VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20260217

[Page version: 20260315 18:26:44]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.21 0.21 0.22 T:tiaoxinv1 0.21 0.21 0.21 T:tiaoxinv2 0.25 0.25 0.25 aegis128l 0.25 0.26 0.26 T:aegis128l 0.38 0.39 0.41 aegis256 0.41 0.41 0.42 T:aegis256 0.41 0.41 0.42 T:aegis128 0.61 0.62 0.62 T:aezv4 0.61 0.62 0.62 T:aezv5 0.62 0.62 0.62 T:aezv3 0.63 0.63 0.63 T:aes128otrcv3 0.63 0.63 0.64 T:morus1280128v1 0.62 0.64 0.64 T:morus1280128v2 0.63 0.64 0.64 T:morus1280256v2 0.63 0.64 0.64 T:morus1280256v1 0.64 0.65 0.65 T:aes128otrpv3 0.64 0.65 0.66 T:aes128otrsv3 0.66 0.66 0.67 T:aeadaes128ocbtaglen128v1 -0.16? 0.76? 2.38? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.87 T:aes256otrcv3 0.86 0.87 0.88 T:deoxysneq128128v1 0.86 0.87 0.89 T:deoxysi128v141 0.88 0.88 0.89 T:aes256otrpv3 0.88 0.89 0.90 T:aeadaes256ocbtaglen128v1 0.93 0.93 0.93 T:aes256otrsv3 0.98 1.00 1.01 T:deoxysneq256128v1 0.99 1.00 1.01 T:deoxysi256v141 1.07 1.08 1.08 T:morus640128v1 1.07 1.08 1.09 T:morus640128v2 1.14 1.16 1.18 T:norx6444v3 1.18 1.19 1.20 T:aes128gcmv1 1.43 1.44 1.44 aes256gcmv1 1.59 1.59 1.60 T:colm0v1 1.74 1.75 1.76 T:deoxysii128v141 1.78 1.78 1.79 T:deoxyseq128128v1 2.00 2.01 2.03 T:deoxysii256v141 2.02 2.02 2.04 T:deoxyseq256128v1 2.05 2.10 2.14 T:lunarkeyakv2 2.09 2.10 2.13 T:norx6441v2 2.16 2.18 2.20 T:norx6441v3 2.54 2.56 2.58 T:norx6441v1 2.75 2.75 2.76 T:aes128n12t8clocv3 2.75 2.75 2.76 T:aes128n12t8silcv3 2.75 2.75 2.76 T:aes128n8t8clocv2 2.75 2.76 2.76 T:aes128n12t8clocv2 2.75 2.76 2.76 T:aes128n12t8silcv2 2.75 2.76 2.76 T:aes128n8t8silcv2 2.75 2.78 2.80 T:seakeyakv2 2.83 2.87 2.90 T:oceankeyakv2 3.21 3.25 3.28 T:norx6461v2 3.23 3.27 3.29 T:norx6461v3 3.76 3.79 3.81 T:norx6444v2 3.90 3.92 3.94 T:norx3241v2 3.92 3.94 3.98 T:norx6461v1 3.96 3.98 4.02 T:norx3241v3 4.09 4.12 4.14 T:lakekeyakv1 4.30 4.32 4.35 T:norx6444v1 4.35 4.38 4.41 T:lakekeyakv2 4.74 4.77 4.78 T:norx3241v1 5.52 5.59 5.63 T:acorn128v3 5.83 5.84 5.85 T:aesjambuv1 5.86 5.88 5.91 T:norx3261v3 6.09 6.13 6.14 T:norx3261v2 6.77 6.80 6.82 T:acorn128v2 7.19 7.21 7.23 T:norx3261v1 7.31 7.42 7.52 T:ketjemajorv2 7.48 7.50 7.53 T:ascon96v1 7.49 7.52 7.55 T:ascon128av11 7.54 7.58 7.61 ascon128av12 9.81 9.84 9.87 T:riverkeyakv2 10.22 10.41 10.50 T:ketjeminorv2 10.88 10.90 10.92 T:ascon128v11 10.87 10.91 10.93 T:ascon128v1 10.92 10.94 10.97 ascon128v12 13.43 13.45 13.48 T:aes128otrsv1 13.45 13.48 13.51 T:aes128otrpv2 13.48 13.50 13.52 T:aes128otrsv2 13.63 13.65 13.67 T:aes128otrpv1 14.61 14.62 14.63 T:twine80n6t4clocv3 15.60 15.61 15.62 T:twine80n6t4clocv2 17.60 17.62 17.65 T:aes256otrpv1 17.60 17.62 17.65 T:aes256otrpv2 17.62 17.64 17.66 T:aes256otrsv2 17.70 17.72 17.74 T:aes256otrsv1 22.97 23.04 23.47 T:aes128n12clocv1 23.07 23.10 23.13 T:aes128n8clocv1 24.65 24.68 24.70 T:aeadaes128ocbtaglen64v1 24.66 24.69 24.72 T:aeadaes128ocbtaglen96v1 27.06 27.09 27.12 T:proest256otrv1 29.03 29.05 29.08 T:aeadaes192ocbtaglen64v1 29.04 29.05 29.07 T:aeadaes192ocbtaglen96v1 31.22 31.42 31.46 T:ketjesrv1 33.45 33.48 33.50 T:aeadaes256ocbtaglen64v1 33.48 33.51 33.54 T:aeadaes256ocbtaglen96v1 50.38 50.42 50.47 T:proest128otrv1 54.55 54.59 54.62 T:colm127v1 59.06 59.10 59.14 T:ketjejrv1 71.60 71.71 72.42 T:present80n6t4silcv3 79.95 79.98 80.02 T:deoxysneq128128v13 111.52 111.87 115.77 T:deoxysneq256128v13 125.14 125.20 125.27 T:led80n6t4silcv3 157.60 157.89 158.18 T:aezv1 159.48 159.56 159.69 T:deoxyseq128128v13 223.61 223.99 226.57 T:deoxyseq256128v13 323.63 324.90 327.58 T:acorn128 2182.72 2188.42 2197.09 T:ketjesrv2 4035.71 4036.99 4037.43 T:led80n6silcv1 4044.40 4045.58 4047.74 T:led80n6t4silcv2 4337.39 4337.96 4338.37 T:present80n6silcv1 4337.38 4337.98 4339.77 T:present80n6t4silcv2 7239.68 7250.25 7277.22 T:ketjejrv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.25 0.25 0.26 aegis128l 0.24 0.25 0.26 T:aegis128l 0.36 0.37 0.37 T:tiaoxinv1 0.37 0.37 0.38 T:tiaoxinv2 0.40 0.40 0.40 T:aegis256 0.46 0.46 0.46 T:aegis128 0.49 0.49 0.49 aegis256 0.61 0.62 0.62 T:aezv5 0.61 0.62 0.62 T:aezv4 0.61 0.62 0.62 T:aezv3 0.65 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280128v2 0.65 0.66 0.66 T:morus1280256v1 0.65 0.66 0.66 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.68 T:aes128otrcv3 0.68 0.69 0.70 T:aes128otrsv3 0.68 0.69 0.70 T:aes128otrpv3 -0.86? 0.75? 1.56? T:aeadaes192ocbtaglen128v1 0.90 0.90 0.91 T:aeadaes256ocbtaglen128v1 0.90 0.91 0.91 T:aes256otrcv3 0.92 0.92 0.93 T:aes256otrpv3 0.97 0.97 0.97 T:aes256otrsv3 1.04 1.06 1.07 T:aes128gcmv1 1.07 1.08 1.09 T:morus640128v1 1.09 1.10 1.12 T:morus640128v2 1.14 1.15 1.16 T:deoxysi128v141 1.13 1.15 1.17 T:norx6444v3 1.21 1.21 1.22 T:deoxysneq128128v1 1.28 1.30 1.32 T:deoxysi256v141 1.31 1.31 1.32 T:deoxysneq256128v1 1.41 1.43 1.44 aes256gcmv1 1.65 1.66 1.68 T:colm0v1 1.75 1.76 1.76 T:deoxysii128v141 2.00 2.01 2.01 T:deoxysii256v141 2.02 2.03 2.06 T:norx6441v3 2.02 2.04 2.06 T:norx6441v2 2.13 2.16 2.22 T:lunarkeyakv2 2.41 2.42 2.43 T:deoxyseq128128v1 2.45 2.48 2.49 T:norx6441v1 2.52 2.53 2.53 T:deoxyseq256128v1 2.69 2.71 2.74 T:aes128n12t8silcv2 2.70 2.72 2.75 T:aes128n12t8silcv3 2.72 2.72 2.73 T:aes128n8t8silcv2 2.72 2.73 2.74 T:aes128n12t8clocv3 2.72 2.73 2.73 T:aes128n12t8clocv2 2.71 2.73 2.74 T:aes128n8t8clocv2 2.83 2.86 2.88 T:seakeyakv2 2.90 2.94 2.98 T:oceankeyakv2 3.13 3.15 3.18 T:norx6461v2 3.12 3.16 3.18 T:norx6461v3 3.73 3.76 3.77 T:norx3241v2 3.76 3.78 3.82 T:norx6444v2 3.77 3.79 3.80 T:norx3241v3 3.76 3.79 3.82 T:norx6461v1 4.19 4.21 4.23 T:lakekeyakv1 4.26 4.28 4.30 T:norx6444v1 4.37 4.39 4.42 T:lakekeyakv2 4.52 4.54 4.56 T:norx3241v1 5.70 5.73 5.75 T:norx3261v3 5.93 5.96 5.99 T:norx3261v2 6.03 6.09 6.10 T:aesjambuv1 6.94 6.96 6.98 T:acorn128v2 7.06 7.07 7.08 T:norx3261v1 6.94 7.09 7.21 T:ketjemajorv2 7.26 7.33 7.38 T:acorn128v3 7.39 7.42 7.44 ascon128av12 7.59 7.63 7.67 T:ascon128av11 7.60 7.65 7.68 T:ascon96v1 9.83 9.88 9.91 T:riverkeyakv2 10.26 10.28 10.31 T:ketjeminorv2 10.58 10.61 10.76 T:ascon128v11 10.58 10.61 10.73 T:ascon128v1 10.92 10.95 10.98 ascon128v12 13.91 13.93 13.96 T:aes128otrpv1 14.11 14.15 14.18 T:aes128otrpv2 14.14 14.18 14.21 T:aes128otrsv2 14.41 14.46 14.50 T:aes128otrsv1 14.60 14.62 14.63 T:twine80n6t4clocv3 15.49 15.51 15.52 T:twine80n6t4clocv2 17.78 17.83 17.87 T:aes256otrsv1 17.89 17.95 17.99 T:aes256otrpv1 18.01 18.05 18.08 T:aes256otrpv2 18.09 18.14 18.18 T:aes256otrsv2 22.02 22.09 22.43 T:aes128n12clocv1 22.51 22.56 22.59 T:aes128n8clocv1 27.03 27.06 27.08 T:proest256otrv1 31.96 32.17 32.21 T:ketjesrv1 33.24 33.27 33.32 T:aeadaes128ocbtaglen96v1 33.25 33.29 33.34 T:aeadaes128ocbtaglen64v1 39.70 39.75 39.81 T:aeadaes192ocbtaglen64v1 39.70 39.76 39.93 T:aeadaes192ocbtaglen96v1 46.15 46.21 46.27 T:aeadaes256ocbtaglen64v1 46.16 46.23 46.30 T:aeadaes256ocbtaglen96v1 50.79 50.84 50.89 T:proest128otrv1 60.02 60.05 60.08 T:ketjejrv1 71.47 71.62 72.35 T:present80n6t4silcv3 71.89 71.94 72.01 T:colm127v1 107.46 107.60 107.76 T:deoxysneq128128v13 125.01 125.09 125.18 T:led80n6t4silcv3 151.28 151.60 152.86 T:deoxysneq256128v13 158.06 158.33 158.68 T:aezv1 159.58 159.66 159.87 T:deoxyseq128128v13 223.48 223.82 226.38 T:deoxyseq256128v13 347.84 348.22 349.31 T:acorn128 2180.72 2185.48 2195.51 T:ketjesrv2 4035.33 4036.24 4036.79 T:led80n6silcv1 4045.80 4046.52 4046.95 T:led80n6t4silcv2 4337.17 4337.86 4339.09 T:present80n6t4silcv2 4338.70 4340.79 4341.50 T:present80n6silcv1 7254.93 7273.50 7290.08 T:ketjejrv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.25 0.25 0.25 T:aezv4 0.24 0.25 0.25 T:aezv3 0.24 0.25 0.25 T:aezv5 0.24 0.25 0.26 T:aegis128l 0.27 0.27 0.28 aegis128l 0.36 0.37 0.37 T:tiaoxinv1 0.36 0.37 0.37 T:tiaoxinv2 0.40 0.40 0.40 T:aegis256 0.45 0.46 0.46 T:aegis128 0.49 0.49 0.49 aegis256 0.64 0.64 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280128v2 0.65 0.65 0.66 T:morus1280256v2 0.65 0.66 0.66 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.68 T:aes128otrcv3 0.68 0.69 0.69 T:aes128otrsv3 0.68 0.69 0.69 T:aes128otrpv3 -0.06? 0.75? 2.37? T:aeadaes192ocbtaglen128v1 0.90 0.91 0.91 T:aes256otrcv3 0.90 0.91 0.92 T:aeadaes256ocbtaglen128v1 0.92 0.92 0.92 T:aes256otrpv3 0.97 0.97 0.97 T:aes256otrsv3 1.05 1.06 1.06 T:aes128gcmv1 1.07 1.08 1.09 T:morus640128v1 1.09 1.10 1.11 T:morus640128v2 1.14 1.15 1.16 T:deoxysi128v141 1.14 1.15 1.17 T:norx6444v3 1.20 1.21 1.22 T:deoxysneq128128v1 1.28 1.30 1.32 T:deoxysi256v141 1.30 1.31 1.32 T:deoxysneq256128v1 1.42 1.43 1.44 aes256gcmv1 1.65 1.66 1.67 T:colm0v1 1.75 1.75 1.76 T:deoxysii128v141 1.99 2.00 2.01 T:deoxysii256v141 2.02 2.04 2.05 T:norx6441v3 2.02 2.04 2.05 T:norx6441v2 2.14 2.18 2.23 T:lunarkeyakv2 2.41 2.42 2.43 T:deoxyseq128128v1 2.45 2.47 2.49 T:norx6441v1 2.52 2.53 2.53 T:deoxyseq256128v1 2.70 2.72 2.74 T:aes128n12t8silcv2 2.71 2.72 2.74 T:aes128n12t8clocv2 2.71 2.72 2.74 T:aes128n8t8silcv2 2.70 2.72 2.75 T:aes128n12t8silcv3 2.70 2.72 2.74 T:aes128n8t8clocv2 2.71 2.73 2.74 T:aes128n12t8clocv3 2.85 2.89 2.92 T:seakeyakv2 2.93 2.96 2.98 T:oceankeyakv2 3.13 3.16 3.18 T:norx6461v2 3.12 3.16 3.17 T:norx6461v3 3.73 3.76 3.78 T:norx3241v2 3.77 3.79 3.82 T:norx6461v1 3.78 3.80 3.82 T:norx3241v3 3.78 3.81 3.84 T:norx6444v2 4.22 4.23 4.25 T:lakekeyakv1 4.29 4.30 4.33 T:norx6444v1 4.40 4.42 4.44 T:lakekeyakv2 4.51 4.54 4.55 T:norx3241v1 5.73 5.74 5.75 T:norx3261v3 5.94 5.97 5.99 T:norx3261v2 6.03 6.07 6.10 T:aesjambuv1 6.94 6.96 6.97 T:acorn128v2 7.06 7.07 7.08 T:norx3261v1 6.99 7.09 7.17 T:ketjemajorv2 7.25 7.32 7.38 T:acorn128v3 7.40 7.42 7.44 ascon128av12 7.59 7.61 7.65 T:ascon128av11 7.61 7.64 7.67 T:ascon96v1 9.89 9.92 9.96 T:riverkeyakv2 10.28 10.32 10.37 T:ketjeminorv2 10.59 10.61 10.64 T:ascon128v11 10.58 10.61 10.65 T:ascon128v1 10.91 10.94 10.96 ascon128v12 13.93 13.97 13.99 T:aes128otrpv1 14.12 14.16 14.19 T:aes128otrpv2 14.17 14.21 14.25 T:aes128otrsv2 14.44 14.47 14.51 T:aes128otrsv1 14.59 14.61 14.62 T:twine80n6t4clocv3 15.49 15.51 15.52 T:twine80n6t4clocv2 17.84 17.88 17.92 T:aes256otrsv1 17.90 17.93 17.99 T:aes256otrpv1 18.04 18.06 18.09 T:aes256otrpv2 18.14 18.18 18.21 T:aes256otrsv2 22.02 22.08 22.39 T:aes128n12clocv1 22.51 22.54 22.57 T:aes128n8clocv1 27.04 27.06 27.08 T:proest256otrv1 31.99 32.19 32.25 T:ketjesrv1 33.24 33.28 33.32 T:aeadaes128ocbtaglen64v1 33.24 33.28 33.33 T:aeadaes128ocbtaglen96v1 39.69 39.74 39.79 T:aeadaes192ocbtaglen64v1 39.70 39.77 39.92 T:aeadaes192ocbtaglen96v1 46.16 46.21 46.27 T:aeadaes256ocbtaglen64v1 46.18 46.24 46.28 T:aeadaes256ocbtaglen96v1 50.81 50.85 50.89 T:proest128otrv1 60.05 60.08 60.12 T:ketjejrv1 70.88 70.92 70.98 T:colm127v1 71.47 71.66 72.32 T:present80n6t4silcv3 107.50 107.62 107.83 T:deoxysneq128128v13 125.02 125.08 125.16 T:led80n6t4silcv3 151.29 151.50 152.86 T:deoxysneq256128v13 157.95 158.11 158.42 T:aezv1 159.55 159.63 159.75 T:deoxyseq128128v13 223.53 223.81 226.26 T:deoxyseq256128v13 347.83 348.39 349.34 T:acorn128 2177.79 2184.43 2195.89 T:ketjesrv2 4035.50 4036.31 4036.85 T:led80n6silcv1 4045.65 4046.43 4046.76 T:led80n6t4silcv2 4337.13 4337.71 4338.60 T:present80n6t4silcv2 4337.21 4338.73 4341.05 T:present80n6silcv1 7247.40 7273.06 7290.15 T:ketjejrv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.20 0.20 0.20 T:tiaoxinv1 0.20 0.20 0.20 T:tiaoxinv2 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 aegis128l 0.39 0.40 0.41 aegis256 0.43 0.43 0.43 T:aegis256 0.43 0.43 0.44 T:aezv4 0.43 0.43 0.44 T:aezv3 0.43 0.44 0.44 T:aezv5 0.44 0.44 0.44 T:aegis128 0.61 0.61 0.62 T:morus1280128v1 0.61 0.62 0.62 T:morus1280256v1 0.61 0.62 0.62 T:morus1280256v2 0.61 0.62 0.63 T:morus1280128v2 0.64 0.64 0.64 T:aeadaes128ocbtaglen128v1 0.64 0.64 0.65 T:aes128otrpv3 0.65 0.65 0.65 T:aes128otrcv3 0.30? 0.75? 1.19? T:aeadaes192ocbtaglen128v1 0.79 0.80 0.81 T:aes128gcmv1 0.86 0.87 0.88 T:deoxysneq128128v1 0.87 0.88 0.89 T:deoxysi128v141 0.88 0.88 0.89 T:aeadaes256ocbtaglen128v1 0.88 0.89 0.89 T:aes256otrcv3 0.89 0.89 0.89 T:aes256otrpv3 0.92 0.92 0.93 aes256gcmv1 0.99 0.99 1.00 T:deoxysneq256128v1 1.00 1.01 1.02 T:deoxysi256v141 1.04 1.05 1.05 T:morus640128v2 1.04 1.05 1.05 T:morus640128v1 1.11 1.11 1.12 T:colm0v1 1.31 1.31 1.32 T:deoxysii128v141 1.32 1.33 1.34 T:deoxyseq128128v1 1.50 1.51 1.51 T:deoxysii256v141 1.50 1.51 1.52 T:deoxyseq256128v1 1.65 1.67 1.69 T:norx6444v3 1.70 1.70 1.70 T:aes128otrsv3 2.13 2.14 2.16 T:norx6441v2 2.15 2.17 2.18 T:norx6441v3 2.30 2.31 2.33 T:seakeyakv2 2.32 2.33 2.33 T:aes256otrsv3 2.37 2.39 2.41 T:oceankeyakv2 2.58 2.59 2.60 T:norx6441v1 2.72 2.72 2.74 T:aes128n12t8silcv3 2.72 2.72 2.74 T:aes128n12t8silcv2 2.74 2.74 2.74 T:aes128n8t8clocv2 2.74 2.74 2.74 T:aes128n12t8clocv3 2.74 2.74 2.74 T:aes128n12t8clocv2 2.75 2.75 2.77 T:aes128n8t8silcv2 2.86 2.88 2.90 T:lunarkeyakv2 3.29 3.30 3.32 T:norx6461v3 3.32 3.33 3.35 T:norx6461v2 3.49 3.51 3.52 T:norx6444v2 3.89 3.90 3.91 T:lakekeyakv1 3.90 3.92 3.95 T:norx6461v1 3.94 3.95 3.97 T:lakekeyakv2 3.95 3.97 3.99 T:norx3241v2 3.97 3.99 4.00 T:norx3241v3 4.25 4.27 4.28 T:norx6444v1 4.77 4.79 4.81 T:norx3241v1 5.79 5.79 5.80 T:aesjambuv1 6.00 6.01 6.02 T:norx3261v3 6.03 6.05 6.07 T:norx3261v2 6.49 6.52 6.57 T:ketjemajorv2 6.53 6.58 6.59 T:acorn128v3 6.99 7.01 7.03 T:acorn128v2 7.16 7.19 7.20 T:riverkeyakv2 7.19 7.21 7.22 T:norx3261v1 7.39 7.41 7.42 T:ascon96v1 7.42 7.45 7.48 T:ascon128av11 7.46 7.49 7.51 ascon128av12 9.04 9.12 9.15 T:ketjeminorv2 10.87 10.90 10.91 T:ascon128v1 10.88 10.90 10.93 T:ascon128v11 10.93 10.95 10.98 ascon128v12 12.69 12.71 12.74 T:aes128otrsv1 12.72 12.75 12.78 T:aes128otrsv2 12.84 12.88 12.91 T:aes128otrpv2 12.89 12.91 12.94 T:aes128otrpv1 14.38 14.39 14.40 T:twine80n6t4clocv3 15.33 15.34 15.35 T:twine80n6t4clocv2 16.81 16.83 16.85 T:aes256otrsv2 16.84 16.86 16.88 T:aes256otrpv1 17.01 17.04 17.09 T:aes256otrpv2 17.03 17.06 17.09 T:aes256otrsv1 17.50 17.56 17.79 T:aes128n12clocv1 17.55 17.61 17.64 T:aes128n8clocv1 24.44 24.45 24.46 T:aeadaes128ocbtaglen64v1 24.44 24.46 24.48 T:aeadaes128ocbtaglen96v1 27.26 27.28 27.31 T:proest256otrv1 28.23 28.34 28.39 T:ketjesrv1 28.81 28.82 28.83 T:aeadaes192ocbtaglen64v1 28.81 28.83 28.85 T:aeadaes192ocbtaglen96v1 33.25 33.27 33.29 T:aeadaes256ocbtaglen96v1 33.25 33.27 33.28 T:aeadaes256ocbtaglen64v1 40.44 40.46 40.47 T:colm127v1 50.87 50.91 50.95 T:proest128otrv1 53.16 53.21 53.28 T:ketjejrv1 71.15 71.37 71.92 T:present80n6t4silcv3 79.56 79.62 79.77 T:deoxysneq128128v13 103.96 104.14 104.41 T:aezv1 111.30 111.67 116.34 T:deoxysneq256128v13 119.08 119.12 119.16 T:deoxyseq128128v13 124.65 124.71 124.77 T:led80n6t4silcv3 167.15 167.39 169.26 T:deoxyseq256128v13 315.26 316.25 320.67 T:acorn128 2060.13 2071.23 2079.71 T:ketjesrv2 3026.56 3026.89 3028.69 T:led80n6silcv1 3033.42 3034.65 3036.17 T:led80n6t4silcv2 3251.91 3252.40 3254.16 T:present80n6t4silcv2 3251.85 3252.47 3254.31 T:present80n6silcv1 6950.77 6962.39 6966.91 T:ketjejrv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.25 0.25 0.25 aegis128l 0.25 0.25 0.26 T:aegis128l 0.28 0.28 0.28 T:tiaoxinv1 0.28 0.28 0.28 T:tiaoxinv2 0.40 0.40 0.40 T:aegis256 0.43 0.43 0.43 T:aezv5 0.43 0.43 0.44 T:aezv4 0.43 0.43 0.44 T:aezv3 0.44 0.44 0.44 T:aegis128 0.44 0.44 0.45 aegis256 0.62 0.62 0.63 T:morus1280128v2 0.62 0.63 0.63 T:morus1280256v1 0.62 0.63 0.63 T:morus1280128v1 0.63 0.63 0.63 T:morus1280256v2 0.63 0.63 0.64 T:aeadaes128ocbtaglen128v1 0.66 0.67 0.67 T:aes128otrpv3 0.67 0.67 0.68 T:aes128otrcv3 0.73 0.73 0.74 T:aes128gcmv1 0.33? 0.75? 1.59? T:aeadaes192ocbtaglen128v1 0.89 0.89 0.90 T:aeadaes256ocbtaglen128v1 0.90 0.90 0.91 T:aes256otrcv3 0.91 0.91 0.91 T:aes256otrpv3 0.91 0.92 0.93 aes256gcmv1 1.00 1.01 1.02 T:deoxysi128v141 1.03 1.04 1.04 T:morus640128v1 1.04 1.04 1.05 T:deoxysneq128128v1 1.04 1.05 1.07 T:morus640128v2 1.14 1.15 1.16 T:deoxysi256v141 1.15 1.15 1.16 T:deoxysneq256128v1 1.16 1.16 1.16 T:colm0v1 1.31 1.31 1.32 T:deoxysii128v141 1.50 1.50 1.51 T:deoxysii256v141 1.64 1.65 1.65 T:deoxyseq128128v1 1.65 1.66 1.68 T:norx6444v3 1.72 1.72 1.72 T:aes128otrsv3 1.76 1.76 1.77 T:deoxyseq256128v1 2.07 2.10 2.11 T:norx6441v3 2.10 2.11 2.13 T:norx6441v2 2.34 2.35 2.35 T:aes256otrsv3 2.37 2.39 2.40 T:seakeyakv2 2.41 2.43 2.45 T:oceankeyakv2 2.53 2.54 2.56 T:norx6441v1 2.70 2.72 2.72 T:aes128n12t8silcv3 2.72 2.72 2.72 T:aes128n8t8clocv2 2.70 2.72 2.74 T:aes128n12t8silcv2 2.71 2.72 2.77 T:aes128n8t8silcv2 2.72 2.72 2.72 T:aes128n12t8clocv3 2.72 2.72 2.73 T:aes128n12t8clocv2 2.88 2.91 2.93 T:lunarkeyakv2 3.21 3.22 3.25 T:norx6461v3 3.23 3.25 3.27 T:norx6461v2 3.52 3.55 3.57 T:norx6444v2 3.80 3.82 3.84 T:norx6461v1 3.88 3.89 3.91 T:norx3241v3 3.88 3.91 3.96 T:norx3241v2 3.92 3.94 3.95 T:lakekeyakv1 3.94 3.96 3.98 T:lakekeyakv2 4.23 4.24 4.26 T:norx6444v1 4.64 4.67 4.68 T:norx3241v1 5.88 5.88 5.88 T:aesjambuv1 5.90 5.92 5.94 T:norx3261v3 5.95 5.98 6.00 T:norx3261v2 6.29 6.35 6.42 T:ketjemajorv2 7.14 7.15 7.16 T:norx3261v1 7.19 7.20 7.21 T:acorn128v2 7.19 7.21 7.24 T:riverkeyakv2 7.37 7.39 7.41 ascon128av12 7.39 7.43 7.46 T:acorn128v3 7.41 7.44 7.46 T:ascon128av11 7.44 7.46 7.49 T:ascon96v1 9.04 9.05 9.07 T:ketjeminorv2 10.77 10.79 10.81 T:ascon128v11 10.78 10.80 10.82 T:ascon128v1 10.91 10.93 10.95 ascon128v12 13.02 13.05 13.08 T:aes128otrpv1 13.07 13.09 13.12 T:aes128otrsv2 13.20 13.22 13.24 T:aes128otrsv1 13.18 13.22 13.24 T:aes128otrpv2 14.37 14.39 14.41 T:twine80n6t4clocv3 15.26 15.27 15.29 T:twine80n6t4clocv2 16.96 16.99 17.02 T:aes256otrpv1 17.03 17.06 17.08 T:aes256otrsv2 17.07 17.09 17.12 T:aes256otrsv1 17.08 17.12 17.32 T:aes128n12clocv1 17.18 17.21 17.25 T:aes256otrpv2 17.29 17.31 17.33 T:aes128n8clocv1 27.26 27.29 27.32 T:proest256otrv1 28.58 28.66 28.73 T:ketjesrv1 28.74 28.75 28.78 T:aeadaes128ocbtaglen96v1 28.75 28.77 28.79 T:aeadaes128ocbtaglen64v1 34.15 34.18 34.20 T:aeadaes192ocbtaglen64v1 34.15 34.19 34.27 T:aeadaes192ocbtaglen96v1 39.63 39.66 39.70 T:aeadaes256ocbtaglen96v1 39.63 39.67 39.70 T:aeadaes256ocbtaglen64v1 49.10 49.12 49.15 T:colm127v1 51.10 51.13 51.17 T:proest128otrv1 53.64 53.68 53.84 T:ketjejrv1 71.05 71.40 71.87 T:present80n6t4silcv3 93.38 93.45 93.49 T:deoxysneq128128v13 104.21 104.42 104.69 T:aezv1 119.06 119.11 119.17 T:deoxyseq128128v13 124.63 124.67 124.74 T:led80n6t4silcv3 131.37 131.55 132.80 T:deoxysneq256128v13 167.06 167.48 169.18 T:deoxyseq256128v13 337.10 337.99 339.79 T:acorn128 2068.72 2080.42 2103.62 T:ketjesrv2 3025.89 3026.40 3027.59 T:led80n6silcv1 3034.01 3034.60 3036.32 T:led80n6t4silcv2 3251.16 3251.97 3253.83 T:present80n6silcv1 3251.80 3252.45 3254.11 T:present80n6t4silcv2 6937.60 6952.98 6974.09 T:ketjejrv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aegis128l 0.26 0.26 0.26 aegis128l 0.28 0.28 0.28 T:tiaoxinv1 0.28 0.28 0.28 T:tiaoxinv2 0.40 0.40 0.40 T:aegis256 0.43 0.44 0.44 T:aegis128 0.44 0.44 0.45 aegis256 0.62 0.62 0.63 T:morus1280256v1 0.62 0.62 0.63 T:morus1280128v2 0.62 0.63 0.63 T:morus1280256v2 0.62 0.63 0.63 T:morus1280128v1 0.63 0.63 0.64 T:aeadaes128ocbtaglen128v1 0.66 0.67 0.67 T:aes128otrpv3 0.67 0.67 0.68 T:aes128otrcv3 0.73 0.73 0.74 T:aes128gcmv1 -0.06? 0.75? 1.16? T:aeadaes192ocbtaglen128v1 0.89 0.89 0.90 T:aeadaes256ocbtaglen128v1 0.90 0.90 0.91 T:aes256otrcv3 0.91 0.91 0.91 T:aes256otrpv3 0.91 0.92 0.92 aes256gcmv1 1.01 1.01 1.02 T:deoxysi128v141 1.03 1.04 1.04 T:morus640128v1 1.04 1.04 1.04 T:deoxysneq128128v1 1.06 1.07 1.07 T:morus640128v2 1.14 1.15 1.16 T:deoxysi256v141 1.15 1.15 1.16 T:deoxysneq256128v1 1.16 1.16 1.16 T:colm0v1 1.31 1.31 1.32 T:deoxysii128v141 1.50 1.50 1.50 T:deoxysii256v141 1.64 1.65 1.65 T:deoxyseq128128v1 1.66 1.67 1.68 T:norx6444v3 1.72 1.72 1.72 T:aes128otrsv3 1.76 1.77 1.77 T:deoxyseq256128v1 2.08 2.09 2.11 T:norx6441v3 2.09 2.11 2.12 T:norx6441v2 2.34 2.35 2.35 T:aes256otrsv3 2.39 2.40 2.41 T:seakeyakv2 2.43 2.44 2.46 T:oceankeyakv2 2.53 2.54 2.55 T:norx6441v1 2.72 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.73 T:aes128n8t8silcv2 2.72 2.72 2.73 T:aes128n12t8clocv3 2.71 2.72 2.74 T:aes128n12t8silcv3 2.72 2.72 2.73 T:aes128n12t8clocv2 2.70 2.73 2.74 T:aes128n12t8silcv2 2.90 2.92 2.94 T:lunarkeyakv2 3.22 3.23 3.25 T:norx6461v3 3.23 3.25 3.26 T:norx6461v2 3.53 3.55 3.57 T:norx6444v2 3.80 3.81 3.83 T:norx6461v1 3.87 3.89 3.92 T:norx3241v2 3.88 3.89 3.91 T:norx3241v3 3.94 3.95 3.96 T:lakekeyakv1 3.97 3.98 4.00 T:lakekeyakv2 4.24 4.26 4.27 T:norx6444v1 4.65 4.67 4.69 T:norx3241v1 5.88 5.88 5.90 T:aesjambuv1 5.88 5.90 5.92 T:norx3261v3 5.94 5.95 5.98 T:norx3261v2 6.32 6.35 6.40 T:ketjemajorv2 7.14 7.15 7.16 T:norx3261v1 7.19 7.20 7.21 T:acorn128v2 7.21 7.23 7.25 T:riverkeyakv2 7.37 7.39 7.43 ascon128av12 7.40 7.43 7.46 T:acorn128v3 7.43 7.44 7.46 T:ascon128av11 7.43 7.46 7.48 T:ascon96v1 9.06 9.08 9.10 T:ketjeminorv2 10.77 10.80 10.81 T:ascon128v11 10.78 10.80 10.82 T:ascon128v1 10.91 10.93 10.95 ascon128v12 13.04 13.07 13.10 T:aes128otrpv1 13.08 13.10 13.13 T:aes128otrsv2 13.18 13.22 13.25 T:aes128otrpv2 13.21 13.24 13.26 T:aes128otrsv1 14.37 14.39 14.41 T:twine80n6t4clocv3 15.27 15.28 15.29 T:twine80n6t4clocv2 16.97 17.01 17.04 T:aes256otrpv1 17.05 17.07 17.10 T:aes256otrsv2 17.08 17.10 17.12 T:aes256otrsv1 17.08 17.14 17.30 T:aes128n12clocv1 17.20 17.23 17.25 T:aes256otrpv2 17.30 17.32 17.34 T:aes128n8clocv1 27.26 27.27 27.30 T:proest256otrv1 28.62 28.72 28.77 T:ketjesrv1 28.73 28.75 28.77 T:aeadaes128ocbtaglen96v1 28.76 28.78 28.80 T:aeadaes128ocbtaglen64v1 34.16 34.18 34.25 T:aeadaes192ocbtaglen96v1 34.16 34.19 34.22 T:aeadaes192ocbtaglen64v1 39.62 39.65 39.69 T:aeadaes256ocbtaglen96v1 39.61 39.65 39.69 T:aeadaes256ocbtaglen64v1 48.59 48.62 48.64 T:colm127v1 51.10 51.14 51.19 T:proest128otrv1 53.65 53.69 53.83 T:ketjejrv1 71.10 71.44 71.95 T:present80n6t4silcv3 93.37 93.43 93.67 T:deoxysneq128128v13 104.20 104.36 104.58 T:aezv1 119.04 119.09 119.16 T:deoxyseq128128v13 124.63 124.68 124.73 T:led80n6t4silcv3 131.39 131.57 132.77 T:deoxysneq256128v13 167.06 167.33 169.23 T:deoxyseq256128v13 337.12 337.96 339.82 T:acorn128 2069.89 2078.68 2101.65 T:ketjesrv2 3026.06 3026.40 3027.81 T:led80n6silcv1 3034.01 3034.34 3035.73 T:led80n6t4silcv2 3251.59 3252.12 3254.00 T:present80n6silcv1 3251.93 3252.84 3254.27 T:present80n6t4silcv2 6933.36 6948.68 6968.77 T:ketjejrv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.19 0.19 0.19 T:tiaoxinv2 0.19 0.19 0.19 T:tiaoxinv1 0.25 0.25 0.25 aegis128l 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aezv5 0.24 0.25 0.26 T:aegis128l 0.40 0.41 0.41 aegis256 0.40 0.41 0.42 T:aes128gcmv1 0.41 0.42 0.42 aes256gcmv1 0.45 0.46 0.46 T:aegis256 0.46 0.47 0.47 T:aegis128 0.59 0.59 0.60 T:morus1280256v1 0.59 0.59 0.60 T:morus1280128v2 0.59 0.59 0.60 T:morus1280256v2 0.59 0.59 0.60 T:morus1280128v1 0.62 0.62 0.63 T:colm0v1 0.64 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.66 T:aes128otrpv3 0.67 0.68 0.68 T:aes128otrcv3 -0.09? 0.75? 1.57? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.86 0.87 0.88 T:deoxyseq128128v1 0.86 0.87 0.88 T:deoxysi128v141 0.87 0.88 0.88 T:deoxysii128v141 0.90 0.90 0.91 T:aes256otrpv3 0.90 0.91 0.92 T:aes256otrcv3 0.90 0.91 0.91 T:aeadaes256ocbtaglen128v1 0.98 0.99 1.01 T:deoxysneq256128v1 0.99 1.00 1.01 T:deoxysii256v141 0.99 1.00 1.02 T:deoxyseq256128v1 1.00 1.01 1.02 T:deoxysi256v141 1.00 1.01 1.02 T:morus640128v1 1.00 1.01 1.03 T:morus640128v2 1.82 1.84 1.88 T:oceankeyakv2 1.84 1.87 1.90 T:lunarkeyakv2 2.13 2.15 2.17 T:norx6441v2 2.15 2.17 2.19 T:norx6441v3 2.15 2.17 2.20 T:norx6444v3 2.25 2.28 2.30 T:seakeyakv2 2.58 2.61 2.63 T:norx6441v1 2.69 2.69 2.69 T:aes128n12t8silcv3 2.69 2.69 2.72 T:aes128n12t8silcv2 2.72 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.72 T:aes128n12t8clocv2 2.72 2.72 2.72 T:aes128n12t8clocv3 2.74 2.75 2.75 T:aes128n8t8silcv2 2.75 2.75 2.75 T:aes128otrsv3 3.20 3.23 3.24 T:norx6444v2 3.31 3.35 3.38 T:norx6461v3 3.38 3.40 3.43 T:norx6461v2 3.58 3.60 3.64 T:lakekeyakv2 3.67 3.72 3.75 T:lakekeyakv1 3.72 3.72 3.72 T:aes256otrsv3 3.90 3.94 3.97 T:norx6461v1 3.94 3.96 3.99 T:norx3241v3 3.96 3.97 4.02 T:norx3241v2 4.20 4.21 4.23 T:norx6444v1 4.78 4.81 4.84 T:norx3241v1 5.63 5.72 5.79 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 5.94 5.97 6.00 T:norx3261v2 6.06 6.09 6.11 T:norx3261v3 6.83 6.87 6.90 T:riverkeyakv2 7.19 7.19 7.21 T:norx3261v1 7.18 7.20 7.23 T:acorn128v2 7.28 7.31 7.33 T:ascon96v1 7.36 7.39 7.41 ascon128av12 7.30 7.39 7.43 T:ascon128av11 7.47 7.54 7.59 T:acorn128v3 7.91 7.94 7.97 T:ketjeminorv2 10.85 10.88 10.90 T:ascon128v11 10.85 10.88 10.91 T:ascon128v1 10.87 10.93 10.96 ascon128v12 11.90 11.93 11.97 T:aes128otrsv2 11.92 11.95 11.98 T:aes128otrsv1 12.11 12.14 12.18 T:aes128otrpv1 12.14 12.17 12.20 T:aes128n12clocv1 12.16 12.18 12.20 T:aes128n8clocv1 12.20 12.26 12.30 T:aes128otrpv2 14.20 14.24 14.26 T:twine80n6t4clocv3 15.03 15.04 15.07 T:twine80n6t4clocv2 15.99 16.01 16.04 T:aes256otrsv2 16.07 16.09 16.13 T:aes256otrpv1 16.36 16.40 16.43 T:aes256otrsv1 16.38 16.41 16.56 T:aes256otrpv2 24.20 24.21 24.22 T:aeadaes128ocbtaglen96v1 24.20 24.22 24.24 T:aeadaes128ocbtaglen64v1 25.25 25.29 25.31 T:ketjesrv1 26.34 26.35 26.37 T:colm127v1 27.47 27.49 27.51 T:proest256otrv1 28.57 28.59 28.60 T:aeadaes192ocbtaglen64v1 28.59 28.61 28.63 T:aeadaes192ocbtaglen96v1 33.01 33.04 33.06 T:aeadaes256ocbtaglen96v1 33.02 33.04 33.07 T:aeadaes256ocbtaglen64v1 47.29 47.37 47.58 T:ketjejrv1 50.75 50.90 51.47 T:aezv1 51.37 51.42 51.47 T:proest128otrv1 70.65 71.06 71.44 T:present80n6t4silcv3 78.57 78.64 78.70 T:deoxyseq128128v13 79.17 79.21 79.26 T:deoxysneq128128v13 110.60 110.78 112.09 T:deoxyseq256128v13 110.99 111.33 115.61 T:deoxysneq256128v13 124.24 124.30 124.39 T:led80n6t4silcv3 306.38 307.37 314.48 T:acorn128 1950.66 1957.62 1966.02 T:ketjesrv2 2016.52 2017.83 2021.10 T:led80n6silcv1 2021.84 2023.42 2026.99 T:led80n6t4silcv2 2165.51 2166.76 2170.09 T:present80n6silcv1 2165.76 2167.72 2170.53 T:present80n6t4silcv2 6667.55 6698.76 6709.10 T:ketjejrv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.19 0.19 0.20 T:tiaoxinv2 0.19 0.19 0.20 T:tiaoxinv1 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.25 aegis128l 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aezv3 0.24 0.25 0.26 T:aegis128l 0.40 0.41 0.41 aegis256 0.40 0.41 0.42 T:aes128gcmv1 0.40 0.41 0.41 T:aegis256 0.40 0.41 0.42 aes256gcmv1 0.41 0.41 0.42 T:aegis128 0.59 0.60 0.60 T:morus1280256v2 0.60 0.60 0.61 T:morus1280256v1 0.59 0.60 0.61 T:morus1280128v2 0.59 0.60 0.61 T:morus1280128v1 0.63 0.64 0.64 T:colm0v1 0.64 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.65 0.65 0.65 T:aes128otrpv3 0.67 0.68 0.68 T:aes128otrcv3 -0.06? 0.75? 1.57? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.87 T:deoxysneq128128v1 0.86 0.87 0.88 T:deoxyseq128128v1 0.87 0.88 0.88 T:deoxysi128v141 0.87 0.88 0.89 T:deoxysii128v141 0.90 0.90 0.90 T:aes256otrpv3 0.90 0.90 0.91 T:aes256otrcv3 0.90 0.91 0.91 T:aeadaes256ocbtaglen128v1 0.98 0.99 1.01 T:deoxysneq256128v1 0.99 1.00 1.01 T:deoxysii256v141 0.98 1.00 1.02 T:deoxysi256v141 0.98 1.00 1.02 T:deoxyseq256128v1 1.00 1.01 1.02 T:morus640128v1 0.99 1.01 1.03 T:morus640128v2 1.82 1.85 1.88 T:oceankeyakv2 1.84 1.88 1.90 T:lunarkeyakv2 2.13 2.15 2.18 T:norx6441v2 2.14 2.16 2.18 T:norx6441v3 2.16 2.18 2.21 T:norx6444v3 2.25 2.28 2.30 T:seakeyakv2 2.58 2.61 2.65 T:norx6441v1 2.68 2.70 2.75 T:aes128n12t8silcv3 2.69 2.70 2.74 T:aes128n8t8silcv2 2.72 2.72 2.72 T:aes128n8t8clocv2 2.73 2.73 2.73 T:aes128n12t8clocv2 2.73 2.73 2.73 T:aes128n12t8clocv3 2.71 2.75 2.76 T:aes128n12t8silcv2 2.75 2.75 2.75 T:aes128otrsv3 3.28 3.30 3.32 T:norx6444v2 3.28 3.32 3.35 T:norx6461v3 3.31 3.33 3.36 T:norx6461v2 3.59 3.60 3.63 T:lakekeyakv2 3.68 3.71 3.73 T:lakekeyakv1 3.72 3.72 3.73 T:aes256otrsv3 3.84 3.88 3.93 T:norx6461v1 3.98 3.98 3.99 T:norx3241v3 3.99 4.01 4.02 T:norx3241v2 4.20 4.22 4.23 T:norx6444v1 4.79 4.81 4.83 T:norx3241v1 5.54 5.65 5.72 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 5.93 5.99 6.02 T:norx3261v2 6.08 6.09 6.12 T:norx3261v3 6.82 6.88 6.90 T:riverkeyakv2 7.22 7.24 7.25 T:norx3261v1 7.24 7.27 7.29 T:ascon128av11 7.27 7.31 7.35 T:ascon96v1 7.33 7.37 7.44 ascon128av12 7.39 7.42 7.44 T:acorn128v2 7.47 7.55 7.59 T:acorn128v3 7.91 7.94 7.98 T:ketjeminorv2 10.87 10.90 10.92 ascon128v12 10.86 10.90 10.92 T:ascon128v11 10.86 10.90 10.92 T:ascon128v1 11.99 12.02 12.04 T:aes128otrsv1 12.00 12.05 12.10 T:aes128otrsv2 12.12 12.16 12.19 T:aes128n12clocv1 12.14 12.19 12.21 T:aes128n8clocv1 12.15 12.21 12.25 T:aes128otrpv1 12.24 12.31 12.37 T:aes128otrpv2 14.21 14.25 14.26 T:twine80n6t4clocv3 15.05 15.07 15.08 T:twine80n6t4clocv2 16.03 16.06 16.09 T:aes256otrsv2 16.12 16.15 16.17 T:aes256otrpv1 16.38 16.42 16.45 T:aes256otrsv1 16.42 16.45 16.50 T:aes256otrpv2 24.21 24.21 24.23 T:aeadaes128ocbtaglen96v1 24.20 24.23 24.24 T:aeadaes128ocbtaglen64v1 25.23 25.29 25.33 T:ketjesrv1 26.30 26.32 26.35 T:colm127v1 27.47 27.49 27.51 T:proest256otrv1 28.58 28.59 28.61 T:aeadaes192ocbtaglen64v1 28.58 28.59 28.61 T:aeadaes192ocbtaglen96v1 33.01 33.03 33.07 T:aeadaes256ocbtaglen64v1 32.99 33.05 33.11 T:aeadaes256ocbtaglen96v1 47.24 47.31 47.43 T:ketjejrv1 50.74 50.88 51.45 T:aezv1 51.36 51.41 51.46 T:proest128otrv1 70.71 71.27 71.46 T:present80n6t4silcv3 78.63 78.70 78.77 T:deoxyseq128128v13 79.21 79.31 79.39 T:deoxysneq128128v13 110.84 111.14 112.07 T:deoxyseq256128v13 111.12 111.23 111.97 T:deoxysneq256128v13 124.20 124.28 124.38 T:led80n6t4silcv3 326.14 327.00 330.50 T:acorn128 1951.02 1958.17 1965.35 T:ketjesrv2 2016.42 2018.01 2021.00 T:led80n6silcv1 2021.86 2023.57 2026.65 T:led80n6t4silcv2 2165.83 2167.43 2170.53 T:present80n6t4silcv2 2165.69 2168.30 2170.45 T:present80n6silcv1 6669.55 6676.99 6697.32 T:ketjejrv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.19 0.19 0.19 T:tiaoxinv2 0.19 0.19 0.19 T:tiaoxinv1 0.25 0.25 0.25 T:aezv3 0.24 0.25 0.25 aegis128l 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.26 T:aegis128l 0.40 0.41 0.41 aegis256 0.41 0.41 0.41 T:aegis256 0.40 0.41 0.42 aes256gcmv1 0.40 0.41 0.42 T:aes128gcmv1 0.41 0.42 0.42 T:aegis128 0.59 0.60 0.60 T:morus1280256v1 0.59 0.60 0.61 T:morus1280128v2 0.60 0.61 0.61 T:morus1280256v2 0.60 0.61 0.61 T:morus1280128v1 0.63 0.63 0.64 T:colm0v1 0.64 0.64 0.64 T:aeadaes128ocbtaglen128v1 0.65 0.65 0.65 T:aes128otrpv3 0.67 0.67 0.68 T:aes128otrcv3 -0.06? 0.75? 1.56? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.87 T:deoxysneq128128v1 0.87 0.87 0.88 T:deoxyseq128128v1 0.87 0.87 0.89 T:deoxysi128v141 0.87 0.88 0.88 T:deoxysii128v141 0.90 0.90 0.90 T:aes256otrpv3 0.90 0.90 0.91 T:aes256otrcv3 0.90 0.91 0.91 T:aeadaes256ocbtaglen128v1 0.98 0.99 1.00 T:deoxysneq256128v1 0.99 1.00 1.01 T:deoxysii256v141 0.99 1.00 1.02 T:deoxyseq256128v1 0.98 1.00 1.02 T:deoxysi256v141 1.00 1.01 1.02 T:morus640128v1 1.00 1.02 1.04 T:morus640128v2 1.84 1.86 1.89 T:oceankeyakv2 1.85 1.87 1.91 T:lunarkeyakv2 2.13 2.15 2.20 T:norx6441v3 2.14 2.16 2.19 T:norx6441v2 2.17 2.19 2.21 T:norx6444v3 2.27 2.28 2.30 T:seakeyakv2 2.57 2.60 2.64 T:norx6441v1 2.68 2.69 2.74 T:aes128n8t8silcv2 2.68 2.70 2.75 T:aes128n12t8silcv2 2.71 2.72 2.72 T:aes128n8t8clocv2 2.72 2.73 2.73 T:aes128n12t8clocv2 2.73 2.73 2.73 T:aes128n12t8clocv3 2.70 2.75 2.75 T:aes128n12t8silcv3 2.75 2.75 2.75 T:aes128otrsv3 3.28 3.30 3.32 T:norx6444v2 3.28 3.31 3.33 T:norx6461v3 3.31 3.33 3.35 T:norx6461v2 3.59 3.61 3.63 T:lakekeyakv2 3.69 3.72 3.74 T:lakekeyakv1 3.72 3.72 3.72 T:aes256otrsv3 3.85 3.87 3.92 T:norx6461v1 3.98 3.99 4.00 T:norx3241v3 3.99 4.01 4.03 T:norx3241v2 4.20 4.21 4.23 T:norx6444v1 4.77 4.80 4.82 T:norx3241v1 5.60 5.71 5.78 T:ketjemajorv2 5.75 5.75 5.76 T:aesjambuv1 5.93 5.96 5.99 T:norx3261v2 6.08 6.10 6.11 T:norx3261v3 6.81 6.87 6.90 T:riverkeyakv2 7.21 7.23 7.25 T:norx3261v1 7.23 7.26 7.29 T:ascon96v1 7.26 7.28 7.31 T:ascon128av11 7.33 7.38 7.44 ascon128av12 7.40 7.42 7.44 T:acorn128v2 7.47 7.54 7.59 T:acorn128v3 7.90 7.94 7.97 T:ketjeminorv2 10.87 10.90 10.92 T:ascon128v11 10.87 10.90 10.92 ascon128v12 10.87 10.90 10.93 T:ascon128v1 11.99 12.03 12.06 T:aes128otrsv1 11.99 12.04 12.11 T:aes128otrsv2 12.13 12.16 12.18 T:aes128n12clocv1 12.15 12.18 12.20 T:aes128n8clocv1 12.14 12.19 12.24 T:aes128otrpv1 12.25 12.31 12.37 T:aes128otrpv2 14.20 14.24 14.27 T:twine80n6t4clocv3 15.04 15.07 15.08 T:twine80n6t4clocv2 16.01 16.04 16.07 T:aes256otrsv2 16.12 16.15 16.18 T:aes256otrpv1 16.38 16.43 16.46 T:aes256otrsv1 16.43 16.47 16.52 T:aes256otrpv2 24.20 24.22 24.26 T:aeadaes128ocbtaglen96v1 24.20 24.23 24.27 T:aeadaes128ocbtaglen64v1 25.24 25.28 25.34 T:ketjesrv1 26.29 26.31 26.33 T:colm127v1 27.47 27.48 27.51 T:proest256otrv1 28.57 28.59 28.61 T:aeadaes192ocbtaglen96v1 28.59 28.61 28.64 T:aeadaes192ocbtaglen64v1 32.99 33.04 33.08 T:aeadaes256ocbtaglen64v1 33.02 33.06 33.09 T:aeadaes256ocbtaglen96v1 47.23 47.32 47.45 T:ketjejrv1 50.73 50.84 51.44 T:aezv1 51.35 51.40 51.45 T:proest128otrv1 70.77 71.36 71.49 T:present80n6t4silcv3 78.66 78.73 78.81 T:deoxyseq128128v13 79.18 79.30 79.42 T:deoxysneq128128v13 110.73 111.10 112.28 T:deoxyseq256128v13 111.16 111.26 111.92 T:deoxysneq256128v13 124.20 124.29 124.35 T:led80n6t4silcv3 326.16 326.97 330.48 T:acorn128 1952.45 1960.86 1967.05 T:ketjesrv2 2016.49 2017.42 2021.02 T:led80n6silcv1 2021.92 2023.68 2026.68 T:led80n6t4silcv2 2165.49 2166.75 2170.07 T:present80n6silcv1 2165.78 2167.35 2170.50 T:present80n6t4silcv2 6670.39 6686.15 6701.61 T:ketjejrv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.28 0.28 0.29 T:tiaoxinv2 0.28 0.28 0.29 T:tiaoxinv1 0.31 0.31 0.31 aegis128l 0.31 0.31 0.32 T:aegis128l 0.47 0.48 0.48 aegis256 0.49 0.49 0.50 T:aegis256 0.49 0.50 0.50 T:aegis128 0.51 0.51 0.51 T:aezv5 0.51 0.51 0.51 T:aezv4 0.52 0.52 0.52 T:aezv3 0.74 0.74 0.75 T:aeadaes128ocbtaglen128v1 0.76 0.76 0.76 T:aes128otrpv3 0.77 0.77 0.78 T:morus1280128v1 0.77 0.77 0.78 T:morus1280256v1 0.78 0.78 0.79 T:morus1280256v2 0.78 0.79 0.79 T:morus1280128v2 0.84 0.84 0.84 T:aes128otrcv3 0.89? 0.89? 1.91? T:aeadaes192ocbtaglen128v1 0.95 0.95 0.96 T:aes128gcmv1 1.02 1.03 1.04 T:deoxysneq128128v1 1.03 1.03 1.03 T:aeadaes256ocbtaglen128v1 1.05 1.05 1.05 T:aes256otrpv3 1.06 1.06 1.07 T:deoxysi128v141 1.11 1.11 1.11 aes256gcmv1 1.14 1.14 1.15 T:aes256otrcv3 1.16 1.16 1.16 T:deoxysneq256128v1 1.18 1.19 1.19 T:morus640128v1 1.19 1.19 1.20 T:morus640128v2 1.22 1.22 1.23 T:deoxysi256v141 1.26 1.26 1.26 T:colm0v1 1.51 1.51 1.52 T:deoxysii128v141 1.52 1.52 1.54 T:deoxyseq128128v1 1.70 1.70 1.71 T:deoxyseq256128v1 1.74 1.75 1.75 T:deoxysii256v141 1.81 1.81 1.81 T:aes128otrsv3 2.27 2.28 2.29 T:norx6444v3 2.48 2.48 2.48 T:aes256otrsv3 2.48 2.49 2.51 T:norx6441v2 2.52 2.53 2.54 T:norx6441v3 2.82 2.82 2.82 T:aes128n12t8clocv3 2.82 2.82 2.82 T:aes128n12t8clocv2 2.82 2.82 2.83 T:aes128n8t8clocv2 2.84 2.85 2.87 T:aes128n12t8silcv3 2.84 2.86 2.87 T:aes128n12t8silcv2 2.87 2.87 2.87 T:aes128n8t8silcv2 2.90 2.92 2.94 T:norx6441v1 3.38 3.39 3.40 T:seakeyakv2 3.81 3.84 3.86 T:norx6461v3 3.84 3.85 3.87 T:norx6461v2 4.29 4.30 4.31 T:norx3241v2 4.30 4.30 4.32 T:norx3241v3 4.33 4.34 4.35 T:lakekeyakv2 4.38 4.40 4.42 T:norx6461v1 4.56 4.56 4.58 T:oceankeyakv2 4.56 4.56 4.58 T:lakekeyakv1 5.01 5.02 5.03 T:norx6444v2 5.06 5.08 5.10 T:norx3241v1 5.93 5.94 5.94 T:aesjambuv1 6.01 6.02 6.03 T:norx6444v1 6.48 6.50 6.52 T:norx3261v3 6.54 6.56 6.57 T:norx3261v2 7.54 7.55 7.57 T:riverkeyakv2 7.57 7.59 7.60 T:ascon96v1 7.60 7.62 7.64 T:acorn128v3 7.61 7.62 7.63 T:norx3261v1 7.60 7.63 7.65 T:ascon128av11 7.66 7.68 7.70 ascon128av12 7.85 7.87 7.88 T:lunarkeyakv2 8.04 8.05 8.06 T:acorn128v2 8.47 8.50 8.53 T:ketjemajorv2 10.22 10.23 10.25 T:ketjeminorv2 11.05 11.06 11.07 T:ascon128v11 11.05 11.07 11.08 T:ascon128v1 11.09 11.11 11.13 ascon128v12 13.09 13.10 13.12 T:aes128otrsv1 13.12 13.14 13.18 T:aes128otrsv2 13.25 13.28 13.30 T:aes128otrpv2 13.30 13.32 13.34 T:aes128otrpv1 14.71 14.72 14.73 T:twine80n6t4clocv3 15.59 15.60 15.61 T:twine80n6t4clocv2 17.32 17.34 17.35 T:aes256otrsv2 17.39 17.40 17.42 T:aes256otrpv1 17.53 17.55 17.57 T:aes256otrsv1 17.55 17.57 17.62 T:aes256otrpv2 17.76 17.80 17.98 T:aes128n12clocv1 17.79 17.81 17.83 T:aes128n8clocv1 25.08 25.09 25.10 T:aeadaes128ocbtaglen64v1 25.08 25.10 25.11 T:aeadaes128ocbtaglen96v1 29.04 29.09 29.12 T:ketjesrv1 29.53 29.54 29.55 T:aeadaes192ocbtaglen96v1 29.53 29.55 29.57 T:aeadaes192ocbtaglen64v1 29.66 29.67 29.69 T:proest256otrv1 34.10 34.11 34.12 T:aeadaes256ocbtaglen64v1 34.10 34.11 34.12 T:aeadaes256ocbtaglen96v1 41.12 41.14 41.16 T:colm127v1 53.06 53.09 53.12 T:proest128otrv1 53.96 54.01 54.10 T:ketjejrv1 71.97 72.14 72.68 T:present80n6t4silcv3 80.07 80.11 80.16 T:deoxysneq128128v13 102.23 102.56 103.39 T:aezv1 112.22 112.33 116.44 T:deoxysneq256128v13 120.39 120.41 120.45 T:deoxyseq128128v13 125.74 125.79 125.84 T:led80n6t4silcv3 169.02 169.17 171.05 T:deoxyseq256128v13 355.30 355.75 359.86 T:acorn128 2095.12 2107.70 2115.70 T:ketjesrv2 3042.79 3043.12 3043.54 T:led80n6silcv1 3049.92 3050.67 3051.91 T:led80n6t4silcv2 3269.61 3269.93 3270.39 T:present80n6silcv1 3269.47 3269.95 3270.62 T:present80n6t4silcv2 7016.62 7022.19 7029.38 T:ketjejrv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.31 0.31 0.32 T:aegis128l 0.32 0.32 0.32 aegis128l 0.36 0.36 0.36 T:tiaoxinv2 0.36 0.36 0.36 T:tiaoxinv1 0.47 0.47 0.47 T:aegis256 0.49 0.49 0.49 T:aegis128 0.51 0.51 0.51 T:aezv5 0.51 0.51 0.51 T:aezv4 0.52 0.52 0.52 T:aezv3 0.52 0.52 0.53 aegis256 0.75 0.75 0.75 T:aeadaes128ocbtaglen128v1 0.78 0.78 0.78 T:aes128otrpv3 0.79 0.79 0.79 T:morus1280256v1 0.79 0.79 0.79 T:morus1280128v1 0.79 0.80 0.80 T:morus1280256v2 0.80 0.80 0.81 T:morus1280128v2 0.87 0.87 0.87 T:aes128otrcv3 0.88 0.89 0.89 T:aes128gcmv1 0.89? 0.89? 1.42? T:aeadaes192ocbtaglen128v1 1.05 1.05 1.05 T:aeadaes256ocbtaglen128v1 1.07 1.07 1.08 T:aes256otrpv3 1.10 1.10 1.10 aes256gcmv1 1.17 1.17 1.18 T:morus640128v1 1.17 1.18 1.18 T:aes256otrcv3 1.20 1.20 1.21 T:morus640128v2 1.23 1.23 1.24 T:deoxysi128v141 1.26 1.26 1.27 T:deoxysneq128128v1 1.32 1.32 1.32 T:colm0v1 1.36 1.36 1.36 T:deoxysneq256128v1 1.43 1.43 1.44 T:deoxysi256v141 1.56 1.56 1.56 T:deoxysii128v141 1.80 1.80 1.81 T:deoxysii256v141 1.83 1.83 1.84 T:aes128otrsv3 1.91 1.91 1.92 T:deoxyseq128128v1 2.02 2.02 2.03 T:deoxyseq256128v1 2.27 2.28 2.29 T:norx6444v3 2.45 2.46 2.48 T:norx6441v3 2.46 2.47 2.48 T:norx6441v2 2.51 2.52 2.52 T:aes256otrsv3 2.81 2.81 2.81 T:aes128n8t8clocv2 2.81 2.81 2.81 T:aes128n12t8clocv2 2.81 2.81 2.81 T:aes128n12t8clocv3 2.82 2.83 2.84 T:aes128n8t8silcv2 2.82 2.83 2.85 T:aes128n12t8silcv2 2.83 2.85 2.86 T:aes128n12t8silcv3 2.87 2.89 2.90 T:norx6441v1 3.44 3.45 3.46 T:seakeyakv2 3.74 3.75 3.76 T:norx6461v3 3.75 3.77 3.79 T:norx6461v2 4.22 4.23 4.24 T:norx3241v2 4.23 4.23 4.24 T:norx3241v3 4.28 4.30 4.32 T:norx6461v1 4.33 4.34 4.36 T:lakekeyakv2 4.60 4.60 4.62 T:lakekeyakv1 4.60 4.61 4.62 T:oceankeyakv2 4.92 4.94 4.96 T:norx3241v1 5.04 5.06 5.08 T:norx6444v2 5.99 6.01 6.02 T:norx6444v1 6.03 6.03 6.03 T:aesjambuv1 6.44 6.45 6.46 T:norx3261v3 6.44 6.45 6.47 T:norx3261v2 7.56 7.57 7.58 T:norx3261v1 7.56 7.58 7.60 ascon128av12 7.59 7.60 7.63 T:riverkeyakv2 7.61 7.62 7.64 T:ascon128av11 7.64 7.65 7.67 T:ascon96v1 7.90 7.91 7.93 T:lunarkeyakv2 8.24 8.25 8.26 T:acorn128v2 8.31 8.35 8.38 T:ketjemajorv2 8.45 8.47 8.50 T:acorn128v3 10.15 10.17 10.18 T:ketjeminorv2 10.95 10.96 10.98 T:ascon128v1 10.94 10.96 10.98 T:ascon128v11 11.07 11.10 11.12 ascon128v12 13.45 13.48 13.50 T:aes128otrpv1 13.49 13.51 13.54 T:aes128otrsv2 13.60 13.61 13.63 T:aes128otrsv1 13.60 13.62 13.65 T:aes128otrpv2 14.71 14.72 14.73 T:twine80n6t4clocv3 15.53 15.54 15.55 T:twine80n6t4clocv2 17.31 17.34 17.51 T:aes128n12clocv1 17.49 17.51 17.52 T:aes128n8clocv1 17.54 17.57 17.59 T:aes256otrpv1 17.60 17.62 17.64 T:aes256otrsv2 17.61 17.63 17.66 T:aes256otrsv1 17.77 17.79 17.81 T:aes256otrpv2 29.35 29.45 29.47 T:ketjesrv1 29.55 29.58 29.63 T:aeadaes128ocbtaglen96v1 29.58 29.61 29.62 T:aeadaes128ocbtaglen64v1 29.70 29.71 29.73 T:proest256otrv1 35.04 35.06 35.10 T:aeadaes192ocbtaglen64v1 35.06 35.09 35.14 T:aeadaes192ocbtaglen96v1 40.67 40.71 40.76 T:aeadaes256ocbtaglen64v1 40.69 40.71 40.74 T:aeadaes256ocbtaglen96v1 49.78 49.81 49.83 T:colm127v1 53.33 53.35 53.38 T:proest128otrv1 54.43 54.46 54.68 T:ketjejrv1 71.89 72.18 72.67 T:present80n6t4silcv3 93.88 93.94 94.07 T:deoxysneq128128v13 102.63 103.03 103.92 T:aezv1 120.41 120.44 120.49 T:deoxyseq128128v13 125.69 125.73 125.78 T:led80n6t4silcv3 131.95 132.04 133.07 T:deoxysneq256128v13 169.10 169.24 170.97 T:deoxyseq256128v13 377.43 377.99 379.86 T:acorn128 2097.73 2102.14 2116.69 T:ketjesrv2 3042.72 3042.98 3043.29 T:led80n6silcv1 3050.51 3050.71 3051.05 T:led80n6t4silcv2 3269.67 3270.27 3271.47 T:present80n6silcv1 3269.84 3270.51 3270.95 T:present80n6t4silcv2 7004.38 7023.78 7038.14 T:ketjejrv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.31 0.31 0.32 T:aegis128l 0.31 0.31 0.32 T:aezv5 0.32 0.32 0.32 T:aezv4 0.32 0.32 0.32 T:aezv3 0.33 0.33 0.33 aegis128l 0.36 0.36 0.36 T:tiaoxinv2 0.36 0.36 0.36 T:tiaoxinv1 0.47 0.47 0.47 T:aegis256 0.49 0.49 0.49 T:aegis128 0.52 0.52 0.52 aegis256 0.75 0.75 0.75 T:aeadaes128ocbtaglen128v1 0.78 0.78 0.78 T:aes128otrpv3 0.78 0.78 0.79 T:morus1280256v1 0.78 0.79 0.79 T:morus1280128v1 0.79 0.79 0.80 T:morus1280256v2 0.80 0.80 0.81 T:morus1280128v2 0.87 0.87 0.87 T:aes128otrcv3 0.88 0.89 0.89 T:aes128gcmv1 0.89? 0.89? 1.91? T:aeadaes192ocbtaglen128v1 1.05 1.05 1.05 T:aeadaes256ocbtaglen128v1 1.07 1.07 1.08 T:aes256otrpv3 1.10 1.10 1.10 aes256gcmv1 1.17 1.17 1.18 T:morus640128v1 1.17 1.18 1.18 T:aes256otrcv3 1.21 1.21 1.22 T:morus640128v2 1.23 1.23 1.24 T:deoxysi128v141 1.26 1.26 1.26 T:deoxysneq128128v1 1.32 1.32 1.32 T:colm0v1 1.35 1.36 1.36 T:deoxysneq256128v1 1.43 1.43 1.44 T:deoxysi256v141 1.56 1.56 1.56 T:deoxysii128v141 1.80 1.80 1.80 T:deoxysii256v141 1.83 1.83 1.83 T:aes128otrsv3 1.91 1.91 1.91 T:deoxyseq128128v1 2.02 2.02 2.03 T:deoxyseq256128v1 2.27 2.28 2.29 T:norx6444v3 2.45 2.46 2.47 T:norx6441v3 2.46 2.47 2.48 T:norx6441v2 2.51 2.52 2.52 T:aes256otrsv3 2.80 2.80 2.81 T:aes128n8t8clocv2 2.81 2.81 2.81 T:aes128n12t8clocv2 2.81 2.81 2.81 T:aes128n12t8clocv3 2.82 2.83 2.84 T:aes128n8t8silcv2 2.83 2.84 2.85 T:aes128n12t8silcv2 2.83 2.84 2.85 T:aes128n12t8silcv3 2.87 2.88 2.90 T:norx6441v1 3.45 3.46 3.46 T:seakeyakv2 3.75 3.76 3.78 T:norx6461v3 3.76 3.78 3.79 T:norx6461v2 4.21 4.23 4.25 T:norx3241v2 4.22 4.23 4.24 T:norx3241v3 4.29 4.31 4.33 T:norx6461v1 4.35 4.36 4.37 T:lakekeyakv2 4.61 4.62 4.63 T:lakekeyakv1 4.62 4.62 4.63 T:oceankeyakv2 4.92 4.94 4.95 T:norx3241v1 5.05 5.06 5.08 T:norx6444v2 6.00 6.01 6.02 T:norx6444v1 6.03 6.03 6.03 T:aesjambuv1 6.44 6.44 6.45 T:norx3261v3 6.44 6.46 6.47 T:norx3261v2 7.57 7.57 7.58 T:norx3261v1 7.56 7.59 7.61 ascon128av12 7.61 7.62 7.64 T:riverkeyakv2 7.60 7.62 7.64 T:ascon128av11 7.62 7.63 7.66 T:ascon96v1 7.92 7.93 7.95 T:lunarkeyakv2 8.24 8.24 8.25 T:acorn128v2 8.33 8.37 8.38 T:ketjemajorv2 8.45 8.47 8.49 T:acorn128v3 10.17 10.19 10.22 T:ketjeminorv2 10.94 10.96 10.97 T:ascon128v1 10.95 10.96 10.98 T:ascon128v11 11.08 11.10 11.11 ascon128v12 13.47 13.49 13.52 T:aes128otrpv1 13.49 13.52 13.55 T:aes128otrsv2 13.60 13.63 13.65 T:aes128otrsv1 13.61 13.64 13.66 T:aes128otrpv2 14.70 14.70 14.72 T:twine80n6t4clocv3 15.54 15.54 15.55 T:twine80n6t4clocv2 17.31 17.33 17.49 T:aes128n12clocv1 17.51 17.52 17.54 T:aes128n8clocv1 17.55 17.58 17.60 T:aes256otrpv1 17.62 17.63 17.65 T:aes256otrsv2 17.64 17.65 17.67 T:aes256otrsv1 17.79 17.80 17.82 T:aes256otrpv2 29.40 29.45 29.49 T:ketjesrv1 29.56 29.59 29.62 T:aeadaes128ocbtaglen96v1 29.57 29.60 29.63 T:aeadaes128ocbtaglen64v1 29.70 29.71 29.73 T:proest256otrv1 35.04 35.06 35.08 T:aeadaes192ocbtaglen64v1 35.06 35.09 35.13 T:aeadaes192ocbtaglen96v1 40.66 40.68 40.72 T:aeadaes256ocbtaglen64v1 40.69 40.72 40.75 T:aeadaes256ocbtaglen96v1 49.78 49.80 49.83 T:colm127v1 53.31 53.35 53.38 T:proest128otrv1 54.51 54.63 54.92 T:ketjejrv1 71.94 72.22 72.63 T:present80n6t4silcv3 93.97 93.99 94.02 T:deoxysneq128128v13 102.58 102.87 103.82 T:aezv1 120.46 120.50 120.54 T:deoxyseq128128v13 125.72 125.77 125.81 T:led80n6t4silcv3 132.02 132.13 133.19 T:deoxysneq256128v13 169.27 169.90 171.03 T:deoxyseq256128v13 377.40 377.95 379.85 T:acorn128 2103.19 2106.66 2121.59 T:ketjesrv2 3042.58 3042.87 3043.41 T:led80n6silcv1 3050.56 3050.78 3051.04 T:led80n6t4silcv2 3269.32 3269.79 3270.68 T:present80n6t4silcv2 3269.51 3270.18 3270.96 T:present80n6silcv1 7015.89 7050.35 7058.05 T:ketjejrv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.73 1.74 1.74 aegis128l 1.74 1.75 1.77 T:aegis128 1.74 1.77 1.89 T:aegis128l 2.01 2.02 2.03 T:aegis256 2.19 2.21 2.23 T:aezv5 2.28 2.30 2.35 T:aezv3 2.29 2.30 2.37 T:aezv4 2.30 2.31 2.32 aegis256 2.30 2.31 2.39 T:tiaoxinv2 2.31 2.32 2.37 T:tiaoxinv1 3.03 3.08 3.12 T:aeadaes128ocbtaglen128v1 3.45 3.47 3.48 T:aes128otrpv3 3.91 3.94 4.01 T:deoxysneq128128v1 4.17 4.20 4.21 T:aes128otrsv3 4.16? 4.27? 17.72? T:aeadaes192ocbtaglen128v1 4.26 4.32 4.38 T:morus640128v1 4.33 4.36 4.46 T:morus1280128v1 4.38 4.40 4.44 T:morus1280256v1 4.41 4.45 4.49 T:aeadaes256ocbtaglen128v1 4.43 4.46 4.49 T:colm0v1 4.48 4.59 4.71 T:morus640128v2 4.58 4.60 4.62 T:aes256otrpv3 4.61 4.68 4.81 T:morus1280128v2 4.67 4.70 4.72 T:morus1280256v2 4.63 4.72 4.88 T:deoxysneq256128v1 4.74 4.76 4.80 T:aes128otrcv3 4.75 4.76 4.79 T:aes128n12t8clocv2 4.76 4.77 4.78 T:aes128n8t8clocv2 4.76 4.77 4.78 T:aes128n12t8clocv3 4.78 4.85 4.88 T:deoxysi128v141 5.32 5.34 5.35 T:aes256otrsv3 5.62 5.63 5.63 T:aes128n12t8silcv2 5.63 5.63 5.64 T:aes128n8t8silcv2 5.63 5.63 5.64 T:aes128n12t8silcv3 5.77 5.82 5.89 T:deoxysi256v141 5.91 5.94 6.00 T:aes128gcmv1 6.10 6.13 6.17 T:aes256otrcv3 6.46 6.49 6.52 T:deoxyseq128128v1 7.67 7.71 7.77 T:deoxyseq256128v1 7.82 7.86 7.92 aes256gcmv1 8.28 8.31 8.36 T:deoxysii128v141 8.38 8.42 8.55 T:norx6441v3 8.48 8.48 8.61 T:norx6441v2 8.44 8.52 8.60 T:norx6441v1 9.26 9.28 9.30 T:aesjambuv1 9.87 9.95 10.03 T:deoxysii256v141 10.60 10.68 10.79 T:norx3241v1 10.65 10.72 10.78 T:norx3241v2 10.69 10.80 10.94 T:norx3241v3 11.39 11.56 11.64 T:ascon96v1 11.54 11.68 11.83 T:ascon128av11 11.63 11.70 12.05 ascon128av12 12.33 12.44 12.59 T:norx6461v1 12.39 12.47 12.63 T:norx6461v2 12.34 12.55 12.66 T:norx6461v3 14.68 14.76 14.93 T:ascon128v1 14.69 14.79 15.01 T:ascon128v11 14.76 14.85 15.18 ascon128v12 14.73 14.88 15.06 T:norx6444v3 15.13 15.20 15.48 T:lakekeyakv1 15.86 15.93 16.07 T:norx3261v2 16.13 16.17 16.25 T:norx3261v1 16.18 16.26 16.30 T:norx3261v3 17.54 17.60 17.83 T:riverkeyakv2 18.65 18.74 18.92 T:lakekeyakv2 21.52 21.56 21.63 T:twine80n6t4clocv2 21.60 21.69 21.97 T:aes128n8clocv1 21.62 21.82 22.15 T:aes128n12clocv1 21.96 22.01 22.07 T:twine80n6t4clocv3 22.08 22.17 22.34 T:aes128otrsv1 22.14 22.25 22.44 T:aes128otrpv2 22.20 22.29 22.48 T:aes128otrsv2 22.75 22.85 23.03 T:aes128otrpv1 28.61 28.72 28.90 T:aes256otrsv1 28.84 28.92 29.22 T:aes256otrsv2 29.29 29.40 29.61 T:aes256otrpv2 29.33 29.42 29.53 T:aes256otrpv1 31.43 31.62 31.84 T:seakeyakv2 31.58 31.74 31.99 T:acorn128v2 31.68 31.77 32.56 T:acorn128v3 34.30 34.57 35.13 T:ketjeminorv2 36.08 36.20 36.49 T:norx6444v2 39.91 39.97 40.10 T:aeadaes128ocbtaglen64v1 39.94 40.01 40.10 T:aeadaes128ocbtaglen96v1 42.47 42.56 42.69 T:norx6444v1 45.65 45.88 46.14 T:ketjesrv1 46.06 46.13 46.21 T:aeadaes192ocbtaglen64v1 46.11 46.19 46.31 T:aeadaes192ocbtaglen96v1 51.02 51.16 51.36 T:oceankeyakv2 52.21 52.92 53.61 T:ketjemajorv2 53.53 53.62 53.81 T:aeadaes256ocbtaglen96v1 53.49 53.65 53.73 T:aeadaes256ocbtaglen64v1 59.04 59.13 59.43 T:colm127v1 71.47 71.72 72.16 T:ketjejrv1 84.94 85.00 85.11 T:proest256otrv1 89.87 90.14 90.72 T:present80n6t4silcv3 90.40 90.63 90.94 T:deoxysneq128128v13 102.83 103.09 103.40 T:proest128otrv1 118.83 119.29 120.02 T:aezv1 127.48 128.01 131.41 T:deoxysneq256128v13 128.23 128.56 129.03 T:lunarkeyakv2 149.72 149.90 150.10 T:led80n6t4silcv3 149.86 150.00 150.24 T:deoxyseq128128v13 211.07 211.76 213.07 T:deoxyseq256128v13 1264.61 1266.46 1275.42 T:acorn128 2461.32 2468.02 2476.68 T:ketjesrv2 3405.50 3406.20 3406.92 T:led80n6silcv1 3416.87 3417.78 3419.11 T:led80n6t4silcv2 3659.70 3660.17 3660.83 T:present80n6t4silcv2 3661.35 3662.32 3663.64 T:present80n6silcv1 7794.50 7800.64 7822.23 T:ketjejrv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.75 1.77 1.83 T:aegis128l 1.81 1.82 1.82 T:aegis128 1.90 1.91 1.92 aegis128l 2.04 2.05 2.07 T:aegis256 2.22 2.23 2.26 T:aezv5 2.27 2.29 2.36 T:aezv3 2.31 2.32 2.36 T:tiaoxinv2 2.32 2.34 2.39 T:tiaoxinv1 2.33 2.34 2.38 T:aezv4 2.34 2.35 2.37 aegis256 3.28 3.33 3.38 T:aeadaes128ocbtaglen128v1 3.55 3.58 3.59 T:aes128otrpv3 4.23 4.30 4.38 T:morus640128v1 4.38 4.38 4.40 T:aes128otrsv3 4.47 4.52 4.60 T:morus1280256v1 4.51 4.55 4.59 T:morus1280128v1 4.58 4.65 4.74 T:morus640128v2 4.66? 4.69? 18.63? T:aeadaes192ocbtaglen128v1 4.74 4.79 4.82 T:aeadaes256ocbtaglen128v1 4.79 4.80 4.80 T:aes128n8t8clocv2 4.80 4.81 4.82 T:aes128n12t8clocv3 4.80 4.81 4.82 T:aes128n12t8clocv2 4.77 4.82 4.87 T:morus1280256v2 4.80 4.84 4.85 T:aes256otrpv3 4.79 4.85 4.92 T:morus1280128v2 4.96 4.96 4.98 T:aes128otrcv3 5.19 5.21 5.24 T:colm0v1 5.70 5.70 5.72 T:aes128n8t8silcv2 5.71 5.73 5.74 T:aes128n12t8silcv2 5.72 5.74 5.75 T:aes128n12t8silcv3 5.74 5.77 5.82 T:aes256otrsv3 5.87 5.90 5.95 T:deoxysneq128128v1 5.90 5.94 5.99 T:deoxysneq256128v1 5.94 5.98 6.04 T:aes128gcmv1 6.42 6.47 6.59 T:deoxysi128v141 6.46 6.49 6.53 T:aes256otrcv3 8.00 8.04 8.08 aes256gcmv1 8.07 8.20 8.42 T:deoxysi256v141 8.52 8.69 8.77 T:norx6441v3 8.64 8.74 8.83 T:norx6441v1 8.64 8.74 8.87 T:norx6441v2 9.12 9.16 9.25 T:deoxyseq128128v1 9.25 9.29 9.41 T:deoxysii128v141 9.27 9.30 9.38 T:deoxyseq256128v1 9.50 9.51 9.53 T:aesjambuv1 10.70 10.79 10.86 T:norx3241v3 10.83 10.86 10.92 T:norx3241v1 10.90 10.95 11.03 T:norx3241v2 11.27 11.33 11.44 T:deoxysii256v141 11.46 11.55 11.76 T:ascon96v1 11.55 11.63 11.77 T:ascon128av11 11.61 11.71 12.00 ascon128av12 12.59 12.71 12.86 T:norx6461v3 12.67 12.72 12.88 T:norx6461v2 12.68 12.81 12.91 T:norx6461v1 14.58 14.65 14.80 T:ascon128v1 14.62 14.66 14.84 T:ascon128v11 14.62 14.75 14.85 T:norx6444v3 14.81 14.93 15.15 ascon128v12 15.17 15.22 15.47 T:lakekeyakv1 16.07 16.15 16.25 T:norx3261v3 16.01 16.15 16.22 T:norx3261v2 16.26 16.34 16.39 T:norx3261v1 17.60 17.67 17.91 T:riverkeyakv2 18.69 18.76 18.87 T:lakekeyakv2 21.54 21.57 21.64 T:twine80n6t4clocv2 21.53 21.58 21.71 T:aes128n8clocv1 21.46 21.66 21.90 T:aes128n12clocv1 22.10 22.13 22.16 T:twine80n6t4clocv3 22.76 22.83 22.95 T:aes128otrpv2 22.78 22.87 23.00 T:aes128otrsv1 22.87 22.96 23.11 T:aes128otrsv2 23.13 23.20 23.29 T:aes128otrpv1 28.93 29.01 29.14 T:aes256otrsv1 29.46 29.53 29.71 T:aes256otrsv2 29.66 29.72 29.81 T:aes256otrpv1 29.74 29.82 29.94 T:aes256otrpv2 31.49 31.59 31.86 T:seakeyakv2 31.92 32.01 32.20 T:acorn128v2 32.06 32.24 33.01 T:acorn128v3 33.69 33.91 34.21 T:ketjeminorv2 36.01 36.16 36.38 T:norx6444v2 42.52 42.66 42.92 T:norx6444v1 46.19 46.35 46.63 T:ketjesrv1 47.77 47.90 48.03 T:aeadaes128ocbtaglen96v1 47.87 47.94 48.09 T:aeadaes128ocbtaglen64v1 51.17 51.33 51.64 T:oceankeyakv2 52.13 52.60 53.58 T:ketjemajorv2 55.31 55.46 55.67 T:aeadaes192ocbtaglen64v1 55.48 55.58 55.76 T:aeadaes192ocbtaglen96v1 64.62 64.80 65.07 T:aeadaes256ocbtaglen64v1 64.79 64.90 65.22 T:aeadaes256ocbtaglen96v1 67.92 68.04 68.24 T:colm127v1 71.99 72.17 72.44 T:ketjejrv1 85.75 85.89 86.15 T:proest256otrv1 90.08 90.39 90.74 T:present80n6t4silcv3 103.96 104.20 104.40 T:proest128otrv1 104.37 104.48 104.67 T:deoxysneq128128v13 123.03 123.46 124.12 T:aezv1 128.62 128.83 129.23 T:lunarkeyakv2 147.13 147.67 148.66 T:deoxysneq256128v13 149.79 149.99 150.52 T:deoxyseq128128v13 149.90 150.12 150.38 T:led80n6t4silcv3 212.06 212.70 214.26 T:deoxyseq256128v13 1298.63 1299.91 1303.33 T:acorn128 2463.93 2470.59 2481.80 T:ketjesrv2 3405.88 3406.54 3407.24 T:led80n6silcv1 3414.08 3415.23 3416.88 T:led80n6t4silcv2 3660.38 3661.21 3662.10 T:present80n6t4silcv2 3663.45 3664.34 3665.57 T:present80n6silcv1 7788.80 7801.30 7826.30 T:ketjejrv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.75 1.78 1.85 T:aegis128l 1.80 1.81 1.83 T:aegis128 1.90 1.91 1.94 T:aezv5 1.94 1.94 1.95 aegis128l 1.95 1.96 2.00 T:aezv3 2.01 2.03 2.11 T:aezv4 2.04 2.05 2.06 T:aegis256 2.31 2.32 2.38 T:tiaoxinv2 2.33 2.34 2.38 T:tiaoxinv1 2.34 2.35 2.36 aegis256 3.28 3.34 3.39 T:aeadaes128ocbtaglen128v1 3.55 3.57 3.59 T:aes128otrpv3 4.27 4.31 4.35 T:morus640128v1 4.38 4.38 4.39 T:aes128otrsv3 4.49 4.52 4.56 T:morus1280256v1 4.52 4.55 4.59 T:morus1280128v1 4.57 4.62 4.71 T:morus640128v2 4.67? 4.70? 16.82? T:aeadaes192ocbtaglen128v1 4.74 4.75 4.76 T:aes128n8t8clocv2 4.73 4.76 4.80 T:aeadaes256ocbtaglen128v1 4.75 4.77 4.81 T:aes128n12t8clocv2 4.75 4.77 4.84 T:aes128n12t8clocv3 4.81 4.83 4.85 T:aes256otrpv3 4.79 4.84 4.91 T:morus1280128v2 4.80 4.84 4.86 T:morus1280256v2 4.95 4.95 4.97 T:aes128otrcv3 5.24 5.26 5.43 T:colm0v1 5.63 5.65 5.66 T:aes128n8t8silcv2 5.64 5.65 5.69 T:aes128n12t8silcv3 5.65 5.66 5.68 T:aes128n12t8silcv2 5.73 5.75 5.78 T:aes256otrsv3 5.76 5.78 5.83 T:deoxysneq128128v1 5.74 5.79 5.82 T:deoxysneq256128v1 5.95 5.99 6.04 T:aes128gcmv1 6.41 6.45 6.52 T:deoxysi128v141 6.46 6.48 6.50 T:aes256otrcv3 8.10 8.14 8.23 aes256gcmv1 8.10 8.19 8.42 T:deoxysi256v141 8.55 8.62 8.71 T:norx6441v3 8.67 8.74 8.80 T:norx6441v2 8.66 8.75 8.80 T:norx6441v1 9.10 9.15 9.22 T:deoxyseq128128v1 9.24 9.27 9.30 T:deoxysii128v141 9.25 9.32 9.39 T:deoxyseq256128v1 9.47 9.48 9.50 T:aesjambuv1 10.72 10.79 10.86 T:norx3241v3 10.76 10.87 10.94 T:norx3241v1 10.90 10.95 11.01 T:norx3241v2 11.28 11.33 11.41 T:deoxysii256v141 11.43 11.53 11.67 T:ascon96v1 11.40 11.55 11.72 T:ascon128av11 11.59 11.68 11.83 ascon128av12 12.61 12.70 12.78 T:norx6461v2 12.59 12.71 12.85 T:norx6461v3 12.69 12.80 12.91 T:norx6461v1 14.58 14.62 14.73 T:ascon128v1 14.54 14.63 14.73 T:ascon128v11 14.62 14.72 14.85 T:norx6444v3 14.80 14.89 15.09 ascon128v12 15.26 15.32 15.46 T:lakekeyakv1 15.98 16.08 16.18 T:norx3261v2 16.10 16.17 16.26 T:norx3261v3 16.27 16.29 16.36 T:norx3261v1 17.66 17.74 17.92 T:riverkeyakv2 18.71 18.79 18.94 T:lakekeyakv2 21.47 21.49 21.57 T:twine80n6t4clocv2 21.49 21.57 21.72 T:aes128n8clocv1 21.40 21.65 21.98 T:aes128n12clocv1 22.07 22.10 22.13 T:twine80n6t4clocv3 22.87 22.94 23.10 T:aes128otrpv2 22.85 22.95 23.04 T:aes128otrsv1 22.94 23.03 23.16 T:aes128otrsv2 23.22 23.29 23.42 T:aes128otrpv1 29.07 29.17 29.31 T:aes256otrsv1 29.53 29.62 29.81 T:aes256otrsv2 29.68 29.79 29.94 T:aes256otrpv1 29.81 29.92 30.05 T:aes256otrpv2 31.50 31.60 31.76 T:seakeyakv2 31.93 32.04 32.12 T:acorn128v2 32.10 32.20 33.00 T:acorn128v3 33.78 33.96 34.15 T:ketjeminorv2 35.98 36.08 36.23 T:norx6444v2 42.61 42.73 42.87 T:norx6444v1 46.24 46.43 46.68 T:ketjesrv1 47.74 47.83 47.95 T:aeadaes128ocbtaglen96v1 47.88 47.94 48.02 T:aeadaes128ocbtaglen64v1 51.28 51.47 51.70 T:oceankeyakv2 52.09 52.38 52.76 T:ketjemajorv2 55.26 55.37 55.49 T:aeadaes192ocbtaglen64v1 55.45 55.56 55.67 T:aeadaes192ocbtaglen96v1 64.64 64.77 64.88 T:aeadaes256ocbtaglen64v1 64.76 64.87 64.99 T:aeadaes256ocbtaglen96v1 67.62 67.77 67.94 T:colm127v1 73.07 73.25 73.55 T:ketjejrv1 84.15 84.20 84.29 T:proest256otrv1 89.89 90.20 90.60 T:present80n6t4silcv3 103.92 104.15 104.34 T:proest128otrv1 105.24 105.42 105.69 T:deoxysneq128128v13 123.09 123.46 123.88 T:aezv1 128.83 129.09 129.38 T:lunarkeyakv2 147.01 147.40 148.45 T:deoxysneq256128v13 149.73 149.96 150.15 T:led80n6t4silcv3 150.77 151.04 151.34 T:deoxyseq128128v13 212.13 212.67 214.57 T:deoxyseq256128v13 1298.63 1300.03 1303.59 T:acorn128 2562.38 2570.22 2578.88 T:ketjesrv2 3405.28 3405.94 3407.02 T:led80n6silcv1 3413.54 3414.22 3415.08 T:led80n6t4silcv2 3660.14 3660.91 3661.67 T:present80n6t4silcv2 3663.64 3664.09 3664.90 T:present80n6silcv1 7959.44 7975.39 8012.92 T:ketjejrv2