VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates, indexed by machine

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each cipher and each implementation.

The shootout

• The primary third-round recommendation is selected when possible.
• If not enough data is available yet for the primary third-round recommendation, an older primary recommendation is used instead.

• 128gcm: aes128gcmv1
• acorn: acorn128v3
• aegis: aegis128l
• aez: aezv4
• ascon: ascon128v11
• cloc: aes128n12t8clocv3
• colm: colm0v1
• deoxys: deoxysi128v141
• jambu: aesjambuv1
• ketje: ketjesrv1
• keyak: lakekeyakv2
• morus: morus1280128v2
• norx: norx6441v2
• ocb: aeadaes128ocbtaglen128v1
• otr: aes128otrpv3
• silc: aes128n12t8silcv3
• tiaoxin: tiaoxinv2

As an example, the "1536+0 encrypt" graph shows the speed, in cycles/byte, of encrypting a 1536-byte message with no additional data. Each graph point indicates the median of many speed measurements. Machines in each graph are sorted primarily by architecture (amd64 for 64-bit Intel and AMD CPUs, armeabi for 32-bit ARM CPUs, etc.) and microarchitecture (Sandy Bridge, Westmere, etc.). These graphs exclude data from very old SUPERCOP versions and from computers with demonstrably unstable timings.

The labels are sorted on the top and bottom of the graph according to an extremely crude metric of overall software performance. Colors are chosen across the RGB-compatible (a,b) range of the CIELAB spectrum at a uniform 50% lightness, to try to give similar visibility to each candidate, although exact results will depend on your monitor, printer, room lighting, eyes, etc.

Each graph is a PNG and links to a higher-resolution PNG. The graphs are also available in maximum resolution as the following PDFs for downloading (the PDFs are smaller than the PNGs) and printing (letter paper, to the edges; scale as necessary for your printer; color printing recommended):

• long+0 encrypt decrypt forgery
• long+long encrypt decrypt forgery
• 0+long encrypt decrypt forgery
• 1536+0 encrypt decrypt forgery
• 1536+1536 encrypt decrypt forgery
• 0+1536 encrypt decrypt forgery
• 64+0 encrypt decrypt forgery
• 64+64 encrypt decrypt forgery
• 0+64 encrypt decrypt forgery

amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20231107

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.14 0.14 0.15 T:tiaoxinv1 0.16 0.16 0.17 T:tiaoxinv2 0.17? 0.18? 0.19? T:aeadaes128ocbtaglen128v1 0.18 0.19 0.19 T:aegis128l 0.18 0.19 0.19 aegis128l 0.23? 0.25? 0.26? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.33 0.33 0.34 aegis256 0.36 0.36 0.37 T:aezv4 0.36 0.36 0.37 T:aezv3 0.12? 0.38? 0.40? T:aeadaes192ocbtaglen128v1 0.38 0.39 0.40 T:aezv5 0.40 0.41 0.42 T:aes128otrsv3 0.41 0.42 0.42 T:aes128otrcv3 0.46 0.47 0.49 T:morus1280256v1 0.47 0.48 0.49 T:morus1280128v1 0.47 0.48 0.50 T:morus1280128v2 0.49 0.50 0.51 T:morus1280256v2 0.53 0.53 0.54 T:aes256otrcv3 0.53 0.53 0.54 T:aes256otrsv3 0.53 0.54 0.55 T:deoxysi128v141 0.55? 0.56? 0.79? T:deoxysneq128128v1 0.57 0.61 0.62 T:deoxysi256v141 0.68 0.70 0.72 T:deoxysneq256128v1 0.69 0.72 0.73 T:morus640128v1 0.62? 0.72? 0.80? T:oceankeyakv2 0.71 0.73 0.75 T:morus640128v2 0.73 0.77 0.80 T:lunarkeyakv2 0.79 0.80 0.82 T:aes128gcmv1 0.85 0.87 0.88 T:norx6444v3 0.88 0.90 0.90 aes256gcmv1 1.15 1.17 1.20 T:deoxyseq128128v1 1.24 1.26 1.27 T:colm0v1 1.25 1.28 1.29 T:deoxysii128v141 1.28 1.29 1.30 T:aes128otrpv3 1.30 1.35 1.43 T:seakeyakv2 1.32 1.35 1.38 T:deoxyseq256128v1 1.44 1.51 1.51 T:deoxysii256v141 1.68 1.68 1.72 T:aes256otrpv3 2.17 2.18 2.20 T:norx6441v3 2.18 2.18 2.20 T:norx6441v2 2.62 2.62 2.63 T:aes128n8t8silcv2 2.60 2.62 2.63 T:norx6441v1 2.62 2.62 2.63 T:aes128n12t8silcv2 2.62 2.62 2.63 T:aes128n12t8silcv3 2.62 2.62 2.63 T:aes128n12t8clocv3 2.62 2.62 2.63 T:aes128n8t8clocv2 2.62 2.63 2.63 T:aes128n12t8clocv2 3.14 3.19 3.23 T:lakekeyakv1 3.23 3.24 3.25 T:norx6461v3 3.23 3.24 3.29 T:norx6461v2 3.23 3.25 3.29 T:lakekeyakv2 3.22 3.30 3.32 T:norx6444v2 3.47 3.48 3.49 T:norx6444v1 3.52 3.52 3.52 T:norx3241v2 3.52 3.52 3.53 T:norx3241v3 3.90 3.92 3.93 T:norx6461v1 4.22 4.23 4.23 T:norx3241v1 5.27 5.27 5.27 T:norx3261v3 5.27 5.27 5.27 T:norx3261v2 5.31 5.38 5.44 T:aesjambuv1 5.48 5.49 5.49 T:acorn128v2 5.49 5.51 5.51 T:acorn128v3 5.47 5.56 5.65 T:ketjemajorv2 5.84 5.85 5.85 ascon128av12 6.06 6.07 6.07 T:ascon96v1 6.12 6.13 6.13 T:ascon128av11 7.03 7.30 7.34 T:ketjeminorv2 7.52 7.52 7.52 T:norx3261v1 7.56 7.59 7.66 T:riverkeyakv2 8.25 8.25 8.26 ascon128v12 8.88 8.88 8.88 T:ascon128v1 8.88 8.88 8.88 T:ascon128v11 11.99 12.13 12.19 T:oceankeyakv1 12.31 12.34 12.36 T:aes128otrsv2 12.32 12.34 12.34 T:aes128otrpv2 12.33 12.34 12.38 T:aes128otrpv1 12.32 12.35 12.38 T:aes128otrsv1 15.60 15.66 15.82 T:seakeyakv1 15.93 15.95 15.97 T:aes256otrsv1 15.94 15.97 16.02 T:aes256otrpv1 15.96 16.00 16.03 T:aes256otrsv2 15.98 16.01 16.02 T:aes256otrpv2 18.42 18.47 18.55 T:proest256otrv1 19.22 19.23 19.43 T:twine80n6t4clocv3 19.83 19.84 20.36 T:twine80n6t4clocv2 21.03 21.13 21.22 T:aeadaes128ocbtaglen64v1 21.04 21.14 21.20 T:aeadaes128ocbtaglen96v1 21.80 21.82 21.86 T:aes128n12clocv1 21.88 21.90 21.95 T:aes128n8clocv1 24.61 24.64 24.70 T:aes128n8silcv1 24.65 24.68 24.71 T:aes128n12silcv1 24.86 24.89 25.11 T:aeadaes192ocbtaglen96v1 24.91 24.98 25.03 T:aeadaes192ocbtaglen64v1 28.94 28.99 29.40 T:aeadaes256ocbtaglen64v1 28.94 29.01 29.34 T:aeadaes256ocbtaglen96v1 30.83 30.92 31.04 T:ketjesrv2 31.36 31.45 31.58 T:riverkeyakv1 33.58 33.62 33.64 T:ketjesrv1 42.32 42.36 42.38 T:ketjejrv1 44.38 44.42 44.45 T:proest128otrv1 47.87 47.90 48.02 T:colm127v1 65.82 65.90 65.96 T:deoxysneq128128v13 68.12 68.26 68.67 T:present80n6t4silcv3 70.30 70.47 70.67 T:ketjejrv2 108.19 108.34 108.46 T:deoxysneq256128v13 110.22 111.62 111.90 T:led80n6t4silcv3 115.72 116.74 117.49 T:twine80n6clocv1 131.15 131.33 131.47 T:deoxyseq128128v13 136.93 137.49 138.89 T:aezv1 218.63 218.77 219.10 T:deoxyseq256128v13 459.52? 497.75? 572.01? T:acorn128 2153.63 2157.47 2165.26 T:led80n6silcv1 2177.80 2189.00 2215.31 T:led80n6t4silcv2 3749.26 3750.29 3751.06 T:present80n6silcv1 3750.18 3751.06 3751.73 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.18? 0.18? 0.21? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.18? 0.19? 0.20? aegis128l 0.23? 0.25? 0.27? T:aeadaes256ocbtaglen128v1 0.28 0.30 0.30 T:tiaoxinv2 0.28? 0.31? 0.32? T:tiaoxinv1 0.31 0.31 0.32 T:aegis128 0.32 0.33 0.34 aegis256 0.36 0.36 0.37 T:aezv4 0.37 0.37 0.38 T:aezv3 0.38 0.39 0.40 T:aezv5 0.36? 0.40? 0.41? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrsv3 0.42 0.42 0.43 T:aes128otrcv3 0.48 0.49 0.51 T:morus1280128v2 0.50 0.50 0.51 T:morus1280256v2 0.50 0.51 0.51 T:morus1280256v1 0.50 0.51 0.51 T:morus1280128v1 0.54 0.55 0.55 T:aes256otrsv3 0.55 0.55 0.56 T:aes256otrcv3 0.58 0.60 0.61 T:deoxysi128v141 0.67 0.68 0.71 T:deoxysneq128128v1 0.64 0.69 0.71 T:aes128gcmv1 0.66 0.70 0.71 T:deoxysi256v141 0.71 0.72 0.74 T:deoxysneq256128v1 0.69 0.73 0.75 T:oceankeyakv2 0.72 0.74 0.76 T:morus640128v2 0.78 0.79 0.80 T:morus640128v1 0.78 0.80 0.82 aes256gcmv1 0.80? 0.86? 0.93? T:lunarkeyakv2 0.86 0.87 0.88 T:norx6444v3 1.19 1.21 1.22 T:colm0v1 1.23 1.27 1.27 T:deoxysii128v141 1.23 1.29 1.36 T:aes128otrpv3 1.39 1.40 1.41 T:deoxyseq128128v1 1.35? 1.44? 1.52? T:seakeyakv2 1.42 1.50 1.51 T:deoxysii256v141 1.59 1.60 1.64 T:deoxyseq256128v1 1.73 1.75 1.76 T:aes256otrpv3 2.13 2.15 2.17 T:norx6441v3 2.14 2.15 2.16 T:norx6441v2 2.56 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.57 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128n12t8clocv2 2.55 2.57 2.59 T:aes128n12t8silcv3 2.56 2.57 2.58 T:aes128n12t8silcv2 2.55 2.58 2.58 T:aes128n8t8silcv2 2.65 2.66 2.67 T:norx6441v1 3.21 3.23 3.25 T:norx6461v3 3.18 3.24 3.27 T:norx6444v2 3.22 3.24 3.29 T:norx6461v2 3.20 3.27 3.33 T:lakekeyakv1 3.23 3.28 3.30 T:lakekeyakv2 3.33 3.33 3.35 T:norx6444v1 3.58 3.59 3.61 T:norx3241v2 3.59 3.60 3.61 T:norx3241v3 3.97 4.01 4.03 T:norx6461v1 4.31 4.35 4.36 T:norx3241v1 5.31 5.32 5.32 T:norx3261v3 5.31 5.32 5.34 T:norx3261v2 5.35 5.38 5.41 T:ketjemajorv2 5.49 5.51 5.51 T:acorn128v3 5.72 5.74 5.74 T:acorn128v2 5.72 5.75 5.86 T:aesjambuv1 5.80 5.82 5.82 T:ascon128av11 5.87 5.88 5.88 ascon128av12 6.02 6.03 6.03 T:ascon96v1 7.13 7.16 7.22 T:ketjeminorv2 7.30 7.30 7.39 T:norx3261v1 7.74 7.80 7.84 T:riverkeyakv2 8.38 8.38 8.38 ascon128v12 9.00 9.00 9.01 T:ascon128v1 9.00 9.00 9.01 T:ascon128v11 12.01 12.13 12.21 T:oceankeyakv1 12.64 12.69 12.71 T:aes128otrsv2 12.63 12.69 12.72 T:aes128otrpv2 12.66 12.69 12.73 T:aes128otrsv1 12.68 12.73 12.80 T:aes128otrpv1 15.53 15.67 15.86 T:seakeyakv1 16.28 16.32 16.35 T:aes256otrpv1 16.29 16.32 16.36 T:aes256otrpv2 16.31 16.33 16.38 T:aes256otrsv2 16.31 16.35 16.40 T:aes256otrsv1 18.35 18.38 18.42 T:proest256otrv1 19.06 19.09 19.25 T:twine80n6t4clocv3 20.40 20.42 20.44 T:twine80n6t4clocv2 21.67 21.74 21.81 T:ketjesrv2 22.95 23.00 23.04 T:aes128n8clocv1 22.97 23.00 23.03 T:aes128n12clocv1 24.56 24.58 24.64 T:aes128n8silcv1 24.56 24.61 24.65 T:aes128n12silcv1 28.86 28.91 28.96 T:aeadaes128ocbtaglen64v1 28.85 28.92 29.23 T:aeadaes128ocbtaglen96v1 31.38 31.51 31.60 T:riverkeyakv1 33.74 33.83 33.96 T:ketjesrv1 34.41 34.52 34.62 T:aeadaes192ocbtaglen96v1 34.48 34.59 34.69 T:aeadaes192ocbtaglen64v1 40.01 40.10 40.22 T:aeadaes256ocbtaglen64v1 40.15 40.25 40.27 T:aeadaes256ocbtaglen96v1 43.10 43.13 43.16 T:proest128otrv1 43.90 43.97 44.01 T:ketjejrv1 63.10 63.34 63.39 T:colm127v1 67.99 68.15 68.39 T:present80n6t4silcv3 69.38 69.54 69.67 T:ketjejrv2 87.83 87.91 88.04 T:deoxysneq128128v13 107.36 107.68 109.49 T:led80n6t4silcv3 116.49 118.08 120.03 T:twine80n6clocv1 131.30 131.38 131.48 T:deoxyseq128128v13 132.63 132.79 132.92 T:deoxysneq256128v13 137.54 138.33 139.42 T:aezv1 218.44 218.82 219.56 T:deoxyseq256128v13 452.70? 490.28? 559.64? T:acorn128 2146.55 2154.23 2163.48 T:led80n6silcv1 2160.14 2167.24 2174.45 T:led80n6t4silcv2 3749.64 3750.63 3752.17 T:present80n6silcv1 3750.94 3751.93 3752.70 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13 0.14 0.14 T:aezv4 0.13? 0.14? 0.19? T:aezv3 0.14? 0.15? 0.16? T:aezv5 0.18? 0.19? 0.20? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.23? 0.24? 0.26? aegis128l -0.02? 0.24? 0.52? T:aeadaes256ocbtaglen128v1 0.27? 0.28? 0.32? T:tiaoxinv1 0.28 0.30 0.30 T:tiaoxinv2 0.31 0.32 0.32 T:aegis128 0.33? 0.39? 0.39? aegis256 0.40? 0.40? 0.67? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrsv3 0.41 0.42 0.43 T:aes128otrcv3 0.46 0.48 0.50 T:morus1280128v2 0.50 0.50 0.51 T:morus1280128v1 0.50 0.50 0.51 T:morus1280256v1 0.50 0.51 0.51 T:morus1280256v2 0.54 0.55 0.55 T:aes256otrsv3 0.55 0.55 0.56 T:aes256otrcv3 0.60 0.61 0.61 T:deoxysi128v141 0.66 0.68 0.68 T:deoxysneq128128v1 0.68 0.69 0.70 T:aes128gcmv1 0.69 0.70 0.70 T:deoxysi256v141 0.71 0.72 0.74 T:deoxysneq256128v1 0.73 0.75 0.76 T:morus640128v2 0.73 0.76 0.79 T:oceankeyakv2 0.78 0.78 0.79 T:morus640128v1 0.79 0.81 0.81 aes256gcmv1 0.85 0.86 0.87 T:norx6444v3 0.85 0.88 0.91 T:lunarkeyakv2 1.19 1.21 1.23 T:colm0v1 1.27 1.27 1.28 T:deoxysii128v141 1.23? 1.32? 1.38? T:aes128otrpv3 1.39 1.40 1.40 T:deoxyseq128128v1 1.39? 1.47? 1.63? T:seakeyakv2 1.49 1.50 1.50 T:deoxysii256v141 1.58 1.59 1.64 T:deoxyseq256128v1 1.68 1.75 1.81 T:aes256otrpv3 2.14 2.16 2.17 T:norx6441v2 2.15 2.16 2.17 T:norx6441v3 2.56 2.56 2.62 T:aes128n12t8clocv2 2.56 2.56 2.67 T:aes128n12t8silcv2 2.45 2.56 2.67 T:aes128n12t8silcv3 2.45 2.56 2.67 T:aes128n8t8silcv2 2.56 2.56 2.62 T:aes128n12t8clocv3 2.56 2.56 2.62 T:aes128n8t8clocv2 2.65 2.66 2.67 T:norx6441v1 3.21 3.22 3.24 T:norx6461v3 3.20 3.27 3.30 T:norx6444v2 3.25 3.27 3.34 T:lakekeyakv1 3.24 3.28 3.30 T:norx6461v2 3.26 3.30 3.36 T:lakekeyakv2 3.34 3.35 3.36 T:norx6444v1 3.58 3.59 3.60 T:norx3241v3 3.58 3.59 3.60 T:norx3241v2 3.98 4.01 4.04 T:norx6461v1 4.30 4.32 4.36 T:norx3241v1 5.31 5.33 5.33 T:norx3261v2 5.34 5.34 5.35 T:norx3261v3 5.37 5.40 5.44 T:ketjemajorv2 5.51 5.51 5.51 T:acorn128v3 5.74 5.74 5.74 T:acorn128v2 5.72 5.76 5.86 T:aesjambuv1 5.82 5.82 5.84 T:ascon128av11 5.88 5.88 5.88 ascon128av12 6.03 6.03 6.05 T:ascon96v1 7.20 7.22 7.26 T:ketjeminorv2 7.30 7.39 7.39 T:norx3261v1 7.78 7.81 7.84 T:riverkeyakv2 8.38 8.38 8.38 ascon128v12 8.99 9.00 9.02 T:ascon128v11 9.00 9.00 9.02 T:ascon128v1 12.05 12.12 12.20 T:oceankeyakv1 12.68 12.70 12.74 T:aes128otrsv2 12.67 12.71 12.73 T:aes128otrpv2 12.68 12.71 12.74 T:aes128otrsv1 12.69 12.76 12.80 T:aes128otrpv1 15.58 15.69 15.83 T:seakeyakv1 16.30 16.34 16.38 T:aes256otrpv2 16.30 16.34 16.38 T:aes256otrpv1 16.30 16.37 16.42 T:aes256otrsv1 16.34 16.38 16.41 T:aes256otrsv2 18.37 18.40 18.42 T:proest256otrv1 19.06 19.10 19.24 T:twine80n6t4clocv3 19.88 20.39 20.43 T:twine80n6t4clocv2 21.72 21.79 21.84 T:ketjesrv2 22.93 22.98 23.02 T:aes128n8clocv1 22.97 22.99 23.02 T:aes128n12clocv1 24.55 24.58 24.62 T:aes128n12silcv1 24.56 24.59 24.62 T:aes128n8silcv1 28.86 28.91 28.93 T:aeadaes128ocbtaglen64v1 28.89 28.95 29.22 T:aeadaes128ocbtaglen96v1 31.42 31.51 31.57 T:riverkeyakv1 33.86 33.94 34.06 T:ketjesrv1 34.43 34.52 34.61 T:aeadaes192ocbtaglen96v1 34.49 34.61 34.68 T:aeadaes192ocbtaglen64v1 40.01 40.11 40.31 T:aeadaes256ocbtaglen64v1 40.13 40.24 40.27 T:aeadaes256ocbtaglen96v1 43.10 43.13 43.16 T:proest128otrv1 43.92 43.97 44.00 T:ketjejrv1 62.17 62.33 62.46 T:colm127v1 67.94 68.03 68.38 T:present80n6t4silcv3 69.31 69.41 69.54 T:ketjejrv2 87.82 87.90 88.16 T:deoxysneq128128v13 103.72 107.34 109.11 T:led80n6t4silcv3 115.42 116.48 120.14 T:twine80n6clocv1 131.25 131.35 131.48 T:deoxyseq128128v13 132.68 133.04 133.18 T:deoxysneq256128v13 137.45 137.94 139.34 T:aezv1 218.35 218.82 219.67 T:deoxyseq256128v13 452.51? 502.70? 545.49? T:acorn128 2146.43 2154.15 2163.24 T:led80n6silcv1 2160.28 2167.73 2174.37 T:led80n6t4silcv2 3749.32 3751.12 3752.85 T:present80n6silcv1 3751.63 3752.30 3753.02 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.11? 0.12? 0.13? T:tiaoxinv1 0.11? 0.13? 0.14? T:tiaoxinv2 0.15? 0.17? 0.19? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 T:aegis128l 0.17 0.17 0.18 aegis128l 0.11? 0.25? 0.37? T:aeadaes256ocbtaglen128v1 0.24 0.25 0.26 T:aezv3 0.25 0.26 0.26 T:aezv5 0.25 0.26 0.26 T:aezv4 0.31 0.31 0.32 T:aegis128 0.33 0.33 0.33 aegis256 0.36? 0.39? 0.40? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.41 T:aes128otrcv3 0.48 0.48 0.49 T:morus1280128v1 0.48 0.48 0.49 T:morus1280128v2 0.47 0.48 0.50 T:morus1280256v1 0.48 0.50 0.51 T:morus1280256v2 0.53 0.54 0.54 T:aes256otrcv3 0.60 0.60 0.61 T:aes128gcmv1 0.58? 0.62? 0.69? T:oceankeyakv2 0.60 0.64 0.65 T:deoxysi128v141 0.64 0.65 0.66 aes256gcmv1 0.65 0.65 0.66 T:deoxysneq128128v1 0.72 0.73 0.76 T:morus640128v1 0.72 0.73 0.74 T:morus640128v2 0.72 0.76 0.76 T:deoxysi256v141 0.75? 0.80? 0.84? T:deoxysneq256128v1 0.87 0.88 0.89 T:colm0v1 0.90 0.91 0.93 T:lunarkeyakv2 0.96 0.98 1.00 T:deoxyseq128128v1 0.97 1.02 1.02 T:deoxysii128v141 1.14 1.18 1.22 T:seakeyakv2 1.15 1.19 1.20 T:deoxyseq256128v1 1.16 1.20 1.21 T:deoxysii256v141 1.23 1.24 1.25 T:aes128otrpv3 1.48 1.49 1.49 T:aes128otrsv3 1.50 1.51 1.52 T:norx6444v3 1.64 1.65 1.67 T:aes256otrpv3 2.05 2.05 2.05 T:aes256otrsv3 2.10 2.13 2.15 T:norx6441v3 2.12 2.13 2.14 T:norx6441v2 2.55 2.56 2.58 T:norx6441v1 2.59 2.59 2.60 T:aes128n12t8clocv3 2.59 2.59 2.60 T:aes128n8t8silcv2 2.59 2.59 2.59 T:aes128n12t8silcv2 2.59 2.59 2.59 T:aes128n12t8silcv3 2.59 2.59 2.59 T:aes128n12t8clocv2 2.59 2.60 2.60 T:aes128n8t8clocv2 2.82 2.86 2.87 T:lakekeyakv2 3.04 3.07 3.09 T:lakekeyakv1 3.13 3.14 3.20 T:norx6461v2 3.16 3.18 3.24 T:norx6444v2 3.18 3.19 3.20 T:norx6461v3 3.36 3.37 3.38 T:norx6444v1 3.52 3.52 3.52 T:norx3241v3 3.52 3.52 3.52 T:norx3241v2 3.76 3.77 3.83 T:norx6461v1 4.23 4.23 4.23 T:norx3241v1 4.80 4.83 4.88 T:ketjemajorv2 5.24 5.25 5.26 T:acorn128v2 5.25 5.26 5.27 T:acorn128v3 5.27 5.27 5.27 T:norx3261v3 5.27 5.27 5.27 T:norx3261v2 5.26 5.29 5.31 T:aesjambuv1 5.48 5.52 5.53 T:riverkeyakv2 5.80 5.81 5.81 ascon128av12 6.08 6.08 6.09 T:ascon96v1 6.11 6.11 6.12 T:ascon128av11 6.54 6.59 6.61 T:ketjeminorv2 7.52 7.52 7.53 T:norx3261v1 8.28 8.28 8.29 ascon128v12 8.81 8.81 8.82 T:ascon128v1 8.81 8.81 8.82 T:ascon128v11 11.85 11.86 11.87 T:aes128otrpv2 11.85 11.87 11.89 T:aes128otrpv1 11.93 11.95 11.97 T:aes128otrsv2 11.93 11.96 11.98 T:aes128otrsv1 11.99 12.06 12.11 T:oceankeyakv1 15.48 15.50 15.52 T:aes256otrpv1 15.49 15.51 15.56 T:seakeyakv1 15.51 15.52 15.54 T:aes256otrpv2 15.56 15.58 15.59 T:aes256otrsv1 15.60 15.61 15.62 T:aes256otrsv2 16.71 16.72 16.73 T:aes128n12clocv1 16.72 16.74 16.75 T:aes128n8clocv1 18.52 18.54 18.57 T:aes128n12silcv1 18.55 18.57 18.59 T:aes128n8silcv1 18.59 18.62 18.67 T:proest256otrv1 19.03 19.04 19.08 T:twine80n6t4clocv3 20.14 20.28 20.31 T:twine80n6t4clocv2 20.72 20.75 20.86 T:aeadaes128ocbtaglen96v1 20.77 20.80 20.83 T:aeadaes128ocbtaglen64v1 24.57 24.59 24.68 T:aeadaes192ocbtaglen96v1 24.61 24.63 24.67 T:aeadaes192ocbtaglen64v1 26.61 26.71 26.76 T:ketjesrv2 28.48 28.50 28.72 T:aeadaes256ocbtaglen64v1 28.40 28.51 28.57 T:aeadaes256ocbtaglen96v1 29.90 29.94 30.01 T:riverkeyakv1 31.59 31.64 31.67 T:ketjesrv1 34.96 35.00 35.02 T:colm127v1 40.90 40.92 41.01 T:ketjejrv1 43.28 43.31 43.33 T:proest128otrv1 65.63 65.67 65.72 T:deoxysneq128128v13 67.46 67.46 67.54 T:present80n6t4silcv3 68.34 68.46 68.51 T:ketjejrv2 86.62 87.20 87.61 T:twine80n6clocv1 91.14 91.53 91.72 T:aezv1 97.98 98.03 98.26 T:deoxyseq128128v13 105.76 106.70 108.51 T:led80n6t4silcv3 107.84 107.90 108.00 T:deoxysneq256128v13 163.34 163.59 163.82 T:deoxyseq256128v13 473.32? 521.42? 541.01? T:acorn128 1615.17 1616.62 1620.09 T:led80n6silcv1 1633.32 1634.81 1652.10 T:led80n6t4silcv2 2812.27 2812.82 2814.14 T:present80n6silcv1 2812.18 2814.29 2815.69 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.17 0.17 0.18 T:aegis128l 0.17 0.17 0.18 aegis128l 0.16? 0.18? 0.19? T:aeadaes128ocbtaglen128v1 0.19? 0.19? 0.22? T:tiaoxinv1 0.18? 0.20? 0.20? T:tiaoxinv2 0.10? 0.23? 0.37? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.26 T:aezv3 0.25 0.25 0.26 T:aezv5 0.25 0.26 0.26 T:aezv4 0.31 0.31 0.32 T:aegis128 0.33 0.33 0.33 aegis256 0.26? 0.39? 0.53? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.45 0.48 0.50 T:morus1280128v2 0.49 0.50 0.50 T:morus1280256v1 0.50 0.50 0.50 T:morus1280128v1 0.50 0.50 0.51 T:morus1280256v2 0.52 0.54 0.56 T:aes128gcmv1 0.54 0.55 0.55 T:aes256otrcv3 0.59 0.60 0.61 aes256gcmv1 0.61? 0.62? 0.70? T:oceankeyakv2 0.65 0.68 0.68 T:deoxysi128v141 0.67 0.71 0.72 T:deoxysneq128128v1 0.72 0.74 0.75 T:morus640128v2 0.76 0.80 0.80 T:deoxysi256v141 0.75 0.81 0.83 T:deoxysneq256128v1 0.79 0.81 0.83 T:morus640128v1 0.86 0.87 0.88 T:colm0v1 0.95 0.96 0.99 T:lunarkeyakv2 0.97 1.02 1.02 T:deoxysii128v141 1.05 1.09 1.12 T:deoxyseq128128v1 1.14 1.17 1.23 T:seakeyakv2 1.15 1.20 1.21 T:deoxysii256v141 1.22 1.24 1.27 T:aes128otrpv3 1.32 1.34 1.36 T:deoxyseq256128v1 1.49 1.49 1.50 T:aes128otrsv3 1.50 1.51 1.52 T:norx6444v3 1.64 1.65 1.65 T:aes256otrpv3 2.06 2.06 2.06 T:aes256otrsv3 2.11 2.12 2.14 T:norx6441v2 2.12 2.14 2.14 T:norx6441v3 2.54 2.56 2.57 T:norx6441v1 2.56 2.56 2.57 T:aes128n8t8silcv2 2.55 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.57 T:aes128n12t8clocv2 2.56 2.57 2.57 T:aes128n12t8silcv3 2.89 2.91 2.92 T:lakekeyakv2 3.11 3.14 3.17 T:lakekeyakv1 3.16 3.19 3.20 T:norx6461v2 3.19 3.20 3.21 T:norx6461v3 3.16 3.21 3.23 T:norx6444v2 3.30 3.31 3.31 T:norx6444v1 3.56 3.56 3.56 T:norx3241v2 3.56 3.56 3.57 T:norx3241v3 3.82 3.83 3.84 T:norx6461v1 4.26 4.27 4.29 T:norx3241v1 4.71 4.72 4.84 T:ketjemajorv2 5.25 5.26 5.26 T:acorn128v3 5.29 5.30 5.31 T:norx3261v2 5.30 5.31 5.31 T:norx3261v3 5.37 5.37 5.38 T:acorn128v2 5.51 5.55 5.60 T:aesjambuv1 5.54 5.55 5.58 T:riverkeyakv2 5.76 5.82 5.82 ascon128av12 5.95 5.96 5.96 T:ascon128av11 6.06 6.07 6.07 T:ascon96v1 6.54 6.56 6.57 T:ketjeminorv2 7.46 7.46 7.46 T:norx3261v1 8.35 8.35 8.35 ascon128v12 8.81 8.82 8.82 T:ascon128v1 8.81 8.82 8.82 T:ascon128v11 12.02 12.04 12.06 T:aes128otrpv2 12.00 12.05 12.09 T:oceankeyakv1 12.05 12.07 12.09 T:aes128otrpv1 12.09 12.11 12.13 T:aes128otrsv2 12.11 12.13 12.15 T:aes128otrsv1 15.47 15.51 15.57 T:seakeyakv1 15.65 15.67 15.71 T:aes256otrpv1 15.66 15.68 15.70 T:aes256otrpv2 15.75 15.77 15.79 T:aes256otrsv1 15.75 15.78 15.80 T:aes256otrsv2 17.26 17.28 17.29 T:aes128n8clocv1 17.27 17.29 17.31 T:aes128n12clocv1 18.48 18.50 18.53 T:aes128n12silcv1 18.57 18.58 18.59 T:proest256otrv1 18.63 18.70 18.74 T:aes128n8silcv1 18.94 18.98 19.14 T:twine80n6t4clocv3 19.66 20.20 20.23 T:twine80n6t4clocv2 22.04 22.08 22.16 T:ketjesrv2 24.61 24.63 24.82 T:aeadaes128ocbtaglen64v1 24.65 24.67 24.70 T:aeadaes128ocbtaglen96v1 29.30 29.32 29.51 T:aeadaes192ocbtaglen64v1 29.35 29.45 29.46 T:aeadaes192ocbtaglen96v1 29.90 29.93 30.03 T:riverkeyakv1 31.66 31.72 31.81 T:ketjesrv1 34.09 34.11 34.13 T:aeadaes256ocbtaglen96v1 34.12 34.32 34.40 T:aeadaes256ocbtaglen64v1 41.68 41.73 41.81 T:ketjejrv1 42.63 42.66 42.69 T:proest128otrv1 42.73 42.76 42.86 T:colm127v1 67.35 67.52 67.64 T:present80n6t4silcv3 67.89 68.03 68.13 T:ketjejrv2 76.72 76.75 76.79 T:deoxysneq128128v13 86.52 86.99 87.46 T:twine80n6clocv1 91.39 91.62 91.80 T:aezv1 97.93 98.00 98.36 T:deoxyseq128128v13 102.82 107.33 108.22 T:led80n6t4silcv3 120.31 120.49 120.62 T:deoxysneq256128v13 163.36 163.89 163.99 T:deoxyseq256128v13 479.92? 528.09? 547.31? T:acorn128 1612.55 1613.02 1613.36 T:led80n6silcv1 1632.68 1633.38 1634.10 T:led80n6t4silcv2 2812.67 2813.50 2814.51 T:present80n6silcv1 2811.25 2813.71 2814.17 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.13 0.13 0.13 T:aezv3 0.11? 0.14? 0.14? T:aezv5 0.11? 0.14? 0.14? T:aezv4 0.17 0.17 0.18 T:aegis128l 0.18 0.18 0.18 T:aeadaes128ocbtaglen128v1 0.19 0.20 0.20 aegis128l 0.20 0.20 0.21 T:tiaoxinv2 0.19? 0.21? 0.22? T:tiaoxinv1 0.23 0.24 0.24 T:aeadaes256ocbtaglen128v1 0.31 0.32 0.32 T:aegis128 0.32 0.35 0.35 aegis256 0.39 0.39 0.40 T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.45 0.48 0.49 T:morus1280128v2 0.49 0.50 0.51 T:morus1280256v1 0.50 0.50 0.50 T:morus1280128v1 0.50 0.50 0.50 T:morus1280256v2 0.53 0.54 0.55 T:aes128gcmv1 0.54 0.55 0.55 T:aes256otrcv3 0.59 0.60 0.61 aes256gcmv1 0.63? 0.65? 0.72? T:oceankeyakv2 0.68 0.68 0.68 T:deoxysi128v141 0.69 0.71 0.71 T:deoxysneq128128v1 0.72 0.73 0.74 T:morus640128v2 0.80 0.80 0.81 T:deoxysi256v141 0.80 0.80 0.81 T:deoxysneq256128v1 0.78 0.81 0.82 T:morus640128v1 0.82 0.87 0.88 T:colm0v1 0.96 0.97 0.98 T:lunarkeyakv2 1.01 1.02 1.02 T:deoxysii128v141 1.05 1.09 1.09 T:deoxyseq128128v1 1.19 1.20 1.21 T:deoxysii256v141 1.19 1.21 1.29 T:seakeyakv2 1.20 1.23 1.27 T:aes128otrpv3 1.33 1.35 1.35 T:deoxyseq256128v1 1.49 1.49 1.49 T:aes128otrsv3 1.51 1.51 1.52 T:norx6444v3 1.61 1.64 1.67 T:aes256otrpv3 2.05 2.06 2.06 T:aes256otrsv3 2.09 2.10 2.10 T:norx6441v3 2.10 2.12 2.13 T:norx6441v2 2.55 2.56 2.57 T:norx6441v1 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128n8t8clocv2 2.50 2.56 2.56 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128n12t8silcv3 2.90 2.93 2.95 T:lakekeyakv2 3.12 3.14 3.15 T:lakekeyakv1 3.16 3.17 3.19 T:norx6461v2 3.20 3.20 3.21 T:norx6461v3 3.18 3.24 3.25 T:norx6444v2 3.31 3.32 3.32 T:norx6444v1 3.54 3.55 3.56 T:norx3241v3 3.55 3.56 3.56 T:norx3241v2 3.82 3.82 3.83 T:norx6461v1 4.26 4.27 4.27 T:norx3241v1 4.72 4.76 4.82 T:ketjemajorv2 5.26 5.26 5.26 T:acorn128v3 5.30 5.30 5.31 T:norx3261v2 5.29 5.31 5.31 T:norx3261v3 5.37 5.37 5.38 T:acorn128v2 5.51 5.54 5.60 T:aesjambuv1 5.55 5.58 5.59 T:riverkeyakv2 5.82 5.82 5.82 ascon128av12 5.95 5.96 5.96 T:ascon128av11 6.06 6.06 6.06 T:ascon96v1 6.57 6.59 6.61 T:ketjeminorv2 7.41 7.42 7.42 T:norx3261v1 8.35 8.35 8.35 ascon128v12 8.81 8.82 8.82 T:ascon128v11 8.81 8.82 8.82 T:ascon128v1 12.03 12.06 12.07 T:aes128otrpv2 12.04 12.06 12.08 T:aes128otrpv1 12.04 12.08 12.13 T:oceankeyakv1 12.11 12.14 12.16 T:aes128otrsv2 12.13 12.15 12.18 T:aes128otrsv1 15.50 15.53 15.57 T:seakeyakv1 15.65 15.67 15.69 T:aes256otrpv1 15.66 15.68 15.70 T:aes256otrpv2 15.74 15.78 15.79 T:aes256otrsv1 15.77 15.79 15.80 T:aes256otrsv2 17.26 17.27 17.28 T:aes128n8clocv1 17.28 17.30 17.31 T:aes128n12clocv1 18.47 18.49 18.52 T:aes128n12silcv1 18.58 18.58 18.59 T:proest256otrv1 18.68 18.70 18.73 T:aes128n8silcv1 18.95 18.97 18.98 T:twine80n6t4clocv3 19.68 19.68 20.24 T:twine80n6t4clocv2 22.01 22.13 22.20 T:ketjesrv2 24.62 24.62 24.84 T:aeadaes128ocbtaglen64v1 24.67 24.69 24.87 T:aeadaes128ocbtaglen96v1 29.28 29.31 29.52 T:aeadaes192ocbtaglen64v1 29.35 29.42 29.47 T:aeadaes192ocbtaglen96v1 29.90 29.94 30.02 T:riverkeyakv1 31.68 31.74 31.79 T:ketjesrv1 34.09 34.12 34.13 T:aeadaes256ocbtaglen96v1 34.12 34.34 34.40 T:aeadaes256ocbtaglen64v1 41.70 41.73 41.81 T:ketjejrv1 42.21 42.24 42.37 T:colm127v1 42.64 42.67 42.69 T:proest128otrv1 67.39 67.44 67.53 T:present80n6t4silcv3 67.94 68.02 68.13 T:ketjejrv2 76.68 76.75 76.78 T:deoxysneq128128v13 86.73 86.98 87.46 T:twine80n6clocv1 91.18 91.65 91.96 T:aezv1 97.92 97.97 98.48 T:deoxyseq128128v13 102.82 107.32 108.18 T:led80n6t4silcv3 120.34 120.60 120.70 T:deoxysneq256128v13 163.39 163.91 164.03 T:deoxyseq256128v13 479.61? 528.40? 547.03? T:acorn128 1613.05 1615.01 1618.81 T:led80n6silcv1 1619.27 1632.93 1633.94 T:led80n6t4silcv2 2812.57 2812.96 2814.32 T:present80n6silcv1 2811.07 2813.47 2814.10 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.09? 0.10? 0.11? T:tiaoxinv1 0.09? 0.10? 0.11? T:tiaoxinv2 0.11? 0.13? 0.14? T:aezv5 0.13? 0.14? 0.15? T:aezv3 0.12? 0.14? 0.16? T:aezv4 0.14? 0.16? 0.16? aegis128l 0.15 0.16 0.16 T:aegis128l 0.14? 0.18? 0.18? T:aeadaes128ocbtaglen128v1 -0.02? 0.24? 0.51? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.32 T:aegis128 0.31 0.31 0.31 aegis256 0.32? 0.38? 0.66? T:aeadaes192ocbtaglen128v1 0.38 0.40 0.42 aes256gcmv1 0.38 0.40 0.42 T:aes128gcmv1 0.41 0.42 0.43 T:aes128otrcv3 0.47 0.48 0.49 T:morus1280128v2 0.46 0.49 0.50 T:morus1280256v2 0.48 0.49 0.50 T:morus1280256v1 0.39? 0.50? 0.51? T:oceankeyakv2 0.49 0.50 0.50 T:morus1280128v1 0.51 0.53 0.54 T:colm0v1 0.54 0.55 0.56 T:aes256otrcv3 0.56 0.59 0.61 T:lunarkeyakv2 0.70 0.71 0.74 T:morus640128v2 0.73 0.74 0.75 T:deoxysi128v141 0.74 0.74 0.75 T:deoxysneq128128v1 0.74 0.75 0.76 T:deoxysii128v141 0.74 0.75 0.77 T:morus640128v1 0.77 0.79 0.80 T:deoxyseq128128v1 0.83? 0.88? 0.94? T:deoxysneq256128v1 0.87 0.89 0.90 T:deoxysii256v141 0.87 0.90 0.92 T:deoxysi256v141 1.00 1.02 1.03 T:deoxyseq256128v1 1.09 1.15 1.21 T:seakeyakv2 1.19 1.20 1.21 T:aes128otrpv3 1.55 1.61 1.62 T:aes256otrpv3 2.04 2.10 2.11 T:norx6441v2 2.04 2.11 2.12 T:norx6441v3 2.14 2.15 2.16 T:norx6444v3 2.45 2.51 2.54 T:norx6441v1 2.56 2.56 2.58 T:aes128n8t8silcv2 2.56 2.56 2.57 T:aes128otrsv3 2.56 2.56 2.57 T:aes128n12t8clocv2 2.56 2.57 2.58 T:aes128n12t8clocv3 2.56 2.57 2.58 T:aes128n12t8silcv2 2.56 2.57 2.58 T:aes128n12t8silcv3 2.56 2.57 2.57 T:aes128n8t8clocv2 2.55 2.57 2.59 T:lakekeyakv2 2.78 2.83 2.88 T:lakekeyakv1 3.02 3.15 3.16 T:norx6461v2 3.01 3.16 3.17 T:norx6461v3 3.10 3.16 3.18 T:norx6444v2 3.24 3.26 3.27 T:norx6444v1 3.52 3.52 3.52 T:norx3241v3 3.52 3.52 3.53 T:norx3241v2 3.56 3.56 3.57 T:aes256otrsv3 3.65 3.79 3.81 T:norx6461v1 4.08 4.18 4.24 T:ketjemajorv2 4.23 4.23 4.24 T:norx3241v1 4.99 5.01 5.01 T:acorn128v3 4.99 5.01 5.01 T:acorn128v2 4.32? 5.17? 5.20? T:riverkeyakv2 5.25 5.25 5.28 T:aesjambuv1 5.27 5.27 5.27 T:norx3261v3 5.27 5.27 5.28 T:norx3261v2 5.75 5.75 5.75 ascon128av12 5.94 5.97 5.99 T:ketjeminorv2 6.08 6.09 6.10 T:ascon128av11 6.09 6.10 6.10 T:ascon96v1 7.52 7.53 7.53 T:norx3261v1 8.31 8.31 8.32 ascon128v12 8.75 8.75 8.75 T:ascon128v11 8.75 8.75 8.75 T:ascon128v1 11.37 11.38 11.41 T:aes128otrpv1 11.36 11.39 11.40 T:aes128otrpv2 11.54 11.57 11.60 T:aes128otrsv1 11.56 11.59 11.61 T:aes128n12clocv1 11.54 11.59 11.61 T:aes128otrsv2 11.59 11.61 11.63 T:aes128n8clocv1 11.84 11.91 11.94 T:oceankeyakv1 12.37 12.40 12.43 T:aes128n12silcv1 12.40 12.43 12.46 T:aes128n8silcv1 14.96 14.98 15.01 T:aes256otrpv1 15.03 15.06 15.07 T:aes256otrpv2 15.14 15.18 15.20 T:aes256otrsv1 15.18 15.20 15.22 T:aes256otrsv2 15.33 15.43 15.51 T:seakeyakv1 18.78 18.80 18.81 T:proest256otrv1 19.00 19.03 19.05 T:twine80n6t4clocv3 19.43 19.45 19.99 T:twine80n6t4clocv2 20.29 20.36 20.68 T:aeadaes128ocbtaglen96v1 20.33 20.45 20.64 T:aeadaes128ocbtaglen64v1 22.19 22.21 22.24 T:colm127v1 22.39 22.51 22.62 T:ketjesrv2 24.19 24.23 24.65 T:aeadaes192ocbtaglen64v1 24.28 24.31 24.34 T:aeadaes192ocbtaglen96v1 28.01 28.04 28.19 T:aeadaes256ocbtaglen96v1 28.11 28.28 28.30 T:aeadaes256ocbtaglen64v1 28.42 28.50 28.56 T:riverkeyakv1 29.56 29.60 29.64 T:ketjesrv1 39.41 39.45 39.47 T:ketjejrv1 42.16 42.21 42.23 T:proest128otrv1 44.58 44.72 44.89 T:aezv1 57.78 58.18 59.94 T:twine80n6clocv1 64.76 64.84 64.90 T:deoxyseq128128v13 65.33 65.42 65.47 T:deoxysneq128128v13 66.39 66.50 66.58 T:ketjejrv2 66.77 66.77 66.78 T:present80n6t4silcv3 101.19 106.91 106.96 T:led80n6t4silcv3 107.54 107.88 107.97 T:deoxysneq256128v13 108.45 108.55 108.85 T:deoxyseq256128v13 442.35? 473.79? 531.16? T:acorn128 1077.39 1080.55 1080.81 T:led80n6silcv1 1080.41 1081.80 1091.17 T:led80n6t4silcv2 1873.98 1874.82 1875.85 T:present80n6silcv1 1876.32 1877.87 1880.51 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.09? 0.10? 0.11? T:tiaoxinv2 0.10 0.10 0.11 T:tiaoxinv1 0.13? 0.13? 0.15? T:aezv3 0.12? 0.13? 0.14? T:aezv5 0.14 0.14 0.15 T:aezv4 0.15 0.15 0.16 T:aegis128l 0.14? 0.16? 0.16? aegis128l 0.17? 0.17? 0.19? T:aeadaes128ocbtaglen128v1 -0.03? 0.23? 0.49? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.32 T:aegis128 0.30 0.31 0.31 aegis256 0.12? 0.33? 0.38? T:aeadaes192ocbtaglen128v1 0.38 0.40 0.42 T:aes128gcmv1 0.38 0.40 0.42 aes256gcmv1 0.41 0.42 0.43 T:aes128otrcv3 0.45 0.48 0.49 T:morus1280128v2 0.49 0.49 0.50 T:morus1280256v1 0.48 0.49 0.50 T:morus1280128v1 0.48 0.49 0.50 T:morus1280256v2 0.47 0.50 0.52 T:oceankeyakv2 0.49? 0.51? 0.55? T:colm0v1 0.54 0.55 0.55 T:aes256otrcv3 0.55 0.57 0.61 T:lunarkeyakv2 0.72 0.73 0.75 T:morus640128v2 0.73 0.74 0.76 T:deoxysneq128128v1 0.73 0.75 0.76 T:deoxysi128v141 0.74 0.75 0.76 T:deoxysii128v141 0.77 0.78 0.78 T:deoxyseq128128v1 0.85 0.86 0.87 T:morus640128v1 0.82? 0.88? 0.96? T:deoxysneq256128v1 0.87 0.89 0.90 T:deoxysii256v141 0.83 0.90 0.91 T:deoxysi256v141 1.04 1.06 1.07 T:deoxyseq256128v1 1.10 1.13 1.15 T:seakeyakv2 1.19 1.20 1.26 T:aes128otrpv3 1.61 1.62 1.66 T:aes256otrpv3 2.03 2.05 2.09 T:norx6441v3 2.04 2.05 2.11 T:norx6441v2 2.14 2.15 2.17 T:norx6444v3 2.43 2.45 2.52 T:norx6441v1 2.48 2.48 2.66 T:aes128n12t8silcv3 2.56 2.56 2.65 T:aes128n12t8silcv2 2.48 2.56 2.57 T:aes128n8t8silcv2 2.56 2.56 2.58 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128otrsv3 2.56 2.57 2.58 T:aes128n12t8clocv2 2.54 2.57 2.57 T:lakekeyakv2 2.56 2.58 2.58 T:aes128n8t8clocv2 2.81 2.86 2.97 T:lakekeyakv1 3.01 3.02 3.17 T:norx6461v2 3.10 3.12 3.18 T:norx6444v2 3.01 3.12 3.16 T:norx6461v3 3.26 3.27 3.28 T:norx6444v1 3.52 3.52 3.53 T:norx3241v3 3.52 3.52 3.53 T:norx3241v2 3.56 3.56 3.56 T:aes256otrsv3 3.62 3.76 3.79 T:norx6461v1 4.16 4.22 4.26 T:ketjemajorv2 4.22 4.23 4.23 T:norx3241v1 4.99 5.01 5.01 T:acorn128v3 4.98 5.01 5.02 T:acorn128v2 5.16 5.18 5.20 T:riverkeyakv2 5.25 5.25 5.28 T:aesjambuv1 5.27 5.27 5.27 T:norx3261v2 5.27 5.27 5.28 T:norx3261v3 5.62 5.75 5.75 ascon128av12 5.95 5.97 6.04 T:ketjeminorv2 6.09 6.10 6.10 T:ascon96v1 6.09 6.10 6.10 T:ascon128av11 7.52 7.52 7.53 T:norx3261v1 8.31 8.31 8.32 ascon128v12 8.62 8.63 8.64 T:ascon128v11 8.62 8.63 8.65 T:ascon128v1 11.37 11.39 11.41 T:aes128otrpv1 11.38 11.40 11.42 T:aes128otrpv2 11.55 11.57 11.60 T:aes128otrsv2 11.56 11.59 11.62 T:aes128n12clocv1 11.55 11.59 11.62 T:aes128otrsv1 11.59 11.60 11.63 T:aes128n8clocv1 11.80 11.88 11.93 T:oceankeyakv1 12.39 12.42 12.47 T:aes128n12silcv1 12.70 12.77 12.91 T:aes128n8silcv1 14.95 15.00 15.02 T:aes256otrpv1 15.02 15.04 15.06 T:aes256otrpv2 15.16 15.19 15.22 T:aes256otrsv1 15.20 15.22 15.24 T:aes256otrsv2 15.40 15.44 15.53 T:seakeyakv1 18.75 18.78 18.81 T:proest256otrv1 18.84 18.88 19.03 T:twine80n6t4clocv3 19.43 19.45 20.01 T:twine80n6t4clocv2 20.30 20.36 21.00 T:aeadaes128ocbtaglen96v1 20.35 20.46 20.65 T:aeadaes128ocbtaglen64v1 22.13 22.15 22.24 T:colm127v1 22.43 22.59 22.71 T:ketjesrv2 24.20 24.23 24.64 T:aeadaes192ocbtaglen64v1 24.29 24.31 24.32 T:aeadaes192ocbtaglen96v1 28.01 28.05 28.19 T:aeadaes256ocbtaglen96v1 28.09 28.28 28.31 T:aeadaes256ocbtaglen64v1 28.44 28.51 28.61 T:riverkeyakv1 29.57 29.64 29.69 T:ketjesrv1 39.38 39.46 39.49 T:ketjejrv1 42.16 42.20 42.24 T:proest128otrv1 44.52 44.68 44.83 T:aezv1 57.86 58.13 58.24 T:twine80n6clocv1 64.75 64.83 64.88 T:deoxyseq128128v13 65.32 65.37 65.49 T:deoxysneq128128v13 66.37 66.50 66.73 T:ketjejrv2 66.77 66.84 66.89 T:present80n6t4silcv3 101.18 106.95 106.98 T:led80n6t4silcv3 107.68 107.88 107.95 T:deoxysneq256128v13 108.17 108.29 108.88 T:deoxyseq256128v13 462.24 486.78 495.04 T:acorn128 1076.89 1077.74 1099.68 T:led80n6silcv1 1090.50 1097.49 1106.93 T:led80n6t4silcv2 1873.46 1875.32 1876.53 T:present80n6silcv1 1874.95 1876.81 1887.69 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv2 0.09? 0.10? 0.11? T:tiaoxinv1 0.13 0.13 0.14 T:aezv5 0.13 0.14 0.14 T:aezv3 0.14? 0.15? 0.16? T:aezv4 0.15 0.16 0.16 T:aegis128l 0.14? 0.16? 0.17? aegis128l 0.17 0.18 0.18 T:aeadaes128ocbtaglen128v1 0.23 0.23 0.23 T:aeadaes256ocbtaglen128v1 0.30 0.31 0.31 T:aegis128 0.30? 0.31? 0.38? aegis256 0.32? 0.36? 0.63? T:aeadaes192ocbtaglen128v1 0.40 0.40 0.41 aes256gcmv1 0.39 0.40 0.42 T:aes128gcmv1 0.41 0.42 0.42 T:aes128otrcv3 0.44 0.45 0.48 T:morus1280128v2 0.47 0.48 0.50 T:morus1280256v2 0.49 0.49 0.50 T:morus1280128v1 0.49 0.50 0.50 T:morus1280256v1 0.47 0.50 0.52 T:oceankeyakv2 0.50? 0.53? 0.56? T:colm0v1 0.54 0.56 0.56 T:aes256otrcv3 0.56 0.59 0.61 T:lunarkeyakv2 0.70 0.72 0.74 T:morus640128v2 0.73 0.74 0.75 T:deoxysneq128128v1 0.74 0.75 0.76 T:deoxysi128v141 0.74 0.75 0.76 T:deoxysii128v141 0.77 0.78 0.79 T:deoxyseq128128v1 0.78 0.81 0.86 T:morus640128v1 0.87 0.88 0.90 T:deoxysneq256128v1 0.89 0.89 0.90 T:deoxysii256v141 0.90 0.90 0.91 T:deoxysi256v141 1.06 1.07 1.07 T:deoxyseq256128v1 1.10 1.12 1.15 T:seakeyakv2 1.19 1.21 1.26 T:aes128otrpv3 1.55 1.62 1.68 T:aes256otrpv3 2.04 2.09 2.12 T:norx6441v2 2.04 2.11 2.13 T:norx6441v3 2.12 2.15 2.17 T:norx6444v3 2.44 2.46 2.52 T:norx6441v1 2.52 2.56 2.66 T:aes128n12t8clocv3 2.47 2.56 2.66 T:aes128n12t8clocv2 2.47? 2.56? 2.75? T:aes128n8t8silcv2 2.48 2.56 2.65 T:aes128n12t8silcv3 2.48 2.56 2.57 T:aes128n12t8silcv2 2.47 2.56 2.66 T:aes128n8t8clocv2 2.56 2.56 2.57 T:aes128otrsv3 2.55 2.57 2.59 T:lakekeyakv2 2.79 2.86 2.88 T:lakekeyakv1 3.01 3.02 3.15 T:norx6461v3 3.01 3.03 3.16 T:norx6461v2 3.10 3.11 3.17 T:norx6444v2 3.26 3.27 3.28 T:norx6444v1 3.52 3.52 3.53 T:norx3241v2 3.52 3.52 3.52 T:norx3241v3 3.56 3.56 3.63 T:aes256otrsv3 3.63 3.78 3.80 T:norx6461v1 4.07 4.16 4.26 T:ketjemajorv2 4.22 4.22 4.23 T:norx3241v1 5.01 5.01 5.01 T:acorn128v2 5.01 5.01 5.01 T:acorn128v3 5.17 5.17 5.19 T:riverkeyakv2 5.27 5.27 5.27 T:norx3261v2 5.27 5.27 5.27 T:norx3261v3 5.25 5.28 5.28 T:aesjambuv1 5.75 5.75 5.75 ascon128av12 5.90 5.98 6.05 T:ketjeminorv2 6.08 6.10 6.12 T:ascon128av11 6.09 6.10 6.12 T:ascon96v1 7.52 7.53 7.53 T:norx3261v1 8.31 8.31 8.31 ascon128v12 8.61 8.63 8.65 T:ascon128v1 8.62 8.63 8.63 T:ascon128v11 11.35 11.38 11.40 T:aes128otrpv2 11.36 11.39 11.42 T:aes128otrpv1 11.52 11.57 11.59 T:aes128otrsv1 11.55 11.58 11.61 T:aes128otrsv2 11.57 11.60 11.62 T:aes128n12clocv1 11.58 11.61 11.64 T:aes128n8clocv1 11.83 11.92 11.98 T:oceankeyakv1 12.40 12.42 12.45 T:aes128n12silcv1 12.71 12.77 12.81 T:aes128n8silcv1 14.95 15.00 15.01 T:aes256otrpv1 15.01 15.05 15.09 T:aes256otrpv2 15.16 15.19 15.22 T:aes256otrsv1 15.20 15.22 15.25 T:aes256otrsv2 15.36 15.39 15.45 T:seakeyakv1 18.74 18.77 18.80 T:proest256otrv1 18.79 18.87 19.02 T:twine80n6t4clocv3 19.38 19.45 19.48 T:twine80n6t4clocv2 20.31 20.36 20.97 T:aeadaes128ocbtaglen96v1 20.36 20.45 20.65 T:aeadaes128ocbtaglen64v1 22.13 22.18 22.26 T:colm127v1 22.44 22.58 22.68 T:ketjesrv2 24.19 24.23 24.58 T:aeadaes192ocbtaglen64v1 24.31 24.33 24.35 T:aeadaes192ocbtaglen96v1 28.02 28.05 28.21 T:aeadaes256ocbtaglen96v1 28.11 28.30 28.33 T:aeadaes256ocbtaglen64v1 28.49 28.55 28.58 T:riverkeyakv1 29.55 29.61 29.69 T:ketjesrv1 39.43 39.46 39.50 T:ketjejrv1 42.18 42.22 42.24 T:proest128otrv1 44.60 44.73 44.86 T:aezv1 57.92 58.19 58.31 T:twine80n6clocv1 64.74 64.83 64.89 T:deoxyseq128128v13 65.30 65.38 65.48 T:deoxysneq128128v13 66.34 66.48 66.69 T:ketjejrv2 66.75 66.85 66.89 T:present80n6t4silcv3 101.19 106.92 106.97 T:led80n6t4silcv3 107.72 107.86 107.98 T:deoxysneq256128v13 108.16 108.29 108.82 T:deoxyseq256128v13 461.94 486.94 494.88 T:acorn128 1076.83 1077.75 1099.69 T:led80n6silcv1 1090.27 1097.78 1107.02 T:led80n6t4silcv2 1874.31 1875.64 1876.91 T:present80n6silcv1 1874.97 1875.67 1876.71 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.17 0.17 0.18 T:tiaoxinv1 0.17 0.18 0.18 T:tiaoxinv2 0.20 0.20 0.21 T:aegis128l 0.20 0.20 0.21 aegis128l 0.28 0.28 0.30 T:aeadaes128ocbtaglen128v1 0.30 0.30 0.31 T:aezv3 0.30 0.31 0.31 T:aezv5 0.30 0.31 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.36 aegis256 0.38? 0.39? 0.54? T:aeadaes256ocbtaglen128v1 0.49 0.50 0.52 T:aeadaes192ocbtaglen128v1 0.54 0.54 0.54 T:aes128otrcv3 0.59 0.59 0.60 T:morus1280256v1 0.59 0.59 0.60 T:morus1280128v1 0.60 0.60 0.61 T:morus1280128v2 0.60 0.61 0.62 T:morus1280256v2 0.70 0.70 0.71 T:aes128gcmv1 0.71 0.71 0.72 T:aes256otrcv3 0.75 0.75 0.76 aes256gcmv1 0.76 0.76 0.78 T:deoxysneq128128v1 0.77 0.77 0.78 T:deoxysi128v141 0.81 0.82 0.82 T:morus640128v2 0.81 0.83 0.84 T:morus640128v1 0.90 0.91 0.95 T:deoxysneq256128v1 0.91 0.92 0.92 T:deoxysi256v141 0.95 0.96 0.97 T:colm0v1 1.11 1.11 1.18 T:deoxyseq128128v1 1.19 1.19 1.20 T:deoxysii128v141 1.35 1.37 1.38 T:deoxyseq256128v1 1.39 1.39 1.39 T:aes128otrpv3 1.41 1.42 1.42 T:deoxysii256v141 1.40 1.43 1.47 T:oceankeyakv2 1.53 1.54 1.54 T:aes128otrsv3 1.74 1.77 1.84 T:seakeyakv2 1.86 1.87 1.87 T:aes256otrpv3 2.08 2.09 2.10 T:norx6444v3 2.12 2.12 2.13 T:aes256otrsv3 2.44 2.45 2.47 T:lunarkeyakv2 2.45 2.46 2.48 T:norx6441v3 2.46 2.47 2.50 T:norx6441v2 2.61 2.61 2.61 T:aes128n8t8silcv2 2.61 2.61 2.61 T:aes128n12t8clocv3 2.61 2.61 2.61 T:aes128n12t8silcv2 2.61 2.61 2.61 T:aes128n12t8silcv3 2.61 2.61 2.62 T:aes128n12t8clocv2 2.61 2.62 2.62 T:aes128n8t8clocv2 2.86 2.87 2.87 T:norx6441v1 3.11 3.11 3.14 T:lakekeyakv2 3.63 3.64 3.65 T:lakekeyakv1 3.64 3.69 3.70 T:norx6461v3 3.68 3.69 3.71 T:norx6461v2 3.79 3.79 3.80 T:norx3241v3 3.79 3.80 3.80 T:norx3241v2 4.29 4.30 4.30 T:norx6461v1 4.45 4.46 4.46 T:norx3241v1 4.51 4.52 4.58 T:norx6444v2 4.74 4.76 4.77 T:norx6444v1 5.33 5.34 5.34 T:aesjambuv1 5.68 5.68 5.68 T:norx3261v3 5.68 5.68 5.68 T:norx3261v2 5.73 5.74 5.74 T:riverkeyakv2 5.94 5.95 5.95 ascon128av12 6.03 6.03 6.04 T:acorn128v2 6.07 6.07 6.07 T:acorn128v3 6.09 6.15 6.22 T:ketjemajorv2 6.22 6.22 6.22 T:ascon96v1 6.26 6.26 6.26 T:ascon128av11 7.46 7.47 7.47 T:ketjeminorv2 7.93 7.93 7.93 T:norx3261v1 8.41 8.41 8.41 ascon128v12 8.94 8.94 8.95 T:ascon128v1 8.94 8.94 8.95 T:ascon128v11 12.19 12.20 12.22 T:aes128otrpv2 12.20 12.21 12.22 T:aes128otrpv1 12.25 12.26 12.28 T:aes128otrsv2 12.26 12.27 12.28 T:aes128otrsv1 15.88 15.89 15.92 T:aes256otrpv1 15.92 15.94 15.96 T:aes256otrpv2 15.93 15.94 15.97 T:aes256otrsv1 15.97 15.99 16.02 T:aes256otrsv2 16.93 16.94 16.98 T:aes128n12clocv1 16.96 16.97 17.01 T:aes128n8clocv1 18.36 18.41 18.46 T:oceankeyakv1 18.64 18.66 18.69 T:seakeyakv1 18.87 18.88 18.91 T:aes128n12silcv1 18.87 18.89 18.92 T:aes128n8silcv1 19.31 19.36 19.49 T:twine80n6t4clocv3 20.02 20.02 20.52 T:twine80n6t4clocv2 20.31 20.34 20.36 T:proest256otrv1 21.36 21.36 21.39 T:aeadaes128ocbtaglen96v1 21.36 21.42 21.53 T:aeadaes128ocbtaglen64v1 25.30 25.32 25.34 T:aeadaes192ocbtaglen96v1 25.29 25.32 25.39 T:aeadaes192ocbtaglen64v1 27.52 27.55 27.60 T:ketjesrv2 29.26 29.33 29.34 T:aeadaes256ocbtaglen96v1 29.34 29.41 29.54 T:aeadaes256ocbtaglen64v1 31.14 31.19 31.30 T:riverkeyakv1 32.38 32.40 32.42 T:ketjesrv1 35.49 35.59 35.63 T:colm127v1 41.46 41.46 41.47 T:ketjejrv1 45.13 45.14 45.17 T:proest128otrv1 65.98 66.00 66.08 T:deoxysneq128128v13 68.06 68.15 68.26 T:present80n6t4silcv3 69.41 69.52 70.85 T:ketjejrv2 87.06 87.38 87.42 T:twine80n6clocv1 89.97 90.09 90.16 T:aezv1 99.05 99.06 99.16 T:deoxyseq128128v13 105.05 106.76 107.59 T:led80n6t4silcv3 108.46 108.49 108.53 T:deoxysneq256128v13 165.30 165.42 165.67 T:deoxyseq256128v13 582.51 592.44 635.64 T:acorn128 1623.20 1631.11 1632.55 T:led80n6silcv1 1641.92 1644.18 1644.43 T:led80n6t4silcv2 2827.00 2827.83 2828.41 T:present80n6silcv1 2827.53 2828.27 2829.51 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.20 0.21 0.21 T:aegis128l 0.21 0.21 0.21 aegis128l 0.24 0.25 0.26 T:tiaoxinv1 0.24 0.25 0.25 T:tiaoxinv2 0.28 0.29 0.31 T:aeadaes128ocbtaglen128v1 0.30 0.30 0.31 T:aezv3 0.30 0.30 0.31 T:aezv5 0.31 0.31 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.37 aegis256 0.38? 0.39? 0.55? T:aeadaes256ocbtaglen128v1 0.48? 0.48? 0.65? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.58 0.61 0.62 T:morus1280128v2 0.61 0.62 0.63 T:morus1280256v1 0.61 0.62 0.62 T:morus1280128v1 0.63 0.63 0.63 T:morus1280256v2 0.64 0.64 0.66 T:aes128gcmv1 0.70 0.71 0.74 aes256gcmv1 0.73 0.74 0.74 T:aes256otrcv3 0.83 0.84 0.84 T:morus640128v2 0.84 0.84 0.86 T:deoxysi128v141 0.89 0.89 0.91 T:deoxysneq128128v1 0.88 0.90 0.91 T:morus640128v1 0.95 0.95 0.98 T:deoxysneq256128v1 0.97 0.97 0.98 T:colm0v1 1.00 1.01 1.02 T:deoxysi256v141 1.20 1.20 1.21 T:deoxysii128v141 1.29 1.30 1.31 T:deoxyseq128128v1 1.43 1.44 1.45 T:deoxysii256v141 1.42 1.44 1.45 T:aes128otrpv3 1.43 1.50 1.54 T:oceankeyakv2 1.54 1.54 1.59 T:deoxyseq256128v1 1.55 1.55 1.55 T:aes128otrsv3 1.77 1.79 1.84 T:seakeyakv2 1.89 1.90 1.90 T:aes256otrpv3 2.09 2.10 2.11 T:norx6444v3 2.15 2.15 2.15 T:aes256otrsv3 2.45 2.45 2.45 T:norx6441v3 2.45 2.46 2.48 T:norx6441v2 2.51 2.52 2.53 T:lunarkeyakv2 2.58 2.58 2.59 T:aes128n12t8clocv3 2.58 2.59 2.59 T:aes128n8t8clocv2 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.59 T:aes128n12t8silcv3 2.59 2.59 2.59 T:aes128n12t8clocv2 2.59 2.59 2.60 T:aes128n12t8silcv2 2.86 2.87 2.88 T:norx6441v1 3.14 3.15 3.18 T:lakekeyakv2 3.68 3.69 3.70 T:norx6461v2 3.67 3.70 3.71 T:norx6461v3 3.70 3.71 3.73 T:lakekeyakv1 3.84 3.84 3.85 T:norx3241v2 3.85 3.85 3.85 T:norx3241v3 4.29 4.30 4.30 T:norx6461v1 4.50 4.51 4.55 T:norx6444v2 4.53 4.54 4.54 T:norx3241v1 4.66 4.67 4.67 T:norx6444v1 5.55 5.58 5.59 T:aesjambuv1 5.72 5.72 5.73 T:norx3261v3 5.72 5.72 5.73 T:norx3261v2 5.84 5.84 5.90 T:riverkeyakv2 5.91 5.96 5.96 ascon128av12 6.06 6.06 6.06 T:acorn128v3 6.10 6.10 6.10 T:ascon128av11 6.08 6.10 6.14 T:ketjemajorv2 6.16 6.16 6.17 T:acorn128v2 6.21 6.21 6.21 T:ascon96v1 7.42 7.42 7.46 T:ketjeminorv2 7.83 7.83 7.87 T:norx3261v1 8.47 8.47 8.48 ascon128v12 8.94 8.94 8.95 T:ascon128v1 8.94 8.95 8.96 T:ascon128v11 12.38 12.40 12.42 T:aes128otrpv2 12.40 12.41 12.44 T:aes128otrpv1 12.43 12.44 12.46 T:aes128otrsv2 12.43 12.45 12.48 T:aes128otrsv1 16.08 16.09 16.11 T:aes256otrpv1 16.10 16.11 16.12 T:aes256otrpv2 16.13 16.18 16.19 T:aes256otrsv1 16.17 16.18 16.21 T:aes256otrsv2 17.49 17.51 17.52 T:aes128n12clocv1 17.48 17.53 17.55 T:aes128n8clocv1 18.39 18.42 18.45 T:oceankeyakv1 18.61 18.66 18.71 T:seakeyakv1 18.85 18.86 18.88 T:aes128n12silcv1 18.98 19.01 19.03 T:aes128n8silcv1 19.23 19.24 19.26 T:twine80n6t4clocv3 20.04 20.04 20.08 T:twine80n6t4clocv2 20.30 20.33 20.34 T:proest256otrv1 23.06 23.09 23.11 T:ketjesrv2 25.35 25.43 25.49 T:aeadaes128ocbtaglen96v1 25.42 25.43 25.58 T:aeadaes128ocbtaglen64v1 30.16 30.16 30.21 T:aeadaes192ocbtaglen64v1 30.24 30.24 30.28 T:aeadaes192ocbtaglen96v1 31.12 31.18 31.34 T:riverkeyakv1 32.52 32.55 32.58 T:ketjesrv1 35.10 35.16 35.17 T:aeadaes256ocbtaglen96v1 35.17 35.18 35.31 T:aeadaes256ocbtaglen64v1 42.26 42.28 42.30 T:ketjejrv1 43.25 43.33 43.47 T:colm127v1 44.47 44.48 44.50 T:proest128otrv1 68.16 68.22 68.23 T:present80n6t4silcv3 68.87 68.92 69.04 T:ketjejrv2 77.04 77.09 77.18 T:deoxysneq128128v13 86.93 87.38 87.44 T:twine80n6clocv1 90.58 90.69 90.82 T:aezv1 99.03 99.07 99.26 T:deoxyseq128128v13 103.93 107.89 108.68 T:led80n6t4silcv3 120.85 120.91 120.98 T:deoxysneq256128v13 165.20 165.48 165.68 T:deoxyseq256128v13 591.48 601.69 645.83 T:acorn128 1623.77 1625.64 1637.32 T:led80n6silcv1 1638.09 1640.32 1646.75 T:led80n6t4silcv2 2827.78 2828.15 2828.69 T:present80n6t4silcv2 2827.59 2828.53 2829.92 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.18 0.18 0.18 T:aezv3 0.17 0.18 0.18 T:aezv5 0.18 0.18 0.19 T:aezv4 0.20 0.20 0.21 T:aegis128l 0.21? 0.22? 0.25? aegis128l 0.24 0.24 0.25 T:tiaoxinv2 0.25 0.26 0.27 T:tiaoxinv1 0.28 0.29 0.29 T:aeadaes128ocbtaglen128v1 0.34 0.34 0.34 T:aegis128 0.37 0.37 0.37 aegis256 0.38 0.38 0.39 T:aeadaes256ocbtaglen128v1 0.48 0.48 0.48 T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.61 0.62 0.62 T:morus1280256v1 0.61 0.62 0.62 T:morus1280128v1 0.60 0.62 0.62 T:morus1280128v2 0.63 0.63 0.63 T:morus1280256v2 0.64 0.64 0.65 T:aes128gcmv1 0.70 0.71 0.72 aes256gcmv1 0.73 0.74 0.74 T:aes256otrcv3 0.83 0.83 0.84 T:morus640128v2 0.84 0.84 0.85 T:deoxysi128v141 0.87 0.88 0.91 T:morus640128v1 0.88 0.89 0.89 T:deoxysneq128128v1 0.94 0.94 0.96 T:deoxysneq256128v1 0.96 0.97 0.99 T:colm0v1 1.00 1.00 1.01 T:deoxysi256v141 1.20 1.20 1.21 T:deoxysii128v141 1.29 1.30 1.30 T:deoxyseq128128v1 1.42 1.43 1.49 T:oceankeyakv2 1.43 1.44 1.44 T:deoxysii256v141 1.42 1.44 1.45 T:aes128otrpv3 1.54 1.54 1.56 T:deoxyseq256128v1 1.55 1.55 1.55 T:aes128otrsv3 1.79 1.82 1.84 T:seakeyakv2 1.89 1.89 1.90 T:aes256otrpv3 2.09 2.09 2.10 T:norx6444v3 2.14 2.15 2.15 T:aes256otrsv3 2.47 2.48 2.48 T:norx6441v2 2.47 2.48 2.49 T:norx6441v3 2.50 2.51 2.53 T:lunarkeyakv2 2.58 2.58 2.58 T:aes128n8t8silcv2 2.58 2.58 2.58 T:aes128n12t8silcv3 2.58 2.58 2.58 T:aes128n12t8silcv2 2.58 2.58 2.63 T:aes128n8t8clocv2 2.58 2.58 2.63 T:aes128n12t8clocv3 2.58 2.59 2.59 T:aes128n12t8clocv2 2.86 2.87 2.88 T:norx6441v1 3.17 3.19 3.21 T:lakekeyakv2 3.68 3.68 3.69 T:lakekeyakv1 3.68 3.71 3.71 T:norx6461v2 3.67 3.71 3.72 T:norx6461v3 3.83 3.83 3.84 T:norx3241v3 3.84 3.84 3.85 T:norx3241v2 4.28 4.29 4.30 T:norx6461v1 4.53 4.54 4.54 T:norx3241v1 4.55 4.61 4.62 T:norx6444v2 4.67 4.68 4.68 T:norx6444v1 5.55 5.59 5.63 T:aesjambuv1 5.72 5.72 5.73 T:norx3261v2 5.72 5.73 5.73 T:norx3261v3 5.85 5.85 5.87 T:riverkeyakv2 5.96 5.96 5.96 ascon128av12 6.06 6.06 6.06 T:acorn128v3 6.10 6.10 6.10 T:ascon128av11 6.09 6.13 6.16 T:ketjemajorv2 6.16 6.16 6.16 T:acorn128v2 6.21 6.21 6.22 T:ascon96v1 7.44 7.44 7.47 T:ketjeminorv2 7.87 7.87 7.87 T:norx3261v1 8.47 8.47 8.47 ascon128v12 8.94 8.94 8.95 T:ascon128v11 8.94 8.94 8.96 T:ascon128v1 12.39 12.41 12.43 T:aes128otrpv2 12.40 12.42 12.43 T:aes128otrpv1 12.44 12.46 12.48 T:aes128otrsv2 12.47 12.48 12.51 T:aes128otrsv1 16.08 16.08 16.10 T:aes256otrpv1 16.11 16.12 16.15 T:aes256otrpv2 16.16 16.18 16.22 T:aes256otrsv1 16.19 16.21 16.23 T:aes256otrsv2 17.48 17.50 17.52 T:aes128n12clocv1 17.50 17.51 17.54 T:aes128n8clocv1 18.40 18.45 18.46 T:oceankeyakv1 18.63 18.66 18.71 T:seakeyakv1 18.85 18.86 18.88 T:aes128n12silcv1 19.00 19.02 19.05 T:aes128n8silcv1 19.23 19.27 19.40 T:twine80n6t4clocv3 20.30 20.33 20.35 T:proest256otrv1 20.05 20.53 20.56 T:twine80n6t4clocv2 22.99 23.06 23.12 T:ketjesrv2 25.36 25.36 25.46 T:aeadaes128ocbtaglen96v1 25.40 25.43 25.57 T:aeadaes128ocbtaglen64v1 30.15 30.17 30.22 T:aeadaes192ocbtaglen64v1 30.21 30.21 30.25 T:aeadaes192ocbtaglen96v1 31.09 31.12 31.33 T:riverkeyakv1 32.55 32.56 32.58 T:ketjesrv1 35.10 35.16 35.19 T:aeadaes256ocbtaglen96v1 35.17 35.17 35.29 T:aeadaes256ocbtaglen64v1 42.26 42.28 42.29 T:ketjejrv1 43.26 43.35 43.39 T:colm127v1 44.47 44.48 44.50 T:proest128otrv1 68.09 68.23 68.27 T:present80n6t4silcv3 68.90 69.00 69.07 T:ketjejrv2 77.09 77.13 77.14 T:deoxysneq128128v13 86.95 87.37 87.51 T:twine80n6clocv1 90.62 90.68 90.85 T:aezv1 99.03 99.06 99.28 T:deoxyseq128128v13 107.88 107.91 108.69 T:led80n6t4silcv3 120.85 120.91 121.18 T:deoxysneq256128v13 165.15 165.53 165.64 T:deoxyseq256128v13 591.82 601.76 646.24 T:acorn128 1623.32 1625.64 1637.63 T:led80n6silcv1 1628.80 1640.30 1647.14 T:led80n6t4silcv2 2828.27 2828.53 2828.80 T:present80n6t4silcv2 2827.73 2828.66 2830.24 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.80? 0.88? 0.99? T:aegis128 0.90 0.92 0.95 aegis128l 0.92 0.92 0.96 T:aegis128l 1.15 1.16 1.18 aegis256 1.20? 1.21? 1.36? T:tiaoxinv2 1.22? 1.23? 1.39? T:tiaoxinv1 1.32 1.33 1.35 T:aezv5 1.41 1.48 1.51 T:aezv4 1.59 1.65 1.67 T:aezv3 2.37 2.40 2.42 T:colm0v1 2.53 2.55 2.57 T:aes128otrsv3 2.69 2.71 2.76 T:morus640128v1 2.84? 2.88? 3.52? T:aeadaes128ocbtaglen128v1 2.90 2.95 3.02 T:morus640128v2 2.99 2.99 3.01 T:aes128n8t8silcv2 3.00 3.02 3.04 T:aes128n12t8silcv3 2.98 3.03 3.05 T:aes128n12t8silcv2 3.05 3.06 3.07 T:aes128n12t8clocv3 3.09 3.11 3.12 T:aes128n12t8clocv2 3.10 3.12 3.13 T:aes128n8t8clocv2 3.12 3.20 3.25 T:aes128otrcv3 3.18 3.21 3.23 T:morus1280128v1 3.20 3.22 3.23 T:morus1280256v1 3.26 3.33 3.41 T:morus1280128v2 3.31 3.35 3.43 T:deoxysi128v141 3.30 3.36 3.41 T:deoxysneq128128v1 3.34 3.37 3.38 T:morus1280256v2 3.49 3.53 3.59 T:deoxysneq256128v1 3.48 3.64 3.70 T:aes256otrsv3 3.73? 3.94? 8.03? T:aeadaes192ocbtaglen128v1 3.95 4.00 4.08 T:deoxysi256v141 4.07 4.14 4.23 T:aes256otrcv3 3.55? 4.27? 7.50? T:aeadaes256ocbtaglen128v1 4.62 4.71 4.73 T:aes128otrpv3 4.66 4.72 4.74 T:deoxyseq128128v1 4.77 4.79 4.87 T:aes128gcmv1 4.84 4.89 4.95 T:deoxysii128v141 5.10 5.17 5.32 aes256gcmv1 5.68 5.73 5.80 T:deoxysii256v141 5.88 5.98 6.00 T:aes256otrpv3 6.08 6.16 6.17 T:deoxyseq256128v1 6.17 6.34 6.38 T:aesjambuv1 7.90 7.95 8.01 T:norx6441v1 8.18 8.26 8.34 T:norx6441v2 8.23 8.28 8.38 T:norx6441v3 9.11 9.16 9.20 T:norx3241v1 9.16 9.16 9.33 ascon128av12 9.34 9.36 9.38 T:norx3241v2 9.38 9.38 9.55 T:ascon96v1 9.40 9.42 9.43 T:norx3241v3 9.54 9.54 9.61 T:ascon128av11 11.23 11.23 11.30 ascon128v12 11.31 11.37 11.90 T:lakekeyakv1 11.87 11.87 11.89 T:ascon128v1 11.87 11.87 11.95 T:ascon128v11 11.89 11.95 12.12 T:norx6461v1 11.91 12.03 12.12 T:norx6461v2 12.02 12.14 12.16 T:norx6461v3 13.36 13.41 13.62 T:lakekeyakv2 13.82 13.90 14.02 T:norx6444v3 13.64? 13.91? 26.69? T:riverkeyakv2 13.95 13.96 13.98 T:norx3261v3 13.95 13.98 14.00 T:norx3261v2 16.30 16.31 16.32 T:norx3261v1 16.58 16.75 18.38 T:oceankeyakv2 16.63 17.75 17.91 T:seakeyakv2 19.01 19.18 19.33 T:aes128otrsv1 19.12 19.27 19.46 T:aes128otrsv2 19.64 19.70 19.90 T:aes128otrpv2 19.76 19.84 20.00 T:aes128otrpv1 21.76 21.87 22.06 T:aes128n8clocv1 21.89 22.10 22.27 T:aes128n12clocv1 24.08 24.08 24.41 T:acorn128v2 24.45 24.48 24.74 T:acorn128v3 24.67 24.74 24.91 T:aes256otrsv1 24.80 24.92 25.02 T:aes256otrsv2 25.29 25.38 25.48 T:aes256otrpv1 25.31 25.43 25.55 T:aes256otrpv2 25.66 25.70 25.72 T:twine80n6t4clocv3 26.31 26.59 26.89 T:aes128n8silcv1 26.38 26.67 26.88 T:aes128n12silcv1 26.81 26.87 26.95 T:ketjeminorv2 28.02 28.35 28.44 T:twine80n6t4clocv2 32.70 32.79 32.86 T:norx6444v2 34.17 34.30 34.38 T:norx6444v1 34.67 34.84 35.00 T:aeadaes128ocbtaglen64v1 34.74 35.02 35.08 T:aeadaes128ocbtaglen96v1 35.43 35.64 36.11 T:ketjemajorv2 38.67 38.80 38.98 T:lunarkeyakv2 40.16 40.30 40.47 T:aeadaes192ocbtaglen96v1 40.21 40.36 40.59 T:aeadaes192ocbtaglen64v1 46.90 46.94 47.34 T:aeadaes256ocbtaglen64v1 46.88 46.95 47.17 T:aeadaes256ocbtaglen96v1 47.27 47.57 48.15 T:ketjesrv2 50.23 50.40 50.52 T:ketjesrv1 51.11 51.17 51.43 T:colm127v1 52.25 52.79 52.92 T:riverkeyakv1 53.76 53.88 54.26 T:ketjejrv1 60.05 60.35 60.63 T:proest256otrv1 74.19 74.41 74.77 T:deoxysneq128128v13 83.36 83.58 83.68 T:present80n6t4silcv3 87.08 87.31 87.62 T:proest128otrv1 90.85 92.00 92.73 T:ketjejrv2 96.78 97.26 98.01 T:twine80n6clocv1 111.61 112.12 112.62 T:aezv1 121.81 122.37 122.62 T:deoxysneq256128v13 122.80 123.05 123.26 T:deoxyseq128128v13 128.40 128.59 129.10 T:led80n6t4silcv3 134.73 135.21 135.66 T:seakeyakv1 198.81 199.75 200.27 T:oceankeyakv1 204.77 205.09 205.57 T:deoxyseq256128v13 1819.29 1820.14 1834.16 T:led80n6silcv1 1831.35 1847.42 1851.29 T:led80n6t4silcv2 1871.20? 1872.12? 2552.28? T:acorn128 3164.95 3165.88 3169.01 T:present80n6silcv1 3165.16 3166.76 3168.64 T:present80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.87? 0.93? 1.01? T:aegis128 0.94? 0.95? 1.10? T:aegis128l 0.98? 1.02? 1.20? aegis128l 1.20? 1.21? 1.35? aegis256 1.20 1.23 1.25 T:tiaoxinv1 1.26 1.29 1.34 T:aezv5 1.30? 1.32? 1.51? T:tiaoxinv2 1.41 1.45 1.45 T:aezv3 1.41 1.45 1.48 T:aezv4 2.57 2.70 2.77 T:aes128otrsv3 2.80? 2.84? 3.47? T:aeadaes128ocbtaglen128v1 2.83 2.87 2.90 T:morus640128v1 3.03 3.03 3.09 T:aes128n8t8clocv2 2.95 3.06 3.11 T:colm0v1 3.08 3.10 3.12 T:aes128n12t8clocv3 3.09 3.12 3.16 T:aes128n12t8clocv2 3.12 3.18 3.45 T:aes128n8t8silcv2 3.30 3.30 3.33 T:morus1280256v1 3.30 3.33 3.40 T:morus1280128v1 3.32 3.34 3.41 T:morus640128v2 3.16 3.37 3.45 T:aes128n12t8silcv2 3.15 3.38 3.41 T:aes128n12t8silcv3 3.35 3.38 3.44 T:aes128otrcv3 3.55 3.60 3.63 T:morus1280256v2 3.59 3.66 3.69 T:morus1280128v2 3.80 3.81 3.90 T:aes256otrsv3 3.85? 3.94? 7.84? T:aeadaes256ocbtaglen128v1 4.02? 4.07? 4.62? T:aeadaes192ocbtaglen128v1 4.14 4.18 4.22 T:deoxysneq256128v1 4.28 4.37 4.43 T:aes256otrcv3 4.55 4.59 4.66 T:deoxysi128v141 4.84 4.90 5.00 T:deoxysneq128128v1 5.02 5.10 5.12 T:aes128gcmv1 5.23 5.27 5.33 T:deoxysii128v141 5.48 5.52 5.58 aes256gcmv1 5.48 5.53 5.59 T:deoxysi256v141 4.97? 5.55? 5.62? T:aes128otrpv3 6.26 6.29 6.31 T:aes256otrpv3 6.24 6.30 6.32 T:deoxysii256v141 6.24 6.44 6.68 T:aesjambuv1 6.73 6.85 6.91 T:deoxyseq128128v1 7.20 7.26 7.32 T:deoxyseq256128v1 8.12 8.15 8.22 T:norx6441v1 8.23 8.32 8.36 T:norx6441v2 8.29 8.33 8.37 T:norx6441v3 9.22 9.22 9.26 ascon128av12 9.29 9.29 9.45 T:ascon128av11 9.52 9.54 9.58 T:ascon96v1 9.58 9.61 9.64 T:norx3241v1 9.70 9.75 9.78 T:norx3241v3 9.71 9.76 9.77 T:norx3241v2 11.28 11.28 11.38 ascon128v12 11.37 11.45 11.85 T:lakekeyakv1 11.91 11.91 11.96 T:ascon128v1 11.91 11.91 12.02 T:ascon128v11 12.01 12.13 12.15 T:norx6461v3 12.08 12.18 12.32 T:norx6461v2 12.11 12.21 12.34 T:norx6461v1 13.34 13.41 13.64 T:lakekeyakv2 13.80 13.86 14.32 T:riverkeyakv2 13.72 13.99 14.02 T:norx6444v3 14.29 14.32 14.34 T:norx3261v3 14.34 14.37 14.37 T:norx3261v2 16.41 16.43 16.45 T:norx3261v1 16.69 16.84 17.13 T:oceankeyakv2 16.73 16.92 17.54 T:seakeyakv2 19.70 19.91 20.02 T:aes128otrsv1 19.85 20.03 20.34 T:aes128otrsv2 20.32 20.52 20.85 T:aes128otrpv1 20.48 20.62 20.71 T:aes128otrpv2 22.27 22.45 22.52 T:aes128n12clocv1 22.28 22.58 22.73 T:aes128n8clocv1 24.24 24.24 24.54 T:acorn128v2 24.39 24.40 24.70 T:acorn128v3 25.34 25.43 25.57 T:aes256otrsv2 25.33 25.57 25.86 T:aes256otrsv1 25.64 25.72 25.82 T:twine80n6t4clocv3 25.86 25.98 26.16 T:aes256otrpv1 26.00 26.06 26.34 T:aes256otrpv2 26.63 26.80 26.90 T:aes128n12silcv1 26.65 26.91 27.30 T:aes128n8silcv1 26.98 26.99 27.30 T:ketjeminorv2 28.47 28.52 28.60 T:twine80n6t4clocv2 32.65 32.77 32.81 T:norx6444v2 33.63 33.72 33.80 T:norx6444v1 35.48 35.50 36.23 T:ketjemajorv2 38.69 38.76 39.07 T:lunarkeyakv2 41.88 42.22 42.25 T:aeadaes128ocbtaglen64v1 42.27 42.45 42.59 T:aeadaes128ocbtaglen96v1 43.66 43.98 44.16 T:ketjesrv2 48.71 48.73 48.81 T:aeadaes192ocbtaglen96v1 48.49 48.80 48.86 T:aeadaes192ocbtaglen64v1 50.47 50.62 50.80 T:ketjesrv1 52.73 52.94 53.08 T:riverkeyakv1 54.52 54.76 55.07 T:ketjejrv1 57.10 57.26 57.62 T:aeadaes256ocbtaglen64v1 57.23 57.30 57.52 T:aeadaes256ocbtaglen96v1 59.23 59.26 59.36 T:colm127v1 60.52 60.83 61.19 T:proest256otrv1 83.27 83.61 83.80 T:present80n6t4silcv3 85.22 85.44 85.59 T:deoxysneq128128v13 86.21 86.31 86.48 T:proest128otrv1 91.45 92.19 92.66 T:ketjejrv2 96.56 97.26 98.28 T:twine80n6clocv1 121.70 122.01 122.66 T:aezv1 122.86 122.94 123.52 T:deoxyseq128128v13 123.23 128.24 128.70 T:led80n6t4silcv3 134.15 134.50 134.80 T:deoxysneq256128v13 134.82 135.02 135.30 T:seakeyakv1 198.88 199.46 199.78 T:oceankeyakv1 204.51 204.89 205.62 T:deoxyseq256128v13 1817.70 1819.01 1822.17 T:led80n6silcv1 1827.63 1831.13 1837.30 T:led80n6t4silcv2 1926.27? 1928.22? 2602.70? T:acorn128 3165.32 3166.88 3168.09 T:present80n6silcv1 3165.97 3167.18 3168.32 T:present80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.80? 0.91? 0.95? T:aegis128 0.94? 0.95? 1.07? T:aegis128l 0.98? 1.02? 1.27? aegis128l 0.95? 1.03? 1.17? T:aezv5 1.08? 1.09? 1.96? T:aezv3 1.12? 1.12? 1.27? T:aezv4 1.23 1.23 1.31 aegis256 1.23 1.25 1.26 T:tiaoxinv1 1.31 1.34 1.40 T:tiaoxinv2 2.52 2.68 2.76 T:aes128otrsv3 2.79 2.84 2.84 T:aeadaes128ocbtaglen128v1 2.86 2.90 2.94 T:morus640128v1 2.85? 2.91? 4.74? T:aes128n8t8silcv2 2.88? 2.91? 4.73? T:aes128n12t8silcv3 2.90? 2.94? 4.73? T:aes128n12t8silcv2 3.09 3.09 3.11 T:aes128n12t8clocv3 3.05? 3.14? 4.17? T:colm0v1 3.13 3.16 3.37 T:aes128n12t8clocv2 3.27 3.29 3.34 T:morus1280256v1 3.08 3.33 3.39 T:aes128n8t8clocv2 3.30 3.33 3.34 T:morus1280128v1 3.30 3.35 3.43 T:morus640128v2 3.31 3.38 3.47 T:aes128otrcv3 3.55 3.57 3.61 T:morus1280256v2 3.60 3.62 3.70 T:morus1280128v2 3.80 3.81 3.92 T:aes256otrsv3 3.83 3.85 3.92 T:aeadaes256ocbtaglen128v1 3.98 4.05 4.18 T:deoxysneq256128v1 3.95? 4.10? 7.88? T:aeadaes192ocbtaglen128v1 4.31 4.39 4.43 T:aes256otrcv3 4.54 4.57 4.64 T:deoxysi128v141 4.74 4.76 4.84 T:deoxysneq128128v1 5.06 5.06 5.11 T:aes128gcmv1 5.05? 5.10? 5.73? T:aes128otrpv3 5.20 5.27 5.33 T:deoxysii128v141 5.47 5.49 5.56 aes256gcmv1 5.51 5.53 5.68 T:deoxysi256v141 6.18 6.25 6.27 T:deoxysii256v141 6.23 6.26 6.68 T:aesjambuv1 6.30? 6.33? 7.27? T:aes256otrpv3 6.82 6.91 6.94 T:deoxyseq128128v1 7.19 7.23 7.33 T:deoxyseq256128v1 8.06 8.18 8.22 T:norx6441v1 8.26 8.34 8.38 T:norx6441v2 8.27 8.36 8.39 T:norx6441v3 9.22 9.22 9.22 ascon128av12 9.26 9.26 9.31 T:ascon128av11 9.50 9.50 9.50 T:ascon96v1 9.59 9.62 9.65 T:norx3241v1 9.70 9.73 9.76 T:norx3241v3 9.73 9.76 9.77 T:norx3241v2 11.28 11.28 11.28 ascon128v12 11.37 11.43 11.84 T:lakekeyakv1 11.89 11.89 11.96 T:ascon128v1 11.89 11.89 12.02 T:ascon128v11 12.01 12.13 12.15 T:norx6461v3 12.09 12.16 12.30 T:norx6461v2 12.12 12.28 12.35 T:norx6461v1 13.34 13.41 13.79 T:lakekeyakv2 13.84 13.87 14.37 T:riverkeyakv2 13.90 13.95 14.02 T:norx6444v3 14.32 14.34 14.37 T:norx3261v3 14.36 14.37 14.38 T:norx3261v2 16.41 16.43 16.45 T:norx3261v1 16.66 16.77 17.48 T:oceankeyakv2 16.72 16.91 18.12 T:seakeyakv2 19.75 19.87 20.14 T:aes128otrsv1 19.87 20.10 20.45 T:aes128otrsv2 20.38 20.61 20.90 T:aes128otrpv2 20.43 20.73 20.98 T:aes128otrpv1 22.02 22.28 22.40 T:aes128n12clocv1 22.23 22.54 22.78 T:aes128n8clocv1 24.24 24.24 24.24 T:acorn128v2 24.39 24.41 24.53 T:acorn128v3 25.37 25.47 25.89 T:aes256otrsv2 25.47 25.58 25.81 T:aes256otrsv1 25.61 25.76 26.22 T:twine80n6t4clocv3 25.96 26.09 26.30 T:aes256otrpv2 25.95 26.30 26.42 T:aes256otrpv1 26.63 26.84 27.17 T:aes128n8silcv1 26.79 26.95 27.26 T:aes128n12silcv1 27.02 27.17 27.47 T:ketjeminorv2 28.09 28.11 28.58 T:twine80n6t4clocv2 32.85 33.05 33.24 T:norx6444v2 33.71 33.78 33.85 T:norx6444v1 35.53 35.66 36.38 T:ketjemajorv2 38.62 38.78 38.98 T:lunarkeyakv2 41.89 41.98 42.06 T:aeadaes128ocbtaglen64v1 42.17 42.30 42.59 T:aeadaes128ocbtaglen96v1 43.97 44.19 45.09 T:ketjesrv2 48.72 48.72 48.74 T:aeadaes192ocbtaglen96v1 48.50 48.73 48.99 T:aeadaes192ocbtaglen64v1 50.42 50.63 50.88 T:ketjesrv1 52.71 52.88 53.06 T:riverkeyakv1 54.61 54.78 55.70 T:ketjejrv1 57.09 57.12 57.38 T:aeadaes256ocbtaglen64v1 57.28 57.28 57.30 T:aeadaes256ocbtaglen96v1 58.95 59.03 59.13 T:colm127v1 58.78 59.49 59.59 T:proest256otrv1 83.48 83.55 83.65 T:present80n6t4silcv3 85.30 85.63 86.09 T:deoxysneq128128v13 86.12 86.31 86.45 T:proest128otrv1 90.93 92.00 92.77 T:ketjejrv2 96.59 97.19 97.99 T:twine80n6clocv1 122.16 122.38 122.71 T:aezv1 122.91 123.36 123.55 T:deoxyseq128128v13 123.16 128.05 129.03 T:led80n6t4silcv3 134.41 134.59 135.23 T:deoxysneq256128v13 134.45 134.67 135.06 T:seakeyakv1 198.95 199.46 199.72 T:oceankeyakv1 204.45 204.84 205.39 T:deoxyseq256128v13 1817.30 1819.95 1823.04 T:led80n6silcv1 1826.37 1830.97 1838.66 T:led80n6t4silcv2 1925.67? 1927.52? 2594.85? T:acorn128 3164.89 3166.37 3169.29 T:present80n6silcv1 3165.86 3167.57 3168.23 T:present80n6t4silcv2