VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20250922

[Page version: 20251010 17:33:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.29? 0.34? 0.37? T:tiaoxinv2 0.31? 0.34? 0.37? T:tiaoxinv1 0.35? 0.39? 0.41? T:aegis128l 0.39 0.40 0.41 aegis128l 0.57 0.58 0.59 T:aegis128 0.61 0.62 0.63 aegis256 0.78? 0.83? 0.89? T:aeadaes128ocbtaglen128v1 0.87 0.88 0.88 T:aes128otrsv3 0.87 0.88 0.90 T:aes128otrcv3 0.92 0.93 0.95 T:morus1280128v1 0.93 0.93 0.95 T:morus1280128v2 0.93 0.93 0.95 T:aes128otrpv3 0.65? 0.95? 1.01? T:aeadaes192ocbtaglen128v1 0.94 0.95 0.96 T:aezv4 0.94 0.96 0.98 T:aezv3 0.95 0.96 0.97 T:aezv5 0.94 0.97 0.97 T:morus1280256v2 0.97 0.99 1.01 T:morus1280256v1 1.09 1.10 1.11 T:aes256otrcv3 1.09 1.10 1.12 T:aes256otrsv3 1.15 1.17 1.17 T:morus640128v1 1.15 1.17 1.17 T:morus640128v2 1.17 1.18 1.19 T:aes256otrpv3 1.18 1.21 1.22 T:aeadaes256ocbtaglen128v1 1.29 1.32 1.34 T:deoxysneq128128v1 1.29 1.32 1.42 T:deoxysi128v141 1.48 1.50 1.52 T:deoxysneq256128v1 1.51 1.54 1.56 T:deoxysi256v141 2.33 2.36 2.38 T:lunarkeyakv2 2.51 2.53 2.54 T:colm0v1 2.56 2.59 2.61 T:aes128gcmv1 2.70 2.75 2.77 T:deoxysii128v141 2.75 2.77 2.78 T:norx6441v3 2.81 2.82 2.84 T:norx6441v2 2.79 2.83 2.84 aes256gcmv1 2.93 3.00 3.06 T:deoxyseq128128v1 3.04 3.06 3.07 T:seakeyakv2 3.12 3.18 3.22 T:deoxysii256v141 3.09 3.22 3.36 T:deoxyseq256128v1 3.19 3.22 3.25 T:oceankeyakv2 3.28 3.31 3.32 T:norx6441v1 3.84 3.87 3.88 T:norx3241v3 3.88 3.89 3.90 T:norx3241v2 4.21 4.24 4.26 T:norx6461v3 4.24 4.25 4.28 T:norx6461v2 4.29 4.32 4.34 T:norx6444v2 4.30 4.33 4.35 T:norx6444v3 4.63 4.64 4.66 T:norx3241v1 4.97 5.00 5.03 T:norx6444v1 4.96 5.01 5.04 T:norx6461v1 5.11 5.17 5.22 T:lakekeyakv2 5.15 5.19 5.27 T:lakekeyakv1 5.20 5.21 5.22 T:aes128n8t8clocv2 5.20 5.21 5.22 T:aes128n12t8clocv2 5.21 5.21 5.22 T:aes128n12t8silcv2 5.20 5.21 5.21 T:aes128n12t8clocv3 5.21 5.21 5.21 T:aes128n12t8silcv3 5.21 5.21 5.22 T:aes128n8t8silcv2 5.76 5.79 5.80 T:norx3261v3 5.82 5.84 5.86 T:norx3261v2 7.59 7.60 7.62 T:norx3261v1 7.99 8.01 8.03 T:acorn128v3 8.30 8.40 8.42 T:acorn128v2 8.44 8.48 8.51 T:ascon128av11 8.57 8.62 8.64 T:ascon96v1 8.77 8.82 8.84 ascon128av12 9.59 9.60 9.62 T:ketjemajorv2 10.36 10.37 10.37 T:aesjambuv1 12.22 12.33 12.35 T:ketjeminorv2 12.64 12.73 12.87 T:ascon128v1 12.70 12.74 12.85 T:ascon128v11 12.84 12.86 12.91 ascon128v12 12.85 12.87 12.88 T:riverkeyakv2 14.65 14.66 14.67 T:twine80n6t4clocv3 15.35 15.37 15.38 T:twine80n6t4clocv2 16.10 16.12 16.13 T:aes128otrsv2 16.10 16.13 16.19 T:aes128otrpv1 16.09 16.13 16.16 T:aes128otrsv1 16.10 16.13 16.15 T:aes128otrpv2 21.06 21.08 21.09 T:aes256otrpv2 21.05 21.08 21.11 T:aes256otrpv1 21.78 21.84 21.88 T:aes256otrsv2 21.83 21.86 21.91 T:aes256otrsv1 25.93 26.04 26.19 T:proest256otrv1 26.71 26.75 26.81 T:aes128n8clocv1 26.75 26.77 26.82 T:aes128n12clocv1 27.46 27.51 27.54 T:aeadaes128ocbtaglen64v1 27.49 27.54 27.58 T:aeadaes128ocbtaglen96v1 31.97 32.00 32.04 T:ketjesrv1 32.48 32.53 32.61 T:aeadaes192ocbtaglen96v1 32.50 32.54 32.58 T:aeadaes192ocbtaglen64v1 33.47 33.51 33.54 T:ketjesrv2 37.30 37.38 37.42 T:aeadaes256ocbtaglen64v1 37.34 37.44 37.55 T:aeadaes256ocbtaglen96v1 60.40 60.44 60.49 T:colm127v1 60.46 60.62 60.75 T:proest128otrv1 66.12 66.23 66.46 T:ketjejrv1 71.95 72.72 72.82 T:present80n6t4silcv3 88.35 88.76 88.88 T:deoxysneq128128v13 108.82 108.99 109.23 T:ketjejrv2 119.32 119.37 119.41 T:led80n6t4silcv3 135.33 135.52 135.62 T:deoxysneq256128v13 180.06 180.99 182.34 T:deoxyseq128128v13 191.73 191.90 192.44 T:aezv1 271.59 272.40 273.12 T:deoxyseq256128v13 420.63 420.88 421.10 T:acorn128 5462.74 5463.27 5463.70 T:present80n6t4silcv2 5464.35 5464.80 5465.15 T:present80n6silcv1 8347.78 8363.14 8370.98 T:led80n6silcv1 8354.05 8365.59 8371.84 T:led80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.39 0.40 0.41 aegis128l 0.35? 0.40? 0.42? T:aegis128l 0.41? 0.45? 0.48? T:tiaoxinv1 0.44? 0.48? 0.49? T:tiaoxinv2 0.57 0.59 0.60 T:aegis128 0.60 0.63 0.63 aegis256 0.77? 0.82? 0.87? T:aeadaes128ocbtaglen128v1 0.86 0.86 0.87 T:aes128otrsv3 0.87 0.88 0.88 T:aes128otrcv3 0.92 0.93 0.95 T:morus1280128v1 0.93 0.94 0.94 T:morus1280128v2 0.93 0.94 0.96 T:aes128otrpv3 0.94 0.95 0.96 T:aezv4 0.90 0.95 0.97 T:aezv3 0.85? 0.96? 1.01? T:aeadaes192ocbtaglen128v1 0.94 0.96 0.97 T:morus1280256v1 0.95 0.96 0.98 T:aezv5 0.95 0.97 0.97 T:morus1280256v2 1.08 1.09 1.11 T:aes256otrsv3 1.09 1.09 1.10 T:aes256otrcv3 1.15 1.16 1.17 T:morus640128v1 1.15 1.17 1.18 T:morus640128v2 1.17 1.18 1.19 T:aes256otrpv3 1.21 1.23 1.27 T:aeadaes256ocbtaglen128v1 1.49 1.53 1.57 T:deoxysi128v141 1.54 1.58 1.60 T:deoxysneq128128v1 1.78 1.79 1.81 T:deoxysneq256128v1 1.77 1.80 1.81 T:deoxysi256v141 2.42 2.45 2.49 T:lunarkeyakv2 2.45 2.48 2.51 T:colm0v1 2.64 2.69 2.71 T:deoxysii128v141 2.76 2.78 2.81 T:norx6441v2 2.78 2.81 2.81 T:norx6441v3 3.05 3.08 3.10 T:aes128gcmv1 3.14 3.16 3.22 T:seakeyakv2 3.19 3.23 3.26 T:deoxysii256v141 3.27 3.31 3.36 T:oceankeyakv2 3.35 3.37 3.39 T:norx6441v1 3.24 3.41 3.47 T:deoxyseq128128v1 3.56 3.64 3.75 T:deoxyseq256128v1 3.75 3.78 3.79 aes256gcmv1 3.77 3.79 3.82 T:norx3241v3 3.82 3.84 3.85 T:norx3241v2 4.19 4.19 4.23 T:norx6461v2 4.25 4.27 4.28 T:norx6461v3 4.27 4.31 4.35 T:norx6444v3 4.27 4.32 4.34 T:norx6444v2 4.55 4.57 4.59 T:norx3241v1 4.94 4.97 5.00 T:norx6444v1 4.94 4.98 5.01 T:lakekeyakv1 5.10 5.13 5.15 T:aes128n12t8silcv2 5.12 5.14 5.17 T:norx6461v1 5.12 5.14 5.15 T:aes128n8t8clocv2 5.12 5.14 5.15 T:aes128n8t8silcv2 5.12 5.14 5.15 T:aes128n12t8clocv2 5.12 5.14 5.15 T:aes128n12t8silcv3 5.12 5.15 5.15 T:aes128n12t8clocv3 5.14 5.18 5.20 T:lakekeyakv2 5.69 5.72 5.75 T:norx3261v3 5.75 5.79 5.82 T:norx3261v2 7.40 7.41 7.43 T:norx3261v1 7.97 8.01 8.02 T:acorn128v3 8.24 8.26 8.28 T:acorn128v2 8.59 8.64 8.66 T:ascon128av11 8.64 8.65 8.69 T:ketjemajorv2 8.68 8.72 8.73 ascon128av12 8.72 8.75 8.77 T:ascon96v1 10.71 10.71 10.71 T:aesjambuv1 12.03 12.05 12.08 T:ketjeminorv2 12.80 12.83 12.84 ascon128v12 12.66 12.86 12.94 T:ascon128v1 12.69 12.92 12.93 T:ascon128v11 12.97 13.01 13.03 T:riverkeyakv2 14.54 14.55 14.60 T:twine80n6t4clocv3 15.37 15.39 15.42 T:twine80n6t4clocv2 16.46 16.49 16.56 T:aes128otrsv1 16.48 16.52 16.57 T:aes128otrpv1 16.51 16.57 16.64 T:aes128otrpv2 16.55 16.62 16.82 T:aes128otrsv2 21.44 21.49 21.52 T:aes256otrpv1 21.48 21.56 21.63 T:aes256otrpv2 22.20 22.23 22.26 T:aes256otrsv1 22.21 22.23 22.29 T:aes256otrsv2 25.80 25.85 25.90 T:aes128n12clocv1 25.85 25.93 26.16 T:proest256otrv1 26.32 26.36 26.44 T:aes128n8clocv1 32.93 33.13 33.18 T:ketjesrv1 33.57 33.61 33.72 T:ketjesrv2 36.71 36.79 36.83 T:aeadaes128ocbtaglen64v1 36.78 36.86 36.90 T:aeadaes128ocbtaglen96v1 43.76 43.82 43.89 T:aeadaes192ocbtaglen64v1 43.75 43.83 43.92 T:aeadaes192ocbtaglen96v1 50.80 50.87 50.95 T:aeadaes256ocbtaglen64v1 50.82 50.91 51.07 T:aeadaes256ocbtaglen96v1 59.94 59.98 60.11 T:proest128otrv1 67.24 67.37 67.44 T:ketjejrv1 72.12 73.02 73.12 T:present80n6t4silcv3 78.89 78.97 79.02 T:colm127v1 108.54 108.70 108.95 T:ketjejrv2 118.91 118.97 119.04 T:led80n6t4silcv3 121.97 122.29 122.82 T:deoxysneq128128v13 173.60 174.00 174.40 T:deoxysneq256128v13 179.77 180.91 181.64 T:deoxyseq128128v13 191.34 191.95 192.49 T:aezv1 271.60 272.02 273.54 T:deoxyseq256128v13 444.58 445.55 445.90 T:acorn128 5463.85 5464.54 5465.02 T:present80n6silcv1 5463.89 5464.57 5465.26 T:present80n6t4silcv2 8359.70 8364.35 8386.90 T:led80n6silcv1 8365.35 8375.78 8384.01 T:led80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.36 0.37 0.37 T:aezv4 0.36 0.37 0.38 T:aezv3 0.38 0.39 0.41 T:aezv5 0.38 0.39 0.40 T:aegis128l 0.46 0.46 0.47 aegis128l 0.44 0.46 0.47 T:tiaoxinv1 0.43? 0.47? 0.49? T:tiaoxinv2 0.59 0.60 0.60 T:aegis128 0.65 0.69 0.71 aegis256 0.78 0.80 0.83 T:aeadaes128ocbtaglen128v1 0.86 0.86 0.87 T:aes128otrsv3 0.86 0.87 0.88 T:aes128otrcv3 0.92 0.93 0.93 T:aes128otrpv3 0.92 0.93 0.95 T:morus1280128v2 0.93 0.94 0.95 T:morus1280128v1 0.91? 0.95? 1.25? T:aeadaes192ocbtaglen128v1 0.95 0.96 0.96 T:morus1280256v1 0.95 0.96 0.97 T:morus1280256v2 1.08 1.09 1.10 T:aes256otrsv3 1.09 1.10 1.10 T:aes256otrcv3 1.15 1.15 1.16 T:morus640128v1 1.16 1.17 1.17 T:morus640128v2 1.16 1.17 1.18 T:aes256otrpv3 1.20 1.22 1.25 T:aeadaes256ocbtaglen128v1 1.50 1.53 1.56 T:deoxysi128v141 1.58 1.60 1.64 T:deoxysneq128128v1 1.77 1.79 1.80 T:deoxysneq256128v1 1.79 1.81 1.82 T:deoxysi256v141 2.45 2.47 2.50 T:colm0v1 2.50 2.53 2.65 T:lunarkeyakv2 2.64 2.68 2.71 T:deoxysii128v141 2.75 2.76 2.78 T:norx6441v2 2.76 2.80 2.82 T:norx6441v3 3.07 3.08 3.09 T:aes128gcmv1 3.17 3.19 3.21 T:deoxysii256v141 3.20 3.23 3.27 T:seakeyakv2 3.33 3.35 3.37 T:norx6441v1 3.33 3.36 3.40 T:oceankeyakv2 3.28 3.38 3.44 T:deoxyseq128128v1 3.60 3.64 3.77 T:deoxyseq256128v1 3.76 3.77 3.78 aes256gcmv1 3.80 3.80 3.80 T:norx3241v3 3.80 3.84 3.86 T:norx3241v2 4.18 4.22 4.25 T:norx6461v2 4.24 4.26 4.28 T:norx6461v3 4.33 4.36 4.38 T:norx6444v2 4.36 4.39 4.41 T:norx6444v3 4.54 4.56 4.57 T:norx3241v1 4.98 5.00 5.03 T:lakekeyakv1 4.99 5.02 5.06 T:norx6444v1 5.08 5.11 5.13 T:norx6461v1 5.10 5.12 5.15 T:aes128n12t8silcv2 5.10 5.14 5.15 T:aes128n12t8silcv3 5.11 5.14 5.15 T:aes128n12t8clocv3 5.12 5.14 5.15 T:aes128n8t8silcv2 5.10 5.15 5.15 T:aes128n8t8clocv2 5.10 5.15 5.15 T:aes128n12t8clocv2 5.18 5.22 5.27 T:lakekeyakv2 5.70 5.73 5.74 T:norx3261v3 5.76 5.78 5.80 T:norx3261v2 7.40 7.41 7.42 T:norx3261v1 7.99 8.01 8.02 T:acorn128v3 8.24 8.26 8.28 T:acorn128v2 8.59 8.63 8.65 T:ascon128av11 8.69 8.69 8.71 ascon128av12 8.68 8.71 8.75 T:ketjemajorv2 8.70 8.73 8.76 T:ascon96v1 10.71 10.71 10.72 T:aesjambuv1 12.06 12.10 12.18 T:ketjeminorv2 12.81 12.82 12.84 ascon128v12 12.68 12.91 12.96 T:ascon128v1 12.71 12.92 12.95 T:ascon128v11 13.04 13.06 13.11 T:riverkeyakv2 14.54 14.57 14.60 T:twine80n6t4clocv3 15.36 15.40 15.42 T:twine80n6t4clocv2 16.52 16.56 16.60 T:aes128otrsv1 16.53 16.60 16.63 T:aes128otrpv1 16.59 16.61 16.71 T:aes128otrpv2 16.58 16.69 16.91 T:aes128otrsv2 21.50 21.54 21.58 T:aes256otrpv1 21.57 21.61 21.66 T:aes256otrpv2 22.26 22.29 22.34 T:aes256otrsv1 22.24 22.31 22.35 T:aes256otrsv2 25.77 25.86 25.89 T:aes128n12clocv1 25.86 25.95 26.15 T:proest256otrv1 26.36 26.40 26.49 T:aes128n8clocv1 32.98 33.19 33.26 T:ketjesrv1 33.51 33.69 33.76 T:ketjesrv2 36.79 36.84 36.89 T:aeadaes128ocbtaglen64v1 36.78 36.85 36.92 T:aeadaes128ocbtaglen96v1 43.79 43.87 43.95 T:aeadaes192ocbtaglen96v1 43.81 43.87 43.92 T:aeadaes192ocbtaglen64v1 50.81 50.88 50.93 T:aeadaes256ocbtaglen64v1 50.87 50.97 51.13 T:aeadaes256ocbtaglen96v1 59.95 60.01 60.09 T:proest128otrv1 67.25 67.38 67.55 T:ketjejrv1 72.18 73.03 73.09 T:present80n6t4silcv3 77.69 77.73 77.83 T:colm127v1 108.59 108.81 108.98 T:ketjejrv2 118.86 118.92 119.02 T:led80n6t4silcv3 122.04 122.55 122.74 T:deoxysneq128128v13 173.31 173.88 174.24 T:deoxysneq256128v13 178.79 181.52 182.01 T:deoxyseq128128v13 191.21 191.76 192.13 T:aezv1 271.72 272.14 273.60 T:deoxyseq256128v13 444.48 445.73 446.15 T:acorn128 5463.07 5464.16 5464.87 T:present80n6t4silcv2 5463.43 5464.97 5465.26 T:present80n6silcv1 8359.95 8364.24 8384.74 T:led80n6silcv1 8369.68 8373.24 8378.70 T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.25? 0.28? 0.32? T:tiaoxinv2 0.26? 0.29? 0.33? T:tiaoxinv1 0.30? 0.34? 0.36? T:aegis128l 0.34 0.35 0.37 aegis128l 0.54 0.55 0.56 T:aegis128 0.56 0.58 0.58 aegis256 0.66 0.68 0.70 T:aezv4 0.67 0.69 0.71 T:aezv5 0.67 0.70 0.71 T:aezv3 0.73? 0.80? 0.86? T:aeadaes128ocbtaglen128v1 0.86 0.87 0.88 T:aes128otrcv3 0.86 0.88 0.90 T:morus1280128v1 0.86 0.88 0.90 T:morus1280128v2 0.82? 0.93? 1.02? T:aeadaes192ocbtaglen128v1 0.91 0.93 0.94 T:morus1280256v2 0.94 0.96 0.97 T:morus1280256v1 0.97 0.98 0.98 T:aes128otrpv3 1.09 1.10 1.10 T:aes256otrcv3 1.11 1.12 1.14 T:morus640128v2 1.13 1.14 1.14 T:morus640128v1 1.24 1.26 1.26 T:aes256otrpv3 1.34 1.36 1.41 T:deoxysi128v141 1.34 1.37 1.38 T:deoxysneq128128v1 1.54 1.57 1.59 T:deoxysneq256128v1 1.57 1.59 1.61 T:deoxysi256v141 1.60 1.61 1.62 T:aeadaes256ocbtaglen128v1 1.79 1.80 1.81 T:colm0v1 2.17 2.19 2.21 T:aes128gcmv1 2.20 2.23 2.26 T:deoxysii128v141 2.24 2.26 2.27 T:deoxyseq128128v1 2.28 2.31 2.33 aes256gcmv1 2.47 2.51 2.53 T:deoxysii256v141 2.50 2.54 2.57 T:deoxyseq256128v1 2.59 2.59 2.61 T:seakeyakv2 2.69 2.70 2.72 T:oceankeyakv2 2.82 2.83 2.85 T:norx6441v3 2.83 2.84 2.85 T:norx6441v2 3.00 3.00 3.00 T:aes128otrsv3 3.25 3.28 3.37 T:lunarkeyakv2 3.35 3.37 3.39 T:norx6441v1 3.84 3.86 3.88 T:norx3241v3 3.84 3.87 3.88 T:norx3241v2 4.10 4.11 4.12 T:aes256otrsv3 4.23 4.25 4.27 T:norx6461v2 4.23 4.25 4.28 T:norx6461v3 4.25 4.27 4.28 T:norx6444v2 4.26 4.27 4.29 T:norx6444v3 4.55 4.57 4.58 T:lakekeyakv2 4.65 4.66 4.68 T:norx3241v1 4.84 4.86 4.90 T:lakekeyakv1 4.92 4.93 4.95 T:norx6444v1 5.03 5.05 5.06 T:norx6461v1 5.16 5.17 5.17 T:aes128n12t8silcv2 5.17 5.17 5.17 T:aes128n12t8silcv3 5.16 5.17 5.17 T:aes128n8t8silcv2 5.16 5.17 5.18 T:aes128n8t8clocv2 5.17 5.17 5.17 T:aes128n12t8clocv3 5.16 5.17 5.18 T:aes128n12t8clocv2 5.79 5.80 5.82 T:norx3261v2 5.80 5.82 5.83 T:norx3261v3 7.59 7.61 7.63 T:norx3261v1 7.87 7.89 7.90 T:acorn128v3 8.07 8.08 8.10 T:acorn128v2 8.11 8.13 8.14 T:ketjemajorv2 8.59 8.62 8.64 T:ascon96v1 8.70 8.73 8.74 ascon128av12 8.68 8.73 8.75 T:ascon128av11 9.31 9.34 9.35 T:riverkeyakv2 10.40 10.40 10.41 T:aesjambuv1 10.97 10.99 11.00 T:ketjeminorv2 12.70 12.72 12.77 T:ascon128v1 12.71 12.73 12.79 T:ascon128v11 12.71 12.74 12.77 ascon128v12 14.41 14.43 14.46 T:twine80n6t4clocv3 15.13 15.15 15.26 T:twine80n6t4clocv2 15.51 15.52 15.54 T:aes128otrsv1 15.50 15.52 15.54 T:aes128otrsv2 15.58 15.61 15.63 T:aes128otrpv2 15.60 15.61 15.63 T:aes128otrpv1 20.14 20.16 20.20 T:aes256otrsv2 20.13 20.18 20.22 T:aes256otrsv1 20.31 20.34 20.36 T:aes128n8clocv1 20.32 20.34 20.37 T:aes128n12clocv1 20.52 20.54 20.57 T:aes256otrpv1 20.52 20.55 20.57 T:aes256otrpv2 26.09 26.16 26.30 T:proest256otrv1 27.04 27.08 27.12 T:aeadaes128ocbtaglen64v1 27.09 27.15 27.18 T:aeadaes128ocbtaglen96v1 28.93 29.01 29.05 T:ketjesrv1 30.81 30.82 30.98 T:ketjesrv2 32.05 32.10 32.18 T:aeadaes192ocbtaglen64v1 32.07 32.10 32.13 T:aeadaes192ocbtaglen96v1 36.96 36.99 37.01 T:aeadaes256ocbtaglen64v1 36.95 37.00 37.06 T:aeadaes256ocbtaglen96v1 44.49 44.50 44.53 T:colm127v1 60.32 60.40 60.51 T:proest128otrv1 62.20 62.33 62.44 T:ketjejrv1 71.45 72.33 77.78 T:present80n6t4silcv3 88.64 88.91 89.03 T:deoxysneq128128v13 106.30 106.47 106.68 T:ketjejrv2 118.58 118.66 118.72 T:led80n6t4silcv3 125.80 126.06 127.25 T:aezv1 134.02 134.77 135.76 T:deoxyseq128128v13 134.88 135.01 135.34 T:deoxysneq256128v13 203.03 203.28 203.87 T:deoxyseq256128v13 420.96 421.36 421.65 T:acorn128 4097.25 4097.55 4097.81 T:present80n6t4silcv2 4097.95 4098.45 4098.75 T:present80n6silcv1 6266.12 6270.61 6277.02 T:led80n6silcv1 6268.22 6272.29 6275.05 T:led80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.30? 0.34? 0.37? T:aegis128l 0.31? 0.35? 0.37? T:tiaoxinv1 0.34? 0.36? 0.38? aegis128l 0.33? 0.36? 0.41? T:tiaoxinv2 0.55 0.55 0.56 T:aegis128 0.56 0.58 0.59 aegis256 0.65 0.68 0.69 T:aezv4 0.67 0.68 0.70 T:aezv3 0.68 0.69 0.70 T:aezv5 0.74? 0.80? 0.85? T:aeadaes128ocbtaglen128v1 0.86 0.87 0.88 T:aes128otrcv3 0.87 0.88 0.89 T:morus1280128v1 0.87 0.89 0.90 T:morus1280128v2 0.89 0.91 0.92 T:morus1280256v1 0.90 0.91 0.92 T:morus1280256v2 0.77? 0.94? 1.09? T:aeadaes192ocbtaglen128v1 0.97 0.98 0.98 T:aes128otrpv3 1.08 1.10 1.11 T:aes256otrcv3 1.12 1.13 1.14 T:morus640128v2 1.13 1.14 1.14 T:morus640128v1 1.26 1.26 1.27 T:aes256otrpv3 1.40 1.44 1.51 T:deoxysi128v141 1.44 1.47 1.52 T:deoxysneq128128v1 1.60 1.61 1.64 T:aeadaes256ocbtaglen128v1 1.65 1.69 1.72 T:deoxysneq256128v1 1.70 1.73 1.76 T:deoxysi256v141 1.77 1.79 1.81 T:colm0v1 2.17 2.20 2.21 T:deoxysii128v141 2.39 2.40 2.45 T:deoxyseq128128v1 2.41 2.43 2.47 T:aes128gcmv1 2.49 2.51 2.52 T:deoxysii256v141 2.64 2.66 2.68 T:seakeyakv2 2.73 2.76 2.78 T:oceankeyakv2 2.72 2.76 2.82 T:deoxyseq256128v1 2.76 2.79 2.80 aes256gcmv1 2.79 2.80 2.82 T:norx6441v2 2.79 2.81 2.83 T:norx6441v3 2.99 3.00 3.00 T:aes128otrsv3 3.30 3.33 3.35 T:lunarkeyakv2 3.36 3.38 3.40 T:norx6441v1 3.82 3.84 3.86 T:norx3241v3 3.83 3.84 3.85 T:norx3241v2 4.10 4.11 4.12 T:aes256otrsv3 4.20 4.21 4.23 T:norx6461v2 4.20 4.22 4.25 T:norx6461v3 4.23 4.26 4.27 T:norx6444v3 4.23 4.27 4.28 T:norx6444v2 4.54 4.56 4.59 T:lakekeyakv2 4.62 4.62 4.63 T:norx3241v1 4.72 4.76 4.82 T:lakekeyakv1 4.91 4.93 4.96 T:norx6444v1 5.08 5.10 5.12 T:norx6461v1 5.11 5.12 5.14 T:aes128n12t8silcv2 5.12 5.13 5.15 T:aes128n12t8clocv2 5.13 5.13 5.14 T:aes128n8t8silcv2 5.12 5.13 5.14 T:aes128n8t8clocv2 5.12 5.13 5.14 T:aes128n12t8silcv3 5.12 5.14 5.15 T:aes128n12t8clocv3 5.74 5.75 5.78 T:norx3261v3 5.76 5.79 5.80 T:norx3261v2 7.51 7.52 7.52 T:norx3261v1 7.61 7.67 7.69 T:ketjemajorv2 8.11 8.13 8.16 T:acorn128v2 7.99 8.13 8.14 T:acorn128v3 8.60 8.63 8.67 T:ascon128av11 8.63 8.68 8.71 ascon128av12 8.66 8.69 8.71 T:ascon96v1 9.37 9.39 9.40 T:riverkeyakv2 10.57 10.58 10.58 T:aesjambuv1 10.81 10.84 10.87 T:ketjeminorv2 12.71 12.73 12.74 ascon128v12 12.71 12.78 12.79 T:ascon128v11 12.75 12.80 12.81 T:ascon128v1 14.38 14.42 14.44 T:twine80n6t4clocv3 15.12 15.26 15.28 T:twine80n6t4clocv2 15.68 15.70 15.75 T:aes128otrsv1 15.72 15.75 15.90 T:aes128otrsv2 15.78 15.79 15.83 T:aes128otrpv1 15.79 15.83 15.85 T:aes128otrpv2 19.85 19.89 19.93 T:aes128n12clocv1 20.11 20.15 20.19 T:aes128n8clocv1 20.32 20.35 20.37 T:aes256otrsv2 20.32 20.36 20.40 T:aes256otrsv1 20.71 20.74 20.77 T:aes256otrpv1 20.72 20.76 20.82 T:aes256otrpv2 26.08 26.14 26.27 T:proest256otrv1 29.52 29.61 29.65 T:ketjesrv1 30.91 30.98 31.05 T:ketjesrv2 31.69 31.76 31.81 T:aeadaes128ocbtaglen64v1 31.75 31.78 31.85 T:aeadaes128ocbtaglen96v1 37.74 37.77 37.83 T:aeadaes192ocbtaglen96v1 37.75 37.78 37.86 T:aeadaes192ocbtaglen64v1 43.71 43.75 43.81 T:aeadaes256ocbtaglen64v1 43.70 43.79 43.86 T:aeadaes256ocbtaglen96v1 53.72 53.77 53.85 T:colm127v1 60.17 60.22 60.30 T:proest128otrv1 62.70 62.78 62.96 T:ketjejrv1 71.60? 72.43? 80.57? T:present80n6t4silcv3 105.70 106.07 107.70 T:deoxysneq128128v13 106.17 106.35 106.49 T:ketjejrv2 118.34 118.40 118.49 T:led80n6t4silcv3 125.98 126.35 127.49 T:aezv1 133.93 135.68 135.93 T:deoxyseq128128v13 154.06 154.18 154.48 T:deoxysneq256128v13 202.72 203.32 204.19 T:deoxyseq256128v13 434.06 434.73 435.17 T:acorn128 4097.47 4098.05 4098.39 T:present80n6t4silcv2 4097.94 4098.56 4099.04 T:present80n6silcv1 6273.87 6276.13 6280.16 T:led80n6t4silcv2 6273.51 6278.44 6279.73 T:led80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.32 0.34 0.35 T:aegis128l 0.33? 0.35? 0.39? T:tiaoxinv2 0.33? 0.35? 0.37? T:tiaoxinv1 0.38 0.39 0.39 aegis128l 0.39 0.39 0.41 T:aezv4 0.38 0.39 0.41 T:aezv3 0.39 0.40 0.43 T:aezv5 0.55 0.56 0.56 T:aegis128 0.60 0.62 0.62 aegis256 0.78 0.79 0.81 T:aeadaes128ocbtaglen128v1 0.86 0.87 0.88 T:aes128otrcv3 0.86 0.87 0.88 T:morus1280128v1 0.87 0.88 0.89 T:morus1280128v2 0.89 0.91 0.92 T:morus1280256v1 0.91 0.91 0.92 T:morus1280256v2 0.91 0.93 0.95 T:aeadaes192ocbtaglen128v1 0.97 0.98 0.98 T:aes128otrpv3 1.09 1.10 1.10 T:aes256otrcv3 1.12 1.13 1.13 T:morus640128v2 1.13 1.14 1.14 T:morus640128v1 1.25 1.26 1.26 T:aes256otrpv3 1.41 1.43 1.46 T:deoxysi128v141 1.47 1.49 1.49 T:deoxysneq128128v1 1.61 1.61 1.62 T:aeadaes256ocbtaglen128v1 1.68 1.70 1.71 T:deoxysneq256128v1 1.73 1.74 1.75 T:deoxysi256v141 1.78 1.79 1.81 T:colm0v1 2.15 2.17 2.20 T:deoxysii128v141 2.39 2.42 2.44 T:deoxyseq128128v1 2.43 2.43 2.44 T:aes128gcmv1 2.51 2.54 2.55 T:deoxysii256v141 2.67 2.69 2.70 T:seakeyakv2 2.74 2.76 2.81 T:deoxyseq256128v1 2.75 2.77 2.78 T:oceankeyakv2 2.78 2.79 2.80 aes256gcmv1 2.78 2.79 2.80 T:norx6441v3 2.79 2.80 2.81 T:norx6441v2 2.99 2.99 3.00 T:aes128otrsv3 3.32 3.35 3.42 T:lunarkeyakv2 3.36 3.37 3.38 T:norx6441v1 3.82 3.83 3.83 T:norx3241v2 3.83 3.84 3.85 T:norx3241v3 4.11 4.11 4.11 T:aes256otrsv3 4.20 4.20 4.23 T:norx6461v3 4.18 4.20 4.22 T:norx6461v2 4.27 4.28 4.30 T:norx6444v2 4.28 4.29 4.32 T:norx6444v3 4.56 4.59 4.60 T:lakekeyakv2 4.59 4.61 4.61 T:norx3241v1 4.76 4.80 4.83 T:lakekeyakv1 4.94 4.95 4.97 T:norx6444v1 5.08 5.09 5.12 T:norx6461v1 5.11 5.13 5.13 T:aes128n12t8silcv2 5.12 5.13 5.14 T:aes128n12t8clocv2 5.12 5.13 5.14 T:aes128n12t8clocv3 5.11 5.13 5.14 T:aes128n8t8silcv2 5.11 5.14 5.14 T:aes128n12t8silcv3 5.12 5.14 5.14 T:aes128n8t8clocv2 5.72 5.74 5.75 T:norx3261v3 5.76 5.76 5.78 T:norx3261v2 7.51 7.52 7.53 T:norx3261v1 7.68 7.73 7.76 T:ketjemajorv2 8.01 8.13 8.13 T:acorn128v3 8.13 8.14 8.15 T:acorn128v2 8.60 8.62 8.65 T:ascon128av11 8.62 8.67 8.73 ascon128av12 8.67 8.68 8.73 T:ascon96v1 9.40 9.41 9.43 T:riverkeyakv2 10.57 10.57 10.58 T:aesjambuv1 10.84 10.87 10.90 T:ketjeminorv2 12.72 12.73 12.75 ascon128v12 12.77 12.80 12.84 T:ascon128v11 12.77 12.81 12.82 T:ascon128v1 14.39 14.39 14.44 T:twine80n6t4clocv3 15.12 15.14 15.29 T:twine80n6t4clocv2 15.71 15.72 15.77 T:aes128otrsv1 15.76 15.80 15.91 T:aes128otrsv2 15.80 15.82 15.85 T:aes128otrpv1 15.82 15.87 15.90 T:aes128otrpv2 19.84 19.88 19.92 T:aes128n12clocv1 20.12 20.15 20.20 T:aes128n8clocv1 20.35 20.36 20.39 T:aes256otrsv2 20.36 20.37 20.43 T:aes256otrsv1 20.75 20.79 20.80 T:aes256otrpv1 20.79 20.82 20.84 T:aes256otrpv2 26.09 26.13 26.26 T:proest256otrv1 29.58 29.62 29.65 T:ketjesrv1 30.99 31.03 31.09 T:ketjesrv2 31.73 31.75 31.81 T:aeadaes128ocbtaglen64v1 31.75 31.78 31.83 T:aeadaes128ocbtaglen96v1 37.75 37.78 37.82 T:aeadaes192ocbtaglen96v1 37.74 37.80 37.84 T:aeadaes192ocbtaglen64v1 43.72 43.76 43.81 T:aeadaes256ocbtaglen96v1 43.71 43.76 43.83 T:aeadaes256ocbtaglen64v1 53.10 53.12 53.20 T:colm127v1 60.16 60.24 60.41 T:proest128otrv1 62.63 62.73 62.93 T:ketjejrv1 71.50? 72.49? 80.49? T:present80n6t4silcv3 105.68 106.02 107.61 T:deoxysneq128128v13 106.14 106.28 106.52 T:ketjejrv2 118.36 118.43 118.53 T:led80n6t4silcv3 125.72 126.05 127.23 T:aezv1 134.01 135.63 135.92 T:deoxyseq128128v13 153.99 154.06 154.41 T:deoxysneq256128v13 202.83 203.29 204.30 T:deoxyseq256128v13 434.52 435.23 435.34 T:acorn128 4097.41 4098.00 4098.34 T:present80n6t4silcv2 4097.89 4098.53 4099.07 T:present80n6silcv1 6272.10 6275.03 6278.48 T:led80n6silcv1 6274.30 6276.46 6281.38 T:led80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.22? 0.25? 0.29? T:tiaoxinv1 0.22? 0.26? 0.32? T:tiaoxinv2 0.24? 0.30? 0.32? T:aegis128l 0.29? 0.32? 0.34? aegis128l 0.37? 0.42? 0.43? T:aezv4 0.40 0.42 0.44 T:aezv5 0.40 0.42 0.44 T:aezv3 0.50 0.51 0.52 T:aegis128 0.54 0.54 0.55 aegis256 0.69? 0.80? 0.84? T:aeadaes128ocbtaglen128v1 0.82 0.84 0.86 T:morus1280128v1 0.81 0.84 0.85 T:morus1280128v2 0.85 0.86 0.89 T:aes128otrcv3 0.87 0.90 0.91 T:morus1280256v2 0.92 0.93 0.94 T:morus1280256v1 0.79? 0.94? 1.23? T:aeadaes192ocbtaglen128v1 1.00 1.03 1.04 T:aes128otrpv3 1.09 1.10 1.11 T:aes256otrcv3 1.07 1.11 1.12 T:colm0v1 1.10 1.12 1.12 T:morus640128v1 1.11 1.12 1.13 T:morus640128v2 1.20 1.26 1.32 T:deoxysi128v141 1.27 1.29 1.32 T:deoxysii128v141 1.26 1.32 1.36 T:deoxysneq128128v1 1.28 1.32 1.37 T:deoxyseq128128v1 1.31 1.34 1.35 T:aes256otrpv3 1.44? 1.47? 1.62? T:deoxyseq256128v1 1.46 1.48 1.49 T:deoxysi256v141 1.44 1.48 1.51 T:deoxysneq256128v1 1.46 1.49 1.53 T:deoxysii256v141 1.78 1.80 1.82 T:aes128gcmv1 1.78 1.80 1.82 aes256gcmv1 2.01 2.02 2.03 T:aeadaes256ocbtaglen128v1 2.08 2.11 2.14 T:oceankeyakv2 2.08 2.12 2.16 T:lunarkeyakv2 2.50 2.51 2.53 T:seakeyakv2 2.81 2.83 2.85 T:norx6441v2 2.83 2.84 2.86 T:norx6441v3 3.38 3.41 3.42 T:norx6441v1 3.84 3.85 3.86 T:norx3241v2 3.84 3.86 3.87 T:norx3241v3 4.05 4.12 4.14 T:lakekeyakv2 4.21 4.23 4.24 T:norx6444v2 4.22 4.24 4.25 T:norx6444v3 4.23 4.25 4.26 T:norx6461v2 4.22 4.25 4.28 T:norx6461v3 4.54 4.57 4.60 T:lakekeyakv1 4.65 4.68 4.69 T:norx3241v1 4.85 4.88 4.90 T:norx6444v1 5.09 5.11 5.13 T:norx6461v1 5.11 5.12 5.14 T:aes128n12t8clocv2 5.12 5.12 5.12 T:aes128n8t8silcv2 5.12 5.12 5.13 T:aes128n12t8silcv3 5.12 5.12 5.13 T:aes128n12t8clocv3 5.12 5.12 5.13 T:aes128n12t8silcv2 5.12 5.13 5.13 T:aes128otrsv3 5.11 5.13 5.14 T:aes128n8t8clocv2 5.74 5.76 5.80 T:norx3261v2 5.83 5.86 5.87 T:norx3261v3 6.63 6.67 6.71 T:ketjemajorv2 7.12 7.13 7.13 T:aes256otrsv3 7.60 7.63 7.65 T:norx3261v1 7.73 7.75 7.77 T:acorn128v3 7.73 7.77 7.78 T:acorn128v2 8.56 8.59 8.61 T:ascon96v1 8.60 8.62 8.64 ascon128av12 8.73 8.75 8.77 T:ascon128av11 8.76 8.79 8.81 T:riverkeyakv2 9.62 9.65 9.68 T:ketjeminorv2 10.43 10.44 10.45 T:aesjambuv1 12.57 12.60 12.62 ascon128v12 12.70 12.74 12.77 T:ascon128v11 12.72 12.74 12.76 T:ascon128v1 13.88 13.91 13.92 T:aes128n12clocv1 13.86 13.91 13.96 T:aes128n8clocv1 14.22 14.26 14.26 T:twine80n6t4clocv3 14.90 14.91 14.93 T:aes128otrsv2 14.90 14.92 14.94 T:aes128otrsv1 14.88 14.94 15.15 T:twine80n6t4clocv2 15.04 15.05 15.08 T:aes128otrpv2 15.07 15.10 15.12 T:aes128otrpv1 18.38 18.42 18.46 T:aes256otrsv2 18.39 18.48 18.52 T:aes256otrsv1 19.95 19.99 20.01 T:aes256otrpv2 19.98 20.00 20.03 T:aes256otrpv1 26.01 26.08 26.13 T:ketjesrv1 26.31 26.36 26.39 T:proest256otrv1 26.61 26.66 26.70 T:aeadaes128ocbtaglen64v1 26.64 26.70 26.79 T:aeadaes128ocbtaglen96v1 28.13 28.37 28.40 T:ketjesrv2 28.53 28.54 28.59 T:colm127v1 31.61 31.67 31.69 T:aeadaes192ocbtaglen96v1 31.62 31.69 31.81 T:aeadaes192ocbtaglen64v1 36.47 36.55 36.60 T:aeadaes256ocbtaglen64v1 36.51 36.57 36.63 T:aeadaes256ocbtaglen96v1 58.07 58.14 58.26 T:ketjejrv1 60.17 60.28 60.47 T:proest128otrv1 60.21 60.31 60.87 T:aezv1 70.30? 71.86? 83.64? T:present80n6t4silcv3 88.20 88.32 88.60 T:deoxysneq128128v13 88.10 88.86 89.10 T:deoxyseq128128v13 103.68 103.93 104.09 T:ketjejrv2 117.78 117.83 117.91 T:led80n6t4silcv3 134.13 134.37 135.38 T:deoxyseq256128v13 134.74 134.89 135.24 T:deoxysneq256128v13 421.05 421.97 423.27 T:acorn128 2731.52 2731.89 2732.78 T:present80n6silcv1 2731.12 2732.06 2732.58 T:present80n6t4silcv2 4183.85 4186.28 4191.44 T:led80n6t4silcv2 4181.60 4186.72 4192.36 T:led80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.21? 0.25? 0.30? T:tiaoxinv2 0.18? 0.26? 0.31? T:tiaoxinv1 0.25? 0.29? 0.32? T:aegis128l 0.29? 0.31? 0.33? aegis128l 0.40 0.41 0.42 T:aezv4 0.41 0.42 0.43 T:aezv3 0.42 0.42 0.43 T:aezv5 0.50 0.51 0.52 T:aegis128 0.53 0.54 0.55 aegis256 0.74? 0.79? 0.87? T:aeadaes128ocbtaglen128v1 0.81 0.82 0.84 T:morus1280128v2 0.81 0.82 0.84 T:morus1280128v1 0.85 0.86 0.87 T:aes128otrcv3 0.86 0.87 0.89 T:morus1280256v1 0.86 0.87 0.88 T:morus1280256v2 0.61? 0.91? 0.95? T:aeadaes192ocbtaglen128v1 1.02 1.02 1.03 T:aes128otrpv3 1.08 1.10 1.11 T:morus640128v2 1.09 1.10 1.11 T:aes256otrcv3 1.10 1.11 1.12 T:colm0v1 1.11 1.12 1.13 T:morus640128v1 1.21 1.27 1.30 T:deoxysi128v141 1.27 1.30 1.35 T:deoxysneq128128v1 1.28 1.32 1.34 T:deoxysii128v141 1.32 1.34 1.41 T:deoxyseq128128v1 1.32 1.34 1.34 T:aes256otrpv3 1.46 1.48 1.60 T:deoxysi256v141 1.41 1.48 1.53 T:deoxysneq256128v1 1.44 1.48 1.58 T:deoxyseq256128v1 1.47 1.51 1.55 T:deoxysii256v141 1.77 1.79 1.82 T:aes128gcmv1 1.77 1.81 1.83 aes256gcmv1 2.00 2.02 2.03 T:aeadaes256ocbtaglen128v1 2.08 2.10 2.13 T:oceankeyakv2 2.08 2.12 2.17 T:lunarkeyakv2 2.48 2.52 2.54 T:seakeyakv2 2.79 2.81 2.81 T:norx6441v3 2.80 2.81 2.83 T:norx6441v2 3.35 3.38 3.41 T:norx6441v1 3.83 3.86 3.88 T:norx3241v2 3.85 3.88 3.90 T:norx3241v3 4.08 4.09 4.12 T:lakekeyakv2 4.15 4.18 4.21 T:norx6461v3 4.19 4.21 4.24 T:norx6444v3 4.19 4.21 4.24 T:norx6444v2 4.20 4.22 4.25 T:norx6461v2 4.52 4.54 4.57 T:lakekeyakv1 4.66 4.67 4.69 T:norx3241v1 4.85 4.88 4.91 T:norx6444v1 5.05 5.08 5.12 T:norx6461v1 5.10 5.12 5.14 T:aes128n12t8clocv2 5.09 5.12 5.15 T:aes128n8t8clocv2 5.12 5.12 5.13 T:aes128n12t8clocv3 5.11 5.12 5.13 T:aes128n12t8silcv2 5.12 5.12 5.13 T:aes128n12t8silcv3 5.12 5.12 5.13 T:aes128n8t8silcv2 5.12 5.13 5.13 T:aes128otrsv3 5.73 5.75 5.78 T:norx3261v3 5.75 5.77 5.81 T:norx3261v2 6.59 6.66 6.69 T:ketjemajorv2 7.12 7.13 7.13 T:aes256otrsv3 7.59 7.61 7.64 T:norx3261v1 8.00 8.01 8.02 T:acorn128v2 8.23 8.26 8.27 T:acorn128v3 8.58 8.59 8.63 T:ascon128av11 8.52 8.65 8.72 ascon128av12 8.61 8.65 8.75 T:ascon96v1 8.74 8.78 8.80 T:riverkeyakv2 9.62 9.66 9.69 T:ketjeminorv2 10.44 10.44 10.45 T:aesjambuv1 12.62 12.64 12.69 T:ascon128v11 12.62 12.65 12.69 T:ascon128v1 12.62 12.65 12.67 ascon128v12 13.87 13.90 13.94 T:aes128n8clocv1 13.86 13.90 13.96 T:aes128n12clocv1 14.22 14.23 14.29 T:twine80n6t4clocv3 14.89 14.91 14.94 T:aes128otrsv2 14.89 14.92 14.97 T:aes128otrsv1 14.86 14.95 15.17 T:twine80n6t4clocv2 15.02 15.04 15.07 T:aes128otrpv2 15.06 15.09 15.13 T:aes128otrpv1 18.40 18.42 18.46 T:aes256otrsv2 18.44 18.51 18.58 T:aes256otrsv1 19.95 19.97 20.00 T:aes256otrpv2 19.95 19.98 20.02 T:aes256otrpv1 26.04 26.07 26.14 T:ketjesrv1 26.28 26.37 26.41 T:proest256otrv1 26.61 26.65 26.71 T:aeadaes128ocbtaglen64v1 26.60 26.67 26.80 T:aeadaes128ocbtaglen96v1 28.35 28.40 28.41 T:ketjesrv2 28.51 28.54 28.58 T:colm127v1 31.59 31.69 31.73 T:aeadaes192ocbtaglen96v1 31.64 31.71 31.82 T:aeadaes192ocbtaglen64v1 36.53 36.57 36.61 T:aeadaes256ocbtaglen64v1 36.52 36.59 36.64 T:aeadaes256ocbtaglen96v1 58.02 58.21 58.42 T:ketjejrv1 59.95 60.23 60.37 T:proest128otrv1 60.22 60.47 60.98 T:aezv1 69.81? 71.83? 88.92? T:present80n6t4silcv3 87.81 88.65 91.95 T:deoxysneq128128v13 87.90 88.93 89.18 T:deoxyseq128128v13 103.71 103.99 104.28 T:ketjejrv2 117.72 117.82 117.97 T:led80n6t4silcv3 134.20 134.38 135.26 T:deoxyseq256128v13 134.70 134.86 135.02 T:deoxysneq256128v13 423.70 424.05 424.32 T:acorn128 2731.21 2732.18 2732.60 T:present80n6t4silcv2 2731.90 2732.39 2732.81 T:present80n6silcv1 4188.15 4190.94 4193.92 T:led80n6t4silcv2 4189.09 4192.21 4195.63 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.22? 0.25? 0.29? T:tiaoxinv2 0.22? 0.26? 0.29? T:tiaoxinv1 0.29 0.30 0.32 T:aegis128l 0.31 0.32 0.32 aegis128l 0.41 0.41 0.42 T:aezv4 0.41 0.42 0.42 T:aezv3 0.42 0.42 0.44 T:aezv5 0.50 0.52 0.52 T:aegis128 0.51 0.54 0.54 aegis256 0.77 0.79 0.82 T:aeadaes128ocbtaglen128v1 0.81 0.82 0.84 T:morus1280128v1 0.81 0.83 0.84 T:morus1280128v2 0.86 0.87 0.88 T:aes128otrcv3 0.86 0.87 0.89 T:morus1280256v1 0.87 0.88 0.88 T:morus1280256v2 0.91? 0.93? 1.22? T:aeadaes192ocbtaglen128v1 1.02 1.02 1.03 T:aes128otrpv3 1.08 1.09 1.10 T:morus640128v2 1.08 1.10 1.11 T:aes256otrcv3 1.10 1.11 1.12 T:colm0v1 1.11 1.12 1.13 T:morus640128v1 1.24 1.28 1.33 T:deoxysneq128128v1 1.26 1.29 1.30 T:deoxysi128v141 1.31 1.33 1.34 T:deoxysii128v141 1.33 1.34 1.35 T:aes256otrpv3 1.32 1.34 1.37 T:deoxyseq128128v1 1.45 1.48 1.50 T:deoxysneq256128v1 1.47 1.49 1.52 T:deoxysii256v141 1.47 1.51 1.54 T:deoxysi256v141 1.47 1.52 1.58 T:deoxyseq256128v1 1.79 1.80 1.81 T:aes128gcmv1 1.80 1.81 1.83 aes256gcmv1 2.01 2.02 2.03 T:aeadaes256ocbtaglen128v1 2.08 2.11 2.13 T:oceankeyakv2 2.09 2.12 2.15 T:lunarkeyakv2 2.50 2.52 2.54 T:seakeyakv2 2.79 2.81 2.82 T:norx6441v3 2.81 2.83 2.84 T:norx6441v2 3.34 3.38 3.40 T:norx6441v1 3.83 3.84 3.85 T:norx3241v2 3.87 3.89 3.91 T:norx3241v3 4.06 4.11 4.15 T:lakekeyakv2 4.16 4.17 4.20 T:norx6461v3 4.19 4.21 4.22 T:norx6461v2 4.19 4.22 4.25 T:norx6444v3 4.18 4.23 4.25 T:norx6444v2 4.52 4.54 4.58 T:lakekeyakv1 4.65 4.66 4.67 T:norx3241v1 4.85 4.89 4.91 T:norx6444v1 4.99 5.06 5.09 T:norx6461v1 5.09 5.10 5.14 T:aes128n12t8clocv2 5.10 5.11 5.12 T:aes128n12t8silcv2 5.10 5.11 5.13 T:aes128n8t8clocv2 5.10 5.12 5.13 T:aes128n8t8silcv2 5.12 5.12 5.12 T:aes128n12t8silcv3 5.11 5.12 5.13 T:aes128n12t8clocv3 5.12 5.13 5.13 T:aes128otrsv3 5.71 5.72 5.77 T:norx3261v3 5.75 5.75 5.77 T:norx3261v2 6.62 6.67 6.70 T:ketjemajorv2 7.12 7.13 7.13 T:aes256otrsv3 7.59 7.61 7.64 T:norx3261v1 8.00 8.01 8.03 T:acorn128v2 8.25 8.26 8.28 T:acorn128v3 8.58 8.60 8.61 T:ascon128av11 8.60 8.63 8.71 T:ascon96v1 8.56 8.64 8.69 ascon128av12 8.75 8.77 8.80 T:riverkeyakv2 9.64 9.66 9.68 T:ketjeminorv2 10.44 10.44 10.45 T:aesjambuv1 12.61 12.64 12.67 T:ascon128v11 12.63 12.66 12.68 ascon128v12 12.63 12.66 12.67 T:ascon128v1 13.85 13.90 13.94 T:aes128n12clocv1 13.86 13.90 13.93 T:aes128n8clocv1 14.21 14.22 14.26 T:twine80n6t4clocv3 14.89 14.91 14.94 T:aes128otrsv2 14.90 14.92 14.96 T:aes128otrsv1 15.02 15.04 15.09 T:aes128otrpv2 15.06 15.10 15.16 T:aes128otrpv1 14.87 15.14 15.17 T:twine80n6t4clocv2 18.37 18.40 18.42 T:aes256otrsv2 18.38 18.50 18.52 T:aes256otrsv1 19.94 19.98 20.00 T:aes256otrpv2 19.96 19.98 20.01 T:aes256otrpv1 26.04 26.06 26.15 T:ketjesrv1 26.29 26.33 26.41 T:proest256otrv1 26.60 26.64 26.71 T:aeadaes128ocbtaglen64v1 26.62 26.70 26.83 T:aeadaes128ocbtaglen96v1 28.12 28.38 28.42 T:ketjesrv2 28.54 28.56 28.61 T:colm127v1 31.61 31.67 31.72 T:aeadaes192ocbtaglen96v1 31.66 31.69 31.91 T:aeadaes192ocbtaglen64v1 36.52 36.57 36.64 T:aeadaes256ocbtaglen64v1 36.53 36.58 36.63 T:aeadaes256ocbtaglen96v1 58.08 58.24 58.49 T:ketjejrv1 60.17 60.25 60.37 T:proest128otrv1 60.21 60.40 60.88 T:aezv1 69.86? 71.83? 89.06? T:present80n6t4silcv3 88.08 88.58 91.97 T:deoxysneq128128v13 88.06 88.92 89.19 T:deoxyseq128128v13 103.75 103.93 104.17 T:ketjejrv2 117.81 117.88 117.95 T:led80n6t4silcv3 134.20 134.37 135.24 T:deoxyseq256128v13 134.82 134.93 135.09 T:deoxysneq256128v13 423.54 423.82 424.32 T:acorn128 2731.59 2732.23 2732.96 T:present80n6silcv1 2731.46 2732.38 2732.69 T:present80n6t4silcv2 4191.64 4194.20 4197.29 T:led80n6t4silcv2 4191.74 4195.42 4201.12 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.40? 0.41? 0.45? T:tiaoxinv2 0.41 0.42 0.43 T:tiaoxinv1 0.41 0.42 0.44 T:aegis128l 0.42 0.43 0.44 aegis128l 0.62 0.62 0.63 T:aegis128 0.66 0.67 0.67 aegis256 0.83 0.83 0.86 T:aezv5 0.82 0.83 0.84 T:aezv4 0.84 0.84 0.85 T:aezv3 0.99 1.00 1.07 T:aeadaes128ocbtaglen128v1 1.11 1.11 1.12 T:morus1280128v1 1.11 1.12 1.13 T:morus1280128v2 1.14? 1.15? 1.27? T:aeadaes192ocbtaglen128v1 1.16 1.17 1.18 T:morus1280256v2 1.17 1.17 1.17 T:aes128otrpv3 1.18 1.19 1.21 T:morus1280256v1 1.24 1.24 1.25 T:aes128otrcv3 1.28 1.29 1.29 T:morus640128v1 1.29 1.29 1.31 T:morus640128v2 1.55 1.55 1.57 T:aes256otrpv3 1.55 1.58 1.59 T:deoxysneq128128v1 1.62 1.63 1.69 T:deoxysi128v141 1.66 1.67 1.67 T:aes256otrcv3 1.80 1.81 1.82 T:aeadaes256ocbtaglen128v1 1.79 1.81 1.84 T:deoxysneq256128v1 1.89 1.90 1.91 T:deoxysi256v141 2.10 2.10 2.11 T:colm0v1 2.41 2.42 2.43 T:aes128gcmv1 2.49 2.50 2.52 T:deoxysii128v141 2.53 2.55 2.59 T:deoxyseq128128v1 2.56 2.57 2.58 aes256gcmv1 2.81 2.82 2.82 T:deoxysii256v141 2.80 2.83 2.89 T:deoxyseq256128v1 3.19 3.19 3.19 T:aes128otrsv3 3.28 3.29 3.30 T:norx6441v2 3.28 3.29 3.30 T:norx6441v3 3.78 3.79 3.81 T:norx6441v1 3.80 3.81 3.82 T:seakeyakv2 4.17 4.19 4.20 T:norx3241v3 4.18 4.19 4.20 T:norx3241v2 4.39 4.39 4.40 T:aes256otrsv3 4.90 4.91 4.92 T:norx6461v3 4.91 4.93 4.94 T:norx6461v2 4.92 4.93 4.95 T:norx3241v1 4.99 5.01 5.04 T:lakekeyakv2 5.13 5.14 5.14 T:oceankeyakv2 5.26 5.26 5.26 T:aes128n12t8clocv3 5.26 5.27 5.27 T:aes128n8t8clocv2 5.26 5.27 5.27 T:aes128n12t8clocv2 5.30 5.30 5.31 T:aes128n12t8silcv2 5.30 5.31 5.31 T:aes128n12t8silcv3 5.30 5.31 5.31 T:aes128n8t8silcv2 5.67 5.69 5.71 T:lakekeyakv1 5.67 5.70 5.71 T:norx6461v1 6.10 6.11 6.12 T:norx6444v2 6.11 6.12 6.15 T:norx6444v3 6.26 6.27 6.29 T:norx3261v2 6.27 6.30 6.30 T:norx3261v3 6.96 6.97 6.98 T:norx6444v1 8.03 8.04 8.05 T:norx3261v1 8.81 8.82 8.84 T:ascon96v1 8.89 8.93 8.95 T:ascon128av11 8.92 8.93 8.96 ascon128av12 8.93 8.96 9.04 T:lunarkeyakv2 9.08 9.09 9.10 T:acorn128v3 9.28 9.30 9.31 T:acorn128v2 9.82 9.83 9.86 T:riverkeyakv2 10.16 10.18 10.22 T:ketjemajorv2 10.58 10.58 10.58 T:aesjambuv1 12.45 12.47 12.49 T:ketjeminorv2 12.91 12.93 13.01 T:ascon128v1 12.92 12.93 12.99 T:ascon128v11 12.93 12.94 12.95 ascon128v12 14.75 14.77 14.81 T:twine80n6t4clocv3 15.46 15.49 15.60 T:twine80n6t4clocv2 16.00 16.01 16.02 T:aes128otrsv1 16.00 16.01 16.03 T:aes128otrsv2 16.10 16.10 16.11 T:aes128otrpv2 16.09 16.12 16.14 T:aes128otrpv1 20.52 20.53 20.56 T:aes128n8clocv1 20.54 20.55 20.60 T:aes128n12clocv1 20.77 20.79 20.80 T:aes256otrsv2 20.81 20.84 20.87 T:aes256otrsv1 21.17 21.20 21.22 T:aes256otrpv1 21.20 21.21 21.23 T:aes256otrpv2 27.78 27.81 27.83 T:aeadaes128ocbtaglen64v1 27.82 27.85 27.90 T:aeadaes128ocbtaglen96v1 28.45 28.48 28.63 T:proest256otrv1 29.77 29.80 29.83 T:ketjesrv1 31.87 31.88 32.00 T:ketjesrv2 32.89 32.91 32.94 T:aeadaes192ocbtaglen96v1 32.88 32.91 33.00 T:aeadaes192ocbtaglen64v1 37.92 37.93 37.96 T:aeadaes256ocbtaglen64v1 37.91 37.94 37.99 T:aeadaes256ocbtaglen96v1 45.31 45.33 45.39 T:colm127v1 63.00 63.09 63.14 T:proest128otrv1 63.21 63.23 63.36 T:ketjejrv1 72.62 73.07 78.09 T:present80n6t4silcv3 88.90 88.95 88.98 T:deoxysneq128128v13 107.94 108.03 108.26 T:ketjejrv2 119.61 119.65 119.68 T:led80n6t4silcv3 123.37 123.56 123.79 T:aezv1 135.80 135.99 136.26 T:deoxysneq256128v13 135.19 136.95 137.06 T:deoxyseq128128v13 205.32 205.52 206.29 T:deoxyseq256128v13 474.79 475.02 475.49 T:acorn128 4118.60 4118.91 4119.16 T:present80n6t4silcv2 4119.72 4119.99 4120.28 T:present80n6silcv1 6291.52 6295.43 6299.88 T:led80n6silcv1 6298.62 6299.36 6300.61 T:led80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.41 0.42 0.44 T:aegis128l 0.44 0.44 0.46 aegis128l 0.47 0.47 0.49 T:tiaoxinv1 0.47 0.48 0.49 T:tiaoxinv2 0.62 0.63 0.63 T:aegis128 0.68 0.68 0.69 aegis256 0.82 0.82 0.83 T:aezv4 0.83 0.84 0.84 T:aezv3 0.83 0.84 0.85 T:aezv5 0.99 0.99 1.07 T:aeadaes128ocbtaglen128v1 1.10 1.10 1.11 T:morus1280128v1 1.10 1.11 1.12 T:morus1280128v2 1.13 1.13 1.15 T:morus1280256v1 1.13? 1.14? 1.33? T:aeadaes192ocbtaglen128v1 1.15 1.16 1.17 T:morus1280256v2 1.17 1.18 1.18 T:aes128otrpv3 1.26 1.26 1.27 T:aes128otrcv3 1.29 1.29 1.29 T:morus640128v1 1.30 1.30 1.31 T:morus640128v2 1.57 1.57 1.58 T:aes256otrpv3 1.69 1.70 1.70 T:aes256otrcv3 1.76 1.77 1.85 T:deoxysi128v141 1.79 1.80 1.82 T:deoxysneq128128v1 1.83 1.84 1.85 T:aeadaes256ocbtaglen128v1 1.97 1.99 2.02 T:deoxysneq256128v1 2.12 2.13 2.14 T:colm0v1 2.13 2.14 2.20 T:deoxysi256v141 2.49 2.51 2.54 T:deoxysii128v141 2.66 2.66 2.69 T:aes128gcmv1 2.89 2.90 2.96 T:deoxyseq128128v1 2.91 2.92 2.94 T:deoxysii256v141 3.04 3.05 3.09 aes256gcmv1 3.15 3.16 3.18 T:deoxyseq256128v1 3.20 3.20 3.20 T:aes128otrsv3 3.27 3.28 3.29 T:norx6441v3 3.27 3.28 3.30 T:norx6441v2 3.80 3.81 3.82 T:norx6441v1 3.84 3.85 3.89 T:seakeyakv2 4.16 4.16 4.18 T:norx3241v3 4.16 4.17 4.18 T:norx3241v2 4.42 4.42 4.43 T:aes256otrsv3 4.88 4.89 4.90 T:norx3241v1 4.89 4.90 4.92 T:norx6461v2 4.91 4.92 4.94 T:norx6461v3 4.98 5.00 5.01 T:lakekeyakv2 5.18 5.19 5.22 T:oceankeyakv2 5.23 5.24 5.25 T:aes128n12t8clocv2 5.22 5.24 5.25 T:aes128n12t8clocv3 5.23 5.24 5.25 T:aes128n8t8clocv2 5.27 5.27 5.28 T:aes128n12t8silcv2 5.27 5.28 5.28 T:aes128n12t8silcv3 5.27 5.28 5.28 T:aes128n8t8silcv2 5.52 5.53 5.65 T:lakekeyakv1 5.74 5.76 5.80 T:norx6461v1 6.08 6.09 6.10 T:norx6444v2 6.10 6.11 6.14 T:norx6444v3 6.21 6.23 6.24 T:norx3261v3 6.25 6.26 6.27 T:norx3261v2 6.94 6.96 6.97 T:norx6444v1 7.94 7.95 7.96 T:norx3261v1 8.83 8.84 8.86 T:ascon128av11 8.83 8.87 8.94 ascon128av12 8.90 8.91 8.96 T:ascon96v1 9.00 9.02 9.04 T:lunarkeyakv2 9.22 9.33 9.33 T:acorn128v3 9.33 9.33 9.34 T:acorn128v2 9.73 9.75 9.77 T:ketjemajorv2 9.87 9.88 9.89 T:riverkeyakv2 10.75 10.75 10.76 T:aesjambuv1 12.34 12.35 12.38 T:ketjeminorv2 12.91 12.92 12.94 ascon128v12 12.88 12.97 13.00 T:ascon128v11 12.88 12.98 13.01 T:ascon128v1 14.75 14.76 14.78 T:twine80n6t4clocv3 15.48 15.50 15.61 T:twine80n6t4clocv2 16.20 16.24 16.25 T:aes128otrsv1 16.25 16.28 16.37 T:aes128otrsv2 16.30 16.32 16.34 T:aes128otrpv1 16.31 16.33 16.35 T:aes128otrpv2 20.10 20.11 20.14 T:aes128n12clocv1 20.33 20.35 20.38 T:aes128n8clocv1 20.96 20.97 20.99 T:aes256otrsv2 20.95 21.00 21.06 T:aes256otrsv1 21.38 21.39 21.42 T:aes256otrpv1 21.42 21.44 21.47 T:aes256otrpv2 28.50 28.58 28.63 T:proest256otrv1 30.38 30.40 30.46 T:ketjesrv1 32.01 32.07 32.11 T:ketjesrv2 32.62 32.64 32.67 T:aeadaes128ocbtaglen64v1 32.65 32.69 32.75 T:aeadaes128ocbtaglen96v1 38.77 38.78 38.83 T:aeadaes192ocbtaglen96v1 38.74 38.79 38.83 T:aeadaes192ocbtaglen64v1 44.86 44.91 44.97 T:aeadaes256ocbtaglen64v1 44.89 44.95 45.05 T:aeadaes256ocbtaglen96v1 54.54 54.58 54.62 T:colm127v1 62.76 62.85 62.93 T:proest128otrv1 63.71 63.79 64.02 T:ketjejrv1 72.83 73.24 80.72 T:present80n6t4silcv3 105.70 105.93 107.35 T:deoxysneq128128v13 107.77 107.87 107.97 T:ketjejrv2 119.31 119.39 119.47 T:led80n6t4silcv3 123.69 123.82 124.15 T:aezv1 135.59 136.27 137.06 T:deoxyseq128128v13 154.61 154.97 155.29 T:deoxysneq256128v13 204.89 205.15 206.36 T:deoxyseq256128v13 487.59 488.58 488.78 T:acorn128 4119.16 4119.69 4120.55 T:present80n6t4silcv2 4119.61 4120.10 4120.53 T:present80n6silcv1 6294.54 6295.94 6298.53 T:led80n6silcv1 6298.56 6300.40 6301.10 T:led80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.41 0.41 0.42 T:aegis128l 0.46 0.46 0.47 T:tiaoxinv1 0.47 0.48 0.50 T:tiaoxinv2 0.50 0.50 0.51 T:aezv4 0.51 0.51 0.52 T:aezv5 0.52 0.52 0.52 T:aezv3 0.52 0.53 0.53 aegis128l 0.63 0.63 0.63 T:aegis128 0.71 0.71 0.72 aegis256 0.98 0.99 1.01 T:aeadaes128ocbtaglen128v1 1.09 1.10 1.11 T:morus1280128v1 1.10 1.11 1.11 T:morus1280128v2 1.13 1.13 1.14 T:morus1280256v1 1.13 1.14 1.16 T:aeadaes192ocbtaglen128v1 1.15 1.15 1.16 T:morus1280256v2 1.17 1.18 1.18 T:aes128otrpv3 1.26 1.26 1.27 T:aes128otrcv3 1.29 1.29 1.29 T:morus640128v1 1.30 1.30 1.30 T:morus640128v2 1.56 1.57 1.57 T:aes256otrpv3 1.69 1.70 1.70 T:aes256otrcv3 1.74 1.75 1.77 T:deoxysi128v141 1.78 1.79 1.80 T:deoxysneq128128v1 1.82 1.83 1.85 T:aeadaes256ocbtaglen128v1 1.98 1.99 2.00 T:deoxysneq256128v1 2.13 2.13 2.14 T:colm0v1 2.13 2.15 2.17 T:deoxysi256v141 2.48 2.50 2.52 T:deoxysii128v141 2.65 2.66 2.67 T:aes128gcmv1 2.89 2.90 2.92 T:deoxyseq128128v1 2.91 2.93 2.94 T:deoxysii256v141 3.04 3.05 3.06 aes256gcmv1 3.15 3.16 3.16 T:deoxyseq256128v1 3.20 3.20 3.20 T:aes128otrsv3 3.26 3.26 3.28 T:norx6441v2 3.26 3.28 3.29 T:norx6441v3 3.80 3.80 3.81 T:norx6441v1 3.88 3.89 3.92 T:seakeyakv2 4.15 4.16 4.17 T:norx3241v2 4.16 4.17 4.17 T:norx3241v3 4.42 4.42 4.42 T:aes256otrsv3 4.89 4.89 4.90 T:norx3241v1 4.88 4.89 4.91 T:norx6461v2 4.90 4.91 4.93 T:norx6461v3 5.02 5.03 5.04 T:lakekeyakv2 5.21 5.22 5.23 T:oceankeyakv2 5.23 5.23 5.23 T:aes128n12t8clocv2 5.22 5.23 5.24 T:aes128n12t8clocv3 5.22 5.23 5.24 T:aes128n8t8clocv2 5.26 5.28 5.28 T:aes128n8t8silcv2 5.26 5.28 5.28 T:aes128n12t8silcv3 5.26 5.28 5.28 T:aes128n12t8silcv2 5.58 5.60 5.63 T:lakekeyakv1 5.71 5.72 5.74 T:norx6461v1 6.11 6.12 6.13 T:norx6444v2 6.13 6.16 6.17 T:norx6444v3 6.20 6.21 6.22 T:norx3261v3 6.25 6.26 6.27 T:norx3261v2 6.97 6.98 6.99 T:norx6444v1 7.94 7.96 7.96 T:norx3261v1 8.81 8.83 8.83 T:ascon128av11 8.84 8.85 8.91 ascon128av12 8.88 8.90 8.92 T:ascon96v1 9.02 9.04 9.06 T:lunarkeyakv2 9.32 9.33 9.33 T:acorn128v3 9.32 9.33 9.33 T:acorn128v2 9.79 9.81 9.82 T:ketjemajorv2 9.90 9.91 9.91 T:riverkeyakv2 10.75 10.76 10.76 T:aesjambuv1 12.43 12.44 12.47 T:ketjeminorv2 12.92 12.92 12.93 ascon128v12 12.97 12.99 13.00 T:ascon128v11 12.97 12.99 13.01 T:ascon128v1 14.72 14.74 14.78 T:twine80n6t4clocv3 15.48 15.59 15.60 T:twine80n6t4clocv2 16.22 16.23 16.27 T:aes128otrsv1 16.28 16.30 16.40 T:aes128otrsv2 16.33 16.35 16.35 T:aes128otrpv1 16.34 16.37 16.38 T:aes128otrpv2 20.07 20.10 20.12 T:aes128n12clocv1 20.35 20.35 20.38 T:aes128n8clocv1 20.98 21.00 21.01 T:aes256otrsv2 21.00 21.03 21.07 T:aes256otrsv1 21.41 21.43 21.47 T:aes256otrpv1 21.44 21.47 21.51 T:aes256otrpv2 28.46 28.51 28.66 T:proest256otrv1 30.28 30.47 30.49 T:ketjesrv1 32.05 32.09 32.15 T:ketjesrv2 32.61 32.62 32.68 T:aeadaes128ocbtaglen64v1 32.64 32.70 32.77 T:aeadaes128ocbtaglen96v1 38.76 38.79 38.82 T:aeadaes192ocbtaglen96v1 38.76 38.80 38.85 T:aeadaes192ocbtaglen64v1 44.89 44.92 44.96 T:aeadaes256ocbtaglen96v1 44.91 44.93 44.95 T:aeadaes256ocbtaglen64v1 54.52 54.55 54.58 T:colm127v1 62.79 62.88 63.01 T:proest128otrv1 63.81 63.84 63.91 T:ketjejrv1 72.82 73.20 80.67 T:present80n6t4silcv3 105.62 105.79 107.48 T:deoxysneq128128v13 107.77 107.93 108.06 T:ketjejrv2 119.37 119.43 119.48 T:led80n6t4silcv3 123.47 123.62 123.77 T:aezv1 135.52 136.46 136.96 T:deoxyseq128128v13 154.64 154.95 155.43 T:deoxysneq256128v13 205.01 205.16 206.35 T:deoxyseq256128v13 488.49 488.63 488.93 T:acorn128 4119.13 4119.41 4119.80 T:present80n6t4silcv2 4119.56 4120.06 4120.25 T:present80n6silcv1 6294.15 6296.01 6298.86 T:led80n6silcv1 6296.66 6299.23 6300.29 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 2.17? 2.20? 2.52? T:aegis128l 2.23? 2.35? 2.65? T:aegis128 2.18? 2.37? 2.77? aegis128l 2.61? 2.63? 3.10? aegis256 2.98? 3.24? 3.98? T:tiaoxinv2 3.13? 3.31? 3.72? T:tiaoxinv1 3.74 3.78 4.04 T:aezv5 3.90 3.91 4.13 T:aezv4 4.00 4.04 4.30 T:aezv3 4.75 4.79 5.00 T:morus640128v1 4.95 5.05 5.23 T:morus640128v2 5.04 5.09 5.10 T:aes128otrpv3 5.59 5.62 5.87 T:deoxysneq128128v1 5.30? 5.75? 8.95? T:aeadaes128ocbtaglen128v1 6.14 6.23 6.59 T:morus1280128v1 6.34 6.34 6.40 T:aes128otrsv3 6.33 6.38 6.62 T:morus1280256v1 6.39 6.45 6.91 T:morus1280128v2 5.84? 6.55? 12.34? T:aeadaes192ocbtaglen128v1 6.58 6.61 6.83 T:aeadaes256ocbtaglen128v1 6.59 6.64 6.77 T:deoxysneq256128v1 6.65 6.81 6.91 T:morus1280256v2 6.81 6.93 7.27 T:deoxysi128v141 7.29 7.30 7.32 T:aes256otrpv3 7.37 7.38 7.39 T:aes128n12t8clocv3 7.43 7.48 7.68 T:colm0v1 7.48 7.52 7.83 T:aes128otrcv3 7.39 7.54 7.69 T:aes128n12t8clocv2 7.55 7.59 7.61 T:aes128n8t8clocv2 8.48 8.48 8.49 T:aes128n12t8silcv3 8.48 8.49 8.50 T:aes128n12t8silcv2 8.49 8.50 8.51 T:aes128n8t8silcv2 8.70 8.74 9.02 T:aes256otrsv3 9.91 10.01 10.12 T:deoxysi256v141 10.46 10.48 10.53 T:aes256otrcv3 10.47 10.55 10.68 T:aes128gcmv1 10.61 10.70 10.77 T:norx3241v1 10.63 10.73 10.87 T:norx3241v2 10.73 10.80 10.88 T:norx3241v3 10.91 11.08 11.18 T:norx6441v1 11.32 11.39 11.50 T:norx6441v3 11.35 11.48 11.66 T:deoxyseq128128v1 11.43 11.48 11.91 T:deoxysii128v141 11.52 11.56 11.65 T:norx6441v2 11.50 11.64 12.27 T:deoxyseq256128v1 11.59 11.73 12.55 aes256gcmv1 13.28 13.33 13.57 T:deoxysii256v141 13.58 13.61 13.71 T:ascon128av11 13.55 13.62 13.88 ascon128av12 13.60 13.73 13.95 T:ascon96v1 14.69 14.70 14.76 T:aesjambuv1 15.62 15.69 15.76 T:norx3261v3 15.80 15.91 15.96 T:norx3261v2 16.23 16.34 16.46 T:norx6461v1 16.47 16.60 16.74 T:norx6461v3 16.90 16.99 17.09 T:norx6461v2 16.95 17.02 17.04 T:norx3261v1 17.26 17.34 17.67 ascon128v12 17.18 17.37 18.02 T:ascon128v1 17.18 17.45 18.01 T:ascon128v11 18.77 18.98 19.44 T:lakekeyakv1 21.67 22.10 22.48 T:lakekeyakv2 22.40 22.44 22.48 T:twine80n6t4clocv3 22.75 22.85 22.95 T:riverkeyakv2 22.84 22.93 23.15 T:twine80n6t4clocv2 25.09 25.28 25.70 T:aes128n12clocv1 25.05 25.36 25.60 T:aes128n8clocv1 27.13 27.31 27.55 T:aes128otrsv1 27.23 27.34 27.80 T:aes128otrsv2 27.33 27.44 27.82 T:aes128otrpv1 27.57 27.70 28.02 T:aes128otrpv2 35.07 35.27 35.40 T:aes256otrsv1 35.08 35.34 35.59 T:aes256otrsv2 35.67 35.73 35.97 T:seakeyakv2 35.89 36.05 36.33 T:aes256otrpv1 36.09 36.14 36.33 T:aes256otrpv2 36.45 36.59 36.73 T:acorn128v3 36.94 37.11 37.42 T:acorn128v2 43.46 43.62 43.71 T:norx6444v2 43.90 43.98 44.20 T:norx6444v3 44.06 44.31 44.48 T:aeadaes128ocbtaglen64v1 44.33 44.89 45.53 T:aeadaes128ocbtaglen96v1 46.00 46.09 46.22 T:ketjeminorv2 47.70 47.93 48.13 T:ketjesrv1 49.65 49.90 50.09 T:norx6444v1 51.27 51.55 52.02 T:aeadaes192ocbtaglen96v1 51.72 51.88 52.16 T:aeadaes192ocbtaglen64v1 56.09 56.26 56.37 T:ketjesrv2 56.00 56.27 56.44 T:ketjemajorv2 57.11 57.32 57.56 T:oceankeyakv2 59.48 59.69 60.20 T:aeadaes256ocbtaglen64v1 59.63 59.79 60.34 T:aeadaes256ocbtaglen96v1 66.61 66.71 66.83 T:colm127v1 82.49 82.62 82.86 T:proest256otrv1 84.63 85.38 85.77 T:ketjejrv1 90.14 90.79 96.07 T:present80n6t4silcv3 100.59 100.95 101.15 T:deoxysneq128128v13 122.23 122.79 123.20 T:proest128otrv1 142.19 142.38 142.54 T:led80n6t4silcv3 142.93 143.38 144.12 T:aezv1 144.52 144.90 145.63 T:ketjejrv2 146.00 146.41 146.66 T:lunarkeyakv2 152.78 152.95 153.24 T:deoxysneq256128v13 168.35 170.20 170.63 T:deoxyseq128128v13 254.76 255.20 256.37 T:deoxyseq256128v13 1708.73 1709.55 1711.63 T:acorn128 4610.27 4611.05 4612.52 T:present80n6t4silcv2 4611.99 4613.20 4616.33 T:present80n6silcv1 6860.25 6888.32 6958.16 T:led80n6silcv1 6872.94 6921.12 6970.60 T:led80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 2.16? 2.21? 2.48? T:aegis128l 2.32? 2.42? 2.95? aegis128l 2.26? 2.47? 2.76? T:aegis128 2.78? 2.83? 3.45? aegis256 3.02? 3.11? 3.89? T:tiaoxinv2 3.13 3.23 3.46 T:tiaoxinv1 3.81 3.83 4.02 T:aezv5 3.88 3.89 4.03 T:aezv4 4.06 4.09 4.40 T:aezv3 4.73 4.73 5.00 T:morus640128v1 5.02 5.09 5.26 T:morus640128v2 5.25 5.27 5.30 T:aes128otrpv3 5.82? 6.00? 8.85? T:aeadaes128ocbtaglen128v1 6.23 6.30 6.65 T:morus1280128v1 6.24 6.44 6.80 T:morus1280256v1 6.45 6.55 6.70 T:morus1280128v2 6.66 6.68 6.70 T:aes128otrsv3 6.61? 6.71? 9.29? T:aeadaes192ocbtaglen128v1 6.67 6.78 6.95 T:morus1280256v2 6.98 7.03 7.08 T:aeadaes256ocbtaglen128v1 7.37 7.40 7.61 T:aes128n12t8clocv2 7.45 7.48 7.49 T:aes128n12t8clocv3 7.46 7.48 7.53 T:aes256otrpv3 7.38 7.61 7.66 T:aes128n8t8clocv2 7.86 7.93 8.04 T:aes128otrcv3 8.20 8.27 8.47 T:colm0v1 8.49 8.49 8.52 T:aes128n12t8silcv3 8.49 8.50 8.51 T:aes128n8t8silcv2 8.45 8.52 8.66 T:deoxysneq256128v1 8.49 8.81 8.84 T:aes128n12t8silcv2 8.92 8.95 9.05 T:deoxysneq128128v1 9.44 9.47 9.55 T:aes256otrsv3 10.07 10.16 10.54 T:deoxysi128v141 10.44 10.69 11.13 T:aes128gcmv1 10.67 10.79 10.84 T:norx3241v1 10.83 10.95 11.02 T:norx3241v2 10.79 10.96 11.12 T:norx3241v3 11.18 11.19 11.32 T:aes256otrcv3 11.17 11.23 11.33 T:norx6441v1 11.65 11.74 12.52 aes256gcmv1 11.70 11.77 11.91 T:norx6441v2 11.78 11.92 12.08 T:norx6441v3 12.50 12.54 12.71 T:deoxysii128v141 13.29 13.41 13.83 T:ascon128av11 13.40 13.57 13.93 T:ascon96v1 13.58 13.80 14.27 ascon128av12 13.84 13.91 13.99 T:deoxyseq256128v1 14.45 14.59 15.21 T:deoxysi256v141 14.88 14.91 14.93 T:aesjambuv1 14.88 15.08 15.64 T:deoxysii256v141 15.94 15.96 16.05 T:norx3261v3 16.07 16.12 16.27 T:norx3261v2 16.24 16.42 16.86 T:deoxyseq128128v1 16.39 16.48 16.55 T:norx6461v1 17.09 17.15 17.29 T:norx6461v2 17.06 17.21 17.30 T:norx3261v1 17.22 17.22 17.84 ascon128v12 17.22 17.25 17.58 T:norx6461v3 17.21 17.45 17.65 T:ascon128v11 17.29 17.45 17.55 T:ascon128v1 18.57 18.80 19.00 T:lakekeyakv1 21.77 21.87 22.34 T:lakekeyakv2 22.41 22.48 22.57 T:twine80n6t4clocv3 22.85 22.90 23.09 T:riverkeyakv2 22.99 23.07 23.23 T:twine80n6t4clocv2 24.89 24.95 25.13 T:aes128n12clocv1 24.95 25.08 25.32 T:aes128n8clocv1 27.33 27.40 27.62 T:aes128otrsv1 27.33 27.48 27.65 T:aes128otrsv2 27.52 27.59 27.65 T:aes128otrpv1 27.75 27.87 28.10 T:aes128otrpv2 35.08 35.29 35.88 T:aes256otrsv1 35.38 35.59 35.79 T:aes256otrsv2 35.82 35.93 36.16 T:seakeyakv2 36.12 36.20 36.67 T:aes256otrpv2 36.13 36.31 36.62 T:aes256otrpv1 36.54 36.60 36.77 T:acorn128v2 36.59 36.70 37.03 T:acorn128v3 43.79 44.01 44.14 T:norx6444v2 44.17 44.25 44.51 T:norx6444v3 45.89 46.11 46.22 T:ketjeminorv2 49.02 49.35 49.86 T:ketjesrv1 49.88 49.98 50.11 T:norx6444v1 52.95 53.03 53.20 T:aeadaes128ocbtaglen64v1 53.10 53.53 53.88 T:aeadaes128ocbtaglen96v1 56.22 56.34 57.03 T:ketjemajorv2 56.61 56.88 57.19 T:ketjesrv2 57.51 57.91 58.03 T:oceankeyakv2 61.67 61.86 61.97 T:aeadaes192ocbtaglen64v1 61.73 62.28 62.46 T:aeadaes192ocbtaglen96v1 71.92 72.19 72.37 T:aeadaes256ocbtaglen64v1 72.04 72.38 72.84 T:aeadaes256ocbtaglen96v1 76.17 76.33 76.77 T:colm127v1 83.63 84.11 84.75 T:proest256otrv1 85.45 85.88 87.17 T:ketjejrv1 90.47 91.11 98.43 T:present80n6t4silcv3 117.72 118.42 119.67 T:deoxysneq128128v13 122.48 125.53 125.91 T:proest128otrv1 142.01 142.33 142.85 T:led80n6t4silcv3 144.21 144.77 145.43 T:ketjejrv2 146.51 146.76 147.74 T:aezv1 146.70 146.83 147.22 T:lunarkeyakv2 169.38 170.27 170.91 T:deoxyseq128128v13 171.98 172.24 173.52 T:deoxysneq256128v13 254.88 255.55 256.01 T:deoxyseq256128v13 1717.44 1723.78 1724.23 T:acorn128 4610.88 4611.87 4615.97 T:present80n6t4silcv2 4611.82 4612.80 4616.68 T:present80n6silcv1 6759.84 6782.75 6793.64 T:led80n6silcv1 6773.38 6788.82 6802.63 T:led80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 2.14? 2.16? 2.47? T:aegis128l 2.22 2.25 2.41 T:aegis128 2.82 2.83 2.99 aegis256 2.94 2.95 3.13 T:aezv5 2.98 3.02 3.02 T:aezv4 3.02? 3.11? 3.52? T:tiaoxinv1 3.03? 3.16? 3.83? T:tiaoxinv2 3.19 3.23 3.48 T:aezv3 3.89 3.89 4.12 aegis128l 4.70 4.73 4.88 T:morus640128v1 4.98 5.08 5.10 T:morus640128v2 5.24 5.26 5.37 T:aes128otrpv3 5.88 5.95 6.35 T:aeadaes128ocbtaglen128v1 6.20 6.24 6.42 T:morus1280128v1 6.23 6.27 6.35 T:morus1280256v1 6.44 6.49 6.67 T:morus1280128v2 6.52 6.54 6.60 T:morus1280256v2 6.62? 6.67? 12.00? T:aeadaes192ocbtaglen128v1 6.67 6.69 6.73 T:aes128otrsv3 7.00 7.05 7.09 T:aeadaes256ocbtaglen128v1 7.30 7.33 7.70 T:aes128n8t8clocv2 7.35 7.37 7.66 T:aes128n12t8clocv3 7.48 7.50 7.53 T:aes256otrpv3 7.30 7.62 7.66 T:aes128n12t8clocv2 7.81 7.84 7.95 T:aes128otrcv3 8.23 8.24 8.48 T:colm0v1 8.22 8.30 8.55 T:deoxysneq256128v1 8.42 8.43 8.43 T:aes128n12t8silcv3 8.43 8.44 8.73 T:aes128n8t8silcv2 8.61 8.66 8.91 T:deoxysneq128128v1 8.43 8.73 8.77 T:aes128n12t8silcv2 9.47 9.48 9.55 T:aes256otrsv3 10.09 10.38 10.49 T:deoxysi128v141 10.40 10.46 10.80 T:aes128gcmv1 10.82 10.83 10.98 T:norx3241v2 10.79 10.88 10.98 T:norx3241v3 10.80 10.92 10.93 T:norx3241v1 11.00 11.17 11.30 T:norx6441v1 11.16 11.19 11.23 T:aes256otrcv3 11.63 11.79 11.86 T:norx6441v2 11.69 11.88 11.95 aes256gcmv1 11.83 11.96 12.08 T:norx6441v3 12.48 12.51 12.59 T:deoxysii128v141 13.24 13.34 13.54 T:ascon128av11 13.38 13.51 13.98 T:ascon96v1 13.61 13.66 13.82 ascon128av12 13.89 13.98 14.03 T:deoxyseq256128v1 14.39 14.50 14.73 T:deoxysi256v141 14.87 14.88 14.90 T:aesjambuv1 14.89 14.95 15.43 T:deoxysii256v141 15.69 15.80 15.88 T:norx3261v3 15.92 15.96 16.15 T:norx3261v2 16.27 16.32 16.84 T:deoxyseq128128v1 16.45 16.62 16.70 T:norx6461v1 16.93 17.09 17.27 T:norx6461v2 17.12 17.16 17.22 T:norx3261v1 17.12 17.27 17.50 T:ascon128v1 17.22 17.27 17.45 ascon128v12 17.19 17.30 17.39 T:norx6461v3 17.23 17.33 17.76 T:ascon128v11 18.59 18.64 18.86 T:lakekeyakv1 21.70 21.80 22.48 T:lakekeyakv2 22.37 22.38 22.44 T:twine80n6t4clocv3 22.93 23.02 23.29 T:riverkeyakv2 22.88 23.05 23.15 T:twine80n6t4clocv2 24.80 25.02 25.85 T:aes128n12clocv1 24.92 25.03 25.38 T:aes128n8clocv1 27.40 27.52 27.86 T:aes128otrsv2 27.44 27.58 27.82 T:aes128otrsv1 27.57 27.78 27.98 T:aes128otrpv1 27.86 27.95 28.20 T:aes128otrpv2 35.17 35.41 35.66 T:aes256otrsv1 35.41 35.55 35.65 T:aes256otrsv2 35.86 35.94 36.12 T:seakeyakv2 36.19 36.30 36.57 T:aes256otrpv2 36.21 36.34 36.49 T:aes256otrpv1 36.62 36.64 36.69 T:acorn128v3 36.57 36.67 36.73 T:acorn128v2 43.73 43.90 44.11 T:norx6444v2 44.14 44.37 44.51 T:norx6444v3 47.44 47.62 47.94 T:ketjeminorv2 48.92 49.40 49.80 T:ketjesrv1 49.81 50.08 50.35 T:norx6444v1 52.97 53.09 53.21 T:aeadaes128ocbtaglen64v1 53.16 53.23 53.45 T:aeadaes128ocbtaglen96v1 56.38 56.60 56.70 T:ketjemajorv2 56.59 56.89 57.02 T:ketjesrv2 57.51 57.73 57.92 T:oceankeyakv2 61.56 61.68 61.91 T:aeadaes192ocbtaglen64v1 61.68 61.99 62.17 T:aeadaes192ocbtaglen96v1 71.63 71.94 72.15 T:aeadaes256ocbtaglen64v1 72.05 72.21 72.46 T:aeadaes256ocbtaglen96v1 75.92 76.06 76.28 T:colm127v1 81.02 81.17 81.71 T:proest256otrv1 85.84 86.24 86.67 T:ketjejrv1 90.21 90.88 99.03 T:present80n6t4silcv3 117.93 118.16 119.45 T:deoxysneq128128v13 122.32 122.55 122.63 T:proest128otrv1 142.05 142.18 142.46 T:led80n6t4silcv3 143.73 144.37 145.05 T:ketjejrv2 146.55 146.71 146.84 T:lunarkeyakv2 146.35 146.78 147.46 T:aezv1 168.84 170.70 171.27 T:deoxyseq128128v13 171.79 172.22 172.67 T:deoxysneq256128v13 255.20 255.47 256.15 T:deoxyseq256128v13 1716.93 1718.16 1724.30 T:acorn128 4610.68 4611.40 4613.17 T:present80n6t4silcv2 4611.55 4611.92 4613.77 T:present80n6silcv1 6738.99 6771.73 6798.22 T:led80n6silcv1 6762.42 6776.47 6804.31 T:led80n6t4silcv2