VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Bonnell (106ca); 2011 Intel Atom N435; 1 x 1330MHz; h4atom, supercop-20250922

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.92 2.94 2.95 T:morus640128v2 3.10 3.13 3.15 T:morus640128v1 3.30 3.32 3.35 T:morus1280128v1 3.35 3.38 3.40 T:morus1280256v1 3.42 3.45 3.45 T:morus1280128v2 3.43 3.45 3.45 T:morus1280256v2 6.32 6.38 6.39 T:norx3241v2 6.37 6.40 6.42 T:norx3241v3 6.56 6.78 6.97 T:lunarkeyakv2 7.10 7.13 7.15 T:norx6441v3 7.19 7.22 7.23 T:norx6441v2 7.62 7.64 7.68 T:norx6444v3 7.60 7.65 7.70 T:norx6444v2 7.87 7.98 8.02 T:norx3241v1 8.21 8.28 8.59 T:seakeyakv2 8.47 8.52 8.59 T:norx6441v1 8.53 8.59 8.66 T:norx6444v1 8.61 8.67 8.84 T:oceankeyakv2 8.95 9.00 9.05 T:norx3261v2 9.08 9.11 9.15 T:norx3261v3 10.43 10.48 10.52 T:norx6461v3 10.54 10.62 10.64 T:norx6461v2 10.77 10.91 11.02 T:lakekeyakv1 11.87 12.00 12.06 T:lakekeyakv2 12.03 12.12 12.15 T:norx6461v1 12.08 12.18 12.26 T:norx3261v1 13.77 13.83 13.84 T:ascon128av11 13.80 13.83 13.88 T:tiaoxinv2 13.85 13.88 13.89 T:ascon96v1 13.96 14.01 14.01 ascon128av12 14.04 14.11 14.16 T:tiaoxinv1 16.50 16.55 16.57 T:acorn128v3 16.80 16.82 16.84 T:acorn128v2 16.91 16.98 17.01 T:aegis128l 20.99 21.00 21.01 ascon128v12 21.19 21.23 21.27 T:aegis128 21.62 21.63 21.63 T:ascon128v1 21.62 21.63 21.65 T:ascon128v11 25.45 25.50 25.51 T:aegis256 26.67 26.71 26.79 T:ketjemajorv2 28.70 28.77 28.84 T:riverkeyakv2 30.49 30.66 31.64 T:deoxysi128v141 31.35 31.40 31.45 T:ketjeminorv2 32.85 33.36 34.39 T:aes128gcmv1 34.42 34.60 34.78 T:deoxysi256v141 38.59 38.65 38.72 aegis128l 38.55 39.32 40.38 T:aes256gcmv1 41.60 41.63 42.08 T:aes128otrcv3 46.87 46.90 47.01 T:aes128otrpv2 46.86 46.92 46.98 T:aes128otrsv2 46.88 46.93 46.97 T:aes128otrpv1 47.33 47.36 47.40 T:aes128otrsv1 48.01 48.08 48.13 T:aes128otrsv3 48.33 48.40 48.45 T:aes128otrpv3 55.87 55.91 56.01 T:aes256otrcv3 60.41 60.76 61.90 T:deoxysii128v141 61.15 61.19 61.30 T:aes256otrsv2 61.14 61.23 61.27 T:aes256otrsv1 61.19 61.24 61.34 T:aes256otrpv1 61.97 62.05 62.15 T:aes256otrpv2 62.36 62.43 62.52 T:aes256otrsv3 62.54 62.59 62.73 T:aes256otrpv3 62.57 62.75 63.15 T:proest256otrv1 68.51 68.83 73.90 T:deoxysii256v141 70.25 70.42 70.50 T:aeadaes128ocbtaglen128v1 70.83 70.87 71.05 T:aesjambuv1 71.88 72.02 72.26 T:aeadaes128ocbtaglen64v1 71.96 72.14 72.29 T:aeadaes128ocbtaglen96v1 73.06 74.02 74.80 T:aeadaes192ocbtaglen128v1 76.41 76.53 76.91 T:aes128n8t8clocv2 76.49 76.53 76.67 T:aes128n8clocv1 76.51 76.60 77.31 T:aes128n12t8clocv3 76.51 76.60 76.71 T:aes128n12clocv1 76.48 76.66 77.81 T:aes128n12t8clocv2 78.11 78.16 78.22 T:twine80n6t4clocv3 78.90 82.12 82.59 T:aes128n12t8silcv3 82.08 82.12 82.19 T:aes128n12t8silcv2 82.13 82.17 82.55 T:aes128n8t8silcv2 83.68 83.79 83.94 T:aeadaes192ocbtaglen64v1 83.81 83.88 83.95 T:aeadaes192ocbtaglen96v1 93.00 93.09 93.16 T:aeadaes256ocbtaglen128v1 94.58 94.67 95.37 T:aeadaes256ocbtaglen64v1 94.60 94.72 94.78 T:aeadaes256ocbtaglen96v1 98.17 99.64 102.81 T:ketjesrv1 107.61 107.63 107.87 T:twine80n6t4clocv2 114.94 115.19 117.26 T:aezv4 112.01 116.10 116.59 T:ketjesrv2 117.85 118.04 118.21 T:aezv5 140.35 140.48 140.59 T:proest128otrv1 151.31 151.37 151.71 T:colm127v1 151.61 151.70 151.83 T:colm0v1 169.77 169.81 170.52 T:present80n6t4silcv3 180.13 180.23 180.41 T:ketjejrv1 214.50 214.55 214.74 T:deoxysneq128128v13 214.59 214.64 214.85 T:deoxysneq128128v1 317.90 318.08 319.43 T:ketjejrv2 392.62 394.39 401.58 T:aezv3 404.27 404.43 405.63 T:deoxysneq256128v1 404.32 404.90 407.43 T:deoxysneq256128v13 425.61 425.89 427.02 T:deoxyseq128128v1 433.61 433.69 434.73 T:deoxyseq128128v13 451.69 452.36 454.12 T:aezv1 741.11 741.62 741.81 T:led80n6t4silcv3 805.84 808.51 810.15 T:deoxyseq256128v1 815.21 816.01 848.91 T:deoxyseq256128v13 1698.85? 1745.31? 1959.52? T:acorn128 11750.78 11757.83 11764.58 T:led80n6t4silcv2 11752.83 11759.75 11783.64 T:led80n6silcv1 16770.83 16776.99 16785.25 T:present80n6silcv1 16769.68 16777.05 16800.90 T:present80n6t4silcv2 53725.25 53753.11 53806.45 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 2.91 2.95 2.96 T:morus640128v2 2.96 3.00 3.02 T:morus640128v1 3.15 3.19 3.20 T:morus1280256v2 3.14 3.19 3.21 T:morus1280128v2 3.14 3.19 3.21 T:morus1280256v1 3.13 3.20 3.21 T:morus1280128v1 6.41 6.42 6.42 T:norx3241v3 6.44 6.48 6.50 T:norx3241v2 6.68 6.82 7.10 T:lunarkeyakv2 7.38 7.44 7.50 T:norx6441v3 7.38 7.45 7.47 T:norx6441v2 7.89 7.93 7.95 T:norx6444v3 7.90 7.93 7.96 T:norx6444v2 8.07 8.16 8.18 T:norx3241v1 8.14 8.21 8.37 T:seakeyakv2 8.60 8.64 8.67 T:norx6441v1 8.67 8.72 8.87 T:oceankeyakv2 8.79 8.86 8.89 T:norx6444v1 9.04 9.08 9.10 T:norx3261v3 9.07 9.11 9.13 T:norx3261v2 10.23 10.29 10.34 T:norx6461v2 10.41 10.46 10.54 T:norx6461v3 10.80 10.90 11.05 T:lakekeyakv1 11.49 11.60 11.69 T:lakekeyakv2 12.18 12.23 12.27 T:norx6461v1 12.28 12.35 12.39 T:norx3261v1 13.37 13.44 13.49 T:tiaoxinv1 13.44 13.50 13.54 T:tiaoxinv2 13.92 13.95 13.95 ascon128av12 13.99 14.01 14.03 T:ascon96v1 14.17 14.20 14.21 T:ascon128av11 16.02 16.05 16.08 T:acorn128v2 17.03 17.04 17.06 T:acorn128v3 17.23 17.29 17.32 T:aegis128l 20.86 20.88 20.89 ascon128v12 21.09 21.13 21.15 T:ascon128v1 21.09 21.14 21.15 T:ascon128v11 21.12 21.16 21.20 T:aegis128 25.13 25.17 25.25 T:ketjemajorv2 25.44 25.49 25.53 T:aegis256 28.88 28.94 29.04 T:riverkeyakv2 31.77 31.83 31.92 T:ketjeminorv2 33.07 33.48 34.32 T:aes128gcmv1 36.69 36.84 36.96 T:deoxysi128v141 38.36 38.40 38.46 aegis128l 38.36 39.21 40.10 T:aes256gcmv1 41.39 41.59 41.73 T:deoxysi256v141 41.76 41.80 41.89 T:aes128otrcv3 48.26 48.83 49.18 T:aes128otrpv3 48.97 49.05 49.51 T:aes128otrsv3 49.80 49.84 49.87 T:aes128otrpv1 49.82 49.85 49.90 T:aes128otrpv2 49.81 49.86 49.89 T:aes128otrsv2 49.83 49.94 51.45 T:aes128otrsv1 56.02 56.09 56.18 T:aes256otrcv3 60.90 61.06 61.29 T:deoxysii128v141 61.16 61.29 61.45 T:proest256otrv1 62.96 63.01 63.06 T:aes256otrpv3 63.29 63.38 63.48 T:aes256otrsv3 64.07 64.11 64.16 T:aes256otrsv2 64.05 64.13 64.23 T:aes256otrpv1 64.07 64.16 64.24 T:aes256otrsv1 64.91 64.95 65.02 T:aes256otrpv2 69.03 69.22 69.73 T:deoxysii256v141 70.69 70.81 70.91 T:aesjambuv1 78.08 78.13 78.24 T:aes128n8t8clocv2 78.10 78.14 78.22 T:aes128n8clocv1 78.11 78.17 78.27 T:aes128n12t8clocv3 78.11 78.18 78.24 T:aes128n12t8clocv2 78.14 78.21 78.32 T:aes128n12clocv1 78.23 78.26 78.32 T:twine80n6t4clocv3 78.43 81.51 82.03 T:aes128n12t8silcv3 81.90 81.95 82.28 T:aes128n12t8silcv2 81.90 81.95 82.01 T:aes128n8t8silcv2 85.85 86.07 86.99 T:aeadaes128ocbtaglen128v1 87.41 87.51 87.68 T:aeadaes128ocbtaglen64v1 87.44 87.56 88.43 T:aeadaes128ocbtaglen96v1 93.39 95.23 95.68 T:aeadaes192ocbtaglen128v1 100.23 100.67 104.81 T:ketjesrv1 102.51 102.62 104.49 T:aeadaes192ocbtaglen96v1 102.62 102.83 102.99 T:aeadaes192ocbtaglen64v1 99.47 103.59 104.02 T:ketjesrv2 108.45 108.55 108.91 T:twine80n6t4clocv2 110.93 111.15 111.28 T:aezv4 113.79 113.86 114.93 T:aezv5 116.84 116.91 117.42 T:aeadaes256ocbtaglen128v1 118.48 118.62 119.00 T:aeadaes256ocbtaglen64v1 118.61 118.78 120.10 T:aeadaes256ocbtaglen96v1 138.16 138.29 138.60 T:proest128otrv1 169.51 169.62 170.17 T:present80n6t4silcv3 176.99 177.11 177.90 T:ketjejrv1 182.22 182.31 182.90 T:colm0v1 185.42 185.52 185.89 T:colm127v1 289.92 290.06 290.97 T:ketjejrv2 339.61 339.69 341.52 T:deoxysneq128128v13 339.90 340.01 341.91 T:deoxysneq128128v1 388.63 389.76 395.93 T:aezv3 433.67 433.85 435.08 T:deoxyseq128128v13 448.19 448.67 451.05 T:aezv1 545.82 546.15 547.91 T:deoxysneq256128v1 545.51 547.93 553.31 T:deoxysneq256128v13 677.06 678.62 682.95 T:deoxyseq128128v1 740.83 741.09 741.54 T:led80n6t4silcv3 815.00 817.06 823.08 T:deoxyseq256128v13 1089.92 1092.34 1096.22 T:deoxyseq256128v1 1689.36? 1876.38? 1917.30? T:acorn128 11747.53 11750.46 11757.46 T:led80n6t4silcv2 11752.58 11757.83 11766.41 T:led80n6silcv1 16764.48 16768.23 16778.68 T:present80n6t4silcv2 16767.67 16773.11 16789.81 T:present80n6silcv1 53752.01 53818.12 53850.14 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 2.94 2.94 2.95 T:morus640128v2 2.99 3.00 3.01 T:morus640128v1 3.18 3.19 3.20 T:morus1280128v1 3.19 3.20 3.20 T:morus1280128v2 3.19 3.20 3.20 T:morus1280256v2 3.19 3.20 3.20 T:morus1280256v1 6.42 6.42 6.42 T:norx3241v3 6.47 6.48 6.48 T:norx3241v2 6.71 6.87 7.00 T:lunarkeyakv2 7.56 7.58 7.69 T:norx6441v2 7.56 7.58 7.59 T:norx6441v3 8.03 8.05 8.06 T:norx6444v3 8.04 8.06 8.08 T:norx6444v2 8.16 8.16 8.16 T:norx3241v1 8.15 8.19 8.22 T:seakeyakv2 8.69 8.74 8.76 T:oceankeyakv2 8.75 8.77 8.79 T:norx6441v1 8.95 8.96 8.99 T:norx6444v1 9.07 9.08 9.08 T:norx3261v3 9.11 9.11 9.11 T:norx3261v2 10.41 10.42 10.48 T:norx6461v2 10.58 10.61 10.62 T:norx6461v3 10.96 11.03 11.12 T:lakekeyakv1 11.69 11.74 11.93 T:lakekeyakv2 12.35 12.35 12.36 T:norx3261v1 12.34 12.36 12.37 T:norx6461v1 13.39 13.44 13.48 T:tiaoxinv1 13.45 13.50 13.55 T:tiaoxinv2 13.94 13.95 13.96 ascon128av12 13.97 14.01 14.02 T:ascon96v1 14.17 14.20 14.21 T:ascon128av11 16.02 16.04 16.07 T:acorn128v2 17.01 17.03 17.06 T:acorn128v3 17.24 17.30 17.33 T:aegis128l 20.87 20.88 20.88 ascon128v12 21.12 21.13 21.14 T:ascon128v1 21.12 21.13 21.14 T:ascon128v11 21.13 21.16 21.22 T:aegis128 25.27 25.29 25.42 T:ketjemajorv2 25.58 25.63 25.65 T:aegis256 28.92 28.95 28.99 T:riverkeyakv2 31.90 31.97 32.05 T:ketjeminorv2 33.25 33.53 35.19 T:aes128gcmv1 36.87 36.96 37.08 T:deoxysi128v141 38.49 38.54 38.63 aegis128l 38.97 39.43 41.35 T:aes256gcmv1 41.65 41.68 41.81 T:deoxysi256v141 48.90 48.92 49.00 T:aes128otrpv3 49.10 49.13 49.23 T:aes128otrsv3 49.93 49.96 50.08 T:aes128otrpv2 49.89 49.98 50.14 T:aes128otrsv1 49.95 49.98 50.33 T:aes128otrpv1 49.93 50.01 50.28 T:aes128otrsv2 42.23? 55.02? 59.62? T:aes128otrcv3 56.04 56.07 56.13 T:aes256otrcv3 61.07 61.13 61.45 T:deoxysii128v141 61.19 61.24 61.36 T:proest256otrv1 63.10 63.16 63.29 T:aes256otrpv3 63.43 63.52 63.61 T:aes256otrsv3 64.13 64.24 64.37 T:aes256otrsv1 64.21 64.25 64.83 T:aes256otrsv2 64.23 64.26 64.36 T:aes256otrpv1 65.10 65.14 65.21 T:aes256otrpv2 69.16 69.27 69.69 T:deoxysii256v141 70.68 70.73 70.97 T:aesjambuv1 78.14 78.18 78.23 T:aes128n12t8clocv2 78.13 78.18 78.25 T:aes128n8t8clocv2 78.13 78.20 78.79 T:aes128n8clocv1 78.14 78.22 78.29 T:aes128n12t8clocv3 78.14 78.22 78.34 T:aes128n12clocv1 78.24 78.27 78.32 T:twine80n6t4clocv3 78.71 81.94 82.06 T:aes128n12t8silcv3 81.91 81.95 82.01 T:aes128n12t8silcv2 81.93 81.98 82.42 T:aes128n8t8silcv2 85.88 85.95 86.03 T:aeadaes128ocbtaglen128v1 87.46 87.51 88.00 T:aeadaes128ocbtaglen64v1 87.50 87.56 87.78 T:aeadaes128ocbtaglen96v1 93.26 94.31 95.43 T:aeadaes192ocbtaglen128v1 100.36 101.25 104.93 T:ketjesrv1 102.52 102.57 102.60 T:aeadaes192ocbtaglen96v1 102.52 102.95 103.14 T:aeadaes192ocbtaglen64v1 99.62 103.73 104.16 T:ketjesrv2 106.34 108.52 109.22 T:twine80n6t4clocv2 110.51 110.86 111.87 T:aezv4 113.56 113.68 114.89 T:aezv5 116.86 116.92 117.75 T:aeadaes256ocbtaglen128v1 118.48 118.95 119.05 T:aeadaes256ocbtaglen64v1 118.75 119.66 120.17 T:aeadaes256ocbtaglen96v1 138.21 138.26 138.39 T:proest128otrv1 169.52 169.54 169.61 T:present80n6t4silcv3 177.25 177.41 177.72 T:ketjejrv1 182.18 182.36 183.50 T:colm0v1 182.51 182.57 183.13 T:colm127v1 290.11 290.32 291.92 T:ketjejrv2 339.68 339.84 341.86 T:deoxysneq128128v13 339.94 340.23 342.95 T:deoxysneq128128v1 388.36 388.55 390.41 T:aezv3 433.81 434.16 435.74 T:deoxyseq128128v13 447.48 448.36 449.96 T:aezv1 545.66 545.89 551.17 T:deoxysneq256128v13 545.89 546.28 548.03 T:deoxysneq256128v1 676.99 678.68 679.60 T:deoxyseq128128v1 740.67 740.98 741.63 T:led80n6t4silcv3 814.26 815.46 817.97 T:deoxyseq256128v13 1088.22 1093.88 1096.30 T:deoxyseq256128v1 1455.81 1461.84 1465.51 aes256gcmv1 1683.07? 1876.47? 1916.19? T:acorn128 11745.12 11748.78 11765.32 T:led80n6t4silcv2 11753.45 11758.39 11770.08 T:led80n6silcv1 16764.88 16772.92 16785.67 T:present80n6t4silcv2 16765.72 16777.60 16791.71 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.66 2.69 2.74 T:morus640128v2 2.76 2.79 2.81 T:morus640128v1 2.95 2.98 3.02 T:morus1280128v1 2.99 3.02 3.07 T:morus1280256v1 3.02 3.05 3.09 T:morus1280256v2 3.02 3.06 3.07 T:morus1280128v2 6.09 6.10 6.12 T:norx3241v2 6.18 6.18 6.19 T:norx3241v3 6.85 6.91 6.93 T:seakeyakv2 7.05 7.07 7.10 T:norx6441v3 7.09 7.11 7.12 T:norx6441v2 7.15 7.19 7.32 T:oceankeyakv2 7.46 7.48 7.49 T:norx6444v2 7.46 7.48 7.49 T:norx6444v3 7.68 7.75 7.82 T:norx3241v1 8.39 8.39 8.41 T:norx6441v1 8.42 8.44 8.47 T:norx6444v1 8.82 8.83 8.84 T:norx3261v2 8.89 8.89 8.89 T:norx3261v3 8.85 8.89 9.03 T:lunarkeyakv2 10.42 10.44 10.46 T:norx6461v3 10.48 10.50 10.52 T:norx6461v2 10.51 10.57 10.62 T:lakekeyakv2 10.54 10.59 10.73 T:lakekeyakv1 11.91 11.95 12.01 T:norx3261v1 11.97 11.98 11.99 T:norx6461v1 13.74 13.79 13.85 T:tiaoxinv2 13.77 13.79 13.81 T:ascon128av11 13.80 13.82 13.86 ascon128av12 13.85 13.90 13.96 T:tiaoxinv1 13.99 14.01 14.03 T:ascon96v1 16.02 16.03 16.06 T:acorn128v3 16.40 16.42 16.47 T:acorn128v2 16.89 16.92 16.95 T:aegis128l 20.58 20.60 20.68 T:riverkeyakv2 20.61 20.63 20.67 ascon128v12 20.93 20.99 21.04 T:aegis128 19.88 21.29 21.36 T:ascon128v11 21.29 21.31 21.36 T:ascon128v1 22.20 22.23 22.28 T:ketjemajorv2 24.93 24.95 24.97 T:aegis256 24.81 25.28 26.19 T:aes128gcmv1 27.75 28.12 29.38 T:aes256gcmv1 28.91 28.98 29.42 T:ketjeminorv2 31.01 31.16 31.37 T:deoxysi128v141 32.71 32.78 33.10 aegis128l 34.82 35.00 35.31 T:deoxysi256v141 41.64 41.69 41.79 T:aes128otrcv3 42.92 42.94 43.26 T:aes128otrsv2 42.93 42.96 43.02 T:aes128otrsv1 43.46 43.57 43.63 T:aes128otrsv3 45.24 45.28 45.33 T:aes128otrpv2 45.23 45.29 45.34 T:aes128otrpv1 46.08 46.26 46.67 T:deoxysii128v141 46.31 46.34 46.40 T:aes128otrpv3 53.21 53.40 53.63 T:deoxysii256v141 55.93 56.05 57.14 T:aes256otrcv3 57.20 57.27 57.41 T:aes128n12clocv1 57.23 57.33 57.46 T:aes128n12t8clocv2 57.21 57.39 57.46 T:aes128n8t8clocv2 57.37 57.44 57.57 T:aes256otrsv2 57.39 57.45 57.50 T:aes256otrsv1 57.19 57.45 58.54 T:aes128n8clocv1 57.27 57.47 57.87 T:aes128n12t8clocv3 57.97 58.16 58.67 T:aes256otrsv3 59.66 59.72 60.09 T:aes256otrpv2 59.74 59.77 59.89 T:aes256otrpv1 60.78 60.84 61.08 T:aes256otrpv3 61.19 61.25 61.48 T:aes128n12t8silcv3 61.23 61.27 61.33 T:aes128n8t8silcv2 61.23 61.29 61.42 T:aes128n12t8silcv2 61.81 61.92 62.01 T:proest256otrv1 69.15 69.17 69.34 T:aeadaes128ocbtaglen64v1 69.19 69.32 69.44 T:aeadaes128ocbtaglen96v1 69.30 69.38 69.73 T:aeadaes128ocbtaglen128v1 70.75 70.84 70.96 T:aesjambuv1 73.26 73.62 74.20 T:aeadaes192ocbtaglen128v1 77.86 77.90 78.11 T:twine80n6t4clocv3 81.49 81.55 81.69 T:aeadaes192ocbtaglen64v1 81.51 81.58 81.75 T:aeadaes192ocbtaglen96v1 86.15 87.14 90.59 T:ketjesrv1 92.45 92.51 92.67 T:aeadaes256ocbtaglen64v1 92.49 92.51 92.76 T:aeadaes256ocbtaglen96v1 92.64 92.69 92.79 T:aeadaes256ocbtaglen128v1 92.70 92.90 93.79 T:aezv4 93.13 93.31 94.28 T:aezv5 98.33 101.87 102.24 T:ketjesrv2 103.52 103.57 104.02 T:twine80n6t4clocv2 110.32 110.43 110.92 T:colm127v1 110.64 110.76 111.31 T:colm0v1 139.50 139.72 140.40 T:proest128otrv1 156.39 156.47 157.08 T:ketjejrv1 168.95 168.97 169.30 T:present80n6t4silcv3 214.31 214.44 215.13 T:deoxysneq128128v13 214.55 214.70 215.42 T:deoxysneq128128v1 288.08 288.29 288.90 T:ketjejrv2 292.07 293.32 295.65 T:aezv3 298.00 298.70 301.22 T:aezv1 319.43 319.53 320.26 T:deoxyseq128128v1 323.63 323.74 324.50 T:deoxyseq128128v13 404.35 404.47 404.95 T:deoxysneq256128v1 404.12 404.47 404.87 T:deoxysneq256128v13 604.78 605.26 606.70 T:deoxyseq256128v1 608.78 609.19 609.35 T:deoxyseq256128v13 740.41 740.55 740.98 T:led80n6t4silcv3 1725.33? 1756.08? 1948.72? T:acorn128 8807.15 8810.78 8821.93 T:led80n6t4silcv2 8809.57 8813.76 8823.13 T:led80n6silcv1 12578.49 12581.16 12595.35 T:present80n6t4silcv2 12579.17 12581.86 12592.56 T:present80n6silcv1 27615.73 27640.79 27681.16 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.63 2.67 2.72 T:morus640128v1 2.66 2.69 2.74 T:morus640128v2 2.86 2.90 2.98 T:morus1280128v1 2.87 2.90 2.98 T:morus1280256v2 2.86 2.90 2.96 T:morus1280128v2 2.85 2.91 2.96 T:morus1280256v1 6.13 6.15 6.19 T:norx3241v2 6.13 6.17 6.25 T:norx3241v3 6.87 6.96 7.05 T:seakeyakv2 7.15 7.19 7.35 T:oceankeyakv2 7.26 7.32 7.43 T:norx6441v2 7.27 7.34 7.47 T:norx6441v3 7.58 7.62 7.67 T:norx6444v2 7.60 7.62 7.67 T:norx6444v3 7.78 7.85 7.93 T:norx3241v1 8.41 8.45 8.52 T:norx6441v1 8.53 8.56 8.62 T:norx6444v1 8.80 8.85 8.94 T:norx3261v3 8.81 8.86 8.93 T:norx3261v2 8.82 8.94 9.12 T:lunarkeyakv2 10.31 10.39 10.47 T:lakekeyakv2 10.31 10.42 10.51 T:norx6461v2 10.47 10.54 10.65 T:norx6461v3 10.59 10.66 10.86 T:lakekeyakv1 11.99 12.04 12.09 T:norx6461v1 11.95 12.04 12.13 T:norx3261v1 12.54 12.63 12.70 T:tiaoxinv1 12.56 12.65 12.75 T:tiaoxinv2 13.75 13.79 13.84 ascon128av12 13.96 14.02 14.06 T:ascon96v1 14.04 14.07 14.13 T:ascon128av11 16.11 16.17 16.44 T:acorn128v2 16.35 16.41 16.50 T:acorn128v3 16.75 16.79 16.86 T:aegis128l 20.55 20.57 20.64 ascon128v12 20.64 20.72 20.78 T:aegis128 20.74 20.80 20.92 T:riverkeyakv2 19.63 21.10 21.18 T:ascon128v11 21.10 21.13 21.17 T:ascon128v1 21.40 21.45 21.52 T:ketjemajorv2 24.93 24.98 25.57 T:aegis256 24.85 25.18 25.56 T:aes128gcmv1 27.76 28.08 28.38 T:aes256gcmv1 29.13 29.23 29.64 T:ketjeminorv2 32.58 32.63 32.70 aegis128l 34.00 34.13 34.42 T:deoxysi128v141 38.42 38.58 39.67 T:deoxysi256v141 41.74 41.77 41.81 T:aes128otrcv3 43.92 44.01 44.05 T:aes128otrsv3 44.38 44.42 44.44 T:aes128otrsv2 44.37 44.43 45.34 T:aes128otrsv1 46.49 46.56 46.59 T:aes128otrpv3 46.69 46.73 47.09 T:aes128otrpv2 46.73 46.79 48.40 T:aes128otrpv1 46.75 46.86 47.87 T:deoxysii128v141 53.32 53.52 54.33 T:deoxysii256v141 56.02 56.07 56.16 T:aes256otrcv3 58.07 58.11 58.38 T:aes128n12clocv1 58.04 58.11 58.43 T:aes128n8t8clocv2 58.03 58.14 58.21 T:aes128n8clocv1 58.05 58.15 58.50 T:aes128n12t8clocv2 58.06 58.25 58.37 T:aes128n12t8clocv3 58.43 58.49 58.59 T:aes256otrsv3 58.83 58.91 59.01 T:aes256otrsv2 58.86 58.96 59.57 T:aes256otrsv1 60.96 61.03 61.13 T:aes256otrpv3 61.11 61.16 61.23 T:aes128n12t8silcv2 61.12 61.17 61.25 T:aes128n12t8silcv3 61.13 61.18 61.30 T:aes256otrpv2 61.10 61.18 61.26 T:proest256otrv1 61.14 61.21 61.35 T:aes128n8t8silcv2 61.12 61.21 61.59 T:aes256otrpv1 70.86 70.98 71.25 T:aesjambuv1 76.93 77.05 77.15 T:aeadaes128ocbtaglen64v1 76.99 77.11 77.22 T:aeadaes128ocbtaglen96v1 77.12 77.22 77.73 T:aeadaes128ocbtaglen128v1 77.87 77.94 78.10 T:twine80n6t4clocv3 83.20 83.87 84.63 T:aeadaes192ocbtaglen128v1 87.15 87.56 91.60 T:ketjesrv1 90.58 90.76 91.84 T:aezv4 90.91 90.99 91.62 T:aeadaes192ocbtaglen96v1 90.89 91.02 91.18 T:aeadaes192ocbtaglen64v1 91.08 91.15 91.71 T:aezv5 92.37 95.65 96.01 T:ketjesrv2 103.89 104.03 104.37 T:twine80n6t4clocv2 104.40 104.52 104.67 T:aeadaes256ocbtaglen96v1 104.53 104.63 104.97 T:aeadaes256ocbtaglen128v1 104.40 104.66 105.08 T:aeadaes256ocbtaglen64v1 125.93 126.01 126.61 T:colm0v1 127.38 127.47 128.28 T:colm127v1 138.41 138.54 139.16 T:proest128otrv1 154.81 154.92 155.41 T:ketjejrv1 168.79 168.85 169.19 T:present80n6t4silcv3 276.98 277.19 278.29 T:deoxysneq128128v13 277.21 277.33 280.00 T:deoxysneq128128v1 277.10 277.34 278.24 T:ketjejrv2 290.05 291.05 295.15 T:aezv3 296.37 296.70 297.76 T:aezv1 323.50 323.94 324.93 T:deoxyseq128128v13 445.87 446.40 448.64 T:deoxyseq128128v1 474.48 475.96 478.67 T:deoxysneq256128v13 475.03 476.00 478.19 T:deoxysneq256128v1 608.94 609.21 609.46 T:deoxyseq256128v13 740.30 740.46 740.62 T:led80n6t4silcv3 747.18 749.52 752.29 T:deoxyseq256128v1 1712.89? 1889.76? 1915.42? T:acorn128 8809.69 8814.14 8819.68 T:led80n6t4silcv2 8811.92 8814.74 8824.26 T:led80n6silcv1 12575.88 12578.42 12583.21 T:present80n6t4silcv2 12578.59 12580.97 12594.36 T:present80n6silcv1 27599.76 27627.53 27654.68 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 2.66 2.66 2.67 T:morus640128v1 2.69 2.69 2.71 T:morus640128v2 2.89 2.90 2.90 T:morus1280128v2 2.90 2.90 2.90 T:morus1280256v1 2.90 2.90 2.91 T:morus1280128v1 2.90 2.90 2.90 T:morus1280256v2 6.15 6.15 6.16 T:norx3241v2 6.17 6.17 6.17 T:norx3241v3 6.88 6.93 7.11 T:seakeyakv2 7.19 7.21 7.29 T:oceankeyakv2 7.37 7.38 7.40 T:norx6441v2 7.40 7.41 7.45 T:norx6441v3 7.68 7.70 7.74 T:norx6444v2 7.67 7.70 7.77 T:norx6444v3 7.84 7.85 7.87 T:norx3241v1 8.51 8.53 8.55 T:norx6441v1 8.61 8.62 8.66 T:norx6444v1 8.85 8.85 8.86 T:norx3261v3 8.85 8.86 8.86 T:norx3261v2 8.84 8.90 9.00 T:lunarkeyakv2 10.43 10.46 10.49 T:lakekeyakv2 10.48 10.50 10.85 T:norx6461v2 10.59 10.61 10.65 T:norx6461v3 10.62 10.65 10.77 T:lakekeyakv1 12.03 12.04 12.04 T:norx3261v1 12.08 12.10 12.22 T:norx6461v1 12.60 12.63 12.84 T:tiaoxinv1 12.61 12.64 12.69 T:tiaoxinv2 13.79 13.79 13.79 ascon128av12 13.99 14.01 14.03 T:ascon96v1 14.05 14.07 14.10 T:ascon128av11 16.15 16.16 16.20 T:acorn128v2 16.40 16.41 16.42 T:acorn128v3 16.76 16.81 16.83 T:aegis128l 20.56 20.56 20.59 ascon128v12 20.68 20.70 20.75 T:aegis128 20.78 20.82 20.85 T:riverkeyakv2 19.64 21.12 21.15 T:ascon128v11 21.12 21.13 21.16 T:ascon128v1 21.48 21.52 21.59 T:ketjemajorv2 24.98 25.01 25.05 T:aegis256 25.07 25.29 26.50 T:aes128gcmv1 27.68 28.08 28.32 T:aes256gcmv1 29.19 29.28 29.75 T:ketjeminorv2 32.64 32.68 32.72 aegis128l 33.97 34.04 35.28 T:deoxysi128v141 38.67 38.75 39.84 T:deoxysi256v141 41.76 41.78 41.80 T:aes128otrcv3 44.04 44.08 44.13 T:aes128otrsv3 44.46 44.49 44.59 T:aes128otrsv1 44.46 44.52 46.02 T:aes128otrsv2 46.60 46.64 47.02 T:aes128otrpv3 46.77 46.80 46.86 T:aes128otrpv1 46.77 46.82 46.88 T:aes128otrpv2 46.83 46.87 47.16 T:deoxysii128v141 53.52 53.61 53.87 T:deoxysii256v141 56.04 56.12 56.48 T:aes256otrcv3 58.05 58.08 58.14 T:aes128n8t8clocv2 58.05 58.10 58.21 T:aes128n12t8clocv2 58.07 58.11 58.17 T:aes128n12clocv1 58.07 58.26 58.76 T:aes128n8clocv1 58.09 58.27 58.54 T:aes128n12t8clocv3 58.50 58.61 58.72 T:aes256otrsv3 58.93 58.97 59.06 T:aes256otrsv2 58.90 58.98 59.08 T:aes256otrsv1 61.06 61.10 61.19 T:aes256otrpv3 61.12 61.18 61.44 T:aes128n12t8silcv2 61.13 61.18 61.39 T:aes128n12t8silcv3 61.17 61.19 61.75 T:proest256otrv1 61.16 61.19 61.31 T:aes128n8t8silcv2 61.19 61.52 62.14 T:aes256otrpv2 61.26 61.63 62.16 T:aes256otrpv1 70.88 70.93 72.21 T:aesjambuv1 77.02 77.08 77.13 T:aeadaes128ocbtaglen96v1 77.09 77.18 77.55 T:aeadaes128ocbtaglen64v1 77.15 77.19 77.24 T:aeadaes128ocbtaglen128v1 77.91 77.94 77.98 T:twine80n6t4clocv3 83.29 84.27 85.18 T:aeadaes192ocbtaglen128v1 87.23 87.72 91.63 T:ketjesrv1 90.51 90.63 91.61 T:aezv4 90.92 91.02 91.19 T:aezv5 90.96 91.16 91.56 T:aeadaes192ocbtaglen96v1 90.93 91.18 91.57 T:aeadaes192ocbtaglen64v1 92.05 95.69 96.02 T:ketjesrv2 103.98 104.02 104.21 T:twine80n6t4clocv2 104.52 104.56 104.89 T:aeadaes256ocbtaglen128v1 104.60 104.63 105.25 T:aeadaes256ocbtaglen64v1 104.52 105.00 105.21 T:aeadaes256ocbtaglen96v1 125.94 125.97 126.37 T:colm127v1 125.95 126.04 126.39 T:colm0v1 138.45 138.56 139.73 T:proest128otrv1 154.93 155.03 155.52 T:ketjejrv1 168.83 168.88 169.24 T:present80n6t4silcv3 277.03 277.13 278.26 T:deoxysneq128128v13 277.04 277.24 279.44 T:deoxysneq128128v1 277.20 277.29 277.94 T:ketjejrv2 290.02 290.58 291.89 T:aezv3 296.14 296.69 297.60 T:aezv1 323.72 323.88 324.64 T:deoxyseq128128v13 445.29 446.38 447.74 T:deoxyseq128128v1 475.05 475.81 476.10 T:deoxysneq256128v1 475.00 476.03 478.72 T:deoxysneq256128v13 608.93 609.38 609.85 T:deoxyseq256128v13 740.26 740.41 740.62 T:led80n6t4silcv3 745.13 747.85 749.09 T:deoxyseq256128v1 1455.39 1461.18 1463.02 aes256gcmv1 1713.79? 1889.94? 1916.68? T:acorn128 8807.49 8811.92 8814.73 T:led80n6t4silcv2 8811.29 8814.70 8823.43 T:led80n6silcv1 12577.64 12580.37 12595.03 T:present80n6t4silcv2 12578.09 12583.74 12596.10 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 2.40 2.44 2.45 T:morus640128v1 2.43 2.44 2.45 T:morus640128v2 2.58 2.63 2.66 T:morus1280128v1 2.61 2.66 2.67 T:morus1280256v1 2.62 2.67 2.68 T:morus1280128v2 2.63 2.67 2.67 T:morus1280256v2 5.61? 5.69? 6.86? T:oceankeyakv2 5.56? 5.69? 9.72? T:lunarkeyakv2 5.77 5.81 5.82 T:norx3241v2 5.93 5.96 5.98 T:norx3241v3 6.46 6.51 6.55 T:seakeyakv2 6.96 7.00 7.01 T:norx6441v2 6.94 7.01 7.04 T:norx6441v3 7.27 7.31 7.34 T:norx6444v2 7.28 7.31 7.32 T:norx6444v3 7.46 7.53 7.57 T:norx3241v1 8.24 8.25 8.27 T:norx6441v1 8.20 8.26 8.28 T:norx6444v1 8.64 8.65 8.67 T:norx3261v2 8.63 8.67 8.70 T:norx3261v3 8.59 8.68 8.71 T:lakekeyakv2 9.61 9.76 9.85 T:lakekeyakv1 10.32 10.40 10.42 T:norx6461v3 10.36 10.40 10.43 T:norx6461v2 11.69 11.73 11.75 T:norx3261v1 11.81 11.84 11.87 T:norx6461v1 13.60 13.63 13.64 ascon128av12 13.67 13.71 13.75 T:tiaoxinv1 13.71 13.73 13.78 T:tiaoxinv2 13.74 13.76 13.77 T:ascon128av11 14.11 14.14 14.16 T:ascon96v1 15.48 15.52 15.55 T:acorn128v3 16.00 16.02 16.07 T:acorn128v2 16.29 16.77 17.47 T:aes128gcmv1 16.18 16.84 17.86 T:aes256gcmv1 16.75 16.85 17.00 T:aegis128l 17.71 17.76 17.81 T:ketjemajorv2 18.52 18.61 18.64 T:riverkeyakv2 20.24 20.25 20.26 ascon128v12 20.68 20.72 20.76 T:aegis128 20.99 21.00 21.03 T:ascon128v11 20.99? 21.00? 41.19? T:ascon128v1 24.40 24.43 24.50 T:aegis256 26.43 26.48 26.53 T:ketjeminorv2 26.81 26.85 26.88 aegis128l 30.39 30.59 30.74 T:deoxysii128v141 30.36 30.67 30.76 T:deoxysi128v141 34.32 34.44 34.62 T:deoxysi256v141 34.35 34.50 34.62 T:deoxysii256v141 37.88 37.93 37.96 T:aes128n8t8clocv2 37.91 37.95 38.10 T:aes128n12t8clocv2 37.91 37.96 38.01 T:aes128n8clocv1 37.91 37.96 38.07 T:aes128n12t8clocv3 37.93 37.97 38.00 T:aes128n12clocv1 38.95 38.98 39.02 T:aes128otrsv1 38.96 38.99 39.04 T:aes128otrsv2 38.95 39.00 39.09 T:aes128otrsv3 40.36 40.38 40.69 T:aes128n8t8silcv2 40.37 40.41 40.45 T:aes128n12t8silcv3 40.35 40.41 40.48 T:aes128n12t8silcv2 41.79 41.87 42.65 T:aes128otrcv3 43.60 43.62 43.70 T:aes128otrpv2 43.59 43.67 44.50 T:aes128otrpv1 44.34 44.39 44.45 T:aes128otrpv3 53.55 53.58 53.68 T:aes256otrsv3 53.63 53.67 53.72 T:aes256otrsv1 53.64 53.70 53.79 T:aes256otrsv2 56.04 56.11 56.17 T:aes256otrcv3 58.25 58.31 58.53 T:aes256otrpv1 59.03 59.09 59.15 T:aes256otrpv3 59.05 59.10 59.15 T:aes256otrpv2 61.06 61.10 61.22 T:proest256otrv1 66.42 66.49 66.62 T:aeadaes128ocbtaglen96v1 66.48 66.73 67.09 T:aeadaes128ocbtaglen64v1 68.17 68.29 68.59 T:aezv5 68.29 68.45 68.75 T:aeadaes128ocbtaglen128v1 69.28 69.38 69.55 T:colm127v1 69.65 69.76 69.93 T:colm0v1 70.38 70.47 71.00 T:aezv4 70.68 70.73 70.79 T:aesjambuv1 72.44 73.23 74.28 T:aeadaes192ocbtaglen128v1 73.94 74.38 78.52 T:ketjesrv1 77.59 77.64 77.72 T:twine80n6t4clocv3 79.20 79.30 79.61 T:aeadaes192ocbtaglen96v1 79.19 79.35 79.49 T:aeadaes192ocbtaglen64v1 83.45 87.59 88.01 T:ketjesrv2 90.26 90.32 90.39 T:aeadaes256ocbtaglen96v1 90.29 90.41 90.67 T:aeadaes256ocbtaglen64v1 92.18 92.26 92.36 T:aeadaes256ocbtaglen128v1 99.46 99.56 100.19 T:twine80n6t4clocv2 132.56 132.65 133.28 T:ketjejrv1 138.71 138.77 138.89 T:proest128otrv1 144.28 144.57 145.84 T:aezv1 168.14 168.17 168.52 T:present80n6t4silcv3 191.58 191.67 191.90 T:aezv3 213.27 213.42 214.18 T:deoxyseq128128v1 213.54 213.65 213.88 T:deoxyseq128128v13 214.14 214.19 214.25 T:deoxysneq128128v13 214.49 214.56 215.72 T:deoxysneq128128v1 264.26 264.33 265.32 T:ketjejrv2 403.84 404.16 405.97 T:deoxysneq256128v13 393.52 404.34 405.58 T:deoxyseq256128v1 404.21 404.35 405.69 T:deoxysneq256128v1 403.24 404.59 405.63 T:deoxyseq256128v13 739.34 739.69 740.17 T:led80n6t4silcv3 1454.89 1456.19 1458.60 aes256gcmv1 1711.65? 1757.01? 1972.24? T:acorn128 5870.71 5872.25 5877.46 T:led80n6t4silcv2 5874.40 5878.89 5881.53 T:led80n6silcv1 8384.08 8387.56 8388.79 T:present80n6t4silcv2 8385.67 8388.23 8392.47 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 2.29 2.32 2.34 T:morus640128v1 2.40 2.44 2.46 T:morus640128v2 2.57 2.60 2.61 T:morus1280128v1 2.57 2.60 2.62 T:morus1280256v2 2.52 2.60 2.62 T:morus1280256v1 2.55 2.60 2.61 T:morus1280128v2 5.64 5.66 5.70 T:oceankeyakv2 5.56? 5.68? 6.35? T:lunarkeyakv2 5.77 5.82 5.82 T:norx3241v2 5.88 5.92 5.93 T:norx3241v3 6.46 6.49 6.54 T:seakeyakv2 7.13 7.18 7.20 T:norx6441v2 7.17 7.24 7.28 T:norx6441v3 7.28 7.30 7.32 T:norx6444v3 7.27 7.30 7.32 T:norx6444v2 7.50 7.53 7.54 T:norx3241v1 8.23 8.25 8.28 T:norx6444v1 8.24 8.26 8.28 T:norx6441v1 8.56 8.61 8.65 T:norx3261v2 8.58 8.63 8.66 T:norx3261v3 8.65 8.69 8.71 T:lakekeyakv2 9.72 9.77 9.81 T:lakekeyakv1 10.49 10.55 10.58 T:norx6461v2 10.52 10.62 10.65 T:norx6461v3 11.69 11.73 11.76 T:norx3261v1 11.68 11.78 11.82 T:tiaoxinv2 11.76 11.81 11.86 T:tiaoxinv1 11.82 11.84 11.86 T:norx6461v1 13.60 13.63 13.63 ascon128av12 13.92 13.94 13.97 T:ascon128av11 13.96 14.01 14.05 T:ascon96v1 15.76 15.77 15.80 T:acorn128v3 16.25 16.27 16.31 T:acorn128v2 16.23 16.29 16.32 T:aegis128l 16.49 16.74 17.36 T:aes128gcmv1 16.52 17.34 18.13 T:aes256gcmv1 17.70 17.78 17.82 T:ketjemajorv2 18.59 18.61 18.65 T:riverkeyakv2 20.17 20.23 20.26 T:aegis128 20.24 20.25 20.29 ascon128v12 21.10 21.13 21.14 T:ascon128v11 21.11? 21.14? 42.17? T:ascon128v1 24.40 24.44 24.51 T:aegis256 26.43 26.48 26.54 T:ketjeminorv2 26.80 26.85 26.89 aegis128l 30.47 30.58 30.66 T:deoxysii128v141 30.51 30.60 30.76 T:deoxysi128v141 34.36 34.50 34.68 T:deoxysii256v141 34.31 34.53 35.01 T:deoxysi256v141 37.89 37.93 37.97 T:aes128n8t8clocv2 37.93 37.95 37.98 T:aes128n12t8clocv2 37.93 37.97 37.99 T:aes128n8clocv1 37.93 37.99 38.40 T:aes128n12t8clocv3 37.94 38.01 38.55 T:aes128n12clocv1 38.96 38.97 39.03 T:aes128otrsv1 38.96 38.98 39.01 T:aes128otrsv2 38.97 39.02 39.09 T:aes128otrsv3 40.36 40.39 40.44 T:aes128n12t8silcv3 40.37 40.40 40.44 T:aes128n8t8silcv2 40.36 40.42 40.47 T:aes128n12t8silcv2 42.17 42.25 42.32 T:aes128otrcv3 43.59 43.63 43.66 T:aes128otrpv2 43.61 43.64 43.70 T:aes128otrpv1 44.32 44.36 44.45 T:aes128otrpv3 53.55 53.62 53.68 T:aes256otrsv3 53.62 53.67 53.78 T:aes256otrsv2 53.64 53.67 53.72 T:aes256otrsv1 56.05 56.13 56.32 T:aes256otrcv3 58.27 58.40 59.19 T:aes256otrpv1 59.03 59.07 59.17 T:aes256otrpv3 58.30 59.09 59.14 T:aes256otrpv2 61.13 61.17 61.22 T:proest256otrv1 66.53 66.58 66.65 T:aeadaes128ocbtaglen96v1 66.48 66.61 66.81 T:aeadaes128ocbtaglen64v1 68.25 68.32 68.36 T:aezv5 68.36 68.51 68.59 T:aeadaes128ocbtaglen128v1 69.34 69.39 69.54 T:colm127v1 69.69 69.75 69.90 T:colm0v1 70.42 70.47 70.60 T:aezv4 71.05 71.12 71.21 T:aesjambuv1 72.36 73.36 74.41 T:aeadaes192ocbtaglen128v1 73.97 74.56 78.50 T:ketjesrv1 77.61 77.63 77.91 T:twine80n6t4clocv3 79.20 79.27 79.45 T:aeadaes192ocbtaglen64v1 79.29 79.38 79.52 T:aeadaes192ocbtaglen96v1 84.46 87.59 88.10 T:ketjesrv2 90.28 90.32 90.41 T:aeadaes256ocbtaglen64v1 90.35 90.38 90.48 T:aeadaes256ocbtaglen96v1 92.17 92.38 93.03 T:aeadaes256ocbtaglen128v1 99.47 99.51 99.69 T:twine80n6t4clocv2 132.58 132.63 132.73 T:ketjejrv1 138.71 138.81 139.87 T:proest128otrv1 144.36 144.47 148.05 T:aezv1 167.99 168.20 168.52 T:present80n6t4silcv3 191.46 191.60 191.86 T:aezv3 213.61 213.71 213.85 T:deoxyseq128128v13 213.43 213.90 214.18 T:deoxyseq128128v1 214.11 214.23 215.83 T:deoxysneq128128v1 214.24 214.30 214.53 T:deoxysneq128128v13 264.23 264.35 265.30 T:ketjejrv2 399.53 403.49 405.72 T:deoxyseq256128v1 403.98 404.12 405.17 T:deoxysneq256128v13 403.89 404.17 405.76 T:deoxysneq256128v1 403.32 404.56 405.15 T:deoxyseq256128v13 739.36 739.47 741.07 T:led80n6t4silcv3 1456.30 1457.47 1459.73 aes256gcmv1 1725.52? 1903.45? 1944.96? T:acorn128 5869.71 5872.52 5875.28 T:led80n6t4silcv2 5878.23 5888.40 5892.74 T:led80n6silcv1 8385.08 8388.49 8391.09 T:present80n6silcv1 8383.73 8389.18 8396.66 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 2.32 2.33 2.34 T:morus640128v1 2.44 2.45 2.46 T:morus640128v2 2.60 2.60 2.61 T:morus1280256v1 2.60 2.60 2.61 T:morus1280256v2 2.60 2.60 2.61 T:morus1280128v1 2.59 2.61 2.61 T:morus1280128v2 5.47 5.60 5.76 T:lunarkeyakv2 5.64 5.67 5.72 T:oceankeyakv2 5.81 5.82 5.82 T:norx3241v2 5.91 5.92 5.92 T:norx3241v3 6.54 6.56 6.62 T:seakeyakv2 7.16 7.18 7.20 T:norx6441v2 7.22 7.24 7.27 T:norx6441v3 7.29 7.31 7.33 T:norx6444v2 7.29 7.31 7.32 T:norx6444v3 7.53 7.53 7.53 T:norx3241v1 8.24 8.25 8.27 T:norx6441v1 8.23 8.26 8.27 T:norx6444v1 8.60 8.61 8.61 T:norx3261v2 8.61 8.63 8.67 T:norx3261v3 8.56 8.68 8.77 T:lakekeyakv2 9.72 9.76 9.78 T:lakekeyakv1 10.53 10.55 10.57 T:norx6461v2 10.60 10.61 10.63 T:norx6461v3 11.72 11.73 11.73 T:norx3261v1 11.75 11.79 11.84 T:tiaoxinv2 11.77 11.80 11.83 T:tiaoxinv1 11.83 11.85 11.86 T:norx6461v1 13.63 13.63 13.63 ascon128av12 13.93 13.94 13.96 T:ascon128av11 13.99 14.01 14.02 T:ascon96v1 15.75 15.77 15.79 T:acorn128v3 16.24 16.28 16.37 T:acorn128v2 16.25 16.29 16.33 T:aegis128l 16.56 16.80 17.35 T:aes128gcmv1 16.64 16.95 17.68 T:aes256gcmv1 17.71 17.77 17.80 T:ketjemajorv2 18.58 18.61 18.64 T:riverkeyakv2 20.18 20.21 20.26 T:aegis128 20.25 20.25 20.25 ascon128v12 21.12 21.13 21.43 T:ascon128v11 21.12? 21.14? 41.17? T:ascon128v1 24.38 24.43 24.49 T:aegis256 26.43 26.50 26.62 T:ketjeminorv2 26.79 26.85 26.95 aegis128l 30.54 30.56 30.59 T:deoxysii128v141 30.49 30.60 30.64 T:deoxysi128v141 34.41 34.47 34.56 T:deoxysi256v141 34.45 34.48 34.55 T:deoxysii256v141 37.92 37.94 37.98 T:aes128n12t8clocv2 37.91 37.94 37.97 T:aes128n8t8clocv2 37.94 37.96 38.02 T:aes128n8clocv1 37.94 37.97 37.99 T:aes128n12t8clocv3 37.95 37.99 38.03 T:aes128n12clocv1 38.94 38.98 39.04 T:aes128otrsv2 38.95 39.01 39.22 T:aes128otrsv1 38.98 39.02 39.11 T:aes128otrsv3 40.35 40.39 40.44 T:aes128n12t8silcv3 40.37 40.40 40.44 T:aes128n8t8silcv2 40.38 40.41 40.77 T:aes128n12t8silcv2 42.19 42.23 42.25 T:aes128otrcv3 43.59 43.62 43.67 T:aes128otrpv1 43.60 43.63 43.65 T:aes128otrpv2 44.32 44.38 44.44 T:aes128otrpv3 53.53 53.65 53.78 T:aes256otrsv3 53.62 53.68 53.82 T:aes256otrsv1 53.62 53.68 53.79 T:aes256otrsv2 56.04 56.12 56.19 T:aes256otrcv3 58.27 58.36 59.21 T:aes256otrpv1 59.03 59.06 59.12 T:aes256otrpv3 58.34 59.10 59.16 T:aes256otrpv2 61.13 61.17 61.35 T:proest256otrv1 66.48 66.54 67.04 T:aeadaes128ocbtaglen64v1 66.54 66.61 67.04 T:aeadaes128ocbtaglen96v1 68.23 68.29 68.33 T:aezv5 68.35 68.41 68.58 T:aeadaes128ocbtaglen128v1 69.33 69.39 69.44 T:colm127v1 69.71 69.75 69.80 T:colm0v1 70.34 70.42 70.52 T:aezv4 71.06 71.09 71.16 T:aesjambuv1 72.87 73.40 74.33 T:aeadaes192ocbtaglen128v1 73.98 74.43 78.56 T:ketjesrv1 77.61 77.63 77.67 T:twine80n6t4clocv3 79.28 79.37 79.49 T:aeadaes192ocbtaglen96v1 79.21 79.38 79.53 T:aeadaes192ocbtaglen64v1 83.45 87.56 87.65 T:ketjesrv2 90.30 90.35 90.43 T:aeadaes256ocbtaglen64v1 90.34 90.38 90.43 T:aeadaes256ocbtaglen96v1 92.14 92.21 92.29 T:aeadaes256ocbtaglen128v1 99.50 99.51 99.80 T:twine80n6t4clocv2 132.59 132.63 132.70 T:ketjejrv1 138.72 138.81 139.19 T:proest128otrv1 144.42 144.59 144.79 T:aezv1 168.14 168.24 168.83 T:present80n6t4silcv3 191.54 191.63 193.29 T:aezv3 213.33 213.40 213.61 T:deoxyseq128128v1 213.67 213.72 213.88 T:deoxyseq128128v13 214.14 214.23 215.42 T:deoxysneq128128v1 214.25 214.33 214.45 T:deoxysneq128128v13 264.01 264.27 264.77 T:ketjejrv2 402.98 403.40 404.36 T:deoxyseq256128v1 403.88 403.98 405.20 T:deoxysneq256128v1 403.98 404.07 405.47 T:deoxysneq256128v13 403.30 404.57 412.57 T:deoxyseq256128v13 739.30 739.49 740.36 T:led80n6t4silcv3 1456.51 1457.44 1462.78 aes256gcmv1 1716.06? 1903.61? 1943.75? T:acorn128 5869.49 5871.42 5873.72 T:led80n6t4silcv2 5874.56 5878.87 5882.63 T:led80n6silcv1 8384.65 8388.00 8392.33 T:present80n6t4silcv2 8387.18 8388.86 8398.14 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 3.00 3.00 3.04 T:morus640128v2 3.08 3.08 3.12 T:morus640128v1 3.58 3.59 3.62 T:morus1280128v1 3.63 3.64 3.70 T:morus1280256v1 3.70 3.70 3.72 T:morus1280128v2 3.70 3.70 3.74 T:morus1280256v2 6.65 6.65 6.68 T:norx3241v2 6.73 6.73 6.78 T:norx3241v3 8.20 8.20 8.29 T:norx3241v1 8.42 8.43 8.48 T:norx6441v3 8.46 8.46 8.53 T:norx6441v2 9.57 9.58 9.64 T:norx3261v2 9.63 9.64 9.65 T:norx6441v1 9.65 9.65 9.68 T:norx3261v3 10.49 10.50 10.56 T:seakeyakv2 11.05 11.06 11.10 T:norx6444v2 11.08 11.09 11.12 T:norx6444v3 11.86 11.87 11.95 T:lakekeyakv2 12.29 12.29 12.31 T:norx6444v1 12.34 12.34 12.40 T:norx6461v3 12.41 12.42 12.50 T:norx6461v2 12.66 12.66 12.77 T:norx3261v1 13.13 13.15 13.25 T:lakekeyakv1 13.64 13.65 13.66 T:norx6461v1 14.12 14.12 14.15 T:ascon128av11 14.16 14.16 14.21 ascon128av12 14.35 14.35 14.37 T:ascon96v1 14.37 14.38 14.49 T:oceankeyakv2 19.00 19.01 19.05 T:acorn128v3 19.15 19.16 19.21 T:acorn128v2 19.93 19.95 19.98 T:aegis128l 20.28 20.30 20.32 T:tiaoxinv2 20.54 20.56 20.60 T:tiaoxinv1 20.94 20.95 20.97 ascon128v12 21.63 21.64 21.69 T:ascon128v1 21.63 21.64 21.70 T:ascon128v11 21.74 21.75 21.77 T:riverkeyakv2 22.83 22.85 22.91 T:aegis128 24.73 24.74 24.88 T:lunarkeyakv2 27.93 27.94 28.63 T:aegis256 28.02 28.03 28.07 T:ketjemajorv2 32.17 32.19 32.21 T:ketjeminorv2 33.41 33.47 34.08 T:aes128gcmv1 33.45 33.52 33.74 T:deoxysi128v141 36.54 36.57 36.57 aegis128l 36.75 36.79 37.44 T:aes256gcmv1 37.92 37.97 38.34 T:deoxysi256v141 43.71 43.73 43.77 T:aes128otrcv3 44.65 44.67 44.74 T:aes128otrsv2 44.66 44.68 44.73 T:aes128otrsv1 45.31 45.37 45.42 T:aes128otrsv3 46.95 46.97 47.06 T:aes128otrpv1 46.94 46.99 47.04 T:aes128otrpv2 48.08 48.09 48.14 T:aes128otrpv3 48.70 48.78 49.23 T:deoxysii128v141 57.73 57.75 57.87 T:aes128n8t8clocv2 57.66 57.75 58.28 T:deoxysii256v141 57.75 57.78 57.98 T:aes128n12t8clocv2 57.79 57.81 57.91 T:aes128n12t8clocv3 57.89 57.92 58.00 T:aes128n12clocv1 57.84 57.93 58.01 T:aes128n8clocv1 58.57 58.66 58.75 T:aes256otrcv3 59.62 59.66 59.77 T:aes256otrsv2 59.66 59.70 60.47 T:aes256otrsv1 60.26 60.28 60.35 T:aes256otrsv3 61.89 61.92 61.94 T:aes256otrpv2 61.95 61.95 62.05 T:aes256otrpv1 62.15 62.17 62.24 T:aes128n8t8silcv2 62.16 62.19 62.26 T:aes128n12t8silcv2 62.17 62.20 62.27 T:aes128n12t8silcv3 63.04 63.07 63.14 T:aes256otrpv3 67.30 67.32 67.39 T:proest256otrv1 70.85 70.86 71.04 T:aeadaes128ocbtaglen64v1 70.89 70.92 70.96 T:aeadaes128ocbtaglen96v1 71.03 71.15 71.84 T:aeadaes128ocbtaglen128v1 71.80 71.83 71.94 T:aesjambuv1 75.57 75.64 76.26 T:aeadaes192ocbtaglen128v1 79.17 79.18 79.26 T:twine80n6t4clocv3 83.33 83.36 84.02 T:aeadaes192ocbtaglen64v1 83.41 83.42 83.54 T:aeadaes192ocbtaglen96v1 88.72 88.93 92.66 T:ketjesrv1 90.29 90.31 91.39 T:aezv4 90.27 90.31 90.44 T:aezv5 94.68 94.73 95.01 T:aeadaes256ocbtaglen64v1 94.72 94.75 95.40 T:aeadaes256ocbtaglen96v1 94.85 94.87 94.91 T:aeadaes256ocbtaglen128v1 104.87 104.87 105.01 T:twine80n6t4clocv2 102.24 105.14 105.18 T:ketjesrv2 112.33 112.42 112.95 T:colm127v1 112.79 112.85 113.27 T:colm0v1 145.62 145.64 145.69 T:proest128otrv1 158.58 158.68 159.22 T:ketjejrv1 170.96 170.98 171.18 T:present80n6t4silcv3 215.54 215.58 216.31 T:deoxysneq128128v13 215.74 215.79 216.64 T:deoxysneq128128v1 290.74 291.46 294.33 T:aezv1 292.01 292.12 292.84 T:ketjejrv2 293.04 293.29 295.07 T:aezv3 321.80 321.85 322.73 T:deoxyseq128128v1 327.03 327.09 327.91 T:deoxyseq128128v13 406.47 406.71 409.66 T:deoxysneq256128v1 406.59 406.88 408.26 T:deoxysneq256128v13 608.84 609.34 610.99 T:deoxyseq256128v1 615.18 615.56 618.52 T:deoxyseq256128v13 746.17 746.40 747.07 T:led80n6t4silcv3 1958.84 1967.84 2145.44 T:acorn128 8856.20 8863.34 8868.76 T:led80n6silcv1 8860.34 8871.96 8876.34 T:led80n6t4silcv2 12646.28 12647.53 12651.59 T:present80n6silcv1 12645.73 12656.18 12665.29 T:present80n6t4silcv2 28149.99 28164.87 28197.05 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.95 2.97 3.03 T:morus640128v1 3.04 3.04 3.13 T:morus640128v2 3.53 3.53 3.56 T:morus1280128v1 3.53 3.53 3.57 T:morus1280256v1 3.57 3.57 3.68 T:morus1280256v2 3.57 3.58 3.67 T:morus1280128v2 6.70 6.70 6.78 T:norx3241v2 6.71 6.71 6.81 T:norx3241v3 8.32 8.32 8.41 T:norx3241v1 8.69 8.70 8.79 T:norx6441v2 8.74 8.74 8.88 T:norx6441v3 9.61 9.61 9.76 T:norx3261v2 9.61 9.61 9.72 T:norx3261v3 9.65 9.66 9.71 T:norx6441v1 10.56 10.58 10.65 T:seakeyakv2 11.24 11.26 11.29 T:norx6444v2 11.29 11.31 11.34 T:norx6444v3 11.68 11.71 11.79 T:lakekeyakv2 12.30 12.31 12.44 T:norx6461v2 12.41 12.42 12.47 T:norx6444v1 12.45 12.47 12.61 T:norx6461v3 12.75 12.75 12.89 T:norx3261v1 13.03 13.07 13.36 T:lakekeyakv1 13.65 13.66 13.74 T:norx6461v1 14.13 14.13 14.18 ascon128av12 14.35 14.35 14.41 T:ascon96v1 14.41 14.41 14.47 T:ascon128av11 14.46 14.50 14.69 T:oceankeyakv2 18.45 18.46 18.55 T:tiaoxinv1 18.49 18.50 18.63 T:tiaoxinv2 18.88 18.89 19.03 T:acorn128v2 19.41 19.42 19.53 T:acorn128v3 19.81 19.83 19.88 T:aegis128l 20.89 20.89 20.91 ascon128v12 21.45 21.45 21.50 T:ascon128v11 21.45 21.46 21.51 T:ascon128v1 21.89 21.90 22.08 T:riverkeyakv2 22.56 22.59 22.63 T:aegis128 24.73 24.75 24.96 T:lunarkeyakv2 27.26 27.27 27.33 T:ketjemajorv2 27.94 27.96 28.02 T:aegis256 32.39 32.42 32.49 T:ketjeminorv2 33.70 33.85 34.18 T:aes128gcmv1 36.38 36.40 36.75 T:deoxysi128v141 36.46 36.48 36.94 aegis128l 36.92 36.99 37.54 T:aes256gcmv1 41.54 41.61 41.93 T:deoxysi256v141 43.81 43.84 43.88 T:aes128otrcv3 45.83 45.85 45.91 T:aes128otrsv3 46.16 46.18 46.23 T:aes128otrsv1 46.18 46.19 46.22 T:aes128otrsv2 48.36 48.38 48.45 T:aes128otrpv3 48.45 48.50 48.58 T:aes128otrpv1 48.48 48.51 48.56 T:aes128otrpv2 49.47 49.55 51.10 T:deoxysii128v141 57.89 57.94 58.29 T:deoxysii256v141 58.53 58.54 58.65 T:aes128n8t8clocv2 58.55 58.57 58.65 T:aes128n12t8clocv2 58.59 58.60 58.68 T:aes128n12t8clocv3 58.70 58.72 58.82 T:aes128n12clocv1 58.65 58.73 58.81 T:aes256otrcv3 58.68 58.76 59.67 T:aes128n8clocv1 61.16 61.17 61.28 T:aes256otrsv2 61.12 61.18 62.07 T:aes256otrsv1 60.86 61.61 61.68 T:aes256otrsv3 62.07 62.08 62.14 T:aes128n12t8silcv2 62.06 62.10 62.19 T:aes128n8t8silcv2 62.11 62.20 62.87 T:aes128n12t8silcv3 63.31 63.34 64.06 T:aes256otrpv3 63.41 63.44 63.59 T:aes256otrpv1 63.41 63.45 64.22 T:aes256otrpv2 66.70 66.73 66.79 T:proest256otrv1 71.95 71.97 72.04 T:aesjambuv1 79.08 79.11 79.43 T:aeadaes128ocbtaglen64v1 79.11 79.24 81.21 T:aeadaes128ocbtaglen96v1 79.20 79.24 79.32 T:aeadaes128ocbtaglen128v1 79.24 79.24 79.36 T:twine80n6t4clocv3 85.84 85.91 86.49 T:aeadaes192ocbtaglen128v1 88.14 88.17 88.36 T:aezv4 88.13 88.17 88.88 T:aezv5 89.76 90.10 93.68 T:ketjesrv1 93.19 93.32 93.71 T:aeadaes192ocbtaglen96v1 93.17 93.42 94.18 T:aeadaes192ocbtaglen64v1 95.13 98.92 98.98 T:ketjesrv2 105.30 105.33 105.52 T:twine80n6t4clocv2 107.19 107.28 107.36 T:aeadaes256ocbtaglen96v1 107.30 107.35 107.40 T:aeadaes256ocbtaglen128v1 107.25 107.54 108.16 T:aeadaes256ocbtaglen64v1 128.15 128.27 129.07 T:colm0v1 129.37 129.48 130.14 T:colm127v1 144.54 144.60 144.75 T:proest128otrv1 157.06 157.10 157.69 T:ketjejrv1 170.85 170.87 171.32 T:present80n6t4silcv3 278.21 278.27 281.67 T:deoxysneq128128v13 278.36 278.53 279.74 T:deoxysneq128128v1 281.11 281.29 282.31 T:ketjejrv2 289.34 290.44 292.64 T:aezv1 290.92 291.16 292.39 T:aezv3 327.08 327.21 327.98 T:deoxyseq128128v13 447.64 448.52 451.09 T:deoxyseq128128v1 477.19 477.45 481.12 T:deoxysneq256128v1 477.50 478.60 482.21 T:deoxysneq256128v13 615.25 615.73 618.32 T:deoxyseq256128v13 746.06 746.40 746.55 T:led80n6t4silcv3 750.57 751.71 754.95 T:deoxyseq256128v1 1941.13 2113.36 2118.32 T:acorn128 8850.78 8854.50 8867.92 T:led80n6t4silcv2 8858.26 8862.79 8869.49 T:led80n6silcv1 12642.55 12644.73 12651.08 T:present80n6t4silcv2 12643.46 12651.51 12659.82 T:present80n6silcv1 28179.52 28197.36 28211.16 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.95 2.95 2.96 T:morus640128v1 3.04 3.04 3.05 T:morus640128v2 3.53 3.53 3.53 T:morus1280128v1 3.53 3.53 3.54 T:morus1280256v1 3.57 3.57 3.57 T:morus1280128v2 3.57 3.57 3.57 T:morus1280256v2 6.70 6.70 6.71 T:norx3241v2 6.71 6.71 6.72 T:norx3241v3 8.32 8.32 8.32 T:norx3241v1 8.79 8.79 8.82 T:norx6441v2 8.83 8.83 8.87 T:norx6441v3 9.61 9.61 9.62 T:norx3261v3 9.61 9.61 9.62 T:norx3261v2 9.75 9.76 9.80 T:norx6441v1 10.62 10.66 10.68 T:seakeyakv2 11.34 11.37 11.55 T:norx6444v2 11.37 11.38 11.41 T:norx6444v3 11.76 11.78 11.80 T:lakekeyakv2 12.39 12.40 12.42 T:norx6461v2 12.52 12.52 12.55 T:norx6444v1 12.54 12.55 12.58 T:norx6461v3 12.75 12.75 12.75 T:norx3261v1 13.08 13.12 13.38 T:lakekeyakv1 13.73 13.74 13.76 T:norx6461v1 14.13 14.13 14.14 ascon128av12 14.34 14.35 14.37 T:ascon96v1 14.41 14.42 14.64 T:ascon128av11 14.56 14.58 14.71 T:oceankeyakv2 18.44 18.45 18.49 T:tiaoxinv1 18.45 18.46 18.50 T:tiaoxinv2 18.89 18.89 18.92 T:acorn128v2 19.42 19.42 19.44 T:acorn128v3 19.79 19.83 20.06 T:aegis128l 20.88 20.89 20.89 ascon128v12 21.45 21.45 21.48 T:ascon128v11 21.45 21.45 21.48 T:ascon128v1 21.95 21.96 21.99 T:riverkeyakv2 22.55 22.57 22.59 T:aegis128 24.81 24.87 24.92 T:lunarkeyakv2 27.36 27.37 27.47 T:ketjemajorv2 28.03 28.04 28.07 T:aegis256 32.49 32.50 32.56 T:ketjeminorv2 33.69 33.74 34.03 T:aes128gcmv1 36.30 36.35 38.24 T:deoxysi128v141 36.54 36.55 36.64 aegis128l 36.85 36.90 37.32 T:aes256gcmv1 41.93 41.96 42.24 T:deoxysi256v141 43.80 43.81 43.83 T:aes128otrcv3 45.94 45.97 46.06 T:aes128otrsv3 46.27 46.28 46.39 T:aes128otrsv1 46.26 46.29 46.38 T:aes128otrsv2 48.45 48.46 48.52 T:aes128otrpv3 48.55 48.59 48.71 T:aes128otrpv1 48.58 48.64 48.97 T:aes128otrpv2 49.65 49.70 50.80 T:deoxysii128v141 58.05 58.12 59.48 T:deoxysii256v141 58.52 58.53 58.55 T:aes128n8t8clocv2 58.56 58.59 58.62 T:aes128n12t8clocv2 58.60 58.63 58.66 T:aes128n12t8clocv3 58.66 58.70 58.83 T:aes128n8clocv1 58.64 58.73 58.76 T:aes256otrcv3 58.72 58.75 59.08 T:aes128n12clocv1 61.22 61.24 61.30 T:aes256otrsv1 60.95 61.70 61.79 T:aes256otrsv3 62.05 62.09 62.28 T:aes128n12t8silcv2 62.05 62.10 62.20 T:aes256otrsv2 62.06 62.11 62.30 T:aes128n8t8silcv2 62.11 62.12 62.17 T:aes128n12t8silcv3 63.39 63.42 63.50 T:aes256otrpv3 63.48 63.52 63.61 T:aes256otrpv2 63.49 63.52 63.61 T:aes256otrpv1 66.72 66.73 66.77 T:proest256otrv1 71.96 71.98 72.01 T:aesjambuv1 79.07 79.09 79.13 T:aeadaes128ocbtaglen64v1 79.14 79.18 79.22 T:aeadaes128ocbtaglen96v1 79.25 79.26 79.44 T:twine80n6t4clocv3 79.23 79.33 81.05 T:aeadaes128ocbtaglen128v1 85.85 86.39 86.65 T:aeadaes192ocbtaglen128v1 87.98 88.03 88.08 T:aezv4 88.00 88.07 89.40 T:aezv5 89.87 90.00 93.82 T:ketjesrv1 93.15 93.18 93.53 T:aeadaes192ocbtaglen64v1 93.23 93.31 93.70 T:aeadaes192ocbtaglen96v1 95.28 99.04 99.11 T:ketjesrv2 105.29 105.31 105.80 T:twine80n6t4clocv2 107.22 107.30 107.35 T:aeadaes256ocbtaglen96v1 107.16 107.49 107.77 T:aeadaes256ocbtaglen64v1 107.32 107.83 108.26 T:aeadaes256ocbtaglen128v1 128.10 128.13 128.85 T:colm0v1 129.32 129.36 130.17 T:colm127v1 144.54 144.59 144.68 T:proest128otrv1 157.16 157.19 157.43 T:ketjejrv1 170.83 170.86 171.09 T:present80n6t4silcv3 278.28 278.34 279.56 T:deoxysneq128128v13 278.33 278.41 279.59 T:deoxysneq128128v1 281.19 281.42 281.98 T:ketjejrv2 289.12 289.73 291.03 T:aezv1 290.82 291.00 293.01 T:aezv3 327.18 327.31 328.17 T:deoxyseq128128v13 447.50 447.64 448.79 T:deoxyseq128128v1 477.28 477.37 479.85 T:deoxysneq256128v1 477.47 477.74 480.83 T:deoxysneq256128v13 615.25 615.74 616.15 T:deoxyseq256128v13 746.26 746.43 746.77 T:led80n6t4silcv3 751.34 751.68 753.69 T:deoxyseq256128v1 2009.08 2009.44 2010.65 aes256gcmv1 1945.70 2113.62 2121.09 T:acorn128 8859.29 8861.11 8868.34 T:led80n6silcv1 8859.27 8866.49 8870.85 T:led80n6t4silcv2 12643.40 12646.76 12658.31 T:present80n6silcv1 12643.61 12649.21 12662.25 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.76 9.84 10.21 T:morus640128v1 10.06 10.12 10.73 T:morus640128v2 17.56 17.63 18.36 T:morus1280256v1 17.59 17.66 18.43 T:morus1280128v1 17.79 17.84 19.43 T:norx3241v1 17.98 18.02 18.78 T:norx3241v2 18.08 18.11 19.24 T:norx3241v3 18.45 18.48 19.55 T:morus1280128v2 18.53 18.56 19.75 T:morus1280256v2 21.80 21.80 22.44 T:ascon128av11 21.97 21.97 22.95 ascon128av12 22.11 22.22 22.89 T:ascon96v1 24.95 24.96 25.80 T:norx3261v2 25.19 25.19 26.02 T:norx3261v3 27.22 27.23 29.45 T:norx3261v1 28.11 28.11 28.92 ascon128v12 28.83 28.83 29.70 T:ascon128v11 28.83 28.94 29.72 T:ascon128v1 32.28 32.34 32.62 T:norx6441v1 33.48 33.53 34.11 T:norx6441v2 33.61 33.72 34.18 T:norx6441v3 43.48 43.59 43.92 T:norx6461v1 46.84 46.95 47.54 T:norx6461v3 47.16 47.18 48.01 T:norx6461v2 50.62 50.79 52.08 T:lakekeyakv1 52.93 53.02 53.95 T:riverkeyakv2 55.84 56.05 57.67 T:lakekeyakv2 65.69 65.91 66.99 T:aegis128 68.60 69.03 70.68 T:aes128n8t8clocv2 68.95 69.20 71.30 T:aes128n12t8clocv2 70.24 70.57 72.62 T:aes128n12t8clocv3 70.72 70.80 72.18 T:aes128n8clocv1 71.30 71.48 72.73 T:aes128n12clocv1 82.04 82.15 82.79 T:acorn128v2 82.86 83.11 84.28 T:aes128n12t8silcv2 83.01 83.20 84.39 T:aes128n8t8silcv2 83.53 83.66 84.90 T:aes128otrsv1 83.81 84.10 85.38 T:aes128otrsv2 84.05 84.20 85.36 T:aes128n12t8silcv3 85.23 85.44 86.53 T:aes128otrpv1 85.61 85.73 86.21 T:aes128otrpv2 86.24 86.34 87.45 T:aes128otrsv3 86.58 86.63 86.67 T:norx6444v2 87.46 87.58 88.38 T:acorn128v3 87.48 87.62 87.81 T:norx6444v3 87.89 88.05 88.68 T:aes128otrpv3 88.34 88.48 88.84 T:aegis128l 89.50 89.66 90.77 T:aes128otrcv3 95.16 95.20 95.38 T:norx6444v1 95.47 95.58 96.05 T:aesjambuv1 96.24 96.30 97.21 T:aegis256 102.22 102.52 104.41 T:seakeyakv2 106.55 106.69 107.31 T:ketjeminorv2 108.44 108.62 109.49 T:twine80n6t4clocv3 109.92 110.02 111.03 T:aeadaes128ocbtaglen64v1 109.92 110.03 111.02 T:aes256otrsv2 110.10 110.18 111.27 T:deoxysi128v141 110.04 110.23 110.85 T:aes256otrsv1 110.13 110.26 111.48 T:aeadaes128ocbtaglen128v1 110.23 110.33 112.18 T:aeadaes128ocbtaglen96v1 111.65 111.77 112.99 T:aes256otrpv1 111.70 112.38 113.01 T:aes256otrpv2 112.52 113.27 113.88 T:aes256otrsv3 114.23 114.36 115.23 T:aes256otrpv3 117.48 117.80 119.37 T:aes256otrcv3 122.44 122.64 124.16 aegis128l 125.11 125.46 129.02 T:aezv4 127.10 127.21 127.96 T:aeadaes192ocbtaglen64v1 127.11 127.47 128.00 T:aeadaes192ocbtaglen96v1 128.80 129.12 130.79 T:aezv5 120.86? 134.37? 198.18? T:aeadaes192ocbtaglen128v1 134.68 134.79 138.16 T:twine80n6t4clocv2 140.45 140.93 146.59 T:ketjesrv1 146.00 146.16 147.42 T:aeadaes256ocbtaglen64v1 146.13 146.27 147.20 T:aeadaes256ocbtaglen96v1 146.43 146.57 147.36 T:aeadaes256ocbtaglen128v1 146.84 147.05 147.40 T:deoxysii128v141 160.41 160.63 161.06 T:ketjemajorv2 160.60 160.77 162.79 T:colm0v1 164.23 164.38 165.73 T:colm127v1 164.96? 166.22? 216.02? T:oceankeyakv2 169.61 169.75 170.64 T:tiaoxinv2 173.23 173.55 174.53 T:tiaoxinv1 175.80 175.88 177.04 T:deoxysi256v141 176.78 181.48 181.84 T:ketjesrv2 192.74 193.12 195.59 T:proest256otrv1 207.98 208.28 208.73 T:ketjejrv1 217.00 217.05 217.32 T:present80n6t4silcv3 224.36 225.55 234.38 T:aes128gcmv1 240.80 241.54 250.78 T:aes256gcmv1 242.72 242.98 243.16 T:deoxysneq128128v13 242.84 243.16 243.75 T:deoxysneq128128v1 283.71 283.99 286.12 T:proest128otrv1 338.53 339.05 341.13 T:aezv1 374.13 374.63 375.02 T:deoxyseq128128v1 381.85 382.10 382.69 T:ketjejrv2 403.98 404.14 407.52 T:lunarkeyakv2 404.66 405.20 405.69 T:deoxyseq128128v13 410.93 411.23 412.23 T:deoxysii256v141 430.61 430.86 435.34 T:aezv3 456.66 456.88 457.47 T:deoxysneq256128v1 456.65 456.92 489.01 T:deoxysneq256128v13 707.29 708.05 746.73 T:deoxyseq256128v1 761.09 761.49 762.54 T:deoxyseq256128v13 882.84 882.96 883.69 T:led80n6t4silcv3 6644.75 6664.80 7323.41 T:acorn128 9920.40 9923.11 9936.50 T:led80n6t4silcv2 9918.27 9926.12 9938.51 T:led80n6silcv1 14150.49 14156.89 14164.57 T:present80n6t4silcv2 14161.47 14166.64 14178.59 T:present80n6silcv1 40822.44 40832.32 40860.07 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.50 9.51 9.88 T:morus640128v1 10.99 11.00 11.98 T:morus640128v2 17.89 17.95 19.02 T:morus1280128v1 17.91 17.98 18.93 T:morus1280256v1 17.97? 17.98? 24.36? T:norx3241v3 17.98 18.03 19.67 T:norx3241v1 18.05 18.10 18.48 T:norx3241v2 18.92 18.95 19.80 T:morus1280256v2 18.90 18.96 20.08 T:morus1280128v2 21.93 21.93 22.69 ascon128av12 22.14 22.14 22.91 T:ascon128av11 22.18 22.18 23.14 T:ascon96v1 25.06 25.07 25.79 T:norx3261v3 25.10 25.11 26.20 T:norx3261v2 27.41 27.45 29.49 T:norx3261v1 28.13 28.13 28.99 ascon128v12 28.72 28.72 29.36 T:ascon128v11 28.72 28.72 29.37 T:ascon128v1 31.29 31.40 31.62 T:norx6441v1 34.28 34.35 35.22 T:norx6441v2 34.60 34.70 35.67 T:norx6441v3 42.42 42.47 43.11 T:norx6461v1 46.40 46.45 47.28 T:norx6461v2 47.08 47.16 48.34 T:norx6461v3 49.75 49.80 50.73 T:lakekeyakv1 52.92 53.13 54.10 T:riverkeyakv2 55.16 55.23 56.57 T:lakekeyakv2 65.48 65.63 66.17 T:aegis128 69.55 69.60 70.15 T:aes128n8t8clocv2 69.71 69.96 70.41 T:aes128n12t8clocv2 70.98 71.25 71.84 T:aes128n12t8clocv3 71.76 71.85 73.08 T:aes128n8clocv1 72.15 72.27 73.23 T:aes128n12clocv1 81.68 81.84 82.13 T:acorn128v2 82.66 82.87 83.48 T:aes128n8t8silcv2 82.69 82.88 83.53 T:aes128n12t8silcv2 83.69 83.89 84.50 T:aes128n12t8silcv3 86.29 86.39 87.30 T:aes128otrsv1 86.53 86.62 87.80 T:aes128otrsv2 87.63 87.89 88.84 T:aes128otrpv1 87.92 88.09 89.09 T:aes128otrsv3 87.97 88.09 88.27 T:norx6444v2 88.36 88.54 89.27 T:aegis128l 88.45 88.55 88.65 T:norx6444v3 88.39 88.56 89.43 T:aes128otrpv2 88.48 88.62 89.01 T:acorn128v3 89.57 89.73 89.97 T:aes128otrpv3 89.91 90.02 90.24 T:aes128otrcv3 94.67 94.93 95.09 T:norx6444v1 95.91 96.02 96.52 T:aesjambuv1 96.70 96.98 97.86 T:aegis256 103.27 103.45 104.59 T:seakeyakv2 106.84 107.05 107.42 T:ketjeminorv2 108.59 108.69 109.38 T:twine80n6t4clocv3 112.34 112.52 121.62 T:aes256otrsv1 112.75 112.86 114.26 T:aes256otrsv2 113.88 114.10 116.16 T:aes256otrpv1 113.91 114.65 115.23 T:aes256otrsv3 114.18 114.73 115.69 T:aes256otrpv2 115.51 115.62 116.75 T:aes256otrpv3 117.98 118.25 118.50 T:aes256otrcv3 121.43 121.68 122.57 T:aezv4 122.96 123.10 123.54 aegis128l 125.24 125.41 126.22 T:aezv5 126.15 126.69 128.93 T:deoxysi128v141 127.26 127.51 129.43 T:aeadaes128ocbtaglen64v1 127.32 127.51 128.91 T:aeadaes128ocbtaglen96v1 127.48 127.77 130.03 T:aeadaes128ocbtaglen128v1 135.26 135.37 136.87 T:twine80n6t4clocv2 141.86 142.09 147.98 T:ketjesrv1 146.24 146.52 147.88 T:aeadaes192ocbtaglen64v1 146.50 146.62 147.52 T:deoxysii128v141 146.48 146.70 147.22 T:aeadaes192ocbtaglen96v1 133.16? 147.68? 217.07? T:aeadaes192ocbtaglen128v1 152.70 152.80 153.70 T:tiaoxinv1 152.99 153.10 153.32 T:tiaoxinv2 160.12 160.17 160.81 T:ketjemajorv2 166.37 167.55 168.27 T:oceankeyakv2 170.47 170.59 171.99 T:aeadaes256ocbtaglen128v1 170.11 170.77 172.40 T:aeadaes256ocbtaglen64v1 170.76 170.89 171.96 T:aeadaes256ocbtaglen96v1 170.13 175.98 176.24 T:ketjesrv2 176.91 176.98 178.11 T:colm0v1 180.57 180.68 181.95 T:colm127v1 193.29 193.74 195.10 T:deoxysi256v141 194.52 194.90 196.55 T:proest256otrv1 207.28 207.70 208.05 T:ketjejrv1 217.04 217.08 217.38 T:present80n6t4silcv3 227.47 228.50 233.50 T:aes128gcmv1 244.27 244.80 252.22 T:aes256gcmv1 283.77 284.21 285.61 T:proest128otrv1 305.38 305.61 306.16 T:deoxysneq128128v13 305.51 305.88 306.06 T:deoxysneq128128v1 346.60 346.80 348.70 T:aezv1 372.47 372.71 374.11 T:ketjejrv2 404.09 404.39 405.46 T:lunarkeyakv2 404.83 405.16 405.59 T:deoxyseq128128v13 411.16 411.50 413.06 T:deoxysii256v141 427.44 427.82 429.11 T:aezv3 499.90 500.30 502.84 T:deoxyseq128128v1 527.20 527.40 527.82 T:deoxysneq256128v1 527.05 527.48 527.88 T:deoxysneq256128v13 761.30 761.73 762.48 T:deoxyseq256128v13 848.38 849.42 851.84 T:deoxyseq256128v1 882.80 882.91 883.84 T:led80n6t4silcv3 6638.84 7245.31 7253.40 T:acorn128 9921.19 9928.57 9943.07 T:led80n6t4silcv2 9922.16 9934.45 9939.91 T:led80n6silcv1 14147.46 14154.77 14173.20 T:present80n6t4silcv2 14159.84 14161.34 14208.47 T:present80n6silcv1 40826.31 40827.84 40854.72 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.50 9.53 9.64 T:morus640128v1 10.99 11.00 11.09 T:morus640128v2 17.91 17.95 18.00 T:morus1280128v1 17.95 17.96 18.16 T:norx3241v1 17.91 17.97 17.98 T:morus1280256v1 17.97? 17.97? 25.41? T:norx3241v3 18.04 18.07 18.10 T:norx3241v2 18.89 18.89 19.11 T:morus1280128v2 18.90 18.91 19.02 T:morus1280256v2 21.93 21.93 21.98 ascon128av12 22.02 22.02 22.48 T:ascon96v1 22.03 22.03 22.71 T:ascon128av11 25.06 25.06 25.12 T:norx3261v3 25.10 25.10 25.16 T:norx3261v2 27.41 27.43 27.48 T:norx3261v1 28.13 28.13 28.24 ascon128v12 28.61 28.61 29.29 T:ascon128v11 28.61 28.66 29.29 T:ascon128v1 31.91 32.08 32.55 T:norx6441v1 34.70 34.88 35.08 T:norx6441v2 35.20 35.26 35.48 T:norx6441v3 42.91 43.02 43.19 T:norx6461v1 46.88 46.92 47.04 T:norx6461v2 47.55 47.60 47.87 T:norx6461v3 50.35 50.43 50.80 T:lakekeyakv1 54.25 54.33 54.48 T:riverkeyakv2 55.54 55.71 55.88 T:lakekeyakv2 65.38 65.61 65.78 T:aegis128 69.12 69.25 69.57 T:aes128n8t8clocv2 69.52 69.72 70.63 T:aes128n12t8clocv2 70.99 71.17 71.54 T:aes128n12t8clocv3 71.52 71.60 71.74 T:aes128n8clocv1 72.09 72.31 72.43 T:aes128n12clocv1 81.62 81.79 82.00 T:acorn128v2 82.45 82.59 82.88 T:aes128n8t8silcv2 82.57 82.77 82.81 T:aes128n12t8silcv2 83.58 83.68 83.95 T:aes128n12t8silcv3 86.91 86.99 87.24 T:aes128otrsv1 87.09 87.29 87.81 T:aes128otrsv2 88.41 88.51 88.75 T:aegis128l 88.57 88.59 88.73 T:norx6444v2 88.45 88.59 88.72 T:aes128otrpv1 88.52 88.64 88.85 T:acorn128v3 88.64 88.86 89.23 T:aes128otrsv3 88.80 88.97 89.25 T:aes128otrpv2 88.98 89.09 89.27 T:norx6444v3 89.86 89.98 90.17 T:aes128otrcv3 90.15 90.28 90.49 T:aes128otrpv3 95.36 95.50 95.70 T:norx6444v1 95.91 96.08 96.20 T:aesjambuv1 97.23 97.30 97.61 T:aegis256 103.81 104.00 104.29 T:seakeyakv2 107.57 107.74 109.31 T:ketjeminorv2 108.59 108.69 109.07 T:twine80n6t4clocv3 113.11? 113.27? 132.05? T:aes256otrsv1 113.15 113.28 113.48 T:aes256otrsv2 114.27 114.48 114.66 T:aes256otrpv1 114.86 115.09 115.80 T:aes256otrpv2 114.61 115.39 115.88 T:aes256otrsv3 116.19 116.30 116.59 T:aes256otrpv3 118.03 118.32 119.20 T:aes256otrcv3 120.78 121.10 121.49 T:aezv4 123.56 123.75 123.97 aegis128l 124.38 124.81 125.56 T:aezv5 127.31 127.38 127.66 T:aeadaes128ocbtaglen64v1 127.04 127.42 127.94 T:deoxysi128v141 127.50 127.70 127.85 T:aeadaes128ocbtaglen96v1 127.66 127.81 128.08 T:aeadaes128ocbtaglen128v1 134.91 134.99 135.19 T:twine80n6t4clocv2 142.37 142.84 148.50 T:ketjesrv1 146.20 146.41 146.84 T:aeadaes192ocbtaglen64v1 146.20 146.62 147.02 T:aeadaes192ocbtaglen96v1 131.09? 146.89? 213.49? T:aeadaes192ocbtaglen128v1 147.19 147.32 147.66 T:deoxysii128v141 152.13 152.30 152.64 T:tiaoxinv2 152.06 152.32 152.45 T:tiaoxinv1 160.75 160.95 161.63 T:ketjemajorv2 167.11 167.32 167.83 T:oceankeyakv2 170.31 170.42 170.70 T:aeadaes256ocbtaglen64v1 170.58 170.74 171.00 T:aeadaes256ocbtaglen128v1 170.63 170.80 170.98 T:aeadaes256ocbtaglen96v1 175.61 175.81 177.13 T:colm0v1 170.94 176.63 176.87 T:ketjesrv2 179.99 180.17 181.69 T:colm127v1 188.88 189.05 189.30 T:proest256otrv1 194.65 194.96 195.32 T:deoxysi256v141 207.26 207.42 208.55 T:ketjejrv1 216.73 216.78 216.81 T:present80n6t4silcv3 226.74 227.27 230.15 T:aes128gcmv1 242.16 243.02 248.20 T:aes256gcmv1 283.64 284.07 284.79 T:proest128otrv1 305.45 305.59 305.92 T:deoxysneq128128v1 306.01 306.27 306.59 T:deoxysneq128128v13 345.88 346.42 346.88 T:aezv1 372.98 373.21 374.25 T:ketjejrv2 405.62 405.74 406.17 T:deoxyseq128128v13 405.49 406.24 447.88 T:lunarkeyakv2 411.55 411.75 412.00 T:deoxysii256v141 426.29 426.65 427.88 T:aezv3 499.55 500.09 500.48 T:deoxyseq128128v1 527.12 527.48 527.75 T:deoxysneq256128v1 527.70 527.88 528.24 T:deoxysneq256128v13 761.95 762.34 763.02 T:deoxyseq256128v13 848.50 848.89 851.52 T:deoxyseq256128v1 882.65 882.72 883.60 T:led80n6t4silcv3 6641.76 7244.89 7252.24 T:acorn128 9900.52 9908.05 9920.15 T:led80n6t4silcv2 9907.51 9930.76 9941.59 T:led80n6silcv1 14147.02 14148.71 14203.53 T:present80n6t4silcv2 14158.29 14162.94 14184.95 T:present80n6silcv1 14697.81 14706.01 14712.68 aes256gcmv1