VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: aarch64; Cortex-A76 (414fd0b1); 2023 Broadcom BCM2712; 4 x 1500MHz; pi5, supercop-20251222

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.53 0.53 0.54 aegis128l 0.75 0.75 0.76 aegis256 0.79 0.80 0.82 T:aezv5 0.81 0.82 0.84 T:aezv4 0.87 0.87 0.88 T:aeadaes128ocbtaglen128v1 1.07 1.08 1.11 T:aeadaes256ocbtaglen128v1 1.25 1.27 1.29 T:morus1280128v1 1.28 1.30 1.31 T:morus1280256v1 1.30 1.32 1.34 T:morus1280256v2 1.38 1.40 1.41 T:morus1280128v2 1.56 1.61 1.62 T:aes256gcmv1 1.82 1.85 1.86 T:aes128gcmv1 2.07 2.08 2.09 T:norx6441v2 2.07 2.08 2.09 T:norx6441v3 2.50 2.53 2.55 T:norx6444v2 2.51 2.53 2.54 T:norx6444v3 2.51 2.53 2.54 T:norx6441v1 2.58 2.59 2.60 T:morus640128v2 2.58 2.73 2.86 T:lunarkeyakv2 2.87 2.90 2.92 T:morus640128v1 2.98 3.00 3.02 T:norx6444v1 3.03 3.04 3.05 T:norx6461v2 3.06 3.07 3.08 T:norx6461v3 3.10 3.11 3.13 T:tiaoxinv1 3.43 3.47 3.50 T:lakekeyakv1 3.60 3.61 3.63 T:norx6461v1 3.63 3.65 3.68 T:tiaoxinv2 3.74 3.76 3.77 T:lakekeyakv2 3.76 3.78 3.80 T:ketjemajorv2 3.85 3.88 3.91 T:seakeyakv2 3.75 3.89 4.02 T:oceankeyakv2 4.19 4.20 4.22 T:norx3241v3 4.22 4.24 4.25 T:norx3241v2 4.74 4.77 4.80 T:acorn128v2 4.75 4.78 4.79 T:acorn128v3 4.83 4.85 4.86 ascon128av12 4.94 4.94 4.96 T:ascon96v1 5.05 5.07 5.09 T:norx3241v1 5.07 5.09 5.12 T:ascon128av11 6.10 6.12 6.13 T:norx3261v3 6.17 6.18 6.20 T:norx3261v2 6.90 6.95 6.98 T:aegis128 7.12 7.13 7.14 ascon128v12 7.23 7.25 7.26 T:norx3261v1 7.75 7.76 7.77 T:ascon128v1 7.75 7.76 7.78 T:ascon128v11 8.53 8.58 8.68 T:ketjeminorv2 8.72 8.76 8.78 T:riverkeyakv2 12.30 12.32 12.36 T:aes128otrcv3 13.41 13.42 13.47 T:aes128otrpv2 13.41 13.43 13.47 T:aes128otrsv1 13.42 13.44 13.48 T:aes128otrpv1 13.42 13.44 13.49 T:aes128otrsv2 14.23 14.25 14.29 T:aeadaes128ocbtaglen64v1 14.29 14.32 14.36 T:aes128otrsv3 14.31 14.34 14.38 T:aes128otrpv3 14.34 14.38 14.43 T:aeadaes128ocbtaglen96v1 16.29 16.32 16.36 T:aes256otrcv3 16.25 16.36 16.40 T:aeadaes192ocbtaglen96v1 16.37 16.44 16.48 T:aeadaes192ocbtaglen128v1 16.40 16.48 16.55 T:aeadaes192ocbtaglen64v1 17.22 17.24 17.30 T:aes256otrpv2 17.23 17.25 17.31 T:aes256otrsv2 17.23 17.26 17.31 T:aes256otrpv1 17.26 17.28 17.33 T:aes256otrsv1 17.54 17.56 17.61 T:deoxysi128v141 18.11 18.14 18.20 T:aes256otrsv3 18.16 18.19 18.24 T:aes256otrpv3 18.28 18.39 18.45 T:aeadaes256ocbtaglen96v1 18.30 18.42 18.46 T:aeadaes256ocbtaglen64v1 19.40 19.44 19.48 T:proest256otrv1 19.55 19.61 19.64 T:deoxysi256v141 20.51 20.53 20.57 T:aesjambuv1 22.37 22.41 22.49 T:aes128n12t8clocv2 22.40 22.44 22.53 T:aes128n12t8clocv3 22.37 22.47 22.65 T:aes128n12clocv1 22.43 22.48 22.57 T:aes128n8t8clocv2 22.64 22.72 22.79 T:aes128n8clocv1 22.69 22.75 22.84 T:aes128n8t8silcv2 22.78 22.82 22.87 T:aes128n12t8silcv2 22.84 22.89 22.99 T:aes128n12t8silcv3 29.12 29.15 29.20 T:colm0v1 29.38 29.41 29.50 T:colm127v1 29.58 29.70 29.87 T:ketjesrv1 30.51 30.53 30.58 T:ketjesrv2 35.10 35.14 35.22 T:deoxysii128v141 46.74 46.80 46.87 T:proest128otrv1 55.32 55.70 55.83 T:ketjejrv1 65.49 65.56 65.69 T:deoxysneq128128v1 66.90 67.04 67.14 T:deoxysneq128128v13 84.68 84.92 85.10 T:ketjejrv2 90.41 90.56 90.65 T:deoxysneq256128v13 90.52 90.74 90.85 T:deoxysneq256128v1 103.84 104.00 104.07 T:deoxysii256v141 115.69 115.87 116.02 T:twine80n6t4clocv2 116.12 116.38 116.50 T:twine80n6t4clocv3 126.61 126.88 127.06 T:aezv3 130.19 130.30 130.44 T:deoxyseq128128v1 131.92 132.11 132.27 T:deoxyseq128128v13 150.46 150.92 151.16 T:aezv1 180.46 180.70 181.12 T:deoxyseq256128v1 180.53 180.93 181.08 T:deoxyseq256128v13 506.26 507.15 509.01 T:acorn128 3548.54 3548.83 3549.11 T:led80n6t4silcv3 3549.49 3549.67 3549.80 T:led80n6silcv1 3549.04 3549.92 3550.24 T:led80n6t4silcv2 3863.35 3863.94 3864.58 T:present80n6silcv1 3863.96 3864.31 3864.73 T:present80n6t4silcv3 3863.98 3864.46 3864.87 T:present80n6t4silcv2 15264.26 15264.84 15265.35 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.51 0.54 0.56 aegis128l 0.78 0.80 0.81 aegis256 0.78 0.80 0.82 T:aezv5 0.81 0.84 0.85 T:aeadaes128ocbtaglen128v1 0.82 0.84 0.85 T:aezv4 1.12 1.13 1.14 T:aeadaes256ocbtaglen128v1 1.27 1.28 1.29 T:morus1280128v1 1.30 1.32 1.33 T:morus1280256v2 1.32 1.33 1.34 T:morus1280256v1 1.37 1.41 1.42 T:aes128gcmv1 1.44 1.46 1.48 T:morus1280128v2 1.51 1.54 1.55 T:aes256gcmv1 2.08 2.10 2.13 T:norx6441v2 2.11 2.13 2.14 T:norx6441v3 2.50 2.52 2.54 T:norx6444v3 2.51 2.52 2.54 T:norx6444v2 2.59 2.61 2.64 T:norx6441v1 2.61? 2.75? 2.91? T:lunarkeyakv2 2.84 2.87 2.89 T:morus640128v2 2.85 2.88 2.89 T:morus640128v1 2.98 3.01 3.03 T:norx6444v1 3.09 3.11 3.12 T:norx6461v3 3.11 3.13 3.17 T:norx6461v2 3.41 3.44 3.47 T:lakekeyakv1 3.68 3.72 3.76 T:norx6461v1 3.77 3.78 3.80 T:lakekeyakv2 3.78 3.81 3.83 T:ketjemajorv2 3.75 3.90 4.08 T:oceankeyakv2 3.87 3.91 3.96 T:seakeyakv2 4.17 4.19 4.21 T:norx3241v2 4.21 4.23 4.23 T:norx3241v3 4.44 4.48 4.50 T:tiaoxinv2 4.74 4.76 4.77 T:acorn128v3 4.75 4.77 4.79 T:acorn128v2 4.82 4.83 4.83 ascon128av12 4.93 4.94 4.96 T:tiaoxinv1 5.14 5.17 5.19 T:ascon128av11 5.17 5.19 5.20 T:ascon96v1 5.23 5.26 5.28 T:norx3241v1 6.13 6.14 6.16 T:norx3261v2 6.12 6.15 6.16 T:norx3261v3 6.92 7.00 7.07 T:aegis128 7.14 7.15 7.16 ascon128v12 7.36 7.37 7.38 T:ascon128v1 7.35 7.38 7.41 T:ascon128v11 7.40 7.43 7.46 T:norx3261v1 8.26 8.29 8.36 T:ketjeminorv2 8.79 8.82 8.85 T:riverkeyakv2 12.61 12.63 12.68 T:aes128otrcv3 13.60 13.63 13.69 T:aes128otrpv3 13.61 13.66 13.70 T:aes128otrsv3 13.68 13.72 13.77 T:aes128otrpv2 13.70 13.72 13.80 T:aes128otrpv1 13.70 13.74 13.79 T:aes128otrsv2 13.72 13.74 13.79 T:aes128otrsv1 14.01 14.05 14.11 T:aeadaes128ocbtaglen64v1 14.09 14.13 14.20 T:aeadaes128ocbtaglen96v1 16.00 16.04 16.10 T:aeadaes192ocbtaglen96v1 16.07 16.11 16.18 T:aeadaes192ocbtaglen128v1 16.08 16.12 16.18 T:aeadaes192ocbtaglen64v1 16.58 16.61 16.65 T:aes256otrcv3 17.46 17.50 17.57 T:aes256otrsv3 17.48 17.52 17.59 T:aes256otrpv3 17.52 17.55 17.61 T:aes256otrsv1 17.54 17.57 17.62 T:aes256otrpv1 17.53 17.57 17.62 T:aes256otrsv2 17.53 17.58 17.63 T:aes256otrpv2 18.02 18.07 18.15 T:aeadaes256ocbtaglen96v1 18.05 18.08 18.14 T:aeadaes256ocbtaglen64v1 18.97 19.21 19.33 T:proest256otrv1 20.40 20.42 20.48 T:aesjambuv1 21.04 21.07 21.14 T:deoxysi128v141 22.17 22.30 22.43 T:aes128n12clocv1 22.34 22.38 22.45 T:aes128n8t8clocv2 22.38 22.43 22.50 T:aes128n12t8clocv2 22.40 22.44 22.57 T:aes128n8clocv1 22.38 22.45 22.59 T:aes128n12t8clocv3 22.86 22.92 23.00 T:aes128n12t8silcv3 22.85 22.94 23.09 T:aes128n8t8silcv2 22.90 22.97 23.07 T:aes128n12t8silcv2 22.99 23.03 23.09 T:deoxysi256v141 28.91 28.94 29.01 T:colm0v1 30.41 30.56 30.90 T:ketjesrv1 30.50 30.59 30.69 T:ketjesrv2 32.71 32.84 33.01 T:colm127v1 35.24 35.28 35.35 T:deoxysii128v141 46.07 46.15 46.31 T:proest128otrv1 55.65 55.94 56.19 T:ketjejrv1 81.13 81.30 81.43 T:ketjejrv2 98.97 99.11 99.21 T:deoxysneq128128v1 99.52 99.61 99.71 T:deoxysneq128128v13 104.06 104.22 104.30 T:deoxysii256v141 115.75 115.94 116.09 T:twine80n6t4clocv2 116.26 116.35 116.55 T:twine80n6t4clocv3 121.23 121.52 121.71 T:deoxysneq256128v13 121.63 121.87 122.08 T:deoxysneq256128v1 126.61 126.96 127.10 T:aezv3 131.93 132.19 132.37 T:deoxyseq128128v13 150.54 150.81 150.97 T:aezv1 180.97 181.14 181.49 T:deoxyseq256128v13 193.97 194.21 194.33 T:deoxyseq128128v1 243.59 243.81 244.03 T:deoxyseq256128v1 501.20 506.02 507.19 T:acorn128 3547.98 3548.60 3548.95 T:led80n6t4silcv3 3549.13 3549.40 3549.67 T:led80n6silcv1 3548.81 3550.13 3550.51 T:led80n6t4silcv2 3863.20 3863.71 3864.22 T:present80n6silcv1 3863.38 3863.79 3864.42 T:present80n6t4silcv2 3863.16 3863.85 3864.28 T:present80n6t4silcv3 15264.47 15265.02 15266.26 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.27? 0.29? 0.32? T:aezv5 0.31? 0.34? 0.35? T:aezv4 0.55 0.58 0.59 aegis128l 0.80 0.82 0.85 aegis256 0.82 0.83 0.83 T:aeadaes128ocbtaglen128v1 1.12 1.13 1.14 T:aeadaes256ocbtaglen128v1 1.26 1.28 1.28 T:morus1280128v1 1.30 1.31 1.32 T:morus1280256v2 1.31 1.32 1.33 T:morus1280256v1 1.40 1.41 1.42 T:aes128gcmv1 1.46 1.47 1.48 T:morus1280128v2 1.54 1.55 1.56 T:aes256gcmv1 2.13 2.15 2.15 T:norx6441v2 2.13 2.15 2.16 T:norx6441v3 2.54 2.56 2.58 T:norx6444v2 2.55 2.57 2.59 T:norx6444v3 2.63 2.65 2.67 T:norx6441v1 2.62 2.76 2.90 T:lunarkeyakv2 2.86 2.88 2.89 T:morus640128v1 2.86 2.88 2.90 T:morus640128v2 3.01 3.03 3.05 T:norx6444v1 3.12 3.14 3.15 T:norx6461v3 3.13 3.15 3.18 T:norx6461v2 3.43 3.45 3.47 T:lakekeyakv1 3.70 3.77 3.81 T:norx6461v1 3.78 3.79 3.80 T:lakekeyakv2 3.82 3.84 3.86 T:ketjemajorv2 3.90 3.92 3.94 T:seakeyakv2 3.79 3.92 4.08 T:oceankeyakv2 4.20 4.22 4.23 T:norx3241v2 4.22 4.24 4.26 T:norx3241v3 4.44 4.47 4.49 T:tiaoxinv2 4.75 4.76 4.79 T:acorn128v3 4.74 4.77 4.79 T:acorn128v2 4.82 4.83 4.83 ascon128av12 4.93 4.95 4.97 T:tiaoxinv1 5.13 5.15 5.18 T:ascon128av11 5.17 5.19 5.20 T:ascon96v1 5.26 5.29 5.30 T:norx3241v1 6.14 6.17 6.18 T:norx3261v3 6.15 6.18 6.19 T:norx3261v2 6.93 6.99 7.02 T:aegis128 7.14 7.15 7.16 ascon128v12 7.35 7.37 7.39 T:ascon128v11 7.36 7.39 7.40 T:ascon128v1 7.43 7.46 7.51 T:norx3261v1 8.30 8.33 8.43 T:ketjeminorv2 8.83 8.85 8.87 T:riverkeyakv2 12.59 12.62 12.66 T:aes128otrcv3 13.62 13.66 13.73 T:aes128otrpv3 13.67 13.70 13.76 T:aes128otrsv3 13.73 13.75 13.85 T:aes128otrpv2 13.73 13.76 13.83 T:aes128otrpv1 13.75 13.77 13.81 T:aes128otrsv2 13.75 13.77 13.82 T:aes128otrsv1 14.04 14.06 14.10 T:aeadaes128ocbtaglen64v1 14.11 14.13 14.20 T:aeadaes128ocbtaglen96v1 16.02 16.04 16.10 T:aeadaes192ocbtaglen96v1 16.08 16.12 16.17 T:aeadaes192ocbtaglen64v1 16.10 16.12 16.19 T:aeadaes192ocbtaglen128v1 16.60 16.62 16.66 T:aes256otrcv3 17.50 17.52 17.59 T:aes256otrsv3 17.54 17.56 17.62 T:aes256otrpv3 17.55 17.58 17.64 T:aes256otrpv2 17.56 17.59 17.65 T:aes256otrsv1 17.58 17.60 17.69 T:aes256otrpv1 17.57 17.60 17.67 T:aes256otrsv2 18.05 18.08 18.13 T:aeadaes256ocbtaglen96v1 18.05 18.08 18.14 T:aeadaes256ocbtaglen64v1 19.27 19.30 19.34 T:proest256otrv1 20.39 20.42 20.47 T:aesjambuv1 21.07 21.09 21.17 T:deoxysi128v141 22.15 22.28 22.49 T:aes128n12clocv1 22.28 22.33 22.44 T:aes128n8t8clocv2 22.38 22.44 22.56 T:aes128n12t8clocv3 22.40 22.44 22.55 T:aes128n12t8clocv2 22.39 22.45 22.56 T:aes128n8clocv1 22.87 22.91 22.99 T:aes128n12t8silcv3 22.96 23.01 23.07 T:aes128n12t8silcv2 22.90 23.02 23.09 T:aes128n8t8silcv2 23.04 23.08 23.17 T:deoxysi256v141 28.91 28.95 29.03 T:colm0v1 30.00 30.46 30.58 T:ketjesrv1 30.35 30.50 30.61 T:ketjesrv2 32.07 32.13 32.22 T:colm127v1 35.30 35.34 35.41 T:deoxysii128v141 46.10 46.19 46.31 T:proest128otrv1 55.93 56.05 56.46 T:ketjejrv1 81.17 81.35 81.55 T:ketjejrv2 98.92 99.12 99.23 T:deoxysneq128128v1 99.49 99.61 99.79 T:deoxysneq128128v13 104.20 104.28 104.37 T:deoxysii256v141 115.74 115.90 116.09 T:twine80n6t4clocv2 116.31 116.39 116.60 T:twine80n6t4clocv3 121.37 121.64 121.81 T:deoxysneq256128v13 121.67 121.91 122.03 T:deoxysneq256128v1 126.61 126.88 127.06 T:aezv3 131.86 132.09 132.20 T:deoxyseq128128v13 150.43 150.60 150.85 T:aezv1 181.07 181.31 181.58 T:deoxyseq256128v13 194.02 194.19 194.35 T:deoxyseq128128v1 243.42 243.77 244.07 T:deoxyseq256128v1 262.73 262.92 263.08 aes256gcmv1 500.99 506.25 507.05 T:acorn128 3547.95 3548.57 3548.81 T:led80n6t4silcv3 3549.21 3549.44 3549.76 T:led80n6silcv1 3548.69 3549.80 3550.57 T:led80n6t4silcv2 3862.81 3863.24 3863.64 T:present80n6t4silcv2 3863.23 3863.48 3863.87 T:present80n6t4silcv3 3863.30 3863.74 3864.38 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.44 0.45 0.45 aegis128l 0.53 0.54 0.55 T:aezv5 0.53 0.54 0.56 T:aezv4 0.64 0.64 0.65 aegis256 0.82 0.83 0.85 T:aeadaes128ocbtaglen128v1 1.06 1.07 1.08 T:aeadaes256ocbtaglen128v1 1.11 1.11 1.12 T:aes256gcmv1 1.14 1.16 1.17 T:morus1280128v1 1.22 1.23 1.24 T:aes128gcmv1 1.31 1.33 1.34 T:morus1280256v2 1.34 1.36 1.37 T:morus1280256v1 1.42 1.43 1.44 T:morus1280128v2 2.02 2.03 2.03 T:norx6441v2 2.06 2.06 2.07 T:norx6441v3 2.26 2.27 2.28 T:norx6444v3 2.26 2.27 2.29 T:norx6444v2 2.45 2.46 2.47 T:norx6441v1 2.68 2.70 2.72 T:norx6444v1 2.75 2.77 2.79 T:morus640128v2 2.97 2.97 2.98 T:norx6461v2 2.98 2.99 3.00 T:morus640128v1 3.01 3.02 3.04 T:tiaoxinv1 3.03 3.04 3.05 T:norx6461v3 3.25 3.26 3.36 T:lakekeyakv1 3.26 3.34 3.44 T:oceankeyakv2 3.33 3.35 3.38 T:seakeyakv2 3.38 3.40 3.45 T:lakekeyakv2 3.40 3.42 3.45 T:tiaoxinv2 3.60 3.63 3.64 T:norx6461v1 3.74 3.76 3.79 T:ketjemajorv2 3.81 3.89 3.98 T:lunarkeyakv2 4.11 4.11 4.13 T:norx3241v3 4.12 4.12 4.14 T:norx3241v2 4.66 4.68 4.70 T:acorn128v2 4.67 4.68 4.70 T:acorn128v3 4.77 4.78 4.79 ascon128av12 4.91 4.92 4.94 T:norx3241v1 4.99 5.01 5.03 T:ascon96v1 5.09 5.11 5.12 T:ascon128av11 6.03 6.04 6.06 T:norx3261v3 6.07 6.08 6.09 T:norx3261v2 6.24 6.26 6.31 T:riverkeyakv2 6.87 6.90 6.94 T:aegis128 7.06 7.14 7.23 ascon128v12 7.13 7.22 7.26 T:norx3261v1 7.49 7.51 7.62 T:ketjeminorv2 7.66 7.69 7.71 T:ascon128v1 7.67 7.70 7.72 T:ascon128v11 12.31 12.32 12.36 T:aes128otrsv2 12.32 12.34 12.37 T:aes128otrsv1 12.44 12.46 12.49 T:aes128otrcv3 12.76 12.79 12.83 T:aes128otrsv3 13.04 13.07 13.09 T:aes128otrpv2 13.07 13.10 13.13 T:aes128otrpv1 13.67 13.70 13.73 T:aes128otrpv3 13.76 13.78 13.81 T:aeadaes128ocbtaglen96v1 13.75 13.78 13.81 T:aeadaes128ocbtaglen64v1 15.75 15.80 15.83 T:aeadaes192ocbtaglen128v1 15.75 15.80 15.84 T:aeadaes192ocbtaglen96v1 15.77 15.82 15.87 T:aeadaes192ocbtaglen64v1 16.15 16.16 16.20 T:aes256otrsv1 16.15 16.17 16.18 T:aes256otrsv2 16.42 16.45 16.49 T:aes256otrcv3 16.59 16.62 16.64 T:aes256otrsv3 16.82 16.85 16.91 T:aes128n12clocv1 16.84 16.86 16.90 T:aes128n8t8clocv2 16.84 16.86 16.90 T:aes128n12t8clocv2 16.84 16.88 16.93 T:aes128n12t8clocv3 16.87 16.89 16.93 T:aes256otrpv1 16.87 16.90 16.94 T:aes256otrpv2 16.96 16.98 17.01 T:aes128n8clocv1 16.97 17.01 17.04 T:aes128n8t8silcv2 17.01 17.03 17.08 T:aes128n12t8silcv2 17.08 17.10 17.16 T:aes128n12t8silcv3 17.48 17.50 17.56 T:aes256otrpv3 17.62 17.63 17.67 T:deoxysi128v141 17.75 17.80 17.84 T:aeadaes256ocbtaglen96v1 17.76 17.81 17.85 T:aeadaes256ocbtaglen64v1 19.48 19.52 19.57 T:proest256otrv1 19.54 19.58 19.65 T:deoxysi256v141 20.52 20.53 20.56 T:aesjambuv1 21.39 21.45 21.50 T:colm0v1 21.48 21.50 21.53 T:colm127v1 25.93 25.95 26.00 T:deoxysii128v141 26.89 27.05 27.27 T:ketjesrv1 28.35 28.38 28.44 T:ketjesrv2 46.59 46.62 46.65 T:proest128otrv1 50.52 50.69 50.78 T:ketjejrv1 66.21 66.33 66.39 T:deoxysneq128128v1 66.93 66.98 67.03 T:deoxysneq128128v13 77.60 77.66 77.75 T:deoxysii256v141 80.78 80.87 80.98 T:ketjejrv2 86.76 86.86 87.12 T:twine80n6t4clocv2 87.26 87.31 87.41 T:twine80n6t4clocv3 90.69 90.74 90.81 T:deoxysneq256128v13 91.26 91.35 91.41 T:deoxysneq256128v1 92.77 92.87 93.00 T:aezv3 98.24 98.37 98.45 T:deoxyseq128128v13 98.59 98.66 98.82 T:deoxyseq128128v1 99.41 99.54 99.71 T:aezv1 135.23 135.35 135.49 T:deoxyseq256128v13 135.57 135.65 135.83 T:deoxyseq256128v1 504.48 504.79 505.39 T:acorn128 2661.79 2661.90 2662.02 T:led80n6t4silcv3 2661.98 2662.10 2662.28 T:led80n6silcv1 2661.92 2662.13 2662.40 T:led80n6t4silcv2 2896.97 2897.48 2897.98 T:present80n6silcv1 2897.59 2897.87 2898.22 T:present80n6t4silcv2 2897.75 2898.07 2898.34 T:present80n6t4silcv3 7763.41 7763.90 7764.44 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.43 0.44 0.45 aegis128l 0.53 0.54 0.55 T:aezv5 0.54 0.55 0.56 T:aezv4 0.66 0.67 0.68 aegis256 0.80 0.81 0.82 T:aeadaes128ocbtaglen128v1 1.01 1.02 1.03 T:aes128gcmv1 1.07 1.08 1.09 T:aes256gcmv1 1.07 1.08 1.09 T:aeadaes256ocbtaglen128v1 1.15 1.16 1.17 T:morus1280128v1 1.31 1.33 1.34 T:morus1280256v1 1.33 1.35 1.36 T:morus1280256v2 1.42 1.43 1.44 T:morus1280128v2 2.06 2.07 2.09 T:norx6441v2 2.07 2.08 2.10 T:norx6441v3 2.26 2.28 2.31 T:norx6444v3 2.26 2.28 2.31 T:norx6444v2 2.51 2.52 2.54 T:norx6441v1 2.68 2.69 2.72 T:norx6444v1 2.99 3.01 3.03 T:morus640128v1 2.99 3.01 3.03 T:morus640128v2 3.04 3.06 3.08 T:norx6461v3 3.06 3.07 3.09 T:norx6461v2 3.23 3.25 3.35 T:lakekeyakv1 3.32 3.34 3.37 T:seakeyakv2 3.26 3.34 3.43 T:oceankeyakv2 3.35 3.37 3.43 T:lakekeyakv2 3.67 3.68 3.70 T:norx6461v1 3.78 3.81 3.84 T:ketjemajorv2 3.80 3.82 3.85 T:tiaoxinv2 3.82 3.89 3.98 T:lunarkeyakv2 3.94 3.95 3.97 T:tiaoxinv1 4.14 4.15 4.17 T:norx3241v3 4.14 4.15 4.18 T:norx3241v2 4.66 4.67 4.69 T:acorn128v2 4.67 4.68 4.70 T:acorn128v3 4.78 4.79 4.81 ascon128av12 5.05 5.06 5.09 T:norx3241v1 5.13 5.14 5.16 T:ascon96v1 5.11 5.14 5.16 T:ascon128av11 6.08 6.10 6.12 T:norx3261v3 6.08 6.11 6.12 T:norx3261v2 6.29 6.31 6.37 T:riverkeyakv2 6.82 6.87 6.93 T:aegis128 7.08 7.14 7.19 ascon128v12 7.30 7.32 7.35 T:norx3261v1 7.44 7.46 7.55 T:ketjeminorv2 7.47 7.49 7.52 T:ascon128v1 7.49 7.51 7.54 T:ascon128v11 12.43 12.45 12.49 T:aes128otrsv3 12.46 12.49 12.52 T:aes128otrsv1 12.46 12.49 12.52 T:aes128otrsv2 12.57 12.59 12.62 T:aes128otrcv3 13.18 13.21 13.25 T:aes128otrpv2 13.21 13.23 13.29 T:aes128otrpv1 13.32 13.34 13.38 T:aes128otrpv3 13.63 13.65 13.69 T:aeadaes128ocbtaglen96v1 13.64 13.66 13.70 T:aeadaes128ocbtaglen64v1 15.62 15.63 15.68 T:aeadaes192ocbtaglen128v1 15.61 15.64 15.67 T:aeadaes192ocbtaglen64v1 15.62 15.64 15.69 T:aeadaes192ocbtaglen96v1 16.25 16.27 16.31 T:aes256otrsv3 16.28 16.30 16.33 T:aes256otrsv2 16.29 16.32 16.36 T:aes256otrsv1 16.57 16.60 16.62 T:aes256otrcv3 16.79 16.81 16.86 T:aes128n8t8clocv2 16.79 16.82 16.88 T:aes128n8clocv1 16.77 16.83 16.87 T:aes128n12clocv1 16.82 16.85 16.93 T:aes128n12t8clocv2 16.83 16.86 16.93 T:aes128n12t8clocv3 17.03 17.04 17.08 T:aes256otrpv2 17.04 17.05 17.11 T:aes256otrpv1 17.07 17.08 17.13 T:aes128n12t8silcv3 17.07 17.09 17.15 T:aes128n12t8silcv2 17.06 17.13 17.17 T:aes128n8t8silcv2 17.20 17.22 17.26 T:aes256otrpv3 17.62 17.65 17.68 T:aeadaes256ocbtaglen96v1 17.62 17.65 17.70 T:aeadaes256ocbtaglen64v1 19.25 19.35 19.47 T:proest256otrv1 19.36 19.40 19.44 T:deoxysi128v141 20.46 20.49 20.52 T:aesjambuv1 21.25 21.28 21.31 T:colm0v1 21.31 21.35 21.41 T:deoxysi256v141 23.12 23.15 23.21 T:colm127v1 25.99 26.02 26.07 T:deoxysii128v141 27.24 27.38 27.61 T:ketjesrv1 28.30 28.36 28.43 T:ketjesrv2 46.31 46.34 46.37 T:proest128otrv1 50.26 50.52 50.86 T:ketjejrv1 77.69 77.77 77.82 T:deoxysii256v141 79.04 79.09 79.17 T:ketjejrv2 83.02 83.11 83.18 T:deoxysneq128128v1 83.31 83.39 83.44 T:deoxysneq128128v13 86.63 86.89 86.98 T:twine80n6t4clocv2 87.16 87.23 87.29 T:twine80n6t4clocv3 92.81 92.88 92.98 T:aezv3 98.13 98.31 98.40 T:deoxyseq128128v13 99.45 99.54 99.66 T:aezv1 105.96 106.16 106.30 T:deoxysneq256128v13 106.85 106.93 107.02 T:deoxysneq256128v1 130.57 130.68 130.80 T:deoxyseq128128v1 135.44 135.60 135.68 T:deoxyseq256128v13 167.17 167.34 167.46 T:deoxyseq256128v1 500.18 502.61 503.24 T:acorn128 2661.34 2661.58 2661.70 T:led80n6t4silcv3 2661.84 2661.98 2662.17 T:led80n6silcv1 2661.18 2662.15 2662.44 T:led80n6t4silcv2 2897.21 2897.58 2898.00 T:present80n6t4silcv2 2897.27 2897.60 2897.84 T:present80n6silcv1 2897.24 2897.65 2898.05 T:present80n6t4silcv3 7762.72 7763.58 7764.15 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.27 0.28 0.29 T:aezv5 0.28 0.30 0.30 T:aezv4 0.45 0.46 0.47 aegis128l 0.67 0.69 0.70 aegis256 0.81 0.81 0.82 T:aeadaes128ocbtaglen128v1 1.01 1.01 1.02 T:aes128gcmv1 1.08 1.08 1.08 T:aes256gcmv1 1.08 1.09 1.09 T:aeadaes256ocbtaglen128v1 1.15 1.16 1.16 T:morus1280128v1 1.32 1.33 1.34 T:morus1280256v1 1.34 1.35 1.36 T:morus1280256v2 1.43 1.43 1.44 T:morus1280128v2 2.07 2.08 2.11 T:norx6441v2 2.08 2.09 2.10 T:norx6441v3 2.27 2.29 2.31 T:norx6444v2 2.28 2.30 2.32 T:norx6444v3 2.53 2.54 2.56 T:norx6441v1 2.71 2.72 2.74 T:norx6444v1 3.00 3.01 3.03 T:morus640128v2 3.00 3.02 3.03 T:morus640128v1 3.06 3.07 3.09 T:norx6461v3 3.08 3.08 3.10 T:norx6461v2 3.24 3.25 3.34 T:lakekeyakv1 3.27 3.34 3.43 T:oceankeyakv2 3.34 3.36 3.37 T:seakeyakv2 3.38 3.39 3.44 T:lakekeyakv2 3.68 3.69 3.72 T:norx6461v1 3.80 3.81 3.84 T:tiaoxinv2 3.82 3.83 3.86 T:ketjemajorv2 3.83 3.89 3.99 T:lunarkeyakv2 3.93 3.95 3.97 T:tiaoxinv1 4.16 4.17 4.18 T:norx3241v3 4.16 4.17 4.20 T:norx3241v2 4.67 4.68 4.69 T:acorn128v2 4.67 4.68 4.70 T:acorn128v3 4.78 4.79 4.80 ascon128av12 5.08 5.10 5.12 T:norx3241v1 5.11 5.13 5.16 T:ascon128av11 5.12 5.13 5.15 T:ascon96v1 6.10 6.12 6.14 T:norx3261v2 6.10 6.13 6.15 T:norx3261v3 6.30 6.32 6.37 T:riverkeyakv2 6.84 6.88 6.94 T:aegis128 7.10 7.14 7.19 ascon128v12 7.33 7.35 7.38 T:norx3261v1 7.36 7.40 7.48 T:ketjeminorv2 7.48 7.51 7.54 T:ascon128v1 7.49 7.51 7.55 T:ascon128v11 12.44 12.47 12.52 T:aes128otrsv3 12.49 12.50 12.54 T:aes128otrsv2 12.50 12.51 12.54 T:aes128otrsv1 12.58 12.60 12.64 T:aes128otrcv3 13.23 13.24 13.25 T:aes128otrpv2 13.22 13.24 13.29 T:aes128otrpv1 13.33 13.35 13.40 T:aes128otrpv3 13.65 13.67 13.70 T:aeadaes128ocbtaglen96v1 13.67 13.68 13.71 T:aeadaes128ocbtaglen64v1 15.62 15.64 15.70 T:aeadaes192ocbtaglen64v1 15.62 15.64 15.69 T:aeadaes192ocbtaglen128v1 15.64 15.65 15.69 T:aeadaes192ocbtaglen96v1 16.28 16.29 16.32 T:aes256otrsv3 16.31 16.32 16.34 T:aes256otrsv2 16.31 16.33 16.37 T:aes256otrsv1 16.58 16.59 16.63 T:aes256otrcv3 16.74 16.79 16.87 T:aes128n12clocv1 16.78 16.80 16.85 T:aes128n8t8clocv2 16.79 16.82 16.88 T:aes128n8clocv1 16.82 16.83 16.89 T:aes128n12t8clocv2 16.82 16.84 16.89 T:aes128n12t8clocv3 17.04 17.06 17.09 T:aes256otrpv2 17.05 17.08 17.17 T:aes128n12t8silcv2 17.07 17.09 17.13 T:aes256otrpv1 17.07 17.11 17.17 T:aes128n12t8silcv3 17.08 17.14 17.18 T:aes128n8t8silcv2 17.21 17.23 17.26 T:aes256otrpv3 17.63 17.65 17.68 T:aeadaes256ocbtaglen96v1 17.65 17.66 17.70 T:aeadaes256ocbtaglen64v1 19.39 19.41 19.45 T:deoxysi128v141 19.40 19.44 19.48 T:proest256otrv1 20.47 20.49 20.52 T:aesjambuv1 21.25 21.29 21.39 T:colm0v1 21.32 21.37 21.42 T:deoxysi256v141 22.87 22.91 22.98 T:colm127v1 26.02 26.03 26.08 T:deoxysii128v141 27.32 27.37 27.61 T:ketjesrv1 28.27 28.31 28.41 T:ketjesrv2 46.30 46.33 46.37 T:proest128otrv1 50.66 50.76 50.86 T:ketjejrv1 77.73 77.80 77.86 T:deoxysii256v141 79.03 79.10 79.23 T:ketjejrv2 83.04 83.13 83.17 T:deoxysneq128128v1 83.27 83.42 83.47 T:deoxysneq128128v13 86.69 86.89 87.01 T:twine80n6t4clocv2 87.12 87.20 87.26 T:twine80n6t4clocv3 92.78 92.87 92.99 T:aezv3 98.21 98.37 98.46 T:deoxyseq128128v13 99.42 99.62 99.73 T:aezv1 106.03 106.18 106.30 T:deoxysneq256128v13 106.84 106.93 107.05 T:deoxysneq256128v1 130.57 130.68 130.82 T:deoxyseq128128v1 135.28 135.59 135.68 T:deoxyseq256128v13 167.13 167.27 167.44 T:deoxyseq256128v1 262.81 262.99 263.07 aes256gcmv1 500.61 502.91 504.37 T:acorn128 2661.31 2661.44 2661.63 T:led80n6t4silcv3 2661.68 2661.84 2662.08 T:led80n6silcv1 2661.23 2662.00 2662.35 T:led80n6t4silcv2 2897.12 2897.38 2897.60 T:present80n6t4silcv2 2897.38 2897.70 2898.00 T:present80n6t4silcv3 2897.42 2897.71 2898.02 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.27 0.27 0.28 T:aezv4 0.26? 0.27? 0.29? T:aezv5 0.35 0.36 0.37 aegis128l 0.53 0.54 0.54 aegis256 0.60 0.61 0.62 T:aes256gcmv1 0.60 0.61 0.62 T:aes128gcmv1 0.80 0.81 0.83 T:aeadaes128ocbtaglen128v1 1.03 1.04 1.06 T:morus1280128v1 1.04 1.05 1.07 T:aeadaes256ocbtaglen128v1 1.32 1.33 1.34 T:morus1280256v2 1.40 1.42 1.42 T:morus1280256v1 1.44 1.45 1.45 T:morus1280128v2 1.96 1.97 1.98 T:norx6441v2 2.00 2.01 2.01 T:norx6444v3 2.00 2.02 2.03 T:norx6444v2 2.02 2.03 2.04 T:norx6441v3 2.37 2.38 2.39 T:norx6441v1 2.38 2.39 2.40 T:norx6444v1 2.32 2.44 2.57 T:lunarkeyakv2 2.34 2.46 2.58 T:oceankeyakv2 2.90 2.92 2.94 T:morus640128v2 2.91 2.92 2.93 T:norx6461v2 2.91 2.93 2.94 T:tiaoxinv1 2.97 2.99 3.00 T:lakekeyakv2 3.01 3.02 3.03 T:norx6461v3 3.02 3.04 3.06 T:seakeyakv2 3.00 3.05 3.07 T:lakekeyakv1 3.08 3.09 3.11 T:morus640128v1 3.15 3.18 3.19 T:tiaoxinv2 3.62 3.63 3.64 T:norx6461v1 3.74 3.76 3.78 T:ketjemajorv2 4.00 4.01 4.03 T:norx3241v3 4.01 4.02 4.03 T:norx3241v2 4.56 4.58 4.62 T:acorn128v2 4.57 4.59 4.61 T:acorn128v3 4.72 4.72 4.74 ascon128av12 4.73 4.75 4.77 T:norx3241v1 5.06 5.07 5.07 T:ascon96v1 5.09 5.11 5.13 T:ascon128av11 5.72 5.77 5.79 T:riverkeyakv2 5.92 5.94 5.95 T:norx3261v2 5.94 5.96 5.98 T:norx3261v3 6.62 6.66 6.69 T:ketjeminorv2 6.74 6.82 6.87 T:aegis128 7.00 7.02 7.18 T:norx3261v1 7.08 7.11 7.13 ascon128v12 7.56 7.60 7.64 T:ascon128v1 7.58 7.60 7.64 T:ascon128v11 11.20 11.23 11.26 T:aes128otrsv3 11.21 11.23 11.26 T:aes128otrsv1 11.22 11.24 11.28 T:aes128n12t8silcv2 11.22 11.24 11.29 T:aes128otrsv2 11.23 11.25 11.27 T:aes128n8t8silcv2 11.22 11.25 11.28 T:aes128n8clocv1 11.24 11.26 11.33 T:aes128n12t8silcv3 11.25 11.27 11.31 T:aes128n12t8clocv2 11.25 11.27 11.30 T:aes128n12t8clocv3 11.25 11.31 11.49 T:aes128n8t8clocv2 11.29 11.49 11.65 T:aes128n12clocv1 12.57 12.61 12.63 T:aes128otrcv3 12.67 12.72 12.78 T:aes128otrpv2 12.70 12.73 12.79 T:aes128otrpv1 13.02 13.05 13.10 T:aes128otrpv3 13.17 13.20 13.24 T:aeadaes128ocbtaglen96v1 13.26 13.31 13.35 T:aeadaes128ocbtaglen64v1 13.58 13.60 13.66 T:colm127v1 13.72 13.75 13.81 T:colm0v1 15.02 15.04 15.11 T:aes256otrsv2 15.03 15.05 15.10 T:aes256otrsv1 15.04 15.07 15.13 T:aes256otrsv3 15.14 15.17 15.21 T:aeadaes192ocbtaglen64v1 15.12 15.17 15.22 T:aeadaes192ocbtaglen128v1 15.22 15.26 15.30 T:aeadaes192ocbtaglen96v1 16.49 16.52 16.58 T:aes256otrpv2 16.50 16.54 16.60 T:aes256otrpv1 16.57 16.60 16.66 T:aes256otrcv3 16.71 16.74 16.80 T:deoxysii128v141 16.82 16.85 16.90 T:aes256otrpv3 17.21 17.24 17.29 T:aeadaes256ocbtaglen96v1 17.23 17.26 17.30 T:aeadaes256ocbtaglen64v1 17.67 17.71 17.76 T:deoxysi128v141 19.54 19.60 19.67 T:proest256otrv1 19.60 19.67 19.76 T:deoxysi256v141 20.50 20.52 20.56 T:aesjambuv1 24.21 24.27 24.57 T:ketjesrv1 26.28 26.31 26.41 T:ketjesrv2 45.83 45.98 46.18 T:ketjejrv1 46.34 46.42 46.47 T:proest128otrv1 48.55 48.61 48.73 T:aezv1 51.15 51.20 51.27 T:deoxysii256v141 57.81 57.84 57.90 T:twine80n6t4clocv2 57.72 58.09 58.15 T:twine80n6t4clocv3 58.63 58.75 58.85 T:aezv3 64.59 64.64 64.71 T:deoxyseq128128v13 66.97 67.02 67.09 T:deoxysneq128128v13 67.07 67.27 67.40 T:deoxysneq128128v1 67.26 67.36 67.43 T:deoxyseq128128v1 76.87 76.93 77.00 T:ketjejrv2 89.89 90.00 90.11 T:deoxyseq256128v13 90.42 90.54 90.64 T:deoxyseq256128v1 90.59 90.83 91.14 T:deoxysneq256128v13 91.59 91.86 92.05 T:deoxysneq256128v1 262.74 262.93 263.08 aes256gcmv1 500.79 501.57 502.62 T:acorn128 1773.97 1774.20 1774.38 T:led80n6t4silcv2 1774.28 1774.52 1774.69 T:led80n6silcv1 1774.47 1774.71 1774.92 T:led80n6t4silcv3 1930.92 1931.25 1931.91 T:present80n6t4silcv3 1930.73 1931.39 1931.88 T:present80n6silcv1 1931.10 1931.46 1931.84 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.26 0.27 0.27 T:aezv4 0.27 0.28 0.28 T:aezv5 0.33? 0.36? 0.38? aegis128l 0.53 0.54 0.55 aegis256 0.59 0.61 0.61 T:aes256gcmv1 0.60 0.62 0.63 T:aes128gcmv1 0.81 0.82 0.83 T:aeadaes128ocbtaglen128v1 1.03 1.04 1.06 T:morus1280128v1 1.05 1.05 1.06 T:aeadaes256ocbtaglen128v1 1.32 1.33 1.34 T:morus1280256v1 1.37 1.39 1.41 T:morus1280256v2 1.39 1.41 1.41 T:morus1280128v2 1.99 2.02 2.03 T:norx6444v2 2.02 2.04 2.05 T:norx6441v2 2.01 2.05 2.06 T:norx6444v3 2.04 2.06 2.06 T:norx6441v3 2.38 2.41 2.43 T:norx6444v1 2.42 2.44 2.45 T:norx6441v1 2.34 2.44 2.54 T:lunarkeyakv2 2.31? 2.45? 2.57? T:oceankeyakv2 2.94 2.96 2.97 T:tiaoxinv1 2.96 2.99 3.01 T:lakekeyakv2 2.98 3.00 3.02 T:norx6461v2 3.00 3.02 3.03 T:norx6461v3 3.00 3.03 3.05 T:seakeyakv2 3.02 3.04 3.06 T:lakekeyakv1 3.13 3.14 3.16 T:morus640128v1 3.13 3.15 3.17 T:morus640128v2 3.15 3.17 3.19 T:tiaoxinv2 3.57 3.59 3.62 T:norx6461v1 3.74 3.75 3.78 T:ketjemajorv2 4.08 4.11 4.12 T:norx3241v3 4.10 4.13 4.15 T:norx3241v2 4.57 4.59 4.61 T:acorn128v2 4.57 4.59 4.61 T:acorn128v3 4.72 4.73 4.74 ascon128av12 4.90 4.93 4.95 T:norx3241v1 5.06 5.08 5.12 T:ascon96v1 5.04 5.08 5.12 T:ascon128av11 5.74 5.77 5.79 T:riverkeyakv2 6.07 6.08 6.10 T:norx3261v2 6.07 6.10 6.12 T:norx3261v3 6.64 6.66 6.74 T:ketjeminorv2 6.66 6.74 6.84 T:aegis128 7.00 7.10 7.19 ascon128v12 7.14 7.19 7.21 T:norx3261v1 7.57 7.60 7.63 T:ascon128v11 7.59 7.62 7.65 T:ascon128v1 11.19 11.22 11.26 T:aes128otrsv1 11.21 11.24 11.27 T:aes128otrsv3 11.21 11.24 11.29 T:aes128n8clocv1 11.21 11.24 11.31 T:aes128otrsv2 11.22 11.25 11.27 T:aes128n12t8silcv2 11.22 11.25 11.31 T:aes128n12t8clocv2 11.23 11.25 11.33 T:aes128n12t8silcv3 11.22 11.26 11.33 T:aes128n8t8silcv2 11.25 11.27 11.31 T:aes128n12t8clocv3 11.24 11.28 11.31 T:aes128n8t8clocv2 11.27 11.42 11.66 T:aes128n12clocv1 12.58 12.60 12.62 T:aes128otrcv3 12.69 12.73 12.82 T:aes128otrpv1 12.71 12.75 12.84 T:aes128otrpv2 13.01 13.04 13.12 T:aes128otrpv3 13.19 13.21 13.25 T:aeadaes128ocbtaglen96v1 13.29 13.31 13.35 T:aeadaes128ocbtaglen64v1 13.56 13.61 13.79 T:colm127v1 13.55 13.62 13.78 T:colm0v1 15.03 15.05 15.10 T:aes256otrsv2 15.04 15.07 15.11 T:aes256otrsv1 15.05 15.07 15.13 T:aes256otrsv3 15.15 15.18 15.22 T:aeadaes192ocbtaglen128v1 15.16 15.18 15.23 T:aeadaes192ocbtaglen64v1 15.24 15.26 15.31 T:aeadaes192ocbtaglen96v1 16.47 16.51 16.58 T:aes256otrpv1 16.53 16.57 16.62 T:aes256otrpv2 16.56 16.60 16.65 T:aes256otrcv3 16.69 16.72 16.79 T:deoxysii128v141 16.91 16.94 16.99 T:aes256otrpv3 17.23 17.26 17.30 T:aeadaes256ocbtaglen96v1 17.24 17.27 17.32 T:aeadaes256ocbtaglen64v1 17.66 17.68 17.74 T:deoxysi128v141 19.54 19.59 19.66 T:proest256otrv1 19.60 19.67 19.74 T:deoxysi256v141 20.50 20.53 20.59 T:aesjambuv1 24.26 24.31 24.57 T:ketjesrv1 26.18 26.24 26.35 T:ketjesrv2 45.69 45.83 45.98 T:ketjejrv1 46.31 46.40 46.51 T:proest128otrv1 48.59 48.64 48.76 T:aezv1 51.14 51.19 51.25 T:deoxysii256v141 57.80 57.84 57.93 T:twine80n6t4clocv2 57.50 57.90 58.11 T:twine80n6t4clocv3 58.64 58.75 58.86 T:aezv3 64.46 64.58 64.64 T:deoxyseq128128v13 66.92 66.98 67.04 T:deoxysneq128128v13 67.15 67.20 67.25 T:deoxysneq128128v1 67.18 67.29 67.42 T:deoxyseq128128v1 76.82 76.92 77.05 T:ketjejrv2 89.79 89.96 90.13 T:deoxyseq256128v13 90.35 90.48 90.74 T:deoxyseq256128v1 90.69 90.77 90.89 T:deoxysneq256128v13 91.95 92.04 92.14 T:deoxysneq256128v1 262.78 262.93 263.13 aes256gcmv1 498.77 499.41 500.37 T:acorn128 1773.87 1774.17 1774.77 T:led80n6t4silcv2 1774.34 1774.55 1774.67 T:led80n6silcv1 1774.56 1774.74 1774.96 T:led80n6t4silcv3 1931.00 1931.26 1931.62 T:present80n6t4silcv2 1930.93 1931.29 1931.76 T:present80n6t4silcv3 1930.92 1931.32 1931.74 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.26 0.27 0.27 T:aezv4 0.26 0.27 0.27 T:aezv5 0.33? 0.35? 0.39? aegis128l 0.52 0.54 0.57 aegis256 0.60 0.61 0.62 T:aes256gcmv1 0.61 0.62 0.62 T:aes128gcmv1 0.82 0.82 0.83 T:aeadaes128ocbtaglen128v1 1.03 1.04 1.05 T:morus1280128v1 1.05 1.05 1.06 T:aeadaes256ocbtaglen128v1 1.33 1.33 1.34 T:morus1280256v1 1.37 1.39 1.40 T:morus1280256v2 1.39 1.40 1.41 T:morus1280128v2 1.99 2.03 2.05 T:norx6441v2 2.00 2.03 2.04 T:norx6444v2 2.02 2.04 2.05 T:norx6444v3 2.03 2.05 2.06 T:norx6441v3 2.37 2.41 2.43 T:norx6444v1 2.34 2.44 2.57 T:lunarkeyakv2 2.32 2.44 2.55 T:oceankeyakv2 2.43 2.45 2.46 T:norx6441v1 2.93 2.95 2.97 T:tiaoxinv1 2.97 2.98 2.99 T:lakekeyakv2 2.99 3.01 3.02 T:norx6461v3 2.99 3.02 3.03 T:norx6461v2 3.01 3.03 3.04 T:seakeyakv2 3.03 3.04 3.06 T:lakekeyakv1 3.14 3.14 3.16 T:morus640128v1 3.13 3.15 3.16 T:morus640128v2 3.15 3.16 3.18 T:tiaoxinv2 3.57 3.59 3.62 T:norx6461v1 3.73 3.76 3.78 T:ketjemajorv2 4.07 4.09 4.12 T:norx3241v3 4.10 4.12 4.14 T:norx3241v2 4.57 4.59 4.62 T:acorn128v2 4.58 4.59 4.61 T:acorn128v3 4.71 4.73 4.74 ascon128av12 4.89 4.93 4.94 T:norx3241v1 5.02 5.05 5.09 T:ascon128av11 5.05 5.08 5.11 T:ascon96v1 5.74 5.78 5.79 T:riverkeyakv2 6.05 6.08 6.10 T:norx3261v3 6.06 6.10 6.11 T:norx3261v2 6.61 6.64 6.66 T:ketjeminorv2 6.68 6.73 6.79 T:aegis128 7.03 7.14 7.24 ascon128v12 7.14 7.16 7.20 T:norx3261v1 7.58 7.61 7.67 T:ascon128v1 7.58 7.62 7.69 T:ascon128v11 11.20 11.22 11.25 T:aes128otrsv1 11.22 11.24 11.27 T:aes128n12t8silcv2 11.22 11.25 11.30 T:aes128n8clocv1 11.22 11.25 11.30 T:aes128otrsv2 11.22 11.26 11.32 T:aes128n8t8silcv2 11.24 11.26 11.31 T:aes128n12t8clocv2 11.23 11.27 11.29 T:aes128otrsv3 11.25 11.27 11.30 T:aes128n8t8clocv2 11.25 11.28 11.32 T:aes128n12t8silcv3 11.25 11.28 11.31 T:aes128n12t8clocv3 11.33 11.58 11.68 T:aes128n12clocv1 12.57 12.59 12.62 T:aes128otrcv3 12.69 12.72 12.79 T:aes128otrpv2 12.71 12.73 12.80 T:aes128otrpv1 13.04 13.06 13.13 T:aes128otrpv3 13.19 13.21 13.24 T:aeadaes128ocbtaglen96v1 13.30 13.32 13.36 T:aeadaes128ocbtaglen64v1 13.55 13.61 13.80 T:colm0v1 13.56 13.63 13.79 T:colm127v1 15.03 15.05 15.11 T:aes256otrsv2 15.02 15.05 15.15 T:aes256otrsv1 15.04 15.07 15.13 T:aes256otrsv3 15.15 15.17 15.21 T:aeadaes192ocbtaglen64v1 15.16 15.17 15.22 T:aeadaes192ocbtaglen128v1 15.22 15.27 15.31 T:aeadaes192ocbtaglen96v1 16.50 16.55 16.61 T:aes256otrpv1 16.53 16.57 16.63 T:aes256otrpv2 16.56 16.60 16.66 T:aes256otrcv3 16.72 16.74 16.79 T:deoxysii128v141 16.94 16.96 17.02 T:aes256otrpv3 17.24 17.26 17.31 T:aeadaes256ocbtaglen64v1 17.24 17.27 17.32 T:aeadaes256ocbtaglen96v1 17.66 17.72 17.81 T:deoxysi128v141 19.54 19.58 19.65 T:proest256otrv1 19.59 19.65 19.73 T:deoxysi256v141 20.52 20.56 20.62 T:aesjambuv1 24.23 24.27 24.60 T:ketjesrv1 26.22 26.26 26.39 T:ketjesrv2 45.74 45.90 46.16 T:ketjejrv1 46.33 46.41 46.53 T:proest128otrv1 48.50 48.60 48.79 T:aezv1 51.14 51.19 51.27 T:deoxysii256v141 57.48 57.61 58.05 T:twine80n6t4clocv3 57.81 57.87 57.94 T:twine80n6t4clocv2 58.63 58.71 58.85 T:aezv3 64.46 64.58 64.66 T:deoxyseq128128v13 66.92 66.98 67.05 T:deoxysneq128128v13 67.13 67.17 67.25 T:deoxysneq128128v1 67.23 67.32 67.43 T:deoxyseq128128v1 76.87 76.99 77.13 T:ketjejrv2 89.81 89.95 90.10 T:deoxyseq256128v13 90.38 90.47 90.55 T:deoxyseq256128v1 90.69 90.73 90.81 T:deoxysneq256128v13 92.00 92.09 92.19 T:deoxysneq256128v1 262.70 262.89 263.11 aes256gcmv1 498.15 498.95 501.21 T:acorn128 1773.86 1774.03 1774.16 T:led80n6t4silcv2 1774.29 1774.43 1774.72 T:led80n6silcv1 1774.47 1774.68 1774.93 T:led80n6t4silcv3 1930.70 1931.06 1931.55 T:present80n6t4silcv3 1930.58 1931.16 1931.66 T:present80n6t4silcv2 1930.76 1931.26 1931.62 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.53 0.53 0.54 aegis128l 0.59 0.60 0.61 T:aezv5 0.61 0.61 0.62 T:aezv4 0.71 0.72 0.72 aegis256 0.93 0.94 0.95 T:aeadaes128ocbtaglen128v1 1.17 1.19 1.20 T:aeadaes256ocbtaglen128v1 1.30 1.30 1.31 T:aes256gcmv1 1.40 1.40 1.41 T:aes128gcmv1 1.42 1.43 1.44 T:morus1280128v1 1.59 1.59 1.61 T:morus1280256v2 1.62 1.62 1.63 T:morus1280256v1 1.68 1.69 1.70 T:morus1280128v2 2.39 2.40 2.42 T:norx6441v2 2.43 2.44 2.45 T:norx6441v3 2.81 2.82 2.82 T:norx6441v1 3.04 3.06 3.07 T:morus640128v2 3.23 3.24 3.26 T:morus640128v1 3.25 3.26 3.29 T:norx6444v2 3.26 3.27 3.30 T:norx6444v3 3.50 3.50 3.52 T:norx6461v2 3.56 3.57 3.59 T:norx6461v3 3.73 3.74 3.79 T:lakekeyakv2 3.90 3.91 3.94 T:norx6444v1 3.93 3.94 4.08 T:lakekeyakv1 4.11 4.13 4.14 T:norx6461v1 4.14 4.15 4.17 T:tiaoxinv1 4.48 4.49 4.51 T:norx3241v3 4.49 4.50 4.52 T:norx3241v2 4.59 4.60 4.61 T:tiaoxinv2 4.64 4.65 4.68 T:ketjemajorv2 4.67 4.68 4.75 T:seakeyakv2 4.89 4.90 4.92 ascon128av12 5.12 5.13 5.15 T:ascon96v1 5.21 5.23 5.26 T:ascon128av11 5.22 5.24 5.25 T:norx3241v1 5.40 5.41 5.43 T:acorn128v3 5.42 5.43 5.45 T:acorn128v2 5.98 6.00 6.09 T:oceankeyakv2 6.56 6.57 6.59 T:norx3261v3 6.57 6.58 6.63 T:riverkeyakv2 6.59 6.60 6.62 T:norx3261v2 7.18 7.23 7.29 ascon128v12 7.53 7.54 7.63 T:aegis128 7.58 7.59 7.65 T:norx3261v1 7.78 7.81 7.82 T:ascon128v1 7.79 7.81 7.83 T:ascon128v11 8.55 8.57 8.65 T:ketjeminorv2 10.08 10.10 10.20 T:lunarkeyakv2 12.66 12.67 12.70 T:aes128otrsv1 12.66 12.68 12.71 T:aes128otrsv2 12.87 12.87 12.90 T:aes128otrcv3 13.09 13.11 13.14 T:aes128otrsv3 13.38 13.40 13.43 T:aes128otrpv2 13.39 13.41 13.45 T:aes128otrpv1 13.99 14.00 14.04 T:aes128otrpv3 14.15 14.16 14.19 T:aeadaes128ocbtaglen64v1 14.15 14.16 14.18 T:aeadaes128ocbtaglen96v1 16.22 16.23 16.27 T:aeadaes192ocbtaglen128v1 16.20 16.25 16.27 T:aeadaes192ocbtaglen96v1 16.23 16.25 16.27 T:aeadaes192ocbtaglen64v1 16.57 16.58 16.62 T:aes256otrsv1 16.59 16.60 16.63 T:aes256otrsv2 16.98 16.99 17.03 T:aes256otrcv3 16.99 17.02 17.06 T:aes128n12t8clocv2 17.01 17.03 17.07 T:aes256otrsv3 17.03 17.04 17.08 T:aes128n8t8clocv2 17.03 17.06 17.13 T:aes128n12t8clocv3 17.09 17.11 17.17 T:aes128n12clocv1 17.14 17.16 17.20 T:aes128n8clocv1 17.28 17.29 17.32 T:aes128n8t8silcv2 17.30 17.32 17.35 T:aes256otrpv2 17.31 17.32 17.35 T:aes256otrpv1 17.31 17.33 17.37 T:aes128n12t8silcv2 17.38 17.40 17.44 T:aes128n12t8silcv3 17.92 17.95 17.99 T:aes256otrpv3 18.26 18.28 18.30 T:deoxysi128v141 18.27 18.32 18.36 T:aeadaes256ocbtaglen96v1 18.28 18.34 18.36 T:aeadaes256ocbtaglen64v1 20.40 20.45 20.49 T:deoxysi256v141 20.85 20.86 20.89 T:aesjambuv1 21.21 21.23 21.26 T:proest256otrv1 21.92 21.94 22.03 T:colm0v1 22.02 22.05 22.10 T:colm127v1 26.66 26.68 26.72 T:deoxysii128v141 27.66 27.73 27.85 T:ketjesrv1 29.39 29.43 29.46 T:ketjesrv2 48.63 48.65 48.68 T:proest128otrv1 51.11 51.20 51.34 T:ketjejrv1 66.63 66.71 66.78 T:deoxysneq128128v1 67.28 67.33 67.38 T:deoxysneq128128v13 78.00 78.07 78.11 T:deoxysii256v141 81.96 82.09 82.23 T:ketjejrv2 86.96 87.09 87.30 T:twine80n6t4clocv2 87.60 87.63 87.69 T:twine80n6t4clocv3 90.93 91.06 91.21 T:deoxysneq256128v13 91.59 91.79 91.84 T:deoxysneq256128v1 93.17 93.25 93.37 T:aezv3 96.54 96.65 96.82 T:aezv1 99.11 99.31 99.40 T:deoxyseq128128v13 99.39 99.42 99.47 T:deoxyseq128128v1 136.66 136.75 136.86 T:deoxyseq256128v1 136.73 136.82 136.98 T:deoxyseq256128v13 565.91 566.35 566.90 T:acorn128 2675.66 2675.78 2675.93 T:led80n6t4silcv3 2675.46 2676.05 2676.13 T:led80n6t4silcv2 2676.02 2676.10 2676.20 T:led80n6silcv1 2912.76 2912.96 2913.23 T:present80n6t4silcv2 2912.77 2913.02 2913.76 T:present80n6silcv1 2913.03 2913.19 2913.45 T:present80n6t4silcv3 7921.26 7921.49 7921.70 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.53 0.54 0.55 aegis128l 0.59 0.60 0.60 T:aezv5 0.61 0.62 0.63 T:aezv4 0.74 0.75 0.76 aegis256 0.92 0.92 0.93 T:aeadaes128ocbtaglen128v1 1.18 1.19 1.19 T:aes128gcmv1 1.20 1.20 1.21 T:aeadaes256ocbtaglen128v1 1.27 1.27 1.27 T:aes256gcmv1 1.52 1.53 1.53 T:morus1280128v1 1.59 1.59 1.61 T:morus1280256v1 1.62 1.63 1.64 T:morus1280256v2 1.69 1.70 1.71 T:morus1280128v2 2.43 2.45 2.47 T:norx6441v2 2.45 2.46 2.47 T:norx6441v3 2.88 2.89 2.91 T:norx6441v1 3.26 3.27 3.28 T:morus640128v1 3.28 3.29 3.32 T:norx6444v2 3.28 3.29 3.31 T:morus640128v2 3.30 3.30 3.33 T:norx6444v3 3.58 3.59 3.62 T:norx6461v2 3.58 3.59 3.62 T:norx6461v3 3.71 3.72 3.78 T:lakekeyakv2 3.90 3.90 4.02 T:lakekeyakv1 3.90 3.92 3.94 T:norx6444v1 4.18 4.19 4.21 T:norx6461v1 4.51 4.52 4.54 T:norx3241v2 4.52 4.52 4.54 T:norx3241v3 4.67 4.68 4.75 T:seakeyakv2 4.71 4.72 4.74 T:ketjemajorv2 4.90 4.91 4.93 ascon128av12 5.01 5.02 5.04 T:tiaoxinv2 5.04 5.05 5.08 T:tiaoxinv1 5.23 5.25 5.28 T:ascon128av11 5.26 5.27 5.30 T:ascon96v1 5.38 5.39 5.41 T:norx3241v1 5.41 5.42 5.44 T:acorn128v3 5.43 5.44 5.45 T:acorn128v2 5.98 6.00 6.09 T:oceankeyakv2 6.60 6.61 6.66 T:riverkeyakv2 6.59 6.62 6.64 T:norx3261v2 6.62 6.64 6.66 T:norx3261v3 7.20 7.25 7.30 ascon128v12 7.51 7.54 7.61 T:aegis128 7.60 7.61 7.65 T:ascon128v11 7.60 7.61 7.65 T:ascon128v1 7.79 7.80 7.83 T:norx3261v1 8.41 8.45 8.53 T:ketjeminorv2 10.08 10.09 10.19 T:lunarkeyakv2 12.78 12.80 12.84 T:aes128otrsv3 12.81 12.84 12.88 T:aes128otrsv1 12.83 12.85 12.89 T:aes128otrsv2 13.00 13.01 13.06 T:aes128otrcv3 13.54 13.56 13.60 T:aes128otrpv2 13.58 13.60 13.65 T:aes128otrpv1 13.66 13.67 13.71 T:aes128otrpv3 14.14 14.16 14.19 T:aeadaes128ocbtaglen96v1 14.17 14.18 14.23 T:aeadaes128ocbtaglen64v1 16.22 16.23 16.27 T:aeadaes192ocbtaglen128v1 16.22 16.23 16.27 T:aeadaes192ocbtaglen64v1 16.23 16.25 16.29 T:aeadaes192ocbtaglen96v1 16.72 16.72 16.76 T:aes256otrsv3 16.75 16.76 16.80 T:aes256otrsv1 16.76 16.77 16.81 T:aes256otrsv2 16.92 16.96 17.03 T:aes128n12clocv1 16.97 16.99 17.03 T:aes128n8t8clocv2 16.98 17.00 17.05 T:aes128n8clocv1 17.02 17.03 17.07 T:aes128n12t8clocv2 17.02 17.04 17.09 T:aes128n12t8clocv3 17.10 17.12 17.15 T:aes256otrcv3 17.36 17.38 17.46 T:aes128n8t8silcv2 17.36 17.38 17.42 T:aes128n12t8silcv2 17.38 17.40 17.45 T:aes128n12t8silcv3 17.47 17.49 17.52 T:aes256otrpv2 17.47 17.50 17.53 T:aes256otrpv1 17.62 17.65 17.68 T:aes256otrpv3 18.34 18.35 18.39 T:aeadaes256ocbtaglen96v1 18.33 18.36 18.39 T:aeadaes256ocbtaglen64v1 20.17 20.19 20.22 T:deoxysi128v141 20.80 20.83 20.86 T:aesjambuv1 21.20 21.21 21.24 T:proest256otrv1 21.86 21.88 21.96 T:colm0v1 22.32 22.36 22.41 T:deoxysi256v141 23.62 23.66 23.75 T:colm127v1 26.74 26.77 26.80 T:deoxysii128v141 27.89 27.99 28.10 T:ketjesrv1 29.30 29.35 29.40 T:ketjesrv2 48.34 48.36 48.38 T:proest128otrv1 51.42 51.59 51.70 T:ketjejrv1 78.16 78.17 78.23 T:deoxysii256v141 80.25 80.29 80.34 T:ketjejrv2 83.42 83.47 83.66 T:deoxysneq128128v1 83.58 83.70 83.84 T:deoxysneq128128v13 86.89 86.93 87.14 T:twine80n6t4clocv2 87.52 87.56 87.62 T:twine80n6t4clocv3 93.05 93.17 93.28 T:aezv3 96.84 96.97 97.06 T:aezv1 99.26 99.33 99.43 T:deoxyseq128128v13 106.48 106.58 106.70 T:deoxysneq256128v13 107.37 107.50 107.62 T:deoxysneq256128v1 131.29 131.32 131.37 T:deoxyseq128128v1 136.72 137.15 137.23 T:deoxyseq256128v13 168.32 168.43 168.53 T:deoxyseq256128v1 561.71 563.88 564.67 T:acorn128 2675.32 2675.45 2675.55 T:led80n6t4silcv3 2675.62 2675.86 2676.09 T:led80n6t4silcv2 2675.70 2675.88 2676.00 T:led80n6silcv1 2912.34 2912.60 2912.76 T:present80n6t4silcv2 2912.45 2912.72 2913.02 T:present80n6t4silcv3 2912.64 2913.01 2913.79 T:present80n6silcv1 7921.05 7921.43 7922.07 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.32 0.33 0.34 T:aezv5 0.35 0.36 0.37 T:aezv4 0.55 0.56 0.56 aegis128l 0.76 0.77 0.78 aegis256 0.91 0.91 0.92 T:aeadaes128ocbtaglen128v1 1.18 1.18 1.18 T:aes128gcmv1 1.19 1.19 1.20 T:aeadaes256ocbtaglen128v1 1.26 1.26 1.26 T:aes256gcmv1 1.51 1.52 1.53 T:morus1280128v1 1.59 1.59 1.60 T:morus1280256v1 1.62 1.63 1.63 T:morus1280256v2 1.69 1.70 1.70 T:morus1280128v2 2.45 2.46 2.46 T:norx6441v2 2.47 2.47 2.48 T:norx6441v3 2.90 2.91 2.91 T:norx6441v1 3.26 3.27 3.28 T:morus640128v1 3.28 3.30 3.30 T:morus640128v2 3.29 3.30 3.33 T:norx6444v2 3.31 3.32 3.34 T:norx6444v3 3.59 3.60 3.62 T:norx6461v3 3.59 3.61 3.63 T:norx6461v2 3.72 3.72 3.79 T:lakekeyakv2 3.91 3.92 4.04 T:lakekeyakv1 3.93 3.93 3.96 T:norx6444v1 4.19 4.20 4.23 T:norx6461v1 4.53 4.54 4.57 T:norx3241v2 4.53 4.54 4.56 T:norx3241v3 4.68 4.68 4.75 T:seakeyakv2 4.72 4.73 4.75 T:ketjemajorv2 4.90 4.91 4.92 ascon128av12 5.00 5.00 5.01 T:tiaoxinv2 5.03 5.04 5.06 T:tiaoxinv1 5.24 5.25 5.27 T:ascon128av11 5.25 5.26 5.28 T:ascon96v1 5.40 5.41 5.43 T:norx3241v1 5.41 5.42 5.43 T:acorn128v3 5.43 5.44 5.45 T:acorn128v2 5.98 6.00 6.09 T:oceankeyakv2 6.62 6.62 6.68 T:riverkeyakv2 6.64 6.65 6.66 T:norx3261v3 6.63 6.65 6.66 T:norx3261v2 7.25 7.28 7.30 ascon128v12 7.51 7.53 7.58 T:aegis128 7.60 7.60 7.63 T:ascon128v11 7.59 7.61 7.64 T:ascon128v1 7.81 7.82 7.84 T:norx3261v1 8.50 8.54 8.59 T:ketjeminorv2 10.10 10.12 10.21 T:lunarkeyakv2 12.80 12.81 12.86 T:aes128otrsv3 12.83 12.85 12.88 T:aes128otrsv1 12.86 12.87 12.89 T:aes128otrsv2 13.00 13.02 13.05 T:aes128otrcv3 13.55 13.57 13.61 T:aes128otrpv2 13.59 13.60 13.64 T:aes128otrpv1 13.67 13.68 13.72 T:aes128otrpv3 14.16 14.17 14.20 T:aeadaes128ocbtaglen96v1 14.18 14.20 14.22 T:aeadaes128ocbtaglen64v1 16.21 16.23 16.26 T:aeadaes192ocbtaglen64v1 16.22 16.23 16.26 T:aeadaes192ocbtaglen128v1 16.23 16.24 16.28 T:aeadaes192ocbtaglen96v1 16.73 16.75 16.80 T:aes256otrsv3 16.77 16.78 16.81 T:aes256otrsv1 16.79 16.80 16.83 T:aes256otrsv2 16.96 16.98 17.03 T:aes128n8t8clocv2 16.99 17.01 17.05 T:aes128n8clocv1 16.99 17.01 17.07 T:aes128n12t8clocv2 17.02 17.03 17.07 T:aes128n12clocv1 17.01 17.04 17.11 T:aes128n12t8clocv3 17.11 17.12 17.17 T:aes256otrcv3 17.37 17.38 17.45 T:aes128n12t8silcv2 17.38 17.39 17.44 T:aes128n12t8silcv3 17.38 17.44 17.48 T:aes128n8t8silcv2 17.49 17.50 17.54 T:aes256otrpv2 17.49 17.52 17.56 T:aes256otrpv1 17.65 17.66 17.70 T:aes256otrpv3 18.34 18.35 18.39 T:aeadaes256ocbtaglen96v1 18.33 18.35 18.39 T:aeadaes256ocbtaglen64v1 20.18 20.20 20.21 T:deoxysi128v141 20.79 20.81 20.84 T:aesjambuv1 21.18 21.21 21.26 T:proest256otrv1 21.83 21.87 21.92 T:colm0v1 22.36 22.38 22.44 T:deoxysi256v141 23.57 23.59 23.65 T:colm127v1 26.76 26.78 26.81 T:deoxysii128v141 28.03 28.07 28.12 T:ketjesrv1 29.27 29.32 29.45 T:ketjesrv2 48.34 48.36 48.39 T:proest128otrv1 51.54 51.65 51.77 T:ketjejrv1 78.20 78.22 78.27 T:deoxysii256v141 80.26 80.30 80.36 T:ketjejrv2 83.42 83.49 83.66 T:deoxysneq128128v1 83.64 83.77 83.86 T:deoxysneq128128v13 86.86 86.93 87.03 T:twine80n6t4clocv2 87.49 87.54 87.65 T:twine80n6t4clocv3 93.03 93.15 93.25 T:aezv3 96.67 96.79 96.89 T:aezv1 99.28 99.37 99.44 T:deoxyseq128128v13 106.53 106.61 106.74 T:deoxysneq256128v13 107.39 107.52 107.64 T:deoxysneq256128v1 131.27 131.30 131.40 T:deoxyseq128128v1 136.91 137.21 137.28 T:deoxyseq256128v13 168.32 168.41 168.61 T:deoxyseq256128v1 420.50 420.57 420.62 aes256gcmv1 561.56 563.79 564.23 T:acorn128 2675.35 2675.54 2675.66 T:led80n6t4silcv3 2675.69 2675.87 2676.09 T:led80n6silcv1 2675.29 2676.05 2676.39 T:led80n6t4silcv2 2912.28 2912.53 2912.87 T:present80n6t4silcv2 2912.38 2912.66 2912.93 T:present80n6t4silcv3 2912.84 2913.11 2913.67 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.81? 1.88? 2.05? T:aezv5 2.08? 2.16? 2.40? T:aezv4 2.37 2.40 2.60 aegis256 2.39 2.40 2.59 aegis128l 2.90? 2.96? 3.24? T:aeadaes128ocbtaglen128v1 3.51 3.60 3.89 T:aeadaes256ocbtaglen128v1 7.52 7.61 7.84 ascon128av12 7.50 7.69 7.96 T:morus1280128v1 7.55 7.74 7.96 T:morus1280128v2 7.76 7.84 7.98 T:aes128gcmv1 7.68 7.89 8.11 T:morus1280256v2 7.73 7.93 8.14 T:morus1280256v1 7.93 7.98 8.15 T:ascon96v1 7.95 7.99 8.07 T:aes256gcmv1 8.01 8.06 8.26 T:ascon128av11 8.73 8.80 8.84 T:norx6441v2 8.94 8.98 9.03 T:norx6441v3 8.85 9.06 9.38 T:morus640128v1 9.07 9.11 9.24 T:norx6441v1 9.45 9.61 9.91 T:morus640128v2 9.62 9.66 9.79 ascon128v12 10.32 10.39 10.48 T:ascon128v1 10.35 10.41 10.53 T:ascon128v11 11.72 11.75 11.78 T:norx3241v1 11.81 11.88 12.04 T:norx3241v2 11.88 11.96 12.19 T:norx3241v3 12.38 12.42 12.46 T:norx6461v2 12.65 12.71 12.75 T:norx6461v3 12.90 13.08 13.20 T:norx6461v1 14.89 14.93 15.04 T:lakekeyakv1 15.30 15.47 15.70 T:riverkeyakv2 16.32 16.43 16.74 T:lakekeyakv2 16.95 17.07 17.18 T:norx3261v2 17.05 17.08 17.12 T:norx3261v1 16.99 17.09 17.20 T:norx3261v3 20.02 20.14 20.37 T:aes128otrsv1 20.48 20.59 20.74 T:aes128otrpv2 20.50 20.61 20.87 T:aes128otrsv2 20.48 20.62 20.80 T:aes128otrsv3 20.44 20.62 20.86 T:aes128n8t8clocv2 20.52 20.64 20.86 T:aes128otrpv1 20.55 20.82 21.07 T:aes128n12t8clocv2 20.72 20.90 21.15 T:aes128n12t8clocv3 20.91 20.97 21.10 T:aes128otrpv3 20.90 21.04 21.17 T:aes128n8clocv1 20.91 21.28 21.68 T:aes128n12clocv1 21.82 22.00 22.23 T:acorn128v3 22.25 22.39 22.57 T:aes128otrcv3 22.22 22.64 23.38 T:aegis128 22.37 22.68 22.91 T:acorn128v2 22.77 23.00 23.29 T:aeadaes128ocbtaglen64v1 22.78 23.08 23.42 T:aeadaes128ocbtaglen96v1 23.54 23.62 23.73 T:norx6444v2 23.88 23.95 24.09 T:norx6444v3 23.77 24.00 24.19 T:aes128n8t8silcv2 24.02 24.19 24.40 T:aes128n12t8silcv3 23.94 24.23 24.42 T:aes128n12t8silcv2 25.03 25.20 25.43 T:ketjemajorv2 26.06 26.17 26.36 T:aes256otrsv1 26.23 26.38 26.68 T:aeadaes192ocbtaglen128v1 26.37 26.52 26.85 T:aeadaes192ocbtaglen64v1 26.35 26.52 26.92 T:aeadaes192ocbtaglen96v1 26.59 26.69 26.97 T:aes256otrsv3 26.64 26.76 26.96 T:aes256otrpv1 26.80 26.93 27.06 T:aes256otrsv2 26.96 27.03 27.22 T:aes256otrpv2 26.94 27.09 27.29 T:aes256otrpv3 27.95 28.11 28.31 T:aesjambuv1 29.10 29.24 29.36 T:aes256otrcv3 29.63 29.68 29.83 T:norx6444v1 29.87 29.95 30.29 T:tiaoxinv1 29.91 30.13 30.38 T:aeadaes256ocbtaglen96v1 30.00 30.29 30.58 T:aeadaes256ocbtaglen64v1 31.76 31.87 32.19 T:tiaoxinv2 32.69 32.87 33.06 T:deoxysi128v141 33.04 33.10 33.14 T:ketjeminorv2 34.28 34.49 34.71 T:colm127v1 34.46 34.61 34.76 T:colm0v1 39.82 39.96 40.29 T:deoxysi256v141 41.77 41.92 42.28 T:seakeyakv2 43.03 43.40 43.79 T:deoxysii128v141 43.96 44.12 44.29 T:ketjesrv1 51.87 52.02 52.24 T:ketjesrv2 60.51 60.64 60.98 T:proest256otrv1 63.61 64.29 65.92 T:oceankeyakv2 67.72 67.95 68.18 T:ketjejrv1 74.89 75.07 75.31 T:deoxysneq128128v1 74.97 75.18 75.43 T:deoxysneq128128v13 87.66 87.90 88.07 T:deoxysii256v141 94.14 94.37 95.08 T:twine80n6t4clocv2 94.30 94.64 95.04 T:proest128otrv1 94.57 94.81 95.53 T:twine80n6t4clocv3 102.27 102.47 102.94 T:deoxysneq256128v13 102.60 102.78 103.15 T:deoxysneq256128v1 110.56 111.10 112.62 T:aezv1 110.98 111.39 112.26 T:ketjejrv2 114.99 115.49 116.01 T:deoxyseq128128v1 123.15 123.46 123.89 T:deoxyseq128128v13 136.80 137.31 138.26 T:aezv3 158.49 158.74 159.17 T:deoxyseq256128v1 160.38 160.74 162.78 T:lunarkeyakv2 169.54 170.10 170.58 T:deoxyseq256128v13 1977.90 1983.70 1986.31 T:acorn128 2995.94 2996.15 2997.32 T:led80n6t4silcv3 2996.23 2996.45 2997.22 T:led80n6t4silcv2 2996.90 2997.02 2997.77 T:led80n6silcv1 3259.49 3260.70 3263.63 T:present80n6silcv1 3259.56 3260.99 3262.20 T:present80n6t4silcv2 3260.05 3261.70 3262.89 T:present80n6t4silcv3 11548.17 11548.89 11549.71 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.79? 1.83? 2.03? T:aezv5 2.08? 2.11? 2.32? T:aezv4 2.47 2.55 2.72 aegis128l 2.48? 2.58? 2.90? aegis256 2.99 3.06 3.25 T:aeadaes128ocbtaglen128v1 3.68 3.71 3.98 T:aeadaes256ocbtaglen128v1 7.58 7.63 7.80 ascon128av12 7.67 7.77 7.90 T:aes128gcmv1 7.67 7.82 8.13 T:morus1280256v1 7.82 7.97 8.17 T:morus1280128v2 7.93 7.99 8.08 T:aes256gcmv1 7.97 8.03 8.21 T:ascon128av11 7.91 8.03 8.35 T:morus1280256v2 8.03 8.07 8.17 T:ascon96v1 8.74 8.80 8.91 T:norx6441v2 9.00 9.04 9.21 T:norx6441v3 9.14 9.29 9.44 T:morus640128v1 9.13 9.30 9.59 T:norx6441v1 9.51 9.65 9.88 T:morus640128v2 9.64 9.70 9.80 ascon128v12 9.78 9.87 10.05 T:morus1280128v1 10.13 10.24 10.43 T:ascon128v11 10.20 10.30 10.54 T:ascon128v1 11.76 11.80 11.90 T:norx3241v2 11.94 11.98 12.07 T:norx3241v3 12.03 12.20 12.36 T:norx3241v1 12.42 12.46 12.64 T:norx6461v2 12.66 12.70 12.78 T:norx6461v3 12.99 13.14 13.42 T:norx6461v1 14.78 14.86 15.03 T:lakekeyakv1 15.38 15.49 15.74 T:riverkeyakv2 16.25 16.37 16.57 T:lakekeyakv2 16.96 17.05 17.17 T:norx3261v3 16.88 17.05 17.22 T:norx3261v2 17.32 17.48 17.73 T:norx3261v1 20.54 20.66 20.77 T:aes128otrsv3 20.45 20.76 20.98 T:aes128n8t8clocv2 20.66 20.76 20.94 T:aes128otrsv1 20.60 20.85 21.25 T:aes128n12t8clocv2 20.90 21.00 21.22 T:aes128otrpv3 20.89 21.01 21.39 T:aes128n12t8clocv3 20.99 21.09 21.26 T:aes128otrsv2 21.03 21.19 21.46 T:aes128n8clocv1 21.08 21.23 21.41 T:aes128otrpv2 21.16 21.26 21.37 T:aes128otrpv1 21.00 21.52 21.83 T:aes128n12clocv1 22.18 22.30 22.54 T:acorn128v3 22.29 22.47 22.65 T:aes128otrcv3 22.83 23.04 23.27 T:acorn128v2 22.48 23.16 23.64 T:aegis128 23.86 24.13 24.42 T:norx6444v2 23.99 24.19 24.35 T:aes128n8t8silcv2 24.11 24.20 24.40 T:aes128n12t8silcv3 23.97 24.35 24.51 T:aes128n12t8silcv2 24.39 24.65 24.83 T:norx6444v3 25.14 25.28 25.36 T:ketjemajorv2 25.76 25.86 26.17 T:aeadaes128ocbtaglen64v1 25.79 25.92 26.13 T:aeadaes128ocbtaglen96v1 26.56 26.74 27.01 T:aes256otrsv3 26.71 26.82 27.06 T:aes256otrsv1 27.01 27.18 27.40 T:aes256otrpv3 27.18 27.28 27.50 T:aes256otrpv1 27.39 27.49 27.68 T:aes256otrsv2 27.56 27.64 27.89 T:aes256otrpv2 28.25 28.47 28.60 T:aesjambuv1 29.37 29.48 29.69 T:aes256otrcv3 29.50 29.76 29.95 T:norx6444v1 29.66 29.80 29.95 T:aeadaes192ocbtaglen128v1 29.77 29.89 30.07 T:aeadaes192ocbtaglen64v1 29.77 29.91 30.12 T:aeadaes192ocbtaglen96v1 30.19 30.23 30.59 T:tiaoxinv1 32.34 32.52 32.78 T:tiaoxinv2 32.85 33.02 33.19 T:ketjeminorv2 34.19 34.34 34.59 T:aeadaes256ocbtaglen96v1 34.17 34.34 34.52 T:aeadaes256ocbtaglen64v1 34.60 34.78 34.96 T:colm0v1 36.19 36.31 36.43 T:colm127v1 37.91 38.08 38.28 T:deoxysi128v141 41.78 42.04 42.30 T:seakeyakv2 43.34 43.77 44.03 T:deoxysii128v141 44.45 44.59 44.74 T:ketjesrv1 45.31 45.48 45.78 T:deoxysi256v141 51.95 52.19 52.38 T:ketjesrv2 62.35 62.67 63.38 T:proest256otrv1 63.44 64.21 66.09 T:oceankeyakv2 67.95 68.13 68.42 T:ketjejrv1 88.03 88.21 88.37 T:deoxysii256v141 91.41 91.55 91.84 T:deoxysneq128128v1 91.31 91.65 91.82 T:deoxysneq128128v13 94.17 94.43 95.03 T:twine80n6t4clocv2 94.59 94.85 95.91 T:twine80n6t4clocv3 95.97 97.55 98.45 T:proest128otrv1 109.49 109.76 110.63 T:ketjejrv2 114.52 114.95 116.18 T:aezv1 118.00 118.28 118.81 T:deoxysneq256128v13 118.44 118.66 119.32 T:deoxysneq256128v1 123.37 123.64 124.24 T:deoxyseq128128v13 136.46 136.80 138.01 T:aezv3 146.63 146.82 147.14 T:deoxyseq128128v1 160.21 160.60 162.22 T:lunarkeyakv2 169.71 170.04 170.31 T:deoxyseq256128v13 190.11 190.50 191.00 T:deoxyseq256128v1 1955.51 1965.34 1968.47 T:acorn128 2995.65 2995.85 2996.33 T:led80n6t4silcv3 2995.79 2996.09 2996.58 T:led80n6t4silcv2 2997.08 2997.29 2998.36 T:led80n6silcv1 3259.94 3261.11 3263.31 T:present80n6silcv1 3260.11 3261.27 3262.26 T:present80n6t4silcv3 3260.48 3261.48 3263.43 T:present80n6t4silcv2 11546.00 11547.10 11549.73 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.19? 1.20? 1.52? T:aezv5 1.40? 1.41? 1.72? T:aezv4 2.56? 2.62? 2.91? aegis256 2.58? 2.64? 2.92? aegis128l 2.90 2.97 3.02 T:aeadaes128ocbtaglen128v1 3.66 3.70 3.72 T:aeadaes256ocbtaglen128v1 7.45 7.48 7.49 ascon128av12 7.71 7.73 7.77 T:aes128gcmv1 7.70 7.78 7.91 T:morus1280256v1 7.72 7.81 7.95 T:morus1280128v2 7.90 7.92 7.95 T:aes256gcmv1 7.95 8.01 8.16 T:ascon128av11 7.98 8.03 8.14 T:ascon96v1 7.90 8.05 8.23 T:morus1280256v2 8.80 8.94 9.30 T:norx6441v2 9.02 9.13 9.31 T:morus640128v1 9.11 9.29 9.45 T:norx6441v3 9.14 9.33 9.48 T:norx6441v1 9.51 9.55 9.70 T:morus640128v2 9.60 9.68 9.73 ascon128v12 9.77 9.82 9.93 T:morus1280128v1 10.12 10.22 10.34 T:ascon128v11 10.24 10.33 10.47 T:ascon128v1 11.87 12.04 12.25 T:norx3241v2 12.02 12.07 12.25 T:norx3241v3 12.08 12.15 12.36 T:norx3241v1 12.60 12.75 12.85 T:norx6461v2 12.77 12.84 13.11 T:norx6461v3 13.15 13.34 13.51 T:norx6461v1 14.87 14.94 15.03 T:lakekeyakv1 15.48 15.66 15.84 T:riverkeyakv2 16.35 16.38 16.47 T:lakekeyakv2 16.96 17.10 17.43 T:norx3261v2 17.11 17.17 17.31 T:norx3261v3 17.44 17.53 17.69 T:norx3261v1 20.46 20.54 20.72 T:aes128n8t8clocv2 20.48 20.69 20.81 T:aes128n12t8clocv2 20.67 20.78 21.03 T:aes128otrsv1 20.60 20.78 20.90 T:aes128n12t8clocv3 20.79 20.90 20.99 T:aes128n8clocv1 20.86 20.99 21.10 T:aes128otrsv3 20.94 21.05 21.42 T:aes128otrpv3 20.87 21.12 21.56 T:aes128n12clocv1 21.18 21.28 21.44 T:aes128otrpv1 21.26 21.32 21.44 T:aes128otrpv2 21.24 21.38 21.56 T:aes128otrsv2 22.07 22.24 22.33 T:acorn128v3 22.23 22.31 22.41 T:aes128otrcv3 22.05 22.54 23.28 T:aegis128 22.75 22.88 22.96 T:acorn128v2 23.84 23.96 24.09 T:aes128n12t8silcv2 23.93 24.10 24.22 T:aes128n8t8silcv2 24.03 24.12 24.23 T:aes128n12t8silcv3 24.04 24.21 24.38 T:norx6444v2 24.43 24.62 24.87 T:norx6444v3 25.15 25.33 25.45 T:ketjemajorv2 25.71 25.83 25.94 T:aeadaes128ocbtaglen96v1 25.86 25.93 26.01 T:aeadaes128ocbtaglen64v1 26.77 26.92 27.02 T:aes256otrsv3 26.82 26.97 27.13 T:aes256otrsv1 27.05 27.17 27.35 T:aes256otrpv3 27.18 27.41 27.52 T:aes256otrpv1 27.54 27.70 27.92 T:aes256otrsv2 27.63 27.81 28.05 T:aes256otrpv2 28.10 28.22 28.34 T:aesjambuv1 29.16 29.22 29.28 T:aes256otrcv3 29.65 29.78 29.91 T:aeadaes192ocbtaglen128v1 29.73 29.82 29.91 T:aeadaes192ocbtaglen96v1 29.68 29.84 30.07 T:norx6444v1 29.78 29.85 29.95 T:aeadaes192ocbtaglen64v1 29.94 30.03 30.13 T:tiaoxinv1 32.03 32.20 32.36 T:tiaoxinv2 32.85 32.99 33.13 T:ketjeminorv2 34.10 34.19 34.32 T:aeadaes256ocbtaglen64v1 34.15 34.26 34.36 T:aeadaes256ocbtaglen96v1 34.32 34.44 34.58 T:colm0v1 35.86 36.04 36.15 T:colm127v1 37.91 38.15 38.39 T:deoxysi128v141 41.87 42.05 42.17 T:seakeyakv2 43.37 43.50 43.61 T:deoxysii128v141 44.43 44.64 44.75 T:ketjesrv1 45.21 45.43 45.61 T:deoxysi256v141 52.10 52.22 52.35 T:ketjesrv2 59.86 60.18 60.42 T:proest256otrv1 63.48 63.98 65.75 T:oceankeyakv2 68.04 68.35 68.55 T:ketjejrv1 88.06 88.18 88.47 T:deoxysii256v141 91.37 91.51 91.71 T:deoxysneq128128v1 91.45 91.68 91.83 T:deoxysneq128128v13 93.98 94.21 95.05 T:twine80n6t4clocv2 94.67 94.78 95.62 T:twine80n6t4clocv3 94.57 94.87 95.38 T:proest128otrv1 109.49 109.72 110.68 T:ketjejrv2 114.55 114.95 116.05 T:aezv1 118.24 118.45 119.01 T:deoxysneq256128v13 118.28 118.60 119.22 T:deoxysneq256128v1 123.47 123.83 124.42 T:deoxyseq128128v13 136.43 137.00 138.08 T:aezv3 146.81 146.92 147.42 T:deoxyseq128128v1 160.24 160.63 162.35 T:lunarkeyakv2 169.72 170.16 170.49 T:deoxyseq256128v13 189.89 190.33 191.08 T:deoxyseq256128v1 1955.44 1963.26 1965.56 T:acorn128 2995.53 2995.63 2996.55 T:led80n6t4silcv3 2995.83 2996.01 2997.02 T:led80n6t4silcv2 2996.72 2996.91 2997.94 T:led80n6silcv1 3260.54 3261.19 3262.28 T:present80n6silcv1 3260.06 3261.22 3262.12 T:present80n6t4silcv2 3260.23 3261.48 3263.05 T:present80n6t4silcv3 4045.65 4046.51 4047.33 aes256gcmv1