VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20250922

[Page version: 20251103 11:56:53]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.21 0.21 0.23 T:tiaoxinv2 0.19? 0.22? 0.22? T:tiaoxinv1 0.25 0.25 0.26 aegis128l 0.26 0.26 0.27 T:aegis128l 0.38? 0.39? 0.43? aegis256 0.41 0.41 0.42 T:aegis256 0.41 0.42 0.42 T:aegis128 0.61 0.61 0.63 T:aezv3 0.62 0.62 0.63 T:aezv4 0.61 0.62 0.63 T:aezv5 0.63 0.63 0.63 T:aes128otrcv3 0.63 0.63 0.64 T:morus1280128v2 0.62 0.63 0.64 T:morus1280128v1 0.63 0.64 0.64 T:morus1280256v2 0.64 0.64 0.65 T:morus1280256v1 0.64 0.66 0.67 T:aes128otrpv3 0.64 0.66 0.67 T:aes128otrsv3 0.66 0.68 0.69 T:aeadaes128ocbtaglen128v1 0.40? 0.75? 0.82? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.87 0.88 0.89 T:aes256otrcv3 0.85 0.88 0.91 T:deoxysi128v141 0.88 0.89 0.89 T:aeadaes256ocbtaglen128v1 0.88 0.89 0.91 T:aes256otrpv3 0.88 0.90 0.91 T:aes256otrsv3 0.96 0.99 1.00 T:deoxysi256v141 0.99 1.00 1.01 T:deoxysneq256128v1 1.06 1.07 1.09 T:morus640128v1 1.07 1.08 1.09 T:morus640128v2 1.14 1.16 1.19 T:norx6444v3 1.18 1.19 1.20 T:aes128gcmv1 1.43 1.44 1.45 aes256gcmv1 1.64 1.66 1.71 T:colm0v1 1.73 1.75 1.76 T:deoxysii128v141 1.76 1.77 1.78 T:deoxyseq128128v1 1.98 2.00 2.01 T:deoxysii256v141 2.01 2.02 2.04 T:deoxyseq256128v1 1.98 2.09 2.13 T:lunarkeyakv2 2.09 2.12 2.13 T:norx6441v2 2.17 2.19 2.22 T:norx6441v3 2.54 2.56 2.59 T:norx6441v1 2.75 2.75 2.76 T:aes128n12t8clocv3 2.75 2.76 2.77 T:aes128n12t8clocv2 2.75 2.76 2.76 T:aes128n8t8silcv2 2.75 2.76 2.76 T:aes128n12t8silcv2 2.75 2.76 2.76 T:aes128n12t8silcv3 2.76 2.76 2.76 T:aes128n8t8clocv2 2.74 2.78 2.80 T:seakeyakv2 2.78 2.87 2.97 T:oceankeyakv2 3.23 3.25 3.27 T:norx6461v2 3.22 3.25 3.30 T:norx6461v3 3.78 3.80 3.83 T:norx6444v2 3.92 3.93 3.98 T:norx3241v2 3.93 3.96 3.99 T:norx6461v1 3.97 3.99 4.02 T:norx3241v3 4.10 4.14 4.15 T:lakekeyakv1 4.30 4.31 4.34 T:norx6444v1 4.39 4.43 4.44 T:lakekeyakv2 4.74 4.79 4.82 T:norx3241v1 5.45 5.59 5.65 T:acorn128v3 5.84 5.84 5.85 T:aesjambuv1 5.87 5.89 5.90 T:norx3261v3 6.00 6.02 6.05 T:norx3261v2 6.74 6.79 6.84 T:acorn128v2 7.17 7.21 7.23 T:norx3261v1 7.37 7.48 7.56 T:ketjemajorv2 7.50 7.52 7.54 T:ascon128av11 7.49 7.52 7.54 T:ascon96v1 7.53 7.55 7.60 ascon128av12 9.76 9.80 9.84 T:riverkeyakv2 9.79 9.91 9.96 T:ketjeminorv2 10.85 10.87 10.89 T:ascon128v1 10.88 10.89 10.92 T:ascon128v11 10.92 10.95 10.98 ascon128v12 13.49 13.51 13.54 T:aes128otrpv2 13.49 13.54 13.57 T:aes128otrsv2 13.51 13.54 13.59 T:aes128otrsv1 13.66 13.71 13.74 T:aes128otrpv1 14.56 14.60 14.61 T:twine80n6t4clocv3 15.57 15.59 15.61 T:twine80n6t4clocv2 17.44 17.48 17.50 T:aes256otrsv1 17.48 17.50 17.53 T:aes256otrsv2 17.49 17.52 17.54 T:aes256otrpv1 17.62 17.64 17.66 T:aes256otrpv2 23.00 23.03 23.06 T:aes128n12clocv1 23.06 23.08 23.13 T:aes128n8clocv1 24.65 24.67 24.69 T:aeadaes128ocbtaglen64v1 24.67 24.69 24.71 T:aeadaes128ocbtaglen96v1 27.07 27.10 27.13 T:proest256otrv1 29.02 29.04 29.07 T:aeadaes192ocbtaglen96v1 29.04 29.05 29.07 T:aeadaes192ocbtaglen64v1 31.17 31.21 31.26 T:ketjesrv1 31.86 31.90 31.94 T:ketjesrv2 33.44 33.48 33.52 T:aeadaes256ocbtaglen64v1 33.46 33.50 33.53 T:aeadaes256ocbtaglen96v1 50.37 50.39 50.43 T:proest128otrv1 54.45 54.48 54.53 T:colm127v1 59.08 59.14 59.17 T:ketjejrv1 71.63 71.66 71.69 T:present80n6t4silcv3 80.78 80.85 80.91 T:deoxysneq128128v13 93.55 93.83 94.01 T:ketjejrv2 111.73 111.91 113.07 T:deoxysneq256128v13 125.16 125.21 125.31 T:led80n6t4silcv3 158.17 158.71 159.23 T:aezv1 167.17 167.40 170.03 T:deoxyseq128128v13 223.96 224.12 224.22 T:deoxyseq256128v13 324.31 326.24 327.37 T:acorn128 4032.44 4033.31 4033.70 T:led80n6silcv1 4044.52 4044.96 4046.49 T:led80n6t4silcv2 4277.87 4278.21 4278.56 T:present80n6silcv1 4279.24 4280.50 4280.85 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.25 0.25 0.26 aegis128l 0.25 0.25 0.27 T:aegis128l 0.36 0.37 0.39 T:tiaoxinv1 0.36 0.37 0.38 T:tiaoxinv2 0.39 0.40 0.41 T:aegis256 0.45 0.46 0.46 T:aegis128 0.47 0.48 0.49 aegis256 0.59? 0.62? 0.66? T:aezv3 0.61 0.62 0.62 T:aezv5 0.61 0.62 0.62 T:aezv4 0.64 0.64 0.66 T:morus1280256v1 0.64 0.65 0.65 T:morus1280256v2 0.65 0.66 0.66 T:morus1280128v1 0.65 0.66 0.66 T:morus1280128v2 0.66 0.67 0.68 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.69 T:aes128otrcv3 0.68 0.70 0.71 T:aes128otrsv3 0.69 0.70 0.71 T:aes128otrpv3 0.74 0.76 0.77 T:aeadaes192ocbtaglen128v1 0.90 0.91 0.92 T:aes256otrcv3 0.91 0.91 0.92 T:aeadaes256ocbtaglen128v1 0.92 0.93 0.94 T:aes256otrsv3 0.92 0.93 0.94 T:aes256otrpv3 1.03 1.06 1.07 T:aes128gcmv1 1.06 1.08 1.08 T:morus640128v2 1.07 1.08 1.09 T:morus640128v1 1.13 1.14 1.17 T:norx6444v3 1.15 1.17 1.18 T:deoxysi128v141 1.20 1.21 1.22 T:deoxysneq128128v1 1.24 1.27 1.30 T:deoxysi256v141 1.31 1.31 1.32 T:deoxysneq256128v1 1.40 1.43 1.44 aes256gcmv1 1.63 1.66 1.77 T:colm0v1 1.74 1.75 1.76 T:deoxysii128v141 1.98 2.01 2.02 T:deoxysii256v141 2.01 2.03 2.08 T:norx6441v2 2.02 2.04 2.07 T:norx6441v3 2.05 2.15 2.25 T:lunarkeyakv2 2.41 2.42 2.43 T:deoxyseq128128v1 2.44 2.46 2.48 T:norx6441v1 2.51 2.53 2.54 T:deoxyseq256128v1 2.71 2.73 2.74 T:aes128n12t8clocv3 2.72 2.73 2.75 T:aes128n12t8silcv2 2.72 2.73 2.75 T:aes128n12t8clocv2 2.71 2.73 2.75 T:aes128n8t8silcv2 2.71 2.73 2.75 T:aes128n12t8silcv3 2.72 2.73 2.75 T:aes128n8t8clocv2 2.84 2.86 2.90 T:seakeyakv2 2.88 2.95 3.02 T:oceankeyakv2 3.11 3.15 3.18 T:norx6461v2 3.12 3.15 3.19 T:norx6461v3 3.73 3.76 3.79 T:norx3241v2 3.73 3.79 3.81 T:norx6444v2 3.76 3.79 3.83 T:norx6461v1 3.77 3.79 3.82 T:norx3241v3 4.19 4.23 4.25 T:lakekeyakv1 4.25 4.28 4.32 T:norx6444v1 4.40 4.43 4.46 T:lakekeyakv2 4.53 4.54 4.57 T:norx3241v1 5.73 5.75 5.77 T:norx3261v3 5.79 5.80 5.84 T:norx3261v2 6.10 6.10 6.10 T:aesjambuv1 6.93 6.95 6.98 T:acorn128v2 7.06 7.07 7.09 T:norx3261v1 7.04 7.13 7.20 T:ketjemajorv2 7.29 7.31 7.33 T:acorn128v3 7.37 7.39 7.44 ascon128av12 7.59 7.63 7.65 T:ascon128av11 7.60 7.64 7.68 T:ascon96v1 9.79 9.84 9.88 T:ketjeminorv2 9.84 9.88 9.93 T:riverkeyakv2 10.58 10.63 10.71 T:ascon128v1 10.57 10.67 10.71 T:ascon128v11 10.90 10.92 10.97 ascon128v12 13.91 13.95 14.03 T:aes128otrpv1 14.03 14.05 14.08 T:aes128otrsv2 14.07 14.09 14.13 T:aes128otrpv2 14.37 14.40 14.46 T:aes128otrsv1 14.56 14.59 14.64 T:twine80n6t4clocv3 15.49 15.51 15.54 T:twine80n6t4clocv2 17.98 18.04 18.40 T:aes256otrpv2 18.09 18.14 18.17 T:aes256otrsv2 18.27 18.32 18.35 T:aes256otrpv1 18.27 18.33 18.38 T:aes256otrsv1 21.94 22.00 22.04 T:aes128n12clocv1 22.44 22.48 22.52 T:aes128n8clocv1 27.02 27.08 27.10 T:proest256otrv1 31.84 31.86 31.90 T:ketjesrv1 32.10 32.18 32.24 T:ketjesrv2 33.22 33.28 33.31 T:aeadaes128ocbtaglen64v1 33.27 33.29 33.33 T:aeadaes128ocbtaglen96v1 39.68 39.71 39.79 T:aeadaes192ocbtaglen96v1 39.66 39.72 39.84 T:aeadaes192ocbtaglen64v1 46.14 46.19 46.24 T:aeadaes256ocbtaglen64v1 46.15 46.27 46.35 T:aeadaes256ocbtaglen96v1 50.80 50.85 50.89 T:proest128otrv1 59.98 60.06 60.09 T:ketjejrv1 71.45 71.54 71.67 T:present80n6t4silcv3 72.40 72.46 72.63 T:colm127v1 94.17 94.22 94.46 T:ketjejrv2 108.83 109.09 109.21 T:deoxysneq128128v13 124.99 125.06 125.15 T:led80n6t4silcv3 151.22 152.23 152.38 T:deoxysneq256128v13 158.29 158.82 159.79 T:aezv1 168.23 168.36 168.49 T:deoxyseq128128v13 223.35 223.49 223.71 T:deoxyseq256128v13 348.10 348.62 349.33 T:acorn128 4032.73 4033.15 4033.38 T:led80n6silcv1 4044.67 4045.02 4045.73 T:led80n6t4silcv2 4277.68 4278.36 4278.91 T:present80n6silcv1 4278.93 4279.19 4279.61 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.24 0.25 0.25 T:aezv3 0.23 0.25 0.25 T:aezv4 0.25 0.25 0.27 T:aezv5 0.25 0.26 0.27 T:aegis128l 0.27? 0.28? 0.31? aegis128l 0.37 0.37 0.38 T:tiaoxinv1 0.37 0.37 0.39 T:tiaoxinv2 0.39 0.40 0.41 T:aegis256 0.45 0.46 0.46 T:aegis128 0.48 0.48 0.49 aegis256 0.64 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280256v1 0.65 0.65 0.66 T:morus1280128v2 0.65 0.66 0.66 T:morus1280128v1 0.66 0.67 0.67 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.69 T:aes128otrcv3 0.68 0.68 0.69 T:aes128otrsv3 0.68 0.69 0.69 T:aes128otrpv3 0.73? 0.75? 1.10? T:aeadaes192ocbtaglen128v1 0.90 0.91 0.91 T:aeadaes256ocbtaglen128v1 0.90 0.91 0.91 T:aes256otrcv3 0.91 0.91 0.92 T:aes256otrsv3 0.92 0.92 0.92 T:aes256otrpv3 1.05 1.06 1.06 T:aes128gcmv1 1.05 1.07 1.09 T:morus640128v2 1.07 1.07 1.08 T:morus640128v1 1.14 1.16 1.17 T:norx6444v3 1.16 1.17 1.20 T:deoxysi128v141 1.20 1.21 1.23 T:deoxysneq128128v1 1.26 1.27 1.29 T:deoxysi256v141 1.30 1.31 1.32 T:deoxysneq256128v1 1.42 1.43 1.44 aes256gcmv1 1.65 1.66 1.78 T:colm0v1 1.75 1.75 1.76 T:deoxysii128v141 2.00 2.01 2.01 T:deoxysii256v141 2.02 2.03 2.05 T:norx6441v3 2.01 2.05 2.07 T:norx6441v2 2.14 2.19 2.23 T:lunarkeyakv2 2.41 2.42 2.44 T:deoxyseq128128v1 2.46 2.47 2.50 T:norx6441v1 2.52 2.53 2.56 T:deoxyseq256128v1 2.70 2.71 2.74 T:aes128n12t8clocv3 2.71 2.72 2.74 T:aes128n8t8silcv2 2.71 2.73 2.74 T:aes128n12t8clocv2 2.69 2.73 2.74 T:aes128n12t8silcv3 2.71 2.73 2.75 T:aes128n8t8clocv2 2.69 2.73 2.75 T:aes128n12t8silcv2 2.86 2.89 2.93 T:seakeyakv2 2.92 2.95 2.98 T:oceankeyakv2 3.13 3.15 3.16 T:norx6461v2 3.12 3.15 3.18 T:norx6461v3 3.73 3.76 3.77 T:norx3241v2 3.77 3.79 3.84 T:norx6461v1 3.78 3.80 3.83 T:norx3241v3 3.82 3.83 3.85 T:norx6444v2 4.22 4.24 4.26 T:lakekeyakv1 4.29 4.31 4.33 T:norx6444v1 4.40 4.44 4.46 T:lakekeyakv2 4.51 4.54 4.55 T:norx3241v1 5.73 5.75 5.77 T:norx3261v3 5.78 5.81 5.83 T:norx3261v2 6.03 6.10 6.10 T:aesjambuv1 6.93 6.94 6.98 T:acorn128v2 7.06 7.08 7.09 T:norx3261v1 7.09 7.16 7.23 T:ketjemajorv2 7.31 7.32 7.34 T:acorn128v3 7.39 7.41 7.43 ascon128av12 7.59 7.62 7.66 T:ascon128av11 7.60 7.64 7.70 T:ascon96v1 9.78 9.84 9.92 T:ketjeminorv2 9.88 9.90 9.93 T:riverkeyakv2 10.58 10.60 10.63 T:ascon128v1 10.58 10.61 10.68 T:ascon128v11 10.89 10.94 10.97 ascon128v12 13.94 13.98 14.02 T:aes128otrpv1 14.04 14.07 14.12 T:aes128otrsv2 14.09 14.11 14.17 T:aes128otrpv2 14.37 14.41 14.44 T:aes128otrsv1 14.55 14.59 14.62 T:twine80n6t4clocv3 15.47 15.51 15.54 T:twine80n6t4clocv2 18.04 18.11 18.43 T:aes256otrpv2 18.16 18.21 18.24 T:aes256otrsv2 18.32 18.37 18.42 T:aes256otrpv1 18.33 18.37 18.40 T:aes256otrsv1 21.98 22.01 22.07 T:aes128n12clocv1 22.45 22.49 22.53 T:aes128n8clocv1 27.02 27.06 27.08 T:proest256otrv1 31.85 31.92 31.98 T:ketjesrv1 32.15 32.22 32.26 T:ketjesrv2 33.27 33.29 33.33 T:aeadaes128ocbtaglen96v1 33.27 33.31 33.33 T:aeadaes128ocbtaglen64v1 39.68 39.72 39.75 T:aeadaes192ocbtaglen96v1 39.68 39.75 39.80 T:aeadaes192ocbtaglen64v1 46.18 46.21 46.24 T:aeadaes256ocbtaglen64v1 46.19 46.24 46.28 T:aeadaes256ocbtaglen96v1 50.79 50.83 50.88 T:proest128otrv1 60.03 60.09 60.13 T:ketjejrv1 71.28 71.33 71.39 T:colm127v1 71.46 71.60 71.64 T:present80n6t4silcv3 94.15 94.24 94.39 T:ketjejrv2 109.01 109.14 109.26 T:deoxysneq128128v13 125.06 125.11 125.19 T:led80n6t4silcv3 151.13 152.38 152.53 T:deoxysneq256128v13 158.08 158.44 159.51 T:aezv1 168.29 168.46 168.55 T:deoxyseq128128v13 223.59 223.72 223.85 T:deoxyseq256128v13 347.75 348.64 349.45 T:acorn128 4032.78 4033.02 4033.66 T:led80n6silcv1 4044.91 4045.11 4045.29 T:led80n6t4silcv2 4277.99 4278.21 4278.48 T:present80n6silcv1 4278.98 4279.64 4280.59 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.19? 0.20? 0.22? T:tiaoxinv2 0.18? 0.20? 0.22? T:tiaoxinv1 0.25 0.25 0.26 T:aegis128l 0.25 0.25 0.25 aegis128l 0.39 0.39 0.40 aegis256 0.42 0.43 0.43 T:aegis256 0.42 0.43 0.45 T:aezv3 0.42 0.44 0.45 T:aezv5 0.41 0.44 0.45 T:aezv4 0.43 0.44 0.44 T:aegis128 0.61 0.62 0.63 T:morus1280128v2 0.61 0.62 0.63 T:morus1280256v2 0.61 0.62 0.63 T:morus1280256v1 0.62 0.62 0.63 T:morus1280128v1 0.61 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.63 0.64 0.65 T:aes128otrpv3 0.65 0.65 0.65 T:aes128otrcv3 0.63? 0.74? 0.85? T:aeadaes192ocbtaglen128v1 0.80 0.82 0.83 T:aes128gcmv1 0.85 0.87 0.89 T:deoxysneq128128v1 0.84 0.88 0.90 T:deoxysi128v141 0.87 0.88 0.89 T:aeadaes256ocbtaglen128v1 0.88 0.88 0.89 T:aes256otrcv3 0.89 0.89 0.89 T:aes256otrpv3 0.91 0.93 0.93 aes256gcmv1 0.96 0.99 1.02 T:deoxysi256v141 0.98 0.99 1.02 T:deoxysneq256128v1 1.04 1.05 1.06 T:morus640128v2 1.04 1.05 1.05 T:morus640128v1 1.13 1.15 1.18 T:colm0v1 1.29 1.31 1.33 T:deoxysii128v141 1.31 1.33 1.36 T:deoxyseq128128v1 1.49 1.51 1.52 T:deoxysii256v141 1.49 1.51 1.53 T:deoxyseq256128v1 1.65 1.67 1.68 T:norx6444v3 1.70 1.70 1.70 T:aes128otrsv3 2.12 2.15 2.17 T:norx6441v2 2.15 2.17 2.19 T:norx6441v3 2.30 2.30 2.30 T:aes256otrsv3 2.31 2.32 2.36 T:seakeyakv2 2.37 2.40 2.44 T:oceankeyakv2 2.58 2.59 2.61 T:norx6441v1 2.72 2.72 2.72 T:aes128n12t8silcv3 2.72 2.72 2.73 T:aes128n12t8silcv2 2.74 2.74 2.74 T:aes128n12t8clocv2 2.74 2.74 2.74 T:aes128n12t8clocv3 2.74 2.74 2.74 T:aes128n8t8clocv2 2.72 2.75 2.75 T:aes128n8t8silcv2 2.83 2.88 2.90 T:lunarkeyakv2 3.29 3.30 3.32 T:norx6461v3 3.32 3.33 3.35 T:norx6461v2 3.49 3.51 3.53 T:norx6444v2 3.88 3.91 3.92 T:lakekeyakv1 3.91 3.92 3.94 T:norx6461v1 3.93 3.94 3.96 T:lakekeyakv2 3.95 3.97 3.99 T:norx3241v3 3.96 3.98 3.99 T:norx3241v2 4.26 4.27 4.28 T:norx6444v1 4.77 4.78 4.80 T:norx3241v1 5.79 5.79 5.80 T:aesjambuv1 5.98 5.99 6.01 T:norx3261v3 6.04 6.06 6.08 T:norx3261v2 6.49 6.51 6.56 T:ketjemajorv2 6.51 6.57 6.59 T:acorn128v3 6.99 7.02 7.04 T:acorn128v2 7.11 7.13 7.16 T:riverkeyakv2 7.20 7.21 7.23 T:norx3261v1 7.36 7.38 7.40 T:ascon96v1 7.37 7.40 7.42 T:ascon128av11 7.45 7.49 7.51 ascon128av12 8.84 8.87 8.95 T:ketjeminorv2 10.86 10.87 10.91 T:ascon128v1 10.86 10.88 10.91 T:ascon128v11 10.93 10.94 10.96 ascon128v12 12.75 12.77 12.80 T:aes128otrsv1 12.75 12.78 12.80 T:aes128otrsv2 12.91 12.92 12.94 T:aes128otrpv2 12.99 13.03 13.12 T:aes128otrpv1 14.35 14.38 14.40 T:twine80n6t4clocv3 15.32 15.33 15.35 T:twine80n6t4clocv2 16.75 16.77 16.83 T:aes256otrsv1 16.77 16.79 16.81 T:aes256otrsv2 16.90 16.93 16.95 T:aes256otrpv1 17.04 17.10 17.14 T:aes256otrpv2 17.55 17.57 17.61 T:aes128n8clocv1 17.52 17.58 17.61 T:aes128n12clocv1 24.44 24.45 24.46 T:aeadaes128ocbtaglen64v1 24.44 24.46 24.48 T:aeadaes128ocbtaglen96v1 27.27 27.29 27.30 T:proest256otrv1 28.22 28.25 28.27 T:ketjesrv1 28.80 28.82 28.86 T:aeadaes192ocbtaglen96v1 28.80 28.84 28.85 T:aeadaes192ocbtaglen64v1 29.42 29.47 29.53 T:ketjesrv2 33.25 33.27 33.28 T:aeadaes256ocbtaglen64v1 33.24 33.27 33.30 T:aeadaes256ocbtaglen96v1 40.15 40.19 40.20 T:colm127v1 50.89 50.92 50.97 T:proest128otrv1 53.21 53.31 53.38 T:ketjejrv1 71.12 71.14 71.16 T:present80n6t4silcv3 80.40 80.48 80.55 T:deoxysneq128128v13 89.76 90.20 90.35 T:ketjejrv2 104.02 104.12 105.33 T:aezv1 111.72 112.08 113.34 T:deoxysneq256128v13 124.69 124.74 124.79 T:led80n6t4silcv3 126.50 126.64 128.21 T:deoxyseq128128v13 167.30 167.35 167.48 T:deoxyseq256128v13 315.03 320.14 320.73 T:acorn128 3024.42 3024.61 3026.43 T:led80n6silcv1 3034.09 3034.31 3034.71 T:led80n6t4silcv2 3209.10 3209.31 3209.79 T:present80n6silcv1 3208.96 3210.62 3210.86 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.24 0.25 0.25 T:aegis128l 0.25 0.25 0.25 aegis128l 0.26? 0.28? 0.29? T:tiaoxinv1 0.26 0.28 0.28 T:tiaoxinv2 0.40 0.40 0.41 T:aegis256 0.43 0.43 0.44 T:aezv4 0.41 0.43 0.44 T:aezv3 0.42 0.43 0.44 T:aezv5 0.43 0.44 0.44 T:aegis128 0.44 0.44 0.45 aegis256 0.61 0.62 0.63 T:morus1280256v2 0.62 0.62 0.63 T:morus1280256v1 0.62 0.62 0.63 T:morus1280128v1 0.62 0.63 0.64 T:morus1280128v2 0.61 0.63 0.64 T:aeadaes128ocbtaglen128v1 0.66 0.67 0.67 T:aes128otrpv3 0.67 0.68 0.68 T:aes128otrcv3 0.71 0.73 0.74 T:aes128gcmv1 0.57? 0.76? 0.93? T:aeadaes192ocbtaglen128v1 0.87 0.89 0.90 T:aeadaes256ocbtaglen128v1 0.90 0.90 0.92 T:aes256otrcv3 0.91 0.91 0.92 T:aes256otrpv3 0.89 0.92 0.93 aes256gcmv1 1.00 1.01 1.03 T:deoxysi128v141 1.02 1.04 1.05 T:deoxysneq128128v1 1.03 1.04 1.04 T:morus640128v1 1.03 1.04 1.05 T:morus640128v2 1.13 1.15 1.16 T:deoxysneq256128v1 1.13 1.16 1.18 T:deoxysi256v141 1.14 1.17 1.21 T:colm0v1 1.29 1.31 1.33 T:deoxysii128v141 1.48 1.50 1.52 T:deoxysii256v141 1.63 1.64 1.66 T:deoxyseq128128v1 1.65 1.67 1.68 T:norx6444v3 1.72 1.72 1.73 T:aes128otrsv3 1.76 1.78 1.79 T:deoxyseq256128v1 2.07 2.11 2.12 T:norx6441v3 2.10 2.11 2.14 T:norx6441v2 2.32 2.32 2.33 T:aes256otrsv3 2.36 2.38 2.41 T:seakeyakv2 2.39 2.43 2.48 T:oceankeyakv2 2.53 2.55 2.56 T:norx6441v1 2.69 2.70 2.72 T:aes128n12t8silcv2 2.70 2.70 2.72 T:aes128n8t8silcv2 2.70 2.71 2.72 T:aes128n12t8silcv3 2.71 2.72 2.73 T:aes128n12t8clocv2 2.72 2.72 2.73 T:aes128n8t8clocv2 2.71 2.72 2.73 T:aes128n12t8clocv3 2.85 2.90 2.94 T:lunarkeyakv2 3.22 3.23 3.25 T:norx6461v3 3.24 3.26 3.28 T:norx6461v2 3.51 3.54 3.57 T:norx6444v2 3.78 3.83 3.85 T:norx6461v1 3.88 3.89 3.90 T:norx3241v3 3.88 3.89 3.91 T:norx3241v2 3.92 3.93 3.95 T:lakekeyakv1 3.92 3.93 3.95 T:lakekeyakv2 4.23 4.24 4.26 T:norx6444v1 4.65 4.67 4.68 T:norx3241v1 5.88 5.88 5.88 T:aesjambuv1 5.89 5.91 5.93 T:norx3261v3 5.94 5.95 5.97 T:norx3261v2 6.33 6.36 6.40 T:ketjemajorv2 7.13 7.14 7.15 T:norx3261v1 7.16 7.20 7.21 T:acorn128v2 7.19 7.21 7.24 T:riverkeyakv2 7.36 7.38 7.42 ascon128av12 7.35 7.39 7.42 T:ascon128av11 7.42 7.43 7.46 T:acorn128v3 7.45 7.48 7.50 T:ascon96v1 8.90 8.96 8.99 T:ketjeminorv2 10.76 10.78 10.81 T:ascon128v1 10.76 10.79 10.83 T:ascon128v11 10.89 10.91 10.93 ascon128v12 13.00 13.03 13.07 T:aes128otrsv2 13.16 13.19 13.24 T:aes128otrpv2 13.16 13.21 13.24 T:aes128otrsv1 13.14 13.22 13.29 T:aes128otrpv1 14.35 14.39 14.41 T:twine80n6t4clocv3 15.29 15.30 15.32 T:twine80n6t4clocv2 17.06 17.08 17.11 T:aes256otrsv2 17.05 17.10 17.12 T:aes128n12clocv1 17.11 17.16 17.19 T:aes256otrsv1 17.26 17.29 17.34 T:aes256otrpv1 17.23 17.30 17.44 T:aes256otrpv2 17.23 17.30 17.33 T:aes128n8clocv1 27.26 27.28 27.31 T:proest256otrv1 28.54 28.57 28.60 T:ketjesrv1 28.73 28.76 28.79 T:aeadaes128ocbtaglen96v1 28.74 28.76 28.79 T:aeadaes128ocbtaglen64v1 29.57 29.63 29.66 T:ketjesrv2 34.15 34.17 34.20 T:aeadaes192ocbtaglen96v1 34.16 34.19 34.27 T:aeadaes192ocbtaglen64v1 39.62 39.65 39.69 T:aeadaes256ocbtaglen64v1 39.63 39.67 39.71 T:aeadaes256ocbtaglen96v1 49.15 49.18 49.22 T:colm127v1 51.09 51.13 51.17 T:proest128otrv1 53.70 53.80 53.87 T:ketjejrv1 71.04 71.06 71.12 T:present80n6t4silcv3 90.54 90.60 90.65 T:ketjejrv2 94.25 94.65 94.73 T:deoxysneq128128v13 104.34 104.61 105.55 T:aezv1 124.64 124.70 124.74 T:led80n6t4silcv3 125.91 125.97 127.24 T:deoxyseq128128v13 131.20 131.39 132.18 T:deoxysneq256128v13 167.08 167.14 167.29 T:deoxyseq256128v13 337.20 339.47 339.71 T:acorn128 3024.55 3024.97 3030.37 T:led80n6silcv1 3034.09 3034.30 3034.60 T:led80n6t4silcv2 3209.04 3209.85 3210.20 T:present80n6silcv1 3208.86 3210.53 3210.89 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.23? 0.25? 0.26? T:aezv4 0.24 0.25 0.26 T:aezv3 0.24 0.25 0.26 T:aezv5 0.25 0.25 0.25 T:aegis128l 0.25 0.26 0.26 aegis128l 0.28 0.28 0.28 T:tiaoxinv2 0.27 0.28 0.28 T:tiaoxinv1 0.40 0.41 0.41 T:aegis256 0.42 0.43 0.44 T:aegis128 0.44 0.44 0.45 aegis256 0.62 0.62 0.63 T:morus1280256v2 0.62 0.62 0.63 T:morus1280128v1 0.62 0.62 0.63 T:morus1280256v1 0.62 0.62 0.63 T:morus1280128v2 0.63 0.63 0.64 T:aeadaes128ocbtaglen128v1 0.66 0.67 0.67 T:aes128otrpv3 0.67 0.67 0.68 T:aes128otrcv3 0.73 0.74 0.75 T:aes128gcmv1 0.74 0.75 0.76 T:aeadaes192ocbtaglen128v1 0.89 0.89 0.90 T:aeadaes256ocbtaglen128v1 0.90 0.90 0.91 T:aes256otrcv3 0.91 0.91 0.91 T:aes256otrpv3 0.91 0.92 0.92 aes256gcmv1 1.01 1.02 1.03 T:deoxysi128v141 1.03 1.04 1.04 T:morus640128v1 1.03 1.04 1.05 T:deoxysneq128128v1 1.04 1.04 1.05 T:morus640128v2 1.15 1.15 1.21 T:colm0v1 1.15 1.15 1.16 T:deoxysneq256128v1 1.15 1.16 1.17 T:deoxysi256v141 1.31 1.31 1.32 T:deoxysii128v141 1.50 1.50 1.51 T:deoxysii256v141 1.64 1.65 1.66 T:deoxyseq128128v1 1.65 1.66 1.68 T:norx6444v3 1.72 1.72 1.72 T:aes128otrsv3 1.76 1.78 1.78 T:deoxyseq256128v1 2.09 2.10 2.11 T:norx6441v3 2.09 2.11 2.13 T:norx6441v2 2.32 2.32 2.32 T:aes256otrsv3 2.39 2.40 2.41 T:seakeyakv2 2.43 2.45 2.47 T:oceankeyakv2 2.54 2.55 2.56 T:norx6441v1 2.70 2.71 2.73 T:aes128n12t8silcv2 2.70 2.71 2.73 T:aes128n12t8clocv3 2.70 2.71 2.74 T:aes128n12t8silcv3 2.70 2.72 2.72 T:aes128n8t8silcv2 2.71 2.73 2.73 T:aes128n12t8clocv2 2.71 2.73 2.73 T:aes128n8t8clocv2 2.89 2.92 2.94 T:lunarkeyakv2 3.21 3.22 3.23 T:norx6461v3 3.24 3.25 3.27 T:norx6461v2 3.54 3.55 3.57 T:norx6444v2 3.78 3.82 3.83 T:norx6461v1 3.87 3.89 3.91 T:norx3241v2 3.88 3.90 3.92 T:norx3241v3 3.94 3.95 3.96 T:lakekeyakv2 3.94 3.95 3.97 T:lakekeyakv1 4.24 4.26 4.27 T:norx6444v1 4.66 4.68 4.69 T:norx3241v1 5.88 5.88 5.88 T:aesjambuv1 5.89 5.91 5.92 T:norx3261v3 5.94 5.95 5.97 T:norx3261v2 6.33 6.39 6.44 T:ketjemajorv2 7.14 7.15 7.16 T:norx3261v1 7.19 7.20 7.22 T:acorn128v2 7.21 7.24 7.26 T:riverkeyakv2 7.37 7.40 7.43 ascon128av12 7.42 7.43 7.44 T:acorn128v3 7.46 7.47 7.49 T:ascon96v1 7.37 7.51 7.54 T:ascon128av11 8.88 8.95 8.99 T:ketjeminorv2 10.75 10.78 10.79 T:ascon128v11 10.75 10.79 10.81 T:ascon128v1 10.90 10.93 10.93 ascon128v12 13.01 13.04 13.07 T:aes128otrsv2 13.11 13.18 13.28 T:aes128otrpv1 13.20 13.21 13.25 T:aes128otrsv1 13.20 13.22 13.25 T:aes128otrpv2 14.37 14.38 14.41 T:twine80n6t4clocv3 15.29 15.31 15.31 T:twine80n6t4clocv2 17.08 17.09 17.12 T:aes128n12clocv1 17.08 17.10 17.12 T:aes256otrsv2 17.17 17.19 17.21 T:aes256otrsv1 17.27 17.31 17.34 T:aes128n8clocv1 17.27 17.32 17.48 T:aes256otrpv2 17.29 17.32 17.42 T:aes256otrpv1 27.26 27.29 27.31 T:proest256otrv1 28.58 28.61 28.64 T:ketjesrv1 28.74 28.76 28.78 T:aeadaes128ocbtaglen96v1 28.74 28.78 28.83 T:aeadaes128ocbtaglen64v1 29.61 29.64 29.69 T:ketjesrv2 34.16 34.18 34.23 T:aeadaes192ocbtaglen96v1 34.15 34.19 34.25 T:aeadaes192ocbtaglen64v1 39.62 39.63 39.68 T:aeadaes256ocbtaglen64v1 39.65 39.69 39.71 T:aeadaes256ocbtaglen96v1 48.59 48.61 48.64 T:colm127v1 51.09 51.12 51.16 T:proest128otrv1 53.66 53.71 53.75 T:ketjejrv1 71.02 71.05 71.08 T:present80n6t4silcv3 90.54 90.59 90.65 T:ketjejrv2 94.66 94.72 94.74 T:deoxysneq128128v13 104.23 104.31 105.51 T:aezv1 124.63 124.67 124.74 T:led80n6t4silcv3 125.90 126.16 127.35 T:deoxyseq128128v13 131.21 131.48 132.30 T:deoxysneq256128v13 167.07 167.13 167.25 T:deoxyseq256128v13 337.14 339.51 339.79 T:acorn128 3024.53 3024.88 3028.93 T:led80n6silcv1 3033.96 3034.33 3034.68 T:led80n6t4silcv2 3208.78 3209.18 3209.42 T:present80n6t4silcv2 3209.07 3209.39 3209.96 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.18? 0.19? 0.20? T:tiaoxinv1 0.19 0.19 0.20 T:tiaoxinv2 0.24 0.25 0.26 T:aezv5 0.22? 0.25? 0.26? T:aezv4 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 aegis128l 0.23? 0.25? 0.26? T:aezv3 0.40 0.41 0.41 aegis256 0.41 0.41 0.43 aes256gcmv1 0.41 0.42 0.43 T:aes128gcmv1 0.45 0.45 0.47 T:aegis256 0.45 0.46 0.47 T:aegis128 0.59 0.59 0.61 T:morus1280128v1 0.59 0.60 0.61 T:morus1280256v1 0.59 0.60 0.61 T:morus1280128v2 0.60 0.60 0.61 T:morus1280256v2 0.62 0.63 0.65 T:colm0v1 0.61 0.65 0.67 T:aes128otrpv3 0.62 0.66 0.67 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.69 T:aes128otrcv3 0.69? 0.75? 1.10? T:aeadaes192ocbtaglen128v1 0.83 0.87 0.89 T:deoxysneq128128v1 0.85 0.87 0.89 T:deoxysi128v141 0.87 0.88 0.88 T:deoxysii128v141 0.85 0.88 0.90 T:deoxyseq128128v1 0.88 0.88 0.90 T:aeadaes256ocbtaglen128v1 0.88 0.90 0.92 T:aes256otrpv3 0.89 0.92 0.94 T:aes256otrcv3 0.97 0.99 1.01 T:deoxysi256v141 0.97 0.99 1.01 T:deoxysneq256128v1 0.97 1.00 1.01 T:deoxyseq256128v1 0.99 1.00 1.01 T:deoxysii256v141 0.99 1.01 1.01 T:morus640128v1 1.00 1.01 1.02 T:morus640128v2 1.84 1.88 1.92 T:oceankeyakv2 1.84 1.89 1.92 T:lunarkeyakv2 2.11 2.14 2.18 T:norx6441v2 2.14 2.17 2.19 T:norx6441v3 2.14 2.17 2.20 T:norx6444v3 2.27 2.27 2.30 T:seakeyakv2 2.59 2.60 2.64 T:norx6441v1 2.68 2.69 2.69 T:aes128n12t8silcv3 2.68 2.69 2.69 T:aes128n12t8silcv2 2.71 2.72 2.72 T:aes128n12t8clocv3 2.71 2.72 2.73 T:aes128n12t8clocv2 2.72 2.72 2.72 T:aes128n8t8clocv2 2.75 2.75 2.75 T:aes128otrsv3 2.69 2.75 2.75 T:aes128n8t8silcv2 3.20 3.22 3.25 T:norx6444v2 3.32 3.34 3.37 T:norx6461v3 3.37 3.39 3.41 T:norx6461v2 3.59 3.62 3.67 T:lakekeyakv2 3.72 3.72 3.72 T:aes256otrsv3 3.68 3.73 3.78 T:lakekeyakv1 3.91 3.93 3.96 T:norx6461v1 3.93 3.96 3.98 T:norx3241v3 3.98 4.01 4.03 T:norx3241v2 4.20 4.23 4.25 T:norx6444v1 4.77 4.79 4.82 T:norx3241v1 5.55 5.60 5.72 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 6.07 6.09 6.10 T:norx3261v2 6.08 6.10 6.12 T:norx3261v3 6.81 6.86 6.89 T:riverkeyakv2 7.18 7.19 7.21 T:norx3261v1 7.16 7.20 7.23 T:acorn128v2 7.26 7.30 7.33 T:ascon96v1 7.28 7.37 7.41 T:ascon128av11 7.36 7.38 7.43 ascon128av12 7.45 7.54 7.62 T:acorn128v3 7.95 8.04 8.11 T:ketjeminorv2 10.83 10.86 10.91 T:ascon128v1 10.84 10.87 10.89 T:ascon128v11 10.89 10.93 10.95 ascon128v12 11.96 11.98 12.00 T:aes128otrsv2 11.98 12.00 12.02 T:aes128otrsv1 12.13 12.16 12.19 T:aes128n12clocv1 12.12 12.17 12.19 T:aes128n8clocv1 12.25 12.27 12.29 T:aes128otrpv1 12.25 12.28 12.31 T:aes128otrpv2 14.18 14.23 14.27 T:twine80n6t4clocv3 15.06 15.07 15.08 T:twine80n6t4clocv2 15.98 16.01 16.04 T:aes256otrsv2 16.00 16.02 16.06 T:aes256otrsv1 16.25 16.29 16.33 T:aes256otrpv1 16.46 16.56 16.63 T:aes256otrpv2 24.17 24.19 24.23 T:aeadaes128ocbtaglen64v1 24.19 24.21 24.22 T:aeadaes128ocbtaglen96v1 25.26 25.32 25.36 T:ketjesrv1 25.88 25.92 25.93 T:colm127v1 26.95 27.01 27.05 T:ketjesrv2 27.46 27.48 27.49 T:proest256otrv1 28.56 28.59 28.64 T:aeadaes192ocbtaglen96v1 28.58 28.59 28.61 T:aeadaes192ocbtaglen64v1 33.00 33.02 33.04 T:aeadaes256ocbtaglen64v1 33.01 33.06 33.11 T:aeadaes256ocbtaglen96v1 47.44 47.60 47.66 T:ketjejrv1 50.42 50.64 50.93 T:aezv1 51.40 51.41 51.46 T:proest128otrv1 70.59 70.64 70.68 T:present80n6t4silcv3 79.91 79.96 80.04 T:deoxysneq128128v13 83.38 83.47 84.44 T:deoxyseq128128v13 86.95 86.97 87.00 T:ketjejrv2 110.71 110.89 111.16 T:deoxyseq256128v13 111.42 111.62 113.12 T:deoxysneq256128v13 124.21 124.28 124.37 T:led80n6t4silcv3 306.28 313.81 314.52 T:acorn128 2016.36 2016.56 2016.76 T:led80n6silcv1 2022.42 2022.66 2022.83 T:led80n6t4silcv2 2138.73 2138.95 2139.21 T:present80n6t4silcv2 2139.91 2140.14 2140.37 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.18? 0.19? 0.21? T:tiaoxinv1 0.18? 0.19? 0.22? T:tiaoxinv2 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.26 T:aegis128l 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.27 aegis128l 0.39 0.40 0.42 T:aegis128 0.41 0.41 0.41 aegis256 0.41 0.41 0.41 T:aegis256 0.40 0.42 0.43 aes256gcmv1 0.40 0.42 0.43 T:aes128gcmv1 0.60 0.60 0.61 T:morus1280256v2 0.60 0.60 0.61 T:morus1280256v1 0.60 0.60 0.61 T:morus1280128v2 0.60 0.61 0.62 T:morus1280128v1 0.63 0.63 0.64 T:colm0v1 0.64 0.64 0.65 T:aes128otrpv3 0.64 0.65 0.66 T:aeadaes128ocbtaglen128v1 0.67 0.67 0.68 T:aes128otrcv3 0.39? 0.75? 0.77? T:aeadaes192ocbtaglen128v1 0.85 0.87 0.87 T:deoxysneq128128v1 0.84 0.87 0.88 T:deoxysi128v141 0.87 0.87 0.88 T:deoxyseq128128v1 0.86 0.87 0.89 T:deoxysii128v141 0.88 0.89 0.89 T:aeadaes256ocbtaglen128v1 0.89 0.90 0.90 T:aes256otrpv3 0.89 0.91 0.92 T:aes256otrcv3 0.96 1.00 1.01 T:deoxysneq256128v1 0.97 1.00 1.02 T:deoxysii256v141 0.99 1.01 1.02 T:morus640128v2 0.99 1.01 1.02 T:morus640128v1 0.98 1.01 1.03 T:deoxyseq256128v1 1.01 1.04 1.08 T:deoxysi256v141 1.80 1.88 1.95 T:lunarkeyakv2 1.80 1.89 1.92 T:oceankeyakv2 2.13 2.15 2.17 T:norx6441v3 2.15 2.16 2.19 T:norx6441v2 2.16 2.19 2.22 T:norx6444v3 2.25 2.29 2.30 T:seakeyakv2 2.59 2.61 2.65 T:norx6441v1 2.69 2.71 2.78 T:aes128n12t8silcv2 2.66 2.71 2.71 T:aes128n12t8silcv3 2.71 2.72 2.72 T:aes128n8t8clocv2 2.72 2.74 2.74 T:aes128n12t8clocv3 2.72 2.74 2.74 T:aes128n12t8clocv2 2.75 2.75 2.75 T:aes128otrsv3 2.71 2.75 2.78 T:aes128n8t8silcv2 3.29 3.30 3.33 T:norx6461v3 3.27 3.31 3.33 T:norx6444v2 3.32 3.37 3.40 T:norx6461v2 3.59 3.61 3.65 T:lakekeyakv2 3.70 3.72 3.74 T:lakekeyakv1 3.72 3.72 3.73 T:aes256otrsv3 3.86 3.90 3.94 T:norx6461v1 3.96 3.99 4.01 T:norx3241v3 3.98 4.01 4.04 T:norx3241v2 4.20 4.22 4.24 T:norx6444v1 4.77 4.82 4.85 T:norx3241v1 5.59 5.65 5.71 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 6.06 6.09 6.10 T:norx3261v2 6.05 6.09 6.12 T:norx3261v3 6.81 6.85 6.87 T:riverkeyakv2 7.22 7.22 7.25 T:norx3261v1 7.26 7.28 7.33 T:ascon96v1 7.31 7.33 7.37 ascon128av12 7.39 7.43 7.45 T:acorn128v2 7.16 7.44 7.49 T:ascon128av11 7.53 7.55 7.56 T:acorn128v3 7.99 8.05 8.15 T:ketjeminorv2 10.81 10.85 10.87 T:ascon128v11 10.85 10.87 10.89 T:ascon128v1 10.87 10.89 10.96 ascon128v12 12.01 12.03 12.06 T:aes128otrsv2 12.01 12.03 12.08 T:aes128otrsv1 12.15 12.17 12.20 T:aes128n8clocv1 12.15 12.18 12.21 T:aes128n12clocv1 12.29 12.35 12.38 T:aes128otrpv2 12.32 12.39 12.65 T:aes128otrpv1 14.17 14.24 14.27 T:twine80n6t4clocv3 15.06 15.08 15.12 T:twine80n6t4clocv2 16.03 16.07 16.11 T:aes256otrsv1 16.06 16.08 16.11 T:aes256otrsv2 16.31 16.36 16.40 T:aes256otrpv1 16.36 16.46 16.58 T:aes256otrpv2 24.18 24.20 24.22 T:aeadaes128ocbtaglen64v1 24.20 24.20 24.22 T:aeadaes128ocbtaglen96v1 25.25 25.31 25.35 T:ketjesrv1 25.87 25.91 25.94 T:colm127v1 26.91 26.97 27.01 T:ketjesrv2 27.47 27.50 27.51 T:proest256otrv1 28.57 28.59 28.62 T:aeadaes192ocbtaglen96v1 28.54 28.59 28.62 T:aeadaes192ocbtaglen64v1 33.01 33.02 33.04 T:aeadaes256ocbtaglen64v1 32.96 33.04 33.08 T:aeadaes256ocbtaglen96v1 47.39 47.60 47.65 T:ketjejrv1 50.47 50.78 50.94 T:aezv1 51.36 51.41 51.48 T:proest128otrv1 70.58 70.63 70.67 T:present80n6t4silcv3 79.91 80.06 80.16 T:deoxysneq128128v13 83.34 83.42 84.39 T:deoxyseq128128v13 86.92 86.98 87.01 T:ketjejrv2 110.71 110.83 111.32 T:deoxyseq256128v13 111.35 111.51 111.69 T:deoxysneq256128v13 124.23 124.34 124.38 T:led80n6t4silcv3 326.00 330.11 330.61 T:acorn128 2015.98 2016.70 2024.14 T:led80n6silcv1 2022.47 2022.61 2022.87 T:led80n6t4silcv2 2138.73 2139.00 2139.17 T:present80n6t4silcv2 2139.92 2140.20 2140.47 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.19 0.19 0.20 T:tiaoxinv1 0.19 0.19 0.19 T:tiaoxinv2 0.23 0.25 0.25 aegis128l 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aezv5 0.39 0.40 0.41 T:aegis128 0.40 0.41 0.41 aegis256 0.40 0.41 0.42 T:aegis256 0.41 0.42 0.42 aes256gcmv1 0.41 0.42 0.42 T:aes128gcmv1 0.60 0.60 0.61 T:morus1280256v2 0.60 0.61 0.62 T:morus1280256v1 0.60 0.61 0.62 T:morus1280128v1 0.60 0.61 0.61 T:morus1280128v2 0.63 0.63 0.63 T:colm0v1 0.64 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.64 0.64 0.65 T:aes128otrpv3 0.67 0.68 0.68 T:aes128otrcv3 0.74? 0.75? 1.11? T:aeadaes192ocbtaglen128v1 0.85 0.86 0.88 T:deoxysneq128128v1 0.86 0.87 0.89 T:deoxysii128v141 0.87 0.87 0.88 T:deoxyseq128128v1 0.86 0.88 0.91 T:deoxysi128v141 0.88 0.89 0.89 T:aeadaes256ocbtaglen128v1 0.89 0.90 0.90 T:aes256otrpv3 0.89 0.91 0.92 T:aes256otrcv3 0.99 1.00 1.02 T:deoxysneq256128v1 0.99 1.00 1.00 T:deoxysii256v141 0.99 1.00 1.01 T:morus640128v1 1.00 1.01 1.03 T:deoxyseq256128v1 1.00 1.01 1.03 T:morus640128v2 1.03 1.04 1.07 T:deoxysi256v141 1.83 1.87 1.90 T:oceankeyakv2 1.85 1.89 1.92 T:lunarkeyakv2 2.13 2.15 2.16 T:norx6441v3 2.15 2.17 2.19 T:norx6441v2 2.15 2.18 2.20 T:norx6444v3 2.27 2.29 2.31 T:seakeyakv2 2.61 2.62 2.63 T:norx6441v1 2.69 2.72 2.72 T:aes128n8t8clocv2 2.69 2.72 2.74 T:aes128n12t8clocv3 2.72 2.74 2.74 T:aes128n12t8clocv2 2.71 2.75 2.75 T:aes128n8t8silcv2 2.75 2.75 2.75 T:aes128otrsv3 2.71 2.75 2.75 T:aes128n12t8silcv3 2.75 2.75 2.75 T:aes128n12t8silcv2 3.27 3.28 3.32 T:norx6461v3 3.28 3.30 3.33 T:norx6444v2 3.34 3.36 3.38 T:norx6461v2 3.59 3.61 3.62 T:lakekeyakv2 3.72 3.72 3.73 T:aes256otrsv3 3.71 3.73 3.75 T:lakekeyakv1 3.83 3.88 3.92 T:norx6461v1 3.97 3.98 4.02 T:norx3241v2 3.97 4.00 4.02 T:norx3241v3 4.20 4.22 4.25 T:norx6444v1 4.80 4.82 4.85 T:norx3241v1 5.56 5.68 5.74 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 6.05 6.07 6.10 T:norx3261v3 6.06 6.08 6.09 T:norx3261v2 6.81 6.85 6.88 T:riverkeyakv2 7.19 7.22 7.24 T:norx3261v1 7.23 7.28 7.31 T:ascon96v1 7.33 7.36 7.42 ascon128av12 7.39 7.42 7.44 T:acorn128v2 7.44 7.46 7.48 T:ascon128av11 7.53 7.54 7.55 T:acorn128v3 8.03 8.06 8.10 T:ketjeminorv2 10.83 10.84 10.90 T:ascon128v1 10.83 10.86 10.88 T:ascon128v11 10.84 10.87 10.91 ascon128v12 12.00 12.04 12.08 T:aes128otrsv2 12.01 12.05 12.09 T:aes128otrsv1 12.14 12.16 12.18 T:aes128n12clocv1 12.13 12.17 12.20 T:aes128n8clocv1 12.32 12.33 12.37 T:aes128otrpv2 12.30 12.37 12.67 T:aes128otrpv1 14.21 14.24 14.28 T:twine80n6t4clocv3 15.05 15.08 15.12 T:twine80n6t4clocv2 16.02 16.04 16.08 T:aes256otrsv2 16.00 16.08 16.12 T:aes256otrsv1 16.32 16.36 16.38 T:aes256otrpv1 16.38 16.46 16.61 T:aes256otrpv2 24.19 24.21 24.23 T:aeadaes128ocbtaglen96v1 24.18 24.21 24.22 T:aeadaes128ocbtaglen64v1 25.27 25.30 25.34 T:ketjesrv1 25.87 25.90 25.92 T:colm127v1 26.96 27.01 27.11 T:ketjesrv2 27.45 27.48 27.50 T:proest256otrv1 28.57 28.58 28.59 T:aeadaes192ocbtaglen96v1 28.58 28.59 28.61 T:aeadaes192ocbtaglen64v1 33.00 33.02 33.04 T:aeadaes256ocbtaglen64v1 33.00 33.03 33.06 T:aeadaes256ocbtaglen96v1 47.57 47.62 47.65 T:ketjejrv1 50.45 50.82 50.98 T:aezv1 51.38 51.41 51.45 T:proest128otrv1 70.59 70.60 70.65 T:present80n6t4silcv3 79.92 79.98 80.11 T:deoxysneq128128v13 83.40 83.49 84.31 T:deoxyseq128128v13 86.93 86.96 86.99 T:ketjejrv2 110.80 111.00 111.36 T:deoxyseq256128v13 111.32 111.52 111.78 T:deoxysneq256128v13 124.24 124.32 124.39 T:led80n6t4silcv3 325.99 330.14 330.88 T:acorn128 2015.94 2016.70 2024.32 T:led80n6silcv1 2022.45 2022.58 2022.89 T:led80n6t4silcv2 2138.77 2139.01 2139.26 T:present80n6t4silcv2 2139.90 2140.16 2140.47 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.29 0.29 0.30 T:tiaoxinv1 0.29 0.29 0.31 T:tiaoxinv2 0.31 0.32 0.33 T:aegis128l 0.31 0.32 0.32 aegis128l 0.47 0.48 0.48 aegis256 0.49 0.50 0.50 T:aegis128 0.50 0.50 0.51 T:aegis256 0.51 0.51 0.52 T:aezv5 0.51 0.52 0.52 T:aezv4 0.52 0.52 0.53 T:aezv3 0.75 0.75 0.76 T:aeadaes128ocbtaglen128v1 0.76 0.76 0.77 T:aes128otrpv3 0.77 0.78 0.79 T:morus1280256v1 0.77 0.78 0.79 T:morus1280128v1 0.78 0.79 0.80 T:morus1280256v2 0.79 0.79 0.79 T:morus1280128v2 0.84 0.85 0.85 T:aes128otrcv3 0.89 0.89 0.98 T:aeadaes192ocbtaglen128v1 0.96 0.97 0.97 T:aes128gcmv1 1.03 1.03 1.05 T:deoxysneq128128v1 1.03 1.03 1.05 T:aeadaes256ocbtaglen128v1 1.05 1.05 1.07 T:deoxysi128v141 1.05 1.05 1.05 T:aes256otrpv3 1.11 1.11 1.12 aes256gcmv1 1.14 1.15 1.15 T:aes256otrcv3 1.16 1.16 1.18 T:deoxysneq256128v1 1.18 1.18 1.19 T:morus640128v1 1.19 1.20 1.21 T:morus640128v2 1.23 1.24 1.25 T:deoxysi256v141 1.29 1.30 1.33 T:colm0v1 1.51 1.52 1.52 T:deoxysii128v141 1.52 1.53 1.55 T:deoxyseq128128v1 1.71 1.71 1.72 T:deoxyseq256128v1 1.74 1.75 1.77 T:deoxysii256v141 1.81 1.81 1.81 T:aes128otrsv3 2.27 2.28 2.29 T:norx6444v3 2.45 2.45 2.46 T:aes256otrsv3 2.49 2.50 2.51 T:norx6441v2 2.52 2.54 2.55 T:norx6441v3 2.82 2.82 2.82 T:aes128n12t8clocv3 2.82 2.82 2.82 T:aes128n12t8clocv2 2.82 2.82 2.83 T:aes128n8t8clocv2 2.85 2.85 2.85 T:aes128n12t8silcv3 2.85 2.85 2.85 T:aes128n12t8silcv2 2.85 2.87 2.88 T:aes128n8t8silcv2 2.90 2.91 2.92 T:norx6441v1 3.39 3.40 3.41 T:seakeyakv2 3.81 3.82 3.82 T:norx6461v3 3.84 3.86 3.87 T:norx6461v2 4.29 4.31 4.32 T:norx3241v2 4.30 4.31 4.32 T:norx3241v3 4.32 4.33 4.34 T:lakekeyakv2 4.39 4.40 4.43 T:norx6461v1 4.57 4.58 4.59 T:lakekeyakv1 4.58 4.59 4.60 T:oceankeyakv2 4.97 5.00 5.02 T:norx6444v2 5.05 5.08 5.10 T:norx3241v1 5.94 5.94 5.94 T:aesjambuv1 6.02 6.03 6.03 T:norx6444v1 6.50 6.50 6.51 T:norx3261v3 6.56 6.57 6.57 T:norx3261v2 7.50 7.52 7.54 T:riverkeyakv2 7.55 7.56 7.58 T:ascon96v1 7.57 7.57 7.60 T:ascon128av11 7.59 7.61 7.65 T:acorn128v3 7.64 7.64 7.65 T:norx3261v1 7.67 7.69 7.71 ascon128av12 7.85 7.86 7.88 T:lunarkeyakv2 8.06 8.07 8.08 T:acorn128v2 8.47 8.52 8.55 T:ketjemajorv2 10.03 10.07 10.09 T:ketjeminorv2 11.05 11.06 11.09 T:ascon128v1 11.07 11.07 11.08 T:ascon128v11 11.11 11.13 11.16 ascon128v12 13.15 13.16 13.18 T:aes128otrsv1 13.16 13.17 13.18 T:aes128otrsv2 13.32 13.34 13.36 T:aes128otrpv2 13.38 13.39 13.41 T:aes128otrpv1 14.70 14.71 14.72 T:twine80n6t4clocv3 15.64 15.64 15.66 T:twine80n6t4clocv2 17.25 17.27 17.29 T:aes256otrsv1 17.26 17.29 17.31 T:aes256otrsv2 17.41 17.43 17.45 T:aes256otrpv1 17.60 17.63 17.66 T:aes256otrpv2 17.75 17.77 17.78 T:aes128n12clocv1 17.79 17.81 17.82 T:aes128n8clocv1 25.07 25.08 25.10 T:aeadaes128ocbtaglen64v1 25.09 25.10 25.12 T:aeadaes128ocbtaglen96v1 29.00 29.03 29.04 T:ketjesrv1 29.52 29.53 29.55 T:aeadaes192ocbtaglen96v1 29.52 29.53 29.57 T:aeadaes192ocbtaglen64v1 29.67 29.68 29.70 T:proest256otrv1 30.44 30.46 30.54 T:ketjesrv2 34.09 34.10 34.11 T:aeadaes256ocbtaglen64v1 34.09 34.11 34.12 T:aeadaes256ocbtaglen96v1 40.91 40.93 40.95 T:colm127v1 53.06 53.09 53.12 T:proest128otrv1 54.00 54.04 54.17 T:ketjejrv1 71.90 71.93 71.94 T:present80n6t4silcv3 80.94 81.00 81.03 T:deoxysneq128128v13 91.18 91.66 91.89 T:ketjejrv2 102.62 102.88 103.33 T:aezv1 112.41 112.87 113.75 T:deoxysneq256128v13 125.75 125.79 125.83 T:led80n6t4silcv3 127.90 127.99 128.03 T:deoxyseq128128v13 169.14 169.21 169.29 T:deoxyseq256128v13 355.62 359.98 360.02 T:acorn128 3040.57 3040.68 3040.83 T:led80n6silcv1 3049.69 3049.77 3050.14 T:led80n6t4silcv2 3226.11 3226.17 3226.26 T:present80n6silcv1 3226.28 3226.42 3226.52 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.32 0.32 0.32 aegis128l 0.31 0.32 0.32 T:aegis128l 0.36 0.36 0.37 T:tiaoxinv2 0.36 0.36 0.37 T:tiaoxinv1 0.47 0.48 0.48 T:aegis256 0.49 0.50 0.50 T:aegis128 0.51 0.51 0.52 T:aezv5 0.51 0.52 0.52 T:aezv4 0.52 0.52 0.53 T:aezv3 0.53 0.53 0.53 aegis256 0.75 0.75 0.76 T:aeadaes128ocbtaglen128v1 0.78 0.79 0.79 T:aes128otrpv3 0.78 0.79 0.80 T:morus1280256v1 0.79 0.79 0.80 T:morus1280128v1 0.79 0.80 0.81 T:morus1280256v2 0.80 0.80 0.81 T:morus1280128v2 0.87 0.87 0.88 T:aes128otrcv3 0.89 0.89 0.90 T:aes128gcmv1 0.89? 0.90? 1.12? T:aeadaes192ocbtaglen128v1 1.05 1.05 1.07 T:aeadaes256ocbtaglen128v1 1.07 1.07 1.08 T:aes256otrpv3 1.10 1.11 1.11 aes256gcmv1 1.17 1.18 1.19 T:morus640128v1 1.18 1.18 1.18 T:aes256otrcv3 1.21 1.21 1.22 T:morus640128v2 1.26 1.26 1.27 T:deoxysi128v141 1.26 1.26 1.27 T:deoxysneq128128v1 1.33 1.35 1.39 T:colm0v1 1.36 1.36 1.37 T:deoxysneq256128v1 1.42 1.43 1.45 T:deoxysi256v141 1.56 1.56 1.57 T:deoxysii128v141 1.80 1.80 1.82 T:deoxysii256v141 1.84 1.84 1.85 T:aes128otrsv3 1.91 1.92 1.93 T:deoxyseq128128v1 2.04 2.04 2.06 T:deoxyseq256128v1 2.28 2.29 2.30 T:norx6444v3 2.45 2.47 2.47 T:norx6441v3 2.47 2.48 2.49 T:norx6441v2 2.49 2.49 2.50 T:aes256otrsv3 2.81 2.81 2.82 T:aes128n12t8clocv3 2.81 2.81 2.82 T:aes128n12t8clocv2 2.81 2.81 2.82 T:aes128n8t8clocv2 2.83 2.84 2.86 T:aes128n8t8silcv2 2.83 2.84 2.85 T:aes128n12t8silcv3 2.83 2.84 2.85 T:aes128n12t8silcv2 2.87 2.89 2.90 T:norx6441v1 3.44 3.46 3.47 T:seakeyakv2 3.74 3.75 3.76 T:norx6461v3 3.77 3.78 3.80 T:norx6461v2 4.22 4.22 4.24 T:norx3241v2 4.23 4.24 4.25 T:norx3241v3 4.28 4.30 4.34 T:norx6461v1 4.32 4.33 4.35 T:lakekeyakv2 4.60 4.61 4.62 T:lakekeyakv1 4.60 4.63 4.70 T:oceankeyakv2 4.94 4.97 4.97 T:norx3241v1 5.03 5.04 5.09 T:norx6444v2 5.99 6.00 6.03 T:norx6444v1 6.03 6.03 6.05 T:aesjambuv1 6.41 6.43 6.45 T:norx3261v2 6.42 6.44 6.45 T:norx3261v3 7.56 7.57 7.59 T:norx3261v1 7.56 7.58 7.62 T:ascon128av11 7.57 7.59 7.62 ascon128av12 7.60 7.62 7.64 T:riverkeyakv2 7.65 7.66 7.68 T:ascon96v1 7.88 7.90 7.93 T:lunarkeyakv2 8.24 8.26 8.27 T:acorn128v2 8.29 8.31 8.36 T:ketjemajorv2 8.46 8.47 8.51 T:acorn128v3 10.12 10.14 10.19 T:ketjeminorv2 10.95 10.97 10.98 T:ascon128v1 10.95 10.97 11.02 T:ascon128v11 11.08 11.10 11.12 ascon128v12 13.43 13.44 13.45 T:aes128otrsv2 13.54 13.58 13.70 T:aes128otrpv1 13.57 13.60 13.61 T:aes128otrsv1 13.61 13.62 13.65 T:aes128otrpv2 14.70 14.71 14.72 T:twine80n6t4clocv3 15.62 15.62 15.64 T:twine80n6t4clocv2 17.29 17.30 17.33 T:aes128n12clocv1 17.48 17.51 17.54 T:aes128n8clocv1 17.61 17.63 17.67 T:aes256otrsv2 17.67 17.72 17.75 T:aes256otrsv1 17.78 17.88 18.00 T:aes256otrpv2 17.85 17.89 17.93 T:aes256otrpv1 29.30 29.32 29.36 T:ketjesrv1 29.54 29.56 29.59 T:aeadaes128ocbtaglen64v1 29.54 29.57 29.58 T:aeadaes128ocbtaglen96v1 29.70 29.72 29.74 T:proest256otrv1 30.59 30.62 30.65 T:ketjesrv2 35.04 35.07 35.11 T:aeadaes192ocbtaglen96v1 35.04 35.10 35.15 T:aeadaes192ocbtaglen64v1 40.67 40.70 40.74 T:aeadaes256ocbtaglen64v1 40.69 40.72 40.74 T:aeadaes256ocbtaglen96v1 49.89 49.92 49.95 T:colm127v1 53.33 53.35 53.39 T:proest128otrv1 54.45 54.50 54.53 T:ketjejrv1 71.83 71.86 71.91 T:present80n6t4silcv3 91.98 92.01 92.09 T:ketjejrv2 94.96 95.14 95.19 T:deoxysneq128128v13 103.29 103.49 103.86 T:aezv1 125.74 125.77 125.82 T:led80n6t4silcv3 127.35 127.39 127.43 T:deoxyseq128128v13 132.12 132.30 132.86 T:deoxysneq256128v13 169.06 169.10 169.14 T:deoxyseq256128v13 377.68 379.79 379.93 T:acorn128 3040.85 3040.96 3044.18 T:led80n6silcv1 3049.54 3049.66 3049.73 T:led80n6t4silcv2 3225.93 3226.05 3226.28 T:present80n6t4silcv2 3225.98 3226.24 3226.40 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.32 0.32 0.32 T:aezv5 0.32 0.32 0.33 T:aezv4 0.31 0.32 0.32 T:aegis128l 0.32 0.32 0.34 T:aezv3 0.33 0.33 0.33 aegis128l 0.36 0.36 0.37 T:tiaoxinv1 0.36 0.36 0.37 T:tiaoxinv2 0.48 0.48 0.48 T:aegis256 0.49 0.49 0.49 T:aegis128 0.52 0.53 0.53 aegis256 0.75 0.75 0.77 T:aeadaes128ocbtaglen128v1 0.78 0.78 0.78 T:aes128otrpv3 0.79 0.79 0.79 T:morus1280128v1 0.78 0.79 0.79 T:morus1280256v1 0.79 0.80 0.80 T:morus1280256v2 0.80 0.80 0.81 T:morus1280128v2 0.87 0.87 0.88 T:aes128otrcv3 0.88 0.89 0.89 T:aes128gcmv1 0.89 0.90 0.90 T:aeadaes192ocbtaglen128v1 1.05 1.05 1.06 T:aeadaes256ocbtaglen128v1 1.07 1.07 1.07 T:aes256otrpv3 1.10 1.10 1.11 aes256gcmv1 1.17 1.18 1.18 T:morus640128v1 1.18 1.18 1.18 T:aes256otrcv3 1.20 1.21 1.21 T:morus640128v2 1.25 1.26 1.26 T:deoxysi128v141 1.26 1.26 1.26 T:deoxysneq128128v1 1.33 1.34 1.38 T:colm0v1 1.36 1.36 1.36 T:deoxysneq256128v1 1.43 1.43 1.45 T:deoxysi256v141 1.56 1.56 1.57 T:deoxysii128v141 1.80 1.80 1.81 T:deoxysii256v141 1.84 1.84 1.84 T:aes128otrsv3 1.91 1.91 1.92 T:deoxyseq128128v1 2.04 2.04 2.05 T:deoxyseq256128v1 2.27 2.28 2.29 T:norx6444v3 2.44 2.45 2.47 T:norx6441v3 2.47 2.48 2.49 T:norx6441v2 2.49 2.49 2.49 T:aes256otrsv3 2.81 2.81 2.82 T:aes128n8t8clocv2 2.82 2.82 2.82 T:aes128n12t8clocv2 2.82 2.82 2.83 T:aes128n12t8clocv3 2.82 2.84 2.85 T:aes128n12t8silcv2 2.83 2.84 2.86 T:aes128n12t8silcv3 2.84 2.84 2.86 T:aes128n8t8silcv2 2.87 2.87 2.89 T:norx6441v1 3.45 3.46 3.47 T:seakeyakv2 3.75 3.76 3.78 T:norx6461v3 3.78 3.80 3.80 T:norx6461v2 4.21 4.22 4.24 T:norx3241v2 4.23 4.26 4.29 T:norx3241v3 4.29 4.31 4.34 T:norx6461v1 4.34 4.35 4.36 T:lakekeyakv2 4.62 4.62 4.63 T:lakekeyakv1 4.63 4.65 4.68 T:oceankeyakv2 4.94 4.96 4.97 T:norx3241v1 5.05 5.07 5.08 T:norx6444v2 6.00 6.02 6.03 T:norx6444v1 6.03 6.03 6.04 T:aesjambuv1 6.40 6.41 6.43 T:norx3261v3 6.42 6.44 6.44 T:norx3261v2 7.56 7.57 7.57 T:norx3261v1 7.55 7.57 7.61 T:ascon128av11 7.57 7.58 7.62 ascon128av12 7.62 7.64 7.66 T:riverkeyakv2 7.63 7.65 7.67 T:ascon96v1 7.90 7.91 7.94 T:lunarkeyakv2 8.24 8.25 8.27 T:acorn128v2 8.32 8.37 8.41 T:ketjemajorv2 8.46 8.47 8.48 T:acorn128v3 10.12 10.16 10.20 T:ketjeminorv2 10.94 10.96 10.97 T:ascon128v1 10.95 10.96 10.97 T:ascon128v11 11.09 11.10 11.11 ascon128v12 13.43 13.45 13.46 T:aes128otrsv2 13.55 13.58 13.69 T:aes128otrpv1 13.60 13.61 13.63 T:aes128otrsv1 13.64 13.65 13.67 T:aes128otrpv2 14.71 14.72 14.73 T:twine80n6t4clocv3 15.61 15.62 15.63 T:twine80n6t4clocv2 17.28 17.30 17.32 T:aes128n12clocv1 17.49 17.49 17.51 T:aes128n8clocv1 17.63 17.65 17.67 T:aes256otrsv2 17.72 17.75 17.75 T:aes256otrsv1 17.83 17.87 17.93 T:aes256otrpv2 17.86 17.89 18.00 T:aes256otrpv1 29.33 29.35 29.37 T:ketjesrv1 29.54 29.55 29.58 T:aeadaes128ocbtaglen64v1 29.54 29.56 29.58 T:aeadaes128ocbtaglen96v1 29.69 29.71 29.73 T:proest256otrv1 30.62 30.65 30.68 T:ketjesrv2 35.04 35.08 35.12 T:aeadaes192ocbtaglen64v1 35.06 35.10 35.12 T:aeadaes192ocbtaglen96v1 40.66 40.68 40.73 T:aeadaes256ocbtaglen64v1 40.69 40.72 40.74 T:aeadaes256ocbtaglen96v1 49.87 49.90 49.96 T:colm127v1 53.33 53.36 53.39 T:proest128otrv1 54.53 54.56 54.71 T:ketjejrv1 71.84 71.90 71.94 T:present80n6t4silcv3 92.00 92.03 92.05 T:ketjejrv2 95.20 95.24 95.28 T:deoxysneq128128v13 103.06 103.22 103.73 T:aezv1 125.70 125.75 125.82 T:led80n6t4silcv3 127.36 127.39 127.45 T:deoxyseq128128v13 131.85 132.42 132.85 T:deoxysneq256128v13 169.06 169.13 169.25 T:deoxyseq256128v13 377.87 379.78 379.96 T:acorn128 3040.78 3040.91 3044.30 T:led80n6silcv1 3049.55 3049.65 3049.73 T:led80n6t4silcv2 3226.08 3226.13 3226.47 T:present80n6silcv1 3225.91 3226.15 3226.29 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.76 1.79 1.85 T:aegis128 1.77? 1.79? 2.17? T:aegis128l 1.80 1.80 1.95 aegis128l 2.05 2.14 2.18 T:aegis256 2.24 2.31 2.45 T:aezv5 2.30 2.33 2.35 aegis256 2.32 2.34 2.50 T:aezv3 2.37 2.38 2.46 T:tiaoxinv1 2.36 2.39 2.55 T:tiaoxinv2 2.35? 2.41? 2.64? T:aezv4 3.25 3.28 3.54 T:aeadaes128ocbtaglen128v1 3.51 3.53 3.55 T:aes128otrpv3 3.99 4.01 4.16 T:deoxysneq128128v1 4.18 4.19 4.21 T:aes128otrsv3 4.26 4.27 4.41 T:morus640128v1 4.38 4.41 4.57 T:morus1280128v1 4.38 4.44 4.59 T:morus1280256v1 4.41? 4.46? 4.92? T:colm0v1 4.48 4.48 4.72 T:aeadaes256ocbtaglen128v1 4.48 4.58 4.71 T:morus640128v2 4.64 4.66 4.69 T:aes256otrpv3 4.66 4.68 4.99 T:morus1280256v2 4.30? 4.69? 9.57? T:aeadaes192ocbtaglen128v1 4.67 4.71 4.99 T:morus1280128v2 4.73 4.78 4.86 T:deoxysi128v141 4.76 4.79 5.12 T:deoxysneq256128v1 4.80 4.82 4.84 T:aes128n8t8clocv2 4.80 4.84 5.01 T:aes128n12t8clocv2 4.80 4.84 4.88 T:aes128otrcv3 4.86 5.02 5.06 T:aes128n12t8clocv3 5.52 5.54 5.62 T:aes256otrsv3 5.68 5.69 5.70 T:aes128n12t8silcv2 5.68 5.69 5.71 T:aes128n12t8silcv3 5.68 5.70 5.73 T:aes128n8t8silcv2 5.76 5.80 6.01 T:deoxysi256v141 5.91 5.95 6.00 T:aes128gcmv1 6.18 6.26 6.35 T:aes256otrcv3 6.55 6.60 6.67 T:deoxyseq128128v1 7.79 7.82 7.88 T:deoxyseq256128v1 7.95 7.99 8.22 aes256gcmv1 8.38 8.43 8.94 T:deoxysii128v141 8.37 8.50 8.60 T:norx6441v3 8.45 8.55 8.65 T:norx6441v1 8.50 8.67 8.73 T:norx6441v2 9.33 9.34 9.38 T:aesjambuv1 9.89 9.92 10.19 T:deoxysii256v141 10.62 10.73 10.83 T:norx3241v1 10.66 10.73 10.91 T:norx3241v2 10.80 10.98 11.11 T:norx3241v3 11.46 11.58 11.75 T:ascon128av11 11.59 11.66 11.74 T:ascon96v1 12.14 12.30 12.70 ascon128av12 12.45 12.51 12.65 T:norx6461v3 12.36 12.55 12.58 T:norx6461v1 12.50 12.62 12.80 T:norx6461v2 14.72 14.96 15.54 T:norx6444v3 14.96 15.16 15.41 T:ascon128v11 14.96 15.26 15.66 ascon128v12 14.96 15.27 15.38 T:ascon128v1 15.23 15.46 15.81 T:lakekeyakv1 15.98 16.11 16.27 T:norx3261v2 16.09 16.16 16.23 T:norx3261v3 16.17 16.22 16.43 T:norx3261v1 17.78 17.98 18.10 T:riverkeyakv2 18.84 19.08 19.35 T:lakekeyakv2 21.68 21.77 21.92 T:aes128n12clocv1 21.81 21.91 22.21 T:aes128n8clocv1 21.86 21.92 22.02 T:aes128otrsv2 21.87 21.96 22.37 T:twine80n6t4clocv3 21.90 22.09 22.27 T:aes128otrsv1 22.40 22.55 22.76 T:aes128otrpv1 22.56 22.61 22.95 T:aes128otrpv2 22.70 22.73 22.80 T:twine80n6t4clocv2 28.33 28.47 28.54 T:aes256otrsv2 28.41 28.60 28.78 T:aes256otrsv1 28.70 28.88 29.08 T:aes256otrpv1 29.35 29.52 29.69 T:aes256otrpv2 31.30 31.48 31.65 T:seakeyakv2 31.54 31.73 32.84 T:acorn128v3 31.68 31.91 32.26 T:acorn128v2 36.18 36.48 36.68 T:norx6444v2 36.80 37.14 37.27 T:ketjeminorv2 39.90 39.95 40.24 T:aeadaes128ocbtaglen64v1 39.99 40.05 40.07 T:aeadaes128ocbtaglen96v1 42.39 42.52 42.74 T:norx6444v1 45.81 46.07 46.17 T:ketjesrv1 46.20 46.24 46.33 T:aeadaes192ocbtaglen64v1 46.22 46.28 46.54 T:aeadaes192ocbtaglen96v1 51.02 51.32 52.20 T:oceankeyakv2 52.92 53.34 53.65 T:ketjesrv2 53.62 53.72 54.05 T:aeadaes256ocbtaglen96v1 53.73 53.91 54.69 T:aeadaes256ocbtaglen64v1 53.70 54.02 54.43 T:ketjemajorv2 59.87 59.99 60.34 T:colm127v1 71.87 72.19 72.75 T:ketjejrv1 84.98 85.17 85.30 T:proest256otrv1 89.70 89.95 90.14 T:present80n6t4silcv3 92.09 92.28 92.95 T:deoxysneq128128v13 102.95 103.16 103.26 T:proest128otrv1 119.10 119.59 120.88 T:aezv1 122.22 122.53 123.20 T:ketjejrv2 127.70 128.40 128.91 T:deoxysneq256128v13 128.11 128.48 129.43 T:lunarkeyakv2 149.55 149.80 149.90 T:led80n6t4silcv3 158.90 159.08 159.36 T:deoxyseq128128v13 211.05 211.23 211.60 T:deoxyseq256128v13 1270.31 1278.12 1280.47 T:acorn128 3405.66 3406.84 3408.03 T:led80n6silcv1 3415.01 3415.47 3416.35 T:led80n6t4silcv2 3613.97 3614.38 3615.03 T:present80n6t4silcv2 3616.57 3617.07 3617.66 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.77? 1.79? 2.01? T:aegis128l 1.86 1.88 1.91 T:aegis128 1.95 1.95 1.98 aegis128l 2.09 2.11 2.27 T:aegis256 2.30? 2.34? 2.67? T:aezv5 2.35? 2.35? 2.83? T:tiaoxinv1 2.35 2.38 2.55 T:tiaoxinv2 2.34? 2.38? 2.66? T:aezv4 2.35 2.38 2.50 T:aezv3 2.40 2.41 2.42 aegis256 3.60 3.63 3.66 T:aes128otrpv3 3.59 3.70 3.98 T:aeadaes128ocbtaglen128v1 4.20 4.26 4.48 T:morus640128v1 4.54 4.55 4.57 T:aes128otrsv3 4.54 4.59 4.74 T:morus1280128v1 4.60 4.63 4.70 T:morus1280256v1 4.73? 4.76? 7.57? T:aeadaes192ocbtaglen128v1 4.77 4.79 5.00 T:aeadaes256ocbtaglen128v1 4.80 4.82 4.86 T:aes256otrpv3 4.86 4.87 4.93 T:aes128n8t8clocv2 4.89 4.92 5.14 T:morus1280256v2 4.82 4.94 5.27 T:morus1280128v2 4.88 4.95 5.05 T:morus640128v2 4.88 5.01 5.09 T:aes128n12t8clocv2 5.01 5.03 5.06 T:aes128otrcv3 4.89 5.05 5.09 T:aes128n12t8clocv3 5.20 5.23 5.58 T:colm0v1 5.76 5.77 5.79 T:aes128n8t8silcv2 5.74 5.77 5.80 T:aes128n12t8silcv3 5.77 5.77 5.78 T:aes128n12t8silcv2 5.91 5.92 6.08 T:deoxysneq128128v1 5.91 5.93 5.95 T:aes256otrsv3 5.98 6.01 6.08 T:deoxysneq256128v1 5.99 6.04 6.15 T:aes128gcmv1 6.54 6.62 6.70 T:aes256otrcv3 7.02 7.12 7.28 T:deoxysi128v141 7.55 7.64 7.68 T:deoxysi256v141 8.15 8.19 8.24 aes256gcmv1 8.58 8.64 8.73 T:norx6441v3 8.73 8.79 8.84 T:norx6441v1 8.81 8.95 9.34 T:norx6441v2 9.16 9.20 9.31 T:deoxyseq128128v1 9.33 9.38 9.42 T:deoxysii128v141 9.34 9.38 9.45 T:deoxyseq256128v1 9.55 9.57 9.59 T:aesjambuv1 10.81 10.89 10.94 T:norx3241v1 10.87 10.93 10.98 T:norx3241v3 10.89 10.96 11.02 T:norx3241v2 11.38 11.44 11.68 T:deoxysii256v141 11.55 11.70 11.91 T:ascon96v1 11.76 11.84 12.02 T:ascon128av11 12.01 12.30 12.83 ascon128av12 12.61 12.76 12.97 T:norx6461v2 12.70 12.80 12.93 T:norx6461v3 12.71 12.88 12.93 T:norx6461v1 14.75 14.84 15.10 T:norx6444v3 14.95 15.12 15.35 T:ascon128v1 15.05 15.20 15.58 T:ascon128v11 15.09 15.33 15.59 ascon128v12 15.31 15.66 15.91 T:lakekeyakv1 16.05 16.12 16.33 T:norx3261v2 16.26 16.28 16.34 T:norx3261v3 16.34 16.37 16.53 T:norx3261v1 17.79 17.86 18.10 T:riverkeyakv2 18.77 18.81 18.96 T:lakekeyakv2 21.47 21.58 21.68 T:aes128n12clocv1 21.56 21.63 21.70 T:aes128n8clocv1 21.87 21.90 22.34 T:twine80n6t4clocv3 22.43 22.52 22.72 T:aes128otrsv2 22.51 22.58 22.86 T:aes128otrsv1 22.77 22.80 23.14 T:twine80n6t4clocv2 22.88 22.97 23.07 T:aes128otrpv1 23.22 23.34 23.73 T:aes128otrpv2 29.08 29.17 29.48 T:aes256otrsv1 29.05 29.30 29.41 T:aes256otrsv2 29.48 29.72 30.25 T:aes256otrpv1 30.05 30.32 30.45 T:aes256otrpv2 31.41 31.50 32.09 T:seakeyakv2 32.11 32.18 32.24 T:acorn128v3 32.15 32.26 32.38 T:acorn128v2 36.05 36.28 36.58 T:norx6444v2 36.34 36.66 36.98 T:ketjeminorv2 42.77 43.05 43.20 T:norx6444v1 46.19 46.55 46.73 T:ketjesrv1 47.87 47.99 48.20 T:aeadaes128ocbtaglen64v1 48.00 48.05 48.27 T:aeadaes128ocbtaglen96v1 51.27 51.63 52.56 T:oceankeyakv2 52.19 52.65 53.05 T:ketjemajorv2 53.14 53.57 53.87 T:ketjesrv2 55.53 55.64 55.77 T:aeadaes192ocbtaglen64v1 55.49 55.81 56.06 T:aeadaes192ocbtaglen96v1 64.84 64.98 65.28 T:aeadaes256ocbtaglen64v1 64.79 65.05 65.21 T:aeadaes256ocbtaglen96v1 69.02 69.36 69.78 T:colm127v1 72.20 72.41 72.71 T:ketjejrv1 85.78 85.91 86.38 T:proest256otrv1 89.80 89.94 90.25 T:present80n6t4silcv3 104.12 105.66 106.29 T:proest128otrv1 105.74 106.09 106.44 T:deoxysneq128128v13 123.30 123.73 124.41 T:aezv1 123.34 123.76 124.27 T:ketjejrv2 128.04 128.61 129.14 T:lunarkeyakv2 146.99 147.81 148.31 T:deoxysneq256128v13 150.03 150.21 150.54 T:led80n6t4silcv3 159.35 159.62 160.36 T:deoxyseq128128v13 211.98 212.13 212.84 T:deoxyseq256128v13 1301.16 1305.98 1306.77 T:acorn128 3406.01 3407.30 3410.62 T:led80n6silcv1 3415.20 3415.44 3415.79 T:led80n6t4silcv2 3613.59 3614.02 3614.82 T:present80n6t4silcv2 3616.69 3617.16 3618.55 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.78 1.79 1.85 T:aegis128l 1.84 1.88 1.99 T:aegis128 1.98 1.98 1.99 aegis128l 2.00 2.04 2.19 T:aezv5 2.02 2.05 2.18 T:aezv3 2.03 2.05 2.15 T:aezv4 2.09 2.11 2.22 T:aegis256 2.36 2.37 2.55 T:tiaoxinv2 2.37 2.38 2.59 T:tiaoxinv1 2.38 2.39 2.41 aegis256 3.57 3.60 3.64 T:aeadaes128ocbtaglen128v1 3.59 3.61 3.62 T:aes128otrpv3 4.25 4.29 4.34 T:morus640128v1 4.55 4.55 4.58 T:aes128otrsv3 4.55 4.56 4.57 T:morus1280128v1 4.54 4.61 4.64 T:morus1280256v1 4.72? 4.77? 10.08? T:aeadaes192ocbtaglen128v1 4.78 4.79 4.80 T:aeadaes256ocbtaglen128v1 4.78 4.81 5.22 T:aes128n12t8clocv2 4.80 4.82 4.84 T:aes256otrpv3 4.82 4.84 4.87 T:morus1280128v2 4.81 4.87 4.88 T:aes128n8t8clocv2 4.84 4.88 4.91 T:morus1280256v2 4.85 4.93 5.00 T:morus640128v2 4.98 5.03 5.23 T:aes128n12t8clocv3 5.02 5.03 5.05 T:aes128otrcv3 5.27 5.34 5.59 T:colm0v1 5.67 5.70 6.04 T:aes128n8t8silcv2 5.69 5.70 6.03 T:aes128n12t8silcv2 5.70 5.70 5.73 T:aes128n12t8silcv3 5.87 5.91 6.08 T:deoxysneq256128v1 5.81 5.91 6.12 T:deoxysneq128128v1 5.91 5.94 5.95 T:aes256otrsv3 5.97 6.00 6.07 T:aes128gcmv1 6.52 6.55 6.64 T:aes256otrcv3 7.05 7.16 7.21 T:deoxysi128v141 7.54 7.57 7.62 T:deoxysi256v141 8.14 8.16 8.20 aes256gcmv1 8.59 8.62 8.68 T:norx6441v3 8.73 8.84 8.89 T:norx6441v2 8.78 8.86 8.97 T:norx6441v1 9.16 9.19 9.35 T:deoxyseq128128v1 9.31 9.34 9.40 T:deoxysii128v141 9.32 9.36 9.46 T:deoxyseq256128v1 9.55 9.55 9.58 T:aesjambuv1 10.78 10.82 10.88 T:norx3241v1 10.76 10.90 10.96 T:norx3241v3 10.91 10.97 11.02 T:norx3241v2 11.40 11.45 11.50 T:deoxysii256v141 11.51 11.63 11.77 T:ascon96v1 11.62 11.72 11.82 T:ascon128av11 11.91 12.00 12.20 ascon128av12 12.61 12.62 12.68 T:norx6461v3 12.64 12.72 12.85 T:norx6461v2 12.79 12.88 12.96 T:norx6461v1 14.80 14.89 15.02 T:norx6444v3 14.92 15.04 15.16 T:ascon128v11 14.84 15.11 15.16 T:ascon128v1 15.02 15.11 15.25 ascon128v12 15.34 15.43 15.79 T:lakekeyakv1 16.07 16.07 16.20 T:norx3261v2 16.10 16.19 16.32 T:norx3261v3 16.34 16.36 16.45 T:norx3261v1 17.85 18.16 18.35 T:riverkeyakv2 18.88 19.11 19.25 T:lakekeyakv2 21.45 21.70 21.81 T:aes128n12clocv1 21.61 21.70 21.81 T:aes128n8clocv1 21.82 21.87 22.09 T:twine80n6t4clocv3 22.65 22.77 23.01 T:aes128otrsv2 22.70 22.77 22.84 T:twine80n6t4clocv2 22.59 22.98 23.16 T:aes128otrsv1 22.98 23.02 23.18 T:aes128otrpv1 23.37 23.48 23.64 T:aes128otrpv2 29.02 29.13 29.39 T:aes256otrsv2 29.16 29.30 29.55 T:aes256otrsv1 29.66 30.03 30.46 T:aes256otrpv1 30.06 30.21 30.43 T:aes256otrpv2 31.52 31.73 31.77 T:seakeyakv2 32.06 32.15 32.27 T:acorn128v3 32.16 32.27 32.45 T:acorn128v2 36.10 36.15 36.25 T:norx6444v2 36.46 36.88 37.23 T:ketjeminorv2 42.64 42.75 42.86 T:norx6444v1 46.26 46.43 46.59 T:ketjesrv1 47.83 47.94 48.03 T:aeadaes128ocbtaglen64v1 47.92 48.08 48.20 T:aeadaes128ocbtaglen96v1 51.34 51.56 51.95 T:oceankeyakv2 53.19 53.44 53.76 T:ketjesrv2 53.87 54.46 54.77 T:ketjemajorv2 55.45 55.56 55.63 T:aeadaes192ocbtaglen64v1 55.59 55.67 55.77 T:aeadaes192ocbtaglen96v1 64.79 64.88 64.96 T:aeadaes256ocbtaglen64v1 64.84 64.95 65.03 T:aeadaes256ocbtaglen96v1 68.85 69.05 69.34 T:colm127v1 73.27 73.59 73.90 T:ketjejrv1 84.21 84.28 84.41 T:proest256otrv1 89.77 89.97 90.05 T:present80n6t4silcv3 104.04 104.44 104.69 T:proest128otrv1 106.55 106.87 107.22 T:deoxysneq128128v13 123.38 123.81 124.19 T:aezv1 124.12 124.52 124.95 T:ketjejrv2 128.56 128.77 128.92 T:lunarkeyakv2 147.34 147.78 148.36 T:deoxysneq256128v13 149.71 149.96 150.23 T:led80n6t4silcv3 160.13 160.37 160.55 T:deoxyseq128128v13 212.13 212.68 213.05 T:deoxyseq256128v13 1301.52 1305.86 1307.27 T:acorn128 3406.16 3406.92 3411.20 T:led80n6silcv1 3414.86 3415.18 3415.55 T:led80n6t4silcv2 3613.37 3614.16 3614.88 T:present80n6t4silcv2 3616.20 3616.82 3617.16 T:present80n6silcv1