VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506

[Page version: 20251103 11:56:58]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 25.27 25.42 25.57 T:xoodyakv1 29.76? 30.42? 37.29? ascon128av12 39.79 40.19 41.52 ascon80pqv12 40.12 40.19 40.66 ascon128v12 52.92 53.13 53.55 T:knot128v2 54.93? 55.17? 84.20? T:schwaemm256256v1 48.67? 59.59? 59.68? T:schwaemm256128v1 62.50 62.50 62.51 T:giftcofb128v1 51.33? 63.47? 77.92? T:schwaemm192192v1 78.34? 81.62? 122.10? T:saeaes192a120t128v1 69.69? 82.32? 100.80? T:saeaes128a120t128v1 80.03? 82.50? 100.63? T:saeaes128a64t128v1 80.21? 84.80? 102.30? T:isapa128av20 85.60? 86.81? 103.55? T:comet128aesv1 57.97? 88.13? 88.13? T:schwaemm128128v1 89.59 90.63 91.67 T:tinyjambu128 92.86? 97.74? 113.69? T:saeaes192a64t64v1 81.56? 99.95? 100.08? T:knot128v1 82.80? 99.96? 123.34? T:saeaes192a64t128v1 84.80? 102.30? 103.55? T:gimli24v1 101.89 103.55 104.17 T:saeaes128a64t64v1 103.97 103.97 104.59 T:saeaes128a120t64v1 107.39? 107.56? 131.19? T:drygascon128k16 106.18? 108.08? 131.26? T:drygascon128k56 82.75? 112.73? 148.35? T:isapa128v20 93.21? 113.96? 115.52? T:saeaes256a64t64v1 93.90? 114.27? 141.02? T:saeaes256a120t128v1 128.14? 128.32? 156.68? T:tinyjambu256 107.56? 131.26? 131.47? T:drygascon128k32 112.41? 135.92? 166.89? T:saturninctrcascadev2 139.18 139.18 139.39 T:tinyjambu192 115.27? 139.25? 139.80? T:saeaes256a64t128v1 124.25? 150.64? 151.68? T:knot192 139.74? 152.01? 219.83? T:spook128su512v1 154.43? 154.95? 231.30? T:drygascon256k32 140.45? 172.24? 213.93? T:spook128mu384v1 142.53? 175.43? 175.64? T:grain128aead 178.55 178.56 178.97 T:knot256 137.46? 205.23? 205.46? romulusn 210.85 211.06 211.69 T:spook128mu512v1 175.06? 215.43? 215.89? T:spook128su384v1 201.29? 216.26? 260.92? T:skinnyaeadtk3128128v1 252.73? 253.35? 317.11? T:isapk128av20 246.42? 297.10? 361.69? T:photonbeetleaead128rate128v1 305.02? 305.44? 372.52? T:estatetweaes128v1 253.02? 308.15? 308.37? romulusm 209.88? 317.74? 318.03? T:sestatetweaes128v1 215.10? 322.94? 323.17? T:mixfeed 278.89? 342.94? 344.20? T:romulusn1v1 269.19? 346.51? 533.23? T:isapk128v20 301.04? 368.78? 457.03? T:elephant200v1 381.31? 382.51? 466.27? T:comet64chamv1 324.59? 392.32? 393.36? T:comet64speckv1 408.34? 468.02? 469.21? T:comet128chamv1 389.46? 468.37? 478.88? T:subterraneanv1 499.60 499.94 506.17 romulust 445.46? 546.65? 662.77? T:romulusm1v1 562.23? 686.31? 851.51? T:pyjamask128aeadv1 729.22? 734.86? 891.95? T:pyjamask96aeadv1 935.87? 964.09? 1439.40? T:wageae128v1 999.68? 1213.85? 1224.05? T:skinnyaeadtk296128v1 1004.88? 1218.65? 1282.76? T:skinnyaeadtk29664v1 1281.24 1283.84 1300.80 T:spix128v1 1052.58? 1286.44? 1564.13? T:romulusn3v1 1106.58? 1344.88? 1350.92? T:paefforkskinnyb128t192n48v1 1324.27? 1347.37? 1635.96? T:paefforkskinnyb128t256n112v1 1348.87 1369.29 1371.37 T:saefforkskinnyb128t256n120v1 941.17? 1418.24? 1425.39? T:photonbeetleaead128rate32v1 1255.67? 1503.88? 1543.15? T:spoc128sliscplight256v1 1559.45? 1561.54? 1922.60? T:skinnyaeadtk312864v1 1525.93? 1609.30? 1906.35? T:skinnyaeadtk396128v1 1395.20? 1705.78? 1707.23? T:sundaegift0v1 1703.47 1706.82 1711.38 T:sundaegift96v1 1680.35? 1708.31? 2103.64? T:sundaegift128v1 1192.54? 1733.06? 1777.03? T:saefforkskinnyb128t192n56v1 1707.63 1748.49 1788.69 T:sundaegift64v1 1457.13? 1796.22? 1797.62? T:spoc64sliscplight192v1 1252.04? 1879.55? 2063.34? T:skinnyaeadtk39664v1 1766.91? 2268.53? 2298.16? T:romulusn2v1 2445.05 2446.30 2448.12 T:romulusm3v1 2173.48? 2605.00? 2660.98? T:paefforkskinnyb128t288n104v1 2424.50? 2691.90? 2998.07? T:romulusm2v1 3607.59? 3615.09? 4412.42? T:hyenav1 3747.37? 3817.76? 4662.04? T:orangezestv1 3166.61? 3974.46? 4842.18? T:paefforkskinnyb64t192n48v1 3382.37? 4154.69? 4170.32? T:aceae128v1 6739.73? 6744.08? 8338.22? T:twegift64lotusaeadv1 6836.83 6865.88 6945.26 T:twegift64locusaeadv1 7397.12 7405.05 7594.55 T:estatetwegift128v1 9045.97? 11113.34? 13754.30? T:oribatida192v11 11472.80? 11506.73? 14063.41? T:oribatida256v11 19013.80? 23755.40? 23768.89? T:elephant176v1 19989.98? 25030.22? 30566.40? T:elephant160v1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 25.21 25.27 25.57 T:xoodyakv1 29.42? 30.39? 37.13? ascon128av12 38.56 38.91 39.95 ascon128v12 39.60 39.77 39.79 ascon80pqv12 48.96 49.17 49.17 T:knot128v2 55.51? 55.79? 85.07? T:schwaemm256256v1 49.46? 60.63? 60.84? T:schwaemm256128v1 61.67 61.88 62.50 T:giftcofb128v1 53.44? 64.47? 79.20? T:schwaemm192192v1 80.69? 81.11? 121.05? T:saeaes192a120t128v1 79.59? 82.71? 102.09? T:isapa128av20 83.53? 83.55? 102.09? T:saeaes128a64t128v1 68.13? 83.70? 101.67? T:saeaes128a120t128v1 74.71? 85.02? 85.28? T:knot128v1 59.84? 91.42? 91.68? T:schwaemm128128v1 85.91? 92.34? 104.17? T:comet128aesv1 91.67 93.55 97.09 T:tinyjambu128 95.28? 97.53? 116.01? T:saeaes192a64t64v1 82.83? 100.27? 122.50? T:saeaes192a64t128v1 99.80 101.67 101.88 T:saeaes128a64t64v1 103.13 103.76 104.59 T:gimli24v1 103.76 103.97 104.38 T:saeaes128a120t64v1 108.77? 108.95? 132.93? T:drygascon128k16 83.45? 112.14? 147.72? T:isapa128v20 92.17? 112.40? 139.56? T:saeaes256a120t128v1 92.35? 113.27? 115.35? T:saeaes256a64t64v1 108.95? 116.73? 132.93? T:drygascon128k56 130.01? 130.04? 158.77? T:tinyjambu256 111.37? 132.93? 133.14? T:drygascon128k32 117.92? 133.67? 134.18? T:knot192 111.02? 136.44? 166.67? T:saturninctrcascadev2 113.27? 137.93? 138.14? T:saeaes256a64t128v1 140.64 140.85 141.05 T:tinyjambu192 139.85? 149.07? 216.17? T:spook128su512v1 154.08? 154.60? 231.30? T:drygascon256k32 140.07? 172.24? 213.97? T:spook128mu384v1 141.53? 176.68? 177.43? T:grain128aead 190.85 191.06 191.47 T:knot256 137.48? 205.23? 205.44? romulusn 202.61? 209.40? 256.66? T:skinnyaeadtk3128128v1 210.85 211.06 212.10 T:spook128mu512v1 173.08? 216.06? 216.34? T:spook128su384v1 253.15? 254.60? 317.32? T:isapk128av20 235.36? 298.48? 362.27? T:photonbeetleaead128rate128v1 305.44? 307.32? 372.52? T:estatetweaes128v1 253.17? 307.32? 307.32? romulusm 210.57? 317.11? 317.81? T:sestatetweaes128v1 215.27? 323.14? 323.15? T:mixfeed 273.39? 338.46? 339.20? T:romulusn1v1 273.61? 343.09? 530.52? T:isapk128v20 300.21? 367.32? 455.33? T:elephant200v1 380.45? 388.18? 464.26? T:comet64chamv1 325.63? 394.20? 395.24? T:comet64speckv1 422.97? 467.16? 471.08? T:comet128chamv1 386.34? 468.58? 485.37? T:subterraneanv1 499.78 500.11 502.19 romulust 453.59? 544.57? 659.19? T:romulusm1v1 560.06? 682.35? 844.21? T:pyjamask128aeadv1 731.31? 736.51? 895.07? T:pyjamask96aeadv1 935.14? 961.67? 1438.57? T:wageae128v1 1054.53? 1289.03? 1566.66? T:romulusn3v1 1299.24 1303.05 1306.14 T:spix128v1 941.48? 1418.21? 1429.15? T:photonbeetleaead128rate32v1 1240.04? 1506.58? 1548.96? T:spoc128sliscplight256v1 1396.24? 1704.32? 1707.02? T:sundaegift0v1 1706.38 1708.46 1727.64 T:sundaegift96v1 1680.56? 1708.96? 2104.33? T:sundaegift128v1 1706.17 1711.82 1753.70 T:sundaegift64v1 1449.52? 1795.19? 1797.26? T:spoc64sliscplight192v1 1537.12? 1871.42? 1948.90? T:skinnyaeadtk29664v1 1537.64? 1872.02? 1874.95? T:skinnyaeadtk296128v1 1769.78? 2157.21? 2159.03? T:paefforkskinnyb128t192n48v1 2158.52? 2186.92? 2653.93? T:saefforkskinnyb128t256n120v1 1703.57? 2279.15? 2313.47? T:romulusn2v1 2445.00 2449.42 2453.31 T:romulusm3v1 2451.49? 2455.64? 3018.03? T:skinnyaeadtk312864v1 2132.88? 2580.99? 2633.12? T:paefforkskinnyb128t256n112v1 2606.05 2652.57 2698.74 T:skinnyaeadtk396128v1 2433.14? 2694.50? 3006.89? T:romulusm2v1 1894.85? 2755.65? 2797.94? T:saefforkskinnyb128t192n56v1 1973.54? 2959.44? 3235.75? T:skinnyaeadtk39664v1 3609.21? 3613.01? 4413.67? T:hyenav1 3747.58? 3812.33? 4661.00? T:orangezestv1 3484.46? 4183.67? 4191.78? T:aceae128v1 3765.40? 4598.48? 4694.70? T:paefforkskinnyb128t288n104v1 5337.30? 6534.72? 6619.28? T:twegift64locusaeadv1 6737.02 6741.18 6845.58 T:twegift64lotusaeadv1 6057.01? 7462.76? 9113.18? T:estatetwegift128v1 6838.79? 7633.84? 9229.04? T:paefforkskinnyb64t192n48v1 9075.68? 11117.48? 13771.51? T:oribatida192v11 11456.66 11466.10 11478.75 T:oribatida256v11 19014.84? 23753.06? 23761.93? T:elephant176v1 24581.95? 25033.33? 30561.99? T:elephant160v1

Cycles/byte for long+0 forgery 25% 50% 75% aead 25.40 25.44 25.63 T:xoodyakv1 29.59? 30.21? 36.93? ascon128av12 38.56 38.75 38.91 ascon128v12 39.60 39.77 39.80 ascon80pqv12 48.96 48.96 49.17 T:knot128v2 50.84? 52.92? 65.01? T:isapa128av20 41.10? 56.05? 73.96? T:isapa128v20 59.18? 59.83? 90.10? T:schwaemm256256v1 61.88 62.09 62.50 T:giftcofb128v1 54.83? 65.42? 65.63? T:schwaemm256128v1 56.89? 69.94? 84.07? T:schwaemm192192v1 84.91? 84.91? 125.95? T:saeaes192a120t128v1 69.69? 85.19? 85.28? T:knot128v1 72.46? 87.85? 107.30? T:saeaes128a120t128v1 87.79? 88.17? 107.09? T:saeaes128a64t128v1 91.46 92.72 95.63 T:tinyjambu128 85.39? 94.25? 103.76? T:comet128aesv1 63.92? 97.51? 98.13? T:schwaemm128128v1 99.75? 100.13? 121.92? T:saeaes192a64t64v1 88.89? 104.21? 128.37? T:saeaes192a64t128v1 103.34 104.38 104.80 T:gimli24v1 105.01 105.42 107.30 T:saeaes128a64t64v1 108.77? 108.95? 133.07? T:drygascon128k16 108.55 108.97 109.39 T:saeaes128a120t64v1 95.80? 117.07? 118.98? T:saeaes256a64t64v1 96.73? 117.86? 144.18? T:saeaes256a120t128v1 108.95? 117.97? 133.07? T:drygascon128k56 130.04? 130.21? 158.77? T:tinyjambu256 108.98? 132.93? 133.14? T:drygascon128k32 127.47 133.67 134.18 T:knot192 112.23? 136.10? 166.46? T:saturninctrcascadev2 140.64 140.84 140.85 T:tinyjambu192 119.67? 142.93? 143.14? T:saeaes256a64t128v1 154.25? 154.57? 231.51? T:drygascon256k32 140.05? 157.71? 216.55? T:spook128su512v1 167.51? 167.93? 209.19? T:isapk128av20 168.43 168.44 168.78 romulust 142.15? 172.76? 214.21? T:spook128mu384v1 144.58? 176.68? 176.89? T:grain128aead 191.06 191.06 191.27 T:knot256 138.50? 205.23? 205.44? romulusn 205.04? 208.90? 255.62? T:skinnyaeadtk3128128v1 210.85 211.27 212.10 T:spook128mu512v1 177.24? 213.18? 317.56? T:isapk128v20 173.26? 216.48? 217.18? T:spook128su384v1 242.45? 297.97? 361.90? T:photonbeetleaead128rate128v1 253.00? 307.12? 307.32? romulusm 305.65? 307.94? 372.52? T:estatetweaes128v1 210.92? 317.32? 317.60? T:sestatetweaes128v1 215.27? 323.14? 323.35? T:mixfeed 275.67? 338.67? 339.68? T:romulusn1v1 303.84? 367.53? 455.12? T:elephant200v1 379.76? 383.73? 464.00? T:comet64chamv1 324.76? 393.16? 394.37? T:comet64speckv1 435.11 468.58 469.68 T:comet128chamv1 381.15? 468.79? 482.67? T:subterraneanv1 446.16? 544.75? 659.43? T:romulusm1v1 556.80? 680.48? 844.01? T:pyjamask128aeadv1 731.73? 737.98? 894.65? T:pyjamask96aeadv1 935.32? 961.15? 1438.77? T:wageae128v1 1281.77 1285.58 1289.03 T:spix128v1 1058.04? 1288.68? 1566.87? T:romulusn3v1 943.93? 1416.80? 1424.78? T:photonbeetleaead128rate32v1 1228.91? 1487.43? 1525.28? T:spoc128sliscplight256v1 1395.03? 1705.57? 1706.81? T:sundaegift0v1 1706.59 1708.25 1724.31 T:sundaegift96v1 1681.60? 1712.29? 2103.68? T:sundaegift128v1 1706.80 1718.07 1731.61 T:sundaegift64v1 1451.08? 1795.70? 1799.69? T:spoc64sliscplight192v1 1512.43? 1870.97? 1877.45? T:skinnyaeadtk296128v1 1540.51? 1876.03? 1939.52? T:skinnyaeadtk29664v1 1767.86? 2157.61? 2159.97? T:paefforkskinnyb128t192n48v1 2158.03? 2190.21? 2653.94? T:saefforkskinnyb128t256n120v1 1723.35? 2278.74? 2309.15? T:romulusn2v1 2445.62 2447.71 2451.64 T:romulusm3v1 2451.62? 2456.90? 3019.04? T:skinnyaeadtk312864v1 2149.97? 2628.75? 2633.07? T:paefforkskinnyb128t256n112v1 2605.61 2646.67 2682.14 T:skinnyaeadtk396128v1 2432.28? 2683.78? 3011.56? T:romulusm2v1 1866.66? 2758.33? 2826.56? T:saefforkskinnyb128t192n56v1 1971.70? 2954.64? 3241.53? T:skinnyaeadtk39664v1 3610.45? 3613.84? 4412.21? T:hyenav1 3746.54? 3816.13? 4660.82? T:orangezestv1 3429.87? 4154.71? 4181.38? T:aceae128v1 3767.47? 4598.48? 4695.70? T:paefforkskinnyb128t288n104v1 5323.13? 6533.85? 6611.01? T:twegift64locusaeadv1 6731.55 6738.64 6839.63 T:twegift64lotusaeadv1 6055.11? 7401.29? 9112.49? T:estatetwegift128v1 6036.58? 7580.22? 9226.12? T:paefforkskinnyb64t192n48v1 11457.97 11465.92 11475.11 T:oribatida256v11 11134.83? 13606.92? 13785.15? T:oribatida192v11 19030.23? 23750.77? 23758.81? T:elephant176v1 19988.42? 25005.44? 25033.45? T:elephant160v1

Cycles/byte for long+long encrypt 25% 50% 75% aead 19.65 19.75 20.36 T:xoodyakv1 26.81 27.40 28.88 ascon128av12 32.42? 37.12? 37.27? ascon128v12 37.15 37.22 37.32 ascon80pqv12 49.69? 49.90? 60.84? T:knot128v2 47.05? 57.51? 58.55? T:schwaemm256128v1 61.34 62.60 63.67 T:schwaemm192192v1 62.82 63.90 65.80 T:saeaes128a120t128v1 66.46? 66.88? 83.55? T:isapa128av20 65.75? 67.36? 81.91? T:schwaemm256256v1 61.74? 68.74? 94.03? T:saeaes192a120t128v1 65.11? 69.69? 79.70? T:saeaes128a120t64v1 70.06? 70.11? 86.94? T:schwaemm128128v1 62.19? 75.53? 75.63? T:giftcofb128v1 77.09? 78.24? 113.85? T:isapa128v20 78.86 79.17 83.97 T:tinyjambu128 68.03? 85.69? 104.30? T:comet128aesv1 86.74? 88.89? 108.56? T:saeaes256a120t128v1 92.35? 92.78? 113.10? T:saeaes256a64t64v1 77.51? 93.86? 94.17? T:tinyjambu192 93.07? 97.02? 116.42? T:saeaes192a64t64v1 97.78 99.61 100.91 T:saeaes192a64t128v1 99.38 100.11 103.65 T:saeaes128a64t64v1 83.03? 100.32? 102.84? T:saeaes128a64t128v1 82.92? 100.84? 100.95? T:gimli24v1 98.77? 101.16? 122.74? T:saturninctrcascadev2 84.10? 102.61? 104.30? T:tinyjambu256 86.90? 104.12? 105.54? T:knot128v1 85.46? 106.01? 107.48? T:drygascon128k16 104.50? 106.35? 129.33? T:drygascon128k56 123.87 123.88 125.85 romulusn 124.02 126.88 130.63 T:drygascon128k32 111.57? 135.74? 136.47? T:saeaes256a64t128v1 121.46? 148.66? 183.20? T:knot192 151.47? 154.69? 188.93? T:drygascon256k32 135.92? 165.53? 207.01? romulusm 137.98? 167.72? 170.02? T:grain128aead 154.96? 172.41? 210.53? T:spook128mu384v1 176.23? 177.77? 215.41? T:spook128su512v1 177.73? 178.35? 220.17? T:sestatetweaes128v1 181.58 182.93 192.10 T:knot256 202.94 203.56 210.75 T:isapk128av20 170.64? 207.41? 207.72? T:spook128mu512v1 174.86? 215.30? 221.37? T:spook128su384v1 216.08? 221.18? 267.68? T:skinnyaeadtk3128128v1 224.81? 229.08? 278.15? T:estatetweaes128v1 258.49? 261.37? 321.32? T:mixfeed 271.06 271.17 277.29 T:elephant200v1 165.39? 276.69? 395.61? T:isapk128v20 225.24? 282.73? 332.33? T:romulusn1v1 241.93? 294.85? 295.90? T:photonbeetleaead128rate128v1 264.63? 321.38? 327.19? T:comet64speckv1 274.87? 333.94? 338.42? romulust 286.59? 349.61? 360.52? T:subterraneanv1 309.76? 380.28? 383.59? T:comet64chamv1 333.73? 404.74? 497.17? T:romulusm1v1 306.05? 456.81? 469.11? T:comet128chamv1 716.31? 717.45? 887.25? T:pyjamask96aeadv1 559.41? 834.02? 846.40? T:pyjamask128aeadv1 982.38? 982.90? 1214.99? T:skinnyaeadtk296128v1 996.42? 1012.42? 1232.73? T:romulusn3v1 1088.73? 1093.21? 1343.62? T:paefforkskinnyb128t256n112v1 909.16? 1107.59? 1120.82? T:paefforkskinnyb128t192n48v1 1094.11? 1109.60? 1370.35? T:saefforkskinnyb128t256n120v1 937.94? 1149.78? 1273.62? T:photonbeetleaead128rate32v1 923.81? 1169.80? 1172.39? T:wageae128v1 984.92? 1215.72? 1229.46? T:skinnyaeadtk29664v1 1230.31? 1251.25? 1536.42? T:spoc128sliscplight256v1 1031.01? 1279.49? 1295.27? T:sundaegift0v1 1030.11? 1279.70? 1346.08? T:sundaegift128v1 1279.70? 1281.24? 1560.65? T:sundaegift96v1 1060.34? 1296.46? 1319.20? T:spix128v1 1095.92? 1351.14? 1364.60? T:saefforkskinnyb128t192n56v1 1447.53 1449.24 1450.03 T:spoc64sliscplight192v1 1557.95? 1560.61? 1898.39? T:skinnyaeadtk312864v1 1281.66? 1563.98? 1569.93? T:sundaegift64v1 1551.27? 1618.03? 1897.56? T:skinnyaeadtk396128v1 1655.30? 1656.77? 2047.48? T:romulusm2v1 1366.05? 1670.17? 1860.55? T:romulusm3v1 1468.03? 1786.51? 1810.39? T:romulusn2v1 1454.40? 1787.33? 2186.11? T:paefforkskinnyb128t288n104v1 1475.51? 1899.44? 1901.40? T:skinnyaeadtk39664v1 3175.00 3219.79 3258.39 T:paefforkskinnyb64t192n48v1 3607.57 3610.30 3612.69 T:hyenav1 4174.10 4176.39 4202.09 T:aceae128v1 4210.44 4274.91 4474.13 T:twegift64locusaeadv1 3051.61? 4643.50? 4647.61? T:orangezestv1 4544.50? 5554.65? 6828.27? T:estatetwegift128v1 4421.91? 6231.98? 6603.87? T:twegift64lotusaeadv1 6755.93? 10264.46? 10375.52? T:oribatida192v11 10494.92 10629.07 10639.54 T:oribatida256v11 15324.68? 15354.97? 19007.93? T:elephant160v1 14235.43? 17750.10? 17941.88? T:elephant176v1

Cycles/byte for long+long decrypt 25% 50% 75% aead 19.65 19.75 20.88 T:xoodyakv1 26.56 26.77 28.14 ascon128av12 35.33 36.48 36.58 ascon128v12 37.09 37.35 37.43 ascon80pqv12 48.13? 48.23? 58.96? T:knot128v2 47.29? 58.03? 58.98? T:schwaemm256128v1 61.88 63.21 64.42 T:schwaemm192192v1 63.23 64.35 65.28 T:saeaes128a120t128v1 66.46? 66.98? 83.24? T:isapa128av20 66.17? 68.14? 82.43? T:schwaemm256256v1 65.32? 69.48? 79.49? T:saeaes128a120t64v1 71.51? 72.29? 88.62? T:schwaemm128128v1 61.77? 75.32? 75.42? T:giftcofb128v1 62.09? 76.35? 93.30? T:saeaes192a120t128v1 77.51? 78.33? 113.65? T:isapa128v20 79.38 79.38 80.63 T:tinyjambu128 68.45? 86.46? 104.55? T:comet128aesv1 77.47? 86.47? 87.68? T:knot128v1 86.05? 88.97? 107.81? T:saeaes256a120t128v1 91.83? 92.26? 112.40? T:saeaes256a64t64v1 77.51? 94.80? 94.90? T:tinyjambu192 92.16? 96.24? 117.76? T:saeaes192a64t64v1 98.45 98.86 102.82 T:saeaes128a64t64v1 81.42? 99.28? 103.66? T:saeaes128a64t128v1 98.04 99.52 101.16 T:saeaes192a64t128v1 84.49? 101.47? 102.19? T:gimli24v1 98.86? 101.86? 122.84? T:saturninctrcascadev2 84.96? 104.07? 105.47? T:tinyjambu256 86.57? 106.53? 107.93? T:drygascon128k16 105.09? 108.17? 129.97? T:drygascon128k56 123.76 123.88 125.89 romulusn 105.85? 127.61? 131.37? T:drygascon128k32 109.73? 133.76? 164.84? T:knot192 110.89? 135.22? 136.92? T:saeaes256a64t128v1 151.04? 155.03? 188.41? T:drygascon256k32 138.40? 167.72? 169.83? T:grain128aead 135.40? 168.56? 206.50? romulusm 162.88? 172.59? 210.67? T:spook128mu384v1 176.05? 178.81? 215.42? T:spook128su512v1 177.52? 179.35? 219.97? T:sestatetweaes128v1 189.18 194.39 205.02 T:knot256 203.35 203.56 212.21 T:isapk128av20 169.08? 207.52? 207.62? T:spook128mu512v1 175.52? 215.36? 221.47? T:spook128su384v1 214.51? 220.83? 265.37? T:skinnyaeadtk3128128v1 224.91? 229.81? 278.15? T:estatetweaes128v1 258.49? 261.48? 321.43? T:mixfeed 270.33 270.54 277.93 T:elephant200v1 166.64? 272.62? 394.78? T:isapk128v20 244.53? 295.19? 296.69? T:photonbeetleaead128rate128v1 224.20? 296.90? 329.72? T:romulusn1v1 265.21? 322.32? 330.17? T:comet64speckv1 276.60? 333.94? 339.89? romulust 300.08? 349.51? 358.01? T:subterraneanv1 311.22? 381.39? 385.20? T:comet64chamv1 332.79? 404.83? 497.04? T:romulusm1v1 306.88? 457.33? 471.00? T:comet128chamv1 717.25? 718.39? 895.07? T:pyjamask96aeadv1 556.92? 829.86? 842.26? T:pyjamask128aeadv1 818.86? 1012.43? 1233.91? T:romulusn3v1 938.76? 1150.19? 1244.34? T:photonbeetleaead128rate32v1 923.45? 1170.14? 1171.01? T:wageae128v1 1246.25? 1248.34? 1540.74? T:skinnyaeadtk296128v1 1230.83? 1252.42? 1535.45? T:spoc128sliscplight256v1 1032.00? 1279.65? 1353.58? T:sundaegift128v1 1031.60? 1279.70? 1295.27? T:sundaegift0v1 1279.59? 1283.45? 1564.50? T:sundaegift96v1 1073.74? 1299.13? 1320.24? T:spix128v1 1448.98 1449.94 1450.80 T:spoc64sliscplight192v1 1490.54? 1492.62? 1839.49? T:paefforkskinnyb128t256n112v1 1244.30? 1511.54? 1532.22? T:paefforkskinnyb128t192n48v1 1492.74? 1515.81? 1859.02? T:saefforkskinnyb128t256n120v1 1251.28? 1543.35? 1560.83? T:skinnyaeadtk29664v1 1468.96? 1547.11? 1812.16? T:romulusn2v1 1282.28? 1562.33? 1565.44? T:sundaegift64v1 1368.45? 1671.53? 1882.01? T:romulusm3v1 1515.56? 1841.91? 1862.02? T:saefforkskinnyb128t192n56v1 2004.52? 2011.55? 2444.89? T:skinnyaeadtk312864v1 1659.22? 2026.82? 2052.50? T:romulusm2v1 2065.41? 2128.87? 2572.65? T:skinnyaeadtk396128v1 2009.23? 2444.62? 2445.64? T:skinnyaeadtk39664v1 2602.40? 2604.69? 3201.18? T:paefforkskinnyb128t288n104v1 3606.51 3609.52 3610.40 T:hyenav1 4078.06 4110.02 4327.13 T:twegift64locusaeadv1 3758.96? 4177.01? 4201.80? T:aceae128v1 3746.95? 4646.41? 4649.49? T:orangezestv1 4934.38 5005.65 5064.64 T:paefforkskinnyb64t192n48v1 4124.04? 6210.20? 6948.75? T:twegift64lotusaeadv1 4541.76? 6502.53? 6833.93? T:estatetwegift128v1 8284.08? 10270.46? 10380.38? T:oribatida192v11 8592.24? 10621.89? 10634.70? T:oribatida256v11 15315.80? 15331.86? 19012.50? T:elephant160v1 14291.49? 17752.39? 17937.85? T:elephant176v1

Cycles/byte for long+long forgery 25% 50% 75% aead 19.74 19.91 21.88 T:xoodyakv1 26.64 27.19 28.85 ascon128av12 32.94 36.46 36.58 ascon128v12 36.98 37.09 37.25 ascon80pqv12 48.13? 48.34? 58.96? T:knot128v2 51.88? 52.82? 65.21? T:isapa128av20 52.30? 53.19? 73.85? T:isapa128v20 49.43? 60.42? 61.50? T:schwaemm256128v1 63.88 65.97 67.15 T:schwaemm192192v1 65.53 66.67 68.22 T:saeaes128a120t128v1 67.30? 67.92? 81.99? T:saeaes128a120t64v1 68.12? 69.86? 84.96? T:schwaemm256256v1 73.97? 74.28? 91.79? T:schwaemm128128v1 62.30? 75.32? 75.42? T:giftcofb128v1 64.66? 78.86? 96.15? T:saeaes192a120t128v1 78.55 80.63 82.71 T:tinyjambu128 80.26 86.55 87.76 T:knot128v1 83.82? 88.28? 104.22? T:comet128aesv1 88.54? 89.93? 110.64? T:saeaes256a120t128v1 93.47? 93.73? 114.31? T:saeaes256a64t64v1 78.34? 94.59? 94.80? T:tinyjambu192 94.46? 97.96? 118.09? T:saeaes192a64t64v1 83.34? 101.57? 102.20? T:gimli24v1 98.77? 101.68? 122.84? T:saturninctrcascadev2 86.06? 101.88? 104.51? T:saeaes128a64t128v1 100.18 102.12 103.59 T:saeaes192a64t128v1 101.47 103.03 106.36 T:saeaes128a64t64v1 85.07? 103.65? 105.47? T:tinyjambu256 86.58? 106.61? 107.93? T:drygascon128k16 105.09? 107.48? 130.08? T:drygascon128k56 123.87 123.88 125.82 romulusn 105.85? 127.72? 131.36? T:drygascon128k32 109.65? 133.76? 164.84? T:knot192 113.45? 137.72? 139.75? T:saeaes256a64t128v1 151.21? 155.03? 188.51? T:drygascon256k32 162.72 162.93 168.35 T:isapk128av20 137.27? 167.72? 170.04? T:grain128aead 148.98? 168.26? 170.86? romulust 162.43? 172.76? 210.56? T:spook128mu384v1 176.22? 178.81? 215.34? T:spook128su512v1 177.60? 179.16? 219.97? T:sestatetweaes128v1 189.39 193.35 198.04 T:knot256 138.08? 201.79? 207.32? romulusm 172.10? 207.41? 208.04? T:spook128mu512v1 144.15? 212.93? 290.83? T:isapk128v20 176.64? 215.54? 223.03? T:spook128su384v1 213.97? 219.02? 264.68? T:skinnyaeadtk3128128v1 224.91? 229.49? 278.15? T:estatetweaes128v1 258.56? 261.28? 321.42? T:mixfeed 270.33 270.65 278.03 T:elephant200v1 244.44? 295.14? 296.83? T:photonbeetleaead128rate128v1 223.95? 302.53? 332.33? T:romulusn1v1 265.86? 322.84? 396.01? T:comet64speckv1 292.73? 349.40? 356.66? T:subterraneanv1 310.35? 382.40? 389.57? T:comet64chamv1 332.62? 403.27? 410.88? T:romulusm1v1 307.23? 457.01? 470.48? T:comet128chamv1 716.93? 721.10? 890.38? T:pyjamask96aeadv1 556.25? 830.07? 842.45? T:pyjamask128aeadv1 817.32? 1024.19? 1234.12? T:romulusn3v1 925.37? 1170.02? 1171.76? T:wageae128v1 938.31? 1215.22? 1324.69? T:photonbeetleaead128rate32v1 1237.66? 1241.23? 1527.37? T:paefforkskinnyb128t192n48v1 1214.06? 1251.63? 1512.92? T:spoc128sliscplight256v1 1030.92? 1279.69? 1294.63? T:sundaegift0v1 1075.81? 1280.04? 1300.00? T:spix128v1 1028.19? 1280.25? 1347.52? T:sundaegift128v1 1448.55 1449.95 1454.25 T:spoc64sliscplight192v1 1491.01? 1514.00? 1861.10? T:saefforkskinnyb128t256n120v1 1248.66? 1522.93? 1544.92? T:skinnyaeadtk296128v1 1250.92? 1543.35? 1577.21? T:skinnyaeadtk29664v1 1282.30? 1561.07? 1563.97? T:sundaegift96v1 1283.01? 1562.00? 1563.99? T:sundaegift64v1 1472.61? 1593.80? 1812.46? T:romulusn2v1 1367.61? 1670.38? 1865.87? T:romulusm3v1 1493.03? 1818.65? 1841.61? T:paefforkskinnyb128t256n112v1 1513.21? 1842.14? 1862.06? T:saefforkskinnyb128t192n56v1 2005.47? 2007.86? 2444.80? T:skinnyaeadtk39664v1 2002.73? 2010.25? 2444.74? T:skinnyaeadtk312864v1 2027.34 2028.49 2053.13 T:romulusm2v1 2080.78? 2132.33? 2572.94? T:skinnyaeadtk396128v1 2602.60? 2604.69? 3200.44? T:paefforkskinnyb128t288n104v1 3608.42 3610.25 3617.57 T:hyenav1 3412.57? 4145.13? 4190.01? T:aceae128v1 4082.92? 4367.20? 5009.09? T:twegift64locusaeadv1 3753.18? 4644.57? 4647.24? T:orangezestv1 4933.28? 5006.53? 6149.74? T:paefforkskinnyb64t192n48v1 4146.69? 6412.82? 6719.83? T:twegift64lotusaeadv1 4544.60? 6768.48? 6836.15? T:estatetwegift128v1 8299.90? 10266.54? 10378.55? T:oribatida192v11 10485.80 10624.65 10633.45 T:oribatida256v11 15318.94? 16745.15? 23162.89? T:elephant160v1 14246.06? 17751.87? 17940.89? T:elephant176v1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 13.94 14.03 14.17 T:xoodyakv1 23.40? 24.20? 29.60? ascon128av12 33.91 34.24 34.41 ascon128v12 34.24 34.38 34.59 ascon80pqv12 37.71 37.92 37.92 T:tinyjambu128 36.74? 45.31? 56.24? T:saeaes128a120t128v1 46.05 46.25 46.46 T:knot128v2 41.66? 49.38? 51.93? T:tinyjambu256 48.70? 50.15? 77.05? T:schwaemm192192v1 50.21 50.63 50.84 T:tinyjambu192 52.09? 54.17? 65.63? T:isapa128av20 34.84? 55.84? 79.14? T:isapa128v20 44.21? 55.86? 66.76? T:saeaes192a120t128v1 46.60? 56.67? 57.60? T:schwaemm256128v1 56.67 56.67 56.67 T:saeaes128a120t64v1 61.05 61.25 61.26 T:giftcofb128v1 49.26? 61.91? 76.49? T:saeaes256a120t128v1 63.49? 65.54? 80.04? T:saturninctrcascadev2 52.30? 67.27? 82.50? T:schwaemm256256v1 67.72? 83.70? 102.68? T:comet128aesv1 69.04? 84.80? 87.18? T:schwaemm128128v1 77.06? 96.32? 117.68? T:saeaes192a64t64v1 96.67 96.88 98.55 T:saeaes128a64t64v1 80.48? 99.09? 120.67? T:saeaes192a64t128v1 82.20? 100.43? 103.86? romulusn 66.37? 100.63? 102.02? romulusm 100.84 101.05 101.05 T:gimli24v1 67.72? 102.54? 102.92? T:saeaes128a64t128v1 102.68? 104.45? 127.61? T:drygascon128k56 84.00? 104.45? 127.61? T:drygascon128k16 88.33? 108.25? 109.94? T:knot128v1 91.31? 112.92? 113.61? T:saeaes256a64t64v1 98.80? 121.05? 124.48? T:sestatetweaes128v1 102.85? 126.05? 127.82? T:drygascon128k32 91.12? 134.80? 137.34? T:saeaes256a64t128v1 134.04 146.68 147.04 T:knot192 148.76? 151.68? 184.39? T:estatetweaes128v1 130.54? 159.80? 161.90? T:grain128aead 167.74 168.09 168.78 romulust 168.42? 172.24? 214.14? T:spook128mu384v1 172.46? 177.77? 218.79? T:spook128su512v1 185.51? 191.95? 233.61? T:drygascon256k32 207.31 207.72 207.73 T:spook128mu512v1 201.48 208.97 209.39 T:isapk128av20 174.15? 212.31? 215.89? T:spook128su384v1 112.74? 214.19? 318.01? T:isapk128v20 174.51? 218.03? 219.38? T:skinnyaeadtk3128128v1 146.84? 226.06? 229.28? T:elephant200v1 196.06? 233.56? 234.19? T:knot256 258.15 258.62 266.24 T:romulusn1v1 259.22 264.41 268.75 T:romulusm1v1 289.21 294.16 298.25 T:photonbeetleaead128rate128v1 259.62? 315.03? 320.99? T:comet64speckv1 209.27? 315.85? 325.24? T:mixfeed 301.76? 369.28? 369.90? T:comet64chamv1 317.05? 398.99? 399.83? T:subterraneanv1 374.74? 451.28? 452.53? T:comet128chamv1 541.63? 664.22? 691.04? T:pyjamask128aeadv1 724.37? 743.43? 898.68? T:romulusn3v1 852.36 852.78 858.41 T:sundaegift96v1 686.70? 854.39? 1041.75? T:sundaegift128v1 852.36 854.86 862.37 T:sundaegift64v1 688.16? 857.37? 1051.14? T:sundaegift0v1 717.91? 865.33? 879.88? T:paefforkskinnyb128t192n48v1 852.91? 871.41? 1053.73? T:saefforkskinnyb128t256n120v1 716.10? 884.66? 892.78? T:pyjamask96aeadv1 732.34? 889.24? 891.12? T:romulusm3v1 1035.29 1035.50 1053.83 T:paefforkskinnyb128t256n112v1 1064.04? 1068.41? 1337.82? T:romulusn2v1 884.53? 1078.42? 1100.21? T:romulusm2v1 857.64? 1084.25? 1143.84? T:saefforkskinnyb128t192n56v1 1129.93? 1135.12? 1382.18? T:wageae128v1 1147.59 1151.57 1173.77 T:photonbeetleaead128rate32v1 802.35? 1195.11? 1238.96? T:skinnyaeadtk29664v1 983.22? 1197.81? 1219.47? T:skinnyaeadtk296128v1 1280.54 1282.45 1295.09 T:spix128v1 1249.18? 1517.01? 1524.51? T:spoc128sliscplight256v1 1535.50? 1561.04? 1921.84? T:skinnyaeadtk312864v1 1335.91? 1593.76? 1651.32? T:skinnyaeadtk396128v1 1373.14? 1670.34? 1713.47? T:paefforkskinnyb128t288n104v1 1441.38? 1759.73? 1782.07? T:spoc64sliscplight192v1 1535.41? 1879.55? 2034.62? T:skinnyaeadtk39664v1 2502.13 2505.33 2508.70 T:paefforkskinnyb64t192n48v1 3371.53? 3375.26? 4183.63? T:twegift64lotusaeadv1 3436.98 3487.99 3493.39 T:twegift64locusaeadv1 3553.99? 3613.01? 4405.34? T:hyenav1 2968.27? 3697.94? 3749.06? T:estatetwegift128v1 3731.96? 3739.38? 4695.22? T:orangezestv1 4139.71 4174.07 4489.54 T:aceae128v1 5641.51? 5647.95? 7032.26? T:oribatida256v11 5444.08? 6769.34? 6776.43? T:oribatida192v11 11744.50? 11761.41? 14561.50? T:elephant176v1 12272.61? 12514.59? 15510.23? T:elephant160v1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 13.82 14.15 14.17 T:xoodyakv1 23.61? 24.17? 29.60? ascon128av12 33.96 34.24 34.29 ascon128v12 34.07 34.29 34.50 ascon80pqv12 37.50 37.92 37.92 T:tinyjambu128 36.05? 45.31? 56.23? T:saeaes128a120t128v1 47.09 47.50 47.50 T:knot128v2 48.70? 50.32? 76.87? T:schwaemm192192v1 50.63 50.63 51.05 T:tinyjambu192 41.48? 50.84? 52.76? T:tinyjambu256 51.88? 53.96? 66.46? T:isapa128av20 42.62? 54.47? 66.59? T:saeaes192a120t128v1 34.88? 56.05? 78.69? T:isapa128v20 56.67 56.67 56.67 T:saeaes128a120t64v1 45.90? 56.67? 57.80? T:schwaemm256128v1 61.05 61.46 61.67 T:giftcofb128v1 49.22? 62.08? 76.90? T:saeaes256a120t128v1 63.11? 65.02? 79.87? T:saturninctrcascadev2 52.47? 67.44? 82.50? T:schwaemm256256v1 67.68? 83.87? 102.71? T:comet128aesv1 69.04? 84.80? 87.18? T:schwaemm128128v1 71.77? 88.02? 89.34? T:knot128v1 73.67? 91.65? 112.02? T:saeaes192a64t64v1 96.88 96.88 97.72 T:saeaes128a64t64v1 64.99? 98.97? 99.55? T:saeaes128a64t128v1 67.58? 100.43? 102.23? romulusm 81.68? 100.63? 104.07? romulusn 80.79? 100.64? 120.67? T:saeaes192a64t128v1 101.26 101.47 101.67 T:gimli24v1 83.48? 104.28? 127.41? T:drygascon128k16 102.51? 104.28? 127.41? T:drygascon128k56 92.00? 113.10? 113.62? T:saeaes256a64t64v1 99.67? 121.26? 124.69? T:sestatetweaes128v1 103.54? 125.64? 127.41? T:drygascon128k32 114.39? 133.55? 134.85? T:knot192 89.74? 135.43? 141.51? T:saeaes256a64t128v1 148.55? 151.05? 184.39? T:estatetweaes128v1 130.68? 158.14? 160.65? T:grain128aead 167.92 168.09 168.27 romulust 168.52? 174.49? 214.17? T:spook128mu384v1 172.22? 177.08? 219.04? T:spook128su512v1 184.47? 190.74? 232.19? T:drygascon256k32 207.31 207.31 208.14 T:spook128mu512v1 201.89 209.18 209.39 T:isapk128av20 174.98? 212.10? 216.13? T:spook128su384v1 111.97? 213.77? 320.89? T:isapk128v20 177.62? 218.76? 224.29? T:skinnyaeadtk3128128v1 148.39? 226.89? 229.90? T:elephant200v1 203.56? 237.31? 237.73? T:knot256 257.53 257.94 265.41 T:romulusn1v1 259.61 265.28 270.21 T:romulusm1v1 288.77 293.98 298.31 T:photonbeetleaead128rate128v1 259.41? 315.86? 321.07? T:comet64speckv1 209.58? 316.06? 325.04? T:mixfeed 300.65? 372.32? 372.84? T:comet64chamv1 326.46? 398.99? 399.62? T:subterraneanv1 374.00? 451.70? 457.60? T:comet128chamv1 541.81? 664.22? 691.70? T:pyjamask128aeadv1 722.44? 740.84? 899.52? T:romulusn3v1 689.68? 852.37? 1050.27? T:sundaegift0v1 850.70 852.78 859.87 T:sundaegift64v1 852.37 852.99 858.62 T:sundaegift96v1 692.89? 853.18? 1043.00? T:sundaegift128v1 713.93? 865.17? 879.61? T:paefforkskinnyb128t192n48v1 852.91? 870.03? 1053.10? T:saefforkskinnyb128t256n120v1 715.68? 884.45? 896.12? T:pyjamask96aeadv1 730.05? 887.80? 894.87? T:romulusm3v1 804.49? 982.37? 1222.66? T:skinnyaeadtk29664v1 1036.75 1040.06 1054.65 T:paefforkskinnyb128t256n112v1 1062.16? 1068.59? 1337.23? T:romulusn2v1 887.65? 1078.57? 1099.86? T:romulusm2v1 874.44? 1093.63? 1134.11? T:saefforkskinnyb128t192n56v1 1127.69? 1134.08? 1381.97? T:wageae128v1 1147.82 1149.67 1169.20 T:photonbeetleaead128rate32v1 983.63? 1198.02? 1218.84? T:skinnyaeadtk296128v1 1294.23 1298.19 1301.14 T:spix128v1 1447.43? 1451.76? 1792.96? T:spoc64sliscplight192v1 1253.05? 1523.26? 1533.81? T:spoc128sliscplight256v1 1320.32? 1556.55? 1598.35? T:skinnyaeadtk396128v1 1535.14? 1560.20? 1921.80? T:skinnyaeadtk312864v1 1374.35? 1674.09? 1714.13? T:paefforkskinnyb128t288n104v1 1528.14? 1878.09? 1902.73? T:skinnyaeadtk39664v1 2502.91 2507.32 2510.16 T:paefforkskinnyb64t192n48v1 3371.38? 3374.22? 4182.11? T:twegift64lotusaeadv1 3434.60 3483.15 3486.30 T:twegift64locusaeadv1 3553.78? 3613.00? 4405.34? T:hyenav1 2969.83? 3700.52? 3761.31? T:estatetwegift128v1 3040.72? 3750.92? 4711.48? T:orangezestv1 4044.06? 4170.55? 4579.55? T:aceae128v1 5637.74? 5652.31? 6932.67? T:oribatida256v11 4419.29? 6769.79? 6774.24? T:oribatida192v11 11746.42? 11754.84? 14556.71? T:elephant176v1 9946.74? 11931.54? 15511.89? T:elephant160v1

Cycles/byte for 0+long forgery 25% 50% 75% aead 13.75 14.01 14.17 T:xoodyakv1 23.54? 24.17? 29.60? ascon128av12 32.68 34.12 34.41 ascon128v12 34.12 34.29 34.41 ascon80pqv12 37.92 37.92 39.38 T:tinyjambu128 35.88? 45.31? 56.24? T:saeaes128a120t128v1 47.09 47.50 47.50 T:knot128v2 41.48? 49.80? 51.93? T:tinyjambu256 48.70? 50.32? 77.08? T:schwaemm192192v1 50.63 50.63 51.05 T:tinyjambu192 52.09? 53.96? 65.63? T:isapa128av20 43.00? 54.65? 66.76? T:saeaes192a120t128v1 35.05? 56.05? 79.53? T:isapa128v20 45.90? 56.67? 57.81? T:schwaemm256128v1 56.67 56.67 56.88 T:saeaes128a120t64v1 61.05 61.25 61.46 T:giftcofb128v1 49.43? 61.91? 76.90? T:saeaes256a120t128v1 63.32? 65.37? 79.66? T:saturninctrcascadev2 52.47? 67.44? 82.32? T:schwaemm256256v1 66.06? 82.38? 102.54? T:comet128aesv1 69.04? 85.01? 87.39? T:schwaemm128128v1 71.94? 88.02? 89.51? T:knot128v1 77.47? 91.83? 112.23? T:saeaes192a64t64v1 96.67 96.88 97.09 T:saeaes128a64t64v1 65.16? 98.92? 99.13? T:saeaes128a64t128v1 81.68? 100.63? 103.86? romulusn 66.37? 100.64? 102.23? romulusm 79.58? 100.65? 120.67? T:saeaes192a64t128v1 101.88 101.88 102.09 T:gimli24v1 101.34? 102.51? 127.41? T:drygascon128k56 83.48? 104.28? 127.41? T:drygascon128k16 91.66? 113.79? 113.79? T:saeaes256a64t64v1 98.98? 121.26? 124.69? T:sestatetweaes128v1 102.51? 125.84? 127.41? T:drygascon128k32 118.20? 133.34? 135.71? T:knot192 90.91? 135.22? 137.34? T:saeaes256a64t128v1 148.55? 151.26? 184.39? T:estatetweaes128v1 129.16? 158.14? 160.23? T:grain128aead 167.92 168.09 168.26 romulust 168.69? 173.97? 214.17? T:spook128mu384v1 172.22? 176.39? 218.62? T:spook128su512v1 184.65? 190.92? 232.19? T:drygascon256k32 207.31 207.52 208.77 T:spook128mu512v1 201.89 209.18 209.39 T:isapk128av20 112.52? 209.18? 318.53? T:isapk128v20 174.98? 212.10? 216.14? T:spook128su384v1 179.36? 218.76? 222.50? T:skinnyaeadtk3128128v1 148.39? 226.89? 229.90? T:elephant200v1 216.48 237.31 237.73 T:knot256 257.52 257.72 265.57 T:romulusn1v1 259.95 265.32 270.17 T:romulusm1v1 289.20 293.99 298.48 T:photonbeetleaead128rate128v1 257.68? 315.65? 321.24? T:comet64speckv1 209.44? 315.86? 325.03? T:mixfeed 300.31? 372.23? 372.84? T:comet64chamv1 325.42? 399.23? 400.24? T:subterraneanv1 370.88? 451.91? 458.95? T:comet128chamv1 541.81? 664.42? 695.83? T:pyjamask128aeadv1 722.82? 740.31? 899.97? T:romulusn3v1 689.99? 852.73? 1042.17? T:sundaegift128v1 688.16? 852.78? 1051.31? T:sundaegift0v1 851.32 852.98 859.24 T:sundaegift64v1 852.57 854.23 858.20 T:sundaegift96v1 713.93? 865.38? 881.06? T:paefforkskinnyb128t192n48v1 852.70? 875.74? 1053.31? T:saefforkskinnyb128t256n120v1 716.52? 884.65? 891.95? T:pyjamask96aeadv1 731.10? 887.99? 890.72? T:romulusm3v1 797.14? 980.91? 1223.94? T:skinnyaeadtk29664v1 1036.96 1038.63 1056.31 T:paefforkskinnyb128t256n112v1 856.46? 1055.09? 1116.50? T:saefforkskinnyb128t192n56v1 1066.34? 1070.50? 1339.14? T:romulusn2v1 887.99? 1078.23? 1099.69? T:romulusm2v1 1129.49? 1134.26? 1382.39? T:wageae128v1 1142.61 1148.21 1168.54 T:photonbeetleaead128rate32v1 985.92? 1198.64? 1218.64? T:skinnyaeadtk296128v1 1276.92 1280.22 1284.87 T:spix128v1 1252.19? 1501.59? 1529.82? T:spoc128sliscplight256v1 1327.75? 1548.94? 1617.93? T:skinnyaeadtk396128v1 1535.32? 1560.52? 1921.28? T:skinnyaeadtk312864v1 1372.97? 1674.09? 1712.78? T:paefforkskinnyb128t288n104v1 1448.80? 1770.81? 1793.64? T:spoc64sliscplight192v1 1535.26? 1878.92? 2016.08? T:skinnyaeadtk39664v1 2502.82 2504.44 2509.04 T:paefforkskinnyb64t192n48v1 3370.70? 3372.28? 4179.40? T:twegift64lotusaeadv1 3433.52 3480.41 3483.19 T:twegift64locusaeadv1 3554.20? 3617.38? 4405.76? T:hyenav1 2979.03? 3697.73? 3750.65? T:estatetwegift128v1 3038.30? 3733.21? 4683.09? T:orangezestv1 3391.09? 4138.67? 4528.09? T:aceae128v1 5643.37? 5650.05? 7033.31? T:oribatida256v11 4420.89? 6771.99? 6777.05? T:oribatida192v11 9943.63? 10200.44? 15512.03? T:elephant160v1 11746.17 11755.02 11960.70 T:elephant176v1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 20.83 20.97 21.18 T:xoodyakv1 31.67? 31.67? 45.84? ascon80pqv12 28.21? 33.99? 33.99? ascon128av12 38.04? 38.91? 45.84? ascon128v12 51.96 51.96 51.96 T:knot128v2 50.15? 59.64? 59.64? T:schwaemm256128v1 63.03? 63.03? 75.79? T:giftcofb128v1 64.42 64.42 64.46 T:schwaemm192192v1 65.63 65.71 65.76 T:saeaes128a120t128v1 67.06? 67.19? 80.74? T:saeaes128a120t64v1 69.17? 69.39? 83.21? T:schwaemm256256v1 60.31? 72.53? 87.38? T:schwaemm128128v1 74.04? 74.04? 107.30? T:saeaes256a120t128v1 69.50? 77.39? 78.00? T:saeaes192a120t128v1 78.65 78.78 79.17 T:tinyjambu128 84.12 84.25 85.29 T:saeaes128a64t128v1 72.09? 86.14? 103.65? T:comet128aesv1 86.34? 87.44? 103.00? T:tinyjambu256 87.55? 87.65? 105.48? T:knot128v1 74.61? 88.29? 88.55? T:isapa128av20 79.55? 88.41? 114.98? T:saeaes192a64t64v1 79.17? 95.19? 98.84? T:tinyjambu192 83.33? 100.30? 120.58? T:saeaes192a64t128v1 83.60? 100.79? 102.22? T:saeaes128a64t64v1 85.60? 103.11? 123.97? T:saturninctrcascadev2 85.94? 103.13? 103.52? T:gimli24v1 89.17? 107.11? 128.92? T:drygascon128k16 89.17? 107.11? 128.92? T:drygascon128k56 94.79? 113.49? 113.92? T:saeaes256a64t64v1 99.87? 119.02? 143.50? T:isapa128v20 89.49? 129.05? 131.52? T:drygascon128k32 114.46? 136.86? 137.12? T:saeaes256a64t128v1 151.10? 151.21? 181.92? T:knot192 127.21? 153.14? 153.14? romulusn 143.64? 169.02? 169.54? T:grain128aead 146.34? 175.96? 212.26? T:spook128mu384v1 150.24? 180.50? 217.73? T:spook128su512v1 182.31? 182.77? 219.42? T:sestatetweaes128v1 159.20? 191.41? 230.49? T:drygascon256k32 141.37? 204.05? 204.18? romulusm 212.13 212.13 212.91 T:spook128mu512v1 182.01? 217.21? 217.34? T:spook128su384v1 186.66? 221.24? 222.16? T:skinnyaeadtk3128128v1 228.01 228.27 234.13 T:knot256 229.58? 230.35? 276.45? T:estatetweaes128v1 223.51? 268.64? 268.77? T:mixfeed 235.18? 282.18? 339.87? T:elephant200v1 237.13? 285.18? 285.44? T:isapk128av20 297.55? 302.20? 357.97? T:photonbeetleaead128rate128v1 278.85? 331.54? 333.88? T:romulusn1v1 338.84 339.17 342.30 romulust 369.75 369.86 373.75 T:subterraneanv1 377.50 378.42 380.11 T:comet64chamv1 383.80? 387.79? 461.89? T:comet128chamv1 327.27? 390.13? 390.92? T:comet64speckv1 406.28 407.33 411.04 T:romulusm1v1 474.78? 479.20? 570.36? T:isapk128v20 581.91? 696.67? 699.66? T:pyjamask128aeadv1 738.60? 741.46? 888.88? T:pyjamask96aeadv1 976.74? 978.25? 1417.56? T:wageae128v1 1002.24? 1003.97? 1205.43? T:skinnyaeadtk29664v1 855.79? 1018.24? 1226.03? T:romulusn3v1 922.57? 1109.46? 1335.65? T:paefforkskinnyb128t192n48v1 922.38? 1116.04? 1337.35? T:saefforkskinnyb128t256n120v1 1003.22? 1208.03? 1209.48? T:skinnyaeadtk296128v1 1070.11? 1284.87? 1285.53? T:sundaegift0v1 1075.73? 1289.18? 1289.83? T:sundaegift128v1 1289.55 1289.94 1290.46 T:sundaegift96v1 1290.35 1290.73 1291.51 T:sundaegift64v1 1329.66 1330.05 1332.11 T:paefforkskinnyb128t256n112v1 1214.73 1337.61 1339.88 T:spix128v1 1113.15? 1338.13? 1338.77? T:saefforkskinnyb128t192n56v1 1019.84? 1408.08? 1473.03? T:photonbeetleaead128rate32v1 1259.69? 1516.41? 1534.50? T:spoc128sliscplight256v1 1567.07? 1569.69? 1887.40? T:skinnyaeadtk312864v1 1559.65 1583.94 1629.33 T:skinnyaeadtk396128v1 1557.94 1673.35 1673.95 T:romulusm3v1 1598.43? 1780.54? 1782.91? T:spoc64sliscplight192v1 1494.80? 1795.99? 1797.55? T:romulusn2v1 1568.70? 1886.86? 1887.54? T:skinnyaeadtk39664v1 2027.51 2031.49 2033.06 T:romulusm2v1 1777.59? 2139.88? 2144.05? T:paefforkskinnyb128t288n104v1 3219.06? 3220.90? 3876.68? T:paefforkskinnyb64t192n48v1 3629.31 3630.98 3632.96 T:hyenav1 3326.79? 3845.48? 3849.66? T:orangezestv1 3531.67? 4249.70? 4259.86? T:aceae128v1 4293.46? 4296.70? 5169.20? T:twegift64locusaeadv1 5573.85? 5583.58? 6714.74? T:estatetwegift128v1 4550.48? 5738.89? 6455.61? T:twegift64lotusaeadv1 8499.86? 10219.42? 10224.59? T:oribatida192v11 10600.14 10603.30 10612.12 T:oribatida256v11 15557.40? 17887.15? 18820.32? T:elephant176v1 15755.29? 18973.54? 19024.73? T:elephant160v1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 17.40? 20.83? 24.87? T:xoodyakv1 31.56? 31.78? 45.97? ascon80pqv12 28.32? 33.73? 33.86? ascon128av12 37.29? 37.83? 44.93? ascon128v12 50.26 50.39 50.40 T:knot128v2 50.15? 60.16? 60.29? T:schwaemm256128v1 62.90? 63.03? 75.66? T:giftcofb128v1 64.98 65.07 66.36 T:schwaemm192192v1 65.11 65.24 65.39 T:saeaes128a120t128v1 67.19? 67.32? 80.61? T:saeaes128a120t64v1 69.61? 69.71? 83.86? T:schwaemm256256v1 73.50? 74.04? 106.65? T:saeaes256a120t128v1 61.50? 74.23? 89.07? T:schwaemm128128v1 73.06? 74.68? 88.03? T:knot128v1 77.35 77.60 79.22 T:saeaes192a120t128v1 79.43 79.43 79.43 T:tinyjambu128 82.95 83.08 83.33 T:saeaes128a64t128v1 74.58? 86.47? 104.04? T:comet128aesv1 87.12? 87.25? 104.70? T:tinyjambu256 73.96? 88.55? 88.94? T:isapa128av20 80.52? 91.55? 113.55? T:saeaes192a64t64v1 86.60? 93.63? 103.65? T:gimli24v1 79.56? 95.97? 96.36? T:tinyjambu192 85.43? 99.36? 102.35? T:saeaes128a64t64v1 84.52? 100.30? 120.32? T:saeaes192a64t128v1 86.79? 103.11? 124.10? T:saturninctrcascadev2 89.38? 107.65? 129.70? T:drygascon128k16 89.38? 107.65? 129.70? T:drygascon128k56 97.06? 113.38? 114.03? T:saeaes256a64t64v1 99.33? 118.89? 142.59? T:isapa128v20 89.38? 129.70? 135.43? T:drygascon128k32 114.89? 135.04? 136.73? T:saeaes256a64t128v1 136.34? 136.40? 164.21? T:knot192 127.32? 153.14? 153.14? romulusn 142.02? 169.02? 169.15? T:grain128aead 146.99? 176.61? 212.39? T:spook128mu384v1 150.13? 180.82? 217.72? T:spook128su512v1 182.18? 184.13? 219.42? T:sestatetweaes128v1 159.31? 191.20? 229.97? T:drygascon256k32 141.80? 203.53? 203.66? romulusm 212.39 212.78 214.86 T:spook128mu512v1 182.87? 217.47? 217.60? T:spook128su384v1 192.39? 221.89? 222.32? T:skinnyaeadtk3128128v1 229.58? 231.40? 276.58? T:estatetweaes128v1 237.13 238.82 243.12 T:knot256 224.16? 268.76? 268.89? T:mixfeed 234.64? 281.53? 339.09? T:elephant200v1 237.00? 285.31? 286.61? T:isapk128av20 298.20? 303.71? 359.66? T:photonbeetleaead128rate128v1 277.12? 329.46? 329.98? T:romulusn1v1 338.84 339.06 342.40 romulust 369.69 370.18 373.47 T:subterraneanv1 379.26 379.59 383.26 T:comet64chamv1 383.75? 387.79? 462.02? T:comet128chamv1 330.84? 391.18? 395.60? T:comet64speckv1 408.55 410.40 413.21 T:romulusm1v1 476.32? 479.45? 570.62? T:isapk128v20 578.13? 693.41? 696.80? T:pyjamask128aeadv1 738.86? 743.02? 890.57? T:pyjamask96aeadv1 976.63? 978.14? 1417.69? T:wageae128v1 848.54? 1019.43? 1228.25? T:romulusn3v1 1021.79? 1237.36? 1479.15? T:photonbeetleaead128rate32v1 1271.91? 1274.60? 1530.06? T:skinnyaeadtk29664v1 1067.41? 1285.40? 1286.44? T:sundaegift0v1 1074.76? 1289.44? 1289.95? T:sundaegift128v1 1289.57 1290.33 1293.20 T:sundaegift96v1 1289.70 1290.60 1291.13 T:sundaegift64v1 1217.87 1337.07 1339.77 T:spix128v1 1261.63? 1512.51? 1513.80? T:spoc128sliscplight256v1 1256.42? 1513.68? 1821.50? T:paefforkskinnyb128t192n48v1 1513.17? 1516.59? 1821.77? T:saefforkskinnyb128t256n120v1 1270.82? 1527.46? 1532.16? T:skinnyaeadtk296128v1 1575.79 1673.09 1673.95 T:romulusm3v1 1607.08 1780.54 1782.91 T:spoc64sliscplight192v1 1496.74? 1803.41? 1807.18? T:romulusn2v1 1819.68 1821.11 1824.88 T:paefforkskinnyb128t256n112v1 1515.11? 1822.03? 1830.22? T:saefforkskinnyb128t192n56v1 2016.28? 2018.52? 2424.16? T:skinnyaeadtk312864v1 1690.97? 2031.92? 2036.14? T:romulusm2v1 2105.79 2118.84 2136.00 T:skinnyaeadtk396128v1 2020.48? 2424.31? 2428.44? T:skinnyaeadtk39664v1 2602.99? 3138.14? 3139.96? T:paefforkskinnyb128t288n104v1 3629.20 3630.20 3635.56 T:hyenav1 3338.14? 3845.22? 3853.69? T:orangezestv1 4157.37? 4159.76? 5008.16? T:twegift64locusaeadv1 3531.80? 4249.18? 4254.75? T:aceae128v1 5018.87? 5069.78? 6031.76? T:paefforkskinnyb64t192n48v1 4289.03? 5170.22? 6466.25? T:twegift64lotusaeadv1 5570.83? 5576.99? 6711.49? T:estatetwegift128v1 7052.00? 8479.56? 10214.99? T:oribatida192v11 8798.23? 10592.72? 10599.23? T:oribatida256v11 15746.32? 15765.99? 18966.40? T:elephant160v1 14853.68? 17886.27? 17890.43? T:elephant176v1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 20.83 20.96 21.88 T:xoodyakv1 31.45? 31.78? 45.71? ascon80pqv12 28.21? 33.86? 34.38? ascon128av12 37.29? 37.40? 44.93? ascon128v12 50.26 50.39 50.39 T:knot128v2 52.20? 62.51? 62.64? T:schwaemm256128v1 62.90? 63.68? 75.66? T:giftcofb128v1 67.45 67.55 67.66 T:saeaes128a120t128v1 67.23 67.77 67.85 T:schwaemm192192v1 56.78? 67.97? 68.11? T:isapa128av20 69.02? 69.28? 83.08? T:saeaes128a120t64v1 71.87? 72.09? 86.20? T:schwaemm256256v1 73.06? 73.17? 88.03? T:knot128v1 62.80? 74.09? 89.07? T:isapa128v20 75.33? 75.44? 109.38? T:saeaes256a120t128v1 63.55? 76.57? 92.46? T:schwaemm128128v1 79.43 79.43 79.69 T:tinyjambu128 77.60 79.76 80.35 T:saeaes192a120t128v1 80.30? 82.68? 116.29? T:saeaes192a64t64v1 85.39 85.42 86.73 T:saeaes128a64t128v1 72.09? 86.36? 103.78? T:comet128aesv1 85.38? 87.12? 104.83? T:tinyjambu256 86.46? 88.68? 103.65? T:gimli24v1 79.69? 95.71? 96.49? T:tinyjambu192 85.56? 101.57? 102.87? T:saeaes128a64t64v1 84.95? 102.46? 123.84? T:saeaes192a64t128v1 86.03? 103.00? 124.23? T:saturninctrcascadev2 89.60? 107.65? 129.70? T:drygascon128k16 90.25? 107.65? 129.70? T:drygascon128k56 96.19? 115.32? 119.11? T:saeaes256a64t64v1 89.49? 129.70? 130.48? T:drygascon128k32 136.34? 136.40? 164.21? T:knot192 116.08? 138.81? 139.33? T:saeaes256a64t128v1 127.32? 153.14? 153.14? romulusn 142.34? 169.15? 169.41? T:grain128aead 173.15 173.15 173.47 romulust 146.78? 176.82? 212.65? T:spook128mu384v1 150.34? 180.93? 217.60? T:spook128su512v1 182.18? 183.74? 219.42? T:sestatetweaes128v1 158.66? 191.09? 229.84? T:drygascon256k32 141.37? 203.54? 203.66? romulusm 212.65 213.17 214.99 T:spook128mu512v1 181.04? 217.60? 217.73? T:spook128su384v1 183.74? 220.46? 220.59? T:isapk128av20 189.25? 222.00? 222.94? T:skinnyaeadtk3128128v1 229.58? 231.39? 276.58? T:estatetweaes128v1 237.13 237.26 241.30 T:knot256 225.89? 268.76? 268.89? T:mixfeed 235.08? 281.53? 339.09? T:elephant200v1 297.77? 300.36? 358.75? T:photonbeetleaead128rate128v1 314.61? 317.08? 377.76? T:isapk128v20 277.66? 329.46? 329.59? T:romulusn1v1 369.96 370.08 373.73 T:subterraneanv1 379.15 379.47 382.61 T:comet64chamv1 383.80? 387.58? 462.15? T:comet128chamv1 328.89? 390.27? 392.87? T:comet64speckv1 407.69 410.06 412.41 T:romulusm1v1 578.45? 693.42? 696.94? T:pyjamask128aeadv1 738.99? 743.16? 890.31? T:pyjamask96aeadv1 846.27? 892.00? 1223.82? T:romulusn3v1 982.36? 1176.69? 1417.56? T:wageae128v1 1027.52? 1210.40? 1505.20? T:photonbeetleaead128rate32v1 1270.16? 1273.02? 1530.58? T:skinnyaeadtk296128v1 1069.03? 1285.01? 1285.79? T:sundaegift0v1 1273.10? 1285.92? 1529.80? T:skinnyaeadtk29664v1 1075.95? 1289.31? 1290.35? T:sundaegift128v1 1289.55 1289.81 1291.24 T:sundaegift96v1 1290.07 1290.73 1292.56 T:sundaegift64v1 1233.54 1319.04 1321.83 T:spix128v1 1257.85? 1492.57? 1494.27? T:spoc128sliscplight256v1 1513.44? 1515.08? 1826.58? T:paefforkskinnyb128t192n48v1 1513.13? 1516.38? 1822.16? T:saefforkskinnyb128t256n120v1 1431.76? 1673.61? 1675.95? T:romulusm3v1 1483.87? 1782.70? 1841.06? T:spoc64sliscplight192v1 1501.82? 1803.41? 1806.78? T:romulusn2v1 1819.93 1820.29 1822.93 T:paefforkskinnyb128t256n112v1 1514.90? 1822.81? 1825.14? T:saefforkskinnyb128t192n56v1 2015.96? 2017.69? 2424.68? T:skinnyaeadtk312864v1 1690.87? 2031.60? 2035.49? T:romulusm2v1 2109.65? 2129.85? 2536.95? T:skinnyaeadtk396128v1 2018.00? 2424.66? 2429.39? T:skinnyaeadtk39664v1 2603.85? 2605.80? 3137.10? T:paefforkskinnyb128t288n104v1 3501.85? 3513.44? 4223.37? T:aceae128v1 3629.71 3630.23 3633.76 T:hyenav1 3337.60? 3844.44? 4635.27? T:orangezestv1 5003.84 5005.47 5014.12 T:paefforkskinnyb64t192n48v1 4171.10? 5008.59? 5012.81? T:twegift64locusaeadv1 4291.84? 5163.97? 6581.23? T:twegift64lotusaeadv1 5570.94 5572.34 5576.12 T:estatetwegift128v1 7255.73? 8487.00? 10218.90? T:oribatida192v11 8790.03? 8796.15? 10593.76? T:oribatida256v11 15744.70? 15760.83? 22861.64? T:elephant160v1 16467.34 17885.06 17891.21 T:elephant176v1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 49.29 50.00 50.01 T:xoodyakv1 49.29? 50.01? 59.38? ascon128av12 57.06 59.38 59.66 ascon128v12 59.38 59.66 59.66 ascon80pqv12 72.62? 85.60? 103.12? T:saeaes128a120t128v1 84.38 87.51 87.52 T:tinyjambu128 87.51 87.52 90.63 T:giftcofb128v1 96.88 96.88 96.89 T:knot128v2 85.60? 101.16? 121.88? T:saeaes192a120t128v1 106.26 106.26 106.27 T:saeaes128a120t64v1 90.79? 106.26? 109.38? T:schwaemm256128v1 95.98? 114.13? 137.51? T:saeaes256a120t128v1 95.98? 114.13? 137.51? T:saeaes192a64t64v1 95.98? 114.14? 137.52? T:schwaemm192192v1 118.77 118.77 121.88 T:tinyjambu192 101.16? 119.33? 143.75? T:saeaes192a64t128v1 119.32? 119.33? 140.63? T:schwaemm256256v1 121.88 121.88 121.90 T:saeaes128a64t64v1 85.60? 121.88? 121.88? T:saeaes128a64t128v1 103.76? 121.89? 125.01? T:schwaemm128128v1 103.77? 121.91? 143.77? T:comet128aesv1 108.95? 128.13? 131.26? T:tinyjambu256 108.95? 129.70? 156.26? T:drygascon128k16 129.70? 132.29? 156.26? T:drygascon128k56 114.13? 134.88? 137.48? T:knot128v1 132.30 134.88 134.89 T:saeaes256a64t64v1 150.01 150.01 150.02 T:gimli24v1 108.95? 156.26? 156.27? T:drygascon128k32 111.55? 162.52? 168.76? T:saeaes256a64t128v1 160.83? 163.41? 193.77? T:saturninctrcascadev2 158.23? 190.64? 190.64? romulusn 166.02? 196.89? 200.02? T:knot192 168.60? 200.02? 203.14? T:grain128aead 200.02? 231.27? 234.40? T:isapa128av20 168.61? 240.65? 246.91? romulusm 246.42? 246.43? 296.89? T:drygascon256k32 262.52? 262.52? 315.63? T:estatetweaes128v1 223.09? 268.76? 268.77? T:sestatetweaes128v1 269.77? 272.37? 325.02? T:spook128mu384v1 277.55 277.56 278.15 T:spook128su512v1 277.55? 278.15? 334.40? T:spook128su384v1 325.03 325.03 331.27 T:spook128mu512v1 342.41 343.77 345.00 T:photonbeetleaead128rate128v1 350.03 350.18 353.17 T:romulusn1v1 350.02 352.78 355.38 T:skinnyaeadtk3128128v1 315.65? 356.27? 356.28? T:knot256 365.74? 365.75? 437.53? T:comet64chamv1 313.88? 378.15? 378.16? T:comet64speckv1 451.34 451.35 453.94 romulust 399.48? 481.27? 481.29? T:mixfeed 482.47 482.49 487.54 T:romulusm1v1 412.44? 493.79? 496.91? T:elephant200v1 407.26? 587.54? 587.55? T:comet128chamv1 560.30? 812.56? 812.57? T:subterraneanv1 965.70 965.71 968.84 T:isapk128av20 856.01? 1028.20? 1028.22? T:pyjamask128aeadv1 765.23? 1103.22? 1115.72? T:isapa128v20 936.41? 1115.71? 1117.98? T:paefforkskinnyb128t192n48v1 1118.00? 1118.02? 1346.99? T:saefforkskinnyb128t256n120v1 936.43? 1128.20? 1356.38? T:skinnyaeadtk29664v1 1130.98? 1141.34? 1362.63? T:romulusn3v1 931.25? 1171.95? 1387.62? T:saefforkskinnyb128t192n56v1 1212.61? 1215.74? 1459.48? T:photonbeetleaead128rate32v1 1096.96? 1315.73? 1315.74? T:pyjamask96aeadv1 1112.60? 1340.70? 1340.73? T:paefforkskinnyb128t256n112v1 1131.36? 1359.48? 1362.60? T:skinnyaeadtk296128v1 1169.87? 1397.00? 1681.38? T:sundaegift0v1 1503.25 1503.25 1503.27 T:sundaegift96v1 1503.24 1503.26 1503.27 T:sundaegift64v1 1250.28? 1506.38? 1809.52? T:sundaegift128v1 1612.64? 1618.88? 1943.95? T:romulusm3v1 1387.78? 1670.52? 2012.65? T:wageae128v1 1398.13? 1703.27? 1706.41? T:spoc128sliscplight256v1 1520.07? 1753.51? 2097.07? T:skinnyaeadtk396128v1 1460.39? 1758.73? 2118.92? T:skinnyaeadtk312864v1 1836.55? 1857.27? 2215.25? T:spix128v1 1759.51? 1955.84? 2118.95? T:skinnyaeadtk39664v1 1660.17? 1993.90? 1997.05? T:romulusn2v1 1994.78 1997.35 1997.36 T:spoc64sliscplight192v1 1797.59? 2147.05? 2150.17? T:paefforkskinnyb128t288n104v1 2355.32 2357.89 2360.52 T:romulusm2v1 2692.52? 3224.30? 3881.49? T:paefforkskinnyb64t192n48v1 4097.16 4097.20 4100.31 T:hyenav1 4756.63? 4766.01? 5728.58? T:orangezestv1 4798.80 4798.84 4809.19 T:twegift64locusaeadv1 4811.84? 5772.34? 5775.48? T:twegift64lotusaeadv1 5962.98 5984.88 6006.75 T:aceae128v1 5027.07? 6044.12? 6047.27? T:estatetwegift128v1 5029.73? 6044.21? 6059.83? T:isapk128v20 11063.23 11069.38 11138.14 T:oribatida192v11 11238.14? 13122.93? 13157.27? T:oribatida256v11 21125.22? 25368.81? 25452.07? T:elephant160v1 18533.85? 26817.80? 26914.56? T:elephant176v1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 49.29? 50.01? 59.37? ascon128av12 49.99 50.01 51.88 T:xoodyakv1 57.06 57.07 59.38 ascon128v12 57.07 59.38 59.66 ascon80pqv12 72.64? 85.60? 103.13? T:saeaes128a120t128v1 84.38 87.51 87.51 T:tinyjambu128 87.51 90.62 90.63 T:giftcofb128v1 93.76 93.77 96.88 T:knot128v2 85.60? 103.75? 121.89? T:saeaes192a120t128v1 106.26 106.26 106.27 T:saeaes128a120t64v1 90.79? 109.38? 109.39? T:schwaemm256128v1 95.98? 114.12? 134.38? T:saeaes192a64t64v1 95.98? 114.13? 137.51? T:saeaes256a120t128v1 95.98? 114.14? 137.51? T:schwaemm192192v1 83.02? 118.76? 121.88? T:saeaes128a64t128v1 101.16? 119.33? 143.76? T:saeaes192a64t128v1 118.77 121.88 121.89 T:saeaes128a64t64v1 121.88 121.88 121.88 T:tinyjambu192 119.33? 121.91? 143.76? T:schwaemm256256v1 103.75? 124.51? 125.01? T:knot128v1 103.76? 124.51? 146.89? T:comet128aesv1 103.76? 125.01? 125.02? T:schwaemm128128v1 108.95? 131.26? 131.27? T:tinyjambu256 111.55? 132.29? 159.38? T:drygascon128k16 132.29? 132.30? 156.27? T:drygascon128k56 132.30 134.88 134.89 T:saeaes256a64t64v1 150.01 153.13 153.14 T:gimli24v1 111.54? 159.38? 159.39? T:drygascon128k32 111.55? 159.39? 162.52? T:saeaes256a64t128v1 163.42? 163.42? 193.77? T:saturninctrcascadev2 158.23? 190.64? 190.64? T:knot192 158.23? 190.64? 190.64? romulusn 168.61? 200.02? 203.13? T:grain128aead 200.02? 231.27? 234.41? T:isapa128av20 168.61? 240.65? 243.77? romulusm 246.42? 246.43? 296.90? T:drygascon256k32 262.52? 265.64? 315.65? T:estatetweaes128v1 223.09? 268.77? 268.77? T:sestatetweaes128v1 274.96? 280.15? 328.16? T:spook128mu384v1 280.16 281.27 284.40 T:spook128su512v1 280.15? 285.34? 337.53? T:spook128su384v1 331.27 331.28 334.41 T:spook128mu512v1 345.00 346.89 347.59 T:photonbeetleaead128rate128v1 350.03 350.19 356.28 T:romulusn1v1 328.16 359.41 362.53 T:knot256 368.34? 368.34? 440.66? T:comet64chamv1 319.06? 381.28? 381.28? T:comet64speckv1 347.59? 396.88? 399.47? T:skinnyaeadtk3128128v1 451.35 451.35 453.95 romulust 399.48? 481.27? 481.29? T:mixfeed 412.45? 493.79? 493.80? T:elephant200v1 513.60 513.62 516.21 T:romulusm1v1 409.85? 590.66? 590.67? T:comet128chamv1 560.30? 812.55? 812.57? T:subterraneanv1 965.70 965.71 965.72 T:isapk128av20 856.01? 1025.08? 1028.20? T:pyjamask128aeadv1 762.63? 1106.34? 1109.46? T:isapa128v20 1136.15? 1138.74? 1365.76? T:romulusn3v1 1212.62? 1215.74? 1459.49? T:photonbeetleaead128rate32v1 1096.96? 1318.85? 1318.87? T:pyjamask96aeadv1 1162.10? 1396.98? 1681.39? T:skinnyaeadtk29664v1 1159.50? 1397.00? 1684.51? T:sundaegift0v1 1503.24 1503.26 1506.38 T:sundaegift64v1 1250.29? 1503.27? 1809.52? T:sundaegift128v1 1503.25 1506.36 1521.99 T:sundaegift96v1 1263.26? 1520.02? 1521.99? T:paefforkskinnyb128t192n48v1 1522.68? 1535.66? 1834.53? T:saefforkskinnyb128t256n120v1 1265.88? 1615.74? 1834.53? T:saefforkskinnyb128t192n56v1 1615.76? 1618.88? 1943.95? T:romulusm3v1 1400.73? 1675.71? 2012.65? T:wageae128v1 1400.14? 1684.50? 1684.52? T:skinnyaeadtk296128v1 1431.86? 1706.39? 1709.52? T:spoc128sliscplight256v1 1518.88? 1828.24? 1828.27? T:paefforkskinnyb128t256n112v1 1865.05? 1872.86? 2246.38? T:spix128v1 1665.35? 2000.16? 2003.28? T:romulusn2v1 1999.95 2002.55 2012.91 T:spoc64sliscplight192v1 1836.51? 2204.88? 2653.34? T:skinnyaeadtk312864v1 2203.29? 2225.62? 2653.37? T:skinnyaeadtk39664v1 1932.50? 2342.34? 2819.01? T:skinnyaeadtk396128v1 2360.51 2360.56 2368.30 T:romulusm2v1 2609.47? 3140.87? 3140.88? T:paefforkskinnyb128t288n104v1 4094.09 4097.20 4100.31 T:hyenav1 4682.11 4684.73 4705.45 T:twegift64locusaeadv1 4756.62? 4772.27? 5728.58? T:orangezestv1 4189.24? 5011.52? 6028.50? T:paefforkskinnyb64t192n48v1 4811.83? 5775.45? 5778.57? T:twegift64lotusaeadv1 6006.70 6006.74 6025.50 T:aceae128v1 5037.50? 6009.87? 6041.12? T:isapk128v20 5029.67? 6044.13? 6047.38? T:estatetwegift128v1 11056.88 11072.51 11141.49 T:oribatida192v11 11335.02? 13119.77? 13157.31? T:oribatida256v11 21140.79? 25431.07? 25449.22? T:elephant160v1 18552.01? 26817.82? 26902.20? T:elephant176v1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 49.29? 50.01? 59.38? ascon128av12 50.00 50.01 51.88 T:xoodyakv1 57.06 57.07 59.38 ascon128v12 57.07 59.38 59.66 ascon80pqv12 84.38 87.51 87.51 T:tinyjambu128 75.23? 88.20? 106.26? T:saeaes128a120t128v1 87.51 90.62 90.63 T:giftcofb128v1 93.76 93.77 96.88 T:knot128v2 85.60? 103.76? 121.88? T:saeaes192a120t128v1 109.38 109.38 109.39 T:saeaes128a120t64v1 93.38? 109.39? 112.51? T:schwaemm256128v1 95.98? 114.13? 137.51? T:saeaes192a64t64v1 95.98? 116.73? 137.52? T:saeaes256a120t128v1 98.58? 116.73? 140.64? T:schwaemm192192v1 121.88 121.88 121.88 T:tinyjambu192 85.60? 121.88? 121.89? T:saeaes128a64t128v1 101.17? 121.91? 146.88? T:saeaes192a64t128v1 101.16? 124.51? 125.01? T:knot128v1 103.76? 124.51? 146.88? T:comet128aesv1 121.91? 124.52? 146.88? T:schwaemm256256v1 121.89 125.00 125.01 T:saeaes128a64t64v1 108.95? 128.13? 128.14? T:schwaemm128128v1 108.95? 131.26? 131.27? T:tinyjambu256 111.55? 132.29? 159.38? T:drygascon128k16 132.29? 132.30? 159.38? T:drygascon128k56 134.88 134.89 137.48 T:saeaes256a64t64v1 150.01 150.02 153.13 T:gimli24v1 111.54? 159.38? 159.38? T:drygascon128k32 140.63? 159.39? 162.52? T:isapa128av20 114.13? 162.52? 162.52? T:saeaes256a64t128v1 160.83? 163.42? 193.77? T:saturninctrcascadev2 158.23? 190.64? 190.64? T:knot192 158.23? 190.64? 190.64? romulusn 168.61? 200.02? 203.14? T:grain128aead 168.60? 240.65? 240.66? romulusm 246.42? 246.44? 296.90? T:drygascon256k32 262.52? 262.53? 315.64? T:estatetweaes128v1 223.09? 268.77? 268.77? T:sestatetweaes128v1 274.97? 280.15? 331.27? T:spook128mu384v1 281.27 282.75 287.52 T:spook128su512v1 281.27? 285.33? 337.52? T:spook128su384v1 285.34 285.34 285.35 romulust 331.27 331.28 337.52 T:spook128mu512v1 345.00 346.91 350.02 T:photonbeetleaead128rate128v1 347.59 350.04 353.16 T:romulusn1v1 318.78? 359.41? 362.52? T:knot256 365.75? 368.34? 440.66? T:comet64chamv1 316.47? 381.28? 381.28? T:comet64speckv1 365.75 396.91 400.04 T:skinnyaeadtk3128128v1 399.48? 481.27? 481.29? T:mixfeed 412.44? 493.79? 496.91? T:elephant200v1 512.55 513.62 516.21 T:romulusm1v1 407.26? 587.55? 590.67? T:comet128chamv1 409.85? 587.55? 593.80? T:isapa128v20 603.17 603.18 606.30 T:isapk128av20 575.86? 812.56? 812.58? T:subterraneanv1 853.42? 1025.08? 1028.20? T:pyjamask128aeadv1 1133.56? 1138.74? 1365.76? T:romulusn3v1 1212.62? 1216.55? 1459.49? T:photonbeetleaead128rate32v1 1115.72? 1315.73? 1318.87? T:pyjamask96aeadv1 1159.50? 1397.00? 1681.39? T:sundaegift0v1 1164.70? 1400.10? 1678.29? T:skinnyaeadtk29664v1 1503.25 1503.25 1506.36 T:sundaegift96v1 1250.28? 1503.27? 1809.53? T:sundaegift128v1 1503.25 1503.27 1506.38 T:sundaegift64v1 1263.26? 1518.88? 1520.03? T:paefforkskinnyb128t192n48v1 1522.64? 1522.69? 1831.41? T:saefforkskinnyb128t256n120v1 1263.29? 1534.49? 1847.04? T:saefforkskinnyb128t192n56v1 1612.64? 1622.02? 1940.84? T:romulusm3v1 1392.96? 1673.11? 2012.66? T:wageae128v1 1400.12? 1681.39? 1684.51? T:skinnyaeadtk296128v1 1403.33? 1681.41? 1687.64? T:spoc128sliscplight256v1 1522.01? 1828.24? 1828.27? T:paefforkskinnyb128t256n112v1 1846.90? 1854.68? 2215.24? T:spix128v1 1670.55? 2000.15? 2006.40? T:romulusn2v1 2002.52 2002.55 2010.30 T:spoc64sliscplight192v1 1831.33? 2202.30? 2653.34? T:skinnyaeadtk312864v1 2204.88? 2228.22? 2656.48? T:skinnyaeadtk39664v1 1942.88? 2303.43? 2822.13? T:skinnyaeadtk396128v1 2360.52 2365.68 2394.22 T:romulusm2v1 2606.88? 3140.87? 3144.00? T:paefforkskinnyb128t288n104v1 2643.27? 3143.98? 3159.64? T:isapk128v20 4097.16 4097.19 4100.31 T:hyenav1 4684.67 4687.30 4702.84 T:twegift64locusaeadv1 4756.63? 4767.59? 5728.57? T:orangezestv1 4181.46? 5006.34? 6028.50? T:paefforkskinnyb64t192n48v1 4814.41? 5772.36? 5775.48? T:twegift64lotusaeadv1 5959.87 5966.08 6003.63 T:aceae128v1 5027.07? 6041.12? 6044.25? T:estatetwegift128v1 11057.12 11075.62 11150.62 T:oribatida192v11 10988.12? 13110.42? 13166.68? T:oribatida256v11 25373.95 25444.16 25483.33 T:elephant160v1 18562.39? 26808.30? 26917.69? T:elephant176v1