| 
| Cycles/byte for long+0 encrypt | 
|---|
 | 25% | 50% | 75% | aead | 
|---|
 | 19.40 | 19.44 | 19.50 | ascon128abi32v12 |  | 23.28 | 23.31 | 23.32 | ascon128av12 |  | 27.03 | 27.67 | 27.93 | T:aes128gcmv1 |  | 29.24 | 29.60 | 29.86 | ascon128bi32v12 |  | 34.42 | 35.02 | 35.95 | T:aes256gcmv1 |  | 37.34 | 37.37 | 37.42 | ascon80pqv12 |  | 37.32 | 37.39 | 37.42 | ascon128v12 |  | 44.48 | 44.50 | 44.56 | T:schwaemm256128v2 |  | 49.45 | 49.51 | 49.56 | T:giftcofb128v1 |  | 58.94 | 58.98 | 59.13 | T:schwaemm192192v2 |  | 59.73 | 59.76 | 59.88 | T:xoodyakround3 |  | 62.86 | 62.91 | 63.04 | T:schwaemm256256v2 |  | 63.46 | 63.70 | 64.15 | T:schwaemm128128v2 |  | 85.53 | 85.62 | 85.77 | T:isapa128av20 |  | 88.21 | 88.25 | 88.28 | T:tinyjambu128v2 |  | 105.98 | 106.01 | 106.09 | T:tinyjambu192v2 |  | 107.45 | 107.66 | 108.08 | T:isapa128v20 |  | 108.67 | 108.88 | 110.02 | T:romulusn |  | 110.73 | 110.75 | 110.91 | T:tinyjambu256v2 |  | 183.02 | 183.56 | 185.98 | T:romulusm |  | 216.92 | 217.26 | 218.11 | romulusn |  | 277.13? | 309.38? | 418.14? | T:isapk128av20 |  | 423.77 | 432.12 | 443.28 | romulusm |  | 440.39 | 440.75 | 443.19 | T:elephant200v2 |  | 360.15? | 441.67? | 619.57? | T:isapk128v20 |  | 608.22 | 613.65 | 626.73 | T:isapxv20 |  | 923.35 | 940.64 | 957.78 | T!!!romulust |  | 20227.49 | 20245.32 | 20280.88 | T:elephant160v2 |  | 22171.71 | 22193.15 | 22226.70 | T:elephant176v2 |  | 109629.53 | 109736.63 | 109877.55 | aes256gcmv1 |  | 
| Cycles/byte for long+0 decrypt | 
|---|
 | 25% | 50% | 75% | aead | 
|---|
 | 19.47 | 19.52 | 19.57 | ascon128abi32v12 |  | 23.32 | 23.36 | 23.38 | ascon128av12 |  | 27.33 | 27.90 | 28.64 | T:aes128gcmv1 |  | 29.36 | 29.45 | 29.80 | ascon128bi32v12 |  | 34.52 | 34.97 | 35.68 | T:aes256gcmv1 |  | 35.67 | 35.76 | 35.84 | ascon80pqv12 |  | 36.57 | 36.64 | 37.23 | ascon128v12 |  | 44.68 | 44.70 | 44.75 | T:schwaemm256128v2 |  | 48.83 | 49.00 | 49.41 | T:giftcofb128v1 |  | 57.50 | 57.63 | 58.15 | T:xoodyakround3 |  | 58.98 | 59.06 | 59.14 | T:schwaemm192192v2 |  | 62.93 | 62.98 | 63.20 | T:schwaemm256256v2 |  | 63.54 | 64.20 | 65.28 | T:schwaemm128128v2 |  | 85.57 | 85.67 | 85.80 | T:isapa128av20 |  | 89.72 | 89.75 | 89.78 | T:tinyjambu128v2 |  | 107.23 | 107.26 | 107.29 | T:tinyjambu192v2 |  | 107.29 | 107.70 | 108.79 | T:isapa128v20 |  | 111.98 | 112.00 | 112.05 | T:tinyjambu256v2 |  | 162.27 | 162.51 | 163.88 | T:romulusn |  | 217.05 | 217.20 | 217.93 | romulusn |  | 235.45 | 235.93 | 242.86 | T:romulusm |  | 263.45? | 309.94? | 379.30? | T:isapk128av20 |  | 423.62 | 432.12 | 441.28 | romulusm |  | 440.39 | 440.59 | 442.40 | T:elephant200v2 |  | 375.79? | 448.47? | 514.55? | T:isapk128v20 |  | 607.87 | 612.60 | 623.69 | T:isapxv20 |  | 923.95 | 933.40 | 940.87 | T!!!romulust |  | 20227.90 | 20246.61 | 20266.78 | T:elephant160v2 |  | 22171.69 | 22184.49 | 22204.97 | T:elephant176v2 |  | 109636.38 | 109670.24 | 109788.32 | aes256gcmv1 |  | 
| Cycles/byte for long+0 forgery | 
|---|
 | 25% | 50% | 75% | aead | 
|---|
 | 19.47 | 19.52 | 19.53 | ascon128abi32v12 |  | 23.33 | 23.37 | 23.43 | ascon128av12 |  | 27.45 | 27.78 | 28.55 | T:aes128gcmv1 |  | 29.36 | 29.62 | 29.80 | ascon128bi32v12 |  | 34.67 | 34.97 | 35.57 | T:aes256gcmv1 |  | 35.72 | 35.74 | 35.78 | ascon80pqv12 |  | 36.58 | 36.66 | 36.77 | ascon128v12 |  | 44.68 | 44.70 | 44.73 | T:schwaemm256128v2 |  | 48.98 | 49.04 | 49.12 | T:giftcofb128v1 |  | 51.95 | 52.12 | 52.34 | T:isapa128v20 |  | 52.02 | 52.18 | 52.25 | T:isapa128av20 |  | 57.77 | 57.89 | 57.95 | T:xoodyakround3 |  | 58.99 | 59.06 | 59.14 | T:schwaemm192192v2 |  | 62.91 | 62.94 | 62.96 | T:schwaemm256256v2 |  | 63.52 | 63.88 | 65.26 | T:schwaemm128128v2 |  | 89.73 | 89.75 | 89.80 | T:tinyjambu128v2 |  | 107.24 | 107.28 | 107.81 | T:tinyjambu192v2 |  | 111.99 | 112.02 | 112.04 | T:tinyjambu256v2 |  | 162.36 | 162.53 | 163.60 | T:romulusn |  | 166.87? | 195.31? | 237.97? | T:isapk128av20 |  | 217.05 | 217.19 | 218.05 | romulusn |  | 235.45 | 236.16 | 241.45 | T:romulusm |  | 211.78? | 274.99? | 338.18? | T:isapk128v20 |  | 297.27 | 297.40 | 305.23 | T!!!romulust |  | 303.14 | 304.00 | 306.25 | T:isapxv20 |  | 423.33 | 432.14 | 441.35 | romulusm |  | 440.40 | 440.58 | 442.36 | T:elephant200v2 |  | 1393.48 | 1407.62 | 1412.72 | aes256gcmv1 |  | 20230.49 | 20244.45 | 20277.65 | T:elephant160v2 |  | 22168.74 | 22185.81 | 22203.65 | T:elephant176v2 |  | 
| Cycles/byte for long+long encrypt | 
|---|
 | 25% | 50% | 75% | aead | 
|---|
 | 17.77 | 18.00 | 18.37 | T:aes128gcmv1 |  | 19.81 | 19.85 | 19.90 | ascon128abi32v12 |  | 21.44 | 21.65 | 22.00 | T:aes256gcmv1 |  | 23.00 | 23.01 | 23.24 | ascon128av12 |  | 29.30 | 29.37 | 29.61 | ascon128bi32v12 |  | 34.42 | 34.45 | 34.50 | ascon80pqv12 |  | 35.02 | 35.07 | 35.14 | ascon128v12 |  | 44.13 | 44.15 | 44.15 | T:schwaemm256128v2 |  | 45.20 | 45.27 | 46.31 | T:xoodyakround3 |  | 48.79 | 48.84 | 49.02 | T:giftcofb128v1 |  | 58.59 | 58.68 | 58.72 | T:schwaemm192192v2 |  | 62.72 | 62.76 | 62.80 | T:schwaemm256256v2 |  | 63.24 | 63.54 | 63.60 | T:schwaemm128128v2 |  | 68.21 | 68.29 | 68.81 | T:isapa128av20 |  | 69.11 | 69.13 | 69.16 | T:tinyjambu128v2 |  | 78.83 | 79.34 | 82.51 | T:isapa128v20 |  | 83.74 | 83.75 | 83.79 | T:tinyjambu192v2 |  | 84.86 | 84.88 | 84.91 | T:tinyjambu256v2 |  | 92.09 | 92.27 | 93.09 | T:romulusn |  | 129.15 | 129.32 | 129.72 | T:romulusm |  | 212.14 | 212.57 | 227.33 | romulusn |  | 229.51? | 254.46? | 298.45? | T:isapk128av20 |  | 314.41 | 321.11 | 325.73 | romulusm |  | 330.85 | 331.11 | 341.39 | T:elephant200v2 |  | 310.36? | 346.09? | 432.15? | T:isapk128v20 |  | 451.61 | 458.10 | 459.36 | T:isapxv20 |  | 610.55 | 618.42 | 627.15 | T!!!romulust |  | 15182.03 | 15190.79 | 15239.25 | T:elephant160v2 |  | 16565.82 | 16585.00 | 16590.20 | T:elephant176v2 |  | 55516.42 | 55537.30 | 55579.91 | aes256gcmv1 |  | 
| Cycles/byte for long+long decrypt | 
|---|
 | 25% | 50% | 75% | aead | 
|---|
 | 17.90 | 18.10 | 18.39 | T:aes128gcmv1 |  | 19.81 | 19.89 | 20.02 | ascon128abi32v12 |  | 21.50 | 21.80 | 22.72 | T:aes256gcmv1 |  | 23.00 | 23.03 | 23.06 | ascon128av12 |  | 28.91 | 29.13 | 29.30 | ascon128bi32v12 |  | 33.15 | 33.20 | 33.37 | ascon80pqv12 |  | 33.92 | 34.01 | 34.06 | ascon128v12 |  | 44.01 | 44.17 | 44.43 | T:xoodyakround3 |  | 44.23 | 44.24 | 44.29 | T:schwaemm256128v2 |  | 48.53 | 48.56 | 48.61 | T:giftcofb128v1 |  | 58.64 | 58.69 | 60.35 | T:schwaemm192192v2 |  | 62.72 | 62.82 | 62.85 | T:schwaemm256256v2 |  | 63.26 | 63.56 | 64.13 | T:schwaemm128128v2 |  | 68.20 | 68.28 | 68.42 | T:isapa128av20 |  | 69.85 | 69.88 | 69.93 | T:tinyjambu128v2 |  | 79.15 | 79.36 | 79.85 | T:isapa128v20 |  | 84.36 | 84.38 | 84.40 | T:tinyjambu192v2 |  | 85.49 | 85.50 | 85.52 | T:tinyjambu256v2 |  | 118.89 | 119.07 | 119.86 | T:romulusn |  | 155.30 | 155.59 | 160.23 | T:romulusm |  | 212.16 | 212.57 | 221.95 | romulusn |  | 223.55? | 245.72? | 267.92? | T:isapk128av20 |  | 315.39 | 321.27 | 324.39 | romulusm |  | 330.75 | 331.07 | 338.16 | T:elephant200v2 |  | 301.50? | 336.24? | 369.83? | T:isapk128v20 |  | 445.60 | 453.04 | 459.05 | T:isapxv20 |  | 610.39 | 617.44 | 618.56 | T!!!romulust |  | 15172.10 | 15187.03 | 15201.90 | T:elephant160v2 |  | 16566.54 | 16582.85 | 16602.27 | T:elephant176v2 |  | 55522.45 | 55540.75 | 55588.70 | aes256gcmv1 |  | 
| Cycles/byte for long+long forgery | 
|---|
 | 25% | 50% | 75% | aead | 
|---|
 | 17.97 | 18.24 | 19.01 | T:aes128gcmv1 |  | 19.86 | 19.89 | 19.98 | ascon128abi32v12 |  | 21.51 | 21.71 | 22.12 | T:aes256gcmv1 |  | 23.00 | 23.02 | 23.05 | ascon128av12 |  | 28.91 | 28.99 | 29.15 | ascon128bi32v12 |  | 33.17 | 33.19 | 33.27 | ascon80pqv12 |  | 33.99 | 34.02 | 34.26 | ascon128v12 |  | 44.23 | 44.24 | 44.25 | T:schwaemm256128v2 |  | 44.18 | 44.25 | 44.38 | T:xoodyakround3 |  | 48.55 | 48.58 | 48.64 | T:giftcofb128v1 |  | 51.43 | 51.53 | 51.83 | T:isapa128v20 |  | 51.46 | 51.54 | 51.67 | T:isapa128av20 |  | 58.62 | 58.65 | 58.69 | T:schwaemm192192v2 |  | 62.73 | 62.79 | 63.17 | T:schwaemm256256v2 |  | 63.27 | 63.57 | 64.13 | T:schwaemm128128v2 |  | 69.86 | 69.88 | 69.91 | T:tinyjambu128v2 |  | 84.37 | 84.38 | 84.40 | T:tinyjambu192v2 |  | 85.49 | 85.51 | 85.69 | T:tinyjambu256v2 |  | 118.82 | 119.03 | 119.58 | T:romulusn |  | 155.24 | 155.52 | 159.80 | T:romulusm |  | 182.26? | 202.53? | 232.56? | T:isapk128av20 |  | 212.36 | 212.62 | 220.46 | romulusn |  | 228.60? | 260.65? | 322.28? | T:isapk128v20 |  | 297.05 | 297.47 | 305.66 | T!!!romulust |  | 297.79 | 298.99 | 305.21 | T:isapxv20 |  | 315.46 | 321.16 | 324.51 | romulusm |  | 330.73 | 331.03 | 339.59 | T:elephant200v2 |  | 1400.47 | 1401.95 | 1407.28 | aes256gcmv1 |  | 15172.84 | 15196.11 | 15230.98 | T:elephant160v2 |  | 16574.50 | 16590.60 | 16614.00 | T:elephant176v2 |  | 
| Cycles/byte for 0+long encrypt | 
|---|
 | 25% | 50% | 75% | aead | 
|---|
 | 8.07 | 8.40 | 8.63 | T:aes128gcmv1 |  | 8.09 | 8.42 | 8.59 | T:aes256gcmv1 |  | 20.23 | 20.27 | 20.36 | ascon128abi32v12 |  | 22.68 | 22.68 | 22.73 | ascon128av12 |  | 29.27 | 29.42 | 29.48 | ascon128bi32v12 |  | 30.64 | 30.67 | 30.70 | T:xoodyakround3 |  | 31.44 | 31.51 | 31.53 | ascon80pqv12 |  | 32.68 | 32.74 | 32.80 | ascon128v12 |  | 43.79 | 43.80 | 43.84 | T:schwaemm256128v2 |  | 48.10 | 48.15 | 48.50 | T:giftcofb128v1 |  | 49.98 | 50.01 | 50.05 | T:tinyjambu128v2 |  | 50.85 | 50.93 | 51.08 | T:isapa128v20 |  | 50.78 | 50.94 | 51.06 | T:isapa128av20 |  | 58.23 | 58.26 | 58.33 | T:schwaemm192192v2 |  | 59.00 | 59.01 | 59.05 | T:tinyjambu256v2 |  | 61.50 | 61.50 | 61.67 | T:tinyjambu192v2 |  | 62.54 | 62.62 | 62.79 | T:schwaemm256256v2 |  | 62.99 | 63.00 | 63.02 | T:schwaemm128128v2 |  | 74.99 | 75.28 | 75.85 | T:romulusm |  | 75.34 | 75.56 | 76.45 | T:romulusn |  | 172.56? | 196.23? | 295.91? | T:isapk128av20 |  | 207.11 | 207.33 | 210.38 | romulusm |  | 207.21 | 208.08 | 215.84 | romulusn |  | 223.92 | 224.05 | 224.45 | T:elephant200v2 |  | 212.88? | 291.98? | 345.82? | T:isapk128v20 |  | 293.26 | 294.35 | 313.72 | T:isapxv20 |  | 296.75 | 297.36 | 307.76 | T!!!romulust |  | 1399.84 | 1411.72 | 1417.53 | aes256gcmv1 |  | 10107.80 | 10129.92 | 10156.70 | T:elephant160v2 |  | 10949.23 | 10960.98 | 10997.18 | T:elephant176v2 |  | 
| Cycles/byte for 0+long decrypt | 
|---|
 | 25% | 50% | 75% | aead | 
|---|
 | 8.10 | 8.36 | 8.53 | T:aes256gcmv1 |  | 8.22 | 8.42 | 8.72 | T:aes128gcmv1 |  | 20.20 | 20.27 | 20.33 | ascon128abi32v12 |  | 22.66 | 22.68 | 22.73 | ascon128av12 |  | 28.45 | 28.49 | 28.56 | ascon128bi32v12 |  | 30.57 | 30.62 | 30.73 | ascon80pqv12 |  | 30.64 | 30.68 | 30.90 | T:xoodyakround3 |  | 31.31 | 31.36 | 31.43 | ascon128v12 |  | 43.79 | 43.81 | 43.84 | T:schwaemm256128v2 |  | 48.10 | 48.13 | 48.24 | T:giftcofb128v1 |  | 50.00 | 50.02 | 50.07 | T:tinyjambu128v2 |  | 50.85 | 50.93 | 51.24 | T:isapa128v20 |  | 50.84 | 50.99 | 51.22 | T:isapa128av20 |  | 58.24 | 58.26 | 58.35 | T:schwaemm192192v2 |  | 58.98 | 59.00 | 59.02 | T:tinyjambu256v2 |  | 61.39 | 61.50 | 61.55 | T:tinyjambu192v2 |  | 62.57 | 62.62 | 62.81 | T:schwaemm256256v2 |  | 62.97 | 63.02 | 63.08 | T:schwaemm128128v2 |  | 75.15 | 75.28 | 75.58 | T:romulusm |  | 75.41 | 75.58 | 75.85 | T:romulusn |  | 154.70? | 192.90? | 257.59? | T:isapk128av20 |  | 207.13 | 207.56 | 210.45 | romulusm |  | 207.15 | 208.04 | 215.90 | romulusn |  | 223.93 | 224.00 | 224.13 | T:elephant200v2 |  | 191.98? | 250.25? | 313.87? | T:isapk128v20 |  | 291.60 | 294.00 | 296.58 | T:isapxv20 |  | 296.48 | 297.16 | 306.54 | T!!!romulust |  | 1393.58 | 1408.32 | 1415.37 | aes256gcmv1 |  | 10102.39 | 10117.73 | 10146.34 | T:elephant160v2 |  | 10957.98 | 10965.39 | 11014.50 | T:elephant176v2 |  | 
| Cycles/byte for 0+long forgery | 
|---|
 | 25% | 50% | 75% | aead | 
|---|
 | 8.11 | 8.36 | 8.64 | T:aes128gcmv1 |  | 8.03 | 8.38 | 8.60 | T:aes256gcmv1 |  | 20.23 | 20.27 | 20.29 | ascon128abi32v12 |  | 22.68 | 22.70 | 22.71 | ascon128av12 |  | 28.46 | 28.50 | 28.54 | ascon128bi32v12 |  | 30.57 | 30.63 | 30.66 | ascon80pqv12 |  | 30.66 | 30.70 | 30.82 | T:xoodyakround3 |  | 31.33 | 31.35 | 31.43 | ascon128v12 |  | 43.77 | 43.81 | 43.86 | T:schwaemm256128v2 |  | 48.11 | 48.14 | 48.20 | T:giftcofb128v1 |  | 49.99 | 50.00 | 50.06 | T:tinyjambu128v2 |  | 50.85 | 50.95 | 51.21 | T:isapa128v20 |  | 50.83 | 50.98 | 51.08 | T:isapa128av20 |  | 58.24 | 58.27 | 58.27 | T:schwaemm192192v2 |  | 58.98 | 59.02 | 59.05 | T:tinyjambu256v2 |  | 61.48 | 61.50 | 61.52 | T:tinyjambu192v2 |  | 62.55 | 62.59 | 62.63 | T:schwaemm256256v2 |  | 62.98 | 63.02 | 63.06 | T:schwaemm128128v2 |  | 75.20 | 75.30 | 75.80 | T:romulusm |  | 75.42 | 75.61 | 75.93 | T:romulusn |  | 159.82? | 185.89? | 220.21? | T:isapk128av20 |  | 207.20 | 207.59 | 210.41 | romulusm |  | 207.22 | 208.00 | 214.25 | romulusn |  | 223.95 | 223.98 | 224.10 | T:elephant200v2 |  | 204.13? | 251.99? | 302.95? | T:isapk128v20 |  | 292.02 | 294.15 | 296.48 | T:isapxv20 |  | 296.75 | 297.04 | 304.63 | T!!!romulust |  | 1395.15 | 1405.99 | 1411.24 | aes256gcmv1 |  | 10105.88 | 10115.89 | 10135.43 | T:elephant160v2 |  | 10959.33 | 10963.11 | 10987.22 | T:elephant176v2 |  | 
| Cycles/byte for 1536+1536 encrypt | 
|---|
 | 25% | 50% | 75% | aead | 
|---|
 | 20.77 | 20.78 | 20.83 | ascon128abi32v12 |  | 21.57 | 21.76 | 22.15 | T:aes128gcmv1 |  | 24.00 | 24.01 | 24.02 | ascon128av12 |  | 25.33 | 25.40 | 25.84 | T:aes256gcmv1 |  | 30.26 | 30.29 | 30.58 | ascon128bi32v12 |  | 35.37 | 35.39 | 35.46 | ascon80pqv12 |  | 35.98 | 36.02 | 36.32 | ascon128v12 |  | 45.87 | 45.87 | 45.91 | T:schwaemm256128v2 |  | 46.11 | 46.12 | 46.17 | T:xoodyakround3 |  | 49.83 | 49.85 | 49.98 | T:giftcofb128v1 |  | 60.33 | 60.34 | 60.44 | T:schwaemm192192v2 |  | 64.59 | 64.64 | 64.97 | T:schwaemm128128v2 |  | 64.89 | 64.90 | 64.98 | T:schwaemm256256v2 |  | 70.16 | 70.16 | 70.19 | T:tinyjambu128v2 |  | 73.72 | 73.77 | 73.88 | T:isapa128av20 |  | 84.86 | 84.88 | 85.14 | T:tinyjambu192v2 |  | 85.99 | 86.00 | 86.11 | T:tinyjambu256v2 |  | 93.69 | 93.74 | 94.01 | T:romulusn |  | 114.80 | 114.85 | 118.72 | T:isapa128v20 |  | 130.91 | 130.99 | 131.88 | T:romulusm |  | 215.16 | 215.43 | 222.64 | romulusn |  | 310.89? | 322.67? | 378.65? | T:isapk128av20 |  | 318.82 | 323.91 | 330.55 | romulusm |  | 338.20 | 338.39 | 349.72 | T:elephant200v2 |  | 621.08 | 630.02 | 633.68 | T!!!romulust |  | 674.96? | 694.61? | 801.56? | T:isapk128v20 |  | 699.92 | 701.98 | 708.30 | T:isapxv20 |  | 15352.64 | 15368.08 | 15421.35 | T:elephant160v2 |  | 16700.11 | 16711.44 | 16747.41 | T:elephant176v2 |  | 56662.65 | 56692.96 | 56735.74 | aes256gcmv1 |  | 
| Cycles/byte for 1536+1536 decrypt | 
|---|
 | 25% | 50% | 75% | aead | 
|---|
 | 20.82 | 20.83 | 20.92 | ascon128abi32v12 |  | 21.48 | 21.73 | 22.33 | T:aes128gcmv1 |  | 24.06 | 24.07 | 24.12 | ascon128av12 |  | 25.35 | 25.40 | 25.79 | T:aes256gcmv1 |  | 29.85 | 29.94 | 30.12 | ascon128bi32v12 |  | 34.18 | 34.19 | 34.28 | ascon80pqv12 |  | 34.99 | 35.01 | 35.09 | ascon128v12 |  | 45.07 | 45.17 | 45.22 | T:xoodyakround3 |  | 45.96 | 45.97 | 45.98 | T:schwaemm256128v2 |  | 49.61 | 49.63 | 49.72 | T:giftcofb128v1 |  | 60.34 | 60.40 | 60.59 | T:schwaemm192192v2 |  | 64.68 | 64.95 | 65.54 | T:schwaemm128128v2 |  | 64.94 | 64.97 | 65.03 | T:schwaemm256256v2 |  | 70.92 | 70.92 | 70.93 | T:tinyjambu128v2 |  | 73.76 | 73.84 | 74.61 | T:isapa128av20 |  | 85.50 | 85.51 | 85.80 | T:tinyjambu192v2 |  | 86.60 | 86.61 | 86.64 | T:tinyjambu256v2 |  | 114.82 | 114.91 | 117.98 | T:isapa128v20 |  | 120.57 | 120.62 | 121.13 | T:romulusn |  | 157.03 | 157.14 | 158.31 | T:romulusm |  | 215.11 | 215.46 | 221.25 | romulusn |  | 319.67 | 324.90 | 330.40 | romulusm |  | 312.91 | 330.28 | 343.24 | T:isapk128av20 |  | 338.20 | 338.61 | 347.33 | T:elephant200v2 |  | 620.78 | 629.40 | 630.66 | T!!!romulust |  | 666.21 | 681.27 | 729.72 | T:isapk128v20 |  | 700.07 | 708.11 | 708.75 | T:isapxv20 |  | 15347.06 | 15362.11 | 15371.84 | T:elephant160v2 |  | 16699.17 | 16711.85 | 16720.55 | T:elephant176v2 |  | 56639.05 | 56653.02 | 56690.48 | aes256gcmv1 |  | 
| Cycles/byte for 1536+1536 forgery | 
|---|
 | 25% | 50% | 75% | aead | 
|---|
 | 20.82 | 20.84 | 20.92 | ascon128abi32v12 |  | 21.48 | 21.51 | 22.07 | T:aes128gcmv1 |  | 24.06 | 24.06 | 24.10 | ascon128av12 |  | 25.34 | 25.36 | 25.82 | T:aes256gcmv1 |  | 29.86 | 30.09 | 30.17 | ascon128bi32v12 |  | 34.18 | 34.21 | 34.79 | ascon80pqv12 |  | 34.98 | 35.01 | 35.17 | ascon128v12 |  | 45.25 | 45.30 | 45.33 | T:xoodyakround3 |  | 45.96 | 45.97 | 46.30 | T:schwaemm256128v2 |  | 49.60 | 49.61 | 49.66 | T:giftcofb128v1 |  | 54.96 | 55.01 | 55.04 | T:isapa128av20 |  | 60.33 | 60.35 | 60.41 | T:schwaemm192192v2 |  | 64.68 | 64.80 | 65.64 | T:schwaemm128128v2 |  | 64.93 | 64.96 | 64.98 | T:schwaemm256256v2 |  | 70.01 | 70.04 | 70.15 | T:isapa128v20 |  | 70.91 | 70.92 | 70.96 | T:tinyjambu128v2 |  | 85.50 | 85.50 | 85.51 | T:tinyjambu192v2 |  | 86.61 | 86.61 | 86.63 | T:tinyjambu256v2 |  | 120.56 | 120.65 | 121.85 | T:romulusn |  | 157.03 | 157.30 | 161.83 | T:romulusm |  | 215.17 | 215.46 | 220.29 | romulusn |  | 238.92? | 245.34? | 271.42? | T:isapk128av20 |  | 306.30 | 306.49 | 312.99 | T!!!romulust |  | 319.72 | 324.89 | 330.58 | romulusm |  | 338.20 | 338.50 | 347.20 | T:elephant200v2 |  | 426.74 | 427.03 | 429.44 | T:isapxv20 |  | 430.23 | 451.02 | 467.75 | T:isapk128v20 |  | 2539.24 | 2540.56 | 2553.40 | aes256gcmv1 |  | 15348.36 | 15360.74 | 15368.17 | T:elephant160v2 |  | 16697.24 | 16701.43 | 16712.74 | T:elephant176v2 |  | 
| Cycles/byte for 64+64 encrypt | 
|---|
 | 25% | 50% | 75% | aead | 
|---|
 | 41.25 | 41.62 | 42.75 | ascon128abi32v12 |  | 46.88 | 46.88 | 47.12 | ascon128av12 |  | 50.12 | 51.62 | 51.88 | ascon128bi32v12 |  | 56.62 | 56.88 | 58.00 | ascon80pqv12 |  | 57.00 | 57.25 | 57.62 | ascon128v12 |  | 73.00 | 73.25 | 74.50 | T:giftcofb128v1 |  | 77.19 | 77.44 | 77.88 | T:xoodyakround3 |  | 85.00 | 85.25 | 85.69 | T:schwaemm256128v2 |  | 93.00 | 93.38 | 95.12 | T:schwaemm128128v2 |  | 93.69 | 93.75 | 94.38 | T:tinyjambu128v2 |  | 97.00 | 98.06 | 100.94 | T:aes128gcmv1 |  | 101.88 | 102.12 | 105.75 | T:aes256gcmv1 |  | 107.50 | 107.75 | 107.81 | T:schwaemm192192v2 |  | 110.38 | 110.38 | 110.75 | T:tinyjambu192v2 |  | 111.31 | 111.44 | 111.69 | T:tinyjambu256v2 |  | 114.19 | 114.31 | 114.56 | T:schwaemm256256v2 |  | 128.88 | 129.56 | 131.19 | T:romulusn |  | 167.62 | 168.56 | 174.12 | T:romulusm |  | 198.62 | 199.81 | 200.81 | T:isapa128av20 |  | 280.19 | 280.94 | 283.50 | romulusn |  | 386.38 | 390.00 | 391.94 | romulusm |  | 489.62 | 490.12 | 492.19 | T:elephant200v2 |  | 855.06 | 856.12 | 857.75 | T!!!romulust |  | 931.50 | 931.69 | 934.56 | T:isapa128v20 |  | 1796.88? | 2137.50? | 2313.06? | T:isapk128av20 |  | 6354.75 | 6357.44 | 6556.75 | T:isapxv20 |  | 7975.62? | 8537.31? | 9295.75? | T:isapk128v20 |  | 20451.31 | 20640.81 | 20683.00 | T:elephant160v2 |  | 20695.62 | 20882.62 | 20898.56 | T:elephant176v2 |  | 82625.75 | 82801.25 | 82847.62 | aes256gcmv1 |  | 
| Cycles/byte for 64+64 decrypt | 
|---|
 | 25% | 50% | 75% | aead | 
|---|
 | 42.38 | 42.62 | 43.50 | ascon128abi32v12 |  | 47.88 | 48.25 | 48.50 | ascon128av12 |  | 50.75 | 50.75 | 51.12 | ascon128bi32v12 |  | 56.62 | 57.00 | 58.25 | ascon80pqv12 |  | 57.62 | 58.00 | 59.62 | ascon128v12 |  | 73.56 | 73.56 | 73.94 | T:giftcofb128v1 |  | 76.50 | 76.88 | 77.19 | T:xoodyakround3 |  | 85.25 | 85.38 | 85.56 | T:schwaemm256128v2 |  | 93.00 | 93.44 | 96.06 | T:schwaemm128128v2 |  | 94.75 | 94.81 | 95.12 | T:tinyjambu128v2 |  | 95.38 | 97.31 | 101.12 | T:aes128gcmv1 |  | 102.00 | 102.62 | 107.25 | T:aes256gcmv1 |  | 107.81 | 108.06 | 108.19 | T:schwaemm192192v2 |  | 111.06 | 111.25 | 111.31 | T:tinyjambu192v2 |  | 112.00 | 112.00 | 112.38 | T:tinyjambu256v2 |  | 114.19 | 114.31 | 114.56 | T:schwaemm256256v2 |  | 156.62 | 157.25 | 159.44 | T:romulusn |  | 193.75 | 195.31 | 203.75 | T:romulusm |  | 199.88 | 200.81 | 203.88 | T:isapa128av20 |  | 280.88 | 281.25 | 283.81 | romulusn |  | 411.06 | 414.00 | 416.88 | romulusm |  | 489.88 | 489.88 | 491.50 | T:elephant200v2 |  | 855.06 | 856.12 | 862.31 | T!!!romulust |  | 932.06 | 932.56 | 936.19 | T:isapa128v20 |  | 1746.69? | 1977.19? | 2486.12? | T:isapk128av20 |  | 6355.56 | 6359.81 | 6402.00 | T:isapxv20 |  | 8147.69 | 8458.81 | 8937.81 | T:isapk128v20 |  | 20451.00 | 20649.19 | 20750.81 | T:elephant160v2 |  | 20690.88 | 20882.62 | 20892.94 | T:elephant176v2 |  | 82781.50 | 82792.38 | 82975.88 | aes256gcmv1 |  | 
| Cycles/byte for 64+64 forgery | 
|---|
 | 25% | 50% | 75% | aead | 
|---|
 | 42.62 | 42.75 | 43.00 | ascon128abi32v12 |  | 48.12 | 48.25 | 48.50 | ascon128av12 |  | 50.75 | 50.75 | 51.12 | ascon128bi32v12 |  | 56.62 | 57.00 | 57.38 | ascon80pqv12 |  | 57.50 | 58.00 | 58.88 | ascon128v12 |  | 73.25 | 73.56 | 73.81 | T:giftcofb128v1 |  | 77.06 | 77.81 | 81.38 | T:xoodyakround3 |  | 85.19 | 85.31 | 85.38 | T:schwaemm256128v2 |  | 93.06 | 93.12 | 95.75 | T:schwaemm128128v2 |  | 94.62 | 94.75 | 94.81 | T:tinyjambu128v2 |  | 95.00 | 96.06 | 99.19 | T:aes128gcmv1 |  | 101.50 | 102.50 | 105.12 | T:aes256gcmv1 |  | 107.81 | 108.06 | 108.12 | T:schwaemm192192v2 |  | 111.06 | 111.25 | 111.31 | T:tinyjambu192v2 |  | 112.00 | 112.00 | 112.38 | T:tinyjambu256v2 |  | 113.94 | 114.19 | 114.31 | T:schwaemm256256v2 |  | 133.75 | 134.69 | 135.19 | T:isapa128av20 |  | 156.00 | 156.94 | 160.06 | T:romulusn |  | 193.69 | 194.06 | 195.56 | T:romulusm |  | 281.25 | 282.31 | 286.75 | romulusn |  | 411.44 | 413.75 | 416.69 | romulusm |  | 489.88 | 489.88 | 491.50 | T:elephant200v2 |  | 494.88 | 495.12 | 498.38 | T:isapa128v20 |  | 513.38 | 514.31 | 517.56 | T!!!romulust |  | 1115.12? | 1355.44? | 1575.69? | T:isapk128av20 |  | 3317.25 | 3318.56 | 3325.31 | T:isapxv20 |  | 4350.75? | 4710.19? | 5485.81? | T:isapk128v20 |  | 20445.44 | 20638.12 | 20653.38 | T:elephant160v2 |  | 20694.69 | 20887.81 | 20934.38 | T:elephant176v2 |  | 28657.62 | 28663.12 | 28684.62 | aes256gcmv1 |  |