VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen 5 (b00f21); 2024 AMD EPYC 9555; 64 x 3200MHz; tripwire, supercop-20261004

[Page version: 20261007 20:54:48]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.13 0.14 0.14 T:tiaoxinv1 0.13 0.14 0.14 T:tiaoxinv2 0.19 0.20 0.21 T:aegis128l 0.11? 0.20? 0.26? T:aeadaes128ocbtaglen128v1 0.20 0.21 0.22 aegis128l 0.19? 0.27? 0.38? T:aeadaes256ocbtaglen128v1 0.24? 0.27? 0.29? T:aes128gcmv1 0.35 0.35 0.36 T:aezv4 0.35 0.35 0.36 T:aezv3 0.37 0.37 0.38 T:aezv5 0.37 0.38 0.38 aegis256 0.37 0.38 0.38 T:aegis128 0.27? 0.40? 0.52? T:aeadaes192ocbtaglen128v1 0.44 0.44 0.44 T:aes128otrcv3 0.52 0.52 0.54 T:deoxysi128v141 0.58 0.58 0.59 T:aes256otrcv3 0.57 0.59 0.61 T:deoxysi256v141 0.59 0.60 0.61 T:deoxysneq128128v1 0.59 0.60 0.61 T:morus1280128v2 0.59 0.60 0.61 T:morus1280128v1 0.60 0.60 0.61 T:morus1280256v2 0.59 0.60 0.61 T:morus1280256v1 0.63 0.66 0.69 T:lunarkeyakv2 0.66 0.67 0.68 T:deoxysneq256128v1 0.71 0.73 0.75 T:aes128otrpv3 0.73? 0.76? 1.28? T:aes128otrsv3 0.82 0.86 0.91 T:oceankeyakv2 0.88 0.88 0.89 T:aes256otrsv3 0.88 0.89 0.90 T:aes256otrpv3 0.94 0.96 0.97 T:norx6444v3 1.08 1.09 1.11 T:deoxysii128v141 1.19 1.20 1.21 T:deoxysii256v141 1.19 1.21 1.22 T:deoxyseq128128v1 1.24 1.27 1.29 aes256gcmv1 1.25? 1.36? 1.42? T:seakeyakv2 1.39 1.41 1.43 T:deoxyseq256128v1 1.44 1.46 1.47 T:colm0v1 1.67 1.69 1.71 T:morus640128v2 1.95 1.96 1.98 T:morus640128v1 2.26 2.27 2.28 T:norx6441v2 2.28 2.29 2.31 T:norx6441v3 2.64 2.70 2.73 T:norx6441v1 2.75 2.75 2.75 T:aes128n12t8silcv2 2.75 2.75 2.75 T:aes128n12t8silcv3 2.75 2.75 2.76 T:aes128n12t8clocv3 2.75 2.75 2.76 T:aes128n12t8clocv2 2.75 2.75 2.76 T:aes128n8t8clocv2 2.75 2.76 2.77 T:aes128n8t8silcv2 2.75 2.78 2.81 T:norx6444v2 2.95 2.97 3.01 T:lakekeyakv2 2.96 3.06 3.18 T:lakekeyakv1 3.30 3.31 3.33 T:norx6461v3 3.32 3.34 3.36 T:norx6461v2 3.37 3.41 3.43 T:norx6444v1 4.04 4.07 4.10 T:norx6461v1 4.16 4.19 4.21 T:ketjemajorv2 4.55 4.57 4.58 T:norx3241v2 4.57 4.58 4.60 T:norx3241v3 4.80 4.81 4.82 ascon128av12 5.20 5.23 5.25 T:acorn128v3 5.46 5.51 5.54 T:norx3241v1 5.61 5.63 5.63 T:aesjambuv1 5.75 5.78 5.80 T:acorn128v2 6.75 6.77 6.80 T:norx3261v3 6.76 6.79 6.81 T:ketjeminorv2 6.79 6.81 6.83 T:norx3261v2 6.90 6.92 6.94 T:ascon128v11 6.91 6.93 6.94 T:ascon128v1 6.97 7.01 7.05 T:riverkeyakv2 7.02 7.04 7.06 ascon128v12 7.27 7.29 7.30 T:ascon128av11 7.27 7.30 7.32 T:ascon96v1 8.20 8.22 8.24 T:norx3261v1 10.51 10.54 10.59 T:aes128otrsv2 10.57 10.61 10.65 T:aes128otrsv1 11.16 11.21 11.26 T:aes128otrpv2 11.16 11.24 11.35 T:aes128otrpv1 13.42 13.45 13.50 T:aes256otrsv1 13.47 13.52 13.55 T:aes256otrsv2 14.09 14.13 14.17 T:aes256otrpv1 14.10 14.14 14.20 T:aes256otrpv2 14.79 14.82 14.85 T:proest256otrv1 17.73 17.77 17.81 T:aes128n8clocv1 17.74 17.78 17.80 T:aes128n12clocv1 19.05 19.09 19.12 T:aeadaes128ocbtaglen96v1 19.04 19.23 19.28 T:aeadaes128ocbtaglen64v1 22.12 22.15 22.21 T:aeadaes192ocbtaglen64v1 22.14 22.22 22.29 T:aeadaes192ocbtaglen96v1 25.16 25.20 25.30 T:aeadaes256ocbtaglen96v1 25.21 25.30 25.48 T:aeadaes256ocbtaglen64v1 29.87 29.88 29.89 T:twine80n6t4clocv2 30.77 30.79 30.80 T:twine80n6t4clocv3 35.14 35.18 35.21 T:proest128otrv1 38.41 38.47 38.54 T:colm127v1 38.82 38.93 39.05 T:ketjesrv1 58.57 58.67 58.75 T:ketjesrv2 62.20 62.34 62.44 T:ketjejrv2 63.26 63.48 65.64 T:ketjejrv1 112.99 113.33 116.73 T:deoxysneq128128v13 119.64 119.68 119.71 T:present80n6t4silcv3 136.58 137.02 137.14 T:aezv1 155.81 157.50 159.07 T:deoxysneq256128v13 182.24 182.32 182.39 T:led80n6t4silcv3 227.29 227.49 228.36 T:deoxyseq128128v13 312.54 312.76 313.06 T:deoxyseq256128v13 450.85 452.23 453.46 T:acorn128 2834.36 2834.81 2835.32 T:present80n6silcv1 2835.15 2836.41 2844.40 T:present80n6t4silcv2 6489.69 6513.55 6523.10 T:led80n6t4silcv2 7388.79 7422.71 7440.32 T:led80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.20 0.21 0.22 T:aegis128l 0.21 0.22 0.22 aegis128l 0.14? 0.22? 0.28? T:aeadaes128ocbtaglen128v1 0.23? 0.26? 0.28? T:aes128gcmv1 0.14? 0.28? 0.34? T:aeadaes256ocbtaglen128v1 0.34 0.35 0.35 T:aezv4 0.35 0.35 0.35 T:aezv3 0.37 0.37 0.38 T:aezv5 0.37 0.38 0.41 aegis256 0.40 0.40 0.40 T:aegis128 0.28? 0.40? 0.49? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:tiaoxinv1 0.42 0.42 0.43 T:tiaoxinv2 0.45 0.46 0.46 T:aes128otrcv3 0.58 0.58 0.59 T:deoxysi128v141 0.59 0.60 0.60 T:aes256otrcv3 0.60 0.60 0.61 T:morus1280256v1 0.60 0.60 0.61 T:morus1280128v1 0.60 0.61 0.62 T:morus1280256v2 0.60 0.61 0.62 T:morus1280128v2 0.61 0.62 0.63 T:deoxysneq128128v1 0.57? 0.64? 0.66? T:deoxysi256v141 0.68 0.69 0.71 T:deoxysneq256128v1 0.70? 0.75? 0.78? T:aes128otrpv3 0.73? 0.78? 1.19? T:aes128otrsv3 0.74 0.79 0.82 T:lunarkeyakv2 0.72? 0.80? 0.88? T:oceankeyakv2 0.88 0.89 0.91 T:aes256otrpv3 0.89 0.90 0.93 T:aes256otrsv3 0.94 0.95 0.97 T:norx6444v3 1.08 1.09 1.09 T:deoxysii128v141 1.15 1.16 1.16 aes256gcmv1 1.18 1.18 1.19 T:deoxysii256v141 1.24 1.25 1.26 T:deoxyseq128128v1 1.29 1.30 1.39 T:colm0v1 1.36 1.38 1.38 T:deoxyseq256128v1 1.34 1.41 1.46 T:seakeyakv2 2.02 2.04 2.05 T:morus640128v1 2.03 2.07 2.13 T:morus640128v2 2.24 2.25 2.28 T:norx6441v2 2.24 2.25 2.27 T:norx6441v3 2.62 2.62 2.65 T:aes128n12t8silcv3 2.62 2.63 2.67 T:aes128n12t8silcv2 2.62 2.63 2.65 T:aes128n8t8clocv2 2.62 2.63 2.66 T:aes128n12t8clocv2 2.62 2.63 2.65 T:aes128n12t8clocv3 2.62 2.63 2.67 T:aes128n8t8silcv2 2.73 2.79 2.84 T:norx6441v1 2.76 2.80 2.83 T:norx6444v2 2.94 2.97 2.99 T:lakekeyakv2 3.00 3.08 3.16 T:lakekeyakv1 3.37 3.39 3.41 T:norx6461v3 3.35 3.39 3.44 T:norx6444v1 3.40 3.41 3.44 T:norx6461v2 4.05 4.08 4.11 T:norx6461v1 4.38 4.42 4.45 T:ketjemajorv2 4.68 4.69 4.71 ascon128av12 4.91 4.94 4.98 T:norx3241v2 4.93 4.95 4.97 T:norx3241v3 5.18 5.20 5.23 T:acorn128v3 5.49 5.51 5.55 T:acorn128v2 5.86 5.89 5.91 T:norx3241v1 6.34 6.34 6.35 T:aesjambuv1 6.69 6.72 6.75 T:ketjeminorv2 6.88 6.90 6.92 T:ascon128v11 6.89 6.91 6.92 T:ascon128v1 6.97 6.99 7.00 ascon128v12 7.11 7.14 7.17 T:norx3261v2 7.12 7.14 7.18 T:norx3261v3 7.16 7.19 7.22 T:riverkeyakv2 7.71 7.75 7.76 T:ascon128av11 7.73 7.76 7.78 T:ascon96v1 8.45 8.47 8.49 T:norx3261v1 11.49 11.54 11.58 T:aes128otrpv1 11.50 11.55 11.60 T:aes128otrpv2 12.02 12.08 12.12 T:aes128otrsv2 12.08 12.16 12.19 T:aes128otrsv1 14.54 14.58 14.62 T:aes256otrpv2 14.54 14.60 14.64 T:aes256otrpv1 14.94 14.98 15.04 T:aes256otrsv1 15.07 15.12 15.19 T:aes256otrsv2 15.16 15.20 15.23 T:proest256otrv1 18.40 18.45 18.53 T:aes128n8clocv1 18.42 18.48 18.53 T:aes128n12clocv1 27.65 27.69 27.91 T:aeadaes128ocbtaglen64v1 27.74 27.83 27.93 T:aeadaes128ocbtaglen96v1 29.78 29.81 29.83 T:twine80n6t4clocv2 30.51 30.58 30.67 T:twine80n6t4clocv3 32.66 32.71 32.77 T:aeadaes192ocbtaglen64v1 32.70 32.77 32.83 T:aeadaes192ocbtaglen96v1 35.67 35.69 35.72 T:proest128otrv1 37.65 37.69 37.81 T:aeadaes256ocbtaglen64v1 37.69 37.77 37.79 T:aeadaes256ocbtaglen96v1 40.72 40.86 40.97 T:ketjesrv1 53.92 54.07 54.15 T:ketjesrv2 55.66 55.74 55.81 T:colm127v1 62.54 62.70 62.83 T:ketjejrv2 64.97 65.35 67.11 T:ketjejrv1 119.53 119.59 119.65 T:present80n6t4silcv3 130.84 130.98 131.85 T:deoxysneq128128v13 136.56 136.90 137.54 T:aezv1 176.21 176.53 176.78 T:deoxysneq256128v13 182.00 182.21 182.70 T:led80n6t4silcv3 227.24 227.77 228.50 T:deoxyseq128128v13 312.93 313.95 317.81 T:deoxyseq256128v13 452.35 453.79 456.32 T:acorn128 2835.29 2835.83 2836.43 T:present80n6t4silcv2 2835.33 2835.99 2836.68 T:present80n6silcv1 6517.93 6519.81 6522.58 T:led80n6t4silcv2 7418.76 7430.18 7447.92 T:led80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.11? 0.12? 0.15? T:aezv3 0.11? 0.13? 0.15? T:aezv4 0.13? 0.14? 0.16? T:aezv5 0.20 0.21 0.22 T:aegis128l 0.17? 0.22? 0.28? T:aeadaes128ocbtaglen128v1 0.21 0.22 0.23 aegis128l 0.25? 0.27? 0.28? T:aes128gcmv1 0.14? 0.28? 0.39? T:aeadaes256ocbtaglen128v1 0.37? 0.38? 0.43? aegis256 0.40 0.40 0.40 T:aegis128 0.34? 0.40? 0.51? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:tiaoxinv2 0.41 0.42 0.42 T:tiaoxinv1 0.45 0.46 0.46 T:aes128otrcv3 0.58 0.58 0.59 T:deoxysi128v141 0.59 0.60 0.60 T:aes256otrcv3 0.60 0.60 0.61 T:morus1280128v1 0.60 0.60 0.61 T:morus1280256v1 0.60 0.61 0.62 T:morus1280128v2 0.60 0.61 0.62 T:morus1280256v2 0.60 0.61 0.62 T:deoxysneq128128v1 0.60 0.64 0.65 T:deoxysi256v141 0.68 0.69 0.71 T:deoxysneq256128v1 0.73 0.75 0.79 T:aes128otrpv3 0.67? 0.76? 0.85? T:oceankeyakv2 0.77 0.79 0.82 T:lunarkeyakv2 0.74? 0.80? 1.19? T:aes128otrsv3 0.88 0.89 0.93 T:aes256otrsv3 0.89 0.90 0.95 T:aes256otrpv3 0.94 0.96 0.97 T:norx6444v3 1.08 1.09 1.09 T:deoxysii128v141 1.16 1.16 1.18 aes256gcmv1 1.18 1.19 1.19 T:deoxysii256v141 1.24 1.25 1.26 T:deoxyseq128128v1 1.36 1.37 1.39 T:deoxyseq256128v1 1.31 1.42 1.43 T:colm0v1 1.37 1.42 1.47 T:seakeyakv2 2.02 2.03 2.04 T:morus640128v1 2.03 2.07 2.12 T:morus640128v2 2.25 2.26 2.28 T:norx6441v2 2.26 2.27 2.28 T:norx6441v3 2.62 2.62 2.67 T:aes128n12t8clocv2 2.62 2.63 2.68 T:aes128n8t8clocv2 2.62 2.63 2.68 T:aes128n12t8clocv3 2.62 2.63 2.66 T:aes128n12t8silcv2 2.62 2.64 2.68 T:aes128n8t8silcv2 2.64 2.65 2.68 T:aes128n12t8silcv3 2.74 2.78 2.83 T:norx6441v1 2.77 2.82 2.87 T:norx6444v2 2.95 2.97 3.01 T:lakekeyakv2 3.04 3.12 3.17 T:lakekeyakv1 3.34 3.40 3.43 T:norx6444v1 3.37 3.40 3.43 T:norx6461v3 3.40 3.43 3.46 T:norx6461v2 4.05 4.08 4.12 T:norx6461v1 4.40 4.43 4.46 T:ketjemajorv2 4.68 4.70 4.71 ascon128av12 4.92 4.95 4.98 T:norx3241v2 4.95 4.97 5.00 T:norx3241v3 5.18 5.20 5.23 T:acorn128v3 5.50 5.52 5.56 T:acorn128v2 5.88 5.89 5.92 T:norx3241v1 6.34 6.34 6.35 T:aesjambuv1 6.68 6.70 6.72 T:ascon128av11 6.68 6.70 6.71 T:ascon96v1 6.70 6.73 6.76 T:ketjeminorv2 6.89 6.91 6.92 T:ascon128v11 6.89 6.91 6.92 T:ascon128v1 6.97 6.99 7.00 ascon128v12 7.11 7.14 7.18 T:norx3261v2 7.13 7.16 7.19 T:norx3261v3 7.13 7.19 7.23 T:riverkeyakv2 8.46 8.49 8.52 T:norx3261v1 11.52 11.56 11.61 T:aes128otrpv2 11.52 11.57 11.59 T:aes128otrpv1 12.03 12.05 12.12 T:aes128otrsv2 12.07 12.14 12.22 T:aes128otrsv1 14.54 14.58 14.63 T:aes256otrpv1 14.54 14.59 14.63 T:aes256otrpv2 14.92 14.98 15.05 T:aes256otrsv1 15.10 15.16 15.23 T:aes256otrsv2 15.16 15.20 15.23 T:proest256otrv1 18.42 18.44 18.47 T:aes128n8clocv1 18.43 18.48 18.52 T:aes128n12clocv1 27.69 27.74 27.93 T:aeadaes128ocbtaglen64v1 27.78 27.90 27.94 T:aeadaes128ocbtaglen96v1 29.75 29.77 29.81 T:twine80n6t4clocv2 30.53 30.58 30.64 T:twine80n6t4clocv3 32.66 32.71 32.78 T:aeadaes192ocbtaglen64v1 32.68 32.77 32.88 T:aeadaes192ocbtaglen96v1 35.67 35.70 35.73 T:proest128otrv1 37.64 37.68 37.79 T:aeadaes256ocbtaglen64v1 37.70 37.75 37.79 T:aeadaes256ocbtaglen96v1 40.75 40.87 41.00 T:ketjesrv1 53.93 54.11 54.21 T:ketjesrv2 54.83 54.88 55.02 T:colm127v1 62.54 62.67 62.83 T:ketjejrv2 64.79 65.03 65.34 T:ketjejrv1 119.58 119.67 119.70 T:present80n6t4silcv3 130.83 130.99 131.81 T:deoxysneq128128v13 136.43 136.80 137.47 T:aezv1 175.94 176.38 176.75 T:deoxysneq256128v13 181.97 182.25 182.77 T:led80n6t4silcv3 227.37 227.62 227.79 T:deoxyseq128128v13 312.89 313.12 316.79 T:deoxyseq256128v13 452.71 454.15 456.17 T:acorn128 2835.37 2835.89 2836.70 T:present80n6silcv1 2835.44 2836.11 2836.72 T:present80n6t4silcv2 6514.51 6522.40 6543.16 T:led80n6t4silcv2 7402.39 7414.31 7428.15 T:led80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.12 0.12 0.12 T:tiaoxinv2 0.12 0.12 0.12 T:tiaoxinv1 0.13? 0.16? 0.20? T:aeadaes128ocbtaglen128v1 0.19 0.20 0.20 T:aegis128l 0.19 0.20 0.21 aegis128l 0.20? 0.24? 0.27? T:aeadaes256ocbtaglen128v1 0.24 0.24 0.24 T:aezv3 0.24 0.24 0.24 T:aezv4 0.24 0.25 0.26 T:aes128gcmv1 0.25 0.25 0.25 T:aezv5 0.37 0.38 0.38 aegis256 0.38 0.38 0.40 T:aegis128 0.34? 0.40? 0.43? T:aeadaes192ocbtaglen128v1 0.44 0.45 0.45 T:aes128otrcv3 0.51 0.52 0.53 T:deoxysi128v141 0.58 0.58 0.58 T:deoxysi256v141 0.58 0.59 0.59 T:aes256otrcv3 0.59 0.59 0.60 T:deoxysneq128128v1 0.59 0.60 0.60 T:morus1280128v1 0.59 0.60 0.60 T:morus1280256v1 0.60 0.60 0.60 T:morus1280128v2 0.60 0.60 0.60 T:morus1280256v2 0.67 0.68 0.68 T:deoxysneq256128v1 0.64? 0.72? 0.80? T:oceankeyakv2 0.71 0.72 0.74 T:lunarkeyakv2 0.78 0.79 0.80 T:aes128otrpv3 0.80 0.81 0.81 T:deoxysii128v141 0.84 0.85 0.86 aes256gcmv1 0.89 0.89 0.90 T:deoxysii256v141 0.89 0.90 0.91 T:deoxyseq128128v1 0.93 0.93 0.95 T:aes256otrpv3 0.99 0.99 1.00 T:colm0v1 1.03 1.04 1.05 T:deoxyseq256128v1 1.14 1.15 1.18 T:seakeyakv2 1.72 1.75 1.77 T:morus640128v2 1.96 1.96 1.97 T:morus640128v1 2.03? 2.04? 2.29? T:aes128otrsv3 2.15 2.16 2.17 T:norx6444v3 2.23 2.24 2.25 T:norx6441v2 2.24 2.24 2.25 T:norx6441v3 2.50 2.52 2.54 T:norx6444v2 2.56 2.58 2.59 T:lakekeyakv2 2.60 2.60 2.60 T:aes256otrsv3 2.65 2.68 2.70 T:norx6441v1 2.69 2.69 2.70 T:aes128n12t8silcv2 2.69 2.69 2.70 T:aes128n12t8silcv3 2.68 2.69 2.70 T:aes128n12t8clocv3 2.69 2.69 2.70 T:aes128n12t8clocv2 2.68 2.69 2.70 T:aes128n8t8clocv2 2.69 2.70 2.70 T:aes128n8t8silcv2 2.92 2.95 3.00 T:lakekeyakv1 3.00 3.02 3.03 T:norx6444v1 3.29 3.30 3.31 T:norx6461v3 3.30 3.31 3.32 T:norx6461v2 3.68 3.69 3.70 T:ketjemajorv2 4.04 4.05 4.07 T:norx6461v1 4.51 4.53 4.55 T:norx3241v2 4.53 4.54 4.55 T:norx3241v3 4.70 4.72 4.74 ascon128av12 5.00 5.03 5.05 T:riverkeyakv2 5.21 5.23 5.24 T:acorn128v3 5.41 5.44 5.47 T:norx3241v1 5.72 5.73 5.73 T:aesjambuv1 5.74 5.76 5.77 T:acorn128v2 6.09 6.12 6.13 T:ketjeminorv2 6.72 6.74 6.76 T:norx3261v3 6.73 6.75 6.78 T:norx3261v2 6.86 6.86 6.87 T:ascon128v1 6.86 6.87 6.88 T:ascon128v11 7.00 7.01 7.02 ascon128v12 7.26 7.27 7.29 T:ascon128av11 7.26 7.28 7.29 T:ascon96v1 8.11 8.13 8.14 T:norx3261v1 9.91 9.93 9.96 T:aes128otrsv2 9.93 9.95 9.97 T:aes128otrsv1 11.35 11.38 11.40 T:aes128otrpv2 11.34 11.39 11.49 T:aes128otrpv1 12.78 12.83 12.86 T:aes256otrsv1 12.84 12.86 12.88 T:aes256otrsv2 13.62 13.64 13.66 T:aes128n8clocv1 13.63 13.65 13.68 T:aes128n12clocv1 14.25 14.29 14.31 T:aes256otrpv1 14.27 14.30 14.33 T:aes256otrpv2 15.13 15.16 15.19 T:proest256otrv1 18.99 19.02 19.05 T:aeadaes128ocbtaglen64v1 19.05 19.08 19.10 T:aeadaes128ocbtaglen96v1 22.09 22.11 22.13 T:aeadaes192ocbtaglen96v1 22.10 22.15 22.25 T:aeadaes192ocbtaglen64v1 25.15 25.18 25.21 T:aeadaes256ocbtaglen96v1 25.16 25.21 25.29 T:aeadaes256ocbtaglen64v1 28.38 28.45 28.48 T:colm127v1 29.50 29.51 29.52 T:twine80n6t4clocv2 30.52 30.53 30.54 T:twine80n6t4clocv3 35.55 35.62 35.67 T:proest128otrv1 38.40 38.46 38.52 T:ketjesrv1 55.34 55.45 55.52 T:ketjesrv2 61.36 61.46 61.57 T:ketjejrv2 61.36 61.55 61.67 T:ketjejrv1 90.08 90.26 90.37 T:aezv1 113.22 114.12 116.42 T:deoxysneq128128v13 118.71 118.73 118.76 T:present80n6t4silcv3 155.86 156.49 157.62 T:deoxysneq256128v13 170.46 170.68 170.80 T:deoxyseq128128v13 181.42 181.47 181.53 T:led80n6t4silcv3 234.25 236.08 236.76 T:deoxyseq256128v13 451.26 452.34 453.34 T:acorn128 2125.72 2126.11 2126.66 T:present80n6silcv1 2126.30 2126.75 2127.17 T:present80n6t4silcv2 4847.38 4870.99 4889.36 T:led80n6t4silcv2 5530.46 5554.43 5587.48 T:led80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.13? 0.16? 0.21? T:aeadaes128ocbtaglen128v1 0.20 0.20 0.20 T:aegis128l 0.20 0.21 0.22 aegis128l 0.21? 0.23? 0.24? T:aes128gcmv1 0.17? 0.23? 0.28? T:aeadaes256ocbtaglen128v1 0.24 0.24 0.24 T:aezv4 0.24 0.24 0.24 T:aezv3 0.25 0.25 0.25 T:aezv5 0.26 0.26 0.26 T:tiaoxinv1 0.26 0.26 0.27 T:tiaoxinv2 0.37 0.38 0.38 aegis256 0.39 0.40 0.41 T:aegis128 0.35? 0.40? 0.46? T:aeadaes192ocbtaglen128v1 0.45 0.45 0.45 T:aes128otrcv3 0.55 0.55 0.55 T:deoxysi128v141 0.59 0.60 0.60 T:aes256otrcv3 0.59 0.60 0.60 T:morus1280256v1 0.59 0.60 0.60 T:morus1280128v1 0.59 0.60 0.60 T:morus1280256v2 0.60 0.60 0.60 T:morus1280128v2 0.60 0.60 0.61 T:deoxysneq128128v1 0.58 0.61 0.61 T:deoxysi256v141 0.68 0.69 0.70 T:deoxysneq256128v1 0.60? 0.71? 0.78? T:oceankeyakv2 0.77 0.79 0.81 T:lunarkeyakv2 0.78 0.79 0.80 T:aes128otrpv3 0.80 0.80 0.80 aes256gcmv1 0.80 0.80 0.81 T:deoxysii128v141 0.88 0.88 0.89 T:deoxysii256v141 0.91 0.92 0.97 T:colm0v1 0.91 0.92 0.95 T:deoxyseq128128v1 0.93 0.94 0.95 T:aes256otrpv3 1.02 1.05 1.07 T:deoxyseq256128v1 1.16 1.17 1.20 T:seakeyakv2 1.99 1.99 2.00 T:morus640128v1 2.00 2.02 2.02 T:morus640128v2 2.03 2.04 2.25 T:aes128otrsv3 2.16 2.16 2.17 T:norx6444v3 2.23 2.24 2.25 T:norx6441v3 2.23 2.25 2.26 T:norx6441v2 2.49 2.52 2.54 T:norx6444v2 2.60 2.60 2.61 T:aes256otrsv3 2.59 2.61 2.64 T:lakekeyakv2 2.62 2.63 2.64 T:aes128n12t8clocv3 2.62 2.63 2.63 T:aes128n8t8silcv2 2.62 2.63 2.64 T:aes128n12t8silcv3 2.61 2.63 2.64 T:aes128n8t8clocv2 2.63 2.63 2.64 T:aes128n12t8clocv2 2.63 2.63 2.64 T:aes128n12t8silcv2 2.72 2.74 2.77 T:norx6441v1 2.89 2.92 2.94 T:lakekeyakv1 3.02 3.04 3.06 T:norx6444v1 3.34 3.35 3.37 T:norx6461v3 3.36 3.37 3.38 T:norx6461v2 3.79 3.81 3.82 T:ketjemajorv2 4.03 4.05 4.07 T:norx6461v1 4.68 4.69 4.70 ascon128av12 4.82 4.83 4.85 T:norx3241v2 4.82 4.84 4.85 T:norx3241v3 5.10 5.13 5.15 T:riverkeyakv2 5.17 5.19 5.21 T:acorn128v3 5.62 5.63 5.65 T:acorn128v2 5.72 5.74 5.75 T:norx3241v1 6.07 6.08 6.09 T:ketjeminorv2 6.08 6.09 6.09 T:aesjambuv1 6.86 6.87 6.88 T:ascon128v11 6.86 6.87 6.88 T:ascon128v1 6.92 6.94 6.95 T:norx3261v3 6.93 6.95 6.97 T:norx3261v2 6.96 6.97 6.98 ascon128v12 7.50 7.51 7.53 T:ascon128av11 7.50 7.52 7.53 T:ascon96v1 8.34 8.36 8.37 T:norx3261v1 10.65 10.67 10.69 T:aes128otrsv2 10.66 10.68 10.70 T:aes128otrsv1 11.51 11.54 11.56 T:aes128otrpv2 11.52 11.55 11.58 T:aes128otrpv1 13.52 13.55 13.57 T:aes256otrsv1 13.63 13.66 13.69 T:aes256otrsv2 13.97 14.00 14.03 T:aes128n8clocv1 13.99 14.02 14.05 T:aes128n12clocv1 14.48 14.52 14.55 T:aes256otrpv2 14.52 14.55 14.57 T:aes256otrpv1 15.31 15.34 15.36 T:proest256otrv1 23.31 23.34 23.40 T:aeadaes128ocbtaglen64v1 23.35 23.37 23.40 T:aeadaes128ocbtaglen96v1 27.37 27.41 27.55 T:aeadaes192ocbtaglen64v1 27.39 27.45 27.51 T:aeadaes192ocbtaglen96v1 29.45 29.46 29.49 T:twine80n6t4clocv2 30.41 30.43 30.47 T:twine80n6t4clocv3 31.42 31.44 31.47 T:aeadaes256ocbtaglen96v1 31.40 31.44 31.48 T:aeadaes256ocbtaglen64v1 35.80 35.84 35.88 T:proest128otrv1 36.90 37.00 37.07 T:colm127v1 39.33 39.40 39.47 T:ketjesrv1 53.05 53.17 53.20 T:ketjesrv2 61.51 61.60 61.69 T:ketjejrv2 62.15 62.37 62.55 T:ketjejrv1 90.06 90.24 90.35 T:aezv1 118.66 118.70 118.74 T:present80n6t4silcv3 122.72 122.86 123.86 T:deoxysneq128128v13 166.42 167.17 167.37 T:deoxysneq256128v13 170.37 170.48 170.76 T:deoxyseq128128v13 181.28 181.45 181.67 T:led80n6t4silcv3 234.26 234.52 234.85 T:deoxyseq256128v13 453.79 455.36 456.32 T:acorn128 2126.28 2126.74 2127.25 T:present80n6silcv1 2126.62 2127.05 2127.39 T:present80n6t4silcv2 4892.44 4894.76 4897.69 T:led80n6t4silcv2 5566.02 5576.15 5588.55 T:led80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.12 0.12 0.13 T:aezv3 0.12 0.13 0.13 T:aezv4 0.12? 0.13? 0.14? T:aezv5 0.13? 0.16? 0.19? T:aeadaes128ocbtaglen128v1 0.20 0.20 0.20 T:aegis128l 0.21 0.22 0.22 aegis128l 0.22 0.23 0.24 T:aes128gcmv1 0.17? 0.23? 0.29? T:aeadaes256ocbtaglen128v1 0.26 0.26 0.26 T:tiaoxinv2 0.26 0.26 0.27 T:tiaoxinv1 0.38 0.38 0.40 aegis256 0.39 0.40 0.41 T:aegis128 0.34? 0.40? 0.43? T:aeadaes192ocbtaglen128v1 0.45 0.45 0.45 T:aes128otrcv3 0.55 0.55 0.56 T:deoxysi128v141 0.59 0.59 0.60 T:morus1280128v1 0.59 0.60 0.60 T:aes256otrcv3 0.59 0.60 0.60 T:morus1280256v1 0.59 0.60 0.61 T:deoxysneq128128v1 0.60 0.60 0.60 T:morus1280256v2 0.60 0.60 0.60 T:morus1280128v2 0.59 0.61 0.61 T:deoxysi256v141 0.60? 0.67? 0.76? T:oceankeyakv2 0.68 0.68 0.69 T:deoxysneq256128v1 0.79 0.80 0.82 T:aes128otrpv3 0.77 0.80 0.81 T:lunarkeyakv2 0.80 0.80 0.81 T:deoxysii128v141 0.80 0.81 0.82 aes256gcmv1 0.88 0.88 0.89 T:deoxysii256v141 0.92 0.93 0.96 T:deoxyseq128128v1 0.93 0.94 0.97 T:aes256otrpv3 0.93 0.98 0.98 T:colm0v1 1.01 1.02 1.06 T:deoxyseq256128v1 1.17 1.19 1.21 T:seakeyakv2 1.99 1.99 2.00 T:morus640128v1 2.01 2.02 2.03 T:morus640128v2 2.01? 2.05? 2.25? T:aes128otrsv3 2.16 2.16 2.17 T:norx6444v3 2.24 2.25 2.26 T:norx6441v3 2.24 2.25 2.26 T:norx6441v2 2.50 2.52 2.54 T:norx6444v2 2.60 2.60 2.63 T:aes256otrsv3 2.58 2.61 2.64 T:lakekeyakv2 2.62 2.63 2.65 T:aes128n12t8clocv2 2.62 2.63 2.65 T:aes128n12t8clocv3 2.62 2.63 2.65 T:aes128n12t8silcv2 2.62 2.63 2.66 T:aes128n8t8silcv2 2.60 2.63 2.66 T:aes128n8t8clocv2 2.63 2.64 2.66 T:aes128n12t8silcv3 2.72 2.74 2.76 T:norx6441v1 2.89 2.92 2.95 T:lakekeyakv1 3.02 3.04 3.06 T:norx6444v1 3.35 3.35 3.37 T:norx6461v3 3.36 3.37 3.39 T:norx6461v2 3.79 3.81 3.83 T:ketjemajorv2 4.03 4.05 4.07 T:norx6461v1 4.68 4.69 4.70 ascon128av12 4.83 4.84 4.86 T:norx3241v3 4.83 4.84 4.86 T:norx3241v2 5.11 5.13 5.15 T:riverkeyakv2 5.17 5.20 5.22 T:acorn128v3 5.62 5.64 5.65 T:acorn128v2 5.73 5.75 5.76 T:norx3241v1 6.08 6.08 6.09 T:aesjambuv1 6.08 6.09 6.11 T:ketjeminorv2 6.85 6.87 6.88 T:ascon128v11 6.86 6.87 6.88 T:ascon128v1 6.92 6.94 6.96 T:norx3261v3 6.94 6.95 6.97 T:norx3261v2 6.96 6.97 6.98 ascon128v12 6.98 6.99 7.00 T:ascon128av11 6.98 6.99 7.00 T:ascon96v1 8.34 8.36 8.38 T:norx3261v1 10.67 10.69 10.70 T:aes128otrsv2 10.67 10.70 10.71 T:aes128otrsv1 11.51 11.53 11.56 T:aes128otrpv2 11.53 11.56 11.58 T:aes128otrpv1 13.53 13.56 13.58 T:aes256otrsv1 13.65 13.67 13.68 T:aes256otrsv2 13.96 13.98 14.00 T:aes128n8clocv1 13.97 14.00 14.03 T:aes128n12clocv1 14.51 14.53 14.56 T:aes256otrpv2 14.51 14.54 14.57 T:aes256otrpv1 15.31 15.33 15.36 T:proest256otrv1 23.33 23.35 23.39 T:aeadaes128ocbtaglen64v1 23.36 23.40 23.49 T:aeadaes128ocbtaglen96v1 27.38 27.44 27.50 T:aeadaes192ocbtaglen96v1 27.42 27.45 27.48 T:aeadaes192ocbtaglen64v1 29.42 29.45 29.47 T:twine80n6t4clocv2 30.41 30.44 30.47 T:twine80n6t4clocv3 31.38 31.41 31.44 T:aeadaes256ocbtaglen64v1 31.44 31.47 31.50 T:aeadaes256ocbtaglen96v1 35.86 35.90 35.95 T:proest128otrv1 36.56 36.64 36.74 T:colm127v1 39.34 39.41 39.47 T:ketjesrv1 53.03 53.18 53.24 T:ketjesrv2 61.52 61.62 61.73 T:ketjejrv2 62.17 62.43 62.63 T:ketjejrv1 90.23 90.31 90.42 T:aezv1 118.65 118.69 118.73 T:present80n6t4silcv3 122.87 123.35 124.16 T:deoxysneq128128v13 166.31 166.89 167.19 T:deoxysneq256128v13 170.21 171.17 171.46 T:deoxyseq128128v13 181.46 181.70 181.78 T:led80n6t4silcv3 234.48 235.37 236.00 T:deoxyseq256128v13 454.28 455.13 456.31 T:acorn128 2126.35 2126.72 2127.21 T:present80n6silcv1 2126.48 2126.81 2127.13 T:present80n6t4silcv2 4886.19 4891.41 4898.49 T:led80n6t4silcv2 5558.95 5569.04 5580.98 T:led80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv1 0.10 0.10 0.11 T:tiaoxinv2 0.12 0.13 0.13 T:aezv5 0.13 0.13 0.13 T:aezv4 0.13 0.14 0.14 T:aezv3 0.09? 0.15? 0.21? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.21 aegis128l 0.19 0.19 0.20 T:aegis128l 0.17? 0.20? 0.23? T:aes128gcmv1 0.12? 0.23? 0.29? T:aeadaes256ocbtaglen128v1 0.37 0.37 0.41 T:aegis128 0.37 0.38 0.38 aegis256 0.27? 0.39? 0.46? T:aeadaes192ocbtaglen128v1 0.42 0.42 0.43 aes256gcmv1 0.45 0.45 0.46 T:aes128otrcv3 0.46? 0.49? 0.52? T:lunarkeyakv2 0.51 0.52 0.52 T:deoxysi128v141 0.51 0.52 0.53 T:deoxysii128v141 0.53 0.54 0.55 T:colm0v1 0.50? 0.55? 0.58? T:oceankeyakv2 0.55 0.57 0.58 T:deoxysi256v141 0.58 0.59 0.59 T:deoxysii256v141 0.58 0.59 0.60 T:deoxysneq128128v1 0.59 0.59 0.60 T:morus1280128v1 0.59 0.59 0.60 T:morus1280256v1 0.59 0.60 0.60 T:deoxyseq128128v1 0.59 0.60 0.60 T:morus1280128v2 0.59 0.60 0.60 T:morus1280256v2 0.60 0.60 0.61 T:aes256otrcv3 0.66 0.67 0.68 T:deoxysneq256128v1 0.66 0.67 0.68 T:deoxyseq256128v1 0.84 0.86 0.86 T:aes128otrpv3 0.96 0.98 0.99 T:aes256otrpv3 1.02 1.09 1.12 T:seakeyakv2 1.80 1.84 1.86 T:morus640128v2 1.95 1.96 1.97 T:morus640128v1 2.19 2.20 2.21 T:norx6441v3 2.21 2.22 2.23 T:norx6441v2 2.22 2.26 2.29 T:norx6444v2 2.37 2.39 2.42 T:lakekeyakv2 2.62 2.62 2.63 T:aes128n12t8clocv3 2.58 2.62 2.66 T:aes128n8t8clocv2 2.62 2.62 2.63 T:aes128n12t8silcv2 2.62 2.62 2.63 T:aes128n8t8silcv2 2.62 2.63 2.63 T:aes128n12t8silcv3 2.62 2.63 2.63 T:aes128n12t8clocv2 2.66 2.67 2.68 T:norx6444v1 2.63 2.69 2.72 T:norx6441v1 2.67 2.75 2.83 T:lakekeyakv1 3.21 3.23 3.26 T:ketjemajorv2 3.27 3.28 3.30 T:norx6461v2 3.28 3.29 3.31 T:norx6461v3 3.31 3.31 3.32 T:aes128otrsv3 3.35 3.37 3.38 T:norx6444v3 4.02 4.04 4.07 T:norx6461v1 4.31 4.31 4.31 T:aes256otrsv3 4.48 4.49 4.51 T:norx3241v3 4.49 4.51 4.52 T:norx3241v2 4.61 4.63 4.64 ascon128av12 4.79 4.84 4.87 T:riverkeyakv2 5.21 5.23 5.25 T:acorn128v3 5.36 5.38 5.40 T:norx3241v1 5.47 5.51 5.53 T:ketjeminorv2 5.67 5.72 5.76 T:acorn128v2 5.82 5.83 5.83 T:aesjambuv1 6.66 6.69 6.71 T:norx3261v3 6.68 6.71 6.72 T:norx3261v2 6.79 6.81 6.83 T:ascon128v11 6.80 6.82 6.83 T:ascon128v1 6.97 7.00 7.01 ascon128v12 7.25 7.26 7.28 T:ascon128av11 7.25 7.27 7.28 T:ascon96v1 8.01 8.03 8.05 T:norx3261v1 9.28 9.31 9.33 T:aes128otrsv2 9.28 9.31 9.35 T:aes128otrsv1 9.48 9.50 9.52 T:aes128n12clocv1 9.50 9.53 9.55 T:aes128n8clocv1 11.52 11.56 11.59 T:aes128otrpv2 11.53 11.56 11.59 T:aes128otrpv1 12.14 12.17 12.20 T:aes256otrsv1 12.15 12.17 12.20 T:aes256otrsv2 14.42 14.45 14.48 T:aes256otrpv1 14.44 14.47 14.49 T:aes256otrpv2 15.43 15.48 15.51 T:proest256otrv1 18.25 18.34 18.36 T:colm127v1 18.91 18.95 18.99 T:aeadaes128ocbtaglen64v1 18.94 19.01 19.04 T:aeadaes128ocbtaglen96v1 22.03 22.06 22.13 T:aeadaes192ocbtaglen64v1 22.10 22.14 22.16 T:aeadaes192ocbtaglen96v1 25.09 25.14 25.21 T:aeadaes256ocbtaglen96v1 25.09 25.14 25.19 T:aeadaes256ocbtaglen64v1 29.11 29.13 29.15 T:twine80n6t4clocv2 30.25 30.28 30.30 T:twine80n6t4clocv3 35.92 36.00 36.08 T:proest128otrv1 37.89 37.97 38.08 T:ketjesrv1 43.85 44.00 44.40 T:aezv1 52.16 52.25 52.32 T:ketjesrv2 59.45 59.61 59.76 T:ketjejrv1 60.55 60.72 60.89 T:ketjejrv2 113.32 113.40 113.93 T:deoxyseq128128v13 113.39 114.56 116.17 T:deoxysneq128128v13 117.74 117.79 117.84 T:present80n6t4silcv3 156.16 156.30 156.89 T:deoxyseq256128v13 156.58 156.97 157.90 T:deoxysneq256128v13 180.57 180.65 180.73 T:led80n6t4silcv3 450.62 452.95 454.24 T:acorn128 1416.89 1417.43 1417.90 T:present80n6silcv1 1417.46 1417.96 1418.60 T:present80n6t4silcv2 3235.88 3245.70 3252.84 T:led80n6t4silcv2 3699.92 3707.96 3726.63 T:led80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.10 0.10 0.10 T:tiaoxinv2 0.10 0.10 0.11 T:tiaoxinv1 0.12 0.13 0.13 T:aezv5 0.13 0.13 0.13 T:aezv4 0.13 0.13 0.14 T:aezv3 0.10? 0.16? 0.22? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.18? 0.20? 0.21? aegis128l 0.18? 0.21? 0.24? T:aes128gcmv1 0.12? 0.23? 0.34? T:aeadaes256ocbtaglen128v1 0.37 0.37 0.38 aegis256 0.33? 0.39? 0.46? T:aeadaes192ocbtaglen128v1 0.38 0.40 0.42 T:aegis128 0.42 0.43 0.44 aes256gcmv1 0.45 0.45 0.46 T:aes128otrcv3 0.45? 0.49? 0.52? T:lunarkeyakv2 0.50 0.51 0.52 T:deoxysii128v141 0.51 0.52 0.53 T:deoxysi128v141 0.52 0.53 0.54 T:colm0v1 0.48? 0.56? 0.62? T:oceankeyakv2 0.57 0.57 0.58 T:deoxysi256v141 0.58 0.58 0.59 T:deoxysii256v141 0.58 0.59 0.60 T:deoxysneq128128v1 0.58 0.59 0.60 T:morus1280128v1 0.58 0.59 0.60 T:morus1280256v1 0.59 0.59 0.60 T:morus1280128v2 0.59 0.59 0.60 T:morus1280256v2 0.59 0.59 0.60 T:aes256otrcv3 0.58 0.60 0.64 T:deoxyseq128128v1 0.66 0.67 0.68 T:deoxyseq256128v1 0.68 0.69 0.70 T:deoxysneq256128v1 0.84 0.85 0.88 T:aes128otrpv3 0.98 0.99 1.03 T:aes256otrpv3 1.08 1.10 1.13 T:seakeyakv2 1.85 1.88 1.90 T:morus640128v2 1.94 1.95 1.96 T:morus640128v1 2.20 2.23 2.26 T:norx6444v2 2.23 2.24 2.26 T:norx6441v3 2.23 2.25 2.28 T:norx6441v2 2.37 2.39 2.40 T:lakekeyakv2 2.55 2.60 2.68 T:aes128n8t8clocv2 2.57 2.62 2.64 T:aes128n12t8clocv3 2.60 2.62 2.65 T:aes128n12t8clocv2 2.62 2.63 2.63 T:aes128n12t8silcv3 2.62 2.63 2.63 T:aes128n8t8silcv2 2.62 2.63 2.63 T:aes128n12t8silcv2 2.65 2.69 2.72 T:norx6444v1 2.67 2.73 2.76 T:norx6441v1 2.68 2.77 2.80 T:lakekeyakv1 3.18 3.24 3.26 T:ketjemajorv2 3.30 3.31 3.34 T:norx6461v2 3.31 3.31 3.37 T:aes128otrsv3 3.30 3.31 3.34 T:norx6461v3 3.36 3.37 3.38 T:norx6444v3 4.00 4.03 4.07 T:norx6461v1 4.28 4.33 4.39 T:aes256otrsv3 4.68 4.70 4.72 ascon128av12 4.72 4.73 4.76 T:norx3241v2 4.71 4.74 4.76 T:norx3241v3 4.81 4.83 4.89 T:riverkeyakv2 5.14 5.19 5.23 T:acorn128v3 5.48 5.52 5.54 T:ketjeminorv2 5.58 5.61 5.64 T:norx3241v1 5.73 5.75 5.78 T:acorn128v2 5.82 5.83 5.84 T:aesjambuv1 6.68 6.71 6.74 T:norx3261v3 6.72 6.75 6.78 T:norx3261v2 6.84 6.86 6.87 T:ascon128v11 6.84 6.86 6.88 T:ascon128v1 6.96 6.97 6.99 ascon128v12 7.26 7.27 7.30 T:ascon128av11 7.25 7.28 7.30 T:ascon96v1 8.22 8.24 8.27 T:norx3261v1 9.29 9.32 9.34 T:aes128otrsv1 9.28 9.32 9.37 T:aes128otrsv2 9.49 9.51 9.54 T:aes128n8clocv1 9.50 9.52 9.55 T:aes128n12clocv1 11.49 11.52 11.57 T:aes128otrpv2 11.51 11.56 11.58 T:aes128otrpv1 12.13 12.18 12.22 T:aes256otrsv2 12.16 12.21 12.24 T:aes256otrsv1 14.45 14.48 14.51 T:aes256otrpv1 14.46 14.49 14.52 T:aes256otrpv2 15.44 15.47 15.52 T:proest256otrv1 18.24 18.27 18.30 T:colm127v1 18.93 18.97 19.02 T:aeadaes128ocbtaglen64v1 18.98 19.01 19.06 T:aeadaes128ocbtaglen96v1 22.03 22.05 22.08 T:aeadaes192ocbtaglen64v1 22.05 22.12 22.16 T:aeadaes192ocbtaglen96v1 25.11 25.15 25.21 T:aeadaes256ocbtaglen96v1 25.17 25.20 25.23 T:aeadaes256ocbtaglen64v1 29.11 29.14 29.18 T:twine80n6t4clocv2 30.22 30.28 30.34 T:twine80n6t4clocv3 35.93 36.03 36.10 T:proest128otrv1 37.86 37.96 38.08 T:ketjesrv1 43.99 44.10 44.41 T:aezv1 52.12 52.20 52.35 T:ketjesrv2 59.45 59.61 59.75 T:ketjejrv1 60.61 60.76 60.93 T:ketjejrv2 113.29 113.38 113.44 T:deoxyseq128128v13 113.19 114.26 117.01 T:deoxysneq128128v13 117.74 117.79 117.85 T:present80n6t4silcv3 156.16 156.47 156.71 T:deoxyseq256128v13 156.44 157.03 157.87 T:deoxysneq256128v13 180.55 180.62 180.71 T:led80n6t4silcv3 454.38 455.67 457.92 T:acorn128 1417.22 1417.67 1418.20 T:present80n6t4silcv2 1417.25 1417.85 1418.41 T:present80n6silcv1 3221.50 3237.05 3259.45 T:led80n6t4silcv2 3699.59 3703.01 3707.49 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.10 0.10 0.10 T:tiaoxinv2 0.10 0.10 0.11 T:tiaoxinv1 0.12 0.13 0.13 T:aezv5 0.13 0.13 0.13 T:aezv4 0.13 0.13 0.14 T:aezv3 0.10? 0.15? 0.21? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.19? 0.21? 0.22? aegis128l 0.20? 0.22? 0.24? T:aes128gcmv1 0.17? 0.23? 0.34? T:aeadaes256ocbtaglen128v1 0.37 0.37 0.38 aegis256 0.33? 0.39? 0.45? T:aeadaes192ocbtaglen128v1 0.38 0.39 0.42 T:aegis128 0.42 0.43 0.44 aes256gcmv1 0.45 0.45 0.46 T:aes128otrcv3 0.46? 0.49? 0.53? T:lunarkeyakv2 0.51 0.51 0.52 T:deoxysii128v141 0.52 0.52 0.53 T:deoxysi128v141 0.52 0.53 0.53 T:colm0v1 0.51? 0.57? 0.62? T:oceankeyakv2 0.57 0.58 0.58 T:deoxysi256v141 0.58 0.58 0.59 T:deoxysii256v141 0.58 0.59 0.60 T:morus1280128v1 0.58 0.59 0.60 T:morus1280256v1 0.58 0.59 0.60 T:deoxysneq128128v1 0.58 0.59 0.60 T:morus1280256v2 0.58 0.59 0.60 T:morus1280128v2 0.59 0.60 0.60 T:aes256otrcv3 0.59 0.60 0.63 T:deoxyseq128128v1 0.66 0.67 0.68 T:deoxyseq256128v1 0.67 0.68 0.70 T:deoxysneq256128v1 0.85 0.86 0.91 T:aes128otrpv3 0.98 0.99 1.04 T:aes256otrpv3 1.08 1.10 1.14 T:seakeyakv2 1.85 1.87 1.89 T:morus640128v2 1.95 1.96 1.97 T:morus640128v1 2.20 2.23 2.25 T:norx6444v2 2.23 2.24 2.25 T:norx6441v3 2.23 2.24 2.26 T:norx6441v2 2.35 2.38 2.40 T:lakekeyakv2 2.51 2.61 2.70 T:aes128n12t8clocv3 2.60 2.62 2.69 T:aes128n12t8clocv2 2.62 2.63 2.63 T:aes128n12t8silcv2 2.62 2.63 2.63 T:aes128n12t8silcv3 2.62 2.63 2.63 T:aes128n8t8silcv2 2.55 2.63 2.71 T:aes128n8t8clocv2 2.68 2.69 2.72 T:norx6444v1 2.68 2.72 2.76 T:norx6441v1 2.64 2.73 2.82 T:lakekeyakv1 3.20 3.24 3.27 T:ketjemajorv2 3.31 3.31 3.37 T:aes128otrsv3 3.29 3.32 3.35 T:norx6461v3 3.30 3.32 3.36 T:norx6461v2 3.36 3.37 3.38 T:norx6444v3 4.00 4.03 4.06 T:norx6461v1 4.28 4.32 4.38 T:aes256otrsv3 4.69 4.70 4.72 ascon128av12 4.72 4.73 4.76 T:norx3241v3 4.72 4.74 4.77 T:norx3241v2 4.81 4.84 4.88 T:riverkeyakv2 5.16 5.21 5.25 T:acorn128v3 5.50 5.52 5.54 T:ketjeminorv2 5.58 5.60 5.64 T:norx3241v1 5.70 5.75 5.77 T:acorn128v2 5.82 5.83 5.84 T:aesjambuv1 6.70 6.72 6.75 T:norx3261v3 6.73 6.75 6.78 T:norx3261v2 6.85 6.86 6.88 T:ascon128v1 6.85 6.86 6.87 T:ascon128v11 6.95 6.97 6.98 ascon128v12 7.24 7.27 7.30 T:ascon128av11 7.27 7.29 7.31 T:ascon96v1 8.21 8.24 8.27 T:norx3261v1 9.29 9.32 9.35 T:aes128otrsv1 9.29 9.32 9.35 T:aes128otrsv2 9.49 9.51 9.53 T:aes128n8clocv1 9.50 9.53 9.56 T:aes128n12clocv1 11.49 11.52 11.56 T:aes128otrpv2 11.51 11.56 11.60 T:aes128otrpv1 12.13 12.18 12.22 T:aes256otrsv1 12.14 12.20 12.23 T:aes256otrsv2 14.42 14.48 14.52 T:aes256otrpv2 14.46 14.50 14.56 T:aes256otrpv1 15.42 15.46 15.51 T:proest256otrv1 18.21 18.27 18.37 T:colm127v1 18.92 18.94 18.97 T:aeadaes128ocbtaglen64v1 19.00 19.05 19.10 T:aeadaes128ocbtaglen96v1 22.04 22.08 22.13 T:aeadaes192ocbtaglen64v1 22.04 22.08 22.12 T:aeadaes192ocbtaglen96v1 25.09 25.13 25.18 T:aeadaes256ocbtaglen64v1 25.21 25.26 25.37 T:aeadaes256ocbtaglen96v1 29.08 29.13 29.16 T:twine80n6t4clocv2 30.21 30.27 30.35 T:twine80n6t4clocv3 35.90 36.00 36.08 T:proest128otrv1 37.89 37.98 38.08 T:ketjesrv1 43.94 44.12 44.46 T:aezv1 52.10 52.19 52.34 T:ketjesrv2 59.45 59.62 59.77 T:ketjejrv1 60.55 60.72 60.87 T:ketjejrv2 113.34 113.44 113.65 T:deoxyseq128128v13 113.26 114.27 117.03 T:deoxysneq128128v13 117.75 117.81 117.86 T:present80n6t4silcv3 156.20 157.19 157.95 T:deoxyseq256128v13 156.70 157.36 158.19 T:deoxysneq256128v13 180.55 180.63 180.74 T:led80n6t4silcv3 454.11 455.51 459.41 T:acorn128 1417.26 1417.59 1417.98 T:present80n6t4silcv2 1417.21 1417.61 1418.27 T:present80n6silcv1 3228.19 3231.06 3238.67 T:led80n6t4silcv2 3689.15 3692.97 3698.00 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.16 0.16 0.16 T:tiaoxinv2 0.16 0.16 0.16 T:tiaoxinv1 0.22 0.23 0.23 T:aegis128l 0.22 0.23 0.24 aegis128l 0.28 0.29 0.29 T:aezv4 0.29 0.29 0.30 T:aezv5 0.29 0.29 0.30 T:aezv3 0.30? 0.30? 0.35? T:aeadaes128ocbtaglen128v1 0.39 0.39 0.43 T:aeadaes256ocbtaglen128v1 0.39 0.40 0.41 T:aegis128 0.41 0.41 0.41 aegis256 0.49? 0.49? 0.58? T:aeadaes192ocbtaglen128v1 0.58 0.58 0.58 T:aes128otrcv3 0.63 0.63 0.64 T:deoxysi128v141 0.68 0.68 0.69 T:deoxysneq128128v1 0.73 0.74 0.74 T:deoxysi256v141 0.76 0.77 0.77 T:aes256otrcv3 0.77 0.78 0.79 T:deoxysneq256128v1 0.79 0.79 0.79 T:morus1280256v1 0.79 0.79 0.80 T:morus1280128v1 0.82 0.83 0.83 T:morus1280256v2 0.83 0.83 0.84 T:morus1280128v2 0.88 0.89 0.90 T:aes128otrpv3 0.88 0.89 0.89 T:aes128gcmv1 0.94 0.95 0.95 T:deoxysii128v141 0.95 0.95 0.96 aes256gcmv1 1.01 1.01 1.02 T:deoxyseq128128v1 1.05 1.06 1.06 T:aes256otrpv3 1.07 1.08 1.08 T:colm0v1 1.10 1.10 1.10 T:deoxysii256v141 1.15 1.16 1.17 T:deoxyseq256128v1 1.34 1.38 1.42 T:oceankeyakv2 1.68 1.69 1.70 T:seakeyakv2 1.72 1.73 1.75 T:lunarkeyakv2 1.99 2.01 2.02 T:morus640128v2 2.08? 2.09? 2.32? T:aes128otrsv3 2.14 2.14 2.15 T:morus640128v1 2.64 2.65 2.66 T:norx6441v2 2.65 2.66 2.67 T:norx6441v3 2.66 2.66 2.67 T:aes256otrsv3 2.74 2.75 2.76 T:aes128n12t8clocv2 2.74 2.75 2.76 T:aes128n12t8clocv3 2.75 2.75 2.77 T:aes128n8t8clocv2 2.76 2.76 2.77 T:aes128n12t8silcv2 2.76 2.76 2.77 T:aes128n12t8silcv3 2.76 2.77 2.77 T:aes128n8t8silcv2 2.82 2.84 2.86 T:lakekeyakv2 2.93 2.94 2.95 T:norx6444v3 3.05 3.07 3.08 T:norx6441v1 3.47 3.51 3.55 T:lakekeyakv1 3.61 3.62 3.64 T:norx6444v2 3.88 3.89 3.90 T:norx6461v3 3.88 3.89 3.90 T:norx6461v2 4.34 4.35 4.37 T:norx6444v1 4.58 4.59 4.61 T:norx6461v1 4.84 4.85 4.85 T:ketjemajorv2 4.83 4.85 4.86 ascon128av12 4.90 4.91 4.93 T:norx3241v3 4.90 4.91 4.93 T:norx3241v2 5.24 5.26 5.28 T:riverkeyakv2 5.75 5.76 5.76 T:aesjambuv1 5.84 5.86 5.88 T:norx3241v1 5.94 5.95 5.96 T:acorn128v3 6.52 6.53 6.55 T:acorn128v2 6.83 6.86 6.88 T:ketjeminorv2 6.97 6.97 6.98 T:ascon128v11 6.97 6.98 6.99 T:ascon128v1 7.11 7.12 7.13 ascon128v12 7.30 7.31 7.34 T:norx3261v3 7.32 7.34 7.35 T:norx3261v2 7.43 7.44 7.46 T:ascon128av11 7.45 7.45 7.47 T:ascon96v1 8.70 8.71 8.72 T:norx3261v1 10.23 10.25 10.29 T:aes128otrsv2 10.27 10.29 10.30 T:aes128otrsv1 11.66 11.68 11.71 T:aes128otrpv2 11.66 11.70 11.76 T:aes128otrpv1 13.20 13.21 13.23 T:aes256otrsv1 13.23 13.25 13.26 T:aes256otrsv2 13.80 13.83 13.84 T:aes128n12clocv1 13.81 13.83 13.84 T:aes128n8clocv1 14.64 14.67 14.71 T:aes256otrpv1 14.65 14.68 14.69 T:aes256otrpv2 16.45 16.47 16.49 T:proest256otrv1 19.46 19.48 19.52 T:aeadaes128ocbtaglen64v1 19.50 19.52 19.56 T:aeadaes128ocbtaglen96v1 22.65 22.66 22.70 T:aeadaes192ocbtaglen64v1 22.64 22.68 22.71 T:aeadaes192ocbtaglen96v1 25.77 25.78 25.93 T:aeadaes256ocbtaglen64v1 25.79 25.84 25.88 T:aeadaes256ocbtaglen96v1 28.95 29.04 29.09 T:colm127v1 29.80 29.81 29.82 T:twine80n6t4clocv2 30.77 30.78 30.78 T:twine80n6t4clocv3 37.12 37.17 37.21 T:proest128otrv1 39.50 39.56 39.62 T:ketjesrv1 56.92 57.00 57.07 T:ketjesrv2 62.38 62.47 62.56 T:ketjejrv1 62.83 64.71 64.85 T:ketjejrv2 87.42 87.55 87.82 T:aezv1 114.35 114.58 117.10 T:deoxysneq128128v13 119.86 119.89 119.92 T:present80n6t4silcv3 158.06 158.39 158.43 T:deoxysneq256128v13 172.12 172.19 172.84 T:deoxyseq128128v13 182.89 182.95 183.00 T:led80n6t4silcv3 237.04 237.63 239.34 T:deoxyseq256128v13 506.44 507.35 508.19 T:acorn128 2136.96 2137.28 2137.64 T:present80n6silcv1 2137.32 2137.60 2137.89 T:present80n6t4silcv2 4844.78 4847.51 4856.09 T:led80n6t4silcv2 5538.95 5543.67 5548.15 T:led80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.23 0.23 0.23 T:aegis128l 0.23 0.24 0.25 aegis128l 0.28 0.29 0.29 T:aezv4 0.29 0.29 0.29 T:aezv5 0.29 0.29 0.29 T:aezv3 0.30 0.30 0.30 T:tiaoxinv1 0.30 0.30 0.30 T:tiaoxinv2 0.30? 0.30? 0.36? T:aeadaes128ocbtaglen128v1 0.39? 0.39? 0.45? T:aeadaes256ocbtaglen128v1 0.41 0.41 0.41 aegis256 0.41 0.42 0.43 T:aegis128 0.49 0.49 0.53 T:aeadaes192ocbtaglen128v1 0.60 0.60 0.61 T:aes128otrcv3 0.72 0.72 0.73 T:deoxysi128v141 0.74 0.74 0.75 T:deoxysneq128128v1 0.79 0.80 0.80 T:aes256otrcv3 0.79 0.80 0.80 T:deoxysi256v141 0.79 0.80 0.80 T:morus1280256v1 0.80 0.80 0.81 T:morus1280128v1 0.82 0.83 0.84 T:deoxysneq256128v1 0.83 0.84 0.84 T:morus1280256v2 0.84 0.84 0.85 T:morus1280128v2 0.87 0.88 0.88 aes256gcmv1 0.88 0.89 0.90 T:aes128gcmv1 0.89 0.90 0.91 T:aes128otrpv3 0.98 0.98 0.98 T:deoxysii128v141 1.00 1.01 1.07 T:colm0v1 1.07 1.08 1.09 T:aes256otrpv3 1.09 1.09 1.12 T:deoxyseq128128v1 1.14 1.14 1.14 T:deoxysii256v141 1.17 1.19 1.22 T:deoxyseq256128v1 1.34 1.41 1.48 T:oceankeyakv2 1.71 1.72 1.73 T:seakeyakv2 1.81 1.82 1.84 T:lunarkeyakv2 2.10 2.11 2.30 T:aes128otrsv3 2.17 2.18 2.18 T:morus640128v1 2.25 2.25 2.26 T:morus640128v2 2.65 2.66 2.67 T:norx6441v3 2.66 2.67 2.68 T:norx6441v2 2.68 2.68 2.68 T:aes256otrsv3 2.68 2.69 2.69 T:aes128n12t8clocv3 2.69 2.69 2.70 T:aes128n12t8clocv2 2.69 2.69 2.71 T:aes128n8t8clocv2 2.70 2.70 2.71 T:aes128n12t8silcv3 2.70 2.70 2.71 T:aes128n8t8silcv2 2.70 2.71 2.71 T:aes128n12t8silcv2 2.84 2.86 2.87 T:lakekeyakv2 2.94 2.94 2.95 T:norx6444v3 3.11 3.12 3.14 T:norx6441v1 3.46 3.48 3.50 T:lakekeyakv1 3.61 3.62 3.65 T:norx6444v2 3.92 3.93 3.94 T:norx6461v3 3.95 3.96 3.97 T:norx6461v2 4.34 4.36 4.38 T:norx6444v1 4.56 4.57 4.59 T:norx6461v1 4.81 4.82 4.83 ascon128av12 4.95 4.96 4.97 T:ketjemajorv2 5.22 5.23 5.24 T:norx3241v2 5.22 5.23 5.24 T:norx3241v3 5.35 5.36 5.38 T:riverkeyakv2 5.89 5.91 5.92 T:acorn128v3 6.11 6.12 6.12 T:aesjambuv1 6.13 6.14 6.16 T:norx3241v1 6.40 6.41 6.42 T:acorn128v2 6.83 6.84 6.86 T:ketjeminorv2 6.97 6.98 6.99 T:ascon128v11 6.98 6.98 6.99 T:ascon128v1 7.07 7.08 7.09 ascon128v12 7.49 7.50 7.51 T:norx3261v3 7.52 7.53 7.55 T:norx3261v2 7.68 7.69 7.70 T:ascon128av11 7.68 7.69 7.70 T:ascon96v1 8.92 8.93 8.95 T:norx3261v1 10.98 11.00 11.01 T:aes128otrsv1 10.99 11.01 11.02 T:aes128otrsv2 11.82 11.84 11.86 T:aes128otrpv1 11.83 11.84 11.86 T:aes128otrpv2 13.94 13.96 13.98 T:aes256otrsv1 14.02 14.03 14.04 T:aes256otrsv2 14.14 14.16 14.19 T:aes128n8clocv1 14.17 14.19 14.20 T:aes128n12clocv1 14.88 14.89 14.92 T:aes256otrpv2 14.92 14.94 14.95 T:aes256otrpv1 16.70 16.71 16.73 T:proest256otrv1 23.91 23.93 23.98 T:aeadaes128ocbtaglen64v1 23.92 23.94 23.98 T:aeadaes128ocbtaglen96v1 28.10 28.11 28.13 T:aeadaes192ocbtaglen96v1 28.11 28.14 28.20 T:aeadaes192ocbtaglen64v1 29.76 29.78 29.80 T:twine80n6t4clocv2 30.68 30.71 30.73 T:twine80n6t4clocv3 32.20 32.23 32.25 T:aeadaes256ocbtaglen96v1 32.21 32.24 32.30 T:aeadaes256ocbtaglen64v1 37.38 37.43 37.47 T:proest128otrv1 37.49 37.52 37.55 T:colm127v1 40.45 40.49 40.56 T:ketjesrv1 54.61 54.71 54.75 T:ketjesrv2 63.20 63.34 63.50 T:ketjejrv1 63.09 65.12 65.33 T:ketjejrv2 87.22 87.41 87.60 T:aezv1 119.81 119.84 119.87 T:present80n6t4silcv3 123.26 123.35 124.51 T:deoxysneq128128v13 167.33 167.85 168.15 T:deoxysneq256128v13 172.22 172.26 172.50 T:deoxyseq128128v13 182.78 182.92 183.16 T:led80n6t4silcv3 237.08 237.30 239.30 T:deoxyseq256128v13 510.76 511.22 512.39 T:acorn128 2137.68 2137.86 2138.31 T:present80n6silcv1 2137.69 2137.88 2138.18 T:present80n6t4silcv2 4843.12 4844.77 4846.19 T:led80n6t4silcv2 5540.61 5545.20 5552.22 T:led80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.16 0.16 0.16 T:aezv3 0.16 0.16 0.16 T:aezv4 0.16 0.16 0.16 T:aezv5 0.23 0.23 0.23 T:aegis128l 0.24 0.24 0.25 aegis128l 0.30 0.30 0.30 T:tiaoxinv2 0.30 0.30 0.30 T:tiaoxinv1 0.30 0.30 0.33 T:aeadaes128ocbtaglen128v1 0.39? 0.39? 0.46? T:aeadaes256ocbtaglen128v1 0.42 0.42 0.43 aegis256 0.41 0.42 0.43 T:aegis128 0.48? 0.49? 0.55? T:aeadaes192ocbtaglen128v1 0.60 0.60 0.61 T:aes128otrcv3 0.72 0.72 0.73 T:deoxysi128v141 0.73 0.74 0.74 T:deoxysneq128128v1 0.79 0.80 0.80 T:morus1280256v1 0.79 0.80 0.80 T:aes256otrcv3 0.79 0.80 0.80 T:deoxysi256v141 0.80 0.80 0.80 T:morus1280128v1 0.82 0.83 0.83 T:deoxysneq256128v1 0.83 0.84 0.84 T:morus1280256v2 0.84 0.84 0.85 T:morus1280128v2 0.88 0.88 0.88 aes256gcmv1 0.88 0.89 0.90 T:aes128gcmv1 0.90 0.90 0.93 T:aes128otrpv3 0.98 0.98 0.98 T:deoxysii128v141 1.07 1.08 1.10 T:aes256otrpv3 1.02 1.08 1.09 T:colm0v1 1.10 1.12 1.14 T:deoxyseq128128v1 1.14 1.14 1.14 T:deoxysii256v141 1.16 1.17 1.20 T:deoxyseq256128v1 1.31 1.36 1.40 T:oceankeyakv2 1.72 1.73 1.75 T:seakeyakv2 1.82 1.83 1.84 T:lunarkeyakv2 2.10 2.12 2.31 T:aes128otrsv3 2.17 2.18 2.18 T:morus640128v1 2.25 2.25 2.26 T:morus640128v2 2.65 2.66 2.67 T:norx6441v3 2.66 2.67 2.68 T:norx6441v2 2.68 2.68 2.69 T:aes128n12t8clocv3 2.68 2.68 2.68 T:aes128n12t8clocv2 2.68 2.68 2.70 T:aes256otrsv3 2.68 2.68 2.71 T:aes128n8t8clocv2 2.70 2.70 2.70 T:aes128n12t8silcv2 2.70 2.70 2.72 T:aes128n8t8silcv2 2.70 2.71 2.72 T:aes128n12t8silcv3 2.86 2.88 2.90 T:lakekeyakv2 2.94 2.94 2.95 T:norx6444v3 3.12 3.13 3.15 T:norx6441v1 3.48 3.50 3.52 T:lakekeyakv1 3.60 3.62 3.64 T:norx6444v2 3.93 3.94 3.95 T:norx6461v3 3.95 3.96 3.97 T:norx6461v2 4.35 4.36 4.38 T:norx6444v1 4.56 4.57 4.59 T:norx6461v1 4.81 4.82 4.83 ascon128av12 4.96 4.97 4.99 T:ketjemajorv2 5.22 5.23 5.24 T:norx3241v2 5.22 5.23 5.24 T:norx3241v3 5.35 5.36 5.38 T:riverkeyakv2 5.89 5.91 5.94 T:acorn128v3 6.11 6.12 6.12 T:aesjambuv1 6.13 6.14 6.16 T:norx3241v1 6.40 6.42 6.43 T:acorn128v2 6.86 6.87 6.90 T:ketjeminorv2 6.97 6.98 6.99 T:ascon128v1 6.97 6.98 6.99 T:ascon128v11 7.07 7.08 7.09 ascon128v12 7.14 7.15 7.16 T:ascon128av11 7.14 7.15 7.16 T:ascon96v1 7.49 7.50 7.52 T:norx3261v3 7.52 7.54 7.55 T:norx3261v2 8.93 8.94 8.95 T:norx3261v1 10.98 10.99 11.00 T:aes128otrsv2 11.01 11.02 11.03 T:aes128otrsv1 11.83 11.84 11.86 T:aes128otrpv1 11.83 11.85 11.87 T:aes128otrpv2 13.94 13.95 13.97 T:aes256otrsv1 14.03 14.05 14.07 T:aes256otrsv2 14.15 14.17 14.18 T:aes128n8clocv1 14.16 14.17 14.19 T:aes128n12clocv1 14.91 14.93 14.95 T:aes256otrpv2 14.92 14.94 14.96 T:aes256otrpv1 16.69 16.71 16.73 T:proest256otrv1 23.93 23.94 23.95 T:aeadaes128ocbtaglen96v1 23.95 23.97 24.00 T:aeadaes128ocbtaglen64v1 28.05 28.10 28.11 T:aeadaes192ocbtaglen64v1 28.09 28.14 28.19 T:aeadaes192ocbtaglen96v1 29.76 29.77 29.78 T:twine80n6t4clocv2 30.66 30.68 30.71 T:twine80n6t4clocv3 32.20 32.22 32.25 T:aeadaes256ocbtaglen64v1 32.20 32.23 32.24 T:aeadaes256ocbtaglen96v1 37.38 37.42 37.45 T:proest128otrv1 37.49 37.59 37.63 T:colm127v1 40.44 40.48 40.54 T:ketjesrv1 54.61 54.67 54.75 T:ketjesrv2 63.25 63.35 63.56 T:ketjejrv1 63.06 65.21 65.42 T:ketjejrv2 87.11 87.22 87.56 T:aezv1 119.82 119.86 119.90 T:present80n6t4silcv3 123.39 123.57 124.84 T:deoxysneq128128v13 167.35 167.70 167.90 T:deoxysneq256128v13 172.19 172.25 172.31 T:deoxyseq128128v13 182.79 182.88 183.12 T:led80n6t4silcv3 236.93 237.40 238.80 T:deoxyseq256128v13 510.46 511.65 512.06 T:acorn128 2137.70 2137.98 2138.26 T:present80n6t4silcv2 2137.72 2138.14 2138.51 T:present80n6silcv1 4845.32 4848.29 4859.96 T:led80n6t4silcv2 5533.94 5539.40 5545.06 T:led80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.83 0.85 0.89 T:aegis128 0.90 0.93 0.95 T:aegis128l 0.92 0.94 0.95 aegis128l 1.03 1.05 1.07 T:tiaoxinv2 1.05 1.07 1.10 T:tiaoxinv1 1.17 1.19 1.21 aegis256 1.19 1.20 1.22 T:aezv5 1.28 1.31 1.33 T:aezv4 1.36 1.40 1.43 T:aezv3 2.62 2.65 2.72 T:deoxysneq128128v1 2.65 2.70 2.74 T:colm0v1 2.98 3.01 3.05 T:aes128otrpv3 3.22 3.25 3.29 T:aes128otrsv3 3.25? 3.30? 4.71? T:aeadaes192ocbtaglen128v1 3.39 3.43 3.47 T:deoxysneq256128v1 3.57? 3.63? 4.81? T:aeadaes128ocbtaglen128v1 3.70 3.71 3.72 T:aes128otrcv3 3.74 3.81 3.87 T:aes256otrpv3 4.03 4.07 4.09 T:aes128n12t8clocv2 4.03 4.07 4.10 T:aes128n12t8clocv3 4.07? 4.10? 4.57? T:aes128n8t8clocv2 4.06 4.11 4.42 T:aes256otrsv3 4.03? 4.12? 5.29? T:aeadaes256ocbtaglen128v1 4.11 4.16 4.21 T:deoxysi128v141 4.26 4.27 4.32 T:deoxyseq128128v1 4.34 4.41 4.69 T:deoxysi256v141 4.42 4.46 4.48 T:aes128n8t8silcv2 4.45 4.46 4.48 T:aes128n12t8silcv3 4.45 4.46 4.48 T:aes128n12t8silcv2 4.81 4.82 4.83 T:aes256otrcv3 4.91 4.96 5.02 T:deoxyseq256128v1 5.11 5.17 5.21 T:morus1280256v1 5.22 5.27 5.34 T:morus1280128v1 5.67 5.75 5.79 T:deoxysii128v141 5.86 5.88 5.98 aes256gcmv1 6.02 6.07 6.10 T:morus1280256v2 6.14 6.17 6.21 T:morus1280128v2 6.14 6.20 6.26 T:deoxysii256v141 6.21 6.31 6.36 T:morus640128v1 6.38 6.43 6.48 T:aesjambuv1 7.33 7.39 7.58 T:morus640128v2 7.63 7.93 8.04 ascon128av12 9.25 9.30 9.37 T:ascon128v1 9.25 9.30 9.41 T:ascon128v11 9.42 9.45 9.60 ascon128v12 9.63 9.67 9.74 T:norx6441v2 9.70 9.75 9.85 T:norx6441v3 9.65 9.88 10.36 T:norx6441v1 11.05 11.11 11.24 T:ascon96v1 11.15 11.31 11.61 T:ascon128av11 10.97? 12.13? 12.59? T:lakekeyakv1 12.06 12.19 12.55 T:riverkeyakv2 12.23 12.41 12.61 T:lakekeyakv2 12.96 13.02 13.08 T:norx3241v3 13.05 13.17 13.31 T:norx3241v2 13.51 13.56 13.65 T:norx6461v2 13.89 13.95 14.06 T:norx6461v3 13.93 14.10 14.38 T:norx6461v1 14.40 14.48 14.59 T:norx3241v1 14.72 14.90 15.11 T:aes128gcmv1 14.85 15.38 16.17 T:oceankeyakv2 15.59 15.84 16.22 T:seakeyakv2 16.57 17.32 17.61 T:aes128otrsv1 17.33 17.41 17.56 T:aes128n12clocv1 17.30 17.42 17.60 T:aes128otrsv2 17.35 17.50 17.67 T:aes128n8clocv1 18.29 18.45 18.62 T:aes128otrpv1 18.33 18.45 18.64 T:aes128otrpv2 18.51 18.62 18.74 T:norx6444v3 18.73 18.83 18.96 T:norx3261v2 18.77 18.85 18.93 T:norx3261v3 20.96 21.08 21.22 T:norx3261v1 21.87 21.99 22.10 T:acorn128v3 22.06 22.27 22.53 T:aes256otrsv1 22.12 22.31 22.71 T:aes256otrsv2 22.66 22.78 22.93 T:ketjeminorv2 22.93 23.07 23.29 T:aes256otrpv2 22.94 23.07 23.33 T:aes256otrpv1 23.97 24.16 24.31 T:acorn128v2 25.75 25.85 25.97 T:norx6444v2 26.44 26.67 27.14 T:lunarkeyakv2 30.56 30.67 30.79 T:aeadaes128ocbtaglen64v1 30.66 30.86 31.03 T:aeadaes128ocbtaglen96v1 31.08 31.14 31.24 T:ketjemajorv2 31.32 31.45 31.62 T:norx6444v1 34.94 35.13 35.42 T:aeadaes192ocbtaglen96v1 35.09 35.22 35.46 T:aeadaes192ocbtaglen64v1 36.37 36.47 36.53 T:twine80n6t4clocv3 36.74 36.78 36.83 T:twine80n6t4clocv2 40.27 40.36 40.64 T:aeadaes256ocbtaglen64v1 40.39 40.55 40.80 T:aeadaes256ocbtaglen96v1 43.34 43.72 43.94 T:colm127v1 47.09 47.35 47.74 T:proest256otrv1 64.67 64.94 65.20 T:ketjesrv1 72.06 72.33 72.59 T:proest128otrv1 82.95 84.07 85.28 T:ketjejrv1 83.92 84.30 84.82 T:ketjejrv2 91.73 91.85 91.98 T:ketjesrv2 95.67 95.93 96.24 T:aezv1 128.39 128.79 131.49 T:deoxysneq128128v13 146.05 146.19 146.38 T:present80n6t4silcv3 177.26 177.84 178.42 T:deoxysneq256128v13 213.52 213.81 214.40 T:deoxyseq128128v13 216.19 216.45 216.76 T:led80n6t4silcv3 294.93 296.54 296.95 T:deoxyseq256128v13 1770.45 1778.78 1780.76 T:acorn128 2393.08 2394.41 2396.06 T:present80n6t4silcv2 2392.76 2394.68 2396.34 T:present80n6silcv1 4254.57 4281.21 4431.76 T:led80n6t4silcv2 5354.41 5392.13 5576.80 T:led80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.87 0.88 0.90 T:aegis128 0.93 0.95 0.97 T:aegis128l 0.96 1.01 1.05 aegis128l 1.13 1.14 1.17 T:tiaoxinv2 1.14 1.16 1.18 T:tiaoxinv1 1.17 1.19 1.22 T:aezv5 1.23 1.25 1.26 aegis256 1.30 1.32 1.33 T:aezv4 1.39 1.41 1.44 T:aezv3 2.71 2.74 2.76 T:colm0v1 3.05? 3.09? 4.21? T:aeadaes192ocbtaglen128v1 3.14 3.17 3.21 T:aes128otrpv3 3.55? 3.59? 4.62? T:aeadaes128ocbtaglen128v1 3.57 3.64 3.66 T:aes128otrsv3 3.81 3.85 3.90 T:aes256otrpv3 3.93 3.96 4.01 T:deoxysneq128128v1 4.02 4.04 4.07 T:aes128n12t8clocv3 4.05? 4.10? 4.64? T:aes128n8t8clocv2 4.06 4.10 4.15 T:aes128n12t8clocv2 4.09? 4.13? 5.78? T:aeadaes256ocbtaglen128v1 4.13 4.13 4.13 T:aes128otrcv3 4.27 4.33 4.39 T:deoxysneq256128v1 4.38 4.41 4.44 T:aes256otrsv3 4.44 4.47 4.51 T:aes128n12t8silcv3 4.44 4.47 4.51 T:aes128n12t8silcv2 4.44 4.47 4.49 T:aes128n8t8silcv2 5.25 5.27 5.30 T:aes256otrcv3 5.35 5.37 5.41 T:morus1280256v1 5.45 5.47 5.50 T:deoxyseq256128v1 5.46 5.49 5.54 T:morus1280128v1 5.71 5.76 5.80 T:deoxysi256v141 5.73 5.78 5.82 T:deoxyseq128128v1 5.99 6.03 6.07 T:deoxysi128v141 6.25 6.29 6.33 T:morus1280256v2 6.31 6.39 6.45 T:morus640128v1 6.36 6.40 6.45 T:morus1280128v2 6.40 6.43 6.53 aes256gcmv1 6.43 6.46 6.50 T:deoxysii128v141 6.78 6.83 6.87 T:aesjambuv1 7.12 7.18 7.24 T:deoxysii256v141 7.42 7.56 7.83 T:morus640128v2 7.73 8.01 8.06 ascon128av12 9.25 9.30 9.40 T:ascon128v11 9.28 9.32 9.40 T:ascon128v1 9.41 9.46 9.53 ascon128v12 9.61 9.66 9.73 T:norx6441v3 9.70 9.75 9.80 T:norx6441v2 9.59 9.95 10.41 T:norx6441v1 10.59? 10.97? 11.91? T:lakekeyakv1 11.28 11.34 11.41 T:ascon96v1 11.34 11.40 11.45 T:ascon128av11 12.10 12.17 12.38 T:riverkeyakv2 12.26 12.44 12.66 T:lakekeyakv2 13.29 13.35 13.41 T:norx3241v2 13.42 13.50 13.61 T:norx3241v3 13.68 13.74 13.82 T:norx6461v3 13.80 13.92 14.21 T:norx6461v1 13.85 13.93 14.01 T:norx6461v2 14.63 14.82 14.93 T:norx3241v1 15.07 15.15 15.39 T:aes128gcmv1 15.07 15.81 16.35 T:oceankeyakv2 15.76 15.92 16.14 T:seakeyakv2 17.53 17.61 17.96 T:aes128n12clocv1 17.58 17.74 17.96 T:aes128n8clocv1 17.74 17.83 17.95 T:aes128otrsv1 17.84 18.11 18.54 T:aes128otrsv2 18.40 18.48 18.62 T:aes128otrpv1 18.60 18.63 18.69 T:norx6444v3 18.50 18.76 19.00 T:aes128otrpv2 18.93 18.99 19.08 T:norx3261v3 19.01 19.13 19.29 T:norx3261v2 20.90 21.00 21.12 T:norx3261v1 21.92 22.11 22.45 T:acorn128v3 22.46 22.63 22.94 T:aes256otrsv1 22.65 22.76 22.93 T:aes256otrsv2 22.90 23.13 23.45 T:ketjeminorv2 23.18 23.28 23.50 T:aes256otrpv1 23.12 23.32 23.66 T:aes256otrpv2 23.69 23.87 24.05 T:acorn128v2 25.40 25.59 25.85 T:norx6444v2 26.77 27.10 27.68 T:lunarkeyakv2 31.12 31.34 31.65 T:ketjemajorv2 31.48 31.60 31.95 T:norx6444v1 36.37 36.43 36.47 T:twine80n6t4clocv3 36.94 36.97 37.04 T:twine80n6t4clocv2 37.80 37.93 38.20 T:aeadaes128ocbtaglen64v1 37.90 38.16 38.46 T:aeadaes128ocbtaglen96v1 43.73 43.87 44.25 T:aeadaes192ocbtaglen96v1 44.00 44.23 44.43 T:aeadaes192ocbtaglen64v1 48.68 48.88 49.10 T:proest256otrv1 50.80 50.92 51.10 T:aeadaes256ocbtaglen64v1 50.82 51.07 51.20 T:aeadaes256ocbtaglen96v1 51.95 52.15 52.43 T:colm127v1 65.43 65.73 65.99 T:ketjesrv1 73.59 73.77 74.21 T:proest128otrv1 83.89 84.52 85.15 T:ketjejrv2 83.69 84.75 86.21 T:ketjejrv1 89.32 89.65 90.27 T:ketjesrv2 97.85 98.49 99.10 T:aezv1 137.43 138.10 139.10 T:deoxysneq128128v13 145.99 146.18 146.37 T:present80n6t4silcv3 187.59 188.07 188.45 T:deoxysneq256128v13 213.65 214.10 214.32 T:deoxyseq128128v13 216.40 216.73 217.01 T:led80n6t4silcv3 296.37 296.60 296.97 T:deoxyseq256128v13 1797.57 1803.71 1807.80 T:acorn128 2393.06 2394.71 2395.99 T:present80n6t4silcv2 2393.35 2395.86 2397.68 T:present80n6silcv1 4241.51 4245.28 4482.55 T:led80n6t4silcv2 5326.74 5337.66 5344.76 T:led80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.75? 0.86? 1.03? T:aezv5 0.87 0.89 0.90 T:aegis128 0.94 0.95 0.97 T:aegis128l 0.87? 0.96? 1.10? T:aezv4 0.98 1.00 1.04 aegis128l 0.80? 1.05? 1.35? T:aezv3 1.12 1.13 1.15 T:tiaoxinv2 1.13 1.15 1.17 T:tiaoxinv1 1.23 1.26 1.29 aegis256 2.78? 2.80? 3.09? T:colm0v1 3.05? 3.09? 4.17? T:aeadaes192ocbtaglen128v1 3.18 3.21 3.25 T:aes128otrpv3 3.55? 3.60? 4.45? T:aeadaes128ocbtaglen128v1 3.59 3.64 3.67 T:aes128otrsv3 3.81 3.85 4.02 T:aes256otrpv3 3.84 3.88 3.94 T:deoxysneq128128v1 3.92 3.94 3.96 T:aes128n12t8clocv3 3.91 3.95 3.97 T:aes128n12t8clocv2 3.95? 3.98? 4.66? T:aes128n8t8clocv2 4.08? 4.13? 5.86? T:aeadaes256ocbtaglen128v1 4.13 4.13 4.13 T:aes128otrcv3 4.18 4.24 4.30 T:deoxysneq256128v1 4.34 4.39 4.45 T:aes128n8t8silcv2 4.35 4.40 4.43 T:aes128n12t8silcv2 4.36 4.40 4.44 T:aes128n12t8silcv3 4.42 4.44 4.46 T:aes256otrsv3 5.26 5.27 5.30 T:aes256otrcv3 5.35 5.39 5.44 T:morus1280256v1 5.42 5.46 5.49 T:deoxyseq256128v1 5.46 5.50 5.54 T:morus1280128v1 5.69 5.73 5.80 T:deoxysi256v141 5.75 5.78 5.82 T:deoxyseq128128v1 5.98 6.01 6.07 T:deoxysi128v141 6.23 6.28 6.33 T:morus1280256v2 6.36 6.41 6.44 T:morus1280128v2 6.38 6.44 6.51 T:morus640128v1 6.40 6.45 6.52 aes256gcmv1 6.42 6.45 6.49 T:deoxysii128v141 6.78 6.84 6.88 T:aesjambuv1 7.13 7.18 7.23 T:deoxysii256v141 7.49 7.52 7.59 ascon128av12 7.41 7.54 7.75 T:morus640128v2 9.25 9.29 9.36 T:ascon128v11 9.26 9.32 9.45 T:ascon128v1 9.41 9.47 9.54 ascon128v12 9.63 9.68 9.73 T:norx6441v3 9.71 9.75 9.83 T:norx6441v2 9.60 9.87 10.25 T:norx6441v1 10.68 10.74 10.79 T:ascon96v1 10.76 10.80 10.88 T:ascon128av11 10.64? 11.26? 12.15? T:lakekeyakv1 12.15 12.24 12.40 T:riverkeyakv2 12.27 12.39 12.66 T:lakekeyakv2 13.31 13.38 13.47 T:norx3241v2 13.37 13.44 13.52 T:norx3241v3 13.72 13.88 14.02 T:norx6461v3 13.77 13.90 14.11 T:norx6461v1 13.90 13.99 14.12 T:norx6461v2 14.42 14.48 14.61 T:norx3241v1 15.12 15.23 15.41 T:aes128gcmv1 15.15 15.33 16.18 T:oceankeyakv2 15.89 16.02 16.30 T:seakeyakv2 17.48 17.57 17.74 T:aes128n12clocv1 17.49 17.70 18.01 T:aes128n8clocv1 17.88 17.97 18.13 T:aes128otrsv2 17.83 17.99 18.11 T:aes128otrsv1 18.40 18.53 18.96 T:aes128otrpv1 18.51 18.60 18.68 T:norx6444v3 18.47 18.81 19.14 T:aes128otrpv2 18.92 19.00 19.12 T:norx3261v3 19.14 19.26 19.41 T:norx3261v2 20.81 20.89 21.13 T:norx3261v1 21.90 22.00 22.67 T:acorn128v3 22.52 22.69 23.01 T:ketjeminorv2 22.84 22.94 23.06 T:aes256otrsv2 22.63 22.98 23.15 T:aes256otrsv1 23.31 23.44 23.68 T:aes256otrpv2 23.41 23.77 24.02 T:aes256otrpv1 23.66 23.78 24.00 T:acorn128v2 25.44 25.60 25.85 T:norx6444v2 26.73 27.01 27.64 T:lunarkeyakv2 31.20 31.49 31.85 T:ketjemajorv2 31.39 31.57 32.01 T:norx6444v1 36.36 36.43 36.50 T:twine80n6t4clocv3 36.93 37.00 37.06 T:twine80n6t4clocv2 37.74 37.86 38.10 T:aeadaes128ocbtaglen64v1 37.78 37.95 38.11 T:aeadaes128ocbtaglen96v1 43.62 43.77 43.85 T:aeadaes192ocbtaglen96v1 43.85 44.05 44.18 T:aeadaes192ocbtaglen64v1 47.42 47.59 47.75 T:proest256otrv1 50.68 50.88 51.04 T:aeadaes256ocbtaglen64v1 50.70 50.89 50.98 T:aeadaes256ocbtaglen96v1 51.77 51.94 52.25 T:colm127v1 65.34 65.58 65.99 T:ketjesrv1 73.52 73.59 73.76 T:proest128otrv1 83.98 84.41 84.94 T:ketjejrv2 83.85 85.03 86.52 T:ketjejrv1 89.55 89.88 90.15 T:ketjesrv2 97.68 98.05 98.94 T:aezv1 137.56 138.20 139.00 T:deoxysneq128128v13 146.23 146.44 146.72 T:present80n6t4silcv3 187.25 187.78 188.36 T:deoxysneq256128v13 213.66 213.85 214.08 T:deoxyseq128128v13 216.35 216.62 216.82 T:led80n6t4silcv3 293.58 294.48 296.98 T:deoxyseq256128v13 1797.45 1805.27 1806.96 T:acorn128 2392.93 2394.75 2396.47 T:present80n6t4silcv2 2393.75 2395.28 2397.47 T:present80n6silcv1 4246.22 4248.74 4262.38 T:led80n6t4silcv2 5342.69 5356.11 5376.98 T:led80n6silcv1