VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates, indexed by machine

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains round-2 candidates in NISTLWC.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each cipher and each implementation.

aarch64; Firestorm (610f0230); 2020 Apple M1; 4 x 3200MHz; unstable; minimac, supercop-20210326

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 5.69? 6.32? 13.61? ascon128av12 8.61? 9.44? 24.03? ascon80pqv12 8.68? 9.51? 23.61? ascon128v12 9.51? 10.83? 27.57? T:xoodyakv1 10.55? 11.88? 30.55? T:knot128v2 15.97? 19.86? 36.94? T:schwaemm256128v1 18.33? 20.00? 42.91? T:saeaes128a120t64v1 18.40? 20.00? 42.98? T:saeaes128a64t64v1 18.40? 20.07? 42.91? T:saeaes128a64t128v1 15.90? 20.83? 37.08? T:saeaes128a120t128v1 19.79? 21.67? 40.07? T:knot128v1 16.67? 23.05? 43.12? T:schwaemm256256v1 21.67? 23.54? 43.54? T:saeaes192a64t128v1 21.87? 23.54? 50.42? T:saeaes192a120t128v1 20.14? 23.61? 43.61? T:saeaes192a64t64v1 21.46? 23.75? 44.03? T:gimli24v1 20.62? 25.14? 46.18? T:comet128aesv1 24.30? 26.80? 50.00? T:schwaemm192192v1 24.65? 26.87? 49.65? T:saeaes256a120t128v1 25.00? 26.87? 49.72? T:saeaes256a64t128v1 25.00? 26.94? 38.82? T:saeaes256a64t64v1 23.61? 27.50? 52.08? T:saturninctrcascadev2 23.82? 28.47? 47.36? T:isapa128av20 26.53? 32.78? 52.64? T:knot256 31.25? 34.17? 55.55? T:knot192 32.08? 34.86? 50.35? T:grain128aead 22.43? 35.83? 37.71? T:isapa128v20 34.58? 37.92? 54.86? T:schwaemm128128v1 35.76? 39.10? 56.67? T:drygascon128k16 35.83? 39.16? 56.67? T:drygascon128k56 35.83? 39.23? 56.60? T:drygascon128k32 33.19? 39.72? 57.85? T:giftcofb128v1 43.89? 47.64? 62.77? T:tinyjambu128 43.89? 48.47? 63.89? T:drygascon256k32 42.29? 51.25? 68.19? T:spook128mu512v1 44.03? 51.39? 62.36? T:spook128su384v1 39.65? 51.46? 68.19? T:spook128mu384v1 45.90? 51.94? 68.12? T:spook128su512v1 48.47? 53.40? 69.23? T:tinyjambu192 39.93? 54.58? 66.46? T:subterraneanv1 48.19? 58.61? 70.62? T:tinyjambu256 50.62? 67.22? 68.33? T:isapk128av20 71.25? 80.07? 81.80? T:comet128chamv1 72.84? 80.76? 82.22? T:sestatetweaes128v1 75.48? 85.69? 86.04? T:elephant200v1 85.55 87.64 92.08 T:isapk128v20 80.62? 93.82? 94.65? T:mixfeed 89.37 97.15 97.29 T:estatetweaes128v1 89.72? 98.19? 101.94? T:comet64chamv1 92.91 101.73 101.87 T:comet64speckv1 88.82? 102.91? 103.54? T:skinnyaeadtk3128128v1 145.97? 163.95? 164.37? T:skinnyaeadtk29664v1 139.16? 164.02? 164.44? T:skinnyaeadtk296128v1 190.20? 213.60? 214.51? T:skinnyaeadtk39664v1 195.96? 213.74? 218.05? T:skinnyaeadtk312864v1 196.24 214.02 214.23 T:skinnyaeadtk396128v1 208.39? 228.12? 233.12? T:romulusn1v1 212.98 232.00 232.21 T:pyjamask128aeadv1 220.82? 246.31? 246.45? T:pyjamask96aeadv1 258.81 282.35 286.93 T:romulusn3v1 298.67 315.89 320.26 T:saefforkskinnyb128t192n56v1 293.88 317.49 321.86 T:saefforkskinnyb128t256n120v1 294.16 317.56 317.70 T:paefforkskinnyb128t256n112v1 300.13 317.70 321.86 T:paefforkskinnyb128t192n48v1 311.31 328.04 330.33 T:wageae128v1 327.00 356.58 356.86 T:romulusn2v1 342.56 373.80 373.94 T:sundaegift128v1 342.69 373.87 378.32 T:sundaegift64v1 342.83 373.87 378.39 T:sundaegift96v1 344.57 373.87 378.39 T:sundaegift0v1 362.35 385.68 389.57 T:romulusm1v1 367.21 400.75 404.29 T:spoc128sliscplight256v1 400.47 424.57 425.26 T:spix128v1 416.30 443.46 447.48 T:romulusm3v1 431.09 456.30 461.16 T:paefforkskinnyb128t288n104v1 537.41 562.27 567.06 T:romulusm2v1 552.41 589.21 594.70 T:spoc64sliscplight192v1 688.65 706.78 709.28 T:hyenav1 807.75 825.18 830.31 T:paefforkskinnyb64t192n48v1 959.55 968.23 970.59 T:aceae128v1 959.41 986.07 988.57 T:oribatida192v11 1185.93 1191.27 1192.04 T:orangezestv1 1292.45 1309.53 1312.17 T:oribatida256v11 1605.77 1624.94 1633.96 T:twegift64lotusaeadv1 1614.87 1627.92 1634.38 T:twegift64locusaeadv1 2044.78 2047.28 2050.75 T:estatetwegift128v1 2891.28 2901.00 2912.53 T:photonbeetleaead128rate128v1 3253.69 3256.19 3261.40 T:elephant176v1 3414.73 3430.07 3440.49 T:elephant160v1 11467.54 11479.55 11501.29 T:photonbeetleaead128rate32v1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 5.56? 6.18? 13.40? ascon128av12 8.54? 9.37? 23.54? ascon80pqv12 8.68? 9.44? 23.61? ascon128v12 9.58? 10.83? 27.85? T:xoodyakv1 10.56? 11.94? 30.69? T:knot128v2 17.22? 18.82? 40.35? T:saeaes128a120t64v1 14.79? 18.82? 34.79? T:saeaes128a120t128v1 17.29? 18.82? 34.79? T:saeaes128a64t64v1 17.29? 19.03? 34.79? T:saeaes128a64t128v1 16.04? 19.93? 36.94? T:schwaemm256128v1 19.72? 21.60? 39.93? T:knot128v1 20.62? 22.29? 47.71? T:saeaes192a120t128v1 18.96? 22.36? 41.25? T:saeaes192a64t64v1 20.48? 22.36? 41.25? T:saeaes192a64t128v1 20.55? 22.92? 42.43? T:gimli24v1 16.60? 23.05? 43.19? T:schwaemm256256v1 23.75? 25.62? 47.64? T:saeaes256a64t128v1 23.47? 25.69? 47.57? T:saeaes256a120t128v1 23.75? 25.69? 37.22? T:saeaes256a64t64v1 20.97? 26.32? 47.85? T:comet128aesv1 24.30? 26.87? 50.07? T:schwaemm192192v1 23.96? 27.71? 51.53? T:saturninctrcascadev2 23.89? 28.54? 47.43? T:isapa128av20 26.04? 32.64? 51.66? T:knot256 31.11? 34.17? 55.48? T:knot192 22.29? 35.90? 38.19? T:isapa128v20 34.86? 38.19? 55.34? T:schwaemm128128v1 35.48? 38.61? 55.62? T:grain128aead 33.19? 39.86? 57.85? T:giftcofb128v1 37.01? 40.35? 58.33? T:drygascon128k32 36.94? 40.35? 58.40? T:drygascon128k16 36.94? 40.42? 58.33? T:drygascon128k56 43.89? 47.64? 62.71? T:tinyjambu128 44.79? 49.37? 64.58? T:drygascon256k32 41.94? 51.32? 68.19? T:spook128mu512v1 39.23? 51.39? 62.50? T:spook128su384v1 39.23? 51.39? 68.26? T:spook128mu384v1 45.62? 51.80? 68.19? T:spook128su512v1 48.68? 52.91? 69.44? T:tinyjambu192 39.86? 54.93? 66.39? T:subterraneanv1 48.54? 59.16? 70.97? T:tinyjambu256 50.62? 67.43? 68.47? T:isapk128av20 72.01? 81.59? 82.91? T:comet128chamv1 72.91? 81.59? 82.29? T:sestatetweaes128v1 74.79? 84.72? 85.62? T:elephant200v1 85.76 87.64 87.91 T:isapk128v20 79.93? 92.43? 94.09? T:mixfeed 89.30 97.15 98.26 T:estatetweaes128v1 90.69 99.51 100.55 T:comet64chamv1 87.15? 101.25? 101.87? T:skinnyaeadtk3128128v1 93.61 102.57 102.98 T:comet64speckv1 208.26 227.98 228.39 T:romulusn1v1 215.41 234.78 239.23 T:pyjamask128aeadv1 220.13? 245.55? 250.27? T:pyjamask96aeadv1 228.74? 268.95? 270.75? T:skinnyaeadtk296128v1 240.55? 271.10? 274.09? T:skinnyaeadtk29664v1 259.50 283.04 285.61 T:romulusn3v1 310.96 328.53 330.61 T:wageae128v1 311.31? 347.97? 352.49? T:skinnyaeadtk39664v1 320.47 348.53 352.28 T:skinnyaeadtk312864v1 320.54 348.67 352.00 T:skinnyaeadtk396128v1 327.35 357.00 359.57 T:romulusn2v1 344.50 373.74 378.32 T:sundaegift0v1 350.68 373.74 379.36 T:sundaegift64v1 342.70 373.80 378.11 T:sundaegift96v1 342.63 373.87 378.46 T:sundaegift128v1 361.72 385.89 386.72 T:romulusm1v1 367.07 400.40 400.75 T:spoc128sliscplight256v1 405.96 420.68 425.61 T:spix128v1 416.16 443.59 447.55 T:romulusm3v1 538.17 563.73 568.87 T:romulusm2v1 551.85 588.45 594.07 T:spoc64sliscplight192v1 617.75 653.73 658.59 T:saefforkskinnyb128t192n56v1 604.63 654.00 657.96 T:paefforkskinnyb128t256n112v1 604.28 654.21 657.54 T:saefforkskinnyb128t256n120v1 617.06 654.28 658.86 T:paefforkskinnyb128t192n48v1 688.79 708.93 711.78 T:hyenav1 787.47 837.40 874.62 T:paefforkskinnyb128t288n104v1 959.62 964.68 970.38 T:aceae128v1 975.59 1002.53 1005.31 T:oribatida192v11 1184.95 1190.30 1192.04 T:orangezestv1 1291.41 1309.53 1311.75 T:oribatida256v11 1457.44 1488.34 1494.39 T:paefforkskinnyb64t192n48v1 1605.63 1623.76 1631.12 T:twegift64lotusaeadv1 1719.24 1737.50 1751.95 T:twegift64locusaeadv1 2046.59 2047.07 2052.63 T:estatetwegift128v1 2902.59 2905.93 2914.47 T:photonbeetleaead128rate128v1 3250.57 3253.90 3260.98 T:elephant176v1 3413.13 3434.17 3447.99 T:elephant160v1 11450.94 11490.04 11510.45 T:photonbeetleaead128rate32v1

Cycles/byte for long+0 forgery 25% 50% 75% aead 5.62? 6.25? 13.47? ascon128av12 8.54? 9.37? 23.54? ascon80pqv12 8.68? 9.44? 23.54? ascon128v12 9.58? 10.83? 27.85? T:xoodyakv1 10.56? 11.94? 30.62? T:knot128v2 11.11? 18.89? 19.37? T:isapa128v20 16.18? 19.17? 31.46? T:isapa128av20 18.19? 19.79? 36.80? T:saeaes128a64t64v1 15.62? 19.86? 36.73? T:saeaes128a120t128v1 18.26? 19.86? 36.87? T:saeaes128a64t128v1 18.19? 20.00? 42.57? T:saeaes128a120t64v1 17.01? 20.97? 38.96? T:schwaemm256128v1 19.79? 21.60? 39.93? T:knot128v1 20.55? 22.85? 42.36? T:gimli24v1 21.53? 23.33? 50.00? T:saeaes192a120t128v1 19.86? 23.40? 43.19? T:saeaes192a64t64v1 21.39? 23.40? 43.12? T:saeaes192a64t128v1 17.57? 24.17? 44.86? T:schwaemm256256v1 20.76? 25.83? 47.91? T:comet128aesv1 24.44? 26.73? 43.40? T:saeaes256a120t128v1 24.65? 26.73? 38.68? T:saeaes256a64t64v1 24.72? 26.74? 49.37? T:saeaes256a64t128v1 23.96? 27.71? 51.60? T:saturninctrcascadev2 25.35? 27.98? 52.22? T:schwaemm192192v1 25.97? 31.53? 51.53? T:knot256 31.18? 34.17? 55.48? T:knot192 35.48? 38.54? 55.76? T:grain128aead 35.62? 39.23? 56.66? T:schwaemm128128v1 33.19? 39.86? 57.98? T:giftcofb128v1 36.94? 40.35? 58.33? T:drygascon128k32 36.94? 40.35? 58.40? T:drygascon128k56 36.94? 40.42? 58.40? T:drygascon128k16 34.65? 43.75? 45.48? T:isapk128av20 44.09? 47.91? 62.91? T:tinyjambu128 41.32? 49.37? 64.58? T:drygascon256k32 39.30? 51.39? 68.26? T:spook128mu384v1 39.23? 51.46? 62.50? T:spook128su384v1 42.08? 51.60? 62.43? T:spook128mu512v1 45.76? 51.80? 68.26? T:spook128su512v1 48.82? 54.65? 69.44? T:tinyjambu192 53.40 54.86 56.25 T:isapk128v20 39.93? 55.00? 66.46? T:subterraneanv1 52.01? 59.09? 70.76? T:tinyjambu256 72.91? 82.08? 82.36? T:sestatetweaes128v1 72.08? 82.77? 83.12? T:comet128chamv1 74.23? 84.72? 85.83? T:elephant200v1 79.16? 92.29? 93.68? T:mixfeed 89.37 97.08 98.12 T:estatetweaes128v1 90.69 99.44 100.69 T:comet64chamv1 87.15? 101.18? 101.94? T:skinnyaeadtk3128128v1 93.61 102.57 103.82 T:comet64speckv1 208.19 227.91 228.12 T:romulusn1v1 215.27 234.43 238.81 T:pyjamask128aeadv1 220.06? 245.55? 245.75? T:pyjamask96aeadv1 231.10? 270.41? 274.57? T:skinnyaeadtk296128v1 241.45? 271.17? 272.98? T:skinnyaeadtk29664v1 259.71 283.04 283.25 T:romulusn3v1 306.86 311.03 312.14 T:wageae128v1 320.06 347.97 352.69 T:skinnyaeadtk39664v1 320.68 348.74 352.21 T:skinnyaeadtk312864v1 320.82 348.88 350.40 T:skinnyaeadtk396128v1 327.28 357.00 361.24 T:romulusn2v1 342.63 373.74 373.94 T:sundaegift128v1 342.69 373.74 374.01 T:sundaegift96v1 344.43 373.74 373.94 T:sundaegift0v1 350.68 373.80 374.15 T:sundaegift64v1 361.79 386.03 387.00 T:romulusm1v1 367.42 400.96 404.91 T:spoc128sliscplight256v1 405.89 420.33 425.75 T:spix128v1 416.16 443.18 443.45 T:romulusm3v1 538.31 563.45 568.80 T:romulusm2v1 561.51 588.31 592.62 T:spoc64sliscplight192v1 604.42 652.75 658.93 T:paefforkskinnyb128t256n112v1 617.82 653.38 658.10 T:saefforkskinnyb128t192n56v1 616.64 653.65 656.78 T:saefforkskinnyb128t256n120v1 616.99 654.00 658.24 T:paefforkskinnyb128t192n48v1 688.72 710.74 712.47 T:hyenav1 787.26 833.65 838.79 T:paefforkskinnyb128t288n104v1 959.82 965.38 971.56 T:aceae128v1 976.00 1000.38 1006.21 T:oribatida192v11 1185.09 1190.58 1192.11 T:orangezestv1 1291.55 1309.12 1313.91 T:oribatida256v11 1457.65 1492.72 1508.41 T:paefforkskinnyb64t192n48v1 1606.05 1625.01 1635.42 T:twegift64lotusaeadv1 1718.89 1734.65 1752.50 T:twegift64locusaeadv1 2040.55 2047.07 2049.02 T:estatetwegift128v1 2897.87 2904.26 2911.55 T:photonbeetleaead128rate128v1 3253.69 3257.44 3261.68 T:elephant176v1 3412.99 3429.94 3450.07 T:elephant160v1 11449.76 11466.15 11490.18 T:photonbeetleaead128rate32v1

Cycles/byte for long+long encrypt 25% 50% 75% aead 5.66 6.25 6.25 ascon128av12 7.67 8.30 8.33 T:xoodyakv1 8.65 9.31 9.37 ascon80pqv12 8.78 9.34 9.41 ascon128v12 10.80 11.84 11.94 T:knot128v2 14.20 15.07 15.49 T:saeaes128a120t128v1 14.17 15.14 15.42 T:saeaes128a120t64v1 16.63 17.43 18.09 T:saeaes192a120t128v1 18.51 19.06 19.76 T:schwaemm256128v1 18.75 19.13 19.83 T:saeaes128a64t128v1 18.54 19.20 19.86 T:saeaes128a64t64v1 19.44 19.93 20.59 T:saeaes256a120t128v1 20.35 20.87 21.60 T:knot128v1 21.70 22.15 22.95 T:schwaemm256256v1 22.01 22.53 23.33 T:saeaes192a64t128v1 21.98 22.57 23.37 T:gimli24v1 22.01 22.60 23.40 T:saeaes192a64t64v1 22.33 22.92 23.71 T:isapa128av20 23.58 24.17 24.83 T:comet128aesv1 24.93 25.69 26.70 T:saeaes256a64t64v1 25.17 25.73 26.74 T:saeaes256a64t128v1 25.31 25.80 26.74 T:schwaemm192192v1 25.80 26.11 27.12 T:saturninctrcascadev2 26.94 27.12 28.26 T:isapa128v20 30.69 30.90 31.84 T:knot256 32.05 32.15 33.05 T:tinyjambu128 32.43 32.53 33.44 T:grain128aead 32.60 32.67 33.54 T:knot192 34.48 34.65 35.87 T:tinyjambu192 36.42 36.67 37.29 T:schwaemm128128v1 37.36 37.39 38.12 T:tinyjambu256 37.64 37.64 38.33 T:drygascon128k16 37.60 37.67 38.37 T:drygascon128k56 37.64 37.74 38.40 T:drygascon128k32 38.61 38.71 39.41 T:giftcofb128v1 46.21 46.67 46.94 T:drygascon256k32 48.82 48.85 49.03 T:subterraneanv1 49.51 49.55 49.58 T:spook128mu384v1 49.51 49.55 49.69 T:spook128mu512v1 49.55 49.55 50.48 T:spook128su512v1 49.55 49.55 51.70 T:spook128su384v1 54.37 54.65 54.72 T:isapk128av20 55.35 55.41 55.45 T:sestatetweaes128v1 62.12 62.39 62.50 T:elephant200v1 70.69 71.28 71.46 T:isapk128v20 72.91 73.68 75.10 T:estatetweaes128v1 78.82 78.89 78.89 T:comet128chamv1 92.98 93.54 93.92 T:mixfeed 98.36 98.50 98.61 T:comet64chamv1 103.16 103.36 103.61 T:skinnyaeadtk3128128v1 103.16 103.36 103.47 T:comet64speckv1 163.88 164.19 164.58 T:skinnyaeadtk29664v1 163.92 164.23 166.80 T:skinnyaeadtk296128v1 192.35 192.91 193.60 T:romulusn1v1 213.71 214.02 216.69 T:skinnyaeadtk312864v1 213.78 214.40 216.42 T:skinnyaeadtk39664v1 214.05 214.71 216.59 T:skinnyaeadtk396128v1 222.07 222.39 225.03 T:romulusn3v1 232.73 233.67 234.05 T:pyjamask128aeadv1 244.37 245.72 247.56 T:pyjamask96aeadv1 258.91 259.02 261.73 T:saefforkskinnyb128t192n56v1 259.02 259.26 261.90 T:paefforkskinnyb128t192n48v1 259.05 259.75 261.93 T:paefforkskinnyb128t256n112v1 259.43 259.78 262.45 T:saefforkskinnyb128t256n120v1 271.17 272.49 274.26 T:romulusm1v1 280.34 281.13 283.43 T:sundaegift64v1 280.30 281.20 281.31 T:sundaegift128v1 280.30 281.34 283.46 T:sundaegift0v1 280.41 281.34 283.46 T:sundaegift96v1 281.24 282.38 284.47 T:romulusn2v1 302.56 303.39 305.58 T:romulusm3v1 310.99 329.43 330.72 T:wageae128v1 374.57 375.89 377.49 T:paefforkskinnyb128t288n104v1 384.26 385.51 387.48 T:romulusm2v1 400.26 403.28 403.53 T:spoc128sliscplight256v1 420.40 422.87 423.49 T:spix128v1 589.70 592.48 594.46 T:spoc64sliscplight192v1 667.61 676.81 678.03 T:paefforkskinnyb64t192n48v1 713.51 714.94 717.06 T:hyenav1 736.50 738.03 739.24 T:oribatida192v11 963.02 966.11 967.74 T:aceae128v1 980.34 980.97 983.64 T:oribatida256v11 1188.53 1188.81 1189.05 T:orangezestv1 1217.07 1219.12 1223.60 T:twegift64lotusaeadv1 1215.99 1220.26 1223.08 T:twegift64locusaeadv1 1534.25 1535.88 1539.66 T:estatetwegift128v1 2428.52 2431.47 2433.97 T:elephant176v1 2567.85 2573.79 2580.56 T:elephant160v1 2890.86 2897.77 2903.91 T:photonbeetleaead128rate128v1 11455.73 11467.26 11485.73 T:photonbeetleaead128rate32v1

Cycles/byte for long+long decrypt 25% 50% 75% aead 5.62 6.18 6.21 ascon128av12 7.67 8.33 8.40 T:xoodyakv1 8.75 9.37 9.58 ascon128v12 8.78 9.37 9.58 ascon80pqv12 10.97 11.98 12.12 T:knot128v2 13.61 14.72 14.96 T:saeaes128a120t64v1 13.61 14.72 15.03 T:saeaes128a120t128v1 16.08 17.12 17.50 T:saeaes192a120t128v1 17.99 18.61 19.48 T:saeaes128a64t64v1 18.19 18.65 19.55 T:saeaes128a64t128v1 18.54 19.17 19.93 T:schwaemm256128v1 18.89 19.37 20.21 T:saeaes256a120t128v1 20.35 20.87 21.60 T:knot128v1 21.39 21.91 22.71 T:saeaes192a64t128v1 21.42 21.94 22.74 T:saeaes192a64t64v1 21.56 22.12 22.99 T:gimli24v1 21.80 22.22 22.88 T:schwaemm256256v1 22.33 22.92 23.68 T:isapa128av20 24.10 25.03 25.73 T:comet128aesv1 24.62 25.14 26.01 T:saeaes256a64t128v1 24.37 25.14 26.04 T:saeaes256a64t64v1 25.38 25.87 26.91 T:schwaemm192192v1 25.76 26.08 27.05 T:saturninctrcascadev2 26.91 27.15 28.33 T:isapa128v20 30.31 30.38 31.73 T:knot256 32.12 32.22 33.37 T:tinyjambu128 32.57 32.74 33.89 T:knot192 34.20 34.23 35.35 T:grain128aead 34.44 34.58 35.80 T:tinyjambu192 36.53 36.66 37.64 T:schwaemm128128v1 37.43 37.50 38.71 T:tinyjambu256 38.19 38.23 39.27 T:drygascon128k32 38.19 38.23 39.23 T:drygascon128k56 38.16 38.26 39.17 T:drygascon128k16 38.58 38.68 39.65 T:giftcofb128v1 46.70 47.01 47.53 T:drygascon256k32 48.89 49.03 49.51 T:subterraneanv1 49.48 49.55 50.21 T:spook128mu512v1 49.51 49.55 50.07 T:spook128su512v1 49.51 49.55 50.14 T:spook128mu384v1 49.51 49.62 50.10 T:spook128su384v1 54.79 54.86 54.93 T:isapk128av20 55.38 55.41 55.62 T:sestatetweaes128v1 61.73 61.91 63.99 T:elephant200v1 70.62 71.28 71.49 T:isapk128v20 72.91 72.98 74.09 T:estatetweaes128v1 79.89 79.96 80.17 T:comet128chamv1 92.53 92.95 93.78 T:mixfeed 98.68 98.99 99.68 T:comet64chamv1 102.22 102.53 104.82 T:skinnyaeadtk3128128v1 103.71 103.85 103.99 T:comet64speckv1 192.42 192.98 195.17 T:romulusn1v1 215.76 216.59 218.08 T:skinnyaeadtk29664v1 215.76 217.11 218.57 T:skinnyaeadtk296128v1 222.53 222.84 225.48 T:romulusn3v1 234.12 235.23 235.79 T:pyjamask128aeadv1 243.81 244.71 245.09 T:pyjamask96aeadv1 271.48 272.59 275.06 T:romulusm1v1 280.20 281.20 283.43 T:sundaegift64v1 280.30 281.20 283.57 T:sundaegift96v1 280.23 281.27 283.53 T:sundaegift128v1 280.27 281.38 283.53 T:sundaegift0v1 281.41 282.21 284.29 T:skinnyaeadtk39664v1 281.27 282.42 284.57 T:skinnyaeadtk312864v1 281.27 282.49 284.47 T:romulusn2v1 283.57 285.09 286.76 T:skinnyaeadtk396128v1 302.52 302.80 305.65 T:romulusm3v1 311.59 329.36 330.61 T:wageae128v1 384.85 385.99 387.90 T:romulusm2v1 400.12 402.28 404.12 T:spoc128sliscplight256v1 420.37 422.21 423.87 T:spix128v1 426.75 427.76 430.19 T:saefforkskinnyb128t256n120v1 426.58 428.00 430.85 T:paefforkskinnyb128t192n48v1 427.21 428.39 432.76 T:saefforkskinnyb128t192n56v1 427.76 428.84 430.30 T:paefforkskinnyb128t256n112v1 563.62 565.92 567.41 T:paefforkskinnyb128t288n104v1 589.80 591.78 593.24 T:spoc64sliscplight192v1 712.92 716.36 717.16 T:hyenav1 743.06 747.02 748.30 T:oribatida192v11 966.32 967.53 969.16 T:aceae128v1 979.68 980.52 981.28 T:oribatida256v11 1007.74 1010.79 1012.39 T:paefforkskinnyb64t192n48v1 1186.55 1188.43 1188.67 T:orangezestv1 1219.15 1221.58 1223.11 T:twegift64lotusaeadv1 1270.64 1271.89 1275.54 T:twegift64locusaeadv1 1535.29 1535.98 1538.62 T:estatetwegift128v1 2429.35 2434.94 2449.35 T:elephant176v1 2557.30 2568.09 2574.41 T:elephant160v1 2894.68 2901.73 2908.29 T:photonbeetleaead128rate128v1 11452.61 11465.52 11478.79 T:photonbeetleaead128rate32v1

Cycles/byte for long+long forgery 25% 50% 75% aead 5.66? 6.21? 6.39? ascon128av12 7.71 8.33 8.40 T:xoodyakv1 8.78 9.34 9.62 ascon128v12 8.78 9.37 9.58 ascon80pqv12 10.94 11.98 12.12 T:knot128v2 14.10 15.21 15.42 T:saeaes128a120t64v1 14.06 15.28 15.45 T:saeaes128a120t128v1 16.56 17.43 18.12 T:saeaes192a120t128v1 18.09 18.19 19.03 T:isapa128v20 17.92 18.33 19.20 T:isapa128av20 18.68 19.10 20.00 T:saeaes128a64t128v1 18.44 19.13 19.83 T:saeaes128a64t64v1 19.34 19.79 20.73 T:saeaes256a120t128v1 19.10 19.83 20.49 T:schwaemm256128v1 20.35 20.83 21.63 T:knot128v1 21.60 22.15 22.92 T:gimli24v1 21.87 22.36 23.19 T:saeaes192a64t128v1 21.91 22.50 23.26 T:saeaes192a64t64v1 22.19 22.74 23.40 T:schwaemm256256v1 23.96 24.41 25.21 T:comet128aesv1 24.83 25.59 26.67 T:saeaes256a64t64v1 25.07 25.62 26.56 T:saeaes256a64t128v1 25.73 26.08 26.98 T:saturninctrcascadev2 25.87 26.46 27.46 T:schwaemm192192v1 30.28 30.42 31.67 T:knot256 32.08 32.12 33.26 T:tinyjambu128 32.53 32.67 33.82 T:knot192 34.23 34.30 35.45 T:grain128aead 34.58 34.69 35.69 T:tinyjambu192 37.01 37.12 38.23 T:schwaemm128128v1 37.33 37.39 38.40 T:tinyjambu256 38.19 38.19 39.23 T:drygascon128k16 38.19 38.19 39.13 T:drygascon128k32 38.19 38.26 39.17 T:drygascon128k56 38.58 38.61 39.62 T:giftcofb128v1 43.85 43.85 44.51 T:isapk128av20 46.63 46.70 47.60 T:drygascon256k32 48.85 48.96 49.58 T:subterraneanv1 49.51 49.55 50.17 T:spook128su384v1 49.55 49.55 50.07 T:spook128mu384v1 49.55 49.55 50.07 T:spook128su512v1 49.55 49.58 50.17 T:spook128mu512v1 54.13 55.00 55.07 T:isapk128v20 55.38 55.45 55.48 T:sestatetweaes128v1 61.70 61.77 62.01 T:elephant200v1 72.91 73.05 74.09 T:estatetweaes128v1 79.86 79.93 80.03 T:comet128chamv1 92.57 93.23 93.61 T:mixfeed 98.82 98.89 98.99 T:comet64chamv1 102.18 102.53 102.74 T:skinnyaeadtk3128128v1 102.22 103.64 103.85 T:comet64speckv1 192.42 192.98 193.53 T:romulusn1v1 215.51 216.31 218.19 T:skinnyaeadtk296128v1 216.35 217.63 220.23 T:skinnyaeadtk29664v1 222.53 222.77 226.17 T:romulusn3v1 233.98 235.27 237.00 T:pyjamask128aeadv1 243.78 244.75 246.93 T:pyjamask96aeadv1 271.31 272.73 274.78 T:romulusm1v1 280.13 281.03 283.32 T:sundaegift64v1 280.23 281.17 284.09 T:sundaegift0v1 280.20 281.20 283.50 T:sundaegift96v1 280.20 281.31 283.43 T:sundaegift128v1 281.24 282.11 284.50 T:romulusn2v1 281.13 282.25 284.50 T:skinnyaeadtk312864v1 281.55 282.32 283.77 T:skinnyaeadtk39664v1 283.98 285.30 286.90 T:skinnyaeadtk396128v1 302.56 303.39 305.68 T:romulusm3v1 310.23 312.42 313.63 T:wageae128v1 385.02 386.13 386.51 T:romulusm2v1 400.37 401.62 404.26 T:spoc128sliscplight256v1 420.33 422.52 423.70 T:spix128v1 427.55 427.97 430.12 T:paefforkskinnyb128t256n112v1 426.51 427.97 429.91 T:paefforkskinnyb128t192n48v1 426.96 428.00 431.51 T:saefforkskinnyb128t256n120v1 427.00 428.00 430.33 T:saefforkskinnyb128t192n56v1 564.14 567.17 569.70 T:paefforkskinnyb128t288n104v1 590.32 591.68 593.69 T:spoc64sliscplight192v1 712.72 716.26 717.02 T:hyenav1 744.35 747.16 748.83 T:oribatida192v11 964.93 967.08 968.85 T:aceae128v1 979.96 980.31 981.28 T:oribatida256v11 1009.89 1011.31 1013.88 T:paefforkskinnyb64t192n48v1 1188.25 1188.53 1189.85 T:orangezestv1 1217.24 1218.11 1224.74 T:twegift64lotusaeadv1 1268.87 1272.94 1274.22 T:twegift64locusaeadv1 1535.32 1536.36 1537.79 T:estatetwegift128v1 2431.99 2439.14 2462.09 T:elephant176v1 2567.68 2572.99 2586.84 T:elephant160v1 2896.35 2903.29 2906.97 T:photonbeetleaead128rate128v1 11444.62 11459.55 11482.47 T:photonbeetleaead128rate32v1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 5.00? 5.83? 12.85? T:xoodyakv1 5.49? 6.18? 13.33? ascon128av12 8.19? 9.37? 17.43? ascon80pqv12 8.26? 9.44? 20.14? ascon128v12 10.00? 10.76? 17.57? T:saeaes128a120t128v1 10.00? 10.83? 17.50? T:saeaes128a120t64v1 10.28? 11.87? 19.65? T:knot128v2 11.67? 12.64? 20.49? T:saeaes192a120t128v1 13.61? 14.93? 19.03? T:saeaes256a120t128v1 18.05 18.96 19.17 T:isapa128v20 18.82 18.96 18.96 T:tinyjambu256 17.57? 19.30? 25.49? T:isapa128av20 18.54? 19.37? 21.39? T:tinyjambu128 18.68? 19.37? 21.46? T:tinyjambu192 18.61? 20.00? 28.47? T:saeaes128a64t128v1 18.26? 20.07? 28.75? T:schwaemm256128v1 18.54? 20.42? 28.47? T:saeaes128a64t64v1 20.14? 21.60? 31.39? T:knot128v1 21.46? 23.12? 30.62? T:gimli24v1 21.53? 23.12? 30.21? T:schwaemm256256v1 21.67? 23.12? 30.42? T:saeaes192a64t128v1 21.67? 23.12? 30.42? T:saeaes192a64t64v1 23.40? 24.86? 32.64? T:comet128aesv1 24.79? 26.60? 34.93? T:saeaes256a64t128v1 25.00? 26.80? 43.12? T:saeaes256a64t64v1 23.61? 27.08? 32.57? T:saturninctrcascadev2 24.30? 27.08? 35.42? T:schwaemm192192v1 30.14? 32.01? 36.18? T:knot256 31.60 32.43 32.78 T:sestatetweaes128v1 30.62? 32.92? 36.87? T:grain128aead 31.39? 33.96? 34.93? T:knot192 35.14? 38.05? 39.37? T:schwaemm128128v1 36.39 38.89 39.10 T:drygascon128k56 36.46 38.96 39.03 T:drygascon128k16 36.80 38.96 39.10 T:drygascon128k32 37.78 40.42 40.69 T:giftcofb128v1 41.39 42.91 43.96 T:elephant200v1 43.47 43.61 45.35 T:isapk128av20 44.51 45.55 46.94 T:subterraneanv1 45.28 46.53 47.98 T:drygascon256k32 48.54 48.68 50.55 T:estatetweaes128v1 48.54 49.51 51.39 T:spook128mu384v1 48.47 49.51 51.53 T:spook128su512v1 48.54 49.65 51.60 T:spook128mu512v1 48.89 50.14 51.46 T:spook128su384v1 53.47 54.93 56.18 T:isapk128v20 78.47 78.61 80.69 T:comet128chamv1 90.90 92.08 92.91 T:mixfeed 98.05 98.47 99.16 T:comet64chamv1 103.33 103.61 104.44 T:skinnyaeadtk3128128v1 104.72 105.07 105.27 T:comet64speckv1 156.59 156.94 161.31 T:romulusn1v1 156.94 157.42 161.24 T:romulusm1v1 161.66 161.80 162.15 T:romulusm3v1 162.01 162.08 162.29 T:romulusn3v1 164.23 164.30 164.44 T:skinnyaeadtk296128v1 164.23 164.30 164.44 T:skinnyaeadtk29664v1 186.87 187.08 191.66 T:sundaegift96v1 187.01 187.15 187.28 T:sundaegift64v1 186.80 187.21 187.22 T:sundaegift128v1 187.01 187.22 187.49 T:sundaegift0v1 200.41 200.62 201.17 T:paefforkskinnyb128t256n112v1 200.48 200.76 200.96 T:paefforkskinnyb128t192n48v1 201.80 201.94 202.01 T:saefforkskinnyb128t192n56v1 201.87 203.26 205.06 T:saefforkskinnyb128t256n120v1 205.48 205.69 205.76 T:romulusm2v1 205.62 205.96 210.41 T:romulusn2v1 213.67 214.09 218.46 T:skinnyaeadtk396128v1 213.88 214.30 214.64 T:skinnyaeadtk312864v1 213.88 214.51 214.92 T:skinnyaeadtk39664v1 233.25 233.95 239.02 T:pyjamask128aeadv1 242.00 242.77 243.18 T:pyjamask96aeadv1 292.91 294.57 298.74 T:paefforkskinnyb128t288n104v1 311.65 328.74 329.78 T:wageae128v1 399.22 399.98 406.10 T:spoc128sliscplight256v1 419.15 422.00 425.82 T:spix128v1 487.48 489.15 493.31 T:oribatida192v11 519.42 524.91 526.51 T:paefforkskinnyb64t192n48v1 586.64 592.89 598.52 T:spoc64sliscplight192v1 648.03 654.07 654.90 T:oribatida256v11 712.06 714.83 716.01 T:hyenav1 807.33 813.51 818.23 T:twegift64locusaeadv1 809.20 814.20 817.33 T:twegift64lotusaeadv1 963.71 969.75 970.93 T:aceae128v1 1022.95 1026.42 1028.50 T:estatetwegift128v1 1183.08 1185.93 1189.12 T:orangezestv1 1603.83 1611.67 1614.73 T:elephant176v1 1701.88 1711.60 1718.27 T:elephant160v1 2886.62 2896.69 2905.93 T:photonbeetleaead128rate128v1 11448.02 11463.65 11484.76 T:photonbeetleaead128rate32v1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 5.00? 5.83? 12.78? T:xoodyakv1 5.49? 6.18? 13.33? ascon128av12 8.26? 9.38? 20.21? ascon128v12 8.33? 9.44? 17.43? ascon80pqv12 10.00? 10.76? 17.57? T:saeaes128a120t128v1 10.00? 10.83? 17.50? T:saeaes128a120t64v1 10.42? 12.01? 19.86? T:knot128v2 11.67? 12.50? 20.55? T:saeaes192a120t128v1 13.61? 14.37? 18.96? T:saeaes256a120t128v1 18.82 18.96 19.03 T:tinyjambu256 17.99 19.03 19.58 T:isapa128v20 17.57? 19.17? 25.49? T:isapa128av20 18.47? 19.44? 21.32? T:tinyjambu192 18.54? 19.51? 21.39? T:tinyjambu128 18.54? 20.00? 28.47? T:saeaes128a64t128v1 18.19? 20.07? 28.89? T:schwaemm256128v1 18.96? 20.42? 28.40? T:saeaes128a64t64v1 20.21? 21.73? 31.25? T:knot128v1 21.46? 23.06? 30.55? T:gimli24v1 21.67? 23.12? 30.42? T:saeaes192a64t128v1 21.67? 23.12? 30.55? T:saeaes192a64t64v1 21.53? 23.26? 30.21? T:schwaemm256256v1 23.47? 24.93? 32.64? T:comet128aesv1 24.86? 26.53? 35.00? T:saeaes256a64t128v1 25.55? 26.60? 43.19? T:saeaes256a64t64v1 24.58? 26.94? 32.43? T:saturninctrcascadev2 24.37? 27.22? 35.42? T:schwaemm192192v1 29.72? 31.60? 35.55? T:knot256 30.48? 32.64? 36.73? T:grain128aead 31.53 32.64 32.85 T:sestatetweaes128v1 31.39 33.68 34.72 T:knot192 35.21? 38.19? 39.37? T:schwaemm128128v1 36.39 38.96 39.10 T:drygascon128k16 36.73 38.96 39.10 T:drygascon128k32 36.39 38.96 39.17 T:drygascon128k56 37.78 40.35 40.55 T:giftcofb128v1 41.46 42.98 43.75 T:elephant200v1 43.75 43.89 45.55 T:isapk128av20 44.51 45.28 47.01 T:subterraneanv1 45.07 46.53 47.85 T:drygascon256k32 48.61 48.68 50.42 T:estatetweaes128v1 48.47 49.51 51.46 T:spook128mu384v1 48.47 49.51 51.53 T:spook128su512v1 48.47 49.58 51.46 T:spook128mu512v1 48.89 49.65 51.46 T:spook128su384v1 53.40 54.86 56.18 T:isapk128v20 79.72 79.86 81.32 T:comet128chamv1 91.11 91.94 93.33 T:mixfeed 98.33 98.54 99.58 T:comet64chamv1 103.26 103.61 104.44 T:skinnyaeadtk3128128v1 104.86 105.07 105.69 T:comet64speckv1 156.73 157.15 161.66 T:romulusn1v1 156.80 157.42 161.38 T:romulusm1v1 161.59 161.73 161.87 T:romulusm3v1 161.94 162.15 166.38 T:romulusn3v1 164.23 164.30 164.37 T:skinnyaeadtk29664v1 164.30 164.30 164.44 T:skinnyaeadtk296128v1 186.87 187.08 187.49 T:sundaegift96v1 186.87 187.15 187.22 T:sundaegift128v1 186.80 187.22 187.35 T:sundaegift64v1 187.08 187.22 187.49 T:sundaegift0v1 200.83 200.89 201.10 T:paefforkskinnyb128t192n48v1 200.83 200.96 201.03 T:paefforkskinnyb128t256n112v1 201.87 201.94 202.14 T:saefforkskinnyb128t192n56v1 201.94 202.01 203.32 T:saefforkskinnyb128t256n120v1 205.62 205.76 207.98 T:romulusm2v1 205.62 205.96 206.03 T:romulusn2v1 213.39 214.23 214.57 T:skinnyaeadtk312864v1 213.88 214.30 215.06 T:skinnyaeadtk39664v1 217.77 219.09 219.57 T:skinnyaeadtk396128v1 233.12 233.88 234.99 T:pyjamask128aeadv1 242.42 242.77 242.98 T:pyjamask96aeadv1 292.97 293.32 294.85 T:paefforkskinnyb128t288n104v1 307.70 328.95 329.78 T:wageae128v1 399.50 400.05 401.17 T:spoc128sliscplight256v1 418.87 420.82 423.80 T:spix128v1 486.79 488.73 493.11 T:oribatida192v11 522.48 524.63 530.26 T:paefforkskinnyb64t192n48v1 587.20 594.21 598.31 T:spoc64sliscplight192v1 647.54 650.18 650.67 T:oribatida256v11 708.44 714.28 715.18 T:hyenav1 808.51 812.95 816.77 T:twegift64locusaeadv1 811.43 813.65 819.41 T:twegift64lotusaeadv1 963.92 969.06 969.89 T:aceae128v1 1020.10 1023.15 1027.18 T:estatetwegift128v1 1183.15 1185.93 1189.05 T:orangezestv1 1605.63 1607.09 1615.63 T:elephant176v1 1700.00 1706.32 1718.61 T:elephant160v1 2905.51 2909.61 2933.64 T:photonbeetleaead128rate128v1 11449.76 11460.52 11476.98 T:photonbeetleaead128rate32v1

Cycles/byte for 0+long forgery 25% 50% 75% aead 5.00? 5.83? 12.78? T:xoodyakv1 5.49? 6.18? 13.26? ascon128av12 8.26? 9.44? 17.36? ascon80pqv12 8.26? 9.44? 20.21? ascon128v12 9.93? 10.76? 17.57? T:saeaes128a120t128v1 9.93? 10.83? 17.50? T:saeaes128a120t64v1 10.49? 12.01? 19.86? T:knot128v2 11.67? 12.57? 20.55? T:saeaes192a120t128v1 13.61? 14.38? 19.03? T:saeaes256a120t128v1 17.99 19.03 19.51 T:isapa128v20 18.82 19.03 19.03 T:tinyjambu256 17.57? 19.37? 25.42? T:isapa128av20 18.47? 19.51? 21.32? T:tinyjambu128 18.75 19.58 19.86 T:tinyjambu192 18.47? 19.72? 28.47? T:saeaes128a64t128v1 18.47? 19.86? 28.40? T:saeaes128a64t64v1 18.26? 20.00? 28.82? T:schwaemm256128v1 20.14? 21.67? 31.32? T:knot128v1 21.60? 23.05? 30.42? T:saeaes192a64t128v1 21.39? 23.12? 30.55? T:gimli24v1 21.67? 23.19? 30.42? T:saeaes192a64t64v1 21.46? 23.40? 30.48? T:schwaemm256256v1 23.26? 24.79? 32.29? T:comet128aesv1 24.86? 26.67? 34.93? T:saeaes256a64t128v1 25.55? 26.73? 43.12? T:saeaes256a64t64v1 25.07? 26.74? 35.42? T:schwaemm192192v1 24.03? 27.22? 32.50? T:saturninctrcascadev2 29.72? 31.60? 35.55? T:knot256 31.46 32.64 32.78 T:sestatetweaes128v1 30.55? 32.71? 36.73? T:grain128aead 31.32? 33.68? 34.93? T:knot192 35.28 38.33 39.16 T:schwaemm128128v1 36.32 38.96 39.10 T:drygascon128k16 36.32 38.96 39.10 T:drygascon128k56 36.73 38.96 39.10 T:drygascon128k32 37.78 40.48 40.55 T:giftcofb128v1 41.46 43.05 43.68 T:elephant200v1 43.75 43.82 45.48 T:isapk128av20 44.51 45.35 46.73 T:subterraneanv1 45.41 46.80 47.92 T:drygascon256k32 48.54 48.68 50.48 T:estatetweaes128v1 48.47 49.51 51.46 T:spook128su512v1 48.89 49.65 51.46 T:spook128su384v1 48.47 49.65 51.80 T:spook128mu384v1 48.54 49.65 51.80 T:spook128mu512v1 53.33 54.86 56.18 T:isapk128v20 79.72 79.93 81.39 T:comet128chamv1 91.45 92.08 92.70 T:mixfeed 98.33 98.54 99.65 T:comet64chamv1 103.19 103.40 103.68 T:skinnyaeadtk3128128v1 102.98 104.72 105.41 T:comet64speckv1 156.38 157.15 157.63 T:romulusm1v1 156.80 157.22 161.17 T:romulusn1v1 161.59 161.73 161.87 T:romulusm3v1 161.94 162.08 162.15 T:romulusn3v1 164.23 164.30 164.44 T:skinnyaeadtk296128v1 164.30 164.37 164.44 T:skinnyaeadtk29664v1 186.94 187.08 187.22 T:sundaegift96v1 186.80 187.15 187.28 T:sundaegift64v1 186.94 187.15 187.28 T:sundaegift128v1 187.08 187.28 191.59 T:sundaegift0v1 200.82 200.89 201.03 T:paefforkskinnyb128t192n48v1 200.83 200.96 201.24 T:paefforkskinnyb128t256n112v1 201.94 202.14 204.64 T:saefforkskinnyb128t256n120v1 201.94 202.21 206.31 T:saefforkskinnyb128t192n56v1 205.41 205.69 205.82 T:romulusm2v1 205.69 206.03 206.17 T:romulusn2v1 213.33 213.95 216.87 T:skinnyaeadtk312864v1 213.53 214.23 217.28 T:skinnyaeadtk39664v1 218.46 219.51 224.37 T:skinnyaeadtk396128v1 233.19 233.74 234.78 T:pyjamask128aeadv1 242.07 242.63 242.98 T:pyjamask96aeadv1 292.21 293.67 296.45 T:paefforkskinnyb128t288n104v1 308.95 310.27 313.04 T:wageae128v1 399.64 399.92 405.47 T:spoc128sliscplight256v1 419.43 421.30 426.30 T:spix128v1 486.79 488.52 489.43 T:oribatida192v11 524.15 524.91 527.90 T:paefforkskinnyb64t192n48v1 586.92 592.20 596.99 T:spoc64sliscplight192v1 647.34 650.18 654.77 T:oribatida256v11 711.50 714.76 715.39 T:hyenav1 809.55 813.65 816.63 T:twegift64locusaeadv1 811.36 814.76 818.09 T:twegift64lotusaeadv1 963.78 965.66 971.56 T:aceae128v1 1020.31 1023.08 1027.67 T:estatetwegift128v1 1183.15 1185.86 1188.70 T:orangezestv1 1602.65 1608.90 1614.66 T:elephant176v1 1703.75 1709.03 1725.63 T:elephant160v1 2900.79 2905.44 2912.32 T:photonbeetleaead128rate128v1 11448.86 11460.94 11480.52 T:photonbeetleaead128rate32v1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 6.34 6.34 6.38 ascon128av12 8.46 8.51 8.51 T:xoodyakv1 9.46 9.50 9.59 ascon128v12 9.50 9.50 9.55 ascon80pqv12 12.28 12.33 12.41 T:knot128v2 15.02 15.49 15.54 T:saeaes128a120t64v1 15.10 15.49 15.54 T:saeaes128a120t128v1 17.58 18.18 18.27 T:saeaes192a120t128v1 19.27 19.92 20.01 T:saeaes128a64t64v1 19.31 19.96 20.01 T:saeaes128a64t128v1 19.66 20.22 20.36 T:schwaemm256128v1 20.14 20.36 20.83 T:saeaes256a120t128v1 21.14 21.44 21.83 T:knot128v1 22.61 22.70 23.48 T:saeaes192a64t128v1 22.66 22.70 23.48 T:saeaes192a64t64v1 22.74 22.87 23.65 T:schwaemm256256v1 22.87 22.96 23.70 T:gimli24v1 24.43 24.52 25.30 T:isapa128av20 24.57 24.70 25.52 T:comet128aesv1 25.95 25.95 26.87 T:saeaes256a64t128v1 25.95 26.00 26.87 T:saeaes256a64t64v1 26.39 26.47 27.30 T:schwaemm192192v1 27.26 27.30 28.21 T:saturninctrcascadev2 31.55 31.60 32.59 T:knot256 32.42 32.42 33.51 T:tinyjambu128 32.85 32.94 34.03 T:grain128aead 33.29 33.33 34.42 T:knot192 34.81 34.89 36.07 T:tinyjambu192 36.93 37.02 38.24 T:schwaemm128128v1 37.67 37.72 39.02 T:tinyjambu256 37.98 38.02 39.28 T:drygascon128k56 37.98 38.06 39.28 T:drygascon128k16 38.02 38.06 39.32 T:drygascon128k32 38.97 39.02 40.32 T:giftcofb128v1 40.06 40.10 41.45 T:isapa128v20 46.87 47.00 48.00 T:drygascon256k32 50.74 50.74 51.69 T:spook128mu512v1 50.74 50.78 51.78 T:spook128mu384v1 50.74 50.78 51.73 T:spook128su512v1 50.74 50.78 51.86 T:spook128su384v1 50.74 50.82 51.73 T:subterraneanv1 55.94 56.03 56.72 T:sestatetweaes128v1 60.81 60.85 61.28 T:isapk128av20 63.84 64.06 64.45 T:elephant200v1 73.35 73.43 73.57 T:estatetweaes128v1 80.07 80.16 80.21 T:comet128chamv1 94.27 94.70 95.57 T:mixfeed 99.30 99.39 102.17 T:comet64chamv1 102.90 103.90 104.42 T:comet64speckv1 105.51 105.68 105.86 T:skinnyaeadtk3128128v1 122.87 123.00 123.52 T:isapk128v20 165.44 165.53 165.62 T:skinnyaeadtk296128v1 165.44 165.57 165.71 T:skinnyaeadtk29664v1 194.96 195.13 197.47 T:romulusn1v1 215.53 215.66 215.88 T:skinnyaeadtk39664v1 215.66 215.83 218.31 T:skinnyaeadtk312864v1 215.83 216.05 218.35 T:skinnyaeadtk396128v1 223.91 223.99 224.12 T:romulusn3v1 238.40 238.53 241.27 T:pyjamask128aeadv1 248.99 249.08 251.68 T:pyjamask96aeadv1 259.58 259.63 260.02 T:saefforkskinnyb128t192n56v1 259.71 259.80 262.58 T:paefforkskinnyb128t192n48v1 259.71 259.80 262.49 T:paefforkskinnyb128t256n112v1 260.28 260.32 264.01 T:saefforkskinnyb128t256n120v1 274.08 274.25 274.56 T:romulusm1v1 282.24 282.28 285.10 T:sundaegift0v1 283.24 283.28 283.58 T:sundaegift128v1 283.19 283.32 286.06 T:sundaegift64v1 283.24 283.37 286.06 T:sundaegift96v1 283.45 283.58 286.40 T:romulusn2v1 304.24 304.37 307.06 T:romulusm3v1 322.30 335.53 338.22 T:wageae128v1 375.59 375.94 377.72 T:paefforkskinnyb128t288n104v1 386.14 386.18 389.18 T:romulusm2v1 403.50 403.67 404.24 T:spoc128sliscplight256v1 433.97 434.23 436.14 T:spix128v1 593.68 596.37 597.85 T:spoc64sliscplight192v1 666.73 669.38 671.28 T:paefforkskinnyb64t192n48v1 713.21 714.95 717.59 T:hyenav1 742.85 743.89 747.02 T:oribatida192v11 983.12 985.77 986.33 T:aceae128v1 989.15 991.45 992.11 T:oribatida256v11 1199.00 1201.69 1202.04 T:orangezestv1 1221.87 1225.39 1232.76 T:twegift64locusaeadv1 1225.17 1226.47 1229.21 T:twegift64lotusaeadv1 1537.44 1540.00 1543.65 T:estatetwegift128v1 2450.03 2451.42 2453.68 T:elephant176v1 2602.46 2604.89 2614.31 T:elephant160v1 2906.83 2908.52 2911.30 T:photonbeetleaead128rate128v1 11468.95 11474.51 11488.53 T:photonbeetleaead128rate32v1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 6.25 6.29 6.34 ascon128av12 8.46 8.46 8.55 T:xoodyakv1 9.46 9.50 9.64 ascon128v12 9.50 9.50 9.55 ascon80pqv12 12.41 12.46 12.72 T:knot128v2 14.84 14.93 15.15 T:saeaes128a120t128v1 14.67 14.93 15.15 T:saeaes128a120t64v1 17.06 17.58 17.75 T:saeaes192a120t128v1 18.71 19.31 19.66 T:saeaes128a64t64v1 18.79 19.40 19.70 T:saeaes128a64t128v1 19.57 20.18 20.49 T:saeaes256a120t128v1 19.70 20.31 20.57 T:schwaemm256128v1 21.09 21.79 21.92 T:knot128v1 22.05 22.53 22.87 T:saeaes192a64t64v1 22.05 22.79 22.83 T:saeaes192a64t128v1 22.53 22.96 23.31 T:gimli24v1 22.74 23.31 23.52 T:schwaemm256256v1 24.43 24.48 25.61 T:isapa128av20 24.83 25.09 25.87 T:comet128aesv1 25.35 25.43 26.56 T:saeaes256a64t128v1 25.39 25.48 26.52 T:saeaes256a64t64v1 26.43 26.47 27.47 T:schwaemm192192v1 26.95 27.04 27.99 T:saturninctrcascadev2 31.12 31.16 32.16 T:knot256 32.51 32.55 33.64 T:tinyjambu128 33.33 33.38 34.33 T:knot192 34.63 34.68 35.94 T:grain128aead 34.85 34.89 36.15 T:tinyjambu192 37.11 37.19 38.76 T:schwaemm128128v1 37.76 37.89 39.50 T:tinyjambu256 38.58 38.63 40.23 T:drygascon128k56 38.58 38.63 40.23 T:drygascon128k32 38.63 38.63 40.15 T:drygascon128k16 38.97 39.06 40.58 T:giftcofb128v1 40.10 40.19 41.75 T:isapa128v20 47.22 47.35 48.57 T:drygascon256k32 50.74 50.82 52.08 T:subterraneanv1 50.87 50.87 52.08 T:spook128su512v1 50.87 50.87 52.12 T:spook128mu512v1 50.87 50.91 52.12 T:spook128su384v1 50.87 50.91 52.30 T:spook128mu384v1 55.99 55.99 56.99 T:sestatetweaes128v1 61.07 61.11 62.02 T:isapk128av20 63.32 63.45 64.23 T:elephant200v1 73.43 73.52 73.78 T:estatetweaes128v1 81.25 81.33 81.90 T:comet128chamv1 93.66 94.05 95.09 T:mixfeed 99.91 100.17 102.90 T:comet64chamv1 103.86 104.68 104.90 T:comet64speckv1 104.81 105.20 105.72 T:skinnyaeadtk3128128v1 123.04 123.09 125.95 T:isapk128v20 195.00 195.17 197.91 T:romulusn1v1 217.40 218.35 219.83 T:skinnyaeadtk296128v1 218.00 219.00 220.65 T:skinnyaeadtk29664v1 224.34 224.43 224.60 T:romulusn3v1 239.66 239.75 242.39 T:pyjamask128aeadv1 248.51 248.60 251.34 T:pyjamask96aeadv1 274.29 274.60 274.99 T:romulusm1v1 282.19 282.24 285.06 T:sundaegift0v1 283.15 283.19 283.28 T:sundaegift64v1 283.19 283.24 284.23 T:sundaegift128v1 283.15 283.28 285.93 T:sundaegift96v1 283.63 283.67 283.76 T:romulusn2v1 283.45 283.93 286.53 T:skinnyaeadtk312864v1 283.80 284.28 286.88 T:skinnyaeadtk39664v1 285.32 285.49 288.27 T:skinnyaeadtk396128v1 304.15 304.24 304.37 T:romulusm3v1 322.43 335.75 336.32 T:wageae128v1 386.66 386.96 389.74 T:romulusm2v1 403.46 403.67 406.28 T:spoc128sliscplight256v1 427.67 427.85 430.80 T:paefforkskinnyb128t192n48v1 427.76 428.07 430.63 T:paefforkskinnyb128t256n112v1 428.11 428.24 430.93 T:saefforkskinnyb128t256n120v1 428.15 429.67 431.71 T:saefforkskinnyb128t192n56v1 433.88 434.31 437.01 T:spix128v1 565.04 566.77 569.38 T:paefforkskinnyb128t288n104v1 594.81 596.42 596.68 T:spoc64sliscplight192v1 713.08 714.77 717.46 T:hyenav1 750.97 752.92 754.05 T:oribatida192v11 983.29 985.86 987.29 T:aceae128v1 989.02 991.89 992.84 T:oribatida256v11 1009.03 1011.46 1011.77 T:paefforkskinnyb64t192n48v1 1198.56 1201.30 1202.77 T:orangezestv1 1226.17 1229.21 1241.75 T:twegift64lotusaeadv1 1277.08 1277.86 1281.94 T:twegift64locusaeadv1 1538.31 1539.39 1541.09 T:estatetwegift128v1 2449.17 2450.82 2454.85 T:elephant176v1 2596.08 2602.07 2610.49 T:elephant160v1 2906.57 2910.48 2914.77 T:photonbeetleaead128rate128v1 11457.80 11468.65 11480.32 T:photonbeetleaead128rate32v1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 6.29 6.29 6.34 ascon128av12 8.46 8.51 8.77 T:xoodyakv1 9.46 9.50 9.55 ascon80pqv12 9.46 9.50 9.55 ascon128v12 12.41 12.46 12.63 T:knot128v2 14.97 15.45 15.71 T:saeaes128a120t64v1 15.32 15.45 15.62 T:saeaes128a120t128v1 17.53 18.14 18.45 T:saeaes192a120t128v1 19.18 19.83 20.14 T:saeaes128a64t64v1 19.23 19.88 20.18 T:isapa128av20 19.27 19.92 20.18 T:saeaes128a64t128v1 20.05 20.75 20.83 T:saeaes256a120t128v1 20.27 20.83 21.05 T:schwaemm256128v1 21.09 21.79 21.83 T:knot128v1 22.53 22.92 23.35 T:gimli24v1 22.53 23.00 23.48 T:saeaes192a64t64v1 22.53 23.05 23.39 T:saeaes192a64t128v1 23.31 23.65 24.09 T:schwaemm256256v1 24.78 25.00 25.82 T:isapa128v20 24.87 25.13 25.82 T:comet128aesv1 25.87 25.87 26.87 T:saeaes256a64t128v1 25.82 25.95 27.08 T:saeaes256a64t64v1 27.00 27.04 27.91 T:schwaemm192192v1 26.95 27.86 28.21 T:saturninctrcascadev2 31.12 31.21 32.20 T:knot256 32.46 32.51 33.59 T:tinyjambu128 33.25 33.33 34.42 T:knot192 34.63 34.72 35.94 T:grain128aead 34.98 35.02 36.33 T:tinyjambu192 37.67 37.76 39.28 T:schwaemm128128v1 37.80 37.89 39.45 T:tinyjambu256 38.58 38.63 40.15 T:drygascon128k56 38.58 38.63 40.28 T:drygascon128k32 38.58 38.63 40.28 T:drygascon128k16 39.02 39.10 40.71 T:giftcofb128v1 47.52 47.57 49.00 T:isapk128av20 47.44 47.61 48.91 T:drygascon256k32 50.78 50.87 52.17 T:subterraneanv1 50.87 50.91 52.12 T:spook128mu512v1 50.87 50.91 52.25 T:spook128mu384v1 50.87 50.95 52.21 T:spook128su384v1 50.87 50.95 52.43 T:spook128su512v1 55.99 56.03 57.07 T:sestatetweaes128v1 63.28 63.45 64.10 T:elephant200v1 73.43 73.56 76.34 T:estatetweaes128v1 81.25 81.29 81.33 T:comet128chamv1 81.42 81.51 81.59 T:isapk128v20 93.83 94.01 94.74 T:mixfeed 99.78 99.87 102.69 T:comet64chamv1 104.12 104.64 104.81 T:comet64speckv1 104.77 104.90 105.25 T:skinnyaeadtk3128128v1 194.91 195.13 197.61 T:romulusn1v1 216.61 218.13 219.39 T:skinnyaeadtk296128v1 217.09 218.48 220.43 T:skinnyaeadtk29664v1 224.38 224.56 227.16 T:romulusn3v1 239.66 239.83 242.79 T:pyjamask128aeadv1 248.56 248.64 251.86 T:pyjamask96aeadv1 274.42 274.95 277.33 T:romulusm1v1 282.28 282.37 285.06 T:sundaegift0v1 283.11 283.15 286.10 T:sundaegift64v1 282.93 283.24 283.76 T:skinnyaeadtk39664v1 283.15 283.28 286.06 T:sundaegift128v1 283.24 283.37 285.93 T:sundaegift96v1 283.63 283.76 286.49 T:romulusn2v1 283.24 283.84 286.10 T:skinnyaeadtk312864v1 285.93 286.27 288.62 T:skinnyaeadtk396128v1 304.24 304.37 306.89 T:romulusm3v1 317.09 319.61 323.42 T:wageae128v1 386.92 387.09 389.57 T:romulusm2v1 403.33 403.59 406.10 T:spoc128sliscplight256v1 427.67 427.80 428.06 T:paefforkskinnyb128t192n48v1 427.89 428.06 431.41 T:paefforkskinnyb128t256n112v1 428.15 428.28 430.97 T:saefforkskinnyb128t256n120v1 428.28 429.19 432.06 T:saefforkskinnyb128t192n56v1 434.18 434.71 437.79 T:spix128v1 565.52 567.77 568.73 T:paefforkskinnyb128t288n104v1 592.73 595.33 596.81 T:spoc64sliscplight192v1 713.25 714.77 716.94 T:hyenav1 751.06 753.96 754.79 T:oribatida192v11 983.08 985.33 986.03 T:aceae128v1 988.63 991.11 992.67 T:oribatida256v11 1009.21 1011.59 1012.24 T:paefforkskinnyb64t192n48v1 1198.56 1201.30 1202.25 T:orangezestv1 1226.25 1227.73 1231.46 T:twegift64lotusaeadv1 1275.21 1276.64 1279.46 T:twegift64locusaeadv1 1538.92 1541.78 1542.13 T:estatetwegift128v1 2451.38 2452.33 2455.24 T:elephant176v1 2592.91 2596.69 2607.32 T:elephant160v1 2905.27 2909.00 2912.00 T:photonbeetleaead128rate128v1 11461.36 11474.25 11495.95 T:photonbeetleaead128rate32v1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.38? 9.38? 18.75? ascon128av12 11.46? 12.50? 21.88? ascon80pqv12 12.50? 12.50? 21.87? ascon128v12 14.58? 14.59? 26.04? T:xoodyakv1 18.75? 18.75? 29.16? T:saeaes128a120t128v1 18.75? 18.75? 29.16? T:saeaes128a120t64v1 19.80? 20.84? 32.29? T:knot128v2 21.87? 21.88? 33.33? T:saeaes192a120t128v1 21.88? 21.88? 31.24? T:saeaes128a64t64v1 21.88? 22.91? 31.25? T:saeaes128a64t128v1 25.00? 25.00? 32.29? T:saeaes256a120t128v1 25.00? 26.04? 32.29? T:saeaes192a64t128v1 25.00? 26.04? 32.29? T:saeaes192a64t64v1 27.08? 27.09? 34.38? T:knot128v1 29.17? 30.20? 38.54? T:saeaes256a64t128v1 29.17? 30.20? 46.87? T:saeaes256a64t64v1 32.29? 32.29? 41.66? T:gimli24v1 32.29? 33.34? 41.66? T:schwaemm256128v1 35.41? 35.41? 41.66? T:comet128aesv1 36.46? 37.50? 43.75? T:schwaemm256256v1 38.54 38.54 39.58 T:tinyjambu128 39.58 40.62 41.66 T:grain128aead 41.66 41.66 42.70 T:tinyjambu192 43.74? 43.75? 51.04? T:schwaemm192192v1 44.79 44.79 44.79 T:tinyjambu256 44.79 44.80 45.83 T:knot192 44.79 45.83 45.84 T:drygascon128k56 45.83 45.83 45.84 T:drygascon128k32 45.83 45.84 46.87 T:drygascon128k16 46.87 46.88 46.88 T:giftcofb128v1 47.91 47.91 48.95 T:schwaemm128128v1 47.91 47.91 48.96 T:knot256 54.16? 54.16? 64.58? T:saturninctrcascadev2 59.38? 60.41? 70.83? T:isapa128av20 60.41 60.41 60.41 T:drygascon256k32 67.70 68.75 68.75 T:sestatetweaes128v1 77.08 78.12 78.12 T:spook128mu512v1 77.08 78.12 78.12 T:spook128su384v1 77.09 78.12 78.12 T:spook128su512v1 77.09 78.12 78.12 T:spook128mu384v1 84.37 84.38 84.38 T:estatetweaes128v1 94.79 94.79 95.83 T:subterraneanv1 94.79 94.79 96.87 T:elephant200v1 108.33 108.33 109.37 T:comet128chamv1 119.78 119.79 120.83 T:comet64chamv1 123.95 124.99 126.04 T:comet64speckv1 142.70 143.74 144.79 T:mixfeed 155.20 156.24 156.25 T:skinnyaeadtk3128128v1 191.66 192.70 193.74 T:isapk128av20 192.70 192.70 193.74 T:skinnyaeadtk296128v1 192.70 192.70 193.74 T:skinnyaeadtk29664v1 241.66 242.70 243.74 T:romulusn1v1 249.99 251.04 257.28 T:skinnyaeadtk396128v1 251.03 252.07 254.16 T:skinnyaeadtk312864v1 251.03 252.07 255.20 T:skinnyaeadtk39664v1 257.28 257.29 264.57 T:romulusn3v1 260.41 269.78 272.91 T:paefforkskinnyb128t256n112v1 268.74 269.78 274.98 T:saefforkskinnyb128t192n56v1 269.77 269.78 276.03 T:paefforkskinnyb128t192n48v1 269.78 271.86 278.12 T:saefforkskinnyb128t256n120v1 316.66 317.70 322.90 T:sundaegift0v1 322.91 324.98 328.11 T:romulusm1v1 323.95 324.98 328.12 T:romulusn2v1 339.57 341.65 344.78 T:sundaegift64v1 339.57 341.66 345.82 T:sundaegift128v1 339.57 341.66 348.95 T:isapa128v20 341.65 341.66 343.73 T:sundaegift96v1 352.07 362.49 370.82 T:pyjamask128aeadv1 354.16 365.62 370.82 T:romulusm3v1 379.15 381.23 384.36 T:pyjamask96aeadv1 381.23 392.69 394.77 T:paefforkskinnyb128t288n104v1 447.90 462.48 471.86 T:romulusm2v1 454.15 468.73 476.02 T:spoc128sliscplight256v1 471.86 477.06 490.60 T:wageae128v1 666.64 678.10 691.64 T:spoc64sliscplight192v1 678.10 680.18 704.14 T:paefforkskinnyb64t192n48v1 727.05 731.23 753.09 T:spix128v1 811.43 812.47 837.47 T:hyenav1 972.88 977.05 1011.42 T:oribatida192v11 1229.12 1230.16 1255.16 T:oribatida256v11 1293.70 1294.74 1313.49 T:isapk128v20 1368.70 1375.98 1400.98 T:twegift64lotusaeadv1 1368.70 1375.98 1393.70 T:twegift64locusaeadv1 1391.61 1392.66 1431.20 T:aceae128v1 1482.23 1483.27 1503.07 T:orangezestv1 1672.85 1674.94 1738.48 T:estatetwegift128v1 3054.05 3058.22 3070.71 T:elephant176v1 3037.38 3095.71 3226.95 T:photonbeetleaead128rate128v1 3484.24 3509.24 3535.27 T:elephant160v1 11550.59 11626.63 11742.25 T:photonbeetleaead128rate32v1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.38? 9.38? 18.75? ascon128av12 12.49? 12.50? 21.88? ascon128v12 12.50? 12.50? 21.88? ascon80pqv12 14.58? 14.59? 26.04? T:xoodyakv1 17.71? 17.71? 28.12? T:saeaes128a120t64v1 17.71? 18.75? 28.12? T:saeaes128a120t128v1 20.83? 20.84? 32.29? T:knot128v2 20.84? 20.84? 33.33? T:saeaes192a120t128v1 21.88? 21.88? 30.20? T:saeaes128a64t64v1 21.88? 21.88? 30.21? T:saeaes128a64t128v1 23.96? 25.00? 31.25? T:saeaes256a120t128v1 25.00? 25.00? 32.29? T:saeaes192a64t128v1 25.00? 25.00? 32.29? T:saeaes192a64t64v1 27.08? 27.09? 34.38? T:knot128v1 29.16? 29.16? 45.83? T:saeaes256a64t64v1 29.16? 29.17? 37.50? T:saeaes256a64t128v1 31.25? 32.29? 40.62? T:gimli24v1 32.29? 33.33? 41.66? T:schwaemm256128v1 36.46? 37.50? 43.75? T:comet128aesv1 37.50? 37.50? 43.75? T:schwaemm256256v1 38.54 38.54 39.59 T:tinyjambu128 41.66 41.66 42.70 T:grain128aead 41.66 41.66 42.70 T:tinyjambu192 43.75? 44.79? 52.08? T:schwaemm192192v1 44.79 44.79 44.79 T:tinyjambu256 44.79 44.79 45.84 T:knot192 46.87 46.88 46.88 T:drygascon128k32 46.87 46.88 46.88 T:drygascon128k56 46.87 46.88 46.88 T:giftcofb128v1 46.87 46.88 47.91 T:drygascon128k16 47.91 47.91 48.96 T:knot256 47.91? 47.91? 57.29? T:saturninctrcascadev2 48.95 48.95 48.96 T:schwaemm128128v1 60.41? 60.41? 70.83? T:isapa128av20 60.41 61.45 61.45 T:drygascon256k32 68.74 68.75 68.75 T:sestatetweaes128v1 80.20 81.24 81.25 T:spook128su384v1 80.20 81.24 81.25 T:spook128su512v1 80.21 81.24 81.25 T:spook128mu384v1 81.24 81.25 81.25 T:spook128mu512v1 85.41 85.41 86.45 T:estatetweaes128v1 93.75 94.78 94.79 T:elephant200v1 94.79 95.83 95.83 T:subterraneanv1 110.41 110.41 111.45 T:comet128chamv1 121.87 121.88 122.91 T:comet64chamv1 126.03 126.04 127.08 T:comet64speckv1 142.70 142.70 143.75 T:mixfeed 154.16 155.20 155.20 T:skinnyaeadtk3128128v1 193.74 193.74 194.79 T:isapk128av20 241.66 241.66 245.82 T:romulusn1v1 245.82 247.91 253.12 T:skinnyaeadtk296128v1 245.82 247.91 256.24 T:skinnyaeadtk29664v1 257.28 257.28 258.33 T:romulusn3v1 316.66 317.70 321.86 T:sundaegift0v1 320.82 321.87 324.98 T:skinnyaeadtk39664v1 320.82 322.90 327.07 T:skinnyaeadtk312864v1 323.95 326.02 329.16 T:skinnyaeadtk396128v1 324.98 326.03 328.11 T:romulusn2v1 334.36 336.45 338.53 T:romulusm1v1 339.57 340.61 342.70 T:isapa128v20 340.61 341.65 346.86 T:sundaegift128v1 339.57 341.66 344.77 T:sundaegift64v1 340.61 341.66 344.78 T:sundaegift96v1 352.07 363.53 370.82 T:pyjamask128aeadv1 354.16 366.65 371.86 T:romulusm3v1 376.02 380.20 386.45 T:pyjamask96aeadv1 429.15 429.16 443.73 T:paefforkskinnyb128t256n112v1 429.15 443.73 452.07 T:paefforkskinnyb128t192n48v1 429.16 443.73 451.02 T:saefforkskinnyb128t192n56v1 436.44 443.73 447.90 T:saefforkskinnyb128t256n120v1 447.91 463.52 470.82 T:romulusm2v1 454.15 469.77 477.06 T:spoc128sliscplight256v1 474.98 479.15 497.90 T:wageae128v1 569.77 581.23 585.40 T:paefforkskinnyb128t288n104v1 666.64 674.98 697.89 T:spoc64sliscplight192v1 728.09 730.18 751.01 T:spix128v1 809.34 813.51 837.47 T:hyenav1 1008.30 1009.34 1042.67 T:paefforkskinnyb64t192n48v1 981.21 1010.38 1021.84 T:oribatida192v11 1227.04 1230.16 1277.03 T:oribatida256v11 1297.87 1297.87 1322.87 T:isapk128v20 1369.73 1374.95 1398.90 T:twegift64lotusaeadv1 1390.57 1391.61 1421.82 T:aceae128v1 1413.48 1417.66 1435.37 T:twegift64locusaeadv1 1482.23 1483.27 1503.07 T:orangezestv1 1670.77 1672.85 1680.14 T:estatetwegift128v1 2978.01 2994.67 3003.01 T:photonbeetleaead128rate128v1 3047.80 3053.00 3119.67 T:elephant176v1 3459.23 3506.12 3538.41 T:elephant160v1 11457.88 11540.17 11591.22 T:photonbeetleaead128rate32v1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.38? 9.38? 18.75? ascon128av12 12.50? 12.50? 21.88? ascon128v12 12.50? 12.50? 21.88? ascon80pqv12 14.58? 14.59? 26.04? T:xoodyakv1 18.74? 18.75? 29.16? T:saeaes128a120t64v1 18.75? 18.75? 29.16? T:saeaes128a120t128v1 20.83? 20.84? 32.29? T:knot128v2 20.84? 21.88? 33.33? T:saeaes192a120t128v1 21.88? 21.88? 31.25? T:saeaes128a64t128v1 21.88? 21.88? 31.25? T:saeaes128a64t64v1 25.00? 25.00? 32.29? T:saeaes256a120t128v1 25.00? 26.04? 32.29? T:saeaes192a64t128v1 25.00? 26.04? 32.29? T:saeaes192a64t64v1 27.09? 27.09? 34.37? T:knot128v1 29.16? 30.21? 38.54? T:saeaes256a64t128v1 29.16? 30.21? 45.84? T:saeaes256a64t64v1 31.25? 31.25? 40.62? T:gimli24v1 33.34? 34.37? 42.70? T:schwaemm256128v1 36.46? 37.50? 43.74? T:comet128aesv1 37.50? 38.54? 44.79? T:schwaemm256256v1 38.54 38.54 39.58 T:tinyjambu128 39.58? 39.59? 46.87? T:isapa128av20 41.66 41.66 42.70 T:grain128aead 41.66 41.66 42.70 T:tinyjambu192 43.75? 44.79? 52.08? T:schwaemm192192v1 44.79 44.79 44.79 T:tinyjambu256 44.79 44.79 45.83 T:knot192 45.84 46.88 46.88 T:drygascon128k56 46.87 46.88 46.88 T:drygascon128k32 46.87 46.88 46.88 T:giftcofb128v1 46.88 46.88 47.91 T:drygascon128k16 47.91 47.91 48.95 T:knot256 47.91? 47.92? 56.25? T:saturninctrcascadev2 48.95 48.96 50.00 T:schwaemm128128v1 60.42 61.45 61.46 T:drygascon256k32 68.74 68.74 68.75 T:sestatetweaes128v1 80.20 81.24 81.25 T:spook128mu512v1 80.20 81.24 81.25 T:spook128su384v1 80.20 81.24 81.25 T:spook128su512v1 81.24 81.24 81.25 T:spook128mu384v1 85.41 85.41 85.41 T:estatetweaes128v1 93.75 94.79 94.79 T:elephant200v1 94.79 95.83 95.84 T:subterraneanv1 109.38 110.41 110.41 T:comet128chamv1 121.87 121.87 121.88 T:comet64chamv1 122.91 126.03 128.12 T:isapk128av20 124.99 126.04 127.08 T:comet64speckv1 143.74 144.79 146.88 T:mixfeed 154.16 155.20 157.28 T:skinnyaeadtk3128128v1 177.08 178.12 179.16 T:isapa128v20 241.66 242.70 245.83 T:romulusn1v1 246.86 247.91 251.03 T:skinnyaeadtk296128v1 246.87 247.91 252.08 T:skinnyaeadtk29664v1 257.28 257.29 265.61 T:romulusn3v1 316.65 316.66 320.82 T:sundaegift0v1 320.82 322.91 326.02 T:skinnyaeadtk312864v1 321.86 322.91 324.99 T:skinnyaeadtk39664v1 324.99 326.03 334.36 T:romulusn2v1 324.98 327.07 331.23 T:skinnyaeadtk396128v1 334.36 335.41 338.52 T:romulusm1v1 335.41 340.62 346.86 T:sundaegift64v1 340.61 341.65 343.73 T:sundaegift96v1 340.62 341.66 344.77 T:sundaegift128v1 352.07 362.49 368.73 T:pyjamask128aeadv1 361.44 366.65 369.78 T:romulusm3v1 367.70 380.19 386.44 T:pyjamask96aeadv1 429.15 430.20 444.77 T:paefforkskinnyb128t256n112v1 428.11 442.70 448.94 T:paefforkskinnyb128t192n48v1 433.31 443.73 449.98 T:saefforkskinnyb128t256n120v1 430.19 443.73 451.02 T:saefforkskinnyb128t192n56v1 449.98 463.52 469.77 T:romulusm2v1 452.06 466.65 470.82 T:wageae128v1 453.11 470.81 474.98 T:spoc128sliscplight256v1 567.69 573.94 589.56 T:paefforkskinnyb128t288n104v1 666.64 676.02 692.68 T:spoc64sliscplight192v1 679.14 680.19 703.10 T:isapk128v20 726.02 729.14 755.18 T:spix128v1 810.38 812.47 839.55 T:hyenav1 981.21 986.42 1020.80 T:oribatida192v11 1008.30 1009.34 1046.83 T:paefforkskinnyb64t192n48v1 1227.04 1229.12 1256.20 T:oribatida256v11 1369.74 1382.23 1408.28 T:twegift64lotusaeadv1 1389.52 1390.57 1416.61 T:aceae128v1 1412.45 1416.61 1443.70 T:twegift64locusaeadv1 1482.23 1483.27 1502.02 T:orangezestv1 1670.77 1672.85 1680.14 T:estatetwegift128v1 3000.93 3009.26 3029.05 T:photonbeetleaead128rate128v1 3047.80 3053.01 3105.09 T:elephant176v1 3447.78 3488.41 3521.74 T:elephant160v1 11509.97 11566.21 11627.67 T:photonbeetleaead128rate32v1