VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Gracemont (b06a2-20); 2024 Intel Core 5 210H, E cores; 4 x 1600MHz; freshwrap,little, supercop-20251222

[Page version: 20260120 12:53:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.22? 0.23? 0.25? T:tiaoxinv1 0.22? 0.24? 0.25? T:tiaoxinv2 0.24? 0.25? 0.27? aegis128l 0.38 0.39 0.40 T:aegis128 0.40 0.41 0.42 aegis256 0.43 0.43 0.45 T:aezv4 0.44 0.45 0.46 T:aezv3 0.46 0.48 0.49 T:aezv5 0.49 0.50 0.53 T:aeadaes128ocbtaglen128v1 0.52 0.53 0.54 T:aes128otrcv3 0.52 0.53 0.54 T:aes128otrpv3 0.52 0.53 0.55 T:aes128otrsv3 -1.42? 0.54? 0.64? T:aeadaes192ocbtaglen128v1 0.57 0.61 0.62 T:aeadaes256ocbtaglen128v1 0.66 0.67 0.68 T:aes256otrpv3 0.66 0.69 0.69 T:aes256otrcv3 0.68 0.69 0.70 T:aes256otrsv3 0.82 0.83 0.85 T:deoxysi128v141 0.89 0.91 0.92 T:deoxysneq128128v1 0.92 0.93 0.95 T:deoxysi256v141 0.94 0.95 0.96 T:aes128gcmv1 0.97 0.98 0.99 T:morus1280256v1 0.98 0.99 1.00 T:morus1280128v2 0.98 0.99 1.01 T:deoxysneq256128v1 0.98 1.00 1.01 T:morus1280128v1 0.99 1.00 1.01 T:morus1280256v2 1.07 1.08 1.09 aes256gcmv1 1.17 1.18 1.19 T:morus640128v2 1.17 1.18 1.20 T:morus640128v1 1.62 1.66 1.69 T:deoxysii128v141 1.77 1.82 1.83 T:deoxyseq128128v1 1.83 1.84 1.85 T:colm0v1 1.82 1.87 1.90 T:deoxysii256v141 2.07 2.08 2.10 T:deoxyseq256128v1 1.97 2.10 2.17 T:lunarkeyakv2 2.12 2.12 2.13 T:aes128n8t8clocv2 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.13 2.13 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n12t8clocv2 2.12 2.13 2.13 T:aes128n12t8silcv3 2.12 2.13 2.13 T:aes128n12t8silcv2 2.55 2.58 2.59 T:norx6444v3 2.60 2.65 2.70 T:norx6441v2 2.62 2.67 2.72 T:norx6441v3 2.75 2.78 2.85 T:seakeyakv2 2.79 2.88 2.93 T:oceankeyakv2 3.07 3.12 3.16 T:lakekeyakv1 3.18 3.23 3.25 T:norx6441v1 3.42 3.44 3.47 T:norx6444v2 3.39 3.54 3.56 T:lakekeyakv2 3.78 3.80 3.83 T:norx3241v3 3.78 3.82 3.83 T:norx3241v2 3.84 3.91 3.96 T:norx6444v1 3.94 3.98 4.02 T:norx6461v2 3.98 4.01 4.06 T:norx6461v3 4.26 4.29 4.30 T:aesjambuv1 4.58 4.61 4.63 T:norx3241v1 4.79 4.81 4.86 T:norx6461v1 5.48 5.51 5.52 T:acorn128v2 5.63 5.68 5.69 T:acorn128v3 5.66 5.71 5.76 T:norx3261v3 5.74 5.78 5.81 T:norx3261v2 6.00 6.04 6.14 T:ketjemajorv2 6.28 6.30 6.31 ascon128av12 6.44 6.46 6.48 T:ascon128av11 6.44 6.46 6.48 T:ascon96v1 7.29 7.31 7.33 T:norx3261v1 7.47 7.53 7.56 T:riverkeyakv2 8.26 8.31 8.32 T:ketjeminorv2 9.08 9.10 9.15 T:ascon128v1 9.09 9.10 9.15 T:ascon128v11 9.34 9.37 9.38 ascon128v12 11.68 11.75 11.84 T:aes128otrsv1 11.73 11.75 11.76 T:aes128otrpv2 11.73 11.75 11.77 T:aes128otrsv2 11.75 11.76 11.78 T:aes128otrpv1 14.51 14.52 14.55 T:twine80n6t4clocv3 15.20 15.23 15.26 T:aes256otrpv1 15.22 15.24 15.25 T:aes256otrpv2 15.39 15.45 15.51 T:aes256otrsv1 15.48 15.50 15.51 T:twine80n6t4clocv2 15.45 15.50 15.52 T:aes256otrsv2 20.06 20.13 20.34 T:proest256otrv1 20.50 20.51 20.54 T:aes128n12clocv1 20.54 20.56 20.59 T:aes128n8clocv1 22.77 22.79 22.82 T:aeadaes128ocbtaglen64v1 22.76 22.80 22.82 T:aeadaes128ocbtaglen96v1 26.33 26.65 26.70 T:ketjesrv1 26.95 26.99 27.06 T:aeadaes192ocbtaglen96v1 26.93 26.99 27.03 T:aeadaes192ocbtaglen64v1 27.24 27.43 27.51 T:ketjesrv2 31.14 31.19 31.25 T:aeadaes256ocbtaglen64v1 31.19 31.23 31.27 T:aeadaes256ocbtaglen96v1 44.87 45.04 45.66 T:proest128otrv1 49.35 49.40 49.50 T:colm127v1 49.70 50.52 51.07 T:ketjejrv1 67.15 68.03 68.20 T:deoxysneq128128v13 70.77 71.10 72.13 T:ketjejrv2 71.53 71.54 71.57 T:present80n6t4silcv3 121.44 122.05 122.36 T:deoxysneq256128v13 125.40 125.98 126.07 T:led80n6t4silcv3 128.85 129.72 130.35 T:aezv1 132.62 132.95 136.50 T:deoxyseq128128v13 243.51 243.67 243.93 T:deoxyseq256128v13 402.17 408.17 413.44 T:acorn128 3788.61 3794.60 3807.45 T:led80n6t4silcv2 3792.73 3800.93 3811.43 T:led80n6silcv1 3907.45 3910.34 3932.83 T:present80n6silcv1 3915.11 3916.95 3919.75 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.27 0.27 0.28 aegis128l 0.33 0.34 0.35 T:tiaoxinv1 0.34? 0.37? 0.38? T:tiaoxinv2 0.39 0.39 0.40 T:aegis128 0.42 0.44 0.45 T:aezv4 0.41 0.44 0.45 aegis256 0.43 0.45 0.45 T:aezv3 0.44? 0.48? 0.49? T:aezv5 0.51? 0.54? 0.57? T:aeadaes128ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrcv3 0.55 0.56 0.56 T:aes128otrpv3 0.56 0.57 0.58 T:aes128otrsv3 0.47? 0.60? 0.62? T:aeadaes192ocbtaglen128v1 0.70 0.70 0.71 T:aes256otrpv3 0.67 0.71 0.72 T:aeadaes256ocbtaglen128v1 0.70 0.72 0.73 T:aes256otrsv3 0.70 0.72 0.73 T:aes256otrcv3 0.88 0.92 0.93 T:deoxysi128v141 0.92 0.93 0.95 T:deoxysneq128128v1 0.96 0.97 0.98 T:aes128gcmv1 1.00 1.01 1.02 T:morus1280256v2 1.00 1.01 1.02 T:morus1280256v1 1.00 1.01 1.02 T:morus1280128v2 1.00 1.01 1.03 T:morus1280128v1 1.02 1.04 1.06 T:deoxysi256v141 1.08 1.10 1.13 T:deoxysneq256128v1 1.15 1.17 1.19 aes256gcmv1 1.17 1.18 1.19 T:morus640128v1 1.17 1.18 1.19 T:morus640128v2 1.65 1.67 1.69 T:deoxysii128v141 1.81 1.85 1.89 T:deoxysii256v141 1.83 1.85 1.87 T:deoxyseq128128v1 1.86 1.94 2.01 T:colm0v1 2.01 2.06 2.12 T:aes128n8t8silcv2 2.09 2.10 2.12 T:deoxyseq256128v1 2.06 2.11 2.11 T:aes128n12t8clocv3 2.06 2.11 2.11 T:aes128n12t8clocv2 2.06 2.11 2.11 T:aes128n8t8clocv2 2.01 2.12 2.12 T:aes128n12t8silcv3 2.01 2.12 2.12 T:aes128n12t8silcv2 2.04 2.16 2.24 T:lunarkeyakv2 2.50 2.53 2.55 T:norx6444v3 2.62 2.65 2.70 T:norx6441v2 2.62 2.66 2.69 T:norx6441v3 2.80 2.84 2.89 T:seakeyakv2 2.83 2.91 3.02 T:oceankeyakv2 3.12 3.17 3.21 T:lakekeyakv1 3.17 3.19 3.22 T:norx6441v1 3.37 3.41 3.42 T:lakekeyakv2 3.44 3.49 3.52 T:norx6444v2 3.71 3.73 3.74 T:norx3241v2 3.69 3.73 3.74 T:norx3241v3 3.87 3.92 4.00 T:norx6444v1 4.01 4.05 4.09 T:norx6461v3 4.00 4.07 4.12 T:norx6461v2 4.47 4.51 4.52 T:norx3241v1 4.57 4.58 4.58 T:aesjambuv1 4.73 4.77 4.81 T:norx6461v1 5.47 5.51 5.53 T:acorn128v2 5.62 5.66 5.69 T:norx3261v2 5.68 5.72 5.75 T:norx3261v3 5.82 5.85 5.94 T:ketjemajorv2 5.83 5.87 5.90 T:acorn128v3 6.30 6.31 6.33 ascon128av12 6.42 6.45 6.48 T:ascon96v1 6.45 6.48 6.51 T:ascon128av11 7.13 7.14 7.18 T:norx3261v1 7.54 7.60 7.63 T:riverkeyakv2 8.97 9.00 9.03 T:ascon128v1 8.98 9.02 9.06 T:ascon128v11 9.04 9.06 9.09 T:ketjeminorv2 9.34 9.35 9.37 ascon128v12 11.78 11.85 11.89 T:aes128otrsv1 11.81 11.91 11.97 T:aes128otrpv1 11.86 12.19 12.24 T:aes128otrpv2 11.91 12.21 12.25 T:aes128otrsv2 14.39 14.42 14.46 T:twine80n6t4clocv3 15.18 15.24 15.32 T:aes256otrsv1 15.29 15.40 15.45 T:aes256otrpv1 15.44 15.50 15.60 T:twine80n6t4clocv2 15.33 15.67 15.73 T:aes256otrpv2 15.68 15.70 15.76 T:aes256otrsv2 19.77 20.06 20.28 T:proest256otrv1 20.08 20.12 20.16 T:aes128n12clocv1 20.14 20.18 20.26 T:aes128n8clocv1 27.63 27.73 28.09 T:ketjesrv1 27.82 27.97 28.02 T:ketjesrv2 31.03 31.09 31.14 T:aeadaes128ocbtaglen96v1 31.07 31.10 31.17 T:aeadaes128ocbtaglen64v1 37.07 37.11 37.16 T:aeadaes192ocbtaglen64v1 37.06 37.13 37.17 T:aeadaes192ocbtaglen96v1 43.12 43.17 43.21 T:aeadaes256ocbtaglen64v1 43.12 43.19 43.24 T:aeadaes256ocbtaglen96v1 43.73 43.92 45.34 T:proest128otrv1 49.95 50.51 51.07 T:ketjejrv1 66.03 66.09 66.24 T:colm127v1 71.51 71.57 71.61 T:present80n6t4silcv3 72.51 72.70 72.92 T:ketjejrv2 91.79 92.52 93.81 T:deoxysneq128128v13 125.72 126.29 126.65 T:led80n6t4silcv3 128.87 129.84 130.37 T:aezv1 132.43 133.08 136.62 T:deoxyseq128128v13 149.62 150.01 150.52 T:deoxysneq256128v13 243.78 243.87 244.20 T:deoxyseq256128v13 404.49 406.78 412.92 T:acorn128 3789.39 3799.68 3813.88 T:led80n6t4silcv2 3794.21 3806.40 3811.48 T:led80n6silcv1 3908.88 3911.91 3931.62 T:present80n6silcv1 3914.27 3916.24 3923.04 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.12? 0.17? 0.17? T:aezv4 0.13? 0.17? 0.22? T:aezv3 0.18? 0.19? 0.23? T:aezv5 0.27 0.28 0.28 aegis128l 0.30? 0.34? 0.35? T:tiaoxinv2 0.33? 0.34? 0.37? T:tiaoxinv1 0.39 0.40 0.41 T:aegis128 0.41? 0.47? 0.48? aegis256 0.53 0.53 0.54 T:aeadaes128ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrcv3 0.55 0.56 0.57 T:aes128otrpv3 0.56 0.57 0.57 T:aes128otrsv3 0.59? 0.61? 2.53? T:aeadaes192ocbtaglen128v1 0.67 0.69 0.70 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.70 T:aes256otrsv3 0.70 0.70 0.71 T:aes256otrcv3 0.70 0.71 0.72 T:aes256otrpv3 0.89 0.91 0.94 T:deoxysi128v141 0.91 0.93 0.96 T:deoxysneq128128v1 0.95 0.96 0.97 T:aes128gcmv1 1.00 1.01 1.02 T:morus1280128v1 1.00 1.01 1.02 T:morus1280128v2 1.01 1.02 1.03 T:morus1280256v1 1.00 1.02 1.03 T:morus1280256v2 1.00 1.04 1.06 T:deoxysi256v141 1.07 1.12 1.14 T:deoxysneq256128v1 1.16 1.17 1.18 aes256gcmv1 1.17 1.18 1.20 T:morus640128v1 1.17 1.19 1.21 T:morus640128v2 1.64 1.65 1.66 T:deoxysii128v141 1.83 1.85 1.86 T:deoxysii256v141 1.83 1.86 1.88 T:deoxyseq128128v1 1.92 1.94 1.94 T:colm0v1 2.01 2.06 2.11 T:aes128n12t8clocv3 2.08 2.11 2.14 T:deoxyseq256128v1 2.01 2.11 2.11 T:aes128n8t8clocv2 2.06 2.11 2.11 T:aes128n12t8clocv2 2.06 2.13 2.13 T:aes128n12t8silcv2 1.99 2.13 2.13 T:aes128n8t8silcv2 2.06 2.13 2.13 T:aes128n12t8silcv3 2.08 2.19 2.29 T:lunarkeyakv2 2.50 2.53 2.56 T:norx6444v3 2.64 2.67 2.70 T:norx6441v3 2.65 2.69 2.71 T:norx6441v2 2.87 2.89 2.92 T:seakeyakv2 2.87 2.97 3.03 T:oceankeyakv2 3.15 3.18 3.22 T:lakekeyakv1 3.15 3.21 3.24 T:norx6441v1 3.39 3.43 3.43 T:lakekeyakv2 3.45 3.49 3.52 T:norx6444v2 3.71 3.72 3.73 T:norx3241v3 3.70 3.73 3.75 T:norx3241v2 3.90 3.95 4.00 T:norx6444v1 3.98 4.01 4.07 T:norx6461v3 4.03 4.06 4.10 T:norx6461v2 4.48 4.51 4.52 T:norx3241v1 4.57 4.58 4.58 T:aesjambuv1 4.75 4.78 4.80 T:norx6461v1 5.48 5.52 5.54 T:acorn128v2 5.65 5.66 5.69 T:norx3261v2 5.71 5.74 5.78 T:norx3261v3 5.86 5.87 6.00 T:ketjemajorv2 5.85 5.87 5.91 T:acorn128v3 6.32 6.33 6.36 ascon128av12 6.42 6.46 6.48 T:ascon96v1 6.46 6.49 6.50 T:ascon128av11 7.14 7.15 7.17 T:norx3261v1 7.60 7.61 7.65 T:riverkeyakv2 8.97 9.00 9.02 T:ascon128v11 8.97 9.00 9.04 T:ascon128v1 9.04 9.06 9.08 T:ketjeminorv2 9.35 9.36 9.39 ascon128v12 11.84 11.88 11.99 T:aes128otrsv1 11.86 11.91 11.97 T:aes128otrpv1 11.90 11.97 12.27 T:aes128otrsv2 12.23 12.25 12.27 T:aes128otrpv2 14.42 14.43 14.46 T:twine80n6t4clocv3 15.25 15.28 15.32 T:aes256otrsv1 15.30 15.36 15.48 T:aes256otrpv1 15.40 15.49 15.59 T:twine80n6t4clocv2 15.33 15.70 15.75 T:aes256otrpv2 15.71 15.73 15.77 T:aes256otrsv2 19.92 20.13 20.32 T:proest256otrv1 20.10 20.13 20.16 T:aes128n12clocv1 20.18 20.22 20.25 T:aes128n8clocv1 27.67 27.77 28.11 T:ketjesrv1 27.84 28.01 28.06 T:ketjesrv2 31.06 31.10 31.13 T:aeadaes128ocbtaglen64v1 31.03 31.10 31.14 T:aeadaes128ocbtaglen96v1 37.11 37.13 37.16 T:aeadaes192ocbtaglen96v1 37.10 37.15 37.18 T:aeadaes192ocbtaglen64v1 43.11 43.16 43.21 T:aeadaes256ocbtaglen64v1 43.15 43.20 43.23 T:aeadaes256ocbtaglen96v1 43.75 43.94 45.28 T:proest128otrv1 49.97 50.51 51.06 T:ketjejrv1 65.05 65.11 65.16 T:colm127v1 71.53 71.57 71.69 T:present80n6t4silcv3 72.49 72.60 72.72 T:ketjejrv2 91.95 92.90 93.40 T:deoxysneq128128v13 125.90 126.29 126.34 T:led80n6t4silcv3 128.63 129.66 130.24 T:aezv1 132.68 133.05 136.52 T:deoxyseq128128v13 149.50 150.03 150.28 T:deoxysneq256128v13 243.59 243.81 243.92 T:deoxyseq256128v13 404.96 405.85 413.58 T:acorn128 3786.39 3799.23 3810.27 T:led80n6silcv1 3796.31 3801.76 3807.51 T:led80n6t4silcv2 3905.13 3910.80 3931.27 T:present80n6silcv1 3913.67 3915.91 3918.05 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.16? 0.18? 0.21? T:tiaoxinv1 0.15? 0.19? 0.22? T:tiaoxinv2 0.20? 0.22? 0.24? aegis128l 0.29? 0.31? 0.33? T:aezv4 0.30? 0.33? 0.35? T:aezv3 0.34 0.35 0.36 T:aezv5 0.35 0.36 0.37 aegis256 0.37 0.38 0.39 T:aegis128 0.45? 0.49? 0.51? T:aeadaes128ocbtaglen128v1 0.33? 0.53? 0.60? T:aeadaes192ocbtaglen128v1 0.54 0.54 0.55 T:aes128otrcv3 0.54 0.56 0.57 T:aes128otrpv3 0.63 0.66 0.68 T:aeadaes256ocbtaglen128v1 0.68 0.69 0.70 T:aes256otrcv3 0.69 0.70 0.71 T:aes128gcmv1 0.70 0.71 0.72 T:aes256otrpv3 0.75 0.76 0.77 aes256gcmv1 0.80 0.83 0.86 T:deoxysi128v141 0.88 0.92 0.93 T:deoxysneq128128v1 0.92 0.94 0.96 T:deoxysi256v141 0.94 0.95 0.96 T:morus1280256v2 0.94 0.95 0.97 T:morus1280128v2 0.94 0.95 0.96 T:morus1280128v1 0.94 0.96 0.97 T:morus1280256v1 0.98 1.01 1.02 T:deoxysneq256128v1 1.13 1.15 1.16 T:morus640128v1 1.15 1.16 1.17 T:morus640128v2 1.22 1.25 1.28 T:deoxysii128v141 1.30 1.30 1.30 T:aes128otrsv3 1.29 1.30 1.31 T:colm0v1 1.34 1.36 1.37 T:deoxyseq128128v1 1.36 1.41 1.44 T:deoxysii256v141 1.54 1.55 1.57 T:deoxyseq256128v1 1.74 1.74 1.75 T:aes256otrsv3 2.09 2.09 2.10 T:aes128n12t8clocv2 2.09 2.09 2.10 T:aes128n8t8silcv2 2.09 2.09 2.10 T:aes128n8t8clocv2 2.09 2.09 2.10 T:aes128n12t8silcv3 2.09 2.10 2.10 T:aes128n12t8silcv2 2.09 2.10 2.10 T:aes128n12t8clocv3 2.32 2.37 2.39 T:seakeyakv2 2.35 2.41 2.45 T:oceankeyakv2 2.62 2.66 2.67 T:norx6441v2 2.66 2.69 2.71 T:norx6441v3 2.84 2.91 2.98 T:lunarkeyakv2 2.92 2.95 2.98 T:norx6444v3 2.96 2.98 3.01 T:lakekeyakv2 2.96 3.00 3.04 T:lakekeyakv1 3.19 3.21 3.23 T:norx6441v1 3.25 3.30 3.33 T:norx6444v2 3.77 3.80 3.83 T:norx3241v3 3.77 3.82 3.84 T:norx3241v2 3.86 3.88 3.90 T:norx6444v1 3.95 3.99 4.01 T:norx6461v2 3.99 4.04 4.06 T:norx6461v3 4.22 4.24 4.24 T:aesjambuv1 4.55 4.57 4.59 T:norx3241v1 4.76 4.80 4.83 T:norx6461v1 5.19 5.27 5.32 T:ketjemajorv2 5.48 5.51 5.56 T:riverkeyakv2 5.52 5.53 5.55 T:acorn128v3 5.67 5.69 5.71 T:acorn128v2 5.68 5.72 5.77 T:norx3261v2 5.73 5.75 5.78 T:norx3261v3 6.21 6.25 6.33 ascon128av12 6.36 6.38 6.40 T:ascon128av11 6.39 6.40 6.43 T:ascon96v1 7.28 7.29 7.31 T:norx3261v1 7.34 7.40 7.62 T:ketjeminorv2 9.12 9.14 9.20 T:ascon128v11 9.14 9.18 9.21 T:ascon128v1 9.31 9.33 9.36 ascon128v12 11.12 11.15 11.18 T:aes128otrsv2 11.13 11.18 11.19 T:aes128otrsv1 11.30 11.32 11.33 T:aes128otrpv1 11.30 11.33 11.35 T:aes128otrpv2 14.20 14.23 14.25 T:aes256otrsv2 14.31 14.33 14.35 T:twine80n6t4clocv3 14.29 14.44 14.50 T:aes256otrsv1 14.76 14.78 14.80 T:aes256otrpv2 14.77 14.78 14.80 T:aes256otrpv1 15.23 15.24 15.24 T:twine80n6t4clocv2 15.64 15.65 15.67 T:aes128n12clocv1 15.67 15.69 15.70 T:aes128n8clocv1 20.12 20.27 20.73 T:proest256otrv1 22.48 22.50 22.53 T:aeadaes128ocbtaglen64v1 22.48 22.51 22.54 T:aeadaes128ocbtaglen96v1 25.40 25.69 25.98 T:ketjesrv1 26.54 26.67 26.78 T:ketjesrv2 26.58 26.68 26.71 T:aeadaes192ocbtaglen96v1 26.67 26.70 26.72 T:aeadaes192ocbtaglen64v1 30.85 30.89 30.93 T:aeadaes256ocbtaglen96v1 30.87 30.89 30.92 T:aeadaes256ocbtaglen64v1 36.41 36.43 36.48 T:colm127v1 45.13 45.33 45.90 T:proest128otrv1 44.84 45.41 46.40 T:ketjejrv1 66.01 66.45 67.98 T:deoxysneq128128v13 69.84 69.90 70.06 T:ketjejrv2 70.80 70.96 70.98 T:present80n6t4silcv3 85.13 86.26 86.90 T:aezv1 98.21 99.23 100.39 T:deoxyseq128128v13 121.42 122.09 122.18 T:deoxysneq256128v13 125.35 125.69 125.99 T:led80n6t4silcv3 180.32 182.27 182.72 T:deoxyseq256128v13 401.78 405.61 412.32 T:acorn128 2837.24 2843.53 2853.56 T:led80n6silcv1 2834.15 2845.37 2853.80 T:led80n6t4silcv2 2934.45 2939.22 2939.72 T:present80n6t4silcv2 2936.23 2940.45 2941.80 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.21 0.22 0.23 aegis128l 0.21? 0.23? 0.26? T:tiaoxinv1 0.21? 0.24? 0.25? T:tiaoxinv2 0.31 0.32 0.33 T:aezv4 0.31 0.33 0.34 T:aezv3 0.33? 0.35? 0.38? T:aezv5 0.35 0.36 0.36 T:aegis128 0.36? 0.41? 0.48? aegis256 0.47 0.50 0.52 T:aeadaes128ocbtaglen128v1 -0.40? 0.55? 1.57? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.57 0.57 0.57 T:aes128otrpv3 0.67 0.70 0.71 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.70 T:aes256otrcv3 0.70 0.72 0.73 T:aes128gcmv1 0.72 0.72 0.73 T:aes256otrpv3 0.80 0.83 0.84 aes256gcmv1 0.84 0.87 0.89 T:deoxysi128v141 0.88 0.92 0.93 T:deoxysneq128128v1 0.93 0.94 0.95 T:morus1280256v1 0.93 0.94 0.95 T:morus1280256v2 0.93 0.94 0.95 T:morus1280128v2 0.94 0.95 0.95 T:morus1280128v1 0.95 0.98 1.01 T:deoxysi256v141 1.05 1.06 1.07 T:deoxysneq256128v1 1.14 1.15 1.17 T:morus640128v1 1.14 1.16 1.17 T:morus640128v2 1.21 1.26 1.27 T:deoxysii128v141 1.31 1.32 1.32 T:aes128otrsv3 1.30 1.34 1.35 T:colm0v1 1.37 1.38 1.39 T:deoxyseq128128v1 1.38 1.40 1.42 T:deoxysii256v141 1.56 1.58 1.59 T:deoxyseq256128v1 1.75 1.76 1.77 T:aes256otrsv3 2.03 2.06 2.09 T:aes128n8t8silcv2 2.06 2.06 2.09 T:aes128n8t8clocv2 2.06 2.07 2.09 T:aes128n12t8clocv3 2.04 2.08 2.09 T:aes128n12t8clocv2 2.06 2.09 2.09 T:aes128n12t8silcv3 2.06 2.09 2.09 T:aes128n12t8silcv2 2.37 2.41 2.44 T:seakeyakv2 2.38 2.44 2.50 T:oceankeyakv2 2.64 2.66 2.70 T:norx6441v3 2.66 2.67 2.69 T:norx6441v2 2.88 2.91 2.92 T:norx6444v3 2.89 2.95 3.02 T:lunarkeyakv2 2.97 2.99 3.01 T:lakekeyakv2 2.97 3.00 3.06 T:lakekeyakv1 3.18 3.22 3.23 T:norx6441v1 3.25 3.30 3.34 T:norx6444v2 3.75 3.77 3.78 T:norx3241v3 3.75 3.78 3.80 T:norx3241v2 3.85 3.88 3.92 T:norx6444v1 3.97 4.00 4.05 T:norx6461v3 4.00 4.04 4.06 T:norx6461v2 4.36 4.37 4.37 T:aesjambuv1 4.52 4.54 4.56 T:norx3241v1 4.76 4.80 4.83 T:norx6461v1 5.12 5.21 5.24 T:ketjemajorv2 5.52 5.53 5.54 T:acorn128v2 5.51 5.54 5.59 T:riverkeyakv2 5.66 5.67 5.69 T:acorn128v3 5.65 5.69 5.71 T:norx3261v2 5.65 5.70 5.71 T:norx3261v3 6.22 6.24 6.28 ascon128av12 6.36 6.38 6.40 T:ascon96v1 6.37 6.40 6.44 T:ascon128av11 7.21 7.21 7.23 T:norx3261v1 7.74 7.80 7.85 T:ketjeminorv2 9.01 9.04 9.05 T:ascon128v11 9.02 9.05 9.06 T:ascon128v1 9.31 9.32 9.36 ascon128v12 11.20 11.24 11.27 T:aes128otrsv1 11.21 11.35 11.40 T:aes128otrsv2 11.34 11.38 11.42 T:aes128otrpv1 11.35 11.47 11.55 T:aes128otrpv2 14.25 14.27 14.29 T:twine80n6t4clocv3 14.22 14.33 14.35 T:aes256otrsv1 14.32 14.34 14.36 T:aes256otrsv2 14.76 14.79 14.88 T:aes256otrpv1 14.80 14.82 15.01 T:aes256otrpv2 15.19 15.23 15.28 T:twine80n6t4clocv2 15.43 15.46 15.48 T:aes128n12clocv1 15.45 15.48 15.53 T:aes128n8clocv1 20.00 20.20 20.67 T:proest256otrv1 26.08 26.22 26.57 T:ketjesrv1 26.63 26.65 26.70 T:aeadaes128ocbtaglen64v1 26.63 26.66 26.70 T:aeadaes128ocbtaglen96v1 26.76 26.98 27.17 T:ketjesrv2 31.73 31.75 31.80 T:aeadaes192ocbtaglen64v1 31.74 31.77 31.80 T:aeadaes192ocbtaglen96v1 36.86 36.88 36.91 T:aeadaes256ocbtaglen64v1 36.86 36.88 36.94 T:aeadaes256ocbtaglen96v1 44.79 44.85 44.92 T:colm127v1 44.87 44.95 45.25 T:proest128otrv1 45.11 45.44 46.39 T:ketjejrv1 70.76 70.87 70.95 T:ketjejrv2 70.92 70.98 71.02 T:present80n6t4silcv3 78.36 79.03 80.64 T:deoxysneq128128v13 85.97 86.36 86.89 T:aezv1 98.35 99.27 100.74 T:deoxyseq128128v13 125.45 125.68 125.79 T:led80n6t4silcv3 136.13 136.21 136.24 T:deoxysneq256128v13 180.42 182.29 182.68 T:deoxyseq256128v13 402.75 405.26 410.60 T:acorn128 2831.14 2845.27 2852.95 T:led80n6t4silcv2 2841.23 2847.41 2854.06 T:led80n6silcv1 2937.54 2938.61 2939.26 T:present80n6t4silcv2 2936.30 2940.67 2942.18 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.17? 0.18? 0.21? T:aezv4 0.17? 0.20? 0.21? T:aezv5 0.16? 0.22? 0.22? T:aezv3 0.21 0.22 0.22 aegis128l 0.23 0.24 0.25 T:tiaoxinv1 0.23 0.24 0.25 T:tiaoxinv2 0.35 0.36 0.36 T:aegis128 0.37? 0.41? 0.50? aegis256 0.49 0.49 0.51 T:aeadaes128ocbtaglen128v1 0.55 0.55 0.56 T:aeadaes192ocbtaglen128v1 0.55 0.55 0.55 T:aes128otrcv3 0.57 0.57 0.58 T:aes128otrpv3 0.69 0.70 0.70 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.70 T:aes256otrcv3 0.71 0.71 0.72 T:aes128gcmv1 0.72 0.72 0.72 T:aes256otrpv3 0.82 0.82 0.83 aes256gcmv1 0.86 0.87 0.89 T:deoxysi128v141 0.92 0.93 0.94 T:deoxysneq128128v1 0.94 0.94 0.95 T:morus1280256v1 0.94 0.95 0.95 T:morus1280128v2 0.94 0.95 0.95 T:morus1280256v2 0.93 0.95 0.96 T:morus1280128v1 0.97 0.99 1.00 T:deoxysi256v141 1.04 1.07 1.08 T:deoxysneq256128v1 1.15 1.16 1.17 T:morus640128v1 1.15 1.16 1.17 T:morus640128v2 1.24 1.24 1.26 T:deoxysii128v141 1.30 1.31 1.35 T:colm0v1 1.31 1.31 1.32 T:aes128otrsv3 1.37 1.39 1.40 T:deoxyseq128128v1 1.39 1.40 1.41 T:deoxysii256v141 1.56 1.57 1.59 T:deoxyseq256128v1 1.75 1.75 1.76 T:aes256otrsv3 2.03 2.06 2.09 T:aes128n12t8clocv3 2.03 2.06 2.10 T:aes128n8t8silcv2 2.03 2.09 2.09 T:aes128n8t8clocv2 2.03 2.09 2.09 T:aes128n12t8clocv2 2.03 2.09 2.10 T:aes128n12t8silcv2 2.03 2.09 2.10 T:aes128n12t8silcv3 2.40 2.43 2.44 T:seakeyakv2 2.43 2.46 2.49 T:oceankeyakv2 2.65 2.67 2.69 T:norx6441v2 2.65 2.67 2.69 T:norx6441v3 2.89 2.91 2.93 T:norx6444v3 2.89 2.96 3.02 T:lunarkeyakv2 2.99 3.00 3.01 T:lakekeyakv2 3.00 3.02 3.05 T:lakekeyakv1 3.18 3.21 3.25 T:norx6441v1 3.28 3.29 3.33 T:norx6444v2 3.74 3.76 3.78 T:norx3241v3 3.75 3.77 3.79 T:norx3241v2 3.88 3.90 3.92 T:norx6444v1 3.98 4.00 4.03 T:norx6461v3 3.98 4.00 4.03 T:norx6461v2 4.37 4.40 4.40 T:aesjambuv1 4.52 4.54 4.55 T:norx3241v1 4.74 4.78 4.81 T:norx6461v1 5.13 5.25 5.27 T:ketjemajorv2 5.53 5.54 5.55 T:acorn128v2 5.53 5.57 5.60 T:riverkeyakv2 5.65 5.67 5.69 T:norx3261v2 5.67 5.68 5.70 T:norx3261v3 5.67 5.69 5.70 T:acorn128v3 6.20 6.23 6.24 ascon128av12 6.36 6.38 6.39 T:ascon96v1 6.38 6.40 6.43 T:ascon128av11 7.20 7.22 7.23 T:norx3261v1 7.78 7.81 7.87 T:ketjeminorv2 9.02 9.03 9.05 T:ascon128v1 9.03 9.04 9.06 T:ascon128v11 9.31 9.32 9.34 ascon128v12 11.19 11.23 11.25 T:aes128otrsv1 11.36 11.38 11.43 T:aes128otrpv1 11.32 11.39 11.40 T:aes128otrpv2 11.24 11.41 11.43 T:aes128otrsv2 14.22 14.25 14.35 T:aes256otrsv1 14.26 14.27 14.30 T:twine80n6t4clocv3 14.35 14.37 14.39 T:aes256otrsv2 14.81 14.87 14.90 T:aes256otrpv1 14.83 14.98 15.03 T:aes256otrpv2 15.18 15.23 15.27 T:twine80n6t4clocv2 15.45 15.47 15.49 T:aes128n12clocv1 15.47 15.49 15.52 T:aes128n8clocv1 20.10 20.26 20.67 T:proest256otrv1 26.08 26.30 26.54 T:ketjesrv1 26.62 26.65 26.70 T:aeadaes128ocbtaglen96v1 26.64 26.66 26.67 T:aeadaes128ocbtaglen64v1 26.83 26.99 27.13 T:ketjesrv2 31.74 31.75 31.80 T:aeadaes192ocbtaglen96v1 31.74 31.79 31.79 T:aeadaes192ocbtaglen64v1 36.86 36.90 36.94 T:aeadaes256ocbtaglen64v1 36.88 36.90 36.92 T:aeadaes256ocbtaglen96v1 44.28 44.31 44.35 T:colm127v1 44.88 44.95 45.28 T:proest128otrv1 44.80 45.46 46.38 T:ketjejrv1 70.80 70.90 71.05 T:ketjejrv2 70.77 70.97 71.00 T:present80n6t4silcv3 78.07 78.71 80.92 T:deoxysneq128128v13 85.40 86.16 86.68 T:aezv1 98.26 99.32 100.39 T:deoxyseq128128v13 125.41 125.68 125.91 T:led80n6t4silcv3 135.87 136.14 136.25 T:deoxysneq256128v13 180.44 182.32 182.75 T:deoxyseq256128v13 401.74 404.99 410.65 T:acorn128 2842.87 2849.47 2858.75 T:led80n6silcv1 2847.55 2851.89 2860.25 T:led80n6t4silcv2 2933.94 2934.71 2938.54 T:present80n6t4silcv2 2933.12 2940.30 2947.37 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.12? 0.13? 0.15? T:tiaoxinv1 0.11? 0.14? 0.15? T:tiaoxinv2 0.17? 0.18? 0.19? aegis128l 0.19? 0.20? 0.23? T:aezv4 0.19? 0.22? 0.25? T:aezv3 0.19? 0.23? 0.25? T:aezv5 0.31 0.32 0.33 aegis256 0.37 0.37 0.38 T:aegis128 0.45 0.47 0.47 aes256gcmv1 0.44? 0.47? 0.50? T:aeadaes128ocbtaglen128v1 0.46 0.47 0.48 T:aes128gcmv1 0.28? 0.51? 2.37? T:aeadaes192ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrcv3 0.57 0.60 0.60 T:aes128otrpv3 0.70 0.71 0.72 T:aes256otrcv3 0.70 0.72 0.75 T:aeadaes256ocbtaglen128v1 0.70 0.74 0.75 T:aes256otrpv3 0.74 0.76 0.77 T:colm0v1 0.81 0.82 0.84 T:deoxysi128v141 0.81 0.82 0.83 T:deoxysii128v141 0.88 0.89 0.90 T:morus1280256v2 0.88 0.89 0.90 T:morus1280128v2 0.89 0.89 0.91 T:morus1280256v1 0.89 0.90 0.91 T:morus1280128v1 0.89 0.90 0.92 T:deoxyseq128128v1 0.91 0.92 0.93 T:deoxysneq128128v1 0.92 0.93 0.94 T:deoxysii256v141 0.91 0.94 0.96 T:deoxysi256v141 0.99 1.01 1.02 T:deoxysneq256128v1 1.01 1.03 1.04 T:deoxyseq256128v1 1.10 1.12 1.14 T:morus640128v1 1.12 1.14 1.15 T:morus640128v2 1.81 1.90 1.97 T:lunarkeyakv2 1.86 1.91 1.97 T:oceankeyakv2 2.06 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128otrsv3 2.23 2.27 2.31 T:seakeyakv2 2.60 2.63 2.67 T:norx6441v2 2.64 2.67 2.70 T:norx6441v3 2.67 2.74 2.75 T:lakekeyakv2 2.74 2.75 2.79 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.11 3.14 3.16 T:norx6444v2 3.18 3.21 3.27 T:norx6441v1 3.26 3.28 3.33 T:norx6444v3 3.76 3.78 3.80 T:norx3241v3 3.76 3.79 3.81 T:norx3241v2 3.88 3.90 3.92 T:norx6444v1 3.92 3.95 4.01 T:norx6461v2 3.93 4.03 4.07 T:norx6461v3 4.18 4.18 4.19 T:aesjambuv1 4.27 4.39 4.46 T:ketjemajorv2 4.53 4.55 4.58 T:norx3241v1 4.75 4.78 4.83 T:norx6461v1 5.06 5.11 5.16 T:riverkeyakv2 5.37 5.41 5.46 T:acorn128v3 5.60 5.65 5.67 T:norx3261v2 5.74 5.78 5.80 T:norx3261v3 5.83 5.84 5.90 T:acorn128v2 6.13 6.15 6.17 ascon128av12 6.28 6.30 6.32 T:ascon128av11 6.30 6.32 6.33 T:ascon96v1 6.29 6.37 6.43 T:ketjeminorv2 7.24 7.26 7.27 T:norx3261v1 9.08 9.09 9.12 T:ascon128v11 9.08 9.09 9.11 T:ascon128v1 9.26 9.28 9.29 ascon128v12 10.52 10.55 10.57 T:aes128otrsv2 10.48 10.56 10.58 T:aes128otrsv1 10.78 10.79 10.82 T:aes128n8clocv1 10.78 10.80 10.81 T:aes128n12clocv1 10.82 10.85 10.87 T:aes128otrpv2 10.84 10.86 10.87 T:aes128otrpv1 12.94 12.98 13.00 T:aes256otrsv2 13.20 13.44 13.50 T:aes256otrsv1 14.09 14.12 14.16 T:twine80n6t4clocv3 14.28 14.30 14.31 T:aes256otrpv1 14.29 14.31 14.32 T:aes256otrpv2 14.96 14.97 14.98 T:twine80n6t4clocv2 20.21 20.27 20.77 T:proest256otrv1 22.19 22.21 22.25 T:aeadaes128ocbtaglen96v1 22.18 22.22 22.25 T:aeadaes128ocbtaglen64v1 23.45 23.53 23.57 T:colm127v1 24.74 24.98 25.00 T:ketjesrv1 25.75 26.05 26.16 T:ketjesrv2 26.38 26.42 26.45 T:aeadaes192ocbtaglen64v1 26.40 26.43 26.46 T:aeadaes192ocbtaglen96v1 30.58 30.61 30.65 T:aeadaes256ocbtaglen96v1 30.56 30.63 30.66 T:aeadaes256ocbtaglen64v1 41.28 41.50 41.75 T:aezv1 40.47 41.67 42.11 T:ketjejrv1 44.90 45.20 45.78 T:proest128otrv1 66.09 66.34 66.91 T:deoxyseq128128v13 65.38 66.69 66.99 T:deoxysneq128128v13 69.10 69.20 69.27 T:ketjejrv2 69.96 70.40 70.42 T:present80n6t4silcv3 120.67 120.76 121.78 T:deoxysneq256128v13 120.77 121.28 121.69 T:deoxyseq256128v13 124.54 125.04 125.09 T:led80n6t4silcv3 402.41 407.74 411.30 T:acorn128 1887.40 1891.73 1896.85 T:led80n6t4silcv2 1894.20 1899.02 1906.34 T:led80n6silcv1 1952.80 1955.78 1959.67 T:present80n6t4silcv2 1953.41 1956.00 1957.33 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.11? 0.14? 0.17? T:tiaoxinv1 0.10? 0.15? 0.15? T:tiaoxinv2 0.16? 0.17? 0.18? aegis128l 0.19? 0.20? 0.22? T:aezv4 0.21 0.22 0.23 T:aezv3 0.21? 0.22? 0.24? T:aezv5 0.31 0.31 0.32 T:aegis128 0.31? 0.32? 0.37? aegis256 0.45 0.46 0.50 T:aeadaes128ocbtaglen128v1 0.47 0.49 0.49 aes256gcmv1 0.47 0.49 0.49 T:aes128gcmv1 -1.48? 0.50? 0.51? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.57 T:aes128otrcv3 0.59 0.59 0.60 T:aes128otrpv3 0.69 0.70 0.71 T:aes256otrcv3 0.70 0.72 0.74 T:aeadaes256ocbtaglen128v1 0.71 0.72 0.74 T:aes256otrpv3 0.73 0.75 0.76 T:colm0v1 0.82 0.83 0.84 T:deoxysii128v141 0.83 0.84 0.85 T:deoxysi128v141 0.86 0.87 0.88 T:morus1280128v2 0.87 0.88 0.89 T:morus1280256v2 0.87 0.88 0.89 T:morus1280128v1 0.87 0.88 0.89 T:morus1280256v1 0.88 0.91 0.92 T:deoxysneq128128v1 0.88 0.91 0.92 T:deoxyseq128128v1 0.92 0.94 0.95 T:deoxysii256v141 0.93 0.95 0.96 T:deoxysi256v141 1.00 1.02 1.04 T:deoxysneq256128v1 1.03 1.04 1.05 T:deoxyseq256128v1 1.10 1.11 1.13 T:morus640128v1 1.11 1.13 1.16 T:morus640128v2 1.79 1.85 1.94 T:lunarkeyakv2 1.84 1.88 1.96 T:oceankeyakv2 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.11 T:aes128n12t8clocv2 2.01 2.06 2.11 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128otrsv3 2.06 2.06 2.12 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.12 2.12 T:aes128n8t8silcv2 2.27 2.31 2.33 T:seakeyakv2 2.62 2.65 2.68 T:norx6441v3 2.63 2.67 2.70 T:norx6441v2 2.69 2.73 2.74 T:lakekeyakv2 2.73 2.76 2.77 T:lakekeyakv1 2.81 2.82 2.82 T:aes256otrsv3 3.10 3.13 3.16 T:norx6444v2 3.17 3.21 3.24 T:norx6441v1 3.27 3.30 3.32 T:norx6444v3 3.78 3.80 3.82 T:norx3241v3 3.76 3.80 3.82 T:norx3241v2 3.90 3.92 3.94 T:norx6444v1 3.94 3.99 4.06 T:norx6461v3 3.98 4.00 4.04 T:norx6461v2 4.18 4.19 4.19 T:aesjambuv1 4.29 4.37 4.42 T:ketjemajorv2 4.52 4.54 4.56 T:norx3241v1 4.75 4.78 4.83 T:norx6461v1 5.08 5.13 5.16 T:riverkeyakv2 5.46 5.49 5.56 T:acorn128v3 5.52 5.58 5.63 T:acorn128v2 5.59 5.64 5.67 T:norx3261v2 5.71 5.74 5.78 T:norx3261v3 6.13 6.14 6.17 ascon128av12 6.29 6.32 6.42 T:ascon128av11 6.31 6.33 6.38 T:ascon96v1 6.31 6.35 6.42 T:ketjeminorv2 7.24 7.26 7.27 T:norx3261v1 9.03 9.07 9.08 T:ascon128v11 9.03 9.07 9.09 T:ascon128v1 9.26 9.28 9.29 ascon128v12 10.49 10.55 10.61 T:aes128otrsv1 10.51 10.55 10.59 T:aes128otrsv2 10.78 10.81 10.83 T:aes128n12clocv1 10.78 10.81 10.84 T:aes128n8clocv1 10.84 10.86 10.90 T:aes128otrpv2 10.83 10.87 10.89 T:aes128otrpv1 12.95 12.97 13.02 T:aes256otrsv2 13.17 13.43 13.52 T:aes256otrsv1 14.09 14.14 14.16 T:twine80n6t4clocv3 14.26 14.32 14.34 T:aes256otrpv1 14.27 14.32 14.35 T:aes256otrpv2 14.97 14.98 15.00 T:twine80n6t4clocv2 20.19 20.25 20.72 T:proest256otrv1 22.22 22.24 22.26 T:aeadaes128ocbtaglen96v1 22.21 22.26 22.31 T:aeadaes128ocbtaglen64v1 23.42 23.48 23.56 T:colm127v1 24.44 24.74 24.92 T:ketjesrv1 25.74 25.93 26.08 T:ketjesrv2 26.39 26.42 26.46 T:aeadaes192ocbtaglen96v1 26.38 26.42 26.46 T:aeadaes192ocbtaglen64v1 30.56 30.59 30.64 T:aeadaes256ocbtaglen64v1 30.59 30.61 30.70 T:aeadaes256ocbtaglen96v1 41.26 41.49 41.74 T:aezv1 40.54 41.68 42.09 T:ketjejrv1 45.27 45.50 45.56 T:proest128otrv1 65.93 66.58 66.84 T:deoxyseq128128v13 65.53 66.69 67.07 T:deoxysneq128128v13 69.10 69.15 69.27 T:ketjejrv2 70.35 70.40 70.47 T:present80n6t4silcv3 120.63 120.75 121.79 T:deoxysneq256128v13 120.76 121.39 121.52 T:deoxyseq256128v13 124.82 125.06 125.09 T:led80n6t4silcv3 397.43 405.12 409.77 T:acorn128 1887.60 1897.61 1902.21 T:led80n6silcv1 1893.60 1900.75 1913.83 T:led80n6t4silcv2 1953.65 1955.85 1958.64 T:present80n6silcv1 1955.17 1956.21 1959.70 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.13? 0.14? 0.18? T:tiaoxinv1 0.16? 0.16? 0.18? aegis128l 0.13? 0.17? 0.17? T:tiaoxinv2 0.20 0.22 0.22 T:aezv4 0.21 0.22 0.23 T:aezv3 0.22 0.23 0.23 T:aezv5 0.31 0.31 0.32 T:aegis128 0.27? 0.33? 0.34? aegis256 0.46 0.47 0.48 T:aeadaes128ocbtaglen128v1 0.47 0.48 0.49 T:aes128gcmv1 0.48 0.48 0.49 aes256gcmv1 0.49? 0.50? 2.42? T:aeadaes192ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrcv3 0.59 0.59 0.60 T:aes128otrpv3 0.69 0.70 0.71 T:aes256otrcv3 0.71 0.72 0.72 T:aeadaes256ocbtaglen128v1 0.72 0.73 0.74 T:aes256otrpv3 0.73 0.75 0.78 T:colm0v1 0.82 0.83 0.84 T:deoxysii128v141 0.83 0.84 0.86 T:deoxysi128v141 0.87 0.88 0.88 T:morus1280128v1 0.87 0.88 0.88 T:morus1280128v2 0.87 0.88 0.89 T:morus1280256v2 0.87 0.88 0.89 T:morus1280256v1 0.89 0.91 0.92 T:deoxyseq128128v1 0.88 0.91 0.93 T:deoxysneq128128v1 0.92 0.94 0.95 T:deoxysii256v141 0.90 0.94 0.97 T:deoxysi256v141 0.97 1.03 1.04 T:deoxysneq256128v1 1.03 1.04 1.06 T:deoxyseq256128v1 1.11 1.13 1.14 T:morus640128v1 1.11 1.13 1.14 T:morus640128v2 1.86 1.89 1.92 T:oceankeyakv2 1.80 1.90 1.97 T:lunarkeyakv2 2.00 2.06 2.12 T:aes128n12t8silcv2 2.01 2.06 2.07 T:aes128n8t8clocv2 2.00 2.06 2.12 T:aes128n12t8silcv3 2.01 2.06 2.11 T:aes128n12t8clocv2 2.06 2.06 2.06 T:aes128otrsv3 2.02 2.11 2.11 T:aes128n12t8clocv3 2.00 2.12 2.13 T:aes128n8t8silcv2 2.25 2.30 2.32 T:seakeyakv2 2.62 2.65 2.69 T:norx6441v3 2.63 2.66 2.70 T:norx6441v2 2.68 2.72 2.73 T:lakekeyakv2 2.73 2.75 2.77 T:lakekeyakv1 2.81 2.81 2.82 T:aes256otrsv3 3.08 3.14 3.16 T:norx6444v2 3.16 3.24 3.28 T:norx6441v1 3.27 3.29 3.31 T:norx6444v3 3.77 3.79 3.81 T:norx3241v2 3.78 3.80 3.81 T:norx3241v3 3.91 3.93 3.94 T:norx6444v1 3.96 3.98 4.03 T:norx6461v2 3.93 3.99 4.01 T:norx6461v3 4.18 4.19 4.19 T:aesjambuv1 4.31 4.39 4.46 T:ketjemajorv2 4.51 4.54 4.57 T:norx3241v1 4.72 4.75 4.80 T:norx6461v1 5.09 5.11 5.14 T:riverkeyakv2 5.47 5.51 5.56 T:acorn128v3 5.54 5.59 5.64 T:acorn128v2 5.63 5.67 5.69 T:norx3261v2 5.66 5.77 5.79 T:norx3261v3 6.12 6.14 6.17 ascon128av12 6.28 6.31 6.34 T:ascon96v1 6.29 6.34 6.39 T:ascon128av11 6.36 6.43 6.46 T:ketjeminorv2 7.24 7.25 7.26 T:norx3261v1 9.03 9.06 9.10 T:ascon128v11 9.05 9.07 9.10 T:ascon128v1 9.25 9.28 9.31 ascon128v12 10.51 10.55 10.59 T:aes128otrsv1 10.53 10.56 10.60 T:aes128otrsv2 10.78 10.80 10.83 T:aes128n12clocv1 10.77 10.82 10.83 T:aes128n8clocv1 10.84 10.86 10.90 T:aes128otrpv1 10.84 10.87 10.90 T:aes128otrpv2 12.94 12.97 13.02 T:aes256otrsv2 13.16 13.19 13.52 T:aes256otrsv1 14.11 14.15 14.19 T:twine80n6t4clocv3 14.27 14.30 14.33 T:aes256otrpv1 14.28 14.30 14.34 T:aes256otrpv2 14.96 14.98 15.01 T:twine80n6t4clocv2 20.18 20.22 20.75 T:proest256otrv1 22.18 22.21 22.27 T:aeadaes128ocbtaglen64v1 22.20 22.23 22.27 T:aeadaes128ocbtaglen96v1 23.45 23.51 23.57 T:colm127v1 24.46 24.74 24.96 T:ketjesrv1 25.66 25.96 26.04 T:ketjesrv2 26.40 26.42 26.45 T:aeadaes192ocbtaglen96v1 26.41 26.44 26.47 T:aeadaes192ocbtaglen64v1 30.57 30.60 30.62 T:aeadaes256ocbtaglen64v1 30.59 30.61 30.64 T:aeadaes256ocbtaglen96v1 41.48 41.53 41.84 T:aezv1 40.56 41.72 42.09 T:ketjejrv1 45.39 45.51 45.57 T:proest128otrv1 65.85 66.50 66.82 T:deoxyseq128128v13 65.73 66.78 67.38 T:deoxysneq128128v13 69.06 69.20 69.27 T:ketjejrv2 70.27 70.40 70.49 T:present80n6t4silcv3 120.63 120.78 121.60 T:deoxysneq256128v13 121.07 121.53 121.68 T:deoxyseq256128v13 124.44 125.03 125.12 T:led80n6t4silcv3 403.07 404.68 410.92 T:acorn128 1885.36 1893.72 1903.62 T:led80n6silcv1 1886.71 1900.15 1905.03 T:led80n6t4silcv2 1955.08 1955.63 1959.93 T:present80n6t4silcv2 1953.55 1955.80 1957.68 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.23? 0.24? 0.26? T:tiaoxinv2 0.23? 0.24? 0.27? T:tiaoxinv1 0.25? 0.26? 0.28? aegis128l 0.36 0.37 0.39 T:aezv4 0.38 0.38 0.41 T:aezv3 0.39 0.40 0.41 T:aezv5 0.41 0.41 0.41 T:aegis128 0.41 0.41 0.41 aegis256 0.53 0.53 0.56 T:aeadaes128ocbtaglen128v1 0.62 0.63 0.64 T:aes128otrpv3 0.63 0.64 0.70 T:aeadaes192ocbtaglen128v1 0.65 0.66 0.66 T:aes128otrcv3 0.71 0.73 0.74 T:aeadaes256ocbtaglen128v1 0.79 0.80 0.80 T:aes128gcmv1 0.79 0.80 0.81 T:aes256otrpv3 0.84 0.84 0.85 T:aes256otrcv3 0.86 0.87 0.88 aes256gcmv1 0.95 0.95 0.97 T:deoxysi128v141 0.99 1.00 1.01 T:deoxysneq128128v1 1.09 1.11 1.12 T:deoxysi256v141 1.11 1.12 1.13 T:deoxysneq256128v1 1.16 1.17 1.18 T:morus1280128v1 1.16 1.17 1.18 T:morus1280256v1 1.17 1.18 1.18 T:morus1280256v2 1.17 1.18 1.19 T:morus1280128v2 1.28 1.29 1.31 T:morus640128v1 1.30 1.31 1.32 T:morus640128v2 1.35 1.35 1.36 T:aes128otrsv3 1.36 1.36 1.36 T:colm0v1 1.41 1.43 1.45 T:deoxysii128v141 1.48 1.49 1.49 T:deoxyseq128128v1 1.59 1.62 1.63 T:deoxysii256v141 1.68 1.70 1.71 T:deoxyseq256128v1 1.81 1.82 1.82 T:aes256otrsv3 2.11 2.11 2.12 T:aes128n12t8clocv2 2.11 2.11 2.12 T:aes128n8t8clocv2 2.11 2.11 2.12 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n12t8silcv3 2.13 2.13 2.13 T:aes128n8t8silcv2 2.12 2.13 2.13 T:aes128n12t8silcv2 3.06 3.07 3.10 T:norx6441v2 3.09 3.10 3.13 T:norx6441v3 3.24 3.24 3.26 T:lakekeyakv2 3.36 3.38 3.38 T:seakeyakv2 3.53 3.55 3.57 T:lakekeyakv1 3.58 3.60 3.61 T:norx6441v1 3.90 3.92 3.94 T:norx6444v3 4.07 4.10 4.12 T:norx3241v2 4.10 4.12 4.12 T:norx3241v3 4.28 4.28 4.29 T:aesjambuv1 4.48 4.51 4.58 T:oceankeyakv2 4.58 4.59 4.60 T:norx6461v2 4.61 4.63 4.67 T:norx6461v3 4.68 4.70 4.72 T:norx6444v2 4.83 4.85 4.88 T:norx3241v1 5.37 5.39 5.41 T:norx6461v1 5.50 5.51 5.52 T:norx6444v1 5.79 5.81 5.84 T:riverkeyakv2 6.13 6.15 6.16 T:norx3261v2 6.17 6.19 6.21 T:norx3261v3 6.38 6.39 6.43 ascon128av12 6.47 6.48 6.53 T:acorn128v3 6.53 6.53 6.55 T:ascon128av11 6.54 6.55 6.57 T:ascon96v1 6.59 6.60 6.61 T:acorn128v2 6.77 6.84 6.86 T:ketjemajorv2 7.67 7.69 7.72 T:norx3261v1 7.69 7.74 7.82 T:lunarkeyakv2 8.32 8.37 8.42 T:ketjeminorv2 9.24 9.27 9.28 T:ascon128v1 9.27 9.28 9.34 T:ascon128v11 9.47 9.48 9.49 ascon128v12 11.46 11.47 11.48 T:aes128otrsv2 11.45 11.48 11.49 T:aes128otrsv1 11.58 11.63 11.64 T:aes128otrpv1 11.60 11.64 11.65 T:aes128otrpv2 14.50 14.50 14.53 T:twine80n6t4clocv3 14.66 14.67 14.70 T:aes256otrsv2 14.75 14.84 14.91 T:aes256otrsv1 15.17 15.18 15.19 T:aes256otrpv2 15.18 15.19 15.20 T:aes256otrpv1 15.42 15.42 15.43 T:twine80n6t4clocv2 15.82 15.84 15.84 T:aes128n12clocv1 15.85 15.86 15.87 T:aes128n8clocv1 21.93 21.95 22.39 T:proest256otrv1 23.05 23.07 23.08 T:aeadaes128ocbtaglen96v1 23.05 23.07 23.09 T:aeadaes128ocbtaglen64v1 26.09 26.43 26.50 T:ketjesrv1 27.23 27.32 27.36 T:aeadaes192ocbtaglen96v1 27.32 27.34 27.37 T:aeadaes192ocbtaglen64v1 27.57 27.59 27.62 T:ketjesrv2 31.62 31.65 31.68 T:aeadaes256ocbtaglen64v1 31.64 31.66 31.67 T:aeadaes256ocbtaglen96v1 37.06 37.10 37.12 T:colm127v1 45.64 46.37 46.88 T:ketjejrv1 46.93 46.97 47.04 T:proest128otrv1 66.80 66.92 67.32 T:deoxysneq128128v13 71.47 71.66 71.68 T:present80n6t4silcv3 71.49 71.85 72.10 T:ketjejrv2 83.51 83.67 83.91 T:aezv1 100.62 100.68 101.12 T:deoxyseq128128v13 121.64 122.12 122.45 T:deoxysneq256128v13 126.25 126.67 126.97 T:led80n6t4silcv3 182.36 184.26 184.64 T:deoxyseq256128v13 455.05 458.56 461.56 T:acorn128 2848.81 2853.03 2856.78 T:led80n6t4silcv2 2852.09 2854.77 2872.31 T:led80n6silcv1 2956.22 2957.62 2960.23 T:present80n6silcv1 2954.09 2959.02 2959.65 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.26 0.26 0.27 aegis128l 0.28 0.28 0.29 T:tiaoxinv1 0.28 0.29 0.30 T:tiaoxinv2 0.36 0.37 0.38 T:aezv4 0.38 0.38 0.40 T:aezv3 0.38 0.39 0.39 T:aegis128 0.39 0.40 0.41 T:aezv5 0.42 0.44 0.45 aegis256 0.55 0.55 0.58 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.65 T:aes128otrpv3 0.64? 0.65? 1.82? T:aeadaes192ocbtaglen128v1 0.68 0.68 0.68 T:aes128otrcv3 0.76 0.77 0.78 T:aeadaes256ocbtaglen128v1 0.81 0.81 0.81 T:aes256otrpv3 0.81 0.81 0.82 T:aes128gcmv1 0.87 0.87 0.87 T:aes256otrcv3 0.93 0.93 0.94 aes256gcmv1 1.03 1.04 1.05 T:deoxysi128v141 1.06 1.07 1.10 T:deoxysneq128128v1 1.16 1.16 1.17 T:morus1280256v1 1.16 1.16 1.17 T:morus1280128v1 1.17 1.18 1.19 T:morus1280256v2 1.17 1.18 1.19 T:morus1280128v2 1.18 1.21 1.24 T:deoxysi256v141 1.20 1.21 1.22 T:deoxysneq256128v1 1.29 1.30 1.31 T:morus640128v1 1.30 1.32 1.33 T:morus640128v2 1.37 1.37 1.37 T:aes128otrsv3 1.42 1.42 1.45 T:colm0v1 1.43 1.44 1.46 T:deoxysii128v141 1.57 1.58 1.59 T:deoxyseq128128v1 1.63 1.64 1.67 T:deoxysii256v141 1.74 1.74 1.75 T:deoxyseq256128v1 1.84 1.84 1.85 T:aes256otrsv3 2.09 2.09 2.12 T:aes128n8t8clocv2 2.09 2.09 2.12 T:aes128n12t8clocv2 2.09 2.10 2.12 T:aes128n12t8clocv3 2.10 2.11 2.14 T:aes128n8t8silcv2 2.10 2.11 2.14 T:aes128n12t8silcv3 2.10 2.11 2.14 T:aes128n12t8silcv2 3.09 3.10 3.12 T:norx6441v2 3.08 3.11 3.13 T:norx6441v3 3.25 3.26 3.27 T:lakekeyakv2 3.40 3.41 3.44 T:seakeyakv2 3.53 3.56 3.60 T:lakekeyakv1 3.59 3.60 3.64 T:norx6441v1 3.87 3.89 3.90 T:norx6444v3 4.06 4.07 4.08 T:norx3241v2 4.07 4.07 4.09 T:norx3241v3 4.43 4.44 4.44 T:aesjambuv1 4.51 4.54 4.60 T:oceankeyakv2 4.62 4.65 4.69 T:norx6461v3 4.66 4.68 4.70 T:norx6461v2 4.68 4.71 4.74 T:norx6444v2 4.77 4.80 4.82 T:norx3241v1 5.36 5.36 5.43 T:norx6461v1 5.50 5.51 5.54 T:norx6444v1 5.82 5.83 5.87 T:riverkeyakv2 6.12 6.13 6.16 T:norx3261v2 6.13 6.15 6.17 T:norx3261v3 6.38 6.39 6.40 ascon128av12 6.45 6.46 6.47 T:acorn128v2 6.52 6.53 6.55 T:ascon96v1 6.54 6.56 6.60 T:ascon128av11 6.62 6.63 6.63 T:acorn128v3 6.71 6.77 6.80 T:ketjemajorv2 7.62 7.62 7.63 T:norx3261v1 7.73 7.78 7.87 T:lunarkeyakv2 8.66 8.69 8.70 T:ketjeminorv2 9.17 9.17 9.18 T:ascon128v11 9.16 9.18 9.19 T:ascon128v1 9.44 9.46 9.48 ascon128v12 11.52 11.56 11.61 T:aes128otrsv1 11.56 11.69 11.72 T:aes128otrsv2 11.66 11.69 11.73 T:aes128otrpv1 11.72 11.82 11.88 T:aes128otrpv2 14.45 14.45 14.47 T:twine80n6t4clocv3 14.62 14.79 14.84 T:aes256otrsv1 14.78 14.79 14.81 T:aes256otrsv2 15.22 15.24 15.29 T:aes256otrpv1 15.25 15.28 15.41 T:aes256otrpv2 15.37 15.38 15.42 T:twine80n6t4clocv2 15.63 15.63 15.64 T:aes128n12clocv1 15.66 15.67 15.68 T:aes128n8clocv1 21.95 21.98 22.41 T:proest256otrv1 26.59 26.78 27.32 T:ketjesrv1 27.35 27.37 27.38 T:aeadaes128ocbtaglen64v1 27.37 27.40 27.42 T:aeadaes128ocbtaglen96v1 27.72 27.87 28.07 T:ketjesrv2 32.54 32.56 32.57 T:aeadaes192ocbtaglen96v1 32.54 32.56 32.59 T:aeadaes192ocbtaglen64v1 37.84 37.86 37.90 T:aeadaes256ocbtaglen96v1 37.85 37.87 37.87 T:aeadaes256ocbtaglen64v1 45.44 45.46 45.53 T:colm127v1 46.05 46.16 47.07 T:proest128otrv1 45.77 46.40 46.87 T:ketjejrv1 71.62 71.66 71.72 T:present80n6t4silcv3 72.08 72.16 72.23 T:ketjejrv2 79.50 79.56 80.04 T:deoxysneq128128v13 83.58 84.17 84.26 T:aezv1 100.46 101.11 101.23 T:deoxyseq128128v13 126.53 126.78 126.99 T:led80n6t4silcv3 135.92 136.07 136.14 T:deoxysneq256128v13 182.51 184.24 184.65 T:deoxyseq256128v13 455.50 458.04 461.46 T:acorn128 2852.78 2859.46 2865.16 T:led80n6t4silcv2 2860.72 2873.97 2883.29 T:led80n6silcv1 2956.67 2957.46 2959.03 T:present80n6silcv1 2953.26 2959.03 2960.26 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.22? 0.22? 0.25? T:aezv4 0.23 0.23 0.23 T:aezv3 0.24 0.24 0.26 T:aezv5 0.25 0.26 0.26 aegis128l 0.28 0.29 0.30 T:tiaoxinv2 0.28 0.29 0.31 T:tiaoxinv1 0.38 0.39 0.39 T:aegis128 0.44 0.45 0.45 aegis256 0.55 0.55 0.55 T:aeadaes128ocbtaglen128v1 0.64 0.64 0.64 T:aes128otrpv3 0.65 0.65 0.65 T:aeadaes192ocbtaglen128v1 0.68 0.68 0.68 T:aes128otrcv3 0.76 0.76 0.76 T:aeadaes256ocbtaglen128v1 0.80 0.81 0.81 T:aes128gcmv1 0.81 0.82 0.82 T:aes256otrpv3 0.86 0.87 0.87 T:aes256otrcv3 0.92 0.93 0.93 aes256gcmv1 1.03 1.04 1.06 T:deoxysi128v141 1.05 1.06 1.07 T:deoxysneq128128v1 1.16 1.16 1.16 T:morus1280256v1 1.16 1.17 1.17 T:morus1280128v1 1.17 1.17 1.18 T:morus1280128v2 1.17 1.17 1.18 T:morus1280256v2 1.17 1.18 1.19 T:deoxysi256v141 1.20 1.20 1.22 T:deoxysneq256128v1 1.29 1.29 1.31 T:morus640128v1 1.31 1.31 1.32 T:morus640128v2 1.37 1.37 1.37 T:aes128otrsv3 1.42 1.42 1.42 T:colm0v1 1.42 1.43 1.43 T:deoxysii128v141 1.56 1.56 1.57 T:deoxyseq128128v1 1.62 1.62 1.63 T:deoxysii256v141 1.74 1.75 1.76 T:deoxyseq256128v1 1.84 1.84 1.84 T:aes256otrsv3 2.08 2.12 2.12 T:aes128n8t8clocv2 2.08 2.12 2.12 T:aes128n12t8clocv2 2.11 2.12 2.12 T:aes128n12t8clocv3 2.09 2.14 2.14 T:aes128n12t8silcv3 2.10 2.14 2.14 T:aes128n12t8silcv2 2.10 2.14 2.14 T:aes128n8t8silcv2 3.08 3.10 3.11 T:norx6441v2 3.07 3.10 3.11 T:norx6441v3 3.26 3.27 3.28 T:lakekeyakv2 3.41 3.42 3.43 T:seakeyakv2 3.55 3.58 3.59 T:lakekeyakv1 3.57 3.59 3.61 T:norx6441v1 3.86 3.87 3.89 T:norx6444v3 4.05 4.06 4.08 T:norx3241v2 4.06 4.07 4.07 T:norx3241v3 4.42 4.43 4.43 T:aesjambuv1 4.53 4.54 4.56 T:oceankeyakv2 4.63 4.64 4.68 T:norx6461v3 4.65 4.67 4.69 T:norx6461v2 4.71 4.73 4.76 T:norx6444v2 4.79 4.80 4.81 T:norx3241v1 5.35 5.37 5.38 T:norx6461v1 5.52 5.53 5.57 T:norx6444v1 5.84 5.84 5.86 T:riverkeyakv2 6.10 6.12 6.14 T:norx3261v2 6.14 6.15 6.16 T:norx3261v3 6.38 6.39 6.40 ascon128av12 6.46 6.46 6.47 T:acorn128v2 6.51 6.53 6.54 T:ascon96v1 6.54 6.55 6.59 T:ascon128av11 6.62 6.63 6.63 T:acorn128v3 6.74 6.79 6.81 T:ketjemajorv2 7.61 7.61 7.62 T:norx3261v1 7.74 7.75 7.82 T:lunarkeyakv2 8.66 8.68 8.71 T:ketjeminorv2 9.16 9.16 9.18 T:ascon128v1 9.17 9.18 9.19 T:ascon128v11 9.45 9.51 9.51 ascon128v12 11.55 11.57 11.59 T:aes128otrsv1 11.58 11.71 11.75 T:aes128otrsv2 11.65 11.74 11.76 T:aes128otrpv1 11.76 11.85 11.91 T:aes128otrpv2 14.46 14.46 14.49 T:twine80n6t4clocv3 14.79 14.81 14.82 T:aes256otrsv2 14.77 14.81 14.86 T:aes256otrsv1 15.24 15.29 15.32 T:aes256otrpv1 15.39 15.39 15.43 T:twine80n6t4clocv2 15.28 15.42 15.44 T:aes256otrpv2 15.62 15.64 15.65 T:aes128n12clocv1 15.65 15.67 15.69 T:aes128n8clocv1 21.94 21.95 22.41 T:proest256otrv1 26.75 26.90 27.18 T:ketjesrv1 27.33 27.35 27.37 T:aeadaes128ocbtaglen64v1 27.36 27.38 27.40 T:aeadaes128ocbtaglen96v1 27.74 27.91 28.04 T:ketjesrv2 32.54 32.55 32.57 T:aeadaes192ocbtaglen64v1 32.55 32.57 32.60 T:aeadaes192ocbtaglen96v1 37.83 37.86 37.91 T:aeadaes256ocbtaglen96v1 37.83 37.87 37.89 T:aeadaes256ocbtaglen64v1 45.43 45.47 45.55 T:colm127v1 46.10 46.16 47.06 T:proest128otrv1 45.81 46.40 46.90 T:ketjejrv1 71.50 71.66 71.78 T:present80n6t4silcv3 72.04 72.11 72.24 T:ketjejrv2 79.22 79.29 79.80 T:deoxysneq128128v13 83.39 84.12 84.16 T:aezv1 100.38 100.60 101.09 T:deoxyseq128128v13 126.40 126.78 127.16 T:led80n6t4silcv3 135.79 136.10 136.25 T:deoxysneq256128v13 182.47 184.20 184.51 T:deoxyseq256128v13 454.38 457.23 461.29 T:acorn128 2850.88 2856.37 2862.71 T:led80n6t4silcv2 2859.68 2872.13 2877.14 T:led80n6silcv1 2956.20 2957.02 2958.43 T:present80n6silcv1 2953.67 2958.32 2960.19 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.11? 1.12? 1.43? aegis128l 1.05? 1.16? 1.32? T:aegis128 1.30? 1.40? 1.64? aegis256 1.42? 1.45? 1.88? T:aezv5 1.43? 1.46? 1.91? T:aezv4 1.34? 1.49? 1.83? T:tiaoxinv2 1.41? 1.55? 1.85? T:tiaoxinv1 1.58? 1.59? 1.76? T:aezv3 1.65? 1.66? 2.52? T:aeadaes128ocbtaglen128v1 2.07 2.11 2.28 T:aes128otrpv3 2.11? 2.13? 2.90? T:aeadaes256ocbtaglen128v1 2.34 2.39 2.41 T:aes128otrsv3 2.53 2.57 2.62 T:aes128n12t8clocv2 2.55? 2.59? 2.88? T:aes256otrpv3 2.57 2.61 2.65 T:aes128n8t8clocv2 2.57 2.70 2.84 T:aes128n12t8clocv3 2.76 2.78 2.86 T:colm0v1 2.81 2.86 2.88 T:aes128n8t8silcv2 2.84 2.88 2.94 T:aes128n12t8silcv3 2.82 2.90 2.91 T:aes128otrcv3 2.84 2.90 2.95 T:aes128n12t8silcv2 3.09 3.11 3.16 T:aes256otrsv3 3.09 3.14 3.25 T:deoxysneq128128v1 3.50 3.61 3.70 T:deoxysi128v141 3.59 3.62 3.63 T:aes256otrcv3 3.17? 3.64? 31.20? T:aeadaes192ocbtaglen128v1 4.11 4.20 4.27 T:deoxysneq256128v1 4.30 4.38 4.70 T:morus640128v1 4.47 4.55 4.60 T:aes128gcmv1 4.48 4.57 4.66 T:deoxysi256v141 4.53 4.60 4.73 T:morus640128v2 4.88 4.97 5.16 aes256gcmv1 5.05 5.15 5.41 T:deoxyseq128128v1 5.05 5.21 5.37 T:deoxysii128v141 5.61 5.63 5.65 T:aesjambuv1 5.75 5.80 5.97 T:deoxyseq256128v1 5.76 5.84 6.02 T:deoxysii256v141 6.05 6.11 6.38 T:morus1280128v1 6.08 6.20 6.48 T:morus1280256v1 6.38 6.40 6.54 T:morus1280128v2 6.43 6.52 6.73 T:morus1280256v2 9.62 9.81 10.21 ascon128av12 9.81 9.98 10.30 T:ascon96v1 9.83 9.98 10.23 T:ascon128av11 9.85 10.00 10.26 T:norx3241v1 9.99 10.11 10.38 T:norx3241v2 9.91 10.12 10.20 T:norx6441v1 10.01 10.15 10.66 T:norx3241v3 9.95 10.17 10.54 T:norx6441v3 9.98 10.17 10.53 T:norx6441v2 12.07 12.19 12.72 T:ascon128v11 12.14 12.23 12.74 T:ascon128v1 12.25 12.37 12.72 T:lakekeyakv1 12.60 12.77 13.10 ascon128v12 13.56 13.77 14.20 T:riverkeyakv2 13.83 13.87 14.80 T:lakekeyakv2 14.91 14.96 15.33 T:norx6461v2 14.98 15.10 15.38 T:norx3261v2 14.94 15.12 15.55 T:norx6461v1 14.95 15.15 15.37 T:norx3261v3 14.84 15.20 15.65 T:norx6461v3 15.88 15.91 15.95 T:norx3261v1 18.29 18.43 18.68 T:aes128otrsv2 18.32 18.48 18.75 T:aes128otrsv1 18.41 18.54 19.05 T:twine80n6t4clocv3 18.61 18.77 19.06 T:aes128otrpv1 18.77 18.84 19.20 T:aes128otrpv2 19.28 19.39 19.62 T:aes128n8clocv1 19.47 19.55 19.75 T:aes128n12clocv1 19.51 19.58 19.63 T:twine80n6t4clocv2 23.23 23.40 23.44 T:norx6444v3 23.33 23.80 24.19 T:aes256otrsv1 24.41 24.45 24.80 T:aes256otrpv2 24.30 24.47 24.62 T:aes256otrpv1 24.30 24.57 25.13 T:aes256otrsv2 27.37 27.56 27.89 T:acorn128v2 27.58 27.99 28.42 T:acorn128v3 29.33 29.46 29.52 T:ketjeminorv2 30.72 30.89 31.48 T:seakeyakv2 33.67 33.87 34.23 T:norx6444v2 35.82 35.92 36.49 T:aeadaes128ocbtaglen64v1 35.77 36.20 36.91 T:aeadaes128ocbtaglen96v1 39.47 39.65 39.83 T:norx6444v1 41.38 41.43 42.71 T:ketjemajorv2 41.91 42.16 42.38 T:aeadaes192ocbtaglen96v1 41.91 42.16 42.87 T:aeadaes192ocbtaglen64v1 42.15 42.23 42.40 T:ketjesrv1 48.88 49.01 49.17 T:ketjesrv2 48.96 49.33 49.55 T:aeadaes256ocbtaglen64v1 48.89 49.41 50.01 T:aeadaes256ocbtaglen96v1 48.95 49.77 50.70 T:oceankeyakv2 53.98 54.25 54.50 T:colm127v1 60.20 60.68 61.29 T:ketjejrv1 63.12 63.95 64.94 T:proest256otrv1 76.30 76.62 77.70 T:deoxysneq128128v13 87.77 87.85 88.02 T:present80n6t4silcv3 90.13 90.57 90.66 T:proest128otrv1 96.38 96.59 96.95 T:ketjejrv2 100.29 100.64 101.45 T:aezv1 124.25 124.83 126.00 T:lunarkeyakv2 124.80 125.23 125.57 T:deoxyseq128128v13 136.78 137.20 138.08 T:deoxysneq256128v13 149.48 149.69 149.91 T:led80n6t4silcv3 228.20 229.23 229.52 T:deoxyseq256128v13 1632.71 1635.09 1660.91 T:acorn128 3191.20 3207.43 3222.05 T:led80n6silcv1 3213.95 3218.25 3219.77 T:led80n6t4silcv2 3292.28 3293.41 3302.32 T:present80n6silcv1 3298.20 3299.27 3308.80 T:present80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.05? 1.07? 1.27? T:aegis128 1.12? 1.19? 1.67? aegis128l 1.41? 1.45? 1.91? T:aezv5 1.41? 1.45? 1.80? aegis256 1.38? 1.48? 1.83? T:tiaoxinv1 1.44? 1.48? 1.73? T:aezv4 1.56 1.59 1.63 T:aezv3 1.45? 1.61? 1.97? T:tiaoxinv2 1.80? 1.81? 2.02? T:aeadaes128ocbtaglen128v1 2.06 2.09 2.26 T:aes128otrpv3 2.38? 2.43? 2.71? T:aeadaes256ocbtaglen128v1 2.44 2.47 2.47 T:aes128otrsv3 2.54? 2.59? 3.05? T:aes256otrpv3 2.72 2.74 2.78 T:aes128n12t8clocv2 2.70 2.75 2.76 T:aes128n8t8clocv2 2.95 3.03 3.03 T:aes128otrcv3 3.05 3.06 3.08 T:aes128n12t8silcv2 3.05 3.06 3.08 T:aes128n12t8silcv3 3.22 3.23 3.30 T:colm0v1 3.40 3.41 3.41 T:aes256otrsv3 2.73? 3.50? 3.54? T:aes128n12t8clocv3 3.53? 3.58? 6.25? T:aeadaes192ocbtaglen128v1 3.72 3.87 3.87 T:aes256otrcv3 3.06? 3.88? 3.91? T:aes128n8t8silcv2 4.38 4.45 4.58 T:morus640128v1 4.41 4.48 4.58 T:deoxysneq128128v1 4.43 4.48 4.58 T:aes128gcmv1 4.68 4.76 4.88 T:morus640128v2 4.93 5.04 5.09 aes256gcmv1 5.09 5.13 5.20 T:deoxysi128v141 5.07 5.22 5.49 T:deoxysneq256128v1 5.74 5.77 5.79 T:aesjambuv1 5.66 5.80 5.95 T:deoxysii128v141 5.90 5.93 6.22 T:deoxysi256v141 6.19 6.38 6.57 T:morus1280128v1 6.14 6.45 6.67 T:morus1280256v1 6.53 6.59 6.80 T:morus1280256v2 6.50 6.68 6.78 T:morus1280128v2 6.83 6.88 7.37 T:deoxyseq256128v1 6.88 6.96 7.06 T:deoxysii256v141 7.06 7.12 7.25 T:deoxyseq128128v1 9.75 9.86 10.12 ascon128av12 9.79 9.91 10.06 T:ascon128av11 9.82 9.97 10.26 T:ascon96v1 9.96 10.03 10.20 T:norx6441v1 10.05 10.11 10.19 T:norx3241v1 10.15 10.20 10.45 T:norx3241v2 10.13 10.22 10.41 T:norx3241v3 10.34 10.48 10.85 T:norx6441v2 10.43 10.58 11.12 T:norx6441v3 11.95 12.07 12.48 T:ascon128v11 12.07 12.22 12.88 T:ascon128v1 12.13 12.47 13.20 T:lakekeyakv1 12.45 12.79 13.13 ascon128v12 13.52 13.58 13.77 T:riverkeyakv2 13.88 13.90 14.49 T:lakekeyakv2 14.82 14.95 15.07 T:norx6461v1 15.17 15.31 15.70 T:norx3261v3 15.13 15.34 15.56 T:norx3261v2 15.40 15.60 15.98 T:norx6461v2 15.48 15.66 15.98 T:norx6461v3 16.01 16.03 16.09 T:norx3261v1 18.51 18.63 19.18 T:twine80n6t4clocv3 18.64 18.76 19.34 T:aes128otrsv1 18.62 19.04 19.34 T:aes128otrsv2 18.98 19.22 19.53 T:aes128otrpv1 19.16 19.26 19.87 T:aes128otrpv2 19.23 19.37 19.62 T:aes128n8clocv1 19.30 19.50 19.60 T:aes128n12clocv1 19.62 19.64 19.68 T:twine80n6t4clocv2 23.27 23.48 23.67 T:norx6444v3 23.34 23.66 24.45 T:aes256otrsv1 24.88 24.98 25.39 T:aes256otrpv2 24.66 25.04 25.29 T:aes256otrpv1 24.40 25.12 26.30 T:aes256otrsv2 27.16 27.66 28.03 T:acorn128v2 28.06 28.56 29.04 T:acorn128v3 29.48 29.56 29.84 T:ketjeminorv2 30.72 31.02 31.26 T:seakeyakv2 33.88 34.33 34.70 T:norx6444v2 39.70 39.94 40.51 T:norx6444v1 41.52 41.98 42.91 T:ketjemajorv2 42.77 43.15 43.52 T:ketjesrv1 43.52 43.60 43.84 T:aeadaes128ocbtaglen64v1 43.54 43.70 44.05 T:aeadaes128ocbtaglen96v1 49.04 49.59 50.27 T:oceankeyakv2 49.37 49.78 50.20 T:ketjesrv2 51.02 51.16 51.55 T:aeadaes192ocbtaglen64v1 51.15 51.30 51.65 T:aeadaes192ocbtaglen96v1 59.95 60.12 60.38 T:aeadaes256ocbtaglen64v1 59.96 60.33 60.55 T:aeadaes256ocbtaglen96v1 60.46 60.96 61.55 T:ketjejrv1 62.59 62.72 62.92 T:colm127v1 64.05 64.87 65.48 T:proest256otrv1 87.85 88.16 88.73 T:present80n6t4silcv3 88.57 88.87 89.86 T:deoxysneq128128v13 90.00 91.98 94.92 T:proest128otrv1 97.42 97.73 98.08 T:ketjejrv2 109.73 109.90 110.98 T:aezv1 124.51 125.19 126.12 T:lunarkeyakv2 124.80 125.45 125.91 T:deoxyseq128128v13 149.65 150.12 150.37 T:led80n6t4silcv3 151.08 151.75 151.91 T:deoxysneq256128v13 228.76 229.12 229.83 T:deoxyseq256128v13 1629.85 1636.70 1659.59 T:acorn128 3187.12 3193.68 3223.55 T:led80n6t4silcv2 3197.77 3207.00 3215.50 T:led80n6silcv1 3293.29 3294.11 3303.65 T:present80n6silcv1 3298.09 3301.16 3307.33 T:present80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.05 1.08 1.10 T:aegis128 1.12 1.12 1.13 T:aezv4 1.11? 1.16? 1.75? T:aezv5 1.15? 1.19? 1.28? aegis128l 1.21? 1.23? 1.83? T:aezv3 1.43? 1.44? 2.27? aegis256 1.41? 1.45? 1.96? T:tiaoxinv1 1.35? 1.45? 1.97? T:tiaoxinv2 1.79 1.83 1.90 T:aeadaes128ocbtaglen128v1 2.08 2.09 2.13 T:aes128otrpv3 2.45 2.47 2.47 T:aes128otrsv3 2.43 2.48 2.51 T:aeadaes256ocbtaglen128v1 2.53 2.55 2.56 T:aes256otrpv3 2.55? 2.57? 3.48? T:aes128n12t8clocv2 2.57? 2.61? 3.52? T:aes128n8t8clocv2 2.85? 2.90? 3.88? T:aes128n12t8silcv2 2.87? 2.92? 3.88? T:aes128n12t8silcv3 3.02 3.03 3.04 T:aes128otrcv3 3.40 3.40 3.41 T:aes256otrsv3 2.60? 3.48? 3.50? T:aes128n12t8clocv3 3.54? 3.58? 32.73? T:aeadaes192ocbtaglen128v1 2.89? 3.87? 3.88? T:aes128n8t8silcv2 3.87 3.87 3.87 T:aes256otrcv3 3.30? 4.28? 4.35? T:colm0v1 4.30 4.38 4.73 T:deoxysneq128128v1 4.32 4.39 4.49 T:morus640128v1 4.37 4.40 4.43 T:aes128gcmv1 4.64 4.70 4.80 T:morus640128v2 4.86 4.92 5.04 aes256gcmv1 4.87 4.96 5.34 T:deoxysneq256128v1 5.06 5.10 5.20 T:deoxysi128v141 5.52 5.59 5.77 T:deoxysii128v141 5.74 5.77 5.80 T:aesjambuv1 5.84 5.93 6.29 T:deoxysi256v141 6.09 6.12 6.18 T:morus1280128v1 6.09 6.18 6.29 T:morus1280256v1 6.34 6.38 6.51 T:morus1280128v2 6.32 6.39 6.45 T:morus1280256v2 6.75 6.84 7.32 T:deoxyseq256128v1 6.73 6.88 6.93 T:deoxysii256v141 7.04 7.26 7.52 T:deoxyseq128128v1 9.70 9.77 10.14 T:ascon96v1 9.72 9.87 9.95 ascon128av12 9.70 10.03 10.29 T:ascon128av11 10.01 10.09 10.22 T:norx6441v1 10.11 10.16 10.23 T:norx3241v3 10.00 10.19 10.28 T:norx3241v1 10.17 10.23 10.30 T:norx3241v2 10.41 10.46 10.61 T:norx6441v2 10.42 10.56 10.73 T:norx6441v3 11.96 12.09 12.41 T:ascon128v1 12.07 12.14 12.46 T:ascon128v11 12.25 12.46 12.55 T:lakekeyakv1 12.43 12.52 12.64 ascon128v12 13.62 13.93 14.00 T:riverkeyakv2 13.93 13.95 14.27 T:lakekeyakv2 14.93 15.06 15.10 T:norx6461v1 15.05 15.18 15.36 T:norx3261v2 15.22 15.26 15.28 T:norx3261v3 15.16 15.42 15.64 T:norx6461v2 15.46 15.57 15.74 T:norx6461v3 15.99 16.11 16.13 T:norx3261v1 18.40 18.83 19.00 T:twine80n6t4clocv3 18.73 18.98 19.20 T:aes128otrsv1 18.73 19.06 19.21 T:aes128otrsv2 19.05 19.13 19.38 T:aes128otrpv1 19.23 19.34 19.61 T:aes128n8clocv1 19.14 19.40 19.68 T:aes128otrpv2 19.34 19.61 19.77 T:aes128n12clocv1 19.53 19.62 19.65 T:twine80n6t4clocv2 23.38 23.48 23.58 T:norx6444v3 23.37 23.66 23.80 T:aes256otrsv1 24.52 24.72 24.89 T:aes256otrsv2 24.66 24.81 25.23 T:aes256otrpv1 24.86 25.27 25.42 T:aes256otrpv2 27.09 27.17 27.70 T:acorn128v2 27.89 27.97 28.56 T:acorn128v3 29.59 29.66 29.88 T:ketjeminorv2 30.75 31.05 31.21 T:seakeyakv2 33.81 34.34 34.51 T:norx6444v2 39.83 40.09 40.24 T:norx6444v1 41.51 42.06 42.77 T:ketjemajorv2 42.51 43.03 43.26 T:ketjesrv1 43.50 43.53 43.59 T:aeadaes128ocbtaglen96v1 43.50 43.60 43.73 T:aeadaes128ocbtaglen64v1 48.88 49.38 49.91 T:oceankeyakv2 49.24 49.72 50.59 T:ketjesrv2 51.00 51.10 51.14 T:aeadaes192ocbtaglen64v1 51.05 51.19 51.24 T:aeadaes192ocbtaglen96v1 59.83 59.97 60.20 T:aeadaes256ocbtaglen96v1 59.89 60.05 60.31 T:aeadaes256ocbtaglen64v1 60.54 60.79 61.42 T:ketjejrv1 62.18 62.49 62.80 T:colm127v1 62.48 62.62 63.52 T:proest256otrv1 87.91 88.35 88.64 T:present80n6t4silcv3 88.45 88.84 89.81 T:deoxysneq128128v13 89.47 89.94 90.48 T:proest128otrv1 97.25 97.52 97.74 T:ketjejrv2 109.48 110.02 110.31 T:aezv1 124.43 124.62 125.26 T:lunarkeyakv2 124.71 125.07 125.60 T:deoxyseq128128v13 149.65 150.24 150.54 T:led80n6t4silcv3 150.89 151.45 152.41 T:deoxysneq256128v13 228.23 228.77 229.63 T:deoxyseq256128v13 1624.77 1629.73 1659.66 T:acorn128 3195.09 3209.09 3217.58 T:led80n6t4silcv2 3197.92 3220.38 3226.66 T:led80n6silcv1 3292.97 3295.00 3302.38 T:present80n6silcv1 3297.76 3299.87 3307.80 T:present80n6t4silcv2