VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Bonnell (106ca); 2011 Intel Atom N435; 1 x 1330MHz; h4atom, supercop-20250922

[Page version: 20251125 18:45:25]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.92 2.94 2.95 T:morus640128v2 3.10 3.13 3.15 T:morus640128v1 3.30 3.32 3.35 T:morus1280128v1 3.35 3.38 3.40 T:morus1280256v1 3.42 3.45 3.45 T:morus1280128v2 3.43 3.45 3.45 T:morus1280256v2 6.32 6.38 6.39 T:norx3241v2 6.37 6.40 6.42 T:norx3241v3 6.56 6.78 6.97 T:lunarkeyakv2 7.10 7.13 7.15 T:norx6441v3 7.19 7.22 7.23 T:norx6441v2 7.62 7.64 7.68 T:norx6444v3 7.60 7.65 7.70 T:norx6444v2 7.87 7.98 8.02 T:norx3241v1 8.21 8.28 8.59 T:seakeyakv2 8.47 8.52 8.59 T:norx6441v1 8.53 8.59 8.66 T:norx6444v1 8.61 8.67 8.84 T:oceankeyakv2 8.95 9.00 9.05 T:norx3261v2 9.08 9.11 9.15 T:norx3261v3 10.43 10.48 10.52 T:norx6461v3 10.54 10.62 10.64 T:norx6461v2 10.77 10.91 11.02 T:lakekeyakv1 11.87 12.00 12.06 T:lakekeyakv2 12.03 12.12 12.15 T:norx6461v1 12.08 12.18 12.26 T:norx3261v1 13.77 13.83 13.84 T:ascon128av11 13.80 13.83 13.88 T:tiaoxinv2 13.85 13.88 13.89 T:ascon96v1 13.96 14.01 14.01 ascon128av12 14.04 14.11 14.16 T:tiaoxinv1 16.50 16.55 16.57 T:acorn128v3 16.80 16.82 16.84 T:acorn128v2 16.91 16.98 17.01 T:aegis128l 20.99 21.00 21.01 ascon128v12 21.19 21.23 21.27 T:aegis128 21.62 21.63 21.63 T:ascon128v1 21.62 21.63 21.65 T:ascon128v11 25.45 25.50 25.51 T:aegis256 26.67 26.71 26.79 T:ketjemajorv2 28.70 28.77 28.84 T:riverkeyakv2 30.49 30.66 31.64 T:deoxysi128v141 31.35 31.40 31.45 T:ketjeminorv2 32.85 33.36 34.39 T:aes128gcmv1 34.42 34.60 34.78 T:deoxysi256v141 38.59 38.65 38.72 aegis128l 38.55 39.32 40.38 T:aes256gcmv1 41.60 41.63 42.08 T:aes128otrcv3 46.87 46.90 47.01 T:aes128otrpv2 46.86 46.92 46.98 T:aes128otrsv2 46.88 46.93 46.97 T:aes128otrpv1 47.33 47.36 47.40 T:aes128otrsv1 48.01 48.08 48.13 T:aes128otrsv3 48.33 48.40 48.45 T:aes128otrpv3 55.87 55.91 56.01 T:aes256otrcv3 60.41 60.76 61.90 T:deoxysii128v141 61.15 61.19 61.30 T:aes256otrsv2 61.14 61.23 61.27 T:aes256otrsv1 61.19 61.24 61.34 T:aes256otrpv1 61.97 62.05 62.15 T:aes256otrpv2 62.36 62.43 62.52 T:aes256otrsv3 62.54 62.59 62.73 T:aes256otrpv3 62.57 62.75 63.15 T:proest256otrv1 68.51 68.83 73.90 T:deoxysii256v141 70.25 70.42 70.50 T:aeadaes128ocbtaglen128v1 70.83 70.87 71.05 T:aesjambuv1 71.88 72.02 72.26 T:aeadaes128ocbtaglen64v1 71.96 72.14 72.29 T:aeadaes128ocbtaglen96v1 73.06 74.02 74.80 T:aeadaes192ocbtaglen128v1 76.41 76.53 76.91 T:aes128n8t8clocv2 76.49 76.53 76.67 T:aes128n8clocv1 76.51 76.60 77.31 T:aes128n12t8clocv3 76.51 76.60 76.71 T:aes128n12clocv1 76.48 76.66 77.81 T:aes128n12t8clocv2 78.11 78.16 78.22 T:twine80n6t4clocv3 78.90 82.12 82.59 T:aes128n12t8silcv3 82.08 82.12 82.19 T:aes128n12t8silcv2 82.13 82.17 82.55 T:aes128n8t8silcv2 83.68 83.79 83.94 T:aeadaes192ocbtaglen64v1 83.81 83.88 83.95 T:aeadaes192ocbtaglen96v1 93.00 93.09 93.16 T:aeadaes256ocbtaglen128v1 94.58 94.67 95.37 T:aeadaes256ocbtaglen64v1 94.60 94.72 94.78 T:aeadaes256ocbtaglen96v1 98.17 99.64 102.81 T:ketjesrv1 107.61 107.63 107.87 T:twine80n6t4clocv2 114.94 115.19 117.26 T:aezv4 112.01 116.10 116.59 T:ketjesrv2 117.85 118.04 118.21 T:aezv5 140.35 140.48 140.59 T:proest128otrv1 151.31 151.37 151.71 T:colm127v1 151.61 151.70 151.83 T:colm0v1 169.77 169.81 170.52 T:present80n6t4silcv3 180.13 180.23 180.41 T:ketjejrv1 214.50 214.55 214.74 T:deoxysneq128128v13 214.59 214.64 214.85 T:deoxysneq128128v1 317.90 318.08 319.43 T:ketjejrv2 392.62 394.39 401.58 T:aezv3 404.27 404.43 405.63 T:deoxysneq256128v1 404.32 404.90 407.43 T:deoxysneq256128v13 425.61 425.89 427.02 T:deoxyseq128128v1 433.61 433.69 434.73 T:deoxyseq128128v13 451.69 452.36 454.12 T:aezv1 741.11 741.62 741.81 T:led80n6t4silcv3 805.84 808.51 810.15 T:deoxyseq256128v1 815.21 816.01 848.91 T:deoxyseq256128v13 1698.85? 1745.31? 1959.52? T:acorn128 11750.78 11757.83 11764.58 T:led80n6t4silcv2 11752.83 11759.75 11783.64 T:led80n6silcv1 16770.83 16776.99 16785.25 T:present80n6silcv1 16769.68 16777.05 16800.90 T:present80n6t4silcv2 53725.25 53753.11 53806.45 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 2.91 2.95 2.96 T:morus640128v2 2.96 3.00 3.02 T:morus640128v1 3.15 3.19 3.20 T:morus1280256v2 3.14 3.19 3.21 T:morus1280128v2 3.14 3.19 3.21 T:morus1280256v1 3.13 3.20 3.21 T:morus1280128v1 6.41 6.42 6.42 T:norx3241v3 6.44 6.48 6.50 T:norx3241v2 6.68 6.82 7.10 T:lunarkeyakv2 7.38 7.44 7.50 T:norx6441v3 7.38 7.45 7.47 T:norx6441v2 7.89 7.93 7.95 T:norx6444v3 7.90 7.93 7.96 T:norx6444v2 8.07 8.16 8.18 T:norx3241v1 8.14 8.21 8.37 T:seakeyakv2 8.60 8.64 8.67 T:norx6441v1 8.67 8.72 8.87 T:oceankeyakv2 8.79 8.86 8.89 T:norx6444v1 9.04 9.08 9.10 T:norx3261v3 9.07 9.11 9.13 T:norx3261v2 10.23 10.29 10.34 T:norx6461v2 10.41 10.46 10.54 T:norx6461v3 10.80 10.90 11.05 T:lakekeyakv1 11.49 11.60 11.69 T:lakekeyakv2 12.18 12.23 12.27 T:norx6461v1 12.28 12.35 12.39 T:norx3261v1 13.37 13.44 13.49 T:tiaoxinv1 13.44 13.50 13.54 T:tiaoxinv2 13.92 13.95 13.95 ascon128av12 13.99 14.01 14.03 T:ascon96v1 14.17 14.20 14.21 T:ascon128av11 16.02 16.05 16.08 T:acorn128v2 17.03 17.04 17.06 T:acorn128v3 17.23 17.29 17.32 T:aegis128l 20.86 20.88 20.89 ascon128v12 21.09 21.13 21.15 T:ascon128v1 21.09 21.14 21.15 T:ascon128v11 21.12 21.16 21.20 T:aegis128 25.13 25.17 25.25 T:ketjemajorv2 25.44 25.49 25.53 T:aegis256 28.88 28.94 29.04 T:riverkeyakv2 31.77 31.83 31.92 T:ketjeminorv2 33.07 33.48 34.32 T:aes128gcmv1 36.69 36.84 36.96 T:deoxysi128v141 38.36 38.40 38.46 aegis128l 38.36 39.21 40.10 T:aes256gcmv1 41.39 41.59 41.73 T:deoxysi256v141 41.76 41.80 41.89 T:aes128otrcv3 48.26 48.83 49.18 T:aes128otrpv3 48.97 49.05 49.51 T:aes128otrsv3 49.80 49.84 49.87 T:aes128otrpv1 49.82 49.85 49.90 T:aes128otrpv2 49.81 49.86 49.89 T:aes128otrsv2 49.83 49.94 51.45 T:aes128otrsv1 56.02 56.09 56.18 T:aes256otrcv3 60.90 61.06 61.29 T:deoxysii128v141 61.16 61.29 61.45 T:proest256otrv1 62.96 63.01 63.06 T:aes256otrpv3 63.29 63.38 63.48 T:aes256otrsv3 64.07 64.11 64.16 T:aes256otrsv2 64.05 64.13 64.23 T:aes256otrpv1 64.07 64.16 64.24 T:aes256otrsv1 64.91 64.95 65.02 T:aes256otrpv2 69.03 69.22 69.73 T:deoxysii256v141 70.69 70.81 70.91 T:aesjambuv1 78.08 78.13 78.24 T:aes128n8t8clocv2 78.10 78.14 78.22 T:aes128n8clocv1 78.11 78.17 78.27 T:aes128n12t8clocv3 78.11 78.18 78.24 T:aes128n12t8clocv2 78.14 78.21 78.32 T:aes128n12clocv1 78.23 78.26 78.32 T:twine80n6t4clocv3 78.43 81.51 82.03 T:aes128n12t8silcv3 81.90 81.95 82.28 T:aes128n12t8silcv2 81.90 81.95 82.01 T:aes128n8t8silcv2 85.85 86.07 86.99 T:aeadaes128ocbtaglen128v1 87.41 87.51 87.68 T:aeadaes128ocbtaglen64v1 87.44 87.56 88.43 T:aeadaes128ocbtaglen96v1 93.39 95.23 95.68 T:aeadaes192ocbtaglen128v1 100.23 100.67 104.81 T:ketjesrv1 102.51 102.62 104.49 T:aeadaes192ocbtaglen96v1 102.62 102.83 102.99 T:aeadaes192ocbtaglen64v1 99.47 103.59 104.02 T:ketjesrv2 108.45 108.55 108.91 T:twine80n6t4clocv2 110.93 111.15 111.28 T:aezv4 113.79 113.86 114.93 T:aezv5 116.84 116.91 117.42 T:aeadaes256ocbtaglen128v1 118.48 118.62 119.00 T:aeadaes256ocbtaglen64v1 118.61 118.78 120.10 T:aeadaes256ocbtaglen96v1 138.16 138.29 138.60 T:proest128otrv1 169.51 169.62 170.17 T:present80n6t4silcv3 176.99 177.11 177.90 T:ketjejrv1 182.22 182.31 182.90 T:colm0v1 185.42 185.52 185.89 T:colm127v1 289.92 290.06 290.97 T:ketjejrv2 339.61 339.69 341.52 T:deoxysneq128128v13 339.90 340.01 341.91 T:deoxysneq128128v1 388.63 389.76 395.93 T:aezv3 433.67 433.85 435.08 T:deoxyseq128128v13 448.19 448.67 451.05 T:aezv1 545.82 546.15 547.91 T:deoxysneq256128v1 545.51 547.93 553.31 T:deoxysneq256128v13 677.06 678.62 682.95 T:deoxyseq128128v1 740.83 741.09 741.54 T:led80n6t4silcv3 815.00 817.06 823.08 T:deoxyseq256128v13 1089.92 1092.34 1096.22 T:deoxyseq256128v1 1689.36? 1876.38? 1917.30? T:acorn128 11747.53 11750.46 11757.46 T:led80n6t4silcv2 11752.58 11757.83 11766.41 T:led80n6silcv1 16764.48 16768.23 16778.68 T:present80n6t4silcv2 16767.67 16773.11 16789.81 T:present80n6silcv1 53752.01 53818.12 53850.14 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 2.94 2.94 2.95 T:morus640128v2 2.99 3.00 3.01 T:morus640128v1 3.18 3.19 3.20 T:morus1280128v1 3.19 3.20 3.20 T:morus1280128v2 3.19 3.20 3.20 T:morus1280256v2 3.19 3.20 3.20 T:morus1280256v1 6.42 6.42 6.42 T:norx3241v3 6.47 6.48 6.48 T:norx3241v2 6.71 6.87 7.00 T:lunarkeyakv2 7.56 7.58 7.69 T:norx6441v2 7.56 7.58 7.59 T:norx6441v3 8.03 8.05 8.06 T:norx6444v3 8.04 8.06 8.08 T:norx6444v2 8.16 8.16 8.16 T:norx3241v1 8.15 8.19 8.22 T:seakeyakv2 8.69 8.74 8.76 T:oceankeyakv2 8.75 8.77 8.79 T:norx6441v1 8.95 8.96 8.99 T:norx6444v1 9.07 9.08 9.08 T:norx3261v3 9.11 9.11 9.11 T:norx3261v2 10.41 10.42 10.48 T:norx6461v2 10.58 10.61 10.62 T:norx6461v3 10.96 11.03 11.12 T:lakekeyakv1 11.69 11.74 11.93 T:lakekeyakv2 12.35 12.35 12.36 T:norx3261v1 12.34 12.36 12.37 T:norx6461v1 13.39 13.44 13.48 T:tiaoxinv1 13.45 13.50 13.55 T:tiaoxinv2 13.94 13.95 13.96 ascon128av12 13.97 14.01 14.02 T:ascon96v1 14.17 14.20 14.21 T:ascon128av11 16.02 16.04 16.07 T:acorn128v2 17.01 17.03 17.06 T:acorn128v3 17.24 17.30 17.33 T:aegis128l 20.87 20.88 20.88 ascon128v12 21.12 21.13 21.14 T:ascon128v1 21.12 21.13 21.14 T:ascon128v11 21.13 21.16 21.22 T:aegis128 25.27 25.29 25.42 T:ketjemajorv2 25.58 25.63 25.65 T:aegis256 28.92 28.95 28.99 T:riverkeyakv2 31.90 31.97 32.05 T:ketjeminorv2 33.25 33.53 35.19 T:aes128gcmv1 36.87 36.96 37.08 T:deoxysi128v141 38.49 38.54 38.63 aegis128l 38.97 39.43 41.35 T:aes256gcmv1 41.65 41.68 41.81 T:deoxysi256v141 48.90 48.92 49.00 T:aes128otrpv3 49.10 49.13 49.23 T:aes128otrsv3 49.93 49.96 50.08 T:aes128otrpv2 49.89 49.98 50.14 T:aes128otrsv1 49.95 49.98 50.33 T:aes128otrpv1 49.93 50.01 50.28 T:aes128otrsv2 42.23? 55.02? 59.62? T:aes128otrcv3 56.04 56.07 56.13 T:aes256otrcv3 61.07 61.13 61.45 T:deoxysii128v141 61.19 61.24 61.36 T:proest256otrv1 63.10 63.16 63.29 T:aes256otrpv3 63.43 63.52 63.61 T:aes256otrsv3 64.13 64.24 64.37 T:aes256otrsv1 64.21 64.25 64.83 T:aes256otrsv2 64.23 64.26 64.36 T:aes256otrpv1 65.10 65.14 65.21 T:aes256otrpv2 69.16 69.27 69.69 T:deoxysii256v141 70.68 70.73 70.97 T:aesjambuv1 78.14 78.18 78.23 T:aes128n12t8clocv2 78.13 78.18 78.25 T:aes128n8t8clocv2 78.13 78.20 78.79 T:aes128n8clocv1 78.14 78.22 78.29 T:aes128n12t8clocv3 78.14 78.22 78.34 T:aes128n12clocv1 78.24 78.27 78.32 T:twine80n6t4clocv3 78.71 81.94 82.06 T:aes128n12t8silcv3 81.91 81.95 82.01 T:aes128n12t8silcv2 81.93 81.98 82.42 T:aes128n8t8silcv2 85.88 85.95 86.03 T:aeadaes128ocbtaglen128v1 87.46 87.51 88.00 T:aeadaes128ocbtaglen64v1 87.50 87.56 87.78 T:aeadaes128ocbtaglen96v1 93.26 94.31 95.43 T:aeadaes192ocbtaglen128v1 100.36 101.25 104.93 T:ketjesrv1 102.52 102.57 102.60 T:aeadaes192ocbtaglen96v1 102.52 102.95 103.14 T:aeadaes192ocbtaglen64v1 99.62 103.73 104.16 T:ketjesrv2 106.34 108.52 109.22 T:twine80n6t4clocv2 110.51 110.86 111.87 T:aezv4 113.56 113.68 114.89 T:aezv5 116.86 116.92 117.75 T:aeadaes256ocbtaglen128v1 118.48 118.95 119.05 T:aeadaes256ocbtaglen64v1 118.75 119.66 120.17 T:aeadaes256ocbtaglen96v1 138.21 138.26 138.39 T:proest128otrv1 169.52 169.54 169.61 T:present80n6t4silcv3 177.25 177.41 177.72 T:ketjejrv1 182.18 182.36 183.50 T:colm0v1 182.51 182.57 183.13 T:colm127v1 290.11 290.32 291.92 T:ketjejrv2 339.68 339.84 341.86 T:deoxysneq128128v13 339.94 340.23 342.95 T:deoxysneq128128v1 388.36 388.55 390.41 T:aezv3 433.81 434.16 435.74 T:deoxyseq128128v13 447.48 448.36 449.96 T:aezv1 545.66 545.89 551.17 T:deoxysneq256128v13 545.89 546.28 548.03 T:deoxysneq256128v1 676.99 678.68 679.60 T:deoxyseq128128v1 740.67 740.98 741.63 T:led80n6t4silcv3 814.26 815.46 817.97 T:deoxyseq256128v13 1088.22 1093.88 1096.30 T:deoxyseq256128v1 1455.81 1461.84 1465.51 aes256gcmv1 1683.07? 1876.47? 1916.19? T:acorn128 11745.12 11748.78 11765.32 T:led80n6t4silcv2 11753.45 11758.39 11770.08 T:led80n6silcv1 16764.88 16772.92 16785.67 T:present80n6t4silcv2 16765.72 16777.60 16791.71 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.66 2.69 2.74 T:morus640128v2 2.76 2.79 2.81 T:morus640128v1 2.95 2.98 3.02 T:morus1280128v1 2.99 3.02 3.07 T:morus1280256v1 3.02 3.05 3.09 T:morus1280256v2 3.02 3.06 3.07 T:morus1280128v2 6.09 6.10 6.12 T:norx3241v2 6.18 6.18 6.19 T:norx3241v3 6.85 6.91 6.93 T:seakeyakv2 7.05 7.07 7.10 T:norx6441v3 7.09 7.11 7.12 T:norx6441v2 7.15 7.19 7.32 T:oceankeyakv2 7.46 7.48 7.49 T:norx6444v2 7.46 7.48 7.49 T:norx6444v3 7.68 7.75 7.82 T:norx3241v1 8.39 8.39 8.41 T:norx6441v1 8.42 8.44 8.47 T:norx6444v1 8.82 8.83 8.84 T:norx3261v2 8.89 8.89 8.89 T:norx3261v3 8.85 8.89 9.03 T:lunarkeyakv2 10.42 10.44 10.46 T:norx6461v3 10.48 10.50 10.52 T:norx6461v2 10.51 10.57 10.62 T:lakekeyakv2 10.54 10.59 10.73 T:lakekeyakv1 11.91 11.95 12.01 T:norx3261v1 11.97 11.98 11.99 T:norx6461v1 13.74 13.79 13.85 T:tiaoxinv2 13.77 13.79 13.81 T:ascon128av11 13.80 13.82 13.86 ascon128av12 13.85 13.90 13.96 T:tiaoxinv1 13.99 14.01 14.03 T:ascon96v1 16.02 16.03 16.06 T:acorn128v3 16.40 16.42 16.47 T:acorn128v2 16.89 16.92 16.95 T:aegis128l 20.58 20.60 20.68 T:riverkeyakv2 20.61 20.63 20.67 ascon128v12 20.93 20.99 21.04 T:aegis128 19.88 21.29 21.36 T:ascon128v11 21.29 21.31 21.36 T:ascon128v1 22.20 22.23 22.28 T:ketjemajorv2 24.93 24.95 24.97 T:aegis256 24.81 25.28 26.19 T:aes128gcmv1 27.75 28.12 29.38 T:aes256gcmv1 28.91 28.98 29.42 T:ketjeminorv2 31.01 31.16 31.37 T:deoxysi128v141 32.71 32.78 33.10 aegis128l 34.82 35.00 35.31 T:deoxysi256v141 41.64 41.69 41.79 T:aes128otrcv3 42.92 42.94 43.26 T:aes128otrsv2 42.93 42.96 43.02 T:aes128otrsv1 43.46 43.57 43.63 T:aes128otrsv3 45.24 45.28 45.33 T:aes128otrpv2 45.23 45.29 45.34 T:aes128otrpv1 46.08 46.26 46.67 T:deoxysii128v141 46.31 46.34 46.40 T:aes128otrpv3 53.21 53.40 53.63 T:deoxysii256v141 55.93 56.05 57.14 T:aes256otrcv3 57.20 57.27 57.41 T:aes128n12clocv1 57.23 57.33 57.46 T:aes128n12t8clocv2 57.21 57.39 57.46 T:aes128n8t8clocv2 57.37 57.44 57.57 T:aes256otrsv2 57.39 57.45 57.50 T:aes256otrsv1 57.19 57.45 58.54 T:aes128n8clocv1 57.27 57.47 57.87 T:aes128n12t8clocv3 57.97 58.16 58.67 T:aes256otrsv3 59.66 59.72 60.09 T:aes256otrpv2 59.74 59.77 59.89 T:aes256otrpv1 60.78 60.84 61.08 T:aes256otrpv3 61.19 61.25 61.48 T:aes128n12t8silcv3 61.23 61.27 61.33 T:aes128n8t8silcv2 61.23 61.29 61.42 T:aes128n12t8silcv2 61.81 61.92 62.01 T:proest256otrv1 69.15 69.17 69.34 T:aeadaes128ocbtaglen64v1 69.19 69.32 69.44 T:aeadaes128ocbtaglen96v1 69.30 69.38 69.73 T:aeadaes128ocbtaglen128v1 70.75 70.84 70.96 T:aesjambuv1 73.26 73.62 74.20 T:aeadaes192ocbtaglen128v1 77.86 77.90 78.11 T:twine80n6t4clocv3 81.49 81.55 81.69 T:aeadaes192ocbtaglen64v1 81.51 81.58 81.75 T:aeadaes192ocbtaglen96v1 86.15 87.14 90.59 T:ketjesrv1 92.45 92.51 92.67 T:aeadaes256ocbtaglen64v1 92.49 92.51 92.76 T:aeadaes256ocbtaglen96v1 92.64 92.69 92.79 T:aeadaes256ocbtaglen128v1 92.70 92.90 93.79 T:aezv4 93.13 93.31 94.28 T:aezv5 98.33 101.87 102.24 T:ketjesrv2 103.52 103.57 104.02 T:twine80n6t4clocv2 110.32 110.43 110.92 T:colm127v1 110.64 110.76 111.31 T:colm0v1 139.50 139.72 140.40 T:proest128otrv1 156.39 156.47 157.08 T:ketjejrv1 168.95 168.97 169.30 T:present80n6t4silcv3 214.31 214.44 215.13 T:deoxysneq128128v13 214.55 214.70 215.42 T:deoxysneq128128v1 288.08 288.29 288.90 T:ketjejrv2 292.07 293.32 295.65 T:aezv3 298.00 298.70 301.22 T:aezv1 319.43 319.53 320.26 T:deoxyseq128128v1 323.63 323.74 324.50 T:deoxyseq128128v13 404.35 404.47 404.95 T:deoxysneq256128v1 404.12 404.47 404.87 T:deoxysneq256128v13 604.78 605.26 606.70 T:deoxyseq256128v1 608.78 609.19 609.35 T:deoxyseq256128v13 740.41 740.55 740.98 T:led80n6t4silcv3 1725.33? 1756.08? 1948.72? T:acorn128 8807.15 8810.78 8821.93 T:led80n6t4silcv2 8809.57 8813.76 8823.13 T:led80n6silcv1 12578.49 12581.16 12595.35 T:present80n6t4silcv2 12579.17 12581.86 12592.56 T:present80n6silcv1 27615.73 27640.79 27681.16 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.63 2.67 2.72 T:morus640128v1 2.66 2.69 2.74 T:morus640128v2 2.86 2.90 2.98 T:morus1280128v1 2.87 2.90 2.98 T:morus1280256v2 2.86 2.90 2.96 T:morus1280128v2 2.85 2.91 2.96 T:morus1280256v1 6.13 6.15 6.19 T:norx3241v2 6.13 6.17 6.25 T:norx3241v3 6.87 6.96 7.05 T:seakeyakv2 7.15 7.19 7.35 T:oceankeyakv2 7.26 7.32 7.43 T:norx6441v2 7.27 7.34 7.47 T:norx6441v3 7.58 7.62 7.67 T:norx6444v2 7.60 7.62 7.67 T:norx6444v3 7.78 7.85 7.93 T:norx3241v1 8.41 8.45 8.52 T:norx6441v1 8.53 8.56 8.62 T:norx6444v1 8.80 8.85 8.94 T:norx3261v3 8.81 8.86 8.93 T:norx3261v2 8.82 8.94 9.12 T:lunarkeyakv2 10.31 10.39 10.47 T:lakekeyakv2 10.31 10.42 10.51 T:norx6461v2 10.47 10.54 10.65 T:norx6461v3 10.59 10.66 10.86 T:lakekeyakv1 11.99 12.04 12.09 T:norx6461v1 11.95 12.04 12.13 T:norx3261v1 12.54 12.63 12.70 T:tiaoxinv1 12.56 12.65 12.75 T:tiaoxinv2 13.75 13.79 13.84 ascon128av12 13.96 14.02 14.06 T:ascon96v1 14.04 14.07 14.13 T:ascon128av11 16.11 16.17 16.44 T:acorn128v2 16.35 16.41 16.50 T:acorn128v3 16.75 16.79 16.86 T:aegis128l 20.55 20.57 20.64 ascon128v12 20.64 20.72 20.78 T:aegis128 20.74 20.80 20.92 T:riverkeyakv2 19.63 21.10 21.18 T:ascon128v11 21.10 21.13 21.17 T:ascon128v1 21.40 21.45 21.52 T:ketjemajorv2 24.93 24.98 25.57 T:aegis256 24.85 25.18 25.56 T:aes128gcmv1 27.76 28.08 28.38 T:aes256gcmv1 29.13 29.23 29.64 T:ketjeminorv2 32.58 32.63 32.70 aegis128l 34.00 34.13 34.42 T:deoxysi128v141 38.42 38.58 39.67 T:deoxysi256v141 41.74 41.77 41.81 T:aes128otrcv3 43.92 44.01 44.05 T:aes128otrsv3 44.38 44.42 44.44 T:aes128otrsv2 44.37 44.43 45.34 T:aes128otrsv1 46.49 46.56 46.59 T:aes128otrpv3 46.69 46.73 47.09 T:aes128otrpv2 46.73 46.79 48.40 T:aes128otrpv1 46.75 46.86 47.87 T:deoxysii128v141 53.32 53.52 54.33 T:deoxysii256v141 56.02 56.07 56.16 T:aes256otrcv3 58.07 58.11 58.38 T:aes128n12clocv1 58.04 58.11 58.43 T:aes128n8t8clocv2 58.03 58.14 58.21 T:aes128n8clocv1 58.05 58.15 58.50 T:aes128n12t8clocv2 58.06 58.25 58.37 T:aes128n12t8clocv3 58.43 58.49 58.59 T:aes256otrsv3 58.83 58.91 59.01 T:aes256otrsv2 58.86 58.96 59.57 T:aes256otrsv1 60.96 61.03 61.13 T:aes256otrpv3 61.11 61.16 61.23 T:aes128n12t8silcv2 61.12 61.17 61.25 T:aes128n12t8silcv3 61.13 61.18 61.30 T:aes256otrpv2 61.10 61.18 61.26 T:proest256otrv1 61.14 61.21 61.35 T:aes128n8t8silcv2 61.12 61.21 61.59 T:aes256otrpv1 70.86 70.98 71.25 T:aesjambuv1 76.93 77.05 77.15 T:aeadaes128ocbtaglen64v1 76.99 77.11 77.22 T:aeadaes128ocbtaglen96v1 77.12 77.22 77.73 T:aeadaes128ocbtaglen128v1 77.87 77.94 78.10 T:twine80n6t4clocv3 83.20 83.87 84.63 T:aeadaes192ocbtaglen128v1 87.15 87.56 91.60 T:ketjesrv1 90.58 90.76 91.84 T:aezv4 90.91 90.99 91.62 T:aeadaes192ocbtaglen96v1 90.89 91.02 91.18 T:aeadaes192ocbtaglen64v1 91.08 91.15 91.71 T:aezv5 92.37 95.65 96.01 T:ketjesrv2 103.89 104.03 104.37 T:twine80n6t4clocv2 104.40 104.52 104.67 T:aeadaes256ocbtaglen96v1 104.53 104.63 104.97 T:aeadaes256ocbtaglen128v1 104.40 104.66 105.08 T:aeadaes256ocbtaglen64v1 125.93 126.01 126.61 T:colm0v1 127.38 127.47 128.28 T:colm127v1 138.41 138.54 139.16 T:proest128otrv1 154.81 154.92 155.41 T:ketjejrv1 168.79 168.85 169.19 T:present80n6t4silcv3 276.98 277.19 278.29 T:deoxysneq128128v13 277.21 277.33 280.00 T:deoxysneq128128v1 277.10 277.34 278.24 T:ketjejrv2 290.05 291.05 295.15 T:aezv3 296.37 296.70 297.76 T:aezv1 323.50 323.94 324.93 T:deoxyseq128128v13 445.87 446.40 448.64 T:deoxyseq128128v1 474.48 475.96 478.67 T:deoxysneq256128v13 475.03 476.00 478.19 T:deoxysneq256128v1 608.94 609.21 609.46 T:deoxyseq256128v13 740.30 740.46 740.62 T:led80n6t4silcv3 747.18 749.52 752.29 T:deoxyseq256128v1 1712.89? 1889.76? 1915.42? T:acorn128 8809.69 8814.14 8819.68 T:led80n6t4silcv2 8811.92 8814.74 8824.26 T:led80n6silcv1 12575.88 12578.42 12583.21 T:present80n6t4silcv2 12578.59 12580.97 12594.36 T:present80n6silcv1 27599.76 27627.53 27654.68 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 2.66 2.66 2.67 T:morus640128v1 2.69 2.69 2.71 T:morus640128v2 2.89 2.90 2.90 T:morus1280128v2 2.90 2.90 2.90 T:morus1280256v1 2.90 2.90 2.91 T:morus1280128v1 2.90 2.90 2.90 T:morus1280256v2 6.15 6.15 6.16 T:norx3241v2 6.17 6.17 6.17 T:norx3241v3 6.88 6.93 7.11 T:seakeyakv2 7.19 7.21 7.29 T:oceankeyakv2 7.37 7.38 7.40 T:norx6441v2 7.40 7.41 7.45 T:norx6441v3 7.68 7.70 7.74 T:norx6444v2 7.67 7.70 7.77 T:norx6444v3 7.84 7.85 7.87 T:norx3241v1 8.51 8.53 8.55 T:norx6441v1 8.61 8.62 8.66 T:norx6444v1 8.85 8.85 8.86 T:norx3261v3 8.85 8.86 8.86 T:norx3261v2 8.84 8.90 9.00 T:lunarkeyakv2 10.43 10.46 10.49 T:lakekeyakv2 10.48 10.50 10.85 T:norx6461v2 10.59 10.61 10.65 T:norx6461v3 10.62 10.65 10.77 T:lakekeyakv1 12.03 12.04 12.04 T:norx3261v1 12.08 12.10 12.22 T:norx6461v1 12.60 12.63 12.84 T:tiaoxinv1 12.61 12.64 12.69 T:tiaoxinv2 13.79 13.79 13.79 ascon128av12 13.99 14.01 14.03 T:ascon96v1 14.05 14.07 14.10 T:ascon128av11 16.15 16.16 16.20 T:acorn128v2 16.40 16.41 16.42 T:acorn128v3 16.76 16.81 16.83 T:aegis128l 20.56 20.56 20.59 ascon128v12 20.68 20.70 20.75 T:aegis128 20.78 20.82 20.85 T:riverkeyakv2 19.64 21.12 21.15 T:ascon128v11 21.12 21.13 21.16 T:ascon128v1 21.48 21.52 21.59 T:ketjemajorv2 24.98 25.01 25.05 T:aegis256 25.07 25.29 26.50 T:aes128gcmv1 27.68 28.08 28.32 T:aes256gcmv1 29.19 29.28 29.75 T:ketjeminorv2 32.64 32.68 32.72 aegis128l 33.97 34.04 35.28 T:deoxysi128v141 38.67 38.75 39.84 T:deoxysi256v141 41.76 41.78 41.80 T:aes128otrcv3 44.04 44.08 44.13 T:aes128otrsv3 44.46 44.49 44.59 T:aes128otrsv1 44.46 44.52 46.02 T:aes128otrsv2 46.60 46.64 47.02 T:aes128otrpv3 46.77 46.80 46.86 T:aes128otrpv1 46.77 46.82 46.88 T:aes128otrpv2 46.83 46.87 47.16 T:deoxysii128v141 53.52 53.61 53.87 T:deoxysii256v141 56.04 56.12 56.48 T:aes256otrcv3 58.05 58.08 58.14 T:aes128n8t8clocv2 58.05 58.10 58.21 T:aes128n12t8clocv2 58.07 58.11 58.17 T:aes128n12clocv1 58.07 58.26 58.76 T:aes128n8clocv1 58.09 58.27 58.54 T:aes128n12t8clocv3 58.50 58.61 58.72 T:aes256otrsv3 58.93 58.97 59.06 T:aes256otrsv2 58.90 58.98 59.08 T:aes256otrsv1 61.06 61.10 61.19 T:aes256otrpv3 61.12 61.18 61.44 T:aes128n12t8silcv2 61.13 61.18 61.39 T:aes128n12t8silcv3 61.17 61.19 61.75 T:proest256otrv1 61.16 61.19 61.31 T:aes128n8t8silcv2 61.19 61.52 62.14 T:aes256otrpv2 61.26 61.63 62.16 T:aes256otrpv1 70.88 70.93 72.21 T:aesjambuv1 77.02 77.08 77.13 T:aeadaes128ocbtaglen96v1 77.09 77.18 77.55 T:aeadaes128ocbtaglen64v1 77.15 77.19 77.24 T:aeadaes128ocbtaglen128v1 77.91 77.94 77.98 T:twine80n6t4clocv3 83.29 84.27 85.18 T:aeadaes192ocbtaglen128v1 87.23 87.72 91.63 T:ketjesrv1 90.51 90.63 91.61 T:aezv4 90.92 91.02 91.19 T:aezv5 90.96 91.16 91.56 T:aeadaes192ocbtaglen96v1 90.93 91.18 91.57 T:aeadaes192ocbtaglen64v1 92.05 95.69 96.02 T:ketjesrv2 103.98 104.02 104.21 T:twine80n6t4clocv2 104.52 104.56 104.89 T:aeadaes256ocbtaglen128v1 104.60 104.63 105.25 T:aeadaes256ocbtaglen64v1 104.52 105.00 105.21 T:aeadaes256ocbtaglen96v1 125.94 125.97 126.37 T:colm127v1 125.95 126.04 126.39 T:colm0v1 138.45 138.56 139.73 T:proest128otrv1 154.93 155.03 155.52 T:ketjejrv1 168.83 168.88 169.24 T:present80n6t4silcv3 277.03 277.13 278.26 T:deoxysneq128128v13 277.04 277.24 279.44 T:deoxysneq128128v1 277.20 277.29 277.94 T:ketjejrv2 290.02 290.58 291.89 T:aezv3 296.14 296.69 297.60 T:aezv1 323.72 323.88 324.64 T:deoxyseq128128v13 445.29 446.38 447.74 T:deoxyseq128128v1 475.05 475.81 476.10 T:deoxysneq256128v1 475.00 476.03 478.72 T:deoxysneq256128v13 608.93 609.38 609.85 T:deoxyseq256128v13 740.26 740.41 740.62 T:led80n6t4silcv3 745.13 747.85 749.09 T:deoxyseq256128v1 1455.39 1461.18 1463.02 aes256gcmv1 1713.79? 1889.94? 1916.68? T:acorn128 8807.49 8811.92 8814.73 T:led80n6t4silcv2 8811.29 8814.70 8823.43 T:led80n6silcv1 12577.64 12580.37 12595.03 T:present80n6t4silcv2 12578.09 12583.74 12596.10 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 2.40 2.44 2.45 T:morus640128v1 2.43 2.44 2.45 T:morus640128v2 2.58 2.63 2.66 T:morus1280128v1 2.61 2.66 2.67 T:morus1280256v1 2.62 2.67 2.68 T:morus1280128v2 2.63 2.67 2.67 T:morus1280256v2 5.61? 5.69? 6.86? T:oceankeyakv2 5.56? 5.69? 9.72? T:lunarkeyakv2 5.77 5.81 5.82 T:norx3241v2 5.93 5.96 5.98 T:norx3241v3 6.46 6.51 6.55 T:seakeyakv2 6.96 7.00 7.01 T:norx6441v2 6.94 7.01 7.04 T:norx6441v3 7.27 7.31 7.34 T:norx6444v2 7.28 7.31 7.32 T:norx6444v3 7.46 7.53 7.57 T:norx3241v1 8.24 8.25 8.27 T:norx6441v1 8.20 8.26 8.28 T:norx6444v1 8.64 8.65 8.67 T:norx3261v2 8.63 8.67 8.70 T:norx3261v3 8.59 8.68 8.71 T:lakekeyakv2 9.61 9.76 9.85 T:lakekeyakv1 10.32 10.40 10.42 T:norx6461v3 10.36 10.40 10.43 T:norx6461v2 11.69 11.73 11.75 T:norx3261v1 11.81 11.84 11.87 T:norx6461v1 13.60 13.63 13.64 ascon128av12 13.67 13.71 13.75 T:tiaoxinv1 13.71 13.73 13.78 T:tiaoxinv2 13.74 13.76 13.77 T:ascon128av11 14.11 14.14 14.16 T:ascon96v1 15.48 15.52 15.55 T:acorn128v3 16.00 16.02 16.07 T:acorn128v2 16.29 16.77 17.47 T:aes128gcmv1 16.18 16.84 17.86 T:aes256gcmv1 16.75 16.85 17.00 T:aegis128l 17.71 17.76 17.81 T:ketjemajorv2 18.52 18.61 18.64 T:riverkeyakv2 20.24 20.25 20.26 ascon128v12 20.68 20.72 20.76 T:aegis128 20.99 21.00 21.03 T:ascon128v11 20.99? 21.00? 41.19? T:ascon128v1 24.40 24.43 24.50 T:aegis256 26.43 26.48 26.53 T:ketjeminorv2 26.81 26.85 26.88 aegis128l 30.39 30.59 30.74 T:deoxysii128v141 30.36 30.67 30.76 T:deoxysi128v141 34.32 34.44 34.62 T:deoxysi256v141 34.35 34.50 34.62 T:deoxysii256v141 37.88 37.93 37.96 T:aes128n8t8clocv2 37.91 37.95 38.10 T:aes128n12t8clocv2 37.91 37.96 38.01 T:aes128n8clocv1 37.91 37.96 38.07 T:aes128n12t8clocv3 37.93 37.97 38.00 T:aes128n12clocv1 38.95 38.98 39.02 T:aes128otrsv1 38.96 38.99 39.04 T:aes128otrsv2 38.95 39.00 39.09 T:aes128otrsv3 40.36 40.38 40.69 T:aes128n8t8silcv2 40.37 40.41 40.45 T:aes128n12t8silcv3 40.35 40.41 40.48 T:aes128n12t8silcv2 41.79 41.87 42.65 T:aes128otrcv3 43.60 43.62 43.70 T:aes128otrpv2 43.59 43.67 44.50 T:aes128otrpv1 44.34 44.39 44.45 T:aes128otrpv3 53.55 53.58 53.68 T:aes256otrsv3 53.63 53.67 53.72 T:aes256otrsv1 53.64 53.70 53.79 T:aes256otrsv2 56.04 56.11 56.17 T:aes256otrcv3 58.25 58.31 58.53 T:aes256otrpv1 59.03 59.09 59.15 T:aes256otrpv3 59.05 59.10 59.15 T:aes256otrpv2 61.06 61.10 61.22 T:proest256otrv1 66.42 66.49 66.62 T:aeadaes128ocbtaglen96v1 66.48 66.73 67.09 T:aeadaes128ocbtaglen64v1 68.17 68.29 68.59 T:aezv5 68.29 68.45 68.75 T:aeadaes128ocbtaglen128v1 69.28 69.38 69.55 T:colm127v1 69.65 69.76 69.93 T:colm0v1 70.38 70.47 71.00 T:aezv4 70.68 70.73 70.79 T:aesjambuv1 72.44 73.23 74.28 T:aeadaes192ocbtaglen128v1 73.94 74.38 78.52 T:ketjesrv1 77.59 77.64 77.72 T:twine80n6t4clocv3 79.20 79.30 79.61 T:aeadaes192ocbtaglen96v1 79.19 79.35 79.49 T:aeadaes192ocbtaglen64v1 83.45 87.59 88.01 T:ketjesrv2 90.26 90.32 90.39 T:aeadaes256ocbtaglen96v1 90.29 90.41 90.67 T:aeadaes256ocbtaglen64v1 92.18 92.26 92.36 T:aeadaes256ocbtaglen128v1 99.46 99.56 100.19 T:twine80n6t4clocv2 132.56 132.65 133.28 T:ketjejrv1 138.71 138.77 138.89 T:proest128otrv1 144.28 144.57 145.84 T:aezv1 168.14 168.17 168.52 T:present80n6t4silcv3 191.58 191.67 191.90 T:aezv3 213.27 213.42 214.18 T:deoxyseq128128v1 213.54 213.65 213.88 T:deoxyseq128128v13 214.14 214.19 214.25 T:deoxysneq128128v13 214.49 214.56 215.72 T:deoxysneq128128v1 264.26 264.33 265.32 T:ketjejrv2 403.84 404.16 405.97 T:deoxysneq256128v13 393.52 404.34 405.58 T:deoxyseq256128v1 404.21 404.35 405.69 T:deoxysneq256128v1 403.24 404.59 405.63 T:deoxyseq256128v13 739.34 739.69 740.17 T:led80n6t4silcv3 1454.89 1456.19 1458.60 aes256gcmv1 1711.65? 1757.01? 1972.24? T:acorn128 5870.71 5872.25 5877.46 T:led80n6t4silcv2 5874.40 5878.89 5881.53 T:led80n6silcv1 8384.08 8387.56 8388.79 T:present80n6t4silcv2 8385.67 8388.23 8392.47 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 2.29 2.32 2.34 T:morus640128v1 2.40 2.44 2.46 T:morus640128v2 2.57 2.60 2.61 T:morus1280128v1 2.57 2.60 2.62 T:morus1280256v2 2.52 2.60 2.62 T:morus1280256v1 2.55 2.60 2.61 T:morus1280128v2 5.64 5.66 5.70 T:oceankeyakv2 5.56? 5.68? 6.35? T:lunarkeyakv2 5.77 5.82 5.82 T:norx3241v2 5.88 5.92 5.93 T:norx3241v3 6.46 6.49 6.54 T:seakeyakv2 7.13 7.18 7.20 T:norx6441v2 7.17 7.24 7.28 T:norx6441v3 7.28 7.30 7.32 T:norx6444v3 7.27 7.30 7.32 T:norx6444v2 7.50 7.53 7.54 T:norx3241v1 8.23 8.25 8.28 T:norx6444v1 8.24 8.26 8.28 T:norx6441v1 8.56 8.61 8.65 T:norx3261v2 8.58 8.63 8.66 T:norx3261v3 8.65 8.69 8.71 T:lakekeyakv2 9.72 9.77 9.81 T:lakekeyakv1 10.49 10.55 10.58 T:norx6461v2 10.52 10.62 10.65 T:norx6461v3 11.69 11.73 11.76 T:norx3261v1 11.68 11.78 11.82 T:tiaoxinv2 11.76 11.81 11.86 T:tiaoxinv1 11.82 11.84 11.86 T:norx6461v1 13.60 13.63 13.63 ascon128av12 13.92 13.94 13.97 T:ascon128av11 13.96 14.01 14.05 T:ascon96v1 15.76 15.77 15.80 T:acorn128v3 16.25 16.27 16.31 T:acorn128v2 16.23 16.29 16.32 T:aegis128l 16.49 16.74 17.36 T:aes128gcmv1 16.52 17.34 18.13 T:aes256gcmv1 17.70 17.78 17.82 T:ketjemajorv2 18.59 18.61 18.65 T:riverkeyakv2 20.17 20.23 20.26 T:aegis128 20.24 20.25 20.29 ascon128v12 21.10 21.13 21.14 T:ascon128v11 21.11? 21.14? 42.17? T:ascon128v1 24.40 24.44 24.51 T:aegis256 26.43 26.48 26.54 T:ketjeminorv2 26.80 26.85 26.89 aegis128l 30.47 30.58 30.66 T:deoxysii128v141 30.51 30.60 30.76 T:deoxysi128v141 34.36 34.50 34.68 T:deoxysii256v141 34.31 34.53 35.01 T:deoxysi256v141 37.89 37.93 37.97 T:aes128n8t8clocv2 37.93 37.95 37.98 T:aes128n12t8clocv2 37.93 37.97 37.99 T:aes128n8clocv1 37.93 37.99 38.40 T:aes128n12t8clocv3 37.94 38.01 38.55 T:aes128n12clocv1 38.96 38.97 39.03 T:aes128otrsv1 38.96 38.98 39.01 T:aes128otrsv2 38.97 39.02 39.09 T:aes128otrsv3 40.36 40.39 40.44 T:aes128n12t8silcv3 40.37 40.40 40.44 T:aes128n8t8silcv2 40.36 40.42 40.47 T:aes128n12t8silcv2 42.17 42.25 42.32 T:aes128otrcv3 43.59 43.63 43.66 T:aes128otrpv2 43.61 43.64 43.70 T:aes128otrpv1 44.32 44.36 44.45 T:aes128otrpv3 53.55 53.62 53.68 T:aes256otrsv3 53.62 53.67 53.78 T:aes256otrsv2 53.64 53.67 53.72 T:aes256otrsv1 56.05 56.13 56.32 T:aes256otrcv3 58.27 58.40 59.19 T:aes256otrpv1 59.03 59.07 59.17 T:aes256otrpv3 58.30 59.09 59.14 T:aes256otrpv2 61.13 61.17 61.22 T:proest256otrv1 66.53 66.58 66.65 T:aeadaes128ocbtaglen96v1 66.48 66.61 66.81 T:aeadaes128ocbtaglen64v1 68.25 68.32 68.36 T:aezv5 68.36 68.51 68.59 T:aeadaes128ocbtaglen128v1 69.34 69.39 69.54 T:colm127v1 69.69 69.75 69.90 T:colm0v1 70.42 70.47 70.60 T:aezv4 71.05 71.12 71.21 T:aesjambuv1 72.36 73.36 74.41 T:aeadaes192ocbtaglen128v1 73.97 74.56 78.50 T:ketjesrv1 77.61 77.63 77.91 T:twine80n6t4clocv3 79.20 79.27 79.45 T:aeadaes192ocbtaglen64v1 79.29 79.38 79.52 T:aeadaes192ocbtaglen96v1 84.46 87.59 88.10 T:ketjesrv2 90.28 90.32 90.41 T:aeadaes256ocbtaglen64v1 90.35 90.38 90.48 T:aeadaes256ocbtaglen96v1 92.17 92.38 93.03 T:aeadaes256ocbtaglen128v1 99.47 99.51 99.69 T:twine80n6t4clocv2 132.58 132.63 132.73 T:ketjejrv1 138.71 138.81 139.87 T:proest128otrv1 144.36 144.47 148.05 T:aezv1 167.99 168.20 168.52 T:present80n6t4silcv3 191.46 191.60 191.86 T:aezv3 213.61 213.71 213.85 T:deoxyseq128128v13 213.43 213.90 214.18 T:deoxyseq128128v1 214.11 214.23 215.83 T:deoxysneq128128v1 214.24 214.30 214.53 T:deoxysneq128128v13 264.23 264.35 265.30 T:ketjejrv2 399.53 403.49 405.72 T:deoxyseq256128v1 403.98 404.12 405.17 T:deoxysneq256128v13 403.89 404.17 405.76 T:deoxysneq256128v1 403.32 404.56 405.15 T:deoxyseq256128v13 739.36 739.47 741.07 T:led80n6t4silcv3 1456.30 1457.47 1459.73 aes256gcmv1 1725.52? 1903.45? 1944.96? T:acorn128 5869.71 5872.52 5875.28 T:led80n6t4silcv2 5878.23 5888.40 5892.74 T:led80n6silcv1 8385.08 8388.49 8391.09 T:present80n6silcv1 8383.73 8389.18 8396.66 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 2.32 2.33 2.34 T:morus640128v1 2.44 2.45 2.46 T:morus640128v2 2.60 2.60 2.61 T:morus1280256v1 2.60 2.60 2.61 T:morus1280256v2 2.60 2.60 2.61 T:morus1280128v1 2.59 2.61 2.61 T:morus1280128v2 5.47 5.60 5.76 T:lunarkeyakv2 5.64 5.67 5.72 T:oceankeyakv2 5.81 5.82 5.82 T:norx3241v2 5.91 5.92 5.92 T:norx3241v3 6.54 6.56 6.62 T:seakeyakv2 7.16 7.18 7.20 T:norx6441v2 7.22 7.24 7.27 T:norx6441v3 7.29 7.31 7.33 T:norx6444v2 7.29 7.31 7.32 T:norx6444v3 7.53 7.53 7.53 T:norx3241v1 8.24 8.25 8.27 T:norx6441v1 8.23 8.26 8.27 T:norx6444v1 8.60 8.61 8.61 T:norx3261v2 8.61 8.63 8.67 T:norx3261v3 8.56 8.68 8.77 T:lakekeyakv2 9.72 9.76 9.78 T:lakekeyakv1 10.53 10.55 10.57 T:norx6461v2 10.60 10.61 10.63 T:norx6461v3 11.72 11.73 11.73 T:norx3261v1 11.75 11.79 11.84 T:tiaoxinv2 11.77 11.80 11.83 T:tiaoxinv1 11.83 11.85 11.86 T:norx6461v1 13.63 13.63 13.63 ascon128av12 13.93 13.94 13.96 T:ascon128av11 13.99 14.01 14.02 T:ascon96v1 15.75 15.77 15.79 T:acorn128v3 16.24 16.28 16.37 T:acorn128v2 16.25 16.29 16.33 T:aegis128l 16.56 16.80 17.35 T:aes128gcmv1 16.64 16.95 17.68 T:aes256gcmv1 17.71 17.77 17.80 T:ketjemajorv2 18.58 18.61 18.64 T:riverkeyakv2 20.18 20.21 20.26 T:aegis128 20.25 20.25 20.25 ascon128v12 21.12 21.13 21.43 T:ascon128v11 21.12? 21.14? 41.17? T:ascon128v1 24.38 24.43 24.49 T:aegis256 26.43 26.50 26.62 T:ketjeminorv2 26.79 26.85 26.95 aegis128l 30.54 30.56 30.59 T:deoxysii128v141 30.49 30.60 30.64 T:deoxysi128v141 34.41 34.47 34.56 T:deoxysi256v141 34.45 34.48 34.55 T:deoxysii256v141 37.92 37.94 37.98 T:aes128n12t8clocv2 37.91 37.94 37.97 T:aes128n8t8clocv2 37.94 37.96 38.02 T:aes128n8clocv1 37.94 37.97 37.99 T:aes128n12t8clocv3 37.95 37.99 38.03 T:aes128n12clocv1 38.94 38.98 39.04 T:aes128otrsv2 38.95 39.01 39.22 T:aes128otrsv1 38.98 39.02 39.11 T:aes128otrsv3 40.35 40.39 40.44 T:aes128n12t8silcv3 40.37 40.40 40.44 T:aes128n8t8silcv2 40.38 40.41 40.77 T:aes128n12t8silcv2 42.19 42.23 42.25 T:aes128otrcv3 43.59 43.62 43.67 T:aes128otrpv1 43.60 43.63 43.65 T:aes128otrpv2 44.32 44.38 44.44 T:aes128otrpv3 53.53 53.65 53.78 T:aes256otrsv3 53.62 53.68 53.82 T:aes256otrsv1 53.62 53.68 53.79 T:aes256otrsv2 56.04 56.12 56.19 T:aes256otrcv3 58.27 58.36 59.21 T:aes256otrpv1 59.03 59.06 59.12 T:aes256otrpv3 58.34 59.10 59.16 T:aes256otrpv2 61.13 61.17 61.35 T:proest256otrv1 66.48 66.54 67.04 T:aeadaes128ocbtaglen64v1 66.54 66.61 67.04 T:aeadaes128ocbtaglen96v1 68.23 68.29 68.33 T:aezv5 68.35 68.41 68.58 T:aeadaes128ocbtaglen128v1 69.33 69.39 69.44 T:colm127v1 69.71 69.75 69.80 T:colm0v1 70.34 70.42 70.52 T:aezv4 71.06 71.09 71.16 T:aesjambuv1 72.87 73.40 74.33 T:aeadaes192ocbtaglen128v1 73.98 74.43 78.56 T:ketjesrv1 77.61 77.63 77.67 T:twine80n6t4clocv3 79.28 79.37 79.49 T:aeadaes192ocbtaglen96v1 79.21 79.38 79.53 T:aeadaes192ocbtaglen64v1 83.45 87.56 87.65 T:ketjesrv2 90.30 90.35 90.43 T:aeadaes256ocbtaglen64v1 90.34 90.38 90.43 T:aeadaes256ocbtaglen96v1 92.14 92.21 92.29 T:aeadaes256ocbtaglen128v1 99.50 99.51 99.80 T:twine80n6t4clocv2 132.59 132.63 132.70 T:ketjejrv1 138.72 138.81 139.19 T:proest128otrv1 144.42 144.59 144.79 T:aezv1 168.14 168.24 168.83 T:present80n6t4silcv3 191.54 191.63 193.29 T:aezv3 213.33 213.40 213.61 T:deoxyseq128128v1 213.67 213.72 213.88 T:deoxyseq128128v13 214.14 214.23 215.42 T:deoxysneq128128v1 214.25 214.33 214.45 T:deoxysneq128128v13 264.01 264.27 264.77 T:ketjejrv2 402.98 403.40 404.36 T:deoxyseq256128v1 403.88 403.98 405.20 T:deoxysneq256128v1 403.98 404.07 405.47 T:deoxysneq256128v13 403.30 404.57 412.57 T:deoxyseq256128v13 739.30 739.49 740.36 T:led80n6t4silcv3 1456.51 1457.44 1462.78 aes256gcmv1 1716.06? 1903.61? 1943.75? T:acorn128 5869.49 5871.42 5873.72 T:led80n6t4silcv2 5874.56 5878.87 5882.63 T:led80n6silcv1 8384.65 8388.00 8392.33 T:present80n6t4silcv2 8387.18 8388.86 8398.14 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 3.00 3.00 3.04 T:morus640128v2 3.08 3.08 3.12 T:morus640128v1 3.58 3.59 3.62 T:morus1280128v1 3.63 3.64 3.70 T:morus1280256v1 3.70 3.70 3.72 T:morus1280128v2 3.70 3.70 3.74 T:morus1280256v2 6.65 6.65 6.68 T:norx3241v2 6.73 6.73 6.78 T:norx3241v3 8.20 8.20 8.29 T:norx3241v1 8.42 8.43 8.48 T:norx6441v3 8.46 8.46 8.53 T:norx6441v2 9.57 9.58 9.64 T:norx3261v2 9.63 9.64 9.65 T:norx6441v1 9.65 9.65 9.68 T:norx3261v3 10.49 10.50 10.56 T:seakeyakv2 11.05 11.06 11.10 T:norx6444v2 11.08 11.09 11.12 T:norx6444v3 11.86 11.87 11.95 T:lakekeyakv2 12.29 12.29 12.31 T:norx6444v1 12.34 12.34 12.40 T:norx6461v3 12.41 12.42 12.50 T:norx6461v2 12.66 12.66 12.77 T:norx3261v1 13.13 13.15 13.25 T:lakekeyakv1 13.64 13.65 13.66 T:norx6461v1 14.12 14.12 14.15 T:ascon128av11 14.16 14.16 14.21 ascon128av12 14.35 14.35 14.37 T:ascon96v1 14.37 14.38 14.49 T:oceankeyakv2 19.00 19.01 19.05 T:acorn128v3 19.15 19.16 19.21 T:acorn128v2 19.93 19.95 19.98 T:aegis128l 20.28 20.30 20.32 T:tiaoxinv2 20.54 20.56 20.60 T:tiaoxinv1 20.94 20.95 20.97 ascon128v12 21.63 21.64 21.69 T:ascon128v1 21.63 21.64 21.70 T:ascon128v11 21.74 21.75 21.77 T:riverkeyakv2 22.83 22.85 22.91 T:aegis128 24.73 24.74 24.88 T:lunarkeyakv2 27.93 27.94 28.63 T:aegis256 28.02 28.03 28.07 T:ketjemajorv2 32.17 32.19 32.21 T:ketjeminorv2 33.41 33.47 34.08 T:aes128gcmv1 33.45 33.52 33.74 T:deoxysi128v141 36.54 36.57 36.57 aegis128l 36.75 36.79 37.44 T:aes256gcmv1 37.92 37.97 38.34 T:deoxysi256v141 43.71 43.73 43.77 T:aes128otrcv3 44.65 44.67 44.74 T:aes128otrsv2 44.66 44.68 44.73 T:aes128otrsv1 45.31 45.37 45.42 T:aes128otrsv3 46.95 46.97 47.06 T:aes128otrpv1 46.94 46.99 47.04 T:aes128otrpv2 48.08 48.09 48.14 T:aes128otrpv3 48.70 48.78 49.23 T:deoxysii128v141 57.73 57.75 57.87 T:aes128n8t8clocv2 57.66 57.75 58.28 T:deoxysii256v141 57.75 57.78 57.98 T:aes128n12t8clocv2 57.79 57.81 57.91 T:aes128n12t8clocv3 57.89 57.92 58.00 T:aes128n12clocv1 57.84 57.93 58.01 T:aes128n8clocv1 58.57 58.66 58.75 T:aes256otrcv3 59.62 59.66 59.77 T:aes256otrsv2 59.66 59.70 60.47 T:aes256otrsv1 60.26 60.28 60.35 T:aes256otrsv3 61.89 61.92 61.94 T:aes256otrpv2 61.95 61.95 62.05 T:aes256otrpv1 62.15 62.17 62.24 T:aes128n8t8silcv2 62.16 62.19 62.26 T:aes128n12t8silcv2 62.17 62.20 62.27 T:aes128n12t8silcv3 63.04 63.07 63.14 T:aes256otrpv3 67.30 67.32 67.39 T:proest256otrv1 70.85 70.86 71.04 T:aeadaes128ocbtaglen64v1 70.89 70.92 70.96 T:aeadaes128ocbtaglen96v1 71.03 71.15 71.84 T:aeadaes128ocbtaglen128v1 71.80 71.83 71.94 T:aesjambuv1 75.57 75.64 76.26 T:aeadaes192ocbtaglen128v1 79.17 79.18 79.26 T:twine80n6t4clocv3 83.33 83.36 84.02 T:aeadaes192ocbtaglen64v1 83.41 83.42 83.54 T:aeadaes192ocbtaglen96v1 88.72 88.93 92.66 T:ketjesrv1 90.29 90.31 91.39 T:aezv4 90.27 90.31 90.44 T:aezv5 94.68 94.73 95.01 T:aeadaes256ocbtaglen64v1 94.72 94.75 95.40 T:aeadaes256ocbtaglen96v1 94.85 94.87 94.91 T:aeadaes256ocbtaglen128v1 104.87 104.87 105.01 T:twine80n6t4clocv2 102.24 105.14 105.18 T:ketjesrv2 112.33 112.42 112.95 T:colm127v1 112.79 112.85 113.27 T:colm0v1 145.62 145.64 145.69 T:proest128otrv1 158.58 158.68 159.22 T:ketjejrv1 170.96 170.98 171.18 T:present80n6t4silcv3 215.54 215.58 216.31 T:deoxysneq128128v13 215.74 215.79 216.64 T:deoxysneq128128v1 290.74 291.46 294.33 T:aezv1 292.01 292.12 292.84 T:ketjejrv2 293.04 293.29 295.07 T:aezv3 321.80 321.85 322.73 T:deoxyseq128128v1 327.03 327.09 327.91 T:deoxyseq128128v13 406.47 406.71 409.66 T:deoxysneq256128v1 406.59 406.88 408.26 T:deoxysneq256128v13 608.84 609.34 610.99 T:deoxyseq256128v1 615.18 615.56 618.52 T:deoxyseq256128v13 746.17 746.40 747.07 T:led80n6t4silcv3 1958.84 1967.84 2145.44 T:acorn128 8856.20 8863.34 8868.76 T:led80n6silcv1 8860.34 8871.96 8876.34 T:led80n6t4silcv2 12646.28 12647.53 12651.59 T:present80n6silcv1 12645.73 12656.18 12665.29 T:present80n6t4silcv2 28149.99 28164.87 28197.05 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.95 2.97 3.03 T:morus640128v1 3.04 3.04 3.13 T:morus640128v2 3.53 3.53 3.56 T:morus1280128v1 3.53 3.53 3.57 T:morus1280256v1 3.57 3.57 3.68 T:morus1280256v2 3.57 3.58 3.67 T:morus1280128v2 6.70 6.70 6.78 T:norx3241v2 6.71 6.71 6.81 T:norx3241v3 8.32 8.32 8.41 T:norx3241v1 8.69 8.70 8.79 T:norx6441v2 8.74 8.74 8.88 T:norx6441v3 9.61 9.61 9.76 T:norx3261v2 9.61 9.61 9.72 T:norx3261v3 9.65 9.66 9.71 T:norx6441v1 10.56 10.58 10.65 T:seakeyakv2 11.24 11.26 11.29 T:norx6444v2 11.29 11.31 11.34 T:norx6444v3 11.68 11.71 11.79 T:lakekeyakv2 12.30 12.31 12.44 T:norx6461v2 12.41 12.42 12.47 T:norx6444v1 12.45 12.47 12.61 T:norx6461v3 12.75 12.75 12.89 T:norx3261v1 13.03 13.07 13.36 T:lakekeyakv1 13.65 13.66 13.74 T:norx6461v1 14.13 14.13 14.18 ascon128av12 14.35 14.35 14.41 T:ascon96v1 14.41 14.41 14.47 T:ascon128av11 14.46 14.50 14.69 T:oceankeyakv2 18.45 18.46 18.55 T:tiaoxinv1 18.49 18.50 18.63 T:tiaoxinv2 18.88 18.89 19.03 T:acorn128v2 19.41 19.42 19.53 T:acorn128v3 19.81 19.83 19.88 T:aegis128l 20.89 20.89 20.91 ascon128v12 21.45 21.45 21.50 T:ascon128v11 21.45 21.46 21.51 T:ascon128v1 21.89 21.90 22.08 T:riverkeyakv2 22.56 22.59 22.63 T:aegis128 24.73 24.75 24.96 T:lunarkeyakv2 27.26 27.27 27.33 T:ketjemajorv2 27.94 27.96 28.02 T:aegis256 32.39 32.42 32.49 T:ketjeminorv2 33.70 33.85 34.18 T:aes128gcmv1 36.38 36.40 36.75 T:deoxysi128v141 36.46 36.48 36.94 aegis128l 36.92 36.99 37.54 T:aes256gcmv1 41.54 41.61 41.93 T:deoxysi256v141 43.81 43.84 43.88 T:aes128otrcv3 45.83 45.85 45.91 T:aes128otrsv3 46.16 46.18 46.23 T:aes128otrsv1 46.18 46.19 46.22 T:aes128otrsv2 48.36 48.38 48.45 T:aes128otrpv3 48.45 48.50 48.58 T:aes128otrpv1 48.48 48.51 48.56 T:aes128otrpv2 49.47 49.55 51.10 T:deoxysii128v141 57.89 57.94 58.29 T:deoxysii256v141 58.53 58.54 58.65 T:aes128n8t8clocv2 58.55 58.57 58.65 T:aes128n12t8clocv2 58.59 58.60 58.68 T:aes128n12t8clocv3 58.70 58.72 58.82 T:aes128n12clocv1 58.65 58.73 58.81 T:aes256otrcv3 58.68 58.76 59.67 T:aes128n8clocv1 61.16 61.17 61.28 T:aes256otrsv2 61.12 61.18 62.07 T:aes256otrsv1 60.86 61.61 61.68 T:aes256otrsv3 62.07 62.08 62.14 T:aes128n12t8silcv2 62.06 62.10 62.19 T:aes128n8t8silcv2 62.11 62.20 62.87 T:aes128n12t8silcv3 63.31 63.34 64.06 T:aes256otrpv3 63.41 63.44 63.59 T:aes256otrpv1 63.41 63.45 64.22 T:aes256otrpv2 66.70 66.73 66.79 T:proest256otrv1 71.95 71.97 72.04 T:aesjambuv1 79.08 79.11 79.43 T:aeadaes128ocbtaglen64v1 79.11 79.24 81.21 T:aeadaes128ocbtaglen96v1 79.20 79.24 79.32 T:aeadaes128ocbtaglen128v1 79.24 79.24 79.36 T:twine80n6t4clocv3 85.84 85.91 86.49 T:aeadaes192ocbtaglen128v1 88.14 88.17 88.36 T:aezv4 88.13 88.17 88.88 T:aezv5 89.76 90.10 93.68 T:ketjesrv1 93.19 93.32 93.71 T:aeadaes192ocbtaglen96v1 93.17 93.42 94.18 T:aeadaes192ocbtaglen64v1 95.13 98.92 98.98 T:ketjesrv2 105.30 105.33 105.52 T:twine80n6t4clocv2 107.19 107.28 107.36 T:aeadaes256ocbtaglen96v1 107.30 107.35 107.40 T:aeadaes256ocbtaglen128v1 107.25 107.54 108.16 T:aeadaes256ocbtaglen64v1 128.15 128.27 129.07 T:colm0v1 129.37 129.48 130.14 T:colm127v1 144.54 144.60 144.75 T:proest128otrv1 157.06 157.10 157.69 T:ketjejrv1 170.85 170.87 171.32 T:present80n6t4silcv3 278.21 278.27 281.67 T:deoxysneq128128v13 278.36 278.53 279.74 T:deoxysneq128128v1 281.11 281.29 282.31 T:ketjejrv2 289.34 290.44 292.64 T:aezv1 290.92 291.16 292.39 T:aezv3 327.08 327.21 327.98 T:deoxyseq128128v13 447.64 448.52 451.09 T:deoxyseq128128v1 477.19 477.45 481.12 T:deoxysneq256128v1 477.50 478.60 482.21 T:deoxysneq256128v13 615.25 615.73 618.32 T:deoxyseq256128v13 746.06 746.40 746.55 T:led80n6t4silcv3 750.57 751.71 754.95 T:deoxyseq256128v1 1941.13 2113.36 2118.32 T:acorn128 8850.78 8854.50 8867.92 T:led80n6t4silcv2 8858.26 8862.79 8869.49 T:led80n6silcv1 12642.55 12644.73 12651.08 T:present80n6t4silcv2 12643.46 12651.51 12659.82 T:present80n6silcv1 28179.52 28197.36 28211.16 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.95 2.95 2.96 T:morus640128v1 3.04 3.04 3.05 T:morus640128v2 3.53 3.53 3.53 T:morus1280128v1 3.53 3.53 3.54 T:morus1280256v1 3.57 3.57 3.57 T:morus1280128v2 3.57 3.57 3.57 T:morus1280256v2 6.70 6.70 6.71 T:norx3241v2 6.71 6.71 6.72 T:norx3241v3 8.32 8.32 8.32 T:norx3241v1 8.79 8.79 8.82 T:norx6441v2 8.83 8.83 8.87 T:norx6441v3 9.61 9.61 9.62 T:norx3261v3 9.61 9.61 9.62 T:norx3261v2 9.75 9.76 9.80 T:norx6441v1 10.62 10.66 10.68 T:seakeyakv2 11.34 11.37 11.55 T:norx6444v2 11.37 11.38 11.41 T:norx6444v3 11.76 11.78 11.80 T:lakekeyakv2 12.39 12.40 12.42 T:norx6461v2 12.52 12.52 12.55 T:norx6444v1 12.54 12.55 12.58 T:norx6461v3 12.75 12.75 12.75 T:norx3261v1 13.08 13.12 13.38 T:lakekeyakv1 13.73 13.74 13.76 T:norx6461v1 14.13 14.13 14.14 ascon128av12 14.34 14.35 14.37 T:ascon96v1 14.41 14.42 14.64 T:ascon128av11 14.56 14.58 14.71 T:oceankeyakv2 18.44 18.45 18.49 T:tiaoxinv1 18.45 18.46 18.50 T:tiaoxinv2 18.89 18.89 18.92 T:acorn128v2 19.42 19.42 19.44 T:acorn128v3 19.79 19.83 20.06 T:aegis128l 20.88 20.89 20.89 ascon128v12 21.45 21.45 21.48 T:ascon128v11 21.45 21.45 21.48 T:ascon128v1 21.95 21.96 21.99 T:riverkeyakv2 22.55 22.57 22.59 T:aegis128 24.81 24.87 24.92 T:lunarkeyakv2 27.36 27.37 27.47 T:ketjemajorv2 28.03 28.04 28.07 T:aegis256 32.49 32.50 32.56 T:ketjeminorv2 33.69 33.74 34.03 T:aes128gcmv1 36.30 36.35 38.24 T:deoxysi128v141 36.54 36.55 36.64 aegis128l 36.85 36.90 37.32 T:aes256gcmv1 41.93 41.96 42.24 T:deoxysi256v141 43.80 43.81 43.83 T:aes128otrcv3 45.94 45.97 46.06 T:aes128otrsv3 46.27 46.28 46.39 T:aes128otrsv1 46.26 46.29 46.38 T:aes128otrsv2 48.45 48.46 48.52 T:aes128otrpv3 48.55 48.59 48.71 T:aes128otrpv1 48.58 48.64 48.97 T:aes128otrpv2 49.65 49.70 50.80 T:deoxysii128v141 58.05 58.12 59.48 T:deoxysii256v141 58.52 58.53 58.55 T:aes128n8t8clocv2 58.56 58.59 58.62 T:aes128n12t8clocv2 58.60 58.63 58.66 T:aes128n12t8clocv3 58.66 58.70 58.83 T:aes128n8clocv1 58.64 58.73 58.76 T:aes256otrcv3 58.72 58.75 59.08 T:aes128n12clocv1 61.22 61.24 61.30 T:aes256otrsv1 60.95 61.70 61.79 T:aes256otrsv3 62.05 62.09 62.28 T:aes128n12t8silcv2 62.05 62.10 62.20 T:aes256otrsv2 62.06 62.11 62.30 T:aes128n8t8silcv2 62.11 62.12 62.17 T:aes128n12t8silcv3 63.39 63.42 63.50 T:aes256otrpv3 63.48 63.52 63.61 T:aes256otrpv2 63.49 63.52 63.61 T:aes256otrpv1 66.72 66.73 66.77 T:proest256otrv1 71.96 71.98 72.01 T:aesjambuv1 79.07 79.09 79.13 T:aeadaes128ocbtaglen64v1 79.14 79.18 79.22 T:aeadaes128ocbtaglen96v1 79.25 79.26 79.44 T:twine80n6t4clocv3 79.23 79.33 81.05 T:aeadaes128ocbtaglen128v1 85.85 86.39 86.65 T:aeadaes192ocbtaglen128v1 87.98 88.03 88.08 T:aezv4 88.00 88.07 89.40 T:aezv5 89.87 90.00 93.82 T:ketjesrv1 93.15 93.18 93.53 T:aeadaes192ocbtaglen64v1 93.23 93.31 93.70 T:aeadaes192ocbtaglen96v1 95.28 99.04 99.11 T:ketjesrv2 105.29 105.31 105.80 T:twine80n6t4clocv2 107.22 107.30 107.35 T:aeadaes256ocbtaglen96v1 107.16 107.49 107.77 T:aeadaes256ocbtaglen64v1 107.32 107.83 108.26 T:aeadaes256ocbtaglen128v1 128.10 128.13 128.85 T:colm0v1 129.32 129.36 130.17 T:colm127v1 144.54 144.59 144.68 T:proest128otrv1 157.16 157.19 157.43 T:ketjejrv1 170.83 170.86 171.09 T:present80n6t4silcv3 278.28 278.34 279.56 T:deoxysneq128128v13 278.33 278.41 279.59 T:deoxysneq128128v1 281.19 281.42 281.98 T:ketjejrv2 289.12 289.73 291.03 T:aezv1 290.82 291.00 293.01 T:aezv3 327.18 327.31 328.17 T:deoxyseq128128v13 447.50 447.64 448.79 T:deoxyseq128128v1 477.28 477.37 479.85 T:deoxysneq256128v1 477.47 477.74 480.83 T:deoxysneq256128v13 615.25 615.74 616.15 T:deoxyseq256128v13 746.26 746.43 746.77 T:led80n6t4silcv3 751.34 751.68 753.69 T:deoxyseq256128v1 2009.08 2009.44 2010.65 aes256gcmv1 1945.70 2113.62 2121.09 T:acorn128 8859.29 8861.11 8868.34 T:led80n6silcv1 8859.27 8866.49 8870.85 T:led80n6t4silcv2 12643.40 12646.76 12658.31 T:present80n6silcv1 12643.61 12649.21 12662.25 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.76 9.84 10.21 T:morus640128v1 10.06 10.12 10.73 T:morus640128v2 17.56 17.63 18.36 T:morus1280256v1 17.59 17.66 18.43 T:morus1280128v1 17.79 17.84 19.43 T:norx3241v1 17.98 18.02 18.78 T:norx3241v2 18.08 18.11 19.24 T:norx3241v3 18.45 18.48 19.55 T:morus1280128v2 18.53 18.56 19.75 T:morus1280256v2 21.80 21.80 22.44 T:ascon128av11 21.97 21.97 22.95 ascon128av12 22.11 22.22 22.89 T:ascon96v1 24.95 24.96 25.80 T:norx3261v2 25.19 25.19 26.02 T:norx3261v3 27.22 27.23 29.45 T:norx3261v1 28.11 28.11 28.92 ascon128v12 28.83 28.83 29.70 T:ascon128v11 28.83 28.94 29.72 T:ascon128v1 32.28 32.34 32.62 T:norx6441v1 33.48 33.53 34.11 T:norx6441v2 33.61 33.72 34.18 T:norx6441v3 43.48 43.59 43.92 T:norx6461v1 46.84 46.95 47.54 T:norx6461v3 47.16 47.18 48.01 T:norx6461v2 50.62 50.79 52.08 T:lakekeyakv1 52.93 53.02 53.95 T:riverkeyakv2 55.84 56.05 57.67 T:lakekeyakv2 65.69 65.91 66.99 T:aegis128 68.60 69.03 70.68 T:aes128n8t8clocv2 68.95 69.20 71.30 T:aes128n12t8clocv2 70.24 70.57 72.62 T:aes128n12t8clocv3 70.72 70.80 72.18 T:aes128n8clocv1 71.30 71.48 72.73 T:aes128n12clocv1 82.04 82.15 82.79 T:acorn128v2 82.86 83.11 84.28 T:aes128n12t8silcv2 83.01 83.20 84.39 T:aes128n8t8silcv2 83.53 83.66 84.90 T:aes128otrsv1 83.81 84.10 85.38 T:aes128otrsv2 84.05 84.20 85.36 T:aes128n12t8silcv3 85.23 85.44 86.53 T:aes128otrpv1 85.61 85.73 86.21 T:aes128otrpv2 86.24 86.34 87.45 T:aes128otrsv3 86.58 86.63 86.67 T:norx6444v2 87.46 87.58 88.38 T:acorn128v3 87.48 87.62 87.81 T:norx6444v3 87.89 88.05 88.68 T:aes128otrpv3 88.34 88.48 88.84 T:aegis128l 89.50 89.66 90.77 T:aes128otrcv3 95.16 95.20 95.38 T:norx6444v1 95.47 95.58 96.05 T:aesjambuv1 96.24 96.30 97.21 T:aegis256 102.22 102.52 104.41 T:seakeyakv2 106.55 106.69 107.31 T:ketjeminorv2 108.44 108.62 109.49 T:twine80n6t4clocv3 109.92 110.02 111.03 T:aeadaes128ocbtaglen64v1 109.92 110.03 111.02 T:aes256otrsv2 110.10 110.18 111.27 T:deoxysi128v141 110.04 110.23 110.85 T:aes256otrsv1 110.13 110.26 111.48 T:aeadaes128ocbtaglen128v1 110.23 110.33 112.18 T:aeadaes128ocbtaglen96v1 111.65 111.77 112.99 T:aes256otrpv1 111.70 112.38 113.01 T:aes256otrpv2 112.52 113.27 113.88 T:aes256otrsv3 114.23 114.36 115.23 T:aes256otrpv3 117.48 117.80 119.37 T:aes256otrcv3 122.44 122.64 124.16 aegis128l 125.11 125.46 129.02 T:aezv4 127.10 127.21 127.96 T:aeadaes192ocbtaglen64v1 127.11 127.47 128.00 T:aeadaes192ocbtaglen96v1 128.80 129.12 130.79 T:aezv5 120.86? 134.37? 198.18? T:aeadaes192ocbtaglen128v1 134.68 134.79 138.16 T:twine80n6t4clocv2 140.45 140.93 146.59 T:ketjesrv1 146.00 146.16 147.42 T:aeadaes256ocbtaglen64v1 146.13 146.27 147.20 T:aeadaes256ocbtaglen96v1 146.43 146.57 147.36 T:aeadaes256ocbtaglen128v1 146.84 147.05 147.40 T:deoxysii128v141 160.41 160.63 161.06 T:ketjemajorv2 160.60 160.77 162.79 T:colm0v1 164.23 164.38 165.73 T:colm127v1 164.96? 166.22? 216.02? T:oceankeyakv2 169.61 169.75 170.64 T:tiaoxinv2 173.23 173.55 174.53 T:tiaoxinv1 175.80 175.88 177.04 T:deoxysi256v141 176.78 181.48 181.84 T:ketjesrv2 192.74 193.12 195.59 T:proest256otrv1 207.98 208.28 208.73 T:ketjejrv1 217.00 217.05 217.32 T:present80n6t4silcv3 224.36 225.55 234.38 T:aes128gcmv1 240.80 241.54 250.78 T:aes256gcmv1 242.72 242.98 243.16 T:deoxysneq128128v13 242.84 243.16 243.75 T:deoxysneq128128v1 283.71 283.99 286.12 T:proest128otrv1 338.53 339.05 341.13 T:aezv1 374.13 374.63 375.02 T:deoxyseq128128v1 381.85 382.10 382.69 T:ketjejrv2 403.98 404.14 407.52 T:lunarkeyakv2 404.66 405.20 405.69 T:deoxyseq128128v13 410.93 411.23 412.23 T:deoxysii256v141 430.61 430.86 435.34 T:aezv3 456.66 456.88 457.47 T:deoxysneq256128v1 456.65 456.92 489.01 T:deoxysneq256128v13 707.29 708.05 746.73 T:deoxyseq256128v1 761.09 761.49 762.54 T:deoxyseq256128v13 882.84 882.96 883.69 T:led80n6t4silcv3 6644.75 6664.80 7323.41 T:acorn128 9920.40 9923.11 9936.50 T:led80n6t4silcv2 9918.27 9926.12 9938.51 T:led80n6silcv1 14150.49 14156.89 14164.57 T:present80n6t4silcv2 14161.47 14166.64 14178.59 T:present80n6silcv1 40822.44 40832.32 40860.07 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.50 9.51 9.88 T:morus640128v1 10.99 11.00 11.98 T:morus640128v2 17.89 17.95 19.02 T:morus1280128v1 17.91 17.98 18.93 T:morus1280256v1 17.97? 17.98? 24.36? T:norx3241v3 17.98 18.03 19.67 T:norx3241v1 18.05 18.10 18.48 T:norx3241v2 18.92 18.95 19.80 T:morus1280256v2 18.90 18.96 20.08 T:morus1280128v2 21.93 21.93 22.69 ascon128av12 22.14 22.14 22.91 T:ascon128av11 22.18 22.18 23.14 T:ascon96v1 25.06 25.07 25.79 T:norx3261v3 25.10 25.11 26.20 T:norx3261v2 27.41 27.45 29.49 T:norx3261v1 28.13 28.13 28.99 ascon128v12 28.72 28.72 29.36 T:ascon128v11 28.72 28.72 29.37 T:ascon128v1 31.29 31.40 31.62 T:norx6441v1 34.28 34.35 35.22 T:norx6441v2 34.60 34.70 35.67 T:norx6441v3 42.42 42.47 43.11 T:norx6461v1 46.40 46.45 47.28 T:norx6461v2 47.08 47.16 48.34 T:norx6461v3 49.75 49.80 50.73 T:lakekeyakv1 52.92 53.13 54.10 T:riverkeyakv2 55.16 55.23 56.57 T:lakekeyakv2 65.48 65.63 66.17 T:aegis128 69.55 69.60 70.15 T:aes128n8t8clocv2 69.71 69.96 70.41 T:aes128n12t8clocv2 70.98 71.25 71.84 T:aes128n12t8clocv3 71.76 71.85 73.08 T:aes128n8clocv1 72.15 72.27 73.23 T:aes128n12clocv1 81.68 81.84 82.13 T:acorn128v2 82.66 82.87 83.48 T:aes128n8t8silcv2 82.69 82.88 83.53 T:aes128n12t8silcv2 83.69 83.89 84.50 T:aes128n12t8silcv3 86.29 86.39 87.30 T:aes128otrsv1 86.53 86.62 87.80 T:aes128otrsv2 87.63 87.89 88.84 T:aes128otrpv1 87.92 88.09 89.09 T:aes128otrsv3 87.97 88.09 88.27 T:norx6444v2 88.36 88.54 89.27 T:aegis128l 88.45 88.55 88.65 T:norx6444v3 88.39 88.56 89.43 T:aes128otrpv2 88.48 88.62 89.01 T:acorn128v3 89.57 89.73 89.97 T:aes128otrpv3 89.91 90.02 90.24 T:aes128otrcv3 94.67 94.93 95.09 T:norx6444v1 95.91 96.02 96.52 T:aesjambuv1 96.70 96.98 97.86 T:aegis256 103.27 103.45 104.59 T:seakeyakv2 106.84 107.05 107.42 T:ketjeminorv2 108.59 108.69 109.38 T:twine80n6t4clocv3 112.34 112.52 121.62 T:aes256otrsv1 112.75 112.86 114.26 T:aes256otrsv2 113.88 114.10 116.16 T:aes256otrpv1 113.91 114.65 115.23 T:aes256otrsv3 114.18 114.73 115.69 T:aes256otrpv2 115.51 115.62 116.75 T:aes256otrpv3 117.98 118.25 118.50 T:aes256otrcv3 121.43 121.68 122.57 T:aezv4 122.96 123.10 123.54 aegis128l 125.24 125.41 126.22 T:aezv5 126.15 126.69 128.93 T:deoxysi128v141 127.26 127.51 129.43 T:aeadaes128ocbtaglen64v1 127.32 127.51 128.91 T:aeadaes128ocbtaglen96v1 127.48 127.77 130.03 T:aeadaes128ocbtaglen128v1 135.26 135.37 136.87 T:twine80n6t4clocv2 141.86 142.09 147.98 T:ketjesrv1 146.24 146.52 147.88 T:aeadaes192ocbtaglen64v1 146.50 146.62 147.52 T:deoxysii128v141 146.48 146.70 147.22 T:aeadaes192ocbtaglen96v1 133.16? 147.68? 217.07? T:aeadaes192ocbtaglen128v1 152.70 152.80 153.70 T:tiaoxinv1 152.99 153.10 153.32 T:tiaoxinv2 160.12 160.17 160.81 T:ketjemajorv2 166.37 167.55 168.27 T:oceankeyakv2 170.47 170.59 171.99 T:aeadaes256ocbtaglen128v1 170.11 170.77 172.40 T:aeadaes256ocbtaglen64v1 170.76 170.89 171.96 T:aeadaes256ocbtaglen96v1 170.13 175.98 176.24 T:ketjesrv2 176.91 176.98 178.11 T:colm0v1 180.57 180.68 181.95 T:colm127v1 193.29 193.74 195.10 T:deoxysi256v141 194.52 194.90 196.55 T:proest256otrv1 207.28 207.70 208.05 T:ketjejrv1 217.04 217.08 217.38 T:present80n6t4silcv3 227.47 228.50 233.50 T:aes128gcmv1 244.27 244.80 252.22 T:aes256gcmv1 283.77 284.21 285.61 T:proest128otrv1 305.38 305.61 306.16 T:deoxysneq128128v13 305.51 305.88 306.06 T:deoxysneq128128v1 346.60 346.80 348.70 T:aezv1 372.47 372.71 374.11 T:ketjejrv2 404.09 404.39 405.46 T:lunarkeyakv2 404.83 405.16 405.59 T:deoxyseq128128v13 411.16 411.50 413.06 T:deoxysii256v141 427.44 427.82 429.11 T:aezv3 499.90 500.30 502.84 T:deoxyseq128128v1 527.20 527.40 527.82 T:deoxysneq256128v1 527.05 527.48 527.88 T:deoxysneq256128v13 761.30 761.73 762.48 T:deoxyseq256128v13 848.38 849.42 851.84 T:deoxyseq256128v1 882.80 882.91 883.84 T:led80n6t4silcv3 6638.84 7245.31 7253.40 T:acorn128 9921.19 9928.57 9943.07 T:led80n6t4silcv2 9922.16 9934.45 9939.91 T:led80n6silcv1 14147.46 14154.77 14173.20 T:present80n6t4silcv2 14159.84 14161.34 14208.47 T:present80n6silcv1 40826.31 40827.84 40854.72 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.50 9.53 9.64 T:morus640128v1 10.99 11.00 11.09 T:morus640128v2 17.91 17.95 18.00 T:morus1280128v1 17.95 17.96 18.16 T:norx3241v1 17.91 17.97 17.98 T:morus1280256v1 17.97? 17.97? 25.41? T:norx3241v3 18.04 18.07 18.10 T:norx3241v2 18.89 18.89 19.11 T:morus1280128v2 18.90 18.91 19.02 T:morus1280256v2 21.93 21.93 21.98 ascon128av12 22.02 22.02 22.48 T:ascon96v1 22.03 22.03 22.71 T:ascon128av11 25.06 25.06 25.12 T:norx3261v3 25.10 25.10 25.16 T:norx3261v2 27.41 27.43 27.48 T:norx3261v1 28.13 28.13 28.24 ascon128v12 28.61 28.61 29.29 T:ascon128v11 28.61 28.66 29.29 T:ascon128v1 31.91 32.08 32.55 T:norx6441v1 34.70 34.88 35.08 T:norx6441v2 35.20 35.26 35.48 T:norx6441v3 42.91 43.02 43.19 T:norx6461v1 46.88 46.92 47.04 T:norx6461v2 47.55 47.60 47.87 T:norx6461v3 50.35 50.43 50.80 T:lakekeyakv1 54.25 54.33 54.48 T:riverkeyakv2 55.54 55.71 55.88 T:lakekeyakv2 65.38 65.61 65.78 T:aegis128 69.12 69.25 69.57 T:aes128n8t8clocv2 69.52 69.72 70.63 T:aes128n12t8clocv2 70.99 71.17 71.54 T:aes128n12t8clocv3 71.52 71.60 71.74 T:aes128n8clocv1 72.09 72.31 72.43 T:aes128n12clocv1 81.62 81.79 82.00 T:acorn128v2 82.45 82.59 82.88 T:aes128n8t8silcv2 82.57 82.77 82.81 T:aes128n12t8silcv2 83.58 83.68 83.95 T:aes128n12t8silcv3 86.91 86.99 87.24 T:aes128otrsv1 87.09 87.29 87.81 T:aes128otrsv2 88.41 88.51 88.75 T:aegis128l 88.57 88.59 88.73 T:norx6444v2 88.45 88.59 88.72 T:aes128otrpv1 88.52 88.64 88.85 T:acorn128v3 88.64 88.86 89.23 T:aes128otrsv3 88.80 88.97 89.25 T:aes128otrpv2 88.98 89.09 89.27 T:norx6444v3 89.86 89.98 90.17 T:aes128otrcv3 90.15 90.28 90.49 T:aes128otrpv3 95.36 95.50 95.70 T:norx6444v1 95.91 96.08 96.20 T:aesjambuv1 97.23 97.30 97.61 T:aegis256 103.81 104.00 104.29 T:seakeyakv2 107.57 107.74 109.31 T:ketjeminorv2 108.59 108.69 109.07 T:twine80n6t4clocv3 113.11? 113.27? 132.05? T:aes256otrsv1 113.15 113.28 113.48 T:aes256otrsv2 114.27 114.48 114.66 T:aes256otrpv1 114.86 115.09 115.80 T:aes256otrpv2 114.61 115.39 115.88 T:aes256otrsv3 116.19 116.30 116.59 T:aes256otrpv3 118.03 118.32 119.20 T:aes256otrcv3 120.78 121.10 121.49 T:aezv4 123.56 123.75 123.97 aegis128l 124.38 124.81 125.56 T:aezv5 127.31 127.38 127.66 T:aeadaes128ocbtaglen64v1 127.04 127.42 127.94 T:deoxysi128v141 127.50 127.70 127.85 T:aeadaes128ocbtaglen96v1 127.66 127.81 128.08 T:aeadaes128ocbtaglen128v1 134.91 134.99 135.19 T:twine80n6t4clocv2 142.37 142.84 148.50 T:ketjesrv1 146.20 146.41 146.84 T:aeadaes192ocbtaglen64v1 146.20 146.62 147.02 T:aeadaes192ocbtaglen96v1 131.09? 146.89? 213.49? T:aeadaes192ocbtaglen128v1 147.19 147.32 147.66 T:deoxysii128v141 152.13 152.30 152.64 T:tiaoxinv2 152.06 152.32 152.45 T:tiaoxinv1 160.75 160.95 161.63 T:ketjemajorv2 167.11 167.32 167.83 T:oceankeyakv2 170.31 170.42 170.70 T:aeadaes256ocbtaglen64v1 170.58 170.74 171.00 T:aeadaes256ocbtaglen128v1 170.63 170.80 170.98 T:aeadaes256ocbtaglen96v1 175.61 175.81 177.13 T:colm0v1 170.94 176.63 176.87 T:ketjesrv2 179.99 180.17 181.69 T:colm127v1 188.88 189.05 189.30 T:proest256otrv1 194.65 194.96 195.32 T:deoxysi256v141 207.26 207.42 208.55 T:ketjejrv1 216.73 216.78 216.81 T:present80n6t4silcv3 226.74 227.27 230.15 T:aes128gcmv1 242.16 243.02 248.20 T:aes256gcmv1 283.64 284.07 284.79 T:proest128otrv1 305.45 305.59 305.92 T:deoxysneq128128v1 306.01 306.27 306.59 T:deoxysneq128128v13 345.88 346.42 346.88 T:aezv1 372.98 373.21 374.25 T:ketjejrv2 405.62 405.74 406.17 T:deoxyseq128128v13 405.49 406.24 447.88 T:lunarkeyakv2 411.55 411.75 412.00 T:deoxysii256v141 426.29 426.65 427.88 T:aezv3 499.55 500.09 500.48 T:deoxyseq128128v1 527.12 527.48 527.75 T:deoxysneq256128v1 527.70 527.88 528.24 T:deoxysneq256128v13 761.95 762.34 763.02 T:deoxyseq256128v13 848.50 848.89 851.52 T:deoxyseq256128v1 882.65 882.72 883.60 T:led80n6t4silcv3 6641.76 7244.89 7252.24 T:acorn128 9900.52 9908.05 9920.15 T:led80n6t4silcv2 9907.51 9930.76 9941.59 T:led80n6silcv1 14147.02 14148.71 14203.53 T:present80n6t4silcv2 14158.29 14162.94 14184.95 T:present80n6silcv1 14697.81 14706.01 14712.68 aes256gcmv1