VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20251222

[Page version: 20260503 04:13:12]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.95 3.00 3.04 T:morus640128v2 2.98 3.00 3.03 T:morus640128v1 3.21 3.26 3.29 T:morus1280128v2 3.26 3.29 3.37 T:morus1280128v1 3.26 3.29 3.31 T:morus1280256v1 3.34 3.41 3.43 T:morus1280256v2 6.80 6.83 6.87 T:norx3241v2 6.79 6.83 6.87 T:norx3241v3 6.17? 6.97? 7.81? T:lunarkeyakv2 3.69? 7.50? 10.59? T:seakeyakv2 7.52 7.57 7.60 T:norx6441v2 7.51 7.57 7.61 T:norx6441v3 7.49 7.63 7.67 T:norx6444v2 7.59 7.64 7.68 T:norx6444v3 7.84 7.91 7.96 T:norx3241v1 8.22 8.26 8.29 T:norx6441v1 8.31 8.39 8.59 T:norx6444v1 8.01? 8.55? 9.16? T:oceankeyakv2 9.74 9.79 9.90 T:norx3261v2 9.75 9.79 9.83 T:norx3261v3 10.80 10.92 11.20 T:lakekeyakv1 11.04 11.10 11.13 T:norx6461v3 11.03 11.15 11.68 T:norx6461v2 11.35 11.45 11.51 T:norx3261v1 11.69 11.76 11.90 T:norx6461v1 11.68 11.89 12.12 T:lakekeyakv2 12.35? 13.21? 14.04? T:ascon128av11 13.18? 13.42? 24.66? T:ascon96v1 13.99 14.07 14.28 ascon128av12 14.12 14.25 14.49 T:tiaoxinv2 14.13 14.25 14.55 T:tiaoxinv1 17.72 17.75 17.78 T:acorn128v3 17.96 18.00 18.05 T:acorn128v2 18.27 18.34 18.39 T:aegis128l 20.57 20.63 20.67 T:ascon128v11 20.57 20.63 21.01 T:ascon128v1 20.94 21.00 21.05 ascon128v12 22.41 22.46 22.52 T:aegis128 24.23 24.27 24.29 T:aegis256 27.05 27.16 27.30 T:riverkeyakv2 28.53 28.57 28.76 T:ketjeminorv2 29.05 29.32 29.59 T:ketjemajorv2 29.16 29.53 30.05 T:deoxysi128v141 32.68 33.21 34.66 T:deoxysi256v141 42.97 43.05 43.77 aegis128l 44.80 45.26 45.79 T:seakeyakv1 46.09 46.16 46.37 T:aes128otrcv3 50.42 50.51 50.71 T:aes128otrsv3 50.71 50.81 51.87 T:aes128otrsv1 50.70 50.82 51.43 T:aes128otrpv2 50.68 50.85 52.01 T:aes128otrpv1 50.75 50.87 51.08 T:aes128otrsv2 45.93? 53.96? 85.01? T:oceankeyakv1 55.54 55.63 56.11 T:aes128otrpv3 57.51 58.12 59.08 T:deoxysii128v141 59.57 59.81 60.11 T:proest256otrv1 60.66 60.76 61.00 T:aes256otrcv3 64.95 65.07 66.53 T:aes256otrsv3 64.98 65.14 65.37 T:aes256otrpv3 65.28 65.38 66.35 T:aes256otrpv2 65.30 65.38 65.65 T:aes256otrsv1 65.27 65.40 65.68 T:aes256otrpv1 65.24 65.92 66.61 T:aes256otrsv2 65.37 66.26 68.79 T:deoxysii256v141 71.62 71.64 71.79 T:aesjambuv1 72.82 73.22 73.99 T:aes128n12clocv1 73.17 73.25 73.48 T:aes128n12t8clocv3 73.19 73.26 73.46 T:aes128n8t8clocv2 73.19 73.26 73.74 T:aes128n12t8clocv2 73.20 73.33 74.15 T:aes128n8clocv1 74.32 74.49 74.96 T:twine80n6t4clocv3 83.67 83.81 84.24 T:twine80n6t4clocv2 86.88 86.98 87.99 T:aes128n8silcv1 86.86 87.00 87.30 T:aes128n12silcv1 87.02 87.10 87.34 T:aes128n12t8silcv2 87.02 87.11 87.60 T:aes128n8t8silcv2 87.02 87.12 87.74 T:aes128n12t8silcv3 99.65 101.26 103.12 T:aes256gcmv1 108.07 109.15 112.68 T:ketjesrv1 112.79 114.00 117.85 T:riverkeyakv1 121.07 121.73 125.26 T:ketjesrv2 154.24 154.77 156.61 T:aezv4 169.81 170.03 170.51 T:proest128otrv1 173.74 173.85 174.58 T:present80n6t4silcv3 178.98 179.08 179.88 T:ketjejrv1 187.95 188.29 189.12 T:aezv5 302.94 303.23 304.12 T:deoxysneq128128v13 303.03 303.37 305.37 T:deoxysneq128128v1 308.93 309.09 309.91 T:ketjejrv2 440.78 442.20 444.00 T:deoxysneq256128v13 442.08 442.74 444.07 T:deoxysneq256128v1 458.28 459.56 461.29 T:aezv3 485.15 486.23 487.61 T:twine80n6clocv1 521.71 523.36 526.39 T:aezv1 588.29 588.79 589.33 T:led80n6t4silcv3 611.86 612.51 614.01 T:deoxyseq128128v1 612.57 614.03 615.90 T:deoxyseq128128v13 880.72 882.23 885.45 T:deoxyseq256128v1 889.15 889.95 890.93 T:deoxyseq256128v13 1482.80 1484.00 1489.10 T:aes128gcmv1 1506.24 1602.72 1627.93 T:acorn128 12077.45 12082.29 12097.84 T:led80n6silcv1 12078.51 12085.98 12098.54 T:led80n6t4silcv2 15884.61 15890.47 15907.56 T:present80n6silcv1 15888.99 15899.14 15966.25 T:present80n6t4silcv2 50718.84 50809.45 50929.78 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 2.91 2.94 2.96 T:morus640128v1 2.90 2.94 2.97 T:morus640128v2 3.09 3.16 3.21 T:morus1280128v2 3.11 3.16 3.20 T:morus1280128v1 3.27 3.35 3.40 T:morus1280256v2 3.30 3.35 3.41 T:morus1280256v1 6.79 6.83 6.87 T:norx3241v3 6.80 6.83 6.87 T:norx3241v2 5.00? 6.84? 7.75? T:lunarkeyakv2 3.37? 7.60? 8.42? T:seakeyakv2 7.66 7.68 7.71 T:norx6441v2 7.66 7.69 7.72 T:norx6441v3 7.71 7.76 7.80 T:norx6444v2 7.72 7.76 7.80 T:norx6444v3 7.99 8.08 8.11 T:norx3241v1 8.35 8.39 8.43 T:norx6441v1 8.38 8.45 8.58 T:norx6444v1 8.17? 8.48? 9.13? T:oceankeyakv2 9.76 9.79 9.83 T:norx3261v3 9.76 9.80 9.84 T:norx3261v2 10.80 10.96 11.23 T:lakekeyakv1 11.17 11.21 11.24 T:norx6461v3 11.19 11.21 11.27 T:norx6461v2 11.27 11.44 11.66 T:lakekeyakv2 11.55 11.62 11.67 T:norx3261v1 11.82 11.87 11.93 T:norx6461v1 12.54 13.38 13.65 T:ascon128av11 13.38? 13.61? 24.99? T:ascon96v1 13.86 13.94 14.10 ascon128av12 14.31 14.46 15.05 T:tiaoxinv1 14.33 14.50 14.98 T:tiaoxinv2 15.98 16.00 16.02 T:acorn128v3 17.47 17.50 17.53 T:acorn128v2 18.39 18.42 18.46 T:aegis128l 20.29 20.37 20.47 T:ascon128v1 20.30 20.38 20.45 T:ascon128v11 20.83 20.88 21.15 ascon128v12 22.49 22.53 22.62 T:aegis128 24.23 24.27 24.49 T:aegis256 26.38 26.69 26.99 T:ketjemajorv2 27.08 27.24 27.39 T:riverkeyakv2 30.29 30.33 30.80 T:ketjeminorv2 42.77 42.81 43.36 aegis128l 45.33 45.71 47.11 T:seakeyakv1 46.26 46.34 46.91 T:aes128otrcv3 44.75? 47.37? 74.10? T:oceankeyakv1 51.41 51.55 51.91 T:aes128otrpv1 51.17 51.56 51.87 T:aes128otrpv2 51.46 51.57 52.55 T:aes128otrsv1 51.50 51.66 52.67 T:aes128otrsv2 53.19 53.56 54.97 T:deoxysi128v141 52.44 53.84 54.80 T:aes128otrsv3 55.27 55.37 55.62 T:aes128otrpv3 57.67 58.12 58.87 T:deoxysii128v141 58.23 58.38 58.64 T:proest256otrv1 60.31 60.70 61.28 T:deoxysi256v141 60.84 60.95 61.23 T:aes256otrcv3 65.44 66.05 66.86 T:deoxysii256v141 66.01 66.10 66.44 T:aes256otrpv2 65.99 66.12 66.55 T:aes256otrpv1 66.04 66.13 66.85 T:aes256otrsv1 66.05 66.39 67.38 T:aes256otrsv2 66.97 67.08 67.42 T:aes256otrsv3 67.03 67.21 67.60 T:aes256otrpv3 71.48 71.51 71.65 T:aesjambuv1 74.57 74.64 75.70 T:twine80n6t4clocv3 77.73 77.81 78.47 T:aes128n12t8clocv3 77.65 77.83 78.31 T:aes128n12t8clocv2 77.55 77.87 78.30 T:aes128n12clocv1 77.80 77.91 78.21 T:aes128n8clocv1 77.77 77.94 78.67 T:aes128n8t8clocv2 86.17 86.38 86.56 T:twine80n6t4clocv2 87.40 87.48 87.69 T:aes128n12t8silcv3 87.41 87.48 87.78 T:aes128n8t8silcv2 87.43 87.53 87.85 T:aes128n8silcv1 87.42 87.56 88.18 T:aes128n12silcv1 87.64 87.72 87.99 T:aes128n12t8silcv2 99.67 102.07 104.79 T:aes256gcmv1 109.34 110.10 113.64 T:ketjesrv1 112.17 113.58 117.54 T:riverkeyakv1 114.86 116.69 119.42 T:ketjesrv2 149.51 151.23 152.57 T:aezv4 173.73 173.93 179.42 T:present80n6t4silcv3 174.97 175.10 175.97 T:ketjejrv1 173.23 177.55 178.80 T:proest128otrv1 182.93 183.44 188.90 T:aezv5 289.35 290.56 291.86 T:ketjejrv2 409.88 410.36 412.05 T:deoxysneq128128v13 409.61 410.63 411.74 T:deoxysneq128128v1 452.14 454.46 457.86 T:aezv3 480.99 482.15 482.94 T:twine80n6clocv1 523.92 525.37 529.34 T:aezv1 588.20 588.49 589.25 T:led80n6t4silcv3 612.40 613.35 613.91 T:deoxyseq128128v13 612.29 613.57 616.91 T:deoxysneq256128v13 611.52 614.87 617.02 T:deoxysneq256128v1 814.77 816.86 818.60 T:deoxyseq128128v1 888.86 890.17 892.08 T:deoxyseq256128v13 1221.23 1223.28 1225.16 T:deoxyseq256128v1 1483.79 1484.49 1485.79 T:aes128gcmv1 1495.36 1599.55 1626.41 T:acorn128 12075.02 12080.24 12092.40 T:led80n6silcv1 12075.54 12084.33 12099.00 T:led80n6t4silcv2 15875.64 15889.50 15914.11 T:present80n6t4silcv2 15881.84 15892.31 15907.90 T:present80n6silcv1 50719.01 50811.41 51040.71 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 2.94 2.94 2.95 T:morus640128v2 2.94 2.94 2.95 T:morus640128v1 3.13 3.16 3.18 T:morus1280128v1 3.15 3.16 3.18 T:morus1280128v2 3.33 3.35 3.37 T:morus1280256v2 3.34 3.35 3.37 T:morus1280256v1 6.81 6.83 6.85 T:norx3241v2 6.82 6.83 6.89 T:norx3241v3 6.43? 7.18? 9.55? T:lunarkeyakv2 7.78 7.81 7.84 T:norx6441v3 7.79 7.81 7.85 T:norx6441v2 7.85 7.89 7.92 T:norx6444v2 7.87 7.89 7.96 T:norx6444v3 7.68 8.00 8.34 T:seakeyakv2 8.08 8.08 8.09 T:norx3241v1 7.37? 8.48? 9.11? T:oceankeyakv2 8.49 8.51 8.54 T:norx6441v1 8.54 8.57 8.61 T:norx6444v1 9.77 9.79 9.81 T:norx3261v3 9.78 9.80 9.82 T:norx3261v2 9.99? 11.02? 11.22? T:lakekeyakv1 11.31 11.33 11.40 T:norx6461v3 11.31 11.34 11.38 T:norx6461v2 11.45 11.58 11.72 T:lakekeyakv2 11.62 11.62 11.63 T:norx3261v1 11.96 11.99 12.02 T:norx6461v1 13.41? 13.48? 24.92? T:ascon96v1 12.54 13.52 13.59 T:ascon128av11 13.92 13.94 13.96 ascon128av12 14.38 14.44 14.67 T:tiaoxinv1 14.45 14.50 14.73 T:tiaoxinv2 15.99 16.00 16.01 T:acorn128v3 17.49? 17.50? 20.51? T:acorn128v2 18.40 18.42 18.62 T:aegis128l 20.36 20.38 20.40 T:ascon128v1 20.36 20.38 20.47 T:ascon128v11 20.87 20.88 20.93 ascon128v12 22.50 22.52 22.55 T:aegis128 24.36 24.38 24.43 T:aegis256 26.58 26.84 27.45 T:ketjemajorv2 27.12 27.24 27.37 T:riverkeyakv2 30.42 30.45 30.66 T:ketjeminorv2 42.88 42.94 43.23 aegis128l 45.47 45.83 46.27 T:seakeyakv1 46.29 46.33 46.57 T:aes128otrcv3 45.27 46.93 49.29 T:oceankeyakv1 51.61 51.66 51.97 T:aes128otrsv1 51.59 51.67 51.98 T:aes128otrpv1 51.60 51.68 51.96 T:aes128otrpv2 51.66 51.74 52.04 T:aes128otrsv2 52.53 53.09 54.65 T:aes128otrsv3 53.53 53.69 54.14 T:deoxysi128v141 55.42 55.49 55.73 T:aes128otrpv3 58.02 58.30 58.99 T:deoxysii128v141 58.30 58.38 59.10 T:proest256otrv1 60.65 60.86 61.32 T:deoxysi256v141 60.87 61.48 62.28 T:aes256otrcv3 66.18 66.23 66.89 T:aes256otrpv2 66.17 66.26 66.63 T:aes256otrpv1 66.01 66.27 67.20 T:aes256otrsv1 66.19 66.52 67.52 T:aes256otrsv2 66.00 66.56 67.85 T:deoxysii256v141 67.11 67.20 67.52 T:aes256otrsv3 67.06 67.33 67.94 T:aes256otrpv3 71.50 71.65 79.36 T:aesjambuv1 74.58 74.63 74.77 T:twine80n6t4clocv3 77.77 77.82 78.08 T:aes128n8t8clocv2 77.77 77.83 78.23 T:aes128n12t8clocv2 77.77 77.83 78.29 T:aes128n12t8clocv3 77.82 77.89 78.87 T:aes128n12clocv1 77.84 77.98 79.21 T:aes128n8clocv1 86.33 86.38 86.53 T:twine80n6t4clocv2 87.42 87.50 87.91 T:aes128n8t8silcv2 87.43 87.51 88.25 T:aes128n12t8silcv3 87.46 87.54 88.09 T:aes128n8silcv1 87.45 87.54 88.03 T:aes128n12silcv1 87.68 87.72 87.97 T:aes128n12t8silcv2 100.40 101.92 104.50 T:aes256gcmv1 109.49 110.96 114.05 T:ketjesrv1 112.28 113.85 117.34 T:riverkeyakv1 114.98 115.94 119.20 T:ketjesrv2 149.82 151.10 152.81 T:aezv4 173.72 173.76 174.13 T:present80n6t4silcv3 175.07 175.17 175.76 T:ketjejrv1 170.58 177.55 178.49 T:proest128otrv1 182.86 183.02 186.62 T:aezv5 290.56 290.74 291.73 T:ketjejrv2 409.55 410.08 412.63 T:deoxysneq128128v1 410.36 411.42 413.00 T:deoxysneq128128v13 452.92 453.96 456.48 T:aezv3 481.42 482.39 483.24 T:twine80n6clocv1 523.76 525.03 526.73 T:aezv1 588.05 588.62 589.36 T:led80n6t4silcv3 612.39 613.31 616.52 T:deoxysneq256128v13 612.46 613.38 614.62 T:deoxyseq128128v13 611.86 614.93 618.95 T:deoxysneq256128v1 816.39 817.83 819.71 T:deoxyseq128128v1 889.33 890.31 894.02 T:deoxyseq256128v13 1221.74 1223.57 1225.67 T:deoxyseq256128v1 1426.58 1427.42 1428.23 T:aes128gcmv1 1455.09 1459.05 1461.73 aes256gcmv1 1501.68 1597.31 1622.13 T:acorn128 12074.48 12083.54 12097.12 T:led80n6t4silcv2 12075.89 12084.43 12096.25 T:led80n6silcv1 15879.85 15885.59 15902.07 T:present80n6t4silcv2 15887.88 15899.88 15924.63 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.71 2.72 2.74 T:morus640128v2 2.71 2.72 2.75 T:morus640128v1 2.87 2.90 2.92 T:morus1280128v2 2.90 2.93 2.97 T:morus1280256v1 2.95 2.98 3.01 T:morus1280256v2 2.95 2.98 3.00 T:morus1280128v1 6.56 6.57 6.59 T:norx3241v3 6.56 6.58 6.60 T:norx3241v2 6.74 6.89 7.16 T:seakeyakv2 7.02? 7.29? 8.10? T:oceankeyakv2 6.34? 7.39? 7.47? T:norx6441v2 7.36 7.44 7.79 T:norx6441v3 7.45 7.48 7.53 T:norx6444v3 7.45 7.48 7.55 T:norx6444v2 7.66 7.69 7.73 T:norx3241v1 8.11 8.13 8.16 T:norx6441v1 8.16 8.19 8.38 T:norx6444v1 8.65? 8.98? 10.29? T:lunarkeyakv2 9.52 9.54 9.57 T:norx3261v3 9.53 9.54 9.57 T:norx3261v2 10.53 10.63 10.86 T:lakekeyakv2 10.92 10.97 11.16 T:norx6461v2 10.94 10.97 11.19 T:norx6461v3 10.90 10.97 11.79 T:lakekeyakv1 11.20 11.24 11.33 T:norx3261v1 11.59 11.61 11.68 T:norx6461v1 13.35 13.38 13.50 T:ascon96v1 13.26 13.41 13.54 T:ascon128av11 13.73 13.76 13.89 ascon128av12 13.74 13.80 13.93 T:tiaoxinv2 13.74 13.80 13.93 T:tiaoxinv1 16.86 16.88 16.96 T:acorn128v3 16.65 17.25 17.32 T:acorn128v2 18.13 18.18 18.25 T:aegis128l 19.15 19.21 19.63 T:riverkeyakv2 20.54 20.57 20.85 T:ascon128v11 20.54 20.57 21.04 T:ascon128v1 20.67 20.69 20.81 ascon128v12 22.11 22.15 22.22 T:aegis128 23.60 23.64 23.69 T:aegis256 23.53 23.65 24.05 T:ketjemajorv2 26.89 26.91 27.44 T:ketjeminorv2 29.13 29.45 29.83 T:deoxysi128v141 32.39 33.33 34.55 T:deoxysi256v141 37.13 37.19 37.33 aegis128l 43.97 44.41 45.78 T:deoxysii128v141 44.54 44.75 45.21 T:seakeyakv1 44.48 46.20 46.93 T:oceankeyakv1 46.18 46.26 46.72 T:aes128otrcv3 46.65 46.71 47.03 T:aes128otrsv1 46.60 46.81 47.41 T:aes128otrsv3 46.76 46.84 47.34 T:aes128otrsv2 50.03 50.47 51.28 T:deoxysii256v141 52.95 53.05 53.22 T:aes128otrpv1 52.97 53.06 53.64 T:aes128otrpv2 53.14 53.23 53.88 T:aes128otrpv3 54.59 54.64 55.00 T:aes128n12clocv1 54.61 54.68 55.04 T:aes128n8clocv1 54.66 54.70 55.04 T:aes128n8t8clocv2 54.66 54.71 55.17 T:aes128n12t8clocv3 54.61 54.72 55.05 T:aes128n12t8clocv2 56.53 57.19 58.67 T:aes256gcmv1 58.97 59.12 59.69 T:proest256otrv1 59.00 60.74 61.67 T:aes256otrcv3 60.79 60.86 61.02 T:aes256otrsv3 61.00 61.07 61.54 T:aes256otrsv1 61.00 61.12 61.82 T:aes256otrsv2 64.68 64.92 65.18 T:aes128n8silcv1 64.86 64.93 65.74 T:aes128n12silcv1 64.94 64.99 65.25 T:aes128n12t8silcv2 64.95 65.01 65.47 T:aes128n12t8silcv3 64.95 65.02 65.37 T:aes128n8t8silcv2 67.27 67.38 69.13 T:aes256otrpv1 67.30 67.59 68.56 T:aes256otrpv2 67.27 67.85 68.79 T:aes256otrpv3 71.31 71.32 71.50 T:aesjambuv1 74.24 74.25 74.46 T:twine80n6t4clocv3 87.26 87.31 87.43 T:twine80n6t4clocv2 96.71 97.37 100.53 T:ketjesrv1 106.07 107.10 110.66 T:riverkeyakv1 108.09 108.78 112.07 T:ketjesrv2 138.62 138.90 140.29 T:aezv4 148.09 148.41 149.56 T:aezv5 157.23 157.30 157.66 T:ketjejrv1 169.60 170.01 170.67 T:proest128otrv1 173.14 173.28 173.61 T:present80n6t4silcv3 286.38 286.75 287.19 T:ketjejrv2 302.63 302.84 303.37 T:deoxysneq128128v13 302.87 303.38 303.87 T:deoxysneq128128v1 344.77 345.61 346.08 T:aezv1 351.08 351.84 355.23 T:aezv3 363.88 364.39 365.33 T:twine80n6clocv1 442.25 442.66 443.31 T:deoxysneq256128v13 442.21 443.44 444.55 T:deoxysneq256128v1 456.82 457.33 457.90 T:deoxyseq128128v13 457.25 458.00 458.94 T:deoxyseq128128v1 587.63 588.11 589.25 T:led80n6t4silcv3 660.82 661.40 662.70 T:deoxyseq256128v1 665.29 666.19 667.96 T:deoxyseq256128v13 1454.80 1456.01 1458.24 T:aes128gcmv1 1486.03 1575.83 1589.35 T:acorn128 9058.39 9063.70 9080.36 T:led80n6t4silcv2 9060.20 9064.97 9078.12 T:led80n6silcv1 11912.23 11916.97 11935.06 T:present80n6t4silcv2 11916.29 11927.74 11956.31 T:present80n6silcv1 26101.66 26154.05 26221.21 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.59 2.63 2.69 T:morus640128v2 2.59 2.63 2.69 T:morus640128v1 2.85 2.92 3.12 T:morus1280128v2 2.86 2.93 3.08 T:morus1280128v1 2.96 3.01 3.12 T:morus1280256v1 2.94 3.01 3.11 T:morus1280256v2 6.53 6.58 6.67 T:norx3241v3 6.52 6.58 6.79 T:norx3241v2 6.61 6.79 7.16 T:seakeyakv2 6.94 7.12 7.49 T:oceankeyakv2 6.66? 7.42? 7.56? T:norx6441v3 6.45? 7.45? 7.56? T:norx6441v2 7.48 7.54 7.68 T:norx6444v3 7.50 7.54 7.66 T:norx6444v2 7.72 7.79 8.20 T:norx3241v1 8.16 8.20 8.26 T:norx6441v1 7.96 8.23 8.37 T:norx6444v1 7.89? 9.21? 9.72? T:lunarkeyakv2 9.49 9.53 9.63 T:norx3261v3 9.50 9.53 9.65 T:norx3261v2 10.16 10.27 10.57 T:lakekeyakv2 10.86 10.93 11.31 T:lakekeyakv1 10.99 11.02 11.31 T:norx6461v3 11.00 11.02 11.13 T:norx6461v2 11.25 11.33 11.47 T:norx3261v1 11.63 11.67 11.80 T:norx6461v1 13.32 13.42 13.57 T:ascon96v1 13.45 13.53 13.68 T:ascon128av11 13.60 13.69 13.85 ascon128av12 13.79 13.95 14.45 T:tiaoxinv2 13.54 13.96 14.45 T:tiaoxinv1 15.94 16.00 16.10 T:acorn128v3 17.07 17.13 17.35 T:acorn128v2 18.03 18.21 18.32 T:aegis128l 19.37 19.49 19.76 T:riverkeyakv2 20.10 20.19 20.34 T:ascon128v11 20.11 20.19 20.35 T:ascon128v1 20.50 20.56 20.70 ascon128v12 22.12 22.19 22.37 T:aegis128 22.14 22.33 22.54 T:ketjemajorv2 23.62 23.66 23.75 T:aegis256 27.75 27.78 27.92 T:ketjeminorv2 36.96 37.08 37.39 aegis128l 41.07 41.37 41.86 T:deoxysi128v141 43.09 44.42 44.88 T:deoxysii128v141 44.35 44.76 45.19 T:oceankeyakv1 44.78 45.00 45.58 T:seakeyakv1 46.31 46.38 46.75 T:aes128otrcv3 46.75 47.05 47.57 T:deoxysi256v141 47.01 47.09 47.30 T:aes128otrsv1 47.08 47.22 47.40 T:aes128otrsv2 47.57 48.08 48.85 T:aes128otrsv3 50.11 50.55 51.41 T:deoxysii256v141 53.00 53.09 53.54 T:aes128otrpv3 53.32 53.44 53.96 T:aes128otrpv2 53.30 53.44 54.08 T:aes128otrpv1 56.91 56.97 57.15 T:aes128n12t8clocv3 56.93 56.98 57.44 T:aes128n12t8clocv2 56.92 56.98 57.25 T:aes128n8t8clocv2 56.94 56.99 57.43 T:aes128n12clocv1 56.93 57.02 57.94 T:aes128n8clocv1 56.49 57.72 59.32 T:aes256gcmv1 58.25 58.42 59.14 T:proest256otrv1 58.67 60.77 61.14 T:aes256otrcv3 61.33 61.44 61.85 T:aes256otrsv1 61.34 61.51 63.41 T:aes256otrsv2 61.77 61.94 62.56 T:aes256otrsv3 65.12 65.19 65.45 T:aes128n8t8silcv2 65.13 65.22 65.89 T:aes128n12t8silcv3 65.14 65.23 65.62 T:aes128n12silcv1 65.14 65.28 66.10 T:aes128n8silcv1 65.25 65.31 65.61 T:aes128n12t8silcv2 67.63 67.74 67.97 T:aes256otrpv2 67.59 67.75 69.05 T:aes256otrpv1 68.50 69.13 69.97 T:aes256otrpv3 71.21 71.26 71.55 T:aesjambuv1 74.29 74.32 74.63 T:twine80n6t4clocv3 90.34 90.44 90.81 T:twine80n6t4clocv2 97.30 97.94 101.21 T:ketjesrv1 104.94 105.87 109.38 T:ketjesrv2 105.68 106.71 110.42 T:riverkeyakv1 136.68 137.76 140.73 T:aezv4 145.75 146.01 149.19 T:aezv5 155.20 155.28 156.13 T:ketjejrv1 172.98 173.24 173.63 T:present80n6t4silcv3 171.33 173.66 174.34 T:proest128otrv1 277.18 277.44 278.65 T:ketjejrv2 345.70 346.74 348.37 T:aezv1 348.01 349.14 350.90 T:aezv3 355.31 356.21 357.40 T:deoxysneq128128v1 355.93 356.69 358.77 T:deoxysneq128128v13 361.97 362.32 365.32 T:twine80n6clocv1 456.87 457.47 457.89 T:deoxyseq128128v13 527.29 528.63 530.07 T:deoxysneq256128v13 527.71 529.22 532.43 T:deoxysneq256128v1 559.03 560.04 562.56 T:deoxyseq128128v1 587.73 587.97 589.43 T:led80n6t4silcv3 665.66 666.13 668.22 T:deoxyseq256128v13 831.71 832.23 835.33 T:deoxyseq256128v1 1455.05 1455.90 1456.91 T:aes128gcmv1 1486.10 1573.29 1585.84 T:acorn128 9054.71 9059.47 9077.93 T:led80n6t4silcv2 9055.30 9062.42 9088.05 T:led80n6silcv1 11913.67 11921.66 11951.04 T:present80n6silcv1 11914.57 11926.13 11951.60 T:present80n6t4silcv2 26099.70 26162.90 26237.82 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 2.63 2.63 2.63 T:morus640128v2 2.63 2.63 2.63 T:morus640128v1 2.90 2.91 2.92 T:morus1280128v2 2.91 2.92 2.93 T:morus1280128v1 3.00 3.01 3.03 T:morus1280256v2 3.00 3.01 3.03 T:morus1280256v1 6.56 6.58 6.60 T:norx3241v2 6.56 6.58 6.61 T:norx3241v3 6.67 6.82 7.14 T:seakeyakv2 6.71 7.11 7.44 T:oceankeyakv2 6.50? 7.54? 7.59? T:norx6441v2 6.80? 7.55? 7.60? T:norx6441v3 7.58 7.60 7.71 T:norx6444v3 7.59 7.61 7.70 T:norx6444v2 7.78 7.78 7.80 T:norx3241v1 8.23 8.27 9.08 T:norx6441v1 8.25 8.28 8.40 T:norx6444v1 8.89 9.20 9.58 T:lunarkeyakv2 9.52 9.53 9.57 T:norx3261v3 9.52 9.55 10.01 T:norx3261v2 10.25 10.32 10.60 T:lakekeyakv2 10.76 11.06 11.74 T:lakekeyakv1 11.08 11.09 11.18 T:norx6461v3 11.07 11.09 11.19 T:norx6461v2 11.32 11.33 11.41 T:norx3261v1 11.72 11.74 11.82 T:norx6461v1 13.39 13.42 13.54 T:ascon96v1 13.51 13.54 13.96 T:ascon128av11 13.69 13.69 13.81 ascon128av12 13.91 13.94 14.07 T:tiaoxinv1 13.91 13.95 14.53 T:tiaoxinv2 15.99 16.00 16.06 T:acorn128v3 17.12 17.13 17.20 T:acorn128v2 18.20 18.23 18.29 T:aegis128l 19.40 19.49 19.72 T:riverkeyakv2 20.18 20.19 20.30 T:ascon128v11 20.17 20.19 20.50 T:ascon128v1 20.56 20.56 20.81 ascon128v12 22.16 22.18 22.24 T:aegis128 22.26 22.41 22.75 T:ketjemajorv2 23.69 23.73 23.91 T:aegis256 27.83 27.86 28.26 T:ketjeminorv2 37.09 37.14 37.31 aegis128l 41.34 41.58 42.57 T:deoxysi128v141 44.44 44.68 45.61 T:deoxysii128v141 44.62 44.88 46.00 T:oceankeyakv1 44.84 45.03 45.29 T:seakeyakv1 46.32 46.37 46.72 T:aes128otrcv3 47.11 47.15 47.56 T:aes128otrsv1 47.19 47.28 47.66 T:aes128otrsv2 47.10 47.45 48.35 T:deoxysi256v141 47.67 47.97 48.87 T:aes128otrsv3 50.19 50.56 52.00 T:deoxysii256v141 53.09 53.17 53.99 T:aes128otrpv3 53.40 53.47 53.66 T:aes128otrpv1 53.41 53.49 53.96 T:aes128otrpv2 46.30? 55.29? 59.16? T:aes256gcmv1 56.51 56.97 57.39 T:aes128n12t8clocv3 56.94 56.98 57.12 T:aes128n12clocv1 56.95 56.98 57.25 T:aes128n12t8clocv2 56.93 56.99 57.32 T:aes128n8clocv1 56.95 57.01 57.42 T:aes128n8t8clocv2 58.11 58.40 58.87 T:proest256otrv1 58.84 60.94 61.69 T:aes256otrcv3 61.45 61.49 61.96 T:aes256otrsv1 61.44 61.54 62.21 T:aes256otrsv2 61.90 61.96 62.41 T:aes256otrsv3 65.15 65.19 65.30 T:aes128n12t8silcv3 65.14 65.19 65.43 T:aes128n8t8silcv2 65.16 65.21 65.37 T:aes128n8silcv1 65.17 65.23 65.62 T:aes128n12silcv1 65.27 65.32 65.55 T:aes128n12t8silcv2 67.71 67.79 68.28 T:aes256otrpv1 67.75 67.81 68.43 T:aes256otrpv2 68.66 69.11 69.82 T:aes256otrpv3 71.25 71.27 71.64 T:aesjambuv1 74.29 74.33 74.60 T:twine80n6t4clocv3 90.36 90.45 90.93 T:twine80n6t4clocv2 97.37 99.56 102.29 T:ketjesrv1 105.02 105.73 108.96 T:ketjesrv2 105.85 106.93 110.53 T:riverkeyakv1 136.75 137.44 138.33 T:aezv4 145.71 145.83 147.76 T:aezv5 155.28 155.37 155.77 T:ketjejrv1 173.11 173.22 173.59 T:present80n6t4silcv3 170.57 173.65 174.24 T:proest128otrv1 277.05 277.64 278.82 T:ketjejrv2 345.94 346.76 347.93 T:aezv1 347.87 349.28 352.45 T:aezv3 355.86 356.68 357.60 T:deoxysneq128128v13 355.90 356.75 358.81 T:deoxysneq128128v1 362.00 362.34 362.83 T:twine80n6clocv1 457.09 457.73 460.14 T:deoxyseq128128v13 527.86 528.67 530.00 T:deoxysneq256128v13 527.95 529.34 532.75 T:deoxysneq256128v1 559.78 560.49 562.16 T:deoxyseq128128v1 587.49 588.00 592.27 T:led80n6t4silcv3 665.47 666.18 666.93 T:deoxyseq256128v13 831.68 833.64 837.45 T:deoxyseq256128v1 1427.18 1427.90 1432.58 T:aes128gcmv1 1457.91 1460.23 1465.60 aes256gcmv1 1480.82 1577.23 1596.49 T:acorn128 9056.18 9058.89 9072.58 T:led80n6t4silcv2 9058.25 9064.69 9073.50 T:led80n6silcv1 11910.89 11918.94 11940.78 T:present80n6t4silcv2 11913.05 11919.11 11932.33 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 2.41 2.44 2.46 T:morus640128v2 2.42 2.44 2.45 T:morus640128v1 2.48 2.53 2.56 T:morus1280256v2 2.48 2.54 2.56 T:morus1280128v2 2.53 2.57 2.59 T:morus1280256v1 2.62 2.66 2.68 T:morus1280128v1 5.29? 5.59? 5.94? T:oceankeyakv2 5.13? 5.76? 10.97? T:lunarkeyakv2 6.27 6.31 6.35 T:norx3241v2 6.27 6.31 6.34 T:norx3241v3 6.12 6.40 6.70 T:seakeyakv2 6.69 7.28 7.34 T:norx6441v2 7.27 7.31 7.34 T:norx6441v3 7.27? 7.34? 9.12? T:norx6444v3 7.25? 7.38? 13.79? T:norx6444v2 7.43 7.48 7.52 T:norx3241v1 7.97 8.01 8.24 T:norx6444v1 7.99 8.01 8.03 T:norx6441v1 8.50 8.66 8.82 T:lakekeyakv2 9.22 9.27 9.34 T:norx3261v3 9.23 9.28 9.35 T:norx3261v2 9.68 9.84 10.03 T:lakekeyakv1 10.75 10.83 10.89 T:norx6461v2 10.79 10.83 10.88 T:norx6461v3 10.96 11.02 11.07 T:norx3261v1 11.46 11.49 11.51 T:norx6461v1 11.90? 13.33? 14.95? T:aes256gcmv1 12.75 13.35 13.50 T:tiaoxinv2 13.26 13.38 13.54 T:tiaoxinv1 13.34 13.44 13.52 ascon128av12 13.35 13.44 13.71 T:ascon128av11 13.43 13.51 13.59 T:ascon96v1 15.96 16.01 16.05 T:acorn128v3 16.47 16.50 16.53 T:acorn128v2 17.04 17.20 17.42 T:riverkeyakv2 17.48? 18.00? 20.62? T:ketjemajorv2 17.96 18.03 18.06 T:aegis128l 20.31 20.38 20.43 ascon128v12 20.42 20.50 20.58 T:ascon128v1 20.43 20.50 20.60 T:ascon128v11 21.77 21.84 21.88 T:aegis128 22.98 23.00 23.08 T:aegis256 25.21 25.25 25.29 T:ketjeminorv2 28.00 28.46 28.83 T:deoxysii128v141 28.08 28.50 28.89 T:deoxysi128v141 31.30 31.35 31.55 aegis128l 30.31 32.06 32.61 T:deoxysii256v141 31.50 32.07 33.46 T:deoxysi256v141 36.00 36.06 36.14 T:aes128n12clocv1 36.05 36.13 36.19 T:aes128n12t8clocv3 36.09 36.13 36.18 T:aes128n8t8clocv2 36.09 36.13 36.18 T:aes128n12t8clocv2 35.99? 36.26? 46.78? T:aes128n8clocv1 42.58 42.63 42.83 T:aes128otrsv1 42.74 42.80 43.47 T:aes128otrsv3 42.76 42.81 43.00 T:aes128otrsv2 42.86 42.90 43.11 T:aes128n8t8silcv2 42.85 42.90 43.09 T:aes128n12t8silcv2 42.86 42.91 43.30 T:aes128n12t8silcv3 42.81 42.91 44.00 T:aes128n12silcv1 42.82 42.93 44.69 T:aes128n8silcv1 42.60 43.61 45.64 T:oceankeyakv1 43.82 44.21 45.04 T:seakeyakv1 46.24 46.35 46.73 T:aes128otrcv3 50.46 50.78 52.02 T:aes128otrpv3 55.19 55.28 55.53 T:aes128otrpv2 55.23 55.31 56.10 T:aes128otrpv1 56.56 56.65 56.90 T:aes256otrsv3 56.65 56.70 56.96 T:aes256otrsv1 56.65 56.95 58.06 T:aes256otrsv2 58.01 58.46 59.12 T:proest256otrv1 60.45 60.93 62.74 T:aes256otrcv3 69.21 69.30 69.57 T:aes256otrpv1 69.27 69.32 69.91 T:aes256otrpv2 70.07 70.14 70.85 T:aes256otrpv3 70.99 71.07 71.78 T:aesjambuv1 73.95 74.01 74.53 T:twine80n6t4clocv3 85.11 85.73 89.20 T:ketjesrv1 90.79 90.88 91.54 T:twine80n6t4clocv2 94.85 95.65 99.03 T:ketjesrv2 99.31 100.84 104.45 T:riverkeyakv1 108.40 108.48 108.76 T:aezv5 122.77 122.91 124.01 T:aezv4 135.47 135.51 135.92 T:ketjejrv1 167.02 167.23 170.08 T:aezv1 169.54 170.11 170.93 T:proest128otrv1 172.59 172.68 173.29 T:present80n6t4silcv3 236.34 242.25 243.54 T:twine80n6clocv1 242.17 242.77 244.41 T:aezv3 263.97 264.03 264.54 T:ketjejrv2 301.09 301.79 302.37 T:deoxyseq128128v13 302.26 302.34 303.28 T:deoxysneq128128v13 302.93 303.12 304.82 T:deoxyseq128128v1 302.84 303.44 304.02 T:deoxysneq128128v1 439.00 440.63 444.68 T:deoxyseq256128v1 442.08 442.47 443.92 T:deoxysneq256128v1 442.27 442.54 443.56 T:deoxysneq256128v13 441.63? 444.92? 548.90? T:deoxyseq256128v13 586.70 587.08 587.80 T:led80n6t4silcv3 1425.51? 1428.51? 1917.79? T:aes128gcmv1 1457.97 1459.44 1464.39 aes256gcmv1 1450.09 1550.08 1567.15 T:acorn128 6033.27 6035.61 6043.18 T:led80n6silcv1 6035.63 6040.08 6054.06 T:led80n6t4silcv2 7939.83 7944.16 7954.39 T:present80n6t4silcv2 7942.96 7946.90 7958.82 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 2.28 2.32 2.34 T:morus640128v2 2.29 2.32 2.33 T:morus640128v1 2.58 2.66 2.70 T:morus1280256v2 2.58 2.66 2.71 T:morus1280256v1 2.61 2.66 2.70 T:morus1280128v2 2.62 2.66 2.69 T:morus1280128v1 5.39 5.66 5.96 T:oceankeyakv2 4.68? 5.68? 6.35? T:lunarkeyakv2 2.45? 5.76? 6.70? T:seakeyakv2 6.26 6.31 6.36 T:norx3241v3 6.26 6.32 6.36 T:norx3241v2 7.27 7.31 7.35 T:norx6441v2 7.27 7.31 7.35 T:norx6441v3 7.27 7.31 7.35 T:norx6444v3 7.27? 7.38? 13.13? T:norx6444v2 7.44 7.48 7.58 T:norx3241v1 7.98 8.00 8.04 T:norx6441v1 7.96 8.00 8.06 T:norx6444v1 8.53 8.65 8.78 T:lakekeyakv2 9.24 9.27 9.30 T:norx3261v3 9.24 9.28 9.32 T:norx3261v2 9.76 9.84 9.98 T:lakekeyakv1 10.76 10.82 10.87 T:norx6461v2 10.78 10.83 10.88 T:norx6461v3 10.98 11.02 11.07 T:norx3261v1 11.45 11.49 11.52 T:norx6461v1 13.25 13.38 13.46 T:ascon96v1 13.30 13.42 13.54 T:tiaoxinv2 13.31 13.44 14.19 T:tiaoxinv1 13.27 13.44 13.80 ascon128av12 13.39 13.50 13.62 T:ascon128av11 11.87? 13.84? 20.93? T:aes256gcmv1 15.97 16.00 16.03 T:acorn128v3 16.73 16.75 16.78 T:acorn128v2 16.70 17.18 17.29 T:riverkeyakv2 17.70 17.97 18.24 T:ketjemajorv2 17.96 18.02 18.05 T:aegis128l 19.91 20.00 20.08 T:ascon128v11 19.91 20.00 20.09 T:ascon128v1 20.17 20.25 20.31 ascon128v12 21.77 21.83 21.86 T:aegis128 22.88 23.06 23.09 T:aegis256 25.22 25.25 25.28 T:ketjeminorv2 28.19 28.46 28.76 T:deoxysi128v141 28.22 28.48 28.78 T:deoxysii128v141 31.30 31.34 31.55 aegis128l 31.80 32.08 32.58 T:deoxysii256v141 31.74 32.09 32.63 T:deoxysi256v141 36.00 36.07 36.57 T:aes128n12clocv1 36.06 36.12 36.19 T:aes128n12t8clocv3 36.09 36.13 36.17 T:aes128n8t8clocv2 36.10 36.13 36.28 T:aes128n12t8clocv2 35.99? 36.51? 46.92? T:aes128n8clocv1 42.58 42.64 43.13 T:aes128otrsv1 42.77 42.84 43.87 T:aes128otrsv2 42.85 42.88 43.08 T:aes128n12t8silcv2 42.85 42.89 43.09 T:aes128n12t8silcv3 42.79 42.89 43.17 T:aes128n8silcv1 42.86 42.92 43.32 T:aes128n8t8silcv2 42.79 42.93 44.56 T:aes128n12silcv1 42.74? 43.43? 53.04? T:aes128otrsv3 43.69 44.02 44.37 T:oceankeyakv1 43.86 44.61 46.27 T:seakeyakv1 46.31 46.37 46.67 T:aes128otrcv3 50.66 50.77 51.03 T:aes128otrpv3 55.18 55.29 55.88 T:aes128otrpv2 55.22 55.29 55.53 T:aes128otrpv1 56.54 56.65 57.00 T:aes256otrsv3 56.65 56.71 57.40 T:aes256otrsv1 56.65 56.97 57.86 T:aes256otrsv2 57.90 58.45 58.76 T:proest256otrv1 60.84 60.99 61.32 T:aes256otrcv3 69.25 69.31 69.59 T:aes256otrpv2 69.13 69.36 70.78 T:aes256otrpv1 70.05 70.14 71.60 T:aes256otrpv3 70.98 71.01 71.14 T:aesjambuv1 73.87 74.00 74.10 T:twine80n6t4clocv3 85.12 85.75 89.20 T:ketjesrv1 94.42 94.50 95.45 T:twine80n6t4clocv2 94.86 95.54 99.01 T:ketjesrv2 99.33 100.29 103.97 T:riverkeyakv1 108.54 108.61 109.64 T:aezv5 123.08 123.76 125.11 T:aezv4 135.46 135.55 136.05 T:ketjejrv1 166.78 167.36 169.48 T:aezv1 169.37 169.92 170.98 T:proest128otrv1 172.60 172.65 173.22 T:present80n6t4silcv3 236.37 242.21 243.19 T:twine80n6clocv1 242.27 242.36 243.19 T:aezv3 263.96 264.05 264.76 T:ketjejrv2 300.38 301.13 302.01 T:deoxyseq128128v13 302.13 302.19 302.90 T:deoxysneq128128v13 302.86 302.94 303.66 T:deoxysneq128128v1 301.95 303.09 305.28 T:deoxyseq128128v1 440.13 440.60 442.48 T:deoxyseq256128v1 441.55 442.19 444.56 T:deoxyseq256128v13 442.07 442.66 443.85 T:deoxysneq256128v13 442.06 443.20 444.00 T:deoxysneq256128v1 572.40 585.02 587.53 T:led80n6t4silcv3 1426.27? 1428.18? 1912.40? T:aes128gcmv1 1454.82 1459.63 1465.27 aes256gcmv1 1457.95 1549.89 1571.25 T:acorn128 6034.21 6037.84 6049.61 T:led80n6silcv1 6035.32 6039.69 6049.32 T:led80n6t4silcv2 7939.86 7947.04 7957.62 T:present80n6t4silcv2 7943.20 7948.04 7954.75 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 2.31 2.32 2.32 T:morus640128v2 2.31 2.32 2.32 T:morus640128v1 2.64 2.66 2.67 T:morus1280256v2 2.65 2.66 2.68 T:morus1280256v1 2.65 2.66 2.68 T:morus1280128v1 2.65 2.66 2.67 T:morus1280128v2 5.38 5.68 5.97 T:oceankeyakv2 5.16? 5.73? 6.35? T:lunarkeyakv2 2.59? 5.85? 6.69? T:seakeyakv2 6.28 6.32 6.35 T:norx3241v2 6.29 6.32 6.35 T:norx3241v3 7.29 7.31 7.34 T:norx6441v3 7.29 7.31 7.35 T:norx6441v2 7.29 7.32 7.34 T:norx6444v3 7.28? 7.38? 13.05? T:norx6444v2 7.48 7.48 7.50 T:norx3241v1 7.97 8.01 8.04 T:norx6444v1 7.99 8.01 8.11 T:norx6441v1 8.54 8.65 8.77 T:lakekeyakv2 9.25 9.27 9.30 T:norx3261v3 9.25 9.28 9.29 T:norx3261v2 9.79 9.84 9.96 T:lakekeyakv1 10.77 10.83 10.89 T:norx6461v2 10.81 10.83 10.86 T:norx6461v3 11.02 11.02 11.06 T:norx3261v1 11.46 11.48 11.52 T:norx6461v1 13.34 13.38 13.53 T:ascon96v1 13.39 13.42 13.46 T:tiaoxinv2 13.40 13.44 13.65 T:tiaoxinv1 13.43 13.44 13.46 ascon128av12 13.46 13.50 13.62 T:ascon128av11 11.71? 14.18? 26.17? T:aes256gcmv1 15.99 16.00 16.02 T:acorn128v3 16.73 16.75 16.76 T:acorn128v2 17.09 17.20 18.10 T:riverkeyakv2 17.24 17.96 18.23 T:ketjemajorv2 18.00 18.02 18.04 T:aegis128l 19.98 20.00 20.02 T:ascon128v11 19.99 20.00 20.02 T:ascon128v1 20.24 20.25 20.26 ascon128v12 21.81 21.83 21.86 T:aegis128 23.04 23.07 23.18 T:aegis256 24.69 25.24 25.28 T:ketjeminorv2 28.35 28.47 28.68 T:deoxysi128v141 28.36 28.50 29.58 T:deoxysii128v141 31.31 31.35 31.56 aegis128l 31.88 32.09 32.55 T:deoxysi256v141 31.93? 33.21? 48.34? T:deoxysii256v141 36.00 36.06 36.11 T:aes128n8clocv1 36.00 36.06 36.13 T:aes128n12clocv1 36.09 36.12 36.17 T:aes128n8t8clocv2 36.10 36.13 36.21 T:aes128n12t8clocv2 36.07 36.13 36.31 T:aes128n12t8clocv3 42.59 42.63 42.88 T:aes128otrsv1 42.75 42.80 43.05 T:aes128otrsv3 42.78 42.81 43.05 T:aes128otrsv2 42.85 42.88 43.11 T:aes128n12t8silcv2 42.82 42.90 43.15 T:aes128n8silcv1 42.81 42.90 43.33 T:aes128n12silcv1 42.85 42.90 43.38 T:aes128n12t8silcv3 42.86 42.91 43.09 T:aes128n8t8silcv2 43.85 44.16 44.49 T:seakeyakv1 43.68? 44.28? 52.04? T:oceankeyakv1 46.32 46.38 47.61 T:aes128otrcv3 50.68 50.77 51.35 T:aes128otrpv3 55.20 55.29 55.54 T:aes128otrpv1 55.19 55.29 56.18 T:aes128otrpv2 56.56 56.66 56.96 T:aes256otrsv3 56.65 56.70 57.31 T:aes256otrsv1 56.66 56.99 57.91 T:aes256otrsv2 58.33 58.47 59.52 T:proest256otrv1 60.85 60.97 61.85 T:aes256otrcv3 69.23 69.29 69.59 T:aes256otrpv1 69.27 69.38 71.01 T:aes256otrpv2 70.07 70.13 70.47 T:aes256otrpv3 70.99 71.01 71.26 T:aesjambuv1 73.97 74.01 74.52 T:twine80n6t4clocv3 85.10 85.82 89.26 T:ketjesrv1 94.46 94.93 103.19 T:twine80n6t4clocv2 94.86 95.58 99.10 T:ketjesrv2 99.31 100.68 104.06 T:riverkeyakv1 108.43 108.49 108.82 T:aezv5 123.07 123.73 124.09 T:aezv4 135.44 135.50 135.67 T:ketjejrv1 167.10 167.21 168.38 T:aezv1 169.58 169.85 170.28 T:proest128otrv1 172.61 172.70 173.12 T:present80n6t4silcv3 236.14 242.36 244.03 T:twine80n6clocv1 242.28 243.02 246.65 T:aezv3 263.95 264.08 265.18 T:ketjejrv2 300.91 301.19 302.23 T:deoxyseq128128v13 301.91 302.19 302.97 T:deoxysneq128128v13 302.43 302.95 303.94 T:deoxysneq128128v1 302.75 303.12 305.02 T:deoxyseq128128v1 440.19 440.60 442.83 T:deoxyseq256128v1 440.75 442.20 444.01 T:deoxyseq256128v13 441.96 442.88 444.70 T:deoxysneq256128v13 442.20 443.21 443.98 T:deoxysneq256128v1 586.66 587.09 587.63 T:led80n6t4silcv3 1456.97 1459.15 1461.46 aes256gcmv1 1431.98? 1459.71? 1957.37? T:aes128gcmv1 1458.34 1549.96 1571.15 T:acorn128 6032.47 6035.63 6040.49 T:led80n6silcv1 6035.12 6039.95 6044.56 T:led80n6t4silcv2 7942.10 7946.93 7954.17 T:present80n6t4silcv2 7941.05 7951.09 7976.24 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 3.00 3.00 3.04 T:morus640128v1 3.02 3.02 3.05 T:morus640128v2 3.54 3.54 3.58 T:morus1280256v1 3.54 3.54 3.60 T:morus1280128v2 3.57 3.57 3.59 T:morus1280128v1 3.63 3.63 3.67 T:morus1280256v2 7.19 7.19 7.23 T:norx3241v2 7.20 7.20 7.24 T:norx3241v3 8.15 8.15 8.20 T:norx3241v1 8.99 8.99 9.04 T:norx6441v2 9.01 9.01 9.11 T:norx6441v3 9.33 9.34 9.43 T:norx6441v1 10.39 10.39 10.48 T:norx3261v2 10.40 10.40 10.45 T:norx3261v3 10.46 10.46 10.81 T:seakeyakv2 11.14 11.15 11.19 T:norx6444v3 11.12? 11.19? 17.18? T:norx6444v2 11.90 11.91 12.07 T:lakekeyakv2 11.91 11.93 12.15 T:norx3261v1 11.94 11.95 11.97 T:norx6444v1 13.07 13.08 13.19 T:norx6461v2 13.11 13.12 13.20 T:norx6461v3 13.23 13.23 13.27 T:norx6461v1 13.43 13.43 13.86 T:lakekeyakv1 13.71 13.71 13.88 T:ascon96v1 13.73 13.73 13.76 T:ascon128av11 14.09 14.10 14.14 ascon128av12 14.39 14.43 15.46 T:oceankeyakv2 19.20 19.21 19.58 T:tiaoxinv2 19.23 19.24 19.39 T:tiaoxinv1 19.63 19.63 19.79 T:acorn128v3 20.03 20.03 20.12 T:acorn128v2 20.35 20.35 20.60 T:riverkeyakv2 20.87 20.88 21.03 T:ascon128v1 20.87 20.88 21.03 T:ascon128v11 21.01 21.01 21.16 ascon128v12 21.33 21.35 21.51 T:aegis128l 24.13 24.14 24.22 T:aegis128 24.43 24.51 25.77 T:lunarkeyakv2 26.44 26.45 26.50 T:aegis256 29.94 29.95 30.39 T:ketjeminorv2 31.66 31.70 32.13 T:deoxysi128v141 33.30 33.33 35.23 T:ketjemajorv2 36.43 36.49 39.14 T:deoxysi256v141 41.73 41.75 42.44 aegis128l 46.84 46.86 47.43 T:deoxysii128v141 48.66 48.67 49.20 T:aes128otrsv3 48.68 48.69 49.05 T:aes128otrsv1 48.59 48.72 49.15 T:aes128otrcv3 48.82 48.82 49.22 T:aes128otrsv2 54.89 54.93 55.47 T:aes128otrpv2 54.91 54.93 55.14 T:aes128otrpv1 54.93 54.96 56.25 T:deoxysii256v141 54.99 54.99 55.54 T:seakeyakv1 55.11 55.14 55.76 T:aes128otrpv3 55.26 55.27 55.42 T:aes128n12t8clocv2 55.32 55.33 55.69 T:aes128n12t8clocv3 55.25 55.35 58.77 T:aes128n8t8clocv2 55.36 55.37 55.55 T:aes128n12clocv1 55.39 55.48 56.43 T:aes128n8clocv1 63.48 63.49 64.41 T:aes256otrsv3 63.64 63.65 63.83 T:aes256otrsv2 63.66 63.66 64.17 T:aes256otrsv1 63.88 63.91 64.45 T:aes256otrcv3 64.39 64.41 65.40 T:proest256otrv1 65.93 65.93 66.07 T:aes128n8t8silcv2 65.98 66.02 66.59 T:aes128n12t8silcv3 65.93 66.02 66.96 T:aes128n12t8silcv2 66.10 66.11 66.75 T:aes128n8silcv1 66.11 66.12 66.33 T:aes128n12silcv1 68.76 68.77 69.07 T:oceankeyakv1 69.85 69.85 70.30 T:aes256otrpv2 69.86 69.87 70.70 T:aes256otrpv1 70.03 70.14 72.22 T:aes256gcmv1 70.53 71.04 71.41 T:aes256otrpv3 72.37 72.37 72.61 T:aesjambuv1 75.37 75.37 75.45 T:twine80n6t4clocv3 88.50 88.52 88.85 T:twine80n6t4clocv2 99.40 99.74 102.78 T:ketjesrv1 111.19 111.84 115.60 T:riverkeyakv1 111.78 112.19 115.16 T:ketjesrv2 133.42 133.55 134.42 T:aezv4 144.03 144.04 145.16 T:aezv5 159.45 159.47 159.89 T:ketjejrv1 175.23 175.24 175.57 T:present80n6t4silcv3 177.31 177.46 178.53 T:proest128otrv1 290.49 290.76 291.18 T:ketjejrv2 304.37 304.44 305.19 T:deoxysneq128128v13 304.68 304.75 305.57 T:deoxysneq128128v1 331.54 332.48 334.36 T:aezv1 350.85 351.51 353.26 T:aezv3 365.45 365.84 366.34 T:twine80n6clocv1 444.72 445.02 446.09 T:deoxysneq256128v13 444.85 445.41 446.45 T:deoxysneq256128v1 460.84 461.19 462.63 T:deoxyseq128128v1 461.79 462.44 463.00 T:deoxyseq128128v13 592.52 592.71 593.13 T:led80n6t4silcv3 665.61 665.95 666.76 T:deoxyseq256128v1 672.69 673.13 674.66 T:deoxyseq256128v13 1462.94 1463.54 1464.02 T:aes128gcmv1 1686.60 1770.84 1771.94 T:acorn128 9105.25 9108.24 9119.88 T:led80n6t4silcv2 9105.11 9109.40 9116.23 T:led80n6silcv1 11976.78 11982.42 12004.04 T:present80n6silcv1 11982.07 11995.13 12055.42 T:present80n6t4silcv2 26623.82 26661.09 26788.97 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.92 2.92 3.00 T:morus640128v1 2.94 2.94 2.99 T:morus640128v2 3.53 3.54 3.67 T:morus1280128v1 3.57 3.58 3.71 T:morus1280128v2 3.64 3.65 3.78 T:morus1280256v1 3.68 3.69 3.82 T:morus1280256v2 7.18 7.18 7.31 T:norx3241v2 7.18 7.19 7.31 T:norx3241v3 8.24 8.25 8.46 T:norx3241v1 9.06 9.07 9.15 T:norx6441v2 9.09 9.09 9.17 T:norx6441v3 9.36 9.36 9.42 T:norx6441v1 10.38 10.38 10.49 T:norx3261v2 10.39 10.39 10.52 T:norx3261v3 10.53 10.54 10.96 T:seakeyakv2 11.23 11.25 11.33 T:norx6444v3 11.20? 11.35? 18.73? T:norx6444v2 11.52 11.53 11.70 T:lakekeyakv2 11.96 11.97 12.05 T:norx6444v1 11.99 12.00 12.14 T:norx3261v1 13.14 13.17 14.06 T:norx6461v2 13.19 13.19 13.28 T:norx6461v3 13.25 13.26 13.32 T:norx6461v1 13.32 13.33 13.80 T:lakekeyakv1 13.75 13.75 13.94 T:ascon96v1 13.87 13.88 14.05 T:ascon128av11 14.04 14.05 14.22 ascon128av12 14.48 14.48 14.92 T:oceankeyakv2 18.74 18.75 18.85 T:acorn128v3 19.35 19.36 19.60 T:tiaoxinv2 19.36 19.38 19.81 T:tiaoxinv1 19.97 20.00 20.31 T:acorn128v2 20.50 20.52 20.78 T:ascon128v11 20.50 20.59 21.65 T:ascon128v1 20.64 20.67 20.99 T:riverkeyakv2 20.89 20.90 21.06 ascon128v12 21.38 21.41 21.51 T:aegis128l 24.17 24.19 24.37 T:aegis128 24.53 24.73 25.89 T:lunarkeyakv2 26.49 26.51 26.90 T:aegis256 30.82 30.84 31.16 T:ketjeminorv2 32.02 32.12 33.45 T:ketjemajorv2 41.64 41.65 42.16 aegis128l 43.56 43.66 44.80 T:deoxysi128v141 46.99 47.02 47.53 T:deoxysii128v141 48.70? 48.84? 56.05? T:aes128otrcv3 49.08 49.09 49.66 T:aes128otrsv1 49.23 49.24 49.73 T:aes128otrsv2 49.72 49.96 50.84 T:aes128otrsv3 50.45 50.49 51.02 T:deoxysi256v141 55.07 55.08 55.47 T:aes128otrpv3 55.12 55.19 56.28 T:deoxysii256v141 55.21 55.21 55.48 T:seakeyakv1 55.28 55.30 55.54 T:aes128otrpv2 55.28 55.31 55.98 T:aes128otrpv1 57.52 57.53 57.85 T:aes128n8t8clocv2 57.54 57.55 57.85 T:aes128n12t8clocv2 57.60 57.61 57.92 T:aes128n12t8clocv3 57.73 57.73 58.25 T:aes128n12clocv1 57.69 57.74 58.76 T:aes128n8clocv1 63.72 63.79 65.00 T:proest256otrv1 64.02 64.04 64.63 T:aes256otrcv3 64.04 64.09 64.56 T:aes256otrsv2 64.05 64.14 65.53 T:aes256otrsv1 64.53 64.54 65.09 T:aes256otrsv3 66.16 66.17 66.53 T:aes128n8t8silcv2 66.21 66.22 66.57 T:aes128n12t8silcv3 66.25 66.27 66.44 T:aes128n12t8silcv2 66.39 66.40 66.62 T:aes128n8silcv1 66.41 66.48 68.17 T:aes128n12silcv1 69.00 69.82 71.16 T:oceankeyakv1 70.24 70.25 70.82 T:aes256otrpv1 70.22 70.26 70.91 T:aes256otrpv2 71.61 72.07 72.33 T:aes256otrpv3 72.32 72.34 72.68 T:aesjambuv1 75.44 75.45 75.74 T:twine80n6t4clocv3 75.61 75.67 77.04 T:aes256gcmv1 91.61 91.61 91.98 T:twine80n6t4clocv2 100.04 100.36 103.54 T:ketjesrv1 108.67 109.04 112.15 T:ketjesrv2 110.96? 111.82? 136.12? T:riverkeyakv1 131.43 132.24 133.31 T:aezv4 141.45 141.46 142.24 T:aezv5 157.46 157.51 157.95 T:ketjejrv1 175.23 175.27 175.56 T:present80n6t4silcv3 179.79 181.23 181.64 T:proest128otrv1 281.29 281.47 282.28 T:ketjejrv2 333.25 334.07 335.99 T:aezv1 348.11 348.91 350.43 T:aezv3 357.45 357.55 358.80 T:deoxysneq128128v1 357.75 357.88 359.00 T:deoxysneq128128v13 363.72 364.11 365.87 T:twine80n6clocv1 461.74 462.49 463.10 T:deoxyseq128128v13 530.40 532.45 534.93 T:deoxysneq256128v1 530.96 533.78 557.65 T:deoxysneq256128v13 562.83 563.57 565.72 T:deoxyseq128128v1 592.51 592.72 594.83 T:led80n6t4silcv3 672.66 673.02 674.68 T:deoxyseq256128v13 836.32 837.28 842.55 T:deoxyseq256128v1 1463.66 1464.13 1465.21 T:aes128gcmv1 1681.21 1767.03 1769.55 T:acorn128 9103.60 9109.47 9126.53 T:led80n6silcv1 9107.03 9115.57 9132.03 T:led80n6t4silcv2 11974.16 11979.30 12001.28 T:present80n6silcv1 11975.75 11985.93 12053.35 T:present80n6t4silcv2 26621.80 26676.25 26748.61 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.92 2.92 2.93 T:morus640128v1 2.94 2.94 2.94 T:morus640128v2 3.53 3.54 3.59 T:morus1280128v1 3.57 3.58 3.59 T:morus1280128v2 3.64 3.64 3.67 T:morus1280256v1 3.68 3.68 3.71 T:morus1280256v2 7.18 7.18 7.21 T:norx3241v2 7.18 7.18 7.23 T:norx3241v3 8.24 8.24 8.25 T:norx3241v1 9.15 9.15 9.19 T:norx6441v2 9.19 9.19 9.23 T:norx6441v3 9.44 9.45 9.54 T:norx6441v1 10.38 10.38 10.45 T:norx3261v2 10.39 10.40 11.28 T:norx3261v3 10.58 10.59 10.94 T:seakeyakv2 11.33 11.33 11.36 T:norx6444v3 11.29? 11.37? 18.03? T:norx6444v2 11.61 11.63 11.75 T:lakekeyakv2 11.99 11.99 12.00 T:norx3261v1 12.04 12.05 12.09 T:norx6444v1 13.22 13.23 13.26 T:norx6461v2 13.27 13.28 13.30 T:norx6461v3 13.34 13.36 13.59 T:norx6461v1 13.48 13.52 14.63 T:lakekeyakv1 13.74 13.74 13.77 T:ascon96v1 13.86 13.86 13.90 T:ascon128av11 14.04 14.04 14.06 ascon128av12 14.50 14.51 14.88 T:oceankeyakv2 18.74 18.75 18.82 T:acorn128v3 19.32 19.33 19.52 T:tiaoxinv2 19.34 19.35 19.51 T:tiaoxinv1 19.97 19.97 20.07 T:acorn128v2 20.50 20.50 20.64 T:ascon128v1 20.50 20.50 20.67 T:ascon128v11 20.71 20.74 21.02 T:riverkeyakv2 20.89 20.89 21.02 ascon128v12 21.38 21.39 21.46 T:aegis128l 24.16 24.18 24.25 T:aegis128 24.62 24.63 25.06 T:lunarkeyakv2 26.58 26.59 26.70 T:aegis256 30.92 30.93 31.14 T:ketjeminorv2 32.13 32.13 32.33 T:ketjemajorv2 41.73 41.74 41.92 aegis128l 43.74 43.84 44.36 T:deoxysi128v141 47.23 47.27 48.20 T:deoxysii128v141 48.69 48.79 52.40 T:aes128otrcv3 49.19 49.20 49.42 T:aes128otrsv1 49.31 49.31 49.77 T:aes128otrsv2 49.83 50.06 50.84 T:aes128otrsv3 50.58 50.71 51.32 T:deoxysi256v141 55.09 55.10 55.57 T:deoxysii256v141 55.16 55.19 55.77 T:aes128otrpv3 55.36 55.39 55.88 T:aes128otrpv2 55.37 55.40 55.93 T:aes128otrpv1 55.30 55.68 56.96 T:seakeyakv1 57.49 57.50 57.73 T:aes128n8t8clocv2 57.50 57.53 57.95 T:aes128n12t8clocv2 57.56 57.57 57.81 T:aes128n12t8clocv3 57.66 57.68 57.85 T:aes128n8clocv1 57.69 57.70 57.88 T:aes128n12clocv1 63.72 63.75 64.33 T:proest256otrv1 64.00 64.01 64.41 T:aes256otrcv3 64.15 64.16 64.84 T:aes256otrsv1 64.14 64.17 64.40 T:aes256otrsv2 64.64 64.67 65.55 T:aes256otrsv3 66.15 66.16 66.29 T:aes128n8t8silcv2 66.22 66.25 66.74 T:aes128n12t8silcv3 66.25 66.30 66.83 T:aes128n12t8silcv2 66.39 66.41 66.85 T:aes128n8silcv1 66.39 66.41 66.68 T:aes128n12silcv1 69.05 69.05 69.34 T:oceankeyakv1 70.32 70.32 70.85 T:aes256otrpv2 70.33 70.34 70.91 T:aes256otrpv1 71.64 72.17 72.65 T:aes256otrpv3 72.32 72.32 72.53 T:aesjambuv1 75.44 75.46 75.69 T:twine80n6t4clocv3 91.61 91.61 91.93 T:twine80n6t4clocv2 96.05 96.26 98.13 T:aes256gcmv1 100.14 100.94 103.99 T:ketjesrv1 108.76 109.21 112.62 T:ketjesrv2 111.10 112.08 115.07 T:riverkeyakv1 131.32 132.17 133.05 T:aezv4 141.35 141.37 141.96 T:aezv5 157.55 157.63 158.12 T:ketjejrv1 175.22 175.27 175.55 T:present80n6t4silcv3 178.62 181.19 181.79 T:proest128otrv1 281.38 281.47 281.93 T:ketjejrv2 333.08 334.02 336.94 T:aezv1 347.92 348.82 351.85 T:aezv3 357.45 357.75 359.34 T:deoxysneq128128v1 357.84 357.96 359.46 T:deoxysneq128128v13 363.48 363.96 365.60 T:twine80n6clocv1 461.80 462.55 463.23 T:deoxyseq128128v13 530.14 531.41 532.91 T:deoxysneq256128v1 530.30 531.93 536.63 T:deoxysneq256128v13 562.48 562.97 563.61 T:deoxyseq128128v1 592.44 592.69 593.00 T:led80n6t4silcv3 672.79 673.35 675.95 T:deoxyseq256128v13 836.26 836.99 838.11 T:deoxyseq256128v1 1435.40 1435.92 1438.42 T:aes128gcmv1 1678.21 1766.96 1767.92 T:acorn128 1979.50 1980.30 1983.19 aes256gcmv1 9104.28 9106.10 9115.25 T:led80n6t4silcv2 9105.20 9111.91 9120.51 T:led80n6silcv1 11976.71 11984.91 12012.42 T:present80n6silcv1 11977.58 11985.35 12014.93 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.37 9.37 9.89 T:morus640128v1 9.90 9.90 10.49 T:morus640128v2 17.23 17.25 18.23 T:morus1280128v1 17.51 17.51 18.42 T:morus1280256v1 17.62 17.68 19.33 T:norx3241v1 18.25 18.28 19.13 T:morus1280128v2 18.72 18.78 19.52 T:morus1280256v2 19.46 19.51 20.70 T:norx3241v2 19.56 19.65 20.79 T:norx3241v3 21.05? 21.16? 23.41? T:ascon128av11 21.84 21.95 24.13 ascon128av12 21.15? 24.90? 38.89? T:ascon96v1 25.57 25.59 27.18 T:norx3261v1 27.46 27.46 28.52 T:norx3261v2 27.53 27.64 28.92 T:norx3261v3 27.84 27.84 29.56 T:ascon128v11 27.84 27.86 29.74 T:ascon128v1 28.21 28.27 29.95 ascon128v12 31.12 31.12 31.40 T:norx6441v1 37.26 37.35 38.28 T:norx6441v3 37.16? 38.78? 60.27? T:norx6441v2 41.98 42.00 42.35 T:norx6461v1 50.22 50.28 51.17 T:norx6461v2 50.57 50.65 52.87 T:lakekeyakv1 51.21 51.28 52.34 T:norx6461v3 51.53 51.65 53.58 T:riverkeyakv2 54.90 55.15 58.00 T:lakekeyakv2 68.11 68.40 69.70 T:aes128n8t8clocv2 68.46 68.68 69.97 T:aes128n12t8clocv2 69.86 69.86 70.68 T:aegis128 69.73 69.86 71.31 T:aes128n12t8clocv3 72.03 72.05 74.23 T:aes128n8clocv1 72.16 72.21 74.44 T:aes128n12clocv1 82.89 82.93 84.03 T:acorn128v3 84.00 84.00 84.80 T:acorn128v2 87.00 87.12 88.06 T:norx6444v2 87.59 87.66 88.52 T:norx6444v3 87.50 87.94 92.63 T:aes128n8t8silcv2 87.75 87.95 89.25 T:aes128n12t8silcv2 88.51 88.70 90.38 T:aes128n12t8silcv3 90.91 91.11 91.96 T:aegis256 92.03? 92.16? 122.04? T:norx6444v1 93.22 93.37 95.34 T:aes128n8silcv1 93.45 93.67 95.77 T:aes128n12silcv1 93.98 94.05 96.31 T:aes128otrsv1 94.19 94.19 96.16 T:aes128otrsv2 94.13 94.20 94.80 T:aegis128l 94.77 94.85 97.51 T:aes128otrsv3 96.26 96.26 96.91 T:aesjambuv1 97.85 98.02 100.46 T:aes128otrpv2 98.17 98.23 101.00 T:aes128otrpv1 99.03 99.12 101.53 T:aes128otrpv3 99.86 99.93 101.36 T:ketjeminorv2 100.92 100.98 102.00 T:twine80n6t4clocv3 101.42 101.59 106.76 T:seakeyakv2 101.90 101.90 104.52 T:aes128otrcv3 114.38 114.44 126.32 T:deoxysi128v141 115.73 115.96 118.38 T:twine80n6t4clocv2 122.87 122.99 128.58 T:aes256otrsv2 123.48 124.30 126.21 T:aes256otrsv1 124.16 124.44 127.10 T:aes256otrsv3 126.84 126.88 129.15 T:aes256otrpv2 127.56 127.93 130.71 T:aes256otrpv1 128.06 128.66 130.88 T:aes256otrpv3 132.94 133.82 136.73 T:aes256otrcv3 143.52 143.63 146.69 T:tiaoxinv2 144.02 144.04 147.03 T:tiaoxinv1 144.95 144.95 146.97 aegis128l 154.50 155.87 160.42 T:ketjesrv1 158.20 158.34 161.11 T:deoxysii128v141 165.27 165.32 170.48 T:oceankeyakv2 172.62 173.04 178.38 T:aezv4 185.16 185.39 189.53 T:proest256otrv1 188.16 188.38 202.30 T:deoxysi256v141 189.91 191.22 195.91 T:ketjesrv2 191.57 191.83 204.34 T:aezv5 201.14 204.16 212.13 T:riverkeyakv1 210.02 210.05 210.73 T:ketjejrv1 221.95 221.99 222.58 T:present80n6t4silcv3 254.52 254.67 259.08 T:ketjemajorv2 342.43 342.61 344.91 T:deoxysneq128128v13 342.89 343.30 345.93 T:deoxysneq128128v1 347.31 347.58 353.19 T:proest128otrv1 361.91 362.52 370.43 T:aezv1 361.91 364.74 387.05 T:aes256gcmv1 382.09 382.33 384.68 T:ketjejrv2 397.10 397.21 407.35 T:lunarkeyakv2 399.38 399.50 403.45 T:twine80n6clocv1 416.97 417.02 423.23 T:seakeyakv1 439.80 439.94 444.90 T:deoxysii256v141 499.96 499.96 502.74 T:deoxysneq256128v1 499.95 499.97 503.10 T:deoxysneq256128v13 504.85 505.86 521.59 T:aezv3 534.08 534.25 540.45 T:deoxyseq128128v1 571.91 572.38 574.59 T:deoxyseq128128v13 702.62 702.65 704.53 T:led80n6t4silcv3 750.70 750.76 756.95 T:oceankeyakv1 773.10 773.16 778.36 T:deoxyseq256128v1 832.60 832.60 839.13 T:deoxyseq256128v13 1649.17? 1655.15? 2138.98? T:aes128gcmv1 6011.45 6257.24 6266.44 T:acorn128 10188.46 10198.31 10207.47 T:led80n6t4silcv2 10170.01 10198.56 10209.36 T:led80n6silcv1 13400.28 13404.57 13417.41 T:present80n6t4silcv2 13407.62 13410.48 13416.26 T:present80n6silcv1 38542.42 38554.42 38721.81 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.61 9.63 10.43 T:morus640128v1 10.02 10.04 11.03 T:morus640128v2 17.77 17.80 19.18 T:morus1280128v1 17.76 17.86 19.48 T:norx3241v1 18.21 18.24 19.11 T:morus1280256v1 18.72 18.75 19.95 T:morus1280128v2 19.14 19.16 20.29 T:norx3241v2 19.14 19.19 20.37 T:morus1280256v2 19.24 19.29 20.18 T:norx3241v3 21.37 21.39 23.55 T:ascon128av11 21.29? 21.79? 36.30? T:ascon96v1 22.09? 22.17? 24.81? ascon128av12 25.72 25.72 26.91 T:norx3261v1 27.08 27.17 27.97 T:norx3261v2 27.18 27.23 28.19 T:norx3261v3 27.62 27.67 29.75 T:ascon128v11 27.62 27.67 29.76 T:ascon128v1 28.28 28.32 29.98 ascon128v12 30.87 30.90 31.78 T:norx6441v1 38.08 38.12 38.84 T:norx6441v3 37.46? 38.69? 60.05? T:norx6441v2 41.73 41.76 42.67 T:norx6461v1 49.72 49.86 51.21 T:lakekeyakv1 50.79 50.80 51.45 T:norx6461v2 51.98 52.01 52.80 T:norx6461v3 52.66 52.84 54.57 T:riverkeyakv2 54.66 54.86 57.39 T:lakekeyakv2 70.06 70.06 70.45 T:aegis128 70.10 70.20 70.89 T:aes128n8t8clocv2 70.46 70.54 71.12 T:aes128n12t8clocv2 72.03 72.25 73.48 T:aes128n12t8clocv3 73.97 74.09 75.20 T:aes128n8clocv1 74.71 74.74 75.74 T:aes128n12clocv1 81.79 81.85 82.63 T:acorn128v3 85.45 85.45 86.15 T:acorn128v2 87.84 87.91 88.75 T:norx6444v2 88.35 88.42 89.43 T:aes128n12t8silcv2 88.55 88.61 89.58 T:norx6444v3 88.58 88.64 89.58 T:aes128n8t8silcv2 89.68 89.80 90.67 T:aes128n12t8silcv3 91.36 91.37 91.98 T:aegis256 92.02 92.11 93.13 T:norx6444v1 93.44 93.54 97.32 T:aes128n8silcv1 93.62 93.81 95.87 T:aes128n12silcv1 94.26 94.29 94.78 T:aegis128l 94.80 94.84 96.38 T:aes128otrsv1 95.27 95.27 96.75 T:aes128otrsv2 96.56 96.63 97.64 T:aesjambuv1 96.36 96.75 98.73 T:aes128otrsv3 98.53 98.56 101.38 T:aes128otrpv1 98.53 98.60 100.71 T:aes128otrpv2 100.73 100.80 101.30 T:ketjeminorv2 100.89 100.96 102.86 T:aes128otrpv3 101.16 101.20 101.78 T:twine80n6t4clocv3 101.84 101.97 103.13 T:aes128otrcv3 102.42 102.62 107.78 T:seakeyakv2 118.30 118.34 119.91 T:twine80n6t4clocv2 123.87 123.92 125.82 T:aes256otrsv2 124.35 125.17 127.02 T:aes256otrsv1 125.67 125.97 128.36 T:aes256otrsv3 127.31 127.36 129.37 T:aes256otrpv2 128.31 128.67 131.32 T:aes256otrpv1 129.12 129.71 132.21 T:aes256otrpv3 132.43 132.56 136.37 T:deoxysi128v141 133.38 133.95 135.35 T:aes256otrcv3 143.63 143.69 146.55 T:tiaoxinv2 144.24 144.30 147.30 T:tiaoxinv1 144.97 145.03 146.27 aegis128l 155.44 156.94 161.47 T:ketjesrv1 158.35 158.40 160.58 T:deoxysii128v141 166.86 166.95 171.67 T:oceankeyakv2 169.90 170.94 173.62 T:aezv4 186.86 187.03 190.35 T:proest256otrv1 187.19 188.53 193.17 T:ketjesrv2 188.25 188.98 199.39 T:aezv5 201.42 206.63 219.64 T:riverkeyakv1 208.27 208.32 209.02 T:ketjejrv1 208.89 209.02 215.74 T:deoxysi256v141 222.15 222.15 222.62 T:present80n6t4silcv3 254.48 254.61 259.24 T:ketjemajorv2 350.37 354.04 357.56 T:proest128otrv1 373.39 373.94 389.62 T:aezv1 374.03 374.23 380.06 T:ketjejrv2 395.32 395.46 399.89 T:deoxysneq128128v1 395.90 396.15 409.21 T:deoxysneq128128v13 396.08 397.33 431.02 T:lunarkeyakv2 398.03 398.18 402.19 T:twine80n6clocv1 416.62 416.94 435.49 T:seakeyakv1 439.69 439.76 444.80 T:deoxysii256v141 486.94 489.29 509.53 T:aes256gcmv1 502.03 502.66 518.86 T:aezv3 572.04 573.84 578.11 T:deoxyseq128128v13 585.10 585.32 595.67 T:deoxysneq256128v13 585.05 585.66 590.71 T:deoxysneq256128v1 637.08 637.48 641.80 T:deoxyseq128128v1 702.35 702.50 704.34 T:led80n6t4silcv3 751.32 751.39 764.08 T:oceankeyakv1 832.53 832.62 840.51 T:deoxyseq256128v13 943.32 943.35 948.17 T:deoxyseq256128v1 1649.69? 1654.68? 2148.39? T:aes128gcmv1 5908.89 6219.80 6226.12 T:acorn128 10188.38 10196.60 10210.10 T:led80n6t4silcv2 10177.10 10202.06 10216.32 T:led80n6silcv1 13398.25 13404.73 13411.51 T:present80n6t4silcv2 13406.93 13412.99 13466.95 T:present80n6silcv1 38546.30 38555.05 38670.51 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.61 9.61 9.64 T:morus640128v1 10.02 10.02 10.09 T:morus640128v2 17.76 17.76 17.84 T:norx3241v1 17.77 17.77 17.86 T:morus1280128v1 18.21 18.21 18.40 T:morus1280256v1 18.72 18.74 18.90 T:morus1280128v2 19.14 19.16 19.32 T:morus1280256v2 19.14 19.20 19.67 T:norx3241v2 19.27 19.33 19.70 T:norx3241v3 21.12 21.21 22.17 T:ascon96v1 21.29 21.38 22.28 T:ascon128av11 22.09 22.09 22.33 ascon128av12 25.72 25.72 25.77 T:norx3261v1 27.09 27.17 27.45 T:norx3261v2 27.19 27.21 27.58 T:norx3261v3 27.55 27.58 27.92 T:ascon128v11 27.55 27.58 28.01 T:ascon128v1 28.28 28.28 28.45 ascon128v12 31.35 31.41 31.82 T:norx6441v1 38.60 38.62 38.97 T:norx6441v3 38.05? 38.91? 60.41? T:norx6441v2 42.22 42.29 42.78 T:norx6461v1 50.17 50.31 51.33 T:lakekeyakv1 51.25 51.25 52.03 T:norx6461v2 52.52 52.53 52.88 T:norx6461v3 53.68 53.82 55.41 T:riverkeyakv2 55.30 55.45 57.40 T:lakekeyakv2 69.38 69.46 69.96 T:aes128n8t8clocv2 69.67 69.82 70.30 T:aes128n12t8clocv2 70.06 70.06 70.08 T:aegis128 71.18 71.32 72.07 T:aes128n12t8clocv3 73.30 73.45 74.11 T:aes128n8clocv1 74.05 74.13 76.31 T:aes128n12clocv1 81.79 81.83 82.02 T:acorn128v3 85.45 85.45 85.61 T:acorn128v2 87.92 87.92 88.56 T:aes128n12t8silcv2 88.31 88.38 89.03 T:aes128n8t8silcv2 88.42 88.45 88.93 T:norx6444v2 89.06 89.11 89.56 T:norx6444v3 89.51 89.60 90.19 T:aes128n12t8silcv3 91.84 92.10 93.11 T:aegis256 92.43 92.50 92.94 T:norx6444v1 93.26 93.31 94.39 T:aes128n8silcv1 93.45 93.62 94.91 T:aes128n12silcv1 94.26 94.29 94.40 T:aegis128l 95.66 95.66 96.34 T:aes128otrsv2 95.73 95.76 96.37 T:aes128otrsv1 96.58 96.69 103.25 T:aesjambuv1 97.56 97.83 99.05 T:aes128otrsv3 99.13 99.17 100.39 T:aes128otrpv1 99.19 99.24 100.62 T:aes128otrpv2 101.11 101.16 101.54 T:twine80n6t4clocv3 101.42 101.49 102.18 T:aes128otrpv3 101.63 101.69 102.04 T:ketjeminorv2 101.98 102.19 102.89 T:aes128otrcv3 104.05 104.23 108.65 T:seakeyakv2 118.29 118.33 119.16 T:twine80n6t4clocv2 124.57 124.67 129.22 T:aes256otrsv2 125.25 125.66 127.13 T:aes256otrsv1 126.55 126.91 127.91 T:aes256otrsv3 128.04 128.06 129.27 T:aes256otrpv2 128.75 129.11 130.45 T:aes256otrpv1 129.58 130.37 131.45 T:aes256otrpv3 133.09 133.24 135.84 T:deoxysi128v141 133.32 133.74 135.01 T:aes256otrcv3 142.89 142.94 143.29 T:tiaoxinv2 143.60 143.66 144.09 T:tiaoxinv1 145.75 145.86 146.69 aegis128l 156.05 157.66 162.16 T:ketjesrv1 158.92 158.95 160.02 T:deoxysii128v141 167.59 167.71 171.94 T:oceankeyakv2 169.06 170.32 172.74 T:aezv4 181.39 181.61 182.79 T:proest256otrv1 187.31 187.41 188.87 T:aezv5 187.79 189.38 193.86 T:ketjesrv2 202.46 205.07 213.23 T:riverkeyakv1 209.05 209.10 209.80 T:ketjejrv1 209.74 210.02 215.96 T:deoxysi256v141 221.91 222.02 223.01 T:present80n6t4silcv3 255.53 255.59 259.31 T:ketjemajorv2 349.82 354.00 360.57 T:proest128otrv1 372.43 372.70 378.75 T:aezv1 374.48 374.66 377.39 T:ketjejrv2 395.32 395.44 398.97 T:deoxysneq128128v1 396.26 396.57 405.84 T:deoxysneq128128v13 397.45 397.54 406.66 T:lunarkeyakv2 397.70 397.88 404.72 T:twine80n6clocv1 417.09 417.68 453.02 T:seakeyakv1 440.47 440.56 444.50 T:deoxysii256v141 501.52 502.06 508.62 T:aezv3 572.47 573.17 576.71 T:deoxyseq128128v13 585.62 585.89 590.66 T:deoxysneq256128v13 584.83 586.11 596.70 T:deoxysneq256128v1 637.15 637.52 659.77 T:deoxyseq128128v1 702.42 702.59 704.38 T:led80n6t4silcv3 751.87 751.96 757.78 T:oceankeyakv1 833.06 833.06 836.19 T:deoxyseq256128v13 943.30 943.33 953.02 T:deoxyseq256128v1 987.70 992.72 1012.08 T:aes256gcmv1 1621.11? 1627.11? 2120.39? T:aes128gcmv1 5908.27 6219.67 6230.20 T:acorn128 10184.45 10191.01 10198.04 T:led80n6t4silcv2 10193.21 10210.25 10226.55 T:led80n6silcv1 13397.83 13401.09 13421.47 T:present80n6t4silcv2 13407.03 13412.11 13459.77 T:present80n6silcv1 13939.01 13952.55 14025.40 aes256gcmv1