VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20251114

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.95 3.00 3.04 T:morus640128v2 2.98 3.00 3.02 T:morus640128v1 3.20 3.26 3.28 T:morus1280128v2 3.26 3.29 3.31 T:morus1280128v1 3.27 3.29 3.30 T:morus1280256v1 3.34 3.40 3.42 T:morus1280256v2 6.82 6.83 6.84 T:norx3241v2 6.82 6.83 6.85 T:norx3241v3 6.56 7.08 7.15 T:lunarkeyakv2 7.51 7.57 7.59 T:norx6441v3 7.53 7.57 7.57 T:norx6441v2 7.57 7.63 7.64 T:norx6444v2 7.62 7.64 7.66 T:norx6444v3 7.85 7.91 7.94 T:norx3241v1 3.93? 8.24? 9.93? T:seakeyakv2 8.23 8.26 8.28 T:norx6441v1 8.32 8.39 8.41 T:norx6444v1 8.37 8.56 8.80 T:oceankeyakv2 9.76 9.79 9.82 T:norx3261v2 9.77 9.79 9.81 T:norx3261v3 10.84 10.92 11.02 T:lakekeyakv1 11.04 11.10 11.11 T:norx6461v3 11.05 11.12 11.32 T:norx6461v2 11.34 11.45 11.50 T:norx3261v1 11.70 11.76 11.85 T:norx6461v1 11.81 11.90 11.98 T:lakekeyakv2 13.23? 13.26? 26.37? T:ascon96v1 12.31? 13.36? 13.74? T:ascon128av11 14.04 14.07 14.07 ascon128av12 14.18 14.24 14.36 T:tiaoxinv2 14.20 14.25 14.38 T:tiaoxinv1 17.72 17.75 17.78 T:acorn128v3 17.98 18.00 18.02 T:acorn128v2 18.26 18.35 18.37 T:aegis128l 20.61 20.62 20.63 T:ascon128v11 20.61 20.63 20.89 T:ascon128v1 20.98 21.00 21.01 ascon128v12 22.40 22.46 22.48 T:aegis128 24.23 24.27 24.28 T:aegis256 27.13 27.16 27.21 T:riverkeyakv2 28.56 28.56 28.63 T:ketjeminorv2 29.20 29.32 29.42 T:ketjemajorv2 29.36 29.53 29.73 T:deoxysi128v141 32.97 33.21 33.43 T:deoxysi256v141 43.00 43.06 43.10 aegis128l 44.99 45.26 45.58 T:seakeyakv1 46.13 46.15 46.26 T:aes128otrcv3 45.27? 50.08? 84.71? T:oceankeyakv1 50.47 50.51 50.54 T:aes128otrsv3 50.74 50.79 51.24 T:aes128otrsv1 50.74 50.82 50.93 T:aes128otrpv2 50.76 50.85 50.94 T:aes128otrpv1 50.83 50.88 50.89 T:aes128otrsv2 55.56 55.62 55.71 T:aes128otrpv3 57.72 58.09 58.62 T:deoxysii128v141 59.63 59.85 59.88 T:proest256otrv1 60.70 60.77 60.87 T:aes256otrcv3 65.01 65.08 65.91 T:aes256otrsv3 65.08 65.13 65.19 T:aes256otrpv3 65.36 65.36 65.49 T:aes256otrsv1 65.35 65.38 65.48 T:aes256otrpv2 65.33 65.41 65.48 T:aes256otrpv1 65.28 65.92 66.46 T:aes256otrsv2 65.71 66.25 66.79 T:deoxysii256v141 71.62 71.63 71.67 T:aesjambuv1 73.14 73.22 73.85 T:aes128n12clocv1 73.17 73.25 73.37 T:aes128n12t8clocv3 73.19 73.26 73.41 T:aes128n12t8clocv2 73.20 73.26 73.39 T:aes128n8t8clocv2 73.23 73.33 73.97 T:aes128n8clocv1 74.36 74.48 74.85 T:twine80n6t4clocv3 83.69 83.81 83.87 T:twine80n6t4clocv2 86.93 86.98 87.15 T:aes128n8silcv1 86.95 87.01 87.08 T:aes128n12silcv1 87.04 87.11 87.19 T:aes128n12t8silcv2 87.05 87.12 87.20 T:aes128n8t8silcv2 87.07 87.12 87.56 T:aes128n12t8silcv3 100.21 101.25 102.37 T:aes256gcmv1 108.10 108.96 112.66 T:ketjesrv1 112.83 113.58 118.07 T:riverkeyakv1 121.07 121.53 125.63 T:ketjesrv2 154.44 154.71 156.44 T:aezv4 170.00 170.02 170.24 T:proest128otrv1 173.75 173.86 174.50 T:present80n6t4silcv3 179.00 179.02 179.90 T:ketjejrv1 188.07 188.33 188.53 T:aezv5 303.04 303.18 304.29 T:deoxysneq128128v13 303.14 303.31 305.50 T:deoxysneq128128v1 308.98 309.05 309.61 T:ketjejrv2 441.99 442.18 444.00 T:deoxysneq256128v13 442.24 442.70 443.80 T:deoxysneq256128v1 458.61 459.25 460.95 T:aezv3 485.35 486.32 486.82 T:twine80n6clocv1 522.00 523.11 525.52 T:aezv1 588.54 588.71 589.32 T:led80n6t4silcv3 612.02 612.45 614.09 T:deoxyseq128128v1 612.65 614.47 615.32 T:deoxyseq128128v13 881.22 882.24 884.45 T:deoxyseq256128v1 889.31 890.03 890.48 T:deoxyseq256128v13 1482.81 1483.51 1485.49 T:aes128gcmv1 1487.53 1602.69 1625.69 T:acorn128 12077.86 12081.65 12093.04 T:led80n6silcv1 12079.99 12086.27 12091.91 T:led80n6t4silcv2 15884.62 15889.70 15902.56 T:present80n6silcv1 15891.32 15898.39 15945.58 T:present80n6t4silcv2 50728.80 50791.81 50919.48 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 2.91 2.94 2.96 T:morus640128v1 2.91 2.94 2.96 T:morus640128v2 3.09 3.16 3.19 T:morus1280128v2 3.11 3.16 3.19 T:morus1280128v1 3.28 3.35 3.39 T:morus1280256v2 3.30 3.35 3.39 T:morus1280256v1 6.83 6.83 6.84 T:norx3241v2 6.82 6.84 6.84 T:norx3241v3 6.62 6.90 7.31 T:lunarkeyakv2 7.68 7.68 7.69 T:norx6441v2 7.67 7.69 7.70 T:norx6441v3 7.74 7.76 7.77 T:norx6444v2 7.74 7.76 7.78 T:norx6444v3 3.28? 7.92? 8.21? T:seakeyakv2 8.00 8.08 8.09 T:norx3241v1 8.35 8.39 8.43 T:norx6441v1 8.38 8.45 8.50 T:norx6444v1 8.38 8.47 8.68 T:oceankeyakv2 9.78 9.79 9.81 T:norx3261v3 9.78 9.80 9.82 T:norx3261v2 10.84 10.98 10.99 T:lakekeyakv1 11.18 11.21 11.23 T:norx6461v3 11.20 11.21 11.25 T:norx6461v2 11.35 11.44 11.55 T:lakekeyakv2 11.54 11.62 11.67 T:norx3261v1 11.82 11.87 11.93 T:norx6461v1 13.43? 13.45? 26.88? T:ascon96v1 12.52 13.55 13.58 T:ascon128av11 13.92 13.94 13.97 ascon128av12 14.39 14.45 14.57 T:tiaoxinv1 14.39 14.50 14.61 T:tiaoxinv2 15.99 16.00 16.01 T:acorn128v3 17.49 17.50 17.50 T:acorn128v2 18.39 18.42 18.45 T:aegis128l 20.34 20.38 20.40 T:ascon128v1 20.34 20.38 20.40 T:ascon128v11 20.87 20.88 20.88 ascon128v12 22.50 22.54 22.59 T:aegis128 24.23 24.27 24.43 T:aegis256 26.53 26.68 26.82 T:ketjemajorv2 27.13 27.26 27.32 T:riverkeyakv2 30.31 30.32 30.39 T:ketjeminorv2 42.80 42.81 42.85 aegis128l 45.50 45.71 45.98 T:seakeyakv1 45.30? 45.78? 77.10? T:oceankeyakv1 46.30 46.33 46.49 T:aes128otrcv3 51.52 51.53 52.36 T:aes128otrsv1 51.50 51.55 51.67 T:aes128otrpv1 51.50 51.57 51.65 T:aes128otrpv2 51.58 51.63 52.53 T:aes128otrsv2 53.35 53.55 53.76 T:deoxysi128v141 52.48 53.60 54.43 T:aes128otrsv3 55.30 55.37 55.44 T:aes128otrpv3 57.85 58.11 58.49 T:deoxysii128v141 58.31 58.38 58.44 T:proest256otrv1 60.47 60.70 60.92 T:deoxysi256v141 60.89 60.95 61.06 T:aes256otrcv3 65.75 66.05 66.44 T:deoxysii256v141 66.09 66.10 66.21 T:aes256otrpv2 66.10 66.13 66.29 T:aes256otrsv1 66.08 66.14 66.22 T:aes256otrpv1 66.11 66.25 67.17 T:aes256otrsv2 67.04 67.08 67.18 T:aes256otrsv3 67.13 67.19 67.25 T:aes256otrpv3 71.48 71.51 71.55 T:aesjambuv1 74.60 74.63 75.35 T:twine80n6t4clocv3 77.76 77.81 78.20 T:aes128n12t8clocv3 77.78 77.83 77.94 T:aes128n12t8clocv2 77.78 77.87 78.01 T:aes128n12clocv1 77.82 77.92 78.01 T:aes128n8clocv1 77.78 77.94 78.79 T:aes128n8t8clocv2 86.34 86.38 86.43 T:twine80n6t4clocv2 87.44 87.49 87.56 T:aes128n8t8silcv2 87.46 87.49 87.52 T:aes128n12t8silcv3 87.47 87.53 87.65 T:aes128n8silcv1 87.49 87.56 87.70 T:aes128n12silcv1 87.66 87.72 87.80 T:aes128n12t8silcv2 100.86 102.00 103.60 T:aes256gcmv1 109.34 109.81 113.92 T:ketjesrv1 112.19 112.88 117.44 T:riverkeyakv1 114.85 116.86 119.41 T:ketjesrv2 149.74 151.23 151.64 T:aezv4 173.74 173.85 175.43 T:present80n6t4silcv3 175.00 175.08 175.87 T:ketjejrv1 174.00 177.55 178.64 T:proest128otrv1 183.01 183.21 188.91 T:aezv5 289.79 290.57 291.41 T:ketjejrv2 409.97 410.11 411.73 T:deoxysneq128128v13 409.81 410.84 411.75 T:deoxysneq128128v1 452.60 454.79 457.36 T:aezv3 481.46 482.27 482.76 T:twine80n6clocv1 524.16 525.03 529.67 T:aezv1 588.27 588.45 589.10 T:led80n6t4silcv3 612.71 612.86 615.83 T:deoxysneq256128v13 612.52 613.38 613.66 T:deoxyseq128128v13 612.60 614.55 616.65 T:deoxysneq256128v1 815.39 816.76 818.71 T:deoxyseq128128v1 889.51 890.29 891.12 T:deoxyseq256128v13 1222.04 1223.25 1223.64 T:deoxyseq256128v1 1484.00 1484.45 1485.15 T:aes128gcmv1 1475.12 1598.15 1631.40 T:acorn128 12075.19 12080.11 12093.41 T:led80n6silcv1 12074.89 12083.16 12099.22 T:led80n6t4silcv2 15875.50 15891.20 15906.80 T:present80n6t4silcv2 15882.40 15893.52 15901.33 T:present80n6silcv1 50737.67 50806.27 50970.23 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 2.94 2.94 2.95 T:morus640128v1 2.94 2.94 2.95 T:morus640128v2 3.15 3.16 3.18 T:morus1280128v2 3.16 3.16 3.17 T:morus1280128v1 3.34 3.35 3.38 T:morus1280256v2 3.35 3.35 3.37 T:morus1280256v1 6.83 6.83 6.85 T:norx3241v3 6.83 6.83 6.84 T:norx3241v2 6.87 7.24 7.34 T:lunarkeyakv2 7.80 7.81 7.83 T:norx6441v3 7.80 7.81 7.84 T:norx6441v2 7.88 7.88 7.90 T:norx6444v2 7.88 7.89 7.90 T:norx6444v3 7.95 8.00 8.05 T:seakeyakv2 8.08 8.08 8.08 T:norx3241v1 8.21 8.48 8.69 T:oceankeyakv2 8.50 8.51 8.53 T:norx6441v1 8.55 8.57 8.59 T:norx6444v1 9.78 9.79 9.80 T:norx3261v3 9.79 9.80 9.81 T:norx3261v2 10.19 11.00 11.08 T:lakekeyakv1 11.32 11.33 11.35 T:norx6461v2 11.32 11.33 11.35 T:norx6461v3 11.56 11.58 11.60 T:lakekeyakv2 11.62 11.62 11.62 T:norx3261v1 11.97 11.99 12.01 T:norx6461v1 13.42? 13.45? 27.04? T:ascon96v1 12.39 13.55 13.58 T:ascon128av11 13.94 13.94 13.95 ascon128av12 14.42 14.44 14.49 T:tiaoxinv1 14.47 14.50 14.53 T:tiaoxinv2 15.99 16.00 16.01 T:acorn128v3 17.50 17.50 17.60 T:acorn128v2 18.41 18.43 18.52 T:aegis128l 20.37 20.38 20.38 T:ascon128v1 20.37 20.38 20.38 T:ascon128v11 20.88 20.88 20.91 ascon128v12 22.50 22.51 22.55 T:aegis128 24.37 24.38 24.41 T:aegis256 26.75 26.84 26.93 T:ketjemajorv2 27.18 27.24 27.29 T:riverkeyakv2 30.44 30.45 30.52 T:ketjeminorv2 42.89 42.93 42.99 aegis128l 45.64 45.83 46.07 T:seakeyakv1 45.42 45.94 48.73 T:oceankeyakv1 46.31 46.33 46.39 T:aes128otrcv3 51.65 51.66 51.77 T:aes128otrsv1 51.64 51.68 51.74 T:aes128otrpv1 51.65 51.68 51.74 T:aes128otrpv2 51.73 51.74 51.78 T:aes128otrsv2 52.57 52.73 54.53 T:aes128otrsv3 53.61 53.69 53.82 T:deoxysi128v141 55.45 55.49 55.54 T:aes128otrpv3 58.20 58.30 58.57 T:deoxysii128v141 58.35 58.39 58.48 T:proest256otrv1 60.78 60.86 60.97 T:deoxysi256v141 60.89 61.35 62.00 T:aes256otrcv3 66.22 66.23 66.34 T:aes256otrpv2 66.20 66.24 67.18 T:aes256otrsv1 66.23 66.28 66.33 T:aes256otrpv1 66.22 66.39 67.34 T:aes256otrsv2 66.35 66.56 66.81 T:deoxysii256v141 67.15 67.21 67.26 T:aes256otrsv3 67.28 67.32 67.45 T:aes256otrpv3 71.50 71.52 73.21 T:aesjambuv1 74.60 74.63 74.71 T:twine80n6t4clocv3 77.78 77.81 77.94 T:aes128n8t8clocv2 77.78 77.82 77.93 T:aes128n12t8clocv2 77.79 77.83 77.95 T:aes128n12t8clocv3 77.85 77.88 78.61 T:aes128n12clocv1 77.88 77.99 79.22 T:aes128n8clocv1 86.36 86.38 86.41 T:twine80n6t4clocv2 87.45 87.49 87.56 T:aes128n8t8silcv2 87.47 87.50 87.99 T:aes128n12t8silcv3 87.52 87.53 87.65 T:aes128n8silcv1 87.52 87.54 87.67 T:aes128n12silcv1 87.69 87.73 87.76 T:aes128n12t8silcv2 101.25 101.85 102.74 T:aes256gcmv1 109.47 110.82 114.04 T:ketjesrv1 112.30 113.00 117.55 T:riverkeyakv1 114.97 115.53 119.53 T:ketjesrv2 149.55 151.10 152.52 T:aezv4 173.72 173.77 173.85 T:present80n6t4silcv3 175.10 175.14 175.37 T:ketjejrv1 169.44 177.55 178.38 T:proest128otrv1 182.94 182.99 184.59 T:aezv5 290.59 290.72 291.57 T:ketjejrv2 409.83 409.92 412.67 T:deoxysneq128128v1 410.05 411.31 413.38 T:deoxysneq128128v13 453.19 453.71 455.50 T:aezv3 481.52 482.38 482.93 T:twine80n6clocv1 524.04 525.00 526.76 T:aezv1 588.28 588.68 589.16 T:led80n6t4silcv3 612.70 612.95 615.12 T:deoxysneq256128v13 612.63 613.53 613.84 T:deoxyseq128128v13 612.57 614.88 618.87 T:deoxysneq256128v1 816.86 817.76 819.34 T:deoxyseq128128v1 889.49 890.42 893.11 T:deoxyseq256128v13 1222.09 1223.51 1224.47 T:deoxyseq256128v1 1427.04 1427.31 1427.89 T:aes128gcmv1 1456.68 1459.18 1460.23 aes256gcmv1 1476.49 1597.39 1622.41 T:acorn128 12076.48 12082.54 12097.24 T:led80n6t4silcv2 12076.20 12084.70 12094.08 T:led80n6silcv1 15880.46 15883.84 15899.03 T:present80n6t4silcv2 15891.00 15898.71 15918.71 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.71 2.72 2.75 T:morus640128v2 2.71 2.72 2.74 T:morus640128v1 2.85 2.90 2.93 T:morus1280128v2 2.91 2.93 2.97 T:morus1280256v1 2.94 2.98 3.01 T:morus1280256v2 2.94 2.98 3.00 T:morus1280128v1 6.57 6.57 6.58 T:norx3241v3 6.57 6.58 6.58 T:norx3241v2 6.86 6.89 6.98 T:seakeyakv2 7.14 7.32 7.42 T:oceankeyakv2 6.26? 7.41? 7.47? T:norx6441v2 7.41 7.44 7.52 T:norx6441v3 7.46 7.48 7.49 T:norx6444v3 7.46 7.48 7.51 T:norx6444v2 7.65 7.69 7.74 T:norx3241v1 8.12 8.13 8.15 T:norx6441v1 8.17 8.20 8.23 T:norx6444v1 8.84 8.97 9.13 T:lunarkeyakv2 9.53 9.54 9.57 T:norx3261v3 9.53 9.54 9.54 T:norx3261v2 10.57 10.64 10.69 T:lakekeyakv2 10.92 10.97 11.00 T:norx6461v2 10.92 10.97 11.13 T:lakekeyakv1 10.95 10.97 11.07 T:norx6461v3 11.19 11.24 11.32 T:norx3261v1 11.60 11.61 11.65 T:norx6461v1 13.36 13.38 13.41 T:ascon96v1 13.20 13.41 13.44 T:ascon128av11 13.73 13.76 13.80 ascon128av12 13.77 13.80 13.83 T:tiaoxinv2 13.77 13.80 13.85 T:tiaoxinv1 16.86 16.88 16.93 T:acorn128v3 17.14 17.25 17.30 T:acorn128v2 18.13 18.18 18.23 T:aegis128l 19.19 19.21 19.27 T:riverkeyakv2 20.55 20.58 20.61 T:ascon128v11 20.55 20.58 20.62 T:ascon128v1 20.67 20.69 20.72 ascon128v12 22.10 22.16 22.20 T:aegis128 23.60 23.64 23.66 T:aegis256 23.62 23.65 23.67 T:ketjemajorv2 26.90 26.91 27.07 T:ketjeminorv2 29.24 29.45 29.62 T:deoxysi128v141 33.04 33.28 34.36 T:deoxysi256v141 37.15 37.19 37.24 aegis128l 44.08 44.35 45.16 T:deoxysii128v141 44.60 44.75 44.90 T:seakeyakv1 46.21 46.26 46.35 T:aes128otrcv3 44.54 46.70 46.88 T:oceankeyakv1 46.65 46.71 46.78 T:aes128otrsv1 46.63 46.74 47.20 T:aes128otrsv3 46.81 46.84 47.11 T:aes128otrsv2 50.21 50.45 50.76 T:deoxysii256v141 52.97 53.06 53.11 T:aes128otrpv1 52.99 53.07 53.29 T:aes128otrpv2 53.18 53.22 53.40 T:aes128otrpv3 54.60 54.64 54.73 T:aes128n12clocv1 54.62 54.67 54.77 T:aes128n8clocv1 54.66 54.69 54.78 T:aes128n8t8clocv2 54.67 54.69 55.04 T:aes128n12t8clocv3 54.66 54.70 54.86 T:aes128n12t8clocv2 56.72 57.20 57.95 T:aes256gcmv1 59.02 59.12 59.22 T:proest256otrv1 58.94 60.83 61.27 T:aes256otrcv3 60.80 60.86 60.93 T:aes256otrsv3 61.00 61.06 61.48 T:aes256otrsv1 61.00 61.10 61.67 T:aes256otrsv2 64.87 64.93 64.98 T:aes128n8silcv1 64.89 64.94 65.16 T:aes128n12silcv1 64.96 64.99 65.08 T:aes128n12t8silcv2 64.96 64.99 65.17 T:aes128n8t8silcv2 64.96 65.00 65.32 T:aes128n12t8silcv3 67.30 67.35 68.34 T:aes256otrpv1 67.33 67.41 68.37 T:aes256otrpv2 67.53 67.65 68.55 T:aes256otrpv3 71.31 71.33 71.35 T:aesjambuv1 74.24 74.25 74.32 T:twine80n6t4clocv3 87.29 87.31 87.37 T:twine80n6t4clocv2 96.68 97.48 101.08 T:ketjesrv1 106.16 106.93 111.11 T:riverkeyakv1 108.05 108.75 112.45 T:ketjesrv2 138.70 138.87 140.05 T:aezv4 148.33 148.38 149.26 T:aezv5 157.24 157.29 157.68 T:ketjejrv1 169.77 169.99 170.56 T:proest128otrv1 173.16 173.23 173.61 T:present80n6t4silcv3 286.51 286.76 287.15 T:ketjejrv2 302.68 302.82 303.32 T:deoxysneq128128v13 303.01 303.41 303.69 T:deoxysneq128128v1 345.07 345.60 345.92 T:aezv1 351.38 351.86 354.99 T:aezv3 364.15 364.38 365.44 T:twine80n6clocv1 442.30 442.76 443.04 T:deoxysneq256128v13 442.33 443.69 444.32 T:deoxysneq256128v1 457.07 457.35 457.71 T:deoxyseq128128v13 457.65 458.01 458.95 T:deoxyseq128128v1 587.81 588.12 588.32 T:led80n6t4silcv3 661.18 661.37 661.73 T:deoxyseq256128v1 665.82 666.28 667.50 T:deoxyseq256128v13 1455.15 1456.08 1457.71 T:aes128gcmv1 1467.26 1575.83 1588.17 T:acorn128 9058.39 9063.76 9077.14 T:led80n6t4silcv2 9060.43 9064.76 9072.16 T:led80n6silcv1 11912.77 11915.45 11925.64 T:present80n6t4silcv2 11917.34 11925.97 11951.86 T:present80n6silcv1 26101.46 26166.18 26198.13 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.59 2.63 2.67 T:morus640128v1 2.59 2.63 2.68 T:morus640128v2 2.86 2.92 2.99 T:morus1280128v2 2.86 2.93 3.01 T:morus1280128v1 2.95 3.01 3.10 T:morus1280256v2 2.98 3.01 3.06 T:morus1280256v1 6.56 6.57 6.62 T:norx3241v3 6.55 6.58 6.66 T:norx3241v2 6.71 6.79 6.96 T:seakeyakv2 7.05 7.11 7.26 T:oceankeyakv2 6.60? 7.47? 7.54? T:norx6441v3 6.25? 7.48? 7.55? T:norx6441v2 7.52 7.54 7.59 T:norx6444v2 7.50 7.54 7.62 T:norx6444v3 7.73 7.78 7.87 T:norx3241v1 8.16 8.19 8.25 T:norx6441v1 8.18 8.23 8.29 T:norx6444v1 8.93 9.25 9.40 T:lunarkeyakv2 9.52 9.53 9.61 T:norx3261v3 9.52 9.53 9.63 T:norx3261v2 10.20 10.27 10.39 T:lakekeyakv2 10.89 10.93 11.10 T:lakekeyakv1 11.00 11.02 11.09 T:norx6461v3 11.01 11.03 11.08 T:norx6461v2 11.23 11.33 11.43 T:norx3261v1 11.64 11.67 11.73 T:norx6461v1 13.37 13.42 13.47 T:ascon96v1 13.51 13.53 13.57 T:ascon128av11 13.66 13.69 13.74 ascon128av12 13.87 13.94 14.27 T:tiaoxinv1 13.87 13.95 14.06 T:tiaoxinv2 15.96 16.00 16.06 T:acorn128v3 17.11 17.12 17.22 T:acorn128v2 18.04 18.22 18.28 T:aegis128l 19.40 19.50 19.59 T:riverkeyakv2 20.16 20.19 20.26 T:ascon128v11 20.16 20.19 20.26 T:ascon128v1 20.54 20.56 20.61 ascon128v12 22.13 22.19 22.24 T:aegis128 22.23 22.33 22.42 T:ketjemajorv2 23.63 23.66 23.71 T:aegis256 27.76 27.78 27.85 T:ketjeminorv2 37.05 37.08 37.14 aegis128l 41.18 41.36 41.63 T:deoxysi128v141 43.21 44.44 44.68 T:deoxysii128v141 44.63 44.76 44.91 T:oceankeyakv1 44.86 44.98 45.29 T:seakeyakv1 46.32 46.38 46.45 T:aes128otrcv3 46.97 47.05 47.37 T:deoxysi256v141 47.07 47.09 47.16 T:aes128otrsv1 47.13 47.23 47.24 T:aes128otrsv2 47.64 47.76 48.63 T:aes128otrsv3 50.26 50.54 50.91 T:deoxysii256v141 53.04 53.09 53.18 T:aes128otrpv3 53.36 53.42 53.78 T:aes128otrpv1 53.37 53.45 53.53 T:aes128otrpv2 56.92 56.97 57.06 T:aes128n12t8clocv3 56.94 56.97 57.07 T:aes128n12t8clocv2 56.93 56.98 57.07 T:aes128n8t8clocv2 56.96 56.98 57.38 T:aes128n12clocv1 56.96 56.99 57.78 T:aes128n8clocv1 56.72 57.63 58.48 T:aes256gcmv1 58.32 58.41 58.98 T:proest256otrv1 58.66 60.95 61.03 T:aes256otrcv3 61.38 61.44 61.54 T:aes256otrsv1 61.38 61.48 63.61 T:aes256otrsv2 61.82 61.90 62.01 T:aes256otrsv3 65.14 65.19 65.29 T:aes128n8t8silcv2 65.15 65.19 65.80 T:aes128n12t8silcv3 65.17 65.23 65.32 T:aes128n12silcv1 65.17 65.30 66.03 T:aes128n8silcv1 65.26 65.30 65.37 T:aes128n12t8silcv2 67.65 67.73 68.13 T:aes256otrpv1 67.68 67.74 67.84 T:aes256otrpv2 68.63 69.28 69.66 T:aes256otrpv3 71.21 71.26 71.33 T:aesjambuv1 74.30 74.32 74.44 T:twine80n6t4clocv3 90.40 90.44 90.84 T:twine80n6t4clocv2 97.30 97.68 101.70 T:ketjesrv1 104.93 105.67 109.33 T:ketjesrv2 105.88 106.28 110.83 T:riverkeyakv1 136.69 137.69 141.04 T:aezv4 145.80 145.92 149.25 T:aezv5 155.21 155.26 155.89 T:ketjejrv1 173.13 173.24 173.51 T:present80n6t4silcv3 171.09 173.66 174.32 T:proest128otrv1 277.21 277.41 278.39 T:ketjejrv2 346.16 346.78 347.27 T:aezv1 348.15 349.15 350.34 T:aezv3 355.29 356.26 356.74 T:deoxysneq128128v1 356.07 356.89 359.36 T:deoxysneq128128v13 362.03 362.33 363.64 T:twine80n6clocv1 456.94 457.46 457.89 T:deoxyseq128128v13 528.08 528.53 529.35 T:deoxysneq256128v13 528.05 529.22 531.55 T:deoxysneq256128v1 559.27 559.96 562.84 T:deoxyseq128128v1 587.76 587.96 588.39 T:led80n6t4silcv3 665.89 666.15 667.81 T:deoxyseq256128v13 831.98 832.20 835.62 T:deoxyseq256128v1 1455.36 1456.04 1456.48 T:aes128gcmv1 1470.44 1573.26 1587.88 T:acorn128 9056.00 9059.23 9078.00 T:led80n6t4silcv2 9055.98 9062.17 9097.08 T:led80n6silcv1 11913.54 11921.68 11950.42 T:present80n6silcv1 11912.69 11926.57 11944.13 T:present80n6t4silcv2 26097.56 26158.18 26203.61 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 2.63 2.63 2.63 T:morus640128v1 2.63 2.63 2.63 T:morus640128v2 2.91 2.91 2.92 T:morus1280128v2 2.91 2.92 2.92 T:morus1280128v1 3.00 3.01 3.01 T:morus1280256v2 3.00 3.01 3.01 T:morus1280256v1 6.57 6.57 6.58 T:norx3241v2 6.57 6.58 6.58 T:norx3241v3 6.79 6.82 6.93 T:seakeyakv2 7.06 7.09 7.21 T:oceankeyakv2 6.32? 7.56? 7.59? T:norx6441v2 6.69? 7.57? 7.59? T:norx6441v3 7.60 7.60 7.63 T:norx6444v3 7.60 7.61 7.64 T:norx6444v2 7.78 7.78 7.78 T:norx3241v1 8.25 8.28 8.44 T:norx6441v1 8.25 8.29 8.33 T:norx6444v1 9.10 9.20 9.35 T:lunarkeyakv2 9.53 9.53 9.56 T:norx3261v3 9.53 9.56 9.67 T:norx3261v2 10.30 10.32 10.42 T:lakekeyakv2 10.92 11.07 11.16 T:lakekeyakv1 11.08 11.09 11.12 T:norx6461v3 11.08 11.09 11.12 T:norx6461v2 11.32 11.33 11.34 T:norx3261v1 11.72 11.74 11.76 T:norx6461v1 13.40 13.42 13.44 T:ascon96v1 13.52 13.55 13.57 T:ascon128av11 13.69 13.69 13.71 ascon128av12 13.92 13.94 13.96 T:tiaoxinv1 13.92 13.96 14.00 T:tiaoxinv2 15.99 16.00 16.02 T:acorn128v3 17.12 17.12 17.15 T:acorn128v2 18.20 18.23 18.25 T:aegis128l 19.44 19.50 19.55 T:riverkeyakv2 20.18 20.19 20.20 T:ascon128v11 20.18 20.19 20.47 T:ascon128v1 20.56 20.56 20.58 ascon128v12 22.16 22.19 22.20 T:aegis128 22.35 22.41 22.47 T:ketjemajorv2 23.71 23.72 23.78 T:aegis256 27.84 27.85 27.91 T:ketjeminorv2 37.12 37.14 37.18 aegis128l 41.48 41.57 42.52 T:deoxysi128v141 44.54 44.65 45.52 T:deoxysii128v141 44.71 44.86 45.16 T:oceankeyakv1 44.94 45.03 45.16 T:seakeyakv1 46.35 46.37 46.41 T:aes128otrcv3 47.13 47.15 47.36 T:aes128otrsv1 47.26 47.28 47.37 T:aes128otrsv2 47.31 47.43 48.29 T:deoxysi256v141 47.71 47.82 48.67 T:aes128otrsv3 50.36 50.56 51.09 T:deoxysii256v141 53.11 53.17 53.68 T:aes128otrpv3 53.45 53.48 53.51 T:aes128otrpv1 53.44 53.50 53.88 T:aes128otrpv2 46.86? 56.94? 57.99? T:aes256gcmv1 56.96 56.97 57.06 T:aes128n12t8clocv2 56.74 56.97 57.06 T:aes128n12t8clocv3 56.96 56.98 57.01 T:aes128n12clocv1 56.96 56.99 57.04 T:aes128n8clocv1 56.95 57.00 57.13 T:aes128n8t8clocv2 58.37 58.41 58.44 T:proest256otrv1 58.47 60.97 61.87 T:aes256otrcv3 61.47 61.48 61.85 T:aes256otrsv1 61.46 61.55 61.68 T:aes256otrsv2 61.93 61.96 62.03 T:aes256otrsv3 65.17 65.19 65.22 T:aes128n12t8silcv3 65.16 65.19 65.25 T:aes128n8t8silcv2 65.19 65.21 65.26 T:aes128n8silcv1 65.21 65.23 65.30 T:aes128n12silcv1 65.27 65.31 65.36 T:aes128n12t8silcv2 67.76 67.78 67.90 T:aes256otrpv1 67.78 67.80 68.31 T:aes256otrpv2 68.73 68.79 69.68 T:aes256otrpv3 71.25 71.26 71.43 T:aesjambuv1 74.30 74.33 74.53 T:twine80n6t4clocv3 90.39 90.45 90.81 T:twine80n6t4clocv2 97.36 98.93 101.80 T:ketjesrv1 105.01 105.81 109.39 T:ketjesrv2 105.94 106.61 110.89 T:riverkeyakv1 137.36 137.46 137.79 T:aezv4 145.75 145.79 146.85 T:aezv5 155.29 155.38 155.82 T:ketjejrv1 173.14 173.24 173.57 T:present80n6t4silcv3 170.73 173.65 174.13 T:proest128otrv1 277.27 277.59 278.61 T:ketjejrv2 346.15 346.83 347.44 T:aezv1 348.26 349.31 351.81 T:aezv3 355.87 356.74 358.31 T:deoxysneq128128v1 356.18 356.87 357.17 T:deoxysneq128128v13 362.06 362.36 362.58 T:twine80n6clocv1 457.06 457.68 459.86 T:deoxyseq128128v13 528.30 528.61 529.58 T:deoxysneq256128v13 528.23 529.40 532.63 T:deoxysneq256128v1 559.94 560.36 561.46 T:deoxyseq128128v1 587.47 587.96 588.68 T:led80n6t4silcv3 666.01 666.16 666.60 T:deoxyseq256128v13 832.15 833.79 836.55 T:deoxyseq256128v1 1427.30 1427.78 1431.63 T:aes128gcmv1 1458.11 1459.87 1464.10 aes256gcmv1 1461.79 1578.80 1598.08 T:acorn128 9056.32 9059.28 9068.21 T:led80n6t4silcv2 9058.37 9063.65 9074.42 T:led80n6silcv1 11913.72 11919.75 11929.79 T:present80n6silcv1 11912.21 11921.18 11933.43 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 2.40 2.44 2.46 T:morus640128v2 2.42 2.44 2.45 T:morus640128v1 2.48 2.53 2.55 T:morus1280256v2 2.48 2.54 2.55 T:morus1280128v2 2.54 2.57 2.57 T:morus1280256v1 2.62 2.66 2.67 T:morus1280128v1 5.54 5.59 5.66 T:oceankeyakv2 5.53? 5.70? 12.80? T:lunarkeyakv2 6.28 6.31 6.32 T:norx3241v3 6.29 6.31 6.34 T:norx3241v2 6.36 6.40 6.44 T:seakeyakv2 6.98 7.30 7.32 T:norx6441v2 7.29 7.31 7.33 T:norx6441v3 7.27? 7.33? 14.95? T:norx6444v2 7.29 7.34 7.71 T:norx6444v3 7.43 7.48 7.50 T:norx3241v1 7.99 8.01 8.12 T:norx6444v1 8.01 8.02 8.02 T:norx6441v1 8.62 8.67 8.72 T:lakekeyakv2 9.24 9.27 9.31 T:norx3261v3 9.25 9.28 9.31 T:norx3261v2 9.70 9.85 9.91 T:lakekeyakv1 10.79 10.83 10.86 T:norx6461v2 10.81 10.83 10.86 T:norx6461v3 10.96 11.02 11.07 T:norx3261v1 11.48 11.49 11.49 T:norx6461v1 12.04? 13.33? 14.55? T:aes256gcmv1 13.27 13.36 13.40 T:tiaoxinv2 13.34 13.39 13.43 T:tiaoxinv1 13.41 13.44 13.45 ascon128av12 13.41 13.44 13.46 T:ascon128av11 13.50 13.51 13.51 T:ascon96v1 15.96 16.01 16.04 T:acorn128v3 16.49 16.50 16.51 T:acorn128v2 17.11 17.19 17.21 T:riverkeyakv2 17.88? 18.03? 20.39? T:ketjemajorv2 17.95 18.04 18.05 T:aegis128l 20.37 20.38 20.38 ascon128v12 20.48 20.50 20.51 T:ascon128v11 20.49 20.50 20.51 T:ascon128v1 21.77 21.84 21.85 T:aegis128 22.98 23.00 23.05 T:aegis256 25.23 25.25 25.27 T:ketjeminorv2 28.16 28.46 28.55 T:deoxysii128v141 28.27 28.51 28.65 T:deoxysi128v141 31.32 31.34 31.43 aegis128l 31.76 32.05 32.43 T:deoxysi256v141 31.77 32.06 32.26 T:deoxysii256v141 36.03 36.06 36.10 T:aes128n12clocv1 36.02? 36.12? 47.89? T:aes128n8clocv1 36.10 36.12 36.15 T:aes128n8t8clocv2 36.11 36.12 36.14 T:aes128n12t8clocv2 36.08 36.13 36.17 T:aes128n12t8clocv3 42.61 42.63 42.69 T:aes128otrsv1 42.77 42.80 42.87 T:aes128otrsv3 42.77 42.81 42.87 T:aes128otrsv2 42.88 42.90 42.99 T:aes128n8t8silcv2 42.87 42.90 42.97 T:aes128n12t8silcv2 42.89 42.90 42.97 T:aes128n12t8silcv3 42.88 42.91 43.02 T:aes128n12silcv1 42.86 42.91 45.54 T:aes128n8silcv1 42.72 43.24 45.46 T:oceankeyakv1 43.94 44.17 44.49 T:seakeyakv1 46.31 46.33 46.49 T:aes128otrcv3 50.70 50.78 50.86 T:aes128otrpv3 55.23 55.30 55.33 T:aes128otrpv2 55.26 55.32 55.72 T:aes128otrpv1 56.58 56.65 56.75 T:aes256otrsv3 56.66 56.70 56.79 T:aes256otrsv1 56.68 56.75 57.73 T:aes256otrsv2 58.43 58.46 58.59 T:proest256otrv1 60.83 60.90 61.72 T:aes256otrcv3 69.25 69.30 69.39 T:aes256otrpv1 69.30 69.31 69.43 T:aes256otrpv2 70.12 70.14 70.37 T:aes256otrpv3 71.00 71.04 71.78 T:aesjambuv1 73.96 74.01 74.35 T:twine80n6t4clocv3 85.10 85.58 89.65 T:ketjesrv1 90.84 90.88 90.97 T:twine80n6t4clocv2 94.85 95.38 99.41 T:ketjesrv2 99.36 99.89 104.27 T:riverkeyakv1 108.43 108.48 108.57 T:aezv5 122.80 122.93 122.96 T:aezv4 135.50 135.51 135.70 T:ketjejrv1 167.06 167.19 169.22 T:aezv1 169.66 170.19 170.91 T:proest128otrv1 172.61 172.70 173.25 T:present80n6t4silcv3 235.30 242.32 243.43 T:twine80n6clocv1 242.23 242.67 243.95 T:aezv3 263.99 264.01 264.25 T:ketjejrv2 301.15 302.11 302.25 T:deoxyseq128128v13 302.29 302.33 303.21 T:deoxysneq128128v13 303.05 303.11 304.18 T:deoxyseq128128v1 302.84 303.77 303.90 T:deoxysneq128128v1 438.69 440.62 444.00 T:deoxyseq256128v1 442.22 442.43 443.52 T:deoxysneq256128v1 442.40 442.56 443.47 T:deoxysneq256128v13 441.82? 443.91? 559.53? T:deoxyseq256128v13 586.80 587.12 587.65 T:led80n6t4silcv3 1426.10? 1428.25? 2011.34? T:aes128gcmv1 1458.18 1459.38 1465.76 aes256gcmv1 1428.16 1550.09 1574.55 T:acorn128 6033.49 6035.56 6040.86 T:led80n6silcv1 6035.79 6040.01 6051.98 T:led80n6t4silcv2 7939.71 7945.09 7953.84 T:present80n6t4silcv2 7944.17 7946.69 7952.40 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 2.27 2.32 2.34 T:morus640128v2 2.28 2.32 2.33 T:morus640128v1 2.58 2.66 2.69 T:morus1280256v2 2.57 2.66 2.71 T:morus1280256v1 2.61 2.66 2.68 T:morus1280128v2 2.63 2.66 2.67 T:morus1280128v1 5.60 5.66 5.71 T:oceankeyakv2 5.51 5.66 5.91 T:lunarkeyakv2 6.29 6.31 6.33 T:norx3241v3 6.30 6.32 6.32 T:norx3241v2 2.76? 6.37? 6.50? T:seakeyakv2 7.28 7.31 7.33 T:norx6444v3 7.29 7.31 7.34 T:norx6441v2 7.29 7.31 7.33 T:norx6441v3 7.28? 7.32? 13.99? T:norx6444v2 7.44 7.48 7.50 T:norx3241v1 7.99 8.00 8.02 T:norx6441v1 7.96 8.00 8.04 T:norx6444v1 8.63 8.66 8.68 T:lakekeyakv2 9.26 9.27 9.27 T:norx3261v3 9.26 9.27 9.29 T:norx3261v2 9.80 9.85 9.86 T:lakekeyakv1 10.78 10.82 10.86 T:norx6461v2 10.79 10.83 10.86 T:norx6461v3 10.98 11.02 11.05 T:norx3261v1 11.46 11.49 11.50 T:norx6461v1 13.35 13.38 13.39 T:ascon96v1 13.41 13.41 13.43 T:tiaoxinv2 13.40 13.43 13.51 T:tiaoxinv1 13.39 13.44 13.47 ascon128av12 13.47 13.51 13.54 T:ascon128av11 12.28? 13.61? 22.41? T:aes256gcmv1 15.99 16.00 16.01 T:acorn128v3 16.75 16.75 16.75 T:acorn128v2 17.07 17.19 17.23 T:riverkeyakv2 17.87 17.97 18.06 T:ketjemajorv2 17.96 18.02 18.04 T:aegis128l 19.97 20.00 20.02 T:ascon128v1 19.97 20.00 20.02 T:ascon128v11 20.24 20.25 20.25 ascon128v12 21.76 21.84 21.85 T:aegis128 22.93 23.06 23.07 T:aegis256 25.24 25.25 25.26 T:ketjeminorv2 28.31 28.46 28.54 T:deoxysi128v141 28.33 28.49 28.61 T:deoxysii128v141 31.33 31.34 31.42 aegis128l 31.99 32.08 32.25 T:deoxysii256v141 31.91 32.11 32.35 T:deoxysi256v141 36.03 36.07 36.71 T:aes128n12clocv1 36.02? 36.09? 47.07? T:aes128n8clocv1 36.09 36.12 36.16 T:aes128n12t8clocv3 36.10 36.13 36.15 T:aes128n8t8clocv2 36.12 36.13 36.16 T:aes128n12t8clocv2 42.61 42.63 42.71 T:aes128otrsv1 42.81 42.81 43.47 T:aes128otrsv2 42.86 42.88 42.95 T:aes128n12t8silcv2 42.79? 42.88? 55.20? T:aes128otrsv3 42.88 42.89 42.97 T:aes128n12t8silcv3 42.83 42.90 42.98 T:aes128n8silcv1 42.85 42.91 43.64 T:aes128n12silcv1 42.88 42.91 43.03 T:aes128n8t8silcv2 43.84 44.02 44.20 T:oceankeyakv1 44.00 44.31 45.97 T:seakeyakv1 46.34 46.37 46.47 T:aes128otrcv3 50.69 50.77 50.83 T:aes128otrpv3 55.25 55.30 55.33 T:aes128otrpv1 55.21 55.30 55.37 T:aes128otrpv2 56.58 56.66 56.75 T:aes256otrsv3 56.67 56.70 56.83 T:aes256otrsv1 56.71 56.77 57.72 T:aes256otrsv2 58.36 58.45 58.50 T:proest256otrv1 60.88 61.01 61.07 T:aes256otrcv3 69.28 69.31 69.39 T:aes256otrpv2 69.26 69.35 70.34 T:aes256otrpv1 70.11 70.13 70.53 T:aes256otrpv3 70.97 71.01 71.05 T:aesjambuv1 73.99 74.00 74.04 T:twine80n6t4clocv3 85.10 85.54 89.65 T:ketjesrv1 94.47 94.49 94.55 T:twine80n6t4clocv2 94.85 95.27 99.41 T:ketjesrv2 99.33 99.83 104.25 T:riverkeyakv1 108.59 108.60 108.77 T:aezv5 122.88 123.75 124.31 T:aezv4 135.48 135.51 135.70 T:ketjejrv1 167.10 167.17 168.84 T:aezv1 169.62 169.89 170.21 T:proest128otrv1 172.61 172.63 173.02 T:present80n6t4silcv3 235.39 242.21 243.15 T:twine80n6clocv1 242.32 242.35 242.52 T:aezv3 263.97 264.03 264.38 T:ketjejrv2 300.97 301.07 301.99 T:deoxyseq128128v13 302.16 302.19 302.32 T:deoxysneq128128v13 302.88 302.94 303.84 T:deoxysneq128128v1 302.86 303.09 304.28 T:deoxyseq128128v1 440.43 440.57 442.61 T:deoxyseq256128v1 441.67 441.98 444.32 T:deoxyseq256128v13 442.18 442.69 443.43 T:deoxysneq256128v13 442.36 443.22 443.57 T:deoxysneq256128v1 571.83 585.97 587.46 T:led80n6t4silcv3 1426.88? 1428.10? 2011.27? T:aes128gcmv1 1457.68 1459.67 1462.31 aes256gcmv1 1436.59 1549.89 1574.94 T:acorn128 6034.62 6038.14 6046.63 T:led80n6silcv1 6035.36 6038.55 6048.65 T:led80n6t4silcv2 7940.10 7945.08 7956.94 T:present80n6t4silcv2 7944.73 7947.69 7953.50 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 2.32 2.32 2.32 T:morus640128v1 2.32 2.32 2.32 T:morus640128v2 2.64 2.66 2.67 T:morus1280256v2 2.66 2.66 2.68 T:morus1280256v1 2.66 2.66 2.67 T:morus1280128v2 2.66 2.66 2.67 T:morus1280128v1 5.62 5.68 5.70 T:oceankeyakv2 5.57 5.73 5.90 T:lunarkeyakv2 6.31 6.32 6.33 T:norx3241v2 6.31 6.32 6.33 T:norx3241v3 3.10? 6.40? 6.47? T:seakeyakv2 7.30 7.31 7.35 T:norx6441v2 7.31 7.31 7.32 T:norx6441v3 7.30 7.32 7.32 T:norx6444v3 7.29? 7.33? 13.38? T:norx6444v2 7.48 7.48 7.48 T:norx3241v1 7.98 8.01 8.02 T:norx6444v1 8.00 8.01 8.02 T:norx6441v1 8.64 8.65 8.67 T:lakekeyakv2 9.26 9.27 9.29 T:norx3261v3 9.27 9.28 9.29 T:norx3261v2 9.83 9.84 9.86 T:lakekeyakv1 10.79 10.83 10.86 T:norx6461v2 10.83 10.83 10.84 T:norx6461v3 11.02 11.02 11.02 T:norx3261v1 11.46 11.48 11.50 T:norx6461v1 13.36 13.38 13.39 T:ascon96v1 13.41 13.42 13.43 T:tiaoxinv2 13.42 13.43 13.48 T:tiaoxinv1 13.44 13.44 13.45 ascon128av12 13.48 13.51 13.52 T:ascon128av11 12.67? 13.96? 24.16? T:aes256gcmv1 15.99 16.00 16.01 T:acorn128v3 16.75 16.75 16.75 T:acorn128v2 17.18 17.19 18.23 T:riverkeyakv2 17.87 17.96 18.06 T:ketjemajorv2 18.00 18.02 18.04 T:aegis128l 19.98 20.00 20.02 T:ascon128v11 19.99 20.00 20.02 T:ascon128v1 20.25 20.25 20.25 ascon128v12 21.81 21.84 21.85 T:aegis128 23.06 23.07 23.09 T:aegis256 25.04 25.24 25.27 T:ketjeminorv2 28.41 28.47 28.52 T:deoxysi128v141 28.43 28.49 28.57 T:deoxysii128v141 31.33 31.34 31.42 aegis128l 31.98 32.11 32.23 T:deoxysi256v141 32.08? 32.19? 50.82? T:deoxysii256v141 36.04 36.06 36.08 T:aes128n12clocv1 36.04 36.06 36.07 T:aes128n8clocv1 36.09 36.13 36.19 T:aes128n12t8clocv3 36.09 36.13 36.16 T:aes128n8t8clocv2 36.11 36.13 36.17 T:aes128n12t8clocv2 42.61 42.63 42.69 T:aes128otrsv1 42.79 42.80 42.88 T:aes128otrsv3 42.81 42.81 42.90 T:aes128otrsv2 42.87 42.88 42.96 T:aes128n12t8silcv2 42.87 42.89 42.97 T:aes128n8silcv1 42.88 42.90 43.04 T:aes128n12t8silcv3 42.87 42.90 42.99 T:aes128n12silcv1 42.88 42.92 42.96 T:aes128n8t8silcv2 44.01 44.16 44.31 T:seakeyakv1 43.80 44.26 47.54 T:oceankeyakv1 46.35 46.37 46.97 T:aes128otrcv3 50.73 50.77 50.84 T:aes128otrpv3 55.20 55.29 55.35 T:aes128otrpv2 55.24 55.30 55.33 T:aes128otrpv1 56.59 56.66 56.78 T:aes256otrsv3 56.67 56.71 56.81 T:aes256otrsv1 56.70 56.83 57.73 T:aes256otrsv2 58.41 58.46 58.96 T:proest256otrv1 60.89 61.00 61.04 T:aes256otrcv3 69.26 69.27 69.38 T:aes256otrpv1 69.28 69.39 70.69 T:aes256otrpv2 70.12 70.12 70.31 T:aes256otrpv3 70.99 71.01 71.03 T:aesjambuv1 74.00 74.01 74.72 T:twine80n6t4clocv3 85.10 85.59 89.65 T:ketjesrv1 94.47 94.53 101.09 T:twine80n6t4clocv2 94.85 95.31 99.41 T:ketjesrv2 99.32 100.07 104.25 T:riverkeyakv1 108.48 108.49 108.58 T:aezv5 122.86 123.73 123.79 T:aezv4 135.47 135.50 135.59 T:ketjejrv1 167.14 167.17 168.26 T:aezv1 169.71 169.82 170.13 T:proest128otrv1 172.61 172.73 173.25 T:present80n6t4silcv3 234.98 242.39 244.31 T:twine80n6clocv1 242.33 242.66 246.35 T:aezv3 263.98 264.07 264.97 T:ketjejrv2 301.03 301.21 302.45 T:deoxyseq128128v13 302.10 302.19 303.07 T:deoxysneq128128v13 302.74 302.97 303.94 T:deoxysneq128128v1 302.97 303.09 304.86 T:deoxyseq128128v1 440.42 440.61 442.53 T:deoxyseq256128v1 440.46 441.83 443.89 T:deoxyseq256128v13 442.32 442.73 444.33 T:deoxysneq256128v13 442.39 443.23 443.47 T:deoxysneq256128v1 586.70 587.03 587.59 T:led80n6t4silcv3 1434.51? 1449.16? 2014.40? T:aes128gcmv1 1457.34 1458.98 1461.20 aes256gcmv1 1449.41 1549.97 1575.07 T:acorn128 6033.67 6035.76 6040.49 T:led80n6silcv1 6034.88 6040.07 6043.38 T:led80n6t4silcv2 7944.29 7946.23 7951.21 T:present80n6t4silcv2 7941.94 7947.98 7965.53 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 3.00 3.00 3.05 T:morus640128v1 3.02 3.02 3.05 T:morus640128v2 3.54 3.54 3.59 T:morus1280256v1 3.54 3.54 3.60 T:morus1280128v2 3.57 3.57 3.59 T:morus1280128v1 3.63 3.63 3.67 T:morus1280256v2 7.19 7.19 7.22 T:norx3241v2 7.20 7.20 7.22 T:norx3241v3 8.15 8.15 8.20 T:norx3241v1 8.99 8.99 9.03 T:norx6441v2 9.01 9.01 9.05 T:norx6441v3 9.33 9.35 9.38 T:norx6441v1 10.39 10.39 10.44 T:norx3261v2 10.40 10.40 10.44 T:norx3261v3 10.46 10.46 10.60 T:seakeyakv2 11.14 11.15 11.19 T:norx6444v3 11.13? 11.15? 18.18? T:norx6444v2 11.91 11.91 12.07 T:norx3261v1 11.90 11.92 11.97 T:lakekeyakv2 11.94 11.95 11.95 T:norx6444v1 13.07 13.08 13.11 T:norx6461v2 13.11 13.12 13.15 T:norx6461v3 13.23 13.23 13.27 T:norx6461v1 13.43 13.43 13.66 T:lakekeyakv1 13.71 13.71 13.76 T:ascon96v1 13.73 13.73 13.74 T:ascon128av11 14.09 14.09 14.13 ascon128av12 14.39 14.40 14.59 T:oceankeyakv2 19.20 19.21 19.27 T:tiaoxinv2 19.23 19.24 19.29 T:tiaoxinv1 19.63 19.63 19.70 T:acorn128v3 20.03 20.03 20.09 T:acorn128v2 20.35 20.36 20.43 T:riverkeyakv2 20.87 20.87 20.93 T:ascon128v11 20.87 20.87 20.94 T:ascon128v1 21.01 21.01 21.05 ascon128v12 21.33 21.35 21.42 T:aegis128l 24.13 24.15 24.19 T:aegis128 24.44 24.44 24.88 T:lunarkeyakv2 26.44 26.45 26.48 T:aegis256 29.94 29.95 29.99 T:ketjeminorv2 31.67 31.70 31.88 T:deoxysi128v141 33.30 33.33 34.96 T:ketjemajorv2 36.44 36.46 36.98 T:deoxysi256v141 41.73 41.75 41.91 aegis128l 46.84 46.85 47.31 T:deoxysii128v141 48.66 48.67 48.76 T:aes128otrsv3 48.59 48.68 49.00 T:aes128otrcv3 48.68 48.68 48.78 T:aes128otrsv1 48.82 48.82 48.93 T:aes128otrsv2 54.89 54.93 55.42 T:aes128otrpv2 54.91 54.94 55.04 T:aes128otrpv1 54.93 54.96 55.34 T:deoxysii256v141 54.99 55.00 55.19 T:seakeyakv1 55.11 55.13 55.67 T:aes128otrpv3 55.26 55.26 55.36 T:aes128n12t8clocv2 55.32 55.32 55.41 T:aes128n12t8clocv3 55.25 55.35 56.79 T:aes128n8t8clocv2 55.36 55.37 55.46 T:aes128n12clocv1 55.39 55.50 56.17 T:aes128n8clocv1 63.48 63.48 63.58 T:aes256otrsv3 63.65 63.66 63.76 T:aes256otrsv1 63.64 63.66 63.75 T:aes256otrsv2 63.89 63.90 64.02 T:aes256otrcv3 64.39 64.41 64.53 T:proest256otrv1 65.93 65.93 66.01 T:aes128n8t8silcv2 65.98 66.01 66.24 T:aes128n12t8silcv3 65.93 66.02 66.94 T:aes128n12t8silcv2 66.10 66.11 66.23 T:aes128n8silcv1 66.11 66.13 66.20 T:aes128n12silcv1 68.76 68.77 68.95 T:oceankeyakv1 69.85 69.85 69.91 T:aes256otrpv2 69.86 69.87 69.99 T:aes256otrpv1 70.04 70.15 71.14 T:aes256gcmv1 70.32 71.04 71.12 T:aes256otrpv3 72.37 72.37 72.41 T:aesjambuv1 75.37 75.37 75.42 T:twine80n6t4clocv3 88.50 88.51 88.58 T:twine80n6t4clocv2 99.40 99.49 103.24 T:ketjesrv1 111.19 111.35 115.51 T:riverkeyakv1 111.77 112.23 115.62 T:ketjesrv2 133.48 133.56 133.75 T:aezv4 144.03 144.05 144.23 T:aezv5 159.45 159.45 159.96 T:ketjejrv1 175.23 175.23 175.37 T:present80n6t4silcv3 177.31 177.43 178.24 T:proest128otrv1 290.49 290.69 291.02 T:ketjejrv2 304.38 304.40 305.24 T:deoxysneq128128v13 304.68 304.71 305.45 T:deoxysneq128128v1 331.50 332.29 333.94 T:aezv1 350.85 351.50 353.02 T:aezv3 365.43 365.83 366.10 T:twine80n6clocv1 444.71 444.94 445.93 T:deoxysneq256128v13 444.83 445.38 446.11 T:deoxysneq256128v1 460.82 461.06 462.59 T:deoxyseq128128v1 461.77 462.45 462.95 T:deoxyseq128128v13 592.53 592.73 592.96 T:led80n6t4silcv3 665.61 666.01 666.67 T:deoxyseq256128v1 672.61 673.13 674.37 T:deoxyseq256128v13 1463.13 1463.44 1463.89 T:aes128gcmv1 1673.85 1770.84 1771.54 T:acorn128 9105.25 9107.07 9116.77 T:led80n6t4silcv2 9105.51 9110.33 9116.25 T:led80n6silcv1 11977.23 11980.25 12000.67 T:present80n6silcv1 11983.38 11996.37 12053.68 T:present80n6t4silcv2 26625.11 26650.61 26739.19 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.92 2.92 2.98 T:morus640128v1 2.94 2.94 2.95 T:morus640128v2 3.53 3.53 3.65 T:morus1280128v1 3.57 3.58 3.67 T:morus1280128v2 3.64 3.64 3.72 T:morus1280256v1 3.68 3.68 3.79 T:morus1280256v2 7.18 7.18 7.26 T:norx3241v2 7.18 7.18 7.27 T:norx3241v3 8.24 8.25 8.33 T:norx3241v1 9.06 9.06 9.13 T:norx6441v2 9.09 9.09 9.15 T:norx6441v3 9.36 9.36 9.41 T:norx6441v1 10.38 10.38 10.47 T:norx3261v2 10.39 10.39 10.48 T:norx3261v3 10.53 10.54 10.72 T:seakeyakv2 11.23 11.23 11.32 T:norx6444v3 11.20? 11.27? 20.11? T:norx6444v2 11.52 11.53 11.63 T:lakekeyakv2 11.96 11.97 12.03 T:norx6444v1 12.00 12.00 12.12 T:norx3261v1 13.14 13.15 13.68 T:norx6461v2 13.19 13.19 13.27 T:norx6461v3 13.25 13.25 13.30 T:norx6461v1 13.32 13.33 13.57 T:lakekeyakv1 13.75 13.75 13.81 T:ascon96v1 13.87 13.87 13.92 T:ascon128av11 14.04 14.04 14.10 ascon128av12 14.48 14.48 14.66 T:oceankeyakv2 18.74 18.75 18.82 T:acorn128v3 19.35 19.36 19.49 T:tiaoxinv2 19.36 19.38 19.50 T:tiaoxinv1 19.97 19.98 20.27 T:acorn128v2 20.50 20.50 20.59 T:ascon128v11 20.50 20.59 21.25 T:ascon128v1 20.64 20.68 20.79 T:riverkeyakv2 20.89 20.89 20.94 ascon128v12 21.38 21.41 21.47 T:aegis128l 24.16 24.19 24.27 T:aegis128 24.54 24.80 24.94 T:lunarkeyakv2 26.49 26.50 26.58 T:aegis256 30.82 30.84 30.91 T:ketjeminorv2 32.02 32.14 33.09 T:ketjemajorv2 41.63 41.64 41.69 aegis128l 43.55 43.64 44.00 T:deoxysi128v141 46.99 47.02 47.30 T:deoxysii128v141 48.71? 48.79? 54.55? T:aes128otrcv3 49.08 49.09 49.19 T:aes128otrsv1 49.23 49.23 49.35 T:aes128otrsv2 49.72 49.84 50.60 T:aes128otrsv3 50.46 50.50 50.80 T:deoxysi256v141 55.07 55.08 55.18 T:aes128otrpv3 55.12 55.18 55.57 T:deoxysii256v141 55.21 55.21 55.35 T:seakeyakv1 55.29 55.31 55.37 T:aes128otrpv2 55.28 55.31 55.48 T:aes128otrpv1 57.52 57.53 57.65 T:aes128n8t8clocv2 57.53 57.54 57.65 T:aes128n12t8clocv2 57.60 57.60 57.70 T:aes128n12t8clocv3 57.69 57.72 58.23 T:aes128n8clocv1 57.73 57.73 57.88 T:aes128n12clocv1 63.72 63.76 64.48 T:proest256otrv1 64.02 64.02 64.20 T:aes256otrcv3 64.04 64.10 64.23 T:aes256otrsv2 64.05 64.16 65.00 T:aes256otrsv1 64.53 64.54 64.68 T:aes256otrsv3 66.16 66.17 66.38 T:aes128n8t8silcv2 66.22 66.22 66.32 T:aes128n12t8silcv3 66.25 66.28 66.33 T:aes128n12t8silcv2 66.39 66.40 66.49 T:aes128n8silcv1 66.41 66.44 68.55 T:aes128n12silcv1 68.99 69.70 71.10 T:oceankeyakv1 70.22 70.24 70.96 T:aes256otrpv2 70.24 70.24 70.38 T:aes256otrpv1 71.65 72.08 72.09 T:aes256otrpv3 72.32 72.33 72.44 T:aesjambuv1 75.44 75.44 75.54 T:twine80n6t4clocv3 75.61 75.66 76.69 T:aes256gcmv1 91.61 91.61 91.69 T:twine80n6t4clocv2 100.04 100.11 103.89 T:ketjesrv1 108.67 108.74 112.51 T:ketjesrv2 110.96? 111.33? 126.45? T:riverkeyakv1 131.12 132.25 132.41 T:aezv4 141.45 141.46 141.59 T:aezv5 157.46 157.53 157.95 T:ketjejrv1 175.23 175.25 175.57 T:present80n6t4silcv3 181.18 181.20 181.67 T:proest128otrv1 281.28 281.40 281.98 T:ketjejrv2 333.17 333.91 335.43 T:aezv1 348.15 349.04 350.47 T:aezv3 357.46 357.55 358.45 T:deoxysneq128128v1 357.74 357.87 358.79 T:deoxysneq128128v13 363.76 364.06 365.78 T:twine80n6clocv1 461.75 462.28 463.09 T:deoxyseq128128v13 530.07 532.70 534.36 T:deoxysneq256128v1 531.19 532.85 560.63 T:deoxysneq256128v13 562.65 563.51 564.30 T:deoxyseq128128v1 592.52 592.67 593.39 T:led80n6t4silcv3 672.65 672.98 673.63 T:deoxyseq256128v13 836.04 837.15 842.39 T:deoxyseq256128v1 1463.66 1464.17 1464.74 T:aes128gcmv1 1660.02 1767.06 1767.80 T:acorn128 9103.87 9110.18 9124.87 T:led80n6silcv1 9105.96 9114.79 9129.16 T:led80n6t4silcv2 11974.26 11978.55 11988.92 T:present80n6silcv1 11974.57 11984.99 12004.55 T:present80n6t4silcv2 26620.41 26665.14 26740.84 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.92 2.92 2.92 T:morus640128v1 2.94 2.94 2.94 T:morus640128v2 3.53 3.54 3.55 T:morus1280128v1 3.57 3.58 3.58 T:morus1280128v2 3.64 3.64 3.65 T:morus1280256v1 3.68 3.68 3.69 T:morus1280256v2 7.18 7.18 7.18 T:norx3241v2 7.18 7.18 7.22 T:norx3241v3 8.24 8.24 8.24 T:norx3241v1 9.15 9.15 9.18 T:norx6441v2 9.19 9.19 9.21 T:norx6441v3 9.44 9.45 9.50 T:norx6441v1 10.38 10.38 10.42 T:norx3261v2 10.39 10.39 10.57 T:norx3261v3 10.58 10.59 10.68 T:seakeyakv2 11.29? 11.33? 19.24? T:norx6444v2 11.33 11.33 11.34 T:norx6444v3 11.61 11.63 11.68 T:lakekeyakv2 11.99 11.99 12.00 T:norx3261v1 12.04 12.05 12.07 T:norx6444v1 13.22 13.23 13.24 T:norx6461v2 13.27 13.28 13.29 T:norx6461v3 13.34 13.35 13.57 T:norx6461v1 13.51 13.51 13.71 T:lakekeyakv1 13.74 13.74 13.76 T:ascon96v1 13.86 13.86 13.89 T:ascon128av11 14.04 14.04 14.05 ascon128av12 14.50 14.51 14.61 T:oceankeyakv2 18.74 18.74 18.77 T:acorn128v3 19.32 19.33 19.38 T:tiaoxinv2 19.34 19.35 19.37 T:tiaoxinv1 19.97 19.97 20.00 T:acorn128v2 20.50 20.50 20.52 T:ascon128v1 20.50 20.50 20.52 T:ascon128v11 20.71 20.75 20.82 T:riverkeyakv2 20.89 20.89 20.91 ascon128v12 21.38 21.40 21.41 T:aegis128l 24.16 24.19 24.19 T:aegis128 24.63 24.63 24.78 T:lunarkeyakv2 26.58 26.59 26.64 T:aegis256 30.92 30.94 31.00 T:ketjeminorv2 32.13 32.13 32.21 T:ketjemajorv2 41.73 41.74 41.78 aegis128l 43.74 43.90 44.06 T:deoxysi128v141 47.23 47.24 47.56 T:deoxysii128v141 48.70 48.71 50.70 T:aes128otrcv3 49.19 49.20 49.26 T:aes128otrsv1 49.31 49.31 49.40 T:aes128otrsv2 49.83 49.92 50.70 T:aes128otrsv3 50.60 50.69 50.89 T:deoxysi256v141 55.09 55.10 55.45 T:deoxysii256v141 55.16 55.18 55.27 T:aes128otrpv3 55.36 55.39 55.48 T:aes128otrpv2 55.37 55.40 55.49 T:aes128otrpv1 55.30 55.43 56.82 T:seakeyakv1 57.49 57.49 57.59 T:aes128n8t8clocv2 57.51 57.54 57.78 T:aes128n12t8clocv2 57.56 57.57 57.62 T:aes128n12t8clocv3 57.66 57.69 57.72 T:aes128n8clocv1 57.69 57.70 57.76 T:aes128n12clocv1 63.72 63.75 63.80 T:proest256otrv1 64.00 64.01 64.05 T:aes256otrcv3 64.15 64.16 64.25 T:aes256otrsv1 64.14 64.19 64.23 T:aes256otrsv2 64.65 64.67 64.76 T:aes256otrsv3 66.15 66.16 66.21 T:aes128n8t8silcv2 66.22 66.24 66.40 T:aes128n12t8silcv3 66.25 66.29 66.93 T:aes128n12t8silcv2 66.39 66.40 66.48 T:aes128n8silcv1 66.40 66.41 66.49 T:aes128n12silcv1 69.05 69.05 69.20 T:oceankeyakv1 70.32 70.32 70.39 T:aes256otrpv2 70.33 70.35 70.43 T:aes256otrpv1 71.41 72.17 72.23 T:aes256otrpv3 72.32 72.32 72.36 T:aesjambuv1 75.44 75.46 75.49 T:twine80n6t4clocv3 91.61 91.61 91.67 T:twine80n6t4clocv2 96.07 96.25 96.80 T:aes256gcmv1 100.13 100.84 103.97 T:ketjesrv1 108.76 108.86 112.60 T:ketjesrv2 111.06 112.24 115.38 T:riverkeyakv1 130.96 132.18 133.16 T:aezv4 141.35 141.38 141.42 T:aezv5 157.55 157.65 158.16 T:ketjejrv1 175.22 175.28 175.61 T:present80n6t4silcv3 177.39 181.19 181.39 T:proest128otrv1 281.38 281.45 281.90 T:ketjejrv2 333.00 333.57 337.15 T:aezv1 347.88 348.90 351.34 T:aezv3 357.46 357.61 358.71 T:deoxysneq128128v1 357.85 357.95 359.14 T:deoxysneq128128v13 363.44 363.94 365.38 T:twine80n6clocv1 461.79 462.43 463.20 T:deoxyseq128128v13 530.02 531.09 532.84 T:deoxysneq256128v1 530.16 531.52 536.44 T:deoxysneq256128v13 562.49 563.20 563.40 T:deoxyseq128128v1 592.47 592.70 592.93 T:led80n6t4silcv3 672.73 673.24 675.27 T:deoxyseq256128v13 835.99 836.97 837.92 T:deoxyseq256128v1 1435.45 1435.89 1436.35 T:aes128gcmv1 1660.12 1766.98 1767.36 T:acorn128 1979.54 1980.48 1983.35 aes256gcmv1 9104.28 9106.76 9111.81 T:led80n6t4silcv2 9106.00 9111.68 9117.07 T:led80n6silcv1 11975.89 11984.87 11992.49 T:present80n6silcv1 11977.63 11985.12 12014.07 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.37 9.37 10.08 T:morus640128v1 9.90 9.90 10.70 T:morus640128v2 17.23 17.23 18.23 T:morus1280128v1 17.51 17.51 18.29 T:morus1280256v1 17.62 17.64 19.09 T:norx3241v1 18.25 18.26 19.14 T:morus1280128v2 18.72 18.77 19.57 T:morus1280256v2 19.46 19.50 20.46 T:norx3241v2 19.56 19.67 20.59 T:norx3241v3 21.05 21.05 21.79 T:ascon128av11 21.15? 21.68? 38.39? T:ascon96v1 21.84 21.84 22.79 ascon128av12 25.56 25.57 27.36 T:norx3261v1 27.45 27.46 28.05 T:norx3261v2 27.53 27.63 28.80 T:norx3261v3 27.84 27.84 28.48 T:ascon128v11 27.84 27.84 28.59 T:ascon128v1 28.21 28.21 29.25 ascon128v12 31.12 31.12 31.12 T:norx6441v1 37.26 37.35 38.23 T:norx6441v3 37.16? 37.91? 62.96? T:norx6441v2 41.98 41.98 42.07 T:norx6461v1 50.22 50.22 50.91 T:norx6461v2 50.62 50.67 52.45 T:lakekeyakv1 51.23 51.25 52.30 T:norx6461v3 51.58 51.70 52.62 T:riverkeyakv2 54.90 55.32 56.09 T:lakekeyakv2 68.18 68.46 69.59 T:aes128n8t8clocv2 68.50 68.70 70.09 T:aes128n12t8clocv2 69.73 69.84 71.37 T:aes128n12t8clocv3 69.86 69.86 70.87 T:aegis128 72.03 72.04 74.26 T:aes128n8clocv1 72.19 72.21 74.10 T:aes128n12clocv1 82.89 82.93 83.98 T:acorn128v3 84.00 84.00 84.56 T:acorn128v2 87.00 87.09 87.70 T:norx6444v2 87.58 87.64 88.30 T:norx6444v3 87.52 87.67 90.05 T:aes128n8t8silcv2 87.75 88.09 88.95 T:aes128n12t8silcv2 88.52 88.66 89.91 T:aes128n12t8silcv3 90.91 90.97 91.95 T:aegis256 92.03 92.13 99.33 T:norx6444v1 93.23 93.39 94.68 T:aes128n8silcv1 93.58 93.67 94.97 T:aes128n12silcv1 93.98 94.04 96.29 T:aes128otrsv1 94.13 94.19 94.83 T:aegis128l 94.19 94.19 96.08 T:aes128otrsv2 94.77 94.81 96.88 T:aes128otrsv3 96.26 96.26 96.93 T:aesjambuv1 97.92 98.04 99.52 T:aes128otrpv2 98.17 98.27 100.32 T:aes128otrpv1 99.02 99.12 100.46 T:aes128otrpv3 99.91 99.94 100.18 T:ketjeminorv2 100.95 100.95 101.87 T:twine80n6t4clocv3 101.49 101.66 103.43 T:seakeyakv2 101.90 101.91 103.82 T:aes128otrcv3 114.41 114.43 116.48 T:deoxysi128v141 115.74 115.89 117.12 T:twine80n6t4clocv2 122.87 122.87 125.14 T:aes256otrsv2 124.44 124.44 126.09 T:aes256otrsv3 123.48 124.77 125.53 T:aes256otrsv1 126.84 126.84 128.23 T:aes256otrpv2 127.93 127.93 129.88 T:aes256otrpv1 128.62 128.69 128.97 T:aes256otrpv3 132.94 134.36 135.21 T:aes256otrcv3 143.59 143.66 144.59 T:tiaoxinv2 144.02 144.02 144.84 T:tiaoxinv1 144.95 144.95 146.55 aegis128l 154.53 155.27 160.52 T:ketjesrv1 158.20 158.27 160.36 T:deoxysii128v141 165.30 165.34 167.34 T:oceankeyakv2 172.62 173.05 176.80 T:aezv4 185.16 185.55 187.11 T:proest256otrv1 188.16 188.23 190.81 T:deoxysi256v141 189.98 190.47 195.93 T:ketjesrv2 191.59 191.70 195.22 T:aezv5 201.18 204.34 209.16 T:riverkeyakv1 210.05 210.05 210.55 T:ketjejrv1 221.95 221.95 222.47 T:present80n6t4silcv3 254.49 254.62 257.07 T:ketjemajorv2 342.45 342.59 343.46 T:deoxysneq128128v13 342.86 343.34 344.33 T:deoxysneq128128v1 347.53 347.53 351.80 T:proest128otrv1 361.91 362.57 366.34 T:aezv1 362.05 364.23 381.13 T:aes256gcmv1 382.09 382.31 383.30 T:ketjejrv2 397.12 397.21 401.77 T:lunarkeyakv2 399.38 399.46 402.23 T:twine80n6clocv1 416.98 416.98 421.00 T:seakeyakv1 439.80 439.89 442.01 T:deoxysii256v141 499.95 499.95 500.97 T:deoxysneq256128v13 499.96 499.96 500.78 T:deoxysneq256128v1 504.91 505.94 509.69 T:aezv3 534.08 534.31 534.67 T:deoxyseq128128v1 571.91 572.61 572.84 T:deoxyseq128128v13 702.62 702.63 703.58 T:led80n6t4silcv3 750.73 750.74 755.01 T:oceankeyakv1 773.10 773.10 773.91 T:deoxyseq256128v1 832.60 832.60 833.38 T:deoxyseq256128v13 1648.80? 1650.27? 2244.05? T:aes128gcmv1 6051.35 6257.02 6265.48 T:acorn128 10164.52 10199.50 10206.95 T:led80n6silcv1 10188.83 10199.88 10208.33 T:led80n6t4silcv2 13399.68 13405.10 13411.56 T:present80n6t4silcv2 13407.45 13410.70 13415.41 T:present80n6silcv1 38542.46 38551.41 38701.95 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.61? 9.61? 10.73? T:morus640128v1 10.02? 10.02? 11.30? T:morus640128v2 17.77 17.77 19.41 T:norx3241v1 17.77 17.77 19.19 T:morus1280128v1 18.21 18.21 18.79 T:morus1280256v1 18.72 18.72 20.10 T:morus1280128v2 19.14 19.14 19.58 T:norx3241v2 19.14 19.14 20.44 T:morus1280256v2 19.24 19.29 19.68 T:norx3241v3 21.37 21.37 22.01 T:ascon128av11 21.29? 21.59? 38.06? T:ascon96v1 22.09 22.09 23.30 ascon128av12 25.72 25.72 27.04 T:norx3261v1 27.08 27.15 27.73 T:norx3261v2 27.18 27.23 27.89 T:norx3261v3 27.62 27.62 28.57 T:ascon128v11 27.62 27.62 28.67 T:ascon128v1 28.28 28.28 28.99 ascon128v12 30.87 30.87 31.71 T:norx6441v1 37.46? 38.06? 61.86? T:norx6441v2 38.08 38.08 38.57 T:norx6441v3 41.73 41.73 42.58 T:norx6461v1 49.72 49.88 50.48 T:lakekeyakv1 50.79 50.79 51.34 T:norx6461v2 51.98 51.98 52.61 T:norx6461v3 52.67 52.85 54.03 T:riverkeyakv2 54.83 54.88 55.76 T:lakekeyakv2 70.06 70.06 70.54 T:aegis128 70.17 70.23 70.69 T:aes128n8t8clocv2 70.49 70.58 70.84 T:aes128n12t8clocv2 72.03 72.24 73.39 T:aes128n12t8clocv3 73.97 74.17 74.68 T:aes128n8clocv1 74.73 74.74 75.27 T:aes128n12clocv1 81.78 81.84 82.39 T:acorn128v3 85.45 85.45 85.80 T:acorn128v2 87.84 87.88 88.30 T:norx6444v2 88.35 88.41 89.11 T:aes128n12t8silcv2 88.54 88.58 89.37 T:norx6444v3 88.55 88.65 88.98 T:aes128n8t8silcv2 89.70 89.80 90.21 T:aes128n12t8silcv3 91.36 91.36 91.64 T:aegis256 92.03 92.12 93.14 T:norx6444v1 93.46 93.58 94.77 T:aes128n8silcv1 93.69 93.83 95.41 T:aes128n12silcv1 94.26 94.31 94.74 T:aegis128l 94.80 94.86 95.61 T:aes128otrsv1 95.27 95.27 96.23 T:aes128otrsv2 96.56 96.62 97.74 T:aesjambuv1 96.36 97.02 97.57 T:aes128otrsv3 98.55 98.55 99.98 T:aes128otrpv2 98.53 98.59 100.63 T:aes128otrpv1 100.78 100.80 101.01 T:ketjeminorv2 100.89 100.94 102.38 T:aes128otrpv3 101.19 101.19 101.47 T:twine80n6t4clocv3 101.84 101.95 102.66 T:aes128otrcv3 102.42 102.75 105.04 T:seakeyakv2 118.31 118.34 118.73 T:twine80n6t4clocv2 123.89 123.94 125.11 T:aes256otrsv2 124.40 125.69 125.90 T:aes256otrsv1 125.97 125.97 127.01 T:aes256otrsv3 127.31 127.31 128.71 T:aes256otrpv2 128.67 128.67 130.69 T:aes256otrpv1 129.71 129.71 130.61 T:aes256otrpv3 132.49 132.60 133.89 T:deoxysi128v141 133.38 133.96 134.63 T:aes256otrcv3 143.64 143.70 144.72 T:tiaoxinv2 144.27 144.32 145.16 T:tiaoxinv1 144.97 145.08 146.06 aegis128l 155.48 156.15 161.51 T:ketjesrv1 158.36 158.36 159.63 T:deoxysii128v141 166.91 166.98 169.23 T:oceankeyakv2 170.39 170.96 171.12 T:aezv4 186.86 187.14 188.82 T:proest256otrv1 187.22 187.64 193.32 T:ketjesrv2 188.24 188.81 191.87 T:aezv5 208.32 208.32 208.66 T:ketjejrv1 208.91 209.03 210.80 T:deoxysi256v141 201.43 209.41 211.54 T:riverkeyakv1 222.15 222.15 222.57 T:present80n6t4silcv3 254.48 254.54 256.96 T:ketjemajorv2 350.87 354.02 354.20 T:proest128otrv1 373.58 373.86 377.53 T:aezv1 374.03 374.24 376.18 T:ketjejrv2 395.32 395.40 396.68 T:deoxysneq128128v1 395.99 396.13 397.26 T:deoxysneq128128v13 396.09 397.95 400.95 T:lunarkeyakv2 398.03 398.11 400.77 T:twine80n6clocv1 416.63 416.84 425.23 T:seakeyakv1 439.68 439.73 441.64 T:deoxysii256v141 487.61 488.59 502.50 T:aes256gcmv1 502.04 502.41 506.41 T:aezv3 571.95 573.86 574.71 T:deoxyseq128128v13 585.11 585.36 586.84 T:deoxysneq256128v1 585.10 585.38 585.76 T:deoxysneq256128v13 637.41 637.46 637.94 T:deoxyseq128128v1 702.35 702.42 703.17 T:led80n6t4silcv3 751.34 751.39 755.20 T:oceankeyakv1 832.53 832.65 833.70 T:deoxyseq256128v13 943.32 943.32 944.05 T:deoxyseq256128v1 1649.72? 1650.59? 2239.54? T:aes128gcmv1 5848.34 6219.78 6222.45 T:acorn128 10188.98 10198.41 10207.97 T:led80n6t4silcv2 10179.61 10201.30 10214.09 T:led80n6silcv1 13398.02 13405.21 13409.12 T:present80n6t4silcv2 13407.48 13412.22 13430.02 T:present80n6silcv1 38548.07 38551.66 38707.09 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.61 9.61 9.61 T:morus640128v1 10.02 10.02 10.02 T:morus640128v2 17.76 17.76 17.77 T:norx3241v1 17.77 17.77 17.77 T:morus1280128v1 18.21 18.21 18.30 T:morus1280256v1 18.72 18.72 18.88 T:morus1280128v2 19.14 19.14 19.25 T:morus1280256v2 19.14 19.18 19.37 T:norx3241v2 19.26 19.34 19.43 T:norx3241v3 21.12 21.12 21.85 T:ascon96v1 21.29 21.29 22.04 T:ascon128av11 22.09 22.09 22.20 ascon128av12 25.72 25.72 25.72 T:norx3261v1 27.09 27.17 27.23 T:norx3261v2 27.18 27.20 27.41 T:norx3261v3 27.55 27.55 27.80 T:ascon128v1 27.55 27.55 27.80 T:ascon128v11 28.28 28.28 28.28 ascon128v12 31.35 31.41 31.66 T:norx6441v1 38.05? 38.25? 63.12? T:norx6441v2 38.60 38.60 38.80 T:norx6441v3 42.21 42.27 42.62 T:norx6461v1 50.17 50.34 50.54 T:lakekeyakv1 51.25 51.25 51.46 T:norx6461v2 52.52 52.52 52.71 T:norx6461v3 53.66 53.89 54.35 T:riverkeyakv2 55.38 55.38 55.66 T:lakekeyakv2 69.41 69.47 69.71 T:aes128n8t8clocv2 69.67 69.82 70.23 T:aes128n12t8clocv2 70.06 70.06 70.06 T:aegis128 71.18 71.30 71.80 T:aes128n12t8clocv3 73.30 73.45 73.59 T:aes128n8clocv1 74.03 74.12 74.29 T:aes128n12clocv1 81.78 81.83 81.93 T:acorn128v3 85.45 85.45 85.50 T:acorn128v2 87.92 87.92 88.30 T:aes128n12t8silcv2 88.30 88.37 88.55 T:aes128n8t8silcv2 88.42 88.45 88.67 T:norx6444v2 89.06 89.11 89.28 T:norx6444v3 89.54 89.59 89.75 T:aes128n12t8silcv3 91.84 91.91 93.12 T:aegis256 92.43 92.50 92.67 T:norx6444v1 93.27 93.31 93.44 T:aes128n8silcv1 93.53 93.62 93.80 T:aes128n12silcv1 94.26 94.31 94.37 T:aegis128l 95.66 95.66 95.93 T:aes128otrsv2 95.73 95.78 95.83 T:aes128otrsv1 96.56 96.62 97.61 T:aesjambuv1 97.56 97.88 98.22 T:aes128otrsv3 99.13 99.19 99.58 T:aes128otrpv1 99.24 99.24 99.77 T:aes128otrpv2 101.12 101.16 101.35 T:twine80n6t4clocv3 101.42 101.50 101.70 T:aes128otrpv3 101.68 101.70 101.81 T:ketjeminorv2 101.98 102.32 102.35 T:aes128otrcv3 104.05 104.22 105.51 T:seakeyakv2 118.30 118.32 119.00 T:twine80n6t4clocv2 124.60 124.71 125.52 T:aes256otrsv2 125.27 125.45 126.56 T:aes256otrsv1 126.58 126.91 126.91 T:aes256otrsv3 128.04 128.04 128.54 T:aes256otrpv2 129.10 129.11 129.22 T:aes256otrpv1 129.33 130.37 130.37 T:aes256otrpv3 133.16 133.24 134.04 T:deoxysi128v141 133.32 133.70 134.58 T:aes256otrcv3 142.93 142.95 142.96 T:tiaoxinv2 143.61 143.66 143.78 T:tiaoxinv1 145.75 145.86 146.52 aegis128l 156.06 156.76 162.16 T:ketjesrv1 158.95 158.95 159.61 T:deoxysii128v141 167.62 167.70 168.90 T:oceankeyakv2 169.02 170.34 170.49 T:aezv4 181.39 181.67 181.86 T:proest256otrv1 187.31 187.42 187.80 T:aezv5 187.83 188.44 193.91 T:ketjesrv2 202.55 204.59 210.49 T:riverkeyakv1 209.10 209.10 209.35 T:ketjejrv1 209.77 210.00 210.50 T:deoxysi256v141 221.90 221.97 222.58 T:present80n6t4silcv3 255.53 255.54 256.86 T:ketjemajorv2 348.24 353.98 356.12 T:proest128otrv1 372.43 372.75 374.01 T:aezv1 374.48 374.58 375.95 T:ketjejrv2 395.34 395.44 395.84 T:deoxysneq128128v1 396.30 396.57 397.16 T:deoxysneq128128v13 397.46 397.59 400.34 T:lunarkeyakv2 397.69 397.77 399.88 T:twine80n6clocv1 417.10? 417.16? 468.50? T:seakeyakv1 440.47 440.52 441.19 T:deoxysii256v141 501.55 502.11 504.18 T:aezv3 572.46 572.77 574.99 T:deoxyseq128128v13 585.62 585.90 586.79 T:deoxysneq256128v13 584.83 586.80 587.38 T:deoxysneq256128v1 637.42 637.47 639.82 T:deoxyseq128128v1 702.42 702.46 703.31 T:led80n6t4silcv3 751.91 751.95 755.55 T:oceankeyakv1 833.06 833.06 834.06 T:deoxyseq256128v13 943.30 943.30 943.84 T:deoxyseq256128v1 988.23 993.70 998.11 T:aes256gcmv1 1621.16? 1621.84? 2204.98? T:aes128gcmv1 5846.66 6219.67 6225.56 T:acorn128 10188.94 10191.10 10196.91 T:led80n6t4silcv2 10200.16 10210.27 10216.28 T:led80n6silcv1 13398.05 13400.64 13419.65 T:present80n6t4silcv2 13407.66 13412.48 13442.83 T:present80n6silcv1 13938.72 13950.54 13975.18 aes256gcmv1