VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information: Introduction eBASH eBASC eBAEAD eBATS SUPERCOP XBX Computers
How to submit new software: Tips hash stream aead dh kem encrypt sign
List of primitives measured: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
Measurements indexed by machine: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
List of subroutines: verify decode encode sort core hashblocks scalarmult

Measurements of NISTLWC cipher candidates, indexed by machine

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each cipher and each implementation.

amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.800.810.82T:aes128gcmv1
0.880.900.90aes256gcmv1
6.136.136.13ascon128av12
9.009.009.00ascon80pqv12
9.139.139.13ascon128v12
11.8811.9311.99T:xoodyakround3
12.3212.3812.42ascon128abi32v12
17.0917.1217.15T:grain128aeadv2
17.4817.5317.60T:schwaemm256128v2
18.4418.5118.56ascon128bi32v12
23.7823.8423.96T:schwaemm192192v2
24.3124.3924.81T:schwaemm256256v2
25.7325.7425.75T:isapa128av20
26.7026.7926.94T:schwaemm128128v2
30.7530.7530.75T:giftcofb128v1
35.6435.6435.64T:isapa128v20
41.4842.0542.27romulusn
46.2748.2348.46T:isapk128av20
64.1264.4564.95romulusm
72.3072.3472.43T:isapk128v20
73.2573.2673.26T:tinyjambu128v2
82.7482.7482.75T:tinyjambu192v2
91.2491.2691.26T:tinyjambu256v2
133.66133.71133.84romulust
164.26165.45165.84T:isapxv20
201.31201.36201.80T:elephant200v2
7526.427528.297591.45T:elephant176v2
7885.357888.957890.77T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.680.690.71T:aes128gcmv1
0.800.810.82aes256gcmv1
6.186.196.19ascon128av12
8.758.758.76ascon128v12
8.899.009.01ascon80pqv12
11.8211.8911.93T:xoodyakround3
12.4012.4412.48ascon128abi32v12
17.4817.5117.53T:grain128aeadv2
17.6117.6717.75T:schwaemm256128v2
18.5018.5018.50ascon128bi32v12
23.8523.9124.02T:schwaemm192192v2
24.5824.6524.79T:schwaemm256256v2
26.6726.7026.75T:isapa128av20
27.0927.4027.62T:schwaemm128128v2
30.9330.9430.94T:giftcofb128v1
35.6435.6435.68T:isapa128v20
41.3341.3541.40romulusn
46.5648.0348.44T:isapk128av20
64.5464.7365.05romulusm
72.3072.3672.48T:isapk128v20
73.5073.5173.51T:tinyjambu128v2
82.9882.9983.00T:tinyjambu192v2
91.4891.5191.51T:tinyjambu256v2
133.76133.99134.09romulust
163.47164.04166.19T:isapxv20
201.24201.25201.38T:elephant200v2
7526.417527.487530.18T:elephant176v2
7890.137890.727891.93T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.690.690.70T:aes128gcmv1
0.790.800.82aes256gcmv1
6.196.196.20ascon128av12
8.758.758.76ascon128v12
9.009.009.01ascon80pqv12
11.8811.9311.96T:xoodyakround3
12.4312.4412.48ascon128abi32v12
17.4717.5117.55T:grain128aeadv2
17.6317.7117.82T:schwaemm256128v2
17.7217.7617.77T:isapa128av20
17.7217.7617.79T:isapa128v20
18.5018.5018.51ascon128bi32v12
23.8123.8823.92T:schwaemm192192v2
24.5324.6524.86T:schwaemm256256v2
26.8426.9927.11T:schwaemm128128v2
30.9330.9430.94T:giftcofb128v1
30.9432.0032.20T:isapk128av20
41.3541.5341.61romulusn
44.4744.5644.69romulust
45.1445.2145.46T:isapk128v20
64.4964.8265.39romulusm
73.5173.5173.52T:tinyjambu128v2
83.0083.0083.00T:tinyjambu192v2
91.5191.5191.51T:tinyjambu256v2
96.8198.6299.00T:isapxv20
201.26201.32201.73T:elephant200v2
7528.357530.877531.85T:elephant176v2
7888.347889.567900.56T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.580.610.62T:aes128gcmv1
0.630.650.67aes256gcmv1
6.136.146.14ascon128av12
8.898.928.96T:xoodyakround3
9.009.009.01ascon128v12
9.069.069.07ascon80pqv12
12.4412.4412.45ascon128abi32v12
17.5117.5317.56T:grain128aeadv2
17.4717.5417.69T:schwaemm256128v2
18.3718.3818.40ascon128bi32v12
21.8121.8221.84T:isapa128av20
23.8123.9024.07T:schwaemm192192v2
24.3224.4424.54T:schwaemm256256v2
26.8726.8826.90T:isapa128v20
26.8226.9127.05T:schwaemm128128v2
30.9330.9830.98T:giftcofb128v1
32.0532.1532.57romulusn
38.5238.6038.64T:isapk128av20
43.4543.5944.00romulusm
58.6558.7158.75T:isapk128v20
59.7459.7659.77T:tinyjambu128v2
64.7464.7664.76T:tinyjambu192v2
68.7568.7668.77T:tinyjambu256v2
89.0889.1389.24romulust
130.61131.03131.31T:isapxv20
151.26151.29151.31T:elephant200v2
5626.455627.775630.73T:elephant176v2
5917.815918.855919.23T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.520.540.56T:aes128gcmv1
0.580.600.63aes256gcmv1
6.006.006.02ascon128av12
8.858.898.92T:xoodyakround3
9.049.049.05ascon80pqv12
9.069.079.07ascon128v12
12.4512.4712.49ascon128abi32v12
17.4617.4917.52T:schwaemm256128v2
17.5617.6017.64T:grain128aeadv2
18.5318.5418.54ascon128bi32v12
22.2122.2122.25T:isapa128av20
23.7723.8723.99T:schwaemm192192v2
24.4224.4524.50T:schwaemm256256v2
26.7126.7926.90T:schwaemm128128v2
26.8626.8826.90T:isapa128v20
31.0231.0231.08T:giftcofb128v1
32.0732.1532.25romulusn
38.5238.5840.08T:isapk128av20
43.6243.8543.94romulusm
58.5458.6158.67T:isapk128v20
59.8859.8959.89T:tinyjambu128v2
64.8764.8864.88T:tinyjambu192v2
68.8868.8968.89T:tinyjambu256v2
89.0589.0989.21romulust
130.36131.03131.54T:isapxv20
151.22151.25151.27T:elephant200v2
5621.115624.365625.02T:elephant176v2
5918.615919.875920.96T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.540.540.55T:aes128gcmv1
0.590.600.60aes256gcmv1
6.006.006.04ascon128av12
8.878.918.95T:xoodyakround3
9.049.049.05ascon80pqv12
9.069.079.07ascon128v12
12.4712.4712.48ascon128abi32v12
17.4517.5017.55T:schwaemm256128v2
17.5617.5717.59T:grain128aeadv2
17.7517.7517.76T:isapa128av20
17.9217.9317.96T:isapa128v20
18.5418.5418.54ascon128bi32v12
23.7723.8323.94T:schwaemm192192v2
24.3024.4524.58T:schwaemm256256v2
26.6426.7826.87T:schwaemm128128v2
31.0231.0231.07T:giftcofb128v1
30.9432.0932.17T:isapk128av20
32.0732.1032.16romulusn
43.6243.7743.90romulusm
44.5744.6244.66romulust
45.0945.1345.14T:isapk128v20
59.8859.8959.89T:tinyjambu128v2
64.8864.8864.88T:tinyjambu192v2
68.8968.8968.89T:tinyjambu256v2
97.6898.0598.26T:isapxv20
151.25151.31151.62T:elephant200v2
5623.935624.575625.04T:elephant176v2
5919.205919.745920.12T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.380.400.42T:aes128gcmv1
0.390.400.43aes256gcmv1
5.775.855.87T:xoodyakround3
6.126.136.13ascon128av12
8.878.888.88ascon128v12
9.129.129.13ascon80pqv12
12.4812.5012.54ascon128abi32v12
17.2817.3117.39T:schwaemm256128v2
17.8717.8717.88T:isapa128av20
17.9117.9517.96T:grain128aeadv2
18.1318.1318.14T:isapa128v20
18.1918.2518.32ascon128bi32v12
22.7222.7322.81romulusn
22.7322.7622.86romulusm
23.7223.7924.18T:schwaemm192192v2
24.3124.3524.41T:schwaemm256256v2
26.5626.6926.82T:schwaemm128128v2
30.9731.0331.12T:isapk128av20
31.2031.2131.21T:giftcofb128v1
44.4744.4944.52romulust
44.7944.8744.98T:isapk128v20
46.2446.2546.26T:tinyjambu256v2
46.2346.2646.27T:tinyjambu128v2
46.7446.7646.76T:tinyjambu192v2
96.7697.2197.71T:isapxv20
101.33101.61101.83T:elephant200v2
3719.733720.373721.37T:elephant176v2
3949.893952.933953.20T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.390.400.43aes256gcmv1
0.390.400.43T:aes128gcmv1
5.825.905.93T:xoodyakround3
5.935.945.94ascon128av12
9.089.089.08ascon80pqv12
9.379.389.38ascon128v12
12.4712.5012.53ascon128abi32v12
17.2717.3317.40T:schwaemm256128v2
17.6417.6617.69T:grain128aeadv2
17.7417.7517.76T:isapa128av20
18.1318.1718.18T:isapa128v20
18.5618.5718.57ascon128bi32v12
22.7422.7422.81romulusn
22.7322.7423.04romulusm
23.7823.8924.02T:schwaemm192192v2
24.3024.3724.84T:schwaemm256256v2
26.4826.6726.84T:schwaemm128128v2
30.9631.1032.15T:isapk128av20
31.1031.2131.22T:giftcofb128v1
44.4644.5344.57romulust
44.8244.9244.95T:isapk128v20
46.2546.2646.26T:tinyjambu256v2
46.2646.2646.27T:tinyjambu128v2
46.7646.7646.76T:tinyjambu192v2
96.8297.2497.57T:isapxv20
101.34101.51101.57T:elephant200v2
3720.573721.253721.98T:elephant176v2
3951.223951.643952.69T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.400.400.40aes256gcmv1
0.400.400.40T:aes128gcmv1
5.795.916.03T:xoodyakround3
5.945.945.94ascon128av12
9.089.089.08ascon80pqv12
9.389.389.38ascon128v12
12.5012.5012.51ascon128abi32v12
17.3117.3517.40T:schwaemm256128v2
17.6317.6617.68T:grain128aeadv2
17.7117.7517.79T:isapa128av20
18.1018.1418.17T:isapa128v20
18.5618.5718.57ascon128bi32v12
22.7222.7422.74romulusn
22.7322.7523.06romulusm
23.7823.8624.07T:schwaemm192192v2
24.2824.3424.56T:schwaemm256256v2
26.5226.6226.76T:schwaemm128128v2
31.1031.2131.22T:giftcofb128v1
30.8631.8732.16T:isapk128av20
44.4444.5244.57romulust
44.7244.7744.93T:isapk128v20
46.2646.2646.26T:tinyjambu256v2
46.2646.2646.27T:tinyjambu128v2
46.7646.7646.77T:tinyjambu192v2
96.4197.7698.48T:isapxv20
101.31101.50101.55T:elephant200v2
3722.883750.043753.31T:elephant176v2
3951.063952.833953.10T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.690.690.71T:aes128gcmv1
0.750.750.77aes256gcmv1
6.276.276.28ascon128av12
9.009.019.03T:xoodyakround3
9.159.159.16ascon128v12
9.209.209.20ascon80pqv12
12.7312.7412.75ascon128abi32v12
17.8617.8717.89T:grain128aeadv2
17.9517.9818.02T:schwaemm256128v2
18.7718.7718.79ascon128bi32v12
23.3623.3623.37T:isapa128av20
24.3624.4324.63T:schwaemm192192v2
25.0625.1525.45T:schwaemm256256v2
27.0127.1527.25T:schwaemm128128v2
31.2231.2231.23T:giftcofb128v1
32.4132.4532.66romulusn
39.3539.3639.37T:isapa128v20
43.8043.9344.29romulusm
44.5444.5744.63T:isapk128av20
60.2160.2260.22T:tinyjambu128v2
65.2465.2465.25T:tinyjambu192v2
69.2669.2669.27T:tinyjambu256v2
90.4790.5290.59romulust
102.09102.16102.22T:isapk128v20
154.39154.41154.44T:elephant200v2
220.82222.00222.85T:isapxv20
5668.225668.885671.82T:elephant176v2
5984.605985.775991.91T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.640.640.67T:aes128gcmv1
0.700.710.74aes256gcmv1
6.156.156.22ascon128av12
8.958.958.99T:xoodyakround3
9.189.189.18ascon80pqv12
9.229.229.22ascon128v12
12.7612.7612.78ascon128abi32v12
17.9017.9217.94T:grain128aeadv2
18.0518.0818.12T:schwaemm256128v2
19.0019.0019.00ascon128bi32v12
23.7223.7223.74T:isapa128av20
24.3324.3524.41T:schwaemm192192v2
25.1425.1725.18T:schwaemm256256v2
27.1327.1827.33T:schwaemm128128v2
31.2731.3231.32T:giftcofb128v1
32.3732.4032.43romulusn
39.3639.3639.38T:isapa128v20
44.1844.2844.44romulusm
43.1344.4844.56T:isapk128av20
60.3460.3460.34T:tinyjambu128v2
65.3765.3765.37T:tinyjambu192v2
69.3869.3969.39T:tinyjambu256v2
90.4790.6090.69romulust
102.08102.11102.16T:isapk128v20
154.38154.42154.45T:elephant200v2
220.99221.51221.72T:isapxv20
5667.325668.215669.39T:elephant176v2
5986.435986.715987.33T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.640.640.64T:aes128gcmv1
0.700.700.71aes256gcmv1
6.156.156.15ascon128av12
8.978.989.09T:xoodyakround3
9.189.189.18ascon80pqv12
9.229.229.22ascon128v12
12.7612.7612.76ascon128abi32v12
17.8917.9017.92T:grain128aeadv2
18.0218.0618.09T:schwaemm256128v2
18.6018.6018.62T:isapa128av20
19.0019.0019.00ascon128bi32v12
24.2824.2924.31T:isapa128v20
24.3324.3424.37T:schwaemm192192v2
25.2025.2925.48T:schwaemm256256v2
27.1127.1727.23T:schwaemm128128v2
31.2631.2731.32T:giftcofb128v1
32.3732.3932.42romulusn
33.5233.6134.64T:isapk128av20
44.1444.2744.31romulusm
45.8645.8945.90romulust
60.3460.3460.34T:tinyjambu128v2
65.3765.3765.37T:tinyjambu192v2
67.4867.5067.71T:isapk128v20
69.3869.3969.39T:tinyjambu256v2
144.62145.16145.73T:isapxv20
154.45154.45154.67T:elephant200v2
5668.255711.215711.95T:elephant176v2
5986.005986.425986.80T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
4.794.884.98T:aes128gcmv1
5.105.185.25aes256gcmv1
9.499.499.84ascon128av12
12.2112.2312.23ascon80pqv12
12.5812.5912.62ascon128v12
12.8612.9613.44T:xoodyakround3
19.2919.2919.80ascon128abi32v12
25.1625.2425.34T:grain128aeadv2
27.6727.6728.79ascon128bi32v12
29.9930.1930.50T:schwaemm256128v2
35.2235.4135.98T:schwaemm128128v2
36.7936.8036.83T:giftcofb128v1
38.3838.4138.77romulusn
38.5638.8238.95T:schwaemm192192v2
40.5540.6941.00T:schwaemm256256v2
51.0151.3751.41romulusm
58.3358.3558.64T:isapa128av20
70.5270.5370.94T:tinyjambu128v2
76.1876.1876.64T:tinyjambu192v2
80.6480.6481.08T:tinyjambu256v2
120.94121.15121.44romulust
134.88138.45139.32T:isapk128av20
218.12218.47218.66T:elephant200v2
326.17326.22326.37T:isapa128v20
1090.061091.561091.77T:isapk128v20
2272.062275.862283.02T:isapxv20
7053.457057.777114.91T:elephant176v2
8018.098019.988022.17T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.025.105.20T:aes128gcmv1
5.465.495.64aes256gcmv1
9.489.529.68ascon128av12
12.2012.2012.30ascon80pqv12
12.7012.7112.77ascon128v12
12.9613.0213.47T:xoodyakround3
19.2719.3419.66ascon128abi32v12
25.1225.2325.29T:grain128aeadv2
29.5529.5529.57ascon128bi32v12
30.2930.5030.73T:schwaemm256128v2
35.5835.9836.30T:schwaemm128128v2
36.8736.8736.95T:giftcofb128v1
38.7738.8438.85romulusn
38.4938.9339.19T:schwaemm192192v2
40.4740.8240.99T:schwaemm256256v2
51.6251.7351.81romulusm
57.8558.1158.37T:isapa128av20
70.6570.6570.80T:tinyjambu128v2
76.3276.3276.32T:tinyjambu192v2
80.7980.7980.79T:tinyjambu256v2
121.31121.38121.67romulust
135.02138.71139.79T:isapk128av20
218.35218.57218.78T:elephant200v2
326.26326.30326.81T:isapa128v20
1090.531090.771090.95T:isapk128v20
2271.252275.442282.59T:isapxv20
7058.387062.017064.51T:elephant176v2
8018.108019.198019.71T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.065.105.19T:aes128gcmv1
5.465.505.52aes256gcmv1
9.489.489.52ascon128av12
12.2012.2012.20ascon80pqv12
12.7012.7212.74ascon128v12
12.9413.3413.63T:xoodyakround3
19.2419.3419.34ascon128abi32v12
25.1325.2425.31T:grain128aeadv2
29.5529.5629.56ascon128bi32v12
30.2230.5530.90T:schwaemm256128v2
35.3035.7436.16T:schwaemm128128v2
36.8536.9136.95T:giftcofb128v1
37.9137.9538.13T:isapa128av20
38.2638.7738.89romulusn
38.9139.2039.49T:schwaemm192192v2
40.7340.9141.27T:schwaemm256256v2
51.6451.7151.85romulusm
70.6570.6570.66T:tinyjambu128v2
75.5175.9176.19romulust
76.3276.3276.32T:tinyjambu192v2
80.7980.7980.79T:tinyjambu256v2
84.9585.5986.53T:isapk128av20
170.04170.09170.60T:isapa128v20
218.20218.53218.73T:elephant200v2
575.61575.79576.35T:isapk128v20
1187.821190.571193.70T:isapxv20
7053.977056.977058.80T:elephant176v2
8020.828023.858026.61T:elephant160v2

amd64; Raptor Cove (b06a2); 2023 Intel Core i7-13700H, P cores; 6 x 4800MHz; raptor, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.411.421.43T:aes128gcmv1
1.461.541.56aes256gcmv1
6.456.516.59ascon128av12
9.829.879.90ascon80pqv12
9.959.9910.02ascon128v12
12.4012.4412.54T:schwaemm256128v2
12.8513.0213.18ascon128abi32v12
13.2113.2513.29T:xoodyakround3
16.3916.4816.55T:schwaemm192192v2
17.2817.3717.43T:schwaemm256256v2
18.2218.2718.30T:schwaemm128128v2
19.0919.1219.18ascon128bi32v12
23.1523.1923.24T:grain128aeadv2
33.0233.0733.12T:giftcofb128v1
38.7338.7538.81romulusn
39.2939.4039.58T:isapa128v20
39.4139.4939.54T:isapa128av20
47.4548.0048.14T:isapk128av20
62.1762.2262.28romulusm
64.4664.8265.24T:isapk128v20
65.4665.6165.70T:tinyjambu128v2
77.9978.0478.14T:tinyjambu192v2
83.8583.8984.03T:tinyjambu256v2
129.64129.77129.86romulust
161.35161.93162.57T:isapxv20
165.95167.86168.63T:elephant200v2
5699.425706.575732.88T:elephant176v2
5894.335897.405908.06T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.201.211.25T:aes128gcmv1
1.401.411.42aes256gcmv1
6.416.466.47ascon128av12
9.599.619.63ascon80pqv12
9.679.729.89ascon128v12
12.4412.4812.56T:schwaemm256128v2
13.0513.1913.31ascon128abi32v12
13.1613.2313.26T:xoodyakround3
16.4016.4816.51T:schwaemm192192v2
17.2717.3617.43T:schwaemm256256v2
18.2418.2718.34T:schwaemm128128v2
19.1819.2619.31ascon128bi32v12
22.5122.5322.57T:grain128aeadv2
33.0633.0833.13T:giftcofb128v1
38.8038.8538.94romulusn
39.2239.3239.48T:isapa128v20
39.4039.4739.57T:isapa128av20
47.3947.7248.06T:isapk128av20
62.1562.2862.35romulusm
64.1864.8465.65T:isapk128v20
65.4265.4665.49T:tinyjambu128v2
77.8477.9377.96T:tinyjambu192v2
84.0184.0784.10T:tinyjambu256v2
129.64129.75130.19romulust
163.38163.93164.52T:isapxv20
168.55169.18169.92T:elephant200v2
5697.515706.965734.97T:elephant176v2
5890.705895.725902.89T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.191.201.26T:aes128gcmv1
1.401.411.42aes256gcmv1
6.436.456.50ascon128av12
9.569.599.65ascon80pqv12
9.669.819.91ascon128v12
12.4512.5112.59T:schwaemm256128v2
13.0713.1613.19ascon128abi32v12
13.1113.1813.26T:xoodyakround3
16.3316.4316.47T:schwaemm192192v2
17.3017.3617.40T:schwaemm256256v2
18.2518.2818.33T:schwaemm128128v2
19.0919.1419.19ascon128bi32v12
19.4819.6119.72T:isapa128v20
22.5022.5522.58T:grain128aeadv2
26.2826.3826.48T:isapa128av20
31.8032.3732.41T:isapk128av20
33.0733.1633.23T:giftcofb128v1
38.8038.8538.92romulusn
40.5440.5840.68T:isapk128v20
44.6044.6844.87romulust
62.1962.2562.32romulusm
65.4165.4465.75T:tinyjambu128v2
77.8877.9377.98T:tinyjambu192v2
83.8483.8883.94T:tinyjambu256v2
98.7698.8998.96T:isapxv20
167.61168.41169.03T:elephant200v2
5698.695704.355714.10T:elephant176v2
5891.855894.495896.83T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.850.860.87T:aes128gcmv1
0.920.930.93aes256gcmv1
6.476.496.53ascon128av12
9.769.799.82ascon80pqv12
9.749.849.90ascon128v12
10.1710.2010.24T:xoodyakround3
12.3212.3612.39T:schwaemm256128v2
13.3113.3413.37ascon128abi32v12
16.3416.4416.46T:schwaemm192192v2
17.2617.3317.40T:schwaemm256256v2
18.2018.2318.26T:schwaemm128128v2
19.2519.2819.32ascon128bi32v12
23.0623.1523.19T:grain128aeadv2
29.4229.5029.58T:isapa128v20
31.1031.1331.16romulusn
32.7232.7732.82T:isapa128av20
32.9432.9833.02T:giftcofb128v1
40.3440.5940.85T:isapk128av20
42.8142.8742.93romulusm
52.3352.9053.16T:isapk128v20
53.5653.6253.66T:tinyjambu128v2
61.0261.0461.11T:tinyjambu192v2
63.3163.3363.48T:tinyjambu256v2
87.0387.1487.19romulust
124.07124.41126.80T:elephant200v2
128.93130.09130.44T:isapxv20
4258.614268.094273.79T:elephant176v2
4420.224423.264428.60T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.750.770.78T:aes128gcmv1
0.850.860.86aes256gcmv1
6.436.456.46ascon128av12
9.709.739.75ascon80pqv12
9.729.799.82ascon128v12
10.1210.1510.18T:xoodyakround3
12.3312.3712.42T:schwaemm256128v2
13.1513.2513.30ascon128abi32v12
16.3216.3916.44T:schwaemm192192v2
17.2117.2617.38T:schwaemm256256v2
18.1818.2118.23T:schwaemm128128v2
19.2419.2819.31ascon128bi32v12
22.8022.8622.88T:grain128aeadv2
29.4429.5229.60T:isapa128v20
31.1231.1431.18romulusn
32.7132.7432.81T:isapa128av20
33.0033.0633.10T:giftcofb128v1
40.1940.4540.65T:isapk128av20
42.8842.9443.08romulusm
52.3752.8353.08T:isapk128v20
53.4853.5153.53T:tinyjambu128v2
60.9660.9861.01T:tinyjambu192v2
63.4063.4263.45T:tinyjambu256v2
86.9787.0387.14romulust
123.70124.46125.42T:elephant200v2
131.15131.39132.01T:isapxv20
4260.174268.674273.65T:elephant176v2
4418.164423.964432.43T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.750.750.77T:aes128gcmv1
0.850.850.86aes256gcmv1
6.446.456.46ascon128av12
9.709.749.76ascon80pqv12
9.709.779.82ascon128v12
10.1410.1910.22T:xoodyakround3
12.3412.3712.43T:schwaemm256128v2
13.2313.2813.32ascon128abi32v12
16.3316.3816.44T:schwaemm192192v2
17.2717.3417.43T:schwaemm256256v2
18.2118.2318.27T:schwaemm128128v2
19.2619.2919.33ascon128bi32v12
19.5419.5819.66T:isapa128v20
22.7722.8022.82T:grain128aeadv2
26.1426.2026.25T:isapa128av20
31.1231.1531.17romulusn
32.2232.3232.68T:isapk128av20
32.9833.0133.03T:giftcofb128v1
40.5340.5940.71T:isapk128v20
42.8642.8943.00romulusm
44.5144.5844.67romulust
53.4953.5453.62T:tinyjambu128v2
60.9660.9861.10T:tinyjambu192v2
63.3163.3463.44T:tinyjambu256v2
98.7898.8698.95T:isapxv20
125.10125.80126.87T:elephant200v2
4261.054266.314275.95T:elephant176v2
4421.384427.534435.52T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.290.310.32T:aes128gcmv1
0.28?0.31?0.32?aes256gcmv1
6.436.456.47ascon128av12
7.077.167.20T:xoodyakround3
9.689.729.75ascon80pqv12
9.739.769.78ascon128v12
12.1812.2512.31T:schwaemm256128v2
13.3113.3413.38ascon128abi32v12
16.2616.3216.39T:schwaemm192192v2
17.1717.3317.37T:schwaemm256256v2
18.1518.1718.20T:schwaemm128128v2
19.3719.4919.87ascon128bi32v12
19.5619.6219.73T:isapa128v20
22.9723.0823.12T:grain128aeadv2
23.4523.4923.54romulusn
23.4623.5023.57romulusm
26.0226.1326.32T:isapa128av20
32.2632.3532.46T:isapk128av20
32.9432.9733.08T:giftcofb128v1
40.3640.4640.53T:isapk128v20
41.3741.4141.46T:tinyjambu128v2
42.5842.6042.63T:tinyjambu256v2
43.8343.8643.95T:tinyjambu192v2
44.4544.5444.62romulust
81.7481.8783.27T:elephant200v2
96.6398.29100.07T:isapxv20
2816.572817.822827.75T:elephant176v2
2945.412949.742954.31T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.290.300.32T:aes128gcmv1
0.300.310.33aes256gcmv1
6.446.466.49ascon128av12
7.117.177.21T:xoodyakround3
9.749.769.79ascon128v12
9.729.799.83ascon80pqv12
12.1812.2512.30T:schwaemm256128v2
13.3213.3813.41ascon128abi32v12
16.2516.3416.54T:schwaemm192192v2
17.2017.2617.36T:schwaemm256256v2
18.1218.1618.21T:schwaemm128128v2
19.3219.3819.50ascon128bi32v12
19.5919.6619.73T:isapa128v20
23.0323.1223.18T:grain128aeadv2
23.4523.4923.74romulusm
23.4523.5023.53romulusn
25.9926.0326.11T:isapa128av20
32.2232.3032.41T:isapk128av20
32.9032.9533.00T:giftcofb128v1
40.4140.5040.54T:isapk128v20
41.3541.3941.42T:tinyjambu128v2
42.7342.7842.82T:tinyjambu256v2
43.8343.8743.92T:tinyjambu192v2
44.4644.5244.73romulust
83.2783.7484.15T:elephant200v2
98.6998.8198.93T:isapxv20
2815.732820.052828.84T:elephant176v2
2947.532949.052955.53T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.300.310.32T:aes128gcmv1
0.300.310.33aes256gcmv1
6.446.466.49ascon128av12
7.097.147.21T:xoodyakround3
9.769.789.81ascon128v12
9.749.799.82ascon80pqv12
12.2112.2612.30T:schwaemm256128v2
13.2813.3313.40ascon128abi32v12
16.2816.3416.36T:schwaemm192192v2
17.2017.3217.39T:schwaemm256256v2
18.1218.1518.18T:schwaemm128128v2
19.3619.4019.49ascon128bi32v12
19.5119.5819.67T:isapa128v20
22.9723.0323.09T:grain128aeadv2
23.4323.4923.52romulusn
23.4123.5023.57romulusm
25.9926.0526.13T:isapa128av20
32.2832.3632.43T:isapk128av20
32.9433.0333.09T:giftcofb128v1
40.4140.5040.56T:isapk128v20
41.3441.3841.46T:tinyjambu128v2
42.5642.5942.68T:tinyjambu256v2
43.8943.9944.44T:tinyjambu192v2
44.4444.5344.59romulust
81.3883.5983.84T:elephant200v2
98.8398.9299.05T:isapxv20
2818.372823.732832.34T:elephant176v2
2946.152948.332954.58T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.970.980.98T:aes128gcmv1
1.051.051.06aes256gcmv1
6.646.656.66ascon128av12
9.919.939.97ascon80pqv12
9.869.969.99ascon128v12
10.2910.3110.34T:xoodyakround3
12.7412.7812.82T:schwaemm256128v2
13.5913.6413.70ascon128abi32v12
16.8016.8116.84T:schwaemm192192v2
17.8017.8417.86T:schwaemm256256v2
18.4318.4518.48T:schwaemm128128v2
19.6119.6419.67ascon128bi32v12
23.4723.4923.53T:grain128aeadv2
31.3931.4231.44romulusn
33.2333.3033.32T:giftcofb128v1
34.7734.8434.87T:isapa128av20
42.8842.9543.01T:isapa128v20
43.1743.2143.26romulusm
45.6745.8345.85T:isapk128av20
54.1054.1254.21T:tinyjambu128v2
61.5961.6261.68T:tinyjambu192v2
63.8663.8763.88T:tinyjambu256v2
88.3188.3888.49romulust
91.4691.6891.75T:isapk128v20
127.55128.33129.05T:elephant200v2
217.16217.28217.45T:isapxv20
4291.274302.564315.01T:elephant176v2
4469.054471.184473.27T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.880.890.91T:aes128gcmv1
0.990.991.00aes256gcmv1
6.606.626.64ascon128av12
9.829.859.89ascon80pqv12
9.879.939.99ascon128v12
10.2410.2610.29T:xoodyakround3
12.7312.7712.80T:schwaemm256128v2
13.5713.5913.63ascon128abi32v12
16.7116.7616.80T:schwaemm192192v2
17.7317.8017.85T:schwaemm256256v2
18.4418.4518.50T:schwaemm128128v2
19.5919.6319.66ascon128bi32v12
23.1523.1823.20T:grain128aeadv2
31.4331.4731.53romulusn
33.2733.3133.41T:giftcofb128v1
34.7834.8334.87T:isapa128av20
42.8542.9142.95T:isapa128v20
43.2643.3143.35romulusm
45.7345.7945.84T:isapk128av20
54.0154.0254.03T:tinyjambu128v2
61.4861.5061.54T:tinyjambu192v2
63.9763.9864.03T:tinyjambu256v2
88.3488.4288.45romulust
91.4091.4791.68T:isapk128v20
126.35128.07128.39T:elephant200v2
219.75219.79219.96T:isapxv20
4292.034298.944304.51T:elephant176v2
4469.264470.324472.80T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.880.890.91T:aes128gcmv1
0.990.991.00aes256gcmv1
6.596.616.63ascon128av12
9.859.879.88ascon80pqv12
9.859.889.94ascon128v12
10.2510.2810.30T:xoodyakround3
12.7112.7312.77T:schwaemm256128v2
13.5513.5913.61ascon128abi32v12
16.7516.8016.87T:schwaemm192192v2
17.7417.7817.80T:schwaemm256256v2
18.4318.4618.49T:schwaemm128128v2
19.5919.6219.65ascon128bi32v12
23.1123.1523.18T:grain128aeadv2
26.3726.4026.51T:isapa128v20
27.3327.3727.41T:isapa128av20
31.4631.4931.54romulusn
33.2633.3333.37T:giftcofb128v1
35.6335.7735.85T:isapk128av20
43.2343.2643.29romulusm
45.8545.8845.92romulust
53.9954.0154.12T:tinyjambu128v2
61.0961.1161.13T:isapk128v20
61.5061.5161.65T:tinyjambu192v2
63.8763.8963.90T:tinyjambu256v2
126.74127.73127.93T:elephant200v2
144.06144.50144.64T:isapxv20
4291.924294.454304.38T:elephant176v2
4468.604472.024482.56T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.645.695.80T:aes128gcmv1
5.895.956.13aes256gcmv1
9.8910.0710.27ascon128av12
12.8812.9513.10ascon128v12
12.9413.0613.30ascon80pqv12
14.7714.8915.29T:xoodyakround3
20.3420.4820.79ascon128abi32v12
20.6921.0221.43T:schwaemm256128v2
23.6623.7724.24T:schwaemm128128v2
26.5026.7627.12ascon128bi32v12
27.2327.4827.96T:schwaemm192192v2
28.4128.8028.95T:schwaemm256256v2
31.2631.4031.58T:grain128aeadv2
37.7738.0138.25romulusn
39.4639.5539.66T:giftcofb128v1
50.4550.5950.87romulusm
65.4865.8266.73T:tinyjambu128v2
74.0374.2674.53T:tinyjambu192v2
76.8777.2377.69T:tinyjambu256v2
81.8081.9882.29T:isapa128av20
117.78117.91118.33romulust
157.30157.98161.16T:isapk128av20
176.65180.67181.79T:elephant200v2
350.02350.90352.19T:isapa128v20
967.95968.98979.95T:isapk128v20
2191.302192.262193.93T:isapxv20
5336.235339.545350.16T:elephant176v2
5977.365979.616012.68T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.425.485.55T:aes128gcmv1
5.475.515.55aes256gcmv1
9.9110.0010.20ascon128av12
12.8913.0013.09ascon128v12
12.9313.0913.39ascon80pqv12
14.7014.8614.98T:xoodyakround3
20.2320.5220.73ascon128abi32v12
20.7120.9921.63T:schwaemm256128v2
23.7123.7724.21T:schwaemm128128v2
26.6226.8327.08ascon128bi32v12
27.2927.4627.83T:schwaemm192192v2
28.0628.7729.40T:schwaemm256256v2
31.2131.2931.38T:grain128aeadv2
38.3938.4938.63romulusn
39.6039.7640.00T:giftcofb128v1
52.6052.8253.02romulusm
65.6265.9266.39T:tinyjambu128v2
74.1674.4274.71T:tinyjambu192v2
76.5876.9177.26T:tinyjambu256v2
81.8482.0982.35T:isapa128av20
117.65118.44119.05romulust
157.28157.71158.59T:isapk128av20
176.30179.95180.47T:elephant200v2
350.55351.49352.10T:isapa128v20
967.96969.08976.85T:isapk128v20
2225.232228.522229.22T:isapxv20
5334.095336.465343.90T:elephant176v2
5976.435978.796009.52T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.415.455.53T:aes128gcmv1
5.455.545.66aes256gcmv1
9.919.9910.05ascon128av12
12.8212.8913.08ascon128v12
12.9313.0613.25ascon80pqv12
14.7714.8715.27T:xoodyakround3
20.3420.5820.74ascon128abi32v12
20.5221.1221.27T:schwaemm256128v2
23.6823.8324.02T:schwaemm128128v2
26.7927.0027.12ascon128bi32v12
27.3027.5728.02T:schwaemm192192v2
27.9828.1728.58T:schwaemm256256v2
31.1431.2331.38T:grain128aeadv2
38.3438.4738.73romulusn
39.7439.7739.90T:giftcofb128v1
52.5552.6852.87romulusm
54.2654.5954.97T:isapa128av20
65.6265.9166.54T:tinyjambu128v2
74.2374.3874.68T:tinyjambu192v2
74.6375.2775.57romulust
76.7277.1277.32T:tinyjambu256v2
101.86102.11102.91T:isapk128av20
177.53178.39179.03T:elephant200v2
182.99183.29183.97T:isapa128v20
516.41516.77517.31T:isapk128v20
1165.321166.021166.77T:isapxv20
5340.135372.215467.98T:elephant176v2
5973.485977.235979.30T:elephant160v2

amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,1f626960,5600000, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.50?0.53?0.56?T:aes128gcmv1
0.620.630.67T:aes256gcmv1
1.521.541.56aes256gcmv1
3.853.944.04aes128gcmv1
6.536.576.60ascon128av12
9.839.889.91ascon128v12
9.689.9810.06ascon80pqv12
13.0213.0513.11ascon128abi32v12
13.4213.4713.50T:schwaemm256128v2
15.2515.3315.38T:xoodyakround3
17.6917.7817.87T:schwaemm192192v2
18.8818.9319.03T:schwaemm256256v2
19.8419.8919.93T:schwaemm128128v2
19.9019.9820.01ascon128bi32v12
24.3224.3924.45T:grain128aeadv2
38.4538.5038.54romulusn
39.1139.3339.44T:isapa128av20
38.9739.5239.82T:isapa128v20
39.7939.8439.89T:giftcofb128v1
49.2150.2750.65T:isapk128av20
54.9955.0555.09T:tinyjambu128v2
61.7061.7961.83romulusm
66.4966.6866.78T:tinyjambu192v2
66.9367.6768.38T:isapk128v20
71.0971.2171.30T:tinyjambu256v2
110.37110.87111.33T:elephant200v2
119.33119.43119.67romulust
119.84120.41120.95T:isapxv20
5774.245799.665811.41T:elephant176v2
5887.665892.355894.61T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.49?0.52?0.55?T:aes128gcmv1
0.570.600.63T:aes256gcmv1
1.401.411.43aes256gcmv1
3.793.873.95aes128gcmv1
6.576.636.67ascon128av12
9.759.799.82ascon128v12
9.729.8210.00ascon80pqv12
13.0113.0513.11ascon128abi32v12
13.3813.4113.46T:schwaemm256128v2
15.1015.2015.25T:xoodyakround3
17.6417.6817.74T:schwaemm192192v2
18.8919.1219.63T:schwaemm256256v2
19.7919.8319.87T:schwaemm128128v2
20.0120.0520.13ascon128bi32v12
23.6523.7023.74T:grain128aeadv2
38.5838.6238.63romulusn
39.3539.6439.97T:isapa128v20
39.6839.7339.83T:isapa128av20
39.8039.8439.87T:giftcofb128v1
49.3149.7750.40T:isapk128av20
54.8354.9154.96T:tinyjambu128v2
61.7361.8562.02romulusm
66.5166.5966.66T:tinyjambu192v2
67.1768.1168.91T:isapk128v20
70.7571.0271.37T:tinyjambu256v2
110.52110.73110.92T:elephant200v2
119.24119.37119.55romulust
119.83120.31120.65T:isapxv20
5775.675803.505816.53T:elephant176v2
5888.765890.425893.94T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.500.520.53T:aes128gcmv1
0.600.610.65T:aes256gcmv1
1.401.421.43aes256gcmv1
1.551.601.64aes128gcmv1
6.586.636.73ascon128av12
9.729.7710.00ascon80pqv12
9.759.789.84ascon128v12
13.0613.1213.13ascon128abi32v12
13.4113.4513.49T:schwaemm256128v2
15.1215.1815.25T:xoodyakround3
17.6217.6517.76T:schwaemm192192v2
18.9319.1120.38T:schwaemm256256v2
19.4519.5019.55T:isapa128v20
19.7819.8119.84T:schwaemm128128v2
19.9620.0520.16ascon128bi32v12
23.6723.7123.76T:grain128aeadv2
26.1426.3426.38T:isapa128av20
33.1033.3834.44T:isapk128av20
38.5538.6238.66romulusn
39.8139.8539.89T:giftcofb128v1
41.2941.4441.53romulust
42.0042.4043.36T:isapk128v20
54.8654.9255.00T:tinyjambu128v2
61.7661.9362.00romulusm
66.4566.5266.59T:tinyjambu192v2
70.8470.9971.16T:tinyjambu256v2
72.1272.3572.60T:isapxv20
110.51111.12111.37T:elephant200v2
5773.165791.975807.95T:elephant176v2
5889.615891.955895.48T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.360.380.39T:aes128gcmv1
0.400.430.44T:aes256gcmv1
0.910.920.93aes256gcmv1
2.682.732.78aes128gcmv1
6.486.586.61ascon128av12
9.589.669.76ascon80pqv12
9.819.829.85ascon128v12
11.4411.4811.54T:xoodyakround3
13.2513.3313.38ascon128abi32v12
13.3813.4213.47T:schwaemm256128v2
17.6517.7417.80T:schwaemm192192v2
18.8819.1020.42T:schwaemm256256v2
19.8319.8519.88T:schwaemm128128v2
20.1520.2120.24ascon128bi32v12
24.2924.3324.36T:grain128aeadv2
29.3729.4829.65T:isapa128v20
30.8530.8930.91romulusn
32.4532.5232.82T:isapa128av20
39.8039.8439.88T:giftcofb128v1
41.9442.2442.36T:isapk128av20
42.4842.5442.57romulusm
45.0345.0645.10T:tinyjambu128v2
52.0552.1152.22T:tinyjambu192v2
53.8053.8353.93T:tinyjambu256v2
54.0054.4655.29T:isapk128v20
80.3580.4580.50romulust
82.7783.1983.58T:elephant200v2
96.4696.9597.29T:isapxv20
4326.054337.544348.62T:elephant176v2
4416.234418.284419.31T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.34?0.37?0.40?T:aes128gcmv1
0.380.410.42T:aes256gcmv1
0.850.860.86aes256gcmv1
2.632.692.74aes128gcmv1
6.516.546.58ascon128av12
9.739.779.79ascon128v12
9.609.779.88ascon80pqv12
11.3711.3911.43T:xoodyakround3
13.2913.3313.36ascon128abi32v12
13.3213.3413.39T:schwaemm256128v2
17.6817.7117.76T:schwaemm192192v2
18.8619.0119.04T:schwaemm256256v2
19.7919.8219.86T:schwaemm128128v2
20.0520.1020.23ascon128bi32v12
23.8723.9224.03T:grain128aeadv2
29.3229.4229.68T:isapa128v20
30.8930.9430.96romulusn
32.8832.9933.08T:isapa128av20
39.7839.8139.82T:giftcofb128v1
41.6241.9242.32T:isapk128av20
42.4742.5442.61romulusm
44.9345.0045.04T:tinyjambu128v2
52.0452.0852.15T:tinyjambu192v2
53.6653.8753.93T:tinyjambu256v2
54.2255.1155.89T:isapk128v20
80.3480.4380.54romulust
83.1383.3383.52T:elephant200v2
96.2896.4496.65T:isapxv20
4329.284337.384348.08T:elephant176v2
4415.984418.704420.43T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.360.370.39T:aes128gcmv1
0.410.420.43T:aes256gcmv1
0.850.860.86aes256gcmv1
1.541.571.61aes128gcmv1
6.546.596.65ascon128av12
9.639.679.77ascon80pqv12
9.759.789.81ascon128v12
11.3911.4211.45T:xoodyakround3
13.3113.3413.37T:schwaemm256128v2
13.3113.3613.43ascon128abi32v12
17.6117.6517.71T:schwaemm192192v2
19.4419.4919.54T:isapa128v20
19.7819.8319.88T:schwaemm128128v2
20.0120.0520.08ascon128bi32v12
19.3020.5721.15T:schwaemm256256v2
23.8823.9124.04T:grain128aeadv2
26.2926.3426.40T:isapa128av20
30.8930.9230.96romulusn
33.4433.5933.85T:isapk128av20
39.7839.8139.84T:giftcofb128v1
41.2441.3941.44romulust
41.9042.1642.33T:isapk128v20
42.5642.6142.67romulusm
44.9144.9545.00T:tinyjambu128v2
51.9952.0852.14T:tinyjambu192v2
53.7353.8654.04T:tinyjambu256v2
72.2672.3672.54T:isapxv20
82.8983.0383.45T:elephant200v2
4329.634335.944345.95T:elephant176v2
4416.634418.324419.49T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.21?0.23?0.27?T:aes256gcmv1
0.21?0.23?0.26?T:aes128gcmv1
0.290.310.32aes256gcmv1
1.501.531.58aes128gcmv1
6.386.516.61ascon128av12
7.607.657.70T:xoodyakround3
9.719.749.79ascon128v12
9.609.9010.31ascon80pqv12
13.2613.3213.36T:schwaemm256128v2
13.3913.5113.61ascon128abi32v12
17.5717.6217.73T:schwaemm192192v2
18.87?19.00?21.12?T:schwaemm256256v2
19.4519.5419.57T:isapa128v20
19.7819.8019.84T:schwaemm128128v2
20.1920.2720.48ascon128bi32v12
23.2123.2523.29romulusn
23.2223.2823.32romulusm
24.1024.1524.33T:grain128aeadv2
25.9926.1726.28T:isapa128av20
32.9333.6633.99T:isapk128av20
34.8334.8734.95T:tinyjambu128v2
36.2836.3636.45T:tinyjambu256v2
37.6537.7737.84T:tinyjambu192v2
39.7739.8239.90T:giftcofb128v1
41.3141.3741.40romulust
40.8841.6042.40T:isapk128v20
55.6955.8656.07T:elephant200v2
72.2972.5073.56T:isapxv20
2861.642876.062884.85T:elephant176v2
2942.642944.782946.14T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.210.220.23T:aes256gcmv1
0.220.220.24T:aes128gcmv1
0.290.300.32aes256gcmv1
1.441.521.56aes128gcmv1
6.396.486.58ascon128av12
7.577.657.68T:xoodyakround3
9.629.699.81ascon80pqv12
9.699.729.77ascon128v12
13.2713.3013.38T:schwaemm256128v2
13.5113.5913.65ascon128abi32v12
17.6317.7017.73T:schwaemm192192v2
19.4319.4819.54T:isapa128v20
19.7719.8119.85T:schwaemm128128v2
20.0720.1520.21ascon128bi32v12
20.0620.4120.55T:schwaemm256256v2
23.1923.2523.28romulusn
23.2623.3323.38romulusm
24.0924.2224.26T:grain128aeadv2
26.2026.2926.38T:isapa128av20
32.6033.1933.97T:isapk128av20
34.7734.8134.88T:tinyjambu128v2
36.2736.3236.39T:tinyjambu256v2
37.5237.5937.66T:tinyjambu192v2
39.7339.8039.87T:giftcofb128v1
41.1941.2541.37romulust
40.4141.7042.17T:isapk128v20
55.9056.0456.11T:elephant200v2
72.3372.5272.78T:isapxv20
2857.822867.942877.93T:elephant176v2
2942.442943.532945.34T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.21?0.22?0.24?T:aes128gcmv1
0.21?0.23?0.24?T:aes256gcmv1
0.290.300.31aes256gcmv1
1.501.531.58aes128gcmv1
6.446.546.61ascon128av12
7.577.627.65T:xoodyakround3
9.559.659.73ascon80pqv12
9.699.749.77ascon128v12
13.2413.2813.33T:schwaemm256128v2
13.5213.6113.67ascon128abi32v12
17.5917.6317.70T:schwaemm192192v2
18.8418.9219.28T:schwaemm256256v2
19.3819.4819.58T:isapa128v20
19.7719.8119.86T:schwaemm128128v2
20.0120.0620.21ascon128bi32v12
23.1923.2323.28romulusn
23.2023.2623.34romulusm
24.0524.0824.12T:grain128aeadv2
26.2426.3526.43T:isapa128av20
32.9133.2733.93T:isapk128av20
34.8434.8834.94T:tinyjambu128v2
36.2936.3436.53T:tinyjambu256v2
37.5037.5737.62T:tinyjambu192v2
39.7639.8239.89T:giftcofb128v1
41.2341.3141.41romulust
40.6441.5442.87T:isapk128v20
55.6055.7055.77T:elephant200v2
72.2772.5072.83T:isapxv20
2846.972861.922876.41T:elephant176v2
2941.912943.812945.32T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.730.730.74T:aes128gcmv1
0.780.790.79T:aes256gcmv1
1.061.061.06aes256gcmv1
2.802.862.89aes128gcmv1
6.646.696.71ascon128av12
9.729.779.90ascon80pqv12
9.919.949.96ascon128v12
11.5911.6011.62T:xoodyakround3
13.5913.6113.69ascon128abi32v12
13.7413.7713.81T:schwaemm256128v2
18.0518.1018.15T:schwaemm192192v2
19.5219.5519.99T:schwaemm256256v2
20.1120.1220.15T:schwaemm128128v2
20.4220.4720.55ascon128bi32v12
24.5224.5724.64T:grain128aeadv2
31.1231.1431.17romulusn
36.1736.2636.48T:isapa128av20
40.1240.1440.17T:giftcofb128v1
42.8142.8942.91romulusm
42.6342.9743.03T:isapa128v20
45.5145.5345.56T:tinyjambu128v2
46.7546.9747.32T:isapk128av20
52.7052.7152.76T:tinyjambu192v2
54.3054.3754.42T:tinyjambu256v2
81.5881.6281.67romulust
84.4684.6784.75T:elephant200v2
94.0694.3894.90T:isapk128v20
159.54160.06160.28T:isapxv20
4355.054360.724376.38T:elephant176v2
4466.114467.924468.53T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.720.730.74T:aes128gcmv1
0.780.780.80T:aes256gcmv1
1.001.011.03aes256gcmv1
2.862.882.91aes128gcmv1
6.686.726.73ascon128av12
9.819.849.88ascon80pqv12
9.889.909.93ascon128v12
11.5411.5711.60T:xoodyakround3
13.5713.6413.69ascon128abi32v12
13.7213.7513.77T:schwaemm256128v2
18.0818.1218.18T:schwaemm192192v2
19.5419.5920.70T:schwaemm256256v2
20.0720.0920.11T:schwaemm128128v2
20.3520.4220.47ascon128bi32v12
24.2724.3524.38T:grain128aeadv2
31.2331.2431.26romulusn
36.6836.7136.76T:isapa128av20
40.1540.1640.18T:giftcofb128v1
42.7042.9343.04T:isapa128v20
42.9042.9743.03romulusm
45.3845.4045.43T:tinyjambu128v2
46.6747.0447.22T:isapk128av20
52.6152.6552.69T:tinyjambu192v2
54.3854.4254.49T:tinyjambu256v2
81.5381.5981.63romulust
84.7384.7684.85T:elephant200v2
93.9794.1694.54T:isapk128v20
160.11160.43161.89T:isapxv20
4363.254378.864384.88T:elephant176v2
4464.694467.334469.24T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.730.730.74T:aes128gcmv1
0.790.790.80T:aes256gcmv1
1.001.011.01aes256gcmv1
1.691.711.74aes128gcmv1
6.726.746.77ascon128av12
9.869.909.92ascon80pqv12
9.889.919.92ascon128v12
11.5511.5611.63T:xoodyakround3
13.5913.6513.68ascon128abi32v12
13.7113.7313.77T:schwaemm256128v2
18.0918.1118.14T:schwaemm192192v2
19.5119.5821.04T:schwaemm256256v2
20.0620.0920.12T:schwaemm128128v2
20.3620.4020.42ascon128bi32v12
24.2624.2824.31T:grain128aeadv2
26.2226.2526.28T:isapa128v20
28.1728.3328.38T:isapa128av20
31.1931.2131.25romulusn
36.4736.5836.92T:isapk128av20
40.1240.1540.19T:giftcofb128v1
42.5342.5842.65romulust
42.9042.9743.02romulusm
45.3645.3745.38T:tinyjambu128v2
52.5652.6452.74T:tinyjambu192v2
54.1854.3254.35T:tinyjambu256v2
62.2162.5162.71T:isapk128v20
84.2784.4284.88T:elephant200v2
104.76104.93105.12T:isapxv20
4370.034379.694383.61T:elephant176v2
4463.364467.954468.83T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.375.505.88aes128gcmv1
5.615.675.76aes256gcmv1
8.909.269.46T:aes128gcmv1
9.239.459.80T:aes256gcmv1
10.4310.4710.62ascon128av12
12.7212.8613.20ascon80pqv12
12.8112.9113.13ascon128v12
16.7317.0017.36T:xoodyakround3
20.0920.2020.45ascon128abi32v12
22.4022.5522.93T:schwaemm256128v2
25.5725.7025.92T:schwaemm128128v2
27.2327.4827.73ascon128bi32v12
29.0429.3729.72T:schwaemm192192v2
30.9131.2031.32T:schwaemm256256v2
32.4432.5632.82T:grain128aeadv2
37.5537.6537.84romulusn
47.3447.4047.59T:giftcofb128v1
50.0950.2250.45romulusm
55.7756.0056.48T:tinyjambu128v2
64.2064.7765.02T:tinyjambu192v2
65.7366.2566.98T:tinyjambu256v2
108.10108.41108.56romulust
118.66119.13119.95T:isapa128av20
118.83119.31119.55T:elephant200v2
150.56151.32151.87T:isapk128av20
348.84349.33349.73T:isapa128v20
982.64994.36999.28T:isapk128v20
1595.761598.551603.76T:isapxv20
5450.505465.415489.15T:elephant176v2
5980.665982.715984.94T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.825.885.96aes256gcmv1
6.797.277.54aes128gcmv1
9.019.129.46T:aes128gcmv1
9.409.459.90T:aes256gcmv1
10.1810.4210.57ascon128av12
12.9012.9513.07ascon80pqv12
12.9113.0013.12ascon128v12
16.6416.9317.21T:xoodyakround3
20.2020.4720.77ascon128abi32v12
22.2322.3622.73T:schwaemm256128v2
25.4625.5525.72T:schwaemm128128v2
27.0527.2427.58ascon128bi32v12
29.4129.6630.26T:schwaemm192192v2
32.3732.7632.90T:grain128aeadv2
33.3333.6633.97T:schwaemm256256v2
37.9438.0638.14romulusn
47.4747.5747.78T:giftcofb128v1
52.0652.2152.40romulusm
55.9056.1656.54T:tinyjambu128v2
63.9164.4464.71T:tinyjambu192v2
66.0066.2166.64T:tinyjambu256v2
108.49109.09109.73romulust
119.41119.81120.23T:isapa128av20
119.68120.48120.65T:elephant200v2
150.74151.24151.88T:isapk128av20
349.05349.66350.49T:isapa128v20
986.64989.88998.09T:isapk128v20
1599.811601.711603.33T:isapxv20
5406.925410.485417.93T:elephant176v2
5976.945979.445988.31T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
4.814.955.24aes128gcmv1
5.785.845.91aes256gcmv1
9.029.079.23T:aes128gcmv1
9.389.449.63T:aes256gcmv1
10.1310.2010.37ascon128av12
12.8212.9513.04ascon80pqv12
12.8813.0313.15ascon128v12
16.5917.2317.30T:xoodyakround3
20.3320.5220.64ascon128abi32v12
22.2922.4222.60T:schwaemm256128v2
25.4925.5425.84T:schwaemm128128v2
27.0527.2727.69ascon128bi32v12
29.5529.7329.95T:schwaemm192192v2
30.9531.3032.94T:schwaemm256256v2
32.3832.6932.83T:grain128aeadv2
37.8138.0238.14romulusn
47.4847.6647.69T:giftcofb128v1
51.8052.1052.34romulusm
55.6156.1556.63T:tinyjambu128v2
64.0964.4364.78T:tinyjambu192v2
66.0466.5667.64T:tinyjambu256v2
69.0269.5769.94romulust
73.3873.5774.24T:isapa128av20
98.9299.3699.59T:isapk128av20
119.82120.47120.76T:elephant200v2
181.99182.29182.91T:isapa128v20
515.23518.23520.09T:isapk128v20
836.22839.32841.69T:isapxv20
5399.645405.665456.97T:elephant176v2
5977.955980.675985.84T:elephant160v2

amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,1f626960,3300000, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.51?0.58?0.62?T:aes128gcmv1
0.59?0.66?0.68?T:aes256gcmv1
1.381.401.41aes256gcmv1
4.174.234.32aes128gcmv1
6.176.196.47ascon128av12
8.918.938.97ascon80pqv12
8.928.948.96ascon128v12
11.1411.1611.19ascon128abi32v12
16.5716.5816.85T:schwaemm256128v2
16.6316.6716.69ascon128bi32v12
17.3517.4017.44T:xoodyakround3
21.6221.9422.49T:schwaemm256256v2
22.5622.6022.66T:schwaemm192192v2
22.2923.4223.58T:schwaemm128128v2
27.1827.2127.24T:grain128aeadv2
36.5436.5736.62romulusn
36.9236.9737.04T:isapa128v20
38.7938.8338.86T:giftcofb128v1
38.6438.9639.47T:isapa128av20
51.3751.4151.46T:tinyjambu128v2
59.3159.4259.55T:tinyjambu192v2
60.2160.3460.48romulusm
60.3360.5660.70T:isapk128av20
61.3262.3762.63T:tinyjambu256v2
79.7380.0580.41T:isapk128v20
114.63114.74114.99romulust
146.12147.74148.16T:elephant200v2
135.13?159.66?184.22?T:isapxv20
6374.596421.016532.33T:elephant176v2
7706.787776.927888.41T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.49?0.58?0.62?T:aes128gcmv1
0.52?0.67?0.71?T:aes256gcmv1
1.411.421.44aes256gcmv1
4.214.284.35aes128gcmv1
6.016.046.06ascon128av12
8.908.928.94ascon128v12
8.928.958.96ascon80pqv12
11.0911.1111.14ascon128abi32v12
16.5916.6316.85T:schwaemm256128v2
16.7716.7916.81ascon128bi32v12
16.9617.4817.59T:xoodyakround3
21.5321.8922.52T:schwaemm256256v2
22.5822.6222.67T:schwaemm192192v2
22.3023.4323.60T:schwaemm128128v2
26.9627.0927.18T:grain128aeadv2
36.4236.5736.71romulusn
36.8836.9837.08T:isapa128v20
38.9238.9739.00T:giftcofb128v1
38.5938.9739.52T:isapa128av20
51.4251.4851.52T:tinyjambu128v2
58.0859.1859.29T:tinyjambu192v2
60.2060.4060.53romulusm
60.4260.5760.65T:isapk128av20
61.1562.6462.72T:tinyjambu256v2
79.6779.9380.35T:isapk128v20
114.66114.98115.05romulust
145.77147.39147.82T:elephant200v2
159.37160.00160.36T:isapxv20
6374.386421.356532.37T:elephant176v2
7772.187775.167888.27T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.49?0.55?0.60?T:aes128gcmv1
0.61?0.68?0.70?T:aes256gcmv1
1.401.411.42aes256gcmv1
1.441.501.52aes128gcmv1
6.046.066.07ascon128av12
8.908.918.93ascon128v12
8.928.938.96ascon80pqv12
11.1011.1211.15ascon128abi32v12
16.5716.6116.86T:schwaemm256128v2
16.7616.7916.81ascon128bi32v12
16.9717.0917.55T:xoodyakround3
18.4518.4718.54T:isapa128v20
21.5421.9022.49T:schwaemm256256v2
22.6122.6222.67T:schwaemm192192v2
22.2523.6023.68T:schwaemm128128v2
25.3525.5026.01T:isapa128av20
26.9927.1327.21T:grain128aeadv2
36.4236.6236.73romulusn
38.9538.9839.01T:giftcofb128v1
39.1839.2439.28romulust
40.0140.1140.24T:isapk128av20
49.7149.9050.29T:isapk128v20
51.4251.4751.54T:tinyjambu128v2
58.1359.1159.29T:tinyjambu192v2
60.2660.3860.52romulusm
62.1662.4663.51T:tinyjambu256v2
93.4693.6593.88T:isapxv20
145.80147.39147.87T:elephant200v2
6374.516421.026532.38T:elephant176v2
7732.477774.937849.78T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.39?0.43?0.49?T:aes128gcmv1
0.42?0.46?0.49?T:aes256gcmv1
0.930.940.95aes256gcmv1
2.822.852.89aes128gcmv1
6.206.216.24ascon128av12
8.878.898.91ascon128v12
8.888.928.93ascon80pqv12
11.0211.0511.07ascon128abi32v12
13.2713.2913.32T:xoodyakround3
16.5216.5616.99T:schwaemm256128v2
16.5916.6116.63ascon128bi32v12
21.6021.9022.43T:schwaemm256256v2
22.4122.5522.60T:schwaemm192192v2
23.2323.3023.69T:schwaemm128128v2
27.2427.2727.32T:grain128aeadv2
27.6727.7327.79T:isapa128v20
29.8629.8929.91romulusn
31.8931.9432.49T:isapa128av20
38.8038.8238.84T:giftcofb128v1
41.6441.6941.77romulusm
42.2242.2542.27T:tinyjambu128v2
46.4646.5746.66T:tinyjambu192v2
47.3747.8047.96T:tinyjambu256v2
50.2450.3150.40T:isapk128av20
64.9065.0965.25T:isapk128v20
76.9877.0177.03romulust
109.73111.31111.58T:elephant200v2
114.00?126.52?139.03?T:isapxv20
4796.094797.044805.48T:elephant176v2
5805.955842.875915.79T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.37?0.42?0.48?T:aes128gcmv1
0.41?0.48?0.51?T:aes256gcmv1
0.910.940.95aes256gcmv1
2.822.862.89aes128gcmv1
5.996.016.03ascon128av12
8.868.908.92ascon128v12
8.908.918.92ascon80pqv12
11.0011.0211.03ascon128abi32v12
12.9813.2413.44T:xoodyakround3
16.5116.5816.98T:schwaemm256128v2
16.6216.6416.69ascon128bi32v12
21.6321.8522.44T:schwaemm256256v2
22.3422.5722.60T:schwaemm192192v2
22.7923.3123.71T:schwaemm128128v2
27.1127.1527.25T:grain128aeadv2
27.6927.7227.79T:isapa128v20
29.8329.9329.99romulusn
31.8931.9432.49T:isapa128av20
38.7738.8438.90T:giftcofb128v1
41.5441.7541.80romulusm
42.2742.3042.32T:tinyjambu128v2
45.2446.4546.50T:tinyjambu192v2
47.3347.5148.04T:tinyjambu256v2
50.2150.2650.34T:isapk128av20
64.9565.0865.24T:isapk128v20
76.9877.0377.07romulust
109.61111.18111.42T:elephant200v2
125.98126.64127.29T:isapxv20
4786.344796.194805.61T:elephant176v2
5850.265900.485916.06T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.38?0.41?0.46?T:aes128gcmv1
0.44?0.47?0.49?T:aes256gcmv1
0.920.930.94aes256gcmv1
1.441.461.48aes128gcmv1
6.006.026.03ascon128av12
8.868.888.92ascon128v12
8.908.918.93ascon80pqv12
11.0011.0211.07ascon128abi32v12
12.9813.0313.16T:xoodyakround3
16.5316.5816.99T:schwaemm256128v2
16.6216.6416.66ascon128bi32v12
18.4418.4718.49T:isapa128v20
21.5921.8522.45T:schwaemm256256v2
22.4322.5422.61T:schwaemm192192v2
22.7923.3023.70T:schwaemm128128v2
25.3225.3725.87T:isapa128av20
27.1227.1627.23T:grain128aeadv2
29.8329.8929.99romulusn
38.7838.8238.84T:giftcofb128v1
39.1539.1639.20romulust
40.0240.1340.22T:isapk128av20
41.5641.6041.72romulusm
42.2642.2842.30T:tinyjambu128v2
46.4146.5447.09T:tinyjambu192v2
47.2747.4747.60T:tinyjambu256v2
49.9550.0150.10T:isapk128v20
93.1493.6093.87T:isapxv20
109.50111.17111.34T:elephant200v2
4786.284796.304805.49T:elephant176v2
5850.355900.385915.89T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.20?0.22?0.27?T:aes128gcmv1
0.23?0.26?0.29?T:aes256gcmv1
0.460.480.49aes256gcmv1
1.401.411.43aes128gcmv1
5.955.986.21ascon128av12
8.798.818.85ascon128v12
8.868.878.89ascon80pqv12
9.009.079.09T:xoodyakround3
10.8810.9110.93ascon128abi32v12
16.4416.4816.94T:schwaemm256128v2
16.5416.5516.57ascon128bi32v12
18.3818.4118.48T:isapa128v20
21.5621.8322.36T:schwaemm256256v2
22.3522.4422.48T:schwaemm192192v2
22.8922.9723.05romulusm
21.8022.9823.27T:schwaemm128128v2
23.2023.2223.23romulusn
25.3025.5226.02T:isapa128av20
27.2527.3727.42T:grain128aeadv2
31.3432.3832.43T:tinyjambu256v2
33.0933.1233.16T:tinyjambu128v2
33.5933.6634.94T:tinyjambu192v2
38.7338.7738.85T:giftcofb128v1
39.0539.0839.14romulust
39.8240.1340.47T:isapk128av20
50.0450.5150.66T:isapk128v20
73.4874.3674.63T:elephant200v2
68.37?93.03?118.26?T:isapxv20
3145.913162.623173.18T:elephant176v2
3881.493897.283907.76T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.22?0.26?0.30?T:aes128gcmv1
0.24?0.27?0.30?T:aes256gcmv1
0.440.460.47aes256gcmv1
1.431.431.47aes128gcmv1
5.945.955.98ascon128av12
8.828.868.91ascon128v12
8.858.888.89ascon80pqv12
9.039.069.12T:xoodyakround3
10.9010.9210.94ascon128abi32v12
16.4216.4716.94T:schwaemm256128v2
16.4716.4916.51ascon128bi32v12
18.4018.4518.46T:isapa128v20
21.5921.7722.38T:schwaemm256256v2
22.3522.4022.49T:schwaemm192192v2
21.8322.9923.26T:schwaemm128128v2
22.8323.0123.05romulusm
23.1623.1823.25romulusn
25.3625.5325.97T:isapa128av20
27.1327.3027.35T:grain128aeadv2
32.3132.3632.48T:tinyjambu256v2
33.0633.0933.11T:tinyjambu128v2
33.5333.6634.92T:tinyjambu192v2
38.7138.7338.76T:giftcofb128v1
39.1139.2939.35romulust
39.7040.0940.44T:isapk128av20
49.9250.3050.62T:isapk128v20
73.5774.3774.62T:elephant200v2
92.8292.9393.61T:isapxv20
3145.923162.373173.27T:elephant176v2
3842.313896.713907.48T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.20?0.23?0.27?T:aes128gcmv1
0.23?0.26?0.28?T:aes256gcmv1
0.450.450.46aes256gcmv1
1.401.431.46aes128gcmv1
5.945.965.96ascon128av12
8.838.858.90ascon128v12
8.848.868.89ascon80pqv12
9.029.079.12T:xoodyakround3
10.9010.9310.95ascon128abi32v12
16.4716.4916.52ascon128bi32v12
16.4516.5216.92T:schwaemm256128v2
18.3818.4318.48T:isapa128v20
21.6221.7922.37T:schwaemm256256v2
22.3622.4422.47T:schwaemm192192v2
21.7822.9023.26T:schwaemm128128v2
22.9923.0123.02romulusm
23.1723.2223.26romulusn
25.3325.5226.01T:isapa128av20
27.1927.2727.38T:grain128aeadv2
33.0533.0833.11T:tinyjambu128v2
32.3933.3333.41T:tinyjambu256v2
33.5934.9134.96T:tinyjambu192v2
38.7538.7738.81T:giftcofb128v1
39.0639.0939.19romulust
39.5740.1040.46T:isapk128av20
49.9750.3550.67T:isapk128v20
73.5274.3674.60T:elephant200v2
92.7993.0093.70T:isapxv20
3145.733162.553173.16T:elephant176v2
3842.343904.223916.49T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.870.880.90T:aes128gcmv1
0.910.930.94T:aes256gcmv1
1.041.041.05aes256gcmv1
2.952.973.01aes128gcmv1
6.376.386.39ascon128av12
9.039.049.06ascon128v12
9.059.069.06ascon80pqv12
11.3011.3111.32ascon128abi32v12
13.4313.4413.48T:xoodyakround3
16.8716.8816.89ascon128bi32v12
17.0617.0817.49T:schwaemm256128v2
22.2922.4923.00T:schwaemm256256v2
22.8723.0423.07T:schwaemm192192v2
23.7223.7424.03T:schwaemm128128v2
27.5327.5827.60T:grain128aeadv2
30.1930.2330.28romulusn
35.1235.1535.85T:isapa128av20
39.1439.1639.20T:giftcofb128v1
40.4440.4640.50T:isapa128v20
41.9942.0142.05romulusm
42.5842.6042.63T:tinyjambu128v2
46.7647.0447.22T:tinyjambu192v2
47.9348.2748.60T:tinyjambu256v2
58.2358.3058.42T:isapk128av20
78.0578.0878.20romulust
112.26113.26113.64T:elephant200v2
115.17115.30115.36T:isapk128v20
205.49206.48221.91T:isapxv20
4798.624842.184871.99T:elephant176v2
5918.315948.875959.78T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.850.870.90T:aes128gcmv1
0.900.910.92T:aes256gcmv1
1.041.051.06aes256gcmv1
2.983.023.06aes128gcmv1
6.166.176.19ascon128av12
9.019.039.06ascon128v12
9.049.059.06ascon80pqv12
11.2811.2911.30ascon128abi32v12
13.1313.4013.48T:xoodyakround3
16.9016.9216.94ascon128bi32v12
17.0517.0717.49T:schwaemm256128v2
22.2422.4222.97T:schwaemm256256v2
22.8423.0223.05T:schwaemm192192v2
23.3423.7524.05T:schwaemm128128v2
27.4327.4627.51T:grain128aeadv2
30.1930.2430.32romulusn
35.2235.2535.93T:isapa128av20
39.1839.2239.26T:giftcofb128v1
40.4440.4540.51T:isapa128v20
41.9242.0642.11romulusm
42.6142.6342.65T:tinyjambu128v2
46.7746.8147.22T:tinyjambu192v2
47.6747.8048.49T:tinyjambu256v2
58.2658.2958.43T:isapk128av20
78.0678.1178.21romulust
111.99113.15113.48T:elephant200v2
115.22115.29115.36T:isapk128v20
205.48206.38206.92T:isapxv20
4798.474841.994871.90T:elephant176v2
5908.525918.345959.79T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.850.850.87T:aes128gcmv1
0.890.900.92T:aes256gcmv1
1.031.041.04aes256gcmv1
1.591.611.63aes128gcmv1
6.156.166.17ascon128av12
9.019.029.04ascon128v12
9.049.059.06ascon80pqv12
11.2611.2711.30ascon128abi32v12
13.1613.1813.33T:xoodyakround3
16.9016.9116.92ascon128bi32v12
17.0617.0917.48T:schwaemm256128v2
22.2522.4222.96T:schwaemm256256v2
22.8523.0323.05T:schwaemm192192v2
23.3123.7424.04T:schwaemm128128v2
24.9024.9124.93T:isapa128v20
27.1827.2327.81T:isapa128av20
27.4227.4527.50T:grain128aeadv2
30.2230.2730.28romulusn
39.1839.2139.25T:giftcofb128v1
40.2840.3040.31romulust
41.9642.0642.11romulusm
42.5942.6142.64T:tinyjambu128v2
45.3245.4245.46T:isapk128av20
45.6046.7846.85T:tinyjambu192v2
47.8248.3348.81T:tinyjambu256v2
76.7776.8376.86T:isapk128v20
111.99113.10113.46T:elephant200v2
133.83134.37134.58T:isapxv20
4798.354841.784871.92T:elephant176v2
5907.755918.485952.28T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.165.235.37aes256gcmv1
5.645.805.95aes128gcmv1
9.9410.1810.54ascon128av12
11.1411.3412.10T:aes128gcmv1
11.5111.8612.53T:aes256gcmv1
11.9912.2112.36ascon128v12
12.2112.4312.74ascon80pqv12
17.0017.2717.64ascon128abi32v12
19.2319.4119.66T:xoodyakround3
22.6722.8623.26ascon128bi32v12
27.9428.2128.79T:schwaemm256128v2
29.9830.2530.70T:schwaemm128128v2
34.3534.3934.56T:grain128aeadv2
35.6836.3236.82T:schwaemm256256v2
37.2037.4037.90T:schwaemm192192v2
37.8838.1038.21romulusn
47.0947.1947.38T:giftcofb128v1
48.9249.2749.56romulusm
49.8450.0450.29T:tinyjambu128v2
54.7054.9855.66T:tinyjambu192v2
56.1256.7357.09T:tinyjambu256v2
104.48104.64104.92romulust
108.52108.74109.23T:isapa128av20
160.02160.35161.02T:elephant200v2
231.66232.61234.92T:isapk128av20
332.36332.66333.05T:isapa128v20
1254.591256.841258.91T:isapk128v20
2015.50?2016.12?2387.44?T:isapxv20
5987.486002.336003.12T:elephant176v2
7947.887988.268015.92T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.015.055.42aes256gcmv1
6.456.686.83aes128gcmv1
9.499.7310.14ascon128av12
11.0611.2912.02T:aes128gcmv1
11.3011.4112.09T:aes256gcmv1
12.0212.1812.38ascon80pqv12
12.0912.3212.75ascon128v12
17.0517.3017.80ascon128abi32v12
19.1719.2919.82T:xoodyakround3
22.9123.0423.74ascon128bi32v12
27.8028.0328.86T:schwaemm256128v2
29.6429.9130.30T:schwaemm128128v2
34.6434.7734.96T:grain128aeadv2
35.8836.3236.82T:schwaemm256256v2
37.0137.2737.55T:schwaemm192192v2
38.1338.2438.43romulusn
47.4947.5847.65T:giftcofb128v1
49.9850.1250.34T:tinyjambu128v2
50.0250.2550.43romulusm
55.2455.6956.38T:tinyjambu192v2
56.0456.2557.12T:tinyjambu256v2
104.52104.73105.08romulust
110.92111.39111.88T:isapa128av20
158.88160.22160.73T:elephant200v2
231.99233.28234.52T:isapk128av20
333.20333.45333.62T:isapa128v20
1253.211256.971258.42T:isapk128v20
2016.422017.762021.74T:isapxv20
5984.546001.256003.02T:elephant176v2
7948.847981.437987.75T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
4.794.895.29aes128gcmv1
4.925.095.16aes256gcmv1
9.509.559.85ascon128av12
11.2411.3811.62T:aes256gcmv1
11.2911.4111.77T:aes128gcmv1
11.9412.0312.23ascon128v12
12.0712.2212.37ascon80pqv12
17.0317.0917.16ascon128abi32v12
19.5219.8619.88T:xoodyakround3
22.8822.9423.17ascon128bi32v12
27.8027.9228.62T:schwaemm256128v2
29.5729.8430.23T:schwaemm128128v2
34.4134.5734.70T:grain128aeadv2
35.6235.9236.71T:schwaemm256256v2
36.9137.1037.27T:schwaemm192192v2
38.1238.1638.19romulusn
47.4547.5547.62T:giftcofb128v1
49.9950.0650.12T:tinyjambu128v2
50.0450.1550.46romulusm
54.9155.1555.41T:tinyjambu192v2
56.0256.2356.61T:tinyjambu256v2
65.7866.1666.35romulust
69.4869.6870.18T:isapa128av20
156.01157.39157.91T:isapk128av20
158.77160.00160.70T:elephant200v2
173.62174.06174.16T:isapa128v20
677.56680.42681.11T:isapk128v20
1052.881054.231057.92T:isapxv20
5985.586002.086003.23T:elephant176v2
7948.347981.427985.78T:elephant160v2

amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.520.530.56T:aes128gcmv1
0.610.630.66T:aes256gcmv1
1.531.541.55aes256gcmv1
3.934.024.06aes128gcmv1
6.516.546.58ascon128av12
9.839.879.91ascon128v12
9.659.9710.05ascon80pqv12
13.0213.0513.10ascon128abi32v12
13.4013.4613.51T:schwaemm256128v2
15.2715.3015.34T:xoodyakround3
17.7217.7717.83T:schwaemm192192v2
18.9019.0919.74T:schwaemm256256v2
19.8319.8819.92T:schwaemm128128v2
19.9019.9720.03ascon128bi32v12
24.2424.2824.38T:grain128aeadv2
38.4838.5138.55romulusn
38.9039.0039.09T:isapa128av20
39.3939.7839.94T:isapa128v20
39.7939.8339.88T:giftcofb128v1
49.5150.3550.64T:isapk128av20
55.0355.1055.18T:tinyjambu128v2
61.7461.8061.87romulusm
66.5366.6066.70T:tinyjambu192v2
65.7866.7368.25T:isapk128v20
71.1471.2371.29T:tinyjambu256v2
110.32110.54111.12T:elephant200v2
119.39119.46119.57romulust
120.04120.36120.85T:isapxv20
5757.835763.535811.83T:elephant176v2
5882.495887.005888.83T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.49?0.51?0.55?T:aes128gcmv1
0.560.590.62T:aes256gcmv1
1.401.421.43aes256gcmv1
3.863.974.07aes128gcmv1
6.566.636.74ascon128av12
9.729.8010.07ascon80pqv12
9.779.819.84ascon128v12
13.0313.0813.14ascon128abi32v12
13.3913.4513.49T:schwaemm256128v2
15.0915.1815.26T:xoodyakround3
17.7617.8117.90T:schwaemm192192v2
18.9119.0320.23T:schwaemm256256v2
19.8019.8319.86T:schwaemm128128v2
19.9820.0220.12ascon128bi32v12
23.6623.6823.72T:grain128aeadv2
38.5838.6138.65romulusn
39.3139.5839.84T:isapa128v20
39.5439.6439.79T:isapa128av20
39.8439.8639.89T:giftcofb128v1
49.4949.9050.26T:isapk128av20
54.8254.9054.98T:tinyjambu128v2
61.6261.7861.87romulusm
66.5666.6366.70T:tinyjambu192v2
65.8766.9668.78T:isapk128v20
70.8871.1171.28T:tinyjambu256v2
110.06110.49110.72T:elephant200v2
119.37119.44119.58romulust
119.99120.52120.79T:isapxv20
5762.295791.655831.15T:elephant176v2
5886.585889.175890.26T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.46?0.51?0.52?T:aes128gcmv1
0.590.600.62T:aes256gcmv1
1.411.421.43aes256gcmv1
1.541.601.66aes128gcmv1
6.576.636.69ascon128av12
9.729.7710.04ascon80pqv12
9.779.799.84ascon128v12
13.0413.1013.17ascon128abi32v12
13.4013.4413.51T:schwaemm256128v2
15.1515.2415.32T:xoodyakround3
17.7817.8317.89T:schwaemm192192v2
18.9218.9920.06T:schwaemm256256v2
19.4319.4919.56T:isapa128v20
19.7919.8319.87T:schwaemm128128v2
19.9720.0820.16ascon128bi32v12
23.6523.6823.72T:grain128aeadv2
26.2926.3926.49T:isapa128av20
33.1233.4333.79T:isapk128av20
38.5638.6038.67romulusn
39.7939.8339.88T:giftcofb128v1
40.0040.9541.88T:isapk128v20
41.2741.3341.48romulust
54.8554.9055.00T:tinyjambu128v2
61.7261.8861.93romulusm
66.5066.5766.60T:tinyjambu192v2
70.6371.0371.67T:tinyjambu256v2
72.1072.3073.27T:isapxv20
110.79110.99111.16T:elephant200v2
5763.195807.825827.86T:elephant176v2
5876.475888.375891.03T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.36?0.38?0.41?T:aes128gcmv1
0.39?0.42?0.44?T:aes256gcmv1
0.910.920.93aes256gcmv1
2.692.732.78aes128gcmv1
6.526.556.61ascon128av12
9.569.649.81ascon80pqv12
9.789.819.84ascon128v12
11.4511.4811.53T:xoodyakround3
13.1913.3213.41ascon128abi32v12
13.3513.4213.46T:schwaemm256128v2
17.6717.7417.79T:schwaemm192192v2
18.8719.0319.79T:schwaemm256256v2
19.8419.8619.89T:schwaemm128128v2
20.1020.2020.28ascon128bi32v12
24.1924.2524.39T:grain128aeadv2
29.3129.5829.67T:isapa128v20
30.8730.8930.93romulusn
32.4332.4932.55T:isapa128av20
39.7739.7939.82T:giftcofb128v1
41.6741.8242.10T:isapk128av20
42.5042.5242.55romulusm
44.9845.0245.10T:tinyjambu128v2
52.1352.1852.29T:tinyjambu192v2
53.7953.8353.95T:tinyjambu256v2
54.2154.8155.13T:isapk128v20
80.4380.4780.51romulust
82.0982.9683.57T:elephant200v2
96.3796.6696.89T:isapxv20
4314.974334.024348.90T:elephant176v2
4413.114414.064416.04T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.360.370.38T:aes128gcmv1
0.400.410.43T:aes256gcmv1
0.850.860.86aes256gcmv1
2.702.772.83aes128gcmv1
6.536.566.61ascon128av12
9.619.699.78ascon80pqv12
9.749.769.79ascon128v12
11.3611.4111.45T:xoodyakround3
13.2613.3313.38ascon128abi32v12
13.2913.3513.38T:schwaemm256128v2
17.6717.7317.77T:schwaemm192192v2
19.7819.8119.84T:schwaemm128128v2
20.0620.1020.14ascon128bi32v12
19.0620.5820.61T:schwaemm256256v2
23.9424.0424.09T:grain128aeadv2
29.2829.4429.67T:isapa128v20
30.9030.9331.00romulusn
32.9833.0233.06T:isapa128av20
39.7839.8239.85T:giftcofb128v1
41.5041.7242.17T:isapk128av20
42.5242.5842.63romulusm
44.9444.9745.02T:tinyjambu128v2
52.1052.1552.19T:tinyjambu192v2
53.7953.8453.88T:tinyjambu256v2
53.7254.4755.83T:isapk128v20
80.3380.3880.53romulust
82.8783.0583.09T:elephant200v2
96.1996.4096.68T:isapxv20
4318.144343.514361.05T:elephant176v2
4412.344414.094415.64T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.350.360.37T:aes128gcmv1
0.400.410.42T:aes256gcmv1
0.850.860.86aes256gcmv1
1.531.571.60aes128gcmv1
6.556.596.61ascon128av12
9.759.799.82ascon128v12
9.759.799.90ascon80pqv12
11.3911.4211.47T:xoodyakround3
13.3113.3413.39T:schwaemm256128v2
13.3213.3513.40ascon128abi32v12
17.6817.7217.76T:schwaemm192192v2
18.9019.0319.12T:schwaemm256256v2
19.4319.4819.51T:isapa128v20
19.7919.8119.83T:schwaemm128128v2
20.0320.0820.13ascon128bi32v12
24.0024.0624.09T:grain128aeadv2
26.1126.3026.37T:isapa128av20
30.9130.9430.99romulusn
33.4233.7334.03T:isapk128av20
39.7939.8239.85T:giftcofb128v1
41.3641.3941.44romulust
41.4242.1242.43T:isapk128v20
42.4942.5642.61romulusm
44.9144.9445.01T:tinyjambu128v2
52.1352.1852.23T:tinyjambu192v2
53.3953.7553.83T:tinyjambu256v2
72.4172.8073.05T:isapxv20
82.8083.1783.39T:elephant200v2
4316.184341.494358.60T:elephant176v2
4412.964414.844415.62T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.21?0.23?0.25?T:aes256gcmv1
0.21?0.24?0.27?T:aes128gcmv1
0.29?0.32?0.33?aes256gcmv1
1.451.521.55aes128gcmv1
6.506.576.63ascon128av12
7.597.687.82T:xoodyakround3
9.549.639.91ascon80pqv12
9.689.729.77ascon128v12
13.2713.3113.35T:schwaemm256128v2
13.3413.4813.59ascon128abi32v12
17.6017.6617.69T:schwaemm192192v2
18.8518.9920.23T:schwaemm256256v2
19.4719.5219.57T:isapa128v20
19.7519.8119.88T:schwaemm128128v2
20.1920.3820.53ascon128bi32v12
23.2423.2823.35romulusn
23.2723.3023.32romulusm
24.1124.2224.26T:grain128aeadv2
26.2426.3226.41T:isapa128av20
33.1533.7434.02T:isapk128av20
34.8034.8634.91T:tinyjambu128v2
36.2736.3436.55T:tinyjambu256v2
37.5537.6737.77T:tinyjambu192v2
39.7439.7939.86T:giftcofb128v1
41.3541.3941.45romulust
40.9641.9342.43T:isapk128v20
55.3955.9956.10T:elephant200v2
72.4672.8373.60T:isapxv20
2847.982885.032890.93T:elephant176v2
2938.352940.392941.18T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.19?0.22?0.24?T:aes128gcmv1
0.21?0.23?0.25?T:aes256gcmv1
0.290.310.32aes256gcmv1
1.38?1.51?1.57?aes128gcmv1
6.416.496.57ascon128av12
7.617.677.74T:xoodyakround3
9.589.639.71ascon80pqv12
9.709.729.77ascon128v12
13.2513.3013.37T:schwaemm256128v2
13.5213.5713.65ascon128abi32v12
17.6417.6917.76T:schwaemm192192v2
19.4319.5119.59T:isapa128v20
19.7719.8219.86T:schwaemm128128v2
20.0220.1220.18ascon128bi32v12
18.8120.4520.58T:schwaemm256256v2
23.1723.2723.36romulusm
23.2323.2723.32romulusn
24.0424.0824.12T:grain128aeadv2
26.2626.3426.38T:isapa128av20
33.0233.4133.88T:isapk128av20
34.8234.8434.90T:tinyjambu128v2
36.2536.3136.37T:tinyjambu256v2
37.4337.6037.67T:tinyjambu192v2
39.7539.8339.90T:giftcofb128v1
41.3141.3741.45romulust
41.0741.5942.19T:isapk128v20
55.8255.9456.04T:elephant200v2
72.0872.3072.56T:isapxv20
2847.172868.292878.81T:elephant176v2
2940.822942.582944.12T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.21?0.22?0.24?T:aes128gcmv1
0.21?0.24?0.26?T:aes256gcmv1
0.300.310.33aes256gcmv1
1.441.481.55aes128gcmv1
6.446.546.57ascon128av12
7.617.687.75T:xoodyakround3
9.559.629.71ascon80pqv12
9.709.749.79ascon128v12
13.2213.2613.35T:schwaemm256128v2
13.5413.5913.66ascon128abi32v12
17.5917.6817.72T:schwaemm192192v2
18.7818.9419.02T:schwaemm256256v2
19.3719.4619.53T:isapa128v20
19.7819.8319.87T:schwaemm128128v2
20.0220.1620.28ascon128bi32v12
23.2323.2523.35romulusn
23.2223.2923.34romulusm
24.0924.3724.42T:grain128aeadv2
26.2426.2926.35T:isapa128av20
33.0333.3933.89T:isapk128av20
34.8334.8734.92T:tinyjambu128v2
36.2736.3336.46T:tinyjambu256v2
37.5237.6137.69T:tinyjambu192v2
39.7739.8539.89T:giftcofb128v1
41.2141.2641.48romulust
40.8841.6142.95T:isapk128v20
55.4355.5955.83T:elephant200v2
72.1072.5572.68T:isapxv20
2846.122869.352881.98T:elephant176v2
2937.342940.622941.58T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.720.730.74T:aes128gcmv1
0.780.790.80T:aes256gcmv1
1.061.061.06aes256gcmv1
2.832.862.89aes128gcmv1
6.706.726.77ascon128av12
9.729.769.90ascon80pqv12
9.909.949.96ascon128v12
11.6111.6611.69T:xoodyakround3
13.5513.6613.68ascon128abi32v12
13.7613.8013.83T:schwaemm256128v2
18.1218.1318.20T:schwaemm192192v2
19.5419.6120.65T:schwaemm256256v2
20.0820.0920.11T:schwaemm128128v2
20.3920.4720.61ascon128bi32v12
24.5924.6224.67T:grain128aeadv2
31.1331.1531.18romulusn
36.1236.3736.62T:isapa128av20
40.1540.1740.19T:giftcofb128v1
42.8542.8842.91romulusm
42.6342.9643.02T:isapa128v20
45.5045.5145.54T:tinyjambu128v2
46.6346.7947.21T:isapk128av20
52.6052.6852.72T:tinyjambu192v2
54.3054.3254.39T:tinyjambu256v2
81.5981.6281.67romulust
84.5184.5785.37T:elephant200v2
93.2793.4593.89T:isapk128v20
159.93160.24160.46T:isapxv20
4339.184367.044385.99T:elephant176v2
4462.854464.154465.36T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.720.730.74T:aes128gcmv1
0.780.790.80T:aes256gcmv1
1.001.001.01aes256gcmv1
2.912.962.99aes128gcmv1
6.716.746.76ascon128av12
9.819.849.92ascon80pqv12
9.899.919.93ascon128v12
11.4911.5311.56T:xoodyakround3
13.6013.6313.67ascon128abi32v12
13.7013.7313.76T:schwaemm256128v2
18.1018.1218.17T:schwaemm192192v2
19.5419.7520.73T:schwaemm256256v2
20.0520.0720.09T:schwaemm128128v2
20.3320.4120.44ascon128bi32v12
24.3024.3424.41T:grain128aeadv2
31.2231.2431.26romulusn
36.6436.6836.74T:isapa128av20
40.1440.1740.19T:giftcofb128v1
42.6442.8642.97T:isapa128v20
42.9142.9943.05romulusm
45.3645.4045.44T:tinyjambu128v2
46.4246.8346.98T:isapk128av20
52.6652.7152.74T:tinyjambu192v2
54.3154.3654.39T:tinyjambu256v2
81.6181.6681.69romulust
84.5884.8785.09T:elephant200v2
92.9693.5993.95T:isapk128v20
159.54159.92160.05T:isapxv20
4342.314360.044390.19T:elephant176v2
4464.144464.394465.65T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.720.730.74T:aes128gcmv1
0.780.790.80T:aes256gcmv1
1.001.011.01aes256gcmv1
1.681.721.75aes128gcmv1
6.676.716.77ascon128av12
9.829.909.94ascon80pqv12
9.889.909.91ascon128v12
11.5311.5811.67T:xoodyakround3
13.5913.6513.68ascon128abi32v12
13.7413.7813.83T:schwaemm256128v2
18.1518.1718.24T:schwaemm192192v2
19.5419.5619.64T:schwaemm256256v2
20.0520.0720.10T:schwaemm128128v2
20.3220.4420.49ascon128bi32v12
24.2624.2824.38T:grain128aeadv2
26.2226.2626.28T:isapa128v20
28.3128.3528.41T:isapa128av20
31.2231.2331.24romulusn
36.4536.6236.94T:isapk128av20
40.1340.1440.18T:giftcofb128v1
42.5342.5742.62romulust
42.9443.0043.05romulusm
45.3945.4245.47T:tinyjambu128v2
52.6552.6952.73T:tinyjambu192v2
54.2854.3054.40T:tinyjambu256v2
61.6261.9662.36T:isapk128v20
84.6984.7284.78T:elephant200v2
104.96105.14105.57T:isapxv20
4345.104377.014392.95T:elephant176v2
4463.504464.014465.53T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.295.355.77aes128gcmv1
5.635.695.81aes256gcmv1
8.979.079.56T:aes128gcmv1
9.319.419.55T:aes256gcmv1
10.3210.3810.73ascon128av12
12.8512.9813.08ascon128v12
12.8213.0513.30ascon80pqv12
16.7717.1217.33T:xoodyakround3
20.0620.2320.45ascon128abi32v12
22.5222.6723.05T:schwaemm256128v2
25.4825.8125.98T:schwaemm128128v2
27.0027.2827.64ascon128bi32v12
28.9929.2929.74T:schwaemm192192v2
30.9031.2832.23T:schwaemm256256v2
32.5132.5932.72T:grain128aeadv2
37.4637.5937.77romulusn
47.2747.4147.48T:giftcofb128v1
50.0650.3550.82romulusm
55.9556.2856.88T:tinyjambu128v2
64.1564.3865.00T:tinyjambu192v2
66.0766.3167.15T:tinyjambu256v2
108.23108.49109.62romulust
118.61119.10119.36T:elephant200v2
118.90119.16119.54T:isapa128av20
150.97151.31152.55T:isapk128av20
348.89349.13349.98T:isapa128v20
972.69979.19986.98T:isapk128v20
1596.331599.591607.55T:isapxv20
5409.525458.005472.51T:elephant176v2
5978.245979.735983.34T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.705.805.91aes256gcmv1
6.83?7.40?8.01?aes128gcmv1
8.959.099.44T:aes128gcmv1
9.489.649.94T:aes256gcmv1
10.2010.3010.45ascon128av12
12.8813.0013.05ascon80pqv12
12.9213.0513.12ascon128v12
16.7416.9717.62T:xoodyakround3
20.2920.4420.61ascon128abi32v12
22.3022.6623.18T:schwaemm256128v2
25.4525.5325.77T:schwaemm128128v2
27.1327.5127.82ascon128bi32v12
29.2029.5730.18T:schwaemm192192v2
32.5932.7832.91T:grain128aeadv2
33.2733.6634.30T:schwaemm256256v2
37.9238.0338.20romulusn
47.5747.6047.73T:giftcofb128v1
52.1252.3452.58romulusm
56.0256.1356.80T:tinyjambu128v2
64.1864.3064.63T:tinyjambu192v2
65.7966.2366.46T:tinyjambu256v2
108.28108.90109.21romulust
119.32119.61120.14T:isapa128av20
119.72120.25120.56T:elephant200v2
150.78151.26151.81T:isapk128av20
349.41350.21350.48T:isapa128v20
970.16974.56986.78T:isapk128v20
1599.461600.341602.17T:isapxv20
5397.965403.275406.47T:elephant176v2
5978.595982.105984.24T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
4.915.005.25aes128gcmv1
5.685.785.86aes256gcmv1
9.019.189.27T:aes128gcmv1
9.41?9.76?10.63?T:aes256gcmv1
10.2310.3810.51ascon128av12
12.8312.9613.28ascon80pqv12
12.8612.9913.23ascon128v12
16.7317.2417.41T:xoodyakround3
20.3020.4220.48ascon128abi32v12
22.3122.5122.88T:schwaemm256128v2
25.3825.5425.82T:schwaemm128128v2
27.1727.6028.02ascon128bi32v12
28.9729.1029.23T:schwaemm192192v2
32.3132.5532.80T:grain128aeadv2
31.0332.9434.32T:schwaemm256256v2
38.0138.0938.33romulusn
47.4147.5647.65T:giftcofb128v1
51.7951.9652.33romulusm
55.7256.0356.34T:tinyjambu128v2
64.2564.5264.77T:tinyjambu192v2
65.7466.2366.38T:tinyjambu256v2
68.7769.3569.91romulust
73.6473.8474.10T:isapa128av20
98.7199.2399.57T:isapk128av20
119.58120.01120.31T:elephant200v2
182.25182.52182.80T:isapa128v20
510.91512.90516.76T:isapk128v20
837.39838.68839.60T:isapxv20
5409.735451.025459.41T:elephant176v2
5970.045972.765976.58T:elephant160v2

amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.940.960.98T:aes256gcmv1
1.511.521.53T:aes128gcmv1
1.661.681.69aes256gcmv1
5.165.315.37aes128gcmv1
6.406.416.43ascon128av12
9.379.389.40ascon128v12
9.409.429.42ascon80pqv12
11.1811.4011.42ascon128abi32v12
16.9617.0417.14ascon128bi32v12
17.9217.9718.01T:xoodyakround3
19.4519.5119.57T:schwaemm256128v2
23.7223.7223.72T:schwaemm256256v2
25.6625.7625.87T:schwaemm192192v2
27.1327.1527.21T:grain128aeadv2
27.5527.7127.90T:schwaemm128128v2
35.4735.5435.58romulusn
36.3936.4236.47T:isapa128av20
36.3836.6036.60T:isapa128v20
40.4640.5040.52T:giftcofb128v1
56.9257.1457.24romulusm
61.6261.6361.69T:tinyjambu128v2
64.9665.0065.18T:isapk128av20
68.9368.9568.97T:tinyjambu192v2
75.9675.9775.97T:tinyjambu256v2
84.7284.9785.57T:isapk128v20
112.30112.31112.33romulust
147.82148.32151.20T:isapxv20
227.91?229.83?254.80?T:elephant200v2
6455.936500.656506.11T:elephant176v2
7138.947141.247155.77T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.910.940.98T:aes256gcmv1
1.601.621.63T:aes128gcmv1
1.771.781.80aes256gcmv1
5.225.405.44aes128gcmv1
6.286.306.31ascon128av12
9.249.299.31ascon128v12
9.389.399.41ascon80pqv12
11.2111.2511.26ascon128abi32v12
16.7816.9216.98ascon128bi32v12
17.7517.8117.87T:xoodyakround3
19.4919.5719.66T:schwaemm256128v2
23.6723.7123.73T:schwaemm256256v2
25.6525.7225.84T:schwaemm192192v2
27.3627.5027.51T:grain128aeadv2
27.5227.6827.82T:schwaemm128128v2
35.5635.5835.64romulusn
36.2636.3236.42T:isapa128v20
36.4036.4436.49T:isapa128av20
40.5140.5240.57T:giftcofb128v1
57.1957.2457.36romulusm
61.4361.5461.58T:tinyjambu128v2
64.8165.0265.14T:isapk128av20
68.6668.7168.78T:tinyjambu192v2
76.0976.1076.13T:tinyjambu256v2
84.6585.3885.42T:isapk128v20
112.25112.29112.34romulust
148.09148.90151.35T:isapxv20
227.59?229.84?254.33?T:elephant200v2
6461.086499.806505.28T:elephant176v2
7138.797140.127155.71T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.890.930.94T:aes256gcmv1
1.591.611.62T:aes128gcmv1
1.561.621.66aes128gcmv1
1.761.781.79aes256gcmv1
6.286.286.32ascon128av12
9.259.289.30ascon128v12
9.379.379.39ascon80pqv12
11.2111.2311.25ascon128abi32v12
16.7316.9116.98ascon128bi32v12
17.7917.8217.89T:xoodyakround3
18.0118.0418.13T:isapa128v20
19.4819.5619.63T:schwaemm256128v2
23.6723.6923.72T:schwaemm256256v2
24.1624.1924.24T:isapa128av20
25.6725.7425.83T:schwaemm192192v2
27.3727.5027.54T:grain128aeadv2
27.5327.6027.79T:schwaemm128128v2
35.5835.6135.63romulusn
37.4837.5737.59romulust
40.5040.5340.57T:giftcofb128v1
44.2344.4544.66T:isapk128av20
54.5854.6154.65T:isapk128v20
57.2157.2657.30romulusm
61.4761.4961.54T:tinyjambu128v2
68.6868.7268.80T:tinyjambu192v2
75.9776.0576.09T:tinyjambu256v2
86.7086.9287.18T:isapxv20
227.71?229.85?254.55?T:elephant200v2
6456.206498.936505.09T:elephant176v2
7138.117141.587156.50T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.670.680.70T:aes256gcmv1
1.001.011.02T:aes128gcmv1
1.091.101.11aes256gcmv1
3.353.403.44aes128gcmv1
6.376.416.43ascon128av12
9.329.349.36ascon80pqv12
9.339.369.36ascon128v12
11.0611.1011.11ascon128abi32v12
13.4913.5213.57T:xoodyakround3
16.7916.8716.93ascon128bi32v12
19.3419.3819.43T:schwaemm256128v2
23.5923.6323.63T:schwaemm256256v2
25.6025.6425.72T:schwaemm192192v2
27.0927.1027.12T:grain128aeadv2
27.2627.4327.44T:isapa128v20
27.5027.6127.80T:schwaemm128128v2
28.6828.7228.75romulusn
30.2930.3230.33T:isapa128av20
39.5139.5539.60romulusm
40.3940.4140.44T:giftcofb128v1
50.6050.6650.69T:tinyjambu128v2
54.3154.3354.35T:tinyjambu192v2
54.7654.7954.86T:isapk128av20
57.9558.0258.06T:tinyjambu256v2
69.7269.7870.12T:isapk128v20
74.6974.9074.92romulust
117.17117.40117.77T:isapxv20
169.92?171.36?189.36?T:elephant200v2
4825.144857.254859.77T:elephant176v2
5352.575354.035367.51T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.650.680.69T:aes256gcmv1
1.041.051.06T:aes128gcmv1
1.141.141.16aes256gcmv1
3.343.413.46aes128gcmv1
6.336.346.35ascon128av12
9.309.319.31ascon128v12
9.339.349.35ascon80pqv12
11.0811.1011.11ascon128abi32v12
13.4313.4413.51T:xoodyakround3
16.6816.7616.80ascon128bi32v12
19.3719.4019.43T:schwaemm256128v2
23.5723.5823.59T:schwaemm256256v2
25.5825.6525.70T:schwaemm192192v2
27.2027.2627.31T:grain128aeadv2
27.1927.2827.32T:isapa128v20
27.5527.7127.78T:schwaemm128128v2
28.7428.7728.80romulusn
30.3030.3330.35T:isapa128av20
39.5139.6039.65romulusm
40.4040.4140.45T:giftcofb128v1
50.5950.6150.63T:tinyjambu128v2
54.2054.2154.22T:tinyjambu192v2
54.6554.7454.81T:isapk128av20
58.0958.1158.11T:tinyjambu256v2
69.6870.0970.13T:isapk128v20
74.8874.8974.92romulust
116.96117.29117.50T:isapxv20
169.78?171.36?189.52?T:elephant200v2
4826.424853.504857.66T:elephant176v2
5352.055353.425367.93T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.670.680.70T:aes256gcmv1
1.051.051.06T:aes128gcmv1
1.151.151.15aes256gcmv1
1.521.561.58aes128gcmv1
6.356.366.37ascon128av12
9.299.329.32ascon128v12
9.339.349.34ascon80pqv12
11.1011.1111.15ascon128abi32v12
13.4313.4613.50T:xoodyakround3
16.7016.7516.80ascon128bi32v12
18.1118.1218.26T:isapa128v20
19.3519.4019.43T:schwaemm256128v2
23.5823.5923.60T:schwaemm256256v2
24.1724.1924.21T:isapa128av20
25.6025.6325.65T:schwaemm192192v2
27.1927.2627.31T:grain128aeadv2
27.4327.5527.60T:schwaemm128128v2
28.7128.7428.77romulusn
37.5137.5337.55romulust
39.5839.6039.63romulusm
40.4040.4240.44T:giftcofb128v1
44.3844.4944.60T:isapk128av20
50.6250.6350.64T:tinyjambu128v2
54.2154.2154.26T:tinyjambu192v2
54.6454.6554.67T:isapk128v20
58.0558.0558.06T:tinyjambu256v2
86.2786.5586.73T:isapxv20
169.93?171.26?189.46?T:elephant200v2
4821.794854.494858.93T:elephant176v2
5352.615353.695366.45T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.420.430.45T:aes256gcmv1
0.510.520.53T:aes128gcmv1
0.510.520.55aes256gcmv1
1.491.501.51aes128gcmv1
6.326.336.36ascon128av12
9.059.129.15T:xoodyakround3
9.259.279.29ascon80pqv12
9.279.289.30ascon128v12
10.9010.9410.95ascon128abi32v12
16.5316.6916.73ascon128bi32v12
18.2318.2518.27T:isapa128v20
19.2419.2819.31T:schwaemm256128v2
21.8621.9121.96romulusm
21.9121.9221.99romulusn
23.4423.4823.52T:schwaemm256256v2
24.1324.1624.21T:isapa128av20
25.4025.5025.57T:schwaemm192192v2
26.9726.9927.04T:grain128aeadv2
27.2727.5327.74T:schwaemm128128v2
37.5037.5137.52romulust
39.6939.7039.70T:tinyjambu128v2
39.6939.7039.72T:tinyjambu192v2
40.0240.0240.16T:tinyjambu256v2
40.2940.3140.35T:giftcofb128v1
44.3444.5444.70T:isapk128av20
54.6354.7254.76T:isapk128v20
85.7186.0186.44T:isapxv20
112.18?113.26?125.17?T:elephant200v2
3187.123207.873212.35T:elephant176v2
3565.403566.333572.29T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.40?0.43?0.45?T:aes256gcmv1
0.490.510.52T:aes128gcmv1
0.510.530.55aes256gcmv1
1.491.541.56aes128gcmv1
6.356.376.39ascon128av12
9.059.139.16T:xoodyakround3
9.289.299.30ascon128v12
9.289.299.31ascon80pqv12
10.9410.9510.97ascon128abi32v12
16.4616.5816.69ascon128bi32v12
18.1818.2218.29T:isapa128v20
19.2119.3119.34T:schwaemm256128v2
21.7821.8821.94romulusm
21.9021.9321.96romulusn
23.4823.4823.51T:schwaemm256256v2
24.1524.2024.21T:isapa128av20
25.4125.5325.64T:schwaemm192192v2
27.0127.0327.08T:grain128aeadv2
27.2927.3427.54T:schwaemm128128v2
37.4937.5437.60romulust
39.6839.6839.72T:tinyjambu128v2
39.7039.7039.70T:tinyjambu192v2
40.1140.1240.14T:tinyjambu256v2
40.3040.3440.39T:giftcofb128v1
44.2944.5044.76T:isapk128av20
54.6454.6954.72T:isapk128v20
85.8686.2486.75T:isapxv20
112.14?113.19?125.08?T:elephant200v2
3186.443207.433211.80T:elephant176v2
3564.463565.563572.92T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.41?0.43?0.48?T:aes256gcmv1
0.500.520.53aes256gcmv1
0.510.520.53T:aes128gcmv1
1.451.521.55aes128gcmv1
6.386.406.41ascon128av12
9.039.099.15T:xoodyakround3
9.289.299.29ascon80pqv12
9.289.299.30ascon128v12
10.9610.9611.04ascon128abi32v12
16.5016.6016.69ascon128bi32v12
18.1918.2518.31T:isapa128v20
19.2319.2819.33T:schwaemm256128v2
21.7521.8821.95romulusm
21.8521.8821.95romulusn
23.4423.4523.51T:schwaemm256256v2
24.1424.1624.23T:isapa128av20
25.4325.5325.66T:schwaemm192192v2
27.0227.0727.10T:grain128aeadv2
27.2527.3227.52T:schwaemm128128v2
37.4837.5437.58romulust
39.6839.6839.76T:tinyjambu128v2
39.7039.7039.70T:tinyjambu192v2
40.0140.0140.02T:tinyjambu256v2
40.2940.3040.36T:giftcofb128v1
44.3144.4944.74T:isapk128av20
54.6454.6854.70T:isapk128v20
85.8886.3686.62T:isapxv20
112.19?113.20?125.11?T:elephant200v2
3187.633206.243210.43T:elephant176v2
3564.683566.213571.83T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.141.141.14T:aes128gcmv1
1.231.241.25T:aes256gcmv1
1.231.241.25aes256gcmv1
3.513.583.59aes128gcmv1
6.546.566.59ascon128av12
9.499.499.54ascon128v12
9.499.509.52ascon80pqv12
11.3711.4011.41ascon128abi32v12
13.6513.6613.67T:xoodyakround3
17.1617.1817.25ascon128bi32v12
19.9520.0020.03T:schwaemm256128v2
24.2524.2524.25T:schwaemm256256v2
26.1726.2126.27T:schwaemm192192v2
27.4727.4827.49T:grain128aeadv2
27.8427.9527.98T:schwaemm128128v2
28.9228.9629.00romulusn
33.5233.5333.55T:isapa128av20
39.8439.8839.94romulusm
39.9740.1440.16T:isapa128v20
40.7840.8140.84T:giftcofb128v1
50.9851.0451.09T:tinyjambu128v2
54.7554.7554.76T:tinyjambu192v2
58.4158.4558.47T:tinyjambu256v2
61.0361.0961.10T:isapk128av20
75.8876.0276.06romulust
121.73121.80122.07T:isapk128v20
174.84174.88192.04T:elephant200v2
190.28190.46190.71T:isapxv20
4863.044890.034895.82T:elephant176v2
5413.035413.765425.78T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.181.191.19T:aes128gcmv1
1.231.231.26T:aes256gcmv1
1.291.291.32aes256gcmv1
3.613.673.70aes128gcmv1
6.506.516.52ascon128av12
9.449.469.46ascon128v12
9.489.489.51ascon80pqv12
11.4011.4011.40ascon128abi32v12
13.5713.6313.64T:xoodyakround3
17.0517.1017.12ascon128bi32v12
19.9920.0220.05T:schwaemm256128v2
24.2224.2324.24T:schwaemm256256v2
26.1626.2226.27T:schwaemm192192v2
27.6027.6627.68T:grain128aeadv2
27.8327.9527.98T:schwaemm128128v2
29.0029.0129.05romulusn
33.5333.5433.55T:isapa128av20
39.9439.9540.05romulusm
40.0140.1040.21T:isapa128v20
40.8140.8140.85T:giftcofb128v1
50.9751.0251.06T:tinyjambu128v2
54.6254.6454.64T:tinyjambu192v2
58.5258.5258.54T:tinyjambu256v2
61.0161.0361.06T:isapk128av20
76.0476.0676.09romulust
121.72122.02122.07T:isapk128v20
174.83174.89192.04T:elephant200v2
189.78190.50190.64T:isapxv20
4868.644891.014893.14T:elephant176v2
5412.595415.285425.62T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.171.171.18T:aes128gcmv1
1.241.241.25T:aes256gcmv1
1.291.291.29aes256gcmv1
1.761.771.79aes128gcmv1
6.506.516.51ascon128av12
9.449.469.46ascon128v12
9.489.489.50ascon80pqv12
11.4011.4011.46ascon128abi32v12
13.6013.6213.67T:xoodyakround3
17.0617.0917.11ascon128bi32v12
19.9520.0020.03T:schwaemm256128v2
24.2224.2224.23T:schwaemm256256v2
24.6224.6224.77T:isapa128v20
25.9825.9926.02T:isapa128av20
26.1326.2026.26T:schwaemm192192v2
27.5927.6427.67T:grain128aeadv2
27.8227.9327.97T:schwaemm128128v2
29.0029.0229.04romulusn
38.6238.6538.65romulust
39.9940.0240.05romulusm
40.7940.7940.83T:giftcofb128v1
48.1348.1548.27T:isapk128av20
51.0251.0351.05T:tinyjambu128v2
54.6154.6454.64T:tinyjambu192v2
58.4458.4858.49T:tinyjambu256v2
81.3281.3481.36T:isapk128v20
123.86124.03124.10T:isapxv20
174.80174.89191.95T:elephant200v2
4861.924891.544893.10T:elephant176v2
5413.325414.195426.50T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.476.576.70aes256gcmv1
7.027.057.13T:aes128gcmv1
6.977.077.19aes128gcmv1
10.6110.7010.75ascon128av12
12.6112.6113.09ascon80pqv12
12.7012.8113.27ascon128v12
14.2014.3414.70T:aes256gcmv1
17.9618.9319.18ascon128abi32v12
20.1220.4220.70T:xoodyakround3
24.2924.2926.62ascon128bi32v12
32.7032.8533.98T:schwaemm256128v2
34.6634.8435.19romulusn
35.7736.0136.66T:grain128aeadv2
35.8436.2036.98T:schwaemm128128v2
38.6038.6238.67T:schwaemm256256v2
42.4142.6843.59T:schwaemm192192v2
46.9947.2047.35romulusm
49.4249.4949.77T:giftcofb128v1
59.9060.0860.24T:tinyjambu128v2
64.2664.4964.76T:tinyjambu192v2
68.0968.6668.78T:tinyjambu256v2
102.04102.12102.65romulust
106.88107.29107.50T:isapa128av20
194.05196.05196.09T:isapk128av20
245.84246.38268.38T:elephant200v2
331.00331.00331.00T:isapa128v20
1303.241303.381303.78T:isapk128v20
1848.061852.621855.70T:isapxv20
6050.666084.246092.73T:elephant176v2
7247.387252.097258.71T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.596.696.78aes256gcmv1
6.986.987.28T:aes128gcmv1
8.868.999.23aes128gcmv1
10.7010.7310.95ascon128av12
12.7112.8613.45ascon128v12
12.8412.8613.27ascon80pqv12
14.2114.5214.80T:aes256gcmv1
17.9818.6019.09ascon128abi32v12
19.7720.5521.27T:xoodyakround3
23.7224.7926.27ascon128bi32v12
32.8233.2733.77T:schwaemm256128v2
34.9134.9535.18romulusn
36.1636.2536.59T:schwaemm128128v2
36.0336.5536.91T:grain128aeadv2
38.6538.6838.80T:schwaemm256256v2
42.0742.3042.77T:schwaemm192192v2
48.4548.5949.09romulusm
49.7149.8850.14T:giftcofb128v1
59.9960.0260.09T:tinyjambu128v2
64.0564.1664.27T:tinyjambu192v2
68.1668.3068.71T:tinyjambu256v2
102.11102.30102.81romulust
106.70107.12107.39T:isapa128av20
194.30194.97196.59T:isapk128av20
245.95246.12268.83T:elephant200v2
330.65331.80332.66T:isapa128v20
1303.681303.951304.41T:isapk128v20
1847.981852.231857.65T:isapxv20
6047.306083.556090.70T:elephant176v2
7244.087248.487255.18T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.456.466.55aes128gcmv1
6.606.616.73aes256gcmv1
6.986.986.98T:aes128gcmv1
10.5910.7010.84ascon128av12
12.7012.7013.04ascon128v12
12.8012.8412.91ascon80pqv12
14.2714.3414.41T:aes256gcmv1
18.0118.0118.30ascon128abi32v12
19.7820.4120.52T:xoodyakround3
23.8825.0125.79ascon128bi32v12
32.8233.2133.77T:schwaemm256128v2
34.8834.9035.16romulusn
36.1636.1636.16T:schwaemm128128v2
35.9636.4836.78T:grain128aeadv2
38.6338.6638.71T:schwaemm256256v2
42.1442.2042.99T:schwaemm192192v2
48.3048.3548.63romulusm
49.9150.0150.19T:giftcofb128v1
59.9260.2260.22T:tinyjambu128v2
63.6763.7864.39romulust
64.1864.2964.29T:tinyjambu192v2
66.6666.9067.16T:isapa128av20
68.2968.2968.29T:tinyjambu256v2
123.05123.50126.34T:isapk128av20
173.04173.34173.97T:isapa128v20
245.66245.79268.29T:elephant200v2
683.89684.16684.41T:isapk128v20
966.11968.01970.28T:isapxv20
6052.276087.126092.45T:elephant176v2
7243.447251.417259.38T:elephant160v2

amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.750.770.79T:aes128gcmv1
0.800.840.85T:aes256gcmv1
1.841.841.85aes256gcmv1
5.855.885.88ascon128av12
8.508.508.51ascon80pqv12
8.628.628.63ascon128v12
12.5312.5512.60ascon128abi32v12
16.6416.6816.72T:xoodyakround3
19.0919.1319.17ascon128bi32v12
19.2819.3719.94T:schwaemm256128v2
23.0523.0723.10T:grain128aeadv2
23.0623.1223.19aes128gcmv1
23.8624.5424.56T:schwaemm256256v2
25.8226.0526.94T:schwaemm192192v2
28.8728.9729.03T:schwaemm128128v2
34.1434.1434.14T:isapa128v20
35.1635.1735.73T:isapa128av20
37.0837.1137.13romulusn
38.4438.4438.44T:giftcofb128v1
58.4658.4758.48T:tinyjambu128v2
59.3559.3759.42romulusm
60.3360.5961.06T:isapk128av20
65.6165.6265.62T:tinyjambu256v2
66.1266.1766.18T:tinyjambu192v2
79.2180.7981.32T:isapk128v20
114.52114.60114.64romulust
148.28150.40150.88T:isapxv20
228.41?234.36?258.13?T:elephant200v2
6704.856707.886730.13T:elephant176v2
7844.327845.077866.92T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.69?0.75?0.78?T:aes128gcmv1
0.730.800.81T:aes256gcmv1
1.821.831.83aes256gcmv1
6.236.246.25ascon128av12
8.438.448.45ascon80pqv12
8.568.578.57ascon128v12
12.6612.6912.73ascon128abi32v12
16.5716.6316.69T:xoodyakround3
18.5018.5018.51ascon128bi32v12
19.3919.5019.89T:schwaemm256128v2
22.9722.9823.13T:grain128aeadv2
22.9923.0823.26aes128gcmv1
24.2724.3324.37T:schwaemm256256v2
25.2625.4525.79T:schwaemm192192v2
29.0329.1229.19T:schwaemm128128v2
34.1134.1534.18T:isapa128v20
35.1435.6835.72T:isapa128av20
37.2937.3137.34romulusn
38.5038.5038.51T:giftcofb128v1
58.5858.5858.60T:tinyjambu128v2
59.6959.7559.81romulusm
60.3660.8661.24T:isapk128av20
64.7564.7764.90T:tinyjambu192v2
65.4965.7565.76T:tinyjambu256v2
79.7480.9181.76T:isapk128v20
114.56114.60114.69romulust
149.59149.76151.98T:isapxv20
228.48?234.61?257.06?T:elephant200v2
6698.976704.186709.95T:elephant176v2
7845.327845.857868.13T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.67?0.73?0.80?T:aes128gcmv1
0.750.800.81T:aes256gcmv1
1.821.821.83aes256gcmv1
2.852.892.95aes128gcmv1
6.246.246.26ascon128av12
8.448.448.45ascon80pqv12
8.578.578.57ascon128v12
12.6612.6912.73ascon128abi32v12
16.6316.6816.74T:xoodyakround3
16.8416.8816.93T:isapa128v20
18.5018.5018.51ascon128bi32v12
19.3219.4219.74T:schwaemm256128v2
22.9823.1223.16T:grain128aeadv2
23.6123.6223.63T:isapa128av20
24.2924.3624.47T:schwaemm256256v2
25.2625.9926.09T:schwaemm192192v2
29.0229.1029.18T:schwaemm128128v2
37.2937.3237.35romulusn
38.4838.5138.52T:giftcofb128v1
38.8038.8538.89romulust
40.6440.8241.04T:isapk128av20
49.5751.0852.15T:isapk128v20
58.5758.5858.59T:tinyjambu128v2
59.6859.7359.79romulusm
64.7564.7764.90T:tinyjambu192v2
65.5965.7565.75T:tinyjambu256v2
87.0687.2287.59T:isapxv20
228.51?234.54?259.17?T:elephant200v2
6702.116705.686707.58T:elephant176v2
7844.147844.817845.53T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.580.600.61T:aes128gcmv1
0.600.640.65T:aes256gcmv1
1.141.151.15aes256gcmv1
5.845.845.85ascon128av12
8.388.388.39ascon80pqv12
8.448.458.45ascon128v12
12.4112.4112.43ascon128abi32v12
12.6312.6512.67T:xoodyakround3
12.9512.9813.02aes128gcmv1
18.8318.8518.88ascon128bi32v12
19.0619.1319.41T:schwaemm256128v2
22.9422.9923.02T:grain128aeadv2
23.8124.5124.55T:schwaemm256256v2
25.5825.5925.60T:isapa128v20
26.3726.4226.51T:schwaemm192192v2
29.0429.1129.16T:schwaemm128128v2
29.3829.4029.64T:isapa128av20
29.6929.7129.73romulusn
38.4138.4238.42T:giftcofb128v1
40.7840.8340.85romulusm
47.5447.6147.62T:tinyjambu128v2
48.5348.6449.11T:isapk128av20
49.1949.2549.26T:tinyjambu256v2
51.3051.3651.36T:tinyjambu192v2
64.7165.2765.79T:isapk128v20
76.6676.7176.75romulust
117.21118.17119.65T:isapxv20
171.23?175.60?191.40?T:elephant200v2
5003.005007.605010.25T:elephant176v2
5883.235884.725886.01T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.560.590.61T:aes128gcmv1
0.600.610.62T:aes256gcmv1
1.121.131.14aes256gcmv1
6.036.056.06ascon128av12
8.348.358.35ascon80pqv12
8.418.418.41ascon128v12
12.4212.4512.47ascon128abi32v12
12.6012.6412.66T:xoodyakround3
12.9312.9713.00aes128gcmv1
18.4818.5118.53ascon128bi32v12
19.1919.2419.47T:schwaemm256128v2
22.8922.9323.09T:grain128aeadv2
24.1624.2924.37T:schwaemm256256v2
25.5725.5825.58T:isapa128v20
26.0726.2726.57T:schwaemm192192v2
29.0929.1729.23T:schwaemm128128v2
29.3729.6329.64T:isapa128av20
29.8029.8329.84romulusn
38.4438.4438.44T:giftcofb128v1
41.0041.0341.05romulusm
47.6647.6747.68T:tinyjambu128v2
48.5048.5548.97T:isapk128av20
49.3449.3849.41T:tinyjambu256v2
50.6550.6650.74T:tinyjambu192v2
65.3465.5067.24T:isapk128v20
76.6776.7076.78romulust
117.83118.22119.63T:isapxv20
171.08?175.61?192.73?T:elephant200v2
5003.945008.455010.24T:elephant176v2
5882.965883.815884.11T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.55?0.59?0.62?T:aes128gcmv1
0.580.600.62T:aes256gcmv1
1.131.131.13aes256gcmv1
2.842.862.88aes128gcmv1
6.046.046.05ascon128av12
8.358.358.35ascon80pqv12
8.418.418.41ascon128v12
12.4312.4512.46ascon128abi32v12
12.6312.6612.69T:xoodyakround3
16.9216.9516.97T:isapa128v20
18.5018.5018.51ascon128bi32v12
19.0819.1419.47T:schwaemm256128v2
22.9022.9523.06T:grain128aeadv2
23.6323.6423.65T:isapa128av20
24.1524.2824.37T:schwaemm256256v2
26.0326.0826.14T:schwaemm192192v2
29.1229.2029.26T:schwaemm128128v2
29.8029.8129.83romulusn
38.4338.4538.45T:giftcofb128v1
38.4538.7438.79T:isapk128av20
38.8338.8638.90romulust
40.9941.0341.05romulusm
47.6447.6647.67T:tinyjambu128v2
49.3549.3849.41T:tinyjambu256v2
50.6550.6650.73T:tinyjambu192v2
50.6250.8651.36T:isapk128v20
87.3187.3688.38T:isapxv20
170.77?174.76?192.48?T:elephant200v2
5004.195008.375017.10T:elephant176v2
5884.195900.755901.47T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.380.400.42T:aes128gcmv1
0.40?0.43?0.45?T:aes256gcmv1
0.430.450.45aes256gcmv1
2.802.832.86aes128gcmv1
5.795.805.81ascon128av12
8.258.258.25ascon128v12
8.258.258.26ascon80pqv12
8.668.678.69T:xoodyakround3
12.2312.2612.28ascon128abi32v12
17.0017.0117.01T:isapa128v20
18.5318.5718.61ascon128bi32v12
18.8918.9519.19T:schwaemm256128v2
22.2522.2922.33romulusm
22.2922.3322.36romulusn
22.8922.9122.93T:grain128aeadv2
23.6123.6323.65T:isapa128av20
23.7924.4324.50T:schwaemm256256v2
26.8626.8926.98T:schwaemm192192v2
29.1229.1829.28T:schwaemm128128v2
33.0433.2533.25T:tinyjambu256v2
36.2136.5136.64T:isapk128av20
36.5536.5536.56T:tinyjambu192v2
36.6136.6436.74T:tinyjambu128v2
38.3638.3938.40T:giftcofb128v1
38.7438.8238.90romulust
49.6950.3052.69T:isapk128v20
86.4386.6987.27T:isapxv20
112.76?115.95?127.44?T:elephant200v2
3311.003312.363317.93T:elephant176v2
3921.063922.143922.57T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.38?0.41?0.45?T:aes256gcmv1
0.410.430.45T:aes128gcmv1
0.410.430.45aes256gcmv1
2.812.832.87aes128gcmv1
5.825.855.88ascon128av12
8.258.258.26ascon80pqv12
8.258.258.26ascon128v12
8.668.688.71T:xoodyakround3
12.1412.1912.25ascon128abi32v12
16.9717.0117.05T:isapa128v20
18.4818.5018.52ascon128bi32v12
18.8718.9519.22T:schwaemm256128v2
22.2722.3022.34romulusn
22.2922.3022.34romulusm
22.9022.9423.08T:grain128aeadv2
23.6123.6323.65T:isapa128av20
24.2124.2324.26T:schwaemm256256v2
26.8426.8826.94T:schwaemm192192v2
29.1529.2129.29T:schwaemm128128v2
33.2533.2533.26T:tinyjambu256v2
36.5436.5536.56T:tinyjambu192v2
36.1836.5836.94T:isapk128av20
36.6136.6236.75T:tinyjambu128v2
38.3638.3838.40T:giftcofb128v1
38.7838.8538.92romulust
49.7550.6252.77T:isapk128v20
86.4187.0487.53T:isapxv20
112.48?115.77?127.92?T:elephant200v2
3306.233312.323312.78T:elephant176v2
3922.423923.183923.53T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.38?0.42?0.44?T:aes256gcmv1
0.40?0.42?0.47?T:aes128gcmv1
0.430.430.44aes256gcmv1
2.812.852.88aes128gcmv1
5.835.835.86ascon128av12
8.258.258.26ascon80pqv12
8.258.258.25ascon128v12
8.628.688.73T:xoodyakround3
12.1712.1912.22ascon128abi32v12
16.9717.0017.05T:isapa128v20
18.4818.5018.52ascon128bi32v12
18.9018.9519.11T:schwaemm256128v2
22.2722.2922.33romulusn
22.2622.3022.33romulusm
22.8822.9823.10T:grain128aeadv2
23.6223.6423.65T:isapa128av20
24.1124.2424.32T:schwaemm256256v2
26.8426.9026.93T:schwaemm192192v2
29.0629.1429.22T:schwaemm128128v2
32.9732.9933.28T:tinyjambu256v2
36.2736.4036.80T:isapk128av20
36.5436.5536.56T:tinyjambu192v2
36.6136.6836.76T:tinyjambu128v2
38.3838.3838.39T:giftcofb128v1
38.7738.8438.91romulust
49.1751.1652.86T:isapk128v20
86.7187.1387.73T:isapxv20
112.58?116.18?127.47?T:elephant200v2
3311.913312.453313.89T:elephant176v2
3922.273922.563923.14T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.991.001.02T:aes128gcmv1
1.041.051.07T:aes256gcmv1
1.271.271.28aes256gcmv1
6.016.016.02ascon128av12
8.518.528.54ascon80pqv12
8.568.578.58ascon128v12
12.7012.7112.72ascon128abi32v12
12.8012.8112.83T:xoodyakround3
14.3114.3414.38aes128gcmv1
19.1619.1619.20ascon128bi32v12
19.6819.7520.05T:schwaemm256128v2
23.3323.3623.39T:grain128aeadv2
24.5525.1625.17T:schwaemm256256v2
26.9226.9626.99T:schwaemm192192v2
29.4829.5229.60T:schwaemm128128v2
29.9429.9629.99romulusn
33.5833.8133.82T:isapa128av20
37.2137.2337.24T:isapa128v20
38.7538.7638.76T:giftcofb128v1
41.0641.0841.11romulusm
47.9948.0048.03T:tinyjambu128v2
49.6449.6449.66T:tinyjambu256v2
51.7251.7851.79T:tinyjambu192v2
54.5554.7154.81T:isapk128av20
77.8177.8377.87romulust
110.12110.55110.84T:isapk128v20
176.14?178.92?196.27?T:elephant200v2
192.88193.87193.90T:isapxv20
5042.355046.785050.84T:elephant176v2
5949.395949.715950.00T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.991.031.03T:aes128gcmv1
1.031.041.05T:aes256gcmv1
1.261.261.27aes256gcmv1
6.196.206.22ascon128av12
8.478.478.48ascon80pqv12
8.538.538.54ascon128v12
12.7212.7312.76ascon128abi32v12
12.7812.8012.81T:xoodyakround3
14.3814.4114.45aes128gcmv1
18.8418.8518.87ascon128bi32v12
19.7319.7620.04T:schwaemm256128v2
23.3323.4023.45T:grain128aeadv2
24.9124.9624.98T:schwaemm256256v2
26.9827.0227.11T:schwaemm192192v2
29.5129.5929.63T:schwaemm128128v2
30.0630.0730.09romulusn
33.5833.6533.82T:isapa128av20
37.2137.2137.24T:isapa128v20
38.7938.7938.79T:giftcofb128v1
41.3141.3341.35romulusm
48.0448.0548.07T:tinyjambu128v2
49.7749.8149.81T:tinyjambu256v2
51.1351.1651.23T:tinyjambu192v2
54.6954.9855.63T:isapk128av20
77.7977.8477.88romulust
109.71109.77109.94T:isapk128v20
175.75178.48194.68T:elephant200v2
192.74193.21193.76T:isapxv20
5042.965045.635048.23T:elephant176v2
5949.255949.565950.48T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.990.991.01T:aes128gcmv1
1.031.031.05T:aes256gcmv1
1.261.261.26aes256gcmv1
4.274.284.30aes128gcmv1
6.206.216.21ascon128av12
8.478.478.48ascon80pqv12
8.538.538.54ascon128v12
12.7212.7312.74ascon128abi32v12
12.7912.8112.82T:xoodyakround3
18.8418.8418.86ascon128bi32v12
19.7119.7620.02T:schwaemm256128v2
22.8622.8622.88T:isapa128v20
23.3123.3323.45T:grain128aeadv2
24.8424.9624.97T:schwaemm256256v2
25.9225.9225.93T:isapa128av20
26.7727.0727.18T:schwaemm192192v2
29.4929.5529.63T:schwaemm128128v2
30.0530.0730.11romulusn
38.7938.8038.80T:giftcofb128v1
39.9439.9539.96romulust
41.3241.3341.34romulusm
42.2742.2843.26T:isapk128av20
48.0548.0548.06T:tinyjambu128v2
49.7749.8149.81T:tinyjambu256v2
51.1451.1451.22T:tinyjambu192v2
73.6473.8874.36T:isapk128v20
124.84125.39126.41T:isapxv20
175.94178.73193.99T:elephant200v2
5045.745046.045048.35T:elephant176v2
5949.745950.205950.65T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.066.126.16aes256gcmv1
9.849.849.91ascon128av12
10.6910.7611.30T:aes256gcmv1
10.6910.8010.89T:aes128gcmv1
11.4011.4011.41ascon128v12
11.4011.4011.49ascon80pqv12
18.3418.4618.65T:xoodyakround3
19.2719.3819.64ascon128abi32v12
26.2126.2227.17ascon128bi32v12
31.4731.5031.64T:grain128aeadv2
33.0633.1533.59T:schwaemm256128v2
35.6435.8135.91romulusn
38.2338.5439.41T:schwaemm128128v2
39.8540.3340.53T:schwaemm256256v2
43.2343.4343.98T:schwaemm192192v2
46.4546.4546.65T:giftcofb128v1
46.9346.9847.09romulusm
54.2454.4854.83aes128gcmv1
56.6157.7157.97T:tinyjambu128v2
58.5258.5558.72T:tinyjambu256v2
61.0561.0961.21T:tinyjambu192v2
103.12103.38103.81romulust
128.74128.85129.23T:isapa128av20
184.41187.12187.34T:isapk128av20
248.09250.01273.73T:elephant200v2
304.56304.56304.69T:isapa128v20
1123.911138.101159.96T:isapk128v20
1882.121883.671893.43T:isapxv20
6275.776283.596284.99T:elephant176v2
7969.737973.188012.48T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.625.665.70aes256gcmv1
9.919.9710.07ascon128av12
10.4410.6811.01T:aes128gcmv1
10.8410.9711.14T:aes256gcmv1
11.2711.2911.58ascon80pqv12
11.3611.3611.43ascon128v12
18.4218.5118.66T:xoodyakround3
19.3119.4120.30ascon128abi32v12
26.6226.6227.38ascon128bi32v12
31.4431.7732.64T:grain128aeadv2
33.1233.2733.63T:schwaemm256128v2
35.9536.0536.20romulusn
38.4038.6639.14T:schwaemm128128v2
39.8540.5240.62T:schwaemm256256v2
43.4743.8244.39T:schwaemm192192v2
46.8846.9046.95T:giftcofb128v1
48.4348.5648.66romulusm
55.9756.1756.66aes128gcmv1
56.7957.0058.14T:tinyjambu128v2
58.8559.6659.80T:tinyjambu256v2
62.0762.3762.52T:tinyjambu192v2
103.49103.76103.93romulust
128.93129.09129.71T:isapa128av20
185.10185.38185.88T:isapk128av20
247.31249.62272.27T:elephant200v2
304.65304.70305.32T:isapa128v20
1118.121120.021121.82T:isapk128v20
1876.881882.651890.18T:isapxv20
6272.156275.066310.64T:elephant176v2
7970.077988.348012.66T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.625.675.71aes256gcmv1
9.919.939.93ascon128av12
10.4710.7011.33T:aes128gcmv1
11.0311.0811.39T:aes256gcmv1
11.2711.2711.34ascon80pqv12
11.3611.3611.38ascon128v12
18.3918.4819.21T:xoodyakround3
19.3219.4119.71ascon128abi32v12
26.6126.6126.89ascon128bi32v12
31.6931.9332.00T:grain128aeadv2
33.0533.1433.27T:schwaemm256128v2
35.8736.1136.35romulusn
36.6436.9137.16aes128gcmv1
38.3938.5538.91T:schwaemm128128v2
40.0140.4140.53T:schwaemm256256v2
43.1743.4543.66T:schwaemm192192v2
46.8246.8446.98T:giftcofb128v1
48.3848.4748.53romulusm
56.8456.9156.95T:tinyjambu128v2
58.8259.6059.69T:tinyjambu256v2
60.9162.0762.27T:tinyjambu192v2
64.7264.9165.17romulust
77.2777.2877.63T:isapa128av20
116.47116.80117.40T:isapk128av20
158.73158.91159.51T:isapa128v20
248.07250.40274.11T:elephant200v2
580.87598.80598.88T:isapk128v20
982.33984.92989.35T:isapxv20
6270.206280.446284.97T:elephant176v2
7969.417981.988011.60T:elephant160v2

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.711.721.72T:aes128gcmv1
1.841.851.86aes256gcmv1
5.605.635.66ascon128av12
8.138.138.13ascon80pqv12
8.378.388.42ascon128v12
12.4712.5112.54ascon128abi32v12
14.7114.8114.87T:xoodyakround3
18.1618.1918.21ascon128bi32v12
18.1918.2218.27T:schwaemm256128v2
22.8322.9824.98T:grain128aeadv2
23.69?24.01?26.82?T:schwaemm256256v2
24.1624.2224.27T:schwaemm192192v2
28.5228.6528.83T:schwaemm128128v2
31.0331.0431.04T:isapa128v20
33.2333.2633.30T:isapa128av20
37.1237.1537.18romulusn
38.5638.5738.57T:giftcofb128v1
58.5058.5058.53T:tinyjambu128v2
59.4059.4459.47romulusm
60.4160.7860.85T:isapk128av20
62.5062.5062.50T:tinyjambu192v2
65.7365.8765.88T:tinyjambu256v2
82.4582.5482.69T:isapk128v20
120.70120.76120.80romulust
122.92123.08123.35T:elephant200v2
146.77148.52150.81T:isapxv20
6338.496376.376446.46T:elephant176v2
7797.257802.347841.88T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.711.721.72T:aes128gcmv1
1.861.871.88aes256gcmv1
5.175.195.19ascon128av12
7.627.637.63ascon80pqv12
7.877.887.88ascon128v12
12.6212.6312.67ascon128abi32v12
14.6414.6914.75T:xoodyakround3
18.2118.2618.32T:schwaemm256128v2
18.6118.6418.67ascon128bi32v12
23.0523.1223.66T:grain128aeadv2
23.63?23.98?26.48?T:schwaemm256256v2
24.1324.2024.26T:schwaemm192192v2
28.4828.6328.73T:schwaemm128128v2
30.9931.0431.08T:isapa128v20
33.2333.2733.30T:isapa128av20
37.3637.4337.44romulusn
38.5038.5038.51T:giftcofb128v1
58.5058.5158.51T:tinyjambu128v2
59.7259.7759.83romulusm
60.3260.8460.87T:isapk128av20
62.7562.7562.77T:tinyjambu192v2
65.4865.5065.52T:tinyjambu256v2
82.3582.4882.61T:isapk128v20
120.68120.80120.87romulust
122.86122.95123.05T:elephant200v2
147.56148.13149.02T:isapxv20
6370.206385.586390.08T:elephant176v2
7793.947830.607874.24T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.711.711.72T:aes128gcmv1
1.861.861.87aes256gcmv1
5.175.195.19ascon128av12
7.637.637.64ascon80pqv12
7.887.887.88ascon128v12
12.6212.6312.66ascon128abi32v12
14.6814.7314.77T:xoodyakround3
15.4815.5215.55T:isapa128v20
18.2118.2718.31T:schwaemm256128v2
18.6218.6418.67ascon128bi32v12
22.3222.3822.38T:isapa128av20
23.0323.0923.64T:grain128aeadv2
23.67?24.02?26.53?T:schwaemm256256v2
24.1524.1924.26T:schwaemm192192v2
28.5228.6528.81T:schwaemm128128v2
37.3637.4237.45romulusn
38.5038.5038.51T:giftcofb128v1
40.9841.0341.09romulust
43.6243.6543.83T:isapk128av20
56.2056.3556.41T:isapk128v20
58.5058.5158.52T:tinyjambu128v2
59.7159.7559.80romulusm
62.7562.7562.75T:tinyjambu192v2
65.4965.5065.52T:tinyjambu256v2
85.2385.4886.15T:isapxv20
122.93123.03123.15T:elephant200v2
6346.986368.476381.26T:elephant176v2
7790.827809.507886.74T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.081.091.09T:aes128gcmv1
1.141.151.16aes256gcmv1
5.625.635.65ascon128av12
7.877.887.89ascon80pqv12
8.128.148.15ascon128v12
11.3911.4511.47T:xoodyakround3
12.2412.3512.38ascon128abi32v12
18.0818.1118.14T:schwaemm256128v2
18.4018.4218.44ascon128bi32v12
22.8222.9524.96T:grain128aeadv2
23.2723.2923.29T:isapa128v20
23.6023.6323.81T:schwaemm256256v2
24.5824.7524.91T:schwaemm192192v2
27.2427.2727.28T:isapa128av20
28.5028.5828.66T:schwaemm128128v2
29.7429.7529.76romulusn
38.3838.3838.39T:giftcofb128v1
40.8940.9040.93romulusm
46.7546.7746.77T:tinyjambu128v2
46.5147.0847.59T:isapk128av20
49.6049.6149.62T:tinyjambu256v2
50.1350.1450.15T:tinyjambu192v2
65.6665.7565.80T:isapk128v20
80.8780.9180.94romulust
92.6692.7392.78T:elephant200v2
116.76117.01118.31T:isapxv20
4741.224750.674759.86T:elephant176v2
5832.585863.745936.02T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.081.081.10T:aes128gcmv1
1.151.151.15aes256gcmv1
5.265.275.28ascon128av12
7.757.767.76ascon80pqv12
7.817.827.82ascon128v12
11.3411.3611.38T:xoodyakround3
12.4412.4812.50ascon128abi32v12
18.1218.1418.18T:schwaemm256128v2
18.2418.2618.27ascon128bi32v12
22.9423.0123.60T:grain128aeadv2
23.2723.2723.28T:isapa128v20
23.6423.7423.84T:schwaemm256256v2
24.5124.6624.86T:schwaemm192192v2
27.2527.2627.28T:isapa128av20
28.4728.5128.61T:schwaemm128128v2
29.8629.8929.92romulusn
38.3538.3538.35T:giftcofb128v1
41.0341.0641.09romulusm
46.7646.7646.76T:tinyjambu128v2
46.6347.3547.61T:isapk128av20
49.4249.4249.43T:tinyjambu256v2
50.0150.0150.01T:tinyjambu192v2
65.5665.5965.66T:isapk128v20
80.8680.9380.98romulust
92.6892.7592.79T:elephant200v2
116.62116.93117.22T:isapxv20
4734.124747.394752.12T:elephant176v2
5827.775869.735874.79T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.081.091.09T:aes128gcmv1
1.151.151.15aes256gcmv1
5.265.275.28ascon128av12
7.767.767.76ascon80pqv12
7.817.827.82ascon128v12
11.3411.3611.39T:xoodyakround3
12.4812.4812.48ascon128abi32v12
15.5015.5115.53T:isapa128v20
18.1118.1318.16T:schwaemm256128v2
18.2518.2618.27ascon128bi32v12
21.7821.8221.85T:isapa128av20
22.9623.0523.69T:grain128aeadv2
23.6423.7923.84T:schwaemm256256v2
24.3424.3924.51T:schwaemm192192v2
28.4528.5828.66T:schwaemm128128v2
29.8729.8829.92romulusn
38.3538.3538.35T:giftcofb128v1
38.3638.9739.04T:isapk128av20
40.9740.9941.03romulust
41.0541.0741.08romulusm
46.7646.7646.77T:tinyjambu128v2
49.4249.4249.43T:tinyjambu256v2
50.0150.0150.01T:tinyjambu192v2
52.5252.5952.65T:isapk128v20
85.4685.7285.95T:isapxv20
92.6992.7592.89T:elephant200v2
4740.394766.574806.43T:elephant176v2
5850.635892.455913.32T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.440.450.46aes256gcmv1
0.450.450.46T:aes128gcmv1
5.615.635.64ascon128av12
7.617.627.64ascon80pqv12
7.867.877.88ascon128v12
8.018.048.07T:xoodyakround3
12.1712.2012.22ascon128abi32v12
15.5115.5115.51T:isapa128v20
17.9618.0218.09T:schwaemm256128v2
18.5718.6318.68ascon128bi32v12
21.2121.2621.29T:isapa128av20
22.3322.3622.39romulusm
22.3422.3722.40romulusn
22.8322.9324.81T:grain128aeadv2
23.2123.5823.65T:schwaemm256256v2
24.6324.8224.93T:schwaemm192192v2
28.4228.5228.61T:schwaemm128128v2
33.3433.3533.36T:tinyjambu256v2
33.7833.8234.24T:isapk128av20
35.0035.0035.00T:tinyjambu128v2
37.7637.7637.77T:tinyjambu192v2
38.1938.2038.21T:giftcofb128v1
40.9641.0241.08romulust
48.8548.8848.93T:isapk128v20
62.6062.6862.77T:elephant200v2
84.8685.4186.34T:isapxv20
3135.503151.443183.76T:elephant176v2
3906.033907.183942.88T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.430.430.45aes256gcmv1
0.450.460.46T:aes128gcmv1
5.365.365.36ascon128av12
7.747.757.75ascon128v12
7.887.887.88ascon80pqv12
8.008.048.08T:xoodyakround3
12.2912.3312.34ascon128abi32v12
15.4815.4815.55T:isapa128v20
17.8517.8817.91ascon128bi32v12
17.9818.0218.08T:schwaemm256128v2
21.2121.2621.32T:isapa128av20
22.3322.3622.42romulusm
22.3522.3822.42romulusn
22.8222.9323.64T:grain128aeadv2
23.1223.4323.58T:schwaemm256256v2
24.6024.8625.15T:schwaemm192192v2
28.4228.5128.72T:schwaemm128128v2
33.3433.3533.36T:tinyjambu256v2
33.5933.6234.34T:isapk128av20
35.0035.0135.02T:tinyjambu128v2
37.2637.2637.27T:tinyjambu192v2
38.1838.2038.20T:giftcofb128v1
40.9441.0341.12romulust
48.8148.8948.91T:isapk128v20
62.6462.7062.76T:elephant200v2
85.2285.4785.93T:isapxv20
3131.503143.493150.94T:elephant176v2
3907.113910.443912.19T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.430.430.44aes256gcmv1
0.450.450.46T:aes128gcmv1
5.365.365.37ascon128av12
7.757.757.76ascon128v12
7.887.887.88ascon80pqv12
8.018.068.10T:xoodyakround3
12.3212.3312.33ascon128abi32v12
15.4815.5115.54T:isapa128v20
17.8517.8817.90ascon128bi32v12
17.9818.0218.07T:schwaemm256128v2
21.2221.2621.32T:isapa128av20
22.3322.3722.40romulusm
22.3222.3822.41romulusn
22.8922.9523.64T:grain128aeadv2
23.1823.5023.64T:schwaemm256256v2
24.5724.7224.79T:schwaemm192192v2
28.3928.4928.59T:schwaemm128128v2
33.3433.3533.36T:tinyjambu256v2
33.6133.6834.33T:isapk128av20
35.0135.0135.02T:tinyjambu128v2
37.2637.2637.27T:tinyjambu192v2
38.1938.1938.20T:giftcofb128v1
40.9341.0141.07romulust
48.8248.8848.91T:isapk128v20
62.6362.6862.73T:elephant200v2
85.0885.4285.96T:isapxv20
3131.963159.333174.82T:elephant176v2
3899.623937.973941.54T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.191.191.20T:aes128gcmv1
1.261.271.27aes256gcmv1
5.775.785.80ascon128av12
8.008.008.01ascon80pqv12
8.258.258.26ascon128v12
11.4711.5611.58T:xoodyakround3
12.6412.6412.68ascon128abi32v12
18.6518.7018.73T:schwaemm256128v2
18.7518.7618.78ascon128bi32v12
23.3223.3525.17T:grain128aeadv2
24.2524.2924.49T:schwaemm256256v2
25.0025.0325.11T:schwaemm192192v2
28.9228.9729.04T:schwaemm128128v2
29.5029.5029.51T:isapa128av20
30.0130.0230.04romulusn
34.1534.1534.17T:isapa128v20
38.6838.6838.69T:giftcofb128v1
41.1641.1841.20romulusm
47.1147.1247.13T:tinyjambu128v2
50.0050.0050.00T:tinyjambu256v2
50.5150.5250.52T:tinyjambu192v2
53.2254.2656.38T:isapk128av20
82.1682.1882.21romulust
94.7694.8194.88T:elephant200v2
106.09106.13106.16T:isapk128v20
190.26190.37191.64T:isapxv20
4761.784791.864794.63T:elephant176v2
5923.265931.535995.92T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.201.201.20T:aes128gcmv1
1.271.271.28aes256gcmv1
5.415.435.44ascon128av12
7.887.887.88ascon80pqv12
7.937.937.93ascon128v12
11.4411.4511.48T:xoodyakround3
12.7612.7712.80ascon128abi32v12
18.6218.6218.64ascon128bi32v12
18.6918.7118.73T:schwaemm256128v2
23.3623.4324.01T:grain128aeadv2
24.2524.3424.45T:schwaemm256256v2
24.9925.0425.11T:schwaemm192192v2
28.9028.9829.03T:schwaemm128128v2
29.4929.4929.49T:isapa128av20
30.1630.1830.19romulusn
34.1534.1534.17T:isapa128v20
38.6538.6538.65T:giftcofb128v1
41.3641.3841.42romulusm
47.1047.1147.11T:tinyjambu128v2
49.8149.8249.82T:tinyjambu256v2
50.3950.3950.41T:tinyjambu192v2
53.1254.2554.28T:isapk128av20
82.1582.1982.23romulust
94.6894.7594.79T:elephant200v2
106.02106.06106.11T:isapk128v20
189.80190.21190.44T:isapxv20
4761.824775.454800.87T:elephant176v2
5910.335921.365922.18T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.201.201.20T:aes128gcmv1
1.271.271.27aes256gcmv1
5.415.415.43ascon128av12
7.887.887.88ascon80pqv12
7.937.937.94ascon128v12
11.4411.4711.52T:xoodyakround3
12.7612.7612.77ascon128abi32v12
18.6218.6218.64ascon128bi32v12
18.6718.7018.73T:schwaemm256128v2
21.0421.0421.06T:isapa128v20
23.0723.0723.09T:isapa128av20
23.3723.4024.00T:grain128aeadv2
24.2324.2924.42T:schwaemm256256v2
24.9725.0225.11T:schwaemm192192v2
28.9729.0029.05T:schwaemm128128v2
30.1530.1630.21romulusn
38.6538.6538.65T:giftcofb128v1
41.3641.3741.41romulusm
42.2642.3242.34romulust
42.4643.5245.50T:isapk128av20
47.1047.1147.11T:tinyjambu128v2
49.8149.8149.82T:tinyjambu256v2
50.3950.3950.39T:tinyjambu192v2
73.4573.5073.56T:isapk128v20
94.6794.7094.78T:elephant200v2
122.85123.30123.37T:isapxv20
4771.994785.924794.56T:elephant176v2
5909.645911.045915.89T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.525.565.59T:aes128gcmv1
5.885.896.00aes256gcmv1
8.648.929.20ascon128av12
10.6610.8010.85ascon80pqv12
11.0411.1211.12ascon128v12
16.5916.6616.77T:xoodyakround3
19.3719.4520.33ascon128abi32v12
26.4126.4527.17ascon128bi32v12
31.2331.3431.47T:schwaemm256128v2
31.7031.9533.05T:grain128aeadv2
35.9535.9636.10romulusn
37.5837.7738.20T:schwaemm128128v2
38.8139.0239.13T:schwaemm256256v2
39.8140.1740.55T:schwaemm192192v2
45.5045.5445.70T:giftcofb128v1
46.9547.0547.26romulusm
55.0555.0555.22T:tinyjambu128v2
58.6658.7758.93T:tinyjambu256v2
58.8858.9059.05T:tinyjambu192v2
80.6580.7281.25T:isapa128av20
111.05111.27111.66romulust
135.48135.75135.98T:elephant200v2
170.85170.95171.12T:isapk128av20
284.11284.11284.30T:isapa128v20
1023.011023.261023.58T:isapk128v20
1850.391855.261856.27T:isapxv20
5936.705955.885963.47T:elephant176v2
7920.737926.407956.11T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.315.345.40T:aes128gcmv1
5.685.715.81aes256gcmv1
8.999.119.16ascon128av12
10.6210.6210.69ascon80pqv12
10.6410.6710.70ascon128v12
16.6716.8016.88T:xoodyakround3
19.4819.4819.88ascon128abi32v12
26.9526.9727.72ascon128bi32v12
31.2331.5531.69T:schwaemm256128v2
32.1732.3132.67T:grain128aeadv2
36.4036.5336.74romulusn
37.3037.8738.42T:schwaemm128128v2
38.7939.0639.27T:schwaemm256256v2
39.9440.6340.91T:schwaemm192192v2
45.6245.6545.70T:giftcofb128v1
48.5048.6348.79romulusm
54.9954.9955.12T:tinyjambu128v2
58.6258.8058.93T:tinyjambu256v2
58.7658.8158.98T:tinyjambu192v2
80.5680.6281.02T:isapa128av20
111.30111.65112.13romulust
135.48135.73136.54T:elephant200v2
170.80170.82170.93T:isapk128av20
284.08284.11284.76T:isapa128v20
1023.151023.621023.79T:isapk128v20
1851.591854.451855.48T:isapxv20
5931.365940.515969.55T:elephant176v2
7900.127925.547964.16T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.305.335.44T:aes128gcmv1
5.705.735.81aes256gcmv1
8.869.119.11ascon128av12
10.5910.5910.59ascon80pqv12
10.6410.6410.64ascon128v12
16.6816.8016.85T:xoodyakround3
19.4619.4619.48ascon128abi32v12
26.9526.9527.35ascon128bi32v12
31.1231.2731.59T:schwaemm256128v2
31.5632.2332.51T:grain128aeadv2
36.4536.4836.66romulusn
37.4538.0138.27T:schwaemm128128v2
38.6739.1139.48T:schwaemm256256v2
40.1740.3440.93T:schwaemm192192v2
45.6245.6445.68T:giftcofb128v1
48.4148.5648.88romulusm
51.6551.7352.70T:isapa128av20
54.9854.9954.99T:tinyjambu128v2
58.5858.7058.76T:tinyjambu256v2
58.7558.7758.86T:tinyjambu192v2
71.0571.2771.87romulust
112.60112.65113.30T:isapk128av20
135.66136.09136.22T:elephant200v2
147.97147.99148.70T:isapa128v20
544.39544.50545.23T:isapk128v20
965.23968.04972.39T:isapxv20
5964.675992.596003.13T:elephant176v2
7909.527921.347931.19T:elephant160v2

amd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.920.971.00T:aes256gcmv1
1.521.521.53T:aes128gcmv1
1.661.671.69aes256gcmv1
4.304.354.40aes128gcmv1
6.406.406.42ascon128av12
9.389.399.40ascon128v12
9.409.429.42ascon80pqv12
11.1411.3011.41ascon128abi32v12
16.9517.0417.14ascon128bi32v12
17.9117.9518.02T:xoodyakround3
19.4619.5319.59T:schwaemm256128v2
23.6723.6923.70T:schwaemm256256v2
25.6725.7925.87T:schwaemm192192v2
27.3027.3427.34T:grain128aeadv2
27.5227.6227.87T:schwaemm128128v2
35.5635.5835.61romulusn
36.3736.4336.45T:isapa128av20
36.4136.4436.49T:isapa128v20
40.4340.4940.51T:giftcofb128v1
57.1857.2357.27romulusm
61.6361.6361.65T:tinyjambu128v2
64.9565.0565.12T:isapk128av20
68.9368.9668.97T:tinyjambu192v2
75.2875.9775.97T:tinyjambu256v2
84.9385.0385.70T:isapk128v20
112.28112.30112.32romulust
146.30148.03148.50T:isapxv20
228.19229.74245.85T:elephant200v2
6481.246485.166492.07T:elephant176v2
7159.547165.127185.77T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.880.910.97T:aes256gcmv1
1.611.621.62T:aes128gcmv1
1.791.801.83aes256gcmv1
4.364.414.47aes128gcmv1
6.276.296.35ascon128av12
9.309.319.31ascon128v12
9.389.399.41ascon80pqv12
11.2011.2411.26ascon128abi32v12
16.7716.8916.99ascon128bi32v12
17.7717.8317.86T:xoodyakround3
19.4819.5219.62T:schwaemm256128v2
23.6623.6923.73T:schwaemm256256v2
25.6225.7125.82T:schwaemm192192v2
27.0227.0427.07T:grain128aeadv2
27.5127.6627.78T:schwaemm128128v2
35.4035.4435.46romulusn
36.3036.3736.44T:isapa128v20
36.4136.4436.49T:isapa128av20
40.4940.5340.57T:giftcofb128v1
57.2057.2557.32romulusm
61.5261.5461.59T:tinyjambu128v2
65.0865.2065.21T:isapk128av20
68.7168.7268.76T:tinyjambu192v2
76.0676.0876.11T:tinyjambu256v2
85.3185.6485.73T:isapk128v20
112.28112.32112.35romulust
138.16?147.89?157.00?T:isapxv20
228.35229.88246.19T:elephant200v2
6479.216483.646489.62T:elephant176v2
7158.997163.707186.97T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.890.920.95T:aes256gcmv1
1.611.621.62T:aes128gcmv1
1.541.621.67aes128gcmv1
1.791.801.81aes256gcmv1
6.266.286.33ascon128av12
9.259.259.31ascon128v12
9.369.389.39ascon80pqv12
11.2311.2511.25ascon128abi32v12
16.7416.8916.97ascon128bi32v12
17.8417.8717.95T:xoodyakround3
18.0218.0418.13T:isapa128v20
19.4619.5319.61T:schwaemm256128v2
23.6523.6923.74T:schwaemm256256v2
24.1424.1924.20T:isapa128av20
25.6725.7125.78T:schwaemm192192v2
27.0127.0427.05T:grain128aeadv2
27.5027.5327.80T:schwaemm128128v2
35.4135.4735.51romulusn
37.4737.5637.59romulust
40.4940.5140.54T:giftcofb128v1
44.4344.4844.50T:isapk128av20
54.5954.6254.64T:isapk128v20
57.2257.2857.32romulusm
61.5161.5461.58T:tinyjambu128v2
68.7168.7268.73T:tinyjambu192v2
76.0876.1076.12T:tinyjambu256v2
86.4186.5787.22T:isapxv20
228.39229.92245.93T:elephant200v2
6478.316482.846487.84T:elephant176v2
7158.267164.797186.21T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.670.680.70T:aes256gcmv1
1.011.021.02T:aes128gcmv1
1.091.101.10aes256gcmv1
2.922.953.00aes128gcmv1
6.366.406.43ascon128av12
9.329.349.37ascon80pqv12
9.339.369.36ascon128v12
11.0511.0811.11ascon128abi32v12
13.5013.5313.59T:xoodyakround3
16.8016.8916.93ascon128bi32v12
19.3719.4219.49T:schwaemm256128v2
23.5623.5723.58T:schwaemm256256v2
25.5825.6325.68T:schwaemm192192v2
27.2327.2927.37T:grain128aeadv2
27.4827.4927.50T:isapa128v20
27.4327.5727.60T:schwaemm128128v2
28.7428.7528.77romulusn
30.3030.3230.35T:isapa128av20
39.4839.5639.59romulusm
40.4140.4240.46T:giftcofb128v1
50.5850.6150.69T:tinyjambu128v2
54.3154.3354.35T:tinyjambu192v2
54.7454.7854.81T:isapk128av20
57.9858.0158.02T:tinyjambu256v2
69.7869.8270.21T:isapk128v20
74.8674.8974.92romulust
116.32116.83117.30T:isapxv20
170.56171.52183.05T:elephant200v2
4840.714843.054845.68T:elephant176v2
5366.785371.355389.82T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.660.670.68T:aes256gcmv1
1.061.061.07T:aes128gcmv1
1.151.161.17aes256gcmv1
2.942.983.02aes128gcmv1
6.326.346.35ascon128av12
9.319.319.31ascon128v12
9.339.359.35ascon80pqv12
11.0711.1011.11ascon128abi32v12
13.4613.4913.51T:xoodyakround3
16.6916.7416.80ascon128bi32v12
19.3819.4119.45T:schwaemm256128v2
23.5523.5823.60T:schwaemm256256v2
25.6225.6725.73T:schwaemm192192v2
27.1127.1427.18T:grain128aeadv2
27.4427.4927.50T:isapa128v20
27.5027.6027.68T:schwaemm128128v2
28.6628.6728.69romulusn
30.3130.3130.37T:isapa128av20
39.5239.6039.72romulusm
40.4040.4240.45T:giftcofb128v1
50.5850.5950.64T:tinyjambu128v2
54.2154.2354.24T:tinyjambu192v2
54.8254.8454.92T:isapk128av20
58.0958.1058.11T:tinyjambu256v2
69.7470.1770.21T:isapk128v20
74.8874.9074.93romulust
112.10116.34121.80T:isapxv20
170.32171.27182.96T:elephant200v2
4842.334844.194846.53T:elephant176v2
5366.825370.705389.79T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.660.670.68T:aes256gcmv1
1.051.061.07T:aes128gcmv1
1.151.161.17aes256gcmv1
1.521.551.57aes128gcmv1
6.336.356.37ascon128av12
9.309.329.32ascon128v12
9.339.349.35ascon80pqv12
11.0911.1011.17ascon128abi32v12
13.4713.5113.53T:xoodyakround3
16.7016.7416.80ascon128bi32v12
18.3418.3518.36T:isapa128v20
19.3719.4219.46T:schwaemm256128v2
23.5223.5523.60T:schwaemm256256v2
24.1624.1724.19T:isapa128av20
25.5825.6425.68T:schwaemm192192v2
27.1427.1627.18T:grain128aeadv2
27.4327.5527.58T:schwaemm128128v2
28.6628.6828.69romulusn
37.5037.5337.55romulust
39.5639.5939.64romulusm
40.4040.4340.45T:giftcofb128v1
44.4644.4944.51T:isapk128av20
50.6150.6350.64T:tinyjambu128v2
54.2054.2254.22T:tinyjambu192v2
54.6254.6554.67T:isapk128v20
58.0358.0458.07T:tinyjambu256v2
86.3386.5186.71T:isapxv20
170.40171.41182.98T:elephant200v2
4841.284842.714847.29T:elephant176v2
5366.935372.445390.23T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.410.430.44T:aes256gcmv1
0.510.520.54T:aes128gcmv1
0.510.520.54aes256gcmv1
1.491.501.51aes128gcmv1
6.306.356.38ascon128av12
9.079.109.14T:xoodyakround3
9.259.279.29ascon80pqv12
9.289.299.30ascon128v12
10.9210.9510.95ascon128abi32v12
16.5316.6816.73ascon128bi32v12
18.2318.2318.24T:isapa128v20
19.1719.2919.35T:schwaemm256128v2
21.8921.9322.02romulusm
21.8521.9521.97romulusn
23.4223.4523.47T:schwaemm256256v2
24.1524.1624.22T:isapa128av20
25.4525.5725.64T:schwaemm192192v2
27.1327.1927.21T:grain128aeadv2
27.3327.3827.52T:schwaemm128128v2
37.5037.5637.58romulust
39.6939.7139.72T:tinyjambu192v2
39.6939.7139.72T:tinyjambu128v2
40.0140.0240.02T:tinyjambu256v2
40.2340.3140.35T:giftcofb128v1
44.5044.5944.62T:isapk128av20
54.6354.7454.75T:isapk128v20
85.6185.9586.29T:isapxv20
112.34113.34120.81T:elephant200v2
3193.163196.123201.87T:elephant176v2
3573.083578.233585.29T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.410.440.44T:aes256gcmv1
0.500.520.54T:aes128gcmv1
0.520.520.54aes256gcmv1
1.501.501.55aes128gcmv1
6.346.376.39ascon128av12
9.079.139.17T:xoodyakround3
9.289.299.31ascon80pqv12
9.279.299.30ascon128v12
10.9410.9610.97ascon128abi32v12
16.4616.5816.69ascon128bi32v12
18.2218.2418.26T:isapa128v20
19.1919.2819.34T:schwaemm256128v2
21.8621.8921.93romulusn
21.7921.9121.99romulusm
23.4323.4623.47T:schwaemm256256v2
24.1424.2024.26T:isapa128av20
25.4225.4825.61T:schwaemm192192v2
26.5526.6527.26T:grain128aeadv2
27.3127.6627.84T:schwaemm128128v2
37.4837.5237.59romulust
39.6639.6839.71T:tinyjambu128v2
39.6939.7039.70T:tinyjambu192v2
40.1340.1340.13T:tinyjambu256v2
40.2740.3240.35T:giftcofb128v1
44.4644.5144.59T:isapk128av20
54.6554.7054.72T:isapk128v20
85.7086.0086.78T:isapxv20
112.47113.35120.76T:elephant200v2
3193.703195.323199.77T:elephant176v2
3571.583576.833584.95T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.410.430.44T:aes256gcmv1
0.510.520.53T:aes128gcmv1
0.520.520.53aes256gcmv1
1.471.511.54aes128gcmv1
6.376.386.39ascon128av12
9.059.129.16T:xoodyakround3
9.279.289.32ascon128v12
9.289.299.29ascon80pqv12
10.9510.9611.02ascon128abi32v12
16.5016.5816.68ascon128bi32v12
18.2218.2318.26T:isapa128v20
19.2119.2919.35T:schwaemm256128v2
21.7721.8521.95romulusm
21.8421.9021.91romulusn
23.4223.4623.53T:schwaemm256256v2
24.1224.1824.23T:isapa128av20
25.4825.5325.61T:schwaemm192192v2
26.6226.9527.29T:grain128aeadv2
27.3027.5627.81T:schwaemm128128v2
37.4837.5137.59romulust
39.6839.6939.70T:tinyjambu128v2
39.7039.7039.70T:tinyjambu192v2
40.0140.0840.08T:tinyjambu256v2
40.2840.3140.35T:giftcofb128v1
44.4744.5044.53T:isapk128av20
54.6554.6954.71T:isapk128v20
86.0086.3587.06T:isapxv20
112.37113.27120.90T:elephant200v2
3193.223198.593200.22T:elephant176v2
3573.863578.563586.64T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.131.141.14T:aes128gcmv1
1.231.231.24aes256gcmv1
1.231.241.26T:aes256gcmv1
3.073.113.17aes128gcmv1
6.546.576.59ascon128av12
9.489.499.50ascon128v12
9.499.509.52ascon80pqv12
11.3711.3911.41ascon128abi32v12
13.6713.6913.69T:xoodyakround3
17.1917.2117.24ascon128bi32v12
19.9519.9720.03T:schwaemm256128v2
24.1924.1924.21T:schwaemm256256v2
26.1626.2126.26T:schwaemm192192v2
27.5927.6527.69T:grain128aeadv2
27.8327.9528.00T:schwaemm128128v2
29.0029.0329.03romulusn
33.5133.5333.55T:isapa128av20
39.8139.8739.96romulusm
40.5440.5440.55T:isapa128v20
40.7940.8240.84T:giftcofb128v1
50.9651.0351.09T:tinyjambu128v2
54.7554.7654.76T:tinyjambu192v2
58.4358.4758.48T:tinyjambu256v2
60.9060.9260.93T:isapk128av20
76.0276.0376.05romulust
121.56121.59121.92T:isapk128v20
174.82174.85185.84T:elephant200v2
189.58190.04190.10T:isapxv20
4875.264877.284880.32T:elephant176v2
5427.945431.275445.73T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.181.181.19T:aes128gcmv1
1.211.241.25T:aes256gcmv1
1.301.301.31aes256gcmv1
3.193.233.25aes128gcmv1
6.496.506.51ascon128av12
9.469.469.46ascon128v12
9.489.489.51ascon80pqv12
11.4011.4011.41ascon128abi32v12
13.6313.6313.65T:xoodyakround3
17.0717.0917.12ascon128bi32v12
19.9520.0020.04T:schwaemm256128v2
24.1424.1524.22T:schwaemm256256v2
26.1826.2326.28T:schwaemm192192v2
27.4927.5127.52T:grain128aeadv2
27.8227.9527.98T:schwaemm128128v2
28.9428.9728.99romulusn
33.5333.5333.54T:isapa128av20
39.9439.9439.98romulusm
40.4840.5540.56T:isapa128v20
40.7840.8140.82T:giftcofb128v1
50.9951.0151.04T:tinyjambu128v2
54.6254.6454.66T:tinyjambu192v2
58.5258.5358.54T:tinyjambu256v2
60.9360.9760.99T:isapk128av20
76.0476.0676.09romulust
121.61121.95122.03T:isapk128v20
174.94174.95185.92T:elephant200v2
189.29189.37195.64T:isapxv20
4876.904878.404882.29T:elephant176v2
5429.075433.035447.01T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.181.181.19T:aes128gcmv1
1.221.231.24T:aes256gcmv1
1.301.301.31aes256gcmv1
1.751.771.79aes128gcmv1
6.506.506.51ascon128av12
9.459.469.46ascon128v12
9.489.489.50ascon80pqv12
11.4011.4011.44ascon128abi32v12
13.6113.6513.67T:xoodyakround3
17.0617.1017.11ascon128bi32v12
19.9519.9920.04T:schwaemm256128v2
24.1624.1724.24T:schwaemm256256v2
25.1525.1525.16T:isapa128v20
25.9625.9825.98T:isapa128av20
26.1626.2126.25T:schwaemm192192v2
27.4927.5027.52T:grain128aeadv2
27.8327.9127.98T:schwaemm128128v2
28.9528.9528.99romulusn
38.6238.6338.65romulust
39.9839.9940.00romulusm
40.7940.8140.83T:giftcofb128v1
47.9547.9647.97T:isapk128av20
50.9951.0151.04T:tinyjambu128v2
54.6254.6454.66T:tinyjambu192v2
58.5058.5158.53T:tinyjambu256v2
81.1281.1481.15T:isapk128v20
123.85123.91124.14T:isapxv20
174.89174.91186.01T:elephant200v2
4876.974878.344881.94T:elephant176v2
5428.635437.875446.56T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.596.656.88aes128gcmv1
7.017.237.31T:aes128gcmv1
7.487.508.14aes256gcmv1
10.6610.7310.81ascon128av12
12.6113.0013.38ascon80pqv12
12.7113.1113.53ascon128v12
14.2414.3414.62T:aes256gcmv1
17.9318.3718.95ascon128abi32v12
20.0920.3720.54T:xoodyakround3
24.2924.8626.27ascon128bi32v12
32.8732.9533.39T:schwaemm256128v2
35.0335.2335.37romulusn
35.4035.7235.95T:grain128aeadv2
35.7736.1436.55T:schwaemm128128v2
38.5938.6738.75T:schwaemm256256v2
42.4542.7143.34T:schwaemm192192v2
46.7947.0047.38romulusm
49.3649.5849.72T:giftcofb128v1
59.9760.1360.27T:tinyjambu128v2
64.1464.2964.66T:tinyjambu192v2
68.0968.6268.78T:tinyjambu256v2
102.00102.12102.34romulust
106.88106.97107.61T:isapa128av20
191.75191.84191.91T:isapk128av20
246.13246.32262.14T:elephant200v2
339.84339.84340.05T:isapa128v20
1298.521298.521299.02T:isapk128v20
1850.541853.861859.32T:isapxv20
6059.706061.936066.51T:elephant176v2
7260.337266.167280.46T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.686.837.16T:aes128gcmv1
7.497.507.91aes256gcmv1
8.528.708.93aes128gcmv1
10.7310.8010.95ascon128av12
12.7112.9013.25ascon128v12
12.8413.0013.36ascon80pqv12
14.0814.2214.59T:aes256gcmv1
18.0218.8819.06ascon128abi32v12
19.9320.6621.43T:xoodyakround3
24.0625.0026.15ascon128bi32v12
32.8232.9933.92T:schwaemm256128v2
35.1635.3935.50romulusn
35.7235.9136.30T:grain128aeadv2
36.1736.5036.75T:schwaemm128128v2
38.5538.6638.69T:schwaemm256256v2
42.2342.9243.69T:schwaemm192192v2
48.3448.5548.92romulusm
49.5949.7750.29T:giftcofb128v1
60.0560.2460.30T:tinyjambu128v2
64.0564.1264.12T:tinyjambu192v2
68.1568.3568.63T:tinyjambu256v2
102.38102.58102.74romulust
106.60106.83107.35T:isapa128av20
189.56189.61190.29T:isapk128av20
245.86246.05262.61T:elephant200v2
340.07340.08341.10T:isapa128v20
1298.781299.041299.77T:isapk128v20
1850.041857.111989.29T:isapxv20
6059.096062.496065.84T:elephant176v2
7260.847266.217280.56T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.496.577.16aes128gcmv1
6.756.846.91T:aes128gcmv1
7.507.697.84aes256gcmv1
10.3610.6910.84ascon128av12
12.7012.8212.93ascon128v12
12.8412.9313.21ascon80pqv12
14.1314.2914.35T:aes256gcmv1
18.0118.2518.56ascon128abi32v12
19.8420.4520.57T:xoodyakround3
23.8625.0225.78ascon128bi32v12
32.8232.8433.84T:schwaemm256128v2
35.4135.4135.44romulusn
35.0835.7836.33T:grain128aeadv2
36.1336.5136.89T:schwaemm128128v2
38.5538.6638.68T:schwaemm256256v2
42.3442.6843.05T:schwaemm192192v2
48.2648.5248.82romulusm
49.8449.9550.16T:giftcofb128v1
59.9860.2260.22T:tinyjambu128v2
63.6263.9064.34romulust
64.1864.2964.29T:tinyjambu192v2
66.5866.7067.05T:isapa128av20
68.2968.3068.40T:tinyjambu256v2
118.55118.61119.03T:isapk128av20
180.83181.11182.19T:isapa128v20
245.91246.08262.06T:elephant200v2
679.05679.59679.73T:isapk128v20
968.48970.51972.88T:isapxv20
6057.636061.156067.17T:elephant176v2
7259.947264.237281.74T:elephant160v2

amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.471.481.49T:aes128gcmv1
1.621.641.67aes256gcmv1
5.085.145.19aes128gcmv1
10.7510.7710.78ascon128av12
15.1215.1415.15ascon80pqv12
15.3315.3415.36ascon128v12
20.9621.7321.77T:xoodyakround3
22.0922.1122.13T:schwaemm256128v2
23.2223.4223.42ascon128abi32v12
29.2629.3829.41T:schwaemm192192v2
32.2832.4232.48T:schwaemm256256v2
33.5133.6134.72T:schwaemm128128v2
34.1034.1134.13ascon128bi32v12
38.9538.9939.12T:grain128aeadv2
47.4747.4847.48romulusn
47.9648.1548.33T:giftcofb128v1
61.0861.6062.39T:isapa128av20
68.3168.4269.05T:isapa128v20
75.9476.0476.14T:tinyjambu128v2
76.8576.9176.97romulusm
95.3895.5095.65T:tinyjambu192v2
103.95104.02104.08T:tinyjambu256v2
106.69106.79106.95T:isapk128av20
141.13141.47142.15T:isapk128v20
145.58145.75146.02romulust
199.22200.53203.51T:elephant200v2
184.47?213.08?241.78?T:isapxv20
10394.1810396.0810404.89T:elephant176v2
11802.5011806.3711808.58T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.601.611.62T:aes128gcmv1
1.701.711.73aes256gcmv1
5.155.195.22aes128gcmv1
10.2310.2510.27ascon128av12
15.0815.1815.53ascon128v12
15.2215.3615.40ascon80pqv12
20.6320.6520.79T:xoodyakround3
22.0922.1222.17T:schwaemm256128v2
23.4323.4423.45ascon128abi32v12
29.3129.3929.41T:schwaemm192192v2
32.2232.4332.46T:schwaemm256256v2
33.8533.9333.95ascon128bi32v12
33.6834.0034.40T:schwaemm128128v2
39.0539.7839.85T:grain128aeadv2
47.4547.4747.49romulusn
47.8047.9248.00T:giftcofb128v1
61.8562.0362.11T:isapa128av20
68.3968.4769.14T:isapa128v20
76.4476.4776.51T:tinyjambu128v2
77.0877.1977.34romulusm
95.1595.3195.40T:tinyjambu192v2
104.28104.31104.40T:tinyjambu256v2
106.70106.79107.07T:isapk128av20
141.33141.47141.84T:isapk128v20
145.50145.60145.88romulust
197.08198.10203.14T:elephant200v2
212.57213.24213.99T:isapxv20
10394.5010399.7210403.58T:elephant176v2
11800.4211805.4811811.09T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.591.601.62T:aes128gcmv1
1.701.711.72aes256gcmv1
1.891.911.94aes128gcmv1
10.2510.2610.28ascon128av12
15.2415.2615.38ascon80pqv12
15.1515.5315.54ascon128v12
20.7020.7420.85T:xoodyakround3
22.1222.1322.15T:schwaemm256128v2
23.3223.4523.45ascon128abi32v12
29.3129.3929.41T:schwaemm192192v2
32.3132.4432.47T:schwaemm256256v2
33.3433.4934.40T:schwaemm128128v2
33.8733.9333.94ascon128bi32v12
34.0634.4034.75T:isapa128v20
39.0639.1939.66T:grain128aeadv2
41.0541.2941.41T:isapa128av20
47.4647.5047.73romulusn
48.0148.4548.51T:giftcofb128v1
51.8351.9352.03romulust
70.6970.7570.80T:isapk128av20
76.4276.4876.52T:tinyjambu128v2
77.1677.2377.27romulusm
87.9688.0288.23T:isapk128v20
95.2095.3895.47T:tinyjambu192v2
104.26104.30104.37T:tinyjambu256v2
126.49126.68126.85T:isapxv20
197.14199.59203.14T:elephant200v2
10402.6210404.3810407.13T:elephant176v2
11803.5811808.1111811.00T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.001.011.02T:aes128gcmv1
1.081.101.11aes256gcmv1
3.463.493.51aes128gcmv1
10.4010.4110.43ascon128av12
14.9714.9915.00ascon80pqv12
15.0715.0815.09ascon128v12
15.5315.5415.56T:xoodyakround3
21.9822.0222.04T:schwaemm256128v2
23.0923.1923.20ascon128abi32v12
29.1529.2129.22T:schwaemm192192v2
32.1832.2032.26T:schwaemm256256v2
33.3733.8534.21T:schwaemm128128v2
34.0834.1234.23ascon128bi32v12
38.5438.5838.63romulusn
38.8938.9538.99T:grain128aeadv2
47.9548.1348.16T:giftcofb128v1
50.9651.0951.26T:isapa128v20
51.0451.4751.63T:isapa128av20
53.1253.3453.40romulusm
62.1562.2262.27T:tinyjambu128v2
74.6074.6974.74T:tinyjambu192v2
78.5578.5778.60T:tinyjambu256v2
88.7188.7988.89T:isapk128av20
98.4298.5098.67romulust
114.37115.11115.79T:isapk128v20
148.63149.78152.70T:elephant200v2
154.57?169.43?183.47?T:isapxv20
7763.897769.207771.24T:elephant176v2
8846.078850.688851.38T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.051.071.08T:aes128gcmv1
1.111.131.14aes256gcmv1
3.493.513.53aes128gcmv1
10.2810.2910.32ascon128av12
15.0315.1015.15ascon80pqv12
14.9415.1615.18ascon128v12
15.3215.3515.39T:xoodyakround3
21.9621.9922.05T:schwaemm256128v2
23.0623.0723.14ascon128abi32v12
29.1429.1829.21T:schwaemm192192v2
32.1732.2132.27T:schwaemm256256v2
33.5633.6033.61ascon128bi32v12
33.5434.0134.53T:schwaemm128128v2
38.5538.5738.61romulusn
38.8839.1739.21T:grain128aeadv2
48.0348.1448.17T:giftcofb128v1
50.9251.0951.29T:isapa128v20
51.1151.3051.44T:isapa128av20
53.4653.5153.59romulusm
62.4062.4762.51T:tinyjambu128v2
74.4774.5674.67T:tinyjambu192v2
78.7078.7578.80T:tinyjambu256v2
88.7688.7989.12T:isapk128av20
98.3998.5498.89romulust
114.17114.89115.66T:isapk128v20
148.75149.71152.90T:elephant200v2
169.17169.48169.55T:isapxv20
7759.527767.497771.19T:elephant176v2
8843.388849.438851.06T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.061.071.08T:aes128gcmv1
1.131.131.14aes256gcmv1
1.861.881.89aes128gcmv1
10.2610.2910.30ascon128av12
15.0515.0915.12ascon80pqv12
14.9615.1815.19ascon128v12
15.3615.3815.42T:xoodyakround3
21.9822.0022.02T:schwaemm256128v2
23.0723.0723.14ascon128abi32v12
29.1429.1729.21T:schwaemm192192v2
32.1932.2132.28T:schwaemm256256v2
33.5533.5833.60ascon128bi32v12
33.5933.9334.37T:schwaemm128128v2
33.9534.0534.37T:isapa128v20
38.5638.6138.66romulusn
38.8939.1839.26T:grain128aeadv2
40.7540.9841.03T:isapa128av20
48.0148.1048.17T:giftcofb128v1
51.5651.5951.65romulust
53.3953.5253.57romulusm
62.3862.4562.48T:tinyjambu128v2
70.7370.7870.80T:isapk128av20
74.5274.6074.67T:tinyjambu192v2
78.7078.7778.84T:tinyjambu256v2
87.8588.0488.49T:isapk128v20
126.38126.46126.52T:isapxv20
148.67149.24153.04T:elephant200v2
7764.447765.457768.36T:elephant176v2
8849.058851.178854.47T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.540.560.57T:aes128gcmv1
0.550.570.58aes256gcmv1
1.811.821.83aes128gcmv1
10.0110.0410.07T:xoodyakround3
10.0510.0610.07ascon128av12
14.7914.8114.82ascon128v12
14.8114.8414.85ascon80pqv12
21.8121.8821.92T:schwaemm256128v2
22.9322.9522.96ascon128abi32v12
29.0329.0629.07T:schwaemm192192v2
29.7829.8629.90romulusm
29.6629.9329.99romulusn
31.9932.0432.10T:schwaemm256256v2
33.4433.4933.98T:isapa128v20
33.4433.9734.48T:schwaemm128128v2
34.0334.1234.32ascon128bi32v12
38.6338.9638.97T:grain128aeadv2
41.0241.1241.23T:isapa128av20
47.9248.0548.22T:giftcofb128v1
48.3248.4248.50T:tinyjambu128v2
51.4051.4851.60romulust
53.1353.2053.26T:tinyjambu256v2
53.7653.8453.86T:tinyjambu192v2
70.6770.7870.88T:isapk128av20
87.4488.0388.96T:isapk128v20
100.03100.79102.83T:elephant200v2
125.60126.00126.77T:isapxv20
5134.115136.995139.92T:elephant176v2
5895.035898.975901.98T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.530.540.55T:aes128gcmv1
0.550.560.57aes256gcmv1
1.801.821.84aes128gcmv1
10.0010.0110.03T:xoodyakround3
10.2910.3110.32ascon128av12
14.8114.8114.82ascon128v12
14.8114.8314.84ascon80pqv12
21.7721.8721.91T:schwaemm256128v2
22.6822.8222.83ascon128abi32v12
29.0329.0429.06T:schwaemm192192v2
29.6829.6929.81romulusn
29.7529.8429.93romulusm
32.0832.1432.17T:schwaemm256256v2
33.2433.2533.26ascon128bi32v12
33.4633.6234.35T:isapa128v20
33.7733.9534.08T:schwaemm128128v2
38.7038.7238.73T:grain128aeadv2
40.9341.0441.25T:isapa128av20
47.8948.1448.30T:giftcofb128v1
48.3748.4248.45T:tinyjambu128v2
51.3851.5251.64romulust
53.1353.1653.21T:tinyjambu256v2
53.7953.8253.90T:tinyjambu192v2
70.6870.7670.82T:isapk128av20
87.8188.0188.45T:isapk128v20
100.52100.68103.02T:elephant200v2
126.28126.37126.65T:isapxv20
5135.165135.905141.44T:elephant176v2
5895.115898.505900.86T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.540.540.55T:aes128gcmv1
0.560.570.58aes256gcmv1
1.781.821.86aes128gcmv1
10.0010.0310.06T:xoodyakround3
10.3010.3210.33ascon128av12
14.8014.8114.82ascon128v12
14.8414.8414.85ascon80pqv12
21.8121.9021.93T:schwaemm256128v2
22.6822.8222.82ascon128abi32v12
29.0329.0429.04T:schwaemm192192v2
29.6929.7329.80romulusn
29.8029.9029.95romulusm
31.9832.0832.12T:schwaemm256256v2
33.1033.1933.51T:isapa128v20
33.2433.2533.26ascon128bi32v12
33.8533.9534.02T:schwaemm128128v2
38.7238.7338.77T:grain128aeadv2
40.9541.0241.17T:isapa128av20
47.8948.1848.57T:giftcofb128v1
48.3548.3848.48T:tinyjambu128v2
51.3951.5051.57romulust
53.1253.1653.23T:tinyjambu256v2
53.7753.8053.88T:tinyjambu192v2
70.6970.7871.29T:isapk128av20
87.9388.0788.21T:isapk128v20
100.53100.86102.93T:elephant200v2
126.27126.41126.67T:isapxv20
5132.375136.475138.00T:elephant176v2
5897.405900.145902.45T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.151.151.16T:aes128gcmv1
1.261.261.27aes256gcmv1
3.643.673.68aes128gcmv1
10.6710.6810.69ascon128av12
15.2315.2415.28ascon80pqv12
15.3015.3115.32ascon128v12
15.7115.7215.95T:xoodyakround3
22.6222.6622.68T:schwaemm256128v2
23.6023.6723.69ascon128abi32v12
29.8229.8329.83T:schwaemm192192v2
33.0433.0833.14T:schwaemm256256v2
33.8934.3234.90T:schwaemm128128v2
34.6034.6334.73ascon128bi32v12
38.9538.9638.99romulusn
39.3539.4039.42T:grain128aeadv2
48.4748.5648.77T:giftcofb128v1
53.7453.7953.84romulusm
55.0655.2255.41T:isapa128av20
62.5662.7162.84T:tinyjambu128v2
74.5374.6974.72T:isapa128v20
75.2075.2275.30T:tinyjambu192v2
79.1779.2079.23T:tinyjambu256v2
99.0599.0899.18T:isapk128av20
100.14100.23100.29romulust
152.04152.80155.75T:elephant200v2
202.07202.20203.11T:isapk128v20
277.70278.26295.98T:isapxv20
7826.607827.837830.48T:elephant176v2
8950.288951.558952.93T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.201.211.22T:aes128gcmv1
1.291.291.30aes256gcmv1
3.743.753.77aes128gcmv1
10.5510.5510.56ascon128av12
15.2815.3015.34ascon80pqv12
15.2015.3915.41ascon128v12
15.5015.5115.56T:xoodyakround3
22.6222.6522.67T:schwaemm256128v2
23.5823.5823.65ascon128abi32v12
29.8329.8629.87T:schwaemm192192v2
33.0233.0533.14T:schwaemm256256v2
34.0734.1034.10ascon128bi32v12
34.0734.4034.93T:schwaemm128128v2
38.9438.9638.99romulusn
39.3639.5739.64T:grain128aeadv2
48.5348.6548.81T:giftcofb128v1
53.9154.0054.05romulusm
54.8555.1755.30T:isapa128av20
62.9062.9463.00T:tinyjambu128v2
74.5474.6674.72T:isapa128v20
75.0775.1775.21T:tinyjambu192v2
79.3279.3579.44T:tinyjambu256v2
99.0999.1099.69T:isapk128av20
100.11100.26100.32romulust
151.95152.37155.85T:elephant200v2
202.10202.13202.48T:isapk128v20
277.57278.07278.34T:isapxv20
7823.027826.747828.39T:elephant176v2
8950.318951.148953.48T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.201.201.21T:aes128gcmv1
1.291.291.29aes256gcmv1
2.092.102.12aes128gcmv1
10.5510.5510.55ascon128av12
15.1915.2315.40ascon128v12
15.2815.2815.34ascon80pqv12
15.5215.5515.59T:xoodyakround3
22.6122.6322.65T:schwaemm256128v2
23.5823.5823.65ascon128abi32v12
29.8329.8729.91T:schwaemm192192v2
33.0333.0533.14T:schwaemm256256v2
34.0734.0834.10ascon128bi32v12
34.0934.4034.97T:schwaemm128128v2
38.9238.9839.01romulusn
39.3639.3739.65T:grain128aeadv2
42.9043.0943.12T:isapa128av20
46.0446.0946.27T:isapa128v20
48.4648.5948.69T:giftcofb128v1
53.1553.2653.33romulust
53.9154.0254.08romulusm
62.8962.9562.98T:tinyjambu128v2
75.0675.1675.23T:tinyjambu192v2
76.8176.8476.88T:isapk128av20
79.3179.3579.41T:tinyjambu256v2
134.39134.40134.49T:isapk128v20
151.95152.37155.59T:elephant200v2
181.93182.04182.14T:isapxv20
7817.707825.037828.19T:elephant176v2
8949.888950.908953.51T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.037.317.40aes256gcmv1
7.487.618.00aes128gcmv1
7.557.627.73T:aes128gcmv1
16.0416.1716.52ascon128av12
20.2320.3920.55ascon128v12
20.4420.6020.72ascon80pqv12
23.1523.4123.49T:xoodyakround3
34.9835.0435.63ascon128abi32v12
37.1537.2337.45T:schwaemm256128v2
44.0244.1644.46T:schwaemm128128v2
45.9346.0246.28ascon128bi32v12
47.2247.3347.47romulusn
48.3748.5048.57T:schwaemm192192v2
49.7049.8250.02T:grain128aeadv2
52.5952.8253.10T:schwaemm256256v2
59.0959.4559.59T:giftcofb128v1
62.4762.7362.91romulusm
73.9574.2074.39T:tinyjambu128v2
88.2988.5588.67T:tinyjambu192v2
92.6292.7393.02T:tinyjambu256v2
137.23138.13138.88romulust
141.16141.50141.78T:isapa128av20
216.86217.30221.33T:elephant200v2
318.16318.42319.52T:isapk128av20
616.13616.52616.64T:isapa128v20
2187.552188.652189.21T:isapk128v20
2745.55?2753.34?3181.16?T:isapxv20
9746.629752.319758.56T:elephant176v2
11982.4911986.4711993.07T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.786.967.43aes256gcmv1
7.457.507.63T:aes128gcmv1
9.259.5310.00aes128gcmv1
16.0416.1216.44ascon128av12
20.2620.4320.69ascon128v12
20.4020.5420.82ascon80pqv12
22.7722.8723.30T:xoodyakround3
35.0535.2335.54ascon128abi32v12
37.2237.2337.27T:schwaemm256128v2
44.2044.4144.66T:schwaemm128128v2
45.4845.5545.86ascon128bi32v12
47.2947.4547.81romulusn
48.2248.3448.45T:schwaemm192192v2
49.6849.8150.04T:grain128aeadv2
52.5452.5852.68T:schwaemm256256v2
59.4559.5759.91T:giftcofb128v1
65.4465.6566.05romulusm
74.1374.3874.64T:tinyjambu128v2
88.1688.3188.55T:tinyjambu192v2
92.8893.0293.26T:tinyjambu256v2
137.71138.09138.39romulust
141.31141.70142.38T:isapa128av20
216.72217.04221.09T:elephant200v2
318.23318.70319.68T:isapk128av20
611.58616.31616.71T:isapa128v20
2188.322189.292194.24T:isapk128v20
2743.682745.072748.80T:isapxv20
9741.409744.809759.44T:elephant176v2
11983.1411987.9111993.73T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.736.776.87aes256gcmv1
7.137.267.58aes128gcmv1
7.527.597.71T:aes128gcmv1
16.0416.1516.20ascon128av12
20.1720.2220.26ascon128v12
20.3620.3920.52ascon80pqv12
22.9123.1023.18T:xoodyakround3
35.0935.1335.27ascon128abi32v12
37.1737.2437.27T:schwaemm256128v2
43.9844.1944.38T:schwaemm128128v2
45.4945.5345.70ascon128bi32v12
47.3047.3947.59romulusn
48.2048.2848.38T:schwaemm192192v2
49.5949.6349.78T:grain128aeadv2
52.5552.6252.68T:schwaemm256256v2
59.3159.6259.84T:giftcofb128v1
65.3065.4565.60romulusm
74.1774.4174.49T:tinyjambu128v2
88.0088.1488.35T:tinyjambu192v2
88.8689.1489.47romulust
91.2091.5991.89T:isapa128av20
92.8692.9993.15T:tinyjambu256v2
201.66201.91202.20T:isapk128av20
216.61217.14221.19T:elephant200v2
319.14324.06324.32T:isapa128v20
1182.861183.371184.98T:isapk128v20
1435.281436.621438.62T:isapxv20
9734.739741.209755.76T:elephant176v2
11969.8811985.5011990.17T:elephant160v2

amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.461.471.49T:aes128gcmv1
1.641.641.66aes256gcmv1
5.055.115.16aes128gcmv1
10.5310.7110.73ascon128av12
15.1215.1515.25ascon80pqv12
15.3315.3415.36ascon128v12
20.9921.0421.54T:xoodyakround3
22.0722.1122.14T:schwaemm256128v2
23.2123.2223.42ascon128abi32v12
29.2329.2729.32T:schwaemm192192v2
32.3432.4232.45T:schwaemm256256v2
33.5033.6433.72T:schwaemm128128v2
34.0934.1234.13ascon128bi32v12
38.9939.0339.12T:grain128aeadv2
46.8446.8446.86romulusn
48.0848.1748.23T:giftcofb128v1
61.0062.0162.23T:isapa128av20
68.3968.5269.15T:isapa128v20
75.9876.0676.19T:tinyjambu128v2
76.8776.9276.97romulusm
95.3795.4595.54T:tinyjambu192v2
104.48104.54104.59T:tinyjambu256v2
106.35106.45106.71T:isapk128av20
137.38141.51146.19T:isapk128v20
145.63146.16146.25romulust
196.03200.97201.90T:elephant200v2
211.95214.39215.38T:isapxv20
10384.3010393.6610396.38T:elephant176v2
11794.3911800.5911809.12T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.591.611.62T:aes128gcmv1
1.701.711.73aes256gcmv1
5.115.195.25aes128gcmv1
10.5410.5510.60ascon128av12
15.2315.3215.38ascon80pqv12
15.4915.5115.54ascon128v12
20.6120.6620.70T:xoodyakround3
22.0922.1222.14T:schwaemm256128v2
23.1423.4423.44ascon128abi32v12
29.3029.3629.40T:schwaemm192192v2
32.2432.4132.45T:schwaemm256256v2
33.6633.7233.76T:schwaemm128128v2
33.8533.9333.95ascon128bi32v12
39.3939.5139.54T:grain128aeadv2
46.8446.8546.86romulusn
47.8147.8547.88T:giftcofb128v1
61.6361.9362.11T:isapa128av20
68.2268.5669.06T:isapa128v20
76.4076.4776.53T:tinyjambu128v2
77.0777.1477.30romulusm
95.1295.3895.46T:tinyjambu192v2
104.23104.27104.36T:tinyjambu256v2
106.29106.40107.42T:isapk128av20
138.44140.87146.49T:isapk128v20
145.44145.78145.97romulust
198.87201.20201.49T:elephant200v2
212.08213.45215.14T:isapxv20
10386.9210392.9610395.98T:elephant176v2
11802.4911805.1211808.84T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.591.601.61T:aes128gcmv1
1.691.721.72aes256gcmv1
1.871.921.96aes128gcmv1
10.5410.5510.60ascon128av12
15.2415.3015.38ascon80pqv12
15.5215.5315.54ascon128v12
20.6620.7120.76T:xoodyakround3
22.1122.1322.17T:schwaemm256128v2
23.4323.4423.45ascon128abi32v12
29.2429.3829.41T:schwaemm192192v2
32.2232.4332.45T:schwaemm256256v2
33.6333.6833.74T:schwaemm128128v2
33.8733.9333.95ascon128bi32v12
34.3534.4234.70T:isapa128v20
39.3239.5139.53T:grain128aeadv2
40.7041.0341.45T:isapa128av20
46.8446.8446.85romulusn
47.9647.9948.03T:giftcofb128v1
51.9051.9752.02romulust
70.5870.6671.26T:isapk128av20
76.4076.4576.48T:tinyjambu128v2
77.1177.1977.30romulusm
85.1688.1491.90T:isapk128v20
95.1495.3595.42T:tinyjambu192v2
104.27104.33104.37T:tinyjambu256v2
126.39126.82128.05T:isapxv20
195.90200.95201.68T:elephant200v2
10387.5710389.0210406.15T:elephant176v2
11800.4911803.1911808.88T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.001.021.02T:aes128gcmv1
1.081.101.10aes256gcmv1
3.463.483.50aes128gcmv1
10.3310.4110.43ascon128av12
14.9714.9915.00ascon80pqv12
15.0615.0815.09ascon128v12
15.5015.5315.56T:xoodyakround3
21.9722.0222.06T:schwaemm256128v2
23.1723.1923.20ascon128abi32v12
29.1329.1929.21T:schwaemm192192v2
32.1632.2232.29T:schwaemm256256v2
33.6233.6933.76T:schwaemm128128v2
34.0934.1434.24ascon128bi32v12
38.8738.8938.93T:grain128aeadv2
39.1739.2239.50romulusn
47.9848.0848.19T:giftcofb128v1
51.0051.3551.53T:isapa128v20
51.2051.4451.81T:isapa128av20
53.3153.3353.41romulusm
62.2262.2662.36T:tinyjambu128v2
74.6274.6674.68T:tinyjambu192v2
78.7778.8078.84T:tinyjambu256v2
88.5388.7690.61T:isapk128av20
98.4698.5698.67romulust
114.73115.81116.28T:isapk128v20
149.08151.51152.09T:elephant200v2
169.36170.71171.32T:isapxv20
7758.127761.307771.57T:elephant176v2
8849.758850.678852.93T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.051.071.08T:aes128gcmv1
1.121.141.14aes256gcmv1
3.483.503.53aes128gcmv1
10.4210.4410.45ascon128av12
15.0215.0515.11ascon80pqv12
15.0515.1615.18ascon128v12
15.3215.3415.37T:xoodyakround3
21.9722.0022.04T:schwaemm256128v2
22.9923.0723.14ascon128abi32v12
29.1829.1929.23T:schwaemm192192v2
32.0932.2032.28T:schwaemm256256v2
33.4933.5633.68T:schwaemm128128v2
33.5933.6033.61ascon128bi32v12
39.0339.0739.14T:grain128aeadv2
39.2139.2339.39romulusn
47.9548.0248.17T:giftcofb128v1
51.0451.2251.35T:isapa128v20
51.1051.3151.56T:isapa128av20
53.4153.4753.51romulusm
62.4062.4562.54T:tinyjambu128v2
74.4174.5174.60T:tinyjambu192v2
78.6978.7378.77T:tinyjambu256v2
88.4488.5890.77T:isapk128av20
98.4898.5698.89romulust
114.68115.14116.22T:isapk128v20
148.85151.43151.85T:elephant200v2
169.39169.82171.19T:isapxv20
7754.087763.907770.38T:elephant176v2
8844.988848.648850.68T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.061.071.08T:aes128gcmv1
1.121.131.14aes256gcmv1
1.841.861.88aes128gcmv1
10.4310.4510.49ascon128av12
15.0515.1015.12ascon80pqv12
14.9615.1215.19ascon128v12
15.3615.3815.40T:xoodyakround3
21.9722.0022.05T:schwaemm256128v2
23.0723.0723.14ascon128abi32v12
29.1129.1429.17T:schwaemm192192v2
32.0932.2032.29T:schwaemm256256v2
33.5733.6033.61ascon128bi32v12
33.5433.6433.71T:schwaemm128128v2
33.9433.9834.34T:isapa128v20
39.0339.0439.14T:grain128aeadv2
39.1939.2739.39romulusn
40.5940.6740.98T:isapa128av20
48.0048.1148.25T:giftcofb128v1
51.6851.7951.89romulust
53.4153.4753.52romulusm
62.4162.4562.51T:tinyjambu128v2
70.6070.7172.21T:isapk128av20
74.4474.5774.61T:tinyjambu192v2
78.6978.7178.78T:tinyjambu256v2
87.9688.8989.28T:isapk128v20
126.42126.97128.36T:isapxv20
147.56151.03151.72T:elephant200v2
7758.257763.347769.40T:elephant176v2
8849.908850.888851.97T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.540.560.57T:aes128gcmv1
0.550.570.59aes256gcmv1
1.801.821.83aes128gcmv1
9.9910.0310.06T:xoodyakround3
10.1210.1310.14ascon128av12
14.8014.8114.82ascon128v12
14.8114.8314.85ascon80pqv12
21.7921.8421.91T:schwaemm256128v2
22.9422.9622.97ascon128abi32v12
29.0229.0629.11T:schwaemm192192v2
29.7829.8529.90romulusm
31.5031.5932.13romulusn
32.1232.1332.16T:schwaemm256256v2
33.4233.7133.86T:schwaemm128128v2
33.6133.8934.36T:isapa128v20
33.9134.1334.34ascon128bi32v12
38.4538.6938.74T:grain128aeadv2
40.5640.9741.16T:isapa128av20
47.9148.0948.22T:giftcofb128v1
48.3648.4548.54T:tinyjambu128v2
51.1051.2851.43romulust
53.1053.1553.19T:tinyjambu256v2
53.7953.8253.87T:tinyjambu192v2
70.6470.7571.37T:isapk128av20
87.3887.9389.57T:isapk128v20
100.15102.08102.33T:elephant200v2
126.64127.80128.28T:isapxv20
5126.925128.495133.51T:elephant176v2
5893.265897.195901.84T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.520.540.55T:aes128gcmv1
0.550.570.58aes256gcmv1
1.791.831.86aes128gcmv1
9.9910.0210.05T:xoodyakround3
10.2610.2910.31ascon128av12
14.7814.8114.82ascon128v12
14.8114.8414.85ascon80pqv12
21.7721.8721.90T:schwaemm256128v2
22.6822.8222.83ascon128abi32v12
29.0329.0729.08T:schwaemm192192v2
29.7429.8229.87romulusm
31.5531.6331.95romulusn
31.9531.9732.15T:schwaemm256256v2
33.2433.2533.26ascon128bi32v12
33.3733.7133.77T:schwaemm128128v2
33.4633.7534.26T:isapa128v20
38.6438.7338.74T:grain128aeadv2
40.6340.9941.16T:isapa128av20
47.9548.0548.35T:giftcofb128v1
48.3548.4448.56T:tinyjambu128v2
51.1951.2951.72romulust
53.1353.1953.24T:tinyjambu256v2
53.7853.8353.88T:tinyjambu192v2
70.6570.7071.27T:isapk128av20
87.7888.0488.74T:isapk128v20
100.40102.01102.36T:elephant200v2
126.24126.77128.02T:isapxv20
5127.355135.455142.77T:elephant176v2
5889.575895.155898.73T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.530.540.54T:aes128gcmv1
0.550.570.57aes256gcmv1
1.801.831.86aes128gcmv1
9.9810.0310.07T:xoodyakround3
10.2510.2810.32ascon128av12
14.8014.8114.82ascon128v12
14.8414.8414.85ascon80pqv12
21.7821.8521.91T:schwaemm256128v2
22.6822.8222.83ascon128abi32v12
29.0529.0729.13T:schwaemm192192v2
29.7129.8029.88romulusm
31.5131.6331.92romulusn
31.9432.1432.17T:schwaemm256256v2
33.2433.2533.26ascon128bi32v12
33.3233.6533.83T:schwaemm128128v2
33.6033.8534.01T:isapa128v20
38.6438.7338.75T:grain128aeadv2
40.6941.0941.20T:isapa128av20
47.9148.0348.19T:giftcofb128v1
48.3648.4248.57T:tinyjambu128v2
51.1951.2351.55romulust
53.1353.2253.28T:tinyjambu256v2
53.7953.8553.88T:tinyjambu192v2
70.6470.7271.37T:isapk128av20
87.7688.0488.48T:isapk128v20
100.14102.16102.42T:elephant200v2
126.50126.80128.09T:isapxv20
5130.365132.565139.56T:elephant176v2
5892.315898.495900.08T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.151.151.16T:aes128gcmv1
1.251.261.27aes256gcmv1
3.633.653.67aes128gcmv1
10.6110.6710.69ascon128av12
15.2315.2315.25ascon80pqv12
15.3015.3115.31ascon128v12
15.6315.7015.93T:xoodyakround3
22.6022.6322.66T:schwaemm256128v2
23.5923.6023.61ascon128abi32v12
29.8129.8429.89T:schwaemm192192v2
33.0533.1433.16T:schwaemm256256v2
33.9434.0234.07T:schwaemm128128v2
34.6034.6334.72ascon128bi32v12
39.2939.3939.42T:grain128aeadv2
39.6739.7039.93romulusn
48.5048.6148.88T:giftcofb128v1
53.6753.7253.83romulusm
54.8954.9355.05T:isapa128av20
62.6462.7362.77T:tinyjambu128v2
74.5274.5474.75T:isapa128v20
75.2275.2475.26T:tinyjambu192v2
79.4079.4379.49T:tinyjambu256v2
99.0799.1099.80T:isapk128av20
100.19100.34100.43romulust
152.34154.73155.06T:elephant200v2
201.49201.53202.16T:isapk128v20
278.55279.83279.92T:isapxv20
7813.557817.397818.90T:elephant176v2
8949.178949.998950.76T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.201.211.22T:aes128gcmv1
1.291.301.31aes256gcmv1
3.723.743.77aes128gcmv1
10.6810.6910.71ascon128av12
15.3015.3415.46ascon80pqv12
15.1915.3915.40ascon128v12
15.4715.4915.51T:xoodyakround3
22.6122.6322.66T:schwaemm256128v2
23.5823.5823.65ascon128abi32v12
29.8329.8529.92T:schwaemm192192v2
33.0633.1133.16T:schwaemm256256v2
33.9934.0634.15T:schwaemm128128v2
34.0734.1034.10ascon128bi32v12
39.5139.5239.56T:grain128aeadv2
39.6839.7039.87romulusn
48.4648.5848.65T:giftcofb128v1
53.9153.9554.00romulusm
54.9555.2455.37T:isapa128av20
62.8762.9562.99T:tinyjambu128v2
74.6074.6874.82T:isapa128v20
75.0375.1675.24T:tinyjambu192v2
79.2879.3279.37T:tinyjambu256v2
99.1399.1599.32T:isapk128av20
100.22100.39100.44romulust
152.31154.57154.78T:elephant200v2
201.47201.53202.10T:isapk128v20
277.99278.94279.31T:isapxv20
7815.527818.157819.55T:elephant176v2
8949.358950.628951.40T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.201.201.21T:aes128gcmv1
1.291.291.30aes256gcmv1
2.062.082.10aes128gcmv1
10.6910.6910.71ascon128av12
15.2815.2915.33ascon80pqv12
15.2015.3915.40ascon128v12
15.5215.5315.55T:xoodyakround3
22.5922.6222.65T:schwaemm256128v2
23.5123.5823.65ascon128abi32v12
29.7729.8529.90T:schwaemm192192v2
33.0833.1333.16T:schwaemm256256v2
33.9534.0234.09T:schwaemm128128v2
34.0834.1034.10ascon128bi32v12
39.4539.4939.56T:grain128aeadv2
39.6839.7039.84romulusn
43.0943.1343.45T:isapa128av20
45.9846.0546.27T:isapa128v20
48.4248.5148.62T:giftcofb128v1
53.2353.3053.38romulust
53.8953.9654.04romulusm
62.9262.9463.01T:tinyjambu128v2
75.0375.1175.18T:tinyjambu192v2
76.9776.9877.04T:isapk128av20
79.2879.3179.35T:tinyjambu256v2
131.16131.21132.00T:isapk128v20
152.21154.25154.65T:elephant200v2
182.38182.42183.04T:isapxv20
7817.377818.727820.11T:elephant176v2
8938.968949.288950.32T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.137.217.45aes256gcmv1
7.557.647.73T:aes128gcmv1
7.627.708.20aes128gcmv1
16.3416.4816.60ascon128av12
20.2620.4820.61ascon128v12
20.4520.6520.95ascon80pqv12
22.9323.1223.69T:xoodyakround3
34.8635.0235.20ascon128abi32v12
37.0937.1537.24T:schwaemm256128v2
43.8843.9544.05T:schwaemm128128v2
45.9346.0646.41ascon128bi32v12
48.1648.2248.34T:schwaemm192192v2
49.3949.4949.84T:grain128aeadv2
49.8950.2350.38romulusn
52.5152.6352.88T:schwaemm256256v2
59.0659.2359.66T:giftcofb128v1
62.6662.9563.12romulusm
73.7773.9974.20T:tinyjambu128v2
88.1588.3688.59T:tinyjambu192v2
92.5492.7293.03T:tinyjambu256v2
137.00137.52138.24romulust
140.98141.23141.95T:isapa128av20
215.87219.43220.11T:elephant200v2
322.35322.67323.35T:isapk128av20
616.21616.62617.62T:isapa128v20
2173.412174.062174.64T:isapk128v20
2746.302751.522765.08T:isapxv20
9729.389732.429735.98T:elephant176v2
11973.1811982.7111986.58T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.716.867.20aes256gcmv1
7.507.577.72T:aes128gcmv1
8.969.319.78aes128gcmv1
16.3916.5516.63ascon128av12
20.5420.6120.74ascon80pqv12
20.4020.6220.88ascon128v12
22.5822.8623.10T:xoodyakround3
35.0935.2735.85ascon128abi32v12
37.1237.1837.38T:schwaemm256128v2
44.0344.1744.25T:schwaemm128128v2
45.4845.5345.91ascon128bi32v12
47.9648.1048.27T:schwaemm192192v2
49.6649.9050.06T:grain128aeadv2
50.3050.4550.74romulusn
52.4752.5152.70T:schwaemm256256v2
59.3359.5259.78T:giftcofb128v1
65.3365.5265.73romulusm
74.0274.2274.42T:tinyjambu128v2
88.0088.2188.48T:tinyjambu192v2
92.6692.7793.04T:tinyjambu256v2
137.16137.54137.79romulust
141.50141.95142.27T:isapa128av20
215.19219.25219.55T:elephant200v2
324.98325.33326.76T:isapk128av20
611.60616.30617.78T:isapa128v20
2174.012174.752175.91T:isapk128v20
2732.262735.922744.98T:isapxv20
9734.349737.609743.88T:elephant176v2
11979.6611983.6611988.71T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.746.846.94aes256gcmv1
6.777.057.19aes128gcmv1
7.477.557.68T:aes128gcmv1
16.3416.4416.48ascon128av12
20.2520.3820.45ascon128v12
20.3820.4820.62ascon80pqv12
22.7722.9423.17T:xoodyakround3
35.0535.0935.25ascon128abi32v12
37.1137.1337.23T:schwaemm256128v2
43.8444.0544.16T:schwaemm128128v2
45.4445.5245.68ascon128bi32v12
48.0748.1048.26T:schwaemm192192v2
49.5649.6749.91T:grain128aeadv2
50.1250.3050.55romulusn
52.4552.5152.71T:schwaemm256256v2
59.4259.5759.91T:giftcofb128v1
64.9765.4165.52romulusm
73.8274.0374.27T:tinyjambu128v2
87.8987.9788.23T:tinyjambu192v2
88.0688.7389.86romulust
91.3791.6291.76T:isapa128av20
92.6892.8292.94T:tinyjambu256v2
207.37207.86208.56T:isapk128av20
215.40219.51220.10T:elephant200v2
319.12323.77324.22T:isapa128v20
1105.481105.601121.85T:isapk128v20
1430.721432.131435.70T:isapxv20
9733.789737.479741.72T:elephant176v2
11982.9311986.4511989.27T:elephant160v2

amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.471.481.50T:aes128gcmv1
1.631.651.67aes256gcmv1
5.105.175.20aes128gcmv1
10.7510.7610.77ascon128av12
15.1315.2515.26ascon80pqv12
15.3415.3515.41ascon128v12
21.0921.6521.72T:xoodyakround3
22.0822.1322.15T:schwaemm256128v2
23.2123.2323.43ascon128abi32v12
29.2429.3829.57T:schwaemm192192v2
32.3232.4232.45T:schwaemm256256v2
33.3833.4333.49T:schwaemm128128v2
34.1234.1334.14ascon128bi32v12
38.9739.0139.10T:grain128aeadv2
47.4747.4847.55romulusn
48.1048.1948.33T:giftcofb128v1
61.0661.9462.01T:isapa128av20
67.9668.4768.86T:isapa128v20
76.0276.1376.27T:tinyjambu128v2
76.8977.0077.32romulusm
95.4095.4695.52T:tinyjambu192v2
103.95104.01104.09T:tinyjambu256v2
106.72106.78106.88T:isapk128av20
141.08141.50142.73T:isapk128v20
145.56145.78145.81romulust
197.54197.73197.87T:elephant200v2
212.15212.21212.94T:isapxv20
10376.7810391.3910395.91T:elephant176v2
11802.5911806.6111817.22T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.601.611.63T:aes128gcmv1
1.691.701.73aes256gcmv1
5.105.185.25aes128gcmv1
10.2410.2610.28ascon128av12
15.2315.3415.42ascon80pqv12
15.2515.5315.53ascon128v12
20.6420.6720.72T:xoodyakround3
22.1122.1622.20T:schwaemm256128v2
23.1523.4323.44ascon128abi32v12
29.2529.3829.44T:schwaemm192192v2
32.3232.4232.43T:schwaemm256256v2
33.3733.4133.46T:schwaemm128128v2
33.8533.9333.95ascon128bi32v12
39.3339.5039.53T:grain128aeadv2
47.4547.4747.54romulusn
47.7947.8547.87T:giftcofb128v1
61.0962.0162.32T:isapa128av20
67.9568.0268.25T:isapa128v20
76.4376.4776.52T:tinyjambu128v2
77.0777.2377.33romulusm
95.0795.3095.39T:tinyjambu192v2
104.25104.34104.40T:tinyjambu256v2
106.66106.76106.85T:isapk128av20
141.41141.53142.04T:isapk128v20
145.58145.82145.90romulust
197.28197.75200.40T:elephant200v2
212.52212.81213.30T:isapxv20
10384.3310391.1910396.31T:elephant176v2
11802.4111807.4211814.90T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.591.601.61T:aes128gcmv1
1.701.701.71aes256gcmv1
1.881.911.94aes128gcmv1
10.2510.2710.31ascon128av12
15.2515.3815.39ascon80pqv12
15.1115.4615.54ascon128v12
20.7320.7720.82T:xoodyakround3
22.1322.1522.21T:schwaemm256128v2
23.3923.4523.45ascon128abi32v12
29.2629.3829.40T:schwaemm192192v2
32.3132.4132.43T:schwaemm256256v2
33.3933.4333.48T:schwaemm128128v2
33.8433.9333.95ascon128bi32v12
34.1334.2234.37T:isapa128v20
39.3439.5139.54T:grain128aeadv2
40.1140.5241.38T:isapa128av20
47.4647.7147.73romulusn
47.6948.0148.37T:giftcofb128v1
51.7851.9452.13romulust
70.6670.7170.76T:isapk128av20
76.4176.4676.56T:tinyjambu128v2
77.1377.2477.32romulusm
88.2588.3988.60T:isapk128v20
95.1395.3395.42T:tinyjambu192v2
104.25104.32104.40T:tinyjambu256v2
126.41126.55127.06T:isapxv20
197.30197.47198.86T:elephant200v2
10372.7210383.3110397.37T:elephant176v2
11801.6311807.5811815.77T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.011.021.02T:aes128gcmv1
1.081.101.11aes256gcmv1
3.483.503.52aes128gcmv1
10.4110.4210.44ascon128av12
14.9814.9915.00ascon80pqv12
15.0715.0815.10ascon128v12
15.5015.5215.55T:xoodyakround3
21.9722.0122.05T:schwaemm256128v2
23.1723.1923.19ascon128abi32v12
29.1929.2329.31T:schwaemm192192v2
32.1732.2332.28T:schwaemm256256v2
33.3433.4333.56T:schwaemm128128v2
34.0834.1334.23ascon128bi32v12
38.5638.6539.03romulusn
38.8238.8638.91T:grain128aeadv2
47.9648.1548.24T:giftcofb128v1
51.0451.1551.17T:isapa128v20
51.1251.3451.55T:isapa128av20
53.3653.4353.52romulusm
62.0662.2662.34T:tinyjambu128v2
74.6074.6474.68T:tinyjambu192v2
78.5778.6278.65T:tinyjambu256v2
88.7688.8289.14T:isapk128av20
98.5098.5898.75romulust
114.93115.04115.42T:isapk128v20
148.56149.48149.80T:elephant200v2
169.19169.61178.19T:isapxv20
7747.207759.667766.80T:elephant176v2
8848.828850.918853.51T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.061.081.09T:aes128gcmv1
1.111.131.15aes256gcmv1
3.453.503.54aes128gcmv1
10.2510.2810.30ascon128av12
14.9315.0615.18ascon128v12
15.0215.1115.25ascon80pqv12
15.3315.3515.37T:xoodyakround3
21.9722.0022.03T:schwaemm256128v2
23.0623.0723.14ascon128abi32v12
29.1829.1929.29T:schwaemm192192v2
32.2032.2532.30T:schwaemm256256v2
33.3533.4333.56T:schwaemm128128v2
33.5833.6033.61ascon128bi32v12
38.5938.6438.97romulusn
39.0439.0639.11T:grain128aeadv2
48.0148.0648.22T:giftcofb128v1
51.1051.1451.24T:isapa128v20
51.1351.4151.58T:isapa128av20
53.4453.5153.56romulusm
62.3662.4462.54T:tinyjambu128v2
74.4774.5574.65T:tinyjambu192v2
78.7178.7378.84T:tinyjambu256v2
88.7588.7889.16T:isapk128av20
98.5298.6498.75romulust
114.74115.02115.38T:isapk128v20
148.48149.65150.14T:elephant200v2
170.09170.25178.39T:isapxv20
7746.177761.657766.04T:elephant176v2
8851.368855.138857.86T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.071.071.08T:aes128gcmv1
1.121.131.14aes256gcmv1
1.861.881.89aes128gcmv1
10.2910.3010.30ascon128av12
15.0515.0615.12ascon80pqv12
14.9615.0615.19ascon128v12
15.3715.3915.42T:xoodyakround3
21.9822.0122.05T:schwaemm256128v2
23.0623.0723.14ascon128abi32v12
29.1629.1929.29T:schwaemm192192v2
32.1932.2432.29T:schwaemm256256v2
33.2933.3633.57T:schwaemm128128v2
33.5633.5733.61ascon128bi32v12
34.1734.3934.41T:isapa128v20
38.5938.6539.08romulusn
39.0339.0439.14T:grain128aeadv2
40.9040.9641.00T:isapa128av20
47.9948.1148.25T:giftcofb128v1
51.6251.7151.79romulust
53.3953.5453.62romulusm
62.4062.4462.50T:tinyjambu128v2
70.5470.7570.89T:isapk128av20
74.4574.5674.62T:tinyjambu192v2
78.7078.7578.81T:tinyjambu256v2
88.3388.4488.72T:isapk128v20
126.45126.56127.03T:isapxv20
149.92150.19150.27T:elephant200v2
7750.607760.447762.94T:elephant176v2
8848.908855.898857.72T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.550.560.57T:aes128gcmv1
0.550.570.58aes256gcmv1
1.811.821.84aes128gcmv1
9.9810.0110.04T:xoodyakround3
10.0510.0610.07ascon128av12
14.7814.8014.82ascon128v12
14.8214.8414.85ascon80pqv12
21.8921.9321.99T:schwaemm256128v2
22.9522.9522.97ascon128abi32v12
29.0329.0729.16T:schwaemm192192v2
29.7829.8229.95romulusm
29.7429.8630.53romulusn
32.0832.1032.20T:schwaemm256256v2
33.1833.3633.54T:schwaemm128128v2
34.0634.0834.33ascon128bi32v12
34.0934.2234.27T:isapa128v20
38.5038.6938.80T:grain128aeadv2
40.9541.0341.22T:isapa128av20
48.0948.1348.22T:giftcofb128v1
48.3348.3648.46T:tinyjambu128v2
51.1551.2551.38romulust
53.1653.1953.26T:tinyjambu256v2
53.7853.8453.89T:tinyjambu192v2
70.6670.8270.93T:isapk128av20
87.9788.4488.55T:isapk128v20
100.12100.18100.48T:elephant200v2
125.90126.09126.28T:isapxv20
5122.765130.115134.40T:elephant176v2
5897.915900.145901.99T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.520.540.56T:aes128gcmv1
0.550.560.57aes256gcmv1
1.801.831.85aes128gcmv1
9.949.9910.05T:xoodyakround3
10.2910.3010.32ascon128av12
14.8114.8114.82ascon128v12
14.8114.8214.85ascon80pqv12
21.7921.8721.91T:schwaemm256128v2
22.6822.8222.83ascon128abi32v12
29.0329.0629.21T:schwaemm192192v2
29.7729.8329.93romulusm
29.6429.9630.48romulusn
32.0832.1132.13T:schwaemm256256v2
33.2333.2533.26ascon128bi32v12
33.1833.3033.63T:schwaemm128128v2
33.9634.2734.32T:isapa128v20
38.6438.7238.74T:grain128aeadv2
40.9541.0341.22T:isapa128av20
47.8748.0948.22T:giftcofb128v1
48.3748.4548.57T:tinyjambu128v2
51.0751.2551.32romulust
53.0953.1553.20T:tinyjambu256v2
53.7653.8353.87T:tinyjambu192v2
70.6370.7570.81T:isapk128av20
88.2388.4289.02T:isapk128v20
100.12100.14100.27T:elephant200v2
126.37126.43126.77T:isapxv20
5127.545132.745136.50T:elephant176v2
5890.155895.845898.35T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.530.540.55T:aes128gcmv1
0.550.560.57aes256gcmv1
1.801.831.86aes128gcmv1
9.979.9910.01T:xoodyakround3
10.3010.3110.31ascon128av12
14.8014.8114.82ascon128v12
14.8414.8514.86ascon80pqv12
21.8021.9021.91T:schwaemm256128v2
22.6822.8222.83ascon128abi32v12
29.0329.0429.18T:schwaemm192192v2
29.6729.7730.58romulusn
29.7529.8529.98romulusm
32.0832.1032.11T:schwaemm256256v2
33.2533.2533.29ascon128bi32v12
33.3033.4933.75T:schwaemm128128v2
34.0734.1334.27T:isapa128v20
38.6538.7338.75T:grain128aeadv2
41.0041.1241.24T:isapa128av20
47.8848.0348.36T:giftcofb128v1
48.3248.4148.44T:tinyjambu128v2
50.8751.2351.34romulust
53.1053.1453.29T:tinyjambu256v2
53.7653.8153.87T:tinyjambu192v2
70.6870.7770.84T:isapk128av20
88.3588.4589.02T:isapk128v20
100.14100.30100.90T:elephant200v2
126.36126.42127.00T:isapxv20
5124.415128.975136.01T:elephant176v2
5895.155898.595901.89T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.151.151.16T:aes128gcmv1
1.251.251.26aes256gcmv1
3.663.673.69aes128gcmv1
10.6710.6910.69ascon128av12
15.2315.2815.34ascon80pqv12
15.3015.3215.33ascon128v12
15.6715.6815.70T:xoodyakround3
22.6422.6622.71T:schwaemm256128v2
23.5923.6723.69ascon128abi32v12
29.8129.8829.97T:schwaemm192192v2
33.0633.1033.14T:schwaemm256256v2
33.7733.8333.94T:schwaemm128128v2
34.6034.6334.66ascon128bi32v12
38.9839.0139.39romulusn
39.3039.3939.44T:grain128aeadv2
48.3748.5748.63T:giftcofb128v1
53.7553.8153.86romulusm
55.0955.1155.42T:isapa128av20
62.6962.7862.90T:tinyjambu128v2
74.3674.4774.54T:isapa128v20
75.1975.2475.26T:tinyjambu192v2
79.1979.2279.24T:tinyjambu256v2
100.11100.18100.29romulust
101.42101.46101.66T:isapk128av20
151.97152.65153.01T:elephant200v2
202.89202.95203.56T:isapk128v20
277.51277.67278.82T:isapxv20
7805.837819.047821.62T:elephant176v2
8949.898954.068958.71T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.201.211.23T:aes128gcmv1
1.291.291.29aes256gcmv1
3.723.753.78aes128gcmv1
10.5310.5410.55ascon128av12
15.2815.3415.45ascon80pqv12
15.2015.4015.40ascon128v12
15.5015.5115.56T:xoodyakround3
22.6322.6622.71T:schwaemm256128v2
23.5723.5823.64ascon128abi32v12
29.7929.8229.96T:schwaemm192192v2
33.0633.1033.14T:schwaemm256256v2
33.6733.7833.92T:schwaemm128128v2
34.0734.0734.10ascon128bi32v12
39.0039.0339.46romulusn
39.5239.5339.57T:grain128aeadv2
48.5048.5948.75T:giftcofb128v1
53.9454.0454.08romulusm
55.1555.2155.27T:isapa128av20
62.9763.0063.03T:tinyjambu128v2
74.3574.4874.56T:isapa128v20
75.0875.1375.20T:tinyjambu192v2
79.2679.3079.36T:tinyjambu256v2
99.99100.14100.31romulust
101.43101.45101.67T:isapk128av20
151.77152.32152.68T:elephant200v2
202.93203.00203.11T:isapk128v20
278.62278.79279.40T:isapxv20
7806.967822.807823.38T:elephant176v2
8947.218950.178953.10T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.201.201.21T:aes128gcmv1
1.281.291.29aes256gcmv1
2.092.102.12aes128gcmv1
10.5410.5410.55ascon128av12
15.2815.2915.34ascon80pqv12
15.1915.3915.41ascon128v12
15.5315.5415.56T:xoodyakround3
22.6222.6522.68T:schwaemm256128v2
23.5723.5823.64ascon128abi32v12
29.8229.8729.94T:schwaemm192192v2
33.0733.1033.15T:schwaemm256256v2
33.7133.8934.00T:schwaemm128128v2
34.0734.0734.08ascon128bi32v12
39.0139.1839.33romulusn
39.5339.5339.57T:grain128aeadv2
42.8043.1043.23T:isapa128av20
46.0546.1846.24T:isapa128v20
48.4648.4948.59T:giftcofb128v1
52.8953.1953.28romulust
53.9654.1154.19romulusm
62.8962.9162.97T:tinyjambu128v2
75.0675.1375.20T:tinyjambu192v2
78.2878.3178.49T:isapk128av20
79.2879.3379.47T:tinyjambu256v2
135.18135.26135.36T:isapk128v20
151.72152.26153.18T:elephant200v2
182.00182.19182.50T:isapxv20
7813.657816.817825.15T:elephant176v2
8950.788953.368954.44T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.047.117.28aes256gcmv1
7.527.647.74T:aes128gcmv1
7.537.738.12aes128gcmv1
16.1716.2616.54ascon128av12
20.2720.3920.48ascon128v12
20.3020.3920.57ascon80pqv12
23.1423.2723.46T:xoodyakround3
35.0235.1435.70ascon128abi32v12
37.0537.1037.18T:schwaemm256128v2
43.7443.8443.92T:schwaemm128128v2
45.8745.9346.23ascon128bi32v12
47.1247.2247.66romulusn
47.9647.9948.12T:schwaemm192192v2
49.6249.7049.77T:grain128aeadv2
52.4852.6552.92T:schwaemm256256v2
59.1159.2559.52T:giftcofb128v1
62.5962.7462.95romulusm
73.8774.1574.27T:tinyjambu128v2
88.1988.3488.66T:tinyjambu192v2
92.5392.7093.08T:tinyjambu256v2
137.88138.11138.75romulust
141.60141.90142.12T:isapa128av20
216.98217.15217.56T:elephant200v2
374.77375.27375.55T:isapk128av20
610.52610.80610.96T:isapa128v20
2195.382202.662203.66T:isapk128v20
2731.962741.282741.57T:isapxv20
9729.409734.169741.62T:elephant176v2
11980.8811988.4211994.79T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.726.867.12aes256gcmv1
7.487.497.65T:aes128gcmv1
9.359.6210.05aes128gcmv1
16.1916.3116.47ascon128av12
20.3120.4920.88ascon128v12
20.3920.6220.84ascon80pqv12
22.9123.1823.40T:xoodyakround3
35.1035.2735.86ascon128abi32v12
37.1337.1737.34T:schwaemm256128v2
43.6243.7643.89T:schwaemm128128v2
45.4845.5245.67ascon128bi32v12
47.5547.7047.97romulusn
47.9648.0148.06T:schwaemm192192v2
49.9049.9450.16T:grain128aeadv2
52.5652.7252.85T:schwaemm256256v2
59.3959.4759.73T:giftcofb128v1
65.4065.5665.88romulusm
74.1674.3474.46T:tinyjambu128v2
88.0588.2288.44T:tinyjambu192v2
92.8993.0293.23T:tinyjambu256v2
137.55137.95138.43romulust
141.91142.34142.67T:isapa128av20
216.77216.98217.10T:elephant200v2
374.97375.55375.77T:isapk128av20
610.45611.01611.25T:isapa128v20
2197.432203.942205.73T:isapk128v20
2742.552742.982746.44T:isapxv20
9726.679731.529739.57T:elephant176v2
11984.1511988.3911996.95T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.646.756.80aes256gcmv1
7.217.307.62aes128gcmv1
7.477.487.66T:aes128gcmv1
15.9816.1516.20ascon128av12
20.1320.2620.34ascon128v12
20.2220.3320.38ascon80pqv12
23.1023.1623.21T:xoodyakround3
35.0935.1635.41ascon128abi32v12
37.0937.1337.16T:schwaemm256128v2
43.7543.8443.88T:schwaemm128128v2
45.4545.5245.54ascon128bi32v12
47.4147.6447.95romulusn
48.0348.0948.12T:schwaemm192192v2
49.8449.9550.02T:grain128aeadv2
52.4552.5152.67T:schwaemm256256v2
59.4259.5559.90T:giftcofb128v1
65.3065.4365.62romulusm
74.1474.2274.59T:tinyjambu128v2
88.0588.2288.51T:tinyjambu192v2
89.1089.2589.49romulust
91.7391.9192.21T:isapa128av20
92.9592.9893.06T:tinyjambu256v2
216.91217.00217.25T:elephant200v2
236.29237.00237.40T:isapk128av20
318.54318.77319.13T:isapa128v20
1187.341194.091194.88T:isapk128v20
1434.851435.101435.59T:isapxv20
9727.339735.999744.66T:elephant176v2
11981.5911993.5912002.20T:elephant160v2

amd64; Zen 3 (a20f10); 2020 AMD Ryzen 5 5600X; 6 x 3700MHz; unstable; spawn, supercop-20231215

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.411.411.43T:aes128gcmv1
1.541.541.54aes256gcmv1
5.185.185.26ascon128av12
7.277.287.32ascon80pqv12
7.487.507.53ascon128v12
10.3310.4410.54ascon128abi32v12
15.0915.1915.26ascon128bi32v12
19.1219.1619.27T:schwaemm256128v2
19.6219.8319.91T:grain128aeadv2
24.3024.4424.59T:schwaemm256256v2
26.1726.2726.38T:schwaemm192192v2
28.0828.1028.17T:isapa128v20
29.1029.5029.54T:isapa128av20
30.2630.4130.74T:schwaemm128128v2
30.9331.0331.10romulusn
32.3232.6832.90T:giftcofb128v1
40.9541.0341.36T:xoodyakround3
46.6547.2947.77T:isapk128av20
48.2748.3748.50T:tinyjambu128v2
49.1849.4149.47romulusm
55.4455.4655.48T:tinyjambu192v2
56.2356.3356.33T:tinyjambu256v2
66.2069.1669.55T:isapk128v20
102.39102.91103.02T:elephant200v2
104.47104.56104.70romulust
272.86277.81280.91T:isapxv20
5800.045844.775879.92T:elephant176v2
6987.267036.867056.79T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.411.431.43T:aes128gcmv1
1.521.561.58aes256gcmv1
4.884.884.95ascon128av12
7.277.277.32ascon80pqv12
7.277.307.32ascon128v12
10.4410.5810.64ascon128abi32v12
15.4015.4915.57ascon128bi32v12
19.4419.5419.58T:schwaemm256128v2
20.1620.5220.97T:grain128aeadv2
24.4224.5524.65T:schwaemm256256v2
26.7726.8126.88T:schwaemm192192v2
28.0828.0828.15T:isapa128v20
29.1229.5429.60T:isapa128av20
30.3930.5430.78T:schwaemm128128v2
31.1431.2231.24romulusn
32.0532.5932.63T:giftcofb128v1
40.5540.7641.05T:xoodyakround3
46.1546.9648.00T:isapk128av20
48.3548.4148.49T:tinyjambu128v2
49.3549.5649.64romulusm
55.6055.6255.65T:tinyjambu192v2
56.4656.5456.58T:tinyjambu256v2
66.2768.7069.45T:isapk128v20
102.58102.94103.04T:elephant200v2
104.54104.72105.32romulust
271.64272.97282.22T:isapxv20
5800.235842.745847.97T:elephant176v2
6965.027033.827049.43T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.391.431.43T:aes128gcmv1
1.521.561.56aes256gcmv1
4.884.894.95ascon128av12
7.277.287.32ascon128v12
7.277.287.32ascon80pqv12
10.4410.5610.62ascon128abi32v12
13.8913.9513.99T:isapa128v20
15.4015.4915.57ascon128bi32v12
19.4819.5419.60T:schwaemm256128v2
19.3319.5819.64T:isapa128av20
20.2520.5420.99T:grain128aeadv2
24.4424.5324.63T:schwaemm256256v2
26.7726.7926.86T:schwaemm192192v2
29.6830.0830.24T:isapk128av20
30.3930.4530.76T:schwaemm128128v2
31.1431.2031.24romulusn
32.0132.5932.63T:giftcofb128v1
35.1135.1935.34romulust
40.5540.7641.03T:xoodyakround3
41.4142.7644.27T:isapk128v20
48.3348.3748.49T:tinyjambu128v2
49.3549.5649.70romulusm
55.6055.6255.63T:tinyjambu192v2
56.4456.5256.91T:tinyjambu256v2
102.33102.52102.98T:elephant200v2
163.47164.90169.35T:isapxv20
5807.325844.555870.42T:elephant176v2
6985.817032.187057.04T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.890.910.91T:aes128gcmv1
0.940.940.96aes256gcmv1
5.025.045.07ascon128av12
7.337.347.37ascon128v12
7.357.407.41ascon80pqv12
10.2310.2710.40ascon128abi32v12
15.2515.3415.51ascon128bi32v12
18.9719.0019.05T:schwaemm256128v2
19.7119.8420.06T:grain128aeadv2
21.1421.2921.31T:isapa128v20
24.1424.1924.29T:schwaemm256256v2
24.1924.3724.54T:isapa128av20
24.6924.7224.83romulusn
26.0826.1426.27T:schwaemm192192v2
30.0030.1030.16T:schwaemm128128v2
31.6531.7031.74T:xoodyakround3
31.9732.3632.55T:giftcofb128v1
33.5733.7734.00romulusm
38.9439.0939.19T:tinyjambu128v2
40.0740.3241.10T:isapk128av20
42.2742.4042.65T:tinyjambu256v2
42.3442.7342.98T:tinyjambu192v2
53.3555.4555.87T:isapk128v20
69.4569.9270.23romulust
76.7977.6378.09T:elephant200v2
218.16?220.24?264.22?T:isapxv20
4281.824353.624363.88T:elephant176v2
5238.015289.195301.39T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.900.900.91T:aes128gcmv1
0.940.940.95aes256gcmv1
4.894.924.94ascon128av12
7.227.247.27ascon128v12
7.347.367.38ascon80pqv12
10.3410.3710.49ascon128abi32v12
15.1015.1915.37ascon128bi32v12
19.1319.1619.18T:schwaemm256128v2
19.8520.2120.27T:grain128aeadv2
21.0321.2121.31T:isapa128v20
24.1724.2224.32T:schwaemm256256v2
24.1824.3524.55T:isapa128av20
24.8224.8724.98romulusn
26.3426.3926.43T:schwaemm192192v2
30.0930.1730.32T:schwaemm128128v2
31.5431.5831.60T:xoodyakround3
31.9232.4932.51T:giftcofb128v1
33.6833.8533.90romulusm
39.1239.2039.35T:tinyjambu128v2
39.8940.7140.82T:isapk128av20
42.4542.4942.77T:tinyjambu256v2
42.1342.7943.06T:tinyjambu192v2
53.4255.5156.24T:isapk128v20
69.7769.8670.25romulust
76.7577.6578.12T:elephant200v2
216.64?220.43?263.13?T:isapxv20
4284.404339.274359.00T:elephant176v2
5243.495284.305303.31T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.900.900.91T:aes128gcmv1
0.940.940.96aes256gcmv1
4.884.914.94ascon128av12
7.227.247.27ascon128v12
7.347.387.38ascon80pqv12
10.3210.3910.44ascon128abi32v12
13.9414.0314.14T:isapa128v20
15.1015.1915.37ascon128bi32v12
19.1319.1619.20T:schwaemm256128v2
19.3019.4319.57T:isapa128av20
20.1520.1920.26T:grain128aeadv2
24.1924.2624.32T:schwaemm256256v2
24.8324.8824.98romulusn
26.3826.4126.45T:schwaemm192192v2
30.1430.2030.30T:schwaemm128128v2
31.4031.5231.61T:xoodyakround3
31.4831.6932.13T:isapk128av20
31.9132.4932.51T:giftcofb128v1
33.6833.8333.88romulusm
35.0935.1335.30romulust
39.0739.1739.24T:tinyjambu128v2
42.4742.5042.75T:tinyjambu256v2
41.4242.5243.05T:isapk128v20
42.7742.8042.94T:tinyjambu192v2
76.7677.2478.18T:elephant200v2
162.41?163.67?191.91?T:isapxv20
4284.934354.924364.72T:elephant176v2
5242.465287.625315.70T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.370.370.37aes256gcmv1
0.35?0.39?0.39?T:aes128gcmv1
4.864.894.93ascon128av12
7.137.137.21ascon128v12
7.387.407.48ascon80pqv12
10.0810.1910.21ascon128abi32v12
14.0314.0714.22T:isapa128v20
15.3815.4915.67ascon128bi32v12
18.4618.4618.52romulusn
18.4018.5218.62romulusm
18.7718.8518.90T:schwaemm256128v2
19.4319.4819.62T:isapa128av20
19.8919.9820.25T:grain128aeadv2
21.9322.0322.12T:xoodyakround3
24.0524.1524.49T:schwaemm256256v2
25.9626.0226.03T:schwaemm192192v2
28.4828.6228.64T:tinyjambu256v2
29.6229.8329.95T:schwaemm128128v2
30.1030.4730.49T:tinyjambu128v2
30.3330.4930.52T:tinyjambu192v2
31.8232.3832.45T:giftcofb128v1
33.4333.5333.96T:isapk128av20
35.1135.1535.30romulust
42.18?42.67?108.82?T:isapk128v20
52.1952.3452.84T:elephant200v2
163.36166.83172.69T:isapxv20
2869.622890.822906.39T:elephant176v2
3489.683519.473522.59T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.350.370.37aes256gcmv1
0.370.390.39T:aes128gcmv1
4.894.934.99ascon128av12
7.137.137.21ascon128v12
7.347.347.42ascon80pqv12
10.1810.3110.31ascon128abi32v12
13.9714.0314.07T:isapa128v20
14.8014.8815.05ascon128bi32v12
18.4618.5018.56romulusn
18.4218.5418.63romulusm
18.8118.8518.94T:schwaemm256128v2
19.4319.4419.54T:isapa128av20
20.0820.1620.37T:grain128aeadv2
21.8521.9122.12T:xoodyakround3
24.0524.2024.45T:schwaemm256256v2
25.9826.0326.07T:schwaemm192192v2
28.4828.6428.66T:tinyjambu256v2
29.5629.6629.95T:schwaemm128128v2
30.1030.4530.47T:tinyjambu128v2
30.3330.4930.51T:tinyjambu192v2
31.9532.3632.41T:giftcofb128v1
33.7633.8834.24T:isapk128av20
35.0935.2135.32romulust
41.14?42.61?109.55?T:isapk128v20
51.9552.1352.47T:elephant200v2
166.89168.95170.60T:isapxv20
2863.722887.392906.62T:elephant176v2
3490.103521.323529.63T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.350.370.37aes256gcmv1
0.35?0.39?0.39?T:aes128gcmv1
4.914.954.99ascon128av12
7.137.137.21ascon128v12
7.347.347.42ascon80pqv12
10.1810.3110.31ascon128abi32v12
13.9514.0314.14T:isapa128v20
14.8014.8815.05ascon128bi32v12
18.4818.5018.56romulusn
18.4618.5418.60romulusm
18.7718.8118.92T:schwaemm256128v2
19.3719.4319.52T:isapa128av20
20.1220.1620.25T:grain128aeadv2
21.8921.9522.14T:xoodyakround3
24.0524.1724.49T:schwaemm256256v2
25.9226.0026.03T:schwaemm192192v2
28.4628.6428.66T:tinyjambu256v2
29.6029.6829.95T:schwaemm128128v2
30.0830.4530.51T:tinyjambu128v2
30.3330.4930.51T:tinyjambu192v2
32.0132.3832.41T:giftcofb128v1
33.1733.9734.17T:isapk128av20
35.0735.1935.30romulust
41.66?42.65?109.48?T:isapk128v20
51.9552.1752.42T:elephant200v2
166.08168.70171.11T:isapxv20
2874.772890.342896.68T:elephant176v2
3490.283521.593525.10T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.980.990.99T:aes128gcmv1
1.051.051.06aes256gcmv1
5.145.175.19ascon128av12
7.427.467.46ascon128v12
7.467.477.47ascon80pqv12
10.5010.5310.62ascon128abi32v12
15.5515.6215.69ascon128bi32v12
19.5419.5719.68T:schwaemm256128v2
20.3120.3820.40T:grain128aeadv2
24.6724.7925.23T:schwaemm256256v2
24.8824.9324.96romulusn
26.6526.6726.71T:schwaemm192192v2
27.8527.8628.00T:isapa128av20
30.3530.4130.51T:schwaemm128128v2
30.7630.7930.94T:isapa128v20
32.4632.8132.82T:giftcofb128v1
33.8934.0434.19romulusm
32.16?37.00?37.33?T:xoodyakround3
39.3439.4839.53T:tinyjambu128v2
42.7142.7242.73T:tinyjambu256v2
43.07?43.31?60.52?T:tinyjambu192v2
45.7045.8846.73T:isapk128av20
70.8970.9671.24romulust
78.4779.8180.15T:elephant200v2
90.7892.7993.19T:isapk128v20
376.84377.21378.90T:isapxv20
4350.474417.104420.77T:elephant176v2
5298.715335.745342.32T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.990.991.00T:aes128gcmv1
1.051.061.06aes256gcmv1
5.015.035.06ascon128av12
7.327.357.35ascon128v12
7.437.437.44ascon80pqv12
10.6210.7010.74ascon128abi32v12
15.4315.4815.56ascon128bi32v12
19.7919.8119.82T:schwaemm256128v2
20.4620.6820.82T:grain128aeadv2
24.7624.8225.22T:schwaemm256256v2
25.0325.0825.10romulusn
26.9126.9326.94T:schwaemm192192v2
27.8327.8527.99T:isapa128av20
30.4130.5130.59T:schwaemm128128v2
30.7730.7730.94T:isapa128v20
32.2432.7732.78T:giftcofb128v1
33.9534.0034.33romulusm
32.11?36.67?37.36?T:xoodyakround3
39.5239.6439.70T:tinyjambu128v2
42.6043.0743.31T:tinyjambu256v2
43.38?43.40?61.09?T:tinyjambu192v2
45.4645.7346.02T:isapk128av20
70.9370.9671.30romulust
78.5279.7579.85T:elephant200v2
90.7592.4093.19T:isapk128v20
373.08377.74381.30T:isapxv20
4351.794414.364421.54T:elephant176v2
5300.825335.275340.88T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.990.990.99T:aes128gcmv1
1.051.051.06aes256gcmv1
5.015.035.06ascon128av12
7.327.357.36ascon128v12
7.437.437.44ascon80pqv12
10.5710.6810.73ascon128abi32v12
15.4015.4915.56ascon128bi32v12
18.9318.9318.96T:isapa128v20
19.7319.8019.81T:schwaemm256128v2
20.3120.4020.50T:grain128aeadv2
21.3221.3321.43T:isapa128av20
24.7124.8225.20T:schwaemm256256v2
25.0325.0525.10romulusn
26.9126.9426.98T:schwaemm192192v2
30.4830.5230.57T:schwaemm128128v2
32.2432.7732.77T:giftcofb128v1
33.9634.0134.28romulusm
34.7734.9835.36T:isapk128av20
36.1336.1936.29romulust
32.09?36.70?37.35?T:xoodyakround3
39.4639.5239.60T:tinyjambu128v2
42.6043.0743.31T:tinyjambu256v2
43.38?43.40?60.70?T:tinyjambu192v2
60.4161.6461.87T:isapk128v20
78.5279.7680.24T:elephant200v2
242.76243.92250.41T:isapxv20
4360.414416.954418.32T:elephant176v2
5296.545333.435342.68T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
4.344.624.62T:aes128gcmv1
4.624.914.91aes256gcmv1
7.808.098.09ascon128av12
9.839.839.83ascon80pqv12
10.1210.1210.41ascon128v12
15.9016.1916.19ascon128abi32v12
21.6821.9722.26ascon128bi32v12
27.4627.7528.62T:grain128aeadv2
29.7729.7730.06romulusn
32.0932.3832.38T:schwaemm256128v2
39.0239.3139.60T:giftcofb128v1
39.3139.6040.18T:schwaemm256256v2
39.8939.8940.18romulusm
40.1840.4740.76T:schwaemm128128v2
42.7843.0743.07T:schwaemm192192v2
45.6745.9646.25T:xoodyakround3
46.8347.1247.41T:tinyjambu128v2
50.3050.3050.59T:tinyjambu256v2
50.8850.8851.16T:tinyjambu192v2
94.5295.1095.10romulust
106.09106.38106.95T:isapa128av20
113.31113.89114.18T:elephant200v2
164.77165.63166.21T:isapk128av20
251.20253.51253.80T:isapa128v20
930.78935.41938.30T:isapk128v20
3917.383919.693961.60T:isapxv20
5450.275483.805500.57T:elephant176v2
7110.367129.447150.54T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
4.344.344.34T:aes128gcmv1
4.624.624.62aes256gcmv1
7.807.808.09ascon128av12
9.839.839.83ascon80pqv12
10.1210.1210.41ascon128v12
16.1916.1916.19ascon128abi32v12
22.2622.2622.55ascon128bi32v12
28.0428.3328.91T:grain128aeadv2
30.0630.0630.06romulusn
32.3832.3832.38T:schwaemm256128v2
38.7339.0239.60T:schwaemm128128v2
39.3139.3139.89T:schwaemm256256v2
39.3139.6039.89T:giftcofb128v1
40.7641.3441.62romulusm
43.3643.3643.36T:schwaemm192192v2
45.6745.9645.96T:xoodyakround3
46.8347.1247.70T:tinyjambu128v2
50.3050.3050.88T:tinyjambu256v2
50.8851.1651.16T:tinyjambu192v2
94.5295.3995.39romulust
105.80106.09107.53T:isapa128av20
113.02114.47114.76T:elephant200v2
164.77166.21166.79T:isapk128av20
251.77253.51253.80T:isapa128v20
918.35923.84928.18T:isapk128v20
3901.483902.633946.28T:isapxv20
5447.675476.875482.65T:elephant176v2
7112.677150.257151.12T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
4.344.344.34T:aes128gcmv1
4.624.624.62aes256gcmv1
7.807.807.80ascon128av12
9.839.839.83ascon80pqv12
10.1210.1210.12ascon128v12
16.1916.1916.19ascon128abi32v12
22.2622.2622.55ascon128bi32v12
27.4628.0428.04T:grain128aeadv2
30.0630.0630.06romulusn
32.3832.3832.66T:schwaemm256128v2
38.4538.7339.02T:schwaemm128128v2
39.3139.6039.60T:giftcofb128v1
39.3139.6039.89T:schwaemm256256v2
41.0541.3441.91romulusm
43.0743.3643.36T:schwaemm192192v2
45.6745.6746.25T:xoodyakround3
46.8346.8347.12T:tinyjambu128v2
50.3050.3050.59T:tinyjambu256v2
50.8851.1651.16T:tinyjambu192v2
59.2659.5559.84romulust
63.3063.5963.88T:isapa128av20
102.91103.48103.77T:isapk128av20
113.02113.89114.18T:elephant200v2
131.52132.39132.68T:isapa128v20
478.98492.56498.05T:isapk128v20
2036.732038.762063.33T:isapxv20
5448.255478.895508.38T:elephant176v2
7117.597151.127191.01T:elephant160v2

amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.501.521.54T:aes128gcmv1
1.661.671.68aes256gcmv1
4.664.714.75aes128gcmv1
6.646.676.77ascon128av12
9.339.389.39ascon80pqv12
9.429.429.42ascon128v12
11.3211.3311.34ascon128abi32v12
17.2217.2317.23ascon128bi32v12
17.5617.5917.63T:xoodyakround3
21.5121.7321.75T:schwaemm256128v2
25.5725.6825.89T:schwaemm256256v2
27.3027.4727.50T:grain128aeadv2
28.5028.5828.63T:schwaemm192192v2
29.7629.8129.82T:schwaemm128128v2
35.1435.2235.25romulusn
36.3336.3536.44T:isapa128v20
36.6236.8036.91T:isapa128av20
40.3040.3640.38T:giftcofb128v1
56.9257.0057.15romulusm
62.2162.2462.24T:tinyjambu128v2
66.7166.8066.93T:isapk128av20
69.4969.5369.56T:tinyjambu192v2
76.6276.6776.70T:tinyjambu256v2
87.9188.0388.79T:isapk128v20
110.66110.68110.69romulust
163.42164.05164.41T:isapxv20
254.49255.06255.40T:elephant200v2
6838.296842.246847.11T:elephant176v2
7652.487659.407666.26T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.601.611.63T:aes128gcmv1
1.761.781.79aes256gcmv1
4.564.604.65aes128gcmv1
6.586.676.69ascon128av12
9.359.379.38ascon80pqv12
9.319.409.42ascon128v12
11.4311.4411.44ascon128abi32v12
17.2817.2917.29ascon128bi32v12
17.4317.5417.58T:xoodyakround3
21.8021.8221.83T:schwaemm256128v2
25.5925.6725.72T:schwaemm256256v2
27.2227.2627.39T:grain128aeadv2
28.6328.6528.66T:schwaemm192192v2
29.8129.8229.93T:schwaemm128128v2
35.1235.1435.39romulusn
36.3636.3736.43T:isapa128v20
36.6936.6936.86T:isapa128av20
40.7440.8040.86T:giftcofb128v1
56.6957.1257.36romulusm
62.4062.4062.41T:tinyjambu128v2
66.8266.9267.05T:isapk128av20
69.3269.3569.39T:tinyjambu192v2
76.6176.6776.68T:tinyjambu256v2
87.9888.0488.16T:isapk128v20
110.61110.66110.68romulust
163.55163.94164.83T:isapxv20
254.36255.34255.82T:elephant200v2
6832.696839.286844.59T:elephant176v2
7652.297655.647665.31T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.541.561.61aes128gcmv1
1.591.601.60T:aes128gcmv1
1.761.771.78aes256gcmv1
6.676.686.69ascon128av12
9.369.389.39ascon80pqv12
9.389.399.40ascon128v12
11.4311.4411.46ascon128abi32v12
17.1217.1217.12ascon128bi32v12
17.5017.5517.59T:xoodyakround3
18.1918.1918.24T:isapa128v20
21.8121.8321.84T:schwaemm256128v2
24.3624.5224.61T:isapa128av20
25.5025.6425.68T:schwaemm256256v2
27.2127.3027.41T:grain128aeadv2
28.6428.6528.65T:schwaemm192192v2
29.7829.7829.79T:schwaemm128128v2
34.7235.1635.37romulusn
37.1637.1837.21romulust
40.7940.8040.84T:giftcofb128v1
43.9944.0744.11T:isapk128av20
54.9655.2955.48T:isapk128v20
57.1057.1357.47romulusm
62.2162.2362.25T:tinyjambu128v2
69.3069.3369.35T:tinyjambu192v2
76.6276.6776.68T:tinyjambu256v2
98.1898.3798.70T:isapxv20
254.33254.63254.76T:elephant200v2
6833.526834.946843.03T:elephant176v2
7651.627652.757661.13T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.021.031.04T:aes128gcmv1
1.091.101.11aes256gcmv1
3.053.073.09aes128gcmv1
6.576.596.60ascon128av12
9.299.319.33ascon80pqv12
9.319.329.33ascon128v12
11.0611.0811.25ascon128abi32v12
13.7613.7913.81T:xoodyakround3
16.8816.8916.90ascon128bi32v12
21.5921.6021.61T:schwaemm256128v2
25.4425.4625.52T:schwaemm256256v2
27.3127.3327.34T:isapa128v20
27.2827.3827.49T:grain128aeadv2
28.3428.5128.59T:schwaemm192192v2
28.5428.5928.61romulusn
29.6329.6829.77T:schwaemm128128v2
30.6530.7030.80T:isapa128av20
39.4839.5539.63romulusm
40.3440.3640.41T:giftcofb128v1
51.1551.2251.25T:tinyjambu128v2
54.8154.8254.85T:tinyjambu192v2
55.3655.3955.45T:isapk128av20
58.4158.4558.48T:tinyjambu256v2
71.4471.4971.56T:isapk128v20
73.8773.9374.00romulust
130.79131.09131.55T:isapxv20
191.17191.25191.37T:elephant200v2
5102.345107.275125.31T:elephant176v2
5735.795737.525744.98T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.051.061.07T:aes128gcmv1
1.141.151.16aes256gcmv1
3.023.063.10aes128gcmv1
6.526.586.59ascon128av12
9.289.299.32ascon128v12
9.309.309.32ascon80pqv12
11.2011.2211.23ascon128abi32v12
13.6713.7013.72T:xoodyakround3
16.8916.9116.91ascon128bi32v12
21.4521.5421.57T:schwaemm256128v2
25.4525.5025.58T:schwaemm256256v2
26.8526.9527.23T:grain128aeadv2
27.3027.3327.33T:isapa128v20
28.5428.5728.75romulusn
28.6228.6428.65T:schwaemm192192v2
29.6229.6629.68T:schwaemm128128v2
30.6130.6230.67T:isapa128av20
39.3339.5539.67romulusm
40.5640.5740.60T:giftcofb128v1
51.1651.1751.20T:tinyjambu128v2
54.7354.7554.75T:tinyjambu192v2
55.4055.4755.65T:isapk128av20
58.4158.4558.55T:tinyjambu256v2
71.4771.5271.89T:isapk128v20
73.9173.9373.97romulust
130.94131.05131.26T:isapxv20
190.02190.63191.85T:elephant200v2
5100.965102.795108.53T:elephant176v2
5735.415736.765745.24T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.071.071.08T:aes128gcmv1
1.151.151.16aes256gcmv1
1.491.521.54aes128gcmv1
6.546.546.57ascon128av12
9.289.309.31ascon128v12
9.309.309.30ascon80pqv12
11.2211.2211.23ascon128abi32v12
13.7213.7513.78T:xoodyakround3
16.9916.9917.08ascon128bi32v12
18.2318.2418.26T:isapa128v20
21.4221.4221.44T:schwaemm256128v2
24.4224.5924.60T:isapa128av20
25.4925.5725.61T:schwaemm256256v2
26.8727.1227.18T:grain128aeadv2
28.6428.6528.71T:schwaemm192192v2
28.5628.7128.75romulusn
29.6029.6930.00T:schwaemm128128v2
37.1737.2037.23romulust
39.5339.5639.65romulusm
40.5640.5640.60T:giftcofb128v1
44.0344.0444.05T:isapk128av20
51.2251.2451.26T:tinyjambu128v2
54.7154.7354.75T:tinyjambu192v2
54.9454.9654.98T:isapk128v20
58.5358.5558.56T:tinyjambu256v2
98.0398.2998.38T:isapxv20
191.09191.46191.64T:elephant200v2
5102.085106.685109.84T:elephant176v2
5735.865744.255747.27T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.520.540.56aes256gcmv1
0.530.550.56T:aes128gcmv1
1.441.451.46aes128gcmv1
6.416.436.46ascon128av12
9.239.239.23ascon80pqv12
9.259.259.25ascon128v12
9.909.939.96T:xoodyakround3
10.8010.8310.84ascon128abi32v12
16.5616.5716.58ascon128bi32v12
18.2318.2518.27T:isapa128v20
21.4621.4721.47T:schwaemm256128v2
21.9821.9922.00romulusn
21.9821.9922.01romulusm
24.7024.7124.71T:isapa128av20
25.4325.4425.45T:schwaemm256256v2
27.2227.4127.61T:grain128aeadv2
28.2928.3828.42T:schwaemm192192v2
29.5829.6429.67T:schwaemm128128v2
37.1637.1737.19romulust
40.1240.1340.15T:tinyjambu192v2
40.1840.2140.25T:tinyjambu128v2
40.2340.2340.24T:tinyjambu256v2
40.2940.3140.35T:giftcofb128v1
44.0844.2544.30T:isapk128av20
54.7754.9155.02T:isapk128v20
97.9398.2198.80T:isapxv20
127.36127.85128.19T:elephant200v2
3373.173376.413380.67T:elephant176v2
3821.063821.813824.19T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.520.550.56T:aes128gcmv1
0.530.560.57aes256gcmv1
1.411.461.50aes128gcmv1
6.356.446.48ascon128av12
9.229.239.26ascon128v12
9.239.249.24ascon80pqv12
9.879.969.97T:xoodyakround3
10.9911.0011.01ascon128abi32v12
16.6816.6916.69ascon128bi32v12
18.2418.2718.27T:isapa128v20
21.4621.4721.48T:schwaemm256128v2
21.9721.9822.01romulusm
21.9821.9922.00romulusn
24.3524.3624.70T:isapa128av20
25.4425.6225.65T:schwaemm256256v2
26.9427.0427.27T:grain128aeadv2
28.0628.4028.41T:schwaemm192192v2
29.5729.6229.62T:schwaemm128128v2
37.1737.1837.20romulust
40.1440.1540.20T:tinyjambu192v2
40.1440.1640.19T:tinyjambu128v2
40.2340.2540.42T:tinyjambu256v2
40.3040.3440.40T:giftcofb128v1
43.9844.0844.34T:isapk128av20
54.9054.9754.99T:isapk128v20
97.8298.0898.37T:isapxv20
127.96128.12128.18T:elephant200v2
3372.643373.433376.31T:elephant176v2
3821.013825.493828.82T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.520.540.55T:aes128gcmv1
0.530.540.55aes256gcmv1
1.431.461.50aes128gcmv1
6.366.476.50ascon128av12
9.219.229.25ascon128v12
9.219.239.26ascon80pqv12
9.939.959.97T:xoodyakround3
11.0011.0111.01ascon128abi32v12
16.8016.8516.85ascon128bi32v12
18.2618.2718.32T:isapa128v20
21.2321.3021.47T:schwaemm256128v2
21.9721.9821.99romulusn
21.9821.9822.01romulusm
24.3524.5624.71T:isapa128av20
25.4325.5025.65T:schwaemm256256v2
26.8626.9627.05T:grain128aeadv2
28.0628.4028.41T:schwaemm192192v2
29.5329.5729.60T:schwaemm128128v2
37.1537.1837.22romulust
40.1440.1440.15T:tinyjambu192v2
40.1440.1640.20T:tinyjambu128v2
40.4340.4340.43T:giftcofb128v1
40.3340.4440.44T:tinyjambu256v2
44.0144.0444.08T:isapk128av20
54.8654.9154.97T:isapk128v20
97.7897.9398.31T:isapxv20
127.84127.90128.18T:elephant200v2
3371.623372.983376.82T:elephant176v2
3821.333822.073824.55T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.141.151.15T:aes128gcmv1
1.231.241.24aes256gcmv1
3.253.273.30aes128gcmv1
6.786.806.81ascon128av12
9.469.479.48ascon128v12
9.469.479.47ascon80pqv12
11.3911.3911.43ascon128abi32v12
13.9113.9313.96T:xoodyakround3
17.1817.2117.21ascon128bi32v12
22.2422.2422.25T:schwaemm256128v2
26.2926.3026.41T:schwaemm256256v2
27.6527.7127.74T:grain128aeadv2
28.7528.8528.86romulusn
29.1629.1829.23T:schwaemm192192v2
30.0830.1130.15T:schwaemm128128v2
33.9734.0534.13T:isapa128av20
39.6439.8139.88romulusm
39.8539.8839.89T:isapa128v20
40.7340.7440.75T:giftcofb128v1
51.5351.6151.61T:tinyjambu128v2
55.2255.2355.27T:tinyjambu192v2
58.8558.8758.90T:tinyjambu256v2
61.8861.9161.94T:isapk128av20
75.0775.0875.13romulust
123.25123.28123.64T:isapk128v20
195.16195.24195.57T:elephant200v2
212.44212.71213.01T:isapxv20
5140.955141.975148.70T:elephant176v2
5802.815806.315816.75T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.201.201.21T:aes128gcmv1
1.291.301.31aes256gcmv1
3.283.303.33aes128gcmv1
6.736.776.78ascon128av12
9.459.459.46ascon128v12
9.479.479.48ascon80pqv12
11.5211.5211.53ascon128abi32v12
13.8413.8813.90T:xoodyakround3
17.2317.2317.24ascon128bi32v12
22.0222.0322.10T:schwaemm256128v2
26.2126.2326.25T:schwaemm256256v2
27.2627.4127.55T:grain128aeadv2
28.6328.8228.99romulusn
29.2729.2929.52T:schwaemm192192v2
30.0630.0930.13T:schwaemm128128v2
33.9033.9434.05T:isapa128av20
39.8539.8939.93romulusm
39.9339.9439.96T:isapa128v20
40.9340.9740.98T:giftcofb128v1
51.6051.6051.67T:tinyjambu128v2
55.1355.1655.18T:tinyjambu192v2
58.8958.9459.00T:tinyjambu256v2
61.8861.9462.03T:isapk128av20
75.0875.0975.13romulust
123.26123.31123.31T:isapk128v20
194.87195.23195.58T:elephant200v2
212.49212.72213.03T:isapxv20
5140.925141.535146.54T:elephant176v2
5801.525807.095813.42T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.191.191.19T:aes128gcmv1
1.281.291.29aes256gcmv1
1.731.741.76aes128gcmv1
6.726.746.75ascon128av12
9.449.449.49ascon128v12
9.479.479.47ascon80pqv12
11.5211.5211.54ascon128abi32v12
13.8913.9113.95T:xoodyakround3
17.3117.3117.31ascon128bi32v12
22.0422.0422.12T:schwaemm256128v2
24.6424.6424.64T:isapa128v20
26.2426.3126.31T:schwaemm256256v2
26.2626.3926.40T:isapa128av20
27.2527.4727.58T:grain128aeadv2
28.6328.8228.85romulusn
29.2029.3029.35T:schwaemm192192v2
30.0830.1130.14T:schwaemm128128v2
38.2738.2738.31romulust
39.7939.8639.89romulusm
40.9240.9240.93T:giftcofb128v1
47.7947.8047.81T:isapk128av20
51.5751.6051.61T:tinyjambu128v2
55.1655.1655.17T:tinyjambu192v2
58.8858.9859.02T:tinyjambu256v2
81.3881.3981.79T:isapk128v20
139.92140.05140.37T:isapxv20
194.84194.87195.45T:elephant200v2
5141.485144.245162.88T:elephant176v2
5801.225805.415808.95T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.606.646.70aes256gcmv1
7.217.277.45aes128gcmv1
7.287.327.43T:aes128gcmv1
11.1211.5211.69ascon128av12
12.7012.8913.39ascon128v12
12.8013.0313.31ascon80pqv12
18.3718.5318.84ascon128abi32v12
20.5520.6020.69T:xoodyakround3
24.1224.8025.08ascon128bi32v12
34.5234.6734.77romulusn
35.5935.7035.96T:grain128aeadv2
35.9836.1736.24T:schwaemm256128v2
39.9840.0740.21T:schwaemm128128v2
41.6641.8942.03T:schwaemm256256v2
45.7045.9346.31romulusm
47.6247.8048.10T:schwaemm192192v2
49.1949.2949.40T:giftcofb128v1
60.5260.6960.87T:tinyjambu128v2
64.7264.7264.93T:tinyjambu192v2
68.7368.7868.89T:tinyjambu256v2
101.01101.25102.81romulust
109.41109.49109.88T:isapa128av20
198.89199.59200.18T:isapk128av20
276.48277.44278.29T:elephant200v2
328.55328.73329.17T:isapa128v20
1298.121298.221298.95T:isapk128v20
2060.412066.232069.39T:isapxv20
6402.086402.496408.06T:elephant176v2
7767.707770.387772.34T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.756.786.88aes256gcmv1
6.806.896.94T:aes128gcmv1
8.949.129.29aes128gcmv1
11.1111.2611.59ascon128av12
12.8112.8813.42ascon128v12
12.7713.3813.62ascon80pqv12
18.3718.9819.17ascon128abi32v12
20.3120.3520.89T:xoodyakround3
24.4524.5325.14ascon128bi32v12
34.5734.7334.81romulusn
35.4635.5935.77T:grain128aeadv2
36.2036.3036.30T:schwaemm256128v2
39.9840.1040.27T:schwaemm128128v2
41.6341.6641.80T:schwaemm256256v2
47.2847.3647.67romulusm
47.6248.0248.14T:schwaemm192192v2
49.6349.7949.80T:giftcofb128v1
60.7660.8060.80T:tinyjambu128v2
64.8064.9465.02T:tinyjambu192v2
68.8269.0469.23T:tinyjambu256v2
101.12101.24101.80romulust
109.59109.71109.72T:isapa128av20
198.86198.95199.46T:isapk128av20
276.63276.89277.91T:elephant200v2
328.29328.29331.20T:isapa128v20
1298.281298.391298.84T:isapk128v20
2062.732066.932068.75T:isapxv20
6403.406406.306410.87T:elephant176v2
7769.827772.247775.20T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.666.707.33aes128gcmv1
6.756.816.82aes256gcmv1
6.776.846.89T:aes128gcmv1
10.9311.0211.11ascon128av12
12.7012.8813.19ascon128v12
12.7013.1113.27ascon80pqv12
18.2018.3218.73ascon128abi32v12
20.4920.5521.24T:xoodyakround3
24.3024.4224.55ascon128bi32v12
34.7834.8434.99romulusn
35.3635.5235.62T:grain128aeadv2
36.2236.2736.27T:schwaemm256128v2
39.9940.1640.23T:schwaemm128128v2
41.6641.8541.98T:schwaemm256256v2
47.1347.3847.55romulusm
47.5547.8547.90T:schwaemm192192v2
49.6149.7049.81T:giftcofb128v1
60.5960.5960.70T:tinyjambu128v2
62.8863.0564.15romulust
64.6464.6664.95T:tinyjambu192v2
68.2268.2368.46T:isapa128av20
68.9568.9569.05T:tinyjambu256v2
125.25125.31125.32T:isapk128av20
170.06170.06170.06T:isapa128v20
277.10277.34278.01T:elephant200v2
677.84678.09678.78T:isapk128v20
1081.911083.321084.35T:isapxv20
6404.706407.446409.79T:elephant176v2
7766.967770.567791.91T:elephant160v2

amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.51?0.56?0.64?T:aes128gcmv1
0.57?0.64?0.71?T:aes256gcmv1
1.611.631.67aes256gcmv1
3.813.934.01aes128gcmv1
7.407.477.55ascon128av12
10.9010.9410.99ascon80pqv12
10.9310.9711.03ascon128v12
13.4113.4813.54T:xoodyakround3
14.7414.7914.83ascon128abi32v12
16.4316.5416.65T:schwaemm256128v2
18.8618.8919.01T:grain128aeadv2
20.6920.7721.29T:schwaemm256256v2
21.6721.7921.90T:schwaemm192192v2
22.3822.4222.47ascon128bi32v12
25.0325.1025.29T:schwaemm128128v2
26.8426.9126.95T:isapa128av20
32.0732.1032.14T:isapk128av20
36.9537.0337.07romulusn
44.1844.2244.28T:giftcofb128v1
45.1345.2245.31T:isapa128v20
57.8558.0458.15romulusm
70.4470.5170.57T:tinyjambu128v2
85.7185.7685.84T:tinyjambu192v2
90.4091.2491.62T:isapk128v20
91.1391.6691.74T:tinyjambu256v2
110.77110.88111.08romulust
121.22122.26122.70T:elephant200v2
135.66137.68138.73T:isapxv20
7261.197265.757285.62T:elephant176v2
8272.208275.298279.42T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.49?0.53?0.64?T:aes128gcmv1
0.58?0.63?0.70?T:aes256gcmv1
1.511.531.58aes256gcmv1
3.883.984.08aes128gcmv1
7.447.497.51ascon128av12
10.7610.7910.82ascon80pqv12
10.8910.9110.94ascon128v12
13.2713.3413.40T:xoodyakround3
14.8514.8814.91ascon128abi32v12
16.4316.5516.80T:schwaemm256128v2
19.2619.3219.42T:grain128aeadv2
20.6120.8021.34T:schwaemm256256v2
21.6721.8121.91T:schwaemm192192v2
22.3222.3622.41ascon128bi32v12
25.2325.3625.40T:schwaemm128128v2
32.0832.1132.17T:isapk128av20
34.2734.3334.44T:isapa128av20
37.3437.3837.46romulusn
44.2144.2744.31T:giftcofb128v1
45.1345.2745.32T:isapa128v20
58.2658.3158.48romulusm
70.3970.4670.57T:tinyjambu128v2
85.6185.8386.11T:tinyjambu192v2
90.3291.1191.90T:isapk128v20
91.3791.5591.68T:tinyjambu256v2
110.97111.05111.22romulust
121.27121.48122.23T:elephant200v2
137.49137.93138.49T:isapxv20
7256.167260.667275.36T:elephant176v2
8270.788274.968279.17T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.46?0.57?0.60?T:aes128gcmv1
0.54?0.60?0.69?T:aes256gcmv1
1.451.511.57aes128gcmv1
1.511.521.56aes256gcmv1
7.447.467.51ascon128av12
10.7710.8010.82ascon80pqv12
10.8510.9110.94ascon128v12
13.2813.3713.43T:xoodyakround3
14.8514.8714.90ascon128abi32v12
16.4016.5716.77T:schwaemm256128v2
19.1819.3319.42T:grain128aeadv2
20.5520.8821.32T:schwaemm256256v2
21.3721.4221.45T:isapk128av20
21.6121.7921.93T:schwaemm192192v2
21.9822.0322.11T:isapa128v20
22.3022.3522.38ascon128bi32v12
22.8022.8722.92T:isapa128av20
25.2025.2825.38T:schwaemm128128v2
37.3437.3837.49romulusn
38.6638.7438.87romulust
44.2144.2844.34T:giftcofb128v1
57.1357.6557.90T:isapk128v20
58.2158.2758.38romulusm
70.3570.4470.55T:tinyjambu128v2
80.8881.3682.14T:isapxv20
85.6285.7285.87T:tinyjambu192v2
91.0891.5791.61T:tinyjambu256v2
120.83121.26121.55T:elephant200v2
7253.987264.557295.41T:elephant176v2
8269.708275.818278.65T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.37?0.41?0.47?T:aes128gcmv1
0.41?0.43?0.53?T:aes256gcmv1
0.950.970.98aes256gcmv1
2.682.702.73aes128gcmv1
7.347.387.42ascon128av12
10.2610.3110.36T:xoodyakround3
10.8910.9110.93ascon80pqv12
10.9210.9410.95ascon128v12
14.4914.5214.54ascon128abi32v12
16.2616.3516.48T:schwaemm256128v2
18.9118.9418.97T:grain128aeadv2
20.5620.7221.24T:schwaemm256256v2
21.7721.8321.91T:schwaemm192192v2
22.0722.1022.13ascon128bi32v12
24.8424.8724.91T:isapa128av20
25.0725.1925.31T:schwaemm128128v2
26.7126.7326.74T:isapk128av20
28.9328.9629.06romulusn
33.6333.6933.73T:isapa128v20
39.3939.4239.51romulusm
44.1144.1944.29T:giftcofb128v1
57.5257.6757.69T:tinyjambu128v2
67.0467.1467.36T:tinyjambu192v2
68.6168.9069.13T:tinyjambu256v2
73.8174.1974.60T:isapk128v20
74.9074.9675.02romulust
90.3890.5891.72T:elephant200v2
108.44109.45109.83T:isapxv20
5415.835422.965438.50T:elephant176v2
6202.226204.276206.37T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.36?0.37?0.41?T:aes128gcmv1
0.40?0.42?0.46?T:aes256gcmv1
0.900.920.93aes256gcmv1
2.702.752.79aes128gcmv1
7.387.397.42ascon128av12
10.2210.2710.30T:xoodyakround3
10.7910.8110.83ascon80pqv12
10.8510.8910.91ascon128v12
14.5414.5714.60ascon128abi32v12
16.3116.4216.61T:schwaemm256128v2
19.0919.1919.34T:grain128aeadv2
20.5720.7021.28T:schwaemm256256v2
21.7621.8421.90T:schwaemm192192v2
22.0522.0922.12ascon128bi32v12
25.1425.2625.36T:schwaemm128128v2
26.7226.7426.76T:isapk128av20
28.3728.4128.44T:isapa128av20
29.1129.1729.20romulusn
33.6333.6833.70T:isapa128v20
39.4939.5839.64romulusm
44.1644.1944.26T:giftcofb128v1
57.5157.5557.68T:tinyjambu128v2
67.0467.3167.39T:tinyjambu192v2
68.8368.8969.08T:tinyjambu256v2
73.9574.3574.72T:isapk128v20
74.8674.9475.04romulust
90.5690.9691.08T:elephant200v2
108.83110.12110.58T:isapxv20
5417.265421.445427.15T:elephant176v2
6201.586204.266206.56T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.36?0.40?0.42?T:aes128gcmv1
0.40?0.42?0.48?T:aes256gcmv1
0.910.920.94aes256gcmv1
1.451.471.51aes128gcmv1
7.397.417.43ascon128av12
10.2710.3010.37T:xoodyakround3
10.7910.8110.83ascon80pqv12
10.8610.8710.88ascon128v12
14.5414.5614.58ascon128abi32v12
16.2616.4316.53T:schwaemm256128v2
19.0819.1319.16T:grain128aeadv2
20.5620.6821.28T:schwaemm256256v2
21.3621.3821.42T:isapk128av20
21.6721.7321.85T:schwaemm192192v2
22.0322.0722.12T:isapa128v20
22.0522.0922.12ascon128bi32v12
22.6022.6322.68T:isapa128av20
25.0825.1725.29T:schwaemm128128v2
29.0729.1329.20romulusn
38.7738.8638.91romulust
39.5839.6539.76romulusm
44.1844.2544.33T:giftcofb128v1
57.0857.4757.70T:isapk128v20
57.5357.5757.64T:tinyjambu128v2
67.0367.1667.35T:tinyjambu192v2
68.6668.8268.86T:tinyjambu256v2
81.0281.3081.94T:isapxv20
90.8891.1791.51T:elephant200v2
5419.165424.065431.12T:elephant176v2
6200.346203.366207.36T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.16?0.21?0.29?T:aes256gcmv1
0.18?0.22?0.32?T:aes128gcmv1
0.29?0.32?0.33?aes256gcmv1
1.411.451.48aes128gcmv1
7.167.237.28T:xoodyakround3
7.337.417.47ascon128av12
10.8010.8210.85ascon80pqv12
10.8510.8910.93ascon128v12
14.2014.2414.26ascon128abi32v12
16.0216.2316.43T:schwaemm256128v2
18.7818.9919.06T:grain128aeadv2
20.5220.6421.21T:schwaemm256256v2
20.8720.9120.96romulusm
20.8520.9220.96romulusn
21.3821.4221.45T:isapk128av20
21.5021.6121.76T:schwaemm192192v2
21.7421.7821.82ascon128bi32v12
22.0822.1222.19T:isapa128v20
22.8022.8722.93T:isapa128av20
24.9125.0225.11T:schwaemm128128v2
38.6038.7138.85romulust
44.1144.2244.27T:giftcofb128v1
44.6244.6744.70T:tinyjambu128v2
46.4246.5246.57T:tinyjambu256v2
48.2648.3748.48T:tinyjambu192v2
57.1957.5158.08T:isapk128v20
61.6862.3462.52T:elephant200v2
81.0581.7182.59T:isapxv20
3582.663593.683602.50T:elephant176v2
4130.214138.484149.79T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.07?0.19?0.27?T:aes256gcmv1
0.16?0.20?0.27?T:aes128gcmv1
0.300.310.32aes256gcmv1
1.411.451.48aes128gcmv1
7.167.247.30T:xoodyakround3
7.317.347.37ascon128av12
10.7910.8210.88ascon80pqv12
10.8210.8710.89ascon128v12
14.2014.2514.26ascon128abi32v12
16.0416.2716.43T:schwaemm256128v2
18.9519.1719.19T:grain128aeadv2
20.4920.6521.19T:schwaemm256256v2
20.7520.8420.94romulusn
20.8620.9520.99romulusm
21.3821.4121.43T:isapk128av20
21.3521.5121.64T:schwaemm192192v2
21.7221.7521.82ascon128bi32v12
22.0322.1122.16T:isapa128v20
22.3822.4222.48T:isapa128av20
24.9725.1525.29T:schwaemm128128v2
38.6438.7438.84romulust
44.1044.1944.24T:giftcofb128v1
44.5844.6244.70T:tinyjambu128v2
46.1946.2846.56T:tinyjambu256v2
48.4648.5148.55T:tinyjambu192v2
56.9157.3457.88T:isapk128v20
61.9062.4562.65T:elephant200v2
81.2381.7982.25T:isapxv20
3566.613581.253595.50T:elephant176v2
4132.884141.634150.59T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.17?0.19?0.30?T:aes128gcmv1
0.17?0.23?0.29?T:aes256gcmv1
0.310.320.32aes256gcmv1
1.391.451.47aes128gcmv1
7.217.277.32T:xoodyakround3
7.327.347.36ascon128av12
10.8110.8410.87ascon80pqv12
10.8210.8710.90ascon128v12
14.2114.2414.27ascon128abi32v12
15.8416.1516.38T:schwaemm256128v2
18.9318.9819.22T:grain128aeadv2
20.4720.6121.21T:schwaemm256256v2
20.7920.8520.96romulusm
20.8720.9220.97romulusn
21.3621.4121.45T:isapk128av20
21.4521.6221.83T:schwaemm192192v2
21.7221.8021.82ascon128bi32v12
22.0422.1122.16T:isapa128v20
22.3822.4622.51T:isapa128av20
24.9325.1025.22T:schwaemm128128v2
38.7838.8938.99romulust
44.0644.1144.18T:giftcofb128v1
44.6444.6944.71T:tinyjambu128v2
46.2446.5346.57T:tinyjambu256v2
48.2448.3148.36T:tinyjambu192v2
56.9457.5857.89T:isapk128v20
62.2262.4262.56T:elephant200v2
80.3881.1881.90T:isapxv20
3567.893582.543598.73T:elephant176v2
4134.864141.694147.45T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.800.820.88T:aes128gcmv1
0.870.900.94T:aes256gcmv1
1.111.121.13aes256gcmv1
2.832.842.89aes128gcmv1
7.567.587.63ascon128av12
10.4310.4510.47T:xoodyakround3
11.0411.0611.08ascon80pqv12
11.0611.0911.10ascon128v12
14.8514.8614.88ascon128abi32v12
16.7616.8116.87T:schwaemm256128v2
19.3119.3319.40T:grain128aeadv2
21.2021.2921.77T:schwaemm256256v2
22.1622.2922.36T:schwaemm192192v2
22.4022.4422.45ascon128bi32v12
25.4725.5225.60T:schwaemm128128v2
26.8126.8326.85T:isapa128av20
29.1829.2129.27romulusn
29.8029.8029.81T:isapk128av20
39.6239.7239.79romulusm
44.5444.5944.64T:giftcofb128v1
48.6948.7448.75T:isapa128v20
58.0058.0658.11T:tinyjambu128v2
67.5967.6767.86T:tinyjambu192v2
69.1769.5569.59T:tinyjambu256v2
76.1276.1976.21romulust
93.5593.6793.89T:elephant200v2
128.61128.78128.94T:isapk128v20
179.83180.22180.96T:isapxv20
5461.315468.295471.58T:elephant176v2
6271.306274.156276.04T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.790.810.84T:aes128gcmv1
0.860.870.88T:aes256gcmv1
1.071.071.08aes256gcmv1
2.932.973.00aes128gcmv1
7.557.587.60ascon128av12
10.3510.3710.40T:xoodyakround3
10.9410.9710.98ascon80pqv12
11.0311.0411.06ascon128v12
14.9014.9014.92ascon128abi32v12
16.7216.7816.86T:schwaemm256128v2
19.4819.5219.66T:grain128aeadv2
21.2121.3521.82T:schwaemm256256v2
22.0922.2122.33T:schwaemm192192v2
22.4122.4522.47ascon128bi32v12
25.4525.5325.58T:schwaemm128128v2
29.3429.3629.43romulusn
29.8129.8229.82T:isapk128av20
30.2630.2930.30T:isapa128av20
39.8839.9940.03romulusm
44.6144.6444.71T:giftcofb128v1
48.7248.7448.75T:isapa128v20
57.9357.9558.05T:tinyjambu128v2
67.5467.6967.79T:tinyjambu192v2
69.2269.3069.36T:tinyjambu256v2
76.1476.2176.27romulust
93.7093.7793.92T:elephant200v2
128.48128.98129.21T:isapk128v20
179.93180.42180.59T:isapxv20
5459.635466.005475.71T:elephant176v2
6273.326275.536278.03T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.800.840.86T:aes128gcmv1
0.860.870.93T:aes256gcmv1
1.071.071.08aes256gcmv1
1.671.691.70aes128gcmv1
7.557.567.57ascon128av12
10.3910.4010.44T:xoodyakround3
10.9510.9711.00ascon80pqv12
11.0211.0311.05ascon128v12
14.8914.9014.92ascon128abi32v12
16.6616.6816.78T:schwaemm256128v2
19.4219.4919.59T:grain128aeadv2
21.1821.3421.79T:schwaemm256256v2
22.2022.2822.40T:schwaemm192192v2
22.4122.4322.45ascon128bi32v12
23.1823.2023.21T:isapk128av20
23.6923.7223.76T:isapa128av20
25.4725.5625.66T:schwaemm128128v2
29.3429.3529.37romulusn
29.7329.7529.78T:isapa128v20
39.9139.9739.99romulusm
39.9339.9940.07romulust
44.6544.6844.72T:giftcofb128v1
57.9358.0158.06T:tinyjambu128v2
67.6267.6767.82T:tinyjambu192v2
69.3869.5669.60T:tinyjambu256v2
85.2985.4585.71T:isapk128v20
93.4393.6793.77T:elephant200v2
117.69118.11118.31T:isapxv20
5455.795464.405470.28T:elephant176v2
6272.116275.626277.36T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.90?6.05?6.57?aes128gcmv1
6.696.736.75aes256gcmv1
10.6211.1211.48T:aes128gcmv1
10.9211.2111.73T:aes256gcmv1
11.4111.7311.90ascon128av12
14.4514.5514.68ascon128v12
14.4614.6115.06ascon80pqv12
14.7714.9815.84T:xoodyakround3
22.2522.3322.92ascon128abi32v12
27.6627.9628.68T:schwaemm256128v2
27.5528.3128.45T:grain128aeadv2
30.1030.2030.59ascon128bi32v12
32.8633.3834.09T:schwaemm128128v2
33.9734.0834.97T:schwaemm256256v2
34.5534.7335.01romulusn
35.5536.1937.10T:schwaemm192192v2
45.8046.1846.49romulusm
53.3653.5253.83T:giftcofb128v1
67.5067.5967.86T:tinyjambu128v2
71.0571.2371.76T:isapa128av20
78.7078.8779.05T:tinyjambu192v2
80.2780.4380.59T:tinyjambu256v2
95.2295.4595.66T:isapk128av20
101.98102.57103.67romulust
131.84132.45133.02T:elephant200v2
394.54394.98395.73T:isapa128v20
1347.901352.881360.24T:isapk128v20
1767.421770.091771.77T:isapxv20
6812.926828.896842.43T:elephant176v2
8412.458421.668432.23T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.046.066.16aes256gcmv1
7.33?7.74?8.45?aes128gcmv1
10.9811.1111.80T:aes128gcmv1
11.4511.5712.11ascon128av12
11.4911.6812.03T:aes256gcmv1
14.3214.4214.66ascon80pqv12
14.4514.6014.84ascon128v12
14.8214.9516.00T:xoodyakround3
22.4722.7823.54ascon128abi32v12
27.2627.6228.35T:schwaemm256128v2
27.7427.8628.64T:grain128aeadv2
30.0730.1630.62ascon128bi32v12
33.0833.5034.12T:schwaemm128128v2
33.9834.1734.91T:schwaemm256256v2
34.8535.0535.17romulusn
35.3036.2337.02T:schwaemm192192v2
46.9347.2747.65romulusm
53.5553.9054.24T:giftcofb128v1
67.4767.6267.83T:tinyjambu128v2
74.1774.4574.73T:isapa128av20
78.1678.5578.70T:tinyjambu192v2
80.2480.5280.84T:tinyjambu256v2
95.1295.4895.66T:isapk128av20
101.46101.80102.96romulust
131.83132.63133.17T:elephant200v2
394.89395.47396.30T:isapa128v20
1349.781355.031360.16T:isapk128v20
1780.911786.351789.30T:isapxv20
6803.416820.616849.43T:elephant176v2
8406.818412.118422.67T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.72?5.86?6.38?aes128gcmv1
6.066.096.12aes256gcmv1
10.5911.0211.38T:aes128gcmv1
11.4611.6211.98ascon128av12
11.7011.7511.96T:aes256gcmv1
14.4014.4614.67ascon128v12
14.4214.5214.70ascon80pqv12
14.8415.0915.88T:xoodyakround3
22.3322.7723.09ascon128abi32v12
27.1927.8428.16T:schwaemm256128v2
27.8628.2428.72T:grain128aeadv2
30.1030.2430.39ascon128bi32v12
32.6633.2234.10T:schwaemm128128v2
34.0534.1634.80T:schwaemm256256v2
34.7834.9135.04romulusn
35.9136.6237.35T:schwaemm192192v2
47.1747.5447.68romulusm
48.4948.5848.98T:isapa128av20
53.5553.8154.26T:giftcofb128v1
60.0760.4360.52T:isapk128av20
65.6065.8866.37romulust
67.5467.6567.73T:tinyjambu128v2
78.5578.6778.76T:tinyjambu192v2
80.5280.6680.80T:tinyjambu256v2
131.62132.39133.08T:elephant200v2
205.84206.20206.51T:isapa128v20
706.48710.55714.10T:isapk128v20
930.59933.58939.04T:isapxv20
6820.576835.706846.94T:elephant176v2
8410.498420.338425.55T:elephant160v2

aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
7.187.197.19ascon128av12
10.4910.5010.51ascon128v12
10.5010.5110.51ascon80pqv12
14.3514.3514.43ascon128abi32v12
20.3720.3820.38ascon128bi32v12
22.0522.0922.26T:xoodyakround3
30.4930.5330.54T:schwaemm256128v2
32.2732.7534.44T:aes256gcmv1
38.9939.0139.01T:isapa128av20
40.5140.5340.54T:schwaemm192192v2
42.3842.3942.41T:giftcofb128v1
43.6143.6443.65T:isapa128v20
46.1146.1146.13T:schwaemm256256v2
48.6248.6848.73T:aes128gcmv1
50.2450.2550.25T:tinyjambu128v2
53.8053.8453.86T:schwaemm128128v2
59.5059.5059.51T:tinyjambu192v2
65.8165.8365.86T:romulusn
67.5067.5167.52T:tinyjambu256v2
98.2198.3798.73T:isapk128av20
114.29114.48114.48romulusn
129.95129.98130.69T:isapk128v20
169.88170.93170.96romulusm
202.75204.51205.10T:elephant200v2
238.41238.43238.48T:isapxv20
335.36335.69335.73romulust
6999.127004.537005.02T:elephant160v2
7473.667479.017482.14T:elephant176v2
18134.4318142.2018146.45aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
6.997.017.01ascon128av12
10.2510.2510.25ascon128v12
10.4910.5010.51ascon80pqv12
14.0914.1014.15ascon128abi32v12
20.3820.3820.38ascon128bi32v12
21.5521.5821.61T:xoodyakround3
30.4930.5330.54T:schwaemm256128v2
34.3734.5735.05T:aes256gcmv1
39.0039.0139.03T:isapa128av20
40.5140.5240.54T:schwaemm192192v2
42.3242.3442.36T:giftcofb128v1
43.6243.6343.66T:isapa128v20
46.1846.1946.20T:schwaemm256256v2
48.5148.5948.73T:aes128gcmv1
50.2450.2550.26T:tinyjambu128v2
53.7253.7853.78T:schwaemm128128v2
59.2459.2659.27T:tinyjambu192v2
65.2865.3265.34T:romulusn
67.7567.7667.77T:tinyjambu256v2
98.2098.3498.72T:isapk128av20
113.87114.33114.43romulusn
129.95129.98130.02T:isapk128v20
170.29171.10171.16romulusm
205.07205.12205.15T:elephant200v2
238.41238.44238.93T:isapxv20
335.26335.93335.97romulust
6991.477000.817004.78T:elephant160v2
7474.007478.497480.04T:elephant176v2
18132.0918142.7218147.47aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
7.017.017.01ascon128av12
10.2610.2610.26ascon128v12
10.5110.5110.51ascon80pqv12
14.1114.1114.15ascon128abi32v12
20.3820.3820.38ascon128bi32v12
21.6521.6821.70T:xoodyakround3
21.7321.7521.78T:isapa128v20
25.8525.8825.91T:isapa128av20
30.4830.5330.54T:schwaemm256128v2
33.8934.7735.30T:aes256gcmv1
40.4940.5340.55T:schwaemm192192v2
42.3442.3442.35T:giftcofb128v1
46.1946.1946.20T:schwaemm256256v2
48.4948.6248.85T:aes128gcmv1
50.2450.2550.26T:tinyjambu128v2
53.7153.7853.79T:schwaemm128128v2
59.2459.2659.27T:tinyjambu192v2
65.2965.3165.42T:romulusn
66.4066.4366.63T:isapk128av20
67.7467.7767.77T:tinyjambu256v2
82.0282.0482.11T:isapk128v20
113.07113.11113.12romulust
114.28114.34114.44romulusn
138.19138.23138.25T:isapxv20
170.29170.81171.13romulusm
204.50205.08205.13T:elephant200v2
380.27380.75382.21aes256gcmv1
6998.877004.367007.03T:elephant160v2
7473.317478.557478.87T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
7.037.047.05ascon128av12
10.5010.5110.51ascon128v12
10.6210.6310.65ascon80pqv12
14.0614.1014.13ascon128abi32v12
16.8816.9216.93T:xoodyakround3
19.4720.3020.55T:aes256gcmv1
20.3620.3820.39ascon128bi32v12
30.3130.3130.33T:schwaemm256128v2
30.6230.6630.69T:aes128gcmv1
32.4232.4432.47T:isapa128av20
32.7532.7732.78T:isapa128v20
40.2940.3040.32T:schwaemm192192v2
41.4941.5041.51T:tinyjambu128v2
42.4242.4342.44T:giftcofb128v1
45.2245.2345.25T:schwaemm256256v2
46.3746.3846.38T:tinyjambu192v2
50.5050.5050.51T:tinyjambu256v2
53.5453.5653.65T:schwaemm128128v2
57.1757.1857.19T:romulusn
81.3481.4381.73T:isapk128av20
85.3085.3385.53romulusn
105.30105.33105.34T:isapk128v20
112.97113.67113.70romulusm
153.25153.26153.28T:elephant200v2
188.06188.08188.29T:isapxv20
224.17224.28224.32romulust
5248.155250.015259.06T:elephant160v2
5579.925583.425590.24T:elephant176v2
9257.449261.109263.85aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
7.007.017.01ascon128av12
10.4410.4410.44ascon128v12
10.5010.5110.52ascon80pqv12
13.9513.9613.99ascon128abi32v12
16.5716.5916.61T:xoodyakround3
20.2520.4120.68T:aes256gcmv1
20.4320.4420.45ascon128bi32v12
30.3130.3230.34T:schwaemm256128v2
30.5630.6430.69T:aes128gcmv1
32.4332.4532.46T:isapa128av20
32.7632.7733.39T:isapa128v20
40.2940.3240.38T:schwaemm192192v2
41.4941.5041.51T:tinyjambu128v2
42.3842.3942.40T:giftcofb128v1
45.5145.5145.53T:schwaemm256256v2
46.2546.2646.26T:tinyjambu192v2
50.6250.6350.64T:tinyjambu256v2
53.5053.5653.58T:schwaemm128128v2
56.8956.9156.93T:romulusn
81.3581.5081.61T:isapk128av20
85.3485.3585.38romulusn
105.28105.32105.46T:isapk128v20
113.37113.78113.80romulusm
153.27153.31153.34T:elephant200v2
188.07188.09188.41T:isapxv20
224.16224.39224.43romulust
5246.965248.855254.19T:elephant160v2
5581.555584.795590.41T:elephant176v2
9258.479262.409263.80aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
7.017.017.01ascon128av12
10.4410.4410.44ascon128v12
10.5110.5110.52ascon80pqv12
13.9613.9613.99ascon128abi32v12
16.6216.6416.65T:xoodyakround3
20.4520.4520.45ascon128bi32v12
19.9420.4620.88T:aes256gcmv1
21.8221.8221.83T:isapa128v20
25.8725.8825.91T:isapa128av20
30.3130.3330.34T:schwaemm256128v2
30.5730.6130.70T:aes128gcmv1
40.2940.3040.32T:schwaemm192192v2
41.5041.5141.51T:tinyjambu128v2
42.3942.3942.40T:giftcofb128v1
45.2845.2945.52T:schwaemm256256v2
46.2546.2646.27T:tinyjambu192v2
50.6250.6350.64T:tinyjambu256v2
53.5353.5753.60T:schwaemm128128v2
56.8956.9256.93T:romulusn
65.4665.4865.49T:isapk128av20
81.3681.4181.84T:isapk128v20
85.3585.3885.39romulusn
112.96112.98112.99romulust
113.18113.77113.78romulusm
137.97137.99138.24T:isapxv20
152.96153.25153.31T:elephant200v2
380.45381.98382.35aes256gcmv1
5247.495248.965258.28T:elephant160v2
5581.595584.725591.10T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
6.106.286.37T:aes256gcmv1
6.876.886.88ascon128av12
10.5010.5010.51ascon128v12
10.7510.7610.77ascon80pqv12
11.5611.5911.63T:xoodyakround3
12.5812.6512.77T:aes128gcmv1
13.8413.8513.86ascon128abi32v12
20.3720.3820.48ascon128bi32v12
21.8721.8821.88T:isapa128v20
25.8725.8825.92T:isapa128av20
30.1230.1430.15T:schwaemm256128v2
32.7432.7532.76T:tinyjambu128v2
33.2533.2533.25T:tinyjambu192v2
33.4933.5033.50T:tinyjambu256v2
40.0640.0940.12T:schwaemm192192v2
42.4542.4642.47T:giftcofb128v1
44.8444.8444.85T:schwaemm256256v2
48.5048.5448.55T:romulusn
53.2753.3453.41T:schwaemm128128v2
55.8756.4356.45romulusm
56.4756.5856.58romulusn
64.5564.5764.60T:isapk128av20
80.7180.7380.80T:isapk128v20
102.13102.18102.20T:elephant200v2
112.81112.83112.88romulust
137.71137.73137.77T:isapxv20
380.18381.54385.83aes256gcmv1
3493.573495.653508.78T:elephant160v2
3688.223693.353703.50T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
6.286.396.47T:aes256gcmv1
6.997.007.01ascon128av12
10.4910.5110.53ascon80pqv12
10.6210.6310.63ascon128v12
11.5611.6011.62T:xoodyakround3
12.5812.6312.69T:aes128gcmv1
13.8413.8613.86ascon128abi32v12
20.5020.5120.51ascon128bi32v12
21.8521.8821.90T:isapa128v20
25.8425.9125.92T:isapa128av20
30.1230.1530.16T:schwaemm256128v2
32.7432.7532.76T:tinyjambu128v2
33.2433.2533.26T:tinyjambu192v2
33.4933.5133.54T:tinyjambu256v2
40.0940.1240.13T:schwaemm192192v2
42.4542.4642.48T:giftcofb128v1
44.8444.8444.85T:schwaemm256256v2
48.9048.9549.04T:romulusn
53.2853.3653.41T:schwaemm128128v2
56.3356.3856.40romulusn
56.1456.4556.46romulusm
64.5664.5864.60T:isapk128av20
80.6280.6980.73T:isapk128v20
102.15102.17102.20T:elephant200v2
112.78112.84112.94romulust
137.68137.73138.20T:isapxv20
380.29381.76384.05aes256gcmv1
3494.273508.413514.32T:elephant160v2
3688.693693.043705.88T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
6.05?6.51?6.86?T:aes256gcmv1
7.017.017.01ascon128av12
10.5110.5110.53ascon80pqv12
10.6310.6310.63ascon128v12
11.5811.6011.62T:xoodyakround3
12.5512.6612.74T:aes128gcmv1
13.8613.8613.86ascon128abi32v12
20.5120.5120.51ascon128bi32v12
21.8621.8821.89T:isapa128v20
25.8525.9025.92T:isapa128av20
30.1130.1530.16T:schwaemm256128v2
32.7432.7532.76T:tinyjambu128v2
33.2433.2533.26T:tinyjambu192v2
33.4933.5033.51T:tinyjambu256v2
40.0940.1140.13T:schwaemm192192v2
42.4642.4642.47T:giftcofb128v1
44.8444.8444.85T:schwaemm256256v2
48.5148.5748.96T:romulusn
53.2853.3653.42T:schwaemm128128v2
56.3356.3856.38romulusn
56.1356.4456.44romulusm
64.5764.5964.77T:isapk128av20
80.6980.7180.75T:isapk128v20
102.13102.18102.22T:elephant200v2
112.82112.85112.86romulust
137.67137.74137.76T:isapxv20
380.34381.78385.35aes256gcmv1
3493.863497.783508.12T:elephant160v2
3688.603693.313703.37T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
7.197.207.20ascon128av12
10.6510.6510.66ascon128v12
10.7810.7810.78ascon80pqv12
14.4414.4614.49ascon128abi32v12
17.1017.1017.12T:xoodyakround3
20.7220.7220.73ascon128bi32v12
26.8627.0127.59T:aes256gcmv1
31.1831.2031.20T:schwaemm256128v2
33.0033.0133.06T:aes128gcmv1
35.3635.3735.38T:isapa128av20
41.1741.1741.19T:schwaemm192192v2
41.8241.8241.83T:tinyjambu128v2
42.7942.7942.80T:giftcofb128v1
46.4046.4046.44T:schwaemm256256v2
46.7246.7246.72T:tinyjambu192v2
47.8247.8347.83T:isapa128v20
50.8650.8650.87T:tinyjambu256v2
54.2454.2954.30T:schwaemm128128v2
57.9057.9057.92T:romulusn
85.9486.1386.13romulusn
95.3495.3695.53T:isapk128av20
113.83114.28114.31romulusm
156.29156.42156.44T:elephant200v2
185.19185.19185.23T:isapk128v20
227.14227.28227.30romulust
305.36305.38305.62T:isapxv20
5309.205309.355310.32T:elephant160v2
5626.755626.895627.36T:elephant176v2
9447.229451.029461.02aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
7.177.177.17ascon128av12
10.5810.5810.58ascon128v12
10.6510.6510.66ascon80pqv12
14.3314.3314.35ascon128abi32v12
16.7916.7916.81T:xoodyakround3
20.8020.8020.81ascon128bi32v12
29.7829.9230.19T:aes256gcmv1
31.1931.2031.21T:schwaemm256128v2
32.9132.9333.03T:aes128gcmv1
35.3935.3935.40T:isapa128av20
41.1741.1841.25T:schwaemm192192v2
41.8241.8241.83T:tinyjambu128v2
42.7642.7742.77T:giftcofb128v1
46.6046.6146.69T:tinyjambu192v2
46.6946.6946.69T:schwaemm256256v2
47.8447.8447.85T:isapa128v20
50.9951.0051.00T:tinyjambu256v2
54.1654.2454.30T:schwaemm128128v2
57.6557.6557.68T:romulusn
85.9685.9885.99romulusn
95.3795.3995.56T:isapk128av20
114.08114.38114.41romulusm
156.48156.49156.54T:elephant200v2
185.22185.24185.35T:isapk128v20
227.09227.42227.45romulust
305.38305.39305.87T:isapxv20
5306.905309.155309.73T:elephant160v2
5626.865627.105629.16T:elephant176v2
9445.929450.529452.56aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
7.177.177.17ascon128av12
10.5810.5810.58ascon128v12
10.6510.6510.66ascon80pqv12
14.3314.3314.35ascon128abi32v12
16.8416.8416.86T:xoodyakround3
20.8020.8020.81ascon128bi32v12
27.4927.5027.52T:isapa128av20
29.4829.4829.48T:isapa128v20
31.1931.2031.20T:schwaemm256128v2
32.9132.9332.98T:aes128gcmv1
41.1741.1841.20T:schwaemm192192v2
41.8241.8241.83T:tinyjambu128v2
42.7642.7642.77T:giftcofb128v1
44.4544.5545.26T:aes256gcmv1
46.4746.4946.69T:schwaemm256256v2
46.6046.6046.60T:tinyjambu192v2
50.9951.0051.00T:tinyjambu256v2
54.1954.2454.25T:schwaemm128128v2
57.6457.6457.66T:romulusn
74.7174.7274.72T:isapk128av20
85.9785.9985.99romulusn
113.87114.40114.41romulusm
115.98115.99116.00romulust
124.26124.27124.32T:isapk128v20
156.44156.46156.48T:elephant200v2
197.99198.01198.04T:isapxv20
566.95568.27569.39aes256gcmv1
5307.185309.295310.04T:elephant160v2
5626.715627.175629.52T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
10.7310.8411.26ascon128av12
13.8413.9414.24ascon128v12
13.9614.0214.41ascon80pqv12
22.3022.4523.32ascon128abi32v12
25.9325.9626.36T:xoodyakround3
28.4028.5228.91ascon128bi32v12
49.1649.1649.37T:tinyjambu128v2
50.3850.4850.75T:schwaemm256128v2
50.9550.9551.32T:giftcofb128v1
54.5954.6054.81T:tinyjambu192v2
59.1759.1759.30T:tinyjambu256v2
66.2566.4666.64T:schwaemm192192v2
69.4869.6870.09T:schwaemm128128v2
72.7272.7772.84T:schwaemm256256v2
73.7774.2274.55T:romulusn
86.9387.0588.14T:aes128gcmv1
99.7799.92100.22romulusn
102.53102.59103.25T:isapa128av20
128.52128.71129.21romulusm
194.91197.73199.33T:aes256gcmv1
219.80220.57221.11T:elephant200v2
296.56296.79297.89romulust
394.04394.04394.34T:isapa128v20
402.62403.20404.48T:isapk128av20
2003.492003.622004.00T:isapk128v20
2969.362969.492969.94T:isapxv20
6986.636986.806998.78T:elephant176v2
7088.127088.417089.81T:elephant160v2
13706.6913708.5013760.89aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
10.7510.7511.21ascon128av12
13.7313.7314.16ascon128v12
13.8813.8814.11ascon80pqv12
22.4522.5623.23ascon128abi32v12
25.5125.7126.09T:xoodyakround3
28.9528.9529.61ascon128bi32v12
49.2349.2349.38T:tinyjambu128v2
50.3850.4950.72T:schwaemm256128v2
51.1851.3051.47T:giftcofb128v1
54.5354.5554.76T:tinyjambu192v2
59.3959.5359.60T:tinyjambu256v2
66.1666.3266.45T:schwaemm192192v2
69.2469.2969.67T:schwaemm128128v2
73.0173.0873.13T:schwaemm256256v2
73.8873.9674.50T:romulusn
85.7486.2086.82T:aes128gcmv1
100.17100.33100.54romulusn
103.05103.05103.29T:isapa128av20
128.76128.76129.17romulusm
219.88220.00220.05T:elephant200v2
244.60246.56247.76T:aes256gcmv1
296.76297.02297.42romulust
394.47394.47394.88T:isapa128v20
402.79403.15404.81T:isapk128av20
2004.002004.232006.51T:isapk128v20
2969.572969.702970.15T:isapxv20
6986.776987.036998.78T:elephant176v2
7088.347088.717100.14T:elephant160v2
13707.2013708.2813762.41aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
10.7510.7510.75ascon128av12
13.7313.7313.73ascon128v12
13.8813.8813.88ascon80pqv12
22.4522.4522.56ascon128abi32v12
25.6025.6225.88T:xoodyakround3
28.9528.9528.95ascon128bi32v12
49.2349.2349.38T:tinyjambu128v2
50.3850.4850.56T:schwaemm256128v2
51.1051.1051.16T:giftcofb128v1
54.5354.5354.66T:tinyjambu192v2
59.3759.3759.55T:tinyjambu256v2
64.3864.4964.91T:isapa128av20
66.1666.3066.34T:schwaemm192192v2
69.2569.2669.52T:schwaemm128128v2
73.0273.0673.07T:schwaemm256256v2
73.6373.7173.89T:romulusn
85.2385.7986.40T:aes128gcmv1
100.03100.04100.15romulusn
128.76128.76129.12romulusm
185.06185.23185.93romulust
205.68205.68205.68T:isapa128v20
219.82219.89219.93T:elephant200v2
276.62276.80276.98T:isapk128av20
591.58595.76604.74T:aes256gcmv1
1096.361096.431096.50T:isapk128v20
1552.521552.721554.19T:isapxv20
4854.394854.994856.38aes256gcmv1
6986.616986.676987.48T:elephant176v2
7088.257088.487099.52T:elephant160v2

amd64; Zen 2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.940.960.97T:aes256gcmv1
1.521.531.54T:aes128gcmv1
1.681.691.70aes256gcmv1
4.354.474.58aes128gcmv1
6.416.416.42ascon128av12
9.379.389.40ascon128v12
9.409.419.42ascon80pqv12
11.1511.1911.41ascon128abi32v12
16.9417.0317.14ascon128bi32v12
17.8917.9217.94T:xoodyakround3
19.4619.5219.60T:schwaemm256128v2
23.2623.3724.19T:schwaemm256256v2
25.6325.7125.85T:schwaemm192192v2
26.8627.2327.24T:grain128aeadv2
27.5927.7327.88T:schwaemm128128v2
35.5435.5735.60romulusn
36.4036.4436.47T:isapa128av20
36.5736.6036.68T:isapa128v20
40.4840.5040.55T:giftcofb128v1
57.3557.4157.47romulusm
61.5961.6361.64T:tinyjambu128v2
64.6264.7064.82T:isapk128av20
68.9168.9568.97T:tinyjambu192v2
75.9275.9775.99T:tinyjambu256v2
85.6685.7685.80T:isapk128v20
112.30112.31112.32romulust
147.67148.24148.91T:isapxv20
228.38229.86245.98T:elephant200v2
6480.326484.876489.26T:elephant176v2
7161.717186.497192.78T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.900.920.96T:aes256gcmv1
1.601.621.63T:aes128gcmv1
1.781.791.83aes256gcmv1
4.394.454.53aes128gcmv1
6.286.306.30ascon128av12
9.509.529.52ascon128v12
9.529.549.54ascon80pqv12
11.2211.2411.25ascon128abi32v12
16.7916.9116.98ascon128bi32v12
17.7517.7817.82T:xoodyakround3
19.4319.5119.60T:schwaemm256128v2
23.2423.3324.09T:schwaemm256256v2
25.6525.7625.93T:schwaemm192192v2
26.6527.0927.59T:grain128aeadv2
27.4527.5627.79T:schwaemm128128v2
35.4035.4235.44romulusn
36.2936.3736.84T:isapa128v20
36.3936.4736.50T:isapa128av20
40.4640.5340.58T:giftcofb128v1
57.5857.7257.91romulusm
61.5061.5461.58T:tinyjambu128v2
65.2965.3865.50T:isapk128av20
68.6768.7068.75T:tinyjambu192v2
76.0576.0676.15T:tinyjambu256v2
84.8484.9085.11T:isapk128v20
112.27112.28112.34romulust
148.12148.48149.48T:isapxv20
228.31229.84246.03T:elephant200v2
6480.876488.076489.64T:elephant176v2
7159.177186.577191.70T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.890.930.95T:aes256gcmv1
1.601.611.61T:aes128gcmv1
1.551.621.66aes128gcmv1
1.781.781.81aes256gcmv1
6.286.286.33ascon128av12
9.499.509.52ascon80pqv12
9.549.559.56ascon128v12
11.2411.2511.25ascon128abi32v12
16.7916.9116.99ascon128bi32v12
17.7917.8317.89T:xoodyakround3
18.0218.0518.13T:isapa128v20
19.4219.5419.62T:schwaemm256128v2
23.2423.3324.30T:schwaemm256256v2
24.1424.1724.22T:isapa128av20
25.6925.8125.86T:schwaemm192192v2
26.6826.8027.60T:grain128aeadv2
27.4527.5827.81T:schwaemm128128v2
35.4235.4435.48romulusn
37.4937.5337.56romulust
40.5040.5240.54T:giftcofb128v1
44.4744.5244.54T:isapk128av20
54.5954.6254.66T:isapk128v20
57.5957.6957.81romulusm
61.5361.5761.60T:tinyjambu128v2
68.6568.7968.79T:tinyjambu192v2
75.9976.0376.08T:tinyjambu256v2
86.5286.8187.11T:isapxv20
228.25229.72246.00T:elephant200v2
6479.966488.616490.69T:elephant176v2
7157.767187.267194.23T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.670.690.70T:aes256gcmv1
1.011.011.02T:aes128gcmv1
1.091.101.11aes256gcmv1
2.922.953.00aes128gcmv1
6.366.416.44ascon128av12
9.449.459.47ascon80pqv12
9.439.469.50ascon128v12
11.0611.0911.11ascon128abi32v12
13.4913.5113.54T:xoodyakround3
16.7816.8916.92ascon128bi32v12
19.3519.3919.42T:schwaemm256128v2
23.1523.2624.04T:schwaemm256256v2
25.5925.6525.74T:schwaemm192192v2
27.0727.0927.10T:grain128aeadv2
27.2627.4127.43T:isapa128v20
27.4927.5927.63T:schwaemm128128v2
28.7328.7628.79romulusn
30.2830.3130.34T:isapa128av20
39.6039.6339.68romulusm
40.3940.4240.44T:giftcofb128v1
50.5850.6350.69T:tinyjambu128v2
54.3054.3354.35T:tinyjambu192v2
54.5854.5954.61T:isapk128av20
57.9858.0358.06T:tinyjambu256v2
70.1770.2070.22T:isapk128v20
74.8274.8974.93romulust
116.80117.07117.43T:isapxv20
170.26171.38182.89T:elephant200v2
4842.674844.334845.33T:elephant176v2
5368.265387.715390.67T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.640.670.70T:aes256gcmv1
1.051.061.07T:aes128gcmv1
1.141.151.16aes256gcmv1
2.892.932.97aes128gcmv1
6.336.346.35ascon128av12
9.509.529.53ascon80pqv12
9.549.559.55ascon128v12
11.0911.1111.11ascon128abi32v12
13.4013.4313.51T:xoodyakround3
16.6816.7516.80ascon128bi32v12
19.3819.4319.50T:schwaemm256128v2
23.1323.2124.28T:schwaemm256256v2
25.5725.6325.71T:schwaemm192192v2
26.5326.9227.25T:grain128aeadv2
27.1827.2827.49T:isapa128v20
27.5327.6027.76T:schwaemm128128v2
28.6628.6928.71romulusn
30.3030.3230.34T:isapa128av20
39.7639.7839.82romulusm
40.3940.4240.45T:giftcofb128v1
50.6050.6250.63T:tinyjambu128v2
54.1854.2154.25T:tinyjambu192v2
54.9154.9555.00T:isapk128av20
58.0258.0858.11T:tinyjambu256v2
69.7669.7869.81T:isapk128v20
74.8774.8974.91romulust
117.10117.27117.55T:isapxv20
170.42171.42182.89T:elephant200v2
4842.704844.494846.13T:elephant176v2
5368.625388.955391.16T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.660.680.69T:aes256gcmv1
1.051.061.06T:aes128gcmv1
1.151.161.16aes256gcmv1
1.521.541.55aes128gcmv1
6.356.366.37ascon128av12
9.529.529.54ascon80pqv12
9.539.539.55ascon128v12
11.1011.1111.11ascon128abi32v12
13.4213.4413.49T:xoodyakround3
16.7016.7516.79ascon128bi32v12
18.1118.1318.15T:isapa128v20
19.3619.4319.48T:schwaemm256128v2
23.1623.2524.28T:schwaemm256256v2
24.1624.1924.21T:isapa128av20
25.6025.6625.67T:schwaemm192192v2
26.5526.8827.26T:grain128aeadv2
27.4527.5527.59T:schwaemm128128v2
28.6528.6928.69romulusn
37.4937.5137.53romulust
39.7539.8039.86romulusm
40.3940.4140.44T:giftcofb128v1
44.5344.5544.56T:isapk128av20
50.6150.6250.63T:tinyjambu128v2
54.2054.2154.24T:tinyjambu192v2
54.6254.6454.79T:isapk128v20
58.0558.0958.13T:tinyjambu256v2
86.2486.3786.64T:isapxv20
170.48171.41183.13T:elephant200v2
4840.924842.654845.60T:elephant176v2
5368.905388.275391.01T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.410.430.45T:aes256gcmv1
0.500.520.54T:aes128gcmv1
0.520.540.55aes256gcmv1
1.491.511.55aes128gcmv1
6.316.336.38ascon128av12
9.029.059.12T:xoodyakround3
9.489.499.54ascon80pqv12
9.489.499.54ascon128v12
10.9210.9510.95ascon128abi32v12
16.5416.6816.73ascon128bi32v12
18.2318.2518.27T:isapa128v20
19.1919.2919.34T:schwaemm256128v2
21.8721.9021.94romulusn
21.9021.9221.94romulusm
23.0323.1524.04T:schwaemm256256v2
24.1624.2024.22T:isapa128av20
25.3925.4925.57T:schwaemm192192v2
26.8726.9126.94T:grain128aeadv2
27.2927.3627.55T:schwaemm128128v2
37.5437.5737.58romulust
39.6939.7039.72T:tinyjambu192v2
39.7039.7039.71T:tinyjambu128v2
40.0240.0240.13T:tinyjambu256v2
40.2540.3040.34T:giftcofb128v1
44.5444.6244.65T:isapk128av20
54.6354.7454.75T:isapk128v20
85.9386.4086.58T:isapxv20
112.34113.29120.75T:elephant200v2
3194.403198.823201.92T:elephant176v2
3574.263585.663589.69T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.420.430.45T:aes256gcmv1
0.510.520.53T:aes128gcmv1
0.510.530.55aes256gcmv1
1.501.531.56aes128gcmv1
6.346.356.38ascon128av12
9.039.069.17T:xoodyakround3
9.509.519.52ascon80pqv12
9.559.569.57ascon128v12
10.9410.9610.97ascon128abi32v12
16.4816.5916.69ascon128bi32v12
18.1818.2618.31T:isapa128v20
19.2219.2719.32T:schwaemm256128v2
21.8621.8621.92romulusn
21.8921.9421.97romulusm
23.0423.1424.17T:schwaemm256256v2
24.1524.2124.23T:isapa128av20
25.4525.5325.63T:schwaemm192192v2
26.4326.8727.02T:grain128aeadv2
27.2827.3627.57T:schwaemm128128v2
37.4837.5237.60romulust
39.6739.6839.73T:tinyjambu128v2
39.6939.7039.71T:tinyjambu192v2
40.1040.1340.14T:tinyjambu256v2
40.2840.3340.35T:giftcofb128v1
44.5544.5744.62T:isapk128av20
54.6354.6754.70T:isapk128v20
86.2086.3887.15T:isapxv20
112.35113.23120.79T:elephant200v2
3193.563197.913200.90T:elephant176v2
3575.733585.293589.86T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.420.430.44T:aes256gcmv1
0.510.520.52T:aes128gcmv1
0.520.530.54aes256gcmv1
1.501.541.55aes128gcmv1
6.386.396.39ascon128av12
8.999.049.15T:xoodyakround3
9.519.519.53ascon80pqv12
9.529.539.56ascon128v12
10.9510.9610.97ascon128abi32v12
16.5016.5916.69ascon128bi32v12
18.2218.2518.28T:isapa128v20
19.1919.2719.33T:schwaemm256128v2
21.8121.9221.94romulusm
21.8721.9521.96romulusn
23.0423.1424.10T:schwaemm256256v2
24.1424.1724.23T:isapa128av20
25.4225.5025.62T:schwaemm192192v2
26.4426.9326.96T:grain128aeadv2
27.2927.3427.57T:schwaemm128128v2
37.4837.5237.56romulust
39.6739.6839.68T:tinyjambu128v2
39.7039.7039.72T:tinyjambu192v2
40.0040.0740.08T:tinyjambu256v2
40.3140.3440.38T:giftcofb128v1
44.5444.5744.62T:isapk128av20
54.6654.6854.72T:isapk128v20
86.1786.3386.65T:isapxv20
112.46113.26120.82T:elephant200v2
3194.633199.673202.95T:elephant176v2
3574.513586.093589.29T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.141.151.15T:aes128gcmv1
1.231.231.23T:aes256gcmv1
1.231.251.25aes256gcmv1
3.103.133.16aes128gcmv1
6.546.566.59ascon128av12
9.579.599.65ascon128v12
9.619.629.64ascon80pqv12
11.3811.4011.41ascon128abi32v12
13.6313.6513.67T:xoodyakround3
17.1617.1917.24ascon128bi32v12
19.9620.0020.04T:schwaemm256128v2
23.8523.8724.67T:schwaemm256256v2
26.1926.2526.30T:schwaemm192192v2
27.4427.4627.46T:grain128aeadv2
28.0128.1428.20T:schwaemm128128v2
29.0129.0329.04romulusn
33.5133.5233.55T:isapa128av20
39.9139.9339.97romulusm
39.9740.1540.15T:isapa128v20
40.7640.7840.81T:giftcofb128v1
50.9951.0351.07T:tinyjambu128v2
54.7454.7554.76T:tinyjambu192v2
58.4158.4458.47T:tinyjambu256v2
60.6860.7060.73T:isapk128av20
75.8876.0176.04romulust
121.91121.95121.99T:isapk128v20
174.84174.91185.82T:elephant200v2
190.13190.44190.95T:isapxv20
4875.304877.924881.21T:elephant176v2
5430.685448.115449.52T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.181.191.20T:aes128gcmv1
1.221.221.23T:aes256gcmv1
1.291.301.32aes256gcmv1
3.203.213.24aes128gcmv1
6.496.516.52ascon128av12
9.679.679.69ascon80pqv12
9.699.699.69ascon128v12
11.4011.4011.41ascon128abi32v12
13.5713.5913.63T:xoodyakround3
17.0717.0917.12ascon128bi32v12
19.9419.9820.06T:schwaemm256128v2
23.8323.8524.79T:schwaemm256256v2
26.2126.2426.28T:schwaemm192192v2
27.0427.2427.57T:grain128aeadv2
27.8227.9327.97T:schwaemm128128v2
28.9428.9628.97romulusn
33.5333.5433.55T:isapa128av20
39.9439.9840.14T:isapa128v20
40.0340.1040.16romulusm
40.8040.8140.83T:giftcofb128v1
51.0051.0251.06T:tinyjambu128v2
54.6254.6554.66T:tinyjambu192v2
58.4758.4758.56T:tinyjambu256v2
61.1361.1461.18T:isapk128av20
76.0476.0676.08romulust
121.54121.57121.61T:isapk128v20
175.02175.05185.82T:elephant200v2
190.26190.31190.33T:isapxv20
4875.614878.444881.27T:elephant176v2
5429.885447.325449.48T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.181.191.19T:aes128gcmv1
1.231.231.23T:aes256gcmv1
1.291.291.30aes256gcmv1
1.751.761.78aes128gcmv1
6.506.506.51ascon128av12
9.679.679.68ascon80pqv12
9.699.699.72ascon128v12
11.4011.4011.46ascon128abi32v12
13.5913.6213.64T:xoodyakround3
17.0617.0917.11ascon128bi32v12
19.9920.0120.09T:schwaemm256128v2
23.8523.8524.82T:schwaemm256256v2
24.6224.6424.75T:isapa128v20
25.9725.9826.00T:isapa128av20
26.1726.2426.27T:schwaemm192192v2
27.1227.1827.58T:grain128aeadv2
27.8227.9327.98T:schwaemm128128v2
28.9528.9528.96romulusn
38.6238.6238.65romulust
39.9940.0740.14romulusm
40.8140.8340.84T:giftcofb128v1
48.1348.1348.15T:isapk128av20
51.0251.0351.05T:tinyjambu128v2
54.6254.6554.65T:tinyjambu192v2
58.4758.5258.54T:tinyjambu256v2
81.1381.1481.17T:isapk128v20
123.95124.12124.18T:isapxv20
174.89174.91185.89T:elephant200v2
4876.284879.494882.53T:elephant176v2
5429.815448.865450.46T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.486.556.85aes256gcmv1
6.616.756.92aes128gcmv1
6.947.067.09T:aes128gcmv1
10.7310.8010.88ascon128av12
12.6812.6813.27ascon128v12
12.9812.9813.27ascon80pqv12
14.0114.1414.50T:aes256gcmv1
17.9318.3718.84ascon128abi32v12
20.0520.5120.69T:xoodyakround3
24.2924.3426.03ascon128bi32v12
32.5932.9233.93T:schwaemm256128v2
35.0535.1535.23romulusn
35.4335.8435.98T:grain128aeadv2
35.8836.1236.84T:schwaemm128128v2
37.9138.1339.61T:schwaemm256256v2
41.9842.9843.45T:schwaemm192192v2
45.7845.9846.31romulusm
49.3449.5049.77T:giftcofb128v1
59.9060.0860.20T:tinyjambu128v2
64.2664.2764.76T:tinyjambu192v2
68.2368.4068.65T:tinyjambu256v2
101.85102.13102.33romulust
106.88107.27107.48T:isapa128av20
189.69189.87189.91T:isapk128av20
245.69246.32262.87T:elephant200v2
331.00331.23331.88T:isapa128v20
1298.521298.571298.62T:isapk128v20
1848.911852.781856.34T:isapxv20
6058.666061.106063.66T:elephant176v2
7264.007284.407288.95T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.526.556.76aes256gcmv1
7.477.517.57T:aes128gcmv1
8.568.738.89aes128gcmv1
10.7210.8111.02ascon128av12
13.0113.1513.38ascon80pqv12
13.0713.1613.52ascon128v12
14.0214.2714.79T:aes256gcmv1
17.9818.2819.20ascon128abi32v12
19.9220.7721.28T:xoodyakround3
23.7224.4426.25ascon128bi32v12
33.1333.3333.85T:schwaemm256128v2
35.4035.4035.40romulusn
35.3535.5736.08T:grain128aeadv2
36.0436.1437.45T:schwaemm128128v2
38.0538.2639.43T:schwaemm256256v2
42.1042.3642.99T:schwaemm192192v2
47.2747.3447.72romulusm
49.6649.7350.02T:giftcofb128v1
60.0160.0260.09T:tinyjambu128v2
64.0864.1464.15T:tinyjambu192v2
68.2368.3068.36T:tinyjambu256v2
102.09102.52102.84romulust
106.96107.22107.29T:isapa128av20
192.22192.76193.60T:isapk128av20
245.88246.09262.48T:elephant200v2
329.29331.30332.78T:isapa128v20
1298.811299.161299.84T:isapk128v20
1849.921854.731857.84T:isapxv20
6061.306062.776069.04T:elephant176v2
7269.517281.957285.12T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.526.526.61aes256gcmv1
6.526.546.55aes128gcmv1
7.467.487.51T:aes128gcmv1
10.5910.6210.69ascon128av12
13.0113.0113.10ascon80pqv12
13.0513.0913.20ascon128v12
14.0214.1714.38T:aes256gcmv1
18.0218.0218.17ascon128abi32v12
19.8920.4120.49T:xoodyakround3
23.8624.7925.80ascon128bi32v12
33.1333.2433.62T:schwaemm256128v2
35.3035.4135.41romulusn
35.3035.6235.73T:grain128aeadv2
36.1236.5136.84T:schwaemm128128v2
38.1138.1339.59T:schwaemm256256v2
42.0942.2043.04T:schwaemm192192v2
47.2647.3947.58romulusm
49.8749.9750.18T:giftcofb128v1
60.0660.2260.22T:tinyjambu128v2
63.6364.0964.19romulust
64.2964.2964.29T:tinyjambu192v2
66.6666.9967.20T:isapa128av20
68.2968.2968.34T:tinyjambu256v2
121.48121.89122.35T:isapk128av20
173.05173.67173.80T:isapa128v20
245.64246.10262.45T:elephant200v2
679.22679.53679.75T:isapk128v20
968.81970.37972.32T:isapxv20
6059.966061.306065.20T:elephant176v2
7275.437282.687287.88T:elephant160v2

amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.401.401.41T:aes128gcmv1
1.641.651.66aes256gcmv1
7.437.457.46ascon128av12
10.8210.8611.08ascon128v12
10.9611.0711.11ascon80pqv12
14.0414.1214.19ascon128abi32v12
15.7915.9015.99T:xoodyakround3
17.8717.9017.98T:schwaemm256128v2
20.5921.1221.14ascon128bi32v12
22.8122.8322.87T:schwaemm256256v2
23.4623.5323.57T:schwaemm192192v2
24.9124.9324.96T:grain128aeadv2
25.6425.7625.82T:schwaemm128128v2
38.5038.5138.53romulusn
40.4040.4740.60T:isapa128av20
41.4541.4841.52T:giftcofb128v1
41.9041.9642.05T:isapa128v20
60.4060.5760.69T:tinyjambu128v2
61.9361.9562.01romulusm
69.5869.7069.75T:isapk128av20
76.5676.5676.58T:tinyjambu192v2
80.0580.1080.18T:tinyjambu256v2
92.2692.5592.96T:isapk128v20
124.98125.05125.11romulust
177.06177.16177.30T:elephant200v2
196.16197.90198.07T:isapxv20
7525.257526.407527.24T:elephant176v2
8224.168224.788225.69T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.441.461.47T:aes128gcmv1
1.581.591.61aes256gcmv1
7.307.337.36ascon128av12
10.9510.9911.01ascon128v12
10.9811.0311.05ascon80pqv12
14.0714.1214.22ascon128abi32v12
15.4515.5515.61T:xoodyakround3
17.8617.9217.97T:schwaemm256128v2
20.9320.9520.97ascon128bi32v12
22.8122.8422.86T:schwaemm256256v2
23.4523.5123.62T:schwaemm192192v2
25.3725.3925.42T:grain128aeadv2
25.6925.7525.82T:schwaemm128128v2
38.4838.4938.52romulusn
40.2240.3740.58T:isapa128av20
41.4441.4941.51T:giftcofb128v1
41.8541.9342.04T:isapa128v20
60.5060.7560.96T:tinyjambu128v2
61.9261.9562.00romulusm
69.4769.7570.00T:isapk128av20
76.5476.5676.57T:tinyjambu192v2
80.1180.1980.38T:tinyjambu256v2
92.0592.4392.89T:isapk128v20
125.01125.12125.25romulust
177.00177.16177.33T:elephant200v2
196.03197.93198.05T:isapxv20
7523.527524.177525.18T:elephant176v2
8224.358224.768225.48T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.441.451.46T:aes128gcmv1
1.581.581.59aes256gcmv1
7.317.337.35ascon128av12
10.9610.9911.02ascon128v12
11.0011.0311.05ascon80pqv12
14.0814.1214.20ascon128abi32v12
15.4315.6115.66T:xoodyakround3
17.8617.9317.98T:schwaemm256128v2
20.4820.5220.57T:isapa128v20
20.9020.9420.98ascon128bi32v12
22.7922.8422.87T:schwaemm256256v2
23.5023.5423.61T:schwaemm192192v2
25.3725.3925.42T:grain128aeadv2
25.6625.7425.81T:schwaemm128128v2
27.2227.2827.33T:isapa128av20
38.4738.4938.54romulusn
41.4841.5141.54T:giftcofb128v1
42.5642.6342.78romulust
46.1646.3746.50T:isapk128av20
57.6257.9758.20T:isapk128v20
60.5060.6660.92T:tinyjambu128v2
61.9261.9762.00romulusm
76.5576.5776.58T:tinyjambu192v2
80.1180.2180.34T:tinyjambu256v2
112.81114.83114.97T:isapxv20
177.06177.20177.30T:elephant200v2
7523.897524.647525.46T:elephant176v2
8224.288224.568225.54T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.890.900.90T:aes128gcmv1
1.011.021.04aes256gcmv1
7.407.437.47ascon128av12
10.8310.8610.89ascon128v12
10.9210.9410.99ascon80pqv12
11.7811.8211.89T:xoodyakround3
13.9213.9513.99ascon128abi32v12
17.7217.7517.81T:schwaemm256128v2
20.8421.0521.07ascon128bi32v12
22.6922.7222.76T:schwaemm256256v2
23.3123.4123.83T:schwaemm192192v2
24.8624.8724.88T:grain128aeadv2
25.5525.6025.66T:schwaemm128128v2
30.9931.0131.05romulusn
30.9831.0631.14T:isapa128v20
33.8133.8733.92T:isapa128av20
41.3941.4241.44T:giftcofb128v1
42.7242.7742.79romulusm
49.4549.5749.73T:tinyjambu128v2
57.8858.0558.10T:isapk128av20
59.6059.6159.62T:tinyjambu192v2
60.5960.6460.68T:tinyjambu256v2
75.3375.5075.71T:isapk128v20
83.7183.7383.77romulust
133.00133.07133.10T:elephant200v2
154.94155.92156.00T:isapxv20
5619.425619.995620.32T:elephant176v2
6167.966168.366168.70T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.900.920.93T:aes128gcmv1
0.980.991.00aes256gcmv1
7.357.387.40ascon128av12
10.9610.9811.05ascon80pqv12
10.9710.9911.01ascon128v12
11.6411.6911.74T:xoodyakround3
13.9313.9814.08ascon128abi32v12
17.7417.8017.84T:schwaemm256128v2
20.7220.9620.99ascon128bi32v12
22.7022.7222.74T:schwaemm256256v2
23.3223.4123.85T:schwaemm192192v2
25.0825.1125.16T:grain128aeadv2
25.5625.6325.65T:schwaemm128128v2
31.0031.0131.04romulusn
31.0231.0631.11T:isapa128v20
33.8433.9133.93T:isapa128av20
41.4141.4341.46T:giftcofb128v1
42.7442.7642.80romulusm
49.5049.6049.76T:tinyjambu128v2
57.9558.0858.16T:isapk128av20
59.5959.6159.64T:tinyjambu192v2
60.6560.6960.77T:tinyjambu256v2
75.3775.4575.75T:isapk128v20
83.6983.7583.88romulust
132.96133.05133.10T:elephant200v2
155.02155.93156.03T:isapxv20
5619.395619.805620.15T:elephant176v2
6168.016168.296168.86T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.920.920.93T:aes128gcmv1
0.980.990.99aes256gcmv1
7.387.407.41ascon128av12
10.9710.9911.01ascon128v12
10.9710.9911.03ascon80pqv12
11.6511.7211.77T:xoodyakround3
13.9613.9814.07ascon128abi32v12
17.7117.7417.77T:schwaemm256128v2
20.3020.3720.41T:isapa128v20
20.7220.9621.00ascon128bi32v12
22.6922.7222.76T:schwaemm256256v2
23.3523.4523.80T:schwaemm192192v2
25.0925.1125.15T:grain128aeadv2
25.5925.6225.66T:schwaemm128128v2
27.2227.2427.29T:isapa128av20
30.9931.0031.03romulusn
41.4141.4341.45T:giftcofb128v1
42.4742.5242.66romulust
42.7642.7842.80romulusm
46.2146.2946.44T:isapk128av20
49.5049.5649.68T:tinyjambu128v2
57.9958.1758.27T:isapk128v20
59.5959.6259.63T:tinyjambu192v2
60.6460.6760.78T:tinyjambu256v2
113.44114.44114.48T:isapxv20
132.95133.03133.17T:elephant200v2
5619.265619.815620.38T:elephant176v2
6167.986168.126168.64T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.380.390.40T:aes128gcmv1
0.390.400.41aes256gcmv1
7.407.437.45ascon128av12
7.897.957.99T:xoodyakround3
10.8710.9010.93ascon128v12
10.9110.9410.98ascon80pqv12
13.7913.8313.93ascon128abi32v12
17.5717.6217.68T:schwaemm256128v2
20.0420.1320.18T:isapa128v20
20.4920.9821.01ascon128bi32v12
22.5622.5922.62T:schwaemm256256v2
23.0623.2124.09T:schwaemm192192v2
23.5123.5323.56romulusn
23.5223.5423.57romulusm
24.7624.8024.82T:grain128aeadv2
25.3725.4325.49T:schwaemm128128v2
27.2727.3227.34T:isapa128av20
38.4838.5638.61T:tinyjambu128v2
41.1141.1741.20T:tinyjambu256v2
41.3041.3341.39T:giftcofb128v1
42.3442.3742.41romulust
42.6442.6642.66T:tinyjambu192v2
46.0846.2346.34T:isapk128av20
57.7358.0958.62T:isapk128v20
90.4590.5190.61T:elephant200v2
113.92113.99114.07T:isapxv20
3715.903716.143716.67T:elephant176v2
4112.014112.824114.77T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.390.400.41T:aes128gcmv1
0.390.400.41aes256gcmv1
7.427.447.46ascon128av12
7.917.948.01T:xoodyakround3
10.9410.9810.99ascon128v12
10.9611.0011.02ascon80pqv12
13.8013.8313.93ascon128abi32v12
17.5517.6017.68T:schwaemm256128v2
20.0720.1120.18T:isapa128v20
20.4820.7421.00ascon128bi32v12
22.5722.6022.63T:schwaemm256256v2
23.1323.2424.05T:schwaemm192192v2
23.4923.5223.55romulusn
23.4923.5223.55romulusm
24.7924.8324.91T:grain128aeadv2
25.4025.4625.50T:schwaemm128128v2
27.2727.3027.33T:isapa128av20
38.5238.5738.59T:tinyjambu128v2
41.1041.1341.24T:tinyjambu256v2
41.3141.3841.41T:giftcofb128v1
42.3542.4342.56romulust
42.6242.6442.68T:tinyjambu192v2
46.0746.2446.31T:isapk128av20
57.9058.2658.62T:isapk128v20
90.4590.5290.63T:elephant200v2
113.85113.91114.05T:isapxv20
3716.273716.573717.16T:elephant176v2
4112.234112.734114.57T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.400.400.41aes256gcmv1
0.400.400.41T:aes128gcmv1
7.427.447.46ascon128av12
7.907.947.99T:xoodyakround3
10.9410.9711.00ascon128v12
10.9711.0011.03ascon80pqv12
13.7913.8313.93ascon128abi32v12
17.5117.6217.68T:schwaemm256128v2
20.0520.1120.19T:isapa128v20
20.4520.5220.67ascon128bi32v12
22.5722.6022.64T:schwaemm256256v2
23.2023.3524.12T:schwaemm192192v2
23.4823.5123.55romulusn
23.5023.5323.55romulusm
24.7924.8224.93T:grain128aeadv2
25.3825.4425.50T:schwaemm128128v2
27.2727.3127.36T:isapa128av20
38.5138.5638.63T:tinyjambu128v2
41.1441.1741.22T:tinyjambu256v2
41.3241.3541.40T:giftcofb128v1
42.3542.4342.55romulust
42.6242.6442.70T:tinyjambu192v2
46.1146.2146.33T:isapk128av20
57.8558.1358.26T:isapk128v20
90.5090.5790.65T:elephant200v2
113.86113.97114.08T:isapxv20
3716.043716.493719.49T:elephant176v2
4112.174112.874114.67T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.061.061.06T:aes128gcmv1
1.191.201.21aes256gcmv1
7.627.647.64ascon128av12
11.0411.0711.08ascon128v12
11.1211.1411.17ascon80pqv12
11.9411.9712.02T:xoodyakround3
14.2414.2714.33ascon128abi32v12
18.2818.3118.35T:schwaemm256128v2
21.1521.3621.38ascon128bi32v12
23.3523.3623.37T:schwaemm256256v2
23.8723.9724.33T:schwaemm192192v2
25.2625.2725.28T:grain128aeadv2
25.9325.9826.00T:schwaemm128128v2
31.3431.3431.38romulusn
36.2236.3136.39T:isapa128av20
41.7541.7741.78T:giftcofb128v1
43.0843.1043.13romulusm
45.7345.7745.84T:isapa128v20
49.8349.8750.10T:tinyjambu128v2
60.0460.0560.06T:tinyjambu192v2
61.0661.1161.14T:tinyjambu256v2
64.9765.0365.11T:isapk128av20
85.0085.0585.10romulust
130.88131.02131.19T:isapk128v20
135.79135.84135.88T:elephant200v2
250.36251.21251.26T:isapxv20
5662.375662.745663.18T:elephant176v2
6237.696237.866238.26T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.081.081.09T:aes128gcmv1
1.161.161.17aes256gcmv1
7.577.597.59ascon128av12
11.1411.1611.20ascon80pqv12
11.1511.1611.19ascon128v12
11.8411.8711.96T:xoodyakround3
14.2614.2814.35ascon128abi32v12
18.2918.3218.37T:schwaemm256128v2
21.0321.2721.29ascon128bi32v12
23.3323.3523.37T:schwaemm256256v2
23.9324.0124.39T:schwaemm192192v2
25.5025.5225.54T:grain128aeadv2
25.9325.9725.99T:schwaemm128128v2
31.3231.3431.36romulusn
36.2336.3236.36T:isapa128av20
41.7741.7941.82T:giftcofb128v1
43.1543.1843.19romulusm
45.7245.7645.80T:isapa128v20
49.9049.9550.11T:tinyjambu128v2
60.0360.0460.08T:tinyjambu192v2
61.1461.2061.24T:tinyjambu256v2
65.0765.1665.25T:isapk128av20
85.0385.0785.13romulust
130.93131.05131.16T:isapk128v20
135.80135.83135.89T:elephant200v2
250.47251.25251.27T:isapxv20
5662.445662.605663.25T:elephant176v2
6237.586237.866238.02T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.081.081.08T:aes128gcmv1
1.161.171.17aes256gcmv1
7.577.597.60ascon128av12
11.1311.1611.22ascon80pqv12
11.1611.1711.20ascon128v12
11.8311.8611.92T:xoodyakround3
14.2614.2914.38ascon128abi32v12
18.2918.3018.34T:schwaemm256128v2
21.0821.2521.29ascon128bi32v12
23.3323.3423.36T:schwaemm256256v2
23.9424.0024.35T:schwaemm192192v2
25.5025.5225.54T:grain128aeadv2
25.9525.9926.05T:schwaemm128128v2
27.9527.9928.01T:isapa128v20
28.6628.6728.70T:isapa128av20
31.3431.3531.37romulusn
41.7741.7941.82T:giftcofb128v1
43.1443.1643.20romulusm
43.7543.8243.86romulust
49.9350.0450.16T:tinyjambu128v2
50.3650.4050.44T:isapk128av20
60.0360.0360.06T:tinyjambu192v2
61.1361.1861.20T:tinyjambu256v2
86.5486.7786.85T:isapk128v20
135.78135.83135.88T:elephant200v2
162.32163.18163.24T:isapxv20
5662.305662.655662.96T:elephant176v2
6237.636237.916238.07T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.636.666.68T:aes128gcmv1
7.387.417.47aes256gcmv1
11.9812.1312.45ascon128av12
15.1215.1815.70ascon128v12
15.0815.2015.53ascon80pqv12
17.4917.5217.98T:xoodyakround3
21.3021.4921.98ascon128abi32v12
27.8628.3428.80ascon128bi32v12
29.8630.0230.23T:schwaemm256128v2
33.4633.8934.30T:schwaemm128128v2
34.5434.5834.75T:grain128aeadv2
37.2537.3037.41T:schwaemm256256v2
38.6738.7338.91romulusn
38.7339.0339.56T:schwaemm192192v2
49.9150.0250.26T:giftcofb128v1
51.0651.1251.23romulusm
58.7758.9859.42T:tinyjambu128v2
70.1170.1470.16T:tinyjambu192v2
71.7571.9572.12T:tinyjambu256v2
93.4593.8093.90T:isapa128av20
114.48114.85115.06romulust
192.86193.03193.38T:elephant200v2
210.10211.24211.95T:isapk128av20
382.55382.88383.68T:isapa128v20
1384.941386.951389.10T:isapk128v20
2415.502416.062417.03T:isapxv20
7052.227053.787055.68T:elephant176v2
8354.348355.968359.12T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.356.406.51T:aes128gcmv1
7.087.117.17aes256gcmv1
11.8412.1912.50ascon128av12
14.9515.0915.31ascon80pqv12
15.1915.3215.46ascon128v12
17.4817.6018.21T:xoodyakround3
21.2721.5022.02ascon128abi32v12
28.0528.2328.44ascon128bi32v12
29.7329.9530.23T:schwaemm256128v2
33.1833.5933.96T:schwaemm128128v2
34.7834.8034.98T:grain128aeadv2
37.3637.4837.73T:schwaemm256256v2
38.5438.7739.13T:schwaemm192192v2
38.8638.9339.05romulusn
49.9050.0250.22T:giftcofb128v1
52.9853.1253.22romulusm
58.9559.0459.31T:tinyjambu128v2
70.1570.2170.23T:tinyjambu192v2
71.8371.9872.10T:tinyjambu256v2
93.1693.4093.58T:isapa128av20
114.52114.84115.16romulust
192.61192.80194.06T:elephant200v2
211.09211.77213.26T:isapk128av20
382.53383.01384.06T:isapa128v20
1383.991386.051387.42T:isapk128v20
2415.662416.662417.01T:isapxv20
7051.517053.827055.89T:elephant176v2
8354.988356.148357.45T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.346.376.41T:aes128gcmv1
7.057.097.13aes256gcmv1
11.9111.9411.99ascon128av12
15.0715.1615.21ascon128v12
14.9715.1615.30ascon80pqv12
17.5917.7017.99T:xoodyakround3
21.2621.5521.78ascon128abi32v12
28.1228.2728.52ascon128bi32v12
29.6229.8830.14T:schwaemm256128v2
33.2133.7033.91T:schwaemm128128v2
34.7234.7834.91T:grain128aeadv2
37.3037.3837.72T:schwaemm256256v2
38.8838.9539.02romulusn
38.6339.0539.27T:schwaemm192192v2
49.9450.0450.15T:giftcofb128v1
53.0953.1653.28romulusm
58.9059.1159.32T:tinyjambu128v2
60.3060.5360.77T:isapa128av20
70.1470.1870.20T:tinyjambu192v2
71.7771.8772.16T:tinyjambu256v2
71.9572.0572.30romulust
131.99132.86134.34T:isapk128av20
192.70193.27193.77T:elephant200v2
201.38201.53202.05T:isapa128v20
725.27726.92730.23T:isapk128v20
1263.241263.591264.14T:isapxv20
7050.137051.007053.94T:elephant176v2
8354.768356.348358.34T:elephant160v2

amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20240107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.59?0.67?0.75?T:aes128gcmv1
0.880.910.93T:aes256gcmv1
1.601.651.66aes256gcmv1
4.474.494.50aes128gcmv1
7.787.827.85ascon128av12
10.8610.8910.95ascon80pqv12
10.9710.9911.01ascon128v12
14.2714.3214.35ascon128abi32v12
16.7316.8116.98T:xoodyakround3
19.1219.1919.24T:schwaemm256128v2
21.2821.3121.34T:schwaemm256256v2
21.3221.3721.40ascon128bi32v12
25.0425.0725.30T:grain128aeadv2
25.1825.2325.38T:schwaemm192192v2
27.3327.3927.45T:schwaemm128128v2
38.5738.6038.63romulusn
41.1441.1941.22T:giftcofb128v1
41.2641.3041.40T:isapa128av20
45.4945.5645.73T:isapa128v20
60.2660.3260.35T:tinyjambu128v2
61.8261.9261.98romulusm
68.8768.9669.09T:isapk128av20
72.3772.4372.46T:tinyjambu192v2
78.7278.8179.05T:tinyjambu256v2
91.4491.4991.61T:isapk128v20
124.60124.71125.12romulust
142.29142.42142.58T:elephant200v2
178.37178.55178.71T:isapxv20
7506.767514.227515.86T:elephant176v2
8185.348185.848189.03T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.620.640.68T:aes128gcmv1
0.840.890.92T:aes256gcmv1
1.591.591.60aes256gcmv1
4.504.524.55aes128gcmv1
7.397.437.47ascon128av12
10.8510.8810.97ascon128v12
10.9510.9711.01ascon80pqv12
14.1114.1514.19ascon128abi32v12
16.3116.3316.36T:xoodyakround3
19.1219.1919.29T:schwaemm256128v2
21.3121.3521.38T:schwaemm256256v2
21.4121.4421.47ascon128bi32v12
25.1925.2425.38T:schwaemm192192v2
25.5625.6025.63T:grain128aeadv2
27.2727.3027.39T:schwaemm128128v2
38.4838.5038.52romulusn
41.2041.2241.28T:giftcofb128v1
41.2341.3441.42T:isapa128av20
45.4545.6245.69T:isapa128v20
60.2660.3560.47T:tinyjambu128v2
61.8461.9061.99romulusm
68.8868.9669.06T:isapk128av20
72.4572.5372.59T:tinyjambu192v2
78.6078.6278.65T:tinyjambu256v2
91.4891.5791.64T:isapk128v20
124.60124.71125.09romulust
142.38142.52142.64T:elephant200v2
178.15178.48178.61T:isapxv20
7506.127515.287516.95T:elephant176v2
8185.338186.018189.03T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.61?0.64?0.68?T:aes128gcmv1
0.860.870.92T:aes256gcmv1
1.581.591.60aes256gcmv1
1.641.691.72aes128gcmv1
7.387.437.46ascon128av12
10.8410.8911.01ascon128v12
10.9410.9710.99ascon80pqv12
14.1214.1514.17ascon128abi32v12
16.3316.3616.38T:xoodyakround3
19.1319.2219.31T:schwaemm256128v2
21.3121.3321.38T:schwaemm256256v2
21.4121.4421.46ascon128bi32v12
22.6622.7522.82T:isapa128v20
25.2125.3025.38T:schwaemm192192v2
25.5525.6025.63T:grain128aeadv2
27.1527.2327.31T:isapa128av20
27.3027.3527.40T:schwaemm128128v2
38.4838.5038.54romulusn
41.2141.2541.31T:giftcofb128v1
42.4742.5242.55romulust
46.0546.1146.21T:isapk128av20
57.3757.4857.61T:isapk128v20
60.2660.3260.38T:tinyjambu128v2
61.8261.9061.95romulusm
72.4772.5072.55T:tinyjambu192v2
78.5978.6278.67T:tinyjambu256v2
106.75106.91107.15T:isapxv20
142.33142.41142.56T:elephant200v2
7506.767514.887515.69T:elephant176v2
8185.378186.148189.19T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.45?0.51?0.55?T:aes128gcmv1
0.600.610.65T:aes256gcmv1
1.031.031.04aes256gcmv1
3.043.053.07aes128gcmv1
7.487.507.53ascon128av12
10.9110.9410.98ascon80pqv12
10.9711.0011.01ascon128v12
12.7212.7412.85T:xoodyakround3
14.1914.3314.35ascon128abi32v12
18.9819.0019.09T:schwaemm256128v2
21.2221.2321.28T:schwaemm256256v2
21.3421.3621.39ascon128bi32v12
25.0725.0925.20T:grain128aeadv2
25.1125.1825.21T:schwaemm192192v2
27.2127.2827.33T:schwaemm128128v2
31.0331.0531.09romulusn
34.2034.2734.36T:isapa128v20
34.2534.2834.33T:isapa128av20
41.3841.4241.49T:giftcofb128v1
42.7242.7642.78romulusm
49.3249.3649.40T:tinyjambu128v2
56.7256.7956.82T:tinyjambu192v2
57.3757.4157.46T:isapk128av20
59.7159.8559.92T:tinyjambu256v2
74.2174.2974.39T:isapk128v20
83.4483.5183.67romulust
107.43107.50107.57T:elephant200v2
142.67142.76143.33T:isapxv20
5608.635609.085610.97T:elephant176v2
6138.706139.156139.44T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.460.480.51T:aes128gcmv1
0.590.610.64T:aes256gcmv1
0.991.001.01aes256gcmv1
3.063.073.09aes128gcmv1
7.297.327.33ascon128av12
10.9110.9510.97ascon128v12
10.9610.9711.00ascon80pqv12
12.5212.5412.57T:xoodyakround3
14.2214.2914.35ascon128abi32v12
19.0319.0819.13T:schwaemm256128v2
21.2221.2421.28T:schwaemm256256v2
21.4221.4521.48ascon128bi32v12
25.0325.1225.21T:schwaemm192192v2
25.3625.3925.40T:grain128aeadv2
27.1827.2127.25T:schwaemm128128v2
30.9831.0031.02romulusn
34.2134.2534.30T:isapa128v20
34.2234.2734.31T:isapa128av20
41.4341.4541.51T:giftcofb128v1
42.7342.7542.77romulusm
49.3449.4149.45T:tinyjambu128v2
56.7956.8356.87T:tinyjambu192v2
57.3357.4057.50T:isapk128av20
59.6159.6259.65T:tinyjambu256v2
74.2274.3274.37T:isapk128v20
83.4883.5583.70romulust
107.50107.58107.66T:elephant200v2
142.60142.76143.42T:isapxv20
5608.715609.475611.91T:elephant176v2
6138.616139.086139.43T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.460.490.50T:aes128gcmv1
0.57?0.61?0.64?T:aes256gcmv1
1.001.001.00aes256gcmv1
1.631.651.67aes128gcmv1
7.297.317.39ascon128av12
10.9210.9410.97ascon128v12
10.9710.9811.00ascon80pqv12
12.5312.5412.56T:xoodyakround3
14.2014.3114.33ascon128abi32v12
19.0519.0719.12T:schwaemm256128v2
21.2221.2421.27T:schwaemm256256v2
21.4121.4421.47ascon128bi32v12
22.7222.7922.84T:isapa128v20
25.0225.0825.14T:schwaemm192192v2
25.3725.4025.41T:grain128aeadv2
27.1527.1927.26T:schwaemm128128v2
27.1627.2027.26T:isapa128av20
30.9831.0031.03romulusn
41.4241.4641.51T:giftcofb128v1
42.3642.3842.43romulust
42.7342.7642.78romulusm
45.9145.9846.04T:isapk128av20
49.3349.3749.40T:tinyjambu128v2
56.7756.8256.86T:tinyjambu192v2
57.2157.2657.33T:isapk128v20
59.6159.6459.65T:tinyjambu256v2
106.85106.95107.29T:isapxv20
107.39107.59107.64T:elephant200v2
5607.105608.885609.57T:elephant176v2
6139.336139.656141.60T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.290.310.32T:aes256gcmv1
0.23?0.36?0.38?T:aes128gcmv1
0.390.420.43aes256gcmv1
1.581.591.60aes128gcmv1
7.237.267.30ascon128av12
8.768.808.84T:xoodyakround3
10.9310.9711.02ascon128v12
10.9510.9811.01ascon80pqv12
14.1314.2714.30ascon128abi32v12
18.8218.8818.99T:schwaemm256128v2
21.1221.1421.19T:schwaemm256256v2
21.1321.3021.33ascon128bi32v12
22.8122.9022.98T:isapa128v20
23.4323.4823.50romulusn
23.4523.5423.57romulusm
24.8124.9825.03T:schwaemm192192v2
25.0525.0925.10T:grain128aeadv2
26.9727.0427.10T:schwaemm128128v2
27.1427.2027.25T:isapa128av20
38.4438.5238.55T:tinyjambu128v2
40.6140.6340.66T:tinyjambu256v2
41.1341.1741.20T:tinyjambu192v2
41.5741.6241.70T:giftcofb128v1
42.2642.3242.37romulust
45.7845.8845.97T:isapk128av20
56.8357.1257.22T:isapk128v20
72.1972.2572.31T:elephant200v2
106.92106.98107.08T:isapxv20
3707.303707.943709.40T:elephant176v2
4091.524091.794092.28T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.300.320.32T:aes256gcmv1
0.30?0.32?0.34?T:aes128gcmv1
0.400.410.42aes256gcmv1
1.591.611.62aes128gcmv1
7.307.337.35ascon128av12
8.778.818.87T:xoodyakround3
10.9810.9811.00ascon80pqv12
10.9711.0011.02ascon128v12
14.3014.4214.45ascon128abi32v12
18.7918.8818.99T:schwaemm256128v2
21.1121.1521.18T:schwaemm256256v2
21.2621.4121.46ascon128bi32v12
22.8322.9122.98T:isapa128v20
23.4923.5123.52romulusn
23.4623.5223.58romulusm
24.7724.9825.08T:schwaemm192192v2
25.0625.1625.19T:grain128aeadv2
26.9627.0327.07T:schwaemm128128v2
27.0927.1527.23T:isapa128av20
38.4538.5038.54T:tinyjambu128v2
40.6440.6540.70T:tinyjambu256v2
41.0841.1541.23T:tinyjambu192v2
41.5941.6341.68T:giftcofb128v1
42.2942.3342.39romulust
45.8145.8645.96T:isapk128av20
57.0357.1357.19T:isapk128v20
72.1872.2472.32T:elephant200v2
106.69106.88107.23T:isapxv20
3706.803707.913708.43T:elephant176v2
4091.654092.084092.64T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.300.310.32T:aes256gcmv1
0.27?0.32?0.33?T:aes128gcmv1
0.410.410.42aes256gcmv1
1.581.601.61aes128gcmv1
7.307.337.36ascon128av12
8.788.828.84T:xoodyakround3
10.9410.9911.01ascon128v12
10.9711.0011.03ascon80pqv12
14.3014.4514.48ascon128abi32v12
18.8518.9018.96T:schwaemm256128v2
21.1121.1521.18T:schwaemm256256v2
21.2621.4321.46ascon128bi32v12
22.8022.9022.96T:isapa128v20
23.4923.5123.53romulusn
23.4523.5223.56romulusm
24.7324.9725.08T:schwaemm192192v2
25.0525.1625.18T:grain128aeadv2
26.9427.0127.07T:schwaemm128128v2
27.0927.1227.19T:isapa128av20
38.4638.4938.54T:tinyjambu128v2
40.6240.6640.68T:tinyjambu256v2
41.1041.1741.21T:tinyjambu192v2
41.6041.6541.68T:giftcofb128v1
42.2842.3242.35romulust
45.8045.8645.96T:isapk128av20
57.0357.1257.28T:isapk128v20
72.1772.2372.33T:elephant200v2
106.05106.76107.11T:isapxv20
3707.383708.413709.43T:elephant176v2
4091.904092.124093.02T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.001.011.04T:aes128gcmv1
1.131.131.13T:aes256gcmv1
1.211.211.21aes256gcmv1
3.193.193.25aes128gcmv1
7.687.717.75ascon128av12
11.1011.1211.14ascon80pqv12
11.1711.1811.20ascon128v12
12.8912.9112.98T:xoodyakround3
14.6314.6814.69ascon128abi32v12
19.6119.6219.65T:schwaemm256128v2
21.6821.6921.70ascon128bi32v12
21.7621.8221.85T:schwaemm256256v2
25.4925.5525.62T:grain128aeadv2
25.6925.7425.76T:schwaemm192192v2
27.5727.6127.64T:schwaemm128128v2
31.3631.3831.41romulusn
37.7637.8037.81T:isapa128av20
41.8141.8341.84T:giftcofb128v1
43.0843.1143.12romulusm
49.7549.7749.79T:tinyjambu128v2
49.9650.0250.03T:isapa128v20
57.2357.2557.28T:tinyjambu192v2
60.1860.2560.34T:tinyjambu256v2
64.2664.2864.37T:isapk128av20
84.8384.8785.02romulust
109.72109.75109.81T:elephant200v2
128.50128.55128.57T:isapk128v20
234.72234.79234.86T:isapxv20
5650.585654.805655.17T:elephant176v2
6210.366211.566494.31T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.980.990.99T:aes128gcmv1
1.111.111.12T:aes256gcmv1
1.181.191.19aes256gcmv1
3.243.253.26aes128gcmv1
7.507.537.60ascon128av12
11.1011.1211.15ascon128v12
11.1411.1711.18ascon80pqv12
12.6712.6912.71T:xoodyakround3
14.6514.6614.68ascon128abi32v12
19.6219.6419.70T:schwaemm256128v2
21.7721.7921.80ascon128bi32v12
21.7821.8221.85T:schwaemm256256v2
25.6825.7225.75T:schwaemm192192v2
25.7425.8125.82T:grain128aeadv2
27.5527.5827.65T:schwaemm128128v2
31.3131.3331.35romulusn
37.7237.7737.79T:isapa128av20
41.8741.8841.92T:giftcofb128v1
43.1543.1743.19romulusm
49.7849.8049.84T:tinyjambu128v2
49.9950.0250.06T:isapa128v20
57.2357.2757.31T:tinyjambu192v2
60.0560.0860.10T:tinyjambu256v2
64.2964.3164.33T:isapk128av20
84.8084.8585.01romulust
109.86109.93110.04T:elephant200v2
128.50128.54128.59T:isapk128v20
234.67234.84234.93T:isapxv20
5650.325654.265654.80T:elephant176v2
6209.35?6210.95?9645.72?T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.981.001.00T:aes128gcmv1
1.111.111.12T:aes256gcmv1
1.181.181.18aes256gcmv1
1.841.861.87aes128gcmv1
7.497.517.53ascon128av12
11.0911.1311.14ascon128v12
11.1511.1611.17ascon80pqv12
12.6912.7012.71T:xoodyakround3
14.6314.6514.67ascon128abi32v12
19.6119.6319.67T:schwaemm256128v2
21.7621.7821.80ascon128bi32v12
21.7421.8021.83T:schwaemm256256v2
25.6525.7125.76T:schwaemm192192v2
25.7725.8025.82T:grain128aeadv2
27.5227.5527.61T:schwaemm128128v2
29.0929.1029.15T:isapa128av20
30.7930.8030.84T:isapa128v20
31.3231.3331.36romulusn
41.8641.9041.92T:giftcofb128v1
43.1543.1843.22romulusm
43.6443.6743.69romulust
49.7649.7949.82T:tinyjambu128v2
49.9749.9850.05T:isapk128av20
57.2257.2657.28T:tinyjambu192v2
60.0860.1060.12T:tinyjambu256v2
85.0585.0885.12T:isapk128v20
109.78109.85109.99T:elephant200v2
154.02154.12154.18T:isapxv20
5654.625655.035663.82T:elephant176v2
6209.50?6211.62?10281.83?T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.397.437.52aes128gcmv1
7.447.457.49aes256gcmv1
12.0212.2712.52ascon128av12
12.4612.6213.61T:aes128gcmv1
12.9412.9813.05T:aes256gcmv1
14.9515.2215.48ascon128v12
14.9715.3415.62ascon80pqv12
18.6518.9219.12T:xoodyakround3
22.0222.2522.47ascon128abi32v12
28.9929.1529.41ascon128bi32v12
31.7731.9432.65T:schwaemm256128v2
34.7734.8634.92T:schwaemm256256v2
34.9535.1835.37T:grain128aeadv2
35.4835.5835.98T:schwaemm128128v2
38.5538.6238.83romulusn
41.4041.5942.90T:schwaemm192192v2
50.8051.0351.15romulusm
51.2751.4051.72T:giftcofb128v1
58.6458.8859.05T:tinyjambu128v2
67.2767.5267.84T:tinyjambu192v2
70.4170.5870.71T:tinyjambu256v2
114.98115.23115.71romulust
118.65118.95119.16T:isapa128av20
156.93157.58157.95T:elephant200v2
207.66208.34208.98T:isapk128av20
411.63412.20412.73T:isapa128v20
1358.731358.911359.15T:isapk128v20
2324.242325.032326.74T:isapxv20
7037.207039.267042.32T:elephant176v2
8316.608318.458319.95T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
7.127.157.20aes256gcmv1
8.308.348.63aes128gcmv1
11.9412.2512.62ascon128av12
12.3812.5212.62T:aes128gcmv1
12.9412.9813.08T:aes256gcmv1
14.8815.1015.35ascon128v12
15.2015.4915.84ascon80pqv12
18.3719.0019.35T:xoodyakround3
22.1222.2322.48ascon128abi32v12
29.1129.3129.60ascon128bi32v12
31.8332.2032.41T:schwaemm256128v2
34.8334.9135.16T:schwaemm256256v2
35.1235.1635.42T:grain128aeadv2
35.4135.5235.75T:schwaemm128128v2
38.8538.9839.12romulusn
42.1342.4542.65T:schwaemm192192v2
51.6651.7352.00T:giftcofb128v1
52.7252.9152.97romulusm
58.6958.7959.22T:tinyjambu128v2
67.3467.4167.74T:tinyjambu192v2
70.4470.4970.64T:tinyjambu256v2
114.98115.38115.75romulust
118.59119.30119.80T:isapa128av20
157.14157.37158.28T:elephant200v2
207.77208.95210.18T:isapk128av20
412.24412.91415.05T:isapa128v20
1358.711359.301361.09T:isapk128v20
2323.632327.302328.38T:isapxv20
7035.557037.537038.22T:elephant176v2
8316.808318.768319.83T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.656.696.73aes128gcmv1
7.097.127.16aes256gcmv1
11.9011.9712.12ascon128av12
12.4012.4712.64T:aes128gcmv1
12.9113.1013.33T:aes256gcmv1
14.7914.9615.07ascon128v12
15.1615.2315.34ascon80pqv12
18.5218.6918.84T:xoodyakround3
22.2022.2922.37ascon128abi32v12
29.0629.2329.32ascon128bi32v12
31.9632.0932.56T:schwaemm256128v2
34.7834.8934.95T:schwaemm256256v2
35.1035.1635.30T:grain128aeadv2
35.2235.3435.98T:schwaemm128128v2
38.8338.8838.98romulusn
42.2242.5042.77T:schwaemm192192v2
51.6351.7251.92T:giftcofb128v1
52.7652.8953.20romulusm
58.6258.8059.07T:tinyjambu128v2
67.3667.4167.63T:tinyjambu192v2
70.3770.4970.78T:tinyjambu256v2
72.2472.3472.50romulust
73.3073.9374.14T:isapa128av20
130.88131.52132.22T:isapk128av20
156.79157.09157.38T:elephant200v2
214.64215.28215.75T:isapa128v20
711.40712.25715.08T:isapk128v20
1215.021217.301218.15T:isapxv20
7036.507038.197039.03T:elephant176v2
8317.218318.428320.05T:elephant160v2

amd64; Ice Lake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.471.481.49T:aes128gcmv1
1.561.571.58aes256gcmv1
7.887.958.14ascon128av12
11.7211.7912.12ascon128v12
11.7611.8311.90ascon80pqv12
12.1312.1812.25T:xoodyakround3
14.5214.6014.71ascon128abi32v12
17.0017.0517.19T:schwaemm256128v2
20.0420.1820.38T:schwaemm256256v2
20.3220.3620.42T:grain128aeadv2
21.5221.5721.62ascon128bi32v12
22.6322.7322.88T:schwaemm192192v2
24.0224.1524.27T:schwaemm128128v2
27.0027.0627.16T:isapa128av20
32.0932.1032.13T:isapk128av20
37.4337.5237.65romulusn
42.9843.0643.21T:isapa128v20
44.31?44.39?50.52?T:giftcofb128v1
58.2358.4258.65romulusm
70.4470.6071.03T:tinyjambu128v2
86.0886.2486.27T:tinyjambu192v2
90.0690.1990.54T:tinyjambu256v2
97.4898.6498.93T:isapk128v20
116.26116.55116.73romulust
142.56143.19146.66T:isapxv20
178.48178.93180.60T:elephant200v2
7420.947433.267465.64T:elephant176v2
8258.468264.088271.69T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.431.451.46T:aes128gcmv1
1.461.471.48aes256gcmv1
8.008.078.11ascon128av12
11.7411.7911.82ascon128v12
11.8111.8411.87ascon80pqv12
12.0512.1112.21T:xoodyakround3
14.6014.7214.82ascon128abi32v12
17.0517.1017.28T:schwaemm256128v2
19.9420.3120.45T:schwaemm256256v2
20.5020.5320.59T:grain128aeadv2
21.6821.7221.84ascon128bi32v12
22.5622.7322.85T:schwaemm192192v2
24.1124.1624.31T:schwaemm128128v2
32.0732.1132.16T:isapk128av20
34.0534.1134.23T:isapa128av20
37.4037.5537.66romulusn
42.9943.0943.25T:isapa128v20
44.32?44.45?50.23?T:giftcofb128v1
58.4358.5559.22romulusm
70.5070.7170.82T:tinyjambu128v2
85.6485.8286.08T:tinyjambu192v2
90.1790.3190.49T:tinyjambu256v2
97.4898.5098.98T:isapk128v20
115.71116.55117.57romulust
141.96143.47146.70T:isapxv20
179.01179.88180.60T:elephant200v2
7424.177436.477471.02T:elephant176v2
8258.268262.758267.75T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.451.451.46T:aes128gcmv1
1.471.471.48aes256gcmv1
8.038.068.10ascon128av12
11.7411.7711.81ascon128v12
11.6711.8211.87ascon80pqv12
12.0812.1412.44T:xoodyakround3
14.6414.7414.81ascon128abi32v12
17.0817.1417.19T:schwaemm256128v2
20.1220.2920.36T:schwaemm256256v2
20.4820.5120.55T:grain128aeadv2
21.1121.2421.31T:isapa128v20
21.3821.4321.44T:isapk128av20
21.6821.7321.76ascon128bi32v12
22.4022.4922.67T:isapa128av20
22.5422.6322.76T:schwaemm192192v2
24.0624.1324.22T:schwaemm128128v2
37.4037.5537.66romulusn
39.6239.8339.95romulust
44.3344.3945.78T:giftcofb128v1
58.4858.6359.05romulusm
63.8164.3564.89T:isapk128v20
70.4570.6070.74T:tinyjambu128v2
85.3585.6986.86T:isapxv20
85.8085.9786.10T:tinyjambu192v2
90.1290.2090.35T:tinyjambu256v2
177.83179.02180.14T:elephant200v2
7418.977428.787455.27T:elephant176v2
8261.358264.648267.99T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.870.880.89T:aes128gcmv1
0.910.930.93aes256gcmv1
7.958.028.09ascon128av12
9.309.349.46T:xoodyakround3
11.7111.8212.00ascon80pqv12
11.7711.9512.08ascon128v12
14.3914.4314.45ascon128abi32v12
16.8316.9316.99T:schwaemm256128v2
19.9220.2520.43T:schwaemm256256v2
20.4120.4520.52T:grain128aeadv2
21.4921.5521.58ascon128bi32v12
22.4522.5122.66T:schwaemm192192v2
23.8623.9023.94T:schwaemm128128v2
24.9725.0125.05T:isapa128av20
26.7426.7526.79T:isapk128av20
29.0229.0729.16romulusn
32.0832.1532.24T:isapa128v20
39.4339.7039.86romulusm
44.3144.3644.42T:giftcofb128v1
57.6657.7557.88T:tinyjambu128v2
67.0767.2267.35T:tinyjambu192v2
68.0068.1168.23T:tinyjambu256v2
76.3777.1678.32T:isapk128v20
77.9178.3078.64romulust
112.54113.78115.27T:isapxv20
133.35133.61134.33T:elephant200v2
5541.525552.175573.16T:elephant176v2
6208.106224.716278.71T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.850.870.89T:aes128gcmv1
0.850.910.92aes256gcmv1
8.018.058.08ascon128av12
9.259.339.45T:xoodyakround3
11.7211.7611.94ascon128v12
11.7111.7811.92ascon80pqv12
14.4314.5014.52ascon128abi32v12
16.9016.9717.04T:schwaemm256128v2
19.9720.2320.35T:schwaemm256256v2
20.4920.5220.56T:grain128aeadv2
21.5621.6521.71ascon128bi32v12
22.4522.5022.63T:schwaemm192192v2
23.8023.9124.24T:schwaemm128128v2
26.7526.7626.84T:isapk128av20
28.4328.4828.51T:isapa128av20
29.0229.0729.11romulusn
32.1332.1732.23T:isapa128v20
39.5239.7539.86romulusm
44.3044.3344.43T:giftcofb128v1
57.6957.8357.92T:tinyjambu128v2
67.0367.3167.45T:tinyjambu192v2
68.0568.1768.29T:tinyjambu256v2
76.3376.8477.26T:isapk128v20
78.2478.4178.74romulust
112.61114.33114.61T:isapxv20
133.21133.94134.46T:elephant200v2
5548.025558.375580.34T:elephant176v2
6210.256217.646233.37T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.860.870.88T:aes128gcmv1
0.880.910.91aes256gcmv1
8.008.038.05ascon128av12
9.249.289.46T:xoodyakround3
11.7211.7611.84ascon80pqv12
11.7011.7711.93ascon128v12
14.4614.5114.55ascon128abi32v12
16.8916.9717.08T:schwaemm256128v2
19.9420.1320.46T:schwaemm256256v2
20.4920.5220.55T:grain128aeadv2
21.1921.2421.29T:isapa128v20
21.3921.4121.44T:isapk128av20
21.6021.6821.82ascon128bi32v12
22.3922.5422.73T:schwaemm192192v2
22.6122.6622.69T:isapa128av20
23.8123.9024.03T:schwaemm128128v2
29.0429.0729.19romulusn
39.5139.7639.98romulusm
39.6740.0540.31romulust
44.3144.3444.37T:giftcofb128v1
57.7657.8457.96T:tinyjambu128v2
59.4559.7560.29T:isapk128v20
67.0267.1967.32T:tinyjambu192v2
68.0668.1368.27T:tinyjambu256v2
84.5485.0085.50T:isapxv20
132.84133.68134.34T:elephant200v2
5546.515557.515583.07T:elephant176v2
6208.946216.306232.84T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.25?0.27?0.29?aes256gcmv1
0.26?0.29?0.30?T:aes128gcmv1
6.346.406.45T:xoodyakround3
7.988.028.06ascon128av12
11.5511.6411.73ascon80pqv12
11.6511.6911.95ascon128v12
14.3714.4614.52ascon128abi32v12
16.6616.7616.85T:schwaemm256128v2
19.8420.0120.26T:schwaemm256256v2
20.4420.4820.52T:grain128aeadv2
20.7020.8020.94romulusn
20.8220.9421.06romulusm
21.1321.2221.31T:isapa128v20
21.3821.4121.46T:isapk128av20
21.4421.5021.59ascon128bi32v12
22.0422.1422.20T:schwaemm192192v2
22.8522.9223.16T:isapa128av20
23.6323.7623.85T:schwaemm128128v2
38.9139.2039.62romulust
44.2944.3244.40T:giftcofb128v1
44.9445.0345.06T:tinyjambu128v2
45.7745.8145.90T:tinyjambu256v2
48.2648.3848.42T:tinyjambu192v2
55.1055.4856.31T:isapk128v20
84.2384.9085.51T:isapxv20
88.9189.2489.66T:elephant200v2
3668.403676.163695.98T:elephant176v2
4126.844129.544132.91T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.24?0.27?0.29?aes256gcmv1
0.25?0.27?0.29?T:aes128gcmv1
6.366.416.43T:xoodyakround3
7.978.008.07ascon128av12
11.5911.6611.69ascon128v12
11.6312.0012.10ascon80pqv12
14.2914.4214.55ascon128abi32v12
16.7016.7816.87T:schwaemm256128v2
19.9220.1020.37T:schwaemm256256v2
20.4520.4820.52T:grain128aeadv2
20.7020.8020.88romulusn
20.7120.8720.94romulusm
21.1921.2621.31T:isapa128v20
21.3821.4221.43T:isapk128av20
21.4221.4921.52ascon128bi32v12
22.0622.1122.23T:schwaemm192192v2
22.8322.9122.96T:isapa128av20
23.6223.7223.91T:schwaemm128128v2
39.0039.2239.48romulust
44.2544.2844.33T:giftcofb128v1
44.8544.9144.97T:tinyjambu128v2
45.7745.8445.88T:tinyjambu256v2
48.1748.2948.41T:tinyjambu192v2
55.0555.3156.28T:isapk128v20
84.3384.6185.67T:isapxv20
89.0689.6490.04T:elephant200v2
3671.823679.593689.35T:elephant176v2
4126.294129.064132.01T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.270.280.29aes256gcmv1
0.270.280.29T:aes128gcmv1
6.376.416.45T:xoodyakround3
7.978.018.03ascon128av12
11.5511.6611.98ascon80pqv12
11.6411.6611.72ascon128v12
14.3214.4314.51ascon128abi32v12
16.7416.8516.94T:schwaemm256128v2
19.8620.0020.21T:schwaemm256256v2
20.4520.4920.54T:grain128aeadv2
20.7320.8120.99romulusn
20.7420.9120.98romulusm
21.1721.2121.28T:isapa128v20
21.3921.4221.46T:isapk128av20
21.4321.4921.56ascon128bi32v12
22.1122.2222.30T:schwaemm192192v2
22.8222.8923.14T:isapa128av20
23.6123.6823.80T:schwaemm128128v2
39.1939.3639.58romulust
44.2644.3044.36T:giftcofb128v1
44.8344.9845.19T:tinyjambu128v2
45.7845.8345.94T:tinyjambu256v2
48.3148.4048.45T:tinyjambu192v2
55.0855.5655.87T:isapk128v20
84.1584.5785.26T:isapxv20
89.0189.6390.41T:elephant200v2
3665.913676.423691.77T:elephant176v2
4126.234129.354131.58T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.001.001.01T:aes128gcmv1
1.071.071.08aes256gcmv1
8.168.178.27ascon128av12
9.379.429.50T:xoodyakround3
11.9712.0312.23ascon128v12
11.9712.0612.29ascon80pqv12
14.7014.7114.74ascon128abi32v12
17.4017.4317.52T:schwaemm256128v2
20.5020.6020.80T:schwaemm256256v2
20.7420.7520.78T:grain128aeadv2
21.8421.8821.94ascon128bi32v12
22.9323.0023.13T:schwaemm192192v2
24.1024.1924.23T:schwaemm128128v2
27.0427.0727.10T:isapa128av20
29.3329.3529.48romulusn
29.8129.8229.83T:isapk128av20
39.7339.8239.89romulusm
44.7444.7744.80T:giftcofb128v1
46.7746.8446.97T:isapa128v20
58.1058.1758.28T:tinyjambu128v2
67.7267.7667.88T:tinyjambu192v2
68.4168.4468.64T:tinyjambu256v2
78.6478.8879.25romulust
127.50127.73127.98T:isapk128v20
136.28136.81137.64T:elephant200v2
188.16188.81189.93T:isapxv20
5590.415604.115615.65T:elephant176v2
6266.016268.426273.09T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.990.991.01T:aes128gcmv1
1.021.031.06aes256gcmv1
8.228.238.31ascon128av12
9.369.449.67T:xoodyakround3
11.9812.0112.13ascon128v12
12.0012.0112.05ascon80pqv12
14.8214.8714.96ascon128abi32v12
17.3417.4217.47T:schwaemm256128v2
20.4320.5720.90T:schwaemm256256v2
20.8520.8620.90T:grain128aeadv2
21.9121.9322.05ascon128bi32v12
22.9422.9823.11T:schwaemm192192v2
24.2324.2924.33T:schwaemm128128v2
29.2929.3429.38romulusn
29.8129.8129.83T:isapk128av20
30.4430.4630.54T:isapa128av20
39.8539.9440.10romulusm
44.7744.8044.83T:giftcofb128v1
46.7946.8547.04T:isapa128v20
58.1358.2058.32T:tinyjambu128v2
67.7067.7867.83T:tinyjambu192v2
68.4668.5068.56T:tinyjambu256v2
78.8779.1079.18romulust
127.38127.74128.03T:isapk128v20
135.95136.77137.63T:elephant200v2
187.84187.91188.48T:isapxv20
5593.735596.895601.92T:elephant176v2
6265.446268.926270.41T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.990.991.00T:aes128gcmv1
1.021.021.06aes256gcmv1
8.228.238.25ascon128av12
9.369.399.45T:xoodyakround3
11.9812.0212.06ascon80pqv12
12.0012.1312.22ascon128v12
14.8114.8314.91ascon128abi32v12
17.4017.4417.58T:schwaemm256128v2
20.5320.6220.79T:schwaemm256256v2
20.8220.8520.86T:grain128aeadv2
21.8721.8921.93ascon128bi32v12
22.9022.9623.03T:schwaemm192192v2
23.1923.2023.22T:isapk128av20
23.7623.7923.82T:isapa128av20
24.1424.1824.28T:schwaemm128128v2
28.6728.7128.74T:isapa128v20
29.2929.3529.62romulusn
39.8539.9640.03romulusm
40.4540.6540.78romulust
44.7644.7844.80T:giftcofb128v1
58.1058.2258.28T:tinyjambu128v2
67.5167.6667.84T:tinyjambu192v2
68.4468.5368.69T:tinyjambu256v2
86.1986.4386.67T:isapk128v20
122.65123.00123.51T:isapxv20
136.77137.00138.28T:elephant200v2
5588.065594.495607.91T:elephant176v2
6266.146270.276270.95T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.976.036.08T:aes128gcmv1
6.346.386.45aes256gcmv1
12.3112.3812.94ascon128av12
13.5113.5814.17T:xoodyakround3
17.5217.7717.93ascon128v12
17.7818.0218.34ascon80pqv12
21.7221.8822.45ascon128abi32v12
28.1428.5729.13T:schwaemm256128v2
28.6628.7328.79T:grain128aeadv2
28.7728.9329.08ascon128bi32v12
30.7531.0531.59T:schwaemm128128v2
32.7333.0433.37T:schwaemm256256v2
35.3735.5436.84romulusn
36.4537.0137.62T:schwaemm192192v2
46.8347.0447.78romulusm
54.0054.3454.87T:giftcofb128v1
67.4667.5768.05T:tinyjambu128v2
73.8874.2174.77T:isapa128av20
78.3278.5578.75T:tinyjambu192v2
79.2379.4980.06T:tinyjambu256v2
95.4195.5195.59T:isapk128av20
104.41104.76105.70romulust
192.79193.52194.46T:elephant200v2
383.18383.91384.91T:isapa128v20
1268.291269.981274.20T:isapk128v20
1848.491873.191877.44T:isapxv20
6950.486963.736980.10T:elephant176v2
8377.148385.788406.70T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.235.295.34T:aes128gcmv1
6.126.206.27aes256gcmv1
12.3412.5113.43ascon128av12
13.4213.5513.98T:xoodyakround3
17.3317.5217.98ascon128v12
17.2717.7418.05ascon80pqv12
21.9722.2023.09ascon128abi32v12
27.7728.1128.82T:schwaemm256128v2
28.7028.8429.28T:grain128aeadv2
28.9429.0529.37ascon128bi32v12
30.9731.4031.68T:schwaemm128128v2
33.1133.3433.54T:schwaemm256256v2
35.5935.7335.84romulusn
36.6936.9237.54T:schwaemm192192v2
48.0648.2449.45romulusm
54.2654.4554.62T:giftcofb128v1
67.7167.9368.20T:tinyjambu128v2
76.0976.4577.36T:isapa128av20
78.6378.7778.95T:tinyjambu192v2
79.5079.5779.70T:tinyjambu256v2
95.6295.7795.88T:isapk128av20
104.73105.55105.98romulust
192.38192.96193.75T:elephant200v2
384.67385.06385.50T:isapa128v20
1269.061270.381274.24T:isapk128v20
1848.551874.571882.35T:isapxv20
6956.007001.057005.66T:elephant176v2
8382.458388.868408.45T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.245.265.30T:aes128gcmv1
6.136.186.25aes256gcmv1
12.3012.3812.98ascon128av12
13.5513.9914.12T:xoodyakround3
17.3017.4417.53ascon80pqv12
17.3317.5317.73ascon128v12
21.9522.2622.48ascon128abi32v12
27.7327.9828.31T:schwaemm256128v2
28.7328.9029.06T:grain128aeadv2