VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Raptor Cove (b06a2-40); 2024 Intel Core 5 210H, P cores; 4 x 2200MHz; freshwrap,big, supercop-20251222

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.17? 0.19? 0.21? T:tiaoxinv2 0.19 0.19 0.20 T:tiaoxinv1 0.23 0.24 0.24 aegis128l 0.23 0.24 0.25 T:aegis128l 0.15? 0.28? 0.32? T:aeadaes128ocbtaglen128v1 0.35 0.36 0.37 T:aezv3 0.35 0.36 0.37 T:aezv4 0.29? 0.37? 0.42? T:aeadaes256ocbtaglen128v1 0.39 0.39 0.40 T:aegis256 0.03? 0.40? 0.44? T:aeadaes192ocbtaglen128v1 0.39 0.40 0.41 aegis256 0.39 0.41 0.41 T:aezv5 0.40 0.41 0.42 T:aegis128 0.43 0.45 0.47 T:aes128otrsv3 0.44 0.46 0.47 T:aes128otrpv3 0.44? 0.47? 0.49? T:aes128otrcv3 0.56 0.58 0.62 T:aes256otrsv3 0.56 0.59 0.61 T:aes256otrpv3 0.57 0.61 0.63 T:aes256otrcv3 0.66 0.67 0.73 T:deoxysi128v141 0.67 0.68 0.69 T:morus1280256v2 0.67 0.68 0.70 T:morus1280128v2 0.68 0.69 0.70 T:morus1280256v1 0.68 0.69 0.70 T:morus1280128v1 0.68 0.70 0.74 T:deoxysneq128128v1 0.76 0.77 0.82 T:deoxysi256v141 0.77 0.79 0.82 T:deoxysneq256128v1 0.93 0.95 0.96 T:aes128gcmv1 1.04 1.06 1.08 aes256gcmv1 1.10 1.12 1.13 T:norx6444v3 1.17 1.18 1.19 T:morus640128v2 1.17 1.18 1.19 T:morus640128v1 1.38 1.39 1.40 T:colm0v1 1.40 1.41 1.43 T:deoxysii128v141 1.40 1.44 1.46 T:deoxyseq128128v1 1.56 1.57 1.60 T:deoxysii256v141 1.64 1.65 1.66 T:deoxyseq256128v1 1.81? 1.92? 2.05? T:lunarkeyakv2 2.03 2.05 2.07 T:norx6441v2 2.06 2.08 2.09 T:norx6441v3 2.18 2.19 2.19 T:aes128n12t8clocv2 2.18 2.19 2.20 T:aes128n12t8clocv3 2.18 2.19 2.20 T:aes128n12t8silcv2 2.18 2.20 2.21 T:aes128n12t8silcv3 2.19 2.20 2.21 T:aes128n8t8clocv2 2.18 2.20 2.21 T:aes128n8t8silcv2 2.44 2.46 2.47 T:norx6441v1 2.58 2.64 2.67 T:seakeyakv2 2.60 2.67 2.76 T:lakekeyakv1 2.58 2.68 2.76 T:oceankeyakv2 2.77 2.80 2.82 T:norx6444v2 2.92 2.98 3.03 T:lakekeyakv2 3.07 3.08 3.11 T:norx6461v3 3.07 3.09 3.11 T:norx6461v2 3.29 3.31 3.33 T:norx6444v1 3.60 3.62 3.64 T:norx3241v3 3.62 3.64 3.68 T:norx3241v2 3.70 3.72 3.74 T:norx6461v1 4.36 4.39 4.41 T:norx3241v1 4.38 4.39 4.40 T:aesjambuv1 4.61 4.70 4.77 T:acorn128v2 4.62 4.78 4.89 T:ketjemajorv2 4.66? 4.80? 5.37? T:acorn128v3 5.49 5.52 5.54 T:norx3261v3 5.56 5.59 5.62 T:norx3261v2 6.17 6.27 6.69 T:ketjeminorv2 6.68 6.75 6.77 T:ascon96v1 6.73 6.76 6.79 T:ascon128av11 6.70 6.78 6.89 ascon128av12 6.84 7.07 7.19 T:riverkeyakv2 7.49 7.51 7.53 T:norx3261v1 9.88 9.90 9.93 T:ascon128v1 9.88 9.90 9.93 T:ascon128v11 9.91 10.03 10.16 ascon128v12 11.05 11.08 11.12 T:aes128otrpv1 11.08 11.10 11.12 T:aes128otrsv2 11.09 11.10 11.12 T:aes128otrpv2 11.09 11.12 11.14 T:aes128otrsv1 14.80 14.82 14.85 T:aes256otrpv1 14.81 14.83 14.87 T:aes256otrpv2 14.84 15.26 15.31 T:aes256otrsv2 15.28 15.31 15.34 T:aes256otrsv1 15.33 15.36 15.38 T:twine80n6t4clocv3 16.02 16.20 16.30 T:twine80n6t4clocv2 17.37 17.43 17.48 T:proest256otrv1 20.51 20.59 20.67 T:ketjesrv1 20.90 20.92 20.95 T:aes128n8clocv1 20.92 20.94 20.99 T:aes128n12clocv1 20.93 20.97 21.05 T:aeadaes128ocbtaglen64v1 20.94 20.99 21.05 T:aeadaes128ocbtaglen96v1 22.74 22.81 22.87 T:ketjesrv2 24.87 24.93 25.00 T:aeadaes192ocbtaglen64v1 24.90 24.93 24.99 T:aeadaes192ocbtaglen96v1 28.84 28.92 28.99 T:aeadaes256ocbtaglen96v1 28.86 28.94 29.01 T:aeadaes256ocbtaglen64v1 38.79 39.10 40.18 T:ketjejrv1 40.74 40.86 40.97 T:proest128otrv1 45.55 45.62 45.83 T:colm127v1 56.60 56.84 57.27 T:deoxysneq128128v13 60.80 60.86 61.00 T:ketjejrv2 72.09 72.14 72.19 T:present80n6t4silcv3 83.82 84.18 84.42 T:deoxysneq256128v13 112.03 113.90 114.16 T:deoxyseq128128v13 127.19 127.34 127.42 T:led80n6t4silcv3 131.02 131.22 131.35 T:aezv1 168.45 169.99 170.26 T:deoxyseq256128v13 384.41 387.32 392.56 T:acorn128 2607.97 2608.52 2609.05 T:led80n6t4silcv2 2610.15 2611.37 2611.84 T:led80n6silcv1 3087.25 3092.07 3135.07 T:present80n6silcv1 3090.72 3120.03 3174.04 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.23? 0.23? 0.27? aegis128l 0.23 0.24 0.25 T:aegis128l 0.14? 0.29? 0.33? T:aeadaes128ocbtaglen128v1 0.24? 0.35? 0.38? T:aeadaes256ocbtaglen128v1 0.35? 0.35? 0.40? T:aezv3 0.35? 0.39? 0.41? T:aezv4 0.39 0.39 0.41 T:aezv5 0.39 0.39 0.40 T:aegis256 0.40 0.40 0.40 T:aegis128 0.34? 0.42? 0.44? T:aeadaes192ocbtaglen128v1 0.42 0.43 0.44 aegis256 0.43 0.44 0.45 T:tiaoxinv1 0.43 0.44 0.45 T:tiaoxinv2 0.45 0.47 0.49 T:aes128otrsv3 0.48 0.50 0.53 T:aes128otrcv3 0.49 0.51 0.54 T:aes128otrpv3 0.61 0.62 0.64 T:aes256otrsv3 0.61 0.63 0.65 T:aes256otrcv3 0.63 0.65 0.67 T:aes256otrpv3 0.67 0.68 0.69 T:morus1280128v2 0.67 0.68 0.69 T:morus1280256v1 0.67 0.68 0.69 T:morus1280128v1 0.67 0.69 0.70 T:morus1280256v2 0.67 0.69 0.70 T:aes128gcmv1 0.79 0.80 0.81 T:deoxysi128v141 0.80 0.81 0.82 T:deoxysneq128128v1 0.80 0.81 0.83 aes256gcmv1 0.86 0.88 0.89 T:deoxysi256v141 0.89 0.91 0.91 T:deoxysneq256128v1 1.08 1.11 1.13 T:norx6444v3 1.14 1.15 1.17 T:morus640128v2 1.15 1.15 1.16 T:morus640128v1 1.36 1.37 1.40 T:deoxysii128v141 1.38 1.40 1.41 T:colm0v1 1.51 1.53 1.57 T:deoxysii256v141 1.69 1.70 1.71 T:deoxyseq128128v1 1.76 1.77 1.78 T:deoxyseq256128v1 1.86 1.97 2.04 T:lunarkeyakv2 1.95 1.97 1.99 T:norx6441v2 1.97 1.99 2.00 T:norx6441v3 1.99? 2.01? 2.24? T:aes128n12t8silcv2 2.10 2.12 2.12 T:aes128n12t8silcv3 2.00 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.14 T:aes128n12t8clocv2 2.12 2.12 2.14 T:aes128n8t8clocv2 2.12 2.13 2.13 T:aes128n12t8clocv3 2.42 2.43 2.46 T:norx6441v1 2.67 2.70 2.77 T:seakeyakv2 2.62 2.72 2.81 T:oceankeyakv2 2.68 2.72 2.79 T:lakekeyakv1 2.78 2.83 2.88 T:norx6444v2 2.88 2.96 3.06 T:lakekeyakv2 3.03 3.05 3.07 T:norx6461v2 3.05 3.07 3.09 T:norx6461v3 3.30 3.39 3.42 T:norx6444v1 3.54 3.56 3.58 T:norx3241v3 3.55 3.56 3.57 T:norx3241v2 3.69 3.72 3.74 T:norx6461v1 4.28 4.32 4.35 T:norx3241v1 4.49 4.57 4.63 T:ketjemajorv2 4.67 4.69 4.69 T:aesjambuv1 4.73 4.80 4.85 T:acorn128v2 4.75 4.82 4.89 T:acorn128v3 5.47 5.50 5.53 T:norx3261v3 5.50 5.51 5.54 T:norx3261v2 6.11 6.25 6.42 T:ketjeminorv2 6.65 6.67 6.71 T:ascon128av11 6.57 6.71 6.73 T:ascon96v1 6.70 6.72 6.75 ascon128av12 6.89 6.97 7.07 T:riverkeyakv2 7.35 7.37 7.38 T:norx3261v1 9.84 9.87 9.89 T:ascon128v1 9.85 9.89 9.92 T:ascon128v11 9.98 10.01 10.10 ascon128v12 11.46 11.52 11.56 T:aes128otrsv1 11.50 11.54 11.57 T:aes128otrpv1 11.50 11.54 11.58 T:aes128otrpv2 11.48 11.55 11.59 T:aes128otrsv2 15.23 15.29 15.33 T:twine80n6t4clocv3 15.30 15.33 15.38 T:aes256otrpv2 15.32 15.37 15.43 T:aes256otrpv1 15.83 15.90 15.97 T:aes256otrsv2 15.91 15.95 16.01 T:aes256otrsv1 16.04 16.11 16.16 T:twine80n6t4clocv2 17.27 17.42 17.48 T:proest256otrv1 18.68 18.77 18.99 T:aes128n12clocv1 19.14 19.18 19.22 T:aes128n8clocv1 21.13 21.26 21.34 T:ketjesrv2 21.48 21.55 21.65 T:ketjesrv1 34.61 34.69 34.73 T:aeadaes128ocbtaglen64v1 34.67 34.77 34.85 T:aeadaes128ocbtaglen96v1 38.47 38.83 40.17 T:ketjejrv1 39.64 39.75 39.86 T:proest128otrv1 41.86 42.00 42.06 T:aeadaes192ocbtaglen96v1 41.93 42.02 42.07 T:aeadaes192ocbtaglen64v1 49.18 49.29 49.40 T:aeadaes256ocbtaglen64v1 49.31 49.37 49.47 T:aeadaes256ocbtaglen96v1 60.70 61.08 61.48 T:ketjejrv2 71.82 71.98 72.22 T:present80n6t4silcv3 73.28 73.38 73.51 T:colm127v1 74.33 74.68 75.37 T:deoxysneq128128v13 112.75 113.07 113.22 T:deoxyseq128128v13 113.66 113.96 114.22 T:deoxysneq256128v13 127.21 127.28 127.42 T:led80n6t4silcv3 130.48 130.77 130.94 T:aezv1 168.09 170.37 170.52 T:deoxyseq256128v13 374.31 386.36 391.20 T:acorn128 2606.53 2607.78 2608.27 T:led80n6t4silcv2 2608.07 2608.87 2610.30 T:led80n6silcv1 3082.39 3086.48 3153.45 T:present80n6t4silcv2 3082.75 3100.31 3152.59 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.07? 0.13? 0.20? T:aezv4 0.13 0.13 0.14 T:aezv3 0.15? 0.16? 0.22? T:aezv5 0.23 0.24 0.25 T:aegis128l 0.24 0.24 0.25 aegis128l 0.27? 0.28? 0.31? T:aeadaes128ocbtaglen128v1 -0.04? 0.33? 0.72? T:aeadaes256ocbtaglen128v1 0.38 0.39 0.40 T:aegis256 0.40 0.40 0.41 T:aegis128 0.39? 0.41? 0.79? T:aeadaes192ocbtaglen128v1 0.40? 0.43? 0.45? aegis256 0.43? 0.44? 0.48? T:tiaoxinv1 0.44 0.44 0.45 T:tiaoxinv2 0.49 0.50 0.53 T:aes128otrcv3 0.49 0.51 0.54 T:aes128otrsv3 0.50 0.51 0.53 T:aes128otrpv3 0.60 0.61 0.62 T:aes256otrcv3 0.61 0.62 0.63 T:aes256otrsv3 0.60 0.62 0.64 T:aes256otrpv3 0.68 0.68 0.69 T:morus1280128v2 0.67 0.68 0.68 T:morus1280256v1 0.67 0.68 0.70 T:morus1280256v2 0.67 0.68 0.69 T:morus1280128v1 0.68 0.69 0.70 T:aes128gcmv1 0.79 0.81 0.83 T:deoxysi128v141 0.80 0.82 0.83 aes256gcmv1 0.80 0.82 0.83 T:deoxysneq128128v1 0.85 0.87 0.88 T:deoxysi256v141 0.90 0.91 0.95 T:deoxysneq256128v1 1.09 1.10 1.13 T:norx6444v3 1.14 1.15 1.17 T:morus640128v2 1.14 1.16 1.18 T:morus640128v1 1.36 1.37 1.38 T:deoxysii128v141 1.38 1.40 1.50 T:colm0v1 1.51 1.52 1.54 T:deoxysii256v141 1.69 1.70 1.71 T:deoxyseq128128v1 1.76 1.77 1.78 T:deoxyseq256128v1 1.85 1.97 2.05 T:lunarkeyakv2 1.95 1.97 1.98 T:norx6441v2 1.98 1.99 2.00 T:norx6441v3 2.10 2.12 2.15 T:aes128n12t8silcv3 2.11 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.13 T:aes128n12t8clocv2 2.12 2.12 2.13 T:aes128n12t8clocv3 2.12 2.12 2.13 T:aes128n8t8clocv2 1.99? 2.13? 2.24? T:aes128n12t8silcv2 2.43 2.45 2.47 T:norx6441v1 2.68 2.72 2.74 T:seakeyakv2 2.63 2.73 2.80 T:oceankeyakv2 2.65 2.75 2.90 T:lakekeyakv1 2.77 2.82 2.86 T:norx6444v2 2.93 3.02 3.05 T:lakekeyakv2 3.06 3.07 3.09 T:norx6461v2 3.05 3.07 3.08 T:norx6461v3 3.34 3.39 3.42 T:norx6444v1 3.54 3.55 3.58 T:norx3241v3 3.55 3.57 3.59 T:norx3241v2 3.71 3.74 3.77 T:norx6461v1 4.28 4.31 4.34 T:norx3241v1 4.51 4.60 4.67 T:ketjemajorv2 4.67 4.68 4.69 T:aesjambuv1 4.67 4.81 4.85 T:acorn128v2 4.80 4.86 4.95 T:acorn128v3 5.48 5.50 5.55 T:norx3261v3 5.49 5.51 5.52 T:norx3261v2 6.12 6.25 6.37 T:ketjeminorv2 6.58 6.67 6.74 T:ascon96v1 6.64 6.68 6.70 T:ascon128av11 6.68 6.70 6.72 ascon128av12 6.81 6.89 6.96 T:riverkeyakv2 7.35 7.37 7.38 T:norx3261v1 9.87 9.89 9.92 T:ascon128v1 9.87 9.89 9.93 T:ascon128v11 10.03 10.07 10.10 ascon128v12 11.43 11.47 11.56 T:aes128otrsv1 11.50 11.55 11.58 T:aes128otrpv2 11.51 11.57 11.59 T:aes128otrpv1 11.48 11.57 11.63 T:aes128otrsv2 15.25 15.33 15.35 T:twine80n6t4clocv3 15.30 15.37 15.41 T:aes256otrpv1 15.28 15.39 15.40 T:aes256otrpv2 15.88 15.92 15.99 T:aes256otrsv1 15.90 15.95 16.03 T:aes256otrsv2 16.01 16.10 16.15 T:twine80n6t4clocv2 17.31 17.39 17.42 T:proest256otrv1 18.70 18.81 19.01 T:aes128n12clocv1 19.10 19.17 19.24 T:aes128n8clocv1 21.13 21.22 21.32 T:ketjesrv2 21.51 21.55 21.64 T:ketjesrv1 34.64 34.72 34.75 T:aeadaes128ocbtaglen96v1 34.72 34.77 34.80 T:aeadaes128ocbtaglen64v1 38.52 38.82 40.21 T:ketjejrv1 39.57 39.69 39.82 T:proest128otrv1 41.94 42.01 42.12 T:aeadaes192ocbtaglen64v1 41.92 42.03 42.09 T:aeadaes192ocbtaglen96v1 49.21 49.29 49.37 T:aeadaes256ocbtaglen64v1 49.33 49.46 49.58 T:aeadaes256ocbtaglen96v1 61.32 61.48 61.77 T:ketjejrv2 71.87 71.98 72.19 T:present80n6t4silcv3 71.71 72.31 72.46 T:colm127v1 74.05 74.15 74.44 T:deoxysneq128128v13 112.65 113.15 113.75 T:deoxyseq128128v13 113.55 113.81 114.40 T:deoxysneq256128v13 127.12 127.18 127.28 T:led80n6t4silcv3 130.55 130.71 130.88 T:aezv1 169.10 170.41 170.84 T:deoxyseq256128v13 374.99 384.38 395.85 T:acorn128 2607.00 2607.45 2608.00 T:led80n6t4silcv2 2609.66 2610.39 2611.43 T:led80n6silcv1 3075.22 3083.98 3099.92 T:present80n6silcv1 3084.13 3089.87 3140.96 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.14? 0.15? 0.17? T:tiaoxinv2 0.14? 0.16? 0.17? T:tiaoxinv1 0.21 0.21 0.22 aegis128l 0.21 0.21 0.22 T:aegis128l 0.17? 0.25? 0.29? T:aeadaes128ocbtaglen128v1 0.25 0.26 0.27 T:aezv4 0.24? 0.26? 0.28? T:aezv3 0.27 0.28 0.28 T:aezv5 0.13? 0.32? 0.51? T:aeadaes256ocbtaglen128v1 0.26? 0.36? 0.43? T:aeadaes192ocbtaglen128v1 0.38 0.39 0.39 T:aegis256 0.38 0.39 0.39 aegis256 0.39 0.39 0.40 T:aegis128 0.45 0.46 0.48 T:aes128otrpv3 0.46 0.47 0.48 T:aes128otrcv3 0.58 0.59 0.60 T:aes256otrpv3 0.59 0.61 0.62 T:aes256otrcv3 0.61 0.63 0.64 T:aes128gcmv1 0.65 0.66 0.67 T:morus1280256v2 0.66 0.66 0.67 T:morus1280128v1 0.66 0.67 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280128v2 0.67 0.68 0.70 T:deoxysi128v141 0.68 0.69 0.70 aes256gcmv1 0.69 0.70 0.72 T:deoxysneq128128v1 0.75 0.76 0.79 T:deoxysi256v141 0.77 0.79 0.80 T:deoxysneq256128v1 0.97 0.98 0.99 T:colm0v1 1.04 1.05 1.07 T:deoxysii128v141 1.06 1.08 1.10 T:deoxyseq128128v1 1.13 1.14 1.16 T:morus640128v1 1.14 1.15 1.16 T:morus640128v2 1.16 1.17 1.18 T:deoxysii256v141 1.23 1.24 1.25 T:deoxyseq256128v1 1.28 1.29 1.29 T:aes128otrsv3 1.59 1.60 1.62 T:norx6444v3 1.72 1.72 1.73 T:aes256otrsv3 2.04 2.05 2.06 T:norx6441v2 2.05 2.05 2.07 T:norx6441v3 2.16 2.17 2.17 T:aes128n12t8clocv2 2.16 2.17 2.17 T:aes128n12t8silcv2 2.16 2.17 2.18 T:aes128n12t8clocv3 2.17 2.17 2.18 T:aes128n8t8clocv2 2.17 2.17 2.18 T:aes128n12t8silcv3 2.16 2.17 2.17 T:aes128n8t8silcv2 2.18 2.21 2.26 T:seakeyakv2 2.19 2.23 2.28 T:oceankeyakv2 2.45 2.47 2.48 T:norx6441v1 2.55 2.60 2.65 T:lakekeyakv1 2.55 2.60 2.65 T:lakekeyakv2 2.65 2.69 2.71 T:norx6444v2 2.64 2.70 2.74 T:lunarkeyakv2 3.09 3.11 3.12 T:norx6461v3 3.10 3.11 3.13 T:norx6461v2 3.20 3.22 3.25 T:norx6444v1 3.63 3.64 3.65 T:norx3241v3 3.67 3.68 3.70 T:norx3241v2 3.69 3.70 3.72 T:norx6461v1 4.08 4.13 4.16 T:ketjemajorv2 4.34 4.35 4.35 T:aesjambuv1 4.39 4.40 4.41 T:norx3241v1 4.60? 4.67? 5.32? T:acorn128v3 4.84 4.87 4.91 T:acorn128v2 4.99 5.20 5.25 T:riverkeyakv2 5.51 5.52 5.56 T:norx3261v2 5.52 5.55 5.58 T:norx3261v3 5.64? 5.85? 6.48? T:ketjeminorv2 6.55 6.61 6.63 T:ascon128av11 6.59 6.61 6.64 T:ascon96v1 6.71 6.77 6.81 ascon128av12 7.51 7.52 7.53 T:norx3261v1 9.75 9.77 9.81 T:ascon128v1 9.76 9.78 9.81 T:ascon128v11 9.98 10.07 10.15 ascon128v12 10.80 10.83 10.85 T:aes128otrpv2 10.83 10.84 10.85 T:aes128otrpv1 11.20 11.22 11.23 T:aes128otrsv1 11.21 11.23 11.24 T:aes128otrsv2 14.54 14.55 14.57 T:aes256otrpv1 14.55 14.58 14.59 T:aes256otrpv2 14.65 14.67 14.72 T:aes256otrsv1 14.67 14.68 14.72 T:aes256otrsv2 15.07 15.09 15.17 T:twine80n6t4clocv3 15.75 15.84 15.93 T:twine80n6t4clocv2 16.13 16.14 16.17 T:aes128n8clocv1 16.13 16.18 16.26 T:aes128n12clocv1 17.48 17.59 17.68 T:proest256otrv1 19.67 19.71 20.02 T:ketjesrv1 20.66 20.70 20.73 T:aeadaes128ocbtaglen64v1 20.62 20.72 20.76 T:aeadaes128ocbtaglen96v1 21.48 21.53 21.57 T:ketjesrv2 24.60 24.63 24.68 T:aeadaes192ocbtaglen64v1 24.62 24.67 24.69 T:aeadaes192ocbtaglen96v1 28.59 28.62 28.68 T:aeadaes256ocbtaglen64v1 28.62 28.70 28.75 T:aeadaes256ocbtaglen96v1 34.12 34.24 34.34 T:colm127v1 35.96 36.90 37.16 T:ketjejrv1 39.90 39.98 40.03 T:proest128otrv1 56.11 56.21 56.31 T:deoxysneq128128v13 58.82 58.97 59.11 T:ketjejrv2 71.60 71.65 71.69 T:present80n6t4silcv3 83.40 83.49 84.59 T:deoxysneq256128v13 83.82 83.98 84.54 T:deoxyseq128128v13 85.96 86.08 86.19 T:aezv1 126.65 126.71 126.81 T:led80n6t4silcv3 127.26 127.62 127.73 T:deoxyseq256128v13 400.77 424.47 425.43 T:acorn128 1956.22 1956.76 1957.78 T:led80n6t4silcv2 1957.19 1957.78 1958.18 T:led80n6silcv1 2313.61 2316.31 2331.59 T:present80n6t4silcv2 2311.34 2320.91 2353.83 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.20 0.21 0.21 T:aegis128l 0.20? 0.23? 0.24? aegis128l 0.18? 0.24? 0.26? T:aeadaes128ocbtaglen128v1 0.24? 0.26? 0.27? T:aezv4 0.25 0.26 0.26 T:aezv3 0.27 0.27 0.28 T:aezv5 0.26 0.28 0.28 T:tiaoxinv2 0.26? 0.28? 0.29? T:tiaoxinv1 0.13? 0.29? 0.50? T:aeadaes256ocbtaglen128v1 0.19? 0.37? 0.57? T:aeadaes192ocbtaglen128v1 0.38 0.38 0.39 T:aegis256 0.39 0.39 0.39 T:aegis128 0.38? 0.41? 0.43? aegis256 0.47 0.49 0.50 T:aes128otrpv3 0.48 0.49 0.50 T:aes128otrcv3 0.48 0.50 0.51 T:aes128gcmv1 0.55 0.57 0.57 aes256gcmv1 0.61 0.62 0.63 T:aes256otrpv3 0.61 0.62 0.63 T:aes256otrcv3 0.66 0.66 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280128v1 0.66 0.67 0.67 T:morus1280128v2 0.66 0.67 0.67 T:morus1280256v2 0.73 0.74 0.74 T:deoxysi128v141 0.75 0.75 0.76 T:deoxysneq128128v1 0.81 0.82 0.83 T:deoxysi256v141 0.82 0.83 0.84 T:deoxysneq256128v1 0.97 0.99 1.00 T:colm0v1 1.01 1.03 1.04 T:deoxysii128v141 1.10 1.12 1.14 T:morus640128v2 1.12 1.13 1.14 T:morus640128v1 1.13 1.14 1.18 T:deoxysii256v141 1.20 1.21 1.22 T:deoxyseq128128v1 1.28 1.29 1.31 T:deoxyseq256128v1 1.30 1.30 1.31 T:aes128otrsv3 1.57 1.58 1.60 T:norx6444v3 1.74 1.75 1.75 T:aes256otrsv3 2.03 2.04 2.05 T:norx6441v2 2.04 2.05 2.06 T:norx6441v3 2.12 2.12 2.18 T:aes128n12t8silcv3 2.06 2.12 2.19 T:aes128n12t8silcv2 2.12 2.13 2.19 T:aes128n8t8silcv2 2.12 2.13 2.14 T:aes128n12t8clocv3 2.12 2.13 2.19 T:aes128n8t8clocv2 2.12 2.13 2.19 T:aes128n12t8clocv2 2.21 2.25 2.27 T:seakeyakv2 2.21 2.28 2.34 T:oceankeyakv2 2.43 2.44 2.46 T:norx6441v1 2.54 2.57 2.65 T:lakekeyakv2 2.57 2.61 2.65 T:lakekeyakv1 2.67 2.70 2.73 T:norx6444v2 2.66 2.73 2.76 T:lunarkeyakv2 3.06 3.08 3.09 T:norx6461v3 3.08 3.09 3.10 T:norx6461v2 3.22 3.25 3.27 T:norx6444v1 3.60 3.62 3.63 T:norx3241v3 3.61 3.62 3.63 T:norx3241v2 3.65 3.67 3.69 T:norx6461v1 3.95 4.01 4.07 T:ketjemajorv2 4.34 4.35 4.37 T:norx3241v1 4.49 4.49 4.50 T:aesjambuv1 4.70 4.77 4.84 T:acorn128v3 4.71? 5.15? 5.34? T:acorn128v2 5.21 5.25 5.27 T:riverkeyakv2 5.47 5.51 5.52 T:norx3261v2 5.50 5.52 5.55 T:norx3261v3 5.56 5.67 5.71 T:ketjeminorv2 6.52 6.55 6.58 T:ascon128av11 6.53 6.56 6.61 T:ascon96v1 6.68 6.69 6.72 ascon128av12 7.43 7.44 7.45 T:norx3261v1 9.72 9.74 9.76 T:ascon128v11 9.73 9.75 9.77 T:ascon128v1 10.04 10.08 10.11 ascon128v12 11.03 11.05 11.08 T:aes128otrpv1 11.03 11.07 11.08 T:aes128otrpv2 11.40 11.42 11.45 T:aes128otrsv1 11.42 11.45 11.48 T:aes128otrsv2 14.79 14.81 14.83 T:aes256otrpv1 14.77 14.81 14.84 T:aes256otrpv2 14.96 14.98 15.04 T:aes256otrsv2 14.99 15.02 15.06 T:aes256otrsv1 15.03 15.07 15.21 T:aes128n12clocv1 15.05 15.12 15.15 T:twine80n6t4clocv3 15.22 15.27 15.30 T:aes128n8clocv1 15.78 15.82 15.84 T:twine80n6t4clocv2 17.38 17.55 17.65 T:proest256otrv1 20.17 20.23 20.54 T:ketjesrv1 20.70 20.74 20.77 T:ketjesrv2 27.50 27.53 27.57 T:aeadaes128ocbtaglen64v1 27.53 27.57 27.60 T:aeadaes128ocbtaglen96v1 33.14 33.20 33.25 T:aeadaes192ocbtaglen64v1 33.14 33.23 33.31 T:aeadaes192ocbtaglen96v1 36.60 37.16 37.24 T:ketjejrv1 38.81 38.88 38.94 T:aeadaes256ocbtaglen64v1 38.86 38.91 38.95 T:aeadaes256ocbtaglen96v1 39.27 39.64 39.70 T:proest128otrv1 47.96 48.04 48.12 T:colm127v1 59.15 59.25 59.32 T:ketjejrv2 64.95 65.07 65.18 T:deoxysneq128128v13 71.50 71.55 71.65 T:present80n6t4silcv3 83.61 83.83 84.09 T:deoxyseq128128v13 85.83 85.98 86.06 T:aezv1 98.01 98.21 98.91 T:deoxysneq256128v13 125.93 126.49 127.74 T:deoxyseq256128v13 126.64 126.72 126.80 T:led80n6t4silcv3 388.10 416.72 423.86 T:acorn128 1955.10 1955.42 1955.97 T:led80n6t4silcv2 1957.01 1957.58 1958.05 T:led80n6silcv1 2311.06 2318.44 2328.87 T:present80n6t4silcv2 2311.09 2320.32 2355.95 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.11? 0.12? 0.18? T:aezv4 0.14 0.15 0.15 T:aezv3 0.12? 0.15? 0.18? T:aezv5 0.21 0.21 0.21 T:aegis128l 0.21 0.22 0.22 aegis128l 0.23? 0.24? 0.27? T:aeadaes128ocbtaglen128v1 0.27 0.28 0.29 T:tiaoxinv2 0.28 0.28 0.29 T:tiaoxinv1 0.30 0.32 0.33 T:aeadaes256ocbtaglen128v1 0.38 0.38 0.38 T:aegis256 0.37 0.38 0.40 T:aeadaes192ocbtaglen128v1 0.38 0.39 0.39 T:aegis128 0.41 0.41 0.43 aegis256 0.48 0.49 0.49 T:aes128otrcv3 0.49 0.49 0.49 T:aes128otrpv3 0.49 0.50 0.51 T:aes128gcmv1 0.56 0.57 0.57 aes256gcmv1 0.60 0.61 0.62 T:aes256otrpv3 0.62 0.63 0.63 T:aes256otrcv3 0.66 0.66 0.67 T:morus1280128v1 0.66 0.67 0.68 T:morus1280256v2 0.66 0.67 0.67 T:morus1280128v2 0.66 0.67 0.67 T:morus1280256v1 0.73 0.74 0.74 T:deoxysi128v141 0.75 0.75 0.76 T:deoxysneq128128v1 0.81 0.82 0.82 T:deoxysi256v141 0.83 0.83 0.86 T:deoxysneq256128v1 0.97 0.99 1.02 T:colm0v1 1.01 1.02 1.06 T:deoxysii128v141 1.10 1.11 1.12 T:morus640128v2 1.12 1.13 1.14 T:morus640128v1 1.13 1.15 1.19 T:deoxysii256v141 1.21 1.21 1.22 T:deoxyseq128128v1 1.29 1.29 1.30 T:deoxyseq256128v1 1.30 1.30 1.31 T:aes128otrsv3 1.57 1.58 1.59 T:norx6444v3 1.74 1.74 1.75 T:aes256otrsv3 2.03 2.04 2.05 T:norx6441v2 2.05 2.05 2.06 T:norx6441v3 2.06 2.06 2.20 T:aes128n12t8silcv2 2.12 2.13 2.19 T:aes128n12t8clocv2 2.12 2.13 2.19 T:aes128n8t8clocv2 2.12 2.13 2.19 T:aes128n8t8silcv2 2.13 2.14 2.20 T:aes128n12t8silcv3 2.07 2.19 2.19 T:aes128n12t8clocv3 2.24 2.27 2.29 T:seakeyakv2 2.22 2.29 2.32 T:oceankeyakv2 2.43 2.44 2.46 T:norx6441v1 2.53 2.59 2.65 T:lakekeyakv2 2.62 2.64 2.70 T:lakekeyakv1 2.68 2.71 2.73 T:norx6444v2 2.70 2.72 2.76 T:lunarkeyakv2 3.06 3.07 3.09 T:norx6461v3 3.07 3.09 3.10 T:norx6461v2 3.20 3.24 3.27 T:norx6444v1 3.61 3.62 3.62 T:norx3241v3 3.60 3.62 3.63 T:norx3241v2 3.65 3.66 3.68 T:norx6461v1 3.98 4.05 4.10 T:ketjemajorv2 4.34 4.36 4.38 T:norx3241v1 4.49 4.50 4.50 T:aesjambuv1 4.72 4.75 4.84 T:acorn128v3 4.78 4.93 5.13 T:acorn128v2 5.06 5.24 5.27 T:riverkeyakv2 5.49 5.50 5.53 T:norx3261v2 5.50 5.52 5.54 T:norx3261v3 5.63 5.68 5.76 T:ketjeminorv2 6.51 6.54 6.56 T:ascon128av11 6.52 6.55 6.57 T:ascon96v1 6.67 6.71 6.73 ascon128av12 7.43 7.44 7.45 T:norx3261v1 9.74 9.74 9.76 T:ascon128v1 9.72 9.76 9.77 T:ascon128v11 10.04 10.07 10.10 ascon128v12 11.02 11.06 11.08 T:aes128otrpv1 11.04 11.08 11.10 T:aes128otrpv2 11.42 11.44 11.46 T:aes128otrsv1 11.43 11.45 11.47 T:aes128otrsv2 14.77 14.82 14.85 T:aes256otrpv1 14.80 14.82 14.85 T:aes256otrpv2 14.97 15.01 15.06 T:aes256otrsv1 15.00 15.04 15.07 T:aes256otrsv2 15.03 15.07 15.17 T:aes128n12clocv1 15.04 15.13 15.15 T:twine80n6t4clocv3 15.22 15.28 15.33 T:aes128n8clocv1 15.76 15.78 15.86 T:twine80n6t4clocv2 17.53 17.59 17.83 T:proest256otrv1 20.11 20.17 20.47 T:ketjesrv1 20.68 20.74 20.79 T:ketjesrv2 27.49 27.54 27.59 T:aeadaes128ocbtaglen64v1 27.52 27.55 27.59 T:aeadaes128ocbtaglen96v1 33.13 33.18 33.22 T:aeadaes192ocbtaglen96v1 33.22 33.28 33.34 T:aeadaes192ocbtaglen64v1 35.64 35.86 37.17 T:ketjejrv1 38.80 38.87 38.90 T:aeadaes256ocbtaglen64v1 38.87 38.91 38.99 T:aeadaes256ocbtaglen96v1 39.47 39.83 39.94 T:proest128otrv1 47.32 47.60 47.71 T:colm127v1 59.00 59.09 59.20 T:ketjejrv2 64.93 65.40 65.51 T:deoxysneq128128v13 71.48 71.53 71.64 T:present80n6t4silcv3 83.60 83.71 84.93 T:deoxyseq128128v13 85.88 85.94 86.02 T:aezv1 98.55 98.71 99.44 T:deoxysneq256128v13 126.62 126.73 126.79 T:led80n6t4silcv3 127.25 127.33 127.69 T:deoxyseq256128v13 390.06 416.58 423.77 T:acorn128 1955.23 1956.02 1956.30 T:led80n6t4silcv2 1956.50 1957.03 1957.50 T:led80n6silcv1 2313.10 2315.43 2322.71 T:present80n6t4silcv2 2313.14 2317.99 2329.76 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.11? 0.12? 0.13? T:tiaoxinv1 0.11? 0.12? 0.13? T:tiaoxinv2 0.15? 0.16? 0.18? T:aezv3 0.17 0.17 0.18 T:aezv5 0.16? 0.18? 0.19? T:aezv4 0.18 0.19 0.19 T:aegis128l 0.18 0.19 0.19 aegis128l 0.16? 0.24? 0.28? T:aeadaes128ocbtaglen128v1 -0.06? 0.29? 0.66? T:aeadaes256ocbtaglen128v1 0.28? 0.31? 0.32? T:aes128gcmv1 0.27? 0.31? 0.32? aes256gcmv1 0.37 0.37 0.38 aegis256 0.37 0.38 0.38 T:aegis256 0.37 0.38 0.38 T:aegis128 0.29? 0.40? 0.76? T:aeadaes192ocbtaglen128v1 0.45 0.47 0.48 T:aes128otrpv3 0.47 0.49 0.52 T:aes128otrcv3 0.56 0.59 0.60 T:colm0v1 0.57 0.59 0.60 T:aes256otrpv3 0.60? 0.64? 0.67? T:aes256otrcv3 0.64 0.64 0.65 T:morus1280128v1 0.64 0.64 0.65 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280256v1 0.65 0.68 0.71 T:deoxysi128v141 0.67 0.68 0.69 T:deoxysii128v141 0.68 0.69 0.71 T:deoxysneq128128v1 0.68 0.72 0.75 T:deoxyseq128128v1 0.75 0.76 0.79 T:deoxysi256v141 0.75 0.77 0.78 T:deoxysneq256128v1 0.76 0.77 0.78 T:deoxysii256v141 0.81 0.83 0.84 T:deoxyseq256128v1 1.09 1.10 1.12 T:morus640128v2 1.09 1.11 1.12 T:morus640128v1 1.68? 1.75? 1.88? T:lunarkeyakv2 1.70 1.75 1.83 T:oceankeyakv2 2.01 2.02 2.04 T:norx6441v3 2.02 2.04 2.05 T:norx6441v2 2.06 2.08 2.09 T:norx6444v3 2.11 2.12 2.12 T:aes128n12t8clocv3 2.10 2.12 2.13 T:aes128otrsv3 2.11 2.12 2.12 T:aes128n12t8clocv2 2.11 2.12 2.12 T:aes128n8t8clocv2 2.11 2.12 2.13 T:aes128n12t8silcv3 2.11 2.12 2.13 T:aes128n12t8silcv2 2.10 2.12 2.17 T:seakeyakv2 2.12 2.12 2.13 T:aes128n8t8silcv2 2.31 2.36 2.41 T:lakekeyakv2 2.33 2.37 2.45 T:lakekeyakv1 2.44 2.47 2.48 T:norx6441v1 2.50 2.55 2.59 T:norx6444v2 2.87 2.87 2.88 T:aes256otrsv3 3.01 3.04 3.09 T:norx6444v1 3.10 3.11 3.13 T:norx6461v3 3.10 3.12 3.15 T:norx6461v2 3.38 3.46 3.55 T:ketjemajorv2 3.64 3.66 3.68 T:norx3241v3 3.64 3.67 3.69 T:norx3241v2 3.67 3.69 3.70 T:norx6461v1 4.31 4.31 4.32 T:aesjambuv1 4.38 4.41 4.42 T:norx3241v1 4.41 4.46 4.52 T:acorn128v3 4.73 4.83 4.91 T:riverkeyakv2 4.77 4.83 4.88 T:acorn128v2 4.89 4.99 5.12 T:ketjeminorv2 5.44 5.47 5.50 T:norx3261v2 5.53 5.55 5.57 T:norx3261v3 6.37 6.39 6.47 T:ascon128av11 6.43 6.46 6.53 T:ascon96v1 6.67 6.69 6.72 ascon128av12 7.50 7.51 7.52 T:norx3261v1 9.56 9.62 9.63 T:ascon128v1 9.60 9.63 9.65 T:ascon128v11 10.04 10.07 10.13 ascon128v12 10.50 10.53 10.55 T:aes128otrpv2 10.52 10.55 10.58 T:aes128otrpv1 11.28 11.30 11.33 T:aes128otrsv2 11.29 11.30 11.34 T:aes128otrsv1 11.32 11.35 11.37 T:aes128n8clocv1 11.35 11.37 11.51 T:aes128n12clocv1 14.01 14.08 14.11 T:aes256otrsv1 14.06 14.09 14.13 T:aes256otrsv2 14.21 14.24 14.26 T:aes256otrpv1 14.22 14.26 14.28 T:aes256otrpv2 14.75 14.78 14.97 T:twine80n6t4clocv3 15.58 15.60 15.63 T:twine80n6t4clocv2 17.75 17.86 18.54 T:proest256otrv1 18.75 18.85 19.43 T:ketjesrv1 20.20 20.26 20.36 T:ketjesrv2 20.34 20.42 20.46 T:aeadaes128ocbtaglen64v1 20.42 20.47 20.51 T:aeadaes128ocbtaglen96v1 22.63 22.74 22.86 T:colm127v1 24.36 24.40 24.47 T:aeadaes192ocbtaglen96v1 24.38 24.44 24.48 T:aeadaes192ocbtaglen64v1 28.25 28.48 28.52 T:aeadaes256ocbtaglen96v1 28.43 28.48 28.52 T:aeadaes256ocbtaglen64v1 32.79 33.13 33.65 T:ketjejrv1 38.79 39.02 39.20 T:proest128otrv1 41.40 41.45 41.49 T:aezv1 55.14 55.31 55.44 T:deoxyseq128128v13 55.37 55.49 55.69 T:deoxysneq128128v13 57.39 57.53 57.67 T:ketjejrv2 71.15 71.19 71.24 T:present80n6t4silcv3 83.59 83.69 84.54 T:deoxysneq256128v13 83.68 83.89 84.35 T:deoxyseq256128v13 126.01 126.17 126.24 T:led80n6t4silcv3 373.05 373.86 379.01 T:acorn128 1303.23 1303.69 1304.37 T:led80n6t4silcv2 1304.34 1304.87 1305.35 T:led80n6silcv1 1540.28 1542.28 1545.05 T:present80n6silcv1 1542.66 1546.22 1665.93 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.11? 0.12? 0.13? T:tiaoxinv2 0.11? 0.13? 0.14? T:tiaoxinv1 0.16? 0.17? 0.18? T:aezv3 0.17 0.17 0.18 T:aezv5 0.17? 0.18? 0.19? T:aezv4 0.18 0.19 0.19 T:aegis128l 0.19? 0.19? 0.23? aegis128l 0.20? 0.24? 0.27? T:aeadaes128ocbtaglen128v1 -0.06? 0.29? 0.67? T:aeadaes256ocbtaglen128v1 0.29 0.30 0.32 T:aes128gcmv1 0.31 0.32 0.33 aes256gcmv1 0.36 0.37 0.37 T:aegis128 0.37 0.38 0.38 aegis256 0.01? 0.38? 0.41? T:aeadaes192ocbtaglen128v1 0.37 0.38 0.38 T:aegis256 0.46 0.47 0.49 T:aes128otrpv3 0.48 0.49 0.50 T:aes128otrcv3 0.55 0.57 0.61 T:colm0v1 0.57 0.59 0.61 T:aes256otrpv3 0.60 0.61 0.64 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280256v1 0.65 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280128v2 0.66 0.67 0.68 T:deoxysi128v141 0.67 0.68 0.69 T:deoxysii128v141 0.68 0.69 0.70 T:deoxysneq128128v1 0.71 0.72 0.72 T:deoxyseq128128v1 0.75 0.76 0.76 T:deoxysi256v141 0.75 0.76 0.78 T:deoxysii256v141 0.75 0.81 0.82 T:deoxysneq256128v1 0.79 0.81 0.82 T:deoxyseq256128v1 1.07 1.08 1.10 T:morus640128v2 1.09 1.10 1.12 T:morus640128v1 1.72 1.76 1.83 T:oceankeyakv2 1.71 1.76 1.90 T:lunarkeyakv2 2.05 2.06 2.08 T:norx6444v3 2.07 2.09 2.10 T:norx6441v3 2.08 2.09 2.10 T:norx6441v2 2.08 2.10 2.17 T:seakeyakv2 2.01 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.12 T:aes128otrsv3 2.11 2.12 2.13 T:aes128n12t8clocv3 2.11 2.12 2.13 T:aes128n12t8silcv3 2.11 2.12 2.23 T:aes128n12t8clocv2 2.11 2.13 2.13 T:aes128n8t8silcv2 2.12 2.13 2.25 T:aes128n8t8clocv2 2.31 2.35 2.40 T:lakekeyakv2 2.35 2.40 2.50 T:lakekeyakv1 2.44 2.45 2.46 T:norx6441v1 2.52 2.56 2.60 T:norx6444v2 2.86 2.87 2.88 T:aes256otrsv3 2.96 3.08 3.20 T:norx6444v1 3.06 3.08 3.10 T:norx6461v3 3.09 3.11 3.13 T:norx6461v2 3.41 3.47 3.56 T:ketjemajorv2 3.65 3.67 3.69 T:norx6461v1 3.64 3.67 3.69 T:norx3241v3 3.66 3.68 3.69 T:norx3241v2 4.30 4.31 4.32 T:aesjambuv1 4.40 4.42 4.44 T:norx3241v1 4.42 4.46 4.53 T:acorn128v3 4.56 4.76 5.05 T:acorn128v2 4.76 4.81 4.86 T:riverkeyakv2 5.01 5.09 5.21 T:ketjeminorv2 5.43 5.47 5.48 T:norx3261v2 5.53 5.55 5.56 T:norx3261v3 6.36 6.43 6.49 T:ascon128av11 6.37 6.45 6.50 T:ascon96v1 6.64 6.69 6.71 ascon128av12 7.51 7.52 7.54 T:norx3261v1 9.59 9.61 9.68 T:ascon128v11 9.60 9.62 9.65 T:ascon128v1 10.07 10.09 10.14 ascon128v12 10.50 10.54 10.58 T:aes128otrpv1 10.50 10.55 10.59 T:aes128otrpv2 11.26 11.34 11.36 T:aes128otrsv1 11.26 11.34 11.38 T:aes128otrsv2 11.34 11.35 11.40 T:aes128n8clocv1 11.35 11.39 11.41 T:aes128n12clocv1 14.02 14.06 14.14 T:aes256otrsv2 14.04 14.07 14.16 T:aes256otrsv1 14.21 14.23 14.29 T:aes256otrpv1 14.22 14.25 14.31 T:aes256otrpv2 14.80 14.84 15.00 T:twine80n6t4clocv3 15.45 15.55 15.63 T:twine80n6t4clocv2 17.80 17.87 18.73 T:proest256otrv1 18.71 18.82 19.46 T:ketjesrv1 20.17 20.27 20.35 T:ketjesrv2 20.38 20.42 20.48 T:aeadaes128ocbtaglen64v1 20.40 20.44 20.51 T:aeadaes128ocbtaglen96v1 22.44 22.83 22.91 T:colm127v1 24.40 24.43 24.47 T:aeadaes192ocbtaglen64v1 24.39 24.46 24.53 T:aeadaes192ocbtaglen96v1 28.40 28.46 28.50 T:aeadaes256ocbtaglen64v1 28.31 28.47 28.52 T:aeadaes256ocbtaglen96v1 32.58 33.71 34.25 T:ketjejrv1 39.39 39.71 40.00 T:proest128otrv1 41.20 41.32 41.42 T:aezv1 54.86 55.10 55.23 T:deoxyseq128128v13 55.02 55.17 55.34 T:deoxysneq128128v13 56.29 56.75 57.36 T:ketjejrv2 71.05 71.15 71.25 T:present80n6t4silcv3 83.53 83.85 84.78 T:deoxyseq256128v13 83.88 84.74 84.93 T:deoxysneq256128v13 126.00 126.14 126.24 T:led80n6t4silcv3 363.39 372.00 374.36 T:acorn128 1303.80 1304.64 1305.58 T:led80n6t4silcv2 1304.78 1305.10 1305.82 T:led80n6silcv1 1543.51 1544.49 1551.60 T:present80n6t4silcv2 1537.84 1558.93 1666.42 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.11 0.11 0.12 T:tiaoxinv2 0.11? 0.12? 0.16? T:tiaoxinv1 0.16 0.17 0.17 T:aezv3 0.16? 0.17? 0.18? T:aezv4 0.17 0.17 0.17 T:aezv5 0.18 0.19 0.19 aegis128l 0.18 0.19 0.19 T:aegis128l 0.22? 0.24? 0.28? T:aeadaes128ocbtaglen128v1 0.26? 0.30? 0.34? T:aeadaes256ocbtaglen128v1 0.29 0.30 0.32 T:aes128gcmv1 0.31 0.32 0.33 aes256gcmv1 0.37 0.37 0.38 T:aegis128 0.37 0.38 0.38 T:aegis256 0.31? 0.38? 0.43? aegis256 0.37? 0.38? 0.76? T:aeadaes192ocbtaglen128v1 0.46 0.47 0.47 T:aes128otrpv3 0.47 0.49 0.50 T:aes128otrcv3 0.56 0.57 0.58 T:colm0v1 0.58 0.59 0.60 T:aes256otrpv3 0.61 0.62 0.63 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280128v2 0.65 0.65 0.66 T:morus1280128v1 0.64 0.65 0.67 T:morus1280256v1 0.64 0.66 0.67 T:morus1280256v2 0.67 0.67 0.68 T:deoxysi128v141 0.67 0.68 0.69 T:deoxysii128v141 0.68 0.69 0.73 T:deoxysneq128128v1 0.71 0.72 0.72 T:deoxyseq128128v1 0.75 0.76 0.77 T:deoxysi256v141 0.76 0.76 0.77 T:deoxysii256v141 0.76 0.81 0.81 T:deoxysneq256128v1 0.81 0.81 0.83 T:deoxyseq256128v1 1.07 1.08 1.11 T:morus640128v2 1.10 1.11 1.12 T:morus640128v1 1.69 1.73 1.81 T:lunarkeyakv2 1.71 1.79 1.83 T:oceankeyakv2 1.99 2.00 2.12 T:aes128n12t8silcv2 2.05 2.07 2.09 T:norx6444v3 2.08 2.09 2.11 T:norx6441v3 2.08 2.09 2.11 T:norx6441v2 2.08 2.10 2.15 T:seakeyakv2 2.00 2.12 2.12 T:aes128n12t8silcv3 2.12 2.12 2.12 T:aes128otrsv3 2.00 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.13 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n12t8clocv2 2.12 2.13 2.14 T:aes128n8t8clocv2 2.33 2.38 2.43 T:lakekeyakv1 2.35 2.40 2.43 T:lakekeyakv2 2.43 2.45 2.47 T:norx6441v1 2.52 2.56 2.63 T:norx6444v2 2.87 2.87 2.88 T:aes256otrsv3 3.02 3.05 3.13 T:norx6444v1 3.07 3.08 3.10 T:norx6461v3 3.09 3.11 3.13 T:norx6461v2 3.39 3.48 3.58 T:ketjemajorv2 3.64 3.66 3.67 T:norx3241v3 3.66 3.67 3.69 T:norx6461v1 3.66 3.68 3.69 T:norx3241v2 4.30 4.31 4.31 T:aesjambuv1 4.39 4.42 4.44 T:norx3241v1 4.42? 4.49? 5.31? T:acorn128v3 4.58 4.65 5.03 T:acorn128v2 4.62 4.80 4.90 T:riverkeyakv2 4.96 5.09 5.22 T:ketjeminorv2 5.43 5.47 5.50 T:norx3261v2 5.53 5.56 5.58 T:norx3261v3 6.39 6.47 6.51 T:ascon128av11 6.44 6.47 6.52 T:ascon96v1 6.67 6.68 6.71 ascon128av12 7.49 7.51 7.52 T:norx3261v1 9.59 9.62 9.64 T:ascon128v11 9.59 9.63 9.65 T:ascon128v1 10.04 10.06 10.12 ascon128v12 10.49 10.55 10.62 T:aes128otrpv1 10.51 10.56 10.61 T:aes128otrpv2 11.26 11.29 11.37 T:aes128otrsv1 11.27 11.31 11.37 T:aes128otrsv2 11.32 11.36 11.38 T:aes128n8clocv1 11.33 11.37 11.40 T:aes128n12clocv1 14.03 14.06 14.15 T:aes256otrsv1 14.02 14.07 14.14 T:aes256otrsv2 14.19 14.27 14.31 T:aes256otrpv1 14.26 14.28 14.34 T:aes256otrpv2 14.80 14.84 14.96 T:twine80n6t4clocv3 15.52 15.61 15.66 T:twine80n6t4clocv2 17.79 17.85 17.89 T:proest256otrv1 18.68 18.79 19.38 T:ketjesrv1 20.22 20.33 20.40 T:ketjesrv2 20.39 20.44 20.53 T:aeadaes128ocbtaglen64v1 20.40 20.45 20.49 T:aeadaes128ocbtaglen96v1 22.52 22.59 22.70 T:colm127v1 24.38 24.41 24.51 T:aeadaes192ocbtaglen96v1 24.40 24.46 24.51 T:aeadaes192ocbtaglen64v1 28.38 28.43 28.54 T:aeadaes256ocbtaglen64v1 28.44 28.47 28.53 T:aeadaes256ocbtaglen96v1 32.88 33.71 34.27 T:ketjejrv1 39.02 39.41 39.51 T:proest128otrv1 41.42 41.44 41.51 T:aezv1 54.91 55.30 55.74 T:deoxysneq128128v13 55.19 55.42 55.83 T:deoxyseq128128v13 56.86 57.25 57.67 T:ketjejrv2 71.12 71.17 71.24 T:present80n6t4silcv3 83.90 84.27 84.80 T:deoxysneq256128v13 84.02 84.61 84.81 T:deoxyseq256128v13 126.10 126.20 126.30 T:led80n6t4silcv3 363.58 370.04 372.56 T:acorn128 1303.47 1304.18 1304.76 T:led80n6t4silcv2 1304.29 1304.97 1305.40 T:led80n6silcv1 1539.97 1542.40 1589.26 T:present80n6silcv1 1541.43 1543.79 1548.56 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.20 0.20 0.21 T:tiaoxinv1 0.20 0.20 0.21 T:tiaoxinv2 0.24 0.24 0.25 T:aegis128l 0.24 0.24 0.26 aegis128l 0.30 0.31 0.33 T:aezv3 0.32 0.32 0.34 T:aezv4 0.32 0.33 0.34 T:aezv5 0.38? 0.39? 0.43? T:aeadaes128ocbtaglen128v1 0.42 0.42 0.42 T:aegis128 0.42 0.42 0.42 aegis256 0.42 0.42 0.42 T:aegis256 0.48? 0.49? 0.56? T:aeadaes192ocbtaglen128v1 0.48? 0.49? 0.71? T:aeadaes256ocbtaglen128v1 0.53 0.53 0.54 T:aes128otrpv3 0.59 0.60 0.60 T:aes128otrcv3 0.67 0.68 0.69 T:aes256otrpv3 0.74 0.74 0.75 T:aes128gcmv1 0.76 0.77 0.77 T:aes256otrcv3 0.78 0.79 0.82 T:deoxysi128v141 0.79 0.80 0.81 T:deoxysneq128128v1 0.81 0.81 0.81 T:morus1280128v1 0.81 0.81 0.81 T:morus1280256v1 0.81 0.82 0.83 aes256gcmv1 0.82 0.82 0.83 T:morus1280256v2 0.83 0.83 0.83 T:morus1280128v2 0.88 0.89 0.91 T:deoxysneq256128v1 0.90 0.91 0.94 T:deoxysi256v141 1.05 1.05 1.06 T:colm0v1 1.18 1.19 1.19 T:deoxysii128v141 1.19 1.20 1.20 T:deoxyseq128128v1 1.28 1.28 1.30 T:morus640128v1 1.28 1.29 1.29 T:morus640128v2 1.33 1.34 1.36 T:deoxysii256v141 1.34 1.35 1.35 T:aes128otrsv3 1.35 1.36 1.37 T:deoxyseq256128v1 1.81 1.81 1.82 T:aes256otrsv3 2.17 2.18 2.19 T:norx6444v3 2.18 2.20 2.20 T:aes128n8t8clocv2 2.19 2.20 2.20 T:aes128n12t8clocv2 2.20 2.20 2.20 T:aes128n8t8silcv2 2.20 2.20 2.21 T:aes128n12t8silcv3 2.19 2.20 2.20 T:aes128n12t8clocv3 2.20 2.21 2.21 T:aes128n12t8silcv2 2.36 2.37 2.38 T:norx6441v2 2.36 2.37 2.37 T:norx6441v3 2.74 2.75 2.76 T:norx6441v1 2.82 2.84 2.89 T:lakekeyakv2 3.04 3.05 3.09 T:lakekeyakv1 3.13 3.15 3.16 T:seakeyakv2 3.57 3.58 3.60 T:norx6461v3 3.59 3.59 3.60 T:norx6461v2 3.84 3.85 3.87 T:norx6444v2 3.90 3.92 3.94 T:norx3241v3 3.94 3.95 3.97 T:norx3241v2 4.10 4.12 4.16 T:oceankeyakv2 4.14 4.15 4.17 T:norx6461v1 4.38 4.38 4.38 T:aesjambuv1 4.55 4.58 4.59 T:norx6444v1 4.62 4.63 4.65 T:norx3241v1 5.30 5.32 5.35 T:ketjemajorv2 5.38 5.47 5.55 T:riverkeyakv2 5.64 5.66 5.67 T:acorn128v2 5.49 5.78 6.02 T:acorn128v3 5.94 5.96 5.97 T:norx3261v2 5.95 5.98 5.99 T:norx3261v3 6.38 6.43 6.66 T:ketjeminorv2 6.73 6.76 6.77 T:ascon128av11 6.74 6.76 6.78 T:ascon96v1 6.88 6.92 6.94 ascon128av12 7.12 7.16 7.19 T:lunarkeyakv2 7.91 7.93 7.93 T:norx3261v1 9.89 9.90 9.91 T:ascon128v1 9.88 9.91 9.93 T:ascon128v11 10.12 10.19 10.27 ascon128v12 11.14 11.16 11.17 T:aes128otrpv2 11.15 11.18 11.20 T:aes128otrpv1 11.50 11.51 11.53 T:aes128otrsv1 11.52 11.54 11.56 T:aes128otrsv2 14.98 14.99 15.00 T:aes256otrpv1 14.98 14.99 15.03 T:aes256otrpv2 15.07 15.10 15.13 T:aes256otrsv1 15.08 15.11 15.15 T:aes256otrsv2 15.24 15.25 15.33 T:twine80n6t4clocv3 15.95 15.97 16.08 T:twine80n6t4clocv2 16.27 16.29 16.31 T:aes128n8clocv1 16.27 16.32 16.36 T:aes128n12clocv1 19.15 19.26 19.36 T:proest256otrv1 20.30 20.36 20.59 T:ketjesrv1 21.21 21.27 21.31 T:aeadaes128ocbtaglen64v1 21.24 21.30 21.31 T:aeadaes128ocbtaglen96v1 22.23 22.25 22.29 T:ketjesrv2 25.27 25.30 25.33 T:aeadaes192ocbtaglen96v1 25.29 25.32 25.34 T:aeadaes192ocbtaglen64v1 29.35 29.38 29.43 T:aeadaes256ocbtaglen64v1 29.46 29.49 29.51 T:aeadaes256ocbtaglen96v1 34.83 34.91 34.96 T:colm127v1 36.31 37.57 37.63 T:ketjejrv1 41.63 41.65 41.70 T:proest128otrv1 56.40 56.45 56.53 T:deoxysneq128128v13 59.85 59.93 59.95 T:ketjejrv2 72.34 72.36 72.39 T:present80n6t4silcv3 84.00 84.14 85.01 T:deoxysneq256128v13 84.43 84.52 84.59 T:aezv1 84.72 84.75 85.16 T:deoxyseq128128v13 127.75 127.81 127.83 T:led80n6t4silcv3 127.50 128.69 128.81 T:deoxyseq256128v13 451.46 452.59 455.12 T:acorn128 1966.69 1966.92 1967.34 T:led80n6t4silcv2 1967.78 1968.10 1969.04 T:led80n6silcv1 2326.67 2329.32 2363.93 T:present80n6t4silcv2 2327.43 2350.33 2382.48 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.24 0.24 0.24 T:aegis128l 0.24 0.25 0.26 aegis128l 0.30 0.31 0.33 T:aezv3 0.32 0.32 0.33 T:tiaoxinv1 0.32 0.32 0.33 T:tiaoxinv2 0.32 0.32 0.33 T:aezv5 0.32 0.33 0.34 T:aezv4 0.38 0.39 0.42 T:aeadaes128ocbtaglen128v1 0.41 0.42 0.42 T:aegis128 0.42 0.42 0.42 T:aegis256 0.43 0.44 0.45 aegis256 0.48? 0.48? 0.72? T:aeadaes192ocbtaglen128v1 0.49? 0.51? 0.72? T:aeadaes256ocbtaglen128v1 0.54 0.55 0.57 T:aes128otrpv3 0.60 0.60 0.61 T:aes128otrcv3 0.60 0.61 0.61 T:aes128gcmv1 0.70 0.70 0.71 aes256gcmv1 0.71 0.71 0.72 T:aes256otrpv3 0.78 0.79 0.80 T:aes256otrcv3 0.81 0.82 0.82 T:morus1280256v1 0.82 0.82 0.83 T:morus1280128v1 0.82 0.83 0.83 T:morus1280128v2 0.83 0.83 0.84 T:morus1280256v2 0.90 0.90 0.91 T:deoxysi128v141 0.90 0.90 0.90 T:deoxysneq128128v1 0.98 0.98 0.99 T:deoxysneq256128v1 1.01 1.01 1.03 T:deoxysi256v141 1.06 1.07 1.08 T:colm0v1 1.19 1.19 1.23 T:deoxysii128v141 1.25 1.26 1.27 T:morus640128v1 1.25 1.26 1.28 T:morus640128v2 1.36 1.37 1.37 T:aes128otrsv3 1.36 1.37 1.42 T:deoxysii256v141 1.38 1.38 1.39 T:deoxyseq128128v1 1.44 1.45 1.46 T:deoxyseq256128v1 1.83 1.83 1.84 T:aes256otrsv3 2.14 2.14 2.21 T:aes128n12t8clocv3 2.14 2.14 2.16 T:aes128n8t8clocv2 2.14 2.14 2.21 T:aes128n12t8clocv2 2.14 2.15 2.15 T:aes128n12t8silcv3 2.14 2.15 2.15 T:aes128n8t8silcv2 2.15 2.15 2.23 T:aes128n12t8silcv2 2.16 2.17 2.18 T:norx6444v3 2.35 2.35 2.36 T:norx6441v3 2.37 2.37 2.39 T:norx6441v2 2.71 2.72 2.73 T:norx6441v1 2.82 2.85 2.91 T:lakekeyakv2 3.05 3.09 3.12 T:lakekeyakv1 3.18 3.19 3.22 T:seakeyakv2 3.55 3.56 3.57 T:norx6461v3 3.58 3.58 3.59 T:norx6461v2 3.85 3.87 3.91 T:norx6444v2 3.90 3.91 3.91 T:norx3241v3 3.90 3.91 3.92 T:norx3241v2 4.15 4.16 4.17 T:norx6461v1 4.14 4.17 4.21 T:oceankeyakv2 4.52 4.52 4.53 T:aesjambuv1 4.59 4.60 4.62 T:norx3241v1 4.59 4.60 4.62 T:norx6444v1 5.23 5.27 5.30 T:ketjemajorv2 5.37 5.52 5.55 T:riverkeyakv2 5.52 5.53 5.61 T:acorn128v3 5.68 5.85 5.89 T:acorn128v2 5.92 5.94 5.95 T:norx3261v2 5.96 5.99 6.00 T:norx3261v3 6.35 6.37 6.43 T:ketjeminorv2 6.67 6.70 6.72 T:ascon128av11 6.70 6.73 6.74 T:ascon96v1 6.85 6.86 6.88 ascon128av12 7.16 7.18 7.23 T:lunarkeyakv2 7.85 7.86 7.86 T:norx3261v1 9.86 9.88 9.89 T:ascon128v11 9.85 9.88 9.90 T:ascon128v1 10.16 10.19 10.22 ascon128v12 11.35 11.37 11.40 T:aes128otrpv1 11.37 11.40 11.42 T:aes128otrpv2 11.71 11.74 11.76 T:aes128otrsv1 11.74 11.76 11.78 T:aes128otrsv2 15.19 15.22 15.26 T:aes256otrpv1 15.21 15.23 15.26 T:aes256otrpv2 15.20 15.24 15.31 T:aes128n12clocv1 15.22 15.28 15.31 T:twine80n6t4clocv3 15.41 15.42 15.44 T:aes256otrsv1 15.41 15.44 15.47 T:aes128n8clocv1 15.42 15.45 15.48 T:aes256otrsv2 15.93 15.98 16.01 T:twine80n6t4clocv2 19.21 19.27 19.31 T:proest256otrv1 20.79 20.83 21.06 T:ketjesrv1 21.41 21.49 21.51 T:ketjesrv2 28.20 28.25 28.29 T:aeadaes128ocbtaglen64v1 28.26 28.28 28.32 T:aeadaes128ocbtaglen96v1 33.96 34.00 34.04 T:aeadaes192ocbtaglen64v1 33.98 34.01 34.03 T:aeadaes192ocbtaglen96v1 37.17 37.36 37.41 T:ketjejrv1 39.72 39.75 39.80 T:aeadaes256ocbtaglen64v1 39.80 39.82 39.89 T:aeadaes256ocbtaglen96v1 41.02 41.33 41.38 T:proest128otrv1 48.56 48.63 48.80 T:colm127v1 59.96 60.01 60.06 T:ketjejrv2 64.92 65.26 65.37 T:deoxysneq128128v13 72.24 72.28 72.41 T:present80n6t4silcv3 84.42 84.50 84.54 T:aezv1 84.66 84.77 85.22 T:deoxyseq128128v13 100.02 100.27 100.36 T:deoxysneq256128v13 127.68 127.71 127.84 T:led80n6t4silcv3 127.83 127.90 128.08 T:deoxyseq256128v13 441.60 445.49 450.48 T:acorn128 1965.91 1966.26 1966.59 T:led80n6t4silcv2 1966.74 1967.32 1967.87 T:led80n6silcv1 2326.40 2329.46 2338.31 T:present80n6silcv1 2328.69 2336.60 2363.77 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17? 0.17? 0.19? T:aezv3 0.18? 0.18? 0.22? T:aezv5 0.22 0.22 0.23 T:aezv4 0.24 0.24 0.24 T:aegis128l 0.25 0.25 0.26 aegis128l 0.32 0.32 0.33 T:tiaoxinv1 0.32 0.32 0.33 T:tiaoxinv2 0.38 0.39 0.40 T:aeadaes128ocbtaglen128v1 0.41 0.42 0.42 T:aegis128 0.42 0.42 0.42 T:aegis256 0.45 0.45 0.46 aegis256 0.48 0.48 0.49 T:aeadaes192ocbtaglen128v1 0.48 0.48 0.51 T:aeadaes256ocbtaglen128v1 0.55 0.56 0.56 T:aes128otrpv3 0.60 0.60 0.61 T:aes128otrcv3 0.61 0.61 0.62 T:aes128gcmv1 0.70 0.70 0.71 aes256gcmv1 0.71 0.71 0.71 T:aes256otrpv3 0.78 0.79 0.79 T:aes256otrcv3 0.81 0.82 0.83 T:morus1280128v1 0.82 0.82 0.82 T:morus1280256v1 0.82 0.83 0.83 T:morus1280128v2 0.83 0.83 0.84 T:morus1280256v2 0.89 0.89 0.90 T:deoxysneq128128v1 0.90 0.90 0.90 T:deoxysi128v141 0.97 0.97 0.98 T:deoxysneq256128v1 1.01 1.02 1.03 T:deoxysi256v141 1.07 1.07 1.08 T:colm0v1 1.19 1.19 1.20 T:deoxysii128v141 1.25 1.26 1.27 T:morus640128v2 1.26 1.26 1.27 T:morus640128v1 1.36 1.36 1.37 T:aes128otrsv3 1.36 1.37 1.39 T:deoxysii256v141 1.37 1.38 1.39 T:deoxyseq128128v1 1.44 1.45 1.45 T:deoxyseq256128v1 1.83 1.83 1.84 T:aes256otrsv3 2.14 2.14 2.21 T:aes128n12t8clocv3 2.14 2.14 2.15 T:aes128n12t8silcv3 2.14 2.14 2.23 T:aes128n8t8silcv2 2.15 2.16 2.16 T:norx6444v3 2.13 2.21 2.21 T:aes128n8t8clocv2 2.13 2.21 2.21 T:aes128n12t8clocv2 2.14 2.23 2.23 T:aes128n12t8silcv2 2.35 2.36 2.37 T:norx6441v3 2.37 2.38 2.38 T:norx6441v2 2.70 2.71 2.73 T:norx6441v1 2.81 2.86 2.91 T:lakekeyakv2 3.08 3.10 3.12 T:lakekeyakv1 3.18 3.19 3.22 T:seakeyakv2 3.56 3.56 3.57 T:norx6461v3 3.57 3.58 3.59 T:norx6461v2 3.85 3.87 3.91 T:norx6444v2 3.90 3.91 3.91 T:norx3241v3 3.90 3.91 3.92 T:norx3241v2 4.14 4.15 4.16 T:norx6461v1 4.15 4.17 4.19 T:oceankeyakv2 4.52 4.53 4.53 T:aesjambuv1 4.58 4.59 4.62 T:norx6444v1 4.60 4.61 4.62 T:norx3241v1 5.26 5.27 5.32 T:ketjemajorv2 5.35 5.40 5.52 T:riverkeyakv2 5.51 5.52 5.54 T:acorn128v3 5.46 5.83 5.87 T:acorn128v2 5.93 5.94 5.95 T:norx3261v2 5.96 5.98 6.01 T:norx3261v3 6.39 6.43 6.49 T:ketjeminorv2 6.67 6.68 6.70 T:ascon128av11 6.69 6.71 6.73 T:ascon96v1 6.83 6.84 6.85 ascon128av12 7.15 7.17 7.21 T:lunarkeyakv2 7.84 7.85 7.86 T:norx3261v1 9.85 9.86 9.88 T:ascon128v11 9.85 9.86 9.88 T:ascon128v1 10.17 10.22 10.23 ascon128v12 11.40 11.42 11.44 T:aes128otrpv1 11.41 11.43 11.46 T:aes128otrpv2 11.73 11.76 11.78 T:aes128otrsv1 11.77 11.79 11.81 T:aes128otrsv2 15.23 15.24 15.27 T:aes256otrpv1 15.23 15.25 15.29 T:aes256otrpv2 15.22 15.25 15.33 T:aes128n12clocv1 15.26 15.30 15.33 T:twine80n6t4clocv3 15.39 15.42 15.43 T:aes128n8clocv1 15.41 15.42 15.44 T:aes256otrsv1 15.41 15.43 15.45 T:aes256otrsv2 15.95 16.00 16.03 T:twine80n6t4clocv2 19.20 19.28 19.33 T:proest256otrv1 20.79 20.82 21.11 T:ketjesrv1 21.44 21.47 21.57 T:ketjesrv2 28.22 28.26 28.30 T:aeadaes128ocbtaglen64v1 28.21 28.30 28.32 T:aeadaes128ocbtaglen96v1 33.94 33.97 33.99 T:aeadaes192ocbtaglen96v1 33.95 33.98 34.03 T:aeadaes192ocbtaglen64v1 36.07 36.26 37.35 T:ketjejrv1 39.73 39.80 39.83 T:aeadaes256ocbtaglen64v1 39.82 39.85 39.89 T:aeadaes256ocbtaglen96v1 41.03 41.28 41.34 T:proest128otrv1 48.58 48.61 48.74 T:colm127v1 59.96 60.35 60.42 T:ketjejrv2 65.32 65.45 65.76 T:deoxysneq128128v13 72.25 72.28 72.31 T:present80n6t4silcv3 84.47 84.51 84.57 T:aezv1 84.80 85.04 85.31 T:deoxyseq128128v13 99.06 99.68 99.96 T:deoxysneq256128v13 127.42 127.64 127.75 T:deoxyseq256128v13 127.61 127.71 127.79 T:led80n6t4silcv3 440.61 441.17 451.05 T:acorn128 1965.88 1966.31 1966.73 T:led80n6t4silcv2 1966.87 1967.48 1967.72 T:led80n6silcv1 2326.59 2331.74 2365.63 T:present80n6t4silcv2 2331.01 2332.81 2338.19 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.91 0.96 0.98 T:aegis128 0.92? 0.98? 1.10? T:aegis128l 0.94? 0.98? 1.31? aegis128l 1.09? 1.14? 1.22? T:aezv3 1.23? 1.26? 1.70? T:tiaoxinv2 1.23? 1.27? 1.46? T:tiaoxinv1 1.27 1.29 1.34 T:aegis256 1.29 1.34 1.39 aegis256 1.13? 1.38? 1.59? T:aezv5 1.29? 1.42? 1.60? T:aezv4 2.07? 2.14? 2.74? T:aes128otrpv3 2.31? 2.52? 2.59? T:aes128otrsv3 2.62? 2.67? 3.14? T:colm0v1 2.77 2.80 2.93 T:aes128n8t8clocv2 2.75 2.84 2.90 T:aes128n12t8clocv3 2.83 2.84 2.98 T:aes128n12t8clocv2 2.91 2.93 2.98 T:deoxysneq128128v1 2.91 2.96 3.09 T:aes128n12t8silcv3 2.92 2.96 3.02 T:aes128n8t8silcv2 2.85 2.97 3.09 T:aes128otrcv3 2.88 3.01 3.14 T:aes256otrpv3 3.00 3.06 3.20 T:aes128n12t8silcv2 3.04? 3.11? 3.71? T:deoxysi128v141 3.25 3.29 3.45 T:aes256otrsv3 3.43 3.61 3.68 T:deoxysneq256128v1 3.31? 3.66? 8.81? T:aeadaes192ocbtaglen128v1 3.43? 3.77? 5.02? T:aeadaes128ocbtaglen128v1 3.82? 3.89? 4.32? T:aes256otrcv3 3.88 4.01 4.20 T:deoxysi256v141 3.99 4.05 4.35 T:deoxyseq128128v1 4.12 4.22 4.28 T:morus1280128v1 4.16 4.25 4.29 T:morus1280256v1 4.20 4.27 4.30 T:morus640128v1 4.38 4.42 4.52 T:morus1280128v2 4.39 4.45 4.50 T:morus1280256v2 4.55 4.57 4.64 T:morus640128v2 4.80 4.88 5.03 T:deoxyseq256128v1 4.17? 4.90? 9.94? T:aeadaes256ocbtaglen128v1 5.05 5.10 5.19 T:aesjambuv1 5.02 5.20 5.30 T:aes128gcmv1 5.40 5.46 5.51 T:deoxysii128v141 5.70 5.82 5.99 aes256gcmv1 6.40 6.53 6.58 T:deoxysii256v141 7.50 7.55 7.67 T:norx6441v2 7.57 7.69 7.80 T:norx6441v3 7.59 7.70 7.75 T:norx6441v1 9.44 9.49 9.59 T:norx3241v2 9.48 9.51 9.64 T:norx3241v1 9.47 9.57 9.73 T:norx3241v3 9.86 9.92 10.11 T:ascon128av11 9.92 9.97 10.08 T:ascon96v1 10.04 10.16 10.32 ascon128av12 10.47 10.60 11.14 T:lakekeyakv1 11.48 11.54 11.64 T:norx6461v2 11.42 11.62 11.70 T:norx6461v3 11.55 11.65 11.84 T:norx6461v1 12.57 12.69 13.11 T:lakekeyakv2 12.66 12.83 13.05 T:riverkeyakv2 12.90 12.93 13.06 T:ascon128v11 12.88 12.96 13.04 T:ascon128v1 13.12 13.37 13.45 ascon128v12 13.95 14.07 14.13 T:norx6444v3 14.34 14.50 14.59 T:norx3261v2 14.48 14.62 14.67 T:norx3261v3 16.16 16.24 16.31 T:norx3261v1 18.53 18.66 18.81 T:aes128otrsv2 18.62 18.66 18.80 T:aes128otrsv1 18.73 18.80 19.12 T:aes128otrpv2 18.77 18.84 18.99 T:aes128otrpv1 18.87 18.90 18.96 T:twine80n6t4clocv3 18.97 19.09 19.27 T:aes128n8clocv1 19.09 19.15 19.32 T:aes128n12clocv1 19.59 19.71 19.75 T:twine80n6t4clocv2 22.45 23.08 23.52 T:ketjeminorv2 22.72 23.23 24.05 T:acorn128v2 23.11 23.45 23.83 T:acorn128v3 24.24 24.31 24.54 T:aes256otrsv2 24.34 24.41 24.51 T:aes256otrsv1 24.70 24.79 24.85 T:aes256otrpv1 24.77 24.83 25.18 T:aes256otrpv2 27.66 27.85 28.70 T:norx6444v2 28.12 28.46 28.85 T:seakeyakv2 32.68 33.14 33.84 T:ketjemajorv2 33.47 33.58 33.87 T:norx6444v1 33.62 33.84 34.31 T:ketjesrv1 34.06 34.18 34.62 T:aeadaes128ocbtaglen64v1 34.28 34.54 34.98 T:aeadaes128ocbtaglen96v1 39.02 39.37 39.69 T:ketjesrv2 39.62 39.74 40.21 T:aeadaes192ocbtaglen64v1 39.78 39.89 40.19 T:aeadaes192ocbtaglen96v1 44.22 44.94 45.50 T:oceankeyakv2 46.59 46.78 47.00 T:aeadaes256ocbtaglen96v1 46.52 46.84 47.18 T:aeadaes256ocbtaglen64v1 48.06 49.14 49.66 T:ketjejrv1 49.80 50.85 51.45 T:colm127v1 55.30 55.61 58.38 T:proest256otrv1 63.88 64.45 65.40 T:deoxysneq128128v13 80.30 80.72 81.34 T:proest128otrv1 81.57 82.01 82.63 T:ketjejrv2 88.50 88.65 88.81 T:present80n6t4silcv3 95.00 95.41 96.53 T:deoxysneq256128v13 97.16 97.62 97.80 T:aezv1 106.20 106.89 107.89 T:deoxyseq128128v13 115.58 116.05 117.49 T:lunarkeyakv2 150.84 151.26 151.45 T:led80n6t4silcv3 158.33 158.60 158.97 T:deoxyseq256128v13 1434.75 1450.11 1453.52 T:acorn128 2201.65 2201.98 2204.41 T:led80n6t4silcv2 2202.95 2203.79 2204.59 T:led80n6silcv1 2604.65 2606.13 2618.84 T:present80n6t4silcv2 2610.91 2612.84 2629.02 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.96 0.98 1.05 T:aegis128l 1.02? 1.05? 1.41? aegis128l 1.12 1.15 1.18 T:aegis128 1.08? 1.16? 1.23? T:aezv5 1.12 1.16 1.20 T:aezv3 1.14? 1.21? 1.46? T:aezv4 1.27 1.30 1.37 T:aegis256 1.29? 1.33? 1.70? T:tiaoxinv2 1.36 1.38 1.41 aegis256 1.31? 1.41? 1.85? T:tiaoxinv1 2.02? 2.09? 2.29? T:aes128otrpv3 2.45? 2.52? 2.88? T:aes128n8t8clocv2 2.45? 2.56? 2.86? T:aes128n12t8clocv2 2.43? 2.62? 2.72? T:aes128otrsv3 2.51? 2.62? 2.90? T:aes128n12t8clocv3 2.65 2.76 2.93 T:aes128n12t8silcv2 2.68 2.81 2.88 T:aes128n12t8silcv3 2.81? 2.84? 3.27? T:colm0v1 2.80 2.87 3.09 T:aes128n8t8silcv2 2.89 2.94 3.08 T:aes256otrpv3 2.87? 2.95? 5.81? T:aeadaes192ocbtaglen128v1 3.02 3.07 3.20 T:aes128otrcv3 3.33 3.37 3.47 T:aes256otrsv3 3.35? 3.77? 4.69? T:aeadaes128ocbtaglen128v1 3.97 4.01 4.09 T:aes256otrcv3 4.23 4.28 4.37 T:morus640128v1 4.29 4.37 4.43 T:morus1280256v1 4.37 4.44 4.46 T:morus1280128v1 4.41 4.47 4.57 T:deoxysneq128128v1 4.55 4.59 4.73 T:morus640128v2 4.54 4.60 4.65 T:morus1280128v2 4.55 4.62 4.67 T:deoxysneq256128v1 4.59 4.63 4.74 T:morus1280256v2 4.82 4.86 4.90 T:deoxysi128v141 5.26 5.27 5.32 T:aesjambuv1 5.35 5.51 5.59 T:aes128gcmv1 5.64 5.73 5.80 T:deoxyseq128128v1 5.64 5.76 5.88 T:deoxyseq256128v1 5.76 5.84 5.93 T:deoxysi256v141 5.91 6.00 6.17 aes256gcmv1 4.53? 6.09? 10.12? T:aeadaes256ocbtaglen128v1 6.16 6.34 6.52 T:deoxysii128v141 7.70 7.81 7.88 T:norx6441v1 7.79 7.89 7.99 T:norx6441v2 7.83 7.92 8.06 T:deoxysii256v141 7.86 7.97 8.07 T:norx6441v3 9.63 9.71 9.78 T:norx3241v1 9.66 9.75 9.85 T:norx3241v2 9.70 9.79 9.96 T:norx3241v3 9.77 9.89 10.09 T:ascon128av11 9.87 9.99 10.18 T:ascon96v1 10.12 10.26 10.52 ascon128av12 10.44 10.62 10.88 T:lakekeyakv1 11.73 11.77 11.88 T:norx6461v1 11.83 11.90 11.98 T:norx6461v2 11.75 11.92 12.00 T:norx6461v3 12.34 12.53 12.79 T:lakekeyakv2 12.19 12.60 13.05 T:riverkeyakv2 12.85 12.92 13.07 T:ascon128v1 12.94 13.00 13.16 T:ascon128v11 13.17 13.31 13.40 ascon128v12 14.02 14.10 14.16 T:norx6444v3 14.62 14.73 14.91 T:norx3261v2 14.71 14.78 14.95 T:norx3261v3 16.43 16.51 16.53 T:norx3261v1 18.55 18.67 18.81 T:aes128n8clocv1 18.55 18.71 18.84 T:aes128n12clocv1 18.82 18.85 18.97 T:twine80n6t4clocv3 18.82 18.91 18.94 T:aes128otrsv1 18.88 18.97 19.01 T:aes128otrsv2 19.02 19.09 19.23 T:aes128otrpv1 19.09 19.14 19.43 T:aes128otrpv2 19.50 19.78 19.96 T:twine80n6t4clocv2 22.41 22.95 23.80 T:acorn128v2 22.86 23.57 24.21 T:ketjeminorv2 22.91 24.01 24.85 T:acorn128v3 24.48 24.59 24.79 T:aes256otrsv1 24.54 24.68 24.85 T:aes256otrsv2 25.04 25.09 25.23 T:aes256otrpv2 25.07 25.15 25.34 T:aes256otrpv1 27.80 28.02 28.65 T:norx6444v2 28.16 28.28 28.76 T:seakeyakv2 33.16 33.73 34.41 T:ketjemajorv2 33.70 33.84 34.05 T:norx6444v1 34.30 34.87 35.26 T:ketjesrv1 38.68 39.25 39.92 T:ketjesrv2 43.95 44.46 44.91 T:aeadaes128ocbtaglen64v1 44.54 44.64 44.77 T:aeadaes128ocbtaglen96v1 44.18 44.80 45.30 T:oceankeyakv2 48.46 49.16 49.43 T:ketjejrv1 51.92 52.08 52.61 T:aeadaes192ocbtaglen96v1 52.04 52.23 52.52 T:aeadaes192ocbtaglen64v1 57.01 57.70 58.14 T:proest256otrv1 60.84 61.14 61.48 T:aeadaes256ocbtaglen96v1 61.10 61.36 61.70 T:aeadaes256ocbtaglen64v1 63.91 64.55 65.70 T:colm127v1 74.27 75.87 77.12 T:deoxysneq128128v13 81.04 81.20 81.78 T:ketjejrv2 80.09 81.30 84.07 T:proest128otrv1 88.45 88.55 89.20 T:present80n6t4silcv3 99.60 99.97 100.23 T:aezv1 105.64 107.01 107.45 T:deoxyseq128128v13 110.37 111.20 111.55 T:deoxysneq256128v13 115.35 115.92 116.49 T:lunarkeyakv2 151.07 151.28 151.78 T:led80n6t4silcv3 158.58 159.23 159.96 T:deoxyseq256128v13 1440.29 1442.70 1450.14 T:acorn128 2200.48 2202.71 2203.82 T:led80n6t4silcv2 2202.05 2203.02 2203.93 T:led80n6silcv1 2605.31 2606.83 2624.08 T:present80n6t4silcv2 2614.16 2634.02 2677.62 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.74? 0.80? 0.91? T:aezv3 0.71? 0.92? 1.72? T:aezv4 0.96 0.98 1.01 T:aegis128l 1.04 1.05 1.09 aegis128l 1.12 1.16 1.18 T:aegis128 1.27 1.29 1.30 T:aegis256 1.30? 1.33? 1.56? T:tiaoxinv2 1.33? 1.36? 1.89? T:tiaoxinv1 1.39 1.42 1.45 aegis256 0.64? 1.64? 1.68? T:aezv5 2.07 2.10 2.15 T:aes128otrpv3 2.36 2.41 2.57 T:aes128n12t8clocv3 2.39 2.42 2.61 T:aes128n12t8clocv2 2.41? 2.47? 4.23? T:aes128n8t8clocv2 2.41 2.59 2.65 T:aes128otrsv3 2.56 2.59 2.65 T:aes128n8t8silcv2 2.51? 2.61? 4.51? T:aes128n12t8silcv3 2.59? 2.66? 4.56? T:aes128n12t8silcv2 2.80? 2.84? 3.14? T:colm0v1 2.93 2.95 3.02 T:aes256otrpv3 2.90? 2.97? 8.34? T:aeadaes192ocbtaglen128v1 3.02 3.05 3.09 T:aes128otrcv3 3.35 3.37 3.40 T:aes256otrsv3 3.40? 3.58? 3.80? T:aeadaes128ocbtaglen128v1 3.96 4.00 4.05 T:aes256otrcv3 4.18 4.20 4.29 T:morus640128v1 4.22? 4.32? 4.73? T:deoxysneq128128v1 4.28 4.34 4.41 T:morus1280128v1 4.27 4.35 4.41 T:morus1280256v1 4.41 4.49 4.75 T:aeadaes256ocbtaglen128v1 4.42? 4.51? 5.03? T:deoxysneq256128v1 4.52 4.58 4.65 T:morus1280128v2 4.55 4.62 4.67 T:morus1280256v2 4.56 4.63 4.70 T:morus640128v2 4.73 4.78 4.84 T:deoxysi128v141 5.27 5.45 5.66 T:aes128gcmv1 5.40 5.45 5.47 T:aesjambuv1 5.64 5.70 5.75 T:deoxyseq128128v1 5.66 5.76 5.88 T:deoxyseq256128v1 5.81 5.88 6.01 T:deoxysi256v141 5.92 6.05 6.20 aes256gcmv1 6.23 6.26 6.35 T:deoxysii128v141 7.73 7.77 7.80 T:norx6441v1 7.80 7.84 7.94 T:norx6441v2 7.77 7.87 8.06 T:deoxysii256v141 7.84 7.89 7.98 T:norx6441v3 9.70 9.73 9.78 T:norx3241v2 9.70 9.77 9.86 T:norx3241v1 9.69 9.80 9.90 T:norx3241v3 9.75 9.88 9.96 T:ascon128av11 10.05 10.19 10.27 ascon128av12 9.84 10.26 10.41 T:ascon96v1 10.38 10.67 11.02 T:lakekeyakv1 11.68 11.78 11.82 T:norx6461v1 11.72 11.82 11.92 T:norx6461v2 11.73 11.85 11.91 T:norx6461v3 12.23 12.37 12.77 T:riverkeyakv2 12.50 12.60 12.89 T:lakekeyakv2 12.80 12.90 12.95 T:ascon128v11 12.79 12.95 13.09 T:ascon128v1 13.12 13.23 13.40 ascon128v12 13.93 14.03 14.10 T:norx6444v3 14.56 14.71 14.80 T:norx3261v2 14.62 14.73 14.80 T:norx3261v3 16.34 16.41 16.50 T:norx3261v1 18.56 18.60 18.73 T:aes128n12clocv1 18.54 18.61 18.89 T:aes128n8clocv1 18.79 18.87 18.95 T:twine80n6t4clocv3 18.89 19.01 19.66 T:aes128otrsv1 18.93 19.01 19.77 T:aes128otrsv2 19.09 19.16 19.28 T:aes128otrpv2 19.12 19.19 19.25 T:aes128otrpv1 19.43 19.64 20.31 T:twine80n6t4clocv2 22.33 22.41 22.69 T:acorn128v2 22.90 23.18 23.50 T:acorn128v3 22.93 23.72 24.66 T:ketjeminorv2 24.52 24.65 24.77 T:aes256otrsv2 24.51 24.78 25.54 T:aes256otrsv1 25.08 25.17 25.81 T:aes256otrpv2 25.01 25.20 25.89 T:aes256otrpv1 27.85 27.99 28.23 T:norx6444v2 28.14 28.40 28.84 T:seakeyakv2 33.03 33.59 34.50 T:ketjemajorv2 33.55 33.78 34.30 T:norx6444v1 34.23 34.72 35.16 T:ketjesrv1 38.13 39.12 39.41 T:ketjesrv2 43.95 44.23 44.52 T:aeadaes128ocbtaglen64v1 44.32 44.41 44.56 T:aeadaes128ocbtaglen96v1 44.30 44.79 45.16 T:oceankeyakv2 48.77 49.26 49.83 T:ketjejrv1 51.83 51.94 52.14 T:aeadaes192ocbtaglen64v1 51.79 52.01 52.20 T:aeadaes192ocbtaglen96v1 54.77 54.98 56.23 T:proest256otrv1 60.60 60.94 61.37 T:aeadaes256ocbtaglen96v1 60.70 61.02 61.27 T:aeadaes256ocbtaglen64v1 63.64 64.16 65.07 T:colm127v1 74.43 75.05 75.88 T:deoxysneq128128v13 79.66 80.02 80.33 T:proest128otrv1 81.26 81.54 81.86 T:ketjejrv2 88.39 88.51 88.84 T:present80n6t4silcv3 99.52 100.07 100.63 T:aezv1 105.88 106.47 106.73 T:deoxyseq128128v13 110.32 110.45 111.92 T:deoxysneq256128v13 115.16 115.61 116.44 T:lunarkeyakv2 150.57 151.30 151.51 T:led80n6t4silcv3 158.49 159.19 160.62 T:deoxyseq256128v13 1435.23 1442.33 1446.96 T:acorn128 2199.79 2200.52 2201.75 T:led80n6t4silcv2 2202.53 2203.14 2204.27 T:led80n6silcv1 2604.80 2607.02 2616.13 T:present80n6t4silcv2 2606.47 2609.93 2622.27 T:present80n6silcv1