VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Raptor Cove (b06a2-40); 2024 Intel Core 5 210H, P cores; 4 x 2200MHz; freshwrap,big, supercop-20251222

[Page version: 20260120 12:53:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.17? 0.19? 0.21? T:tiaoxinv2 0.19 0.19 0.20 T:tiaoxinv1 0.23 0.24 0.24 aegis128l 0.23 0.24 0.25 T:aegis128l 0.15? 0.28? 0.32? T:aeadaes128ocbtaglen128v1 0.35 0.36 0.37 T:aezv3 0.35 0.36 0.37 T:aezv4 0.29? 0.37? 0.42? T:aeadaes256ocbtaglen128v1 0.39 0.39 0.40 T:aegis256 0.03? 0.40? 0.44? T:aeadaes192ocbtaglen128v1 0.39 0.40 0.41 aegis256 0.39 0.41 0.41 T:aezv5 0.40 0.41 0.42 T:aegis128 0.43 0.45 0.47 T:aes128otrsv3 0.44 0.46 0.47 T:aes128otrpv3 0.44? 0.47? 0.49? T:aes128otrcv3 0.56 0.58 0.62 T:aes256otrsv3 0.56 0.59 0.61 T:aes256otrpv3 0.57 0.61 0.63 T:aes256otrcv3 0.66 0.67 0.73 T:deoxysi128v141 0.67 0.68 0.69 T:morus1280256v2 0.67 0.68 0.70 T:morus1280128v2 0.68 0.69 0.70 T:morus1280256v1 0.68 0.69 0.70 T:morus1280128v1 0.68 0.70 0.74 T:deoxysneq128128v1 0.76 0.77 0.82 T:deoxysi256v141 0.77 0.79 0.82 T:deoxysneq256128v1 0.93 0.95 0.96 T:aes128gcmv1 1.04 1.06 1.08 aes256gcmv1 1.10 1.12 1.13 T:norx6444v3 1.17 1.18 1.19 T:morus640128v2 1.17 1.18 1.19 T:morus640128v1 1.38 1.39 1.40 T:colm0v1 1.40 1.41 1.43 T:deoxysii128v141 1.40 1.44 1.46 T:deoxyseq128128v1 1.56 1.57 1.60 T:deoxysii256v141 1.64 1.65 1.66 T:deoxyseq256128v1 1.81? 1.92? 2.05? T:lunarkeyakv2 2.03 2.05 2.07 T:norx6441v2 2.06 2.08 2.09 T:norx6441v3 2.18 2.19 2.19 T:aes128n12t8clocv2 2.18 2.19 2.20 T:aes128n12t8clocv3 2.18 2.19 2.20 T:aes128n12t8silcv2 2.18 2.20 2.21 T:aes128n12t8silcv3 2.19 2.20 2.21 T:aes128n8t8clocv2 2.18 2.20 2.21 T:aes128n8t8silcv2 2.44 2.46 2.47 T:norx6441v1 2.58 2.64 2.67 T:seakeyakv2 2.60 2.67 2.76 T:lakekeyakv1 2.58 2.68 2.76 T:oceankeyakv2 2.77 2.80 2.82 T:norx6444v2 2.92 2.98 3.03 T:lakekeyakv2 3.07 3.08 3.11 T:norx6461v3 3.07 3.09 3.11 T:norx6461v2 3.29 3.31 3.33 T:norx6444v1 3.60 3.62 3.64 T:norx3241v3 3.62 3.64 3.68 T:norx3241v2 3.70 3.72 3.74 T:norx6461v1 4.36 4.39 4.41 T:norx3241v1 4.38 4.39 4.40 T:aesjambuv1 4.61 4.70 4.77 T:acorn128v2 4.62 4.78 4.89 T:ketjemajorv2 4.66? 4.80? 5.37? T:acorn128v3 5.49 5.52 5.54 T:norx3261v3 5.56 5.59 5.62 T:norx3261v2 6.17 6.27 6.69 T:ketjeminorv2 6.68 6.75 6.77 T:ascon96v1 6.73 6.76 6.79 T:ascon128av11 6.70 6.78 6.89 ascon128av12 6.84 7.07 7.19 T:riverkeyakv2 7.49 7.51 7.53 T:norx3261v1 9.88 9.90 9.93 T:ascon128v1 9.88 9.90 9.93 T:ascon128v11 9.91 10.03 10.16 ascon128v12 11.05 11.08 11.12 T:aes128otrpv1 11.08 11.10 11.12 T:aes128otrsv2 11.09 11.10 11.12 T:aes128otrpv2 11.09 11.12 11.14 T:aes128otrsv1 14.80 14.82 14.85 T:aes256otrpv1 14.81 14.83 14.87 T:aes256otrpv2 14.84 15.26 15.31 T:aes256otrsv2 15.28 15.31 15.34 T:aes256otrsv1 15.33 15.36 15.38 T:twine80n6t4clocv3 16.02 16.20 16.30 T:twine80n6t4clocv2 17.37 17.43 17.48 T:proest256otrv1 20.51 20.59 20.67 T:ketjesrv1 20.90 20.92 20.95 T:aes128n8clocv1 20.92 20.94 20.99 T:aes128n12clocv1 20.93 20.97 21.05 T:aeadaes128ocbtaglen64v1 20.94 20.99 21.05 T:aeadaes128ocbtaglen96v1 22.74 22.81 22.87 T:ketjesrv2 24.87 24.93 25.00 T:aeadaes192ocbtaglen64v1 24.90 24.93 24.99 T:aeadaes192ocbtaglen96v1 28.84 28.92 28.99 T:aeadaes256ocbtaglen96v1 28.86 28.94 29.01 T:aeadaes256ocbtaglen64v1 38.79 39.10 40.18 T:ketjejrv1 40.74 40.86 40.97 T:proest128otrv1 45.55 45.62 45.83 T:colm127v1 56.60 56.84 57.27 T:deoxysneq128128v13 60.80 60.86 61.00 T:ketjejrv2 72.09 72.14 72.19 T:present80n6t4silcv3 83.82 84.18 84.42 T:deoxysneq256128v13 112.03 113.90 114.16 T:deoxyseq128128v13 127.19 127.34 127.42 T:led80n6t4silcv3 131.02 131.22 131.35 T:aezv1 168.45 169.99 170.26 T:deoxyseq256128v13 384.41 387.32 392.56 T:acorn128 2607.97 2608.52 2609.05 T:led80n6t4silcv2 2610.15 2611.37 2611.84 T:led80n6silcv1 3087.25 3092.07 3135.07 T:present80n6silcv1 3090.72 3120.03 3174.04 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.23? 0.23? 0.27? aegis128l 0.23 0.24 0.25 T:aegis128l 0.14? 0.29? 0.33? T:aeadaes128ocbtaglen128v1 0.24? 0.35? 0.38? T:aeadaes256ocbtaglen128v1 0.35? 0.35? 0.40? T:aezv3 0.35? 0.39? 0.41? T:aezv4 0.39 0.39 0.41 T:aezv5 0.39 0.39 0.40 T:aegis256 0.40 0.40 0.40 T:aegis128 0.34? 0.42? 0.44? T:aeadaes192ocbtaglen128v1 0.42 0.43 0.44 aegis256 0.43 0.44 0.45 T:tiaoxinv1 0.43 0.44 0.45 T:tiaoxinv2 0.45 0.47 0.49 T:aes128otrsv3 0.48 0.50 0.53 T:aes128otrcv3 0.49 0.51 0.54 T:aes128otrpv3 0.61 0.62 0.64 T:aes256otrsv3 0.61 0.63 0.65 T:aes256otrcv3 0.63 0.65 0.67 T:aes256otrpv3 0.67 0.68 0.69 T:morus1280128v2 0.67 0.68 0.69 T:morus1280256v1 0.67 0.68 0.69 T:morus1280128v1 0.67 0.69 0.70 T:morus1280256v2 0.67 0.69 0.70 T:aes128gcmv1 0.79 0.80 0.81 T:deoxysi128v141 0.80 0.81 0.82 T:deoxysneq128128v1 0.80 0.81 0.83 aes256gcmv1 0.86 0.88 0.89 T:deoxysi256v141 0.89 0.91 0.91 T:deoxysneq256128v1 1.08 1.11 1.13 T:norx6444v3 1.14 1.15 1.17 T:morus640128v2 1.15 1.15 1.16 T:morus640128v1 1.36 1.37 1.40 T:deoxysii128v141 1.38 1.40 1.41 T:colm0v1 1.51 1.53 1.57 T:deoxysii256v141 1.69 1.70 1.71 T:deoxyseq128128v1 1.76 1.77 1.78 T:deoxyseq256128v1 1.86 1.97 2.04 T:lunarkeyakv2 1.95 1.97 1.99 T:norx6441v2 1.97 1.99 2.00 T:norx6441v3 1.99? 2.01? 2.24? T:aes128n12t8silcv2 2.10 2.12 2.12 T:aes128n12t8silcv3 2.00 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.14 T:aes128n12t8clocv2 2.12 2.12 2.14 T:aes128n8t8clocv2 2.12 2.13 2.13 T:aes128n12t8clocv3 2.42 2.43 2.46 T:norx6441v1 2.67 2.70 2.77 T:seakeyakv2 2.62 2.72 2.81 T:oceankeyakv2 2.68 2.72 2.79 T:lakekeyakv1 2.78 2.83 2.88 T:norx6444v2 2.88 2.96 3.06 T:lakekeyakv2 3.03 3.05 3.07 T:norx6461v2 3.05 3.07 3.09 T:norx6461v3 3.30 3.39 3.42 T:norx6444v1 3.54 3.56 3.58 T:norx3241v3 3.55 3.56 3.57 T:norx3241v2 3.69 3.72 3.74 T:norx6461v1 4.28 4.32 4.35 T:norx3241v1 4.49 4.57 4.63 T:ketjemajorv2 4.67 4.69 4.69 T:aesjambuv1 4.73 4.80 4.85 T:acorn128v2 4.75 4.82 4.89 T:acorn128v3 5.47 5.50 5.53 T:norx3261v3 5.50 5.51 5.54 T:norx3261v2 6.11 6.25 6.42 T:ketjeminorv2 6.65 6.67 6.71 T:ascon128av11 6.57 6.71 6.73 T:ascon96v1 6.70 6.72 6.75 ascon128av12 6.89 6.97 7.07 T:riverkeyakv2 7.35 7.37 7.38 T:norx3261v1 9.84 9.87 9.89 T:ascon128v1 9.85 9.89 9.92 T:ascon128v11 9.98 10.01 10.10 ascon128v12 11.46 11.52 11.56 T:aes128otrsv1 11.50 11.54 11.57 T:aes128otrpv1 11.50 11.54 11.58 T:aes128otrpv2 11.48 11.55 11.59 T:aes128otrsv2 15.23 15.29 15.33 T:twine80n6t4clocv3 15.30 15.33 15.38 T:aes256otrpv2 15.32 15.37 15.43 T:aes256otrpv1 15.83 15.90 15.97 T:aes256otrsv2 15.91 15.95 16.01 T:aes256otrsv1 16.04 16.11 16.16 T:twine80n6t4clocv2 17.27 17.42 17.48 T:proest256otrv1 18.68 18.77 18.99 T:aes128n12clocv1 19.14 19.18 19.22 T:aes128n8clocv1 21.13 21.26 21.34 T:ketjesrv2 21.48 21.55 21.65 T:ketjesrv1 34.61 34.69 34.73 T:aeadaes128ocbtaglen64v1 34.67 34.77 34.85 T:aeadaes128ocbtaglen96v1 38.47 38.83 40.17 T:ketjejrv1 39.64 39.75 39.86 T:proest128otrv1 41.86 42.00 42.06 T:aeadaes192ocbtaglen96v1 41.93 42.02 42.07 T:aeadaes192ocbtaglen64v1 49.18 49.29 49.40 T:aeadaes256ocbtaglen64v1 49.31 49.37 49.47 T:aeadaes256ocbtaglen96v1 60.70 61.08 61.48 T:ketjejrv2 71.82 71.98 72.22 T:present80n6t4silcv3 73.28 73.38 73.51 T:colm127v1 74.33 74.68 75.37 T:deoxysneq128128v13 112.75 113.07 113.22 T:deoxyseq128128v13 113.66 113.96 114.22 T:deoxysneq256128v13 127.21 127.28 127.42 T:led80n6t4silcv3 130.48 130.77 130.94 T:aezv1 168.09 170.37 170.52 T:deoxyseq256128v13 374.31 386.36 391.20 T:acorn128 2606.53 2607.78 2608.27 T:led80n6t4silcv2 2608.07 2608.87 2610.30 T:led80n6silcv1 3082.39 3086.48 3153.45 T:present80n6t4silcv2 3082.75 3100.31 3152.59 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.07? 0.13? 0.20? T:aezv4 0.13 0.13 0.14 T:aezv3 0.15? 0.16? 0.22? T:aezv5 0.23 0.24 0.25 T:aegis128l 0.24 0.24 0.25 aegis128l 0.27? 0.28? 0.31? T:aeadaes128ocbtaglen128v1 -0.04? 0.33? 0.72? T:aeadaes256ocbtaglen128v1 0.38 0.39 0.40 T:aegis256 0.40 0.40 0.41 T:aegis128 0.39? 0.41? 0.79? T:aeadaes192ocbtaglen128v1 0.40? 0.43? 0.45? aegis256 0.43? 0.44? 0.48? T:tiaoxinv1 0.44 0.44 0.45 T:tiaoxinv2 0.49 0.50 0.53 T:aes128otrcv3 0.49 0.51 0.54 T:aes128otrsv3 0.50 0.51 0.53 T:aes128otrpv3 0.60 0.61 0.62 T:aes256otrcv3 0.61 0.62 0.63 T:aes256otrsv3 0.60 0.62 0.64 T:aes256otrpv3 0.68 0.68 0.69 T:morus1280128v2 0.67 0.68 0.68 T:morus1280256v1 0.67 0.68 0.70 T:morus1280256v2 0.67 0.68 0.69 T:morus1280128v1 0.68 0.69 0.70 T:aes128gcmv1 0.79 0.81 0.83 T:deoxysi128v141 0.80 0.82 0.83 aes256gcmv1 0.80 0.82 0.83 T:deoxysneq128128v1 0.85 0.87 0.88 T:deoxysi256v141 0.90 0.91 0.95 T:deoxysneq256128v1 1.09 1.10 1.13 T:norx6444v3 1.14 1.15 1.17 T:morus640128v2 1.14 1.16 1.18 T:morus640128v1 1.36 1.37 1.38 T:deoxysii128v141 1.38 1.40 1.50 T:colm0v1 1.51 1.52 1.54 T:deoxysii256v141 1.69 1.70 1.71 T:deoxyseq128128v1 1.76 1.77 1.78 T:deoxyseq256128v1 1.85 1.97 2.05 T:lunarkeyakv2 1.95 1.97 1.98 T:norx6441v2 1.98 1.99 2.00 T:norx6441v3 2.10 2.12 2.15 T:aes128n12t8silcv3 2.11 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.13 T:aes128n12t8clocv2 2.12 2.12 2.13 T:aes128n12t8clocv3 2.12 2.12 2.13 T:aes128n8t8clocv2 1.99? 2.13? 2.24? T:aes128n12t8silcv2 2.43 2.45 2.47 T:norx6441v1 2.68 2.72 2.74 T:seakeyakv2 2.63 2.73 2.80 T:oceankeyakv2 2.65 2.75 2.90 T:lakekeyakv1 2.77 2.82 2.86 T:norx6444v2 2.93 3.02 3.05 T:lakekeyakv2 3.06 3.07 3.09 T:norx6461v2 3.05 3.07 3.08 T:norx6461v3 3.34 3.39 3.42 T:norx6444v1 3.54 3.55 3.58 T:norx3241v3 3.55 3.57 3.59 T:norx3241v2 3.71 3.74 3.77 T:norx6461v1 4.28 4.31 4.34 T:norx3241v1 4.51 4.60 4.67 T:ketjemajorv2 4.67 4.68 4.69 T:aesjambuv1 4.67 4.81 4.85 T:acorn128v2 4.80 4.86 4.95 T:acorn128v3 5.48 5.50 5.55 T:norx3261v3 5.49 5.51 5.52 T:norx3261v2 6.12 6.25 6.37 T:ketjeminorv2 6.58 6.67 6.74 T:ascon96v1 6.64 6.68 6.70 T:ascon128av11 6.68 6.70 6.72 ascon128av12 6.81 6.89 6.96 T:riverkeyakv2 7.35 7.37 7.38 T:norx3261v1 9.87 9.89 9.92 T:ascon128v1 9.87 9.89 9.93 T:ascon128v11 10.03 10.07 10.10 ascon128v12 11.43 11.47 11.56 T:aes128otrsv1 11.50 11.55 11.58 T:aes128otrpv2 11.51 11.57 11.59 T:aes128otrpv1 11.48 11.57 11.63 T:aes128otrsv2 15.25 15.33 15.35 T:twine80n6t4clocv3 15.30 15.37 15.41 T:aes256otrpv1 15.28 15.39 15.40 T:aes256otrpv2 15.88 15.92 15.99 T:aes256otrsv1 15.90 15.95 16.03 T:aes256otrsv2 16.01 16.10 16.15 T:twine80n6t4clocv2 17.31 17.39 17.42 T:proest256otrv1 18.70 18.81 19.01 T:aes128n12clocv1 19.10 19.17 19.24 T:aes128n8clocv1 21.13 21.22 21.32 T:ketjesrv2 21.51 21.55 21.64 T:ketjesrv1 34.64 34.72 34.75 T:aeadaes128ocbtaglen96v1 34.72 34.77 34.80 T:aeadaes128ocbtaglen64v1 38.52 38.82 40.21 T:ketjejrv1 39.57 39.69 39.82 T:proest128otrv1 41.94 42.01 42.12 T:aeadaes192ocbtaglen64v1 41.92 42.03 42.09 T:aeadaes192ocbtaglen96v1 49.21 49.29 49.37 T:aeadaes256ocbtaglen64v1 49.33 49.46 49.58 T:aeadaes256ocbtaglen96v1 61.32 61.48 61.77 T:ketjejrv2 71.87 71.98 72.19 T:present80n6t4silcv3 71.71 72.31 72.46 T:colm127v1 74.05 74.15 74.44 T:deoxysneq128128v13 112.65 113.15 113.75 T:deoxyseq128128v13 113.55 113.81 114.40 T:deoxysneq256128v13 127.12 127.18 127.28 T:led80n6t4silcv3 130.55 130.71 130.88 T:aezv1 169.10 170.41 170.84 T:deoxyseq256128v13 374.99 384.38 395.85 T:acorn128 2607.00 2607.45 2608.00 T:led80n6t4silcv2 2609.66 2610.39 2611.43 T:led80n6silcv1 3075.22 3083.98 3099.92 T:present80n6silcv1 3084.13 3089.87 3140.96 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.14? 0.15? 0.17? T:tiaoxinv2 0.14? 0.16? 0.17? T:tiaoxinv1 0.21 0.21 0.22 aegis128l 0.21 0.21 0.22 T:aegis128l 0.17? 0.25? 0.29? T:aeadaes128ocbtaglen128v1 0.25 0.26 0.27 T:aezv4 0.24? 0.26? 0.28? T:aezv3 0.27 0.28 0.28 T:aezv5 0.13? 0.32? 0.51? T:aeadaes256ocbtaglen128v1 0.26? 0.36? 0.43? T:aeadaes192ocbtaglen128v1 0.38 0.39 0.39 T:aegis256 0.38 0.39 0.39 aegis256 0.39 0.39 0.40 T:aegis128 0.45 0.46 0.48 T:aes128otrpv3 0.46 0.47 0.48 T:aes128otrcv3 0.58 0.59 0.60 T:aes256otrpv3 0.59 0.61 0.62 T:aes256otrcv3 0.61 0.63 0.64 T:aes128gcmv1 0.65 0.66 0.67 T:morus1280256v2 0.66 0.66 0.67 T:morus1280128v1 0.66 0.67 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280128v2 0.67 0.68 0.70 T:deoxysi128v141 0.68 0.69 0.70 aes256gcmv1 0.69 0.70 0.72 T:deoxysneq128128v1 0.75 0.76 0.79 T:deoxysi256v141 0.77 0.79 0.80 T:deoxysneq256128v1 0.97 0.98 0.99 T:colm0v1 1.04 1.05 1.07 T:deoxysii128v141 1.06 1.08 1.10 T:deoxyseq128128v1 1.13 1.14 1.16 T:morus640128v1 1.14 1.15 1.16 T:morus640128v2 1.16 1.17 1.18 T:deoxysii256v141 1.23 1.24 1.25 T:deoxyseq256128v1 1.28 1.29 1.29 T:aes128otrsv3 1.59 1.60 1.62 T:norx6444v3 1.72 1.72 1.73 T:aes256otrsv3 2.04 2.05 2.06 T:norx6441v2 2.05 2.05 2.07 T:norx6441v3 2.16 2.17 2.17 T:aes128n12t8clocv2 2.16 2.17 2.17 T:aes128n12t8silcv2 2.16 2.17 2.18 T:aes128n12t8clocv3 2.17 2.17 2.18 T:aes128n8t8clocv2 2.17 2.17 2.18 T:aes128n12t8silcv3 2.16 2.17 2.17 T:aes128n8t8silcv2 2.18 2.21 2.26 T:seakeyakv2 2.19 2.23 2.28 T:oceankeyakv2 2.45 2.47 2.48 T:norx6441v1 2.55 2.60 2.65 T:lakekeyakv1 2.55 2.60 2.65 T:lakekeyakv2 2.65 2.69 2.71 T:norx6444v2 2.64 2.70 2.74 T:lunarkeyakv2 3.09 3.11 3.12 T:norx6461v3 3.10 3.11 3.13 T:norx6461v2 3.20 3.22 3.25 T:norx6444v1 3.63 3.64 3.65 T:norx3241v3 3.67 3.68 3.70 T:norx3241v2 3.69 3.70 3.72 T:norx6461v1 4.08 4.13 4.16 T:ketjemajorv2 4.34 4.35 4.35 T:aesjambuv1 4.39 4.40 4.41 T:norx3241v1 4.60? 4.67? 5.32? T:acorn128v3 4.84 4.87 4.91 T:acorn128v2 4.99 5.20 5.25 T:riverkeyakv2 5.51 5.52 5.56 T:norx3261v2 5.52 5.55 5.58 T:norx3261v3 5.64? 5.85? 6.48? T:ketjeminorv2 6.55 6.61 6.63 T:ascon128av11 6.59 6.61 6.64 T:ascon96v1 6.71 6.77 6.81 ascon128av12 7.51 7.52 7.53 T:norx3261v1 9.75 9.77 9.81 T:ascon128v1 9.76 9.78 9.81 T:ascon128v11 9.98 10.07 10.15 ascon128v12 10.80 10.83 10.85 T:aes128otrpv2 10.83 10.84 10.85 T:aes128otrpv1 11.20 11.22 11.23 T:aes128otrsv1 11.21 11.23 11.24 T:aes128otrsv2 14.54 14.55 14.57 T:aes256otrpv1 14.55 14.58 14.59 T:aes256otrpv2 14.65 14.67 14.72 T:aes256otrsv1 14.67 14.68 14.72 T:aes256otrsv2 15.07 15.09 15.17 T:twine80n6t4clocv3 15.75 15.84 15.93 T:twine80n6t4clocv2 16.13 16.14 16.17 T:aes128n8clocv1 16.13 16.18 16.26 T:aes128n12clocv1 17.48 17.59 17.68 T:proest256otrv1 19.67 19.71 20.02 T:ketjesrv1 20.66 20.70 20.73 T:aeadaes128ocbtaglen64v1 20.62 20.72 20.76 T:aeadaes128ocbtaglen96v1 21.48 21.53 21.57 T:ketjesrv2 24.60 24.63 24.68 T:aeadaes192ocbtaglen64v1 24.62 24.67 24.69 T:aeadaes192ocbtaglen96v1 28.59 28.62 28.68 T:aeadaes256ocbtaglen64v1 28.62 28.70 28.75 T:aeadaes256ocbtaglen96v1 34.12 34.24 34.34 T:colm127v1 35.96 36.90 37.16 T:ketjejrv1 39.90 39.98 40.03 T:proest128otrv1 56.11 56.21 56.31 T:deoxysneq128128v13 58.82 58.97 59.11 T:ketjejrv2 71.60 71.65 71.69 T:present80n6t4silcv3 83.40 83.49 84.59 T:deoxysneq256128v13 83.82 83.98 84.54 T:deoxyseq128128v13 85.96 86.08 86.19 T:aezv1 126.65 126.71 126.81 T:led80n6t4silcv3 127.26 127.62 127.73 T:deoxyseq256128v13 400.77 424.47 425.43 T:acorn128 1956.22 1956.76 1957.78 T:led80n6t4silcv2 1957.19 1957.78 1958.18 T:led80n6silcv1 2313.61 2316.31 2331.59 T:present80n6t4silcv2 2311.34 2320.91 2353.83 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.20 0.21 0.21 T:aegis128l 0.20? 0.23? 0.24? aegis128l 0.18? 0.24? 0.26? T:aeadaes128ocbtaglen128v1 0.24? 0.26? 0.27? T:aezv4 0.25 0.26 0.26 T:aezv3 0.27 0.27 0.28 T:aezv5 0.26 0.28 0.28 T:tiaoxinv2 0.26? 0.28? 0.29? T:tiaoxinv1 0.13? 0.29? 0.50? T:aeadaes256ocbtaglen128v1 0.19? 0.37? 0.57? T:aeadaes192ocbtaglen128v1 0.38 0.38 0.39 T:aegis256 0.39 0.39 0.39 T:aegis128 0.38? 0.41? 0.43? aegis256 0.47 0.49 0.50 T:aes128otrpv3 0.48 0.49 0.50 T:aes128otrcv3 0.48 0.50 0.51 T:aes128gcmv1 0.55 0.57 0.57 aes256gcmv1 0.61 0.62 0.63 T:aes256otrpv3 0.61 0.62 0.63 T:aes256otrcv3 0.66 0.66 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280128v1 0.66 0.67 0.67 T:morus1280128v2 0.66 0.67 0.67 T:morus1280256v2 0.73 0.74 0.74 T:deoxysi128v141 0.75 0.75 0.76 T:deoxysneq128128v1 0.81 0.82 0.83 T:deoxysi256v141 0.82 0.83 0.84 T:deoxysneq256128v1 0.97 0.99 1.00 T:colm0v1 1.01 1.03 1.04 T:deoxysii128v141 1.10 1.12 1.14 T:morus640128v2 1.12 1.13 1.14 T:morus640128v1 1.13 1.14 1.18 T:deoxysii256v141 1.20 1.21 1.22 T:deoxyseq128128v1 1.28 1.29 1.31 T:deoxyseq256128v1 1.30 1.30 1.31 T:aes128otrsv3 1.57 1.58 1.60 T:norx6444v3 1.74 1.75 1.75 T:aes256otrsv3 2.03 2.04 2.05 T:norx6441v2 2.04 2.05 2.06 T:norx6441v3 2.12 2.12 2.18 T:aes128n12t8silcv3 2.06 2.12 2.19 T:aes128n12t8silcv2 2.12 2.13 2.19 T:aes128n8t8silcv2 2.12 2.13 2.14 T:aes128n12t8clocv3 2.12 2.13 2.19 T:aes128n8t8clocv2 2.12 2.13 2.19 T:aes128n12t8clocv2 2.21 2.25 2.27 T:seakeyakv2 2.21 2.28 2.34 T:oceankeyakv2 2.43 2.44 2.46 T:norx6441v1 2.54 2.57 2.65 T:lakekeyakv2 2.57 2.61 2.65 T:lakekeyakv1 2.67 2.70 2.73 T:norx6444v2 2.66 2.73 2.76 T:lunarkeyakv2 3.06 3.08 3.09 T:norx6461v3 3.08 3.09 3.10 T:norx6461v2 3.22 3.25 3.27 T:norx6444v1 3.60 3.62 3.63 T:norx3241v3 3.61 3.62 3.63 T:norx3241v2 3.65 3.67 3.69 T:norx6461v1 3.95 4.01 4.07 T:ketjemajorv2 4.34 4.35 4.37 T:norx3241v1 4.49 4.49 4.50 T:aesjambuv1 4.70 4.77 4.84 T:acorn128v3 4.71? 5.15? 5.34? T:acorn128v2 5.21 5.25 5.27 T:riverkeyakv2 5.47 5.51 5.52 T:norx3261v2 5.50 5.52 5.55 T:norx3261v3 5.56 5.67 5.71 T:ketjeminorv2 6.52 6.55 6.58 T:ascon128av11 6.53 6.56 6.61 T:ascon96v1 6.68 6.69 6.72 ascon128av12 7.43 7.44 7.45 T:norx3261v1 9.72 9.74 9.76 T:ascon128v11 9.73 9.75 9.77 T:ascon128v1 10.04 10.08 10.11 ascon128v12 11.03 11.05 11.08 T:aes128otrpv1 11.03 11.07 11.08 T:aes128otrpv2 11.40 11.42 11.45 T:aes128otrsv1 11.42 11.45 11.48 T:aes128otrsv2 14.79 14.81 14.83 T:aes256otrpv1 14.77 14.81 14.84 T:aes256otrpv2 14.96 14.98 15.04 T:aes256otrsv2 14.99 15.02 15.06 T:aes256otrsv1 15.03 15.07 15.21 T:aes128n12clocv1 15.05 15.12 15.15 T:twine80n6t4clocv3 15.22 15.27 15.30 T:aes128n8clocv1 15.78 15.82 15.84 T:twine80n6t4clocv2 17.38 17.55 17.65 T:proest256otrv1 20.17 20.23 20.54 T:ketjesrv1 20.70 20.74 20.77 T:ketjesrv2 27.50 27.53 27.57 T:aeadaes128ocbtaglen64v1 27.53 27.57 27.60 T:aeadaes128ocbtaglen96v1 33.14 33.20 33.25 T:aeadaes192ocbtaglen64v1 33.14 33.23 33.31 T:aeadaes192ocbtaglen96v1 36.60 37.16 37.24 T:ketjejrv1 38.81 38.88 38.94 T:aeadaes256ocbtaglen64v1 38.86 38.91 38.95 T:aeadaes256ocbtaglen96v1 39.27 39.64 39.70 T:proest128otrv1 47.96 48.04 48.12 T:colm127v1 59.15 59.25 59.32 T:ketjejrv2 64.95 65.07 65.18 T:deoxysneq128128v13 71.50 71.55 71.65 T:present80n6t4silcv3 83.61 83.83 84.09 T:deoxyseq128128v13 85.83 85.98 86.06 T:aezv1 98.01 98.21 98.91 T:deoxysneq256128v13 125.93 126.49 127.74 T:deoxyseq256128v13 126.64 126.72 126.80 T:led80n6t4silcv3 388.10 416.72 423.86 T:acorn128 1955.10 1955.42 1955.97 T:led80n6t4silcv2 1957.01 1957.58 1958.05 T:led80n6silcv1 2311.06 2318.44 2328.87 T:present80n6t4silcv2 2311.09 2320.32 2355.95 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.11? 0.12? 0.18? T:aezv4 0.14 0.15 0.15 T:aezv3 0.12? 0.15? 0.18? T:aezv5 0.21 0.21 0.21 T:aegis128l 0.21 0.22 0.22 aegis128l 0.23? 0.24? 0.27? T:aeadaes128ocbtaglen128v1 0.27 0.28 0.29 T:tiaoxinv2 0.28 0.28 0.29 T:tiaoxinv1 0.30 0.32 0.33 T:aeadaes256ocbtaglen128v1 0.38 0.38 0.38 T:aegis256 0.37 0.38 0.40 T:aeadaes192ocbtaglen128v1 0.38 0.39 0.39 T:aegis128 0.41 0.41 0.43 aegis256 0.48 0.49 0.49 T:aes128otrcv3 0.49 0.49 0.49 T:aes128otrpv3 0.49 0.50 0.51 T:aes128gcmv1 0.56 0.57 0.57 aes256gcmv1 0.60 0.61 0.62 T:aes256otrpv3 0.62 0.63 0.63 T:aes256otrcv3 0.66 0.66 0.67 T:morus1280128v1 0.66 0.67 0.68 T:morus1280256v2 0.66 0.67 0.67 T:morus1280128v2 0.66 0.67 0.67 T:morus1280256v1 0.73 0.74 0.74 T:deoxysi128v141 0.75 0.75 0.76 T:deoxysneq128128v1 0.81 0.82 0.82 T:deoxysi256v141 0.83 0.83 0.86 T:deoxysneq256128v1 0.97 0.99 1.02 T:colm0v1 1.01 1.02 1.06 T:deoxysii128v141 1.10 1.11 1.12 T:morus640128v2 1.12 1.13 1.14 T:morus640128v1 1.13 1.15 1.19 T:deoxysii256v141 1.21 1.21 1.22 T:deoxyseq128128v1 1.29 1.29 1.30 T:deoxyseq256128v1 1.30 1.30 1.31 T:aes128otrsv3 1.57 1.58 1.59 T:norx6444v3 1.74 1.74 1.75 T:aes256otrsv3 2.03 2.04 2.05 T:norx6441v2 2.05 2.05 2.06 T:norx6441v3 2.06 2.06 2.20 T:aes128n12t8silcv2 2.12 2.13 2.19 T:aes128n12t8clocv2 2.12 2.13 2.19 T:aes128n8t8clocv2 2.12 2.13 2.19 T:aes128n8t8silcv2 2.13 2.14 2.20 T:aes128n12t8silcv3 2.07 2.19 2.19 T:aes128n12t8clocv3 2.24 2.27 2.29 T:seakeyakv2 2.22 2.29 2.32 T:oceankeyakv2 2.43 2.44 2.46 T:norx6441v1 2.53 2.59 2.65 T:lakekeyakv2 2.62 2.64 2.70 T:lakekeyakv1 2.68 2.71 2.73 T:norx6444v2 2.70 2.72 2.76 T:lunarkeyakv2 3.06 3.07 3.09 T:norx6461v3 3.07 3.09 3.10 T:norx6461v2 3.20 3.24 3.27 T:norx6444v1 3.61 3.62 3.62 T:norx3241v3 3.60 3.62 3.63 T:norx3241v2 3.65 3.66 3.68 T:norx6461v1 3.98 4.05 4.10 T:ketjemajorv2 4.34 4.36 4.38 T:norx3241v1 4.49 4.50 4.50 T:aesjambuv1 4.72 4.75 4.84 T:acorn128v3 4.78 4.93 5.13 T:acorn128v2 5.06 5.24 5.27 T:riverkeyakv2 5.49 5.50 5.53 T:norx3261v2 5.50 5.52 5.54 T:norx3261v3 5.63 5.68 5.76 T:ketjeminorv2 6.51 6.54 6.56 T:ascon128av11 6.52 6.55 6.57 T:ascon96v1 6.67 6.71 6.73 ascon128av12 7.43 7.44 7.45 T:norx3261v1 9.74 9.74 9.76 T:ascon128v1 9.72 9.76 9.77 T:ascon128v11 10.04 10.07 10.10 ascon128v12 11.02 11.06 11.08 T:aes128otrpv1 11.04 11.08 11.10 T:aes128otrpv2 11.42 11.44 11.46 T:aes128otrsv1 11.43 11.45 11.47 T:aes128otrsv2 14.77 14.82 14.85 T:aes256otrpv1 14.80 14.82 14.85 T:aes256otrpv2 14.97 15.01 15.06 T:aes256otrsv1 15.00 15.04 15.07 T:aes256otrsv2 15.03 15.07 15.17 T:aes128n12clocv1 15.04 15.13 15.15 T:twine80n6t4clocv3 15.22 15.28 15.33 T:aes128n8clocv1 15.76 15.78 15.86 T:twine80n6t4clocv2 17.53 17.59 17.83 T:proest256otrv1 20.11 20.17 20.47 T:ketjesrv1 20.68 20.74 20.79 T:ketjesrv2 27.49 27.54 27.59 T:aeadaes128ocbtaglen64v1 27.52 27.55 27.59 T:aeadaes128ocbtaglen96v1 33.13 33.18 33.22 T:aeadaes192ocbtaglen96v1 33.22 33.28 33.34 T:aeadaes192ocbtaglen64v1 35.64 35.86 37.17 T:ketjejrv1 38.80 38.87 38.90 T:aeadaes256ocbtaglen64v1 38.87 38.91 38.99 T:aeadaes256ocbtaglen96v1 39.47 39.83 39.94 T:proest128otrv1 47.32 47.60 47.71 T:colm127v1 59.00 59.09 59.20 T:ketjejrv2 64.93 65.40 65.51 T:deoxysneq128128v13 71.48 71.53 71.64 T:present80n6t4silcv3 83.60 83.71 84.93 T:deoxyseq128128v13 85.88 85.94 86.02 T:aezv1 98.55 98.71 99.44 T:deoxysneq256128v13 126.62 126.73 126.79 T:led80n6t4silcv3 127.25 127.33 127.69 T:deoxyseq256128v13 390.06 416.58 423.77 T:acorn128 1955.23 1956.02 1956.30 T:led80n6t4silcv2 1956.50 1957.03 1957.50 T:led80n6silcv1 2313.10 2315.43 2322.71 T:present80n6t4silcv2 2313.14 2317.99 2329.76 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.11? 0.12? 0.13? T:tiaoxinv1 0.11? 0.12? 0.13? T:tiaoxinv2 0.15? 0.16? 0.18? T:aezv3 0.17 0.17 0.18 T:aezv5 0.16? 0.18? 0.19? T:aezv4 0.18 0.19 0.19 T:aegis128l 0.18 0.19 0.19 aegis128l 0.16? 0.24? 0.28? T:aeadaes128ocbtaglen128v1 -0.06? 0.29? 0.66? T:aeadaes256ocbtaglen128v1 0.28? 0.31? 0.32? T:aes128gcmv1 0.27? 0.31? 0.32? aes256gcmv1 0.37 0.37 0.38 aegis256 0.37 0.38 0.38 T:aegis256 0.37 0.38 0.38 T:aegis128 0.29? 0.40? 0.76? T:aeadaes192ocbtaglen128v1 0.45 0.47 0.48 T:aes128otrpv3 0.47 0.49 0.52 T:aes128otrcv3 0.56 0.59 0.60 T:colm0v1 0.57 0.59 0.60 T:aes256otrpv3 0.60? 0.64? 0.67? T:aes256otrcv3 0.64 0.64 0.65 T:morus1280128v1 0.64 0.64 0.65 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280256v1 0.65 0.68 0.71 T:deoxysi128v141 0.67 0.68 0.69 T:deoxysii128v141 0.68 0.69 0.71 T:deoxysneq128128v1 0.68 0.72 0.75 T:deoxyseq128128v1 0.75 0.76 0.79 T:deoxysi256v141 0.75 0.77 0.78 T:deoxysneq256128v1 0.76 0.77 0.78 T:deoxysii256v141 0.81 0.83 0.84 T:deoxyseq256128v1 1.09 1.10 1.12 T:morus640128v2 1.09 1.11 1.12 T:morus640128v1 1.68? 1.75? 1.88? T:lunarkeyakv2 1.70 1.75 1.83 T:oceankeyakv2 2.01 2.02 2.04 T:norx6441v3 2.02 2.04 2.05 T:norx6441v2 2.06 2.08 2.09 T:norx6444v3 2.11 2.12 2.12 T:aes128n12t8clocv3 2.10 2.12 2.13 T:aes128otrsv3 2.11 2.12 2.12 T:aes128n12t8clocv2 2.11 2.12 2.12 T:aes128n8t8clocv2 2.11 2.12 2.13 T:aes128n12t8silcv3 2.11 2.12 2.13 T:aes128n12t8silcv2 2.10 2.12 2.17 T:seakeyakv2 2.12 2.12 2.13 T:aes128n8t8silcv2 2.31 2.36 2.41 T:lakekeyakv2 2.33 2.37 2.45 T:lakekeyakv1 2.44 2.47 2.48 T:norx6441v1 2.50 2.55 2.59 T:norx6444v2 2.87 2.87 2.88 T:aes256otrsv3 3.01 3.04 3.09 T:norx6444v1 3.10 3.11 3.13 T:norx6461v3 3.10 3.12 3.15 T:norx6461v2 3.38 3.46 3.55 T:ketjemajorv2 3.64 3.66 3.68 T:norx3241v3 3.64 3.67 3.69 T:norx3241v2 3.67 3.69 3.70 T:norx6461v1 4.31 4.31 4.32 T:aesjambuv1 4.38 4.41 4.42 T:norx3241v1 4.41 4.46 4.52 T:acorn128v3 4.73 4.83 4.91 T:riverkeyakv2 4.77 4.83 4.88 T:acorn128v2 4.89 4.99 5.12 T:ketjeminorv2 5.44 5.47 5.50 T:norx3261v2 5.53 5.55 5.57 T:norx3261v3 6.37 6.39 6.47 T:ascon128av11 6.43 6.46 6.53 T:ascon96v1 6.67 6.69 6.72 ascon128av12 7.50 7.51 7.52 T:norx3261v1 9.56 9.62 9.63 T:ascon128v1 9.60 9.63 9.65 T:ascon128v11 10.04 10.07 10.13 ascon128v12 10.50 10.53 10.55 T:aes128otrpv2 10.52 10.55 10.58 T:aes128otrpv1 11.28 11.30 11.33 T:aes128otrsv2 11.29 11.30 11.34 T:aes128otrsv1 11.32 11.35 11.37 T:aes128n8clocv1 11.35 11.37 11.51 T:aes128n12clocv1 14.01 14.08 14.11 T:aes256otrsv1 14.06 14.09 14.13 T:aes256otrsv2 14.21 14.24 14.26 T:aes256otrpv1 14.22 14.26 14.28 T:aes256otrpv2 14.75 14.78 14.97 T:twine80n6t4clocv3 15.58 15.60 15.63 T:twine80n6t4clocv2 17.75 17.86 18.54 T:proest256otrv1 18.75 18.85 19.43 T:ketjesrv1 20.20 20.26 20.36 T:ketjesrv2 20.34 20.42 20.46 T:aeadaes128ocbtaglen64v1 20.42 20.47 20.51 T:aeadaes128ocbtaglen96v1 22.63 22.74 22.86 T:colm127v1 24.36 24.40 24.47 T:aeadaes192ocbtaglen96v1 24.38 24.44 24.48 T:aeadaes192ocbtaglen64v1 28.25 28.48 28.52 T:aeadaes256ocbtaglen96v1 28.43 28.48 28.52 T:aeadaes256ocbtaglen64v1 32.79 33.13 33.65 T:ketjejrv1 38.79 39.02 39.20 T:proest128otrv1 41.40 41.45 41.49 T:aezv1 55.14 55.31 55.44 T:deoxyseq128128v13 55.37 55.49 55.69 T:deoxysneq128128v13 57.39 57.53 57.67 T:ketjejrv2 71.15 71.19 71.24 T:present80n6t4silcv3 83.59 83.69 84.54 T:deoxysneq256128v13 83.68 83.89 84.35 T:deoxyseq256128v13 126.01 126.17 126.24 T:led80n6t4silcv3 373.05 373.86 379.01 T:acorn128 1303.23 1303.69 1304.37 T:led80n6t4silcv2 1304.34 1304.87 1305.35 T:led80n6silcv1 1540.28 1542.28 1545.05 T:present80n6silcv1 1542.66 1546.22 1665.93 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.11? 0.12? 0.13? T:tiaoxinv2 0.11? 0.13? 0.14? T:tiaoxinv1 0.16? 0.17? 0.18? T:aezv3 0.17 0.17 0.18 T:aezv5 0.17? 0.18? 0.19? T:aezv4 0.18 0.19 0.19 T:aegis128l 0.19? 0.19? 0.23? aegis128l 0.20? 0.24? 0.27? T:aeadaes128ocbtaglen128v1 -0.06? 0.29? 0.67? T:aeadaes256ocbtaglen128v1 0.29 0.30 0.32 T:aes128gcmv1 0.31 0.32 0.33 aes256gcmv1 0.36 0.37 0.37 T:aegis128 0.37 0.38 0.38 aegis256 0.01? 0.38? 0.41? T:aeadaes192ocbtaglen128v1 0.37 0.38 0.38 T:aegis256 0.46 0.47 0.49 T:aes128otrpv3 0.48 0.49 0.50 T:aes128otrcv3 0.55 0.57 0.61 T:colm0v1 0.57 0.59 0.61 T:aes256otrpv3 0.60 0.61 0.64 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280256v1 0.65 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280128v2 0.66 0.67 0.68 T:deoxysi128v141 0.67 0.68 0.69 T:deoxysii128v141 0.68 0.69 0.70 T:deoxysneq128128v1 0.71 0.72 0.72 T:deoxyseq128128v1 0.75 0.76 0.76 T:deoxysi256v141 0.75 0.76 0.78 T:deoxysii256v141 0.75 0.81 0.82 T:deoxysneq256128v1 0.79 0.81 0.82 T:deoxyseq256128v1 1.07 1.08 1.10 T:morus640128v2 1.09 1.10 1.12 T:morus640128v1 1.72 1.76 1.83 T:oceankeyakv2 1.71 1.76 1.90 T:lunarkeyakv2 2.05 2.06 2.08 T:norx6444v3 2.07 2.09 2.10 T:norx6441v3 2.08 2.09 2.10 T:norx6441v2 2.08 2.10 2.17 T:seakeyakv2 2.01 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.12 T:aes128otrsv3 2.11 2.12 2.13 T:aes128n12t8clocv3 2.11 2.12 2.13 T:aes128n12t8silcv3 2.11 2.12 2.23 T:aes128n12t8clocv2 2.11 2.13 2.13 T:aes128n8t8silcv2 2.12 2.13 2.25 T:aes128n8t8clocv2 2.31 2.35 2.40 T:lakekeyakv2 2.35 2.40 2.50 T:lakekeyakv1 2.44 2.45 2.46 T:norx6441v1 2.52 2.56 2.60 T:norx6444v2 2.86 2.87 2.88 T:aes256otrsv3 2.96 3.08 3.20 T:norx6444v1 3.06 3.08 3.10 T:norx6461v3 3.09 3.11 3.13 T:norx6461v2 3.41 3.47 3.56 T:ketjemajorv2 3.65 3.67 3.69 T:norx6461v1 3.64 3.67 3.69 T:norx3241v3 3.66 3.68 3.69 T:norx3241v2 4.30 4.31 4.32 T:aesjambuv1 4.40 4.42 4.44 T:norx3241v1 4.42 4.46 4.53 T:acorn128v3 4.56 4.76 5.05 T:acorn128v2 4.76 4.81 4.86 T:riverkeyakv2 5.01 5.09 5.21 T:ketjeminorv2 5.43 5.47 5.48 T:norx3261v2 5.53 5.55 5.56 T:norx3261v3 6.36 6.43 6.49 T:ascon128av11 6.37 6.45 6.50 T:ascon96v1 6.64 6.69 6.71 ascon128av12 7.51 7.52 7.54 T:norx3261v1 9.59 9.61 9.68 T:ascon128v11 9.60 9.62 9.65 T:ascon128v1 10.07 10.09 10.14 ascon128v12 10.50 10.54 10.58 T:aes128otrpv1 10.50 10.55 10.59 T:aes128otrpv2 11.26 11.34 11.36 T:aes128otrsv1 11.26 11.34 11.38 T:aes128otrsv2 11.34 11.35 11.40 T:aes128n8clocv1 11.35 11.39 11.41 T:aes128n12clocv1 14.02 14.06 14.14 T:aes256otrsv2 14.04 14.07 14.16 T:aes256otrsv1 14.21 14.23 14.29 T:aes256otrpv1 14.22 14.25 14.31 T:aes256otrpv2 14.80 14.84 15.00 T:twine80n6t4clocv3 15.45 15.55 15.63 T:twine80n6t4clocv2 17.80 17.87 18.73 T:proest256otrv1 18.71 18.82 19.46 T:ketjesrv1 20.17 20.27 20.35 T:ketjesrv2 20.38 20.42 20.48 T:aeadaes128ocbtaglen64v1 20.40 20.44 20.51 T:aeadaes128ocbtaglen96v1 22.44 22.83 22.91 T:colm127v1 24.40 24.43 24.47 T:aeadaes192ocbtaglen64v1 24.39 24.46 24.53 T:aeadaes192ocbtaglen96v1 28.40 28.46 28.50 T:aeadaes256ocbtaglen64v1 28.31 28.47 28.52 T:aeadaes256ocbtaglen96v1 32.58 33.71 34.25 T:ketjejrv1 39.39 39.71 40.00 T:proest128otrv1 41.20 41.32 41.42 T:aezv1 54.86 55.10 55.23 T:deoxyseq128128v13 55.02 55.17 55.34 T:deoxysneq128128v13 56.29 56.75 57.36 T:ketjejrv2 71.05 71.15 71.25 T:present80n6t4silcv3 83.53 83.85 84.78 T:deoxyseq256128v13 83.88 84.74 84.93 T:deoxysneq256128v13 126.00 126.14 126.24 T:led80n6t4silcv3 363.39 372.00 374.36 T:acorn128 1303.80 1304.64 1305.58 T:led80n6t4silcv2 1304.78 1305.10 1305.82 T:led80n6silcv1 1543.51 1544.49 1551.60 T:present80n6t4silcv2 1537.84 1558.93 1666.42 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.11 0.11 0.12 T:tiaoxinv2 0.11? 0.12? 0.16? T:tiaoxinv1 0.16 0.17 0.17 T:aezv3 0.16? 0.17? 0.18? T:aezv4 0.17 0.17 0.17 T:aezv5 0.18 0.19 0.19 aegis128l 0.18 0.19 0.19 T:aegis128l 0.22? 0.24? 0.28? T:aeadaes128ocbtaglen128v1 0.26? 0.30? 0.34? T:aeadaes256ocbtaglen128v1 0.29 0.30 0.32 T:aes128gcmv1 0.31 0.32 0.33 aes256gcmv1 0.37 0.37 0.38 T:aegis128 0.37 0.38 0.38 T:aegis256 0.31? 0.38? 0.43? aegis256 0.37? 0.38? 0.76? T:aeadaes192ocbtaglen128v1 0.46 0.47 0.47 T:aes128otrpv3 0.47 0.49 0.50 T:aes128otrcv3 0.56 0.57 0.58 T:colm0v1 0.58 0.59 0.60 T:aes256otrpv3 0.61 0.62 0.63 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280128v2 0.65 0.65 0.66 T:morus1280128v1 0.64 0.65 0.67 T:morus1280256v1 0.64 0.66 0.67 T:morus1280256v2 0.67 0.67 0.68 T:deoxysi128v141 0.67 0.68 0.69 T:deoxysii128v141 0.68 0.69 0.73 T:deoxysneq128128v1 0.71 0.72 0.72 T:deoxyseq128128v1 0.75 0.76 0.77 T:deoxysi256v141 0.76 0.76 0.77 T:deoxysii256v141 0.76 0.81 0.81 T:deoxysneq256128v1 0.81 0.81 0.83 T:deoxyseq256128v1 1.07 1.08 1.11 T:morus640128v2 1.10 1.11 1.12 T:morus640128v1 1.69 1.73 1.81 T:lunarkeyakv2 1.71 1.79 1.83 T:oceankeyakv2 1.99 2.00 2.12 T:aes128n12t8silcv2 2.05 2.07 2.09 T:norx6444v3 2.08 2.09 2.11 T:norx6441v3 2.08 2.09 2.11 T:norx6441v2 2.08 2.10 2.15 T:seakeyakv2 2.00 2.12 2.12 T:aes128n12t8silcv3 2.12 2.12 2.12 T:aes128otrsv3 2.00 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.13 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n12t8clocv2 2.12 2.13 2.14 T:aes128n8t8clocv2 2.33 2.38 2.43 T:lakekeyakv1 2.35 2.40 2.43 T:lakekeyakv2 2.43 2.45 2.47 T:norx6441v1 2.52 2.56 2.63 T:norx6444v2 2.87 2.87 2.88 T:aes256otrsv3 3.02 3.05 3.13 T:norx6444v1 3.07 3.08 3.10 T:norx6461v3 3.09 3.11 3.13 T:norx6461v2 3.39 3.48 3.58 T:ketjemajorv2 3.64 3.66 3.67 T:norx3241v3 3.66 3.67 3.69 T:norx6461v1 3.66 3.68 3.69 T:norx3241v2 4.30 4.31 4.31 T:aesjambuv1 4.39 4.42 4.44 T:norx3241v1 4.42? 4.49? 5.31? T:acorn128v3 4.58 4.65 5.03 T:acorn128v2 4.62 4.80 4.90 T:riverkeyakv2 4.96 5.09 5.22 T:ketjeminorv2 5.43 5.47 5.50 T:norx3261v2 5.53 5.56 5.58 T:norx3261v3 6.39 6.47 6.51 T:ascon128av11 6.44 6.47 6.52 T:ascon96v1 6.67 6.68 6.71 ascon128av12 7.49 7.51 7.52 T:norx3261v1 9.59 9.62 9.64 T:ascon128v11 9.59 9.63 9.65 T:ascon128v1 10.04 10.06 10.12 ascon128v12 10.49 10.55 10.62 T:aes128otrpv1 10.51 10.56 10.61 T:aes128otrpv2 11.26 11.29 11.37 T:aes128otrsv1 11.27 11.31 11.37 T:aes128otrsv2 11.32 11.36 11.38 T:aes128n8clocv1 11.33 11.37 11.40 T:aes128n12clocv1 14.03 14.06 14.15 T:aes256otrsv1 14.02 14.07 14.14 T:aes256otrsv2 14.19 14.27 14.31 T:aes256otrpv1 14.26 14.28 14.34 T:aes256otrpv2 14.80 14.84 14.96 T:twine80n6t4clocv3 15.52 15.61 15.66 T:twine80n6t4clocv2 17.79 17.85 17.89 T:proest256otrv1 18.68 18.79 19.38 T:ketjesrv1 20.22 20.33 20.40 T:ketjesrv2 20.39 20.44 20.53 T:aeadaes128ocbtaglen64v1 20.40 20.45 20.49 T:aeadaes128ocbtaglen96v1 22.52 22.59 22.70 T:colm127v1 24.38 24.41 24.51 T:aeadaes192ocbtaglen96v1 24.40 24.46 24.51 T:aeadaes192ocbtaglen64v1 28.38 28.43 28.54 T:aeadaes256ocbtaglen64v1 28.44 28.47 28.53 T:aeadaes256ocbtaglen96v1 32.88 33.71 34.27 T:ketjejrv1 39.02 39.41 39.51 T:proest128otrv1 41.42 41.44 41.51 T:aezv1 54.91 55.30 55.74 T:deoxysneq128128v13 55.19 55.42 55.83 T:deoxyseq128128v13 56.86 57.25 57.67 T:ketjejrv2 71.12 71.17 71.24 T:present80n6t4silcv3 83.90 84.27 84.80 T:deoxysneq256128v13 84.02 84.61 84.81 T:deoxyseq256128v13 126.10 126.20 126.30 T:led80n6t4silcv3 363.58 370.04 372.56 T:acorn128 1303.47 1304.18 1304.76 T:led80n6t4silcv2 1304.29 1304.97 1305.40 T:led80n6silcv1 1539.97 1542.40 1589.26 T:present80n6silcv1 1541.43 1543.79 1548.56 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.20 0.20 0.21 T:tiaoxinv1 0.20 0.20 0.21 T:tiaoxinv2 0.24 0.24 0.25 T:aegis128l 0.24 0.24 0.26 aegis128l 0.30 0.31 0.33 T:aezv3 0.32 0.32 0.34 T:aezv4 0.32 0.33 0.34 T:aezv5 0.38? 0.39? 0.43? T:aeadaes128ocbtaglen128v1 0.42 0.42 0.42 T:aegis128 0.42 0.42 0.42 aegis256 0.42 0.42 0.42 T:aegis256 0.48? 0.49? 0.56? T:aeadaes192ocbtaglen128v1 0.48? 0.49? 0.71? T:aeadaes256ocbtaglen128v1 0.53 0.53 0.54 T:aes128otrpv3 0.59 0.60 0.60 T:aes128otrcv3 0.67 0.68 0.69 T:aes256otrpv3 0.74 0.74 0.75 T:aes128gcmv1 0.76 0.77 0.77 T:aes256otrcv3 0.78 0.79 0.82 T:deoxysi128v141 0.79 0.80 0.81 T:deoxysneq128128v1 0.81 0.81 0.81 T:morus1280128v1 0.81 0.81 0.81 T:morus1280256v1 0.81 0.82 0.83 aes256gcmv1 0.82 0.82 0.83 T:morus1280256v2 0.83 0.83 0.83 T:morus1280128v2 0.88 0.89 0.91 T:deoxysneq256128v1 0.90 0.91 0.94 T:deoxysi256v141 1.05 1.05 1.06 T:colm0v1 1.18 1.19 1.19 T:deoxysii128v141 1.19 1.20 1.20 T:deoxyseq128128v1 1.28 1.28 1.30 T:morus640128v1 1.28 1.29 1.29 T:morus640128v2 1.33 1.34 1.36 T:deoxysii256v141 1.34 1.35 1.35 T:aes128otrsv3 1.35 1.36 1.37 T:deoxyseq256128v1 1.81 1.81 1.82 T:aes256otrsv3 2.17 2.18 2.19 T:norx6444v3 2.18 2.20 2.20 T:aes128n8t8clocv2 2.19 2.20 2.20 T:aes128n12t8clocv2 2.20 2.20 2.20 T:aes128n8t8silcv2 2.20 2.20 2.21 T:aes128n12t8silcv3 2.19 2.20 2.20 T:aes128n12t8clocv3 2.20 2.21 2.21 T:aes128n12t8silcv2 2.36 2.37 2.38 T:norx6441v2 2.36 2.37 2.37 T:norx6441v3 2.74 2.75 2.76 T:norx6441v1 2.82 2.84 2.89 T:lakekeyakv2 3.04 3.05 3.09 T:lakekeyakv1 3.13 3.15 3.16 T:seakeyakv2 3.57 3.58 3.60 T:norx6461v3 3.59 3.59 3.60 T:norx6461v2 3.84 3.85 3.87 T:norx6444v2 3.90 3.92 3.94 T:norx3241v3 3.94 3.95 3.97 T:norx3241v2 4.10 4.12 4.16 T:oceankeyakv2 4.14 4.15 4.17 T:norx6461v1 4.38 4.38 4.38 T:aesjambuv1 4.55 4.58 4.59 T:norx6444v1 4.62 4.63 4.65 T:norx3241v1 5.30 5.32 5.35 T:ketjemajorv2 5.38 5.47 5.55 T:riverkeyakv2 5.64 5.66 5.67 T:acorn128v2 5.49 5.78 6.02 T:acorn128v3 5.94 5.96 5.97 T:norx3261v2 5.95 5.98 5.99 T:norx3261v3 6.38 6.43 6.66 T:ketjeminorv2 6.73 6.76 6.77 T:ascon128av11 6.74 6.76 6.78 T:ascon96v1 6.88 6.92 6.94 ascon128av12 7.12 7.16 7.19 T:lunarkeyakv2 7.91 7.93 7.93 T:norx3261v1 9.89 9.90 9.91 T:ascon128v1 9.88 9.91 9.93 T:ascon128v11 10.12 10.19 10.27 ascon128v12 11.14 11.16 11.17 T:aes128otrpv2 11.15 11.18 11.20 T:aes128otrpv1 11.50 11.51 11.53 T:aes128otrsv1 11.52 11.54 11.56 T:aes128otrsv2 14.98 14.99 15.00 T:aes256otrpv1 14.98 14.99 15.03 T:aes256otrpv2 15.07 15.10 15.13 T:aes256otrsv1 15.08 15.11 15.15 T:aes256otrsv2 15.24 15.25 15.33 T:twine80n6t4clocv3 15.95 15.97 16.08 T:twine80n6t4clocv2 16.27 16.29 16.31 T:aes128n8clocv1 16.27 16.32 16.36 T:aes128n12clocv1 19.15 19.26 19.36 T:proest256otrv1 20.30 20.36 20.59 T:ketjesrv1 21.21 21.27 21.31 T:aeadaes128ocbtaglen64v1 21.24 21.30 21.31 T:aeadaes128ocbtaglen96v1 22.23 22.25 22.29 T:ketjesrv2 25.27 25.30 25.33 T:aeadaes192ocbtaglen96v1 25.29 25.32 25.34 T:aeadaes192ocbtaglen64v1 29.35 29.38 29.43 T:aeadaes256ocbtaglen64v1 29.46 29.49 29.51 T:aeadaes256ocbtaglen96v1 34.83 34.91 34.96 T:colm127v1 36.31 37.57 37.63 T:ketjejrv1 41.63 41.65 41.70 T:proest128otrv1 56.40 56.45 56.53 T:deoxysneq128128v13 59.85 59.93 59.95 T:ketjejrv2 72.34 72.36 72.39 T:present80n6t4silcv3 84.00 84.14 85.01 T:deoxysneq256128v13 84.43 84.52 84.59 T:aezv1 84.72 84.75 85.16 T:deoxyseq128128v13 127.75 127.81 127.83 T:led80n6t4silcv3 127.50 128.69 128.81 T:deoxyseq256128v13 451.46 452.59 455.12 T:acorn128 1966.69 1966.92 1967.34 T:led80n6t4silcv2 1967.78 1968.10 1969.04 T:led80n6silcv1 2326.67 2329.32 2363.93 T:present80n6t4silcv2 2327.43 2350.33 2382.48 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.24 0.24 0.24 T:aegis128l 0.24 0.25 0.26 aegis128l 0.30 0.31 0.33 T:aezv3 0.32 0.32 0.33 T:tiaoxinv1 0.32 0.32 0.33 T:tiaoxinv2 0.32 0.32 0.33 T:aezv5 0.32 0.33 0.34 T:aezv4 0.38 0.39 0.42 T:aeadaes128ocbtaglen128v1 0.41 0.42 0.42 T:aegis128 0.42 0.42 0.42 T:aegis256 0.43 0.44 0.45 aegis256 0.48? 0.48? 0.72? T:aeadaes192ocbtaglen128v1 0.49? 0.51? 0.72? T:aeadaes256ocbtaglen128v1 0.54 0.55 0.57 T:aes128otrpv3 0.60 0.60 0.61 T:aes128otrcv3 0.60 0.61 0.61 T:aes128gcmv1 0.70 0.70 0.71 aes256gcmv1 0.71 0.71 0.72 T:aes256otrpv3 0.78 0.79 0.80 T:aes256otrcv3 0.81 0.82 0.82 T:morus1280256v1 0.82 0.82 0.83 T:morus1280128v1 0.82 0.83 0.83 T:morus1280128v2 0.83 0.83 0.84 T:morus1280256v2 0.90 0.90 0.91 T:deoxysi128v141 0.90 0.90 0.90 T:deoxysneq128128v1 0.98 0.98 0.99 T:deoxysneq256128v1 1.01 1.01 1.03 T:deoxysi256v141 1.06 1.07 1.08 T:colm0v1 1.19 1.19 1.23 T:deoxysii128v141 1.25 1.26 1.27 T:morus640128v1 1.25 1.26 1.28 T:morus640128v2 1.36 1.37 1.37 T:aes128otrsv3 1.36 1.37 1.42 T:deoxysii256v141 1.38 1.38 1.39 T:deoxyseq128128v1 1.44 1.45 1.46 T:deoxyseq256128v1 1.83 1.83 1.84 T:aes256otrsv3 2.14 2.14 2.21 T:aes128n12t8clocv3 2.14 2.14 2.16 T:aes128n8t8clocv2 2.14 2.14 2.21 T:aes128n12t8clocv2 2.14 2.15 2.15 T:aes128n12t8silcv3 2.14 2.15 2.15 T:aes128n8t8silcv2 2.15 2.15 2.23 T:aes128n12t8silcv2 2.16 2.17 2.18 T:norx6444v3 2.35 2.35 2.36 T:norx6441v3 2.37 2.37 2.39 T:norx6441v2 2.71 2.72 2.73 T:norx6441v1 2.82 2.85 2.91 T:lakekeyakv2 3.05 3.09 3.12 T:lakekeyakv1 3.18 3.19 3.22 T:seakeyakv2 3.55 3.56 3.57 T:norx6461v3 3.58 3.58 3.59 T:norx6461v2 3.85 3.87 3.91 T:norx6444v2 3.90 3.91 3.91 T:norx3241v3 3.90 3.91 3.92 T:norx3241v2 4.15 4.16 4.17 T:norx6461v1 4.14 4.17 4.21 T:oceankeyakv2 4.52 4.52 4.53 T:aesjambuv1 4.59 4.60 4.62 T:norx3241v1 4.59 4.60 4.62 T:norx6444v1 5.23 5.27 5.30 T:ketjemajorv2 5.37 5.52 5.55 T:riverkeyakv2 5.52 5.53 5.61 T:acorn128v3 5.68 5.85 5.89 T:acorn128v2 5.92 5.94 5.95 T:norx3261v2 5.96 5.99 6.00 T:norx3261v3 6.35 6.37 6.43 T:ketjeminorv2 6.67 6.70 6.72 T:ascon128av11 6.70 6.73 6.74 T:ascon96v1 6.85 6.86 6.88 ascon128av12 7.16 7.18 7.23 T:lunarkeyakv2 7.85 7.86 7.86 T:norx3261v1 9.86 9.88 9.89 T:ascon128v11 9.85 9.88 9.90 T:ascon128v1 10.16 10.19 10.22 ascon128v12 11.35 11.37 11.40 T:aes128otrpv1 11.37 11.40 11.42 T:aes128otrpv2 11.71 11.74 11.76 T:aes128otrsv1 11.74 11.76 11.78 T:aes128otrsv2 15.19 15.22 15.26 T:aes256otrpv1 15.21 15.23 15.26 T:aes256otrpv2 15.20 15.24 15.31 T:aes128n12clocv1 15.22 15.28 15.31 T:twine80n6t4clocv3 15.41 15.42 15.44 T:aes256otrsv1 15.41 15.44 15.47 T:aes128n8clocv1 15.42 15.45 15.48 T:aes256otrsv2 15.93 15.98 16.01 T:twine80n6t4clocv2 19.21 19.27 19.31 T:proest256otrv1 20.79 20.83 21.06 T:ketjesrv1 21.41 21.49 21.51 T:ketjesrv2 28.20 28.25 28.29 T:aeadaes128ocbtaglen64v1 28.26 28.28 28.32 T:aeadaes128ocbtaglen96v1 33.96 34.00 34.04 T:aeadaes192ocbtaglen64v1 33.98 34.01 34.03 T:aeadaes192ocbtaglen96v1 37.17 37.36 37.41 T:ketjejrv1 39.72 39.75 39.80 T:aeadaes256ocbtaglen64v1 39.80 39.82 39.89 T:aeadaes256ocbtaglen96v1 41.02 41.33 41.38 T:proest128otrv1 48.56 48.63 48.80 T:colm127v1 59.96 60.01 60.06 T:ketjejrv2 64.92 65.26 65.37 T:deoxysneq128128v13 72.24 72.28 72.41 T:present80n6t4silcv3 84.42 84.50 84.54 T:aezv1 84.66 84.77 85.22 T:deoxyseq128128v13 100.02 100.27 100.36 T:deoxysneq256128v13 127.68 127.71 127.84 T:led80n6t4silcv3 127.83 127.90 128.08 T:deoxyseq256128v13 441.60 445.49 450.48 T:acorn128 1965.91 1966.26 1966.59 T:led80n6t4silcv2 1966.74 1967.32 1967.87 T:led80n6silcv1 2326.40 2329.46 2338.31 T:present80n6silcv1 2328.69 2336.60 2363.77 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17? 0.17? 0.19? T:aezv3 0.18? 0.18? 0.22? T:aezv5 0.22 0.22 0.23 T:aezv4 0.24 0.24 0.24 T:aegis128l 0.25 0.25 0.26 aegis128l 0.32 0.32 0.33 T:tiaoxinv1 0.32 0.32 0.33 T:tiaoxinv2 0.38 0.39 0.40 T:aeadaes128ocbtaglen128v1 0.41 0.42 0.42 T:aegis128 0.42 0.42 0.42 T:aegis256 0.45 0.45 0.46 aegis256 0.48 0.48 0.49 T:aeadaes192ocbtaglen128v1 0.48 0.48 0.51 T:aeadaes256ocbtaglen128v1 0.55 0.56 0.56 T:aes128otrpv3 0.60 0.60 0.61 T:aes128otrcv3 0.61 0.61 0.62 T:aes128gcmv1 0.70 0.70 0.71 aes256gcmv1 0.71 0.71 0.71 T:aes256otrpv3 0.78 0.79 0.79 T:aes256otrcv3 0.81 0.82 0.83 T:morus1280128v1 0.82 0.82 0.82 T:morus1280256v1 0.82 0.83 0.83 T:morus1280128v2 0.83 0.83 0.84 T:morus1280256v2 0.89 0.89 0.90 T:deoxysneq128128v1 0.90 0.90 0.90 T:deoxysi128v141 0.97 0.97 0.98 T:deoxysneq256128v1 1.01 1.02 1.03 T:deoxysi256v141 1.07 1.07 1.08 T:colm0v1 1.19 1.19 1.20 T:deoxysii128v141 1.25 1.26 1.27 T:morus640128v2 1.26 1.26 1.27 T:morus640128v1 1.36 1.36 1.37 T:aes128otrsv3 1.36 1.37 1.39 T:deoxysii256v141 1.37 1.38 1.39 T:deoxyseq128128v1 1.44 1.45 1.45 T:deoxyseq256128v1 1.83 1.83 1.84 T:aes256otrsv3 2.14 2.14 2.21 T:aes128n12t8clocv3 2.14 2.14 2.15 T:aes128n12t8silcv3 2.14 2.14 2.23 T:aes128n8t8silcv2 2.15 2.16 2.16 T:norx6444v3 2.13 2.21 2.21 T:aes128n8t8clocv2 2.13 2.21 2.21 T:aes128n12t8clocv2 2.14 2.23 2.23 T:aes128n12t8silcv2 2.35 2.36 2.37 T:norx6441v3 2.37 2.38 2.38 T:norx6441v2 2.70 2.71 2.73 T:norx6441v1 2.81 2.86 2.91 T:lakekeyakv2 3.08 3.10 3.12 T:lakekeyakv1 3.18 3.19 3.22 T:seakeyakv2 3.56 3.56 3.57 T:norx6461v3 3.57 3.58 3.59 T:norx6461v2 3.85 3.87 3.91 T:norx6444v2 3.90 3.91 3.91 T:norx3241v3 3.90 3.91 3.92 T:norx3241v2 4.14 4.15 4.16 T:norx6461v1 4.15 4.17 4.19 T:oceankeyakv2 4.52 4.53 4.53 T:aesjambuv1 4.58 4.59 4.62 T:norx6444v1 4.60 4.61 4.62 T:norx3241v1 5.26 5.27 5.32 T:ketjemajorv2 5.35 5.40 5.52 T:riverkeyakv2 5.51 5.52 5.54 T:acorn128v3 5.46 5.83 5.87 T:acorn128v2 5.93 5.94 5.95 T:norx3261v2 5.96 5.98 6.01 T:norx3261v3 6.39 6.43 6.49 T:ketjeminorv2 6.67 6.68 6.70 T:ascon128av11 6.69 6.71 6.73 T:ascon96v1 6.83 6.84 6.85 ascon128av12 7.15 7.17 7.21 T:lunarkeyakv2 7.84 7.85 7.86 T:norx3261v1 9.85 9.86 9.88 T:ascon128v11 9.85 9.86 9.88 T:ascon128v1 10.17 10.22 10.23 ascon128v12 11.40 11.42 11.44 T:aes128otrpv1 11.41 11.43 11.46 T:aes128otrpv2 11.73 11.76 11.78 T:aes128otrsv1 11.77 11.79 11.81 T:aes128otrsv2 15.23 15.24 15.27 T:aes256otrpv1 15.23 15.25 15.29 T:aes256otrpv2 15.22 15.25 15.33 T:aes128n12clocv1 15.26 15.30 15.33 T:twine80n6t4clocv3 15.39 15.42 15.43 T:aes128n8clocv1 15.41 15.42 15.44 T:aes256otrsv1 15.41 15.43 15.45 T:aes256otrsv2 15.95 16.00 16.03 T:twine80n6t4clocv2 19.20 19.28 19.33 T:proest256otrv1 20.79 20.82 21.11 T:ketjesrv1 21.44 21.47 21.57 T:ketjesrv2 28.22 28.26 28.30 T:aeadaes128ocbtaglen64v1 28.21 28.30 28.32 T:aeadaes128ocbtaglen96v1 33.94 33.97 33.99 T:aeadaes192ocbtaglen96v1 33.95 33.98 34.03 T:aeadaes192ocbtaglen64v1 36.07 36.26 37.35 T:ketjejrv1 39.73 39.80 39.83 T:aeadaes256ocbtaglen64v1 39.82 39.85 39.89 T:aeadaes256ocbtaglen96v1 41.03 41.28 41.34 T:proest128otrv1 48.58 48.61 48.74 T:colm127v1 59.96 60.35 60.42 T:ketjejrv2 65.32 65.45 65.76 T:deoxysneq128128v13 72.25 72.28 72.31 T:present80n6t4silcv3 84.47 84.51 84.57 T:aezv1 84.80 85.04 85.31 T:deoxyseq128128v13 99.06 99.68 99.96 T:deoxysneq256128v13 127.42 127.64 127.75 T:deoxyseq256128v13 127.61 127.71 127.79 T:led80n6t4silcv3 440.61 441.17 451.05 T:acorn128 1965.88 1966.31 1966.73 T:led80n6t4silcv2 1966.87 1967.48 1967.72 T:led80n6silcv1 2326.59 2331.74 2365.63 T:present80n6t4silcv2 2331.01 2332.81 2338.19 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.91 0.96 0.98 T:aegis128 0.92? 0.98? 1.10? T:aegis128l 0.94? 0.98? 1.31? aegis128l 1.09? 1.14? 1.22? T:aezv3 1.23? 1.26? 1.70? T:tiaoxinv2 1.23? 1.27? 1.46? T:tiaoxinv1 1.27 1.29 1.34 T:aegis256 1.29 1.34 1.39 aegis256 1.13? 1.38? 1.59? T:aezv5 1.29? 1.42? 1.60? T:aezv4 2.07? 2.14? 2.74? T:aes128otrpv3 2.31? 2.52? 2.59? T:aes128otrsv3 2.62? 2.67? 3.14? T:colm0v1 2.77 2.80 2.93 T:aes128n8t8clocv2 2.75 2.84 2.90 T:aes128n12t8clocv3 2.83 2.84 2.98 T:aes128n12t8clocv2 2.91 2.93 2.98 T:deoxysneq128128v1 2.91 2.96 3.09 T:aes128n12t8silcv3 2.92 2.96 3.02 T:aes128n8t8silcv2 2.85 2.97 3.09 T:aes128otrcv3 2.88 3.01 3.14 T:aes256otrpv3 3.00 3.06 3.20 T:aes128n12t8silcv2 3.04? 3.11? 3.71? T:deoxysi128v141 3.25 3.29 3.45 T:aes256otrsv3 3.43 3.61 3.68 T:deoxysneq256128v1 3.31? 3.66? 8.81? T:aeadaes192ocbtaglen128v1 3.43? 3.77? 5.02? T:aeadaes128ocbtaglen128v1 3.82? 3.89? 4.32? T:aes256otrcv3 3.88 4.01 4.20 T:deoxysi256v141 3.99 4.05 4.35 T:deoxyseq128128v1 4.12 4.22 4.28 T:morus1280128v1 4.16 4.25 4.29 T:morus1280256v1 4.20 4.27 4.30 T:morus640128v1 4.38 4.42 4.52 T:morus1280128v2 4.39 4.45 4.50 T:morus1280256v2 4.55 4.57 4.64 T:morus640128v2 4.80 4.88 5.03 T:deoxyseq256128v1 4.17? 4.90? 9.94? T:aeadaes256ocbtaglen128v1 5.05 5.10 5.19 T:aesjambuv1 5.02 5.20 5.30 T:aes128gcmv1 5.40 5.46 5.51 T:deoxysii128v141 5.70 5.82 5.99 aes256gcmv1 6.40 6.53 6.58 T:deoxysii256v141 7.50 7.55 7.67 T:norx6441v2 7.57 7.69 7.80 T:norx6441v3 7.59 7.70 7.75 T:norx6441v1 9.44 9.49 9.59 T:norx3241v2 9.48 9.51 9.64 T:norx3241v1 9.47 9.57 9.73 T:norx3241v3 9.86 9.92 10.11 T:ascon128av11 9.92 9.97 10.08 T:ascon96v1 10.04 10.16 10.32 ascon128av12 10.47 10.60 11.14 T:lakekeyakv1 11.48 11.54 11.64 T:norx6461v2 11.42 11.62 11.70 T:norx6461v3 11.55 11.65 11.84 T:norx6461v1 12.57 12.69 13.11 T:lakekeyakv2 12.66 12.83 13.05 T:riverkeyakv2 12.90 12.93 13.06 T:ascon128v11 12.88 12.96 13.04 T:ascon128v1 13.12 13.37 13.45 ascon128v12 13.95 14.07 14.13 T:norx6444v3 14.34 14.50 14.59 T:norx3261v2 14.48 14.62 14.67 T:norx3261v3 16.16 16.24 16.31 T:norx3261v1 18.53 18.66 18.81 T:aes128otrsv2 18.62 18.66 18.80 T:aes128otrsv1 18.73 18.80 19.12 T:aes128otrpv2 18.77 18.84 18.99 T:aes128otrpv1 18.87 18.90 18.96 T:twine80n6t4clocv3 18.97 19.09 19.27 T:aes128n8clocv1 19.09 19.15 19.32 T:aes128n12clocv1 19.59 19.71 19.75 T:twine80n6t4clocv2 22.45 23.08 23.52 T:ketjeminorv2 22.72 23.23 24.05 T:acorn128v2 23.11 23.45 23.83 T:acorn128v3 24.24 24.31 24.54 T:aes256otrsv2 24.34 24.41 24.51 T:aes256otrsv1 24.70 24.79 24.85 T:aes256otrpv1 24.77 24.83 25.18 T:aes256otrpv2 27.66 27.85 28.70 T:norx6444v2 28.12 28.46 28.85 T:seakeyakv2 32.68 33.14 33.84 T:ketjemajorv2 33.47 33.58 33.87 T:norx6444v1 33.62 33.84 34.31 T:ketjesrv1 34.06 34.18 34.62 T:aeadaes128ocbtaglen64v1 34.28 34.54 34.98 T:aeadaes128ocbtaglen96v1 39.02 39.37 39.69 T:ketjesrv2 39.62 39.74 40.21 T:aeadaes192ocbtaglen64v1 39.78 39.89 40.19 T:aeadaes192ocbtaglen96v1 44.22 44.94 45.50 T:oceankeyakv2 46.59 46.78 47.00 T:aeadaes256ocbtaglen96v1 46.52 46.84 47.18 T:aeadaes256ocbtaglen64v1 48.06 49.14 49.66 T:ketjejrv1 49.80 50.85 51.45 T:colm127v1 55.30 55.61 58.38 T:proest256otrv1 63.88 64.45 65.40 T:deoxysneq128128v13 80.30 80.72 81.34 T:proest128otrv1 81.57 82.01 82.63 T:ketjejrv2 88.50 88.65 88.81 T:present80n6t4silcv3 95.00 95.41 96.53 T:deoxysneq256128v13 97.16 97.62 97.80 T:aezv1 106.20 106.89 107.89 T:deoxyseq128128v13 115.58 116.05 117.49 T:lunarkeyakv2 150.84 151.26 151.45 T:led80n6t4silcv3 158.33 158.60 158.97 T:deoxyseq256128v13 1434.75 1450.11 1453.52 T:acorn128 2201.65 2201.98 2204.41 T:led80n6t4silcv2 2202.95 2203.79 2204.59 T:led80n6silcv1 2604.65 2606.13 2618.84 T:present80n6t4silcv2 2610.91 2612.84 2629.02 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.96 0.98 1.05 T:aegis128l 1.02? 1.05? 1.41? aegis128l 1.12 1.15 1.18 T:aegis128 1.08? 1.16? 1.23? T:aezv5 1.12 1.16 1.20 T:aezv3 1.14? 1.21? 1.46? T:aezv4 1.27 1.30 1.37 T:aegis256 1.29? 1.33? 1.70? T:tiaoxinv2 1.36 1.38 1.41 aegis256 1.31? 1.41? 1.85? T:tiaoxinv1 2.02? 2.09? 2.29? T:aes128otrpv3 2.45? 2.52? 2.88? T:aes128n8t8clocv2 2.45? 2.56? 2.86? T:aes128n12t8clocv2 2.43? 2.62? 2.72? T:aes128otrsv3 2.51? 2.62? 2.90? T:aes128n12t8clocv3 2.65 2.76 2.93 T:aes128n12t8silcv2 2.68 2.81 2.88 T:aes128n12t8silcv3 2.81? 2.84? 3.27? T:colm0v1 2.80 2.87 3.09 T:aes128n8t8silcv2 2.89 2.94 3.08 T:aes256otrpv3 2.87? 2.95? 5.81? T:aeadaes192ocbtaglen128v1 3.02 3.07 3.20 T:aes128otrcv3 3.33 3.37 3.47 T:aes256otrsv3 3.35? 3.77? 4.69? T:aeadaes128ocbtaglen128v1 3.97 4.01 4.09 T:aes256otrcv3 4.23 4.28 4.37 T:morus640128v1 4.29 4.37 4.43 T:morus1280256v1 4.37 4.44 4.46 T:morus1280128v1 4.41 4.47 4.57 T:deoxysneq128128v1 4.55 4.59 4.73 T:morus640128v2 4.54 4.60 4.65 T:morus1280128v2 4.55 4.62 4.67 T:deoxysneq256128v1 4.59 4.63 4.74 T:morus1280256v2 4.82 4.86 4.90 T:deoxysi128v141 5.26 5.27 5.32 T:aesjambuv1 5.35 5.51 5.59 T:aes128gcmv1 5.64 5.73 5.80 T:deoxyseq128128v1 5.64 5.76 5.88 T:deoxyseq256128v1 5.76 5.84 5.93 T:deoxysi256v141 5.91 6.00 6.17 aes256gcmv1 4.53? 6.09? 10.12? T:aeadaes256ocbtaglen128v1 6.16 6.34 6.52 T:deoxysii128v141 7.70 7.81 7.88 T:norx6441v1 7.79 7.89 7.99 T:norx6441v2 7.83 7.92 8.06 T:deoxysii256v141 7.86 7.97 8.07 T:norx6441v3 9.63 9.71 9.78 T:norx3241v1 9.66 9.75 9.85 T:norx3241v2 9.70 9.79 9.96 T:norx3241v3 9.77 9.89 10.09 T:ascon128av11 9.87 9.99 10.18 T:ascon96v1 10.12 10.26 10.52 ascon128av12 10.44 10.62 10.88 T:lakekeyakv1 11.73 11.77 11.88 T:norx6461v1 11.83 11.90 11.98 T:norx6461v2 11.75 11.92 12.00 T:norx6461v3 12.34 12.53 12.79 T:lakekeyakv2 12.19 12.60 13.05 T:riverkeyakv2 12.85 12.92 13.07 T:ascon128v1 12.94 13.00 13.16 T:ascon128v11 13.17 13.31 13.40 ascon128v12 14.02 14.10 14.16 T:norx6444v3 14.62 14.73 14.91 T:norx3261v2 14.71 14.78 14.95 T:norx3261v3 16.43 16.51 16.53 T:norx3261v1 18.55 18.67 18.81 T:aes128n8clocv1 18.55 18.71 18.84 T:aes128n12clocv1 18.82 18.85 18.97 T:twine80n6t4clocv3 18.82 18.91 18.94 T:aes128otrsv1 18.88 18.97 19.01 T:aes128otrsv2 19.02 19.09 19.23 T:aes128otrpv1 19.09 19.14 19.43 T:aes128otrpv2 19.50 19.78 19.96 T:twine80n6t4clocv2 22.41 22.95 23.80 T:acorn128v2 22.86 23.57 24.21 T:ketjeminorv2 22.91 24.01 24.85 T:acorn128v3 24.48 24.59 24.79 T:aes256otrsv1 24.54 24.68 24.85 T:aes256otrsv2 25.04 25.09 25.23 T:aes256otrpv2 25.07 25.15 25.34 T:aes256otrpv1 27.80 28.02 28.65 T:norx6444v2 28.16 28.28 28.76 T:seakeyakv2 33.16 33.73 34.41 T:ketjemajorv2 33.70 33.84 34.05 T:norx6444v1 34.30 34.87 35.26 T:ketjesrv1 38.68 39.25 39.92 T:ketjesrv2 43.95 44.46 44.91 T:aeadaes128ocbtaglen64v1 44.54 44.64 44.77 T:aeadaes128ocbtaglen96v1 44.18 44.80 45.30 T:oceankeyakv2 48.46 49.16 49.43 T:ketjejrv1 51.92 52.08 52.61 T:aeadaes192ocbtaglen96v1 52.04 52.23 52.52 T:aeadaes192ocbtaglen64v1 57.01 57.70 58.14 T:proest256otrv1 60.84 61.14 61.48 T:aeadaes256ocbtaglen96v1 61.10 61.36 61.70 T:aeadaes256ocbtaglen64v1 63.91 64.55 65.70 T:colm127v1 74.27 75.87 77.12 T:deoxysneq128128v13 81.04 81.20 81.78 T:ketjejrv2 80.09 81.30 84.07 T:proest128otrv1 88.45 88.55 89.20 T:present80n6t4silcv3 99.60 99.97 100.23 T:aezv1 105.64 107.01 107.45 T:deoxyseq128128v13 110.37 111.20 111.55 T:deoxysneq256128v13 115.35 115.92 116.49 T:lunarkeyakv2 151.07 151.28 151.78 T:led80n6t4silcv3 158.58 159.23 159.96 T:deoxyseq256128v13 1440.29 1442.70 1450.14 T:acorn128 2200.48 2202.71 2203.82 T:led80n6t4silcv2 2202.05 2203.02 2203.93 T:led80n6silcv1 2605.31 2606.83 2624.08 T:present80n6t4silcv2 2614.16 2634.02 2677.62 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.74? 0.80? 0.91? T:aezv3 0.71? 0.92? 1.72? T:aezv4 0.96 0.98 1.01 T:aegis128l 1.04 1.05 1.09 aegis128l 1.12 1.16 1.18 T:aegis128 1.27 1.29 1.30 T:aegis256 1.30? 1.33? 1.56? T:tiaoxinv2 1.33? 1.36? 1.89? T:tiaoxinv1 1.39 1.42 1.45 aegis256 0.64? 1.64? 1.68? T:aezv5 2.07 2.10 2.15 T:aes128otrpv3 2.36 2.41 2.57 T:aes128n12t8clocv3 2.39 2.42 2.61 T:aes128n12t8clocv2 2.41? 2.47? 4.23? T:aes128n8t8clocv2 2.41 2.59 2.65 T:aes128otrsv3 2.56 2.59 2.65 T:aes128n8t8silcv2 2.51? 2.61? 4.51? T:aes128n12t8silcv3 2.59? 2.66? 4.56? T:aes128n12t8silcv2 2.80? 2.84? 3.14? T:colm0v1 2.93 2.95 3.02 T:aes256otrpv3 2.90? 2.97? 8.34? T:aeadaes192ocbtaglen128v1 3.02 3.05 3.09 T:aes128otrcv3 3.35 3.37 3.40 T:aes256otrsv3 3.40? 3.58? 3.80? T:aeadaes128ocbtaglen128v1 3.96 4.00 4.05 T:aes256otrcv3 4.18 4.20 4.29 T:morus640128v1 4.22? 4.32? 4.73? T:deoxysneq128128v1 4.28 4.34 4.41 T:morus1280128v1 4.27 4.35 4.41 T:morus1280256v1 4.41 4.49 4.75 T:aeadaes256ocbtaglen128v1 4.42? 4.51? 5.03? T:deoxysneq256128v1 4.52 4.58 4.65 T:morus1280128v2 4.55 4.62 4.67 T:morus1280256v2 4.56 4.63 4.70 T:morus640128v2 4.73 4.78 4.84 T:deoxysi128v141 5.27 5.45 5.66 T:aes128gcmv1 5.40 5.45 5.47 T:aesjambuv1 5.64 5.70 5.75 T:deoxyseq128128v1 5.66 5.76 5.88 T:deoxyseq256128v1 5.81 5.88 6.01 T:deoxysi256v141 5.92 6.05 6.20 aes256gcmv1 6.23 6.26 6.35 T:deoxysii128v141 7.73 7.77 7.80 T:norx6441v1 7.80 7.84 7.94 T:norx6441v2 7.77 7.87 8.06 T:deoxysii256v141 7.84 7.89 7.98 T:norx6441v3 9.70 9.73 9.78 T:norx3241v2 9.70 9.77 9.86 T:norx3241v1 9.69 9.80 9.90 T:norx3241v3 9.75 9.88 9.96 T:ascon128av11 10.05 10.19 10.27 ascon128av12 9.84 10.26 10.41 T:ascon96v1 10.38 10.67 11.02 T:lakekeyakv1 11.68 11.78 11.82 T:norx6461v1 11.72 11.82 11.92 T:norx6461v2 11.73 11.85 11.91 T:norx6461v3 12.23 12.37 12.77 T:riverkeyakv2 12.50 12.60 12.89 T:lakekeyakv2 12.80 12.90 12.95 T:ascon128v11 12.79 12.95 13.09 T:ascon128v1 13.12 13.23 13.40 ascon128v12 13.93 14.03 14.10 T:norx6444v3 14.56 14.71 14.80 T:norx3261v2 14.62 14.73 14.80 T:norx3261v3 16.34 16.41 16.50 T:norx3261v1 18.56 18.60 18.73 T:aes128n12clocv1 18.54 18.61 18.89 T:aes128n8clocv1 18.79 18.87 18.95 T:twine80n6t4clocv3 18.89 19.01 19.66 T:aes128otrsv1 18.93 19.01 19.77 T:aes128otrsv2 19.09 19.16 19.28 T:aes128otrpv2 19.12 19.19 19.25 T:aes128otrpv1 19.43 19.64 20.31 T:twine80n6t4clocv2 22.33 22.41 22.69 T:acorn128v2 22.90 23.18 23.50 T:acorn128v3 22.93 23.72 24.66 T:ketjeminorv2 24.52 24.65 24.77 T:aes256otrsv2 24.51 24.78 25.54 T:aes256otrsv1 25.08 25.17 25.81 T:aes256otrpv2 25.01 25.20 25.89 T:aes256otrpv1 27.85 27.99 28.23 T:norx6444v2 28.14 28.40 28.84 T:seakeyakv2 33.03 33.59 34.50 T:ketjemajorv2 33.55 33.78 34.30 T:norx6444v1 34.23 34.72 35.16 T:ketjesrv1 38.13 39.12 39.41 T:ketjesrv2 43.95 44.23 44.52 T:aeadaes128ocbtaglen64v1 44.32 44.41 44.56 T:aeadaes128ocbtaglen96v1 44.30 44.79 45.16 T:oceankeyakv2 48.77 49.26 49.83 T:ketjejrv1 51.83 51.94 52.14 T:aeadaes192ocbtaglen64v1 51.79 52.01 52.20 T:aeadaes192ocbtaglen96v1 54.77 54.98 56.23 T:proest256otrv1 60.60 60.94 61.37 T:aeadaes256ocbtaglen96v1 60.70 61.02 61.27 T:aeadaes256ocbtaglen64v1 63.64 64.16 65.07 T:colm127v1 74.43 75.05 75.88 T:deoxysneq128128v13 79.66 80.02 80.33 T:proest128otrv1 81.26 81.54 81.86 T:ketjejrv2 88.39 88.51 88.84 T:present80n6t4silcv3 99.52 100.07 100.63 T:aezv1 105.88 106.47 106.73 T:deoxyseq128128v13 110.32 110.45 111.92 T:deoxysneq256128v13 115.16 115.61 116.44 T:lunarkeyakv2 150.57 151.30 151.51 T:led80n6t4silcv3 158.49 159.19 160.62 T:deoxyseq256128v13 1435.23 1442.33 1446.96 T:acorn128 2199.79 2200.52 2201.75 T:led80n6t4silcv2 2202.53 2203.14 2204.27 T:led80n6silcv1 2604.80 2607.02 2616.13 T:present80n6t4silcv2 2606.47 2609.93 2622.27 T:present80n6silcv1