VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

General information:	Introduction	eBASH	eBASC	eBAEAD	eBATS	SUPERCOP	XBX	Computers

How to submit new software:	Tips	hash	stream	aead	dh	kem	encrypt	sign

List of primitives measured:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

Measurements indexed by machine:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

List of subroutines:	verify	decode	encode	sort	core	hashblocks	scalarmult

Measurements of NISTLWC cipher candidates, indexed by machine

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each cipher and each implementation.

amd64; Zen2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; `renoir`, `supercop-20230530`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

0.90 0.93 0.97 T:aes256gcmv1

1.51 1.52 1.52 T:aes128gcmv1

1.65 1.67 1.68 aes256gcmv1

6.40 6.42 6.43 ascon128av12

9.37 9.38 9.40 ascon128v12

9.40 9.42 9.42 ascon80pqv12

11.19 11.22 11.37 ascon128abi32v12

16.94 17.05 17.12 ascon128bi32v12

17.46 17.53 17.57 T:xoodyakround3

19.42 19.47 19.56 T:schwaemm256128v2

23.65 23.72 24.33 T:schwaemm256256v2

25.61 25.78 25.96 T:schwaemm192192v2

27.20 27.26 27.30 T:grain128aeadv2

27.55 27.66 27.90 T:schwaemm128128v2

35.48 35.51 35.59 romulusn

36.39 36.43 36.45 T:isapa128av20

36.55 36.60 36.62 T:isapa128v20

40.47 40.50 40.53 T:giftcofb128v1

57.13 57.17 57.23 romulusm

61.63 61.64 61.69 T:tinyjambu128v2

64.69 64.72 64.83 T:isapk128av20

68.96 68.97 68.98 T:tinyjambu192v2

75.96 75.97 75.97 T:tinyjambu256v2

84.82 84.96 84.98 T:isapk128v20

112.30 112.32 112.33 romulust

139.82 148.20 155.30 T:isapxv20

228.24 229.67 246.09 T:elephant200v2

6457.13 6508.15 6514.44 T:elephant176v2

7143.80 7145.89 7157.99 T:elephant160v2

Cycles/byte for long+0 decrypt

25% 50% 75% aead

0.88 0.92 0.97 T:aes256gcmv1

1.59 1.60 1.61 T:aes128gcmv1

1.79 1.79 1.82 aes256gcmv1

6.28 6.30 6.30 ascon128av12

9.27 9.29 9.31 ascon128v12

9.38 9.40 9.41 ascon80pqv12

11.21 11.22 11.25 ascon128abi32v12

16.78 16.92 16.98 ascon128bi32v12

17.45 17.50 17.56 T:xoodyakround3

19.51 19.58 19.63 T:schwaemm256128v2

23.64 23.73 24.34 T:schwaemm256256v2

25.65 25.74 25.78 T:schwaemm192192v2

27.36 27.39 27.43 T:grain128aeadv2

27.50 27.59 27.79 T:schwaemm128128v2

35.55 35.57 35.61 romulusn

36.27 36.33 36.41 T:isapa128v20

36.40 36.43 36.50 T:isapa128av20

40.49 40.54 40.59 T:giftcofb128v1

57.25 57.33 57.40 romulusm

61.46 61.52 61.58 T:tinyjambu128v2

65.25 65.34 65.41 T:isapk128av20

68.65 68.71 68.72 T:tinyjambu192v2

76.01 76.02 76.07 T:tinyjambu256v2

85.34 85.43 85.46 T:isapk128v20

112.28 112.30 112.36 romulust

145.74 148.25 148.81 T:isapxv20

228.58 230.03 245.84 T:elephant200v2

6455.98 6504.59 6509.87 T:elephant176v2

7142.81 7145.68 7156.89 T:elephant160v2

Cycles/byte for long+0 forgery

25% 50% 75% aead

0.89 0.91 0.94 T:aes256gcmv1

1.60 1.60 1.61 T:aes128gcmv1

1.79 1.79 1.80 aes256gcmv1

6.27 6.31 6.32 ascon128av12

9.24 9.26 9.30 ascon128v12

9.37 9.37 9.39 ascon80pqv12

11.23 11.24 11.25 ascon128abi32v12

16.77 16.91 16.99 ascon128bi32v12

17.50 17.55 17.59 T:xoodyakround3

18.02 18.03 18.13 T:isapa128v20

19.47 19.51 19.60 T:schwaemm256128v2

23.63 23.72 24.49 T:schwaemm256256v2

24.11 24.15 24.20 T:isapa128av20

25.69 25.75 25.83 T:schwaemm192192v2

27.30 27.34 27.39 T:grain128aeadv2

27.48 27.64 27.85 T:schwaemm128128v2

35.57 35.59 35.63 romulusn

37.50 37.57 37.60 romulust

40.49 40.52 40.57 T:giftcofb128v1

44.49 44.54 44.58 T:isapk128av20

54.59 54.63 54.65 T:isapk128v20

57.18 57.30 57.40 romulusm

61.50 61.53 61.62 T:tinyjambu128v2

68.69 68.70 68.75 T:tinyjambu192v2

76.03 76.06 76.06 T:tinyjambu256v2

86.65 86.99 87.24 T:isapxv20

228.27 229.79 245.88 T:elephant200v2

6457.54 6509.69 6514.95 T:elephant176v2

7139.68 7142.11 7156.61 T:elephant160v2

Cycles/byte for long+long encrypt

25% 50% 75% aead

0.67 0.69 0.70 T:aes256gcmv1

1.01 1.02 1.02 T:aes128gcmv1

1.09 1.09 1.10 aes256gcmv1

6.38 6.42 6.43 ascon128av12

9.32 9.34 9.36 ascon80pqv12

9.32 9.35 9.36 ascon128v12

11.05 11.11 11.11 ascon128abi32v12

13.32 13.36 13.39 T:xoodyakround3

16.78 16.86 16.91 ascon128bi32v12

19.34 19.38 19.41 T:schwaemm256128v2

23.50 23.58 24.28 T:schwaemm256256v2

25.58 25.63 25.71 T:schwaemm192192v2

27.12 27.15 27.17 T:grain128aeadv2

27.26 27.41 27.43 T:isapa128v20

27.56 27.63 27.72 T:schwaemm128128v2

28.70 28.74 28.76 romulusn

30.30 30.32 30.34 T:isapa128av20

39.51 39.53 39.56 romulusm

40.39 40.40 40.43 T:giftcofb128v1

50.63 50.69 50.70 T:tinyjambu128v2

54.31 54.33 54.35 T:tinyjambu192v2

54.60 54.62 54.64 T:isapk128av20

57.98 58.01 58.02 T:tinyjambu256v2

69.74 69.76 69.78 T:isapk128v20

74.70 74.89 74.91 romulust

113.06 117.24 120.82 T:isapxv20

170.41 171.36 182.88 T:elephant200v2

4825.97 4861.13 4870.51 T:elephant176v2

5354.88 5356.74 5366.84 T:elephant160v2

Cycles/byte for long+long decrypt

25% 50% 75% aead

0.66 0.68 0.70 T:aes256gcmv1

1.04 1.06 1.07 T:aes128gcmv1

1.15 1.15 1.17 aes256gcmv1

6.33 6.34 6.35 ascon128av12

9.31 9.31 9.31 ascon128v12

9.33 9.34 9.36 ascon80pqv12

11.09 11.11 11.11 ascon128abi32v12

13.36 13.39 13.41 T:xoodyakround3

16.69 16.76 16.80 ascon128bi32v12

19.36 19.38 19.44 T:schwaemm256128v2

23.53 23.58 24.30 T:schwaemm256256v2

25.58 25.64 25.68 T:schwaemm192192v2

27.19 27.21 27.23 T:grain128aeadv2

27.26 27.27 27.43 T:isapa128v20

27.44 27.56 27.78 T:schwaemm128128v2

28.71 28.73 28.77 romulusn

30.30 30.32 30.34 T:isapa128av20

39.54 39.59 39.67 romulusm

40.39 40.42 40.45 T:giftcofb128v1

50.58 50.61 50.66 T:tinyjambu128v2

54.20 54.21 54.24 T:tinyjambu192v2

54.92 54.96 55.03 T:isapk128av20

58.04 58.07 58.12 T:tinyjambu256v2

69.98 70.07 70.08 T:isapk128v20

74.88 74.90 74.93 romulust

116.19 117.46 117.75 T:isapxv20

170.43 171.38 183.22 T:elephant200v2

4823.06 4862.79 4865.85 T:elephant176v2

5355.74 5357.03 5367.16 T:elephant160v2

Cycles/byte for long+long forgery

25% 50% 75% aead

0.66 0.68 0.69 T:aes256gcmv1

1.05 1.06 1.07 T:aes128gcmv1

1.15 1.16 1.16 aes256gcmv1

6.34 6.35 6.37 ascon128av12

9.30 9.31 9.32 ascon128v12

9.33 9.34 9.34 ascon80pqv12

11.10 11.11 11.11 ascon128abi32v12

13.38 13.40 13.43 T:xoodyakround3

16.71 16.73 16.80 ascon128bi32v12

18.11 18.12 18.13 T:isapa128v20

19.34 19.40 19.44 T:schwaemm256128v2

23.47 23.57 24.43 T:schwaemm256256v2

24.16 24.18 24.19 T:isapa128av20

25.59 25.64 25.68 T:schwaemm192192v2

27.18 27.20 27.22 T:grain128aeadv2

27.47 27.55 27.60 T:schwaemm128128v2

28.72 28.76 28.78 romulusn

37.51 37.52 37.55 romulust

39.50 39.54 39.64 romulusm

40.40 40.42 40.45 T:giftcofb128v1

44.52 44.55 44.57 T:isapk128av20

50.60 50.63 50.64 T:tinyjambu128v2

54.20 54.22 54.25 T:tinyjambu192v2

54.63 54.66 54.67 T:isapk128v20

58.03 58.06 58.12 T:tinyjambu256v2

86.33 86.60 86.76 T:isapxv20

170.39 171.45 182.88 T:elephant200v2

4824.90 4863.60 4867.43 T:elephant176v2

5354.05 5355.79 5366.77 T:elephant160v2

Cycles/byte for 0+long encrypt

25% 50% 75% aead

0.40? 0.43? 0.48? T:aes256gcmv1

0.51 0.52 0.55 aes256gcmv1

0.51 0.53 0.54 T:aes128gcmv1

6.32 6.33 6.36 ascon128av12

9.25 9.27 9.29 ascon80pqv12

9.24 9.28 9.29 T:xoodyakround3

9.28 9.28 9.30 ascon128v12

10.91 10.95 10.95 ascon128abi32v12

16.54 16.68 16.73 ascon128bi32v12

18.23 18.24 18.26 T:isapa128v20

19.16 19.29 19.34 T:schwaemm256128v2

21.86 21.90 21.91 romulusn

21.85 21.90 21.95 romulusm

23.37 23.44 24.17 T:schwaemm256256v2

24.15 24.18 24.21 T:isapa128av20

25.40 25.53 25.62 T:schwaemm192192v2

27.01 27.04 27.07 T:grain128aeadv2

27.27 27.33 27.54 T:schwaemm128128v2

37.53 37.58 37.58 romulust

39.69 39.70 39.72 T:tinyjambu192v2

39.70 39.70 39.71 T:tinyjambu128v2

40.02 40.02 40.12 T:tinyjambu256v2

40.26 40.29 40.31 T:giftcofb128v1

44.51 44.63 44.65 T:isapk128av20

54.66 54.69 54.75 T:isapk128v20

77.69? 86.87? 95.69? T:isapxv20

112.31 113.22 120.82 T:elephant200v2

3188.00 3209.95 3213.63 T:elephant176v2

3565.17 3567.03 3573.98 T:elephant160v2

Cycles/byte for 0+long decrypt

25% 50% 75% aead

0.41 0.43 0.44 T:aes256gcmv1

0.50 0.52 0.54 T:aes128gcmv1

0.51 0.53 0.54 aes256gcmv1

6.35 6.36 6.39 ascon128av12

9.22 9.27 9.33 T:xoodyakround3

9.28 9.29 9.31 ascon80pqv12

9.28 9.29 9.29 ascon128v12

10.94 10.96 10.98 ascon128abi32v12

16.48 16.59 16.69 ascon128bi32v12

18.16 18.26 18.28 T:isapa128v20

19.23 19.27 19.34 T:schwaemm256128v2

21.84 21.92 21.96 romulusm

21.90 21.93 21.96 romulusn

23.38 23.48 24.18 T:schwaemm256256v2

24.16 24.18 24.26 T:isapa128av20

25.43 25.53 25.68 T:schwaemm192192v2

26.99 27.02 27.05 T:grain128aeadv2

27.32 27.35 27.54 T:schwaemm128128v2

37.48 37.55 37.58 romulust

39.68 39.68 39.68 T:tinyjambu128v2

39.65 39.70 39.70 T:tinyjambu192v2

40.11 40.13 40.13 T:tinyjambu256v2

40.27 40.31 40.36 T:giftcofb128v1

44.53 44.57 44.60 T:isapk128av20

54.66 54.69 54.70 T:isapk128v20

85.90 86.32 86.99 T:isapxv20

112.36 113.29 120.71 T:elephant200v2

3187.95 3210.44 3214.72 T:elephant176v2

3566.06 3567.52 3574.98 T:elephant160v2

Cycles/byte for 0+long forgery

25% 50% 75% aead

0.42? 0.43? 0.47? T:aes256gcmv1

0.50 0.51 0.52 T:aes128gcmv1

0.52 0.52 0.53 aes256gcmv1

6.37 6.38 6.40 ascon128av12

9.21 9.27 9.33 T:xoodyakround3

9.27 9.28 9.30 ascon128v12

9.28 9.29 9.30 ascon80pqv12

10.95 10.96 11.08 ascon128abi32v12

16.48 16.60 16.69 ascon128bi32v12

18.18 18.26 18.28 T:isapa128v20

19.24 19.29 19.36 T:schwaemm256128v2

21.80 21.87 21.96 romulusm

21.89 21.94 21.97 romulusn

23.32 23.45 23.95 T:schwaemm256256v2

24.16 24.20 24.23 T:isapa128av20

25.44 25.50 25.61 T:schwaemm192192v2

27.00 27.03 27.07 T:grain128aeadv2

27.31 27.56 27.76 T:schwaemm128128v2

37.49 37.52 37.57 romulust

39.68 39.68 39.68 T:tinyjambu128v2

39.70 39.70 39.72 T:tinyjambu192v2

40.00 40.07 40.14 T:tinyjambu256v2

40.29 40.32 40.35 T:giftcofb128v1

44.53 44.56 44.62 T:isapk128av20

54.65 54.69 54.71 T:isapk128v20

85.88 86.14 86.97 T:isapxv20

112.37 113.28 120.67 T:elephant200v2

3188.20 3210.20 3216.16 T:elephant176v2

3565.39 3567.67 3573.23 T:elephant160v2

Cycles/byte for 1536+1536 encrypt

25% 50% 75% aead

1.13 1.13 1.14 T:aes128gcmv1

1.22 1.23 1.24 aes256gcmv1

1.24 1.24 1.27 T:aes256gcmv1

6.55 6.57 6.59 ascon128av12

9.49 9.49 9.54 ascon128v12

9.49 9.50 9.52 ascon80pqv12

11.38 11.40 11.41 ascon128abi32v12

13.48 13.50 13.52 T:xoodyakround3

17.15 17.19 17.23 ascon128bi32v12

19.97 19.99 20.03 T:schwaemm256128v2

24.21 24.22 24.96 T:schwaemm256256v2

26.17 26.22 26.27 T:schwaemm192192v2

27.50 27.52 27.53 T:grain128aeadv2

27.87 27.98 28.01 T:schwaemm128128v2

28.94 28.99 29.02 romulusn

33.52 33.55 33.56 T:isapa128av20

39.87 39.93 39.98 romulusm

39.97 39.99 40.15 T:isapa128v20

40.78 40.80 40.83 T:giftcofb128v1

51.01 51.06 51.09 T:tinyjambu128v2

54.75 54.75 54.76 T:tinyjambu192v2

58.44 58.45 58.46 T:tinyjambu256v2

60.71 60.72 60.75 T:isapk128av20

75.84 76.02 76.06 romulust

121.71 121.76 121.85 T:isapk128v20

174.80 174.94 186.02 T:elephant200v2

190.54 190.70 195.17 T:isapxv20

4862.59 4897.73 4899.92 T:elephant176v2

5415.03 5416.17 5425.99 T:elephant160v2

Cycles/byte for 1536+1536 decrypt

25% 50% 75% aead

1.17 1.18 1.19 T:aes128gcmv1

1.23 1.24 1.26 T:aes256gcmv1

1.29 1.30 1.31 aes256gcmv1

6.49 6.51 6.53 ascon128av12

9.46 9.46 9.46 ascon128v12

9.48 9.48 9.52 ascon80pqv12

11.40 11.40 11.40 ascon128abi32v12

13.52 13.54 13.55 T:xoodyakround3

17.05 17.09 17.12 ascon128bi32v12

19.95 19.98 20.03 T:schwaemm256128v2

24.20 24.21 24.95 T:schwaemm256256v2

26.18 26.20 26.27 T:schwaemm192192v2

27.55 27.58 27.62 T:grain128aeadv2

27.82 27.91 27.95 T:schwaemm128128v2

28.94 29.00 29.04 romulusn

33.52 33.55 33.56 T:isapa128av20

39.97 40.00 40.07 T:isapa128v20

39.99 40.02 40.04 romulusm

40.79 40.82 40.84 T:giftcofb128v1

50.99 51.00 51.04 T:tinyjambu128v2

54.62 54.63 54.64 T:tinyjambu192v2

58.49 58.54 58.54 T:tinyjambu256v2

61.15 61.15 61.21 T:isapk128av20

76.03 76.04 76.07 romulust

122.04 122.05 122.06 T:isapk128v20

174.72 174.93 185.73 T:elephant200v2

189.64 190.63 190.90 T:isapxv20

4861.22 4897.69 4899.57 T:elephant176v2

5414.93 5415.78 5426.54 T:elephant160v2

Cycles/byte for 1536+1536 forgery

25% 50% 75% aead

1.17 1.18 1.19 T:aes128gcmv1

1.24 1.25 1.26 T:aes256gcmv1

1.29 1.29 1.30 aes256gcmv1

6.50 6.50 6.51 ascon128av12

9.45 9.46 9.46 ascon128v12

9.48 9.48 9.50 ascon80pqv12

11.40 11.46 11.46 ascon128abi32v12

13.54 13.56 13.58 T:xoodyakround3

17.07 17.09 17.11 ascon128bi32v12

19.95 19.99 20.02 T:schwaemm256128v2

24.20 24.21 24.88 T:schwaemm256256v2

24.62 24.62 24.77 T:isapa128v20

25.98 25.99 26.00 T:isapa128av20

26.16 26.21 26.24 T:schwaemm192192v2

27.55 27.58 27.62 T:grain128aeadv2

27.81 27.92 27.95 T:schwaemm128128v2

28.99 29.01 29.03 romulusn

38.62 38.63 38.65 romulust

40.00 40.05 40.05 romulusm

40.81 40.83 40.85 T:giftcofb128v1

48.14 48.14 48.16 T:isapk128av20

51.01 51.02 51.03 T:tinyjambu128v2

54.65 54.65 54.69 T:tinyjambu192v2

58.49 58.50 58.58 T:tinyjambu256v2

81.52 81.52 81.54 T:isapk128v20

123.87 124.06 124.25 T:isapxv20

174.90 174.92 185.84 T:elephant200v2

4860.96 4897.33 4899.99 T:elephant176v2

5414.78 5417.25 5426.48 T:elephant160v2

Cycles/byte for 64+64 encrypt

25% 50% 75% aead

7.11 7.31 7.44 T:aes128gcmv1

7.49 7.82 8.15 aes256gcmv1

10.55 10.70 10.73 ascon128av12

12.61 12.61 13.33 ascon80pqv12

12.71 12.87 13.32 ascon128v12

14.23 14.54 14.77 T:aes256gcmv1

17.93 18.40 18.79 ascon128abi32v12

19.59 20.02 20.12 T:xoodyakround3

24.29 24.42 26.21 ascon128bi32v12

32.91 33.38 34.48 T:schwaemm256128v2

34.63 34.78 35.06 romulusn

35.20 35.65 35.95 T:grain128aeadv2

35.96 36.23 37.02 T:schwaemm128128v2

38.67 38.75 39.55 T:schwaemm256256v2

42.55 43.11 43.87 T:schwaemm192192v2

46.92 47.12 47.48 romulusm

49.35 49.55 49.70 T:giftcofb128v1

59.93 60.06 60.24 T:tinyjambu128v2

64.26 64.49 64.76 T:tinyjambu192v2

68.09 68.44 68.78 T:tinyjambu256v2

101.85 102.13 102.34 romulust

106.88 107.18 107.77 T:isapa128av20

189.65 189.90 190.09 T:isapk128av20

245.97 246.29 263.05 T:elephant200v2

331.00 331.00 331.41 T:isapa128v20

1303.20 1303.36 1303.59 T:isapk128v20

1852.77 1860.84 1982.33 T:isapxv20

6063.38 6087.79 6091.01 T:elephant176v2

7246.01 7257.15 7262.53 T:elephant160v2

Cycles/byte for 64+64 decrypt

25% 50% 75% aead

6.84 6.84 6.99 T:aes128gcmv1

7.51 7.58 7.80 aes256gcmv1

10.73 10.88 11.02 ascon128av12

12.84 12.84 13.34 ascon80pqv12

12.71 12.86 13.20 ascon128v12

14.51 14.67 14.85 T:aes256gcmv1

17.98 18.50 18.98 ascon128abi32v12

19.66 20.05 20.23 T:xoodyakround3

23.88 24.84 26.23 ascon128bi32v12

32.90 33.47 34.16 T:schwaemm256128v2

34.87 34.97 35.13 romulusn

35.88 35.96 36.53 T:grain128aeadv2

36.16 36.16 36.38 T:schwaemm128128v2

38.52 38.56 39.55 T:schwaemm256256v2

42.07 42.29 42.64 T:schwaemm192192v2

48.31 48.49 49.06 romulusm

49.69 49.77 50.31 T:giftcofb128v1

60.02 60.02 60.10 T:tinyjambu128v2

64.08 64.12 64.52 T:tinyjambu192v2

68.22 68.30 68.52 T:tinyjambu256v2

101.90 102.31 102.45 romulust

106.70 107.39 107.55 T:isapa128av20

192.45 193.09 193.19 T:isapk128av20

245.47 245.76 263.36 T:elephant200v2

330.72 331.17 332.47 T:isapa128v20

1303.61 1303.85 1304.69 T:isapk128v20

1850.41 1853.33 1858.99 T:isapxv20

6062.23 6087.20 6092.55 T:elephant176v2

7245.70 7248.30 7258.97 T:elephant160v2

Cycles/byte for 64+64 forgery

25% 50% 75% aead

6.84 6.88 6.98 T:aes128gcmv1

7.73 7.79 7.81 aes256gcmv1

10.59 10.73 10.82 ascon128av12

12.70 12.76 12.82 ascon128v12

12.84 12.84 13.07 ascon80pqv12

14.30 14.43 14.47 T:aes256gcmv1

18.01 18.13 18.30 ascon128abi32v12

19.47 19.59 20.21 T:xoodyakround3

23.86 24.80 25.56 ascon128bi32v12

33.12 33.23 33.77 T:schwaemm256128v2

34.78 34.88 35.15 romulusn

35.95 36.02 36.34 T:grain128aeadv2

36.11 36.18 36.53 T:schwaemm128128v2

38.48 38.55 39.84 T:schwaemm256256v2

42.07 42.08 43.07 T:schwaemm192192v2

48.24 48.50 48.78 romulusm

49.87 49.97 50.18 T:giftcofb128v1

60.12 60.22 60.22 T:tinyjambu128v2

63.62 63.74 64.18 romulust

64.28 64.29 64.33 T:tinyjambu192v2

66.66 66.99 67.28 T:isapa128av20

68.29 68.29 68.34 T:tinyjambu256v2

121.54 121.99 122.17 T:isapk128av20

173.04 173.04 173.69 T:isapa128v20

245.61 245.88 262.77 T:elephant200v2

688.77 688.95 689.28 T:isapk128v20

967.56 971.82 972.93 T:isapxv20

6060.55 6093.35 6099.11 T:elephant176v2

7247.59 7250.34 7260.75 T:elephant160v2

amd64; Zen3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; `cezanne`, `supercop-20230530`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

0.76 0.83 0.84 T:aes128gcmv1

0.78? 0.86? 0.92? T:aes256gcmv1

1.83 1.84 1.85 aes256gcmv1

5.84 5.87 5.88 ascon128av12

8.50 8.50 8.51 ascon80pqv12

8.62 8.63 8.67 ascon128v12

12.51 12.54 12.57 ascon128abi32v12

16.65 16.69 16.84 T:xoodyakround3

19.05 19.13 19.22 ascon128bi32v12

19.46 19.51 19.54 T:schwaemm256128v2

23.05 23.09 23.12 T:grain128aeadv2

23.83 23.89 24.57 T:schwaemm256256v2

25.60 25.71 25.81 T:schwaemm192192v2

31.09 31.26 31.36 T:schwaemm128128v2

34.14 34.14 34.15 T:isapa128v20

35.14 35.18 35.75 T:isapa128av20

37.07 37.10 37.14 romulusn

38.44 38.44 38.44 T:giftcofb128v1

58.43 58.47 58.48 T:tinyjambu128v2

59.31 59.35 59.41 romulusm

60.83 61.21 61.72 T:isapk128av20

65.61 65.62 65.64 T:tinyjambu256v2

66.05 66.05 66.05 T:tinyjambu192v2

76.95 77.70 78.49 T:isapk128v20

114.46 114.54 114.64 romulust

148.26 149.37 149.85 T:isapxv20

229.15? 234.69? 258.80? T:elephant200v2

6706.47 6723.11 6725.87 T:elephant176v2

7843.31 7844.43 7848.69 T:elephant160v2

Cycles/byte for long+0 decrypt

25% 50% 75% aead

0.68? 0.74? 0.78? T:aes128gcmv1

0.77 0.79 0.83 T:aes256gcmv1

1.82 1.83 1.83 aes256gcmv1

6.23 6.24 6.26 ascon128av12

8.43 8.44 8.45 ascon80pqv12

8.56 8.57 8.57 ascon128v12

12.68 12.69 12.71 ascon128abi32v12

16.56 16.63 16.69 T:xoodyakround3

18.46 18.50 18.56 ascon128bi32v12

19.52 19.61 19.68 T:schwaemm256128v2

22.94 22.98 23.08 T:grain128aeadv2

24.18 24.22 24.38 T:schwaemm256256v2

25.64 25.73 25.79 T:schwaemm192192v2

30.71 30.84 30.91 T:schwaemm128128v2

34.11 34.11 34.18 T:isapa128v20

35.15 35.18 35.20 T:isapa128av20

37.31 37.33 37.35 romulusn

38.49 38.50 38.50 T:giftcofb128v1

58.52 58.54 58.57 T:tinyjambu128v2

59.70 59.74 59.76 romulusm

60.54 60.63 61.36 T:isapk128av20

64.74 64.76 64.77 T:tinyjambu192v2

65.49 65.75 65.75 T:tinyjambu256v2

77.82 78.27 78.57 T:isapk128v20

114.49 114.59 114.66 romulust

148.95 149.26 150.41 T:isapxv20

228.53? 234.56? 257.08? T:elephant200v2

6710.37 6712.08 6744.79 T:elephant176v2

7842.30 7843.75 7844.67 T:elephant160v2

Cycles/byte for long+0 forgery

25% 50% 75% aead

0.68? 0.73? 0.77? T:aes128gcmv1

0.75 0.80 0.82 T:aes256gcmv1

1.82 1.83 1.83 aes256gcmv1

6.24 6.24 6.26 ascon128av12

8.44 8.44 8.45 ascon80pqv12

8.57 8.57 8.57 ascon128v12

12.68 12.69 12.70 ascon128abi32v12

16.61 16.66 16.74 T:xoodyakround3

16.84 16.89 16.93 T:isapa128v20

18.46 18.50 18.55 ascon128bi32v12

19.57 19.68 19.76 T:schwaemm256128v2

22.96 22.97 22.99 T:grain128aeadv2

23.60 23.62 23.65 T:isapa128av20

24.20 24.24 24.37 T:schwaemm256256v2

25.68 25.73 25.84 T:schwaemm192192v2

30.77 30.84 30.96 T:schwaemm128128v2

37.29 37.33 37.36 romulusn

38.49 38.50 38.51 T:giftcofb128v1

38.78 38.85 38.95 romulust

40.98 41.16 41.45 T:isapk128av20

50.10 50.23 50.35 T:isapk128v20

58.52 58.53 58.59 T:tinyjambu128v2

59.73 59.76 59.79 romulusm

64.74 64.76 64.76 T:tinyjambu192v2

65.56 65.75 65.75 T:tinyjambu256v2

86.72 86.82 87.65 T:isapxv20

228.73? 234.43? 258.39? T:elephant200v2

6706.21 6711.42 6736.85 T:elephant176v2

7844.54 7850.37 7867.18 T:elephant160v2

Cycles/byte for long+long encrypt

25% 50% 75% aead

0.57 0.60 0.62 T:aes128gcmv1

0.60 0.62 0.65 T:aes256gcmv1

1.14 1.15 1.15 aes256gcmv1

5.84 5.84 5.85 ascon128av12

8.38 8.39 8.41 ascon80pqv12

8.44 8.45 8.46 ascon128v12

12.41 12.42 12.43 ascon128abi32v12

12.63 12.66 12.75 T:xoodyakround3

18.85 18.85 18.88 ascon128bi32v12

19.25 19.32 19.41 T:schwaemm256128v2

22.95 23.02 23.06 T:grain128aeadv2

23.81 24.00 24.53 T:schwaemm256256v2

25.57 25.59 25.60 T:isapa128v20

25.95 26.11 26.30 T:schwaemm192192v2

29.38 29.39 29.65 T:isapa128av20

29.69 29.70 29.72 romulusn

31.07 31.20 31.27 T:schwaemm128128v2

38.39 38.41 38.42 T:giftcofb128v1

40.80 40.84 40.85 romulusm

47.37 47.59 47.63 T:tinyjambu128v2

48.62 48.75 49.02 T:isapk128av20

49.24 49.25 49.26 T:tinyjambu256v2

51.29 51.30 51.30 T:tinyjambu192v2

64.20 64.48 64.70 T:isapk128v20

76.69 76.73 76.76 romulust

118.51 118.89 119.09 T:isapxv20

170.58? 174.94? 191.35? T:elephant200v2

5010.56 5022.84 5023.58 T:elephant176v2

5883.71 5884.24 5886.29 T:elephant160v2

Cycles/byte for long+long decrypt

25% 50% 75% aead

0.55 0.58 0.61 T:aes128gcmv1

0.59 0.60 0.63 T:aes256gcmv1

1.13 1.13 1.14 aes256gcmv1

6.03 6.04 6.05 ascon128av12

8.34 8.35 8.35 ascon80pqv12

8.40 8.41 8.41 ascon128v12

12.42 12.45 12.47 ascon128abi32v12

12.63 12.65 12.68 T:xoodyakround3

18.48 18.51 18.53 ascon128bi32v12

19.33 19.43 19.50 T:schwaemm256128v2

22.93 23.05 23.09 T:grain128aeadv2

24.16 24.28 24.31 T:schwaemm256256v2

25.58 25.58 25.58 T:isapa128v20

25.95 26.22 26.39 T:schwaemm192192v2

29.42 29.64 29.65 T:isapa128av20

29.79 29.80 29.83 romulusn

30.92 31.00 31.06 T:schwaemm128128v2

38.43 38.44 38.44 T:giftcofb128v1

41.00 41.03 41.06 romulusm

47.47 47.57 47.67 T:tinyjambu128v2

49.34 49.35 49.41 T:tinyjambu256v2

48.64 49.36 50.07 T:isapk128av20

50.61 50.64 50.70 T:tinyjambu192v2

64.08 64.34 64.75 T:isapk128v20

76.65 76.74 76.78 romulust

117.51 117.82 118.03 T:isapxv20

173.47 175.08 191.45 T:elephant200v2

5010.75 5011.77 5016.78 T:elephant176v2

5882.06 5883.73 5884.84 T:elephant160v2

Cycles/byte for long+long forgery

25% 50% 75% aead

0.55 0.59 0.61 T:aes128gcmv1

0.58 0.61 0.62 T:aes256gcmv1

1.12 1.13 1.13 aes256gcmv1

6.04 6.05 6.05 ascon128av12

8.35 8.35 8.35 ascon80pqv12

8.41 8.41 8.41 ascon128v12

12.43 12.45 12.46 ascon128abi32v12

12.63 12.66 12.68 T:xoodyakround3

16.93 16.95 16.97 T:isapa128v20

18.48 18.51 18.53 ascon128bi32v12

19.25 19.32 19.38 T:schwaemm256128v2

22.92 22.94 22.97 T:grain128aeadv2

23.63 23.63 23.65 T:isapa128av20

24.17 24.22 24.38 T:schwaemm256256v2

26.00 26.14 26.38 T:schwaemm192192v2

29.79 29.81 29.83 romulusn

30.90 30.98 31.04 T:schwaemm128128v2

38.42 38.44 38.45 T:giftcofb128v1

38.66 38.78 38.93 T:isapk128av20

38.81 38.84 38.89 romulust

40.98 41.00 41.04 romulusm

47.47 47.61 47.67 T:tinyjambu128v2

49.34 49.38 49.41 T:tinyjambu256v2

50.23 50.39 51.04 T:isapk128v20

50.64 50.65 50.65 T:tinyjambu192v2

86.59 87.16 87.75 T:isapxv20

171.31? 175.60? 191.54? T:elephant200v2

5009.90 5017.38 5020.30 T:elephant176v2

5882.99 5884.07 5885.46 T:elephant160v2

Cycles/byte for 0+long encrypt

25% 50% 75% aead

0.38? 0.42? 0.45? T:aes128gcmv1

0.40 0.42 0.43 T:aes256gcmv1

0.44 0.45 0.45 aes256gcmv1

5.79 5.80 5.81 ascon128av12

8.24 8.25 8.26 ascon128v12

8.25 8.25 8.26 ascon80pqv12

8.65 8.66 8.70 T:xoodyakround3

12.20 12.26 12.31 ascon128abi32v12

17.00 17.00 17.01 T:isapa128v20

18.49 18.59 18.65 ascon128bi32v12

18.97 19.11 19.17 T:schwaemm256128v2

22.25 22.28 22.30 romulusm

22.26 22.29 22.32 romulusn

22.90 22.97 23.01 T:grain128aeadv2

23.61 23.63 23.65 T:isapa128av20

23.80 23.92 24.67 T:schwaemm256256v2

26.30 26.55 27.29 T:schwaemm192192v2

30.94 31.03 31.14 T:schwaemm128128v2

33.24 33.25 33.25 T:tinyjambu256v2

36.54 36.55 36.55 T:tinyjambu192v2

36.37 36.62 36.76 T:tinyjambu128v2

36.08 36.72 36.87 T:isapk128av20

38.30 38.31 38.38 T:giftcofb128v1

38.79 38.85 38.89 romulust

49.45 49.71 51.44 T:isapk128v20

86.83 86.91 87.80 T:isapxv20

112.78? 115.60? 127.55? T:elephant200v2

3311.23 3314.21 3322.30 T:elephant176v2

3922.40 3923.10 3927.76 T:elephant160v2

Cycles/byte for 0+long decrypt

25% 50% 75% aead

0.40 0.42 0.43 T:aes256gcmv1

0.40 0.43 0.44 T:aes128gcmv1

0.42 0.44 0.44 aes256gcmv1

5.82 5.83 5.87 ascon128av12

8.25 8.25 8.26 ascon80pqv12

8.25 8.25 8.26 ascon128v12

8.66 8.70 8.75 T:xoodyakround3

12.14 12.19 12.25 ascon128abi32v12

16.97 17.00 17.05 T:isapa128v20

18.48 18.50 18.52 ascon128bi32v12

19.42 19.54 19.66 T:schwaemm256128v2

22.25 22.29 22.33 romulusm

22.28 22.32 22.34 romulusn

22.89 22.91 22.93 T:grain128aeadv2

23.62 23.63 23.65 T:isapa128av20

24.20 24.25 24.30 T:schwaemm256256v2

26.01 26.88 26.93 T:schwaemm192192v2

30.92 31.05 31.15 T:schwaemm128128v2

33.24 33.25 33.26 T:tinyjambu256v2

36.53 36.55 36.56 T:tinyjambu192v2

36.37 36.62 36.64 T:tinyjambu128v2

36.46 36.66 36.79 T:isapk128av20

38.35 38.36 38.39 T:giftcofb128v1

38.81 38.86 38.89 romulust

50.19 50.32 50.79 T:isapk128v20

86.71 87.13 88.97 T:isapxv20

114.55? 115.66? 128.11? T:elephant200v2

3312.30 3313.96 3322.19 T:elephant176v2

3922.21 3922.51 3922.78 T:elephant160v2

Cycles/byte for 0+long forgery

25% 50% 75% aead

0.40 0.42 0.44 T:aes128gcmv1

0.40? 0.42? 0.45? T:aes256gcmv1

0.43 0.43 0.44 aes256gcmv1

5.83 5.85 5.87 ascon128av12

8.25 8.25 8.26 ascon80pqv12

8.25 8.25 8.25 ascon128v12

8.62 8.65 8.73 T:xoodyakround3

12.19 12.19 12.20 ascon128abi32v12

16.96 17.05 17.05 T:isapa128v20

18.48 18.51 18.53 ascon128bi32v12

18.93 19.21 19.50 T:schwaemm256128v2

22.29 22.32 22.33 romulusm

22.28 22.32 22.34 romulusn

22.88 22.89 22.93 T:grain128aeadv2

23.61 23.63 23.65 T:isapa128av20

24.08 24.24 24.39 T:schwaemm256256v2

26.22 26.48 26.76 T:schwaemm192192v2

30.94 31.03 31.15 T:schwaemm128128v2

32.97 32.98 33.28 T:tinyjambu256v2

36.55 36.55 36.55 T:tinyjambu192v2

36.39 36.57 36.76 T:isapk128av20

36.37 36.62 36.63 T:tinyjambu128v2

38.31 38.35 38.37 T:giftcofb128v1

38.76 38.82 38.92 romulust

50.25 50.47 50.84 T:isapk128v20

86.31 86.93 87.74 T:isapxv20

112.65? 115.56? 126.28? T:elephant200v2

3310.73 3313.85 3321.38 T:elephant176v2

3922.61 3922.95 3923.50 T:elephant160v2

Cycles/byte for 1536+1536 encrypt

25% 50% 75% aead

0.98 0.98 1.01 T:aes128gcmv1

1.03 1.04 1.05 T:aes256gcmv1

1.27 1.27 1.28 aes256gcmv1

6.01 6.01 6.02 ascon128av12

8.51 8.52 8.54 ascon80pqv12

8.57 8.58 8.59 ascon128v12

12.70 12.71 12.72 ascon128abi32v12

12.80 12.82 12.85 T:xoodyakround3

19.15 19.15 19.19 ascon128bi32v12

19.92 20.00 20.26 T:schwaemm256128v2

23.36 23.38 23.41 T:grain128aeadv2

24.53 24.54 25.14 T:schwaemm256256v2

26.56 26.60 26.80 T:schwaemm192192v2

29.94 29.96 29.97 romulusn

31.50 31.62 31.64 T:schwaemm128128v2

33.57 33.57 33.81 T:isapa128av20

37.21 37.22 37.23 T:isapa128v20

38.75 38.76 38.76 T:giftcofb128v1

41.07 41.08 41.12 romulusm

47.80 47.99 48.00 T:tinyjambu128v2

49.63 49.64 49.65 T:tinyjambu256v2

51.70 51.71 51.72 T:tinyjambu192v2

54.75 54.77 54.99 T:isapk128av20

77.82 77.85 77.88 romulust

108.50 108.63 108.77 T:isapk128v20

175.51 178.55 194.54 T:elephant200v2

193.01 193.25 193.65 T:isapxv20

5049.84 5050.35 5073.16 T:elephant176v2

5949.91 5950.22 5954.20 T:elephant160v2

Cycles/byte for 1536+1536 decrypt

25% 50% 75% aead

0.97 0.97 1.00 T:aes128gcmv1

1.03 1.03 1.05 T:aes256gcmv1

1.26 1.26 1.27 aes256gcmv1

6.19 6.19 6.21 ascon128av12

8.47 8.47 8.48 ascon80pqv12

8.53 8.53 8.54 ascon128v12

12.73 12.73 12.77 ascon128abi32v12

12.78 12.79 12.81 T:xoodyakround3

18.84 18.85 18.87 ascon128bi32v12

19.94 20.04 20.21 T:schwaemm256128v2

23.31 23.32 23.45 T:grain128aeadv2

24.84 24.96 25.09 T:schwaemm256256v2

26.33 26.53 26.73 T:schwaemm192192v2

30.04 30.07 30.09 romulusn

31.25 31.33 31.42 T:schwaemm128128v2

33.81 33.82 33.83 T:isapa128av20

37.21 37.21 37.21 T:isapa128v20

38.79 38.80 38.80 T:giftcofb128v1

41.30 41.33 41.36 romulusm

47.91 48.00 48.07 T:tinyjambu128v2

49.77 49.79 49.81 T:tinyjambu256v2

51.08 51.13 51.14 T:tinyjambu192v2

54.88 54.98 54.99 T:isapk128av20

77.82 77.85 77.89 romulust

109.81 109.85 110.08 T:isapk128v20

176.36 178.65 193.85 T:elephant200v2

192.88 193.26 193.71 T:isapxv20

5049.25 5050.42 5064.58 T:elephant176v2

5949.97 5951.38 5952.21 T:elephant160v2

Cycles/byte for 1536+1536 forgery

25% 50% 75% aead

0.97 0.98 1.00 T:aes128gcmv1

1.03 1.03 1.05 T:aes256gcmv1

1.26 1.26 1.26 aes256gcmv1

6.19 6.19 6.20 ascon128av12

8.47 8.47 8.48 ascon80pqv12

8.53 8.53 8.54 ascon128v12

12.72 12.73 12.73 ascon128abi32v12

12.79 12.81 12.83 T:xoodyakround3

18.84 18.85 18.87 ascon128bi32v12

19.83 19.93 20.01 T:schwaemm256128v2

22.86 22.86 22.88 T:isapa128v20

23.31 23.32 23.35 T:grain128aeadv2

24.90 24.96 24.96 T:schwaemm256256v2

25.92 25.92 25.93 T:isapa128av20

26.56 26.63 26.74 T:schwaemm192192v2

30.07 30.08 30.10 romulusn

31.22 31.31 31.35 T:schwaemm128128v2

38.79 38.80 38.81 T:giftcofb128v1

39.92 39.96 39.98 romulust

41.31 41.32 41.35 romulusm

42.29 42.33 42.44 T:isapk128av20

47.91 48.00 48.07 T:tinyjambu128v2

49.77 49.81 49.81 T:tinyjambu256v2

51.13 51.14 51.15 T:tinyjambu192v2

73.70 73.82 73.88 T:isapk128v20

124.98 125.01 125.20 T:isapxv20

175.78 178.55 195.05 T:elephant200v2

5050.72 5051.26 5055.94 T:elephant176v2

5950.39 5950.53 5952.96 T:elephant160v2

Cycles/byte for 64+64 encrypt

25% 50% 75% aead

6.10 6.15 6.27 aes256gcmv1

9.84 9.84 9.94 ascon128av12

10.10 10.16 10.70 T:aes128gcmv1

10.71 10.87 11.33 T:aes256gcmv1

11.40 11.40 11.48 ascon128v12

11.40 11.45 11.53 ascon80pqv12

18.35 18.43 18.56 T:xoodyakround3

19.55 19.64 19.73 ascon128abi32v12

25.96 26.23 27.11 ascon128bi32v12

31.47 31.55 31.68 T:grain128aeadv2

33.31 33.38 33.62 T:schwaemm256128v2

35.66 35.80 35.90 romulusn

39.70 39.84 40.40 T:schwaemm256256v2

40.46 40.61 40.96 T:schwaemm128128v2

43.05 43.49 43.91 T:schwaemm192192v2

46.45 46.72 46.82 T:giftcofb128v1

46.85 46.96 47.11 romulusm

56.65 56.95 57.69 T:tinyjambu128v2

58.48 58.59 58.71 T:tinyjambu256v2

61.03 61.11 61.26 T:tinyjambu192v2

103.31 103.63 103.84 romulust

128.51 128.63 128.78 T:isapa128av20

183.55 184.15 185.89 T:isapk128av20

248.39 250.24 272.04 T:elephant200v2

304.56 304.56 304.73 T:isapa128v20

1113.40 1116.66 1120.52 T:isapk128v20

1884.32 1884.55 1887.20 T:isapxv20

6289.45 6297.55 6315.10 T:elephant176v2

7969.86 7973.02 7984.23 T:elephant160v2

Cycles/byte for 64+64 decrypt

25% 50% 75% aead

5.60 5.68 5.72 aes256gcmv1

9.91 9.91 10.01 ascon128av12

10.05 10.20 10.88 T:aes128gcmv1

10.74 10.96 11.37 T:aes256gcmv1

11.27 11.29 11.55 ascon80pqv12

11.36 11.36 11.47 ascon128v12

18.37 18.55 18.68 T:xoodyakround3

19.31 19.41 20.23 ascon128abi32v12

26.60 26.60 27.32 ascon128bi32v12

31.34 31.48 31.84 T:grain128aeadv2

33.09 33.32 33.52 T:schwaemm256128v2

36.02 36.10 36.23 romulusn

39.71 39.87 40.48 T:schwaemm256256v2

40.51 40.84 41.33 T:schwaemm128128v2

43.34 43.61 44.05 T:schwaemm192192v2

46.84 47.20 47.29 T:giftcofb128v1

48.26 48.50 48.66 romulusm

56.85 57.84 58.13 T:tinyjambu128v2

58.91 59.66 59.82 T:tinyjambu256v2

62.33 62.48 62.63 T:tinyjambu192v2

103.55 103.77 103.88 romulust

128.81 128.89 129.38 T:isapa128av20

183.49 188.73 189.61 T:isapk128av20

247.74 249.91 271.52 T:elephant200v2

304.65 304.65 305.32 T:isapa128v20

1138.55 1141.88 1142.31 T:isapk128v20

1890.71 1893.85 1894.16 T:isapxv20

6288.50 6290.38 6309.89 T:elephant176v2

7966.54 7967.09 7970.98 T:elephant160v2

Cycles/byte for 64+64 forgery

25% 50% 75% aead

5.61 5.70 5.77 aes256gcmv1

9.93 9.95 9.95 ascon128av12

10.09 10.30 10.65 T:aes128gcmv1

10.78 10.95 11.42 T:aes256gcmv1

11.27 11.27 11.34 ascon80pqv12

11.36 11.36 11.38 ascon128v12

18.35 18.55 19.10 T:xoodyakround3

19.32 19.41 19.41 ascon128abi32v12

26.58 26.58 27.23 ascon128bi32v12

31.45 31.66 31.95 T:grain128aeadv2

33.17 33.32 33.60 T:schwaemm256128v2

35.98 36.10 36.41 romulusn

39.80 40.06 40.60 T:schwaemm256256v2

40.54 40.91 41.17 T:schwaemm128128v2

43.38 43.71 44.03 T:schwaemm192192v2

46.83 46.83 47.19 T:giftcofb128v1

48.43 48.56 48.71 romulusm

56.80 57.76 57.95 T:tinyjambu128v2

58.79 59.57 59.72 T:tinyjambu256v2

60.77 62.24 62.31 T:tinyjambu192v2

64.66 64.94 65.34 romulust

77.39 77.57 77.73 T:isapa128av20

115.95 118.23 119.32 T:isapk128av20

158.71 158.91 159.52 T:isapa128v20

248.59 251.52 271.48 T:elephant200v2

600.05 601.86 604.92 T:isapk128v20

982.11 988.67 988.78 T:isapxv20

6288.11 6290.43 6301.55 T:elephant176v2

7967.64 7968.86 7969.20 T:elephant160v2

amd64; Zen3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; `beelink`, `supercop-20221122`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

1.71 1.72 1.72 T:aes128gcmv1

1.84 1.85 1.86 aes256gcmv1

5.60 5.63 5.66 ascon128av12

8.13 8.13 8.13 ascon80pqv12

8.37 8.38 8.42 ascon128v12

12.47 12.51 12.54 ascon128abi32v12

14.71 14.81 14.87 T:xoodyakround3

18.16 18.19 18.21 ascon128bi32v12

18.19 18.22 18.27 T:schwaemm256128v2

22.83 22.98 24.98 T:grain128aeadv2

23.69? 24.01? 26.82? T:schwaemm256256v2

24.16 24.22 24.27 T:schwaemm192192v2

28.52 28.65 28.83 T:schwaemm128128v2

31.03 31.04 31.04 T:isapa128v20

33.23 33.26 33.30 T:isapa128av20

37.12 37.15 37.18 romulusn

38.56 38.57 38.57 T:giftcofb128v1

58.50 58.50 58.53 T:tinyjambu128v2

59.40 59.44 59.47 romulusm

60.41 60.78 60.85 T:isapk128av20

62.50 62.50 62.50 T:tinyjambu192v2

65.73 65.87 65.88 T:tinyjambu256v2

82.45 82.54 82.69 T:isapk128v20

120.70 120.76 120.80 romulust

122.92 123.08 123.35 T:elephant200v2

146.77 148.52 150.81 T:isapxv20

6338.49 6376.37 6446.46 T:elephant176v2

7797.25 7802.34 7841.88 T:elephant160v2

Cycles/byte for long+0 decrypt

25% 50% 75% aead

1.71 1.72 1.72 T:aes128gcmv1

1.86 1.87 1.88 aes256gcmv1

5.17 5.19 5.19 ascon128av12

7.62 7.63 7.63 ascon80pqv12

7.87 7.88 7.88 ascon128v12

12.62 12.63 12.67 ascon128abi32v12

14.64 14.69 14.75 T:xoodyakround3

18.21 18.26 18.32 T:schwaemm256128v2

18.61 18.64 18.67 ascon128bi32v12

23.05 23.12 23.66 T:grain128aeadv2

23.63? 23.98? 26.48? T:schwaemm256256v2

24.13 24.20 24.26 T:schwaemm192192v2

28.48 28.63 28.73 T:schwaemm128128v2

30.99 31.04 31.08 T:isapa128v20

33.23 33.27 33.30 T:isapa128av20

37.36 37.43 37.44 romulusn

38.50 38.50 38.51 T:giftcofb128v1

58.50 58.51 58.51 T:tinyjambu128v2

59.72 59.77 59.83 romulusm

60.32 60.84 60.87 T:isapk128av20

62.75 62.75 62.77 T:tinyjambu192v2

65.48 65.50 65.52 T:tinyjambu256v2

82.35 82.48 82.61 T:isapk128v20

120.68 120.80 120.87 romulust

122.86 122.95 123.05 T:elephant200v2

147.56 148.13 149.02 T:isapxv20

6370.20 6385.58 6390.08 T:elephant176v2

7793.94 7830.60 7874.24 T:elephant160v2

Cycles/byte for long+0 forgery

25% 50% 75% aead

1.71 1.71 1.72 T:aes128gcmv1

1.86 1.86 1.87 aes256gcmv1

5.17 5.19 5.19 ascon128av12

7.63 7.63 7.64 ascon80pqv12

7.88 7.88 7.88 ascon128v12

12.62 12.63 12.66 ascon128abi32v12

14.68 14.73 14.77 T:xoodyakround3

15.48 15.52 15.55 T:isapa128v20

18.21 18.27 18.31 T:schwaemm256128v2

18.62 18.64 18.67 ascon128bi32v12

22.32 22.38 22.38 T:isapa128av20

23.03 23.09 23.64 T:grain128aeadv2

23.67? 24.02? 26.53? T:schwaemm256256v2

24.15 24.19 24.26 T:schwaemm192192v2

28.52 28.65 28.81 T:schwaemm128128v2

37.36 37.42 37.45 romulusn

38.50 38.50 38.51 T:giftcofb128v1

40.98 41.03 41.09 romulust

43.62 43.65 43.83 T:isapk128av20

56.20 56.35 56.41 T:isapk128v20

58.50 58.51 58.52 T:tinyjambu128v2

59.71 59.75 59.80 romulusm

62.75 62.75 62.75 T:tinyjambu192v2

65.49 65.50 65.52 T:tinyjambu256v2

85.23 85.48 86.15 T:isapxv20

122.93 123.03 123.15 T:elephant200v2

6346.98 6368.47 6381.26 T:elephant176v2

7790.82 7809.50 7886.74 T:elephant160v2

Cycles/byte for long+long encrypt

25% 50% 75% aead

1.08 1.09 1.09 T:aes128gcmv1

1.14 1.15 1.16 aes256gcmv1

5.62 5.63 5.65 ascon128av12

7.87 7.88 7.89 ascon80pqv12

8.12 8.14 8.15 ascon128v12

11.39 11.45 11.47 T:xoodyakround3

12.24 12.35 12.38 ascon128abi32v12

18.08 18.11 18.14 T:schwaemm256128v2

18.40 18.42 18.44 ascon128bi32v12

22.82 22.95 24.96 T:grain128aeadv2

23.27 23.29 23.29 T:isapa128v20

23.60 23.63 23.81 T:schwaemm256256v2

24.58 24.75 24.91 T:schwaemm192192v2

27.24 27.27 27.28 T:isapa128av20

28.50 28.58 28.66 T:schwaemm128128v2

29.74 29.75 29.76 romulusn

38.38 38.38 38.39 T:giftcofb128v1

40.89 40.90 40.93 romulusm

46.75 46.77 46.77 T:tinyjambu128v2

46.51 47.08 47.59 T:isapk128av20

49.60 49.61 49.62 T:tinyjambu256v2

50.13 50.14 50.15 T:tinyjambu192v2

65.66 65.75 65.80 T:isapk128v20

80.87 80.91 80.94 romulust

92.66 92.73 92.78 T:elephant200v2

116.76 117.01 118.31 T:isapxv20

4741.22 4750.67 4759.86 T:elephant176v2

5832.58 5863.74 5936.02 T:elephant160v2

Cycles/byte for long+long decrypt

25% 50% 75% aead

1.08 1.08 1.10 T:aes128gcmv1

1.15 1.15 1.15 aes256gcmv1

5.26 5.27 5.28 ascon128av12

7.75 7.76 7.76 ascon80pqv12

7.81 7.82 7.82 ascon128v12

11.34 11.36 11.38 T:xoodyakround3

12.44 12.48 12.50 ascon128abi32v12

18.12 18.14 18.18 T:schwaemm256128v2

18.24 18.26 18.27 ascon128bi32v12

22.94 23.01 23.60 T:grain128aeadv2

23.27 23.27 23.28 T:isapa128v20

23.64 23.74 23.84 T:schwaemm256256v2

24.51 24.66 24.86 T:schwaemm192192v2

27.25 27.26 27.28 T:isapa128av20

28.47 28.51 28.61 T:schwaemm128128v2

29.86 29.89 29.92 romulusn

38.35 38.35 38.35 T:giftcofb128v1

41.03 41.06 41.09 romulusm

46.76 46.76 46.76 T:tinyjambu128v2

46.63 47.35 47.61 T:isapk128av20

49.42 49.42 49.43 T:tinyjambu256v2

50.01 50.01 50.01 T:tinyjambu192v2

65.56 65.59 65.66 T:isapk128v20

80.86 80.93 80.98 romulust

92.68 92.75 92.79 T:elephant200v2

116.62 116.93 117.22 T:isapxv20

4734.12 4747.39 4752.12 T:elephant176v2

5827.77 5869.73 5874.79 T:elephant160v2

Cycles/byte for long+long forgery

25% 50% 75% aead

1.08 1.09 1.09 T:aes128gcmv1

1.15 1.15 1.15 aes256gcmv1

5.26 5.27 5.28 ascon128av12

7.76 7.76 7.76 ascon80pqv12

7.81 7.82 7.82 ascon128v12

11.34 11.36 11.39 T:xoodyakround3

12.48 12.48 12.48 ascon128abi32v12

15.50 15.51 15.53 T:isapa128v20

18.11 18.13 18.16 T:schwaemm256128v2

18.25 18.26 18.27 ascon128bi32v12

21.78 21.82 21.85 T:isapa128av20

22.96 23.05 23.69 T:grain128aeadv2

23.64 23.79 23.84 T:schwaemm256256v2

24.34 24.39 24.51 T:schwaemm192192v2

28.45 28.58 28.66 T:schwaemm128128v2

29.87 29.88 29.92 romulusn

38.35 38.35 38.35 T:giftcofb128v1

38.36 38.97 39.04 T:isapk128av20

40.97 40.99 41.03 romulust

41.05 41.07 41.08 romulusm

46.76 46.76 46.77 T:tinyjambu128v2

49.42 49.42 49.43 T:tinyjambu256v2

50.01 50.01 50.01 T:tinyjambu192v2

52.52 52.59 52.65 T:isapk128v20

85.46 85.72 85.95 T:isapxv20

92.69 92.75 92.89 T:elephant200v2

4740.39 4766.57 4806.43 T:elephant176v2

5850.63 5892.45 5913.32 T:elephant160v2

Cycles/byte for 0+long encrypt

25% 50% 75% aead

0.44 0.45 0.46 aes256gcmv1

0.45 0.45 0.46 T:aes128gcmv1

5.61 5.63 5.64 ascon128av12

7.61 7.62 7.64 ascon80pqv12

7.86 7.87 7.88 ascon128v12

8.01 8.04 8.07 T:xoodyakround3

12.17 12.20 12.22 ascon128abi32v12

15.51 15.51 15.51 T:isapa128v20

17.96 18.02 18.09 T:schwaemm256128v2

18.57 18.63 18.68 ascon128bi32v12

21.21 21.26 21.29 T:isapa128av20

22.33 22.36 22.39 romulusm

22.34 22.37 22.40 romulusn

22.83 22.93 24.81 T:grain128aeadv2

23.21 23.58 23.65 T:schwaemm256256v2

24.63 24.82 24.93 T:schwaemm192192v2

28.42 28.52 28.61 T:schwaemm128128v2

33.34 33.35 33.36 T:tinyjambu256v2

33.78 33.82 34.24 T:isapk128av20

35.00 35.00 35.00 T:tinyjambu128v2

37.76 37.76 37.77 T:tinyjambu192v2

38.19 38.20 38.21 T:giftcofb128v1

40.96 41.02 41.08 romulust

48.85 48.88 48.93 T:isapk128v20

62.60 62.68 62.77 T:elephant200v2

84.86 85.41 86.34 T:isapxv20

3135.50 3151.44 3183.76 T:elephant176v2

3906.03 3907.18 3942.88 T:elephant160v2

Cycles/byte for 0+long decrypt

25% 50% 75% aead

0.43 0.43 0.45 aes256gcmv1

0.45 0.46 0.46 T:aes128gcmv1

5.36 5.36 5.36 ascon128av12

7.74 7.75 7.75 ascon128v12

7.88 7.88 7.88 ascon80pqv12

8.00 8.04 8.08 T:xoodyakround3

12.29 12.33 12.34 ascon128abi32v12

15.48 15.48 15.55 T:isapa128v20

17.85 17.88 17.91 ascon128bi32v12

17.98 18.02 18.08 T:schwaemm256128v2

21.21 21.26 21.32 T:isapa128av20

22.33 22.36 22.42 romulusm

22.35 22.38 22.42 romulusn

22.82 22.93 23.64 T:grain128aeadv2

23.12 23.43 23.58 T:schwaemm256256v2

24.60 24.86 25.15 T:schwaemm192192v2

28.42 28.51 28.72 T:schwaemm128128v2

33.34 33.35 33.36 T:tinyjambu256v2

33.59 33.62 34.34 T:isapk128av20

35.00 35.01 35.02 T:tinyjambu128v2

37.26 37.26 37.27 T:tinyjambu192v2

38.18 38.20 38.20 T:giftcofb128v1

40.94 41.03 41.12 romulust

48.81 48.89 48.91 T:isapk128v20

62.64 62.70 62.76 T:elephant200v2

85.22 85.47 85.93 T:isapxv20

3131.50 3143.49 3150.94 T:elephant176v2

3907.11 3910.44 3912.19 T:elephant160v2

Cycles/byte for 0+long forgery

25% 50% 75% aead

0.43 0.43 0.44 aes256gcmv1

0.45 0.45 0.46 T:aes128gcmv1

5.36 5.36 5.37 ascon128av12

7.75 7.75 7.76 ascon128v12

7.88 7.88 7.88 ascon80pqv12

8.01 8.06 8.10 T:xoodyakround3

12.32 12.33 12.33 ascon128abi32v12

15.48 15.51 15.54 T:isapa128v20

17.85 17.88 17.90 ascon128bi32v12

17.98 18.02 18.07 T:schwaemm256128v2

21.22 21.26 21.32 T:isapa128av20

22.33 22.37 22.40 romulusm

22.32 22.38 22.41 romulusn

22.89 22.95 23.64 T:grain128aeadv2

23.18 23.50 23.64 T:schwaemm256256v2

24.57 24.72 24.79 T:schwaemm192192v2

28.39 28.49 28.59 T:schwaemm128128v2

33.34 33.35 33.36 T:tinyjambu256v2

33.61 33.68 34.33 T:isapk128av20

35.01 35.01 35.02 T:tinyjambu128v2

37.26 37.26 37.27 T:tinyjambu192v2

38.19 38.19 38.20 T:giftcofb128v1

40.93 41.01 41.07 romulust

48.82 48.88 48.91 T:isapk128v20

62.63 62.68 62.73 T:elephant200v2

85.08 85.42 85.96 T:isapxv20

3131.96 3159.33 3174.82 T:elephant176v2

3899.62 3937.97 3941.54 T:elephant160v2

Cycles/byte for 1536+1536 encrypt

25% 50% 75% aead

1.19 1.19 1.20 T:aes128gcmv1

1.26 1.27 1.27 aes256gcmv1

5.77 5.78 5.80 ascon128av12

8.00 8.00 8.01 ascon80pqv12

8.25 8.25 8.26 ascon128v12

11.47 11.56 11.58 T:xoodyakround3

12.64 12.64 12.68 ascon128abi32v12

18.65 18.70 18.73 T:schwaemm256128v2

18.75 18.76 18.78 ascon128bi32v12

23.32 23.35 25.17 T:grain128aeadv2

24.25 24.29 24.49 T:schwaemm256256v2

25.00 25.03 25.11 T:schwaemm192192v2

28.92 28.97 29.04 T:schwaemm128128v2

29.50 29.50 29.51 T:isapa128av20

30.01 30.02 30.04 romulusn

34.15 34.15 34.17 T:isapa128v20

38.68 38.68 38.69 T:giftcofb128v1

41.16 41.18 41.20 romulusm

47.11 47.12 47.13 T:tinyjambu128v2

50.00 50.00 50.00 T:tinyjambu256v2

50.51 50.52 50.52 T:tinyjambu192v2

53.22 54.26 56.38 T:isapk128av20

82.16 82.18 82.21 romulust

94.76 94.81 94.88 T:elephant200v2

106.09 106.13 106.16 T:isapk128v20

190.26 190.37 191.64 T:isapxv20

4761.78 4791.86 4794.63 T:elephant176v2

5923.26 5931.53 5995.92 T:elephant160v2

Cycles/byte for 1536+1536 decrypt

25% 50% 75% aead

1.20 1.20 1.20 T:aes128gcmv1

1.27 1.27 1.28 aes256gcmv1

5.41 5.43 5.44 ascon128av12

7.88 7.88 7.88 ascon80pqv12

7.93 7.93 7.93 ascon128v12

11.44 11.45 11.48 T:xoodyakround3

12.76 12.77 12.80 ascon128abi32v12

18.62 18.62 18.64 ascon128bi32v12

18.69 18.71 18.73 T:schwaemm256128v2

23.36 23.43 24.01 T:grain128aeadv2

24.25 24.34 24.45 T:schwaemm256256v2

24.99 25.04 25.11 T:schwaemm192192v2

28.90 28.98 29.03 T:schwaemm128128v2

29.49 29.49 29.49 T:isapa128av20

30.16 30.18 30.19 romulusn

34.15 34.15 34.17 T:isapa128v20

38.65 38.65 38.65 T:giftcofb128v1

41.36 41.38 41.42 romulusm

47.10 47.11 47.11 T:tinyjambu128v2

49.81 49.82 49.82 T:tinyjambu256v2

50.39 50.39 50.41 T:tinyjambu192v2

53.12 54.25 54.28 T:isapk128av20

82.15 82.19 82.23 romulust

94.68 94.75 94.79 T:elephant200v2

106.02 106.06 106.11 T:isapk128v20

189.80 190.21 190.44 T:isapxv20

4761.82 4775.45 4800.87 T:elephant176v2

5910.33 5921.36 5922.18 T:elephant160v2

Cycles/byte for 1536+1536 forgery

25% 50% 75% aead

1.20 1.20 1.20 T:aes128gcmv1

1.27 1.27 1.27 aes256gcmv1

5.41 5.41 5.43 ascon128av12

7.88 7.88 7.88 ascon80pqv12

7.93 7.93 7.94 ascon128v12

11.44 11.47 11.52 T:xoodyakround3

12.76 12.76 12.77 ascon128abi32v12

18.62 18.62 18.64 ascon128bi32v12

18.67 18.70 18.73 T:schwaemm256128v2

21.04 21.04 21.06 T:isapa128v20

23.07 23.07 23.09 T:isapa128av20

23.37 23.40 24.00 T:grain128aeadv2

24.23 24.29 24.42 T:schwaemm256256v2

24.97 25.02 25.11 T:schwaemm192192v2

28.97 29.00 29.05 T:schwaemm128128v2

30.15 30.16 30.21 romulusn

38.65 38.65 38.65 T:giftcofb128v1

41.36 41.37 41.41 romulusm

42.26 42.32 42.34 romulust

42.46 43.52 45.50 T:isapk128av20

47.10 47.11 47.11 T:tinyjambu128v2

49.81 49.81 49.82 T:tinyjambu256v2

50.39 50.39 50.39 T:tinyjambu192v2

73.45 73.50 73.56 T:isapk128v20

94.67 94.70 94.78 T:elephant200v2

122.85 123.30 123.37 T:isapxv20

4771.99 4785.92 4794.56 T:elephant176v2

5909.64 5911.04 5915.89 T:elephant160v2

Cycles/byte for 64+64 encrypt

25% 50% 75% aead

5.52 5.56 5.59 T:aes128gcmv1

5.88 5.89 6.00 aes256gcmv1

8.64 8.92 9.20 ascon128av12

10.66 10.80 10.85 ascon80pqv12

11.04 11.12 11.12 ascon128v12

16.59 16.66 16.77 T:xoodyakround3

19.37 19.45 20.33 ascon128abi32v12

26.41 26.45 27.17 ascon128bi32v12

31.23 31.34 31.47 T:schwaemm256128v2

31.70 31.95 33.05 T:grain128aeadv2

35.95 35.96 36.10 romulusn

37.58 37.77 38.20 T:schwaemm128128v2

38.81 39.02 39.13 T:schwaemm256256v2

39.81 40.17 40.55 T:schwaemm192192v2

45.50 45.54 45.70 T:giftcofb128v1

46.95 47.05 47.26 romulusm

55.05 55.05 55.22 T:tinyjambu128v2

58.66 58.77 58.93 T:tinyjambu256v2

58.88 58.90 59.05 T:tinyjambu192v2

80.65 80.72 81.25 T:isapa128av20

111.05 111.27 111.66 romulust

135.48 135.75 135.98 T:elephant200v2

170.85 170.95 171.12 T:isapk128av20

284.11 284.11 284.30 T:isapa128v20

1023.01 1023.26 1023.58 T:isapk128v20

1850.39 1855.26 1856.27 T:isapxv20

5936.70 5955.88 5963.47 T:elephant176v2

7920.73 7926.40 7956.11 T:elephant160v2

Cycles/byte for 64+64 decrypt

25% 50% 75% aead

5.31 5.34 5.40 T:aes128gcmv1

5.68 5.71 5.81 aes256gcmv1

8.99 9.11 9.16 ascon128av12

10.62 10.62 10.69 ascon80pqv12

10.64 10.67 10.70 ascon128v12

16.67 16.80 16.88 T:xoodyakround3

19.48 19.48 19.88 ascon128abi32v12

26.95 26.97 27.72 ascon128bi32v12

31.23 31.55 31.69 T:schwaemm256128v2

32.17 32.31 32.67 T:grain128aeadv2

36.40 36.53 36.74 romulusn

37.30 37.87 38.42 T:schwaemm128128v2

38.79 39.06 39.27 T:schwaemm256256v2

39.94 40.63 40.91 T:schwaemm192192v2

45.62 45.65 45.70 T:giftcofb128v1

48.50 48.63 48.79 romulusm

54.99 54.99 55.12 T:tinyjambu128v2

58.62 58.80 58.93 T:tinyjambu256v2

58.76 58.81 58.98 T:tinyjambu192v2

80.56 80.62 81.02 T:isapa128av20

111.30 111.65 112.13 romulust

135.48 135.73 136.54 T:elephant200v2

170.80 170.82 170.93 T:isapk128av20

284.08 284.11 284.76 T:isapa128v20

1023.15 1023.62 1023.79 T:isapk128v20

1851.59 1854.45 1855.48 T:isapxv20

5931.36 5940.51 5969.55 T:elephant176v2

7900.12 7925.54 7964.16 T:elephant160v2

Cycles/byte for 64+64 forgery

25% 50% 75% aead

5.30 5.33 5.44 T:aes128gcmv1

5.70 5.73 5.81 aes256gcmv1

8.86 9.11 9.11 ascon128av12

10.59 10.59 10.59 ascon80pqv12

10.64 10.64 10.64 ascon128v12

16.68 16.80 16.85 T:xoodyakround3

19.46 19.46 19.48 ascon128abi32v12

26.95 26.95 27.35 ascon128bi32v12

31.12 31.27 31.59 T:schwaemm256128v2

31.56 32.23 32.51 T:grain128aeadv2

36.45 36.48 36.66 romulusn

37.45 38.01 38.27 T:schwaemm128128v2

38.67 39.11 39.48 T:schwaemm256256v2

40.17 40.34 40.93 T:schwaemm192192v2

45.62 45.64 45.68 T:giftcofb128v1

48.41 48.56 48.88 romulusm

51.65 51.73 52.70 T:isapa128av20

54.98 54.99 54.99 T:tinyjambu128v2

58.58 58.70 58.76 T:tinyjambu256v2

58.75 58.77 58.86 T:tinyjambu192v2

71.05 71.27 71.87 romulust

112.60 112.65 113.30 T:isapk128av20

135.66 136.09 136.22 T:elephant200v2

147.97 147.99 148.70 T:isapa128v20

544.39 544.50 545.23 T:isapk128v20

965.23 968.04 972.39 T:isapxv20

5964.67 5992.59 6003.13 T:elephant176v2

7909.52 7921.34 7931.19 T:elephant160v2

amd64; Zen2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; `lucienne`, `supercop-20230530`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

0.92 0.94 0.97 T:aes256gcmv1

1.51 1.53 1.54 T:aes128gcmv1

1.67 1.69 1.70 aes256gcmv1

6.40 6.42 6.46 ascon128av12

9.37 9.38 9.40 ascon128v12

9.41 9.41 9.42 ascon80pqv12

11.13 11.17 11.41 ascon128abi32v12

16.93 17.03 17.14 ascon128bi32v12

17.48 17.58 17.59 T:xoodyakround3

19.47 19.55 19.59 T:schwaemm256128v2

23.66 23.72 24.65 T:schwaemm256256v2

25.58 25.70 25.85 T:schwaemm192192v2

27.30 27.34 27.36 T:grain128aeadv2

27.58 27.70 27.88 T:schwaemm128128v2

35.52 35.54 35.55 romulusn

36.39 36.41 36.43 T:isapa128av20

36.54 36.60 36.61 T:isapa128v20

40.46 40.49 40.51 T:giftcofb128v1

57.10 57.16 57.23 romulusm

61.73 61.75 61.77 T:tinyjambu128v2

65.00 65.18 65.28 T:isapk128av20

68.95 68.96 68.98 T:tinyjambu192v2

75.96 75.98 75.99 T:tinyjambu256v2

84.92 85.60 85.63 T:isapk128v20

112.30 112.31 112.31 romulust

148.05 150.18 151.22 T:isapxv20

253.01 254.04 259.70 T:elephant200v2

6481.72 6487.66 6494.01 T:elephant176v2

7161.81 7183.77 7192.06 T:elephant160v2

Cycles/byte for long+0 decrypt

25% 50% 75% aead

0.88 0.91 0.97 T:aes256gcmv1

1.61 1.61 1.63 T:aes128gcmv1

1.78 1.79 1.82 aes256gcmv1

6.28 6.30 6.32 ascon128av12

9.30 9.31 9.31 ascon128v12

9.39 9.39 9.41 ascon80pqv12

11.21 11.23 11.25 ascon128abi32v12

16.78 16.90 16.97 ascon128bi32v12

17.44 17.51 17.60 T:xoodyakround3

19.48 19.55 19.63 T:schwaemm256128v2

23.65 23.72 24.26 T:schwaemm256256v2

25.65 25.73 25.84 T:schwaemm192192v2

26.99 27.05 27.51 T:grain128aeadv2

27.54 27.62 27.80 T:schwaemm128128v2

35.57 35.59 35.61 romulusn

36.28 36.34 36.43 T:isapa128v20

36.41 36.45 36.48 T:isapa128av20

40.51 40.53 40.58 T:giftcofb128v1

57.19 57.27 57.31 romulusm

60.10 60.15 60.20 T:tinyjambu128v2

64.99 65.01 65.08 T:isapk128av20

68.68 68.73 68.78 T:tinyjambu192v2

76.07 76.09 76.11 T:tinyjambu256v2

84.76 84.92 85.69 T:isapk128v20

112.27 112.32 112.35 romulust

147.88 149.59 151.26 T:isapxv20

252.57 253.47 258.96 T:elephant200v2

6477.77 6483.89 6489.32 T:elephant176v2

7160.99 7186.00 7193.83 T:elephant160v2

Cycles/byte for long+0 forgery

25% 50% 75% aead

0.90 0.95 0.96 T:aes256gcmv1

1.60 1.61 1.62 T:aes128gcmv1

1.79 1.80 1.80 aes256gcmv1

6.27 6.30 6.31 ascon128av12

9.25 9.26 9.27 ascon128v12

9.37 9.38 9.39 ascon80pqv12

11.23 11.24 11.25 ascon128abi32v12

16.79 16.90 16.97 ascon128bi32v12

17.50 17.59 17.62 T:xoodyakround3

18.01 18.05 18.13 T:isapa128v20

19.43 19.53 19.62 T:schwaemm256128v2

23.63 23.72 24.71 T:schwaemm256256v2

24.13 24.15 24.21 T:isapa128av20

25.70 25.81 25.88 T:schwaemm192192v2

26.91 27.03 27.53 T:grain128aeadv2

27.58 27.61 27.82 T:schwaemm128128v2

35.55 35.58 35.63 romulusn

37.50 37.58 37.59 romulust

40.49 40.55 40.56 T:giftcofb128v1

44.24 44.48 44.68 T:isapk128av20

54.58 54.62 54.65 T:isapk128v20

57.19 57.27 57.31 romulusm

60.10 60.11 60.18 T:tinyjambu128v2

68.72 68.76 68.82 T:tinyjambu192v2

76.08 76.11 76.12 T:tinyjambu256v2

86.41 86.90 88.67 T:isapxv20

252.58 253.16 259.17 T:elephant200v2

6480.49 6484.75 6489.73 T:elephant176v2

7159.89 7185.88 7194.56 T:elephant160v2

Cycles/byte for long+long encrypt

25% 50% 75% aead

0.67 0.68 0.70 T:aes256gcmv1

1.01 1.02 1.03 T:aes128gcmv1

1.09 1.10 1.11 aes256gcmv1

6.37 6.40 6.42 ascon128av12

9.32 9.34 9.37 ascon80pqv12

9.33 9.35 9.36 ascon128v12

11.04 11.09 11.11 ascon128abi32v12

13.29 13.30 13.38 T:xoodyakround3

16.79 16.88 16.92 ascon128bi32v12

19.38 19.42 19.45 T:schwaemm256128v2

23.52 23.63 24.37 T:schwaemm256256v2

25.57 25.61 25.68 T:schwaemm192192v2

27.14 27.26 27.31 T:grain128aeadv2

27.25 27.31 27.42 T:isapa128v20

27.48 27.59 27.62 T:schwaemm128128v2

28.69 28.72 28.75 romulusn

30.27 30.30 30.31 T:isapa128av20

39.49 39.57 39.62 romulusm

40.36 40.41 40.45 T:giftcofb128v1

51.18 51.22 51.25 T:tinyjambu128v2

54.32 54.33 54.34 T:tinyjambu192v2

54.76 54.83 54.87 T:isapk128av20

57.93 58.00 58.10 T:tinyjambu256v2

69.81 70.16 70.19 T:isapk128v20

74.88 74.91 74.92 romulust

116.26 116.55 117.55 T:isapxv20

190.33 190.65 193.78 T:elephant200v2

4846.49 4848.07 4850.22 T:elephant176v2

5374.41 5388.37 5395.99 T:elephant160v2

Cycles/byte for long+long decrypt

25% 50% 75% aead

0.67 0.68 0.69 T:aes256gcmv1

1.05 1.06 1.07 T:aes128gcmv1

1.14 1.15 1.16 aes256gcmv1

6.33 6.34 6.35 ascon128av12

9.31 9.32 9.33 ascon128v12

9.33 9.35 9.36 ascon80pqv12

11.07 11.09 11.11 ascon128abi32v12

13.36 13.38 13.42 T:xoodyakround3

16.68 16.75 16.80 ascon128bi32v12

19.39 19.44 19.49 T:schwaemm256128v2

23.54 23.62 24.27 T:schwaemm256256v2

25.56 25.64 25.69 T:schwaemm192192v2

27.10 27.13 27.51 T:grain128aeadv2

27.23 27.29 27.33 T:isapa128v20

27.40 27.53 27.57 T:schwaemm128128v2

28.71 28.74 28.77 romulusn

30.30 30.32 30.35 T:isapa128av20

39.57 39.59 39.64 romulusm

40.38 40.42 40.45 T:giftcofb128v1

50.42 50.43 50.43 T:tinyjambu128v2

54.22 54.23 54.26 T:tinyjambu192v2

54.74 54.79 54.84 T:isapk128av20

58.10 58.12 58.13 T:tinyjambu256v2

69.76 69.80 70.20 T:isapk128v20

74.88 74.90 74.94 romulust

116.40 116.78 117.01 T:isapxv20

190.11 190.34 193.79 T:elephant200v2

4842.91 4845.19 4849.30 T:elephant176v2

5370.22 5387.83 5390.96 T:elephant160v2

Cycles/byte for long+long forgery

25% 50% 75% aead

0.67 0.68 0.69 T:aes256gcmv1

1.06 1.06 1.06 T:aes128gcmv1

1.15 1.15 1.16 aes256gcmv1

6.35 6.36 6.37 ascon128av12

9.31 9.31 9.33 ascon128v12

9.33 9.34 9.34 ascon80pqv12

11.09 11.11 11.16 ascon128abi32v12

13.36 13.42 13.46 T:xoodyakround3

16.69 16.76 16.80 ascon128bi32v12

18.11 18.12 18.23 T:isapa128v20

19.36 19.41 19.46 T:schwaemm256128v2

23.54 23.62 24.26 T:schwaemm256256v2

24.16 24.19 24.21 T:isapa128av20

25.60 25.65 25.70 T:schwaemm192192v2

27.12 27.15 27.19 T:grain128aeadv2

27.52 27.57 27.70 T:schwaemm128128v2

28.72 28.74 28.77 romulusn

37.51 37.54 37.56 romulust

39.55 39.58 39.64 romulusm

40.40 40.42 40.44 T:giftcofb128v1

44.38 44.51 44.63 T:isapk128av20

50.42 50.42 50.42 T:tinyjambu128v2

54.19 54.22 54.24 T:tinyjambu192v2

54.62 54.65 54.67 T:isapk128v20

58.02 58.03 58.07 T:tinyjambu256v2

86.30 86.45 86.65 T:isapxv20

189.72 191.04 193.70 T:elephant200v2

4843.06 4846.94 4851.47 T:elephant176v2

5369.17 5389.32 5391.97 T:elephant160v2

Cycles/byte for 0+long encrypt

25% 50% 75% aead

0.42 0.42 0.44 T:aes256gcmv1

0.51 0.52 0.56 aes256gcmv1

0.52 0.53 0.55 T:aes128gcmv1

6.31 6.32 6.36 ascon128av12

9.25 9.27 9.28 ascon80pqv12

9.28 9.29 9.31 ascon128v12

9.26 9.30 9.31 T:xoodyakround3

10.90 10.94 10.95 ascon128abi32v12

16.53 16.69 16.73 ascon128bi32v12

18.23 18.26 18.27 T:isapa128v20

19.19 19.30 19.34 T:schwaemm256128v2

21.84 21.91 21.95 romulusm

21.86 21.92 21.96 romulusn

23.42 23.55 24.31 T:schwaemm256256v2

24.15 24.18 24.19 T:isapa128av20

25.40 25.51 25.63 T:schwaemm192192v2

27.14 27.20 27.26 T:grain128aeadv2

27.31 27.34 27.56 T:schwaemm128128v2

37.50 37.57 37.58 romulust

39.69 39.70 39.71 T:tinyjambu192v2

40.02 40.02 40.12 T:tinyjambu256v2

40.26 40.31 40.36 T:giftcofb128v1

40.65 40.67 40.70 T:tinyjambu128v2

44.31 44.57 44.73 T:isapk128av20

54.62 54.83 54.84 T:isapk128v20

85.82 86.78 86.87 T:isapxv20

125.99 126.23 128.31 T:elephant200v2

3193.99 3195.52 3201.91 T:elephant176v2

3576.73 3584.16 3588.69 T:elephant160v2

Cycles/byte for 0+long decrypt

25% 50% 75% aead

0.42 0.43 0.44 T:aes256gcmv1

0.50 0.51 0.54 T:aes128gcmv1

0.49? 0.52? 0.55? aes256gcmv1

6.33 6.34 6.36 ascon128av12

9.28 9.29 9.31 ascon128v12

9.28 9.29 9.31 ascon80pqv12

9.23 9.29 9.35 T:xoodyakround3

10.94 10.96 10.97 ascon128abi32v12

16.48 16.59 16.69 ascon128bi32v12

18.20 18.25 18.28 T:isapa128v20

19.13 19.28 19.37 T:schwaemm256128v2

21.83 21.90 21.95 romulusn

21.85 21.92 21.94 romulusm

23.39 23.48 24.34 T:schwaemm256256v2

24.13 24.20 24.25 T:isapa128av20

25.47 25.49 25.57 T:schwaemm192192v2

26.59 27.15 27.26 T:grain128aeadv2

27.25 27.33 27.54 T:schwaemm128128v2

37.49 37.52 37.58 romulust

39.69 39.70 39.73 T:tinyjambu192v2

40.13 40.14 40.14 T:tinyjambu256v2

40.27 40.32 40.35 T:giftcofb128v1

40.67 40.71 40.71 T:tinyjambu128v2

44.37 44.53 44.76 T:isapk128av20

54.64 54.69 54.72 T:isapk128v20

85.74 86.13 86.80 T:isapxv20

125.40 126.08 128.33 T:elephant200v2

3193.95 3199.61 3201.46 T:elephant176v2

3576.41 3584.01 3589.88 T:elephant160v2

Cycles/byte for 0+long forgery

25% 50% 75% aead

0.41 0.43 0.44 T:aes256gcmv1

0.51 0.52 0.53 T:aes128gcmv1

0.50 0.52 0.53 aes256gcmv1

6.35 6.36 6.37 ascon128av12

9.28 9.29 9.32 ascon128v12

9.28 9.29 9.30 ascon80pqv12

9.23 9.29 9.35 T:xoodyakround3

10.95 10.96 11.04 ascon128abi32v12

16.48 16.60 16.69 ascon128bi32v12

18.22 18.25 18.28 T:isapa128v20

19.21 19.28 19.35 T:schwaemm256128v2

21.80 21.86 21.96 romulusn

21.84 21.96 22.02 romulusm

23.40 23.46 24.34 T:schwaemm256256v2

24.14 24.18 24.25 T:isapa128av20

25.45 25.48 25.61 T:schwaemm192192v2

26.75 27.18 27.27 T:grain128aeadv2

27.28 27.55 27.73 T:schwaemm128128v2

37.50 37.54 37.58 romulust

39.70 39.70 39.70 T:tinyjambu192v2

40.01 40.01 40.07 T:tinyjambu256v2

40.28 40.31 40.38 T:giftcofb128v1

40.69 40.71 40.72 T:tinyjambu128v2

44.30 44.53 44.74 T:isapk128av20

54.66 54.69 54.71 T:isapk128v20

85.67 86.06 86.93 T:isapxv20

125.69 126.03 128.32 T:elephant200v2

3193.58 3199.05 3203.98 T:elephant176v2

3575.45 3583.31 3589.53 T:elephant160v2

Cycles/byte for 1536+1536 encrypt

25% 50% 75% aead

1.14 1.15 1.15 T:aes128gcmv1

1.24 1.24 1.26 T:aes256gcmv1

1.24 1.24 1.25 aes256gcmv1

6.54 6.56 6.58 ascon128av12

9.48 9.49 9.53 ascon128v12

9.49 9.50 9.52 ascon80pqv12

11.37 11.39 11.41 ascon128abi32v12

13.48 13.54 13.58 T:xoodyakround3

17.17 17.23 17.25 ascon128bi32v12

19.93 19.97 20.02 T:schwaemm256128v2

24.22 24.23 24.84 T:schwaemm256256v2

26.17 26.22 26.27 T:schwaemm192192v2

27.59 27.61 27.67 T:grain128aeadv2

27.86 27.91 28.02 T:schwaemm128128v2

28.96 29.01 29.04 romulusn

33.51 33.53 33.55 T:isapa128av20

39.84 39.93 39.96 romulusm

39.97 40.14 40.16 T:isapa128v20

40.76 40.78 40.81 T:giftcofb128v1

51.63 51.64 51.64 T:tinyjambu128v2

54.75 54.75 54.76 T:tinyjambu192v2

58.41 58.41 58.45 T:tinyjambu256v2

60.87 60.89 60.92 T:isapk128av20

76.03 76.04 76.06 romulust

121.57 121.87 121.93 T:isapk128v20

189.51 189.78 190.19 T:isapxv20

194.18 194.55 197.54 T:elephant200v2

4875.76 4879.55 4885.66 T:elephant176v2

5430.34 5448.52 5451.54 T:elephant160v2

Cycles/byte for 1536+1536 decrypt

25% 50% 75% aead

1.18 1.19 1.19 T:aes128gcmv1

1.23 1.24 1.24 T:aes256gcmv1

1.29 1.30 1.31 aes256gcmv1

6.49 6.49 6.51 ascon128av12

9.46 9.46 9.46 ascon128v12

9.48 9.48 9.50 ascon80pqv12

11.40 11.40 11.40 ascon128abi32v12

13.51 13.53 13.56 T:xoodyakround3

17.05 17.09 17.12 ascon128bi32v12

19.96 19.98 20.04 T:schwaemm256128v2

24.21 24.25 24.90 T:schwaemm256256v2

26.17 26.21 26.26 T:schwaemm192192v2

27.49 27.50 27.69 T:grain128aeadv2

27.84 27.97 28.09 T:schwaemm128128v2

28.96 29.02 29.04 romulusn

33.53 33.55 33.56 T:isapa128av20

39.96 39.97 40.01 romulusm

39.97 39.98 40.05 T:isapa128v20

40.80 40.81 40.81 T:giftcofb128v1

50.84 50.84 50.86 T:tinyjambu128v2

54.61 54.62 54.63 T:tinyjambu192v2

58.50 58.52 58.56 T:tinyjambu256v2

60.89 60.91 60.98 T:isapk128av20

76.04 76.04 76.09 romulust

121.58 121.60 121.91 T:isapk128v20

189.57 190.04 190.06 T:isapxv20

194.28 194.33 197.51 T:elephant200v2

4878.10 4881.24 4884.51 T:elephant176v2

5431.21 5448.39 5452.06 T:elephant160v2

Cycles/byte for 1536+1536 forgery

25% 50% 75% aead

1.18 1.18 1.19 T:aes128gcmv1

1.24 1.24 1.24 T:aes256gcmv1

1.29 1.30 1.30 aes256gcmv1

6.50 6.50 6.50 ascon128av12

9.45 9.46 9.47 ascon128v12

9.48 9.48 9.50 ascon80pqv12

11.40 11.40 11.46 ascon128abi32v12

13.55 13.56 13.57 T:xoodyakround3

17.06 17.09 17.11 ascon128bi32v12

19.95 19.97 20.03 T:schwaemm256128v2

24.22 24.23 25.01 T:schwaemm256256v2

24.62 24.62 24.64 T:isapa128v20

25.97 25.98 26.00 T:isapa128av20

26.16 26.20 26.26 T:schwaemm192192v2

27.50 27.51 27.52 T:grain128aeadv2

27.82 27.93 27.96 T:schwaemm128128v2

28.99 29.02 29.03 romulusn

38.62 38.64 38.65 romulust

39.96 39.98 40.02 romulusm

40.80 40.82 40.84 T:giftcofb128v1

48.15 48.27 48.29 T:isapk128av20

50.86 50.86 50.86 T:tinyjambu128v2

54.59 54.62 54.65 T:tinyjambu192v2

58.47 58.47 58.48 T:tinyjambu256v2

81.13 81.14 81.16 T:isapk128v20

123.88 124.10 124.35 T:isapxv20

193.61 194.42 197.41 T:elephant200v2

4876.81 4879.68 4882.55 T:elephant176v2

5430.62 5445.81 5450.74 T:elephant160v2

Cycles/byte for 64+64 encrypt

25% 50% 75% aead

5.98 6.08 6.45 T:aes128gcmv1

6.48 6.51 6.77 aes256gcmv1

10.50 10.63 10.79 ascon128av12

12.61 12.93 13.33 ascon80pqv12

12.71 13.02 13.52 ascon128v12

14.41 14.48 14.97 T:aes256gcmv1

17.93 18.75 19.02 ascon128abi32v12

19.66 20.04 20.20 T:xoodyakround3

24.27 24.42 26.55 ascon128bi32v12

32.47 32.77 33.35 T:schwaemm256128v2

34.67 34.74 35.07 romulusn

35.70 35.87 36.15 T:grain128aeadv2

35.98 36.34 36.70 T:schwaemm128128v2

38.78 38.84 39.35 T:schwaemm256256v2

42.05 42.62 43.04 T:schwaemm192192v2

46.95 47.09 47.46 romulusm

49.39 49.42 49.70 T:giftcofb128v1

60.78 61.41 61.45 T:tinyjambu128v2

64.26 64.49 64.52 T:tinyjambu192v2

68.09 68.64 68.71 T:tinyjambu256v2

102.09 102.21 102.36 romulust

106.88 107.18 107.48 T:isapa128av20

189.38 190.12 191.43 T:isapk128av20

274.22 275.41 278.52 T:elephant200v2

330.85 331.00 331.72 T:isapa128v20

1298.55 1298.58 1299.12 T:isapk128v20

1849.12 1853.91 1859.26 T:isapxv20

6060.35 6062.10 6065.26 T:elephant176v2

7272.23 7280.27 7282.57 T:elephant160v2

Cycles/byte for 64+64 decrypt

25% 50% 75% aead

5.99 6.06 6.26 T:aes128gcmv1

6.54 6.62 6.66 aes256gcmv1

10.67 10.85 10.95 ascon128av12

12.84 12.84 13.32 ascon80pqv12

12.71 12.86 13.23 ascon128v12

14.50 14.59 14.83 T:aes256gcmv1

18.02 18.48 18.92 ascon128abi32v12

19.66 20.06 20.30 T:xoodyakround3

23.72 24.70 25.99 ascon128bi32v12

32.84 32.87 33.49 T:schwaemm256128v2

34.93 35.01 35.25 romulusn

35.89 35.96 36.63 T:grain128aeadv2

36.04 36.27 36.78 T:schwaemm128128v2

38.71 38.87 39.50 T:schwaemm256256v2

42.32 42.95 43.43 T:schwaemm192192v2

48.45 48.57 48.92 romulusm

49.56 49.73 50.00 T:giftcofb128v1

60.59 60.95 61.01 T:tinyjambu128v2

64.05 64.12 64.28 T:tinyjambu192v2

68.15 68.30 68.75 T:tinyjambu256v2

102.34 102.53 102.67 romulust

106.80 107.29 107.39 T:isapa128av20

191.05 191.72 192.14 T:isapk128av20

274.77 274.94 278.84 T:elephant200v2

329.31 331.65 331.85 T:isapa128v20

1298.79 1299.04 1299.72 T:isapk128v20

1852.68 1853.52 1859.12 T:isapxv20

6059.66 6060.54 6066.34 T:elephant176v2

7265.10 7280.72 7284.02 T:elephant160v2

Cycles/byte for 64+64 forgery

25% 50% 75% aead

5.99 6.06 6.26 T:aes128gcmv1

6.56 6.60 6.60 aes256gcmv1

10.52 10.62 10.70 ascon128av12

12.70 12.70 13.01 ascon128v12

12.84 12.84 13.02 ascon80pqv12

14.50 14.56 14.77 T:aes256gcmv1

18.01 18.27 18.56 ascon128abi32v12

19.51 19.54 20.38 T:xoodyakround3

23.86 24.80 25.83 ascon128bi32v12

32.87 33.13 33.57 T:schwaemm256128v2

34.89 35.01 35.24 romulusn

35.38 36.12 36.33 T:grain128aeadv2

36.17 36.17 36.56 T:schwaemm128128v2

38.66 38.73 39.26 T:schwaemm256256v2

42.12 42.40 42.77 T:schwaemm192192v2

48.23 48.36 48.58 romulusm

49.88 49.97 50.20 T:giftcofb128v1

60.60 60.82 63.00 T:tinyjambu128v2

63.55 63.79 64.11 romulust

64.29 64.29 64.29 T:tinyjambu192v2

66.59 67.00 67.15 T:isapa128av20

68.18 68.29 68.29 T:tinyjambu256v2

123.23 126.35 126.53 T:isapk128av20

172.98 173.27 173.68 T:isapa128v20

274.13 275.30 278.01 T:elephant200v2

679.05 679.40 679.80 T:isapk128v20

965.38 970.09 972.16 T:isapxv20

6058.92 6062.10 6063.58 T:elephant176v2

7266.05 7281.38 7285.67 T:elephant160v2

amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; `jasper`, `supercop-20221122`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

1.47 1.47 1.47 T:aes128gcmv1

1.63 1.65 1.67 aes256gcmv1

10.75 10.76 10.77 ascon128av12

15.13 15.14 15.14 ascon80pqv12

15.34 15.35 15.41 ascon128v12

21.06 21.64 21.86 T:xoodyakround3

22.10 22.12 22.13 T:schwaemm256128v2

23.21 23.23 23.42 ascon128abi32v12

29.24 29.37 29.38 T:schwaemm192192v2

32.40 32.43 32.53 T:schwaemm256256v2

33.52 33.54 33.65 T:schwaemm128128v2

34.11 34.13 34.13 ascon128bi32v12

38.95 38.96 39.00 T:grain128aeadv2

47.46 47.49 47.51 romulusn

47.91 48.13 48.22 T:giftcofb128v1

61.05 61.82 62.06 T:isapa128av20

68.42 68.49 69.31 T:isapa128v20

75.99 76.09 76.16 T:tinyjambu128v2

76.94 77.06 77.22 romulusm

95.39 95.43 95.49 T:tinyjambu192v2

103.91 104.02 104.06 T:tinyjambu256v2

106.44 106.48 108.38 T:isapk128av20

141.50 141.69 143.47 T:isapk128v20

145.61 145.80 145.97 romulust

197.31 197.83 199.19 T:elephant200v2

213.34 214.75 215.37 T:isapxv20

10390.72 10398.19 10408.35 T:elephant176v2

11800.32 11804.60 11807.79 T:elephant160v2

Cycles/byte for long+0 decrypt

25% 50% 75% aead

1.60 1.61 1.62 T:aes128gcmv1

1.70 1.71 1.72 aes256gcmv1

10.25 10.26 10.27 ascon128av12

15.23 15.36 15.41 ascon80pqv12

15.07 15.51 15.53 ascon128v12

20.69 20.73 20.76 T:xoodyakround3

22.09 22.12 22.13 T:schwaemm256128v2

23.28 23.44 23.45 ascon128abi32v12

29.22 29.38 29.41 T:schwaemm192192v2

32.40 32.42 32.45 T:schwaemm256256v2

33.52 33.56 33.62 T:schwaemm128128v2

33.87 33.92 33.95 ascon128bi32v12

39.09 39.39 39.68 T:grain128aeadv2

47.43 47.45 47.48 romulusn

47.97 47.99 48.47 T:giftcofb128v1

61.53 62.00 62.07 T:isapa128av20

68.29 68.79 69.04 T:isapa128v20

76.41 76.47 76.53 T:tinyjambu128v2

77.25 77.34 77.52 romulusm

95.11 95.25 95.37 T:tinyjambu192v2

104.24 104.30 104.38 T:tinyjambu256v2

106.30 106.40 106.55 T:isapk128av20

140.97 141.52 142.14 T:isapk128v20

145.61 145.76 145.92 romulust

197.10 197.58 198.99 T:elephant200v2

186.88? 215.64? 240.28? T:isapxv20

10389.43 10391.63 10393.78 T:elephant176v2

11799.62 11805.85 11811.61 T:elephant160v2

Cycles/byte for long+0 forgery

25% 50% 75% aead

1.59 1.60 1.61 T:aes128gcmv1

1.69 1.71 1.72 aes256gcmv1

10.25 10.27 10.31 ascon128av12

15.24 15.26 15.39 ascon80pqv12

15.53 15.55 15.56 ascon128v12

20.77 20.79 20.82 T:xoodyakround3

22.12 22.13 22.14 T:schwaemm256128v2

23.20 23.45 23.45 ascon128abi32v12

29.24 29.36 29.39 T:schwaemm192192v2

32.39 32.42 32.44 T:schwaemm256256v2

33.50 33.54 33.57 T:schwaemm128128v2

33.87 33.95 33.95 ascon128bi32v12

34.35 34.39 34.44 T:isapa128v20

39.05 39.52 39.67 T:grain128aeadv2

40.64 41.05 41.20 T:isapa128av20

47.45 47.47 47.49 romulusn

47.95 47.99 48.26 T:giftcofb128v1

51.87 52.06 52.14 romulust

70.59 70.67 70.73 T:isapk128av20

76.45 76.49 76.54 T:tinyjambu128v2

77.13 77.22 77.32 romulusm

88.35 88.41 88.59 T:isapk128v20

95.13 95.27 95.43 T:tinyjambu192v2

104.24 104.27 104.36 T:tinyjambu256v2

126.48 126.69 127.96 T:isapxv20

197.41 198.11 200.20 T:elephant200v2

10387.09 10393.27 10397.17 T:elephant176v2

11800.59 11804.79 11807.42 T:elephant160v2

Cycles/byte for long+long encrypt

25% 50% 75% aead

1.00 1.02 1.03 T:aes128gcmv1

1.08 1.10 1.11 aes256gcmv1

10.40 10.42 10.42 ascon128av12

14.97 14.99 15.12 ascon80pqv12

15.07 15.08 15.09 ascon128v12

15.49 15.51 15.53 T:xoodyakround3

21.95 22.00 22.02 T:schwaemm256128v2

23.08 23.10 23.19 ascon128abi32v12

29.13 29.21 29.22 T:schwaemm192192v2

32.24 32.26 32.30 T:schwaemm256256v2

33.44 33.54 33.61 T:schwaemm128128v2

34.08 34.13 34.24 ascon128bi32v12

38.59 38.63 38.66 romulusn

38.94 38.98 39.01 T:grain128aeadv2

48.05 48.15 48.21 T:giftcofb128v1

51.05 51.20 51.55 T:isapa128v20

51.13 51.30 51.50 T:isapa128av20

53.41 53.46 53.55 romulusm

62.24 62.30 62.37 T:tinyjambu128v2

74.64 74.66 74.77 T:tinyjambu192v2

78.55 78.60 78.65 T:tinyjambu256v2

88.54 88.55 88.60 T:isapk128av20

98.45 98.55 98.74 romulust

114.95 115.05 115.33 T:isapk128v20

148.56 148.92 149.32 T:elephant200v2

169.00 169.65 170.29 T:isapxv20

7756.88 7758.67 7760.43 T:elephant176v2

8848.87 8852.52 8855.67 T:elephant160v2

Cycles/byte for long+long decrypt

25% 50% 75% aead

1.05 1.07 1.08 T:aes128gcmv1

1.12 1.13 1.14 aes256gcmv1

10.28 10.29 10.30 ascon128av12

15.03 15.04 15.11 ascon80pqv12

14.94 15.17 15.19 ascon128v12

15.33 15.36 15.39 T:xoodyakround3

21.93 21.98 22.02 T:schwaemm256128v2

23.06 23.07 23.14 ascon128abi32v12

29.11 29.15 29.21 T:schwaemm192192v2

32.26 32.28 32.32 T:schwaemm256256v2

33.41 33.50 33.68 T:schwaemm128128v2

33.55 33.57 33.60 ascon128bi32v12

38.57 38.62 38.67 romulusn

38.89 39.12 39.25 T:grain128aeadv2

47.95 48.13 48.33 T:giftcofb128v1

50.96 51.10 51.32 T:isapa128v20

51.00 51.44 51.70 T:isapa128av20

53.46 53.54 53.67 romulusm

62.39 62.43 62.50 T:tinyjambu128v2

74.45 74.55 74.60 T:tinyjambu192v2

78.71 78.74 78.80 T:tinyjambu256v2

88.48 88.58 88.73 T:isapk128av20

98.52 98.63 98.82 romulust

114.70 115.05 115.26 T:isapk128v20

148.66 149.29 150.04 T:elephant200v2

156.01? 169.50? 183.37? T:isapxv20

7758.53 7761.55 7765.81 T:elephant176v2

8849.52 8852.29 8855.22 T:elephant160v2

Cycles/byte for long+long forgery

25% 50% 75% aead

1.06 1.07 1.08 T:aes128gcmv1

1.12 1.13 1.14 aes256gcmv1

10.29 10.30 10.32 ascon128av12

15.05 15.06 15.12 ascon80pqv12

14.96 15.18 15.19 ascon128v12

15.37 15.38 15.42 T:xoodyakround3

21.95 21.99 22.02 T:schwaemm256128v2

23.07 23.07 23.14 ascon128abi32v12

29.14 29.18 29.22 T:schwaemm192192v2

32.24 32.26 32.28 T:schwaemm256256v2

33.45 33.51 33.59 T:schwaemm128128v2

33.56 33.60 33.61 ascon128bi32v12

33.93 33.99 34.36 T:isapa128v20

38.60 38.63 38.69 romulusn

38.90 39.04 39.24 T:grain128aeadv2

40.65 40.91 41.06 T:isapa128av20

47.98 48.11 48.18 T:giftcofb128v1

51.59 51.65 51.68 romulust

53.49 53.54 53.62 romulusm

62.42 62.44 62.56 T:tinyjambu128v2

70.64 70.73 71.00 T:isapk128av20

74.49 74.58 74.68 T:tinyjambu192v2

78.68 78.73 78.78 T:tinyjambu256v2

88.37 88.44 88.72 T:isapk128v20

126.10 126.25 126.45 T:isapxv20

148.56 149.43 149.66 T:elephant200v2

7754.42 7759.85 7764.60 T:elephant176v2

8850.36 8852.85 8854.08 T:elephant160v2

Cycles/byte for 0+long encrypt

25% 50% 75% aead

0.54 0.56 0.57 aes256gcmv1

0.55 0.56 0.57 T:aes128gcmv1

9.98 10.01 10.06 T:xoodyakround3

10.05 10.06 10.07 ascon128av12

14.81 14.82 14.82 ascon128v12

14.81 14.84 14.85 ascon80pqv12

21.76 21.78 21.91 T:schwaemm256128v2

22.95 22.96 22.97 ascon128abi32v12

28.98 29.04 29.07 T:schwaemm192192v2

29.76 29.81 29.85 romulusn

29.79 29.87 29.90 romulusm

32.06 32.10 32.15 T:schwaemm256256v2

33.40 33.45 33.46 T:schwaemm128128v2

33.58 33.96 34.28 T:isapa128v20

34.12 34.14 34.34 ascon128bi32v12

38.73 38.96 38.98 T:grain128aeadv2

41.05 41.17 41.32 T:isapa128av20

47.94 48.13 48.19 T:giftcofb128v1

48.37 48.46 48.53 T:tinyjambu128v2

51.24 51.33 51.51 romulust

53.10 53.17 53.22 T:tinyjambu256v2

53.77 53.82 53.86 T:tinyjambu192v2

70.65 70.79 71.21 T:isapk128av20

88.38 88.51 89.07 T:isapk128v20

100.00 100.25 100.85 T:elephant200v2

126.26 126.47 126.64 T:isapxv20

5132.92 5136.94 5144.19 T:elephant176v2

5895.73 5899.33 5901.80 T:elephant160v2

Cycles/byte for 0+long decrypt

25% 50% 75% aead

0.53 0.54 0.55 T:aes128gcmv1

0.55 0.56 0.58 aes256gcmv1

9.99 10.02 10.04 T:xoodyakround3

10.30 10.30 10.31 ascon128av12

14.80 14.81 14.82 ascon128v12

14.81 14.84 14.85 ascon80pqv12

21.78 21.87 21.91 T:schwaemm256128v2

22.68 22.81 22.82 ascon128abi32v12

29.00 29.05 29.06 T:schwaemm192192v2

29.74 29.83 29.85 romulusn

29.83 29.88 29.91 romulusm

32.07 32.09 32.14 T:schwaemm256256v2

33.24 33.26 33.27 ascon128bi32v12

33.43 33.50 33.72 T:schwaemm128128v2

33.45 33.60 34.24 T:isapa128v20

38.71 38.72 38.81 T:grain128aeadv2

40.96 41.00 41.19 T:isapa128av20

48.01 48.21 48.43 T:giftcofb128v1

48.35 48.40 48.43 T:tinyjambu128v2

51.12 51.27 51.46 romulust

53.12 53.19 53.26 T:tinyjambu256v2

53.77 53.84 53.95 T:tinyjambu192v2

70.63 70.71 70.79 T:isapk128av20

88.40 88.51 89.00 T:isapk128v20

100.24 100.27 100.61 T:elephant200v2

126.17 126.41 126.82 T:isapxv20

5135.44 5138.52 5142.49 T:elephant176v2

5896.48 5899.16 5901.65 T:elephant160v2

Cycles/byte for 0+long forgery

25% 50% 75% aead

0.53 0.54 0.55 T:aes128gcmv1

0.56 0.56 0.57 aes256gcmv1

9.95 10.00 10.05 T:xoodyakround3

10.30 10.31 10.32 ascon128av12

14.81 14.81 14.82 ascon128v12

14.84 14.84 14.86 ascon80pqv12

21.78 21.86 21.90 T:schwaemm256128v2

22.68 22.81 22.83 ascon128abi32v12

29.00 29.00 29.04 T:schwaemm192192v2

29.76 29.80 29.87 romulusm

29.79 29.85 29.91 romulusn

32.01 32.08 32.10 T:schwaemm256256v2

33.25 33.25 33.26 ascon128bi32v12

33.24 33.43 33.64 T:schwaemm128128v2

33.47 33.60 34.19 T:isapa128v20

38.73 38.77 38.98 T:grain128aeadv2

40.97 41.11 41.21 T:isapa128av20

47.91 48.25 48.39 T:giftcofb128v1

48.33 48.38 48.51 T:tinyjambu128v2

51.22 51.33 51.45 romulust

53.09 53.15 53.22 T:tinyjambu256v2

53.83 53.87 53.89 T:tinyjambu192v2

70.66 70.73 70.77 T:isapk128av20

88.36 88.43 88.53 T:isapk128v20

100.01 100.60 100.68 T:elephant200v2

126.15 126.39 126.68 T:isapxv20

5136.75 5137.55 5139.35 T:elephant176v2

5894.80 5899.67 5902.87 T:elephant160v2

Cycles/byte for 1536+1536 encrypt

25% 50% 75% aead

1.15 1.15 1.15 T:aes128gcmv1

1.26 1.26 1.26 aes256gcmv1

10.67 10.67 10.69 ascon128av12

15.23 15.28 15.34 ascon80pqv12

15.30 15.31 15.32 ascon128v12

15.67 15.68 15.71 T:xoodyakround3

22.64 22.66 22.74 T:schwaemm256128v2

23.61 23.68 23.69 ascon128abi32v12

29.81 29.84 29.86 T:schwaemm192192v2

33.11 33.13 33.16 T:schwaemm256256v2

33.81 33.87 33.93 T:schwaemm128128v2

34.61 34.64 34.73 ascon128bi32v12

38.98 39.02 39.07 romulusn

39.34 39.43 39.46 T:grain128aeadv2

48.43 48.60 48.68 T:giftcofb128v1

53.81 53.88 53.96 romulusm

54.94 55.08 55.18 T:isapa128av20

62.57 62.68 62.76 T:tinyjambu128v2

74.57 74.77 74.96 T:isapa128v20

75.18 75.22 75.28 T:tinyjambu192v2

79.11 79.16 79.21 T:tinyjambu256v2

100.26 100.33 100.43 romulust

102.21 102.24 102.35 T:isapk128av20

152.05 152.43 153.01 T:elephant200v2

200.75 200.77 201.21 T:isapk128v20

278.19 278.28 278.79 T:isapxv20

7818.40 7835.21 7840.69 T:elephant176v2

8949.62 8952.44 8954.85 T:elephant160v2

Cycles/byte for 1536+1536 decrypt

25% 50% 75% aead

1.20 1.20 1.21 T:aes128gcmv1

1.28 1.29 1.29 aes256gcmv1

10.55 10.55 10.56 ascon128av12

15.20 15.21 15.40 ascon128v12

15.28 15.34 15.46 ascon80pqv12

15.51 15.52 15.55 T:xoodyakround3

22.61 22.65 22.67 T:schwaemm256128v2

23.57 23.58 23.64 ascon128abi32v12

29.77 29.84 29.86 T:schwaemm192192v2

33.11 33.12 33.14 T:schwaemm256256v2

33.94 33.97 34.08 T:schwaemm128128v2

34.10 34.10 34.10 ascon128bi32v12

39.00 39.02 39.14 romulusn

39.45 39.62 39.64 T:grain128aeadv2

48.51 48.63 48.81 T:giftcofb128v1

53.96 54.03 54.21 romulusm

54.91 55.13 55.25 T:isapa128av20

62.88 62.93 63.01 T:tinyjambu128v2

74.54 74.65 74.70 T:isapa128v20

75.08 75.16 75.21 T:tinyjambu192v2

79.32 79.34 79.37 T:tinyjambu256v2

100.20 100.29 100.38 romulust

102.28 102.30 102.36 T:isapk128av20

151.91 152.23 152.41 T:elephant200v2

200.72 200.83 201.26 T:isapk128v20

277.63 277.78 294.70 T:isapxv20

7814.39 7829.29 7836.26 T:elephant176v2

8949.01 8954.04 8954.84 T:elephant160v2

Cycles/byte for 1536+1536 forgery

25% 50% 75% aead

1.20 1.20 1.21 T:aes128gcmv1

1.28 1.29 1.29 aes256gcmv1

10.53 10.54 10.55 ascon128av12

15.28 15.34 15.46 ascon80pqv12

15.19 15.39 15.40 ascon128v12

15.55 15.57 15.58 T:xoodyakround3

22.60 22.64 22.71 T:schwaemm256128v2

23.51 23.58 23.64 ascon128abi32v12

29.78 29.83 29.86 T:schwaemm192192v2

33.11 33.12 33.14 T:schwaemm256256v2

33.91 33.95 34.04 T:schwaemm128128v2

34.08 34.10 34.10 ascon128bi32v12

38.98 39.00 39.02 romulusn

39.37 39.62 39.69 T:grain128aeadv2

42.78 43.08 43.19 T:isapa128av20

46.04 46.06 46.26 T:isapa128v20

48.45 48.54 48.68 T:giftcofb128v1

53.30 53.35 53.41 romulust

53.98 54.03 54.18 romulusm

62.93 62.95 62.98 T:tinyjambu128v2

75.09 75.16 75.24 T:tinyjambu192v2

78.31 78.34 78.38 T:isapk128av20

79.32 79.35 79.39 T:tinyjambu256v2

133.11 133.13 133.54 T:isapk128v20

151.60 151.93 152.80 T:elephant200v2

181.75 181.79 181.91 T:isapxv20

7821.39 7828.84 7832.40 T:elephant176v2

8946.47 8951.46 8953.06 T:elephant160v2

Cycles/byte for 64+64 encrypt

25% 50% 75% aead

7.05 7.16 7.44 aes256gcmv1

7.46 7.55 7.68 T:aes128gcmv1

16.15 16.30 16.55 ascon128av12

20.24 20.47 20.66 ascon128v12

20.30 20.48 20.63 ascon80pqv12

23.12 23.17 23.33 T:xoodyakround3

34.88 35.09 35.48 ascon128abi32v12

37.03 37.13 37.26 T:schwaemm256128v2

43.78 43.88 43.99 T:schwaemm128128v2

45.92 46.05 46.34 ascon128bi32v12

47.32 47.39 47.55 romulusn

48.05 48.10 48.38 T:schwaemm192192v2

49.63 49.67 50.10 T:grain128aeadv2

52.41 52.53 52.71 T:schwaemm256256v2

59.08 59.27 59.34 T:giftcofb128v1

62.70 62.84 63.24 romulusm

73.88 74.05 74.39 T:tinyjambu128v2

88.20 88.38 88.49 T:tinyjambu192v2

92.50 92.84 92.98 T:tinyjambu256v2

137.45 138.20 139.32 romulust

141.18 141.48 142.20 T:isapa128av20

216.58 216.82 217.23 T:elephant200v2

397.86 398.25 400.01 T:isapk128av20

612.48 617.02 617.70 T:isapa128v20

2149.05 2149.68 2150.58 T:isapk128v20

2742.68 2743.59 2756.94 T:isapxv20

9733.77 9744.32 9756.95 T:elephant176v2

11967.29 11984.48 11989.07 T:elephant160v2

Cycles/byte for 64+64 decrypt

25% 50% 75% aead

6.80 6.91 7.23 aes256gcmv1

7.44 7.60 7.77 T:aes128gcmv1

16.11 16.16 16.48 ascon128av12

20.38 20.49 20.68 ascon128v12

20.51 20.60 20.81 ascon80pqv12

22.74 23.05 23.34 T:xoodyakround3

35.10 35.26 35.53 ascon128abi32v12

37.16 37.27 37.46 T:schwaemm256128v2

43.88 43.97 44.23 T:schwaemm128128v2

45.48 45.54 45.77 ascon128bi32v12

47.32 47.50 47.83 romulusn

47.98 48.04 48.09 T:schwaemm192192v2

49.73 49.80 50.41 T:grain128aeadv2

52.42 52.52 52.64 T:schwaemm256256v2

59.48 59.60 59.73 T:giftcofb128v1

65.52 65.61 65.87 romulusm

74.28 74.39 74.59 T:tinyjambu128v2

88.18 88.37 88.41 T:tinyjambu192v2

93.01 93.09 93.38 T:tinyjambu256v2

137.91 138.19 138.62 romulust

141.42 141.71 141.95 T:isapa128av20

216.27 216.75 216.87 T:elephant200v2

399.80 400.07 401.01 T:isapk128av20

610.93 616.85 618.59 T:isapa128v20

2149.16 2150.25 2155.92 T:isapk128v20

2736.50? 2758.91? 3123.91? T:isapxv20

9734.08 9739.51 9743.25 T:elephant176v2

11980.74 11985.17 11990.34 T:elephant160v2

Cycles/byte for 64+64 forgery

25% 50% 75% aead

6.72 6.77 6.85 aes256gcmv1

7.36 7.45 7.57 T:aes128gcmv1

16.04 16.12 16.20 ascon128av12

20.18 20.24 20.36 ascon128v12

20.38 20.46 20.56 ascon80pqv12

23.00 23.13 23.24 T:xoodyakround3

35.01 35.18 35.34 ascon128abi32v12

37.12 37.21 37.30 T:schwaemm256128v2

43.90 43.97 44.11 T:schwaemm128128v2

45.48 45.52 45.61 ascon128bi32v12

47.33 47.41 47.64 romulusn

47.98 48.01 48.10 T:schwaemm192192v2

49.59 49.63 49.84 T:grain128aeadv2

52.42 52.52 52.76 T:schwaemm256256v2

59.60 59.77 59.91 T:giftcofb128v1

65.17 65.49 65.64 romulusm

74.17 74.36 74.52 T:tinyjambu128v2

88.12 88.28 88.56 T:tinyjambu192v2

89.02 89.27 89.74 romulust

90.82 91.16 91.82 T:isapa128av20

92.86 93.08 93.27 T:tinyjambu256v2

216.36 216.77 216.89 T:elephant200v2

239.56 240.00 240.33 T:isapk128av20

318.93 323.80 324.22 T:isapa128v20

1143.45 1144.03 1144.52 T:isapk128v20

1430.20 1430.60 1444.26 T:isapxv20

9737.59 9742.70 9747.71 T:elephant176v2

11976.02 11986.59 11993.76 T:elephant160v2

amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; `jasper3`, `supercop-20221122`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

0.84? 0.92? 0.94? T:aes128gcmv1

0.97? 1.05? 1.08? T:aes256gcmv1

1.63 1.65 1.66 aes256gcmv1

10.75 10.76 10.77 ascon128av12

15.12 15.13 15.15 ascon80pqv12

15.33 15.34 15.35 ascon128v12

20.99 21.72 21.80 T:xoodyakround3

22.07 22.11 22.12 T:schwaemm256128v2

23.42 23.42 23.43 ascon128abi32v12

29.21 29.23 29.24 T:schwaemm192192v2

32.22 32.25 32.38 T:schwaemm256256v2

33.39 33.47 33.51 T:schwaemm128128v2

34.12 34.13 34.14 ascon128bi32v12

38.94 38.98 39.06 T:grain128aeadv2

47.43 47.44 47.48 romulusn

47.92 48.10 48.16 T:giftcofb128v1

61.03 61.50 62.06 T:isapa128av20

68.37 68.51 69.11 T:isapa128v20

75.97 76.04 76.13 T:tinyjambu128v2

76.84 76.88 77.15 romulusm

95.37 95.44 95.50 T:tinyjambu192v2

104.50 104.56 104.68 T:tinyjambu256v2

106.38 106.42 106.59 T:isapk128av20

141.47 141.69 148.60 T:isapk128v20

145.29 145.70 147.27 romulust

196.26 196.36 196.75 T:elephant200v2

212.18 212.67 212.80 T:isapxv20

10380.38 10382.34 10415.89 T:elephant176v2

11796.13 11800.00 11802.69 T:elephant160v2

Cycles/byte for long+0 decrypt

25% 50% 75% aead

0.86 0.92 0.94 T:aes128gcmv1

1.00 1.06 1.09 T:aes256gcmv1

1.70 1.72 1.73 aes256gcmv1

10.24 10.26 10.29 ascon128av12

15.22 15.32 15.39 ascon80pqv12

15.50 15.53 15.53 ascon128v12

20.65 20.68 20.78 T:xoodyakround3

22.05 22.10 22.12 T:schwaemm256128v2

23.43 23.44 23.45 ascon128abi32v12

29.22 29.33 29.37 T:schwaemm192192v2

32.23 32.26 32.39 T:schwaemm256256v2

33.36 33.47 33.61 T:schwaemm128128v2

33.86 33.94 33.95 ascon128bi32v12

39.07 39.27 39.84 T:grain128aeadv2

47.33 47.45 47.46 romulusn

47.79 47.85 48.03 T:giftcofb128v1

61.11 61.94 62.01 T:isapa128av20

68.40 68.43 68.68 T:isapa128v20

76.43 76.47 76.49 T:tinyjambu128v2

77.20 77.27 77.42 romulusm

95.07 95.23 95.37 T:tinyjambu192v2

104.23 104.30 104.40 T:tinyjambu256v2

106.38 106.47 106.56 T:isapk128av20

141.47 141.93 148.29 T:isapk128v20

145.43 145.68 146.89 romulust

196.05 196.21 196.60 T:elephant200v2

211.80 212.97 213.38 T:isapxv20

10383.57 10385.90 10397.45 T:elephant176v2

11791.02 11796.52 11802.84 T:elephant160v2

Cycles/byte for long+0 forgery

25% 50% 75% aead

0.84? 0.92? 0.94? T:aes128gcmv1

1.02 1.07 1.10 T:aes256gcmv1

1.70 1.71 1.72 aes256gcmv1

10.26 10.28 10.31 ascon128av12

15.25 15.37 15.40 ascon80pqv12

15.53 15.53 15.55 ascon128v12

20.70 20.75 20.86 T:xoodyakround3

22.09 22.10 22.11 T:schwaemm256128v2

23.42 23.44 23.45 ascon128abi32v12

29.21 29.33 29.37 T:schwaemm192192v2

32.18 32.27 32.39 T:schwaemm256256v2

33.34 33.46 33.55 T:schwaemm128128v2

33.86 33.95 33.95 ascon128bi32v12

34.37 34.43 34.46 T:isapa128v20

38.93 39.39 39.78 T:grain128aeadv2

40.16 41.01 41.18 T:isapa128av20

47.43 47.45 47.56 romulusn

47.85 48.33 48.47 T:giftcofb128v1

51.75 52.12 53.13 romulust

70.60 70.68 71.11 T:isapk128av20

76.44 76.50 76.53 T:tinyjambu128v2

77.06 77.20 77.37 romulusm

88.31 88.41 93.07 T:isapk128v20

95.08 95.25 95.40 T:tinyjambu192v2

104.16 104.24 104.29 T:tinyjambu256v2

125.63 126.65 127.01 T:isapxv20

196.16 196.38 196.57 T:elephant200v2

10388.48 10396.88 10408.92 T:elephant176v2

11794.99 11802.04 11805.55 T:elephant160v2

Cycles/byte for long+long encrypt

25% 50% 75% aead

0.70 0.74 0.77 T:aes128gcmv1

0.79 0.80 0.85 T:aes256gcmv1

1.08 1.10 1.11 aes256gcmv1

10.40 10.42 10.43 ascon128av12

14.98 14.99 15.06 ascon80pqv12

15.06 15.08 15.11 ascon128v12

15.51 15.53 15.55 T:xoodyakround3

21.95 21.98 22.00 T:schwaemm256128v2

23.08 23.11 23.18 ascon128abi32v12

29.12 29.17 29.19 T:schwaemm192192v2

32.13 32.15 32.24 T:schwaemm256256v2

33.28 33.43 33.60 T:schwaemm128128v2

34.08 34.13 34.23 ascon128bi32v12

38.58 38.61 38.64 romulusn

38.83 38.92 38.97 T:grain128aeadv2

47.91 48.20 48.34 T:giftcofb128v1

51.19 51.41 51.65 T:isapa128av20

51.20 51.51 51.59 T:isapa128v20

53.34 53.46 53.57 romulusm

62.23 62.26 62.34 T:tinyjambu128v2

74.59 74.64 74.71 T:tinyjambu192v2

78.81 78.83 78.92 T:tinyjambu256v2

88.54 88.59 88.64 T:isapk128av20

98.32 98.59 99.93 romulust

114.83 115.04 115.26 T:isapk128v20

147.94 148.36 149.25 T:elephant200v2

169.27 169.60 171.15 T:isapxv20

7752.58 7755.20 7761.85 T:elephant176v2

8844.02 8846.31 8851.45 T:elephant160v2

Cycles/byte for long+long decrypt

25% 50% 75% aead

0.71 0.73 0.76 T:aes128gcmv1

0.77 0.81 0.84 T:aes256gcmv1

1.12 1.14 1.15 aes256gcmv1

10.28 10.29 10.31 ascon128av12

15.06 15.09 15.17 ascon80pqv12

14.95 15.17 15.18 ascon128v12

15.33 15.35 15.39 T:xoodyakround3

21.93 21.97 22.01 T:schwaemm256128v2

23.06 23.07 23.14 ascon128abi32v12

29.11 29.13 29.20 T:schwaemm192192v2

32.12 32.15 32.23 T:schwaemm256256v2

33.33 33.45 33.55 T:schwaemm128128v2

33.55 33.60 33.61 ascon128bi32v12

38.60 38.63 38.67 romulusn

38.94 39.17 39.24 T:grain128aeadv2

48.00 48.11 48.28 T:giftcofb128v1

51.17 51.20 51.51 T:isapa128v20

51.08 51.44 51.63 T:isapa128av20

53.39 53.52 53.64 romulusm

62.43 62.47 62.55 T:tinyjambu128v2

74.42 74.56 74.63 T:tinyjambu192v2

78.65 78.69 78.72 T:tinyjambu256v2

88.58 88.65 88.69 T:isapk128av20

98.22 98.51 100.32 romulust

114.85 114.97 115.55 T:isapk128v20

147.80 147.90 148.11 T:elephant200v2

169.01 169.52 170.92 T:isapxv20

7750.77 7753.45 7761.76 T:elephant176v2

8842.92 8846.33 8850.72 T:elephant160v2

Cycles/byte for long+long forgery

25% 50% 75% aead

0.72 0.73 0.77 T:aes128gcmv1

0.79 0.81 0.83 T:aes256gcmv1

1.13 1.13 1.14 aes256gcmv1

10.29 10.30 10.31 ascon128av12

15.05 15.11 15.16 ascon80pqv12

14.96 15.18 15.19 ascon128v12

15.37 15.40 15.43 T:xoodyakround3

21.94 21.97 22.00 T:schwaemm256128v2

23.07 23.07 23.14 ascon128abi32v12

29.17 29.18 29.20 T:schwaemm192192v2

32.12 32.14 32.19 T:schwaemm256256v2

33.27 33.32 33.48 T:schwaemm128128v2

33.56 33.57 33.57 ascon128bi32v12

33.96 34.02 34.36 T:isapa128v20

38.60 38.65 38.75 romulusn

38.90 39.14 39.23 T:grain128aeadv2

40.77 40.95 41.06 T:isapa128av20

47.94 48.10 48.16 T:giftcofb128v1

51.51 51.74 52.81 romulust

53.39 53.53 53.72 romulusm

62.42 62.49 62.53 T:tinyjambu128v2

70.65 70.70 70.84 T:isapk128av20

74.42 74.56 74.63 T:tinyjambu192v2

78.66 78.69 78.72 T:tinyjambu256v2

88.35 88.40 88.56 T:isapk128v20

125.67 126.57 127.24 T:isapxv20

148.22 148.68 148.96 T:elephant200v2

7753.09 7754.92 7762.12 T:elephant176v2

8841.92 8844.50 8850.44 T:elephant160v2

Cycles/byte for 0+long encrypt

25% 50% 75% aead

0.51 0.53 0.55 T:aes128gcmv1

0.49? 0.54? 0.56? T:aes256gcmv1

0.54 0.57 0.58 aes256gcmv1

9.96 10.01 10.04 T:xoodyakround3

10.05 10.06 10.07 ascon128av12

14.79 14.81 14.82 ascon128v12

14.83 14.84 14.85 ascon80pqv12

21.74 21.75 21.79 T:schwaemm256128v2

22.93 22.94 22.96 ascon128abi32v12

28.99 29.02 29.03 T:schwaemm192192v2

29.73 29.80 29.96 romulusm

29.75 29.81 29.85 romulusn

32.00 32.01 32.03 T:schwaemm256256v2

33.14 33.27 33.73 T:schwaemm128128v2

33.43 33.65 34.28 T:isapa128v20

33.92 34.32 34.34 ascon128bi32v12

38.71 38.72 38.96 T:grain128aeadv2

40.63 40.92 40.98 T:isapa128av20

47.84 48.01 48.38 T:giftcofb128v1

48.35 48.40 48.45 T:tinyjambu128v2

50.91 51.29 53.20 romulust

53.12 53.16 53.21 T:tinyjambu256v2

53.81 53.84 53.87 T:tinyjambu192v2

70.65 70.72 70.79 T:isapk128av20

88.21 88.42 88.57 T:isapk128v20

100.11 100.32 100.41 T:elephant200v2

126.09 126.39 126.54 T:isapxv20

5127.94 5136.81 5145.70 T:elephant176v2

5891.41 5895.88 5899.02 T:elephant160v2

Cycles/byte for 0+long decrypt

25% 50% 75% aead

0.52 0.52 0.56 T:aes128gcmv1

0.47? 0.53? 0.58? T:aes256gcmv1

0.55 0.56 0.58 aes256gcmv1

9.99 10.02 10.02 T:xoodyakround3

10.29 10.31 10.32 ascon128av12

14.78 14.80 14.81 ascon128v12

14.82 14.84 14.85 ascon80pqv12

21.75 21.84 21.88 T:schwaemm256128v2

22.68 22.82 22.83 ascon128abi32v12

28.97 29.01 29.02 T:schwaemm192192v2

29.67 29.75 29.82 romulusn

29.79 29.89 30.06 romulusm

31.99 32.01 32.10 T:schwaemm256256v2

33.24 33.25 33.26 ascon128bi32v12

33.44 33.62 34.55 T:isapa128v20

33.60 33.72 33.81 T:schwaemm128128v2

38.71 38.73 38.94 T:grain128aeadv2

40.90 40.97 41.20 T:isapa128av20

48.06 48.12 48.43 T:giftcofb128v1

48.35 48.41 48.47 T:tinyjambu128v2

50.98 51.31 53.19 romulust

53.08 53.12 53.18 T:tinyjambu256v2

53.75 53.84 53.93 T:tinyjambu192v2

70.64 70.67 70.75 T:isapk128av20

88.18 88.46 88.75 T:isapk128v20

99.51 99.68 100.02 T:elephant200v2

125.50 126.48 126.97 T:isapxv20

5128.11 5131.95 5147.02 T:elephant176v2

5892.68 5895.32 5898.15 T:elephant160v2

Cycles/byte for 0+long forgery

25% 50% 75% aead

0.50? 0.55? 0.57? T:aes128gcmv1

0.47? 0.55? 0.58? T:aes256gcmv1

0.55 0.56 0.57 aes256gcmv1

10.01 10.03 10.06 T:xoodyakround3

10.29 10.31 10.31 ascon128av12

14.80 14.81 14.82 ascon128v12

14.83 14.85 14.86 ascon80pqv12

21.78 21.85 21.86 T:schwaemm256128v2

22.68 22.81 22.82 ascon128abi32v12

28.97 28.98 29.02 T:schwaemm192192v2

29.72 29.79 29.84 romulusn

29.74 29.86 30.10 romulusm

32.02 32.04 32.11 T:schwaemm256256v2

33.10 33.19 33.27 T:schwaemm128128v2

33.25 33.25 33.26 ascon128bi32v12

33.50 33.77 34.27 T:isapa128v20

38.72 38.74 38.94 T:grain128aeadv2

40.92 40.98 41.13 T:isapa128av20

47.97 48.12 48.36 T:giftcofb128v1

48.35 48.42 48.48 T:tinyjambu128v2

50.99 51.35 53.21 romulust

53.11 53.14 53.21 T:tinyjambu256v2

53.78 53.84 53.91 T:tinyjambu192v2

70.64 70.70 70.75 T:isapk128av20

88.36 88.48 89.35 T:isapk128v20

99.55 100.08 100.40 T:elephant200v2

125.63 126.16 126.61 T:isapxv20

5129.18 5134.28 5137.94 T:elephant176v2

5894.08 5897.67 5899.77 T:elephant160v2

Cycles/byte for 1536+1536 encrypt

25% 50% 75% aead

1.17 1.18 1.22 T:aes128gcmv1

1.26 1.26 1.27 aes256gcmv1

1.27 1.28 1.30 T:aes256gcmv1

10.67 10.68 10.69 ascon128av12

15.23 15.24 15.29 ascon80pqv12

15.30 15.31 15.31 ascon128v12

15.66 15.67 15.68 T:xoodyakround3

22.59 22.63 22.64 T:schwaemm256128v2

23.61 23.67 23.68 ascon128abi32v12

29.80 29.81 29.83 T:schwaemm192192v2

33.01 33.02 33.10 T:schwaemm256256v2

33.85 33.92 34.03 T:schwaemm128128v2

34.61 34.63 34.73 ascon128bi32v12

38.97 38.98 39.04 romulusn

39.30 39.31 39.43 T:grain128aeadv2

48.52 48.65 48.80 T:giftcofb128v1

53.75 53.81 53.97 romulusm

54.96 55.17 55.26 T:isapa128av20

62.66 62.73 62.79 T:tinyjambu128v2

74.52 74.68 74.92 T:isapa128v20

75.16 75.23 75.28 T:tinyjambu192v2

79.35 79.38 79.44 T:tinyjambu256v2

100.17 100.25 101.63 romulust

103.83 103.87 103.92 T:isapk128av20

151.35 151.66 151.89 T:elephant200v2

205.59 205.64 206.09 T:isapk128v20

277.92 277.97 279.66 T:isapxv20

7813.19 7814.12 7819.26 T:elephant176v2

8946.04 8949.30 8951.50 T:elephant160v2

Cycles/byte for 1536+1536 decrypt

25% 50% 75% aead

1.18 1.19 1.20 T:aes128gcmv1

1.27 1.28 1.29 T:aes256gcmv1

1.29 1.30 1.30 aes256gcmv1

10.54 10.55 10.56 ascon128av12

15.19 15.20 15.40 ascon128v12

15.28 15.34 15.35 ascon80pqv12

15.48 15.50 15.52 T:xoodyakround3

22.58 22.60 22.63 T:schwaemm256128v2

23.57 23.58 23.65 ascon128abi32v12

29.81 29.83 29.85 T:schwaemm192192v2

32.99 33.01 33.09 T:schwaemm256256v2

33.86 33.98 34.12 T:schwaemm128128v2

34.07 34.07 34.07 ascon128bi32v12

38.97 39.02 39.12 romulusn

39.36 39.60 39.64 T:grain128aeadv2

48.55 48.65 48.80 T:giftcofb128v1

53.95 54.05 54.14 romulusm

54.94 55.10 55.21 T:isapa128av20

62.90 62.94 62.96 T:tinyjambu128v2

74.68 74.72 74.82 T:isapa128v20

75.07 75.10 75.18 T:tinyjambu192v2

79.29 79.31 79.35 T:tinyjambu256v2

100.17 100.39 101.59 romulust

103.81 103.84 103.88 T:isapk128av20

151.01 151.65 152.27 T:elephant200v2

205.57 205.61 206.46 T:isapk128v20

277.63 278.24 279.31 T:isapxv20

7810.92 7817.73 7819.94 T:elephant176v2

8943.29 8946.35 8954.48 T:elephant160v2

Cycles/byte for 1536+1536 forgery

25% 50% 75% aead

1.18 1.19 1.21 T:aes128gcmv1

1.27 1.28 1.28 T:aes256gcmv1

1.29 1.29 1.29 aes256gcmv1

10.53 10.54 10.55 ascon128av12

15.29 15.34 15.46 ascon80pqv12

15.19 15.39 15.40 ascon128v12

15.52 15.53 15.57 T:xoodyakround3

22.58 22.61 22.62 T:schwaemm256128v2

23.57 23.58 23.65 ascon128abi32v12

29.77 29.84 29.84 T:schwaemm192192v2

33.00 33.02 33.09 T:schwaemm256256v2

33.69 33.75 34.08 T:schwaemm128128v2

34.10 34.10 34.11 ascon128bi32v12

38.98 39.01 39.11 romulusn

39.40 39.56 39.62 T:grain128aeadv2

42.76 42.88 43.11 T:isapa128av20

46.05 46.14 46.32 T:isapa128v20

48.47 48.57 48.61 T:giftcofb128v1

53.26 53.35 54.76 romulust

53.91 53.98 54.12 romulusm

62.88 62.89 62.96 T:tinyjambu128v2

75.08 75.14 75.21 T:tinyjambu192v2

79.28 79.32 79.36 T:tinyjambu256v2

80.01 80.03 80.05 T:isapk128av20

137.87 137.91 138.11 T:isapk128v20

151.20 151.65 151.81 T:elephant200v2

181.59 182.31 182.68 T:isapxv20

7819.44 7824.45 7829.21 T:elephant176v2

8940.67 8950.57 8961.11 T:elephant160v2

Cycles/byte for 64+64 encrypt

25% 50% 75% aead

7.08 7.22 7.42 aes256gcmv1

11.08 11.41 12.09 T:aes128gcmv1

12.12 12.26 12.91 T:aes256gcmv1

16.16 16.32 16.52 ascon128av12

20.34 20.42 20.55 ascon128v12

20.52 20.66 20.76 ascon80pqv12

22.98 23.10 23.35 T:xoodyakround3

35.04 35.13 35.67 ascon128abi32v12

37.07 37.21 37.41 T:schwaemm256128v2

43.72 43.77 43.87 T:schwaemm128128v2

45.93 46.05 46.27 ascon128bi32v12

47.16 47.30 47.44 romulusn

48.07 48.16 48.36 T:schwaemm192192v2

49.35 49.49 49.60 T:grain128aeadv2

52.62 52.67 52.88 T:schwaemm256256v2

58.94 59.41 59.73 T:giftcofb128v1

62.77 62.94 63.16 romulusm

73.63 73.85 74.10 T:tinyjambu128v2

87.74 87.96 88.25 T:tinyjambu192v2

92.60 92.82 92.99 T:tinyjambu256v2

136.41 137.12 140.24 romulust

141.12 141.66 141.72 T:isapa128av20

215.33 215.51 215.69 T:elephant200v2

439.28 439.63 440.12 T:isapk128av20

616.20 616.37 616.57 T:isapa128v20

2265.10 2265.66 2266.48 T:isapk128v20

2739.56 2741.59 2744.64 T:isapxv20

9727.30 9730.04 9736.09 T:elephant176v2

11976.65 11977.77 11981.34 T:elephant160v2

Cycles/byte for 64+64 decrypt

25% 50% 75% aead

6.67 6.80 7.15 aes256gcmv1

11.50 11.77 12.27 T:aes128gcmv1

12.08 12.25 12.98 T:aes256gcmv1

16.05 16.15 16.33 ascon128av12

20.35 20.48 20.66 ascon128v12

20.55 20.67 20.83 ascon80pqv12

22.54 22.63 22.88 T:xoodyakround3

35.09 35.25 35.66 ascon128abi32v12

37.20 37.29 37.38 T:schwaemm256128v2

43.90 44.07 44.09 T:schwaemm128128v2

45.45 45.57 46.05 ascon128bi32v12

47.42 47.63 47.72 romulusn

47.96 48.02 48.20 T:schwaemm192192v2

49.37 49.49 49.62 T:grain128aeadv2

52.71 52.80 52.89 T:schwaemm256256v2

59.45 59.55 59.71 T:giftcofb128v1

65.50 65.64 65.88 romulusm

73.98 74.10 74.27 T:tinyjambu128v2

87.84 87.98 88.30 T:tinyjambu192v2

92.56 92.75 92.91 T:tinyjambu256v2

137.07 137.74 140.66 romulust

141.17 141.50 142.22 T:isapa128av20

215.16 215.39 215.45 T:elephant200v2

439.00 439.45 440.20 T:isapk128av20

611.57 616.24 616.84 T:isapa128v20

2265.30 2266.42 2271.31 T:isapk128v20

2741.37 2744.15 2749.34 T:isapxv20

9728.92 9738.31 9742.37 T:elephant176v2

11977.84 11980.53 11982.54 T:elephant160v2

Cycles/byte for 64+64 forgery

25% 50% 75% aead

6.69 6.84 6.94 aes256gcmv1

11.30 11.66 11.82 T:aes128gcmv1

12.09 12.31 12.76 T:aes256gcmv1

15.98 16.09 16.18 ascon128av12

20.17 20.21 20.45 ascon128v12

20.34 20.44 20.60 ascon80pqv12

22.61 22.80 23.03 T:xoodyakround3

35.05 35.16 35.24 ascon128abi32v12

36.98 37.23 37.26 T:schwaemm256128v2

43.64 43.79 44.02 T:schwaemm128128v2

45.49 45.56 45.65 ascon128bi32v12

47.55 47.73 47.88 romulusn

47.95 47.98 48.02 T:schwaemm192192v2

49.45 49.48 49.56 T:grain128aeadv2

52.65 52.72 52.74 T:schwaemm256256v2

59.40 59.48 59.67 T:giftcofb128v1

65.47 65.69 65.79 romulusm

73.77 73.88 74.05 T:tinyjambu128v2

87.84 88.00 88.12 T:tinyjambu192v2

88.49 89.62 91.34 romulust

91.21 91.69 92.02 T:isapa128av20

92.54 92.62 92.95 T:tinyjambu256v2

215.26 215.37 215.45 T:elephant200v2

280.55 280.74 281.43 T:isapk128av20

318.69 323.77 324.27 T:isapa128v20

1258.12 1258.58 1259.45 T:isapk128v20

1433.52 1434.30 1436.55 T:isapxv20

9729.77 9735.25 9738.51 T:elephant176v2

11966.72 11976.72 11984.41 T:elephant160v2

aarch64; Firestorm (610f0230); 2020 Apple M1; 4 x 3200MHz; unstable; `minimac`, `supercop-20211108`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

5.69? 6.32? 13.61? ascon128av12

8.61? 9.44? 24.03? ascon80pqv12

8.68? 9.51? 23.61? ascon128v12

9.51? 10.83? 27.57? T:xoodyakv1

10.55? 11.88? 30.55? T:knot128v2

15.97? 19.86? 36.94? T:schwaemm256128v1

18.33? 20.00? 42.91? T:saeaes128a120t64v1

18.40? 20.00? 42.98? T:saeaes128a64t64v1

18.40? 20.07? 42.91? T:saeaes128a64t128v1

18.47? 20.62? 33.68? T:gimli24v1

15.90? 20.83? 37.08? T:saeaes128a120t128v1

19.79? 21.60? 31.32? T:knot128v1

16.67? 23.05? 43.12? T:schwaemm256256v1

21.67? 23.54? 43.54? T:saeaes192a64t128v1

21.87? 23.54? 50.42? T:saeaes192a120t128v1

20.14? 23.61? 43.61? T:saeaes192a64t64v1

22.99? 25.83? 33.96? T:comet128aesv1

24.30? 26.80? 50.00? T:schwaemm192192v1

24.65? 26.87? 49.65? T:saeaes256a120t128v1

25.00? 26.87? 49.72? T:saeaes256a64t128v1

25.00? 26.94? 38.82? T:saeaes256a64t64v1

23.61? 27.50? 52.08? T:saturninctrcascadev2

23.82? 28.47? 47.36? T:isapa128av20

26.67? 30.21? 39.79? T:grain128aead

26.53? 32.78? 52.64? T:knot256

29.51? 33.61? 44.37? T:knot192

33.33 33.82 34.10 T:photonbeetleaead128rate128v1

22.43? 35.83? 37.71? T:isapa128v20

34.58? 37.92? 54.86? T:schwaemm128128v1

35.76? 39.10? 56.67? T:drygascon128k16

35.83? 39.16? 56.67? T:drygascon128k56

35.83? 39.23? 56.60? T:drygascon128k32

33.19? 39.72? 57.85? T:giftcofb128v1

41.32? 45.76? 52.01? T:drygascon256k32

43.89? 47.64? 62.77? T:tinyjambu128

43.61? 48.12? 50.14? T:spook128mu512v1

43.61? 48.19? 50.14? T:spook128su384v1

42.57? 48.26? 50.14? T:spook128su512v1

42.64? 48.26? 50.14? T:spook128mu384v1

44.23? 48.75? 54.58? T:sestatetweaes128v1

40.97? 49.16? 50.97? T:isapk128av20

48.47? 53.40? 69.23? T:tinyjambu192

39.93? 54.58? 66.46? T:subterraneanv1

51.80? 58.05? 60.34? T:estatetweaes128v1

48.19? 58.61? 70.62? T:tinyjambu256

52.98? 59.30? 61.39? T:mixfeed

61.11 63.75 63.89 T:isapk128v20

71.25? 80.07? 81.80? T:comet128chamv1

75.48? 85.69? 86.04? T:elephant200v1

89.72? 98.19? 101.94? T:comet64chamv1

92.91 101.73 101.87 T:comet64speckv1

98.12 103.95 104.23 T:skinnyaeadtk3128128v1

126.66 127.49 127.91 T:photonbeetleaead128rate32v1

133.47 142.70 142.84 T:romulusn1v1

145.97? 163.95? 164.37? T:skinnyaeadtk29664v1

139.16? 164.02? 164.44? T:skinnyaeadtk296128v1

190.20? 213.60? 214.51? T:skinnyaeadtk39664v1

195.96? 213.74? 218.05? T:skinnyaeadtk312864v1

196.24 214.02 214.23 T:skinnyaeadtk396128v1

205.69 219.30 219.99 T:romulusn3v1

212.98 232.00 232.21 T:pyjamask128aeadv1

230.82 241.31 242.00 T:romulusm1v1

220.82? 246.31? 246.45? T:pyjamask96aeadv1

298.67 315.89 320.26 T:saefforkskinnyb128t192n56v1

293.88 317.49 321.86 T:saefforkskinnyb128t256n120v1

294.16 317.56 317.70 T:paefforkskinnyb128t256n112v1

300.13 317.70 321.86 T:paefforkskinnyb128t192n48v1

314.02 324.22 324.64 T:romulusn2v1

311.31 328.04 330.33 T:wageae128v1

333.11 348.67 353.18 T:romulusm3v1

349.01 361.93 362.14 T:spoc128sliscplight256v1

342.56 373.80 373.94 T:sundaegift128v1

342.69 373.87 378.32 T:sundaegift64v1

342.83 373.87 378.39 T:sundaegift96v1

344.57 373.87 378.39 T:sundaegift0v1

373.11 381.51 383.39 T:spix128v1

431.09 456.30 461.16 T:paefforkskinnyb128t288n104v1

510.74 521.99 524.08 T:romulusm2v1

552.41 589.21 594.70 T:spoc64sliscplight192v1

581.92 593.17 596.16 T:hyenav1

807.75 825.18 830.31 T:paefforkskinnyb64t192n48v1

918.85 921.35 925.80 T:orangezestv1

961.91 964.20 968.30 T:aceae128v1

959.41 986.07 988.57 T:oribatida192v11

1217.73 1222.52 1227.38 T:estatetwegift128v1

1292.45 1309.53 1312.17 T:oribatida256v11

1497.30 1498.90 1503.00 T:twegift64locusaeadv1

1509.94 1511.40 1515.50 T:twegift64lotusaeadv1

3253.69 3256.19 3261.40 T:elephant176v1

3414.73 3430.07 3440.49 T:elephant160v1

Cycles/byte for long+0 decrypt

25% 50% 75% aead

5.56? 6.18? 13.40? ascon128av12

8.54? 9.37? 23.54? ascon80pqv12

8.68? 9.44? 23.61? ascon128v12

9.58? 10.83? 27.85? T:xoodyakv1

10.56? 11.94? 30.69? T:knot128v2

17.22? 18.82? 40.35? T:saeaes128a120t64v1

14.79? 18.82? 34.79? T:saeaes128a120t128v1

17.29? 18.82? 34.79? T:saeaes128a64t64v1

17.29? 19.03? 34.79? T:saeaes128a64t128v1

16.04? 19.93? 36.94? T:schwaemm256128v1

18.33? 20.62? 33.47? T:gimli24v1

19.72? 21.94? 31.32? T:knot128v1

20.62? 22.29? 47.71? T:saeaes192a120t128v1

18.96? 22.36? 41.25? T:saeaes192a64t64v1

20.48? 22.36? 41.25? T:saeaes192a64t128v1

16.60? 23.05? 43.19? T:schwaemm256256v1

23.75? 25.62? 47.64? T:saeaes256a64t128v1

23.47? 25.69? 47.57? T:saeaes256a120t128v1

23.75? 25.69? 37.22? T:saeaes256a64t64v1

23.75? 26.32? 34.37? T:comet128aesv1

24.30? 26.87? 50.07? T:schwaemm192192v1

23.96? 27.71? 51.53? T:saturninctrcascadev2

23.89? 28.54? 47.43? T:isapa128av20

26.04? 32.64? 51.66? T:knot256

29.51? 33.54? 44.16? T:knot192

30.21? 34.10? 34.51? T:photonbeetleaead128rate128v1

31.73? 35.62? 46.73? T:grain128aead

22.29? 35.90? 38.19? T:isapa128v20

34.86? 38.19? 55.34? T:schwaemm128128v1

33.19? 39.86? 57.85? T:giftcofb128v1

37.01? 40.35? 58.33? T:drygascon128k32

36.94? 40.35? 58.40? T:drygascon128k16

36.94? 40.42? 58.33? T:drygascon128k56

42.64? 47.01? 49.03? T:spook128mu512v1

41.67? 47.08? 49.03? T:spook128su512v1

41.53? 47.15? 49.03? T:spook128mu384v1

42.64? 47.15? 49.03? T:spook128su384v1

43.89? 47.64? 62.71? T:tinyjambu128

44.17? 48.47? 54.72? T:sestatetweaes128v1

40.97? 48.96? 51.11? T:isapk128av20

44.58? 49.58? 55.90? T:drygascon256k32

48.68? 52.91? 69.44? T:tinyjambu192

39.86? 54.93? 66.39? T:subterraneanv1

51.80? 58.68? 60.41? T:estatetweaes128v1

48.54? 59.16? 70.97? T:tinyjambu256

52.71? 59.65? 61.60? T:mixfeed

60.97 63.61 63.82 T:isapk128v20

75.41 80.34 82.43 T:skinnyaeadtk3128128v1

72.01? 81.59? 82.91? T:comet128chamv1

74.79? 84.72? 85.62? T:elephant200v1

90.69 99.51 100.55 T:comet64chamv1

93.61 102.57 102.98 T:comet64speckv1

127.36 128.19 128.68 T:photonbeetleaead128rate32v1

133.40 142.63 142.77 T:romulusn1v1

206.80 220.69 221.03 T:romulusn3v1

215.41 234.78 239.23 T:pyjamask128aeadv1

230.68 241.59 242.70 T:romulusm1v1

220.13? 245.55? 250.27? T:pyjamask96aeadv1

228.74? 268.95? 270.75? T:skinnyaeadtk296128v1

240.55? 271.10? 274.09? T:skinnyaeadtk29664v1

315.13 325.33 325.89 T:romulusn2v1

310.96 328.53 330.61 T:wageae128v1

311.31? 347.97? 352.49? T:skinnyaeadtk39664v1

320.47 348.53 352.28 T:skinnyaeadtk312864v1

320.54 348.67 352.00 T:skinnyaeadtk396128v1

331.24 349.85 350.13 T:romulusm3v1

349.50 363.46 364.08 T:spoc128sliscplight256v1

344.50 373.74 378.32 T:sundaegift0v1

350.68 373.74 379.36 T:sundaegift64v1

342.70 373.80 378.11 T:sundaegift96v1

342.63 373.87 378.46 T:sundaegift128v1

373.53 382.07 387.90 T:spix128v1

512.20 523.94 525.74 T:romulusm2v1

551.85 588.45 594.07 T:spoc64sliscplight192v1

598.38 610.32 616.23 T:hyenav1

617.75 653.73 658.59 T:saefforkskinnyb128t192n56v1

604.63 654.00 657.96 T:paefforkskinnyb128t256n112v1

604.28 654.21 657.54 T:saefforkskinnyb128t256n120v1

617.06 654.28 658.86 T:paefforkskinnyb128t192n48v1

787.47 837.40 874.62 T:paefforkskinnyb128t288n104v1

918.64 920.87 925.31 T:orangezestv1

962.18 964.34 968.57 T:aceae128v1

975.59 1002.53 1005.31 T:oribatida192v11

1230.92 1239.12 1243.84 T:estatetwegift128v1

1291.41 1309.53 1311.75 T:oribatida256v11

1440.98 1442.58 1446.47 T:twegift64locusaeadv1

1457.44 1488.34 1494.39 T:paefforkskinnyb64t192n48v1

1509.25 1511.12 1515.57 T:twegift64lotusaeadv1

3250.57 3253.90 3260.98 T:elephant176v1

3413.13 3434.17 3447.99 T:elephant160v1

Cycles/byte for long+0 forgery

25% 50% 75% aead

5.62? 6.25? 13.47? ascon128av12

8.54? 9.37? 23.54? ascon80pqv12

8.68? 9.44? 23.54? ascon128v12

9.58? 10.83? 27.85? T:xoodyakv1

10.56? 11.94? 30.62? T:knot128v2

11.11? 18.89? 19.37? T:isapa128v20

16.18? 19.17? 31.46? T:isapa128av20

18.19? 19.79? 36.80? T:saeaes128a64t64v1

15.62? 19.86? 36.73? T:saeaes128a120t128v1

18.26? 19.86? 36.87? T:saeaes128a64t128v1

18.19? 20.00? 42.57? T:saeaes128a120t64v1

18.40? 20.62? 33.47? T:gimli24v1

17.01? 20.97? 38.96? T:schwaemm256128v1

19.79? 21.94? 31.18? T:knot128v1

21.53? 23.33? 50.00? T:saeaes192a120t128v1

19.86? 23.40? 43.19? T:saeaes192a64t64v1

21.39? 23.40? 43.12? T:saeaes192a64t128v1

17.57? 24.17? 44.86? T:schwaemm256256v1

23.89? 26.32? 34.51? T:comet128aesv1

24.44? 26.73? 43.40? T:saeaes256a120t128v1

24.65? 26.73? 38.68? T:saeaes256a64t64v1

24.72? 26.74? 49.37? T:saeaes256a64t128v1

23.96? 27.71? 51.60? T:saturninctrcascadev2

25.35? 27.98? 52.22? T:schwaemm192192v1

25.97? 31.53? 51.53? T:knot256

28.19? 32.92? 34.44? T:isapk128av20

29.51? 33.54? 44.23? T:knot192

32.98 33.96 34.23 T:photonbeetleaead128rate128v1

32.22? 35.69? 46.80? T:grain128aead

38.26 38.89 42.08 T:isapk128v20

35.62? 39.23? 56.66? T:schwaemm128128v1

33.19? 39.86? 57.98? T:giftcofb128v1

36.94? 40.35? 58.33? T:drygascon128k32

36.94? 40.35? 58.40? T:drygascon128k56

36.94? 40.42? 58.40? T:drygascon128k16

42.64? 47.01? 49.03? T:spook128su384v1

42.57? 47.15? 49.03? T:spook128mu512v1

41.67? 47.15? 49.03? T:spook128su512v1

41.67? 47.29? 49.03? T:spook128mu384v1

44.09? 47.91? 62.91? T:tinyjambu128

44.23? 48.47? 54.79? T:sestatetweaes128v1

44.93? 49.93? 56.11? T:drygascon256k32

48.82? 54.65? 69.44? T:tinyjambu192

39.93? 55.00? 66.46? T:subterraneanv1

51.80? 58.89? 60.55? T:estatetweaes128v1

52.01? 59.09? 70.76? T:tinyjambu256

52.85? 59.51? 61.46? T:mixfeed

75.48 80.41 82.08 T:skinnyaeadtk3128128v1

72.08? 82.77? 83.12? T:comet128chamv1

74.23? 84.72? 85.83? T:elephant200v1

90.69 99.44 100.69 T:comet64chamv1

93.61 102.57 103.82 T:comet64speckv1

127.84 128.26 128.75 T:photonbeetleaead128rate32v1

133.54 142.63 142.84 T:romulusn1v1

206.59 220.41 220.89 T:romulusn3v1

215.27 234.43 238.81 T:pyjamask128aeadv1

230.75 241.59 246.10 T:romulusm1v1

220.06? 245.55? 245.75? T:pyjamask96aeadv1

231.10? 270.41? 274.57? T:skinnyaeadtk296128v1

241.45? 271.17? 272.98? T:skinnyaeadtk29664v1

306.86 311.03 312.14 T:wageae128v1

315.20 325.33 329.99 T:romulusn2v1

331.38 346.51 349.57 T:romulusm3v1

320.06 347.97 352.69 T:skinnyaeadtk39664v1

320.68 348.74 352.21 T:skinnyaeadtk312864v1

320.82 348.88 350.40 T:skinnyaeadtk396128v1

348.60 360.19 360.82 T:spoc128sliscplight256v1

342.63 373.74 373.94 T:sundaegift128v1

342.69 373.74 374.01 T:sundaegift96v1

344.43 373.74 373.94 T:sundaegift0v1

350.68 373.80 374.15 T:sundaegift64v1

374.22 382.28 388.80 T:spix128v1

512.20 523.73 530.05 T:romulusm2v1

561.51 588.31 592.62 T:spoc64sliscplight192v1

597.96 609.21 611.85 T:hyenav1

604.42 652.75 658.93 T:paefforkskinnyb128t256n112v1

617.82 653.38 658.10 T:saefforkskinnyb128t192n56v1

616.64 653.65 656.78 T:saefforkskinnyb128t256n120v1

616.99 654.00 658.24 T:paefforkskinnyb128t192n48v1

787.26 833.65 838.79 T:paefforkskinnyb128t288n104v1

918.78 921.08 925.66 T:orangezestv1

962.39 965.52 969.75 T:aceae128v1

976.00 1000.38 1006.21 T:oribatida192v11

1236.90 1240.09 1246.13 T:estatetwegift128v1

1291.55 1309.12 1313.91 T:oribatida256v11

1441.05 1446.05 1447.44 T:twegift64locusaeadv1

1457.65 1492.72 1508.41 T:paefforkskinnyb64t192n48v1

1509.25 1511.54 1516.40 T:twegift64lotusaeadv1

3253.69 3257.44 3261.68 T:elephant176v1

3412.99 3429.94 3450.07 T:elephant160v1

Cycles/byte for long+long encrypt

25% 50% 75% aead

5.66 6.25 6.25 ascon128av12

7.67 8.30 8.33 T:xoodyakv1

8.65 9.31 9.37 ascon80pqv12

8.78 9.34 9.41 ascon128v12

10.80 11.84 11.94 T:knot128v2

14.20 15.07 15.49 T:saeaes128a120t128v1

14.17 15.14 15.42 T:saeaes128a120t64v1

16.63 17.43 18.09 T:saeaes192a120t128v1

18.51 19.06 19.76 T:schwaemm256128v1

18.75 19.13 19.83 T:saeaes128a64t128v1

18.54 19.20 19.86 T:saeaes128a64t64v1

19.48 19.83 20.49 T:gimli24v1

19.44 19.93 20.59 T:saeaes256a120t128v1

20.62 20.83 21.56 T:knot128v1

21.70 22.15 22.95 T:schwaemm256256v1

22.01 22.53 23.33 T:saeaes192a64t128v1

22.01 22.60 23.40 T:saeaes192a64t64v1

22.33 22.92 23.71 T:isapa128av20

23.30 23.40 24.17 T:comet128aesv1

24.93 25.69 26.70 T:saeaes256a64t64v1

25.17 25.73 26.74 T:saeaes256a64t128v1

25.31 25.80 26.74 T:schwaemm192192v1

25.80 26.11 27.12 T:saturninctrcascadev2

26.94 27.12 28.26 T:isapa128v20

28.26 28.30 29.34 T:grain128aead

30.69 30.90 31.84 T:knot256

32.05 32.15 33.05 T:tinyjambu128

32.33 32.36 33.23 T:knot192

32.19 33.26 33.64 T:photonbeetleaead128rate128v1

32.88 33.78 34.44 T:sestatetweaes128v1

34.48 34.65 35.87 T:tinyjambu192

36.42 36.67 37.29 T:schwaemm128128v1

37.36 37.39 38.12 T:tinyjambu256

37.64 37.64 38.33 T:drygascon128k16

37.60 37.67 38.37 T:drygascon128k56

37.64 37.74 38.40 T:drygascon128k32

38.61 38.71 39.41 T:giftcofb128v1

39.27 39.41 40.21 T:isapk128av20

42.12 42.22 42.78 T:estatetweaes128v1

44.23 44.51 44.93 T:drygascon256k32

46.42 46.46 46.53 T:spook128mu512v1

46.42 46.46 46.53 T:spook128mu384v1

46.42 46.49 46.53 T:spook128su512v1

46.46 46.53 46.80 T:spook128su384v1

48.82 48.85 49.03 T:subterraneanv1

50.38 51.66 51.80 T:isapk128v20

57.01 57.15 57.25 T:mixfeed

62.12 62.39 62.50 T:elephant200v1

78.82 78.89 78.89 T:comet128chamv1

98.36 98.50 98.61 T:comet64chamv1

103.16 103.36 103.47 T:comet64speckv1

103.61 103.82 103.92 T:skinnyaeadtk3128128v1

120.76 120.90 121.18 T:romulusn1v1

127.01 131.07 132.43 T:photonbeetleaead128rate32v1

163.88 164.19 164.58 T:skinnyaeadtk29664v1

163.92 164.23 166.80 T:skinnyaeadtk296128v1

170.17 170.44 171.42 T:romulusm1v1

172.15 173.67 174.02 T:romulusn3v1

213.71 214.02 216.69 T:skinnyaeadtk312864v1

213.78 214.40 216.42 T:skinnyaeadtk39664v1

214.05 214.71 216.59 T:skinnyaeadtk396128v1

232.73 233.67 234.05 T:pyjamask128aeadv1

238.25 238.53 239.30 T:romulusm3v1

244.37 245.72 247.56 T:pyjamask96aeadv1

255.96 256.52 259.23 T:romulusn2v1

258.91 259.02 261.73 T:saefforkskinnyb128t192n56v1

259.02 259.26 261.90 T:paefforkskinnyb128t192n48v1

259.05 259.75 261.93 T:paefforkskinnyb128t256n112v1

259.43 259.78 262.45 T:saefforkskinnyb128t256n120v1

280.34 281.13 283.43 T:sundaegift64v1

280.30 281.20 281.31 T:sundaegift128v1

280.30 281.34 283.46 T:sundaegift0v1

280.41 281.34 283.46 T:sundaegift96v1

310.99 329.43 330.72 T:wageae128v1

357.17 358.08 360.33 T:romulusm2v1

361.55 362.52 364.74 T:spoc128sliscplight256v1

374.57 375.89 377.49 T:paefforkskinnyb128t288n104v1

385.68 388.80 389.26 T:spix128v1

589.70 592.48 594.46 T:spoc64sliscplight192v1

592.55 594.11 595.32 T:hyenav1

667.61 676.81 678.03 T:paefforkskinnyb64t192n48v1

736.50 738.03 739.24 T:oribatida192v11

917.05 919.20 920.24 T:estatetwegift128v1

920.83 922.85 923.16 T:orangezestv1

962.05 963.89 966.14 T:aceae128v1

980.34 980.97 983.64 T:oribatida256v11

1116.73 1120.75 1139.47 T:twegift64lotusaeadv1

1128.08 1129.12 1130.16 T:twegift64locusaeadv1

2428.52 2431.47 2433.97 T:elephant176v1

2567.85 2573.79 2580.56 T:elephant160v1

Cycles/byte for long+long decrypt

25% 50% 75% aead

5.62 6.18 6.21 ascon128av12

7.67 8.33 8.40 T:xoodyakv1

8.75 9.37 9.58 ascon128v12

8.78 9.37 9.58 ascon80pqv12

10.97 11.98 12.12 T:knot128v2

13.61 14.72 14.96 T:saeaes128a120t64v1

13.61 14.72 15.03 T:saeaes128a120t128v1

16.08 17.12 17.50 T:saeaes192a120t128v1

17.99 18.61 19.48 T:saeaes128a64t64v1

18.19 18.65 19.55 T:saeaes128a64t128v1

18.54 19.17 19.93 T:schwaemm256128v1

18.89 19.37 20.21 T:saeaes256a120t128v1

19.41 19.72 20.59 T:gimli24v1

20.59 20.83 21.63 T:knot128v1

21.39 21.91 22.71 T:saeaes192a64t128v1

21.42 21.94 22.74 T:saeaes192a64t64v1

21.80 22.22 22.88 T:schwaemm256256v1

22.33 22.92 23.68 T:isapa128av20

23.37 23.51 24.37 T:comet128aesv1

24.62 25.14 26.01 T:saeaes256a64t128v1

24.37 25.14 26.04 T:saeaes256a64t64v1

25.38 25.87 26.91 T:schwaemm192192v1

25.76 26.08 27.05 T:saturninctrcascadev2

26.91 27.15 28.33 T:isapa128v20

30.31 30.38 31.73 T:knot256

30.76 30.83 32.15 T:grain128aead

32.12 32.22 33.37 T:tinyjambu128

32.29 32.33 33.58 T:knot192

32.43 33.68 33.92 T:photonbeetleaead128rate128v1

33.05 34.13 34.27 T:sestatetweaes128v1

34.44 34.58 35.80 T:tinyjambu192

36.53 36.66 37.64 T:schwaemm128128v1

37.43 37.50 38.71 T:tinyjambu256

38.19 38.23 39.27 T:drygascon128k32

38.19 38.23 39.23 T:drygascon128k56

38.16 38.26 39.17 T:drygascon128k16

38.58 38.68 39.65 T:giftcofb128v1

39.30 39.37 40.35 T:isapk128av20

42.22 42.26 43.05 T:estatetweaes128v1

45.94 45.97 46.66 T:spook128mu384v1

45.94 45.97 46.70 T:spook128su384v1

45.94 45.97 46.63 T:spook128su512v1

45.94 45.97 46.63 T:spook128mu512v1

46.07 46.25 46.80 T:drygascon256k32

48.89 49.03 49.51 T:subterraneanv1

50.21 51.60 51.77 T:isapk128v20

57.01 57.15 57.25 T:mixfeed

61.73 61.91 63.99 T:elephant200v1

79.89 79.96 80.17 T:comet128chamv1

92.50 92.57 92.67 T:skinnyaeadtk3128128v1

98.68 98.99 99.68 T:comet64chamv1

103.71 103.85 103.99 T:comet64speckv1

120.69 120.86 121.14 T:romulusn1v1

127.56 130.27 132.15 T:photonbeetleaead128rate32v1

170.20 170.69 171.24 T:romulusm1v1

172.63 172.98 174.58 T:romulusn3v1

215.76 216.59 218.08 T:skinnyaeadtk29664v1

215.76 217.11 218.57 T:skinnyaeadtk296128v1

234.12 235.23 235.79 T:pyjamask128aeadv1

238.71 239.02 239.71 T:romulusm3v1

243.81 244.71 245.09 T:pyjamask96aeadv1

256.76 256.93 259.64 T:romulusn2v1

280.20 281.20 283.43 T:sundaegift64v1

280.30 281.20 283.57 T:sundaegift96v1

280.23 281.27 283.53 T:sundaegift128v1

280.27 281.38 283.53 T:sundaegift0v1

281.41 282.21 284.29 T:skinnyaeadtk39664v1

281.27 282.42 284.57 T:skinnyaeadtk312864v1

283.57 285.09 286.76 T:skinnyaeadtk396128v1

311.59 329.36 330.61 T:wageae128v1

357.97 358.88 361.03 T:romulusm2v1

363.08 364.26 364.99 T:spoc128sliscplight256v1

385.89 388.84 389.32 T:spix128v1

426.75 427.76 430.19 T:saefforkskinnyb128t256n120v1

426.58 428.00 430.85 T:paefforkskinnyb128t192n48v1

427.21 428.39 432.76 T:saefforkskinnyb128t192n56v1

427.76 428.84 430.30 T:paefforkskinnyb128t256n112v1

563.62 565.92 567.41 T:paefforkskinnyb128t288n104v1

589.80 591.78 593.24 T:spoc64sliscplight192v1

607.86 609.63 611.85 T:hyenav1

743.06 747.02 748.30 T:oribatida192v11

920.62 920.73 923.05 T:orangezestv1

933.51 936.73 938.16 T:estatetwegift128v1

961.80 963.99 966.28 T:aceae128v1

979.68 980.52 981.28 T:oribatida256v11

1007.74 1010.79 1012.39 T:paefforkskinnyb64t192n48v1

1100.13 1100.86 1101.66 T:twegift64locusaeadv1

1118.74 1121.03 1165.44 T:twegift64lotusaeadv1

2429.35 2434.94 2449.35 T:elephant176v1

2557.30 2568.09 2574.41 T:elephant160v1

Cycles/byte for long+long forgery

25% 50% 75% aead

5.66? 6.21? 6.39? ascon128av12

7.71 8.33 8.40 T:xoodyakv1

8.78 9.34 9.62 ascon128v12

8.78 9.37 9.58 ascon80pqv12

10.94 11.98 12.12 T:knot128v2

14.10 15.21 15.42 T:saeaes128a120t64v1

14.06 15.28 15.45 T:saeaes128a120t128v1

16.56 17.43 18.12 T:saeaes192a120t128v1

18.09 18.19 19.03 T:isapa128v20

17.92 18.33 19.20 T:isapa128av20

18.68 19.10 20.00 T:saeaes128a64t128v1

18.44 19.13 19.83 T:saeaes128a64t64v1

19.41 19.76 20.66 T:gimli24v1

19.34 19.79 20.73 T:saeaes256a120t128v1

19.10 19.83 20.49 T:schwaemm256128v1

20.66 20.87 21.63 T:knot128v1

21.87 22.36 23.19 T:saeaes192a64t128v1

21.91 22.50 23.26 T:saeaes192a64t64v1

22.19 22.74 23.40 T:schwaemm256256v1

23.33 23.51 24.24 T:comet128aesv1

24.83 25.59 26.67 T:saeaes256a64t64v1

25.07 25.62 26.56 T:saeaes256a64t128v1

25.73 26.08 26.98 T:saturninctrcascadev2

25.87 26.46 27.46 T:schwaemm192192v1

30.28 30.42 31.67 T:knot256

30.80 30.87 32.15 T:grain128aead

31.63 31.77 32.95 T:isapk128av20

32.08 32.12 33.26 T:tinyjambu128

32.29 32.36 33.51 T:knot192

32.29 33.37 33.75 T:photonbeetleaead128rate128v1

33.02 34.17 34.30 T:sestatetweaes128v1

34.58 34.69 35.69 T:tinyjambu192

37.01 37.12 38.23 T:schwaemm128128v1

37.33 37.39 38.40 T:tinyjambu256

38.19 38.19 39.23 T:drygascon128k16

38.19 38.19 39.13 T:drygascon128k32

38.19 38.26 39.17 T:drygascon128k56

38.58 38.61 39.62 T:giftcofb128v1

38.99 39.20 40.03 T:isapk128v20

42.29 42.36 43.30 T:estatetweaes128v1

45.90 45.97 46.66 T:spook128su512v1

45.94 45.97 46.63 T:spook128su384v1

45.94 45.97 46.70 T:spook128mu384v1

45.97 45.97 46.63 T:spook128mu512v1

46.04 46.39 46.70 T:drygascon256k32

48.85 48.96 49.58 T:subterraneanv1

57.08 57.22 57.32 T:mixfeed

61.70 61.77 62.01 T:elephant200v1

79.86 79.93 80.03 T:comet128chamv1

92.36 92.57 93.05 T:skinnyaeadtk3128128v1

98.82 98.89 98.99 T:comet64chamv1

102.22 103.64 103.85 T:comet64speckv1

120.69 120.97 121.11 T:romulusn1v1

126.45 127.04 128.54 T:photonbeetleaead128rate32v1

170.41 170.86 172.94 T:romulusm1v1

173.85 174.19 174.61 T:romulusn3v1

215.51 216.31 218.19 T:skinnyaeadtk296128v1

216.35 217.63 220.23 T:skinnyaeadtk29664v1

233.98 235.27 237.00 T:pyjamask128aeadv1

238.74 239.16 239.44 T:romulusm3v1

243.78 244.75 246.93 T:pyjamask96aeadv1

256.76 256.93 259.68 T:romulusn2v1

280.13 281.03 283.32 T:sundaegift64v1

280.23 281.17 284.09 T:sundaegift0v1

280.20 281.20 283.50 T:sundaegift96v1

280.20 281.31 283.43 T:sundaegift128v1

281.13 282.25 284.50 T:skinnyaeadtk312864v1

281.55 282.32 283.77 T:skinnyaeadtk39664v1

283.98 285.30 286.90 T:skinnyaeadtk396128v1

310.23 312.42 313.63 T:wageae128v1

358.01 358.84 358.91 T:romulusm2v1

360.12 361.17 363.49 T:spoc128sliscplight256v1

386.03 390.16 391.10 T:spix128v1

427.55 427.97 430.12 T:paefforkskinnyb128t256n112v1

426.51 427.97 429.91 T:paefforkskinnyb128t192n48v1

426.96 428.00 431.51 T:saefforkskinnyb128t256n120v1

427.00 428.00 430.33 T:saefforkskinnyb128t192n56v1

564.14 567.17 569.70 T:paefforkskinnyb128t288n104v1

590.32 591.68 593.69 T:spoc64sliscplight192v1

606.19 609.00 613.55 T:hyenav1

744.35 747.16 748.83 T:oribatida192v11

920.59 922.92 923.19 T:orangezestv1

935.31 937.46 939.72 T:estatetwegift128v1

961.49 965.00 967.43 T:aceae128v1

979.96 980.31 981.28 T:oribatida256v11

1009.89 1011.31 1013.88 T:paefforkskinnyb64t192n48v1

1099.92 1100.55 1101.21 T:twegift64locusaeadv1

1116.90 1120.44 1138.78 T:twegift64lotusaeadv1

2431.99 2439.14 2462.09 T:elephant176v1

2567.68 2572.99 2586.84 T:elephant160v1

Cycles/byte for 0+long encrypt

25% 50% 75% aead

5.00? 5.83? 12.85? T:xoodyakv1

5.49? 6.18? 13.33? ascon128av12

8.19? 9.37? 17.43? ascon80pqv12

8.26? 9.44? 20.14? ascon128v12

10.00? 10.76? 17.57? T:saeaes128a120t128v1

10.00? 10.83? 17.50? T:saeaes128a120t64v1

10.28? 11.87? 19.65? T:knot128v2

11.67? 12.64? 20.49? T:saeaes192a120t128v1

13.61? 14.93? 19.03? T:saeaes256a120t128v1

18.05 18.96 19.17 T:isapa128v20

18.82 18.96 18.96 T:tinyjambu256

17.57? 19.30? 25.49? T:isapa128av20

18.54? 19.37? 21.39? T:tinyjambu128

18.68? 19.37? 21.46? T:tinyjambu192

19.65 19.93 20.07 T:sestatetweaes128v1

18.61? 20.00? 28.47? T:saeaes128a64t128v1

18.26? 20.07? 28.75? T:schwaemm256128v1

18.54? 20.42? 28.47? T:saeaes128a64t64v1

19.65? 20.76? 24.86? T:gimli24v1

20.83? 21.94? 24.30? T:knot128v1

21.73 22.78 23.12 T:comet128aesv1

21.53? 23.12? 30.21? T:schwaemm256256v1

21.67? 23.12? 30.42? T:saeaes192a64t128v1

21.67? 23.12? 30.42? T:saeaes192a64t64v1

24.79? 26.60? 34.93? T:saeaes256a64t128v1

25.00? 26.80? 43.12? T:saeaes256a64t64v1

23.61? 27.08? 32.57? T:saturninctrcascadev2

24.30? 27.08? 35.42? T:schwaemm192192v1

26.81 28.40 28.82 T:grain128aead

28.33 29.37 29.79 T:estatetweaes128v1

31.39 31.53 33.33 T:isapk128av20

30.14? 32.01? 36.18? T:knot256

31.46 33.12 33.61 T:knot192

32.43 33.12 33.61 T:photonbeetleaead128rate128v1

35.14? 38.05? 39.37? T:schwaemm128128v1

37.92 38.47 41.60 T:isapk128v20

36.39 38.89 39.10 T:drygascon128k56

36.46 38.96 39.03 T:drygascon128k16

36.80 38.96 39.10 T:drygascon128k32

37.78 40.42 40.69 T:giftcofb128v1

41.39 42.91 43.96 T:elephant200v1

43.75 44.30 45.83 T:drygascon256k32

44.51 45.55 46.94 T:subterraneanv1

46.46 46.46 47.92 T:spook128mu512v1

46.46 46.46 48.19 T:spook128su512v1

46.32 46.53 48.19 T:spook128su384v1

46.46 46.53 48.26 T:spook128mu384v1

56.94 57.15 59.58 T:mixfeed

78.47 78.61 80.69 T:comet128chamv1

98.05 98.47 99.16 T:comet64chamv1

98.95 99.09 99.79 T:romulusm1v1

98.95 99.44 99.72 T:romulusn1v1

103.61 103.95 104.30 T:skinnyaeadtk3128128v1

104.72 105.07 105.27 T:comet64speckv1

126.18 127.43 132.29 T:photonbeetleaead128rate32v1

127.15 127.43 127.50 T:romulusn3v1

127.84 128.05 132.29 T:romulusm3v1

164.23 164.30 164.44 T:skinnyaeadtk296128v1

164.23 164.30 164.44 T:skinnyaeadtk29664v1

186.87 187.08 191.66 T:sundaegift96v1

187.01 187.15 187.28 T:sundaegift64v1

186.80 187.21 187.22 T:sundaegift128v1

187.01 187.22 187.49 T:sundaegift0v1

187.49 187.98 188.05 T:romulusn2v1

191.59 191.73 191.94 T:romulusm2v1

200.41 200.62 201.17 T:paefforkskinnyb128t256n112v1

200.48 200.76 200.96 T:paefforkskinnyb128t192n48v1

201.80 201.94 202.01 T:saefforkskinnyb128t192n56v1

201.87 203.26 205.06 T:saefforkskinnyb128t256n120v1

213.67 214.09 218.46 T:skinnyaeadtk396128v1

213.88 214.30 214.64 T:skinnyaeadtk312864v1

213.88 214.51 214.92 T:skinnyaeadtk39664v1

233.25 233.95 239.02 T:pyjamask128aeadv1

242.00 242.77 243.18 T:pyjamask96aeadv1

292.91 294.57 298.74 T:paefforkskinnyb128t288n104v1

311.65 328.74 329.78 T:wageae128v1

360.61 360.96 362.76 T:spoc128sliscplight256v1

384.85 385.12 391.03 T:spix128v1

487.48 489.15 493.31 T:oribatida192v11

519.42 524.91 526.51 T:paefforkskinnyb64t192n48v1

586.64 592.89 598.52 T:spoc64sliscplight192v1

591.16 594.56 596.02 T:hyenav1

609.91 612.55 614.84 T:estatetwegift128v1

648.03 654.07 654.90 T:oribatida256v11

752.05 755.32 756.08 T:twegift64locusaeadv1

752.82 764.83 766.29 T:twegift64lotusaeadv1

920.24 924.76 927.26 T:orangezestv1

961.70 965.24 968.50 T:aceae128v1

1603.83 1611.67 1614.73 T:elephant176v1

1701.88 1711.60 1718.27 T:elephant160v1

Cycles/byte for 0+long decrypt

25% 50% 75% aead

5.00? 5.83? 12.78? T:xoodyakv1

5.49? 6.18? 13.33? ascon128av12

8.26? 9.38? 20.21? ascon128v12

8.33? 9.44? 17.43? ascon80pqv12

10.00? 10.76? 17.57? T:saeaes128a120t128v1

10.00? 10.83? 17.50? T:saeaes128a120t64v1

10.42? 12.01? 19.86? T:knot128v2

11.67? 12.50? 20.55? T:saeaes192a120t128v1

13.61? 14.37? 18.96? T:saeaes256a120t128v1

18.82 18.96 19.03 T:tinyjambu256

17.99 19.03 19.58 T:isapa128v20

17.57? 19.17? 25.49? T:isapa128av20

18.47? 19.44? 21.32? T:tinyjambu192

18.54? 19.51? 21.39? T:tinyjambu128

19.72 19.86 20.21 T:sestatetweaes128v1

18.54? 20.00? 28.47? T:saeaes128a64t128v1

18.19? 20.07? 28.89? T:schwaemm256128v1

18.96? 20.42? 28.40? T:saeaes128a64t64v1

19.79? 20.69? 24.79? T:gimli24v1

20.83? 21.87? 24.23? T:knot128v1

21.53 22.98 23.12 T:comet128aesv1

21.67? 23.12? 30.42? T:saeaes192a64t128v1

21.67? 23.12? 30.55? T:saeaes192a64t64v1

21.53? 23.26? 30.21? T:schwaemm256256v1

24.86? 26.53? 35.00? T:saeaes256a64t128v1

25.55? 26.60? 43.19? T:saeaes256a64t64v1

24.58? 26.94? 32.43? T:saturninctrcascadev2

24.37? 27.22? 35.42? T:schwaemm192192v1

26.94 28.40 28.96 T:grain128aead

28.33 29.37 29.86 T:estatetweaes128v1

29.72? 31.60? 35.55? T:knot256

31.46 31.87 33.26 T:isapk128av20

31.46 33.26 33.61 T:knot192

32.71 33.33 33.82 T:photonbeetleaead128rate128v1

35.21? 38.19? 39.37? T:schwaemm128128v1

37.98 38.33 41.80 T:isapk128v20

36.39 38.96 39.10 T:drygascon128k16

36.73 38.96 39.10 T:drygascon128k32

36.39 38.96 39.17 T:drygascon128k56

37.78 40.35 40.55 T:giftcofb128v1

41.46 42.98 43.75 T:elephant200v1

43.68 44.58 45.83 T:drygascon256k32

44.51 45.28 47.01 T:subterraneanv1

46.25 46.46 48.19 T:spook128su384v1

46.39 46.46 47.57 T:spook128mu512v1

46.39 46.46 48.19 T:spook128mu384v1

46.39 46.46 48.19 T:spook128su512v1

56.94 57.22 59.79 T:mixfeed

79.72 79.86 81.32 T:comet128chamv1

98.33 98.54 99.58 T:comet64chamv1

98.88 99.02 100.48 T:romulusm1v1

98.95 99.51 100.00 T:romulusn1v1

103.47 103.75 104.23 T:skinnyaeadtk3128128v1

104.86 105.07 105.69 T:comet64speckv1

126.66 127.36 131.38 T:photonbeetleaead128rate32v1

127.36 127.49 127.56 T:romulusn3v1

127.70 127.84 127.91 T:romulusm3v1

164.23 164.30 164.37 T:skinnyaeadtk29664v1

164.30 164.30 164.44 T:skinnyaeadtk296128v1

186.87 187.08 187.49 T:sundaegift96v1

186.87 187.15 187.22 T:sundaegift128v1

186.80 187.22 187.35 T:sundaegift64v1

187.08 187.22 187.49 T:sundaegift0v1

187.42 187.70 187.91 T:romulusn2v1

191.52 191.59 191.73 T:romulusm2v1

200.83 200.89 201.10 T:paefforkskinnyb128t192n48v1

200.83 200.96 201.03 T:paefforkskinnyb128t256n112v1

201.87 201.94 202.14 T:saefforkskinnyb128t192n56v1

201.94 202.01 203.32 T:saefforkskinnyb128t256n120v1

213.39 214.23 214.57 T:skinnyaeadtk312864v1

213.88 214.30 215.06 T:skinnyaeadtk39664v1

217.77 219.09 219.57 T:skinnyaeadtk396128v1

233.12 233.88 234.99 T:pyjamask128aeadv1

242.42 242.77 242.98 T:pyjamask96aeadv1

292.97 293.32 294.85 T:paefforkskinnyb128t288n104v1

307.70 328.95 329.78 T:wageae128v1

362.28 362.62 363.67 T:spoc128sliscplight256v1

384.85 386.51 386.65 T:spix128v1

486.79 488.73 493.11 T:oribatida192v11

522.48 524.63 530.26 T:paefforkskinnyb64t192n48v1

587.20 594.21 598.31 T:spoc64sliscplight192v1

609.49 611.43 612.68 T:hyenav1

626.50 630.05 630.60 T:estatetwegift128v1

647.54 650.18 650.67 T:oribatida256v11

751.64 755.04 765.46 T:twegift64lotusaeadv1

752.12 755.18 756.57 T:twegift64locusaeadv1

922.53 930.52 932.12 T:orangezestv1

961.56 963.78 970.80 T:aceae128v1

1605.63 1607.09 1615.63 T:elephant176v1

1700.00 1706.32 1718.61 T:elephant160v1

Cycles/byte for 0+long forgery

25% 50% 75% aead

5.00? 5.83? 12.78? T:xoodyakv1

5.49? 6.18? 13.26? ascon128av12

8.26? 9.44? 17.36? ascon80pqv12

8.26? 9.44? 20.21? ascon128v12

9.93? 10.76? 17.57? T:saeaes128a120t128v1

9.93? 10.83? 17.50? T:saeaes128a120t64v1

10.49? 12.01? 19.86? T:knot128v2

11.67? 12.57? 20.55? T:saeaes192a120t128v1

13.61? 14.38? 19.03? T:saeaes256a120t128v1

17.99 19.03 19.51 T:isapa128v20

18.82 19.03 19.03 T:tinyjambu256

17.57? 19.37? 25.42? T:isapa128av20

18.47? 19.51? 21.32? T:tinyjambu128

18.75 19.58 19.86 T:tinyjambu192

18.47? 19.72? 28.47? T:saeaes128a64t128v1

18.47? 19.86? 28.40? T:saeaes128a64t64v1

19.79 19.93 20.21 T:sestatetweaes128v1

18.26? 20.00? 28.82? T:schwaemm256128v1

19.79? 20.76? 24.79? T:gimli24v1

20.76? 21.80? 24.30? T:knot128v1

21.87 22.85 23.12 T:comet128aesv1

21.60? 23.05? 30.42? T:saeaes192a64t128v1

21.67? 23.19? 30.42? T:saeaes192a64t64v1

21.46? 23.40? 30.48? T:schwaemm256256v1

24.86? 26.67? 34.93? T:saeaes256a64t128v1

25.55? 26.73? 43.12? T:saeaes256a64t64v1

25.07? 26.74? 35.42? T:schwaemm192192v1

24.03? 27.22? 32.50? T:saturninctrcascadev2

27.08 28.33 28.89 T:grain128aead

28.33 29.23 30.00 T:estatetweaes128v1

29.72? 31.60? 35.55? T:knot256

31.39 32.15 32.92 T:isapk128av20

31.46 33.40 33.61 T:knot192

32.99 33.47 33.75 T:photonbeetleaead128rate128v1

35.28 38.33 39.16 T:schwaemm128128v1

38.05 38.40 41.73 T:isapk128v20

36.32 38.96 39.10 T:drygascon128k16

36.32 38.96 39.10 T:drygascon128k56

36.73 38.96 39.10 T:drygascon128k32

37.78 40.48 40.55 T:giftcofb128v1

41.46 43.05 43.68 T:elephant200v1

43.89 44.51 45.97 T:drygascon256k32

44.51 45.35 46.73 T:subterraneanv1

46.39 46.39 47.71 T:spook128mu512v1

46.39 46.46 48.26 T:spook128mu384v1

46.39 46.46 48.26 T:spook128su512v1

46.39 46.46 48.33 T:spook128su384v1

57.08 57.29 59.58 T:mixfeed

79.72 79.93 81.39 T:comet128chamv1

98.33 98.54 99.65 T:comet64chamv1

99.02 99.16 100.14 T:romulusm1v1

98.95 99.37 103.26 T:romulusn1v1

103.54 103.88 104.72 T:skinnyaeadtk3128128v1

102.98 104.72 105.41 T:comet64speckv1

126.59 126.80 126.87 T:romulusm3v1

127.08 127.36 127.49 T:romulusn3v1

127.01 127.77 132.43 T:photonbeetleaead128rate32v1

164.23 164.30 164.44 T:skinnyaeadtk296128v1

164.30 164.37 164.44 T:skinnyaeadtk29664v1

186.94 187.08 187.22 T:sundaegift96v1

186.80 187.15 187.28 T:sundaegift64v1

186.94 187.15 187.28 T:sundaegift128v1

187.08 187.28 191.59 T:sundaegift0v1

187.63 187.70 187.84 T:romulusn2v1

191.38 191.59 191.73 T:romulusm2v1

200.82 200.89 201.03 T:paefforkskinnyb128t192n48v1

200.83 200.96 201.24 T:paefforkskinnyb128t256n112v1

201.94 202.14 204.64 T:saefforkskinnyb128t256n120v1

201.94 202.21 206.31 T:saefforkskinnyb128t192n56v1

213.33 213.95 216.87 T:skinnyaeadtk312864v1

213.53 214.23 217.28 T:skinnyaeadtk39664v1

218.46 219.51 224.37 T:skinnyaeadtk396128v1

233.19 233.74 234.78 T:pyjamask128aeadv1

242.07 242.63 242.98 T:pyjamask96aeadv1

292.21 293.67 296.45 T:paefforkskinnyb128t288n104v1

308.95 310.27 313.04 T:wageae128v1

359.15 359.50 361.44 T:spoc128sliscplight256v1

386.93 388.18 390.61 T:spix128v1

486.79 488.52 489.43 T:oribatida192v11

524.15 524.91 527.90 T:paefforkskinnyb64t192n48v1

586.92 592.20 596.99 T:spoc64sliscplight192v1

609.49 611.71 613.38 T:hyenav1

624.42 626.43 632.34 T:estatetwegift128v1

647.34 650.18 654.77 T:oribatida256v11

751.43 754.55 765.67 T:twegift64lotusaeadv1

752.19 755.04 756.43 T:twegift64locusaeadv1

923.58 929.27 930.52 T:orangezestv1

961.49 964.68 975.31 T:aceae128v1

1602.65 1608.90 1614.66 T:elephant176v1

1703.75 1709.03 1725.63 T:elephant160v1

Cycles/byte for 1536+1536 encrypt

25% 50% 75% aead

6.34 6.34 6.38 ascon128av12

8.46 8.51 8.51 T:xoodyakv1

9.46 9.50 9.59 ascon128v12

9.50 9.50 9.55 ascon80pqv12

12.28 12.33 12.41 T:knot128v2

15.02 15.49 15.54 T:saeaes128a120t64v1

15.10 15.49 15.54 T:saeaes128a120t128v1

17.58 18.18 18.27 T:saeaes192a120t128v1

19.27 19.92 20.01 T:saeaes128a64t64v1

19.31 19.96 20.01 T:saeaes128a64t128v1

19.66 20.22 20.36 T:schwaemm256128v1

20.14 20.36 20.83 T:saeaes256a120t128v1

20.22 20.62 20.88 T:gimli24v1

21.14 21.66 21.83 T:knot128v1

22.61 22.70 23.48 T:saeaes192a64t128v1

22.66 22.70 23.48 T:saeaes192a64t64v1

22.74 22.87 23.65 T:schwaemm256256v1

23.74 23.87 24.65 T:comet128aesv1

24.43 24.52 25.30 T:isapa128av20

25.95 25.95 26.87 T:saeaes256a64t128v1

25.95 26.00 26.87 T:saeaes256a64t64v1

26.39 26.47 27.30 T:schwaemm192192v1

27.26 27.30 28.21 T:saturninctrcascadev2

28.64 28.73 29.60 T:grain128aead

31.55 31.60 32.59 T:knot256

32.42 32.42 33.51 T:tinyjambu128

32.94 32.98 34.07 T:knot192

33.20 33.38 34.37 T:sestatetweaes128v1

32.68 33.51 34.16 T:photonbeetleaead128rate128v1

34.81 34.89 36.07 T:tinyjambu192

36.93 37.02 38.24 T:schwaemm128128v1

37.67 37.72 39.02 T:tinyjambu256

37.98 38.02 39.28 T:drygascon128k56

37.98 38.06 39.28 T:drygascon128k16

38.02 38.06 39.32 T:drygascon128k32

38.97 39.02 40.32 T:giftcofb128v1

40.06 40.10 41.45 T:isapa128v20

42.53 42.62 43.88 T:estatetweaes128v1

44.01 44.14 45.31 T:isapk128av20

44.75 45.14 46.01 T:drygascon256k32

47.61 47.65 48.65 T:spook128su384v1

47.61 47.65 48.74 T:spook128su512v1

47.61 47.65 48.70 T:spook128mu384v1

47.61 47.70 48.74 T:spook128mu512v1

50.74 50.82 51.73 T:subterraneanv1

58.50 59.07 60.59 T:mixfeed

63.84 64.06 64.45 T:elephant200v1

80.07 80.16 80.21 T:comet128chamv1

87.80 87.97 88.45 T:isapk128v20

99.30 99.39 102.17 T:comet64chamv1

102.90 103.90 104.42 T:comet64speckv1

105.77 105.81 105.99 T:skinnyaeadtk3128128v1

122.26 122.35 122.48 T:romulusn1v1

126.38 126.82 127.25 T:photonbeetleaead128rate32v1

165.44 165.53 165.62 T:skinnyaeadtk296128v1

165.44 165.57 165.71 T:skinnyaeadtk29664v1

171.65 171.87 172.13 T:romulusm1v1

173.73 173.82 174.82 T:romulusn3v1

215.53 215.66 215.88 T:skinnyaeadtk39664v1

215.66 215.83 218.31 T:skinnyaeadtk312864v1

215.83 216.05 218.35 T:skinnyaeadtk396128v1

238.40 238.53 241.27 T:pyjamask128aeadv1

239.57 239.66 239.88 T:romulusm3v1

248.99 249.08 251.68 T:pyjamask96aeadv1

258.02 258.24 258.37 T:romulusn2v1

259.58 259.63 260.02 T:saefforkskinnyb128t192n56v1

259.71 259.80 262.58 T:paefforkskinnyb128t192n48v1

259.71 259.80 262.49 T:paefforkskinnyb128t256n112v1

260.28 260.32 264.01 T:saefforkskinnyb128t256n120v1

282.24 282.28 285.10 T:sundaegift0v1

283.24 283.28 283.58 T:sundaegift128v1

283.19 283.32 286.06 T:sundaegift64v1

283.24 283.37 286.06 T:sundaegift96v1

322.30 335.53 338.22 T:wageae128v1

359.06 359.10 361.96 T:romulusm2v1

363.35 364.53 367.35 T:spoc128sliscplight256v1

375.59 375.94 377.72 T:paefforkskinnyb128t288n104v1

401.85 401.89 404.67 T:spix128v1

593.68 596.37 597.85 T:spoc64sliscplight192v1

594.60 596.98 598.41 T:hyenav1

666.73 669.38 671.28 T:paefforkskinnyb64t192n48v1

742.85 743.89 747.02 T:oribatida192v11

919.97 922.27 923.44 T:estatetwegift128v1

930.35 933.12 933.38 T:orangezestv1

981.21 981.47 984.12 T:aceae128v1

989.15 991.45 992.11 T:oribatida256v11

1126.34 1127.30 1142.92 T:twegift64lotusaeadv1

1133.25 1135.46 1137.67 T:twegift64locusaeadv1

2450.03 2451.42 2453.68 T:elephant176v1

2602.46 2604.89 2614.31 T:elephant160v1

Cycles/byte for 1536+1536 decrypt

25% 50% 75% aead

6.25 6.29 6.34 ascon128av12

8.46 8.46 8.55 T:xoodyakv1

9.46 9.50 9.64 ascon128v12

9.50 9.50 9.55 ascon80pqv12

12.41 12.46 12.72 T:knot128v2

14.84 14.93 15.15 T:saeaes128a120t128v1

14.67 14.93 15.15 T:saeaes128a120t64v1

17.06 17.58 17.75 T:saeaes192a120t128v1

18.71 19.31 19.66 T:saeaes128a64t64v1

18.79 19.40 19.70 T:saeaes128a64t128v1

19.57 20.18 20.49 T:saeaes256a120t128v1

19.70 20.31 20.57 T:schwaemm256128v1

20.09 20.75 21.01 T:gimli24v1

21.09 21.79 21.87 T:knot128v1

22.05 22.53 22.87 T:saeaes192a64t64v1

22.05 22.79 22.83 T:saeaes192a64t128v1

22.74 23.31 23.52 T:schwaemm256256v1

24.00 24.13 24.96 T:comet128aesv1

24.43 24.48 25.61 T:isapa128av20

25.35 25.43 26.56 T:saeaes256a64t128v1

25.39 25.48 26.52 T:saeaes256a64t64v1

26.43 26.47 27.47 T:schwaemm192192v1

26.95 27.04 27.99 T:saturninctrcascadev2

31.12 31.16 32.16 T:knot256

31.12 31.21 32.16 T:grain128aead

32.51 32.55 33.64 T:tinyjambu128

32.90 32.94 34.03 T:knot192

33.33 33.55 34.42 T:sestatetweaes128v1

32.90 33.77 34.42 T:photonbeetleaead128rate128v1

34.85 34.89 36.15 T:tinyjambu192

37.11 37.19 38.76 T:schwaemm128128v1

37.76 37.89 39.50 T:tinyjambu256

38.58 38.63 40.23 T:drygascon128k56

38.58 38.63 40.23 T:drygascon128k32

38.63 38.63 40.15 T:drygascon128k16

38.97 39.06 40.58 T:giftcofb128v1

40.10 40.19 41.75 T:isapa128v20

42.58 42.66 44.18 T:estatetweaes128v1

44.01 44.10 45.57 T:isapk128av20

47.13 47.13 48.57 T:spook128mu384v1

47.13 47.18 48.52 T:spook128mu512v1

47.13 47.18 48.52 T:spook128su384v1

47.13 47.18 48.52 T:spook128su512v1

47.05 47.26 48.26 T:drygascon256k32

50.74 50.82 52.08 T:subterraneanv1

58.50 59.42 60.63 T:mixfeed

63.32 63.45 64.23 T:elephant200v1

81.25 81.33 81.90 T:comet128chamv1

87.89 88.28 88.89 T:isapk128v20

94.44 94.53 94.70 T:skinnyaeadtk3128128v1

99.91 100.17 102.90 T:comet64chamv1

103.86 104.68 104.90 T:comet64speckv1

122.17 122.30 125.17 T:romulusn1v1

127.60 127.82 128.81 T:photonbeetleaead128rate32v1

172.04 172.17 172.48 T:romulusm1v1

174.12 174.26 174.30 T:romulusn3v1

217.40 218.35 219.83 T:skinnyaeadtk296128v1

218.00 219.00 220.65 T:skinnyaeadtk29664v1

239.66 239.75 242.39 T:pyjamask128aeadv1

240.01 240.36 240.44 T:romulusm3v1

248.51 248.60 251.34 T:pyjamask96aeadv1

258.76 258.80 258.84 T:romulusn2v1

282.19 282.24 285.06 T:sundaegift0v1

283.15 283.19 283.28 T:sundaegift64v1

283.19 283.24 284.23 T:sundaegift128v1

283.15 283.28 285.93 T:sundaegift96v1

283.45 283.93 286.53 T:skinnyaeadtk312864v1

283.80 284.28 286.88 T:skinnyaeadtk39664v1

285.32 285.49 288.27 T:skinnyaeadtk396128v1

322.43 335.75 336.32 T:wageae128v1

359.84 359.88 359.97 T:romulusm2v1

366.00 366.22 367.91 T:spoc128sliscplight256v1

402.07 402.11 404.85 T:spix128v1

427.67 427.85 430.80 T:paefforkskinnyb128t192n48v1

427.76 428.07 430.63 T:paefforkskinnyb128t256n112v1

428.11 428.24 430.93 T:saefforkskinnyb128t256n120v1

428.15 429.67 431.71 T:saefforkskinnyb128t192n56v1

565.04 566.77 569.38 T:paefforkskinnyb128t288n104v1

594.81 596.42 596.68 T:spoc64sliscplight192v1

611.78 613.56 614.60 T:hyenav1

750.97 752.92 754.05 T:oribatida192v11

930.17 930.35 933.12 T:orangezestv1

937.85 938.38 939.29 T:estatetwegift128v1

981.34 981.52 985.07 T:aceae128v1

989.02 991.89 992.84 T:oribatida256v11

1009.03 1011.46 1011.77 T:paefforkskinnyb64t192n48v1

1104.47 1105.43 1107.42 T:twegift64locusaeadv1

1124.09 1127.30 1145.92 T:twegift64lotusaeadv1

2449.17 2450.82 2454.85 T:elephant176v1

2596.08 2602.07 2610.49 T:elephant160v1

Cycles/byte for 1536+1536 forgery

25% 50% 75% aead

6.29 6.29 6.34 ascon128av12

8.46 8.51 8.77 T:xoodyakv1

9.46 9.50 9.55 ascon80pqv12

9.46 9.50 9.55 ascon128v12

12.41 12.46 12.63 T:knot128v2

14.97 15.45 15.71 T:saeaes128a120t64v1

15.32 15.45 15.62 T:saeaes128a120t128v1

17.53 18.14 18.45 T:saeaes192a120t128v1

19.18 19.83 20.14 T:saeaes128a64t64v1

19.23 19.88 20.18 T:isapa128av20

19.27 19.92 20.18 T:saeaes128a64t128v1

20.05 20.75 20.83 T:saeaes256a120t128v1

20.14 20.75 20.96 T:gimli24v1

20.27 20.83 21.05 T:schwaemm256128v1

21.09 21.79 21.87 T:knot128v1

22.53 23.00 23.48 T:saeaes192a64t64v1

22.53 23.05 23.39 T:saeaes192a64t128v1

23.31 23.65 24.09 T:schwaemm256256v1

24.00 24.13 25.00 T:comet128aesv1

24.78 25.00 25.82 T:isapa128v20

25.87 25.87 26.87 T:saeaes256a64t128v1

25.82 25.95 27.08 T:saeaes256a64t64v1

27.00 27.04 27.91 T:schwaemm192192v1

26.95 27.86 28.21 T:saturninctrcascadev2

31.12 31.21 32.20 T:knot256

31.16 31.21 32.20 T:grain128aead

32.46 32.51 33.59 T:tinyjambu128

32.90 32.99 33.98 T:knot192

33.33 33.51 34.33 T:sestatetweaes128v1

32.68 33.81 34.33 T:photonbeetleaead128rate128v1

34.46 34.59 35.68 T:isapk128av20

34.98 35.02 36.33 T:tinyjambu192

37.67 37.76 39.28 T:schwaemm128128v1

37.80 37.89 39.45 T:tinyjambu256

38.58 38.63 40.15 T:drygascon128k56

38.58 38.63 40.28 T:drygascon128k32

38.58 38.63 40.28 T:drygascon128k16

39.02 39.10 40.71 T:giftcofb128v1

42.58 42.66 44.23 T:estatetweaes128v1

46.74 46.87 48.04 T:drygascon256k32

47.13 47.18 48.57 T:spook128mu512v1

47.13 47.18 48.52 T:spook128mu384v1

47.18 47.18 48.52 T:spook128su512v1

47.13 47.22 48.57 T:spook128su384v1

50.78 50.87 52.17 T:subterraneanv1

58.24 58.81 59.37 T:isapk128v20

58.46 59.50 60.59 T:mixfeed

63.28 63.45 64.10 T:elephant200v1

81.25 81.29 81.33 T:comet128chamv1

94.35 94.53 94.70 T:skinnyaeadtk3128128v1

99.78 99.87 102.69 T:comet64chamv1

104.12 104.64 104.81 T:comet64speckv1

122.17 122.26 122.39 T:romulusn1v1

128.38 130.51 131.94 T:photonbeetleaead128rate32v1

172.22 172.26 172.61 T:romulusm1v1

175.34 175.43 175.47 T:romulusn3v1

216.61 218.13 219.39 T:skinnyaeadtk296128v1

217.09 218.48 220.43 T:skinnyaeadtk29664v1

239.66 239.83 242.79 T:pyjamask128aeadv1

238.40 240.05 241.61 T:romulusm3v1

248.56 248.64 251.86 T:pyjamask96aeadv1

258.76 258.80 261.67 T:romulusn2v1

282.28 282.37 285.06 T:sundaegift0v1

283.11 283.15 286.10 T:sundaegift64v1

282.93 283.24 283.76 T:skinnyaeadtk39664v1

283.15 283.28 286.06 T:sundaegift128v1

283.24 283.37 285.93 T:sundaegift96v1

283.24 283.84 286.10 T:skinnyaeadtk312864v1

285.93 286.27 288.62 T:skinnyaeadtk396128v1

317.09 319.61 323.42 T:wageae128v1

359.88 359.97 361.18 T:romulusm2v1

363.09 363.18 363.44 T:spoc128sliscplight256v1

397.29 402.07 402.72 T:spix128v1

427.67 427.80 428.06 T:paefforkskinnyb128t192n48v1

427.89 428.06 431.41 T:paefforkskinnyb128t256n112v1

428.15 428.28 430.97 T:saefforkskinnyb128t256n120v1

428.28 429.19 432.06 T:saefforkskinnyb128t192n56v1

565.52 567.77 568.73 T:paefforkskinnyb128t288n104v1

592.73 595.33 596.81 T:spoc64sliscplight192v1

613.43 614.60 616.38 T:hyenav1

751.06 753.96 754.79 T:oribatida192v11

930.22 932.73 933.12 T:orangezestv1

937.98 939.72 943.28 T:estatetwegift128v1

981.30 981.47 985.29 T:aceae128v1

988.63 991.11 992.67 T:oribatida256v11

1009.21 1011.59 1012.24 T:paefforkskinnyb64t192n48v1

1104.69 1106.90 1108.20 T:twegift64locusaeadv1

1126.04 1126.91 1143.36 T:twegift64lotusaeadv1

2451.38 2452.33 2455.24 T:elephant176v1

2592.91 2596.69 2607.32 T:elephant160v1

Cycles/byte for 64+64 encrypt

25% 50% 75% aead

9.38? 9.38? 18.75? ascon128av12

11.46? 12.50? 21.88? ascon80pqv12

12.50? 12.50? 21.87? ascon128v12

14.58? 14.59? 26.04? T:xoodyakv1

18.75? 18.75? 29.16? T:saeaes128a120t128v1

18.75? 18.75? 29.16? T:saeaes128a120t64v1

19.80? 20.84? 32.29? T:knot128v2

21.87? 21.88? 33.33? T:saeaes192a120t128v1

21.88? 21.88? 31.24? T:saeaes128a64t64v1

21.88? 22.91? 31.25? T:saeaes128a64t128v1

25.00? 25.00? 32.29? T:saeaes256a120t128v1

25.00? 26.04? 32.29? T:saeaes192a64t128v1

25.00? 26.04? 32.29? T:saeaes192a64t64v1

27.08 27.09 29.17 T:knot128v1

29.16? 29.16? 34.37? T:gimli24v1

29.17? 30.20? 38.54? T:saeaes256a64t128v1

29.17? 30.20? 46.87? T:saeaes256a64t64v1

32.29? 33.34? 41.66? T:schwaemm256128v1

34.38 34.38 35.41 T:comet128aesv1

35.41 35.42 36.45 T:grain128aead

36.46? 37.50? 43.75? T:schwaemm256256v1

38.54 38.54 39.58 T:tinyjambu128

38.54 38.55 39.58 T:photonbeetleaead128rate128v1

40.62 40.62 40.62 T:sestatetweaes128v1

41.66 41.66 42.70 T:tinyjambu192

43.74? 43.75? 51.04? T:schwaemm192192v1

44.79 44.79 44.79 T:knot192

44.79 44.79 44.79 T:tinyjambu256

44.79 45.83 45.84 T:drygascon128k56

45.83 45.83 45.84 T:drygascon128k32

45.83 45.84 46.87 T:drygascon128k16

46.87 46.88 46.88 T:giftcofb128v1

47.91 47.91 48.95 T:schwaemm128128v1

47.91 47.91 48.96 T:knot256

48.95 48.96 48.96 T:estatetweaes128v1

54.16? 54.16? 64.58? T:saturninctrcascadev2

57.29 57.29 58.33 T:drygascon256k32

59.38? 60.41? 70.83? T:isapa128av20

73.95 73.95 73.96 T:spook128mu384v1

73.95 73.95 73.96 T:spook128su512v1

73.95 73.95 74.99 T:spook128mu512v1

73.95 73.96 74.99 T:spook128su384v1

87.50 88.54 89.58 T:mixfeed

94.79 94.79 95.83 T:subterraneanv1

94.79 94.79 96.87 T:elephant200v1

108.33 108.33 109.37 T:comet128chamv1

119.78 119.79 120.83 T:comet64chamv1

123.95 124.99 126.04 T:comet64speckv1

138.53 138.54 139.58 T:photonbeetleaead128rate32v1

143.74 143.74 144.78 T:isapk128av20

147.91 148.95 148.95 T:skinnyaeadtk3128128v1

151.03 151.04 151.04 T:romulusn1v1

192.70 192.70 193.74 T:skinnyaeadtk296128v1

192.70 192.70 193.74 T:skinnyaeadtk29664v1

199.99 201.03 202.08 T:romulusn3v1

202.07 202.08 203.12 T:romulusm1v1

249.99 251.04 257.28 T:skinnyaeadtk396128v1

251.03 252.07 254.16 T:skinnyaeadtk312864v1

251.03 252.07 255.20 T:skinnyaeadtk39664v1

260.41 269.78 272.91 T:paefforkskinnyb128t256n112v1

268.74 269.78 274.98 T:saefforkskinnyb128t192n56v1

269.77 269.78 276.03 T:paefforkskinnyb128t192n48v1

269.78 271.86 278.12 T:saefforkskinnyb128t256n120v1

286.45 286.45 289.57 T:romulusm3v1

295.82 295.83 301.02 T:romulusn2v1

316.66 317.70 322.90 T:sundaegift0v1

339.57 341.65 344.78 T:sundaegift64v1

339.57 341.66 345.82 T:sundaegift128v1

339.57 341.66 348.95 T:isapa128v20

341.65 341.66 343.73 T:sundaegift96v1

352.07 362.49 370.82 T:pyjamask128aeadv1

379.15 381.23 384.36 T:pyjamask96aeadv1

381.23 392.69 394.77 T:paefforkskinnyb128t288n104v1

411.44 426.02 428.11 T:spoc128sliscplight256v1

419.77 431.23 434.36 T:romulusm2v1

471.86 477.06 490.60 T:wageae128v1

670.80 671.85 695.80 T:spix128v1

666.64 678.10 691.64 T:spoc64sliscplight192v1

676.02 679.14 708.30 T:hyenav1

678.10 680.18 704.14 T:paefforkskinnyb64t192n48v1

906.22 907.26 946.84 T:isapk128v20

972.88 977.05 1011.42 T:oribatida192v11

1003.09 1008.29 1040.59 T:estatetwegift128v1

1151.00 1152.04 1187.45 T:orangezestv1

1229.12 1230.16 1255.16 T:oribatida256v11

1266.62 1269.74 1296.82 T:twegift64locusaeadv1

1259.32 1281.20 1289.54 T:twegift64lotusaeadv1

1388.48 1393.70 1414.53 T:aceae128v1

3054.05 3058.22 3070.71 T:elephant176v1

3484.24 3509.24 3535.27 T:elephant160v1

Cycles/byte for 64+64 decrypt

25% 50% 75% aead

9.38? 9.38? 18.75? ascon128av12

12.49? 12.50? 21.88? ascon128v12

12.50? 12.50? 21.88? ascon80pqv12

14.58? 14.59? 26.04? T:xoodyakv1

17.71? 17.71? 28.12? T:saeaes128a120t64v1

17.71? 18.75? 28.12? T:saeaes128a120t128v1

20.83? 20.84? 32.29? T:knot128v2

20.84? 20.84? 33.33? T:saeaes192a120t128v1

21.88? 21.88? 30.20? T:saeaes128a64t64v1

21.88? 21.88? 30.21? T:saeaes128a64t128v1

23.96? 25.00? 31.25? T:saeaes256a120t128v1

25.00? 25.00? 32.29? T:saeaes192a64t128v1

25.00? 25.00? 32.29? T:saeaes192a64t64v1

27.08 27.09 29.16 T:knot128v1

29.16? 29.16? 34.38? T:gimli24v1

29.16? 29.16? 45.83? T:saeaes256a64t64v1

29.16? 29.17? 37.50? T:saeaes256a64t128v1

32.29? 33.33? 41.66? T:schwaemm256128v1

35.41 36.45 37.50 T:comet128aesv1

37.50? 37.50? 43.75? T:schwaemm256256v1

38.54 38.54 38.54 T:grain128aead

38.54 38.54 39.59 T:tinyjambu128

39.58 40.62 40.62 T:photonbeetleaead128rate128v1

40.62 40.62 40.62 T:sestatetweaes128v1

41.66 41.66 42.70 T:tinyjambu192

43.75? 44.79? 52.08? T:schwaemm192192v1

44.79 44.79 44.79 T:knot192

44.79 44.79 44.79 T:tinyjambu256

46.87 46.88 46.88 T:drygascon128k32

46.87 46.88 46.88 T:drygascon128k56

46.87 46.88 46.88 T:giftcofb128v1

46.87 46.88 47.91 T:drygascon128k16

47.91 47.91 48.96 T:knot256

47.91? 47.91? 57.29? T:saturninctrcascadev2

48.95 48.95 48.96 T:estatetweaes128v1

48.95 48.95 48.96 T:schwaemm128128v1

59.37 59.38 59.38 T:drygascon256k32

60.41? 60.41? 70.83? T:isapa128av20

73.95 73.95 75.00 T:spook128mu384v1

73.95 73.96 74.99 T:spook128su384v1

73.95 73.96 75.00 T:spook128mu512v1

73.95 73.96 75.00 T:spook128su512v1

88.54 88.54 88.54 T:mixfeed

93.75 94.78 94.79 T:elephant200v1

94.79 95.83 95.83 T:subterraneanv1

110.41 110.41 111.45 T:comet128chamv1

121.87 121.88 122.91 T:comet64chamv1

126.03 126.04 127.08 T:comet64speckv1

136.45 137.49 137.50 T:skinnyaeadtk3128128v1

139.58 139.58 141.66 T:photonbeetleaead128rate32v1

143.74 144.79 151.03 T:isapk128av20

151.04 152.08 154.16 T:romulusn1v1

201.03 201.04 202.08 T:romulusn3v1

209.37 210.41 211.45 T:romulusm1v1

245.82 247.91 253.12 T:skinnyaeadtk296128v1

245.82 247.91 256.24 T:skinnyaeadtk29664v1

286.45 287.48 289.58 T:romulusm3v1

295.83 296.86 303.12 T:romulusn2v1

316.66 317.70 321.86 T:sundaegift0v1

320.82 321.87 324.98 T:skinnyaeadtk39664v1

320.82 322.90 327.07 T:skinnyaeadtk312864v1

323.95 326.02 329.16 T:skinnyaeadtk396128v1

339.57 340.61 342.70 T:isapa128v20

340.61 341.65 346.86 T:sundaegift128v1

339.57 341.66 344.77 T:sundaegift64v1

340.61 341.66 344.78 T:sundaegift96v1

352.07 363.53 370.82 T:pyjamask128aeadv1

376.02 380.20 386.45 T:pyjamask96aeadv1

411.44 424.98 428.11 T:spoc128sliscplight256v1

429.15 429.16 443.73 T:paefforkskinnyb128t256n112v1

417.69 432.27 434.35 T:romulusm2v1

429.15 443.73 452.07 T:paefforkskinnyb128t192n48v1

429.16 443.73 451.02 T:saefforkskinnyb128t192n56v1

436.44 443.73 447.90 T:saefforkskinnyb128t256n120v1

474.98 479.15 497.90 T:wageae128v1

569.77 581.23 585.40 T:paefforkskinnyb128t288n104v1

670.80 671.85 694.77 T:spix128v1

666.64 674.98 697.89 T:spoc64sliscplight192v1

691.64 694.77 720.80 T:hyenav1

908.30 909.34 944.75 T:isapk128v20

1008.30 1009.34 1042.67 T:paefforkskinnyb64t192n48v1

981.21 1010.38 1021.84 T:oribatida192v11

1019.75 1033.30 1060.38 T:estatetwegift128v1

1151.00 1153.08 1184.33 T:orangezestv1

1227.04 1230.16 1277.03 T:oribatida256v11

1242.66 1245.78 1271.83 T:twegift64locusaeadv1

1259.33 1279.12 1286.41 T:twegift64lotusaeadv1

1388.49 1397.87 1421.82 T:aceae128v1

3047.80 3053.00 3119.67 T:elephant176v1

3459.23 3506.12 3538.41 T:elephant160v1

Cycles/byte for 64+64 forgery

25% 50% 75% aead

9.38? 9.38? 18.75? ascon128av12

12.50? 12.50? 21.88? ascon128v12

12.50? 12.50? 21.88? ascon80pqv12

14.58? 14.59? 26.04? T:xoodyakv1

18.74? 18.75? 29.16? T:saeaes128a120t64v1

18.75? 18.75? 29.16? T:saeaes128a120t128v1

20.83? 20.84? 32.29? T:knot128v2

20.84? 21.88? 33.33? T:saeaes192a120t128v1

21.88? 21.88? 31.25? T:saeaes128a64t128v1

21.88? 21.88? 31.25? T:saeaes128a64t64v1

25.00? 25.00? 32.29? T:saeaes256a120t128v1

25.00? 26.04? 32.29? T:saeaes192a64t128v1

25.00? 26.04? 32.29? T:saeaes192a64t64v1

27.08? 27.09? 30.20? T:knot128v1

29.16? 29.16? 34.37? T:gimli24v1

29.16? 30.21? 38.54? T:saeaes256a64t128v1

29.16? 30.21? 45.84? T:saeaes256a64t64v1

33.34? 34.37? 42.70? T:schwaemm256128v1

35.41 35.41 36.45 T:comet128aesv1

37.50 38.54 38.54 T:grain128aead

37.50? 38.54? 44.79? T:schwaemm256256v1

38.54 38.54 39.58 T:tinyjambu128

39.58? 39.59? 46.87? T:isapa128av20

39.58 40.62 40.62 T:photonbeetleaead128rate128v1

40.62 40.62 40.62 T:sestatetweaes128v1

41.66 41.66 42.70 T:tinyjambu192

43.75 43.75 44.79 T:knot192

43.75? 44.79? 52.08? T:schwaemm192192v1

44.79 44.79 44.79 T:tinyjambu256

45.84 46.88 46.88 T:drygascon128k56

46.87 46.88 46.88 T:drygascon128k32

46.87 46.88 46.88 T:giftcofb128v1

46.88 46.88 47.91 T:drygascon128k16

47.91 47.91 48.95 T:knot256

47.91? 47.92? 56.25? T:saturninctrcascadev2

47.91 48.95 48.96 T:estatetweaes128v1

48.95 48.96 50.00 T:schwaemm128128v1

59.38 59.38 60.41 T:drygascon256k32

73.95 73.95 73.95 T:spook128mu384v1

73.95 73.95 73.96 T:spook128mu512v1

73.95 73.95 73.96 T:spook128su384v1

73.95 73.95 73.96 T:spook128su512v1

88.54 88.54 88.54 T:mixfeed

90.62 91.66 91.66 T:isapk128av20

93.75 94.79 94.79 T:elephant200v1

94.79 95.83 95.84 T:subterraneanv1

109.38 110.41 110.41 T:comet128chamv1

121.87 121.87 121.88 T:comet64chamv1

124.99 126.04 127.08 T:comet64speckv1

136.45 137.49 140.62 T:skinnyaeadtk3128128v1

138.53 139.58 139.58 T:photonbeetleaead128rate32v1

151.04 151.04 152.08 T:romulusn1v1

177.08 178.12 179.16 T:isapa128v20

201.03 201.03 202.07 T:romulusn3v1

210.41 210.41 213.53 T:romulusm1v1

246.86 247.91 251.03 T:skinnyaeadtk296128v1

246.87 247.91 252.08 T:skinnyaeadtk29664v1

284.37 285.41 288.53 T:romulusm3v1

295.82 295.83 303.11 T:romulusn2v1

316.65 316.66 320.82 T:sundaegift0v1

320.82 322.91 326.02 T:skinnyaeadtk312864v1

321.86 322.91 324.99 T:skinnyaeadtk39664v1

324.98 327.07 331.23 T:skinnyaeadtk396128v1

335.41 340.62 346.86 T:sundaegift64v1

340.61 341.65 343.73 T:sundaegift96v1

340.62 341.66 344.77 T:sundaegift128v1

352.07 362.49 368.73 T:pyjamask128aeadv1

367.70 380.19 386.44 T:pyjamask96aeadv1

408.31 423.95 426.02 T:spoc128sliscplight256v1

429.15 430.20 444.77 T:paefforkskinnyb128t256n112v1

416.66 431.23 432.28 T:romulusm2v1

428.11 442.70 448.94 T:paefforkskinnyb128t192n48v1

433.31 443.73 449.98 T:saefforkskinnyb128t256n120v1

430.19 443.73 451.02 T:saefforkskinnyb128t192n56v1

452.06 466.65 470.82 T:wageae128v1

476.02 492.70 498.94 T:isapk128v20

567.69 573.94 589.56 T:paefforkskinnyb128t288n104v1

664.55 667.68 691.64 T:spix128v1

666.64 676.02 692.68 T:spoc64sliscplight192v1

690.60 694.77 717.68 T:hyenav1

981.21 986.42 1020.80 T:oribatida192v11

1008.30 1009.34 1046.83 T:paefforkskinnyb64t192n48v1

1018.71 1028.09 1055.17 T:estatetwegift128v1

1152.04 1152.04 1185.37 T:orangezestv1

1227.04 1229.12 1256.20 T:oribatida256v11

1241.62 1244.74 1270.79 T:twegift64locusaeadv1

1260.37 1280.16 1289.53 T:twegift64lotusaeadv1

1386.40 1396.82 1411.41 T:aceae128v1

3047.80 3053.01 3105.09 T:elephant176v1

3447.78 3488.41 3521.74 T:elephant160v1

amd64; Zen3 (a20f10); 2020 AMD Ryzen 9 5950X; 16 x 3400MHz; `zen3`, `supercop-20220213`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

5.11 5.13 5.13 T:ascon128av12

5.44 5.46 5.47 ascon128av12

7.70 7.93 8.13 ascon80pqv12

8.27 8.28 8.28 ascon128v12

10.79 10.81 10.83 T:xoodyakv1

18.63 18.64 18.67 T:gimli24v1

18.43 18.65 18.69 T:knot128v2

19.88 19.88 19.88 T:knot128v1

23.76 23.78 23.78 T:isapa128av20

23.98 24.00 24.03 T:schwaemm256128v1

25.19 25.46 25.50 T:comet128aesv1

25.28? 25.72? 36.68? T:saeaes128a64t128v1

26.18 26.25 26.40 T:saeaes128a120t128v1

26.13 26.27 26.36 T:saeaes128a64t64v1

26.18 26.33 26.43 T:saeaes128a120t64v1

28.05 28.10 28.17 T:schwaemm256256v1

29.73 29.89 32.14 T:saeaes192a64t64v1

29.79 29.91 31.42 T:saeaes192a64t128v1

30.25 30.28 30.34 T:saeaes192a120t128v1

31.15 31.15 31.16 T:isapa128v20

33.10 33.17 33.22 T:saturninctrcascadev2

33.27 33.43 33.50 T:saeaes256a120t128v1

33.41 33.46 33.51 T:saeaes256a64t128v1

33.39 33.50 33.52 T:saeaes256a64t64v1

34.29 34.79 34.93 T:schwaemm192192v1

37.74 37.76 37.77 T:knot256

38.62 38.63 38.63 T:giftcofb128v1

40.33 40.38 40.39 T:knot192

45.76 45.83 45.90 T:schwaemm128128v1

50.37 50.55 50.74 T:photonbeetleaead128rate128v1

51.84 51.87 51.87 T:drygascon128k16

51.86 51.89 51.94 T:drygascon128k32

52.33 52.34 52.34 T:drygascon128k56

54.27 54.36 54.39 T:drygascon256k32

58.75 58.76 58.76 T:tinyjambu128

59.99 60.18 60.19 T:tinyjambu192

60.93 60.98 61.25 T:isapk128av20

50.13? 63.69? 86.10? T:grain128aead

71.26 71.26 71.29 T:tinyjambu256

84.57 84.66 84.84 T:isapk128v20

86.39 86.40 86.41 T:spook128su512v1

86.34 86.41 86.46 T:spook128su384v1

86.87 86.88 86.91 T:spook128mu384v1

86.86 86.88 86.90 T:spook128mu512v1

102.57 102.99 103.17 T:comet64chamv1

102.92? 105.41? 131.48? T:sestatetweaes128v1

112.58 113.00 113.07 T:skinnyaeadtk3128128v1

115.22 115.40 115.44 T:comet64speckv1

126.97 127.99 128.28 T:elephant200v1

120.00 130.20 131.51 T:comet128chamv1

130.87 133.82 136.80 T:mixfeed

127.16? 134.45? 167.40? T:estatetweaes128v1

144.53 145.14 145.87 T:subterraneanv1

166.93 166.98 167.09 T:romulusn1v1

197.71 197.79 197.80 T:pyjamask128aeadv1

201.70 202.14 202.43 T:photonbeetleaead128rate32v1

206.88 206.94 206.98 T:pyjamask96aeadv1

276.66 277.14 282.31 T:skinnyaeadtk29664v1

280.83 280.96 281.23 T:romulusm1v1

277.93 282.77 284.69 T:skinnyaeadtk296128v1

297.00 298.83 304.91 T:romulusn3v1

336.38 337.85 339.05 T:sundaegift96v1

337.30 337.94 338.02 T:sundaegift64v1

337.46 338.10 338.30 T:sundaegift128v1

342.98 344.10 344.71 T:sundaegift0v1

362.71 363.68 365.03 T:spoc128sliscplight256v1

370.23 370.78 376.32 T:spix128v1

396.55 398.27 407.32 T:skinnyaeadtk312864v1

398.10 408.06 417.63 T:skinnyaeadtk39664v1

399.49 412.47 415.24 T:skinnyaeadtk396128v1

433.63 437.43 438.16 T:romulusn2v1

481.67 482.52 493.19 T:romulusm3v1

585.17 603.90 611.28 T:spoc64sliscplight192v1

630.34 633.63 636.31 T:saefforkskinnyb128t192n56v1

628.48 637.30 644.92 T:saefforkskinnyb128t256n120v1

630.91 645.57 651.64 T:paefforkskinnyb128t256n112v1

637.05 653.99 655.39 T:paefforkskinnyb128t192n48v1

670.87 676.35 677.20 T:romulusm2v1

698.18 702.84 704.15 T:wageae128v1

827.55 837.11 838.46 T:paefforkskinnyb128t288n104v1

907.18 907.84 908.02 T:aceae128v1

1402.19 1412.04 1459.68 T:hyenav1

1528.00 1534.08 1534.49 T:orangezestv1

1506.29 1584.79 1596.37 T:paefforkskinnyb64t192n48v1

2098.72 2103.02 2112.57 T:oribatida192v11

2148.28 2246.14 2262.19 T:twegift64lotusaeadv1

2265.64 2274.05 2438.84 T:twegift64locusaeadv1

2323.84 2327.47 2332.91 T:oribatida256v11

2831.90 2836.91 2854.22 T:estatetwegift128v1

6414.91 6431.53 6550.77 T:elephant176v1

7749.73 7753.65 7756.12 T:elephant160v1

Cycles/byte for long+0 decrypt

25% 50% 75% aead

5.13 5.13 5.15 T:ascon128av12

5.29 5.29 5.32 ascon128av12

7.74 7.81 7.83 ascon80pqv12

7.81 7.82 7.82 ascon128v12

10.77 10.78 10.81 T:xoodyakv1

11.89 11.97 12.10 T:gimli24v1

18.23 18.55 18.65 T:knot128v2

19.50 19.50 19.51 T:knot128v1

23.75 23.77 23.80 T:isapa128av20

23.95 23.99 24.04 T:schwaemm256128v1

25.71 25.92 26.10 T:comet128aesv1

26.43 26.53 26.59 T:saeaes128a120t64v1

26.58 26.68 26.74 T:saeaes128a64t64v1

26.65 26.76 26.86 T:saeaes128a120t128v1

26.29? 26.83? 36.58? T:saeaes128a64t128v1

27.86 27.98 28.03 T:schwaemm256256v1

30.00 30.05 30.06 T:saeaes192a120t128v1

30.08 30.27 32.31 T:saeaes192a64t64v1

30.15 30.31 31.33 T:saeaes192a64t128v1

31.25 31.27 31.28 T:isapa128v20

31.84 32.44 32.56 T:schwaemm192192v1

33.73 33.77 33.96 T:saeaes256a64t64v1

33.75 33.81 33.85 T:saeaes256a64t128v1

33.88 34.11 34.31 T:saeaes256a120t128v1

35.02 35.05 35.31 T:saturninctrcascadev2

37.73 37.76 37.76 T:knot256

38.50 38.50 38.50 T:giftcofb128v1

40.38 40.40 40.42 T:knot192

45.76 45.83 45.88 T:schwaemm128128v1

51.96 52.08 52.20 T:photonbeetleaead128rate128v1

52.98 53.02 53.09 T:drygascon128k16

53.00 53.03 53.04 T:drygascon128k32

53.33 53.36 53.91 T:drygascon128k56

54.93 54.96 55.11 T:drygascon256k32

58.00 58.01 58.01 T:tinyjambu128

58.74 58.75 58.76 T:tinyjambu192

60.84 61.15 61.29 T:isapk128av20

53.37? 68.10? 89.26? T:grain128aead

70.26 70.27 70.27 T:tinyjambu256

84.22 84.75 84.83 T:isapk128v20

85.27 85.30 85.36 T:spook128su384v1

85.28 85.31 85.33 T:spook128su512v1

85.87 85.90 85.91 T:spook128mu384v1

85.88 85.91 85.93 T:spook128mu512v1

97.43 97.88 97.97 T:skinnyaeadtk3128128v1

101.93 102.06 102.64 T:sestatetweaes128v1

102.85 102.93 103.05 T:comet64chamv1

115.75 115.92 116.12 T:comet64speckv1

119.39 120.52 130.92 T:comet128chamv1

125.21 125.85 126.42 T:estatetweaes128v1

126.31 126.88 126.99 T:elephant200v1

130.34 133.09 134.31 T:mixfeed

144.64 145.17 145.54 T:subterraneanv1

166.97 166.99 167.22 T:romulusn1v1

202.23 202.24 202.32 T:pyjamask128aeadv1

202.14 202.34 202.54 T:photonbeetleaead128rate32v1

209.28 209.31 209.36 T:pyjamask96aeadv1

281.32 281.49 281.63 T:romulusm1v1

302.50 302.69 303.99 T:romulusn3v1

336.51 336.65 337.05 T:sundaegift64v1

336.59 337.96 338.78 T:sundaegift128v1

337.84 339.00 339.33 T:sundaegift96v1

341.78 342.81 343.09 T:sundaegift0v1

361.98 363.67 365.75 T:spoc128sliscplight256v1

367.92 368.40 368.88 T:spix128v1

438.64 440.02 467.58 T:romulusn2v1

472.27 473.13 475.59 T:skinnyaeadtk296128v1

474.52 475.43 476.17 T:skinnyaeadtk29664v1

484.80 487.66 488.42 T:romulusm3v1

595.64 612.46 616.04 T:spoc64sliscplight192v1

674.77 691.06 693.96 T:romulusm2v1

690.98 693.29 709.92 T:skinnyaeadtk312864v1

700.05 705.80 710.72 T:wageae128v1

688.32 706.67 713.08 T:skinnyaeadtk39664v1

713.37 716.70 740.26 T:skinnyaeadtk396128v1

905.56 905.61 905.66 T:aceae128v1

1086.35 1091.12 1109.97 T:saefforkskinnyb128t192n56v1

1094.82 1098.12 1104.00 T:saefforkskinnyb128t256n120v1

1101.60 1106.45 1111.78 T:paefforkskinnyb128t256n112v1

1111.91 1114.46 1116.12 T:paefforkskinnyb128t192n48v1

1421.81 1455.31 1480.80 T:hyenav1

1528.06 1532.65 1533.27 T:orangezestv1

1619.59 1630.18 1644.96 T:paefforkskinnyb128t288n104v1

2022.69 2031.98 2184.29 T:twegift64locusaeadv1

2081.09 2096.53 2111.40 T:twegift64lotusaeadv1

2322.25 2327.27 2332.20 T:oribatida256v11

2507.16 2562.61 2653.12 T:oribatida192v11

2817.73 2838.90 2870.77 T:estatetwegift128v1

3028.77 3124.48 3142.46 T:paefforkskinnyb64t192n48v1

6423.10 6450.18 6557.74 T:elephant176v1

7756.93 7762.25 7765.23 T:elephant160v1

Cycles/byte for long+0 forgery

25% 50% 75% aead

5.13 5.15 5.15 T:ascon128av12

5.29 5.29 5.32 ascon128av12

7.82 7.82 7.82 ascon128v12

7.69 7.82 7.83 ascon80pqv12

10.82 10.85 10.87 T:xoodyakv1

11.64 11.84 12.05 T:gimli24v1

15.73 15.78 15.79 T:isapa128v20

15.71 15.78 15.81 T:isapa128av20

18.11 18.50 18.54 T:knot128v2

19.48 19.52 19.52 T:knot128v1

25.68 25.80 25.92 T:comet128aesv1

26.02 26.09 26.48 T:schwaemm256128v1

26.93? 27.25? 39.18? T:saeaes128a64t128v1

27.51 27.62 27.69 T:saeaes128a120t64v1

27.62 27.66 27.78 T:saeaes128a64t64v1

27.64 27.79 27.87 T:saeaes128a120t128v1

29.87 29.92 30.01 T:schwaemm256256v1

31.01 31.06 31.11 T:saeaes192a120t128v1

31.07 31.27 33.46 T:saeaes192a64t64v1

31.15 31.30 32.28 T:saeaes192a64t128v1

33.71 34.49 34.57 T:schwaemm192192v1

34.68 34.86 34.91 T:saeaes256a64t128v1

34.78 34.92 34.95 T:saeaes256a64t64v1

33.12? 34.96? 38.35? T:grain128aead

34.98 35.03 35.09 T:saeaes256a120t128v1

35.04 35.07 35.25 T:saturninctrcascadev2

37.73 37.74 37.74 T:knot256

38.50 38.50 38.50 T:giftcofb128v1

40.39 40.41 40.42 T:knot192

43.73 43.81 43.85 T:isapk128av20

47.80 47.87 47.93 T:schwaemm128128v1

51.74 52.01 52.23 T:photonbeetleaead128rate128v1

52.99 53.03 53.06 T:drygascon128k16

52.99 53.05 53.09 T:drygascon128k32

53.36 53.40 53.41 T:drygascon128k56

54.99 55.11 55.18 T:drygascon256k32

58.01 58.01 58.01 T:tinyjambu128

57.94 58.13 58.25 T:isapk128v20

58.74 58.75 58.76 T:tinyjambu192

70.27 70.27 70.27 T:tinyjambu256

85.28 85.32 85.37 T:spook128su384v1

85.29 85.33 85.36 T:spook128su512v1

85.89 85.92 85.97 T:spook128mu512v1

85.88 85.95 85.98 T:spook128mu384v1

97.54 97.64 97.75 T:skinnyaeadtk3128128v1

101.75 102.27 105.48 T:sestatetweaes128v1

102.75 102.84 103.02 T:comet64chamv1

115.73 115.85 116.11 T:comet64speckv1

118.92 120.82 131.66 T:comet128chamv1

125.51 126.03 132.61 T:estatetweaes128v1

125.87 126.86 126.97 T:elephant200v1

130.42 134.02 137.50 T:mixfeed

146.75 147.56 148.08 T:subterraneanv1

166.97 167.00 167.02 T:romulusn1v1

201.86 202.10 202.41 T:photonbeetleaead128rate32v1

202.23 202.27 202.32 T:pyjamask128aeadv1

209.22 209.44 209.62 T:pyjamask96aeadv1

281.43 281.59 281.82 T:romulusm1v1

302.57 303.15 304.86 T:romulusn3v1

337.07 337.40 337.91 T:sundaegift128v1

337.07 337.74 339.07 T:sundaegift64v1

336.67 338.48 339.56 T:sundaegift96v1

342.18 342.44 343.17 T:sundaegift0v1

362.52 362.85 363.45 T:spoc128sliscplight256v1

366.83 368.84 370.71 T:spix128v1

434.33 438.40 443.16 T:romulusn2v1

470.17 470.82 472.81 T:skinnyaeadtk296128v1

475.67 476.22 476.83 T:skinnyaeadtk29664v1

487.16 489.04 494.45 T:romulusm3v1

595.03 601.61 607.94 T:spoc64sliscplight192v1

678.43 679.02 689.16 T:romulusm2v1

689.85 691.24 709.68 T:skinnyaeadtk312864v1

691.91 706.41 727.44 T:wageae128v1

689.19 707.23 725.26 T:skinnyaeadtk39664v1

710.86 720.62 734.01 T:skinnyaeadtk396128v1

905.01 905.70 906.25 T:aceae128v1

1088.81 1095.66 1103.04 T:saefforkskinnyb128t192n56v1

1089.03 1096.93 1123.15 T:paefforkskinnyb128t192n48v1

1084.30 1097.22 1102.04 T:saefforkskinnyb128t256n120v1

1102.93 1115.28 1119.22 T:paefforkskinnyb128t256n112v1

1399.83 1440.47 1457.95 T:hyenav1

1527.44 1534.05 1534.85 T:orangezestv1

1617.84 1620.06 1644.55 T:paefforkskinnyb128t288n104v1

2025.12 2053.18 2168.14 T:twegift64locusaeadv1

2082.47 2092.65 2125.39 T:twegift64lotusaeadv1

2320.48 2332.39 2350.06 T:oribatida256v11

2533.03 2618.43 2632.09 T:oribatida192v11

2863.91 2875.03 2878.33 T:estatetwegift128v1

3128.66 3144.21 3175.04 T:paefforkskinnyb64t192n48v1

6416.41 6419.60 6440.78 T:elephant176v1

7752.56 7754.04 7783.06 T:elephant160v1

Cycles/byte for long+long encrypt

25% 50% 75% aead

5.22 5.23 5.23 T:ascon128av12

5.32 5.33 5.34 ascon128av12

7.82 7.82 7.83 ascon80pqv12

8.07 8.08 8.08 ascon128v12

8.35 8.36 8.39 T:xoodyakv1

15.42 15.43 15.44 T:gimli24v1

16.83 17.99 18.03 T:knot128v2

19.32 19.38 19.42 T:saeaes128a120t64v1

19.49? 19.54? 27.73? T:saeaes128a120t128v1

19.63 19.65 19.67 T:isapa128av20

19.82 19.82 19.82 T:knot128v1

22.49 22.53 22.56 T:saeaes192a120t128v1

23.09 23.24 23.46 T:comet128aesv1

23.39 23.40 23.41 T:isapa128v20

23.69 23.72 23.77 T:schwaemm256128v1

24.47 24.66 24.80 T:saeaes128a64t128v1

24.52 24.69 24.72 T:saeaes128a64t64v1

24.93 25.14 25.29 T:saeaes256a120t128v1

27.82 27.84 27.86 T:schwaemm256256v1

27.89 28.36 29.70 T:saeaes192a64t64v1

28.04? 29.50? 32.58? T:saeaes192a64t128v1

31.56 31.62 31.81 T:saeaes256a64t64v1

31.61 31.65 31.67 T:saeaes256a64t128v1

32.67 32.74 32.83 T:saturninctrcascadev2

34.48 34.52 34.57 T:schwaemm192192v1

38.16 38.18 38.19 T:knot256

38.40 38.41 38.42 T:giftcofb128v1

39.87 39.95 39.99 T:tinyjambu192

40.12 40.13 40.15 T:tinyjambu128

40.31 40.34 40.36 T:knot192

45.84 45.87 45.91 T:schwaemm128128v1

46.39 46.40 46.40 T:tinyjambu256

49.67 49.70 49.71 T:isapk128av20

50.72 50.80 50.89 T:photonbeetleaead128rate128v1

51.51 51.52 51.82 T:drygascon128k16

51.51 51.52 51.53 T:drygascon128k32

51.89 51.90 51.93 T:drygascon128k56

54.01 54.04 54.20 T:drygascon256k32

67.25 67.39 67.45 T:isapk128v20

75.28? 81.68? 90.40? T:grain128aead

75.30? 84.81? 102.21? T:sestatetweaes128v1

86.36 86.37 86.38 T:spook128su512v1

86.35 86.38 86.41 T:spook128su384v1

86.85 86.86 86.89 T:spook128mu512v1

86.86 86.88 86.90 T:spook128mu384v1

96.05 96.21 97.30 T:elephant200v1

101.73 101.88 101.98 T:comet64chamv1

113.89 114.33 114.76 T:skinnyaeadtk3128128v1

114.43 114.52 114.61 T:comet64speckv1

113.27? 122.22? 137.28? T:estatetweaes128v1

119.38 130.93 131.67 T:comet128chamv1

130.38 131.28 134.38 T:mixfeed

134.70 136.23 139.46 T:subterraneanv1

140.01 140.23 140.33 T:romulusn1v1

197.28 197.49 197.59 T:romulusm1v1

200.94 201.43 201.68 T:photonbeetleaead128rate32v1

201.48 201.49 213.45 T:pyjamask128aeadv1

205.99 206.06 206.08 T:pyjamask96aeadv1

237.21 237.57 239.67 T:romulusn3v1

252.28 253.12 253.22 T:sundaegift64v1

252.73 253.50 253.65 T:sundaegift96v1

253.51 253.90 254.02 T:sundaegift128v1

256.49 256.79 257.01 T:sundaegift0v1

276.09 277.36 281.22 T:skinnyaeadtk29664v1

275.47 282.23 283.41 T:skinnyaeadtk296128v1

325.75 327.53 332.29 T:romulusm3v1

345.12 346.60 347.79 T:romulusn2v1

360.17 361.98 363.66 T:spoc128sliscplight256v1

368.45 371.77 372.96 T:spix128v1

395.92 396.69 408.45 T:skinnyaeadtk312864v1

397.92 407.80 409.57 T:skinnyaeadtk39664v1

409.81 427.54 427.98 T:skinnyaeadtk396128v1

455.80 461.41 462.31 T:romulusm2v1

515.79 519.95 523.52 T:saefforkskinnyb128t192n56v1

514.86 521.85 528.57 T:saefforkskinnyb128t256n120v1

522.98 527.51 528.15 T:paefforkskinnyb128t256n112v1

532.57 536.26 576.63 T:paefforkskinnyb128t192n48v1

591.24 601.28 604.60 T:spoc64sliscplight192v1

680.57 686.51 687.76 T:paefforkskinnyb128t288n104v1

693.24 700.25 708.34 T:wageae128v1

906.21 906.67 907.91 T:aceae128v1

1284.74 1288.79 1295.23 T:paefforkskinnyb64t192n48v1

1426.10 1451.03 1458.24 T:hyenav1

1529.87 1530.64 1532.64 T:orangezestv1

1574.40 1582.19 1584.61 T:oribatida192v11

1626.02 1647.34 1653.75 T:twegift64lotusaeadv1

1723.48 1727.01 1778.31 T:twegift64locusaeadv1

1741.61 1747.80 1755.24 T:oribatida256v11

2130.08 2131.43 2170.72 T:estatetwegift128v1

4800.12? 4887.31? 9214.17? T:elephant176v1

5817.20 5818.68 5824.80 T:elephant160v1

Cycles/byte for long+long decrypt

25% 50% 75% aead

5.22 5.22 5.23 T:ascon128av12

5.26 5.27 5.30 ascon128av12

7.72 7.72 7.73 ascon128v12

7.84 7.85 7.85 ascon80pqv12

8.35 8.36 8.37 T:xoodyakv1

12.02 12.05 12.12 T:gimli24v1

16.77 18.00 18.06 T:knot128v2

19.63 19.63 19.63 T:knot128v1

19.63 19.64 19.66 T:isapa128av20

19.64 19.66 19.71 T:saeaes128a120t64v1

19.71? 19.88? 27.95? T:saeaes128a120t128v1

22.38 22.40 22.42 T:saeaes192a120t128v1

23.39 23.39 23.40 T:isapa128v20

23.22 23.62 23.70 T:comet128aesv1

23.68 23.72 23.75 T:schwaemm256128v1

24.64 24.83 25.04 T:saeaes128a64t64v1

24.75 24.89 25.00 T:saeaes128a64t128v1

25.37 25.41 25.47 T:saeaes256a120t128v1

27.72 27.79 27.83 T:schwaemm256256v1

28.13 28.50 29.88 T:saeaes192a64t64v1

28.28? 29.34? 32.11? T:saeaes192a64t128v1

31.74 31.77 31.81 T:saeaes256a64t128v1

31.79 31.83 31.85 T:saeaes256a64t64v1

32.33 32.35 32.38 T:schwaemm192192v1

33.60 33.62 33.63 T:saturninctrcascadev2

36.84 36.84 36.85 T:knot256

38.34 38.35 38.35 T:giftcofb128v1

39.24 39.25 39.31 T:tinyjambu192

39.75 39.76 39.76 T:tinyjambu128

40.26 40.30 40.33 T:knot192

45.77 45.82 45.85 T:schwaemm128128v1

46.25 46.27 46.27 T:tinyjambu256

49.61 49.75 49.93 T:isapk128av20

51.46 51.66 51.76 T:photonbeetleaead128rate128v1

52.08 52.10 52.13 T:drygascon128k32

52.08 52.11 52.18 T:drygascon128k16

52.40 52.41 52.41 T:drygascon128k56

54.53 54.60 54.64 T:drygascon256k32

67.23 67.25 67.37 T:isapk128v20

70.08 70.28 70.54 T:sestatetweaes128v1

77.73? 84.16? 92.23? T:grain128aead

85.80 85.82 85.84 T:spook128su384v1

85.80 85.82 85.84 T:spook128su512v1

86.36 86.40 86.42 T:spook128mu512v1

86.37 86.41 86.42 T:spook128mu384v1

94.15 94.96 97.82 T:estatetweaes128v1

95.46 95.63 97.26 T:elephant200v1

101.65 101.72 101.77 T:comet64chamv1

106.14 106.33 106.38 T:skinnyaeadtk3128128v1

114.47 114.60 114.87 T:comet64speckv1

118.90 119.67 130.54 T:comet128chamv1

131.33 131.99 134.76 T:mixfeed

134.80 135.69 136.03 T:subterraneanv1

139.90 140.16 140.32 T:romulusn1v1

197.69 197.76 197.81 T:romulusm1v1

201.23 201.39 201.81 T:photonbeetleaead128rate32v1

203.71 203.72 203.78 T:pyjamask128aeadv1

207.18 207.24 207.63 T:pyjamask96aeadv1

235.92 236.39 241.07 T:romulusn3v1

252.64 253.06 253.52 T:sundaegift128v1

253.43 253.52 253.69 T:sundaegift64v1

253.48 253.70 253.77 T:sundaegift96v1

256.00 256.14 256.21 T:sundaegift0v1

328.77 330.11 330.45 T:romulusm3v1

341.18 342.05 350.44 T:romulusn2v1

362.25 363.96 365.60 T:spoc128sliscplight256v1

366.40 366.68 367.67 T:spix128v1

375.61 376.21 376.93 T:skinnyaeadtk296128v1

375.17 376.73 378.07 T:skinnyaeadtk29664v1

469.15 471.86 477.02 T:romulusm2v1

549.42 550.51 553.87 T:skinnyaeadtk39664v1

550.98 552.46 561.02 T:skinnyaeadtk312864v1

562.96 563.81 564.54 T:skinnyaeadtk396128v1

590.20 593.96 630.74 T:spoc64sliscplight192v1

691.43 693.37 698.26 T:wageae128v1

747.82 748.85 761.68 T:saefforkskinnyb128t192n56v1

750.79 751.85 763.39 T:paefforkskinnyb128t192n48v1

741.39 755.95 756.72 T:saefforkskinnyb128t256n120v1

756.49 760.02 764.83 T:paefforkskinnyb128t256n112v1

905.52 905.81 909.98 T:aceae128v1

1078.23 1078.92 1079.63 T:paefforkskinnyb128t288n104v1

1430.15 1436.10 1439.67 T:hyenav1

1530.25 1530.98 1531.48 T:orangezestv1

1569.74 1575.59 1576.52 T:twegift64lotusaeadv1

1593.85 1603.86 1673.50 T:twegift64locusaeadv1

1743.05 1748.31 1749.02 T:oribatida256v11

1923.42 1979.94 1994.63 T:oribatida192v11

2046.09 2061.48 2072.53 T:paefforkskinnyb64t192n48v1

2139.56 2147.75 2178.29 T:estatetwegift128v1

4822.17? 4916.65? 9191.30? T:elephant176v1

5814.96 5815.58 5816.40 T:elephant160v1

Cycles/byte for long+long forgery

25% 50% 75% aead

5.22 5.22 5.24 T:ascon128av12

5.27 5.28 5.29 ascon128av12

7.72 7.72 7.73 ascon128v12

7.85 7.85 7.85 ascon80pqv12

8.36 8.38 8.40 T:xoodyakv1

12.04 12.11 12.20 T:gimli24v1

15.62 15.63 15.65 T:isapa128v20

15.61 15.64 15.66 T:isapa128av20

16.73 17.95 18.20 T:knot128v2

19.63 19.63 19.63 T:knot128v1

20.04 20.08 20.21 T:saeaes128a120t64v1

20.19? 20.25? 29.20? T:saeaes128a120t128v1

22.90 22.94 23.08 T:saeaes192a120t128v1

23.18 23.61 23.65 T:comet128aesv1

24.75 24.79 24.93 T:schwaemm256128v1

25.20 25.35 25.37 T:saeaes128a64t64v1

25.29 25.36 25.41 T:saeaes128a64t128v1

25.84 25.90 25.99 T:saeaes256a120t128v1

28.61 28.76 30.34 T:saeaes192a64t64v1

28.76 28.83 28.88 T:schwaemm256256v1

28.86? 29.89? 34.28? T:saeaes192a64t128v1

32.27 32.28 32.38 T:saeaes256a64t128v1

32.28 32.28 32.51 T:saeaes256a64t64v1

33.31 33.36 33.75 T:schwaemm192192v1

33.57 33.67 33.68 T:saturninctrcascadev2

36.84 36.85 36.85 T:knot256

38.34 38.35 38.35 T:giftcofb128v1

39.22 39.25 39.29 T:tinyjambu192

39.76 39.76 39.76 T:tinyjambu128

40.28 40.30 40.33 T:knot192

41.05 41.08 41.16 T:isapk128av20

46.27 46.27 46.27 T:tinyjambu256

46.82 46.88 46.92 T:schwaemm128128v1

51.36 51.55 51.62 T:photonbeetleaead128rate128v1

52.10 52.12 52.14 T:drygascon128k16

52.13 52.41 52.44 T:drygascon128k32

52.40 52.42 52.42 T:drygascon128k56

53.89 54.04 54.06 T:isapk128v20

54.49 54.59 54.70 T:drygascon256k32

50.30? 58.53? 67.30? T:grain128aead

70.10 70.35 72.77 T:sestatetweaes128v1

85.79 85.82 85.85 T:spook128su384v1

85.81 85.83 85.86 T:spook128su512v1

86.40 86.41 86.43 T:spook128mu512v1

86.39 86.42 86.44 T:spook128mu384v1

94.19 94.79 100.09 T:estatetweaes128v1

95.47 95.99 96.69 T:elephant200v1

101.64 101.69 101.77 T:comet64chamv1

106.10 106.20 106.65 T:skinnyaeadtk3128128v1

114.57 114.73 114.92 T:comet64speckv1

119.02 119.14 130.67 T:comet128chamv1

131.41 133.93 134.57 T:mixfeed

135.72 137.02 137.34 T:subterraneanv1

140.05 140.24 140.30 T:romulusn1v1

197.53 197.77 197.83 T:romulusm1v1

201.60 201.94 202.10 T:photonbeetleaead128rate32v1

203.71 203.75 203.83 T:pyjamask128aeadv1

207.25 207.36 207.38 T:pyjamask96aeadv1

235.73 235.88 237.69 T:romulusn3v1

252.64 253.00 253.58 T:sundaegift128v1

252.90 253.43 253.85 T:sundaegift96v1

253.53 253.64 253.90 T:sundaegift64v1

251.88 256.39 256.62 T:sundaegift0v1

328.37 328.69 334.73 T:romulusm3v1

341.26 346.16 346.76 T:romulusn2v1

361.59 362.24 362.57 T:spoc128sliscplight256v1

367.14 368.68 371.57 T:spix128v1

375.07 376.03 376.46 T:skinnyaeadtk296128v1

375.88 376.63 377.74 T:skinnyaeadtk29664v1

458.69 464.08 468.73 T:romulusm2v1

550.29 551.02 551.68 T:skinnyaeadtk312864v1

549.21 554.90 555.91 T:skinnyaeadtk39664v1

558.42 566.99 568.43 T:skinnyaeadtk396128v1

588.68 592.29 598.96 T:spoc64sliscplight192v1

685.02 694.84 722.38 T:wageae128v1

745.58 748.39 754.82 T:saefforkskinnyb128t192n56v1

744.10 753.28 756.30 T:saefforkskinnyb128t256n120v1

752.45 753.35 761.99 T:paefforkskinnyb128t256n112v1

755.94 760.19 766.66 T:paefforkskinnyb128t192n48v1

904.64 905.14 906.97 T:aceae128v1

1072.65 1077.42 1083.34 T:paefforkskinnyb128t288n104v1

1424.29 1435.73 1444.07 T:hyenav1

1526.91 1529.74 1530.34 T:orangezestv1

1570.20 1571.55 1584.65 T:twegift64lotusaeadv1

1597.37 1606.85 1654.04 T:twegift64locusaeadv1

1743.99 1747.95 1755.04 T:oribatida256v11

1933.88 1952.87 1963.15 T:oribatida192v11

2059.84 2070.22 2074.98 T:paefforkskinnyb64t192n48v1

2130.10 2132.79 2163.26 T:estatetwegift128v1

4798.46 4801.19 4822.07 T:elephant176v1

5813.11 5815.61 5816.22 T:elephant160v1

Cycles/byte for 0+long encrypt

25% 50% 75% aead

5.18 5.19 5.19 ascon128av12

5.31 5.32 5.33 T:ascon128av12

5.93 5.96 5.98 T:xoodyakv1

7.74 7.75 7.77 ascon80pqv12

7.87 7.88 7.88 ascon128v12

12.18 12.20 12.23 T:gimli24v1

12.62 12.66 12.75 T:saeaes128a120t64v1

12.46 12.73 12.82 T:saeaes128a120t128v1

14.76 14.79 14.82 T:saeaes192a120t128v1

15.51 15.51 15.52 T:isapa128v20

15.48 15.52 15.54 T:isapa128av20

16.62 16.74 16.84 T:saeaes256a120t128v1

17.06? 17.45? 30.55? T:knot128v2

19.75 19.75 19.75 T:knot128v1

19.73 19.76 19.76 T:tinyjambu192

20.88 21.12 21.32 T:comet128aesv1

21.50 21.50 21.51 T:tinyjambu128

21.50 21.51 21.51 T:tinyjambu256

22.28 22.97 23.07 T:saeaes128a64t128v1

22.88 23.00 23.05 T:saeaes128a64t64v1

23.38 23.41 23.43 T:schwaemm256128v1

26.09 26.17 27.11 T:saeaes192a64t64v1

26.25 26.37 27.42 T:saeaes192a64t128v1

27.59 27.62 27.69 T:schwaemm256256v1

29.67 29.75 29.88 T:saeaes256a64t64v1

29.79 29.81 29.84 T:saeaes256a64t128v1

32.19 32.32 32.41 T:saturninctrcascadev2

34.20 34.25 34.27 T:schwaemm192192v1

38.19 38.20 38.22 T:giftcofb128v1

38.26 38.37 38.41 T:isapk128av20

38.58 38.59 38.62 T:knot256

38.11 38.71 42.28 T:sestatetweaes128v1

40.23 40.27 40.34 T:knot192

45.77 45.81 45.89 T:schwaemm128128v1

49.91 49.94 50.00 T:isapk128v20

50.97 51.10 51.28 T:photonbeetleaead128rate128v1

51.15 51.15 51.18 T:drygascon128k32

51.15 51.16 51.17 T:drygascon128k16

51.44 51.46 51.50 T:drygascon128k56

53.74 53.78 54.04 T:drygascon256k32

47.71? 60.42? 77.95? T:grain128aead

62.05? 62.55? 69.28? T:estatetweaes128v1

65.50 65.66 66.83 T:elephant200v1

83.03 86.28 86.39 T:spook128su384v1

86.33 86.34 86.35 T:spook128su512v1

86.83 86.85 86.89 T:spook128mu512v1

86.84 86.86 86.88 T:spook128mu384v1

100.58 101.61 101.70 T:comet64chamv1

113.00 113.74 113.91 T:romulusn1v1

113.75 113.95 114.33 T:comet64speckv1

114.17 114.20 114.48 T:romulusm1v1

114.39 115.46 115.54 T:skinnyaeadtk3128128v1

123.70 125.46 126.39 T:subterraneanv1

128.73 129.48 138.30 T:mixfeed

118.54 130.04 131.17 T:comet128chamv1

168.50 168.59 168.84 T:sundaegift96v1

168.47 168.83 169.78 T:sundaegift64v1

168.56 168.86 169.80 T:sundaegift128v1

168.87 170.60 170.89 T:romulusn3v1

171.22 172.75 172.85 T:sundaegift0v1

173.16 174.89 177.26 T:romulusm3v1

200.68 200.91 201.41 T:photonbeetleaead128rate32v1

205.06 205.08 205.18 T:pyjamask96aeadv1

205.11 205.17 205.18 T:pyjamask128aeadv1

248.31 249.35 250.23 T:romulusn2v1

245.85 251.00 254.12 T:romulusm2v1

276.18 276.77 282.85 T:skinnyaeadtk296128v1

275.76 280.69 282.36 T:skinnyaeadtk29664v1

358.79 360.96 361.88 T:spoc128sliscplight256v1

370.25 370.81 371.25 T:spix128v1

396.19 398.35 407.36 T:skinnyaeadtk312864v1

400.31 405.65 409.22 T:saefforkskinnyb128t192n56v1

402.02 407.15 416.63 T:saefforkskinnyb128t256n120v1

397.95 410.32 413.43 T:skinnyaeadtk39664v1

408.29 410.52 420.54 T:paefforkskinnyb128t192n48v1

400.31 410.61 412.53 T:paefforkskinnyb128t256n112v1

398.76 410.99 413.01 T:skinnyaeadtk396128v1

529.59 535.88 538.44 T:paefforkskinnyb128t288n104v1

587.77 594.17 607.80 T:spoc64sliscplight192v1

724.15 729.72 733.36 T:wageae128v1

904.02 904.77 923.66 T:aceae128v1

990.56 994.16 1011.98 T:paefforkskinnyb64t192n48v1

1047.99 1052.63 1055.65 T:oribatida192v11

1057.14 1057.98 1061.00 T:twegift64lotusaeadv1

1157.20 1160.08 1160.88 T:oribatida256v11

1146.98 1161.00 1167.01 T:twegift64locusaeadv1

1415.34 1419.98 1435.09 T:estatetwegift128v1

1411.70 1439.61 1476.48 T:hyenav1

1526.90 1527.92 1529.82 T:orangezestv1

3172.73 3189.06 3243.41 T:elephant176v1

3876.18 3879.24 3912.56 T:elephant160v1

Cycles/byte for 0+long decrypt

25% 50% 75% aead

5.22 5.25 5.27 ascon128av12

5.31 5.32 5.34 T:ascon128av12

5.90 5.94 5.97 T:xoodyakv1

7.62 7.63 7.63 ascon128v12

7.87 7.88 7.88 ascon80pqv12

12.17 12.20 12.23 T:gimli24v1

12.64 12.67 12.73 T:saeaes128a120t64v1

12.48 12.76 12.83 T:saeaes128a120t128v1

14.75 14.77 14.81 T:saeaes192a120t128v1

15.49 15.49 15.54 T:isapa128v20

15.49 15.53 15.56 T:isapa128av20

16.68 16.77 16.85 T:saeaes256a120t128v1

17.24? 17.29? 30.82? T:knot128v2

19.74 19.75 19.76 T:tinyjambu192

19.75 19.75 19.77 T:knot128v1

20.89 21.15 21.26 T:comet128aesv1

21.50 21.51 21.51 T:tinyjambu128

22.26 22.26 22.26 T:tinyjambu256

22.86 23.01 23.08 T:saeaes128a64t64v1

22.30 23.02 23.09 T:saeaes128a64t128v1

23.41 23.46 23.48 T:schwaemm256128v1

26.16 26.24 27.18 T:saeaes192a64t64v1

26.26 26.27 27.43 T:saeaes192a64t128v1

27.54 27.60 27.65 T:schwaemm256256v1

29.74 29.77 29.83 T:saeaes256a64t64v1

29.81 29.86 29.96 T:saeaes256a64t128v1

32.18 32.20 32.23 T:saturninctrcascadev2

32.23 32.29 32.52 T:schwaemm192192v1

35.91 35.93 35.95 T:knot256

38.19 38.19 38.20 T:giftcofb128v1

38.17 38.26 38.38 T:sestatetweaes128v1

38.35 38.48 38.51 T:isapk128av20

40.13 40.20 40.24 T:knot192

45.77 45.83 45.88 T:schwaemm128128v1

49.88 49.92 49.97 T:isapk128v20

50.85 50.99 51.28 T:photonbeetleaead128rate128v1

51.10 51.14 51.22 T:drygascon128k32

51.15 51.16 51.19 T:drygascon128k16

51.45 51.51 51.55 T:drygascon128k56

53.97 54.11 54.25 T:drygascon256k32

62.10 62.25 62.35 T:estatetweaes128v1

49.60? 63.30? 81.76? T:grain128aead

65.48 65.61 66.77 T:elephant200v1

86.28 86.30 86.34 T:spook128su512v1

86.26 86.31 86.34 T:spook128su384v1

86.85 86.90 86.93 T:spook128mu512v1

86.84 86.90 86.91 T:spook128mu384v1

100.33 101.48 101.63 T:comet64chamv1

113.21? 113.50? 130.09? T:romulusn1v1

113.84 113.96 114.02 T:romulusm1v1

113.56 114.04 114.25 T:comet64speckv1

115.03 115.72 116.41 T:skinnyaeadtk3128128v1

117.87? 119.48? 138.19? T:comet128chamv1

121.87 123.89 127.70 T:subterraneanv1

129.22 129.82 138.20 T:mixfeed

168.62 168.91 169.51 T:sundaegift128v1

168.57 168.91 169.31 T:sundaegift96v1

168.97 169.08 169.33 T:sundaegift64v1

169.42 170.82 171.11 T:romulusn3v1

170.54 171.08 171.17 T:sundaegift0v1

174.34 174.66 176.31 T:romulusm3v1

200.75 200.96 201.21 T:photonbeetleaead128rate32v1

205.06 205.08 205.35 T:pyjamask96aeadv1

205.17 205.18 205.18 T:pyjamask128aeadv1

243.49 248.71 258.79 T:romulusm2v1

247.73 249.68 250.90 T:romulusn2v1

276.76 281.41 282.78 T:skinnyaeadtk29664v1

277.42 282.84 288.03 T:skinnyaeadtk296128v1

360.66 361.90 362.23 T:spoc128sliscplight256v1

367.45 368.01 368.17 T:spix128v1

398.34 404.50 408.28 T:skinnyaeadtk39664v1

404.31 405.19 410.80 T:paefforkskinnyb128t256n112v1

397.71 406.25 407.94 T:skinnyaeadtk312864v1

403.09 407.44 412.66 T:saefforkskinnyb128t256n120v1

406.70 407.82 416.65 T:paefforkskinnyb128t192n48v1

406.65 409.08 421.31 T:saefforkskinnyb128t192n56v1

406.74 409.26 412.28 T:skinnyaeadtk396128v1

529.08 533.74 534.76 T:paefforkskinnyb128t288n104v1

578.61 585.66 593.69 T:spoc64sliscplight192v1

723.87 726.19 729.89 T:wageae128v1

903.95 905.32 914.90 T:aceae128v1

989.64 996.93 1016.38 T:paefforkskinnyb64t192n48v1

1055.49 1056.12 1063.82 T:twegift64lotusaeadv1

1155.59 1160.80 1166.09 T:oribatida256v11

1162.54 1164.37 1164.90 T:twegift64locusaeadv1

1259.95 1279.52 1291.08 T:oribatida192v11

1423.36 1428.53 1429.55 T:estatetwegift128v1

1415.03 1447.78 1455.38 T:hyenav1

1529.06 1529.59 1531.15 T:orangezestv1

3170.98 3197.78 3234.98 T:elephant176v1

3878.24 3878.98 3916.91 T:elephant160v1

Cycles/byte for 0+long forgery

25% 50% 75% aead

5.24 5.25 5.27 ascon128av12

5.31 5.34 5.34 T:ascon128av12

5.93 5.95 5.97 T:xoodyakv1

7.63 7.63 7.63 ascon128v12

7.88 7.88 7.88 ascon80pqv12

12.18 12.22 12.25 T:gimli24v1

12.64 12.69 12.73 T:saeaes128a120t64v1

12.51 12.74 12.84 T:saeaes128a120t128v1

14.74 14.80 14.84 T:saeaes192a120t128v1

15.47 15.52 15.55 T:isapa128av20

15.49 15.52 15.54 T:isapa128v20

16.65 16.75 16.78 T:saeaes256a120t128v1

17.23? 17.26? 30.86? T:knot128v2

19.74 19.75 19.76 T:tinyjambu192

19.75 19.75 19.75 T:knot128v1

20.83 21.10 21.29 T:comet128aesv1

21.51 21.51 21.51 T:tinyjambu128

22.26 22.26 22.26 T:tinyjambu256

22.25 23.03 23.10 T:saeaes128a64t128v1

22.90 23.05 23.11 T:saeaes128a64t64v1

23.38 23.42 23.49 T:schwaemm256128v1

26.09 26.23 27.14 T:saeaes192a64t64v1

26.22 26.27 27.49 T:saeaes192a64t128v1

27.56 27.60 27.64 T:schwaemm256256v1

29.73 29.78 29.81 T:saeaes256a64t64v1

29.78 29.80 29.85 T:saeaes256a64t128v1

32.11 32.15 32.18 T:saturninctrcascadev2

32.21 32.26 32.29 T:schwaemm192192v1

31.06? 32.43? 35.30? T:grain128aead

35.92 35.94 35.95 T:knot256

38.19 38.19 38.20 T:giftcofb128v1

38.05 38.21 38.36 T:sestatetweaes128v1

38.31 38.43 38.53 T:isapk128av20

40.15 40.19 40.24 T:knot192

45.72 45.79 45.83 T:schwaemm128128v1

49.85 49.96 50.02 T:isapk128v20

50.93 51.06 51.21 T:photonbeetleaead128rate128v1

51.10 51.13 51.20 T:drygascon128k32

51.12 51.13 51.20 T:drygascon128k16

51.45 51.48 51.50 T:drygascon128k56

54.19 54.26 54.30 T:drygascon256k32

62.09 62.40 62.60 T:estatetweaes128v1

65.63? 66.72? 83.93? T:elephant200v1

86.28 86.30 86.32 T:spook128su512v1

86.26 86.31 86.36 T:spook128su384v1

86.83 86.89 86.93 T:spook128mu384v1

86.62 86.90 86.91 T:spook128mu512v1

100.36 101.52 101.59 T:comet64chamv1

113.17? 113.63? 131.37? T:romulusn1v1

113.80 113.85 113.98 T:romulusm1v1

113.47 114.04 114.35 T:comet64speckv1

115.10 115.36 115.55 T:skinnyaeadtk3128128v1

118.61 119.32 130.89 T:comet128chamv1

123.71 125.20 127.21 T:subterraneanv1

128.53 129.77 138.18 T:mixfeed

168.63 168.75 169.04 T:sundaegift128v1

168.60 168.92 169.07 T:sundaegift96v1

168.92 169.00 169.24 T:sundaegift64v1

170.85 171.05 171.29 T:sundaegift0v1

169.31 171.08 171.43 T:romulusn3v1

174.00 175.12 177.91 T:romulusm3v1

200.63 201.14 201.55 T:photonbeetleaead128rate32v1

205.17 205.18 205.19 T:pyjamask128aeadv1

205.16 205.20 205.26 T:pyjamask96aeadv1

243.69 248.82 252.18 T:romulusm2v1

246.65 250.22 254.05 T:romulusn2v1

276.25 280.68 281.84 T:skinnyaeadtk29664v1

280.51 288.04 288.62 T:skinnyaeadtk296128v1

360.01 361.08 365.05 T:spoc128sliscplight256v1

367.03 369.41 370.95 T:spix128v1

400.97 405.45 416.68 T:skinnyaeadtk39664v1

404.46 406.60 410.29 T:paefforkskinnyb128t256n112v1

404.96 407.37 408.07 T:saefforkskinnyb128t192n56v1

405.48 408.10 412.65 T:saefforkskinnyb128t256n120v1

397.09 409.78 420.43 T:skinnyaeadtk312864v1

406.61 410.28 424.41 T:skinnyaeadtk396128v1

406.13 416.91 438.57 T:paefforkskinnyb128t192n48v1

531.63 534.18 534.56 T:paefforkskinnyb128t288n104v1

591.29 594.70 598.06 T:spoc64sliscplight192v1

680.75 699.04 717.25 T:wageae128v1

904.27 905.25 907.28 T:aceae128v1

982.39 1007.99 1010.76 T:paefforkskinnyb64t192n48v1

1059.14 1064.21 1064.75 T:twegift64lotusaeadv1

1162.76 1168.41 1181.89 T:oribatida256v11

1146.44 1184.73 1187.12 T:twegift64locusaeadv1

1302.09 1308.55 1368.50 T:oribatida192v11

1414.62 1417.17 1433.97 T:estatetwegift128v1

1421.83 1442.18 1445.08 T:hyenav1

1525.66 1530.30 1533.64 T:orangezestv1

3168.08 3180.08 3203.28 T:elephant176v1

3880.02 3912.37 3918.99 T:elephant160v1

Cycles/byte for 1536+1536 encrypt

25% 50% 75% aead

5.34 5.34 5.36 T:ascon128av12

5.44 5.45 5.46 ascon128av12

7.95 7.95 7.96 ascon80pqv12

8.20 8.20 8.21 ascon128v12

8.60 8.62 8.63 T:xoodyakv1

15.65 15.66 15.68 T:gimli24v1

18.45 18.49 18.65 T:knot128v2

19.56 19.58 19.63 T:saeaes128a120t64v1

19.71 19.74 19.80 T:saeaes128a120t128v1

20.05 20.05 20.06 T:knot128v1

20.94 20.95 20.97 T:isapa128av20

22.71 22.73 22.77 T:saeaes192a120t128v1

23.39 23.54 23.68 T:comet128aesv1

24.33 24.35 24.39 T:schwaemm256128v1

24.71 24.81 24.86 T:saeaes128a64t64v1

24.67 24.84 24.88 T:saeaes128a64t128v1

25.15 25.32 25.39 T:saeaes256a120t128v1

28.19 28.26 29.70 T:saeaes192a64t64v1

28.28 28.34 29.41 T:saeaes192a64t128v1

28.54 28.55 28.59 T:schwaemm256256v1

31.79 31.83 31.86 T:saeaes256a64t128v1

31.81 31.85 31.90 T:saeaes256a64t64v1

34.07 34.09 34.24 T:saturninctrcascadev2

34.26 34.27 34.28 T:isapa128v20

35.16 35.20 35.24 T:schwaemm192192v1

38.71 38.71 38.72 T:giftcofb128v1

38.99 39.00 39.01 T:knot256

40.27 40.31 40.31 T:tinyjambu192

40.40 40.41 40.41 T:tinyjambu128

40.96 40.99 41.03 T:knot192

46.39 46.45 46.52 T:schwaemm128128v1

46.70 46.70 46.71 T:tinyjambu256

50.91 51.03 51.15 T:photonbeetleaead128rate128v1

51.91 51.91 51.92 T:drygascon128k32

51.93 51.94 51.94 T:drygascon128k16

52.26 52.27 52.30 T:drygascon128k56

54.63 54.64 54.72 T:drygascon256k32

55.49 55.54 55.62 T:isapk128av20

65.88? 73.87? 86.99? T:grain128aead

73.67? 77.50? 96.34? T:sestatetweaes128v1

88.21 88.21 88.22 T:spook128su512v1

88.21 88.25 88.26 T:spook128su384v1

88.70 88.71 88.72 T:spook128mu512v1

88.56 88.72 88.74 T:spook128mu384v1

98.15 98.26 99.19 T:elephant200v1

102.45 102.48 102.50 T:comet64chamv1

107.46 107.52 107.53 T:isapk128v20

99.45? 110.23? 131.99? T:estatetweaes128v1

115.13 115.17 115.50 T:comet64speckv1

115.97 116.04 116.12 T:skinnyaeadtk3128128v1

121.38 131.44 132.44 T:comet128chamv1

133.92 134.50 136.99 T:mixfeed

139.03 140.33 140.64 T:subterraneanv1

141.31 141.44 141.60 T:romulusn1v1

198.58 198.69 199.32 T:romulusm1v1

201.46 201.73 201.93 T:photonbeetleaead128rate32v1

205.46 205.53 206.93 T:pyjamask128aeadv1

209.20 209.25 209.29 T:pyjamask96aeadv1

235.47 235.80 236.21 T:romulusn3v1

254.84 254.98 255.30 T:sundaegift96v1

254.98 255.05 255.33 T:sundaegift64v1

254.95 255.62 255.87 T:sundaegift128v1

258.13 259.58 259.76 T:sundaegift0v1

278.24 279.87 284.29 T:skinnyaeadtk296128v1

278.53 283.91 287.87 T:skinnyaeadtk29664v1

328.89 329.15 335.01 T:romulusm3v1

343.69 344.00 344.70 T:romulusn2v1

362.50 364.07 365.86 T:spoc128sliscplight256v1

380.50 382.30 385.00 T:spix128v1

407.89 409.67 410.36 T:skinnyaeadtk312864v1

400.49 410.91 411.54 T:skinnyaeadtk39664v1

403.60 412.54 413.28 T:skinnyaeadtk396128v1

459.83 462.18 464.74 T:romulusm2v1

520.18 522.39 528.02 T:saefforkskinnyb128t192n56v1

514.03 527.19 527.52 T:paefforkskinnyb128t256n112v1

521.78 527.24 527.69 T:saefforkskinnyb128t256n120v1

524.80 532.84 533.64 T:paefforkskinnyb128t192n48v1

596.09 598.97 600.58 T:spoc64sliscplight192v1

681.29 686.76 687.18 T:paefforkskinnyb128t288n104v1

705.10 708.73 710.73 T:wageae128v1

925.14 925.37 926.06 T:aceae128v1

1268.12 1287.81 1291.13 T:paefforkskinnyb64t192n48v1

1436.03 1449.09 1455.88 T:hyenav1

1546.55 1546.97 1547.94 T:orangezestv1

1586.18 1593.02 1594.02 T:oribatida192v11

1614.78 1629.57 1656.61 T:twegift64lotusaeadv1

1763.68 1764.36 1770.26 T:oribatida256v11

1735.74 1764.64 1830.25 T:twegift64locusaeadv1

2140.25 2152.32 2163.64 T:estatetwegift128v1

4830.92 4845.12 4846.00 T:elephant176v1

5881.49 5882.17 5883.70 T:elephant160v1

Cycles/byte for 1536+1536 decrypt

25% 50% 75% aead

5.34 5.34 5.35 T:ascon128av12

5.41 5.42 5.44 ascon128av12

7.84 7.84 7.84 ascon128v12

7.97 7.97 7.97 ascon80pqv12

8.60 8.63 8.65 T:xoodyakv1

12.19 12.25 12.36 T:gimli24v1

18.62 18.64 18.68 T:knot128v2

19.74 19.80 19.88 T:saeaes128a120t64v1

19.86 19.86 19.86 T:knot128v1

19.87 19.89 19.99 T:saeaes128a120t128v1

20.94 20.94 20.95 T:isapa128av20

22.56 22.59 22.60 T:saeaes192a120t128v1

23.63 23.81 23.97 T:comet128aesv1

24.35 24.36 24.39 T:schwaemm256128v1

25.01 25.03 25.11 T:saeaes128a64t128v1

24.93 25.03 25.08 T:saeaes128a64t64v1

25.56 25.70 25.74 T:saeaes256a120t128v1

28.42 28.46 29.36 T:saeaes192a64t128v1

28.42 28.48 29.70 T:saeaes192a64t64v1

28.48 28.53 28.55 T:schwaemm256256v1

31.98 32.02 32.21 T:saeaes256a64t128v1

31.96 32.08 32.12 T:saeaes256a64t64v1

33.00 33.01 33.02 T:schwaemm192192v1

34.26 34.26 34.27 T:isapa128v20

34.65 34.69 34.71 T:saturninctrcascadev2

37.71 37.71 37.72 T:knot256

38.65 38.65 38.65 T:giftcofb128v1

39.57 39.60 39.61 T:tinyjambu192

40.03 40.03 40.03 T:tinyjambu128

40.95 40.95 40.98 T:knot192

46.36 46.41 46.45 T:schwaemm128128v1

46.58 46.58 46.58 T:tinyjambu256

51.68 51.83 51.87 T:photonbeetleaead128rate128v1

52.52 52.52 52.54 T:drygascon128k32

52.51 52.52 52.53 T:drygascon128k16

52.78 52.78 53.06 T:drygascon128k56

55.12 55.18 55.26 T:drygascon256k32

55.48 55.52 55.54 T:isapk128av20

70.68 70.93 71.25 T:sestatetweaes128v1

68.62? 76.45? 87.02? T:grain128aead

87.72 87.73 87.75 T:spook128su512v1

87.72 87.75 87.77 T:spook128su384v1

88.31 88.33 88.35 T:spook128mu384v1

88.32 88.33 88.34 T:spook128mu512v1

94.24 94.39 94.59 T:estatetweaes128v1

97.64 98.02 98.60 T:elephant200v1

102.22 102.33 102.37 T:comet64chamv1

107.31 107.38 107.52 T:isapk128v20

108.24 108.31 108.33 T:skinnyaeadtk3128128v1

115.19 115.38 115.61 T:comet64speckv1

121.13? 121.37? 138.31? T:comet128chamv1

134.53 134.65 137.13 T:mixfeed

138.52 139.15 140.43 T:subterraneanv1

141.31 141.36 141.67 T:romulusn1v1

199.18 199.27 199.30 T:romulusm1v1

201.33 201.92 202.03 T:photonbeetleaead128rate32v1

207.75 207.77 207.78 T:pyjamask128aeadv1

210.49 210.58 210.65 T:pyjamask96aeadv1

238.09 238.68 240.59 T:romulusn3v1

254.50 255.30 255.46 T:sundaegift96v1

254.34 255.61 255.73 T:sundaegift64v1

254.88 255.65 255.79 T:sundaegift128v1

257.38 257.77 257.94 T:sundaegift0v1

328.77 329.48 330.42 T:romulusm3v1

344.05 344.22 344.59 T:romulusn2v1

363.66 364.18 367.51 T:spoc128sliscplight256v1

376.69 377.67 378.90 T:skinnyaeadtk296128v1

378.93 379.16 379.60 T:spix128v1

378.29 379.20 380.13 T:skinnyaeadtk29664v1

460.98 465.47 474.89 T:romulusm2v1

553.86 554.83 555.16 T:skinnyaeadtk39664v1

551.44 556.78 559.58 T:skinnyaeadtk312864v1

564.07 566.99 573.94 T:skinnyaeadtk396128v1

585.43 586.01 599.31 T:spoc64sliscplight192v1

705.44 707.10 709.83 T:wageae128v1

748.71 749.67 753.48 T:saefforkskinnyb128t192n56v1

754.53 754.83 756.91 T:saefforkskinnyb128t256n120v1

752.22 755.32 766.11 T:paefforkskinnyb128t192n48v1

755.94 757.59 764.34 T:paefforkskinnyb128t256n112v1

921.75 923.67 924.90 T:aceae128v1

1079.07 1080.01 1080.11 T:paefforkskinnyb128t288n104v1

1433.02 1442.09 1450.49 T:hyenav1

1546.74 1547.06 1547.83 T:orangezestv1

1579.24 1584.47 1595.58 T:twegift64lotusaeadv1

1622.83 1629.35 1662.88 T:twegift64locusaeadv1

1769.58 1773.91 1775.44 T:oribatida256v11

1917.74 1955.69 1974.27 T:oribatida192v11

2066.12 2071.54 2073.47 T:paefforkskinnyb64t192n48v1

2139.36 2156.05 2196.01 T:estatetwegift128v1

4838.14 4849.74 4857.76 T:elephant176v1

5882.11 5899.35 5903.02 T:elephant160v1

Cycles/byte for 1536+1536 forgery

25% 50% 75% aead

5.34 5.34 5.36 T:ascon128av12

5.41 5.42 5.42 ascon128av12

7.84 7.84 7.84 ascon128v12

7.97 7.97 7.97 ascon80pqv12

8.63 8.65 8.66 T:xoodyakv1

12.22 12.33 12.38 T:gimli24v1

16.37 16.37 16.39 T:isapa128av20

18.43 18.58 18.58 T:knot128v2

19.86 19.86 19.86 T:knot128v1

20.29 20.40 20.45 T:saeaes128a120t64v1

20.37 20.42 20.45 T:saeaes128a120t128v1

21.16 21.16 21.17 T:isapa128v20

23.08 23.16 23.20 T:saeaes192a120t128v1

23.57 23.73 23.93 T:comet128aesv1

25.39 25.44 25.69 T:schwaemm256128v1

25.40 25.46 25.56 T:saeaes128a64t64v1

25.45 25.47 25.55 T:saeaes128a64t128v1

26.00 26.15 26.25 T:saeaes256a120t128v1

28.86 28.88 30.29 T:saeaes192a64t64v1

28.93 28.94 29.91 T:saeaes192a64t128v1

29.50 29.51 29.54 T:schwaemm256256v1

32.50 32.53 32.57 T:saeaes256a64t128v1

32.52 32.54 32.56 T:saeaes256a64t64v1

34.03 34.07 34.19 T:schwaemm192192v1

34.66 34.67 34.71 T:saturninctrcascadev2

37.71 37.71 37.71 T:knot256

38.64 38.65 38.65 T:giftcofb128v1

39.60 39.60 39.61 T:tinyjambu192

36.56? 39.92? 48.27? T:grain128aead

40.03 40.03 40.03 T:tinyjambu128

40.95 40.96 40.99 T:knot192

44.62 44.63 44.68 T:isapk128av20

46.58 46.58 46.58 T:tinyjambu256

47.41 47.44 47.47 T:schwaemm128128v1

51.62 51.74 51.83 T:photonbeetleaead128rate128v1

52.52 52.53 52.55 T:drygascon128k16

52.52 52.56 52.79 T:drygascon128k32

52.76 52.78 52.79 T:drygascon128k56

55.10 55.21 55.32 T:drygascon256k32

70.74 71.13 73.69 T:sestatetweaes128v1

74.71 74.81 74.88 T:isapk128v20

87.74 87.74 87.75 T:spook128su512v1

87.74 87.76 87.77 T:spook128su384v1

88.32 88.34 88.35 T:spook128mu384v1

88.34 88.34 88.36 T:spook128mu512v1

94.22 94.51 97.85 T:estatetweaes128v1

97.54 97.59 99.09 T:elephant200v1

102.20 102.30 102.39 T:comet64chamv1

108.13 108.64 108.77 T:skinnyaeadtk3128128v1

115.29 115.37 115.49 T:comet64speckv1

121.04 121.18 131.78 T:comet128chamv1

134.04 134.19 136.98 T:mixfeed

139.80 140.15 141.44 T:subterraneanv1

141.30 141.39 141.50 T:romulusn1v1

199.18 199.25 199.39 T:romulusm1v1

201.88 202.10 202.41 T:photonbeetleaead128rate32v1

207.75 207.77 207.80 T:pyjamask128aeadv1

210.48 210.48 210.57 T:pyjamask96aeadv1

238.45 238.80 238.88 T:romulusn3v1

254.28 254.79 255.48 T:sundaegift128v1

254.72 255.38 255.53 T:sundaegift64v1

254.74 255.42 255.58 T:sundaegift96v1

257.11 257.63 258.13 T:sundaegift0v1

330.45 331.33 333.29 T:romulusm3v1

344.40 344.69 345.49 T:romulusn2v1

363.61 364.13 365.54 T:spoc128sliscplight256v1

376.27 376.63 381.35 T:skinnyaeadtk296128v1

378.45 378.93 379.85 T:skinnyaeadtk29664v1

379.39 380.22 382.35 T:spix128v1

460.47 464.72 469.92 T:romulusm2v1

552.11 554.54 555.41 T:skinnyaeadtk312864v1

555.04 555.73 557.29 T:skinnyaeadtk39664v1

565.18 565.98 573.89 T:skinnyaeadtk396128v1

587.11 590.72 595.75 T:spoc64sliscplight192v1

706.25 709.40 732.36 T:wageae128v1

750.93 751.37 754.04 T:saefforkskinnyb128t192n56v1

750.14 753.16 763.69 T:paefforkskinnyb128t192n48v1

745.26 753.68 754.48 T:saefforkskinnyb128t256n120v1

752.93 753.88 762.21 T:paefforkskinnyb128t256n112v1

922.64 923.49 923.76 T:aceae128v1

1074.61 1077.77 1079.75 T:paefforkskinnyb128t288n104v1

1443.68 1450.53 1451.25 T:hyenav1

1543.95 1546.80 1548.14 T:orangezestv1

1582.76 1583.33 1600.29 T:twegift64lotusaeadv1

1612.28 1621.34 1669.86 T:twegift64locusaeadv1

1761.54 1766.21 1771.44 T:oribatida256v11

1940.28 2030.75 2036.29 T:oribatida192v11

2061.13 2065.86 2066.92 T:paefforkskinnyb64t192n48v1

2149.89 2151.19 2152.37 T:estatetwegift128v1

4838.64 4846.13 4880.17 T:elephant176v1

5880.79 5882.07 5885.84 T:elephant160v1

Cycles/byte for 64+64 encrypt

25% 50% 75% aead

8.11 8.11 8.32 T:ascon128av12

8.45 8.45 8.65 ascon128av12

10.76 10.77 10.79 ascon80pqv12

10.94 10.95 10.98 ascon128v12

16.73 16.73 16.73 T:xoodyakv1

20.85 20.97 21.04 T:gimli24v1

23.60 23.82 24.14 T:saeaes128a120t64v1

23.82 23.95 24.26 T:saeaes128a120t128v1

25.38 25.38 25.48 T:knot128v1

27.41 27.59 27.97 T:saeaes192a120t128v1

27.98 28.31 28.65 T:saeaes128a64t128v1

28.16 28.55 28.70 T:saeaes128a64t64v1

28.92? 29.50? 48.70? T:knot128v2

29.58 29.81 30.19 T:comet128aesv1

30.66 30.84 33.22 T:saeaes256a120t128v1

31.84 32.16 33.74 T:saeaes192a64t64v1

31.95 32.21 32.97 T:saeaes192a64t128v1

35.36? 35.88? 60.24? T:grain128aead

36.00 36.09 36.35 T:saeaes256a64t64v1

36.03 36.15 36.38 T:saeaes256a64t128v1

38.88 39.02 39.13 T:schwaemm256128v1

44.87 44.95 45.14 T:schwaemm256256v1

45.51 45.55 45.63 T:giftcofb128v1

46.53 46.53 46.73 T:tinyjambu128

47.70 47.85 48.15 T:tinyjambu192

50.62 50.62 51.21 T:isapa128av20

53.74 53.74 54.03 T:tinyjambu256

53.74 53.84 54.17 T:knot192

55.90 55.99 56.16 T:schwaemm192192v1

56.76 57.21 58.06 T:photonbeetleaead128rate128v1

57.45 57.59 57.75 T:knot256

58.95 59.08 59.36 T:schwaemm128128v1

60.23 60.31 60.43 T:drygascon128k56

60.04 60.38 60.55 T:drygascon128k32

60.56 60.77 61.12 T:drygascon128k16

65.85 66.06 66.25 T:saturninctrcascadev2

67.71 67.82 67.91 T:drygascon256k32

83.73 84.42 86.91 T:sestatetweaes128v1

104.73 105.20 105.88 T:estatetweaes128v1

116.91 117.74 118.23 T:comet64chamv1

129.69 129.90 130.48 T:comet64speckv1

130.19 130.34 130.76 T:spook128su512v1

130.23 130.54 131.32 T:spook128su384v1

130.90 130.98 131.30 T:spook128mu512v1

130.88 131.05 131.91 T:spook128mu384v1

139.38 140.19 141.52 T:elephant200v1

158.91 159.11 159.60 T:skinnyaeadtk3128128v1

159.76 160.44 161.20 T:comet128chamv1

169.26 169.55 170.23 T:romulusn1v1

179.69 179.70 179.91 T:isapk128av20

196.90 198.12 200.42 T:mixfeed

207.77 208.42 208.98 T:photonbeetleaead128rate32v1

226.84 227.43 227.62 T:romulusm1v1

254.90 256.05 256.92 T:subterraneanv1

263.20 263.41 264.23 T:romulusn3v1

279.55? 280.86? 454.59? T:sundaegift0v1

284.10 284.10 284.24 T:isapa128v20

296.13 296.92 297.68 T:sundaegift96v1

296.44 297.05 298.04 T:sundaegift64v1

297.09 297.94 298.45 T:sundaegift128v1

300.59 300.73 300.78 T:pyjamask128aeadv1

308.74 308.90 309.30 T:pyjamask96aeadv1

311.78 312.83 318.16 T:skinnyaeadtk29664v1

312.44 314.49 318.51 T:skinnyaeadtk296128v1

381.34 382.04 386.66 T:romulusn2v1

381.45 382.85 385.04 T:romulusm3v1

410.43 411.88 412.52 T:spoc128sliscplight256v1

447.34 450.13 457.16 T:skinnyaeadtk312864v1

455.28 460.09 463.00 T:skinnyaeadtk39664v1

455.88 462.18 463.00 T:skinnyaeadtk396128v1

517.45 521.77 530.02 T:saefforkskinnyb128t256n120v1

519.39 521.84 540.56 T:saefforkskinnyb128t192n56v1

514.73 528.00 533.63 T:paefforkskinnyb128t256n112v1

526.27 535.26 535.93 T:paefforkskinnyb128t192n48v1

533.17 537.59 538.73 T:romulusm2v1

640.73 642.09 647.26 T:spix128v1

670.73 672.48 674.66 T:spoc64sliscplight192v1

679.66 686.52 690.34 T:paefforkskinnyb128t288n104v1

1019.39 1019.68 1020.20 T:isapk128v20

1050.66 1067.49 1069.76 T:wageae128v1

1290.84 1296.30 1300.62 T:paefforkskinnyb64t192n48v1

1307.16 1307.64 1311.69 T:aceae128v1

1634.09 1649.23 1652.20 T:hyenav1

1827.20 1837.34 1874.37 T:twegift64lotusaeadv1

1912.86 1913.95 1915.14 T:orangezestv1

1936.62 1949.01 1993.87 T:twegift64locusaeadv1

2072.67 2080.94 2084.87 T:oribatida192v11

2185.84 2191.32 2198.98 T:oribatida256v11

2328.64 2337.06 2354.05 T:estatetwegift128v1

6015.59 6022.33 6048.26 T:elephant176v1

7881.12 7915.28 7928.68 T:elephant160v1

Cycles/byte for 64+64 decrypt

25% 50% 75% aead

8.14 8.14 8.54 T:ascon128av12

8.59 8.84 8.86 ascon128av12

10.52 10.53 10.61 ascon128v12

10.72 10.75 10.76 ascon80pqv12

16.81 16.84 16.92 T:xoodyakv1

17.70 17.75 17.93 T:gimli24v1

23.94 24.11 24.41 T:saeaes128a120t64v1

24.12 24.28 24.66 T:saeaes128a120t128v1

25.35 25.35 25.35 T:knot128v1

27.20 27.44 27.77 T:saeaes192a120t128v1

28.38 28.52 28.95 T:saeaes128a64t64v1

28.38 28.61 28.86 T:saeaes128a64t128v1

28.61? 28.93? 47.66? T:knot128v2

30.46 30.59 30.92 T:comet128aesv1

31.27 31.38 31.83 T:saeaes256a120t128v1

31.99 32.27 32.60 T:saeaes192a64t128v1

32.27 32.68 33.72 T:saeaes192a64t64v1

36.15 36.25 36.70 T:saeaes256a64t128v1

35.99 36.27 36.35 T:saeaes256a64t64v1

35.54? 36.55? 54.40? T:grain128aead

39.03 39.29 39.55 T:schwaemm256128v1

44.96 45.21 45.52 T:schwaemm256256v1

45.52 45.58 45.61 T:giftcofb128v1

46.23 46.23 46.23 T:tinyjambu128

47.80 47.99 48.21 T:tinyjambu192

50.62 50.62 50.97 T:isapa128av20

52.54 52.88 53.55 T:schwaemm192192v1

53.63 53.63 54.00 T:tinyjambu256

53.59 53.80 54.15 T:knot192

57.13 57.46 57.81 T:knot256

57.95 58.34 59.19 T:photonbeetleaead128rate128v1

58.74 59.02 59.17 T:saturninctrcascadev2

59.03 59.48 59.77 T:schwaemm128128v1

60.59 60.71 60.97 T:drygascon128k56

61.09 61.38 61.83 T:drygascon128k16

61.14 61.38 61.66 T:drygascon128k32

68.28 68.39 68.79 T:drygascon256k32

83.23 83.51 84.30 T:sestatetweaes128v1

104.84 105.13 105.82 T:estatetweaes128v1

117.02 117.79 118.27 T:comet64chamv1

130.49 130.98 131.38 T:comet64speckv1

131.30 131.52 139.45 T:spook128su512v1

131.34 131.68 132.06 T:spook128su384v1

131.80 132.01 140.14 T:spook128mu384v1

131.90 132.03 132.55 T:spook128mu512v1

139.79 140.22 140.87 T:elephant200v1

150.88 151.16 151.73 T:skinnyaeadtk3128128v1

157.73 161.37 165.08 T:comet128chamv1

169.59 169.84 169.96 T:romulusn1v1

179.89 179.92 180.61 T:isapk128av20

197.43 198.09 199.76 T:mixfeed

207.62 208.59 209.09 T:photonbeetleaead128rate32v1

234.52 234.66 234.73 T:romulusm1v1

253.02 255.06 258.23 T:subterraneanv1

261.87 263.09 264.51 T:romulusn3v1

279.37? 280.06? 454.59? T:sundaegift0v1

284.12 284.12 284.54 T:isapa128v20

297.09 297.87 298.35 T:sundaegift96v1

297.72 298.01 298.57 T:sundaegift128v1

297.75 298.17 298.57 T:sundaegift64v1

302.96 303.04 303.10 T:pyjamask128aeadv1

310.02? 310.32? 388.73? T:pyjamask96aeadv1

381.62 382.84 385.50 T:romulusn2v1

381.99 382.88 386.83 T:romulusm3v1

408.64 410.38 411.53 T:spoc128sliscplight256v1

410.92 411.80 414.35 T:skinnyaeadtk296128v1

413.18 415.46 416.26 T:skinnyaeadtk29664v1

536.59 542.59 544.12 T:romulusm2v1

603.10 605.13 607.34 T:skinnyaeadtk312864v1

603.85 607.70 612.36 T:skinnyaeadtk39664v1

610.71 614.22 619.98 T:skinnyaeadtk396128v1

642.05 645.68 646.41 T:spix128v1

654.76 669.84 670.80 T:spoc64sliscplight192v1

748.21 749.40 755.98 T:saefforkskinnyb128t192n56v1

751.66 754.01 758.44 T:saefforkskinnyb128t256n120v1

756.13 758.63 763.56 T:paefforkskinnyb128t256n112v1

757.40 759.66 766.95 T:paefforkskinnyb128t192n48v1

1019.34 1019.77 1021.16 T:isapk128v20

1045.92 1048.77 1051.33 T:wageae128v1

1075.95 1080.79 1083.01 T:paefforkskinnyb128t288n104v1

1304.86 1305.59 1307.64 T:aceae128v1

1633.22 1637.00 1639.04 T:hyenav1

1778.78 1788.84 1793.39 T:twegift64lotusaeadv1

1835.60 1846.18 1887.89 T:twegift64locusaeadv1

1913.55 1914.44 1915.04 T:orangezestv1

2057.49 2066.84 2069.04 T:paefforkskinnyb64t192n48v1

2175.34 2181.04 2188.25 T:oribatida256v11

2311.49 2326.09 2331.49 T:estatetwegift128v1

2524.95 2565.19 2594.69 T:oribatida192v11

6025.27 6034.58 6039.20 T:elephant176v1

7877.45 7880.24 7881.91 T:elephant160v1

Cycles/byte for 64+64 forgery

25% 50% 75% aead

8.13 8.13 8.41 T:ascon128av12

8.59 8.61 8.83 ascon128av12

10.50 10.51 10.51 ascon128v12

10.72 10.72 10.72 ascon80pqv12

16.73 16.90 16.98 T:xoodyakv1

17.63 17.78 17.88 T:gimli24v1

24.43 24.68 25.27 T:saeaes128a120t128v1

24.54 25.11 25.41 T:saeaes128a120t64v1

25.35 25.35 25.35 T:knot128v1

27.68 27.98 28.30 T:saeaes192a120t128v1

28.59 28.84 29.16 T:saeaes128a64t64v1

28.55? 28.96? 43.06? T:knot128v2

28.84 29.14 29.63 T:saeaes128a64t128v1

30.38 30.58 30.80 T:comet128aesv1

31.25 31.62 32.02 T:saeaes256a120t128v1

32.38 32.66 34.28 T:saeaes192a64t64v1

32.73 32.73 33.28 T:saeaes192a64t128v1

33.27 33.36 34.00 T:isapa128av20

35.35 35.54 36.80 T:grain128aead

36.46 36.60 36.75 T:saeaes256a64t128v1

36.97 37.00 37.24 T:saeaes256a64t64v1

40.11 40.30 40.90 T:schwaemm256128v1

45.50 45.52 45.59 T:giftcofb128v1

46.23 46.23 46.23 T:tinyjambu128

46.16 46.26 46.65 T:schwaemm256256v1

47.86 47.94 47.98 T:tinyjambu192

53.54 53.55 53.81 T:knot192

53.63 53.63 53.64 T:tinyjambu256

53.72 53.85 54.06 T:schwaemm192192v1

57.33 57.52 57.74 T:knot256

57.90 58.27 58.93 T:photonbeetleaead128rate128v1

58.40 58.77 58.87 T:saturninctrcascadev2

60.12 60.37 61.01 T:schwaemm128128v1

60.59 60.62 60.87 T:drygascon128k56

60.68 61.20 61.88 T:drygascon128k32

61.13 61.64 61.95 T:drygascon128k16

68.32 68.48 69.00 T:drygascon256k32

83.38 84.20 85.52 T:sestatetweaes128v1

104.58 105.45 106.66 T:estatetweaes128v1

117.33 117.59 118.04 T:isapk128av20

117.09 117.86 118.30 T:comet64chamv1

130.45 130.98 131.05 T:comet64speckv1

131.38 131.56 139.12 T:spook128su512v1

131.47 131.64 132.01 T:spook128su384v1

131.81 131.87 132.38 T:spook128mu384v1

131.93 131.98 132.38 T:spook128mu512v1

138.77 140.42 141.05 T:elephant200v1

148.05 148.21 148.63 T:isapa128v20

150.50 150.75 151.09 T:skinnyaeadtk3128128v1

151.50 152.29 163.61 T:comet128chamv1

169.66 169.77 169.97 T:romulusn1v1

196.44 198.80 199.05 T:mixfeed

208.17 208.73 209.14 T:photonbeetleaead128rate32v1

234.79 234.86 235.04 T:romulusm1v1

254.95 255.57 258.41 T:subterraneanv1

263.92 264.34 265.54 T:romulusn3v1

280.05? 280.58? 454.48? T:sundaegift0v1

297.32 297.74 298.09 T:sundaegift96v1

297.23 297.90 298.16 T:sundaegift64v1

297.66 297.92 298.62 T:sundaegift128v1

302.95 303.01 303.05 T:pyjamask128aeadv1

310.09 310.10 310.34 T:pyjamask96aeadv1

381.63 382.31 384.23 T:romulusm3v1

381.38 382.45 385.83 T:romulusn2v1

408.62 409.69 411.79 T:spoc128sliscplight256v1

409.50 412.75 414.15 T:skinnyaeadtk296128v1

412.60 414.39 418.45 T:skinnyaeadtk29664v1

541.55 542.41 543.49 T:isapk128v20

541.05 542.88 545.12 T:romulusm2v1

602.80 603.58 608.94 T:skinnyaeadtk312864v1

603.75 605.44 607.91 T:skinnyaeadtk39664v1

615.66 618.02 620.49 T:skinnyaeadtk396128v1

641.52 642.84 645.18 T:spix128v1

665.19 672.07 674.56 T:spoc64sliscplight192v1

749.08 749.66 753.46 T:saefforkskinnyb128t192n56v1

744.28 755.09 757.27 T:saefforkskinnyb128t256n120v1

754.15 755.34 765.31 T:paefforkskinnyb128t192n48v1

756.66 757.16 758.59 T:paefforkskinnyb128t256n112v1

994.58 1034.84 1047.80 T:wageae128v1

1074.69 1078.05 1081.35 T:paefforkskinnyb128t288n104v1

1303.45 1304.36 1306.29 T:aceae128v1

1626.68 1635.37 1642.02 T:hyenav1

1781.43 1783.95 1787.95 T:twegift64lotusaeadv1

1825.80 1828.33 1891.70 T:twegift64locusaeadv1

1908.86 1913.37 1915.29 T:orangezestv1

2036.38 2072.75 2075.86 T:paefforkskinnyb64t192n48v1

2183.67 2186.70 2188.52 T:oribatida256v11

2348.60 2355.86 2376.02 T:estatetwegift128v1

2572.38 2579.46 2590.55 T:oribatida192v11

6024.15 6028.87 6050.43 T:elephant176v1

7879.06 7931.53 8230.20 T:elephant160v1

amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; `dali`, `supercop-20221122`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

1.51 1.52 1.54 T:aes128gcmv1

1.67 1.68 1.68 aes256gcmv1

6.75 6.76 6.78 ascon128av12

9.34 9.38 9.39 ascon80pqv12

9.41 9.42 9.42 ascon128v12

11.32 11.43 11.44 ascon128abi32v12

17.21 17.23 17.23 ascon128bi32v12

17.58 17.62 17.64 T:xoodyakround3

21.74 21.75 21.77 T:schwaemm256128v2

25.51 25.56 25.82 T:schwaemm256256v2

27.23 27.47 27.64 T:grain128aeadv2

28.48 28.61 28.63 T:schwaemm192192v2

29.82 29.82 29.84 T:schwaemm128128v2

35.03 35.15 35.24 romulusn

36.21 36.33 36.42 T:isapa128v20

36.78 36.80 37.03 T:isapa128av20

40.33 40.37 40.38 T:giftcofb128v1

56.93 57.10 57.13 romulusm

62.11 62.17 62.26 T:tinyjambu128v2

66.79 66.83 67.04 T:isapk128av20

69.54 69.55 69.55 T:tinyjambu192v2

76.63 76.72 76.77 T:tinyjambu256v2

85.85 88.43 90.42 T:isapk128v20

110.65 110.67 110.68 romulust

164.30 164.90 165.37 T:isapxv20

254.48 255.48 255.87 T:elephant200v2

6833.02 6837.43 6841.37 T:elephant176v2

7653.65 7658.29 7663.46 T:elephant160v2

Cycles/byte for long+0 decrypt

25% 50% 75% aead

1.61 1.63 1.64 T:aes128gcmv1

1.76 1.77 1.79 aes256gcmv1

6.66 6.67 6.68 ascon128av12

9.36 9.37 9.38 ascon80pqv12

9.31 9.40 9.43 ascon128v12

11.44 11.44 11.44 ascon128abi32v12

17.15 17.29 17.29 ascon128bi32v12

17.40 17.45 17.48 T:xoodyakround3

21.82 21.83 21.89 T:schwaemm256128v2

25.57 25.62 25.76 T:schwaemm256256v2

27.20 27.23 27.30 T:grain128aeadv2

28.61 28.64 28.88 T:schwaemm192192v2

29.81 29.83 29.94 T:schwaemm128128v2

35.13 35.15 35.50 romulusn

36.35 36.37 36.45 T:isapa128v20

36.69 36.70 36.74 T:isapa128av20

40.74 40.77 40.80 T:giftcofb128v1

56.68 57.14 57.31 romulusm

62.23 62.29 62.38 T:tinyjambu128v2

66.79 66.83 66.99 T:isapk128av20

69.31 69.37 69.52 T:tinyjambu192v2

76.62 76.63 76.67 T:tinyjambu256v2

86.04 88.43 90.30 T:isapk128v20

110.65 110.67 110.68 romulust

163.47 164.02 165.72 T:isapxv20

253.72 254.65 256.50 T:elephant200v2

6838.87 6843.60 6845.03 T:elephant176v2

7655.81 7659.98 7663.07 T:elephant160v2

Cycles/byte for long+0 forgery

25% 50% 75% aead

1.61 1.62 1.62 T:aes128gcmv1

1.77 1.77 1.78 aes256gcmv1

6.65 6.66 6.67 ascon128av12

9.35 9.37 9.38 ascon80pqv12

9.37 9.39 9.42 ascon128v12

11.43 11.44 11.45 ascon128abi32v12

17.12 17.13 17.17 ascon128bi32v12

17.52 17.58 17.67 T:xoodyakround3

18.17 18.19 18.24 T:isapa128v20

21.81 21.83 21.86 T:schwaemm256128v2

24.36 24.37 24.40 T:isapa128av20

25.57 25.62 25.65 T:schwaemm256256v2

27.20 27.24 27.25 T:grain128aeadv2

28.61 28.64 28.98 T:schwaemm192192v2

29.78 29.81 29.88 T:schwaemm128128v2

35.13 35.19 35.38 romulusn

37.14 37.19 37.24 romulust

40.79 40.82 40.84 T:giftcofb128v1

44.07 44.11 44.27 T:isapk128av20

53.83 55.03 56.11 T:isapk128v20

57.09 57.11 57.15 romulusm

62.14 62.26 62.31 T:tinyjambu128v2

69.32 69.33 69.39 T:tinyjambu192v2

76.65 76.68 76.69 T:tinyjambu256v2

98.22 98.51 98.67 T:isapxv20

253.91 255.03 255.55 T:elephant200v2

6838.43 6841.41 6860.27 T:elephant176v2

7651.47 7658.28 7663.00 T:elephant160v2

Cycles/byte for long+long encrypt

25% 50% 75% aead

1.02 1.03 1.03 T:aes128gcmv1

1.09 1.10 1.11 aes256gcmv1

6.58 6.61 6.62 ascon128av12

9.30 9.31 9.32 ascon80pqv12

9.31 9.32 9.34 ascon128v12

11.06 11.07 11.14 ascon128abi32v12

13.75 13.79 13.84 T:xoodyakround3

16.87 16.90 16.90 ascon128bi32v12

21.31 21.50 21.60 T:schwaemm256128v2

25.47 25.49 25.62 T:schwaemm256256v2

27.24 27.33 27.35 T:isapa128v20

27.31 27.36 27.46 T:grain128aeadv2

28.50 28.52 28.54 T:schwaemm192192v2

28.44 28.60 28.61 romulusn

29.64 29.68 29.97 T:schwaemm128128v2

30.77 30.83 30.85 T:isapa128av20

39.42 39.52 39.55 romulusm

40.34 40.37 40.37 T:giftcofb128v1

51.14 51.17 51.22 T:tinyjambu128v2

54.83 54.84 54.86 T:tinyjambu192v2

55.38 55.41 55.46 T:isapk128av20

58.43 58.45 58.50 T:tinyjambu256v2

70.02 71.63 72.60 T:isapk128v20

73.89 73.93 73.99 romulust

130.88 131.27 131.44 T:isapxv20

190.62 190.81 191.70 T:elephant200v2

5105.29 5109.28 5111.83 T:elephant176v2

5742.40 5743.75 5754.66 T:elephant160v2

Cycles/byte for long+long decrypt

25% 50% 75% aead

1.05 1.07 1.08 T:aes128gcmv1

1.15 1.15 1.16 aes256gcmv1

6.56 6.58 6.58 ascon128av12

9.28 9.29 9.31 ascon128v12

9.30 9.30 9.31 ascon80pqv12

11.21 11.22 11.24 ascon128abi32v12

13.64 13.68 13.70 T:xoodyakround3

16.89 16.90 16.92 ascon128bi32v12

21.22 21.39 21.46 T:schwaemm256128v2

25.48 25.49 25.52 T:schwaemm256256v2

26.87 27.17 27.23 T:grain128aeadv2

27.30 27.31 27.33 T:isapa128v20

28.35 28.56 28.58 romulusn

28.51 28.71 28.73 T:schwaemm192192v2

29.59 29.63 29.69 T:schwaemm128128v2

30.67 30.72 30.79 T:isapa128av20

39.52 39.54 39.65 romulusm

40.55 40.56 40.58 T:giftcofb128v1

51.22 51.23 51.25 T:tinyjambu128v2

54.72 54.76 54.81 T:tinyjambu192v2

55.41 55.64 55.67 T:isapk128av20

58.39 58.44 58.57 T:tinyjambu256v2

70.39 71.81 72.64 T:isapk128v20

73.91 73.93 73.98 romulust

130.71 131.05 131.49 T:isapxv20

190.01 191.37 191.59 T:elephant200v2

5106.03 5107.12 5108.84 T:elephant176v2

5742.00 5747.21 5756.15 T:elephant160v2

Cycles/byte for long+long forgery

25% 50% 75% aead

1.06 1.07 1.08 T:aes128gcmv1

1.15 1.16 1.16 aes256gcmv1

6.55 6.55 6.56 ascon128av12

9.29 9.30 9.32 ascon128v12

9.29 9.30 9.30 ascon80pqv12

11.22 11.22 11.23 ascon128abi32v12

13.71 13.73 13.77 T:xoodyakround3

16.94 17.00 17.01 ascon128bi32v12

18.22 18.24 18.26 T:isapa128v20

21.35 21.60 21.60 T:schwaemm256128v2

24.43 24.45 24.56 T:isapa128av20

25.50 25.53 25.61 T:schwaemm256256v2

26.87 27.18 27.24 T:grain128aeadv2

28.35 28.57 28.59 romulusn

28.68 28.70 28.71 T:schwaemm192192v2

29.59 29.61 29.66 T:schwaemm128128v2

37.17 37.20 37.36 romulust

39.33 39.54 39.61 romulusm

40.56 40.56 40.59 T:giftcofb128v1

44.01 44.05 44.09 T:isapk128av20

51.15 51.20 51.22 T:tinyjambu128v2

54.72 54.73 54.76 T:tinyjambu192v2

54.40 54.98 55.55 T:isapk128v20

58.45 58.52 58.53 T:tinyjambu256v2

98.07 98.34 98.48 T:isapxv20

189.68 190.13 191.62 T:elephant200v2

5108.98 5112.72 5122.40 T:elephant176v2

5737.18 5741.13 5743.91 T:elephant160v2

Cycles/byte for 0+long encrypt

25% 50% 75% aead

0.53 0.54 0.56 T:aes128gcmv1

0.53 0.55 0.56 aes256gcmv1

6.41 6.43 6.46 ascon128av12

9.23 9.23 9.24 ascon80pqv12

9.25 9.25 9.25 ascon128v12

9.89 9.90 9.93 T:xoodyakround3

10.81 10.83 10.84 ascon128abi32v12

16.57 16.57 16.58 ascon128bi32v12

18.25 18.25 18.25 T:isapa128v20

21.46 21.47 21.49 T:schwaemm256128v2

21.97 21.98 22.00 romulusm

21.97 21.99 22.13 romulusn

24.64 24.65 24.71 T:isapa128av20

25.44 25.47 25.66 T:schwaemm256256v2

27.08 27.44 27.49 T:grain128aeadv2

28.37 28.40 28.43 T:schwaemm192192v2

29.51 29.59 29.64 T:schwaemm128128v2

37.16 37.18 37.20 romulust

40.13 40.14 40.19 T:tinyjambu192v2

40.16 40.19 40.22 T:tinyjambu128v2

40.22 40.23 40.23 T:tinyjambu256v2

40.33 40.34 40.38 T:giftcofb128v1

43.96 44.07 44.11 T:isapk128av20

53.91 55.23 56.05 T:isapk128v20

97.39 97.95 98.04 T:isapxv20

127.11 127.80 128.14 T:elephant200v2

3373.75 3378.69 3385.78 T:elephant176v2

3820.93 3823.89 3828.72 T:elephant160v2

Cycles/byte for 0+long decrypt

25% 50% 75% aead

0.52 0.54 0.55 T:aes128gcmv1

0.53 0.55 0.57 aes256gcmv1

6.35 6.38 6.39 ascon128av12

9.22 9.23 9.23 ascon128v12

9.23 9.24 9.24 ascon80pqv12

9.62 9.93 10.00 T:xoodyakround3

10.93? 11.00? 12.54? ascon128abi32v12

16.68 16.69 16.69 ascon128bi32v12

18.26 18.27 18.27 T:isapa128v20

21.45 21.47 21.48 T:schwaemm256128v2

21.97 21.98 21.99 romulusn

21.97 21.99 22.00 romulusm

24.35 24.40 24.53 T:isapa128av20

25.43 25.45 25.54 T:schwaemm256256v2

26.96 27.10 27.21 T:grain128aeadv2

28.32 28.41 28.43 T:schwaemm192192v2

29.54 29.59 29.63 T:schwaemm128128v2

37.15 37.18 37.22 romulust

40.13 40.14 40.16 T:tinyjambu192v2

40.18 40.21 40.23 T:tinyjambu128v2

40.18 40.23 40.37 T:tinyjambu256v2

40.34 40.37 40.39 T:giftcofb128v1

43.96 43.99 44.11 T:isapk128av20

53.78 54.91 56.04 T:isapk128v20

97.81 98.10 98.46 T:isapxv20

127.54 127.62 128.12 T:elephant200v2

3373.50 3376.59 3378.37 T:elephant176v2

3821.53 3827.26 3828.85 T:elephant160v2

Cycles/byte for 0+long forgery

25% 50% 75% aead

0.53 0.54 0.56 T:aes128gcmv1

0.54 0.55 0.56 aes256gcmv1

6.42 6.47 6.48 ascon128av12

9.20 9.21 9.25 ascon80pqv12

9.22 9.22 9.23 ascon128v12

9.87 9.95 9.99 T:xoodyakround3

10.92? 11.01? 12.53? ascon128abi32v12

16.68 16.84 16.84 ascon128bi32v12

18.25 18.26 18.32 T:isapa128v20

21.45 21.47 21.48 T:schwaemm256128v2

21.96 21.98 22.00 romulusn

21.97 21.98 22.00 romulusm

24.33 24.47 24.60 T:isapa128av20

25.45 25.50 25.65 T:schwaemm256256v2

26.98 27.02 27.09 T:grain128aeadv2

28.38 28.45 28.64 T:schwaemm192192v2

29.50 29.55 29.56 T:schwaemm128128v2

37.17 37.18 37.22 romulust

40.14 40.14 40.14 T:tinyjambu192v2

40.15 40.17 40.22 T:tinyjambu128v2

40.19 40.24 40.39 T:tinyjambu256v2

40.36 40.41 40.43 T:giftcofb128v1

44.00 44.04 44.07 T:isapk128av20

53.75 54.88 56.00 T:isapk128v20

97.75 97.99 98.41 T:isapxv20

127.33 127.73 127.97 T:elephant200v2

3375.05 3376.78 3379.00 T:elephant176v2

3822.06 3826.07 3831.13 T:elephant160v2

Cycles/byte for 1536+1536 encrypt

25% 50% 75% aead

1.14 1.15 1.15 T:aes128gcmv1

1.23 1.24 1.24 aes256gcmv1

6.78 6.78 6.80 ascon128av12

9.46 9.47 9.49 ascon128v12

9.46 9.47 9.47 ascon80pqv12

11.39 11.39 11.46 ascon128abi32v12

13.92 13.93 13.97 T:xoodyakround3

17.21 17.21 17.22 ascon128bi32v12

22.11 22.11 22.14 T:schwaemm256128v2

26.16 26.25 26.38 T:schwaemm256256v2

27.65 27.72 27.75 T:grain128aeadv2

28.81 28.85 28.86 romulusn

29.16 29.18 29.27 T:schwaemm192192v2

30.11 30.12 30.16 T:schwaemm128128v2

34.06 34.12 34.15 T:isapa128av20

39.67 39.80 39.82 romulusm

39.88 39.88 39.97 T:isapa128v20

40.73 40.75 40.78 T:giftcofb128v1

51.54 51.58 51.59 T:tinyjambu128v2

55.25 55.27 55.28 T:tinyjambu192v2

58.85 58.89 58.93 T:tinyjambu256v2

61.90 61.93 62.09 T:isapk128av20

75.07 75.08 75.13 romulust

123.13 123.17 124.57 T:isapk128v20

194.46 195.46 195.68 T:elephant200v2

212.50 212.75 213.08 T:isapxv20

5144.21 5146.96 5150.06 T:elephant176v2

5802.11 5805.85 5811.03 T:elephant160v2

Cycles/byte for 1536+1536 decrypt

25% 50% 75% aead

1.20 1.20 1.20 T:aes128gcmv1

1.29 1.29 1.30 aes256gcmv1

6.77 6.77 6.77 ascon128av12

9.45 9.46 9.49 ascon128v12

9.47 9.47 9.48 ascon80pqv12

11.52 11.52 11.52 ascon128abi32v12

13.84 13.86 13.88 T:xoodyakround3

17.23 17.23 17.25 ascon128bi32v12

21.87 22.04 22.28 T:schwaemm256128v2

26.20 26.21 26.24 T:schwaemm256256v2

26.68 27.54 27.57 T:grain128aeadv2

28.63 28.82 28.85 romulusn

29.17 29.17 29.29 T:schwaemm192192v2

30.11 30.20 30.42 T:schwaemm128128v2

33.98 33.98 34.01 T:isapa128av20

39.68 39.90 39.98 romulusm

39.94 39.94 39.94 T:isapa128v20

40.94 40.95 40.97 T:giftcofb128v1

51.59 51.59 51.63 T:tinyjambu128v2

55.15 55.17 55.17 T:tinyjambu192v2

58.87 58.94 58.95 T:tinyjambu256v2

61.90 61.91 62.02 T:isapk128av20

75.08 75.08 75.12 romulust

123.16 123.42 124.59 T:isapk128v20

194.75 195.10 195.28 T:elephant200v2

212.49 212.65 212.92 T:isapxv20

5144.69 5146.14 5148.75 T:elephant176v2

5802.93 5804.23 5807.98 T:elephant160v2

Cycles/byte for 1536+1536 forgery

25% 50% 75% aead

1.18 1.18 1.19 T:aes128gcmv1

1.28 1.29 1.29 aes256gcmv1

6.71 6.74 6.76 ascon128av12

9.44 9.44 9.45 ascon128v12

9.47 9.47 9.47 ascon80pqv12

11.52 11.52 11.53 ascon128abi32v12

13.88 13.90 13.93 T:xoodyakround3

17.26 17.31 17.31 ascon128bi32v12

21.88 21.89 22.04 T:schwaemm256128v2

24.64 24.64 24.64 T:isapa128v20

26.27 26.29 26.41 T:isapa128av20

26.21 26.29 26.35 T:schwaemm256256v2

27.25 27.56 27.58 T:grain128aeadv2

28.63 28.82 28.82 romulusn

29.17 29.20 29.28 T:schwaemm192192v2

30.07 30.07 30.10 T:schwaemm128128v2

38.26 38.27 38.30 romulust

39.86 39.87 39.89 romulusm

40.91 40.96 40.97 T:giftcofb128v1

47.80 47.81 47.84 T:isapk128av20

51.59 51.65 51.67 T:tinyjambu128v2

55.15 55.16 55.18 T:tinyjambu192v2

58.91 58.93 59.01 T:tinyjambu256v2

81.38 81.39 82.08 T:isapk128v20

139.88 140.09 140.17 T:isapxv20

193.84 195.35 195.63 T:elephant200v2

5144.49 5145.26 5146.35 T:elephant176v2

5802.10 5803.23 5806.11 T:elephant160v2

Cycles/byte for 64+64 encrypt

25% 50% 75% aead

6.55 6.62 6.77 aes256gcmv1

7.25 7.31 7.38 T:aes128gcmv1

10.94 11.18 11.66 ascon128av12

12.81 12.93 13.13 ascon80pqv12

12.77 13.12 13.35 ascon128v12

18.43 18.59 18.80 ascon128abi32v12

20.62 20.73 20.83 T:xoodyakround3

24.12 24.41 24.71 ascon128bi32v12

34.60 34.80 34.91 romulusn

35.59 35.73 35.88 T:grain128aeadv2

36.10 36.20 36.29 T:schwaemm256128v2

40.02 40.07 40.29 T:schwaemm128128v2

41.70 41.80 41.90 T:schwaemm256256v2

45.59 45.84 45.95 romulusm

47.58 47.76 47.96 T:schwaemm192192v2

49.19 49.29 49.41 T:giftcofb128v1

60.38 60.54 60.67 T:tinyjambu128v2

64.72 64.95 65.04 T:tinyjambu192v2

68.52 68.69 68.80 T:tinyjambu256v2

101.07 101.41 102.97 romulust

109.43 109.72 110.02 T:isapa128av20

198.94 199.12 200.20 T:isapk128av20

276.92 277.04 277.87 T:elephant200v2

328.62 328.73 330.40 T:isapa128v20

1296.42 1296.77 1329.31 T:isapk128v20

2061.05 2063.45 2068.97 T:isapxv20

6401.59 6403.63 6406.35 T:elephant176v2

7768.25 7770.67 7774.83 T:elephant160v2

Cycles/byte for 64+64 decrypt

25% 50% 75% aead

6.69 6.79 6.85 aes256gcmv1

6.83 6.88 6.93 T:aes128gcmv1

11.23 11.41 11.67 ascon128av12

12.80 12.88 13.52 ascon128v12

12.98 13.35 13.62 ascon80pqv12

18.73 18.78 19.18 ascon128abi32v12

20.41 20.52 21.15 T:xoodyakround3

24.45 24.79 25.04 ascon128bi32v12

34.89 35.01 35.12 romulusn

35.37 35.52 35.77 T:grain128aeadv2

36.41 36.44 36.55 T:schwaemm256128v2

40.16 40.20 40.40 T:schwaemm128128v2

41.71 41.80 41.90 T:schwaemm256256v2

47.30 47.44 47.57 romulusm

47.91 48.01 48.36 T:schwaemm192192v2

49.62 49.66 49.80 T:giftcofb128v1

60.85 60.97 61.05 T:tinyjambu128v2

64.82 64.88 64.89 T:tinyjambu192v2

68.80 68.82 69.05 T:tinyjambu256v2

101.00 101.20 102.11 romulust

109.50 109.77 109.97 T:isapa128av20

199.20 199.41 199.62 T:isapk128av20

277.00 277.48 278.50 T:elephant200v2

328.28 328.29 331.02 T:isapa128v20

1296.62 1297.09 1329.37 T:isapk128v20

2059.22 2065.98 2066.46 T:isapxv20

6402.27 6404.50 6411.75 T:elephant176v2

7768.20 7770.29 7773.99 T:elephant160v2

Cycles/byte for 64+64 forgery

25% 50% 75% aead

6.77 6.80 6.93 aes256gcmv1

6.72 6.82 6.87 T:aes128gcmv1

10.96 10.98 11.35 ascon128av12

12.78 12.88 13.08 ascon128v12

12.73 13.23 13.41 ascon80pqv12

18.20 18.71 18.89 ascon128abi32v12

20.49 20.58 21.26 T:xoodyakround3

24.30 24.30 24.42 ascon128bi32v12

34.68 35.00 35.13 romulusn

35.46 35.63 35.69 T:grain128aeadv2

36.30 36.32 36.38 T:schwaemm256128v2

40.12 40.18 40.49 T:schwaemm128128v2

41.73 41.79 42.08 T:schwaemm256256v2

47.38 47.45 47.52 romulusm

47.81 47.90 48.09 T:schwaemm192192v2

49.53 49.53 49.78 T:giftcofb128v1

60.65 61.00 61.12 T:tinyjambu128v2

62.91 62.92 63.68 romulust

64.66 64.67 64.75 T:tinyjambu192v2

68.22 68.23 68.45 T:isapa128av20

68.95 68.95 68.95 T:tinyjambu256v2

125.16 125.23 125.31 T:isapk128av20

170.06 170.06 171.58 T:isapa128v20

276.62 277.35 277.82 T:elephant200v2

678.12 678.49 694.72 T:isapk128v20

1079.74 1081.11 1083.26 T:isapxv20

6402.69 6406.04 6412.28 T:elephant176v2

7764.47 7766.91 7775.50 T:elephant160v2

amd64; TigerLake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; `panther`, `supercop-20230530`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

0.45? 0.55? 0.64? T:aes128gcmv1

0.54? 0.67? 0.79? T:aes256gcmv1

1.61 1.62 1.63 aes256gcmv1

3.87 3.97 4.01 aes128gcmv1

7.38 7.43 7.54 ascon128av12

10.91 10.95 10.98 ascon80pqv12

10.91 10.95 11.00 ascon128v12

13.43 13.50 13.55 T:xoodyakround3

14.75 14.79 14.82 ascon128abi32v12

16.32 16.47 16.67 T:schwaemm256128v2

18.85 18.92 18.96 T:grain128aeadv2

19.82 20.01 20.16 T:schwaemm256256v2

21.66 21.77 21.92 T:schwaemm192192v2

22.43 22.47 22.49 ascon128bi32v12

24.34 25.11 25.27 T:schwaemm128128v2

26.80 26.91 26.96 T:isapa128av20

32.07 32.10 32.13 T:isapk128av20

37.05 37.11 37.19 romulusn

44.12 44.18 44.26 T:giftcofb128v1

45.12 45.21 45.28 T:isapa128v20

57.72 57.82 57.90 romulusm

70.42 70.48 70.57 T:tinyjambu128v2

85.94 86.01 86.17 T:tinyjambu192v2

91.40 91.66 91.76 T:tinyjambu256v2

91.08 91.80 92.45 T:isapk128v20

111.16 111.32 111.38 romulust

120.32 120.78 121.14 T:elephant200v2

136.89 137.33 137.98 T:isapxv20

7254.22 7258.77 7263.81 T:elephant176v2

8271.28 8274.53 8276.41 T:elephant160v2

Cycles/byte for long+0 decrypt

25% 50% 75% aead

0.40? 0.51? 0.57? T:aes128gcmv1

0.52? 0.59? 0.62? T:aes256gcmv1

1.51 1.52 1.53 aes256gcmv1

3.89 4.00 4.09 aes128gcmv1

7.44 7.49 7.52 ascon128av12

10.75 10.79 10.82 ascon80pqv12

10.82 10.87 10.90 ascon128v12

13.21 13.34 13.42 T:xoodyakround3

14.84 14.89 14.90 ascon128abi32v12

16.46 16.67 16.82 T:schwaemm256128v2

19.17 19.25 19.29 T:grain128aeadv2

19.85 20.01 20.06 T:schwaemm256256v2

21.64 21.82 21.95 T:schwaemm192192v2

22.33 22.36 22.41 ascon128bi32v12

24.95 25.07 25.12 T:schwaemm128128v2

32.10 32.13 32.17 T:isapk128av20

34.30 34.38 34.45 T:isapa128av20

37.32 37.41 37.51 romulusn

44.26 44.34 44.40 T:giftcofb128v1

45.22 45.28 45.39 T:isapa128v20

58.25 58.33 58.38 romulusm

70.37 70.44 70.49 T:tinyjambu128v2

85.74 85.89 86.23 T:tinyjambu192v2

90.25 91.33 91.92 T:isapk128v20

91.01 91.64 91.69 T:tinyjambu256v2

111.07 111.28 111.49 romulust

119.84 120.65 121.04 T:elephant200v2

137.21 138.86 140.38 T:isapxv20

7252.74 7259.58 7263.93 T:elephant176v2

8272.01 8277.40 8279.61 T:elephant160v2

Cycles/byte for long+0 forgery

25% 50% 75% aead

0.48? 0.54? 0.65? T:aes128gcmv1

0.52? 0.60? 0.66? T:aes256gcmv1

1.46 1.50 1.57 aes128gcmv1

1.51 1.52 1.53 aes256gcmv1

7.43 7.47 7.51 ascon128av12

10.75 10.78 10.80 ascon80pqv12

10.85 10.88 10.91 ascon128v12

13.26 13.36 13.42 T:xoodyakround3

14.85 14.90 14.93 ascon128abi32v12

16.38 16.56 16.71 T:schwaemm256128v2

19.14 19.22 19.30 T:grain128aeadv2

19.89 20.04 20.21 T:schwaemm256256v2

21.36 21.39 21.43 T:isapk128av20

21.61 21.76 21.97 T:schwaemm192192v2

21.96 22.03 22.07 T:isapa128v20

22.33 22.37 22.42 ascon128bi32v12

22.80 22.84 22.89 T:isapa128av20

25.01 25.27 25.43 T:schwaemm128128v2

37.27 37.39 37.49 romulusn

38.71 38.94 39.13 romulust

44.28 44.35 44.40 T:giftcofb128v1

57.15 57.73 58.19 T:isapk128v20

58.15 58.28 58.46 romulusm

70.35 70.46 70.55 T:tinyjambu128v2

81.40 81.69 81.92 T:isapxv20

85.50 85.72 85.83 T:tinyjambu192v2

91.35 91.44 91.65 T:tinyjambu256v2

120.90 121.09 121.41 T:elephant200v2

7255.62 7258.95 7262.27 T:elephant176v2

8269.25 8276.10 8278.30 T:elephant160v2

Cycles/byte for long+long encrypt

25% 50% 75% aead

0.37? 0.40? 0.45? T:aes128gcmv1

0.41? 0.44? 0.49? T:aes256gcmv1

0.95 0.96 0.97 aes256gcmv1

2.68 2.70 2.73 aes128gcmv1

7.34 7.37 7.47 ascon128av12

10.28 10.32 10.37 T:xoodyakround3

10.86 10.89 10.90 ascon80pqv12

10.90 10.92 10.94 ascon128v12

14.50 14.52 14.54 ascon128abi32v12

16.22 16.44 16.59 T:schwaemm256128v2

18.81 18.86 18.94 T:grain128aeadv2

19.85 20.02 20.18 T:schwaemm256256v2

21.59 21.77 21.86 T:schwaemm192192v2

22.10 22.12 22.15 ascon128bi32v12

24.84 24.88 24.93 T:isapa128av20

24.85 24.94 25.07 T:schwaemm128128v2

26.73 26.73 26.74 T:isapk128av20

28.99 29.03 29.05 romulusn

33.62 33.69 33.78 T:isapa128v20

39.34 39.39 39.49 romulusm

44.16 44.19 44.24 T:giftcofb128v1

57.47 57.52 57.63 T:tinyjambu128v2

67.04 67.10 67.34 T:tinyjambu192v2

68.61 68.85 69.09 T:tinyjambu256v2

73.92 74.30 74.82 T:isapk128v20

74.92 75.00 75.05 romulust

90.80 91.55 91.95 T:elephant200v2

109.09 109.65 110.44 T:isapxv20

5415.56 5418.98 5422.41 T:elephant176v2

6198.24 6201.67 6203.78 T:elephant160v2

Cycles/byte for long+long decrypt

25% 50% 75% aead

0.33? 0.37? 0.43? T:aes128gcmv1

0.40? 0.43? 0.52? T:aes256gcmv1

0.90 0.91 0.92 aes256gcmv1

2.71 2.77 2.82 aes128gcmv1

7.37 7.40 7.45 ascon128av12

10.22 10.26 10.29 T:xoodyakround3

10.78 10.81 10.84 ascon80pqv12

10.85 10.87 10.89 ascon128v12

14.53 14.58 14.61 ascon128abi32v12

16.30 16.40 16.63 T:schwaemm256128v2

19.05 19.09 19.11 T:grain128aeadv2

20.11 20.21 20.35 T:schwaemm256256v2

21.61 21.70 21.77 T:schwaemm192192v2

22.07 22.10 22.13 ascon128bi32v12

24.96 25.05 25.14 T:schwaemm128128v2

26.70 26.73 26.76 T:isapk128av20

28.35 28.39 28.44 T:isapa128av20

29.08 29.13 29.17 romulusn

33.66 33.68 33.72 T:isapa128v20

39.54 39.59 39.66 romulusm

44.15 44.23 44.28 T:giftcofb128v1

57.45 57.50 57.54 T:tinyjambu128v2

66.92 67.12 67.16 T:tinyjambu192v2

69.06 69.09 69.14 T:tinyjambu256v2

73.74 74.11 74.53 T:isapk128v20

74.97 75.08 75.26 romulust

91.13 91.88 92.19 T:elephant200v2

109.52 109.99 110.32 T:isapxv20

5414.34 5418.99 5422.41 T:elephant176v2

6202.54 6205.03 6206.50 T:elephant160v2

Cycles/byte for long+long forgery

25% 50% 75% aead

0.34? 0.36? 0.40? T:aes128gcmv1

0.40 0.41 0.44 T:aes256gcmv1

0.91 0.92 0.92 aes256gcmv1

1.46 1.49 1.51 aes128gcmv1

7.38 7.40 7.43 ascon128av12

10.22 10.27 10.35 T:xoodyakround3

10.80 10.82 10.85 ascon80pqv12

10.85 10.88 10.90 ascon128v12

14.54 14.57 14.59 ascon128abi32v12

16.26 16.46 16.60 T:schwaemm256128v2

18.94 18.98 19.01 T:grain128aeadv2

19.89 19.96 20.13 T:schwaemm256256v2

21.38 21.40 21.42 T:isapk128av20

21.60 21.66 21.79 T:schwaemm192192v2

22.04 22.07 22.10 ascon128bi32v12

22.05 22.08 22.11 T:isapa128v20

22.56 22.63 22.67 T:isapa128av20

24.88 24.98 25.11 T:schwaemm128128v2

29.08 29.10 29.22 romulusn

38.78 38.91 39.00 romulust

39.48 39.57 39.66 romulusm

44.13 44.18 44.24 T:giftcofb128v1

57.22 57.36 57.62 T:isapk128v20

57.53 57.64 57.70 T:tinyjambu128v2

67.27 67.32 67.41 T:tinyjambu192v2

68.59 68.65 69.09 T:tinyjambu256v2

81.34 81.58 82.15 T:isapxv20

91.11 91.82 92.16 T:elephant200v2

5413.84 5420.37 5427.19 T:elephant176v2

6202.75 6205.96 6209.40 T:elephant160v2

Cycles/byte for 0+long encrypt

25% 50% 75% aead

0.15? 0.21? 0.36? T:aes256gcmv1

0.13? 0.23? 0.31? T:aes128gcmv1

0.28? 0.31? 0.33? aes256gcmv1

1.43 1.46 1.49 aes128gcmv1

7.18 7.24 7.30 T:xoodyakround3

7.32 7.45 7.63 ascon128av12

10.79 10.82 10.85 ascon80pqv12

10.85 10.88 10.90 ascon128v12

14.21 14.24 14.26 ascon128abi32v12

16.08 16.27 16.57 T:schwaemm256128v2

18.74 18.82 18.96 T:grain128aeadv2

19.45 19.65 19.97 T:schwaemm256256v2

20.76 20.85 20.89 romulusm

20.88 20.92 20.97 romulusn

21.38 21.41 21.43 T:isapk128av20

21.45 21.63 21.76 T:schwaemm192192v2

21.74 21.76 21.80 ascon128bi32v12

22.04 22.10 22.15 T:isapa128v20

22.81 22.87 22.90 T:isapa128av20

24.70 24.96 25.08 T:schwaemm128128v2

38.65 38.74 38.87 romulust

44.11 44.20 44.25 T:giftcofb128v1

44.59 44.63 44.67 T:tinyjambu128v2

46.24 46.52 46.61 T:tinyjambu256v2

48.29 48.33 48.50 T:tinyjambu192v2

57.21 57.51 57.78 T:isapk128v20

61.80 61.93 62.16 T:elephant200v2

81.39 81.97 82.48 T:isapxv20

3572.91 3588.85 3600.70 T:elephant176v2

4137.53 4144.26 4147.91 T:elephant160v2

Cycles/byte for 0+long decrypt

25% 50% 75% aead

0.13? 0.20? 0.32? T:aes128gcmv1

0.14? 0.20? 0.25? T:aes256gcmv1

0.29? 0.32? 0.33? aes256gcmv1

1.42 1.45 1.48 aes128gcmv1

7.16 7.25 7.29 T:xoodyakround3

7.30 7.33 7.37 ascon128av12

10.80 10.84 10.85 ascon80pqv12

10.83 10.86 10.88 ascon128v12

14.21 14.24 14.27 ascon128abi32v12

15.98 16.10 16.57 T:schwaemm256128v2

18.77 18.84 19.00 T:grain128aeadv2

19.57 19.77 20.00 T:schwaemm256256v2

20.80 20.86 20.91 romulusn

20.86 20.96 21.00 romulusm

21.38 21.42 21.44 T:isapk128av20

21.46 21.60 21.79 T:schwaemm192192v2

21.76 21.79 21.84 ascon128bi32v12

22.04 22.10 22.17 T:isapa128v20

22.38 22.42 22.48 T:isapa128av20

24.83 24.96 25.15 T:schwaemm128128v2

38.67 38.92 39.11 romulust

44.12 44.21 44.26 T:giftcofb128v1

44.67 44.71 44.74 T:tinyjambu128v2

46.17 46.26 46.45 T:tinyjambu256v2

48.21 48.26 48.54 T:tinyjambu192v2

57.01 57.57 57.99 T:isapk128v20

61.50 61.95 62.15 T:elephant200v2

80.40 81.63 82.87 T:isapxv20

3569.62 3572.07 3596.90 T:elephant176v2

4135.10 4139.75 4143.70 T:elephant160v2

Cycles/byte for 0+long forgery

25% 50% 75% aead

0.17? 0.21? 0.31? T:aes128gcmv1

0.19? 0.21? 0.35? T:aes256gcmv1

0.31 0.31 0.32 aes256gcmv1

1.42 1.46 1.48 aes128gcmv1

7.09 7.23 7.29 T:xoodyakround3

7.29 7.33 7.35 ascon128av12

10.82 10.86 10.91 ascon128v12

10.84 10.89 10.93 ascon80pqv12

14.24 14.28 14.29 ascon128abi32v12

16.12 16.28 16.60 T:schwaemm256128v2

18.84 18.89 19.05 T:grain128aeadv2

19.68 19.80 20.07 T:schwaemm256256v2

20.79 20.84 20.90 romulusn

20.79 20.84 20.90 romulusm

21.36 21.40 21.44 T:isapk128av20

21.49 21.59 21.76 T:schwaemm192192v2

21.79 21.81 21.85 ascon128bi32v12

22.08 22.12 22.17 T:isapa128v20

22.36 22.40 22.47 T:isapa128av20

24.67 24.89 24.94 T:schwaemm128128v2

38.75 38.92 39.07 romulust

44.04 44.10 44.16 T:giftcofb128v1

44.54 44.61 44.72 T:tinyjambu128v2

46.20 46.42 46.53 T:tinyjambu256v2

48.31 48.37 48.46 T:tinyjambu192v2

56.99 57.76 58.04 T:isapk128v20

61.61 62.08 62.39 T:elephant200v2

81.66 81.99 82.39 T:isapxv20

3567.97 3570.72 3589.84 T:elephant176v2

4137.29 4145.43 4149.69 T:elephant160v2

Cycles/byte for 1536+1536 encrypt

25% 50% 75% aead

0.81 0.84 0.85 T:aes128gcmv1

0.87 0.90 0.92 T:aes256gcmv1

1.11 1.11 1.12 aes256gcmv1

2.82 2.84 2.87 aes128gcmv1

7.56 7.60 7.65 ascon128av12

10.43 10.46 10.49 T:xoodyakround3

11.01 11.03 11.05 ascon80pqv12

11.07 11.08 11.09 ascon128v12

14.83 14.85 14.87 ascon128abi32v12

16.75 16.87 17.05 T:schwaemm256128v2

19.20 19.30 19.32 T:grain128aeadv2

20.38 20.53 20.71 T:schwaemm256256v2

22.14 22.21 22.24 T:schwaemm192192v2

22.45 22.48 22.49 ascon128bi32v12

25.34 25.47 25.58 T:schwaemm128128v2

26.79 26.81 26.83 T:isapa128av20

29.16 29.18 29.23 romulusn

29.79 29.80 29.81 T:isapk128av20

39.73 39.77 39.81 romulusm

44.52 44.58 44.62 T:giftcofb128v1

48.68 48.72 48.74 T:isapa128v20

57.90 57.94 57.97 T:tinyjambu128v2

67.51 67.57 67.60 T:tinyjambu192v2

69.13 69.17 69.54 T:tinyjambu256v2

76.11 76.14 76.22 romulust

93.07 93.16 93.29 T:elephant200v2

128.50 128.81 128.90 T:isapk128v20

179.79 179.97 180.24 T:isapxv20

5456.67 5465.39 5468.65 T:elephant176v2

6272.19 6276.47 6277.37 T:elephant160v2

Cycles/byte for 1536+1536 decrypt

25% 50% 75% aead

0.80 0.83 0.84 T:aes128gcmv1

0.86 0.89 0.93 T:aes256gcmv1

1.07 1.07 1.08 aes256gcmv1

2.93 2.96 3.03 aes128gcmv1

7.56 7.60 7.63 ascon128av12

10.36 10.39 10.40 T:xoodyakround3

10.97 10.98 10.99 ascon80pqv12

11.02 11.03 11.04 ascon128v12

14.91 14.92 14.95 ascon128abi32v12

16.79 16.84 17.03 T:schwaemm256128v2

19.40 19.42 19.46 T:grain128aeadv2

20.42 20.63 20.74 T:schwaemm256256v2

22.08 22.17 22.30 T:schwaemm192192v2

22.40 22.45 22.48 ascon128bi32v12

25.39 25.63 25.67 T:schwaemm128128v2

29.37 29.42 29.44 romulusn

29.79 29.80 29.81 T:isapk128av20

30.27 30.30 30.34 T:isapa128av20

39.87 39.95 39.97 romulusm

44.61 44.65 44.70 T:giftcofb128v1

48.69 48.73 48.76 T:isapa128v20

58.04 58.06 58.09 T:tinyjambu128v2

67.56 67.79 67.83 T:tinyjambu192v2

69.28 69.34 69.45 T:tinyjambu256v2

76.14 76.23 76.34 romulust

92.69 93.03 93.38 T:elephant200v2

128.50 128.60 128.79 T:isapk128v20

179.64 180.16 181.08 T:isapxv20

5455.03 5460.35 5470.71 T:elephant176v2

6272.41 6273.84 6275.81 T:elephant160v2

Cycles/byte for 1536+1536 forgery

25% 50% 75% aead

0.82 0.83 0.87 T:aes128gcmv1

0.86 0.88 0.94 T:aes256gcmv1

1.07 1.07 1.07 aes256gcmv1

1.66 1.68 1.71 aes128gcmv1

7.56 7.58 7.63 ascon128av12

10.42 10.43 10.46 T:xoodyakround3

10.95 10.97 10.99 ascon80pqv12

11.03 11.03 11.05 ascon128v12

14.89 14.91 14.92 ascon128abi32v12

16.71 16.81 17.10 T:schwaemm256128v2

19.43 19.46 19.48 T:grain128aeadv2

20.30 20.41 20.53 T:schwaemm256256v2

22.18 22.24 22.29 T:schwaemm192192v2

22.40 22.43 22.45 ascon128bi32v12

23.17 23.19 23.20 T:isapk128av20

23.72 23.74 23.75 T:isapa128av20

25.27 25.35 25.52 T:schwaemm128128v2

29.35 29.37 29.41 romulusn

29.73 29.75 29.78 T:isapa128v20

39.96 40.02 40.05 romulusm

39.99 40.04 40.14 romulust

44.64 44.69 44.75 T:giftcofb128v1

58.00 58.06 58.08 T:tinyjambu128v2

67.42 67.52 67.58 T:tinyjambu192v2

69.22 69.38 69.57 T:tinyjambu256v2

85.40 85.51 85.76 T:isapk128v20

92.66 93.14 94.06 T:elephant200v2

117.51 117.96 118.31 T:isapxv20

5455.40 5462.91 5468.55 T:elephant176v2

6272.15 6274.14 6278.60 T:elephant160v2

Cycles/byte for 64+64 encrypt

25% 50% 75% aead

5.84 5.95 6.29 aes128gcmv1

6.66 6.71 6.77 aes256gcmv1

10.98 11.20 11.42 T:aes128gcmv1

11.44 11.50 11.84 ascon128av12

11.52 11.66 12.05 T:aes256gcmv1

14.49 14.59 14.72 ascon128v12

14.48 14.67 14.80 ascon80pqv12

14.96 15.07 16.02 T:xoodyakround3

22.23 22.34 22.91 ascon128abi32v12

27.45 27.63 28.05 T:grain128aeadv2

27.32 27.95 28.86 T:schwaemm256128v2

29.86 29.94 30.44 ascon128bi32v12

31.41 32.66 33.45 T:schwaemm256256v2

32.88 33.37 34.76 T:schwaemm128128v2

34.59 34.68 34.93 romulusn

35.55 35.96 36.46 T:schwaemm192192v2

46.21 46.56 46.88 romulusm

53.23 53.51 53.85 T:giftcofb128v1

67.38 67.61 67.71 T:tinyjambu128v2

71.16 71.43 71.74 T:isapa128av20

78.35 78.64 79.00 T:tinyjambu192v2

80.25 80.56 80.65 T:tinyjambu256v2

95.37 95.52 95.59 T:isapk128av20

101.89 102.76 103.33 romulust

130.88 131.58 133.57 T:elephant200v2

394.68 395.76 395.95 T:isapa128v20

1347.30 1352.95 1357.06 T:isapk128v20

1772.94 1774.03 1777.02 T:isapxv20

6818.78 6828.05 6844.08 T:elephant176v2

8409.25 8417.09 8439.92 T:elephant160v2

Cycles/byte for 64+64 decrypt

25% 50% 75% aead

6.06 6.10 6.16 aes256gcmv1

7.36? 7.96? 8.42? aes128gcmv1

11.03 11.20 11.43 T:aes128gcmv1

11.50 11.73 12.00 ascon128av12

11.68 11.80 12.02 T:aes256gcmv1

14.36 14.51 14.62 ascon80pqv12

14.49 14.53 15.02 ascon128v12

14.91 15.70 16.07 T:xoodyakround3

22.57 22.84 23.41 ascon128abi32v12

27.79 27.94 28.73 T:grain128aeadv2

27.64 28.33 29.08 T:schwaemm256128v2

30.07 30.17 30.38 ascon128bi32v12

31.55 31.86 32.87 T:schwaemm256256v2

32.94 33.35 34.25 T:schwaemm128128v2

34.80 35.04 35.16 romulusn

35.45 36.05 36.51 T:schwaemm192192v2

46.95 47.27 47.84 romulusm

53.62 53.73 54.14 T:giftcofb128v1

67.48 67.59 67.91 T:tinyjambu128v2

74.14 74.52 74.80 T:isapa128av20

78.38 78.56 78.80 T:tinyjambu192v2

80.20 80.62 80.80 T:tinyjambu256v2

95.24 95.36 95.55 T:isapk128av20

101.54 102.02 103.12 romulust

131.56 132.20 132.87 T:elephant200v2

394.90 395.12 396.06 T:isapa128v20

1348.36 1355.30 1359.50 T:isapk128v20

1772.66 1780.88 1786.60 T:isapxv20

6808.59 6819.07 6826.44 T:elephant176v2

8399.29 8408.23 8419.12 T:elephant160v2

Cycles/byte for 64+64 forgery

25% 50% 75% aead

5.74 5.80 6.04 aes128gcmv1

6.05 6.09 6.12 aes256gcmv1

11.06 11.22 11.32 T:aes128gcmv1

11.40 11.49 11.77 T:aes256gcmv1

11.45 11.66 11.80 ascon128av12

14.38 14.64 14.73 ascon128v12

14.43 14.68 14.82 ascon80pqv12

14.91 15.12 15.88 T:xoodyakround3

22.39 22.55 23.00 ascon128abi32v12

27.03 27.46 28.13 T:schwaemm256128v2

27.84 28.16 28.59 T:grain128aeadv2

30.12 30.19 30.28 ascon128bi32v12

31.66 32.88 33.44 T:schwaemm256256v2

32.77 33.39 33.90 T:schwaemm128128v2

34.89 35.02 35.19 romulusn

35.25 35.98 37.23 T:schwaemm192192v2

46.93 47.29 47.67 romulusm

48.50 48.56 49.02 T:isapa128av20

53.49 53.62 53.93 T:giftcofb128v1

60.08 60.17 60.59 T:isapk128av20

65.44 65.91 66.34 romulust

67.53 67.70 67.91 T:tinyjambu128v2

78.70 78.80 79.02 T:tinyjambu192v2

80.23 80.32 80.46 T:tinyjambu256v2

131.62 131.95 132.44 T:elephant200v2

205.77 206.34 206.59 T:isapa128v20

708.60 713.42 717.61 T:isapk128v20

930.05 932.55 936.08 T:isapxv20

6803.62 6814.09 6831.48 T:elephant176v2

8395.94 8402.55 8410.50 T:elephant160v2

aarch64; A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; `pi4b`, `supercop-20221122`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

7.19 7.19 7.19 ascon128av12

10.49 10.50 10.51 ascon128v12

10.50 10.51 10.51 ascon80pqv12

14.31 14.36 14.36 ascon128abi32v12

20.37 20.38 20.45 ascon128bi32v12

22.05 22.21 22.23 T:xoodyakround3

30.50 30.52 30.53 T:schwaemm256128v2

32.36 32.54 32.80 T:aes256gcmv1

38.99 39.01 39.01 T:isapa128av20

40.49 40.55 40.64 T:schwaemm192192v2

42.38 42.40 42.42 T:giftcofb128v1

43.61 43.64 43.64 T:isapa128v20

45.91 45.91 45.92 T:schwaemm256256v2

48.61 48.67 48.82 T:aes128gcmv1

50.25 50.25 50.25 T:tinyjambu128v2

53.71 53.83 53.85 T:schwaemm128128v2

59.50 59.50 59.50 T:tinyjambu192v2

65.82 65.82 65.85 T:romulusn

67.50 67.51 67.51 T:tinyjambu256v2

98.21 98.33 98.46 T:isapk128av20

113.57 113.60 113.63 romulusn

129.94 129.97 130.07 T:isapk128v20

167.65 170.94 170.97 romulusm

205.04 205.07 205.09 T:elephant200v2

238.34 238.44 238.92 T:isapxv20

336.41 336.49 336.59 romulust

7001.30 7004.36 7007.38 T:elephant160v2

7476.39 7479.83 7481.56 T:elephant176v2

18136.12 18140.92 18146.91 aes256gcmv1

Cycles/byte for long+0 decrypt

25% 50% 75% aead

6.99 7.01 7.01 ascon128av12

10.25 10.25 10.26 ascon128v12

10.50 10.51 10.51 ascon80pqv12

14.06 14.11 14.11 ascon128abi32v12

20.37 20.38 20.39 ascon128bi32v12

21.55 21.59 21.61 T:xoodyakround3

30.49 30.53 30.54 T:schwaemm256128v2

34.25 34.42 34.74 T:aes256gcmv1

39.00 39.01 39.02 T:isapa128av20

40.52 40.53 40.55 T:schwaemm192192v2

42.32 42.34 42.35 T:giftcofb128v1

43.62 43.64 43.66 T:isapa128v20

46.02 46.03 46.06 T:schwaemm256256v2

48.48 48.59 48.70 T:aes128gcmv1

50.24 50.25 50.26 T:tinyjambu128v2

53.71 53.78 53.79 T:schwaemm128128v2

59.25 59.26 59.27 T:tinyjambu192v2

65.29 65.30 65.32 T:romulusn

67.75 67.76 67.77 T:tinyjambu256v2

98.22 98.34 98.46 T:isapk128av20

113.59 113.62 113.83 romulusn

129.95 129.98 130.47 T:isapk128v20

169.48 171.09 171.19 romulusm

205.06 205.12 205.14 T:elephant200v2

238.75 242.38 242.55 T:isapxv20

336.43 336.46 336.52 romulust

6991.16 7002.41 7006.19 T:elephant160v2

7475.74 7479.77 7481.46 T:elephant176v2

18136.85 18145.53 18159.85 aes256gcmv1

Cycles/byte for long+0 forgery

25% 50% 75% aead

7.01 7.01 7.01 ascon128av12

10.26 10.26 10.26 ascon128v12

10.51 10.51 10.51 ascon80pqv12

14.07 14.11 14.11 ascon128abi32v12

20.38 20.38 20.39 ascon128bi32v12

21.65 21.67 21.69 T:xoodyakround3

21.73 21.76 21.78 T:isapa128v20

25.85 25.88 25.91 T:isapa128av20

30.49 30.53 30.53 T:schwaemm256128v2

33.82 34.86 35.51 T:aes256gcmv1

40.51 40.53 40.55 T:schwaemm192192v2

42.34 42.34 42.35 T:giftcofb128v1

46.03 46.03 46.06 T:schwaemm256256v2

48.48 48.58 48.62 T:aes128gcmv1

50.25 50.25 50.25 T:tinyjambu128v2

53.71 53.77 53.78 T:schwaemm128128v2

59.26 59.26 59.28 T:tinyjambu192v2

65.28 65.31 65.33 T:romulusn

66.32 66.52 66.58 T:isapk128av20

67.75 67.76 67.77 T:tinyjambu256v2

82.00 82.04 82.08 T:isapk128v20

113.60 113.64 113.85 romulusn

114.46 114.53 114.72 romulust

138.15 138.22 138.78 T:isapxv20

169.46 171.06 171.17 romulusm

205.05 205.12 205.14 T:elephant200v2

381.32 381.40 385.34 aes256gcmv1

6997.71 7002.23 7006.45 T:elephant160v2

7474.40 7478.64 7481.20 T:elephant176v2

Cycles/byte for long+long encrypt

25% 50% 75% aead

7.02 7.04 7.05 ascon128av12

10.49 10.50 10.51 ascon128v12

10.62 10.63 10.64 ascon80pqv12

14.07 14.08 14.10 ascon128abi32v12

16.89 16.91 16.92 T:xoodyakround3

19.28 19.45 19.54 T:aes256gcmv1

20.37 20.39 20.41 ascon128bi32v12

30.30 30.32 30.34 T:schwaemm256128v2

30.60 30.64 30.67 T:aes128gcmv1

32.43 32.44 32.45 T:isapa128av20

32.75 32.77 32.77 T:isapa128v20

40.30 40.30 40.31 T:schwaemm192192v2

41.49 41.50 41.50 T:tinyjambu128v2

42.41 42.43 42.44 T:giftcofb128v1

45.23 45.24 45.25 T:schwaemm256256v2

46.37 46.38 46.42 T:tinyjambu192v2

50.49 50.50 50.51 T:tinyjambu256v2

53.50 53.57 53.57 T:schwaemm128128v2

57.17 57.18 57.18 T:romulusn

81.36 81.42 81.49 T:isapk128av20

84.71 84.74 84.76 romulusn

104.90 105.32 105.37 T:isapk128v20

111.92 113.68 113.82 romulusm

153.26 153.33 153.35 T:elephant200v2

187.94 188.09 188.35 T:isapxv20

225.55 225.57 225.63 romulust

5246.21 5250.64 5257.52 T:elephant160v2

5583.29 5585.75 5591.19 T:elephant176v2

9260.11 9262.03 9265.64 aes256gcmv1

Cycles/byte for long+long decrypt

25% 50% 75% aead

6.99 7.00 7.01 ascon128av12

10.44 10.44 10.44 ascon128v12

10.50 10.50 10.51 ascon80pqv12

13.93 13.96 13.97 ascon128abi32v12

16.57 16.60 16.64 T:xoodyakround3

20.14 20.33 20.60 T:aes256gcmv1

20.44 20.45 20.45 ascon128bi32v12

30.31 30.33 30.36 T:schwaemm256128v2

30.56 30.59 30.63 T:aes128gcmv1

32.44 32.44 32.45 T:isapa128av20

32.75 32.76 32.77 T:isapa128v20

40.28 40.30 40.32 T:schwaemm192192v2

41.50 41.51 41.55 T:tinyjambu128v2

42.38 42.40 42.45 T:giftcofb128v1

45.29 45.30 45.33 T:schwaemm256256v2

46.25 46.26 46.28 T:tinyjambu192v2

50.63 50.64 50.68 T:tinyjambu256v2

53.46 53.53 53.56 T:schwaemm128128v2

56.90 56.91 56.92 T:romulusn

81.37 81.47 81.60 T:isapk128av20

84.92 84.95 84.97 romulusn

105.30 105.32 105.37 T:isapk128v20

112.93 113.80 113.82 romulusm

153.30 153.37 153.99 T:elephant200v2

190.03 190.06 190.39 T:isapxv20

225.57 225.61 225.64 romulust

5248.74 5250.04 5251.66 T:elephant160v2

5582.57 5585.66 5591.77 T:elephant176v2

9258.49 9261.34 9270.64 aes256gcmv1

Cycles/byte for long+long forgery

25% 50% 75% aead

7.01 7.01 7.01 ascon128av12

10.44 10.44 10.44 ascon128v12

10.51 10.51 10.51 ascon80pqv12

13.95 13.96 13.96 ascon128abi32v12

16.62 16.63 16.65 T:xoodyakround3

20.45 20.45 20.45 ascon128bi32v12

20.12 20.47 20.69 T:aes256gcmv1

21.81 21.82 21.82 T:isapa128v20

25.86 25.87 25.89 T:isapa128av20

30.31 30.33 30.39 T:schwaemm256128v2

30.55 30.59 30.62 T:aes128gcmv1

40.29 40.30 40.32 T:schwaemm192192v2

41.50 41.50 41.56 T:tinyjambu128v2

42.39 42.40 42.45 T:giftcofb128v1

45.30 45.30 45.33 T:schwaemm256256v2

46.25 46.26 46.27 T:tinyjambu192v2

50.62 50.63 50.64 T:tinyjambu256v2

53.53 53.56 53.57 T:schwaemm128128v2

56.90 56.91 56.95 T:romulusn

65.41 65.47 65.54 T:isapk128av20

81.33 81.37 81.45 T:isapk128v20

84.92 84.94 84.95 romulusn

113.04 113.78 113.82 romulusm

114.56 114.57 114.59 romulust

137.96 137.98 138.02 T:isapxv20

153.30 153.36 153.38 T:elephant200v2

381.40 381.49 383.47 aes256gcmv1

5246.03 5249.98 5250.62 T:elephant160v2

5581.78 5585.39 5591.36 T:elephant176v2

Cycles/byte for 0+long encrypt

25% 50% 75% aead

6.01 6.24 6.39 T:aes256gcmv1

6.87 6.88 6.88 ascon128av12

10.49 10.50 10.51 ascon128v12

10.75 10.76 10.76 ascon80pqv12

11.59 11.60 11.61 T:xoodyakround3

12.54 12.60 12.67 T:aes128gcmv1

13.81 13.86 13.86 ascon128abi32v12

20.37 20.38 20.38 ascon128bi32v12

21.87 21.88 21.88 T:isapa128v20

25.88 25.88 25.88 T:isapa128av20

30.13 30.15 30.16 T:schwaemm256128v2

32.75 32.75 32.75 T:tinyjambu128v2

33.25 33.25 33.25 T:tinyjambu192v2

33.50 33.50 33.50 T:tinyjambu256v2

40.06 40.11 40.12 T:schwaemm192192v2

42.45 42.46 42.47 T:giftcofb128v1

44.56 44.56 44.57 T:schwaemm256256v2

48.50 48.51 48.54 T:romulusn

53.35 53.42 53.43 T:schwaemm128128v2

55.92 56.35 56.38 romulusn

56.13 56.43 56.45 romulusm

64.43 64.57 64.70 T:isapk128av20

80.70 80.72 80.76 T:isapk128v20

102.07 102.14 102.17 T:elephant200v2

114.66 114.69 114.70 romulust

137.67 137.73 137.82 T:isapxv20

381.23 381.36 381.72 aes256gcmv1

3493.61 3494.45 3509.53 T:elephant160v2

3688.86 3697.18 3705.77 T:elephant176v2

Cycles/byte for 0+long decrypt

25% 50% 75% aead

6.04 6.30 6.59 T:aes256gcmv1

6.99 7.00 7.01 ascon128av12

10.49 10.51 10.51 ascon80pqv12

10.62 10.63 10.63 ascon128v12

11.57 11.60 11.63 T:xoodyakround3

12.54 12.60 12.67 T:aes128gcmv1

13.80 13.86 13.86 ascon128abi32v12

20.49 20.51 20.51 ascon128bi32v12

21.85 21.88 21.88 T:isapa128v20

25.85 25.88 25.90 T:isapa128av20

30.13 30.15 30.16 T:schwaemm256128v2

32.74 32.75 32.76 T:tinyjambu128v2

33.24 33.25 33.26 T:tinyjambu192v2

33.49 33.50 33.51 T:tinyjambu256v2

40.07 40.12 40.12 T:schwaemm192192v2

42.45 42.46 42.48 T:giftcofb128v1

44.56 44.56 44.57 T:schwaemm256256v2

48.52 48.53 48.55 T:romulusn

53.32 53.35 53.39 T:schwaemm128128v2

56.11 56.14 56.14 romulusn

56.23 56.45 56.46 romulusm

64.44 64.58 64.70 T:isapk128av20

80.68 80.71 80.74 T:isapk128v20

102.14 102.16 102.18 T:elephant200v2

114.63 114.72 114.74 romulust

137.65 137.72 137.78 T:isapxv20

381.30 381.48 381.84 aes256gcmv1

3494.21 3497.58 3509.51 T:elephant160v2

3687.90 3689.03 3705.27 T:elephant176v2

Cycles/byte for 0+long forgery

25% 50% 75% aead

5.75? 6.36? 6.59? T:aes256gcmv1

7.01 7.01 7.01 ascon128av12

10.51 10.51 10.51 ascon80pqv12

10.63 10.63 10.63 ascon128v12

11.58 11.60 11.61 T:xoodyakround3

12.55 12.60 12.67 T:aes128gcmv1

13.82 13.86 13.86 ascon128abi32v12

20.51 20.51 20.51 ascon128bi32v12

21.86 21.88 21.88 T:isapa128v20

25.85 25.88 25.90 T:isapa128av20

30.13 30.15 30.16 T:schwaemm256128v2

32.75 32.75 32.78 T:tinyjambu128v2

33.25 33.25 33.25 T:tinyjambu192v2

33.50 33.50 33.50 T:tinyjambu256v2

40.07 40.11 40.12 T:schwaemm192192v2

42.46 42.46 42.47 T:giftcofb128v1

44.56 44.57 44.57 T:schwaemm256256v2

48.51 48.53 48.72 T:romulusn

53.34 53.37 53.42 T:schwaemm128128v2

56.11 56.13 56.13 romulusn

56.24 56.44 56.45 romulusm

64.45 64.67 64.71 T:isapk128av20

80.70 80.71 80.74 T:isapk128v20

102.16 102.16 102.19 T:elephant200v2

114.64 114.69 114.70 romulust

137.68 137.72 137.74 T:isapxv20

381.42 381.49 381.74 aes256gcmv1

3493.40 3494.53 3511.37 T:elephant160v2

3688.91 3692.67 3704.11 T:elephant176v2

Cycles/byte for 1536+1536 encrypt

25% 50% 75% aead

7.19 7.19 7.21 ascon128av12

10.65 10.65 10.66 ascon128v12

10.77 10.78 10.78 ascon80pqv12

14.43 14.44 14.44 ascon128abi32v12

17.10 17.10 17.10 T:xoodyakround3

20.72 20.73 20.76 ascon128bi32v12

26.63 26.68 26.85 T:aes256gcmv1

31.19 31.20 31.21 T:schwaemm256128v2

32.96 32.98 33.00 T:aes128gcmv1

35.36 35.36 35.37 T:isapa128av20

41.17 41.17 41.19 T:schwaemm192192v2

41.82 41.82 41.83 T:tinyjambu128v2

42.79 42.79 42.80 T:giftcofb128v1

46.40 46.40 46.41 T:schwaemm256256v2

46.72 46.72 46.73 T:tinyjambu192v2

47.82 47.82 47.84 T:isapa128v20

50.86 50.87 50.87 T:tinyjambu256v2

54.23 54.24 54.26 T:schwaemm128128v2

57.89 57.90 57.91 T:romulusn

85.65 85.65 85.65 romulusn

95.35 95.36 95.43 T:isapk128av20

112.67 114.28 114.30 romulusm

156.46 156.50 156.54 T:elephant200v2

185.19 185.20 185.33 T:isapk128v20

228.70 228.71 228.77 romulust

305.38 306.87 307.35 T:isapxv20

5307.98 5310.45 5310.98 T:elephant160v2

5627.46 5628.37 5628.91 T:elephant176v2

9443.83 9452.18 9453.26 aes256gcmv1

Cycles/byte for 1536+1536 decrypt

25% 50% 75% aead

7.17 7.17 7.17 ascon128av12

10.58 10.58 10.58 ascon128v12

10.65 10.65 10.65 ascon80pqv12

14.31 14.33 14.33 ascon128abi32v12

16.79 16.80 16.81 T:xoodyakround3

20.80 20.80 20.80 ascon128bi32v12

29.67 29.74 29.89 T:aes256gcmv1

31.19 31.21 31.22 T:schwaemm256128v2

32.93 32.95 32.98 T:aes128gcmv1

35.40 35.40 35.40 T:isapa128av20

41.17 41.17 41.19 T:schwaemm192192v2

41.82 41.83 41.83 T:tinyjambu128v2

42.76 42.77 42.78 T:giftcofb128v1

46.48 46.48 46.49 T:schwaemm256256v2

46.60 46.60 46.61 T:tinyjambu192v2

47.84 47.84 47.84 T:isapa128v20

50.99 51.00 51.01 T:tinyjambu256v2

54.19 54.23 54.25 T:schwaemm128128v2

57.64 57.64 57.66 T:romulusn

85.39 85.40 85.57 romulusn

95.39 95.42 95.52 T:isapk128av20

113.55 114.40 114.43 romulusm

156.45 156.50 156.58 T:elephant200v2

185.22 185.23 185.37 T:isapk128v20

228.70 228.71 228.72 romulust

305.47 307.36 307.41 T:isapxv20

5307.41 5308.12 5310.85 T:elephant160v2

5627.64 5628.03 5628.93 T:elephant176v2

9442.60 9452.29 9455.11 aes256gcmv1

Cycles/byte for 1536+1536 forgery

25% 50% 75% aead

7.17 7.17 7.17 ascon128av12

10.58 10.58 10.58 ascon128v12

10.65 10.65 10.65 ascon80pqv12

14.30 14.33 14.33 ascon128abi32v12

16.84 16.85 16.89 T:xoodyakround3

20.80 20.80 20.81 ascon128bi32v12

27.49 27.49 27.51 T:isapa128av20

29.48 29.48 29.50 T:isapa128v20

31.18 31.20 31.22 T:schwaemm256128v2

32.92 32.94 32.97 T:aes128gcmv1

41.17 41.17 41.19 T:schwaemm192192v2

41.82 41.82 41.83 T:tinyjambu128v2

42.76 42.77 42.77 T:giftcofb128v1

44.54 44.96 45.22 T:aes256gcmv1

46.47 46.48 46.49 T:schwaemm256256v2

46.60 46.60 46.61 T:tinyjambu192v2

50.99 51.00 51.00 T:tinyjambu256v2

54.20 54.23 54.24 T:schwaemm128128v2

57.62 57.63 57.64 T:romulusn

74.72 74.72 74.80 T:isapk128av20

85.39 85.39 85.46 romulusn

113.64 114.41 114.42 romulusm

117.66 117.66 117.68 romulust

124.26 124.27 124.28 T:isapk128v20

156.44 156.46 156.56 T:elephant200v2

197.99 198.00 198.03 T:isapxv20

567.85 567.92 570.22 aes256gcmv1

5305.28 5310.31 5311.49 T:elephant160v2

5627.91 5628.49 5632.00 T:elephant176v2

Cycles/byte for 64+64 encrypt

25% 50% 75% aead

10.73 10.82 11.17 ascon128av12

13.84 13.95 14.27 ascon128v12

13.96 14.08 14.41 ascon80pqv12

22.30 22.45 22.95 ascon128abi32v12

25.88 25.91 26.51 T:xoodyakround3

28.40 28.40 28.98 ascon128bi32v12

49.16 49.16 49.37 T:tinyjambu128v2

50.51 50.54 50.88 T:schwaemm256128v2

50.98 51.13 51.54 T:giftcofb128v1

54.59 54.59 54.81 T:tinyjambu192v2

59.17 59.17 59.41 T:tinyjambu256v2

66.10 66.20 66.35 T:schwaemm192192v2

69.20 69.23 69.41 T:schwaemm128128v2

72.59 72.59 72.88 T:schwaemm256256v2

73.87 74.08 74.25 T:romulusn

86.55 86.80 88.28 T:aes128gcmv1

99.71 99.71 99.71 romulusn

102.52 102.63 103.23 T:isapa128av20

128.38 128.62 129.07 romulusm

193.80 196.42 198.27 T:aes256gcmv1

219.82 220.85 222.13 T:elephant200v2

300.23 300.34 301.27 romulust

394.04 394.04 394.41 T:isapa128v20

402.77 404.36 405.11 T:isapk128av20

2003.36 2003.55 2012.24 T:isapk128v20

2969.47 2969.59 2971.00 T:isapxv20

6986.88 6987.46 6989.91 T:elephant176v2

7088.11 7088.88 7092.84 T:elephant160v2

13707.49 13708.09 13770.81 aes256gcmv1

Cycles/byte for 64+64 decrypt

25% 50% 75% aead

10.75 10.75 11.20 ascon128av12

13.73 13.84 14.12 ascon128v12

13.88 13.98 14.18 ascon80pqv12

22.45 22.46 23.36 ascon128abi32v12

25.49 25.51 25.88 T:xoodyakround3

28.95 28.95 29.39 ascon128bi32v12

49.23 49.23 49.34 T:tinyjambu128v2

50.45 50.50 50.59 T:schwaemm256128v2

51.10 51.13 51.45 T:giftcofb128v1

54.53 54.55 54.77 T:tinyjambu192v2

59.37 59.40 59.62 T:tinyjambu256v2

66.10 66.13 66.41 T:schwaemm192192v2

69.20 69.23 69.41 T:schwaemm128128v2

73.01 73.02 73.17 T:schwaemm256256v2

73.85 73.91 74.02 T:romulusn

86.25 86.72 87.32 T:aes128gcmv1

99.41 99.41 99.53 romulusn

103.05 103.05 103.33 T:isapa128av20

128.76 129.02 129.16 romulusm

220.00 220.08 220.14 T:elephant200v2

242.15 245.48 248.23 T:aes256gcmv1

300.80 300.99 301.45 romulust

394.47 394.56 394.56 T:isapa128v20

402.72 403.48 404.77 T:isapk128av20

2004.00 2004.02 2004.19 T:isapk128v20

2971.82 2971.89 2972.24 T:isapxv20

6987.05 6987.83 6991.19 T:elephant176v2

7088.25 7088.38 7091.48 T:elephant160v2

13707.69 13707.98 13782.34 aes256gcmv1

Cycles/byte for 64+64 forgery

25% 50% 75% aead

10.74 10.74 10.74 ascon128av12

13.73 13.73 13.84 ascon128v12

13.88 13.88 13.88 ascon80pqv12

22.45 22.45 22.46 ascon128abi32v12

25.59 25.63 25.84 T:xoodyakround3

28.95 28.95 28.95 ascon128bi32v12

49.23 49.23 49.23 T:tinyjambu128v2

50.45 50.48 50.53 T:schwaemm256128v2

51.10 51.12 51.16 T:giftcofb128v1

54.53 54.53 54.53 T:tinyjambu192v2

59.37 59.37 59.46 T:tinyjambu256v2

64.38 64.38 64.79 T:isapa128av20

66.09 66.13 66.41 T:schwaemm192192v2

69.20 69.24 69.41 T:schwaemm128128v2

72.98 73.02 73.02 T:schwaemm256256v2

73.62 73.64 73.78 T:romulusn

86.57 86.95 88.53 T:aes128gcmv1

99.41 99.41 99.41 romulusn

128.76 128.76 129.16 romulusm

188.53 188.76 189.18 romulust

205.68 205.68 205.68 T:isapa128v20

219.88 219.98 221.20 T:elephant200v2

276.59 276.78 278.41 T:isapk128av20

598.45 604.71 608.61 T:aes256gcmv1

1096.38 1096.45 1097.45 T:isapk128v20

1552.59 1552.77 1553.07 T:isapxv20

4854.98 4855.60 4856.09 aes256gcmv1

6986.70 6987.46 6988.85 T:elephant176v2

7087.84 7088.38 7091.29 T:elephant160v2

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; `rome0`, `supercop-20230530`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

0.93 0.94 0.96 T:aes256gcmv1

1.51 1.53 1.55 T:aes128gcmv1

1.66 1.67 1.68 aes256gcmv1

6.40 6.41 6.45 ascon128av12

9.37 9.39 9.40 ascon128v12

9.38 9.42 9.42 ascon80pqv12

11.15 11.20 11.41 ascon128abi32v12

16.94 17.07 17.14 ascon128bi32v12

17.46 17.48 17.56 T:xoodyakround3

19.48 19.52 19.58 T:schwaemm256128v2

23.30 23.36 23.39 T:schwaemm256256v2

25.62 25.73 25.82 T:schwaemm192192v2

27.12 27.24 27.27 T:grain128aeadv2

27.49 27.63 27.89 T:schwaemm128128v2

35.55 35.58 35.61 romulusn

36.39 36.42 36.49 T:isapa128av20

36.55 36.58 36.70 T:isapa128v20

40.47 40.51 40.53 T:giftcofb128v1

57.17 57.23 57.28 romulusm

61.68 61.74 61.77 T:tinyjambu128v2

64.60 64.74 64.82 T:isapk128av20

68.87 68.94 68.96 T:tinyjambu192v2

75.97 75.97 76.07 T:tinyjambu256v2

84.96 85.68 85.80 T:isapk128v20

112.27 112.29 112.30 romulust

148.22 149.85 150.85 T:isapxv20

225.89? 229.65? 272.59? T:elephant200v2

6486.85 6538.41 6550.99 T:elephant176v2

7161.17 7163.66 7166.02 T:elephant160v2

Cycles/byte for long+0 decrypt

25% 50% 75% aead

0.90 0.94 0.96 T:aes256gcmv1

1.60 1.61 1.63 T:aes128gcmv1

1.79 1.79 1.82 aes256gcmv1

6.27 6.30 6.30 ascon128av12

9.50 9.52 9.53 ascon128v12

9.51 9.54 9.54 ascon80pqv12

11.22 11.24 11.26 ascon128abi32v12

16.78 16.91 16.98 ascon128bi32v12

17.33 17.40 17.53 T:xoodyakround3

19.49 19.56 19.66 T:schwaemm256128v2

23.30 23.31 23.38 T:schwaemm256256v2

25.66 25.70 25.81 T:schwaemm192192v2

26.60 27.05 27.60 T:grain128aeadv2

27.46 27.58 27.83 T:schwaemm128128v2

35.41 35.41 35.42 romulusn

36.25 36.31 36.39 T:isapa128v20

36.41 36.45 36.50 T:isapa128av20

40.46 40.54 40.60 T:giftcofb128v1

57.20 57.24 57.31 romulusm

60.13 60.15 60.19 T:tinyjambu128v2

65.25 65.39 65.58 T:isapk128av20

68.67 68.74 68.75 T:tinyjambu192v2

76.03 76.07 76.13 T:tinyjambu256v2

84.82 85.16 85.73 T:isapk128v20

112.27 112.31 112.37 romulust

147.53 150.78 156.82 T:isapxv20

226.19? 229.91? 272.83? T:elephant200v2

6487.05 6547.83 6556.25 T:elephant176v2

7161.10 7164.58 7166.75 T:elephant160v2

Cycles/byte for long+0 forgery

25% 50% 75% aead

0.88 0.92 0.95 T:aes256gcmv1

1.60 1.61 1.62 T:aes128gcmv1

1.79 1.80 1.81 aes256gcmv1

6.28 6.28 6.34 ascon128av12

9.50 9.52 9.53 ascon80pqv12

9.54 9.56 9.56 ascon128v12

11.23 11.25 11.25 ascon128abi32v12

16.79 16.91 16.99 ascon128bi32v12

17.38 17.43 17.63 T:xoodyakround3

18.01 18.09 18.13 T:isapa128v20

19.50 19.59 19.63 T:schwaemm256128v2

23.32 23.33 23.39 T:schwaemm256256v2

24.13 24.17 24.21 T:isapa128av20

25.63 25.71 25.79 T:schwaemm192192v2

26.60 26.75 27.61 T:grain128aeadv2

27.50 27.57 27.77 T:schwaemm128128v2

35.41 35.45 35.49 romulusn

37.46 37.55 37.60 romulust

40.49 40.51 40.55 T:giftcofb128v1

44.47 44.55 44.57 T:isapk128av20

54.53 54.63 54.71 T:isapk128v20

57.06 57.25 57.29 romulusm

60.11 60.12 60.18 T:tinyjambu128v2

68.71 68.74 68.79 T:tinyjambu192v2

76.01 76.08 76.09 T:tinyjambu256v2

86.52 88.67 89.11 T:isapxv20

226.45? 229.94? 272.62? T:elephant200v2

6486.25 6543.73 6554.95 T:elephant176v2

7158.28 7161.23 7163.29 T:elephant160v2

Cycles/byte for long+long encrypt

25% 50% 75% aead

0.67 0.68 0.71 T:aes256gcmv1

1.01 1.01 1.02 T:aes128gcmv1

1.09 1.09 1.10 aes256gcmv1

6.37 6.40 6.43 ascon128av12

9.44 9.45 9.47 ascon80pqv12

9.43 9.47 9.49 ascon128v12

11.05 11.10 11.11 ascon128abi32v12

13.36 13.39 13.43 T:xoodyakround3

16.78 16.86 16.90 ascon128bi32v12

19.34 19.39 19.42 T:schwaemm256128v2

23.21 23.26 23.26 T:schwaemm256256v2

25.63 25.69 25.74 T:schwaemm192192v2

27.07 27.08 27.10 T:grain128aeadv2

27.25 27.33 27.43 T:isapa128v20

27.44 27.56 27.59 T:schwaemm128128v2

28.73 28.77 28.77 romulusn

30.30 30.31 30.32 T:isapa128av20

39.51 39.54 39.60 romulusm

40.40 40.42 40.45 T:giftcofb128v1

51.18 51.22 51.26 T:tinyjambu128v2

54.32 54.33 54.36 T:tinyjambu192v2

54.62 54.64 54.66 T:isapk128av20

57.96 57.98 58.07 T:tinyjambu256v2

69.78 70.18 70.21 T:isapk128v20

74.88 74.90 74.91 romulust

117.56 118.15 118.55 T:isapxv20

168.93? 171.36? 203.13? T:elephant200v2

4845.02 4887.13 4893.75 T:elephant176v2

5369.33 5370.15 5371.62 T:elephant160v2

Cycles/byte for long+long decrypt

25% 50% 75% aead

0.66 0.67 0.70 T:aes256gcmv1

1.05 1.06 1.07 T:aes128gcmv1

1.14 1.16 1.17 aes256gcmv1

6.33 6.34 6.34 ascon128av12

9.51 9.53 9.53 ascon80pqv12

9.52 9.55 9.55 ascon128v12

11.08 11.10 11.11 ascon128abi32v12

13.30 13.35 13.42 T:xoodyakround3

16.69 16.75 16.79 ascon128bi32v12

19.35 19.40 19.48 T:schwaemm256128v2

23.19 23.21 23.21 T:schwaemm256256v2

25.57 25.62 25.67 T:schwaemm192192v2

26.54 26.93 27.23 T:grain128aeadv2

27.21 27.27 27.41 T:isapa128v20

27.46 27.56 27.58 T:schwaemm128128v2

28.65 28.66 28.68 romulusn

30.29 30.32 30.35 T:isapa128av20

39.52 39.58 39.62 romulusm

40.41 40.42 40.46 T:giftcofb128v1

50.42 50.42 50.43 T:tinyjambu128v2

54.19 54.21 54.23 T:tinyjambu192v2

54.93 55.01 55.08 T:isapk128av20

58.07 58.08 58.11 T:tinyjambu256v2

69.76 69.80 70.14 T:isapk128v20

74.88 74.91 74.94 romulust

117.36 118.32 121.83 T:isapxv20

169.07? 171.42? 203.05? T:elephant200v2

4846.42 4886.60 4892.26 T:elephant176v2

5367.41 5369.36 5370.76 T:elephant160v2

Cycles/byte for long+long forgery

25% 50% 75% aead

0.66 0.67 0.69 T:aes256gcmv1

1.05 1.06 1.06 T:aes128gcmv1

1.15 1.16 1.17 aes256gcmv1

6.33 6.36 6.37 ascon128av12

9.52 9.53 9.54 ascon80pqv12

9.53 9.53 9.55 ascon128v12

11.08 11.11 11.11 ascon128abi32v12

13.34 13.36 13.43 T:xoodyakround3

16.70 16.74 16.80 ascon128bi32v12

18.11 18.13 18.22 T:isapa128v20

19.36 19.38 19.44 T:schwaemm256128v2

23.23 23.23 23.24 T:schwaemm256256v2

24.16 24.19 24.21 T:isapa128av20

25.62 25.66 25.72 T:schwaemm192192v2

26.57 26.94 27.27 T:grain128aeadv2

27.48 27.57 27.74 T:schwaemm128128v2

28.65 28.66 28.68 romulusn

37.50 37.52 37.53 romulust

39.56 39.62 39.70 romulusm

40.40 40.42 40.44 T:giftcofb128v1

44.53 44.55 44.56 T:isapk128av20

50.42 50.42 50.43 T:tinyjambu128v2

54.21 54.23 54.24 T:tinyjambu192v2

54.64 54.67 54.70 T:isapk128v20

58.03 58.03 58.06 T:tinyjambu256v2

87.30 87.58 87.80 T:isapxv20

168.94? 171.38? 203.24? T:elephant200v2

4848.99 4889.32 4906.52 T:elephant176v2

5368.52 5370.54 5371.23 T:elephant160v2

Cycles/byte for 0+long encrypt

25% 50% 75% aead

0.40? 0.43? 0.45? T:aes256gcmv1

0.51 0.52 0.54 aes256gcmv1

0.51 0.53 0.54 T:aes128gcmv1

6.32 6.34 6.38 ascon128av12

9.22 9.29 9.35 T:xoodyakround3

9.48 9.49 9.54 ascon80pqv12

9.48 9.50 9.54 ascon128v12

10.92 10.95 10.96 ascon128abi32v12

16.54 16.69 16.72 ascon128bi32v12

18.23 18.25 18.27 T:isapa128v20

19.25 19.30 19.34 T:schwaemm256128v2

21.71 21.87 21.93 romulusm

21.87 21.91 21.98 romulusn

23.10 23.11 23.14 T:schwaemm256256v2

24.14 24.17 24.20 T:isapa128av20

25.43 25.52 25.62 T:schwaemm192192v2

26.89 26.90 26.91 T:grain128aeadv2

27.31 27.36 27.58 T:schwaemm128128v2

37.51 37.52 37.62 romulust

39.69 39.70 39.71 T:tinyjambu192v2

40.02 40.02 40.12 T:tinyjambu256v2

40.24 40.28 40.34 T:giftcofb128v1

40.66 40.66 40.71 T:tinyjambu128v2

44.52 44.59 44.64 T:isapk128av20

54.63 54.74 54.76 T:isapk128v20

86.04 86.37 86.71 T:isapxv20

111.35? 113.25? 134.72? T:elephant200v2

3204.97 3224.88 3233.05 T:elephant176v2

3573.12 3574.43 3576.84 T:elephant160v2

Cycles/byte for 0+long decrypt

25% 50% 75% aead

0.41 0.42 0.45 T:aes256gcmv1

0.51 0.52 0.53 T:aes128gcmv1

0.51 0.53 0.54 aes256gcmv1

6.35 6.36 6.38 ascon128av12

9.21 9.28 9.34 T:xoodyakround3

9.50 9.52 9.58 ascon80pqv12

9.51 9.55 9.57 ascon128v12

10.94 10.96 10.97 ascon128abi32v12

16.46 16.62 16.69 ascon128bi32v12

18.18 18.22 18.28 T:isapa128v20

19.24 19.30 19.37 T:schwaemm256128v2

21.87 21.89 21.96 romulusn

21.80 21.91 21.94 romulusm

23.10 23.11 23.12 T:schwaemm256256v2

24.16 24.18 24.25 T:isapa128av20

25.47 25.53 25.62 T:schwaemm192192v2

26.45 26.82 26.93 T:grain128aeadv2

27.24 27.46 27.61 T:schwaemm128128v2

37.49 37.56 37.58 romulust

39.69 39.70 39.70 T:tinyjambu192v2

40.08 40.13 40.13 T:tinyjambu256v2

40.30 40.33 40.36 T:giftcofb128v1

40.67 40.71 40.71 T:tinyjambu128v2

44.54 44.58 44.63 T:isapk128av20

54.63 54.75 54.78 T:isapk128v20

85.92 86.28 86.74 T:isapxv20

111.35? 113.26? 134.97? T:elephant200v2

3202.62 3223.43 3230.46 T:elephant176v2

3572.46 3574.70 3577.47 T:elephant160v2

Cycles/byte for 0+long forgery

25% 50% 75% aead

0.41 0.43 0.45 T:aes256gcmv1

0.51 0.52 0.53 T:aes128gcmv1

0.51 0.52 0.53 aes256gcmv1

6.33 6.35 6.39 ascon128av12

9.22 9.27 9.36 T:xoodyakround3

9.51 9.53 9.54 ascon80pqv12

9.51 9.53 9.53 ascon128v12

10.96 10.96 10.96 ascon128abi32v12

16.50 16.61 16.69 ascon128bi32v12

18.22 18.25 18.27 T:isapa128v20

19.22 19.28 19.33 T:schwaemm256128v2

21.86 21.90 21.97 romulusm

21.89 21.91 21.94 romulusn

23.11 23.11 23.12 T:schwaemm256256v2

24.14 24.18 24.24 T:isapa128av20

25.43 25.50 25.62 T:schwaemm192192v2

26.46 26.84 26.93 T:grain128aeadv2

27.26 27.33 27.55 T:schwaemm128128v2

37.51 37.52 37.58 romulust

39.70 39.70 39.72 T:tinyjambu192v2

40.01 40.04 40.08 T:tinyjambu256v2

40.30 40.33 40.38 T:giftcofb128v1

40.69 40.71 40.71 T:tinyjambu128v2

44.53 44.58 44.63 T:isapk128av20

54.68 54.74 54.77 T:isapk128v20

86.01 86.34 86.71 T:isapxv20

111.42? 113.25? 134.78? T:elephant200v2

3202.89 3220.73 3230.85 T:elephant176v2

3573.12 3575.54 3577.44 T:elephant160v2

Cycles/byte for 1536+1536 encrypt

25% 50% 75% aead

1.14 1.14 1.15 T:aes128gcmv1

1.22 1.24 1.24 aes256gcmv1

1.23 1.24 1.24 T:aes256gcmv1

6.54 6.56 6.58 ascon128av12

9.58 9.59 9.62 ascon128v12

9.61 9.62 9.64 ascon80pqv12

11.38 11.41 11.41 ascon128abi32v12

13.51 13.53 13.56 T:xoodyakround3

17.18 17.19 17.24 ascon128bi32v12

19.97 19.99 20.04 T:schwaemm256128v2

23.82 23.83 23.85 T:schwaemm256256v2

26.17 26.21 26.26 T:schwaemm192192v2

27.43 27.44 27.45 T:grain128aeadv2

27.87 27.99 28.04 T:schwaemm128128v2

28.99 29.02 29.05 romulusn

33.53 33.54 33.55 T:isapa128av20

39.91 39.93 39.94 romulusm

39.97 40.05 40.15 T:isapa128v20

40.78 40.79 40.81 T:giftcofb128v1

51.63 51.63 51.66 T:tinyjambu128v2

54.75 54.75 54.77 T:tinyjambu192v2

58.41 58.42 58.45 T:tinyjambu256v2

60.70 60.72 60.74 T:isapk128av20

76.04 76.05 76.07 romulust

121.59 121.93 121.99 T:isapk128v20

174.76? 174.90? 204.88? T:elephant200v2

190.86 191.07 191.34 T:isapxv20

4881.98 4924.29 4933.97 T:elephant176v2

5427.95 5429.59 5430.80 T:elephant160v2

Cycles/byte for 1536+1536 decrypt

25% 50% 75% aead

1.19 1.20 1.21 T:aes128gcmv1

1.23 1.24 1.25 T:aes256gcmv1

1.30 1.30 1.31 aes256gcmv1

6.49 6.51 6.52 ascon128av12

9.67 9.67 9.67 ascon80pqv12

9.69 9.69 9.69 ascon128v12

11.40 11.40 11.40 ascon128abi32v12

13.48 13.51 13.54 T:xoodyakround3

17.07 17.09 17.12 ascon128bi32v12

19.95 20.00 20.03 T:schwaemm256128v2

23.80 23.83 23.84 T:schwaemm256256v2

26.19 26.23 26.27 T:schwaemm192192v2

27.03 27.31 27.59 T:grain128aeadv2

27.85 27.97 28.15 T:schwaemm128128v2

28.93 28.94 28.96 romulusn

33.54 33.55 33.57 T:isapa128av20

39.93 39.97 40.09 T:isapa128v20

39.94 39.97 40.04 romulusm

40.80 40.81 40.84 T:giftcofb128v1

50.84 50.85 50.86 T:tinyjambu128v2

54.61 54.66 54.68 T:tinyjambu192v2

58.54 58.55 58.57 T:tinyjambu256v2

61.15 61.22 61.24 T:isapk128av20

76.04 76.06 76.09 romulust

121.64 121.76 121.94 T:isapk128v20

174.84? 174.92? 205.23? T:elephant200v2

190.32 191.36 194.26 T:isapxv20

4885.18 4917.39 4920.00 T:elephant176v2

5428.22 5429.77 5430.54 T:elephant160v2

Cycles/byte for 1536+1536 forgery

25% 50% 75% aead

1.19 1.19 1.19 T:aes128gcmv1

1.23 1.25 1.26 T:aes256gcmv1

1.30 1.30 1.31 aes256gcmv1

6.48 6.50 6.50 ascon128av12

9.67 9.67 9.69 ascon80pqv12

9.69 9.69 9.69 ascon128v12

11.40 11.40 11.45 ascon128abi32v12

13.50 13.53 13.58 T:xoodyakround3

17.07 17.10 17.11 ascon128bi32v12

19.98 20.03 20.05 T:schwaemm256128v2

23.80 23.83 23.85 T:schwaemm256256v2

24.62 24.64 24.72 T:isapa128v20

25.98 25.99 26.01 T:isapa128av20

26.16 26.22 26.25 T:schwaemm192192v2

27.05 27.41 27.58 T:grain128aeadv2

27.82 27.93 27.96 T:schwaemm128128v2

28.95 28.95 28.95 romulusn

38.62 38.63 38.65 romulust

39.99 40.05 40.06 romulusm

40.80 40.83 40.83 T:giftcofb128v1

48.13 48.13 48.15 T:isapk128av20

50.85 50.86 50.86 T:tinyjambu128v2

54.62 54.64 54.65 T:tinyjambu192v2

58.49 58.49 58.51 T:tinyjambu256v2

81.13 81.15 81.20 T:isapk128v20

124.84 124.99 125.18 T:isapxv20

174.78? 174.91? 204.89? T:elephant200v2

4885.45 4920.83 4924.56 T:elephant176v2

5428.14 5429.74 5430.40 T:elephant160v2

Cycles/byte for 64+64 encrypt

25% 50% 75% aead

7.05 7.06 7.11 T:aes128gcmv1

7.54 7.71 8.19 aes256gcmv1

10.53 10.61 10.80 ascon128av12

12.68 12.91 13.39 ascon128v12

12.98 12.98 13.34 ascon80pqv12

14.23 14.55 15.14 T:aes256gcmv1

17.93 18.21 18.55 ascon128abi32v12

19.70 19.95 20.05 T:xoodyakround3

24.29 24.36 26.23 ascon128bi32v12

32.74 32.99 33.52 T:schwaemm256128v2

34.95 35.14 35.23 romulusn

35.41 35.73 36.05 T:grain128aeadv2

35.77 36.20 36.77 T:schwaemm128128v2

37.92 38.03 38.11 T:schwaemm256256v2

42.35 42.90 43.32 T:schwaemm192192v2

47.05 47.25 47.47 romulusm

49.36 49.45 49.80 T:giftcofb128v1

60.80 61.17 61.45 T:tinyjambu128v2

64.26 64.49 64.64 T:tinyjambu192v2

68.15 68.49 68.78 T:tinyjambu256v2

101.98 102.12 102.26 romulust

106.87 107.07 107.80 T:isapa128av20

189.75 189.95 190.20 T:isapk128av20

245.91? 246.20? 285.42? T:elephant200v2

331.00 331.19 331.26 T:isapa128v20

1298.48 1298.56 1298.72 T:isapk128v20

1843.38 1854.50 1856.82 T:isapxv20

6062.55 6114.63 6117.61 T:elephant176v2

7260.38 7263.72 7267.91 T:elephant160v2

Cycles/byte for 64+64 decrypt

25% 50% 75% aead

7.46 7.52 7.56 T:aes128gcmv1

7.51 7.66 7.92 aes256gcmv1

10.72 10.80 10.96 ascon128av12

12.94 13.01 13.32 ascon80pqv12

13.07 13.07 13.43 ascon128v12

14.37 14.55 14.89 T:aes256gcmv1

17.98 18.27 18.75 ascon128abi32v12

19.65 20.06 20.49 T:xoodyakround3

23.72 24.44 26.20 ascon128bi32v12

33.04 33.29 33.52 T:schwaemm256128v2

35.27 35.55 35.55 romulusn

35.41 35.82 36.10 T:grain128aeadv2

36.15 36.48 36.98 T:schwaemm128128v2

38.09 38.12 38.17 T:schwaemm256256v2

42.17 42.34 42.70 T:schwaemm192192v2

48.35 48.42 48.76 romulusm

49.56 49.72 50.00 T:giftcofb128v1

60.59 60.95 60.96 T:tinyjambu128v2

64.05 64.12 64.30 T:tinyjambu192v2

68.30 68.30 68.32 T:tinyjambu256v2

101.88 102.13 103.00 romulust

106.72 107.01 107.29 T:isapa128av20

192.22 192.70 193.25 T:isapk128av20

245.88? 246.03? 284.87? T:elephant200v2

329.29 331.23 331.87 T:isapa128v20

1298.82 1299.16 1299.72 T:isapk128v20

1852.60 1858.65 1859.06 T:isapxv20

6060.32 6108.76 6117.11 T:elephant176v2

7260.60 7262.27 7267.62 T:elephant160v2

Cycles/byte for 64+64 forgery

25% 50% 75% aead

7.47 7.48 7.50 T:aes128gcmv1

7.51 7.51 7.80 aes256gcmv1

10.61 10.69 10.77 ascon128av12

13.01 13.04 13.25 ascon80pqv12

13.05 13.06 13.22 ascon128v12

14.56 14.62 14.74 T:aes256gcmv1

18.01 18.01 18.64 ascon128abi32v12

19.61 20.27 20.47 T:xoodyakround3

23.86 24.80 25.57 ascon128bi32v12

33.05 33.09 33.24 T:schwaemm256128v2

35.23 35.24 35.38 romulusn

35.34 35.84 35.96 T:grain128aeadv2

36.04 36.15 36.57 T:schwaemm128128v2

38.02 38.03 38.09 T:schwaemm256256v2

42.15 42.23 42.78 T:schwaemm192192v2

48.44 48.48 48.48 romulusm

49.88 50.01 50.17 T:giftcofb128v1

60.60 60.60 60.70 T:tinyjambu128v2

63.69 63.86 64.30 romulust

64.18 64.26 64.29 T:tinyjambu192v2

66.66 66.99 67.09 T:isapa128av20

68.29 68.29 68.29 T:tinyjambu256v2

121.46 122.02 122.50 T:isapk128av20

172.26 173.34 173.34 T:isapa128v20

245.69? 245.88? 285.43? T:elephant200v2

679.14 679.38 679.69 T:isapk128v20

969.56 972.30 973.22 T:isapxv20

6066.55 6107.92 6117.02 T:elephant176v2

7260.12 7262.77 7267.91 T:elephant160v2

amd64; CometLake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; `comet`, `supercop-20230530`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

0.61? 0.67? 0.68? T:aes128gcmv1

0.88 0.91 0.93 T:aes256gcmv1

1.64 1.65 1.65 aes256gcmv1

4.62 4.66 4.72 aes128gcmv1

7.50 7.52 7.56 ascon128av12

11.02 11.05 11.08 ascon128v12

11.03 11.08 11.10 ascon80pqv12

14.05 14.09 14.15 ascon128abi32v12

19.29 19.36 19.59 T:schwaemm256128v2

20.48 20.50 20.53 T:xoodyakround3

21.27 21.29 21.34 ascon128bi32v12

23.13 23.18 23.42 T:schwaemm256256v2

25.02 25.05 25.13 T:grain128aeadv2

25.85 25.91 25.99 T:schwaemm192192v2

27.26 27.61 27.70 T:schwaemm128128v2

38.50 38.53 38.55 romulusn

39.66 39.77 39.82 T:isapa128av20

41.18 41.22 41.28 T:giftcofb128v1

45.37 45.82 45.96 T:isapa128v20

60.56 60.64 60.87 T:tinyjambu128v2

61.96 62.03 62.08 romulusm

70.01 70.12 70.22 T:isapk128av20

72.16 72.21 72.28 T:tinyjambu192v2

81.55 81.57 81.61 T:tinyjambu256v2

92.74 93.21 93.33 T:isapk128v20

127.24 127.30 127.34 romulust

184.22 184.33 184.58 T:elephant200v2

191.75 192.61 193.20 T:isapxv20

8462.88 8465.07 8466.19 T:elephant160v2

8483.94 8484.89 8488.57 T:elephant176v2

Cycles/byte for long+0 decrypt

25% 50% 75% aead

0.60? 0.63? 0.68? T:aes128gcmv1

0.84 0.87 0.92 T:aes256gcmv1

1.61 1.62 1.63 aes256gcmv1

4.62 4.66 4.71 aes128gcmv1

7.36 7.38 7.41 ascon128av12

10.69 10.71 10.73 ascon128v12

11.02 11.05 11.07 ascon80pqv12

14.19 14.21 14.26 ascon128abi32v12

19.31 19.42 19.54 T:schwaemm256128v2

20.11 20.17 20.25 T:xoodyakround3

21.38 21.56 21.61 ascon128bi32v12

23.10 23.25 24.34 T:schwaemm256256v2

25.51 25.55 25.62 T:grain128aeadv2

25.77 25.86 26.00 T:schwaemm192192v2

27.29 27.67 27.72 T:schwaemm128128v2

38.58 38.60 38.63 romulusn

39.60 39.67 39.79 T:isapa128av20

41.24 41.30 41.32 T:giftcofb128v1

45.26 45.46 45.86 T:isapa128v20

60.53 60.62 60.98 T:tinyjambu128v2

62.03 62.06 62.13 romulusm

70.01 70.12 70.20 T:isapk128av20

72.16 72.22 72.27 T:tinyjambu192v2

81.82 81.83 81.87 T:tinyjambu256v2

91.47 93.08 93.22 T:isapk128v20

127.24 127.30 127.47 romulust

184.32 184.39 184.56 T:elephant200v2

191.41 192.17 193.34 T:isapxv20

8462.73 8463.26 8465.39 T:elephant160v2

8483.35 8487.65 8488.55 T:elephant176v2

Cycles/byte for long+0 forgery

25% 50% 75% aead

0.62 0.64 0.66 T:aes128gcmv1

0.85 0.90 0.92 T:aes256gcmv1

1.61 1.62 1.63 aes256gcmv1

1.62 1.66 1.68 aes128gcmv1

7.33 7.38 7.39 ascon128av12

10.69 10.72 10.75 ascon128v12

11.02 11.05 11.08 ascon80pqv12

14.19 14.22 14.24 ascon128abi32v12

19.31 19.38 19.55 T:schwaemm256128v2

20.20 20.26 20.33 T:xoodyakround3

21.34 21.37 21.59 ascon128bi32v12

22.38 22.60 22.96 T:isapa128v20

23.10 23.27 24.34 T:schwaemm256256v2

25.53 25.54 25.63 T:grain128aeadv2

25.83 25.92 25.96 T:schwaemm192192v2

26.16 26.20 26.31 T:isapa128av20

27.30 27.63 27.71 T:schwaemm128128v2

38.56 38.59 38.63 romulusn

41.26 41.31 41.34 T:giftcofb128v1

43.45 43.49 43.55 romulust

46.67 46.75 46.81 T:isapk128av20

56.87 58.08 58.26 T:isapk128v20

60.49 60.55 60.91 T:tinyjambu128v2

62.01 62.08 62.12 romulusm

72.19 72.24 72.29 T:tinyjambu192v2

81.82 81.84 81.87 T:tinyjambu256v2

112.31 112.60 113.05 T:isapxv20

184.31 184.39 184.50 T:elephant200v2

8463.02 8463.62 8465.52 T:elephant160v2

8456.44 8483.56 8488.17 T:elephant176v2

Cycles/byte for long+long encrypt

25% 50% 75% aead

0.49 0.51 0.52 T:aes128gcmv1

0.60 0.61 0.63 T:aes256gcmv1

1.02 1.03 1.03 aes256gcmv1

3.13 3.14 3.17 aes128gcmv1

7.49 7.52 7.55 ascon128av12

11.00 11.02 11.05 ascon128v12

11.01 11.02 11.06 ascon80pqv12

14.22 14.26 14.28 ascon128abi32v12

15.13 15.14 15.16 T:xoodyakround3

19.39 19.44 19.46 T:schwaemm256128v2

21.40 21.41 21.44 ascon128bi32v12

23.01 23.05 23.18 T:schwaemm256256v2

24.90 24.93 25.04 T:grain128aeadv2

25.69 25.75 25.80 T:schwaemm192192v2

27.41 27.46 27.51 T:schwaemm128128v2

30.98 31.02 31.05 romulusn

32.68 32.75 32.98 T:isapa128av20

34.11 34.24 34.62 T:isapa128v20

41.30 41.32 41.35 T:giftcofb128v1

42.75 42.79 42.81 romulusm

48.45 48.50 48.53 T:tinyjambu128v2

56.57 56.62 56.67 T:tinyjambu192v2

57.86 57.92 57.97 T:isapk128av20

61.80 61.81 61.82 T:tinyjambu256v2

75.63 75.72 75.76 T:isapk128v20

85.20 85.24 85.31 romulust

136.23 137.35 137.41 T:elephant200v2

153.21 153.57 153.94 T:isapxv20

6336.71 6339.09 6339.82 T:elephant176v2

6346.60 6347.04 6348.78 T:elephant160v2

Cycles/byte for long+long decrypt

25% 50% 75% aead

0.48 0.50 0.53 T:aes128gcmv1

0.59 0.59 0.63 T:aes256gcmv1

1.00 1.02 1.03 aes256gcmv1

3.14 3.16 3.18 aes128gcmv1

7.44 7.45 7.47 ascon128av12

10.84 10.87 10.91 ascon128v12

10.98 11.02 11.04 ascon80pqv12

14.30 14.33 14.34 ascon128abi32v12

14.93 14.95 14.97 T:xoodyakround3

19.41 19.43 19.45 T:schwaemm256128v2

21.26 21.30 21.35 ascon128bi32v12

22.96 23.03 23.80 T:schwaemm256256v2

25.19 25.23 25.28 T:grain128aeadv2

25.65 25.73 25.78 T:schwaemm192192v2

27.43 27.50 27.54 T:schwaemm128128v2

31.03 31.05 31.09 romulusn

32.72 32.77 32.98 T:isapa128av20

34.01 34.20 34.54 T:isapa128v20

41.33 41.36 41.40 T:giftcofb128v1

42.79 42.83 42.85 romulusm

48.46 48.50 48.53 T:tinyjambu128v2

56.61 56.66 56.71 T:tinyjambu192v2

57.87 57.92 57.97 T:isapk128av20

61.92 61.94 61.96 T:tinyjambu256v2

75.55 75.64 75.68 T:isapk128v20

85.22 85.26 85.29 romulust

136.22 137.23 137.36 T:elephant200v2

153.07 153.48 153.97 T:isapxv20

6336.65 6337.14 6339.21 T:elephant176v2

6346.91 6347.27 6348.91 T:elephant160v2

Cycles/byte for long+long forgery

25% 50% 75% aead

0.48 0.49 0.53 T:aes128gcmv1

0.59 0.59 0.63 T:aes256gcmv1

1.01 1.02 1.02 aes256gcmv1

1.64 1.65 1.67 aes128gcmv1

7.42 7.44 7.46 ascon128av12

10.84 10.86 10.88 ascon128v12

11.00 11.02 11.03 ascon80pqv12

14.31 14.33 14.35 ascon128abi32v12

14.97 15.00 15.02 T:xoodyakround3

19.39 19.42 19.46 T:schwaemm256128v2

21.25 21.30 21.33 ascon128bi32v12

22.55 22.60 22.66 T:isapa128v20

22.96 23.07 23.82 T:schwaemm256256v2

25.20 25.23 25.27 T:grain128aeadv2

25.58 25.64 25.71 T:schwaemm192192v2

26.01 26.07 26.27 T:isapa128av20

27.43 27.46 27.50 T:schwaemm128128v2

31.03 31.06 31.09 romulusn

41.32 41.35 41.38 T:giftcofb128v1

42.79 42.82 42.86 romulusm

43.31 43.35 43.39 romulust

46.25 46.28 46.31 T:isapk128av20

48.47 48.55 48.61 T:tinyjambu128v2

56.62 56.66 56.70 T:tinyjambu192v2

58.06 58.13 58.19 T:isapk128v20

61.93 61.94 61.95 T:tinyjambu256v2

113.42 113.65 113.81 T:isapxv20

136.18 136.29 137.34 T:elephant200v2

6338.11 6339.30 6339.79 T:elephant176v2

6346.79 6347.45 6349.01 T:elephant160v2

Cycles/byte for 0+long encrypt

25% 50% 75% aead

0.31 0.31 0.33 T:aes256gcmv1

0.30 0.31 0.33 T:aes128gcmv1

0.39 0.41 0.42 aes256gcmv1

1.57 1.59 1.61 aes128gcmv1

7.46 7.48 7.52 ascon128av12

9.73 9.78 9.81 T:xoodyakround3

10.96 10.97 10.99 ascon128v12

10.96 10.98 11.01 ascon80pqv12

14.14 14.18 14.20 ascon128abi32v12

19.05 19.31 19.37 T:schwaemm256128v2

21.48 21.52 21.53 ascon128bi32v12

22.57 22.68 22.75 T:isapa128v20

22.91 22.96 23.04 T:schwaemm256256v2

23.48 23.52 23.55 romulusn

23.52 23.56 23.59 romulusm

24.75 24.80 24.91 T:grain128aeadv2

25.29 25.35 25.54 T:schwaemm192192v2

26.29 26.33 26.37 T:isapa128av20

27.19 27.26 27.33 T:schwaemm128128v2

36.42 36.47 36.60 T:tinyjambu128v2

41.03 41.08 41.13 T:tinyjambu192v2

41.35 41.39 41.42 T:giftcofb128v1

42.02 42.05 42.06 T:tinyjambu256v2

43.17 43.22 43.27 romulust

45.75 45.89 46.06 T:isapk128av20

58.15 58.23 58.38 T:isapk128v20

89.94 90.64 90.82 T:elephant200v2

114.42 114.51 114.90 T:isapxv20

4188.14 4192.40 4192.99 T:elephant176v2

4229.38 4230.09 4231.82 T:elephant160v2

Cycles/byte for 0+long decrypt

25% 50% 75% aead

0.31 0.32 0.33 T:aes128gcmv1

0.31? 0.32? 0.41? T:aes256gcmv1

0.40 0.42 0.42 aes256gcmv1

1.58 1.59 1.60 aes128gcmv1

7.49 7.51 7.53 ascon128av12

9.78 9.82 9.86 T:xoodyakround3

10.94 10.96 10.99 ascon80pqv12

10.94 10.97 10.99 ascon128v12

14.15 14.18 14.21 ascon128abi32v12

19.14 19.21 19.24 T:schwaemm256128v2

21.13 21.19 21.24 ascon128bi32v12

22.54 22.64 22.74 T:isapa128v20

22.82 22.98 23.18 T:schwaemm256256v2

23.48 23.52 23.56 romulusn

23.53 23.56 23.61 romulusm

24.76 24.79 24.88 T:grain128aeadv2

25.30 25.42 25.51 T:schwaemm192192v2

26.26 26.33 26.36 T:isapa128av20

27.22 27.27 27.30 T:schwaemm128128v2

36.38 36.42 36.60 T:tinyjambu128v2

41.02 41.07 41.10 T:tinyjambu192v2

41.34 41.38 41.43 T:giftcofb128v1

42.03 42.04 42.05 T:tinyjambu256v2

43.13 43.21 43.25 romulust

45.87 45.91 45.99 T:isapk128av20

58.19 58.27 58.36 T:isapk128v20

89.89 90.01 90.70 T:elephant200v2

114.19 114.50 114.73 T:isapxv20

4191.06 4192.63 4192.90 T:elephant176v2

4229.34 4229.68 4232.40 T:elephant160v2

Cycles/byte for 0+long forgery

25% 50% 75% aead

0.27? 0.31? 0.32? T:aes128gcmv1

0.31? 0.33? 0.40? T:aes256gcmv1

0.41 0.42 0.42 aes256gcmv1

1.56 1.58 1.59 aes128gcmv1

7.48 7.50 7.53 ascon128av12

9.82 9.85 9.89 T:xoodyakround3

10.93 10.95 10.99 ascon80pqv12

10.95 10.98 11.00 ascon128v12

14.17 14.18 14.23 ascon128abi32v12

19.05 19.19 19.28 T:schwaemm256128v2

21.15 21.17 21.24 ascon128bi32v12

22.49 22.59 22.74 T:isapa128v20

22.89 22.98 23.24 T:schwaemm256256v2

23.48 23.51 23.55 romulusn

23.53 23.57 23.60 romulusm

24.77 24.79 24.87 T:grain128aeadv2

25.36 25.44 25.51 T:schwaemm192192v2

26.26 26.34 26.36 T:isapa128av20

27.17 27.27 27.31 T:schwaemm128128v2

36.40 36.47 36.60 T:tinyjambu128v2

41.03 41.06 41.11 T:tinyjambu192v2

41.37 41.41 41.46 T:giftcofb128v1

42.04 42.04 42.06 T:tinyjambu256v2

43.16 43.21 43.25 romulust

45.84 45.91 45.96 T:isapk128av20

58.16 58.27 58.38 T:isapk128v20

89.84 89.94 90.78 T:elephant200v2

114.27 114.71 114.85 T:isapxv20

4191.19 4192.46 4193.00 T:elephant176v2

4229.37 4229.91 4232.24 T:elephant160v2

Cycles/byte for 1536+1536 encrypt

25% 50% 75% aead

0.96 0.97 1.00 T:aes128gcmv1

1.10 1.11 1.14 T:aes256gcmv1

1.21 1.21 1.22 aes256gcmv1

3.28 3.30 3.34 aes128gcmv1

7.70 7.72 7.73 ascon128av12

11.19 11.21 11.23 ascon128v12

11.20 11.21 11.22 ascon80pqv12

14.51 14.59 14.61 ascon128abi32v12

15.24 15.25 15.27 T:xoodyakround3

20.00 20.02 20.05 T:schwaemm256128v2

21.72 21.74 21.77 ascon128bi32v12

23.65 23.71 23.80 T:schwaemm256256v2

25.30 25.32 25.41 T:grain128aeadv2

26.24 26.26 26.29 T:schwaemm192192v2

27.81 27.89 27.92 T:schwaemm128128v2

31.43 31.45 31.46 romulusn

36.08 36.11 36.14 T:isapa128av20

41.73 41.75 41.77 T:giftcofb128v1

43.22 43.24 43.28 romulusm

48.87 48.91 48.94 T:tinyjambu128v2

49.75 49.83 49.98 T:isapa128v20

57.08 57.10 57.12 T:tinyjambu192v2

62.27 62.28 62.30 T:tinyjambu256v2

65.19 65.23 65.28 T:isapk128av20

86.57 86.59 86.63 romulust

130.65 130.69 130.78 T:isapk128v20

139.30 140.24 140.29 T:elephant200v2

250.44 250.89 250.98 T:isapxv20

6366.26 6386.41 6387.60 T:elephant176v2

6418.51 6418.78 6420.39 T:elephant160v2

Cycles/byte for 1536+1536 decrypt

25% 50% 75% aead

0.97 0.98 1.00 T:aes128gcmv1

1.08 1.10 1.11 T:aes256gcmv1

1.21 1.21 1.22 aes256gcmv1

3.34 3.36 3.37 aes128gcmv1

7.62 7.63 7.64 ascon128av12

11.02 11.04 11.06 ascon128v12

11.17 11.19 11.21 ascon80pqv12

14.58 14.67 14.69 ascon128abi32v12

15.09 15.12 15.16 T:xoodyakround3

19.96 20.01 20.03 T:schwaemm256128v2

21.62 21.67 21.74 ascon128bi32v12

23.66 23.70 24.41 T:schwaemm256256v2

25.57 25.60 25.62 T:grain128aeadv2

26.18 26.22 26.28 T:schwaemm192192v2

27.83 27.85 27.88 T:schwaemm128128v2

31.46 31.49 31.51 romulusn

36.06 36.12 36.18 T:isapa128av20

41.76 41.79 41.81 T:giftcofb128v1

43.33 43.34 43.38 romulusm

48.86 48.89 48.90 T:tinyjambu128v2

49.78 49.86 49.95 T:isapa128v20

57.07 57.12 57.13 T:tinyjambu192v2

62.40 62.42 62.43 T:tinyjambu256v2

65.23 65.24 65.26 T:isapk128av20

86.58 86.61 86.65 romulust

130.64 130.67 130.74 T:isapk128v20

139.48 140.22 140.28 T:elephant200v2

250.36 250.44 250.91 T:isapxv20

6366.40 6386.20 6387.65 T:elephant176v2

6418.42 6418.75 6420.41 T:elephant160v2

Cycles/byte for 1536+1536 forgery

25% 50% 75% aead

0.96 0.98 1.00 T:aes128gcmv1

1.10 1.10 1.14 T:aes256gcmv1

1.21 1.21 1.21 aes256gcmv1

1.85 1.86 1.87 aes128gcmv1

7.61 7.62 7.65 ascon128av12

11.02 11.03 11.04 ascon128v12

11.19 11.20 11.21 ascon80pqv12

14.58 14.65 14.69 ascon128abi32v12

15.14 15.14 15.18 T:xoodyakround3

19.94 20.04 20.08 T:schwaemm256128v2

21.61 21.64 21.71 ascon128bi32v12

23.69 23.72 24.38 T:schwaemm256256v2

25.59 25.61 25.62 T:grain128aeadv2

26.12 26.20 26.24 T:schwaemm192192v2

27.84 27.87 27.92 T:schwaemm128128v2

27.90 27.93 27.95 T:isapa128av20

30.60 30.64 30.69 T:isapa128v20

31.47 31.48 31.50 romulusn

41.76 41.77 41.81 T:giftcofb128v1

43.32 43.34 43.36 romulusm

44.60 44.62 44.66 romulust

48.87 48.88 48.95 T:tinyjambu128v2

50.53 50.55 50.58 T:isapk128av20

57.09 57.11 57.13 T:tinyjambu192v2

62.41 62.41 62.43 T:tinyjambu256v2

86.35 86.38 86.42 T:isapk128v20

139.31 140.26 140.31 T:elephant200v2

163.25 163.29 163.47 T:isapxv20

6385.93 6386.54 6387.70 T:elephant176v2

6418.57 6419.93 6420.84 T:elephant160v2

Cycles/byte for 64+64 encrypt

25% 50% 75% aead

7.67 7.74 7.84 aes128gcmv1

7.98 8.04 8.10 aes256gcmv1

11.87 12.23 12.53 ascon128av12

12.38 12.48 12.66 T:aes128gcmv1

12.99 13.06 13.43 T:aes256gcmv1

15.06 15.23 15.68 ascon80pqv12

15.12 15.27 15.61 ascon128v12

22.05 22.25 22.46 T:xoodyakround3

22.41 22.54 22.91 ascon128abi32v12

29.01 29.18 29.31 ascon128bi32v12

32.45 32.59 33.05 T:schwaemm256128v2

34.73 34.82 34.88 T:grain128aeadv2

35.72 36.03 36.50 T:schwaemm128128v2

37.73 37.88 37.93 T:schwaemm256256v2

41.02 41.13 41.37 romulusn

42.30 42.77 42.98 T:schwaemm192192v2

50.91 51.12 51.26 T:giftcofb128v1

53.31 53.47 53.89 romulusm

57.80 57.97 58.34 T:tinyjambu128v2

67.33 67.52 67.70 T:tinyjambu192v2

73.13 73.24 73.43 T:tinyjambu256v2

112.74 113.00 113.09 T:isapa128av20

116.96 117.12 117.86 romulust

197.77 198.05 199.46 T:elephant200v2

219.28 219.79 220.25 T:isapk128av20

410.59 411.11 412.38 T:isapa128v20

1377.22 1377.56 1379.02 T:isapk128v20

2454.28 2462.94 2463.27 T:isapxv20

7952.24 7954.17 7956.33 T:elephant176v2

8596.03 8596.77 8598.64 T:elephant160v2

Cycles/byte for 64+64 decrypt

25% 50% 75% aead

7.42 7.47 7.52 aes256gcmv1

8.56 8.63 8.70 aes128gcmv1

11.76 12.05 12.39 ascon128av12

12.23 12.34 12.42 T:aes128gcmv1

12.86 13.01 13.16 T:aes256gcmv1

15.10 15.31 15.47 ascon128v12

15.45 15.59 15.88 ascon80pqv12

21.88 22.50 22.83 T:xoodyakround3

22.69 22.89 23.03 ascon128abi32v12

29.27 29.33 29.53 ascon128bi32v12

32.48 32.64 32.88 T:schwaemm256128v2

34.80 34.91 35.03 T:grain128aeadv2

35.69 35.95 36.25 T:schwaemm128128v2

37.94 38.19 38.41 T:schwaemm256256v2

41.07 41.24 41.46 romulusn

43.20 43.52 44.08 T:schwaemm192192v2

51.24 51.47 51.59 T:giftcofb128v1

54.98 55.12 55.36 romulusm

57.70 58.14 58.44 T:tinyjambu128v2

67.12 67.23 67.48 T:tinyjambu192v2

73.26 73.45 73.55 T:tinyjambu256v2

113.05 113.34 113.74 T:isapa128av20

117.20 117.41 117.70 romulust

198.39 198.90 199.12 T:elephant200v2

219.55 220.03 220.40 T:isapk128av20

410.80 411.99 412.93 T:isapa128v20

1378.31 1378.66 1379.21 T:isapk128v20

2453.57 2455.38 2462.09 T:isapxv20

7952.84 7955.05 7957.26 T:elephant176v2

8595.95 8597.11 8599.80 T:elephant160v2

Cycles/byte for 64+64 forgery

25% 50% 75% aead

6.84 6.86 6.92 aes128gcmv1

7.40 7.42 7.47 aes256gcmv1

11.79 11.95 12.13 ascon128av12

12.20 12.31 12.39 T:aes128gcmv1

12.77 12.88 13.06 T:aes256gcmv1

14.90 14.99 15.26 ascon128v12

15.11 15.24 15.48 ascon80pqv12

21.88 21.94 22.33 T:xoodyakround3

22.70 22.79 22.98 ascon128abi32v12

29.34 29.38 29.69 ascon128bi32v12

32.55 32.73 33.01 T:schwaemm256128v2

34.84 34.88 34.98 T:grain128aeadv2

35.73 35.97 36.13 T:schwaemm128128v2

37.75 38.05 38.26 T:schwaemm256256v2

41.17 41.30 41.55 romulusn

42.77 43.20 43.84 T:schwaemm192192v2

51.32 51.47 51.66 T:giftcofb128v1

55.12 55.29 55.38 romulusm

57.76 57.89 58.04 T:tinyjambu128v2

66.91 67.09 67.32 T:tinyjambu192v2

70.20 70.31 70.66 T:isapa128av20

73.20 73.27 73.41 T:tinyjambu256v2

73.08 73.38 73.56 romulust

137.22 137.55 138.06 T:isapk128av20

198.60 199.64 200.41 T:elephant200v2

214.11 214.70 215.15 T:isapa128v20

721.48 721.86 722.77 T:isapk128v20

1283.03 1283.88 1287.70 T:isapxv20

7952.50 7954.77 7957.30 T:elephant176v2

8595.58 8597.23 8599.47 T:elephant160v2

amd64; CometLake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; `cubi10`, `supercop-20230530`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

0.58? 0.61? 0.72? T:aes128gcmv1

0.84? 0.90? 0.96? T:aes256gcmv1

1.65 1.65 1.66 aes256gcmv1

7.71 7.74 7.77 ascon128av12

10.84 10.89 10.92 ascon80pqv12

10.97 10.99 11.00 ascon128v12

14.30 14.32 14.35 ascon128abi32v12

16.72 16.77 16.82 T:xoodyakround3

19.10 19.17 19.24 T:schwaemm256128v2

21.29 21.32 21.35 T:schwaemm256256v2

21.33 21.36 21.39 ascon128bi32v12

25.13 25.17 25.28 T:grain128aeadv2

25.14 25.29 25.41 T:schwaemm192192v2

27.37 27.43 27.49 T:schwaemm128128v2

38.59 38.61 38.62 romulusn

41.10 41.17 41.20 T:giftcofb128v1

41.23 41.31 41.35 T:isapa128av20

45.46 45.57 45.67 T:isapa128v20

60.16 60.27 60.37 T:tinyjambu128v2

63.10 63.22 63.31 romulusm

68.83 68.94 69.01 T:isapk128av20

72.36 72.42 72.46 T:tinyjambu192v2

78.73 78.88 79.06 T:tinyjambu256v2

91.47 91.59 91.68 T:isapk128v20

124.63 124.67 124.71 romulust

142.28 142.46 142.57 T:elephant200v2

177.04? 178.78? 201.05? T:isapxv20

7512.85 7514.84 7518.67 T:elephant176v2

8185.37 8188.18 8189.43 T:elephant160v2

Cycles/byte for long+0 decrypt

25% 50% 75% aead

0.59? 0.64? 0.69? T:aes128gcmv1

0.80? 0.88? 0.95? T:aes256gcmv1

1.59 1.59 1.60 aes256gcmv1

7.38 7.43 7.52 ascon128av12

10.85 10.87 11.02 ascon128v12

10.95 10.96 10.98 ascon80pqv12

14.15 14.17 14.20 ascon128abi32v12

16.27 16.30 16.34 T:xoodyakround3

19.15 19.20 19.30 T:schwaemm256128v2

21.28 21.31 21.34 T:schwaemm256256v2

21.43 21.45 21.49 ascon128bi32v12

25.18 25.25 25.31 T:schwaemm192192v2

25.58 25.61 25.62 T:grain128aeadv2

27.31 27.36 27.39 T:schwaemm128128v2

38.47 38.49 38.54 romulusn

41.17 41.24 41.28 T:giftcofb128v1

41.22 41.27 41.35 T:isapa128av20

45.49 45.58 45.67 T:isapa128v20

60.22 60.31 60.46 T:tinyjambu128v2

63.21 63.28 63.37 romulusm

68.84 68.97 69.10 T:isapk128av20

72.46 72.58 72.66 T:tinyjambu192v2

78.61 78.62 78.63 T:tinyjambu256v2

91.45 91.60 91.67 T:isapk128v20

124.56 124.70 124.74 romulust

142.35 142.44 142.60 T:elephant200v2

178.43 178.58 179.55 T:isapxv20

7513.22 7514.05 7514.88 T:elephant176v2

8185.65 8189.47 8190.15 T:elephant160v2

Cycles/byte for long+0 forgery

25% 50% 75% aead

0.58? 0.60? 0.65? T:aes128gcmv1

0.81? 0.94? 0.96? T:aes256gcmv1

1.58 1.59 1.59 aes256gcmv1

7.33 7.42 7.48 ascon128av12

10.87 10.96 11.03 ascon128v12

10.93 10.98 11.00 ascon80pqv12

14.13 14.16 14.19 ascon128abi32v12

16.31 16.34 16.37 T:xoodyakround3

19.15 19.23 19.30 T:schwaemm256128v2

21.29 21.31 21.37 T:schwaemm256256v2

21.42 21.44 21.50 ascon128bi32v12

22.62 22.72 22.77 T:isapa128v20

25.19 25.28 25.37 T:schwaemm192192v2

25.58 25.61 25.63 T:grain128aeadv2

27.10 27.17 27.26 T:isapa128av20

27.28 27.35 27.41 T:schwaemm128128v2

38.48 38.50 38.55 romulusn

41.18 41.24 41.29 T:giftcofb128v1

42.45 42.50 42.54 romulust

46.04 46.11 46.21 T:isapk128av20

57.34 57.41 57.47 T:isapk128v20

60.24 60.30 60.37 T:tinyjambu128v2

63.19 63.28 63.39 romulusm

72.48 72.56 72.60 T:tinyjambu192v2

78.59 78.60 78.64 T:tinyjambu256v2

106.83 106.91 107.44 T:isapxv20

142.32 142.45 142.58 T:elephant200v2

7512.18 7514.24 7514.98 T:elephant176v2

8177.02 8188.76 8192.21 T:elephant160v2

Cycles/byte for long+long encrypt

25% 50% 75% aead

0.48 0.51 0.53 T:aes128gcmv1

0.61 0.62 0.64 T:aes256gcmv1

1.01 1.03 1.04 aes256gcmv1

7.47 7.50 7.53 ascon128av12

10.92 10.94 10.97 ascon80pqv12

10.97 10.99 11.01 ascon128v12

12.71 12.74 12.77 T:xoodyakround3

14.30 14.33 14.35 ascon128abi32v12

18.86 18.99 19.07 T:schwaemm256128v2

21.22 21.25 21.27 T:schwaemm256256v2

21.32 21.35 21.37 ascon128bi32v12

25.11 25.17 25.22 T:schwaemm192192v2

25.19 25.23 25.25 T:grain128aeadv2

27.18 27.22 27.26 T:schwaemm128128v2

31.02 31.05 31.33 romulusn

34.22 34.25 34.27 T:isapa128av20

34.20 34.27 34.30 T:isapa128v20

41.38 41.41 41.42 T:giftcofb128v1

43.30 43.35 43.40 romulusm

49.32 49.36 49.38 T:tinyjambu128v2

56.73 56.76 56.79 T:tinyjambu192v2

57.32 57.39 57.45 T:isapk128av20

59.80 59.84 59.91 T:tinyjambu256v2

74.28 74.34 74.52 T:isapk128v20

83.43 83.50 83.52 romulust

107.55 107.60 107.66 T:elephant200v2

141.97 142.81 153.66 T:isapxv20

5610.78 5611.98 5612.51 T:elephant176v2

6139.72 6141.95 6143.18 T:elephant160v2

Cycles/byte for long+long decrypt

25% 50% 75% aead

0.47 0.48 0.51 T:aes128gcmv1

0.59? 0.63? 0.68? T:aes256gcmv1

0.98 1.00 1.01 aes256gcmv1

7.29 7.31 7.34 ascon128av12

10.93 10.94 10.97 ascon128v12

10.95 10.98 11.00 ascon80pqv12

12.49 12.51 12.53 T:xoodyakround3

14.29 14.32 14.36 ascon128abi32v12

18.87 19.06 19.12 T:schwaemm256128v2

21.21 21.23 21.26 T:schwaemm256256v2

21.42 21.45 21.47 ascon128bi32v12

25.05 25.11 25.14 T:schwaemm192192v2

25.32 25.34 25.41 T:grain128aeadv2

27.15 27.19 27.25 T:schwaemm128128v2

30.98 31.01 31.41 romulusn

34.19 34.25 34.28 T:isapa128av20

34.20 34.28 34.34 T:isapa128v20

41.43 41.45 41.48 T:giftcofb128v1

43.39 43.41 43.45 romulusm

49.34 49.38 49.42 T:tinyjambu128v2

56.79 56.82 56.87 T:tinyjambu192v2

57.34 57.44 57.49 T:isapk128av20

59.60 59.62 59.66 T:tinyjambu256v2

74.24 74.30 74.39 T:isapk128v20

83.45 83.47 83.53 romulust

107.53 107.59 107.67 T:elephant200v2

142.62 142.75 142.86 T:isapxv20

5608.87 5610.53 5613.56 T:elephant176v2

6136.50 6138.81 6141.69 T:elephant160v2

Cycles/byte for long+long forgery

25% 50% 75% aead

0.47? 0.49? 0.54? T:aes128gcmv1

0.61 0.63 0.66 T:aes256gcmv1

0.99 1.00 1.00 aes256gcmv1

7.30 7.32 7.38 ascon128av12

10.92 10.95 10.97 ascon128v12

10.97 10.99 10.99 ascon80pqv12

12.52 12.54 12.55 T:xoodyakround3

14.30 14.33 14.35 ascon128abi32v12

19.02 19.08 19.20 T:schwaemm256128v2

21.22 21.23 21.26 T:schwaemm256256v2

21.42 21.45 21.47 ascon128bi32v12

22.72 22.80 22.83 T:isapa128v20

25.05 25.10 25.17 T:schwaemm192192v2

25.34 25.36 25.44 T:grain128aeadv2

27.15 27.20 27.23 T:isapa128av20

27.17 27.21 27.26 T:schwaemm128128v2

30.98 31.01 31.39 romulusn

41.41 41.46 41.48 T:giftcofb128v1

42.37 42.40 42.43 romulust

43.40 43.45 43.48 romulusm

45.91 45.98 46.06 T:isapk128av20

49.37 49.39 49.44 T:tinyjambu128v2

56.77 56.81 56.88 T:tinyjambu192v2

57.23 57.27 57.30 T:isapk128v20

59.62 59.64 59.65 T:tinyjambu256v2

106.85 106.95 107.02 T:isapxv20

107.50 107.55 107.63 T:elephant200v2

5609.32 5610.80 5612.17 T:elephant176v2

6138.36 6141.16 6142.55 T:elephant160v2

Cycles/byte for 0+long encrypt

25% 50% 75% aead

0.30 0.31 0.32 T:aes256gcmv1

0.29? 0.31? 0.37? T:aes128gcmv1

0.41 0.42 0.43 aes256gcmv1

7.23 7.26 7.28 ascon128av12

8.76 8.79 8.82 T:xoodyakround3

10.96 10.97 10.99 ascon80pqv12

10.95 10.98 11.01 ascon128v12

14.26 14.28 14.31 ascon128abi32v12

18.68 18.78 18.88 T:schwaemm256128v2

21.10 21.16 21.17 T:schwaemm256256v2

21.29 21.32 21.35 ascon128bi32v12

22.79 22.90 23.00 T:isapa128v20

23.45 23.51 24.11 romulusn

23.54 23.57 23.60 romulusm

24.91 24.96 25.02 T:schwaemm192192v2

25.10 25.16 25.19 T:grain128aeadv2

26.71 26.99 27.08 T:schwaemm128128v2

27.11 27.15 27.19 T:isapa128av20

38.43 38.47 38.50 T:tinyjambu128v2

40.63 40.66 40.71 T:tinyjambu256v2

41.12 41.16 41.22 T:tinyjambu192v2

41.58 41.61 41.65 T:giftcofb128v1

42.28 42.31 42.36 romulust

45.67 45.85 45.96 T:isapk128av20

56.97 57.11 57.23 T:isapk128v20

72.24 72.32 72.38 T:elephant200v2

106.85 107.01 107.10 T:isapxv20

3708.14 3708.59 3709.24 T:elephant176v2

4091.39 4092.94 4094.29 T:elephant160v2

Cycles/byte for 0+long decrypt

25% 50% 75% aead

0.30 0.31 0.32 T:aes128gcmv1

0.30? 0.32? 0.35? T:aes256gcmv1

0.40 0.42 0.42 aes256gcmv1

7.29 7.33 7.37 ascon128av12

8.77 8.80 8.84 T:xoodyakround3

10.95 10.98 11.01 ascon80pqv12

10.98 11.01 11.03 ascon128v12

14.43 14.45 14.47 ascon128abi32v12

18.67 18.76 18.88 T:schwaemm256128v2

21.08 21.10 21.14 T:schwaemm256256v2

21.40 21.44 21.47 ascon128bi32v12

22.81 22.89 22.96 T:isapa128v20

23.44 23.51 24.29 romulusn

23.56 23.60 23.64 romulusm

24.86 24.93 25.06 T:schwaemm192192v2

25.03 25.05 25.18 T:grain128aeadv2

26.71 27.00 27.05 T:schwaemm128128v2

27.08 27.15 27.21 T:isapa128av20

38.43 38.48 38.53 T:tinyjambu128v2

40.62 40.66 40.68 T:tinyjambu256v2

41.11 41.17 41.26 T:tinyjambu192v2

41.56 41.63 41.68 T:giftcofb128v1

42.31 42.35 42.41 romulust

45.75 45.82 45.88 T:isapk128av20

57.02 57.11 57.19 T:isapk128v20

72.20 72.30 72.45 T:elephant200v2

106.91 107.00 107.11 T:isapxv20

3705.75 3708.01 3709.87 T:elephant176v2

4091.51 4093.37 4094.43 T:elephant160v2

Cycles/byte for 0+long forgery

25% 50% 75% aead

0.31 0.32 0.33 T:aes128gcmv1

0.33? 0.35? 0.37? T:aes256gcmv1

0.42 0.42 0.42 aes256gcmv1

7.32 7.34 7.36 ascon128av12

8.79 8.82 8.85 T:xoodyakround3

10.96 10.99 11.03 ascon80pqv12

10.96 11.00 11.04 ascon128v12

14.42 14.44 14.50 ascon128abi32v12

18.70 18.77 18.87 T:schwaemm256128v2

21.09 21.11 21.17 T:schwaemm256256v2

21.41 21.43 21.46 ascon128bi32v12

22.82 22.89 23.00 T:isapa128v20

23.44 23.51 24.32 romulusn

23.55 23.59 23.62 romulusm

24.81 24.98 25.04 T:schwaemm192192v2

25.04 25.06 25.16 T:grain128aeadv2

26.68 26.98 27.07 T:schwaemm128128v2

27.09 27.14 27.22 T:isapa128av20

38.41 38.46 38.49 T:tinyjambu128v2

40.64 40.65 40.70 T:tinyjambu256v2

41.10 41.18 41.23 T:tinyjambu192v2

41.56 41.63 41.66 T:giftcofb128v1

42.25 42.31 42.35 romulust

45.79 45.87 45.93 T:isapk128av20

57.06 57.17 57.24 T:isapk128v20

72.21 72.34 72.41 T:elephant200v2

106.89 106.97 107.10 T:isapxv20

3705.80 3708.10 3709.26 T:elephant176v2

4091.40 4093.14 4093.93 T:elephant160v2

Cycles/byte for 1536+1536 encrypt

25% 50% 75% aead

0.96 0.99 0.99 T:aes128gcmv1

1.13 1.14 1.14 T:aes256gcmv1

1.20 1.21 1.22 aes256gcmv1

7.69 7.71 7.74 ascon128av12

11.11 11.13 11.14 ascon80pqv12

11.16 11.17 11.19 ascon128v12

12.88 12.89 12.91 T:xoodyakround3

14.65 14.68 14.69 ascon128abi32v12

19.60 19.62 19.65 T:schwaemm256128v2

21.67 21.70 21.71 ascon128bi32v12

21.83 21.87 21.94 T:schwaemm256256v2

25.56 25.59 25.61 T:grain128aeadv2

25.70 25.72 25.76 T:schwaemm192192v2

27.55 27.61 27.70 T:schwaemm128128v2

31.37 31.40 31.65 romulusn

37.73 37.77 37.79 T:isapa128av20

41.81 41.83 41.85 T:giftcofb128v1

43.69 43.75 43.79 romulusm

49.72 49.76 49.79 T:tinyjambu128v2

49.95 49.99 50.04 T:isapa128v20

57.18 57.20 57.22 T:tinyjambu192v2

60.10 60.23 60.31 T:tinyjambu256v2

64.17 64.19 64.24 T:isapk128av20

84.80 84.83 84.85 romulust

109.87 109.91 109.99 T:elephant200v2

128.47 128.51 128.58 T:isapk128v20

234.87 234.97 245.09 T:isapxv20

5648.41 5653.22 5654.52 T:elephant176v2

6209.04 6211.07 6211.45 T:elephant160v2

Cycles/byte for 1536+1536 decrypt

25% 50% 75% aead

0.96 0.98 0.99 T:aes128gcmv1

1.08 1.09 1.12 T:aes256gcmv1

1.18 1.18 1.18 aes256gcmv1

7.50 7.51 7.53 ascon128av12

11.11 11.13 11.15 ascon128v12

11.15 11.16 11.18 ascon80pqv12

12.65 12.68 12.70 T:xoodyakround3

14.65 14.66 14.68 ascon128abi32v12

19.60 19.63 19.68 T:schwaemm256128v2

21.76 21.80 21.81 ascon128bi32v12

21.83 21.85 21.94 T:schwaemm256256v2

25.72 25.74 25.80 T:grain128aeadv2

25.67 25.74 25.81 T:schwaemm192192v2

27.50 27.54 27.57 T:schwaemm128128v2

31.34 31.36 31.71 romulusn

37.78 37.80 37.83 T:isapa128av20

41.86 41.88 41.90 T:giftcofb128v1

43.82 43.85 43.87 romulusm

49.78 49.80 49.83 T:tinyjambu128v2

50.02 50.05 50.09 T:isapa128v20

57.23 57.27 57.33 T:tinyjambu192v2

60.07 60.10 60.11 T:tinyjambu256v2

64.21 64.26 64.30 T:isapk128av20

84.78 84.82 84.84 romulust

109.80 109.94 109.98 T:elephant200v2

128.50 128.53 128.58 T:isapk128v20

234.81 234.84 234.86 T:isapxv20

5650.23 5653.05 5654.63 T:elephant176v2

6209.30 6210.83 6211.56 T:elephant160v2

Cycles/byte for 1536+1536 forgery

25% 50% 75% aead

0.95 0.97 0.99 T:aes128gcmv1

1.08 1.08 1.10 T:aes256gcmv1

1.18 1.18 1.18 aes256gcmv1

7.52 7.52 7.54 ascon128av12

11.11 11.13 11.14 ascon128v12

11.15 11.16 11.18 ascon80pqv12

12.68 12.70 12.72 T:xoodyakround3

14.63 14.66 14.68 ascon128abi32v12

19.60 19.64 19.69 T:schwaemm256128v2

21.77 21.78 21.80 ascon128bi32v12

21.83 21.85 21.92 T:schwaemm256256v2

25.73 25.74 25.81 T:grain128aeadv2

25.69 25.75 25.78 T:schwaemm192192v2

27.53 27.57 27.61 T:schwaemm128128v2

29.10 29.13 29.17 T:isapa128av20

30.79 30.83 30.87 T:isapa128v20

31.34 31.41 31.69 romulusn

41.87 41.88 41.90 T:giftcofb128v1

43.63 43.65 43.67 romulust

43.83 43.84 43.88 romulusm

49.76 49.79 49.81 T:tinyjambu128v2

49.91 49.96 50.02 T:isapk128av20

57.24 57.28 57.33 T:tinyjambu192v2

60.08 60.09 60.10 T:tinyjambu256v2

85.02 85.06 85.10 T:isapk128v20

109.84 109.93 109.99 T:elephant200v2

154.03 154.08 154.13 T:isapxv20

5652.57 5653.62 5654.26 T:elephant176v2

6207.72 6209.83 6210.88 T:elephant160v2

Cycles/byte for 64+64 encrypt

25% 50% 75% aead

7.42 7.45 7.49 aes256gcmv1

12.20 12.34 12.69 ascon128av12

12.25 12.49 12.62 T:aes128gcmv1

12.64 12.96 13.38 T:aes256gcmv1

14.97 15.20 15.45 ascon128v12

15.15 15.49 15.77 ascon80pqv12

18.70 19.05 19.30 T:xoodyakround3

22.12 22.20 22.69 ascon128abi32v12

29.08 29.20 29.34 ascon128bi32v12

31.99 32.19 32.44 T:schwaemm256128v2

34.85 34.89 35.30 T:schwaemm256256v2

34.98 35.08 35.38 T:grain128aeadv2

35.32 35.68 36.21 T:schwaemm128128v2

38.53 38.76 39.12 romulusn

41.53 41.88 42.39 T:schwaemm192192v2

51.34 51.45 51.71 T:giftcofb128v1

51.55 51.71 52.09 romulusm

58.66 58.75 58.98 T:tinyjambu128v2

67.48 67.54 67.80 T:tinyjambu192v2

70.29 70.44 70.79 T:tinyjambu256v2

114.88 115.03 115.84 romulust

118.62 118.86 119.09 T:isapa128av20

156.59 157.43 157.67 T:elephant200v2

206.48 207.16 207.95 T:isapk128av20

411.32 411.90 412.78 T:isapa128v20

1358.03 1358.19 1358.89 T:isapk128v20

2325.90 2327.52 2329.72 T:isapxv20

7037.49 7038.10 7039.58 T:elephant176v2

8316.95 8317.43 8320.27 T:elephant160v2

Cycles/byte for 64+64 decrypt

25% 50% 75% aead

7.09 7.14 7.19 aes256gcmv1

12.05 12.27 12.56 ascon128av12

12.23 12.27 12.88 T:aes256gcmv1

11.57 12.28 12.54 T:aes128gcmv1

14.94 15.22 15.45 ascon128v12

15.16 15.27 15.45 ascon80pqv12

18.52 19.05 19.40 T:xoodyakround3

22.18 22.24 22.63 ascon128abi32v12

29.26 29.46 29.63 ascon128bi32v12

31.91 32.16 32.59 T:schwaemm256128v2

35.02 35.15 35.30 T:schwaemm256256v2

35.05 35.16 35.24 T:grain128aeadv2

35.23 35.54 35.88 T:schwaemm128128v2

38.82 39.17 39.27 romulusn

42.21 42.41 42.68 T:schwaemm192192v2

51.54 51.74 51.95 T:giftcofb128v1

52.91 53.05 53.38 romulusm

58.77 58.89 59.14 T:tinyjambu128v2

67.31 67.43 67.64 T:tinyjambu192v2

70.48 70.55 70.66 T:tinyjambu256v2

114.76 114.91 115.21 romulust

118.85 119.18 119.51 T:isapa128av20

156.67 156.98 157.65 T:elephant200v2

206.80 207.38 208.23 T:isapk128av20

412.07 413.06 413.53 T:isapa128v20

1358.31 1358.78 1360.54 T:isapk128v20

2325.29 2326.20 2327.29 T:isapxv20

7036.49 7038.06 7040.73 T:elephant176v2

8315.63 8316.97 8319.24 T:elephant160v2

Cycles/byte for 64+64 forgery

25% 50% 75% aead

7.12 7.16 7.19 aes256gcmv1

11.91 12.05 12.23 ascon128av12

11.61 12.33 12.42 T:aes128gcmv1

12.26 12.40 12.92 T:aes256gcmv1

14.86 15.03 15.10 ascon128v12

15.10 15.16 15.30 ascon80pqv12

18.70 18.82 19.06 T:xoodyakround3

22.18 22.30 22.40 ascon128abi32v12

29.30 29.34 29.41 ascon128bi32v12

31.62 31.94 32.48 T:schwaemm256128v2

34.91 35.05 35.32 T:schwaemm256256v2

35.04 35.09 35.28 T:grain128aeadv2

35.12 35.37 35.84 T:schwaemm128128v2

38.83 39.01 39.30 romulusn

42.15 42.46 42.78 T:schwaemm192192v2

51.54 51.64 51.91 T:giftcofb128v1

53.02 53.17 53.27 romulusm

58.74 58.82 58.88 T:tinyjambu128v2

67.31 67.38 67.66 T:tinyjambu192v2

70.39 70.45 70.56 T:tinyjambu256v2

71.91 72.09 72.30 romulust

73.55 73.93 74.27 T:isapa128av20

130.16 130.72 131.70 T:isapk128av20

157.00 157.25 157.55 T:elephant200v2

214.39 215.26 215.83 T:isapa128v20

711.10 711.27 711.66 T:isapk128v20

1216.62 1216.85 1217.30 T:isapxv20

7039.48 7041.87 7043.03 T:elephant176v2

8316.17 8317.12 8320.44 T:elephant160v2

amd64; IceLake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; `icelake2`, `supercop-20221005`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

1.47 1.48 1.49 T:aes128gcmv1

1.56 1.57 1.58 aes256gcmv1

7.88 7.95 8.14 ascon128av12

11.72 11.79 12.12 ascon128v12

11.76 11.83 11.90 ascon80pqv12

12.13 12.18 12.25 T:xoodyakround3

14.52 14.60 14.71 ascon128abi32v12

17.00 17.05 17.19 T:schwaemm256128v2

20.04 20.18 20.38 T:schwaemm256256v2

20.32 20.36 20.42 T:grain128aeadv2

21.52 21.57 21.62 ascon128bi32v12

22.63 22.73 22.88 T:schwaemm192192v2

24.02 24.15 24.27 T:schwaemm128128v2

27.00 27.06 27.16 T:isapa128av20

32.09 32.10 32.13 T:isapk128av20

37.43 37.52 37.65 romulusn

42.98 43.06 43.21 T:isapa128v20

44.31? 44.39? 50.52? T:giftcofb128v1

58.23 58.42 58.65 romulusm

70.44 70.60 71.03 T:tinyjambu128v2

86.08 86.24 86.27 T:tinyjambu192v2

90.06 90.19 90.54 T:tinyjambu256v2

97.48 98.64 98.93 T:isapk128v20

116.26 116.55 116.73 romulust

142.56 143.19 146.66 T:isapxv20

178.48 178.93 180.60 T:elephant200v2

7420.94 7433.26 7465.64 T:elephant176v2

8258.46 8264.08 8271.69 T:elephant160v2

Cycles/byte for long+0 decrypt

25% 50% 75% aead

1.43 1.45 1.46 T:aes128gcmv1

1.46 1.47 1.48 aes256gcmv1

8.00 8.07 8.11 ascon128av12

11.74 11.79 11.82 ascon128v12

11.81 11.84 11.87 ascon80pqv12

12.05 12.11 12.21 T:xoodyakround3

14.60 14.72 14.82 ascon128abi32v12

17.05 17.10 17.28 T:schwaemm256128v2

19.94 20.31 20.45 T:schwaemm256256v2

20.50 20.53 20.59 T:grain128aeadv2

21.68 21.72 21.84 ascon128bi32v12

22.56 22.73 22.85 T:schwaemm192192v2

24.11 24.16 24.31 T:schwaemm128128v2

32.07 32.11 32.16 T:isapk128av20

34.05 34.11 34.23 T:isapa128av20

37.40 37.55 37.66 romulusn

42.99 43.09 43.25 T:isapa128v20

44.32? 44.45? 50.23? T:giftcofb128v1

58.43 58.55 59.22 romulusm

70.50 70.71 70.82 T:tinyjambu128v2

85.64 85.82 86.08 T:tinyjambu192v2

90.17 90.31 90.49 T:tinyjambu256v2

97.48 98.50 98.98 T:isapk128v20

115.71 116.55 117.57 romulust

141.96 143.47 146.70 T:isapxv20

179.01 179.88 180.60 T:elephant200v2

7424.17 7436.47 7471.02 T:elephant176v2

8258.26 8262.75 8267.75 T:elephant160v2

Cycles/byte for long+0 forgery

25% 50% 75% aead

1.45 1.45 1.46 T:aes128gcmv1

1.47 1.47 1.48 aes256gcmv1

8.03 8.06 8.10 ascon128av12

11.74 11.77 11.81 ascon128v12

11.67 11.82 11.87 ascon80pqv12

12.08 12.14 12.44 T:xoodyakround3

14.64 14.74 14.81 ascon128abi32v12

17.08 17.14 17.19 T:schwaemm256128v2

20.12 20.29 20.36 T:schwaemm256256v2

20.48 20.51 20.55 T:grain128aeadv2

21.11 21.24 21.31 T:isapa128v20

21.38 21.43 21.44 T:isapk128av20

21.68 21.73 21.76 ascon128bi32v12

22.40 22.49 22.67 T:isapa128av20

22.54 22.63 22.76 T:schwaemm192192v2

24.06 24.13 24.22 T:schwaemm128128v2

37.40 37.55 37.66 romulusn

39.62 39.83 39.95 romulust

44.33 44.39 45.78 T:giftcofb128v1

58.48 58.63 59.05 romulusm

63.81 64.35 64.89 T:isapk128v20

70.45 70.60 70.74 T:tinyjambu128v2

85.35 85.69 86.86 T:isapxv20

85.80 85.97 86.10 T:tinyjambu192v2

90.12 90.20 90.35 T:tinyjambu256v2

177.83 179.02 180.14 T:elephant200v2

7418.97 7428.78 7455.27 T:elephant176v2

8261.35 8264.64 8267.99 T:elephant160v2

Cycles/byte for long+long encrypt

25% 50% 75% aead

0.87 0.88 0.89 T:aes128gcmv1

0.91 0.93 0.93 aes256gcmv1

7.95 8.02 8.09 ascon128av12

9.30 9.34 9.46 T:xoodyakround3

11.71 11.82 12.00 ascon80pqv12

11.77 11.95 12.08 ascon128v12

14.39 14.43 14.45 ascon128abi32v12

16.83 16.93 16.99 T:schwaemm256128v2

19.92 20.25 20.43 T:schwaemm256256v2

20.41 20.45 20.52 T:grain128aeadv2

21.49 21.55 21.58 ascon128bi32v12

22.45 22.51 22.66 T:schwaemm192192v2

23.86 23.90 23.94 T:schwaemm128128v2

24.97 25.01 25.05 T:isapa128av20

26.74 26.75 26.79 T:isapk128av20

29.02 29.07 29.16 romulusn

32.08 32.15 32.24 T:isapa128v20

39.43 39.70 39.86 romulusm

44.31 44.36 44.42 T:giftcofb128v1

57.66 57.75 57.88 T:tinyjambu128v2

67.07 67.22 67.35 T:tinyjambu192v2

68.00 68.11 68.23 T:tinyjambu256v2

76.37 77.16 78.32 T:isapk128v20

77.91 78.30 78.64 romulust

112.54 113.78 115.27 T:isapxv20

133.35 133.61 134.33 T:elephant200v2

5541.52 5552.17 5573.16 T:elephant176v2

6208.10 6224.71 6278.71 T:elephant160v2

Cycles/byte for long+long decrypt

25% 50% 75% aead

0.85 0.87 0.89 T:aes128gcmv1

0.85 0.91 0.92 aes256gcmv1

8.01 8.05 8.08 ascon128av12

9.25 9.33 9.45 T:xoodyakround3

11.72 11.76 11.94 ascon128v12

11.71 11.78 11.92 ascon80pqv12

14.43 14.50 14.52 ascon128abi32v12

16.90 16.97 17.04 T:schwaemm256128v2

19.97 20.23 20.35 T:schwaemm256256v2

20.49 20.52 20.56 T:grain128aeadv2

21.56 21.65 21.71 ascon128bi32v12

22.45 22.50 22.63 T:schwaemm192192v2

23.80 23.91 24.24 T:schwaemm128128v2

26.75 26.76 26.84 T:isapk128av20

28.43 28.48 28.51 T:isapa128av20

29.02 29.07 29.11 romulusn

32.13 32.17 32.23 T:isapa128v20

39.52 39.75 39.86 romulusm

44.30 44.33 44.43 T:giftcofb128v1

57.69 57.83 57.92 T:tinyjambu128v2

67.03 67.31 67.45 T:tinyjambu192v2

68.05 68.17 68.29 T:tinyjambu256v2

76.33 76.84 77.26 T:isapk128v20

78.24 78.41 78.74 romulust

112.61 114.33 114.61 T:isapxv20

133.21 133.94 134.46 T:elephant200v2

5548.02 5558.37 5580.34 T:elephant176v2

6210.25 6217.64 6233.37 T:elephant160v2

Cycles/byte for long+long forgery

25% 50% 75% aead

0.86 0.87 0.88 T:aes128gcmv1

0.88 0.91 0.91 aes256gcmv1

8.00 8.03 8.05 ascon128av12

9.24 9.28 9.46 T:xoodyakround3

11.72 11.76 11.84 ascon80pqv12

11.70 11.77 11.93 ascon128v12

14.46 14.51 14.55 ascon128abi32v12

16.89 16.97 17.08 T:schwaemm256128v2

19.94 20.13 20.46 T:schwaemm256256v2

20.49 20.52 20.55 T:grain128aeadv2

21.19 21.24 21.29 T:isapa128v20

21.39 21.41 21.44 T:isapk128av20

21.60 21.68 21.82 ascon128bi32v12

22.39 22.54 22.73 T:schwaemm192192v2

22.61 22.66 22.69 T:isapa128av20

23.81 23.90 24.03 T:schwaemm128128v2

29.04 29.07 29.19 romulusn

39.51 39.76 39.98 romulusm

39.67 40.05 40.31 romulust

44.31 44.34 44.37 T:giftcofb128v1

57.76 57.84 57.96 T:tinyjambu128v2

59.45 59.75 60.29 T:isapk128v20

67.02 67.19 67.32 T:tinyjambu192v2

68.06 68.13 68.27 T:tinyjambu256v2

84.54 85.00 85.50 T:isapxv20

132.84 133.68 134.34 T:elephant200v2

5546.51 5557.51 5583.07 T:elephant176v2

6208.94 6216.30 6232.84 T:elephant160v2

Cycles/byte for 0+long encrypt

25% 50% 75% aead

0.25? 0.27? 0.29? aes256gcmv1

0.26? 0.29? 0.30? T:aes128gcmv1

6.34 6.40 6.45 T:xoodyakround3

7.98 8.02 8.06 ascon128av12

11.55 11.64 11.73 ascon80pqv12

11.65 11.69 11.95 ascon128v12

14.37 14.46 14.52 ascon128abi32v12

16.66 16.76 16.85 T:schwaemm256128v2

19.84 20.01 20.26 T:schwaemm256256v2

20.44 20.48 20.52 T:grain128aeadv2

20.70 20.80 20.94 romulusn

20.82 20.94 21.06 romulusm

21.13 21.22 21.31 T:isapa128v20

21.38 21.41 21.46 T:isapk128av20

21.44 21.50 21.59 ascon128bi32v12

22.04 22.14 22.20 T:schwaemm192192v2

22.85 22.92 23.16 T:isapa128av20

23.63 23.76 23.85 T:schwaemm128128v2

38.91 39.20 39.62 romulust

44.29 44.32 44.40 T:giftcofb128v1

44.94 45.03 45.06 T:tinyjambu128v2

45.77 45.81 45.90 T:tinyjambu256v2

48.26 48.38 48.42 T:tinyjambu192v2

55.10 55.48 56.31 T:isapk128v20

84.23 84.90 85.51 T:isapxv20

88.91 89.24 89.66 T:elephant200v2

3668.40 3676.16 3695.98 T:elephant176v2

4126.84 4129.54 4132.91 T:elephant160v2

Cycles/byte for 0+long decrypt

25% 50% 75% aead

0.24? 0.27? 0.29? aes256gcmv1

0.25? 0.27? 0.29? T:aes128gcmv1

6.36 6.41 6.43 T:xoodyakround3

7.97 8.00 8.07 ascon128av12

11.59 11.66 11.69 ascon128v12

11.63 12.00 12.10 ascon80pqv12

14.29 14.42 14.55 ascon128abi32v12

16.70 16.78 16.87 T:schwaemm256128v2

19.92 20.10 20.37 T:schwaemm256256v2

20.45 20.48 20.52 T:grain128aeadv2

20.70 20.80 20.88 romulusn

20.71 20.87 20.94 romulusm

21.19 21.26 21.31 T:isapa128v20

21.38 21.42 21.43 T:isapk128av20

21.42 21.49 21.52 ascon128bi32v12

22.06 22.11 22.23 T:schwaemm192192v2

22.83 22.91 22.96 T:isapa128av20

23.62 23.72 23.91 T:schwaemm128128v2

39.00 39.22 39.48 romulust

44.25 44.28 44.33 T:giftcofb128v1

44.85 44.91 44.97 T:tinyjambu128v2

45.77 45.84 45.88 T:tinyjambu256v2

48.17 48.29 48.41 T:tinyjambu192v2

55.05 55.31 56.28 T:isapk128v20

84.33 84.61 85.67 T:isapxv20

89.06 89.64 90.04 T:elephant200v2

3671.82 3679.59 3689.35 T:elephant176v2

4126.29 4129.06 4132.01 T:elephant160v2

Cycles/byte for 0+long forgery

25% 50% 75% aead

0.27 0.28 0.29 aes256gcmv1

0.27 0.28 0.29 T:aes128gcmv1

6.37 6.41 6.45 T:xoodyakround3

7.97 8.01 8.03 ascon128av12

11.55 11.66 11.98 ascon80pqv12

11.64 11.66 11.72 ascon128v12

14.32 14.43 14.51 ascon128abi32v12

16.74 16.85 16.94 T:schwaemm256128v2

19.86 20.00 20.21 T:schwaemm256256v2

20.45 20.49 20.54 T:grain128aeadv2

20.73 20.81 20.99 romulusn

20.74 20.91 20.98 romulusm

21.17 21.21 21.28 T:isapa128v20

21.39 21.42 21.46 T:isapk128av20

21.43 21.49 21.56 ascon128bi32v12

22.11 22.22 22.30 T:schwaemm192192v2

22.82 22.89 23.14 T:isapa128av20

23.61 23.68 23.80 T:schwaemm128128v2

39.19 39.36 39.58 romulust

44.26 44.30 44.36 T:giftcofb128v1

44.83 44.98 45.19 T:tinyjambu128v2

45.78 45.83 45.94 T:tinyjambu256v2

48.31 48.40 48.45 T:tinyjambu192v2

55.08 55.56 55.87 T:isapk128v20

84.15 84.57 85.26 T:isapxv20

89.01 89.63 90.41 T:elephant200v2

3665.91 3676.42 3691.77 T:elephant176v2

4126.23 4129.35 4131.58 T:elephant160v2

Cycles/byte for 1536+1536 encrypt

25% 50% 75% aead

1.00 1.00 1.01 T:aes128gcmv1

1.07 1.07 1.08 aes256gcmv1

8.16 8.17 8.27 ascon128av12

9.37 9.42 9.50 T:xoodyakround3

11.97 12.03 12.23 ascon128v12

11.97 12.06 12.29 ascon80pqv12

14.70 14.71 14.74 ascon128abi32v12

17.40 17.43 17.52 T:schwaemm256128v2

20.50 20.60 20.80 T:schwaemm256256v2

20.74 20.75 20.78 T:grain128aeadv2

21.84 21.88 21.94 ascon128bi32v12

22.93 23.00 23.13 T:schwaemm192192v2

24.10 24.19 24.23 T:schwaemm128128v2

27.04 27.07 27.10 T:isapa128av20

29.33 29.35 29.48 romulusn

29.81 29.82 29.83 T:isapk128av20

39.73 39.82 39.89 romulusm

44.74 44.77 44.80 T:giftcofb128v1

46.77 46.84 46.97 T:isapa128v20

58.10 58.17 58.28 T:tinyjambu128v2

67.72 67.76 67.88 T:tinyjambu192v2

68.41 68.44 68.64 T:tinyjambu256v2

78.64 78.88 79.25 romulust

127.50 127.73 127.98 T:isapk128v20

136.28 136.81 137.64 T:elephant200v2

188.16 188.81 189.93 T:isapxv20

5590.41 5604.11 5615.65 T:elephant176v2

6266.01 6268.42 6273.09 T:elephant160v2

Cycles/byte for 1536+1536 decrypt

25% 50% 75% aead

0.99 0.99 1.01 T:aes128gcmv1

1.02 1.03 1.06 aes256gcmv1

8.22 8.23 8.31 ascon128av12

9.36 9.44 9.67 T:xoodyakround3

11.98 12.01 12.13 ascon128v12

12.00 12.01 12.05 ascon80pqv12

14.82 14.87 14.96 ascon128abi32v12

17.34 17.42 17.47 T:schwaemm256128v2

20.43 20.57 20.90 T:schwaemm256256v2

20.85 20.86 20.90 T:grain128aeadv2

21.91 21.93 22.05 ascon128bi32v12

22.94 22.98 23.11 T:schwaemm192192v2

24.23 24.29 24.33 T:schwaemm128128v2

29.29 29.34 29.38 romulusn

29.81 29.81 29.83 T:isapk128av20

30.44 30.46 30.54 T:isapa128av20

39.85 39.94 40.10 romulusm

44.77 44.80 44.83 T:giftcofb128v1

46.79 46.85 47.04 T:isapa128v20

58.13 58.20 58.32 T:tinyjambu128v2

67.70 67.78 67.83 T:tinyjambu192v2

68.46 68.50 68.56 T:tinyjambu256v2

78.87 79.10 79.18 romulust

127.38 127.74 128.03 T:isapk128v20

135.95 136.77 137.63 T:elephant200v2

187.84 187.91 188.48 T:isapxv20

5593.73 5596.89 5601.92 T:elephant176v2

6265.44 6268.92 6270.41 T:elephant160v2

Cycles/byte for 1536+1536 forgery

25% 50% 75% aead

0.99 0.99 1.00 T:aes128gcmv1

1.02 1.02 1.06 aes256gcmv1

8.22 8.23 8.25 ascon128av12

9.36 9.39 9.45 T:xoodyakround3

11.98 12.02 12.06 ascon80pqv12

12.00 12.13 12.22 ascon128v12

14.81 14.83 14.91 ascon128abi32v12

17.40 17.44 17.58 T:schwaemm256128v2

20.53 20.62 20.79 T:schwaemm256256v2

20.82 20.85 20.86 T:grain128aeadv2

21.87 21.89 21.93 ascon128bi32v12

22.90 22.96 23.03 T:schwaemm192192v2

23.19 23.20 23.22 T:isapk128av20

23.76 23.79 23.82 T:isapa128av20

24.14 24.18 24.28 T:schwaemm128128v2

28.67 28.71 28.74 T:isapa128v20

29.29 29.35 29.62 romulusn

39.85 39.96 40.03 romulusm

40.45 40.65 40.78 romulust

44.76 44.78 44.80 T:giftcofb128v1

58.10 58.22 58.28 T:tinyjambu128v2

67.51 67.66 67.84 T:tinyjambu192v2

68.44 68.53 68.69 T:tinyjambu256v2

86.19 86.43 86.67 T:isapk128v20

122.65 123.00 123.51 T:isapxv20

136.77 137.00 138.28 T:elephant200v2

5588.06 5594.49 5607.91 T:elephant176v2

6266.14 6270.27 6270.95 T:elephant160v2

Cycles/byte for 64+64 encrypt

25% 50% 75% aead

5.97 6.03 6.08 T:aes128gcmv1

6.34 6.38 6.45 aes256gcmv1

12.31 12.38 12.94 ascon128av12

13.51 13.58 14.17 T:xoodyakround3

17.52 17.77 17.93 ascon128v12

17.78 18.02 18.34 ascon80pqv12

21.72 21.88 22.45 ascon128abi32v12

28.14 28.57 29.13 T:schwaemm256128v2

28.66 28.73 28.79 T:grain128aeadv2

28.77 28.93 29.08 ascon128bi32v12

30.75 31.05 31.59 T:schwaemm128128v2

32.73 33.04 33.37 T:schwaemm256256v2

35.37 35.54 36.84 romulusn

36.45 37.01 37.62 T:schwaemm192192v2

46.83 47.04 47.78 romulusm

54.00 54.34 54.87 T:giftcofb128v1

67.46 67.57 68.05 T:tinyjambu128v2

73.88 74.21 74.77 T:isapa128av20

78.32 78.55 78.75 T:tinyjambu192v2

79.23 79.49 80.06 T:tinyjambu256v2

95.41 95.51 95.59 T:isapk128av20

104.41 104.76 105.70 romulust

192.79 193.52 194.46 T:elephant200v2

383.18 383.91 384.91 T:isapa128v20

1268.29 1269.98 1274.20 T:isapk128v20

1848.49 1873.19 1877.44 T:isapxv20

6950.48 6963.73 6980.10 T:elephant176v2

8377.14 8385.78 8406.70 T:elephant160v2

Cycles/byte for 64+64 decrypt

25% 50% 75% aead

5.23 5.29 5.34 T:aes128gcmv1

6.12 6.20 6.27 aes256gcmv1

12.34 12.51 13.43 ascon128av12

13.42 13.55 13.98 T:xoodyakround3

17.33 17.52 17.98 ascon128v12

17.27 17.74 18.05 ascon80pqv12

21.97 22.20 23.09 ascon128abi32v12

27.77 28.11 28.82 T:schwaemm256128v2

28.70 28.84 29.28 T:grain128aeadv2

28.94 29.05 29.37 ascon128bi32v12

30.97 31.40 31.68 T:schwaemm128128v2

33.11 33.34 33.54 T:schwaemm256256v2

35.59 35.73 35.84 romulusn

36.69 36.92 37.54 T:schwaemm192192v2

48.06 48.24 49.45 romulusm

54.26 54.45 54.62 T:giftcofb128v1

67.71 67.93 68.20 T:tinyjambu128v2

76.09 76.45 77.36 T:isapa128av20

78.63 78.77 78.95 T:tinyjambu192v2

79.50 79.57 79.70 T:tinyjambu256v2

95.62 95.77 95.88 T:isapk128av20

104.73 105.55 105.98 romulust

192.38 192.96 193.75 T:elephant200v2

384.67 385.06 385.50 T:isapa128v20

1269.06 1270.38 1274.24 T:isapk128v20

1848.55 1874.57 1882.35 T:isapxv20

6956.00 7001.05 7005.66 T:elephant176v2

8382.45 8388.86 8408.45 T:elephant160v2

Cycles/byte for 64+64 forgery

25% 50% 75% aead

5.24 5.26 5.30 T:aes128gcmv1

6.13 6.18 6.25 aes256gcmv1

12.30 12.38 12.98 ascon128av12

13.55 13.99 14.12 T:xoodyakround3

17.30 17.44 17.53 ascon80pqv12

17.33 17.53 17.73 ascon128v12

21.95 22.26 22.48 ascon128abi32v12

27.73 27.98 28.31 T:schwaemm256128v2

28.73 28.90 29.06 T:grain128aeadv2

28.92 28.96 29.06 ascon128bi32v12

30.87 31.03 31.52 T:schwaemm128128v2

32.78 32.93 33.41 T:schwaemm256256v2

35.55 35.76 35.88 romulusn

36.58 36.95 37.44 T:schwaemm192192v2

48.02 48.34 48.62 romulusm

49.63 49.92 50.48 T:isapa128av20

54.23 54.59 54.80 T:giftcofb128v1

60.28 60.56 60.80 T:isapk128av20

65.98 66.35 67.26 romulust

67.72 67.81 68.06 T:tinyjambu128v2

78.38 78.53 78.80 T:tinyjambu192v2

79.34 79.45 79.73 T:tinyjambu256v2

192.08 193.16 194.12 T:elephant200v2

200.08 200.55 201.02 T:isapa128v20

668.86 670.03 670.94 T:isapk128v20

967.36 980.39 981.54 T:isapxv20

6947.90 6957.02 7009.71 T:elephant176v2

8381.76 8392.71 8412.84 T:elephant160v2

aarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; `gcc185`, `supercop-20221122`

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt

25% 50% 75% aead

5.08 5.23 5.31 T:aes128gcmv1

6.45 6.60 6.68 T:aes256gcmv1

9.61 9.69 9.69 ascon128av12

14.18 14.22 14.22 ascon128v12

14.41 14.41 14.45 ascon80pqv12

19.92 20.00 20.00 ascon128abi32v12

24.96 25.00 25.12 T:xoodyakround3

29.53 29.53 29.57 ascon128bi32v12

37.73 37.85 37.89 T:schwaemm256128v2

42.30 42.46 42.48 aes128gcmv1

45.27 45.27 45.31 T:giftcofb128v1

45.90 45.90 45.90 T:

eBACS: ECRYPT Benchmarking of Cryptographic Systems

Measurements of NISTLWC cipher candidates, indexed by machine

amd64; Zen2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20230530

amd64; Zen3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20230530

amd64; Zen3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; beelink, supercop-20221122

amd64; Zen2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20230530

amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20221122

amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20221122

aarch64; Firestorm (610f0230); 2020 Apple M1; 4 x 3200MHz; unstable; minimac, supercop-20211108

amd64; Zen3 (a20f10); 2020 AMD Ryzen 9 5950X; 16 x 3400MHz; zen3, supercop-20220213

amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20221122

amd64; TigerLake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20230530

aarch64; A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20221122

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20230530

amd64; CometLake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20230530

amd64; CometLake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20230530

amd64; IceLake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005

aarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; gcc185, supercop-20221122