VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20240909

[Page version: 20240912 11:46:28]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.27? 0.29? 0.32? T:tiaoxinv1 0.33 0.34 0.36 T:tiaoxinv2 0.33 0.35 0.36 aegis128l 0.35 0.35 0.36 T:aegis128l 0.59 0.61 0.62 aegis256 0.60 0.61 0.61 T:aegis128 0.62 0.66 0.67 T:aegis256 0.74 0.78 0.80 T:morus1280128v2 -8.17? 0.85? 9.65? T:aeadaes128ocbtaglen128v1 0.77? 0.85? 0.94? T:aes128otrsv3 0.84? 0.90? 1.04? T:aes128otrcv3 0.84? 0.99? 1.04? T:aes128otrpv3 0.97 1.02 1.02 T:morus1280256v2 0.36? 1.05? 9.28? T:aeadaes192ocbtaglen128v1 0.99? 1.07? 1.17? T:aezv4 1.07 1.07 1.12 T:morus640128v1 0.99? 1.08? 1.14? T:aezv3 1.04 1.09 1.11 T:morus1280256v1 0.99? 1.12? 1.17? T:aes256otrcv3 1.09 1.12 1.13 T:morus640128v2 0.98? 1.13? 1.16? T:aes256otrsv3 1.11 1.17 1.20 T:aes256otrpv3 1.11? 1.20? 1.28? T:aezv5 1.28 1.31 1.34 T:deoxysneq128128v1 1.33 1.35 1.37 T:deoxysi128v141 1.41 1.43 1.44 T:deoxysneq256128v1 1.44 1.46 1.51 T:deoxysi256v141 -6.76? 1.56? 10.24? T:aeadaes256ocbtaglen128v1 2.16 2.24 2.35 T:aes128gcmv1 2.27 2.32 2.35 T:morus1280128v1 2.25 2.36 2.47 T:lunarkeyakv2 2.37 2.39 2.44 T:deoxysii128v141 2.36 2.46 2.58 T:deoxyseq128128v1 2.59 2.62 2.64 T:deoxysii256v141 2.49? 2.66? 2.77? T:aes256gcmv1 2.71 2.74 2.80 T:deoxyseq256128v1 2.79 2.83 2.90 T:colm0v1 2.84 2.94 3.06 T:seakeyakv2 3.08 3.28 3.37 T:oceankeyakv2 3.49 3.56 3.59 T:norx6441v2 3.56 3.60 3.61 T:norx6441v3 4.24 4.31 4.34 T:norx6441v1 5.25 5.28 5.31 T:norx6461v2 5.33 5.36 5.38 T:norx6461v3 5.52 5.56 5.62 T:norx6444v1 5.60 5.67 5.72 T:norx6444v3 5.69 5.74 5.78 T:norx6444v2 5.84 5.86 5.88 T:aes128n12t8clocv2 5.85 5.86 5.87 T:aes128n8t8silcv2 5.85 5.87 5.88 T:aes128n8t8clocv2 5.85 5.87 5.88 T:aes128n12t8silcv2 5.86 5.87 5.88 T:aes128n12t8silcv3 5.85 5.88 6.02 T:aes128n12t8clocv3 5.87 5.92 5.92 T:norx3241v3 6.00 6.03 6.04 T:norx3241v2 6.15 6.25 6.30 T:lakekeyakv1 6.39 6.42 6.47 T:norx6461v1 6.91 6.97 7.08 T:lakekeyakv2 7.04 7.07 7.11 T:norx3241v1 8.95 8.98 9.02 T:norx3261v2 8.94 8.99 9.01 T:norx3261v3 9.44 9.45 9.46 ascon128av12 9.66 9.66 9.67 T:ascon128av11 9.69 9.70 9.76 T:ascon96v1 11.46 11.46 11.46 T:aesjambuv1 12.28 12.34 12.38 T:norx3261v1 12.87 12.93 12.97 T:ketjemajorv2 14.12 14.13 14.13 ascon128v12 14.45 14.45 14.46 T:ascon128v11 14.45 14.46 14.46 T:ascon128v1 14.32 14.50 15.03 T:ketjeminorv2 15.80 15.87 15.91 T:riverkeyakv2 21.84 22.82 23.20 T:oceankeyakv1 24.66 24.66 24.76 T:aes128otrpv1 24.60 24.71 24.80 T:aes128otrpv2 24.75 24.78 24.81 T:aes128otrsv2 24.79 24.85 24.90 T:aes128otrsv1 30.03 30.46 30.60 T:seakeyakv1 31.56 31.58 31.63 T:aes256otrsv1 31.55 31.64 31.73 T:aes256otrsv2 32.15 32.21 32.80 T:aes256otrpv1 32.20 32.89 32.94 T:aes256otrpv2 34.52 34.56 34.63 T:twine80n6t4clocv2 34.57 34.65 34.79 T:proest256otrv1 35.57 35.61 35.66 T:twine80n6t4clocv3 37.49 37.55 37.60 T:aes128n12clocv1 37.55 37.60 37.70 T:aes128n8clocv1 38.86 38.90 38.92 T:aes128n8silcv1 39.61 39.77 41.31 T:aes128n12silcv1 47.93 48.03 48.41 T:riverkeyakv1 50.24 50.27 50.29 T:ketjesrv1 52.59 52.69 53.01 T:ketjesrv2 83.39 83.86 84.50 T:proest128otrv1 98.24 98.36 98.38 T:ketjejrv1 122.36 122.56 122.66 T:deoxysneq128128v13 152.52 152.81 154.97 T:ketjejrv2 155.83 155.90 155.90 T:present80n6t4silcv3 174.66 174.84 176.92 T:deoxysneq256128v13 202.17 203.47 204.74 T:twine80n6clocv1 239.74? 241.99? 272.50? T:led80n6t4silcv3 244.94 245.81 247.66 T:deoxyseq128128v13 245.82 249.31 253.10 T:aezv1 351.05 351.97 352.49 T:deoxyseq256128v13 419.04 420.41 420.56 aes256gcmv1 683.19 684.51 687.16 T:acorn128v3 693.36 694.10 700.18 T:acorn128 701.22 702.45 703.95 T:acorn128v2 7991.84 7994.14 7998.32 T:present80n6t4silcv2 7986.70 7994.41 8015.63 T:present80n6silcv1 11340.71 11359.93 11467.93 T:led80n6t4silcv2 11395.21 11408.63 11417.14 T:led80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.33? 0.34? 0.40? aegis128l 0.37? 0.40? 0.42? T:aegis128l 0.51? 0.53? 0.57? T:tiaoxinv2 0.54? 0.60? 0.63? T:tiaoxinv1 0.57? 0.61? 0.66? aegis256 0.61 0.61 0.61 T:aegis128 0.62 0.66 0.68 T:aegis256 0.78 0.80 0.83 T:morus1280128v2 0.80? 0.87? 0.92? T:aes128otrsv3 0.87 0.88 0.88 T:morus1280256v2 0.87 0.89 0.91 T:morus1280256v1 0.51? 0.93? 0.96? T:aeadaes128ocbtaglen128v1 0.86? 0.94? 1.01? T:aes128otrcv3 -7.86? 0.95? 1.12? T:aeadaes192ocbtaglen128v1 0.95 1.00 1.05 T:aes128otrpv3 1.00 1.03 1.09 T:aezv4 1.05 1.06 1.13 T:aezv3 0.99? 1.10? 1.14? T:aes256otrsv3 1.07 1.11 1.14 T:morus640128v1 1.09 1.11 1.15 T:morus640128v2 1.11 1.16 1.18 T:aes256otrcv3 1.13 1.17 1.18 T:aezv5 1.26 1.28 1.32 T:deoxysneq128128v1 1.23 1.30 1.34 T:aes256otrpv3 1.25 1.31 1.37 T:deoxysi128v141 1.46 1.48 1.54 T:deoxysi256v141 1.48 1.50 1.51 T:deoxysneq256128v1 1.48 1.56 1.63 T:aeadaes256ocbtaglen128v1 2.05? 2.20? 2.39? T:aes128gcmv1 2.35 2.38 2.39 T:morus1280128v1 2.36 2.39 2.41 T:deoxysii128v141 2.35 2.48 2.54 T:lunarkeyakv2 2.36? 2.50? 2.64? T:aes256gcmv1 2.49 2.52 2.59 T:deoxyseq128128v1 2.59 2.65 2.67 T:deoxysii256v141 2.65 2.85 2.94 T:colm0v1 2.88 2.91 2.96 T:deoxyseq256128v1 2.82 2.95 3.07 T:seakeyakv2 3.03 3.21 3.31 T:oceankeyakv2 3.38 3.44 3.47 T:norx6441v2 3.46 3.47 3.49 T:norx6441v3 4.04 4.07 4.09 T:norx6441v1 5.17 5.21 5.23 T:norx6461v2 5.23 5.25 5.25 T:norx6461v3 5.59 5.64 5.69 T:norx6444v1 5.63 5.71 5.76 T:norx6444v3 5.71 5.73 5.75 T:norx3241v3 5.73 5.73 5.76 T:aes128n8t8silcv2 5.73 5.74 5.82 T:aes128n12t8silcv3 5.72 5.74 5.79 T:aes128n12t8clocv2 5.73 5.74 5.80 T:aes128n12t8clocv3 5.73 5.74 5.82 T:aes128n8t8clocv2 5.72 5.75 5.82 T:aes128n12t8silcv2 5.72 5.77 5.84 T:norx6444v2 5.82 5.82 5.86 T:norx3241v2 6.17 6.21 6.25 T:norx6461v1 6.25 6.31 6.36 T:lakekeyakv1 6.86 6.97 7.04 T:lakekeyakv2 6.99 7.00 7.01 T:norx3241v1 8.65 8.69 8.70 T:norx3261v3 8.80 8.83 8.85 T:norx3261v2 9.42 9.43 9.44 ascon128av12 9.69 9.71 9.74 T:ascon96v1 9.74 9.76 9.89 T:ascon128av11 11.99 12.06 12.07 T:norx3261v1 12.19 12.20 12.20 T:aesjambuv1 12.92 12.94 13.01 T:ketjemajorv2 14.09 14.10 14.10 ascon128v12 14.06 14.22 14.34 T:ketjeminorv2 14.45 14.45 14.46 T:ascon128v11 14.45 14.46 14.47 T:ascon128v1 16.36 16.41 16.55 T:riverkeyakv2 20.98 22.34 22.79 T:oceankeyakv1 25.16 25.19 25.26 T:aes128otrsv2 25.20 25.26 25.28 T:aes128otrsv1 25.91 25.97 26.02 T:aes128otrpv1 25.92 25.99 26.17 T:aes128otrpv2 30.18 30.36 30.82 T:seakeyakv1 32.00 32.05 32.32 T:aes256otrsv1 32.02 32.14 32.75 T:aes256otrsv2 33.49 33.55 33.68 T:aes256otrpv2 33.51 33.62 34.11 T:aes256otrpv1 34.27 34.29 34.35 T:twine80n6t4clocv2 34.54 34.60 34.64 T:proest256otrv1 35.36 35.38 35.45 T:twine80n6t4clocv3 37.61 37.74 37.81 T:aes128n12clocv1 38.29 38.34 38.46 T:aes128n8clocv1 38.68 38.79 38.84 T:aes128n8silcv1 39.73 39.81 40.30 T:aes128n12silcv1 47.46 47.68 47.93 T:riverkeyakv1 51.22 51.23 51.26 T:ketjesrv1 54.54 54.74 54.90 T:ketjesrv2 82.11? 83.68? 93.00? T:proest128otrv1 96.52 96.62 96.70 T:ketjejrv1 153.95 154.02 154.73 T:ketjejrv2 157.22 157.24 157.28 T:present80n6t4silcv3 160.94 161.63 162.06 T:deoxysneq128128v13 203.18 203.23 203.93 T:twine80n6clocv1 217.11 219.19 222.45 T:deoxysneq256128v13 243.27 243.41 243.66 T:led80n6t4silcv3 245.99 247.14 248.05 T:deoxyseq128128v13 248.36 249.29 252.33 T:aezv1 351.44 351.86 353.55 T:deoxyseq256128v13 419.86 422.91 429.06 aes256gcmv1 663.58 664.54 665.72 T:acorn128 689.83 690.48 691.73 T:acorn128v2 681.37 694.40 696.23 T:acorn128v3 7950.54 7952.99 7961.98 T:present80n6t4silcv2 7986.69 7988.53 8004.47 T:present80n6silcv1 11351.04 11372.62 11536.77 T:led80n6t4silcv2 11408.06 11420.88 11446.41 T:led80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.35? 0.35? 0.39? T:aezv3 0.34? 0.38? 0.39? T:aezv4 0.38? 0.41? 0.44? T:aezv5 0.37? 0.41? 0.42? T:aegis128l 0.44 0.46 0.48 aegis128l 0.51? 0.55? 0.58? T:tiaoxinv2 0.58 0.60 0.62 T:tiaoxinv1 0.62 0.62 0.63 T:aegis128 0.63 0.66 0.69 T:aegis256 0.72 0.73 0.75 aegis256 0.81 0.82 0.83 T:morus1280128v2 -7.51? 0.85? 9.56? T:aeadaes128ocbtaglen128v1 0.86 0.86 0.87 T:aes128otrsv3 0.88 0.90 0.90 T:morus1280256v2 0.88 0.90 0.91 T:morus1280256v1 0.94 0.95 0.95 T:aes128otrcv3 0.99 1.01 1.01 T:aes128otrpv3 0.97? 1.08? 9.65? T:aeadaes192ocbtaglen128v1 1.08 1.10 1.14 T:morus640128v1 1.08 1.11 1.11 T:aes256otrsv3 1.11 1.13 1.15 T:morus640128v2 1.12 1.13 1.13 T:aes256otrcv3 1.18 1.24 1.28 T:aes256otrpv3 1.24 1.27 1.33 T:deoxysneq128128v1 1.22 1.28 1.35 T:deoxysi128v141 1.42 1.46 1.51 T:deoxysi256v141 1.48 1.48 1.50 T:deoxysneq256128v1 1.48? 1.56? 1.69? T:aeadaes256ocbtaglen128v1 2.02? 2.21? 2.37? T:aes128gcmv1 2.34 2.37 2.38 T:deoxysii128v141 2.35 2.37 2.39 T:morus1280128v1 2.43? 2.51? 2.71? T:aes256gcmv1 2.45 2.51 2.54 T:deoxyseq128128v1 2.57 2.61 2.67 T:deoxysii256v141 2.61 2.66 2.70 T:lunarkeyakv2 2.75 2.81 2.88 T:colm0v1 2.85 2.94 2.98 T:deoxyseq256128v1 3.04 3.09 3.16 T:seakeyakv2 3.30 3.39 3.43 T:oceankeyakv2 3.44 3.44 3.45 T:norx6441v2 3.46 3.47 3.47 T:norx6441v3 4.09 4.09 4.09 T:norx6441v1 5.19 5.21 5.21 T:norx6461v2 5.23 5.24 5.25 T:norx6461v3 5.68 5.73 5.80 T:aes128n12t8silcv3 5.69 5.74 5.80 T:aes128n12t8silcv2 5.73 5.75 5.75 T:norx3241v3 5.69 5.75 5.80 T:aes128n12t8clocv2 5.72 5.75 5.80 T:aes128n8t8silcv2 5.69 5.75 5.80 T:aes128n12t8clocv3 5.71 5.76 5.80 T:aes128n8t8clocv2 5.73 5.76 5.80 T:norx6444v1 5.73 5.78 5.82 T:norx6444v3 5.83 5.84 5.86 T:norx6444v2 5.84 5.86 5.86 T:norx3241v2 6.21 6.21 6.22 T:norx6461v1 6.39 6.43 6.46 T:lakekeyakv1 7.03 7.03 7.06 T:norx3241v1 7.02 7.04 7.09 T:lakekeyakv2 8.68 8.70 8.70 T:norx3261v3 8.84 8.84 8.84 T:norx3261v2 9.43 9.43 9.44 ascon128av12 9.71 9.71 9.74 T:ascon96v1 9.76 9.77 9.84 T:ascon128av11 12.05 12.06 12.08 T:norx3261v1 12.19 12.20 12.20 T:aesjambuv1 13.03 13.07 13.12 T:ketjemajorv2 14.09 14.09 14.10 ascon128v12 14.19 14.32 14.49 T:ketjeminorv2 14.43 14.45 14.47 T:ascon128v11 14.43 14.46 14.47 T:ascon128v1 16.49 16.53 16.65 T:riverkeyakv2 21.09 22.50 23.35 T:oceankeyakv1 25.27 25.30 25.34 T:aes128otrsv2 25.25 25.33 25.47 T:aes128otrsv1 26.00 26.08 26.13 T:aes128otrpv1 26.02 26.13 26.28 T:aes128otrpv2 30.37 30.48 31.20 T:seakeyakv1 32.08 32.18 32.20 T:aes256otrsv1 32.16 32.24 32.73 T:aes256otrsv2 33.52 33.63 33.72 T:aes256otrpv1 33.62 33.66 33.89 T:aes256otrpv2 34.23 34.31 34.33 T:twine80n6t4clocv2 34.56 34.60 34.65 T:proest256otrv1 35.35 35.38 35.46 T:twine80n6t4clocv3 37.69 37.72 37.79 T:aes128n12clocv1 38.30 38.34 38.41 T:aes128n8clocv1 38.65 38.71 38.77 T:aes128n8silcv1 39.66 39.73 40.31 T:aes128n12silcv1 47.46 47.74 48.02 T:riverkeyakv1 51.28 51.33 51.38 T:ketjesrv1 54.67 54.78 54.90 T:ketjesrv2 82.11? 83.69? 92.99? T:proest128otrv1 96.67 96.72 96.81 T:ketjejrv1 153.77 154.11 154.81 T:ketjejrv2 157.23 157.25 157.27 T:present80n6t4silcv3 161.08 161.87 162.16 T:deoxysneq128128v13 203.18 203.28 203.92 T:twine80n6clocv1 217.58 219.24 222.68 T:deoxysneq256128v13 243.27 243.41 243.66 T:led80n6t4silcv3 246.07 247.22 248.21 T:deoxyseq128128v13 247.59 248.27 251.62 T:aezv1 350.76 351.93 352.18 T:deoxyseq256128v13 409.32 410.52 415.54 aes256gcmv1 663.57 670.56 675.41 T:acorn128 681.96 689.79 691.62 T:acorn128v2 681.61 694.38 696.24 T:acorn128v3 7950.23 7953.03 7962.75 T:present80n6t4silcv2 7985.58 7988.14 7992.50 T:present80n6silcv1 11357.33 11370.86 11521.85 T:led80n6t4silcv2 11403.73 11425.55 11456.01 T:led80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.23? 0.25? 0.28? T:tiaoxinv1 0.27? 0.29? 0.32? T:tiaoxinv2 0.32 0.33 0.34 aegis128l 0.33 0.34 0.35 T:aegis128l 0.61 0.61 0.62 T:aegis128 0.60 0.62 0.65 aegis256 0.60 0.63 0.65 T:aegis256 0.69 0.72 0.76 T:aezv3 0.68? 0.73? 0.77? T:aezv4 0.73? 0.77? 0.82? T:aezv5 -3.15? 0.88? 5.21? T:aeadaes128ocbtaglen128v1 0.90 0.92 0.94 T:morus1280128v2 0.86? 0.96? 0.99? T:aes128otrcv3 0.97 0.98 1.03 T:aes128otrpv3 0.96 0.99 1.01 T:morus1280256v2 0.73? 1.04? 1.23? T:aeadaes192ocbtaglen128v1 1.05 1.06 1.08 T:morus640128v1 1.04 1.06 1.08 T:morus1280256v1 1.05 1.06 1.07 T:morus640128v2 1.05? 1.12? 1.17? T:aes256otrcv3 1.21 1.23 1.26 T:deoxysneq128128v1 1.22 1.24 1.24 T:deoxysi128v141 1.30 1.32 1.37 T:aes256otrpv3 1.35 1.37 1.39 T:deoxysneq256128v1 1.35 1.38 1.40 T:deoxysi256v141 1.37? 1.52? 1.64? T:aeadaes256ocbtaglen128v1 1.74 1.76 1.79 T:deoxysii128v141 1.75 1.82 1.88 T:deoxyseq128128v1 1.78 1.87 1.93 T:aes128gcmv1 1.93 1.96 1.99 T:deoxysii256v141 1.90? 2.00? 2.14? T:aes256gcmv1 1.98 2.02 2.04 T:colm0v1 1.99 2.02 2.06 T:deoxyseq256128v1 2.29 2.32 2.33 T:morus1280128v1 2.44 2.49 2.55 T:seakeyakv2 2.59 2.64 2.71 T:oceankeyakv2 3.07 3.10 3.14 T:lunarkeyakv2 3.26 3.32 3.34 T:aes128otrsv3 3.55 3.56 3.57 T:norx6441v2 3.58 3.60 3.60 T:norx6441v3 4.21 4.26 4.34 T:norx6441v1 4.46 4.54 4.55 T:aes256otrsv3 5.30 5.30 5.31 T:norx6461v2 5.36 5.37 5.40 T:norx6461v3 5.44 5.47 5.52 T:norx6444v1 5.57 5.62 5.69 T:norx6444v3 5.62 5.67 5.71 T:norx6444v2 5.78 5.80 5.81 T:aes128n12t8clocv2 5.79 5.80 5.81 T:aes128n8t8clocv2 5.79 5.80 5.81 T:aes128n8t8silcv2 5.79 5.80 5.81 T:aes128n12t8silcv2 5.79 5.80 5.81 T:aes128n12t8silcv3 5.80 5.82 5.88 T:aes128n12t8clocv3 5.89 5.90 5.91 T:norx3241v3 5.88 5.92 5.97 T:lakekeyakv1 6.01 6.02 6.03 T:norx3241v2 6.14 6.18 6.19 T:lakekeyakv2 6.36 6.42 6.47 T:norx6461v1 7.09 7.09 7.11 T:norx3241v1 8.98 8.99 8.99 T:norx3261v3 8.98 9.00 9.00 T:norx3261v2 9.35 9.37 9.38 ascon128av12 9.59 9.59 9.60 T:ascon128av11 9.60 9.62 9.64 T:ascon96v1 11.13 11.17 11.29 T:ketjemajorv2 11.65 11.65 11.65 T:aesjambuv1 11.53 11.67 11.70 T:riverkeyakv2 12.32 12.35 12.39 T:norx3261v1 12.80 12.92 13.24 T:ketjeminorv2 14.00 14.01 14.03 ascon128v12 14.36 14.36 14.37 T:ascon128v11 14.36 14.36 14.37 T:ascon128v1 20.77 21.75 22.59 T:oceankeyakv1 21.96 21.99 22.01 T:aes128otrsv2 22.02 22.06 22.10 T:aes128otrsv1 23.37 23.39 23.43 T:aes128otrpv2 23.35 23.39 23.44 T:aes128otrpv1 28.30 28.34 28.36 T:aes128n8clocv1 28.33 28.39 28.44 T:aes128n12clocv1 28.49 28.53 28.60 T:aes256otrsv1 28.51 28.56 28.62 T:aes256otrsv2 29.11 29.13 29.28 T:aes128n8silcv1 29.61 29.83 30.63 T:aes128n12silcv1 29.97 30.15 30.40 T:seakeyakv1 30.78 30.80 30.88 T:aes256otrpv2 30.78 31.05 31.13 T:aes256otrpv1 33.99 34.03 34.07 T:twine80n6t4clocv2 34.50 34.54 34.84 T:proest256otrv1 35.20 35.21 35.23 T:twine80n6t4clocv3 44.62 45.09 45.19 T:riverkeyakv1 47.08 47.09 47.10 T:ketjesrv1 49.31 49.47 49.53 T:ketjesrv2 83.20 83.67 83.79 T:proest128otrv1 92.45 92.50 92.53 T:ketjejrv1 122.33 122.80 123.93 T:deoxysneq128128v13 148.22 149.21 150.25 T:ketjejrv2 150.70 151.08 151.86 T:twine80n6clocv1 155.45 155.45 155.48 T:present80n6t4silcv3 164.31 165.09 167.01 T:aezv1 174.48 176.06 178.65 T:deoxysneq256128v13 183.53 185.09 185.28 T:deoxyseq128128v13 239.44? 246.76? 272.73? T:led80n6t4silcv3 262.56 263.75 264.05 T:deoxyseq256128v13 414.23 415.52 421.60 aes256gcmv1 678.53 681.27 682.46 T:acorn128v3 682.03 682.26 685.31 T:acorn128 687.95 691.36 694.00 T:acorn128v2 5980.97 5986.73 5990.26 T:present80n6t4silcv2 5990.07 6004.29 6030.43 T:present80n6silcv1 8482.18 8496.84 8560.28 T:led80n6t4silcv2 8531.67 8545.59 8564.22 T:led80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.32? 0.35? 0.38? aegis128l 0.36 0.38 0.39 T:aegis128l 0.39? 0.41? 0.44? T:tiaoxinv1 0.37? 0.41? 0.42? T:tiaoxinv2 0.58 0.61 0.63 aegis256 0.61 0.63 0.64 T:aegis128 0.63 0.64 0.65 T:aegis256 0.66? 0.71? 0.75? T:aezv3 0.65? 0.71? 0.78? T:aezv4 0.69? 0.75? 0.79? T:aezv5 0.78 0.78 0.79 T:morus1280256v2 0.77 0.79 0.80 T:morus1280256v1 0.78? 0.91? 1.01? T:aeadaes128ocbtaglen128v1 0.89 0.94 0.94 T:morus1280128v2 0.88? 0.95? 1.02? T:aes128otrcv3 0.96 1.00 1.06 T:aes128otrpv3 0.89? 1.05? 1.18? T:aeadaes192ocbtaglen128v1 1.07 1.08 1.11 T:morus640128v2 1.08 1.09 1.11 T:morus640128v1 1.08 1.11 1.16 T:aes256otrcv3 1.18 1.22 1.24 T:deoxysneq128128v1 1.18 1.23 1.25 T:deoxysi128v141 1.34 1.37 1.40 T:aes256otrpv3 1.35 1.38 1.41 T:deoxysi256v141 1.41 1.42 1.44 T:deoxysneq256128v1 -2.58? 1.53? 5.97? T:aeadaes256ocbtaglen128v1 1.74 1.77 1.78 T:deoxysii128v141 1.84 1.88 1.91 T:deoxyseq128128v1 1.78? 1.90? 1.98? T:aes128gcmv1 1.96 1.99 2.02 T:deoxysii256v141 1.95 1.99 2.05 T:colm0v1 1.94 2.05 2.10 T:aes256gcmv1 2.06 2.11 2.16 T:deoxyseq256128v1 2.37 2.38 2.38 T:morus1280128v1 2.46 2.53 2.59 T:seakeyakv2 2.58 2.67 2.84 T:oceankeyakv2 3.14 3.22 3.40 T:lunarkeyakv2 3.28 3.30 3.35 T:aes128otrsv3 3.52 3.53 3.55 T:norx6441v3 3.54 3.55 3.59 T:norx6441v2 4.15 4.18 4.23 T:norx6441v1 4.49 4.53 4.55 T:aes256otrsv3 5.28 5.30 5.33 T:norx6461v3 5.28 5.31 5.33 T:norx6461v2 5.52 5.54 5.60 T:norx6444v1 5.59 5.63 5.67 T:norx6444v3 5.60 5.65 5.69 T:norx6444v2 5.71 5.74 5.79 T:aes128n8t8clocv2 5.73 5.74 5.78 T:aes128n12t8silcv3 5.72 5.74 5.78 T:aes128n12t8clocv2 5.73 5.75 5.78 T:aes128n8t8silcv2 5.73 5.75 5.80 T:aes128n12t8silcv2 5.73 5.75 5.79 T:aes128n12t8clocv3 5.81 5.82 5.84 T:norx3241v3 5.91 5.93 5.94 T:norx3241v2 5.98 6.02 6.08 T:lakekeyakv1 6.11 6.18 6.27 T:lakekeyakv2 6.27 6.33 6.37 T:norx6461v1 7.03 7.08 7.10 T:norx3241v1 8.81 8.83 8.87 T:norx3261v3 8.90 8.92 8.95 T:norx3261v2 9.34 9.35 9.35 ascon128av12 9.58 9.60 9.61 T:ascon96v1 9.63 9.64 9.72 T:ascon128av11 11.05 11.18 11.29 T:ketjemajorv2 11.88 11.95 12.01 T:riverkeyakv2 12.01 12.01 12.01 T:aesjambuv1 12.15 12.19 12.22 T:norx3261v1 12.66 12.76 12.84 T:ketjeminorv2 14.00 14.00 14.00 ascon128v12 14.35 14.36 14.36 T:ascon128v11 14.35 14.36 14.43 T:ascon128v1 20.80 21.08 22.50 T:oceankeyakv1 22.22 22.28 22.59 T:aes128otrsv1 22.26 22.32 22.35 T:aes128otrsv2 23.97 24.02 24.08 T:aes128otrpv1 23.96 24.04 24.14 T:aes128otrpv2 28.32 28.34 28.40 T:aes128n12clocv1 28.67 28.71 28.78 T:aes128n8clocv1 28.74 28.78 28.82 T:aes256otrsv2 28.71 28.79 29.07 T:aes256otrsv1 29.04 29.08 29.17 T:aes128n8silcv1 29.70 29.95 30.15 T:aes128n12silcv1 29.97 30.10 30.34 T:seakeyakv1 31.28 31.36 31.43 T:aes256otrpv2 31.34 31.38 31.41 T:aes256otrpv1 33.88 33.93 33.98 T:twine80n6t4clocv2 34.50 34.53 34.74 T:proest256otrv1 35.07 35.09 35.10 T:twine80n6t4clocv3 44.69 45.00 45.18 T:riverkeyakv1 47.57 47.58 47.59 T:ketjesrv1 50.45 50.51 50.56 T:ketjesrv2 82.58 83.40 87.88 T:proest128otrv1 91.55 91.60 91.66 T:ketjejrv1 142.01 142.54 142.72 T:deoxysneq128128v13 149.89 150.31 150.51 T:ketjejrv2 151.58 151.67 151.96 T:twine80n6clocv1 156.08 156.14 156.15 T:present80n6t4silcv3 165.11 165.59 166.15 T:aezv1 184.47 184.68 184.99 T:deoxyseq128128v13 196.92 197.19 199.00 T:deoxysneq256128v13 241.20 242.37 258.18 T:led80n6t4silcv3 263.17 263.25 263.61 T:deoxyseq256128v13 411.28 412.36 414.66 aes256gcmv1 668.76 669.29 675.45 T:acorn128 681.00 682.38 683.17 T:acorn128v3 687.61 687.67 687.97 T:acorn128v2 5960.30 5966.01 5966.48 T:present80n6t4silcv2 5989.59 5994.99 6009.77 T:present80n6silcv1 8496.80 8508.21 8615.70 T:led80n6t4silcv2 8538.15 8544.65 8570.86 T:led80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.36 0.37 0.38 T:aegis128l 0.35? 0.37? 0.40? T:aezv4 0.36? 0.38? 0.40? T:aezv3 0.36? 0.39? 0.41? aegis128l 0.37? 0.39? 0.42? T:aezv5 0.39 0.40 0.43 T:tiaoxinv2 0.38? 0.42? 0.44? T:tiaoxinv1 0.62 0.62 0.63 T:aegis128 0.62 0.63 0.64 T:aegis256 0.65 0.68 0.69 aegis256 0.78 0.79 0.80 T:morus1280256v1 0.79 0.79 0.80 T:morus1280256v2 0.90 0.92 0.94 T:aes128otrcv3 -3.32? 0.93? 5.35? T:aeadaes128ocbtaglen128v1 0.92 0.93 0.96 T:morus1280128v2 0.98 1.01 1.02 T:aes128otrpv3 -3.27? 1.07? 5.29? T:aeadaes192ocbtaglen128v1 1.09 1.10 1.11 T:morus640128v2 1.09 1.10 1.11 T:morus640128v1 1.10 1.11 1.12 T:aes256otrcv3 1.18 1.22 1.25 T:deoxysneq128128v1 1.19 1.23 1.25 T:deoxysi128v141 1.37 1.39 1.40 T:aes256otrpv3 1.35 1.39 1.42 T:deoxysi256v141 1.40 1.41 1.43 T:deoxysneq256128v1 -2.69? 1.55? 5.97? T:aeadaes256ocbtaglen128v1 1.74 1.75 1.76 T:deoxysii128v141 1.84 1.88 1.90 T:deoxyseq128128v1 1.78 1.91 1.97 T:aes128gcmv1 1.96 1.98 2.00 T:deoxysii256v141 1.96 1.99 2.02 T:colm0v1 1.94 2.00 2.11 T:aes256gcmv1 2.09 2.12 2.15 T:deoxyseq256128v1 2.37 2.37 2.38 T:morus1280128v1 2.53 2.56 2.60 T:seakeyakv2 2.64 2.74 2.82 T:oceankeyakv2 3.21 3.24 3.28 T:lunarkeyakv2 3.29 3.30 3.31 T:aes128otrsv3 3.53 3.53 3.54 T:norx6441v3 3.55 3.55 3.56 T:norx6441v2 4.20 4.20 4.21 T:norx6441v1 4.52 4.52 4.52 T:aes256otrsv3 5.29 5.29 5.30 T:norx6461v2 5.30 5.30 5.32 T:norx6461v3 5.57 5.60 5.63 T:norx6444v1 5.67 5.69 5.75 T:norx6444v2 5.67 5.70 5.75 T:norx6444v3 5.72 5.74 5.77 T:aes128n8t8silcv2 5.71 5.75 5.75 T:aes128n8t8clocv2 5.72 5.75 5.77 T:aes128n12t8silcv3 5.72 5.75 5.75 T:aes128n12t8clocv3 5.74 5.75 5.77 T:aes128n12t8silcv2 5.72 5.75 5.77 T:aes128n12t8clocv2 5.83 5.83 5.84 T:norx3241v3 5.93 5.94 5.94 T:norx3241v2 6.01 6.04 6.06 T:lakekeyakv1 6.17 6.19 6.24 T:lakekeyakv2 6.30 6.31 6.32 T:norx6461v1 7.06 7.07 7.08 T:norx3241v1 8.83 8.83 8.84 T:norx3261v3 8.90 8.91 8.91 T:norx3261v2 9.35 9.35 9.36 ascon128av12 9.59 9.61 9.61 T:ascon96v1 9.63 9.64 9.68 T:ascon128av11 11.19 11.30 11.41 T:ketjemajorv2 11.93 11.96 12.05 T:riverkeyakv2 12.01 12.02 12.02 T:aesjambuv1 12.19 12.21 12.22 T:norx3261v1 12.75 12.83 12.91 T:ketjeminorv2 14.00 14.00 14.01 ascon128v12 14.36 14.36 14.37 T:ascon128v11 14.35 14.37 14.43 T:ascon128v1 20.99 21.31 22.54 T:oceankeyakv1 22.29 22.33 22.37 T:aes128otrsv1 22.33 22.38 22.40 T:aes128otrsv2 24.03 24.07 24.21 T:aes128otrpv2 24.04 24.08 24.13 T:aes128otrpv1 28.35 28.39 28.43 T:aes128n12clocv1 28.65 28.69 28.75 T:aes128n8clocv1 28.78 28.81 28.88 T:aes256otrsv2 28.81 28.85 29.12 T:aes256otrsv1 29.05 29.09 29.19 T:aes128n8silcv1 29.72 29.91 30.09 T:aes128n12silcv1 30.16 30.27 30.70 T:seakeyakv1 31.41 31.44 31.71 T:aes256otrpv1 31.43 31.63 31.75 T:aes256otrpv2 33.88 33.92 33.96 T:twine80n6t4clocv2 34.52 34.59 34.84 T:proest256otrv1 35.05 35.07 35.11 T:twine80n6t4clocv3 44.76 45.10 45.50 T:riverkeyakv1 47.59 47.62 47.65 T:ketjesrv1 50.48 50.55 50.61 T:ketjesrv2 82.63 83.69 87.95 T:proest128otrv1 91.59 91.65 91.68 T:ketjejrv1 142.42 142.66 142.75 T:deoxysneq128128v13 149.18 149.97 150.58 T:ketjejrv2 151.62 151.91 151.96 T:twine80n6clocv1 156.11 156.12 156.12 T:present80n6t4silcv3 164.67 165.49 165.67 T:aezv1 184.52 184.73 185.08 T:deoxyseq128128v13 196.97 197.28 199.14 T:deoxysneq256128v13 241.22 242.40 258.19 T:led80n6t4silcv3 262.60 263.30 263.65 T:deoxyseq256128v13 408.17 409.29 420.67 aes256gcmv1 668.66 671.81 672.65 T:acorn128 682.32 682.37 685.07 T:acorn128v3 687.61 687.66 687.71 T:acorn128v2 5961.06 5965.89 5966.43 T:present80n6t4silcv2 5986.74 5996.88 6000.98 T:present80n6silcv1 8494.27 8511.22 8615.03 T:led80n6t4silcv2 8534.97 8542.65 8572.29 T:led80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.17? 0.22? 0.24? T:tiaoxinv1 0.27 0.28 0.28 T:tiaoxinv2 0.32 0.33 0.35 aegis128l 0.34 0.34 0.34 T:aegis128l 0.34? 0.35? 0.38? T:aezv5 0.39 0.39 0.39 T:aezv3 0.40 0.40 0.43 T:aezv4 0.57 0.60 0.63 T:aegis256 0.61 0.61 0.61 T:aegis128 0.61 0.62 0.64 aegis256 0.86? 0.91? 1.03? T:aes128otrcv3 -7.78? 0.94? 9.52? T:aeadaes128ocbtaglen128v1 0.82? 0.96? 1.02? T:aes128otrpv3 0.95 0.97 0.98 T:morus1280256v2 1.00 1.04 1.04 T:morus1280256v1 1.02 1.04 1.05 T:morus640128v1 1.02 1.05 1.07 T:morus640128v2 1.04 1.07 1.09 T:morus1280128v2 1.07 1.10 1.12 T:deoxysii128v141 1.08 1.10 1.12 T:deoxysi128v141 1.03? 1.13? 1.16? T:aes256otrcv3 1.13 1.17 1.20 T:deoxysneq128128v1 1.13 1.18 1.25 T:colm0v1 0.64? 1.20? 10.10? T:aeadaes192ocbtaglen128v1 1.21 1.25 1.26 T:deoxyseq128128v1 1.22 1.27 1.32 T:deoxysii256v141 1.24 1.27 1.32 T:deoxysi256v141 1.26 1.28 1.31 T:deoxyseq256128v1 1.30 1.31 1.32 T:deoxysneq256128v1 1.34 1.40 1.45 T:aes256otrpv3 1.35? 1.44? 1.55? T:aes256gcmv1 1.30? 1.44? 1.63? T:aeadaes256ocbtaglen128v1 1.37? 1.45? 1.58? T:aes128gcmv1 1.88 1.92 2.00 T:lunarkeyakv2 1.93? 2.03? 2.18? T:oceankeyakv2 2.24 2.28 2.33 T:seakeyakv2 2.30 2.31 2.36 T:morus1280128v1 3.52 3.54 3.56 T:norx6441v2 3.55 3.58 3.60 T:norx6441v3 4.22 4.24 4.27 T:norx6441v1 5.26 5.28 5.30 T:norx6461v2 5.33 5.35 5.36 T:norx6461v3 5.40 5.42 5.46 T:norx6444v1 5.41 5.46 5.49 T:lakekeyakv2 5.43 5.48 5.57 T:lakekeyakv1 5.52 5.60 5.62 T:norx6444v3 5.56 5.61 5.64 T:norx6444v2 5.73 5.73 5.75 T:aes128n8t8silcv2 5.69 5.73 5.78 T:aes128otrsv3 5.72 5.73 5.75 T:aes128n12t8clocv2 5.73 5.73 5.75 T:aes128n12t8silcv2 5.73 5.74 5.75 T:aes128n12t8silcv3 5.72 5.74 5.75 T:aes128n8t8clocv2 5.72 5.74 5.74 T:aes128n12t8clocv3 5.86 5.88 5.89 T:norx3241v3 6.00 6.01 6.02 T:norx3241v2 6.35 6.37 6.40 T:norx6461v1 7.05 7.07 7.10 T:norx3241v1 7.92 7.94 7.94 T:aes256otrsv3 8.92 8.96 8.99 T:norx3261v2 8.95 8.96 8.97 T:norx3261v3 9.26 9.27 9.27 ascon128av12 9.51 9.51 9.51 T:ascon96v1 9.51 9.52 9.53 T:ascon128av11 9.52 9.57 9.68 T:ketjemajorv2 11.02 11.04 11.08 T:riverkeyakv2 11.20 11.38 11.44 T:ketjeminorv2 11.83 11.83 11.84 T:aesjambuv1 12.32 12.36 12.37 T:norx3261v1 13.90 13.90 13.91 ascon128v12 14.26 14.27 14.27 T:ascon128v1 14.27 14.27 14.27 T:ascon128v11 19.02 19.07 19.13 T:aes128n8clocv1 19.08 19.10 19.20 T:aes128n12clocv1 19.22 19.26 19.32 T:aes128otrsv2 19.27 19.31 19.39 T:aes128otrsv1 19.47 19.48 19.54 T:aes128n8silcv1 19.77 19.81 20.05 T:aes128n12silcv1 20.45 21.53 22.03 T:oceankeyakv1 22.03 22.06 22.11 T:aes128otrpv2 22.03 22.11 22.18 T:aes128otrpv1 25.41 25.47 25.50 T:aes256otrsv1 25.47 25.50 25.51 T:aes256otrsv2 29.08 29.18 29.23 T:aes256otrpv2 29.21 29.23 29.26 T:aes256otrpv1 29.90 30.77 30.87 T:seakeyakv1 33.53 33.55 33.56 T:twine80n6t4clocv2 34.55 34.57 34.77 T:proest256otrv1 34.73 34.75 34.77 T:twine80n6t4clocv3 41.46 42.54 42.86 T:riverkeyakv1 43.88 43.90 43.92 T:ketjesrv1 46.27 46.35 46.40 T:ketjesrv2 78.22 80.31 80.62 T:aezv1 83.81 84.25 84.43 T:proest128otrv1 86.53 86.65 86.75 T:ketjejrv1 99.79 99.94 100.80 T:twine80n6clocv1 121.64 122.61 122.96 T:deoxyseq128128v13 121.69 122.62 123.06 T:deoxysneq128128v13 143.67 145.24 147.28 T:ketjejrv2 155.00 155.00 155.02 T:present80n6t4silcv3 173.84 174.55 174.71 T:deoxyseq256128v13 173.06 175.93 177.81 T:deoxysneq256128v13 238.75? 241.16? 273.32? T:led80n6t4silcv3 408.84 410.06 412.78 aes256gcmv1 669.96 670.64 670.89 T:acorn128 673.20 674.09 679.00 T:acorn128v3 673.75 675.53 685.09 T:acorn128v2 3967.78 3978.68 3980.43 T:present80n6t4silcv2 4008.03 4017.27 4022.42 T:present80n6silcv1 5694.94 5715.92 5725.14 T:led80n6t4silcv2 5721.11 5740.54 5760.59 T:led80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.20? 0.21? 0.23? T:tiaoxinv1 0.22? 0.27? 0.31? T:tiaoxinv2 0.31? 0.35? 0.40? aegis128l 0.35? 0.37? 0.39? T:aegis128l 0.37 0.38 0.38 T:aezv5 0.39 0.39 0.39 T:aezv3 0.38 0.40 0.41 T:aezv4 0.61 0.61 0.61 T:aegis128 0.57 0.61 0.63 aegis256 0.60 0.62 0.63 T:aegis256 0.67 0.69 0.71 T:morus1280256v1 0.69 0.69 0.72 T:morus1280256v2 0.84? 0.92? 0.95? T:aes128otrcv3 0.92? 0.96? 1.07? T:aeadaes128ocbtaglen128v1 0.96 0.96 1.02 T:aes128otrpv3 1.04 1.07 1.10 T:morus640128v2 1.05 1.08 1.10 T:morus640128v1 1.06 1.10 1.10 T:morus1280128v2 1.04 1.12 1.14 T:aes256otrcv3 1.10 1.12 1.17 T:deoxysi128v141 1.10 1.12 1.13 T:deoxysii128v141 1.10 1.13 1.19 T:deoxysneq128128v1 0.99? 1.15? 1.25? T:aeadaes192ocbtaglen128v1 1.13? 1.21? 1.27? T:colm0v1 1.26 1.28 1.31 T:deoxysii256v141 1.25 1.28 1.33 T:deoxyseq256128v1 1.25 1.29 1.36 T:deoxysi256v141 1.27 1.29 1.30 T:deoxyseq128128v1 1.23 1.30 1.31 T:deoxysneq256128v1 1.28? 1.40? 1.60? T:aes128gcmv1 1.40 1.41 1.51 T:aes256otrpv3 1.38 1.44 1.52 T:aes256gcmv1 -7.41? 1.49? 10.02? T:aeadaes256ocbtaglen128v1 1.89 1.93 1.97 T:lunarkeyakv2 1.89? 2.02? 2.14? T:oceankeyakv2 2.21 2.29 2.35 T:seakeyakv2 2.34 2.37 2.39 T:morus1280128v1 3.58 3.58 3.60 T:norx6441v3 3.63 3.65 3.67 T:norx6441v2 4.27 4.29 4.30 T:norx6441v1 5.33 5.35 5.38 T:norx6461v2 5.35 5.36 5.37 T:norx6461v3 5.42 5.44 5.50 T:lakekeyakv2 5.45 5.46 5.49 T:norx6444v1 5.48 5.55 5.61 T:norx6444v2 5.50 5.56 5.61 T:norx6444v3 5.55 5.59 5.60 T:lakekeyakv1 5.69 5.72 5.78 T:aes128otrsv3 5.71 5.73 5.78 T:aes128n12t8clocv3 5.73 5.73 5.74 T:aes128n12t8silcv3 5.73 5.73 5.75 T:aes128n12t8silcv2 5.71 5.73 5.79 T:aes128n8t8clocv2 5.73 5.74 5.75 T:aes128n8t8silcv2 5.72 5.75 5.75 T:aes128n12t8clocv2 5.88 5.90 5.91 T:norx3241v3 5.99 6.00 6.01 T:norx3241v2 6.41 6.43 6.46 T:norx6461v1 7.02 7.03 7.06 T:norx3241v1 7.89 7.92 7.93 T:aes256otrsv3 8.91 8.95 8.97 T:norx3261v3 8.92 8.97 9.00 T:norx3261v2 9.25 9.27 9.27 ascon128av12 9.49 9.51 9.53 T:ascon128av11 9.50 9.51 9.53 T:ascon96v1 9.57 9.64 9.72 T:ketjemajorv2 11.03 11.05 11.08 T:riverkeyakv2 11.09 11.27 11.47 T:ketjeminorv2 11.83 11.83 11.83 T:aesjambuv1 12.31 12.34 12.37 T:norx3261v1 13.90 13.90 13.91 ascon128v12 14.25 14.26 14.27 T:ascon128v11 14.26 14.27 14.27 T:ascon128v1 19.00 19.08 19.13 T:aes128n8clocv1 19.05 19.13 19.20 T:aes128n12clocv1 19.24 19.28 19.34 T:aes128otrsv2 19.30 19.36 19.41 T:aes128otrsv1 19.45 19.48 19.58 T:aes128n8silcv1 19.75 19.85 19.93 T:aes128n12silcv1 20.42 21.44 22.33 T:oceankeyakv1 22.02 22.04 22.10 T:aes128otrpv2 22.03 22.07 22.13 T:aes128otrpv1 25.40 25.46 25.57 T:aes256otrsv1 25.48 25.54 25.58 T:aes256otrsv2 29.15 29.19 29.23 T:aes256otrpv1 29.16 29.20 29.22 T:aes256otrpv2 29.86 29.94 30.85 T:seakeyakv1 33.52 33.54 33.57 T:twine80n6t4clocv2 34.56 34.59 34.68 T:proest256otrv1 34.74 34.75 34.78 T:twine80n6t4clocv3 42.10 42.26 42.62 T:riverkeyakv1 43.89 43.90 43.93 T:ketjesrv1 46.30 46.35 46.45 T:ketjesrv2 78.62 80.79 80.99 T:aezv1 82.63 83.10 83.60 T:proest128otrv1 86.55 86.64 86.72 T:ketjejrv1 99.74 99.98 100.06 T:twine80n6clocv1 121.01 121.94 122.29 T:deoxyseq128128v13 122.80 122.98 124.00 T:deoxysneq128128v13 143.70 145.79 147.29 T:ketjejrv2 154.99 155.01 155.09 T:present80n6t4silcv3 172.96 173.57 173.82 T:deoxyseq256128v13 173.65 175.04 177.05 T:deoxysneq256128v13 238.95? 241.06? 273.08? T:led80n6t4silcv3 408.73 409.81 410.08 aes256gcmv1 670.25 670.32 678.71 T:acorn128v3 672.82 673.64 676.05 T:acorn128 683.46 683.62 687.64 T:acorn128v2 3967.73 3979.04 3982.52 T:present80n6t4silcv2 3988.19 4004.27 4017.63 T:present80n6silcv1 5712.49 5721.63 5766.24 T:led80n6t4silcv2 5731.56 5739.97 5746.39 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.19 0.21 0.21 T:tiaoxinv1 0.27? 0.28? 0.31? T:tiaoxinv2 0.31? 0.35? 0.37? aegis128l 0.35 0.36 0.38 T:aezv5 0.36 0.36 0.37 T:aezv3 0.35? 0.37? 0.39? T:aegis128l 0.37 0.38 0.40 T:aezv4 0.61 0.61 0.66 aegis256 0.59 0.62 0.65 T:aegis256 0.61 0.62 0.62 T:aegis128 0.70 0.70 0.71 T:morus1280256v1 0.69 0.71 0.71 T:morus1280256v2 -7.20? 0.93? 9.34? T:aeadaes128ocbtaglen128v1 0.93 0.94 0.95 T:aes128otrcv3 0.96 0.98 0.99 T:aes128otrpv3 1.07 1.08 1.10 T:morus1280128v2 1.07 1.08 1.09 T:morus640128v1 1.05 1.08 1.09 T:morus640128v2 -7.28? 1.09? 1.23? T:aeadaes192ocbtaglen128v1 1.10 1.11 1.12 T:deoxysii128v141 1.05 1.11 1.16 T:deoxysi128v141 1.10 1.13 1.13 T:aes256otrcv3 1.08 1.13 1.19 T:deoxysneq128128v1 1.18 1.19 1.24 T:colm0v1 1.23 1.26 1.34 T:deoxysi256v141 1.25 1.27 1.30 T:deoxysii256v141 1.25 1.27 1.28 T:deoxyseq128128v1 1.22 1.27 1.31 T:deoxyseq256128v1 1.25 1.30 1.31 T:deoxysneq256128v1 1.41 1.42 1.43 T:aes256otrpv3 -6.93? 1.47? 10.21? T:aeadaes256ocbtaglen128v1 1.42 1.49 1.53 T:aes256gcmv1 1.28? 1.50? 1.62? T:aes128gcmv1 1.88 1.91 1.95 T:lunarkeyakv2 1.90? 1.99? 2.12? T:oceankeyakv2 2.24 2.30 2.33 T:seakeyakv2 2.36 2.37 2.37 T:morus1280128v1 3.58 3.58 3.59 T:norx6441v3 3.66 3.66 3.68 T:norx6441v2 4.29 4.29 4.29 T:norx6441v1 5.35 5.35 5.38 T:norx6461v2 5.36 5.36 5.37 T:norx6461v3 5.41 5.45 5.47 T:norx6444v1 5.42 5.45 5.49 T:lakekeyakv2 5.52 5.58 5.61 T:norx6444v3 5.54 5.58 5.62 T:norx6444v2 5.56 5.59 5.61 T:lakekeyakv1 5.68 5.73 5.78 T:aes128n12t8silcv3 5.68 5.73 5.79 T:aes128n8t8silcv2 5.68 5.73 5.79 T:aes128n12t8silcv2 5.69 5.74 5.79 T:aes128n12t8clocv2 5.72 5.74 5.79 T:aes128n12t8clocv3 5.68 5.74 5.80 T:aes128n8t8clocv2 5.72 5.74 5.78 T:aes128otrsv3 5.89 5.91 5.91 T:norx3241v3 6.01 6.01 6.01 T:norx3241v2 6.41 6.41 6.42 T:norx6461v1 7.07 7.08 7.08 T:norx3241v1 7.92 7.94 7.94 T:aes256otrsv3 8.96 8.97 8.98 T:norx3261v3 8.96 8.98 8.99 T:norx3261v2 9.24 9.26 9.27 ascon128av12 9.50 9.51 9.54 T:ascon128av11 9.51 9.51 9.54 T:ascon96v1 9.57 9.62 9.78 T:ketjemajorv2 11.03 11.07 11.09 T:riverkeyakv2 11.12 11.30 11.52 T:ketjeminorv2 11.83 11.84 11.84 T:aesjambuv1 12.35 12.35 12.38 T:norx3261v1 13.90 13.90 13.91 ascon128v12 14.25 14.27 14.27 T:ascon128v1 14.25 14.27 14.28 T:ascon128v11 19.05 19.11 19.40 T:aes128n8clocv1 19.07 19.17 19.24 T:aes128n12clocv1 19.24 19.29 19.38 T:aes128otrsv2 19.31 19.37 19.43 T:aes128otrsv1 19.45 19.49 19.53 T:aes128n8silcv1 19.73 19.83 19.91 T:aes128n12silcv1 20.31 21.38 21.98 T:oceankeyakv1 22.00 22.07 22.08 T:aes128otrpv1 22.04 22.07 22.09 T:aes128otrpv2 25.42 25.45 25.55 T:aes256otrsv1 25.49 25.54 25.58 T:aes256otrsv2 29.17 29.20 29.24 T:aes256otrpv2 29.12 29.21 29.24 T:aes256otrpv1 29.85 29.91 30.12 T:seakeyakv1 33.52 33.54 33.59 T:twine80n6t4clocv2 34.54 34.56 34.61 T:proest256otrv1 34.73 34.75 34.78 T:twine80n6t4clocv3 41.56 42.52 42.86 T:riverkeyakv1 43.87 43.93 43.94 T:ketjesrv1 46.31 46.34 46.42 T:ketjesrv2 78.62 80.77 80.94 T:aezv1 82.63 83.11 83.58 T:proest128otrv1 86.58 86.63 86.70 T:ketjejrv1 99.80 99.97 100.10 T:twine80n6clocv1 121.03 121.93 122.27 T:deoxyseq128128v13 122.80 122.98 123.99 T:deoxysneq128128v13 145.67 145.79 147.21 T:ketjejrv2 154.99 155.01 155.04 T:present80n6t4silcv3 173.46 173.58 173.81 T:deoxyseq256128v13 173.64 175.07 176.38 T:deoxysneq256128v13 239.01? 241.12? 273.06? T:led80n6t4silcv3 404.58 409.84 414.20 aes256gcmv1 670.29 670.73 678.31 T:acorn128v3 672.88 673.22 676.03 T:acorn128 683.46 683.62 690.39 T:acorn128v2 3967.71 3978.86 3981.87 T:present80n6t4silcv2 3984.11 3995.96 4001.88 T:present80n6silcv1 5711.80 5721.38 5773.12 T:led80n6t4silcv2 5735.62 5739.62 5745.23 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.39 0.39 0.41 T:tiaoxinv1 0.43 0.43 0.44 T:aegis128l 0.42 0.43 0.44 T:tiaoxinv2 0.44 0.44 0.44 aegis128l 0.70 0.70 0.70 T:aegis128 0.73 0.74 0.76 T:aegis256 0.75 0.75 0.77 aegis256 0.89 0.90 0.94 T:aezv3 0.89 0.91 0.94 T:aezv4 0.91 0.95 0.96 T:aezv5 1.15 1.16 1.18 T:morus1280128v2 1.24 1.25 1.27 T:morus640128v1 1.25 1.26 1.27 T:morus640128v2 1.25 1.26 1.27 T:morus1280256v2 1.19? 1.30? 6.61? T:aeadaes128ocbtaglen128v1 1.31 1.32 1.34 T:morus1280256v1 1.29 1.33 1.36 T:aes128otrpv3 1.41 1.42 1.52 T:aes128otrcv3 1.39? 1.43? 1.64? T:aeadaes192ocbtaglen128v1 1.53 1.53 1.55 T:deoxysneq128128v1 1.55 1.56 1.58 T:deoxysi128v141 1.69 1.70 1.73 T:deoxysneq256128v1 1.75 1.76 1.78 T:aes256otrpv3 1.78 1.80 1.83 T:deoxysi256v141 1.86 1.89 1.92 T:aes256otrcv3 1.89 1.92 2.03 T:aeadaes256ocbtaglen128v1 2.17 2.18 2.19 T:deoxysii128v141 2.21 2.23 2.33 T:deoxyseq128128v1 2.42 2.43 2.46 T:deoxysii256v141 2.44 2.46 2.48 T:colm0v1 2.48 2.50 2.53 T:deoxyseq256128v1 2.83 2.84 2.85 T:morus1280128v1 3.56 3.56 3.57 T:aes128otrsv3 3.67 3.72 3.77 T:seakeyakv2 4.13 4.15 4.19 T:aes128gcmv1 4.18 4.19 4.20 T:norx6441v2 4.23 4.23 4.25 T:norx6441v3 4.34 4.39 4.45 T:aes256gcmv1 4.85 4.86 4.91 T:aes256otrsv3 4.83 4.86 4.90 T:norx6441v1 5.21 5.28 5.35 T:oceankeyakv2 5.93 5.93 5.95 T:aes128n8t8clocv2 5.93 5.94 5.94 T:aes128n12t8clocv3 5.93 5.94 5.94 T:aes128n12t8clocv2 5.99 5.99 5.99 T:aes128n8t8silcv2 5.99 6.00 6.00 T:aes128n12t8silcv2 6.00 6.00 6.00 T:aes128n12t8silcv3 6.20 6.20 6.21 T:norx6461v2 6.27 6.28 6.30 T:norx6461v3 6.38 6.39 6.39 T:norx3241v3 6.50 6.50 6.51 T:norx3241v2 6.78 6.81 6.83 T:lakekeyakv2 7.01 7.04 7.06 T:lakekeyakv1 7.23 7.26 7.29 T:norx6461v1 7.52 7.52 7.56 T:norx3241v1 8.09 8.10 8.14 T:norx6444v1 8.10 8.12 8.14 T:norx6444v2 8.15 8.16 8.18 T:norx6444v3 8.66 8.70 8.77 T:lunarkeyakv2 9.61 9.62 9.62 ascon128av12 9.72 9.73 9.76 T:norx3261v3 9.74 9.76 9.78 T:norx3261v2 9.83 9.84 9.85 T:ascon128av11 9.85 9.86 9.86 T:ascon96v1 11.85 11.85 11.85 T:aesjambuv1 12.35 12.40 12.45 T:riverkeyakv2 13.07 13.08 13.14 T:norx3261v1 14.01 14.02 14.05 T:ketjemajorv2 14.24 14.24 14.25 ascon128v12 14.56 14.58 14.78 T:ketjeminorv2 14.59 14.59 14.59 T:ascon128v11 14.59 14.59 14.59 T:ascon128v1 22.71 22.74 22.77 T:aes128otrsv2 22.81 22.83 22.88 T:aes128otrsv1 24.14 24.18 24.18 T:aes128otrpv1 24.16 24.19 24.23 T:aes128otrpv2 28.67 28.69 28.71 T:aes128n8clocv1 28.72 28.74 28.79 T:aes128n12clocv1 29.37 29.39 29.52 T:aes256otrsv1 29.41 29.47 29.49 T:aes256otrsv2 29.70 29.74 29.81 T:aes128n8silcv1 30.26 30.49 31.12 T:aes128n12silcv1 31.62 31.65 31.69 T:aes256otrpv2 31.62 31.68 31.70 T:aes256otrpv1 32.58 32.74 33.73 T:oceankeyakv1 34.65 34.66 34.68 T:twine80n6t4clocv2 35.73 35.73 35.74 T:twine80n6t4clocv3 36.61 36.72 36.88 T:seakeyakv1 37.79 37.81 38.03 T:proest256otrv1 46.01 46.66 46.79 T:riverkeyakv1 48.28 48.28 48.29 T:ketjesrv1 50.85 51.04 51.20 T:ketjesrv2 87.39 87.43 87.49 T:proest128otrv1 93.76 93.77 93.80 T:ketjejrv1 123.57 123.59 123.71 T:deoxysneq128128v13 151.15 151.18 152.28 T:ketjejrv2 151.89 152.28 152.91 T:twine80n6clocv1 157.00 157.01 157.01 T:present80n6t4silcv3 159.80 162.22 164.67 T:aezv1 175.59 176.01 177.76 T:deoxysneq256128v13 186.18 186.45 186.85 T:deoxyseq128128v13 243.57? 243.59? 272.86? T:led80n6t4silcv3 264.95 265.58 265.81 T:deoxyseq256128v13 414.81 417.67 417.77 aes256gcmv1 763.15 763.48 765.88 T:acorn128v3 765.08 765.26 767.91 T:acorn128 774.77 774.84 779.70 T:acorn128v2 6012.40 6014.01 6014.51 T:present80n6t4silcv2 6018.25 6020.74 6046.05 T:present80n6silcv1 8531.76 8539.63 8577.19 T:led80n6t4silcv2 8570.90 8582.36 8592.14 T:led80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.45 0.46 0.48 aegis128l 0.47 0.48 0.49 T:aegis128l 0.50 0.52 0.54 T:tiaoxinv2 0.52 0.53 0.57 T:tiaoxinv1 0.71 0.73 0.73 T:aegis128 0.74 0.74 0.75 aegis256 0.77 0.77 0.79 T:aegis256 0.88 0.89 0.94 T:aezv4 0.90 0.90 0.98 T:aezv5 0.88 0.91 0.96 T:aezv3 0.99 1.00 1.01 T:morus1280256v1 1.01 1.01 1.02 T:morus1280256v2 1.19 1.21 1.21 T:morus1280128v2 1.19 1.25 1.32 T:aeadaes128ocbtaglen128v1 1.27 1.28 1.28 T:morus640128v1 1.28 1.29 1.29 T:morus640128v2 1.34? 1.36? 1.50? T:aeadaes192ocbtaglen128v1 1.38 1.38 1.43 T:aes128otrpv3 1.49 1.54 1.58 T:aes128otrcv3 1.69 1.71 1.73 T:deoxysi128v141 1.71 1.72 1.76 T:deoxysneq128128v1 1.78 1.79 1.81 T:deoxysneq256128v1 1.83 1.87 1.90 T:aes256otrpv3 1.89? 1.93? 7.24? T:aeadaes256ocbtaglen128v1 1.94 1.95 1.96 T:deoxysi256v141 1.98 1.99 2.03 T:aes256otrcv3 2.16 2.18 2.18 T:deoxysii128v141 2.44 2.45 2.48 T:deoxyseq128128v1 2.47 2.47 2.49 T:deoxysii256v141 2.48 2.51 2.59 T:colm0v1 2.68 2.69 2.72 T:deoxyseq256128v1 2.89 2.89 2.89 T:morus1280128v1 3.61 3.63 3.67 T:aes128otrsv3 3.69 3.74 3.81 T:seakeyakv2 4.15 4.16 4.16 T:norx6441v3 4.18 4.20 4.23 T:norx6441v2 4.20 4.22 4.34 T:aes128gcmv1 4.37 4.45 4.48 T:aes256gcmv1 4.75 4.76 4.79 T:norx6441v1 4.94 4.95 4.98 T:aes256otrsv3 5.26 5.33 5.52 T:oceankeyakv2 5.88 5.88 5.93 T:aes128n8t8clocv2 5.88 5.88 5.93 T:aes128n12t8clocv3 5.89 5.89 5.90 T:aes128n12t8clocv2 5.93 5.94 5.98 T:aes128n12t8silcv2 5.93 5.94 5.98 T:aes128n12t8silcv3 5.94 5.94 5.98 T:aes128n8t8silcv2 6.20 6.21 6.22 T:norx6461v3 6.20 6.24 6.26 T:norx6461v2 6.32 6.32 6.33 T:norx3241v3 6.42 6.42 6.42 T:norx3241v2 6.77 6.79 6.91 T:lakekeyakv2 7.13 7.15 7.19 T:norx6461v1 7.13 7.15 7.19 T:lakekeyakv1 7.50 7.51 7.57 T:norx3241v1 8.09 8.11 8.15 T:norx6444v1 8.13 8.13 8.14 T:norx6444v2 8.17 8.17 8.20 T:norx6444v3 8.76 8.81 9.03 T:lunarkeyakv2 9.57 9.59 9.62 T:norx3261v3 9.60 9.60 9.60 ascon128av12 9.67 9.67 9.71 T:norx3261v2 9.84 9.84 9.84 T:ascon96v1 9.88 9.88 9.97 T:ascon128av11 12.24 12.24 12.24 T:aesjambuv1 12.64 12.69 12.71 T:riverkeyakv2 12.93 12.95 12.99 T:norx3261v1 13.99? 14.03? 15.87? T:ketjemajorv2 14.23 14.23 14.23 ascon128v12 14.37 14.40 14.49 T:ketjeminorv2 14.59 14.59 14.59 T:ascon128v11 14.59 14.59 14.59 T:ascon128v1 23.01 23.04 23.11 T:aes128otrsv2 23.04 23.06 23.08 T:aes128otrsv1 24.75 24.77 24.80 T:aes128otrpv1 24.79 24.83 24.85 T:aes128otrpv2 28.73 28.75 28.82 T:aes128n12clocv1 29.07 29.10 29.14 T:aes128n8clocv1 29.64 29.67 29.72 T:aes256otrsv2 29.62 29.70 29.88 T:aes256otrsv1 29.71 29.77 29.81 T:aes128n8silcv1 30.39 30.51 30.62 T:aes128n12silcv1 32.24 32.29 32.33 T:aes256otrpv1 32.39 32.47 32.50 T:aes256otrpv2 32.56 32.69 33.46 T:oceankeyakv1 34.53 34.54 34.60 T:twine80n6t4clocv2 35.60 35.62 35.64 T:twine80n6t4clocv3 36.66 36.77 36.87 T:seakeyakv1 37.77 37.83 37.95 T:proest256otrv1 46.42 46.65 46.92 T:riverkeyakv1 48.78 48.78 48.80 T:ketjesrv1 51.88 52.06 52.07 T:ketjesrv2 86.94 86.96 91.45 T:proest128otrv1 92.82 92.85 92.88 T:ketjejrv1 143.67 143.87 143.94 T:deoxysneq128128v13 152.06 152.09 152.57 T:ketjejrv2 152.02 152.53 152.69 T:twine80n6clocv1 157.68 157.71 157.73 T:present80n6t4silcv3 159.29 160.84 163.79 T:aezv1 185.68 186.46 186.81 T:deoxyseq128128v13 197.72 198.72 199.16 T:deoxysneq256128v13 244.32 244.44 259.25 T:led80n6t4silcv3 265.66 265.70 266.71 T:deoxyseq256128v13 415.11 417.27 419.60 aes256gcmv1 752.65 755.08 757.90 T:acorn128 765.99 766.27 766.91 T:acorn128v3 771.91 772.31 773.12 T:acorn128v2 5992.40 5993.44 5996.21 T:present80n6t4silcv2 6019.55 6032.97 6058.42 T:present80n6silcv1 8526.59 8533.03 8636.91 T:led80n6t4silcv2 8574.43 8581.34 8602.21 T:led80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.46 0.47 0.47 T:aegis128l 0.50 0.51 0.54 T:aezv4 0.50 0.51 0.53 T:aezv5 0.50 0.51 0.53 T:tiaoxinv2 0.51 0.51 0.54 T:tiaoxinv1 0.51 0.52 0.53 aegis128l 0.50 0.52 0.55 T:aezv3 0.71 0.71 0.71 T:aegis128 0.75 0.75 0.76 T:aegis256 0.81 0.81 0.82 aegis256 0.99 1.00 1.00 T:morus1280256v1 1.01 1.01 1.01 T:morus1280256v2 1.18 1.19 1.20 T:morus1280128v2 1.18? 1.22? 6.40? T:aeadaes128ocbtaglen128v1 1.27 1.27 1.28 T:morus640128v1 1.28 1.28 1.30 T:morus640128v2 1.36 1.38 1.39 T:aes128otrpv3 1.34? 1.38? 6.52? T:aeadaes192ocbtaglen128v1 1.46 1.46 1.46 T:aes128otrcv3 1.69 1.70 1.73 T:deoxysi128v141 1.71 1.72 1.74 T:deoxysneq128128v1 1.76 1.77 1.78 T:deoxysneq256128v1 1.82 1.84 1.85 T:aes256otrpv3 1.87? 1.90? 7.23? T:aeadaes256ocbtaglen128v1 1.93 1.95 1.96 T:deoxysi256v141 1.96 1.96 1.97 T:aes256otrcv3 2.15 2.16 2.16 T:deoxysii128v141 2.45 2.46 2.47 T:deoxysii256v141 2.47 2.48 2.48 T:deoxyseq128128v1 2.47 2.48 2.53 T:colm0v1 2.66 2.68 2.69 T:deoxyseq256128v1 2.88 2.88 2.89 T:morus1280128v1 3.61 3.61 3.61 T:aes128otrsv3 3.77 3.80 3.85 T:seakeyakv2 4.14 4.15 4.15 T:norx6441v3 4.12 4.16 4.20 T:aes128gcmv1 4.17 4.18 4.18 T:norx6441v2 4.32 4.36 4.44 T:aes256gcmv1 4.74 4.75 4.75 T:norx6441v1 4.93 4.94 4.94 T:aes256otrsv3 5.33 5.35 5.55 T:oceankeyakv2 5.87 5.87 5.91 T:aes128n12t8clocv3 5.87 5.88 5.88 T:aes128n8t8clocv2 5.88 5.88 5.91 T:aes128n12t8clocv2 5.93 5.93 5.96 T:aes128n12t8silcv2 5.93 5.93 5.96 T:aes128n8t8silcv2 5.93 5.93 5.96 T:aes128n12t8silcv3 6.18 6.19 6.20 T:norx6461v2 6.19 6.20 6.21 T:norx6461v3 6.32 6.32 6.33 T:norx3241v3 6.42 6.42 6.42 T:norx3241v2 6.80 6.81 6.86 T:lakekeyakv2 7.11 7.12 7.14 T:norx6461v1 7.17 7.19 7.20 T:lakekeyakv1 7.48 7.49 7.51 T:norx3241v1 8.14 8.15 8.16 T:norx6444v1 8.17 8.18 8.19 T:norx6444v2 8.22 8.24 8.25 T:norx6444v3 8.89 8.95 9.06 T:lunarkeyakv2 9.57 9.57 9.59 T:norx3261v3 9.60 9.60 9.60 ascon128av12 9.65 9.66 9.68 T:norx3261v2 9.83 9.83 9.84 T:ascon96v1 9.88 9.89 9.89 T:ascon128av11 12.24 12.24 12.24 T:aesjambuv1 12.66 12.77 12.79 T:riverkeyakv2 12.91 12.91 12.92 T:norx3261v1 14.04 14.06 14.10 T:ketjemajorv2 14.23 14.23 14.23 ascon128v12 14.42 14.46 14.55 T:ketjeminorv2 14.59 14.59 14.60 T:ascon128v11 14.59 14.59 14.60 T:ascon128v1 23.05 23.06 23.07 T:aes128otrsv1 23.08 23.12 23.15 T:aes128otrsv2 24.80 24.84 24.88 T:aes128otrpv1 24.81 24.89 24.91 T:aes128otrpv2 28.70 28.73 28.77 T:aes128n12clocv1 29.03 29.05 29.08 T:aes128n8clocv1 29.68 29.73 29.94 T:aes256otrsv1 29.67 29.74 29.77 T:aes128n8silcv1 29.71 29.75 29.91 T:aes256otrsv2 30.43 30.48 30.64 T:aes128n12silcv1 32.30 32.37 32.59 T:aes256otrpv1 32.45 32.54 32.57 T:aes256otrpv2 32.80 32.89 33.87 T:oceankeyakv1 34.51 34.54 34.55 T:twine80n6t4clocv2 35.60 35.60 35.62 T:twine80n6t4clocv3 36.65 36.71 36.90 T:seakeyakv1 37.81 37.84 37.88 T:proest256otrv1 46.42 46.65 46.95 T:riverkeyakv1 48.81 48.81 48.83 T:ketjesrv1 51.97 52.09 52.13 T:ketjesrv2 86.86 87.22 91.41 T:proest128otrv1 92.89 92.93 92.97 T:ketjejrv1 143.88 144.00 144.32 T:deoxysneq128128v13 152.09 152.13 152.62 T:ketjejrv2 152.41 152.54 152.68 T:twine80n6clocv1 157.67 157.69 157.71 T:present80n6t4silcv3 158.92 160.68 163.44 T:aezv1 185.77 186.49 186.86 T:deoxyseq128128v13 197.21 198.79 199.17 T:deoxysneq256128v13 244.29 244.44 259.25 T:led80n6t4silcv3 265.57 265.71 266.23 T:deoxyseq256128v13 408.83 409.79 412.54 aes256gcmv1 752.24 755.09 757.89 T:acorn128 765.75 766.88 766.94 T:acorn128v3 772.24 772.44 773.11 T:acorn128v2 5991.77 5992.99 5995.57 T:present80n6t4silcv2 6019.52 6026.92 6073.43 T:present80n6silcv1 8529.64 8535.57 8629.52 T:led80n6t4silcv2 8572.79 8576.78 8595.05 T:led80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 2.59? 2.65? 3.15? T:aegis128 2.59? 2.80? 3.05? T:aegis128l 2.52? 2.81? 3.09? aegis128l 3.08? 3.30? 4.05? T:tiaoxinv1 3.20? 3.35? 3.62? aegis256 3.05? 3.38? 3.95? T:aegis256 3.53? 3.84? 4.15? T:tiaoxinv2 4.32? 4.34? 5.66? T:aezv4 4.05? 4.84? 5.87? T:aezv5 4.60? 4.94? 5.80? T:aezv3 4.87? 5.01? 5.79? T:morus640128v1 5.16 5.66 5.70 T:morus640128v2 6.41 6.61 7.03 T:morus1280128v2 7.05? 7.27? 8.09? T:morus1280256v2 7.11? 7.39? 7.91? T:morus1280256v1 7.29? 7.92? 8.30? T:aes128otrpv3 7.62? 8.06? 9.03? T:aes128otrsv3 7.62? 8.27? 9.39? T:deoxysneq128128v1 8.69 8.74 9.21 T:aes128n12t8clocv2 8.70 8.88 9.32 T:aes128n12t8clocv3 8.77 8.99 9.53 T:aes128n8t8clocv2 8.18? 9.90? 138.34? T:aeadaes128ocbtaglen128v1 9.23? 10.01? 16.12? T:aeadaes256ocbtaglen128v1 10.05 10.25 10.73 T:aes128n12t8silcv3 9.78? 10.25? 11.28? T:deoxysi128v141 10.20 10.28 10.41 T:aes128n8t8silcv2 9.92 10.28 10.72 T:aes256otrsv3 10.06 10.30 10.55 T:aes128n12t8silcv2 9.41? 10.31? 11.25? T:aes256otrpv3 9.39? 10.41? 11.39? T:deoxysneq256128v1 10.84? 10.88? 12.33? T:aes128otrcv3 9.41? 10.88? 138.79? T:aeadaes192ocbtaglen128v1 11.20? 11.56? 13.42? T:deoxysi256v141 11.78 12.04 12.58 T:colm0v1 13.33 13.62 14.13 T:deoxysii128v141 13.99? 14.16? 15.87? T:aes256otrcv3 13.99 14.62 15.07 T:deoxyseq128128v1 14.59 14.70 15.27 T:morus1280128v1 13.98? 14.77? 16.09? T:norx6441v1 14.69 14.84 15.14 T:norx6441v2 14.69 14.97 16.04 T:norx6441v3 14.62 15.01 16.17 T:deoxysii256v141 15.20 15.25 15.59 T:ascon96v1 15.30 15.59 15.81 T:ascon128av11 15.66 15.77 15.93 ascon128av12 15.81 15.87 16.08 T:norx3241v3 15.92 15.95 16.34 T:norx3241v2 16.10 16.11 16.50 T:aesjambuv1 16.10 16.11 17.25 T:norx3241v1 17.16 17.31 18.26 T:deoxyseq256128v1 19.23 19.38 19.76 ascon128v12 19.84 19.92 20.14 T:ascon128v1 19.91 19.94 20.20 T:ascon128v11 20.73 21.43 23.02 T:norx6461v1 21.45 21.59 22.62 T:norx6461v3 21.15 21.60 21.77 T:norx6461v2 24.13 24.58 24.65 T:norx3261v3 24.39 24.66 24.66 T:norx3261v2 25.80 26.01 26.09 T:lakekeyakv1 27.57 28.04 28.80 T:norx3261v1 29.89 30.49 31.06 T:riverkeyakv2 29.87 30.52 31.41 T:lakekeyakv2 35.26 35.83 36.98 T:seakeyakv2 36.79 37.00 37.81 T:aes128n12clocv1 37.02 37.96 38.47 T:aes128n8clocv1 38.80 39.38 40.80 T:aes128otrsv2 39.06 39.65 40.59 T:aes128otrsv1 40.90 41.15 41.89 T:aes128otrpv2 40.79 41.67 42.35 T:aes128otrpv1 41.84 42.09 42.76 T:aes128n8silcv1 43.13 43.33 44.16 T:aes128n12silcv1 48.20 48.54 49.02 T:twine80n6t4clocv3 48.63 48.98 49.75 T:twine80n6t4clocv2 49.83 50.16 50.99 T:aes256otrsv1 49.91 50.22 51.14 T:aes256otrsv2 52.53 52.62 53.19 T:aes256otrpv2 52.48 52.88 54.93 T:ketjeminorv2 52.05 52.88 53.50 T:aes256otrpv1 55.28 56.12 57.98 T:aes128gcmv1 58.77 58.91 59.83 T:oceankeyakv2 58.70 59.34 61.41 T:aes256gcmv1 59.30 59.52 60.12 T:norx6444v2 60.11 60.26 61.80 T:norx6444v3 64.72 65.12 65.91 T:norx6444v1 75.43 75.54 75.82 T:ketjesrv1 76.30 76.84 78.13 T:ketjemajorv2 85.06 85.47 86.70 T:riverkeyakv1 85.60 86.15 86.53 T:ketjesrv2 109.69 110.00 110.18 T:proest256otrv1 122.59 123.13 124.34 T:ketjejrv1 139.45 139.85 140.03 T:deoxysneq128128v13 141.31 141.64 142.86 T:lunarkeyakv2 170.83 171.26 171.65 T:twine80n6clocv1 172.41 172.84 178.59 T:proest128otrv1 182.21 183.70 185.06 T:aezv1 193.23 193.23 193.25 T:present80n6t4silcv3 198.48 199.69 201.80 T:deoxysneq256128v13 199.68 200.45 201.77 T:ketjejrv2 232.46 232.91 233.33 T:deoxyseq128128v13 274.58 275.34 277.16 T:seakeyakv1 290.34? 290.38? 324.51? T:led80n6t4silcv3 329.88 330.45 330.99 T:deoxyseq256128v13 355.45 359.72 368.92 T:oceankeyakv1 467.64 467.90 470.81 aes256gcmv1 2670.12 2674.60 2675.48 T:acorn128 2697.24 2697.60 2711.34 T:acorn128v3 2751.45 2751.60 2752.07 T:acorn128v2 6719.39 6719.54 6720.71 T:present80n6t4silcv2 6728.91 6729.92 6743.63 T:present80n6silcv1 8808.06 8835.52 8978.71 T:led80n6t4silcv2 8888.06 8957.10 9075.19 T:led80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 2.52? 2.73? 3.12? T:aegis128 2.81? 3.16? 3.88? aegis128l 3.05? 3.26? 3.52? T:aegis128l 3.45? 3.45? 4.51? aegis256 3.15? 3.46? 4.05? T:tiaoxinv1 3.47? 3.74? 4.37? T:aegis256 3.56? 3.84? 4.58? T:tiaoxinv2 4.08? 4.08? 5.36? T:aezv5 4.62? 4.66? 6.13? T:aezv3 4.63? 5.03? 6.69? T:aezv4 5.03? 5.47? 6.10? T:morus640128v1 5.45 5.56 5.77 T:morus640128v2 5.71? 5.91? 6.52? T:morus1280256v1 6.02? 6.30? 6.79? T:morus1280256v2 6.98? 7.57? 7.86? T:morus1280128v2 8.23 8.24 9.07 T:aes128otrpv3 8.80? 8.90? 10.05? T:aes128n8t8clocv2 8.78 8.91 9.14 T:aes128n12t8clocv3 8.91 8.99 9.49 T:aes128n12t8clocv2 8.91 9.08 9.49 T:aes128otrsv3 8.88? 9.50? 14.12? T:aeadaes128ocbtaglen128v1 10.12 10.27 10.76 T:aes128n8t8silcv2 10.18? 10.30? 11.46? T:aes128n12t8silcv3 10.21 10.30 10.50 T:aes128n12t8silcv2 10.59 10.61 11.30 T:aes256otrpv3 9.65? 10.92? 15.65? T:aeadaes192ocbtaglen128v1 9.34? 10.96? 139.30? T:aeadaes256ocbtaglen128v1 11.70 11.86 12.56 T:aes256otrsv3 12.08 12.12 12.21 T:aes128otrcv3 11.39 12.14 12.17 T:deoxysneq256128v1 11.94? 12.51? 14.34? T:deoxysneq128128v1 13.23 13.32 14.46 T:deoxysi128v141 13.30? 13.68? 15.67? T:colm0v1 13.73? 13.80? 16.44? T:deoxysii128v141 14.44 14.55 14.93 T:morus1280128v1 14.18? 14.91? 15.98? T:norx6441v1 14.92 14.92 15.08 T:norx6441v3 15.03 15.05 15.70 T:norx6441v2 15.27 15.48 16.05 T:ascon128av11 15.17 15.51 16.16 ascon128av12 15.34 15.52 16.00 T:ascon96v1 15.70 15.98 16.02 T:aes256otrcv3 16.05 16.05 16.47 T:norx3241v2 16.03 16.08 16.29 T:norx3241v3 16.24 16.24 16.97 T:norx3241v1 16.03 16.55 17.66 T:deoxysii256v141 16.57 16.80 18.41 T:deoxysi256v141 17.27 17.31 17.61 T:aesjambuv1 17.85 18.54 19.05 T:deoxyseq128128v1 18.57 19.04 20.21 T:deoxyseq256128v1 19.30 19.46 19.72 ascon128v12 19.77 19.93 20.29 T:ascon128v1 19.80 19.96 20.32 T:ascon128v11 20.78 21.41 22.40 T:norx6461v1 21.53 21.59 21.98 T:norx6461v2 21.68 21.72 21.73 T:norx6461v3 24.10 24.10 24.56 T:norx3261v3 24.32 24.52 24.66 T:norx3261v2 25.66 26.33 27.34 T:lakekeyakv1 27.40 27.44 27.95 T:norx3261v1 30.23 30.60 31.45 T:lakekeyakv2 30.33 30.73 31.24 T:riverkeyakv2 35.34 35.48 36.37 T:seakeyakv2 36.89 37.36 38.41 T:aes128n8clocv1 36.81 37.63 38.35 T:aes128n12clocv1 39.90 40.12 40.99 T:aes128otrsv1 39.83 40.36 40.95 T:aes128otrsv2 41.20 41.48 42.45 T:aes128otrpv2 41.23 41.67 41.91 T:aes128otrpv1 42.20 42.31 42.78 T:aes128n8silcv1 42.78 43.26 44.27 T:aes128n12silcv1 48.10 48.23 48.31 T:twine80n6t4clocv3 48.34 48.88 49.47 T:twine80n6t4clocv2 49.90 50.28 51.12 T:aes256otrsv1 49.95 50.36 50.99 T:aes256otrsv2 52.12 52.27 54.60 T:ketjeminorv2 52.30 52.50 53.05 T:aes256otrpv2 52.50 52.71 53.17 T:aes256otrpv1 55.69 57.16 59.25 T:aes128gcmv1 58.34 58.73 60.76 T:oceankeyakv2 58.45 59.03 60.15 T:aes256gcmv1 59.77 60.02 60.98 T:norx6444v2 60.10 60.48 61.29 T:norx6444v3 64.13 64.60 65.34 T:norx6444v1 76.16 76.41 76.55 T:ketjesrv1 76.53 76.73 78.76 T:ketjemajorv2 85.50 86.09 87.25 T:riverkeyakv1 86.43 86.76 87.25 T:ketjesrv2 111.47 111.48 112.52 T:proest256otrv1 122.26 122.38 123.32 T:ketjejrv1 143.07 144.04 147.17 T:lunarkeyakv2 159.08 160.51 161.31 T:deoxysneq128128v13 170.26 170.42 170.91 T:twine80n6clocv1 172.62 173.16 183.73 T:proest128otrv1 186.31 187.11 188.45 T:aezv1 193.55 193.58 193.76 T:present80n6t4silcv3 200.45 201.81 202.15 T:ketjejrv2 220.91 221.72 223.20 T:deoxysneq256128v13 233.44 233.76 235.16 T:deoxyseq128128v13 274.92 275.54 277.09 T:seakeyakv1 291.60 291.84 308.41 T:led80n6t4silcv3 331.98 332.39 333.51 T:deoxyseq256128v13 356.46 357.19 369.61 T:oceankeyakv1 468.55 470.48 471.05 aes256gcmv1 2655.52 2665.63 2672.52 T:acorn128 2697.77 2712.21 2712.48 T:acorn128v3 2738.84 2740.98 2741.41 T:acorn128v2 6698.62 6698.80 6699.36 T:present80n6t4silcv2 6729.15 6730.12 6733.42 T:present80n6silcv1 8758.82 8782.84 8944.52 T:led80n6t4silcv2 8862.23 8896.41 8950.16 T:led80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 2.51 2.52 2.69 T:aegis128 2.62? 2.77? 3.82? aegis128l 2.72? 2.87? 3.17? T:aegis128l 3.08? 3.12? 3.88? T:tiaoxinv1 3.08? 3.20? 3.52? T:aegis256 3.21? 3.42? 3.97? T:aezv5 3.24? 3.49? 4.00? T:tiaoxinv2 3.50? 3.51? 4.77? aegis256 3.43? 3.66? 4.68? T:aezv4 3.77? 3.80? 4.20? T:aezv3 4.97 5.06 5.21 T:morus640128v1 5.27 5.27 5.57 T:morus640128v2 5.52 5.52 5.61 T:morus1280256v1 5.81 5.83 5.84 T:morus1280256v2 6.85 6.85 6.87 T:morus1280128v2 8.23 8.24 8.24 T:aes128otrpv3 8.67 8.67 9.47 T:aes128n12t8clocv3 8.67 8.73 8.80 T:aes128n8t8clocv2 8.74 8.80 8.98 T:aes128n12t8clocv2 8.88 8.89 8.91 T:aes128otrsv3 8.64? 9.55? 136.45? T:aeadaes128ocbtaglen128v1 9.07? 9.64? 145.34? T:aeadaes256ocbtaglen128v1 9.72? 10.05? 11.89? T:aeadaes192ocbtaglen128v1 10.03 10.08 10.49 T:aes128n8t8silcv2 10.05? 10.24? 11.22? T:aes128n12t8silcv2 10.03 10.26 10.62 T:aes128n12t8silcv3 10.45 10.59 10.96 T:aes256otrpv3 11.10 11.65 11.66 T:deoxysneq256128v1 11.69 11.70 11.70 T:aes256otrsv3 12.12 12.16 12.20 T:aes128otrcv3 11.77 12.20 12.66 T:deoxysneq128128v1 12.51? 13.34? 14.05? T:colm0v1 13.16 13.48 14.16 T:deoxysi128v141 13.27 13.50 13.57 T:deoxysii128v141 14.01 14.02 14.04 T:norx6441v1 14.51 14.53 14.55 T:morus1280128v1 14.89 14.92 14.96 T:norx6441v3 15.02 15.02 15.08 T:norx6441v2 15.15 15.20 15.45 ascon128av12 15.07 15.30 15.68 T:ascon96v1 15.30 15.32 15.88 T:ascon128av11 15.65 15.70 15.83 T:aes256otrcv3 15.80 15.84 16.12 T:deoxysii256v141 16.02 16.02 16.02 T:norx3241v2 16.07 16.07 16.08 T:norx3241v3 16.23 16.23 16.40 T:norx3241v1 16.20 16.36 16.77 T:deoxysi256v141 17.09 17.09 17.31 T:aesjambuv1 18.23 18.76 19.07 T:deoxyseq128128v1 18.41 18.95 19.59 T:deoxyseq256128v1 19.12 19.12 19.20 ascon128v12 19.50 19.54 19.91 T:ascon128v1 19.70 19.70 19.92 T:ascon128v11 20.61 20.63 20.81 T:norx6461v1 21.54 21.54 21.58 T:norx6461v2 21.66 21.70 21.77 T:norx6461v3 24.12 24.12 24.13 T:norx3261v3 24.30 24.30 24.44 T:norx3261v2 25.46 25.64 26.00 T:lakekeyakv1 27.39 27.40 27.42 T:norx3261v1 29.74 30.07 30.13 T:lakekeyakv2 29.82 30.38 30.56 T:riverkeyakv2 35.70 35.86 36.19 T:seakeyakv2 36.59 36.89 37.75 T:aes128n12clocv1 37.03 37.23 37.49 T:aes128n8clocv1 38.84 39.18 39.63 T:aes128otrsv2 39.88 40.14 40.20 T:aes128otrsv1 40.92 41.13 41.20 T:aes128otrpv1 41.41 41.98 42.34 T:aes128otrpv2 41.99 42.08 42.41 T:aes128n8silcv1 43.09 43.27 44.19 T:aes128n12silcv1 47.85 48.16 48.64 T:twine80n6t4clocv3 48.27 48.40 49.32 T:twine80n6t4clocv2 49.16 49.90 50.23 T:aes256otrsv1 50.04 50.17 50.42 T:aes256otrsv2 52.10 52.55 54.27 T:ketjeminorv2 52.26 52.85 53.29 T:aes256otrpv2 52.74 53.30 53.55 T:aes256otrpv1 53.94 56.20 57.26 T:aes128gcmv1 57.82 58.08 59.09 T:aes256gcmv1 59.05 59.54 60.43 T:oceankeyakv2 59.99 60.13 60.82 T:norx6444v2 60.27 60.51 61.41 T:norx6444v3 63.72 63.84 64.79 T:norx6444v1 75.90 75.91 76.43 T:ketjesrv1 76.52 76.60 78.82 T:ketjemajorv2 85.29 85.52 86.18 T:riverkeyakv1 86.32 86.54 87.22 T:ketjesrv2 107.92 108.05 108.95 T:proest256otrv1 122.00 122.44 123.01 T:ketjejrv1 143.37 143.80 146.17 T:lunarkeyakv2 159.57 160.37 161.15 T:deoxysneq128128v13 169.94 170.26 170.30 T:twine80n6clocv1 172.50 172.77 184.04 T:proest128otrv1 185.75 186.63 187.05 T:aezv1 193.49 193.53 193.68 T:present80n6t4silcv3 200.02 201.47 202.69 T:ketjejrv2 220.47 221.12 222.80 T:deoxysneq256128v13 233.66 233.84 235.38 T:deoxyseq128128v13 274.57 274.90 276.66 T:seakeyakv1 291.38 291.80 308.05 T:led80n6t4silcv3 331.54 332.21 333.02 T:deoxyseq256128v13 356.25 360.34 369.44 T:oceankeyakv1 465.73 465.78 468.10 aes256gcmv1 2663.02 2663.27 2663.98 T:acorn128 2697.73 2712.20 2712.80 T:acorn128v3 2738.84 2741.45 2753.66 T:acorn128v2 6698.71 6698.80 6704.80 T:present80n6t4silcv2 6728.72 6728.89 6729.38 T:present80n6silcv1 8775.34 8837.91 8951.89 T:led80n6t4silcv2 8889.89 8919.06 9022.45 T:led80n6silcv1