VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20241022

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.84? 6.09? 6.99? T:morus1280256v2 2.92? 6.17? 7.11? T:morus1280256v1 6.16 6.20 6.28 T:morus1280128v2 7.17 7.17 7.23 T:morus1280128v1 8.21 8.23 8.24 T:norx6441v3 6.76? 8.24? 14.69? T:norx6441v2 8.31 8.34 8.36 T:norx6444v3 8.33 8.34 8.35 T:norx6444v2 4.47? 8.36? 9.11? T:morus640128v1 4.42? 8.37? 9.14? T:morus640128v2 8.92? 10.31? 17.53? T:norx6441v1 6.48? 10.45? 20.76? T:tiaoxinv1 10.64 10.67 10.72 T:norx6444v1 10.43? 12.52? 22.23? T:norx6461v2 -10.44? 13.42? 31.91? T:lunarkeyakv2 13.62? 15.03? 25.47? T:norx3261v3 13.06? 15.13? 26.15? T:norx6461v1 9.13? 16.18? 17.18? T:norx3241v2 9.16? 16.26? 17.25? T:norx3241v3 15.45? 16.39? 27.19? T:ascon96v1 15.63? 16.55? 27.45? T:ascon128av11 6.96? 17.54? 21.56? T:tiaoxinv2 9.74? 18.33? 20.15? T:lakekeyakv1 19.12 19.20 19.48 T:lakekeyakv2 18.54 19.29 19.60 T:oceankeyakv2 10.02? 19.39? 21.50? T:norx6461v3 19.40 19.41 19.42 T:aegis256 19.24 19.48 19.63 T:seakeyakv2 11.02? 19.51? 20.48? T:norx3241v1 11.03? 22.07? 24.87? T:aegis128l 13.62? 24.06? 25.37? T:norx3261v2 24.01? 25.31? 41.80? T:ascon128v1 24.02? 25.31? 41.80? T:ascon128v11 24.46? 26.07? 42.57? ascon128v12 15.97? 27.12? 28.07? ascon128av12 24.74? 28.50? 49.25? T:ketjeminorv2 16.35? 28.79? 30.38? T:norx3261v1 16.31? 29.84? 32.11? T:aegis128 28.55? 31.22? 52.48? T:aes128otrcv3 14.70? 32.90? 42.08? T:ketjemajorv2 35.46? 38.79? 65.08? T:aes128otrpv1 24.33? 41.98? 43.84? T:riverkeyakv2 30.96? 48.12? 94.22? T:seakeyakv1 49.92 51.40 52.02 T:aes256gcmv1 53.68 53.71 53.76 T:aes128n8t8clocv2 53.79 53.91 54.02 T:aes128n8clocv1 54.07 54.12 54.16 T:proest256otrv1 48.31? 57.72? 99.69? T:aeadaes128ocbtaglen128v1 54.83? 58.06? 96.11? T:aes128n8t8silcv2 55.23? 58.40? 96.11? T:aes128n12t8silcv2 34.52? 60.22? 63.47? T:aes128otrsv1 35.81? 60.56? 63.77? T:aes128otrsv3 16.68? 60.86? 85.85? T:oceankeyakv1 61.01 61.03 61.05 T:aes128n12t8silcv3 61.80 61.84 61.97 T:aes128otrpv2 36.32? 63.18? 66.44? T:aes128otrsv2 63.19 63.29 65.52 T:aes128n8silcv1 63.91 64.62 65.35 T:aes128gcmv1 37.36? 65.41? 69.03? T:aes256otrcv3 65.94 66.22 66.32 T:aes128otrpv3 39.81? 68.61? 71.69? T:deoxysi128v141 44.48? 77.62? 81.61? T:aes256otrpv3 46.21? 78.18? 82.80? T:deoxysi256v141 44.95? 78.39? 82.47? T:aes256otrsv3 73.88? 78.89? 135.31? T:aeadaes256ocbtaglen128v1 79.16 79.28 79.36 T:aes256otrsv1 45.72? 79.50? 83.63? T:aes256otrpv1 45.63? 79.56? 83.68? T:aes256otrpv2 47.27? 80.00? 82.74? T:aesjambuv1 81.17 81.19 81.23 T:aes256otrsv2 87.48 87.56 87.64 T:aes128n12clocv1 52.03? 87.77? 90.60? T:aes128n12t8clocv2 52.01? 87.88? 90.87? T:aes128n12t8clocv3 101.74 102.01 102.39 T:aes128n12silcv1 101.07? 107.86? 179.45? T:ketjesrv1 64.83? 110.02? 113.92? T:twine80n6t4clocv2 110.56 110.70 110.75 T:ketjesrv2 67.96? 115.02? 118.96? T:twine80n6t4clocv3 139.64 139.69 139.78 T:proest128otrv1 146.98 147.60 150.12 T:riverkeyakv1 140.42? 149.71? 244.72? T:ketjejrv1 89.21? 151.32? 157.13? T:deoxysii128v141 160.67 161.28 161.46 T:aezv4 176.95? 186.48? 307.03? T:aezv5 123.62? 205.52? 221.95? T:deoxysii256v141 229.94? 240.81? 393.96? T:deoxysneq128128v13 382.11 382.16 382.32 T:deoxysneq256128v1 375.76? 383.15? 482.59? T:present80n6t4silcv3 383.83 383.88 384.41 T:deoxysneq128128v1 421.02 421.14 421.26 T:ketjejrv2 480.89 481.92 482.26 T:deoxyseq128128v13 546.25? 574.65? 945.21? T:led80n6t4silcv3 374.08? 611.30? 630.87? T:deoxysneq256128v13 421.03? 710.09? 734.28? T:aezv3 432.62? 720.58? 742.71? T:twine80n6clocv1 597.88? 763.83? 783.76? T:aezv1 783.30 786.41 791.82 T:deoxyseq128128v1 733.08? 1220.66? 1265.36? T:deoxyseq256128v1 739.40? 1224.94? 1264.06? T:deoxyseq256128v13 3685.19 3694.15 3700.39 T:acorn128v3 3182.89? 5924.27? 6506.55? T:acorn128 3194.21? 6062.08? 6656.54? T:acorn128v2 12113.37 12124.49 12673.70 T:present80n6t4silcv2 12409.37 12422.04 12988.41 T:present80n6silcv1 13973.92 14025.68 14038.25 T:led80n6silcv1 14580.40? 23942.79? 23964.90? T:led80n6t4silcv2 43116.40? 43133.21? 74970.24? aes256gcmv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 6.22 6.26 6.28 T:morus1280128v2 2.97? 6.30? 7.21? T:morus1280256v1 2.99? 6.38? 7.31? T:morus1280256v2 6.67 6.67 6.74 T:morus1280128v1 6.78? 8.28? 14.76? T:norx6441v2 8.26 8.30 8.31 T:norx6441v3 8.29 8.33 8.37 T:norx6444v3 8.30 8.35 8.37 T:norx6444v2 4.47? 8.50? 9.30? T:morus640128v2 4.63? 8.64? 9.38? T:morus640128v1 8.77? 10.14? 17.66? T:norx6441v1 10.59 10.65 10.68 T:norx6444v1 7.82? 11.85? 22.93? T:tiaoxinv1 10.38? 12.59? 22.39? T:norx6461v2 -10.23? 12.93? 30.93? T:lunarkeyakv2 12.61? 14.58? 25.24? T:norx6461v1 13.62? 15.03? 25.48? T:norx3261v3 9.31? 16.22? 17.09? T:norx3241v2 9.19? 16.27? 17.25? T:norx3241v3 15.40? 16.32? 27.07? T:ascon96v1 15.53? 16.48? 27.32? T:ascon128av11 9.64? 17.84? 19.54? T:lakekeyakv1 18.41 18.47 18.62 T:lakekeyakv2 18.66 18.82 18.90 T:seakeyakv2 18.40 18.92 19.37 T:oceankeyakv2 7.79? 18.96? 23.05? T:tiaoxinv2 10.04? 19.42? 21.52? T:norx6461v3 19.53 19.56 19.60 T:aegis256 11.13? 19.71? 20.75? T:norx3241v1 10.90? 21.88? 24.69? T:aegis128l 13.63? 24.06? 25.47? T:norx3261v2 23.73? 24.99? 41.28? T:ascon128v1 23.70? 25.11? 41.29? T:ascon128v11 24.17? 25.48? 42.06? ascon128v12 15.91? 27.00? 27.95? ascon128av12 24.47? 28.06? 48.46? T:ketjeminorv2 16.46? 28.98? 30.58? T:norx3261v1 17.40? 29.58? 31.92? T:aegis128 28.35? 31.01? 52.20? T:aes128otrcv3 13.94? 31.66? 37.50? T:ketjemajorv2 35.76? 39.07? 65.70? T:aes128otrpv1 25.35? 42.73? 44.71? T:riverkeyakv2 30.98? 48.16? 94.23? T:seakeyakv1 50.96 51.44 53.24 T:aes256gcmv1 53.77 53.80 53.82 T:proest256otrv1 56.58 56.62 56.70 T:aes128n8t8clocv2 57.42 57.53 57.64 T:aes128n8clocv1 55.09? 58.10? 95.88? T:aes128n12t8silcv2 54.98? 58.12? 95.85? T:aes128n8t8silcv2 34.76? 60.67? 63.86? T:aes128otrsv1 60.74 60.89 60.99 T:aes128otrpv2 13.28? 61.01? 85.92? T:oceankeyakv1 62.25 62.27 62.31 T:aes128n12t8silcv3 35.98? 62.68? 65.94? T:aes128otrsv3 62.62 63.01 66.24 T:aes128n8silcv1 37.15? 65.07? 68.74? T:aes256otrcv3 64.74 65.07 65.62 T:aes128gcmv1 38.08? 66.13? 69.41? T:aes128otrsv2 67.55 67.67 67.75 T:aes128otrpv3 64.44? 76.45? 131.96? T:aeadaes128ocbtaglen128v1 44.85? 77.54? 81.44? T:deoxysi128v141 45.08? 78.57? 82.58? T:aes256otrpv3 45.14? 78.75? 82.91? T:aes256otrpv2 46.11? 80.32? 84.47? T:aes256otrpv1 46.20? 80.44? 84.54? T:aes256otrsv3 47.72? 80.76? 83.53? T:aesjambuv1 82.18 82.26 82.37 T:aes256otrsv1 84.36 84.46 84.55 T:aes256otrsv2 50.45? 89.17? 94.53? T:deoxysi256v141 57.68? 97.13? 100.30? T:aes128n12t8clocv2 58.08? 97.89? 101.09? T:aes128n12t8clocv3 100.68 100.80 100.89 T:aes128n12clocv1 101.55 101.85 102.02 T:aes128n12silcv1 100.32? 107.91? 182.00? T:aeadaes256ocbtaglen128v1 101.58? 108.43? 180.45? T:ketjesrv1 65.54? 111.25? 115.19? T:twine80n6t4clocv2 67.34? 114.01? 117.95? T:twine80n6t4clocv3 116.94 116.95 117.01 T:ketjesrv2 139.78 139.83 139.86 T:proest128otrv1 148.94 149.17 153.67 T:riverkeyakv1 89.93? 149.64? 155.15? T:deoxysii128v141 143.43? 151.26? 249.85? T:ketjejrv1 160.16 160.55 160.81 T:aezv4 176.69? 185.69? 306.69? T:aezv5 118.88? 204.70? 219.67? T:deoxysii256v141 298.52? 315.10? 514.12? T:deoxysneq128128v13 377.04? 385.89? 504.81? T:present80n6t4silcv3 427.18 428.95 429.34 T:ketjejrv2 481.28 481.86 483.13 T:deoxyseq128128v13 484.82 485.62 488.46 T:deoxysneq256128v1 499.68 500.63 504.94 T:deoxysneq128128v1 548.50? 577.57? 949.08? T:led80n6t4silcv3 425.13? 710.10? 739.31? T:aezv3 433.64? 723.08? 741.12? T:twine80n6clocv1 465.09? 763.85? 783.08? T:aezv1 471.42? 777.41? 801.22? T:deoxysneq256128v13 1000.95 1011.85 1013.86 T:deoxyseq128128v1 737.93? 1225.14? 1266.17? T:deoxyseq256128v13 930.96? 1552.17? 1603.94? T:deoxyseq256128v1 3648.74 3654.46 3658.51 T:acorn128v3 3090.79? 5902.46? 6493.29? T:acorn128v2 3166.30? 6012.40? 6594.92? T:acorn128 12111.87 12123.20 12678.33 T:present80n6t4silcv2 12409.38 12419.56 12979.56 T:present80n6silcv1 14032.46 14041.13 14051.98 T:led80n6silcv1 14610.80? 23958.80? 23983.11? T:led80n6t4silcv2 43122.65? 43143.00? 74976.08? aes256gcmv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 6.29 6.31 6.32 T:morus1280128v2 3.01? 6.32? 7.24? T:morus1280256v1 3.02? 6.38? 7.34? T:morus1280256v2 6.70 6.71 6.75 T:morus1280128v1 4.50? 8.52? 9.33? T:morus640128v2 7.04? 8.55? 15.19? T:norx6441v2 8.53 8.56 8.60 T:norx6441v3 8.58 8.59 8.63 T:norx6444v2 8.57 8.60 8.62 T:norx6444v3 4.63? 8.64? 9.42? T:morus640128v1 9.02? 10.43? 18.14? T:norx6441v1 10.89 10.95 10.96 T:norx6444v1 7.85? 11.89? 22.93? T:tiaoxinv1 10.64? 12.88? 22.84? T:norx6461v2 -10.60? 13.49? 31.58? T:lunarkeyakv2 12.88? 14.83? 25.69? T:norx6461v1 13.62? 15.04? 25.48? T:norx3261v3 9.23? 16.22? 17.20? T:norx3241v2 9.19? 16.27? 17.25? T:norx3241v3 15.40? 16.34? 27.08? T:ascon96v1 15.54? 16.48? 27.32? T:ascon128av11 9.96? 18.45? 20.00? T:lakekeyakv1 7.82? 18.96? 23.04? T:tiaoxinv2 18.95 18.99 19.02 T:lakekeyakv2 18.77 19.22 19.71 T:oceankeyakv2 19.15 19.22 19.27 T:seakeyakv2 11.22? 19.72? 20.83? T:norx3241v1 19.79 19.82 19.86 T:aegis256 10.31? 19.90? 22.07? T:norx6461v3 11.20? 22.38? 25.19? T:aegis128l 13.63? 24.06? 25.47? T:norx3261v2 23.72? 25.00? 41.28? T:ascon128v1 23.72? 25.02? 41.29? T:ascon128v11 24.17? 25.47? 42.07? ascon128v12 15.91? 27.02? 27.97? ascon128av12 24.71? 28.32? 48.91? T:ketjeminorv2 16.53? 29.02? 30.63? T:norx3261v1 16.18? 29.58? 31.91? T:aegis128 28.34? 31.03? 52.20? T:aes128otrcv3 14.19? 32.06? 37.90? T:ketjemajorv2 36.00? 39.32? 66.15? T:aes128otrpv1 27.74? 43.16? 45.25? T:riverkeyakv2 31.22? 48.19? 94.50? T:seakeyakv1 50.61 51.22 51.62 T:aes256gcmv1 53.75 53.80 53.80 T:proest256otrv1 56.59 56.65 56.69 T:aes128n8t8clocv2 57.42 57.54 57.63 T:aes128n8clocv1 55.11? 58.10? 95.88? T:aes128n12t8silcv2 54.96? 58.13? 95.87? T:aes128n8t8silcv2 36.62? 61.07? 64.35? T:aes128otrsv1 61.27 61.30 61.36 T:aes128otrpv2 13.33? 61.34? 83.19? T:oceankeyakv1 62.26 62.28 62.30 T:aes128n12t8silcv3 62.63 62.67 62.70 T:aes128n8silcv1 36.25? 63.15? 66.39? T:aes128otrsv3 64.72 64.95 65.24 T:aes128gcmv1 37.17? 65.06? 68.75? T:aes256otrcv3 38.32? 66.56? 69.83? T:aes128otrsv2 67.99 68.05 68.17 T:aes128otrpv3 45.15? 77.97? 81.63? T:deoxysi128v141 67.67? 78.06? 133.12? T:aeadaes128ocbtaglen128v1 45.36? 79.02? 83.00? T:aes256otrpv3 45.38? 79.20? 83.30? T:aes256otrpv2 46.35? 80.75? 84.91? T:aes256otrpv1 47.75? 80.78? 83.55? T:aesjambuv1 46.43? 80.88? 85.02? T:aes256otrsv3 82.61 82.67 82.78 T:aes256otrsv1 84.68 84.83 84.94 T:aes256otrsv2 50.68? 89.57? 95.10? T:deoxysi256v141 57.67? 97.17? 100.34? T:aes128n12t8clocv2 59.56? 97.92? 101.09? T:aes128n12t8clocv3 100.70 100.75 100.80 T:aes128n12clocv1 101.49 101.82 101.90 T:aes128n12silcv1 94.68? 107.45? 182.74? T:aeadaes256ocbtaglen128v1 101.55? 108.66? 180.89? T:ketjesrv1 67.22? 111.26? 115.22? T:twine80n6t4clocv2 67.36? 114.01? 117.93? T:twine80n6t4clocv3 117.13 117.22 117.24 T:ketjesrv2 139.77 139.83 139.91 T:proest128otrv1 149.45 150.05 156.28 T:riverkeyakv1 88.30? 150.06? 155.57? T:deoxysii128v141 143.68? 151.53? 250.29? T:ketjejrv1 159.90 160.23 160.64 T:aezv4 176.41? 186.05? 306.33? T:aezv5 119.26? 205.18? 224.91? T:deoxysii256v141 298.64? 315.05? 514.46? T:deoxysneq128128v13 377.05? 385.97? 504.79? T:present80n6t4silcv3 427.45 427.51 427.72 T:ketjejrv2 466.01? 473.84? 2014.44? aes256gcmv1 481.31 482.12 483.45 T:deoxyseq128128v13 484.85 485.61 488.30 T:deoxysneq256128v1 499.64 500.65 504.61 T:deoxysneq128128v1 548.53? 576.89? 949.06? T:led80n6t4silcv3 424.25? 709.64? 738.58? T:aezv3 434.22? 723.00? 743.17? T:twine80n6clocv1 462.63? 763.31? 782.98? T:aezv1 471.62? 777.94? 801.72? T:deoxysneq256128v13 1000.95 1011.69 1015.63 T:deoxyseq128128v1 738.37? 1230.17? 1270.40? T:deoxyseq256128v13 930.82? 1552.20? 1605.63? T:deoxyseq256128v1 3648.92 3655.59 3660.43 T:acorn128v3 3090.32? 5902.14? 6494.50? T:acorn128v2 3164.28? 6009.91? 6597.40? T:acorn128 12112.44 12124.08 12675.23 T:present80n6t4silcv2 12409.66 12420.83 12989.40 T:present80n6silcv1 14007.43 14022.00 14036.83 T:led80n6silcv1 14588.95? 23949.39? 23970.06? T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 3.36? 6.28? 6.82? T:morus1280256v1 3.34? 6.29? 6.88? T:morus1280256v2 6.26 6.29 6.31 T:morus1280128v2 6.47 6.50 6.51 T:morus1280128v1 4.39? 7.82? 8.32? T:morus640128v2 4.41? 7.82? 8.27? T:morus640128v1 7.18? 8.15? 8.17? T:norx6441v2 8.15 8.17 8.18 T:norx6441v3 8.20 8.21 8.23 T:norx6444v3 8.19 8.21 8.24 T:norx6444v2 7.77? 9.93? 18.04? T:tiaoxinv1 9.08? 10.12? 16.99? T:norx6441v1 10.25 10.25 10.29 T:norx6444v1 11.08? 12.55? 21.51? T:norx6461v2 13.32? 14.73? 24.93? T:norx6461v1 13.92? 14.97? 25.01? T:norx3261v3 15.70 15.80 15.85 T:seakeyakv2 15.78 16.04 16.15 T:oceankeyakv2 9.34? 16.10? 16.53? T:norx3241v2 9.38? 16.16? 16.90? T:norx3241v3 15.55? 16.39? 27.09? T:ascon96v1 15.63? 16.48? 27.21? T:ascon128av11 16.56 16.61 16.78 T:lakekeyakv2 8.67? 17.43? 19.63? T:tiaoxinv2 10.00? 17.99? 19.25? T:lakekeyakv1 2.24? 18.56? 28.00? T:lunarkeyakv2 18.75 18.76 18.79 T:aegis256 10.59? 19.21? 20.62? T:norx6461v3 11.29? 19.43? 20.28? T:norx3241v1 11.60? 21.19? 22.86? T:aegis128l 13.98? 23.95? 25.00? T:norx3261v2 23.82? 24.99? 41.18? T:ascon128v11 23.81? 25.11? 41.18? T:ascon128v1 24.36? 25.55? 42.08? ascon128v12 23.15? 26.09? 42.89? T:ketjeminorv2 15.97? 26.94? 27.81? ascon128av12 16.67? 28.72? 29.99? T:norx3261v1 14.71? 28.97? 33.60? T:ketjemajorv2 17.21? 30.03? 31.54? T:aegis128 17.55? 30.09? 31.34? T:riverkeyakv2 28.91? 31.13? 51.89? T:aes128otrcv3 28.50? 32.46? 55.66? T:aes256gcmv1 35.98? 38.90? 63.75? T:aes128otrpv1 38.96? 39.01? 67.29? T:aes128n12t8clocv3 40.07 40.14 40.16 T:aes128n8t8clocv2 40.27 40.34 40.41 T:aes128n8clocv1 42.55? 42.61? 75.64? T:aes256otrsv3 41.01? 43.16? 71.38? T:aes128n8t8silcv2 42.58 43.18 44.60 T:aes128gcmv1 41.22 43.31 43.45 T:aes128n12t8silcv2 45.62 45.65 45.71 T:aes128n12t8silcv3 47.30 47.35 47.37 T:aes128n8silcv1 31.86? 54.44? 56.63? T:aes128otrsv2 54.42 54.46 54.50 T:proest256otrv1 31.96? 54.68? 56.91? T:aes128otrsv1 32.30? 55.28? 57.59? T:aes128otrsv3 55.67? 57.91? 96.87? T:aeadaes128ocbtaglen128v1 25.02? 60.08? 72.65? T:oceankeyakv1 61.35 61.37 61.48 T:aes128otrpv2 61.21 61.43 61.47 T:aes128otrpv3 37.90? 65.22? 68.23? T:aes256otrcv3 65.23 65.31 65.47 T:aes128n12clocv1 38.98? 65.35? 67.26? T:aes128n12t8clocv2 40.08? 68.13? 70.69? T:deoxysi128v141 69.90 70.04 70.55 T:aes256otrsv1 71.10 71.14 71.17 T:aes256otrsv2 76.53 76.64 76.88 T:aes128n12silcv1 45.50? 77.54? 80.58? T:aes256otrpv3 71.90? 78.15? 131.49? T:aeadaes256ocbtaglen128v1 45.99? 78.46? 81.48? T:aes256otrpv2 46.07? 78.46? 81.48? T:aes256otrpv1 45.35? 78.53? 82.27? T:deoxysi256v141 47.90? 79.51? 81.86? T:aesjambuv1 38.74? 84.73? 84.93? T:seakeyakv1 98.52? 103.90? 171.67? T:ketjesrv1 106.87 107.25 107.28 T:ketjesrv2 65.06? 107.89? 111.10? T:twine80n6t4clocv2 66.62? 112.77? 116.65? T:deoxysii128v141 68.20? 114.39? 117.69? T:twine80n6t4clocv3 132.36? 138.76? 228.44? T:ketjejrv1 139.82 139.87 140.19 T:proest128otrv1 83.35? 141.46? 141.58? T:riverkeyakv1 142.26? 144.53? 233.18? T:aezv4 144.03? 150.46? 246.22? T:aezv5 91.57? 153.63? 159.90? T:deoxysii256v141 229.73? 230.66? 384.04? T:deoxysneq128128v1 229.09 239.31 240.00 T:deoxysneq128128v13 320.75 321.18 338.12 T:aezv3 322.13? 322.87? 551.99? T:twine80n6clocv1 348.45 350.24 351.54 T:deoxyseq128128v1 359.59 360.08 360.88 T:deoxyseq128128v13 375.72? 383.21? 481.26? T:present80n6t4silcv3 382.78? 383.62? 628.31? T:deoxysneq256128v1 246.13? 408.02? 408.11? T:ketjejrv2 505.75 507.26 521.53 T:aezv1 548.46 573.62 576.54 T:led80n6t4silcv3 548.32 574.89 577.64 T:deoxyseq256128v13 615.18 620.12 641.16 T:deoxysneq256128v13 551.01? 916.85? 946.44? T:deoxyseq256128v1 3341.22? 3707.64? 6304.34? T:acorn128v3 3713.91? 3720.35? 6321.13? T:acorn128 3380.76? 3750.76? 3757.15? T:acorn128v2 10461.34? 10487.77? 17484.15? T:led80n6t4silcv2 10498.73 10924.96 10942.79 T:led80n6silcv1 9511.77? 15627.98? 15633.00? T:present80n6t4silcv2 9328.36? 16008.16? 16019.44? T:present80n6silcv1 22018.41 23176.34 23181.64 aes256gcmv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 6.17 6.20 6.23 T:morus1280128v1 6.34 6.36 6.39 T:morus1280128v2 3.41? 6.36? 6.92? T:morus1280256v1 3.44? 6.46? 7.05? T:morus1280256v2 4.41? 7.88? 8.38? T:morus640128v2 4.57? 8.13? 8.67? T:morus640128v1 7.17? 8.19? 8.22? T:norx6441v2 8.17 8.20 8.22 T:norx6441v3 8.19 8.20 8.24 T:norx6444v3 8.20 8.21 8.24 T:norx6444v2 9.10? 10.06? 17.07? T:norx6441v1 10.24 10.27 10.31 T:norx6444v1 8.45? 10.59? 19.26? T:tiaoxinv1 11.08? 12.55? 21.60? T:norx6461v2 13.12? 14.52? 24.55? T:norx6461v1 13.93? 14.98? 25.05? T:norx3261v3 15.59 15.67 15.79 T:seakeyakv2 15.55 15.67 15.85 T:oceankeyakv2 9.57? 16.08? 16.78? T:norx3241v2 9.36? 16.17? 16.88? T:norx3241v3 16.21 16.27 16.37 T:lakekeyakv2 15.53? 16.67? 27.03? T:ascon96v1 15.56? 16.68? 27.10? T:ascon128av11 8.52? 17.21? 19.51? T:tiaoxinv2 9.64? 17.24? 18.47? T:lakekeyakv1 2.58? 18.39? 27.63? T:lunarkeyakv2 18.82 18.84 18.86 T:aegis256 10.81? 19.27? 20.69? T:norx6461v3 11.31? 19.51? 20.39? T:norx3241v1 11.52? 21.06? 22.74? T:aegis128l 14.53? 23.96? 25.19? T:norx3261v2 23.75? 24.93? 41.06? T:ascon128v11 23.74? 25.17? 41.05? T:ascon128v1 24.19? 25.53? 41.83? ascon128v12 23.01? 25.95? 42.63? T:ketjeminorv2 15.90? 26.82? 27.67? ascon128av12 14.33? 28.08? 31.32? T:ketjemajorv2 16.69? 28.77? 30.03? T:norx3261v1 17.09? 29.83? 31.34? T:aegis128 18.08? 30.45? 31.70? T:riverkeyakv2 28.83? 31.00? 51.71? T:aes128otrcv3 27.93? 32.51? 55.51? T:aes256gcmv1 36.11? 38.56? 64.05? T:aes128otrpv1 41.56 41.58 41.63 T:aes128n8t8clocv2 42.00? 42.04? 72.39? T:aes128n12t8clocv3 42.10 42.17 42.21 T:aes128n8clocv1 41.06? 43.14? 71.27? T:aes128n8t8silcv2 43.12? 43.18? 76.70? T:aes256otrsv3 42.93 43.25 43.37 T:aes128gcmv1 41.20 43.26 43.38 T:aes128n12t8silcv2 46.22 46.23 46.27 T:aes128n12t8silcv3 47.01 47.03 47.06 T:aes128n8silcv1 54.30 54.32 54.33 T:proest256otrv1 33.07? 54.90? 57.17? T:aes128otrsv1 34.25? 55.93? 58.29? T:aes128otrsv2 32.90? 56.34? 58.65? T:aes128otrsv3 25.10? 60.10? 72.63? T:oceankeyakv1 60.75 60.81 60.92 T:aes128otrpv2 61.85 62.10 62.25 T:aes128otrpv3 37.79? 65.01? 68.05? T:aes256otrcv3 60.83? 66.18? 113.10? T:aeadaes128ocbtaglen128v1 41.82? 70.03? 72.05? T:aes128n12t8clocv2 71.35 71.43 72.05 T:aes256otrsv1 71.90 72.10 72.14 T:aes128n12clocv1 42.55? 72.60? 75.48? T:deoxysi128v141 72.68 72.73 72.76 T:aes256otrsv2 76.49 76.61 76.67 T:aes128n12silcv1 45.74? 78.01? 81.05? T:aes256otrpv2 45.79? 78.09? 81.11? T:aes256otrpv3 46.21? 78.80? 81.90? T:aes256otrpv1 47.49? 79.77? 82.13? T:aesjambuv1 48.21? 83.49? 87.49? T:deoxysi256v141 38.96? 84.90? 85.09? T:seakeyakv1 86.74? 91.47? 156.20? T:aeadaes256ocbtaglen128v1 98.81? 104.29? 172.20? T:ketjesrv1 64.58? 108.51? 111.81? T:twine80n6t4clocv2 110.34 110.39 110.39 T:ketjesrv2 67.65? 111.98? 115.86? T:deoxysii128v141 68.40? 113.89? 117.19? T:twine80n6t4clocv3 139.87 139.90 140.18 T:proest128otrv1 133.87? 140.99? 231.01? T:ketjejrv1 83.89? 142.46? 142.50? T:riverkeyakv1 142.02? 142.53? 232.98? T:aezv4 143.87? 152.30? 246.01? T:aezv5 89.68? 153.39? 160.37? T:deoxysii256v141 264.51? 266.41? 441.92? T:deoxysneq128128v1 264.04 276.04 277.69 T:deoxysneq128128v13 320.76 321.23 339.68 T:aezv3 322.89? 323.95? 553.08? T:twine80n6clocv1 360.20 360.24 361.74 T:deoxyseq128128v13 379.65? 384.88? 443.31? T:present80n6t4silcv3 245.45? 412.09? 412.16? T:ketjejrv2 413.83 417.06 418.84 T:deoxyseq128128v1 434.19? 436.86? 712.67? T:deoxysneq256128v1 504.87 505.16 522.47 T:aezv1 548.30 574.29 577.48 T:deoxyseq256128v13 549.57 575.31 577.84 T:led80n6t4silcv3 697.50 701.19 721.41 T:deoxysneq256128v13 650.86? 1080.73? 1116.17? T:deoxyseq256128v1 3286.49? 3654.30? 6213.80? T:acorn128v3 3333.97? 3702.33? 3708.74? T:acorn128v2 3745.27? 3750.92? 6372.59? T:acorn128 10488.86? 10501.41? 17499.59? T:led80n6t4silcv2 10503.09 10937.06 10944.65 T:led80n6silcv1 9508.62? 15625.47? 15637.53? T:present80n6t4silcv2 9331.30? 16010.87? 16026.41? T:present80n6silcv1 22021.61 23175.50 23183.12 aes256gcmv1

Cycles/byte for long+long forgery 25% 50% 75% aead 6.20 6.20 6.23 T:morus1280128v1 6.37 6.38 6.40 T:morus1280128v2 3.43? 6.39? 6.94? T:morus1280256v1 3.47? 6.48? 7.06? T:morus1280256v2 4.43? 7.90? 8.40? T:morus640128v2 4.60? 8.15? 8.64? T:morus640128v1 8.31 8.32 8.35 T:norx6441v3 7.30? 8.32? 8.34? T:norx6441v2 8.32 8.35 8.40 T:norx6444v3 8.34 8.36 8.67 T:norx6444v2 9.21? 10.19? 17.29? T:norx6441v1 10.40 10.42 10.43 T:norx6444v1 8.56? 10.94? 19.16? T:tiaoxinv1 11.20? 12.72? 21.83? T:norx6461v2 13.25? 14.64? 24.75? T:norx6461v1 13.93? 14.98? 25.01? T:norx3261v3 15.59 15.82 15.95 T:oceankeyakv2 15.81 15.95 16.01 T:seakeyakv2 9.38? 16.10? 16.82? T:norx3241v2 9.38? 16.16? 16.90? T:norx3241v3 15.54? 16.37? 27.04? T:ascon96v1 16.45 16.47 16.50 T:lakekeyakv2 15.56? 16.66? 27.09? T:ascon128av11 8.55? 17.22? 19.30? T:tiaoxinv2 9.74? 17.51? 18.71? T:lakekeyakv1 4.67? 18.60? 27.56? T:lunarkeyakv2 18.94 18.97 19.01 T:aegis256 11.63? 19.52? 20.43? T:norx3241v1 11.01? 19.53? 21.14? T:norx6461v3 11.68? 21.30? 22.97? T:aegis128l 13.93? 23.96? 25.01? T:norx3261v2 23.76? 24.99? 41.07? T:ascon128v11 23.75? 25.15? 41.05? T:ascon128v1 23.13? 25.38? 42.86? T:ketjeminorv2 24.21? 25.39? 41.84? ascon128v12 15.88? 26.82? 27.67? ascon128av12 14.46? 28.30? 31.53? T:ketjemajorv2 16.96? 28.80? 30.08? T:norx3261v1 17.11? 29.86? 31.40? T:aegis128 18.14? 30.68? 31.98? T:riverkeyakv2 28.84? 31.97? 51.71? T:aes128otrcv3 28.40? 32.57? 55.45? T:aes256gcmv1 36.28? 38.70? 64.31? T:aes128otrpv1 41.53 41.59 41.61 T:aes128n8t8clocv2 41.99? 42.05? 72.38? T:aes128n12t8clocv3 42.09 42.16 42.22 T:aes128n8clocv1 41.06? 43.15? 71.27? T:aes128n8t8silcv2 41.16 43.24 43.27 T:aes128n12t8silcv2 43.03 43.26 43.49 T:aes128gcmv1 43.26? 43.30? 76.92? T:aes256otrsv3 46.22 46.24 46.26 T:aes128n12t8silcv3 47.00 47.01 47.04 T:aes128n8silcv1 54.29 54.31 54.32 T:proest256otrv1 32.22? 55.13? 57.41? T:aes128otrsv1 32.85? 56.16? 58.40? T:aes128otrsv2 33.05? 56.55? 58.87? T:aes128otrsv3 25.23? 60.28? 72.85? T:oceankeyakv1 61.01 61.05 61.09 T:aes128otrpv2 62.05 62.36 62.56 T:aes128otrpv3 39.07? 65.02? 68.05? T:aes256otrcv3 61.12? 66.60? 110.01? T:aeadaes128ocbtaglen128v1 42.70? 70.05? 72.07? T:aes128n12t8clocv2 71.56 71.64 71.79 T:aes256otrsv1 71.85 72.03 72.15 T:aes128n12clocv1 42.68? 72.82? 75.67? T:deoxysi128v141 72.94 72.96 73.15 T:aes256otrsv2 76.41 76.56 76.64 T:aes128n12silcv1 45.88? 78.21? 81.25? T:aes256otrpv2 45.91? 78.31? 81.35? T:aes256otrpv3 47.11? 79.01? 82.09? T:aes256otrpv1 47.51? 79.77? 82.13? T:aesjambuv1 48.28? 83.67? 87.81? T:deoxysi256v141 39.15? 84.97? 85.18? T:seakeyakv1 84.06? 96.08? 154.87? T:aeadaes256ocbtaglen128v1 98.92? 104.60? 172.41? T:ketjesrv1 64.60? 108.52? 111.77? T:twine80n6t4clocv2 110.50 110.52 110.57 T:ketjesrv2 66.31? 112.19? 116.04? T:deoxysii128v141 67.90? 113.89? 117.19? T:twine80n6t4clocv3 139.88 139.90 140.21 T:proest128otrv1 134.00? 141.11? 231.23? T:ketjejrv1 141.79? 141.87? 232.60? T:aezv4 84.17? 142.68? 142.74? T:riverkeyakv1 143.67? 151.68? 245.73? T:aezv5 90.07? 153.67? 159.90? T:deoxysii256v141 264.27? 265.91? 441.96? T:deoxysneq128128v1 264.17 276.21 277.65 T:deoxysneq128128v13 320.70 320.94 338.35 T:aezv3 322.88? 323.78? 553.22? T:twine80n6clocv1 359.71 359.77 360.90 T:deoxyseq128128v13 379.65? 384.44? 443.04? T:present80n6t4silcv3 245.88? 411.27? 412.39? T:ketjejrv2 413.79 417.58 418.93 T:deoxyseq128128v1 434.20? 437.71? 712.67? T:deoxysneq256128v1 504.56 505.27 522.28 T:aezv1 548.37 574.31 577.29 T:deoxyseq256128v13 549.58 575.22 578.18 T:led80n6t4silcv3 697.68 701.36 723.67 T:deoxysneq256128v13 693.86? 956.78? 958.68? aes256gcmv1 649.58? 1080.72? 1114.90? T:deoxyseq256128v1 3287.54? 3655.54? 6216.89? T:acorn128v3 3334.88? 3704.36? 3707.60? T:acorn128v2 3745.58? 3750.96? 6368.80? T:acorn128 10479.08? 10492.00? 17502.45? T:led80n6t4silcv2 10499.03 10932.40 10941.12 T:led80n6silcv1 9505.49? 15624.90? 15633.60? T:present80n6t4silcv2 9336.05? 16008.73? 16022.07? T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 5.74 5.77 5.79 T:morus1280128v1 6.33 6.34 6.37 T:morus1280128v2 3.24? 6.38? 7.29? T:morus1280256v1 3.10? 6.49? 7.41? T:morus1280256v2 3.82? 7.25? 7.95? T:morus640128v1 3.79? 7.27? 8.04? T:morus640128v2 6.64? 8.08? 14.37? T:norx6441v2 8.07 8.08 8.10 T:norx6444v2 8.04 8.08 8.10 T:norx6441v3 8.07 8.08 8.11 T:norx6444v3 5.46? 9.34? 18.91? T:tiaoxinv1 9.90 9.90 9.90 T:norx6444v1 8.60? 9.95? 17.27? T:norx6441v1 11.07 11.53 11.68 T:oceankeyakv2 -11.09? 11.54? 29.90? T:lunarkeyakv2 10.39? 12.48? 22.09? T:norx6461v2 13.54 13.92 14.11 T:aes256gcmv1 12.15? 14.08? 24.48? T:norx6461v1 14.11 14.20 14.24 T:lakekeyakv2 14.28 14.37 14.44 T:seakeyakv2 13.51? 14.91? 25.25? T:norx3261v3 8.26? 15.95? 17.69? T:lakekeyakv1 9.03? 15.97? 16.91? T:norx3241v2 9.03? 16.06? 17.05? T:norx3241v3 15.38? 16.39? 27.27? T:ascon96v1 15.38? 16.39? 27.28? T:ascon128av11 6.84? 17.34? 21.27? T:tiaoxinv2 18.11 18.14 18.15 T:aegis256 9.88? 19.09? 21.14? T:norx6461v3 10.94? 19.25? 20.31? T:norx3241v1 9.94? 20.26? 22.99? T:aegis128l 20.87 21.06 21.39 T:aes128gcmv1 19.23? 22.46? 39.11? T:ketjeminorv2 13.46? 23.83? 25.24? T:norx3261v2 10.25? 24.50? 29.58? T:ketjemajorv2 23.35? 24.66? 40.84? T:ascon128v11 23.35? 24.69? 40.85? T:ascon128v1 23.95? 25.30? 41.86? ascon128v12 26.44 26.49 26.56 T:aes128n8t8clocv2 26.65 26.73 26.86 T:aes128n8clocv1 15.65? 26.75? 27.78? ascon128av12 15.40? 27.59? 29.31? T:riverkeyakv2 26.43? 28.35? 47.42? T:aes128n12t8silcv2 26.46? 28.43? 47.28? T:aes128n8t8silcv2 16.22? 28.56? 30.12? T:norx3261v1 30.14 30.16 30.17 T:aes128n12t8silcv3 16.50? 30.18? 32.49? T:aegis128 27.66? 30.98? 52.71? T:aes128otrcv3 31.18 31.28 31.33 T:aes128n8silcv1 34.69? 38.11? 64.24? T:aes128otrpv1 25.16? 42.89? 44.57? T:aes128n12t8clocv3 25.22? 42.92? 44.57? T:aes128n12t8clocv2 42.96 43.00 43.03 T:aes128n12clocv1 25.58? 45.68? 48.91? T:aes128otrsv2 34.62? 47.17? 87.85? T:seakeyakv1 27.64? 49.15? 52.26? T:aes128otrsv1 28.06? 49.88? 53.22? T:aes128otrsv3 50.97 51.24 51.46 T:aes128n12silcv1 54.76 54.80 54.82 T:proest256otrv1 56.62 56.69 56.70 T:aes128otrpv3 19.38? 59.25? 76.92? T:oceankeyakv1 60.45 60.55 60.64 T:aes256otrsv1 60.88 60.88 60.92 T:aes128otrpv2 60.99 61.02 61.04 T:aes256otrsv2 47.80? 62.04? 97.85? T:aeadaes128ocbtaglen128v1 38.09? 65.01? 69.46? T:aes256otrcv3 37.72? 66.86? 70.92? T:aes256otrsv3 39.21? 67.61? 70.66? T:deoxysi128v141 43.36? 74.28? 77.62? T:deoxysii128v141 44.11? 77.38? 81.67? T:aes256otrpv3 44.14? 77.38? 81.68? T:aes256otrpv1 44.11? 77.40? 81.72? T:aes256otrpv2 44.84? 78.88? 83.49? T:deoxysi256v141 47.75? 79.01? 81.70? T:aesjambuv1 69.37? 79.15? 133.49? T:aeadaes256ocbtaglen128v1 93.49? 100.01? 166.53? T:ketjesrv1 57.31? 101.42? 107.42? T:deoxysii256v141 103.66 103.76 103.82 T:ketjesrv2 62.49? 105.75? 109.38? T:twine80n6t4clocv2 109.24? 113.55? 185.78? T:aezv5 68.14? 113.77? 117.45? T:twine80n6t4clocv3 123.08 123.15 123.18 T:aezv4 122.45? 129.43? 213.96? T:ketjejrv1 135.69 135.92 135.98 T:riverkeyakv1 139.95 140.06 140.73 T:proest128otrv1 238.17 238.18 238.59 T:deoxyseq128128v13 228.24? 240.28? 393.30? T:deoxysneq128128v13 151.47? 245.66? 251.95? T:aezv1 213.45? 355.27? 365.96? T:twine80n6clocv1 215.71? 362.42? 370.73? T:aezv3 373.95? 381.38? 480.52? T:present80n6t4silcv3 382.87 382.89 382.91 T:deoxysneq256128v1 382.83 383.30 384.74 T:deoxyseq128128v1 383.96 383.98 384.17 T:deoxysneq128128v1 395.10 395.12 395.14 T:ketjejrv2 546.23? 574.50? 945.14? T:led80n6t4silcv3 362.47? 611.93? 635.06? T:deoxyseq256128v1 363.89? 612.00? 633.31? T:deoxyseq256128v13 371.92? 612.51? 631.12? T:deoxysneq256128v13 476.35? 2020.93? 2024.79? aes256gcmv1 3136.59? 3149.76? 6558.58? T:acorn128 3716.74? 3727.43? 6549.21? T:acorn128v3 6335.71 6337.65 6341.21 T:present80n6t4silcv2 6491.46? 6496.67? 10718.18? T:present80n6silcv1 3134.08? 6548.63? 6561.43? T:acorn128v2 7283.74 7323.22 7337.06 T:led80n6silcv1 11688.19 11731.35 12004.88 T:led80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 5.63 5.67 5.69 T:morus1280128v1 3.06? 6.40? 7.36? T:morus1280256v1 6.40 6.42 6.45 T:morus1280128v2 3.09? 6.56? 7.52? T:morus1280256v2 3.71? 7.23? 8.02? T:morus640128v2 3.99? 7.62? 8.35? T:morus640128v1 8.05 8.08 8.12 T:norx6441v3 8.05 8.08 8.11 T:norx6444v3 6.61? 8.09? 14.43? T:norx6441v2 8.06 8.09 8.10 T:norx6444v2 5.49? 8.65? 19.02? T:tiaoxinv1 9.89 9.91 9.93 T:norx6444v1 8.53? 9.95? 17.32? T:norx6441v1 -10.56? 11.59? 29.32? T:lunarkeyakv2 11.15 11.62 11.82 T:oceankeyakv2 10.36? 12.51? 22.15? T:norx6461v2 13.42 13.62 13.87 T:aes256gcmv1 12.10? 14.09? 24.53? T:norx6461v1 14.09 14.16 14.34 T:lakekeyakv2 14.28 14.33 14.40 T:seakeyakv2 13.50? 14.90? 25.25? T:norx3261v3 5.68? 15.47? 19.43? T:tiaoxinv2 9.28? 15.97? 16.85? T:norx3241v2 8.28? 16.03? 17.76? T:lakekeyakv1 9.05? 16.04? 17.02? T:norx3241v3 15.30? 16.33? 27.15? T:ascon128av11 15.41? 16.40? 27.28? T:ascon96v1 18.09 18.11 18.14 T:aegis256 9.87? 19.10? 21.15? T:norx6461v3 11.00? 19.30? 20.37? T:norx3241v1 9.95? 20.30? 23.05? T:aegis128l 20.69 21.26 21.69 T:aes128gcmv1 19.24? 22.44? 39.11? T:ketjeminorv2 13.46? 23.85? 25.22? T:norx3261v2 10.24? 24.50? 29.58? T:ketjemajorv2 23.50? 24.84? 41.10? T:ascon128v11 23.52? 24.84? 41.09? T:ascon128v1 23.94? 25.37? 41.86? ascon128v12 26.46 26.51 26.56 T:aes128n8t8clocv2 15.59? 26.64? 27.64? ascon128av12 26.65 26.73 26.86 T:aes128n8clocv1 15.47? 27.61? 29.38? T:riverkeyakv2 26.43? 28.35? 47.41? T:aes128n12t8silcv2 26.45? 28.43? 47.28? T:aes128n8t8silcv2 16.24? 28.58? 30.17? T:norx3261v1 16.43? 30.04? 32.39? T:aegis128 30.14 30.16 30.17 T:aes128n12t8silcv3 27.75? 31.03? 52.78? T:aes128otrcv3 31.25 31.27 31.30 T:aes128n8silcv1 34.67? 38.05? 64.27? T:aes128otrpv1 25.18? 42.92? 44.59? T:aes128n12t8clocv3 25.21? 42.94? 44.59? T:aes128n12t8clocv2 42.98 43.01 43.07 T:aes128n12clocv1 34.68? 45.33? 87.85? T:seakeyakv1 25.58? 45.67? 48.84? T:aes128otrsv2 27.61? 49.12? 52.22? T:aes128otrsv1 29.60? 49.92? 53.20? T:aes128otrsv3 50.92 51.14 51.46 T:aes128n12silcv1 54.80 54.81 54.82 T:proest256otrv1 56.37 56.65 56.76 T:aes128otrpv3 19.38? 59.16? 76.85? T:oceankeyakv1 60.39 60.52 60.67 T:aes256otrsv1 60.86 60.91 61.01 T:aes128otrpv2 60.97 61.01 61.23 T:aes256otrsv2 47.18? 63.51? 98.61? T:aeadaes128ocbtaglen128v1 36.43? 64.99? 69.39? T:aes256otrcv3 37.72? 66.88? 70.94? T:aes256otrsv3 39.17? 67.62? 70.69? T:deoxysi128v141 43.45? 74.32? 77.56? T:deoxysii128v141 44.09? 77.38? 81.68? T:aes256otrpv1 45.82? 77.39? 81.69? T:aes256otrpv3 44.14? 77.39? 81.69? T:aes256otrpv2 44.08? 77.79? 82.40? T:deoxysi256v141 46.65? 79.00? 81.71? T:aesjambuv1 66.46? 79.61? 134.63? T:aeadaes256ocbtaglen128v1 93.49? 99.98? 166.52? T:ketjesrv1 57.71? 101.56? 107.64? T:deoxysii256v141 103.72 103.74 103.75 T:ketjesrv2 62.50? 105.75? 109.40? T:twine80n6t4clocv2 109.11? 113.48? 185.88? T:aezv5 67.39? 113.75? 117.46? T:twine80n6t4clocv3 123.11 123.17 123.40 T:aezv4 122.47? 129.42? 213.94? T:ketjejrv1 135.66 135.99 136.10 T:riverkeyakv1 139.89 140.01 140.09 T:proest128otrv1 238.09 238.12 238.60 T:deoxyseq128128v13 229.62? 240.40? 393.22? T:deoxysneq128128v13 148.27? 245.59? 251.47? T:aezv1 211.56? 355.21? 365.88? T:twine80n6clocv1 219.31? 362.93? 373.68? T:aezv3 380.32 381.36 382.26 T:present80n6t4silcv3 382.86 382.88 382.92 T:deoxysneq256128v1 382.99 383.32 384.95 T:deoxyseq128128v1 383.78 383.94 384.36 T:deoxysneq128128v1 395.10 395.14 396.76 T:ketjejrv2 546.20? 575.01? 945.19? T:led80n6t4silcv3 363.52? 612.01? 633.12? T:deoxyseq256128v13 363.51? 612.03? 636.49? T:deoxyseq256128v1 371.48? 612.27? 630.71? T:deoxysneq256128v13 474.26? 2019.46? 2021.50? aes256gcmv1 3147.11? 3164.37? 6576.29? T:acorn128 3648.45? 3657.39? 6442.91? T:acorn128v3 6335.12 6337.91 6340.71 T:present80n6t4silcv2 6494.83? 6496.99? 10720.03? T:present80n6silcv1 3137.42? 6552.06? 6563.62? T:acorn128v2 7332.77 7339.75 7345.63 T:led80n6silcv1 11731.36 11743.47 12048.96 T:led80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 5.70 5.70 5.71 T:morus1280128v1 6.45 6.45 6.47 T:morus1280128v2 3.11? 6.46? 7.39? T:morus1280256v1 3.14? 6.58? 7.55? T:morus1280256v2 3.76? 7.27? 8.06? T:morus640128v2 4.03? 7.64? 8.39? T:morus640128v1 8.02 8.07 8.10 T:norx6444v3 8.05 8.08 8.11 T:norx6441v3 8.07 8.09 8.10 T:norx6444v2 6.60? 8.10? 14.43? T:norx6441v2 5.58? 9.47? 19.02? T:tiaoxinv1 9.88 9.91 9.93 T:norx6444v1 8.53? 9.98? 17.33? T:norx6441v1 11.13 11.52 11.98 T:oceankeyakv2 -10.50? 11.60? 25.93? T:lunarkeyakv2 10.35? 12.50? 22.16? T:norx6461v2 13.29 13.50 13.86 T:aes256gcmv1 12.10? 14.09? 24.54? T:norx6461v1 14.12 14.18 14.27 T:lakekeyakv2 14.29 14.33 14.40 T:seakeyakv2 13.50? 14.91? 25.26? T:norx3261v3 5.71? 15.49? 19.47? T:tiaoxinv2 9.02? 15.97? 16.88? T:norx3241v2 8.26? 16.04? 17.78? T:lakekeyakv1 9.07? 16.06? 17.03? T:norx3241v3 15.31? 16.32? 27.15? T:ascon128av11 15.38? 16.41? 27.28? T:ascon96v1 18.10 18.11 18.14 T:aegis256 9.86? 19.10? 21.19? T:norx6461v3 11.01? 19.32? 20.40? T:norx3241v1 9.97? 20.28? 23.02? T:aegis128l 20.64 21.27 22.16 T:aes128gcmv1 19.23? 22.44? 39.12? T:ketjeminorv2 13.51? 23.85? 25.25? T:norx3261v2 10.23? 24.53? 29.62? T:ketjemajorv2 23.51? 24.84? 41.09? T:ascon128v1 23.51? 24.85? 41.10? T:ascon128v11 23.96? 25.31? 41.89? ascon128v12 26.45 26.50 26.56 T:aes128n8t8clocv2 15.63? 26.64? 27.66? ascon128av12 26.65 26.73 26.87 T:aes128n8clocv1 15.40? 27.61? 29.46? T:riverkeyakv2 26.45? 28.37? 47.41? T:aes128n12t8silcv2 26.45? 28.43? 47.28? T:aes128n8t8silcv2 16.28? 28.62? 30.20? T:norx3261v1 16.47? 30.06? 32.42? T:aegis128 30.13 30.16 30.19 T:aes128n12t8silcv3 27.75? 31.00? 52.78? T:aes128otrcv3 31.24 31.29 31.33 T:aes128n8silcv1 34.67? 38.06? 64.27? T:aes128otrpv1 25.24? 42.92? 44.60? T:aes128n12t8clocv2 25.19? 42.95? 44.51? T:aes128n12t8clocv3 42.98 43.02 43.08 T:aes128n12clocv1 25.61? 45.63? 48.85? T:aes128otrsv2 34.72? 47.13? 87.85? T:seakeyakv1 27.69? 49.12? 52.25? T:aes128otrsv1 28.04? 49.89? 53.21? T:aes128otrsv3 50.96 51.24 51.33 T:aes128n12silcv1 54.78 54.81 54.89 T:proest256otrv1 56.61 56.67 56.79 T:aes128otrpv3 54.24? 59.01? 99.01? T:aeadaes128ocbtaglen128v1 19.44? 59.18? 74.67? T:oceankeyakv1 60.50 60.54 60.64 T:aes256otrsv1 60.86 60.89 60.94 T:aes128otrpv2 60.94 61.01 61.13 T:aes256otrsv2 36.42? 64.97? 69.39? T:aes256otrcv3 37.75? 66.89? 70.97? T:aes256otrsv3 39.19? 67.64? 70.72? T:deoxysi128v141 43.20? 74.33? 77.71? T:deoxysii128v141 44.12? 77.38? 81.50? T:aes256otrpv1 44.12? 77.38? 81.65? T:aes256otrpv3 44.09? 77.42? 81.69? T:aes256otrpv2 44.07? 77.80? 82.42? T:deoxysi256v141 69.10? 78.00? 133.75? T:aeadaes256ocbtaglen128v1 46.67? 79.02? 81.73? T:aesjambuv1 93.48? 99.98? 166.51? T:ketjesrv1 57.33? 101.75? 107.62? T:deoxysii256v141 103.71 103.74 103.75 T:ketjesrv2 62.49? 105.73? 109.39? T:twine80n6t4clocv2 109.10? 113.45? 185.88? T:aezv5 67.40? 113.75? 117.47? T:twine80n6t4clocv3 123.05 123.27 123.32 T:aezv4 122.48? 130.56? 213.95? T:ketjejrv1 135.71 135.90 135.99 T:riverkeyakv1 139.93 139.97 140.04 T:proest128otrv1 238.09 238.14 238.65 T:deoxyseq128128v13 228.18? 238.97? 393.22? T:deoxysneq128128v13 151.67? 245.56? 251.56? T:aezv1 211.56? 355.20? 365.91? T:twine80n6clocv1 216.41? 362.88? 373.48? T:aezv3 380.33 381.35 382.26 T:present80n6t4silcv3 382.87 382.90 382.92 T:deoxysneq256128v1 382.79 383.29 384.95 T:deoxyseq128128v1 383.79 383.87 384.30 T:deoxysneq128128v1 395.08 395.14 396.86 T:ketjejrv2 546.21? 574.37? 945.17? T:led80n6t4silcv3 365.86? 611.93? 632.65? T:deoxyseq256128v1 361.46? 612.03? 633.37? T:deoxyseq256128v13 371.65? 612.30? 630.65? T:deoxysneq256128v13 475.85? 2019.44? 2022.41? aes256gcmv1 3148.63? 3161.65? 6579.91? T:acorn128 3646.83? 3657.06? 6438.13? T:acorn128v3 6335.44 6337.03 6340.34 T:present80n6t4silcv2 6490.83? 6497.45? 10717.60? T:present80n6silcv1 3136.86? 6553.96? 6567.57? T:acorn128v2 7336.29 7340.35 7345.79 T:led80n6silcv1 11735.59 11744.39 12052.63 T:led80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 4.80? 7.64? 7.66? T:morus1280256v1 4.84? 7.71? 7.74? T:morus1280256v2 7.76 7.77 7.78 T:morus1280128v2 8.04 8.06 8.07 T:morus1280128v1 5.48? 8.74? 8.76? T:morus640128v1 5.54? 8.82? 8.84? T:morus640128v2 9.76 9.78 9.79 T:norx6441v3 9.75? 9.78? 15.57? T:norx6441v2 11.52? 11.55? 18.26? T:norx6441v1 11.96 11.97 11.99 T:norx6444v2 12.00 12.01 12.04 T:norx6444v3 13.63? 13.65? 21.82? T:tiaoxinv1 14.81? 14.85? 23.66? T:norx6461v2 14.86 14.87 14.89 T:norx6444v1 16.26? 16.29? 26.00? T:norx3261v3 16.71? 16.72? 26.68? T:norx6461v1 16.82? 16.83? 26.89? T:ascon96v1 16.89? 16.90? 27.02? T:ascon128av11 10.97? 17.52? 17.53? T:norx3241v2 11.05? 17.60? 17.63? T:norx3241v3 18.38 18.42 18.54 T:lakekeyakv2 12.93? 20.56? 20.61? T:norx3241v1 21.01 21.03 21.04 T:aegis256 13.28? 21.24? 21.32? T:lakekeyakv1 22.14 22.21 22.29 T:seakeyakv2 14.25? 22.74? 22.82? T:norx6461v3 14.63? 23.38? 23.40? T:tiaoxinv2 15.59? 24.88? 24.93? T:aegis128l 25.39? 25.40? 40.61? T:ascon128v1 25.39? 25.40? 40.62? T:ascon128v11 25.94? 25.96? 41.49? ascon128v12 16.28? 25.99? 26.01? T:norx3261v2 17.27? 27.59? 27.63? ascon128av12 28.51 28.66 28.72 T:oceankeyakv2 28.71? 28.71? 45.92? T:ketjeminorv2 19.05? 30.40? 30.47? T:norx3261v1 19.84? 31.61? 31.65? T:riverkeyakv2 20.49? 32.67? 32.71? T:aegis128 33.10? 33.21? 52.86? T:aes128otrcv3 23.59? 37.75? 38.92? T:ketjemajorv2 38.67? 38.99? 61.45? T:aes256gcmv1 40.14? 40.21? 64.21? T:aes128otrpv1 40.55 40.57 40.58 T:aes128n8t8clocv2 40.88 40.90 40.96 T:aes128n8clocv1 41.49? 41.54? 66.34? T:aes128n12t8clocv3 43.81? 43.88? 70.42? T:aes128n8t8silcv2 44.00? 44.14? 70.43? T:aes128n12t8silcv2 46.47 46.48 46.50 T:aes128n12t8silcv3 29.65? 47.22? 47.34? T:lunarkeyakv2 47.80? 47.85? 76.47? T:aes256otrsv3 48.25 48.26 48.29 T:aes128n8silcv1 51.42 51.49 51.76 T:aes128gcmv1 35.75? 57.16? 57.23? T:aes128otrsv2 36.07? 57.58? 57.60? T:aes128otrsv1 36.45? 58.31? 58.35? T:aes128otrsv3 59.49 59.51 59.55 T:proest256otrv1 64.02 64.19 64.24 T:aes128otrpv3 64.20 64.22 64.35 T:aes128otrpv2 42.24? 66.16? 66.23? T:aes128n12t8clocv2 66.39 66.42 66.59 T:aes128n12clocv1 43.25? 69.20? 69.34? T:aes256otrcv3 44.39? 70.99? 71.01? T:deoxysi128v141 73.38 73.41 73.46 T:aes256otrsv1 74.45 74.47 74.50 T:aes256otrsv2 78.21 78.23 78.38 T:aes128n12silcv1 50.50? 80.74? 80.78? T:aesjambuv1 50.75? 81.13? 81.15? T:aes256otrpv3 52.01? 82.00? 82.01? T:aes256otrpv1 52.02? 82.01? 82.04? T:aes256otrpv2 54.04? 84.44? 84.48? T:deoxysi256v141 86.84? 90.80? 136.74? T:aeadaes256ocbtaglen128v1 57.43? 91.92? 92.05? T:oceankeyakv1 57.64? 92.52? 92.56? T:seakeyakv1 68.67? 101.79? 108.95? T:aeadaes128ocbtaglen128v1 106.49? 106.51? 170.39? T:ketjesrv1 68.56? 109.65? 109.66? T:twine80n6t4clocv2 110.26 110.30 110.98 T:ketjesrv2 72.46? 115.85? 115.89? T:twine80n6t4clocv3 72.65? 116.21? 116.31? T:deoxysii128v141 136.25? 138.93? 217.48? T:aezv4 140.61? 140.62? 224.96? T:ketjejrv1 145.77 145.82 146.13 T:proest128otrv1 147.26 147.28 147.32 T:riverkeyakv1 144.27? 147.31? 230.84? T:aezv5 101.25? 161.99? 162.08? T:deoxysii256v141 240.60 240.63 240.70 T:deoxysneq128128v13 241.30? 241.36? 385.87? T:deoxysneq128128v1 331.95? 335.55? 530.98? T:aezv3 337.42? 337.68? 539.90? T:twine80n6clocv1 363.38 363.93 364.30 T:deoxyseq128128v13 367.18? 367.95? 590.82? T:deoxyseq128128v1 384.88 384.91 386.22 T:deoxysneq256128v1 386.55? 387.39? 479.35? T:present80n6t4silcv3 259.08? 413.62? 413.73? T:ketjejrv2 479.60 480.02 484.48 T:aezv1 578.27 578.29 578.94 T:led80n6t4silcv3 580.24 580.95 581.36 T:deoxyseq256128v13 391.89? 615.27? 617.12? T:deoxysneq256128v13 922.92 924.61 929.12 T:deoxyseq256128v1 4163.40? 4165.64? 6665.87? T:acorn128v3 4216.00 4216.50 4218.57 T:acorn128v2 4173.87? 6677.27? 6683.10? T:acorn128 9553.19 9556.68 9559.28 T:present80n6t4silcv2 9799.28? 15677.16? 15681.24? T:present80n6silcv1 10944.11? 17508.23? 17516.95? T:led80n6t4silcv2 10955.15? 17527.51? 17539.49? T:led80n6silcv1 23645.99? 23651.91? 37860.13? aes256gcmv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 4.84? 7.73? 7.75? T:morus1280256v1 7.82 7.83 7.84 T:morus1280128v2 4.95? 7.90? 7.90? T:morus1280256v2 8.09 8.11 8.13 T:morus1280128v1 5.59? 8.94? 9.18? T:morus640128v2 6.06? 9.12? 9.16? T:morus640128v1 9.82 9.84 9.86 T:norx6441v3 9.82? 9.84? 15.71? T:norx6441v2 11.47? 11.50? 18.34? T:norx6441v1 11.99 12.00 12.03 T:norx6444v2 12.03 12.04 12.10 T:norx6444v3 14.32? 14.39? 23.02? T:tiaoxinv1 14.85 14.87 14.89 T:norx6444v1 14.92? 14.95? 23.86? T:norx6461v2 16.27? 16.28? 26.02? T:norx3261v3 16.43? 16.47? 26.23? T:norx6461v1 16.82? 16.83? 26.90? T:ascon128av11 16.79? 17.31? 26.84? T:ascon96v1 11.37? 17.59? 17.88? T:norx3241v2 11.04? 17.62? 17.67? T:norx3241v3 18.02 18.08 18.24 T:lakekeyakv2 12.73? 20.29? 20.37? T:lakekeyakv1 12.99? 20.67? 20.69? T:norx3241v1 21.11 21.12 21.13 T:aegis256 22.09 22.17 22.30 T:seakeyakv2 14.31? 22.86? 22.96? T:norx6461v3 14.56? 23.27? 23.30? T:tiaoxinv2 15.56? 24.85? 24.92? T:aegis128l 25.32? 25.67? 40.50? T:ascon128v1 25.32? 25.68? 40.50? T:ascon128v11 25.79? 25.81? 41.26? ascon128v12 16.98? 26.00? 26.04? T:norx3261v2 17.18? 27.47? 27.47? ascon128av12 27.84? 27.87? 44.54? T:ketjeminorv2 28.19 28.32 28.71 T:oceankeyakv2 19.14? 30.52? 30.56? T:norx3261v1 22.20? 32.04? 32.11? T:riverkeyakv2 20.41? 32.49? 32.54? T:aegis128 32.97? 32.98? 52.67? T:aes128otrcv3 22.82? 36.47? 36.50? T:ketjemajorv2 38.84? 38.93? 61.16? T:aes256gcmv1 40.38? 40.44? 64.56? T:aes128otrpv1 41.99 42.00 42.02 T:aes128n8t8clocv2 42.69 42.71 42.77 T:aes128n8clocv1 43.83? 43.86? 70.31? T:aes128n8t8silcv2 44.08? 44.10? 70.31? T:aes128n12t8silcv2 44.60? 44.63? 71.28? T:aes128n12t8clocv3 47.07 47.10 47.15 T:aes128n12t8silcv3 30.34? 47.15? 47.31? T:lunarkeyakv2 47.90 47.93 47.97 T:aes128n8silcv1 48.43? 48.48? 77.46? T:aes256otrsv3 51.75 51.93 52.09 T:aes128gcmv1 36.19? 57.86? 57.90? T:aes128otrsv1 36.79? 58.71? 58.82? T:aes128otrsv2 59.30 59.31 59.45 T:proest256otrv1 37.11? 59.36? 59.44? T:aes128otrsv3 63.80 63.82 63.90 T:aes128otrpv2 64.68 64.98 65.03 T:aes128otrpv3 43.12? 68.99? 69.09? T:aes256otrcv3 44.29? 70.82? 70.89? T:aes128n12t8clocv2 72.97 73.20 73.28 T:aes128n12clocv1 74.93 74.96 75.09 T:aes256otrsv1 47.63? 76.13? 76.17? T:deoxysi128v141 76.21 76.22 76.52 T:aes256otrsv2 78.08 78.10 78.21 T:aes128n12silcv1 50.66? 81.02? 81.03? T:aesjambuv1 51.08? 81.64? 81.68? T:aes256otrpv2 51.13? 81.71? 81.75? T:aes256otrpv3 51.57? 82.43? 82.51? T:aes256otrpv1 56.45? 90.22? 90.32? T:deoxysi256v141 57.56? 91.94? 92.10? T:oceankeyakv1 57.91? 92.58? 92.67? T:seakeyakv1 100.91? 106.31? 160.41? T:aeadaes256ocbtaglen128v1 106.83? 106.86? 170.91? T:ketjesrv1 68.97? 110.31? 110.33? T:twine80n6t4clocv2 113.40 113.44 113.47 T:ketjesrv2 72.12? 115.37? 115.40? T:twine80n6t4clocv3 72.34? 115.41? 115.44? T:deoxysii128v141 80.11? 118.15? 127.09? T:aeadaes128ocbtaglen128v1 135.81? 135.88? 217.35? T:aezv4 142.16? 142.47? 227.44? T:ketjejrv1 144.04? 144.11? 230.55? T:aezv5 145.84 145.84 146.07 T:proest128otrv1 148.24 148.29 150.90 T:riverkeyakv1 107.59? 161.52? 161.60? T:deoxysii256v141 276.92 277.27 278.50 T:deoxysneq128128v13 277.70? 278.02? 443.93? T:deoxysneq128128v1 331.56? 334.43? 530.83? T:aezv3 338.20? 339.49? 541.13? T:twine80n6clocv1 363.93 363.99 364.93 T:deoxyseq128128v13 387.93? 389.19? 443.87? T:present80n6t4silcv3 262.24? 416.89? 417.92? T:ketjejrv2 436.03 436.52 441.06 T:deoxysneq256128v1 436.51? 440.77? 703.19? T:deoxyseq128128v1 480.55 480.92 485.78 T:aezv1 579.45 579.49 580.61 T:led80n6t4silcv3 580.17 580.29 584.39 T:deoxyseq256128v13 445.89? 697.90? 702.44? T:deoxysneq256128v13 1087.12 1093.29 1094.86 T:deoxyseq256128v1 4114.02? 4114.59? 6583.33? T:acorn128v3 4166.91 4168.56 4169.60 T:acorn128v2 4204.64? 6729.27? 6733.32? T:acorn128 9554.90 9556.23 9559.60 T:present80n6t4silcv2 9792.04? 15676.90? 15682.89? T:present80n6silcv1 10947.45? 17512.53? 17527.31? T:led80n6t4silcv2 10961.68? 17527.70? 17543.31? T:led80n6silcv1 23642.41? 23646.78? 37860.20? aes256gcmv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 4.82? 7.73? 7.73? T:morus1280256v1 7.81 7.82 7.83 T:morus1280128v2 4.94? 7.89? 7.90? T:morus1280256v2 8.07 8.07 8.10 T:morus1280128v1 5.59? 8.94? 8.94? T:morus640128v2 6.04? 9.12? 9.27? T:morus640128v1 9.97 9.98 10.00 T:norx6441v3 9.95? 10.28? 15.91? T:norx6441v2 11.60? 11.62? 18.55? T:norx6441v1 12.12 12.13 12.44 T:norx6444v2 12.17 12.19 12.35 T:norx6444v3 14.27? 14.40? 22.98? T:tiaoxinv1 14.98 15.00 15.00 T:norx6444v1 15.03? 15.06? 24.07? T:norx6461v2 16.26? 16.27? 25.99? T:norx3261v3 16.55? 16.58? 26.46? T:norx6461v1 16.82? 16.82? 26.89? T:ascon128av11 16.78? 17.13? 26.83? T:ascon96v1 11.01? 17.60? 17.61? T:norx3241v3 11.24? 17.78? 17.88? T:norx3241v2 18.26 18.28 18.34 T:lakekeyakv2 12.87? 20.57? 20.62? T:lakekeyakv1 12.98? 20.66? 20.69? T:norx3241v1 21.25 21.25 21.27 T:aegis256 22.20 22.28 22.44 T:seakeyakv2 14.53? 23.06? 23.10? T:norx6461v3 14.51? 23.19? 23.26? T:tiaoxinv2 15.69? 25.08? 25.11? T:aegis128l 25.31? 25.32? 40.50? T:ascon128v11 25.31? 25.65? 40.49? T:ascon128v1 25.79? 25.79? 41.26? ascon128v12 16.53? 25.98? 26.00? T:norx3261v2 17.18? 27.47? 27.47? ascon128av12 27.98? 28.01? 44.77? T:ketjeminorv2 28.37 28.39 28.42 T:oceankeyakv2 19.08? 30.49? 30.50? T:norx3261v1 20.47? 32.30? 32.32? T:riverkeyakv2 20.37? 32.48? 32.52? T:aegis128 32.96? 32.98? 52.66? T:aes128otrcv3 22.97? 36.72? 36.84? T:ketjemajorv2 38.64? 39.43? 61.05? T:aes256gcmv1 40.51? 40.54? 64.81? T:aes128otrpv1 41.96 41.99 42.01 T:aes128n8t8clocv2 42.68 42.70 42.73 T:aes128n8clocv1 43.84? 44.00? 70.31? T:aes128n8t8silcv2 43.94? 44.08? 70.33? T:aes128n12t8silcv2 44.60? 44.64? 71.27? T:aes128n12t8clocv3 47.05 47.07 47.09 T:aes128n12t8silcv3 29.89? 47.32? 47.38? T:lunarkeyakv2 47.90 47.91 47.95 T:aes128n8silcv1 48.56? 48.77? 77.69? T:aes256otrsv3 51.75 51.84 51.99 T:aes128gcmv1 36.34? 58.09? 58.12? T:aes128otrsv1 38.50? 58.91? 59.01? T:aes128otrsv2 59.30 59.30 59.31 T:proest256otrv1 37.27? 59.55? 59.64? T:aes128otrsv3 63.99 64.01 64.05 T:aes128otrpv2 65.15 65.24 65.30 T:aes128otrpv3 43.10? 68.94? 69.08? T:aes256otrcv3 44.26? 70.80? 70.89? T:aes128n12t8clocv2 72.89 72.89 73.22 T:aes128n12clocv1 75.15 75.21 75.26 T:aes256otrsv1 47.75? 76.32? 76.43? T:deoxysi128v141 76.43 76.44 76.53 T:aes256otrsv2 77.92 78.15 78.25 T:aes128n12silcv1 50.66? 81.02? 81.03? T:aesjambuv1 51.19? 81.84? 81.88? T:aes256otrpv2 51.26? 81.93? 81.94? T:aes256otrpv3 51.68? 82.65? 82.70? T:aes256otrpv1 56.54? 90.34? 90.45? T:deoxysi256v141 57.59? 92.13? 92.24? T:oceankeyakv1 58.31? 92.80? 92.83? T:seakeyakv1 106.97? 106.98? 171.13? T:ketjesrv1 100.80? 107.24? 160.08? T:aeadaes256ocbtaglen128v1 68.94? 110.29? 110.34? T:twine80n6t4clocv2 113.56 113.60 114.56 T:ketjesrv2 72.13? 115.36? 115.37? T:twine80n6t4clocv3 72.32? 115.63? 115.74? T:deoxysii128v141 79.08? 117.85? 125.79? T:aeadaes128ocbtaglen128v1 135.69? 138.31? 217.25? T:aezv4 142.30? 142.32? 227.68? T:ketjejrv1 145.84 145.86 145.92 T:proest128otrv1 143.91? 146.17? 230.26? T:aezv5 148.47 148.49 149.95 T:riverkeyakv1 101.17? 161.68? 161.87? T:deoxysii256v141 277.04 277.96 279.23 T:deoxysneq128128v13 277.71? 279.62? 443.93? T:deoxysneq128128v1 331.56? 334.00? 530.81? T:aezv3 338.17? 338.31? 541.11? T:twine80n6clocv1 363.58 364.10 365.01 T:deoxyseq128128v13 387.93? 388.39? 443.61? T:present80n6t4silcv3 262.36? 417.06? 417.16? T:ketjejrv2 436.02 436.34 438.07 T:deoxysneq256128v1 436.07? 438.38? 703.79? T:deoxyseq128128v1 480.24 480.56 484.77 T:aezv1 579.44 579.49 582.92 T:led80n6t4silcv3 580.34 580.42 584.03 T:deoxyseq256128v13 447.48? 698.14? 705.12? T:deoxysneq256128v13 1087.16 1093.43 1095.08 T:deoxyseq256128v1 1421.42? 1424.50? 2279.46? aes256gcmv1 4114.10? 4116.69? 6584.38? T:acorn128v3 4168.14 4168.91 4170.58 T:acorn128v2 4206.87? 6729.16? 6734.17? T:acorn128 9552.53 9554.76 9558.69 T:present80n6t4silcv2 9795.73? 15673.58? 15684.81? T:present80n6silcv1 10943.46? 17515.10? 17528.12? T:led80n6t4silcv2 10953.99? 17531.50? 17540.02? T:led80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 26.23? 26.90? 41.41? T:ascon96v1 26.64? 26.98? 41.82? T:ascon128av11 19.48? 30.05? 30.28? T:morus640128v1 20.34? 31.55? 32.47? T:morus640128v2 34.55? 34.81? 54.44? T:ascon128v1 34.59? 34.81? 54.77? T:ascon128v11 34.85? 35.40? 55.48? ascon128v12 36.44? 36.55? 57.81? T:norx6441v1 37.85? 38.23? 59.97? T:norx6441v2 38.08 38.30 38.48 T:norx6441v3 25.02? 38.96? 39.38? T:morus1280256v1 25.57? 40.19? 40.86? T:morus1280256v2 40.52 40.97 41.67 T:morus1280128v2 27.42? 42.75? 43.23? ascon128av12 42.38? 43.27? 66.80? T:norx3261v3 43.68 44.20 44.68 T:morus1280128v1 29.76? 45.12? 46.28? T:norx3241v1 29.43? 45.87? 45.98? T:norx3241v2 30.36? 47.13? 48.31? T:norx3241v3 50.59 50.88 51.51 T:aes128n8t8clocv2 53.02? 53.03? 84.57? T:norx6461v1 53.17 53.92 54.88 T:aes128n8clocv1 54.74? 54.81? 87.35? T:norx6461v2 60.01? 60.67? 95.89? T:aes128n8t8silcv2 60.38? 60.67? 95.92? T:aes128n12t8silcv2 64.46 65.02 65.76 T:aes128n12t8silcv3 42.34? 65.57? 67.09? T:norx3261v1 42.64? 67.02? 67.62? T:norx3261v2 68.40 69.09 69.51 T:aes128n8silcv1 45.69? 71.73? 72.91? T:lakekeyakv1 72.88 73.11 73.48 T:aegis256 48.28? 74.22? 77.00? T:riverkeyakv2 78.12? 79.63? 124.54? T:aes128otrcv3 80.79? 81.64? 128.92? T:aes128otrpv1 82.05 82.68 84.16 T:lakekeyakv2 53.14? 83.91? 84.27? T:norx6461v3 54.59? 84.87? 85.72? T:aes128n12t8clocv2 55.88? 88.47? 89.06? T:aes128n12t8clocv3 88.17? 88.84? 140.57? T:ketjeminorv2 89.66 89.73 90.14 T:norx6444v2 90.62 90.62 90.84 T:norx6444v3 90.96 91.88 92.81 T:aes128n12clocv1 59.93? 94.63? 95.55? T:aegis128 99.27? 99.64? 158.31? T:tiaoxinv1 68.70? 109.10? 109.73? T:aesjambuv1 70.06? 110.25? 111.18? T:aegis128l 109.84 111.22 112.96 T:aes128n12silcv1 114.63 115.11 115.16 T:norx6444v1 74.44? 117.63? 118.38? T:aes128otrsv2 78.23? 124.02? 124.88? T:aes128otrsv1 125.84 126.25 127.32 T:aes128otrpv3 80.38? 127.21? 128.10? T:aes128otrsv3 129.29 130.25 132.30 T:aes128otrpv2 85.84? 136.64? 137.12? T:deoxysi128v141 98.86? 149.21? 150.30? T:twine80n6t4clocv3 94.85? 150.26? 150.59? T:twine80n6t4clocv2 151.70 151.74 152.27 T:aes256otrsv2 150.48 151.92 152.70 T:aes256otrsv1 100.49? 159.53? 160.69? T:aes256otrcv3 100.49? 159.61? 160.38? T:tiaoxinv2 102.05? 161.69? 162.91? T:aes256otrsv3 103.20? 163.28? 163.51? T:aes256otrpv1 102.68? 163.47? 164.47? T:aes256otrpv2 102.94? 163.62? 164.32? T:aes256otrpv3 165.28? 166.84? 265.11? T:ketjesrv1 168.95 170.19 172.15 T:aezv4 173.93 174.56 175.04 T:proest256otrv1 179.84 180.31 181.24 T:ketjesrv2 182.88? 183.25? 291.91? T:ketjejrv1 184.88? 187.37? 293.53? T:aezv5 183.20? 192.89? 294.87? T:aes256gcmv1 123.57? 196.53? 197.46? T:deoxysii128v141 197.83 198.84 200.57 T:seakeyakv2 175.38? 220.54? 222.06? T:deoxysi256v141 149.66? 231.27? 239.13? T:ketjemajorv2 253.31 254.34 261.62 T:aes128gcmv1 256.80 257.54 259.25 T:riverkeyakv1 271.64? 271.94? 433.99? T:deoxysneq128128v13 281.25 281.62 282.52 T:proest128otrv1 300.73 301.81 304.45 T:oceankeyakv2 223.02? 332.80? 360.22? T:aeadaes128ocbtaglen128v1 259.69? 366.01? 419.75? T:aeadaes256ocbtaglen128v1 430.65? 431.59? 688.90? T:seakeyakv1 432.84 433.18 433.44 T:deoxysneq256128v1 435.22 435.37 436.04 T:deoxysneq128128v1 451.29 451.40 451.70 T:deoxyseq128128v13 481.23? 482.16? 590.34? T:present80n6t4silcv3 313.38? 495.48? 498.56? T:aezv1 541.83 542.32 542.39 T:ketjejrv2 366.38? 584.84? 585.95? T:twine80n6clocv1 424.75? 677.32? 678.51? T:deoxysii256v141 679.77 680.21 682.52 T:deoxyseq128128v1 685.34? 686.04? 1096.29? T:led80n6t4silcv3 440.71? 692.27? 695.43? T:deoxysneq256128v13 720.04? 720.52? 1151.58? T:deoxyseq256128v13 454.48? 723.85? 728.16? T:aezv3 470.33? 747.20? 748.98? T:lunarkeyakv2 626.23? 997.95? 1000.66? T:oceankeyakv1 670.68? 1072.38? 1072.83? T:deoxyseq256128v1 10677.26 10677.59 10690.32 T:present80n6t4silcv2 10942.77? 11040.37? 17507.53? T:present80n6silcv1 11018.22? 11519.01? 17583.16? T:led80n6silcv1 14632.34 14633.86 14722.77 T:acorn128 14643.36? 14734.12? 23427.85? T:acorn128v3 14849.24? 14938.27? 23758.91? T:acorn128v2 17545.50 17677.27 18458.84 T:led80n6t4silcv2 34430.74? 34436.53? 55080.52? aes256gcmv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 26.27? 26.76? 41.52? T:ascon96v1 26.60? 26.95? 42.01? T:ascon128av11 20.75? 32.17? 32.44? T:morus640128v1 21.86? 33.25? 33.73? T:morus640128v2 34.48? 35.06? 54.96? T:ascon128v11 34.77? 35.11? 55.19? T:ascon128v1 35.33? 35.62? 56.26? ascon128v12 36.73? 37.37? 58.12? T:norx6441v1 38.70? 38.97? 61.34? T:norx6441v2 25.20? 39.01? 39.78? T:morus1280256v1 39.08 39.19 39.56 T:norx6441v3 25.53? 40.30? 41.08? T:morus1280256v2 41.16 41.41 42.49 T:morus1280128v2 27.50? 43.05? 43.53? ascon128av12 42.09? 43.20? 66.73? T:norx3261v3 29.65? 45.38? 46.31? T:norx3241v1 30.02? 45.61? 45.79? T:norx3241v2 29.87? 46.20? 46.80? T:norx3241v3 51.02? 51.47? 81.12? T:norx6461v1 51.47 51.88 52.32 T:morus1280128v1 51.91 52.10 52.40 T:aes128n8t8clocv2 55.07 55.26 56.97 T:aes128n8clocv1 56.59? 56.89? 90.29? T:norx6461v2 60.23? 60.63? 95.70? T:aes128n12t8silcv2 60.38? 60.89? 96.04? T:aes128n8t8silcv2 65.05 65.27 65.76 T:aes128n12t8silcv3 42.38? 66.20? 67.50? T:norx3261v1 42.34? 66.57? 67.13? T:norx3261v2 68.13 68.43 68.70 T:aes128n8silcv1 44.72? 68.73? 69.70? T:lakekeyakv1 73.29 73.66 73.85 T:aegis256 48.77? 76.08? 77.22? T:riverkeyakv2 77.78? 78.11? 124.05? T:aes128otrcv3 80.79 81.49 82.83 T:lakekeyakv2 81.38? 82.09? 130.29? T:aes128otrpv1 53.99? 85.35? 86.13? T:norx6461v3 87.50? 88.09? 139.53? T:ketjeminorv2 56.59? 88.91? 89.58? T:aes128n12t8clocv2 90.47 90.62 90.91 T:norx6444v2 91.29 91.48 91.81 T:norx6444v3 58.07? 91.77? 92.18? T:aes128n12t8clocv3 60.12? 94.81? 95.26? T:aegis128 96.52 97.59 97.90 T:aes128n12clocv1 100.02? 100.34? 159.42? T:tiaoxinv1 70.02? 110.02? 110.25? T:aesjambuv1 70.03? 111.55? 112.15? T:aegis128l 110.07 112.66 114.41 T:aes128n12silcv1 113.26 113.34 113.85 T:norx6444v1 76.74? 122.20? 123.27? T:aes128otrsv2 78.82? 124.88? 125.39? T:aes128otrsv1 127.36 127.92 128.43 T:aes128otrpv3 81.16? 128.10? 128.55? T:aes128otrsv3 129.26 130.36 131.03 T:aes128otrpv2 111.22? 148.99? 149.62? T:twine80n6t4clocv3 95.11? 151.41? 151.62? T:twine80n6t4clocv2 155.27 155.56 156.82 T:aes256otrsv1 155.23 155.71 156.23 T:aes256otrsv2 98.64? 156.60? 156.94? T:deoxysi128v141 99.16? 158.80? 159.12? T:aes256otrcv3 100.34? 160.84? 161.84? T:tiaoxinv2 102.84? 162.80? 163.91? T:aes256otrsv3 103.65? 163.84? 165.02? T:aes256otrpv3 103.61? 163.95? 164.80? T:aes256otrpv2 103.95? 165.36? 165.73? T:aes256otrpv1 165.66? 166.88? 266.59? T:ketjesrv1 166.36 167.18 170.00 T:aezv4 175.04 175.16 175.78 T:proest256otrv1 182.91 182.95 182.98 T:ketjesrv2 183.77? 184.40? 292.87? T:aezv5 184.06? 184.73? 293.79? T:ketjejrv1 187.59? 191.41? 296.70? T:aes256gcmv1 124.32? 195.57? 196.64? T:deoxysii128v141 198.09 199.61 200.80 T:seakeyakv2 143.43? 228.45? 229.60? T:ketjemajorv2 153.74? 242.51? 243.55? T:deoxysi256v141 249.74 251.67 254.27 T:aes128gcmv1 257.35 258.13 259.25 T:riverkeyakv1 282.55 282.84 283.14 T:proest128otrv1 300.25 302.99 309.31 T:oceankeyakv2 307.97? 308.56? 492.18? T:deoxysneq128128v13 236.16? 349.31? 374.09? T:aeadaes128ocbtaglen128v1 270.94? 389.83? 429.88? T:aeadaes256ocbtaglen128v1 431.70? 433.73? 689.30? T:seakeyakv1 451.59 451.77 452.33 T:deoxyseq128128v13 483.05? 483.95? 552.19? T:present80n6t4silcv3 484.39 484.91 485.24 T:deoxysneq256128v1 493.23 493.45 494.52 T:deoxysneq128128v1 318.17? 506.13? 507.43? T:aezv1 549.26 549.59 549.96 T:ketjejrv2 367.57? 585.66? 587.03? T:twine80n6clocv1 425.27? 678.02? 679.70? T:deoxysii256v141 687.12? 687.30? 1098.84? T:led80n6t4silcv3 719.96? 720.77? 1151.28? T:deoxyseq256128v13 451.25? 721.18? 724.71? T:aezv3 477.38? 748.27? 749.72? T:lunarkeyakv2 490.52? 775.66? 777.07? T:deoxysneq256128v13 791.47 797.59 798.26 T:deoxyseq128128v1 624.55? 997.17? 998.84? T:oceankeyakv1 824.16? 1236.71? 1237.30? T:deoxyseq256128v1 10677.52 10678.00 10693.02 T:present80n6t4silcv2 10840.58? 10908.56? 17317.35? T:led80n6silcv1 10942.18? 11055.88? 17507.69? T:present80n6silcv1 14666.77 14667.34 14755.36 T:acorn128 14683.06? 14772.65? 23493.65? T:acorn128v3 14799.19? 14883.16? 23678.30? T:acorn128v2 17257.60 17331.78 17419.55 T:led80n6t4silcv2 34431.41? 34474.31? 55081.23? aes256gcmv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 26.20? 26.38? 41.90? T:ascon96v1 26.57? 26.87? 41.79? T:ascon128av11 19.78? 31.13? 31.14? T:morus640128v1 20.81? 32.73? 32.92? T:morus640128v2 34.40? 34.70? 54.29? T:ascon128v1 34.44? 34.70? 54.81? T:ascon128v11 35.00? 35.18? 55.59? ascon128v12 36.84? 37.04? 58.45? T:norx6441v1 24.20? 38.45? 38.45? T:morus1280256v1 38.71? 39.19? 61.67? T:norx6441v2 39.12 39.23 39.63 T:norx6441v3 25.20? 40.08? 40.08? T:morus1280256v2 40.63 40.63 40.82 T:morus1280128v2 41.93? 42.01? 66.69? T:norx3261v3 27.05? 42.38? 42.79? ascon128av12 28.32? 44.53? 44.64? T:norx3241v1 28.69? 45.68? 45.83? T:norx3241v2 29.06? 46.20? 46.23? T:norx3241v3 50.88 50.88 50.95 T:morus1280128v1 51.02? 51.21? 81.38? T:norx6461v1 51.51 51.73 52.03 T:aes128n8t8clocv2 54.73 54.95 56.67 T:aes128n8clocv1 56.85? 57.00? 90.66? T:norx6461v2 59.86? 60.05? 95.82? T:aes128n8t8silcv2 60.20? 60.52? 96.00? T:aes128n12t8silcv2 64.72 64.76 64.98 T:aes128n12t8silcv3 42.23? 65.27? 65.31? T:norx3261v1 41.64? 66.31? 66.35? T:norx3261v2 67.98 68.13 68.21 T:aes128n8silcv1 44.49? 69.06? 69.58? T:lakekeyakv1 73.62 74.03 74.26 T:aegis256 47.46? 74.52? 77.15? T:riverkeyakv2 77.74? 77.97? 124.02? T:aes128otrcv3 81.64? 82.01? 130.55? T:aes128otrpv1 82.23 82.61 82.90 T:lakekeyakv2 54.33? 85.69? 86.46? T:norx6461v3 55.59? 88.17? 88.58? T:aes128n12t8clocv2 87.95? 88.25? 140.02? T:ketjeminorv2 90.52 90.70 90.96 T:norx6444v2 57.59? 91.11? 91.47? T:aes128n12t8clocv3 91.66 91.77 91.99 T:norx6444v3 59.34? 94.30? 94.37? T:aegis128 95.86 96.78 97.20 T:aes128n12clocv1 99.09? 99.72? 157.83? T:tiaoxinv1 68.77? 109.44? 109.44? T:aesjambuv1 108.95 109.47 112.26 T:aes128n12silcv1 69.99? 110.66? 111.45? T:aegis128l 113.41 113.41 113.55 T:norx6444v1 76.62? 121.91? 122.98? T:aes128otrsv2 78.67? 124.98? 125.50? T:aes128otrsv1 81.01? 127.55? 128.73? T:aes128otrsv3 127.91 128.44 128.73 T:aes128otrpv3 129.77 130.21 130.55 T:aes128otrpv2 96.93? 148.84? 149.18? T:twine80n6t4clocv3 94.81? 150.81? 151.14? T:twine80n6t4clocv2 98.79? 156.45? 157.27? T:deoxysi128v141 155.12 156.60 157.72 T:aes256otrsv2 155.08 156.83 157.20 T:aes256otrsv1 99.27? 158.49? 159.05? T:aes256otrcv3 99.49? 159.34? 159.65? T:tiaoxinv2 102.23? 162.84? 163.58? T:aes256otrsv3 103.09? 163.95? 164.50? T:aes256otrpv3 103.39? 164.25? 164.77? T:aes256otrpv2 103.46? 165.18? 165.48? T:aes256otrpv1 166.02 166.32 169.81 T:aezv4 165.98? 167.07? 266.96? T:ketjesrv1 169.59 169.77 170.19 T:proest256otrv1 182.77? 183.28? 292.42? T:aezv5 183.39 183.43 183.66 T:ketjesrv2 184.36? 185.02? 294.05? T:ketjejrv1 183.05? 188.92? 299.06? T:aes256gcmv1 123.24? 195.31? 196.38? T:deoxysii128v141 197.61 198.20 198.61 T:seakeyakv2 144.05? 229.22? 233.94? T:ketjemajorv2 152.00? 242.92? 243.44? T:deoxysi256v141 251.75 252.57 255.35 T:aes128gcmv1 257.39 257.39 258.80 T:riverkeyakv1 282.29 282.33 282.55 T:proest128otrv1 300.03 302.07 309.38 T:oceankeyakv2 308.27? 308.63? 492.52? T:deoxysneq128128v13 244.96? 346.93? 388.91? T:aeadaes128ocbtaglen128v1 286.04? 381.48? 428.58? T:aeadaes256ocbtaglen128v1 433.18? 434.40? 690.20? T:seakeyakv1 451.84 451.88 452.22 T:deoxyseq128128v13 482.98? 483.57? 552.00? T:present80n6t4silcv3 484.09 484.53 484.88 T:deoxysneq256128v1 493.07 493.26 493.59 T:deoxysneq128128v1 316.14? 505.09? 505.51? T:aezv1 549.59 549.66 550.22 T:ketjejrv2 366.79? 584.59? 586.88? T:twine80n6clocv1 476.63? 679.73? 680.81? T:deoxysii256v141 687.01? 687.23? 1098.70? T:led80n6t4silcv3 449.88? 720.11? 724.00? T:aezv3 719.88? 720.18? 1151.62? T:deoxyseq256128v13 475.33? 748.02? 749.54? T:lunarkeyakv2 490.84? 776.21? 777.19? T:deoxysneq256128v13 791.43 797.67 807.84 T:deoxyseq128128v1 623.62? 995.50? 998.20? T:oceankeyakv1 772.99? 1236.27? 1236.63? T:deoxyseq256128v1 10677.70 10677.88 10691.14 T:present80n6t4silcv2 10942.55? 10966.01? 17509.77? T:present80n6silcv1 10951.49? 11084.16? 17469.20? T:led80n6silcv1 12163.53? 12255.74? 19461.79? aes256gcmv1 14666.81 14667.55 14750.27 T:acorn128 14682.80? 14771.91? 23492.73? T:acorn128v3 14798.81? 14882.64? 23680.80? T:acorn128v2 17391.38 17512.66 17593.77 T:led80n6t4silcv2