VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: riscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1000MHz; riscvunleashed000, supercop-20240107

[Page version: 20251103 11:56:53]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 6.54 6.57 6.60 T:morus1280128v1 6.57 6.58 6.63 T:morus1280256v2 6.57 6.59 6.63 T:morus1280128v2 6.57 6.60 6.62 T:morus1280256v1 14.53 14.56 14.60 T:morus640128v2 14.54 14.57 14.60 T:morus640128v1 15.39 15.55 15.72 T:lunarkeyakv2 18.46 18.48 18.51 T:norx6441v3 18.57 18.60 18.63 T:norx6441v2 18.59 18.63 18.68 T:norx6444v2 18.64 18.65 18.72 T:norx6444v3 19.26 19.34 19.72 T:lakekeyakv1 20.95 21.01 21.05 T:acorn128v2 20.95 21.05 21.23 T:lakekeyakv2 21.47 21.50 21.54 T:acorn128v3 21.32 21.51 21.70 T:seakeyakv2 21.50 21.55 21.64 T:norx6441v1 21.57 21.63 21.76 T:norx6444v1 21.47 21.63 21.82 T:tiaoxinv1 21.46 21.63 21.84 T:tiaoxinv2 21.48 21.66 21.91 T:oceankeyakv2 24.95 25.00 25.07 T:norx6461v2 25.06 25.10 25.16 T:norx6461v3 26.73 26.76 26.80 T:aegis128l 27.95 27.97 28.04 T:norx6461v1 32.93 32.96 32.98 T:norx3241v2 32.93 32.97 33.03 T:norx3241v3 33.25 33.27 33.34 T:aegis128 33.71 33.75 33.80 T:norx3241v1 36.46 36.51 36.75 T:ascon128av11 36.78 36.81 36.88 T:ascon96v1 36.76 36.81 36.92 ascon128av12 39.67 39.71 39.80 T:aegis256 46.04 46.07 46.11 T:norx3261v2 46.07 46.10 46.12 T:norx3261v3 45.91 46.14 46.28 T:ketjeminorv2 46.36 46.55 46.69 T:ketjemajorv2 46.64 46.66 46.69 T:norx3261v1 52.34 52.38 52.50 T:ascon128v11 52.35 52.38 52.51 T:ascon128v1 52.49 52.50 52.59 ascon128v12 54.89 55.03 55.27 T:riverkeyakv2 68.21 68.27 68.39 T:aes128otrcv3 71.08 71.24 71.58 T:seakeyakv1 70.97 71.49 71.85 T:oceankeyakv1 62.15? 79.50? 85.94? T:aeadaes128ocbtaglen128v1 80.62 80.73 81.14 T:aes128otrpv1 80.69 80.74 80.91 T:aes128otrpv2 80.67 80.74 81.18 T:aes128otrsv2 80.64 80.79 81.31 T:aes128otrsv1 84.27 84.35 84.56 T:aes128otrpv3 84.32 84.38 84.56 T:aes128otrsv3 90.29 90.33 90.65 T:aes256otrcv3 99.01 99.04 99.10 T:deoxysi128v141 102.69 102.71 102.83 T:aes256otrpv1 102.71 102.77 102.87 T:aes256otrsv2 102.69 102.77 102.95 T:aes256otrsv1 102.72 102.79 102.85 T:aes256otrpv2 87.27? 104.76? 111.17? T:aeadaes256ocbtaglen128v1 106.35 106.40 106.49 T:aes256otrpv3 106.35 106.43 106.85 T:aes256otrsv3 110.15 110.27 110.56 T:deoxysi256v141 110.12 111.56 112.79 T:aes128gcmv1 115.74 115.75 115.82 T:aesjambuv1 122.47 122.52 122.72 T:proest256otrv1 133.44 133.58 133.95 T:aes128n12clocv1 133.57 133.63 133.77 T:aes128n12t8clocv3 133.43 133.65 134.00 T:aes128n8t8clocv2 133.68 133.77 133.99 T:aes128n8clocv1 133.54 133.95 144.99 T:aes128n12t8clocv2 135.18 136.79 138.97 T:aes256gcmv1 146.94 147.00 147.25 T:aes128n12t8silcv2 146.97 147.06 147.40 T:aes128n8t8silcv2 147.11 147.15 147.59 T:aes128n12t8silcv3 146.99 147.28 147.73 T:aes128n8silcv1 146.80 147.42 150.44 T:aes128n12silcv1 156.39 156.55 157.97 T:riverkeyakv1 167.97 168.01 168.17 T:ketjesrv1 169.79 169.82 169.86 T:ketjesrv2 208.57 208.84 208.93 T:deoxysii128v141 274.65 274.85 276.78 T:proest128otrv1 278.60 279.80 280.44 T:ketjejrv1 360.18 360.87 362.59 T:deoxysneq128128v13 360.97 361.17 363.94 T:deoxysneq128128v1 409.34 411.35 413.08 T:aezv5 481.55 482.41 483.30 T:ketjejrv2 539.01 540.99 550.47 T:aezv4 558.65 559.24 562.49 T:twine80n6clocv1 591.12 592.03 597.74 T:deoxysneq256128v13 591.49 592.38 598.92 T:deoxysneq256128v1 697.15 697.70 705.93 T:deoxysii256v141 717.43 718.61 726.35 T:deoxyseq128128v1 718.51 719.07 727.57 T:deoxyseq128128v13 728.93 729.20 736.32 T:twine80n6t4clocv3 728.83 729.69 736.62 T:twine80n6t4clocv2 936.64 941.55 946.24 T:aezv1 1092.75 1101.72 1103.24 T:aezv3 1172.93 1180.30 1181.30 T:deoxyseq256128v1 1181.19? 1182.90? 1428.40? T:deoxyseq256128v13 3814.33 3846.98 3889.54 T:acorn128 15668.62 15671.95 15685.46 T:present80n6t4silcv2 16151.76 16156.74 16166.31 T:present80n6silcv1 16152.33 16158.57 16171.52 T:present80n6t4silcv3 35475.13 35486.55 35498.84 T:led80n6t4silcv2 35627.07 35643.84 35661.74 T:led80n6silcv1 35662.76 35677.36 35687.21 T:led80n6t4silcv3 62122.60 62135.90 62159.36 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 6.69 6.72 6.75 T:morus1280256v1 6.70 6.73 6.74 T:morus1280256v2 6.73 6.75 6.78 T:morus1280128v1 6.73 6.75 6.77 T:morus1280128v2 14.79 14.82 14.87 T:morus640128v2 14.81 14.82 14.84 T:morus640128v1 15.56 15.89 16.28 T:lunarkeyakv2 18.50 18.56 18.71 T:norx6444v3 18.58 18.61 18.63 T:norx6441v2 18.57 18.61 18.65 T:norx6441v3 18.61 18.67 18.76 T:norx6444v2 19.05 19.13 19.54 T:lakekeyakv1 21.40 21.44 21.78 T:lakekeyakv2 21.47 21.50 21.63 T:acorn128v2 21.73 21.75 21.80 T:acorn128v3 21.56 21.92 22.30 T:seakeyakv2 21.86 22.04 22.23 T:oceankeyakv2 22.20 22.25 22.38 T:norx6441v1 22.24 22.28 22.42 T:norx6444v1 23.94 24.23 24.60 T:tiaoxinv1 24.10 24.24 24.38 T:tiaoxinv2 24.95 25.00 25.09 T:norx6461v2 25.04 25.11 25.17 T:norx6461v3 26.76 26.78 26.83 T:aegis128l 28.66 28.69 28.78 T:norx6461v1 33.28 33.33 33.42 T:aegis128 35.65 35.66 35.79 T:norx3241v2 35.66 35.67 35.76 T:norx3241v3 36.53 36.56 36.61 T:ascon96v1 36.71 36.75 36.83 T:norx3241v1 36.77 36.81 37.00 ascon128av12 36.76 36.82 36.98 T:ascon128av11 39.80 39.83 39.96 T:aegis256 46.00 46.14 46.37 T:ketjemajorv2 48.77 48.80 48.86 T:norx3261v2 48.77 48.80 48.84 T:norx3261v3 48.71 48.90 49.03 T:ketjeminorv2 49.62 49.64 49.85 T:norx3261v1 52.49 52.50 52.63 T:ascon128v11 52.49 52.51 52.70 ascon128v12 52.48 52.51 52.79 T:ascon128v1 55.85 55.99 56.24 T:riverkeyakv2 68.14 68.17 68.37 T:aes128otrcv3 61.87? 72.60? 85.00? T:aeadaes128ocbtaglen128v1 79.69 79.74 79.95 T:aes128otrsv1 79.70 79.76 79.97 T:aes128otrsv2 79.71 79.77 79.98 T:aes128otrpv2 79.73 79.78 79.95 T:aes128otrpv1 80.32 80.56 82.49 T:seakeyakv1 80.13 80.68 81.45 T:oceankeyakv1 82.94 83.02 83.13 T:aes128otrsv3 82.97 83.03 83.25 T:aes128otrpv3 90.20 90.23 90.38 T:aes256otrcv3 86.50? 96.74? 109.81? T:aeadaes256ocbtaglen128v1 101.74 101.78 102.12 T:aes256otrpv1 101.75 101.81 102.22 T:aes256otrpv2 101.76 101.82 102.05 T:aes256otrsv1 101.78 101.83 102.24 T:aes256otrsv2 104.97 105.06 105.29 T:aes256otrsv3 105.04 105.08 105.51 T:aes256otrpv3 110.19 111.71 113.69 T:aes128gcmv1 115.99 116.01 116.29 T:aesjambuv1 115.94 116.41 121.48 T:deoxysi128v141 121.88 122.02 122.11 T:proest256otrv1 126.33 126.83 127.52 T:deoxysi256v141 135.14 136.57 137.88 T:aes256gcmv1 144.65 145.01 145.05 T:aes128n12t8clocv3 145.05 145.10 145.42 T:aes128n8t8clocv2 144.74 145.23 145.32 T:aes128n8clocv1 144.70 145.41 145.92 T:aes128n12clocv1 145.06 145.56 156.38 T:aes128n12t8clocv2 147.12 147.23 147.65 T:aes128n12t8silcv2 147.00 147.26 147.41 T:aes128n12t8silcv3 147.17 147.33 147.41 T:aes128n8t8silcv2 147.00 147.46 148.09 T:aes128n8silcv1 147.41 147.50 147.97 T:aes128n12silcv1 162.97 163.00 163.13 T:ketjesrv2 164.69 164.79 165.41 T:riverkeyakv1 169.24 169.27 169.37 T:ketjesrv1 209.05 209.08 209.19 T:deoxysii128v141 274.33 274.48 275.00 T:proest128otrv1 277.91 278.29 279.66 T:ketjejrv1 408.19 410.42 413.11 T:aezv5 465.19 466.86 468.77 T:ketjejrv2 521.03 521.90 531.20 T:deoxysneq128128v13 521.64 522.80 531.89 T:deoxysneq128128v1 538.28 540.62 548.46 T:aezv4 555.59 559.65 563.52 T:twine80n6clocv1 698.50 702.06 707.12 T:deoxysii256v141 719.12 719.50 726.11 T:deoxyseq128128v13 729.87 731.43 737.23 T:twine80n6t4clocv3 729.83 731.45 737.31 T:twine80n6t4clocv2 771.54 773.34 782.26 T:deoxysneq256128v13 772.07 773.65 782.13 T:deoxysneq256128v1 937.33 945.01 947.25 T:aezv1 1042.74 1051.45 1054.12 T:deoxyseq128128v1 1092.80 1101.32 1102.51 T:aezv3 1180.36? 1182.20? 1422.18? T:deoxyseq256128v13 1547.44 1547.97 1550.22 T:deoxyseq256128v1 4009.91 4031.87 4072.44 T:acorn128 15672.39 15674.59 15692.08 T:present80n6t4silcv2 16151.20 16154.88 16170.68 T:present80n6t4silcv3 16151.97 16160.98 16180.59 T:present80n6silcv1 35476.08 35483.03 35516.48 T:led80n6t4silcv2 35622.37 35637.42 35648.19 T:led80n6silcv1 35661.68 35675.27 35694.05 T:led80n6t4silcv3 62112.23 62122.29 62147.61 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 6.70 6.72 6.75 T:morus1280256v1 6.71 6.72 6.74 T:morus1280256v2 6.73 6.75 6.77 T:morus1280128v2 6.74 6.76 6.77 T:morus1280128v1 14.80 14.81 14.84 T:morus640128v1 14.80 14.82 14.85 T:morus640128v2 15.83 16.08 16.35 T:lunarkeyakv2 18.66 18.73 18.88 T:norx6444v3 18.74 18.77 18.80 T:norx6441v2 18.74 18.78 18.82 T:norx6441v3 18.80 18.84 19.02 T:norx6444v2 19.24 19.40 19.84 T:lakekeyakv1 21.48 21.50 21.57 T:acorn128v2 21.57 21.74 22.12 T:lakekeyakv2 21.73 21.76 21.83 T:acorn128v3 21.98 22.18 22.50 T:oceankeyakv2 21.86 22.25 22.60 T:seakeyakv2 22.38 22.43 22.57 T:norx6441v1 22.41 22.47 22.61 T:norx6444v1 24.03 24.23 24.53 T:tiaoxinv1 24.17 24.25 24.48 T:tiaoxinv2 25.10 25.16 25.23 T:norx6461v2 25.20 25.25 25.35 T:norx6461v3 26.77 26.79 26.83 T:aegis128l 28.81 28.85 28.98 T:norx6461v1 33.29 33.31 33.40 T:aegis128 35.80 35.83 35.87 T:norx3241v2 35.81 35.84 35.87 T:norx3241v3 36.54 36.57 36.70 T:ascon96v1 36.81 36.82 36.98 ascon128av12 36.81 36.82 36.95 T:ascon128av11 36.89 36.91 36.97 T:norx3241v1 39.80 39.82 39.93 T:aegis256 46.05 46.28 46.80 T:ketjemajorv2 48.92 48.94 49.02 T:norx3261v2 48.93 48.97 49.15 T:norx3261v3 48.92 49.10 49.19 T:ketjeminorv2 49.79 49.81 49.85 T:norx3261v1 52.49 52.50 52.65 ascon128v12 52.48 52.50 52.63 T:ascon128v11 52.50 52.51 52.69 T:ascon128v1 55.89 56.11 56.34 T:riverkeyakv2 68.13 68.18 68.32 T:aes128otrcv3 61.73? 72.49? 85.39? T:aeadaes128ocbtaglen128v1 79.86 79.91 80.16 T:aes128otrpv2 79.86 79.92 80.45 T:aes128otrsv2 79.89 79.92 80.29 T:aes128otrsv1 79.89 79.95 80.40 T:aes128otrpv1 80.12 80.47 80.90 T:seakeyakv1 80.27 80.93 81.28 T:oceankeyakv1 83.13 83.18 83.35 T:aes128otrpv3 83.15 83.20 83.35 T:aes128otrsv3 90.23 90.32 90.62 T:aes256otrcv3 86.36? 97.93? 110.90? T:aeadaes256ocbtaglen128v1 101.93 101.95 102.26 T:aes256otrpv1 101.89 101.96 102.12 T:aes256otrsv2 101.93 101.96 102.15 T:aes256otrsv1 101.93 101.98 102.19 T:aes256otrpv2 105.10 105.17 105.55 T:aes256otrsv3 105.19 105.21 105.35 T:aes256otrpv3 110.20 111.60 112.81 T:aes128gcmv1 115.99 116.01 116.15 T:aesjambuv1 116.09 116.17 116.68 T:deoxysi128v141 121.92 121.99 122.43 T:proest256otrv1 126.60 126.99 127.66 T:deoxysi256v141 135.14 136.25 137.66 T:aes256gcmv1 144.60 144.81 145.05 T:aes128n12t8clocv3 145.06 145.08 145.13 T:aes128n8t8clocv2 145.05 145.14 157.11 T:aes128n12t8clocv2 144.72 145.16 145.42 T:aes128n8clocv1 144.92 145.24 146.18 T:aes128n12clocv1 147.19 147.32 147.86 T:aes128n12t8silcv3 147.17 147.34 147.65 T:aes128n8t8silcv2 147.20 147.36 147.71 T:aes128n12t8silcv2 147.16 147.45 147.83 T:aes128n12silcv1 147.46 147.74 148.51 T:aes128n8silcv1 163.13 163.56 164.66 T:ketjesrv2 164.88 164.94 165.07 T:riverkeyakv1 169.41 169.45 169.56 T:ketjesrv1 209.17 209.26 209.34 T:deoxysii128v141 274.15 274.58 276.90 T:proest128otrv1 278.06 278.22 279.71 T:ketjejrv1 408.31 410.04 420.81 T:aezv5 467.53 469.23 470.93 T:ketjejrv2 521.02 521.93 527.91 T:deoxysneq128128v13 522.35 523.40 532.17 T:deoxysneq128128v1 537.35 539.89 549.23 T:aezv4 555.69 559.83 566.73 T:twine80n6clocv1 698.60 702.01 707.42 T:deoxysii256v141 718.72 719.59 727.32 T:deoxyseq128128v13 729.82 730.17 737.41 T:twine80n6t4clocv2 730.05 731.40 737.26 T:twine80n6t4clocv3 771.44 777.56 781.97 T:deoxysneq256128v13 772.26 777.66 782.83 T:deoxysneq256128v1 936.21 942.06 946.15 T:aezv1 1042.84 1048.62 1052.75 T:deoxyseq128128v1 1088.45 1099.83 1102.08 T:aezv3 1176.98? 1182.68? 1545.17? T:deoxyseq256128v13 1546.45 1548.63 1550.32 T:deoxyseq256128v1 4027.43 4040.51 4071.65 T:acorn128 9600.90 9607.61 9616.05 aes256gcmv1 15671.50 15677.87 15686.97 T:present80n6t4silcv2 16151.72 16157.52 16171.07 T:present80n6silcv1 16155.22 16158.12 16167.58 T:present80n6t4silcv3 35469.84 35477.51 35497.44 T:led80n6t4silcv2 35629.16 35643.47 35657.39 T:led80n6silcv1 35668.43 35687.75 35706.39 T:led80n6t4silcv3

Cycles/byte for long+long encrypt 25% 50% 75% aead 6.80 6.82 6.87 T:morus1280128v1 6.82 6.83 6.88 T:morus1280256v2 6.82 6.83 6.87 T:morus1280256v1 7.24 7.26 7.27 T:morus1280128v2 17.20 17.22 17.26 T:morus640128v1 17.21 17.23 17.28 T:morus640128v2 17.40 17.43 17.44 T:norx6441v3 17.47 17.48 17.52 T:norx6444v2 17.48 17.49 17.52 T:norx6444v3 17.51 17.53 17.55 T:norx6441v2 18.29 18.37 18.69 T:lakekeyakv1 18.78 18.87 18.97 T:seakeyakv2 18.83 18.99 19.07 T:oceankeyakv2 19.20 19.21 19.26 T:norx6441v1 19.19 19.23 19.27 T:norx6444v1 19.26 19.33 19.43 T:lakekeyakv2 20.86 20.88 20.90 T:acorn128v2 20.99 21.00 21.03 T:acorn128v3 21.52 21.63 21.76 T:lunarkeyakv2 22.26 22.44 22.62 T:tiaoxinv1 22.30 22.44 22.65 T:tiaoxinv2 23.94 23.98 24.00 T:norx6461v2 23.95 23.99 24.22 T:norx6461v3 25.62 25.64 25.69 T:norx6461v1 26.66 26.68 26.76 T:aegis128l 31.28 31.30 31.32 T:norx3241v2 31.29 31.31 31.33 T:norx3241v3 32.19 32.21 32.23 T:norx3241v1 33.15 33.17 33.22 T:aegis128 35.17 35.35 36.33 T:ascon128av11 35.37 35.42 35.73 ascon128av12 35.22 35.45 36.43 T:ascon96v1 37.81 37.86 37.98 T:ketjemajorv2 39.18 39.23 39.34 T:riverkeyakv2 39.61 39.63 39.66 T:aegis256 41.60 41.64 41.81 T:ketjeminorv2 44.41 44.43 44.49 T:norx3261v3 44.42 44.43 44.46 T:norx3261v2 45.10 45.14 45.28 T:norx3261v1 50.99 51.00 51.11 T:ascon128v1 50.99 51.00 51.08 T:ascon128v11 51.05 51.08 51.22 ascon128v12 68.17 68.22 68.47 T:aes128otrcv3 70.35 70.48 70.78 T:seakeyakv1 70.43 70.70 70.88 T:oceankeyakv1 66.89? 74.98? 81.00? T:aeadaes128ocbtaglen128v1 75.25 75.30 75.62 T:aes128otrsv1 75.27 75.34 75.50 T:aes128otrsv2 74.87 75.70 76.83 T:aes128gcmv1 77.07 77.13 77.29 T:aes128otrsv3 79.98 80.04 80.42 T:aes128otrpv2 79.97 80.50 86.78 T:aes128otrpv1 81.78 81.82 82.21 T:aes128otrpv3 87.08 87.75 88.36 T:aes256gcmv1 90.21 90.25 90.41 T:aes256otrcv3 97.27 97.33 97.46 T:aes256otrsv1 97.32 97.35 97.39 T:aes256otrsv2 98.05 98.08 98.13 T:deoxysi128v141 98.93 98.98 100.00 T:aes128n8t8clocv2 98.93 98.98 99.15 T:aes128n12t8clocv3 98.90 99.02 99.56 T:aes128n12clocv1 98.98 99.04 99.39 T:aes128n8clocv1 98.93? 99.05? 110.28? T:aes128n12t8clocv2 99.15 99.20 99.48 T:aes256otrsv3 91.90? 100.36? 105.82? T:aeadaes256ocbtaglen128v1 102.03 102.08 103.39 T:aes256otrpv1 102.01 102.09 103.40 T:aes256otrpv2 103.84 103.89 104.02 T:aes256otrpv3 108.48 108.61 109.21 T:aes128n12t8silcv2 108.50 108.67 109.97 T:aes128n8t8silcv2 108.75 108.87 109.34 T:aes128n12silcv1 108.86 109.04 109.40 T:aes128n8silcv1 108.77 109.27 114.70 T:aes128n12t8silcv3 109.26 109.39 110.68 T:deoxysi256v141 115.43 115.47 116.35 T:aesjambuv1 123.65 123.72 123.82 T:proest256otrv1 150.60 150.67 151.38 T:riverkeyakv1 153.61 153.64 154.07 T:ketjesrv1 156.29 156.37 156.91 T:deoxysii128v141 156.88 156.91 157.34 T:ketjesrv2 256.98 257.47 260.79 T:ketjejrv1 276.75 277.19 281.28 T:proest128otrv1 341.97 343.44 348.34 T:aezv5 360.28 360.66 364.81 T:deoxysneq128128v1 359.93? 364.17? 461.31? T:deoxysneq128128v13 416.87 418.92 421.52 T:twine80n6clocv1 463.00 464.60 466.56 T:ketjejrv2 511.86 516.75 517.75 T:aezv4 522.87 526.45 528.18 T:deoxysii256v141 538.93 542.18 542.81 T:deoxyseq128128v1 538.46 542.35 543.75 T:deoxyseq128128v13 546.52 549.40 550.14 T:twine80n6t4clocv3 546.51 549.77 550.59 T:twine80n6t4clocv2 589.90 592.67 593.97 T:deoxysneq256128v1 590.77 594.19 594.88 T:deoxysneq256128v13 617.41 621.86 622.75 T:aezv1 882.96 883.57 884.66 T:aezv3 883.75 884.21 884.98 T:deoxyseq256128v1 884.40 885.07 886.46 T:deoxyseq256128v13 3827.96 3838.68 3857.25 T:acorn128 11754.47 11755.98 11759.95 T:present80n6t4silcv2 12116.56 12118.84 12120.75 T:present80n6t4silcv3 12117.87 12120.39 12128.47 T:present80n6silcv1 26605.47 26615.38 26629.33 T:led80n6t4silcv2 26724.22 26728.99 26735.98 T:led80n6silcv1 26746.25 26756.32 26785.07 T:led80n6t4silcv3 35863.90 35868.76 35886.86 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 6.87 6.90 6.97 T:morus1280256v2 6.87 6.90 6.97 T:morus1280256v1 6.89 6.91 7.01 T:morus1280128v1 7.31 7.33 7.39 T:morus1280128v2 17.32 17.37 17.43 T:morus640128v2 17.35 17.39 17.58 T:morus640128v1 17.44 17.50 17.59 T:norx6444v3 17.52 17.54 17.59 T:norx6441v3 17.52 17.55 17.61 T:norx6441v2 17.53 17.56 17.64 T:norx6444v2 18.23 18.41 18.78 T:lakekeyakv1 19.00 19.13 19.32 T:seakeyakv2 19.05 19.19 19.33 T:oceankeyakv2 19.46 19.52 19.69 T:lakekeyakv2 19.35 19.56 19.64 T:norx6441v1 19.53 19.56 19.61 T:norx6444v1 20.86 20.87 20.92 T:acorn128v2 21.11 21.12 21.18 T:acorn128v3 21.71 21.88 22.74 T:lunarkeyakv2 23.47 23.63 23.85 T:tiaoxinv1 23.55 23.67 23.90 T:tiaoxinv2 23.89 23.93 23.98 T:norx6461v2 23.94 23.97 24.03 T:norx6461v3 25.95 25.99 26.09 T:norx6461v1 26.68 26.69 26.75 T:aegis128l 32.64 32.67 32.73 T:norx3241v2 32.62 32.71 33.55 T:norx3241v3 33.17 33.19 33.37 T:aegis128 33.68 33.72 33.89 T:norx3241v1 35.06 35.19 35.36 T:ascon96v1 35.20 35.37 35.58 T:ascon128av11 35.25 35.41 35.69 ascon128av12 37.83 37.92 38.06 T:ketjemajorv2 39.65 39.67 39.84 T:aegis256 39.66 39.71 39.92 T:riverkeyakv2 42.41 42.52 43.23 T:ketjeminorv2 45.77 45.79 45.84 T:norx3261v3 45.76 45.79 45.87 T:norx3261v2 46.56 46.61 46.68 T:norx3261v1 50.97 51.06 51.18 ascon128v12 50.97 51.06 51.21 T:ascon128v1 50.95 51.07 51.27 T:ascon128v11 68.14 68.17 68.34 T:aes128otrcv3 74.72 74.78 74.93 T:aes128otrsv1 74.78 74.84 74.99 T:aes128otrsv2 74.81 75.06 75.31 T:oceankeyakv1 74.94 75.10 75.36 T:seakeyakv1 74.82 75.52 76.28 T:aes128gcmv1 66.84? 76.50? 79.37? T:aeadaes128ocbtaglen128v1 76.42 76.56 78.35 T:aes128otrsv3 79.42 79.56 79.95 T:aes128otrpv2 79.46 79.72 85.61 T:aes128otrpv1 81.06 81.15 81.38 T:aes128otrpv3 87.09 87.94 88.68 T:aes256gcmv1 90.17 90.21 90.36 T:aes256otrcv3 96.78 96.85 96.99 T:aes256otrsv1 96.81 96.90 97.00 T:aes256otrsv2 98.38 98.53 98.74 T:aes256otrsv3 92.07? 101.55? 104.78? T:aeadaes256ocbtaglen128v1 101.53 101.57 101.84 T:aes256otrpv1 101.51 101.73 102.12 T:aes256otrpv2 103.16 103.22 103.41 T:aes256otrpv3 104.50 104.66 104.79 T:aes128n12t8clocv3 104.69 104.80 114.55 T:aes128n12t8clocv2 104.59 104.83 106.56 T:aes128n12clocv1 104.79 104.83 105.07 T:aes128n8clocv1 104.70 104.90 106.08 T:aes128n8t8clocv2 105.50 105.68 106.03 T:deoxysi128v141 108.65 108.81 109.22 T:aes128n8t8silcv2 108.84 108.92 109.34 T:aes128n12t8silcv2 108.88? 109.02? 682.19? T:aes128n12t8silcv3 109.09 109.17 109.76 T:aes128n12silcv1 109.08 109.18 109.54 T:aes128n8silcv1 115.55 115.58 116.94 T:aesjambuv1 116.38 116.77 119.89 T:deoxysi256v141 123.40 123.53 124.92 T:proest256otrv1 153.38 153.57 154.49 T:ketjesrv2 154.24 154.26 155.26 T:ketjesrv1 154.82 154.96 156.00 T:riverkeyakv1 156.42 156.48 157.20 T:deoxysii128v141 256.82 257.53 260.52 T:ketjejrv1 276.47 277.05 281.08 T:proest128otrv1 342.28 342.77 347.83 T:aezv5 417.49 419.37 422.38 T:twine80n6clocv1 440.78 444.33 446.39 T:deoxysneq128128v1 440.67 445.58 484.72 T:deoxysneq128128v13 454.24 455.99 458.53 T:ketjejrv2 511.70 515.14 517.18 T:aezv4 523.39 527.13 527.78 T:deoxysii256v141 537.75 542.68 543.49 T:deoxyseq128128v13 546.67 549.83 550.61 T:twine80n6t4clocv2 546.63 550.00 551.01 T:twine80n6t4clocv3 617.50 622.30 623.07 T:aezv1 682.64 685.61 686.10 T:deoxysneq256128v1 684.16 685.78 686.42 T:deoxysneq256128v13 704.04 705.95 707.00 T:deoxyseq128128v1 883.03 883.60 884.28 T:aezv3 884.13 884.38 885.09 T:deoxyseq256128v13 1067.16 1067.87 1068.94 T:deoxyseq256128v1 3886.20 3919.61 3948.40 T:acorn128 11756.56 11758.56 11764.61 T:present80n6t4silcv2 12116.28 12119.24 12121.87 T:present80n6silcv1 12115.91 12122.23 12125.30 T:present80n6t4silcv3 26604.18 26614.04 26632.97 T:led80n6t4silcv2 26723.46 26731.83 26740.11 T:led80n6silcv1 26746.90 26754.78 26761.30 T:led80n6t4silcv3 35857.29 35865.37 35870.85 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 6.88 6.90 6.99 T:morus1280256v1 6.90 6.90 6.97 T:morus1280128v1 6.89 6.91 6.98 T:morus1280256v2 7.32 7.34 7.38 T:morus1280128v2 17.36 17.37 17.44 T:morus640128v1 17.36 17.38 17.47 T:morus640128v2 17.55 17.58 17.65 T:norx6444v3 17.59 17.62 17.66 T:norx6441v3 17.61 17.63 17.78 T:norx6441v2 17.62 17.64 17.73 T:norx6444v2 18.31 18.53 18.88 T:lakekeyakv1 19.06 19.20 19.30 T:seakeyakv2 19.10 19.26 19.45 T:oceankeyakv2 19.54 19.59 19.72 T:lakekeyakv2 19.62 19.64 19.73 T:norx6441v1 19.62 19.65 19.71 T:norx6444v1 20.86 20.88 21.11 T:acorn128v2 21.11 21.13 21.16 T:acorn128v3 21.79 21.92 22.07 T:lunarkeyakv2 23.49 23.63 23.84 T:tiaoxinv1 23.59 23.63 23.83 T:tiaoxinv2 23.97 24.00 24.02 T:norx6461v2 24.02 24.05 24.10 T:norx6461v3 26.04 26.07 26.16 T:norx6461v1 26.68 26.69 26.74 T:aegis128l 32.73 32.74 32.81 T:norx3241v3 32.73 32.74 32.80 T:norx3241v2 33.18 33.19 33.23 T:aegis128 33.77 33.80 33.81 T:norx3241v1 35.16 35.19 35.35 T:ascon96v1 35.29 35.38 35.56 T:ascon128av11 35.37 35.42 35.55 ascon128av12 37.75 37.80 37.90 T:ketjemajorv2 39.65 39.67 39.76 T:aegis256 39.69 39.81 40.15 T:riverkeyakv2 42.51 42.55 43.23 T:ketjeminorv2 45.85 45.86 45.92 T:norx3261v3 45.85 45.87 45.94 T:norx3261v2 46.68 46.71 46.88 T:norx3261v1 51.04 51.06 51.16 T:ascon128v11 51.04 51.06 51.14 T:ascon128v1 51.05 51.07 51.23 ascon128v12 68.12 68.16 68.27 T:aes128otrcv3 74.85 74.88 75.04 T:aes128otrsv1 74.87 74.94 75.21 T:aes128otrsv2 75.02 75.10 75.50 T:seakeyakv1 75.04 75.18 75.49 T:oceankeyakv1 74.76 75.43 76.58 T:aes128gcmv1 67.10? 75.65? 79.77? T:aeadaes128ocbtaglen128v1 76.53 76.58 76.84 T:aes128otrsv3 79.57 79.60 79.84 T:aes128otrpv2 79.54 79.79 85.46 T:aes128otrpv1 81.19 81.25 81.63 T:aes128otrpv3 87.21 88.05 89.10 T:aes256gcmv1 90.19 90.22 90.35 T:aes256otrcv3 92.45? 96.16? 106.87? T:aeadaes256ocbtaglen128v1 96.88 96.91 97.10 T:aes256otrsv1 96.95 96.99 97.14 T:aes256otrsv2 98.53 98.61 98.85 T:aes256otrsv3 101.64 101.66 102.14 T:aes256otrpv1 101.62 101.68 101.84 T:aes256otrpv2 103.28 103.29 103.45 T:aes256otrpv3 104.44 104.66 104.74 T:aes128n12t8clocv3 104.80 104.84 105.31 T:aes128n8clocv1 104.70 104.90 105.98 T:aes128n8t8clocv2 104.69 104.91 106.44 T:aes128n12clocv1 104.68 104.91 115.24 T:aes128n12t8clocv2 105.50 105.74 106.14 T:deoxysi128v141 108.88 108.92 109.02 T:aes128n12t8silcv2 108.84 108.92 109.17 T:aes128n8t8silcv2 108.88 109.02 120.21 T:aes128n12t8silcv3 109.05 109.12 109.54 T:aes128n8silcv1 109.03 109.16 109.44 T:aes128n12silcv1 115.55 115.60 116.85 T:aesjambuv1 116.48 116.92 119.93 T:deoxysi256v141 123.38 123.47 124.83 T:proest256otrv1 153.58 153.62 154.60 T:ketjesrv2 154.32 154.39 155.31 T:ketjesrv1 154.89 155.02 156.11 T:riverkeyakv1 156.45 156.53 156.89 T:deoxysii128v141 256.82 256.92 257.94 T:ketjejrv1 276.46 277.10 281.40 T:proest128otrv1 341.99 342.62 348.21 T:aezv5 418.16 419.55 423.08 T:twine80n6clocv1 441.09 445.38 446.36 T:deoxysneq128128v1 440.84? 445.77? 550.63? T:deoxysneq128128v13 453.79 456.98 459.64 T:ketjejrv2 511.28 514.79 517.08 T:aezv4 523.45 525.33 529.06 T:deoxysii256v141 534.24 543.00 543.69 T:deoxyseq128128v13 546.78 549.84 550.45 T:twine80n6t4clocv3 546.78 549.85 550.32 T:twine80n6t4clocv2 617.09 621.61 622.08 T:aezv1 685.26 685.76 686.89 T:deoxysneq256128v1 684.69 685.86 686.87 T:deoxysneq256128v13 704.79 706.21 707.11 T:deoxyseq128128v1 882.44 883.24 884.29 T:aezv3 884.15 884.51 885.21 T:deoxyseq256128v13 1067.43 1067.91 1070.94 T:deoxyseq256128v1 3907.85 3923.33 3947.72 T:acorn128 9605.95 9608.58 9612.93 aes256gcmv1 11754.41 11758.20 11766.70 T:present80n6t4silcv2 12115.70 12118.76 12121.12 T:present80n6silcv1 12117.95 12119.43 12124.06 T:present80n6t4silcv3 26604.15 26612.90 26618.20 T:led80n6t4silcv2 26726.80 26731.31 26741.86 T:led80n6silcv1 26747.71 26750.72 26765.47 T:led80n6t4silcv3

Cycles/byte for 0+long encrypt 25% 50% 75% aead 7.03 7.05 7.08 T:morus1280256v1 7.03 7.06 7.08 T:morus1280256v2 7.04 7.06 7.10 T:morus1280128v1 7.92 7.94 7.96 T:morus1280128v2 13.31 13.45 13.63 T:oceankeyakv2 13.32 13.47 13.62 T:lunarkeyakv2 16.10 16.19 16.25 T:lakekeyakv2 16.31 16.33 16.35 T:norx6444v2 16.32 16.34 16.37 T:norx6444v3 16.18 16.35 16.51 T:seakeyakv2 16.33 16.35 16.40 T:norx6441v3 16.44 16.46 16.50 T:norx6441v2 16.82 16.85 16.88 T:norx6444v1 16.87 16.89 16.98 T:norx6441v1 17.22 17.28 17.34 T:lakekeyakv1 19.84 19.87 19.91 T:morus640128v2 19.84 19.88 19.91 T:morus640128v1 20.49 20.52 20.53 T:acorn128v3 20.71 20.77 20.81 T:acorn128v2 22.78 22.83 22.90 T:norx6461v3 22.88 22.94 23.06 T:norx6461v2 23.17 23.22 23.42 T:tiaoxinv2 23.06 23.24 23.50 T:tiaoxinv1 23.28 23.32 23.38 T:norx6461v1 26.54 26.59 26.69 T:aegis128l 29.39 29.46 29.74 T:ketjemajorv2 29.63 29.66 29.69 T:norx3241v2 29.63 29.66 29.71 T:norx3241v3 30.66 30.69 30.81 T:norx3241v1 33.05 33.06 33.07 T:aegis128 33.74 33.82 34.38 T:ascon96v1 33.76 33.88 34.13 T:ascon128av11 33.93 34.00 34.11 ascon128av12 35.63 35.70 35.84 T:riverkeyakv2 37.23 37.36 37.50 T:ketjeminorv2 38.96 39.47 40.63 T:aes256gcmv1 39.55 39.58 39.76 T:aegis256 39.17 39.82 40.81 T:aes128gcmv1 42.76 42.77 42.84 T:norx3261v3 42.76 42.78 42.79 T:norx3261v2 43.57 43.58 43.67 T:norx3261v1 49.54 49.62 49.74 ascon128v12 49.55 49.63 49.88 T:ascon128v1 49.57 49.63 49.87 T:ascon128v11 64.25 64.32 64.58 T:aes128n8clocv1 64.26 64.33 64.55 T:aes128n12clocv1 64.28 64.35 64.64 T:aes128n12t8clocv3 64.29 64.35 64.57 T:aes128n12t8clocv2 64.32 64.40 64.46 T:aes128n8t8clocv2 68.12 68.19 68.37 T:aes128otrcv3 69.30 69.58 69.91 T:oceankeyakv1 69.59 69.68 70.84 T:seakeyakv1 62.10? 69.72? 85.91? T:aeadaes128ocbtaglen128v1 69.78 69.83 70.11 T:aes128otrsv1 69.86 69.94 70.07 T:aes128otrsv3 69.87 69.97 70.27 T:aes128otrsv2 70.59 70.62 70.70 T:aes128n12t8silcv2 70.47 70.62 70.74 T:aes128n8t8silcv2 70.53 70.62 70.71 T:aes128n12t8silcv3 70.69 70.81 71.08 T:aes128n12silcv1 70.64 70.84 71.23 T:aes128n8silcv1 79.21 79.31 79.41 T:aes128otrpv2 79.30 79.32 79.49 T:aes128otrpv1 79.25 79.33 79.48 T:aes128otrpv3 90.19 90.26 90.45 T:aes256otrcv3 91.85 91.88 92.03 T:aes256otrsv1 91.91 91.98 92.05 T:aes256otrsv3 91.96 92.03 92.48 T:aes256otrsv2 86.27? 93.94? 110.26? T:aeadaes256ocbtaglen128v1 97.12 97.13 97.19 T:deoxysi128v141 101.30 101.36 101.61 T:aes256otrpv3 101.29 101.37 101.63 T:aes256otrpv1 101.34 101.40 103.29 T:aes256otrpv2 103.82 103.87 106.11 T:deoxysii128v141 108.27 108.35 108.58 T:deoxysi256v141 115.12 115.13 115.20 T:aesjambuv1 124.84 124.93 125.36 T:proest256otrv1 139.23 139.28 139.52 T:ketjesrv1 143.98 144.03 144.27 T:ketjesrv2 144.91 145.00 145.33 T:riverkeyakv1 235.49 235.51 235.75 T:ketjejrv1 273.70 275.10 275.70 T:aezv5 276.61 278.61 279.03 T:twine80n6clocv1 278.58 278.96 281.14 T:proest128otrv1 297.06 297.30 300.61 T:aezv1 347.92 348.10 350.94 T:deoxysii256v141 358.73 359.56 362.07 T:deoxyseq128128v1 359.76 359.83 361.20 T:deoxysneq128128v13 359.13 360.00 360.19 T:deoxyseq128128v13 360.13 360.29 362.51 T:deoxysneq128128v1 363.36 363.41 364.07 T:twine80n6t4clocv3 363.31 363.43 364.03 T:twine80n6t4clocv2 442.91 444.59 444.82 T:ketjejrv2 483.88 484.19 486.50 T:aezv4 586.63 586.81 595.20 T:deoxyseq256128v1 584.89 587.32 595.80 T:deoxyseq256128v13 590.34 590.57 598.87 T:deoxysneq256128v1 590.87 591.31 599.95 T:deoxysneq256128v13 664.99 665.40 673.61 T:aezv3 3767.54 3811.74 3855.04 T:acorn128 7830.12 7839.19 7843.65 T:present80n6t4silcv2 8070.85 8081.12 8085.30 T:present80n6t4silcv3 8071.73 8081.43 8087.47 T:present80n6silcv1 9602.81 9608.46 9610.26 aes256gcmv1 17728.20 17734.50 17745.02 T:led80n6t4silcv2 17814.39 17818.73 17829.16 T:led80n6silcv1 17831.57 17835.82 17848.16 T:led80n6t4silcv3

Cycles/byte for 0+long decrypt 25% 50% 75% aead 7.04 7.06 7.08 T:morus1280128v1 7.03 7.07 7.08 T:morus1280256v1 7.03 7.07 7.08 T:morus1280256v2 7.88 7.91 7.93 T:morus1280128v2 13.24 13.49 13.63 T:oceankeyakv2 13.31 13.50 13.83 T:lunarkeyakv2 16.15 16.20 16.30 T:lakekeyakv2 16.04 16.39 16.67 T:seakeyakv2 16.41 16.44 16.49 T:norx6441v3 16.41 16.45 16.47 T:norx6441v2 16.42 16.45 16.48 T:norx6444v3 16.42 16.47 16.49 T:norx6444v2 16.82 16.84 16.88 T:norx6444v1 16.85 16.88 16.96 T:norx6441v1 17.20 17.28 17.39 T:lakekeyakv1 19.85 19.90 19.95 T:morus640128v2 19.89 19.94 19.96 T:morus640128v1 20.23 20.28 20.54 T:acorn128v2 20.48 20.51 20.55 T:acorn128v3 22.79 22.81 22.86 T:norx6461v3 22.82 22.86 22.90 T:norx6461v2 22.89 23.02 23.19 T:tiaoxinv1 22.79 23.05 23.24 T:tiaoxinv2 23.27 23.30 23.33 T:norx6461v1 26.57 26.60 26.67 T:aegis128l 29.40 29.45 29.53 T:ketjemajorv2 29.63 29.65 29.70 T:norx3241v2 29.64 29.66 29.69 T:norx3241v3 30.66 30.68 30.78 T:norx3241v1 33.05 33.06 33.10 T:aegis128 33.70 33.82 33.97 T:ascon96v1 33.74 33.89 34.09 T:ascon128av11 33.97 34.00 34.07 ascon128av12 35.61 35.73 36.05 T:riverkeyakv2 37.28 37.35 37.48 T:ketjeminorv2 38.30 39.37 40.62 T:aes128gcmv1 39.48 39.50 39.55 T:aegis256 39.25 39.82 40.99 T:aes256gcmv1 42.75 42.76 42.83 T:norx3261v2 42.75 42.78 42.83 T:norx3261v3 43.57 43.59 43.63 T:norx3261v1 49.54 49.63 49.84 T:ascon128v1 49.57 49.63 49.85 T:ascon128v11 49.59 49.64 49.94 ascon128v12 64.27 64.32 64.44 T:aes128n12t8clocv3 64.28 64.33 64.39 T:aes128n12t8clocv2 64.26 64.33 64.61 T:aes128n12clocv1 64.31 64.35 64.64 T:aes128n8clocv1 64.29 64.40 64.46 T:aes128n8t8clocv2 68.09 68.17 68.27 T:aes128otrcv3 69.31 69.52 70.03 T:oceankeyakv1 69.48 69.73 70.00 T:seakeyakv1 69.75 69.80 69.92 T:aes128otrsv1 69.88 69.94 70.05 T:aes128otrsv2 69.88 69.95 70.07 T:aes128otrsv3 70.54 70.62 70.69 T:aes128n12t8silcv3 70.60 70.63 70.70 T:aes128n12t8silcv2 70.55 70.65 70.76 T:aes128n8t8silcv2 70.66 70.82 71.05 T:aes128n12silcv1 70.77 70.87 71.27 T:aes128n8silcv1 56.89? 78.51? 86.09? T:aeadaes128ocbtaglen128v1 79.20 79.29 79.41 T:aes128otrpv3 79.23 79.32 79.40 T:aes128otrpv2 79.23 79.34 79.52 T:aes128otrpv1 90.18 90.26 90.39 T:aes256otrcv3 91.84 91.93 92.20 T:aes256otrsv1 91.94 91.99 92.06 T:aes256otrsv2 91.89 92.01 92.21 T:aes256otrsv3 95.30 95.34 95.61 T:deoxysi128v141 101.27 101.36 101.55 T:aes256otrpv1 101.33 101.36 101.46 T:aes256otrpv2 101.34 101.38 101.47 T:aes256otrpv3 103.72 103.82 103.93 T:deoxysii128v141 106.20 106.22 106.29 T:deoxysi256v141 85.44? 108.34? 111.80? T:aeadaes256ocbtaglen128v1 115.11 115.13 115.18 T:aesjambuv1 124.68 124.92 125.17 T:proest256otrv1 139.23 139.27 139.32 T:ketjesrv1 143.96 144.03 145.34 T:ketjesrv2 144.89 144.95 145.03 T:riverkeyakv1 235.49 235.51 235.73 T:ketjejrv1 274.26 274.95 275.26 T:aezv5 278.57 278.69 279.11 T:twine80n6clocv1 278.40 278.88 281.53 T:proest128otrv1 296.90 297.16 298.18 T:aezv1 347.88 348.13 351.25 T:deoxysii256v141 358.42 359.56 364.30 T:deoxyseq128128v1 359.94 360.07 361.81 T:deoxysneq128128v13 359.31 360.08 360.96 T:deoxyseq128128v13 359.48 360.30 363.07 T:deoxysneq128128v1 363.38 363.41 364.62 T:twine80n6t4clocv3 363.27 363.50 364.59 T:twine80n6t4clocv2 444.49 444.53 450.23 T:ketjejrv2 483.92 484.42 487.35 T:aezv4 586.51 587.13 596.79 T:deoxyseq256128v1 586.29 587.29 595.68 T:deoxyseq256128v13 589.73 590.62 598.05 T:deoxysneq256128v1 590.30 591.51 598.98 T:deoxysneq256128v13 664.95 665.35 674.53 T:aezv3 3750.74 3776.12 3808.57 T:acorn128 7830.23 7839.67 7843.14 T:present80n6t4silcv2 8070.13 8080.33 8083.71 T:present80n6silcv1 8070.62 8082.71 8086.46 T:present80n6t4silcv3 9602.92 9609.36 9611.33 aes256gcmv1 17728.00 17733.10 17746.40 T:led80n6t4silcv2 17817.42 17821.23 17844.67 T:led80n6silcv1 17829.49 17832.57 17842.71 T:led80n6t4silcv3

Cycles/byte for 0+long forgery 25% 50% 75% aead 7.05 7.06 7.08 T:morus1280128v1 7.05 7.06 7.08 T:morus1280256v2 7.05 7.07 7.09 T:morus1280256v1 7.89 7.91 7.93 T:morus1280128v2 13.36 13.47 13.67 T:oceankeyakv2 13.23 13.50 14.11 T:lunarkeyakv2 16.12 16.20 16.25 T:lakekeyakv2 16.06 16.36 16.56 T:seakeyakv2 16.42 16.45 16.48 T:norx6444v3 16.44 16.46 16.48 T:norx6444v2 16.43 16.46 16.49 T:norx6441v2 16.43 16.47 16.52 T:norx6441v3 16.82 16.86 16.88 T:norx6444v1 16.83 16.90 16.96 T:norx6441v1 17.21 17.27 17.39 T:lakekeyakv1 19.86 19.90 19.93 T:morus640128v2 19.92 19.93 19.95 T:morus640128v1 20.24 20.26 20.34 T:acorn128v2 20.49 20.50 20.54 T:acorn128v3 22.78 22.82 22.86 T:norx6461v3 22.80 22.83 22.92 T:norx6461v2 23.00 23.03 23.09 T:tiaoxinv2 22.86 23.04 23.24 T:tiaoxinv1 23.28 23.30 23.33 T:norx6461v1 26.56 26.60 26.62 T:aegis128l 29.33 29.44 29.49 T:ketjemajorv2 29.64 29.65 29.69 T:norx3241v2 29.64 29.67 29.71 T:norx3241v3 30.66 30.68 30.71 T:norx3241v1 33.04 33.06 33.10 T:aegis128 33.80 33.82 33.84 T:ascon96v1 33.93 33.93 33.96 T:ascon128av11 33.95 34.00 34.05 ascon128av12 35.62 35.68 35.93 T:riverkeyakv2 37.25 37.33 37.60 T:ketjeminorv2 38.92 39.44 40.60 T:aes128gcmv1 39.48 39.49 39.53 T:aegis256 39.25 39.61 40.78 T:aes256gcmv1 42.75 42.77 42.83 T:norx3261v2 42.76 42.80 42.84 T:norx3261v3 43.57 43.59 43.66 T:norx3261v1 49.60 49.63 49.81 T:ascon128v1 49.61 49.63 49.74 T:ascon128v11 49.60 49.63 49.79 ascon128v12 64.27 64.32 64.43 T:aes128n12t8clocv2 64.30 64.33 64.48 T:aes128n12t8clocv3 64.29 64.35 64.59 T:aes128n8clocv1 64.34 64.43 64.61 T:aes128n8t8clocv2 64.31 64.43 64.79 T:aes128n12clocv1 68.12 68.17 68.23 T:aes128otrcv3 69.51 69.64 69.98 T:oceankeyakv1 69.80 69.83 70.06 T:aes128otrsv1 69.50 69.85 71.30 T:seakeyakv1 69.89 69.93 70.00 T:aes128otrsv2 69.89 69.95 70.14 T:aes128otrsv3 70.46 70.56 70.64 T:aes128n8t8silcv2 70.53 70.57 70.66 T:aes128n12t8silcv3 70.53 70.57 70.70 T:aes128n12t8silcv2 70.62 70.78 71.47 T:aes128n12silcv1 70.57 70.80 71.06 T:aes128n8silcv1 63.20? 77.80? 86.48? T:aeadaes128ocbtaglen128v1 79.22 79.31 79.45 T:aes128otrpv1 79.28 79.32 79.57 T:aes128otrpv2 79.23 79.34 79.52 T:aes128otrpv3 90.17 90.21 90.37 T:aes256otrcv3 91.82 91.89 92.08 T:aes256otrsv1 91.89 91.97 92.11 T:aes256otrsv3 91.94 92.01 92.39 T:aes256otrsv2 95.29 95.32 95.41 T:deoxysi128v141 87.06? 98.49? 109.62? T:aeadaes256ocbtaglen128v1 101.20 101.28 101.64 T:aes256otrpv1 101.34 101.40 101.92 T:aes256otrpv2 101.35 101.43 101.74 T:aes256otrpv3 103.79 103.83 104.28 T:deoxysii128v141 106.22 106.27 106.51 T:deoxysi256v141 115.11 115.13 115.16 T:aesjambuv1 124.81 124.92 125.04 T:proest256otrv1 139.23 139.27 139.38 T:ketjesrv1 143.99 144.02 144.08 T:ketjesrv2 144.89 144.97 145.31 T:riverkeyakv1 235.49 235.51 235.63 T:ketjejrv1 273.87 274.36 274.88 T:aezv5 276.65 278.64 279.11 T:twine80n6clocv1 278.45 279.03 281.46 T:proest128otrv1 297.10 297.46 300.73 T:aezv1 348.00 348.31 351.41 T:deoxysii256v141 358.26 359.57 363.93 T:deoxyseq128128v1 359.28 359.58 361.99 T:deoxysneq128128v1 358.94 360.09 361.79 T:deoxysneq128128v13 360.04 360.10 362.92 T:deoxyseq128128v13 363.32 363.41 364.54 T:twine80n6t4clocv2 363.39 363.43 364.65 T:twine80n6t4clocv3 444.47 444.54 445.73 T:ketjejrv2 483.73 484.21 487.31 T:aezv4 586.33 587.10 596.92 T:deoxyseq256128v1 584.32 587.27 596.04 T:deoxyseq256128v13 589.65 590.41 597.95 T:deoxysneq256128v1 590.48 591.32 598.02 T:deoxysneq256128v13 665.14 666.32 674.83 T:aezv3 3740.38 3770.24 3815.76 T:acorn128 7829.71 7838.90 7844.93 T:present80n6t4silcv2 8070.60 8078.97 8085.01 T:present80n6silcv1 8071.19 8083.90 8085.92 T:present80n6t4silcv3 9601.66 9607.76 9610.33 aes256gcmv1 17728.70 17733.12 17751.71 T:led80n6t4silcv2 17814.91 17822.52 17831.38 T:led80n6silcv1 17827.03 17833.05 17843.45 T:led80n6t4silcv3

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 8.38 8.39 8.42 T:morus1280256v2 8.42 8.43 8.46 T:morus1280256v1 8.46 8.46 8.50 T:morus1280128v1 8.85 8.86 8.88 T:morus1280128v2 18.86 18.86 18.89 T:morus640128v1 18.99 19.00 19.02 T:morus640128v2 19.93 19.93 19.94 T:norx6441v3 20.01 20.01 20.05 T:norx6441v2 21.20 21.21 21.22 T:norx6441v1 21.32 21.34 21.40 T:lakekeyakv2 22.06 22.14 22.69 T:lakekeyakv1 23.54 23.55 23.57 T:norx6444v2 23.63 23.64 23.69 T:norx6444v3 24.96 24.96 24.99 T:acorn128v2 25.27 25.28 25.31 T:acorn128v3 25.57 25.60 25.75 T:norx6444v1 26.31 26.37 26.42 T:seakeyakv2 27.47 27.48 27.53 T:norx6461v2 27.49 27.51 27.75 T:norx6461v3 28.41 28.42 28.46 T:norx6461v1 30.90 30.92 31.08 T:tiaoxinv2 30.94 31.02 31.17 T:tiaoxinv1 31.85 31.85 31.88 T:aegis128l 33.54 33.57 33.64 T:oceankeyakv2 33.86 33.86 33.86 T:norx3241v2 33.91 33.98 34.42 T:norx3241v3 33.99 34.01 34.03 T:norx3241v1 35.91 35.92 36.12 T:ascon128av11 36.04 36.04 36.29 T:ascon96v1 36.16 36.19 36.40 ascon128av12 36.62 36.62 36.65 T:aegis128 41.22 41.24 41.68 T:riverkeyakv2 44.54 44.55 44.60 T:aegis256 46.16 46.18 46.22 T:ketjeminorv2 47.58 47.61 47.73 T:ketjemajorv2 47.60 47.61 47.66 T:norx3261v1 48.01 48.02 48.04 T:norx3261v2 48.10 48.11 48.15 T:norx3261v3 51.68 51.69 51.97 T:ascon128v1 51.68 51.71 51.89 T:ascon128v11 51.76 51.77 51.92 ascon128v12 55.60 55.64 56.28 T:lunarkeyakv2 70.72 70.74 71.17 T:aes128otrcv3 77.33 77.34 77.53 T:aes128otrsv1 77.39 77.42 77.62 T:aes128otrsv2 79.22 79.23 79.35 T:aes128otrsv3 80.34 80.58 81.27 T:aes128gcmv1 82.03 82.04 82.15 T:aes128otrpv1 82.07 82.08 82.16 T:aes128otrpv2 83.88 83.90 84.12 T:aes128otrpv3 84.23 84.34 84.50 T:seakeyakv1 82.24 85.72 89.52 T:aeadaes128ocbtaglen128v1 93.02 93.17 93.87 T:aes256gcmv1 93.38 93.40 93.52 T:aes256otrcv3 99.77 99.81 100.08 T:aes128n8t8clocv2 99.79 99.83 100.00 T:aes128n12t8clocv2 99.83 99.85 99.88 T:aes128n12t8clocv3 99.94 99.98 101.55 T:aes256otrsv2 99.92 99.99 101.56 T:aes256otrsv1 100.00 100.10 100.31 T:aes128n12clocv1 100.11 100.16 100.35 T:aes128n8clocv1 100.49 100.52 100.81 T:deoxysi128v141 101.81 101.83 101.94 T:aes256otrsv3 104.00 104.17 104.38 T:oceankeyakv1 104.61 104.64 105.14 T:aes256otrpv1 104.64 104.67 104.77 T:aes256otrpv2 106.51 106.52 106.91 T:aes256otrpv3 110.09 110.17 110.45 T:aes128n12t8silcv2 110.11 110.22 110.40 T:aes128n8t8silcv2 110.41 110.54 110.99 T:aes128n12t8silcv3 110.65 110.71 110.95 T:aes128n8silcv1 110.66 110.88 112.68 T:aes128n12silcv1 107.60 111.63 115.82 T:aeadaes256ocbtaglen128v1 114.31 114.37 115.90 T:deoxysi256v141 117.07 117.09 117.34 T:aesjambuv1 134.73 134.78 135.90 T:proest256otrv1 156.46 156.52 157.31 T:riverkeyakv1 157.33 157.36 157.52 T:ketjesrv1 159.21 159.26 160.91 T:deoxysii128v141 161.63 161.64 161.76 T:ketjesrv2 260.74 261.55 262.12 T:ketjejrv1 288.63 288.88 290.48 T:proest128otrv1 319.70 320.30 327.28 T:aezv5 361.76 362.24 367.28 T:deoxysneq128128v13 362.34 362.57 364.49 T:deoxysneq128128v1 418.29 420.38 424.10 T:twine80n6clocv1 454.56 455.88 461.93 T:aezv4 469.21 469.93 474.06 T:ketjejrv2 525.50 527.17 531.27 T:deoxysii256v141 542.29 542.98 547.63 T:deoxyseq128128v1 544.72 546.38 550.55 T:deoxyseq128128v13 547.79 547.92 552.50 T:twine80n6t4clocv3 547.72 548.17 551.99 T:twine80n6t4clocv2 594.02 596.47 599.43 T:deoxysneq256128v13 593.07 597.15 598.42 T:deoxysneq256128v1 595.57 598.49 601.75 T:aezv1 833.05 838.18 839.06 T:aezv3 886.25 890.66 891.49 T:deoxyseq256128v1 890.00 894.49 895.30 T:deoxyseq256128v13 4257.98 4292.02 4296.69 T:acorn128 11816.96 11819.03 11821.68 T:present80n6t4silcv2 12180.64 12183.82 12191.97 T:present80n6t4silcv3 12179.35 12186.18 12188.58 T:present80n6silcv1 26743.39 26748.08 26756.82 T:led80n6t4silcv2 26866.45 26872.06 26883.29 T:led80n6silcv1 26884.91 26888.69 26894.68 T:led80n6t4silcv3 36467.33 36471.85 36483.31 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 8.41 8.42 8.46 T:morus1280256v2 8.47 8.48 8.54 T:morus1280256v1 8.54 8.54 8.59 T:morus1280128v1 8.90 8.91 9.03 T:morus1280128v2 19.02 19.03 19.07 T:morus640128v1 19.11 19.14 19.17 T:morus640128v2 20.10 20.11 20.13 T:norx6441v2 20.14 20.16 20.21 T:norx6441v3 21.45 21.48 21.66 T:lakekeyakv2 21.55 21.55 21.64 T:norx6441v1 22.02 22.14 22.75 T:lakekeyakv1 23.69 23.69 23.77 T:norx6444v2 23.72 23.72 23.78 T:norx6444v3 25.01 25.01 25.03 T:acorn128v2 25.41 25.41 25.45 T:acorn128v3 25.92 25.94 26.03 T:norx6444v1 26.51 26.54 26.78 T:seakeyakv2 27.49 27.51 27.56 T:norx6461v2 27.59 27.60 27.64 T:norx6461v3 28.75 28.75 28.83 T:norx6461v1 31.83 31.84 31.88 T:aegis128l 33.40 33.40 33.60 T:tiaoxinv1 33.38 33.41 33.64 T:tiaoxinv2 33.70 33.72 33.92 T:oceankeyakv2 35.24 35.25 35.28 T:norx3241v2 35.28 35.30 36.25 T:norx3241v3 35.46 35.47 35.52 T:norx3241v1 35.91 35.92 36.06 T:ascon96v1 36.11 36.11 36.26 T:ascon128av11 36.18 36.18 36.32 ascon128av12 36.63 36.64 36.71 T:aegis128 41.65 41.68 41.95 T:riverkeyakv2 44.56 44.56 44.60 T:aegis256 47.09 47.11 47.18 T:ketjeminorv2 47.56 47.67 47.80 T:ketjemajorv2 49.08 49.09 49.23 T:norx3261v1 49.40 49.40 49.42 T:norx3261v2 49.51 49.52 49.57 T:norx3261v3 51.75 51.76 51.89 T:ascon128v11 51.75 51.76 51.95 T:ascon128v1 51.77 51.78 51.89 ascon128v12 55.83 55.86 55.94 T:lunarkeyakv2 70.66 70.69 70.78 T:aes128otrcv3 76.90 76.91 77.09 T:aes128otrsv1 76.97 76.99 77.08 T:aes128otrsv2 78.62 78.66 78.80 T:aes128otrsv3 80.37 80.55 82.06 T:aes128gcmv1 81.64 81.67 81.92 T:aes128otrpv1 81.66 81.70 82.07 T:aes128otrpv2 83.29 83.32 83.81 T:aes128otrpv3 81.57 86.33 89.25 T:aeadaes128ocbtaglen128v1 88.95 89.00 89.33 T:seakeyakv1 93.10 93.39 94.47 T:aes256gcmv1 93.36 93.40 95.29 T:aes256otrcv3 99.50 99.55 99.90 T:aes256otrsv1 99.54 99.57 99.79 T:aes256otrsv2 101.18 101.21 101.44 T:aes256otrsv3 104.21 104.23 104.39 T:aes256otrpv1 104.22 104.24 104.38 T:aes256otrpv2 105.49 105.53 107.01 T:aes128n12t8clocv3 105.52 105.55 105.71 T:aes128n12t8clocv2 105.51 105.58 105.68 T:aes128n8t8clocv2 105.68 105.77 105.96 T:aes128n12clocv1 105.85 105.89 107.88 T:aes128n8clocv1 105.90 105.91 106.06 T:aes256otrpv3 108.76 108.87 109.03 T:oceankeyakv1 108.87 108.89 109.50 T:deoxysi128v141 110.27 110.39 110.47 T:aes128n12t8silcv2 110.34 110.44 110.56 T:aes128n8t8silcv2 110.39 110.48 110.97 T:aes128n12t8silcv3 110.93 110.95 111.29 T:aes128n12silcv1 110.92 110.96 111.31 T:aes128n8silcv1 107.70 112.04 115.38 T:aeadaes256ocbtaglen128v1 117.21 117.22 117.33 T:aesjambuv1 122.51 122.74 126.41 T:deoxysi256v141 134.82 134.90 136.47 T:proest256otrv1 158.00 158.01 158.18 T:ketjesrv1 158.24 159.36 160.25 T:ketjesrv2 159.35 159.44 161.57 T:deoxysii128v141 160.67 160.72 162.02 T:riverkeyakv1 261.07 261.20 265.40 T:ketjejrv1 288.52 288.83 290.80 T:proest128otrv1 319.24 319.93 326.93 T:aezv5 419.07 420.95 424.67 T:twine80n6clocv1 442.66 443.03 448.52 T:deoxysneq128128v13 443.12 443.53 448.70 T:deoxysneq128128v1 454.36 455.27 460.60 T:aezv4 460.23 462.77 465.21 T:ketjejrv2 526.01 526.40 531.35 T:deoxysii256v141 544.62 544.85 549.94 T:deoxyseq128128v13 548.18 548.63 552.92 T:twine80n6t4clocv2 548.30 549.38 553.27 T:twine80n6t4clocv3 596.49 599.57 602.16 T:aezv1 684.86 689.67 690.71 T:deoxysneq256128v1 685.10 690.41 691.44 T:deoxysneq256128v13 705.09 709.02 711.22 T:deoxyseq128128v1 832.63 837.85 838.44 T:aezv3 891.90 894.27 895.04 T:deoxyseq256128v13 1074.52 1074.94 1075.75 T:deoxyseq256128v1 4356.75 4365.25 4386.74 T:acorn128 11818.32 11822.08 11823.15 T:present80n6t4silcv2 12182.53 12184.39 12189.31 T:present80n6t4silcv3 12182.62 12185.71 12197.28 T:present80n6silcv1 26744.35 26751.91 26764.34 T:led80n6t4silcv2 26868.19 26870.51 26879.45 T:led80n6silcv1 26883.25 26889.45 26900.34 T:led80n6t4silcv3 36460.17 36464.87 36473.23 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 8.41 8.42 8.45 T:morus1280256v2 8.47 8.48 8.54 T:morus1280256v1 8.54 8.54 8.58 T:morus1280128v1 8.90 8.90 8.97 T:morus1280128v2 19.01 19.03 19.04 T:morus640128v1 19.11 19.13 19.15 T:morus640128v2 20.19 20.20 20.25 T:norx6441v2 20.23 20.24 20.29 T:norx6441v3 21.56 21.59 21.77 T:lakekeyakv2 21.64 21.65 21.71 T:norx6441v1 22.08 22.14 22.74 T:lakekeyakv1 23.79 23.79 23.85 T:norx6444v2 23.82 23.84 23.92 T:norx6444v3 25.00 25.01 25.04 T:acorn128v2 25.41 25.42 25.47 T:acorn128v3 26.02 26.03 26.16 T:norx6444v1 26.61 26.63 26.78 T:seakeyakv2 27.59 27.60 27.70 T:norx6461v2 27.69 27.73 27.76 T:norx6461v3 28.84 28.85 28.94 T:norx6461v1 31.83 31.83 31.85 T:aegis128l 33.33 33.34 33.55 T:tiaoxinv2 33.35 33.35 33.44 T:tiaoxinv1 33.87 33.92 34.13 T:oceankeyakv2 35.34 35.34 35.41 T:norx3241v2 35.38 35.42 36.30 T:norx3241v3 35.57 35.57 35.61 T:norx3241v1 35.91 35.91 36.13 T:ascon96v1 36.09 36.09 36.40 T:ascon128av11 36.18 36.23 36.68 ascon128av12 36.63 36.64 36.66 T:aegis128 41.75 41.76 41.95 T:riverkeyakv2 44.56 44.56 44.64 T:aegis256 47.19 47.25 47.30 T:ketjeminorv2 47.59 47.60 47.62 T:ketjemajorv2 49.18 49.18 49.24 T:norx3261v1 49.49 49.50 49.54 T:norx3261v2 49.60 49.61 49.65 T:norx3261v3 51.74 51.74 51.92 T:ascon128v1 51.74 51.76 51.91 T:ascon128v11 51.77 51.79 51.93 ascon128v12 55.92 55.96 56.57 T:lunarkeyakv2 70.66 70.69 70.88 T:aes128otrcv3 77.00 77.01 77.38 T:aes128otrsv1 77.04 77.06 77.17 T:aes128otrsv2 78.72 78.74 79.12 T:aes128otrsv3 80.38 80.47 81.33 T:aes128gcmv1 81.73 81.74 81.89 T:aes128otrpv1 81.75 81.78 82.01 T:aes128otrpv2 83.38 83.40 83.54 T:aes128otrpv3 81.47 88.96 90.13 T:aeadaes128ocbtaglen128v1 88.92 89.05 89.09 T:seakeyakv1 93.35 93.38 93.58 T:aes256otrcv3 93.21 93.53 94.63 T:aes256gcmv1 99.59 99.59 99.71 T:aes256otrsv1 99.63 99.63 99.85 T:aes256otrsv2 101.29 101.34 101.57 T:aes256otrsv3 104.33 104.34 104.56 T:aes256otrpv1 104.34 104.43 106.45 T:aes256otrpv2 105.35 105.51 107.04 T:aes128n12t8clocv3 105.48 105.51 105.66 T:aes128n8t8clocv2 105.52 105.69 105.72 T:aes128n12t8clocv2 105.56 105.82 106.09 T:aes128n8clocv1 105.74 105.83 106.28 T:aes128n12clocv1 106.01 106.02 106.28 T:aes256otrpv3 108.85 108.97 109.11 T:oceankeyakv1 108.97 108.98 109.33 T:deoxysi128v141 106.99 109.09 114.97 T:aeadaes256ocbtaglen128v1 110.40 110.44 110.61 T:aes128n8t8silcv2 110.35 110.46 110.59 T:aes128n12t8silcv3 110.36 110.47 110.66 T:aes128n12t8silcv2 110.72 110.84 110.89 T:aes128n12silcv1 110.87 110.96 111.42 T:aes128n8silcv1 117.21 117.21 117.27 T:aesjambuv1 122.54 122.59 123.36 T:deoxysi256v141 134.80 134.83 135.24 T:proest256otrv1 158.10 158.15 158.22 T:ketjesrv1 158.35 158.40 159.72 T:ketjesrv2 159.45 159.53 161.56 T:deoxysii128v141 160.80 160.89 162.23 T:riverkeyakv1 260.41 261.13 261.47 T:ketjejrv1 288.55 288.73 290.68 T:proest128otrv1 319.03 319.60 323.02 T:aezv5 418.75 420.71 423.69 T:twine80n6clocv1 442.60 443.03 448.88 T:deoxysneq128128v13 443.07 443.37 449.03 T:deoxysneq128128v1 454.18 456.85 460.62 T:aezv4 460.20 462.46 466.71 T:ketjejrv2 526.23 528.46 533.09 T:deoxysii256v141 545.46 546.82 550.35 T:deoxyseq128128v13 548.28 548.47 552.96 T:twine80n6t4clocv3 548.24 549.21 552.81 T:twine80n6t4clocv2 595.84 599.32 602.29 T:aezv1 684.54 690.18 691.94 T:deoxysneq256128v1 684.98 690.51 691.01 T:deoxysneq256128v13 705.36 710.17 711.70 T:deoxyseq128128v1 832.50 837.54 838.61 T:aezv3 889.96 894.59 895.46 T:deoxyseq256128v13 1074.68 1075.13 1076.42 T:deoxyseq256128v1 4353.33 4366.55 4372.00 T:acorn128 10203.40 10204.47 10208.68 aes256gcmv1 11816.85 11820.87 11830.77 T:present80n6t4silcv2 12181.05 12183.25 12188.30 T:present80n6silcv1 12180.91 12184.41 12190.01 T:present80n6t4silcv3 26742.97 26749.11 26754.06 T:led80n6t4silcv2 26868.37 26872.48 26883.66 T:led80n6silcv1 26884.25 26889.05 26897.57 T:led80n6t4silcv3

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 43.91 43.93 44.35 T:morus1280256v2 45.02 45.14 45.37 T:morus1280256v1 45.55 45.58 45.84 T:morus1280128v2 45.84 46.09 46.51 T:morus1280128v1 52.49 52.64 56.92 T:ascon128av11 52.66 52.83 55.07 T:ascon96v1 53.24 53.50 53.94 T:norx6441v1 53.46 53.58 56.73 ascon128av12 56.53 56.62 57.12 T:morus640128v1 59.70 59.75 60.16 T:morus640128v2 61.06 61.15 61.44 T:norx6441v2 62.06 62.21 62.49 T:norx6441v3 67.39 67.39 69.04 T:ascon128v1 67.39 67.40 69.45 T:ascon128v11 67.89 67.98 68.99 ascon128v12 70.99 71.26 71.61 T:norx3241v1 73.74 73.79 73.96 T:norx6461v1 81.77 81.92 82.80 T:lakekeyakv1 85.55 85.69 85.92 T:norx6461v2 85.87 86.01 86.27 T:norx3241v2 86.40 86.57 87.21 T:norx6461v3 86.84 86.92 87.16 T:norx3241v3 92.74 93.04 93.59 T:lakekeyakv2 97.38 97.52 98.86 T:riverkeyakv2 99.27 99.48 99.57 T:norx3261v1 116.05 116.06 116.18 T:aegis128 118.76 118.93 119.45 T:acorn128v2 119.39 119.57 120.14 T:aes128n8t8clocv2 119.76 119.95 120.27 T:aes128n12t8clocv2 120.27 120.47 120.69 T:norx3261v2 120.40 120.72 121.46 T:aes128n12t8clocv3 122.67 122.77 122.97 T:norx3261v3 123.30 123.31 123.74 T:acorn128v3 124.11 124.38 125.00 T:aes128n12clocv1 124.56 124.70 125.28 T:aes128n8clocv1 124.55 124.85 125.64 T:aes128otrsv1 124.86 124.96 125.59 T:aes128otrsv2 127.60 128.12 129.46 T:aes128otrsv3 128.03 128.45 128.77 T:aes128otrcv3 129.02 129.22 129.59 T:aes128otrpv1 129.24 129.60 130.63 T:aes128otrpv2 131.79 131.95 132.70 T:aes128otrpv3 145.62 145.69 146.34 T:aes128n8t8silcv2 145.94 146.02 146.70 T:aes128n12t8silcv2 146.76 146.82 147.34 T:norx6444v2 146.85 146.95 147.63 T:aes128n12t8silcv3 148.95 149.20 149.34 T:norx6444v3 150.21 150.29 150.55 T:aegis128l 149.46 150.38 151.42 T:ketjeminorv2 151.28 151.44 152.82 T:aes128n8silcv1 151.41 151.62 153.45 T:aes128n12silcv1 154.59 154.63 154.77 T:aesjambuv1 156.05 156.12 156.62 T:deoxysi128v141 157.44 157.44 157.74 T:aegis256 157.40 157.55 158.03 T:norx6444v1 159.38 159.52 159.67 T:aes256otrsv1 159.62 159.74 160.16 T:aes256otrsv2 162.22 162.62 163.01 T:aes256otrsv3 164.02 164.09 164.68 T:aes256otrpv1 164.20 164.27 165.00 T:aes256otrpv2 165.63 165.84 166.38 T:aes256otrcv3 166.79 166.88 167.83 T:aes256otrpv3 195.14 196.13 212.45 T:aes128gcmv1 214.10 216.69 232.02 T:aes256gcmv1 225.88 226.02 230.54 T:tiaoxinv2 225.70 226.17 230.38 T:deoxysii128v141 226.52 226.74 230.65 T:tiaoxinv1 229.79 230.10 230.98 T:deoxysi256v141 231.59 232.02 233.20 T:seakeyakv2 242.66 242.88 243.45 T:ketjesrv1 267.77 268.04 268.47 T:riverkeyakv1 269.97 270.09 270.61 T:ketjesrv2 270.44 270.62 272.23 T:ketjemajorv2 270.16? 294.66? 444.56? T:aeadaes128ocbtaglen128v1 312.09? 335.41? 488.52? T:aeadaes256ocbtaglen128v1 342.20 342.58 342.99 T:ketjejrv1 352.09 352.50 354.05 T:oceankeyakv2 388.22 389.16 390.83 T:proest256otrv1 395.41 402.54 417.17 T:aezv5 406.80 406.88 407.20 T:deoxysneq128128v13 406.83 407.27 407.80 T:deoxysneq128128v1 420.75 423.21 434.77 T:aezv4 454.59 456.63 456.84 T:twine80n6clocv1 559.88 560.31 566.59 T:proest128otrv1 580.06 581.34 582.45 T:seakeyakv1 582.70 582.90 583.62 T:twine80n6t4clocv2 583.50 583.65 586.71 T:twine80n6t4clocv3 587.44 588.00 589.43 T:deoxysii256v141 623.52 624.02 628.10 T:ketjejrv2 628.71 629.69 630.06 T:deoxyseq128128v1 646.12 646.27 651.27 T:aezv1 665.51 665.84 667.65 T:deoxysneq256128v1 666.70 667.17 668.03 T:deoxysneq256128v13 673.56 674.90 692.31 T:deoxyseq128128v13 869.96 870.45 872.66 T:lunarkeyakv2 1027.16 1027.21 1027.59 T:deoxyseq256128v1 1041.36 1043.63 1049.41 T:aezv3 1053.74 1054.21 1055.87 T:oceankeyakv1 1101.24 1101.55 1105.06 T:deoxyseq256128v13 13191.09 13201.26 13302.79 T:present80n6t4silcv2 13602.51 13604.97 13718.55 T:present80n6silcv1 13597.62 13608.27 13713.90 T:present80n6t4silcv3 14477.60 14577.91 14626.60 T:acorn128 29941.79 29950.90 29971.17 T:led80n6t4silcv2 30073.62 30093.78 30138.07 T:led80n6silcv1 30107.13 30126.02 30151.50 T:led80n6t4silcv3 50213.71 50243.68 50267.83 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 43.22 43.23 43.52 T:morus1280256v2 44.81 44.90 45.38 T:morus1280128v2 44.86 44.98 45.17 T:morus1280256v1 45.96 46.01 46.25 T:morus1280128v1 52.56 52.60 54.50 T:ascon96v1 52.85 53.41 57.91 T:ascon128av11 53.90 54.02 56.21 ascon128av12 55.98 56.12 56.60 T:norx6441v1 56.74 56.80 57.07 T:morus640128v1 59.51 59.55 59.83 T:morus640128v2 62.84 62.91 63.24 T:norx6441v2 64.05 64.22 64.84 T:norx6441v3 67.63 67.70 69.43 T:ascon128v11 67.63 67.74 69.05 T:ascon128v1 68.10 68.12 69.48 ascon128v12 72.23 72.43 72.94 T:norx3241v1 76.31 76.50 76.75 T:norx6461v1 82.35 82.53 82.88 T:lakekeyakv1 87.36 87.54 87.83 T:norx3241v2 87.42 87.59 87.99 T:norx6461v2 87.99 88.24 88.60 T:norx3241v3 88.50 88.70 89.27 T:norx6461v3 91.96 92.20 93.29 T:lakekeyakv2 97.98 98.11 99.28 T:riverkeyakv2 100.70 100.81 101.15 T:norx3261v1 115.79 115.99 116.22 T:aegis128 119.88 120.01 120.36 T:acorn128v2 121.80 121.98 122.20 T:norx3261v2 123.81 123.94 124.32 T:acorn128v3 123.98 124.18 124.45 T:aes128n8t8clocv2 124.14 124.32 124.70 T:aes128n12t8clocv2 124.42 124.73 124.87 T:norx3261v3 124.92 125.13 125.45 T:aes128n12t8clocv3 125.50 125.97 126.46 T:aes128otrsv1 125.88 126.14 127.13 T:aes128otrsv2 127.63 128.04 128.98 T:aes128otrcv3 128.38 128.66 129.63 T:aes128otrsv3 128.66 129.09 129.46 T:aes128n12clocv1 129.26 129.41 129.87 T:aes128n8clocv1 130.27 130.52 131.20 T:aes128otrpv1 130.55 130.66 131.75 T:aes128otrpv2 132.45 132.84 134.72 T:aes128otrpv3 145.66 145.85 146.30 T:aes128n8t8silcv2 145.91 146.16 146.52 T:aes128n12t8silcv2 147.02 147.28 147.74 T:aes128n12t8silcv3 148.51 148.63 149.12 T:norx6444v2 150.16 150.30 150.53 T:aegis128l 150.70 150.76 151.48 T:norx6444v3 151.41 151.71 152.93 T:aes128n8silcv1 151.43 152.28 152.53 T:ketjeminorv2 152.09 152.34 153.36 T:aes128n12silcv1 154.98 155.05 155.30 T:aesjambuv1 157.26 157.26 157.55 T:aegis256 160.12 160.30 160.68 T:norx6444v1 160.25 160.42 161.27 T:aes256otrsv1 160.79 160.85 161.77 T:aes256otrsv2 162.93 163.14 163.77 T:aes256otrsv3 165.10 165.26 166.09 T:aes256otrpv2 165.30 165.39 166.48 T:aes256otrpv1 165.45 165.55 166.11 T:aes256otrcv3 167.73 167.77 168.27 T:aes256otrpv3 182.73 182.95 184.14 T:deoxysi128v141 194.91 198.93 214.94 T:aes128gcmv1 213.95 216.96 233.33 T:aes256gcmv1 226.05 226.38 227.43 T:deoxysii128v141 231.18 231.42 235.73 T:seakeyakv2 243.95 244.08 244.98 T:ketjesrv1 257.54 257.71 260.89 T:tiaoxinv2 258.03 258.24 264.07 T:tiaoxinv1 259.16 259.32 263.15 T:deoxysi256v141 267.53 267.63 268.41 T:ketjesrv2 271.37 271.49 273.22 T:ketjemajorv2 272.52 272.98 273.88 T:riverkeyakv1 342.62 343.27 343.90 T:ketjejrv1 352.09 352.52 355.09 T:oceankeyakv2 278.55? 380.73? 448.98? T:aeadaes128ocbtaglen128v1 395.68 397.24 412.84 T:aezv5 397.23 398.78 399.88 T:proest256otrv1 322.66? 417.57? 490.30? T:aeadaes256ocbtaglen128v1 420.79 422.55 435.16 T:aezv4 455.98 456.70 458.23 T:twine80n6clocv1 488.45 488.77 494.19 T:deoxysneq128128v13 488.83 489.45 494.85 T:deoxysneq128128v1 561.93 563.42 570.91 T:proest128otrv1 583.53 583.64 584.48 T:twine80n6t4clocv2 584.25 584.37 584.88 T:twine80n6t4clocv3 585.52 586.18 586.74 T:seakeyakv1 587.48 588.02 589.39 T:deoxysii256v141 615.38 615.46 616.12 T:ketjejrv2 660.80 662.02 668.74 T:aezv1 674.88 675.62 712.62 T:deoxyseq128128v13 757.60 758.04 762.77 T:deoxysneq256128v1 758.61 759.67 761.16 T:deoxysneq256128v13 791.69 793.66 813.20 T:deoxyseq128128v1 870.95 872.23 876.42 T:lunarkeyakv2 1040.54 1041.72 1048.67 T:aezv3 1059.70 1061.17 1063.89 T:oceankeyakv1 1100.98 1101.03 1101.44 T:deoxyseq256128v13 1209.61 1210.68 1216.12 T:deoxyseq256128v1 13191.80 13204.35 13305.37 T:present80n6t4silcv2 13598.40 13610.98 13710.40 T:present80n6t4silcv3 13603.66 13620.41 13717.28 T:present80n6silcv1 14595.53 14631.09 14782.59 T:acorn128 29941.61 29951.39 29968.48 T:led80n6t4silcv2 30070.42 30090.47 30118.61 T:led80n6silcv1 30111.45 30133.13 30177.02 T:led80n6t4silcv3 50200.99 50236.60 50254.02 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 43.23 43.34 43.50 T:morus1280256v2 44.74 44.85 45.12 T:morus1280128v2 44.84 44.91 44.99 T:morus1280256v1 45.88 45.92 46.19 T:morus1280128v1 52.38 52.38 52.88 T:ascon96v1 52.59 52.67 53.51 T:ascon128av11 53.85 53.92 54.53 ascon128av12 56.37 56.45 56.88 T:norx6441v1 56.68 56.99 57.06 T:morus640128v1 59.54 59.62 59.94 T:morus640128v2 63.28 63.37 63.52 T:norx6441v2 64.60 64.67 64.86 T:norx6441v3 67.37 67.41 68.11 T:ascon128v1 67.37 67.44 67.89 T:ascon128v11 68.10 68.12 68.34 ascon128v12 72.63 72.73 73.20 T:norx3241v1 76.98 77.24 77.41 T:norx6461v1 82.59 82.73 83.33 T:lakekeyakv1 87.83 87.95 88.21 T:norx3241v2 87.87 88.12 88.39 T:norx6461v2 88.62 88.71 88.97 T:norx3241v3 88.89 88.94 89.40 T:norx6461v3 92.55 92.84 93.85 T:lakekeyakv2 98.52 98.75 99.56 T:riverkeyakv2 101.01 101.26 101.61 T:norx3261v1 115.82 115.89 115.98 T:aegis128 119.87 119.94 120.20 T:acorn128v2 122.27 122.35 122.56 T:norx3261v2 123.73 123.85 124.02 T:aes128n8t8clocv2 123.84 123.92 124.11 T:acorn128v3 123.76 124.13 124.34 T:aes128n12t8clocv2 124.56 124.74 125.23 T:aes128n12t8clocv3 125.05 125.17 125.48 T:norx3261v3 125.97 126.11 127.97 T:aes128otrsv1 126.49 126.63 127.20 T:aes128otrsv2 127.55 128.03 128.66 T:aes128otrcv3 128.04 128.27 128.96 T:aes128n12clocv1 128.28 128.48 129.19 T:aes128n8clocv1 128.92 129.14 129.61 T:aes128otrsv3 130.76 130.84 131.25 T:aes128otrpv1 131.08 131.30 131.74 T:aes128otrpv2 132.92 133.23 133.87 T:aes128otrpv3 145.54 145.64 145.95 T:aes128n8t8silcv2 145.76 145.83 146.31 T:aes128n12t8silcv2 146.74 146.91 147.05 T:aes128n12t8silcv3 148.76 148.92 149.30 T:norx6444v2 149.92 150.05 150.17 T:aegis128l 151.01 151.05 151.82 T:norx6444v3 151.77 151.98 152.98 T:aes128n8silcv1 152.05 152.21 153.09 T:aes128n12silcv1 152.28 152.71 153.61 T:ketjeminorv2 155.01 155.12 155.33 T:aesjambuv1 157.13 157.23 157.52 T:aegis256 160.40 160.58 161.05 T:norx6444v1 160.84 160.94 161.57 T:aes256otrsv1 161.26 161.35 161.80 T:aes256otrsv2 163.42 163.52 163.89 T:aes256otrsv3 165.52 165.60 166.44 T:aes256otrpv2 165.48 165.66 166.21 T:aes256otrcv3 165.72 165.80 166.17 T:aes256otrpv1 168.33 168.41 168.59 T:aes256otrpv3 183.29 183.52 184.41 T:deoxysi128v141 195.67 198.62 213.38 T:aes128gcmv1 213.75 216.10 230.49 T:aes256gcmv1 226.48 226.76 228.12 T:deoxysii128v141 231.78 232.70 235.88 T:seakeyakv2 244.54 244.65 245.19 T:ketjesrv1 256.41 256.52 257.76 T:tiaoxinv2 257.03 257.11 260.78 T:tiaoxinv1 259.65 259.90 264.01 T:deoxysi256v141 267.90 267.96 268.63 T:ketjesrv2 272.35 272.47 274.25 T:ketjemajorv2 273.04 273.14 273.97 T:riverkeyakv1 342.20 342.90 343.64 T:ketjejrv1 352.51 352.80 355.80 T:oceankeyakv2 277.14? 372.41? 452.88? T:aeadaes128ocbtaglen128v1 388.03 388.14 390.21 T:proest256otrv1 392.32 396.73 402.62 T:aezv5 327.48? 411.64? 498.22? T:aeadaes256ocbtaglen128v1 419.90 421.10 436.04 T:aezv4 455.66 456.77 457.77 T:twine80n6clocv1 488.30 488.79 492.88 T:deoxysneq128128v13 488.92 489.44 494.08 T:deoxysneq128128v1 561.71 561.91 566.91 T:proest128otrv1 583.52 583.65 583.93 T:twine80n6t4clocv2 584.10 584.25 584.70 T:twine80n6t4clocv3 586.40 588.06 588.45 T:seakeyakv1 588.45 589.30 590.65 T:deoxysii256v141 615.18 615.31 617.41 T:ketjejrv2 660.05 660.95 667.06 T:aezv1 673.63 675.91 689.36 T:deoxyseq128128v13 757.28 757.66 762.72 T:deoxysneq256128v1 759.05 760.24 763.59 T:deoxysneq256128v13 791.37 791.73 796.59 T:deoxyseq128128v1 871.45 873.16 878.96 T:lunarkeyakv2 1039.74 1040.50 1047.13 T:aezv3 1060.26 1061.80 1064.40 T:oceankeyakv1 1101.41 1101.47 1101.97 T:deoxyseq256128v13 1209.80 1210.27 1214.98 T:deoxyseq256128v1 13191.38 13202.95 13304.72 T:present80n6t4silcv2 13602.27 13605.36 13713.47 T:present80n6silcv1 13598.03 13610.27 13713.32 T:present80n6t4silcv3 14544.55 14634.06 14725.63 T:acorn128 23887.62 23975.21 24003.74 aes256gcmv1 29936.28 29948.95 29965.81 T:led80n6t4silcv2 30076.55 30096.27 30119.48 T:led80n6silcv1 30106.82 30125.98 30150.46 T:led80n6t4silcv3