261v2 7.56 7.57 7.58 T:norx3261v1 7.56 7.59 7.62 ascon128av12 7.59 7.61 7.63 T:ascon128av11 7.61 7.63 7.65 T:ascon96v1 7.64 7.66 7.68 T:riverkeyakv2 7.92 7.93 7.95 T:lunarkeyakv2 8.24 8.25 8.26 T:acorn128v2 8.32 8.36 8.38 T:ketjemajorv2 8.46 8.47 8.49 T:acorn128v3 10.14 10.15 10.17 T:ketjeminorv2 10.95 10.96 10.98 T:ascon128v11 10.95 10.96 10.98 T:ascon128v1 11.08 11.10 11.11 ascon128v12 13.48 13.49 13.53 T:aes128otrsv2 13.51 13.53 13.56 T:aes128otrpv1 13.57 13.60 13.64 T:aes128otrsv1 13.61 13.63 13.65 T:aes128otrpv2 14.71 14.72 14.74 T:twine80n6t4clocv3 15.56 15.58 15.60 T:twine80n6t4clocv2 17.30 17.31 17.33 T:aes128n12clocv1 17.50 17.52 17.54 T:aes128n8clocv1 17.58 17.61 17.66 T:aes256otrsv2 17.69 17.71 17.74 T:aes256otrpv2 17.71 17.74 17.94 T:aes256otrsv1 17.78 17.81 17.83 T:aes256otrpv1 29.43 29.47 29.51 T:ketjesrv1 29.52 29.54 29.56 T:aeadaes128ocbtaglen96v1 29.53 29.55 29.57 T:aeadaes128ocbtaglen64v1 29.71 29.72 29.74 T:proest256otrv1 30.52 30.53 30.56 T:ketjesrv2 35.05 35.07 35.09 T:aeadaes192ocbtaglen64v1 35.05 35.08 35.10 T:aeadaes192ocbtaglen96v1 40.68 40.70 40.73 T:aeadaes256ocbtaglen64v1 40.68 40.70 40.72 T:aeadaes256ocbtaglen96v1 49.55 49.57 49.60 T:colm127v1 53.33 53.34 53.37 T:proest128otrv1 54.50 54.52 54.58 T:ketjejrv1 71.84 71.92 72.53 T:present80n6t4silcv3 92.02 92.09 92.36 T:ketjejrv2 93.99 94.03 94.18 T:deoxysneq128128v13 102.70 102.80 103.16 T:aezv1 120.40 120.46 120.60 T:deoxyseq128128v13 125.68 125.72 125.79 T:led80n6t4silcv3 131.87 131.97 132.18 T:deoxysneq256128v13 170.31 174.80 175.53 T:deoxyseq256128v13 377.98? 380.08? 611.16? T:acorn128 3040.19 3040.51 3048.99 T:led80n6silcv1 3047.93 3048.13 3048.38 T:led80n6t4silcv2 3266.82 3266.95 3267.11 T:present80n6t4silcv2 3267.01 3267.53 3268.43 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.72 1.73 1.77 aegis128l 1.74 1.74 1.76 T:aegis128l 1.73 1.75 1.77 T:aegis128 2.01 2.02 2.03 T:aegis256 2.21 2.24 2.29 T:aezv5 2.27 2.29 2.32 T:aezv3 2.29 2.31 2.35 aegis256 2.29 2.31 2.33 T:aezv4 2.31 2.33 2.43 T:tiaoxinv1 2.32 2.38 2.48 T:tiaoxinv2 3.01 3.09 3.14 T:aeadaes128ocbtaglen128v1 3.47 3.49 3.58 T:aes128otrpv3 3.90 3.91 3.95 T:aeadaes256ocbtaglen128v1 3.91 3.95 4.04 T:deoxysneq128128v1 4.14 4.15 4.16 T:aes128otrsv3 4.23 4.27 4.38 T:morus640128v1 4.16? 4.28? 6.81? T:aeadaes192ocbtaglen128v1 4.34 4.35 4.44 T:morus1280128v1 4.40 4.44 4.47 T:morus1280256v1 4.44 4.46 4.49 T:colm0v1 4.46 4.48 4.52 T:morus640128v2 4.58 4.58 4.64 T:morus1280128v2 4.65 4.67 4.68 T:aes256otrpv3 4.66 4.72 4.79 T:morus1280256v2 4.66 4.72 4.82 T:deoxysneq256128v1 4.74 4.76 4.78 T:aes128otrcv3 4.76 4.77 4.78 T:aes128n8t8clocv2 4.77 4.79 4.85 T:deoxysi128v141 4.81 4.82 4.83 T:aes128n12t8clocv3 4.82 4.82 4.85 T:aes128n12t8clocv2 5.32 5.34 5.37 T:aes256otrsv3 5.62 5.63 5.63 T:aes128n8t8silcv2 5.73 5.75 5.76 T:aes128n12t8silcv2 5.72 5.75 5.79 T:deoxysi256v141 5.76 5.80 5.83 T:aes128n12t8silcv3 5.87 5.91 5.97 T:aes128gcmv1 6.13 6.16 6.19 T:aes256otrcv3 6.47 6.49 6.51 T:deoxyseq128128v1 7.22 7.26 7.34 aes128gcmv1 7.67 7.71 7.78 T:deoxyseq256128v1 7.82 7.84 7.90 aes256gcmv1 8.28 8.31 8.34 T:deoxysii128v141 8.34 8.43 8.59 T:norx6441v3 8.31 8.46 8.62 T:norx6441v2 8.41 8.48 8.55 T:norx6441v1 9.24 9.27 9.29 T:aesjambuv1 9.82 9.86 9.94 T:deoxysii256v141 10.62 10.66 10.74 T:norx3241v2 10.59 10.68 10.76 T:norx3241v1 10.70 10.77 10.90 T:norx3241v3 11.47 11.53 11.68 T:ascon96v1 11.54 11.69 11.91 T:ascon128av11 11.63 11.70 12.01 ascon128av12 12.39 12.48 12.71 T:norx6461v2 12.47 12.51 12.66 T:norx6461v1 12.41 12.56 12.73 T:norx6461v3 14.70 14.76 14.97 T:ascon128v11 14.71 14.80 15.00 T:ascon128v1 14.75 14.82 14.98 T:norx6444v3 14.79 14.86 15.07 ascon128v12 15.06 15.13 15.33 T:lakekeyakv1 15.78 15.90 16.02 T:norx3261v2 15.89 15.96 16.13 T:norx3261v3 16.14 16.17 16.24 T:norx3261v1 17.51 17.63 17.91 T:riverkeyakv2 18.79 18.86 18.93 T:lakekeyakv2 21.55 21.64 21.89 T:aes128n8clocv1 21.66 21.71 21.83 T:aes128n12clocv1 21.70 21.73 21.79 T:twine80n6t4clocv2 22.02 22.04 22.06 T:twine80n6t4clocv3 22.08 22.15 22.25 T:aes128otrsv1 22.19 22.25 22.45 T:aes128otrsv2 22.23 22.33 22.58 T:aes128otrpv2 22.73 22.79 22.99 T:aes128otrpv1 28.68 28.83 29.07 T:aes256otrpv2 28.72 28.84 29.05 T:aes256otrsv1 28.88 28.96 29.20 T:aes256otrsv2 28.99 29.08 29.32 T:aes256otrpv1 31.39 31.54 31.70 T:seakeyakv2 31.58 31.72 31.95 T:acorn128v2 31.63 31.77 32.63 T:acorn128v3 34.26 34.56 35.21 T:ketjeminorv2 36.11 36.21 36.46 T:norx6444v2 39.84 39.88 39.93 T:aeadaes128ocbtaglen64v1 39.87 39.90 39.99 T:aeadaes128ocbtaglen96v1 44.42 44.57 44.95 T:norx6444v1 45.68 45.81 46.07 T:ketjesrv1 46.08 46.13 46.20 T:aeadaes192ocbtaglen64v1 46.14 46.18 46.24 T:aeadaes192ocbtaglen96v1 50.98 51.15 51.56 T:oceankeyakv2 53.31 53.49 53.73 T:ketjesrv2 52.92 53.50 53.90 T:ketjemajorv2 53.51 53.65 53.79 T:aeadaes256ocbtaglen96v1 53.62 53.67 53.76 T:aeadaes256ocbtaglen64v1 58.75 58.87 59.13 T:colm127v1 71.38 71.61 72.09 T:ketjejrv1 84.96 85.00 85.17 T:proest256otrv1 89.61 89.87 90.65 T:present80n6t4silcv3 90.42 90.53 90.76 T:deoxysneq128128v13 102.86 103.18 103.53 T:proest128otrv1 119.24 119.43 119.68 T:aezv1 122.85 123.33 123.89 T:ketjejrv2 127.22 127.50 127.76 T:deoxysneq256128v13 128.43 128.71 129.17 T:lunarkeyakv2 149.72 149.87 150.11 T:deoxyseq128128v13 149.69 149.96 150.16 T:led80n6t4silcv3 212.68 217.73 218.07 T:deoxyseq256128v13 1268.81? 1276.45? 2150.85? T:acorn128 3406.50 3407.38 3409.07 T:led80n6silcv1 3414.56 3416.69 3419.07 T:led80n6t4silcv2 3661.43 3662.67 3663.62 T:present80n6t4silcv2 3663.69 3664.67 3665.78 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.73 1.76 1.77 T:aegis128l 1.80 1.81 1.82 T:aegis128 1.89 1.90 1.91 aegis128l 2.04 2.05 2.07 T:aegis256 2.22 2.27 2.32 T:aezv5 2.27 2.28 2.31 T:aezv3 2.34 2.35 2.36 T:aezv4 2.34 2.36 2.43 T:tiaoxinv1 2.35 2.37 2.41 aegis256 2.32 2.37 2.44 T:tiaoxinv2 3.31 3.33 3.40 T:aeadaes128ocbtaglen128v1 3.57 3.60 3.73 T:aes128otrpv3 4.18 4.19 4.23 T:aeadaes256ocbtaglen128v1 4.19 4.24 4.33 T:morus640128v1 4.37 4.38 4.38 T:aes128otrsv3 4.49 4.52 4.56 T:morus1280256v1 4.50 4.54 4.59 T:morus1280128v1 4.58 4.60 4.65 T:morus640128v2 4.67? 4.70? 7.08? T:aeadaes192ocbtaglen128v1 4.79 4.82 4.84 T:morus1280128v2 4.80 4.82 4.85 T:aes128n8t8clocv2 4.79 4.86 5.02 T:morus1280256v2 4.86 4.86 4.88 T:aes128n12t8clocv2 4.86 4.86 4.88 T:aes128n12t8clocv3 4.84 4.87 4.89 T:aes256otrpv3 4.96 4.97 4.98 T:aes128otrcv3 5.18 5.20 5.24 T:colm0v1 5.69 5.70 5.71 T:aes128n8t8silcv2 5.70 5.72 5.75 T:aes256otrsv3 5.77 5.78 5.79 T:aes128n12t8silcv2 5.78 5.79 5.87 T:aes128n12t8silcv3 5.88 5.88 5.94 T:deoxysneq128128v1 5.89 5.93 5.95 T:deoxysneq256128v1 5.94 6.00 6.07 T:aes128gcmv1 6.37 6.39 6.43 T:deoxysi128v141 6.48 6.50 6.54 T:aes256otrcv3 7.73 7.79 7.89 aes128gcmv1 8.00 8.03 8.07 aes256gcmv1 8.09 8.21 8.34 T:deoxysi256v141 8.50 8.61 8.73 T:norx6441v3 8.63 8.72 8.79 T:norx6441v1 8.67 8.75 8.82 T:norx6441v2 9.10 9.12 9.18 T:deoxyseq128128v1 9.25 9.28 9.33 T:deoxysii128v141 9.26 9.29 9.33 T:deoxyseq256128v1 9.48 9.49 9.51 T:aesjambuv1 10.73 10.82 10.90 T:norx3241v3 10.77 10.82 10.90 T:norx3241v1 10.85 10.94 11.00 T:norx3241v2 11.28 11.34 11.42 T:deoxysii256v141 11.52 11.57 11.65 T:ascon96v1 11.50 11.62 11.69 T:ascon128av11 11.62 11.74 12.10 ascon128av12 12.59 12.73 12.92 T:norx6461v3 12.63 12.78 12.90 T:norx6461v2 12.71 12.80 12.89 T:norx6461v1 14.58 14.66 14.80 T:ascon128v1 14.61 14.66 14.83 T:ascon128v11 14.57 14.68 14.87 T:norx6444v3 14.85 14.94 15.10 ascon128v12 15.21 15.29 15.55 T:lakekeyakv1 15.84 15.97 16.14 T:norx3261v3 16.01 16.13 16.24 T:norx3261v2 16.26 16.32 16.41 T:norx3261v1 17.72 17.77 17.88 T:riverkeyakv2 18.75 18.84 18.90 T:lakekeyakv2 21.46 21.54 21.73 T:aes128n12clocv1 21.47 21.57 21.69 T:aes128n8clocv1 21.65 21.73 21.88 T:twine80n6t4clocv2 22.05 22.07 22.09 T:twine80n6t4clocv3 22.73 22.81 22.94 T:aes128otrsv1 22.78 22.84 22.99 T:aes128otrsv2 22.80 22.93 23.21 T:aes128otrpv2 23.10 23.19 23.29 T:aes128otrpv1 29.23 29.32 29.51 T:aes256otrpv2 29.42 29.50 29.65 T:aes256otrsv1 29.41 29.58 29.77 T:aes256otrsv2 29.67 29.72 29.79 T:aes256otrpv1 31.52 31.63 31.76 T:seakeyakv2 32.00 32.06 32.20 T:acorn128v2 32.10 32.31 32.97 T:acorn128v3 33.52 33.82 34.01 T:ketjeminorv2 35.97 36.07 36.34 T:norx6444v2 44.19 44.35 44.87 T:norx6444v1 46.22 46.40 46.67 T:ketjesrv1 47.81 47.90 48.05 T:aeadaes128ocbtaglen96v1 47.78 47.92 48.12 T:aeadaes128ocbtaglen64v1 51.21 51.36 51.68 T:oceankeyakv2 52.04 52.26 52.56 T:ketjemajorv2 53.47 53.66 54.05 T:ketjesrv2 55.31 55.44 55.56 T:aeadaes192ocbtaglen64v1 55.39 55.48 55.68 T:aeadaes192ocbtaglen96v1 64.77 64.87 65.16 T:aeadaes256ocbtaglen64v1 64.73 64.89 65.15 T:aeadaes256ocbtaglen96v1 67.56 67.68 67.92 T:colm127v1 72.11 72.38 72.81 T:ketjejrv1 85.83 85.93 86.22 T:proest256otrv1 89.88 90.16 90.78 T:present80n6t4silcv3 103.93 104.24 104.50 T:proest128otrv1 104.38 104.58 104.85 T:deoxysneq128128v13 122.99 123.37 123.82 T:ketjejrv2 123.42 123.70 124.00 T:aezv1 128.74 128.92 129.13 T:lunarkeyakv2 146.80 147.07 147.26 T:deoxysneq256128v13 149.82 150.11 150.36 T:led80n6t4silcv3 149.95 150.17 150.82 T:deoxyseq128128v13 213.97 218.59 219.15 T:deoxyseq256128v13 1301.84? 1305.85? 2160.84? T:acorn128 3406.01 3407.58 3417.77 T:led80n6silcv1 3413.25 3414.10 3415.36 T:led80n6t4silcv2 3661.23 3662.74 3664.47 T:present80n6t4silcv2 3663.44 3664.23 3665.94 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.74 1.75 1.76 T:aegis128l 1.79 1.81 1.83 T:aegis128 1.93 1.94 1.95 aegis128l 1.92 1.97 2.05 T:aezv5 1.97 1.99 2.07 T:aezv3 2.02 2.03 2.03 T:aezv4 2.04 2.05 2.06 T:aegis256 2.33 2.36 2.39 T:tiaoxinv1 2.35 2.37 2.39 aegis256 2.32 2.37 2.47 T:tiaoxinv2 3.33 3.37 3.44 T:aeadaes128ocbtaglen128v1 3.58 3.59 3.72 T:aes128otrpv3 4.20 4.23 4.26 T:aeadaes256ocbtaglen128v1 4.25 4.29 4.32 T:morus640128v1 4.38 4.38 4.40 T:aes128otrsv3 4.45 4.49 4.52 T:morus1280128v1 4.50 4.53 4.57 T:morus1280256v1 4.57 4.60 4.64 T:morus640128v2 4.65? 4.71? 6.19? T:aeadaes192ocbtaglen128v1 4.74 4.76 4.78 T:aes128n8t8clocv2 4.74 4.77 4.81 T:morus1280128v2 4.76 4.79 4.81 T:aes128n12t8clocv2 4.77 4.80 4.85 T:aes128n12t8clocv3 4.82 4.86 4.94 T:morus1280256v2 4.84 4.86 4.88 T:aes256otrpv3 4.97 4.98 4.99 T:aes128otrcv3 5.28 5.30 5.31 T:colm0v1 5.63 5.65 5.66 T:aes128n8t8silcv2 5.71 5.71 5.72 T:aes128n12t8silcv2 5.70 5.71 5.73 T:aes256otrsv3 5.71 5.73 5.79 T:aes128n12t8silcv3 5.73 5.76 5.80 T:deoxysneq256128v1 5.75 5.77 5.81 T:deoxysneq128128v1 5.92 5.97 6.03 T:aes128gcmv1 6.27 6.33 6.37 aes128gcmv1 6.37 6.39 6.45 T:deoxysi128v141 6.46 6.49 6.52 T:aes256otrcv3 8.10 8.14 8.19 aes256gcmv1 8.07 8.20 8.38 T:deoxysi256v141 8.58 8.64 8.74 T:norx6441v3 8.55 8.68 8.77 T:norx6441v1 8.67 8.74 8.81 T:norx6441v2 9.10 9.13 9.18 T:deoxyseq128128v1 9.21 9.23 9.30 T:deoxyseq256128v1 9.24 9.29 9.33 T:deoxysii128v141 9.46 9.47 9.49 T:aesjambuv1 10.73 10.79 10.85 T:norx3241v3 10.80 10.85 10.91 T:norx3241v1 10.86 10.94 11.00 T:norx3241v2 11.25 11.32 11.42 T:deoxysii256v141 11.40 11.48 11.57 T:ascon96v1 11.43 11.56 11.72 T:ascon128av11 11.60 11.68 11.80 ascon128av12 12.65 12.73 12.92 T:norx6461v3 12.63 12.77 12.93 T:norx6461v2 12.76 12.87 13.00 T:norx6461v1 14.52 14.56 14.66 T:ascon128v11 14.56 14.62 14.75 T:ascon128v1 14.64 14.74 14.85 T:norx6444v3 14.83 14.94 15.04 ascon128v12 15.22 15.29 15.47 T:lakekeyakv1 15.86 16.01 16.06 T:norx3261v3 16.01 16.18 16.19 T:norx3261v2 16.26 16.30 16.34 T:norx3261v1 17.68 17.77 17.87 T:riverkeyakv2 18.84 18.88 18.95 T:lakekeyakv2 21.41 21.50 21.64 T:aes128n8clocv1 21.44 21.50 21.67 T:aes128n12clocv1 21.63 21.67 21.74 T:twine80n6t4clocv2 22.03 22.04 22.07 T:twine80n6t4clocv3 22.82 22.91 23.14 T:aes128otrsv1 22.90 22.97 23.03 T:aes128otrsv2 22.90 23.02 23.21 T:aes128otrpv2 23.20 23.26 23.34 T:aes128otrpv1 29.32 29.45 29.68 T:aes256otrpv2 29.50 29.64 29.83 T:aes256otrsv2 29.55 29.66 29.80 T:aes256otrsv1 29.74 29.81 29.99 T:aes256otrpv1 31.63 31.73 31.92 T:seakeyakv2 31.91 32.03 32.13 T:acorn128v2 32.10 32.23 32.92 T:acorn128v3 33.53 33.87 34.04 T:ketjeminorv2 35.98 36.13 36.31 T:norx6444v2 44.24 44.43 44.73 T:norx6444v1 46.18 46.38 46.69 T:ketjesrv1 47.74 47.83 47.93 T:aeadaes128ocbtaglen96v1 47.75 47.86 47.97 T:aeadaes128ocbtaglen64v1 51.32 51.52 51.85 T:oceankeyakv2 53.54 53.68 53.98 T:ketjesrv2 52.89 53.94 54.30 T:ketjemajorv2 55.30 55.44 55.54 T:aeadaes192ocbtaglen64v1 55.44 55.53 55.64 T:aeadaes192ocbtaglen96v1 64.76 64.85 64.95 T:aeadaes256ocbtaglen64v1 64.70 64.85 65.11 T:aeadaes256ocbtaglen96v1 67.25 67.38 67.57 T:colm127v1 72.98 73.19 73.68 T:ketjejrv1 84.21 84.29 84.41 T:proest256otrv1 89.70 89.97 90.59 T:present80n6t4silcv3 104.03 104.23 104.43 T:proest128otrv1 105.29 105.39 105.54 T:deoxysneq128128v13 123.42 123.59 123.83 T:aezv1 123.97 124.46 124.81 T:ketjejrv2 128.71 128.98 129.27 T:lunarkeyakv2 146.98 147.28 147.52 T:deoxysneq256128v13 149.84 150.02 150.33 T:led80n6t4silcv3 151.04 151.32 151.83 T:deoxyseq128128v13 213.90 218.83 219.30 T:deoxyseq256128v13 1301.98? 1305.79? 2161.14? T:acorn128 3405.46 3407.05 3417.24 T:led80n6silcv1 3413.20 3413.90 3415.19 T:led80n6t4silcv2 3660.41 3661.17 3662.67 T:present80n6t4silcv2 3662.73 3663.35 3664.82 T:present80n6silcv1