VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates, indexed by machine

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each cipher and each implementation.

amd64; Zen3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; beelink, supercop-20221122

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.71 1.72 1.72 T:aes128gcmv1 1.84 1.85 1.86 aes256gcmv1 5.60 5.63 5.66 ascon128av12 8.13 8.13 8.13 ascon80pqv12 8.37 8.38 8.42 ascon128v12 12.47 12.51 12.54 ascon128abi32v12 14.71 14.81 14.87 T:xoodyakround3 18.16 18.19 18.21 ascon128bi32v12 18.19 18.22 18.27 T:schwaemm256128v2 22.83 22.98 24.98 T:grain128aeadv2 23.69? 24.01? 26.82? T:schwaemm256256v2 24.16 24.22 24.27 T:schwaemm192192v2 28.52 28.65 28.83 T:schwaemm128128v2 31.03 31.04 31.04 T:isapa128v20 33.23 33.26 33.30 T:isapa128av20 37.12 37.15 37.18 romulusn 38.56 38.57 38.57 T:giftcofb128v1 58.50 58.50 58.53 T:tinyjambu128v2 59.40 59.44 59.47 romulusm 60.41 60.78 60.85 T:isapk128av20 62.50 62.50 62.50 T:tinyjambu192v2 65.73 65.87 65.88 T:tinyjambu256v2 82.45 82.54 82.69 T:isapk128v20 120.70 120.76 120.80 romulust 122.92 123.08 123.35 T:elephant200v2 146.77 148.52 150.81 T:isapxv20 6338.49 6376.37 6446.46 T:elephant176v2 7797.25 7802.34 7841.88 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.71 1.72 1.72 T:aes128gcmv1 1.86 1.87 1.88 aes256gcmv1 5.17 5.19 5.19 ascon128av12 7.62 7.63 7.63 ascon80pqv12 7.87 7.88 7.88 ascon128v12 12.62 12.63 12.67 ascon128abi32v12 14.64 14.69 14.75 T:xoodyakround3 18.21 18.26 18.32 T:schwaemm256128v2 18.61 18.64 18.67 ascon128bi32v12 23.05 23.12 23.66 T:grain128aeadv2 23.63? 23.98? 26.48? T:schwaemm256256v2 24.13 24.20 24.26 T:schwaemm192192v2 28.48 28.63 28.73 T:schwaemm128128v2 30.99 31.04 31.08 T:isapa128v20 33.23 33.27 33.30 T:isapa128av20 37.36 37.43 37.44 romulusn 38.50 38.50 38.51 T:giftcofb128v1 58.50 58.51 58.51 T:tinyjambu128v2 59.72 59.77 59.83 romulusm 60.32 60.84 60.87 T:isapk128av20 62.75 62.75 62.77 T:tinyjambu192v2 65.48 65.50 65.52 T:tinyjambu256v2 82.35 82.48 82.61 T:isapk128v20 120.68 120.80 120.87 romulust 122.86 122.95 123.05 T:elephant200v2 147.56 148.13 149.02 T:isapxv20 6370.20 6385.58 6390.08 T:elephant176v2 7793.94 7830.60 7874.24 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.71 1.71 1.72 T:aes128gcmv1 1.86 1.86 1.87 aes256gcmv1 5.17 5.19 5.19 ascon128av12 7.63 7.63 7.64 ascon80pqv12 7.88 7.88 7.88 ascon128v12 12.62 12.63 12.66 ascon128abi32v12 14.68 14.73 14.77 T:xoodyakround3 15.48 15.52 15.55 T:isapa128v20 18.21 18.27 18.31 T:schwaemm256128v2 18.62 18.64 18.67 ascon128bi32v12 22.32 22.38 22.38 T:isapa128av20 23.03 23.09 23.64 T:grain128aeadv2 23.67? 24.02? 26.53? T:schwaemm256256v2 24.15 24.19 24.26 T:schwaemm192192v2 28.52 28.65 28.81 T:schwaemm128128v2 37.36 37.42 37.45 romulusn 38.50 38.50 38.51 T:giftcofb128v1 40.98 41.03 41.09 romulust 43.62 43.65 43.83 T:isapk128av20 56.20 56.35 56.41 T:isapk128v20 58.50 58.51 58.52 T:tinyjambu128v2 59.71 59.75 59.80 romulusm 62.75 62.75 62.75 T:tinyjambu192v2 65.49 65.50 65.52 T:tinyjambu256v2 85.23 85.48 86.15 T:isapxv20 122.93 123.03 123.15 T:elephant200v2 6346.98 6368.47 6381.26 T:elephant176v2 7790.82 7809.50 7886.74 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.08 1.09 1.09 T:aes128gcmv1 1.14 1.15 1.16 aes256gcmv1 5.62 5.63 5.65 ascon128av12 7.87 7.88 7.89 ascon80pqv12 8.12 8.14 8.15 ascon128v12 11.39 11.45 11.47 T:xoodyakround3 12.24 12.35 12.38 ascon128abi32v12 18.08 18.11 18.14 T:schwaemm256128v2 18.40 18.42 18.44 ascon128bi32v12 22.82 22.95 24.96 T:grain128aeadv2 23.27 23.29 23.29 T:isapa128v20 23.60 23.63 23.81 T:schwaemm256256v2 24.58 24.75 24.91 T:schwaemm192192v2 27.24 27.27 27.28 T:isapa128av20 28.50 28.58 28.66 T:schwaemm128128v2 29.74 29.75 29.76 romulusn 38.38 38.38 38.39 T:giftcofb128v1 40.89 40.90 40.93 romulusm 46.75 46.77 46.77 T:tinyjambu128v2 46.51 47.08 47.59 T:isapk128av20 49.60 49.61 49.62 T:tinyjambu256v2 50.13 50.14 50.15 T:tinyjambu192v2 65.66 65.75 65.80 T:isapk128v20 80.87 80.91 80.94 romulust 92.66 92.73 92.78 T:elephant200v2 116.76 117.01 118.31 T:isapxv20 4741.22 4750.67 4759.86 T:elephant176v2 5832.58 5863.74 5936.02 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.08 1.08 1.10 T:aes128gcmv1 1.15 1.15 1.15 aes256gcmv1 5.26 5.27 5.28 ascon128av12 7.75 7.76 7.76 ascon80pqv12 7.81 7.82 7.82 ascon128v12 11.34 11.36 11.38 T:xoodyakround3 12.44 12.48 12.50 ascon128abi32v12 18.12 18.14 18.18 T:schwaemm256128v2 18.24 18.26 18.27 ascon128bi32v12 22.94 23.01 23.60 T:grain128aeadv2 23.27 23.27 23.28 T:isapa128v20 23.64 23.74 23.84 T:schwaemm256256v2 24.51 24.66 24.86 T:schwaemm192192v2 27.25 27.26 27.28 T:isapa128av20 28.47 28.51 28.61 T:schwaemm128128v2 29.86 29.89 29.92 romulusn 38.35 38.35 38.35 T:giftcofb128v1 41.03 41.06 41.09 romulusm 46.76 46.76 46.76 T:tinyjambu128v2 46.63 47.35 47.61 T:isapk128av20 49.42 49.42 49.43 T:tinyjambu256v2 50.01 50.01 50.01 T:tinyjambu192v2 65.56 65.59 65.66 T:isapk128v20 80.86 80.93 80.98 romulust 92.68 92.75 92.79 T:elephant200v2 116.62 116.93 117.22 T:isapxv20 4734.12 4747.39 4752.12 T:elephant176v2 5827.77 5869.73 5874.79 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.08 1.09 1.09 T:aes128gcmv1 1.15 1.15 1.15 aes256gcmv1 5.26 5.27 5.28 ascon128av12 7.76 7.76 7.76 ascon80pqv12 7.81 7.82 7.82 ascon128v12 11.34 11.36 11.39 T:xoodyakround3 12.48 12.48 12.48 ascon128abi32v12 15.50 15.51 15.53 T:isapa128v20 18.11 18.13 18.16 T:schwaemm256128v2 18.25 18.26 18.27 ascon128bi32v12 21.78 21.82 21.85 T:isapa128av20 22.96 23.05 23.69 T:grain128aeadv2 23.64 23.79 23.84 T:schwaemm256256v2 24.34 24.39 24.51 T:schwaemm192192v2 28.45 28.58 28.66 T:schwaemm128128v2 29.87 29.88 29.92 romulusn 38.35 38.35 38.35 T:giftcofb128v1 38.36 38.97 39.04 T:isapk128av20 40.97 40.99 41.03 romulust 41.05 41.07 41.08 romulusm 46.76 46.76 46.77 T:tinyjambu128v2 49.42 49.42 49.43 T:tinyjambu256v2 50.01 50.01 50.01 T:tinyjambu192v2 52.52 52.59 52.65 T:isapk128v20 85.46 85.72 85.95 T:isapxv20 92.69 92.75 92.89 T:elephant200v2 4740.39 4766.57 4806.43 T:elephant176v2 5850.63 5892.45 5913.32 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.44 0.45 0.46 aes256gcmv1 0.45 0.45 0.46 T:aes128gcmv1 5.61 5.63 5.64 ascon128av12 7.61 7.62 7.64 ascon80pqv12 7.86 7.87 7.88 ascon128v12 8.01 8.04 8.07 T:xoodyakround3 12.17 12.20 12.22 ascon128abi32v12 15.51 15.51 15.51 T:isapa128v20 17.96 18.02 18.09 T:schwaemm256128v2 18.57 18.63 18.68 ascon128bi32v12 21.21 21.26 21.29 T:isapa128av20 22.33 22.36 22.39 romulusm 22.34 22.37 22.40 romulusn 22.83 22.93 24.81 T:grain128aeadv2 23.21 23.58 23.65 T:schwaemm256256v2 24.63 24.82 24.93 T:schwaemm192192v2 28.42 28.52 28.61 T:schwaemm128128v2 33.34 33.35 33.36 T:tinyjambu256v2 33.78 33.82 34.24 T:isapk128av20 35.00 35.00 35.00 T:tinyjambu128v2 37.76 37.76 37.77 T:tinyjambu192v2 38.19 38.20 38.21 T:giftcofb128v1 40.96 41.02 41.08 romulust 48.85 48.88 48.93 T:isapk128v20 62.60 62.68 62.77 T:elephant200v2 84.86 85.41 86.34 T:isapxv20 3135.50 3151.44 3183.76 T:elephant176v2 3906.03 3907.18 3942.88 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.43 0.43 0.45 aes256gcmv1 0.45 0.46 0.46 T:aes128gcmv1 5.36 5.36 5.36 ascon128av12 7.74 7.75 7.75 ascon128v12 7.88 7.88 7.88 ascon80pqv12 8.00 8.04 8.08 T:xoodyakround3 12.29 12.33 12.34 ascon128abi32v12 15.48 15.48 15.55 T:isapa128v20 17.85 17.88 17.91 ascon128bi32v12 17.98 18.02 18.08 T:schwaemm256128v2 21.21 21.26 21.32 T:isapa128av20 22.33 22.36 22.42 romulusm 22.35 22.38 22.42 romulusn 22.82 22.93 23.64 T:grain128aeadv2 23.12 23.43 23.58 T:schwaemm256256v2 24.60 24.86 25.15 T:schwaemm192192v2 28.42 28.51 28.72 T:schwaemm128128v2 33.34 33.35 33.36 T:tinyjambu256v2 33.59 33.62 34.34 T:isapk128av20 35.00 35.01 35.02 T:tinyjambu128v2 37.26 37.26 37.27 T:tinyjambu192v2 38.18 38.20 38.20 T:giftcofb128v1 40.94 41.03 41.12 romulust 48.81 48.89 48.91 T:isapk128v20 62.64 62.70 62.76 T:elephant200v2 85.22 85.47 85.93 T:isapxv20 3131.50 3143.49 3150.94 T:elephant176v2 3907.11 3910.44 3912.19 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.43 0.43 0.44 aes256gcmv1 0.45 0.45 0.46 T:aes128gcmv1 5.36 5.36 5.37 ascon128av12 7.75 7.75 7.76 ascon128v12 7.88 7.88 7.88 ascon80pqv12 8.01 8.06 8.10 T:xoodyakround3 12.32 12.33 12.33 ascon128abi32v12 15.48 15.51 15.54 T:isapa128v20 17.85 17.88 17.90 ascon128bi32v12 17.98 18.02 18.07 T:schwaemm256128v2 21.22 21.26 21.32 T:isapa128av20 22.33 22.37 22.40 romulusm 22.32 22.38 22.41 romulusn 22.89 22.95 23.64 T:grain128aeadv2 23.18 23.50 23.64 T:schwaemm256256v2 24.57 24.72 24.79 T:schwaemm192192v2 28.39 28.49 28.59 T:schwaemm128128v2 33.34 33.35 33.36 T:tinyjambu256v2 33.61 33.68 34.33 T:isapk128av20 35.01 35.01 35.02 T:tinyjambu128v2 37.26 37.26 37.27 T:tinyjambu192v2 38.19 38.19 38.20 T:giftcofb128v1 40.93 41.01 41.07 romulust 48.82 48.88 48.91 T:isapk128v20 62.63 62.68 62.73 T:elephant200v2 85.08 85.42 85.96 T:isapxv20 3131.96 3159.33 3174.82 T:elephant176v2 3899.62 3937.97 3941.54 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.19 1.19 1.20 T:aes128gcmv1 1.26 1.27 1.27 aes256gcmv1 5.77 5.78 5.80 ascon128av12 8.00 8.00 8.01 ascon80pqv12 8.25 8.25 8.26 ascon128v12 11.47 11.56 11.58 T:xoodyakround3 12.64 12.64 12.68 ascon128abi32v12 18.65 18.70 18.73 T:schwaemm256128v2 18.75 18.76 18.78 ascon128bi32v12 23.32 23.35 25.17 T:grain128aeadv2 24.25 24.29 24.49 T:schwaemm256256v2 25.00 25.03 25.11 T:schwaemm192192v2 28.92 28.97 29.04 T:schwaemm128128v2 29.50 29.50 29.51 T:isapa128av20 30.01 30.02 30.04 romulusn 34.15 34.15 34.17 T:isapa128v20 38.68 38.68 38.69 T:giftcofb128v1 41.16 41.18 41.20 romulusm 47.11 47.12 47.13 T:tinyjambu128v2 50.00 50.00 50.00 T:tinyjambu256v2 50.51 50.52 50.52 T:tinyjambu192v2 53.22 54.26 56.38 T:isapk128av20 82.16 82.18 82.21 romulust 94.76 94.81 94.88 T:elephant200v2 106.09 106.13 106.16 T:isapk128v20 190.26 190.37 191.64 T:isapxv20 4761.78 4791.86 4794.63 T:elephant176v2 5923.26 5931.53 5995.92 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.20 1.20 1.20 T:aes128gcmv1 1.27 1.27 1.28 aes256gcmv1 5.41 5.43 5.44 ascon128av12 7.88 7.88 7.88 ascon80pqv12 7.93 7.93 7.93 ascon128v12 11.44 11.45 11.48 T:xoodyakround3 12.76 12.77 12.80 ascon128abi32v12 18.62 18.62 18.64 ascon128bi32v12 18.69 18.71 18.73 T:schwaemm256128v2 23.36 23.43 24.01 T:grain128aeadv2 24.25 24.34 24.45 T:schwaemm256256v2 24.99 25.04 25.11 T:schwaemm192192v2 28.90 28.98 29.03 T:schwaemm128128v2 29.49 29.49 29.49 T:isapa128av20 30.16 30.18 30.19 romulusn 34.15 34.15 34.17 T:isapa128v20 38.65 38.65 38.65 T:giftcofb128v1 41.36 41.38 41.42 romulusm 47.10 47.11 47.11 T:tinyjambu128v2 49.81 49.82 49.82 T:tinyjambu256v2 50.39 50.39 50.41 T:tinyjambu192v2 53.12 54.25 54.28 T:isapk128av20 82.15 82.19 82.23 romulust 94.68 94.75 94.79 T:elephant200v2 106.02 106.06 106.11 T:isapk128v20 189.80 190.21 190.44 T:isapxv20 4761.82 4775.45 4800.87 T:elephant176v2 5910.33 5921.36 5922.18 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.20 1.20 1.20 T:aes128gcmv1 1.27 1.27 1.27 aes256gcmv1 5.41 5.41 5.43 ascon128av12 7.88 7.88 7.88 ascon80pqv12 7.93 7.93 7.94 ascon128v12 11.44 11.47 11.52 T:xoodyakround3 12.76 12.76 12.77 ascon128abi32v12 18.62 18.62 18.64 ascon128bi32v12 18.67 18.70 18.73 T:schwaemm256128v2 21.04 21.04 21.06 T:isapa128v20 23.07 23.07 23.09 T:isapa128av20 23.37 23.40 24.00 T:grain128aeadv2 24.23 24.29 24.42 T:schwaemm256256v2 24.97 25.02 25.11 T:schwaemm192192v2 28.97 29.00 29.05 T:schwaemm128128v2 30.15 30.16 30.21 romulusn 38.65 38.65 38.65 T:giftcofb128v1 41.36 41.37 41.41 romulusm 42.26 42.32 42.34 romulust 42.46 43.52 45.50 T:isapk128av20 47.10 47.11 47.11 T:tinyjambu128v2 49.81 49.81 49.82 T:tinyjambu256v2 50.39 50.39 50.39 T:tinyjambu192v2 73.45 73.50 73.56 T:isapk128v20 94.67 94.70 94.78 T:elephant200v2 122.85 123.30 123.37 T:isapxv20 4771.99 4785.92 4794.56 T:elephant176v2 5909.64 5911.04 5915.89 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.52 5.56 5.59 T:aes128gcmv1 5.88 5.89 6.00 aes256gcmv1 8.64 8.92 9.20 ascon128av12 10.66 10.80 10.85 ascon80pqv12 11.04 11.12 11.12 ascon128v12 16.59 16.66 16.77 T:xoodyakround3 19.37 19.45 20.33 ascon128abi32v12 26.41 26.45 27.17 ascon128bi32v12 31.23 31.34 31.47 T:schwaemm256128v2 31.70 31.95 33.05 T:grain128aeadv2 35.95 35.96 36.10 romulusn 37.58 37.77 38.20 T:schwaemm128128v2 38.81 39.02 39.13 T:schwaemm256256v2 39.81 40.17 40.55 T:schwaemm192192v2 45.50 45.54 45.70 T:giftcofb128v1 46.95 47.05 47.26 romulusm 55.05 55.05 55.22 T:tinyjambu128v2 58.66 58.77 58.93 T:tinyjambu256v2 58.88 58.90 59.05 T:tinyjambu192v2 80.65 80.72 81.25 T:isapa128av20 111.05 111.27 111.66 romulust 135.48 135.75 135.98 T:elephant200v2 170.85 170.95 171.12 T:isapk128av20 284.11 284.11 284.30 T:isapa128v20 1023.01 1023.26 1023.58 T:isapk128v20 1850.39 1855.26 1856.27 T:isapxv20 5936.70 5955.88 5963.47 T:elephant176v2 7920.73 7926.40 7956.11 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.31 5.34 5.40 T:aes128gcmv1 5.68 5.71 5.81 aes256gcmv1 8.99 9.11 9.16 ascon128av12 10.62 10.62 10.69 ascon80pqv12 10.64 10.67 10.70 ascon128v12 16.67 16.80 16.88 T:xoodyakround3 19.48 19.48 19.88 ascon128abi32v12 26.95 26.97 27.72 ascon128bi32v12 31.23 31.55 31.69 T:schwaemm256128v2 32.17 32.31 32.67 T:grain128aeadv2 36.40 36.53 36.74 romulusn 37.30 37.87 38.42 T:schwaemm128128v2 38.79 39.06 39.27 T:schwaemm256256v2 39.94 40.63 40.91 T:schwaemm192192v2 45.62 45.65 45.70 T:giftcofb128v1 48.50 48.63 48.79 romulusm 54.99 54.99 55.12 T:tinyjambu128v2 58.62 58.80 58.93 T:tinyjambu256v2 58.76 58.81 58.98 T:tinyjambu192v2 80.56 80.62 81.02 T:isapa128av20 111.30 111.65 112.13 romulust 135.48 135.73 136.54 T:elephant200v2 170.80 170.82 170.93 T:isapk128av20 284.08 284.11 284.76 T:isapa128v20 1023.15 1023.62 1023.79 T:isapk128v20 1851.59 1854.45 1855.48 T:isapxv20 5931.36 5940.51 5969.55 T:elephant176v2 7900.12 7925.54 7964.16 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.30 5.33 5.44 T:aes128gcmv1 5.70 5.73 5.81 aes256gcmv1 8.86 9.11 9.11 ascon128av12 10.59 10.59 10.59 ascon80pqv12 10.64 10.64 10.64 ascon128v12 16.68 16.80 16.85 T:xoodyakround3 19.46 19.46 19.48 ascon128abi32v12 26.95 26.95 27.35 ascon128bi32v12 31.12 31.27 31.59 T:schwaemm256128v2 31.56 32.23 32.51 T:grain128aeadv2 36.45 36.48 36.66 romulusn 37.45 38.01 38.27 T:schwaemm128128v2 38.67 39.11 39.48 T:schwaemm256256v2 40.17 40.34 40.93 T:schwaemm192192v2 45.62 45.64 45.68 T:giftcofb128v1 48.41 48.56 48.88 romulusm 51.65 51.73 52.70 T:isapa128av20 54.98 54.99 54.99 T:tinyjambu128v2 58.58 58.70 58.76 T:tinyjambu256v2 58.75 58.77 58.86 T:tinyjambu192v2 71.05 71.27 71.87 romulust 112.60 112.65 113.30 T:isapk128av20 135.66 136.09 136.22 T:elephant200v2 147.97 147.99 148.70 T:isapa128v20 544.39 544.50 545.23 T:isapk128v20 965.23 968.04 972.39 T:isapxv20 5964.67 5992.59 6003.13 T:elephant176v2 7909.52 7921.34 7931.19 T:elephant160v2

aarch64; Firestorm (610f0230); 2020 Apple M1; 4 x 3200MHz; unstable; minimac, supercop-20211108

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 5.69? 6.32? 13.61? ascon128av12 8.61? 9.44? 24.03? ascon80pqv12 8.68? 9.51? 23.61? ascon128v12 9.51? 10.83? 27.57? T:xoodyakv1 10.55? 11.88? 30.55? T:knot128v2 15.97? 19.86? 36.94? T:schwaemm256128v1 18.33? 20.00? 42.91? T:saeaes128a120t64v1 18.40? 20.00? 42.98? T:saeaes128a64t64v1 18.40? 20.07? 42.91? T:saeaes128a64t128v1 18.47? 20.62? 33.68? T:gimli24v1 15.90? 20.83? 37.08? T:saeaes128a120t128v1 19.79? 21.60? 31.32? T:knot128v1 16.67? 23.05? 43.12? T:schwaemm256256v1 21.67? 23.54? 43.54? T:saeaes192a64t128v1 21.87? 23.54? 50.42? T:saeaes192a120t128v1 20.14? 23.61? 43.61? T:saeaes192a64t64v1 22.99? 25.83? 33.96? T:comet128aesv1 24.30? 26.80? 50.00? T:schwaemm192192v1 24.65? 26.87? 49.65? T:saeaes256a120t128v1 25.00? 26.87? 49.72? T:saeaes256a64t128v1 25.00? 26.94? 38.82? T:saeaes256a64t64v1 23.61? 27.50? 52.08? T:saturninctrcascadev2 23.82? 28.47? 47.36? T:isapa128av20 26.67? 30.21? 39.79? T:grain128aead 26.53? 32.78? 52.64? T:knot256 29.51? 33.61? 44.37? T:knot192 33.33 33.82 34.10 T:photonbeetleaead128rate128v1 22.43? 35.83? 37.71? T:isapa128v20 34.58? 37.92? 54.86? T:schwaemm128128v1 35.76? 39.10? 56.67? T:drygascon128k16 35.83? 39.16? 56.67? T:drygascon128k56 35.83? 39.23? 56.60? T:drygascon128k32 33.19? 39.72? 57.85? T:giftcofb128v1 41.32? 45.76? 52.01? T:drygascon256k32 43.89? 47.64? 62.77? T:tinyjambu128 43.61? 48.12? 50.14? T:spook128mu512v1 43.61? 48.19? 50.14? T:spook128su384v1 42.57? 48.26? 50.14? T:spook128su512v1 42.64? 48.26? 50.14? T:spook128mu384v1 44.23? 48.75? 54.58? T:sestatetweaes128v1 40.97? 49.16? 50.97? T:isapk128av20 48.47? 53.40? 69.23? T:tinyjambu192 39.93? 54.58? 66.46? T:subterraneanv1 51.80? 58.05? 60.34? T:estatetweaes128v1 48.19? 58.61? 70.62? T:tinyjambu256 52.98? 59.30? 61.39? T:mixfeed 61.11 63.75 63.89 T:isapk128v20 71.25? 80.07? 81.80? T:comet128chamv1 75.48? 85.69? 86.04? T:elephant200v1 89.72? 98.19? 101.94? T:comet64chamv1 92.91 101.73 101.87 T:comet64speckv1 98.12 103.95 104.23 T:skinnyaeadtk3128128v1 126.66 127.49 127.91 T:photonbeetleaead128rate32v1 133.47 142.70 142.84 T:romulusn1v1 145.97? 163.95? 164.37? T:skinnyaeadtk29664v1 139.16? 164.02? 164.44? T:skinnyaeadtk296128v1 190.20? 213.60? 214.51? T:skinnyaeadtk39664v1 195.96? 213.74? 218.05? T:skinnyaeadtk312864v1 196.24 214.02 214.23 T:skinnyaeadtk396128v1 205.69 219.30 219.99 T:romulusn3v1 212.98 232.00 232.21 T:pyjamask128aeadv1 230.82 241.31 242.00 T:romulusm1v1 220.82? 246.31? 246.45? T:pyjamask96aeadv1 298.67 315.89 320.26 T:saefforkskinnyb128t192n56v1 293.88 317.49 321.86 T:saefforkskinnyb128t256n120v1 294.16 317.56 317.70 T:paefforkskinnyb128t256n112v1 300.13 317.70 321.86 T:paefforkskinnyb128t192n48v1 314.02 324.22 324.64 T:romulusn2v1 311.31 328.04 330.33 T:wageae128v1 333.11 348.67 353.18 T:romulusm3v1 349.01 361.93 362.14 T:spoc128sliscplight256v1 342.56 373.80 373.94 T:sundaegift128v1 342.69 373.87 378.32 T:sundaegift64v1 342.83 373.87 378.39 T:sundaegift96v1 344.57 373.87 378.39 T:sundaegift0v1 373.11 381.51 383.39 T:spix128v1 431.09 456.30 461.16 T:paefforkskinnyb128t288n104v1 510.74 521.99 524.08 T:romulusm2v1 552.41 589.21 594.70 T:spoc64sliscplight192v1 581.92 593.17 596.16 T:hyenav1 807.75 825.18 830.31 T:paefforkskinnyb64t192n48v1 918.85 921.35 925.80 T:orangezestv1 961.91 964.20 968.30 T:aceae128v1 959.41 986.07 988.57 T:oribatida192v11 1217.73 1222.52 1227.38 T:estatetwegift128v1 1292.45 1309.53 1312.17 T:oribatida256v11 1497.30 1498.90 1503.00 T:twegift64locusaeadv1 1509.94 1511.40 1515.50 T:twegift64lotusaeadv1 3253.69 3256.19 3261.40 T:elephant176v1 3414.73 3430.07 3440.49 T:elephant160v1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 5.56? 6.18? 13.40? ascon128av12 8.54? 9.37? 23.54? ascon80pqv12 8.68? 9.44? 23.61? ascon128v12 9.58? 10.83? 27.85? T:xoodyakv1 10.56? 11.94? 30.69? T:knot128v2 17.22? 18.82? 40.35? T:saeaes128a120t64v1 14.79? 18.82? 34.79? T:saeaes128a120t128v1 17.29? 18.82? 34.79? T:saeaes128a64t64v1 17.29? 19.03? 34.79? T:saeaes128a64t128v1 16.04? 19.93? 36.94? T:schwaemm256128v1 18.33? 20.62? 33.47? T:gimli24v1 19.72? 21.94? 31.32? T:knot128v1 20.62? 22.29? 47.71? T:saeaes192a120t128v1 18.96? 22.36? 41.25? T:saeaes192a64t64v1 20.48? 22.36? 41.25? T:saeaes192a64t128v1 16.60? 23.05? 43.19? T:schwaemm256256v1 23.75? 25.62? 47.64? T:saeaes256a64t128v1 23.47? 25.69? 47.57? T:saeaes256a120t128v1 23.75? 25.69? 37.22? T:saeaes256a64t64v1 23.75? 26.32? 34.37? T:comet128aesv1 24.30? 26.87? 50.07? T:schwaemm192192v1 23.96? 27.71? 51.53? T:saturninctrcascadev2 23.89? 28.54? 47.43? T:isapa128av20 26.04? 32.64? 51.66? T:knot256 29.51? 33.54? 44.16? T:knot192 30.21? 34.10? 34.51? T:photonbeetleaead128rate128v1 31.73? 35.62? 46.73? T:grain128aead 22.29? 35.90? 38.19? T:isapa128v20 34.86? 38.19? 55.34? T:schwaemm128128v1 33.19? 39.86? 57.85? T:giftcofb128v1 37.01? 40.35? 58.33? T:drygascon128k32 36.94? 40.35? 58.40? T:drygascon128k16 36.94? 40.42? 58.33? T:drygascon128k56 42.64? 47.01? 49.03? T:spook128mu512v1 41.67? 47.08? 49.03? T:spook128su512v1 41.53? 47.15? 49.03? T:spook128mu384v1 42.64? 47.15? 49.03? T:spook128su384v1 43.89? 47.64? 62.71? T:tinyjambu128 44.17? 48.47? 54.72? T:sestatetweaes128v1 40.97? 48.96? 51.11? T:isapk128av20 44.58? 49.58? 55.90? T:drygascon256k32 48.68? 52.91? 69.44? T:tinyjambu192 39.86? 54.93? 66.39? T:subterraneanv1 51.80? 58.68? 60.41? T:estatetweaes128v1 48.54? 59.16? 70.97? T:tinyjambu256 52.71? 59.65? 61.60? T:mixfeed 60.97 63.61 63.82 T:isapk128v20 75.41 80.34 82.43 T:skinnyaeadtk3128128v1 72.01? 81.59? 82.91? T:comet128chamv1 74.79? 84.72? 85.62? T:elephant200v1 90.69 99.51 100.55 T:comet64chamv1 93.61 102.57 102.98 T:comet64speckv1 127.36 128.19 128.68 T:photonbeetleaead128rate32v1 133.40 142.63 142.77 T:romulusn1v1 206.80 220.69 221.03 T:romulusn3v1 215.41 234.78 239.23 T:pyjamask128aeadv1 230.68 241.59 242.70 T:romulusm1v1 220.13? 245.55? 250.27? T:pyjamask96aeadv1 228.74? 268.95? 270.75? T:skinnyaeadtk296128v1 240.55? 271.10? 274.09? T:skinnyaeadtk29664v1 315.13 325.33 325.89 T:romulusn2v1 310.96 328.53 330.61 T:wageae128v1 311.31? 347.97? 352.49? T:skinnyaeadtk39664v1 320.47 348.53 352.28 T:skinnyaeadtk312864v1 320.54 348.67 352.00 T:skinnyaeadtk396128v1 331.24 349.85 350.13 T:romulusm3v1 349.50 363.46 364.08 T:spoc128sliscplight256v1 344.50 373.74 378.32 T:sundaegift0v1 350.68 373.74 379.36 T:sundaegift64v1 342.70 373.80 378.11 T:sundaegift96v1 342.63 373.87 378.46 T:sundaegift128v1 373.53 382.07 387.90 T:spix128v1 512.20 523.94 525.74 T:romulusm2v1 551.85 588.45 594.07 T:spoc64sliscplight192v1 598.38 610.32 616.23 T:hyenav1 617.75 653.73 658.59 T:saefforkskinnyb128t192n56v1 604.63 654.00 657.96 T:paefforkskinnyb128t256n112v1 604.28 654.21 657.54 T:saefforkskinnyb128t256n120v1 617.06 654.28 658.86 T:paefforkskinnyb128t192n48v1 787.47 837.40 874.62 T:paefforkskinnyb128t288n104v1 918.64 920.87 925.31 T:orangezestv1 962.18 964.34 968.57 T:aceae128v1 975.59 1002.53 1005.31 T:oribatida192v11 1230.92 1239.12 1243.84 T:estatetwegift128v1 1291.41 1309.53 1311.75 T:oribatida256v11 1440.98 1442.58 1446.47 T:twegift64locusaeadv1 1457.44 1488.34 1494.39 T:paefforkskinnyb64t192n48v1 1509.25 1511.12 1515.57 T:twegift64lotusaeadv1 3250.57 3253.90 3260.98 T:elephant176v1 3413.13 3434.17 3447.99 T:elephant160v1

Cycles/byte for long+0 forgery 25% 50% 75% aead 5.62? 6.25? 13.47? ascon128av12 8.54? 9.37? 23.54? ascon80pqv12 8.68? 9.44? 23.54? ascon128v12 9.58? 10.83? 27.85? T:xoodyakv1 10.56? 11.94? 30.62? T:knot128v2 11.11? 18.89? 19.37? T:isapa128v20 16.18? 19.17? 31.46? T:isapa128av20 18.19? 19.79? 36.80? T:saeaes128a64t64v1 15.62? 19.86? 36.73? T:saeaes128a120t128v1 18.26? 19.86? 36.87? T:saeaes128a64t128v1 18.19? 20.00? 42.57? T:saeaes128a120t64v1 18.40? 20.62? 33.47? T:gimli24v1 17.01? 20.97? 38.96? T:schwaemm256128v1 19.79? 21.94? 31.18? T:knot128v1 21.53? 23.33? 50.00? T:saeaes192a120t128v1 19.86? 23.40? 43.19? T:saeaes192a64t64v1 21.39? 23.40? 43.12? T:saeaes192a64t128v1 17.57? 24.17? 44.86? T:schwaemm256256v1 23.89? 26.32? 34.51? T:comet128aesv1 24.44? 26.73? 43.40? T:saeaes256a120t128v1 24.65? 26.73? 38.68? T:saeaes256a64t64v1 24.72? 26.74? 49.37? T:saeaes256a64t128v1 23.96? 27.71? 51.60? T:saturninctrcascadev2 25.35? 27.98? 52.22? T:schwaemm192192v1 25.97? 31.53? 51.53? T:knot256 28.19? 32.92? 34.44? T:isapk128av20 29.51? 33.54? 44.23? T:knot192 32.98 33.96 34.23 T:photonbeetleaead128rate128v1 32.22? 35.69? 46.80? T:grain128aead 38.26 38.89 42.08 T:isapk128v20 35.62? 39.23? 56.66? T:schwaemm128128v1 33.19? 39.86? 57.98? T:giftcofb128v1 36.94? 40.35? 58.33? T:drygascon128k32 36.94? 40.35? 58.40? T:drygascon128k56 36.94? 40.42? 58.40? T:drygascon128k16 42.64? 47.01? 49.03? T:spook128su384v1 42.57? 47.15? 49.03? T:spook128mu512v1 41.67? 47.15? 49.03? T:spook128su512v1 41.67? 47.29? 49.03? T:spook128mu384v1 44.09? 47.91? 62.91? T:tinyjambu128 44.23? 48.47? 54.79? T:sestatetweaes128v1 44.93? 49.93? 56.11? T:drygascon256k32 48.82? 54.65? 69.44? T:tinyjambu192 39.93? 55.00? 66.46? T:subterraneanv1 51.80? 58.89? 60.55? T:estatetweaes128v1 52.01? 59.09? 70.76? T:tinyjambu256 52.85? 59.51? 61.46? T:mixfeed 75.48 80.41 82.08 T:skinnyaeadtk3128128v1 72.08? 82.77? 83.12? T:comet128chamv1 74.23? 84.72? 85.83? T:elephant200v1 90.69 99.44 100.69 T:comet64chamv1 93.61 102.57 103.82 T:comet64speckv1 127.84 128.26 128.75 T:photonbeetleaead128rate32v1 133.54 142.63 142.84 T:romulusn1v1 206.59 220.41 220.89 T:romulusn3v1 215.27 234.43 238.81 T:pyjamask128aeadv1 230.75 241.59 246.10 T:romulusm1v1 220.06? 245.55? 245.75? T:pyjamask96aeadv1 231.10? 270.41? 274.57? T:skinnyaeadtk296128v1 241.45? 271.17? 272.98? T:skinnyaeadtk29664v1 306.86 311.03 312.14 T:wageae128v1 315.20 325.33 329.99 T:romulusn2v1 331.38 346.51 349.57 T:romulusm3v1 320.06 347.97 352.69 T:skinnyaeadtk39664v1 320.68 348.74 352.21 T:skinnyaeadtk312864v1 320.82 348.88 350.40 T:skinnyaeadtk396128v1 348.60 360.19 360.82 T:spoc128sliscplight256v1 342.63 373.74 373.94 T:sundaegift128v1 342.69 373.74 374.01 T:sundaegift96v1 344.43 373.74 373.94 T:sundaegift0v1 350.68 373.80 374.15 T:sundaegift64v1 374.22 382.28 388.80 T:spix128v1 512.20 523.73 530.05 T:romulusm2v1 561.51 588.31 592.62 T:spoc64sliscplight192v1 597.96 609.21 611.85 T:hyenav1 604.42 652.75 658.93 T:paefforkskinnyb128t256n112v1 617.82 653.38 658.10 T:saefforkskinnyb128t192n56v1 616.64 653.65 656.78 T:saefforkskinnyb128t256n120v1 616.99 654.00 658.24 T:paefforkskinnyb128t192n48v1 787.26 833.65 838.79 T:paefforkskinnyb128t288n104v1 918.78 921.08 925.66 T:orangezestv1 962.39 965.52 969.75 T:aceae128v1 976.00 1000.38 1006.21 T:oribatida192v11 1236.90 1240.09 1246.13 T:estatetwegift128v1 1291.55 1309.12 1313.91 T:oribatida256v11 1441.05 1446.05 1447.44 T:twegift64locusaeadv1 1457.65 1492.72 1508.41 T:paefforkskinnyb64t192n48v1 1509.25 1511.54 1516.40 T:twegift64lotusaeadv1 3253.69 3257.44 3261.68 T:elephant176v1 3412.99 3429.94 3450.07 T:elephant160v1

Cycles/byte for long+long encrypt 25% 50% 75% aead 5.66 6.25 6.25 ascon128av12 7.67 8.30 8.33 T:xoodyakv1 8.65 9.31 9.37 ascon80pqv12 8.78 9.34 9.41 ascon128v12 10.80 11.84 11.94 T:knot128v2 14.20 15.07 15.49 T:saeaes128a120t128v1 14.17 15.14 15.42 T:saeaes128a120t64v1 16.63 17.43 18.09 T:saeaes192a120t128v1 18.51 19.06 19.76 T:schwaemm256128v1 18.75 19.13 19.83 T:saeaes128a64t128v1 18.54 19.20 19.86 T:saeaes128a64t64v1 19.48 19.83 20.49 T:gimli24v1 19.44 19.93 20.59 T:saeaes256a120t128v1 20.62 20.83 21.56 T:knot128v1 21.70 22.15 22.95 T:schwaemm256256v1 22.01 22.53 23.33 T:saeaes192a64t128v1 22.01 22.60 23.40 T:saeaes192a64t64v1 22.33 22.92 23.71 T:isapa128av20 23.30 23.40 24.17 T:comet128aesv1 24.93 25.69 26.70 T:saeaes256a64t64v1 25.17 25.73 26.74 T:saeaes256a64t128v1 25.31 25.80 26.74 T:schwaemm192192v1 25.80 26.11 27.12 T:saturninctrcascadev2 26.94 27.12 28.26 T:isapa128v20 28.26 28.30 29.34 T:grain128aead 30.69 30.90 31.84 T:knot256 32.05 32.15 33.05 T:tinyjambu128 32.33 32.36 33.23 T:knot192 32.19 33.26 33.64 T:photonbeetleaead128rate128v1 32.88 33.78 34.44 T:sestatetweaes128v1 34.48 34.65 35.87 T:tinyjambu192 36.42 36.67 37.29 T:schwaemm128128v1 37.36 37.39 38.12 T:tinyjambu256 37.64 37.64 38.33 T:drygascon128k16 37.60 37.67 38.37 T:drygascon128k56 37.64 37.74 38.40 T:drygascon128k32 38.61 38.71 39.41 T:giftcofb128v1 39.27 39.41 40.21 T:isapk128av20 42.12 42.22 42.78 T:estatetweaes128v1 44.23 44.51 44.93 T:drygascon256k32 46.42 46.46 46.53 T:spook128mu512v1 46.42 46.46 46.53 T:spook128mu384v1 46.42 46.49 46.53 T:spook128su512v1 46.46 46.53 46.80 T:spook128su384v1 48.82 48.85 49.03 T:subterraneanv1 50.38 51.66 51.80 T:isapk128v20 57.01 57.15 57.25 T:mixfeed 62.12 62.39 62.50 T:elephant200v1 78.82 78.89 78.89 T:comet128chamv1 98.36 98.50 98.61 T:comet64chamv1 103.16 103.36 103.47 T:comet64speckv1 103.61 103.82 103.92 T:skinnyaeadtk3128128v1 120.76 120.90 121.18 T:romulusn1v1 127.01 131.07 132.43 T:photonbeetleaead128rate32v1 163.88 164.19 164.58 T:skinnyaeadtk29664v1 163.92 164.23 166.80 T:skinnyaeadtk296128v1 170.17 170.44 171.42 T:romulusm1v1 172.15 173.67 174.02 T:romulusn3v1 213.71 214.02 216.69 T:skinnyaeadtk312864v1 213.78 214.40 216.42 T:skinnyaeadtk39664v1 214.05 214.71 216.59 T:skinnyaeadtk396128v1 232.73 233.67 234.05 T:pyjamask128aeadv1 238.25 238.53 239.30 T:romulusm3v1 244.37 245.72 247.56 T:pyjamask96aeadv1 255.96 256.52 259.23 T:romulusn2v1 258.91 259.02 261.73 T:saefforkskinnyb128t192n56v1 259.02 259.26 261.90 T:paefforkskinnyb128t192n48v1 259.05 259.75 261.93 T:paefforkskinnyb128t256n112v1 259.43 259.78 262.45 T:saefforkskinnyb128t256n120v1 280.34 281.13 283.43 T:sundaegift64v1 280.30 281.20 281.31 T:sundaegift128v1 280.30 281.34 283.46 T:sundaegift0v1 280.41 281.34 283.46 T:sundaegift96v1 310.99 329.43 330.72 T:wageae128v1 357.17 358.08 360.33 T:romulusm2v1 361.55 362.52 364.74 T:spoc128sliscplight256v1 374.57 375.89 377.49 T:paefforkskinnyb128t288n104v1 385.68 388.80 389.26 T:spix128v1 589.70 592.48 594.46 T:spoc64sliscplight192v1 592.55 594.11 595.32 T:hyenav1 667.61 676.81 678.03 T:paefforkskinnyb64t192n48v1 736.50 738.03 739.24 T:oribatida192v11 917.05 919.20 920.24 T:estatetwegift128v1 920.83 922.85 923.16 T:orangezestv1 962.05 963.89 966.14 T:aceae128v1 980.34 980.97 983.64 T:oribatida256v11 1116.73 1120.75 1139.47 T:twegift64lotusaeadv1 1128.08 1129.12 1130.16 T:twegift64locusaeadv1 2428.52 2431.47 2433.97 T:elephant176v1 2567.85 2573.79 2580.56 T:elephant160v1

Cycles/byte for long+long decrypt 25% 50% 75% aead 5.62 6.18 6.21 ascon128av12 7.67 8.33 8.40 T:xoodyakv1 8.75 9.37 9.58 ascon128v12 8.78 9.37 9.58 ascon80pqv12 10.97 11.98 12.12 T:knot128v2 13.61 14.72 14.96 T:saeaes128a120t64v1 13.61 14.72 15.03 T:saeaes128a120t128v1 16.08 17.12 17.50 T:saeaes192a120t128v1 17.99 18.61 19.48 T:saeaes128a64t64v1 18.19 18.65 19.55 T:saeaes128a64t128v1 18.54 19.17 19.93 T:schwaemm256128v1 18.89 19.37 20.21 T:saeaes256a120t128v1 19.41 19.72 20.59 T:gimli24v1 20.59 20.83 21.63 T:knot128v1 21.39 21.91 22.71 T:saeaes192a64t128v1 21.42 21.94 22.74 T:saeaes192a64t64v1 21.80 22.22 22.88 T:schwaemm256256v1 22.33 22.92 23.68 T:isapa128av20 23.37 23.51 24.37 T:comet128aesv1 24.62 25.14 26.01 T:saeaes256a64t128v1 24.37 25.14 26.04 T:saeaes256a64t64v1 25.38 25.87 26.91 T:schwaemm192192v1 25.76 26.08 27.05 T:saturninctrcascadev2 26.91 27.15 28.33 T:isapa128v20 30.31 30.38 31.73 T:knot256 30.76 30.83 32.15 T:grain128aead 32.12 32.22 33.37 T:tinyjambu128 32.29 32.33 33.58 T:knot192 32.43 33.68 33.92 T:photonbeetleaead128rate128v1 33.05 34.13 34.27 T:sestatetweaes128v1 34.44 34.58 35.80 T:tinyjambu192 36.53 36.66 37.64 T:schwaemm128128v1 37.43 37.50 38.71 T:tinyjambu256 38.19 38.23 39.27 T:drygascon128k32 38.19 38.23 39.23 T:drygascon128k56 38.16 38.26 39.17 T:drygascon128k16 38.58 38.68 39.65 T:giftcofb128v1 39.30 39.37 40.35 T:isapk128av20 42.22 42.26 43.05 T:estatetweaes128v1 45.94 45.97 46.66 T:spook128mu384v1 45.94 45.97 46.70 T:spook128su384v1 45.94 45.97 46.63 T:spook128su512v1 45.94 45.97 46.63 T:spook128mu512v1 46.07 46.25 46.80 T:drygascon256k32 48.89 49.03 49.51 T:subterraneanv1 50.21 51.60 51.77 T:isapk128v20 57.01 57.15 57.25 T:mixfeed 61.73 61.91 63.99 T:elephant200v1 79.89 79.96 80.17 T:comet128chamv1 92.50 92.57 92.67 T:skinnyaeadtk3128128v1 98.68 98.99 99.68 T:comet64chamv1 103.71 103.85 103.99 T:comet64speckv1 120.69 120.86 121.14 T:romulusn1v1 127.56 130.27 132.15 T:photonbeetleaead128rate32v1 170.20 170.69 171.24 T:romulusm1v1 172.63 172.98 174.58 T:romulusn3v1 215.76 216.59 218.08 T:skinnyaeadtk29664v1 215.76 217.11 218.57 T:skinnyaeadtk296128v1 234.12 235.23 235.79 T:pyjamask128aeadv1 238.71 239.02 239.71 T:romulusm3v1 243.81 244.71 245.09 T:pyjamask96aeadv1 256.76 256.93 259.64 T:romulusn2v1 280.20 281.20 283.43 T:sundaegift64v1 280.30 281.20 283.57 T:sundaegift96v1 280.23 281.27 283.53 T:sundaegift128v1 280.27 281.38 283.53 T:sundaegift0v1 281.41 282.21 284.29 T:skinnyaeadtk39664v1 281.27 282.42 284.57 T:skinnyaeadtk312864v1 283.57 285.09 286.76 T:skinnyaeadtk396128v1 311.59 329.36 330.61 T:wageae128v1 357.97 358.88 361.03 T:romulusm2v1 363.08 364.26 364.99 T:spoc128sliscplight256v1 385.89 388.84 389.32 T:spix128v1 426.75 427.76 430.19 T:saefforkskinnyb128t256n120v1 426.58 428.00 430.85 T:paefforkskinnyb128t192n48v1 427.21 428.39 432.76 T:saefforkskinnyb128t192n56v1 427.76 428.84 430.30 T:paefforkskinnyb128t256n112v1 563.62 565.92 567.41 T:paefforkskinnyb128t288n104v1 589.80 591.78 593.24 T:spoc64sliscplight192v1 607.86 609.63 611.85 T:hyenav1 743.06 747.02 748.30 T:oribatida192v11 920.62 920.73 923.05 T:orangezestv1 933.51 936.73 938.16 T:estatetwegift128v1 961.80 963.99 966.28 T:aceae128v1 979.68 980.52 981.28 T:oribatida256v11 1007.74 1010.79 1012.39 T:paefforkskinnyb64t192n48v1 1100.13 1100.86 1101.66 T:twegift64locusaeadv1 1118.74 1121.03 1165.44 T:twegift64lotusaeadv1 2429.35 2434.94 2449.35 T:elephant176v1 2557.30 2568.09 2574.41 T:elephant160v1

Cycles/byte for long+long forgery 25% 50% 75% aead 5.66? 6.21? 6.39? ascon128av12 7.71 8.33 8.40 T:xoodyakv1 8.78 9.34 9.62 ascon128v12 8.78 9.37 9.58 ascon80pqv12 10.94 11.98 12.12 T:knot128v2 14.10 15.21 15.42 T:saeaes128a120t64v1 14.06 15.28 15.45 T:saeaes128a120t128v1 16.56 17.43 18.12 T:saeaes192a120t128v1 18.09 18.19 19.03 T:isapa128v20 17.92 18.33 19.20 T:isapa128av20 18.68 19.10 20.00 T:saeaes128a64t128v1 18.44 19.13 19.83 T:saeaes128a64t64v1 19.41 19.76 20.66 T:gimli24v1 19.34 19.79 20.73 T:saeaes256a120t128v1 19.10 19.83 20.49 T:schwaemm256128v1 20.66 20.87 21.63 T:knot128v1 21.87 22.36 23.19 T:saeaes192a64t128v1 21.91 22.50 23.26 T:saeaes192a64t64v1 22.19 22.74 23.40 T:schwaemm256256v1 23.33 23.51 24.24 T:comet128aesv1 24.83 25.59 26.67 T:saeaes256a64t64v1 25.07 25.62 26.56 T:saeaes256a64t128v1 25.73 26.08 26.98 T:saturninctrcascadev2 25.87 26.46 27.46 T:schwaemm192192v1 30.28 30.42 31.67 T:knot256 30.80 30.87 32.15 T:grain128aead 31.63 31.77 32.95 T:isapk128av20 32.08 32.12 33.26 T:tinyjambu128 32.29 32.36 33.51 T:knot192 32.29 33.37 33.75 T:photonbeetleaead128rate128v1 33.02 34.17 34.30 T:sestatetweaes128v1 34.58 34.69 35.69 T:tinyjambu192 37.01 37.12 38.23 T:schwaemm128128v1 37.33 37.39 38.40 T:tinyjambu256 38.19 38.19 39.23 T:drygascon128k16 38.19 38.19 39.13 T:drygascon128k32 38.19 38.26 39.17 T:drygascon128k56 38.58 38.61 39.62 T:giftcofb128v1 38.99 39.20 40.03 T:isapk128v20 42.29 42.36 43.30 T:estatetweaes128v1 45.90 45.97 46.66 T:spook128su512v1 45.94 45.97 46.63 T:spook128su384v1 45.94 45.97 46.70 T:spook128mu384v1 45.97 45.97 46.63 T:spook128mu512v1 46.04 46.39 46.70 T:drygascon256k32 48.85 48.96 49.58 T:subterraneanv1 57.08 57.22 57.32 T:mixfeed 61.70 61.77 62.01 T:elephant200v1 79.86 79.93 80.03 T:comet128chamv1 92.36 92.57 93.05 T:skinnyaeadtk3128128v1 98.82 98.89 98.99 T:comet64chamv1 102.22 103.64 103.85 T:comet64speckv1 120.69 120.97 121.11 T:romulusn1v1 126.45 127.04 128.54 T:photonbeetleaead128rate32v1 170.41 170.86 172.94 T:romulusm1v1 173.85 174.19 174.61 T:romulusn3v1 215.51 216.31 218.19 T:skinnyaeadtk296128v1 216.35 217.63 220.23 T:skinnyaeadtk29664v1 233.98 235.27 237.00 T:pyjamask128aeadv1 238.74 239.16 239.44 T:romulusm3v1 243.78 244.75 246.93 T:pyjamask96aeadv1 256.76 256.93 259.68 T:romulusn2v1 280.13 281.03 283.32 T:sundaegift64v1 280.23 281.17 284.09 T:sundaegift0v1 280.20 281.20 283.50 T:sundaegift96v1 280.20 281.31 283.43 T:sundaegift128v1 281.13 282.25 284.50 T:skinnyaeadtk312864v1 281.55 282.32 283.77 T:skinnyaeadtk39664v1 283.98 285.30 286.90 T:skinnyaeadtk396128v1 310.23 312.42 313.63 T:wageae128v1 358.01 358.84 358.91 T:romulusm2v1 360.12 361.17 363.49 T:spoc128sliscplight256v1 386.03 390.16 391.10 T:spix128v1 427.55 427.97 430.12 T:paefforkskinnyb128t256n112v1 426.51 427.97 429.91 T:paefforkskinnyb128t192n48v1 426.96 428.00 431.51 T:saefforkskinnyb128t256n120v1 427.00 428.00 430.33 T:saefforkskinnyb128t192n56v1 564.14 567.17 569.70 T:paefforkskinnyb128t288n104v1 590.32 591.68 593.69 T:spoc64sliscplight192v1 606.19 609.00 613.55 T:hyenav1 744.35 747.16 748.83 T:oribatida192v11 920.59 922.92 923.19 T:orangezestv1 935.31 937.46 939.72 T:estatetwegift128v1 961.49 965.00 967.43 T:aceae128v1 979.96 980.31 981.28 T:oribatida256v11 1009.89 1011.31 1013.88 T:paefforkskinnyb64t192n48v1 1099.92 1100.55 1101.21 T:twegift64locusaeadv1 1116.90 1120.44 1138.78 T:twegift64lotusaeadv1 2431.99 2439.14 2462.09 T:elephant176v1 2567.68 2572.99 2586.84 T:elephant160v1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 5.00? 5.83? 12.85? T:xoodyakv1 5.49? 6.18? 13.33? ascon128av12 8.19? 9.37? 17.43? ascon80pqv12 8.26? 9.44? 20.14? ascon128v12 10.00? 10.76? 17.57? T:saeaes128a120t128v1 10.00? 10.83? 17.50? T:saeaes128a120t64v1 10.28? 11.87? 19.65? T:knot128v2 11.67? 12.64? 20.49? T:saeaes192a120t128v1 13.61? 14.93? 19.03? T:saeaes256a120t128v1 18.05 18.96 19.17 T:isapa128v20 18.82 18.96 18.96 T:tinyjambu256 17.57? 19.30? 25.49? T:isapa128av20 18.54? 19.37? 21.39? T:tinyjambu128 18.68? 19.37? 21.46? T:tinyjambu192 19.65 19.93 20.07 T:sestatetweaes128v1 18.61? 20.00? 28.47? T:saeaes128a64t128v1 18.26? 20.07? 28.75? T:schwaemm256128v1 18.54? 20.42? 28.47? T:saeaes128a64t64v1 19.65? 20.76? 24.86? T:gimli24v1 20.83? 21.94? 24.30? T:knot128v1 21.73 22.78 23.12 T:comet128aesv1 21.53? 23.12? 30.21? T:schwaemm256256v1 21.67? 23.12? 30.42? T:saeaes192a64t128v1 21.67? 23.12? 30.42? T:saeaes192a64t64v1 24.79? 26.60? 34.93? T:saeaes256a64t128v1 25.00? 26.80? 43.12? T:saeaes256a64t64v1 23.61? 27.08? 32.57? T:saturninctrcascadev2 24.30? 27.08? 35.42? T:schwaemm192192v1 26.81 28.40 28.82 T:grain128aead 28.33 29.37 29.79 T:estatetweaes128v1 31.39 31.53 33.33 T:isapk128av20 30.14? 32.01? 36.18? T:knot256 31.46 33.12 33.61 T:knot192 32.43 33.12 33.61 T:photonbeetleaead128rate128v1 35.14? 38.05? 39.37? T:schwaemm128128v1 37.92 38.47 41.60 T:isapk128v20 36.39 38.89 39.10 T:drygascon128k56 36.46 38.96 39.03 T:drygascon128k16 36.80 38.96 39.10 T:drygascon128k32 37.78 40.42 40.69 T:giftcofb128v1 41.39 42.91 43.96 T:elephant200v1 43.75 44.30 45.83 T:drygascon256k32 44.51 45.55 46.94 T:subterraneanv1 46.46 46.46 47.92 T:spook128mu512v1 46.46 46.46 48.19 T:spook128su512v1 46.32 46.53 48.19 T:spook128su384v1 46.46 46.53 48.26 T:spook128mu384v1 56.94 57.15 59.58 T:mixfeed 78.47 78.61 80.69 T:comet128chamv1 98.05 98.47 99.16 T:comet64chamv1 98.95 99.09 99.79 T:romulusm1v1 98.95 99.44 99.72 T:romulusn1v1 103.61 103.95 104.30 T:skinnyaeadtk3128128v1 104.72 105.07 105.27 T:comet64speckv1 126.18 127.43 132.29 T:photonbeetleaead128rate32v1 127.15 127.43 127.50 T:romulusn3v1 127.84 128.05 132.29 T:romulusm3v1 164.23 164.30 164.44 T:skinnyaeadtk296128v1 164.23 164.30 164.44 T:skinnyaeadtk29664v1 186.87 187.08 191.66 T:sundaegift96v1 187.01 187.15 187.28 T:sundaegift64v1 186.80 187.21 187.22 T:sundaegift128v1 187.01 187.22 187.49 T:sundaegift0v1 187.49 187.98 188.05 T:romulusn2v1 191.59 191.73 191.94 T:romulusm2v1 200.41 200.62 201.17 T:paefforkskinnyb128t256n112v1 200.48 200.76 200.96 T:paefforkskinnyb128t192n48v1 201.80 201.94 202.01 T:saefforkskinnyb128t192n56v1 201.87 203.26 205.06 T:saefforkskinnyb128t256n120v1 213.67 214.09 218.46 T:skinnyaeadtk396128v1 213.88 214.30 214.64 T:skinnyaeadtk312864v1 213.88 214.51 214.92 T:skinnyaeadtk39664v1 233.25 233.95 239.02 T:pyjamask128aeadv1 242.00 242.77 243.18 T:pyjamask96aeadv1 292.91 294.57 298.74 T:paefforkskinnyb128t288n104v1 311.65 328.74 329.78 T:wageae128v1 360.61 360.96 362.76 T:spoc128sliscplight256v1 384.85 385.12 391.03 T:spix128v1 487.48 489.15 493.31 T:oribatida192v11 519.42 524.91 526.51 T:paefforkskinnyb64t192n48v1 586.64 592.89 598.52 T:spoc64sliscplight192v1 591.16 594.56 596.02 T:hyenav1 609.91 612.55 614.84 T:estatetwegift128v1 648.03 654.07 654.90 T:oribatida256v11 752.05 755.32 756.08 T:twegift64locusaeadv1 752.82 764.83 766.29 T:twegift64lotusaeadv1 920.24 924.76 927.26 T:orangezestv1 961.70 965.24 968.50 T:aceae128v1 1603.83 1611.67 1614.73 T:elephant176v1 1701.88 1711.60 1718.27 T:elephant160v1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 5.00? 5.83? 12.78? T:xoodyakv1 5.49? 6.18? 13.33? ascon128av12 8.26? 9.38? 20.21? ascon128v12 8.33? 9.44? 17.43? ascon80pqv12 10.00? 10.76? 17.57? T:saeaes128a120t128v1 10.00? 10.83? 17.50? T:saeaes128a120t64v1 10.42? 12.01? 19.86? T:knot128v2 11.67? 12.50? 20.55? T:saeaes192a120t128v1 13.61? 14.37? 18.96? T:saeaes256a120t128v1 18.82 18.96 19.03 T:tinyjambu256 17.99 19.03 19.58 T:isapa128v20 17.57? 19.17? 25.49? T:isapa128av20 18.47? 19.44? 21.32? T:tinyjambu192 18.54? 19.51? 21.39? T:tinyjambu128 19.72 19.86 20.21 T:sestatetweaes128v1 18.54? 20.00? 28.47? T:saeaes128a64t128v1 18.19? 20.07? 28.89? T:schwaemm256128v1 18.96? 20.42? 28.40? T:saeaes128a64t64v1 19.79? 20.69? 24.79? T:gimli24v1 20.83? 21.87? 24.23? T:knot128v1 21.53 22.98 23.12 T:comet128aesv1 21.67? 23.12? 30.42? T:saeaes192a64t128v1 21.67? 23.12? 30.55? T:saeaes192a64t64v1 21.53? 23.26? 30.21? T:schwaemm256256v1 24.86? 26.53? 35.00? T:saeaes256a64t128v1 25.55? 26.60? 43.19? T:saeaes256a64t64v1 24.58? 26.94? 32.43? T:saturninctrcascadev2 24.37? 27.22? 35.42? T:schwaemm192192v1 26.94 28.40 28.96 T:grain128aead 28.33 29.37 29.86 T:estatetweaes128v1 29.72? 31.60? 35.55? T:knot256 31.46 31.87 33.26 T:isapk128av20 31.46 33.26 33.61 T:knot192 32.71 33.33 33.82 T:photonbeetleaead128rate128v1 35.21? 38.19? 39.37? T:schwaemm128128v1 37.98 38.33 41.80 T:isapk128v20 36.39 38.96 39.10 T:drygascon128k16 36.73 38.96 39.10 T:drygascon128k32 36.39 38.96 39.17 T:drygascon128k56 37.78 40.35 40.55 T:giftcofb128v1 41.46 42.98 43.75 T:elephant200v1 43.68 44.58 45.83 T:drygascon256k32 44.51 45.28 47.01 T:subterraneanv1 46.25 46.46 48.19 T:spook128su384v1 46.39 46.46 47.57 T:spook128mu512v1 46.39 46.46 48.19 T:spook128mu384v1 46.39 46.46 48.19 T:spook128su512v1 56.94 57.22 59.79 T:mixfeed 79.72 79.86 81.32 T:comet128chamv1 98.33 98.54 99.58 T:comet64chamv1 98.88 99.02 100.48 T:romulusm1v1 98.95 99.51 100.00 T:romulusn1v1 103.47 103.75 104.23 T:skinnyaeadtk3128128v1 104.86 105.07 105.69 T:comet64speckv1 126.66 127.36 131.38 T:photonbeetleaead128rate32v1 127.36 127.49 127.56 T:romulusn3v1 127.70 127.84 127.91 T:romulusm3v1 164.23 164.30 164.37 T:skinnyaeadtk29664v1 164.30 164.30 164.44 T:skinnyaeadtk296128v1 186.87 187.08 187.49 T:sundaegift96v1 186.87 187.15 187.22 T:sundaegift128v1 186.80 187.22 187.35 T:sundaegift64v1 187.08 187.22 187.49 T:sundaegift0v1 187.42 187.70 187.91 T:romulusn2v1 191.52 191.59 191.73 T:romulusm2v1 200.83 200.89 201.10 T:paefforkskinnyb128t192n48v1 200.83 200.96 201.03 T:paefforkskinnyb128t256n112v1 201.87 201.94 202.14 T:saefforkskinnyb128t192n56v1 201.94 202.01 203.32 T:saefforkskinnyb128t256n120v1 213.39 214.23 214.57 T:skinnyaeadtk312864v1 213.88 214.30 215.06 T:skinnyaeadtk39664v1 217.77 219.09 219.57 T:skinnyaeadtk396128v1 233.12 233.88 234.99 T:pyjamask128aeadv1 242.42 242.77 242.98 T:pyjamask96aeadv1 292.97 293.32 294.85 T:paefforkskinnyb128t288n104v1 307.70 328.95 329.78 T:wageae128v1 362.28 362.62 363.67 T:spoc128sliscplight256v1 384.85 386.51 386.65 T:spix128v1 486.79 488.73 493.11 T:oribatida192v11 522.48 524.63 530.26 T:paefforkskinnyb64t192n48v1 587.20 594.21 598.31 T:spoc64sliscplight192v1 609.49 611.43 612.68 T:hyenav1 626.50 630.05 630.60 T:estatetwegift128v1 647.54 650.18 650.67 T:oribatida256v11 751.64 755.04 765.46 T:twegift64lotusaeadv1 752.12 755.18 756.57 T:twegift64locusaeadv1 922.53 930.52 932.12 T:orangezestv1 961.56 963.78 970.80 T:aceae128v1 1605.63 1607.09 1615.63 T:elephant176v1 1700.00 1706.32 1718.61 T:elephant160v1

Cycles/byte for 0+long forgery 25% 50% 75% aead 5.00? 5.83? 12.78? T:xoodyakv1 5.49? 6.18? 13.26? ascon128av12 8.26? 9.44? 17.36? ascon80pqv12 8.26? 9.44? 20.21? ascon128v12 9.93? 10.76? 17.57? T:saeaes128a120t128v1 9.93? 10.83? 17.50? T:saeaes128a120t64v1 10.49? 12.01? 19.86? T:knot128v2 11.67? 12.57? 20.55? T:saeaes192a120t128v1 13.61? 14.38? 19.03? T:saeaes256a120t128v1 17.99 19.03 19.51 T:isapa128v20 18.82 19.03 19.03 T:tinyjambu256 17.57? 19.37? 25.42? T:isapa128av20 18.47? 19.51? 21.32? T:tinyjambu128 18.75 19.58 19.86 T:tinyjambu192 18.47? 19.72? 28.47? T:saeaes128a64t128v1 18.47? 19.86? 28.40? T:saeaes128a64t64v1 19.79 19.93 20.21 T:sestatetweaes128v1 18.26? 20.00? 28.82? T:schwaemm256128v1 19.79? 20.76? 24.79? T:gimli24v1 20.76? 21.80? 24.30? T:knot128v1 21.87 22.85 23.12 T:comet128aesv1 21.60? 23.05? 30.42? T:saeaes192a64t128v1 21.67? 23.19? 30.42? T:saeaes192a64t64v1 21.46? 23.40? 30.48? T:schwaemm256256v1 24.86? 26.67? 34.93? T:saeaes256a64t128v1 25.55? 26.73? 43.12? T:saeaes256a64t64v1 25.07? 26.74? 35.42? T:schwaemm192192v1 24.03? 27.22? 32.50? T:saturninctrcascadev2 27.08 28.33 28.89 T:grain128aead 28.33 29.23 30.00 T:estatetweaes128v1 29.72? 31.60? 35.55? T:knot256 31.39 32.15 32.92 T:isapk128av20 31.46 33.40 33.61 T:knot192 32.99 33.47 33.75 T:photonbeetleaead128rate128v1 35.28 38.33 39.16 T:schwaemm128128v1 38.05 38.40 41.73 T:isapk128v20 36.32 38.96 39.10 T:drygascon128k16 36.32 38.96 39.10 T:drygascon128k56 36.73 38.96 39.10 T:drygascon128k32 37.78 40.48 40.55 T:giftcofb128v1 41.46 43.05 43.68 T:elephant200v1 43.89 44.51 45.97 T:drygascon256k32 44.51 45.35 46.73 T:subterraneanv1 46.39 46.39 47.71 T:spook128mu512v1 46.39 46.46 48.26 T:spook128mu384v1 46.39 46.46 48.26 T:spook128su512v1 46.39 46.46 48.33 T:spook128su384v1 57.08 57.29 59.58 T:mixfeed 79.72 79.93 81.39 T:comet128chamv1 98.33 98.54 99.65 T:comet64chamv1 99.02 99.16 100.14 T:romulusm1v1 98.95 99.37 103.26 T:romulusn1v1 103.54 103.88 104.72 T:skinnyaeadtk3128128v1 102.98 104.72 105.41 T:comet64speckv1 126.59 126.80 126.87 T:romulusm3v1 127.08 127.36 127.49 T:romulusn3v1 127.01 127.77 132.43 T:photonbeetleaead128rate32v1 164.23 164.30 164.44 T:skinnyaeadtk296128v1 164.30 164.37 164.44 T:skinnyaeadtk29664v1 186.94 187.08 187.22 T:sundaegift96v1 186.80 187.15 187.28 T:sundaegift64v1 186.94 187.15 187.28 T:sundaegift128v1 187.08 187.28 191.59 T:sundaegift0v1 187.63 187.70 187.84 T:romulusn2v1 191.38 191.59 191.73 T:romulusm2v1 200.82 200.89 201.03 T:paefforkskinnyb128t192n48v1 200.83 200.96 201.24 T:paefforkskinnyb128t256n112v1 201.94 202.14 204.64 T:saefforkskinnyb128t256n120v1 201.94 202.21 206.31 T:saefforkskinnyb128t192n56v1 213.33 213.95 216.87 T:skinnyaeadtk312864v1 213.53 214.23 217.28 T:skinnyaeadtk39664v1 218.46 219.51 224.37 T:skinnyaeadtk396128v1 233.19 233.74 234.78 T:pyjamask128aeadv1 242.07 242.63 242.98 T:pyjamask96aeadv1 292.21 293.67 296.45 T:paefforkskinnyb128t288n104v1 308.95 310.27 313.04 T:wageae128v1 359.15 359.50 361.44 T:spoc128sliscplight256v1 386.93 388.18 390.61 T:spix128v1 486.79 488.52 489.43 T:oribatida192v11 524.15 524.91 527.90 T:paefforkskinnyb64t192n48v1 586.92 592.20 596.99 T:spoc64sliscplight192v1 609.49 611.71 613.38 T:hyenav1 624.42 626.43 632.34 T:estatetwegift128v1 647.34 650.18 654.77 T:oribatida256v11 751.43 754.55 765.67 T:twegift64lotusaeadv1 752.19 755.04 756.43 T:twegift64locusaeadv1 923.58 929.27 930.52 T:orangezestv1 961.49 964.68 975.31 T:aceae128v1 1602.65 1608.90 1614.66 T:elephant176v1 1703.75 1709.03 1725.63 T:elephant160v1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 6.34 6.34 6.38 ascon128av12 8.46 8.51 8.51 T:xoodyakv1 9.46 9.50 9.59 ascon128v12 9.50 9.50 9.55 ascon80pqv12 12.28 12.33 12.41 T:knot128v2 15.02 15.49 15.54 T:saeaes128a120t64v1 15.10 15.49 15.54 T:saeaes128a120t128v1 17.58 18.18 18.27 T:saeaes192a120t128v1 19.27 19.92 20.01 T:saeaes128a64t64v1 19.31 19.96 20.01 T:saeaes128a64t128v1 19.66 20.22 20.36 T:schwaemm256128v1 20.14 20.36 20.83 T:saeaes256a120t128v1 20.22 20.62 20.88 T:gimli24v1 21.14 21.66 21.83 T:knot128v1 22.61 22.70 23.48 T:saeaes192a64t128v1 22.66 22.70 23.48 T:saeaes192a64t64v1 22.74 22.87 23.65 T:schwaemm256256v1 23.74 23.87 24.65 T:comet128aesv1 24.43 24.52 25.30 T:isapa128av20 25.95 25.95 26.87 T:saeaes256a64t128v1 25.95 26.00 26.87 T:saeaes256a64t64v1 26.39 26.47 27.30 T:schwaemm192192v1 27.26 27.30 28.21 T:saturninctrcascadev2 28.64 28.73 29.60 T:grain128aead 31.55 31.60 32.59 T:knot256 32.42 32.42 33.51 T:tinyjambu128 32.94 32.98 34.07 T:knot192 33.20 33.38 34.37 T:sestatetweaes128v1 32.68 33.51 34.16 T:photonbeetleaead128rate128v1 34.81 34.89 36.07 T:tinyjambu192 36.93 37.02 38.24 T:schwaemm128128v1 37.67 37.72 39.02 T:tinyjambu256 37.98 38.02 39.28 T:drygascon128k56 37.98 38.06 39.28 T:drygascon128k16 38.02 38.06 39.32 T:drygascon128k32 38.97 39.02 40.32 T:giftcofb128v1 40.06 40.10 41.45 T:isapa128v20 42.53 42.62 43.88 T:estatetweaes128v1 44.01 44.14 45.31 T:isapk128av20 44.75 45.14 46.01 T:drygascon256k32 47.61 47.65 48.65 T:spook128su384v1 47.61 47.65 48.74 T:spook128su512v1 47.61 47.65 48.70 T:spook128mu384v1 47.61 47.70 48.74 T:spook128mu512v1 50.74 50.82 51.73 T:subterraneanv1 58.50 59.07 60.59 T:mixfeed 63.84 64.06 64.45 T:elephant200v1 80.07 80.16 80.21 T:comet128chamv1 87.80 87.97 88.45 T:isapk128v20 99.30 99.39 102.17 T:comet64chamv1 102.90 103.90 104.42 T:comet64speckv1 105.77 105.81 105.99 T:skinnyaeadtk3128128v1 122.26 122.35 122.48 T:romulusn1v1 126.38 126.82 127.25 T:photonbeetleaead128rate32v1 165.44 165.53 165.62 T:skinnyaeadtk296128v1 165.44 165.57 165.71 T:skinnyaeadtk29664v1 171.65 171.87 172.13 T:romulusm1v1 173.73 173.82 174.82 T:romulusn3v1 215.53 215.66 215.88 T:skinnyaeadtk39664v1 215.66 215.83 218.31 T:skinnyaeadtk312864v1 215.83 216.05 218.35 T:skinnyaeadtk396128v1 238.40 238.53 241.27 T:pyjamask128aeadv1 239.57 239.66 239.88 T:romulusm3v1 248.99 249.08 251.68 T:pyjamask96aeadv1 258.02 258.24 258.37 T:romulusn2v1 259.58 259.63 260.02 T:saefforkskinnyb128t192n56v1 259.71 259.80 262.58 T:paefforkskinnyb128t192n48v1 259.71 259.80 262.49 T:paefforkskinnyb128t256n112v1 260.28 260.32 264.01 T:saefforkskinnyb128t256n120v1 282.24 282.28 285.10 T:sundaegift0v1 283.24 283.28 283.58 T:sundaegift128v1 283.19 283.32 286.06 T:sundaegift64v1 283.24 283.37 286.06 T:sundaegift96v1 322.30 335.53 338.22 T:wageae128v1 359.06 359.10 361.96 T:romulusm2v1 363.35 364.53 367.35 T:spoc128sliscplight256v1 375.59 375.94 377.72 T:paefforkskinnyb128t288n104v1 401.85 401.89 404.67 T:spix128v1 593.68 596.37 597.85 T:spoc64sliscplight192v1 594.60 596.98 598.41 T:hyenav1 666.73 669.38 671.28 T:paefforkskinnyb64t192n48v1 742.85 743.89 747.02 T:oribatida192v11 919.97 922.27 923.44 T:estatetwegift128v1 930.35 933.12 933.38 T:orangezestv1 981.21 981.47 984.12 T:aceae128v1 989.15 991.45 992.11 T:oribatida256v11 1126.34 1127.30 1142.92 T:twegift64lotusaeadv1 1133.25 1135.46 1137.67 T:twegift64locusaeadv1 2450.03 2451.42 2453.68 T:elephant176v1 2602.46 2604.89 2614.31 T:elephant160v1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 6.25 6.29 6.34 ascon128av12 8.46 8.46 8.55 T:xoodyakv1 9.46 9.50 9.64 ascon128v12 9.50 9.50 9.55 ascon80pqv12 12.41 12.46 12.72 T:knot128v2 14.84 14.93 15.15 T:saeaes128a120t128v1 14.67 14.93 15.15 T:saeaes128a120t64v1 17.06 17.58 17.75 T:saeaes192a120t128v1 18.71 19.31 19.66 T:saeaes128a64t64v1 18.79 19.40 19.70 T:saeaes128a64t128v1 19.57 20.18 20.49 T:saeaes256a120t128v1 19.70 20.31 20.57 T:schwaemm256128v1 20.09 20.75 21.01 T:gimli24v1 21.09 21.79 21.87 T:knot128v1 22.05 22.53 22.87 T:saeaes192a64t64v1 22.05 22.79 22.83 T:saeaes192a64t128v1 22.74 23.31 23.52 T:schwaemm256256v1 24.00 24.13 24.96 T:comet128aesv1 24.43 24.48 25.61 T:isapa128av20 25.35 25.43 26.56 T:saeaes256a64t128v1 25.39 25.48 26.52 T:saeaes256a64t64v1 26.43 26.47 27.47 T:schwaemm192192v1 26.95 27.04 27.99 T:saturninctrcascadev2 31.12 31.16 32.16 T:knot256 31.12 31.21 32.16 T:grain128aead 32.51 32.55 33.64 T:tinyjambu128 32.90 32.94 34.03 T:knot192 33.33 33.55 34.42 T:sestatetweaes128v1 32.90 33.77 34.42 T:photonbeetleaead128rate128v1 34.85 34.89 36.15 T:tinyjambu192 37.11 37.19 38.76 T:schwaemm128128v1 37.76 37.89 39.50 T:tinyjambu256 38.58 38.63 40.23 T:drygascon128k56 38.58 38.63 40.23 T:drygascon128k32 38.63 38.63 40.15 T:drygascon128k16 38.97 39.06 40.58 T:giftcofb128v1 40.10 40.19 41.75 T:isapa128v20 42.58 42.66 44.18 T:estatetweaes128v1 44.01 44.10 45.57 T:isapk128av20 47.13 47.13 48.57 T:spook128mu384v1 47.13 47.18 48.52 T:spook128mu512v1 47.13 47.18 48.52 T:spook128su384v1 47.13 47.18 48.52 T:spook128su512v1 47.05 47.26 48.26 T:drygascon256k32 50.74 50.82 52.08 T:subterraneanv1 58.50 59.42 60.63 T:mixfeed 63.32 63.45 64.23 T:elephant200v1 81.25 81.33 81.90 T:comet128chamv1 87.89 88.28 88.89 T:isapk128v20 94.44 94.53 94.70 T:skinnyaeadtk3128128v1 99.91 100.17 102.90 T:comet64chamv1 103.86 104.68 104.90 T:comet64speckv1 122.17 122.30 125.17 T:romulusn1v1 127.60 127.82 128.81 T:photonbeetleaead128rate32v1 172.04 172.17 172.48 T:romulusm1v1 174.12 174.26 174.30 T:romulusn3v1 217.40 218.35 219.83 T:skinnyaeadtk296128v1 218.00 219.00 220.65 T:skinnyaeadtk29664v1 239.66 239.75 242.39 T:pyjamask128aeadv1 240.01 240.36 240.44 T:romulusm3v1 248.51 248.60 251.34 T:pyjamask96aeadv1 258.76 258.80 258.84 T:romulusn2v1 282.19 282.24 285.06 T:sundaegift0v1 283.15 283.19 283.28 T:sundaegift64v1 283.19 283.24 284.23 T:sundaegift128v1 283.15 283.28 285.93 T:sundaegift96v1 283.45 283.93 286.53 T:skinnyaeadtk312864v1 283.80 284.28 286.88 T:skinnyaeadtk39664v1 285.32 285.49 288.27 T:skinnyaeadtk396128v1 322.43 335.75 336.32 T:wageae128v1 359.84 359.88 359.97 T:romulusm2v1 366.00 366.22 367.91 T:spoc128sliscplight256v1 402.07 402.11 404.85 T:spix128v1 427.67 427.85 430.80 T:paefforkskinnyb128t192n48v1 427.76 428.07 430.63 T:paefforkskinnyb128t256n112v1 428.11 428.24 430.93 T:saefforkskinnyb128t256n120v1 428.15 429.67 431.71 T:saefforkskinnyb128t192n56v1 565.04 566.77 569.38 T:paefforkskinnyb128t288n104v1 594.81 596.42 596.68 T:spoc64sliscplight192v1 611.78 613.56 614.60 T:hyenav1 750.97 752.92 754.05 T:oribatida192v11 930.17 930.35 933.12 T:orangezestv1 937.85 938.38 939.29 T:estatetwegift128v1 981.34 981.52 985.07 T:aceae128v1 989.02 991.89 992.84 T:oribatida256v11 1009.03 1011.46 1011.77 T:paefforkskinnyb64t192n48v1 1104.47 1105.43 1107.42 T:twegift64locusaeadv1 1124.09 1127.30 1145.92 T:twegift64lotusaeadv1 2449.17 2450.82 2454.85 T:elephant176v1 2596.08 2602.07 2610.49 T:elephant160v1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 6.29 6.29 6.34 ascon128av12 8.46 8.51 8.77 T:xoodyakv1 9.46 9.50 9.55 ascon80pqv12 9.46 9.50 9.55 ascon128v12 12.41 12.46 12.63 T:knot128v2 14.97 15.45 15.71 T:saeaes128a120t64v1 15.32 15.45 15.62 T:saeaes128a120t128v1 17.53 18.14 18.45 T:saeaes192a120t128v1 19.18 19.83 20.14 T:saeaes128a64t64v1 19.23 19.88 20.18 T:isapa128av20 19.27 19.92 20.18 T:saeaes128a64t128v1 20.05 20.75 20.83 T:saeaes256a120t128v1 20.14 20.75 20.96 T:gimli24v1 20.27 20.83 21.05 T:schwaemm256128v1 21.09 21.79 21.87 T:knot128v1 22.53 23.00 23.48 T:saeaes192a64t64v1 22.53 23.05 23.39 T:saeaes192a64t128v1 23.31 23.65 24.09 T:schwaemm256256v1 24.00 24.13 25.00 T:comet128aesv1 24.78 25.00 25.82 T:isapa128v20 25.87 25.87 26.87 T:saeaes256a64t128v1 25.82 25.95 27.08 T:saeaes256a64t64v1 27.00 27.04 27.91 T:schwaemm192192v1 26.95 27.86 28.21 T:saturninctrcascadev2 31.12 31.21 32.20 T:knot256 31.16 31.21 32.20 T:grain128aead 32.46 32.51 33.59 T:tinyjambu128 32.90 32.99 33.98 T:knot192 33.33 33.51 34.33 T:sestatetweaes128v1 32.68 33.81 34.33 T:photonbeetleaead128rate128v1 34.46 34.59 35.68 T:isapk128av20 34.98 35.02 36.33 T:tinyjambu192 37.67 37.76 39.28 T:schwaemm128128v1 37.80 37.89 39.45 T:tinyjambu256 38.58 38.63 40.15 T:drygascon128k56 38.58 38.63 40.28 T:drygascon128k32 38.58 38.63 40.28 T:drygascon128k16 39.02 39.10 40.71 T:giftcofb128v1 42.58 42.66 44.23 T:estatetweaes128v1 46.74 46.87 48.04 T:drygascon256k32 47.13 47.18 48.57 T:spook128mu512v1 47.13 47.18 48.52 T:spook128mu384v1 47.18 47.18 48.52 T:spook128su512v1 47.13 47.22 48.57 T:spook128su384v1 50.78 50.87 52.17 T:subterraneanv1 58.24 58.81 59.37 T:isapk128v20 58.46 59.50 60.59 T:mixfeed 63.28 63.45 64.10 T:elephant200v1 81.25 81.29 81.33 T:comet128chamv1 94.35 94.53 94.70 T:skinnyaeadtk3128128v1 99.78 99.87 102.69 T:comet64chamv1 104.12 104.64 104.81 T:comet64speckv1 122.17 122.26 122.39 T:romulusn1v1 128.38 130.51 131.94 T:photonbeetleaead128rate32v1 172.22 172.26 172.61 T:romulusm1v1 175.34 175.43 175.47 T:romulusn3v1 216.61 218.13 219.39 T:skinnyaeadtk296128v1 217.09 218.48 220.43 T:skinnyaeadtk29664v1 239.66 239.83 242.79 T:pyjamask128aeadv1 238.40 240.05 241.61 T:romulusm3v1 248.56 248.64 251.86 T:pyjamask96aeadv1 258.76 258.80 261.67 T:romulusn2v1 282.28 282.37 285.06 T:sundaegift0v1 283.11 283.15 286.10 T:sundaegift64v1 282.93 283.24 283.76 T:skinnyaeadtk39664v1 283.15 283.28 286.06 T:sundaegift128v1 283.24 283.37 285.93 T:sundaegift96v1 283.24 283.84 286.10 T:skinnyaeadtk312864v1 285.93 286.27 288.62 T:skinnyaeadtk396128v1 317.09 319.61 323.42 T:wageae128v1 359.88 359.97 361.18 T:romulusm2v1 363.09 363.18 363.44 T:spoc128sliscplight256v1 397.29 402.07 402.72 T:spix128v1 427.67 427.80 428.06 T:paefforkskinnyb128t192n48v1 427.89 428.06 431.41 T:paefforkskinnyb128t256n112v1 428.15 428.28 430.97 T:saefforkskinnyb128t256n120v1 428.28 429.19 432.06 T:saefforkskinnyb128t192n56v1 565.52 567.77 568.73 T:paefforkskinnyb128t288n104v1 592.73 595.33 596.81 T:spoc64sliscplight192v1 613.43 614.60 616.38 T:hyenav1 751.06 753.96 754.79 T:oribatida192v11 930.22 932.73 933.12 T:orangezestv1 937.98 939.72 943.28 T:estatetwegift128v1 981.30 981.47 985.29 T:aceae128v1 988.63 991.11 992.67 T:oribatida256v11 1009.21 1011.59 1012.24 T:paefforkskinnyb64t192n48v1 1104.69 1106.90 1108.20 T:twegift64locusaeadv1 1126.04 1126.91 1143.36 T:twegift64lotusaeadv1 2451.38 2452.33 2455.24 T:elephant176v1 2592.91 2596.69 2607.32 T:elephant160v1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.38? 9.38? 18.75? ascon128av12 11.46? 12.50? 21.88? ascon80pqv12 12.50? 12.50? 21.87? ascon128v12 14.58? 14.59? 26.04? T:xoodyakv1 18.75? 18.75? 29.16? T:saeaes128a120t128v1 18.75? 18.75? 29.16? T:saeaes128a120t64v1 19.80? 20.84? 32.29? T:knot128v2 21.87? 21.88? 33.33? T:saeaes192a120t128v1 21.88? 21.88? 31.24? T:saeaes128a64t64v1 21.88? 22.91? 31.25? T:saeaes128a64t128v1 25.00? 25.00? 32.29? T:saeaes256a120t128v1 25.00? 26.04? 32.29? T:saeaes192a64t128v1 25.00? 26.04? 32.29? T:saeaes192a64t64v1 27.08 27.09 29.17 T:knot128v1 29.16? 29.16? 34.37? T:gimli24v1 29.17? 30.20? 38.54? T:saeaes256a64t128v1 29.17? 30.20? 46.87? T:saeaes256a64t64v1 32.29? 33.34? 41.66? T:schwaemm256128v1 34.38 34.38 35.41 T:comet128aesv1 35.41 35.42 36.45 T:grain128aead 36.46? 37.50? 43.75? T:schwaemm256256v1 38.54 38.54 39.58 T:tinyjambu128 38.54 38.55 39.58 T:photonbeetleaead128rate128v1 40.62 40.62 40.62 T:sestatetweaes128v1 41.66 41.66 42.70 T:tinyjambu192 43.74? 43.75? 51.04? T:schwaemm192192v1 44.79 44.79 44.79 T:knot192 44.79 44.79 44.79 T:tinyjambu256 44.79 45.83 45.84 T:drygascon128k56 45.83 45.83 45.84 T:drygascon128k32 45.83 45.84 46.87 T:drygascon128k16 46.87 46.88 46.88 T:giftcofb128v1 47.91 47.91 48.95 T:schwaemm128128v1 47.91 47.91 48.96 T:knot256 48.95 48.96 48.96 T:estatetweaes128v1 54.16? 54.16? 64.58? T:saturninctrcascadev2 57.29 57.29 58.33 T:drygascon256k32 59.38? 60.41? 70.83? T:isapa128av20 73.95 73.95 73.96 T:spook128mu384v1 73.95 73.95 73.96 T:spook128su512v1 73.95 73.95 74.99 T:spook128mu512v1 73.95 73.96 74.99 T:spook128su384v1 87.50 88.54 89.58 T:mixfeed 94.79 94.79 95.83 T:subterraneanv1 94.79 94.79 96.87 T:elephant200v1 108.33 108.33 109.37 T:comet128chamv1 119.78 119.79 120.83 T:comet64chamv1 123.95 124.99 126.04 T:comet64speckv1 138.53 138.54 139.58 T:photonbeetleaead128rate32v1 143.74 143.74 144.78 T:isapk128av20 147.91 148.95 148.95 T:skinnyaeadtk3128128v1 151.03 151.04 151.04 T:romulusn1v1 192.70 192.70 193.74 T:skinnyaeadtk296128v1 192.70 192.70 193.74 T:skinnyaeadtk29664v1 199.99 201.03 202.08 T:romulusn3v1 202.07 202.08 203.12 T:romulusm1v1 249.99 251.04 257.28 T:skinnyaeadtk396128v1 251.03 252.07 254.16 T:skinnyaeadtk312864v1 251.03 252.07 255.20 T:skinnyaeadtk39664v1 260.41 269.78 272.91 T:paefforkskinnyb128t256n112v1 268.74 269.78 274.98 T:saefforkskinnyb128t192n56v1 269.77 269.78 276.03 T:paefforkskinnyb128t192n48v1 269.78 271.86 278.12 T:saefforkskinnyb128t256n120v1 286.45 286.45 289.57 T:romulusm3v1 295.82 295.83 301.02 T:romulusn2v1 316.66 317.70 322.90 T:sundaegift0v1 339.57 341.65 344.78 T:sundaegift64v1 339.57 341.66 345.82 T:sundaegift128v1 339.57 341.66 348.95 T:isapa128v20 341.65 341.66 343.73 T:sundaegift96v1 352.07 362.49 370.82 T:pyjamask128aeadv1 379.15 381.23 384.36 T:pyjamask96aeadv1 381.23 392.69 394.77 T:paefforkskinnyb128t288n104v1 411.44 426.02 428.11 T:spoc128sliscplight256v1 419.77 431.23 434.36 T:romulusm2v1 471.86 477.06 490.60 T:wageae128v1 670.80 671.85 695.80 T:spix128v1 666.64 678.10 691.64 T:spoc64sliscplight192v1 676.02 679.14 708.30 T:hyenav1 678.10 680.18 704.14 T:paefforkskinnyb64t192n48v1 906.22 907.26 946.84 T:isapk128v20 972.88 977.05 1011.42 T:oribatida192v11 1003.09 1008.29 1040.59 T:estatetwegift128v1 1151.00 1152.04 1187.45 T:orangezestv1 1229.12 1230.16 1255.16 T:oribatida256v11 1266.62 1269.74 1296.82 T:twegift64locusaeadv1 1259.32 1281.20 1289.54 T:twegift64lotusaeadv1 1388.48 1393.70 1414.53 T:aceae128v1 3054.05 3058.22 3070.71 T:elephant176v1 3484.24 3509.24 3535.27 T:elephant160v1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.38? 9.38? 18.75? ascon128av12 12.49? 12.50? 21.88? ascon128v12 12.50? 12.50? 21.88? ascon80pqv12 14.58? 14.59? 26.04? T:xoodyakv1 17.71? 17.71? 28.12? T:saeaes128a120t64v1 17.71? 18.75? 28.12? T:saeaes128a120t128v1 20.83? 20.84? 32.29? T:knot128v2 20.84? 20.84? 33.33? T:saeaes192a120t128v1 21.88? 21.88? 30.20? T:saeaes128a64t64v1 21.88? 21.88? 30.21? T:saeaes128a64t128v1 23.96? 25.00? 31.25? T:saeaes256a120t128v1 25.00? 25.00? 32.29? T:saeaes192a64t128v1 25.00? 25.00? 32.29? T:saeaes192a64t64v1 27.08 27.09 29.16 T:knot128v1 29.16? 29.16? 34.38? T:gimli24v1 29.16? 29.16? 45.83? T:saeaes256a64t64v1 29.16? 29.17? 37.50? T:saeaes256a64t128v1 32.29? 33.33? 41.66? T:schwaemm256128v1 35.41 36.45 37.50 T:comet128aesv1 37.50? 37.50? 43.75? T:schwaemm256256v1 38.54 38.54 38.54 T:grain128aead 38.54 38.54 39.59 T:tinyjambu128 39.58 40.62 40.62 T:photonbeetleaead128rate128v1 40.62 40.62 40.62 T:sestatetweaes128v1 41.66 41.66 42.70 T:tinyjambu192 43.75? 44.79? 52.08? T:schwaemm192192v1 44.79 44.79 44.79 T:knot192 44.79 44.79 44.79 T:tinyjambu256 46.87 46.88 46.88 T:drygascon128k32 46.87 46.88 46.88 T:drygascon128k56 46.87 46.88 46.88 T:giftcofb128v1 46.87 46.88 47.91 T:drygascon128k16 47.91 47.91 48.96 T:knot256 47.91? 47.91? 57.29? T:saturninctrcascadev2 48.95 48.95 48.96 T:estatetweaes128v1 48.95 48.95 48.96 T:schwaemm128128v1 59.37 59.38 59.38 T:drygascon256k32 60.41? 60.41? 70.83? T:isapa128av20 73.95 73.95 75.00 T:spook128mu384v1 73.95 73.96 74.99 T:spook128su384v1 73.95 73.96 75.00 T:spook128mu512v1 73.95 73.96 75.00 T:spook128su512v1 88.54 88.54 88.54 T:mixfeed 93.75 94.78 94.79 T:elephant200v1 94.79 95.83 95.83 T:subterraneanv1 110.41 110.41 111.45 T:comet128chamv1 121.87 121.88 122.91 T:comet64chamv1 126.03 126.04 127.08 T:comet64speckv1 136.45 137.49 137.50 T:skinnyaeadtk3128128v1 139.58 139.58 141.66 T:photonbeetleaead128rate32v1 143.74 144.79 151.03 T:isapk128av20 151.04 152.08 154.16 T:romulusn1v1 201.03 201.04 202.08 T:romulusn3v1 209.37 210.41 211.45 T:romulusm1v1 245.82 247.91 253.12 T:skinnyaeadtk296128v1 245.82 247.91 256.24 T:skinnyaeadtk29664v1 286.45 287.48 289.58 T:romulusm3v1 295.83 296.86 303.12 T:romulusn2v1 316.66 317.70 321.86 T:sundaegift0v1 320.82 321.87 324.98 T:skinnyaeadtk39664v1 320.82 322.90 327.07 T:skinnyaeadtk312864v1 323.95 326.02 329.16 T:skinnyaeadtk396128v1 339.57 340.61 342.70 T:isapa128v20 340.61 341.65 346.86 T:sundaegift128v1 339.57 341.66 344.77 T:sundaegift64v1 340.61 341.66 344.78 T:sundaegift96v1 352.07 363.53 370.82 T:pyjamask128aeadv1 376.02 380.20 386.45 T:pyjamask96aeadv1 411.44 424.98 428.11 T:spoc128sliscplight256v1 429.15 429.16 443.73 T:paefforkskinnyb128t256n112v1 417.69 432.27 434.35 T:romulusm2v1 429.15 443.73 452.07 T:paefforkskinnyb128t192n48v1 429.16 443.73 451.02 T:saefforkskinnyb128t192n56v1 436.44 443.73 447.90 T:saefforkskinnyb128t256n120v1 474.98 479.15 497.90 T:wageae128v1 569.77 581.23 585.40 T:paefforkskinnyb128t288n104v1 670.80 671.85 694.77 T:spix128v1 666.64 674.98 697.89 T:spoc64sliscplight192v1 691.64 694.77 720.80 T:hyenav1 908.30 909.34 944.75 T:isapk128v20 1008.30 1009.34 1042.67 T:paefforkskinnyb64t192n48v1 981.21 1010.38 1021.84 T:oribatida192v11 1019.75 1033.30 1060.38 T:estatetwegift128v1 1151.00 1153.08 1184.33 T:orangezestv1 1227.04 1230.16 1277.03 T:oribatida256v11 1242.66 1245.78 1271.83 T:twegift64locusaeadv1 1259.33 1279.12 1286.41 T:twegift64lotusaeadv1 1388.49 1397.87 1421.82 T:aceae128v1 3047.80 3053.00 3119.67 T:elephant176v1 3459.23 3506.12 3538.41 T:elephant160v1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.38? 9.38? 18.75? ascon128av12 12.50? 12.50? 21.88? ascon128v12 12.50? 12.50? 21.88? ascon80pqv12 14.58? 14.59? 26.04? T:xoodyakv1 18.74? 18.75? 29.16? T:saeaes128a120t64v1 18.75? 18.75? 29.16? T:saeaes128a120t128v1 20.83? 20.84? 32.29? T:knot128v2 20.84? 21.88? 33.33? T:saeaes192a120t128v1 21.88? 21.88? 31.25? T:saeaes128a64t128v1 21.88? 21.88? 31.25? T:saeaes128a64t64v1 25.00? 25.00? 32.29? T:saeaes256a120t128v1 25.00? 26.04? 32.29? T:saeaes192a64t128v1 25.00? 26.04? 32.29? T:saeaes192a64t64v1 27.08? 27.09? 30.20? T:knot128v1 29.16? 29.16? 34.37? T:gimli24v1 29.16? 30.21? 38.54? T:saeaes256a64t128v1 29.16? 30.21? 45.84? T:saeaes256a64t64v1 33.34? 34.37? 42.70? T:schwaemm256128v1 35.41 35.41 36.45 T:comet128aesv1 37.50 38.54 38.54 T:grain128aead 37.50? 38.54? 44.79? T:schwaemm256256v1 38.54 38.54 39.58 T:tinyjambu128 39.58? 39.59? 46.87? T:isapa128av20 39.58 40.62 40.62 T:photonbeetleaead128rate128v1 40.62 40.62 40.62 T:sestatetweaes128v1 41.66 41.66 42.70 T:tinyjambu192 43.75 43.75 44.79 T:knot192 43.75? 44.79? 52.08? T:schwaemm192192v1 44.79 44.79 44.79 T:tinyjambu256 45.84 46.88 46.88 T:drygascon128k56 46.87 46.88 46.88 T:drygascon128k32 46.87 46.88 46.88 T:giftcofb128v1 46.88 46.88 47.91 T:drygascon128k16 47.91 47.91 48.95 T:knot256 47.91? 47.92? 56.25? T:saturninctrcascadev2 47.91 48.95 48.96 T:estatetweaes128v1 48.95 48.96 50.00 T:schwaemm128128v1 59.38 59.38 60.41 T:drygascon256k32 73.95 73.95 73.95 T:spook128mu384v1 73.95 73.95 73.96 T:spook128mu512v1 73.95 73.95 73.96 T:spook128su384v1 73.95 73.95 73.96 T:spook128su512v1 88.54 88.54 88.54 T:mixfeed 90.62 91.66 91.66 T:isapk128av20 93.75 94.79 94.79 T:elephant200v1 94.79 95.83 95.84 T:subterraneanv1 109.38 110.41 110.41 T:comet128chamv1 121.87 121.87 121.88 T:comet64chamv1 124.99 126.04 127.08 T:comet64speckv1 136.45 137.49 140.62 T:skinnyaeadtk3128128v1 138.53 139.58 139.58 T:photonbeetleaead128rate32v1 151.04 151.04 152.08 T:romulusn1v1 177.08 178.12 179.16 T:isapa128v20 201.03 201.03 202.07 T:romulusn3v1 210.41 210.41 213.53 T:romulusm1v1 246.86 247.91 251.03 T:skinnyaeadtk296128v1 246.87 247.91 252.08 T:skinnyaeadtk29664v1 284.37 285.41 288.53 T:romulusm3v1 295.82 295.83 303.11 T:romulusn2v1 316.65 316.66 320.82 T:sundaegift0v1 320.82 322.91 326.02 T:skinnyaeadtk312864v1 321.86 322.91 324.99 T:skinnyaeadtk39664v1 324.98 327.07 331.23 T:skinnyaeadtk396128v1 335.41 340.62 346.86 T:sundaegift64v1 340.61 341.65 343.73 T:sundaegift96v1 340.62 341.66 344.77 T:sundaegift128v1 352.07 362.49 368.73 T:pyjamask128aeadv1 367.70 380.19 386.44 T:pyjamask96aeadv1 408.31 423.95 426.02 T:spoc128sliscplight256v1 429.15 430.20 444.77 T:paefforkskinnyb128t256n112v1 416.66 431.23 432.28 T:romulusm2v1 428.11 442.70 448.94 T:paefforkskinnyb128t192n48v1 433.31 443.73 449.98 T:saefforkskinnyb128t256n120v1 430.19 443.73 451.02 T:saefforkskinnyb128t192n56v1 452.06 466.65 470.82 T:wageae128v1 476.02 492.70 498.94 T:isapk128v20 567.69 573.94 589.56 T:paefforkskinnyb128t288n104v1 664.55 667.68 691.64 T:spix128v1 666.64 676.02 692.68 T:spoc64sliscplight192v1 690.60 694.77 717.68 T:hyenav1 981.21 986.42 1020.80 T:oribatida192v11 1008.30 1009.34 1046.83 T:paefforkskinnyb64t192n48v1 1018.71 1028.09 1055.17 T:estatetwegift128v1 1152.04 1152.04 1185.37 T:orangezestv1 1227.04 1229.12 1256.20 T:oribatida256v11 1241.62 1244.74 1270.79 T:twegift64locusaeadv1 1260.37 1280.16 1289.53 T:twegift64lotusaeadv1 1386.40 1396.82 1411.41 T:aceae128v1 3047.80 3053.01 3105.09 T:elephant176v1 3447.78 3488.41 3521.74 T:elephant160v1