VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20240909

[Page version: 20240912 11:46:28]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.33? 0.35? 0.38? T:tiaoxinv2 0.31? 0.36? 0.38? T:tiaoxinv1 0.37 0.39 0.39 T:aegis128l 0.41 0.42 0.44 aegis128l 0.61 0.62 0.63 T:aegis128 0.60 0.62 0.62 aegis256 0.75? 0.83? 0.90? T:aeadaes128ocbtaglen128v1 0.86 0.86 0.87 T:aes128otrsv3 0.87 0.88 0.91 T:aes128otrcv3 0.88 0.89 0.91 T:aes128otrpv3 0.63? 0.93? 1.08? T:aeadaes192ocbtaglen128v1 0.92 0.93 0.95 T:aezv4 0.95 0.96 0.97 T:morus1280128v2 0.97 0.97 0.98 T:aezv3 0.96 0.98 0.99 T:morus1280256v2 0.97 0.99 1.00 T:morus1280256v1 1.01 1.02 1.05 T:aezv5 1.09 1.10 1.11 T:aes256otrsv3 1.10 1.11 1.14 T:aes256otrcv3 1.12 1.13 1.14 T:morus640128v2 1.11 1.13 1.15 T:aes256otrpv3 1.12 1.13 1.15 T:morus640128v1 1.26 1.28 1.31 T:deoxysneq128128v1 1.28 1.31 1.33 T:deoxysi128v141 1.49 1.51 1.53 T:deoxysneq256128v1 1.47 1.52 1.55 T:deoxysi256v141 1.66 1.78 1.81 T:aeadaes256ocbtaglen128v1 2.06 2.11 2.15 T:morus1280128v1 2.32 2.43 2.55 T:lunarkeyakv2 2.48 2.50 2.52 T:colm0v1 2.40? 2.55? 2.77? T:aes128gcmv1 2.76 2.77 2.79 T:norx6441v2 2.79 2.82 2.85 T:norx6441v3 2.80 2.89 2.97 T:deoxysii128v141 2.75 2.89 3.05 T:aes256gcmv1 2.89 3.04 3.11 T:deoxyseq128128v1 3.12 3.15 3.21 T:seakeyakv2 3.16 3.25 3.35 T:oceankeyakv2 3.30 3.32 3.33 T:norx6441v1 3.27 3.37 3.45 T:deoxysii256v141 3.44 3.52 3.79 T:deoxyseq256128v1 3.82 3.85 3.87 T:norx3241v3 3.86 3.88 3.89 T:norx3241v2 4.16 4.18 4.21 T:norx6461v2 4.19 4.22 4.24 T:norx6461v3 4.57 4.61 4.64 T:norx6444v3 4.61 4.64 4.66 T:norx6444v2 4.63 4.65 4.66 T:norx3241v1 4.98 5.01 5.04 T:norx6461v1 5.20 5.21 5.23 T:aes128n8t8clocv2 5.21 5.21 5.22 T:aes128n12t8silcv3 5.21 5.21 5.22 T:aes128n12t8clocv2 5.21 5.21 5.22 T:aes128n12t8silcv2 5.21 5.21 5.22 T:aes128n8t8silcv2 5.21 5.22 5.22 T:aes128n12t8clocv3 5.53 5.55 5.59 T:norx6444v1 5.41? 5.61? 6.42? T:lakekeyakv2 5.59 5.65 5.74 T:lakekeyakv1 5.91 5.94 5.96 T:norx3261v3 5.93 5.95 5.98 T:norx3261v2 7.66 7.67 7.69 T:norx3261v1 9.69 9.72 9.75 T:ascon96v1 9.79 9.83 9.85 T:ascon128av11 10.10 10.14 10.17 ascon128av12 10.14 10.26 10.34 T:ketjemajorv2 10.36 10.37 10.38 T:aesjambuv1 13.17 13.21 13.25 T:riverkeyakv2 13.60 13.65 13.67 T:ketjeminorv2 14.48 14.50 14.51 T:ascon128v1 14.49 14.50 14.52 T:ascon128v11 15.03 15.06 15.10 ascon128v12 15.73 15.74 15.76 T:twine80n6t4clocv2 16.28 16.29 16.33 T:twine80n6t4clocv3 18.47 18.63 18.76 T:oceankeyakv1 19.27 19.31 19.37 T:aes128otrpv2 19.33 19.39 19.50 T:aes128otrsv2 19.43 19.47 19.51 T:aes128otrpv1 19.52 19.55 19.60 T:aes128otrsv1 24.38 24.43 24.51 T:aes256otrsv2 24.38 24.43 24.48 T:aes256otrpv2 24.61 24.68 24.71 T:aes256otrpv1 24.68 24.76 24.80 T:aes256otrsv1 24.59 25.40 26.78 T:seakeyakv1 30.32 30.37 30.44 T:proest256otrv1 31.02 31.05 31.12 T:aes128n12clocv1 31.07 31.12 31.22 T:aes128n8clocv1 34.73 34.80 34.84 T:aes128n12silcv1 34.72 34.84 35.73 T:aes128n8silcv1 37.62 37.70 37.75 T:ketjesrv1 40.12 40.21 40.25 T:ketjesrv2 44.25 44.29 44.36 T:riverkeyakv1 65.48 67.51 68.90 T:proest128otrv1 78.85 78.91 78.95 T:present80n6t4silcv3 80.20 80.35 80.47 T:ketjejrv1 87.43 88.95 89.40 T:deoxysneq128128v13 116.20 116.27 116.30 T:led80n6t4silcv3 126.49 128.17 128.27 T:ketjejrv2 137.22 137.30 137.38 T:deoxysneq256128v13 160.02 160.30 160.46 T:twine80n6clocv1 177.37 177.65 177.84 T:deoxyseq128128v13 203.39 204.46 204.84 T:aezv1 277.70 278.60 280.53 T:deoxyseq256128v13 376.44 376.99 377.24 aes256gcmv1 484.69 484.95 485.15 T:acorn128v3 492.29 493.68 507.31 T:acorn128 489.68 504.42 506.93 T:acorn128v2 6902.60 6911.94 6913.87 T:present80n6silcv1 6925.12 6927.32 6931.55 T:present80n6t4silcv2 8428.02 8438.99 8494.54 T:led80n6silcv1 8440.49 8453.14 8479.99 T:led80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.37 0.39 0.41 T:aegis128l 0.38? 0.41? 0.43? aegis128l 0.44 0.45 0.47 T:tiaoxinv2 0.44 0.45 0.47 T:tiaoxinv1 0.62 0.63 0.64 T:aegis128 0.64 0.65 0.66 aegis256 0.71? 0.83? 0.90? T:aeadaes128ocbtaglen128v1 0.87 0.88 0.89 T:aes128otrcv3 0.88 0.89 0.90 T:aes128otrsv3 0.88 0.90 0.93 T:aes128otrpv3 0.93 0.95 0.98 T:aezv4 0.89? 0.95? 1.04? T:aeadaes192ocbtaglen128v1 0.94 0.95 0.97 T:morus1280128v2 0.95 0.96 0.97 T:morus1280256v1 0.95 0.96 0.97 T:morus1280256v2 0.97 0.98 1.00 T:aezv3 1.02 1.04 1.06 T:aezv5 1.10 1.11 1.12 T:aes256otrpv3 1.10 1.12 1.13 T:aes256otrsv3 1.11 1.12 1.15 T:aes256otrcv3 1.14 1.14 1.16 T:morus640128v1 1.14 1.15 1.16 T:morus640128v2 1.50 1.55 1.63 T:deoxysi128v141 1.56 1.60 1.61 T:deoxysneq128128v1 1.69 1.77 1.87 T:aeadaes256ocbtaglen128v1 1.74 1.80 1.83 T:deoxysi256v141 1.81 1.83 1.89 T:deoxysneq256128v1 2.04 2.10 2.13 T:morus1280128v1 2.45 2.48 2.50 T:colm0v1 2.39? 2.53? 2.82? T:aes128gcmv1 2.40 2.53 2.66 T:lunarkeyakv2 2.75 2.77 2.80 T:norx6441v2 2.79 2.81 2.84 T:norx6441v3 2.72 2.88 3.02 T:aes256gcmv1 2.86 2.93 2.95 T:deoxysii128v141 3.16 3.21 3.24 T:seakeyakv2 3.16 3.24 3.27 T:deoxysii256v141 3.31 3.35 3.39 T:oceankeyakv2 3.36 3.41 3.43 T:norx6441v1 3.40 3.48 3.53 T:deoxyseq128128v1 3.77 3.79 3.80 T:norx3241v2 3.80 3.81 3.83 T:norx3241v3 4.06 4.09 4.14 T:norx6461v2 4.02 4.15 4.30 T:deoxyseq256128v1 4.16 4.20 4.23 T:norx6461v3 4.53 4.55 4.57 T:norx3241v1 4.56 4.60 4.64 T:norx6444v2 4.58 4.64 4.68 T:norx6444v3 5.11 5.12 5.14 T:aes128n8t8silcv2 5.12 5.14 5.16 T:aes128n8t8clocv2 5.12 5.14 5.14 T:aes128n12t8silcv2 5.11 5.14 5.15 T:aes128n12t8clocv3 5.12 5.15 5.15 T:aes128n12t8clocv2 5.12 5.15 5.15 T:aes128n12t8silcv3 5.14 5.17 5.18 T:norx6461v1 5.37 5.41 5.45 T:lakekeyakv1 5.51 5.56 5.58 T:norx6444v1 5.49 5.66 5.75 T:lakekeyakv2 5.85 5.88 5.91 T:norx3261v3 5.86 5.89 5.91 T:norx3261v2 7.51 7.53 7.54 T:norx3261v1 9.89 9.91 9.93 T:ascon96v1 9.90 9.94 9.95 T:ascon128av11 10.01 10.04 10.06 ascon128av12 10.26 10.32 10.37 T:ketjemajorv2 10.70 10.70 10.71 T:aesjambuv1 12.50 12.54 12.60 T:ketjeminorv2 13.35 13.40 13.47 T:riverkeyakv2 14.97 14.99 15.03 T:ascon128v1 14.97 15.00 15.03 T:ascon128v11 14.97 15.00 15.02 ascon128v12 15.35 15.39 15.42 T:twine80n6t4clocv2 16.22 16.27 16.32 T:twine80n6t4clocv3 18.75 18.87 18.96 T:oceankeyakv1 18.92 18.96 18.99 T:aes128otrpv2 18.93 19.03 19.10 T:aes128otrsv2 19.06 19.10 19.13 T:aes128otrpv1 19.07 19.11 19.16 T:aes128otrsv1 24.00 24.04 24.07 T:aes256otrpv2 24.03 24.05 24.14 T:aes256otrsv2 24.27 24.30 24.35 T:aes256otrpv1 24.27 24.31 24.38 T:aes256otrsv1 24.77 25.51 26.91 T:seakeyakv1 30.06 30.07 30.11 T:proest256otrv1 30.47 30.52 30.58 T:aes128n12clocv1 30.86 30.91 30.96 T:aes128n8clocv1 34.79 34.85 34.90 T:aes128n12silcv1 34.78 34.87 35.80 T:aes128n8silcv1 38.47 38.64 39.33 T:ketjesrv1 42.29 42.52 42.69 T:ketjesrv2 44.52 44.60 44.69 T:riverkeyakv1 64.01 64.26 67.12 T:proest128otrv1 79.65 79.70 79.86 T:present80n6t4silcv3 80.85 81.01 81.17 T:ketjejrv1 116.99 117.05 117.18 T:led80n6t4silcv3 123.88 124.00 124.46 T:deoxysneq128128v13 124.19 124.34 124.71 T:ketjejrv2 159.94 160.13 160.75 T:twine80n6clocv1 176.58 177.00 177.68 T:deoxysneq256128v13 177.62 177.74 177.95 T:deoxyseq128128v13 203.67 205.14 205.66 T:aezv1 277.84 278.79 280.85 T:deoxyseq256128v13 375.80 376.13 376.33 aes256gcmv1 481.84 489.26 500.52 T:acorn128 489.14 489.48 489.72 T:acorn128v3 486.00 490.17 499.08 T:acorn128v2 6910.06 6916.09 6920.47 T:present80n6silcv1 6915.46 6917.06 6918.78 T:present80n6t4silcv2 8423.59 8436.08 8617.59 T:led80n6silcv1 8463.12 8486.56 8490.08 T:led80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.35 0.36 0.38 T:aezv4 0.36 0.37 0.39 T:aezv3 0.37 0.38 0.40 T:aezv5 0.39 0.39 0.41 T:aegis128l 0.44 0.45 0.47 T:tiaoxinv1 0.44 0.45 0.47 T:tiaoxinv2 0.46? 0.49? 0.52? aegis128l 0.62 0.63 0.64 T:aegis128 0.63 0.64 0.65 aegis256 0.77? 0.83? 0.87? T:aeadaes128ocbtaglen128v1 0.87 0.88 0.88 T:aes128otrcv3 0.87 0.88 0.90 T:aes128otrsv3 0.88 0.90 0.93 T:aes128otrpv3 0.94 0.95 0.97 T:morus1280128v2 0.95 0.96 0.97 T:morus1280256v1 0.96 0.96 0.97 T:morus1280256v2 0.88? 0.98? 1.27? T:aeadaes192ocbtaglen128v1 1.09 1.10 1.11 T:aes256otrsv3 1.10 1.11 1.12 T:aes256otrpv3 1.10 1.11 1.13 T:aes256otrcv3 1.14 1.15 1.15 T:morus640128v1 1.15 1.15 1.16 T:morus640128v2 1.48 1.52 1.55 T:deoxysi128v141 1.55 1.58 1.60 T:deoxysneq128128v1 1.46? 1.77? 2.07? T:aeadaes256ocbtaglen128v1 1.74 1.80 1.82 T:deoxysi256v141 1.83 1.84 1.88 T:deoxysneq256128v1 2.00 2.10 2.12 T:morus1280128v1 2.43 2.49 2.53 T:colm0v1 2.43 2.56 2.70 T:aes128gcmv1 2.45? 2.63? 2.73? T:lunarkeyakv2 2.75 2.77 2.79 T:norx6441v2 2.81 2.82 2.84 T:norx6441v3 2.76 2.88 3.01 T:aes256gcmv1 2.86 2.96 2.98 T:deoxysii128v141 3.18 3.24 3.28 T:deoxysii256v141 3.23 3.26 3.29 T:seakeyakv2 3.35 3.39 3.43 T:oceankeyakv2 3.38 3.40 3.42 T:norx6441v1 3.40 3.46 3.50 T:deoxyseq128128v1 3.77 3.79 3.81 T:norx3241v2 3.80 3.82 3.85 T:norx3241v3 4.07 4.08 4.12 T:norx6461v2 4.09 4.14 4.25 T:deoxyseq256128v1 4.17 4.19 4.20 T:norx6461v3 4.54 4.56 4.58 T:norx3241v1 4.62 4.64 4.69 T:norx6444v2 4.62 4.65 4.71 T:norx6444v3 5.10 5.12 5.15 T:aes128n8t8silcv2 5.10 5.13 5.15 T:aes128n12t8clocv3 5.11 5.13 5.14 T:aes128n8t8clocv2 5.10 5.14 5.15 T:aes128n12t8silcv3 5.12 5.14 5.15 T:aes128n12t8clocv2 5.12 5.14 5.15 T:aes128n12t8silcv2 5.14 5.16 5.17 T:norx6461v1 5.42 5.43 5.46 T:lakekeyakv1 5.58 5.61 5.65 T:norx6444v1 5.49 5.67 5.80 T:lakekeyakv2 5.85 5.86 5.90 T:norx3261v3 5.86 5.89 5.90 T:norx3261v2 7.51 7.52 7.53 T:norx3261v1 9.88 9.90 9.93 T:ascon96v1 9.90 9.92 9.95 T:ascon128av11 10.02 10.05 10.09 ascon128av12 10.30 10.34 10.42 T:ketjemajorv2 10.69 10.70 10.71 T:aesjambuv1 12.59 12.64 12.69 T:ketjeminorv2 13.40 13.45 13.49 T:riverkeyakv2 14.94 14.97 15.03 T:ascon128v11 14.97 14.99 15.02 ascon128v12 14.98 14.99 15.02 T:ascon128v1 15.37 15.38 15.41 T:twine80n6t4clocv2 16.23 16.28 16.30 T:twine80n6t4clocv3 18.87 18.92 19.00 T:oceankeyakv1 18.97 19.00 19.04 T:aes128otrpv2 18.98 19.05 19.12 T:aes128otrsv2 19.12 19.15 19.19 T:aes128otrsv1 19.11 19.16 19.18 T:aes128otrpv1 24.03 24.07 24.12 T:aes256otrsv2 24.05 24.09 24.17 T:aes256otrpv2 24.32 24.34 24.42 T:aes256otrpv1 24.32 24.39 24.44 T:aes256otrsv1 24.78 25.52 26.91 T:seakeyakv1 30.09 30.12 30.17 T:proest256otrv1 30.47 30.52 30.59 T:aes128n12clocv1 30.89 30.97 31.08 T:aes128n8clocv1 34.81 34.84 34.93 T:aes128n12silcv1 34.75 34.87 35.81 T:aes128n8silcv1 38.51 38.68 39.38 T:ketjesrv1 42.52 42.59 42.77 T:ketjesrv2 44.59 44.64 44.67 T:riverkeyakv1 64.00 64.32 67.12 T:proest128otrv1 79.64 79.67 79.74 T:present80n6t4silcv3 80.88 81.04 81.14 T:ketjejrv1 116.98 117.07 117.15 T:led80n6t4silcv3 123.94 124.04 124.45 T:deoxysneq128128v13 124.26 124.48 124.94 T:ketjejrv2 160.01 160.24 160.72 T:twine80n6clocv1 176.82 177.04 177.69 T:deoxysneq256128v13 177.53 177.82 178.19 T:deoxyseq128128v13 203.64 204.84 205.30 T:aezv1 278.13 278.74 280.82 T:deoxyseq256128v13 365.32 365.61 365.87 aes256gcmv1 489.04 489.37 489.70 T:acorn128v3 481.44 489.40 500.42 T:acorn128 486.01 490.04 499.44 T:acorn128v2 6910.59 6914.85 6919.03 T:present80n6silcv1 6915.39 6916.86 6917.95 T:present80n6t4silcv2 8424.06 8436.96 8608.61 T:led80n6silcv1 8464.81 8478.51 8487.45 T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.28? 0.30? 0.33? T:tiaoxinv1 0.28? 0.31? 0.33? T:tiaoxinv2 0.31? 0.33? 0.36? T:aegis128l 0.33? 0.36? 0.37? aegis128l 0.56 0.58 0.59 aegis256 0.57 0.59 0.60 T:aegis128 0.65 0.68 0.69 T:aezv4 0.68 0.70 0.71 T:aezv3 0.69 0.72 0.74 T:aezv5 0.73? 0.81? 0.87? T:aeadaes128ocbtaglen128v1 0.88 0.89 0.90 T:aes128otrcv3 0.91 0.93 0.94 T:morus1280256v1 0.92 0.93 0.94 T:morus1280128v2 0.77? 0.93? 1.08? T:aeadaes192ocbtaglen128v1 0.92 0.93 0.94 T:morus1280256v2 0.95 0.97 0.98 T:aes128otrpv3 1.08 1.09 1.10 T:morus640128v1 1.09 1.10 1.11 T:morus640128v2 1.11 1.13 1.15 T:aes256otrcv3 1.22 1.24 1.26 T:aes256otrpv3 1.29 1.34 1.37 T:deoxysi128v141 1.32 1.34 1.37 T:deoxysneq128128v1 1.55 1.57 1.61 T:deoxysneq256128v1 1.55 1.59 1.62 T:deoxysi256v141 1.53? 1.69? 1.84? T:aeadaes256ocbtaglen128v1 1.78 1.81 1.82 T:colm0v1 2.01 2.03 2.05 T:morus1280128v1 2.10 2.20 2.30 T:aes128gcmv1 2.28 2.31 2.34 T:deoxyseq128128v1 2.24 2.33 2.43 T:aes256gcmv1 2.30 2.34 2.37 T:deoxysii128v141 2.66 2.68 2.69 T:seakeyakv2 2.60 2.69 2.71 T:deoxysii256v141 2.68 2.73 2.77 T:oceankeyakv2 2.76 2.77 2.78 T:norx6441v2 2.72 2.79 2.85 T:deoxyseq256128v1 2.81 2.83 2.84 T:norx6441v3 2.99 2.99 3.00 T:aes128otrsv3 3.25 3.33 3.39 T:lunarkeyakv2 3.35 3.37 3.38 T:norx6441v1 3.85 3.86 3.87 T:norx3241v3 3.87 3.88 3.89 T:norx3241v2 4.10 4.11 4.11 T:aes256otrsv3 4.18 4.18 4.20 T:norx6461v2 4.23 4.24 4.25 T:norx6461v3 4.54 4.58 4.59 T:norx6444v3 4.56 4.58 4.61 T:norx6444v2 4.65 4.66 4.68 T:norx3241v1 4.86? 4.95? 5.51? T:lakekeyakv2 5.03 5.05 5.06 T:norx6461v1 5.17 5.17 5.17 T:aes128n12t8clocv2 5.17 5.17 5.17 T:aes128n8t8silcv2 5.17 5.17 5.17 T:aes128n12t8silcv3 5.16 5.17 5.17 T:aes128n12t8clocv3 5.17 5.17 5.17 T:aes128n12t8silcv2 5.17 5.17 5.18 T:aes128n8t8clocv2 5.31 5.35 5.38 T:lakekeyakv1 5.48 5.51 5.52 T:norx6444v1 5.90 5.91 5.92 T:norx3261v2 5.93 5.94 5.95 T:norx3261v3 7.68 7.69 7.71 T:norx3261v1 8.64 8.70 8.85 T:ketjemajorv2 9.51 9.54 9.56 T:riverkeyakv2 9.75 9.77 9.80 T:ascon96v1 9.80 9.82 9.83 T:ascon128av11 10.01 10.03 10.06 ascon128av12 10.39 10.40 10.40 T:aesjambuv1 11.98 12.02 12.04 T:ketjeminorv2 14.56 14.58 14.59 T:ascon128v11 14.57 14.59 14.60 T:ascon128v1 14.88 14.90 14.93 ascon128v12 15.42 15.44 15.46 T:twine80n6t4clocv2 16.11 16.13 16.16 T:twine80n6t4clocv3 17.40 17.44 17.55 T:aes128otrsv2 17.57 17.58 17.62 T:aes128otrsv1 18.44 18.54 18.70 T:oceankeyakv1 19.35 19.40 19.42 T:aes128otrpv2 19.47 19.51 19.54 T:aes128otrpv1 22.46 22.50 22.52 T:aes256otrsv2 22.74 22.78 22.82 T:aes256otrsv1 23.43 23.48 23.53 T:aes128n12clocv1 23.48 23.54 23.59 T:aes128n8clocv1 24.47 24.51 24.52 T:aes256otrpv2 24.69 24.73 24.78 T:aes256otrpv1 24.77 25.21 26.27 T:seakeyakv1 25.40 25.42 25.45 T:aes128n12silcv1 25.40 25.56 25.89 T:aes128n8silcv1 30.55 30.58 30.62 T:proest256otrv1 34.99 35.05 35.09 T:ketjesrv1 37.75 37.78 37.84 T:ketjesrv2 41.92 41.98 42.00 T:riverkeyakv1 63.54 64.35 66.22 T:proest128otrv1 75.66 75.74 75.85 T:ketjejrv1 78.72 78.74 78.77 T:present80n6t4silcv3 87.40 88.62 88.91 T:deoxysneq128128v13 116.01 116.07 116.11 T:led80n6t4silcv3 119.76 119.85 119.92 T:twine80n6clocv1 121.03 121.87 122.19 T:ketjejrv2 132.26 132.39 132.70 T:deoxyseq128128v13 133.70 134.70 135.61 T:aezv1 137.20 137.27 137.43 T:deoxysneq256128v13 207.75 208.09 209.45 T:deoxyseq256128v13 370.59 371.20 371.56 aes256gcmv1 483.46 483.61 483.80 T:acorn128v3 487.73 489.34 499.80 T:acorn128 486.03 498.52 500.09 T:acorn128v2 5183.48 5188.38 5192.00 T:present80n6silcv1 5179.49 5190.50 5192.49 T:present80n6t4silcv2 6333.14 6339.85 6411.01 T:led80n6t4silcv2 6353.57 6372.28 6375.43 T:led80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.32? 0.34? 0.36? T:aegis128l 0.33? 0.35? 0.38? T:tiaoxinv1 0.33? 0.35? 0.38? T:tiaoxinv2 0.33? 0.36? 0.37? aegis128l 0.59 0.60 0.61 T:aegis128 0.58 0.60 0.61 aegis256 0.66 0.68 0.70 T:aezv4 0.69 0.70 0.71 T:aezv3 0.71 0.73 0.74 T:aezv5 0.71? 0.81? 0.90? T:aeadaes128ocbtaglen128v1 0.87 0.87 0.88 T:aes128otrcv3 0.90 0.91 0.91 T:morus1280256v2 0.89 0.91 0.92 T:morus1280256v1 0.90 0.93 0.95 T:morus1280128v2 0.77? 0.94? 1.09? T:aeadaes192ocbtaglen128v1 0.95 0.96 0.98 T:aes128otrpv3 1.09 1.10 1.12 T:morus640128v1 1.10 1.11 1.12 T:morus640128v2 1.09 1.11 1.15 T:aes256otrcv3 1.22 1.23 1.26 T:aes256otrpv3 1.47 1.51 1.55 T:deoxysneq128128v1 1.46 1.52 1.57 T:deoxysi128v141 1.55? 1.68? 1.84? T:aeadaes256ocbtaglen128v1 1.69 1.76 1.79 T:deoxysneq256128v1 1.73 1.78 1.81 T:deoxysi256v141 1.78 1.80 1.81 T:colm0v1 2.01 2.05 2.08 T:morus1280128v1 2.13 2.20 2.30 T:aes128gcmv1 2.25 2.34 2.45 T:aes256gcmv1 2.27 2.35 2.36 T:deoxysii128v141 2.45 2.49 2.53 T:deoxyseq128128v1 2.58 2.64 2.69 T:deoxysii256v141 2.70 2.72 2.74 T:seakeyakv2 2.77 2.78 2.79 T:norx6441v2 2.76 2.80 2.85 T:oceankeyakv2 2.78 2.80 2.81 T:norx6441v3 3.00 3.01 3.01 T:aes128otrsv3 3.03 3.05 3.08 T:deoxyseq256128v1 3.31 3.37 3.44 T:lunarkeyakv2 3.35 3.37 3.39 T:norx6441v1 3.83 3.84 3.86 T:norx3241v2 3.83 3.85 3.86 T:norx3241v3 4.11 4.11 4.12 T:aes256otrsv3 4.14 4.16 4.18 T:norx6461v2 4.19 4.22 4.24 T:norx6461v3 4.53 4.56 4.58 T:norx6444v2 4.54 4.56 4.58 T:norx6444v3 4.60 4.61 4.63 T:norx3241v1 4.89 4.96 5.25 T:lakekeyakv2 5.08 5.10 5.12 T:norx6461v1 5.12 5.12 5.14 T:aes128n8t8silcv2 5.12 5.12 5.14 T:aes128n12t8clocv2 5.12 5.13 5.14 T:aes128n12t8silcv3 5.12 5.13 5.15 T:aes128n12t8clocv3 5.12 5.13 5.13 T:aes128n12t8silcv2 5.13 5.14 5.15 T:aes128n8t8clocv2 5.17 5.20 5.23 T:lakekeyakv1 5.48 5.51 5.54 T:norx6444v1 5.86 5.88 5.91 T:norx3261v3 5.87 5.89 5.90 T:norx3261v2 7.60 7.62 7.63 T:norx3261v1 8.68 8.74 8.79 T:ketjemajorv2 9.58 9.60 9.64 T:riverkeyakv2 9.82 9.85 9.88 T:ascon128av11 9.89 9.90 9.92 T:ascon96v1 9.99 10.00 10.03 ascon128av12 10.56 10.57 10.57 T:aesjambuv1 11.43 11.48 11.51 T:ketjeminorv2 14.74 14.77 14.80 T:ascon128v11 14.76 14.78 14.80 T:ascon128v1 14.90 14.92 14.93 ascon128v12 15.25 15.27 15.31 T:twine80n6t4clocv2 16.08 16.10 16.13 T:twine80n6t4clocv3 17.18 17.22 17.32 T:aes128otrsv2 17.33 17.36 17.39 T:aes128otrsv1 18.53 18.63 18.70 T:oceankeyakv1 19.19 19.23 19.43 T:aes128otrpv2 19.33 19.35 19.37 T:aes128otrpv1 22.26 22.30 22.33 T:aes256otrsv2 22.54 22.57 22.62 T:aes256otrsv1 23.24 23.29 23.45 T:aes128n12clocv1 23.43 23.48 23.50 T:aes128n8clocv1 24.27 24.30 24.33 T:aes256otrpv2 24.53 24.56 24.62 T:aes256otrpv1 24.87 25.26 26.32 T:seakeyakv1 25.47 25.61 26.05 T:aes128n12silcv1 25.55 25.96 26.02 T:aes128n8silcv1 30.43 30.45 30.53 T:proest256otrv1 35.45 35.58 35.84 T:ketjesrv1 38.83 38.92 39.05 T:ketjesrv2 42.08 42.15 42.19 T:riverkeyakv1 62.65 63.89 64.19 T:proest128otrv1 76.08 76.18 76.26 T:ketjejrv1 79.10 79.13 79.17 T:present80n6t4silcv3 105.60 106.66 106.93 T:deoxysneq128128v13 116.42 116.49 116.56 T:led80n6t4silcv3 119.73 119.80 120.16 T:twine80n6clocv1 119.54 119.82 119.97 T:ketjejrv2 132.14 132.26 132.47 T:deoxyseq128128v13 134.11 135.17 136.40 T:aezv1 157.20 157.46 157.70 T:deoxysneq256128v13 207.74 208.03 209.55 T:deoxyseq256128v13 370.41 370.68 370.98 aes256gcmv1 485.52 485.85 486.19 T:acorn128v3 484.57 486.02 496.32 T:acorn128 485.23 488.36 496.40 T:acorn128v2 5181.24 5185.90 5188.94 T:present80n6silcv1 5178.13 5186.07 5187.74 T:present80n6t4silcv2 6350.84 6377.94 6410.34 T:led80n6silcv1 6342.68 6409.30 6414.79 T:led80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.32 0.34 0.35 T:aegis128l 0.32? 0.35? 0.37? T:tiaoxinv2 0.33? 0.35? 0.37? T:tiaoxinv1 0.38 0.39 0.40 T:aezv4 0.37 0.39 0.40 aegis128l 0.38 0.40 0.41 T:aezv3 0.39 0.40 0.41 T:aezv5 0.59 0.60 0.60 aegis256 0.59 0.60 0.61 T:aegis128 0.76? 0.81? 0.85? T:aeadaes128ocbtaglen128v1 0.87 0.87 0.88 T:aes128otrcv3 0.89 0.90 0.91 T:morus1280256v1 0.91 0.91 0.91 T:morus1280256v2 0.91 0.93 0.93 T:morus1280128v2 0.91 0.94 0.97 T:aeadaes192ocbtaglen128v1 0.95 0.96 0.98 T:aes128otrpv3 1.10 1.11 1.11 T:morus640128v1 1.11 1.11 1.12 T:morus640128v2 1.10 1.12 1.14 T:aes256otrcv3 1.21 1.22 1.23 T:aes256otrpv3 1.46 1.50 1.51 T:deoxysi128v141 1.48 1.51 1.54 T:deoxysneq128128v1 1.68 1.70 1.71 T:aeadaes256ocbtaglen128v1 1.71 1.73 1.83 T:deoxysneq256128v1 1.73 1.77 1.78 T:deoxysi256v141 1.77 1.79 1.81 T:colm0v1 2.00 2.03 2.05 T:morus1280128v1 2.13 2.21 2.27 T:aes128gcmv1 2.28 2.35 2.43 T:aes256gcmv1 2.30 2.35 2.36 T:deoxysii128v141 2.48 2.49 2.52 T:deoxyseq128128v1 2.58 2.64 2.65 T:deoxysii256v141 2.73 2.74 2.76 T:seakeyakv2 2.76 2.78 2.79 T:norx6441v2 2.78 2.81 2.85 T:oceankeyakv2 2.79 2.82 2.82 T:norx6441v3 3.00 3.00 3.01 T:aes128otrsv3 3.03 3.08 3.09 T:deoxyseq256128v1 3.36 3.37 3.39 T:norx6441v1 3.33 3.44 3.48 T:lunarkeyakv2 3.84 3.85 3.86 T:norx3241v2 3.84 3.85 3.86 T:norx3241v3 4.11 4.11 4.12 T:aes256otrsv3 4.12 4.13 4.14 T:norx6461v2 4.20 4.22 4.24 T:norx6461v3 4.56 4.58 4.60 T:norx6444v2 4.56 4.58 4.60 T:norx6444v3 4.60 4.60 4.62 T:norx3241v1 4.89 5.00 5.30 T:lakekeyakv2 5.09 5.10 5.11 T:norx6461v1 5.12 5.12 5.14 T:aes128n12t8clocv3 5.11 5.12 5.14 T:aes128n8t8silcv2 5.12 5.13 5.14 T:aes128n8t8clocv2 5.12 5.13 5.14 T:aes128n12t8clocv2 5.11 5.13 5.13 T:aes128n12t8silcv2 5.12 5.13 5.13 T:aes128n12t8silcv3 5.22 5.24 5.26 T:lakekeyakv1 5.52 5.53 5.56 T:norx6444v1 5.86 5.88 5.90 T:norx3261v3 5.88 5.89 5.91 T:norx3261v2 7.61 7.62 7.64 T:norx3261v1 8.73 8.77 8.81 T:ketjemajorv2 9.61 9.64 9.66 T:riverkeyakv2 9.82 9.84 9.87 T:ascon128av11 9.89 9.90 9.92 T:ascon96v1 9.98 10.00 10.02 ascon128av12 10.56 10.57 10.57 T:aesjambuv1 11.44 11.50 11.55 T:ketjeminorv2 14.75 14.77 14.80 T:ascon128v1 14.75 14.78 14.82 T:ascon128v11 14.90 14.92 14.94 ascon128v12 15.26 15.27 15.29 T:twine80n6t4clocv2 16.09 16.11 16.14 T:twine80n6t4clocv3 17.23 17.31 17.38 T:aes128otrsv2 17.36 17.39 17.41 T:aes128otrsv1 18.55 18.63 18.69 T:oceankeyakv1 19.22 19.23 19.27 T:aes128otrpv2 19.35 19.37 19.39 T:aes128otrpv1 22.28 22.31 22.34 T:aes256otrsv2 22.57 22.59 22.61 T:aes256otrsv1 23.20 23.26 23.37 T:aes128n12clocv1 23.41 23.45 23.50 T:aes128n8clocv1 24.32 24.34 24.38 T:aes256otrpv2 24.55 24.60 24.62 T:aes256otrpv1 24.91 25.34 26.31 T:seakeyakv1 25.49 25.54 26.08 T:aes128n12silcv1 25.51 25.96 26.05 T:aes128n8silcv1 30.42 30.45 30.50 T:proest256otrv1 35.49 35.56 35.91 T:ketjesrv1 38.85 38.97 39.06 T:ketjesrv2 42.11 42.14 42.18 T:riverkeyakv1 62.66 63.90 64.16 T:proest128otrv1 76.21 76.30 76.41 T:ketjejrv1 79.09 79.12 79.15 T:present80n6t4silcv3 105.34 106.67 106.91 T:deoxysneq128128v13 116.38 116.44 116.51 T:led80n6t4silcv3 119.71 119.82 120.10 T:twine80n6clocv1 119.62 119.97 120.04 T:ketjejrv2 132.16 132.32 132.44 T:deoxyseq128128v13 133.71 135.01 136.11 T:aezv1 157.11 157.47 157.61 T:deoxysneq256128v13 207.72 208.07 209.54 T:deoxyseq256128v13 365.30 365.48 365.85 aes256gcmv1 485.71 485.91 486.12 T:acorn128v3 484.79 485.95 496.73 T:acorn128 485.18 488.37 496.38 T:acorn128v2 5185.05 5187.59 5188.59 T:present80n6t4silcv2 5183.92 5189.08 5190.62 T:present80n6silcv1 6351.13 6378.95 6412.97 T:led80n6silcv1 6347.68 6406.31 6410.53 T:led80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.21? 0.25? 0.29? T:tiaoxinv1 0.21? 0.26? 0.30? T:tiaoxinv2 0.29? 0.30? 0.33? T:aegis128l 0.28? 0.31? 0.35? aegis128l 0.39? 0.41? 0.44? T:aezv5 0.38? 0.42? 0.44? T:aezv3 0.39? 0.42? 0.44? T:aezv4 0.53 0.56 0.56 aegis256 0.56 0.57 0.57 T:aegis128 0.71? 0.80? 0.88? T:aeadaes128ocbtaglen128v1 0.86 0.87 0.89 T:morus1280256v1 0.87 0.88 0.90 T:aes128otrcv3 0.90 0.90 0.91 T:morus1280256v2 0.89 0.91 0.93 T:morus1280128v2 0.78? 0.97? 1.26? T:aeadaes192ocbtaglen128v1 1.01 1.02 1.05 T:aes128otrpv3 1.03 1.04 1.06 T:morus640128v2 1.04 1.05 1.05 T:morus640128v1 1.09 1.12 1.13 T:colm0v1 1.10 1.13 1.18 T:aes256otrcv3 1.24 1.28 1.32 T:deoxysneq128128v1 1.25 1.29 1.34 T:deoxysi128v141 1.31 1.32 1.36 T:aes256otrpv3 1.34 1.37 1.43 T:deoxyseq128128v1 1.29? 1.38? 1.44? T:deoxysii128v141 1.40 1.45 1.49 T:deoxysi256v141 1.46 1.48 1.58 T:deoxysneq256128v1 1.55 1.59 1.64 T:deoxyseq256128v1 1.56 1.61 1.68 T:deoxysii256v141 1.33? 1.63? 1.92? T:aeadaes256ocbtaglen128v1 1.70 1.76 1.88 T:aes256gcmv1 1.65? 1.79? 1.95? T:aes128gcmv1 1.92 1.95 1.97 T:morus1280128v1 2.05 2.13 2.20 T:oceankeyakv2 2.04 2.15 2.23 T:lunarkeyakv2 2.55 2.56 2.59 T:seakeyakv2 2.77 2.79 2.81 T:norx6441v2 2.82 2.83 2.87 T:norx6441v3 3.36 3.39 3.42 T:norx6441v1 3.87 3.89 3.89 T:norx3241v3 3.88 3.89 3.90 T:norx3241v2 4.16 4.18 4.21 T:norx6461v2 4.23 4.26 4.28 T:norx6461v3 4.28 4.44 4.57 T:lakekeyakv2 4.49 4.52 4.56 T:norx6444v3 4.50 4.52 4.53 T:norx6444v2 4.65 4.67 4.69 T:norx3241v1 4.94 5.02 5.05 T:lakekeyakv1 5.03 5.05 5.07 T:norx6461v1 5.12 5.12 5.13 T:aes128n12t8clocv2 5.12 5.12 5.13 T:aes128n12t8silcv3 5.12 5.13 5.13 T:aes128n12t8silcv2 5.12 5.13 5.13 T:aes128n8t8silcv2 5.12 5.13 5.13 T:aes128otrsv3 5.11 5.13 5.14 T:aes128n8t8clocv2 5.11 5.14 5.15 T:aes128n12t8clocv3 5.43 5.46 5.49 T:norx6444v1 5.88 5.89 5.91 T:norx3261v2 5.92 5.95 5.98 T:norx3261v3 7.12 7.12 7.13 T:aes256otrsv3 7.02 7.13 7.27 T:ketjemajorv2 7.70 7.72 7.73 T:norx3261v1 8.90 8.94 8.96 T:riverkeyakv2 9.77 9.79 9.81 T:ascon128av11 9.79 9.81 9.83 T:ascon96v1 9.91 9.92 9.94 ascon128av12 10.35 10.39 10.45 T:ketjeminorv2 10.43 10.43 10.43 T:aesjambuv1 14.62 14.65 14.68 T:ascon128v1 14.63 14.66 14.70 T:ascon128v11 14.69 14.71 14.75 ascon128v12 15.12 15.14 15.17 T:twine80n6t4clocv2 15.47 15.50 15.64 T:aes128otrsv2 15.62 15.64 15.69 T:aes128otrsv1 15.92 15.94 15.95 T:twine80n6t4clocv3 15.93 15.98 16.01 T:aes128n12clocv1 15.92 16.01 16.03 T:aes128n8clocv1 16.03 16.08 16.14 T:aes128n12silcv1 16.05 16.08 16.11 T:aes128n8silcv1 18.28 18.42 18.49 T:oceankeyakv1 19.42 19.46 19.51 T:aes128otrpv2 19.49 19.54 19.57 T:aes128otrpv1 20.49 20.52 20.53 T:aes256otrsv2 20.80 20.83 20.88 T:aes256otrsv1 24.51 24.56 24.62 T:aes256otrpv2 24.72 24.77 24.78 T:aes256otrpv1 24.44 25.33 26.26 T:seakeyakv1 30.81 30.87 30.94 T:proest256otrv1 32.30 32.37 32.46 T:ketjesrv1 35.31 35.40 35.52 T:ketjesrv2 39.60 39.64 39.71 T:riverkeyakv1 60.08 62.25 63.57 T:proest128otrv1 64.57 64.63 64.75 T:aezv1 71.12 71.27 71.44 T:ketjejrv1 78.55 78.59 78.63 T:present80n6t4silcv3 79.47 79.56 79.68 T:twine80n6clocv1 86.82 86.97 87.09 T:deoxyseq128128v13 87.26 88.49 89.15 T:deoxysneq128128v13 115.83 115.89 116.00 T:led80n6t4silcv3 115.77 115.89 116.16 T:ketjejrv2 137.04 137.13 137.28 T:deoxysneq256128v13 137.34 137.74 138.54 T:deoxyseq256128v13 366.03 366.13 366.60 aes256gcmv1 482.01 482.18 482.49 T:acorn128v3 482.48 484.08 494.10 T:acorn128 481.38 492.23 494.94 T:acorn128v2 3454.62 3457.58 3460.19 T:present80n6t4silcv2 3456.81 3459.85 3461.82 T:present80n6silcv1 4219.34 4230.53 4339.10 T:led80n6t4silcv2 4218.28 4309.57 4319.98 T:led80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.22? 0.25? 0.30? T:tiaoxinv2 0.22? 0.26? 0.29? T:tiaoxinv1 0.29 0.30 0.31 T:aegis128l 0.27? 0.31? 0.34? aegis128l 0.41 0.42 0.43 T:aezv5 0.41 0.42 0.43 T:aezv4 0.41 0.42 0.43 T:aezv3 0.54 0.56 0.56 aegis256 0.55 0.56 0.57 T:aegis128 0.71? 0.80? 0.89? T:aeadaes128ocbtaglen128v1 0.84 0.85 0.87 T:morus1280256v1 0.86 0.86 0.87 T:morus1280256v2 0.87 0.89 0.89 T:aes128otrcv3 0.60? 0.91? 0.99? T:aeadaes192ocbtaglen128v1 0.89 0.91 0.92 T:morus1280128v2 1.02 1.03 1.05 T:aes128otrpv3 1.06 1.08 1.08 T:morus640128v1 1.07 1.08 1.09 T:morus640128v2 1.09 1.12 1.14 T:colm0v1 1.07 1.13 1.17 T:aes256otrcv3 1.25 1.30 1.33 T:deoxysi128v141 1.29 1.33 1.38 T:deoxysneq128128v1 1.32 1.35 1.36 T:aes256otrpv3 1.33? 1.36? 1.51? T:deoxysii128v141 1.34 1.36 1.39 T:deoxyseq128128v1 1.44 1.48 1.51 T:deoxysi256v141 1.44 1.50 1.54 T:deoxysneq256128v1 1.47? 1.54? 1.70? T:deoxysii256v141 1.54 1.56 1.63 T:deoxyseq256128v1 1.32? 1.60? 1.92? T:aeadaes256ocbtaglen128v1 1.68? 1.78? 1.89? T:aes128gcmv1 1.73 1.80 1.90 T:aes256gcmv1 1.94 1.95 1.97 T:morus1280128v1 2.10 2.13 2.17 T:oceankeyakv2 2.03? 2.16? 2.30? T:lunarkeyakv2 2.54 2.57 2.59 T:seakeyakv2 2.77 2.78 2.82 T:norx6441v3 2.77 2.80 2.82 T:norx6441v2 3.34 3.36 3.39 T:norx6441v1 3.87 3.89 3.91 T:norx3241v2 3.88 3.89 3.91 T:norx3241v3 4.15 4.18 4.21 T:norx6461v2 4.23 4.24 4.27 T:norx6461v3 4.27 4.42 4.56 T:lakekeyakv2 4.46 4.50 4.54 T:norx6444v2 4.50 4.52 4.56 T:norx6444v3 4.64 4.67 4.68 T:norx3241v1 4.93 5.00 5.07 T:lakekeyakv1 5.03 5.06 5.08 T:norx6461v1 5.10 5.11 5.12 T:aes128n8t8silcv2 5.11 5.11 5.14 T:aes128n8t8clocv2 5.10 5.11 5.14 T:aes128n12t8clocv3 5.12 5.12 5.13 T:aes128n12t8clocv2 5.12 5.12 5.13 T:aes128n12t8silcv2 5.12 5.12 5.13 T:aes128n12t8silcv3 5.12 5.13 5.13 T:aes128otrsv3 5.43 5.45 5.47 T:norx6444v1 5.86 5.88 5.91 T:norx3261v3 5.87 5.89 5.91 T:norx3261v2 7.12 7.12 7.12 T:aes256otrsv3 7.08 7.14 7.22 T:ketjemajorv2 7.69 7.71 7.73 T:norx3261v1 8.90 8.93 8.95 T:riverkeyakv2 9.77 9.79 9.82 T:ascon128av11 9.87 9.91 9.93 T:ascon96v1 9.92 9.94 9.98 ascon128av12 10.33 10.38 10.43 T:ketjeminorv2 10.43 10.43 10.43 T:aesjambuv1 14.51 14.55 14.58 T:ascon128v11 14.52 14.56 14.59 T:ascon128v1 14.80 14.83 14.84 ascon128v12 15.13 15.15 15.18 T:twine80n6t4clocv2 15.42 15.47 15.68 T:aes128otrsv2 15.58 15.62 15.67 T:aes128otrsv1 15.89 15.93 15.95 T:twine80n6t4clocv3 15.92 15.98 16.01 T:aes128n12clocv1 15.93 15.99 16.04 T:aes128n8clocv1 16.08 16.11 16.12 T:aes128n12silcv1 16.06 16.11 16.15 T:aes128n8silcv1 18.28 18.46 18.54 T:oceankeyakv1 19.41 19.46 19.49 T:aes128otrpv2 19.52 19.53 19.57 T:aes128otrpv1 20.49 20.51 20.56 T:aes256otrsv2 20.77 20.82 20.87 T:aes256otrsv1 24.50 24.53 24.59 T:aes256otrpv2 24.70 24.78 24.82 T:aes256otrpv1 24.45 24.98 26.29 T:seakeyakv1 30.77 30.81 30.86 T:proest256otrv1 32.34 32.42 32.50 T:ketjesrv1 35.31 35.38 35.43 T:ketjesrv2 39.62 39.66 39.72 T:riverkeyakv1 61.02 61.35 63.42 T:proest128otrv1 64.54 64.61 64.74 T:aezv1 71.10 71.21 71.44 T:ketjejrv1 78.55 78.58 78.63 T:present80n6t4silcv3 79.41 79.51 79.54 T:twine80n6clocv1 87.00 87.08 87.17 T:deoxyseq128128v13 87.38 88.40 89.04 T:deoxysneq128128v13 115.29 115.44 115.55 T:ketjejrv2 115.84 115.94 116.07 T:led80n6t4silcv3 137.03 137.13 137.27 T:deoxysneq256128v13 137.44 137.67 138.41 T:deoxyseq256128v13 365.45 365.74 366.30 aes256gcmv1 482.00 482.35 482.65 T:acorn128v3 483.13 485.11 494.42 T:acorn128 483.00 486.54 494.60 T:acorn128v2 3453.79 3456.24 3458.34 T:present80n6t4silcv2 3455.75 3459.24 3462.10 T:present80n6silcv1 4228.25 4275.17 4316.80 T:led80n6silcv1 4229.96 4337.99 4346.90 T:led80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.23? 0.24? 0.28? T:tiaoxinv1 0.24? 0.26? 0.29? T:tiaoxinv2 0.29 0.30 0.32 T:aegis128l 0.29? 0.31? 0.33? aegis128l 0.41 0.41 0.42 T:aezv5 0.41 0.42 0.43 T:aezv3 0.42 0.42 0.43 T:aezv4 0.55 0.56 0.57 aegis256 0.56 0.57 0.57 T:aegis128 0.75? 0.79? 0.85? T:aeadaes128ocbtaglen128v1 0.85 0.86 0.87 T:morus1280256v2 0.85 0.87 0.87 T:morus1280256v1 0.87 0.88 0.89 T:aes128otrcv3 0.89 0.90 0.93 T:morus1280128v2 0.88? 0.95? 1.24? T:aeadaes192ocbtaglen128v1 1.02 1.03 1.05 T:aes128otrpv3 1.06 1.07 1.09 T:morus640128v1 1.07 1.08 1.09 T:morus640128v2 1.09 1.11 1.13 T:colm0v1 1.09 1.15 1.17 T:aes256otrcv3 1.26 1.30 1.34 T:deoxysi128v141 1.27 1.30 1.36 T:deoxysneq128128v1 1.31 1.33 1.35 T:aes256otrpv3 1.34 1.36 1.37 T:deoxyseq128128v1 1.34 1.36 1.40 T:deoxysii128v141 1.45 1.48 1.52 T:deoxysi256v141 1.46 1.49 1.54 T:deoxysneq256128v1 1.50 1.53 1.55 T:deoxysii256v141 1.54 1.56 1.63 T:deoxyseq256128v1 1.58 1.63 1.68 T:aeadaes256ocbtaglen128v1 1.67? 1.78? 1.90? T:aes128gcmv1 1.71 1.82 1.89 T:aes256gcmv1 1.95 1.97 2.00 T:morus1280128v1 2.09 2.15 2.18 T:oceankeyakv2 2.03? 2.18? 2.30? T:lunarkeyakv2 2.54 2.57 2.58 T:seakeyakv2 2.76 2.77 2.81 T:norx6441v3 2.77 2.80 2.81 T:norx6441v2 3.34 3.35 3.36 T:norx6441v1 3.88 3.89 3.91 T:norx3241v3 3.87 3.89 3.92 T:norx3241v2 4.14 4.17 4.20 T:norx6461v2 4.20 4.23 4.26 T:norx6461v3 4.23 4.43 4.59 T:lakekeyakv2 4.46 4.49 4.54 T:norx6444v3 4.47 4.50 4.54 T:norx6444v2 4.65 4.67 4.68 T:norx3241v1 4.97 5.01 5.04 T:lakekeyakv1 5.02 5.05 5.07 T:norx6461v1 5.10 5.10 5.12 T:aes128n8t8silcv2 5.10 5.11 5.15 T:aes128n12t8clocv3 5.09 5.12 5.14 T:aes128n8t8clocv2 5.10 5.12 5.13 T:aes128n12t8silcv2 5.12 5.12 5.13 T:aes128n12t8clocv2 5.12 5.12 5.13 T:aes128n12t8silcv3 5.13 5.13 5.13 T:aes128otrsv3 5.44 5.45 5.49 T:norx6444v1 5.86 5.88 5.90 T:norx3261v3 5.87 5.89 5.89 T:norx3261v2 7.06 7.11 7.22 T:ketjemajorv2 7.12 7.12 7.13 T:aes256otrsv3 7.68 7.70 7.72 T:norx3261v1 8.88 8.93 8.98 T:riverkeyakv2 9.73 9.77 9.80 T:ascon128av11 9.86 9.90 9.93 T:ascon96v1 9.90 9.93 9.97 ascon128av12 10.29 10.37 10.41 T:ketjeminorv2 10.42 10.43 10.43 T:aesjambuv1 14.53 14.54 14.57 T:ascon128v1 14.52 14.55 14.58 T:ascon128v11 14.78 14.81 14.83 ascon128v12 15.11 15.14 15.18 T:twine80n6t4clocv2 15.48 15.53 15.63 T:aes128otrsv2 15.59 15.62 15.65 T:aes128otrsv1 15.91 15.94 15.98 T:twine80n6t4clocv3 15.92 15.95 16.00 T:aes128n12clocv1 15.91 15.96 15.98 T:aes128n8clocv1 16.06 16.10 16.15 T:aes128n8silcv1 16.09 16.12 16.15 T:aes128n12silcv1 18.26 18.42 18.58 T:oceankeyakv1 19.43 19.44 19.46 T:aes128otrpv2 19.52 19.55 19.60 T:aes128otrpv1 20.48 20.53 20.57 T:aes256otrsv2 20.80 20.84 20.91 T:aes256otrsv1 24.51 24.56 24.57 T:aes256otrpv2 24.73 24.78 24.81 T:aes256otrpv1 24.47 24.95 26.22 T:seakeyakv1 30.77 30.81 30.86 T:proest256otrv1 32.29 32.37 32.49 T:ketjesrv1 35.30 35.35 35.42 T:ketjesrv2 39.61 39.66 39.70 T:riverkeyakv1 61.06 61.26 63.44 T:proest128otrv1 64.54 64.63 64.72 T:aezv1 71.24 71.45 71.62 T:ketjejrv1 78.53 78.57 78.61 T:present80n6t4silcv3 79.44 79.51 79.56 T:twine80n6clocv1 87.00 87.09 87.18 T:deoxyseq128128v13 87.46 88.41 88.59 T:deoxysneq128128v13 115.36 115.45 115.56 T:ketjejrv2 115.78 115.91 115.97 T:led80n6t4silcv3 136.95 137.09 137.18 T:deoxysneq256128v13 137.47 137.68 138.44 T:deoxyseq256128v13 365.12 365.56 365.80 aes256gcmv1 482.04 482.40 482.58 T:acorn128v3 483.23 485.06 494.84 T:acorn128 482.75 486.59 494.73 T:acorn128v2 3448.78 3452.86 3458.14 T:present80n6silcv1 3455.04 3457.48 3459.40 T:present80n6t4silcv2 4233.48 4275.54 4318.79 T:led80n6silcv1 4226.44 4341.61 4350.62 T:led80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.42 0.42 0.43 T:tiaoxinv2 0.42 0.42 0.43 T:aegis128l 0.42 0.43 0.44 T:tiaoxinv1 0.43? 0.44? 0.48? aegis128l 0.66 0.67 0.67 T:aegis128 0.68 0.69 0.71 aegis256 0.83 0.83 0.84 T:aezv4 0.85 0.85 0.87 T:aezv3 0.85 0.86 0.87 T:aezv5 1.01 1.02 1.08 T:aeadaes128ocbtaglen128v1 1.15 1.16 1.17 T:morus1280256v1 1.17 1.17 1.19 T:morus1280128v2 1.16? 1.19? 1.35? T:aeadaes192ocbtaglen128v1 1.18 1.19 1.19 T:morus1280256v2 1.22 1.23 1.24 T:aes128otrpv3 1.25 1.25 1.26 T:morus640128v1 1.26 1.27 1.28 T:morus640128v2 1.28 1.29 1.30 T:aes128otrcv3 1.54 1.56 1.58 T:deoxysneq128128v1 1.56 1.57 1.71 T:deoxysi128v141 1.58 1.58 1.60 T:aes256otrpv3 1.71 1.73 1.74 T:aes256otrcv3 1.82 1.82 1.84 T:deoxysneq256128v1 1.91 1.92 1.92 T:deoxysi256v141 1.93 1.95 2.11 T:aeadaes256ocbtaglen128v1 2.13 2.14 2.15 T:colm0v1 2.49 2.50 2.53 T:morus1280128v1 2.61 2.64 2.70 T:deoxyseq128128v1 2.70 2.72 2.74 T:deoxysii128v141 3.08 3.11 3.13 T:deoxysii256v141 3.14 3.17 3.19 T:deoxyseq256128v1 3.18 3.19 3.19 T:aes128otrsv3 3.27 3.28 3.30 T:norx6441v2 3.32 3.33 3.34 T:norx6441v3 3.65 3.69 3.71 T:aes128gcmv1 3.77 3.78 3.81 T:norx6441v1 3.77 3.78 3.89 T:aes256gcmv1 3.89 3.91 3.95 T:seakeyakv2 4.19 4.20 4.20 T:norx3241v3 4.22 4.23 4.24 T:norx3241v2 4.39 4.40 4.41 T:aes256otrsv3 4.87 4.89 4.90 T:norx6461v2 4.93 4.94 4.97 T:norx3241v1 4.94 4.96 4.97 T:norx6461v3 5.27 5.27 5.28 T:aes128n12t8clocv3 5.27 5.27 5.27 T:aes128n12t8clocv2 5.27 5.27 5.28 T:aes128n8t8clocv2 5.28 5.30 5.31 T:oceankeyakv2 5.33 5.33 5.34 T:aes128n8t8silcv2 5.33 5.33 5.34 T:aes128n12t8silcv2 5.33 5.33 5.34 T:aes128n12t8silcv3 5.42 5.45 5.99 T:lakekeyakv2 5.67 5.68 5.70 T:norx6461v1 6.18 6.20 6.28 T:lakekeyakv1 6.39 6.42 6.43 T:norx3261v2 6.42 6.44 6.45 T:norx3261v3 6.53 6.55 6.59 T:norx6444v2 6.54 6.57 6.59 T:norx6444v3 7.75 7.77 7.80 T:norx6444v1 8.14 8.15 8.16 T:norx3261v1 9.13 9.16 9.20 T:lunarkeyakv2 9.99 10.00 10.02 T:ascon96v1 10.03 10.04 10.05 T:riverkeyakv2 10.04 10.05 10.07 T:ascon128av11 10.27 10.29 10.31 ascon128av12 10.57 10.58 10.58 T:aesjambuv1 11.45 11.48 11.62 T:ketjemajorv2 13.53 13.55 13.60 T:ketjeminorv2 14.79 14.80 14.80 T:ascon128v1 14.80 14.81 14.82 T:ascon128v11 15.13 15.13 15.15 ascon128v12 15.86 15.86 15.87 T:twine80n6t4clocv2 16.49 16.50 16.52 T:twine80n6t4clocv3 17.92 17.98 18.05 T:aes128otrsv2 18.10 18.13 18.17 T:aes128otrsv1 19.89 19.91 19.95 T:aes128otrpv2 20.02 20.05 20.08 T:aes128otrpv1 23.11 23.13 23.17 T:aes256otrsv2 23.40 23.42 23.48 T:aes256otrsv1 23.74 23.80 23.83 T:aes128n12clocv1 23.82 23.85 23.88 T:aes128n8clocv1 25.14 25.16 25.16 T:aes256otrpv2 25.41 25.42 25.45 T:aes256otrpv1 25.87 25.90 26.33 T:aes128n8silcv1 25.88 25.91 25.92 T:aes128n12silcv1 28.38 28.43 28.49 T:oceankeyakv1 30.46 30.62 31.58 T:seakeyakv1 33.24 33.27 33.33 T:proest256otrv1 35.89 35.96 36.02 T:ketjesrv1 38.99 39.02 39.05 T:ketjesrv2 43.69 43.73 43.76 T:riverkeyakv1 66.70 67.43 68.84 T:proest128otrv1 76.82 76.89 76.95 T:ketjejrv1 79.55 79.58 79.59 T:present80n6t4silcv3 88.08 89.10 89.58 T:deoxysneq128128v13 117.03 117.08 117.14 T:led80n6t4silcv3 120.36 120.44 120.48 T:twine80n6clocv1 122.87 123.66 123.89 T:ketjejrv2 129.69 130.05 130.63 T:aezv1 133.75 133.79 133.88 T:deoxyseq128128v13 137.89 137.97 138.18 T:deoxysneq256128v13 209.96 210.36 211.48 T:deoxyseq256128v13 372.43 373.56 373.65 aes256gcmv1 543.39 543.55 543.81 T:acorn128v3 548.38 549.17 557.22 T:acorn128 548.03 559.93 560.09 T:acorn128v2 5210.44 5217.09 5219.09 T:present80n6t4silcv2 5214.06 5217.54 5219.81 T:present80n6silcv1 6363.34 6368.31 6422.77 T:led80n6t4silcv2 6390.71 6394.10 6399.04 T:led80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.43 0.43 0.45 T:aegis128l 0.44 0.45 0.48 aegis128l 0.47 0.47 0.48 T:tiaoxinv1 0.47 0.47 0.49 T:tiaoxinv2 0.68 0.68 0.68 T:aegis128 0.70 0.71 0.72 aegis256 0.83 0.83 0.84 T:aezv4 0.85 0.86 0.87 T:aezv3 0.86 0.86 0.87 T:aezv5 1.00? 1.02? 1.13? T:aeadaes128ocbtaglen128v1 1.12 1.13 1.14 T:morus1280256v1 1.14 1.15 1.16 T:morus1280256v2 1.17 1.18 1.19 T:morus1280128v2 1.15? 1.19? 1.34? T:aeadaes192ocbtaglen128v1 1.21 1.22 1.23 T:aes128otrpv3 1.27 1.27 1.30 T:morus640128v1 1.28 1.29 1.29 T:morus640128v2 1.29 1.30 1.32 T:aes128otrcv3 1.58 1.59 1.60 T:aes256otrpv3 1.74 1.76 1.77 T:aes256otrcv3 1.82 1.84 1.87 T:deoxysneq128128v1 1.81 1.86 1.94 T:deoxysi128v141 1.95 1.97 2.13 T:aeadaes256ocbtaglen128v1 2.03 2.04 2.08 T:deoxysneq256128v1 2.13 2.16 2.20 T:deoxysi256v141 2.14 2.16 2.19 T:colm0v1 2.46 2.52 2.54 T:morus1280128v1 2.73 2.77 2.78 T:deoxysii128v141 2.95 2.96 3.02 T:deoxyseq128128v1 3.08 3.10 3.13 T:deoxysii256v141 3.21 3.22 3.23 T:aes128otrsv3 3.28 3.29 3.30 T:norx6441v2 3.31 3.32 3.33 T:norx6441v3 3.46 3.49 3.53 T:deoxyseq256128v1 3.57 3.61 3.70 T:aes128gcmv1 3.74 3.75 3.85 T:aes256gcmv1 3.80 3.82 3.84 T:norx6441v1 3.95 3.96 4.00 T:seakeyakv2 4.17 4.18 4.19 T:norx3241v2 4.18 4.18 4.20 T:norx3241v3 4.44 4.44 4.45 T:aes256otrsv3 4.84 4.85 4.88 T:norx6461v2 4.88 4.89 4.91 T:norx3241v1 4.92 4.93 4.95 T:norx6461v3 5.23 5.24 5.25 T:aes128n8t8clocv2 5.24 5.24 5.25 T:aes128n12t8clocv3 5.23 5.24 5.25 T:aes128n12t8clocv2 5.29 5.30 5.31 T:aes128n12t8silcv2 5.29 5.31 5.31 T:aes128n8t8silcv2 5.30 5.31 5.31 T:aes128n12t8silcv3 5.36 5.37 5.40 T:oceankeyakv2 5.44 5.51 5.78 T:lakekeyakv2 5.74 5.76 5.79 T:norx6461v1 6.04 6.05 6.10 T:lakekeyakv1 6.36 6.38 6.40 T:norx3261v3 6.38 6.39 6.40 T:norx3261v2 6.52 6.54 6.55 T:norx6444v2 6.53 6.54 6.55 T:norx6444v3 7.77 7.77 7.81 T:norx6444v1 8.04 8.06 8.06 T:norx3261v1 9.21 9.24 9.29 T:lunarkeyakv2 10.07 10.10 10.11 T:ascon128av11 10.09 10.10 10.14 T:riverkeyakv2 10.13 10.14 10.16 T:ascon96v1 10.24 10.24 10.26 ascon128av12 10.74 10.74 10.75 T:aesjambuv1 11.50 11.54 11.58 T:ketjemajorv2 13.00 13.04 13.07 T:ketjeminorv2 14.98 14.99 15.02 T:ascon128v1 14.98 15.00 15.02 T:ascon128v11 15.13 15.14 15.15 ascon128v12 15.69 15.70 15.72 T:twine80n6t4clocv2 16.47 16.49 16.51 T:twine80n6t4clocv3 17.74 17.77 17.87 T:aes128otrsv2 17.89 17.90 17.93 T:aes128otrsv1 19.71 19.73 19.76 T:aes128otrpv2 19.86 19.88 19.92 T:aes128otrpv1 22.93 22.94 22.96 T:aes256otrsv2 23.22 23.25 23.32 T:aes256otrsv1 23.64 23.71 23.80 T:aes128n12clocv1 23.71 23.74 23.79 T:aes128n8clocv1 24.96 24.98 25.00 T:aes256otrpv2 25.21 25.23 25.28 T:aes256otrpv1 25.98 26.03 26.43 T:aes128n12silcv1 25.96 26.06 26.41 T:aes128n8silcv1 28.50 28.53 28.61 T:oceankeyakv1 30.55 30.70 31.69 T:seakeyakv1 33.16 33.18 33.21 T:proest256otrv1 36.41 36.42 36.75 T:ketjesrv1 40.12 40.23 40.30 T:ketjesrv2 43.82 43.86 43.90 T:riverkeyakv1 65.62 66.77 66.99 T:proest128otrv1 77.15 77.24 77.47 T:ketjejrv1 79.95 79.97 80.01 T:present80n6t4silcv3 106.31 106.77 107.71 T:deoxysneq128128v13 117.44 117.48 117.54 T:led80n6t4silcv3 120.28 120.42 120.68 T:twine80n6clocv1 121.62 121.76 121.81 T:ketjejrv2 130.65 130.83 131.16 T:aezv1 133.71 133.80 134.02 T:deoxyseq128128v13 157.97 158.22 158.36 T:deoxysneq256128v13 210.12 210.48 211.88 T:deoxyseq256128v13 372.72 372.98 373.14 aes256gcmv1 545.82 545.97 546.15 T:acorn128v3 544.80 546.16 554.84 T:acorn128 546.75 548.91 556.37 T:acorn128v2 5213.46 5214.31 5215.12 T:present80n6t4silcv2 5212.69 5216.23 5217.13 T:present80n6silcv1 6382.92 6397.42 6433.88 T:led80n6silcv1 6364.86 6428.48 6431.60 T:led80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.43 0.43 0.45 T:aegis128l 0.47 0.47 0.49 T:tiaoxinv2 0.46 0.47 0.48 T:tiaoxinv1 0.47 0.48 0.50 aegis128l 0.50 0.50 0.51 T:aezv4 0.50 0.51 0.51 T:aezv5 0.51 0.52 0.52 T:aezv3 0.68 0.68 0.68 T:aegis128 0.69 0.70 0.71 aegis256 0.99 1.00 1.06 T:aeadaes128ocbtaglen128v1 1.12 1.12 1.13 T:morus1280256v1 1.14 1.15 1.15 T:morus1280256v2 1.15 1.17 1.19 T:aeadaes192ocbtaglen128v1 1.17 1.17 1.18 T:morus1280128v2 1.21 1.21 1.22 T:aes128otrpv3 1.26 1.27 1.27 T:morus640128v1 1.28 1.28 1.29 T:morus640128v2 1.29 1.30 1.31 T:aes128otrcv3 1.57 1.58 1.59 T:aes256otrpv3 1.74 1.76 1.76 T:aes256otrcv3 1.79 1.82 1.84 T:deoxysi128v141 1.82 1.84 1.86 T:deoxysneq128128v1 1.95 1.95 1.96 T:aeadaes256ocbtaglen128v1 2.02 2.04 2.07 T:deoxysneq256128v1 2.14 2.15 2.16 T:colm0v1 2.13 2.16 2.19 T:deoxysi256v141 2.44 2.51 2.53 T:morus1280128v1 2.74 2.76 2.78 T:deoxysii128v141 2.96 2.97 2.99 T:deoxyseq128128v1 3.08 3.10 3.11 T:deoxysii256v141 3.21 3.22 3.22 T:aes128otrsv3 3.27 3.28 3.29 T:norx6441v2 3.30 3.32 3.33 T:norx6441v3 3.47 3.49 3.54 T:deoxyseq256128v1 3.56 3.61 3.65 T:aes128gcmv1 3.71 3.73 3.80 T:aes256gcmv1 3.80 3.81 3.82 T:norx6441v1 3.97 3.98 3.99 T:seakeyakv2 4.17 4.17 4.18 T:norx3241v2 4.17 4.18 4.19 T:norx3241v3 4.44 4.44 4.45 T:aes256otrsv3 4.82 4.84 4.86 T:norx6461v2 4.88 4.90 4.91 T:norx3241v1 4.91 4.92 4.93 T:norx6461v3 5.23 5.24 5.24 T:aes128n12t8clocv2 5.23 5.24 5.25 T:aes128n12t8clocv3 5.23 5.24 5.25 T:aes128n8t8clocv2 5.29 5.30 5.30 T:aes128n12t8silcv2 5.29 5.30 5.31 T:aes128n8t8silcv2 5.29 5.30 5.31 T:aes128n12t8silcv3 5.38 5.39 5.41 T:oceankeyakv2 5.46 5.48 5.79 T:lakekeyakv2 5.75 5.76 5.77 T:norx6461v1 6.07 6.08 6.14 T:lakekeyakv1 6.38 6.39 6.41 T:norx3261v3 6.38 6.39 6.39 T:norx3261v2 6.54 6.56 6.57 T:norx6444v2 6.56 6.57 6.58 T:norx6444v3 7.78 7.79 7.82 T:norx6444v1 8.05 8.06 8.06 T:norx3261v1 9.20 9.26 9.32 T:lunarkeyakv2 10.05 10.07 10.09 T:ascon128av11 10.11 10.13 10.14 T:ascon96v1 10.12 10.13 10.15 T:riverkeyakv2 10.23 10.24 10.25 ascon128av12 10.74 10.75 10.75 T:aesjambuv1 11.54 11.59 11.61 T:ketjemajorv2 13.01 13.06 13.10 T:ketjeminorv2 14.98 14.99 15.01 T:ascon128v11 14.99 15.01 15.03 T:ascon128v1 15.13 15.14 15.15 ascon128v12 15.68 15.70 15.72 T:twine80n6t4clocv2 16.46 16.48 16.49 T:twine80n6t4clocv3 17.77 17.79 17.90 T:aes128otrsv2 17.92 17.93 17.95 T:aes128otrsv1 19.75 19.77 19.80 T:aes128otrpv2 19.88 19.92 19.96 T:aes128otrpv1 22.97 22.98 23.01 T:aes256otrsv2 23.25 23.27 23.32 T:aes256otrsv1 23.55 23.59 23.66 T:aes128n12clocv1 23.74 23.76 23.83 T:aes128n8clocv1 25.00 25.02 25.05 T:aes256otrpv2 25.24 25.26 25.28 T:aes256otrpv1 25.97 26.01 26.37 T:aes128n8silcv1 25.98 26.02 26.47 T:aes128n12silcv1 28.50 28.56 28.61 T:oceankeyakv1 30.61 30.83 31.67 T:seakeyakv1 33.17 33.21 33.23 T:proest256otrv1 36.41 36.48 36.81 T:ketjesrv1 40.12 40.21 40.30 T:ketjesrv2 43.82 43.86 43.89 T:riverkeyakv1 65.65 66.66 66.92 T:proest128otrv1 77.29 77.46 77.53 T:ketjejrv1 79.93 79.95 79.96 T:present80n6t4silcv3 106.40 106.73 107.67 T:deoxysneq128128v13 117.43 117.47 117.52 T:led80n6t4silcv3 120.25 120.33 120.62 T:twine80n6clocv1 121.54 121.68 121.82 T:ketjejrv2 130.12 130.74 131.12 T:aezv1 133.71 133.83 133.95 T:deoxyseq128128v13 158.01 158.14 158.33 T:deoxysneq256128v13 210.34 210.49 211.84 T:deoxyseq256128v13 367.48 367.70 368.05 aes256gcmv1 545.88 546.08 546.19 T:acorn128v3 544.57 546.15 554.39 T:acorn128 546.91 548.85 556.63 T:acorn128v2 5210.92 5214.20 5215.32 T:present80n6t4silcv2 5215.78 5216.45 5218.01 T:present80n6silcv1 6376.37 6397.14 6436.84 T:led80n6silcv1 6370.54 6430.69 6433.02 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 2.23? 2.29? 3.15? aegis128l 2.23? 2.30? 2.52? T:aegis128 2.74 2.84 2.95 T:aegis128l 2.91? 3.08? 3.38? aegis256 3.16? 3.25? 3.59? T:tiaoxinv2 3.15? 3.33? 3.79? T:tiaoxinv1 3.70 3.73 3.94 T:aezv5 3.89 3.91 4.13 T:aezv4 4.05 4.09 4.38 T:aezv3 4.68 4.82 5.03 T:morus640128v1 5.07 5.16 5.25 T:morus640128v2 5.75 5.82 5.88 T:deoxysneq128128v1 6.31 6.34 6.44 T:aes128otrpv3 6.34 6.36 6.69 T:morus1280256v1 5.70? 6.44? 9.87? T:aeadaes128ocbtaglen128v1 6.41 6.44 6.48 T:aes128otrsv3 6.52 6.65 6.99 T:morus1280128v2 6.82 6.85 6.96 T:deoxysneq256128v1 6.77 6.91 7.17 T:morus1280256v2 7.58 7.59 7.61 T:aes128n12t8clocv2 6.46? 7.64? 12.29? T:aeadaes192ocbtaglen128v1 7.71 7.75 7.87 T:colm0v1 7.60 7.80 7.85 T:aes128n12t8clocv3 7.63 7.80 7.87 T:aes128n8t8clocv2 7.86 7.93 8.01 T:deoxysi128v141 8.03 8.13 8.17 T:aes128otrcv3 8.18 8.21 8.25 T:aes256otrpv3 7.86? 8.41? 12.34? T:aeadaes256ocbtaglen128v1 8.98 9.00 9.06 T:aes256otrsv3 9.12 9.14 9.15 T:aes128n8t8silcv2 9.13 9.14 9.15 T:aes128n12t8silcv2 9.15 9.16 9.17 T:aes128n12t8silcv3 9.27 9.38 9.53 T:deoxysi256v141 10.55 10.65 10.74 T:norx3241v1 10.72 10.77 10.88 T:norx3241v3 10.73 10.80 10.99 T:norx3241v2 11.09 11.23 11.55 T:aes256otrcv3 11.23 11.35 11.45 T:norx6441v1 11.77 11.78 12.02 T:deoxyseq128128v1 11.96 12.01 12.05 T:norx6441v2 12.05 12.12 12.16 T:norx6441v3 12.68 12.80 13.29 T:morus1280128v1 13.19 13.23 13.28 T:deoxyseq256128v1 13.77 13.81 14.39 T:deoxysii128v141 14.70 14.71 14.73 T:aesjambuv1 15.18 15.22 15.73 T:ascon128av11 15.20 15.25 15.45 T:ascon96v1 15.78 15.84 16.19 ascon128av12 15.89 15.93 16.11 T:deoxysii256v141 16.05 16.12 16.33 T:norx3261v2 16.08 16.20 16.30 T:norx3261v3 16.52 16.67 16.75 T:norx6461v1 16.78 16.84 16.96 T:norx6461v3 17.12 17.20 17.22 T:norx3261v1 17.12 17.26 17.35 T:norx6461v2 19.66 19.74 19.91 T:ascon128v1 19.73 19.79 20.31 T:ascon128v11 20.09 20.21 20.34 ascon128v12 20.15 20.34 20.63 T:lakekeyakv1 23.39 23.50 23.84 T:riverkeyakv2 23.28? 23.66? 26.19? T:lakekeyakv2 24.52 24.63 24.76 T:twine80n6t4clocv3 24.79 24.90 25.04 T:twine80n6t4clocv2 29.60 29.77 30.02 T:aes128otrsv2 29.88 30.05 30.26 T:aes128otrsv1 30.08 30.19 30.40 T:aes128n8clocv1 30.21 30.48 30.83 T:aes128n12clocv1 31.42 31.60 31.79 T:aes128otrpv2 31.98 32.12 32.68 T:aes128otrpv1 36.07 36.16 36.41 T:aes128n12silcv1 35.76 36.30 36.95 T:aes128n8silcv1 35.71 36.43 39.06 T:aes256gcmv1 36.61 36.79 37.23 T:seakeyakv2 35.94 37.56 38.79 T:aes128gcmv1 37.99 38.08 38.34 T:aes256otrsv2 38.24 38.35 38.95 T:aes256otrsv1 39.89 40.05 40.59 T:aes256otrpv2 40.15 40.37 40.90 T:aes256otrpv1 46.78 46.90 47.07 T:norx6444v2 47.09 47.34 47.52 T:norx6444v3 48.31 48.47 48.77 T:ketjeminorv2 55.12 55.47 55.69 T:norx6444v1 56.83 57.15 57.32 T:ketjesrv1 59.71 60.17 60.95 T:oceankeyakv2 66.56 66.91 67.34 T:ketjesrv2 74.50 75.38 76.16 T:ketjemajorv2 76.48 76.73 77.05 T:riverkeyakv1 95.16 95.38 95.68 T:proest256otrv1 98.39 98.52 98.58 T:present80n6t4silcv3 100.21 101.34 101.97 T:deoxysneq128128v13 101.29 101.80 102.51 T:ketjejrv1 132.16 132.64 133.00 T:twine80n6clocv1 130.68? 134.23? 147.99? T:proest128otrv1 139.80 139.93 140.26 T:led80n6t4silcv3 145.46 146.21 146.86 T:aezv1 149.78 150.23 151.12 T:lunarkeyakv2 155.86 156.00 156.53 T:deoxysneq256128v13 163.75 164.05 164.73 T:ketjejrv2 166.05 166.48 167.01 T:deoxyseq128128v13 228.62 230.04 237.77 T:seakeyakv1 260.77 261.39 262.91 T:deoxyseq256128v13 307.94 308.78 309.98 T:oceankeyakv1 420.10 420.70 421.27 aes256gcmv1 1884.68 1923.35 1940.44 T:acorn128 1925.33 1926.19 1927.55 T:acorn128v3 1940.17 1972.20 1973.60 T:acorn128v2 5838.65 5840.03 5847.20 T:present80n6silcv1 5830.20 5840.99 5842.23 T:present80n6t4silcv2 6973.47 6999.02 7041.29 T:led80n6silcv1 6993.77 7029.25 7077.68 T:led80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 2.37? 2.51? 2.78? T:aegis128 2.39? 2.55? 3.31? aegis128l 2.85 2.91 3.12 T:aegis128l 3.03? 3.24? 3.52? aegis256 3.19 3.28 3.52 T:tiaoxinv1 3.23? 3.41? 3.62? T:tiaoxinv2 3.75 3.79 3.93 T:aezv5 3.91 3.98 4.14 T:aezv4 4.08 4.10 4.17 T:aezv3 4.78 4.83 4.92 T:morus640128v1 5.21 5.44 5.52 T:morus640128v2 6.07 6.08 6.15 T:aes128otrpv3 6.17 6.39 6.53 T:morus1280256v1 6.52 6.62 6.84 T:morus1280256v2 6.31? 6.81? 10.35? T:aeadaes128ocbtaglen128v1 6.84 6.84 6.88 T:aes128otrsv3 6.96 7.02 7.40 T:morus1280128v2 7.23? 7.62? 11.24? T:aeadaes192ocbtaglen128v1 7.62 7.65 7.88 T:aes128n12t8clocv3 7.63 7.66 7.71 T:aes128n12t8clocv2 7.64 7.70 7.86 T:aes128n8t8clocv2 8.24 8.29 8.48 T:aes256otrpv3 7.82? 8.35? 12.32? T:aeadaes256ocbtaglen128v1 8.50 8.54 8.62 T:colm0v1 8.58 8.60 8.69 T:aes128otrcv3 9.16 9.17 9.20 T:aes128n12t8silcv2 9.14 9.19 9.35 T:deoxysneq128128v1 9.25 9.25 9.28 T:aes128n12t8silcv3 9.30 9.41 9.46 T:deoxysneq256128v1 9.18 9.44 9.46 T:aes128n8t8silcv2 9.80 9.89 9.95 T:aes256otrsv3 10.12 10.23 10.40 T:deoxysi128v141 10.62 10.73 10.82 T:norx3241v1 10.80 10.88 11.02 T:norx3241v2 10.90 10.97 11.17 T:norx3241v3 11.29 11.41 11.59 T:norx6441v1 11.59 11.78 12.05 T:deoxysi256v141 11.90 11.97 12.06 T:norx6441v2 11.91 11.98 12.02 T:aes256otrcv3 12.01 12.10 12.18 T:norx6441v3 12.78 12.85 13.12 T:morus1280128v1 14.69 14.80 14.85 T:deoxysii128v141 14.88 14.89 14.91 T:aesjambuv1 15.23 15.37 15.80 T:ascon96v1 15.27 15.37 15.77 T:ascon128av11 15.80 15.84 15.92 T:deoxyseq256128v1 15.88 15.95 16.41 ascon128av12 16.27 16.33 16.45 T:norx3261v2 16.24 16.35 16.63 T:norx3261v3 16.44 16.48 16.68 T:deoxyseq128128v1 16.54 16.60 16.70 T:norx6461v1 16.70 16.86 17.03 T:norx6461v3 17.08 17.20 17.34 T:deoxysii256v141 17.29 17.31 17.37 T:norx3261v1 17.30 17.38 17.50 T:norx6461v2 19.88 19.97 20.34 T:ascon128v1 19.84 20.05 20.17 T:ascon128v11 20.12 20.20 20.48 ascon128v12 20.09 20.27 20.98 T:lakekeyakv1 23.55 23.67 24.13 T:riverkeyakv2 23.79 23.93 25.95 T:lakekeyakv2 24.55 24.71 24.96 T:twine80n6t4clocv3 24.77 24.87 25.10 T:twine80n6t4clocv2 29.57 29.72 30.30 T:aes128otrsv2 30.06 30.23 30.61 T:aes128otrsv1 30.19 30.31 30.79 T:aes128n8clocv1 30.18 30.46 30.59 T:aes128n12clocv1 31.38 31.58 31.79 T:aes128otrpv2 31.78 31.96 32.34 T:aes128otrpv1 34.72 34.81 37.27 T:aes256gcmv1 34.41 35.16 36.27 T:aes128gcmv1 35.96 36.33 36.80 T:aes128n12silcv1 36.09 36.58 37.29 T:aes128n8silcv1 36.73 36.85 37.11 T:seakeyakv2 38.05 38.45 38.96 T:aes256otrsv2 38.38 38.54 38.84 T:aes256otrsv1 39.67 39.78 39.90 T:aes256otrpv2 40.24 40.45 40.80 T:aes256otrpv1 47.37 47.54 47.84 T:norx6444v2 47.63 47.77 48.33 T:norx6444v3 47.61 47.97 48.40 T:ketjeminorv2 55.23 55.52 55.87 T:norx6444v1 57.34 57.73 58.14 T:ketjesrv1 59.76 60.30 60.59 T:oceankeyakv2 68.52 68.84 69.27 T:ketjesrv2 74.94 75.16 75.97 T:ketjemajorv2 76.61 77.05 77.39 T:riverkeyakv1 96.44 96.63 97.09 T:proest256otrv1 98.82 99.20 99.36 T:present80n6t4silcv3 103.18 103.80 104.07 T:ketjejrv1 118.27 119.40 119.95 T:deoxysneq128128v13 132.30 132.66 132.95 T:twine80n6clocv1 130.92 132.68 134.94 T:proest128otrv1 140.02 140.44 140.76 T:led80n6t4silcv3 149.31 149.70 150.38 T:aezv1 150.16 150.69 151.98 T:lunarkeyakv2 161.25 162.03 163.62 T:ketjejrv2 166.65 166.88 167.74 T:deoxyseq128128v13 175.38 175.80 176.10 T:deoxysneq256128v13 228.48 230.98 238.38 T:seakeyakv1 261.52 262.26 264.13 T:deoxyseq256128v13 308.09 308.62 308.91 T:oceankeyakv1 419.97 420.86 421.28 aes256gcmv1 1875.87 1915.09 1936.32 T:acorn128 1929.41 1930.62 1932.17 T:acorn128v3 1936.45 1939.92 1963.91 T:acorn128v2 5821.70 5837.10 5846.49 T:present80n6silcv1 5834.02 5837.36 5840.26 T:present80n6t4silcv2 6874.93 6906.62 6927.27 T:led80n6silcv1 6921.17 6938.80 6991.43 T:led80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 2.37 2.38 2.45 T:aegis128 2.48? 2.55? 3.20? aegis128l 2.84 2.91 2.99 T:aegis128l 2.93 2.95 2.98 T:aezv5 3.05 3.07 3.34 T:aezv4 3.05 3.14 3.23 aegis256 3.20? 3.29? 3.68? T:tiaoxinv1 3.25 3.29 3.37 T:aezv3 3.17? 3.44? 3.54? T:tiaoxinv2 4.70 4.74 4.79 T:morus640128v1 5.12 5.17 5.23 T:morus640128v2 6.08 6.09 6.16 T:aes128otrpv3 6.16 6.17 6.20 T:morus1280256v1 6.30? 6.38? 7.22? T:aeadaes128ocbtaglen128v1 6.49 6.53 6.57 T:morus1280256v2 6.83 6.84 6.86 T:aes128otrsv3 6.97 7.03 7.23 T:morus1280128v2 7.52 7.55 7.81 T:aes128n12t8clocv2 7.19? 7.70? 12.38? T:aeadaes192ocbtaglen128v1 7.59 7.75 7.77 T:aes128n8t8clocv2 7.59 7.77 7.91 T:aes128n12t8clocv3 7.73 7.79 8.22 T:aeadaes256ocbtaglen128v1 8.27 8.29 8.38 T:aes256otrpv3 8.52 8.57 8.60 T:colm0v1 8.55 8.59 8.71 T:aes128otrcv3 8.89 8.96 9.34 T:deoxysneq128128v1 9.10 9.11 9.41 T:aes128n12t8silcv2 9.08 9.14 9.17 T:deoxysneq256128v1 9.14 9.16 9.41 T:aes128n12t8silcv3 9.12 9.38 9.40 T:aes128n8t8silcv2 9.80 9.82 9.95 T:aes256otrsv3 10.05 10.18 10.48 T:deoxysi128v141 10.69 10.76 10.88 T:norx3241v1 10.79 10.90 10.95 T:norx3241v2 10.95 10.98 11.06 T:norx3241v3 11.34 11.41 11.52 T:norx6441v1 11.59 11.70 12.23 T:deoxysi256v141 11.94 11.98 12.02 T:aes256otrcv3 11.85 12.02 12.11 T:norx6441v2 12.05 12.12 12.19 T:norx6441v3 12.70 12.75 13.05 T:morus1280128v1 14.65 14.76 14.84 T:deoxysii128v141 14.88 14.90 14.91 T:aesjambuv1 15.12 15.23 15.59 T:ascon96v1 15.26 15.45 15.74 T:ascon128av11 15.79 15.84 16.01 ascon128av12 15.83 15.91 15.98 T:deoxyseq256128v1 16.27 16.33 16.46 T:norx3261v2 16.26 16.34 16.46 T:norx3261v3 16.49 16.52 16.61 T:deoxyseq128128v1 16.58 16.66 16.77 T:norx6461v1 16.68 16.77 16.88 T:norx6461v3 17.04 17.10 17.13 T:deoxysii256v141 17.19 17.32 17.38 T:norx6461v2 17.25 17.32 17.37 T:norx3261v1 19.73 19.91 20.13 T:ascon128v1 19.77 19.91 20.18 T:ascon128v11 20.09 20.19 20.66 T:lakekeyakv1 20.12 20.19 20.31 ascon128v12 23.53 23.72 24.50 T:riverkeyakv2 23.73? 23.99? 26.39? T:lakekeyakv2 24.55 24.69 24.86 T:twine80n6t4clocv3 24.70 24.76 24.88 T:twine80n6t4clocv2 29.66 29.82 30.57 T:aes128otrsv2 30.06 30.16 30.41 T:aes128n8clocv1 29.95 30.18 30.36 T:aes128otrsv1 30.09 30.31 31.09 T:aes128n12clocv1 31.50 31.70 31.81 T:aes128otrpv2 31.90 32.10 32.31 T:aes128otrpv1 34.57 34.80 35.73 T:aes256gcmv1 34.30 35.30 35.86 T:aes128gcmv1 35.85 36.24 36.80 T:aes128n12silcv1 35.81 36.33 36.47 T:aes128n8silcv1 36.76 36.92 37.03 T:seakeyakv2 38.01 38.25 38.53 T:aes256otrsv2 38.26 38.55 38.86 T:aes256otrsv1 39.73 39.88 40.27 T:aes256otrpv2 40.36 40.52 40.86 T:aes256otrpv1 47.02 47.37 47.53 T:norx6444v2 47.30 47.52 47.89 T:norx6444v3 47.97 48.09 48.36 T:ketjeminorv2 55.52 55.66 55.81 T:norx6444v1 57.59 57.95 58.42 T:ketjesrv1 59.79 59.84 60.33 T:oceankeyakv2 68.44 68.73 69.17 T:ketjesrv2 75.05 75.52 75.77 T:ketjemajorv2 76.71 76.98 77.23 T:riverkeyakv1 93.29 93.63 93.88 T:proest256otrv1 98.80 98.99 99.30 T:present80n6t4silcv3 102.71 103.34 103.97 T:ketjejrv1 118.01 119.16 119.64 T:deoxysneq128128v13 129.40 132.03 132.98 T:proest128otrv1 132.23 132.53 132.91 T:twine80n6clocv1 140.08 140.35 140.44 T:led80n6t4silcv3 149.30 149.54 150.58 T:aezv1 149.66 150.43 151.77 T:lunarkeyakv2 161.57 161.93 162.93 T:ketjejrv2 166.46 166.94 167.88 T:deoxyseq128128v13 175.38 175.70 175.97 T:deoxysneq256128v13 229.62 230.92 239.25 T:seakeyakv1 261.39 261.80 264.00 T:deoxyseq256128v13 308.05 308.70 310.86 T:oceankeyakv1 414.52 415.15 415.73 aes256gcmv1 1879.73 1917.48 1938.15 T:acorn128 1930.89 1931.90 1933.73 T:acorn128v3 1934.89 1939.46 1961.27 T:acorn128v2 5827.20 5836.60 5840.43 T:present80n6silcv1 5836.46 5838.40 5841.20 T:present80n6t4silcv2 6885.83 6910.62 6937.08 T:led80n6silcv1 6919.70 6954.25 6980.27 T:led80n6t4silcv2