VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 10.81 10.85 10.85 ascon128av12 14.67 15.30 15.31 T:xoodyakv1 15.43 15.49 15.49 ascon128v12 15.56 15.57 15.57 ascon80pqv12 21.00 21.00 21.01 T:gimli24v1 34.17 34.19 34.37 T:knot128v2 34.98 34.99 35.23 T:saeaes128a120t64v1 34.90 35.17 35.24 T:saeaes128a64t64v1 35.17 35.20 35.23 T:saeaes128a64t128v1 35.17 35.22 35.24 T:saeaes128a120t128v1 36.20 36.26 36.29 T:knot128v1 39.46 39.52 39.58 T:saeaes192a64t64v1 39.85 40.07 40.14 T:saeaes192a64t128v1 40.01 40.13 40.21 T:saeaes192a120t128v1 41.55 42.34 42.44 T:schwaemm256128v1 43.24 43.68 43.74 T:comet128aesv1 44.28 44.35 44.37 T:saeaes256a64t64v1 44.57 44.60 44.62 T:saeaes256a64t128v1 44.58 44.60 44.66 T:saeaes256a120t128v1 48.50 48.54 48.55 T:isapa128av20 53.93 53.95 54.00 T:giftcofb128v1 54.04 54.23 54.40 T:schwaemm192192v1 56.57 56.72 56.79 T:schwaemm256256v1 58.81 58.83 58.84 T:saturninctrcascadev2 61.33 61.60 61.71 T:knot256 61.88 61.89 61.90 T:schwaemm128128v1 65.08 65.28 65.43 T:isapa128v20 69.29 70.43 70.54 T:knot192 80.24 80.26 80.38 T:drygascon128k32 80.28 80.42 80.45 T:drygascon128k16 80.40 80.44 80.48 T:drygascon128k56 82.46 82.48 82.50 T:tinyjambu128 87.35 88.20 88.31 T:tinyjambu192 102.85 102.92 102.95 T:grain128aead 103.42 103.58 103.63 T:photonbeetleaead128rate128v1 103.98 104.06 104.21 T:tinyjambu256 110.18 110.21 110.24 T:drygascon256k32 116.67 116.76 116.95 T:spook128mu512v1 117.88 118.04 118.11 T:spook128su512v1 117.06 118.07 118.47 T:spook128su384v1 117.58 118.38 118.58 T:spook128mu384v1 119.32 120.22 120.89 T:sestatetweaes128v1 149.32 150.13 150.43 T:estatetweaes128v1 181.10 181.48 182.27 T:skinnyaeadtk3128128v1 182.77 182.83 182.87 T:mixfeed 195.77 196.22 198.30 romulusn 215.19 215.55 216.00 T:subterraneanv1 240.52 240.58 240.61 T:isapk128av20 261.15 261.26 262.81 T:elephant200v1 260.24 261.96 262.16 T:romulusn1v1 324.50 324.53 325.21 T:isapk128v20 330.57 334.06 334.83 T:comet64speckv1 356.15 359.56 360.24 romulusm 379.38 379.54 379.57 T:comet64chamv1 401.80 401.84 401.90 T:photonbeetleaead128rate32v1 416.21 416.51 417.11 T:comet128chamv1 470.80 471.62 473.65 T:romulusm1v1 548.01 548.06 548.27 T:skinnyaeadtk29664v1 548.13 548.32 548.52 T:skinnyaeadtk296128v1 555.51 557.36 557.51 T:pyjamask128aeadv1 594.89 599.61 600.07 T:pyjamask96aeadv1 720.65 720.68 721.31 T:romulusn3v1 768.62 773.07 776.05 romulust 808.38 809.64 811.70 T:spoc128sliscplight256v1 827.06 827.08 829.68 T:spix128v1 910.80 911.07 912.34 T:wageae128v1 957.03 957.16 957.46 T:skinnyaeadtk39664v1 953.17 957.50 1012.97 T:skinnyaeadtk396128v1 952.88 957.59 1017.26 T:skinnyaeadtk312864v1 978.21 978.36 978.44 T:sundaegift96v1 978.22 978.36 978.56 T:sundaegift64v1 978.33 978.47 978.80 T:sundaegift0v1 978.56 980.33 980.40 T:sundaegift128v1 1135.14 1136.50 1137.25 T:romulusm3v1 1151.58 1151.69 1152.22 T:saefforkskinnyb128t192n56v1 1152.42 1153.23 1169.20 T:paefforkskinnyb128t256n112v1 1151.46 1153.69 1154.50 T:saefforkskinnyb128t256n120v1 1153.31 1154.96 1169.77 T:paefforkskinnyb128t192n48v1 1208.47 1209.10 1209.27 T:romulusn2v1 1258.92 1267.89 1281.39 T:spoc64sliscplight192v1 1679.29 1681.86 1702.42 T:paefforkskinnyb128t288n104v1 1893.52 1903.96 1948.32 T:romulusm2v1 1887.46 1905.96 1939.93 T:hyenav1 2111.14 2126.24 2141.47 T:aceae128v1 2786.27 2837.20 2842.84 T:paefforkskinnyb64t192n48v1 3781.29? 3904.74? 5331.45? T:estatetwegift128v1 4036.38 4036.92 4038.22 T:orangezestv1 4683.62 4687.27 4689.30 T:oribatida192v11 4816.18 4821.19 4822.29 T:oribatida256v11 4929.56 4930.97 4933.98 T:twegift64lotusaeadv1 5046.32 5047.86 5055.72 T:twegift64locusaeadv1 15354.46 15358.29 15375.56 T:elephant160v1 17390.02 17464.92 17470.85 T:elephant176v1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 10.57 10.59 10.62 ascon128av12 14.73 14.74 14.75 T:xoodyakv1 15.35 15.35 15.35 ascon80pqv12 15.44 15.50 15.51 ascon128v12 22.56 22.59 22.59 T:gimli24v1 34.37 34.40 34.54 T:knot128v2 35.42 35.47 35.53 T:saeaes128a64t128v1 35.40 35.47 35.52 T:saeaes128a120t128v1 35.65 35.70 35.76 T:saeaes128a64t64v1 35.68 35.71 35.73 T:saeaes128a120t64v1 35.71 35.74 35.85 T:knot128v1 39.77 39.90 40.30 T:saeaes192a64t128v1 39.84 40.22 40.28 T:saeaes192a120t128v1 40.64 40.78 40.79 T:saeaes192a64t64v1 42.08 42.38 42.53 T:schwaemm256128v1 43.19 43.40 43.47 T:comet128aesv1 45.38 45.39 45.40 T:saeaes256a64t64v1 45.43 45.46 45.52 T:saeaes256a64t128v1 45.45 45.53 45.57 T:saeaes256a120t128v1 48.54 48.55 48.63 T:isapa128av20 54.14 54.20 54.43 T:giftcofb128v1 54.99 55.17 55.25 T:schwaemm192192v1 57.68 57.71 57.73 T:schwaemm256256v1 58.04 58.07 58.08 T:saturninctrcascadev2 60.87 60.90 60.92 T:knot256 63.79 64.50 64.52 T:schwaemm128128v1 64.97 65.26 65.51 T:isapa128v20 69.16 69.25 69.31 T:knot192 80.14 80.17 80.26 T:drygascon128k32 80.18 80.29 80.36 T:drygascon128k16 80.15 80.32 80.35 T:drygascon128k56 83.39 83.49 83.66 T:tinyjambu128 90.63 90.65 90.86 T:tinyjambu192 103.49 103.60 103.64 T:photonbeetleaead128rate128v1 102.83 105.29 106.34 T:grain128aead 106.14 106.20 106.21 T:tinyjambu256 110.30 110.33 110.52 T:drygascon256k32 114.78 114.86 115.03 T:spook128mu512v1 114.88 114.96 115.24 T:spook128su512v1 114.89 115.01 115.19 T:spook128su384v1 114.84 115.03 115.19 T:spook128mu384v1 118.94 119.58 120.42 T:sestatetweaes128v1 146.48 147.44 147.55 T:estatetweaes128v1 182.62 183.53 185.05 T:skinnyaeadtk3128128v1 183.87 183.95 183.97 T:mixfeed 196.20 196.82 198.36 romulusn 214.67 214.77 214.86 T:subterraneanv1 240.51 240.59 240.65 T:isapk128av20 258.66 259.51 261.83 T:romulusn1v1 260.87 261.35 262.65 T:elephant200v1 324.48 324.55 325.14 T:isapk128v20 331.19 332.32 336.28 T:comet64speckv1 355.76 356.19 357.66 romulusm 379.92 380.01 380.02 T:comet64chamv1 402.73 404.22 404.38 T:photonbeetleaead128rate32v1 415.97 416.13 416.47 T:comet128chamv1 471.99 473.27 475.09 T:romulusm1v1 558.64 559.24 560.28 T:pyjamask128aeadv1 602.38 602.59 602.77 T:pyjamask96aeadv1 723.04 723.29 723.46 T:romulusn3v1 762.62 765.17 768.12 romulust 812.99 815.05 817.77 T:spoc128sliscplight256v1 829.19 833.70 834.20 T:spix128v1 887.66 888.05 888.24 T:skinnyaeadtk296128v1 888.15 888.61 889.13 T:skinnyaeadtk29664v1 910.75 911.77 912.10 T:wageae128v1 977.61 977.96 978.29 T:sundaegift96v1 977.93 977.99 978.30 T:sundaegift64v1 977.93 978.01 978.22 T:sundaegift128v1 977.89 978.58 979.17 T:sundaegift0v1 1136.80 1137.25 1138.48 T:romulusm3v1 1208.46 1208.96 1209.47 T:romulusn2v1 1239.87 1241.50 1284.96 T:spoc64sliscplight192v1 1656.24 1661.57 1728.85 T:skinnyaeadtk312864v1 1658.42 1661.64 1701.38 T:skinnyaeadtk39664v1 1656.07 1661.65 1733.05 T:skinnyaeadtk396128v1 1665.48 1667.20 1682.65 T:paefforkskinnyb128t192n48v1 1669.50 1670.84 1684.74 T:saefforkskinnyb128t192n56v1 1667.81 1682.70 1683.75 T:paefforkskinnyb128t256n112v1 1669.38 1683.96 1686.12 T:saefforkskinnyb128t256n120v1 1900.05 1901.49 1904.97 T:romulusm2v1 1884.46 1906.41 1949.41 T:hyenav1 2115.29 2133.38 2142.33 T:aceae128v1 2971.52 2976.76 2989.45 T:paefforkskinnyb128t288n104v1 3810.33? 3905.57? 5325.80? T:estatetwegift128v1 4035.17 4036.93 4037.42 T:orangezestv1 4684.13 4685.47 4688.08 T:oribatida192v11 4819.37 4820.02 4822.17 T:oribatida256v11 4893.35 4928.98 4932.49 T:twegift64lotusaeadv1 5253.57 5258.33 5311.58 T:paefforkskinnyb64t192n48v1 5351.87 5353.86 5356.88 T:twegift64locusaeadv1 15354.45 15360.22 15376.54 T:elephant160v1 17390.58 17464.76 17470.90 T:elephant176v1

Cycles/byte for long+0 forgery 25% 50% 75% aead 10.58 10.59 10.61 ascon128av12 14.76 14.79 14.83 T:xoodyakv1 15.35 15.35 15.35 ascon80pqv12 15.47 15.50 15.51 ascon128v12 22.58 22.59 22.59 T:gimli24v1 31.66 31.67 31.69 T:isapa128av20 31.86 32.01 32.11 T:knot128v2 32.34 32.34 32.40 T:isapa128v20 35.67 36.65 36.65 T:knot128v1 37.61 37.67 37.73 T:saeaes128a64t128v1 37.64 37.68 37.74 T:saeaes128a120t128v1 37.66 37.71 37.79 T:saeaes128a64t64v1 37.77 37.80 37.85 T:saeaes128a120t64v1 41.96 42.04 42.54 T:saeaes192a64t128v1 41.98 42.42 42.46 T:saeaes192a120t128v1 42.63 42.82 42.86 T:saeaes192a64t64v1 43.01 43.17 43.36 T:comet128aesv1 43.10 43.75 43.89 T:schwaemm256128v1 47.40 47.42 47.45 T:saeaes256a64t64v1 47.45 47.50 47.55 T:saeaes256a64t128v1 47.46 47.57 47.64 T:saeaes256a120t128v1 54.18 54.21 54.45 T:giftcofb128v1 57.16 57.24 57.43 T:schwaemm192192v1 58.05 58.07 58.08 T:saturninctrcascadev2 59.68 59.71 60.00 T:schwaemm256256v1 60.90 60.90 60.92 T:knot256 65.22 65.28 65.90 T:schwaemm128128v1 69.17 69.23 69.29 T:knot192 80.14 80.15 80.26 T:drygascon128k32 80.20 80.31 80.34 T:drygascon128k16 80.18 80.32 80.39 T:drygascon128k56 83.39 83.39 83.49 T:tinyjambu128 90.62 90.63 90.85 T:tinyjambu192 103.43 103.54 103.56 T:photonbeetleaead128rate128v1 102.83 105.49 106.46 T:grain128aead 106.14 106.17 106.23 T:tinyjambu256 110.33 110.38 110.44 T:drygascon256k32 114.90 114.98 115.31 T:spook128mu512v1 114.89 115.07 115.30 T:spook128su512v1 114.96 115.11 115.31 T:spook128mu384v1 114.94 115.11 115.27 T:spook128su384v1 119.60 119.72 120.43 T:sestatetweaes128v1 146.50 147.36 147.54 T:estatetweaes128v1 160.64 160.75 160.92 T:isapk128av20 182.82 183.54 185.02 T:skinnyaeadtk3128128v1 183.90 183.94 184.01 T:mixfeed 196.26 196.71 197.11 romulusn 202.42 202.45 202.47 T:isapk128v20 214.76 214.81 214.93 T:subterraneanv1 246.57 248.12 249.77 romulust 258.71 259.02 261.75 T:romulusn1v1 260.88 261.22 262.67 T:elephant200v1 332.06 332.55 336.20 T:comet64speckv1 356.32 357.06 357.84 romulusm 379.87 379.94 380.73 T:comet64chamv1 403.43 403.88 404.26 T:photonbeetleaead128rate32v1 415.68 415.96 416.09 T:comet128chamv1 475.88 476.30 478.14 T:romulusm1v1 559.02 559.33 560.15 T:pyjamask128aeadv1 602.47 602.67 603.04 T:pyjamask96aeadv1 723.09 723.45 723.47 T:romulusn3v1 731.72? 747.65? 926.26? T:wageae128v1 813.53 817.88 819.41 T:spoc128sliscplight256v1 827.33 831.35 836.04 T:spix128v1 887.69 888.01 888.28 T:skinnyaeadtk296128v1 888.00 888.48 889.18 T:skinnyaeadtk29664v1 977.62 977.96 978.35 T:sundaegift96v1 977.92 977.98 978.28 T:sundaegift64v1 977.89 977.98 978.20 T:sundaegift128v1 977.91 978.38 979.18 T:sundaegift0v1 1136.95 1137.51 1138.51 T:romulusm3v1 1208.46 1208.95 1209.48 T:romulusn2v1 1240.51 1253.38 1285.69 T:spoc64sliscplight192v1 1656.27 1661.56 1728.89 T:skinnyaeadtk312864v1 1656.36 1661.66 1733.10 T:skinnyaeadtk396128v1 1658.99 1662.35 1701.43 T:skinnyaeadtk39664v1 1665.52 1667.27 1682.10 T:paefforkskinnyb128t192n48v1 1669.17 1670.82 1685.18 T:saefforkskinnyb128t192n56v1 1667.90 1682.15 1683.85 T:paefforkskinnyb128t256n112v1 1668.49 1684.12 1685.61 T:saefforkskinnyb128t256n120v1 1900.06 1901.17 1905.24 T:romulusm2v1 1888.17 1906.40 1949.35 T:hyenav1 2105.84 2118.67 2125.87 T:aceae128v1 2970.29 2977.09 2989.46 T:paefforkskinnyb128t288n104v1 3811.00? 3905.35? 5325.97? T:estatetwegift128v1 4036.41 4037.01 4037.42 T:orangezestv1 4683.72 4685.43 4687.27 T:oribatida192v11 4818.96 4821.32 4822.28 T:oribatida256v11 4893.10 4929.62 4933.02 T:twegift64lotusaeadv1 5252.96 5259.96 5313.64 T:paefforkskinnyb64t192n48v1 5348.17 5352.76 5357.70 T:twegift64locusaeadv1 15353.69 15357.55 15375.66 T:elephant160v1 17392.11 17464.70 17471.07 T:elephant176v1

Cycles/byte for long+long encrypt 25% 50% 75% aead 10.65 10.67 10.69 ascon128av12 11.43 11.45 11.50 T:xoodyakv1 15.41 15.42 15.42 ascon128v12 15.45 15.47 15.47 ascon80pqv12 19.63 19.64 19.65 T:gimli24v1 26.77 26.79 26.93 T:saeaes128a120t64v1 26.87 26.91 26.93 T:saeaes128a120t128v1 30.62 30.66 30.82 T:saeaes192a120t128v1 33.48 33.53 33.80 T:knot128v2 33.89 34.13 34.17 T:saeaes128a64t64v1 34.14 34.16 34.17 T:saeaes128a64t128v1 34.31 34.35 34.39 T:saeaes256a120t128v1 35.46 35.51 35.62 T:knot128v1 38.68 38.73 38.74 T:saeaes192a64t64v1 39.04 39.06 39.11 T:saeaes192a64t128v1 40.41 40.44 40.47 T:isapa128av20 41.01 41.14 41.25 T:comet128aesv1 42.06 42.10 42.14 T:schwaemm256128v1 43.60 43.65 43.72 T:saeaes256a64t64v1 43.60 43.79 43.81 T:saeaes256a64t128v1 48.80 48.83 48.86 T:isapa128v20 53.79 53.83 53.90 T:giftcofb128v1 53.85 53.98 54.06 T:schwaemm192192v1 56.12 56.21 56.26 T:schwaemm256256v1 57.49 57.51 57.53 T:tinyjambu128 58.03 58.05 58.05 T:saturninctrcascadev2 59.54 59.87 59.89 T:tinyjambu192 61.21 61.28 61.31 T:knot256 60.88 61.61 61.61 T:schwaemm128128v1 68.76 68.82 68.93 T:tinyjambu256 69.18 69.34 69.93 T:knot192 79.12 79.17 79.27 T:drygascon128k56 79.19 79.24 79.30 T:drygascon128k16 79.15 79.25 79.46 T:drygascon128k32 82.42 82.51 83.25 T:sestatetweaes128v1 100.19 100.28 100.30 T:grain128aead 101.11 101.14 101.17 T:photonbeetleaead128rate128v1 109.92 109.93 109.94 T:drygascon256k32 111.48 112.28 112.37 T:estatetweaes128v1 116.72 116.76 117.21 T:spook128mu512v1 116.69 117.12 117.32 T:spook128su384v1 116.72 117.17 117.30 T:spook128mu384v1 117.12 117.53 118.02 T:spook128su512v1 177.84 178.60 178.84 romulusn 181.36 181.38 181.41 T:mixfeed 186.18 186.55 187.41 T:skinnyaeadtk3128128v1 196.35 196.56 198.33 T:elephant200v1 200.38 200.49 200.52 T:isapk128av20 200.93 201.24 201.54 T:subterraneanv1 235.11 235.33 237.73 T:romulusn1v1 258.77 260.26 261.18 romulusm 263.30 263.33 263.70 T:isapk128v20 329.64 331.46 333.23 T:comet64speckv1 341.96 342.14 343.50 T:romulusm1v1 377.53 377.57 377.63 T:comet64chamv1 400.54 400.64 400.74 T:photonbeetleaead128rate32v1 413.88 414.31 414.54 T:comet128chamv1 508.56 511.31 512.79 romulust 549.31 549.51 549.70 T:skinnyaeadtk29664v1 549.54 549.59 549.88 T:skinnyaeadtk296128v1 556.64 557.10 557.60 T:pyjamask128aeadv1 566.61 566.73 566.79 T:romulusn3v1 596.37 598.10 598.68 T:pyjamask96aeadv1 733.15 733.32 733.43 T:sundaegift64v1 733.17 733.32 733.54 T:sundaegift0v1 733.10 733.40 733.45 T:sundaegift96v1 733.71 735.11 735.34 T:sundaegift128v1 774.12 775.05 775.37 T:romulusm3v1 811.37 815.34 817.18 T:spoc128sliscplight256v1 822.01 827.69 831.67 T:spix128v1 895.76 898.62 932.36 T:wageae128v1 943.06 945.00 945.65 T:saefforkskinnyb128t256n120v1 945.73 946.09 947.36 T:paefforkskinnyb128t256n112v1 946.14 946.59 946.82 T:paefforkskinnyb128t192n48v1 943.72 947.48 948.28 T:saefforkskinnyb128t192n56v1 948.69 948.97 951.28 T:romulusn2v1 958.02 958.12 958.28 T:skinnyaeadtk39664v1 958.10 958.19 958.36 T:skinnyaeadtk396128v1 953.87 958.23 1017.87 T:skinnyaeadtk312864v1 1257.91 1273.73 1324.60 T:spoc64sliscplight192v1 1291.20 1298.70 1344.08 T:romulusm2v1 1380.90 1383.03 1396.22 T:paefforkskinnyb128t288n104v1 1904.67 1913.24 1921.94 T:hyenav1 2176.20 2177.72 2187.84 T:aceae128v1 2279.11 2324.14 2434.86 T:paefforkskinnyb64t192n48v1 2834.91? 2936.69? 4002.23? T:estatetwegift128v1 3512.28 3512.86 3515.76 T:oribatida192v11 3610.26 3613.88 3615.25 T:oribatida256v11 3688.18 3690.90 3703.71 T:twegift64lotusaeadv1 3846.40 3850.95 3858.87 T:twegift64locusaeadv1 4029.75 4034.23 4034.62 T:orangezestv1 11518.71 11526.14 11536.50 T:elephant160v1 13008.36 13048.72 13053.07 T:elephant176v1

Cycles/byte for long+long decrypt 25% 50% 75% aead 10.50 10.52 10.52 ascon128av12 11.53 11.56 11.59 T:xoodyakv1 15.40 15.40 15.44 ascon128v12 15.41 15.42 15.43 ascon80pqv12 20.32 20.34 20.38 T:gimli24v1 27.00 27.04 27.06 T:saeaes128a120t128v1 27.14 27.16 27.16 T:saeaes128a120t64v1 30.53 30.75 30.79 T:saeaes192a120t128v1 33.50 33.74 33.89 T:knot128v2 34.28 34.30 34.34 T:saeaes128a64t128v1 34.28 34.38 34.42 T:saeaes128a64t64v1 34.79 34.82 34.83 T:saeaes256a120t128v1 35.39 35.47 35.48 T:knot128v1 38.85 38.88 39.19 T:saeaes192a64t128v1 39.24 39.36 39.36 T:saeaes192a64t64v1 40.41 40.42 40.45 T:isapa128av20 41.11 41.15 41.24 T:comet128aesv1 41.84 42.04 42.12 T:schwaemm256128v1 44.08 44.13 44.15 T:saeaes256a64t64v1 44.12 44.21 44.24 T:saeaes256a64t128v1 48.74 48.81 48.92 T:isapa128v20 53.95 54.05 54.16 T:giftcofb128v1 54.87 54.97 55.05 T:schwaemm192192v1 56.80 56.81 56.84 T:schwaemm256256v1 57.65 57.67 57.69 T:saturninctrcascadev2 57.95 58.02 58.02 T:tinyjambu128 61.00 61.16 61.20 T:tinyjambu192 61.21 61.22 61.31 T:knot256 62.50 62.55 62.68 T:schwaemm128128v1 69.07 69.16 69.20 T:knot192 69.82 69.84 69.88 T:tinyjambu256 79.06 79.15 79.18 T:drygascon128k56 79.12 79.15 79.16 T:drygascon128k16 79.07 79.15 79.17 T:drygascon128k32 82.43 82.76 83.15 T:sestatetweaes128v1 101.01 101.18 101.25 T:photonbeetleaead128rate128v1 101.40 102.20 102.33 T:grain128aead 108.89 109.87 109.99 T:estatetweaes128v1 109.97 110.01 110.03 T:drygascon256k32 115.68 115.74 116.46 T:spook128mu512v1 115.67 115.82 116.16 T:spook128su512v1 115.74 115.86 115.90 T:spook128su384v1 115.70 116.42 116.52 T:spook128mu384v1 177.86 178.20 178.88 romulusn 181.96 181.99 182.37 T:mixfeed 186.84 187.22 187.44 T:skinnyaeadtk3128128v1 196.27 196.71 198.22 T:elephant200v1 200.47 200.52 200.76 T:isapk128av20 200.87 200.93 200.95 T:subterraneanv1 234.51 235.63 235.92 T:romulusn1v1 258.18 258.90 260.36 romulusm 263.31 263.33 263.61 T:isapk128v20 328.96 330.13 334.11 T:comet64speckv1 341.96 342.22 343.42 T:romulusm1v1 377.66 377.75 377.84 T:comet64chamv1 401.34 401.85 401.97 T:photonbeetleaead128rate32v1 413.64 413.68 414.45 T:comet128chamv1 503.41 506.24 507.79 romulust 557.99 559.37 560.85 T:pyjamask128aeadv1 567.80 567.94 568.03 T:romulusn3v1 599.31 600.57 600.80 T:pyjamask96aeadv1 719.16 719.29 719.63 T:skinnyaeadtk296128v1 719.37 719.76 719.99 T:skinnyaeadtk29664v1 732.96 733.04 733.30 T:sundaegift128v1 732.94 733.09 733.31 T:sundaegift96v1 733.03 733.13 733.33 T:sundaegift64v1 732.98 733.21 734.43 T:sundaegift0v1 775.13 775.32 775.79 T:romulusm3v1 816.44 820.22 842.60 T:spoc128sliscplight256v1 821.72 834.31 861.20 T:spix128v1 898.08 898.28 898.89 T:wageae128v1 949.63 949.90 950.67 T:romulusn2v1 1205.64 1206.06 1211.68 T:saefforkskinnyb128t192n56v1 1203.94 1206.49 1210.76 T:paefforkskinnyb128t192n48v1 1201.70 1210.70 1211.37 T:saefforkskinnyb128t256n120v1 1203.30 1211.21 1220.08 T:paefforkskinnyb128t256n112v1 1261.82 1276.59 1341.31 T:spoc64sliscplight192v1 1295.28 1296.12 1299.24 T:romulusm2v1 1309.87 1310.15 1310.38 T:skinnyaeadtk396128v1 1305.64 1310.21 1373.59 T:skinnyaeadtk312864v1 1309.30 1312.02 1328.38 T:skinnyaeadtk39664v1 1896.60 1913.84 1927.36 T:hyenav1 2031.05 2032.31 2039.10 T:paefforkskinnyb128t288n104v1 2175.84 2179.41 2194.20 T:aceae128v1 2848.06? 2936.15? 3995.97? T:estatetwegift128v1 3512.80 3515.29 3516.53 T:oribatida192v11 3515.38 3595.71 3639.73 T:paefforkskinnyb64t192n48v1 3612.34 3613.04 3613.67 T:oribatida256v11 3687.05 3698.78 3700.60 T:twegift64lotusaeadv1 3995.07 3999.24 4010.37 T:twegift64locusaeadv1 4032.85 4034.21 4034.77 T:orangezestv1 11517.65 11525.95 11537.13 T:elephant160v1 13008.30 13047.92 13051.92 T:elephant176v1

Cycles/byte for long+long forgery 25% 50% 75% aead 10.50 10.51 10.52 ascon128av12 11.50 11.59 11.60 T:xoodyakv1 15.42 15.42 15.42 ascon80pqv12 15.40 15.42 15.44 ascon128v12 20.34 20.34 20.34 T:gimli24v1 28.11 28.14 28.18 T:saeaes128a120t128v1 28.18 28.20 28.20 T:saeaes128a120t64v1 31.63 31.85 31.86 T:saeaes192a120t128v1 31.98 31.98 31.99 T:isapa128av20 32.37 32.39 32.41 T:isapa128v20 32.26 32.43 32.63 T:knot128v2 35.28 35.39 35.43 T:saeaes128a64t64v1 35.37 35.40 35.43 T:saeaes128a64t128v1 35.43 35.45 35.46 T:knot128v1 35.78 35.80 35.88 T:saeaes256a120t128v1 39.94 39.99 40.30 T:saeaes192a64t128v1 40.35 40.38 40.40 T:saeaes192a64t64v1 41.06 41.10 41.17 T:comet128aesv1 42.49 42.61 42.71 T:schwaemm256128v1 45.07 45.16 45.17 T:saeaes256a64t64v1 45.20 45.23 45.42 T:saeaes256a64t128v1 53.94 54.00 54.16 T:giftcofb128v1 55.95 55.99 56.06 T:schwaemm192192v1 57.66 57.67 57.69 T:saturninctrcascadev2 57.80 57.82 57.93 T:schwaemm256256v1 57.97 58.02 58.05 T:tinyjambu128 60.90 61.11 61.14 T:tinyjambu192 61.21 61.23 61.31 T:knot256 63.30 63.36 63.37 T:schwaemm128128v1 69.12 69.14 69.18 T:knot192 69.82 69.84 69.87 T:tinyjambu256 79.12 79.14 79.17 T:drygascon128k16 79.06 79.16 79.24 T:drygascon128k56 79.06 79.16 79.17 T:drygascon128k32 82.02 82.78 83.15 T:sestatetweaes128v1 100.98 101.09 101.17 T:photonbeetleaead128rate128v1 100.29 102.06 102.29 T:grain128aead 108.90 109.87 109.97 T:estatetweaes128v1 110.00 110.04 110.06 T:drygascon256k32 115.72 115.80 116.54 T:spook128mu512v1 115.72 115.82 116.34 T:spook128mu384v1 115.75 115.89 116.64 T:spook128su384v1 115.75 115.94 116.00 T:spook128su512v1 160.56 160.57 160.60 T:isapk128av20 178.01 178.52 179.05 romulusn 181.97 182.02 182.40 T:mixfeed 187.23 187.48 188.27 T:skinnyaeadtk3128128v1 196.25 196.47 198.20 T:elephant200v1 200.88 200.93 200.97 T:subterraneanv1 202.09 202.29 202.53 T:isapk128v20 235.55 235.87 237.73 T:romulusn1v1 247.79 249.02 250.11 romulust 258.08 259.38 259.89 romulusm 328.95 330.04 334.07 T:comet64speckv1 342.36 342.55 343.79 T:romulusm1v1 377.63 377.69 377.82 T:comet64chamv1 401.15 401.83 401.93 T:photonbeetleaead128rate32v1 413.59 413.62 414.02 T:comet128chamv1 558.28 559.37 560.06 T:pyjamask128aeadv1 567.82 567.98 568.03 T:romulusn3v1 600.26 600.56 600.73 T:pyjamask96aeadv1 719.20 719.33 719.58 T:skinnyaeadtk296128v1 719.35 719.58 720.39 T:skinnyaeadtk29664v1 732.88 733.07 733.28 T:sundaegift96v1 733.02 733.07 733.25 T:sundaegift128v1 733.05 733.08 733.35 T:sundaegift64v1 732.93 733.16 734.42 T:sundaegift0v1 721.32? 734.95? 911.21? T:wageae128v1 775.20 775.38 775.82 T:romulusm3v1 817.36 820.18 849.63 T:spoc128sliscplight256v1 829.65 837.65 854.09 T:spix128v1 949.74 950.08 950.80 T:romulusn2v1 1205.74 1206.16 1210.89 T:saefforkskinnyb128t192n56v1 1203.59 1207.48 1210.78 T:paefforkskinnyb128t192n48v1 1201.66 1210.29 1210.96 T:saefforkskinnyb128t256n120v1 1202.93 1211.16 1220.41 T:paefforkskinnyb128t256n112v1 1261.80 1276.27 1280.14 T:spoc64sliscplight192v1 1295.29 1296.23 1299.28 T:romulusm2v1 1305.65 1310.12 1310.79 T:skinnyaeadtk312864v1 1309.96 1310.22 1310.44 T:skinnyaeadtk396128v1 1309.47 1311.77 1328.57 T:skinnyaeadtk39664v1 1896.59 1913.75 1927.36 T:hyenav1 2030.80 2031.69 2039.29 T:paefforkskinnyb128t288n104v1 2115.07 2123.63 2133.39 T:aceae128v1 2847.75? 2936.24? 3996.58? T:estatetwegift128v1 3512.68 3513.06 3515.75 T:oribatida192v11 3514.64 3597.53 3637.82 T:paefforkskinnyb64t192n48v1 3611.94 3612.73 3613.66 T:oribatida256v11 3688.99 3699.23 3700.76 T:twegift64lotusaeadv1 3993.78 4000.02 4003.71 T:twegift64locusaeadv1 4033.68 4034.35 4034.92 T:orangezestv1 11517.74 11526.51 11536.50 T:elephant160v1 13011.52 13048.26 13052.83 T:elephant176v1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 8.20 8.27 8.35 T:xoodyakv1 10.51 10.54 10.56 ascon128av12 15.34 15.36 15.36 ascon80pqv12 15.35 15.36 15.36 ascon128v12 18.26 18.28 18.29 T:gimli24v1 18.58 18.59 18.61 T:saeaes128a120t64v1 18.58 18.62 18.65 T:saeaes128a120t128v1 21.36 21.38 21.41 T:saeaes192a120t128v1 24.01 24.05 24.12 T:saeaes256a120t128v1 31.47 31.68 31.75 T:tinyjambu192 32.24 32.25 32.25 T:isapa128av20 32.36 32.39 32.41 T:isapa128v20 32.35 32.43 33.46 T:knot128v2 32.53 32.56 32.71 T:tinyjambu128 32.92 33.10 33.12 T:saeaes128a64t64v1 33.09 33.12 33.12 T:saeaes128a64t128v1 33.48 33.50 33.53 T:tinyjambu256 34.84 34.89 34.99 T:knot128v1 37.89 37.91 37.92 T:saeaes192a64t64v1 37.90 37.94 38.07 T:saeaes192a64t128v1 37.90 38.16 38.25 T:comet128aesv1 41.73 41.83 41.90 T:schwaemm256128v1 42.74 42.84 42.92 T:saeaes256a64t64v1 42.70 42.85 42.98 T:saeaes256a64t128v1 45.33 45.62 45.64 T:sestatetweaes128v1 53.63 53.87 54.09 T:schwaemm192192v1 53.72 53.87 53.90 T:giftcofb128v1 55.67 55.70 55.79 T:schwaemm256256v1 57.26 57.27 57.29 T:saturninctrcascadev2 61.31 61.32 61.33 T:schwaemm128128v1 61.41 61.42 61.44 T:knot256 69.11 70.41 70.47 T:knot192 73.49 74.30 74.39 T:estatetweaes128v1 77.86 78.06 78.13 T:drygascon128k56 77.94 78.09 78.54 T:drygascon128k32 77.92 78.09 78.23 T:drygascon128k16 97.54 97.58 97.59 T:grain128aead 98.63 98.76 98.84 T:photonbeetleaead128rate128v1 109.61 109.64 109.67 T:drygascon256k32 116.71 116.77 116.78 T:spook128mu512v1 116.71 116.78 116.93 T:spook128mu384v1 116.71 116.93 117.25 T:spook128su384v1 116.82 117.56 118.01 T:spook128su512v1 133.06 133.20 134.88 T:elephant200v1 159.98 160.35 160.59 romulusn 160.32 160.39 160.89 T:isapk128av20 160.77 161.42 162.54 romulusm 179.98 180.04 180.18 T:mixfeed 187.00 187.11 187.42 T:subterraneanv1 190.62 191.31 192.77 T:skinnyaeadtk3128128v1 202.13 202.14 202.18 T:isapk128v20 210.61 213.28 214.47 T:romulusn1v1 213.10 213.46 215.08 T:romulusm1v1 247.46 247.96 250.54 romulust 327.28 328.86 331.45 T:comet64speckv1 375.30 375.36 375.41 T:comet64chamv1 399.42 399.51 399.60 T:photonbeetleaead128rate32v1 412.42 412.47 412.82 T:romulusn3v1 412.41 412.61 412.89 T:comet128chamv1 412.49 413.48 413.57 T:romulusm3v1 488.37 488.41 488.46 T:sundaegift0v1 488.34 488.42 488.61 T:sundaegift96v1 488.38 488.42 488.86 T:sundaegift64v1 488.34 489.96 490.06 T:sundaegift128v1 550.52 550.56 550.95 T:skinnyaeadtk29664v1 550.92 550.96 551.13 T:skinnyaeadtk296128v1 556.91 557.66 558.71 T:pyjamask128aeadv1 591.19 595.63 595.88 T:pyjamask96aeadv1 690.79 692.80 693.21 T:romulusn2v1 688.11 693.02 743.50 T:romulusm2v1 735.79 736.71 737.19 T:saefforkskinnyb128t256n120v1 736.64 736.96 738.83 T:saefforkskinnyb128t192n56v1 738.98 739.61 749.92 T:paefforkskinnyb128t256n112v1 739.37 740.27 749.69 T:paefforkskinnyb128t192n48v1 804.89 807.27 809.32 T:spoc128sliscplight256v1 821.33 828.41 835.24 T:spix128v1 884.96 890.40 955.64 T:wageae128v1 958.89 958.95 959.31 T:skinnyaeadtk39664v1 954.50 959.25 1018.91 T:skinnyaeadtk312864v1 959.21 959.26 959.44 T:skinnyaeadtk396128v1 1083.35 1084.38 1094.51 T:paefforkskinnyb128t288n104v1 1249.60 1258.43 1272.23 T:spoc64sliscplight192v1 1775.41 1806.84 1809.31 T:paefforkskinnyb64t192n48v1 1904.26 1905.73 1936.83 T:hyenav1 1889.26? 1967.36? 2663.70? T:estatetwegift128v1 2104.13 2120.69 2125.78 T:aceae128v1 2338.89 2340.64 2342.04 T:oribatida192v11 2403.69 2406.40 2407.48 T:oribatida256v11 2450.12 2452.05 2473.59 T:twegift64lotusaeadv1 2640.18 2643.11 2643.82 T:twegift64locusaeadv1 4031.34 4032.28 4032.61 T:orangezestv1 7695.22 7697.83 7698.70 T:elephant160v1 8596.97 8633.94 8637.12 T:elephant176v1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 8.20 8.23 8.23 T:xoodyakv1 10.42 10.46 10.47 ascon128av12 15.32 15.33 15.38 ascon128v12 15.44 15.44 15.44 ascon80pqv12 18.03 18.07 18.11 T:gimli24v1 18.57 18.59 18.60 T:saeaes128a120t64v1 18.60 18.62 18.65 T:saeaes128a120t128v1 21.36 21.38 21.39 T:saeaes192a120t128v1 24.05 24.10 24.10 T:saeaes256a120t128v1 31.68 31.74 31.80 T:tinyjambu192 32.23 32.25 32.25 T:isapa128av20 32.33 32.37 32.38 T:isapa128v20 32.52 32.52 32.58 T:tinyjambu128 32.36 32.71 33.04 T:knot128v2 32.93 33.08 33.11 T:saeaes128a64t64v1 33.09 33.12 33.16 T:saeaes128a64t128v1 33.48 33.53 33.53 T:tinyjambu256 34.73 35.16 35.47 T:knot128v1 37.90 37.91 37.93 T:saeaes192a64t64v1 37.93 38.01 38.11 T:saeaes192a64t128v1 38.81 39.05 39.17 T:comet128aesv1 41.64 41.76 41.88 T:schwaemm256128v1 42.74 42.85 42.92 T:saeaes256a64t64v1 42.73 42.86 42.99 T:saeaes256a64t128v1 45.42 45.81 45.84 T:sestatetweaes128v1 53.50 53.74 53.79 T:giftcofb128v1 54.72 54.88 54.93 T:schwaemm192192v1 55.87 55.97 56.00 T:schwaemm256256v1 57.26 57.28 57.30 T:saturninctrcascadev2 61.00 61.21 61.27 T:schwaemm128128v1 62.23 62.25 62.34 T:knot256 69.02 69.06 69.08 T:knot192 71.38 72.36 72.44 T:estatetweaes128v1 77.83 77.97 78.08 T:drygascon128k56 77.94 77.99 78.09 T:drygascon128k16 77.96 78.08 78.11 T:drygascon128k32 97.77 97.89 99.99 T:grain128aead 98.46 98.64 98.71 T:photonbeetleaead128rate128v1 109.62 109.64 109.65 T:drygascon256k32 117.23 117.95 118.02 T:spook128mu384v1 117.05 117.96 118.07 T:spook128su512v1 117.25 118.00 118.02 T:spook128mu512v1 117.36 118.01 118.05 T:spook128su384v1 132.95 133.16 134.82 T:elephant200v1 159.69 160.27 160.70 romulusn 160.34 160.38 160.40 T:isapk128av20 160.16 160.83 161.50 romulusm 179.99 180.05 180.09 T:mixfeed 186.97 187.06 187.30 T:subterraneanv1 191.42 191.81 192.28 T:skinnyaeadtk3128128v1 202.11 202.14 202.18 T:isapk128v20 211.77 212.39 212.92 T:romulusm1v1 211.16 212.86 214.69 T:romulusn1v1 247.24 248.88 250.25 romulust 326.43 327.55 331.68 T:comet64speckv1 375.30 375.39 375.60 T:comet64chamv1 398.44 399.50 399.64 T:photonbeetleaead128rate32v1 412.45 412.60 412.63 T:romulusn3v1 412.38 412.65 412.88 T:comet128chamv1 412.84 412.89 413.64 T:romulusm3v1 487.25 487.28 487.33 T:sundaegift64v1 487.22 487.31 487.85 T:sundaegift128v1 487.28 487.33 487.88 T:sundaegift96v1 487.13 487.34 489.90 T:sundaegift0v1 550.33 550.38 550.43 T:skinnyaeadtk296128v1 550.56 550.77 550.89 T:skinnyaeadtk29664v1 557.50 557.81 558.57 T:pyjamask128aeadv1 591.68 592.79 593.18 T:pyjamask96aeadv1 692.04 692.70 693.18 T:romulusm2v1 692.18 692.92 693.25 T:romulusn2v1 735.31 736.48 737.44 T:saefforkskinnyb128t192n56v1 735.97 736.55 736.74 T:saefforkskinnyb128t256n120v1 738.44 739.11 749.85 T:paefforkskinnyb128t256n112v1 740.15 740.64 742.11 T:paefforkskinnyb128t192n48v1 809.12 809.85 810.42 T:spoc128sliscplight256v1 822.25 834.50 871.70 T:spix128v1 889.34 889.61 890.11 T:wageae128v1 958.83 958.89 959.14 T:skinnyaeadtk39664v1 958.89 959.04 959.40 T:skinnyaeadtk396128v1 954.51 959.27 1018.53 T:skinnyaeadtk312864v1 1085.80 1086.32 1087.24 T:paefforkskinnyb128t288n104v1 1255.56 1265.59 1279.30 T:spoc64sliscplight192v1 1771.80 1779.72 1914.46 T:paefforkskinnyb64t192n48v1 1888.43 1905.70 1937.89 T:hyenav1 1884.19? 1967.36? 2662.48? T:estatetwegift128v1 2102.15 2108.36 2136.77 T:aceae128v1 2340.63 2342.66 2345.47 T:oribatida192v11 2404.76 2406.06 2407.04 T:oribatida256v11 2466.33 2469.86 2470.39 T:twegift64lotusaeadv1 2640.38 2643.04 2643.98 T:twegift64locusaeadv1 4030.96 4032.53 4032.81 T:orangezestv1 7694.31 7696.84 7698.10 T:elephant160v1 8596.86 8632.92 8637.22 T:elephant176v1

Cycles/byte for 0+long forgery 25% 50% 75% aead 8.20 8.23 8.27 T:xoodyakv1 10.41 10.46 10.47 ascon128av12 15.32 15.34 15.38 ascon128v12 15.44 15.44 15.44 ascon80pqv12 18.02 18.08 18.11 T:gimli24v1 18.55 18.59 18.62 T:saeaes128a120t64v1 18.59 18.62 18.65 T:saeaes128a120t128v1 21.37 21.39 21.41 T:saeaes192a120t128v1 24.04 24.07 24.10 T:saeaes256a120t128v1 31.54 31.69 31.80 T:tinyjambu192 32.23 32.24 32.24 T:isapa128av20 32.36 32.38 32.40 T:isapa128v20 32.52 32.53 32.54 T:tinyjambu128 32.65 32.70 33.06 T:knot128v2 32.94 33.11 33.13 T:saeaes128a64t64v1 33.09 33.12 33.15 T:saeaes128a64t128v1 33.48 33.52 33.56 T:tinyjambu256 34.96 35.16 35.47 T:knot128v1 37.88 37.91 37.95 T:saeaes192a64t64v1 37.92 37.99 38.09 T:saeaes192a64t128v1 38.77 39.04 39.10 T:comet128aesv1 41.65 41.78 41.88 T:schwaemm256128v1 42.74 42.82 42.93 T:saeaes256a64t64v1 42.72 42.89 42.98 T:saeaes256a64t128v1 45.43 45.78 45.85 T:sestatetweaes128v1 53.72 53.88 53.89 T:giftcofb128v1 54.73 54.84 54.93 T:schwaemm192192v1 55.87 55.97 56.00 T:schwaemm256256v1 57.28 57.28 57.30 T:saturninctrcascadev2 61.03 61.21 61.24 T:schwaemm128128v1 61.69 62.23 62.34 T:knot256 69.05 69.07 69.07 T:knot192 71.38 72.36 72.42 T:estatetweaes128v1 77.83 77.97 78.08 T:drygascon128k56 77.95 77.99 78.09 T:drygascon128k16 77.96 78.10 78.11 T:drygascon128k32 97.74 97.83 97.94 T:grain128aead 98.44 98.64 98.69 T:photonbeetleaead128rate128v1 109.60 109.63 109.67 T:drygascon256k32 116.69 117.61 117.94 T:spook128mu512v1 117.30 117.95 118.04 T:spook128mu384v1 117.34 117.97 118.04 T:spook128su512v1 117.54 118.00 118.03 T:spook128su384v1 132.95 133.15 134.83 T:elephant200v1 159.42 160.01 160.52 romulusn 160.36 160.38 160.41 T:isapk128av20 160.07 161.01 161.59 romulusm 180.00 180.05 180.09 T:mixfeed 186.96 187.10 187.14 T:subterraneanv1 191.41 191.71 192.15 T:skinnyaeadtk3128128v1 202.12 202.14 202.15 T:isapk128v20 212.25 212.74 213.69 T:romulusm1v1 212.59 213.03 216.43 T:romulusn1v1 247.10 248.21 248.95 romulust 326.69 327.70 331.69 T:comet64speckv1 375.31 375.38 375.40 T:comet64chamv1 398.88 399.52 399.65 T:photonbeetleaead128rate32v1 412.44 412.57 413.12 T:comet128chamv1 412.47 412.60 412.62 T:romulusn3v1 412.79 412.86 413.62 T:romulusm3v1 487.26 487.29 487.90 T:sundaegift64v1 487.22 487.29 487.94 T:sundaegift128v1 487.13 487.30 487.37 T:sundaegift96v1 487.17 487.46 489.78 T:sundaegift0v1 550.32 550.38 550.48 T:skinnyaeadtk296128v1 550.54 550.77 550.80 T:skinnyaeadtk29664v1 557.97 558.48 558.54 T:pyjamask128aeadv1 592.34 592.72 593.24 T:pyjamask96aeadv1 691.86 692.65 693.17 T:romulusm2v1 692.16 692.93 693.28 T:romulusn2v1 699.97? 721.40? 906.42? T:wageae128v1 734.92 736.31 737.35 T:saefforkskinnyb128t192n56v1 735.81 736.51 736.74 T:saefforkskinnyb128t256n120v1 738.44 739.02 749.89 T:paefforkskinnyb128t256n112v1 739.05 740.56 742.29 T:paefforkskinnyb128t192n48v1 809.15 811.64 813.72 T:spoc128sliscplight256v1 823.15 834.19 859.45 T:spix128v1 958.80 958.84 959.21 T:skinnyaeadtk39664v1 958.89 958.96 959.51 T:skinnyaeadtk396128v1 954.49 959.30 1018.52 T:skinnyaeadtk312864v1 1085.80 1086.27 1086.51 T:paefforkskinnyb128t288n104v1 1257.39 1278.12 1279.86 T:spoc64sliscplight192v1 1770.71 1778.06 1914.46 T:paefforkskinnyb64t192n48v1 1888.07 1905.49 1937.61 T:hyenav1 1884.13? 1967.44? 2662.36? T:estatetwegift128v1 2103.93 2108.31 2121.25 T:aceae128v1 2339.86 2342.17 2344.93 T:oribatida192v11 2404.70 2405.71 2406.47 T:oribatida256v11 2467.31 2469.87 2470.86 T:twegift64lotusaeadv1 2640.19 2642.82 2644.13 T:twegift64locusaeadv1 4031.65 4032.46 4032.81 T:orangezestv1 7694.53 7696.80 7698.12 T:elephant160v1 8596.59 8632.84 8636.87 T:elephant176v1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 10.91 10.92 10.93 ascon128av12 11.82 11.82 11.84 T:xoodyakv1 15.65 15.66 15.72 ascon128v12 15.70 15.70 15.72 ascon80pqv12 19.96 19.97 19.98 T:gimli24v1 27.02 27.03 27.15 T:saeaes128a120t64v1 27.14 27.14 27.15 T:saeaes128a120t128v1 30.90 30.92 31.08 T:saeaes192a120t128v1 34.12 34.33 34.35 T:saeaes128a64t64v1 34.33 34.36 34.37 T:saeaes128a64t128v1 34.42 34.50 34.77 T:knot128v2 34.68 34.71 34.72 T:saeaes256a120t128v1 35.89 35.91 35.92 T:knot128v1 38.80 38.94 38.97 T:saeaes192a64t64v1 39.25 39.27 39.32 T:saeaes192a64t128v1 41.38 41.49 41.72 T:comet128aesv1 43.22 43.29 43.31 T:schwaemm256128v1 43.38 43.38 43.45 T:isapa128av20 43.90 43.91 43.95 T:saeaes256a64t64v1 43.95 44.03 44.05 T:saeaes256a64t128v1 54.42 54.45 54.47 T:giftcofb128v1 55.29 55.35 55.43 T:schwaemm192192v1 57.77 57.80 57.84 T:schwaemm256256v1 57.95 57.96 58.02 T:tinyjambu128 60.00 60.26 60.31 T:tinyjambu192 60.49 60.51 60.51 T:saturninctrcascadev2 62.40 62.41 62.41 T:schwaemm128128v1 62.55 62.57 62.59 T:knot256 69.28 69.35 69.39 T:tinyjambu256 70.31 70.43 70.89 T:knot192 71.09 71.10 71.30 T:isapa128v20 79.74 79.78 79.90 T:drygascon128k16 79.75 79.78 79.84 T:drygascon128k56 79.71 79.79 79.97 T:drygascon128k32 83.29 83.36 84.03 T:sestatetweaes128v1 100.79 100.79 100.82 T:grain128aead 101.54 101.74 101.77 T:photonbeetleaead128rate128v1 111.17 111.17 111.18 T:drygascon256k32 112.13 112.78 112.81 T:estatetweaes128v1 119.39 119.79 119.82 T:spook128mu384v1 119.41 119.80 119.84 T:spook128mu512v1 119.80 119.91 120.14 T:spook128su384v1 119.71 120.06 120.52 T:spook128su512v1 179.77 180.17 180.90 romulusn 185.18 185.20 185.36 T:mixfeed 190.29 190.55 191.07 T:skinnyaeadtk3128128v1 200.79 200.83 202.35 T:elephant200v1 208.45 208.69 209.01 T:subterraneanv1 222.42 222.46 222.46 T:isapk128av20 237.57 237.88 240.07 T:romulusn1v1 260.80 262.02 262.52 romulusm 331.40 333.64 335.06 T:comet64speckv1 344.44 344.88 345.96 T:romulusm1v1 379.81 379.82 379.87 T:comet64chamv1 397.94 397.97 398.19 T:isapk128v20 401.18 401.24 401.30 T:photonbeetleaead128rate32v1 418.39 418.49 418.66 T:comet128chamv1 514.29 517.91 519.92 romulust 552.18 552.20 552.47 T:skinnyaeadtk29664v1 552.46 552.50 552.64 T:skinnyaeadtk296128v1 568.13 568.30 568.83 T:pyjamask128aeadv1 569.51 569.72 570.01 T:romulusn3v1 605.96 607.21 607.25 T:pyjamask96aeadv1 735.84 736.02 736.22 T:sundaegift0v1 738.39 738.49 738.58 T:sundaegift96v1 738.42 738.59 738.80 T:sundaegift64v1 738.61 740.24 740.35 T:sundaegift128v1 776.98 777.24 777.56 T:romulusm3v1 817.69 819.06 821.32 T:spoc128sliscplight256v1 848.34 853.24 859.66 T:spix128v1 914.62 914.85 946.40 T:wageae128v1 944.33 944.74 946.15 T:saefforkskinnyb128t192n56v1 945.39 945.87 953.16 T:saefforkskinnyb128t256n120v1 945.78 946.15 947.00 T:paefforkskinnyb128t256n112v1 946.33 946.56 946.92 T:paefforkskinnyb128t192n48v1 954.11 954.24 956.26 T:romulusn2v1 963.12 963.15 963.46 T:skinnyaeadtk39664v1 963.10 963.34 1019.10 T:skinnyaeadtk312864v1 963.22 963.48 963.63 T:skinnyaeadtk396128v1 1276.67 1280.17 1327.47 T:spoc64sliscplight192v1 1299.10 1302.35 1345.64 T:romulusm2v1 1382.34 1382.92 1395.21 T:paefforkskinnyb128t288n104v1 1917.55 1924.58 1932.70 T:hyenav1 2159.49 2163.61 2173.07 T:aceae128v1 2284.50 2356.22 2356.37 T:paefforkskinnyb64t192n48v1 2915.38? 2947.43? 3941.71? T:estatetwegift128v1 3540.82 3541.71 3542.42 T:oribatida192v11 3648.09 3652.21 3652.55 T:oribatida256v11 3710.21 3710.69 3720.35 T:twegift64lotusaeadv1 3864.67 3865.15 3869.11 T:twegift64locusaeadv1 4076.68 4076.95 4077.56 T:orangezestv1 11649.62 11654.85 11664.83 T:elephant160v1 13108.56 13148.15 13148.53 T:elephant176v1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 10.78 10.78 10.78 ascon128av12 11.87 11.89 11.89 T:xoodyakv1 15.65 15.65 15.67 ascon80pqv12 15.66 15.67 15.68 ascon128v12 20.67 20.69 20.70 T:gimli24v1 27.27 27.29 27.30 T:saeaes128a120t128v1 27.38 27.40 27.41 T:saeaes128a120t64v1 30.99 31.02 31.02 T:saeaes192a120t128v1 34.49 34.50 34.54 T:saeaes128a64t128v1 34.51 34.58 34.58 T:saeaes128a64t64v1 34.79 34.82 35.07 T:knot128v2 35.12 35.14 35.18 T:saeaes256a120t128v1 35.75 35.90 36.00 T:knot128v1 39.12 39.14 39.41 T:saeaes192a64t128v1 39.54 39.54 39.56 T:saeaes192a64t64v1 41.93 41.94 41.97 T:comet128aesv1 43.11 43.17 43.27 T:schwaemm256128v1 43.41 43.41 43.44 T:isapa128av20 44.34 44.42 44.42 T:saeaes256a64t64v1 44.39 44.47 44.48 T:saeaes256a64t128v1 54.47 54.51 54.65 T:giftcofb128v1 56.21 56.24 56.29 T:schwaemm192192v1 58.39 58.42 58.42 T:schwaemm256256v1 58.38 58.46 58.47 T:tinyjambu128 59.54 59.55 59.59 T:saturninctrcascadev2 61.50 61.57 61.64 T:tinyjambu192 62.57 62.58 62.61 T:knot256 63.34 63.42 63.47 T:schwaemm128128v1 70.27 70.29 70.37 T:knot192 70.31 70.36 70.46 T:tinyjambu256 71.10 71.13 71.22 T:isapa128v20 79.70 79.72 79.73 T:drygascon128k32 79.70 79.72 79.76 T:drygascon128k56 79.72 79.73 79.75 T:drygascon128k16 83.04 83.57 83.90 T:sestatetweaes128v1 101.65 101.77 101.81 T:photonbeetleaead128rate128v1 102.31 102.40 102.69 T:grain128aead 109.57 110.43 110.52 T:estatetweaes128v1 111.23 111.24 111.32 T:drygascon256k32 118.51 118.51 118.57 T:spook128mu384v1 118.50 118.54 118.84 T:spook128su512v1 118.55 118.57 118.70 T:spook128su384v1 118.52 118.67 118.90 T:spook128mu512v1 179.94 180.13 180.62 romulusn 185.73 185.75 186.16 T:mixfeed 192.79 193.00 193.36 T:skinnyaeadtk3128128v1 200.46 200.71 202.23 T:elephant200v1 208.36 208.41 208.62 T:subterraneanv1 222.42 222.47 222.69 T:isapk128av20 237.94 238.32 238.42 T:romulusn1v1 260.94 261.49 262.41 romulusm 331.70 332.13 335.76 T:comet64speckv1 346.02 347.29 348.43 T:romulusm1v1 379.92 379.94 380.55 T:comet64chamv1 397.98 397.98 398.43 T:isapk128v20 401.50 402.48 402.52 T:photonbeetleaead128rate32v1 418.18 418.35 418.40 T:comet128chamv1 511.50 513.97 515.38 romulust 569.99 570.95 571.66 T:pyjamask128aeadv1 570.90 570.97 571.06 T:romulusn3v1 609.68 609.87 610.04 T:pyjamask96aeadv1 722.05 722.18 722.59 T:skinnyaeadtk296128v1 722.14 722.49 722.86 T:skinnyaeadtk29664v1 735.65 736.00 737.01 T:sundaegift0v1 738.18 738.26 738.38 T:sundaegift64v1 738.25 738.27 738.51 T:sundaegift128v1 738.18 738.28 738.57 T:sundaegift96v1 777.36 777.61 777.86 T:romulusm3v1 823.66 829.27 850.24 T:spoc128sliscplight256v1 851.00 860.92 877.79 T:spix128v1 914.27 914.66 915.00 T:wageae128v1 954.99 955.13 955.66 T:romulusn2v1 1203.08 1203.46 1210.56 T:paefforkskinnyb128t192n48v1 1203.60 1210.41 1210.99 T:saefforkskinnyb128t192n56v1 1202.22 1210.59 1211.19 T:saefforkskinnyb128t256n120v1 1203.59 1211.27 1211.72 T:paefforkskinnyb128t256n112v1 1271.19 1285.74 1343.79 T:spoc64sliscplight192v1 1299.35 1300.11 1302.77 T:romulusm2v1 1315.20 1315.56 1315.93 T:skinnyaeadtk396128v1 1315.59 1316.78 1377.81 T:skinnyaeadtk312864v1 1316.44 1317.13 1332.49 T:skinnyaeadtk39664v1 1910.30 1924.86 1937.06 T:hyenav1 2034.09 2039.17 2040.64 T:paefforkskinnyb128t288n104v1 2163.14 2166.31 2170.04 T:aceae128v1 2926.54? 2948.12? 3937.83? T:estatetwegift128v1 3541.14 3542.53 3543.39 T:oribatida192v11 3557.03 3587.16 3593.89 T:paefforkskinnyb64t192n48v1 3650.13 3651.38 3652.04 T:oribatida256v11 3701.62 3717.81 3718.35 T:twegift64lotusaeadv1 4015.79 4019.43 4022.23 T:twegift64locusaeadv1 4076.43 4076.67 4076.95 T:orangezestv1 11649.44 11656.28 11665.24 T:elephant160v1 13113.39 13147.25 13148.11 T:elephant176v1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 10.78 10.78 10.79 ascon128av12 11.88 11.93 11.93 T:xoodyakv1 15.65 15.65 15.65 ascon80pqv12 15.66 15.66 15.68 ascon128v12 20.68 20.68 20.69 T:gimli24v1 28.38 28.39 28.42 T:saeaes128a120t128v1 28.40 28.43 28.46 T:saeaes128a120t64v1 31.85 32.10 32.12 T:saeaes192a120t128v1 33.53 33.56 33.70 T:knot128v2 33.66 33.66 33.67 T:isapa128av20 35.52 35.58 35.60 T:saeaes128a64t64v1 35.58 35.62 35.64 T:saeaes128a64t128v1 35.73 35.74 35.75 T:knot128v1 36.11 36.13 36.23 T:saeaes256a120t128v1 40.21 40.22 40.51 T:saeaes192a64t128v1 40.56 40.60 40.61 T:saeaes192a64t64v1 41.86 41.88 41.92 T:comet128aesv1 43.75 43.75 43.80 T:isapa128v20 43.81 43.86 43.91 T:schwaemm256128v1 45.37 45.44 45.47 T:saeaes256a64t64v1 45.42 45.46 45.49 T:saeaes256a64t128v1 54.50 54.61 54.63 T:giftcofb128v1 57.23 57.32 57.43 T:schwaemm192192v1 58.37 58.46 58.46 T:tinyjambu128 59.54 59.55 59.56 T:saturninctrcascadev2 59.55 59.56 59.58 T:schwaemm256256v1 61.38 61.55 61.63 T:tinyjambu192 62.57 62.58 62.61 T:knot256 64.03 64.09 64.17 T:schwaemm128128v1 70.27 70.29 70.35 T:knot192 70.30 70.32 70.36 T:tinyjambu256 79.70 79.72 79.74 T:drygascon128k32 79.70 79.72 79.73 T:drygascon128k56 79.72 79.72 79.76 T:drygascon128k16 83.47 83.57 83.90 T:sestatetweaes128v1 101.55 101.71 101.73 T:photonbeetleaead128rate128v1 102.27 102.38 102.56 T:grain128aead 110.00 110.42 110.52 T:estatetweaes128v1 111.27 111.32 111.37 T:drygascon256k32 118.55 118.58 119.36 T:spook128mu384v1 118.61 118.65 118.77 T:spook128su384v1 118.55 118.86 119.01 T:spook128su512v1 118.59 119.26 119.59 T:spook128mu512v1 175.02 175.03 175.05 T:isapk128av20 180.04 180.37 180.57 romulusn 185.74 185.90 186.17 T:mixfeed 192.91 193.29 194.06 T:skinnyaeadtk3128128v1 200.67 200.85 202.23 T:elephant200v1 208.41 208.46 208.51 T:subterraneanv1 237.90 238.31 239.06 T:romulusn1v1 254.81 255.77 256.18 romulust 261.04 261.31 262.22 romulusm 273.70 273.71 274.43 T:isapk128v20 331.50 332.08 335.85 T:comet64speckv1 345.68 345.97 348.21 T:romulusm1v1 379.87 379.89 380.40 T:comet64chamv1 401.37 402.41 402.44 T:photonbeetleaead128rate32v1 418.30 418.33 418.36 T:comet128chamv1 570.87 570.96 570.99 T:romulusn3v1 569.75 571.00 571.50 T:pyjamask128aeadv1 609.67 609.94 610.07 T:pyjamask96aeadv1 721.95 722.17 722.44 T:skinnyaeadtk296128v1 722.13 722.64 722.91 T:skinnyaeadtk29664v1 735.71 736.04 736.99 T:sundaegift0v1 737.79 738.25 738.28 T:sundaegift64v1 738.25 738.26 738.29 T:sundaegift128v1 738.14 738.28 738.61 T:sundaegift96v1 747.39? 748.12? 913.82? T:wageae128v1 777.43 777.53 777.83 T:romulusm3v1 823.99 829.15 850.60 T:spoc128sliscplight256v1 854.28 860.97 874.53 T:spix128v1 954.99 955.12 955.60 T:romulusn2v1 1203.14 1203.75 1210.62 T:paefforkskinnyb128t192n48v1 1202.76 1209.98 1210.98 T:saefforkskinnyb128t192n56v1 1201.94 1210.33 1211.07 T:saefforkskinnyb128t256n120v1 1203.48 1211.19 1211.83 T:paefforkskinnyb128t256n112v1 1274.32 1281.93 1286.10 T:spoc64sliscplight192v1 1299.31 1299.95 1302.75 T:romulusm2v1 1315.13 1315.50 1315.85 T:skinnyaeadtk396128v1 1315.48 1316.93 1377.96 T:skinnyaeadtk312864v1 1316.64 1317.19 1332.26 T:skinnyaeadtk39664v1 1910.22 1924.85 1937.06 T:hyenav1 2033.36 2038.34 2041.00 T:paefforkskinnyb128t288n104v1 2154.29 2156.39 2160.56 T:aceae128v1 2926.59? 2948.92? 3938.50? T:estatetwegift128v1 3540.97 3542.86 3543.45 T:oribatida192v11 3556.78 3627.49 3629.46 T:paefforkskinnyb64t192n48v1 3649.42 3651.27 3651.68 T:oribatida256v11 3704.16 3717.73 3718.45 T:twegift64lotusaeadv1 4014.48 4016.78 4019.47 T:twegift64locusaeadv1 4076.53 4076.92 4077.33 T:orangezestv1 11650.55 11656.24 11665.31 T:elephant160v1 13108.92 13147.15 13148.55 T:elephant176v1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 16.50 16.66 17.08 ascon128av12 20.85 20.85 20.95 ascon80pqv12 20.76 20.86 21.05 ascon128v12 22.75 23.05 23.45 T:xoodyakv1 27.41 27.48 27.54 T:gimli24v1 32.64 32.69 32.73 T:saeaes128a120t64v1 32.70 32.81 33.13 T:saeaes128a120t128v1 37.16 37.17 37.36 T:saeaes192a120t128v1 38.48 38.53 38.58 T:saeaes128a64t64v1 38.55 38.62 38.81 T:saeaes128a64t128v1 42.74 43.04 43.31 T:saeaes256a120t128v1 44.09 44.16 44.21 T:saeaes192a64t128v1 44.23 44.26 44.38 T:saeaes192a64t64v1 45.74 45.91 46.53 T:knot128v1 49.76 49.91 50.01 T:saeaes256a64t64v1 49.98 50.08 50.24 T:saeaes256a64t128v1 53.28 53.48 53.59 T:knot128v2 55.02 55.27 55.48 T:comet128aesv1 66.70 66.73 67.34 T:giftcofb128v1 67.98 67.98 68.47 T:tinyjambu128 69.58 70.05 70.59 T:schwaemm256128v1 70.01 70.08 70.34 T:tinyjambu192 80.28 80.53 80.99 T:tinyjambu256 80.62 80.65 80.66 T:schwaemm128128v1 90.69 90.86 91.39 T:schwaemm192192v1 91.31 91.48 93.50 T:drygascon128k32 91.37 91.59 92.31 T:knot192 91.41 91.72 91.83 T:drygascon128k56 91.88 91.92 92.02 T:drygascon128k16 92.82 93.16 93.46 T:knot256 93.28 93.87 94.08 T:schwaemm256256v1 101.31 101.73 101.85 T:sestatetweaes128v1 111.10 111.48 112.05 T:grain128aead 111.52 111.52 112.03 T:isapa128av20 114.71 114.84 115.43 T:photonbeetleaead128rate128v1 116.58 116.64 117.41 T:saturninctrcascadev2 125.38 126.13 126.15 T:estatetweaes128v1 139.59 139.62 139.87 T:drygascon256k32 180.22 180.36 180.75 T:spook128mu384v1 180.26 180.42 181.14 T:spook128mu512v1 180.14 181.80 181.94 T:spook128su384v1 181.96 181.98 182.19 T:spook128su512v1 222.45 224.22 226.17 romulusn 270.98 271.19 271.80 T:mixfeed 283.27 284.00 285.58 T:skinnyaeadtk3128128v1 284.37 285.04 286.69 T:elephant200v1 293.66 295.33 297.38 T:romulusn1v1 307.58 308.15 310.77 romulusm 375.90 378.41 379.41 T:comet64speckv1 380.09 380.52 381.20 T:subterraneanv1 403.76 404.16 408.34 T:romulusm1v1 413.59 413.89 414.05 T:photonbeetleaead128rate32v1 430.05 430.47 430.79 T:comet64chamv1 521.75 522.13 522.47 T:comet128chamv1 583.69 583.87 584.16 T:isapa128v20 618.78 618.80 619.12 T:skinnyaeadtk29664v1 618.99 619.08 619.34 T:skinnyaeadtk296128v1 630.08 630.23 630.39 T:romulusn3v1 685.19 685.27 686.74 T:isapk128av20 691.34 692.41 695.26 romulust 796.71 797.14 797.38 T:sundaegift0v1 830.98 832.16 836.21 T:pyjamask128aeadv1 857.65 857.99 858.29 T:sundaegift64v1 858.06 858.26 858.37 T:sundaegift96v1 858.66 859.20 859.79 T:sundaegift128v1 887.02 890.30 892.59 T:pyjamask96aeadv1 899.90 900.39 916.85 T:romulusm3v1 910.41 910.98 915.52 T:spoc128sliscplight256v1 946.20 946.43 946.88 T:saefforkskinnyb128t192n56v1 945.11 947.09 947.73 T:saefforkskinnyb128t256n120v1 948.20 948.66 949.44 T:paefforkskinnyb128t256n112v1 948.95 949.47 949.82 T:paefforkskinnyb128t192n48v1 1057.29 1057.53 1058.18 T:romulusn2v1 1078.45 1078.53 1079.24 T:skinnyaeadtk39664v1 1078.65 1078.72 1079.16 T:skinnyaeadtk396128v1 1078.62 1079.91 1141.25 T:skinnyaeadtk312864v1 1291.59 1292.98 1332.38 T:wageae128v1 1383.84 1384.56 1397.41 T:paefforkskinnyb128t288n104v1 1412.88 1427.23 1443.47 T:spoc64sliscplight192v1 1434.84 1445.73 1447.46 T:spix128v1 1509.95 1510.45 1586.58 T:romulusm2v1 2179.04 2180.23 2202.00 T:hyenav1 2317.33 2323.95 2324.95 T:paefforkskinnyb64t192n48v1 3059.19 3071.12 3089.55 T:aceae128v1 3192.27? 3211.49? 4208.07? T:estatetwegift128v1 3439.74 3439.84 3440.55 T:isapk128v20 4154.02 4155.05 4163.92 T:twegift64lotusaeadv1 4315.73 4320.37 4323.67 T:twegift64locusaeadv1 4517.26 4521.52 4523.13 T:oribatida256v11 4612.90 4614.59 4620.20 T:oribatida192v11 5041.63 5042.12 5043.93 T:orangezestv1 15603.27 15612.62 15622.20 T:elephant160v1 16317.72 16367.83 16375.56 T:elephant176v1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 16.65 16.76 16.99 ascon128av12 21.02 21.02 21.30 ascon128v12 21.06 21.06 21.51 ascon80pqv12 23.12 23.37 23.81 T:xoodyakv1 28.36 28.36 28.95 T:gimli24v1 32.89 32.98 33.03 T:saeaes128a120t128v1 33.11 33.11 33.51 T:saeaes128a120t64v1 37.44 37.51 37.97 T:saeaes192a120t128v1 38.74 38.78 38.91 T:saeaes128a64t128v1 38.92 38.95 39.89 T:saeaes128a64t64v1 43.09 43.24 43.47 T:saeaes256a120t128v1 44.09 44.20 44.76 T:saeaes192a64t128v1 44.73 44.80 45.01 T:saeaes192a64t64v1 45.93 46.17 46.20 T:knot128v1 50.34 50.41 50.48 T:saeaes256a64t64v1 50.52 50.58 50.78 T:saeaes256a64t128v1 52.95 53.23 53.58 T:knot128v2 56.15 56.38 57.00 T:comet128aesv1 66.69 66.88 67.07 T:giftcofb128v1 68.72 68.72 68.86 T:tinyjambu128 69.53 69.84 70.48 T:schwaemm256128v1 71.17 71.52 71.89 T:tinyjambu192 81.55 81.63 81.80 T:schwaemm128128v1 81.64 81.64 81.90 T:tinyjambu256 91.09 92.20 93.28 T:schwaemm192192v1 92.22 92.59 92.91 T:drygascon128k56 92.61 92.70 93.51 T:drygascon128k16 92.67 92.77 93.24 T:knot192 92.30 93.24 94.40 T:drygascon128k32 92.97 93.35 93.73 T:knot256 93.62 94.38 94.46 T:schwaemm256256v1 101.69 101.95 102.06 T:sestatetweaes128v1 102.48 102.56 103.11 T:saturninctrcascadev2 111.88 111.88 112.36 T:isapa128av20 111.41 112.98 114.05 T:grain128aead 115.42 115.88 116.20 T:photonbeetleaead128rate128v1 123.17 123.95 124.02 T:estatetweaes128v1 139.48 139.55 140.29 T:drygascon256k32 181.62 181.79 183.12 T:spook128mu512v1 181.80 182.66 183.16 T:spook128mu384v1 182.62 182.70 182.76 T:spook128su512v1 181.49 182.84 183.34 T:spook128su384v1 223.28 224.78 225.82 romulusn 271.90 272.06 272.83 T:mixfeed 284.46 284.78 286.68 T:elephant200v1 295.55 296.04 297.42 T:romulusn1v1 321.89 322.16 323.19 T:skinnyaeadtk3128128v1 320.80 323.99 326.71 romulusm 376.40 378.86 381.66 T:comet64speckv1 380.50 381.17 382.10 T:subterraneanv1 415.22 415.59 416.00 T:photonbeetleaead128rate32v1 421.70 427.12 428.08 T:romulusm1v1 431.33 431.63 432.22 T:comet64chamv1 522.52 523.00 524.17 T:comet128chamv1 583.08 583.50 585.78 T:isapa128v20 631.86 632.05 632.72 T:romulusn3v1 685.19 685.27 686.93 T:isapk128av20 690.17 692.65 695.56 romulust 788.50 788.74 789.13 T:skinnyaeadtk296128v1 789.08 789.52 789.90 T:skinnyaeadtk29664v1 796.73 797.59 798.49 T:sundaegift0v1 833.15 833.74 834.26 T:pyjamask128aeadv1 856.14 856.63 857.97 T:sundaegift64v1 856.50 857.67 858.63 T:sundaegift96v1 857.68 857.96 858.27 T:sundaegift128v1 890.92 891.77 892.86 T:pyjamask96aeadv1 900.66 901.02 901.23 T:romulusm3v1 915.32 919.78 920.65 T:spoc128sliscplight256v1 1055.98 1059.17 1060.12 T:romulusn2v1 1205.15 1205.73 1209.22 T:paefforkskinnyb128t192n48v1 1204.08 1210.38 1211.81 T:saefforkskinnyb128t192n56v1 1203.82 1211.43 1212.14 T:saefforkskinnyb128t256n120v1 1204.28 1212.09 1213.10 T:paefforkskinnyb128t256n112v1 1290.93 1290.98 1292.05 T:wageae128v1 1417.36 1429.14 1437.07 T:spoc64sliscplight192v1 1430.69 1430.77 1431.33 T:skinnyaeadtk396128v1 1430.77 1431.12 1449.54 T:skinnyaeadtk39664v1 1432.42 1432.83 1497.05 T:skinnyaeadtk312864v1 1443.08 1450.23 1480.05 T:spix128v1 1510.53 1510.77 1511.51 T:romulusm2v1 2039.66 2041.99 2043.36 T:paefforkskinnyb128t288n104v1 2173.52 2180.07 2204.98 T:hyenav1 3058.22 3066.22 3076.78 T:aceae128v1 3200.80? 3211.47? 4206.76? T:estatetwegift128v1 3440.60 3440.86 3449.72 T:isapk128v20 3522.30 3524.09 3629.10 T:paefforkskinnyb64t192n48v1 4156.95 4161.73 4165.66 T:twegift64lotusaeadv1 4446.77 4448.64 4464.02 T:twegift64locusaeadv1 4518.13 4520.88 4521.69 T:oribatida256v11 4617.30 4619.04 4620.37 T:oribatida192v11 5042.27 5042.46 5045.44 T:orangezestv1 15609.27 15613.91 15622.57 T:elephant160v1 16314.65 16375.27 16377.83 T:elephant176v1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 16.65 16.65 16.79 ascon128av12 21.02 21.02 21.30 ascon128v12 21.06 21.06 21.06 ascon80pqv12 23.52 23.95 24.06 T:xoodyakv1 28.39 28.49 28.61 T:gimli24v1 34.14 34.17 34.28 T:saeaes128a120t128v1 34.08 34.34 34.62 T:saeaes128a120t64v1 38.64 38.72 38.82 T:saeaes192a120t128v1 39.91 40.06 40.66 T:saeaes128a64t64v1 40.02 40.18 40.61 T:saeaes128a64t128v1 43.95 44.09 44.27 T:saeaes256a120t128v1 45.40 45.55 46.02 T:saeaes192a64t128v1 45.84 46.13 46.54 T:saeaes192a64t64v1 45.99 46.16 46.23 T:knot128v1 51.27 51.39 51.60 T:saeaes256a64t128v1 51.31 51.43 51.94 T:saeaes256a64t64v1 51.33 51.48 51.73 T:knot128v2 55.88 56.16 56.55 T:comet128aesv1 66.78 67.08 67.14 T:giftcofb128v1 68.72 68.72 68.72 T:tinyjambu128 70.41 71.07 71.91 T:schwaemm256128v1 71.81 71.84 71.88 T:tinyjambu192 72.05 72.05 72.56 T:isapa128av20 81.64 81.64 81.67 T:tinyjambu256 82.49 82.52 82.65 T:schwaemm128128v1 92.25 92.45 93.16 T:schwaemm192192v1 92.27 92.64 92.69 T:drygascon128k56 92.65 92.65 92.72 T:knot192 92.66 92.74 93.28 T:drygascon128k16 92.34 92.80 94.32 T:drygascon128k32 92.95 93.30 93.30 T:knot256 94.94 95.66 95.73 T:schwaemm256256v1 101.78 101.97 102.27 T:sestatetweaes128v1 102.43 102.48 102.80 T:saturninctrcascadev2 111.61 113.15 114.46 T:grain128aead 115.34 115.43 115.99 T:photonbeetleaead128rate128v1 123.48 123.97 124.12 T:estatetweaes128v1 139.64 139.73 140.84 T:drygascon256k32 181.70 182.72 183.44 T:spook128su384v1 181.98 182.79 183.31 T:spook128mu384v1 181.77 182.81 183.33 T:spook128su512v1 182.74 182.95 183.25 T:spook128mu512v1 222.71 224.44 226.75 romulusn 271.91 272.14 272.69 T:mixfeed 284.48 284.77 286.68 T:elephant200v1 294.96 295.79 296.68 T:romulusn1v1 301.66 301.66 302.25 T:isapa128v20 321.83 322.30 323.48 T:skinnyaeadtk3128128v1 324.19 325.14 327.89 romulusm 376.11 378.00 381.44 T:comet64speckv1 380.95 381.83 382.55 T:subterraneanv1 414.98 415.29 416.15 T:photonbeetleaead128rate32v1 415.50 418.54 421.95 romulust 424.25 426.46 427.62 T:romulusm1v1 431.28 431.53 431.65 T:comet64chamv1 473.38 474.50 475.53 T:isapk128av20 522.49 522.88 524.07 T:comet128chamv1 631.34 631.71 631.91 T:romulusn3v1 788.62 788.78 789.35 T:skinnyaeadtk296128v1 789.12 789.42 789.84 T:skinnyaeadtk29664v1 796.33 797.29 798.59 T:sundaegift0v1 833.91 834.29 834.66 T:pyjamask128aeadv1 855.93 856.86 857.43 T:sundaegift64v1 857.27 857.33 858.02 T:sundaegift128v1 856.30 857.46 857.96 T:sundaegift96v1 891.48 891.62 893.04 T:pyjamask96aeadv1 900.42 900.67 901.12 T:romulusm3v1 914.83 916.21 919.78 T:spoc128sliscplight256v1 1043.66? 1056.27? 1300.98? T:wageae128v1 1055.87 1058.55 1059.20 T:romulusn2v1 1204.82 1205.12 1209.90 T:paefforkskinnyb128t192n48v1 1203.45 1210.56 1211.73 T:saefforkskinnyb128t192n56v1 1203.03 1211.02 1211.75 T:saefforkskinnyb128t256n120v1 1211.19 1211.46 1211.88 T:paefforkskinnyb128t256n112v1 1417.51 1429.40 1441.94 T:spoc64sliscplight192v1 1430.73 1431.01 1431.71 T:skinnyaeadtk396128v1 1430.88 1431.14 1449.66 T:skinnyaeadtk39664v1 1431.59 1432.57 1497.03 T:skinnyaeadtk312864v1 1444.76 1449.26 1464.26 T:spix128v1 1510.35 1510.62 1511.13 T:romulusm2v1 1874.42 1874.53 1875.20 T:isapk128v20 2039.57 2043.08 2046.92 T:paefforkskinnyb128t288n104v1 2173.51 2180.82 2204.94 T:hyenav1 3041.30 3051.83 3060.07 T:aceae128v1 3190.80? 3211.12? 4206.45? T:estatetwegift128v1 3523.01 3534.91 3629.84 T:paefforkskinnyb64t192n48v1 4144.20 4162.44 4163.78 T:twegift64lotusaeadv1 4446.68 4447.37 4454.09 T:twegift64locusaeadv1 4518.05 4519.78 4521.83 T:oribatida256v11 4617.02 4619.02 4620.36 T:oribatida192v11 5042.62 5042.75 5044.77 T:orangezestv1 15612.00 15614.35 15620.72 T:elephant160v1 16317.74 16372.66 16377.16 T:elephant176v1