VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20260330

[Page version: 20260503 04:13:12]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.32? 0.34? 0.36? T:tiaoxinv1 0.32? 0.34? 0.36? T:tiaoxinv2 0.38 0.38 0.40 T:aegis128l 0.39 0.40 0.40 aegis128l 0.58 0.58 0.59 T:aegis128 0.62 0.63 0.63 aegis256 0.22? 0.81? 1.39? T:aeadaes128ocbtaglen128v1 0.86 0.87 0.88 T:aes128otrsv3 0.87 0.87 0.88 T:aes128otrcv3 0.92 0.93 0.94 T:morus1280128v1 0.92 0.93 0.94 T:morus1280128v2 0.92 0.93 0.94 T:aes128otrpv3 0.93 0.94 0.95 T:aezv4 0.33? 0.95? 2.08? T:aeadaes192ocbtaglen128v1 0.95 0.96 0.97 T:morus1280256v2 0.95 0.96 0.97 T:aezv3 0.96 0.97 0.97 T:aezv5 0.98 0.98 0.99 T:morus1280256v1 1.08 1.09 1.10 T:aes256otrsv3 1.10 1.10 1.11 T:aes256otrcv3 1.16 1.16 1.17 T:morus640128v2 1.15 1.17 1.17 T:morus640128v1 1.17 1.18 1.19 T:aes256otrpv3 1.19 1.21 1.22 T:aeadaes256ocbtaglen128v1 1.30 1.32 1.34 T:deoxysi128v141 1.30 1.34 1.43 T:deoxysneq128128v1 1.45 1.50 1.53 T:deoxysneq256128v1 1.53 1.54 1.56 T:deoxysi256v141 2.24 2.32 2.38 T:lunarkeyakv2 2.39 2.49 2.51 T:colm0v1 2.54 2.55 2.57 T:aes128gcmv1 2.71 2.75 2.77 T:deoxysii128v141 2.74 2.76 2.77 T:norx6441v3 2.81 2.82 2.84 aes256gcmv1 2.81 2.83 2.85 T:norx6441v2 2.88 2.90 2.93 T:deoxyseq128128v1 3.03 3.05 3.07 T:seakeyakv2 3.19 3.20 3.22 T:deoxysii256v141 3.17 3.21 3.23 T:oceankeyakv2 3.21 3.29 3.33 T:deoxyseq256128v1 3.31 3.33 3.34 T:norx6441v1 3.85 3.86 3.86 T:norx3241v3 3.87 3.89 3.90 T:norx3241v2 4.19 4.23 4.26 T:norx6461v3 4.23 4.24 4.27 T:norx6461v2 4.28 4.31 4.34 T:norx6444v3 4.31 4.33 4.35 T:norx6444v2 4.63 4.65 4.67 T:norx3241v1 4.96 5.01 5.04 T:norx6444v1 5.01 5.03 5.04 T:norx6461v1 5.12 5.14 5.17 T:lakekeyakv2 5.10 5.15 5.20 T:lakekeyakv1 5.20 5.21 5.21 T:aes128n12t8silcv2 5.21 5.21 5.21 T:aes128n8t8clocv2 5.20 5.21 5.22 T:aes128n12t8silcv3 5.20 5.21 5.21 T:aes128n12t8clocv3 5.21 5.21 5.22 T:aes128n12t8clocv2 5.21 5.21 5.22 T:aes128n8t8silcv2 5.76 5.79 5.81 T:norx3261v3 5.81 5.83 5.86 T:norx3261v2 7.58 7.60 7.62 T:norx3261v1 7.73 7.77 7.79 T:acorn128v2 7.98 8.01 8.03 T:acorn128v3 8.47 8.59 8.72 T:ascon128av11 8.59 8.62 8.64 T:ascon96v1 8.78 8.81 8.84 ascon128av12 9.61 9.62 9.64 T:ketjemajorv2 10.36 10.37 10.37 T:aesjambuv1 10.97 11.00 11.02 T:ketjeminorv2 12.80 12.82 12.84 T:riverkeyakv2 12.84 12.86 12.88 ascon128v12 12.90 12.91 12.92 T:ascon128v11 12.86 12.92 12.93 T:ascon128v1 14.66 14.66 14.67 T:twine80n6t4clocv3 15.36 15.37 15.40 T:twine80n6t4clocv2 16.14 16.16 16.18 T:aes128otrpv1 16.11 16.17 16.19 T:aes128otrsv2 16.14 16.17 16.20 T:aes128otrpv2 16.15 16.19 16.23 T:aes128otrsv1 21.04 21.13 21.32 T:aes256otrpv1 21.11 21.14 21.17 T:aes256otrpv2 21.79 21.83 21.90 T:aes256otrsv1 21.78 21.85 22.24 T:aes256otrsv2 25.96 25.99 26.02 T:proest256otrv1 26.72 26.75 26.78 T:aes128n8clocv1 26.63 26.83 28.60 T:aes128n12clocv1 27.47 27.50 27.54 T:aeadaes128ocbtaglen64v1 27.51 27.56 27.62 T:aeadaes128ocbtaglen96v1 31.70 31.73 31.76 T:ketjesrv1 32.44 32.48 32.52 T:aeadaes192ocbtaglen96v1 32.45 32.50 32.54 T:aeadaes192ocbtaglen64v1 33.22 33.24 33.28 T:ketjesrv2 37.40 37.46 37.58 T:aeadaes256ocbtaglen96v1 37.41 37.47 37.61 T:aeadaes256ocbtaglen64v1 60.41 60.47 60.74 T:colm127v1 62.31 62.97 63.08 T:proest128otrv1 66.16 66.30 66.51 T:ketjejrv1 72.02 72.05 72.08 T:present80n6t4silcv3 88.16 88.26 88.70 T:deoxysneq128128v13 108.84 109.04 109.30 T:ketjejrv2 119.32 119.40 119.49 T:led80n6t4silcv3 135.04 135.11 135.28 T:deoxysneq256128v13 178.49 179.32 181.37 T:deoxyseq128128v13 191.70 192.22 193.12 T:aezv1 271.55 271.91 272.39 T:deoxyseq256128v13 422.66 432.45 434.74 T:acorn128 5467.71 5469.57 5472.63 T:present80n6t4silcv2 5468.63 5473.02 5476.30 T:present80n6silcv1 8365.43 8376.52 8388.20 T:led80n6silcv1 8367.79 8381.25 8397.36 T:led80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.38 0.38 0.39 T:aegis128l 0.39 0.40 0.40 aegis128l 0.43 0.45 0.46 T:tiaoxinv1 0.44 0.45 0.47 T:tiaoxinv2 0.59 0.59 0.60 T:aegis128 0.62 0.63 0.63 aegis256 0.26? 0.81? 1.37? T:aeadaes128ocbtaglen128v1 0.85 0.86 0.87 T:aes128otrcv3 0.86 0.86 0.87 T:aes128otrsv3 0.91 0.92 0.94 T:morus1280128v2 0.91 0.92 0.94 T:morus1280128v1 0.92 0.93 0.95 T:aes128otrpv3 -0.16? 0.94? 1.51? T:aeadaes192ocbtaglen128v1 0.93 0.94 0.96 T:aezv4 0.94 0.95 0.96 T:morus1280256v1 0.94 0.95 0.96 T:morus1280256v2 0.94 0.96 0.97 T:aezv3 0.95 0.96 0.97 T:aezv5 1.09 1.09 1.10 T:aes256otrcv3 1.09 1.09 1.10 T:aes256otrsv3 1.15 1.16 1.16 T:morus640128v1 1.17 1.18 1.18 T:morus640128v2 1.18 1.18 1.19 T:aes256otrpv3 1.19 1.21 1.23 T:aeadaes256ocbtaglen128v1 1.51 1.54 1.58 T:deoxysi128v141 1.58 1.60 1.62 T:deoxysneq128128v1 1.77 1.79 1.81 T:deoxysneq256128v1 1.79 1.80 1.82 T:deoxysi256v141 2.39 2.44 2.49 T:lunarkeyakv2 2.48 2.50 2.52 T:colm0v1 2.75 2.77 2.79 T:norx6441v2 2.74 2.77 2.79 T:deoxysii128v141 2.76 2.79 2.82 T:norx6441v3 3.10 3.11 3.12 T:aes128gcmv1 3.16 3.18 3.19 T:seakeyakv2 3.17 3.18 3.21 T:deoxysii256v141 3.28 3.30 3.33 T:oceankeyakv2 3.23 3.32 3.38 T:deoxyseq128128v1 3.33 3.36 3.39 T:norx6441v1 3.57 3.62 3.67 T:deoxyseq256128v1 3.75 3.76 3.77 aes256gcmv1 3.79 3.80 3.80 T:norx3241v3 3.80 3.82 3.83 T:norx3241v2 4.20 4.21 4.23 T:norx6461v2 4.23 4.25 4.27 T:norx6461v3 4.29 4.30 4.33 T:norx6444v2 4.29 4.31 4.33 T:norx6444v3 4.54 4.57 4.59 T:norx3241v1 4.90 4.94 4.99 T:lakekeyakv1 4.94 4.98 5.01 T:norx6444v1 5.10 5.12 5.14 T:norx6461v1 5.12 5.12 5.13 T:aes128n12t8clocv2 5.12 5.12 5.13 T:aes128n12t8clocv3 5.12 5.13 5.13 T:aes128n8t8silcv2 5.12 5.13 5.13 T:aes128n12t8silcv2 5.12 5.13 5.14 T:aes128n12t8silcv3 5.12 5.13 5.14 T:aes128n8t8clocv2 5.13 5.15 5.18 T:lakekeyakv2 5.70 5.72 5.74 T:norx3261v3 5.73 5.76 5.80 T:norx3261v2 7.39 7.41 7.42 T:norx3261v1 7.97 8.00 8.05 T:acorn128v2 7.99 8.01 8.03 T:acorn128v3 8.60 8.63 8.65 T:ascon128av11 8.66 8.69 8.71 T:ketjemajorv2 8.69 8.71 8.71 ascon128av12 8.71 8.74 8.77 T:ascon96v1 10.71 10.71 10.72 T:aesjambuv1 11.50 11.54 11.63 T:ketjeminorv2 12.79 12.80 12.83 ascon128v12 12.80 12.83 12.86 T:ascon128v11 12.83 12.85 12.87 T:ascon128v1 12.94 12.96 12.97 T:riverkeyakv2 14.55 14.57 14.58 T:twine80n6t4clocv3 15.36 15.40 15.42 T:twine80n6t4clocv2 16.45 16.49 16.56 T:aes128otrsv1 16.45 16.49 16.53 T:aes128otrpv1 16.51 16.56 16.63 T:aes128otrsv2 16.51 16.57 16.65 T:aes128otrpv2 21.44 21.48 21.50 T:aes256otrpv2 21.43 21.50 21.53 T:aes256otrpv1 22.17 22.21 22.62 T:aes256otrsv2 22.18 22.24 22.32 T:aes256otrsv1 25.79 25.88 26.65 T:aes128n12clocv1 25.86 25.91 25.94 T:proest256otrv1 26.35 26.39 26.44 T:aes128n8clocv1 32.70 32.74 32.79 T:ketjesrv1 33.15 33.19 33.29 T:ketjesrv2 36.74 36.81 36.88 T:aeadaes128ocbtaglen64v1 36.78 36.84 36.91 T:aeadaes128ocbtaglen96v1 43.74 43.80 43.83 T:aeadaes192ocbtaglen64v1 43.80 43.86 43.94 T:aeadaes192ocbtaglen96v1 50.77 50.85 50.91 T:aeadaes256ocbtaglen64v1 50.80 50.88 50.96 T:aeadaes256ocbtaglen96v1 58.66 58.71 58.73 T:proest128otrv1 67.17 67.28 67.43 T:ketjejrv1 72.02 72.05 72.09 T:present80n6t4silcv3 78.85 78.91 79.00 T:colm127v1 108.39 108.64 108.93 T:ketjejrv2 118.90 118.98 119.05 T:led80n6t4silcv3 122.18 122.29 122.57 T:deoxysneq128128v13 173.17 173.40 173.72 T:deoxysneq256128v13 178.22 179.24 181.49 T:deoxyseq128128v13 191.56 192.01 192.76 T:aezv1 271.36 271.98 272.67 T:deoxyseq256128v13 447.04 460.00 462.18 T:acorn128 5469.30 5471.49 5474.28 T:present80n6t4silcv2 5469.88 5472.58 5475.70 T:present80n6silcv1 8372.78 8384.23 8398.50 T:led80n6silcv1 8385.55 8396.07 8405.78 T:led80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.36 0.37 0.38 T:aezv3 0.37 0.37 0.38 T:aezv4 0.37 0.38 0.39 T:aegis128l 0.38 0.39 0.39 T:aezv5 0.44 0.45 0.46 T:tiaoxinv1 0.44 0.45 0.46 T:tiaoxinv2 0.45 0.46 0.46 aegis128l 0.59 0.59 0.60 T:aegis128 0.68 0.69 0.70 aegis256 0.26? 0.81? 1.36? T:aeadaes128ocbtaglen128v1 0.85 0.86 0.87 T:aes128otrcv3 0.85 0.86 0.87 T:aes128otrsv3 0.91 0.91 0.92 T:morus1280128v2 0.92 0.93 0.93 T:aes128otrpv3 0.91 0.93 0.94 T:morus1280128v1 0.38? 0.94? 2.04? T:aeadaes192ocbtaglen128v1 0.94 0.95 0.96 T:morus1280256v1 0.94 0.95 0.96 T:morus1280256v2 1.09 1.09 1.10 T:aes256otrcv3 1.09 1.09 1.10 T:aes256otrsv3 1.15 1.16 1.16 T:morus640128v1 1.17 1.17 1.18 T:morus640128v2 1.17 1.18 1.19 T:aes256otrpv3 1.20 1.23 1.25 T:aeadaes256ocbtaglen128v1 1.52 1.53 1.55 T:deoxysi128v141 1.56 1.58 1.61 T:deoxysneq128128v1 1.77 1.78 1.80 T:deoxysi256v141 1.77 1.79 1.80 T:deoxysneq256128v1 2.44 2.47 2.51 T:lunarkeyakv2 2.48 2.51 2.53 T:colm0v1 2.74 2.75 2.77 T:deoxysii128v141 2.76 2.77 2.80 T:norx6441v3 2.75 2.77 2.80 T:norx6441v2 3.10 3.11 3.12 T:aes128gcmv1 3.17 3.20 3.21 T:deoxysii256v141 3.21 3.23 3.25 T:seakeyakv2 3.27 3.34 3.38 T:deoxyseq128128v1 3.34 3.36 3.38 T:oceankeyakv2 3.34 3.36 3.38 T:norx6441v1 3.57 3.62 3.66 T:deoxyseq256128v1 3.76 3.77 3.78 aes256gcmv1 3.77 3.80 3.81 T:norx3241v3 3.83 3.84 3.85 T:norx3241v2 4.19 4.22 4.25 T:norx6461v2 4.24 4.26 4.29 T:norx6461v3 4.33 4.36 4.39 T:norx6444v3 4.35 4.37 4.39 T:norx6444v2 4.54 4.57 4.59 T:norx3241v1 4.95 4.99 5.02 T:lakekeyakv1 4.99 5.02 5.05 T:norx6444v1 5.10 5.12 5.14 T:norx6461v1 5.12 5.12 5.14 T:aes128n12t8clocv3 5.12 5.12 5.14 T:aes128n12t8clocv2 5.12 5.13 5.13 T:aes128n12t8silcv2 5.12 5.13 5.14 T:aes128n8t8silcv2 5.12 5.13 5.14 T:aes128n8t8clocv2 5.12 5.13 5.14 T:aes128n12t8silcv3 5.18 5.21 5.23 T:lakekeyakv2 5.72 5.72 5.73 T:norx3261v3 5.76 5.78 5.79 T:norx3261v2 7.39 7.40 7.41 T:norx3261v1 7.98 8.01 8.03 T:acorn128v2 7.99 8.01 8.03 T:acorn128v3 8.61 8.63 8.65 T:ascon128av11 8.67 8.70 8.73 T:ketjemajorv2 8.69 8.70 8.72 ascon128av12 8.73 8.74 8.75 T:ascon96v1 10.71 10.71 10.72 T:aesjambuv1 11.56 11.73 11.92 T:ketjeminorv2 12.79 12.80 12.84 ascon128v12 12.80 12.83 12.86 T:ascon128v11 12.82 12.85 12.87 T:ascon128v1 13.00 13.01 13.03 T:riverkeyakv2 14.55 14.57 14.59 T:twine80n6t4clocv3 15.36 15.39 15.42 T:twine80n6t4clocv2 16.49 16.53 16.60 T:aes128otrsv1 16.51 16.56 16.58 T:aes128otrpv1 16.56 16.60 16.68 T:aes128otrsv2 16.57 16.62 16.72 T:aes128otrpv2 21.50 21.52 21.55 T:aes256otrpv2 21.48 21.57 21.61 T:aes256otrpv1 22.24 22.28 22.68 T:aes256otrsv2 22.24 22.29 22.37 T:aes256otrsv1 25.79 25.88 26.64 T:aes128n12clocv1 25.86 25.91 25.94 T:proest256otrv1 26.37 26.39 26.43 T:aes128n8clocv1 32.72 32.79 32.83 T:ketjesrv1 33.25 33.32 33.45 T:ketjesrv2 36.77 36.83 36.92 T:aeadaes128ocbtaglen64v1 36.77 36.83 36.91 T:aeadaes128ocbtaglen96v1 43.78 43.82 43.89 T:aeadaes192ocbtaglen64v1 43.82 43.90 43.99 T:aeadaes192ocbtaglen96v1 50.78 50.85 50.91 T:aeadaes256ocbtaglen64v1 50.82 50.89 50.97 T:aeadaes256ocbtaglen96v1 58.67 58.71 58.74 T:proest128otrv1 67.20 67.34 67.52 T:ketjejrv1 72.01 72.04 72.07 T:present80n6t4silcv3 77.67 77.71 77.78 T:colm127v1 108.45 108.64 108.94 T:ketjejrv2 118.92 118.98 119.06 T:led80n6t4silcv3 122.25 122.40 122.57 T:deoxysneq128128v13 173.29 173.51 173.79 T:deoxysneq256128v13 178.73 179.98 182.09 T:deoxyseq128128v13 191.21 191.51 192.30 T:aezv1 271.39 272.03 272.67 T:deoxyseq256128v13 447.10 459.94 462.23 T:acorn128 5468.97 5471.24 5473.57 T:present80n6t4silcv2 5467.42 5471.55 5473.62 T:present80n6silcv1 8369.92 8383.60 8396.87 T:led80n6silcv1 8385.48 8393.57 8404.13 T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.28 0.29 0.30 T:tiaoxinv1 0.28 0.29 0.30 T:tiaoxinv2 0.33 0.34 0.35 T:aegis128l 0.35 0.35 0.36 aegis128l 0.55 0.55 0.56 T:aegis128 0.57 0.58 0.58 aegis256 0.67 0.68 0.68 T:aezv4 0.68 0.69 0.70 T:aezv3 0.68 0.69 0.70 T:aezv5 0.45? 0.81? 1.11? T:aeadaes128ocbtaglen128v1 0.86 0.87 0.89 T:morus1280128v1 0.87 0.87 0.88 T:aes128otrcv3 0.86 0.88 0.89 T:morus1280128v2 0.91 0.92 0.93 T:morus1280256v2 0.60? 0.93? 1.26? T:aeadaes192ocbtaglen128v1 0.95 0.95 0.96 T:morus1280256v1 0.97 0.98 0.98 T:aes128otrpv3 1.09 1.10 1.10 T:aes256otrcv3 1.12 1.13 1.13 T:morus640128v1 1.13 1.14 1.14 T:morus640128v2 1.26 1.26 1.27 T:aes256otrpv3 1.33 1.35 1.37 T:deoxysi128v141 1.34 1.37 1.40 T:deoxysneq128128v1 1.54 1.54 1.56 T:deoxysneq256128v1 1.60 1.61 1.63 T:deoxysi256v141 1.60 1.61 1.62 T:aeadaes256ocbtaglen128v1 1.74 1.78 1.80 T:colm0v1 2.16 2.18 2.21 T:deoxyseq128128v1 2.17 2.18 2.19 T:aes128gcmv1 2.22 2.23 2.25 T:deoxysii128v141 2.30 2.31 2.32 aes256gcmv1 2.49 2.50 2.52 T:deoxysii256v141 2.48 2.56 2.61 T:deoxyseq256128v1 2.59 2.60 2.61 T:seakeyakv2 2.69 2.70 2.72 T:oceankeyakv2 2.80 2.81 2.83 T:norx6441v3 2.81 2.83 2.84 T:norx6441v2 2.99 3.00 3.00 T:aes128otrsv3 3.16 3.21 3.24 T:lunarkeyakv2 3.36 3.37 3.39 T:norx6441v1 3.85 3.86 3.87 T:norx3241v2 3.87 3.88 3.89 T:norx3241v3 4.11 4.11 4.11 T:aes256otrsv3 4.22 4.24 4.26 T:norx6461v2 4.24 4.26 4.27 T:norx6461v3 4.25 4.26 4.28 T:norx6444v3 4.25 4.26 4.28 T:norx6444v2 4.56 4.57 4.59 T:lakekeyakv2 4.65 4.66 4.67 T:norx3241v1 4.85 4.88 4.90 T:lakekeyakv1 4.92 4.94 4.96 T:norx6444v1 5.05 5.06 5.08 T:norx6461v1 5.16 5.17 5.17 T:aes128n8t8clocv2 5.16 5.17 5.17 T:aes128n12t8silcv3 5.16 5.17 5.17 T:aes128n8t8silcv2 5.16 5.17 5.17 T:aes128n12t8silcv2 5.16 5.17 5.17 T:aes128n12t8clocv2 5.17 5.17 5.17 T:aes128n12t8clocv3 5.77 5.78 5.80 T:norx3261v2 5.80 5.81 5.82 T:norx3261v3 7.58 7.59 7.61 T:norx3261v1 7.88 7.89 7.89 T:acorn128v3 8.00 8.01 8.03 T:acorn128v2 8.12 8.13 8.14 T:ketjemajorv2 8.59 8.60 8.61 T:ascon96v1 8.62 8.64 8.72 T:ascon128av11 8.70 8.72 8.74 ascon128av12 9.32 9.33 9.34 T:riverkeyakv2 9.97 9.98 10.00 T:ketjeminorv2 10.40 10.40 10.41 T:aesjambuv1 12.74 12.75 12.77 ascon128v12 12.71 12.78 12.81 T:ascon128v1 12.75 12.80 12.83 T:ascon128v11 14.45 14.46 14.47 T:twine80n6t4clocv3 15.13 15.22 15.27 T:twine80n6t4clocv2 15.51 15.55 15.56 T:aes128otrsv2 15.53 15.57 15.62 T:aes128otrsv1 15.61 15.62 15.65 T:aes128otrpv2 15.60 15.64 15.80 T:aes128otrpv1 20.10 20.13 20.33 T:aes256otrsv2 20.12 20.15 20.18 T:aes256otrsv1 20.31 20.33 20.35 T:aes128n8clocv1 20.26 20.35 21.26 T:aes128n12clocv1 20.50 20.55 20.77 T:aes256otrpv1 20.55 20.57 20.59 T:aes256otrpv2 26.12 26.16 26.21 T:proest256otrv1 27.04 27.05 27.07 T:aeadaes128ocbtaglen64v1 27.07 27.10 27.14 T:aeadaes128ocbtaglen96v1 28.87 28.89 28.91 T:ketjesrv1 30.80 30.81 30.84 T:ketjesrv2 32.04 32.07 32.10 T:aeadaes192ocbtaglen96v1 32.05 32.09 32.12 T:aeadaes192ocbtaglen64v1 36.94 36.97 37.01 T:aeadaes256ocbtaglen64v1 36.98 37.01 37.05 T:aeadaes256ocbtaglen96v1 44.49 44.55 44.70 T:colm127v1 60.60 61.34 61.44 T:proest128otrv1 62.17 62.25 62.35 T:ketjejrv1 71.49 71.50 71.53 T:present80n6t4silcv3 88.20 88.45 88.77 T:deoxysneq128128v13 106.24 106.35 106.64 T:ketjejrv2 118.35 118.40 118.47 T:led80n6t4silcv3 126.10 126.42 126.87 T:aezv1 133.81 134.47 135.84 T:deoxyseq128128v13 134.74 134.93 135.09 T:deoxysneq256128v13 203.12 203.47 204.25 T:deoxyseq256128v13 423.03 430.52 432.58 T:acorn128 4100.39 4102.43 4103.51 T:present80n6t4silcv2 4102.48 4104.35 4107.88 T:present80n6silcv1 6282.85 6286.96 6291.23 T:led80n6t4silcv2 6280.83 6289.88 6295.49 T:led80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.33 0.34 0.35 T:aegis128l 0.34 0.35 0.36 T:tiaoxinv1 0.34 0.35 0.36 T:tiaoxinv2 0.35 0.36 0.36 aegis128l 0.55 0.56 0.56 T:aegis128 0.58 0.58 0.58 aegis256 0.67 0.68 0.69 T:aezv4 0.68 0.68 0.69 T:aezv3 0.69 0.69 0.70 T:aezv5 0.48? 0.80? 1.11? T:aeadaes128ocbtaglen128v1 0.86 0.87 0.87 T:aes128otrcv3 0.87 0.87 0.88 T:morus1280128v1 0.87 0.87 0.89 T:morus1280128v2 0.89 0.90 0.91 T:morus1280256v2 0.90 0.90 0.91 T:morus1280256v1 0.61? 0.93? 1.50? T:aeadaes192ocbtaglen128v1 0.97 0.98 0.98 T:aes128otrpv3 1.08 1.09 1.09 T:aes256otrcv3 1.12 1.13 1.14 T:morus640128v2 1.13 1.14 1.14 T:morus640128v1 1.25 1.25 1.26 T:aes256otrpv3 1.45 1.47 1.48 T:deoxysi128v141 1.50 1.51 1.52 T:deoxysneq128128v1 1.60 1.62 1.64 T:aeadaes256ocbtaglen128v1 1.66 1.67 1.69 T:deoxysneq256128v1 1.70 1.70 1.72 T:deoxysi256v141 1.79 1.80 1.81 T:colm0v1 2.18 2.19 2.21 T:deoxysii128v141 2.37 2.38 2.40 T:deoxyseq128128v1 2.44 2.45 2.47 T:aes128gcmv1 2.50 2.52 2.54 T:deoxysii256v141 2.64 2.66 2.67 T:seakeyakv2 2.73 2.74 2.76 T:oceankeyakv2 2.71 2.75 2.80 T:deoxyseq256128v1 2.78 2.78 2.79 aes256gcmv1 2.77 2.79 2.80 T:norx6441v3 2.78 2.79 2.80 T:norx6441v2 2.99 2.99 3.00 T:aes128otrsv3 3.28 3.31 3.34 T:lunarkeyakv2 3.36 3.37 3.39 T:norx6441v1 3.83 3.83 3.84 T:norx3241v3 3.82 3.84 3.85 T:norx3241v2 4.11 4.11 4.11 T:aes256otrsv3 4.19 4.21 4.23 T:norx6461v2 4.20 4.23 4.25 T:norx6461v3 4.25 4.26 4.28 T:norx6444v2 4.25 4.26 4.27 T:norx6444v3 4.54 4.55 4.56 T:lakekeyakv2 4.60 4.61 4.61 T:norx3241v1 4.72 4.75 4.80 T:lakekeyakv1 4.90 4.91 4.93 T:norx6444v1 5.08 5.09 5.11 T:norx6461v1 5.12 5.12 5.13 T:aes128n12t8clocv2 5.12 5.12 5.13 T:aes128n8t8clocv2 5.12 5.12 5.13 T:aes128n8t8silcv2 5.12 5.13 5.13 T:aes128n12t8silcv3 5.12 5.13 5.13 T:aes128n12t8clocv3 5.12 5.13 5.13 T:aes128n12t8silcv2 5.75 5.76 5.77 T:norx3261v3 5.77 5.79 5.80 T:norx3261v2 7.50 7.52 7.52 T:norx3261v1 7.63 7.64 7.67 T:ketjemajorv2 7.75 7.76 7.78 T:acorn128v2 8.13 8.14 8.14 T:acorn128v3 8.59 8.61 8.63 T:ascon128av11 8.61 8.63 8.66 ascon128av12 8.67 8.69 8.71 T:ascon96v1 9.38 9.39 9.39 T:riverkeyakv2 10.24 10.25 10.29 T:ketjeminorv2 10.57 10.58 10.58 T:aesjambuv1 12.73 12.75 12.77 ascon128v12 12.76 12.78 12.79 T:ascon128v11 12.77 12.79 12.80 T:ascon128v1 14.40 14.42 14.43 T:twine80n6t4clocv3 15.20 15.26 15.28 T:twine80n6t4clocv2 15.71 15.74 15.77 T:aes128otrsv2 15.70 15.74 15.76 T:aes128otrsv1 15.76 15.79 15.85 T:aes128otrpv1 15.79 15.83 15.86 T:aes128otrpv2 19.85 19.92 20.27 T:aes128n12clocv1 20.12 20.14 20.16 T:aes128n8clocv1 20.28 20.32 20.52 T:aes256otrsv2 20.31 20.34 20.39 T:aes256otrsv1 20.68 20.73 20.84 T:aes256otrpv1 20.72 20.74 20.76 T:aes256otrpv2 26.09 26.13 26.16 T:proest256otrv1 29.39 29.41 29.43 T:ketjesrv1 30.75 30.80 30.88 T:ketjesrv2 31.76 31.80 31.84 T:aeadaes128ocbtaglen64v1 31.74 31.80 31.85 T:aeadaes128ocbtaglen96v1 37.72 37.77 37.84 T:aeadaes192ocbtaglen96v1 37.79 37.82 37.85 T:aeadaes192ocbtaglen64v1 43.73 43.78 43.81 T:aeadaes256ocbtaglen64v1 43.74 43.78 43.83 T:aeadaes256ocbtaglen96v1 53.70 53.75 53.80 T:colm127v1 58.06 58.08 58.12 T:proest128otrv1 62.64 62.73 62.88 T:ketjejrv1 71.48 71.51 71.53 T:present80n6t4silcv3 104.81 105.23 105.81 T:deoxysneq128128v13 106.09 106.30 111.02 T:ketjejrv2 118.34 118.41 118.48 T:led80n6t4silcv3 126.15 126.47 127.18 T:aezv1 133.86 134.25 134.98 T:deoxyseq128128v13 153.88 154.07 154.44 T:deoxysneq256128v13 203.01 203.31 203.84 T:deoxyseq256128v13 435.86 443.70 445.77 T:acorn128 4101.23 4103.06 4104.24 T:present80n6t4silcv2 4102.10 4104.64 4107.46 T:present80n6silcv1 6282.60 6288.20 6294.79 T:led80n6silcv1 6283.27 6289.61 6296.04 T:led80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.33 0.34 0.34 T:aegis128l 0.34 0.35 0.36 T:tiaoxinv2 0.34 0.35 0.36 T:tiaoxinv1 0.38 0.38 0.39 aegis128l 0.39 0.39 0.40 T:aezv4 0.39 0.39 0.40 T:aezv3 0.40 0.40 0.41 T:aezv5 0.56 0.56 0.56 T:aegis128 0.61 0.61 0.62 aegis256 0.51? 0.79? 1.09? T:aeadaes128ocbtaglen128v1 0.86 0.86 0.87 T:aes128otrcv3 0.88 0.88 0.88 T:morus1280128v1 0.87 0.88 0.89 T:morus1280128v2 0.90 0.90 0.91 T:morus1280256v1 0.90 0.90 0.91 T:morus1280256v2 0.36? 0.93? 1.22? T:aeadaes192ocbtaglen128v1 0.97 0.98 0.98 T:aes128otrpv3 1.08 1.09 1.09 T:aes256otrcv3 1.12 1.13 1.14 T:morus640128v2 1.13 1.14 1.14 T:morus640128v1 1.25 1.25 1.26 T:aes256otrpv3 1.42 1.44 1.45 T:deoxysi128v141 1.51 1.52 1.53 T:deoxysneq128128v1 1.60 1.62 1.64 T:aeadaes256ocbtaglen128v1 1.67 1.67 1.69 T:deoxysneq256128v1 1.69 1.70 1.71 T:deoxysi256v141 1.79 1.80 1.81 T:colm0v1 2.19 2.20 2.21 T:deoxysii128v141 2.38 2.40 2.41 T:deoxyseq128128v1 2.45 2.46 2.46 T:aes128gcmv1 2.51 2.52 2.54 T:deoxysii256v141 2.67 2.68 2.69 T:seakeyakv2 2.72 2.75 2.78 T:deoxyseq256128v1 2.76 2.77 2.78 T:oceankeyakv2 2.78 2.78 2.79 aes256gcmv1 2.78 2.79 2.80 T:norx6441v3 2.78 2.79 2.80 T:norx6441v2 2.99 2.99 3.00 T:aes128otrsv3 3.31 3.34 3.38 T:lunarkeyakv2 3.36 3.37 3.38 T:norx6441v1 3.82 3.82 3.83 T:norx3241v2 3.84 3.85 3.85 T:norx3241v3 4.11 4.11 4.11 T:aes256otrsv3 4.19 4.21 4.23 T:norx6461v2 4.21 4.22 4.25 T:norx6461v3 4.27 4.28 4.29 T:norx6444v3 4.29 4.29 4.30 T:norx6444v2 4.56 4.58 4.59 T:lakekeyakv2 4.60 4.61 4.61 T:norx3241v1 4.75 4.79 4.82 T:lakekeyakv1 4.92 4.95 4.97 T:norx6444v1 5.09 5.10 5.11 T:norx6461v1 5.12 5.12 5.13 T:aes128n8t8clocv2 5.12 5.12 5.13 T:aes128n12t8silcv2 5.12 5.13 5.13 T:aes128n8t8silcv2 5.12 5.13 5.13 T:aes128n12t8silcv3 5.12 5.13 5.13 T:aes128n12t8clocv2 5.12 5.13 5.13 T:aes128n12t8clocv3 5.75 5.76 5.78 T:norx3261v3 5.75 5.77 5.79 T:norx3261v2 7.50 7.51 7.52 T:norx3261v1 7.64 7.67 7.70 T:ketjemajorv2 7.75 7.75 7.77 T:acorn128v2 8.13 8.14 8.14 T:acorn128v3 8.60 8.61 8.62 T:ascon128av11 8.62 8.65 8.69 ascon128av12 8.66 8.67 8.70 T:ascon96v1 9.40 9.41 9.42 T:riverkeyakv2 10.27 10.28 10.31 T:ketjeminorv2 10.57 10.57 10.58 T:aesjambuv1 12.73 12.74 12.76 ascon128v12 12.75 12.77 12.79 T:ascon128v1 12.75 12.77 12.79 T:ascon128v11 14.40 14.42 14.43 T:twine80n6t4clocv3 15.12 15.18 15.27 T:twine80n6t4clocv2 15.73 15.77 15.78 T:aes128otrsv1 15.74 15.77 15.81 T:aes128otrsv2 15.78 15.82 15.87 T:aes128otrpv1 15.83 15.87 15.90 T:aes128otrpv2 19.84 19.89 20.27 T:aes128n12clocv1 20.11 20.15 20.17 T:aes128n8clocv1 20.33 20.36 20.42 T:aes256otrsv1 20.31 20.37 20.56 T:aes256otrsv2 20.75 20.77 20.78 T:aes256otrpv2 20.72 20.78 20.87 T:aes256otrpv1 26.03 26.07 26.16 T:proest256otrv1 29.41 29.44 29.46 T:ketjesrv1 30.80 30.84 30.90 T:ketjesrv2 31.72 31.75 31.79 T:aeadaes128ocbtaglen64v1 31.73 31.78 31.84 T:aeadaes128ocbtaglen96v1 37.74 37.77 37.83 T:aeadaes192ocbtaglen96v1 37.78 37.82 37.85 T:aeadaes192ocbtaglen64v1 43.74 43.77 43.82 T:aeadaes256ocbtaglen64v1 43.74 43.78 43.85 T:aeadaes256ocbtaglen96v1 53.12 53.15 53.21 T:colm127v1 58.06 58.09 58.11 T:proest128otrv1 62.69 62.78 62.89 T:ketjejrv1 71.49 71.51 71.54 T:present80n6t4silcv3 105.00 105.60 105.95 T:deoxysneq128128v13 106.14 106.56 113.35 T:ketjejrv2 118.34 118.39 118.47 T:led80n6t4silcv3 125.87 126.26 126.63 T:aezv1 134.10 134.46 135.13 T:deoxyseq128128v13 153.95 154.13 154.38 T:deoxysneq256128v13 203.02 203.34 203.89 T:deoxyseq256128v13 436.12 443.59 445.47 T:acorn128 4101.59 4103.81 4105.54 T:present80n6t4silcv2 4102.04 4103.87 4105.75 T:present80n6silcv1 6280.61 6284.99 6292.66 T:led80n6silcv1 6285.41 6291.34 6296.79 T:led80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.22? 0.24? 0.27? T:tiaoxinv1 0.23? 0.25? 0.27? T:tiaoxinv2 0.29 0.29 0.30 T:aegis128l 0.30 0.31 0.32 aegis128l 0.40 0.41 0.42 T:aezv4 0.42 0.42 0.43 T:aezv3 0.42 0.42 0.43 T:aezv5 0.51 0.51 0.52 T:aegis128 0.53 0.53 0.54 aegis256 0.19? 0.79? 1.37? T:aeadaes128ocbtaglen128v1 0.81 0.81 0.83 T:morus1280128v1 0.81 0.82 0.86 T:morus1280128v2 0.86 0.87 0.87 T:aes128otrcv3 0.87 0.89 0.90 T:morus1280256v2 0.32? 0.92? 1.51? T:aeadaes192ocbtaglen128v1 0.92 0.92 0.93 T:morus1280256v1 1.01 1.02 1.03 T:aes128otrpv3 1.08 1.09 1.10 T:aes256otrcv3 1.09 1.11 1.12 T:colm0v1 1.11 1.12 1.12 T:morus640128v1 1.12 1.12 1.12 T:morus640128v2 1.29 1.30 1.32 T:deoxysii128v141 1.29 1.31 1.34 T:deoxyseq128128v1 1.32 1.33 1.34 T:aes256otrpv3 1.29 1.33 1.36 T:deoxysi128v141 1.32 1.35 1.37 T:deoxysneq128128v1 1.45 1.48 1.50 T:deoxysneq256128v1 1.47 1.50 1.53 T:deoxysii256v141 1.48 1.51 1.53 T:deoxysi256v141 1.51 1.56 1.60 T:deoxyseq256128v1 1.78 1.79 1.80 aes256gcmv1 1.80 1.81 1.82 T:aes128gcmv1 1.98 2.02 2.02 T:aeadaes256ocbtaglen128v1 2.06 2.10 2.15 T:lunarkeyakv2 2.08 2.11 2.14 T:oceankeyakv2 2.50 2.51 2.53 T:seakeyakv2 2.81 2.81 2.82 T:norx6441v2 2.83 2.85 2.88 T:norx6441v3 3.40 3.42 3.43 T:norx6441v1 3.82 3.84 3.86 T:norx3241v2 3.90 3.90 3.91 T:norx3241v3 4.07 4.09 4.11 T:lakekeyakv2 4.20 4.22 4.23 T:norx6461v2 4.21 4.22 4.25 T:norx6444v3 4.21 4.22 4.24 T:norx6444v2 4.23 4.27 4.29 T:norx6461v3 4.50 4.55 4.59 T:lakekeyakv1 4.65 4.66 4.68 T:norx3241v1 4.85 4.88 4.89 T:norx6444v1 5.08 5.09 5.11 T:norx6461v1 5.12 5.12 5.12 T:aes128n8t8silcv2 5.12 5.12 5.12 T:aes128n12t8silcv2 5.12 5.12 5.13 T:aes128n8t8clocv2 5.12 5.12 5.13 T:aes128n12t8clocv3 5.12 5.12 5.13 T:aes128n12t8silcv3 5.12 5.13 5.13 T:aes128otrsv3 5.12 5.13 5.13 T:aes128n12t8clocv2 5.73 5.76 5.78 T:norx3261v2 5.81 5.83 5.85 T:norx3261v3 6.62 6.66 6.69 T:ketjemajorv2 7.13 7.13 7.13 T:aes256otrsv3 7.61 7.63 7.65 T:norx3261v1 7.74 7.76 7.78 T:acorn128v3 8.24 8.26 8.28 T:acorn128v2 8.57 8.59 8.61 T:ascon96v1 8.62 8.63 8.64 ascon128av12 8.73 8.76 8.77 T:ascon128av11 8.76 8.77 8.78 T:riverkeyakv2 8.99 9.02 9.05 T:ketjeminorv2 10.43 10.44 10.45 T:aesjambuv1 12.58 12.61 12.63 ascon128v12 12.68 12.69 12.70 T:ascon128v1 12.67 12.69 12.69 T:ascon128v11 13.86 13.88 13.91 T:aes128n12clocv1 13.87 13.90 13.93 T:aes128n8clocv1 14.24 14.27 14.29 T:twine80n6t4clocv3 14.90 14.92 14.93 T:aes128otrsv2 14.87 14.93 15.16 T:twine80n6t4clocv2 14.93 14.95 15.03 T:aes128otrsv1 15.02 15.08 15.31 T:aes128otrpv1 15.07 15.09 15.11 T:aes128otrpv2 18.37 18.40 18.43 T:aes256otrsv2 18.37 18.41 18.47 T:aes256otrsv1 19.96 19.98 20.01 T:aes256otrpv2 19.95 20.00 20.22 T:aes256otrpv1 26.02 26.04 26.09 T:ketjesrv1 26.24 26.32 26.37 T:proest256otrv1 26.58 26.62 26.66 T:aeadaes128ocbtaglen64v1 26.61 26.67 26.73 T:aeadaes128ocbtaglen96v1 28.36 28.39 28.42 T:ketjesrv2 28.55 28.60 28.69 T:colm127v1 31.62 31.65 31.69 T:aeadaes192ocbtaglen96v1 31.65 31.69 31.74 T:aeadaes192ocbtaglen64v1 36.49 36.53 36.57 T:aeadaes256ocbtaglen64v1 36.51 36.57 36.59 T:aeadaes256ocbtaglen96v1 58.03 58.21 58.35 T:ketjejrv1 58.95 59.70 59.84 T:proest128otrv1 60.56 60.67 60.88 T:aezv1 70.93 70.95 70.99 T:present80n6t4silcv3 88.03 88.17 88.45 T:deoxysneq128128v13 87.71 88.40 89.28 T:deoxyseq128128v13 103.68 103.87 104.20 T:ketjejrv2 117.79 117.88 117.98 T:led80n6t4silcv3 134.29 134.61 134.88 T:deoxyseq256128v13 134.54 134.63 134.79 T:deoxysneq256128v13 422.56 428.36 431.04 T:acorn128 2734.78 2735.87 2738.03 T:present80n6t4silcv2 2735.04 2736.11 2738.36 T:present80n6silcv1 4187.25 4195.52 4204.53 T:led80n6silcv1 4189.86 4197.70 4203.60 T:led80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.22? 0.25? 0.27? T:tiaoxinv2 0.23? 0.25? 0.27? T:tiaoxinv1 0.29 0.30 0.31 T:aegis128l 0.30 0.30 0.31 aegis128l 0.41 0.41 0.42 T:aezv4 0.42 0.42 0.43 T:aezv3 0.42 0.42 0.43 T:aezv5 0.51 0.52 0.53 T:aegis128 0.52 0.53 0.53 aegis256 0.23? 0.79? 1.39? T:aeadaes128ocbtaglen128v1 0.83 0.83 0.84 T:morus1280128v2 0.83 0.83 0.84 T:morus1280128v1 0.86 0.86 0.87 T:morus1280256v1 0.86 0.86 0.87 T:morus1280256v2 0.86 0.87 0.87 T:aes128otrcv3 0.34? 0.91? 1.48? T:aeadaes192ocbtaglen128v1 1.01 1.02 1.03 T:aes128otrpv3 1.08 1.08 1.10 T:morus640128v2 1.08 1.09 1.10 T:aes256otrcv3 1.10 1.11 1.12 T:colm0v1 1.11 1.12 1.12 T:morus640128v1 1.27 1.29 1.31 T:deoxysi128v141 1.30 1.31 1.33 T:deoxysii128v141 1.30 1.32 1.33 T:deoxyseq128128v1 1.31 1.33 1.35 T:deoxysneq128128v1 1.31 1.33 1.34 T:aes256otrpv3 1.46 1.48 1.51 T:deoxysneq256128v1 1.47 1.49 1.51 T:deoxysii256v141 1.48 1.50 1.51 T:deoxysi256v141 1.50 1.53 1.58 T:deoxyseq256128v1 1.79 1.80 1.81 aes256gcmv1 1.80 1.81 1.83 T:aes128gcmv1 1.98 2.01 2.03 T:aeadaes256ocbtaglen128v1 2.04 2.09 2.13 T:lunarkeyakv2 2.08 2.11 2.13 T:oceankeyakv2 2.49 2.51 2.52 T:seakeyakv2 2.77 2.80 2.82 T:norx6441v3 2.79 2.81 2.82 T:norx6441v2 3.36 3.38 3.40 T:norx6441v1 3.81 3.82 3.85 T:norx3241v2 3.88 3.88 3.90 T:norx3241v3 4.07 4.08 4.10 T:lakekeyakv2 4.18 4.20 4.23 T:norx6461v3 4.20 4.21 4.24 T:norx6444v3 4.19 4.21 4.24 T:norx6461v2 4.22 4.23 4.24 T:norx6444v2 4.50 4.55 4.59 T:lakekeyakv1 4.64 4.65 4.66 T:norx3241v1 4.86 4.88 4.90 T:norx6444v1 5.05 5.05 5.07 T:norx6461v1 5.09 5.12 5.15 T:aes128n12t8clocv3 5.12 5.12 5.13 T:aes128n12t8silcv3 5.12 5.12 5.13 T:aes128n12t8silcv2 5.12 5.12 5.13 T:aes128n8t8clocv2 5.12 5.12 5.13 T:aes128n8t8silcv2 5.12 5.13 5.13 T:aes128n12t8clocv2 5.12 5.13 5.13 T:aes128otrsv3 5.79 5.79 5.80 T:norx3261v3 5.78 5.80 5.82 T:norx3261v2 6.60 6.66 6.71 T:ketjemajorv2 7.13 7.13 7.13 T:aes256otrsv3 7.60 7.61 7.63 T:norx3261v1 7.76 7.76 7.77 T:acorn128v2 8.24 8.26 8.28 T:acorn128v3 8.54 8.57 8.62 ascon128av12 8.57 8.61 8.64 T:ascon128av11 8.62 8.63 8.64 T:ascon96v1 8.76 8.77 8.80 T:riverkeyakv2 9.00 9.03 9.07 T:ketjeminorv2 10.44 10.44 10.44 T:aesjambuv1 12.64 12.67 12.69 ascon128v12 12.69 12.72 12.76 T:ascon128v1 12.67 12.73 12.74 T:ascon128v11 13.87 13.90 13.93 T:aes128n8clocv1 13.88 13.91 13.94 T:aes128n12clocv1 14.25 14.27 14.28 T:twine80n6t4clocv3 14.89 14.92 14.96 T:aes128otrsv2 14.92 14.97 15.03 T:aes128otrsv1 15.04 15.08 15.23 T:aes128otrpv1 15.07 15.10 15.14 T:aes128otrpv2 15.10 15.15 15.16 T:twine80n6t4clocv2 18.36 18.39 18.43 T:aes256otrsv2 18.35 18.40 18.51 T:aes256otrsv1 19.97 20.00 20.02 T:aes256otrpv2 19.95 20.00 20.14 T:aes256otrpv1 26.01 26.07 26.15 T:ketjesrv1 26.21 26.32 26.37 T:proest256otrv1 26.59 26.62 26.65 T:aeadaes128ocbtaglen64v1 26.62 26.68 26.71 T:aeadaes128ocbtaglen96v1 28.28 28.33 28.36 T:ketjesrv2 28.53 28.60 28.72 T:colm127v1 31.61 31.65 31.69 T:aeadaes192ocbtaglen96v1 31.66 31.69 31.73 T:aeadaes192ocbtaglen64v1 36.48 36.53 36.58 T:aeadaes256ocbtaglen64v1 36.50 36.54 36.58 T:aeadaes256ocbtaglen96v1 57.43 57.46 57.50 T:proest128otrv1 58.06 58.18 58.35 T:ketjejrv1 60.52 60.61 60.81 T:aezv1 70.92 70.95 70.98 T:present80n6t4silcv3 88.20 88.36 88.49 T:deoxysneq128128v13 87.79 88.37 89.28 T:deoxyseq128128v13 103.72 103.96 104.16 T:ketjejrv2 117.75 117.84 117.92 T:led80n6t4silcv3 134.28 134.44 134.65 T:deoxysneq256128v13 134.18 134.50 134.78 T:deoxyseq256128v13 424.10 427.25 429.12 T:acorn128 2734.24 2735.03 2736.47 T:present80n6t4silcv2 2734.67 2736.04 2738.88 T:present80n6silcv1 4197.72 4201.71 4205.22 T:led80n6silcv1 4196.77 4201.79 4204.87 T:led80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.23? 0.25? 0.27? T:tiaoxinv2 0.23? 0.25? 0.27? T:tiaoxinv1 0.29 0.30 0.31 T:aegis128l 0.31 0.31 0.32 aegis128l 0.41 0.41 0.42 T:aezv4 0.42 0.42 0.43 T:aezv3 0.41 0.42 0.43 T:aezv5 0.51 0.52 0.53 T:aegis128 0.52 0.53 0.53 aegis256 0.23? 0.78? 1.36? T:aeadaes128ocbtaglen128v1 0.82 0.83 0.84 T:morus1280128v2 0.83 0.83 0.84 T:morus1280128v1 0.86 0.86 0.87 T:morus1280256v2 0.86 0.86 0.87 T:morus1280256v1 0.86 0.87 0.88 T:aes128otrcv3 0.36? 0.92? 1.48? T:aeadaes192ocbtaglen128v1 1.02 1.02 1.03 T:aes128otrpv3 1.08 1.08 1.09 T:morus640128v2 1.08 1.09 1.10 T:aes256otrcv3 1.10 1.11 1.11 T:colm0v1 1.11 1.12 1.12 T:morus640128v1 1.28 1.30 1.31 T:deoxysi128v141 1.32 1.33 1.36 T:deoxysneq128128v1 1.33 1.33 1.35 T:aes256otrpv3 1.32 1.34 1.36 T:deoxysii128v141 1.31? 1.34? 1.66? T:deoxyseq128128v1 1.46 1.48 1.49 T:deoxysneq256128v1 1.48 1.49 1.51 T:deoxysi256v141 1.47 1.49 1.51 T:deoxysii256v141 1.52 1.56 1.60 T:deoxyseq256128v1 1.79 1.80 1.80 aes256gcmv1 1.79 1.80 1.82 T:aes128gcmv1 1.99 2.02 2.03 T:aeadaes256ocbtaglen128v1 2.06 2.10 2.14 T:lunarkeyakv2 2.10 2.11 2.13 T:oceankeyakv2 2.48 2.49 2.52 T:seakeyakv2 2.78 2.80 2.81 T:norx6441v3 2.80 2.81 2.81 T:norx6441v2 3.36 3.38 3.39 T:norx6441v1 3.82 3.83 3.87 T:norx3241v2 3.88 3.90 3.92 T:norx3241v3 4.07 4.09 4.10 T:lakekeyakv2 4.17 4.20 4.23 T:norx6461v2 4.18 4.20 4.22 T:norx6461v3 4.21 4.22 4.23 T:norx6444v2 4.21 4.22 4.24 T:norx6444v3 4.49 4.54 4.57 T:lakekeyakv1 4.63 4.65 4.66 T:norx3241v1 4.87 4.89 4.91 T:norx6444v1 5.04 5.05 5.06 T:norx6461v1 5.12 5.12 5.13 T:aes128n12t8silcv2 5.12 5.12 5.13 T:aes128n12t8clocv3 5.12 5.12 5.13 T:aes128n12t8silcv3 5.12 5.12 5.12 T:aes128n8t8silcv2 5.12 5.12 5.13 T:aes128n8t8clocv2 5.12 5.13 5.13 T:aes128n12t8clocv2 5.12 5.13 5.13 T:aes128otrsv3 5.75 5.78 5.81 T:norx3261v2 5.78 5.78 5.79 T:norx3261v3 6.62 6.67 6.72 T:ketjemajorv2 7.12 7.13 7.13 T:aes256otrsv3 7.58 7.60 7.62 T:norx3261v1 7.75 7.77 7.79 T:acorn128v2 8.25 8.26 8.28 T:acorn128v3 8.57 8.60 8.62 T:ascon128av11 8.58 8.62 8.63 ascon128av12 8.57 8.64 8.67 T:ascon96v1 8.75 8.77 8.78 T:riverkeyakv2 9.00 9.02 9.05 T:ketjeminorv2 10.44 10.44 10.44 T:aesjambuv1 12.64 12.65 12.68 ascon128v12 12.71 12.72 12.74 T:ascon128v11 12.69 12.72 12.74 T:ascon128v1 13.88 13.90 13.93 T:aes128n12clocv1 13.87 13.91 13.94 T:aes128n8clocv1 14.24 14.27 14.29 T:twine80n6t4clocv3 14.88 14.92 14.94 T:aes128otrsv2 14.93 14.96 15.02 T:aes128otrsv1 15.04 15.07 15.22 T:aes128otrpv1 15.04 15.08 15.13 T:aes128otrpv2 15.05 15.15 15.18 T:twine80n6t4clocv2 18.36 18.39 18.50 T:aes256otrsv1 18.37 18.40 18.43 T:aes256otrsv2 19.96 19.99 20.02 T:aes256otrpv2 19.97 20.02 20.14 T:aes256otrpv1 26.03 26.08 26.12 T:ketjesrv1 26.23 26.31 26.36 T:proest256otrv1 26.58 26.64 26.69 T:aeadaes128ocbtaglen96v1 26.60 26.66 26.70 T:aeadaes128ocbtaglen64v1 28.31 28.37 28.42 T:ketjesrv2 28.54 28.59 28.66 T:colm127v1 31.60 31.64 31.67 T:aeadaes192ocbtaglen96v1 31.66 31.68 31.74 T:aeadaes192ocbtaglen64v1 36.48 36.53 36.57 T:aeadaes256ocbtaglen64v1 36.51 36.53 36.56 T:aeadaes256ocbtaglen96v1 57.45 57.47 57.53 T:proest128otrv1 58.07 58.17 58.31 T:ketjejrv1 60.54 60.62 60.80 T:aezv1 70.90 70.94 71.01 T:present80n6t4silcv3 88.14 88.27 88.43 T:deoxysneq128128v13 87.70 88.29 88.81 T:deoxyseq128128v13 103.66 103.84 104.15 T:ketjejrv2 117.77 117.86 117.96 T:led80n6t4silcv3 134.37 134.52 134.63 T:deoxysneq256128v13 134.22 134.68 134.87 T:deoxyseq256128v13 424.27 427.26 428.92 T:acorn128 2734.44 2735.42 2738.58 T:present80n6t4silcv2 2734.63 2735.95 2737.72 T:present80n6silcv1 4199.95 4203.32 4206.09 T:led80n6t4silcv2 4199.13 4203.50 4206.55 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.40 0.40 0.42 T:tiaoxinv2 0.40 0.40 0.41 T:tiaoxinv1 0.41 0.41 0.42 T:aegis128l 0.42 0.43 0.44 aegis128l 0.62 0.62 0.62 T:aegis128 0.66 0.66 0.66 aegis256 0.82 0.82 0.83 T:aezv4 0.83 0.83 0.84 T:aezv5 0.83 0.84 0.84 T:aezv3 0.98? 0.99? 1.37? T:aeadaes128ocbtaglen128v1 1.09 1.09 1.11 T:morus1280128v1 1.10 1.11 1.12 T:morus1280128v2 1.13? 1.14? 1.87? T:aeadaes192ocbtaglen128v1 1.14 1.15 1.15 T:morus1280256v2 1.16 1.17 1.17 T:aes128otrpv3 1.17 1.18 1.19 T:morus1280256v1 1.24 1.25 1.25 T:aes128otrcv3 1.27 1.27 1.28 T:morus640128v1 1.30 1.30 1.30 T:morus640128v2 1.55 1.56 1.56 T:aes256otrpv3 1.60 1.60 1.62 T:deoxysi128v141 1.59 1.61 1.64 T:deoxysneq128128v1 1.66 1.66 1.67 T:aes256otrcv3 1.78 1.79 1.81 T:deoxysneq256128v1 1.80 1.81 1.81 T:aeadaes256ocbtaglen128v1 1.90 1.91 1.91 T:deoxysi256v141 2.08 2.09 2.16 T:colm0v1 2.39 2.39 2.40 T:aes128gcmv1 2.47 2.48 2.49 T:deoxysii128v141 2.45 2.48 2.49 T:deoxyseq128128v1 2.56 2.57 2.57 aes256gcmv1 2.83 2.84 2.85 T:deoxysii256v141 2.84 2.88 2.90 T:deoxyseq256128v1 3.18 3.19 3.19 T:aes128otrsv3 3.25 3.27 3.28 T:norx6441v3 3.29 3.30 3.32 T:norx6441v2 3.78 3.78 3.80 T:norx6441v1 3.81 3.82 3.82 T:seakeyakv2 4.17 4.18 4.20 T:norx3241v2 4.18 4.19 4.20 T:norx3241v3 4.38 4.39 4.39 T:aes256otrsv3 4.89 4.91 4.93 T:norx6461v3 4.91 4.92 4.93 T:norx6461v2 4.92 4.93 4.94 T:norx3241v1 5.00 5.01 5.02 T:lakekeyakv2 5.16 5.17 5.18 T:oceankeyakv2 5.26 5.26 5.26 T:aes128n8t8clocv2 5.26 5.26 5.26 T:aes128n12t8clocv3 5.26 5.26 5.26 T:aes128n12t8clocv2 5.30 5.30 5.30 T:aes128n12t8silcv2 5.30 5.30 5.31 T:aes128n8t8silcv2 5.30 5.30 5.31 T:aes128n12t8silcv3 5.67 5.68 5.69 T:norx6461v1 5.67 5.69 5.72 T:lakekeyakv1 6.07 6.09 6.10 T:norx6444v2 6.09 6.10 6.11 T:norx6444v3 6.25 6.26 6.27 T:norx3261v2 6.27 6.28 6.29 T:norx3261v3 6.96 6.98 6.99 T:norx6444v1 8.03 8.04 8.04 T:norx3261v1 8.80 8.81 8.81 T:ascon96v1 8.83 8.87 8.94 T:ascon128av11 8.85 8.87 8.90 T:lunarkeyakv2 8.92 8.93 8.95 ascon128av12 9.08 9.08 9.09 T:acorn128v3 9.33 9.34 9.35 T:acorn128v2 9.80 9.81 9.82 T:riverkeyakv2 10.17 10.18 10.18 T:ketjemajorv2 10.58 10.58 10.59 T:aesjambuv1 11.30 11.31 11.31 T:ketjeminorv2 12.93 12.94 12.95 ascon128v12 12.91 12.97 13.00 T:ascon128v1 12.96 12.99 13.00 T:ascon128v11 14.77 14.78 14.79 T:twine80n6t4clocv3 15.45 15.46 15.57 T:twine80n6t4clocv2 16.02 16.03 16.05 T:aes128otrsv2 16.04 16.06 16.08 T:aes128otrsv1 16.09 16.13 16.29 T:aes128otrpv1 16.11 16.13 16.14 T:aes128otrpv2 20.51 20.53 20.56 T:aes128n8clocv1 20.53 20.56 21.36 T:aes128n12clocv1 20.73 20.76 20.95 T:aes256otrsv2 20.74 20.77 20.83 T:aes256otrsv1 21.19 21.20 21.22 T:aes256otrpv2 21.16 21.22 21.40 T:aes256otrpv1 27.74 27.76 27.78 T:aeadaes128ocbtaglen64v1 27.78 27.80 27.85 T:aeadaes128ocbtaglen96v1 28.43 28.47 28.51 T:proest256otrv1 29.67 29.68 29.71 T:ketjesrv1 31.93 31.94 31.95 T:ketjesrv2 32.86 32.89 32.92 T:aeadaes192ocbtaglen96v1 32.88 32.90 32.92 T:aeadaes192ocbtaglen64v1 37.89 37.91 37.93 T:aeadaes256ocbtaglen64v1 37.93 37.94 37.96 T:aeadaes256ocbtaglen96v1 45.33 45.38 45.52 T:colm127v1 63.14 63.21 63.29 T:ketjejrv1 63.27 63.96 63.98 T:proest128otrv1 72.24 72.26 72.27 T:present80n6t4silcv3 89.18 89.26 89.38 T:deoxysneq128128v13 107.93 108.05 108.29 T:ketjejrv2 119.38 119.44 119.58 T:led80n6t4silcv3 123.49 123.67 124.04 T:aezv1 135.15 135.32 136.31 T:deoxyseq128128v13 135.47 135.68 135.87 T:deoxysneq256128v13 205.04 205.36 205.90 T:deoxyseq256128v13 478.30 484.81 486.07 T:acorn128 4122.85 4123.88 4124.97 T:present80n6t4silcv2 4124.50 4125.55 4127.01 T:present80n6silcv1 6304.80 6308.26 6313.33 T:led80n6t4silcv2 6306.19 6309.00 6312.57 T:led80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.41 0.41 0.42 T:aegis128l 0.43 0.43 0.44 aegis128l 0.45 0.46 0.47 T:tiaoxinv2 0.46 0.46 0.46 T:tiaoxinv1 0.62 0.63 0.63 T:aegis128 0.67 0.68 0.68 aegis256 0.81 0.82 0.82 T:aezv4 0.83 0.83 0.83 T:aezv5 0.83 0.84 0.84 T:aezv3 0.98? 0.99? 1.38? T:aeadaes128ocbtaglen128v1 1.09 1.10 1.10 T:morus1280128v1 1.10 1.11 1.11 T:morus1280128v2 1.12 1.13 1.14 T:morus1280256v1 1.12? 1.13? 1.52? T:aeadaes192ocbtaglen128v1 1.13 1.14 1.14 T:morus1280256v2 1.17 1.17 1.18 T:aes128otrpv3 1.25 1.26 1.27 T:aes128otrcv3 1.28 1.29 1.29 T:morus640128v1 1.30 1.30 1.30 T:morus640128v2 1.56 1.57 1.58 T:aes256otrpv3 1.69 1.69 1.70 T:aes256otrcv3 1.77 1.78 1.79 T:deoxysi128v141 1.82 1.83 1.85 T:aeadaes256ocbtaglen128v1 1.86 1.86 1.87 T:deoxysneq128128v1 1.98 1.98 1.99 T:deoxysneq256128v1 2.11 2.12 2.13 T:deoxysi256v141 2.12 2.12 2.13 T:colm0v1 2.48 2.51 2.53 T:deoxysii128v141 2.67 2.67 2.68 T:aes128gcmv1 2.75 2.79 2.81 T:deoxyseq128128v1 2.90 2.91 2.92 T:deoxysii256v141 3.03 3.04 3.04 aes256gcmv1 3.15 3.15 3.16 T:deoxyseq256128v1 3.19 3.20 3.20 T:aes128otrsv3 3.26 3.27 3.28 T:norx6441v2 3.26 3.28 3.30 T:norx6441v3 3.79 3.80 3.81 T:norx6441v1 3.87 3.87 3.89 T:seakeyakv2 4.16 4.17 4.18 T:norx3241v2 4.17 4.17 4.17 T:norx3241v3 4.42 4.42 4.42 T:aes256otrsv3 4.87 4.87 4.89 T:norx3241v1 4.89 4.90 4.92 T:norx6461v2 4.90 4.93 4.94 T:norx6461v3 4.98 4.99 4.99 T:lakekeyakv2 5.20 5.21 5.22 T:oceankeyakv2 5.22 5.22 5.22 T:aes128n12t8clocv2 5.22 5.22 5.22 T:aes128n12t8clocv3 5.22 5.22 5.23 T:aes128n8t8clocv2 5.26 5.26 5.26 T:aes128n8t8silcv2 5.26 5.26 5.27 T:aes128n12t8silcv2 5.26 5.26 5.27 T:aes128n12t8silcv3 5.55 5.57 5.62 T:lakekeyakv1 5.72 5.73 5.74 T:norx6461v1 6.07 6.08 6.09 T:norx6444v2 6.10 6.11 6.12 T:norx6444v3 6.22 6.23 6.24 T:norx3261v3 6.25 6.26 6.27 T:norx3261v2 6.93 6.94 6.95 T:norx6444v1 7.94 7.95 7.96 T:norx3261v1 8.80 8.81 8.82 T:ascon128av11 8.83 8.84 8.87 ascon128av12 8.87 8.89 8.91 T:ascon96v1 9.00 9.02 9.03 T:lunarkeyakv2 9.12 9.13 9.14 T:acorn128v2 9.32 9.33 9.33 T:acorn128v3 9.73 9.74 9.74 T:ketjemajorv2 9.86 9.86 9.87 T:riverkeyakv2 10.75 10.75 10.75 T:aesjambuv1 11.56 11.58 11.61 T:ketjeminorv2 12.92 12.93 12.95 ascon128v12 12.96 12.97 12.98 T:ascon128v11 12.96 12.97 12.99 T:ascon128v1 14.74 14.75 14.76 T:twine80n6t4clocv3 15.46 15.51 15.60 T:twine80n6t4clocv2 16.20 16.23 16.25 T:aes128otrsv1 16.22 16.24 16.27 T:aes128otrsv2 16.27 16.30 16.36 T:aes128otrpv1 16.30 16.33 16.35 T:aes128otrpv2 20.08 20.15 20.46 T:aes128n12clocv1 20.33 20.35 20.37 T:aes128n8clocv1 20.92 20.94 21.14 T:aes256otrsv2 20.93 20.97 21.03 T:aes256otrsv1 21.36 21.38 21.40 T:aes256otrpv2 21.35 21.39 21.48 T:aes256otrpv1 28.44 28.50 28.54 T:proest256otrv1 30.17 30.19 30.20 T:ketjesrv1 31.86 31.88 31.96 T:ketjesrv2 32.64 32.66 32.69 T:aeadaes128ocbtaglen64v1 32.64 32.67 32.70 T:aeadaes128ocbtaglen96v1 38.74 38.79 38.83 T:aeadaes192ocbtaglen96v1 38.80 38.83 38.87 T:aeadaes192ocbtaglen64v1 44.90 44.96 45.01 T:aeadaes256ocbtaglen96v1 44.93 44.96 44.99 T:aeadaes256ocbtaglen64v1 54.55 54.59 54.63 T:colm127v1 60.57 60.58 60.59 T:proest128otrv1 63.65 63.71 63.77 T:ketjejrv1 72.25 72.26 72.28 T:present80n6t4silcv3 105.64 105.84 106.11 T:deoxysneq128128v13 107.72 107.87 108.02 T:ketjejrv2 119.35 119.41 119.47 T:led80n6t4silcv3 123.68 123.86 124.17 T:aezv1 135.22 135.43 136.42 T:deoxyseq128128v13 154.56 154.83 154.99 T:deoxysneq256128v13 205.10 205.58 205.88 T:deoxyseq256128v13 490.78 497.90 498.80 T:acorn128 4123.46 4124.30 4125.50 T:present80n6t4silcv2 4123.75 4125.01 4128.90 T:present80n6silcv1 6301.60 6306.89 6311.60 T:led80n6silcv1 6305.54 6310.37 6313.15 T:led80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.41 0.41 0.41 T:aegis128l 0.45 0.46 0.46 T:tiaoxinv2 0.45 0.46 0.46 T:tiaoxinv1 0.50 0.50 0.51 T:aezv4 0.51 0.51 0.51 T:aezv5 0.52 0.52 0.52 T:aezv3 0.52 0.53 0.53 aegis128l 0.62 0.63 0.63 T:aegis128 0.71 0.71 0.71 aegis256 0.98? 0.98? 1.35? T:aeadaes128ocbtaglen128v1 1.10 1.10 1.10 T:morus1280128v1 1.10 1.11 1.12 T:morus1280128v2 1.12 1.13 1.13 T:morus1280256v1 1.12? 1.13? 1.84? T:aeadaes192ocbtaglen128v1 1.14 1.14 1.14 T:morus1280256v2 1.17 1.17 1.18 T:aes128otrpv3 1.25 1.26 1.27 T:aes128otrcv3 1.28 1.28 1.29 T:morus640128v1 1.29 1.30 1.30 T:morus640128v2 1.56 1.57 1.57 T:aes256otrpv3 1.69 1.69 1.69 T:aes256otrcv3 1.75 1.75 1.76 T:deoxysi128v141 1.82 1.83 1.84 T:aeadaes256ocbtaglen128v1 1.84 1.85 1.86 T:deoxysneq128128v1 1.96 1.97 1.98 T:deoxysneq256128v1 2.11 2.12 2.13 T:deoxysi256v141 2.11 2.12 2.13 T:colm0v1 2.50 2.52 2.54 T:deoxysii128v141 2.67 2.67 2.68 T:aes128gcmv1 2.77 2.81 2.82 T:deoxyseq128128v1 2.90 2.91 2.92 T:deoxysii256v141 3.03 3.04 3.04 aes256gcmv1 3.15 3.16 3.17 T:deoxyseq256128v1 3.19 3.20 3.20 T:aes128otrsv3 3.26 3.26 3.28 T:norx6441v2 3.26 3.28 3.29 T:norx6441v3 3.79 3.80 3.81 T:norx6441v1 3.90 3.91 3.93 T:seakeyakv2 4.16 4.17 4.18 T:norx3241v2 4.17 4.18 4.18 T:norx3241v3 4.42 4.42 4.42 T:aes256otrsv3 4.87 4.87 4.89 T:norx3241v1 4.87 4.89 4.92 T:norx6461v2 4.88 4.91 4.94 T:norx6461v3 5.01 5.01 5.03 T:lakekeyakv2 5.21 5.21 5.22 T:aes128n12t8clocv2 5.21 5.21 5.22 T:aes128n12t8clocv3 5.21 5.21 5.22 T:aes128n8t8clocv2 5.23 5.24 5.24 T:oceankeyakv2 5.26 5.26 5.27 T:aes128n12t8silcv2 5.26 5.26 5.26 T:aes128n8t8silcv2 5.26 5.26 5.26 T:aes128n12t8silcv3 5.57 5.59 5.65 T:lakekeyakv1 5.72 5.73 5.75 T:norx6461v1 6.12 6.13 6.13 T:norx6444v2 6.12 6.13 6.14 T:norx6444v3 6.23 6.23 6.25 T:norx3261v3 6.25 6.26 6.27 T:norx3261v2 6.96 6.97 6.98 T:norx6444v1 7.94 7.94 7.95 T:norx3261v1 8.80 8.81 8.82 T:ascon128av11 8.85 8.86 8.89 T:ascon96v1 8.83 8.86 8.89 ascon128av12 9.04 9.05 9.06 T:lunarkeyakv2 9.12 9.12 9.12 T:acorn128v2 9.32 9.32 9.33 T:acorn128v3 9.76 9.76 9.76 T:ketjemajorv2 9.88 9.89 9.90 T:riverkeyakv2 10.75 10.75 10.75 T:aesjambuv1 11.59 11.60 11.63 T:ketjeminorv2 12.93 12.94 12.96 ascon128v12 12.95 12.96 12.97 T:ascon128v11 12.95 12.96 12.98 T:ascon128v1 14.74 14.75 14.76 T:twine80n6t4clocv3 15.46 15.46 15.55 T:twine80n6t4clocv2 16.23 16.25 16.28 T:aes128otrsv1 16.24 16.27 16.31 T:aes128otrsv2 16.29 16.31 16.39 T:aes128otrpv1 16.34 16.36 16.38 T:aes128otrpv2 20.07 20.11 20.46 T:aes128n12clocv1 20.33 20.35 20.37 T:aes128n8clocv1 20.95 20.98 21.18 T:aes256otrsv2 20.96 21.01 21.06 T:aes256otrsv1 21.40 21.41 21.43 T:aes256otrpv2 21.40 21.43 21.51 T:aes256otrpv1 28.45 28.50 28.54 T:proest256otrv1 30.20 30.22 30.25 T:ketjesrv1 31.90 31.93 31.97 T:ketjesrv2 32.64 32.66 32.69 T:aeadaes128ocbtaglen64v1 32.64 32.66 32.69 T:aeadaes128ocbtaglen96v1 38.76 38.79 38.82 T:aeadaes192ocbtaglen96v1 38.76 38.81 38.86 T:aeadaes192ocbtaglen64v1 44.93 44.95 44.98 T:aeadaes256ocbtaglen64v1 44.91 44.95 45.01 T:aeadaes256ocbtaglen96v1 54.53 54.59 54.62 T:colm127v1 60.58 60.60 60.63 T:proest128otrv1 63.66 63.71 63.78 T:ketjejrv1 72.25 72.27 72.29 T:present80n6t4silcv3 105.62 105.83 106.15 T:deoxysneq128128v13 107.74 107.84 108.08 T:ketjejrv2 119.36 119.42 119.48 T:led80n6t4silcv3 123.58 123.68 123.84 T:aezv1 134.91 135.38 136.45 T:deoxyseq128128v13 154.52 154.91 155.03 T:deoxysneq256128v13 205.10 205.67 205.86 T:deoxyseq256128v13 491.61 497.88 498.81 T:acorn128 4123.46 4124.60 4126.00 T:present80n6t4silcv2 4123.97 4125.32 4127.68 T:present80n6silcv1 6301.88 6304.84 6312.68 T:led80n6silcv1 6304.93 6309.63 6314.09 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 2.05 2.06 2.13 T:aegis128 2.10 2.12 2.16 T:aegis128l 2.18 2.19 2.26 aegis128l 2.58 2.60 2.68 aegis256 2.94? 3.07? 3.34? T:tiaoxinv2 3.02 3.15 3.35 T:tiaoxinv1 3.71 3.76 3.81 T:aezv5 3.81 3.82 3.85 T:aezv4 3.95 3.98 4.00 T:aezv3 4.68 4.68 4.70 T:morus640128v1 4.92 5.01 5.05 T:morus640128v2 5.04 5.07 5.14 T:aes128otrpv3 5.18? 5.39? 15.26? T:aeadaes128ocbtaglen128v1 6.07 6.07 6.19 T:morus1280128v1 5.77? 6.17? 16.22? T:aeadaes192ocbtaglen128v1 6.29 6.32 6.38 T:deoxysneq128128v1 6.30 6.32 6.46 T:morus1280256v1 6.31 6.32 6.35 T:aes128otrsv3 6.30 6.34 6.46 T:morus1280128v2 6.40 6.43 6.56 T:morus1280256v2 6.19 6.47 6.54 T:aeadaes256ocbtaglen128v1 6.57 6.62 6.79 T:deoxysneq256128v1 6.75 6.80 6.86 T:deoxysi128v141 7.26 7.29 7.32 T:aes256otrpv3 7.30 7.32 7.35 T:aes128n12t8clocv3 7.31 7.33 7.37 T:aes128n8t8clocv2 7.33 7.35 7.45 T:colm0v1 7.35 7.38 7.52 T:aes128n12t8clocv2 7.41 7.47 7.79 T:aes128otrcv3 8.45 8.45 8.46 T:aes128n12t8silcv2 8.45 8.46 8.48 T:aes128n12t8silcv3 8.45 8.46 8.47 T:aes128n8t8silcv2 8.65 8.68 8.71 T:aes256otrsv3 9.56 9.64 9.84 T:aes128gcmv1 9.79 9.90 10.78 T:deoxysi256v141 10.41 10.44 10.48 T:aes256otrcv3 10.44 10.48 10.54 T:deoxyseq128128v1 10.48 10.59 10.68 T:norx3241v1 10.56 10.67 10.77 T:norx3241v2 10.63 10.68 10.75 T:norx3241v3 10.90 10.93 11.06 T:norx6441v1 11.34 11.39 11.43 T:deoxysii128v141 11.39 11.46 11.54 T:norx6441v3 11.41 11.47 11.54 T:deoxyseq256128v1 11.44 11.52 11.60 T:norx6441v2 11.60 11.66 11.85 aes256gcmv1 13.21 13.25 13.33 T:deoxysii256v141 13.36 13.39 13.40 T:ascon96v1 13.39 13.51 13.61 T:ascon128av11 13.40 13.55 13.79 ascon128av12 14.66 14.68 14.70 T:aesjambuv1 15.59 15.68 15.77 T:norx3261v2 15.52 15.73 15.84 T:norx3261v3 16.14 16.23 16.29 T:norx6461v1 16.36 16.41 16.63 T:norx6461v3 16.68 16.84 16.92 T:norx6461v2 16.88 16.97 17.00 T:norx3261v1 17.22 17.23 17.27 T:ascon128v11 17.22 17.23 17.28 T:ascon128v1 17.29 17.35 17.42 ascon128v12 18.87 19.00 19.38 T:lakekeyakv1 21.51 21.61 21.76 T:lakekeyakv2 22.11 22.16 22.23 T:twine80n6t4clocv3 22.83 22.87 22.93 T:riverkeyakv2 22.82 22.87 22.95 T:twine80n6t4clocv2 24.89 24.96 25.07 T:aes128n8clocv1 24.98 25.17 25.97 T:aes128n12clocv1 27.04 27.12 27.26 T:aes128otrsv1 27.16 27.23 27.34 T:aes128otrsv2 27.29 27.36 27.41 T:aes128otrpv2 27.42 27.51 27.61 T:aes128otrpv1 34.79 34.93 35.11 T:aes256otrsv1 34.83 34.96 35.21 T:aes256otrsv2 35.48 35.56 35.67 T:aes256otrpv2 35.84 35.96 36.13 T:aes256otrpv1 36.14 36.20 36.28 T:seakeyakv2 36.44 36.49 36.56 T:acorn128v3 39.54 39.86 39.91 T:acorn128v2 40.99 41.05 41.21 T:ketjeminorv2 43.38 43.53 43.67 T:norx6444v2 43.88 44.01 44.23 T:norx6444v3 44.01 44.14 44.33 T:aeadaes128ocbtaglen64v1 43.98 44.16 44.37 T:aeadaes128ocbtaglen96v1 47.90 48.09 48.39 T:ketjesrv1 49.49 49.69 49.83 T:norx6444v1 51.21 51.33 51.51 T:aeadaes192ocbtaglen96v1 51.49 51.70 51.89 T:aeadaes192ocbtaglen64v1 55.89 55.98 57.25 T:ketjemajorv2 57.63 57.85 58.05 T:ketjesrv2 57.84 57.96 58.23 T:oceankeyakv2 59.47 59.60 59.74 T:aeadaes256ocbtaglen64v1 59.40 59.61 59.85 T:aeadaes256ocbtaglen96v1 66.54 66.72 66.88 T:colm127v1 82.19 82.29 82.48 T:proest256otrv1 84.43 85.03 86.05 T:ketjejrv1 89.42 89.49 89.72 T:present80n6t4silcv3 100.27 100.51 100.89 T:deoxysneq128128v13 122.00 123.63 124.02 T:proest128otrv1 142.17 142.48 142.82 T:led80n6t4silcv3 143.21 143.49 143.79 T:aezv1 143.49 144.11 145.03 T:ketjejrv2 144.62 144.85 145.46 T:lunarkeyakv2 152.50 152.80 153.37 T:deoxysneq256128v13 167.56 167.99 168.85 T:deoxyseq128128v13 254.52 255.06 255.58 T:deoxyseq256128v13 1713.13 1731.04 1734.96 T:acorn128 4610.14 4611.03 4613.27 T:present80n6t4silcv2 4611.74 4612.77 4620.46 T:present80n6silcv1 6795.60 6840.35 6921.60 T:led80n6t4silcv2 6796.41 6847.03 6931.43 T:led80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 2.09 2.12 2.23 T:aegis128l 2.12 2.13 2.17 T:aegis128 2.34 2.36 2.45 aegis128l 2.79 2.84 2.90 aegis256 2.94 3.01 3.19 T:tiaoxinv1 2.90 3.01 3.15 T:tiaoxinv2 3.78 3.80 3.81 T:aezv5 3.84 3.86 3.89 T:aezv4 4.02 4.02 4.04 T:aezv3 4.66 4.67 4.72 T:morus640128v1 4.98 5.00 5.07 T:morus640128v2 5.21 5.24 5.29 T:aes128otrpv3 5.78? 5.88? 15.08? T:aeadaes128ocbtaglen128v1 6.13 6.14 6.30 T:morus1280128v1 6.19 6.25 6.41 T:morus1280256v1 6.39 6.45 6.57 T:morus1280128v2 6.46 6.50 6.63 T:morus1280256v2 6.63 6.68 6.81 T:aes128otrsv3 6.58? 6.68? 16.24? T:aeadaes192ocbtaglen128v1 6.74 6.97 7.03 T:aeadaes256ocbtaglen128v1 7.31 7.32 7.34 T:aes128n12t8clocv2 7.32 7.33 7.35 T:aes128n8t8clocv2 7.32 7.34 7.38 T:aes128n12t8clocv3 7.47 7.50 7.54 T:aes256otrpv3 7.79 7.83 8.15 T:aes128otrcv3 8.13 8.17 8.25 T:colm0v1 8.42 8.43 8.45 T:aes128n12t8silcv2 8.41 8.46 8.51 T:deoxysneq256128v1 8.43 8.47 8.52 T:aes128n12t8silcv3 8.46 8.47 8.48 T:aes128n8t8silcv2 9.41 9.43 9.45 T:aes256otrsv3 9.43 9.48 9.52 T:deoxysneq128128v1 9.58 9.68 9.84 T:aes128gcmv1 10.00 10.06 10.24 T:deoxysi128v141 10.66 10.74 10.78 T:norx3241v1 10.89 10.90 10.90 T:norx3241v3 10.85 10.91 10.97 T:norx3241v2 11.10 11.16 11.31 T:norx6441v1 11.15 11.20 11.23 T:aes256otrcv3 11.58 11.65 11.75 aes256gcmv1 11.62 11.80 11.86 T:norx6441v2 11.76 11.91 12.07 T:norx6441v3 12.45 12.48 12.53 T:deoxysii128v141 13.20 13.21 13.34 T:ascon128av11 13.25 13.33 13.45 T:ascon96v1 13.43 13.54 13.71 ascon128av12 13.84 13.88 13.92 T:deoxyseq256128v1 14.04 14.23 14.59 T:deoxyseq128128v1 14.33 14.36 14.43 T:deoxysi256v141 14.83 14.85 14.86 T:aesjambuv1 14.85 14.95 15.50 T:deoxysii256v141 15.82 15.82 15.85 T:norx3261v3 15.86 15.89 16.01 T:norx3261v2 16.29 16.44 16.55 T:norx6461v1 16.98 17.02 17.05 T:norx3261v1 16.97 17.08 17.18 T:norx6461v2 17.09 17.13 17.25 T:ascon128v1 17.11 17.14 17.36 T:ascon128v11 17.26 17.33 17.42 T:norx6461v3 17.34 17.34 17.43 ascon128v12 18.61 18.85 19.18 T:lakekeyakv1 21.60 21.68 21.79 T:lakekeyakv2 22.16 22.20 22.25 T:twine80n6t4clocv3 22.72 22.78 22.95 T:riverkeyakv2 22.83 22.91 23.02 T:twine80n6t4clocv2 24.89 24.97 25.08 T:aes128n8clocv1 24.88 25.10 25.44 T:aes128n12clocv1 27.23 27.29 27.36 T:aes128otrsv1 27.41 27.47 27.58 T:aes128otrpv2 27.48 27.54 27.63 T:aes128otrsv2 27.66 27.72 27.84 T:aes128otrpv1 34.95 35.10 35.29 T:aes256otrsv2 35.07 35.24 35.56 T:aes256otrsv1 35.65 35.73 35.80 T:aes256otrpv2 35.98 36.04 36.14 T:aes256otrpv1 36.36 36.43 36.77 T:seakeyakv2 36.48 36.54 36.65 T:acorn128v3 40.12 40.30 40.51 T:acorn128v2 40.94 41.15 41.47 T:ketjeminorv2 43.42 43.48 43.73 T:norx6444v2 44.10 44.18 44.34 T:norx6444v3 48.04 48.26 48.55 T:ketjesrv1 49.62 49.79 50.03 T:norx6444v1 52.96 53.20 53.58 T:aeadaes128ocbtaglen96v1 53.13 53.26 53.45 T:aeadaes128ocbtaglen64v1 56.14 56.20 56.35 T:ketjemajorv2 56.68 56.75 57.24 T:ketjesrv2 58.05 58.28 58.69 T:oceankeyakv2 61.54 61.74 62.11 T:aeadaes192ocbtaglen96v1 61.93 62.08 62.38 T:aeadaes192ocbtaglen64v1 71.68 71.89 72.16 T:aeadaes256ocbtaglen64v1 71.71 71.96 72.42 T:aeadaes256ocbtaglen96v1 75.96 76.11 76.36 T:colm127v1 83.53 83.72 83.85 T:proest256otrv1 85.40 85.88 86.37 T:ketjejrv1 89.53 89.66 89.78 T:present80n6t4silcv3 116.98 117.31 117.67 T:deoxysneq128128v13 117.82 117.97 118.36 T:proest128otrv1 142.08 142.36 142.60 T:led80n6t4silcv3 143.17 143.85 145.03 T:ketjejrv2 145.61 145.78 146.24 T:lunarkeyakv2 146.95 147.17 147.47 T:aezv1 167.83 168.39 169.00 T:deoxyseq128128v13 171.47 171.95 172.57 T:deoxysneq256128v13 254.23 254.82 255.26 T:deoxyseq256128v13 1724.06 1745.46 1747.10 T:acorn128 4610.80 4611.73 4613.93 T:present80n6t4silcv2 4612.32 4613.23 4631.90 T:present80n6silcv1 6716.52 6736.23 6767.97 T:led80n6silcv1 6719.30 6747.88 6777.07 T:led80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 2.11 2.13 2.15 T:aegis128l 2.12 2.13 2.15 T:aegis128 2.83 2.85 2.89 T:aezv5 2.83 2.89 2.92 aegis256 2.96 2.98 2.99 T:aezv4 2.90 2.98 3.11 T:tiaoxinv2 2.91 2.99 3.21 T:tiaoxinv1 3.17 3.18 3.21 T:aezv3 3.85 3.89 3.95 aegis128l 4.67 4.67 4.70 T:morus640128v1 4.98 5.00 5.02 T:morus640128v2 5.18 5.23 5.27 T:aes128otrpv3 5.76? 5.83? 14.29? T:aeadaes128ocbtaglen128v1 6.15 6.20 6.22 T:morus1280128v1 6.20 6.25 6.29 T:morus1280256v1 6.46 6.47 6.56 T:morus1280256v2 6.42 6.48 6.55 T:morus1280128v2 6.57? 6.63? 15.32? T:aeadaes192ocbtaglen128v1 6.63 6.66 6.77 T:aes128otrsv3 6.72 6.95 7.02 T:aeadaes256ocbtaglen128v1 7.25 7.27 7.33 T:aes128n12t8clocv2 7.25 7.27 7.33 T:aes128n8t8clocv2 7.25 7.27 7.38 T:aes128n12t8clocv3 7.48 7.51 7.53 T:aes256otrpv3 7.79 7.82 8.16 T:aes128otrcv3 8.16 8.19 8.23 T:colm0v1 8.18 8.22 8.32 T:deoxysneq256128v1 8.38 8.40 8.42 T:aes128n12t8silcv3 8.37 8.40 8.43 T:aes128n12t8silcv2 8.39 8.40 8.45 T:aes128n8t8silcv2 9.13 9.22 9.29 T:deoxysneq128128v1 9.41 9.44 9.46 T:aes256otrsv3 9.58 9.62 9.76 T:aes128gcmv1 9.99 10.04 10.21 T:deoxysi128v141 10.53 10.54 10.64 T:norx3241v1 10.82 10.88 10.88 T:norx3241v3 10.85 10.93 11.06 T:norx3241v2 11.13 11.18 11.23 T:norx6441v1 11.18 11.20 11.23 T:aes256otrcv3 11.56 11.62 11.70 aes256gcmv1 11.57 11.75 11.85 T:norx6441v2 11.88 11.94 12.00 T:norx6441v3 12.42 12.44 12.46 T:deoxysii128v141 13.18 13.22 13.30 T:ascon128av11 13.23 13.26 13.49 T:ascon96v1 13.41 13.53 13.66 ascon128av12 13.80 13.88 13.95 T:deoxyseq256128v1 14.10 14.33 14.49 T:deoxyseq128128v1 14.34 14.38 14.46 T:deoxysi256v141 14.83 14.85 14.87 T:aesjambuv1 14.82 14.86 15.41 T:deoxysii256v141 15.88 15.96 16.10 T:norx3261v3 15.91 15.97 16.08 T:norx3261v2 16.35 16.42 16.49 T:norx6461v1 17.00 17.00 17.15 T:ascon128v11 17.00 17.03 17.10 T:ascon128v1 16.93 17.03 17.14 T:norx6461v2 17.06 17.12 17.17 T:norx3261v1 17.24 17.29 17.42 ascon128v12 17.33 17.38 17.46 T:norx6461v3 18.71 18.86 19.25 T:lakekeyakv1 21.67 21.76 21.88 T:lakekeyakv2 22.11 22.16 22.19 T:twine80n6t4clocv3 22.82 22.88 22.97 T:riverkeyakv2 22.88 22.93 22.95 T:twine80n6t4clocv2 24.81 24.86 24.97 T:aes128n8clocv1 24.77 24.99 25.37 T:aes128n12clocv1 27.27 27.34 27.43 T:aes128otrsv1 27.42 27.50 27.56 T:aes128otrpv2 27.55 27.62 27.73 T:aes128otrsv2 27.77 27.83 27.94 T:aes128otrpv1 35.01 35.18 35.50 T:aes256otrsv2 35.08 35.23 35.61 T:aes256otrsv1 35.76 35.84 36.00 T:aes256otrpv2 36.02 36.13 36.25 T:aes256otrpv1 36.49 36.52 36.56 T:acorn128v3 36.45 36.53 36.64 T:seakeyakv2 40.13 40.39 40.46 T:acorn128v2 41.52 41.57 41.69 T:ketjeminorv2 43.57 43.68 43.85 T:norx6444v2 44.02 44.19 44.36 T:norx6444v3 48.26 48.40 48.71 T:ketjesrv1 49.73 49.83 50.01 T:norx6444v1 52.92 53.09 53.44 T:aeadaes128ocbtaglen96v1 53.08 53.17 53.29 T:aeadaes128ocbtaglen64v1 56.25 56.29 56.56 T:ketjemajorv2 57.17 57.38 57.65 T:ketjesrv2 58.08 58.18 58.41 T:oceankeyakv2 61.52 61.64 61.86 T:aeadaes192ocbtaglen96v1 61.92 62.12 62.37 T:aeadaes192ocbtaglen64v1 71.70 71.83 72.09 T:aeadaes256ocbtaglen96v1 71.68 71.85 72.06 T:aeadaes256ocbtaglen64v1 75.70 75.85 76.02 T:colm127v1 80.88 80.97 81.09 T:proest256otrv1 84.96 85.66 86.31 T:ketjejrv1 89.40 89.57 89.72 T:present80n6t4silcv3 117.13 117.23 117.36 T:deoxysneq128128v13 117.83 117.90 117.99 T:proest128otrv1 142.09 142.31 142.53 T:led80n6t4silcv3 143.59 144.10 144.68 T:ketjejrv2 145.76 145.99 146.44 T:lunarkeyakv2 146.54 146.92 147.30 T:aezv1 167.65 168.35 169.10 T:deoxyseq128128v13 171.64 171.98 172.57 T:deoxysneq256128v13 254.50 254.96 255.39 T:deoxyseq256128v13 1728.33 1745.63 1747.19 T:acorn128 4610.97 4611.89 4613.87 T:present80n6t4silcv2 4612.00 4613.00 4619.10 T:present80n6silcv1 6706.21 6736.71 6759.87 T:led80n6silcv1 6723.95 6751.63 6787.97 T:led80n6t4silcv2