VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Gracemont (b06a2-20); 2024 Intel Core 5 210H, E cores; 4 x 1600MHz; freshwrap,little, supercop-20251222

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.22? 0.23? 0.25? T:tiaoxinv1 0.22? 0.24? 0.25? T:tiaoxinv2 0.24? 0.25? 0.27? aegis128l 0.38 0.39 0.40 T:aegis128 0.40 0.41 0.42 aegis256 0.43 0.43 0.45 T:aezv4 0.44 0.45 0.46 T:aezv3 0.46 0.48 0.49 T:aezv5 0.49 0.50 0.53 T:aeadaes128ocbtaglen128v1 0.52 0.53 0.54 T:aes128otrcv3 0.52 0.53 0.54 T:aes128otrpv3 0.52 0.53 0.55 T:aes128otrsv3 -1.42? 0.54? 0.64? T:aeadaes192ocbtaglen128v1 0.57 0.61 0.62 T:aeadaes256ocbtaglen128v1 0.66 0.67 0.68 T:aes256otrpv3 0.66 0.69 0.69 T:aes256otrcv3 0.68 0.69 0.70 T:aes256otrsv3 0.82 0.83 0.85 T:deoxysi128v141 0.89 0.91 0.92 T:deoxysneq128128v1 0.92 0.93 0.95 T:deoxysi256v141 0.94 0.95 0.96 T:aes128gcmv1 0.97 0.98 0.99 T:morus1280256v1 0.98 0.99 1.00 T:morus1280128v2 0.98 0.99 1.01 T:deoxysneq256128v1 0.98 1.00 1.01 T:morus1280128v1 0.99 1.00 1.01 T:morus1280256v2 1.07 1.08 1.09 aes256gcmv1 1.17 1.18 1.19 T:morus640128v2 1.17 1.18 1.20 T:morus640128v1 1.62 1.66 1.69 T:deoxysii128v141 1.77 1.82 1.83 T:deoxyseq128128v1 1.83 1.84 1.85 T:colm0v1 1.82 1.87 1.90 T:deoxysii256v141 2.07 2.08 2.10 T:deoxyseq256128v1 1.97 2.10 2.17 T:lunarkeyakv2 2.12 2.12 2.13 T:aes128n8t8clocv2 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.13 2.13 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n12t8clocv2 2.12 2.13 2.13 T:aes128n12t8silcv3 2.12 2.13 2.13 T:aes128n12t8silcv2 2.55 2.58 2.59 T:norx6444v3 2.60 2.65 2.70 T:norx6441v2 2.62 2.67 2.72 T:norx6441v3 2.75 2.78 2.85 T:seakeyakv2 2.79 2.88 2.93 T:oceankeyakv2 3.07 3.12 3.16 T:lakekeyakv1 3.18 3.23 3.25 T:norx6441v1 3.42 3.44 3.47 T:norx6444v2 3.39 3.54 3.56 T:lakekeyakv2 3.78 3.80 3.83 T:norx3241v3 3.78 3.82 3.83 T:norx3241v2 3.84 3.91 3.96 T:norx6444v1 3.94 3.98 4.02 T:norx6461v2 3.98 4.01 4.06 T:norx6461v3 4.26 4.29 4.30 T:aesjambuv1 4.58 4.61 4.63 T:norx3241v1 4.79 4.81 4.86 T:norx6461v1 5.48 5.51 5.52 T:acorn128v2 5.63 5.68 5.69 T:acorn128v3 5.66 5.71 5.76 T:norx3261v3 5.74 5.78 5.81 T:norx3261v2 6.00 6.04 6.14 T:ketjemajorv2 6.28 6.30 6.31 ascon128av12 6.44 6.46 6.48 T:ascon128av11 6.44 6.46 6.48 T:ascon96v1 7.29 7.31 7.33 T:norx3261v1 7.47 7.53 7.56 T:riverkeyakv2 8.26 8.31 8.32 T:ketjeminorv2 9.08 9.10 9.15 T:ascon128v1 9.09 9.10 9.15 T:ascon128v11 9.34 9.37 9.38 ascon128v12 11.68 11.75 11.84 T:aes128otrsv1 11.73 11.75 11.76 T:aes128otrpv2 11.73 11.75 11.77 T:aes128otrsv2 11.75 11.76 11.78 T:aes128otrpv1 14.51 14.52 14.55 T:twine80n6t4clocv3 15.20 15.23 15.26 T:aes256otrpv1 15.22 15.24 15.25 T:aes256otrpv2 15.39 15.45 15.51 T:aes256otrsv1 15.48 15.50 15.51 T:twine80n6t4clocv2 15.45 15.50 15.52 T:aes256otrsv2 20.06 20.13 20.34 T:proest256otrv1 20.50 20.51 20.54 T:aes128n12clocv1 20.54 20.56 20.59 T:aes128n8clocv1 22.77 22.79 22.82 T:aeadaes128ocbtaglen64v1 22.76 22.80 22.82 T:aeadaes128ocbtaglen96v1 26.33 26.65 26.70 T:ketjesrv1 26.95 26.99 27.06 T:aeadaes192ocbtaglen96v1 26.93 26.99 27.03 T:aeadaes192ocbtaglen64v1 27.24 27.43 27.51 T:ketjesrv2 31.14 31.19 31.25 T:aeadaes256ocbtaglen64v1 31.19 31.23 31.27 T:aeadaes256ocbtaglen96v1 44.87 45.04 45.66 T:proest128otrv1 49.35 49.40 49.50 T:colm127v1 49.70 50.52 51.07 T:ketjejrv1 67.15 68.03 68.20 T:deoxysneq128128v13 70.77 71.10 72.13 T:ketjejrv2 71.53 71.54 71.57 T:present80n6t4silcv3 121.44 122.05 122.36 T:deoxysneq256128v13 125.40 125.98 126.07 T:led80n6t4silcv3 128.85 129.72 130.35 T:aezv1 132.62 132.95 136.50 T:deoxyseq128128v13 243.51 243.67 243.93 T:deoxyseq256128v13 402.17 408.17 413.44 T:acorn128 3788.61 3794.60 3807.45 T:led80n6t4silcv2 3792.73 3800.93 3811.43 T:led80n6silcv1 3907.45 3910.34 3932.83 T:present80n6silcv1 3915.11 3916.95 3919.75 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.27 0.27 0.28 aegis128l 0.33 0.34 0.35 T:tiaoxinv1 0.34? 0.37? 0.38? T:tiaoxinv2 0.39 0.39 0.40 T:aegis128 0.42 0.44 0.45 T:aezv4 0.41 0.44 0.45 aegis256 0.43 0.45 0.45 T:aezv3 0.44? 0.48? 0.49? T:aezv5 0.51? 0.54? 0.57? T:aeadaes128ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrcv3 0.55 0.56 0.56 T:aes128otrpv3 0.56 0.57 0.58 T:aes128otrsv3 0.47? 0.60? 0.62? T:aeadaes192ocbtaglen128v1 0.70 0.70 0.71 T:aes256otrpv3 0.67 0.71 0.72 T:aeadaes256ocbtaglen128v1 0.70 0.72 0.73 T:aes256otrsv3 0.70 0.72 0.73 T:aes256otrcv3 0.88 0.92 0.93 T:deoxysi128v141 0.92 0.93 0.95 T:deoxysneq128128v1 0.96 0.97 0.98 T:aes128gcmv1 1.00 1.01 1.02 T:morus1280256v2 1.00 1.01 1.02 T:morus1280256v1 1.00 1.01 1.02 T:morus1280128v2 1.00 1.01 1.03 T:morus1280128v1 1.02 1.04 1.06 T:deoxysi256v141 1.08 1.10 1.13 T:deoxysneq256128v1 1.15 1.17 1.19 aes256gcmv1 1.17 1.18 1.19 T:morus640128v1 1.17 1.18 1.19 T:morus640128v2 1.65 1.67 1.69 T:deoxysii128v141 1.81 1.85 1.89 T:deoxysii256v141 1.83 1.85 1.87 T:deoxyseq128128v1 1.86 1.94 2.01 T:colm0v1 2.01 2.06 2.12 T:aes128n8t8silcv2 2.09 2.10 2.12 T:deoxyseq256128v1 2.06 2.11 2.11 T:aes128n12t8clocv3 2.06 2.11 2.11 T:aes128n12t8clocv2 2.06 2.11 2.11 T:aes128n8t8clocv2 2.01 2.12 2.12 T:aes128n12t8silcv3 2.01 2.12 2.12 T:aes128n12t8silcv2 2.04 2.16 2.24 T:lunarkeyakv2 2.50 2.53 2.55 T:norx6444v3 2.62 2.65 2.70 T:norx6441v2 2.62 2.66 2.69 T:norx6441v3 2.80 2.84 2.89 T:seakeyakv2 2.83 2.91 3.02 T:oceankeyakv2 3.12 3.17 3.21 T:lakekeyakv1 3.17 3.19 3.22 T:norx6441v1 3.37 3.41 3.42 T:lakekeyakv2 3.44 3.49 3.52 T:norx6444v2 3.71 3.73 3.74 T:norx3241v2 3.69 3.73 3.74 T:norx3241v3 3.87 3.92 4.00 T:norx6444v1 4.01 4.05 4.09 T:norx6461v3 4.00 4.07 4.12 T:norx6461v2 4.47 4.51 4.52 T:norx3241v1 4.57 4.58 4.58 T:aesjambuv1 4.73 4.77 4.81 T:norx6461v1 5.47 5.51 5.53 T:acorn128v2 5.62 5.66 5.69 T:norx3261v2 5.68 5.72 5.75 T:norx3261v3 5.82 5.85 5.94 T:ketjemajorv2 5.83 5.87 5.90 T:acorn128v3 6.30 6.31 6.33 ascon128av12 6.42 6.45 6.48 T:ascon96v1 6.45 6.48 6.51 T:ascon128av11 7.13 7.14 7.18 T:norx3261v1 7.54 7.60 7.63 T:riverkeyakv2 8.97 9.00 9.03 T:ascon128v1 8.98 9.02 9.06 T:ascon128v11 9.04 9.06 9.09 T:ketjeminorv2 9.34 9.35 9.37 ascon128v12 11.78 11.85 11.89 T:aes128otrsv1 11.81 11.91 11.97 T:aes128otrpv1 11.86 12.19 12.24 T:aes128otrpv2 11.91 12.21 12.25 T:aes128otrsv2 14.39 14.42 14.46 T:twine80n6t4clocv3 15.18 15.24 15.32 T:aes256otrsv1 15.29 15.40 15.45 T:aes256otrpv1 15.44 15.50 15.60 T:twine80n6t4clocv2 15.33 15.67 15.73 T:aes256otrpv2 15.68 15.70 15.76 T:aes256otrsv2 19.77 20.06 20.28 T:proest256otrv1 20.08 20.12 20.16 T:aes128n12clocv1 20.14 20.18 20.26 T:aes128n8clocv1 27.63 27.73 28.09 T:ketjesrv1 27.82 27.97 28.02 T:ketjesrv2 31.03 31.09 31.14 T:aeadaes128ocbtaglen96v1 31.07 31.10 31.17 T:aeadaes128ocbtaglen64v1 37.07 37.11 37.16 T:aeadaes192ocbtaglen64v1 37.06 37.13 37.17 T:aeadaes192ocbtaglen96v1 43.12 43.17 43.21 T:aeadaes256ocbtaglen64v1 43.12 43.19 43.24 T:aeadaes256ocbtaglen96v1 43.73 43.92 45.34 T:proest128otrv1 49.95 50.51 51.07 T:ketjejrv1 66.03 66.09 66.24 T:colm127v1 71.51 71.57 71.61 T:present80n6t4silcv3 72.51 72.70 72.92 T:ketjejrv2 91.79 92.52 93.81 T:deoxysneq128128v13 125.72 126.29 126.65 T:led80n6t4silcv3 128.87 129.84 130.37 T:aezv1 132.43 133.08 136.62 T:deoxyseq128128v13 149.62 150.01 150.52 T:deoxysneq256128v13 243.78 243.87 244.20 T:deoxyseq256128v13 404.49 406.78 412.92 T:acorn128 3789.39 3799.68 3813.88 T:led80n6t4silcv2 3794.21 3806.40 3811.48 T:led80n6silcv1 3908.88 3911.91 3931.62 T:present80n6silcv1 3914.27 3916.24 3923.04 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.12? 0.17? 0.17? T:aezv4 0.13? 0.17? 0.22? T:aezv3 0.18? 0.19? 0.23? T:aezv5 0.27 0.28 0.28 aegis128l 0.30? 0.34? 0.35? T:tiaoxinv2 0.33? 0.34? 0.37? T:tiaoxinv1 0.39 0.40 0.41 T:aegis128 0.41? 0.47? 0.48? aegis256 0.53 0.53 0.54 T:aeadaes128ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrcv3 0.55 0.56 0.57 T:aes128otrpv3 0.56 0.57 0.57 T:aes128otrsv3 0.59? 0.61? 2.53? T:aeadaes192ocbtaglen128v1 0.67 0.69 0.70 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.70 T:aes256otrsv3 0.70 0.70 0.71 T:aes256otrcv3 0.70 0.71 0.72 T:aes256otrpv3 0.89 0.91 0.94 T:deoxysi128v141 0.91 0.93 0.96 T:deoxysneq128128v1 0.95 0.96 0.97 T:aes128gcmv1 1.00 1.01 1.02 T:morus1280128v1 1.00 1.01 1.02 T:morus1280128v2 1.01 1.02 1.03 T:morus1280256v1 1.00 1.02 1.03 T:morus1280256v2 1.00 1.04 1.06 T:deoxysi256v141 1.07 1.12 1.14 T:deoxysneq256128v1 1.16 1.17 1.18 aes256gcmv1 1.17 1.18 1.20 T:morus640128v1 1.17 1.19 1.21 T:morus640128v2 1.64 1.65 1.66 T:deoxysii128v141 1.83 1.85 1.86 T:deoxysii256v141 1.83 1.86 1.88 T:deoxyseq128128v1 1.92 1.94 1.94 T:colm0v1 2.01 2.06 2.11 T:aes128n12t8clocv3 2.08 2.11 2.14 T:deoxyseq256128v1 2.01 2.11 2.11 T:aes128n8t8clocv2 2.06 2.11 2.11 T:aes128n12t8clocv2 2.06 2.13 2.13 T:aes128n12t8silcv2 1.99 2.13 2.13 T:aes128n8t8silcv2 2.06 2.13 2.13 T:aes128n12t8silcv3 2.08 2.19 2.29 T:lunarkeyakv2 2.50 2.53 2.56 T:norx6444v3 2.64 2.67 2.70 T:norx6441v3 2.65 2.69 2.71 T:norx6441v2 2.87 2.89 2.92 T:seakeyakv2 2.87 2.97 3.03 T:oceankeyakv2 3.15 3.18 3.22 T:lakekeyakv1 3.15 3.21 3.24 T:norx6441v1 3.39 3.43 3.43 T:lakekeyakv2 3.45 3.49 3.52 T:norx6444v2 3.71 3.72 3.73 T:norx3241v3 3.70 3.73 3.75 T:norx3241v2 3.90 3.95 4.00 T:norx6444v1 3.98 4.01 4.07 T:norx6461v3 4.03 4.06 4.10 T:norx6461v2 4.48 4.51 4.52 T:norx3241v1 4.57 4.58 4.58 T:aesjambuv1 4.75 4.78 4.80 T:norx6461v1 5.48 5.52 5.54 T:acorn128v2 5.65 5.66 5.69 T:norx3261v2 5.71 5.74 5.78 T:norx3261v3 5.86 5.87 6.00 T:ketjemajorv2 5.85 5.87 5.91 T:acorn128v3 6.32 6.33 6.36 ascon128av12 6.42 6.46 6.48 T:ascon96v1 6.46 6.49 6.50 T:ascon128av11 7.14 7.15 7.17 T:norx3261v1 7.60 7.61 7.65 T:riverkeyakv2 8.97 9.00 9.02 T:ascon128v11 8.97 9.00 9.04 T:ascon128v1 9.04 9.06 9.08 T:ketjeminorv2 9.35 9.36 9.39 ascon128v12 11.84 11.88 11.99 T:aes128otrsv1 11.86 11.91 11.97 T:aes128otrpv1 11.90 11.97 12.27 T:aes128otrsv2 12.23 12.25 12.27 T:aes128otrpv2 14.42 14.43 14.46 T:twine80n6t4clocv3 15.25 15.28 15.32 T:aes256otrsv1 15.30 15.36 15.48 T:aes256otrpv1 15.40 15.49 15.59 T:twine80n6t4clocv2 15.33 15.70 15.75 T:aes256otrpv2 15.71 15.73 15.77 T:aes256otrsv2 19.92 20.13 20.32 T:proest256otrv1 20.10 20.13 20.16 T:aes128n12clocv1 20.18 20.22 20.25 T:aes128n8clocv1 27.67 27.77 28.11 T:ketjesrv1 27.84 28.01 28.06 T:ketjesrv2 31.06 31.10 31.13 T:aeadaes128ocbtaglen64v1 31.03 31.10 31.14 T:aeadaes128ocbtaglen96v1 37.11 37.13 37.16 T:aeadaes192ocbtaglen96v1 37.10 37.15 37.18 T:aeadaes192ocbtaglen64v1 43.11 43.16 43.21 T:aeadaes256ocbtaglen64v1 43.15 43.20 43.23 T:aeadaes256ocbtaglen96v1 43.75 43.94 45.28 T:proest128otrv1 49.97 50.51 51.06 T:ketjejrv1 65.05 65.11 65.16 T:colm127v1 71.53 71.57 71.69 T:present80n6t4silcv3 72.49 72.60 72.72 T:ketjejrv2 91.95 92.90 93.40 T:deoxysneq128128v13 125.90 126.29 126.34 T:led80n6t4silcv3 128.63 129.66 130.24 T:aezv1 132.68 133.05 136.52 T:deoxyseq128128v13 149.50 150.03 150.28 T:deoxysneq256128v13 243.59 243.81 243.92 T:deoxyseq256128v13 404.96 405.85 413.58 T:acorn128 3786.39 3799.23 3810.27 T:led80n6silcv1 3796.31 3801.76 3807.51 T:led80n6t4silcv2 3905.13 3910.80 3931.27 T:present80n6silcv1 3913.67 3915.91 3918.05 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.16? 0.18? 0.21? T:tiaoxinv1 0.15? 0.19? 0.22? T:tiaoxinv2 0.20? 0.22? 0.24? aegis128l 0.29? 0.31? 0.33? T:aezv4 0.30? 0.33? 0.35? T:aezv3 0.34 0.35 0.36 T:aezv5 0.35 0.36 0.37 aegis256 0.37 0.38 0.39 T:aegis128 0.45? 0.49? 0.51? T:aeadaes128ocbtaglen128v1 0.33? 0.53? 0.60? T:aeadaes192ocbtaglen128v1 0.54 0.54 0.55 T:aes128otrcv3 0.54 0.56 0.57 T:aes128otrpv3 0.63 0.66 0.68 T:aeadaes256ocbtaglen128v1 0.68 0.69 0.70 T:aes256otrcv3 0.69 0.70 0.71 T:aes128gcmv1 0.70 0.71 0.72 T:aes256otrpv3 0.75 0.76 0.77 aes256gcmv1 0.80 0.83 0.86 T:deoxysi128v141 0.88 0.92 0.93 T:deoxysneq128128v1 0.92 0.94 0.96 T:deoxysi256v141 0.94 0.95 0.96 T:morus1280256v2 0.94 0.95 0.97 T:morus1280128v2 0.94 0.95 0.96 T:morus1280128v1 0.94 0.96 0.97 T:morus1280256v1 0.98 1.01 1.02 T:deoxysneq256128v1 1.13 1.15 1.16 T:morus640128v1 1.15 1.16 1.17 T:morus640128v2 1.22 1.25 1.28 T:deoxysii128v141 1.30 1.30 1.30 T:aes128otrsv3 1.29 1.30 1.31 T:colm0v1 1.34 1.36 1.37 T:deoxyseq128128v1 1.36 1.41 1.44 T:deoxysii256v141 1.54 1.55 1.57 T:deoxyseq256128v1 1.74 1.74 1.75 T:aes256otrsv3 2.09 2.09 2.10 T:aes128n12t8clocv2 2.09 2.09 2.10 T:aes128n8t8silcv2 2.09 2.09 2.10 T:aes128n8t8clocv2 2.09 2.09 2.10 T:aes128n12t8silcv3 2.09 2.10 2.10 T:aes128n12t8silcv2 2.09 2.10 2.10 T:aes128n12t8clocv3 2.32 2.37 2.39 T:seakeyakv2 2.35 2.41 2.45 T:oceankeyakv2 2.62 2.66 2.67 T:norx6441v2 2.66 2.69 2.71 T:norx6441v3 2.84 2.91 2.98 T:lunarkeyakv2 2.92 2.95 2.98 T:norx6444v3 2.96 2.98 3.01 T:lakekeyakv2 2.96 3.00 3.04 T:lakekeyakv1 3.19 3.21 3.23 T:norx6441v1 3.25 3.30 3.33 T:norx6444v2 3.77 3.80 3.83 T:norx3241v3 3.77 3.82 3.84 T:norx3241v2 3.86 3.88 3.90 T:norx6444v1 3.95 3.99 4.01 T:norx6461v2 3.99 4.04 4.06 T:norx6461v3 4.22 4.24 4.24 T:aesjambuv1 4.55 4.57 4.59 T:norx3241v1 4.76 4.80 4.83 T:norx6461v1 5.19 5.27 5.32 T:ketjemajorv2 5.48 5.51 5.56 T:riverkeyakv2 5.52 5.53 5.55 T:acorn128v3 5.67 5.69 5.71 T:acorn128v2 5.68 5.72 5.77 T:norx3261v2 5.73 5.75 5.78 T:norx3261v3 6.21 6.25 6.33 ascon128av12 6.36 6.38 6.40 T:ascon128av11 6.39 6.40 6.43 T:ascon96v1 7.28 7.29 7.31 T:norx3261v1 7.34 7.40 7.62 T:ketjeminorv2 9.12 9.14 9.20 T:ascon128v11 9.14 9.18 9.21 T:ascon128v1 9.31 9.33 9.36 ascon128v12 11.12 11.15 11.18 T:aes128otrsv2 11.13 11.18 11.19 T:aes128otrsv1 11.30 11.32 11.33 T:aes128otrpv1 11.30 11.33 11.35 T:aes128otrpv2 14.20 14.23 14.25 T:aes256otrsv2 14.31 14.33 14.35 T:twine80n6t4clocv3 14.29 14.44 14.50 T:aes256otrsv1 14.76 14.78 14.80 T:aes256otrpv2 14.77 14.78 14.80 T:aes256otrpv1 15.23 15.24 15.24 T:twine80n6t4clocv2 15.64 15.65 15.67 T:aes128n12clocv1 15.67 15.69 15.70 T:aes128n8clocv1 20.12 20.27 20.73 T:proest256otrv1 22.48 22.50 22.53 T:aeadaes128ocbtaglen64v1 22.48 22.51 22.54 T:aeadaes128ocbtaglen96v1 25.40 25.69 25.98 T:ketjesrv1 26.54 26.67 26.78 T:ketjesrv2 26.58 26.68 26.71 T:aeadaes192ocbtaglen96v1 26.67 26.70 26.72 T:aeadaes192ocbtaglen64v1 30.85 30.89 30.93 T:aeadaes256ocbtaglen96v1 30.87 30.89 30.92 T:aeadaes256ocbtaglen64v1 36.41 36.43 36.48 T:colm127v1 45.13 45.33 45.90 T:proest128otrv1 44.84 45.41 46.40 T:ketjejrv1 66.01 66.45 67.98 T:deoxysneq128128v13 69.84 69.90 70.06 T:ketjejrv2 70.80 70.96 70.98 T:present80n6t4silcv3 85.13 86.26 86.90 T:aezv1 98.21 99.23 100.39 T:deoxyseq128128v13 121.42 122.09 122.18 T:deoxysneq256128v13 125.35 125.69 125.99 T:led80n6t4silcv3 180.32 182.27 182.72 T:deoxyseq256128v13 401.78 405.61 412.32 T:acorn128 2837.24 2843.53 2853.56 T:led80n6silcv1 2834.15 2845.37 2853.80 T:led80n6t4silcv2 2934.45 2939.22 2939.72 T:present80n6t4silcv2 2936.23 2940.45 2941.80 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.21 0.22 0.23 aegis128l 0.21? 0.23? 0.26? T:tiaoxinv1 0.21? 0.24? 0.25? T:tiaoxinv2 0.31 0.32 0.33 T:aezv4 0.31 0.33 0.34 T:aezv3 0.33? 0.35? 0.38? T:aezv5 0.35 0.36 0.36 T:aegis128 0.36? 0.41? 0.48? aegis256 0.47 0.50 0.52 T:aeadaes128ocbtaglen128v1 -0.40? 0.55? 1.57? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.57 0.57 0.57 T:aes128otrpv3 0.67 0.70 0.71 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.70 T:aes256otrcv3 0.70 0.72 0.73 T:aes128gcmv1 0.72 0.72 0.73 T:aes256otrpv3 0.80 0.83 0.84 aes256gcmv1 0.84 0.87 0.89 T:deoxysi128v141 0.88 0.92 0.93 T:deoxysneq128128v1 0.93 0.94 0.95 T:morus1280256v1 0.93 0.94 0.95 T:morus1280256v2 0.93 0.94 0.95 T:morus1280128v2 0.94 0.95 0.95 T:morus1280128v1 0.95 0.98 1.01 T:deoxysi256v141 1.05 1.06 1.07 T:deoxysneq256128v1 1.14 1.15 1.17 T:morus640128v1 1.14 1.16 1.17 T:morus640128v2 1.21 1.26 1.27 T:deoxysii128v141 1.31 1.32 1.32 T:aes128otrsv3 1.30 1.34 1.35 T:colm0v1 1.37 1.38 1.39 T:deoxyseq128128v1 1.38 1.40 1.42 T:deoxysii256v141 1.56 1.58 1.59 T:deoxyseq256128v1 1.75 1.76 1.77 T:aes256otrsv3 2.03 2.06 2.09 T:aes128n8t8silcv2 2.06 2.06 2.09 T:aes128n8t8clocv2 2.06 2.07 2.09 T:aes128n12t8clocv3 2.04 2.08 2.09 T:aes128n12t8clocv2 2.06 2.09 2.09 T:aes128n12t8silcv3 2.06 2.09 2.09 T:aes128n12t8silcv2 2.37 2.41 2.44 T:seakeyakv2 2.38 2.44 2.50 T:oceankeyakv2 2.64 2.66 2.70 T:norx6441v3 2.66 2.67 2.69 T:norx6441v2 2.88 2.91 2.92 T:norx6444v3 2.89 2.95 3.02 T:lunarkeyakv2 2.97 2.99 3.01 T:lakekeyakv2 2.97 3.00 3.06 T:lakekeyakv1 3.18 3.22 3.23 T:norx6441v1 3.25 3.30 3.34 T:norx6444v2 3.75 3.77 3.78 T:norx3241v3 3.75 3.78 3.80 T:norx3241v2 3.85 3.88 3.92 T:norx6444v1 3.97 4.00 4.05 T:norx6461v3 4.00 4.04 4.06 T:norx6461v2 4.36 4.37 4.37 T:aesjambuv1 4.52 4.54 4.56 T:norx3241v1 4.76 4.80 4.83 T:norx6461v1 5.12 5.21 5.24 T:ketjemajorv2 5.52 5.53 5.54 T:acorn128v2 5.51 5.54 5.59 T:riverkeyakv2 5.66 5.67 5.69 T:acorn128v3 5.65 5.69 5.71 T:norx3261v2 5.65 5.70 5.71 T:norx3261v3 6.22 6.24 6.28 ascon128av12 6.36 6.38 6.40 T:ascon96v1 6.37 6.40 6.44 T:ascon128av11 7.21 7.21 7.23 T:norx3261v1 7.74 7.80 7.85 T:ketjeminorv2 9.01 9.04 9.05 T:ascon128v11 9.02 9.05 9.06 T:ascon128v1 9.31 9.32 9.36 ascon128v12 11.20 11.24 11.27 T:aes128otrsv1 11.21 11.35 11.40 T:aes128otrsv2 11.34 11.38 11.42 T:aes128otrpv1 11.35 11.47 11.55 T:aes128otrpv2 14.25 14.27 14.29 T:twine80n6t4clocv3 14.22 14.33 14.35 T:aes256otrsv1 14.32 14.34 14.36 T:aes256otrsv2 14.76 14.79 14.88 T:aes256otrpv1 14.80 14.82 15.01 T:aes256otrpv2 15.19 15.23 15.28 T:twine80n6t4clocv2 15.43 15.46 15.48 T:aes128n12clocv1 15.45 15.48 15.53 T:aes128n8clocv1 20.00 20.20 20.67 T:proest256otrv1 26.08 26.22 26.57 T:ketjesrv1 26.63 26.65 26.70 T:aeadaes128ocbtaglen64v1 26.63 26.66 26.70 T:aeadaes128ocbtaglen96v1 26.76 26.98 27.17 T:ketjesrv2 31.73 31.75 31.80 T:aeadaes192ocbtaglen64v1 31.74 31.77 31.80 T:aeadaes192ocbtaglen96v1 36.86 36.88 36.91 T:aeadaes256ocbtaglen64v1 36.86 36.88 36.94 T:aeadaes256ocbtaglen96v1 44.79 44.85 44.92 T:colm127v1 44.87 44.95 45.25 T:proest128otrv1 45.11 45.44 46.39 T:ketjejrv1 70.76 70.87 70.95 T:ketjejrv2 70.92 70.98 71.02 T:present80n6t4silcv3 78.36 79.03 80.64 T:deoxysneq128128v13 85.97 86.36 86.89 T:aezv1 98.35 99.27 100.74 T:deoxyseq128128v13 125.45 125.68 125.79 T:led80n6t4silcv3 136.13 136.21 136.24 T:deoxysneq256128v13 180.42 182.29 182.68 T:deoxyseq256128v13 402.75 405.26 410.60 T:acorn128 2831.14 2845.27 2852.95 T:led80n6t4silcv2 2841.23 2847.41 2854.06 T:led80n6silcv1 2937.54 2938.61 2939.26 T:present80n6t4silcv2 2936.30 2940.67 2942.18 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.17? 0.18? 0.21? T:aezv4 0.17? 0.20? 0.21? T:aezv5 0.16? 0.22? 0.22? T:aezv3 0.21 0.22 0.22 aegis128l 0.23 0.24 0.25 T:tiaoxinv1 0.23 0.24 0.25 T:tiaoxinv2 0.35 0.36 0.36 T:aegis128 0.37? 0.41? 0.50? aegis256 0.49 0.49 0.51 T:aeadaes128ocbtaglen128v1 0.55 0.55 0.56 T:aeadaes192ocbtaglen128v1 0.55 0.55 0.55 T:aes128otrcv3 0.57 0.57 0.58 T:aes128otrpv3 0.69 0.70 0.70 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.70 T:aes256otrcv3 0.71 0.71 0.72 T:aes128gcmv1 0.72 0.72 0.72 T:aes256otrpv3 0.82 0.82 0.83 aes256gcmv1 0.86 0.87 0.89 T:deoxysi128v141 0.92 0.93 0.94 T:deoxysneq128128v1 0.94 0.94 0.95 T:morus1280256v1 0.94 0.95 0.95 T:morus1280128v2 0.94 0.95 0.95 T:morus1280256v2 0.93 0.95 0.96 T:morus1280128v1 0.97 0.99 1.00 T:deoxysi256v141 1.04 1.07 1.08 T:deoxysneq256128v1 1.15 1.16 1.17 T:morus640128v1 1.15 1.16 1.17 T:morus640128v2 1.24 1.24 1.26 T:deoxysii128v141 1.30 1.31 1.35 T:colm0v1 1.31 1.31 1.32 T:aes128otrsv3 1.37 1.39 1.40 T:deoxyseq128128v1 1.39 1.40 1.41 T:deoxysii256v141 1.56 1.57 1.59 T:deoxyseq256128v1 1.75 1.75 1.76 T:aes256otrsv3 2.03 2.06 2.09 T:aes128n12t8clocv3 2.03 2.06 2.10 T:aes128n8t8silcv2 2.03 2.09 2.09 T:aes128n8t8clocv2 2.03 2.09 2.09 T:aes128n12t8clocv2 2.03 2.09 2.10 T:aes128n12t8silcv2 2.03 2.09 2.10 T:aes128n12t8silcv3 2.40 2.43 2.44 T:seakeyakv2 2.43 2.46 2.49 T:oceankeyakv2 2.65 2.67 2.69 T:norx6441v2 2.65 2.67 2.69 T:norx6441v3 2.89 2.91 2.93 T:norx6444v3 2.89 2.96 3.02 T:lunarkeyakv2 2.99 3.00 3.01 T:lakekeyakv2 3.00 3.02 3.05 T:lakekeyakv1 3.18 3.21 3.25 T:norx6441v1 3.28 3.29 3.33 T:norx6444v2 3.74 3.76 3.78 T:norx3241v3 3.75 3.77 3.79 T:norx3241v2 3.88 3.90 3.92 T:norx6444v1 3.98 4.00 4.03 T:norx6461v3 3.98 4.00 4.03 T:norx6461v2 4.37 4.40 4.40 T:aesjambuv1 4.52 4.54 4.55 T:norx3241v1 4.74 4.78 4.81 T:norx6461v1 5.13 5.25 5.27 T:ketjemajorv2 5.53 5.54 5.55 T:acorn128v2 5.53 5.57 5.60 T:riverkeyakv2 5.65 5.67 5.69 T:norx3261v2 5.67 5.68 5.70 T:norx3261v3 5.67 5.69 5.70 T:acorn128v3 6.20 6.23 6.24 ascon128av12 6.36 6.38 6.39 T:ascon96v1 6.38 6.40 6.43 T:ascon128av11 7.20 7.22 7.23 T:norx3261v1 7.78 7.81 7.87 T:ketjeminorv2 9.02 9.03 9.05 T:ascon128v1 9.03 9.04 9.06 T:ascon128v11 9.31 9.32 9.34 ascon128v12 11.19 11.23 11.25 T:aes128otrsv1 11.36 11.38 11.43 T:aes128otrpv1 11.32 11.39 11.40 T:aes128otrpv2 11.24 11.41 11.43 T:aes128otrsv2 14.22 14.25 14.35 T:aes256otrsv1 14.26 14.27 14.30 T:twine80n6t4clocv3 14.35 14.37 14.39 T:aes256otrsv2 14.81 14.87 14.90 T:aes256otrpv1 14.83 14.98 15.03 T:aes256otrpv2 15.18 15.23 15.27 T:twine80n6t4clocv2 15.45 15.47 15.49 T:aes128n12clocv1 15.47 15.49 15.52 T:aes128n8clocv1 20.10 20.26 20.67 T:proest256otrv1 26.08 26.30 26.54 T:ketjesrv1 26.62 26.65 26.70 T:aeadaes128ocbtaglen96v1 26.64 26.66 26.67 T:aeadaes128ocbtaglen64v1 26.83 26.99 27.13 T:ketjesrv2 31.74 31.75 31.80 T:aeadaes192ocbtaglen96v1 31.74 31.79 31.79 T:aeadaes192ocbtaglen64v1 36.86 36.90 36.94 T:aeadaes256ocbtaglen64v1 36.88 36.90 36.92 T:aeadaes256ocbtaglen96v1 44.28 44.31 44.35 T:colm127v1 44.88 44.95 45.28 T:proest128otrv1 44.80 45.46 46.38 T:ketjejrv1 70.80 70.90 71.05 T:ketjejrv2 70.77 70.97 71.00 T:present80n6t4silcv3 78.07 78.71 80.92 T:deoxysneq128128v13 85.40 86.16 86.68 T:aezv1 98.26 99.32 100.39 T:deoxyseq128128v13 125.41 125.68 125.91 T:led80n6t4silcv3 135.87 136.14 136.25 T:deoxysneq256128v13 180.44 182.32 182.75 T:deoxyseq256128v13 401.74 404.99 410.65 T:acorn128 2842.87 2849.47 2858.75 T:led80n6silcv1 2847.55 2851.89 2860.25 T:led80n6t4silcv2 2933.94 2934.71 2938.54 T:present80n6t4silcv2 2933.12 2940.30 2947.37 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.12? 0.13? 0.15? T:tiaoxinv1 0.11? 0.14? 0.15? T:tiaoxinv2 0.17? 0.18? 0.19? aegis128l 0.19? 0.20? 0.23? T:aezv4 0.19? 0.22? 0.25? T:aezv3 0.19? 0.23? 0.25? T:aezv5 0.31 0.32 0.33 aegis256 0.37 0.37 0.38 T:aegis128 0.45 0.47 0.47 aes256gcmv1 0.44? 0.47? 0.50? T:aeadaes128ocbtaglen128v1 0.46 0.47 0.48 T:aes128gcmv1 0.28? 0.51? 2.37? T:aeadaes192ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrcv3 0.57 0.60 0.60 T:aes128otrpv3 0.70 0.71 0.72 T:aes256otrcv3 0.70 0.72 0.75 T:aeadaes256ocbtaglen128v1 0.70 0.74 0.75 T:aes256otrpv3 0.74 0.76 0.77 T:colm0v1 0.81 0.82 0.84 T:deoxysi128v141 0.81 0.82 0.83 T:deoxysii128v141 0.88 0.89 0.90 T:morus1280256v2 0.88 0.89 0.90 T:morus1280128v2 0.89 0.89 0.91 T:morus1280256v1 0.89 0.90 0.91 T:morus1280128v1 0.89 0.90 0.92 T:deoxyseq128128v1 0.91 0.92 0.93 T:deoxysneq128128v1 0.92 0.93 0.94 T:deoxysii256v141 0.91 0.94 0.96 T:deoxysi256v141 0.99 1.01 1.02 T:deoxysneq256128v1 1.01 1.03 1.04 T:deoxyseq256128v1 1.10 1.12 1.14 T:morus640128v1 1.12 1.14 1.15 T:morus640128v2 1.81 1.90 1.97 T:lunarkeyakv2 1.86 1.91 1.97 T:oceankeyakv2 2.06 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128otrsv3 2.23 2.27 2.31 T:seakeyakv2 2.60 2.63 2.67 T:norx6441v2 2.64 2.67 2.70 T:norx6441v3 2.67 2.74 2.75 T:lakekeyakv2 2.74 2.75 2.79 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.11 3.14 3.16 T:norx6444v2 3.18 3.21 3.27 T:norx6441v1 3.26 3.28 3.33 T:norx6444v3 3.76 3.78 3.80 T:norx3241v3 3.76 3.79 3.81 T:norx3241v2 3.88 3.90 3.92 T:norx6444v1 3.92 3.95 4.01 T:norx6461v2 3.93 4.03 4.07 T:norx6461v3 4.18 4.18 4.19 T:aesjambuv1 4.27 4.39 4.46 T:ketjemajorv2 4.53 4.55 4.58 T:norx3241v1 4.75 4.78 4.83 T:norx6461v1 5.06 5.11 5.16 T:riverkeyakv2 5.37 5.41 5.46 T:acorn128v3 5.60 5.65 5.67 T:norx3261v2 5.74 5.78 5.80 T:norx3261v3 5.83 5.84 5.90 T:acorn128v2 6.13 6.15 6.17 ascon128av12 6.28 6.30 6.32 T:ascon128av11 6.30 6.32 6.33 T:ascon96v1 6.29 6.37 6.43 T:ketjeminorv2 7.24 7.26 7.27 T:norx3261v1 9.08 9.09 9.12 T:ascon128v11 9.08 9.09 9.11 T:ascon128v1 9.26 9.28 9.29 ascon128v12 10.52 10.55 10.57 T:aes128otrsv2 10.48 10.56 10.58 T:aes128otrsv1 10.78 10.79 10.82 T:aes128n8clocv1 10.78 10.80 10.81 T:aes128n12clocv1 10.82 10.85 10.87 T:aes128otrpv2 10.84 10.86 10.87 T:aes128otrpv1 12.94 12.98 13.00 T:aes256otrsv2 13.20 13.44 13.50 T:aes256otrsv1 14.09 14.12 14.16 T:twine80n6t4clocv3 14.28 14.30 14.31 T:aes256otrpv1 14.29 14.31 14.32 T:aes256otrpv2 14.96 14.97 14.98 T:twine80n6t4clocv2 20.21 20.27 20.77 T:proest256otrv1 22.19 22.21 22.25 T:aeadaes128ocbtaglen96v1 22.18 22.22 22.25 T:aeadaes128ocbtaglen64v1 23.45 23.53 23.57 T:colm127v1 24.74 24.98 25.00 T:ketjesrv1 25.75 26.05 26.16 T:ketjesrv2 26.38 26.42 26.45 T:aeadaes192ocbtaglen64v1 26.40 26.43 26.46 T:aeadaes192ocbtaglen96v1 30.58 30.61 30.65 T:aeadaes256ocbtaglen96v1 30.56 30.63 30.66 T:aeadaes256ocbtaglen64v1 41.28 41.50 41.75 T:aezv1 40.47 41.67 42.11 T:ketjejrv1 44.90 45.20 45.78 T:proest128otrv1 66.09 66.34 66.91 T:deoxyseq128128v13 65.38 66.69 66.99 T:deoxysneq128128v13 69.10 69.20 69.27 T:ketjejrv2 69.96 70.40 70.42 T:present80n6t4silcv3 120.67 120.76 121.78 T:deoxysneq256128v13 120.77 121.28 121.69 T:deoxyseq256128v13 124.54 125.04 125.09 T:led80n6t4silcv3 402.41 407.74 411.30 T:acorn128 1887.40 1891.73 1896.85 T:led80n6t4silcv2 1894.20 1899.02 1906.34 T:led80n6silcv1 1952.80 1955.78 1959.67 T:present80n6t4silcv2 1953.41 1956.00 1957.33 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.11? 0.14? 0.17? T:tiaoxinv1 0.10? 0.15? 0.15? T:tiaoxinv2 0.16? 0.17? 0.18? aegis128l 0.19? 0.20? 0.22? T:aezv4 0.21 0.22 0.23 T:aezv3 0.21? 0.22? 0.24? T:aezv5 0.31 0.31 0.32 T:aegis128 0.31? 0.32? 0.37? aegis256 0.45 0.46 0.50 T:aeadaes128ocbtaglen128v1 0.47 0.49 0.49 aes256gcmv1 0.47 0.49 0.49 T:aes128gcmv1 -1.48? 0.50? 0.51? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.57 T:aes128otrcv3 0.59 0.59 0.60 T:aes128otrpv3 0.69 0.70 0.71 T:aes256otrcv3 0.70 0.72 0.74 T:aeadaes256ocbtaglen128v1 0.71 0.72 0.74 T:aes256otrpv3 0.73 0.75 0.76 T:colm0v1 0.82 0.83 0.84 T:deoxysii128v141 0.83 0.84 0.85 T:deoxysi128v141 0.86 0.87 0.88 T:morus1280128v2 0.87 0.88 0.89 T:morus1280256v2 0.87 0.88 0.89 T:morus1280128v1 0.87 0.88 0.89 T:morus1280256v1 0.88 0.91 0.92 T:deoxysneq128128v1 0.88 0.91 0.92 T:deoxyseq128128v1 0.92 0.94 0.95 T:deoxysii256v141 0.93 0.95 0.96 T:deoxysi256v141 1.00 1.02 1.04 T:deoxysneq256128v1 1.03 1.04 1.05 T:deoxyseq256128v1 1.10 1.11 1.13 T:morus640128v1 1.11 1.13 1.16 T:morus640128v2 1.79 1.85 1.94 T:lunarkeyakv2 1.84 1.88 1.96 T:oceankeyakv2 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.11 T:aes128n12t8clocv2 2.01 2.06 2.11 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128otrsv3 2.06 2.06 2.12 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.12 2.12 T:aes128n8t8silcv2 2.27 2.31 2.33 T:seakeyakv2 2.62 2.65 2.68 T:norx6441v3 2.63 2.67 2.70 T:norx6441v2 2.69 2.73 2.74 T:lakekeyakv2 2.73 2.76 2.77 T:lakekeyakv1 2.81 2.82 2.82 T:aes256otrsv3 3.10 3.13 3.16 T:norx6444v2 3.17 3.21 3.24 T:norx6441v1 3.27 3.30 3.32 T:norx6444v3 3.78 3.80 3.82 T:norx3241v3 3.76 3.80 3.82 T:norx3241v2 3.90 3.92 3.94 T:norx6444v1 3.94 3.99 4.06 T:norx6461v3 3.98 4.00 4.04 T:norx6461v2 4.18 4.19 4.19 T:aesjambuv1 4.29 4.37 4.42 T:ketjemajorv2 4.52 4.54 4.56 T:norx3241v1 4.75 4.78 4.83 T:norx6461v1 5.08 5.13 5.16 T:riverkeyakv2 5.46 5.49 5.56 T:acorn128v3 5.52 5.58 5.63 T:acorn128v2 5.59 5.64 5.67 T:norx3261v2 5.71 5.74 5.78 T:norx3261v3 6.13 6.14 6.17 ascon128av12 6.29 6.32 6.42 T:ascon128av11 6.31 6.33 6.38 T:ascon96v1 6.31 6.35 6.42 T:ketjeminorv2 7.24 7.26 7.27 T:norx3261v1 9.03 9.07 9.08 T:ascon128v11 9.03 9.07 9.09 T:ascon128v1 9.26 9.28 9.29 ascon128v12 10.49 10.55 10.61 T:aes128otrsv1 10.51 10.55 10.59 T:aes128otrsv2 10.78 10.81 10.83 T:aes128n12clocv1 10.78 10.81 10.84 T:aes128n8clocv1 10.84 10.86 10.90 T:aes128otrpv2 10.83 10.87 10.89 T:aes128otrpv1 12.95 12.97 13.02 T:aes256otrsv2 13.17 13.43 13.52 T:aes256otrsv1 14.09 14.14 14.16 T:twine80n6t4clocv3 14.26 14.32 14.34 T:aes256otrpv1 14.27 14.32 14.35 T:aes256otrpv2 14.97 14.98 15.00 T:twine80n6t4clocv2 20.19 20.25 20.72 T:proest256otrv1 22.22 22.24 22.26 T:aeadaes128ocbtaglen96v1 22.21 22.26 22.31 T:aeadaes128ocbtaglen64v1 23.42 23.48 23.56 T:colm127v1 24.44 24.74 24.92 T:ketjesrv1 25.74 25.93 26.08 T:ketjesrv2 26.39 26.42 26.46 T:aeadaes192ocbtaglen96v1 26.38 26.42 26.46 T:aeadaes192ocbtaglen64v1 30.56 30.59 30.64 T:aeadaes256ocbtaglen64v1 30.59 30.61 30.70 T:aeadaes256ocbtaglen96v1 41.26 41.49 41.74 T:aezv1 40.54 41.68 42.09 T:ketjejrv1 45.27 45.50 45.56 T:proest128otrv1 65.93 66.58 66.84 T:deoxyseq128128v13 65.53 66.69 67.07 T:deoxysneq128128v13 69.10 69.15 69.27 T:ketjejrv2 70.35 70.40 70.47 T:present80n6t4silcv3 120.63 120.75 121.79 T:deoxysneq256128v13 120.76 121.39 121.52 T:deoxyseq256128v13 124.82 125.06 125.09 T:led80n6t4silcv3 397.43 405.12 409.77 T:acorn128 1887.60 1897.61 1902.21 T:led80n6silcv1 1893.60 1900.75 1913.83 T:led80n6t4silcv2 1953.65 1955.85 1958.64 T:present80n6silcv1 1955.17 1956.21 1959.70 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.13? 0.14? 0.18? T:tiaoxinv1 0.16? 0.16? 0.18? aegis128l 0.13? 0.17? 0.17? T:tiaoxinv2 0.20 0.22 0.22 T:aezv4 0.21 0.22 0.23 T:aezv3 0.22 0.23 0.23 T:aezv5 0.31 0.31 0.32 T:aegis128 0.27? 0.33? 0.34? aegis256 0.46 0.47 0.48 T:aeadaes128ocbtaglen128v1 0.47 0.48 0.49 T:aes128gcmv1 0.48 0.48 0.49 aes256gcmv1 0.49? 0.50? 2.42? T:aeadaes192ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrcv3 0.59 0.59 0.60 T:aes128otrpv3 0.69 0.70 0.71 T:aes256otrcv3 0.71 0.72 0.72 T:aeadaes256ocbtaglen128v1 0.72 0.73 0.74 T:aes256otrpv3 0.73 0.75 0.78 T:colm0v1 0.82 0.83 0.84 T:deoxysii128v141 0.83 0.84 0.86 T:deoxysi128v141 0.87 0.88 0.88 T:morus1280128v1 0.87 0.88 0.88 T:morus1280128v2 0.87 0.88 0.89 T:morus1280256v2 0.87 0.88 0.89 T:morus1280256v1 0.89 0.91 0.92 T:deoxyseq128128v1 0.88 0.91 0.93 T:deoxysneq128128v1 0.92 0.94 0.95 T:deoxysii256v141 0.90 0.94 0.97 T:deoxysi256v141 0.97 1.03 1.04 T:deoxysneq256128v1 1.03 1.04 1.06 T:deoxyseq256128v1 1.11 1.13 1.14 T:morus640128v1 1.11 1.13 1.14 T:morus640128v2 1.86 1.89 1.92 T:oceankeyakv2 1.80 1.90 1.97 T:lunarkeyakv2 2.00 2.06 2.12 T:aes128n12t8silcv2 2.01 2.06 2.07 T:aes128n8t8clocv2 2.00 2.06 2.12 T:aes128n12t8silcv3 2.01 2.06 2.11 T:aes128n12t8clocv2 2.06 2.06 2.06 T:aes128otrsv3 2.02 2.11 2.11 T:aes128n12t8clocv3 2.00 2.12 2.13 T:aes128n8t8silcv2 2.25 2.30 2.32 T:seakeyakv2 2.62 2.65 2.69 T:norx6441v3 2.63 2.66 2.70 T:norx6441v2 2.68 2.72 2.73 T:lakekeyakv2 2.73 2.75 2.77 T:lakekeyakv1 2.81 2.81 2.82 T:aes256otrsv3 3.08 3.14 3.16 T:norx6444v2 3.16 3.24 3.28 T:norx6441v1 3.27 3.29 3.31 T:norx6444v3 3.77 3.79 3.81 T:norx3241v2 3.78 3.80 3.81 T:norx3241v3 3.91 3.93 3.94 T:norx6444v1 3.96 3.98 4.03 T:norx6461v2 3.93 3.99 4.01 T:norx6461v3 4.18 4.19 4.19 T:aesjambuv1 4.31 4.39 4.46 T:ketjemajorv2 4.51 4.54 4.57 T:norx3241v1 4.72 4.75 4.80 T:norx6461v1 5.09 5.11 5.14 T:riverkeyakv2 5.47 5.51 5.56 T:acorn128v3 5.54 5.59 5.64 T:acorn128v2 5.63 5.67 5.69 T:norx3261v2 5.66 5.77 5.79 T:norx3261v3 6.12 6.14 6.17 ascon128av12 6.28 6.31 6.34 T:ascon96v1 6.29 6.34 6.39 T:ascon128av11 6.36 6.43 6.46 T:ketjeminorv2 7.24 7.25 7.26 T:norx3261v1 9.03 9.06 9.10 T:ascon128v11 9.05 9.07 9.10 T:ascon128v1 9.25 9.28 9.31 ascon128v12 10.51 10.55 10.59 T:aes128otrsv1 10.53 10.56 10.60 T:aes128otrsv2 10.78 10.80 10.83 T:aes128n12clocv1 10.77 10.82 10.83 T:aes128n8clocv1 10.84 10.86 10.90 T:aes128otrpv1 10.84 10.87 10.90 T:aes128otrpv2 12.94 12.97 13.02 T:aes256otrsv2 13.16 13.19 13.52 T:aes256otrsv1 14.11 14.15 14.19 T:twine80n6t4clocv3 14.27 14.30 14.33 T:aes256otrpv1 14.28 14.30 14.34 T:aes256otrpv2 14.96 14.98 15.01 T:twine80n6t4clocv2 20.18 20.22 20.75 T:proest256otrv1 22.18 22.21 22.27 T:aeadaes128ocbtaglen64v1 22.20 22.23 22.27 T:aeadaes128ocbtaglen96v1 23.45 23.51 23.57 T:colm127v1 24.46 24.74 24.96 T:ketjesrv1 25.66 25.96 26.04 T:ketjesrv2 26.40 26.42 26.45 T:aeadaes192ocbtaglen96v1 26.41 26.44 26.47 T:aeadaes192ocbtaglen64v1 30.57 30.60 30.62 T:aeadaes256ocbtaglen64v1 30.59 30.61 30.64 T:aeadaes256ocbtaglen96v1 41.48 41.53 41.84 T:aezv1 40.56 41.72 42.09 T:ketjejrv1 45.39 45.51 45.57 T:proest128otrv1 65.85 66.50 66.82 T:deoxyseq128128v13 65.73 66.78 67.38 T:deoxysneq128128v13 69.06 69.20 69.27 T:ketjejrv2 70.27 70.40 70.49 T:present80n6t4silcv3 120.63 120.78 121.60 T:deoxysneq256128v13 121.07 121.53 121.68 T:deoxyseq256128v13 124.44 125.03 125.12 T:led80n6t4silcv3 403.07 404.68 410.92 T:acorn128 1885.36 1893.72 1903.62 T:led80n6silcv1 1886.71 1900.15 1905.03 T:led80n6t4silcv2 1955.08 1955.63 1959.93 T:present80n6t4silcv2 1953.55 1955.80 1957.68 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.23? 0.24? 0.26? T:tiaoxinv2 0.23? 0.24? 0.27? T:tiaoxinv1 0.25? 0.26? 0.28? aegis128l 0.36 0.37 0.39 T:aezv4 0.38 0.38 0.41 T:aezv3 0.39 0.40 0.41 T:aezv5 0.41 0.41 0.41 T:aegis128 0.41 0.41 0.41 aegis256 0.53 0.53 0.56 T:aeadaes128ocbtaglen128v1 0.62 0.63 0.64 T:aes128otrpv3 0.63 0.64 0.70 T:aeadaes192ocbtaglen128v1 0.65 0.66 0.66 T:aes128otrcv3 0.71 0.73 0.74 T:aeadaes256ocbtaglen128v1 0.79 0.80 0.80 T:aes128gcmv1 0.79 0.80 0.81 T:aes256otrpv3 0.84 0.84 0.85 T:aes256otrcv3 0.86 0.87 0.88 aes256gcmv1 0.95 0.95 0.97 T:deoxysi128v141 0.99 1.00 1.01 T:deoxysneq128128v1 1.09 1.11 1.12 T:deoxysi256v141 1.11 1.12 1.13 T:deoxysneq256128v1 1.16 1.17 1.18 T:morus1280128v1 1.16 1.17 1.18 T:morus1280256v1 1.17 1.18 1.18 T:morus1280256v2 1.17 1.18 1.19 T:morus1280128v2 1.28 1.29 1.31 T:morus640128v1 1.30 1.31 1.32 T:morus640128v2 1.35 1.35 1.36 T:aes128otrsv3 1.36 1.36 1.36 T:colm0v1 1.41 1.43 1.45 T:deoxysii128v141 1.48 1.49 1.49 T:deoxyseq128128v1 1.59 1.62 1.63 T:deoxysii256v141 1.68 1.70 1.71 T:deoxyseq256128v1 1.81 1.82 1.82 T:aes256otrsv3 2.11 2.11 2.12 T:aes128n12t8clocv2 2.11 2.11 2.12 T:aes128n8t8clocv2 2.11 2.11 2.12 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n12t8silcv3 2.13 2.13 2.13 T:aes128n8t8silcv2 2.12 2.13 2.13 T:aes128n12t8silcv2 3.06 3.07 3.10 T:norx6441v2 3.09 3.10 3.13 T:norx6441v3 3.24 3.24 3.26 T:lakekeyakv2 3.36 3.38 3.38 T:seakeyakv2 3.53 3.55 3.57 T:lakekeyakv1 3.58 3.60 3.61 T:norx6441v1 3.90 3.92 3.94 T:norx6444v3 4.07 4.10 4.12 T:norx3241v2 4.10 4.12 4.12 T:norx3241v3 4.28 4.28 4.29 T:aesjambuv1 4.48 4.51 4.58 T:oceankeyakv2 4.58 4.59 4.60 T:norx6461v2 4.61 4.63 4.67 T:norx6461v3 4.68 4.70 4.72 T:norx6444v2 4.83 4.85 4.88 T:norx3241v1 5.37 5.39 5.41 T:norx6461v1 5.50 5.51 5.52 T:norx6444v1 5.79 5.81 5.84 T:riverkeyakv2 6.13 6.15 6.16 T:norx3261v2 6.17 6.19 6.21 T:norx3261v3 6.38 6.39 6.43 ascon128av12 6.47 6.48 6.53 T:acorn128v3 6.53 6.53 6.55 T:ascon128av11 6.54 6.55 6.57 T:ascon96v1 6.59 6.60 6.61 T:acorn128v2 6.77 6.84 6.86 T:ketjemajorv2 7.67 7.69 7.72 T:norx3261v1 7.69 7.74 7.82 T:lunarkeyakv2 8.32 8.37 8.42 T:ketjeminorv2 9.24 9.27 9.28 T:ascon128v1 9.27 9.28 9.34 T:ascon128v11 9.47 9.48 9.49 ascon128v12 11.46 11.47 11.48 T:aes128otrsv2 11.45 11.48 11.49 T:aes128otrsv1 11.58 11.63 11.64 T:aes128otrpv1 11.60 11.64 11.65 T:aes128otrpv2 14.50 14.50 14.53 T:twine80n6t4clocv3 14.66 14.67 14.70 T:aes256otrsv2 14.75 14.84 14.91 T:aes256otrsv1 15.17 15.18 15.19 T:aes256otrpv2 15.18 15.19 15.20 T:aes256otrpv1 15.42 15.42 15.43 T:twine80n6t4clocv2 15.82 15.84 15.84 T:aes128n12clocv1 15.85 15.86 15.87 T:aes128n8clocv1 21.93 21.95 22.39 T:proest256otrv1 23.05 23.07 23.08 T:aeadaes128ocbtaglen96v1 23.05 23.07 23.09 T:aeadaes128ocbtaglen64v1 26.09 26.43 26.50 T:ketjesrv1 27.23 27.32 27.36 T:aeadaes192ocbtaglen96v1 27.32 27.34 27.37 T:aeadaes192ocbtaglen64v1 27.57 27.59 27.62 T:ketjesrv2 31.62 31.65 31.68 T:aeadaes256ocbtaglen64v1 31.64 31.66 31.67 T:aeadaes256ocbtaglen96v1 37.06 37.10 37.12 T:colm127v1 45.64 46.37 46.88 T:ketjejrv1 46.93 46.97 47.04 T:proest128otrv1 66.80 66.92 67.32 T:deoxysneq128128v13 71.47 71.66 71.68 T:present80n6t4silcv3 71.49 71.85 72.10 T:ketjejrv2 83.51 83.67 83.91 T:aezv1 100.62 100.68 101.12 T:deoxyseq128128v13 121.64 122.12 122.45 T:deoxysneq256128v13 126.25 126.67 126.97 T:led80n6t4silcv3 182.36 184.26 184.64 T:deoxyseq256128v13 455.05 458.56 461.56 T:acorn128 2848.81 2853.03 2856.78 T:led80n6t4silcv2 2852.09 2854.77 2872.31 T:led80n6silcv1 2956.22 2957.62 2960.23 T:present80n6silcv1 2954.09 2959.02 2959.65 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.26 0.26 0.27 aegis128l 0.28 0.28 0.29 T:tiaoxinv1 0.28 0.29 0.30 T:tiaoxinv2 0.36 0.37 0.38 T:aezv4 0.38 0.38 0.40 T:aezv3 0.38 0.39 0.39 T:aegis128 0.39 0.40 0.41 T:aezv5 0.42 0.44 0.45 aegis256 0.55 0.55 0.58 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.65 T:aes128otrpv3 0.64? 0.65? 1.82? T:aeadaes192ocbtaglen128v1 0.68 0.68 0.68 T:aes128otrcv3 0.76 0.77 0.78 T:aeadaes256ocbtaglen128v1 0.81 0.81 0.81 T:aes256otrpv3 0.81 0.81 0.82 T:aes128gcmv1 0.87 0.87 0.87 T:aes256otrcv3 0.93 0.93 0.94 aes256gcmv1 1.03 1.04 1.05 T:deoxysi128v141 1.06 1.07 1.10 T:deoxysneq128128v1 1.16 1.16 1.17 T:morus1280256v1 1.16 1.16 1.17 T:morus1280128v1 1.17 1.18 1.19 T:morus1280256v2 1.17 1.18 1.19 T:morus1280128v2 1.18 1.21 1.24 T:deoxysi256v141 1.20 1.21 1.22 T:deoxysneq256128v1 1.29 1.30 1.31 T:morus640128v1 1.30 1.32 1.33 T:morus640128v2 1.37 1.37 1.37 T:aes128otrsv3 1.42 1.42 1.45 T:colm0v1 1.43 1.44 1.46 T:deoxysii128v141 1.57 1.58 1.59 T:deoxyseq128128v1 1.63 1.64 1.67 T:deoxysii256v141 1.74 1.74 1.75 T:deoxyseq256128v1 1.84 1.84 1.85 T:aes256otrsv3 2.09 2.09 2.12 T:aes128n8t8clocv2 2.09 2.09 2.12 T:aes128n12t8clocv2 2.09 2.10 2.12 T:aes128n12t8clocv3 2.10 2.11 2.14 T:aes128n8t8silcv2 2.10 2.11 2.14 T:aes128n12t8silcv3 2.10 2.11 2.14 T:aes128n12t8silcv2 3.09 3.10 3.12 T:norx6441v2 3.08 3.11 3.13 T:norx6441v3 3.25 3.26 3.27 T:lakekeyakv2 3.40 3.41 3.44 T:seakeyakv2 3.53 3.56 3.60 T:lakekeyakv1 3.59 3.60 3.64 T:norx6441v1 3.87 3.89 3.90 T:norx6444v3 4.06 4.07 4.08 T:norx3241v2 4.07 4.07 4.09 T:norx3241v3 4.43 4.44 4.44 T:aesjambuv1 4.51 4.54 4.60 T:oceankeyakv2 4.62 4.65 4.69 T:norx6461v3 4.66 4.68 4.70 T:norx6461v2 4.68 4.71 4.74 T:norx6444v2 4.77 4.80 4.82 T:norx3241v1 5.36 5.36 5.43 T:norx6461v1 5.50 5.51 5.54 T:norx6444v1 5.82 5.83 5.87 T:riverkeyakv2 6.12 6.13 6.16 T:norx3261v2 6.13 6.15 6.17 T:norx3261v3 6.38 6.39 6.40 ascon128av12 6.45 6.46 6.47 T:acorn128v2 6.52 6.53 6.55 T:ascon96v1 6.54 6.56 6.60 T:ascon128av11 6.62 6.63 6.63 T:acorn128v3 6.71 6.77 6.80 T:ketjemajorv2 7.62 7.62 7.63 T:norx3261v1 7.73 7.78 7.87 T:lunarkeyakv2 8.66 8.69 8.70 T:ketjeminorv2 9.17 9.17 9.18 T:ascon128v11 9.16 9.18 9.19 T:ascon128v1 9.44 9.46 9.48 ascon128v12 11.52 11.56 11.61 T:aes128otrsv1 11.56 11.69 11.72 T:aes128otrsv2 11.66 11.69 11.73 T:aes128otrpv1 11.72 11.82 11.88 T:aes128otrpv2 14.45 14.45 14.47 T:twine80n6t4clocv3 14.62 14.79 14.84 T:aes256otrsv1 14.78 14.79 14.81 T:aes256otrsv2 15.22 15.24 15.29 T:aes256otrpv1 15.25 15.28 15.41 T:aes256otrpv2 15.37 15.38 15.42 T:twine80n6t4clocv2 15.63 15.63 15.64 T:aes128n12clocv1 15.66 15.67 15.68 T:aes128n8clocv1 21.95 21.98 22.41 T:proest256otrv1 26.59 26.78 27.32 T:ketjesrv1 27.35 27.37 27.38 T:aeadaes128ocbtaglen64v1 27.37 27.40 27.42 T:aeadaes128ocbtaglen96v1 27.72 27.87 28.07 T:ketjesrv2 32.54 32.56 32.57 T:aeadaes192ocbtaglen96v1 32.54 32.56 32.59 T:aeadaes192ocbtaglen64v1 37.84 37.86 37.90 T:aeadaes256ocbtaglen96v1 37.85 37.87 37.87 T:aeadaes256ocbtaglen64v1 45.44 45.46 45.53 T:colm127v1 46.05 46.16 47.07 T:proest128otrv1 45.77 46.40 46.87 T:ketjejrv1 71.62 71.66 71.72 T:present80n6t4silcv3 72.08 72.16 72.23 T:ketjejrv2 79.50 79.56 80.04 T:deoxysneq128128v13 83.58 84.17 84.26 T:aezv1 100.46 101.11 101.23 T:deoxyseq128128v13 126.53 126.78 126.99 T:led80n6t4silcv3 135.92 136.07 136.14 T:deoxysneq256128v13 182.51 184.24 184.65 T:deoxyseq256128v13 455.50 458.04 461.46 T:acorn128 2852.78 2859.46 2865.16 T:led80n6t4silcv2 2860.72 2873.97 2883.29 T:led80n6silcv1 2956.67 2957.46 2959.03 T:present80n6silcv1 2953.26 2959.03 2960.26 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.22? 0.22? 0.25? T:aezv4 0.23 0.23 0.23 T:aezv3 0.24 0.24 0.26 T:aezv5 0.25 0.26 0.26 aegis128l 0.28 0.29 0.30 T:tiaoxinv2 0.28 0.29 0.31 T:tiaoxinv1 0.38 0.39 0.39 T:aegis128 0.44 0.45 0.45 aegis256 0.55 0.55 0.55 T:aeadaes128ocbtaglen128v1 0.64 0.64 0.64 T:aes128otrpv3 0.65 0.65 0.65 T:aeadaes192ocbtaglen128v1 0.68 0.68 0.68 T:aes128otrcv3 0.76 0.76 0.76 T:aeadaes256ocbtaglen128v1 0.80 0.81 0.81 T:aes128gcmv1 0.81 0.82 0.82 T:aes256otrpv3 0.86 0.87 0.87 T:aes256otrcv3 0.92 0.93 0.93 aes256gcmv1 1.03 1.04 1.06 T:deoxysi128v141 1.05 1.06 1.07 T:deoxysneq128128v1 1.16 1.16 1.16 T:morus1280256v1 1.16 1.17 1.17 T:morus1280128v1 1.17 1.17 1.18 T:morus1280128v2 1.17 1.17 1.18 T:morus1280256v2 1.17 1.18 1.19 T:deoxysi256v141 1.20 1.20 1.22 T:deoxysneq256128v1 1.29 1.29 1.31 T:morus640128v1 1.31 1.31 1.32 T:morus640128v2 1.37 1.37 1.37 T:aes128otrsv3 1.42 1.42 1.42 T:colm0v1 1.42 1.43 1.43 T:deoxysii128v141 1.56 1.56 1.57 T:deoxyseq128128v1 1.62 1.62 1.63 T:deoxysii256v141 1.74 1.75 1.76 T:deoxyseq256128v1 1.84 1.84 1.84 T:aes256otrsv3 2.08 2.12 2.12 T:aes128n8t8clocv2 2.08 2.12 2.12 T:aes128n12t8clocv2 2.11 2.12 2.12 T:aes128n12t8clocv3 2.09 2.14 2.14 T:aes128n12t8silcv3 2.10 2.14 2.14 T:aes128n12t8silcv2 2.10 2.14 2.14 T:aes128n8t8silcv2 3.08 3.10 3.11 T:norx6441v2 3.07 3.10 3.11 T:norx6441v3 3.26 3.27 3.28 T:lakekeyakv2 3.41 3.42 3.43 T:seakeyakv2 3.55 3.58 3.59 T:lakekeyakv1 3.57 3.59 3.61 T:norx6441v1 3.86 3.87 3.89 T:norx6444v3 4.05 4.06 4.08 T:norx3241v2 4.06 4.07 4.07 T:norx3241v3 4.42 4.43 4.43 T:aesjambuv1 4.53 4.54 4.56 T:oceankeyakv2 4.63 4.64 4.68 T:norx6461v3 4.65 4.67 4.69 T:norx6461v2 4.71 4.73 4.76 T:norx6444v2 4.79 4.80 4.81 T:norx3241v1 5.35 5.37 5.38 T:norx6461v1 5.52 5.53 5.57 T:norx6444v1 5.84 5.84 5.86 T:riverkeyakv2 6.10 6.12 6.14 T:norx3261v2 6.14 6.15 6.16 T:norx3261v3 6.38 6.39 6.40 ascon128av12 6.46 6.46 6.47 T:acorn128v2 6.51 6.53 6.54 T:ascon96v1 6.54 6.55 6.59 T:ascon128av11 6.62 6.63 6.63 T:acorn128v3 6.74 6.79 6.81 T:ketjemajorv2 7.61 7.61 7.62 T:norx3261v1 7.74 7.75 7.82 T:lunarkeyakv2 8.66 8.68 8.71 T:ketjeminorv2 9.16 9.16 9.18 T:ascon128v1 9.17 9.18 9.19 T:ascon128v11 9.45 9.51 9.51 ascon128v12 11.55 11.57 11.59 T:aes128otrsv1 11.58 11.71 11.75 T:aes128otrsv2 11.65 11.74 11.76 T:aes128otrpv1 11.76 11.85 11.91 T:aes128otrpv2 14.46 14.46 14.49 T:twine80n6t4clocv3 14.79 14.81 14.82 T:aes256otrsv2 14.77 14.81 14.86 T:aes256otrsv1 15.24 15.29 15.32 T:aes256otrpv1 15.39 15.39 15.43 T:twine80n6t4clocv2 15.28 15.42 15.44 T:aes256otrpv2 15.62 15.64 15.65 T:aes128n12clocv1 15.65 15.67 15.69 T:aes128n8clocv1 21.94 21.95 22.41 T:proest256otrv1 26.75 26.90 27.18 T:ketjesrv1 27.33 27.35 27.37 T:aeadaes128ocbtaglen64v1 27.36 27.38 27.40 T:aeadaes128ocbtaglen96v1 27.74 27.91 28.04 T:ketjesrv2 32.54 32.55 32.57 T:aeadaes192ocbtaglen64v1 32.55 32.57 32.60 T:aeadaes192ocbtaglen96v1 37.83 37.86 37.91 T:aeadaes256ocbtaglen96v1 37.83 37.87 37.89 T:aeadaes256ocbtaglen64v1 45.43 45.47 45.55 T:colm127v1 46.10 46.16 47.06 T:proest128otrv1 45.81 46.40 46.90 T:ketjejrv1 71.50 71.66 71.78 T:present80n6t4silcv3 72.04 72.11 72.24 T:ketjejrv2 79.22 79.29 79.80 T:deoxysneq128128v13 83.39 84.12 84.16 T:aezv1 100.38 100.60 101.09 T:deoxyseq128128v13 126.40 126.78 127.16 T:led80n6t4silcv3 135.79 136.10 136.25 T:deoxysneq256128v13 182.47 184.20 184.51 T:deoxyseq256128v13 454.38 457.23 461.29 T:acorn128 2850.88 2856.37 2862.71 T:led80n6t4silcv2 2859.68 2872.13 2877.14 T:led80n6silcv1 2956.20 2957.02 2958.43 T:present80n6silcv1 2953.67 2958.32 2960.19 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.11? 1.12? 1.43? aegis128l 1.05? 1.16? 1.32? T:aegis128 1.30? 1.40? 1.64? aegis256 1.42? 1.45? 1.88? T:aezv5 1.43? 1.46? 1.91? T:aezv4 1.34? 1.49? 1.83? T:tiaoxinv2 1.41? 1.55? 1.85? T:tiaoxinv1 1.58? 1.59? 1.76? T:aezv3 1.65? 1.66? 2.52? T:aeadaes128ocbtaglen128v1 2.07 2.11 2.28 T:aes128otrpv3 2.11? 2.13? 2.90? T:aeadaes256ocbtaglen128v1 2.34 2.39 2.41 T:aes128otrsv3 2.53 2.57 2.62 T:aes128n12t8clocv2 2.55? 2.59? 2.88? T:aes256otrpv3 2.57 2.61 2.65 T:aes128n8t8clocv2 2.57 2.70 2.84 T:aes128n12t8clocv3 2.76 2.78 2.86 T:colm0v1 2.81 2.86 2.88 T:aes128n8t8silcv2 2.84 2.88 2.94 T:aes128n12t8silcv3 2.82 2.90 2.91 T:aes128otrcv3 2.84 2.90 2.95 T:aes128n12t8silcv2 3.09 3.11 3.16 T:aes256otrsv3 3.09 3.14 3.25 T:deoxysneq128128v1 3.50 3.61 3.70 T:deoxysi128v141 3.59 3.62 3.63 T:aes256otrcv3 3.17? 3.64? 31.20? T:aeadaes192ocbtaglen128v1 4.11 4.20 4.27 T:deoxysneq256128v1 4.30 4.38 4.70 T:morus640128v1 4.47 4.55 4.60 T:aes128gcmv1 4.48 4.57 4.66 T:deoxysi256v141 4.53 4.60 4.73 T:morus640128v2 4.88 4.97 5.16 aes256gcmv1 5.05 5.15 5.41 T:deoxyseq128128v1 5.05 5.21 5.37 T:deoxysii128v141 5.61 5.63 5.65 T:aesjambuv1 5.75 5.80 5.97 T:deoxyseq256128v1 5.76 5.84 6.02 T:deoxysii256v141 6.05 6.11 6.38 T:morus1280128v1 6.08 6.20 6.48 T:morus1280256v1 6.38 6.40 6.54 T:morus1280128v2 6.43 6.52 6.73 T:morus1280256v2 9.62 9.81 10.21 ascon128av12 9.81 9.98 10.30 T:ascon96v1 9.83 9.98 10.23 T:ascon128av11 9.85 10.00 10.26 T:norx3241v1 9.99 10.11 10.38 T:norx3241v2 9.91 10.12 10.20 T:norx6441v1 10.01 10.15 10.66 T:norx3241v3 9.95 10.17 10.54 T:norx6441v3 9.98 10.17 10.53 T:norx6441v2 12.07 12.19 12.72 T:ascon128v11 12.14 12.23 12.74 T:ascon128v1 12.25 12.37 12.72 T:lakekeyakv1 12.60 12.77 13.10 ascon128v12 13.56 13.77 14.20 T:riverkeyakv2 13.83 13.87 14.80 T:lakekeyakv2 14.91 14.96 15.33 T:norx6461v2 14.98 15.10 15.38 T:norx3261v2 14.94 15.12 15.55 T:norx6461v1 14.95 15.15 15.37 T:norx3261v3 14.84 15.20 15.65 T:norx6461v3 15.88 15.91 15.95 T:norx3261v1 18.29 18.43 18.68 T:aes128otrsv2 18.32 18.48 18.75 T:aes128otrsv1 18.41 18.54 19.05 T:twine80n6t4clocv3 18.61 18.77 19.06 T:aes128otrpv1 18.77 18.84 19.20 T:aes128otrpv2 19.28 19.39 19.62 T:aes128n8clocv1 19.47 19.55 19.75 T:aes128n12clocv1 19.51 19.58 19.63 T:twine80n6t4clocv2 23.23 23.40 23.44 T:norx6444v3 23.33 23.80 24.19 T:aes256otrsv1 24.41 24.45 24.80 T:aes256otrpv2 24.30 24.47 24.62 T:aes256otrpv1 24.30 24.57 25.13 T:aes256otrsv2 27.37 27.56 27.89 T:acorn128v2 27.58 27.99 28.42 T:acorn128v3 29.33 29.46 29.52 T:ketjeminorv2 30.72 30.89 31.48 T:seakeyakv2 33.67 33.87 34.23 T:norx6444v2 35.82 35.92 36.49 T:aeadaes128ocbtaglen64v1 35.77 36.20 36.91 T:aeadaes128ocbtaglen96v1 39.47 39.65 39.83 T:norx6444v1 41.38 41.43 42.71 T:ketjemajorv2 41.91 42.16 42.38 T:aeadaes192ocbtaglen96v1 41.91 42.16 42.87 T:aeadaes192ocbtaglen64v1 42.15 42.23 42.40 T:ketjesrv1 48.88 49.01 49.17 T:ketjesrv2 48.96 49.33 49.55 T:aeadaes256ocbtaglen64v1 48.89 49.41 50.01 T:aeadaes256ocbtaglen96v1 48.95 49.77 50.70 T:oceankeyakv2 53.98 54.25 54.50 T:colm127v1 60.20 60.68 61.29 T:ketjejrv1 63.12 63.95 64.94 T:proest256otrv1 76.30 76.62 77.70 T:deoxysneq128128v13 87.77 87.85 88.02 T:present80n6t4silcv3 90.13 90.57 90.66 T:proest128otrv1 96.38 96.59 96.95 T:ketjejrv2 100.29 100.64 101.45 T:aezv1 124.25 124.83 126.00 T:lunarkeyakv2 124.80 125.23 125.57 T:deoxyseq128128v13 136.78 137.20 138.08 T:deoxysneq256128v13 149.48 149.69 149.91 T:led80n6t4silcv3 228.20 229.23 229.52 T:deoxyseq256128v13 1632.71 1635.09 1660.91 T:acorn128 3191.20 3207.43 3222.05 T:led80n6silcv1 3213.95 3218.25 3219.77 T:led80n6t4silcv2 3292.28 3293.41 3302.32 T:present80n6silcv1 3298.20 3299.27 3308.80 T:present80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.05? 1.07? 1.27? T:aegis128 1.12? 1.19? 1.67? aegis128l 1.41? 1.45? 1.91? T:aezv5 1.41? 1.45? 1.80? aegis256 1.38? 1.48? 1.83? T:tiaoxinv1 1.44? 1.48? 1.73? T:aezv4 1.56 1.59 1.63 T:aezv3 1.45? 1.61? 1.97? T:tiaoxinv2 1.80? 1.81? 2.02? T:aeadaes128ocbtaglen128v1 2.06 2.09 2.26 T:aes128otrpv3 2.38? 2.43? 2.71? T:aeadaes256ocbtaglen128v1 2.44 2.47 2.47 T:aes128otrsv3 2.54? 2.59? 3.05? T:aes256otrpv3 2.72 2.74 2.78 T:aes128n12t8clocv2 2.70 2.75 2.76 T:aes128n8t8clocv2 2.95 3.03 3.03 T:aes128otrcv3 3.05 3.06 3.08 T:aes128n12t8silcv2 3.05 3.06 3.08 T:aes128n12t8silcv3 3.22 3.23 3.30 T:colm0v1 3.40 3.41 3.41 T:aes256otrsv3 2.73? 3.50? 3.54? T:aes128n12t8clocv3 3.53? 3.58? 6.25? T:aeadaes192ocbtaglen128v1 3.72 3.87 3.87 T:aes256otrcv3 3.06? 3.88? 3.91? T:aes128n8t8silcv2 4.38 4.45 4.58 T:morus640128v1 4.41 4.48 4.58 T:deoxysneq128128v1 4.43 4.48 4.58 T:aes128gcmv1 4.68 4.76 4.88 T:morus640128v2 4.93 5.04 5.09 aes256gcmv1 5.09 5.13 5.20 T:deoxysi128v141 5.07 5.22 5.49 T:deoxysneq256128v1 5.74 5.77 5.79 T:aesjambuv1 5.66 5.80 5.95 T:deoxysii128v141 5.90 5.93 6.22 T:deoxysi256v141 6.19 6.38 6.57 T:morus1280128v1 6.14 6.45 6.67 T:morus1280256v1 6.53 6.59 6.80 T:morus1280256v2 6.50 6.68 6.78 T:morus1280128v2 6.83 6.88 7.37 T:deoxyseq256128v1 6.88 6.96 7.06 T:deoxysii256v141 7.06 7.12 7.25 T:deoxyseq128128v1 9.75 9.86 10.12 ascon128av12 9.79 9.91 10.06 T:ascon128av11 9.82 9.97 10.26 T:ascon96v1 9.96 10.03 10.20 T:norx6441v1 10.05 10.11 10.19 T:norx3241v1 10.15 10.20 10.45 T:norx3241v2 10.13 10.22 10.41 T:norx3241v3 10.34 10.48 10.85 T:norx6441v2 10.43 10.58 11.12 T:norx6441v3 11.95 12.07 12.48 T:ascon128v11 12.07 12.22 12.88 T:ascon128v1 12.13 12.47 13.20 T:lakekeyakv1 12.45 12.79 13.13 ascon128v12 13.52 13.58 13.77 T:riverkeyakv2 13.88 13.90 14.49 T:lakekeyakv2 14.82 14.95 15.07 T:norx6461v1 15.17 15.31 15.70 T:norx3261v3 15.13 15.34 15.56 T:norx3261v2 15.40 15.60 15.98 T:norx6461v2 15.48 15.66 15.98 T:norx6461v3 16.01 16.03 16.09 T:norx3261v1 18.51 18.63 19.18 T:twine80n6t4clocv3 18.64 18.76 19.34 T:aes128otrsv1 18.62 19.04 19.34 T:aes128otrsv2 18.98 19.22 19.53 T:aes128otrpv1 19.16 19.26 19.87 T:aes128otrpv2 19.23 19.37 19.62 T:aes128n8clocv1 19.30 19.50 19.60 T:aes128n12clocv1 19.62 19.64 19.68 T:twine80n6t4clocv2 23.27 23.48 23.67 T:norx6444v3 23.34 23.66 24.45 T:aes256otrsv1 24.88 24.98 25.39 T:aes256otrpv2 24.66 25.04 25.29 T:aes256otrpv1 24.40 25.12 26.30 T:aes256otrsv2 27.16 27.66 28.03 T:acorn128v2 28.06 28.56 29.04 T:acorn128v3 29.48 29.56 29.84 T:ketjeminorv2 30.72 31.02 31.26 T:seakeyakv2 33.88 34.33 34.70 T:norx6444v2 39.70 39.94 40.51 T:norx6444v1 41.52 41.98 42.91 T:ketjemajorv2 42.77 43.15 43.52 T:ketjesrv1 43.52 43.60 43.84 T:aeadaes128ocbtaglen64v1 43.54 43.70 44.05 T:aeadaes128ocbtaglen96v1 49.04 49.59 50.27 T:oceankeyakv2 49.37 49.78 50.20 T:ketjesrv2 51.02 51.16 51.55 T:aeadaes192ocbtaglen64v1 51.15 51.30 51.65 T:aeadaes192ocbtaglen96v1 59.95 60.12 60.38 T:aeadaes256ocbtaglen64v1 59.96 60.33 60.55 T:aeadaes256ocbtaglen96v1 60.46 60.96 61.55 T:ketjejrv1 62.59 62.72 62.92 T:colm127v1 64.05 64.87 65.48 T:proest256otrv1 87.85 88.16 88.73 T:present80n6t4silcv3 88.57 88.87 89.86 T:deoxysneq128128v13 90.00 91.98 94.92 T:proest128otrv1 97.42 97.73 98.08 T:ketjejrv2 109.73 109.90 110.98 T:aezv1 124.51 125.19 126.12 T:lunarkeyakv2 124.80 125.45 125.91 T:deoxyseq128128v13 149.65 150.12 150.37 T:led80n6t4silcv3 151.08 151.75 151.91 T:deoxysneq256128v13 228.76 229.12 229.83 T:deoxyseq256128v13 1629.85 1636.70 1659.59 T:acorn128 3187.12 3193.68 3223.55 T:led80n6t4silcv2 3197.77 3207.00 3215.50 T:led80n6silcv1 3293.29 3294.11 3303.65 T:present80n6silcv1 3298.09 3301.16 3307.33 T:present80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.05 1.08 1.10 T:aegis128 1.12 1.12 1.13 T:aezv4 1.11? 1.16? 1.75? T:aezv5 1.15? 1.19? 1.28? aegis128l 1.21? 1.23? 1.83? T:aezv3 1.43? 1.44? 2.27? aegis256 1.41? 1.45? 1.96? T:tiaoxinv1 1.35? 1.45? 1.97? T:tiaoxinv2 1.79 1.83 1.90 T:aeadaes128ocbtaglen128v1 2.08 2.09 2.13 T:aes128otrpv3 2.45 2.47 2.47 T:aes128otrsv3 2.43 2.48 2.51 T:aeadaes256ocbtaglen128v1 2.53 2.55 2.56 T:aes256otrpv3 2.55? 2.57? 3.48? T:aes128n12t8clocv2 2.57? 2.61? 3.52? T:aes128n8t8clocv2 2.85? 2.90? 3.88? T:aes128n12t8silcv2 2.87? 2.92? 3.88? T:aes128n12t8silcv3 3.02 3.03 3.04 T:aes128otrcv3 3.40 3.40 3.41 T:aes256otrsv3 2.60? 3.48? 3.50? T:aes128n12t8clocv3 3.54? 3.58? 32.73? T:aeadaes192ocbtaglen128v1 2.89? 3.87? 3.88? T:aes128n8t8silcv2 3.87 3.87 3.87 T:aes256otrcv3 3.30? 4.28? 4.35? T:colm0v1 4.30 4.38 4.73 T:deoxysneq128128v1 4.32 4.39 4.49 T:morus640128v1 4.37 4.40 4.43 T:aes128gcmv1 4.64 4.70 4.80 T:morus640128v2 4.86 4.92 5.04 aes256gcmv1 4.87 4.96 5.34 T:deoxysneq256128v1 5.06 5.10 5.20 T:deoxysi128v141 5.52 5.59 5.77 T:deoxysii128v141 5.74 5.77 5.80 T:aesjambuv1 5.84 5.93 6.29 T:deoxysi256v141 6.09 6.12 6.18 T:morus1280128v1 6.09 6.18 6.29 T:morus1280256v1 6.34 6.38 6.51 T:morus1280128v2 6.32 6.39 6.45 T:morus1280256v2 6.75 6.84 7.32 T:deoxyseq256128v1 6.73 6.88 6.93 T:deoxysii256v141 7.04 7.26 7.52 T:deoxyseq128128v1 9.70 9.77 10.14 T:ascon96v1 9.72 9.87 9.95 ascon128av12 9.70 10.03 10.29 T:ascon128av11 10.01 10.09 10.22 T:norx6441v1 10.11 10.16 10.23 T:norx3241v3 10.00 10.19 10.28 T:norx3241v1 10.17 10.23 10.30 T:norx3241v2 10.41 10.46 10.61 T:norx6441v2 10.42 10.56 10.73 T:norx6441v3 11.96 12.09 12.41 T:ascon128v1 12.07 12.14 12.46 T:ascon128v11 12.25 12.46 12.55 T:lakekeyakv1 12.43 12.52 12.64 ascon128v12 13.62 13.93 14.00 T:riverkeyakv2 13.93 13.95 14.27 T:lakekeyakv2 14.93 15.06 15.10 T:norx6461v1 15.05 15.18 15.36 T:norx3261v2 15.22 15.26 15.28 T:norx3261v3 15.16 15.42 15.64 T:norx6461v2 15.46 15.57 15.74 T:norx6461v3 15.99 16.11 16.13 T:norx3261v1 18.40 18.83 19.00 T:twine80n6t4clocv3 18.73 18.98 19.20 T:aes128otrsv1 18.73 19.06 19.21 T:aes128otrsv2 19.05 19.13 19.38 T:aes128otrpv1 19.23 19.34 19.61 T:aes128n8clocv1 19.14 19.40 19.68 T:aes128otrpv2 19.34 19.61 19.77 T:aes128n12clocv1 19.53 19.62 19.65 T:twine80n6t4clocv2 23.38 23.48 23.58 T:norx6444v3 23.37 23.66 23.80 T:aes256otrsv1 24.52 24.72 24.89 T:aes256otrsv2 24.66 24.81 25.23 T:aes256otrpv1 24.86 25.27 25.42 T:aes256otrpv2 27.09 27.17 27.70 T:acorn128v2 27.89 27.97 28.56 T:acorn128v3 29.59 29.66 29.88 T:ketjeminorv2 30.75 31.05 31.21 T:seakeyakv2 33.81 34.34 34.51 T:norx6444v2 39.83 40.09 40.24 T:norx6444v1 41.51 42.06 42.77 T:ketjemajorv2 42.51 43.03 43.26 T:ketjesrv1 43.50 43.53 43.59 T:aeadaes128ocbtaglen96v1 43.50 43.60 43.73 T:aeadaes128ocbtaglen64v1 48.88 49.38 49.91 T:oceankeyakv2 49.24 49.72 50.59 T:ketjesrv2 51.00 51.10 51.14 T:aeadaes192ocbtaglen64v1 51.05 51.19 51.24 T:aeadaes192ocbtaglen96v1 59.83 59.97 60.20 T:aeadaes256ocbtaglen96v1 59.89 60.05 60.31 T:aeadaes256ocbtaglen64v1 60.54 60.79 61.42 T:ketjejrv1 62.18 62.49 62.80 T:colm127v1 62.48 62.62 63.52 T:proest256otrv1 87.91 88.35 88.64 T:present80n6t4silcv3 88.45 88.84 89.81 T:deoxysneq128128v13 89.47 89.94 90.48 T:proest128otrv1 97.25 97.52 97.74 T:ketjejrv2 109.48 110.02 110.31 T:aezv1 124.43 124.62 125.26 T:lunarkeyakv2 124.71 125.07 125.60 T:deoxyseq128128v13 149.65 150.24 150.54 T:led80n6t4silcv3 150.89 151.45 152.41 T:deoxysneq256128v13 228.23 228.77 229.63 T:deoxyseq256128v13 1624.77 1629.73 1659.66 T:acorn128 3195.09 3209.09 3217.58 T:led80n6t4silcv2 3197.92 3220.38 3226.66 T:led80n6silcv1 3292.97 3295.00 3302.38 T:present80n6silcv1 3297.76 3299.87 3307.80 T:present80n6t4silcv2