VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20240625

[Page version: 20240912 11:46:28]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.95 3.00 3.04 T:morus640128v2 2.98 3.00 3.02 T:morus640128v1 3.20? 3.27? 5.53? T:morus1280128v2 3.27 3.29 3.30 T:morus1280256v1 3.39 3.43 3.50 T:morus1280256v2 3.80 3.87 3.87 T:morus1280128v1 5.65? 6.70? 7.16? T:lunarkeyakv2 6.83 6.83 6.84 T:norx3241v2 6.82 6.84 6.85 T:norx3241v3 7.53 7.57 7.58 T:norx6441v3 7.54 7.57 7.57 T:norx6441v2 7.62 7.64 7.70 T:norx6444v2 7.62 7.64 7.65 T:norx6444v3 7.86 7.91 7.94 T:norx3241v1 8.06 8.14 8.31 T:seakeyakv2 8.23 8.26 8.69 T:norx6441v1 8.32 8.37 8.40 T:norx6444v1 8.41 8.54 8.80 T:oceankeyakv2 9.77 9.79 9.81 T:norx3261v3 9.76 9.79 9.82 T:norx3261v2 10.88 10.99 11.26 T:lakekeyakv1 11.05 11.09 11.09 T:norx6461v3 11.05 11.10 11.11 T:norx6461v2 10.92 11.35 11.51 T:norx3261v1 11.71? 11.78? 21.83? T:norx6461v1 9.88? 11.85? 24.99? T:lakekeyakv2 13.23 13.26 13.26 T:ascon96v1 13.36 13.38 13.38 T:ascon128av11 14.05 14.07 14.78 ascon128av12 14.18 14.24 14.36 T:tiaoxinv2 14.22 14.25 14.37 T:tiaoxinv1 18.13 18.32 18.38 T:aegis128l 20.61 20.62 20.63 T:ascon128v1 20.61 20.62 20.63 T:ascon128v11 20.98 21.01 21.55 ascon128v12 22.40 22.45 22.52 T:aegis128 26.93 27.02 27.12 T:aegis256 27.12 27.16 27.22 T:riverkeyakv2 28.56 28.57 28.66 T:ketjeminorv2 29.21 29.31 29.64 T:ketjemajorv2 31.62 31.86 32.24 T:deoxysi128v141 35.71 36.20 36.50 T:deoxysi256v141 44.96 45.45 48.20 T:oceankeyakv1 46.12 46.17 46.26 T:aes128otrcv3 49.00 50.08 50.88 T:aes128otrsv3 50.74 50.77 50.85 T:aes128otrsv1 50.76 50.80 51.51 T:aes128otrpv1 50.73 50.81 50.88 T:aes128otrpv2 50.86 51.21 53.08 T:aes128otrsv2 54.52 54.70 54.85 T:seakeyakv1 55.56 55.62 55.73 T:aes128otrpv3 59.74? 59.93? 87.89? T:proest256otrv1 60.75 60.77 60.88 T:aes256otrcv3 63.36 64.02 65.82 T:deoxysii128v141 65.02 65.02 65.05 T:aes256otrsv3 65.32 65.36 65.45 T:aes256otrsv1 65.35 65.41 65.54 T:aes256otrpv1 61.65? 65.49? 99.75? T:aes256otrpv2 65.38 65.53 65.56 T:aes256otrsv2 66.06? 66.17? 89.56? T:aes256otrpv3 71.62 71.65 72.26 T:aesjambuv1 73.14 73.20 73.35 T:aes128n12clocv1 73.17 73.25 73.37 T:aes128n12t8clocv3 73.19 73.26 73.39 T:aes128n12t8clocv2 73.20 73.27 75.02 T:aes128n8t8clocv2 73.20 73.29 73.84 T:aes128n8clocv1 73.20 73.53 77.88 T:deoxysii256v141 78.84 78.89 78.96 T:twine80n6t4clocv3 83.70 83.79 83.87 T:twine80n6t4clocv2 86.85 86.96 87.16 T:aes128n8silcv1 86.96 87.02 87.13 T:aes128n12silcv1 84.80 87.10 88.03 T:aes128n12t8silcv2 87.07 87.12 88.82 T:aes128n8t8silcv2 87.08 87.13 87.28 T:aes128n12t8silcv3 100.35 102.18 105.13 T:aes256gcmv1 108.11 108.56 112.66 T:ketjesrv1 112.84 114.71 118.07 T:riverkeyakv1 125.20 125.25 125.37 T:ketjesrv2 151.79 154.72 155.30 T:aezv4 163.50 163.51 163.58 T:present80n6t4silcv3 169.72 169.95 170.29 T:proest128otrv1 178.99 179.01 179.09 T:ketjejrv1 188.13 188.48 189.41 T:aezv5 303.10 303.15 304.00 T:deoxysneq128128v13 303.14 303.67 304.19 T:deoxysneq128128v1 308.96 309.01 309.68 T:ketjejrv2 442.07 442.19 443.29 T:deoxysneq256128v13 442.26 443.29 445.08 T:deoxysneq256128v1 438.53 459.00 461.72 T:aezv3 522.28 523.58 531.75 T:aezv1 612.04 612.50 614.04 T:deoxyseq128128v1 598.59? 614.84? 798.93? T:deoxyseq128128v13 620.82 621.23 621.69 T:twine80n6clocv1 734.75 735.26 735.45 T:led80n6t4silcv3 881.26 881.66 883.27 T:deoxyseq256128v1 889.44 890.74 892.54 T:deoxyseq256128v13 1448.25 1481.65 1595.70 T:acorn128v3 1483.41 1484.25 1490.04 T:aes128gcmv1 1482.03? 1601.78? 1668.32? T:acorn128 1491.70 1603.54 1640.66 T:acorn128v2 11980.39 12090.48 12101.73 T:led80n6t4silcv2 12013.21 12098.53 12110.16 T:led80n6silcv1 15885.59 15899.69 15914.30 T:present80n6t4silcv2 15884.74 15908.17 15947.21 T:present80n6silcv1 44602.61 44657.59 44776.38 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 2.91 2.94 2.96 T:morus640128v1 2.91 2.94 2.96 T:morus640128v2 3.09? 3.20? 5.24? T:morus1280128v2 3.30 3.35 3.40 T:morus1280256v1 3.29 3.36 3.40 T:morus1280256v2 3.69 3.77 3.78 T:morus1280128v1 6.83 6.83 6.85 T:norx3241v3 6.83 6.84 6.84 T:norx3241v2 6.70 6.93 7.28 T:lunarkeyakv2 6.27? 7.68? 7.69? T:norx6441v2 7.68 7.68 7.69 T:norx6441v3 7.75 7.76 7.78 T:norx6444v2 7.75 7.77 7.89 T:norx6444v3 7.90 8.05 8.22 T:seakeyakv2 8.01 8.08 8.09 T:norx3241v1 8.34 8.39 8.89 T:norx6441v1 8.38 8.46 8.50 T:norx6444v1 8.40 8.47 8.68 T:oceankeyakv2 9.78 9.79 9.81 T:norx3261v3 9.78 9.80 9.82 T:norx3261v2 10.74 10.93 11.05 T:lakekeyakv1 11.20 11.21 11.21 T:norx6461v3 11.20 11.21 11.21 T:norx6461v2 9.55? 11.50? 21.88? T:lakekeyakv2 11.55 11.62 11.65 T:norx3261v1 11.82? 11.93? 23.68? T:norx6461v1 13.43 13.44 13.45 T:ascon96v1 13.55 13.57 13.59 T:ascon128av11 13.92 13.94 13.96 ascon128av12 14.40 14.45 14.56 T:tiaoxinv1 14.40 14.47 14.58 T:tiaoxinv2 18.40 18.41 18.43 T:aegis128l 20.34 20.38 20.40 T:ascon128v11 20.34 20.38 20.41 T:ascon128v1 20.87 20.88 20.95 ascon128v12 22.46 22.51 22.53 T:aegis128 26.54 26.68 26.81 T:ketjemajorv2 26.89 26.94 26.96 T:aegis256 27.13 27.20 27.32 T:riverkeyakv2 30.31 30.32 30.36 T:ketjeminorv2 43.00 43.12 43.45 T:deoxysi128v141 45.30 45.55 50.06 T:oceankeyakv1 46.30 46.36 46.43 T:aes128otrcv3 48.86 49.08 49.31 T:deoxysi256v141 51.51 51.52 51.63 T:aes128otrsv1 51.50 51.54 51.67 T:aes128otrpv1 51.49 51.58 51.65 T:aes128otrpv2 51.71 51.98 52.10 T:aes128otrsv2 50.36 52.90 53.03 T:aes128otrsv3 55.30 55.37 55.47 T:aes128otrpv3 55.72 55.85 56.64 T:seakeyakv1 58.34 58.39 58.44 T:proest256otrv1 60.92 60.96 61.05 T:aes256otrcv3 65.17 65.61 66.09 T:deoxysii128v141 66.08 66.09 66.27 T:aes256otrsv1 66.09 66.16 66.27 T:aes256otrpv1 62.45? 66.21? 97.98? T:aes256otrpv2 66.13 66.31 66.43 T:aes256otrsv2 67.06 67.13 68.15 T:aes256otrsv3 68.14? 68.73? 91.34? T:aes256otrpv3 71.47 71.51 71.54 T:aesjambuv1 72.32 72.64 73.28 T:deoxysii256v141 77.38 77.79 77.94 T:aes128n12t8clocv3 77.78 77.82 77.94 T:aes128n8t8clocv2 77.78 77.83 78.07 T:aes128n12t8clocv2 77.82 77.90 79.09 T:aes128n12clocv1 77.81 77.90 78.01 T:aes128n8clocv1 79.11 79.13 79.20 T:twine80n6t4clocv3 86.33 86.38 86.44 T:twine80n6t4clocv2 87.44 87.48 87.56 T:aes128n8t8silcv2 86.98 87.51 87.58 T:aes128n12t8silcv3 87.47 87.54 87.72 T:aes128n8silcv1 87.49 87.59 87.75 T:aes128n12silcv1 85.40 87.67 87.81 T:aes128n12t8silcv2 101.03 102.05 103.47 T:aes256gcmv1 109.35 109.55 113.91 T:ketjesrv1 112.20 112.87 117.42 T:riverkeyakv1 118.97 119.01 119.09 T:ketjesrv2 151.13 151.32 152.54 T:aezv4 163.48 163.51 164.50 T:present80n6t4silcv3 168.42 169.43 178.30 T:proest128otrv1 174.98 175.01 175.09 T:ketjejrv1 183.06 184.42 184.50 T:aezv5 290.47 290.51 290.81 T:ketjejrv2 409.73 410.36 412.70 T:deoxysneq128128v1 411.50 412.10 414.47 T:deoxysneq128128v13 432.27 453.74 455.73 T:aezv3 524.54 525.58 528.68 T:aezv1 598.66? 611.02? 798.39? T:deoxyseq128128v13 612.70 612.95 616.81 T:deoxysneq256128v13 612.59 613.08 617.94 T:deoxysneq256128v1 622.48 623.31 625.07 T:twine80n6clocv1 734.97 735.38 735.66 T:led80n6t4silcv3 815.48 817.51 819.86 T:deoxyseq128128v1 889.20 890.28 891.62 T:deoxyseq256128v13 1223.00 1223.89 1224.91 T:deoxyseq256128v1 1428.21 1453.25 1576.26 T:acorn128v3 1483.63 1484.12 1485.07 T:aes128gcmv1 1492.28 1493.02 1495.64 T:acorn128v2 1468.51? 1598.77? 1661.35? T:acorn128 12074.67 12088.25 12103.97 T:led80n6t4silcv2 12081.90 12099.45 12112.38 T:led80n6silcv1 15887.28 15898.71 15917.65 T:present80n6t4silcv2 15882.46 15900.66 15909.86 T:present80n6silcv1 44527.80 44620.88 44759.86 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 2.94 2.94 2.95 T:morus640128v1 2.94 2.94 2.95 T:morus640128v2 3.15? 3.18? 5.28? T:morus1280128v2 3.35 3.35 3.37 T:morus1280256v1 3.34 3.35 3.38 T:morus1280256v2 3.75 3.77 3.77 T:morus1280128v1 6.83 6.84 6.85 T:norx3241v2 6.84? 6.85? 9.33? T:norx3241v3 7.08? 7.44? 9.31? T:lunarkeyakv2 7.79 7.81 7.83 T:norx6441v3 7.80 7.81 7.84 T:norx6441v2 7.88 7.89 7.90 T:norx6444v2 7.88 7.90 7.91 T:norx6444v3 7.96 8.04 8.17 T:seakeyakv2 8.08 8.08 8.08 T:norx3241v1 8.43 8.52 8.69 T:oceankeyakv2 8.51 8.52 8.53 T:norx6441v1 8.55 8.57 8.65 T:norx6444v1 9.78 9.79 9.80 T:norx3261v3 9.78 9.79 9.80 T:norx3261v2 10.91? 11.09? 16.85? T:lakekeyakv1 11.32 11.33 11.36 T:norx6461v3 11.32 11.33 11.35 T:norx6461v2 9.73? 11.61? 24.18? T:lakekeyakv2 11.62 11.62 11.63 T:norx3261v1 11.97? 12.00? 23.72? T:norx6461v1 13.41 13.44 13.45 T:ascon96v1 13.55 13.57 13.58 T:ascon128av11 13.94 13.94 13.95 ascon128av12 14.43 14.44 15.27 T:tiaoxinv1 14.46 14.47 14.53 T:tiaoxinv2 18.40 18.41 18.42 T:aegis128l 20.37 20.38 20.39 T:ascon128v1 20.37 20.38 20.59 T:ascon128v11 20.88 20.88 20.88 ascon128v12 22.50 22.51 22.52 T:aegis128 26.75 26.83 26.93 T:ketjemajorv2 26.94 26.94 26.95 T:aegis256 27.18 27.22 27.24 T:riverkeyakv2 30.44 30.45 30.52 T:ketjeminorv2 43.37 43.48 43.77 T:deoxysi128v141 46.32 46.37 46.92 T:aes128otrcv3 44.11? 48.38? 49.75? T:oceankeyakv1 48.89 49.03 49.41 T:deoxysi256v141 51.64 51.64 51.76 T:aes128otrsv1 51.62 51.69 51.74 T:aes128otrpv2 52.08 52.09 52.20 T:aes128otrsv2 51.72 52.10 52.18 T:aes128otrpv1 49.72 53.00 53.05 T:aes128otrsv3 55.47 55.49 55.57 T:aes128otrpv3 55.92 56.01 56.23 T:seakeyakv1 58.38 58.41 59.65 T:proest256otrv1 60.92 60.97 61.04 T:aes256otrcv3 64.96 65.32 65.93 T:deoxysii128v141 66.19 66.21 66.40 T:aes256otrsv1 66.23 66.29 66.44 T:aes256otrpv1 63.18? 66.34? 96.30? T:aes256otrpv2 66.23 66.41 66.55 T:aes256otrsv2 67.18 67.20 67.26 T:aes256otrsv3 68.23 68.35 68.42 T:aes256otrpv3 71.49 71.51 71.85 T:aesjambuv1 73.00 73.67 77.13 T:deoxysii256v141 77.78 77.81 77.92 T:aes128n12t8clocv2 77.80 77.81 78.17 T:aes128n12t8clocv3 77.78 77.84 78.82 T:aes128n8t8clocv2 77.86 77.87 77.97 T:aes128n12clocv1 77.86 77.89 78.01 T:aes128n8clocv1 79.08 79.15 79.33 T:twine80n6t4clocv3 86.36 86.41 87.26 T:twine80n6t4clocv2 87.45 87.49 87.52 T:aes128n8t8silcv2 87.46 87.51 87.58 T:aes128n12t8silcv3 87.52 87.56 87.66 T:aes128n8silcv1 87.55 87.57 87.66 T:aes128n12silcv1 85.35 87.71 87.80 T:aes128n12t8silcv2 100.30 101.21 102.67 T:aes256gcmv1 112.14 113.86 117.54 T:riverkeyakv1 111.68? 114.06? 158.43? T:ketjesrv1 119.09 119.17 119.31 T:ketjesrv2 150.97 151.07 152.36 T:aezv4 163.47 163.53 164.11 T:present80n6t4silcv3 168.43 170.20 178.30 T:proest128otrv1 175.10 175.12 175.59 T:ketjejrv1 182.98 184.39 184.47 T:aezv5 290.60 291.05 292.90 T:ketjejrv2 409.82 410.76 411.87 T:deoxysneq128128v1 411.40 414.01 415.79 T:deoxysneq128128v13 431.63 453.55 455.45 T:aezv3 524.37 526.73 531.10 T:aezv1 611.70 612.93 615.03 T:deoxysneq256128v1 612.76 613.00 616.23 T:deoxysneq256128v13 602.60? 615.52? 797.96? T:deoxyseq128128v13 623.29 623.80 631.78 T:twine80n6clocv1 735.11 735.59 736.10 T:led80n6t4silcv3 815.48 816.43 818.43 T:deoxyseq128128v1 889.73 890.59 892.07 T:deoxyseq256128v13 1222.79 1224.47 1233.86 T:deoxyseq256128v1 1426.71 1427.16 1427.43 T:aes128gcmv1 1426.60 1428.65 1434.43 aes256gcmv1 1429.83 1488.88 1575.65 T:acorn128v3 1492.11 1493.08 1494.65 T:acorn128v2 1499.64 1610.03 1661.56 T:acorn128 12082.52 12086.78 12109.83 T:led80n6silcv1 12077.00 12089.98 12110.76 T:led80n6t4silcv2 15882.22 15900.55 15918.30 T:present80n6t4silcv2 15889.49 15902.54 15931.84 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.71 2.72 2.78 T:morus640128v1 2.70 2.73 2.77 T:morus640128v2 2.86 2.90 2.94 T:morus1280128v2 2.90 2.93 2.96 T:morus1280256v1 2.93 2.97 3.01 T:morus1280256v2 3.84 3.87 3.90 T:morus1280128v1 6.57 6.57 6.58 T:norx3241v3 6.57 6.58 6.59 T:norx3241v2 6.84 6.87 6.97 T:seakeyakv2 7.04 7.12 7.29 T:oceankeyakv2 7.41 7.45 7.46 T:norx6441v2 7.42 7.45 7.47 T:norx6441v3 7.46 7.48 7.51 T:norx6444v3 7.46 7.48 7.52 T:norx6444v2 7.66 7.69 7.74 T:norx3241v1 8.10 8.13 8.14 T:norx6441v1 8.17 8.19 8.22 T:norx6444v1 8.61 8.91 9.13 T:lunarkeyakv2 9.53 9.54 9.54 T:norx3261v3 9.53 9.54 9.54 T:norx3261v2 10.58 10.65 10.71 T:lakekeyakv2 10.94 10.97 11.00 T:norx6461v3 10.92 10.97 10.99 T:norx6461v2 11.03 11.09 11.24 T:lakekeyakv1 11.18 11.24 11.33 T:norx3261v1 11.60? 11.65? 21.34? T:norx6461v1 13.37 13.38 13.41 T:ascon96v1 13.39 13.41 13.44 T:ascon128av11 13.73 13.76 13.79 ascon128av12 13.78 13.80 13.85 T:tiaoxinv1 13.77? 14.17? 19.27? T:tiaoxinv2 18.09 18.16 18.21 T:aegis128l 19.19 19.21 19.26 T:riverkeyakv2 20.55 20.56 20.61 T:ascon128v1 20.55 20.56 20.61 T:ascon128v11 20.67 20.69 20.72 ascon128v12 22.04 22.15 22.22 T:aegis128 21.85 23.60 23.66 T:ketjemajorv2 26.56 26.60 26.69 T:aegis256 26.90 26.91 26.94 T:ketjeminorv2 32.78 33.32 34.24 T:deoxysi128v141 37.48 37.96 39.06 T:deoxysi256v141 44.49 44.75 46.82 T:oceankeyakv1 44.22 46.13 46.58 T:aes128otrcv3 44.97 46.63 46.74 T:aes128otrsv3 46.28 46.65 46.78 T:aes128otrsv1 46.79 46.90 47.76 T:aes128otrsv2 48.63 49.09 49.42 T:deoxysii128v141 52.97 53.02 53.09 T:aes128otrpv1 53.00 53.20 53.94 T:aes128otrpv2 54.08 54.18 54.66 T:seakeyakv1 53.17? 54.22? 70.22? T:aes128otrpv3 54.60 54.63 54.73 T:aes128n12clocv1 54.63 54.68 54.75 T:aes128n8clocv1 54.66 54.70 54.75 T:aes128n12t8clocv3 54.67 54.70 54.89 T:aes128n8t8clocv2 54.67 54.70 54.83 T:aes128n12t8clocv2 54.82 55.05 56.05 T:deoxysii256v141 56.60 57.16 57.59 T:aes256gcmv1 58.96 59.11 59.13 T:proest256otrv1 60.79 60.83 60.94 T:aes256otrsv3 60.79 60.88 60.97 T:aes256otrcv3 61.00 61.06 61.16 T:aes256otrsv2 61.00 61.07 61.33 T:aes256otrsv1 64.90 64.96 65.05 T:aes128n8t8silcv2 64.90 64.96 65.47 T:aes128n12silcv1 64.89 64.97 65.78 T:aes128n8silcv1 64.98 65.04 66.71 T:aes128n12t8silcv3 63.19 65.04 65.55 T:aes128n12t8silcv2 67.29 67.32 67.49 T:aes256otrpv1 64.71 67.38 68.37 T:aes256otrpv2 66.23 67.78 68.61 T:aes256otrpv3 70.86 71.33 71.58 T:aesjambuv1 78.23 78.25 78.31 T:twine80n6t4clocv3 87.28 87.31 87.37 T:twine80n6t4clocv2 93.98 97.42 101.07 T:ketjesrv1 106.16 107.14 111.12 T:riverkeyakv1 112.11 112.13 112.38 T:ketjesrv2 138.76 139.02 140.96 T:aezv4 148.48 148.99 150.64 T:aezv5 157.10 157.25 157.73 T:ketjejrv1 162.87 162.99 163.36 T:present80n6t4silcv3 169.90 170.13 170.52 T:proest128otrv1 286.60 287.07 290.57 T:ketjejrv2 302.69 303.15 303.31 T:deoxysneq128128v13 303.01 303.20 303.91 T:deoxysneq128128v1 342.62 345.73 346.33 T:aezv1 350.76 351.64 352.73 T:aezv3 442.35 442.46 443.24 T:deoxysneq256128v13 442.40 442.89 443.71 T:deoxysneq256128v1 456.21 457.40 458.37 T:deoxyseq128128v13 457.77? 458.95? 601.98? T:deoxyseq128128v1 464.12 464.43 465.21 T:twine80n6clocv1 661.22 661.76 664.88 T:deoxyseq256128v1 665.90? 666.66? 774.41? T:deoxyseq256128v13 734.51 734.73 735.45 T:led80n6t4silcv3 1430.68 1446.83 1559.17 T:acorn128v3 1455.24 1456.09 1459.28 T:aes128gcmv1 1336.09? 1571.01? 1572.27? T:acorn128v2 1463.04? 1605.13? 1636.38? T:acorn128 9061.45 9066.54 9070.05 T:led80n6t4silcv2 9061.74 9066.55 9077.09 T:led80n6silcv1 11915.12 11918.65 11934.88 T:present80n6t4silcv2 11919.96 11926.94 11942.20 T:present80n6silcv1 23017.26 23062.36 23155.11 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.58 2.63 2.67 T:morus640128v2 2.59 2.63 2.69 T:morus640128v1 2.87 2.91 2.99 T:morus1280128v2 2.65? 2.94? 3.10? T:morus1280256v2 2.98 3.01 3.08 T:morus1280256v1 3.80 3.82 3.87 T:morus1280128v1 6.56 6.57 6.63 T:norx3241v3 6.55 6.58 6.66 T:norx3241v2 6.73 6.81 6.97 T:seakeyakv2 7.04 7.11 7.25 T:oceankeyakv2 7.48 7.51 7.55 T:norx6441v3 7.48 7.51 7.58 T:norx6441v2 7.51 7.54 7.60 T:norx6444v3 7.52 7.54 7.59 T:norx6444v2 7.72 7.79 7.84 T:norx3241v1 8.17 8.19 8.23 T:norx6441v1 8.19 8.23 8.29 T:norx6444v1 8.97 9.13 9.38 T:lunarkeyakv2 9.51 9.53 9.59 T:norx3261v3 9.48 9.53 9.62 T:norx3261v2 10.21 10.28 10.37 T:lakekeyakv2 11.01 11.02 11.09 T:norx6461v2 10.99 11.02 11.21 T:lakekeyakv1 11.01 11.02 11.08 T:norx6461v3 11.21 11.32 11.44 T:norx3261v1 11.64? 11.72? 21.18? T:norx6461v1 13.37 13.42 13.47 T:ascon96v1 13.51 13.53 13.56 T:ascon128av11 13.66 13.69 13.74 ascon128av12 13.89 13.94 14.04 T:tiaoxinv1 13.88? 14.41? 20.82? T:tiaoxinv2 18.19 18.21 18.31 T:aegis128l 19.39 19.47 19.58 T:riverkeyakv2 20.16 20.21 20.26 T:ascon128v11 20.16 20.27 21.71 T:ascon128v1 20.55 20.57 20.61 ascon128v12 21.99 22.19 22.31 T:aegis128 22.23 22.41 23.16 T:ketjemajorv2 26.54 26.57 26.65 T:aegis256 27.76 27.78 27.85 T:ketjeminorv2 37.90 38.13 38.45 T:deoxysi128v141 43.66 43.82 44.09 T:deoxysi256v141 44.75 46.33 46.94 T:aes128otrcv3 45.52 46.88 47.79 T:aes128otrsv3 44.91 46.98 47.58 T:oceankeyakv1 46.98 47.05 47.16 T:aes128otrsv1 47.18 47.44 48.26 T:aes128otrsv2 48.65 48.96 49.18 T:deoxysii128v141 53.34 53.42 53.94 T:aes128otrpv1 53.40 53.54 54.30 T:aes128otrpv2 53.03? 53.58? 71.79? T:aes128otrpv3 54.68 54.76 54.89 T:seakeyakv1 54.61 54.98 55.16 T:deoxysii256v141 56.76 56.97 57.07 T:aes128n8t8clocv2 56.95 56.98 57.07 T:aes128n12t8clocv2 56.95 56.99 57.33 T:aes128n12clocv1 56.93 56.99 57.06 T:aes128n12t8clocv3 56.97 57.07 57.71 T:aes128n8clocv1 56.77 58.12 59.32 T:aes256gcmv1 58.31 58.46 59.67 T:proest256otrv1 60.95 60.99 61.13 T:aes256otrcv3 61.40 61.43 61.53 T:aes256otrsv1 61.37 61.44 61.55 T:aes256otrsv2 61.82 61.82 62.38 T:aes256otrsv3 64.81 65.18 65.38 T:aes128n8t8silcv2 65.16 65.22 65.29 T:aes128n12t8silcv3 65.15 65.23 65.32 T:aes128n8silcv1 65.19 65.24 65.63 T:aes128n12silcv1 63.86 65.30 65.38 T:aes128n12t8silcv2 65.05 67.69 67.84 T:aes256otrpv2 67.63 67.69 67.85 T:aes256otrpv1 66.51 68.85 69.64 T:aes256otrpv3 69.73 71.20 71.31 T:aesjambuv1 78.35 78.38 78.48 T:twine80n6t4clocv3 90.40 90.44 90.49 T:twine80n6t4clocv2 95.04 97.79 101.69 T:ketjesrv1 105.90 107.17 110.84 T:riverkeyakv1 108.97 109.02 109.06 T:ketjesrv2 137.47 137.56 138.71 T:aezv4 145.79 146.91 147.16 T:aezv5 155.22 155.34 156.37 T:ketjejrv1 162.88? 163.29? 262.04? T:present80n6t4silcv3 169.37 170.09 174.00 T:proest128otrv1 276.36 277.60 281.70 T:ketjejrv2 344.68 346.54 347.32 T:aezv1 348.25 349.12 349.75 T:aezv3 355.86 356.45 358.94 T:deoxysneq128128v1 356.44 356.64 358.05 T:deoxysneq128128v13 456.96 457.37 458.64 T:deoxyseq128128v13 465.18 465.45 465.76 T:twine80n6clocv1 527.61 528.41 528.62 T:deoxysneq256128v1 527.66 528.49 528.73 T:deoxysneq256128v13 559.92 562.96 564.33 T:deoxyseq128128v1 665.87 666.46 672.87 T:deoxyseq256128v13 734.50 734.72 737.45 T:led80n6t4silcv3 831.96 832.41 833.00 T:deoxyseq256128v1 1427.34 1453.05 1549.25 T:acorn128v3 1455.43 1455.64 1458.17 T:aes128gcmv1 1343.37 1469.06 1473.91 T:acorn128v2 1461.11? 1610.59? 1644.01? T:acorn128 9058.48 9062.29 9071.15 T:led80n6silcv1 9060.79 9063.12 9072.22 T:led80n6t4silcv2 11920.82 11924.79 11956.38 T:present80n6silcv1 11919.00 11924.91 11939.24 T:present80n6t4silcv2 22989.54 23014.43 23113.82 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 2.63 2.63 2.63 T:morus640128v1 2.63 2.63 2.63 T:morus640128v2 2.91 2.91 2.92 T:morus1280128v2 2.65? 3.00? 3.01? T:morus1280256v2 3.00 3.01 3.04 T:morus1280256v1 3.82 3.82 3.83 T:morus1280128v1 6.57 6.57 6.58 T:norx3241v2 6.57 6.57 6.58 T:norx3241v3 6.80 6.83 6.93 T:seakeyakv2 7.09 7.22 7.85 T:oceankeyakv2 7.55 7.57 7.58 T:norx6441v3 7.56 7.57 7.59 T:norx6441v2 7.59 7.61 7.63 T:norx6444v2 7.60 7.61 7.64 T:norx6444v3 7.78 7.78 7.78 T:norx3241v1 8.25 8.26 8.29 T:norx6441v1 8.27 8.30 8.34 T:norx6444v1 9.07 9.20 9.35 T:lunarkeyakv2 9.52 9.53 9.56 T:norx3261v3 9.53 9.53 9.54 T:norx3261v2 10.32 10.33 10.42 T:lakekeyakv2 11.08 11.08 11.12 T:norx6461v2 11.08 11.09 11.13 T:norx6461v3 11.08 11.11 11.25 T:lakekeyakv1 11.32 11.32 11.34 T:norx3261v1 11.72 11.74 11.76 T:norx6461v1 13.40 13.42 13.45 T:ascon96v1 13.52 13.54 13.72 T:ascon128av11 13.69 13.69 13.71 ascon128av12 13.91 13.93 13.96 T:tiaoxinv1 13.92? 13.98? 20.94? T:tiaoxinv2 18.21 18.21 18.26 T:aegis128l 19.45 19.47 19.56 T:riverkeyakv2 20.18 20.19 20.21 T:ascon128v1 20.18 20.19 20.21 T:ascon128v11 20.56 20.56 20.57 ascon128v12 22.16 22.16 22.19 T:aegis128 22.35 22.40 22.45 T:ketjemajorv2 26.57 26.57 26.75 T:aegis256 27.84 27.85 27.91 T:ketjeminorv2 37.87 38.09 38.33 T:deoxysi128v141 43.70 43.89 44.46 T:deoxysi256v141 44.05 44.97 47.05 T:oceankeyakv1 44.72 46.34 46.39 T:aes128otrcv3 47.23 47.35 48.20 T:aes128otrsv2 45.46 47.74 47.83 T:aes128otrsv3 47.06 47.81 48.12 T:aes128otrsv1 48.74 48.99 49.19 T:deoxysii128v141 53.44 53.47 53.51 T:aes128otrpv1 53.42 53.49 53.56 T:aes128otrpv2 53.13? 53.57? 70.82? T:aes128otrpv3 54.78 54.85 56.62 T:seakeyakv1 54.65 55.00 55.72 T:deoxysii256v141 56.84 56.97 57.03 T:aes128n12clocv1 56.97 56.98 57.04 T:aes128n8clocv1 56.96 57.00 57.23 T:aes128n12t8clocv3 56.96 57.00 57.53 T:aes128n12t8clocv2 56.95 57.04 58.21 T:aes128n8t8clocv2 56.74 57.64 60.27 T:aes256gcmv1 58.32 58.39 58.43 T:proest256otrv1 60.95 60.97 61.01 T:aes256otrcv3 61.47 61.49 62.00 T:aes256otrsv1 61.35 61.49 61.58 T:aes256otrsv2 61.87 61.93 62.05 T:aes256otrsv3 62.96 65.21 65.73 T:aes128n8t8silcv2 65.18 65.21 65.26 T:aes128n12t8silcv3 65.19 65.24 65.77 T:aes128n8silcv1 65.23 65.25 65.30 T:aes128n12silcv1 64.10 65.31 65.46 T:aes128n12t8silcv2 67.72 67.81 68.49 T:aes256otrpv1 65.23 67.97 68.81 T:aes256otrpv2 66.04 68.85 69.72 T:aes256otrpv3 71.19 71.26 71.29 T:aesjambuv1 78.35 78.40 78.49 T:twine80n6t4clocv3 90.40 90.44 90.90 T:twine80n6t4clocv2 94.82 97.93 101.76 T:ketjesrv1 104.89 106.81 110.89 T:riverkeyakv1 109.03 109.06 109.16 T:ketjesrv2 137.41 137.55 138.54 T:aezv4 145.71 146.85 147.47 T:aezv5 155.29 155.37 155.87 T:ketjejrv1 162.84? 163.35? 262.69? T:present80n6t4silcv3 169.34 170.50 174.01 T:proest128otrv1 277.28 277.58 278.13 T:ketjejrv2 346.01 347.08 347.61 T:aezv1 348.09 349.00 349.85 T:aezv3 355.76 355.97 357.62 T:deoxysneq128128v1 356.51 357.23 357.80 T:deoxysneq128128v13 457.06 457.36 458.29 T:deoxyseq128128v13 464.73 465.32 465.63 T:twine80n6clocv1 527.12 528.49 530.26 T:deoxysneq256128v1 527.68 528.62 528.99 T:deoxysneq256128v13 559.93 560.32 561.50 T:deoxyseq128128v1 665.76 667.62 676.11 T:deoxyseq256128v13 734.56 734.78 735.23 T:led80n6t4silcv3 832.59 835.22 837.56 T:deoxyseq256128v1 1425.97 1427.21 1428.99 aes256gcmv1 1426.95 1427.35 1431.90 T:aes128gcmv1 1421.12 1443.70 1548.81 T:acorn128v3 1341.05 1469.26 1475.50 T:acorn128v2 1547.57 1579.02 1625.90 T:acorn128 9056.26 9062.19 9070.77 T:led80n6silcv1 9059.58 9065.38 9075.23 T:led80n6t4silcv2 11915.38 11923.55 11936.34 T:present80n6silcv1 11916.36 11927.56 11964.46 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 2.41 2.44 2.46 T:morus640128v2 2.42 2.44 2.45 T:morus640128v1 2.48 2.53 2.55 T:morus1280256v2 2.47 2.54 2.55 T:morus1280128v2 2.54 2.57 2.58 T:morus1280256v1 3.83 3.89 3.90 T:morus1280128v1 5.49 5.60 5.61 T:oceankeyakv2 5.52? 5.76? 7.21? T:lunarkeyakv2 6.28 6.31 6.32 T:norx3241v3 6.29 6.31 6.34 T:norx3241v2 6.34 6.38 6.44 T:seakeyakv2 7.27 7.32 7.33 T:norx6444v2 7.26 7.32 7.33 T:norx6441v2 7.29 7.33 7.34 T:norx6444v3 7.28 7.33 7.34 T:norx6441v3 7.43 7.48 7.50 T:norx3241v1 8.00 8.01 8.02 T:norx6444v1 7.99 8.01 8.02 T:norx6441v1 6.56? 8.62? 10.33? T:lakekeyakv2 9.24 9.27 9.31 T:norx3261v3 9.24 9.28 9.29 T:norx3261v2 9.71 9.84 9.91 T:lakekeyakv1 10.79 10.83 10.87 T:norx6461v2 10.81 10.84 10.85 T:norx6461v3 10.97 11.03 11.06 T:norx3261v1 9.87? 11.49? 11.51? T:norx6461v1 10.48? 12.11? 13.51? T:tiaoxinv1 13.28 13.36 13.40 T:tiaoxinv2 12.24? 13.36? 14.55? T:aes256gcmv1 13.41 13.44 13.46 T:ascon128av11 13.40 13.45 13.47 ascon128av12 13.49 13.51 13.52 T:ascon96v1 17.09 17.19 17.29 T:riverkeyakv2 17.88 17.97 18.03 T:ketjemajorv2 17.95 18.01 18.02 T:aegis128l 20.36 20.38 20.38 ascon128v12 20.48 20.50 20.51 T:ascon128v11 20.48 20.50 20.51 T:ascon128v1 21.77 21.82 21.85 T:aegis128 25.23 25.25 25.26 T:ketjeminorv2 26.14 26.20 26.24 T:aegis256 31.65 31.81 32.00 T:deoxysi128v141 31.66 31.88 32.16 T:deoxysii128v141 35.49 35.78 36.41 T:deoxysi256v141 35.54 35.79 35.90 T:deoxysii256v141 36.03 36.07 36.10 T:aes128n12clocv1 36.10 36.12 36.19 T:aes128n12t8clocv2 36.10 36.12 36.13 T:aes128n8t8clocv2 36.04 36.13 36.79 T:aes128n8clocv1 36.10 36.14 36.52 T:aes128n12t8clocv3 42.61 42.63 42.69 T:aes128otrsv1 42.67 42.78 42.82 T:aes128otrsv2 42.86 42.88 42.96 T:aes128n8t8silcv2 42.78? 42.89? 56.80? T:aes128otrsv3 42.90 42.91 42.98 T:aes128n12t8silcv3 42.86 42.91 42.99 T:aes128n8silcv1 42.88 42.96 43.38 T:aes128n12silcv1 42.72 42.99 45.45 T:oceankeyakv1 42.89? 43.05? 60.09? T:aes128n12t8silcv2 46.31 46.35 46.50 T:aes128otrcv3 50.77 50.78 50.83 T:aes128otrpv3 53.46 53.63 53.78 T:seakeyakv1 55.25 55.25 55.32 T:aes128otrpv1 55.18 55.33 57.10 T:aes128otrpv2 56.58 56.65 56.77 T:aes256otrsv3 56.64 56.74 57.73 T:aes256otrsv2 56.66 56.79 57.72 T:aes256otrsv1 58.24 58.36 58.49 T:proest256otrv1 60.88 60.88 61.03 T:aes256otrcv3 69.26 69.35 69.40 T:aes256otrpv1 66.07? 69.39? 100.76? T:aes256otrpv2 70.98 71.01 71.04 T:aesjambuv1 71.02? 71.18? 100.81? T:aes256otrpv3 77.61 77.64 77.85 T:twine80n6t4clocv3 81.75 85.15 89.66 T:ketjesrv1 90.83 90.89 91.19 T:twine80n6t4clocv2 98.98 99.03 99.07 T:ketjesrv2 99.34 99.98 104.26 T:riverkeyakv1 108.52 108.85 109.35 T:aezv5 122.81 122.95 126.83 T:aezv4 135.48 135.50 135.59 T:ketjejrv1 162.25 162.33 163.02 T:present80n6t4silcv3 167.02 167.16 167.38 T:aezv1 170.07 170.20 170.80 T:proest128otrv1 242.23 242.52 243.93 T:aezv3 264.00 264.08 264.64 T:ketjejrv2 299.70 301.26 303.18 T:deoxyseq128128v13 302.21 302.24 303.24 T:deoxysneq128128v13 302.79 302.85 303.87 T:deoxysneq128128v1 303.03 303.09 304.14 T:deoxyseq128128v1 307.29 308.53 318.90 T:twine80n6clocv1 440.40 440.57 442.97 T:deoxyseq256128v1 441.70 442.17 443.00 T:deoxyseq256128v13 442.31 442.33 443.46 T:deoxysneq256128v1 440.40 442.55 444.32 T:deoxysneq256128v13 733.74 734.09 734.86 T:led80n6t4silcv3 1425.18 1427.76 1439.83 aes256gcmv1 1427.17 1428.53 1435.61 T:aes128gcmv1 1394.44 1430.48 1541.44 T:acorn128v3 1420.44 1542.20 1567.56 T:acorn128v2 1433.82? 1550.20? 1622.26? T:acorn128 6036.48 6038.45 6045.99 T:led80n6t4silcv2 6040.53 6046.36 6051.60 T:led80n6silcv1 7939.81 7944.98 7957.29 T:present80n6silcv1 7944.69 7948.48 7959.45 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 2.27 2.32 2.33 T:morus640128v2 2.28 2.32 2.33 T:morus640128v1 2.58 2.66 2.70 T:morus1280256v2 2.61 2.66 2.68 T:morus1280128v2 2.59? 2.70? 3.06? T:morus1280256v1 3.84 3.89 3.90 T:morus1280128v1 5.58 5.64 5.68 T:oceankeyakv2 5.51 5.70 5.92 T:lunarkeyakv2 6.30 6.31 6.32 T:norx3241v2 6.29 6.31 6.33 T:norx3241v3 6.43 6.46 6.53 T:seakeyakv2 7.28 7.31 7.33 T:norx6444v3 7.29 7.31 7.32 T:norx6444v2 7.29 7.33 7.34 T:norx6441v2 7.29 7.33 7.35 T:norx6441v3 7.44 7.48 7.49 T:norx3241v1 7.99 8.01 8.01 T:norx6441v1 7.97 8.01 8.03 T:norx6444v1 6.80? 8.63? 8.65? T:lakekeyakv2 9.26 9.27 9.28 T:norx3261v3 9.26 9.27 9.28 T:norx3261v2 9.81 9.84 9.87 T:lakekeyakv1 10.81 10.83 10.85 T:norx6461v2 10.80 10.84 10.85 T:norx6461v3 10.97 11.02 11.05 T:norx3261v1 9.77? 11.46? 11.50? T:norx6461v1 12.11? 13.23? 14.45? T:aes256gcmv1 13.35 13.38 13.38 T:ascon96v1 10.36? 13.39? 13.49? T:tiaoxinv1 13.39 13.43 13.45 T:tiaoxinv2 13.39 13.44 13.47 ascon128av12 13.47 13.51 13.54 T:ascon128av11 17.15 17.21 17.29 T:riverkeyakv2 17.88 17.97 18.06 T:ketjemajorv2 17.95 18.01 18.10 T:aegis128l 19.97 20.00 20.02 T:ascon128v1 19.97 20.00 20.02 T:ascon128v11 20.22 20.25 20.27 ascon128v12 21.76 21.82 21.84 T:aegis128 25.23 25.25 25.26 T:ketjeminorv2 26.10 26.20 26.24 T:aegis256 31.75 31.89 31.93 T:deoxysi128v141 31.78 31.91 33.32 T:deoxysii128v141 35.86 36.04 36.13 T:deoxysi256v141 36.02 36.06 36.69 T:aes128n12clocv1 36.01 36.09 36.10 T:aes128n8clocv1 35.90 36.12 36.14 T:aes128n8t8clocv2 36.09 36.12 36.17 T:aes128n12t8clocv3 36.11 36.13 36.15 T:aes128n12t8clocv2 36.10 36.23 36.29 T:deoxysii256v141 42.62 42.65 43.92 T:aes128otrsv1 42.56 42.68 44.66 T:aes128otrsv2 42.89 42.90 42.99 T:aes128n8t8silcv2 42.82 42.90 42.99 T:aes128n12silcv1 42.84 42.90 43.01 T:aes128n8silcv1 42.82 42.91 43.29 T:aes128n12t8silcv3 42.79? 42.92? 56.82? T:aes128otrsv3 42.87? 42.96? 60.33? T:aes128n12t8silcv2 42.95 44.00 46.52 T:oceankeyakv1 46.34 46.40 46.52 T:aes128otrcv3 50.74 50.79 50.85 T:aes128otrpv3 53.54 53.66 53.79 T:seakeyakv1 55.24 55.25 55.31 T:aes128otrpv1 55.21 55.28 55.38 T:aes128otrpv2 56.57 56.66 56.78 T:aes256otrsv3 56.68 56.70 56.85 T:aes256otrsv1 56.27 56.73 57.74 T:aes256otrsv2 58.24 58.35 58.48 T:proest256otrv1 60.88 60.95 61.07 T:aes256otrcv3 65.65? 69.37? 100.04? T:aes256otrpv2 69.28 69.40 72.26 T:aes256otrpv1 70.98 71.01 71.16 T:aesjambuv1 70.18 71.05 71.23 T:aes256otrpv3 77.62 77.62 77.68 T:twine80n6t4clocv3 82.53 85.20 89.65 T:ketjesrv1 94.47 94.50 94.55 T:twine80n6t4clocv2 98.97 99.00 99.06 T:ketjesrv2 99.33 99.85 104.26 T:riverkeyakv1 108.54 108.78 109.41 T:aezv5 123.49 123.74 123.83 T:aezv4 135.48 135.60 136.48 T:ketjejrv1 162.23 162.31 162.99 T:present80n6t4silcv3 167.09 167.16 168.44 T:aezv1 170.05 170.13 171.11 T:proest128otrv1 242.30 242.38 242.91 T:aezv3 263.97 264.09 264.81 T:ketjejrv2 301.14 301.25 301.40 T:deoxyseq128128v13 302.85 302.95 304.08 T:deoxysneq128128v1 302.15 303.05 304.03 T:deoxysneq128128v13 302.95 303.16 304.97 T:deoxyseq128128v1 307.23 307.76 308.45 T:twine80n6clocv1 440.39 440.66 443.68 T:deoxyseq256128v1 442.24 442.41 444.64 T:deoxysneq256128v13 442.31 442.43 443.37 T:deoxysneq256128v1 441.71 442.92 443.32 T:deoxyseq256128v13 733.66 734.04 734.61 T:led80n6t4silcv3 1394.20 1420.84 1541.17 T:acorn128v3 1427.02 1427.32 1429.88 T:aes128gcmv1 1425.89 1427.44 1434.62 aes256gcmv1 1444.91 1446.45 1456.83 T:acorn128v2 1440.32? 1551.08? 1615.07? T:acorn128 6036.56 6041.67 6046.15 T:led80n6silcv1 6037.51 6043.76 6052.47 T:led80n6t4silcv2 7941.73 7946.48 7959.50 T:present80n6silcv1 7943.17 7947.07 7951.57 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 2.32 2.32 2.32 T:morus640128v1 2.32 2.32 2.32 T:morus640128v2 2.64 2.66 2.67 T:morus1280256v2 2.66 2.66 2.67 T:morus1280256v1 2.66 2.66 2.67 T:morus1280128v2 3.87 3.89 3.89 T:morus1280128v1 5.50 5.62 5.65 T:oceankeyakv2 3.85? 5.69? 5.89? T:lunarkeyakv2 6.30 6.32 6.33 T:norx3241v2 6.31 6.33 6.41 T:norx3241v3 6.43 6.46 6.49 T:seakeyakv2 7.29 7.31 7.33 T:norx6444v2 7.30 7.31 7.34 T:norx6444v3 7.30 7.33 7.33 T:norx6441v3 7.30 7.33 7.35 T:norx6441v2 7.48 7.48 7.48 T:norx3241v1 7.99 8.01 8.01 T:norx6441v1 7.99 8.01 8.02 T:norx6444v1 6.51? 8.65? 8.65? T:lakekeyakv2 9.26 9.28 9.29 T:norx3261v3 9.27 9.28 9.37 T:norx3261v2 9.83 9.83 9.86 T:lakekeyakv1 10.82 10.83 10.85 T:norx6461v2 10.82 10.84 10.85 T:norx6461v3 11.02 11.02 11.02 T:norx3261v1 9.71? 11.47? 11.50? T:norx6461v1 13.36 13.38 13.39 T:ascon96v1 10.95? 13.39? 13.44? T:tiaoxinv1 13.42 13.43 13.43 T:tiaoxinv2 13.44 13.44 13.47 ascon128av12 13.48 13.51 13.52 T:ascon128av11 11.99? 13.85? 14.64? T:aes256gcmv1 17.17 17.18 17.29 T:riverkeyakv2 17.88 17.97 18.06 T:ketjemajorv2 18.01 18.01 18.01 T:aegis128l 19.98 20.00 20.02 T:ascon128v1 19.99 20.00 20.02 T:ascon128v11 20.24 20.25 20.26 ascon128v12 21.82 21.82 21.82 T:aegis128 25.22 25.24 25.27 T:ketjeminorv2 26.19 26.20 26.21 T:aegis256 31.84 31.89 31.92 T:deoxysii128v141 31.81 31.91 34.46 T:deoxysi128v141 35.90 36.05 36.19 T:deoxysi256v141 36.03 36.05 36.08 T:aes128n12clocv1 36.05 36.08 36.10 T:aes128n8clocv1 36.07 36.12 36.17 T:aes128n8t8clocv2 36.09 36.13 36.16 T:aes128n12t8clocv3 36.11 36.13 36.16 T:aes128n12t8clocv2 36.17 36.32 36.37 T:deoxysii256v141 42.26 42.63 42.69 T:aes128otrsv1 42.56 42.80 44.67 T:aes128otrsv2 42.87 42.90 42.95 T:aes128n8silcv1 41.90 42.90 42.99 T:aes128n8t8silcv2 42.80? 42.91? 57.78? T:aes128otrsv3 42.87 42.91 42.98 T:aes128n12silcv1 42.89 42.92 43.03 T:aes128n12t8silcv3 42.88? 42.96? 55.53? T:aes128n12t8silcv2 43.83 44.25 44.28 T:oceankeyakv1 46.34 46.35 46.42 T:aes128otrcv3 50.75 50.79 50.90 T:aes128otrpv3 53.53 53.66 53.84 T:seakeyakv1 54.82 55.23 55.34 T:aes128otrpv1 55.21 55.28 55.34 T:aes128otrpv2 56.59 56.68 56.80 T:aes256otrsv3 56.67 56.69 56.80 T:aes256otrsv1 56.64 56.79 57.73 T:aes256otrsv2 58.25 58.29 58.48 T:proest256otrv1 60.88 60.95 61.04 T:aes256otrcv3 69.26 69.35 69.39 T:aes256otrpv1 66.19? 69.35? 101.06? T:aes256otrpv2 70.99 71.00 71.02 T:aesjambuv1 70.12 71.12 71.26 T:aes256otrpv3 77.62 77.64 77.67 T:twine80n6t4clocv3 82.47 85.21 89.62 T:ketjesrv1 94.48 94.51 94.86 T:twine80n6t4clocv2 98.97 99.01 99.11 T:ketjesrv2 99.33 100.12 104.25 T:riverkeyakv1 108.44 108.72 109.43 T:aezv5 123.73 123.75 124.18 T:aezv4 135.46 135.50 137.05 T:ketjejrv1 162.23 162.25 162.30 T:present80n6t4silcv3 167.14 167.26 168.74 T:aezv1 169.82 170.13 170.77 T:proest128otrv1 242.31 242.37 242.75 T:aezv3 263.98 264.06 265.84 T:ketjejrv2 297.61 301.38 308.61 T:deoxyseq128128v13 302.86 302.94 303.87 T:deoxysneq128128v1 302.97 303.04 304.80 T:deoxyseq128128v1 302.16 303.06 303.93 T:deoxysneq128128v13 307.07 307.38 309.59 T:twine80n6clocv1 440.39 440.73 443.53 T:deoxyseq256128v1 442.23 442.36 443.65 T:deoxysneq256128v13 442.29 442.40 443.44 T:deoxysneq256128v1 441.69 443.05 443.32 T:deoxyseq256128v13 733.72 734.13 734.47 T:led80n6t4silcv3 1394.12 1419.31 1541.56 T:acorn128v3 1426.45 1427.25 1427.98 T:aes128gcmv1 1426.52 1428.15 1430.10 aes256gcmv1 1445.27 1446.21 1454.39 T:acorn128v2 1438.58? 1550.31? 1615.23? T:acorn128 6036.68 6041.64 6053.34 T:led80n6t4silcv2 6038.32 6044.39 6057.36 T:led80n6silcv1 7939.62 7944.93 7949.73 T:present80n6t4silcv2 7940.48 7945.53 7960.21 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 3.00 3.00 3.02 T:morus640128v1 3.02 3.02 3.08 T:morus640128v2 3.54 3.54 3.59 T:morus1280128v2 3.54 3.54 3.59 T:morus1280256v1 3.63 3.63 3.68 T:morus1280256v2 4.72 4.72 4.75 T:morus1280128v1 7.19 7.19 7.21 T:norx3241v2 7.20 7.20 7.23 T:norx3241v3 8.15 8.15 8.21 T:norx3241v1 8.99 9.00 9.04 T:norx6441v2 9.01 9.02 9.04 T:norx6441v3 9.33 9.33 9.35 T:norx6441v1 10.39 10.39 10.43 T:norx3261v2 10.40 10.40 10.45 T:norx3261v3 10.45 10.60 10.73 T:seakeyakv2 11.12 11.12 11.15 T:norx6444v2 11.14 11.16 11.19 T:norx6444v3 11.90 11.91 11.97 T:norx3261v1 11.91 11.93 11.95 T:lakekeyakv2 11.95 11.95 11.97 T:norx6444v1 13.07 13.08 13.11 T:norx6461v2 13.10 13.11 13.15 T:norx6461v3 13.23 13.24 13.27 T:norx6461v1 13.71 13.71 13.72 T:ascon96v1 13.73 13.73 13.75 T:ascon128av11 13.77 13.77 13.96 T:lakekeyakv1 14.09 14.09 14.14 ascon128av12 14.39 14.40 14.55 T:oceankeyakv2 19.20 19.21 19.26 T:tiaoxinv2 19.23 19.24 19.29 T:tiaoxinv1 20.35 20.35 20.42 T:riverkeyakv2 20.87 20.87 20.93 T:ascon128v11 20.87 20.87 20.94 T:ascon128v1 21.01 21.03 21.06 ascon128v12 21.34 21.35 21.42 T:aegis128l 24.14 24.14 24.23 T:aegis128 24.43 24.44 24.62 T:lunarkeyakv2 29.79 29.80 29.94 T:aegis256 29.95 29.95 29.99 T:ketjeminorv2 33.29 33.30 33.32 T:ketjemajorv2 36.54 36.90 38.34 T:deoxysi128v141 41.91 42.02 42.58 T:deoxysi256v141 48.58 48.60 48.72 T:aes128otrcv3 48.66 48.66 48.76 T:aes128otrsv3 48.68 48.68 48.77 T:aes128otrsv1 48.83 48.94 49.68 T:aes128otrsv2 52.96 52.97 53.30 T:deoxysii128v141 54.91 54.91 55.02 T:aes128otrpv1 54.91 54.93 55.75 T:aes128otrpv2 55.12 55.14 55.22 T:aes128otrpv3 55.25 55.25 55.34 T:aes128n8t8clocv2 55.27 55.28 55.37 T:aes128n12t8clocv2 55.32 55.33 55.77 T:aes128n12t8clocv3 55.36 55.37 55.49 T:aes128n12clocv1 55.40 55.40 55.48 T:aes128n8clocv1 62.05 62.08 62.19 T:deoxysii256v141 63.48 63.52 63.87 T:aes256otrsv3 63.64 63.64 63.76 T:aes256otrsv2 63.89 64.00 66.70 T:aes256otrcv3 63.65 64.11 65.17 T:aes256otrsv1 64.34 64.39 64.43 T:proest256otrv1 65.83 65.85 65.93 T:seakeyakv1 65.93 65.95 66.11 T:aes128n8t8silcv2 65.95 65.95 66.05 T:aes128n12t8silcv2 65.98 65.99 66.07 T:aes128n12t8silcv3 66.10 66.11 66.17 T:aes128n8silcv1 66.12 66.14 66.21 T:aes128n12silcv1 68.78 68.95 70.99 T:oceankeyakv1 69.86 69.89 69.98 T:aes256otrpv1 69.99 70.09 70.55 T:aes256gcmv1 69.85 70.80 70.98 T:aes256otrpv2 70.23 70.91 71.25 T:aes256otrpv3 72.36 72.37 72.40 T:aesjambuv1 79.61 79.62 79.98 T:twine80n6t4clocv3 88.50 88.53 88.58 T:twine80n6t4clocv2 99.40 99.91 103.24 T:ketjesrv1 111.21 113.05 115.51 T:riverkeyakv1 115.62? 115.76? 171.43? T:ketjesrv2 133.49 133.55 137.69 T:aezv4 144.04 144.70 144.82 T:aezv5 159.44 159.45 159.70 T:ketjejrv1 164.83 164.87 165.27 T:present80n6t4silcv3 177.39 177.40 177.76 T:proest128otrv1 290.49 290.54 290.97 T:ketjejrv2 304.69 304.92 305.67 T:deoxysneq128128v1 304.46 305.22 305.80 T:deoxysneq128128v13 331.61 333.03 339.35 T:aezv1 350.74 351.65 352.86 T:aezv3 444.75 444.95 446.03 T:deoxysneq256128v1 444.78 444.99 447.17 T:deoxysneq256128v13 460.79 460.94 461.45 T:deoxyseq128128v1 461.77 462.15 462.65 T:deoxyseq128128v13 465.80 466.29 467.43 T:twine80n6clocv1 665.79 666.51 667.14 T:deoxyseq256128v1 672.72 674.79 676.07 T:deoxyseq256128v13 740.28 740.53 740.82 T:led80n6t4silcv3 1463.86 1466.60 1533.34 T:aes128gcmv1 1625.04 1634.97 1732.84 T:acorn128v3 1672.80 1764.63 1765.76 T:acorn128v2 1671.56 1792.88 1807.57 T:acorn128 9105.61 9111.34 9118.71 T:led80n6t4silcv2 9109.85 9113.76 9122.37 T:led80n6silcv1 11976.36 11982.88 11988.65 T:present80n6t4silcv2 11986.29 11995.45 12021.02 T:present80n6silcv1 23454.70 23482.76 23546.73 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.92 2.92 2.95 T:morus640128v1 2.94 2.94 3.00 T:morus640128v2 3.57 3.57 3.67 T:morus1280128v2 3.64 3.64 3.76 T:morus1280256v1 3.68 3.68 3.79 T:morus1280256v2 4.68 4.68 4.73 T:morus1280128v1 7.18 7.18 7.27 T:norx3241v2 7.18 7.18 7.27 T:norx3241v3 8.24 8.25 8.35 T:norx3241v1 9.06 9.07 9.13 T:norx6441v2 9.08 9.09 9.14 T:norx6441v3 9.35 9.35 9.39 T:norx6441v1 10.38 10.38 10.46 T:norx3261v2 10.39 10.39 10.48 T:norx3261v3 10.53 10.53 10.73 T:seakeyakv2 11.20 11.23 11.26 T:norx6444v2 11.23 11.24 11.31 T:norx6444v3 11.53 11.53 11.62 T:lakekeyakv2 11.96 11.97 12.06 T:norx6444v1 11.99 12.00 12.13 T:norx3261v1 13.13 13.13 13.18 T:norx6461v2 13.17 13.19 13.26 T:norx6461v3 13.25 13.26 13.32 T:norx6461v1 13.58 13.58 13.82 T:lakekeyakv1 13.75 13.75 13.80 T:ascon96v1 13.87 13.87 13.91 T:ascon128av11 14.04 14.04 14.11 ascon128av12 14.47 14.48 14.66 T:oceankeyakv2 19.35 19.36 19.50 T:tiaoxinv2 19.37 19.38 19.49 T:tiaoxinv1 20.50 20.50 20.59 T:ascon128v1 20.50 20.60 21.38 T:ascon128v11 20.64 20.65 20.77 T:riverkeyakv2 20.89 20.90 21.33 ascon128v12 21.39 21.39 21.51 T:aegis128l 24.18 24.18 24.28 T:aegis128 24.51 24.51 24.81 T:lunarkeyakv2 29.76 29.76 29.86 T:aegis256 30.82 30.83 30.89 T:ketjeminorv2 32.01 32.04 32.12 T:ketjemajorv2 41.75 41.77 42.10 T:deoxysi128v141 48.36 48.39 49.50 T:deoxysi256v141 48.70 48.72 48.79 T:aes128otrcv3 49.07 49.17 51.45 T:aes128otrsv1 49.24 49.35 50.10 T:aes128otrsv2 49.72 49.73 49.87 T:aes128otrsv3 52.87 52.89 53.12 T:deoxysii128v141 55.09 55.10 55.77 T:aes128otrpv3 55.28 55.28 55.43 T:aes128otrpv1 55.27 55.33 55.36 T:aes128otrpv2 57.52 57.54 57.91 T:aes128n8t8clocv2 57.54 57.55 57.76 T:aes128n12t8clocv2 57.61 57.61 57.68 T:aes128n12t8clocv3 57.70 57.72 58.28 T:aes128n8clocv1 57.72 57.73 57.85 T:aes128n12clocv1 61.55 61.59 61.77 T:deoxysii256v141 63.66 63.73 64.62 T:proest256otrv1 64.03 64.04 64.42 T:aes256otrcv3 64.04 64.05 64.88 T:aes256otrsv2 64.06 64.18 65.01 T:aes256otrsv1 64.53 64.54 64.71 T:aes256otrsv3 66.16 66.18 66.27 T:aes128n8t8silcv2 66.22 66.22 66.35 T:aes128n12t8silcv3 66.27 66.29 66.36 T:aes128n12t8silcv2 66.41 66.43 67.00 T:aes128n12silcv1 66.40 66.51 67.42 T:aes128n8silcv1 66.42 66.55 67.31 T:seakeyakv1 68.97 69.15 71.12 T:oceankeyakv1 70.22 70.22 70.35 T:aes256otrpv2 70.25 70.28 70.38 T:aes256otrpv1 71.29 71.41 72.08 T:aes256otrpv3 72.32 72.32 72.40 T:aesjambuv1 75.64 75.95 77.32 T:aes256gcmv1 79.74 79.74 79.78 T:twine80n6t4clocv3 91.61 91.62 92.19 T:twine80n6t4clocv2 100.02 100.17 103.86 T:ketjesrv1 110.96 111.22 115.29 T:riverkeyakv1 112.52? 113.02? 171.19? T:ketjesrv2 132.22 132.32 132.51 T:aezv4 141.48 141.58 142.63 T:aezv5 157.46 157.46 157.73 T:ketjejrv1 164.85 164.88 165.39 T:present80n6t4silcv3 177.14 177.72 181.18 T:proest128otrv1 281.29 281.36 281.72 T:ketjejrv2 333.14 333.68 338.15 T:aezv1 348.03 348.99 349.80 T:aezv3 357.50 357.59 359.16 T:deoxysneq128128v1 358.17 358.24 363.05 T:deoxysneq128128v13 461.70 462.02 462.50 T:deoxyseq128128v13 466.87 467.35 467.65 T:twine80n6clocv1 530.01 530.11 534.56 T:deoxysneq256128v1 530.10 531.50 534.82 T:deoxysneq256128v13 563.37 564.21 568.40 T:deoxyseq128128v1 672.55 673.17 673.93 T:deoxyseq256128v13 740.47 740.63 740.81 T:led80n6t4silcv3 836.59 837.70 841.29 T:deoxyseq256128v1 1463.67 1464.66 1473.32 T:aes128gcmv1 1614.91 1620.13 1722.52 T:acorn128v3 1650.07 1650.91 1659.00 T:acorn128v2 1660.00 1767.05 1803.66 T:acorn128 9104.68 9107.86 9115.78 T:led80n6silcv1 9105.39 9113.95 9141.57 T:led80n6t4silcv2 11980.78 11986.66 11997.15 T:present80n6silcv1 11980.84 11987.05 12013.16 T:present80n6t4silcv2 23463.61 23473.57 23575.48 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.92 2.92 2.92 T:morus640128v1 2.94 2.94 2.94 T:morus640128v2 3.58 3.58 3.61 T:morus1280128v2 3.64 3.65 3.68 T:morus1280256v1 3.68 3.68 3.70 T:morus1280256v2 4.68 4.68 4.68 T:morus1280128v1 7.18 7.18 7.22 T:norx3241v2 7.18 7.18 7.22 T:norx3241v3 8.24 8.24 8.24 T:norx3241v1 9.15 9.16 9.22 T:norx6441v2 9.17 9.18 9.19 T:norx6441v3 9.44 9.44 9.47 T:norx6441v1 10.38 10.38 10.42 T:norx3261v2 10.39 10.39 10.40 T:norx3261v3 10.59 10.59 10.69 T:seakeyakv2 11.29 11.29 11.31 T:norx6444v2 11.33 11.34 11.34 T:norx6444v3 11.63 11.63 11.68 T:lakekeyakv2 11.99 12.00 12.00 T:norx3261v1 12.04 12.05 12.11 T:norx6444v1 13.22 13.22 13.24 T:norx6461v2 13.26 13.27 13.30 T:norx6461v3 13.34 13.35 13.39 T:norx6461v1 13.69 13.69 13.86 T:lakekeyakv1 13.74 13.74 13.77 T:ascon96v1 13.86 13.86 13.88 T:ascon128av11 14.04 14.04 14.05 ascon128av12 14.48 14.50 14.59 T:oceankeyakv2 19.32 19.33 19.36 T:tiaoxinv2 19.34 19.34 19.38 T:tiaoxinv1 20.50 20.51 20.53 T:ascon128v1 20.50 20.51 20.93 T:ascon128v11 20.71 20.72 20.81 T:riverkeyakv2 20.89? 20.90? 39.34? ascon128v12 21.39 21.39 21.43 T:aegis128l 24.17 24.17 24.22 T:aegis128 24.62 24.63 24.78 T:lunarkeyakv2 29.76 29.76 29.78 T:aegis256 30.92 30.93 30.99 T:ketjeminorv2 32.13 32.14 32.21 T:ketjemajorv2 41.97 42.00 42.27 T:deoxysi128v141 48.54 48.57 48.95 T:deoxysi256v141 48.70 48.70 48.73 T:aes128otrcv3 49.19 49.20 49.28 T:aes128otrsv1 49.31 49.39 50.17 T:aes128otrsv2 49.83 49.84 49.92 T:aes128otrsv3 53.06 53.07 53.27 T:deoxysii128v141 55.18 55.19 55.23 T:aes128otrpv3 55.36 55.41 55.42 T:aes128otrpv2 55.37 56.01 56.90 T:aes128otrpv1 57.49 57.49 57.57 T:aes128n8t8clocv2 57.51 57.51 57.58 T:aes128n12t8clocv2 57.57 57.58 57.66 T:aes128n12t8clocv3 57.67 57.67 57.74 T:aes128n8clocv1 57.69 57.70 57.77 T:aes128n12clocv1 61.65 61.73 61.94 T:deoxysii256v141 63.66 63.69 63.73 T:proest256otrv1 64.00 64.00 64.06 T:aes256otrcv3 64.13 64.14 64.25 T:aes256otrsv2 64.16 64.17 64.39 T:aes256otrsv1 64.64 64.64 64.79 T:aes256otrsv3 66.14 66.21 66.82 T:aes128n8t8silcv2 66.21 66.22 66.29 T:aes128n12t8silcv3 66.26 66.27 66.33 T:aes128n12t8silcv2 66.39 66.40 66.47 T:aes128n8silcv1 66.41 66.43 66.50 T:aes128n12silcv1 66.50 66.50 66.61 T:seakeyakv1 69.06 69.06 69.22 T:oceankeyakv1 70.33 70.37 70.67 T:aes256otrpv1 70.32 70.38 72.53 T:aes256otrpv2 71.36 72.15 74.28 T:aes256otrpv3 72.32 72.32 72.36 T:aesjambuv1 79.74 79.74 79.84 T:twine80n6t4clocv3 91.61 91.61 91.65 T:twine80n6t4clocv2 96.13 96.62 97.45 T:aes256gcmv1 100.11 100.20 103.95 T:ketjesrv1 111.05 112.67 115.46 T:riverkeyakv1 112.70? 114.02? 168.79? T:ketjesrv2 132.09 132.12 132.45 T:aezv4 141.36 141.44 142.48 T:aezv5 157.54 157.56 157.72 T:ketjejrv1 164.84 164.84 165.02 T:present80n6t4silcv3 177.12 178.02 181.44 T:proest128otrv1 281.38 281.53 281.89 T:ketjejrv2 332.94 333.47 334.69 T:aezv1 347.82 348.79 353.33 T:aezv3 357.49 357.93 358.57 T:deoxysneq128128v1 357.89 358.34 359.85 T:deoxysneq128128v13 461.80 462.19 462.67 T:deoxyseq128128v13 466.87 467.18 467.44 T:twine80n6clocv1 530.03 531.19 532.80 T:deoxysneq256128v1 530.13 531.52 532.56 T:deoxysneq256128v13 562.57 564.00 566.72 T:deoxyseq128128v1 673.28 673.58 674.39 T:deoxyseq256128v13 740.62 740.77 741.11 T:led80n6t4silcv3 836.84 837.46 839.41 T:deoxyseq256128v1 1435.02 1435.32 1436.71 T:aes128gcmv1 1614.70 1616.14 1722.54 T:acorn128v3 1650.17 1650.72 1659.06 T:acorn128v2 1682.29 1768.29 1803.05 T:acorn128 1883.16 1884.09 1890.17 aes256gcmv1 9104.19 9106.91 9112.77 T:led80n6t4silcv2 9107.93 9115.64 9119.51 T:led80n6silcv1 11981.69 11985.69 12012.49 T:present80n6silcv1 11977.80 11990.12 12010.16 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.37 9.37 9.98 T:morus640128v1 9.90 9.90 10.70 T:morus640128v2 17.51 17.55 18.34 T:morus1280256v1 17.62 17.62 19.19 T:norx3241v1 18.26 18.27 19.25 T:morus1280128v2 18.76 18.81 19.61 T:morus1280256v2 19.46 19.55 20.61 T:norx3241v2 19.56 19.66 20.62 T:norx3241v3 21.05 21.05 22.01 T:ascon128av11 21.15 21.15 21.57 T:ascon96v1 21.84 21.84 22.88 ascon128av12 23.98? 24.84? 37.09? T:morus1280128v1 25.57 25.59 27.25 T:norx3261v1 27.45 27.46 28.11 T:norx3261v2 27.53 27.62 28.76 T:norx3261v3 27.84 27.84 28.71 T:ascon128v1 27.84 27.84 28.81 T:ascon128v11 28.21 28.21 29.03 ascon128v12 31.13 31.13 31.50 T:norx6441v1 37.16 37.16 37.80 T:norx6441v2 37.38 37.38 38.17 T:norx6441v3 41.98 41.98 42.07 T:norx6461v1 50.22 50.22 51.06 T:norx6461v2 51.00 51.00 51.94 T:norx6461v3 51.47 51.58 52.25 T:riverkeyakv2 52.27 52.61 54.47 T:lakekeyakv1 55.18 55.30 56.20 T:lakekeyakv2 68.09 68.34 69.25 T:aes128n8t8clocv2 68.55 68.65 70.14 T:aes128n12t8clocv2 69.73 69.84 70.96 T:aes128n12t8clocv3 70.20 70.20 71.00 T:aegis128 72.04 72.04 73.57 T:aes128n8clocv1 72.14 72.14 74.06 T:aes128n12clocv1 87.00 87.09 87.59 T:norx6444v2 87.59 87.64 89.05 T:aes128n8t8silcv2 87.64 87.69 88.21 T:norx6444v3 88.60 88.66 90.19 T:aes128n12t8silcv3 88.09? 88.95? 116.47? T:aes128n12t8silcv2 92.06 92.10 92.12 T:norx6444v1 93.20 93.25 94.60 T:aes128n8silcv1 93.30 93.50 94.79 T:aes128n12silcv1 93.98 94.03 96.31 T:aes128otrsv1 94.48 94.48 95.70 T:aegis128l 94.30 94.84 95.77 T:aes128otrsv2 96.26 96.26 97.26 T:aesjambuv1 97.76 98.36 99.19 T:aes128otrpv2 98.29 98.38 100.34 T:aes128otrpv1 99.05 99.05 100.53 T:aes128otrpv3 99.78 99.91 99.98 T:ketjeminorv2 101.38 101.83 103.95 T:seakeyakv2 102.96 103.02 104.08 T:aegis256 101.90? 103.58? 131.73? T:aes128otrcv3 111.00 111.00 111.68 T:twine80n6t4clocv3 115.72 115.79 117.02 T:twine80n6t4clocv2 123.48 123.48 125.59 T:aes256otrsv1 123.05 123.71 125.14 T:aes256otrsv2 123.78 123.78 125.74 T:aes256otrsv3 127.20 127.32 128.90 T:aes256otrpv3 127.10? 127.95? 147.12? T:aes256otrpv1 126.84? 128.52? 177.89? T:aes256otrpv2 96.57? 130.38? 136.59? T:aes128otrsv3 133.02 134.16 135.07 T:aes256otrcv3 143.49 143.49 144.34 T:tiaoxinv2 144.02 144.02 144.84 T:tiaoxinv1 154.29 154.72 161.05 T:ketjesrv1 156.85 157.08 158.07 T:deoxysi128v141 165.23 165.23 170.52 T:oceankeyakv2 173.25 173.41 177.59 T:aezv4 185.16 185.16 187.05 T:proest256otrv1 192.02 192.14 194.73 T:aezv5 195.92 196.05 196.45 T:ketjesrv2 201.14 204.65 209.04 T:riverkeyakv1 209.82 209.82 210.52 T:present80n6t4silcv3 209.81 210.05 210.49 T:ketjejrv1 211.45 212.43 213.59 T:deoxysii128v141 249.64 249.81 250.88 T:deoxysi256v141 254.49 254.62 256.84 T:ketjemajorv2 342.43 342.79 343.46 T:deoxysneq128128v13 342.86 342.95 344.30 T:deoxysneq128128v1 346.76 347.51 351.73 T:proest128otrv1 362.99 363.11 367.34 T:aezv1 361.87 365.39 383.46 T:aes256gcmv1 382.09 382.41 383.74 T:ketjejrv2 397.13 397.23 402.04 T:lunarkeyakv2 487.90 487.95 491.16 T:seakeyakv1 499.95 499.95 500.97 T:deoxysneq256128v13 499.96 499.96 500.78 T:deoxysneq256128v1 505.33 505.45 508.38 T:aezv3 508.24 508.41 511.31 T:twine80n6clocv1 534.08 534.19 534.54 T:deoxyseq128128v1 571.91 571.97 572.69 T:deoxyseq128128v13 674.31 674.54 676.14 T:deoxysii256v141 751.05 755.30 774.02 T:oceankeyakv1 773.10 773.10 774.15 T:deoxyseq256128v1 832.60 833.42 834.20 T:deoxyseq256128v13 877.11 877.11 877.87 T:led80n6t4silcv3 1648.52 1649.23 1649.60 T:aes128gcmv1 5722.76 5732.42 6106.47 T:acorn128v3 5838.71 6194.62 6197.22 T:acorn128v2 5911.56 6258.36 6385.06 T:acorn128 10177.19 10182.57 10189.52 T:led80n6t4silcv2 10191.23 10196.04 10228.58 T:led80n6silcv1 13399.81 13405.13 13412.11 T:present80n6t4silcv2 13410.41 13414.19 13434.05 T:present80n6silcv1 33909.30 33917.84 33945.12 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.61 9.61 10.63 T:morus640128v1 10.02? 10.02? 11.38? T:morus640128v2 17.77 17.77 18.97 T:norx3241v1 18.21 18.25 18.80 T:morus1280256v1 18.72 18.72 20.03 T:morus1280128v2 19.14 19.14 20.45 T:morus1280256v2 19.24 19.24 19.48 T:norx3241v3 19.16 19.26 19.61 T:norx3241v2 21.29 21.29 22.03 T:ascon96v1 21.37 21.37 22.02 T:ascon128av11 22.09 22.09 23.29 ascon128av12 24.23? 25.20? 35.69? T:morus1280128v1 25.72 25.72 26.98 T:norx3261v1 27.09 27.20 27.66 T:norx3261v2 27.20 27.23 28.11 T:norx3261v3 27.62 27.62 28.48 T:ascon128v1 27.62 27.62 28.67 T:ascon128v11 28.28 28.28 28.90 ascon128v12 30.78 30.78 31.42 T:norx6441v1 37.46 37.46 38.16 T:norx6441v2 37.91 37.97 38.27 T:norx6441v3 41.73 41.73 42.58 T:norx6461v1 50.79 50.79 51.23 T:norx6461v2 51.82 51.82 52.12 T:norx6461v3 51.61 51.95 52.62 T:lakekeyakv1 52.73 52.85 54.15 T:riverkeyakv2 54.88 55.00 56.02 T:lakekeyakv2 70.02 70.17 70.53 T:aes128n8t8clocv2 70.35 70.35 70.76 T:aegis128 70.58 70.58 71.04 T:aes128n12t8clocv2 72.03 72.15 72.82 T:aes128n12t8clocv3 74.09 74.09 74.66 T:aes128n8clocv1 74.74 74.74 75.28 T:aes128n12clocv1 87.84 87.86 88.49 T:norx6444v2 88.54 88.58 89.30 T:norx6444v3 88.61 88.65 88.98 T:aes128n8t8silcv2 88.46? 89.16? 134.35? T:aes128n12t8silcv2 89.77 89.88 90.24 T:aes128n12t8silcv3 92.04 92.09 93.24 T:norx6444v1 93.39 93.49 94.93 T:aes128n8silcv1 93.53 93.70 94.87 T:aes128n12silcv1 94.55 94.55 94.98 T:aegis128l 94.80 94.80 95.71 T:aes128otrsv1 95.27 95.92 96.12 T:aes128otrsv2 96.56 96.56 97.91 T:aesjambuv1 98.34 98.39 99.66 T:aes128otrpv2 98.53 98.53 100.22 T:aes128otrpv1 100.65 100.78 100.92 T:ketjeminorv2 100.95 100.98 102.66 T:aes128otrpv3 101.84? 102.65? 119.42? T:aes128otrcv3 103.02 103.08 103.94 T:aegis256 102.53 103.12 105.07 T:seakeyakv2 111.14 111.14 111.38 T:twine80n6t4clocv3 118.31 118.34 118.68 T:twine80n6t4clocv2 124.30 124.46 126.00 T:aes256otrsv1 124.02 124.68 125.38 T:aes256otrsv2 125.31 125.31 127.01 T:aes256otrsv3 128.34 128.41 130.27 T:aes256otrpv3 127.37? 128.59? 180.54? T:aes256otrpv2 127.83 128.67 129.51 T:aes256otrpv1 97.26? 130.32? 137.15? T:aes128otrsv3 133.38 133.76 134.59 T:aes256otrcv3 143.59 143.64 144.72 T:tiaoxinv2 144.21 144.21 145.09 T:tiaoxinv1 154.97 155.21 161.02 T:ketjesrv1 166.91 167.04 169.12 T:oceankeyakv2 171.45 171.65 172.98 T:aezv4 178.84 179.45 181.17 T:deoxysi128v141 187.03 187.09 188.98 T:proest256otrv1 188.40 189.60 190.13 T:aezv5 193.14 193.27 193.60 T:ketjesrv2 201.39 203.41 209.23 T:riverkeyakv1 208.09 208.42 208.53 T:ketjejrv1 210.16 210.16 210.52 T:present80n6t4silcv3 211.99 211.99 213.20 T:deoxysii128v141 254.48 254.54 256.96 T:ketjemajorv2 275.38 276.02 277.62 T:deoxysi256v141 347.15 351.21 354.10 T:proest128otrv1 373.69 374.03 377.43 T:aezv1 374.03 374.09 375.52 T:ketjejrv2 395.32 395.49 398.18 T:deoxysneq128128v1 396.05 396.22 397.26 T:deoxysneq128128v13 395.84 398.75 400.34 T:lunarkeyakv2 488.55 488.80 491.37 T:seakeyakv1 490.24 492.60 506.99 T:aes256gcmv1 501.44 502.05 505.78 T:aezv3 509.59 509.75 512.16 T:twine80n6clocv1 571.88 571.95 573.61 T:deoxyseq128128v13 584.87 584.87 585.54 T:deoxysneq256128v1 585.10 585.10 585.65 T:deoxysneq256128v13 637.48 637.53 638.10 T:deoxyseq128128v1 674.05 674.27 675.78 T:deoxysii256v141 751.41 751.53 754.95 T:oceankeyakv1 832.59 833.62 834.23 T:deoxyseq256128v13 877.65 877.66 878.14 T:led80n6t4silcv3 943.32 943.82 950.60 T:deoxyseq256128v1 1648.88 1649.16 1650.94 T:aes128gcmv1 5706.95 5716.98 6090.93 T:acorn128v3 5805.83 5807.51 5818.68 T:acorn128v2 5849.82 6220.71 6347.98 T:acorn128 10174.90 10182.34 10189.05 T:led80n6t4silcv2 10189.47 10192.75 10221.61 T:led80n6silcv1 13398.16 13405.55 13420.70 T:present80n6t4silcv2 13408.11 13411.95 13487.20 T:present80n6silcv1 33912.95 33920.16 34212.39 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.61 9.61 9.61 T:morus640128v1 10.02 10.02 10.02 T:morus640128v2 17.76 17.77 17.77 T:norx3241v1 18.21 18.21 18.21 T:morus1280256v1 18.72 18.72 18.88 T:morus1280128v2 19.14 19.14 19.25 T:morus1280256v2 19.16 19.23 19.35 T:norx3241v2 19.24 19.26 19.40 T:norx3241v3 21.12 21.12 21.66 T:ascon96v1 21.29 21.29 21.82 T:ascon128av11 22.09 22.09 22.19 ascon128av12 24.23? 24.48? 36.01? T:morus1280128v1 25.72 25.72 25.72 T:norx3261v1 27.09 27.17 27.29 T:norx3261v2 27.18 27.29 27.41 T:norx3261v3 27.55 27.55 27.95 T:ascon128v1 27.55 27.55 27.95 T:ascon128v11 28.28 28.28 28.38 ascon128v12 31.24 31.24 31.77 T:norx6441v1 38.05 38.05 38.25 T:norx6441v2 38.54 38.59 38.70 T:norx6441v3 42.21 42.26 42.62 T:norx6461v1 51.25 51.25 51.46 T:norx6461v2 52.32 52.32 52.55 T:norx6461v3 52.29 52.48 52.63 T:lakekeyakv1 53.77 53.89 54.47 T:riverkeyakv2 55.38 55.38 55.42 T:lakekeyakv2 69.27 69.41 69.61 T:aes128n8t8clocv2 69.82 69.82 70.17 T:aes128n12t8clocv2 70.32 70.32 70.32 T:aegis128 71.18 71.30 71.41 T:aes128n12t8clocv3 73.43 73.43 73.61 T:aes128n8clocv1 74.03 74.03 74.26 T:aes128n12clocv1 88.36 88.41 88.49 T:aes128n8t8silcv2 88.42 88.45 88.67 T:norx6444v2 89.06 89.11 89.45 T:norx6444v3 89.60 89.73 89.88 T:aes128n12t8silcv3 92.43 92.50 92.66 T:norx6444v1 93.25 93.28 93.44 T:aes128n8silcv1 93.30 93.52 93.66 T:aes128n12silcv1 88.02? 93.64? 134.40? T:aes128n12t8silcv2 94.59 94.59 94.59 T:aegis128l 95.73 95.73 95.83 T:aes128otrsv1 95.66 95.88 96.32 T:aes128otrsv2 96.56 96.56 96.80 T:aesjambuv1 99.02 99.08 99.62 T:aes128otrpv2 99.13 99.13 99.58 T:aes128otrpv1 101.55 101.68 101.73 T:ketjeminorv2 101.70 101.70 102.02 T:aes128otrpv3 101.98? 102.32? 119.05? T:aes128otrcv3 103.02 103.08 103.12 T:aegis256 104.16 104.20 105.30 T:seakeyakv2 111.06 111.38 111.62 T:twine80n6t4clocv3 118.27 118.34 119.03 T:twine80n6t4clocv2 124.79 124.83 125.45 T:aes256otrsv2 125.17 125.34 125.45 T:aes256otrsv1 126.26 126.26 126.58 T:aes256otrsv3 128.09? 128.54? 183.12? T:aes256otrpv2 129.00 129.06 129.16 T:aes256otrpv3 128.27 129.10 129.11 T:aes256otrpv1 133.32 134.54 137.05 T:aes256otrcv3 97.71? 137.15? 143.84? T:aes128otrsv3 142.78 142.84 142.91 T:tiaoxinv2 143.50 143.55 143.73 T:tiaoxinv1 155.52 155.65 161.54 T:ketjesrv1 167.62 167.62 168.87 T:oceankeyakv2 170.89 171.02 171.45 T:aezv4 179.22 180.06 180.72 T:deoxysi128v141 181.33 181.39 181.98 T:proest256otrv1 187.62 187.70 188.94 T:aezv5 193.75 193.88 194.42 T:ketjesrv2 202.52 203.77 210.36 T:riverkeyakv1 208.87 209.19 209.23 T:ketjejrv1 210.12 210.12 210.52 T:present80n6t4silcv3 212.62 212.95 214.17 T:deoxysii128v141 255.53 255.55 256.87 T:ketjemajorv2 278.09 278.13 280.80 T:deoxysi256v141 347.12 348.23 353.98 T:proest128otrv1 372.48 372.75 374.20 T:aezv1 374.48 374.58 376.16 T:ketjejrv2 395.34 395.44 396.04 T:deoxysneq128128v1 396.62 396.80 397.37 T:deoxysneq128128v13 397.45 399.00 400.05 T:lunarkeyakv2 489.12 489.28 490.73 T:seakeyakv1 501.45 501.65 504.84 T:aezv3 510.16 510.43 520.55 T:twine80n6clocv1 572.45 572.53 572.74 T:deoxyseq128128v13 584.83 584.83 585.41 T:deoxysneq256128v1 585.62 585.78 586.84 T:deoxysneq256128v13 637.49 637.52 638.35 T:deoxyseq128128v1 674.58 674.84 676.20 T:deoxysii256v141 752.09 752.21 755.80 T:oceankeyakv1 833.12 834.05 834.76 T:deoxyseq256128v13 877.39 877.51 877.92 T:led80n6t4silcv3 943.30 943.80 944.48 T:deoxyseq256128v1 989.68 998.91 1038.46 T:aes256gcmv1 1620.28 1620.42 1620.99 T:aes128gcmv1 5706.78 5715.23 6090.82 T:acorn128v3 5805.81 5807.65 5819.41 T:acorn128v2 5846.77 6224.91 6347.66 T:acorn128 10174.28 10182.43 10187.13 T:led80n6t4silcv2 10186.73 10202.31 10229.46 T:led80n6silcv1 12371.10 12379.88 12400.11 aes256gcmv1 13398.46 13401.37 13417.64 T:present80n6t4silcv2 13405.02 13408.07 13412.64 T:present80n6silcv1