| Cycles/byte for long+0 encrypt |
| 25% | 50% | 75% | aead |
| 10.20 | 10.20 | 10.20 | ascon128av12 |
| 15.28 | 15.28 | 15.28 | ascon128v12 |
| 15.30 | 15.30 | 15.30 | ascon80pqv12 |
| 16.83 | 16.90 | 17.05 | T:aes128gcmv1 |
| 19.19 | 19.23 | 19.25 | ascon128abi32v12 |
| 19.93 | 20.09 | 20.31 | T:aes256gcmv1 |
| 28.71? | 29.12? | 32.74? | T:xoodyakround3 |
| 29.16 | 29.16 | 29.16 | ascon128bi32v12 |
| 32.59 | 32.71 | 32.73 | T:schwaemm256128v2 |
| 42.59 | 42.67 | 42.84 | T:schwaemm192192v2 |
| 45.12 | 45.37 | 45.43 | T:schwaemm128128v2 |
| 45.34 | 45.53 | 46.10 | T:schwaemm256256v2 |
| 54.75 | 54.96 | 55.11 | T:giftcofb128v1 |
| 58.85 | 58.85 | 58.94 | T:isapa128v20 |
| 60.68 | 60.68 | 60.69 | T:isapa128av20 |
| 61.91 | 61.98 | 62.09 | T:grain128aeadv2 |
| 72.50 | 72.73 | 72.83 | romulusn |
| 77.50 | 77.61 | 77.99 | T:tinyjambu128v2 |
| 93.91 | 93.96 | 94.14 | T:tinyjambu192v2 |
| 100.07 | 100.07 | 100.07 | T:tinyjambu256v2 |
| 118.31 | 118.52 | 118.53 | romulusm |
| 234.62 | 234.66 | 236.68 | T:isapk128av20 |
| 241.26 | 241.41 | 241.70 | T!!!romulust |
| 258.90 | 262.14 | 280.41 | T:elephant200v2 |
| 311.49 | 314.42 | 322.43 | T:isapk128v20 |
| 372.56? | 395.28? | 418.76? | T:isapxv20 |
| 13098.42 | 13104.92 | 13122.39 | T:elephant176v2 |
| 14896.92 | 14904.85 | 14920.47 | T:elephant160v2 |
| 36075.90 | 36096.15 | 36141.36 | aes256gcmv1 |
|
| Cycles/byte for long+0 decrypt |
| 25% | 50% | 75% | aead |
| 10.31 | 10.31 | 10.31 | ascon128av12 |
| 15.09 | 15.10 | 15.13 | ascon128v12 |
| 15.25 | 15.25 | 15.25 | ascon80pqv12 |
| 16.83 | 16.93 | 17.02 | T:aes128gcmv1 |
| 19.28 | 19.28 | 19.29 | ascon128abi32v12 |
| 19.89 | 20.07 | 20.26 | T:aes256gcmv1 |
| 28.39 | 28.39 | 28.39 | ascon128bi32v12 |
| 28.15? | 28.48? | 31.87? | T:xoodyakround3 |
| 32.19 | 32.26 | 32.35 | T:schwaemm256128v2 |
| 42.86 | 42.99 | 43.07 | T:schwaemm192192v2 |
| 45.32 | 45.47 | 45.98 | T:schwaemm128128v2 |
| 45.32 | 45.59 | 46.28 | T:schwaemm256256v2 |
| 54.91 | 54.95 | 54.99 | T:giftcofb128v1 |
| 59.04 | 59.07 | 59.12 | T:isapa128v20 |
| 60.74 | 60.75 | 60.75 | T:isapa128av20 |
| 66.92 | 66.96 | 67.00 | T:grain128aeadv2 |
| 72.55 | 72.70 | 73.06 | romulusn |
| 78.24 | 78.25 | 78.49 | T:tinyjambu128v2 |
| 94.10 | 94.42 | 94.70 | T:tinyjambu192v2 |
| 96.82 | 96.82 | 99.24 | T:tinyjambu256v2 |
| 117.48 | 117.65 | 117.71 | romulusm |
| 234.65 | 234.68 | 236.20 | T:isapk128av20 |
| 241.26 | 241.35 | 241.67 | T!!!romulust |
| 258.89 | 262.08 | 280.85 | T:elephant200v2 |
| 311.63 | 314.58 | 320.65 | T:isapk128v20 |
| 355.99? | 406.30? | 684.06? | T:isapxv20 |
| 13100.63 | 13106.05 | 13119.85 | T:elephant176v2 |
| 14898.74 | 14904.41 | 14918.22 | T:elephant160v2 |
| 35737.79 | 35758.19 | 35853.31 | aes256gcmv1 |
|
| Cycles/byte for long+0 forgery |
| 25% | 50% | 75% | aead |
| 10.31 | 10.31 | 10.31 | ascon128av12 |
| 15.23 | 15.23 | 15.24 | ascon80pqv12 |
| 15.30 | 15.30 | 15.30 | ascon128v12 |
| 16.84 | 16.93 | 17.03 | T:aes128gcmv1 |
| 19.28 | 19.28 | 19.29 | ascon128abi32v12 |
| 19.94 | 20.07 | 20.18 | T:aes256gcmv1 |
| 28.38 | 28.38 | 28.39 | ascon128bi32v12 |
| 28.21? | 28.50? | 31.68? | T:xoodyakround3 |
| 29.24 | 29.24 | 29.25 | T:isapa128v20 |
| 32.22 | 32.29 | 32.42 | T:schwaemm256128v2 |
| 41.26 | 41.27 | 41.27 | T:isapa128av20 |
| 42.82 | 42.98 | 43.07 | T:schwaemm192192v2 |
| 45.37 | 45.50 | 45.85 | T:schwaemm128128v2 |
| 45.32 | 45.55 | 46.18 | T:schwaemm256256v2 |
| 54.89 | 54.94 | 54.99 | T:giftcofb128v1 |
| 66.91 | 66.95 | 66.99 | T:grain128aeadv2 |
| 72.55 | 72.71 | 73.06 | romulusn |
| 78.24 | 78.25 | 78.30 | T:tinyjambu128v2 |
| 81.86 | 81.88 | 81.98 | T!!!romulust |
| 94.13 | 94.62 | 94.71 | T:tinyjambu192v2 |
| 96.82 | 96.82 | 98.79 | T:tinyjambu256v2 |
| 117.48 | 117.64 | 117.70 | romulusm |
| 159.02 | 159.06 | 159.27 | T:isapk128av20 |
| 200.29 | 200.62 | 203.58 | T:isapk128v20 |
| 205.77? | 251.00? | 510.72? | T:isapxv20 |
| 258.89 | 262.08 | 281.21 | T:elephant200v2 |
| 990.74 | 996.29 | 1001.67 | aes256gcmv1 |
| 13097.93 | 13104.21 | 13115.91 | T:elephant176v2 |
| 14898.57 | 14905.16 | 14916.86 | T:elephant160v2 |
|
| Cycles/byte for long+long encrypt |
| 25% | 50% | 75% | aead |
| 10.11 | 10.12 | 10.12 | ascon128av12 |
| 12.44 | 12.47 | 12.54 | T:aes128gcmv1 |
| 14.05 | 14.09 | 14.14 | T:aes256gcmv1 |
| 15.10 | 15.10 | 15.10 | ascon128v12 |
| 15.17 | 15.17 | 15.17 | ascon80pqv12 |
| 19.12 | 19.14 | 19.14 | ascon128abi32v12 |
| 22.15? | 22.39? | 25.04? | T:xoodyakround3 |
| 28.73 | 28.73 | 28.74 | ascon128bi32v12 |
| 32.18 | 32.27 | 32.36 | T:schwaemm256128v2 |
| 42.50 | 42.55 | 42.65 | T:schwaemm192192v2 |
| 44.03 | 44.13 | 44.31 | T:isapa128v20 |
| 44.92 | 44.96 | 45.04 | T:schwaemm128128v2 |
| 45.48 | 45.63 | 45.84 | T:schwaemm256256v2 |
| 50.97 | 50.98 | 50.98 | T:isapa128av20 |
| 54.48 | 54.49 | 54.66 | T:giftcofb128v1 |
| 58.71 | 58.77 | 58.98 | romulusn |
| 62.07 | 62.12 | 62.22 | T:grain128aeadv2 |
| 62.76 | 62.86 | 62.97 | T:tinyjambu128v2 |
| 73.85 | 73.88 | 73.93 | T:tinyjambu192v2 |
| 74.80 | 74.80 | 74.96 | T:tinyjambu256v2 |
| 81.59 | 81.64 | 81.71 | romulusm |
| 161.31 | 161.38 | 161.68 | T!!!romulust |
| 192.35 | 192.42 | 194.74 | T:isapk128av20 |
| 194.77 | 197.96 | 210.06 | T:elephant200v2 |
| 250.05 | 252.74 | 254.60 | T:isapk128v20 |
| 306.50 | 316.62 | 331.25 | T:isapxv20 |
| 9789.48 | 9795.77 | 9803.68 | T:elephant176v2 |
| 11176.80 | 11181.50 | 11199.02 | T:elephant160v2 |
| 18535.08 | 18542.78 | 18555.29 | aes256gcmv1 |
|
| Cycles/byte for long+long decrypt |
| 25% | 50% | 75% | aead |
| 10.17 | 10.17 | 10.18 | ascon128av12 |
| 12.43 | 12.51 | 12.56 | T:aes128gcmv1 |
| 14.03 | 14.07 | 14.15 | T:aes256gcmv1 |
| 15.11 | 15.11 | 15.11 | ascon80pqv12 |
| 15.14 | 15.14 | 15.16 | ascon128v12 |
| 19.14 | 19.15 | 19.19 | ascon128abi32v12 |
| 21.90? | 22.11? | 24.75? | T:xoodyakround3 |
| 28.31 | 28.31 | 28.34 | ascon128bi32v12 |
| 32.12 | 32.14 | 32.21 | T:schwaemm256128v2 |
| 42.60 | 42.67 | 42.71 | T:schwaemm192192v2 |
| 43.91 | 44.09 | 44.38 | T:isapa128v20 |
| 45.08 | 45.12 | 45.18 | T:schwaemm128128v2 |
| 45.49 | 45.66 | 46.16 | T:schwaemm256256v2 |
| 50.98 | 50.98 | 51.02 | T:isapa128av20 |
| 54.54 | 54.57 | 54.66 | T:giftcofb128v1 |
| 58.76 | 58.87 | 58.96 | romulusn |
| 63.28 | 63.31 | 63.45 | T:tinyjambu128v2 |
| 64.48 | 64.52 | 64.57 | T:grain128aeadv2 |
| 73.89 | 74.11 | 74.22 | T:tinyjambu192v2 |
| 74.87 | 74.91 | 75.28 | T:tinyjambu256v2 |
| 81.20 | 81.32 | 81.37 | romulusm |
| 161.27 | 161.36 | 161.60 | T!!!romulust |
| 192.32 | 192.44 | 194.73 | T:isapk128av20 |
| 194.91 | 197.57 | 210.36 | T:elephant200v2 |
| 249.85 | 253.27 | 255.04 | T:isapk128v20 |
| 291.47? | 329.30? | 588.17? | T:isapxv20 |
| 9788.68 | 9797.07 | 9805.57 | T:elephant176v2 |
| 11175.52 | 11179.10 | 11185.79 | T:elephant160v2 |
| 18369.27 | 18378.53 | 18397.18 | aes256gcmv1 |
|
| Cycles/byte for long+long forgery |
| 25% | 50% | 75% | aead |
| 10.17 | 10.18 | 10.18 | ascon128av12 |
| 12.42 | 12.48 | 12.56 | T:aes128gcmv1 |
| 14.02 | 14.09 | 14.26 | T:aes256gcmv1 |
| 15.05 | 15.05 | 15.06 | ascon80pqv12 |
| 15.17 | 15.17 | 15.17 | ascon128v12 |
| 19.14 | 19.15 | 19.19 | ascon128abi32v12 |
| 21.93? | 22.15? | 24.77? | T:xoodyakround3 |
| 28.31 | 28.31 | 28.32 | ascon128bi32v12 |
| 29.30 | 29.30 | 29.32 | T:isapa128v20 |
| 32.12 | 32.14 | 32.20 | T:schwaemm256128v2 |
| 41.23 | 41.23 | 41.23 | T:isapa128av20 |
| 42.57 | 42.64 | 42.70 | T:schwaemm192192v2 |
| 45.07 | 45.16 | 45.24 | T:schwaemm128128v2 |
| 45.48 | 45.79 | 46.17 | T:schwaemm256256v2 |
| 54.54 | 54.58 | 54.65 | T:giftcofb128v1 |
| 58.74 | 58.83 | 58.95 | romulusn |
| 63.29 | 63.29 | 63.33 | T:tinyjambu128v2 |
| 64.49 | 64.53 | 64.58 | T:grain128aeadv2 |
| 73.87 | 74.13 | 74.19 | T:tinyjambu192v2 |
| 74.89 | 75.00 | 75.20 | T:tinyjambu256v2 |
| 81.20 | 81.32 | 81.36 | romulusm |
| 81.58 | 81.67 | 81.82 | T!!!romulust |
| 154.57 | 154.64 | 157.35 | T:isapk128av20 |
| 194.34 | 194.55 | 197.69 | T:isapk128v20 |
| 194.87 | 198.10 | 210.23 | T:elephant200v2 |
| 217.78? | 253.04? | 505.73? | T:isapxv20 |
| 992.61 | 996.95 | 999.80 | aes256gcmv1 |
| 9792.36 | 9800.03 | 9842.21 | T:elephant176v2 |
| 11176.87 | 11180.41 | 11185.65 | T:elephant160v2 |
|
| Cycles/byte for 0+long encrypt |
| 25% | 50% | 75% | aead |
| 8.04 | 8.10 | 8.13 | T:aes128gcmv1 |
| 7.96 | 8.11 | 8.27 | T:aes256gcmv1 |
| 10.06 | 10.06 | 10.06 | ascon128av12 |
| 14.91 | 14.91 | 14.91 | ascon128v12 |
| 15.02 | 15.02 | 15.03 | ascon80pqv12 |
| 15.47? | 15.64? | 17.31? | T:xoodyakround3 |
| 19.05 | 19.05 | 19.07 | ascon128abi32v12 |
| 28.34 | 28.34 | 28.36 | ascon128bi32v12 |
| 29.30 | 29.32 | 29.45 | T:isapa128v20 |
| 31.95 | 32.05 | 32.09 | T:schwaemm256128v2 |
| 41.20 | 41.20 | 41.20 | T:isapa128av20 |
| 42.37 | 42.39 | 42.44 | T:schwaemm192192v2 |
| 44.54 | 44.75 | 44.93 | T:schwaemm128128v2 |
| 44.87 | 44.89 | 44.90 | romulusn |
| 44.95 | 45.13 | 45.14 | romulusm |
| 45.59 | 45.67 | 45.72 | T:schwaemm256256v2 |
| 48.36 | 48.36 | 48.36 | T:tinyjambu128v2 |
| 50.05 | 50.05 | 50.30 | T:tinyjambu256v2 |
| 53.80 | 53.87 | 53.89 | T:tinyjambu192v2 |
| 54.16 | 54.18 | 54.19 | T:giftcofb128v1 |
| 62.10 | 62.20 | 62.23 | T:grain128aeadv2 |
| 81.29 | 81.31 | 81.41 | T!!!romulust |
| 131.12 | 132.95 | 142.79 | T:elephant200v2 |
| 150.11 | 150.13 | 150.31 | T:isapk128av20 |
| 188.12 | 188.38 | 192.02 | T:isapk128v20 |
| 227.84 | 240.01 | 247.29 | T:isapxv20 |
| 992.42 | 998.57 | 1000.70 | aes256gcmv1 |
| 6466.26 | 6477.97 | 6484.55 | T:elephant176v2 |
| 7442.98 | 7450.02 | 7457.26 | T:elephant160v2 |
|
| Cycles/byte for 0+long decrypt |
| 25% | 50% | 75% | aead |
| 7.91 | 8.12 | 8.29 | T:aes256gcmv1 |
| 8.06 | 8.14 | 8.28 | T:aes128gcmv1 |
| 10.05 | 10.05 | 10.05 | ascon128av12 |
| 14.96 | 14.96 | 14.96 | ascon128v12 |
| 15.05 | 15.13 | 15.22 | ascon80pqv12 |
| 15.53? | 15.76? | 17.60? | T:xoodyakround3 |
| 19.00 | 19.02 | 19.09 | ascon128abi32v12 |
| 28.21 | 28.53 | 28.86 | ascon128bi32v12 |
| 29.25 | 29.27 | 29.30 | T:isapa128v20 |
| 32.00 | 32.03 | 32.09 | T:schwaemm256128v2 |
| 41.19 | 41.20 | 41.22 | T:isapa128av20 |
| 42.29 | 42.31 | 42.35 | T:schwaemm192192v2 |
| 44.75 | 44.81 | 44.86 | T:schwaemm128128v2 |
| 44.87 | 44.88 | 44.90 | romulusn |
| 44.88 | 45.04 | 45.12 | romulusm |
| 45.65 | 45.72 | 45.74 | T:schwaemm256256v2 |
| 48.36 | 48.36 | 48.36 | T:tinyjambu128v2 |
| 49.82 | 49.82 | 50.17 | T:tinyjambu256v2 |
| 53.60 | 53.68 | 53.75 | T:tinyjambu192v2 |
| 54.17 | 54.20 | 54.41 | T:giftcofb128v1 |
| 61.74 | 62.00 | 62.12 | T:grain128aeadv2 |
| 81.27 | 81.30 | 81.33 | T!!!romulust |
| 131.01 | 133.02 | 142.15 | T:elephant200v2 |
| 150.10 | 150.11 | 150.36 | T:isapk128av20 |
| 187.93 | 188.37 | 192.23 | T:isapk128v20 |
| 208.07? | 252.17? | 511.87? | T:isapxv20 |
| 993.03 | 998.75 | 1004.47 | aes256gcmv1 |
| 6465.53 | 6474.68 | 6481.63 | T:elephant176v2 |
| 7444.04 | 7450.29 | 7455.68 | T:elephant160v2 |
|
| Cycles/byte for 0+long forgery |
| 25% | 50% | 75% | aead |
| 7.87 | 8.10 | 8.28 | T:aes256gcmv1 |
| 8.08 | 8.15 | 8.25 | T:aes128gcmv1 |
| 10.05 | 10.05 | 10.05 | ascon128av12 |
| 14.89 | 14.90 | 14.99 | ascon80pqv12 |
| 14.95 | 14.96 | 14.96 | ascon128v12 |
| 15.54? | 15.71? | 17.49? | T:xoodyakround3 |
| 18.99 | 19.02 | 19.09 | ascon128abi32v12 |
| 28.23 | 28.24 | 28.32 | ascon128bi32v12 |
| 29.26 | 29.27 | 29.27 | T:isapa128v20 |
| 32.00 | 32.04 | 32.08 | T:schwaemm256128v2 |
| 41.20 | 41.20 | 41.21 | T:isapa128av20 |
| 42.29 | 42.30 | 42.35 | T:schwaemm192192v2 |
| 44.76 | 44.83 | 44.87 | T:schwaemm128128v2 |
| 44.86 | 44.88 | 44.89 | romulusn |
| 44.91 | 45.09 | 45.13 | romulusm |
| 45.65 | 45.72 | 45.75 | T:schwaemm256256v2 |
| 48.35 | 48.36 | 48.36 | T:tinyjambu128v2 |
| 49.82 | 49.82 | 50.31 | T:tinyjambu256v2 |
| 53.64 | 53.72 | 53.80 | T:tinyjambu192v2 |
| 54.17 | 54.19 | 54.24 | T:giftcofb128v1 |
| 61.74 | 61.98 | 62.12 | T:grain128aeadv2 |
| 81.27 | 81.30 | 81.39 | T!!!romulust |
| 131.05 | 132.13 | 142.03 | T:elephant200v2 |
| 150.07 | 150.11 | 150.30 | T:isapk128av20 |
| 188.15 | 188.39 | 191.06 | T:isapk128v20 |
| 207.75? | 251.66? | 511.06? | T:isapxv20 |
| 992.71 | 997.78 | 1000.14 | aes256gcmv1 |
| 6466.07 | 6474.27 | 6482.56 | T:elephant176v2 |
| 7443.03 | 7450.35 | 7456.23 | T:elephant160v2 |
|
| Cycles/byte for 1536+1536 encrypt |
| 25% | 50% | 75% | aead |
| 10.36 | 10.36 | 10.36 | ascon128av12 |
| 15.24 | 15.25 | 15.33 | T:aes128gcmv1 |
| 15.31 | 15.31 | 15.31 | ascon128v12 |
| 15.39 | 15.39 | 15.39 | ascon80pqv12 |
| 17.03 | 17.04 | 17.21 | T:aes256gcmv1 |
| 19.57 | 19.58 | 19.59 | ascon128abi32v12 |
| 22.61? | 22.67? | 25.15? | T:xoodyakround3 |
| 29.18 | 29.18 | 29.19 | ascon128bi32v12 |
| 33.23 | 33.28 | 33.34 | T:schwaemm256128v2 |
| 43.50 | 43.53 | 43.63 | T:schwaemm192192v2 |
| 45.58 | 45.65 | 45.68 | T:schwaemm128128v2 |
| 46.70 | 46.75 | 46.96 | T:schwaemm256256v2 |
| 54.42 | 54.42 | 54.42 | T:isapa128av20 |
| 55.05 | 55.06 | 55.13 | T:giftcofb128v1 |
| 59.28 | 59.32 | 59.49 | romulusn |
| 62.47 | 62.52 | 62.62 | T:grain128aeadv2 |
| 63.41 | 63.46 | 63.48 | T:tinyjambu128v2 |
| 64.40 | 64.44 | 64.51 | T:isapa128v20 |
| 74.46 | 74.50 | 74.52 | T:tinyjambu192v2 |
| 75.38 | 75.38 | 75.58 | T:tinyjambu256v2 |
| 82.16 | 82.26 | 82.34 | romulusm |
| 163.68 | 163.72 | 163.91 | T!!!romulust |
| 199.88 | 202.32 | 214.73 | T:elephant200v2 |
| 216.70 | 216.73 | 218.43 | T:isapk128av20 |
| 432.06 | 433.00 | 436.67 | T:isapk128v20 |
| 526.61 | 530.57 | 541.76 | T:isapxv20 |
| 9862.02 | 9867.03 | 9873.63 | T:elephant176v2 |
| 11302.81 | 11305.76 | 11309.47 | T:elephant160v2 |
| 18909.43 | 18915.82 | 18924.55 | aes256gcmv1 |
|
| Cycles/byte for 1536+1536 decrypt |
| 25% | 50% | 75% | aead |
| 10.41 | 10.41 | 10.41 | ascon128av12 |
| 15.18 | 15.22 | 15.31 | T:aes128gcmv1 |
| 15.37 | 15.37 | 15.37 | ascon80pqv12 |
| 15.38 | 15.38 | 15.38 | ascon128v12 |
| 16.99 | 17.00 | 17.03 | T:aes256gcmv1 |
| 19.58 | 19.61 | 19.63 | ascon128abi32v12 |
| 22.38 | 22.41 | 24.69 | T:xoodyakround3 |
| 28.79 | 28.79 | 28.92 | ascon128bi32v12 |
| 33.11 | 33.13 | 33.16 | T:schwaemm256128v2 |
| 43.58 | 43.66 | 43.67 | T:schwaemm192192v2 |
| 45.67 | 45.74 | 45.87 | T:schwaemm128128v2 |
| 46.81 | 46.86 | 47.35 | T:schwaemm256256v2 |
| 54.41 | 54.41 | 54.41 | T:isapa128av20 |
| 55.07 | 55.11 | 55.14 | T:giftcofb128v1 |
| 59.34 | 59.42 | 59.52 | romulusn |
| 63.75 | 63.77 | 63.89 | T:tinyjambu128v2 |
| 64.37 | 64.41 | 64.54 | T:isapa128v20 |
| 64.91 | 64.95 | 65.01 | T:grain128aeadv2 |
| 74.48 | 74.71 | 74.76 | T:tinyjambu192v2 |
| 75.48 | 75.48 | 75.81 | T:tinyjambu256v2 |
| 81.86 | 81.99 | 82.03 | romulusm |
| 163.67 | 163.73 | 163.95 | T!!!romulust |
| 199.92 | 201.41 | 213.59 | T:elephant200v2 |
| 216.70 | 216.73 | 218.43 | T:isapk128av20 |
| 432.09 | 433.02 | 436.37 | T:isapk128v20 |
| 530.39? | 542.02? | 787.30? | T:isapxv20 |
| 9861.08 | 9866.26 | 9870.71 | T:elephant176v2 |
| 11301.14 | 11303.42 | 11309.84 | T:elephant160v2 |
| 18744.99 | 18750.73 | 18761.93 | aes256gcmv1 |
|
| Cycles/byte for 1536+1536 forgery |
| 25% | 50% | 75% | aead |
| 10.41 | 10.41 | 10.41 | ascon128av12 |
| 15.16 | 15.19 | 15.25 | T:aes128gcmv1 |
| 15.37 | 15.37 | 15.37 | ascon80pqv12 |
| 15.43 | 15.43 | 15.43 | ascon128v12 |
| 16.92 | 16.97 | 17.01 | T:aes256gcmv1 |
| 19.59 | 19.60 | 19.63 | ascon128abi32v12 |
| 22.43 | 22.52 | 24.92 | T:xoodyakround3 |
| 28.79 | 28.79 | 28.86 | ascon128bi32v12 |
| 33.10 | 33.13 | 33.20 | T:schwaemm256128v2 |
| 39.62 | 39.62 | 39.68 | T:isapa128v20 |
| 43.20 | 43.20 | 43.21 | T:isapa128av20 |
| 43.59 | 43.63 | 43.66 | T:schwaemm192192v2 |
| 45.67 | 45.74 | 45.88 | T:schwaemm128128v2 |
| 46.81 | 46.97 | 47.28 | T:schwaemm256256v2 |
| 55.07 | 55.11 | 55.15 | T:giftcofb128v1 |
| 59.33 | 59.41 | 59.52 | romulusn |
| 63.75 | 63.75 | 63.89 | T:tinyjambu128v2 |
| 64.91 | 64.93 | 64.99 | T:grain128aeadv2 |
| 74.41 | 74.71 | 74.75 | T:tinyjambu192v2 |
| 75.48 | 75.48 | 75.69 | T:tinyjambu256v2 |
| 81.87 | 82.00 | 82.03 | romulusm |
| 83.89 | 83.92 | 83.97 | T!!!romulust |
| 169.33 | 169.35 | 170.24 | T:isapk128av20 |
| 199.97 | 201.98 | 214.00 | T:elephant200v2 |
| 288.22 | 288.41 | 291.96 | T:isapk128v20 |
| 349.29? | 360.88? | 597.87? | T:isapxv20 |
| 1362.95 | 1363.34 | 1366.29 | aes256gcmv1 |
| 9859.94 | 9864.96 | 9870.17 | T:elephant176v2 |
| 11302.09 | 11305.68 | 11311.56 | T:elephant160v2 |
|
| Cycles/byte for 64+64 encrypt |
| 25% | 50% | 75% | aead |
| 15.82 | 15.83 | 15.96 | ascon128av12 |
| 20.05 | 20.05 | 20.10 | ascon128v12 |
| 20.50 | 20.50 | 20.50 | ascon80pqv12 |
| 29.32 | 29.35 | 29.35 | ascon128abi32v12 |
| 34.57 | 34.97 | 37.99 | T:xoodyakround3 |
| 39.51 | 39.51 | 39.51 | ascon128bi32v12 |
| 55.12 | 55.19 | 55.42 | T:schwaemm256128v2 |
| 59.98 | 60.30 | 60.37 | T:schwaemm128128v2 |
| 67.43 | 67.67 | 67.85 | T:giftcofb128v1 |
| 70.61 | 71.05 | 71.35 | T:grain128aeadv2 |
| 71.47 | 71.56 | 71.65 | T:schwaemm192192v2 |
| 71.38 | 71.61 | 71.92 | romulusn |
| 74.45 | 74.45 | 74.48 | T:tinyjambu128v2 |
| 74.29 | 74.50 | 75.40 | T:schwaemm256256v2 |
| 80.17 | 80.61 | 81.24 | T:aes128gcmv1 |
| 88.30 | 88.30 | 88.53 | T:tinyjambu256v2 |
| 88.39 | 88.43 | 88.60 | T:tinyjambu192v2 |
| 89.99 | 90.90 | 92.13 | T:aes256gcmv1 |
| 94.39 | 94.60 | 94.75 | romulusm |
| 133.41 | 133.41 | 133.45 | T:isapa128av20 |
| 218.56 | 218.89 | 219.24 | T!!!romulust |
| 283.25 | 284.68 | 300.64 | T:elephant200v2 |
| 529.98 | 530.30 | 533.38 | T:isapa128v20 |
| 737.62 | 737.67 | 739.79 | T:isapk128av20 |
| 4545.18 | 4545.47 | 4566.09 | T:isapk128v20 |
| 5315.39 | 5354.28 | 5600.63 | T:isapxv20 |
| 12245.15 | 12288.04 | 12346.38 | T:elephant176v2 |
| 15079.97 | 15162.08 | 15172.93 | T:elephant160v2 |
| 27417.99 | 27425.31 | 27477.66 | aes256gcmv1 |
|
| Cycles/byte for 64+64 decrypt |
| 25% | 50% | 75% | aead |
| 15.70 | 15.70 | 15.76 | ascon128av12 |
| 20.59 | 20.59 | 20.60 | ascon128v12 |
| 20.72 | 20.72 | 20.74 | ascon80pqv12 |
| 29.40 | 29.51 | 29.57 | ascon128abi32v12 |
| 34.57 | 34.79 | 37.56 | T:xoodyakround3 |
| 39.34 | 39.52 | 40.21 | ascon128bi32v12 |
| 55.00 | 55.08 | 55.17 | T:schwaemm256128v2 |
| 59.60 | 59.88 | 60.10 | T:schwaemm128128v2 |
| 67.28 | 67.46 | 67.90 | T:giftcofb128v1 |
| 71.30 | 71.49 | 71.74 | T:schwaemm192192v2 |
| 71.81 | 72.13 | 72.42 | romulusn |
| 73.43 | 73.49 | 73.74 | T:grain128aeadv2 |
| 74.79 | 74.79 | 74.79 | T:tinyjambu128v2 |
| 75.22 | 75.40 | 76.43 | T:schwaemm256256v2 |
| 80.22 | 80.65 | 81.56 | T:aes128gcmv1 |
| 87.91 | 87.91 | 87.98 | T:tinyjambu192v2 |
| 88.66 | 88.66 | 88.89 | T:tinyjambu256v2 |
| 91.00 | 91.86 | 93.19 | T:aes256gcmv1 |
| 97.16 | 97.19 | 97.48 | romulusm |
| 133.33 | 133.33 | 133.39 | T:isapa128av20 |
| 218.46 | 218.80 | 219.18 | T!!!romulust |
| 283.72 | 285.05 | 301.87 | T:elephant200v2 |
| 530.05 | 531.07 | 534.14 | T:isapa128v20 |
| 737.73 | 737.80 | 737.92 | T:isapk128av20 |
| 4545.43 | 4546.43 | 4577.43 | T:isapk128v20 |
| 5324.96? | 5360.72? | 5922.60? | T:isapxv20 |
| 12247.05 | 12303.92 | 12344.05 | T:elephant176v2 |
| 15087.94 | 15165.64 | 15185.68 | T:elephant160v2 |
| 27182.84 | 27188.80 | 27196.45 | aes256gcmv1 |
|
| Cycles/byte for 64+64 forgery |
| 25% | 50% | 75% | aead |
| 15.70 | 15.70 | 15.71 | ascon128av12 |
| 20.58 | 20.58 | 20.58 | ascon128v12 |
| 20.72 | 20.72 | 20.72 | ascon80pqv12 |
| 29.36 | 29.45 | 29.59 | ascon128abi32v12 |
| 34.91 | 35.10 | 37.63 | T:xoodyakround3 |
| 39.42 | 39.46 | 39.52 | ascon128bi32v12 |
| 54.99 | 55.08 | 55.33 | T:schwaemm256128v2 |
| 59.60 | 59.74 | 60.08 | T:schwaemm128128v2 |
| 67.28 | 67.41 | 67.84 | T:giftcofb128v1 |
| 71.26 | 71.45 | 71.70 | T:schwaemm192192v2 |
| 71.80 | 72.07 | 72.38 | romulusn |
| 73.43 | 73.52 | 73.71 | T:grain128aeadv2 |
| 74.77 | 74.77 | 74.77 | T:tinyjambu128v2 |
| 75.23 | 75.83 | 76.45 | T:schwaemm256256v2 |
| 80.08 | 80.97 | 82.60 | T:aes128gcmv1 |
| 87.91 | 87.94 | 88.02 | T:tinyjambu192v2 |
| 88.30 | 88.30 | 88.30 | T:isapa128av20 |
| 88.66 | 88.66 | 88.66 | T:tinyjambu256v2 |
| 89.99 | 90.93 | 92.87 | T:aes256gcmv1 |
| 97.16 | 97.19 | 97.48 | romulusm |
| 136.68 | 136.96 | 137.37 | T!!!romulust |
| 275.92 | 275.92 | 277.42 | T:isapa128v20 |
| 283.57 | 285.04 | 300.53 | T:elephant200v2 |
| 478.07 | 478.11 | 478.61 | T:isapk128av20 |
| 2405.40 | 2405.60 | 2409.53 | T:isapk128v20 |
| 2787.81? | 2813.58? | 3258.11? | T:isapxv20 |
| 9776.97 | 9792.66 | 9869.98 | aes256gcmv1 |
| 12243.70 | 12287.93 | 12343.69 | T:elephant176v2 |
| 15084.94 | 15165.01 | 15181.61 | T:elephant160v2 |
|