VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20241022

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.95 0.97 0.98 T:morus1280128v2 0.97 0.98 0.99 T:morus1280256v2 0.98 0.99 1.00 T:morus1280256v1 1.13 1.13 1.14 T:morus640128v1 1.12 1.14 1.16 T:morus640128v2 1.99 2.07 2.15 T:morus1280128v1 2.29 2.41 2.47 T:lunarkeyakv2 2.75 2.76 2.78 T:norx6441v2 2.83 2.86 2.89 T:norx6441v3 3.05 3.13 3.31 T:seakeyakv2 3.22 3.26 3.34 T:oceankeyakv2 3.29 3.32 3.35 T:norx6441v1 3.82 3.85 3.87 T:norx3241v3 3.85 3.90 3.92 T:norx3241v2 4.15 4.19 4.22 T:norx6461v2 4.21 4.24 4.27 T:norx6461v3 4.54 4.61 4.67 T:norx6444v3 4.60 4.65 4.68 T:norx6444v2 4.62 4.65 4.67 T:norx3241v1 4.66 4.80 5.03 T:tiaoxinv2 4.98 5.02 5.04 T:norx6461v1 5.19 5.30 5.44 T:tiaoxinv1 5.52 5.58 5.67 T:norx6444v1 5.58 5.59 5.63 T:lakekeyakv2 5.60 5.68 5.73 T:lakekeyakv1 5.91 5.94 5.96 T:norx3261v3 5.92 5.97 5.99 T:norx3261v2 6.56 6.60 6.65 T:aegis128l 7.67 7.69 7.71 T:norx3261v1 7.82 7.83 7.86 T:aegis128 8.23 8.45 8.57 T:aes128gcmv1 9.29 9.33 9.35 T:aegis256 9.69 9.71 9.73 T:ascon96v1 9.73 9.78 9.82 T:ascon128av11 10.12 10.15 10.17 ascon128av12 10.16 10.20 10.27 T:ketjemajorv2 9.65 10.29 10.55 T:deoxysi128v141 9.73? 10.59? 11.11? T:aeadaes128ocbtaglen128v1 10.62 10.86 11.02 T:aes256gcmv1 11.46 12.19 12.34 T:deoxysi256v141 13.17 13.21 13.25 T:riverkeyakv2 13.52 13.64 13.69 T:ketjeminorv2 14.48 14.50 14.52 T:ascon128v11 13.57 14.51 15.03 T:aeadaes256ocbtaglen128v1 14.56 14.57 14.61 T:ascon128v1 15.03 15.06 15.09 ascon128v12 15.74 15.75 15.77 T:twine80n6t4clocv2 16.27 16.31 16.33 T:twine80n6t4clocv3 16.59 16.65 16.69 T:aes128otrcv3 18.21 18.25 18.30 T:aes128otrpv3 18.21 18.27 18.33 T:aes128otrsv3 18.10 18.75 19.45 T:oceankeyakv1 19.25 19.36 19.41 T:aes128otrpv2 19.33 19.39 19.43 T:aes128otrsv2 19.44 19.47 19.50 T:aes128otrpv1 19.44 19.51 19.58 T:aes128otrsv1 19.39 20.69 21.22 T:deoxysii128v141 21.68 21.72 21.77 T:aes256otrcv3 23.33 23.36 23.41 T:aes256otrpv3 23.35 23.42 23.49 T:aes256otrsv3 22.63 23.49 23.96 T:deoxysii256v141 24.37 24.45 24.54 T:aes256otrpv2 24.45 24.51 24.54 T:aes256otrsv2 24.61 24.66 24.71 T:aes256otrpv1 24.70 24.76 24.84 T:aes256otrsv1 25.00 25.18 25.60 T:seakeyakv1 29.29 29.31 29.35 T:aesjambuv1 30.36 30.41 30.45 T:proest256otrv1 30.96 31.03 31.09 T:aes128n12t8clocv2 30.93 31.04 31.09 T:aes128n8t8clocv2 31.09 31.11 31.15 T:aes128n12t8clocv3 31.04 31.11 31.14 T:aes128n12clocv1 31.02 31.18 32.00 T:aes128n8clocv1 33.29 33.32 33.37 T:aes128n8t8silcv2 33.27 33.34 33.38 T:aes128n12t8silcv2 34.36 34.39 34.46 T:aes128n12t8silcv3 34.77 34.83 34.95 T:aes128n12silcv1 34.78 34.88 34.98 T:aes128n8silcv1 37.56 37.58 37.93 T:ketjesrv1 39.93 40.15 40.26 T:ketjesrv2 44.18 44.23 44.32 T:riverkeyakv1 46.26 46.41 46.58 T:aezv5 47.73 47.87 48.15 T:aezv4 66.38 66.54 66.61 T:proest128otrv1 78.86 78.94 79.73 T:present80n6t4silcv3 80.15 80.32 80.51 T:ketjejrv1 87.50 87.67 87.75 T:deoxysneq128128v13 87.52 87.77 89.37 T:deoxysneq128128v1 116.26 118.25 118.57 T:led80n6t4silcv3 127.50 127.65 130.72 T:ketjejrv2 137.32 137.53 137.74 T:deoxysneq256128v13 138.15 138.38 139.30 T:deoxysneq256128v1 159.79 160.13 162.27 T:twine80n6clocv1 176.08 176.37 176.99 T:deoxyseq128128v1 177.76 177.87 178.02 T:deoxyseq128128v13 192.85 193.17 193.77 T:aezv3 204.57 205.09 205.74 T:aezv1 276.29 276.75 277.09 T:deoxyseq256128v1 277.90 278.43 278.64 T:deoxyseq256128v13 484.81 485.09 485.33 T:acorn128v3 425.34? 494.25? 788.60? T:acorn128 489.81 496.08 507.03 T:acorn128v2 6933.68 6938.66 6951.81 T:present80n6silcv1 6959.06 6976.30 7011.37 T:present80n6t4silcv2 8424.18 8429.65 8435.84 T:led80n6silcv1 8434.49 8611.48 8625.92 T:led80n6t4silcv2 25978.09 25982.19 25984.58 aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.94 0.95 0.97 T:morus1280128v2 0.96 0.96 0.96 T:morus1280256v2 0.95 0.96 0.97 T:morus1280256v1 1.13 1.14 1.15 T:morus640128v1 1.14 1.15 1.15 T:morus640128v2 1.95 2.06 2.12 T:morus1280128v1 2.44 2.53 2.62 T:lunarkeyakv2 2.74 2.75 2.79 T:norx6441v2 2.82 2.84 2.87 T:norx6441v3 3.13 3.20 3.43 T:seakeyakv2 3.30 3.35 3.42 T:oceankeyakv2 3.37 3.39 3.42 T:norx6441v1 3.76 3.78 3.80 T:norx3241v2 3.79 3.81 3.83 T:norx3241v3 4.06 4.09 4.14 T:norx6461v2 4.19 4.20 4.22 T:norx6461v3 4.54 4.55 4.57 T:norx3241v1 4.59 4.61 4.70 T:norx6444v3 4.61 4.64 4.69 T:norx6444v2 5.13 5.16 5.19 T:norx6461v1 5.11 5.21 5.49 T:tiaoxinv2 5.21 5.27 5.30 T:tiaoxinv1 5.36 5.40 5.45 T:lakekeyakv1 5.53 5.58 5.61 T:norx6444v1 5.58 5.65 5.68 T:lakekeyakv2 5.87 5.89 5.91 T:norx3261v3 5.88 5.90 5.92 T:norx3261v2 6.55 6.58 6.64 T:aegis128l 7.52 7.53 7.54 T:norx3261v1 7.86 7.88 7.90 T:aegis128 8.34 8.48 8.55 T:aes128gcmv1 9.26 9.29 9.30 T:aegis256 9.83 9.87 9.91 T:ascon96v1 9.86 9.89 9.92 T:ascon128av11 10.01 10.05 10.07 ascon128av12 10.26 10.29 10.33 T:ketjemajorv2 10.68 10.94 11.02 T:aes256gcmv1 12.49 12.55 12.60 T:ketjeminorv2 12.15? 12.76? 13.61? T:aeadaes128ocbtaglen128v1 13.36 13.40 13.44 T:riverkeyakv2 13.15 13.68 13.97 T:deoxysi128v141 14.79 14.82 14.85 T:ascon128v1 14.95 14.97 15.00 T:ascon128v11 14.97 15.01 15.03 ascon128v12 15.36 15.39 15.43 T:twine80n6t4clocv2 15.07 15.80 16.02 T:deoxysi256v141 16.23 16.27 16.31 T:twine80n6t4clocv3 16.82 16.87 16.90 T:aes128otrcv3 16.97 17.53 18.41 T:aeadaes256ocbtaglen128v1 18.27 18.78 19.46 T:oceankeyakv1 18.81 18.93 18.99 T:aes128otrsv2 18.93 19.00 19.04 T:aes128otrpv2 19.09 19.10 19.16 T:aes128otrsv1 19.07 19.12 19.17 T:aes128otrpv1 20.20 20.26 20.34 T:aes128otrpv3 20.24 20.28 20.31 T:aes128otrsv3 19.95 21.13 21.69 T:deoxysii128v141 21.92 21.97 22.00 T:aes256otrcv3 23.04 23.44 23.90 T:deoxysii256v141 24.01 24.05 24.09 T:aes256otrsv2 23.99 24.07 24.17 T:aes256otrpv2 24.26 24.29 24.33 T:aes256otrpv1 24.26 24.33 24.35 T:aes256otrsv1 25.14 25.33 25.71 T:seakeyakv1 25.42 25.46 25.53 T:aes256otrsv3 25.44 25.49 25.55 T:aes256otrpv3 29.28 29.35 29.40 T:aesjambuv1 30.10 30.14 30.18 T:proest256otrv1 30.36 30.42 30.47 T:aes128n8t8clocv2 30.35 30.48 30.69 T:aes128n12t8clocv2 30.48 30.60 30.86 T:aes128n12clocv1 30.59 30.65 30.75 T:aes128n12t8clocv3 30.82 30.93 32.03 T:aes128n8clocv1 33.30 33.37 33.50 T:aes128n12t8silcv2 33.33 33.43 33.48 T:aes128n8t8silcv2 34.42 34.46 34.62 T:aes128n12t8silcv3 34.77 34.84 34.98 T:aes128n12silcv1 34.77 34.87 34.94 T:aes128n8silcv1 38.50 38.61 38.67 T:ketjesrv1 42.45 42.51 42.61 T:ketjesrv2 44.37 44.46 44.53 T:riverkeyakv1 46.12 46.24 46.43 T:aezv5 47.59 47.74 47.88 T:aezv4 64.12 64.54 67.13 T:proest128otrv1 79.64 79.72 80.41 T:present80n6t4silcv3 80.96 81.10 81.40 T:ketjejrv1 117.02 117.09 117.22 T:led80n6t4silcv3 123.14 123.47 123.95 T:deoxysneq128128v1 123.39 123.52 123.83 T:deoxysneq128128v13 127.97 129.84 138.17 T:ketjejrv2 160.07 160.19 160.85 T:twine80n6clocv1 177.07 177.25 177.58 T:deoxyseq128128v13 177.22 177.38 177.53 T:deoxysneq256128v13 178.86 179.12 179.33 T:deoxysneq256128v1 192.73 192.86 193.57 T:aezv3 205.10 205.54 206.06 T:aezv1 245.09 245.70 246.23 T:deoxyseq128128v1 278.70 278.94 279.32 T:deoxyseq256128v13 353.89 354.90 355.07 T:deoxyseq256128v1 485.99 487.90 500.91 T:acorn128v2 417.50? 488.50? 787.36? T:acorn128 489.23 489.64 492.40 T:acorn128v3 6955.18 6958.09 6960.29 T:present80n6silcv1 6945.61 6959.25 6965.80 T:present80n6t4silcv2 8438.52 8604.18 8617.20 T:led80n6silcv1 8616.57 8623.21 8633.49 T:led80n6t4silcv2 25979.12 25983.20 25984.22 aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.94 0.95 0.97 T:morus1280128v2 0.95 0.96 0.98 T:morus1280256v1 0.96 0.96 0.97 T:morus1280256v2 1.14 1.15 1.16 T:morus640128v1 1.14 1.15 1.16 T:morus640128v2 1.94 2.02 2.12 T:morus1280128v1 2.52 2.57 2.67 T:lunarkeyakv2 2.75 2.78 2.81 T:norx6441v2 2.82 2.83 2.86 T:norx6441v3 3.19 3.26 3.48 T:seakeyakv2 3.37 3.38 3.40 T:norx6441v1 3.35 3.41 3.43 T:oceankeyakv2 3.77 3.79 3.80 T:norx3241v2 3.80 3.82 3.84 T:norx3241v3 4.05 4.08 4.10 T:norx6461v2 4.18 4.21 4.22 T:norx6461v3 4.53 4.55 4.57 T:norx3241v1 4.64 4.67 4.71 T:norx6444v3 4.65 4.67 4.74 T:norx6444v2 5.12 5.15 5.18 T:norx6461v1 5.10 5.16 5.46 T:tiaoxinv2 5.22 5.29 5.33 T:tiaoxinv1 5.42 5.43 5.47 T:lakekeyakv1 5.56 5.62 5.65 T:norx6444v1 5.62 5.66 5.68 T:lakekeyakv2 5.87 5.87 5.89 T:norx3261v2 5.84 5.88 5.90 T:norx3261v3 6.56 6.60 6.65 T:aegis128l 7.50 7.51 7.53 T:norx3261v1 7.86 7.88 7.90 T:aegis128 8.35 8.47 8.55 T:aes128gcmv1 9.26 9.28 9.30 T:aegis256 9.83 9.86 9.88 T:ascon128av11 9.86 9.88 9.91 T:ascon96v1 10.02 10.03 10.05 ascon128av12 10.30 10.37 10.42 T:ketjemajorv2 10.75 10.94 11.10 T:aes256gcmv1 12.56 12.62 12.67 T:ketjeminorv2 12.11? 12.76? 13.46? T:aeadaes128ocbtaglen128v1 13.43 13.44 13.50 T:riverkeyakv2 13.42 13.73 13.85 T:deoxysi128v141 14.79 14.83 14.86 T:ascon128v1 14.93 14.97 15.02 T:ascon128v11 14.98 15.01 15.03 ascon128v12 15.36 15.39 15.43 T:twine80n6t4clocv2 15.38 15.85 16.07 T:deoxysi256v141 16.24 16.27 16.31 T:twine80n6t4clocv3 16.85 16.87 16.91 T:aes128otrcv3 16.95 17.59 18.43 T:aeadaes256ocbtaglen128v1 18.31 18.86 19.63 T:oceankeyakv1 18.96 19.01 19.06 T:aes128otrsv2 19.01 19.06 19.10 T:aes128otrpv2 19.12 19.14 19.21 T:aes128otrsv1 19.10 19.14 19.18 T:aes128otrpv1 20.27 20.32 20.40 T:aes128otrpv3 20.27 20.33 20.35 T:aes128otrsv3 20.35 21.04 21.32 T:deoxysii128v141 21.95 21.97 22.00 T:aes256otrcv3 23.07 23.45 23.79 T:deoxysii256v141 24.07 24.10 24.15 T:aes256otrsv2 24.07 24.11 24.22 T:aes256otrpv2 24.29 24.33 24.39 T:aes256otrpv1 24.33 24.39 24.44 T:aes256otrsv1 25.24 25.50 25.75 T:seakeyakv1 25.49 25.52 25.56 T:aes256otrsv3 25.52 25.58 25.61 T:aes256otrpv3 29.29 29.32 29.36 T:aesjambuv1 30.02 30.15 30.19 T:proest256otrv1 30.37 30.43 30.52 T:aes128n12t8clocv2 30.37 30.45 30.54 T:aes128n8t8clocv2 30.49 30.56 30.61 T:aes128n12clocv1 30.62 30.68 30.73 T:aes128n12t8clocv3 30.78 31.01 32.05 T:aes128n8clocv1 33.25 33.32 33.35 T:aes128n8t8silcv2 33.27 33.36 33.50 T:aes128n12t8silcv2 34.41 34.48 34.79 T:aes128n12t8silcv3 34.79 34.84 34.91 T:aes128n8silcv1 34.81 34.86 34.94 T:aes128n12silcv1 38.53 38.58 38.71 T:ketjesrv1 42.33 42.57 42.63 T:ketjesrv2 44.42 44.52 44.59 T:riverkeyakv1 46.02 46.13 46.26 T:aezv5 47.52 47.66 47.77 T:aezv4 64.11 64.45 67.10 T:proest128otrv1 79.63 79.67 80.45 T:present80n6t4silcv3 80.92 81.25 81.38 T:ketjejrv1 117.00 117.11 117.19 T:led80n6t4silcv3 123.14 123.32 123.83 T:deoxysneq128128v1 123.34 123.48 123.83 T:deoxysneq128128v13 128.63? 129.70? 145.44? T:ketjejrv2 160.03 160.22 160.92 T:twine80n6clocv1 177.30 177.38 177.74 T:deoxysneq256128v13 177.23 177.55 177.72 T:deoxyseq128128v13 179.07 179.25 179.44 T:deoxysneq256128v1 192.65 193.28 193.55 T:aezv3 204.75 204.96 205.75 T:aezv1 245.07 245.55 246.09 T:deoxyseq128128v1 278.54 279.05 279.40 T:deoxyseq256128v13 354.30 354.76 355.11 T:deoxyseq256128v1 404.72 405.43 406.17 aes256gcmv1 485.73 488.05 500.43 T:acorn128v2 417.51? 488.43? 787.75? T:acorn128 489.33 489.61 492.13 T:acorn128v3 6934.74 6953.28 6957.76 T:present80n6silcv1 6945.24 6961.05 6965.70 T:present80n6t4silcv2 8429.38 8603.45 8613.28 T:led80n6silcv1 8616.27 8630.41 8636.39 T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.91 0.93 0.94 T:morus1280256v1 0.92 0.93 0.94 T:morus1280128v2 0.93 0.94 0.94 T:morus1280256v2 1.08 1.09 1.10 T:morus640128v1 1.09 1.10 1.10 T:morus640128v2 1.97 2.01 2.04 T:morus1280128v1 2.63 2.68 2.81 T:seakeyakv2 2.68 2.72 2.76 T:oceankeyakv2 2.76 2.78 2.79 T:norx6441v2 2.86 2.87 2.89 T:norx6441v3 3.26 3.31 3.35 T:lunarkeyakv2 3.34 3.36 3.38 T:norx6441v1 3.86 3.87 3.93 T:norx3241v3 3.87 3.88 3.89 T:norx3241v2 4.17 4.18 4.21 T:norx6461v2 4.23 4.24 4.25 T:norx6461v3 4.45 4.57 4.77 T:tiaoxinv2 4.56 4.57 4.60 T:norx6444v3 4.56 4.59 4.60 T:norx6444v2 4.65 4.66 4.68 T:norx3241v1 4.58 4.70 4.84 T:tiaoxinv1 4.92 4.95 4.98 T:lakekeyakv2 5.03 5.06 5.09 T:norx6461v1 5.13 5.21 5.29 T:aes128gcmv1 5.34 5.36 5.38 T:lakekeyakv1 5.48 5.50 5.52 T:norx6444v1 5.89 5.92 5.93 T:norx3261v2 5.92 5.95 5.96 T:norx3261v3 6.19 6.40 6.62 T:aes256gcmv1 6.47 6.49 6.52 T:aegis128l 7.70 7.72 7.75 T:norx3261v1 7.81 7.85 7.87 T:aegis128 8.66 8.68 8.73 T:ketjemajorv2 9.29 9.30 9.31 T:aegis256 9.50 9.54 9.56 T:riverkeyakv2 9.71 9.74 9.76 T:ascon96v1 9.78 9.80 9.82 T:ascon128av11 10.01 10.03 10.05 ascon128av12 9.92 10.21 10.87 T:aeadaes128ocbtaglen128v1 9.83 10.40 10.71 T:deoxysi128v141 11.94 12.02 12.04 T:ketjeminorv2 11.47 12.14 12.50 T:deoxysi256v141 13.78 14.17 14.66 T:aeadaes256ocbtaglen128v1 14.56 14.59 14.62 T:ascon128v11 14.62 14.63 14.65 T:ascon128v1 14.88 14.90 14.92 ascon128v12 14.89 15.36 15.63 T:deoxysii128v141 15.44 15.45 15.48 T:twine80n6t4clocv2 16.11 16.13 16.15 T:twine80n6t4clocv3 16.76 16.77 16.82 T:aes128otrcv3 16.90 16.93 16.96 T:aes128otrsv3 17.37 17.40 17.44 T:aes128otrsv2 17.56 17.60 17.63 T:aes128otrsv1 17.18 17.66 17.83 T:deoxysii256v141 18.16 18.58 19.09 T:oceankeyakv1 18.83 18.87 18.93 T:aes128otrpv3 19.43 19.49 19.54 T:aes128otrpv2 19.48 19.50 19.55 T:aes128otrpv1 21.81 21.85 21.87 T:aes256otrcv3 22.08 22.12 22.19 T:aes256otrsv3 22.46 22.49 22.52 T:aes256otrsv2 22.72 22.78 22.84 T:aes256otrsv1 23.42 23.47 23.51 T:aes128n8t8clocv2 23.43 23.47 23.52 T:aes128n12t8clocv2 23.45 23.48 23.53 T:aes128n12clocv1 23.50 23.52 23.58 T:aes128n12t8clocv3 23.49 23.56 24.11 T:aes128n8clocv1 24.01 24.05 24.16 T:aes256otrpv3 24.47 24.51 24.56 T:aes256otrpv2 24.61 24.64 24.68 T:aes128n8t8silcv2 24.62 24.66 24.69 T:aes128n12t8silcv2 24.71 24.77 24.93 T:aes256otrpv1 25.13 25.18 25.22 T:aes128n12t8silcv3 24.96 25.22 25.37 T:seakeyakv1 25.40 25.43 25.46 T:aes128n8silcv1 25.40 25.45 25.46 T:aes128n12silcv1 29.17 29.19 29.22 T:aesjambuv1 30.56 30.59 30.62 T:proest256otrv1 34.91 34.95 34.99 T:ketjesrv1 37.37 37.46 37.66 T:aezv5 37.79 37.81 37.85 T:ketjesrv2 39.62 39.71 39.77 T:aezv4 41.82 41.93 41.99 T:riverkeyakv1 63.81 63.90 63.96 T:proest128otrv1 75.74 75.80 75.85 T:ketjejrv1 78.70 78.76 79.23 T:present80n6t4silcv3 87.56 87.64 87.72 T:deoxysneq128128v13 88.00 88.24 89.58 T:deoxysneq128128v1 116.10 118.18 118.42 T:led80n6t4silcv3 119.76 119.86 121.14 T:twine80n6clocv1 121.72 122.20 122.53 T:ketjejrv2 132.28 132.40 132.50 T:deoxyseq128128v13 132.37 132.68 132.88 T:deoxyseq128128v1 133.96 134.53 135.52 T:aezv1 137.29 137.43 137.60 T:deoxysneq256128v13 138.96 139.01 139.57 T:deoxysneq256128v1 142.09 142.24 142.65 T:aezv3 207.52 207.67 207.88 T:deoxyseq256128v1 207.82 208.03 208.13 T:deoxyseq256128v13 483.61 483.77 484.91 T:acorn128v3 446.92? 490.26? 766.38? T:acorn128 487.32 491.38 499.99 T:acorn128v2 5204.40 5210.38 5214.80 T:present80n6silcv1 5224.85 5228.16 5238.96 T:present80n6t4silcv2 6363.75 6367.98 6371.48 T:led80n6silcv1 6376.50 6418.72 6423.15 T:led80n6t4silcv2 13193.95 13194.88 13196.12 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.90 0.91 0.91 T:morus1280256v2 0.89 0.91 0.92 T:morus1280256v1 0.91 0.93 0.94 T:morus1280128v2 1.09 1.11 1.12 T:morus640128v2 1.10 1.11 1.12 T:morus640128v1 1.99 2.03 2.06 T:morus1280128v1 2.67 2.72 2.89 T:seakeyakv2 2.73 2.78 2.83 T:oceankeyakv2 2.77 2.79 2.80 T:norx6441v2 2.86 2.87 2.89 T:norx6441v3 3.29 3.35 3.39 T:lunarkeyakv2 3.36 3.37 3.39 T:norx6441v1 3.76 3.83 3.86 T:norx3241v2 3.85 3.87 3.88 T:norx3241v3 4.13 4.15 4.17 T:norx6461v2 4.20 4.22 4.23 T:norx6461v3 4.56 4.57 4.59 T:norx6444v2 4.53 4.57 4.58 T:norx6444v3 4.59 4.60 4.62 T:norx3241v1 4.68 4.71 4.91 T:tiaoxinv2 4.66 4.72 4.75 T:tiaoxinv1 4.91 4.94 4.97 T:lakekeyakv2 5.09 5.10 5.14 T:norx6461v1 5.07 5.16 5.31 T:aes128gcmv1 5.17 5.22 5.27 T:lakekeyakv1 5.49 5.51 5.54 T:norx6444v1 5.87 5.88 5.90 T:norx3261v3 5.88 5.90 5.91 T:norx3261v2 6.20 6.36 6.60 T:aes256gcmv1 6.45 6.48 6.54 T:aegis128l 7.62 7.62 7.64 T:norx3261v1 7.84 7.85 7.88 T:aegis128 8.67 8.71 8.79 T:ketjemajorv2 9.23 9.25 9.27 T:aegis256 9.57 9.61 9.64 T:riverkeyakv2 9.78 9.81 9.83 T:ascon96v1 9.83 9.87 9.89 T:ascon128av11 9.97 10.00 10.01 ascon128av12 11.43 11.47 11.50 T:ketjeminorv2 11.08 11.77 12.08 T:aeadaes128ocbtaglen128v1 11.56 12.11 12.29 T:deoxysi128v141 13.41 13.75 14.07 T:deoxysi256v141 14.72 14.74 14.76 T:ascon128v1 14.74 14.77 14.79 T:ascon128v11 14.91 14.91 14.93 ascon128v12 15.25 15.27 15.30 T:twine80n6t4clocv2 15.08 15.45 15.59 T:deoxysii128v141 16.09 16.11 16.14 T:twine80n6t4clocv3 15.80 16.28 16.61 T:aeadaes256ocbtaglen128v1 16.83 16.87 16.90 T:aes128otrcv3 17.18 17.20 17.24 T:aes128otrsv2 17.34 17.38 17.41 T:aes128otrsv1 17.27 17.60 17.82 T:deoxysii256v141 17.92 17.95 17.98 T:aes128otrsv3 18.20 18.57 19.16 T:oceankeyakv1 19.22 19.28 19.47 T:aes128otrpv2 19.31 19.33 19.36 T:aes128otrpv1 19.85 19.88 19.91 T:aes128otrpv3 21.95 21.97 21.99 T:aes256otrcv3 22.26 22.30 22.36 T:aes256otrsv2 22.54 22.59 22.63 T:aes256otrsv1 23.10 23.13 23.16 T:aes256otrsv3 23.12 23.16 23.21 T:aes128n8t8clocv2 23.13 23.17 23.20 T:aes128n12t8clocv2 23.33 23.36 23.41 T:aes128n12t8clocv3 23.24 23.39 23.47 T:aes128n12clocv1 23.40 23.45 24.06 T:aes128n8clocv1 24.27 24.31 24.38 T:aes256otrpv2 24.54 24.59 24.76 T:aes256otrpv1 24.67 24.71 24.77 T:aes128n8t8silcv2 24.70 24.74 24.80 T:aes128n12t8silcv2 25.07 25.12 25.66 T:aes256otrpv3 25.01 25.18 25.38 T:seakeyakv1 25.16 25.21 25.29 T:aes128n12t8silcv3 25.48 25.53 25.58 T:aes128n8silcv1 25.50 25.55 26.07 T:aes128n12silcv1 29.16 29.20 29.23 T:aesjambuv1 30.43 30.47 30.53 T:proest256otrv1 35.43 35.48 35.57 T:ketjesrv1 37.32 37.41 37.52 T:aezv5 38.82 38.98 39.05 T:ketjesrv2 39.53 39.57 39.70 T:aezv4 41.95 42.07 42.24 T:riverkeyakv1 62.61 62.82 64.21 T:proest128otrv1 76.03 76.17 76.29 T:ketjejrv1 79.06 79.12 79.75 T:present80n6t4silcv3 105.41 105.52 105.63 T:deoxysneq128128v13 105.82 106.09 106.44 T:deoxysneq128128v1 116.45 116.59 116.90 T:led80n6t4silcv3 119.85 120.02 120.25 T:twine80n6clocv1 118.22? 122.32? 138.17? T:ketjejrv2 132.07 132.31 132.41 T:deoxyseq128128v13 134.44 135.21 135.97 T:aezv1 142.05 142.11 142.59 T:aezv3 157.30 157.44 157.64 T:deoxysneq256128v13 158.52 158.89 159.61 T:deoxysneq256128v1 166.91 167.42 167.83 T:deoxyseq128128v1 208.17 208.37 208.49 T:deoxyseq256128v13 246.87 247.23 247.40 T:deoxyseq256128v1 485.73 486.06 487.08 T:acorn128v3 483.77 486.16 496.55 T:acorn128v2 443.91? 486.98? 769.36? T:acorn128 5214.65 5216.41 5223.56 T:present80n6t4silcv2 5210.50 5218.45 5220.52 T:present80n6silcv1 6376.55 6413.80 6419.65 T:led80n6silcv1 6418.06 6422.25 6427.62 T:led80n6t4silcv2 13193.65 13194.95 13197.06 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.90 0.90 0.91 T:morus1280256v1 0.91 0.91 0.91 T:morus1280256v2 0.91 0.92 0.94 T:morus1280128v2 1.10 1.10 1.12 T:morus640128v2 1.11 1.12 1.12 T:morus640128v1 1.96 2.04 2.05 T:morus1280128v1 2.70 2.76 2.92 T:seakeyakv2 2.77 2.78 2.79 T:norx6441v2 2.76 2.82 2.86 T:oceankeyakv2 2.85 2.86 2.87 T:norx6441v3 3.35 3.37 3.38 T:norx6441v1 3.33 3.37 3.45 T:lunarkeyakv2 3.82 3.84 3.84 T:norx3241v2 3.85 3.86 3.89 T:norx3241v3 4.12 4.13 4.15 T:norx6461v2 4.19 4.21 4.22 T:norx6461v3 4.57 4.59 4.64 T:norx6444v2 4.57 4.60 4.61 T:norx6444v3 4.60 4.61 4.62 T:norx3241v1 4.65 4.68 4.73 T:tiaoxinv1 4.68 4.74 4.90 T:tiaoxinv2 4.94 4.98 5.00 T:lakekeyakv2 5.08 5.09 5.11 T:norx6461v1 5.08 5.14 5.29 T:aes128gcmv1 5.21 5.26 5.29 T:lakekeyakv1 5.52 5.53 5.56 T:norx6444v1 5.87 5.88 5.89 T:norx3261v3 5.86 5.88 5.91 T:norx3261v2 6.25 6.34 6.58 T:aes256gcmv1 6.47 6.49 6.54 T:aegis128l 7.60 7.62 7.63 T:norx3261v1 7.85 7.86 7.87 T:aegis128 8.70 8.75 8.81 T:ketjemajorv2 9.26 9.27 9.30 T:aegis256 9.62 9.64 9.67 T:riverkeyakv2 9.79 9.81 9.83 T:ascon96v1 9.82 9.85 9.87 T:ascon128av11 9.97 10.00 10.02 ascon128av12 11.12 11.24 11.87 T:aeadaes128ocbtaglen128v1 11.45 11.50 11.52 T:ketjeminorv2 11.90 12.04 12.22 T:deoxysi128v141 13.59 13.79 14.06 T:deoxysi256v141 14.74 14.75 14.76 T:ascon128v1 14.75 14.77 14.80 T:ascon128v11 14.89 14.90 14.93 ascon128v12 15.25 15.27 15.29 T:twine80n6t4clocv2 15.19 15.49 15.69 T:deoxysii128v141 15.73 16.01 16.47 T:aeadaes256ocbtaglen128v1 16.10 16.11 16.14 T:twine80n6t4clocv3 16.86 16.88 16.89 T:aes128otrcv3 17.20 17.22 17.25 T:aes128otrsv2 17.37 17.38 17.41 T:aes128otrsv1 17.49 17.64 17.86 T:deoxysii256v141 17.95 17.98 18.02 T:aes128otrsv3 18.26 18.64 19.10 T:oceankeyakv1 19.24 19.30 19.44 T:aes128otrpv2 19.35 19.36 19.41 T:aes128otrpv1 19.89 19.92 19.96 T:aes128otrpv3 21.94 21.96 21.98 T:aes256otrcv3 22.28 22.32 22.35 T:aes256otrsv2 22.57 22.60 22.62 T:aes256otrsv1 23.15 23.18 23.20 T:aes256otrsv3 23.15 23.18 23.22 T:aes128n8t8clocv2 23.16 23.22 23.25 T:aes128n12t8clocv2 23.25 23.34 23.50 T:aes128n12clocv1 23.33 23.36 23.44 T:aes128n12t8clocv3 23.42 23.45 24.08 T:aes128n8clocv1 24.31 24.37 24.46 T:aes256otrpv2 24.57 24.62 24.82 T:aes256otrpv1 24.68 24.71 24.75 T:aes128n8t8silcv2 24.68 24.74 24.77 T:aes128n12t8silcv2 25.11 25.13 25.19 T:aes256otrpv3 24.97 25.14 25.42 T:seakeyakv1 25.19 25.24 25.36 T:aes128n12t8silcv3 25.48 25.53 25.58 T:aes128n8silcv1 25.52 25.56 26.07 T:aes128n12silcv1 29.19 29.21 29.22 T:aesjambuv1 30.41 30.45 30.49 T:proest256otrv1 35.51 35.58 35.64 T:ketjesrv1 37.32 37.37 37.41 T:aezv5 38.86 38.98 39.08 T:ketjesrv2 39.50 39.53 39.65 T:aezv4 41.97 42.03 42.13 T:riverkeyakv1 62.65 62.89 64.18 T:proest128otrv1 76.04 76.19 76.30 T:ketjejrv1 79.10 79.12 79.74 T:present80n6t4silcv3 105.47 105.56 105.65 T:deoxysneq128128v13 105.86 106.36 107.11 T:deoxysneq128128v1 116.47 116.56 116.91 T:led80n6t4silcv3 119.82 120.03 120.27 T:twine80n6clocv1 119.52? 122.20? 151.68? T:ketjejrv2 132.13 132.32 132.43 T:deoxyseq128128v13 134.31 135.02 135.80 T:aezv1 142.14 142.37 142.53 T:aezv3 157.38 157.58 157.77 T:deoxysneq256128v13 158.72 158.90 159.50 T:deoxysneq256128v1 166.57 166.95 167.48 T:deoxyseq128128v1 208.11 208.32 208.52 T:deoxyseq256128v13 246.84 247.02 247.33 T:deoxyseq256128v1 404.68 405.54 406.04 aes256gcmv1 485.82 486.02 488.28 T:acorn128v3 484.13 486.21 496.80 T:acorn128v2 443.95? 486.93? 769.36? T:acorn128 5212.09 5215.61 5220.96 T:present80n6t4silcv2 5209.08 5216.29 5220.65 T:present80n6silcv1 6371.35 6410.24 6421.64 T:led80n6silcv1 6421.02 6423.01 6426.39 T:led80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.86 0.87 0.89 T:morus1280256v1 0.89 0.90 0.91 T:morus1280256v2 0.89 0.91 0.93 T:morus1280128v2 1.03 1.04 1.06 T:morus640128v1 1.05 1.05 1.06 T:morus640128v2 1.70 1.82 1.87 T:aes128gcmv1 1.73? 1.83? 1.95? T:aes256gcmv1 1.92 1.95 1.98 T:morus1280128v1 2.07 2.16 2.25 T:lunarkeyakv2 2.13 2.17 2.28 T:oceankeyakv2 2.49 2.57 2.75 T:seakeyakv2 2.76 2.79 2.80 T:norx6441v2 2.87 2.90 2.92 T:norx6441v3 3.35 3.38 3.41 T:norx6441v1 3.86 3.88 3.90 T:norx3241v3 3.88 3.89 3.93 T:norx3241v2 4.00 4.08 4.20 T:tiaoxinv1 4.15 4.19 4.23 T:norx6461v2 4.23 4.26 4.29 T:norx6461v3 4.13 4.26 4.51 T:tiaoxinv2 4.38 4.43 4.46 T:lakekeyakv2 4.50 4.51 4.54 T:norx6444v3 4.50 4.52 4.53 T:norx6444v2 4.64 4.67 4.69 T:norx3241v1 5.03 5.05 5.07 T:norx6461v1 5.00 5.05 5.11 T:lakekeyakv1 5.44 5.46 5.49 T:norx6444v1 5.87 5.88 5.91 T:norx3261v2 5.93 5.94 5.96 T:norx3261v3 6.35 6.37 6.39 T:aegis128l 7.07 7.12 7.20 T:ketjemajorv2 7.69 7.72 7.72 T:norx3261v1 7.82 7.84 7.88 T:aegis128 8.89 8.93 8.97 T:riverkeyakv2 9.25 9.27 9.31 T:aegis256 9.71 9.74 9.77 T:ascon96v1 9.28? 9.79? 10.90? T:aeadaes128ocbtaglen128v1 9.80 9.82 9.85 T:ascon128av11 9.64 9.83 9.88 T:deoxysi128v141 9.63 9.83 9.86 T:deoxysii128v141 9.88 9.91 9.93 ascon128av12 10.31 10.38 10.45 T:ketjeminorv2 11.24 11.57 11.74 T:deoxysii256v141 11.37 11.58 12.06 T:deoxysi256v141 13.56 14.09 14.91 T:aeadaes256ocbtaglen128v1 14.64 14.67 14.69 T:ascon128v11 14.65 14.68 14.71 T:ascon128v1 14.67 14.71 14.75 ascon128v12 15.11 15.14 15.17 T:twine80n6t4clocv2 15.45 15.51 15.55 T:aes128otrsv2 15.60 15.64 15.66 T:aes128otrsv3 15.61 15.65 15.66 T:aes128otrsv1 15.89 15.91 15.97 T:aes128n12t8silcv3 15.92 15.94 15.96 T:twine80n6t4clocv3 15.92 15.95 16.00 T:aes128n8t8clocv2 15.94 15.96 16.00 T:aes128n8t8silcv2 15.93 15.97 16.01 T:aes128n12t8clocv2 15.92 16.00 16.03 T:aes128n12clocv1 15.98 16.02 16.03 T:aes128n12t8silcv2 15.99 16.03 16.09 T:aes128n12t8clocv3 16.00 16.06 16.10 T:aes128n8silcv1 16.03 16.06 16.11 T:aes128n12silcv1 16.00 16.07 16.16 T:aes128n8clocv1 16.82 16.86 17.02 T:aes128otrcv3 18.15 18.66 19.08 T:oceankeyakv1 19.45 19.50 19.55 T:aes128otrpv3 19.45 19.55 19.71 T:aes128otrpv2 19.52 19.56 19.64 T:aes128otrpv1 20.47 20.52 20.55 T:aes256otrsv2 20.78 20.82 20.84 T:aes256otrsv3 20.79 20.82 20.86 T:aes256otrsv1 21.94 21.97 22.00 T:aes256otrcv3 24.52 24.56 24.66 T:aes256otrpv2 24.64 24.68 24.70 T:aes256otrpv3 24.75 24.80 25.09 T:aes256otrpv1 24.78 24.90 25.21 T:seakeyakv1 28.16 28.19 28.24 T:aezv5 29.06 29.09 29.14 T:aesjambuv1 30.79 30.83 30.89 T:proest256otrv1 30.75 30.84 30.95 T:aezv4 32.37 32.42 32.48 T:ketjesrv1 35.26 35.35 35.43 T:ketjesrv2 39.41 39.60 39.75 T:riverkeyakv1 61.09 61.16 61.27 T:proest128otrv1 64.76 64.90 64.95 T:aezv1 71.10 71.21 71.34 T:ketjejrv1 78.56 78.60 78.93 T:present80n6t4silcv3 79.52 79.92 80.01 T:twine80n6clocv1 87.02 87.09 87.37 T:deoxyseq128128v13 87.28 87.68 87.75 T:deoxysneq128128v13 88.54 88.70 91.58 T:deoxysneq128128v1 88.55 88.88 89.86 T:deoxyseq128128v1 90.94 91.07 91.28 T:aezv3 115.56 115.91 116.38 T:ketjejrv2 115.72 117.92 118.09 T:led80n6t4silcv3 137.31 137.45 137.64 T:deoxysneq256128v13 137.42 137.58 137.85 T:deoxyseq256128v13 138.78 138.88 138.96 T:deoxyseq256128v1 139.45 139.68 139.86 T:deoxysneq256128v1 403.75 404.70 406.54 aes256gcmv1 480.95 481.92 482.46 T:acorn128v3 414.51? 485.63? 793.96? T:acorn128 480.84 486.40 493.83 T:acorn128v2 3471.29 3476.22 3479.04 T:present80n6silcv1 3478.16 3482.01 3484.02 T:present80n6t4silcv2 4212.29 4221.80 4313.43 T:led80n6t4silcv2 4304.94 4310.02 4315.60 T:led80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.85 0.86 0.87 T:morus1280256v2 0.84 0.86 0.87 T:morus1280256v1 0.89 0.91 0.93 T:morus1280128v2 1.05 1.07 1.08 T:morus640128v1 1.06 1.07 1.08 T:morus640128v2 1.72 1.82 1.90 T:aes128gcmv1 1.70? 1.84? 1.89? T:aes256gcmv1 1.92 1.96 1.98 T:morus1280128v1 2.09 2.15 2.22 T:oceankeyakv2 2.10 2.17 2.24 T:lunarkeyakv2 2.51 2.60 2.77 T:seakeyakv2 2.77 2.80 2.82 T:norx6441v2 2.86 2.88 2.91 T:norx6441v3 3.34 3.37 3.39 T:norx6441v1 3.87 3.89 3.93 T:norx3241v2 3.87 3.89 3.91 T:norx3241v3 4.10 4.14 4.16 T:tiaoxinv1 4.16 4.18 4.20 T:norx6461v2 4.22 4.24 4.27 T:norx6461v3 4.22 4.27 4.47 T:tiaoxinv2 4.39 4.42 4.45 T:lakekeyakv2 4.49 4.51 4.54 T:norx6444v2 4.52 4.53 4.55 T:norx6444v3 4.64 4.66 4.67 T:norx3241v1 4.95 5.00 5.04 T:lakekeyakv1 5.04 5.06 5.08 T:norx6461v1 5.43 5.45 5.50 T:norx6444v1 5.86 5.89 5.91 T:norx3261v3 5.88 5.89 5.91 T:norx3261v2 6.34 6.38 6.42 T:aegis128l 7.11 7.15 7.22 T:ketjemajorv2 7.70 7.72 7.74 T:norx3261v1 7.81 7.83 7.86 T:aegis128 8.91 8.95 8.96 T:riverkeyakv2 9.24 9.26 9.28 T:aegis256 9.72 9.75 9.77 T:ascon96v1 9.77 9.80 9.84 T:deoxysii128v141 9.74 9.82 9.89 T:deoxysi128v141 9.81 9.84 9.87 T:ascon128av11 9.92 9.94 9.96 ascon128av12 10.30 10.35 10.44 T:ketjeminorv2 9.50? 10.69? 11.01? T:aeadaes128ocbtaglen128v1 11.39 11.47 11.65 T:deoxysii256v141 11.39 11.51 11.58 T:deoxysi256v141 14.51 14.55 14.59 T:ascon128v11 14.62 14.65 14.70 T:ascon128v1 13.47? 14.73? 15.29? T:aeadaes256ocbtaglen128v1 14.80 14.82 14.85 ascon128v12 15.09 15.14 15.20 T:twine80n6t4clocv2 15.43 15.46 15.51 T:aes128otrsv2 15.59 15.63 15.68 T:aes128otrsv3 15.57 15.63 15.66 T:aes128otrsv1 15.88 15.91 15.98 T:aes128n12t8silcv3 15.91 15.94 15.96 T:twine80n6t4clocv3 15.92 15.95 15.96 T:aes128n12t8clocv2 15.92 15.96 16.02 T:aes128n12clocv1 15.89 15.97 16.03 T:aes128n8t8clocv2 15.94 15.99 16.02 T:aes128n8t8silcv2 15.96 15.99 16.07 T:aes128n12t8silcv2 15.93 16.02 16.10 T:aes128n8clocv1 15.97 16.03 16.07 T:aes128n12t8clocv3 16.05 16.10 16.13 T:aes128n8silcv1 16.07 16.10 16.15 T:aes128n12silcv1 16.85 16.88 16.92 T:aes128otrcv3 17.94 18.45 18.93 T:oceankeyakv1 19.42 19.46 19.57 T:aes128otrpv2 19.46 19.50 19.55 T:aes128otrpv3 19.50 19.58 19.63 T:aes128otrpv1 20.49 20.51 20.55 T:aes256otrsv2 20.79 20.82 20.86 T:aes256otrsv1 20.77 20.83 20.87 T:aes256otrsv3 21.95 21.97 22.01 T:aes256otrcv3 24.51 24.58 24.66 T:aes256otrpv2 24.64 24.68 24.72 T:aes256otrpv3 24.74 24.83 25.19 T:aes256otrpv1 24.71 24.88 25.32 T:seakeyakv1 28.10 28.17 28.23 T:aezv5 29.02 29.05 29.10 T:aesjambuv1 30.78 30.81 30.96 T:aezv4 30.76 30.82 30.87 T:proest256otrv1 32.30 32.39 32.48 T:ketjesrv1 35.30 35.37 35.42 T:ketjesrv2 39.43 39.55 39.68 T:riverkeyakv1 61.08 61.24 61.38 T:proest128otrv1 64.61 64.87 64.92 T:aezv1 71.02 71.19 71.38 T:ketjejrv1 78.54 78.60 79.04 T:present80n6t4silcv3 79.51 79.64 79.93 T:twine80n6clocv1 86.79 86.98 87.20 T:deoxyseq128128v13 87.38 87.57 87.67 T:deoxysneq128128v13 88.29 88.74 88.85 T:deoxysneq128128v1 88.57 88.78 88.97 T:deoxyseq128128v1 90.97 91.12 91.27 T:aezv3 110.96? 115.89? 148.71? T:ketjejrv2 115.89 116.02 116.09 T:led80n6t4silcv3 137.06 137.21 137.31 T:deoxysneq256128v13 137.63 137.70 137.79 T:deoxyseq256128v13 138.76 138.91 139.37 T:deoxyseq256128v1 139.12 139.26 140.24 T:deoxysneq256128v1 404.34 405.47 406.47 aes256gcmv1 481.50 482.03 482.59 T:acorn128v3 480.73 484.44 494.13 T:acorn128v2 416.96? 485.79? 802.53? T:acorn128 3474.30 3476.46 3479.38 T:present80n6silcv1 3477.48 3482.47 3485.18 T:present80n6t4silcv2 4225.84 4228.61 4231.83 T:led80n6t4silcv2 4223.39 4235.49 4324.31 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.85 0.86 0.87 T:morus1280256v1 0.86 0.86 0.87 T:morus1280256v2 0.89 0.92 0.93 T:morus1280128v2 1.06 1.07 1.08 T:morus640128v1 1.07 1.08 1.08 T:morus640128v2 1.66? 1.78? 1.97? T:aes256gcmv1 1.70 1.79 1.83 T:aes128gcmv1 1.95 1.96 1.97 T:morus1280128v1 2.06 2.13 2.20 T:lunarkeyakv2 2.10 2.16 2.23 T:oceankeyakv2 2.49 2.59 2.76 T:seakeyakv2 2.77 2.79 2.81 T:norx6441v2 2.87 2.88 2.89 T:norx6441v3 3.32 3.34 3.37 T:norx6441v1 3.87 3.90 3.92 T:norx3241v2 3.88 3.90 3.92 T:norx3241v3 4.09 4.15 4.18 T:tiaoxinv1 4.15 4.17 4.20 T:norx6461v2 4.20 4.23 4.24 T:norx6461v3 4.23 4.28 4.41 T:tiaoxinv2 4.40 4.42 4.44 T:lakekeyakv2 4.49 4.51 4.54 T:norx6444v2 4.49 4.51 4.54 T:norx6444v3 4.65 4.66 4.69 T:norx3241v1 4.97 5.01 5.04 T:lakekeyakv1 5.03 5.05 5.07 T:norx6461v1 5.43 5.47 5.52 T:norx6444v1 5.87 5.89 5.92 T:norx3261v3 5.87 5.89 5.91 T:norx3261v2 6.36 6.39 6.43 T:aegis128l 7.09 7.15 7.20 T:ketjemajorv2 7.68 7.70 7.72 T:norx3261v1 7.81 7.83 7.85 T:aegis128 8.90 8.93 8.96 T:riverkeyakv2 9.24 9.26 9.28 T:aegis256 9.70 9.74 9.76 T:ascon96v1 9.70 9.79 9.85 T:deoxysii128v141 9.80 9.83 9.87 T:deoxysi128v141 9.81 9.85 9.86 T:ascon128av11 9.91 9.93 9.97 ascon128av12 9.67? 10.10? 10.77? T:aeadaes128ocbtaglen128v1 10.29 10.35 10.40 T:ketjeminorv2 11.46 11.50 11.59 T:deoxysii256v141 11.45 11.52 11.57 T:deoxysi256v141 13.57 14.11 15.01 T:aeadaes256ocbtaglen128v1 14.52 14.55 14.56 T:ascon128v11 14.63 14.65 14.69 T:ascon128v1 14.79 14.82 14.85 ascon128v12 15.11 15.15 15.19 T:twine80n6t4clocv2 15.44 15.48 15.53 T:aes128otrsv2 15.58 15.60 15.65 T:aes128otrsv3 15.61 15.63 15.67 T:aes128otrsv1 15.91 15.94 15.97 T:aes128n12t8silcv3 15.91 15.95 15.98 T:twine80n6t4clocv3 15.90 15.95 16.01 T:aes128n8t8clocv2 15.93 15.95 16.00 T:aes128n12t8clocv2 15.93 15.96 15.98 T:aes128n12clocv1 15.97 15.99 16.05 T:aes128n12t8clocv3 15.96 16.00 16.05 T:aes128n8t8silcv2 15.89 16.01 16.07 T:aes128n8clocv1 15.98 16.04 16.09 T:aes128n12t8silcv2 16.04 16.08 16.10 T:aes128n8silcv1 16.07 16.10 16.14 T:aes128n12silcv1 16.85 16.87 16.90 T:aes128otrcv3 17.93 18.36 18.97 T:oceankeyakv1 19.43 19.46 19.52 T:aes128otrpv2 19.47 19.51 19.55 T:aes128otrpv3 19.51 19.57 19.60 T:aes128otrpv1 20.49 20.53 20.58 T:aes256otrsv2 20.78 20.81 20.85 T:aes256otrsv3 20.79 20.83 20.86 T:aes256otrsv1 21.94 21.97 21.99 T:aes256otrcv3 24.54 24.59 24.66 T:aes256otrpv2 24.65 24.69 24.72 T:aes256otrpv3 24.74 24.79 25.20 T:aes256otrpv1 24.74 24.83 25.15 T:seakeyakv1 28.06 28.13 28.24 T:aezv5 29.01 29.04 29.09 T:aesjambuv1 30.77 30.80 30.96 T:aezv4 30.76 30.81 30.86 T:proest256otrv1 32.31 32.36 32.46 T:ketjesrv1 35.29 35.36 35.42 T:ketjesrv2 39.47 39.54 39.75 T:riverkeyakv1 61.07 61.19 61.36 T:proest128otrv1 64.73 64.84 64.96 T:aezv1 71.06 71.18 71.50 T:ketjejrv1 78.53 78.57 79.13 T:present80n6t4silcv3 79.50 79.58 79.97 T:twine80n6clocv1 86.85 87.19 88.11 T:deoxyseq128128v13 87.43 87.56 87.65 T:deoxysneq128128v13 88.34 88.55 88.85 T:deoxysneq128128v1 88.42 88.72 88.93 T:deoxyseq128128v1 90.91 91.17 91.33 T:aezv3 114.46? 115.96? 127.98? T:ketjejrv2 115.89 116.01 116.11 T:led80n6t4silcv3 137.00 137.28 137.38 T:deoxysneq256128v13 137.54 137.67 137.77 T:deoxyseq256128v13 138.81 138.89 139.42 T:deoxyseq256128v1 138.87 139.32 140.06 T:deoxysneq256128v1 404.94 406.00 406.51 aes256gcmv1 481.66 482.33 482.66 T:acorn128v3 480.66 484.11 494.33 T:acorn128v2 416.89? 485.92? 802.65? T:acorn128 3472.19 3476.38 3478.65 T:present80n6silcv1 3469.62 3478.20 3482.02 T:present80n6t4silcv2 4226.27 4228.62 4230.68 T:led80n6t4silcv2 4226.49 4237.25 4330.54 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.15 1.16 1.17 T:morus1280256v1 1.17 1.17 1.18 T:morus1280128v2 1.18 1.19 1.20 T:morus1280256v2 1.24 1.25 1.26 T:morus640128v1 1.26 1.27 1.28 T:morus640128v2 2.42 2.49 2.50 T:morus1280128v1 3.27 3.28 3.28 T:norx6441v2 3.36 3.37 3.38 T:norx6441v3 3.78 3.80 3.81 T:norx6441v1 3.90 3.93 4.06 T:seakeyakv2 4.18 4.19 4.22 T:norx3241v3 4.22 4.22 4.23 T:norx3241v2 4.88 4.89 4.91 T:norx6461v2 4.92 4.94 4.97 T:norx3241v1 4.93 4.95 4.97 T:norx6461v3 5.28 5.29 5.32 T:oceankeyakv2 5.41 5.42 5.45 T:lakekeyakv2 5.68 5.69 5.71 T:norx6461v1 6.20 6.22 6.43 T:tiaoxinv2 6.18 6.23 6.24 T:lakekeyakv1 6.23 6.35 6.36 T:tiaoxinv1 6.38 6.42 6.43 T:norx3261v2 6.43 6.44 6.47 T:norx3261v3 6.53 6.56 6.57 T:norx6444v2 6.53 6.58 6.60 T:norx6444v3 6.95 7.04 7.06 T:aes128gcmv1 7.66 7.66 7.68 T:aegis128l 7.75 7.77 7.78 T:norx6444v1 8.14 8.15 8.16 T:norx3261v1 8.35 8.40 8.62 T:aes256gcmv1 8.52 8.54 8.55 T:aegis128 9.10 9.14 9.16 T:lunarkeyakv2 9.96 9.98 9.99 T:ascon96v1 10.03 10.03 10.06 T:ascon128av11 10.01 10.04 10.06 T:riverkeyakv2 10.27 10.27 10.30 ascon128av12 10.42 10.44 10.45 T:aegis256 11.07 11.21 11.50 T:deoxysi128v141 11.47 11.49 11.54 T:ketjemajorv2 12.41 12.59 12.95 T:aeadaes128ocbtaglen128v1 13.11 13.34 13.60 T:deoxysi256v141 13.51 13.53 13.58 T:ketjeminorv2 14.80 14.81 14.82 T:ascon128v11 14.87 14.87 14.89 T:ascon128v1 15.13 15.13 15.15 ascon128v12 15.84 15.85 15.90 T:twine80n6t4clocv2 16.19 16.26 16.60 T:deoxysii128v141 16.47 16.48 16.50 T:twine80n6t4clocv3 16.34 16.65 16.92 T:aeadaes256ocbtaglen128v1 17.42 17.43 17.44 T:aes128otrcv3 17.48 17.51 17.58 T:aes128otrsv3 17.91 17.93 17.99 T:aes128otrsv2 18.06 18.07 18.10 T:aes128otrsv1 19.32 19.43 19.68 T:deoxysii256v141 19.41 19.43 19.47 T:aes128otrpv3 19.93 20.01 20.05 T:aes128otrpv2 20.02 20.04 20.07 T:aes128otrpv1 22.66 22.68 22.72 T:aes256otrcv3 22.81 22.84 22.90 T:aes256otrsv3 23.12 23.14 23.17 T:aes256otrsv2 23.38 23.43 23.49 T:aes256otrsv1 23.69 23.70 23.76 T:aes128n8t8clocv2 23.67 23.73 23.74 T:aes128n12t8clocv2 23.75 23.76 23.83 T:aes128n12clocv1 23.79 23.82 23.87 T:aes128n12t8clocv3 23.84 23.87 24.44 T:aes128n8clocv1 24.73 24.75 24.78 T:aes256otrpv3 25.04 25.05 25.08 T:aes128n8t8silcv2 25.07 25.09 25.18 T:aes128n12t8silcv2 25.15 25.18 25.27 T:aes256otrpv2 25.38 25.46 25.54 T:aes256otrpv1 25.58 25.59 25.61 T:aes128n12t8silcv3 25.86 25.89 25.92 T:aes128n8silcv1 25.86 25.89 25.93 T:aes128n12silcv1 28.28 28.53 28.95 T:oceankeyakv1 29.65 29.67 29.68 T:aesjambuv1 30.39 30.48 30.62 T:seakeyakv1 33.24 33.29 33.31 T:proest256otrv1 35.38 35.44 35.53 T:aezv5 35.84 35.91 36.06 T:ketjesrv1 37.49 37.56 37.68 T:aezv4 38.95 39.02 39.04 T:ketjesrv2 43.59 43.65 43.72 T:riverkeyakv1 66.65 66.69 66.77 T:proest128otrv1 76.79 76.90 77.04 T:ketjejrv1 79.57 79.61 80.07 T:present80n6t4silcv3 88.00 88.12 88.17 T:deoxysneq128128v13 88.54 88.77 89.97 T:deoxysneq128128v1 117.19 119.16 119.24 T:led80n6t4silcv3 120.28 120.50 121.63 T:twine80n6clocv1 123.39 123.72 124.34 T:ketjejrv2 130.06 130.44 131.03 T:aezv1 133.39 133.66 133.99 T:deoxyseq128128v1 133.83 133.89 134.00 T:deoxyseq128128v13 138.11 138.33 138.41 T:deoxysneq256128v13 139.64 139.76 140.13 T:deoxysneq256128v1 142.34 142.51 142.88 T:aezv3 208.87 209.04 209.20 T:deoxyseq256128v1 209.97 210.07 210.27 T:deoxyseq256128v13 543.09 543.53 544.07 T:acorn128v3 548.57? 549.21? 817.76? T:acorn128 548.06 551.65 566.40 T:acorn128v2 5229.72 5235.74 5238.59 T:present80n6silcv1 5250.17 5252.76 5265.64 T:present80n6t4silcv2 6390.15 6394.60 6397.08 T:led80n6silcv1 6404.34 6443.79 6445.23 T:led80n6t4silcv2 13462.02 13462.92 13482.81 aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.12 1.13 1.14 T:morus1280256v1 1.14 1.15 1.16 T:morus1280256v2 1.17 1.18 1.19 T:morus1280128v2 1.26 1.26 1.27 T:morus640128v1 1.28 1.28 1.29 T:morus640128v2 2.43 2.44 2.55 T:morus1280128v1 3.28 3.28 3.30 T:norx6441v2 3.35 3.36 3.39 T:norx6441v3 3.80 3.81 3.84 T:norx6441v1 3.95 3.97 4.14 T:seakeyakv2 4.16 4.18 4.18 T:norx3241v2 4.18 4.19 4.21 T:norx3241v3 4.83 4.85 4.87 T:norx6461v2 4.87 4.89 4.90 T:norx3241v1 4.90 4.92 4.93 T:norx6461v3 5.34 5.35 5.38 T:oceankeyakv2 5.41 5.42 5.45 T:lakekeyakv2 5.74 5.76 5.78 T:norx6461v1 6.04 6.07 6.10 T:lakekeyakv1 6.30 6.32 6.35 T:tiaoxinv1 6.36 6.38 6.39 T:norx3261v3 6.38 6.39 6.41 T:norx3261v2 6.41 6.44 6.64 T:tiaoxinv2 6.52 6.54 6.56 T:norx6444v2 6.55 6.56 6.57 T:norx6444v3 6.97 7.02 7.05 T:aes128gcmv1 7.65 7.66 7.71 T:aegis128l 7.75 7.78 7.80 T:norx6444v1 8.05 8.06 8.06 T:norx3261v1 8.37 8.40 8.68 T:aes256gcmv1 8.55 8.57 8.58 T:aegis128 9.14 9.16 9.21 T:lunarkeyakv2 10.03 10.05 10.09 T:ascon96v1 10.07 10.09 10.10 T:ascon128av11 10.09 10.11 10.14 T:riverkeyakv2 10.24 10.25 10.26 ascon128av12 10.39 10.41 10.42 T:aegis256 11.51 11.54 11.59 T:ketjemajorv2 12.68 12.95 13.06 T:deoxysi128v141 12.98 13.02 13.05 T:ketjeminorv2 13.63 14.01 14.27 T:aeadaes128ocbtaglen128v1 14.97 14.98 14.99 T:ascon128v1 14.98 15.00 15.02 T:ascon128v11 15.13 15.14 15.15 ascon128v12 14.96 15.26 16.12 T:deoxysi256v141 15.68 15.71 15.72 T:twine80n6t4clocv2 16.45 16.46 16.48 T:twine80n6t4clocv3 16.14 16.47 16.66 T:deoxysii128v141 17.52 17.53 17.55 T:aes128otrcv3 17.72 17.73 17.76 T:aes128otrsv2 17.88 17.89 17.91 T:aes128otrsv1 18.47 18.51 18.54 T:aes128otrsv3 18.33 18.59 18.94 T:aeadaes256ocbtaglen128v1 19.21 19.27 19.50 T:deoxysii256v141 19.73 19.77 19.85 T:aes128otrpv2 19.85 19.87 19.91 T:aes128otrpv1 20.39 20.40 20.42 T:aes128otrpv3 22.78 22.79 22.81 T:aes256otrcv3 22.95 22.96 22.97 T:aes256otrsv2 23.22 23.25 23.28 T:aes256otrsv1 23.42 23.43 23.47 T:aes128n8t8clocv2 23.41 23.46 23.48 T:aes128n12t8clocv2 23.56 23.59 23.68 T:aes128n12clocv1 23.63 23.66 23.69 T:aes128n12t8clocv3 23.75 23.78 24.36 T:aes128n8clocv1 23.84 23.86 23.88 T:aes256otrsv3 24.97 24.99 25.11 T:aes256otrpv2 25.05 25.11 25.17 T:aes128n12t8silcv2 25.07 25.11 25.14 T:aes128n8t8silcv2 25.22 25.27 25.50 T:aes256otrpv1 25.60 25.64 25.71 T:aes128n12t8silcv3 25.75 25.76 25.80 T:aes256otrpv3 25.94 25.98 26.05 T:aes128n8silcv1 25.97 26.00 26.04 T:aes128n12silcv1 28.39 28.57 29.02 T:oceankeyakv1 29.64 29.66 29.69 T:aesjambuv1 30.44 30.51 30.78 T:seakeyakv1 33.21 33.26 33.29 T:proest256otrv1 35.29 35.34 35.40 T:aezv5 36.38 36.44 36.47 T:ketjesrv1 37.40 37.43 37.50 T:aezv4 40.07 40.21 40.28 T:ketjesrv2 43.70 43.75 43.81 T:riverkeyakv1 65.59 65.68 66.95 T:proest128otrv1 77.20 77.28 77.41 T:ketjejrv1 79.93 79.99 80.56 T:present80n6t4silcv3 106.01 106.05 106.12 T:deoxysneq128128v13 106.37 106.44 106.79 T:deoxysneq128128v1 117.43 117.61 117.77 T:led80n6t4silcv3 120.40 120.58 120.73 T:twine80n6clocv1 122.13 124.25 135.38 T:ketjejrv2 130.95 131.37 131.73 T:aezv1 133.53 133.66 133.79 T:deoxyseq128128v13 142.14 142.24 142.68 T:aezv3 158.12 158.23 158.32 T:deoxysneq256128v13 159.65 159.89 160.61 T:deoxysneq256128v1 167.83 168.09 168.35 T:deoxyseq128128v1 210.21 210.51 210.58 T:deoxyseq256128v13 248.45 248.51 248.62 T:deoxyseq256128v1 545.01? 545.87? 817.19? T:acorn128 546.53 546.93 547.07 T:acorn128v3 545.83 549.32 556.82 T:acorn128v2 5239.48 5242.45 5246.21 T:present80n6t4silcv2 5236.92 5243.48 5246.41 T:present80n6silcv1 6406.04 6430.44 6436.13 T:led80n6silcv1 6441.81 6444.66 6447.94 T:led80n6t4silcv2 13463.14 13463.91 13484.24 aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.12 1.12 1.13 T:morus1280256v1 1.14 1.14 1.15 T:morus1280256v2 1.17 1.18 1.18 T:morus1280128v2 1.26 1.26 1.27 T:morus640128v1 1.28 1.28 1.29 T:morus640128v2 2.41 2.42 2.51 T:morus1280128v1 3.27 3.28 3.30 T:norx6441v2 3.35 3.36 3.36 T:norx6441v3 3.81 3.82 3.83 T:norx6441v1 3.98 4.01 4.15 T:seakeyakv2 4.17 4.17 4.18 T:norx3241v2 4.18 4.18 4.20 T:norx3241v3 4.84 4.86 4.87 T:norx6461v2 4.89 4.89 4.91 T:norx3241v1 4.90 4.91 4.92 T:norx6461v3 5.38 5.40 5.42 T:oceankeyakv2 5.43 5.45 5.46 T:lakekeyakv2 5.75 5.75 5.76 T:norx6461v1 6.09 6.11 6.14 T:lakekeyakv1 6.29 6.33 6.38 T:tiaoxinv1 6.37 6.37 6.39 T:norx3261v3 6.37 6.38 6.39 T:norx3261v2 6.41 6.43 6.56 T:tiaoxinv2 6.55 6.57 6.59 T:norx6444v2 6.57 6.58 6.60 T:norx6444v3 6.98 7.02 7.25 T:aes128gcmv1 7.64 7.65 7.71 T:aegis128l 7.79 7.81 7.82 T:norx6444v1 8.05 8.05 8.06 T:norx3261v1 8.35 8.41 8.63 T:aes256gcmv1 8.55 8.57 8.59 T:aegis128 9.18 9.20 9.24 T:lunarkeyakv2 10.03 10.04 10.06 T:ascon96v1 10.08 10.09 10.11 T:ascon128av11 10.12 10.14 10.17 T:riverkeyakv2 10.23 10.23 10.24 ascon128av12 10.39 10.40 10.46 T:aegis256 11.55 11.57 11.59 T:ketjemajorv2 12.67 12.95 13.01 T:deoxysi128v141 13.01 13.02 13.07 T:ketjeminorv2 13.59 13.66 14.08 T:aeadaes128ocbtaglen128v1 14.97 14.99 14.99 T:ascon128v1 14.98 15.01 15.03 T:ascon128v11 14.98 15.09 15.32 T:deoxysi256v141 15.13 15.14 15.15 ascon128v12 15.68 15.70 15.70 T:twine80n6t4clocv2 16.31 16.40 16.61 T:deoxysii128v141 16.46 16.47 16.49 T:twine80n6t4clocv3 17.51 17.53 17.54 T:aes128otrcv3 17.75 17.76 17.77 T:aes128otrsv2 17.90 17.92 17.93 T:aes128otrsv1 18.25 18.54 18.79 T:aeadaes256ocbtaglen128v1 18.52 18.55 18.58 T:aes128otrsv3 19.23 19.25 19.47 T:deoxysii256v141 19.79 19.82 19.87 T:aes128otrpv2 19.89 19.91 19.93 T:aes128otrpv1 20.43 20.44 20.45 T:aes128otrpv3 22.78 22.78 22.81 T:aes256otrcv3 22.98 22.99 23.02 T:aes256otrsv2 23.25 23.26 23.31 T:aes256otrsv1 23.42 23.44 23.47 T:aes128n8t8clocv2 23.40 23.45 23.49 T:aes128n12t8clocv2 23.56 23.58 23.78 T:aes128n12clocv1 23.60 23.64 23.67 T:aes128n12t8clocv3 23.71 23.75 24.31 T:aes128n8clocv1 23.86 23.87 23.92 T:aes256otrsv3 25.00 25.05 25.16 T:aes256otrpv2 25.08 25.10 25.13 T:aes128n8t8silcv2 25.11 25.14 25.18 T:aes128n12t8silcv2 25.24 25.27 25.47 T:aes256otrpv1 25.59 25.63 25.73 T:aes128n12t8silcv3 25.79 25.80 25.85 T:aes256otrpv3 25.94 26.01 26.10 T:aes128n8silcv1 25.96 26.03 26.08 T:aes128n12silcv1 28.44 28.61 28.99 T:oceankeyakv1 29.63 29.65 29.67 T:aesjambuv1 30.56 30.67 30.84 T:seakeyakv1 33.18 33.22 33.26 T:proest256otrv1 35.26 35.28 35.31 T:aezv5 36.39 36.43 36.48 T:ketjesrv1 37.35 37.41 37.47 T:aezv4 40.20 40.24 40.30 T:ketjesrv2 43.74 43.80 43.83 T:riverkeyakv1 65.57 65.66 66.94 T:proest128otrv1 77.29 77.41 77.44 T:ketjejrv1 79.95 79.98 80.51 T:present80n6t4silcv3 106.06 106.10 106.17 T:deoxysneq128128v13 106.52 106.66 106.74 T:deoxysneq128128v1 117.44 117.59 117.67 T:led80n6t4silcv3 120.51 120.70 120.78 T:twine80n6clocv1 121.90? 124.40? 139.77? T:ketjejrv2 130.66 130.94 131.72 T:aezv1 133.55 133.65 133.78 T:deoxyseq128128v13 142.07 142.15 142.55 T:aezv3 158.07 158.22 158.37 T:deoxysneq256128v13 159.86 159.94 160.44 T:deoxysneq256128v1 167.52 168.05 168.60 T:deoxyseq128128v1 210.46 210.55 210.57 T:deoxyseq256128v13 248.48 248.52 248.75 T:deoxyseq256128v1 544.74? 545.71? 817.21? T:acorn128 546.24 546.63 547.03 T:acorn128v3 545.65 555.70 556.59 T:acorn128v2 674.20 674.57 675.35 aes256gcmv1 5232.27 5243.03 5245.04 T:present80n6silcv1 5239.32 5243.37 5248.57 T:present80n6t4silcv2 6401.14 6434.12 6442.15 T:led80n6silcv1 6442.11 6443.94 6446.83 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.63 4.70 4.80 T:morus640128v1 4.90 4.95 5.06 T:morus640128v2 6.34 6.53 6.71 T:morus1280256v1 6.53 6.59 7.07 T:morus1280128v2 6.86 7.05 7.27 T:morus1280256v2 10.52 10.59 10.76 T:norx3241v1 10.69 10.80 11.06 T:norx3241v2 10.80 10.88 11.02 T:norx3241v3 11.23 11.41 11.50 T:norx6441v1 11.68 11.73 11.75 T:norx6441v3 11.91 11.95 12.02 T:norx6441v2 12.62 12.73 13.22 T:morus1280128v1 15.09 15.22 15.45 T:ascon96v1 15.18 15.27 15.73 T:ascon128av11 15.84 15.97 16.31 ascon128av12 16.05 16.13 16.26 T:norx3261v2 16.05 16.16 16.25 T:norx3261v3 16.54 16.64 16.80 T:norx6461v1 16.85 16.90 16.92 T:norx6461v3 17.13 17.21 17.29 T:norx6461v2 17.17 17.21 17.28 T:norx3261v1 19.71 19.76 20.18 T:ascon128v11 19.86 19.99 20.18 T:ascon128v1 20.06 20.18 20.39 ascon128v12 20.26 20.45 20.83 T:lakekeyakv1 23.40 23.45 24.00 T:riverkeyakv2 23.43 23.64 23.95 T:lakekeyakv2 24.41 24.55 24.70 T:twine80n6t4clocv3 24.81 24.93 25.05 T:twine80n6t4clocv2 24.70 25.05 25.22 T:aegis128 28.77 28.88 29.57 T:aes128n8t8clocv2 28.77 28.91 29.73 T:aes128n12t8clocv2 29.52 29.63 29.88 T:aes128n12t8clocv3 29.62 29.89 29.96 T:aes128otrsv2 30.10 30.17 30.50 T:aes128otrsv1 30.19 30.30 30.89 T:aes128n12clocv1 30.23 30.62 30.80 T:aes128otrsv3 30.13 30.62 31.70 T:aes128n8clocv1 31.62 31.66 31.76 T:aes128otrpv2 31.53 31.98 32.26 T:aes128otrpv3 31.93 32.07 32.45 T:aes128otrpv1 32.44 32.95 33.80 T:aes128otrcv3 33.82 34.02 34.22 T:aes128n12t8silcv2 34.06 34.16 34.38 T:aes128n8t8silcv2 34.45 34.58 34.76 T:aegis128l 34.77 35.05 35.59 T:aes128n12t8silcv3 35.91 36.13 36.67 T:aes128n12silcv1 35.90 36.15 36.37 T:aes128n8silcv1 36.12 36.33 36.55 T:aegis256 36.61 37.84 38.65 T:seakeyakv2 38.02 38.37 38.50 T:aes256otrsv2 38.73 38.84 39.12 T:aes256otrsv3 38.50 39.02 39.11 T:aes256otrsv1 39.80 40.05 40.48 T:aes256otrpv3 40.04 40.13 40.60 T:aesjambuv1 39.79 40.20 40.48 T:aes256otrpv2 40.38 40.64 40.78 T:aes256otrpv1 41.27 41.75 41.98 T:aes256otrcv3 43.52 43.86 44.24 T:tiaoxinv1 44.80 45.88 46.15 T:tiaoxinv2 46.73 47.00 47.11 T:norx6444v2 46.97 47.10 47.43 T:norx6444v3 48.37 48.73 49.05 T:ketjeminorv2 48.27 48.73 49.14 T:aezv4 48.55 48.82 49.33 T:aezv5 50.14 50.61 50.92 T:deoxysi128v141 55.34 55.52 55.62 T:norx6444v1 56.67 56.98 57.37 T:ketjesrv1 59.02 59.80 61.12 T:aes128gcmv1 59.61 59.88 60.09 T:oceankeyakv2 58.00? 62.66? 68.73? T:aeadaes128ocbtaglen128v1 66.77 66.88 67.73 T:ketjesrv2 67.41 67.84 69.87 T:aes256gcmv1 68.12 68.41 69.09 T:deoxysii128v141 64.86? 69.96? 75.77? T:aeadaes256ocbtaglen128v1 72.41 72.66 73.02 T:deoxysi256v141 75.17 75.67 75.93 T:ketjemajorv2 76.41 76.66 77.05 T:riverkeyakv1 95.13 95.24 95.92 T:proest256otrv1 98.48 98.68 98.88 T:present80n6t4silcv3 99.78 100.14 100.32 T:deoxysneq128128v13 100.23 100.61 100.78 T:deoxysneq128128v1 101.69 102.17 103.42 T:ketjejrv1 129.62 130.09 130.98 T:proest128otrv1 132.40 133.41 133.88 T:twine80n6clocv1 140.24 141.84 142.55 T:led80n6t4silcv3 145.65 146.26 147.13 T:aezv1 148.62 149.11 149.51 T:lunarkeyakv2 156.05 156.25 156.50 T:deoxysneq256128v13 155.88 156.36 157.79 T:deoxyseq128128v1 157.25 157.90 158.55 T:deoxysneq256128v1 163.30 163.91 165.14 T:ketjejrv2 166.27 166.52 166.99 T:deoxyseq128128v13 178.65 179.27 180.22 T:deoxysii256v141 203.13 204.04 205.44 T:aezv3 227.72 229.19 230.95 T:seakeyakv1 243.12 243.53 244.23 T:deoxyseq256128v1 260.42 261.46 261.70 T:deoxyseq256128v13 309.02 309.91 313.34 T:oceankeyakv1 1888.95? 1904.80? 2948.80? T:acorn128 1921.45 1924.77 1925.97 T:acorn128v3 1939.30 1941.23 1971.96 T:acorn128v2 5855.28 5860.09 5865.73 T:present80n6silcv1 5856.91 5863.13 5880.77 T:present80n6t4silcv2 6985.05 7028.10 7076.62 T:led80n6silcv1 7035.59 7075.81 7117.80 T:led80n6t4silcv2 19639.13 19640.34 19643.49 aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.80 4.86 5.04 T:morus640128v1 5.12 5.22 5.48 T:morus640128v2 6.18 6.34 6.67 T:morus1280256v1 6.62 6.80 6.92 T:morus1280256v2 6.93 6.99 7.43 T:morus1280128v2 10.71 10.77 10.82 T:norx3241v1 10.80 10.83 10.91 T:norx3241v2 10.95 11.05 11.20 T:norx3241v3 11.30 11.43 11.50 T:norx6441v1 11.57 11.73 11.78 T:norx6441v3 11.89 11.95 11.98 T:norx6441v2 12.83 12.87 13.56 T:morus1280128v1 15.17 15.30 15.59 T:ascon128av11 15.25 15.39 15.95 T:ascon96v1 15.84 16.03 16.14 ascon128av12 16.28 16.38 16.58 T:norx3261v2 16.25 16.48 16.69 T:norx3261v3 16.62 16.68 16.77 T:norx6461v1 16.69 16.72 16.80 T:norx6461v3 17.17 17.29 17.41 T:norx6461v2 17.22 17.30 17.34 T:norx3261v1 19.86 19.92 20.20 T:ascon128v11 20.02 20.15 20.49 T:ascon128v1 20.12 20.28 20.58 ascon128v12 20.28 20.51 20.91 T:lakekeyakv1 23.28 23.49 24.02 T:lakekeyakv2 23.45 23.55 23.88 T:riverkeyakv2 24.35 24.52 24.81 T:twine80n6t4clocv3 24.82 24.91 25.21 T:twine80n6t4clocv2 24.76 25.08 25.23 T:aegis128 28.71 28.88 29.68 T:aes128n8t8clocv2 28.79 28.93 29.71 T:aes128n12t8clocv2 29.47 29.61 29.76 T:aes128n12t8clocv3 29.66 29.73 30.09 T:aes128otrsv2 29.84 30.02 30.20 T:aes128otrsv1 30.23 30.42 31.40 T:aes128n12clocv1 30.17 30.73 30.94 T:aes128n8clocv1 30.95 31.11 31.46 T:aes128otrsv3 31.48 31.70 32.09 T:aes128otrpv2 31.86 31.99 32.40 T:aes128otrpv1 32.08 32.34 32.65 T:aes128otrpv3 32.41 32.98 33.27 T:aes128otrcv3 33.77 34.15 34.72 T:aes128n8t8silcv2 33.93 34.57 34.76 T:aes128n12t8silcv2 34.45 34.60 34.88 T:aegis128l 35.16 35.40 35.76 T:aes128n12t8silcv3 35.98 36.23 36.95 T:aes128n12silcv1 36.23 36.30 36.66 T:aegis256 36.05 36.31 36.59 T:aes128n8silcv1 36.77 37.12 38.22 T:seakeyakv2 38.01 38.10 38.37 T:aes256otrsv2 38.37 38.48 39.17 T:aes256otrsv1 39.46 39.65 39.89 T:aes256otrsv3 39.75 39.88 40.19 T:aes256otrpv2 40.02 40.20 40.50 T:aesjambuv1 40.33 40.41 40.79 T:aes256otrpv1 40.51 40.87 41.29 T:aes256otrpv3 41.37 41.53 42.14 T:aes256otrcv3 43.46 43.66 45.04 T:tiaoxinv1 45.56 45.81 46.02 T:tiaoxinv2 47.30 47.73 47.97 T:norx6444v3 47.52 47.75 48.05 T:norx6444v2 47.61 47.98 48.29 T:ketjeminorv2 48.42 48.52 48.86 T:aezv4 48.48 48.74 48.98 T:aezv5 55.30 55.50 55.95 T:norx6444v1 55.73 56.27 56.64 T:deoxysi128v141 57.52 57.73 58.16 T:ketjesrv1 58.45 58.96 60.73 T:aes128gcmv1 59.95 60.52 61.10 T:oceankeyakv2 67.06 67.76 68.91 T:aes256gcmv1 68.42 68.54 69.13 T:ketjesrv2 68.19 68.80 69.61 T:deoxysii128v141 61.59? 69.98? 73.09? T:aeadaes128ocbtaglen128v1 74.87 75.20 76.08 T:ketjemajorv2 76.55 76.74 77.09 T:riverkeyakv1 67.93? 76.76? 78.61? T:aeadaes256ocbtaglen128v1 78.92 79.27 80.08 T:deoxysi256v141 96.64 97.08 97.60 T:proest256otrv1 98.90 99.35 99.86 T:present80n6t4silcv3 102.86 103.24 103.74 T:ketjejrv1 117.80 117.95 118.20 T:deoxysneq128128v13 118.12 118.34 118.73 T:deoxysneq128128v1 129.77 131.44 134.82 T:proest128otrv1 132.84 132.95 133.07 T:twine80n6clocv1 140.21 140.66 141.16 T:led80n6t4silcv3 149.02 149.29 149.70 T:lunarkeyakv2 150.06 150.74 151.96 T:aezv1 163.92 165.44 179.39 T:ketjejrv2 166.36 166.70 168.05 T:deoxyseq128128v13 175.67 175.96 176.41 T:deoxysneq256128v13 177.26 177.77 178.34 T:deoxysneq256128v1 179.34 179.69 179.84 T:deoxysii256v141 190.49 190.95 192.02 T:deoxyseq128128v1 203.05 203.39 203.91 T:aezv3 228.72 229.99 231.11 T:seakeyakv1 261.19 262.23 263.01 T:deoxyseq256128v13 282.69 283.10 283.56 T:deoxyseq256128v1 307.62 309.36 313.35 T:oceankeyakv1 1879.30? 1900.27? 2921.27? T:acorn128 1929.21 1930.13 1931.10 T:acorn128v3 1931.93 1936.76 1964.21 T:acorn128v2 5858.35 5860.67 5871.12 T:present80n6t4silcv2 5861.73 5869.72 5876.45 T:present80n6silcv1 6895.48 6916.52 6942.67 T:led80n6silcv1 6951.59 6970.51 6992.87 T:led80n6t4silcv2 19640.34 19641.26 19647.02 aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.73 4.80 4.84 T:morus640128v1 5.09 5.15 5.22 T:morus640128v2 6.17 6.20 6.27 T:morus1280256v1 6.48 6.51 6.52 T:morus1280256v2 6.93 7.01 7.30 T:morus1280128v2 10.70 10.77 10.85 T:norx3241v1 10.77 10.85 10.95 T:norx3241v2 10.95 11.04 11.13 T:norx3241v3 11.26 11.39 11.49 T:norx6441v1 11.61 11.66 11.83 T:norx6441v3 11.95 11.99 12.09 T:norx6441v2 12.70 12.84 12.98 T:morus1280128v1 15.04 15.20 15.35 T:ascon96v1 15.16 15.27 15.68 T:ascon128av11 15.73 15.80 15.88 ascon128av12 16.16 16.23 16.32 T:norx3261v2 16.20 16.34 16.53 T:norx3261v3 16.52 16.62 16.75 T:norx6461v1 16.71 16.82 16.91 T:norx6461v3 17.19 17.25 17.31 T:norx3261v1 17.22 17.34 17.53 T:norx6461v2 19.78 19.87 20.17 T:ascon128v11 19.88 20.15 20.25 T:ascon128v1 20.09 20.21 20.46 ascon128v12 20.34 20.54 20.66 T:lakekeyakv1 23.36 23.46 23.76 T:lakekeyakv2 23.51 23.56 23.62 T:riverkeyakv2 24.41 24.59 24.80 T:twine80n6t4clocv3 24.68 24.74 24.80 T:aegis128 24.77 24.90 25.09 T:twine80n6t4clocv2 28.72 28.84 29.10 T:aes128n12t8clocv2 28.70 29.01 29.53 T:aes128n8t8clocv2 29.48 29.59 30.04 T:aes128n12t8clocv3 29.82 29.89 30.17 T:aes128otrsv2 30.01 30.16 30.80 T:aes128n8clocv1 30.05 30.20 31.02 T:aes128n12clocv1 30.09 30.23 30.47 T:aes128otrsv1 31.00 31.28 31.47 T:aes128otrsv3 31.66 31.74 32.02 T:aes128otrpv2 31.89 32.01 32.27 T:aes128otrpv1 32.08 32.30 32.63 T:aes128otrpv3 32.43 32.58 32.91 T:aes128otrcv3 33.80 33.90 34.23 T:aes128n8t8silcv2 33.88 33.95 34.22 T:aes128n12t8silcv2 34.32 34.40 34.46 T:aegis128l 34.78 35.04 35.31 T:aes128n12t8silcv3 35.94 36.09 36.39 T:aes128n12silcv1 35.82 36.10 36.43 T:aes128n8silcv1 36.12 36.22 36.34 T:aegis256 36.90 37.12 38.30 T:seakeyakv2 38.06 38.20 38.42 T:aes256otrsv2 38.59 38.77 39.04 T:aes256otrsv1 39.43 39.61 39.82 T:aes256otrsv3 39.80 39.88 40.05 T:aes256otrpv2 40.08 40.21 40.47 T:aesjambuv1 40.54 40.73 40.98 T:aes256otrpv3 40.70 40.85 41.16 T:aes256otrpv1 41.36 41.43 41.88 T:aes256otrcv3 43.20 43.39 44.77 T:tiaoxinv1 45.12 45.48 45.59 T:tiaoxinv2 47.27 47.48 47.84 T:norx6444v2 47.41 47.78 47.98 T:norx6444v3 47.66 48.05 48.35 T:ketjeminorv2 48.34 48.45 48.77 T:aezv5 48.32 48.57 48.80 T:aezv4 55.41 55.66 55.77 T:norx6444v1 55.62 55.84 56.33 T:deoxysi128v141 57.57 57.88 58.07 T:ketjesrv1 58.09 58.77 59.41 T:aes128gcmv1 59.88 60.01 60.62 T:oceankeyakv2 67.00 67.60 70.03 T:aes256gcmv1 61.77? 68.41? 71.47? T:aeadaes128ocbtaglen128v1 68.30 68.52 69.01 T:deoxysii128v141 68.45 68.63 69.03 T:ketjesrv2 68.15? 74.38? 76.82? T:aeadaes256ocbtaglen128v1 74.76 75.13 75.88 T:ketjemajorv2 76.59 76.72 77.16 T:riverkeyakv1 78.77 79.29 79.73 T:deoxysi256v141 93.38 93.49 94.13 T:proest256otrv1 98.98 99.35 99.66 T:present80n6t4silcv3 102.08 103.04 103.61 T:ketjejrv1 117.77 118.10 118.55 T:deoxysneq128128v13 117.82 118.18 118.50 T:deoxysneq128128v1 128.78 129.59 131.58 T:proest128otrv1 132.55 132.74 133.06 T:twine80n6clocv1 140.13 140.41 140.65 T:led80n6t4silcv3 149.04 149.43 149.79 T:lunarkeyakv2 149.69 150.31 151.66 T:aezv1 164.62 165.73 179.28 T:ketjejrv2 166.53 166.81 167.24 T:deoxyseq128128v13 175.58 175.82 176.11 T:deoxysneq256128v13 176.95 177.55 178.23 T:deoxysneq256128v1 179.27 179.44 180.13 T:deoxysii256v141 189.89 190.66 191.21 T:deoxyseq128128v1 202.35 202.98 203.91 T:aezv3 228.27 229.29 230.50 T:seakeyakv1 261.24 261.73 262.00 T:deoxyseq256128v13 282.30 283.02 283.23 T:deoxyseq256128v1 308.77 310.01 312.91 T:oceankeyakv1 1879.85? 1902.00? 2921.29? T:acorn128 1928.34 1929.87 1930.43 T:acorn128v3 1930.82 1935.66 1963.97 T:acorn128v2 5851.34 5853.38 5863.93 T:present80n6silcv1 5854.21 5860.99 5871.39 T:present80n6t4silcv2 6850.42 6851.55 6854.14 aes256gcmv1 6890.80 6902.27 6939.18 T:led80n6silcv1 6936.73 6968.74 6983.40 T:led80n6t4silcv2