VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information: Introduction eBASH eBASC eBAEAD eBATS SUPERCOP XBX Computers
How to submit new software: Tips hash stream aead dh kem encrypt sign
List of primitives measured: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
Measurements indexed by machine: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
List of subroutines: verify decode encode sort core hashblocks scalarmult

Measurements of NISTLWC cipher candidates, indexed by machine

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each cipher and each implementation.

amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.790.800.82T:aes128gcmv1
0.880.900.90aes256gcmv1
5.845.855.85ascon128av12
8.258.258.26ascon128v12
8.378.388.39ascon80pqv12
11.8612.0112.03T:xoodyakround3
12.3412.3812.42ascon128abi32v12
17.2817.3117.38T:schwaemm256128v2
18.4118.5018.60ascon128bi32v12
21.6021.6121.61T:grain128aeadv2
22.7222.7522.77T:schwaemm256256v2
22.7722.8522.90T:schwaemm192192v2
25.6025.6025.61T:isapa128av20
26.9827.1027.35T:schwaemm128128v2
29.5629.5629.58T:giftcofb128v1
35.6935.7135.72T:isapa128v20
41.3841.9442.20romulusn
46.3248.4148.61T:isapk128av20
64.2864.4565.21romulusm
66.2566.2566.25T:tinyjambu128v2
72.2972.4472.57T:isapk128v20
81.2581.2581.25T:tinyjambu192v2
82.7582.7582.75T:tinyjambu256v2
134.03134.57134.73romulust
165.35165.63166.27T:isapxv20
171.25171.44172.38T:elephant200v2
7561.677563.647564.50T:elephant176v2
7835.737836.327836.70T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.640.690.71T:aes128gcmv1
0.780.800.82aes256gcmv1
5.875.885.88ascon128av12
8.378.388.38ascon80pqv12
8.388.388.38ascon128v12
11.7511.8811.92T:xoodyakround3
12.4412.4412.45ascon128abi32v12
17.2017.3317.42T:schwaemm256128v2
18.4918.5018.52ascon128bi32v12
21.5521.5921.72T:grain128aeadv2
22.7322.7522.78T:schwaemm256256v2
22.7922.8222.93T:schwaemm192192v2
26.6726.7026.75T:isapa128av20
27.1627.3427.46T:schwaemm128128v2
29.6929.6929.69T:giftcofb128v1
35.7035.7035.71T:isapa128v20
41.5341.5342.88romulusn
46.3448.2348.35T:isapk128av20
64.2164.4764.93romulusm
66.2566.2566.25T:tinyjambu128v2
72.2472.3772.65T:isapk128v20
81.2581.2581.25T:tinyjambu192v2
82.7582.7582.75T:tinyjambu256v2
133.53133.76134.16romulust
164.87165.69166.23T:isapxv20
168.61171.94172.43T:elephant200v2
7561.037563.517565.20T:elephant176v2
7835.817836.537836.98T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.680.690.70T:aes128gcmv1
0.790.810.81aes256gcmv1
5.885.885.88ascon128av12
8.388.388.38ascon80pqv12
8.388.388.38ascon128v12
11.7711.7911.97T:xoodyakround3
12.4412.4412.45ascon128abi32v12
17.2017.3617.41T:schwaemm256128v2
17.7217.7517.76T:isapa128av20
18.3818.3818.38T:isapa128v20
18.5018.5018.50ascon128bi32v12
21.5521.6021.80T:grain128aeadv2
22.7322.7522.77T:schwaemm256256v2
22.8022.9023.00T:schwaemm192192v2
27.1727.3227.49T:schwaemm128128v2
29.6929.6929.69T:giftcofb128v1
30.9031.0532.12T:isapk128av20
41.5741.5742.87romulusn
44.4544.5044.53romulust
44.9545.0445.18T:isapk128v20
64.0964.1464.96romulusm
66.2566.2566.25T:tinyjambu128v2
81.2581.2581.25T:tinyjambu192v2
82.7582.7582.75T:tinyjambu256v2
98.5799.3699.80T:isapxv20
168.62172.15172.47T:elephant200v2
7560.247564.357565.04T:elephant176v2
7835.587836.127836.53T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.600.600.61T:aes128gcmv1
0.640.650.66aes256gcmv1
5.805.815.81ascon128av12
8.288.288.29ascon128v12
8.288.298.29ascon80pqv12
8.908.948.98T:xoodyakround3
12.4412.4412.45ascon128abi32v12
17.1217.1617.20T:schwaemm256128v2
18.3818.3818.39ascon128bi32v12
21.6921.7121.75T:isapa128av20
21.8321.8321.84T:grain128aeadv2
22.5822.6022.61T:schwaemm256256v2
22.6322.6922.72T:schwaemm192192v2
26.9427.0227.10T:schwaemm128128v2
27.0327.0427.04T:isapa128v20
29.5029.5629.56T:giftcofb128v1
31.9832.0132.01romulusn
38.5538.6038.86T:isapk128av20
43.5843.7443.83romulusm
53.8853.8853.88T:tinyjambu128v2
58.5058.5858.68T:isapk128v20
62.1262.1262.13T:tinyjambu256v2
63.2463.2563.26T:tinyjambu192v2
89.0889.3289.60romulust
127.76127.97128.05T:elephant200v2
131.18131.74132.08T:isapxv20
5651.085651.345651.66T:elephant176v2
5873.535874.365875.10T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.520.540.56T:aes128gcmv1
0.590.600.61aes256gcmv1
5.765.825.82ascon128av12
8.358.358.35ascon80pqv12
8.358.358.35ascon128v12
8.888.908.91T:xoodyakround3
12.4712.4812.50ascon128abi32v12
17.1217.1617.21T:schwaemm256128v2
18.5318.5418.54ascon128bi32v12
21.5621.5721.60T:grain128aeadv2
22.2122.2322.24T:isapa128av20
22.5822.6022.62T:schwaemm256256v2
22.6722.7222.76T:schwaemm192192v2
27.0327.0327.04T:isapa128v20
27.0827.1127.16T:schwaemm128128v2
29.5329.5329.56T:giftcofb128v1
32.1832.2232.22romulusn
38.6039.9640.32T:isapk128av20
43.8443.9443.98romulusm
53.8753.8853.88T:tinyjambu128v2
58.4558.5558.68T:isapk128v20
62.1262.1262.13T:tinyjambu256v2
63.2563.2563.26T:tinyjambu192v2
89.0789.2789.42romulust
127.71127.81127.90T:elephant200v2
131.11131.61132.15T:isapxv20
5651.185651.505651.76T:elephant176v2
5873.275874.635875.75T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.530.540.55T:aes128gcmv1
0.590.600.61aes256gcmv1
5.825.825.82ascon128av12
8.358.358.35ascon128v12
8.358.358.35ascon80pqv12
8.858.888.91T:xoodyakround3
12.4712.4712.48ascon128abi32v12
17.1017.1617.23T:schwaemm256128v2
17.7317.7417.76T:isapa128av20
18.3718.3818.38T:isapa128v20
18.5418.5418.54ascon128bi32v12
21.5621.5821.59T:grain128aeadv2
22.5922.6022.62T:schwaemm256256v2
22.6822.7222.74T:schwaemm192192v2
27.0427.0927.15T:schwaemm128128v2
29.5329.5329.53T:giftcofb128v1
30.9732.0332.15T:isapk128av20
32.1832.2232.22romulusn
43.8343.9543.99romulusm
44.4644.4844.51romulust
44.8344.9445.11T:isapk128v20
53.8753.8853.88T:tinyjambu128v2
62.1262.1262.13T:tinyjambu256v2
63.2563.2563.26T:tinyjambu192v2
98.2198.4998.82T:isapxv20
127.71127.82127.85T:elephant200v2
5650.215650.975651.73T:elephant176v2
5873.035874.185875.21T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.380.400.42aes256gcmv1
0.380.400.42T:aes128gcmv1
5.755.755.75ascon128av12
5.895.905.90T:xoodyakround3
8.318.318.32ascon80pqv12
8.318.318.32ascon128v12
12.5012.5012.51ascon128abi32v12
16.9817.0517.09T:schwaemm256128v2
17.8717.8817.88T:isapa128av20
18.1618.2518.35ascon128bi32v12
18.3718.3818.38T:isapa128v20
22.0422.0622.08T:grain128aeadv2
22.4322.4522.47T:schwaemm256256v2
22.5322.5622.75T:schwaemm192192v2
22.6622.7323.10romulusm
22.7122.8323.14romulusn
26.8426.9727.09T:schwaemm128128v2
29.4429.4429.44T:giftcofb128v1
30.9931.0732.23T:isapk128av20
41.5041.5041.50T:tinyjambu128v2
41.5041.5041.50T:tinyjambu256v2
44.4544.4744.49romulust
44.6944.7945.04T:isapk128v20
45.2545.2545.25T:tinyjambu192v2
85.0685.1385.24T:elephant200v2
97.4497.9298.53T:isapxv20
3737.683738.773739.71T:elephant176v2
3915.113915.713920.76T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.380.400.42T:aes128gcmv1
0.380.400.42aes256gcmv1
5.625.755.75ascon128av12
5.915.925.93T:xoodyakround3
8.318.318.32ascon128v12
8.318.328.32ascon80pqv12
12.5012.5012.51ascon128abi32v12
16.9217.0517.15T:schwaemm256128v2
17.7217.7517.75T:isapa128av20
18.3618.3818.39T:isapa128v20
18.5618.5718.57ascon128bi32v12
21.5221.5321.76T:grain128aeadv2
22.4422.4822.49T:schwaemm256256v2
22.5222.5622.74T:schwaemm192192v2
22.6822.7123.09romulusm
22.7822.7922.82romulusn
26.8326.8826.99T:schwaemm128128v2
29.4429.4429.44T:giftcofb128v1
30.8731.9332.21T:isapk128av20
41.5041.5041.50T:tinyjambu256v2
41.5041.5041.50T:tinyjambu128v2
44.4544.4844.50romulust
44.7244.9044.98T:isapk128v20
45.2545.2545.25T:tinyjambu192v2
85.0085.1385.28T:elephant200v2
97.1797.3297.71T:isapxv20
3737.833738.283739.55T:elephant176v2
3915.523916.183921.10T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.400.400.41aes256gcmv1
0.390.400.42T:aes128gcmv1
5.755.755.75ascon128av12
5.925.945.96T:xoodyakround3
8.318.318.31ascon128v12
8.328.328.32ascon80pqv12
12.5012.5012.51ascon128abi32v12
16.8817.0717.14T:schwaemm256128v2
17.7217.7217.79T:isapa128av20
18.3618.3818.38T:isapa128v20
18.5618.5718.57ascon128bi32v12
21.5221.5321.77T:grain128aeadv2
22.4322.4522.48T:schwaemm256256v2
22.5322.5522.73T:schwaemm192192v2
22.6922.6922.75romulusm
22.7322.7322.73romulusn
26.8326.9226.99T:schwaemm128128v2
29.4429.4429.44T:giftcofb128v1
31.9932.1732.27T:isapk128av20
41.5041.5041.50T:tinyjambu256v2
41.5041.5041.50T:tinyjambu128v2
44.4644.5044.54romulust
44.6944.8145.11T:isapk128v20
45.2545.2545.25T:tinyjambu192v2
85.0385.1085.31T:elephant200v2
97.0597.4697.72T:isapxv20
3737.623738.023739.16T:elephant176v2
3915.293915.763921.27T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.700.700.71T:aes128gcmv1
0.750.750.76aes256gcmv1
5.945.955.95ascon128av12
8.418.418.48ascon80pqv12
8.418.418.41ascon128v12
8.989.039.04T:xoodyakround3
12.7212.7312.74ascon128abi32v12
17.6217.6317.66T:schwaemm256128v2
18.7718.7718.78ascon128bi32v12
22.1622.1722.17T:grain128aeadv2
23.2023.2123.21T:schwaemm256256v2
23.1423.2223.30T:schwaemm192192v2
23.2323.2723.28T:isapa128av20
27.2127.3327.51T:schwaemm128128v2
29.7529.8129.81T:giftcofb128v1
32.2832.3232.53romulusn
39.2939.2939.30T:isapa128v20
43.1243.2344.54T:isapk128av20
43.9144.0444.12romulusm
54.2854.2854.28T:tinyjambu128v2
62.5762.5762.58T:tinyjambu256v2
63.7263.7263.73T:tinyjambu192v2
90.5990.6490.88romulust
102.06102.10102.27T:isapk128v20
130.41130.48130.58T:elephant200v2
222.31222.45222.73T:isapxv20
5691.445692.555693.25T:elephant176v2
5940.245941.095947.71T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.640.640.66T:aes128gcmv1
0.700.710.74aes256gcmv1
5.915.965.96ascon128av12
8.478.478.48ascon128v12
8.478.478.47ascon80pqv12
8.938.999.00T:xoodyakround3
12.7612.7612.78ascon128abi32v12
17.6217.6717.69T:schwaemm256128v2
18.9918.9919.00ascon128bi32v12
21.9121.9221.93T:grain128aeadv2
23.2123.2223.23T:schwaemm256256v2
23.1823.2723.33T:schwaemm192192v2
23.7223.7223.73T:isapa128av20
27.3927.4327.58T:schwaemm128128v2
29.7929.7929.81T:giftcofb128v1
32.4732.4732.47romulusn
39.3139.3139.32T:isapa128v20
43.8944.1644.34romulusm
43.2044.5644.60T:isapk128av20
54.2854.2854.28T:tinyjambu128v2
62.5862.5862.58T:tinyjambu256v2
63.7263.7363.73T:tinyjambu192v2
90.3590.5990.84romulust
102.09102.16102.19T:isapk128v20
130.41130.48130.66T:elephant200v2
221.94222.07222.38T:isapxv20
5691.355692.125693.73T:elephant176v2
5940.875941.215947.87T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.640.640.65T:aes128gcmv1
0.700.710.72aes256gcmv1
5.965.965.96ascon128av12
8.478.478.47ascon128v12
8.478.478.47ascon80pqv12
8.948.948.95T:xoodyakround3
12.7612.7612.76ascon128abi32v12
17.6217.6417.67T:schwaemm256128v2
18.6018.6018.60T:isapa128av20
18.9919.0019.00ascon128bi32v12
21.9121.9321.96T:grain128aeadv2
23.2123.2223.23T:schwaemm256256v2
23.2123.2723.34T:schwaemm192192v2
24.6224.6224.62T:isapa128v20
27.4027.4727.58T:schwaemm128128v2
29.7929.7929.79T:giftcofb128v1
32.4532.4732.47romulusn
33.5633.6234.61T:isapk128av20
43.8343.8944.31romulusm
45.7745.7845.80romulust
54.2854.2854.28T:tinyjambu128v2
62.5862.5862.58T:tinyjambu256v2
63.7263.7263.72T:tinyjambu192v2
67.4667.5367.57T:isapk128v20
130.41130.48130.50T:elephant200v2
144.43144.64145.15T:isapxv20
5690.945692.025694.27T:elephant176v2
5941.215941.505947.91T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
4.774.794.87T:aes128gcmv1
5.105.175.32aes256gcmv1
9.169.169.33ascon128av12
11.2311.2311.30ascon128v12
11.2711.2711.38ascon80pqv12
12.8712.9313.17T:xoodyakround3
19.2719.3019.48ascon128abi32v12
27.6727.9929.12ascon128bi32v12
28.7728.9229.14T:schwaemm256128v2
29.8029.8829.93T:grain128aeadv2
35.6235.6235.64T:giftcofb128v1
34.6635.6735.88T:schwaemm128128v2
37.2637.3537.48T:schwaemm192192v2
37.2737.3837.43T:schwaemm256256v2
38.2938.4838.73romulusn
50.5350.7451.11romulusm
58.4458.5558.57T:isapa128av20
63.5763.5763.65T:tinyjambu128v2
72.9172.9172.94T:tinyjambu256v2
74.4574.4574.46T:tinyjambu192v2
120.70121.06121.20romulust
134.52134.87138.09T:isapk128av20
183.28183.82184.10T:elephant200v2
321.10321.10321.10T:isapa128v20
1090.191091.451092.59T:isapk128v20
2278.612282.222283.59T:isapxv20
7089.067091.487100.59T:elephant176v2
7956.267958.627965.70T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.025.105.12T:aes128gcmv1
5.485.525.58aes256gcmv1
9.229.229.26ascon128av12
11.2811.2811.38ascon128v12
11.2911.2911.35ascon80pqv12
12.9413.0013.09T:xoodyakround3
19.2419.3019.41ascon128abi32v12
29.4829.5229.60ascon128bi32v12
29.9430.0230.27T:grain128aeadv2
28.7830.0730.13T:schwaemm256128v2
35.6735.6935.70T:giftcofb128v1
35.4836.0136.15T:schwaemm128128v2
37.1837.2437.39T:schwaemm256256v2
37.4237.5237.60T:schwaemm192192v2
38.1638.2738.29romulusn
51.3451.5951.77romulusm
57.9358.3858.50T:isapa128av20
63.7363.7563.83T:tinyjambu128v2
73.0273.0573.17T:tinyjambu256v2
74.6274.6274.62T:tinyjambu192v2
121.13121.36121.63romulust
134.69135.11138.33T:isapk128av20
183.00183.50183.98T:elephant200v2
321.48321.48321.49T:isapa128v20
1090.161090.511091.09T:isapk128v20
2279.282282.122284.07T:isapxv20
7090.507093.237102.04T:elephant176v2
7956.937957.377965.62T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.065.065.11T:aes128gcmv1
5.475.495.56aes256gcmv1
9.229.229.22ascon128av12
11.2811.2811.28ascon128v12
11.2911.2911.29ascon80pqv12
12.9512.9913.59T:xoodyakround3
19.2119.3019.36ascon128abi32v12
29.5129.5229.52ascon128bi32v12
28.9529.6230.16T:schwaemm256128v2
30.0230.1630.27T:grain128aeadv2
34.9635.3635.69T:schwaemm128128v2
35.6735.6835.69T:giftcofb128v1
37.1637.3137.52T:schwaemm256256v2
37.4237.5637.88T:schwaemm192192v2
37.9838.0038.28T:isapa128av20
38.1638.8138.81romulusn
51.2151.2351.48romulusm
63.6863.7363.73T:tinyjambu128v2
72.9572.9672.96T:tinyjambu256v2
74.6274.6274.62T:tinyjambu192v2
75.3875.5075.95romulust
87.2388.1588.67T:isapk128av20
168.17168.18168.26T:isapa128v20
183.10183.53184.37T:elephant200v2
575.41576.09576.95T:isapk128v20
1190.411191.741193.02T:isapxv20
7092.727095.447101.69T:elephant176v2
7957.087959.177967.05T:elephant160v2

amd64; Raptor Cove (b06a2); 2023 Intel Core i7-13700H, P cores; 6 x 4800MHz; raptor, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.411.421.43T:aes128gcmv1
1.461.541.56aes256gcmv1
6.456.516.59ascon128av12
9.829.879.90ascon80pqv12
9.959.9910.02ascon128v12
12.4012.4412.54T:schwaemm256128v2
12.8513.0213.18ascon128abi32v12
13.2113.2513.29T:xoodyakround3
16.3916.4816.55T:schwaemm192192v2
17.2817.3717.43T:schwaemm256256v2
18.2218.2718.30T:schwaemm128128v2
19.0919.1219.18ascon128bi32v12
23.1523.1923.24T:grain128aeadv2
33.0233.0733.12T:giftcofb128v1
38.7338.7538.81romulusn
39.2939.4039.58T:isapa128v20
39.4139.4939.54T:isapa128av20
47.4548.0048.14T:isapk128av20
62.1762.2262.28romulusm
64.4664.8265.24T:isapk128v20
65.4665.6165.70T:tinyjambu128v2
77.9978.0478.14T:tinyjambu192v2
83.8583.8984.03T:tinyjambu256v2
129.64129.77129.86romulust
161.35161.93162.57T:isapxv20
165.95167.86168.63T:elephant200v2
5699.425706.575732.88T:elephant176v2
5894.335897.405908.06T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.201.211.25T:aes128gcmv1
1.401.411.42aes256gcmv1
6.416.466.47ascon128av12
9.599.619.63ascon80pqv12
9.679.729.89ascon128v12
12.4412.4812.56T:schwaemm256128v2
13.0513.1913.31ascon128abi32v12
13.1613.2313.26T:xoodyakround3
16.4016.4816.51T:schwaemm192192v2
17.2717.3617.43T:schwaemm256256v2
18.2418.2718.34T:schwaemm128128v2
19.1819.2619.31ascon128bi32v12
22.5122.5322.57T:grain128aeadv2
33.0633.0833.13T:giftcofb128v1
38.8038.8538.94romulusn
39.2239.3239.48T:isapa128v20
39.4039.4739.57T:isapa128av20
47.3947.7248.06T:isapk128av20
62.1562.2862.35romulusm
64.1864.8465.65T:isapk128v20
65.4265.4665.49T:tinyjambu128v2
77.8477.9377.96T:tinyjambu192v2
84.0184.0784.10T:tinyjambu256v2
129.64129.75130.19romulust
163.38163.93164.52T:isapxv20
168.55169.18169.92T:elephant200v2
5697.515706.965734.97T:elephant176v2
5890.705895.725902.89T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.191.201.26T:aes128gcmv1
1.401.411.42aes256gcmv1
6.436.456.50ascon128av12
9.569.599.65ascon80pqv12
9.669.819.91ascon128v12
12.4512.5112.59T:schwaemm256128v2
13.0713.1613.19ascon128abi32v12
13.1113.1813.26T:xoodyakround3
16.3316.4316.47T:schwaemm192192v2
17.3017.3617.40T:schwaemm256256v2
18.2518.2818.33T:schwaemm128128v2
19.0919.1419.19ascon128bi32v12
19.4819.6119.72T:isapa128v20
22.5022.5522.58T:grain128aeadv2
26.2826.3826.48T:isapa128av20
31.8032.3732.41T:isapk128av20
33.0733.1633.23T:giftcofb128v1
38.8038.8538.92romulusn
40.5440.5840.68T:isapk128v20
44.6044.6844.87romulust
62.1962.2562.32romulusm
65.4165.4465.75T:tinyjambu128v2
77.8877.9377.98T:tinyjambu192v2
83.8483.8883.94T:tinyjambu256v2
98.7698.8998.96T:isapxv20
167.61168.41169.03T:elephant200v2
5698.695704.355714.10T:elephant176v2
5891.855894.495896.83T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.850.860.87T:aes128gcmv1
0.920.930.93aes256gcmv1
6.476.496.53ascon128av12
9.769.799.82ascon80pqv12
9.749.849.90ascon128v12
10.1710.2010.24T:xoodyakround3
12.3212.3612.39T:schwaemm256128v2
13.3113.3413.37ascon128abi32v12
16.3416.4416.46T:schwaemm192192v2
17.2617.3317.40T:schwaemm256256v2
18.2018.2318.26T:schwaemm128128v2
19.2519.2819.32ascon128bi32v12
23.0623.1523.19T:grain128aeadv2
29.4229.5029.58T:isapa128v20
31.1031.1331.16romulusn
32.7232.7732.82T:isapa128av20
32.9432.9833.02T:giftcofb128v1
40.3440.5940.85T:isapk128av20
42.8142.8742.93romulusm
52.3352.9053.16T:isapk128v20
53.5653.6253.66T:tinyjambu128v2
61.0261.0461.11T:tinyjambu192v2
63.3163.3363.48T:tinyjambu256v2
87.0387.1487.19romulust
124.07124.41126.80T:elephant200v2
128.93130.09130.44T:isapxv20
4258.614268.094273.79T:elephant176v2
4420.224423.264428.60T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.750.770.78T:aes128gcmv1
0.850.860.86aes256gcmv1
6.436.456.46ascon128av12
9.709.739.75ascon80pqv12
9.729.799.82ascon128v12
10.1210.1510.18T:xoodyakround3
12.3312.3712.42T:schwaemm256128v2
13.1513.2513.30ascon128abi32v12
16.3216.3916.44T:schwaemm192192v2
17.2117.2617.38T:schwaemm256256v2
18.1818.2118.23T:schwaemm128128v2
19.2419.2819.31ascon128bi32v12
22.8022.8622.88T:grain128aeadv2
29.4429.5229.60T:isapa128v20
31.1231.1431.18romulusn
32.7132.7432.81T:isapa128av20
33.0033.0633.10T:giftcofb128v1
40.1940.4540.65T:isapk128av20
42.8842.9443.08romulusm
52.3752.8353.08T:isapk128v20
53.4853.5153.53T:tinyjambu128v2
60.9660.9861.01T:tinyjambu192v2
63.4063.4263.45T:tinyjambu256v2
86.9787.0387.14romulust
123.70124.46125.42T:elephant200v2
131.15131.39132.01T:isapxv20
4260.174268.674273.65T:elephant176v2
4418.164423.964432.43T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.750.750.77T:aes128gcmv1
0.850.850.86aes256gcmv1
6.446.456.46ascon128av12
9.709.749.76ascon80pqv12
9.709.779.82ascon128v12
10.1410.1910.22T:xoodyakround3
12.3412.3712.43T:schwaemm256128v2
13.2313.2813.32ascon128abi32v12
16.3316.3816.44T:schwaemm192192v2
17.2717.3417.43T:schwaemm256256v2
18.2118.2318.27T:schwaemm128128v2
19.2619.2919.33ascon128bi32v12
19.5419.5819.66T:isapa128v20
22.7722.8022.82T:grain128aeadv2
26.1426.2026.25T:isapa128av20
31.1231.1531.17romulusn
32.2232.3232.68T:isapk128av20
32.9833.0133.03T:giftcofb128v1
40.5340.5940.71T:isapk128v20
42.8642.8943.00romulusm
44.5144.5844.67romulust
53.4953.5453.62T:tinyjambu128v2
60.9660.9861.10T:tinyjambu192v2
63.3163.3463.44T:tinyjambu256v2
98.7898.8698.95T:isapxv20
125.10125.80126.87T:elephant200v2
4261.054266.314275.95T:elephant176v2
4421.384427.534435.52T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.290.310.32T:aes128gcmv1
0.28?0.31?0.32?aes256gcmv1
6.436.456.47ascon128av12
7.077.167.20T:xoodyakround3
9.689.729.75ascon80pqv12
9.739.769.78ascon128v12
12.1812.2512.31T:schwaemm256128v2
13.3113.3413.38ascon128abi32v12
16.2616.3216.39T:schwaemm192192v2
17.1717.3317.37T:schwaemm256256v2
18.1518.1718.20T:schwaemm128128v2
19.3719.4919.87ascon128bi32v12
19.5619.6219.73T:isapa128v20
22.9723.0823.12T:grain128aeadv2
23.4523.4923.54romulusn
23.4623.5023.57romulusm
26.0226.1326.32T:isapa128av20
32.2632.3532.46T:isapk128av20
32.9432.9733.08T:giftcofb128v1
40.3640.4640.53T:isapk128v20
41.3741.4141.46T:tinyjambu128v2
42.5842.6042.63T:tinyjambu256v2
43.8343.8643.95T:tinyjambu192v2
44.4544.5444.62romulust
81.7481.8783.27T:elephant200v2
96.6398.29100.07T:isapxv20
2816.572817.822827.75T:elephant176v2
2945.412949.742954.31T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.290.300.32T:aes128gcmv1
0.300.310.33aes256gcmv1
6.446.466.49ascon128av12
7.117.177.21T:xoodyakround3
9.749.769.79ascon128v12
9.729.799.83ascon80pqv12
12.1812.2512.30T:schwaemm256128v2
13.3213.3813.41ascon128abi32v12
16.2516.3416.54T:schwaemm192192v2
17.2017.2617.36T:schwaemm256256v2
18.1218.1618.21T:schwaemm128128v2
19.3219.3819.50ascon128bi32v12
19.5919.6619.73T:isapa128v20
23.0323.1223.18T:grain128aeadv2
23.4523.4923.74romulusm
23.4523.5023.53romulusn
25.9926.0326.11T:isapa128av20
32.2232.3032.41T:isapk128av20
32.9032.9533.00T:giftcofb128v1
40.4140.5040.54T:isapk128v20
41.3541.3941.42T:tinyjambu128v2
42.7342.7842.82T:tinyjambu256v2
43.8343.8743.92T:tinyjambu192v2
44.4644.5244.73romulust
83.2783.7484.15T:elephant200v2
98.6998.8198.93T:isapxv20
2815.732820.052828.84T:elephant176v2
2947.532949.052955.53T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.300.310.32T:aes128gcmv1
0.300.310.33aes256gcmv1
6.446.466.49ascon128av12
7.097.147.21T:xoodyakround3
9.769.789.81ascon128v12
9.749.799.82ascon80pqv12
12.2112.2612.30T:schwaemm256128v2
13.2813.3313.40ascon128abi32v12
16.2816.3416.36T:schwaemm192192v2
17.2017.3217.39T:schwaemm256256v2
18.1218.1518.18T:schwaemm128128v2
19.3619.4019.49ascon128bi32v12
19.5119.5819.67T:isapa128v20
22.9723.0323.09T:grain128aeadv2
23.4323.4923.52romulusn
23.4123.5023.57romulusm
25.9926.0526.13T:isapa128av20
32.2832.3632.43T:isapk128av20
32.9433.0333.09T:giftcofb128v1
40.4140.5040.56T:isapk128v20
41.3441.3841.46T:tinyjambu128v2
42.5642.5942.68T:tinyjambu256v2
43.8943.9944.44T:tinyjambu192v2
44.4444.5344.59romulust
81.3883.5983.84T:elephant200v2
98.8398.9299.05T:isapxv20
2818.372823.732832.34T:elephant176v2
2946.152948.332954.58T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.970.980.98T:aes128gcmv1
1.051.051.06aes256gcmv1
6.646.656.66ascon128av12
9.919.939.97ascon80pqv12
9.869.969.99ascon128v12
10.2910.3110.34T:xoodyakround3
12.7412.7812.82T:schwaemm256128v2
13.5913.6413.70ascon128abi32v12
16.8016.8116.84T:schwaemm192192v2
17.8017.8417.86T:schwaemm256256v2
18.4318.4518.48T:schwaemm128128v2
19.6119.6419.67ascon128bi32v12
23.4723.4923.53T:grain128aeadv2
31.3931.4231.44romulusn
33.2333.3033.32T:giftcofb128v1
34.7734.8434.87T:isapa128av20
42.8842.9543.01T:isapa128v20
43.1743.2143.26romulusm
45.6745.8345.85T:isapk128av20
54.1054.1254.21T:tinyjambu128v2
61.5961.6261.68T:tinyjambu192v2
63.8663.8763.88T:tinyjambu256v2
88.3188.3888.49romulust
91.4691.6891.75T:isapk128v20
127.55128.33129.05T:elephant200v2
217.16217.28217.45T:isapxv20
4291.274302.564315.01T:elephant176v2
4469.054471.184473.27T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.880.890.91T:aes128gcmv1
0.990.991.00aes256gcmv1
6.606.626.64ascon128av12
9.829.859.89ascon80pqv12
9.879.939.99ascon128v12
10.2410.2610.29T:xoodyakround3
12.7312.7712.80T:schwaemm256128v2
13.5713.5913.63ascon128abi32v12
16.7116.7616.80T:schwaemm192192v2
17.7317.8017.85T:schwaemm256256v2
18.4418.4518.50T:schwaemm128128v2
19.5919.6319.66ascon128bi32v12
23.1523.1823.20T:grain128aeadv2
31.4331.4731.53romulusn
33.2733.3133.41T:giftcofb128v1
34.7834.8334.87T:isapa128av20
42.8542.9142.95T:isapa128v20
43.2643.3143.35romulusm
45.7345.7945.84T:isapk128av20
54.0154.0254.03T:tinyjambu128v2
61.4861.5061.54T:tinyjambu192v2
63.9763.9864.03T:tinyjambu256v2
88.3488.4288.45romulust
91.4091.4791.68T:isapk128v20
126.35128.07128.39T:elephant200v2
219.75219.79219.96T:isapxv20
4292.034298.944304.51T:elephant176v2
4469.264470.324472.80T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.880.890.91T:aes128gcmv1
0.990.991.00aes256gcmv1
6.596.616.63ascon128av12
9.859.879.88ascon80pqv12
9.859.889.94ascon128v12
10.2510.2810.30T:xoodyakround3
12.7112.7312.77T:schwaemm256128v2
13.5513.5913.61ascon128abi32v12
16.7516.8016.87T:schwaemm192192v2
17.7417.7817.80T:schwaemm256256v2
18.4318.4618.49T:schwaemm128128v2
19.5919.6219.65ascon128bi32v12
23.1123.1523.18T:grain128aeadv2
26.3726.4026.51T:isapa128v20
27.3327.3727.41T:isapa128av20
31.4631.4931.54romulusn
33.2633.3333.37T:giftcofb128v1
35.6335.7735.85T:isapk128av20
43.2343.2643.29romulusm
45.8545.8845.92romulust
53.9954.0154.12T:tinyjambu128v2
61.0961.1161.13T:isapk128v20
61.5061.5161.65T:tinyjambu192v2
63.8763.8963.90T:tinyjambu256v2
126.74127.73127.93T:elephant200v2
144.06144.50144.64T:isapxv20
4291.924294.454304.38T:elephant176v2
4468.604472.024482.56T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.645.695.80T:aes128gcmv1
5.895.956.13aes256gcmv1
9.8910.0710.27ascon128av12
12.8812.9513.10ascon128v12
12.9413.0613.30ascon80pqv12
14.7714.8915.29T:xoodyakround3
20.3420.4820.79ascon128abi32v12
20.6921.0221.43T:schwaemm256128v2
23.6623.7724.24T:schwaemm128128v2
26.5026.7627.12ascon128bi32v12
27.2327.4827.96T:schwaemm192192v2
28.4128.8028.95T:schwaemm256256v2
31.2631.4031.58T:grain128aeadv2
37.7738.0138.25romulusn
39.4639.5539.66T:giftcofb128v1
50.4550.5950.87romulusm
65.4865.8266.73T:tinyjambu128v2
74.0374.2674.53T:tinyjambu192v2
76.8777.2377.69T:tinyjambu256v2
81.8081.9882.29T:isapa128av20
117.78117.91118.33romulust
157.30157.98161.16T:isapk128av20
176.65180.67181.79T:elephant200v2
350.02350.90352.19T:isapa128v20
967.95968.98979.95T:isapk128v20
2191.302192.262193.93T:isapxv20
5336.235339.545350.16T:elephant176v2
5977.365979.616012.68T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.425.485.55T:aes128gcmv1
5.475.515.55aes256gcmv1
9.9110.0010.20ascon128av12
12.8913.0013.09ascon128v12
12.9313.0913.39ascon80pqv12
14.7014.8614.98T:xoodyakround3
20.2320.5220.73ascon128abi32v12
20.7120.9921.63T:schwaemm256128v2
23.7123.7724.21T:schwaemm128128v2
26.6226.8327.08ascon128bi32v12
27.2927.4627.83T:schwaemm192192v2
28.0628.7729.40T:schwaemm256256v2
31.2131.2931.38T:grain128aeadv2
38.3938.4938.63romulusn
39.6039.7640.00T:giftcofb128v1
52.6052.8253.02romulusm
65.6265.9266.39T:tinyjambu128v2
74.1674.4274.71T:tinyjambu192v2
76.5876.9177.26T:tinyjambu256v2
81.8482.0982.35T:isapa128av20
117.65118.44119.05romulust
157.28157.71158.59T:isapk128av20
176.30179.95180.47T:elephant200v2
350.55351.49352.10T:isapa128v20
967.96969.08976.85T:isapk128v20
2225.232228.522229.22T:isapxv20
5334.095336.465343.90T:elephant176v2
5976.435978.796009.52T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.415.455.53T:aes128gcmv1
5.455.545.66aes256gcmv1
9.919.9910.05ascon128av12
12.8212.8913.08ascon128v12
12.9313.0613.25ascon80pqv12
14.7714.8715.27T:xoodyakround3
20.3420.5820.74ascon128abi32v12
20.5221.1221.27T:schwaemm256128v2
23.6823.8324.02T:schwaemm128128v2
26.7927.0027.12ascon128bi32v12
27.3027.5728.02T:schwaemm192192v2
27.9828.1728.58T:schwaemm256256v2
31.1431.2331.38T:grain128aeadv2
38.3438.4738.73romulusn
39.7439.7739.90T:giftcofb128v1
52.5552.6852.87romulusm
54.2654.5954.97T:isapa128av20
65.6265.9166.54T:tinyjambu128v2
74.2374.3874.68T:tinyjambu192v2
74.6375.2775.57romulust
76.7277.1277.32T:tinyjambu256v2
101.86102.11102.91T:isapk128av20
177.53178.39179.03T:elephant200v2
182.99183.29183.97T:isapa128v20
516.41516.77517.31T:isapk128v20
1165.321166.021166.77T:isapxv20
5340.135372.215467.98T:elephant176v2
5973.485977.235979.30T:elephant160v2

amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,1f626960,5600000, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.520.530.54T:aes128gcmv1
0.600.620.63T:aes256gcmv1
1.531.541.55aes256gcmv1
6.546.576.60ascon128av12
9.839.869.91ascon128v12
9.9710.0110.07ascon80pqv12
13.0413.0713.14ascon128abi32v12
13.3913.4413.49T:schwaemm256128v2
15.2715.3515.42T:xoodyakround3
17.7317.7817.84T:schwaemm192192v2
18.9319.0019.16T:schwaemm256256v2
19.8419.8819.91T:schwaemm128128v2
19.9019.9520.03ascon128bi32v12
24.2924.4525.34T:grain128aeadv2
38.4638.5038.55romulusn
39.0139.1839.59T:isapa128av20
39.0639.6439.80T:isapa128v20
39.7539.8339.88T:giftcofb128v1
48.9949.6050.10T:isapk128av20
55.0055.0655.15T:tinyjambu128v2
61.7661.8061.86romulusm
66.4866.5566.68T:tinyjambu192v2
66.4267.1668.65T:isapk128v20
71.1171.2671.29T:tinyjambu256v2
110.00110.42110.68T:elephant200v2
119.31119.42119.49romulust
119.10119.78121.36T:isapxv20
5794.715810.855830.95T:elephant176v2
5888.385890.585892.13T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.46?0.52?0.54?T:aes128gcmv1
0.590.600.65T:aes256gcmv1
1.411.421.43aes256gcmv1
6.586.646.73ascon128av12
9.679.7610.09ascon80pqv12
9.749.809.85ascon128v12
13.0113.0913.13ascon128abi32v12
13.3513.4113.45T:schwaemm256128v2
15.1515.2615.33T:xoodyakround3
17.6217.7417.79T:schwaemm192192v2
19.7619.8319.85T:schwaemm128128v2
19.9420.0320.12ascon128bi32v12
18.9720.1520.42T:schwaemm256256v2
23.6223.7125.35T:grain128aeadv2
38.5538.5638.64romulusn
39.3239.4439.79T:isapa128v20
39.5239.6439.80T:isapa128av20
39.8139.8339.87T:giftcofb128v1
48.9949.4550.13T:isapk128av20
54.8254.9055.00T:tinyjambu128v2
61.7861.8761.97romulusm
66.3666.4866.64T:tinyjambu192v2
66.2067.3767.92T:isapk128v20
70.6371.1571.49T:tinyjambu256v2
110.04110.33111.30T:elephant200v2
119.30119.41119.55romulust
120.89121.44121.74T:isapxv20
5774.645794.815820.40T:elephant176v2
5886.555891.735894.60T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.510.530.56T:aes128gcmv1
0.600.610.62T:aes256gcmv1
1.411.421.43aes256gcmv1
6.566.636.69ascon128av12
9.739.789.85ascon80pqv12
9.779.789.83ascon128v12
13.0513.1013.14ascon128abi32v12
13.3813.4213.45T:schwaemm256128v2
15.1615.2015.27T:xoodyakround3
17.6717.7317.77T:schwaemm192192v2
18.8918.9819.14T:schwaemm256256v2
19.4119.4419.52T:isapa128v20
19.7719.8119.88T:schwaemm128128v2
20.0520.0720.20ascon128bi32v12
23.6323.7125.31T:grain128aeadv2
26.2726.3726.48T:isapa128av20
33.0233.0933.26T:isapk128av20
38.5538.6238.65romulusn
39.7839.8439.88T:giftcofb128v1
41.2841.3241.46romulust
42.2043.1443.70T:isapk128v20
54.8554.9255.00T:tinyjambu128v2
61.7561.8361.93romulusm
66.4266.5066.69T:tinyjambu192v2
70.6070.7171.42T:tinyjambu256v2
72.1572.3372.63T:isapxv20
110.44110.93111.01T:elephant200v2
5766.085792.665806.19T:elephant176v2
5890.795891.825892.58T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.370.380.38T:aes128gcmv1
0.420.430.43T:aes256gcmv1
0.910.920.93aes256gcmv1
6.506.556.58ascon128av12
9.649.699.85ascon80pqv12
9.779.809.83ascon128v12
11.4711.5311.58T:xoodyakround3
13.2413.3013.35ascon128abi32v12
13.3313.4013.42T:schwaemm256128v2
17.6517.7517.83T:schwaemm192192v2
18.8619.0019.10T:schwaemm256256v2
19.8119.8519.87T:schwaemm128128v2
20.1220.1720.24ascon128bi32v12
24.1924.2625.28T:grain128aeadv2
29.4329.5929.70T:isapa128v20
30.8630.8830.91romulusn
32.4232.4632.54T:isapa128av20
39.7739.8039.83T:giftcofb128v1
41.5242.0842.28T:isapk128av20
42.5242.5542.59romulusm
44.9745.0245.09T:tinyjambu128v2
52.1352.1952.24T:tinyjambu192v2
53.7953.9054.00T:tinyjambu256v2
53.3954.7455.61T:isapk128v20
80.3780.4380.49romulust
82.8282.9783.07T:elephant200v2
96.7897.1697.92T:isapxv20
4318.244334.164342.90T:elephant176v2
4414.274416.124417.60T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.350.370.38T:aes128gcmv1
0.400.410.42T:aes256gcmv1
0.840.860.87aes256gcmv1
6.486.536.57ascon128av12
9.649.749.80ascon80pqv12
9.749.779.81ascon128v12
11.4011.4411.50T:xoodyakround3
13.2813.3213.36ascon128abi32v12
13.3013.3613.39T:schwaemm256128v2
17.6917.7517.77T:schwaemm192192v2
18.8919.0219.81T:schwaemm256256v2
19.7919.8119.84T:schwaemm128128v2
20.1220.1720.20ascon128bi32v12
23.8424.0125.24T:grain128aeadv2
29.2529.6029.69T:isapa128v20
30.8830.9130.98romulusn
32.6732.8632.93T:isapa128av20
39.7739.8139.84T:giftcofb128v1
41.4341.6742.16T:isapk128av20
42.5342.5842.67romulusm
44.8944.9245.03T:tinyjambu128v2
52.1152.1652.28T:tinyjambu192v2
53.6553.7153.95T:tinyjambu256v2
54.2055.0355.90T:isapk128v20
80.3380.4080.49romulust
82.8583.1183.17T:elephant200v2
96.3396.5396.98T:isapxv20
4322.474339.694349.09T:elephant176v2
4414.164416.374418.15T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.34?0.37?0.38?T:aes128gcmv1
0.41?0.42?0.46?T:aes256gcmv1
0.850.860.87aes256gcmv1
6.526.556.58ascon128av12
9.569.629.71ascon80pqv12
9.759.779.80ascon128v12
11.4111.4311.47T:xoodyakround3
13.3113.3513.38ascon128abi32v12
13.3213.3613.41T:schwaemm256128v2
17.6617.6817.72T:schwaemm192192v2
18.8718.9219.08T:schwaemm256256v2
19.4319.4719.52T:isapa128v20
19.8119.8319.85T:schwaemm128128v2
20.0420.0920.16ascon128bi32v12
23.9624.0325.20T:grain128aeadv2
26.3226.3626.40T:isapa128av20
30.9030.9330.97romulusn
33.2033.6334.12T:isapk128av20
39.7739.8339.85T:giftcofb128v1
41.3441.3941.44romulust
41.6242.1942.67T:isapk128v20
42.5442.6142.69romulusm
44.9344.9945.12T:tinyjambu128v2
52.0952.1552.21T:tinyjambu192v2
53.8553.9454.01T:tinyjambu256v2
72.5872.7373.07T:isapxv20
82.8482.9383.49T:elephant200v2
4332.934344.154351.06T:elephant176v2
4416.134417.364418.26T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.21?0.23?0.25?T:aes128gcmv1
0.21?0.24?0.25?T:aes256gcmv1
0.29?0.31?0.33?aes256gcmv1
6.436.526.59ascon128av12
7.597.667.71T:xoodyakround3
9.689.749.76ascon128v12
9.6010.1910.30ascon80pqv12
13.1613.2413.30T:schwaemm256128v2
13.4813.6413.82ascon128abi32v12
17.6317.7017.81T:schwaemm192192v2
18.7318.8220.14T:schwaemm256256v2
19.4319.4919.56T:isapa128v20
19.7919.8119.85T:schwaemm128128v2
20.3220.4720.62ascon128bi32v12
23.2223.2623.28romulusn
23.2623.3223.38romulusm
24.0924.1925.16T:grain128aeadv2
26.2326.2926.43T:isapa128av20
33.0933.8734.22T:isapk128av20
34.8334.8734.93T:tinyjambu128v2
36.3036.3636.44T:tinyjambu256v2
37.6537.7637.85T:tinyjambu192v2
39.8039.8339.89T:giftcofb128v1
41.2941.3541.43romulust
41.1041.7642.87T:isapk128v20
55.6655.8756.28T:elephant200v2
72.4072.6073.75T:isapxv20
2847.942857.372872.09T:elephant176v2
2942.082943.402944.16T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.20?0.23?0.24?T:aes128gcmv1
0.21?0.23?0.25?T:aes256gcmv1
0.28?0.32?0.33?aes256gcmv1
6.446.486.56ascon128av12
7.547.617.68T:xoodyakround3
9.589.639.87ascon80pqv12
9.709.749.77ascon128v12
13.2113.3313.42T:schwaemm256128v2
13.5013.5713.70ascon128abi32v12
17.6617.7117.74T:schwaemm192192v2
18.7018.8620.55T:schwaemm256256v2
19.4019.4719.53T:isapa128v20
19.8019.8319.87T:schwaemm128128v2
20.0020.0720.18ascon128bi32v12
23.2223.2623.31romulusn
23.2623.3023.32romulusm
24.2924.3825.12T:grain128aeadv2
26.2926.3526.46T:isapa128av20
32.3033.1733.92T:isapk128av20
34.8134.8634.92T:tinyjambu128v2
36.2936.3736.44T:tinyjambu256v2
37.5537.6437.69T:tinyjambu192v2
39.7639.8039.86T:giftcofb128v1
41.2741.3641.44romulust
40.6541.8842.38T:isapk128v20
56.1156.2156.31T:elephant200v2
72.8072.9773.19T:isapxv20
2849.292861.512881.16T:elephant176v2
2939.922942.852943.95T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.22?0.23?0.26?T:aes256gcmv1
0.22?0.24?0.29?T:aes128gcmv1
0.290.300.31aes256gcmv1
6.416.476.53ascon128av12
7.567.617.68T:xoodyakround3
9.599.649.86ascon80pqv12
9.699.729.75ascon128v12
13.2613.3113.38T:schwaemm256128v2
13.5213.5913.68ascon128abi32v12
17.6117.6617.71T:schwaemm192192v2
18.7518.9419.31T:schwaemm256256v2
19.4119.4519.51T:isapa128v20
19.7419.8219.85T:schwaemm128128v2
20.0320.1020.19ascon128bi32v12
23.2323.2723.34romulusm
23.2423.2923.32romulusn
24.0424.1125.02T:grain128aeadv2
26.2626.3926.48T:isapa128av20
32.4433.1133.47T:isapk128av20
34.8334.8734.95T:tinyjambu128v2
36.3036.3536.43T:tinyjambu256v2
37.5137.6037.71T:tinyjambu192v2
39.7439.7739.86T:giftcofb128v1
41.3041.3641.44romulust
40.2841.5542.45T:isapk128v20
55.7855.9356.13T:elephant200v2
72.2972.5974.03T:isapxv20
2850.022866.472876.51T:elephant176v2
2939.752941.362942.74T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.720.730.74T:aes128gcmv1
0.780.780.79T:aes256gcmv1
1.061.061.06aes256gcmv1
6.696.716.73ascon128av12
9.729.799.95ascon80pqv12
9.919.939.96ascon128v12
11.5911.6111.67T:xoodyakround3
13.5113.6613.67ascon128abi32v12
13.7413.7613.79T:schwaemm256128v2
18.0918.1518.19T:schwaemm192192v2
19.5419.5721.00T:schwaemm256256v2
20.0820.1020.14T:schwaemm128128v2
20.4320.4920.54ascon128bi32v12
24.5524.6525.46T:grain128aeadv2
31.1631.1731.19romulusn
36.1036.2036.55T:isapa128av20
40.1340.1540.18T:giftcofb128v1
42.6942.8042.97T:isapa128v20
42.8142.8442.90romulusm
45.5145.5245.57T:tinyjambu128v2
46.6646.8647.23T:isapk128av20
52.6752.7452.77T:tinyjambu192v2
54.3054.3554.39T:tinyjambu256v2
81.5981.6281.66romulust
84.5284.6584.94T:elephant200v2
93.4594.4694.90T:isapk128v20
159.93160.19160.78T:isapxv20
4350.984371.984387.04T:elephant176v2
4464.554466.174466.89T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.720.730.75T:aes128gcmv1
0.780.790.79T:aes256gcmv1
1.001.011.01aes256gcmv1
6.666.696.74ascon128av12
9.799.839.92ascon80pqv12
9.889.899.91ascon128v12
11.5211.5311.60T:xoodyakround3
13.6013.6313.66ascon128abi32v12
13.7313.7613.80T:schwaemm256128v2
18.0718.1218.16T:schwaemm192192v2
19.5419.5719.59T:schwaemm256256v2
20.0420.0720.10T:schwaemm128128v2
20.3520.3720.45ascon128bi32v12
24.3224.4225.56T:grain128aeadv2
31.2231.2431.25romulusn
36.4236.6736.76T:isapa128av20
40.1340.1540.19T:giftcofb128v1
42.7042.8642.94T:isapa128v20
42.9042.9943.05romulusm
45.3745.4145.43T:tinyjambu128v2
46.7746.9647.11T:isapk128av20
52.5852.6652.68T:tinyjambu192v2
54.0454.0954.39T:tinyjambu256v2
81.5781.6081.66romulust
84.3984.5785.10T:elephant200v2
93.7794.0394.40T:isapk128v20
159.84160.44161.82T:isapxv20
4360.964371.254387.98T:elephant176v2
4461.374463.784467.77T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.720.720.73T:aes128gcmv1
0.780.790.79T:aes256gcmv1
1.001.011.01aes256gcmv1
6.656.686.72ascon128av12
9.809.879.99ascon80pqv12
9.879.909.93ascon128v12
11.5411.5611.58T:xoodyakround3
13.6213.6513.69ascon128abi32v12
13.7513.8213.84T:schwaemm256128v2
18.0718.1218.16T:schwaemm192192v2
19.5219.5620.72T:schwaemm256256v2
20.0420.0720.11T:schwaemm128128v2
20.3420.3820.41ascon128bi32v12
24.3424.3825.53T:grain128aeadv2
26.2326.2426.27T:isapa128v20
28.2828.3328.39T:isapa128av20
31.2231.2431.26romulusn
36.4536.6837.20T:isapk128av20
40.1340.1640.18T:giftcofb128v1
42.4742.5142.58romulust
42.8842.9443.03romulusm
45.3745.4045.43T:tinyjambu128v2
52.6052.6352.69T:tinyjambu192v2
54.3754.4054.44T:tinyjambu256v2
61.9762.4062.61T:isapk128v20
84.4884.8685.09T:elephant200v2
104.83104.96105.21T:isapxv20
4346.034358.164366.79T:elephant176v2
4464.284465.494468.08T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.625.685.75aes256gcmv1
8.869.049.29T:aes128gcmv1
9.239.449.68T:aes256gcmv1
10.4010.4610.74ascon128av12
12.8513.0213.08ascon128v12
12.9813.1613.41ascon80pqv12
16.8017.0917.47T:xoodyakround3
19.9220.2020.62ascon128abi32v12
22.4922.7223.35T:schwaemm256128v2
25.5225.7225.98T:schwaemm128128v2
27.2227.4427.62ascon128bi32v12
28.9729.2829.52T:schwaemm192192v2
30.9831.2033.45T:schwaemm256256v2
32.6132.7133.31T:grain128aeadv2
37.4537.6237.80romulusn
47.3047.4547.56T:giftcofb128v1
50.0250.3750.93romulusm
55.8856.1456.44T:tinyjambu128v2
64.2464.8065.29T:tinyjambu192v2
65.6966.2366.73T:tinyjambu256v2
108.25108.58108.88romulust
118.57118.83119.30T:isapa128av20
119.09119.25119.52T:elephant200v2
150.54151.16151.53T:isapk128av20
349.20349.64349.96T:isapa128v20
988.41992.39998.54T:isapk128v20
1599.951602.341604.79T:isapxv20
5407.145463.365474.98T:elephant176v2
5978.435982.955986.67T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.745.866.00aes256gcmv1
8.818.889.23T:aes128gcmv1
9.269.349.72T:aes256gcmv1
10.0910.1910.29ascon128av12
12.9112.9713.10ascon80pqv12
12.8713.0613.17ascon128v12
16.6516.9417.27T:xoodyakround3
20.2720.5220.74ascon128abi32v12
22.3022.4522.58T:schwaemm256128v2
25.4625.5025.67T:schwaemm128128v2
27.1627.4527.91ascon128bi32v12
29.5029.7929.99T:schwaemm192192v2
32.6733.0333.81T:grain128aeadv2
32.9233.2533.37T:schwaemm256256v2
37.7938.1138.27romulusn
47.3647.4847.54T:giftcofb128v1
52.1252.2352.39romulusm
55.8656.2356.64T:tinyjambu128v2
64.1264.3664.80T:tinyjambu192v2
65.2766.1666.59T:tinyjambu256v2
108.13108.88109.60romulust
119.42119.81120.02T:isapa128av20
119.73120.47121.17T:elephant200v2
150.21151.05151.70T:isapk128av20
349.30349.75350.31T:isapa128v20
980.27992.94997.32T:isapk128v20
1596.951597.711599.66T:isapxv20
5400.265406.685412.94T:elephant176v2
5980.895983.165986.89T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.795.845.90aes256gcmv1
8.828.969.09T:aes128gcmv1
9.249.319.52T:aes256gcmv1
10.1910.2610.36ascon128av12
12.9513.0113.15ascon128v12
12.8913.0213.13ascon80pqv12
16.5517.3117.64T:xoodyakround3
20.2720.3420.55ascon128abi32v12
22.3922.5022.68T:schwaemm256128v2
25.4125.6525.72T:schwaemm128128v2
27.1727.4827.74ascon128bi32v12
29.3829.5929.93T:schwaemm192192v2
30.9731.5332.95T:schwaemm256256v2
32.5332.8233.41T:grain128aeadv2
37.9238.0938.27romulusn
47.5547.6247.80T:giftcofb128v1
52.1152.1952.47romulusm
55.9156.1656.54T:tinyjambu128v2
64.1664.3764.73T:tinyjambu192v2
65.8566.4866.90T:tinyjambu256v2
68.9469.4169.88romulust
73.6173.9574.12T:isapa128av20
98.5298.7499.46T:isapk128av20
119.49119.84120.47T:elephant200v2
181.95182.16182.62T:isapa128v20
515.15519.84524.99T:isapk128v20
835.47836.81837.49T:isapxv20
5418.865467.345481.27T:elephant176v2
5976.645980.055981.38T:elephant160v2

amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,1f626960,3300000, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.49?0.58?0.63?T:aes128gcmv1
0.61?0.67?0.70?T:aes256gcmv1
1.391.401.42aes256gcmv1
6.436.456.46ascon128av12
8.918.928.94ascon80pqv12
8.928.948.96ascon128v12
11.1611.1811.19ascon128abi32v12
16.6216.6516.68ascon128bi32v12
16.5516.9017.04T:schwaemm256128v2
17.3117.4117.53T:xoodyakround3
21.6121.7122.51T:schwaemm256256v2
22.0022.2922.35T:schwaemm192192v2
23.3523.4223.61T:schwaemm128128v2
27.1727.2027.27T:grain128aeadv2
36.5136.5736.62romulusn
36.9337.0737.17T:isapa128v20
37.5037.5737.64T:isapa128av20
38.6439.0339.06T:giftcofb128v1
51.7551.8852.77T:tinyjambu128v2
59.8059.8659.88romulusm
60.0760.2160.45T:isapk128av20
61.1061.6662.08T:tinyjambu256v2
68.9969.0669.12T:tinyjambu192v2
79.8680.1180.36T:isapk128v20
114.66114.72114.99romulust
145.56146.75148.62T:elephant200v2
158.54159.16159.53T:isapxv20
6387.006390.746424.16T:elephant176v2
7675.147729.577876.67T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.52?0.56?0.58?T:aes128gcmv1
0.54?0.67?0.72?T:aes256gcmv1
1.401.421.43aes256gcmv1
6.026.046.05ascon128av12
8.908.928.94ascon128v12
8.928.938.96ascon80pqv12
11.1011.1211.14ascon128abi32v12
16.7716.8016.82ascon128bi32v12
16.5716.8817.04T:schwaemm256128v2
17.4717.6117.70T:xoodyakround3
21.6321.8322.45T:schwaemm256256v2
21.9522.0722.34T:schwaemm192192v2
23.3823.4623.60T:schwaemm128128v2
27.0027.0727.23T:grain128aeadv2
36.5636.5836.66romulusn
36.8937.0737.18T:isapa128v20
37.4537.5137.59T:isapa128av20
38.9339.0639.09T:giftcofb128v1
50.7350.8251.72T:tinyjambu128v2
59.6759.7759.92romulusm
60.1060.2360.48T:isapk128av20
60.8160.9362.26T:tinyjambu256v2
68.8268.8869.16T:tinyjambu192v2
79.7680.0180.19T:isapk128v20
114.68114.74115.05romulust
145.04146.46148.23T:elephant200v2
158.54159.35159.66T:isapxv20
6390.676424.556473.17T:elephant176v2
7672.567785.897876.95T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.52?0.57?0.62?T:aes128gcmv1
0.57?0.67?0.70?T:aes256gcmv1
1.411.421.43aes256gcmv1
6.036.066.08ascon128av12
8.898.918.94ascon128v12
8.928.948.97ascon80pqv12
11.1011.1111.13ascon128abi32v12
16.7716.8016.81ascon128bi32v12
16.6316.9017.03T:schwaemm256128v2
17.5117.6117.72T:xoodyakround3
18.4418.4918.60T:isapa128v20
21.6021.8322.50T:schwaemm256256v2
21.9522.2722.34T:schwaemm192192v2
23.3823.4423.59T:schwaemm128128v2
24.9324.9625.02T:isapa128av20
27.0827.1227.25T:grain128aeadv2
36.5636.5836.59romulusn
38.9339.0439.07T:giftcofb128v1
39.1939.2339.27romulust
39.8339.9540.07T:isapk128av20
49.9550.1550.31T:isapk128v20
50.6450.8651.87T:tinyjambu128v2
59.7960.0660.18romulusm
60.7760.9061.64T:tinyjambu256v2
68.8568.9169.14T:tinyjambu192v2
92.8393.3693.52T:isapxv20
145.07146.44148.23T:elephant200v2
6423.836424.806472.88T:elephant176v2
7675.167786.267876.68T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.39?0.42?0.47?T:aes128gcmv1
0.42?0.47?0.51?T:aes256gcmv1
0.920.940.95aes256gcmv1
6.216.316.36ascon128av12
8.888.928.93ascon80pqv12
8.908.928.93ascon128v12
11.0111.0411.07ascon128abi32v12
13.2713.2813.30T:xoodyakround3
16.5916.6016.62ascon128bi32v12
16.9316.9517.00T:schwaemm256128v2
21.6121.7722.45T:schwaemm256256v2
21.8922.0822.27T:schwaemm192192v2
23.4723.5123.55T:schwaemm128128v2
27.2127.2627.29T:grain128aeadv2
27.6927.7327.77T:isapa128v20
29.8929.9029.94romulusn
31.2131.2331.27T:isapa128av20
38.9839.0239.05T:giftcofb128v1
41.5641.5941.64romulusm
42.6543.1343.36T:tinyjambu128v2
48.9549.2849.46T:tinyjambu256v2
50.1950.3550.51T:isapk128av20
53.7653.8454.26T:tinyjambu192v2
64.9565.0465.22T:isapk128v20
76.9077.0077.04romulust
109.28110.20111.58T:elephant200v2
126.16126.36126.73T:isapxv20
4776.574808.744823.26T:elephant176v2
5793.055840.705886.74T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.39?0.42?0.47?T:aes128gcmv1
0.42?0.47?0.51?T:aes256gcmv1
0.910.930.95aes256gcmv1
6.016.136.17ascon128av12
8.878.898.92ascon128v12
8.888.918.92ascon80pqv12
11.0011.0211.03ascon128abi32v12
13.0013.2113.26T:xoodyakround3
16.6216.6416.66ascon128bi32v12
16.9316.9517.00T:schwaemm256128v2
21.5821.7622.47T:schwaemm256256v2
21.9022.0522.26T:schwaemm192192v2
23.5023.5323.57T:schwaemm128128v2
27.0727.1427.19T:grain128aeadv2
27.6727.7127.74T:isapa128v20
29.8829.9029.94romulusn
31.2231.2431.28T:isapa128av20
39.0239.0339.05T:giftcofb128v1
41.5941.6541.70romulusm
42.1042.3442.88T:tinyjambu128v2
47.7548.0349.03T:tinyjambu256v2
50.1450.3250.46T:isapk128av20
53.6753.7353.84T:tinyjambu192v2
64.9465.0365.21T:isapk128v20
76.8676.9677.05romulust
109.11110.04111.45T:elephant200v2
126.00126.42126.52T:isapxv20
4775.984808.664822.99T:elephant176v2
5792.765839.235886.64T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.40?0.43?0.45?T:aes128gcmv1
0.450.480.49T:aes256gcmv1
0.920.930.93aes256gcmv1
5.996.136.16ascon128av12
8.878.888.89ascon128v12
8.888.918.92ascon80pqv12
11.0111.0211.04ascon128abi32v12
13.2713.3613.43T:xoodyakround3
16.6316.6416.67ascon128bi32v12
16.9316.9516.99T:schwaemm256128v2
18.4318.4618.50T:isapa128v20
21.5721.7422.46T:schwaemm256256v2
21.9022.0722.28T:schwaemm192192v2
23.4923.5623.66T:schwaemm128128v2
24.9825.0225.06T:isapa128av20
27.1227.1427.20T:grain128aeadv2
29.8829.9229.94romulusn
39.0239.0439.05T:giftcofb128v1
39.1339.1539.18romulust
40.1340.1840.23T:isapk128av20
41.5941.6441.67romulusm
42.0942.2842.99T:tinyjambu128v2
47.2348.0548.93T:tinyjambu256v2
49.9950.0650.15T:isapk128v20
53.5753.7253.81T:tinyjambu192v2
93.1593.3293.47T:isapxv20
109.13110.04111.44T:elephant200v2
4799.074808.694823.32T:elephant176v2
5811.905839.525885.68T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.20?0.24?0.29?T:aes128gcmv1
0.23?0.26?0.29?T:aes256gcmv1
0.460.480.48aes256gcmv1
5.966.156.19ascon128av12
8.838.868.88ascon128v12
8.878.898.90ascon80pqv12
9.019.059.08T:xoodyakround3
10.8810.9110.93ascon128abi32v12
16.5416.5416.57ascon128bi32v12
16.8316.8716.94T:schwaemm256128v2
18.3818.4418.46T:isapa128v20
21.5621.6822.43T:schwaemm256256v2
22.0622.1722.21T:schwaemm192192v2
23.2123.2223.27romulusn
23.3023.3123.33romulusm
23.3923.4323.51T:schwaemm128128v2
24.9324.9825.01T:isapa128av20
27.2127.3327.41T:grain128aeadv2
31.9332.7233.23T:tinyjambu256v2
33.4233.5333.95T:tinyjambu128v2
38.4138.4838.52T:tinyjambu192v2
38.9438.9839.03T:giftcofb128v1
39.0639.1039.17romulust
39.8340.0640.40T:isapk128av20
49.8950.1850.33T:isapk128v20
73.2173.8074.78T:elephant200v2
93.1893.4593.72T:isapxv20
3153.633158.003211.47T:elephant176v2
3880.273886.363932.94T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.24?0.25?0.27?T:aes128gcmv1
0.22?0.26?0.28?T:aes256gcmv1
0.440.470.47aes256gcmv1
5.955.966.18ascon128av12
8.828.838.91ascon128v12
8.858.878.90ascon80pqv12
9.039.079.12T:xoodyakround3
10.8710.9010.93ascon128abi32v12
16.4616.4916.51ascon128bi32v12
16.8316.8516.90T:schwaemm256128v2
18.3518.4118.46T:isapa128v20
21.5621.6622.42T:schwaemm256256v2
22.0822.1722.21T:schwaemm192192v2
23.2023.2723.27romulusn
23.3023.3323.35romulusm
23.3923.4323.49T:schwaemm128128v2
24.9324.9625.02T:isapa128av20
27.1427.2627.33T:grain128aeadv2
32.8732.9833.34T:tinyjambu256v2
33.4433.5434.02T:tinyjambu128v2
38.4238.4638.52T:tinyjambu192v2
38.9339.0139.04T:giftcofb128v1
39.1339.2239.37romulust
39.8239.9840.27T:isapk128av20
49.9750.1050.23T:isapk128v20
73.2673.5774.81T:elephant200v2
93.0593.3293.47T:isapxv20
3153.863157.973211.57T:elephant176v2
3884.123888.913933.05T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.20?0.23?0.28?T:aes128gcmv1
0.21?0.24?0.28?T:aes256gcmv1
0.450.450.46aes256gcmv1
5.965.966.18ascon128av12
8.808.848.90ascon128v12
8.858.878.89ascon80pqv12
9.029.079.12T:xoodyakround3
10.9010.9210.94ascon128abi32v12
16.4716.4916.52ascon128bi32v12
16.8516.8716.92T:schwaemm256128v2
18.3818.4118.45T:isapa128v20
21.5521.6622.45T:schwaemm256256v2
22.0622.1422.17T:schwaemm192192v2
23.2123.2723.28romulusn
23.3123.3223.35romulusm
23.3823.4323.50T:schwaemm128128v2
24.9524.9825.03T:isapa128av20
27.0927.1427.24T:grain128aeadv2
32.9333.0333.29T:tinyjambu256v2
33.4433.5334.01T:tinyjambu128v2
38.3238.3838.51T:tinyjambu192v2
38.9538.9939.01T:giftcofb128v1
39.0639.1139.25romulust
39.8240.0740.34T:isapk128av20
49.9850.0950.28T:isapk128v20
73.1973.5374.76T:elephant200v2
92.7293.2994.17T:isapxv20
3153.643157.983210.78T:elephant176v2
3884.053886.593932.91T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.810.840.87T:aes128gcmv1
0.860.870.91T:aes256gcmv1
1.041.051.05aes256gcmv1
6.386.466.50ascon128av12
9.049.059.06ascon128v12
9.059.069.07ascon80pqv12
11.3011.3111.32ascon128abi32v12
13.3713.3913.42T:xoodyakround3
16.8616.8716.88ascon128bi32v12
17.4417.4517.49T:schwaemm256128v2
22.2722.3823.03T:schwaemm256256v2
22.4622.7422.98T:schwaemm192192v2
23.5023.8323.88T:schwaemm128128v2
27.5327.6027.65T:grain128aeadv2
30.2030.2330.25romulusn
34.1734.1834.22T:isapa128av20
39.3239.3639.38T:giftcofb128v1
40.4140.4440.48T:isapa128v20
41.9341.9442.03romulusm
43.0743.4543.66T:tinyjambu128v2
49.3749.6549.69T:tinyjambu256v2
54.1054.2454.45T:tinyjambu192v2
58.2758.4258.46T:isapk128av20
78.0778.1678.21romulust
111.79112.53113.79T:elephant200v2
115.17115.28115.42T:isapk128v20
205.87206.10206.56T:isapxv20
4830.494852.504896.79T:elephant176v2
5910.085914.775961.24T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.810.820.86T:aes128gcmv1
0.860.870.89T:aes256gcmv1
1.041.051.06aes256gcmv1
6.216.286.31ascon128av12
9.019.039.06ascon128v12
9.049.059.06ascon80pqv12
11.2811.2911.30ascon128abi32v12
13.2013.4013.42T:xoodyakround3
16.9016.9116.92ascon128bi32v12
17.4417.4517.48T:schwaemm256128v2
22.2222.3122.99T:schwaemm256256v2
22.4622.7122.98T:schwaemm192192v2
23.5223.8323.88T:schwaemm128128v2
27.4027.4727.51T:grain128aeadv2
30.2330.2330.27romulusn
34.1934.2334.26T:isapa128av20
39.3439.3639.38T:giftcofb128v1
40.4140.4240.45T:isapa128v20
42.0342.1042.13romulusm
42.5542.7043.18T:tinyjambu128v2
48.2748.5349.26T:tinyjambu256v2
54.0754.1654.26T:tinyjambu192v2
58.2758.3758.43T:isapk128av20
78.0778.1878.22romulust
111.52112.38113.62T:elephant200v2
115.16115.27115.43T:isapk128v20
205.73205.81206.41T:isapxv20
4828.284834.934896.84T:elephant176v2
5909.335916.905961.35T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.810.820.82T:aes128gcmv1
0.850.860.87T:aes256gcmv1
1.031.041.04aes256gcmv1
6.166.276.30ascon128av12
9.019.029.04ascon128v12
9.029.049.06ascon80pqv12
11.2611.2811.29ascon128abi32v12
13.4313.4513.50T:xoodyakround3
16.9016.9016.91ascon128bi32v12
17.4317.4517.47T:schwaemm256128v2
22.2622.3123.00T:schwaemm256256v2
22.4522.6823.00T:schwaemm192192v2
23.5323.8523.88T:schwaemm128128v2
24.9124.9224.97T:isapa128v20
26.6626.6826.71T:isapa128av20
27.4527.4927.52T:grain128aeadv2
30.2230.2630.28romulusn
39.3439.3639.37T:giftcofb128v1
40.2840.3040.33romulust
42.0242.0942.13romulusm
42.5442.6643.18T:tinyjambu128v2
45.4245.5045.56T:isapk128av20
48.2648.5349.26T:tinyjambu256v2
54.0554.1254.27T:tinyjambu192v2
76.6976.7376.85T:isapk128v20
111.48112.39113.63T:elephant200v2
134.06134.14134.42T:isapxv20
4828.314834.964907.72T:elephant176v2
5909.615916.865961.41T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.275.285.38aes256gcmv1
9.7710.0710.63ascon128av12
10.0410.2710.76T:aes128gcmv1
10.4010.5210.98T:aes256gcmv1
12.0512.2112.72ascon128v12
12.1912.4512.77ascon80pqv12
17.0417.2017.88ascon128abi32v12
19.4119.5219.91T:xoodyakround3
22.6922.8123.28ascon128bi32v12
28.4228.4928.90T:schwaemm256128v2
30.2930.5930.87T:schwaemm128128v2
34.1734.3434.63T:grain128aeadv2
35.4835.6636.64T:schwaemm256256v2
36.5236.9137.49T:schwaemm192192v2
37.8837.9837.99romulusn
46.8446.9547.37T:giftcofb128v1
49.9950.1650.91romulusm
50.6050.9651.30T:tinyjambu128v2
56.7357.4458.14T:tinyjambu256v2
63.3863.5664.04T:tinyjambu192v2
101.30101.55101.82T:isapa128av20
104.55104.77104.96romulust
158.30159.69161.37T:elephant200v2
234.05235.45237.83T:isapk128av20
332.95333.39333.83T:isapa128v20
1255.541256.851260.70T:isapk128v20
2012.382013.052015.54T:isapxv20
5986.125993.445999.88T:elephant176v2
7825.067937.888021.98T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.015.075.44aes256gcmv1
9.649.9110.30ascon128av12
9.9210.2110.59T:aes128gcmv1
10.2610.6611.02T:aes256gcmv1
11.9812.2312.60ascon128v12
12.0412.2512.73ascon80pqv12
17.0717.1217.95ascon128abi32v12
19.1519.2019.80T:xoodyakround3
22.9323.1023.86ascon128bi32v12
28.4228.5328.95T:schwaemm256128v2
30.3730.4430.76T:schwaemm128128v2
34.3834.4834.84T:grain128aeadv2
35.4735.5836.66T:schwaemm256256v2
36.7736.8837.03T:schwaemm192192v2
38.1238.1238.21romulusn
47.0947.1547.24T:giftcofb128v1
50.2750.8851.12T:tinyjambu128v2
52.3552.4252.59romulusm
57.1957.6257.88T:tinyjambu256v2
63.5564.7565.34T:tinyjambu192v2
101.73101.88102.11T:isapa128av20
104.62104.92105.18romulust
158.21159.12160.82T:elephant200v2
233.91234.38234.94T:isapk128av20
333.66334.06334.51T:isapa128v20
1255.011256.611259.20T:isapk128v20
2012.282012.802013.59T:isapxv20
5986.415997.516005.74T:elephant176v2
7824.557939.288022.97T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.025.125.22aes256gcmv1
9.519.679.86ascon128av12
9.9910.2310.55T:aes128gcmv1
10.3510.5811.32T:aes256gcmv1
11.9512.1012.16ascon128v12
12.0912.2112.26ascon80pqv12
17.0517.1217.32ascon128abi32v12
19.4019.8519.91T:xoodyakround3
22.8722.9123.15ascon128bi32v12
28.3828.4128.48T:schwaemm256128v2
30.2330.3530.45T:schwaemm128128v2
34.3834.4734.70T:grain128aeadv2
35.5635.9136.91T:schwaemm256256v2
36.4136.5236.88T:schwaemm192192v2
38.1338.1538.16romulusn
47.0947.2047.32T:giftcofb128v1
50.1250.2451.12T:tinyjambu128v2
52.3652.4252.49romulusm
56.9557.6857.77T:tinyjambu256v2
63.3063.4063.53T:tinyjambu192v2
64.2064.5764.69T:isapa128av20
65.7765.9066.36romulust
157.55158.23158.76T:isapk128av20
158.25159.27160.81T:elephant200v2
173.87174.10174.18T:isapa128v20
681.17681.70682.34T:isapk128v20
1052.221052.771053.38T:isapxv20
5986.746006.596030.94T:elephant176v2
7879.187938.478019.87T:elephant160v2

amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.510.530.54T:aes128gcmv1
0.610.620.64T:aes256gcmv1
1.531.541.56aes256gcmv1
6.526.566.61ascon128av12
9.819.869.90ascon128v12
9.639.8710.00ascon80pqv12
13.0313.0613.11ascon128abi32v12
13.3913.4313.47T:schwaemm256128v2
15.3215.4215.59T:xoodyakround3
17.6617.7717.84T:schwaemm192192v2
18.8818.9719.74T:schwaemm256256v2
19.8119.8519.91T:schwaemm128128v2
19.8719.9219.99ascon128bi32v12
24.4324.4724.50T:grain128aeadv2
38.4638.5038.55romulusn
38.9939.1139.24T:isapa128av20
39.3839.6139.84T:isapa128v20
39.8139.8639.89T:giftcofb128v1
49.1849.6149.80T:isapk128av20
55.0255.1155.15T:tinyjambu128v2
61.7461.8261.87romulusm
66.4266.6166.75T:tinyjambu192v2
67.1067.4968.93T:isapk128v20
71.0971.2071.26T:tinyjambu256v2
110.22110.37111.11T:elephant200v2
119.36119.41119.49romulust
119.90120.28120.97T:isapxv20
5782.185822.955851.29T:elephant176v2
5888.095889.925891.54T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.48?0.51?0.54?T:aes128gcmv1
0.570.590.61T:aes256gcmv1
1.401.421.43aes256gcmv1
6.556.646.69ascon128av12
9.779.829.85ascon128v12
9.699.8410.06ascon80pqv12
13.0613.0813.12ascon128abi32v12
13.3313.4213.49T:schwaemm256128v2
15.1415.2315.33T:xoodyakround3
17.6817.7417.77T:schwaemm192192v2
18.8919.0919.42T:schwaemm256256v2
19.7719.8319.88T:schwaemm128128v2
19.9520.0520.11ascon128bi32v12
23.6823.7023.74T:grain128aeadv2
38.5938.6138.64romulusn
39.3039.5439.82T:isapa128v20
39.6539.7339.80T:isapa128av20
39.7739.8139.87T:giftcofb128v1
49.2249.3949.70T:isapk128av20
54.8454.8754.92T:tinyjambu128v2
61.7961.9061.96romulusm
66.4866.5466.62T:tinyjambu192v2
66.0267.3068.61T:isapk128v20
70.6570.9571.53T:tinyjambu256v2
109.96111.01111.18T:elephant200v2
119.31119.42119.58romulust
120.40120.57120.89T:isapxv20
5765.665791.855838.45T:elephant176v2
5887.505888.855891.20T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.510.520.54T:aes128gcmv1
0.590.600.62T:aes256gcmv1
1.411.421.43aes256gcmv1
6.546.606.68ascon128av12
9.639.759.93ascon80pqv12
9.769.799.82ascon128v12
13.0813.1213.15ascon128abi32v12
13.3913.4313.49T:schwaemm256128v2
15.1915.2815.38T:xoodyakround3
17.6717.7117.78T:schwaemm192192v2
19.4319.5219.58T:isapa128v20
19.7719.8219.85T:schwaemm128128v2
19.9620.0620.12ascon128bi32v12
19.1520.3720.41T:schwaemm256256v2
23.6723.7223.74T:grain128aeadv2
26.3426.4126.47T:isapa128av20
33.1533.1933.22T:isapk128av20
38.5538.5838.62romulusn
39.8139.8539.91T:giftcofb128v1
41.2841.3841.47romulust
40.1841.4242.10T:isapk128v20
54.8454.9055.04T:tinyjambu128v2
61.6561.8461.94romulusm
66.3866.5266.57T:tinyjambu192v2
70.8271.0071.29T:tinyjambu256v2
72.1172.4872.87T:isapxv20
110.63111.09111.40T:elephant200v2
5776.605808.115844.45T:elephant176v2
5884.755887.905891.25T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.360.380.38T:aes128gcmv1
0.410.420.43T:aes256gcmv1
0.910.920.93aes256gcmv1
6.536.556.58ascon128av12
9.599.679.78ascon80pqv12
9.809.829.84ascon128v12
11.4711.5211.59T:xoodyakround3
13.2813.3213.37ascon128abi32v12
13.3413.3713.44T:schwaemm256128v2
17.6317.7217.82T:schwaemm192192v2
18.8719.0119.06T:schwaemm256256v2
19.8319.8619.88T:schwaemm128128v2
20.1620.2120.28ascon128bi32v12
24.3224.3424.44T:grain128aeadv2
29.2229.4429.71T:isapa128v20
30.8530.8930.91romulusn
32.4432.4932.82T:isapa128av20
39.7739.8039.84T:giftcofb128v1
41.5841.8242.07T:isapk128av20
42.4842.5242.56romulusm
45.0145.0445.07T:tinyjambu128v2
52.1252.2252.27T:tinyjambu192v2
53.8253.8953.95T:tinyjambu256v2
54.3054.9655.46T:isapk128v20
80.4180.4580.49romulust
82.3582.5283.36T:elephant200v2
96.4696.8997.20T:isapxv20
4303.114329.374352.59T:elephant176v2
4409.474413.664414.88T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.350.370.38T:aes128gcmv1
0.400.420.43T:aes256gcmv1
0.850.860.87aes256gcmv1
6.506.546.63ascon128av12
9.659.749.80ascon80pqv12
9.749.799.81ascon128v12
11.3611.4111.50T:xoodyakround3
13.2613.3413.42ascon128abi32v12
13.3113.3613.41T:schwaemm256128v2
17.6617.7217.75T:schwaemm192192v2
18.9219.0620.56T:schwaemm256256v2
19.7919.8319.85T:schwaemm128128v2
20.0020.0520.14ascon128bi32v12
23.9123.9323.95T:grain128aeadv2
29.2629.4229.57T:isapa128v20
30.9030.9430.97romulusn
32.9232.9933.04T:isapa128av20
39.7739.8039.85T:giftcofb128v1
41.3641.5641.80T:isapk128av20
42.5142.5442.62romulusm
44.9244.9945.04T:tinyjambu128v2
52.1252.1652.19T:tinyjambu192v2
53.7354.0054.10T:tinyjambu256v2
53.0954.1755.03T:isapk128v20
80.3880.4580.48romulust
82.8982.9783.30T:elephant200v2
96.1396.3396.50T:isapxv20
4307.864335.204352.18T:elephant176v2
4414.004415.644417.21T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.36?0.37?0.41?T:aes128gcmv1
0.40?0.42?0.46?T:aes256gcmv1
0.850.860.86aes256gcmv1
6.586.626.64ascon128av12
9.759.789.80ascon128v12
9.679.799.89ascon80pqv12
11.3811.4211.52T:xoodyakround3
13.3013.3413.37ascon128abi32v12
13.3313.3613.39T:schwaemm256128v2
17.6617.6917.72T:schwaemm192192v2
18.9719.0319.37T:schwaemm256256v2
19.4419.4719.51T:isapa128v20
19.7719.8119.83T:schwaemm128128v2
20.0220.0720.11ascon128bi32v12
23.9223.9423.96T:grain128aeadv2
26.1926.3426.42T:isapa128av20
30.8930.9330.97romulusn
33.0833.2433.48T:isapk128av20
39.7839.8139.84T:giftcofb128v1
41.3041.3641.45romulust
41.5141.7242.06T:isapk128v20
42.4842.5242.56romulusm
44.9144.9444.99T:tinyjambu128v2
52.0952.1752.24T:tinyjambu192v2
53.6353.8553.91T:tinyjambu256v2
72.3072.4473.39T:isapxv20
82.5882.8483.10T:elephant200v2
4304.884317.244335.35T:elephant176v2
4413.324414.694416.16T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.22?0.24?0.26?T:aes128gcmv1
0.230.240.25T:aes256gcmv1
0.28?0.31?0.33?aes256gcmv1
6.496.546.59ascon128av12
7.617.687.83T:xoodyakround3
9.699.759.78ascon128v12
9.619.8210.27ascon80pqv12
13.2413.2813.32T:schwaemm256128v2
13.4013.5513.66ascon128abi32v12
17.5717.6617.74T:schwaemm192192v2
18.8919.0020.58T:schwaemm256256v2
19.4119.5219.57T:isapa128v20
19.7519.7819.82T:schwaemm128128v2
20.2120.3720.44ascon128bi32v12
23.2023.2423.29romulusn
23.2223.2623.31romulusm
24.3324.4224.49T:grain128aeadv2
26.2426.3226.42T:isapa128av20
32.8833.3833.89T:isapk128av20
34.8234.8834.95T:tinyjambu128v2
36.2836.3236.41T:tinyjambu256v2
37.7237.8337.88T:tinyjambu192v2
39.7839.8339.89T:giftcofb128v1
41.3241.3941.46romulust
40.7141.9843.45T:isapk128v20
55.8455.8956.51T:elephant200v2
72.2172.4672.67T:isapxv20
2845.862871.732882.04T:elephant176v2
2940.182941.782943.26T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.21?0.23?0.25?T:aes256gcmv1
0.22?0.23?0.25?T:aes128gcmv1
0.290.310.32aes256gcmv1
6.426.506.55ascon128av12
7.587.697.74T:xoodyakround3
9.579.639.81ascon80pqv12
9.729.759.80ascon128v12
13.2513.2813.36T:schwaemm256128v2
13.5913.6713.71ascon128abi32v12
17.6117.6617.72T:schwaemm192192v2
18.7819.2420.51T:schwaemm256256v2
19.4219.4819.52T:isapa128v20
19.7319.7919.82T:schwaemm128128v2
20.0420.1420.18ascon128bi32v12
23.2323.2723.32romulusn
23.2623.3123.34romulusm
24.1624.2324.29T:grain128aeadv2
25.9726.3026.41T:isapa128av20
32.6033.0533.86T:isapk128av20
34.8334.8735.02T:tinyjambu128v2
36.2936.3336.41T:tinyjambu256v2
37.3837.5737.63T:tinyjambu192v2
39.7839.8239.88T:giftcofb128v1
41.3041.4141.46romulust
40.8241.8742.75T:isapk128v20
55.8555.9256.16T:elephant200v2
71.9972.2672.55T:isapxv20
2841.502846.472848.25T:elephant176v2
2938.462939.432940.70T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.210.220.23T:aes128gcmv1
0.20?0.23?0.24?T:aes256gcmv1
0.300.310.33aes256gcmv1
6.436.536.58ascon128av12
7.577.697.79T:xoodyakround3
9.609.659.73ascon80pqv12
9.719.749.76ascon128v12
13.2513.3213.40T:schwaemm256128v2
13.5813.6513.70ascon128abi32v12
17.5517.6217.70T:schwaemm192192v2
18.8019.2420.26T:schwaemm256256v2
19.4219.4819.56T:isapa128v20
19.7619.8119.84T:schwaemm128128v2
20.0220.1020.19ascon128bi32v12
23.2123.2423.28romulusm
23.2323.2823.32romulusn
24.1524.1924.29T:grain128aeadv2
26.2626.3426.39T:isapa128av20
32.8033.1533.48T:isapk128av20
34.8534.8934.93T:tinyjambu128v2
36.2936.3436.39T:tinyjambu256v2
37.5337.5937.69T:tinyjambu192v2
39.8139.8339.88T:giftcofb128v1
41.3341.3841.46romulust
41.3241.6942.27T:isapk128v20
55.7555.8156.03T:elephant200v2
72.5372.7673.60T:isapxv20
2856.282880.952887.91T:elephant176v2
2939.782941.192942.07T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.720.730.75T:aes128gcmv1
0.780.790.80T:aes256gcmv1
1.061.061.07aes256gcmv1
6.666.696.71ascon128av12
9.719.749.79ascon80pqv12
9.909.939.96ascon128v12
11.6211.6511.74T:xoodyakround3
13.5713.6313.67ascon128abi32v12
13.6913.7413.76T:schwaemm256128v2
18.1718.2118.26T:schwaemm192192v2
20.0720.1120.13T:schwaemm128128v2
20.5620.5920.60ascon128bi32v12
19.8420.7821.03T:schwaemm256256v2
24.6824.7524.78T:grain128aeadv2
31.1531.1731.18romulusn
36.1536.4536.51T:isapa128av20
40.1140.1440.18T:giftcofb128v1
42.8542.8842.93romulusm
42.7942.9643.04T:isapa128v20
45.4845.5345.59T:tinyjambu128v2
46.3746.5846.83T:isapk128av20
52.7252.7552.79T:tinyjambu192v2
54.3054.3354.38T:tinyjambu256v2
81.6281.6381.67romulust
84.3184.3584.51T:elephant200v2
93.4193.7294.10T:isapk128v20
159.55160.42160.88T:isapxv20
4361.304380.734381.49T:elephant176v2
4463.224464.754466.11T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.720.730.73T:aes128gcmv1
0.780.780.80T:aes256gcmv1
1.001.011.01aes256gcmv1
6.696.716.74ascon128av12
9.789.829.91ascon80pqv12
9.879.899.92ascon128v12
11.5011.5411.59T:xoodyakround3
13.5913.6513.68ascon128abi32v12
13.7013.7413.77T:schwaemm256128v2
18.0918.1418.18T:schwaemm192192v2
20.0620.0820.11T:schwaemm128128v2
20.3120.3720.46ascon128bi32v12
20.7421.0021.07T:schwaemm256256v2
24.2524.2824.30T:grain128aeadv2
31.2231.2331.26romulusn
36.3736.6836.70T:isapa128av20
40.1340.1640.18T:giftcofb128v1
42.6642.7242.80T:isapa128v20
42.9243.0043.08romulusm
45.3645.3945.41T:tinyjambu128v2
46.2346.5046.83T:isapk128av20
52.6552.7152.73T:tinyjambu192v2
54.2354.3154.42T:tinyjambu256v2
81.5981.6581.69romulust
84.4484.8884.94T:elephant200v2
92.7793.4094.14T:isapk128v20
160.01160.13160.29T:isapxv20
4343.904365.624381.48T:elephant176v2
4463.304464.094465.04T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.720.730.77T:aes128gcmv1
0.780.780.81T:aes256gcmv1
1.001.011.01aes256gcmv1
6.686.726.77ascon128av12
9.849.909.92ascon80pqv12
9.889.909.92ascon128v12
11.5111.5611.64T:xoodyakround3
13.6113.6413.67ascon128abi32v12
13.7613.7813.81T:schwaemm256128v2
18.0518.0918.13T:schwaemm192192v2
19.5519.6221.00T:schwaemm256256v2
20.0420.0820.10T:schwaemm128128v2
20.3420.4120.45ascon128bi32v12
24.2824.3024.32T:grain128aeadv2
26.2226.2526.29T:isapa128v20
28.3228.4028.44T:isapa128av20
31.2031.2331.25romulusn
36.1636.1936.34T:isapk128av20
40.1540.1840.20T:giftcofb128v1
42.5642.5842.63romulust
42.8842.9142.98romulusm
45.4345.4445.48T:tinyjambu128v2
52.6552.7052.72T:tinyjambu192v2
54.2054.3254.40T:tinyjambu256v2
61.4961.7261.95T:isapk128v20
84.2184.3084.39T:elephant200v2
105.15106.28107.23T:isapxv20
4344.244391.364396.67T:elephant176v2
4461.934463.944464.49T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.625.695.76aes256gcmv1
8.959.259.41T:aes128gcmv1
9.379.489.73T:aes256gcmv1
10.1710.4810.59ascon128av12
12.8212.9613.19ascon80pqv12
12.9813.1013.14ascon128v12
16.8817.3017.94T:xoodyakround3
20.0620.2320.39ascon128abi32v12
22.3422.5522.80T:schwaemm256128v2
25.5825.7425.86T:schwaemm128128v2
27.0727.2327.55ascon128bi32v12
29.0229.3929.88T:schwaemm192192v2
30.9131.3633.31T:schwaemm256256v2
32.3032.5332.86T:grain128aeadv2
37.4237.6437.77romulusn
47.3347.4747.62T:giftcofb128v1
50.0250.2250.30romulusm
55.8455.9456.39T:tinyjambu128v2
64.4664.5564.91T:tinyjambu192v2
65.8466.3366.90T:tinyjambu256v2
108.14108.39108.48romulust
118.59119.14119.85T:elephant200v2
118.88119.27119.52T:isapa128av20
150.28150.77151.48T:isapk128av20
349.19349.62350.01T:isapa128v20
976.62981.01984.39T:isapk128v20
1599.101603.161605.46T:isapxv20
5458.955466.065468.82T:elephant176v2
5977.425979.955984.32T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.765.865.93aes256gcmv1
9.009.339.45T:aes128gcmv1
9.419.539.80T:aes256gcmv1
10.1310.2610.35ascon128av12
12.8512.9513.22ascon80pqv12
12.9013.0513.31ascon128v12
16.7716.9817.22T:xoodyakround3
20.2420.4520.73ascon128abi32v12
22.3722.5822.87T:schwaemm256128v2
25.3725.5125.77T:schwaemm128128v2
26.9127.3927.87ascon128bi32v12
29.3529.6429.98T:schwaemm192192v2
31.9832.1132.20T:grain128aeadv2
31.3932.3533.60T:schwaemm256256v2
37.9438.0538.37romulusn
47.4047.5647.63T:giftcofb128v1
51.8952.2752.52romulusm
55.8856.2556.49T:tinyjambu128v2
64.1564.3064.73T:tinyjambu192v2
65.5565.9866.16T:tinyjambu256v2
108.42108.75109.52romulust
119.51119.77120.05T:isapa128av20
119.34120.16120.76T:elephant200v2
151.09151.46151.77T:isapk128av20
349.06349.80349.96T:isapa128v20
968.84972.01982.87T:isapk128v20
1597.701599.381600.70T:isapxv20
5408.735458.535468.74T:elephant176v2
5977.745981.105984.07T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.775.845.88aes256gcmv1
8.929.049.13T:aes128gcmv1
9.389.489.59T:aes256gcmv1
10.1610.3310.46ascon128av12
12.8313.0413.16ascon128v12
12.8813.0813.16ascon80pqv12
16.6817.2717.59T:xoodyakround3
20.2720.3220.77ascon128abi32v12
22.2322.4722.57T:schwaemm256128v2
25.4225.5625.66T:schwaemm128128v2
27.2027.4527.58ascon128bi32v12
29.3829.5129.69T:schwaemm192192v2
31.9132.0132.15T:grain128aeadv2
32.4732.7833.42T:schwaemm256256v2
37.9438.1438.22romulusn
47.4847.6847.73T:giftcofb128v1
51.9952.2452.36romulusm
55.6656.2356.50T:tinyjambu128v2
64.0564.3364.59T:tinyjambu192v2
65.9566.3866.77T:tinyjambu256v2
68.6769.4569.98romulust
73.6473.9874.20T:isapa128av20
98.6398.9399.34T:isapk128av20
119.49119.67120.41T:elephant200v2
182.04182.39182.83T:isapa128v20
509.97516.74519.90T:isapk128v20
835.30838.27839.02T:isapxv20
5437.455454.605458.91T:elephant176v2
5968.205973.805977.41T:elephant160v2

amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.900.930.97T:aes256gcmv1
1.511.521.52T:aes128gcmv1
1.651.671.68aes256gcmv1
6.406.426.43ascon128av12
9.379.389.40ascon128v12
9.409.429.42ascon80pqv12
11.1911.2211.37ascon128abi32v12
16.9417.0517.12ascon128bi32v12
17.4617.5317.57T:xoodyakround3
19.4219.4719.56T:schwaemm256128v2
23.6523.7224.33T:schwaemm256256v2
25.6125.7825.96T:schwaemm192192v2
27.2027.2627.30T:grain128aeadv2
27.5527.6627.90T:schwaemm128128v2
35.4835.5135.59romulusn
36.3936.4336.45T:isapa128av20
36.5536.6036.62T:isapa128v20
40.4740.5040.53T:giftcofb128v1
57.1357.1757.23romulusm
61.6361.6461.69T:tinyjambu128v2
64.6964.7264.83T:isapk128av20
68.9668.9768.98T:tinyjambu192v2
75.9675.9775.97T:tinyjambu256v2
84.8284.9684.98T:isapk128v20
112.30112.32112.33romulust
139.82148.20155.30T:isapxv20
228.24229.67246.09T:elephant200v2
6457.136508.156514.44T:elephant176v2
7143.807145.897157.99T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.880.920.97T:aes256gcmv1
1.591.601.61T:aes128gcmv1
1.791.791.82aes256gcmv1
6.286.306.30ascon128av12
9.279.299.31ascon128v12
9.389.409.41ascon80pqv12
11.2111.2211.25ascon128abi32v12
16.7816.9216.98ascon128bi32v12
17.4517.5017.56T:xoodyakround3
19.5119.5819.63T:schwaemm256128v2
23.6423.7324.34T:schwaemm256256v2
25.6525.7425.78T:schwaemm192192v2
27.3627.3927.43T:grain128aeadv2
27.5027.5927.79T:schwaemm128128v2
35.5535.5735.61romulusn
36.2736.3336.41T:isapa128v20
36.4036.4336.50T:isapa128av20
40.4940.5440.59T:giftcofb128v1
57.2557.3357.40romulusm
61.4661.5261.58T:tinyjambu128v2
65.2565.3465.41T:isapk128av20
68.6568.7168.72T:tinyjambu192v2
76.0176.0276.07T:tinyjambu256v2
85.3485.4385.46T:isapk128v20
112.28112.30112.36romulust
145.74148.25148.81T:isapxv20
228.58230.03245.84T:elephant200v2
6455.986504.596509.87T:elephant176v2
7142.817145.687156.89T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.890.910.94T:aes256gcmv1
1.601.601.61T:aes128gcmv1
1.791.791.80aes256gcmv1
6.276.316.32ascon128av12
9.249.269.30ascon128v12
9.379.379.39ascon80pqv12
11.2311.2411.25ascon128abi32v12
16.7716.9116.99ascon128bi32v12
17.5017.5517.59T:xoodyakround3
18.0218.0318.13T:isapa128v20
19.4719.5119.60T:schwaemm256128v2
23.6323.7224.49T:schwaemm256256v2
24.1124.1524.20T:isapa128av20
25.6925.7525.83T:schwaemm192192v2
27.3027.3427.39T:grain128aeadv2
27.4827.6427.85T:schwaemm128128v2
35.5735.5935.63romulusn
37.5037.5737.60romulust
40.4940.5240.57T:giftcofb128v1
44.4944.5444.58T:isapk128av20
54.5954.6354.65T:isapk128v20
57.1857.3057.40romulusm
61.5061.5361.62T:tinyjambu128v2
68.6968.7068.75T:tinyjambu192v2
76.0376.0676.06T:tinyjambu256v2
86.6586.9987.24T:isapxv20
228.27229.79245.88T:elephant200v2
6457.546509.696514.95T:elephant176v2
7139.687142.117156.61T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.670.690.70T:aes256gcmv1
1.011.021.02T:aes128gcmv1
1.091.091.10aes256gcmv1
6.386.426.43ascon128av12
9.329.349.36ascon80pqv12
9.329.359.36ascon128v12
11.0511.1111.11ascon128abi32v12
13.3213.3613.39T:xoodyakround3
16.7816.8616.91ascon128bi32v12
19.3419.3819.41T:schwaemm256128v2
23.5023.5824.28T:schwaemm256256v2
25.5825.6325.71T:schwaemm192192v2
27.1227.1527.17T:grain128aeadv2
27.2627.4127.43T:isapa128v20
27.5627.6327.72T:schwaemm128128v2
28.7028.7428.76romulusn
30.3030.3230.34T:isapa128av20
39.5139.5339.56romulusm
40.3940.4040.43T:giftcofb128v1
50.6350.6950.70T:tinyjambu128v2
54.3154.3354.35T:tinyjambu192v2
54.6054.6254.64T:isapk128av20
57.9858.0158.02T:tinyjambu256v2
69.7469.7669.78T:isapk128v20
74.7074.8974.91romulust
113.06117.24120.82T:isapxv20
170.41171.36182.88T:elephant200v2
4825.974861.134870.51T:elephant176v2
5354.885356.745366.84T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.660.680.70T:aes256gcmv1
1.041.061.07T:aes128gcmv1
1.151.151.17aes256gcmv1
6.336.346.35ascon128av12
9.319.319.31ascon128v12
9.339.349.36ascon80pqv12
11.0911.1111.11ascon128abi32v12
13.3613.3913.41T:xoodyakround3
16.6916.7616.80ascon128bi32v12
19.3619.3819.44T:schwaemm256128v2
23.5323.5824.30T:schwaemm256256v2
25.5825.6425.68T:schwaemm192192v2
27.1927.2127.23T:grain128aeadv2
27.2627.2727.43T:isapa128v20
27.4427.5627.78T:schwaemm128128v2
28.7128.7328.77romulusn
30.3030.3230.34T:isapa128av20
39.5439.5939.67romulusm
40.3940.4240.45T:giftcofb128v1
50.5850.6150.66T:tinyjambu128v2
54.2054.2154.24T:tinyjambu192v2
54.9254.9655.03T:isapk128av20
58.0458.0758.12T:tinyjambu256v2
69.9870.0770.08T:isapk128v20
74.8874.9074.93romulust
116.19117.46117.75T:isapxv20
170.43171.38183.22T:elephant200v2
4823.064862.794865.85T:elephant176v2
5355.745357.035367.16T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.660.680.69T:aes256gcmv1
1.051.061.07T:aes128gcmv1
1.151.161.16aes256gcmv1
6.346.356.37ascon128av12
9.309.319.32ascon128v12
9.339.349.34ascon80pqv12
11.1011.1111.11ascon128abi32v12
13.3813.4013.43T:xoodyakround3
16.7116.7316.80ascon128bi32v12
18.1118.1218.13T:isapa128v20
19.3419.4019.44T:schwaemm256128v2
23.4723.5724.43T:schwaemm256256v2
24.1624.1824.19T:isapa128av20
25.5925.6425.68T:schwaemm192192v2
27.1827.2027.22T:grain128aeadv2
27.4727.5527.60T:schwaemm128128v2
28.7228.7628.78romulusn
37.5137.5237.55romulust
39.5039.5439.64romulusm
40.4040.4240.45T:giftcofb128v1
44.5244.5544.57T:isapk128av20
50.6050.6350.64T:tinyjambu128v2
54.2054.2254.25T:tinyjambu192v2
54.6354.6654.67T:isapk128v20
58.0358.0658.12T:tinyjambu256v2
86.3386.6086.76T:isapxv20
170.39171.45182.88T:elephant200v2
4824.904863.604867.43T:elephant176v2
5354.055355.795366.77T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.40?0.43?0.48?T:aes256gcmv1
0.510.520.55aes256gcmv1
0.510.530.54T:aes128gcmv1
6.326.336.36ascon128av12
9.259.279.29ascon80pqv12
9.249.289.29T:xoodyakround3
9.289.289.30ascon128v12
10.9110.9510.95ascon128abi32v12
16.5416.6816.73ascon128bi32v12
18.2318.2418.26T:isapa128v20
19.1619.2919.34T:schwaemm256128v2
21.8621.9021.91romulusn
21.8521.9021.95romulusm
23.3723.4424.17T:schwaemm256256v2
24.1524.1824.21T:isapa128av20
25.4025.5325.62T:schwaemm192192v2
27.0127.0427.07T:grain128aeadv2
27.2727.3327.54T:schwaemm128128v2
37.5337.5837.58romulust
39.6939.7039.72T:tinyjambu192v2
39.7039.7039.71T:tinyjambu128v2
40.0240.0240.12T:tinyjambu256v2
40.2640.2940.31T:giftcofb128v1
44.5144.6344.65T:isapk128av20
54.6654.6954.75T:isapk128v20
77.69?86.87?95.69?T:isapxv20
112.31113.22120.82T:elephant200v2
3188.003209.953213.63T:elephant176v2
3565.173567.033573.98T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.410.430.44T:aes256gcmv1
0.500.520.54T:aes128gcmv1
0.510.530.54aes256gcmv1
6.356.366.39ascon128av12
9.229.279.33T:xoodyakround3
9.289.299.31ascon80pqv12
9.289.299.29ascon128v12
10.9410.9610.98ascon128abi32v12
16.4816.5916.69ascon128bi32v12
18.1618.2618.28T:isapa128v20
19.2319.2719.34T:schwaemm256128v2
21.8421.9221.96romulusm
21.9021.9321.96romulusn
23.3823.4824.18T:schwaemm256256v2
24.1624.1824.26T:isapa128av20
25.4325.5325.68T:schwaemm192192v2
26.9927.0227.05T:grain128aeadv2
27.3227.3527.54T:schwaemm128128v2
37.4837.5537.58romulust
39.6839.6839.68T:tinyjambu128v2
39.6539.7039.70T:tinyjambu192v2
40.1140.1340.13T:tinyjambu256v2
40.2740.3140.36T:giftcofb128v1
44.5344.5744.60T:isapk128av20
54.6654.6954.70T:isapk128v20
85.9086.3286.99T:isapxv20
112.36113.29120.71T:elephant200v2
3187.953210.443214.72T:elephant176v2
3566.063567.523574.98T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.42?0.43?0.47?T:aes256gcmv1
0.500.510.52T:aes128gcmv1
0.520.520.53aes256gcmv1
6.376.386.40ascon128av12
9.219.279.33T:xoodyakround3
9.279.289.30ascon128v12
9.289.299.30ascon80pqv12
10.9510.9611.08ascon128abi32v12
16.4816.6016.69ascon128bi32v12
18.1818.2618.28T:isapa128v20
19.2419.2919.36T:schwaemm256128v2
21.8021.8721.96romulusm
21.8921.9421.97romulusn
23.3223.4523.95T:schwaemm256256v2
24.1624.2024.23T:isapa128av20
25.4425.5025.61T:schwaemm192192v2
27.0027.0327.07T:grain128aeadv2
27.3127.5627.76T:schwaemm128128v2
37.4937.5237.57romulust
39.6839.6839.68T:tinyjambu128v2
39.7039.7039.72T:tinyjambu192v2
40.0040.0740.14T:tinyjambu256v2
40.2940.3240.35T:giftcofb128v1
44.5344.5644.62T:isapk128av20
54.6554.6954.71T:isapk128v20
85.8886.1486.97T:isapxv20
112.37113.28120.67T:elephant200v2
3188.203210.203216.16T:elephant176v2
3565.393567.673573.23T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.131.131.14T:aes128gcmv1
1.221.231.24aes256gcmv1
1.241.241.27T:aes256gcmv1
6.556.576.59ascon128av12
9.499.499.54ascon128v12
9.499.509.52ascon80pqv12
11.3811.4011.41ascon128abi32v12
13.4813.5013.52T:xoodyakround3
17.1517.1917.23ascon128bi32v12
19.9719.9920.03T:schwaemm256128v2
24.2124.2224.96T:schwaemm256256v2
26.1726.2226.27T:schwaemm192192v2
27.5027.5227.53T:grain128aeadv2
27.8727.9828.01T:schwaemm128128v2
28.9428.9929.02romulusn
33.5233.5533.56T:isapa128av20
39.8739.9339.98romulusm
39.9739.9940.15T:isapa128v20
40.7840.8040.83T:giftcofb128v1
51.0151.0651.09T:tinyjambu128v2
54.7554.7554.76T:tinyjambu192v2
58.4458.4558.46T:tinyjambu256v2
60.7160.7260.75T:isapk128av20
75.8476.0276.06romulust
121.71121.76121.85T:isapk128v20
174.80174.94186.02T:elephant200v2
190.54190.70195.17T:isapxv20
4862.594897.734899.92T:elephant176v2
5415.035416.175425.99T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.171.181.19T:aes128gcmv1
1.231.241.26T:aes256gcmv1
1.291.301.31aes256gcmv1
6.496.516.53ascon128av12
9.469.469.46ascon128v12
9.489.489.52ascon80pqv12
11.4011.4011.40ascon128abi32v12
13.5213.5413.55T:xoodyakround3
17.0517.0917.12ascon128bi32v12
19.9519.9820.03T:schwaemm256128v2
24.2024.2124.95T:schwaemm256256v2
26.1826.2026.27T:schwaemm192192v2
27.5527.5827.62T:grain128aeadv2
27.8227.9127.95T:schwaemm128128v2
28.9429.0029.04romulusn
33.5233.5533.56T:isapa128av20
39.9740.0040.07T:isapa128v20
39.9940.0240.04romulusm
40.7940.8240.84T:giftcofb128v1
50.9951.0051.04T:tinyjambu128v2
54.6254.6354.64T:tinyjambu192v2
58.4958.5458.54T:tinyjambu256v2
61.1561.1561.21T:isapk128av20
76.0376.0476.07romulust
122.04122.05122.06T:isapk128v20
174.72174.93185.73T:elephant200v2
189.64190.63190.90T:isapxv20
4861.224897.694899.57T:elephant176v2
5414.935415.785426.54T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.171.181.19T:aes128gcmv1
1.241.251.26T:aes256gcmv1
1.291.291.30aes256gcmv1
6.506.506.51ascon128av12
9.459.469.46ascon128v12
9.489.489.50ascon80pqv12
11.4011.4611.46ascon128abi32v12
13.5413.5613.58T:xoodyakround3
17.0717.0917.11ascon128bi32v12
19.9519.9920.02T:schwaemm256128v2
24.2024.2124.88T:schwaemm256256v2
24.6224.6224.77T:isapa128v20
25.9825.9926.00T:isapa128av20
26.1626.2126.24T:schwaemm192192v2
27.5527.5827.62T:grain128aeadv2
27.8127.9227.95T:schwaemm128128v2
28.9929.0129.03romulusn
38.6238.6338.65romulust
40.0040.0540.05romulusm
40.8140.8340.85T:giftcofb128v1
48.1448.1448.16T:isapk128av20
51.0151.0251.03T:tinyjambu128v2
54.6554.6554.69T:tinyjambu192v2
58.4958.5058.58T:tinyjambu256v2
81.5281.5281.54T:isapk128v20
123.87124.06124.25T:isapxv20
174.90174.92185.84T:elephant200v2
4860.964897.334899.99T:elephant176v2
5414.785417.255426.48T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.117.317.44T:aes128gcmv1
7.497.828.15aes256gcmv1
10.5510.7010.73ascon128av12
12.6112.6113.33ascon80pqv12
12.7112.8713.32ascon128v12
14.2314.5414.77T:aes256gcmv1
17.9318.4018.79ascon128abi32v12
19.5920.0220.12T:xoodyakround3
24.2924.4226.21ascon128bi32v12
32.9133.3834.48T:schwaemm256128v2
34.6334.7835.06romulusn
35.2035.6535.95T:grain128aeadv2
35.9636.2337.02T:schwaemm128128v2
38.6738.7539.55T:schwaemm256256v2
42.5543.1143.87T:schwaemm192192v2
46.9247.1247.48romulusm
49.3549.5549.70T:giftcofb128v1
59.9360.0660.24T:tinyjambu128v2
64.2664.4964.76T:tinyjambu192v2
68.0968.4468.78T:tinyjambu256v2
101.85102.13102.34romulust
106.88107.18107.77T:isapa128av20
189.65189.90190.09T:isapk128av20
245.97246.29263.05T:elephant200v2
331.00331.00331.41T:isapa128v20
1303.201303.361303.59T:isapk128v20
1852.771860.841982.33T:isapxv20
6063.386087.796091.01T:elephant176v2
7246.017257.157262.53T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.846.846.99T:aes128gcmv1
7.517.587.80aes256gcmv1
10.7310.8811.02ascon128av12
12.8412.8413.34ascon80pqv12
12.7112.8613.20ascon128v12
14.5114.6714.85T:aes256gcmv1
17.9818.5018.98ascon128abi32v12
19.6620.0520.23T:xoodyakround3
23.8824.8426.23ascon128bi32v12
32.9033.4734.16T:schwaemm256128v2
34.8734.9735.13romulusn
35.8835.9636.53T:grain128aeadv2
36.1636.1636.38T:schwaemm128128v2
38.5238.5639.55T:schwaemm256256v2
42.0742.2942.64T:schwaemm192192v2
48.3148.4949.06romulusm
49.6949.7750.31T:giftcofb128v1
60.0260.0260.10T:tinyjambu128v2
64.0864.1264.52T:tinyjambu192v2
68.2268.3068.52T:tinyjambu256v2
101.90102.31102.45romulust
106.70107.39107.55T:isapa128av20
192.45193.09193.19T:isapk128av20
245.47245.76263.36T:elephant200v2
330.72331.17332.47T:isapa128v20
1303.611303.851304.69T:isapk128v20
1850.411853.331858.99T:isapxv20
6062.236087.206092.55T:elephant176v2
7245.707248.307258.97T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.846.886.98T:aes128gcmv1
7.737.797.81aes256gcmv1
10.5910.7310.82ascon128av12
12.7012.7612.82ascon128v12
12.8412.8413.07ascon80pqv12
14.3014.4314.47T:aes256gcmv1
18.0118.1318.30ascon128abi32v12
19.4719.5920.21T:xoodyakround3
23.8624.8025.56ascon128bi32v12
33.1233.2333.77T:schwaemm256128v2
34.7834.8835.15romulusn
35.9536.0236.34T:grain128aeadv2
36.1136.1836.53T:schwaemm128128v2
38.4838.5539.84T:schwaemm256256v2
42.0742.0843.07T:schwaemm192192v2
48.2448.5048.78romulusm
49.8749.9750.18T:giftcofb128v1
60.1260.2260.22T:tinyjambu128v2
63.6263.7464.18romulust
64.2864.2964.33T:tinyjambu192v2
66.6666.9967.28T:isapa128av20
68.2968.2968.34T:tinyjambu256v2
121.54121.99122.17T:isapk128av20
173.04173.04173.69T:isapa128v20
245.61245.88262.77T:elephant200v2
688.77688.95689.28T:isapk128v20
967.56971.82972.93T:isapxv20
6060.556093.356099.11T:elephant176v2
7247.597250.347260.75T:elephant160v2

amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.760.830.84T:aes128gcmv1
0.78?0.86?0.92?T:aes256gcmv1
1.831.841.85aes256gcmv1
5.845.875.88ascon128av12
8.508.508.51ascon80pqv12
8.628.638.67ascon128v12
12.5112.5412.57ascon128abi32v12
16.6516.6916.84T:xoodyakround3
19.0519.1319.22ascon128bi32v12
19.4619.5119.54T:schwaemm256128v2
23.0523.0923.12T:grain128aeadv2
23.8323.8924.57T:schwaemm256256v2
25.6025.7125.81T:schwaemm192192v2
31.0931.2631.36T:schwaemm128128v2
34.1434.1434.15T:isapa128v20
35.1435.1835.75T:isapa128av20
37.0737.1037.14romulusn
38.4438.4438.44T:giftcofb128v1
58.4358.4758.48T:tinyjambu128v2
59.3159.3559.41romulusm
60.8361.2161.72T:isapk128av20
65.6165.6265.64T:tinyjambu256v2
66.0566.0566.05T:tinyjambu192v2
76.9577.7078.49T:isapk128v20
114.46114.54114.64romulust
148.26149.37149.85T:isapxv20
229.15?234.69?258.80?T:elephant200v2
6706.476723.116725.87T:elephant176v2
7843.317844.437848.69T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.68?0.74?0.78?T:aes128gcmv1
0.770.790.83T:aes256gcmv1
1.821.831.83aes256gcmv1
6.236.246.26ascon128av12
8.438.448.45ascon80pqv12
8.568.578.57ascon128v12
12.6812.6912.71ascon128abi32v12
16.5616.6316.69T:xoodyakround3
18.4618.5018.56ascon128bi32v12
19.5219.6119.68T:schwaemm256128v2
22.9422.9823.08T:grain128aeadv2
24.1824.2224.38T:schwaemm256256v2
25.6425.7325.79T:schwaemm192192v2
30.7130.8430.91T:schwaemm128128v2
34.1134.1134.18T:isapa128v20
35.1535.1835.20T:isapa128av20
37.3137.3337.35romulusn
38.4938.5038.50T:giftcofb128v1
58.5258.5458.57T:tinyjambu128v2
59.7059.7459.76romulusm
60.5460.6361.36T:isapk128av20
64.7464.7664.77T:tinyjambu192v2
65.4965.7565.75T:tinyjambu256v2
77.8278.2778.57T:isapk128v20
114.49114.59114.66romulust
148.95149.26150.41T:isapxv20
228.53?234.56?257.08?T:elephant200v2
6710.376712.086744.79T:elephant176v2
7842.307843.757844.67T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.68?0.73?0.77?T:aes128gcmv1
0.750.800.82T:aes256gcmv1
1.821.831.83aes256gcmv1
6.246.246.26ascon128av12
8.448.448.45ascon80pqv12
8.578.578.57ascon128v12
12.6812.6912.70ascon128abi32v12
16.6116.6616.74T:xoodyakround3
16.8416.8916.93T:isapa128v20
18.4618.5018.55ascon128bi32v12
19.5719.6819.76T:schwaemm256128v2
22.9622.9722.99T:grain128aeadv2
23.6023.6223.65T:isapa128av20
24.2024.2424.37T:schwaemm256256v2
25.6825.7325.84T:schwaemm192192v2
30.7730.8430.96T:schwaemm128128v2
37.2937.3337.36romulusn
38.4938.5038.51T:giftcofb128v1
38.7838.8538.95romulust
40.9841.1641.45T:isapk128av20
50.1050.2350.35T:isapk128v20
58.5258.5358.59T:tinyjambu128v2
59.7359.7659.79romulusm
64.7464.7664.76T:tinyjambu192v2
65.5665.7565.75T:tinyjambu256v2
86.7286.8287.65T:isapxv20
228.73?234.43?258.39?T:elephant200v2
6706.216711.426736.85T:elephant176v2
7844.547850.377867.18T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.570.600.62T:aes128gcmv1
0.600.620.65T:aes256gcmv1
1.141.151.15aes256gcmv1
5.845.845.85ascon128av12
8.388.398.41ascon80pqv12
8.448.458.46ascon128v12
12.4112.4212.43ascon128abi32v12
12.6312.6612.75T:xoodyakround3
18.8518.8518.88ascon128bi32v12
19.2519.3219.41T:schwaemm256128v2
22.9523.0223.06T:grain128aeadv2
23.8124.0024.53T:schwaemm256256v2
25.5725.5925.60T:isapa128v20
25.9526.1126.30T:schwaemm192192v2
29.3829.3929.65T:isapa128av20
29.6929.7029.72romulusn
31.0731.2031.27T:schwaemm128128v2
38.3938.4138.42T:giftcofb128v1
40.8040.8440.85romulusm
47.3747.5947.63T:tinyjambu128v2
48.6248.7549.02T:isapk128av20
49.2449.2549.26T:tinyjambu256v2
51.2951.3051.30T:tinyjambu192v2
64.2064.4864.70T:isapk128v20
76.6976.7376.76romulust
118.51118.89119.09T:isapxv20
170.58?174.94?191.35?T:elephant200v2
5010.565022.845023.58T:elephant176v2
5883.715884.245886.29T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.550.580.61T:aes128gcmv1
0.590.600.63T:aes256gcmv1
1.131.131.14aes256gcmv1
6.036.046.05ascon128av12
8.348.358.35ascon80pqv12
8.408.418.41ascon128v12
12.4212.4512.47ascon128abi32v12
12.6312.6512.68T:xoodyakround3
18.4818.5118.53ascon128bi32v12
19.3319.4319.50T:schwaemm256128v2
22.9323.0523.09T:grain128aeadv2
24.1624.2824.31T:schwaemm256256v2
25.5825.5825.58T:isapa128v20
25.9526.2226.39T:schwaemm192192v2
29.4229.6429.65T:isapa128av20
29.7929.8029.83romulusn
30.9231.0031.06T:schwaemm128128v2
38.4338.4438.44T:giftcofb128v1
41.0041.0341.06romulusm
47.4747.5747.67T:tinyjambu128v2
49.3449.3549.41T:tinyjambu256v2
48.6449.3650.07T:isapk128av20
50.6150.6450.70T:tinyjambu192v2
64.0864.3464.75T:isapk128v20
76.6576.7476.78romulust
117.51117.82118.03T:isapxv20
173.47175.08191.45T:elephant200v2
5010.755011.775016.78T:elephant176v2
5882.065883.735884.84T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.550.590.61T:aes128gcmv1
0.580.610.62T:aes256gcmv1
1.121.131.13aes256gcmv1
6.046.056.05ascon128av12
8.358.358.35ascon80pqv12
8.418.418.41ascon128v12
12.4312.4512.46ascon128abi32v12
12.6312.6612.68T:xoodyakround3
16.9316.9516.97T:isapa128v20
18.4818.5118.53ascon128bi32v12
19.2519.3219.38T:schwaemm256128v2
22.9222.9422.97T:grain128aeadv2
23.6323.6323.65T:isapa128av20
24.1724.2224.38T:schwaemm256256v2
26.0026.1426.38T:schwaemm192192v2
29.7929.8129.83romulusn
30.9030.9831.04T:schwaemm128128v2
38.4238.4438.45T:giftcofb128v1
38.6638.7838.93T:isapk128av20
38.8138.8438.89romulust
40.9841.0041.04romulusm
47.4747.6147.67T:tinyjambu128v2
49.3449.3849.41T:tinyjambu256v2
50.2350.3951.04T:isapk128v20
50.6450.6550.65T:tinyjambu192v2
86.5987.1687.75T:isapxv20
171.31?175.60?191.54?T:elephant200v2
5009.905017.385020.30T:elephant176v2
5882.995884.075885.46T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.38?0.42?0.45?T:aes128gcmv1
0.400.420.43T:aes256gcmv1
0.440.450.45aes256gcmv1
5.795.805.81ascon128av12
8.248.258.26ascon128v12
8.258.258.26ascon80pqv12
8.658.668.70T:xoodyakround3
12.2012.2612.31ascon128abi32v12
17.0017.0017.01T:isapa128v20
18.4918.5918.65ascon128bi32v12
18.9719.1119.17T:schwaemm256128v2
22.2522.2822.30romulusm
22.2622.2922.32romulusn
22.9022.9723.01T:grain128aeadv2
23.6123.6323.65T:isapa128av20
23.8023.9224.67T:schwaemm256256v2
26.3026.5527.29T:schwaemm192192v2
30.9431.0331.14T:schwaemm128128v2
33.2433.2533.25T:tinyjambu256v2
36.5436.5536.55T:tinyjambu192v2
36.3736.6236.76T:tinyjambu128v2
36.0836.7236.87T:isapk128av20
38.3038.3138.38T:giftcofb128v1
38.7938.8538.89romulust
49.4549.7151.44T:isapk128v20
86.8386.9187.80T:isapxv20
112.78?115.60?127.55?T:elephant200v2
3311.233314.213322.30T:elephant176v2
3922.403923.103927.76T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.400.420.43T:aes256gcmv1
0.400.430.44T:aes128gcmv1
0.420.440.44aes256gcmv1
5.825.835.87ascon128av12
8.258.258.26ascon80pqv12
8.258.258.26ascon128v12
8.668.708.75T:xoodyakround3
12.1412.1912.25ascon128abi32v12
16.9717.0017.05T:isapa128v20
18.4818.5018.52ascon128bi32v12
19.4219.5419.66T:schwaemm256128v2
22.2522.2922.33romulusm
22.2822.3222.34romulusn
22.8922.9122.93T:grain128aeadv2
23.6223.6323.65T:isapa128av20
24.2024.2524.30T:schwaemm256256v2
26.0126.8826.93T:schwaemm192192v2
30.9231.0531.15T:schwaemm128128v2
33.2433.2533.26T:tinyjambu256v2
36.5336.5536.56T:tinyjambu192v2
36.3736.6236.64T:tinyjambu128v2
36.4636.6636.79T:isapk128av20
38.3538.3638.39T:giftcofb128v1
38.8138.8638.89romulust
50.1950.3250.79T:isapk128v20
86.7187.1388.97T:isapxv20
114.55?115.66?128.11?T:elephant200v2
3312.303313.963322.19T:elephant176v2
3922.213922.513922.78T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.400.420.44T:aes128gcmv1
0.40?0.42?0.45?T:aes256gcmv1
0.430.430.44aes256gcmv1
5.835.855.87ascon128av12
8.258.258.26ascon80pqv12
8.258.258.25ascon128v12
8.628.658.73T:xoodyakround3
12.1912.1912.20ascon128abi32v12
16.9617.0517.05T:isapa128v20
18.4818.5118.53ascon128bi32v12
18.9319.2119.50T:schwaemm256128v2
22.2922.3222.33romulusm
22.2822.3222.34romulusn
22.8822.8922.93T:grain128aeadv2
23.6123.6323.65T:isapa128av20
24.0824.2424.39T:schwaemm256256v2
26.2226.4826.76T:schwaemm192192v2
30.9431.0331.15T:schwaemm128128v2
32.9732.9833.28T:tinyjambu256v2
36.5536.5536.55T:tinyjambu192v2
36.3936.5736.76T:isapk128av20
36.3736.6236.63T:tinyjambu128v2
38.3138.3538.37T:giftcofb128v1
38.7638.8238.92romulust
50.2550.4750.84T:isapk128v20
86.3186.9387.74T:isapxv20
112.65?115.56?126.28?T:elephant200v2
3310.733313.853321.38T:elephant176v2
3922.613922.953923.50T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.980.981.01T:aes128gcmv1
1.031.041.05T:aes256gcmv1
1.271.271.28aes256gcmv1
6.016.016.02ascon128av12
8.518.528.54ascon80pqv12
8.578.588.59ascon128v12
12.7012.7112.72ascon128abi32v12
12.8012.8212.85T:xoodyakround3
19.1519.1519.19ascon128bi32v12
19.9220.0020.26T:schwaemm256128v2
23.3623.3823.41T:grain128aeadv2
24.5324.5425.14T:schwaemm256256v2
26.5626.6026.80T:schwaemm192192v2
29.9429.9629.97romulusn
31.5031.6231.64T:schwaemm128128v2
33.5733.5733.81T:isapa128av20
37.2137.2237.23T:isapa128v20
38.7538.7638.76T:giftcofb128v1
41.0741.0841.12romulusm
47.8047.9948.00T:tinyjambu128v2
49.6349.6449.65T:tinyjambu256v2
51.7051.7151.72T:tinyjambu192v2
54.7554.7754.99T:isapk128av20
77.8277.8577.88romulust
108.50108.63108.77T:isapk128v20
175.51178.55194.54T:elephant200v2
193.01193.25193.65T:isapxv20
5049.845050.355073.16T:elephant176v2
5949.915950.225954.20T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.970.971.00T:aes128gcmv1
1.031.031.05T:aes256gcmv1
1.261.261.27aes256gcmv1
6.196.196.21ascon128av12
8.478.478.48ascon80pqv12
8.538.538.54ascon128v12
12.7312.7312.77ascon128abi32v12
12.7812.7912.81T:xoodyakround3
18.8418.8518.87ascon128bi32v12
19.9420.0420.21T:schwaemm256128v2
23.3123.3223.45T:grain128aeadv2
24.8424.9625.09T:schwaemm256256v2
26.3326.5326.73T:schwaemm192192v2
30.0430.0730.09romulusn
31.2531.3331.42T:schwaemm128128v2
33.8133.8233.83T:isapa128av20
37.2137.2137.21T:isapa128v20
38.7938.8038.80T:giftcofb128v1
41.3041.3341.36romulusm
47.9148.0048.07T:tinyjambu128v2
49.7749.7949.81T:tinyjambu256v2
51.0851.1351.14T:tinyjambu192v2
54.8854.9854.99T:isapk128av20
77.8277.8577.89romulust
109.81109.85110.08T:isapk128v20
176.36178.65193.85T:elephant200v2
192.88193.26193.71T:isapxv20
5049.255050.425064.58T:elephant176v2
5949.975951.385952.21T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.970.981.00T:aes128gcmv1
1.031.031.05T:aes256gcmv1
1.261.261.26aes256gcmv1
6.196.196.20ascon128av12
8.478.478.48ascon80pqv12
8.538.538.54ascon128v12
12.7212.7312.73ascon128abi32v12
12.7912.8112.83T:xoodyakround3
18.8418.8518.87ascon128bi32v12
19.8319.9320.01T:schwaemm256128v2
22.8622.8622.88T:isapa128v20
23.3123.3223.35T:grain128aeadv2
24.9024.9624.96T:schwaemm256256v2
25.9225.9225.93T:isapa128av20
26.5626.6326.74T:schwaemm192192v2
30.0730.0830.10romulusn
31.2231.3131.35T:schwaemm128128v2
38.7938.8038.81T:giftcofb128v1
39.9239.9639.98romulust
41.3141.3241.35romulusm
42.2942.3342.44T:isapk128av20
47.9148.0048.07T:tinyjambu128v2
49.7749.8149.81T:tinyjambu256v2
51.1351.1451.15T:tinyjambu192v2
73.7073.8273.88T:isapk128v20
124.98125.01125.20T:isapxv20
175.78178.55195.05T:elephant200v2
5050.725051.265055.94T:elephant176v2
5950.395950.535952.96T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.106.156.27aes256gcmv1
9.849.849.94ascon128av12
10.1010.1610.70T:aes128gcmv1
10.7110.8711.33T:aes256gcmv1
11.4011.4011.48ascon128v12
11.4011.4511.53ascon80pqv12
18.3518.4318.56T:xoodyakround3
19.5519.6419.73ascon128abi32v12
25.9626.2327.11ascon128bi32v12
31.4731.5531.68T:grain128aeadv2
33.3133.3833.62T:schwaemm256128v2
35.6635.8035.90romulusn
39.7039.8440.40T:schwaemm256256v2
40.4640.6140.96T:schwaemm128128v2
43.0543.4943.91T:schwaemm192192v2
46.4546.7246.82T:giftcofb128v1
46.8546.9647.11romulusm
56.6556.9557.69T:tinyjambu128v2
58.4858.5958.71T:tinyjambu256v2
61.0361.1161.26T:tinyjambu192v2
103.31103.63103.84romulust
128.51128.63128.78T:isapa128av20
183.55184.15185.89T:isapk128av20
248.39250.24272.04T:elephant200v2
304.56304.56304.73T:isapa128v20
1113.401116.661120.52T:isapk128v20
1884.321884.551887.20T:isapxv20
6289.456297.556315.10T:elephant176v2
7969.867973.027984.23T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.605.685.72aes256gcmv1
9.919.9110.01ascon128av12
10.0510.2010.88T:aes128gcmv1
10.7410.9611.37T:aes256gcmv1
11.2711.2911.55ascon80pqv12
11.3611.3611.47ascon128v12
18.3718.5518.68T:xoodyakround3
19.3119.4120.23ascon128abi32v12
26.6026.6027.32ascon128bi32v12
31.3431.4831.84T:grain128aeadv2
33.0933.3233.52T:schwaemm256128v2
36.0236.1036.23romulusn
39.7139.8740.48T:schwaemm256256v2
40.5140.8441.33T:schwaemm128128v2
43.3443.6144.05T:schwaemm192192v2
46.8447.2047.29T:giftcofb128v1
48.2648.5048.66romulusm
56.8557.8458.13T:tinyjambu128v2
58.9159.6659.82T:tinyjambu256v2
62.3362.4862.63T:tinyjambu192v2
103.55103.77103.88romulust
128.81128.89129.38T:isapa128av20
183.49188.73189.61T:isapk128av20
247.74249.91271.52T:elephant200v2
304.65304.65305.32T:isapa128v20
1138.551141.881142.31T:isapk128v20
1890.711893.851894.16T:isapxv20
6288.506290.386309.89T:elephant176v2
7966.547967.097970.98T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.615.705.77aes256gcmv1
9.939.959.95ascon128av12
10.0910.3010.65T:aes128gcmv1
10.7810.9511.42T:aes256gcmv1
11.2711.2711.34ascon80pqv12
11.3611.3611.38ascon128v12
18.3518.5519.10T:xoodyakround3
19.3219.4119.41ascon128abi32v12
26.5826.5827.23ascon128bi32v12
31.4531.6631.95T:grain128aeadv2
33.1733.3233.60T:schwaemm256128v2
35.9836.1036.41romulusn
39.8040.0640.60T:schwaemm256256v2
40.5440.9141.17T:schwaemm128128v2
43.3843.7144.03T:schwaemm192192v2
46.8346.8347.19T:giftcofb128v1
48.4348.5648.71romulusm
56.8057.7657.95T:tinyjambu128v2
58.7959.5759.72T:tinyjambu256v2
60.7762.2462.31T:tinyjambu192v2
64.6664.9465.34romulust
77.3977.5777.73T:isapa128av20
115.95118.23119.32T:isapk128av20
158.71158.91159.52T:isapa128v20
248.59251.52271.48T:elephant200v2
600.05601.86604.92T:isapk128v20
982.11988.67988.78T:isapxv20
6288.116290.436301.55T:elephant176v2
7967.647968.867969.20T:elephant160v2

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.711.721.72T:aes128gcmv1
1.841.851.86aes256gcmv1
5.605.635.66ascon128av12
8.138.138.13ascon80pqv12
8.378.388.42ascon128v12
12.4712.5112.54ascon128abi32v12
14.7114.8114.87T:xoodyakround3
18.1618.1918.21ascon128bi32v12
18.1918.2218.27T:schwaemm256128v2
22.8322.9824.98T:grain128aeadv2
23.69?24.01?26.82?T:schwaemm256256v2
24.1624.2224.27T:schwaemm192192v2
28.5228.6528.83T:schwaemm128128v2
31.0331.0431.04T:isapa128v20
33.2333.2633.30T:isapa128av20
37.1237.1537.18romulusn
38.5638.5738.57T:giftcofb128v1
58.5058.5058.53T:tinyjambu128v2
59.4059.4459.47romulusm
60.4160.7860.85T:isapk128av20
62.5062.5062.50T:tinyjambu192v2
65.7365.8765.88T:tinyjambu256v2
82.4582.5482.69T:isapk128v20
120.70120.76120.80romulust
122.92123.08123.35T:elephant200v2
146.77148.52150.81T:isapxv20
6338.496376.376446.46T:elephant176v2
7797.257802.347841.88T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.711.721.72T:aes128gcmv1
1.861.871.88aes256gcmv1
5.175.195.19ascon128av12
7.627.637.63ascon80pqv12
7.877.887.88ascon128v12
12.6212.6312.67ascon128abi32v12
14.6414.6914.75T:xoodyakround3
18.2118.2618.32T:schwaemm256128v2
18.6118.6418.67ascon128bi32v12
23.0523.1223.66T:grain128aeadv2
23.63?23.98?26.48?T:schwaemm256256v2
24.1324.2024.26T:schwaemm192192v2
28.4828.6328.73T:schwaemm128128v2
30.9931.0431.08T:isapa128v20
33.2333.2733.30T:isapa128av20
37.3637.4337.44romulusn
38.5038.5038.51T:giftcofb128v1
58.5058.5158.51T:tinyjambu128v2
59.7259.7759.83romulusm
60.3260.8460.87T:isapk128av20
62.7562.7562.77T:tinyjambu192v2
65.4865.5065.52T:tinyjambu256v2
82.3582.4882.61T:isapk128v20
120.68120.80120.87romulust
122.86122.95123.05T:elephant200v2
147.56148.13149.02T:isapxv20
6370.206385.586390.08T:elephant176v2
7793.947830.607874.24T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.711.711.72T:aes128gcmv1
1.861.861.87aes256gcmv1
5.175.195.19ascon128av12
7.637.637.64ascon80pqv12
7.887.887.88ascon128v12
12.6212.6312.66ascon128abi32v12
14.6814.7314.77T:xoodyakround3
15.4815.5215.55T:isapa128v20
18.2118.2718.31T:schwaemm256128v2
18.6218.6418.67ascon128bi32v12
22.3222.3822.38T:isapa128av20
23.0323.0923.64T:grain128aeadv2
23.67?24.02?26.53?T:schwaemm256256v2
24.1524.1924.26T:schwaemm192192v2
28.5228.6528.81T:schwaemm128128v2
37.3637.4237.45romulusn
38.5038.5038.51T:giftcofb128v1
40.9841.0341.09romulust
43.6243.6543.83T:isapk128av20
56.2056.3556.41T:isapk128v20
58.5058.5158.52T:tinyjambu128v2
59.7159.7559.80romulusm
62.7562.7562.75T:tinyjambu192v2
65.4965.5065.52T:tinyjambu256v2
85.2385.4886.15T:isapxv20
122.93123.03123.15T:elephant200v2
6346.986368.476381.26T:elephant176v2
7790.827809.507886.74T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.081.091.09T:aes128gcmv1
1.141.151.16aes256gcmv1
5.625.635.65ascon128av12
7.877.887.89ascon80pqv12
8.128.148.15ascon128v12
11.3911.4511.47T:xoodyakround3
12.2412.3512.38ascon128abi32v12
18.0818.1118.14T:schwaemm256128v2
18.4018.4218.44ascon128bi32v12
22.8222.9524.96T:grain128aeadv2
23.2723.2923.29T:isapa128v20
23.6023.6323.81T:schwaemm256256v2
24.5824.7524.91T:schwaemm192192v2
27.2427.2727.28T:isapa128av20
28.5028.5828.66T:schwaemm128128v2
29.7429.7529.76romulusn
38.3838.3838.39T:giftcofb128v1
40.8940.9040.93romulusm
46.7546.7746.77T:tinyjambu128v2
46.5147.0847.59T:isapk128av20
49.6049.6149.62T:tinyjambu256v2
50.1350.1450.15T:tinyjambu192v2
65.6665.7565.80T:isapk128v20
80.8780.9180.94romulust
92.6692.7392.78T:elephant200v2
116.76117.01118.31T:isapxv20
4741.224750.674759.86T:elephant176v2
5832.585863.745936.02T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.081.081.10T:aes128gcmv1
1.151.151.15aes256gcmv1
5.265.275.28ascon128av12
7.757.767.76ascon80pqv12
7.817.827.82ascon128v12
11.3411.3611.38T:xoodyakround3
12.4412.4812.50ascon128abi32v12
18.1218.1418.18T:schwaemm256128v2
18.2418.2618.27ascon128bi32v12
22.9423.0123.60T:grain128aeadv2
23.2723.2723.28T:isapa128v20
23.6423.7423.84T:schwaemm256256v2
24.5124.6624.86T:schwaemm192192v2
27.2527.2627.28T:isapa128av20
28.4728.5128.61T:schwaemm128128v2
29.8629.8929.92romulusn
38.3538.3538.35T:giftcofb128v1
41.0341.0641.09romulusm
46.7646.7646.76T:tinyjambu128v2
46.6347.3547.61T:isapk128av20
49.4249.4249.43T:tinyjambu256v2
50.0150.0150.01T:tinyjambu192v2
65.5665.5965.66T:isapk128v20
80.8680.9380.98romulust
92.6892.7592.79T:elephant200v2
116.62116.93117.22T:isapxv20
4734.124747.394752.12T:elephant176v2
5827.775869.735874.79T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.081.091.09T:aes128gcmv1
1.151.151.15aes256gcmv1
5.265.275.28ascon128av12
7.767.767.76ascon80pqv12
7.817.827.82ascon128v12
11.3411.3611.39T:xoodyakround3
12.4812.4812.48ascon128abi32v12
15.5015.5115.53T:isapa128v20
18.1118.1318.16T:schwaemm256128v2
18.2518.2618.27ascon128bi32v12
21.7821.8221.85T:isapa128av20
22.9623.0523.69T:grain128aeadv2
23.6423.7923.84T:schwaemm256256v2
24.3424.3924.51T:schwaemm192192v2
28.4528.5828.66T:schwaemm128128v2
29.8729.8829.92romulusn
38.3538.3538.35T:giftcofb128v1
38.3638.9739.04T:isapk128av20
40.9740.9941.03romulust
41.0541.0741.08romulusm
46.7646.7646.77T:tinyjambu128v2
49.4249.4249.43T:tinyjambu256v2
50.0150.0150.01T:tinyjambu192v2
52.5252.5952.65T:isapk128v20
85.4685.7285.95T:isapxv20
92.6992.7592.89T:elephant200v2
4740.394766.574806.43T:elephant176v2
5850.635892.455913.32T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.440.450.46aes256gcmv1
0.450.450.46T:aes128gcmv1
5.615.635.64ascon128av12
7.617.627.64ascon80pqv12
7.867.877.88ascon128v12
8.018.048.07T:xoodyakround3
12.1712.2012.22ascon128abi32v12
15.5115.5115.51T:isapa128v20
17.9618.0218.09T:schwaemm256128v2
18.5718.6318.68ascon128bi32v12
21.2121.2621.29T:isapa128av20
22.3322.3622.39romulusm
22.3422.3722.40romulusn
22.8322.9324.81T:grain128aeadv2
23.2123.5823.65T:schwaemm256256v2
24.6324.8224.93T:schwaemm192192v2
28.4228.5228.61T:schwaemm128128v2
33.3433.3533.36T:tinyjambu256v2
33.7833.8234.24T:isapk128av20
35.0035.0035.00T:tinyjambu128v2
37.7637.7637.77T:tinyjambu192v2
38.1938.2038.21T:giftcofb128v1
40.9641.0241.08romulust
48.8548.8848.93T:isapk128v20
62.6062.6862.77T:elephant200v2
84.8685.4186.34T:isapxv20
3135.503151.443183.76T:elephant176v2
3906.033907.183942.88T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.430.430.45aes256gcmv1
0.450.460.46T:aes128gcmv1
5.365.365.36ascon128av12
7.747.757.75ascon128v12
7.887.887.88ascon80pqv12
8.008.048.08T:xoodyakround3
12.2912.3312.34ascon128abi32v12
15.4815.4815.55T:isapa128v20
17.8517.8817.91ascon128bi32v12
17.9818.0218.08T:schwaemm256128v2
21.2121.2621.32T:isapa128av20
22.3322.3622.42romulusm
22.3522.3822.42romulusn
22.8222.9323.64T:grain128aeadv2
23.1223.4323.58T:schwaemm256256v2
24.6024.8625.15T:schwaemm192192v2
28.4228.5128.72T:schwaemm128128v2
33.3433.3533.36T:tinyjambu256v2
33.5933.6234.34T:isapk128av20
35.0035.0135.02T:tinyjambu128v2
37.2637.2637.27T:tinyjambu192v2
38.1838.2038.20T:giftcofb128v1
40.9441.0341.12romulust
48.8148.8948.91T:isapk128v20
62.6462.7062.76T:elephant200v2
85.2285.4785.93T:isapxv20
3131.503143.493150.94T:elephant176v2
3907.113910.443912.19T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.430.430.44aes256gcmv1
0.450.450.46T:aes128gcmv1
5.365.365.37ascon128av12
7.757.757.76ascon128v12
7.887.887.88ascon80pqv12
8.018.068.10T:xoodyakround3
12.3212.3312.33ascon128abi32v12
15.4815.5115.54T:isapa128v20
17.8517.8817.90ascon128bi32v12
17.9818.0218.07T:schwaemm256128v2
21.2221.2621.32T:isapa128av20
22.3322.3722.40romulusm
22.3222.3822.41romulusn
22.8922.9523.64T:grain128aeadv2
23.1823.5023.64T:schwaemm256256v2
24.5724.7224.79T:schwaemm192192v2
28.3928.4928.59T:schwaemm128128v2
33.3433.3533.36T:tinyjambu256v2
33.6133.6834.33T:isapk128av20
35.0135.0135.02T:tinyjambu128v2
37.2637.2637.27T:tinyjambu192v2
38.1938.1938.20T:giftcofb128v1
40.9341.0141.07romulust
48.8248.8848.91T:isapk128v20
62.6362.6862.73T:elephant200v2
85.0885.4285.96T:isapxv20
3131.963159.333174.82T:elephant176v2
3899.623937.973941.54T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.191.191.20T:aes128gcmv1
1.261.271.27aes256gcmv1
5.775.785.80ascon128av12
8.008.008.01ascon80pqv12
8.258.258.26ascon128v12
11.4711.5611.58T:xoodyakround3
12.6412.6412.68ascon128abi32v12
18.6518.7018.73T:schwaemm256128v2
18.7518.7618.78ascon128bi32v12
23.3223.3525.17T:grain128aeadv2
24.2524.2924.49T:schwaemm256256v2
25.0025.0325.11T:schwaemm192192v2
28.9228.9729.04T:schwaemm128128v2
29.5029.5029.51T:isapa128av20
30.0130.0230.04romulusn
34.1534.1534.17T:isapa128v20
38.6838.6838.69T:giftcofb128v1
41.1641.1841.20romulusm
47.1147.1247.13T:tinyjambu128v2
50.0050.0050.00T:tinyjambu256v2
50.5150.5250.52T:tinyjambu192v2
53.2254.2656.38T:isapk128av20
82.1682.1882.21romulust
94.7694.8194.88T:elephant200v2
106.09106.13106.16T:isapk128v20
190.26190.37191.64T:isapxv20
4761.784791.864794.63T:elephant176v2
5923.265931.535995.92T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.201.201.20T:aes128gcmv1
1.271.271.28aes256gcmv1
5.415.435.44ascon128av12
7.887.887.88ascon80pqv12
7.937.937.93ascon128v12
11.4411.4511.48T:xoodyakround3
12.7612.7712.80ascon128abi32v12
18.6218.6218.64ascon128bi32v12
18.6918.7118.73T:schwaemm256128v2
23.3623.4324.01T:grain128aeadv2
24.2524.3424.45T:schwaemm256256v2
24.9925.0425.11T:schwaemm192192v2
28.9028.9829.03T:schwaemm128128v2
29.4929.4929.49T:isapa128av20
30.1630.1830.19romulusn
34.1534.1534.17T:isapa128v20
38.6538.6538.65T:giftcofb128v1
41.3641.3841.42romulusm
47.1047.1147.11T:tinyjambu128v2
49.8149.8249.82T:tinyjambu256v2
50.3950.3950.41T:tinyjambu192v2
53.1254.2554.28T:isapk128av20
82.1582.1982.23romulust
94.6894.7594.79T:elephant200v2
106.02106.06106.11T:isapk128v20
189.80190.21190.44T:isapxv20
4761.824775.454800.87T:elephant176v2
5910.335921.365922.18T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.201.201.20T:aes128gcmv1
1.271.271.27aes256gcmv1
5.415.415.43ascon128av12
7.887.887.88ascon80pqv12
7.937.937.94ascon128v12
11.4411.4711.52T:xoodyakround3
12.7612.7612.77ascon128abi32v12
18.6218.6218.64ascon128bi32v12
18.6718.7018.73T:schwaemm256128v2
21.0421.0421.06T:isapa128v20
23.0723.0723.09T:isapa128av20
23.3723.4024.00T:grain128aeadv2
24.2324.2924.42T:schwaemm256256v2
24.9725.0225.11T:schwaemm192192v2
28.9729.0029.05T:schwaemm128128v2
30.1530.1630.21romulusn
38.6538.6538.65T:giftcofb128v1
41.3641.3741.41romulusm
42.2642.3242.34romulust
42.4643.5245.50T:isapk128av20
47.1047.1147.11T:tinyjambu128v2
49.8149.8149.82T:tinyjambu256v2
50.3950.3950.39T:tinyjambu192v2
73.4573.5073.56T:isapk128v20
94.6794.7094.78T:elephant200v2
122.85123.30123.37T:isapxv20
4771.994785.924794.56T:elephant176v2
5909.645911.045915.89T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.525.565.59T:aes128gcmv1
5.885.896.00aes256gcmv1
8.648.929.20ascon128av12
10.6610.8010.85ascon80pqv12
11.0411.1211.12ascon128v12
16.5916.6616.77T:xoodyakround3
19.3719.4520.33ascon128abi32v12
26.4126.4527.17ascon128bi32v12
31.2331.3431.47T:schwaemm256128v2
31.7031.9533.05T:grain128aeadv2
35.9535.9636.10romulusn
37.5837.7738.20T:schwaemm128128v2
38.8139.0239.13T:schwaemm256256v2
39.8140.1740.55T:schwaemm192192v2
45.5045.5445.70T:giftcofb128v1
46.9547.0547.26romulusm
55.0555.0555.22T:tinyjambu128v2
58.6658.7758.93T:tinyjambu256v2
58.8858.9059.05T:tinyjambu192v2
80.6580.7281.25T:isapa128av20
111.05111.27111.66romulust
135.48135.75135.98T:elephant200v2
170.85170.95171.12T:isapk128av20
284.11284.11284.30T:isapa128v20
1023.011023.261023.58T:isapk128v20
1850.391855.261856.27T:isapxv20
5936.705955.885963.47T:elephant176v2
7920.737926.407956.11T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.315.345.40T:aes128gcmv1
5.685.715.81aes256gcmv1
8.999.119.16ascon128av12
10.6210.6210.69ascon80pqv12
10.6410.6710.70ascon128v12
16.6716.8016.88T:xoodyakround3
19.4819.4819.88ascon128abi32v12
26.9526.9727.72ascon128bi32v12
31.2331.5531.69T:schwaemm256128v2
32.1732.3132.67T:grain128aeadv2
36.4036.5336.74romulusn
37.3037.8738.42T:schwaemm128128v2
38.7939.0639.27T:schwaemm256256v2
39.9440.6340.91T:schwaemm192192v2
45.6245.6545.70T:giftcofb128v1
48.5048.6348.79romulusm
54.9954.9955.12T:tinyjambu128v2
58.6258.8058.93T:tinyjambu256v2
58.7658.8158.98T:tinyjambu192v2
80.5680.6281.02T:isapa128av20
111.30111.65112.13romulust
135.48135.73136.54T:elephant200v2
170.80170.82170.93T:isapk128av20
284.08284.11284.76T:isapa128v20
1023.151023.621023.79T:isapk128v20
1851.591854.451855.48T:isapxv20
5931.365940.515969.55T:elephant176v2
7900.127925.547964.16T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.305.335.44T:aes128gcmv1
5.705.735.81aes256gcmv1
8.869.119.11ascon128av12
10.5910.5910.59ascon80pqv12
10.6410.6410.64ascon128v12
16.6816.8016.85T:xoodyakround3
19.4619.4619.48ascon128abi32v12
26.9526.9527.35ascon128bi32v12
31.1231.2731.59T:schwaemm256128v2
31.5632.2332.51T:grain128aeadv2
36.4536.4836.66romulusn
37.4538.0138.27T:schwaemm128128v2
38.6739.1139.48T:schwaemm256256v2
40.1740.3440.93T:schwaemm192192v2
45.6245.6445.68T:giftcofb128v1
48.4148.5648.88romulusm
51.6551.7352.70T:isapa128av20
54.9854.9954.99T:tinyjambu128v2
58.5858.7058.76T:tinyjambu256v2
58.7558.7758.86T:tinyjambu192v2
71.0571.2771.87romulust
112.60112.65113.30T:isapk128av20
135.66136.09136.22T:elephant200v2
147.97147.99148.70T:isapa128v20
544.39544.50545.23T:isapk128v20
965.23968.04972.39T:isapxv20
5964.675992.596003.13T:elephant176v2
7909.527921.347931.19T:elephant160v2

amd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.920.940.97T:aes256gcmv1
1.511.531.54T:aes128gcmv1
1.671.691.70aes256gcmv1
6.406.426.46ascon128av12
9.379.389.40ascon128v12
9.419.419.42ascon80pqv12
11.1311.1711.41ascon128abi32v12
16.9317.0317.14ascon128bi32v12
17.4817.5817.59T:xoodyakround3
19.4719.5519.59T:schwaemm256128v2
23.6623.7224.65T:schwaemm256256v2
25.5825.7025.85T:schwaemm192192v2
27.3027.3427.36T:grain128aeadv2
27.5827.7027.88T:schwaemm128128v2
35.5235.5435.55romulusn
36.3936.4136.43T:isapa128av20
36.5436.6036.61T:isapa128v20
40.4640.4940.51T:giftcofb128v1
57.1057.1657.23romulusm
61.7361.7561.77T:tinyjambu128v2
65.0065.1865.28T:isapk128av20
68.9568.9668.98T:tinyjambu192v2
75.9675.9875.99T:tinyjambu256v2
84.9285.6085.63T:isapk128v20
112.30112.31112.31romulust
148.05150.18151.22T:isapxv20
253.01254.04259.70T:elephant200v2
6481.726487.666494.01T:elephant176v2
7161.817183.777192.06T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.880.910.97T:aes256gcmv1
1.611.611.63T:aes128gcmv1
1.781.791.82aes256gcmv1
6.286.306.32ascon128av12
9.309.319.31ascon128v12
9.399.399.41ascon80pqv12
11.2111.2311.25ascon128abi32v12
16.7816.9016.97ascon128bi32v12
17.4417.5117.60T:xoodyakround3
19.4819.5519.63T:schwaemm256128v2
23.6523.7224.26T:schwaemm256256v2
25.6525.7325.84T:schwaemm192192v2
26.9927.0527.51T:grain128aeadv2
27.5427.6227.80T:schwaemm128128v2
35.5735.5935.61romulusn
36.2836.3436.43T:isapa128v20
36.4136.4536.48T:isapa128av20
40.5140.5340.58T:giftcofb128v1
57.1957.2757.31romulusm
60.1060.1560.20T:tinyjambu128v2
64.9965.0165.08T:isapk128av20
68.6868.7368.78T:tinyjambu192v2
76.0776.0976.11T:tinyjambu256v2
84.7684.9285.69T:isapk128v20
112.27112.32112.35romulust
147.88149.59151.26T:isapxv20
252.57253.47258.96T:elephant200v2
6477.776483.896489.32T:elephant176v2
7160.997186.007193.83T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.900.950.96T:aes256gcmv1
1.601.611.62T:aes128gcmv1
1.791.801.80aes256gcmv1
6.276.306.31ascon128av12
9.259.269.27ascon128v12
9.379.389.39ascon80pqv12
11.2311.2411.25ascon128abi32v12
16.7916.9016.97ascon128bi32v12
17.5017.5917.62T:xoodyakround3
18.0118.0518.13T:isapa128v20
19.4319.5319.62T:schwaemm256128v2
23.6323.7224.71T:schwaemm256256v2
24.1324.1524.21T:isapa128av20
25.7025.8125.88T:schwaemm192192v2
26.9127.0327.53T:grain128aeadv2
27.5827.6127.82T:schwaemm128128v2
35.5535.5835.63romulusn
37.5037.5837.59romulust
40.4940.5540.56T:giftcofb128v1
44.2444.4844.68T:isapk128av20
54.5854.6254.65T:isapk128v20
57.1957.2757.31romulusm
60.1060.1160.18T:tinyjambu128v2
68.7268.7668.82T:tinyjambu192v2
76.0876.1176.12T:tinyjambu256v2
86.4186.9088.67T:isapxv20
252.58253.16259.17T:elephant200v2
6480.496484.756489.73T:elephant176v2
7159.897185.887194.56T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.670.680.70T:aes256gcmv1
1.011.021.03T:aes128gcmv1
1.091.101.11aes256gcmv1
6.376.406.42ascon128av12
9.329.349.37ascon80pqv12
9.339.359.36ascon128v12
11.0411.0911.11ascon128abi32v12
13.2913.3013.38T:xoodyakround3
16.7916.8816.92ascon128bi32v12
19.3819.4219.45T:schwaemm256128v2
23.5223.6324.37T:schwaemm256256v2
25.5725.6125.68T:schwaemm192192v2
27.1427.2627.31T:grain128aeadv2
27.2527.3127.42T:isapa128v20
27.4827.5927.62T:schwaemm128128v2
28.6928.7228.75romulusn
30.2730.3030.31T:isapa128av20
39.4939.5739.62romulusm
40.3640.4140.45T:giftcofb128v1
51.1851.2251.25T:tinyjambu128v2
54.3254.3354.34T:tinyjambu192v2
54.7654.8354.87T:isapk128av20
57.9358.0058.10T:tinyjambu256v2
69.8170.1670.19T:isapk128v20
74.8874.9174.92romulust
116.26116.55117.55T:isapxv20
190.33190.65193.78T:elephant200v2
4846.494848.074850.22T:elephant176v2
5374.415388.375395.99T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.670.680.69T:aes256gcmv1
1.051.061.07T:aes128gcmv1
1.141.151.16aes256gcmv1
6.336.346.35ascon128av12
9.319.329.33ascon128v12
9.339.359.36ascon80pqv12
11.0711.0911.11ascon128abi32v12
13.3613.3813.42T:xoodyakround3
16.6816.7516.80ascon128bi32v12
19.3919.4419.49T:schwaemm256128v2
23.5423.6224.27T:schwaemm256256v2
25.5625.6425.69T:schwaemm192192v2
27.1027.1327.51T:grain128aeadv2
27.2327.2927.33T:isapa128v20
27.4027.5327.57T:schwaemm128128v2
28.7128.7428.77romulusn
30.3030.3230.35T:isapa128av20
39.5739.5939.64romulusm
40.3840.4240.45T:giftcofb128v1
50.4250.4350.43T:tinyjambu128v2
54.2254.2354.26T:tinyjambu192v2
54.7454.7954.84T:isapk128av20
58.1058.1258.13T:tinyjambu256v2
69.7669.8070.20T:isapk128v20
74.8874.9074.94romulust
116.40116.78117.01T:isapxv20
190.11190.34193.79T:elephant200v2
4842.914845.194849.30T:elephant176v2
5370.225387.835390.96T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.670.680.69T:aes256gcmv1
1.061.061.06T:aes128gcmv1
1.151.151.16aes256gcmv1
6.356.366.37ascon128av12
9.319.319.33ascon128v12
9.339.349.34ascon80pqv12
11.0911.1111.16ascon128abi32v12
13.3613.4213.46T:xoodyakround3
16.6916.7616.80ascon128bi32v12
18.1118.1218.23T:isapa128v20
19.3619.4119.46T:schwaemm256128v2
23.5423.6224.26T:schwaemm256256v2
24.1624.1924.21T:isapa128av20
25.6025.6525.70T:schwaemm192192v2
27.1227.1527.19T:grain128aeadv2
27.5227.5727.70T:schwaemm128128v2
28.7228.7428.77romulusn
37.5137.5437.56romulust
39.5539.5839.64romulusm
40.4040.4240.44T:giftcofb128v1
44.3844.5144.63T:isapk128av20
50.4250.4250.42T:tinyjambu128v2
54.1954.2254.24T:tinyjambu192v2
54.6254.6554.67T:isapk128v20
58.0258.0358.07T:tinyjambu256v2
86.3086.4586.65T:isapxv20
189.72191.04193.70T:elephant200v2
4843.064846.944851.47T:elephant176v2
5369.175389.325391.97T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.420.420.44T:aes256gcmv1
0.510.520.56aes256gcmv1
0.520.530.55T:aes128gcmv1
6.316.326.36ascon128av12
9.259.279.28ascon80pqv12
9.289.299.31ascon128v12
9.269.309.31T:xoodyakround3
10.9010.9410.95ascon128abi32v12
16.5316.6916.73ascon128bi32v12
18.2318.2618.27T:isapa128v20
19.1919.3019.34T:schwaemm256128v2
21.8421.9121.95romulusm
21.8621.9221.96romulusn
23.4223.5524.31T:schwaemm256256v2
24.1524.1824.19T:isapa128av20
25.4025.5125.63T:schwaemm192192v2
27.1427.2027.26T:grain128aeadv2
27.3127.3427.56T:schwaemm128128v2
37.5037.5737.58romulust
39.6939.7039.71T:tinyjambu192v2
40.0240.0240.12T:tinyjambu256v2
40.2640.3140.36T:giftcofb128v1
40.6540.6740.70T:tinyjambu128v2
44.3144.5744.73T:isapk128av20
54.6254.8354.84T:isapk128v20
85.8286.7886.87T:isapxv20
125.99126.23128.31T:elephant200v2
3193.993195.523201.91T:elephant176v2
3576.733584.163588.69T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.420.430.44T:aes256gcmv1
0.500.510.54T:aes128gcmv1
0.49?0.52?0.55?aes256gcmv1
6.336.346.36ascon128av12
9.289.299.31ascon128v12
9.289.299.31ascon80pqv12
9.239.299.35T:xoodyakround3
10.9410.9610.97ascon128abi32v12
16.4816.5916.69ascon128bi32v12
18.2018.2518.28T:isapa128v20
19.1319.2819.37T:schwaemm256128v2
21.8321.9021.95romulusn
21.8521.9221.94romulusm
23.3923.4824.34T:schwaemm256256v2
24.1324.2024.25T:isapa128av20
25.4725.4925.57T:schwaemm192192v2
26.5927.1527.26T:grain128aeadv2
27.2527.3327.54T:schwaemm128128v2
37.4937.5237.58romulust
39.6939.7039.73T:tinyjambu192v2
40.1340.1440.14T:tinyjambu256v2
40.2740.3240.35T:giftcofb128v1
40.6740.7140.71T:tinyjambu128v2
44.3744.5344.76T:isapk128av20
54.6454.6954.72T:isapk128v20
85.7486.1386.80T:isapxv20
125.40126.08128.33T:elephant200v2
3193.953199.613201.46T:elephant176v2
3576.413584.013589.88T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.410.430.44T:aes256gcmv1
0.510.520.53T:aes128gcmv1
0.500.520.53aes256gcmv1
6.356.366.37ascon128av12
9.289.299.32ascon128v12
9.289.299.30ascon80pqv12
9.239.299.35T:xoodyakround3
10.9510.9611.04ascon128abi32v12
16.4816.6016.69ascon128bi32v12
18.2218.2518.28T:isapa128v20
19.2119.2819.35T:schwaemm256128v2
21.8021.8621.96romulusn
21.8421.9622.02romulusm
23.4023.4624.34T:schwaemm256256v2
24.1424.1824.25T:isapa128av20
25.4525.4825.61T:schwaemm192192v2
26.7527.1827.27T:grain128aeadv2
27.2827.5527.73T:schwaemm128128v2
37.5037.5437.58romulust
39.7039.7039.70T:tinyjambu192v2
40.0140.0140.07T:tinyjambu256v2
40.2840.3140.38T:giftcofb128v1
40.6940.7140.72T:tinyjambu128v2
44.3044.5344.74T:isapk128av20
54.6654.6954.71T:isapk128v20
85.6786.0686.93T:isapxv20
125.69126.03128.32T:elephant200v2
3193.583199.053203.98T:elephant176v2
3575.453583.313589.53T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.141.151.15T:aes128gcmv1
1.241.241.26T:aes256gcmv1
1.241.241.25aes256gcmv1
6.546.566.58ascon128av12
9.489.499.53ascon128v12
9.499.509.52ascon80pqv12
11.3711.3911.41ascon128abi32v12
13.4813.5413.58T:xoodyakround3
17.1717.2317.25ascon128bi32v12
19.9319.9720.02T:schwaemm256128v2
24.2224.2324.84T:schwaemm256256v2
26.1726.2226.27T:schwaemm192192v2
27.5927.6127.67T:grain128aeadv2
27.8627.9128.02T:schwaemm128128v2
28.9629.0129.04romulusn
33.5133.5333.55T:isapa128av20
39.8439.9339.96romulusm
39.9740.1440.16T:isapa128v20
40.7640.7840.81T:giftcofb128v1
51.6351.6451.64T:tinyjambu128v2
54.7554.7554.76T:tinyjambu192v2
58.4158.4158.45T:tinyjambu256v2
60.8760.8960.92T:isapk128av20
76.0376.0476.06romulust
121.57121.87121.93T:isapk128v20
189.51189.78190.19T:isapxv20
194.18194.55197.54T:elephant200v2
4875.764879.554885.66T:elephant176v2
5430.345448.525451.54T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.181.191.19T:aes128gcmv1
1.231.241.24T:aes256gcmv1
1.291.301.31aes256gcmv1
6.496.496.51ascon128av12
9.469.469.46ascon128v12
9.489.489.50ascon80pqv12
11.4011.4011.40ascon128abi32v12
13.5113.5313.56T:xoodyakround3
17.0517.0917.12ascon128bi32v12
19.9619.9820.04T:schwaemm256128v2
24.2124.2524.90T:schwaemm256256v2
26.1726.2126.26T:schwaemm192192v2
27.4927.5027.69T:grain128aeadv2
27.8427.9728.09T:schwaemm128128v2
28.9629.0229.04romulusn
33.5333.5533.56T:isapa128av20
39.9639.9740.01romulusm
39.9739.9840.05T:isapa128v20
40.8040.8140.81T:giftcofb128v1
50.8450.8450.86T:tinyjambu128v2
54.6154.6254.63T:tinyjambu192v2
58.5058.5258.56T:tinyjambu256v2
60.8960.9160.98T:isapk128av20
76.0476.0476.09romulust
121.58121.60121.91T:isapk128v20
189.57190.04190.06T:isapxv20
194.28194.33197.51T:elephant200v2
4878.104881.244884.51T:elephant176v2
5431.215448.395452.06T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.181.181.19T:aes128gcmv1
1.241.241.24T:aes256gcmv1
1.291.301.30aes256gcmv1
6.506.506.50ascon128av12
9.459.469.47ascon128v12
9.489.489.50ascon80pqv12
11.4011.4011.46ascon128abi32v12
13.5513.5613.57T:xoodyakround3
17.0617.0917.11ascon128bi32v12
19.9519.9720.03T:schwaemm256128v2
24.2224.2325.01T:schwaemm256256v2
24.6224.6224.64T:isapa128v20
25.9725.9826.00T:isapa128av20
26.1626.2026.26T:schwaemm192192v2
27.5027.5127.52T:grain128aeadv2
27.8227.9327.96T:schwaemm128128v2
28.9929.0229.03romulusn
38.6238.6438.65romulust
39.9639.9840.02romulusm
40.8040.8240.84T:giftcofb128v1
48.1548.2748.29T:isapk128av20
50.8650.8650.86T:tinyjambu128v2
54.5954.6254.65T:tinyjambu192v2
58.4758.4758.48T:tinyjambu256v2
81.1381.1481.16T:isapk128v20
123.88124.10124.35T:isapxv20
193.61194.42197.41T:elephant200v2
4876.814879.684882.55T:elephant176v2
5430.625445.815450.74T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.986.086.45T:aes128gcmv1
6.486.516.77aes256gcmv1
10.5010.6310.79ascon128av12
12.6112.9313.33ascon80pqv12
12.7113.0213.52ascon128v12
14.4114.4814.97T:aes256gcmv1
17.9318.7519.02ascon128abi32v12
19.6620.0420.20T:xoodyakround3
24.2724.4226.55ascon128bi32v12
32.4732.7733.35T:schwaemm256128v2
34.6734.7435.07romulusn
35.7035.8736.15T:grain128aeadv2
35.9836.3436.70T:schwaemm128128v2
38.7838.8439.35T:schwaemm256256v2
42.0542.6243.04T:schwaemm192192v2
46.9547.0947.46romulusm
49.3949.4249.70T:giftcofb128v1
60.7861.4161.45T:tinyjambu128v2
64.2664.4964.52T:tinyjambu192v2
68.0968.6468.71T:tinyjambu256v2
102.09102.21102.36romulust
106.88107.18107.48T:isapa128av20
189.38190.12191.43T:isapk128av20
274.22275.41278.52T:elephant200v2
330.85331.00331.72T:isapa128v20
1298.551298.581299.12T:isapk128v20
1849.121853.911859.26T:isapxv20
6060.356062.106065.26T:elephant176v2
7272.237280.277282.57T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.996.066.26T:aes128gcmv1
6.546.626.66aes256gcmv1
10.6710.8510.95ascon128av12
12.8412.8413.32ascon80pqv12
12.7112.8613.23ascon128v12
14.5014.5914.83T:aes256gcmv1
18.0218.4818.92ascon128abi32v12
19.6620.0620.30T:xoodyakround3
23.7224.7025.99ascon128bi32v12
32.8432.8733.49T:schwaemm256128v2
34.9335.0135.25romulusn
35.8935.9636.63T:grain128aeadv2
36.0436.2736.78T:schwaemm128128v2
38.7138.8739.50T:schwaemm256256v2
42.3242.9543.43T:schwaemm192192v2
48.4548.5748.92romulusm
49.5649.7350.00T:giftcofb128v1
60.5960.9561.01T:tinyjambu128v2
64.0564.1264.28T:tinyjambu192v2
68.1568.3068.75T:tinyjambu256v2
102.34102.53102.67romulust
106.80107.29107.39T:isapa128av20
191.05191.72192.14T:isapk128av20
274.77274.94278.84T:elephant200v2
329.31331.65331.85T:isapa128v20
1298.791299.041299.72T:isapk128v20
1852.681853.521859.12T:isapxv20
6059.666060.546066.34T:elephant176v2
7265.107280.727284.02T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.996.066.26T:aes128gcmv1
6.566.606.60aes256gcmv1
10.5210.6210.70ascon128av12
12.7012.7013.01ascon128v12
12.8412.8413.02ascon80pqv12
14.5014.5614.77T:aes256gcmv1
18.0118.2718.56ascon128abi32v12
19.5119.5420.38T:xoodyakround3
23.8624.8025.83ascon128bi32v12
32.8733.1333.57T:schwaemm256128v2
34.8935.0135.24romulusn
35.3836.1236.33T:grain128aeadv2
36.1736.1736.56T:schwaemm128128v2
38.6638.7339.26T:schwaemm256256v2
42.1242.4042.77T:schwaemm192192v2
48.2348.3648.58romulusm
49.8849.9750.20T:giftcofb128v1
60.6060.8263.00T:tinyjambu128v2
63.5563.7964.11romulust
64.2964.2964.29T:tinyjambu192v2
66.5967.0067.15T:isapa128av20
68.1868.2968.29T:tinyjambu256v2
123.23126.35126.53T:isapk128av20
172.98173.27173.68T:isapa128v20
274.13275.30278.01T:elephant200v2
679.05679.40679.80T:isapk128v20
965.38970.09972.16T:isapxv20
6058.926062.106063.58T:elephant176v2
7266.057281.387285.67T:elephant160v2

amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.461.471.47T:aes128gcmv1
1.631.641.66aes256gcmv1
5.08?5.13?5.71?aes128gcmv1
10.7510.7610.78ascon128av12
15.1315.1415.15ascon80pqv12
15.3215.3515.41ascon128v12
21.0221.6922.47T:xoodyakround3
22.0922.1622.21T:schwaemm256128v2
23.2223.2223.23ascon128abi32v12
29.2529.3829.52T:schwaemm192192v2
32.4232.4432.46T:schwaemm256256v2
33.5533.5933.68T:schwaemm128128v2
34.1034.1234.13ascon128bi32v12
39.0639.1439.21T:grain128aeadv2
47.4047.4847.53romulusn
48.0848.1448.24T:giftcofb128v1
61.5061.9562.33T:isapa128av20
67.8769.0069.43T:isapa128v20
75.9376.0776.15T:tinyjambu128v2
76.8376.9176.99romulusm
95.3595.4195.50T:tinyjambu192v2
104.44104.53104.68T:tinyjambu256v2
106.36106.48106.85T:isapk128av20
139.52141.46142.94T:isapk128v20
145.48145.73145.85romulust
197.09197.46203.74T:elephant200v2
212.95213.06215.93T:isapxv20
10393.4910395.1110396.75T:elephant176v2
11799.0911804.2111807.38T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.601.611.62T:aes128gcmv1
1.701.711.72aes256gcmv1
5.125.205.65aes128gcmv1
10.2510.2710.27ascon128av12
15.0815.1815.53ascon128v12
15.2215.2915.37ascon80pqv12
20.6520.7120.74T:xoodyakround3
22.0922.1322.22T:schwaemm256128v2
23.4323.4523.46ascon128abi32v12
29.3329.4029.54T:schwaemm192192v2
32.3932.4232.44T:schwaemm256256v2
33.4033.5533.74T:schwaemm128128v2
33.8733.9433.95ascon128bi32v12
39.0839.6439.84T:grain128aeadv2
47.3747.4647.49romulusn
47.8347.9547.99T:giftcofb128v1
60.9461.9662.38T:isapa128av20
68.0168.5068.84T:isapa128v20
76.4176.4776.56T:tinyjambu128v2
77.0977.1777.32romulusm
95.1495.3195.49T:tinyjambu192v2
104.17104.26104.33T:tinyjambu256v2
106.26106.38106.45T:isapk128av20
141.38141.56142.55T:isapk128v20
145.62145.70146.04romulust
196.95198.08203.07T:elephant200v2
211.73212.81217.85T:isapxv20
10386.6710391.1110393.34T:elephant176v2
11802.9011805.7711809.52T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.591.601.61T:aes128gcmv1
1.681.701.71aes256gcmv1
1.901.921.94aes128gcmv1
10.2610.2710.31ascon128av12
15.2415.2515.38ascon80pqv12
15.5415.5615.56ascon128v12
20.7020.7320.77T:xoodyakround3
22.1322.1622.22T:schwaemm256128v2
23.4423.4523.46ascon128abi32v12
29.3029.3929.42T:schwaemm192192v2
32.3932.4132.45T:schwaemm256256v2
33.5233.5833.66T:schwaemm128128v2
33.8733.9233.95ascon128bi32v12
34.3734.4634.78T:isapa128v20
39.0839.6239.67T:grain128aeadv2
40.5841.0641.31T:isapa128av20
47.4547.4747.48romulusn
47.8047.8648.35T:giftcofb128v1
51.7751.8851.98romulust
70.6070.6671.01T:isapk128av20
76.4076.4576.52T:tinyjambu128v2
77.1177.1777.23romulusm
87.9788.3989.11T:isapk128v20
95.1195.2195.36T:tinyjambu192v2
104.21104.27104.33T:tinyjambu256v2
126.04126.85129.46T:isapxv20
196.94200.20203.35T:elephant200v2
10388.5210390.9610393.04T:elephant176v2
11798.3011801.4511807.11T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.001.011.02T:aes128gcmv1
1.081.101.11aes256gcmv1
3.453.503.77aes128gcmv1
10.4010.4110.43ascon128av12
14.9915.0015.01ascon80pqv12
15.0715.0815.09ascon128v12
15.5115.5415.92T:xoodyakround3
22.0022.0422.09T:schwaemm256128v2
23.0723.1823.19ascon128abi32v12
29.1729.2329.30T:schwaemm192192v2
32.1932.2532.29T:schwaemm256256v2
33.4633.5433.60T:schwaemm128128v2
34.0834.1334.24ascon128bi32v12
38.5638.6138.67romulusn
38.8338.8538.89T:grain128aeadv2
48.0348.0948.18T:giftcofb128v1
50.8751.2751.37T:isapa128v20
51.2251.4251.58T:isapa128av20
53.2953.3853.44romulusm
62.1762.2462.29T:tinyjambu128v2
74.5874.6274.66T:tinyjambu192v2
78.7978.8278.85T:tinyjambu256v2
88.5488.5788.91T:isapk128av20
98.3898.4898.64romulust
114.90114.99115.50T:isapk128v20
148.45149.86152.81T:elephant200v2
169.25169.70169.73T:isapxv20
7759.287760.307764.94T:elephant176v2
8849.788850.998853.78T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.061.081.09T:aes128gcmv1
1.111.131.13aes256gcmv1
3.493.533.75aes128gcmv1
10.2810.2910.30ascon128av12
15.0315.1115.12ascon80pqv12
14.9615.1715.19ascon128v12
15.3415.3515.38T:xoodyakround3
21.9822.0422.09T:schwaemm256128v2
22.9923.0723.14ascon128abi32v12
29.1229.1929.35T:schwaemm192192v2
32.1932.2532.28T:schwaemm256256v2
33.4533.5933.79T:schwaemm128128v2
33.5633.6033.61ascon128bi32v12
38.5538.5838.62romulusn
38.8939.0739.27T:grain128aeadv2
47.9748.1648.26T:giftcofb128v1
51.0451.3151.40T:isapa128v20
51.1151.5451.68T:isapa128av20
53.4653.5153.63romulusm
62.4162.4762.52T:tinyjambu128v2
74.4574.5674.65T:tinyjambu192v2
78.6878.7378.77T:tinyjambu256v2
88.4788.5788.73T:isapk128av20
98.5198.6198.86romulust
114.93115.03115.34T:isapk128v20
148.16148.48152.59T:elephant200v2
168.67169.63171.69T:isapxv20
7761.147765.807769.74T:elephant176v2
8844.968849.198850.09T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.071.081.09T:aes128gcmv1
1.121.131.14aes256gcmv1
1.861.871.89aes128gcmv1
10.2910.3010.30ascon128av12
15.0515.0915.13ascon80pqv12
14.9615.1215.19ascon128v12
15.3615.3815.41T:xoodyakround3
21.9822.0322.09T:schwaemm256128v2
23.0623.0723.14ascon128abi32v12
29.1229.2129.26T:schwaemm192192v2
32.1832.2732.28T:schwaemm256256v2
33.5633.5733.61ascon128bi32v12
33.4633.5933.73T:schwaemm128128v2
34.0434.1434.32T:isapa128v20
38.6038.6338.65romulusn
38.8939.1039.18T:grain128aeadv2
40.7940.9741.19T:isapa128av20
47.9148.0348.12T:giftcofb128v1
51.6751.7151.79romulust
53.3853.4853.57romulusm
62.4062.4362.47T:tinyjambu128v2
70.6570.7071.52T:isapk128av20
74.5074.5574.71T:tinyjambu192v2
78.6878.7078.75T:tinyjambu256v2
88.3788.4188.67T:isapk128v20
126.06126.64127.20T:isapxv20
148.15149.00152.58T:elephant200v2
7757.547762.287763.96T:elephant176v2
8849.538850.698852.74T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.550.560.57T:aes128gcmv1
0.540.560.57aes256gcmv1
1.811.821.84aes128gcmv1
9.9910.0410.05T:xoodyakround3
10.0510.0610.08ascon128av12
14.7914.8214.82ascon128v12
14.8314.8514.85ascon80pqv12
21.7821.8221.91T:schwaemm256128v2
22.9422.9522.96ascon128abi32v12
29.0329.0629.16T:schwaemm192192v2
29.7629.8129.86romulusn
29.7729.8329.96romulusm
31.9431.9932.14T:schwaemm256256v2
33.7133.7434.00T:schwaemm128128v2
33.6933.8434.19T:isapa128v20
33.9133.9334.32ascon128bi32v12
38.6538.7538.94T:grain128aeadv2
40.9941.0141.17T:isapa128av20
47.9948.1548.24T:giftcofb128v1
48.3348.4448.55T:tinyjambu128v2
51.3651.5351.63romulust
53.1153.1553.21T:tinyjambu256v2
53.7953.9153.94T:tinyjambu192v2
70.6270.7270.79T:isapk128av20
87.0388.3788.52T:isapk128v20
99.80100.25102.85T:elephant200v2
126.38126.43126.63T:isapxv20
5132.565136.235205.06T:elephant176v2
5894.575899.205903.10T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.540.560.56T:aes128gcmv1
0.550.570.58aes256gcmv1
1.811.831.84aes128gcmv1
9.9910.0110.14T:xoodyakround3
10.2910.3010.32ascon128av12
14.7914.8114.82ascon128v12
14.8114.8414.85ascon80pqv12
21.8521.9021.94T:schwaemm256128v2
22.6922.8222.83ascon128abi32v12
29.0529.0729.19T:schwaemm192192v2
29.7029.7729.85romulusn
29.7629.8129.88romulusm
31.9832.1332.16T:schwaemm256256v2
33.2433.2533.26ascon128bi32v12
33.4233.6533.82T:schwaemm128128v2
33.6433.7133.97T:isapa128v20
38.7038.7338.78T:grain128aeadv2
40.9541.0341.22T:isapa128av20
48.0148.1648.31T:giftcofb128v1
48.3348.3748.52T:tinyjambu128v2
51.3651.5651.90romulust
53.1053.1353.19T:tinyjambu256v2
53.8153.8753.92T:tinyjambu192v2
70.6670.6970.75T:isapk128av20
88.3488.4689.43T:isapk128v20
100.67100.93102.90T:elephant200v2
125.85126.47128.18T:isapxv20
5134.715137.095200.37T:elephant176v2
5895.855898.325900.74T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.540.550.56T:aes128gcmv1
0.550.560.57aes256gcmv1
1.811.841.86aes128gcmv1
9.9710.0110.02T:xoodyakround3
10.3110.3110.33ascon128av12
14.8014.8114.82ascon128v12
14.8414.8514.86ascon80pqv12
21.8221.8821.93T:schwaemm256128v2
22.6822.8222.83ascon128abi32v12
29.0229.0829.14T:schwaemm192192v2
29.7229.7829.95romulusn
29.7729.8429.88romulusm
32.1232.1432.18T:schwaemm256256v2
33.2533.2633.27ascon128bi32v12
33.5033.7233.79T:schwaemm128128v2
33.5433.7634.05T:isapa128v20
38.7438.7538.81T:grain128aeadv2
40.9841.2241.39T:isapa128av20
48.0248.0548.20T:giftcofb128v1
48.3348.4148.58T:tinyjambu128v2
51.4051.5651.66romulust
53.1253.1753.23T:tinyjambu256v2
53.8053.8553.98T:tinyjambu192v2
70.6570.6970.82T:isapk128av20
88.4188.5088.86T:isapk128v20
99.76100.90102.90T:elephant200v2
125.71126.44127.53T:isapxv20
5129.235132.515139.22T:elephant176v2
5894.085898.095899.98T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.151.151.16T:aes128gcmv1
1.251.261.27aes256gcmv1
3.663.683.93aes128gcmv1
10.6710.6910.69ascon128av12
15.2315.2315.24ascon80pqv12
15.3015.3115.32ascon128v12
15.8316.0416.05T:xoodyakround3
22.6622.6722.74T:schwaemm256128v2
23.5923.6823.70ascon128abi32v12
29.8129.8829.95T:schwaemm192192v2
33.1233.1533.17T:schwaemm256256v2
33.9834.0934.14T:schwaemm128128v2
34.6034.6434.72ascon128bi32v12
38.9438.9539.01romulusn
39.3139.3739.53T:grain128aeadv2
48.5548.6248.78T:giftcofb128v1
53.7453.7853.85romulusm
54.9755.2655.50T:isapa128av20
62.6362.7362.79T:tinyjambu128v2
74.7074.7574.95T:isapa128v20
75.1975.2475.27T:tinyjambu192v2
79.4379.4779.51T:tinyjambu256v2
100.14100.26100.43romulust
100.97100.99101.16T:isapk128av20
151.92153.10155.44T:elephant200v2
204.17204.25204.79T:isapk128v20
278.03278.16278.24T:isapxv20
7815.307823.257824.56T:elephant176v2
8949.728952.678954.14T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.211.221.23T:aes128gcmv1
1.291.291.30aes256gcmv1
3.763.794.00aes128gcmv1
10.5310.5410.56ascon128av12
15.2815.3415.35ascon80pqv12
15.2015.3915.40ascon128v12
15.5015.5115.52T:xoodyakround3
22.6622.6922.74T:schwaemm256128v2
23.5123.5823.65ascon128abi32v12
29.8129.8529.94T:schwaemm192192v2
33.0733.1233.19T:schwaemm256256v2
34.0034.0434.10T:schwaemm128128v2
34.0734.0734.10ascon128bi32v12
38.9338.9739.01romulusn
39.3739.5739.71T:grain128aeadv2
48.3548.4648.69T:giftcofb128v1
53.9353.9954.06romulusm
54.9855.2955.47T:isapa128av20
62.8862.9462.99T:tinyjambu128v2
74.5474.6974.88T:isapa128v20
75.0575.1175.21T:tinyjambu192v2
79.3179.3479.41T:tinyjambu256v2
100.15100.29100.44romulust
100.98101.01101.03T:isapk128av20
151.97152.60155.77T:elephant200v2
204.30204.35204.92T:isapk128v20
277.70277.75278.76T:isapxv20
7817.397819.527824.53T:elephant176v2
8948.858951.748953.65T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.211.211.22T:aes128gcmv1
1.281.291.29aes256gcmv1
2.092.102.12aes128gcmv1
10.5410.5510.57ascon128av12
15.1915.2315.39ascon128v12
15.2915.3415.35ascon80pqv12
15.5315.5515.56T:xoodyakround3
22.6522.6722.69T:schwaemm256128v2
23.5823.5823.65ascon128abi32v12
29.8629.8830.04T:schwaemm192192v2
33.0933.1233.18T:schwaemm256256v2
33.8934.0034.10T:schwaemm128128v2
34.0734.0834.10ascon128bi32v12
38.9638.9939.02romulusn
39.3639.5539.63T:grain128aeadv2
43.0043.2143.38T:isapa128av20
46.2646.3446.38T:isapa128v20
48.4748.6248.74T:giftcofb128v1
53.2753.3453.44romulust
53.9753.9954.05romulusm
62.9162.9663.02T:tinyjambu128v2
75.0675.1375.17T:tinyjambu192v2
78.8578.8678.90T:isapk128av20
79.3479.3779.40T:tinyjambu256v2
136.64136.68137.19T:isapk128v20
151.73152.92155.58T:elephant200v2
181.75181.87183.06T:isapxv20
7817.597821.517823.72T:elephant176v2
8950.628952.748954.58T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.167.217.58T:aes128gcmv1
7.057.297.42aes256gcmv1
7.467.868.23aes128gcmv1
16.2216.3116.55ascon128av12
20.2620.4720.74ascon128v12
20.3120.5020.73ascon80pqv12
23.0923.3023.54T:xoodyakround3
34.9535.1335.39ascon128abi32v12
37.2037.2637.48T:schwaemm256128v2
43.8444.0544.20T:schwaemm128128v2
45.9345.9646.06ascon128bi32v12
47.1147.2947.49romulusn
48.2148.3048.71T:schwaemm192192v2
49.6649.8049.95T:grain128aeadv2
52.5552.5952.70T:schwaemm256256v2
58.9159.1859.58T:giftcofb128v1
62.7262.9863.62romulusm
74.0174.2174.39T:tinyjambu128v2
88.3688.5188.66T:tinyjambu192v2
92.9193.1993.48T:tinyjambu256v2
137.49138.17139.11romulust
140.98141.44142.09T:isapa128av20
216.93217.59221.38T:elephant200v2
367.83368.79369.37T:isapk128av20
616.12617.62618.23T:isapa128v20
2232.952233.342234.38T:isapk128v20
2741.882742.152742.78T:isapxv20
9736.899741.759750.50T:elephant176v2
11972.3011983.8211988.15T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.807.127.30aes256gcmv1
7.127.127.38T:aes128gcmv1
9.579.9710.50aes128gcmv1
16.1216.1816.47ascon128av12
20.3120.4620.66ascon128v12
20.4820.5720.83ascon80pqv12
22.6922.8423.33T:xoodyakround3
35.1635.2735.52ascon128abi32v12
37.2737.3237.48T:schwaemm256128v2
43.9644.0444.18T:schwaemm128128v2
45.5245.6645.92ascon128bi32v12
47.3847.4847.65romulusn
47.9848.2648.40T:schwaemm192192v2
49.6649.7750.25T:grain128aeadv2
52.5552.6352.72T:schwaemm256256v2
59.4859.6759.94T:giftcofb128v1
65.3665.4865.99romulusm
74.2074.3474.47T:tinyjambu128v2
88.1688.3288.38T:tinyjambu192v2
92.7893.0993.23T:tinyjambu256v2
137.93138.35139.06romulust
141.69141.91142.55T:isapa128av20
216.75217.52221.31T:elephant200v2
368.75369.62370.28T:isapk128av20
612.31618.80623.09T:isapa128v20
2234.652236.052250.17T:isapk128v20
2732.222733.132747.13T:isapxv20
9736.639746.559757.59T:elephant176v2
11984.5511986.8811991.47T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.736.796.83aes256gcmv1
7.037.177.38T:aes128gcmv1
7.217.427.75aes128gcmv1
15.9916.1016.12ascon128av12
20.1420.1820.24ascon128v12
20.3120.4220.48ascon80pqv12
23.0623.0823.17T:xoodyakround3
35.0735.0935.22ascon128abi32v12
37.2037.3037.38T:schwaemm256128v2
43.9844.0544.10T:schwaemm128128v2
45.5045.5945.65ascon128bi32v12
47.4547.5647.80romulusn
47.9748.2348.45T:schwaemm192192v2
49.7049.7549.92T:grain128aeadv2
52.4552.6152.65T:schwaemm256256v2
59.5459.6759.91T:giftcofb128v1
65.4465.5465.65romulusm
74.2774.4874.52T:tinyjambu128v2
88.1088.3088.41T:tinyjambu192v2
88.9089.0689.38romulust
91.1691.5292.15T:isapa128av20
92.7793.1393.30T:tinyjambu256v2
216.94217.41221.18T:elephant200v2
252.81253.05253.42T:isapk128av20
322.48324.62326.40T:isapa128v20
1228.391228.781229.69T:isapk128v20
1430.341430.661438.62T:isapxv20
9743.419757.809760.67T:elephant176v2
11972.1311984.2811989.41T:elephant160v2

amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.83?0.91?0.95?T:aes128gcmv1
0.98?1.05?1.10?T:aes256gcmv1
1.621.631.64aes256gcmv1
5.045.115.17aes128gcmv1
10.7010.8010.86ascon128av12
15.1315.1415.21ascon80pqv12
15.3315.3415.34ascon128v12
21.0121.0321.10T:xoodyakround3
22.0822.1322.15T:schwaemm256128v2
23.2223.4223.43ascon128abi32v12
29.2429.3529.39T:schwaemm192192v2
32.3232.3632.38T:schwaemm256256v2
33.4433.5033.52T:schwaemm128128v2
34.0934.1234.13ascon128bi32v12
38.9538.9939.17T:grain128aeadv2
47.4147.4447.48romulusn
48.0648.2548.31T:giftcofb128v1
61.4861.9062.34T:isapa128av20
68.2568.5668.68T:isapa128v20
75.8476.0176.13T:tinyjambu128v2
76.6476.9677.03romulusm
95.3495.3995.49T:tinyjambu192v2
104.53104.57104.60T:tinyjambu256v2
106.33106.43106.50T:isapk128av20
141.35141.93142.60T:isapk128v20
145.46145.67145.76romulust
196.33196.84203.43T:elephant200v2
212.46212.59213.23T:isapxv20
10386.2710388.0010395.52T:elephant176v2
11796.0911799.6711805.03T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.870.920.96T:aes128gcmv1
1.031.051.08T:aes256gcmv1
1.811.821.83aes256gcmv1
5.125.195.25aes128gcmv1
10.5410.5510.56ascon128av12
15.2215.3215.41ascon80pqv12
15.1315.5115.53ascon128v12
20.6420.6920.77T:xoodyakround3
22.0922.1222.18T:schwaemm256128v2
23.4223.4423.45ascon128abi32v12
29.2129.2729.39T:schwaemm192192v2
32.3132.3332.39T:schwaemm256256v2
33.3933.4633.58T:schwaemm128128v2
33.8533.9233.95ascon128bi32v12
39.3839.4939.55T:grain128aeadv2
47.4347.4547.49romulusn
48.0048.0248.47T:giftcofb128v1
61.3361.9562.39T:isapa128av20
68.2268.5968.86T:isapa128v20
76.4176.4476.47T:tinyjambu128v2
77.0377.1677.25romulusm
95.0295.3095.45T:tinyjambu192v2
104.21104.33104.39T:tinyjambu256v2
106.32106.39106.45T:isapk128av20
141.11141.57141.83T:isapk128v20
145.48145.64146.36romulust
196.11196.82203.22T:elephant200v2
212.26212.63213.14T:isapxv20
10385.1110387.1110396.49T:elephant176v2
11796.3411799.4011805.19T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.85?0.92?0.96?T:aes128gcmv1
1.021.061.09T:aes256gcmv1
1.821.831.84aes256gcmv1
1.881.931.96aes128gcmv1
10.5610.5910.60ascon128av12
15.2815.3715.39ascon80pqv12
15.0915.5315.54ascon128v12
20.6920.7820.84T:xoodyakround3
22.0922.1222.16T:schwaemm256128v2
23.4323.4423.45ascon128abi32v12
29.2129.2729.39T:schwaemm192192v2
32.2732.3332.38T:schwaemm256256v2
33.4333.4833.52T:schwaemm128128v2
33.8633.9333.95ascon128bi32v12
34.0634.2734.44T:isapa128v20
39.3839.4939.55T:grain128aeadv2
40.5141.0241.37T:isapa128av20
47.4347.4747.48romulusn
47.9448.0048.29T:giftcofb128v1
51.8551.9252.19romulust
70.6170.6870.72T:isapk128av20
76.4076.4476.50T:tinyjambu128v2
77.0577.1377.24romulusm
88.1288.4089.01T:isapk128v20
95.1095.2695.37T:tinyjambu192v2
104.17104.29104.38T:tinyjambu256v2
125.77126.29126.59T:isapxv20
196.04196.99203.31T:elephant200v2
10386.5810392.3410410.91T:elephant176v2
11796.5311800.9711804.30T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.70?0.74?0.78?T:aes128gcmv1
0.770.800.84T:aes256gcmv1
1.061.081.09aes256gcmv1
3.453.473.50aes128gcmv1
10.4710.4910.51ascon128av12
14.9815.0015.01ascon80pqv12
15.0715.0815.10ascon128v12
15.4915.5315.55T:xoodyakround3
21.9922.0222.05T:schwaemm256128v2
23.0923.1823.20ascon128abi32v12
29.1229.1629.20T:schwaemm192192v2
32.1632.2132.26T:schwaemm256256v2
33.3233.5033.55T:schwaemm128128v2
34.0934.1334.23ascon128bi32v12
38.5338.5738.62romulusn
38.8138.8838.95T:grain128aeadv2
47.9048.0148.23T:giftcofb128v1
51.1551.3851.61T:isapa128v20
51.1851.4651.69T:isapa128av20
53.2753.3453.41romulusm
62.1462.2662.35T:tinyjambu128v2
74.5574.6474.69T:tinyjambu192v2
78.8078.8678.89T:tinyjambu256v2
88.5288.5888.67T:isapk128av20
98.3598.5198.58romulust
115.01115.52117.16T:isapk128v20
147.91148.64152.82T:elephant200v2
169.04169.54169.89T:isapxv20
7756.477761.047763.22T:elephant176v2
8844.358846.448849.07T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.70?0.73?0.78?T:aes128gcmv1
0.790.810.82T:aes256gcmv1
1.161.171.18aes256gcmv1
3.483.513.54aes128gcmv1
10.4010.4210.45ascon128av12
15.0515.1015.13ascon80pqv12
14.9415.1715.18ascon128v12
15.3215.3915.69T:xoodyakround3
21.9422.0122.05T:schwaemm256128v2
23.0523.0723.14ascon128abi32v12
29.1229.1929.21T:schwaemm192192v2
32.1632.1832.25T:schwaemm256256v2
33.2833.3533.60T:schwaemm128128v2
33.5633.6033.72ascon128bi32v12
38.5238.5938.67romulusn
39.1139.1839.19T:grain128aeadv2
47.9948.1248.18T:giftcofb128v1
51.1751.2851.68T:isapa128av20
51.3451.5551.76T:isapa128v20
53.3853.4153.50romulusm
62.3862.4662.51T:tinyjambu128v2
74.4974.5974.70T:tinyjambu192v2
78.6678.7178.75T:tinyjambu256v2
88.5088.5588.58T:isapk128av20
98.2898.4798.60romulust
114.67115.31117.02T:isapk128v20
148.29148.66152.61T:elephant200v2
169.02169.28169.53T:isapxv20
7752.087759.107762.20T:elephant176v2
8845.748847.458849.65T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.720.750.77T:aes128gcmv1
0.800.810.84T:aes256gcmv1
1.161.171.17aes256gcmv1
1.851.871.89aes128gcmv1
10.4110.4310.44ascon128av12
15.0515.0715.12ascon80pqv12
14.9615.1815.19ascon128v12
15.3615.4315.72T:xoodyakround3
21.9822.0022.05T:schwaemm256128v2
23.0723.0723.14ascon128abi32v12
29.1029.1829.20T:schwaemm192192v2
32.1532.1732.23T:schwaemm256256v2
33.2233.4233.56T:schwaemm128128v2
33.5633.6033.61ascon128bi32v12
34.1234.2534.27T:isapa128v20
38.5338.5738.60romulusn
39.1339.1739.21T:grain128aeadv2
40.8041.0741.27T:isapa128av20
47.9548.0248.25T:giftcofb128v1
51.4251.5251.65romulust
53.3953.4553.51romulusm
62.3962.4762.51T:tinyjambu128v2
70.6670.6970.73T:isapk128av20
74.4574.5674.63T:tinyjambu192v2
78.6678.7078.75T:tinyjambu256v2
88.3789.1989.84T:isapk128v20
125.87126.13126.45T:isapxv20
147.74148.55153.00T:elephant200v2
7758.237759.617764.07T:elephant176v2
8843.208847.698850.35T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.500.530.55T:aes128gcmv1
0.510.530.55T:aes256gcmv1
0.520.540.55aes256gcmv1
1.821.831.84aes128gcmv1
9.9710.0210.07T:xoodyakround3
10.1110.1310.17ascon128av12
14.8014.8014.81ascon128v12
14.8314.8414.85ascon80pqv12
21.7321.8021.88T:schwaemm256128v2
22.9422.9622.97ascon128abi32v12
28.9929.0329.06T:schwaemm192192v2
29.7029.7629.80romulusn
29.7629.8929.91romulusm
31.9732.0832.14T:schwaemm256256v2
33.2733.4233.75T:schwaemm128128v2
33.9233.9434.08ascon128bi32v12
34.0034.3834.97T:isapa128v20
38.5638.8438.89T:grain128aeadv2
40.9641.1041.18T:isapa128av20
47.8748.0448.14T:giftcofb128v1
48.3348.4048.48T:tinyjambu128v2
51.2751.4651.63romulust
53.0953.1853.25T:tinyjambu256v2
53.7853.8253.86T:tinyjambu192v2
70.6570.7370.79T:isapk128av20
88.3588.4589.57T:isapk128v20
99.45100.46102.97T:elephant200v2
126.17126.35126.58T:isapxv20
5125.875128.325136.63T:elephant176v2
5892.365894.515898.94T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.500.520.53aes256gcmv1
0.510.540.55T:aes256gcmv1
0.520.540.56T:aes128gcmv1
1.811.831.85aes128gcmv1
9.969.989.99T:xoodyakround3
10.2510.2810.31ascon128av12
14.7814.8014.81ascon128v12
14.8014.8414.85ascon80pqv12
21.7721.8521.89T:schwaemm256128v2
22.6822.8222.83ascon128abi32v12
29.0029.0229.05T:schwaemm192192v2
29.6629.7229.84romulusn
29.7029.7729.82romulusm
32.0232.0932.11T:schwaemm256256v2
33.2233.2533.26ascon128bi32v12
33.1433.2933.75T:schwaemm128128v2
33.8834.2334.62T:isapa128v20
38.7238.8938.96T:grain128aeadv2
40.9241.1241.24T:isapa128av20
47.9148.1148.35T:giftcofb128v1
48.3548.4348.47T:tinyjambu128v2
51.3051.4351.66romulust
53.1453.1853.28T:tinyjambu256v2
53.7953.8353.91T:tinyjambu192v2
70.6570.7170.77T:isapk128av20
88.3788.4889.59T:isapk128v20
99.69100.43102.97T:elephant200v2
125.78126.36126.47T:isapxv20
5129.255132.455137.69T:elephant176v2
5893.525896.885898.78T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.510.520.53aes256gcmv1
0.520.530.57T:aes128gcmv1
0.520.540.56T:aes256gcmv1
1.801.831.86aes128gcmv1
9.969.9910.02T:xoodyakround3
10.2610.2810.29ascon128av12
14.8014.8114.82ascon128v12
14.8314.8414.86ascon80pqv12
21.7921.8721.91T:schwaemm256128v2
22.6822.8222.82ascon128abi32v12
29.0029.0329.05T:schwaemm192192v2
29.6729.7129.86romulusn
29.7729.8229.86romulusm
32.0432.0732.11T:schwaemm256256v2
33.2533.2633.26ascon128bi32v12
33.2133.2633.41T:schwaemm128128v2
34.1034.1934.29T:isapa128v20
38.7338.9238.97T:grain128aeadv2
41.0441.1541.31T:isapa128av20
47.8747.9748.08T:giftcofb128v1
48.3648.4548.50T:tinyjambu128v2
51.1951.4251.57romulust
53.1153.1553.25T:tinyjambu256v2
53.7753.8153.88T:tinyjambu192v2
70.6370.7270.83T:isapk128av20
87.7088.4288.93T:isapk128v20
99.38100.08102.89T:elephant200v2
125.72126.10126.49T:isapxv20
5126.275130.755135.76T:elephant176v2
5888.845897.025898.74T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.171.181.20T:aes128gcmv1
1.231.231.24aes256gcmv1
1.271.281.28T:aes256gcmv1
3.643.663.67aes128gcmv1
10.6110.7210.75ascon128av12
15.2315.2415.30ascon80pqv12
15.3015.3115.33ascon128v12
15.6315.6615.71T:xoodyakround3
22.6422.6522.70T:schwaemm256128v2
23.6123.6823.70ascon128abi32v12
29.8129.8229.85T:schwaemm192192v2
33.0533.1133.15T:schwaemm256256v2
33.8333.8533.92T:schwaemm128128v2
34.6034.6334.71ascon128bi32v12
38.7938.9539.01romulusn
39.2939.3339.38T:grain128aeadv2
48.4848.5648.64T:giftcofb128v1
53.7053.7653.84romulusm
55.0555.2255.23T:isapa128av20
62.6362.6862.82T:tinyjambu128v2
74.6074.7074.77T:isapa128v20
75.1675.2175.24T:tinyjambu192v2
79.4279.4679.50T:tinyjambu256v2
98.8098.8398.86T:isapk128av20
100.12100.19100.29romulust
151.51152.08155.74T:elephant200v2
205.91206.04206.93T:isapk128v20
277.64278.05278.37T:isapxv20
7815.407817.177821.36T:elephant176v2
8947.008949.468957.92T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.181.181.21T:aes128gcmv1
1.261.271.29T:aes256gcmv1
1.331.341.35aes256gcmv1
3.723.733.76aes128gcmv1
10.6810.6910.71ascon128av12
15.2815.2915.34ascon80pqv12
15.1915.3915.40ascon128v12
15.4815.4915.84T:xoodyakround3
22.6322.6422.66T:schwaemm256128v2
23.5823.5823.65ascon128abi32v12
29.8029.8329.88T:schwaemm192192v2
33.0133.0333.10T:schwaemm256256v2
33.7733.7933.87T:schwaemm128128v2
34.0734.0734.10ascon128bi32v12
38.9238.9338.96romulusn
39.5639.6239.63T:grain128aeadv2
48.4348.5648.62T:giftcofb128v1
53.9153.9454.00romulusm
54.8955.1555.58T:isapa128av20
62.8962.9262.98T:tinyjambu128v2
74.6374.7374.95T:isapa128v20
75.0775.1375.18T:tinyjambu192v2
79.2879.3479.39T:tinyjambu256v2
98.8598.8898.94T:isapk128av20
100.13100.17100.24romulust
151.48151.98155.51T:elephant200v2
205.93206.13207.06T:isapk128v20
277.75277.85278.01T:isapxv20
7813.577815.787819.89T:elephant176v2
8946.048949.468950.94T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.171.181.19T:aes128gcmv1
1.271.281.29T:aes256gcmv1
1.331.331.33aes256gcmv1
2.072.082.10aes128gcmv1
10.7010.7210.73ascon128av12
15.3315.3415.44ascon80pqv12
15.1915.4015.40ascon128v12
15.5215.5415.88T:xoodyakround3
22.6222.6422.68T:schwaemm256128v2
23.5823.5823.65ascon128abi32v12
29.7929.8329.87T:schwaemm192192v2
33.0333.0733.13T:schwaemm256256v2
33.8033.8533.87T:schwaemm128128v2
34.0734.0734.10ascon128bi32v12
38.9238.9738.99romulusn
39.5739.6239.66T:grain128aeadv2
42.7843.0743.17T:isapa128av20
46.0546.1246.17T:isapa128v20
48.4648.5548.61T:giftcofb128v1
53.2153.2553.30romulust
53.8853.9654.01romulusm
62.8962.9162.97T:tinyjambu128v2
75.0375.1375.23T:tinyjambu192v2
76.7176.7576.77T:isapk128av20
79.2879.3179.34T:tinyjambu256v2
136.32136.38136.79T:isapk128v20
151.53151.98155.72T:elephant200v2
181.67181.69181.97T:isapxv20
7813.897816.087818.65T:elephant176v2
8947.128949.728950.79T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.597.748.12aes128gcmv1
8.108.158.23aes256gcmv1
11.3411.7012.29T:aes128gcmv1
11.8412.2013.11T:aes256gcmv1
16.2016.5516.62ascon128av12
20.3720.4720.58ascon80pqv12
20.3220.5220.70ascon128v12
22.9523.2023.47T:xoodyakround3
34.8935.0935.56ascon128abi32v12
37.1437.2337.34T:schwaemm256128v2
43.7543.8243.93T:schwaemm128128v2
45.9045.9346.12ascon128bi32v12
47.1247.2447.34romulusn
48.3348.4848.62T:schwaemm192192v2
49.5249.6650.09T:grain128aeadv2
52.4452.6052.73T:schwaemm256256v2
58.9959.0959.42T:giftcofb128v1
62.4862.9063.06romulusm
73.7673.9274.19T:tinyjambu128v2
87.8888.0888.30T:tinyjambu192v2
92.4192.4992.76T:tinyjambu256v2
136.98137.43139.01romulust
141.28141.54141.95T:isapa128av20
215.43215.79220.91T:elephant200v2
317.57318.03319.34T:isapk128av20
609.70611.05612.11T:isapa128v20
2273.192276.612278.95T:isapk128v20
2741.612742.772743.78T:isapxv20
9732.369739.519757.88T:elephant176v2
11981.2911983.5811992.19T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
7.988.048.25aes256gcmv1
8.929.229.68aes128gcmv1
11.4411.7012.41T:aes128gcmv1
11.9012.3413.02T:aes256gcmv1
16.2516.5716.84ascon128av12
20.3620.4720.71ascon128v12
20.4120.5620.66ascon80pqv12
22.5522.7823.04T:xoodyakround3
35.0935.2235.57ascon128abi32v12
37.2337.2937.46T:schwaemm256128v2
43.7743.8743.89T:schwaemm128128v2
45.5045.5645.96ascon128bi32v12
47.3147.4847.63romulusn
48.3348.4148.59T:schwaemm192192v2
49.6649.8850.05T:grain128aeadv2
52.4752.5952.80T:schwaemm256256v2
59.4259.6060.03T:giftcofb128v1
65.2665.4465.62romulusm
73.9774.0874.40T:tinyjambu128v2
87.8788.0388.21T:tinyjambu192v2
92.5992.7592.95T:tinyjambu256v2
136.72137.14137.63romulust
141.95142.11142.45T:isapa128av20
215.37215.57220.88T:elephant200v2
318.21318.64319.34T:isapk128av20
608.96610.78612.85T:isapa128v20
2274.972277.492279.07T:isapk128v20
2743.312744.272747.23T:isapxv20
9731.029735.539751.02T:elephant176v2
11970.3111984.5011989.25T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.756.847.23aes128gcmv1
8.088.258.36aes256gcmv1
11.3811.4511.62T:aes128gcmv1
12.0212.1912.33T:aes256gcmv1
16.3016.3416.63ascon128av12
20.2320.3620.50ascon128v12
20.2520.4220.49ascon80pqv12
22.8122.9523.17T:xoodyakround3
35.0535.1035.20ascon128abi32v12
37.1637.2337.30T:schwaemm256128v2
43.7743.8343.91T:schwaemm128128v2
45.4945.5545.76ascon128bi32v12
47.4947.6347.94romulusn
48.2948.3448.48T:schwaemm192192v2
49.6349.7649.94T:grain128aeadv2
52.4552.5852.72T:schwaemm256256v2
59.4159.5459.76T:giftcofb128v1
65.3465.5165.84romulusm
74.0174.0974.23T:tinyjambu128v2
87.8487.9588.18T:tinyjambu192v2
88.0288.4188.66romulust
91.0491.3491.91T:isapa128av20
92.5192.6892.86T:tinyjambu256v2
201.41201.98202.22T:isapk128av20
215.36215.62220.58T:elephant200v2
318.85320.12320.30T:isapa128v20
1220.991221.801227.05T:isapk128v20
1435.501436.351440.48T:isapxv20
9727.449736.139750.49T:elephant176v2
11981.7811983.9611992.39T:elephant160v2

amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.451.461.47T:aes128gcmv1
1.631.651.67aes256gcmv1
5.115.175.50aes128gcmv1
10.7510.7710.77ascon128av12
15.1415.1415.15ascon80pqv12
15.3215.3415.34ascon128v12
21.0321.6421.85T:xoodyakround3
22.0922.1222.16T:schwaemm256128v2
23.2223.4223.43ascon128abi32v12
29.2429.3529.36T:schwaemm192192v2
32.2532.2832.48T:schwaemm256256v2
33.3733.4133.47T:schwaemm128128v2
34.1234.1334.14ascon128bi32v12
38.8839.0339.12T:grain128aeadv2
47.4747.5047.55romulusn
48.1348.2448.30T:giftcofb128v1
61.6761.9962.27T:isapa128av20
67.7868.1668.18T:isapa128v20
75.9376.1376.32T:tinyjambu128v2
76.9076.9877.10romulusm
95.3795.5295.60T:tinyjambu192v2
103.90103.98104.09T:tinyjambu256v2
106.62106.87107.07T:isapk128av20
140.02141.33142.63T:isapk128v20
145.62145.76145.91romulust
197.41197.64197.88T:elephant200v2
212.07212.25213.08T:isapxv20
10390.9210395.3310398.97T:elephant176v2
11802.0811804.7911809.08T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.601.611.63T:aes128gcmv1
1.691.711.72aes256gcmv1
5.05?5.14?5.73?aes128gcmv1
10.2410.2510.31ascon128av12
15.2215.2815.37ascon80pqv12
15.5015.5215.55ascon128v12
20.6820.7320.78T:xoodyakround3
22.0822.1622.29T:schwaemm256128v2
23.4323.4423.45ascon128abi32v12
29.2329.3729.41T:schwaemm192192v2
32.2632.3232.39T:schwaemm256256v2
33.3433.3833.42T:schwaemm128128v2
33.8633.9333.95ascon128bi32v12
39.4039.4139.43T:grain128aeadv2
47.4547.4647.48romulusn
47.6947.9848.01T:giftcofb128v1
61.9062.0662.13T:isapa128av20
67.8868.1668.86T:isapa128v20
76.4176.4676.60T:tinyjambu128v2
77.1077.1877.25romulusm
95.0495.2295.37T:tinyjambu192v2
104.23104.28104.37T:tinyjambu256v2
106.67106.79106.93T:isapk128av20
141.29141.42142.13T:isapk128v20
145.58145.77146.01romulust
197.36197.51199.02T:elephant200v2
212.00212.81213.08T:isapxv20
10393.9410396.1910398.95T:elephant176v2
11799.1411803.6711811.90T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.611.611.63T:aes128gcmv1
1.701.711.72aes256gcmv1
1.901.921.95aes128gcmv1
10.2410.2610.30ascon128av12
15.2615.2615.38ascon80pqv12
15.5315.5415.56ascon128v12
20.7720.7920.83T:xoodyakround3
22.1122.1222.23T:schwaemm256128v2
23.4423.4423.45ascon128abi32v12
29.2529.3929.43T:schwaemm192192v2
32.2532.3332.41T:schwaemm256256v2
33.3633.4033.45T:schwaemm128128v2
33.8733.9433.95ascon128bi32v12
34.0234.2634.55T:isapa128v20
39.4139.4139.42T:grain128aeadv2
40.4140.6741.06T:isapa128av20
47.4647.4847.49romulusn
47.8247.9948.40T:giftcofb128v1
51.8351.9752.09romulust
70.6970.7270.80T:isapk128av20
76.4276.5276.64T:tinyjambu128v2
77.1177.1977.29romulusm
87.9888.1189.46T:isapk128v20
95.0895.2795.36T:tinyjambu192v2
104.24104.30104.37T:tinyjambu256v2
126.15126.46126.80T:isapxv20
197.21197.51198.13T:elephant200v2
10394.3010396.0410398.51T:elephant176v2
11794.7311802.1811805.92T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.001.011.02T:aes128gcmv1
1.091.101.11aes256gcmv1
3.483.513.68aes128gcmv1
10.4010.4110.43ascon128av12
14.9814.9915.03ascon80pqv12
15.0615.0815.09ascon128v12
15.5015.5115.54T:xoodyakround3
21.9622.0122.08T:schwaemm256128v2
23.1023.1823.19ascon128abi32v12
29.1829.2229.25T:schwaemm192192v2
32.1432.1832.28T:schwaemm256256v2
33.2833.3833.45T:schwaemm128128v2
34.0334.1034.24ascon128bi32v12
38.6138.6438.69romulusn
38.8638.9638.98T:grain128aeadv2
47.9848.0848.21T:giftcofb128v1
50.9951.1751.28T:isapa128v20
51.2551.4451.56T:isapa128av20
53.3253.3853.41romulusm
62.2062.2662.32T:tinyjambu128v2
74.6174.6674.74T:tinyjambu192v2
78.5178.5778.64T:tinyjambu256v2
88.7488.7988.88T:isapk128av20
98.5898.6998.78romulust
114.48114.86115.42T:isapk128v20
148.71149.13149.62T:elephant200v2
169.40169.67169.96T:isapxv20
7761.527765.127768.26T:elephant176v2
8849.098851.328854.14T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.071.081.09T:aes128gcmv1
1.121.131.14aes256gcmv1
3.433.473.76aes128gcmv1
10.2810.2910.30ascon128av12
14.9414.9715.18ascon128v12
15.0315.0415.18ascon80pqv12
15.3515.3715.39T:xoodyakround3
21.9522.0222.13T:schwaemm256128v2
23.0623.0723.14ascon128abi32v12
29.2029.2229.23T:schwaemm192192v2
32.1632.1832.20T:schwaemm256256v2
33.4433.5033.55T:schwaemm128128v2
33.5633.6033.61ascon128bi32v12
38.6338.6738.71romulusn
39.1739.1939.19T:grain128aeadv2
47.9848.0448.15T:giftcofb128v1
50.9851.1251.19T:isapa128v20
51.2751.4551.66T:isapa128av20
53.4553.5053.60romulusm
62.4062.4762.54T:tinyjambu128v2
74.4774.5574.69T:tinyjambu192v2
78.7178.7778.79T:tinyjambu256v2
88.7488.7889.48T:isapk128av20
98.5398.7398.89romulust
114.46114.77115.28T:isapk128v20
148.65148.87149.23T:elephant200v2
169.19169.63170.43T:isapxv20
7763.277764.577766.83T:elephant176v2
8849.238852.088852.48T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.071.081.09T:aes128gcmv1
1.121.131.14aes256gcmv1
1.861.881.89aes128gcmv1
10.2710.3010.31ascon128av12
15.0615.0715.12ascon80pqv12
14.9615.1815.19ascon128v12
15.3815.4115.43T:xoodyakround3
22.0022.0522.12T:schwaemm256128v2
23.0723.0723.14ascon128abi32v12
29.1629.1929.26T:schwaemm192192v2
32.1632.1932.20T:schwaemm256256v2
33.2733.3233.46T:schwaemm128128v2
33.5633.5733.60ascon128bi32v12
34.3034.3934.39T:isapa128v20
38.6038.6538.69romulusn
39.1839.1939.20T:grain128aeadv2
40.7440.9341.04T:isapa128av20
48.0148.2248.34T:giftcofb128v1
51.6951.7451.82romulust
53.4253.5153.54romulusm
62.3962.4362.52T:tinyjambu128v2
70.6970.7570.85T:isapk128av20
74.4274.5374.60T:tinyjambu192v2
78.6678.7278.75T:tinyjambu256v2
87.9688.0288.49T:isapk128v20
126.37126.45126.71T:isapxv20
148.42148.56148.73T:elephant200v2
7764.337766.177769.55T:elephant176v2
8847.318850.738852.66T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.550.570.57T:aes128gcmv1
0.560.570.58aes256gcmv1
1.801.811.83aes128gcmv1
9.9710.0110.07T:xoodyakround3
10.0610.0710.08ascon128av12
14.8114.8114.82ascon128v12
14.8414.8414.85ascon80pqv12
21.7821.9022.01T:schwaemm256128v2
22.9422.9522.95ascon128abi32v12
29.0329.0629.10T:schwaemm192192v2
29.7929.8229.87romulusm
29.8329.8829.96romulusn
32.0432.0732.18T:schwaemm256256v2
33.2733.4633.72T:schwaemm128128v2
33.9233.9334.07ascon128bi32v12
34.1034.2534.29T:isapa128v20
38.7138.9138.94T:grain128aeadv2
40.9341.0141.40T:isapa128av20
47.8748.0448.15T:giftcofb128v1
48.3248.3648.46T:tinyjambu128v2
51.2251.2551.50romulust
53.1453.1853.28T:tinyjambu256v2
53.7653.7753.83T:tinyjambu192v2
70.6570.7770.86T:isapk128av20
87.8587.9688.15T:isapk128v20
100.81100.87100.94T:elephant200v2
125.88126.12126.73T:isapxv20
5129.805131.735135.90T:elephant176v2
5897.005898.395901.51T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.540.560.57T:aes128gcmv1
0.550.560.57aes256gcmv1
1.801.831.85aes128gcmv1
9.9710.0110.04T:xoodyakround3
10.3010.3110.32ascon128av12
14.7914.8114.81ascon128v12
14.8114.8414.85ascon80pqv12
21.7821.8821.92T:schwaemm256128v2
22.6822.8222.83ascon128abi32v12
29.0329.0529.09T:schwaemm192192v2
29.8029.8429.92romulusm
29.6729.8529.96romulusn
32.0532.0832.14T:schwaemm256256v2
33.2533.2533.26ascon128bi32v12
33.5733.6133.76T:schwaemm128128v2
33.7834.2434.31T:isapa128v20
38.9438.9638.97T:grain128aeadv2
40.9441.0541.38T:isapa128av20
47.9448.1348.33T:giftcofb128v1
48.3348.4348.47T:tinyjambu128v2
51.1151.2151.47romulust
53.1253.1753.24T:tinyjambu256v2
53.7653.7853.86T:tinyjambu192v2
70.7370.8571.28T:isapk128av20
87.6488.0188.74T:isapk128v20
100.08100.63100.84T:elephant200v2
126.11126.43126.75T:isapxv20
5131.895135.645137.94T:elephant176v2
5894.325896.635901.72T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.550.550.56T:aes128gcmv1
0.560.570.57aes256gcmv1
1.801.821.86aes128gcmv1
10.0110.0310.06T:xoodyakround3
10.3010.3210.32ascon128av12
14.8114.8114.82ascon128v12
14.8414.8514.86ascon80pqv12
21.7921.9122.06T:schwaemm256128v2
22.6822.8222.83ascon128abi32v12
29.0329.0429.06T:schwaemm192192v2
29.6929.8129.99romulusn
29.7629.8329.94romulusm
32.0532.0932.12T:schwaemm256256v2
33.2433.2633.27ascon128bi32v12
33.5033.7133.76T:schwaemm128128v2
33.7934.2634.30T:isapa128v20
38.9638.9738.98T:grain128aeadv2
40.9140.9941.21T:isapa128av20
47.8748.0748.39T:giftcofb128v1
48.4048.4648.51T:tinyjambu128v2
51.1151.1751.66romulust
53.1253.1653.35T:tinyjambu256v2
53.7653.7953.88T:tinyjambu192v2
70.7070.7770.88T:isapk128av20
87.7988.0489.02T:isapk128v20
100.10100.47100.81T:elephant200v2
126.09126.41127.07T:isapxv20
5129.735133.795136.74T:elephant176v2
5893.935897.175900.42T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.141.141.15T:aes128gcmv1
1.251.261.26aes256gcmv1
3.673.693.84aes128gcmv1
10.6710.6710.69ascon128av12
15.2315.2315.24ascon80pqv12
15.3015.3115.34ascon128v12
15.6915.7115.72T:xoodyakround3
22.6522.6722.77T:schwaemm256128v2
23.5823.5923.60ascon128abi32v12
29.8329.8729.89T:schwaemm192192v2
33.0533.0933.13T:schwaemm256256v2
33.7733.8334.00T:schwaemm128128v2
34.5434.6334.64ascon128bi32v12
38.9839.0339.06romulusn
39.3139.3639.47T:grain128aeadv2
48.5048.5948.64T:giftcofb128v1
53.7253.7753.86romulusm
55.0155.1855.26T:isapa128av20
62.7162.7962.87T:tinyjambu128v2
74.4274.4574.47T:isapa128v20
75.1875.2375.28T:tinyjambu192v2
79.1079.1779.23T:tinyjambu256v2
99.0499.0699.21T:isapk128av20
100.07100.14100.38romulust
151.78152.08152.46T:elephant200v2
205.95206.01206.58T:isapk128v20
277.62278.07278.18T:isapxv20
7821.647824.287826.08T:elephant176v2
8949.218951.998953.25T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.211.221.22T:aes128gcmv1
1.291.291.30aes256gcmv1
3.713.763.99aes128gcmv1
10.5410.5510.57ascon128av12
15.2815.2915.35ascon80pqv12
15.2015.3915.40ascon128v12
15.5215.5315.55T:xoodyakround3
22.6322.6822.79T:schwaemm256128v2
23.5823.5823.65ascon128abi32v12
29.8429.8829.89T:schwaemm192192v2
33.0433.0633.09T:schwaemm256256v2
33.8833.9033.97T:schwaemm128128v2
34.0734.0734.07ascon128bi32v12
38.9639.0139.06romulusn
39.6339.6439.64T:grain128aeadv2
48.5348.5948.65T:giftcofb128v1
53.9654.0154.09romulusm
55.2255.3555.44T:isapa128av20
62.9663.0263.05T:tinyjambu128v2
74.4374.4974.78T:isapa128v20
74.9975.1475.21T:tinyjambu192v2
79.3079.3279.38T:tinyjambu256v2
99.0699.0999.14T:isapk128av20
100.01100.22100.23romulust
151.94152.73153.07T:elephant200v2
205.97206.02206.22T:isapk128v20
277.69278.06278.63T:isapxv20
7820.817822.357824.80T:elephant176v2
8947.798949.538952.63T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.211.211.22T:aes128gcmv1
1.291.291.29aes256gcmv1
2.092.102.12aes128gcmv1
10.5310.5410.55ascon128av12
15.2815.2915.34ascon80pqv12
15.1915.3915.40ascon128v12
15.5715.5815.60T:xoodyakround3
22.6222.6822.74T:schwaemm256128v2
23.5123.5823.65ascon128abi32v12
29.8429.8829.89T:schwaemm192192v2
33.0533.0633.11T:schwaemm256256v2
33.7433.7733.91T:schwaemm128128v2
34.0834.1034.10ascon128bi32v12
38.9939.0339.11romulusn
39.6439.6439.64T:grain128aeadv2
42.9843.0943.13T:isapa128av20
45.9346.2046.24T:isapa128v20
48.4948.5448.68T:giftcofb128v1
53.2153.2453.32romulust
53.9353.9954.08romulusm
62.9362.9763.04T:tinyjambu128v2
75.0475.1175.20T:tinyjambu192v2
76.8176.8376.90T:isapk128av20
79.3179.3379.35T:tinyjambu256v2
137.48137.51137.53T:isapk128v20
151.69152.24152.57T:elephant200v2
181.75181.97182.02T:isapxv20
7820.847824.207827.15T:elephant176v2
8949.208951.248953.27T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.067.167.39aes256gcmv1
7.217.277.62T:aes128gcmv1
7.768.098.42aes128gcmv1
16.0916.2316.61ascon128av12
20.2220.3820.69ascon128v12
20.5220.6420.84ascon80pqv12
23.1223.3323.41T:xoodyakround3
34.9335.0235.54ascon128abi32v12
37.1437.2337.34T:schwaemm256128v2
43.7343.8944.07T:schwaemm128128v2
45.9246.0246.46ascon128bi32v12
47.2347.3047.58romulusn
48.0448.1148.20T:schwaemm192192v2
49.7449.8549.95T:grain128aeadv2
52.5552.7452.98T:schwaemm256256v2
59.1759.2459.45T:giftcofb128v1
62.5562.7562.99romulusm
73.9574.0974.30T:tinyjambu128v2
88.1488.3588.52T:tinyjambu192v2
92.6492.7092.82T:tinyjambu256v2
137.27137.49138.32romulust
141.37141.80141.98T:isapa128av20
216.80217.10217.31T:elephant200v2
317.98318.41319.55T:isapk128av20
610.77611.00611.15T:isapa128v20
2280.762281.832282.95T:isapk128v20
2731.802741.702742.35T:isapxv20
9744.789748.529756.27T:elephant176v2
11978.1011984.6811990.27T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.746.897.19aes256gcmv1
7.017.027.30T:aes128gcmv1
9.309.8710.21aes128gcmv1
16.1016.2216.52ascon128av12
20.3420.4020.65ascon128v12
20.4820.5120.67ascon80pqv12
22.8022.9423.33T:xoodyakround3
35.0535.2635.73ascon128abi32v12
37.2537.3837.43T:schwaemm256128v2
43.7243.8344.02T:schwaemm128128v2
45.5045.5545.68ascon128bi32v12
47.4547.6547.83romulusn
48.0948.1548.19T:schwaemm192192v2
49.8549.9550.06T:grain128aeadv2
52.5952.6452.86T:schwaemm256256v2
59.4459.4859.87T:giftcofb128v1
65.3265.5365.69romulusm
74.2174.3974.55T:tinyjambu128v2
88.1888.3488.50T:tinyjambu192v2
92.8993.0693.20T:tinyjambu256v2
137.84138.25138.80romulust
141.48141.72142.88T:isapa128av20
216.66216.84217.03T:elephant200v2
317.51318.52319.14T:isapk128av20
609.57610.95611.30T:isapa128v20
2281.602282.202285.73T:isapk128v20
2732.292742.322742.78T:isapxv20
9734.629738.529743.72T:elephant176v2
11987.2211991.1211996.55T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.716.776.89aes256gcmv1
7.027.167.46T:aes128gcmv1
7.187.287.48aes128gcmv1
15.9816.1116.18ascon128av12
20.1620.1920.34ascon128v12
20.2920.3620.44ascon80pqv12
23.1123.1623.20T:xoodyakround3
35.0535.2035.35ascon128abi32v12
37.2037.2337.32T:schwaemm256128v2
43.6543.7943.91T:schwaemm128128v2
45.5245.5545.69ascon128bi32v12
47.3947.7747.85romulusn
48.0848.1548.19T:schwaemm192192v2
49.8649.9550.05T:grain128aeadv2
52.5952.6052.77T:schwaemm256256v2
59.4159.5959.83T:giftcofb128v1
65.3265.4265.62romulusm
74.2474.3874.59T:tinyjambu128v2
88.0688.2888.51T:tinyjambu192v2
88.8889.0289.80romulust
90.9891.6291.81T:isapa128av20
92.8892.9893.06T:tinyjambu256v2
201.73201.98202.20T:isapk128av20
216.74216.95217.15T:elephant200v2
318.58318.73318.93T:isapa128v20
1256.521256.841257.47T:isapk128v20
1430.481435.091435.77T:isapxv20
9736.129741.079742.80T:elephant176v2
11982.4611984.7811988.30T:elephant160v2

amd64; Zen 3 (a20f10); 2020 AMD Ryzen 9 5950X; 16 x 3400MHz; zen3, supercop-20220213

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
5.115.135.13T:ascon128av12
5.445.465.47ascon128av12
7.707.938.13ascon80pqv12
8.278.288.28ascon128v12
10.7910.8110.83T:xoodyakv1
18.6318.6418.67T:gimli24v1
18.4318.6518.69T:knot128v2
19.8819.8819.88T:knot128v1
23.7623.7823.78T:isapa128av20
23.9824.0024.03T:schwaemm256128v1
25.1925.4625.50T:comet128aesv1
25.28?25.72?36.68?T:saeaes128a64t128v1
26.1826.2526.40T:saeaes128a120t128v1
26.1326.2726.36T:saeaes128a64t64v1
26.1826.3326.43T:saeaes128a120t64v1
28.0528.1028.17T:schwaemm256256v1
29.7329.8932.14T:saeaes192a64t64v1
29.7929.9131.42T:saeaes192a64t128v1
30.2530.2830.34T:saeaes192a120t128v1
31.1531.1531.16T:isapa128v20
33.1033.1733.22T:saturninctrcascadev2
33.2733.4333.50T:saeaes256a120t128v1
33.4133.4633.51T:saeaes256a64t128v1
33.3933.5033.52T:saeaes256a64t64v1
34.2934.7934.93T:schwaemm192192v1
37.7437.7637.77T:knot256
38.6238.6338.63T:giftcofb128v1
40.3340.3840.39T:knot192
45.7645.8345.90T:schwaemm128128v1
50.3750.5550.74T:photonbeetleaead128rate128v1
51.8451.8751.87T:drygascon128k16
51.8651.8951.94T:drygascon128k32
52.3352.3452.34T:drygascon128k56
54.2754.3654.39T:drygascon256k32
58.7558.7658.76T:tinyjambu128
59.9960.1860.19T:tinyjambu192
60.9360.9861.25T:isapk128av20
50.13?63.69?86.10?T:grain128aead
71.2671.2671.29T:tinyjambu256
84.5784.6684.84T:isapk128v20
86.3986.4086.41T:spook128su512v1
86.3486.4186.46T:spook128su384v1
86.8786.8886.91T:spook128mu384v1
86.8686.8886.90T:spook128mu512v1
102.57102.99103.17T:comet64chamv1
102.92?105.41?131.48?T:sestatetweaes128v1
112.58113.00113.07T:skinnyaeadtk3128128v1
115.22115.40115.44T:comet64speckv1
126.97127.99128.28T:elephant200v1
120.00130.20131.51T:comet128chamv1
130.87133.82136.80T:mixfeed
127.16?134.45?167.40?T:estatetweaes128v1
144.53145.14145.87T:subterraneanv1
166.93166.98167.09T:romulusn1v1
197.71197.79197.80T:pyjamask128aeadv1
201.70202.14202.43T:photonbeetleaead128rate32v1
206.88206.94206.98T:pyjamask96aeadv1
276.66277.14282.31T:skinnyaeadtk29664v1
280.83280.96281.23T:romulusm1v1
277.93282.77284.69T:skinnyaeadtk296128v1
297.00298.83304.91T:romulusn3v1
336.38337.85339.05T:sundaegift96v1
337.30337.94338.02T:sundaegift64v1
337.46338.10338.30T:sundaegift128v1
342.98344.10344.71T:sundaegift0v1
362.71363.68365.03T:spoc128sliscplight256v1
370.23370.78376.32T:spix128v1
396.55398.27407.32T:skinnyaeadtk312864v1
398.10408.06417.63T:skinnyaeadtk39664v1
399.49412.47415.24T:skinnyaeadtk396128v1
433.63437.43438.16T:romulusn2v1
481.67482.52493.19T:romulusm3v1
585.17603.90611.28T:spoc64sliscplight192v1
630.34633.63636.31T:saefforkskinnyb128t192n56v1
628.48637.30644.92T:saefforkskinnyb128t256n120v1
630.91645.57651.64T:paefforkskinnyb128t256n112v1
637.05653.99655.39T:paefforkskinnyb128t192n48v1
670.87676.35677.20T:romulusm2v1
698.18702.84704.15T:wageae128v1
827.55837.11838.46T:paefforkskinnyb128t288n104v1
907.18907.84908.02T:aceae128v1
1402.191412.041459.68T:hyenav1
1528.001534.081534.49T:orangezestv1
1506.291584.791596.37T:paefforkskinnyb64t192n48v1
2098.722103.022112.57T:oribatida192v11
2148.282246.142262.19T:twegift64lotusaeadv1
2265.642274.052438.84T:twegift64locusaeadv1
2323.842327.472332.91T:oribatida256v11
2831.902836.912854.22T:estatetwegift128v1
6414.916431.536550.77T:elephant176v1
7749.737753.657756.12T:elephant160v1
Cycles/byte for long+0 decrypt
25%50%75%aead
5.135.135.15T:ascon128av12
5.295.295.32ascon128av12
7.747.817.83ascon80pqv12
7.817.827.82ascon128v12
10.7710.7810.81T:xoodyakv1
11.8911.9712.10T:gimli24v1
18.2318.5518.65T:knot128v2
19.5019.5019.51T:knot128v1
23.7523.7723.80T:isapa128av20
23.9523.9924.04T:schwaemm256128v1
25.7125.9226.10T:comet128aesv1
26.4326.5326.59T:saeaes128a120t64v1
26.5826.6826.74T:saeaes128a64t64v1
26.6526.7626.86T:saeaes128a120t128v1
26.29?26.83?36.58?T:saeaes128a64t128v1
27.8627.9828.03T:schwaemm256256v1
30.0030.0530.06T:saeaes192a120t128v1
30.0830.2732.31T:saeaes192a64t64v1
30.1530.3131.33T:saeaes192a64t128v1
31.2531.2731.28T:isapa128v20
31.8432.4432.56T:schwaemm192192v1
33.7333.7733.96T:saeaes256a64t64v1
33.7533.8133.85T:saeaes256a64t128v1
33.8834.1134.31T:saeaes256a120t128v1
35.0235.0535.31T:saturninctrcascadev2
37.7337.7637.76T:knot256
38.5038.5038.50T:giftcofb128v1
40.3840.4040.42T:knot192
45.7645.8345.88T:schwaemm128128v1
51.9652.0852.20T:photonbeetleaead128rate128v1
52.9853.0253.09T:drygascon128k16
53.0053.0353.04T:drygascon128k32
53.3353.3653.91T:drygascon128k56
54.9354.9655.11T:drygascon256k32
58.0058.0158.01T:tinyjambu128
58.7458.7558.76T:tinyjambu192
60.8461.1561.29T:isapk128av20
53.37?68.10?89.26?T:grain128aead
70.2670.2770.27T:tinyjambu256
84.2284.7584.83T:isapk128v20
85.2785.3085.36T:spook128su384v1
85.2885.3185.33T:spook128su512v1
85.8785.9085.91T:spook128mu384v1
85.8885.9185.93T:spook128mu512v1
97.4397.8897.97T:skinnyaeadtk3128128v1
101.93102.06102.64T:sestatetweaes128v1
102.85102.93103.05T:comet64chamv1
115.75115.92116.12T:comet64speckv1
119.39120.52130.92T:comet128chamv1
125.21125.85126.42T:estatetweaes128v1
126.31126.88126.99T:elephant200v1
130.34133.09134.31T:mixfeed
144.64145.17145.54T:subterraneanv1
166.97166.99167.22T:romulusn1v1
202.23202.24202.32T:pyjamask128aeadv1
202.14202.34202.54T:photonbeetleaead128rate32v1
209.28209.31209.36T:pyjamask96aeadv1
281.32281.49281.63T:romulusm1v1
302.50302.69303.99T:romulusn3v1
336.51336.65337.05T:sundaegift64v1
336.59337.96338.78T:sundaegift128v1
337.84339.00339.33T:sundaegift96v1
341.78342.81343.09T:sundaegift0v1
361.98363.67365.75T:spoc128sliscplight256v1
367.92368.40368.88T:spix128v1
438.64440.02467.58T:romulusn2v1
472.27473.13475.59T:skinnyaeadtk296128v1
474.52475.43476.17T:skinnyaeadtk29664v1
484.80487.66488.42T:romulusm3v1
595.64612.46616.04T:spoc64sliscplight192v1
674.77691.06693.96T:romulusm2v1
690.98693.29709.92T:skinnyaeadtk312864v1
700.05705.80710.72T:wageae128v1
688.32706.67713.08T:skinnyaeadtk39664v1
713.37716.70740.26T:skinnyaeadtk396128v1
905.56905.61905.66T:aceae128v1
1086.351091.121109.97T:saefforkskinnyb128t192n56v1
1094.821098.121104.00T:saefforkskinnyb128t256n120v1
1101.601106.451111.78T:paefforkskinnyb128t256n112v1
1111.911114.461116.12T:paefforkskinnyb128t192n48v1
1421.811455.311480.80T:hyenav1
1528.061532.651533.27T:orangezestv1
1619.591630.181644.96T:paefforkskinnyb128t288n104v1
2022.692031.982184.29T:twegift64locusaeadv1
2081.092096.532111.40T:twegift64lotusaeadv1
2322.252327.272332.20T:oribatida256v11
2507.162562.612653.12T:oribatida192v11
2817.732838.902870.77T:estatetwegift128v1
3028.773124.483142.46T:paefforkskinnyb64t192n48v1
6423.106450.186557.74T:elephant176v1
7756.937762.257765.23T:elephant160v1
Cycles/byte for long+0 forgery
25%50%75%aead
5.135.155.15T:ascon128av12
5.295.295.32ascon128av12
7.827.827.82ascon128v12
7.697.827.83ascon80pqv12
10.8210.8510.87T:xoodyakv1
11.6411.8412.05T:gimli24v1
15.7315.7815.79T:isapa128v20
15.7115.7815.81T:isapa128av20
18.1118.5018.54T:knot128v2
19.4819.5219.52T:knot128v1
25.6825.8025.92T:comet128aesv1
26.0226.0926.48T:schwaemm256128v1
26.93?27.25?39.18?T:saeaes128a64t128v1
27.5127.6227.69T:saeaes128a120t64v1
27.6227.6627.78T:saeaes128a64t64v1
27.6427.7927.87T:saeaes128a120t128v1
29.8729.9230.01T:schwaemm256256v1
31.0131.0631.11T:saeaes192a120t128v1
31.0731.2733.46T:saeaes192a64t64v1
31.1531.3032.28T:saeaes192a64t128v1
33.7134.4934.57T:schwaemm192192v1
34.6834.8634.91T:saeaes256a64t128v1
34.7834.9234.95T:saeaes256a64t64v1
33.12?34.96?38.35?T:grain128aead
34.9835.0335.09T:saeaes256a120t128v1
35.0435.0735.25T:saturninctrcascadev2
37.7337.7437.74T:knot256
38.5038.5038.50T:giftcofb128v1
40.3940.4140.42T:knot192
43.7343.8143.85T:isapk128av20
47.8047.8747.93T:schwaemm128128v1
51.7452.0152.23T:photonbeetleaead128rate128v1
52.9953.0353.06T:drygascon128k16
52.9953.0553.09T:drygascon128k32
53.3653.4053.41T:drygascon128k56
54.9955.1155.18T:drygascon256k32
58.0158.0158.01T:tinyjambu128
57.9458.1358.25T:isapk128v20
58.7458.7558.76T:tinyjambu192
70.2770.2770.27T:tinyjambu256
85.2885.3285.37T:spook128su384v1
85.2985.3385.36T:spook128su512v1
85.8985.9285.97T:spook128mu512v1
85.8885.9585.98T:spook128mu384v1
97.5497.6497.75T:skinnyaeadtk3128128v1
101.75102.27105.48T:sestatetweaes128v1
102.75102.84103.02T:comet64chamv1
115.73115.85116.11T:comet64speckv1
118.92120.82131.66T:comet128chamv1
125.51126.03132.61T:estatetweaes128v1
125.87126.86126.97T:elephant200v1
130.42134.02137.50T:mixfeed
146.75147.56148.08T:subterraneanv1
166.97167.00167.02T:romulusn1v1
201.86202.10202.41T:photonbeetleaead128rate32v1
202.23202.27202.32T:pyjamask128aeadv1
209.22209.44209.62T:pyjamask96aeadv1
281.43281.59281.82T:romulusm1v1
302.57303.15304.86T:romulusn3v1
337.07337.40337.91T:sundaegift128v1
337.07337.74339.07T:sundaegift64v1
336.67338.48339.56T:sundaegift96v1
342.18342.44343.17T:sundaegift0v1
362.52362.85363.45T:spoc128sliscplight256v1
366.83368.84370.71T:spix128v1
434.33438.40443.16T:romulusn2v1
470.17470.82472.81T:skinnyaeadtk296128v1
475.67476.22476.83T:skinnyaeadtk29664v1
487.16489.04494.45T:romulusm3v1
595.03601.61607.94T:spoc64sliscplight192v1
678.43679.02689.16T:romulusm2v1
689.85691.24709.68T:skinnyaeadtk312864v1
691.91706.41727.44T:wageae128v1
689.19707.23725.26T:skinnyaeadtk39664v1
710.86720.62734.01T:skinnyaeadtk396128v1
905.01905.70906.25T:aceae128v1
1088.811095.661103.04T:saefforkskinnyb128t192n56v1
1089.031096.931123.15T:paefforkskinnyb128t192n48v1
1084.301097.221102.04T:saefforkskinnyb128t256n120v1
1102.931115.281119.22T:paefforkskinnyb128t256n112v1
1399.831440.471457.95T:hyenav1
1527.441534.051534.85T:orangezestv1
1617.841620.061644.55T:paefforkskinnyb128t288n104v1
2025.122053.182168.14T:twegift64locusaeadv1
2082.472092.652125.39T:twegift64lotusaeadv1
2320.482332.392350.06T:oribatida256v11
2533.032618.432632.09T:oribatida192v11
2863.912875.032878.33T:estatetwegift128v1
3128.663144.213175.04T:paefforkskinnyb64t192n48v1
6416.416419.606440.78T:elephant176v1
7752.567754.047783.06T:elephant160v1
Cycles/byte for long+long encrypt
25%50%75%aead
5.225.235.23T:ascon128av12
5.325.335.34ascon128av12
7.827.827.83ascon80pqv12
8.078.088.08ascon128v12
8.358.368.39T:xoodyakv1
15.4215.4315.44T:gimli24v1
16.8317.9918.03T:knot128v2
19.3219.3819.42T:saeaes128a120t64v1
19.49?19.54?27.73?T:saeaes128a120t128v1
19.6319.6519.67T:isapa128av20
19.8219.8219.82T:knot128v1
22.4922.5322.56T:saeaes192a120t128v1
23.0923.2423.46T:comet128aesv1
23.3923.4023.41T:isapa128v20
23.6923.7223.77T:schwaemm256128v1
24.4724.6624.80T:saeaes128a64t128v1
24.5224.6924.72T:saeaes128a64t64v1
24.9325.1425.29T:saeaes256a120t128v1
27.8227.8427.86T:schwaemm256256v1
27.8928.3629.70T:saeaes192a64t64v1
28.04?29.50?32.58?T:saeaes192a64t128v1
31.5631.6231.81T:saeaes256a64t64v1
31.6131.6531.67T:saeaes256a64t128v1
32.6732.7432.83T:saturninctrcascadev2
34.4834.5234.57T:schwaemm192192v1
38.1638.1838.19T:knot256
38.4038.4138.42T:giftcofb128v1
39.8739.9539.99T:tinyjambu192
40.1240.1340.15T:tinyjambu128
40.3140.3440.36T:knot192
45.8445.8745.91T:schwaemm128128v1
46.3946.4046.40T:tinyjambu256
49.6749.7049.71T:isapk128av20
50.7250.8050.89T:photonbeetleaead128rate128v1
51.5151.5251.82T:drygascon128k16
51.5151.5251.53T:drygascon128k32
51.8951.9051.93T:drygascon128k56
54.0154.0454.20T:drygascon256k32
67.2567.3967.45T:isapk128v20
75.28?81.68?90.40?T:grain128aead
75.30?84.81?102.21?T:sestatetweaes128v1
86.3686.3786.38T:spook128su512v1
86.3586.3886.41T:spook128su384v1
86.8586.8686.89T:spook128mu512v1
86.8686.8886.90T:spook128mu384v1
96.0596.2197.30T:elephant200v1
101.73101.88101.98T:comet64chamv1
113.89114.33114.76T:skinnyaeadtk3128128v1
114.43114.52114.61T:comet64speckv1
113.27?122.22?137.28?T:estatetweaes128v1
119.38130.93131.67T:comet128chamv1
130.38131.28134.38T:mixfeed
134.70136.23139.46T:subterraneanv1
140.01140.23140.33T:romulusn1v1
197.28197.49197.59T:romulusm1v1
200.94201.43201.68T:photonbeetleaead128rate32v1
201.48201.49213.45T:pyjamask128aeadv1
205.99206.06206.08T:pyjamask96aeadv1
237.21237.57239.67T:romulusn3v1
252.28253.12253.22T:sundaegift64v1
252.73253.50253.65T:sundaegift96v1
253.51253.90254.02T:sundaegift128v1
256.49256.79257.01T:sundaegift0v1
276.09277.36281.22T:skinnyaeadtk29664v1
275.47282.23283.41T:skinnyaeadtk296128v1
325.75327.53332.29T:romulusm3v1
345.12346.60347.79T:romulusn2v1
360.17361.98363.66T:spoc128sliscplight256v1
368.45371.77372.96T:spix128v1
395.92396.69408.45T:skinnyaeadtk312864v1
397.92407.80409.57T:skinnyaeadtk39664v1
409.81427.54427.98T:skinnyaeadtk396128v1
455.80461.41462.31T:romulusm2v1
515.79519.95523.52T:saefforkskinnyb128t192n56v1
514.86521.85528.57T:saefforkskinnyb128t256n120v1
522.98527.51528.15T:paefforkskinnyb128t256n112v1
532.57536.26576.63T:paefforkskinnyb128t192n48v1
591.24601.28604.60T:spoc64sliscplight192v1
680.57686.51687.76T:paefforkskinnyb128t288n104v1
693.24700.25708.34T:wageae128v1
906.21906.67907.91T:aceae128v1
1284.741288.791295.23T:paefforkskinnyb64t192n48v1
1426.101451.031458.24T:hyenav1
1529.871530.641532.64T:orangezestv1
1574.401582.191584.61T:oribatida192v11
1626.021647.341653.75T:twegift64lotusaeadv1
1723.481727.011778.31T:twegift64locusaeadv1
1741.611747.801755.24T:oribatida256v11
2130.082131.432170.72T:estatetwegift128v1
4800.12?4887.31?9214.17?T:elephant176v1
5817.205818.685824.80T:elephant160v1
Cycles/byte for long+long decrypt
25%50%75%aead
5.225.225.23T:ascon128av12
5.265.275.30ascon128av12
7.727.727.73ascon128v12
7.847.857.85ascon80pqv12
8.358.368.37T:xoodyakv1
12.0212.0512.12T:gimli24v1
16.7718.0018.06T:knot128v2
19.6319.6319.63T:knot128v1
19.6319.6419.66T:isapa128av20
19.6419.6619.71T:saeaes128a120t64v1
19.71?19.88?27.95?T:saeaes128a120t128v1
22.3822.4022.42T:saeaes192a120t128v1
23.3923.3923.40T:isapa128v20
23.2223.6223.70T:comet128aesv1
23.6823.7223.75T:schwaemm256128v1
24.6424.8325.04T:saeaes128a64t64v1
24.7524.8925.00T:saeaes128a64t128v1
25.3725.4125.47T:saeaes256a120t128v1
27.7227.7927.83T:schwaemm256256v1
28.1328.5029.88T:saeaes192a64t64v1
28.28?29.34?32.11?T:saeaes192a64t128v1
31.7431.7731.81T:saeaes256a64t128v1
31.7931.8331.85T:saeaes256a64t64v1
32.3332.3532.38T:schwaemm192192v1
33.6033.6233.63T:saturninctrcascadev2
36.8436.8436.85T:knot256
38.3438.3538.35T:giftcofb128v1
39.2439.2539.31T:tinyjambu192
39.7539.7639.76T:tinyjambu128
40.2640.3040.33T:knot192
45.7745.8245.85T:schwaemm128128v1
46.2546.2746.27T:tinyjambu256
49.6149.7549.93T:isapk128av20
51.4651.6651.76T:photonbeetleaead128rate128v1
52.0852.1052.13T:drygascon128k32
52.0852.1152.18T:drygascon128k16
52.4052.4152.41T:drygascon128k56
54.5354.6054.64T:drygascon256k32
67.2367.2567.37T:isapk128v20
70.0870.2870.54T:sestatetweaes128v1
77.73?84.16?92.23?T:grain128aead
85.8085.8285.84T:spook128su384v1
85.8085.8285.84T:spook128su512v1
86.3686.4086.42T:spook128mu512v1
86.3786.4186.42T:spook128mu384v1
94.1594.9697.82T:estatetweaes128v1
95.4695.6397.26T:elephant200v1
101.65101.72101.77T:comet64chamv1
106.14106.33106.38T:skinnyaeadtk3128128v1
114.47114.60114.87T:comet64speckv1
118.90119.67130.54T:comet128chamv1
131.33131.99134.76T:mixfeed
134.80135.69136.03T:subterraneanv1
139.90140.16140.32T:romulusn1v1
197.69197.76197.81T:romulusm1v1
201.23201.39201.81T:photonbeetleaead128rate32v1
203.71203.72203.78T:pyjamask128aeadv1
207.18207.24207.63T:pyjamask96aeadv1
235.92236.39241.07T:romulusn3v1
252.64253.06253.52T:sundaegift128v1
253.43253.52253.69T:sundaegift64v1
253.48253.70253.77T:sundaegift96v1
256.00256.14256.21T:sundaegift0v1
328.77330.11330.45T:romulusm3v1
341.18342.05350.44T:romulusn2v1
362.25363.96365.60T:spoc128sliscplight256v1
366.40366.68367.67T:spix128v1
375.61376.21376.93T:skinnyaeadtk296128v1
375.17376.73378.07T:skinnyaeadtk29664v1
469.15471.86477.02T:romulusm2v1
549.42550.51553.87T:skinnyaeadtk39664v1
550.98552.46561.02T:skinnyaeadtk312864v1
562.96563.81564.54T:skinnyaeadtk396128v1
590.20593.96630.74T:spoc64sliscplight192v1
691.43693.37698.26T:wageae128v1
747.82748.85761.68T:saefforkskinnyb128t192n56v1
750.79751.85763.39T:paefforkskinnyb128t192n48v1
741.39755.95756.72T:saefforkskinnyb128t256n120v1
756.49760.02764.83T:paefforkskinnyb128t256n112v1
905.52905.81909.98T:aceae128v1
1078.231078.921079.63T:paefforkskinnyb128t288n104v1
1430.151436.101439.67T:hyenav1
1530.251530.981531.48T:orangezestv1
1569.741575.591576.52T:twegift64lotusaeadv1
1593.851603.861673.50T:twegift64locusaeadv1
1743.051748.311749.02T:oribatida256v11
1923.421979.941994.63T:oribatida192v11
2046.092061.482072.53T:paefforkskinnyb64t192n48v1
2139.562147.752178.29T:estatetwegift128v1
4822.17?4916.65?9191.30?T:elephant176v1
5814.965815.585816.40T:elephant160v1
Cycles/byte for long+long forgery
25%50%75%aead
5.225.225.24T:ascon128av12
5.275.285.29ascon128av12
7.727.727.73ascon128v12
7.857.857.85ascon80pqv12
8.368.388.40T:xoodyakv1
12.0412.1112.20T:gimli24v1
15.6215.6315.65T:isapa128v20
15.6115.6415.66T:isapa128av20
16.7317.9518.20T:knot128v2
19.6319.6319.63T:knot128v1
20.0420.0820.21T:saeaes128a120t64v1
20.19?20.25?29.20?T:saeaes128a120t128v1
22.9022.9423.08T:saeaes192a120t128v1
23.1823.6123.65T:comet128aesv1
24.7524.7924.93T:schwaemm256128v1
25.2025.3525.37T:saeaes128a64t64v1
25.2925.3625.41T:saeaes128a64t128v1
25.8425.9025.99T:saeaes256a120t128v1
28.6128.7630.34T:saeaes192a64t64v1
28.7628.8328.88T:schwaemm256256v1
28.86?29.89?34.28?T:saeaes192a64t128v1
32.2732.2832.38T:saeaes256a64t128v1
32.2832.2832.51T:saeaes256a64t64v1
33.3133.3633.75T:schwaemm192192v1
33.5733.6733.68T:saturninctrcascadev2
36.8436.8536.85T:knot256
38.3438.3538.35T:giftcofb128v1
39.2239.2539.29T:tinyjambu192
39.7639.7639.76T:tinyjambu128
40.2840.3040.33T:knot192
41.0541.0841.16T:isapk128av20
46.2746.2746.27T:tinyjambu256
46.8246.8846.92T:schwaemm128128v1
51.3651.5551.62T:photonbeetleaead128rate128v1
52.1052.1252.14T:drygascon128k16
52.1352.4152.44T:drygascon128k32
52.4052.4252.42T:drygascon128k56
53.8954.0454.06T:isapk128v20
54.4954.5954.70T:drygascon256k32
50.30?58.53?67.30?T:grain128aead
70.1070.3572.77T:sestatetweaes128v1
85.7985.8285.85T:spook128su384v1
85.8185.8385.86T:spook128su512v1
86.4086.4186.43T:spook128mu512v1
86.3986.4286.44T:spook128mu384v1
94.1994.79100.09T:estatetweaes128v1
95.4795.9996.69T:elephant200v1
101.64101.69101.77T:comet64chamv1
106.10106.20106.65T:skinnyaeadtk3128128v1
114.57114.73114.92T:comet64speckv1
119.02119.14130.67T:comet128chamv1
131.41133.93134.57T:mixfeed
135.72137.02137.34T:subterraneanv1
140.05140.24140.30T:romulusn1v1
197.53197.77197.83T:romulusm1v1
201.60201.94202.10T:photonbeetleaead128rate32v1
203.71203.75203.83T:pyjamask128aeadv1
207.25207.36207.38T:pyjamask96aeadv1
235.73235.88237.69T:romulusn3v1
252.64253.00253.58T:sundaegift128v1
252.90253.43253.85T:sundaegift96v1
253.53253.64253.90T:sundaegift64v1
251.88256.39256.62T:sundaegift0v1
328.37328.69334.73T:romulusm3v1
341.26346.16346.76T:romulusn2v1
361.59362.24362.57T:spoc128sliscplight256v1
367.14368.68371.57T:spix128v1
375.07376.03376.46T:skinnyaeadtk296128v1
375.88376.63377.74T:skinnyaeadtk29664v1
458.69464.08468.73T:romulusm2v1
550.29551.02551.68T:skinnyaeadtk312864v1
549.21554.90555.91T:skinnyaeadtk39664v1
558.42566.99568.43T:skinnyaeadtk396128v1
588.68592.29598.96T:spoc64sliscplight192v1
685.02694.84722.38T:wageae128v1
745.58748.39754.82T:saefforkskinnyb128t192n56v1
744.10753.28756.30T:saefforkskinnyb128t256n120v1
752.45753.35761.99T:paefforkskinnyb128t256n112v1
755.94760.19766.66T:paefforkskinnyb128t192n48v1
904.64905.14906.97T:aceae128v1
1072.651077.421083.34T:paefforkskinnyb128t288n104v1
1424.291435.731444.07T:hyenav1
1526.911529.741530.34T:orangezestv1
1570.201571.551584.65T:twegift64lotusaeadv1
1597.371606.851654.04T:twegift64locusaeadv1
1743.991747.951755.04T:oribatida256v11
1933.881952.871963.15T:oribatida192v11
2059.842070.222074.98T:paefforkskinnyb64t192n48v1
2130.102132.792163.26T:estatetwegift128v1
4798.464801.194822.07T:elephant176v1
5813.115815.615816.22T:elephant160v1
Cycles/byte for 0+long encrypt
25%50%75%aead
5.185.195.19ascon128av12
5.315.325.33T:ascon128av12
5.935.965.98T:xoodyakv1
7.747.757.77ascon80pqv12
7.877.887.88ascon128v12
12.1812.2012.23T:gimli24v1
12.6212.6612.75T:saeaes128a120t64v1
12.4612.7312.82T:saeaes128a120t128v1
14.7614.7914.82T:saeaes192a120t128v1
15.5115.5115.52T:isapa128v20
15.4815.5215.54T:isapa128av20
16.6216.7416.84T:saeaes256a120t128v1
17.06?17.45?30.55?T:knot128v2
19.7519.7519.75T:knot128v1
19.7319.7619.76T:tinyjambu192
20.8821.1221.32T:comet128aesv1
21.5021.5021.51T:tinyjambu128
21.5021.5121.51T:tinyjambu256
22.2822.9723.07T:saeaes128a64t128v1
22.8823.0023.05T:saeaes128a64t64v1
23.3823.4123.43T:schwaemm256128v1
26.0926.1727.11T:saeaes192a64t64v1
26.2526.3727.42T:saeaes192a64t128v1
27.5927.6227.69T:schwaemm256256v1
29.6729.7529.88T:saeaes256a64t64v1
29.7929.8129.84T:saeaes256a64t128v1
32.1932.3232.41T:saturninctrcascadev2
34.2034.2534.27T:schwaemm192192v1
38.1938.2038.22T:giftcofb128v1
38.2638.3738.41T:isapk128av20
38.5838.5938.62T:knot256
38.1138.7142.28T:sestatetweaes128v1
40.2340.2740.34T:knot192
45.7745.8145.89T:schwaemm128128v1
49.9149.9450.00T:isapk128v20
50.9751.1051.28T:photonbeetleaead128rate128v1
51.1551.1551.18T:drygascon128k32
51.1551.1651.17T:drygascon128k16
51.4451.4651.50T:drygascon128k56
53.7453.7854.04T:drygascon256k32
47.71?60.42?77.95?T:grain128aead
62.05?62.55?69.28?T:estatetweaes128v1
65.5065.6666.83T:elephant200v1
83.0386.2886.39T:spook128su384v1
86.3386.3486.35T:spook128su512v1
86.8386.8586.89T:spook128mu512v1
86.8486.8686.88T:spook128mu384v1
100.58101.61101.70T:comet64chamv1
113.00113.74113.91T:romulusn1v1
113.75113.95114.33T:comet64speckv1
114.17114.20114.48T:romulusm1v1
114.39115.46115.54T:skinnyaeadtk3128128v1
123.70125.46126.39T:subterraneanv1
128.73129.48138.30T:mixfeed
118.54130.04131.17T:comet128chamv1
168.50168.59168.84T:sundaegift96v1
168.47168.83169.78T:sundaegift64v1
168.56168.86169.80T:sundaegift128v1
168.87170.60170.89T:romulusn3v1
171.22172.75172.85T:sundaegift0v1
173.16174.89177.26T:romulusm3v1
200.68200.91201.41T:photonbeetleaead128rate32v1
205.06205.08205.18T:pyjamask96aeadv1
205.11205.17205.18T:pyjamask128aeadv1
248.31249.35250.23T:romulusn2v1
245.85251.00254.12T:romulusm2v1
276.18276.77282.85T:skinnyaeadtk296128v1
275.76280.69282.36T:skinnyaeadtk29664v1
358.79360.96361.88T:spoc128sliscplight256v1
370.25370.81371.25T:spix128v1
396.19398.35407.36T:skinnyaeadtk312864v1
400.31405.65409.22T:saefforkskinnyb128t192n56v1
402.02407.15416.63T:saefforkskinnyb128t256n120v1
397.95410.32413.43T:skinnyaeadtk39664v1
408.29410.52420.54T:paefforkskinnyb128t192n48v1
400.31410.61412.53T:paefforkskinnyb128t256n112v1
398.76410.99413.01T:skinnyaeadtk396128v1
529.59535.88538.44T:paefforkskinnyb128t288n104v1
587.77594.17607.80T:spoc64sliscplight192v1
724.15729.72733.36T:wageae128v1
904.02904.77923.66T:aceae128v1
990.56994.161011.98T:paefforkskinnyb64t192n48v1
1047.991052.631055.65T:oribatida192v11
1057.141057.981061.00T:twegift64lotusaeadv1
1157.201160.081160.88T:oribatida256v11
1146.981161.001167.01T:twegift64locusaeadv1
1415.341419.981435.09T:estatetwegift128v1
1411.701439.611476.48T:hyenav1
1526.901527.921529.82T:orangezestv1
3172.733189.063243.41T:elephant176v1
3876.183879.243912.56T:elephant160v1
Cycles/byte for 0+long decrypt
25%50%75%aead
5.225.255.27ascon128av12
5.315.325.34T:ascon128av12
5.905.945.97T:xoodyakv1
7.627.637.63ascon128v12
7.877.887.88ascon80pqv12
12.1712.2012.23T:gimli24v1
12.6412.6712.73T:saeaes128a120t64v1
12.4812.7612.83T:saeaes128a120t128v1
14.7514.7714.81T:saeaes192a120t128v1
15.4915.4915.54T:isapa128v20
15.4915.5315.56T:isapa128av20
16.6816.7716.85T:saeaes256a120t128v1
17.24?17.29?30.82?T:knot128v2
19.7419.7519.76T:tinyjambu192
19.7519.7519.77T:knot128v1
20.8921.1521.26T:comet128aesv1
21.5021.5121.51T:tinyjambu128
22.2622.2622.26T:tinyjambu256
22.8623.0123.08T:saeaes128a64t64v1
22.3023.0223.09T:saeaes128a64t128v1
23.4123.4623.48T:schwaemm256128v1
26.1626.2427.18T:saeaes192a64t64v1
26.2626.2727.43T:saeaes192a64t128v1
27.5427.6027.65T:schwaemm256256v1
29.7429.7729.83T:saeaes256a64t64v1
29.8129.8629.96T:saeaes256a64t128v1
32.1832.2032.23T:saturninctrcascadev2
32.2332.2932.52T:schwaemm192192v1
35.9135.9335.95T:knot256
38.1938.1938.20T:giftcofb128v1
38.1738.2638.38T:sestatetweaes128v1
38.3538.4838.51T:isapk128av20
40.1340.2040.24T:knot192
45.7745.8345.88T:schwaemm128128v1
49.8849.9249.97T:isapk128v20
50.8550.9951.28T:photonbeetleaead128rate128v1
51.1051.1451.22T:drygascon128k32
51.1551.1651.19T:drygascon128k16
51.4551.5151.55T:drygascon128k56
53.9754.1154.25T:drygascon256k32
62.1062.2562.35T:estatetweaes128v1
49.60?63.30?81.76?T:grain128aead
65.4865.6166.77T:elephant200v1
86.2886.3086.34T:spook128su512v1
86.2686.3186.34T:spook128su384v1
86.8586.9086.93T:spook128mu512v1
86.8486.9086.91T:spook128mu384v1
100.33101.48101.63T:comet64chamv1
113.21?113.50?130.09?T:romulusn1v1
113.84113.96114.02T:romulusm1v1
113.56114.04114.25T:comet64speckv1
115.03115.72116.41T:skinnyaeadtk3128128v1
117.87?119.48?138.19?T:comet128chamv1
121.87123.89127.70T:subterraneanv1
129.22129.82138.20T:mixfeed
168.62168.91169.51T:sundaegift128v1
168.57168.91169.31T:sundaegift96v1
168.97169.08169.33T:sundaegift64v1
169.42170.82171.11T:romulusn3v1
170.54171.08171.17T:sundaegift0v1
174.34174.66176.31T:romulusm3v1
200.75200.96201.21T:photonbeetleaead128rate32v1
205.06205.08205.35T:pyjamask96aeadv1
205.17205.18205.18T:pyjamask128aeadv1
243.49248.71258.79T:romulusm2v1
247.73249.68250.90T:romulusn2v1
276.76281.41282.78T:skinnyaeadtk29664v1
277.42282.84288.03T:skinnyaeadtk296128v1
360.66361.90362.23T:spoc128sliscplight256v1
367.45368.01368.17T:spix128v1
398.34404.50408.28T:skinnyaeadtk39664v1
404.31405.19410.80T:paefforkskinnyb128t256n112v1
397.71406.25407.94T:skinnyaeadtk312864v1
403.09407.44412.66T:saefforkskinnyb128t256n120v1
406.70407.82416.65T:paefforkskinnyb128t192n48v1
406.65409.08421.31T:saefforkskinnyb128t192n56v1
406.74409.26412.28T:skinnyaeadtk396128v1
529.08533.74534.76T:paefforkskinnyb128t288n104v1
578.61585.66593.69T:spoc64sliscplight192v1
723.87726.19729.89T:wageae128v1
903.95905.32914.90T:aceae128v1
989.64996.931016.38T:paefforkskinnyb64t192n48v1
1055.491056.121063.82T:twegift64lotusaeadv1
1155.591160.801166.09T:oribatida256v11
1162.541164.371164.90T:twegift64locusaeadv1
1259.951279.521291.08T:oribatida192v11
1423.361428.531429.55T:estatetwegift128v1
1415.031447.781455.38T:hyenav1
1529.061529.591531.15T:orangezestv1
3170.983197.783234.98T:elephant176v1
3878.243878.983916.91T:elephant160v1
Cycles/byte for 0+long forgery
25%50%75%aead
5.245.255.27ascon128av12
5.315.345.34T:ascon128av12
5.935.955.97T:xoodyakv1
7.637.637.63ascon128v12
7.887.887.88ascon80pqv12
12.1812.2212.25T:gimli24v1
12.6412.6912.73T:saeaes128a120t64v1
12.5112.7412.84T:saeaes128a120t128v1
14.7414.8014.84T:saeaes192a120t128v1
15.4715.5215.55T:isapa128av20
15.4915.5215.54T:isapa128v20
16.6516.7516.78T:saeaes256a120t128v1
17.23?17.26?30.86?T:knot128v2
19.7419.7519.76T:tinyjambu192
19.7519.7519.75T:knot128v1
20.8321.1021.29T:comet128aesv1
21.5121.5121.51T:tinyjambu128
22.2622.2622.26T:tinyjambu256
22.2523.0323.10T:saeaes128a64t128v1
22.9023.0523.11T:saeaes128a64t64v1
23.3823.4223.49T:schwaemm256128v1
26.0926.2327.14T:saeaes192a64t64v1
26.2226.2727.49T:saeaes192a64t128v1
27.5627.6027.64T:schwaemm256256v1
29.7329.7829.81T:saeaes256a64t64v1
29.7829.8029.85T:saeaes256a64t128v1
32.1132.1532.18T:saturninctrcascadev2
32.2132.2632.29T:schwaemm192192v1
31.06?32.43?35.30?T:grain128aead
35.9235.9435.95T:knot256
38.1938.1938.20T:giftcofb128v1
38.0538.2138.36T:sestatetweaes128v1
38.3138.4338.53T:isapk128av20
40.1540.1940.24T:knot192
45.7245.7945.83T:schwaemm128128v1
49.8549.9650.02T:isapk128v20
50.9351.0651.21T:photonbeetleaead128rate128v1
51.1051.1351.20T:drygascon128k32
51.1251.1351.20T:drygascon128k16
51.4551.4851.50T:drygascon128k56
54.1954.2654.30T:drygascon256k32
62.0962.4062.60T:estatetweaes128v1
65.63?66.72?83.93?T:elephant200v1
86.2886.3086.32T:spook128su512v1
86.2686.3186.36T:spook128su384v1
86.8386.8986.93T:spook128mu384v1
86.6286.9086.91T:spook128mu512v1
100.36101.52101.59T:comet64chamv1
113.17?113.63?131.37?T:romulusn1v1
113.80113.85113.98T:romulusm1v1
113.47114.04114.35T:comet64speckv1
115.10115.36115.55T:skinnyaeadtk3128128v1
118.61119.32130.89T:comet128chamv1
123.71125.20127.21T:subterraneanv1
128.53129.77138.18T:mixfeed
168.63168.75169.04T:sundaegift128v1
168.60168.92169.07T:sundaegift96v1
168.92169.00169.24T:sundaegift64v1
170.85171.05171.29T:sundaegift0v1
169.31171.08171.43T:romulusn3v1
174.00175.12177.91T:romulusm3v1
200.63201.14201.55T:photonbeetleaead128rate32v1
205.17205.18205.19T:pyjamask128aeadv1
205.16205.20205.26T:pyjamask96aeadv1
243.69248.82252.18T:romulusm2v1
246.65250.22254.05T:romulusn2v1
276.25280.68281.84T:skinnyaeadtk29664v1
280.51288.04288.62T:skinnyaeadtk296128v1
360.01361.08365.05T:spoc128sliscplight256v1
367.03369.41370.95T:spix128v1
400.97405.45416.68T:skinnyaeadtk39664v1
404.46406.60410.29T:paefforkskinnyb128t256n112v1
404.96407.37408.07T:saefforkskinnyb128t192n56v1
405.48408.10412.65T:saefforkskinnyb128t256n120v1
397.09409.78420.43T:skinnyaeadtk312864v1
406.61410.28424.41T:skinnyaeadtk396128v1
406.13416.91438.57T:paefforkskinnyb128t192n48v1
531.63534.18534.56T:paefforkskinnyb128t288n104v1
591.29594.70598.06T:spoc64sliscplight192v1
680.75699.04717.25T:wageae128v1
904.27905.25907.28T:aceae128v1
982.391007.991010.76T:paefforkskinnyb64t192n48v1
1059.141064.211064.75T:twegift64lotusaeadv1
1162.761168.411181.89T:oribatida256v11
1146.441184.731187.12T:twegift64locusaeadv1
1302.091308.551368.50T:oribatida192v11
1414.621417.171433.97T:estatetwegift128v1
1421.831442.181445.08T:hyenav1
1525.661530.301533.64T:orangezestv1
3168.083180.083203.28T:elephant176v1
3880.023912.373918.99T:elephant160v1
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
5.345.345.36T:ascon128av12
5.445.455.46ascon128av12
7.957.957.96ascon80pqv12
8.208.208.21ascon128v12
8.608.628.63T:xoodyakv1
15.6515.6615.68T:gimli24v1
18.4518.4918.65T:knot128v2
19.5619.5819.63T:saeaes128a120t64v1
19.7119.7419.80T:saeaes128a120t128v1
20.0520.0520.06T:knot128v1
20.9420.9520.97T:isapa128av20
22.7122.7322.77T:saeaes192a120t128v1
23.3923.5423.68T:comet128aesv1
24.3324.3524.39T:schwaemm256128v1
24.7124.8124.86T:saeaes128a64t64v1
24.6724.8424.88T:saeaes128a64t128v1
25.1525.3225.39T:saeaes256a120t128v1
28.1928.2629.70T:saeaes192a64t64v1
28.2828.3429.41T:saeaes192a64t128v1
28.5428.5528.59T:schwaemm256256v1
31.7931.8331.86T:saeaes256a64t128v1
31.8131.8531.90T:saeaes256a64t64v1
34.0734.0934.24T:saturninctrcascadev2
34.2634.2734.28T:isapa128v20
35.1635.2035.24T:schwaemm192192v1
38.7138.7138.72T:giftcofb128v1
38.9939.0039.01T:knot256
40.2740.3140.31T:tinyjambu192
40.4040.4140.41T:tinyjambu128
40.9640.9941.03T:knot192
46.3946.4546.52T:schwaemm128128v1
46.7046.7046.71T:tinyjambu256
50.9151.0351.15T:photonbeetleaead128rate128v1
51.9151.9151.92T:drygascon128k32
51.9351.9451.94T:drygascon128k16
52.2652.2752.30T:drygascon128k56
54.6354.6454.72T:drygascon256k32
55.4955.5455.62T:isapk128av20
65.88?73.87?86.99?T:grain128aead
73.67?77.50?96.34?T:sestatetweaes128v1
88.2188.2188.22T:spook128su512v1
88.2188.2588.26T:spook128su384v1
88.7088.7188.72T:spook128mu512v1
88.5688.7288.74T:spook128mu384v1
98.1598.2699.19T:elephant200v1
102.45102.48102.50T:comet64chamv1
107.46107.52107.53T:isapk128v20
99.45?110.23?131.99?T:estatetweaes128v1
115.13115.17115.50T:comet64speckv1
115.97116.04116.12T:skinnyaeadtk3128128v1
121.38131.44132.44T:comet128chamv1
133.92134.50136.99T:mixfeed
139.03140.33140.64T:subterraneanv1
141.31141.44141.60T:romulusn1v1
198.58198.69199.32T:romulusm1v1
201.46201.73201.93T:photonbeetleaead128rate32v1
205.46205.53206.93T:pyjamask128aeadv1
209.20209.25209.29T:pyjamask96aeadv1
235.47235.80236.21T:romulusn3v1
254.84254.98255.30T:sundaegift96v1
254.98255.05255.33T:sundaegift64v1
254.95255.62255.87T:sundaegift128v1
258.13259.58259.76T:sundaegift0v1
278.24279.87284.29T:skinnyaeadtk296128v1
278.53283.91287.87T:skinnyaeadtk29664v1
328.89329.15335.01T:romulusm3v1
343.69344.00344.70T:romulusn2v1
362.50364.07365.86T:spoc128sliscplight256v1
380.50382.30385.00T:spix128v1
407.89409.67410.36T:skinnyaeadtk312864v1
400.49410.91411.54T:skinnyaeadtk39664v1
403.60412.54413.28T:skinnyaeadtk396128v1
459.83462.18464.74T:romulusm2v1
520.18522.39528.02T:saefforkskinnyb128t192n56v1
514.03527.19527.52T:paefforkskinnyb128t256n112v1
521.78527.24527.69T:saefforkskinnyb128t256n120v1
524.80532.84533.64T:paefforkskinnyb128t192n48v1
596.09598.97600.58T:spoc64sliscplight192v1
681.29686.76687.18T:paefforkskinnyb128t288n104v1
705.10708.73710.73T:wageae128v1
925.14925.37926.06T:aceae128v1
1268.121287.811291.13T:paefforkskinnyb64t192n48v1
1436.031449.091455.88T:hyenav1
1546.551546.971547.94T:orangezestv1
1586.181593.021594.02T:oribatida192v11
1614.781629.571656.61T:twegift64lotusaeadv1
1763.681764.361770.26T:oribatida256v11
1735.741764.641830.25T:twegift64locusaeadv1
2140.252152.322163.64T:estatetwegift128v1
4830.924845.124846.00T:elephant176v1
5881.495882.175883.70T:elephant160v1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
5.345.345.35T:ascon128av12
5.415.425.44ascon128av12
7.847.847.84ascon128v12
7.977.977.97ascon80pqv12
8.608.638.65T:xoodyakv1
12.1912.2512.36T:gimli24v1
18.6218.6418.68T:knot128v2
19.7419.8019.88T:saeaes128a120t64v1
19.8619.8619.86T:knot128v1
19.8719.8919.99T:saeaes128a120t128v1
20.9420.9420.95T:isapa128av20
22.5622.5922.60T:saeaes192a120t128v1
23.6323.8123.97T:comet128aesv1
24.3524.3624.39T:schwaemm256128v1
25.0125.0325.11T:saeaes128a64t128v1
24.9325.0325.08T:saeaes128a64t64v1
25.5625.7025.74T:saeaes256a120t128v1
28.4228.4629.36T:saeaes192a64t128v1
28.4228.4829.70T:saeaes192a64t64v1
28.4828.5328.55T:schwaemm256256v1
31.9832.0232.21T:saeaes256a64t128v1
31.9632.0832.12T:saeaes256a64t64v1
33.0033.0133.02T:schwaemm192192v1
34.2634.2634.27T:isapa128v20
34.6534.6934.71T:saturninctrcascadev2
37.7137.7137.72T:knot256
38.6538.6538.65T:giftcofb128v1
39.5739.6039.61T:tinyjambu192
40.0340.0340.03T:tinyjambu128
40.9540.9540.98T:knot192
46.3646.4146.45T:schwaemm128128v1
46.5846.5846.58T:tinyjambu256
51.6851.8351.87T:photonbeetleaead128rate128v1
52.5252.5252.54T:drygascon128k32
52.5152.5252.53T:drygascon128k16
52.7852.7853.06T:drygascon128k56
55.1255.1855.26T:drygascon256k32
55.4855.5255.54T:isapk128av20
70.6870.9371.25T:sestatetweaes128v1
68.62?76.45?87.02?T:grain128aead
87.7287.7387.75T:spook128su512v1
87.7287.7587.77T:spook128su384v1
88.3188.3388.35T:spook128mu384v1
88.3288.3388.34T:spook128mu512v1
94.2494.3994.59T:estatetweaes128v1
97.6498.0298.60T:elephant200v1
102.22102.33102.37T:comet64chamv1
107.31107.38107.52T:isapk128v20
108.24108.31108.33T:skinnyaeadtk3128128v1
115.19115.38115.61T:comet64speckv1
121.13?121.37?138.31?T:comet128chamv1
134.53134.65137.13T:mixfeed
138.52139.15140.43T:subterraneanv1
141.31141.36141.67T:romulusn1v1
199.18199.27199.30T:romulusm1v1
201.33201.92202.03T:photonbeetleaead128rate32v1
207.75207.77207.78T:pyjamask128aeadv1
210.49210.58210.65T:pyjamask96aeadv1
238.09238.68240.59T:romulusn3v1
254.50255.30255.46T:sundaegift96v1
254.34255.61255.73T:sundaegift64v1
254.88255.65255.79T:sundaegift128v1
257.38257.77257.94T:sundaegift0v1
328.77329.48330.42T:romulusm3v1
344.05344.22344.59T:romulusn2v1
363.66364.18367.51T:spoc128sliscplight256v1
376.69377.67378.90T:skinnyaeadtk296128v1
378.93379.16379.60T:spix128v1
378.29379.20380.13T:skinnyaeadtk29664v1
460.98465.47474.89T:romulusm2v1
553.86554.83555.16T:skinnyaeadtk39664v1
551.44556.78559.58T:skinnyaeadtk312864v1
564.07566.99573.94T:skinnyaeadtk396128v1
585.43586.01599.31T:spoc64sliscplight192v1
705.44707.10709.83T:wageae128v1
748.71749.67753.48T:saefforkskinnyb128t192n56v1
754.53754.83756.91T:saefforkskinnyb128t256n120v1
752.22755.32766.11T:paefforkskinnyb128t192n48v1
755.94757.59764.34T:paefforkskinnyb128t256n112v1
921.75923.67924.90T:aceae128v1
1079.071080.011080.11T:paefforkskinnyb128t288n104v1
1433.021442.091450.49T:hyenav1
1546.741547.061547.83T:orangezestv1
1579.241584.471595.58T:twegift64lotusaeadv1
1622.831629.351662.88T:twegift64locusaeadv1
1769.581773.911775.44T:oribatida256v11
1917.741955.691974.27T:oribatida192v11
2066.122071.542073.47T:paefforkskinnyb64t192n48v1
2139.362156.052196.01T:estatetwegift128v1
4838.144849.744857.76T:elephant176v1
5882.115899.355903.02T:elephant160v1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
5.345.345.36T:ascon128av12
5.415.425.42ascon128av12
7.847.847.84ascon128v12
7.977.977.97ascon80pqv12
8.638.658.66T:xoodyakv1
12.2212.3312.38T:gimli24v1
16.3716.3716.39T:isapa128av20
18.4318.5818.58T:knot128v2
19.8619.8619.86T:knot128v1
20.2920.4020.45T:saeaes128a120t64v1
20.3720.4220.45T:saeaes128a120t128v1
21.1621.1621.17T:isapa128v20
23.0823.1623.20T:saeaes192a120t128v1
23.5723.7323.93T:comet128aesv1
25.3925.4425.69T:schwaemm256128v1
25.4025.4625.56T:saeaes128a64t64v1
25.4525.4725.55T:saeaes128a64t128v1
26.0026.1526.25T:saeaes256a120t128v1
28.8628.8830.29T:saeaes192a64t64v1
28.9328.9429.91T:saeaes192a64t128v1
29.5029.5129.54T:schwaemm256256v1
32.5032.5332.57T:saeaes256a64t128v1
32.5232.5432.56T:saeaes256a64t64v1
34.0334.0734.19T:schwaemm192192v1
34.6634.6734.71T:saturninctrcascadev2
37.7137.7137.71T:knot256
38.6438.6538.65T:giftcofb128v1
39.6039.6039.61T:tinyjambu192
36.56?39.92?48.27?T:grain128aead
40.0340.0340.03T:tinyjambu128
40.9540.9640.99T:knot192
44.6244.6344.68T:isapk128av20
46.5846.5846.58T:tinyjambu256
47.4147.4447.47T:schwaemm128128v1
51.6251.7451.83T:photonbeetleaead128rate128v1
52.5252.5352.55T:drygascon128k16
52.5252.5652.79T:drygascon128k32
52.7652.7852.79T:drygascon128k56
55.1055.2155.32T:drygascon256k32
70.7471.1373.69T:sestatetweaes128v1
74.7174.8174.88T:isapk128v20
87.7487.7487.75T:spook128su512v1
87.7487.7687.77T:spook128su384v1
88.3288.3488.35T:spook128mu384v1
88.3488.3488.36T:spook128mu512v1
94.2294.5197.85T:estatetweaes128v1
97.5497.5999.09T:elephant200v1
102.20102.30102.39T:comet64chamv1
108.13108.64108.77T:skinnyaeadtk3128128v1
115.29115.37115.49T:comet64speckv1
121.04121.18131.78T:comet128chamv1
134.04134.19136.98T:mixfeed
139.80140.15141.44T:subterraneanv1
141.30141.39141.50T:romulusn1v1
199.18199.25199.39T:romulusm1v1
201.88202.10202.41T:photonbeetleaead128rate32v1
207.75207.77207.80T:pyjamask128aeadv1
210.48210.48210.57T:pyjamask96aeadv1
238.45238.80238.88T:romulusn3v1
254.28254.79255.48T:sundaegift128v1
254.72255.38255.53T:sundaegift64v1
254.74255.42255.58T:sundaegift96v1
257.11257.63258.13T:sundaegift0v1
330.45331.33333.29T:romulusm3v1
344.40344.69345.49T:romulusn2v1
363.61364.13365.54T:spoc128sliscplight256v1
376.27376.63381.35T:skinnyaeadtk296128v1
378.45378.93379.85T:skinnyaeadtk29664v1
379.39380.22382.35T:spix128v1
460.47464.72469.92T:romulusm2v1
552.11554.54555.41T:skinnyaeadtk312864v1
555.04555.73557.29T:skinnyaeadtk39664v1
565.18565.98573.89T:skinnyaeadtk396128v1
587.11590.72595.75T:spoc64sliscplight192v1
706.25709.40732.36T:wageae128v1
750.93751.37754.04T:saefforkskinnyb128t192n56v1
750.14753.16763.69T:paefforkskinnyb128t192n48v1
745.26753.68754.48T:saefforkskinnyb128t256n120v1
752.93753.88762.21T:paefforkskinnyb128t256n112v1
922.64923.49923.76T:aceae128v1
1074.611077.771079.75T:paefforkskinnyb128t288n104v1
1443.681450.531451.25T:hyenav1
1543.951546.801548.14T:orangezestv1
1582.761583.331600.29T:twegift64lotusaeadv1
1612.281621.341669.86T:twegift64locusaeadv1
1761.541766.211771.44T:oribatida256v11
1940.282030.752036.29T:oribatida192v11
2061.132065.862066.92T:paefforkskinnyb64t192n48v1
2149.892151.192152.37T:estatetwegift128v1
4838.644846.134880.17T:elephant176v1
5880.795882.075885.84T:elephant160v1
Cycles/byte for 64+64 encrypt
25%50%75%aead
8.118.118.32T:ascon128av12
8.458.458.65ascon128av12
10.7610.7710.79ascon80pqv12
10.9410.9510.98ascon128v12
16.7316.7316.73T:xoodyakv1
20.8520.9721.04T:gimli24v1
23.6023.8224.14T:saeaes128a120t64v1
23.8223.9524.26T:saeaes128a120t128v1
25.3825.3825.48T:knot128v1
27.4127.5927.97T:saeaes192a120t128v1
27.9828.3128.65T:saeaes128a64t128v1
28.1628.5528.70T:saeaes128a64t64v1
28.92?29.50?48.70?T:knot128v2
29.5829.8130.19T:comet128aesv1
30.6630.8433.22T:saeaes256a120t128v1
31.8432.1633.74T:saeaes192a64t64v1
31.9532.2132.97T:saeaes192a64t128v1
35.36?35.88?60.24?T:grain128aead
36.0036.0936.35T:saeaes256a64t64v1
36.0336.1536.38T:saeaes256a64t128v1
38.8839.0239.13T:schwaemm256128v1
44.8744.9545.14T:schwaemm256256v1
45.5145.5545.63T:giftcofb128v1
46.5346.5346.73T:tinyjambu128
47.7047.8548.15T:tinyjambu192
50.6250.6251.21T:isapa128av20
53.7453.7454.03T:tinyjambu256
53.7453.8454.17T:knot192
55.9055.9956.16T:schwaemm192192v1
56.7657.2158.06T:photonbeetleaead128rate128v1
57.4557.5957.75T:knot256
58.9559.0859.36T:schwaemm128128v1
60.2360.3160.43T:drygascon128k56
60.0460.3860.55T:drygascon128k32
60.5660.7761.12T:drygascon128k16
65.8566.0666.25T:saturninctrcascadev2
67.7167.8267.91T:drygascon256k32
83.7384.4286.91T:sestatetweaes128v1
104.73105.20105.88T:estatetweaes128v1
116.91117.74118.23T:comet64chamv1
129.69129.90130.48T:comet64speckv1
130.19130.34130.76T:spook128su512v1
130.23130.54131.32T:spook128su384v1
130.90130.98131.30T:spook128mu512v1
130.88131.05131.91T:spook128mu384v1
139.38140.19141.52T:elephant200v1
158.91159.11159.60T:skinnyaeadtk3128128v1
159.76160.44161.20T:comet128chamv1
169.26169.55170.23T:romulusn1v1
179.69179.70179.91T:isapk128av20
196.90198.12200.42T:mixfeed
207.77208.42208.98T:photonbeetleaead128rate32v1
226.84227.43227.62T:romulusm1v1
254.90256.05256.92T:subterraneanv1
263.20263.41264.23T:romulusn3v1
279.55?280.86?454.59?T:sundaegift0v1
284.10284.10284.24T:isapa128v20
296.13296.92297.68T:sundaegift96v1
296.44297.05298.04T:sundaegift64v1
297.09297.94298.45T:sundaegift128v1
300.59300.73300.78T:pyjamask128aeadv1
308.74308.90309.30T:pyjamask96aeadv1
311.78312.83318.16T:skinnyaeadtk29664v1
312.44314.49318.51T:skinnyaeadtk296128v1
381.34382.04386.66T:romulusn2v1
381.45382.85385.04T:romulusm3v1
410.43411.88412.52T:spoc128sliscplight256v1
447.34450.13457.16T:skinnyaeadtk312864v1
455.28460.09463.00T:skinnyaeadtk39664v1
455.88462.18463.00T:skinnyaeadtk396128v1
517.45521.77530.02T:saefforkskinnyb128t256n120v1
519.39521.84540.56T:saefforkskinnyb128t192n56v1
514.73528.00533.63T:paefforkskinnyb128t256n112v1
526.27535.26535.93T:paefforkskinnyb128t192n48v1
533.17537.59538.73T:romulusm2v1
640.73642.09647.26T:spix128v1
670.73672.48674.66T:spoc64sliscplight192v1
679.66686.52690.34T:paefforkskinnyb128t288n104v1
1019.391019.681020.20T:isapk128v20
1050.661067.491069.76T:wageae128v1
1290.841296.301300.62T:paefforkskinnyb64t192n48v1
1307.161307.641311.69T:aceae128v1
1634.091649.231652.20T:hyenav1
1827.201837.341874.37T:twegift64lotusaeadv1
1912.861913.951915.14T:orangezestv1
1936.621949.011993.87T:twegift64locusaeadv1
2072.672080.942084.87T:oribatida192v11
2185.842191.322198.98T:oribatida256v11
2328.642337.062354.05T:estatetwegift128v1
6015.596022.336048.26T:elephant176v1
7881.127915.287928.68T:elephant160v1
Cycles/byte for 64+64 decrypt
25%50%75%aead
8.148.148.54T:ascon128av12
8.598.848.86ascon128av12
10.5210.5310.61ascon128v12
10.7210.7510.76ascon80pqv12
16.8116.8416.92T:xoodyakv1
17.7017.7517.93T:gimli24v1
23.9424.1124.41T:saeaes128a120t64v1
24.1224.2824.66T:saeaes128a120t128v1
25.3525.3525.35T:knot128v1
27.2027.4427.77T:saeaes192a120t128v1
28.3828.5228.95T:saeaes128a64t64v1
28.3828.6128.86T:saeaes128a64t128v1
28.61?28.93?47.66?T:knot128v2
30.4630.5930.92T:comet128aesv1
31.2731.3831.83T:saeaes256a120t128v1
31.9932.2732.60T:saeaes192a64t128v1
32.2732.6833.72T:saeaes192a64t64v1
36.1536.2536.70T:saeaes256a64t128v1
35.9936.2736.35T:saeaes256a64t64v1
35.54?36.55?54.40?T:grain128aead
39.0339.2939.55T:schwaemm256128v1
44.9645.2145.52T:schwaemm256256v1
45.5245.5845.61T:giftcofb128v1
46.2346.2346.23T:tinyjambu128
47.8047.9948.21T:tinyjambu192
50.6250.6250.97T:isapa128av20
52.5452.8853.55T:schwaemm192192v1
53.6353.6354.00T:tinyjambu256
53.5953.8054.15T:knot192
57.1357.4657.81T:knot256
57.9558.3459.19T:photonbeetleaead128rate128v1
58.7459.0259.17T:saturninctrcascadev2
59.0359.4859.77T:schwaemm128128v1
60.5960.7160.97T:drygascon128k56
61.0961.3861.83T:drygascon128k16
61.1461.3861.66T:drygascon128k32
68.2868.3968.79T:drygascon256k32
83.2383.5184.30T:sestatetweaes128v1
104.84105.13105.82T:estatetweaes128v1
117.02117.79118.27T:comet64chamv1
130.49130.98131.38T:comet64speckv1
131.30131.52139.45T:spook128su512v1
131.34131.68132.06T:spook128su384v1
131.80132.01140.14T:spook128mu384v1
131.90132.03132.55T:spook128mu512v1
139.79140.22140.87T:elephant200v1
150.88151.16151.73T:skinnyaeadtk3128128v1
157.73161.37165.08T:comet128chamv1
169.59169.84169.96T:romulusn1v1
179.89179.92180.61T:isapk128av20
197.43198.09199.76T:mixfeed
207.62208.59209.09T:photonbeetleaead128rate32v1
234.52234.66234.73T:romulusm1v1
253.02255.06258.23T:subterraneanv1
261.87263.09264.51T:romulusn3v1
279.37?280.06?454.59?T:sundaegift0v1
284.12284.12284.54T:isapa128v20
297.09297.87298.35T:sundaegift96v1
297.72298.01298.57T:sundaegift128v1
297.75298.17298.57T:sundaegift64v1
302.96303.04303.10T:pyjamask128aeadv1
310.02?310.32?388.73?T:pyjamask96aeadv1
381.62382.84385.50T:romulusn2v1
381.99382.88386.83T:romulusm3v1
408.64410.38411.53T:spoc128sliscplight256v1
410.92411.80414.35T:skinnyaeadtk296128v1
413.18415.46416.26T:skinnyaeadtk29664v1
536.59542.59544.12T:romulusm2v1
603.10605.13607.34T:skinnyaeadtk312864v1
603.85607.70612.36T:skinnyaeadtk39664v1
610.71614.22619.98T:skinnyaeadtk396128v1
642.05645.68646.41T:spix128v1
654.76669.84670.80T:spoc64sliscplight192v1
748.21749.40755.98T:saefforkskinnyb128t192n56v1
751.66754.01758.44T:saefforkskinnyb128t256n120v1
756.13758.63763.56T:paefforkskinnyb128t256n112v1
757.40759.66766.95T:paefforkskinnyb128t192n48v1
1019.341019.771021.16T:isapk128v20
1045.921048.771051.33T:wageae128v1
1075.951080.791083.01T:paefforkskinnyb128t288n104v1
1304.861305.591307.64T:aceae128v1
1633.221637.001639.04T:hyenav1
1778.781788.841793.39T:twegift64lotusaeadv1
1835.601846.181887.89T:twegift64locusaeadv1
1913.551914.441915.04T:orangezestv1
2057.492066.842069.04T:paefforkskinnyb64t192n48v1
2175.342181.042188.25T:oribatida256v11
2311.492326.092331.49T:estatetwegift128v1
2524.952565.192594.69T:oribatida192v11
6025.276034.586039.20T:elephant176v1
7877.457880.247881.91T:elephant160v1
Cycles/byte for 64+64 forgery
25%50%75%aead
8.138.138.41T:ascon128av12
8.598.618.83ascon128av12
10.5010.5110.51ascon128v12
10.7210.7210.72ascon80pqv12
16.7316.9016.98T:xoodyakv1
17.6317.7817.88T:gimli24v1
24.4324.6825.27T:saeaes128a120t128v1
24.5425.1125.41T:saeaes128a120t64v1
25.3525.3525.35T:knot128v1
27.6827.9828.30T:saeaes192a120t128v1
28.5928.8429.16T:saeaes128a64t64v1
28.55?28.96?43.06?T:knot128v2
28.8429.1429.63T:saeaes128a64t128v1
30.3830.5830.80T:comet128aesv1
31.2531.6232.02T:saeaes256a120t128v1
32.3832.6634.28T:saeaes192a64t64v1
32.7332.7333.28T:saeaes192a64t128v1
33.2733.3634.00T:isapa128av20
35.3535.5436.80T:grain128aead
36.4636.6036.75T:saeaes256a64t128v1
36.9737.0037.24T:saeaes256a64t64v1
40.1140.3040.90T:schwaemm256128v1
45.5045.5245.59T:giftcofb128v1
46.2346.2346.23T:tinyjambu128
46.1646.2646.65T:schwaemm256256v1
47.8647.9447.98T:tinyjambu192
53.5453.5553.81T:knot192
53.6353.6353.64T:tinyjambu256
53.7253.8554.06T:schwaemm192192v1
57.3357.5257.74T:knot256
57.9058.2758.93T:photonbeetleaead128rate128v1
58.4058.7758.87T:saturninctrcascadev2
60.1260.3761.01T:schwaemm128128v1
60.5960.6260.87T:drygascon128k56
60.6861.2061.88T:drygascon128k32
61.1361.6461.95T:drygascon128k16
68.3268.4869.00T:drygascon256k32
83.3884.2085.52T:sestatetweaes128v1
104.58105.45106.66T:estatetweaes128v1
117.33117.59118.04T:isapk128av20
117.09117.86118.30T:comet64chamv1
130.45130.98131.05T:comet64speckv1
131.38131.56139.12T:spook128su512v1
131.47131.64132.01T:spook128su384v1
131.81131.87132.38T:spook128mu384v1
131.93131.98132.38T:spook128mu512v1
138.77140.42141.05T:elephant200v1
148.05148.21148.63T:isapa128v20
150.50150.75151.09T:skinnyaeadtk3128128v1
151.50152.29163.61T:comet128chamv1
169.66169.77169.97T:romulusn1v1
196.44198.80199.05T:mixfeed
208.17208.73209.14T:photonbeetleaead128rate32v1
234.79234.86235.04T:romulusm1v1
254.95255.57258.41T:subterraneanv1
263.92264.34265.54T:romulusn3v1
280.05?280.58?454.48?T:sundaegift0v1
297.32297.74298.09T:sundaegift96v1
297.23297.90298.16T:sundaegift64v1
297.66297.92298.62T:sundaegift128v1
302.95303.01303.05T:pyjamask128aeadv1
310.09310.10310.34T:pyjamask96aeadv1
381.63382.31384.23T:romulusm3v1
381.38382.45385.83T:romulusn2v1
408.62409.69411.79T:spoc128sliscplight256v1
409.50412.75414.15T:skinnyaeadtk296128v1
412.60414.39418.45T:skinnyaeadtk29664v1
541.55542.41543.49T:isapk128v20
541.05542.88545.12T:romulusm2v1
602.80603.58608.94T:skinnyaeadtk312864v1
603.75605.44607.91T:skinnyaeadtk39664v1
615.66618.02620.49T:skinnyaeadtk396128v1
641.52642.84645.18T:spix128v1
665.19672.07674.56T:spoc64sliscplight192v1
749.08749.66753.46T:saefforkskinnyb128t192n56v1
744.28755.09757.27T:saefforkskinnyb128t256n120v1
754.15755.34765.31T:paefforkskinnyb128t192n48v1
756.66757.16758.59T:paefforkskinnyb128t256n112v1
994.581034.841047.80T:wageae128v1
1074.691078.051081.35T:paefforkskinnyb128t288n104v1
1303.451304.361306.29T:aceae128v1
1626.681635.371642.02T:hyenav1
1781.431783.951787.95T:twegift64lotusaeadv1
1825.801828.331891.70T:twegift64locusaeadv1
1908.861913.371915.29T:orangezestv1
2036.382072.752075.86T:paefforkskinnyb64t192n48v1
2183.672186.702188.52T:oribatida256v11
2348.602355.862376.02T:estatetwegift128v1
2572.382579.462590.55T:oribatida192v11
6024.156028.876050.43T:elephant176v1
7879.067931.538230.20T:elephant160v1

amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.511.521.54T:aes128gcmv1
1.671.681.68aes256gcmv1
6.756.766.78ascon128av12
9.349.389.39ascon80pqv12
9.419.429.42ascon128v12
11.3211.4311.44ascon128abi32v12
17.2117.2317.23ascon128bi32v12
17.5817.6217.64T:xoodyakround3
21.7421.7521.77T:schwaemm256128v2
25.5125.5625.82T:schwaemm256256v2
27.2327.4727.64T:grain128aeadv2
28.4828.6128.63T:schwaemm192192v2
29.8229.8229.84T:schwaemm128128v2
35.0335.1535.24romulusn
36.2136.3336.42T:isapa128v20
36.7836.8037.03T:isapa128av20
40.3340.3740.38T:giftcofb128v1
56.9357.1057.13romulusm
62.1162.1762.26T:tinyjambu128v2
66.7966.8367.04T:isapk128av20
69.5469.5569.55T:tinyjambu192v2
76.6376.7276.77T:tinyjambu256v2
85.8588.4390.42T:isapk128v20
110.65110.67110.68romulust
164.30164.90165.37T:isapxv20
254.48255.48255.87T:elephant200v2
6833.026837.436841.37T:elephant176v2
7653.657658.297663.46T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.611.631.64T:aes128gcmv1
1.761.771.79aes256gcmv1
6.666.676.68ascon128av12
9.369.379.38ascon80pqv12
9.319.409.43ascon128v12
11.4411.4411.44ascon128abi32v12
17.1517.2917.29ascon128bi32v12
17.4017.4517.48T:xoodyakround3
21.8221.8321.89T:schwaemm256128v2
25.5725.6225.76T:schwaemm256256v2
27.2027.2327.30T:grain128aeadv2
28.6128.6428.88T:schwaemm192192v2
29.8129.8329.94T:schwaemm128128v2
35.1335.1535.50romulusn
36.3536.3736.45T:isapa128v20
36.6936.7036.74T:isapa128av20
40.7440.7740.80T:giftcofb128v1
56.6857.1457.31romulusm
62.2362.2962.38T:tinyjambu128v2
66.7966.8366.99T:isapk128av20
69.3169.3769.52T:tinyjambu192v2
76.6276.6376.67T:tinyjambu256v2
86.0488.4390.30T:isapk128v20
110.65110.67110.68romulust
163.47164.02165.72T:isapxv20
253.72254.65256.50T:elephant200v2
6838.876843.606845.03T:elephant176v2
7655.817659.987663.07T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.611.621.62T:aes128gcmv1
1.771.771.78aes256gcmv1
6.656.666.67ascon128av12
9.359.379.38ascon80pqv12
9.379.399.42ascon128v12
11.4311.4411.45ascon128abi32v12
17.1217.1317.17ascon128bi32v12
17.5217.5817.67T:xoodyakround3
18.1718.1918.24T:isapa128v20
21.8121.8321.86T:schwaemm256128v2
24.3624.3724.40T:isapa128av20
25.5725.6225.65T:schwaemm256256v2
27.2027.2427.25T:grain128aeadv2
28.6128.6428.98T:schwaemm192192v2
29.7829.8129.88T:schwaemm128128v2
35.1335.1935.38romulusn
37.1437.1937.24romulust
40.7940.8240.84T:giftcofb128v1
44.0744.1144.27T:isapk128av20
53.8355.0356.11T:isapk128v20
57.0957.1157.15romulusm
62.1462.2662.31T:tinyjambu128v2
69.3269.3369.39T:tinyjambu192v2
76.6576.6876.69T:tinyjambu256v2
98.2298.5198.67T:isapxv20
253.91255.03255.55T:elephant200v2
6838.436841.416860.27T:elephant176v2
7651.477658.287663.00T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.021.031.03T:aes128gcmv1
1.091.101.11aes256gcmv1
6.586.616.62ascon128av12
9.309.319.32ascon80pqv12
9.319.329.34ascon128v12
11.0611.0711.14ascon128abi32v12
13.7513.7913.84T:xoodyakround3
16.8716.9016.90ascon128bi32v12
21.3121.5021.60T:schwaemm256128v2
25.4725.4925.62T:schwaemm256256v2
27.2427.3327.35T:isapa128v20
27.3127.3627.46T:grain128aeadv2
28.5028.5228.54T:schwaemm192192v2
28.4428.6028.61romulusn
29.6429.6829.97T:schwaemm128128v2
30.7730.8330.85T:isapa128av20
39.4239.5239.55romulusm
40.3440.3740.37T:giftcofb128v1
51.1451.1751.22T:tinyjambu128v2
54.8354.8454.86T:tinyjambu192v2
55.3855.4155.46T:isapk128av20
58.4358.4558.50T:tinyjambu256v2
70.0271.6372.60T:isapk128v20
73.8973.9373.99romulust
130.88131.27131.44T:isapxv20
190.62190.81191.70T:elephant200v2
5105.295109.285111.83T:elephant176v2
5742.405743.755754.66T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.051.071.08T:aes128gcmv1
1.151.151.16aes256gcmv1
6.566.586.58ascon128av12
9.289.299.31ascon128v12
9.309.309.31ascon80pqv12
11.2111.2211.24ascon128abi32v12
13.6413.6813.70T:xoodyakround3
16.8916.9016.92ascon128bi32v12
21.2221.3921.46T:schwaemm256128v2
25.4825.4925.52T:schwaemm256256v2
26.8727.1727.23T:grain128aeadv2
27.3027.3127.33T:isapa128v20
28.3528.5628.58romulusn
28.5128.7128.73T:schwaemm192192v2
29.5929.6329.69T:schwaemm128128v2
30.6730.7230.79T:isapa128av20
39.5239.5439.65romulusm
40.5540.5640.58T:giftcofb128v1
51.2251.2351.25T:tinyjambu128v2
54.7254.7654.81T:tinyjambu192v2
55.4155.6455.67T:isapk128av20
58.3958.4458.57T:tinyjambu256v2
70.3971.8172.64T:isapk128v20
73.9173.9373.98romulust
130.71131.05131.49T:isapxv20
190.01191.37191.59T:elephant200v2
5106.035107.125108.84T:elephant176v2
5742.005747.215756.15T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.061.071.08T:aes128gcmv1
1.151.161.16aes256gcmv1
6.556.556.56ascon128av12
9.299.309.32ascon128v12
9.299.309.30ascon80pqv12
11.2211.2211.23ascon128abi32v12
13.7113.7313.77T:xoodyakround3
16.9417.0017.01ascon128bi32v12
18.2218.2418.26T:isapa128v20
21.3521.6021.60T:schwaemm256128v2
24.4324.4524.56T:isapa128av20
25.5025.5325.61T:schwaemm256256v2
26.8727.1827.24T:grain128aeadv2
28.3528.5728.59romulusn
28.6828.7028.71T:schwaemm192192v2
29.5929.6129.66T:schwaemm128128v2
37.1737.2037.36romulust
39.3339.5439.61romulusm
40.5640.5640.59T:giftcofb128v1
44.0144.0544.09T:isapk128av20
51.1551.2051.22T:tinyjambu128v2
54.7254.7354.76T:tinyjambu192v2
54.4054.9855.55T:isapk128v20
58.4558.5258.53T:tinyjambu256v2
98.0798.3498.48T:isapxv20
189.68190.13191.62T:elephant200v2
5108.985112.725122.40T:elephant176v2
5737.185741.135743.91T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.530.540.56T:aes128gcmv1
0.530.550.56aes256gcmv1
6.416.436.46ascon128av12
9.239.239.24ascon80pqv12
9.259.259.25ascon128v12
9.899.909.93T:xoodyakround3
10.8110.8310.84ascon128abi32v12
16.5716.5716.58ascon128bi32v12
18.2518.2518.25T:isapa128v20
21.4621.4721.49T:schwaemm256128v2
21.9721.9822.00romulusm
21.9721.9922.13romulusn
24.6424.6524.71T:isapa128av20
25.4425.4725.66T:schwaemm256256v2
27.0827.4427.49T:grain128aeadv2
28.3728.4028.43T:schwaemm192192v2
29.5129.5929.64T:schwaemm128128v2
37.1637.1837.20romulust
40.1340.1440.19T:tinyjambu192v2
40.1640.1940.22T:tinyjambu128v2
40.2240.2340.23T:tinyjambu256v2
40.3340.3440.38T:giftcofb128v1
43.9644.0744.11T:isapk128av20
53.9155.2356.05T:isapk128v20
97.3997.9598.04T:isapxv20
127.11127.80128.14T:elephant200v2
3373.753378.693385.78T:elephant176v2
3820.933823.893828.72T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.520.540.55T:aes128gcmv1
0.530.550.57aes256gcmv1
6.356.386.39ascon128av12
9.229.239.23ascon128v12
9.239.249.24ascon80pqv12
9.629.9310.00T:xoodyakround3
10.93?11.00?12.54?ascon128abi32v12
16.6816.6916.69ascon128bi32v12
18.2618.2718.27T:isapa128v20
21.4521.4721.48T:schwaemm256128v2
21.9721.9821.99romulusn
21.9721.9922.00romulusm
24.3524.4024.53T:isapa128av20
25.4325.4525.54T:schwaemm256256v2
26.9627.1027.21T:grain128aeadv2
28.3228.4128.43T:schwaemm192192v2
29.5429.5929.63T:schwaemm128128v2
37.1537.1837.22romulust
40.1340.1440.16T:tinyjambu192v2
40.1840.2140.23T:tinyjambu128v2
40.1840.2340.37T:tinyjambu256v2
40.3440.3740.39T:giftcofb128v1
43.9643.9944.11T:isapk128av20
53.7854.9156.04T:isapk128v20
97.8198.1098.46T:isapxv20
127.54127.62128.12T:elephant200v2
3373.503376.593378.37T:elephant176v2
3821.533827.263828.85T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.530.540.56T:aes128gcmv1
0.540.550.56aes256gcmv1
6.426.476.48ascon128av12
9.209.219.25ascon80pqv12
9.229.229.23ascon128v12
9.879.959.99T:xoodyakround3
10.92?11.01?12.53?ascon128abi32v12
16.6816.8416.84ascon128bi32v12
18.2518.2618.32T:isapa128v20
21.4521.4721.48T:schwaemm256128v2
21.9621.9822.00romulusn
21.9721.9822.00romulusm
24.3324.4724.60T:isapa128av20
25.4525.5025.65T:schwaemm256256v2
26.9827.0227.09T:grain128aeadv2
28.3828.4528.64T:schwaemm192192v2
29.5029.5529.56T:schwaemm128128v2
37.1737.1837.22romulust
40.1440.1440.14T:tinyjambu192v2
40.1540.1740.22T:tinyjambu128v2
40.1940.2440.39T:tinyjambu256v2
40.3640.4140.43T:giftcofb128v1
44.0044.0444.07T:isapk128av20
53.7554.8856.00T:isapk128v20
97.7597.9998.41T:isapxv20
127.33127.73127.97T:elephant200v2
3375.053376.783379.00T:elephant176v2
3822.063826.073831.13T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.141.151.15T:aes128gcmv1
1.231.241.24aes256gcmv1
6.786.786.80ascon128av12
9.469.479.49ascon128v12
9.469.479.47ascon80pqv12
11.3911.3911.46ascon128abi32v12
13.9213.9313.97T:xoodyakround3
17.2117.2117.22ascon128bi32v12
22.1122.1122.14T:schwaemm256128v2
26.1626.2526.38T:schwaemm256256v2
27.6527.7227.75T:grain128aeadv2
28.8128.8528.86romulusn
29.1629.1829.27T:schwaemm192192v2
30.1130.1230.16T:schwaemm128128v2
34.0634.1234.15T:isapa128av20
39.6739.8039.82romulusm
39.8839.8839.97T:isapa128v20
40.7340.7540.78T:giftcofb128v1
51.5451.5851.59T:tinyjambu128v2
55.2555.2755.28T:tinyjambu192v2
58.8558.8958.93T:tinyjambu256v2
61.9061.9362.09T:isapk128av20
75.0775.0875.13romulust
123.13123.17124.57T:isapk128v20
194.46195.46195.68T:elephant200v2
212.50212.75213.08T:isapxv20
5144.215146.965150.06T:elephant176v2
5802.115805.855811.03T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.201.201.20T:aes128gcmv1
1.291.291.30aes256gcmv1
6.776.776.77ascon128av12
9.459.469.49ascon128v12
9.479.479.48ascon80pqv12
11.5211.5211.52ascon128abi32v12
13.8413.8613.88T:xoodyakround3
17.2317.2317.25ascon128bi32v12
21.8722.0422.28T:schwaemm256128v2
26.2026.2126.24T:schwaemm256256v2
26.6827.5427.57T:grain128aeadv2
28.6328.8228.85romulusn
29.1729.1729.29T:schwaemm192192v2
30.1130.2030.42T:schwaemm128128v2
33.9833.9834.01T:isapa128av20
39.6839.9039.98romulusm
39.9439.9439.94T:isapa128v20
40.9440.9540.97T:giftcofb128v1
51.5951.5951.63T:tinyjambu128v2
55.1555.1755.17T:tinyjambu192v2
58.8758.9458.95T:tinyjambu256v2
61.9061.9162.02T:isapk128av20
75.0875.0875.12romulust
123.16123.42124.59T:isapk128v20
194.75195.10195.28T:elephant200v2
212.49212.65212.92T:isapxv20
5144.695146.145148.75T:elephant176v2
5802.935804.235807.98T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.181.181.19T:aes128gcmv1
1.281.291.29aes256gcmv1
6.716.746.76ascon128av12
9.449.449.45ascon128v12
9.479.479.47ascon80pqv12
11.5211.5211.53ascon128abi32v12
13.8813.9013.93T:xoodyakround3
17.2617.3117.31ascon128bi32v12
21.8821.8922.04T:schwaemm256128v2
24.6424.6424.64T:isapa128v20
26.2726.2926.41T:isapa128av20
26.2126.2926.35T:schwaemm256256v2
27.2527.5627.58T:grain128aeadv2
28.6328.8228.82romulusn
29.1729.2029.28T:schwaemm192192v2
30.0730.0730.10T:schwaemm128128v2
38.2638.2738.30romulust
39.8639.8739.89romulusm
40.9140.9640.97T:giftcofb128v1
47.8047.8147.84T:isapk128av20
51.5951.6551.67T:tinyjambu128v2
55.1555.1655.18T:tinyjambu192v2
58.9158.9359.01T:tinyjambu256v2
81.3881.3982.08T:isapk128v20
139.88140.09140.17T:isapxv20
193.84195.35195.63T:elephant200v2
5144.495145.265146.35T:elephant176v2
5802.105803.235806.11T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.556.626.77aes256gcmv1
7.257.317.38T:aes128gcmv1
10.9411.1811.66ascon128av12
12.8112.9313.13ascon80pqv12
12.7713.1213.35ascon128v12
18.4318.5918.80ascon128abi32v12
20.6220.7320.83T:xoodyakround3
24.1224.4124.71ascon128bi32v12
34.6034.8034.91romulusn
35.5935.7335.88T:grain128aeadv2
36.1036.2036.29T:schwaemm256128v2
40.0240.0740.29T:schwaemm128128v2
41.7041.8041.90T:schwaemm256256v2
45.5945.8445.95romulusm
47.5847.7647.96T:schwaemm192192v2
49.1949.2949.41T:giftcofb128v1
60.3860.5460.67T:tinyjambu128v2
64.7264.9565.04T:tinyjambu192v2
68.5268.6968.80T:tinyjambu256v2
101.07101.41102.97romulust
109.43109.72110.02T:isapa128av20
198.94199.12200.20T:isapk128av20
276.92277.04277.87T:elephant200v2
328.62328.73330.40T:isapa128v20
1296.421296.771329.31T:isapk128v20
2061.052063.452068.97T:isapxv20
6401.596403.636406.35T:elephant176v2
7768.257770.677774.83T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.696.796.85aes256gcmv1
6.836.886.93T:aes128gcmv1
11.2311.4111.67ascon128av12
12.8012.8813.52ascon128v12
12.9813.3513.62ascon80pqv12
18.7318.7819.18ascon128abi32v12
20.4120.5221.15T:xoodyakround3
24.4524.7925.04ascon128bi32v12
34.8935.0135.12romulusn
35.3735.5235.77T:grain128aeadv2
36.4136.4436.55T:schwaemm256128v2
40.1640.2040.40T:schwaemm128128v2
41.7141.8041.90T:schwaemm256256v2
47.3047.4447.57romulusm
47.9148.0148.36T:schwaemm192192v2
49.6249.6649.80T:giftcofb128v1
60.8560.9761.05T:tinyjambu128v2
64.8264.8864.89T:tinyjambu192v2
68.8068.8269.05T:tinyjambu256v2
101.00101.20102.11romulust
109.50109.77109.97T:isapa128av20
199.20199.41199.62T:isapk128av20
277.00277.48278.50T:elephant200v2
328.28328.29331.02T:isapa128v20
1296.621297.091329.37T:isapk128v20
2059.222065.982066.46T:isapxv20
6402.276404.506411.75T:elephant176v2
7768.207770.297773.99T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.776.806.93aes256gcmv1
6.726.826.87T:aes128gcmv1
10.9610.9811.35ascon128av12
12.7812.8813.08ascon128v12
12.7313.2313.41ascon80pqv12
18.2018.7118.89ascon128abi32v12
20.4920.5821.26T:xoodyakround3
24.3024.3024.42ascon128bi32v12
34.6835.0035.13romulusn
35.4635.6335.69T:grain128aeadv2
36.3036.3236.38T:schwaemm256128v2
40.1240.1840.49T:schwaemm128128v2
41.7341.7942.08T:schwaemm256256v2
47.3847.4547.52romulusm
47.8147.9048.09T:schwaemm192192v2
49.5349.5349.78T:giftcofb128v1
60.6561.0061.12T:tinyjambu128v2
62.9162.9263.68romulust
64.6664.6764.75T:tinyjambu192v2
68.2268.2368.45T:isapa128av20
68.9568.9568.95T:tinyjambu256v2
125.16125.23125.31T:isapk128av20
170.06170.06171.58T:isapa128v20
276.62277.35277.82T:elephant200v2
678.12678.49694.72T:isapk128v20
1079.741081.111083.26T:isapxv20
6402.696406.046412.28T:elephant176v2
7764.477766.917775.50T:elephant160v2

amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.45?0.55?0.64?T:aes128gcmv1
0.54?0.67?0.79?T:aes256gcmv1
1.611.621.63aes256gcmv1
3.873.974.01aes128gcmv1
7.387.437.54ascon128av12
10.9110.9510.98ascon80pqv12
10.9110.9511.00ascon128v12
13.4313.5013.55T:xoodyakround3
14.7514.7914.82ascon128abi32v12
16.3216.4716.67T:schwaemm256128v2
18.8518.9218.96T:grain128aeadv2
19.8220.0120.16T:schwaemm256256v2
21.6621.7721.92T:schwaemm192192v2
22.4322.4722.49ascon128bi32v12
24.3425.1125.27T:schwaemm128128v2
26.8026.9126.96T:isapa128av20
32.0732.1032.13T:isapk128av20
37.0537.1137.19romulusn
44.1244.1844.26T:giftcofb128v1
45.1245.2145.28T:isapa128v20
57.7257.8257.90romulusm
70.4270.4870.57T:tinyjambu128v2
85.9486.0186.17T:tinyjambu192v2
91.4091.6691.76T:tinyjambu256v2
91.0891.8092.45T:isapk128v20
111.16111.32111.38romulust
120.32120.78121.14T:elephant200v2
136.89137.33137.98T:isapxv20
7254.227258.777263.81T:elephant176v2
8271.288274.538276.41T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.40?0.51?0.57?T:aes128gcmv1
0.52?0.59?0.62?T:aes256gcmv1
1.511.521.53aes256gcmv1
3.894.004.09aes128gcmv1
7.447.497.52ascon128av12
10.7510.7910.82ascon80pqv12
10.8210.8710.90ascon128v12
13.2113.3413.42T:xoodyakround3
14.8414.8914.90ascon128abi32v12
16.4616.6716.82T:schwaemm256128v2
19.1719.2519.29T:grain128aeadv2
19.8520.0120.06T:schwaemm256256v2
21.6421.8221.95T:schwaemm192192v2
22.3322.3622.41ascon128bi32v12
24.9525.0725.12T:schwaemm128128v2
32.1032.1332.17T:isapk128av20
34.3034.3834.45T:isapa128av20
37.3237.4137.51romulusn
44.2644.3444.40T:giftcofb128v1
45.2245.2845.39T:isapa128v20
58.2558.3358.38romulusm
70.3770.4470.49T:tinyjambu128v2
85.7485.8986.23T:tinyjambu192v2
90.2591.3391.92T:isapk128v20
91.0191.6491.69T:tinyjambu256v2
111.07111.28111.49romulust
119.84120.65121.04T:elephant200v2
137.21138.86140.38T:isapxv20
7252.747259.587263.93T:elephant176v2
8272.018277.408279.61T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.48?0.54?0.65?T:aes128gcmv1
0.52?0.60?0.66?T:aes256gcmv1
1.461.501.57aes128gcmv1
1.511.521.53aes256gcmv1
7.437.477.51ascon128av12
10.7510.7810.80ascon80pqv12
10.8510.8810.91ascon128v12
13.2613.3613.42T:xoodyakround3
14.8514.9014.93ascon128abi32v12
16.3816.5616.71T:schwaemm256128v2
19.1419.2219.30T:grain128aeadv2
19.8920.0420.21T:schwaemm256256v2
21.3621.3921.43T:isapk128av20
21.6121.7621.97T:schwaemm192192v2
21.9622.0322.07T:isapa128v20
22.3322.3722.42ascon128bi32v12
22.8022.8422.89T:isapa128av20
25.0125.2725.43T:schwaemm128128v2
37.2737.3937.49romulusn
38.7138.9439.13romulust
44.2844.3544.40T:giftcofb128v1
57.1557.7358.19T:isapk128v20
58.1558.2858.46romulusm
70.3570.4670.55T:tinyjambu128v2
81.4081.6981.92T:isapxv20
85.5085.7285.83T:tinyjambu192v2
91.3591.4491.65T:tinyjambu256v2
120.90121.09121.41T:elephant200v2
7255.627258.957262.27T:elephant176v2
8269.258276.108278.30T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.37?0.40?0.45?T:aes128gcmv1
0.41?0.44?0.49?T:aes256gcmv1
0.950.960.97aes256gcmv1
2.682.702.73aes128gcmv1
7.347.377.47ascon128av12
10.2810.3210.37T:xoodyakround3
10.8610.8910.90ascon80pqv12
10.9010.9210.94ascon128v12
14.5014.5214.54ascon128abi32v12
16.2216.4416.59T:schwaemm256128v2
18.8118.8618.94T:grain128aeadv2
19.8520.0220.18T:schwaemm256256v2
21.5921.7721.86T:schwaemm192192v2
22.1022.1222.15ascon128bi32v12
24.8424.8824.93T:isapa128av20
24.8524.9425.07T:schwaemm128128v2
26.7326.7326.74T:isapk128av20
28.9929.0329.05romulusn
33.6233.6933.78T:isapa128v20
39.3439.3939.49romulusm
44.1644.1944.24T:giftcofb128v1
57.4757.5257.63T:tinyjambu128v2
67.0467.1067.34T:tinyjambu192v2
68.6168.8569.09T:tinyjambu256v2
73.9274.3074.82T:isapk128v20
74.9275.0075.05romulust
90.8091.5591.95T:elephant200v2
109.09109.65110.44T:isapxv20
5415.565418.985422.41T:elephant176v2
6198.246201.676203.78T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.33?0.37?0.43?T:aes128gcmv1
0.40?0.43?0.52?T:aes256gcmv1
0.900.910.92aes256gcmv1
2.712.772.82aes128gcmv1
7.377.407.45ascon128av12
10.2210.2610.29T:xoodyakround3
10.7810.8110.84ascon80pqv12
10.8510.8710.89ascon128v12
14.5314.5814.61ascon128abi32v12
16.3016.4016.63T:schwaemm256128v2
19.0519.0919.11T:grain128aeadv2
20.1120.2120.35T:schwaemm256256v2
21.6121.7021.77T:schwaemm192192v2
22.0722.1022.13ascon128bi32v12
24.9625.0525.14T:schwaemm128128v2
26.7026.7326.76T:isapk128av20
28.3528.3928.44T:isapa128av20
29.0829.1329.17romulusn
33.6633.6833.72T:isapa128v20
39.5439.5939.66romulusm
44.1544.2344.28T:giftcofb128v1
57.4557.5057.54T:tinyjambu128v2
66.9267.1267.16T:tinyjambu192v2
69.0669.0969.14T:tinyjambu256v2
73.7474.1174.53T:isapk128v20
74.9775.0875.26romulust
91.1391.8892.19T:elephant200v2
109.52109.99110.32T:isapxv20
5414.345418.995422.41T:elephant176v2
6202.546205.036206.50T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.34?0.36?0.40?T:aes128gcmv1
0.400.410.44T:aes256gcmv1
0.910.920.92aes256gcmv1
1.461.491.51aes128gcmv1
7.387.407.43ascon128av12
10.2210.2710.35T:xoodyakround3
10.8010.8210.85ascon80pqv12
10.8510.8810.90ascon128v12
14.5414.5714.59ascon128abi32v12
16.2616.4616.60T:schwaemm256128v2
18.9418.9819.01T:grain128aeadv2
19.8919.9620.13T:schwaemm256256v2
21.3821.4021.42T:isapk128av20
21.6021.6621.79T:schwaemm192192v2
22.0422.0722.10ascon128bi32v12
22.0522.0822.11T:isapa128v20
22.5622.6322.67T:isapa128av20
24.8824.9825.11T:schwaemm128128v2
29.0829.1029.22romulusn
38.7838.9139.00romulust
39.4839.5739.66romulusm
44.1344.1844.24T:giftcofb128v1
57.2257.3657.62T:isapk128v20
57.5357.6457.70T:tinyjambu128v2
67.2767.3267.41T:tinyjambu192v2
68.5968.6569.09T:tinyjambu256v2
81.3481.5882.15T:isapxv20
91.1191.8292.16T:elephant200v2
5413.845420.375427.19T:elephant176v2
6202.756205.966209.40T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.15?0.21?0.36?T:aes256gcmv1
0.13?0.23?0.31?T:aes128gcmv1
0.28?0.31?0.33?aes256gcmv1
1.431.461.49aes128gcmv1
7.187.247.30T:xoodyakround3
7.327.457.63ascon128av12
10.7910.8210.85ascon80pqv12
10.8510.8810.90ascon128v12
14.2114.2414.26ascon128abi32v12
16.0816.2716.57T:schwaemm256128v2
18.7418.8218.96T:grain128aeadv2
19.4519.6519.97T:schwaemm256256v2
20.7620.8520.89romulusm
20.8820.9220.97romulusn
21.3821.4121.43T:isapk128av20
21.4521.6321.76T:schwaemm192192v2
21.7421.7621.80ascon128bi32v12
22.0422.1022.15T:isapa128v20
22.8122.8722.90T:isapa128av20
24.7024.9625.08T:schwaemm128128v2
38.6538.7438.87romulust
44.1144.2044.25T:giftcofb128v1
44.5944.6344.67T:tinyjambu128v2
46.2446.5246.61T:tinyjambu256v2
48.2948.3348.50T:tinyjambu192v2
57.2157.5157.78T:isapk128v20
61.8061.9362.16T:elephant200v2
81.3981.9782.48T:isapxv20
3572.913588.853600.70T:elephant176v2
4137.534144.264147.91T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.13?0.20?0.32?T:aes128gcmv1
0.14?0.20?0.25?T:aes256gcmv1
0.29?0.32?0.33?aes256gcmv1
1.421.451.48aes128gcmv1
7.167.257.29T:xoodyakround3
7.307.337.37ascon128av12
10.8010.8410.85ascon80pqv12
10.8310.8610.88ascon128v12
14.2114.2414.27ascon128abi32v12
15.9816.1016.57T:schwaemm256128v2
18.7718.8419.00T:grain128aeadv2
19.5719.7720.00T:schwaemm256256v2
20.8020.8620.91romulusn
20.8620.9621.00romulusm
21.3821.4221.44T:isapk128av20
21.4621.6021.79T:schwaemm192192v2
21.7621.7921.84ascon128bi32v12
22.0422.1022.17T:isapa128v20
22.3822.4222.48T:isapa128av20
24.8324.9625.15T:schwaemm128128v2
38.6738.9239.11romulust
44.1244.2144.26T:giftcofb128v1
44.6744.7144.74T:tinyjambu128v2
46.1746.2646.45T:tinyjambu256v2
48.2148.2648.54T:tinyjambu192v2
57.0157.5757.99T:isapk128v20
61.5061.9562.15T:elephant200v2
80.4081.6382.87T:isapxv20
3569.623572.073596.90T:elephant176v2
4135.104139.754143.70T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.17?0.21?0.31?T:aes128gcmv1
0.19?0.21?0.35?T:aes256gcmv1
0.310.310.32aes256gcmv1
1.421.461.48aes128gcmv1
7.097.237.29T:xoodyakround3
7.297.337.35ascon128av12
10.8210.8610.91ascon128v12
10.8410.8910.93ascon80pqv12
14.2414.2814.29ascon128abi32v12
16.1216.2816.60T:schwaemm256128v2
18.8418.8919.05T:grain128aeadv2
19.6819.8020.07T:schwaemm256256v2
20.7920.8420.90romulusn
20.7920.8420.90romulusm
21.3621.4021.44T:isapk128av20
21.4921.5921.76T:schwaemm192192v2
21.7921.8121.85ascon128bi32v12
22.0822.1222.17T:isapa128v20
22.3622.4022.47T:isapa128av20
24.6724.8924.94T:schwaemm128128v2
38.7538.9239.07romulust
44.0444.1044.16T:giftcofb128v1
44.5444.6144.72T:tinyjambu128v2
46.2046.4246.53T:tinyjambu256v2
48.3148.3748.46T:tinyjambu192v2
56.9957.7658.04T:isapk128v20
61.6162.0862.39T:elephant200v2
81.6681.9982.39T:isapxv20
3567.973570.723589.84T:elephant176v2
4137.294145.434149.69T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.810.840.85T:aes128gcmv1
0.870.900.92T:aes256gcmv1
1.111.111.12aes256gcmv1
2.822.842.87aes128gcmv1
7.567.607.65ascon128av12
10.4310.4610.49T:xoodyakround3
11.0111.0311.05ascon80pqv12
11.0711.0811.09ascon128v12
14.8314.8514.87ascon128abi32v12
16.7516.8717.05T:schwaemm256128v2
19.2019.3019.32T:grain128aeadv2
20.3820.5320.71T:schwaemm256256v2
22.1422.2122.24T:schwaemm192192v2
22.4522.4822.49ascon128bi32v12
25.3425.4725.58T:schwaemm128128v2
26.7926.8126.83T:isapa128av20
29.1629.1829.23romulusn
29.7929.8029.81T:isapk128av20
39.7339.7739.81romulusm
44.5244.5844.62T:giftcofb128v1
48.6848.7248.74T:isapa128v20
57.9057.9457.97T:tinyjambu128v2
67.5167.5767.60T:tinyjambu192v2
69.1369.1769.54T:tinyjambu256v2
76.1176.1476.22romulust
93.0793.1693.29T:elephant200v2
128.50128.81128.90T:isapk128v20
179.79179.97180.24T:isapxv20
5456.675465.395468.65T:elephant176v2
6272.196276.476277.37T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.800.830.84T:aes128gcmv1
0.860.890.93T:aes256gcmv1
1.071.071.08aes256gcmv1
2.932.963.03aes128gcmv1
7.567.607.63ascon128av12
10.3610.3910.40T:xoodyakround3
10.9710.9810.99ascon80pqv12
11.0211.0311.04ascon128v12
14.9114.9214.95ascon128abi32v12
16.7916.8417.03T:schwaemm256128v2
19.4019.4219.46T:grain128aeadv2
20.4220.6320.74T:schwaemm256256v2
22.0822.1722.30T:schwaemm192192v2
22.4022.4522.48ascon128bi32v12
25.3925.6325.67T:schwaemm128128v2
29.3729.4229.44romulusn
29.7929.8029.81T:isapk128av20
30.2730.3030.34T:isapa128av20
39.8739.9539.97romulusm
44.6144.6544.70T:giftcofb128v1
48.6948.7348.76T:isapa128v20
58.0458.0658.09T:tinyjambu128v2
67.5667.7967.83T:tinyjambu192v2
69.2869.3469.45T:tinyjambu256v2
76.1476.2376.34romulust
92.6993.0393.38T:elephant200v2
128.50128.60128.79T:isapk128v20
179.64180.16181.08T:isapxv20
5455.035460.355470.71T:elephant176v2
6272.416273.846275.81T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.820.830.87T:aes128gcmv1
0.860.880.94T:aes256gcmv1
1.071.071.07aes256gcmv1
1.661.681.71aes128gcmv1
7.567.587.63ascon128av12
10.4210.4310.46T:xoodyakround3
10.9510.9710.99ascon80pqv12
11.0311.0311.05ascon128v12
14.8914.9114.92ascon128abi32v12
16.7116.8117.10T:schwaemm256128v2
19.4319.4619.48T:grain128aeadv2
20.3020.4120.53T:schwaemm256256v2
22.1822.2422.29T:schwaemm192192v2
22.4022.4322.45ascon128bi32v12
23.1723.1923.20T:isapk128av20
23.7223.7423.75T:isapa128av20
25.2725.3525.52T:schwaemm128128v2
29.3529.3729.41romulusn
29.7329.7529.78T:isapa128v20
39.9640.0240.05romulusm
39.9940.0440.14romulust
44.6444.6944.75T:giftcofb128v1
58.0058.0658.08T:tinyjambu128v2
67.4267.5267.58T:tinyjambu192v2
69.2269.3869.57T:tinyjambu256v2
85.4085.5185.76T:isapk128v20
92.6693.1494.06T:elephant200v2
117.51117.96118.31T:isapxv20
5455.405462.915468.55T:elephant176v2
6272.156274.146278.60T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.845.956.29aes128gcmv1
6.666.716.77aes256gcmv1
10.9811.2011.42T:aes128gcmv1
11.4411.5011.84ascon128av12
11.5211.6612.05T:aes256gcmv1
14.4914.5914.72ascon128v12
14.4814.6714.80ascon80pqv12
14.9615.0716.02T:xoodyakround3
22.2322.3422.91ascon128abi32v12
27.4527.6328.05T:grain128aeadv2
27.3227.9528.86T:schwaemm256128v2
29.8629.9430.44ascon128bi32v12
31.4132.6633.45T:schwaemm256256v2
32.8833.3734.76T:schwaemm128128v2
34.5934.6834.93romulusn
35.5535.9636.46T:schwaemm192192v2
46.2146.5646.88romulusm
53.2353.5153.85T:giftcofb128v1
67.3867.6167.71T:tinyjambu128v2
71.1671.4371.74T:isapa128av20
78.3578.6479.00T:tinyjambu192v2
80.2580.5680.65T:tinyjambu256v2
95.3795.5295.59T:isapk128av20
101.89102.76103.33romulust
130.88131.58133.57T:elephant200v2
394.68395.76395.95T:isapa128v20
1347.301352.951357.06T:isapk128v20
1772.941774.031777.02T:isapxv20
6818.786828.056844.08T:elephant176v2
8409.258417.098439.92T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.066.106.16aes256gcmv1
7.36?7.96?8.42?aes128gcmv1
11.0311.2011.43T:aes128gcmv1
11.5011.7312.00ascon128av12
11.6811.8012.02T:aes256gcmv1
14.3614.5114.62ascon80pqv12
14.4914.5315.02ascon128v12
14.9115.7016.07T:xoodyakround3
22.5722.8423.41ascon128abi32v12
27.7927.9428.73T:grain128aeadv2
27.6428.3329.08T:schwaemm256128v2
30.0730.1730.38ascon128bi32v12
31.5531.8632.87T:schwaemm256256v2
32.9433.3534.25T:schwaemm128128v2
34.8035.0435.16romulusn
35.4536.0536.51T:schwaemm192192v2
46.9547.2747.84romulusm
53.6253.7354.14T:giftcofb128v1
67.4867.5967.91T:tinyjambu128v2
74.1474.5274.80T:isapa128av20
78.3878.5678.80T:tinyjambu192v2
80.2080.6280.80T:tinyjambu256v2
95.2495.3695.55T:isapk128av20
101.54102.02103.12romulust
131.56132.20132.87T:elephant200v2
394.90395.12396.06T:isapa128v20
1348.361355.301359.50T:isapk128v20
1772.661780.881786.60T:isapxv20
6808.596819.076826.44T:elephant176v2
8399.298408.238419.12T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.745.806.04aes128gcmv1
6.056.096.12aes256gcmv1
11.0611.2211.32T:aes128gcmv1
11.4011.4911.77T:aes256gcmv1
11.4511.6611.80ascon128av12
14.3814.6414.73ascon128v12
14.4314.6814.82ascon80pqv12
14.9115.1215.88T:xoodyakround3
22.3922.5523.00ascon128abi32v12
27.0327.4628.13T:schwaemm256128v2
27.8428.1628.59T:grain128aeadv2
30.1230.1930.28ascon128bi32v12
31.6632.8833.44T:schwaemm256256v2
32.7733.3933.90T:schwaemm128128v2
34.8935.0235.19romulusn
35.2535.9837.23T:schwaemm192192v2
46.9347.2947.67romulusm
48.5048.5649.02T:isapa128av20
53.4953.6253.93T:giftcofb128v1
60.0860.1760.59T:isapk128av20
65.4465.9166.34romulust
67.5367.7067.91T:tinyjambu128v2
78.7078.8079.02T:tinyjambu192v2
80.2380.3280.46T:tinyjambu256v2
131.62131.95132.44T:elephant200v2
205.77206.34206.59T:isapa128v20
708.60713.42717.61T:isapk128v20
930.05932.55936.08T:isapxv20
6803.626814.096831.48T:elephant176v2
8395.948402.558410.50T:elephant160v2

aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
7.187.197.21ascon128av12
10.4910.5010.51ascon80pqv12
10.4910.5010.51ascon128v12
14.3014.3614.36ascon128abi32v12
20.3720.3820.38ascon128bi32v12
22.0522.2122.23T:xoodyakround3
30.5030.5230.53T:schwaemm256128v2
32.4032.5832.85T:aes256gcmv1
38.9839.0139.03T:isapa128av20
40.4940.5540.64T:schwaemm192192v2
42.3842.4042.42T:giftcofb128v1
43.6243.6343.65T:isapa128v20
45.9045.9145.91T:schwaemm256256v2
48.6048.7248.93T:aes128gcmv1
50.2550.2550.25T:tinyjambu128v2
53.7153.8353.85T:schwaemm128128v2
59.5059.5059.50T:tinyjambu192v2
65.8265.8365.86T:romulusn
67.5067.5167.51T:tinyjambu256v2
98.2198.3398.46T:isapk128av20
112.56112.65113.93romulusn
129.94129.97130.07T:isapk128v20
169.73169.82169.95romulusm
205.04205.07205.09T:elephant200v2
238.34238.44238.92T:isapxv20
335.59335.93335.99romulust
7000.377002.307006.46T:elephant160v2
7474.697479.727482.85T:elephant176v2
18136.9118145.7018161.68aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
6.997.017.01ascon128av12
10.2510.2610.26ascon128v12
10.5010.5010.51ascon80pqv12
14.0514.1114.11ascon128abi32v12
20.3720.3820.38ascon128bi32v12
21.5521.5921.61T:xoodyakround3
30.4930.5330.54T:schwaemm256128v2
34.0434.7835.04T:aes256gcmv1
39.0039.0239.03T:isapa128av20
40.5240.5340.55T:schwaemm192192v2
42.3242.3442.35T:giftcofb128v1
43.6243.6443.65T:isapa128v20
46.0246.0346.03T:schwaemm256256v2
48.3848.5348.78T:aes128gcmv1
50.2450.2550.26T:tinyjambu128v2
53.7153.7853.79T:schwaemm128128v2
59.2559.2659.27T:tinyjambu192v2
65.2865.3065.32T:romulusn
67.7567.7667.77T:tinyjambu256v2
98.2298.3498.46T:isapk128av20
112.50112.60114.51romulusn
129.95129.98130.47T:isapk128v20
169.97170.21170.41romulusm
205.06205.12205.14T:elephant200v2
238.75242.38242.55T:isapxv20
335.66335.89335.97romulust
7000.977005.807006.47T:elephant160v2
7474.967479.757484.29T:elephant176v2
18138.8418147.3718154.92aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
7.017.017.01ascon128av12
10.2610.2610.26ascon128v12
10.5110.5110.51ascon80pqv12
14.0714.1114.11ascon128abi32v12
20.3820.3820.38ascon128bi32v12
21.6521.6721.69T:xoodyakround3
21.7221.7521.76T:isapa128v20
25.8525.8725.91T:isapa128av20
30.4930.5330.53T:schwaemm256128v2
33.9134.3735.39T:aes256gcmv1
40.5140.5340.55T:schwaemm192192v2
42.3442.3442.35T:giftcofb128v1
46.0346.0346.03T:schwaemm256256v2
48.4748.6148.72T:aes128gcmv1
50.2550.2550.25T:tinyjambu128v2
53.7153.7753.78T:schwaemm128128v2
59.2659.2659.28T:tinyjambu192v2
65.2765.3065.31T:romulusn
66.3266.5266.58T:isapk128av20
67.7567.7667.77T:tinyjambu256v2
82.0082.0482.08T:isapk128v20
112.51112.62114.51romulusn
113.06113.10113.14romulust
138.15138.22138.78T:isapxv20
169.93170.32170.54romulusm
205.05205.12205.14T:elephant200v2
381.60381.81382.21aes256gcmv1
6998.047002.897006.03T:elephant160v2
7475.397480.177484.14T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
7.037.057.05ascon128av12
10.4910.5010.51ascon128v12
10.6210.6310.64ascon80pqv12
14.0714.0814.09ascon128abi32v12
16.8916.9116.92T:xoodyakround3
19.2919.3519.52T:aes256gcmv1
20.3720.4220.44ascon128bi32v12
30.3030.3230.34T:schwaemm256128v2
30.5830.6330.69T:aes128gcmv1
32.4332.4432.46T:isapa128av20
32.7532.7632.77T:isapa128v20
40.3040.3040.31T:schwaemm192192v2
41.4941.5041.50T:tinyjambu128v2
42.4142.4342.44T:giftcofb128v1
45.3045.4945.49T:schwaemm256256v2
46.3746.3846.42T:tinyjambu192v2
50.4950.5050.51T:tinyjambu256v2
53.5053.5753.57T:schwaemm128128v2
57.1857.1857.19T:romulusn
81.3681.4281.49T:isapk128av20
84.4784.6285.16romulusn
104.90105.32105.37T:isapk128v20
113.12113.16113.18romulusm
153.26153.33153.35T:elephant200v2
187.94188.09188.35T:isapxv20
224.33224.40224.44romulust
5244.925249.965257.17T:elephant160v2
5583.445585.555591.29T:elephant176v2
9260.779264.839271.42aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
7.007.007.01ascon128av12
10.4410.4410.44ascon128v12
10.5010.5110.51ascon80pqv12
13.9313.9613.96ascon128abi32v12
16.5716.6016.64T:xoodyakround3
20.4320.4620.46ascon128bi32v12
20.2020.4820.91T:aes256gcmv1
30.3130.3330.36T:schwaemm256128v2
30.5730.6331.15T:aes128gcmv1
32.4432.4532.53T:isapa128av20
32.7532.7632.77T:isapa128v20
40.2840.3040.32T:schwaemm192192v2
41.5041.5141.55T:tinyjambu128v2
42.3842.4042.45T:giftcofb128v1
45.3045.3045.53T:schwaemm256256v2
46.2546.2646.28T:tinyjambu192v2
50.6350.6450.68T:tinyjambu256v2
53.4653.5353.56T:schwaemm128128v2
56.9156.9256.93T:romulusn
81.3781.4781.60T:isapk128av20
84.4184.4685.41romulusn
105.30105.32105.37T:isapk128v20
113.07113.33113.40romulusm
153.30153.37153.99T:elephant200v2
190.03190.06190.39T:isapxv20
224.20224.38224.43romulust
5245.755249.955257.36T:elephant160v2
5582.075585.935591.46T:elephant176v2
9259.649263.609265.46aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
7.017.017.01ascon128av12
10.4410.4410.44ascon128v12
10.5110.5110.51ascon80pqv12
13.9513.9613.96ascon128abi32v12
16.6216.6316.65T:xoodyakround3
20.0020.4120.88T:aes256gcmv1
20.4520.4520.46ascon128bi32v12
21.8221.8221.82T:isapa128v20
25.8825.8825.90T:isapa128av20
30.3130.3330.39T:schwaemm256128v2
30.5630.6130.71T:aes128gcmv1
40.2940.3040.32T:schwaemm192192v2
41.5041.5041.56T:tinyjambu128v2
42.3942.4042.45T:giftcofb128v1
45.2945.2945.30T:schwaemm256256v2
46.2546.2646.27T:tinyjambu192v2
50.6250.6350.64T:tinyjambu256v2
53.5353.5653.57T:schwaemm128128v2
56.9056.9256.93T:romulusn
65.4165.4765.54T:isapk128av20
81.3381.3781.45T:isapk128v20
84.4284.4785.41romulusn
112.96112.97112.99romulust
113.32113.33113.35romulusm
137.96137.98138.02T:isapxv20
153.30153.36153.38T:elephant200v2
381.78381.91383.18aes256gcmv1
5247.005249.885252.51T:elephant160v2
5582.045585.495591.20T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
6.086.266.38T:aes256gcmv1
6.876.886.88ascon128av12
10.4910.5110.51ascon128v12
10.7410.7510.76ascon80pqv12
11.5911.6011.61T:xoodyakround3
12.5212.6412.71T:aes128gcmv1
13.8113.8613.86ascon128abi32v12
20.3820.3820.44ascon128bi32v12
21.8721.8821.88T:isapa128v20
25.8725.8825.88T:isapa128av20
30.1330.1530.16T:schwaemm256128v2
32.7532.7532.75T:tinyjambu128v2
33.2533.2533.25T:tinyjambu192v2
33.5033.5033.50T:tinyjambu256v2
40.0640.1140.12T:schwaemm192192v2
42.4542.4642.47T:giftcofb128v1
44.5644.5644.58T:schwaemm256256v2
48.5348.5448.56T:romulusn
53.3553.4253.43T:schwaemm128128v2
56.3356.3556.39romulusn
56.3456.5856.58romulusm
64.4364.5764.70T:isapk128av20
80.7080.7280.76T:isapk128v20
102.07102.14102.17T:elephant200v2
112.82112.84112.88romulust
137.67137.73137.82T:isapxv20
381.53381.83382.39aes256gcmv1
3493.943495.663511.18T:elephant160v2
3688.743692.123704.39T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
6.126.326.55T:aes256gcmv1
6.997.007.01ascon128av12
10.4910.5110.52ascon80pqv12
10.6210.6310.63ascon128v12
11.5711.6011.63T:xoodyakround3
12.4612.6112.71T:aes128gcmv1
13.8113.8513.86ascon128abi32v12
20.4920.5120.53ascon128bi32v12
21.8521.8821.90T:isapa128v20
25.8525.8825.91T:isapa128av20
30.1330.1530.16T:schwaemm256128v2
32.7432.7532.76T:tinyjambu128v2
33.2433.2533.26T:tinyjambu192v2
33.4933.5033.51T:tinyjambu256v2
40.0740.1240.12T:schwaemm192192v2
42.4542.4642.48T:giftcofb128v1
44.5544.5744.84T:schwaemm256256v2
48.5048.5348.55T:romulusn
53.3253.3553.39T:schwaemm128128v2
56.1856.1856.37romulusm
56.3356.3456.36romulusn
64.4464.5864.70T:isapk128av20
80.6880.7180.74T:isapk128v20
102.14102.16102.18T:elephant200v2
112.81112.83112.88romulust
137.65137.72137.78T:isapxv20
381.76381.87382.56aes256gcmv1
3494.293495.713508.81T:elephant160v2
3689.063694.023704.39T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
5.80?6.40?7.00?T:aes256gcmv1
7.017.017.01ascon128av12
10.5110.5110.52ascon80pqv12
10.6310.6310.63ascon128v12
11.5811.6011.61T:xoodyakround3
12.5212.6212.71T:aes128gcmv1
13.8213.8613.86ascon128abi32v12
20.5120.5120.53ascon128bi32v12
21.8621.8822.25T:isapa128v20
25.8525.8825.91T:isapa128av20
30.1330.1530.16T:schwaemm256128v2
32.7532.7532.78T:tinyjambu128v2
33.2533.2533.25T:tinyjambu192v2
33.5033.5033.50T:tinyjambu256v2
40.0740.1140.12T:schwaemm192192v2
42.4642.4642.47T:giftcofb128v1
44.5644.5644.57T:schwaemm256256v2
48.5448.5548.56T:romulusn
53.3453.3753.42T:schwaemm128128v2
56.1856.1856.37romulusm
56.3256.3456.39romulusn
64.4564.6764.71T:isapk128av20
80.7080.7180.74T:isapk128v20
102.16102.16102.19T:elephant200v2
112.79112.84112.84romulust
137.68137.72137.74T:isapxv20
381.69381.85382.31aes256gcmv1
3494.073498.363510.55T:elephant160v2
3687.923693.073703.36T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
7.197.207.21ascon128av12
10.6510.6510.66ascon128v12
10.7710.7810.78ascon80pqv12
14.4314.4414.45ascon128abi32v12
17.1017.1017.10T:xoodyakround3
20.7220.7220.73ascon128bi32v12
26.5826.6926.92T:aes256gcmv1
31.1931.2031.21T:schwaemm256128v2
33.0233.0533.18T:aes128gcmv1
35.3635.3635.37T:isapa128av20
41.1741.1741.19T:schwaemm192192v2
41.8241.8241.83T:tinyjambu128v2
42.7942.7942.80T:giftcofb128v1
46.6446.6446.65T:schwaemm256256v2
46.7246.7246.73T:tinyjambu192v2
47.8247.8247.83T:isapa128v20
50.8650.8750.87T:tinyjambu256v2
54.2354.2454.26T:schwaemm128128v2
57.9057.9057.91T:romulusn
85.1285.1485.72romulusn
95.3595.3695.43T:isapk128av20
113.62113.80113.86romulusm
156.46156.50156.54T:elephant200v2
185.19185.20185.33T:isapk128v20
227.39227.40227.47romulust
305.38306.87307.35T:isapxv20
5310.125311.115324.25T:elephant160v2
5627.475627.725630.34T:elephant176v2
9443.479449.829452.80aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
7.177.177.17ascon128av12
10.5810.5810.58ascon128v12
10.6510.6510.66ascon80pqv12
14.3014.3314.33ascon128abi32v12
16.7916.8016.81T:xoodyakround3
20.8020.8020.81ascon128bi32v12
29.7129.8330.18T:aes256gcmv1
31.1931.2131.22T:schwaemm256128v2
32.9533.0433.17T:aes128gcmv1
35.3835.3835.39T:isapa128av20
41.1741.1741.19T:schwaemm192192v2
41.8241.8341.83T:tinyjambu128v2
42.7642.7742.78T:giftcofb128v1
46.6046.6046.61T:tinyjambu192v2
46.6946.6946.70T:schwaemm256256v2
47.8447.8447.84T:isapa128v20
50.9951.0051.01T:tinyjambu256v2
54.1954.2354.25T:schwaemm128128v2
57.6457.6557.66T:romulusn
85.1085.1285.99romulusn
95.3995.4295.52T:isapk128av20
113.80114.04114.06romulusm
156.45156.50156.58T:elephant200v2
185.22185.23185.37T:isapk128v20
227.32227.41227.43romulust
305.47307.36307.41T:isapxv20
5310.155313.175355.39T:elephant160v2
5627.565627.735630.26T:elephant176v2
9443.599451.129452.74aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
7.177.177.17ascon128av12
10.5810.5810.58ascon128v12
10.6510.6510.66ascon80pqv12
14.3014.3314.33ascon128abi32v12
16.8416.8516.89T:xoodyakround3
20.8020.8020.81ascon128bi32v12
27.4927.4927.50T:isapa128av20
29.4829.4829.48T:isapa128v20
31.1831.2031.22T:schwaemm256128v2
32.9433.0233.22T:aes128gcmv1
41.1741.1741.19T:schwaemm192192v2
41.8241.8241.83T:tinyjambu128v2
42.7642.7742.77T:giftcofb128v1
44.3844.5245.17T:aes256gcmv1
46.4846.4846.48T:schwaemm256256v2
46.6046.6046.61T:tinyjambu192v2
50.9951.0051.00T:tinyjambu256v2
54.2054.2354.24T:schwaemm128128v2
57.6457.6457.67T:romulusn
74.7274.7274.80T:isapk128av20
85.1085.1385.98romulusn
114.02114.03114.05romulusm
115.98116.00116.21romulust
124.26124.27124.28T:isapk128v20
156.44156.46156.56T:elephant200v2
197.99198.00198.03T:isapxv20
567.98568.37570.22aes256gcmv1
5309.995310.665326.21T:elephant160v2
5627.575628.095630.23T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
10.7310.8211.28ascon128av12
13.8413.9514.29ascon128v12
13.9813.9814.41ascon80pqv12
22.3022.4523.11ascon128abi32v12
25.8825.9126.51T:xoodyakround3
28.4028.5228.91ascon128bi32v12
49.1649.1649.37T:tinyjambu128v2
50.5150.5450.88T:schwaemm256128v2
50.9851.1351.54T:giftcofb128v1
54.5954.5954.81T:tinyjambu192v2
59.1759.1759.41T:tinyjambu256v2
66.1066.2066.35T:schwaemm192192v2
69.2069.2369.41T:schwaemm128128v2
72.5972.7373.10T:schwaemm256256v2
73.7774.1674.37T:romulusn
87.0888.1289.09T:aes128gcmv1
99.5899.5899.77romulusn
102.59102.59103.25T:isapa128av20
128.38128.63129.80romulusm
194.42195.05199.57T:aes256gcmv1
219.82220.85222.13T:elephant200v2
296.48296.84297.43romulust
394.04394.04394.39T:isapa128v20
402.77404.36405.11T:isapk128av20
2003.362003.552012.24T:isapk128v20
2969.472969.592971.00T:isapxv20
6986.736987.086990.89T:elephant176v2
7087.867088.387092.45T:elephant160v2
13708.0913708.7713767.34aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
10.7510.8311.33ascon128av12
13.7313.7314.04ascon128v12
13.8813.8814.20ascon80pqv12
22.4522.5623.24ascon128abi32v12
25.4925.5125.88T:xoodyakround3
28.9529.0829.41ascon128bi32v12
49.2349.2349.34T:tinyjambu128v2
50.4550.5050.59T:schwaemm256128v2
51.1051.1351.45T:giftcofb128v1
54.5354.5554.77T:tinyjambu192v2
59.3759.4059.62T:tinyjambu256v2
66.1066.1366.41T:schwaemm192192v2
69.2069.2369.41T:schwaemm128128v2
73.0173.0273.18T:schwaemm256256v2
73.8773.9874.24T:romulusn
86.4987.3388.24T:aes128gcmv1
100.09100.15100.59romulusn
103.05103.05103.17T:isapa128av20
129.52129.58130.02romulusm
220.00220.08220.14T:elephant200v2
243.49245.34246.55T:aes256gcmv1
296.76296.83297.27romulust
394.47394.47394.88T:isapa128v20
402.72403.48404.77T:isapk128av20
2004.002004.022004.19T:isapk128v20
2971.822971.892972.24T:isapxv20
6986.856987.096995.27T:elephant176v2
7088.277088.387089.41T:elephant160v2
13707.9213708.1613765.99aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
10.7410.7510.75ascon128av12
13.7313.7313.73ascon128v12
13.8813.8813.88ascon80pqv12
22.4522.4522.46ascon128abi32v12
25.5925.6325.84T:xoodyakround3
28.9528.9529.08ascon128bi32v12
49.2349.2349.23T:tinyjambu128v2
50.4550.4850.53T:schwaemm256128v2
51.1051.1251.16T:giftcofb128v1
54.5354.5354.53T:tinyjambu192v2
59.3759.3759.46T:tinyjambu256v2
64.3864.3864.91T:isapa128av20
66.0966.1366.41T:schwaemm192192v2
69.2069.2469.41T:schwaemm128128v2
72.9872.9973.01T:schwaemm256256v2
73.6273.6473.91T:romulusn
86.8887.4488.66T:aes128gcmv1
99.5999.90100.15romulusn
129.23129.23129.31romulusm
185.09185.25185.51romulust
205.68205.68205.96T:isapa128v20
219.88219.98221.20T:elephant200v2
276.59276.78278.41T:isapk128av20
591.30595.84601.70T:aes256gcmv1
1096.381096.451097.45T:isapk128v20
1552.591552.771553.07T:isapxv20
4854.844856.094856.35aes256gcmv1
6986.696986.726989.86T:elephant176v2
7088.317088.527090.80T:elephant160v2

amd64; Zen 2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.920.950.98T:aes256gcmv1
1.511.531.55T:aes128gcmv1
1.661.671.68aes256gcmv1
6.406.416.45ascon128av12
9.379.399.40ascon128v12
9.389.429.42ascon80pqv12
11.1511.2011.41ascon128abi32v12
16.9417.0717.14ascon128bi32v12
17.4617.4817.56T:xoodyakround3
19.4819.5219.58T:schwaemm256128v2
23.3023.3623.39T:schwaemm256256v2
25.6225.7325.82T:schwaemm192192v2
27.1227.2427.27T:grain128aeadv2
27.4927.6327.89T:schwaemm128128v2
35.5535.5835.61romulusn
36.3936.4236.49T:isapa128av20
36.5536.5836.70T:isapa128v20
40.4740.5140.53T:giftcofb128v1
57.1757.2357.28romulusm
61.6861.7461.77T:tinyjambu128v2
64.6064.7464.82T:isapk128av20
68.8768.9468.96T:tinyjambu192v2
75.9775.9776.07T:tinyjambu256v2
84.9685.6885.80T:isapk128v20
112.27112.29112.30romulust
148.22149.85150.85T:isapxv20
225.89?229.65?272.59?T:elephant200v2
6486.856538.416550.99T:elephant176v2
7161.177163.667166.02T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.890.940.97T:aes256gcmv1
1.601.611.63T:aes128gcmv1
1.801.801.81aes256gcmv1
6.276.306.30ascon128av12
9.509.529.53ascon128v12
9.519.549.54ascon80pqv12
11.2211.2411.26ascon128abi32v12
16.7816.9116.98ascon128bi32v12
17.3317.4017.53T:xoodyakround3
19.4919.5619.66T:schwaemm256128v2
23.3023.3123.38T:schwaemm256256v2
25.6625.7025.81T:schwaemm192192v2
26.6027.0527.60T:grain128aeadv2
27.4627.5827.83T:schwaemm128128v2
35.4135.4135.42romulusn
36.2536.3136.39T:isapa128v20
36.4136.4536.50T:isapa128av20
40.4640.5440.60T:giftcofb128v1
57.2057.2457.31romulusm
60.1360.1560.19T:tinyjambu128v2
65.2565.3965.58T:isapk128av20
68.6768.7468.75T:tinyjambu192v2
76.0376.0776.13T:tinyjambu256v2
84.8285.1685.73T:isapk128v20
112.27112.31112.37romulust
147.53150.78156.82T:isapxv20
226.19?229.91?272.83?T:elephant200v2
6487.056547.836556.25T:elephant176v2
7161.107164.587166.75T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.890.920.96T:aes256gcmv1
1.601.611.62T:aes128gcmv1
1.801.801.82aes256gcmv1
6.286.286.34ascon128av12
9.509.529.53ascon80pqv12
9.549.569.56ascon128v12
11.2311.2511.25ascon128abi32v12
16.7916.9116.99ascon128bi32v12
17.3817.4317.63T:xoodyakround3
18.0118.0918.13T:isapa128v20
19.5019.5919.63T:schwaemm256128v2
23.3223.3323.39T:schwaemm256256v2
24.1324.1724.21T:isapa128av20
25.6325.7125.79T:schwaemm192192v2
26.6026.7527.61T:grain128aeadv2
27.5027.5727.77T:schwaemm128128v2
35.4135.4535.49romulusn
37.4637.5537.60romulust
40.4940.5140.55T:giftcofb128v1
44.4744.5544.57T:isapk128av20
54.5354.6354.71T:isapk128v20
57.0657.2557.29romulusm
60.1160.1260.18T:tinyjambu128v2
68.7168.7468.79T:tinyjambu192v2
76.0176.0876.09T:tinyjambu256v2
86.5288.6789.11T:isapxv20
226.45?229.94?272.62?T:elephant200v2
6486.256543.736554.95T:elephant176v2
7158.287161.237163.29T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.670.680.71T:aes256gcmv1
1.011.011.02T:aes128gcmv1
1.091.091.10aes256gcmv1
6.376.406.43ascon128av12
9.449.459.47ascon80pqv12
9.439.479.49ascon128v12
11.0511.1011.11ascon128abi32v12
13.3613.3913.43T:xoodyakround3
16.7816.8616.90ascon128bi32v12
19.3419.3919.42T:schwaemm256128v2
23.2123.2623.26T:schwaemm256256v2
25.6325.6925.74T:schwaemm192192v2
27.0727.0827.10T:grain128aeadv2
27.2527.3327.43T:isapa128v20
27.4427.5627.59T:schwaemm128128v2
28.7328.7728.77romulusn
30.3030.3130.32T:isapa128av20
39.5139.5439.60romulusm
40.4040.4240.45T:giftcofb128v1
51.1851.2251.26T:tinyjambu128v2
54.3254.3354.36T:tinyjambu192v2
54.6254.6454.66T:isapk128av20
57.9657.9858.07T:tinyjambu256v2
69.7870.1870.21T:isapk128v20
74.8874.9074.91romulust
117.56118.15118.55T:isapxv20
168.93?171.36?203.13?T:elephant200v2
4845.024887.134893.75T:elephant176v2
5369.335370.155371.62T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.660.680.69T:aes256gcmv1
1.051.061.07T:aes128gcmv1
1.151.161.17aes256gcmv1
6.336.346.34ascon128av12
9.519.539.53ascon80pqv12
9.529.559.55ascon128v12
11.0811.1011.11ascon128abi32v12
13.3013.3513.42T:xoodyakround3
16.6916.7516.79ascon128bi32v12
19.3519.4019.48T:schwaemm256128v2
23.1923.2123.21T:schwaemm256256v2
25.5725.6225.67T:schwaemm192192v2
26.5426.9327.23T:grain128aeadv2
27.2127.2727.41T:isapa128v20
27.4627.5627.58T:schwaemm128128v2
28.6528.6628.68romulusn
30.2930.3230.35T:isapa128av20
39.5239.5839.62romulusm
40.4140.4240.46T:giftcofb128v1
50.4250.4250.43T:tinyjambu128v2
54.1954.2154.23T:tinyjambu192v2
54.9355.0155.08T:isapk128av20
58.0758.0858.11T:tinyjambu256v2
69.7669.8070.14T:isapk128v20
74.8874.9174.94romulust
117.36118.32121.83T:isapxv20
169.07?171.42?203.05?T:elephant200v2
4846.424886.604892.26T:elephant176v2
5367.415369.365370.76T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.670.680.70T:aes256gcmv1
1.051.061.06T:aes128gcmv1
1.161.161.17aes256gcmv1
6.336.366.37ascon128av12
9.529.539.54ascon80pqv12
9.539.539.55ascon128v12
11.0811.1111.11ascon128abi32v12
13.3413.3613.43T:xoodyakround3
16.7016.7416.80ascon128bi32v12
18.1118.1318.22T:isapa128v20
19.3619.3819.44T:schwaemm256128v2
23.2323.2323.24T:schwaemm256256v2
24.1624.1924.21T:isapa128av20
25.6225.6625.72T:schwaemm192192v2
26.5726.9427.27T:grain128aeadv2
27.4827.5727.74T:schwaemm128128v2
28.6528.6628.68romulusn
37.5037.5237.53romulust
39.5639.6239.70romulusm
40.4040.4240.44T:giftcofb128v1
44.5344.5544.56T:isapk128av20
50.4250.4250.43T:tinyjambu128v2
54.2154.2354.24T:tinyjambu192v2
54.6454.6754.70T:isapk128v20
58.0358.0358.06T:tinyjambu256v2
87.3087.5887.80T:isapxv20
168.94?171.38?203.24?T:elephant200v2
4848.994889.324906.52T:elephant176v2
5368.525370.545371.23T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.38?0.43?0.48?T:aes256gcmv1
0.500.510.54aes256gcmv1
0.510.530.54T:aes128gcmv1
6.326.346.38ascon128av12
9.229.299.35T:xoodyakround3
9.489.499.54ascon80pqv12
9.489.509.54ascon128v12
10.9210.9510.96ascon128abi32v12
16.5416.6916.72ascon128bi32v12
18.2318.2518.27T:isapa128v20
19.2519.3019.34T:schwaemm256128v2
21.7121.8721.93romulusm
21.8721.9121.98romulusn
23.1023.1123.14T:schwaemm256256v2
24.1424.1724.20T:isapa128av20
25.4325.5225.62T:schwaemm192192v2
26.8926.9026.91T:grain128aeadv2
27.3127.3627.58T:schwaemm128128v2
37.5137.5237.62romulust
39.6939.7039.71T:tinyjambu192v2
40.0240.0240.12T:tinyjambu256v2
40.2440.2840.34T:giftcofb128v1
40.6640.6640.71T:tinyjambu128v2
44.5244.5944.64T:isapk128av20
54.6354.7454.76T:isapk128v20
86.0486.3786.71T:isapxv20
111.35?113.25?134.72?T:elephant200v2
3204.973224.883233.05T:elephant176v2
3573.123574.433576.84T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.40?0.42?0.47?T:aes256gcmv1
0.510.520.54aes256gcmv1
0.510.520.53T:aes128gcmv1
6.356.366.38ascon128av12
9.219.289.34T:xoodyakround3
9.509.529.58ascon80pqv12
9.519.559.57ascon128v12
10.9410.9610.97ascon128abi32v12
16.4616.6216.69ascon128bi32v12
18.1818.2218.28T:isapa128v20
19.2419.3019.37T:schwaemm256128v2
21.8721.8921.96romulusn
21.8021.9121.94romulusm
23.1023.1123.12T:schwaemm256256v2
24.1624.1824.25T:isapa128av20
25.4725.5325.62T:schwaemm192192v2
26.4526.8226.93T:grain128aeadv2
27.2427.4627.61T:schwaemm128128v2
37.4937.5637.58romulust
39.6939.7039.70T:tinyjambu192v2
40.0840.1340.13T:tinyjambu256v2
40.3040.3340.36T:giftcofb128v1
40.6740.7140.71T:tinyjambu128v2
44.5444.5844.63T:isapk128av20
54.6354.7554.78T:isapk128v20
85.9286.2886.74T:isapxv20
111.35?113.26?134.97?T:elephant200v2
3202.623223.433230.46T:elephant176v2
3572.463574.703577.47T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.39?0.44?0.46?T:aes256gcmv1
0.510.520.53T:aes128gcmv1
0.520.530.54aes256gcmv1
6.336.356.39ascon128av12
9.229.279.36T:xoodyakround3
9.519.539.54ascon80pqv12
9.519.539.53ascon128v12
10.9610.9610.96ascon128abi32v12
16.5016.6116.69ascon128bi32v12
18.2218.2518.27T:isapa128v20
19.2219.2819.33T:schwaemm256128v2
21.8621.9021.97romulusm
21.8921.9121.94romulusn
23.1123.1123.12T:schwaemm256256v2
24.1424.1824.24T:isapa128av20
25.4325.5025.62T:schwaemm192192v2
26.4626.8426.93T:grain128aeadv2
27.2627.3327.55T:schwaemm128128v2
37.5137.5237.58romulust
39.7039.7039.72T:tinyjambu192v2
40.0140.0440.08T:tinyjambu256v2
40.3040.3340.38T:giftcofb128v1
40.6940.7140.71T:tinyjambu128v2
44.5344.5844.63T:isapk128av20
54.6854.7454.77T:isapk128v20
86.0186.3486.71T:isapxv20
111.42?113.25?134.78?T:elephant200v2
3202.893220.733230.85T:elephant176v2
3573.123575.543577.44T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.141.141.15T:aes128gcmv1
1.221.231.24aes256gcmv1
1.231.241.24T:aes256gcmv1
6.546.566.58ascon128av12
9.589.599.62ascon128v12
9.619.629.64ascon80pqv12
11.3811.4111.41ascon128abi32v12
13.5113.5313.56T:xoodyakround3
17.1817.1917.24ascon128bi32v12
19.9719.9920.04T:schwaemm256128v2
23.8223.8323.85T:schwaemm256256v2
26.1726.2126.26T:schwaemm192192v2
27.4327.4427.45T:grain128aeadv2
27.8727.9928.04T:schwaemm128128v2
28.9929.0229.05romulusn
33.5333.5433.55T:isapa128av20
39.9139.9339.94romulusm
39.9740.0540.15T:isapa128v20
40.7840.7940.81T:giftcofb128v1
51.6351.6351.66T:tinyjambu128v2
54.7554.7554.77T:tinyjambu192v2
58.4158.4258.45T:tinyjambu256v2
60.7060.7260.74T:isapk128av20
76.0476.0576.07romulust
121.59121.93121.99T:isapk128v20
174.76?174.90?204.88?T:elephant200v2
190.86191.07191.34T:isapxv20
4881.984924.294933.97T:elephant176v2
5427.955429.595430.80T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.191.201.21T:aes128gcmv1
1.231.241.26T:aes256gcmv1
1.301.301.31aes256gcmv1
6.496.516.52ascon128av12
9.679.679.67ascon80pqv12
9.699.699.69ascon128v12
11.4011.4011.40ascon128abi32v12
13.4813.5113.54T:xoodyakround3
17.0717.0917.12ascon128bi32v12
19.9520.0020.03T:schwaemm256128v2
23.8023.8323.84T:schwaemm256256v2
26.1926.2326.27T:schwaemm192192v2
27.0327.3127.59T:grain128aeadv2
27.8527.9728.15T:schwaemm128128v2
28.9328.9428.96romulusn
33.5433.5533.57T:isapa128av20
39.9339.9740.09T:isapa128v20
39.9439.9740.04romulusm
40.8040.8140.84T:giftcofb128v1
50.8450.8550.86T:tinyjambu128v2
54.6154.6654.68T:tinyjambu192v2
58.5458.5558.57T:tinyjambu256v2
61.1561.2261.24T:isapk128av20
76.0476.0676.09romulust
121.64121.76121.94T:isapk128v20
174.84?174.92?205.23?T:elephant200v2
190.32191.36194.26T:isapxv20
4885.184917.394920.00T:elephant176v2
5428.225429.775430.54T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.191.191.19T:aes128gcmv1
1.221.231.24T:aes256gcmv1
1.301.301.30aes256gcmv1
6.486.506.50ascon128av12
9.679.679.69ascon80pqv12
9.699.699.69ascon128v12
11.4011.4011.45ascon128abi32v12
13.5013.5313.58T:xoodyakround3
17.0717.1017.11ascon128bi32v12
19.9820.0320.05T:schwaemm256128v2
23.8023.8323.85T:schwaemm256256v2
24.6224.6424.72T:isapa128v20
25.9825.9926.01T:isapa128av20
26.1626.2226.25T:schwaemm192192v2
27.0527.4127.58T:grain128aeadv2
27.8227.9327.96T:schwaemm128128v2
28.9528.9528.95romulusn
38.6238.6338.65romulust
39.9940.0540.06romulusm
40.8040.8340.83T:giftcofb128v1
48.1348.1348.15T:isapk128av20
50.8550.8650.86T:tinyjambu128v2
54.6254.6454.65T:tinyjambu192v2
58.4958.4958.51T:tinyjambu256v2
81.1381.1581.20T:isapk128v20
124.84124.99125.18T:isapxv20
174.78?174.91?204.89?T:elephant200v2
4885.454920.834924.56T:elephant176v2
5428.145429.745430.40T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.057.067.11T:aes128gcmv1
7.547.548.20aes256gcmv1
10.5310.6110.80ascon128av12
12.6812.9113.39ascon128v12
12.9812.9813.34ascon80pqv12
14.2614.6615.14T:aes256gcmv1
17.9318.2118.55ascon128abi32v12
19.7019.9520.05T:xoodyakround3
24.2924.3626.23ascon128bi32v12
32.7432.9933.52T:schwaemm256128v2
34.9535.1435.23romulusn
35.4135.7336.05T:grain128aeadv2
35.7736.2036.77T:schwaemm128128v2
37.9238.0338.11T:schwaemm256256v2
42.3542.9043.32T:schwaemm192192v2
47.0547.2547.47romulusm
49.3649.4549.80T:giftcofb128v1
60.8061.1761.45T:tinyjambu128v2
64.2664.4964.64T:tinyjambu192v2
68.1568.4968.78T:tinyjambu256v2
101.98102.12102.26romulust
106.87107.07107.80T:isapa128av20
189.75189.95190.20T:isapk128av20
245.91?246.20?285.42?T:elephant200v2
331.00331.19331.26T:isapa128v20
1298.481298.561298.72T:isapk128v20
1843.381854.501856.82T:isapxv20
6062.556114.636117.61T:elephant176v2
7260.387263.727267.91T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
7.467.527.56T:aes128gcmv1
7.517.627.81aes256gcmv1
10.7210.8010.96ascon128av12
12.9413.0113.32ascon80pqv12
13.0713.0713.43ascon128v12
14.3714.6615.34T:aes256gcmv1
17.9818.2718.75ascon128abi32v12
19.6520.0620.49T:xoodyakround3
23.7224.4426.20ascon128bi32v12
33.0433.2933.52T:schwaemm256128v2
35.2735.5535.55romulusn
35.4135.8236.10T:grain128aeadv2
36.1536.4836.98T:schwaemm128128v2
38.0938.1238.17T:schwaemm256256v2
42.1742.3442.70T:schwaemm192192v2
48.3548.4248.76romulusm
49.5649.7250.00T:giftcofb128v1
60.5960.9560.96T:tinyjambu128v2
64.0564.1264.30T:tinyjambu192v2
68.3068.3068.32T:tinyjambu256v2
101.88102.13103.00romulust
106.72107.01107.29T:isapa128av20
192.22192.70193.25T:isapk128av20
245.88?246.03?284.87?T:elephant200v2
329.29331.23331.87T:isapa128v20
1298.821299.161299.72T:isapk128v20
1852.601858.651859.06T:isapxv20
6060.326108.766117.11T:elephant176v2
7260.607262.277267.62T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
7.477.487.50T:aes128gcmv1
7.517.517.81aes256gcmv1
10.6110.6910.77ascon128av12
13.0113.0413.25ascon80pqv12
13.0513.0613.22ascon128v12
14.1414.4214.85T:aes256gcmv1
18.0118.0118.64ascon128abi32v12
19.6120.2720.47T:xoodyakround3
23.8624.8025.57ascon128bi32v12
33.0533.0933.24T:schwaemm256128v2
35.2335.2435.38romulusn
35.3435.8435.96T:grain128aeadv2
36.0436.1536.57T:schwaemm128128v2
38.0238.0338.09T:schwaemm256256v2
42.1542.2342.78T:schwaemm192192v2
48.4448.4848.48romulusm
49.8850.0150.17T:giftcofb128v1
60.6060.6060.70T:tinyjambu128v2
63.6963.8664.30romulust
64.1864.2664.29T:tinyjambu192v2
66.6666.9967.09T:isapa128av20
68.2968.2968.29T:tinyjambu256v2
121.46122.02122.50T:isapk128av20
172.26173.34173.34T:isapa128v20
245.69?245.88?285.43?T:elephant200v2
679.14679.38679.69T:isapk128v20
969.56972.30973.22T:isapxv20
6066.556107.926117.02T:elephant176v2
7260.127262.777267.91T:elephant160v2

amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20231107

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.61?0.67?0.68?T:aes128gcmv1
0.880.910.93T:aes256gcmv1
1.641.651.65aes256gcmv1
4.624.664.72aes128gcmv1
7.507.527.56ascon128av12
11.0211.0511.08ascon128v12
11.0311.0811.10ascon80pqv12
14.0514.0914.15ascon128abi32v12
19.2919.3619.59T:schwaemm256128v2
20.4820.5020.53T:xoodyakround3
21.2721.2921.34ascon128bi32v12
23.1323.1823.42T:schwaemm256256v2
25.0225.0525.13T:grain128aeadv2
25.8525.9125.99T:schwaemm192192v2
27.2627.6127.70T:schwaemm128128v2
38.5038.5338.55romulusn
39.6639.7739.82T:isapa128av20
41.1841.2241.28T:giftcofb128v1
45.3745.8245.96T:isapa128v20
60.5660.6460.87T:tinyjambu128v2
61.9662.0362.08romulusm
70.0170.1270.22T:isapk128av20
72.1672.2172.28T:tinyjambu192v2
81.5581.5781.61T:tinyjambu256v2
92.7493.2193.33T:isapk128v20
127.24127.30127.34romulust
184.22184.33184.58T:elephant200v2
191.75192.61193.20T:isapxv20
8462.888465.078466.19T:elephant160v2
8483.948484.898488.57T:elephant176v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.60?0.63?0.68?T:aes128gcmv1
0.840.870.92T:aes256gcmv1
1.611.621.63aes256gcmv1
4.624.664.71aes128gcmv1
7.367.387.41ascon128av12
10.6910.7110.73ascon128v12
11.0211.0511.07ascon80pqv12
14.1914.2114.26ascon128abi32v12
19.3119.4219.54T:schwaemm256128v2
20.1120.1720.25T:xoodyakround3
21.3821.5621.61ascon128bi32v12
23.1023.2524.34T:schwaemm256256v2
25.5125.5525.62T:grain128aeadv2
25.7725.8626.00T:schwaemm192192v2
27.2927.6727.72T:schwaemm128128v2
38.5838.6038.63romulusn
39.6039.6739.79T:isapa128av20
41.2441.3041.32T:giftcofb128v1
45.2645.4645.86T:isapa128v20
60.5360.6260.98T:tinyjambu128v2
62.0362.0662.13romulusm
70.0170.1270.20T:isapk128av20
72.1672.2272.27T:tinyjambu192v2
81.8281.8381.87T:tinyjambu256v2
91.4793.0893.22T:isapk128v20
127.24127.30127.47romulust
184.32184.39184.56T:elephant200v2
191.41192.17193.34T:isapxv20
8462.738463.268465.39T:elephant160v2
8483.358487.658488.55T:elephant176v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.620.640.66T:aes128gcmv1
0.850.900.92T:aes256gcmv1
1.611.621.63aes256gcmv1
1.621.661.68aes128gcmv1
7.337.387.39ascon128av12
10.6910.7210.75ascon128v12
11.0211.0511.08ascon80pqv12
14.1914.2214.24ascon128abi32v12
19.3119.3819.55T:schwaemm256128v2
20.2020.2620.33T:xoodyakround3
21.3421.3721.59ascon128bi32v12
22.3822.6022.96T:isapa128v20
23.1023.2724.34T:schwaemm256256v2
25.5325.5425.63T:grain128aeadv2
25.8325.9225.96T:schwaemm192192v2
26.1626.2026.31T:isapa128av20
27.3027.6327.71T:schwaemm128128v2
38.5638.5938.63romulusn
41.2641.3141.34T:giftcofb128v1
43.4543.4943.55romulust
46.6746.7546.81T:isapk128av20
56.8758.0858.26T:isapk128v20
60.4960.5560.91T:tinyjambu128v2
62.0162.0862.12romulusm
72.1972.2472.29T:tinyjambu192v2
81.8281.8481.87T:tinyjambu256v2
112.31112.60113.05T:isapxv20
184.31184.39184.50T:elephant200v2
8463.028463.628465.52T:elephant160v2
8456.448483.568488.17T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.490.510.52T:aes128gcmv1
0.600.610.63T:aes256gcmv1
1.021.031.03aes256gcmv1
3.133.143.17aes128gcmv1
7.497.527.55ascon128av12
11.0011.0211.05ascon128v12
11.0111.0211.06ascon80pqv12
14.2214.2614.28ascon128abi32v12
15.1315.1415.16T:xoodyakround3
19.3919.4419.46T:schwaemm256128v2
21.4021.4121.44ascon128bi32v12
23.0123.0523.18T:schwaemm256256v2
24.9024.9325.04T:grain128aeadv2
25.6925.7525.80T:schwaemm192192v2
27.4127.4627.51T:schwaemm128128v2
30.9831.0231.05romulusn
32.6832.7532.98T:isapa128av20
34.1134.2434.62T:isapa128v20
41.3041.3241.35T:giftcofb128v1
42.7542.7942.81romulusm
48.4548.5048.53T:tinyjambu128v2
56.5756.6256.67T:tinyjambu192v2
57.8657.9257.97T:isapk128av20
61.8061.8161.82T:tinyjambu256v2
75.6375.7275.76T:isapk128v20
85.2085.2485.31romulust
136.23137.35137.41T:elephant200v2
153.21153.57153.94T:isapxv20
6336.716339.096339.82T:elephant176v2
6346.606347.046348.78T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.480.500.53T:aes128gcmv1
0.590.590.63T:aes256gcmv1
1.001.021.03aes256gcmv1
3.143.163.18aes128gcmv1
7.447.457.47ascon128av12
10.8410.8710.91ascon128v12
10.9811.0211.04ascon80pqv12
14.3014.3314.34ascon128abi32v12
14.9314.9514.97T:xoodyakround3
19.4119.4319.45T:schwaemm256128v2
21.2621.3021.35ascon128bi32v12
22.9623.0323.80T:schwaemm256256v2
25.1925.2325.28T:grain128aeadv2
25.6525.7325.78T:schwaemm192192v2
27.4327.5027.54T:schwaemm128128v2
31.0331.0531.09romulusn
32.7232.7732.98T:isapa128av20
34.0134.2034.54T:isapa128v20
41.3341.3641.40T:giftcofb128v1
42.7942.8342.85romulusm
48.4648.5048.53T:tinyjambu128v2
56.6156.6656.71T:tinyjambu192v2
57.8757.9257.97T:isapk128av20
61.9261.9461.96T:tinyjambu256v2
75.5575.6475.68T:isapk128v20
85.2285.2685.29romulust
136.22137.23137.36T:elephant200v2
153.07153.48153.97T:isapxv20
6336.656337.146339.21T:elephant176v2
6346.916347.276348.91T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.480.490.53T:aes128gcmv1
0.590.590.63T:aes256gcmv1
1.011.021.02aes256gcmv1
1.641.651.67aes128gcmv1
7.427.447.46ascon128av12
10.8410.8610.88ascon128v12
11.0011.0211.03ascon80pqv12
14.3114.3314.35ascon128abi32v12
14.9715.0015.02T:xoodyakround3
19.3919.4219.46T:schwaemm256128v2
21.2521.3021.33ascon128bi32v12
22.5522.6022.66T:isapa128v20
22.9623.0723.82T:schwaemm256256v2
25.2025.2325.27T:grain128aeadv2
25.5825.6425.71T:schwaemm192192v2
26.0126.0726.27T:isapa128av20
27.4327.4627.50T:schwaemm128128v2
31.0331.0631.09romulusn
41.3241.3541.38T:giftcofb128v1
42.7942.8242.86romulusm
43.3143.3543.39romulust
46.2546.2846.31T:isapk128av20
48.4748.5548.61T:tinyjambu128v2
56.6256.6656.70T:tinyjambu192v2
58.0658.1358.19T:isapk128v20
61.9361.9461.95T:tinyjambu256v2
113.42113.65113.81T:isapxv20
136.18136.29137.34T:elephant200v2
6338.116339.306339.79T:elephant176v2
6346.796347.456349.01T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.310.310.33T:aes256gcmv1
0.300.310.33T:aes128gcmv1
0.390.410.42aes256gcmv1
1.571.591.61aes128gcmv1
7.467.487.52ascon128av12
9.739.789.81T:xoodyakround3
10.9610.9710.99ascon128v12
10.9610.9811.01ascon80pqv12
14.1414.1814.20ascon128abi32v12
19.0519.3119.37T:schwaemm256128v2
21.4821.5221.53ascon128bi32v12
22.5722.6822.75T:isapa128v20
22.9122.9623.04T:schwaemm256256v2
23.4823.5223.55romulusn
23.5223.5623.59romulusm
24.7524.8024.91T:grain128aeadv2
25.2925.3525.54T:schwaemm192192v2
26.2926.3326.37T:isapa128av20
27.1927.2627.33T:schwaemm128128v2
36.4236.4736.60T:tinyjambu128v2
41.0341.0841.13T:tinyjambu192v2
41.3541.3941.42T:giftcofb128v1
42.0242.0542.06T:tinyjambu256v2
43.1743.2243.27romulust
45.7545.8946.06T:isapk128av20
58.1558.2358.38T:isapk128v20
89.9490.6490.82T:elephant200v2
114.42114.51114.90T:isapxv20
4188.144192.404192.99T:elephant176v2
4229.384230.094231.82T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.310.320.33T:aes128gcmv1
0.31?0.32?0.41?T:aes256gcmv1
0.400.420.42aes256gcmv1
1.581.591.60aes128gcmv1
7.497.517.53ascon128av12
9.789.829.86T:xoodyakround3
10.9410.9610.99ascon80pqv12
10.9410.9710.99ascon128v12
14.1514.1814.21ascon128abi32v12
19.1419.2119.24T:schwaemm256128v2
21.1321.1921.24ascon128bi32v12
22.5422.6422.74T:isapa128v20
22.8222.9823.18T:schwaemm256256v2
23.4823.5223.56romulusn
23.5323.5623.61romulusm
24.7624.7924.88T:grain128aeadv2
25.3025.4225.51T:schwaemm192192v2
26.2626.3326.36T:isapa128av20
27.2227.2727.30T:schwaemm128128v2
36.3836.4236.60T:tinyjambu128v2
41.0241.0741.10T:tinyjambu192v2
41.3441.3841.43T:giftcofb128v1
42.0342.0442.05T:tinyjambu256v2
43.1343.2143.25romulust
45.8745.9145.99T:isapk128av20
58.1958.2758.36T:isapk128v20
89.8990.0190.70T:elephant200v2
114.19114.50114.73T:isapxv20
4191.064192.634192.90T:elephant176v2
4229.344229.684232.40T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.27?0.31?0.32?T:aes128gcmv1
0.31?0.33?0.40?T:aes256gcmv1
0.410.420.42aes256gcmv1
1.561.581.59aes128gcmv1
7.487.507.53ascon128av12
9.829.859.89T:xoodyakround3
10.9310.9510.99ascon80pqv12
10.9510.9811.00ascon128v12
14.1714.1814.23ascon128abi32v12
19.0519.1919.28T:schwaemm256128v2
21.1521.1721.24ascon128bi32v12
22.4922.5922.74T:isapa128v20
22.8922.9823.24T:schwaemm256256v2
23.4823.5123.55romulusn
23.5323.5723.60romulusm
24.7724.7924.87T:grain128aeadv2
25.3625.4425.51T:schwaemm192192v2
26.2626.3426.36T:isapa128av20
27.1727.2727.31T:schwaemm128128v2
36.4036.4736.60T:tinyjambu128v2
41.0341.0641.11T:tinyjambu192v2
41.3741.4141.46T:giftcofb128v1
42.0442.0442.06T:tinyjambu256v2
43.1643.2143.25romulust
45.8445.9145.96T:isapk128av20
58.1658.2758.38T:isapk128v20
89.8489.9490.78T:elephant200v2
114.27114.71114.85T:isapxv20
4191.194192.464193.00T:elephant176v2
4229.374229.914232.24T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.960.971.00T:aes128gcmv1
1.101.111.14T:aes256gcmv1
1.211.211.22aes256gcmv1
3.283.303.34aes128gcmv1
7.707.727.73ascon128av12
11.1911.2111.23ascon128v12
11.2011.2111.22ascon80pqv12
14.5114.5914.61ascon128abi32v12
15.2415.2515.27T:xoodyakround3
20.0020.0220.05T:schwaemm256128v2
21.7221.7421.77ascon128bi32v12
23.6523.7123.80T:schwaemm256256v2
25.3025.3225.41T:grain128aeadv2
26.2426.2626.29T:schwaemm192192v2
27.8127.8927.92T:schwaemm128128v2
31.4331.4531.46romulusn
36.0836.1136.14T:isapa128av20
41.7341.7541.77T:giftcofb128v1
43.2243.2443.28romulusm
48.8748.9148.94T:tinyjambu128v2
49.7549.8349.98T:isapa128v20
57.0857.1057.12T:tinyjambu192v2
62.2762.2862.30T:tinyjambu256v2
65.1965.2365.28T:isapk128av20
86.5786.5986.63romulust
130.65130.69130.78T:isapk128v20
139.30140.24140.29T:elephant200v2
250.44250.89250.98T:isapxv20
6366.266386.416387.60T:elephant176v2
6418.516418.786420.39T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.970.981.00T:aes128gcmv1
1.081.101.11T:aes256gcmv1
1.211.211.22aes256gcmv1
3.343.363.37aes128gcmv1
7.627.637.64ascon128av12
11.0211.0411.06ascon128v12
11.1711.1911.21ascon80pqv12
14.5814.6714.69ascon128abi32v12
15.0915.1215.16T:xoodyakround3
19.9620.0120.03T:schwaemm256128v2
21.6221.6721.74ascon128bi32v12
23.6623.7024.41