VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20260330

[Page version: 20260415 05:37:31]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.13 0.14 0.14 T:tiaoxinv1 0.13? 0.14? 0.15? T:tiaoxinv2 0.08? 0.18? 0.28? T:aeadaes128ocbtaglen128v1 0.18 0.19 0.19 T:aegis128l 0.19 0.19 0.19 aegis128l 0.15? 0.25? 0.42? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.32 aegis256 0.32 0.32 0.33 T:aegis256 0.36 0.37 0.37 T:aezv4 0.36 0.37 0.37 T:aezv3 0.38 0.38 0.39 T:aezv5 0.23? 0.40? 0.57? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.41? 0.42? 0.46? T:aes128otrsv3 0.43 0.44 0.44 T:aes128otrpv3 0.47 0.48 0.50 T:morus1280256v1 0.47 0.48 0.50 T:morus1280128v2 0.49 0.50 0.51 T:morus1280256v2 0.50 0.50 0.51 T:morus1280128v1 0.53 0.53 0.54 T:aes256otrcv3 0.53 0.54 0.54 T:deoxysi128v141 0.54 0.55 0.55 T:aes256otrsv3 0.55 0.56 0.57 aes256gcmv1 0.57 0.57 0.58 T:aes256otrpv3 0.59 0.60 0.61 T:deoxysi256v141 0.62 0.63 0.64 T:deoxysneq128128v1 0.69 0.70 0.71 T:deoxysneq256128v1 0.73 0.77 0.80 T:oceankeyakv2 0.69? 0.77? 0.85? T:lunarkeyakv2 0.77 0.78 0.79 T:morus640128v2 0.78 0.79 0.80 T:aes128gcmv1 0.80 0.81 0.82 T:morus640128v1 0.89 0.90 0.92 T:norx6444v3 1.05 1.06 1.07 T:deoxysii128v141 1.19 1.20 1.21 T:deoxysii256v141 1.24 1.25 1.26 T:deoxyseq128128v1 1.28 1.29 1.30 T:colm0v1 1.40 1.42 1.43 T:seakeyakv2 1.42 1.44 1.48 T:deoxyseq256128v1 2.10 2.11 2.17 T:norx6441v2 2.12 2.17 2.18 T:norx6441v3 2.53 2.54 2.60 T:norx6441v1 2.62 2.62 2.63 T:aes128n12t8clocv3 2.62 2.62 2.63 T:aes128n12t8clocv2 2.62 2.63 2.63 T:aes128n12t8silcv2 2.62 2.63 2.63 T:aes128n8t8silcv2 2.62 2.63 2.63 T:aes128n12t8silcv3 2.62 2.63 2.63 T:aes128n8t8clocv2 2.97 3.05 3.07 T:norx6444v2 3.14 3.16 3.24 T:norx6461v2 3.08 3.16 3.23 T:lakekeyakv2 3.12 3.18 3.25 T:lakekeyakv1 3.16 3.24 3.26 T:norx6461v3 3.43 3.46 3.49 T:norx6444v1 3.69 3.70 3.87 T:norx3241v2 3.84 3.87 3.96 T:norx6461v1 3.72 3.90 3.94 T:norx3241v3 4.48 4.50 4.53 T:norx3241v1 5.14 5.19 5.24 T:ketjemajorv2 5.35 5.35 5.36 T:aesjambuv1 5.82 5.85 5.88 T:norx3261v2 5.66 5.86 5.88 T:norx3261v3 6.07 6.07 6.07 ascon128av12 6.75 6.75 6.75 T:acorn128v3 7.25 7.25 7.26 T:acorn128v2 7.46 7.47 7.50 T:riverkeyakv2 7.52 7.52 7.53 T:norx3261v1 8.45 8.46 8.48 T:ascon128av11 8.46 8.48 8.49 T:ascon96v1 8.62 8.63 8.63 ascon128v12 8.63 8.63 8.63 T:ascon128v11 8.63 8.63 8.63 T:ascon128v1 8.90 8.92 8.94 T:ketjeminorv2 14.56 14.59 14.64 T:aes128otrpv2 14.58 14.60 14.63 T:aes128otrpv1 14.58 14.61 14.63 T:aes128otrsv2 14.59 14.63 14.68 T:aes128otrsv1 17.00 17.03 17.06 T:proest256otrv1 17.13? 18.20? 20.29? T:twine80n6t4clocv2 18.53 18.55 18.58 T:aes256otrsv2 18.55 18.57 18.59 T:aes256otrpv1 18.55 18.59 18.63 T:aes256otrpv2 18.60 18.64 18.68 T:aes256otrsv1 20.42 20.47 20.71 T:twine80n6t4clocv3 20.68 20.72 20.77 T:aeadaes128ocbtaglen96v1 20.72 20.75 20.86 T:aeadaes128ocbtaglen64v1 22.51 22.53 22.55 T:aes128n12clocv1 22.50 22.58 22.60 T:aes128n8clocv1 24.58 24.59 24.72 T:aeadaes192ocbtaglen96v1 24.71 24.73 24.78 T:aeadaes192ocbtaglen64v1 28.42 28.44 28.48 T:aeadaes256ocbtaglen64v1 28.48 28.51 28.61 T:aeadaes256ocbtaglen96v1 29.23 29.33 29.42 T:ketjesrv1 34.32 34.37 34.41 T:ketjesrv2 45.22 45.42 45.51 T:proest128otrv1 45.52 45.55 45.59 T:ketjejrv1 46.21 46.25 46.35 T:colm127v1 67.00 67.37 67.49 T:present80n6t4silcv3 74.10 74.18 74.31 T:ketjejrv2 83.50 83.67 83.89 T:deoxysneq128128v13 88.35 90.37 94.47 T:led80n6t4silcv3 115.44 115.64 115.79 T:deoxysneq256128v13 157.69 157.97 158.22 T:aezv1 168.18 168.46 169.14 T:deoxyseq128128v13 231.73 232.53 234.39 T:deoxyseq256128v13 510.69? 531.55? 570.00? T:acorn128 3246.30 3255.18 3257.24 T:led80n6t4silcv2 3252.05 3255.62 3311.56 T:led80n6silcv1 3471.56 3474.89 3489.85 T:present80n6t4silcv2 3474.83 3476.03 3477.78 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.09? 0.19? 0.27? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 aegis128l 0.19 0.19 0.20 T:aegis128l 0.07? 0.25? 0.34? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.30? 0.33? 0.35? T:tiaoxinv2 0.30? 0.33? 0.35? T:tiaoxinv1 0.32 0.34 0.34 aegis256 0.32 0.34 0.34 T:aegis256 0.37 0.37 0.37 T:aezv4 0.36 0.37 0.38 T:aezv3 0.38 0.38 0.39 T:aezv5 0.24? 0.40? 0.49? T:aeadaes192ocbtaglen128v1 0.41? 0.42? 0.49? T:aes128otrsv3 0.42 0.42 0.43 T:aes128otrcv3 0.45 0.45 0.46 T:aes128otrpv3 0.47 0.48 0.48 aes256gcmv1 0.50 0.51 0.51 T:morus1280128v2 0.50 0.51 0.52 T:morus1280256v2 0.50 0.51 0.52 T:morus1280128v1 0.50 0.51 0.52 T:morus1280256v1 0.54 0.54 0.55 T:aes256otrsv3 0.55 0.55 0.55 T:aes256otrcv3 0.58 0.59 0.59 T:aes256otrpv3 0.58 0.59 0.60 T:deoxysi128v141 0.65 0.66 0.67 T:deoxysneq128128v1 0.68 0.69 0.69 T:deoxysi256v141 0.71 0.72 0.73 T:deoxysneq256128v1 0.72 0.74 0.78 T:oceankeyakv2 0.78 0.78 0.79 T:morus640128v1 0.77 0.79 0.82 T:aes128gcmv1 0.81 0.82 0.83 T:morus640128v2 0.84? 0.89? 0.95? T:lunarkeyakv2 0.89 0.90 0.93 T:norx6444v3 1.05 1.06 1.07 T:deoxysii128v141 1.17 1.18 1.19 T:colm0v1 1.19 1.20 1.21 T:deoxysii256v141 1.36 1.37 1.38 T:deoxyseq128128v1 1.41 1.42 1.44 T:deoxyseq256128v1 1.47 1.49 1.51 T:seakeyakv2 2.05 2.07 2.13 T:norx6441v2 2.07 2.12 2.14 T:norx6441v3 2.53 2.54 2.56 T:norx6441v1 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.54 2.56 2.58 T:aes128n12t8silcv3 2.55 2.57 2.58 T:aes128n12t8silcv2 2.56 2.57 2.59 T:aes128n8t8silcv2 2.99 3.04 3.07 T:norx6444v2 3.08 3.09 3.19 T:norx6461v3 3.09 3.10 3.12 T:norx6461v2 3.10 3.15 3.22 T:lakekeyakv2 3.12 3.16 3.20 T:lakekeyakv1 3.45 3.46 3.52 T:norx6444v1 3.69 3.72 3.76 T:norx6461v1 3.76 3.87 3.90 T:norx3241v3 3.77 3.88 3.90 T:norx3241v2 4.51 4.56 4.61 T:norx3241v1 5.04 5.09 5.25 T:ketjemajorv2 5.73 5.75 5.84 T:aesjambuv1 5.62 5.79 5.80 T:norx3261v2 5.60 5.83 5.85 T:norx3261v3 6.06 6.07 6.07 ascon128av12 6.75 6.75 6.75 T:acorn128v3 7.12 7.13 7.13 T:acorn128v2 7.32 7.36 7.36 T:norx3261v1 7.64 7.65 7.67 T:riverkeyakv2 8.37 8.37 8.39 T:ascon128v1 8.37 8.37 8.38 T:ascon128v11 8.83 8.86 8.90 T:ascon96v1 8.88 8.88 8.88 ascon128v12 8.89 8.92 8.94 T:ascon128av11 9.38 9.40 9.42 T:ketjeminorv2 14.81 14.84 14.86 T:aes128otrsv1 14.80 14.86 14.91 T:aes128otrpv1 14.87 14.90 14.93 T:aes128otrsv2 14.90 14.93 14.96 T:aes128otrpv2 17.47 17.51 17.55 T:proest256otrv1 17.07? 17.60? 20.54? T:twine80n6t4clocv2 18.81 18.84 18.87 T:aes256otrpv1 18.85 18.87 18.90 T:aes256otrsv1 18.88 18.91 18.96 T:aes256otrsv2 18.91 18.93 18.96 T:aes256otrpv2 19.67 19.71 19.79 T:twine80n6t4clocv3 21.23 21.28 21.31 T:aes128n12clocv1 21.32 21.41 21.44 T:aes128n8clocv1 28.77 28.81 28.83 T:aeadaes128ocbtaglen64v1 28.76 28.81 28.85 T:aeadaes128ocbtaglen96v1 28.78 28.90 29.03 T:ketjesrv2 31.23 31.31 31.39 T:ketjesrv1 34.38 34.43 34.54 T:aeadaes192ocbtaglen96v1 34.42 34.46 34.51 T:aeadaes192ocbtaglen64v1 40.01 40.05 40.12 T:aeadaes256ocbtaglen96v1 40.11 40.14 40.18 T:aeadaes256ocbtaglen64v1 45.73 45.89 45.98 T:proest128otrv1 50.46 50.49 50.51 T:ketjejrv1 62.37 62.54 62.61 T:colm127v1 66.97 66.99 67.13 T:present80n6t4silcv3 78.29 78.40 78.55 T:ketjejrv2 89.47 90.99 92.68 T:led80n6t4silcv3 137.00 137.20 137.33 T:deoxysneq128128v13 157.09 157.37 157.70 T:aezv1 168.37 168.73 169.30 T:deoxyseq128128v13 179.87 180.34 182.38 T:deoxysneq256128v13 233.17 233.77 234.77 T:deoxyseq256128v13 450.00? 495.07? 558.73? T:acorn128 3252.96 3265.34 3295.30 T:led80n6silcv1 3286.08 3287.99 3289.75 T:led80n6t4silcv2 3473.76 3475.67 3478.03 T:present80n6t4silcv2 3475.57 3476.32 3476.99 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.14 0.14 0.14 T:aezv4 0.14 0.14 0.15 T:aezv3 0.15 0.15 0.15 T:aezv5 0.08? 0.18? 0.27? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.23 0.24 0.24 aegis128l 0.07? 0.25? 0.34? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.30? 0.32? 0.34? T:tiaoxinv2 0.32 0.33 0.34 T:aegis256 0.31 0.34 0.34 T:tiaoxinv1 0.36 0.38 0.39 aegis256 0.31? 0.40? 0.56? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.43 T:aes128otrcv3 0.41? 0.42? 0.49? T:aes128otrsv3 0.45 0.45 0.46 T:aes128otrpv3 0.46 0.47 0.48 aes256gcmv1 0.50 0.50 0.52 T:morus1280128v2 0.50 0.50 0.51 T:morus1280256v2 0.50 0.51 0.51 T:morus1280128v1 0.50 0.51 0.52 T:morus1280256v1 0.54 0.54 0.55 T:aes256otrsv3 0.55 0.55 0.55 T:aes256otrcv3 0.58 0.59 0.59 T:aes256otrpv3 0.59 0.59 0.60 T:deoxysi128v141 0.66 0.67 0.67 T:deoxysneq128128v1 0.69 0.69 0.70 T:deoxysi256v141 0.70 0.71 0.72 T:deoxysneq256128v1 0.74 0.77 0.81 T:oceankeyakv2 0.77 0.78 0.82 T:aes128gcmv1 0.78 0.79 0.79 T:morus640128v1 0.81 0.82 0.83 T:morus640128v2 0.90 0.91 0.93 T:norx6444v3 0.87? 0.91? 0.99? T:lunarkeyakv2 1.06 1.07 1.07 T:deoxysii128v141 1.18 1.18 1.19 T:colm0v1 1.20 1.20 1.21 T:deoxysii256v141 1.34 1.35 1.37 T:deoxyseq128128v1 1.41 1.42 1.47 T:deoxyseq256128v1 1.50 1.53 1.56 T:seakeyakv2 2.06 2.12 2.13 T:norx6441v2 2.08 2.12 2.13 T:norx6441v3 2.47 2.48 2.49 T:norx6441v1 2.56 2.56 2.56 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128n8t8clocv2 2.55 2.56 2.56 T:aes128n12t8clocv2 2.55 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128n12t8silcv3 3.00 3.05 3.13 T:norx6444v2 3.10 3.11 3.18 T:norx6461v3 3.17 3.18 3.19 T:lakekeyakv2 3.14 3.18 3.23 T:lakekeyakv1 3.12 3.19 3.21 T:norx6461v2 3.46 3.50 3.56 T:norx6444v1 3.65 3.74 3.90 T:norx6461v1 3.74 3.77 3.86 T:norx3241v3 3.75 3.86 3.89 T:norx3241v2 4.50 4.56 4.60 T:norx3241v1 5.06 5.13 5.32 T:ketjemajorv2 5.53 5.58 5.74 T:norx3261v2 5.58 5.58 5.61 T:norx3261v3 5.73 5.75 5.84 T:aesjambuv1 6.06 6.07 6.08 ascon128av12 6.75 6.75 6.75 T:acorn128v3 7.12 7.13 7.13 T:acorn128v2 7.32 7.32 7.35 T:norx3261v1 7.66 7.67 7.68 T:riverkeyakv2 7.81 7.82 7.87 T:ascon96v1 7.87 7.87 7.89 T:ascon128av11 8.38 8.38 8.38 T:ascon128v1 8.38 8.38 8.39 T:ascon128v11 8.88 8.88 8.88 ascon128v12 9.42 9.43 9.44 T:ketjeminorv2 14.83 14.86 14.93 T:aes128otrpv1 14.84 14.86 14.88 T:aes128otrsv1 14.89 14.91 14.95 T:aes128otrsv2 14.90 14.94 14.96 T:aes128otrpv2 17.46 17.49 17.51 T:proest256otrv1 18.83 18.85 18.88 T:aes256otrpv1 18.88 18.92 18.95 T:aes256otrsv1 18.93 18.96 18.98 T:aes256otrpv2 18.91 18.97 18.98 T:aes256otrsv2 17.09? 18.97? 20.88? T:twine80n6t4clocv2 18.23 19.69 19.81 T:twine80n6t4clocv3 21.24 21.29 21.33 T:aes128n12clocv1 21.31 21.34 21.39 T:aes128n8clocv1 28.78 28.80 28.82 T:aeadaes128ocbtaglen64v1 28.83 28.84 28.88 T:aeadaes128ocbtaglen96v1 28.82 28.93 29.05 T:ketjesrv2 31.25 31.34 31.43 T:ketjesrv1 34.49 34.50 34.52 T:aeadaes192ocbtaglen64v1 34.50 34.55 35.02 T:aeadaes192ocbtaglen96v1 40.03 40.09 40.35 T:aeadaes256ocbtaglen64v1 40.03 40.09 40.12 T:aeadaes256ocbtaglen96v1 45.80 45.87 46.05 T:proest128otrv1 50.51 50.55 50.59 T:ketjejrv1 61.43 61.53 61.82 T:colm127v1 66.82 66.86 67.05 T:present80n6t4silcv3 78.40 78.52 78.76 T:ketjejrv2 88.47 90.11 91.51 T:led80n6t4silcv3 136.98 137.35 137.72 T:deoxysneq128128v13 157.14 157.35 157.70 T:aezv1 168.64 168.90 169.16 T:deoxyseq128128v13 180.41 181.06 182.73 T:deoxysneq256128v13 233.75 234.83 235.36 T:deoxyseq256128v13 473.86? 498.03? 726.19? T:acorn128 3260.75 3269.19 3296.59 T:led80n6silcv1 3290.51 3296.91 3307.02 T:led80n6t4silcv2 3475.44 3476.11 3476.59 T:present80n6silcv1 3476.04 3476.63 3479.00 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.12 0.12 0.12 T:tiaoxinv1 0.12 0.12 0.12 T:tiaoxinv2 0.11? 0.17? 0.22? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.17 T:aegis128l 0.18 0.18 0.18 aegis128l 0.18? 0.23? 0.29? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.26 T:aezv4 0.25 0.25 0.26 T:aezv5 0.31 0.31 0.31 T:aegis128 0.31 0.32 0.32 aegis256 0.32 0.32 0.35 T:aegis256 0.29? 0.39? 0.44? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.42 T:aes128otrcv3 0.42 0.42 0.42 T:aes128otrpv3 0.46 0.47 0.47 aes256gcmv1 0.47 0.48 0.50 T:morus1280256v1 0.48 0.49 0.50 T:morus1280128v2 0.48 0.49 0.50 T:morus1280256v2 0.49 0.50 0.51 T:morus1280128v1 0.54 0.54 0.54 T:aes256otrcv3 0.54 0.54 0.54 T:deoxysi128v141 0.55 0.55 0.55 T:aes256otrpv3 0.59 0.59 0.59 T:aes128gcmv1 0.59 0.60 0.61 T:deoxysi256v141 0.61 0.62 0.62 T:deoxysneq128128v1 0.67 0.68 0.69 T:oceankeyakv2 0.71 0.71 0.72 T:deoxysneq256128v1 0.76 0.77 0.78 T:morus640128v1 0.78 0.79 0.80 T:morus640128v2 0.79 0.80 0.80 T:deoxysii128v141 0.89 0.90 0.90 T:colm0v1 0.90 0.90 0.91 T:deoxysii256v141 0.89 0.93 0.98 T:lunarkeyakv2 0.93 0.93 0.95 T:deoxyseq128128v1 1.09 1.10 1.11 T:deoxyseq256128v1 1.19 1.20 1.21 T:seakeyakv2 1.49 1.49 1.51 T:aes128otrsv3 1.48 1.50 1.54 T:norx6444v3 2.05 2.05 2.05 T:aes256otrsv3 2.13 2.17 2.18 T:norx6441v2 2.17 2.18 2.19 T:norx6441v3 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.59 T:aes128n12t8silcv2 2.59 2.59 2.59 T:aes128n8t8clocv2 2.59 2.59 2.59 T:aes128n12t8clocv2 2.59 2.59 2.59 T:aes128n12t8clocv3 2.59 2.59 2.59 T:aes128n12t8silcv3 2.55 2.60 2.61 T:norx6441v1 2.71 2.74 2.79 T:lakekeyakv2 2.92 2.97 2.99 T:norx6444v2 3.05 3.07 3.09 T:lakekeyakv1 3.17 3.18 3.24 T:norx6461v3 3.18 3.20 3.26 T:norx6461v2 3.35 3.37 3.40 T:norx6444v1 3.68 3.70 3.78 T:norx3241v2 3.77 3.89 3.91 T:norx3241v3 3.77 3.95 3.96 T:norx6461v1 4.42 4.54 4.74 T:ketjemajorv2 4.52 4.59 4.69 T:norx3241v1 5.30 5.32 5.39 T:aesjambuv1 5.40 5.41 5.42 T:riverkeyakv2 5.59 5.68 5.72 T:norx3261v2 5.71 5.72 5.80 T:norx3261v3 5.88 5.88 5.89 ascon128av12 6.76 6.76 6.76 T:acorn128v3 7.26 7.26 7.26 T:acorn128v2 7.52 7.52 7.53 T:norx3261v1 8.02 8.02 8.03 T:ketjeminorv2 8.44 8.45 8.45 T:ascon128av11 8.45 8.45 8.46 T:ascon96v1 8.56 8.56 8.57 T:ascon128v11 8.56 8.56 8.57 T:ascon128v1 8.75 8.75 8.75 ascon128v12 13.47 13.50 13.52 T:aes128otrsv1 13.46 13.51 13.54 T:aes128otrsv2 14.37 14.38 14.42 T:aes128otrpv2 14.39 14.40 14.41 T:aes128otrpv1 17.23 17.24 17.25 T:aes128n12clocv1 17.21 17.24 17.27 T:aes128n8clocv1 17.44 17.45 17.48 T:proest256otrv1 17.48 17.51 17.54 T:aes256otrsv2 17.51 17.56 17.58 T:aes256otrsv1 17.12 17.78 18.82 T:twine80n6t4clocv2 18.02 18.15 18.18 T:twine80n6t4clocv3 18.38 18.39 18.42 T:aes256otrpv2 18.38 18.40 18.44 T:aes256otrpv1 20.63 20.67 20.71 T:aeadaes128ocbtaglen96v1 20.64 20.71 20.78 T:aeadaes128ocbtaglen64v1 24.50 24.52 24.64 T:aeadaes192ocbtaglen64v1 24.51 24.54 24.60 T:aeadaes192ocbtaglen96v1 28.09 28.17 28.26 T:ketjesrv1 28.36 28.38 28.39 T:aeadaes256ocbtaglen64v1 28.35 28.44 28.57 T:aeadaes256ocbtaglen96v1 30.28 30.33 30.39 T:ketjesrv2 34.34 34.36 34.37 T:colm127v1 45.74 45.80 45.87 T:proest128otrv1 46.02 46.03 46.05 T:ketjejrv1 67.08 67.14 67.32 T:present80n6t4silcv3 71.63 71.70 71.88 T:ketjejrv2 83.63 83.74 83.82 T:deoxysneq128128v13 89.25 90.93 92.32 T:led80n6t4silcv3 104.01 104.25 104.44 T:aezv1 115.51 115.63 115.72 T:deoxysneq256128v13 126.12 126.28 126.42 T:deoxyseq128128v13 174.09 174.45 174.97 T:deoxyseq256128v13 493.39? 539.79? 572.86? T:acorn128 2447.70 2452.99 2463.88 T:led80n6silcv1 2451.16 2454.45 2458.21 T:led80n6t4silcv2 2603.87 2605.52 2614.40 T:present80n6t4silcv2 2606.43 2608.87 2610.06 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.11? 0.17? 0.23? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 T:aegis128l 0.18 0.18 0.18 aegis128l 0.20 0.21 0.22 T:tiaoxinv1 0.21 0.22 0.22 T:tiaoxinv2 0.15? 0.24? 0.30? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.26 T:aezv4 0.25 0.25 0.26 T:aezv5 0.31 0.31 0.31 T:aegis128 0.31 0.32 0.32 aegis256 0.32 0.32 0.34 T:aegis256 0.34? 0.39? 0.48? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.42 0.43 0.44 aes256gcmv1 0.43 0.43 0.43 T:aes128otrpv3 0.49 0.50 0.50 T:morus1280128v1 0.49 0.50 0.51 T:morus1280256v1 0.49 0.50 0.50 T:morus1280128v2 0.50 0.50 0.51 T:morus1280256v2 0.55 0.55 0.56 T:aes256otrcv3 0.55 0.55 0.55 T:aes256otrpv3 0.56 0.57 0.57 T:deoxysi128v141 0.59 0.59 0.59 T:aes128gcmv1 0.64 0.64 0.65 T:deoxysneq128128v1 0.64 0.64 0.65 T:deoxysi256v141 0.65 0.67 0.68 T:oceankeyakv2 0.70 0.71 0.71 T:deoxysneq256128v1 0.75 0.75 0.76 T:morus640128v1 0.79 0.80 0.81 T:morus640128v2 0.79 0.80 0.80 T:deoxysii128v141 0.83 0.84 0.85 T:colm0v1 0.89 0.90 0.90 T:deoxysii256v141 0.97 0.99 1.03 T:lunarkeyakv2 0.99 1.00 1.01 T:deoxyseq128128v1 1.11 1.11 1.12 T:deoxyseq256128v1 1.21 1.22 1.23 T:seakeyakv2 1.49 1.49 1.52 T:aes128otrsv3 1.50 1.53 1.56 T:norx6444v3 2.05 2.06 2.06 T:aes256otrsv3 2.10 2.10 2.15 T:norx6441v2 2.10 2.11 2.12 T:norx6441v3 2.55 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.55 2.56 2.57 T:aes128n12t8silcv2 2.56 2.57 2.57 T:aes128n8t8silcv2 2.52 2.57 2.58 T:norx6441v1 2.73 2.77 2.80 T:lakekeyakv2 2.89 2.91 2.97 T:norx6444v2 3.03 3.07 3.08 T:lakekeyakv1 3.15 3.16 3.22 T:norx6461v3 3.13 3.17 3.19 T:norx6461v2 3.36 3.38 3.39 T:norx6444v1 3.68 3.71 3.87 T:norx6461v1 3.83 3.84 3.90 T:norx3241v3 3.83 3.86 3.88 T:norx3241v2 4.40 4.52 4.76 T:ketjemajorv2 4.53 4.61 4.64 T:norx3241v1 5.48 5.49 5.50 T:riverkeyakv2 5.50 5.54 5.54 T:aesjambuv1 5.59 5.61 5.73 T:norx3261v2 5.61 5.62 5.72 T:norx3261v3 5.83 5.84 5.84 ascon128av12 6.88 6.88 6.88 T:acorn128v3 7.19 7.19 7.20 T:acorn128v2 7.42 7.42 7.42 T:norx3261v1 8.27 8.28 8.29 T:ketjeminorv2 8.37 8.38 8.38 T:ascon128v11 8.37 8.38 8.38 T:ascon128v1 8.64 8.65 8.66 T:ascon96v1 8.67 8.68 8.69 T:ascon128av11 9.00 9.00 9.00 ascon128v12 13.63 13.65 13.66 T:aes128otrsv1 13.65 13.66 13.68 T:aes128otrsv2 14.51 14.53 14.54 T:aes128otrpv1 14.55 14.58 14.62 T:aes128otrpv2 16.56 16.58 16.60 T:aes128n12clocv1 16.64 16.67 16.69 T:aes128n8clocv1 17.65 17.67 17.69 T:aes256otrsv1 17.66 17.67 17.69 T:aes256otrsv2 17.64 17.67 17.70 T:proest256otrv1 17.11 18.06 18.92 T:twine80n6t4clocv2 18.50 18.51 18.54 T:aes256otrpv1 18.53 18.55 18.58 T:aes256otrpv2 18.07? 19.71? 20.95? T:twine80n6t4clocv3 24.65 24.71 24.79 T:aeadaes128ocbtaglen64v1 24.68 24.78 24.90 T:aeadaes128ocbtaglen96v1 27.55 27.59 27.65 T:ketjesrv2 29.07 29.14 29.21 T:ketjesrv1 29.35 29.38 29.43 T:aeadaes192ocbtaglen64v1 29.42 29.49 29.52 T:aeadaes192ocbtaglen96v1 34.11 34.19 34.37 T:aeadaes256ocbtaglen96v1 34.11 34.24 34.28 T:aeadaes256ocbtaglen64v1 42.34 42.50 42.53 T:colm127v1 45.96 46.12 46.57 T:proest128otrv1 48.47 48.51 48.54 T:ketjejrv1 66.88 66.92 67.02 T:present80n6t4silcv3 73.68 73.77 73.83 T:ketjejrv2 89.01 90.48 92.38 T:led80n6t4silcv3 103.57 103.81 104.06 T:aezv1 110.38 110.56 110.77 T:deoxysneq128128v13 126.03 126.16 126.42 T:deoxyseq128128v13 147.73 148.06 149.76 T:deoxysneq256128v13 174.51 174.73 175.03 T:deoxyseq256128v13 514.68 554.94 560.44 T:acorn128 2432.63 2437.63 2456.79 T:led80n6silcv1 2454.00 2454.93 2458.78 T:led80n6t4silcv2 2605.87 2606.28 2607.16 T:present80n6silcv1 2605.91 2606.48 2609.75 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.12 0.13 0.13 T:aezv3 0.13 0.14 0.14 T:aezv5 0.13 0.14 0.14 T:aezv4 0.12? 0.17? 0.21? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.17 T:aegis128l 0.20 0.21 0.21 aegis128l 0.21 0.21 0.22 T:tiaoxinv2 0.20 0.22 0.22 T:tiaoxinv1 0.15? 0.24? 0.33? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.31 T:aegis128 0.32 0.32 0.34 T:aegis256 0.34 0.35 0.35 aegis256 0.31? 0.39? 0.46? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.42 0.43 0.44 aes256gcmv1 0.43 0.43 0.43 T:aes128otrpv3 0.49 0.50 0.51 T:morus1280128v2 0.50 0.50 0.50 T:morus1280256v1 0.50 0.50 0.50 T:morus1280128v1 0.50 0.51 0.51 T:morus1280256v2 0.55 0.55 0.56 T:aes256otrcv3 0.55 0.55 0.55 T:aes256otrpv3 0.56 0.57 0.57 T:deoxysi128v141 0.58 0.58 0.59 T:aes128gcmv1 0.64 0.64 0.65 T:deoxysneq128128v1 0.64 0.65 0.65 T:deoxysi256v141 0.67 0.68 0.69 T:oceankeyakv2 0.70 0.71 0.71 T:deoxysneq256128v1 0.75 0.75 0.76 T:morus640128v1 0.78 0.79 0.79 T:morus640128v2 0.80 0.80 0.80 T:deoxysii128v141 0.84 0.85 0.85 T:colm0v1 0.89 0.90 0.90 T:deoxysii256v141 0.99 0.99 1.00 T:deoxyseq128128v1 0.98 1.01 1.05 T:lunarkeyakv2 1.09 1.09 1.10 T:deoxyseq256128v1 0.95? 1.22? 1.24? T:seakeyakv2 1.49 1.50 1.52 T:aes128otrsv3 1.49 1.54 1.56 T:norx6444v3 2.05 2.06 2.06 T:aes256otrsv3 2.10 2.11 2.11 T:norx6441v3 2.11 2.15 2.16 T:norx6441v2 2.56 2.56 2.56 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.57 T:aes128n8t8silcv2 2.55 2.56 2.57 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.57 T:aes128n12t8clocv2 2.52 2.57 2.59 T:norx6441v1 2.78 2.79 2.79 T:lakekeyakv2 2.92 2.97 3.02 T:norx6444v2 3.05 3.07 3.08 T:lakekeyakv1 3.16 3.16 3.22 T:norx6461v3 3.15 3.16 3.18 T:norx6461v2 3.38 3.40 3.41 T:norx6444v1 3.69 3.71 3.72 T:norx3241v3 3.65 3.72 3.87 T:norx6461v1 3.74 3.80 3.86 T:norx3241v2 4.38 4.47 4.77 T:ketjemajorv2 4.60 4.65 4.68 T:norx3241v1 5.48 5.49 5.50 T:riverkeyakv2 5.51 5.54 5.54 T:aesjambuv1 5.58 5.64 5.75 T:norx3261v2 5.60 5.73 5.82 T:norx3261v3 5.82 5.84 5.84 ascon128av12 6.88 6.88 6.88 T:acorn128v3 7.19 7.19 7.19 T:acorn128v2 7.44 7.44 7.44 T:norx3261v1 8.13 8.14 8.15 T:ascon96v1 8.15 8.15 8.16 T:ascon128av11 8.28 8.29 8.30 T:ketjeminorv2 8.37 8.37 8.38 T:ascon128v1 8.38 8.38 8.38 T:ascon128v11 9.00 9.00 9.00 ascon128v12 13.63 13.65 13.66 T:aes128otrsv1 13.62 13.66 13.72 T:aes128otrsv2 14.51 14.53 14.54 T:aes128otrpv1 14.56 14.57 14.59 T:aes128otrpv2 16.59 16.62 16.65 T:aes128n12clocv1 16.64 16.66 16.69 T:aes128n8clocv1 17.64 17.67 17.71 T:proest256otrv1 17.66 17.68 17.70 T:aes256otrsv1 17.69 17.72 17.76 T:aes256otrsv2 17.06? 17.92? 19.27? T:twine80n6t4clocv2 17.89? 18.00? 20.50? T:twine80n6t4clocv3 18.54 18.56 18.58 T:aes256otrpv1 18.55 18.56 18.58 T:aes256otrpv2 24.64 24.69 24.76 T:aeadaes128ocbtaglen64v1 24.68 24.70 24.73 T:aeadaes128ocbtaglen96v1 27.55 27.62 27.71 T:ketjesrv2 29.09 29.15 29.22 T:ketjesrv1 29.45 29.50 29.52 T:aeadaes192ocbtaglen96v1 29.42 29.56 29.57 T:aeadaes192ocbtaglen64v1 34.12 34.17 34.28 T:aeadaes256ocbtaglen64v1 34.25 34.29 34.32 T:aeadaes256ocbtaglen96v1 41.94 42.04 42.14 T:colm127v1 46.04 46.06 46.11 T:proest128otrv1 48.48 48.53 48.57 T:ketjejrv1 66.78 66.84 66.99 T:present80n6t4silcv3 73.64 73.77 77.58 T:ketjejrv2 89.08 90.45 92.35 T:led80n6t4silcv3 103.60 103.73 103.89 T:aezv1 110.37 110.52 110.65 T:deoxysneq128128v13 126.06 126.24 126.46 T:deoxyseq128128v13 147.83 148.04 149.34 T:deoxysneq256128v13 175.07 175.41 176.33 T:deoxyseq256128v13 504.61? 544.27? 575.27? T:acorn128 2433.41 2438.61 2452.91 T:led80n6silcv1 2453.02 2458.14 2463.64 T:led80n6t4silcv2 2605.74 2606.28 2607.45 T:present80n6silcv1 2606.33 2607.31 2610.33 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv1 0.10 0.10 0.11 T:tiaoxinv2 0.13 0.13 0.14 T:aezv5 0.13? 0.14? 0.15? T:aezv3 0.14 0.14 0.15 T:aezv4 0.16 0.16 0.16 T:aegis128l 0.06? 0.17? 0.26? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 aegis128l 0.08? 0.25? 0.34? T:aeadaes256ocbtaglen128v1 0.30 0.30 0.31 T:aegis128 0.31 0.31 0.31 T:aegis256 0.31 0.31 0.31 aegis256 0.25? 0.38? 0.48? T:aeadaes192ocbtaglen128v1 0.38 0.39 0.40 T:aes128gcmv1 0.38 0.39 0.40 aes256gcmv1 0.40 0.40 0.40 T:aes128otrpv3 0.41 0.42 0.43 T:aes128otrcv3 0.46 0.48 0.50 T:morus1280256v2 0.48 0.49 0.50 T:morus1280256v1 0.46 0.49 0.50 T:morus1280128v1 0.49 0.50 0.51 T:morus1280128v2 0.48 0.50 0.52 T:oceankeyakv2 0.50 0.51 0.52 T:colm0v1 0.53 0.53 0.53 T:aes256otrpv3 0.53 0.54 0.54 T:deoxysii128v141 0.54 0.54 0.55 T:deoxysi128v141 0.55 0.55 0.55 T:aes256otrcv3 0.59 0.60 0.60 T:deoxysi256v141 0.60 0.61 0.61 T:deoxysii256v141 0.61 0.62 0.63 T:deoxyseq128128v1 0.61 0.63 0.63 T:deoxysneq128128v1 0.56? 0.63? 0.67? T:lunarkeyakv2 0.69 0.70 0.72 T:deoxysneq256128v1 0.70 0.72 0.72 T:deoxyseq256128v1 0.71 0.72 0.73 T:morus640128v1 0.79 0.79 0.81 T:morus640128v2 1.10 1.13 1.15 T:seakeyakv2 2.14 2.18 2.19 T:norx6441v3 2.17 2.18 2.20 T:norx6444v3 2.15 2.18 2.20 T:norx6441v2 2.44 2.49 2.55 T:lakekeyakv2 2.56 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128otrsv3 2.56 2.56 2.57 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n8t8silcv2 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.59 T:aes128n12t8silcv3 2.55 2.59 2.60 T:norx6441v1 2.77 2.82 2.85 T:lakekeyakv1 2.80 2.82 2.93 T:norx6444v2 3.20 3.21 3.27 T:norx6461v2 3.26 3.28 3.29 T:norx6444v1 3.28 3.29 3.30 T:norx6461v3 3.56 3.56 3.56 T:aes256otrsv3 3.67 3.68 3.76 T:norx3241v2 3.68 3.70 3.70 T:norx6461v1 3.75 3.79 3.86 T:norx3241v3 3.71? 3.88? 4.19? T:ketjemajorv2 4.43 4.45 4.52 T:norx3241v1 5.07 5.09 5.11 T:riverkeyakv2 5.28 5.38 5.45 T:aesjambuv1 5.40 5.55 5.58 T:norx3261v2 5.58 5.63 5.71 T:norx3261v3 5.68 5.69 5.69 ascon128av12 6.75 6.75 6.76 T:acorn128v3 7.15 7.17 7.19 T:ketjeminorv2 7.25 7.25 7.25 T:acorn128v2 7.52 7.53 7.53 T:norx3261v1 8.44 8.44 8.45 T:ascon128av11 8.44 8.46 8.49 T:ascon96v1 8.50 8.50 8.50 T:ascon128v1 8.50 8.50 8.51 T:ascon128v11 8.87 8.88 8.88 ascon128v12 11.91 11.92 11.95 T:aes128n12clocv1 11.92 11.94 11.96 T:aes128n8clocv1 12.36 12.39 12.42 T:aes128otrsv2 12.40 12.43 12.45 T:aes128otrsv1 14.16 14.22 14.28 T:aes128otrpv2 14.21 14.24 14.26 T:aes128otrpv1 16.39 16.43 16.48 T:aes256otrsv2 16.44 16.46 16.49 T:aes256otrsv1 16.89 17.26 18.11 T:twine80n6t4clocv2 17.83 17.87 17.93 T:proest256otrv1 17.88 18.03 19.44 T:twine80n6t4clocv3 18.18 18.20 18.23 T:aes256otrpv1 18.20 18.21 18.24 T:aes256otrpv2 20.55 20.58 20.59 T:aeadaes128ocbtaglen64v1 20.58 20.61 20.75 T:aeadaes128ocbtaglen96v1 22.28 22.34 22.42 T:colm127v1 24.33 24.45 24.71 T:aeadaes192ocbtaglen64v1 24.41 24.47 24.71 T:aeadaes192ocbtaglen96v1 26.18 26.27 26.36 T:ketjesrv2 26.90 27.01 27.14 T:ketjesrv1 28.09 28.17 28.25 T:aeadaes256ocbtaglen64v1 28.17 28.28 28.31 T:aeadaes256ocbtaglen96v1 46.28 46.38 46.73 T:proest128otrv1 46.49 46.51 46.53 T:ketjejrv1 50.02 50.16 50.32 T:aezv1 66.78 66.80 66.84 T:present80n6t4silcv3 69.08 69.24 72.34 T:ketjejrv2 83.56 83.75 83.88 T:deoxyseq128128v13 83.70 83.87 84.02 T:deoxysneq128128v13 88.69 89.68 93.38 T:led80n6t4silcv3 115.53 115.66 115.83 T:deoxyseq256128v13 115.57 115.73 115.88 T:deoxysneq256128v13 490.54? 558.39? 585.15? T:acorn128 1628.05 1631.82 1647.17 T:led80n6silcv1 1643.84 1644.88 1645.57 T:led80n6t4silcv2 1735.94 1736.31 1736.74 T:present80n6silcv1 1736.50 1737.50 1740.35 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv2 0.10 0.10 0.11 T:tiaoxinv1 0.13 0.13 0.14 T:aezv4 0.13 0.13 0.14 T:aezv5 0.13 0.14 0.14 T:aezv3 0.15 0.16 0.16 T:aegis128l 0.08? 0.17? 0.26? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 aegis128l 0.08? 0.24? 0.40? T:aeadaes256ocbtaglen128v1 0.30 0.30 0.31 T:aegis128 0.31 0.31 0.31 aegis256 0.31 0.31 0.31 T:aegis256 0.28? 0.36? 0.45? T:aeadaes192ocbtaglen128v1 0.37 0.38 0.40 aes256gcmv1 0.39 0.40 0.41 T:aes128gcmv1 0.40 0.40 0.41 T:aes128otrpv3 0.41 0.42 0.42 T:aes128otrcv3 0.48 0.49 0.50 T:morus1280128v2 0.49 0.49 0.50 T:morus1280256v1 0.49 0.50 0.51 T:colm0v1 0.47 0.50 0.51 T:morus1280128v1 0.49 0.50 0.51 T:morus1280256v2 0.48 0.51 0.53 T:oceankeyakv2 0.52 0.53 0.54 T:deoxysii128v141 0.52 0.53 0.53 T:aes256otrpv3 0.53 0.54 0.54 T:deoxysi128v141 0.55 0.56 0.56 T:aes256otrcv3 0.52? 0.59? 0.66? T:lunarkeyakv2 0.59 0.59 0.60 T:deoxysii256v141 0.60 0.60 0.61 T:deoxysi256v141 0.61 0.62 0.62 T:deoxyseq128128v1 0.61 0.62 0.63 T:deoxysneq128128v1 0.69 0.70 0.71 T:deoxysneq256128v1 0.69 0.70 0.72 T:deoxyseq256128v1 0.71 0.72 0.73 T:morus640128v1 0.76 0.78 0.79 T:morus640128v2 1.10 1.12 1.14 T:seakeyakv2 2.04 2.10 2.17 T:norx6444v3 2.15 2.15 2.19 T:norx6441v2 2.15 2.17 2.18 T:norx6441v3 2.44 2.48 2.57 T:lakekeyakv2 2.52 2.54 2.59 T:norx6441v1 2.55 2.55 2.57 T:aes128n8t8clocv2 2.55 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128otrsv3 2.56 2.56 2.57 T:aes128n8t8silcv2 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.57 2.57 T:aes128n12t8clocv3 2.79 2.82 2.83 T:lakekeyakv1 2.88 2.90 2.93 T:norx6444v2 3.22 3.26 3.29 T:norx6461v3 3.25 3.27 3.29 T:norx6461v2 3.26 3.27 3.31 T:norx6444v1 3.56 3.56 3.56 T:aes256otrsv3 3.78 3.80 3.91 T:norx3241v3 3.76 3.81 3.86 T:norx3241v2 3.75 3.89 4.14 T:ketjemajorv2 3.91 3.96 3.98 T:norx6461v1 4.44 4.52 4.60 T:norx3241v1 5.08 5.09 5.11 T:riverkeyakv2 5.26 5.27 5.34 T:aesjambuv1 5.56 5.56 5.57 ascon128av12 5.55 5.63 5.67 T:norx3261v2 5.54 5.65 5.67 T:norx3261v3 7.00 7.00 7.00 T:acorn128v3 7.15 7.18 7.21 T:ketjeminorv2 7.25 7.25 7.25 T:acorn128v2 7.52 7.52 7.53 T:norx3261v1 8.37 8.38 8.38 T:ascon128v1 8.38 8.38 8.38 T:ascon128v11 8.43 8.44 8.46 T:ascon128av11 8.45 8.49 8.52 T:ascon96v1 9.12 9.12 9.13 ascon128v12 11.89 11.93 11.96 T:aes128n12clocv1 11.92 11.94 11.95 T:aes128n8clocv1 12.35 12.39 12.42 T:aes128otrsv2 12.37 12.41 12.44 T:aes128otrsv1 14.17 14.22 14.27 T:aes128otrpv1 14.20 14.22 14.25 T:aes128otrpv2 16.39 16.43 16.47 T:aes256otrsv2 16.42 16.45 16.48 T:aes256otrsv1 16.84 17.19 17.74 T:twine80n6t4clocv2 17.80 17.80 18.00 T:twine80n6t4clocv3 17.86 17.91 17.93 T:proest256otrv1 18.12 18.17 18.24 T:aes256otrpv2 18.19 18.22 18.23 T:aes256otrpv1 20.49 20.52 20.75 T:aeadaes128ocbtaglen96v1 20.54 20.56 20.62 T:aeadaes128ocbtaglen64v1 22.22 22.27 22.31 T:colm127v1 24.28 24.30 24.34 T:aeadaes192ocbtaglen96v1 24.33 24.46 24.67 T:aeadaes192ocbtaglen64v1 26.22 26.29 26.38 T:ketjesrv2 26.87 26.94 27.05 T:ketjesrv1 28.08 28.13 28.40 T:aeadaes256ocbtaglen96v1 28.14 28.29 28.40 T:aeadaes256ocbtaglen64v1 46.27 46.36 46.78 T:proest128otrv1 46.48 46.50 46.54 T:ketjejrv1 50.01 50.12 50.25 T:aezv1 66.79 66.85 66.94 T:present80n6t4silcv3 69.03 69.20 72.34 T:ketjejrv2 83.64 83.73 83.83 T:deoxyseq128128v13 83.63 83.79 83.96 T:deoxysneq128128v13 88.69 90.29 93.38 T:led80n6t4silcv3 115.56 115.77 116.41 T:deoxyseq256128v13 115.84 116.05 116.25 T:deoxysneq256128v13 478.67? 492.39? 620.36? T:acorn128 1621.73 1626.10 1628.40 T:led80n6t4silcv2 1628.42 1631.73 1634.08 T:led80n6silcv1 1735.98 1736.83 1740.30 T:present80n6silcv1 1736.38 1737.24 1737.77 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv1 0.10 0.10 0.11 T:tiaoxinv2 0.13 0.13 0.14 T:aezv5 0.13 0.14 0.14 T:aezv4 0.13 0.14 0.14 T:aezv3 0.15 0.16 0.16 T:aegis128l 0.09? 0.17? 0.26? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.17 aegis128l 0.16? 0.24? 0.40? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.31 T:aegis128 0.31 0.31 0.31 T:aegis256 0.30 0.31 0.32 aegis256 0.29? 0.36? 0.48? T:aeadaes192ocbtaglen128v1 0.37 0.39 0.40 aes256gcmv1 0.40 0.40 0.41 T:aes128gcmv1 0.40 0.40 0.41 T:aes128otrpv3 0.41 0.42 0.42 T:aes128otrcv3 0.48 0.49 0.50 T:morus1280256v2 0.48 0.49 0.50 T:morus1280256v1 0.48 0.49 0.50 T:morus1280128v1 0.48 0.49 0.50 T:colm0v1 0.47? 0.50? 0.53? T:oceankeyakv2 0.49 0.50 0.51 T:morus1280128v2 0.52 0.53 0.54 T:deoxysii128v141 0.52 0.53 0.53 T:aes256otrpv3 0.54 0.54 0.54 T:deoxysi128v141 0.55 0.56 0.56 T:aes256otrcv3 0.59 0.60 0.60 T:deoxysii256v141 0.60 0.60 0.61 T:deoxysi256v141 0.54? 0.61? 0.67? T:lunarkeyakv2 0.61 0.62 0.62 T:deoxyseq128128v1 0.61 0.62 0.63 T:deoxysneq128128v1 0.69 0.70 0.71 T:deoxyseq256128v1 0.69 0.70 0.71 T:deoxysneq256128v1 0.71 0.72 0.73 T:morus640128v1 0.75 0.77 0.78 T:morus640128v2 1.09 1.13 1.15 T:seakeyakv2 2.04 2.08 2.17 T:norx6444v3 2.14 2.15 2.18 T:norx6441v2 2.14 2.16 2.17 T:norx6441v3 2.49 2.52 2.54 T:lakekeyakv2 2.55 2.56 2.56 T:aes128n8t8clocv2 2.54 2.56 2.57 T:aes128n12t8silcv2 2.55 2.56 2.57 T:aes128n12t8silcv3 2.55 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128otrsv3 2.55 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n8t8silcv2 2.55 2.59 2.61 T:norx6441v1 2.78 2.81 2.83 T:lakekeyakv1 2.81 2.87 2.91 T:norx6444v2 3.22 3.26 3.28 T:norx6461v2 3.23 3.27 3.28 T:norx6461v3 3.26 3.28 3.32 T:norx6444v1 3.56 3.56 3.56 T:aes256otrsv3 3.66 3.67 3.90 T:norx6461v1 3.71 3.80 3.83 T:norx3241v2 3.75? 3.89? 4.18? T:ketjemajorv2 3.78 3.90 3.94 T:norx3241v3 4.50 4.55 4.68 T:norx3241v1 5.08 5.10 5.12 T:riverkeyakv2 5.26 5.27 5.33 T:aesjambuv1 5.56 5.56 5.57 ascon128av12 5.62 5.65 5.76 T:norx3261v2 5.64 5.65 5.84 T:norx3261v3 7.00 7.00 7.00 T:acorn128v3 7.15 7.18 7.20 T:ketjeminorv2 7.25 7.25 7.25 T:acorn128v2 7.52 7.53 7.53 T:norx3261v1 8.38 8.38 8.39 T:ascon128v1 8.38 8.38 8.38 T:ascon128v11 8.43 8.44 8.46 T:ascon128av11 8.45 8.47 8.48 T:ascon96v1 9.12 9.12 9.12 ascon128v12 11.90 11.92 11.94 T:aes128n12clocv1 11.91 11.95 12.00 T:aes128n8clocv1 12.37 12.39 12.44 T:aes128otrsv2 12.40 12.44 12.47 T:aes128otrsv1 14.16 14.18 14.29 T:aes128otrpv1 14.19 14.22 14.25 T:aes128otrpv2 16.39 16.45 16.52 T:aes256otrsv2 16.42 16.45 16.51 T:aes256otrsv1 16.82 17.12 17.76 T:twine80n6t4clocv2 17.85 17.90 17.95 T:proest256otrv1 18.21 18.22 18.25 T:aes256otrpv1 18.22 18.24 18.27 T:aes256otrpv2 17.95 19.43 19.54 T:twine80n6t4clocv3 20.47 20.52 20.59 T:aeadaes128ocbtaglen96v1 20.54 20.58 20.61 T:aeadaes128ocbtaglen64v1 22.19 22.31 22.43 T:colm127v1 24.29 24.32 24.34 T:aeadaes192ocbtaglen64v1 24.41 24.46 24.68 T:aeadaes192ocbtaglen96v1 26.16 26.24 26.33 T:ketjesrv2 26.85 26.98 27.10 T:ketjesrv1 28.14 28.15 28.19 T:aeadaes256ocbtaglen64v1 28.18 28.32 28.45 T:aeadaes256ocbtaglen96v1 46.27 46.39 46.74 T:proest128otrv1 46.49 46.51 46.56 T:ketjejrv1 50.08 50.15 50.27 T:aezv1 66.77 66.82 66.91 T:present80n6t4silcv3 69.03 69.13 69.24 T:ketjejrv2 83.72 83.85 83.98 T:deoxyseq128128v13 83.72 83.85 84.09 T:deoxysneq128128v13 88.69 89.98 93.38 T:led80n6t4silcv3 115.35 115.53 115.75 T:deoxysneq256128v13 115.80 115.98 116.20 T:deoxyseq256128v13 536.97 556.96 571.02 T:acorn128 1619.88 1624.35 1626.58 T:led80n6t4silcv2 1623.02 1629.15 1633.24 T:led80n6silcv1 1735.97 1736.34 1737.19 T:present80n6silcv1 1736.12 1737.14 1738.42 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.16 0.16 0.17 T:tiaoxinv1 0.16 0.17 0.17 T:tiaoxinv2 0.20 0.20 0.20 T:aegis128l 0.21 0.21 0.21 aegis128l 0.27? 0.28? 0.34? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.30 T:aezv5 0.30 0.30 0.30 T:aezv4 0.34 0.34 0.34 T:aegis128 0.35 0.35 0.36 aegis256 0.36 0.36 0.36 T:aegis256 0.38? 0.38? 0.44? T:aeadaes256ocbtaglen128v1 0.49? 0.49? 0.60? T:aeadaes192ocbtaglen128v1 0.53 0.54 0.54 T:aes128otrcv3 0.54 0.54 0.54 T:aes128otrpv3 0.55 0.55 0.56 aes256gcmv1 0.59 0.59 0.60 T:morus1280256v1 0.59 0.60 0.61 T:morus1280128v1 0.60 0.60 0.60 T:morus1280128v2 0.60 0.61 0.62 T:morus1280256v2 0.63 0.63 0.63 T:deoxysi128v141 0.68 0.69 0.69 T:aes128gcmv1 0.69 0.69 0.69 T:aes256otrpv3 0.70 0.71 0.72 T:deoxysi256v141 0.71 0.71 0.72 T:aes256otrcv3 0.71 0.72 0.72 T:deoxysneq128128v1 0.83 0.83 0.84 T:deoxysneq256128v1 0.84 0.85 0.85 T:morus640128v1 0.87 0.88 0.88 T:morus640128v2 0.91 0.91 0.91 T:deoxysii128v141 0.97 0.97 0.98 T:colm0v1 1.03 1.03 1.04 T:deoxysii256v141 1.05 1.06 1.06 T:deoxyseq128128v1 1.25 1.26 1.28 T:deoxyseq256128v1 1.41 1.42 1.44 T:oceankeyakv2 1.53 1.54 1.56 T:aes128otrsv3 1.77 1.77 1.77 T:seakeyakv2 2.08 2.10 2.13 T:norx6444v3 2.13 2.13 2.13 T:aes256otrsv3 2.45 2.45 2.46 T:norx6441v3 2.45 2.46 2.49 T:norx6441v2 2.45 2.47 2.49 T:lunarkeyakv2 2.61 2.61 2.61 T:aes128n8t8silcv2 2.61 2.61 2.61 T:aes128n12t8silcv2 2.61 2.61 2.61 T:aes128n12t8clocv3 2.61 2.61 2.61 T:aes128n8t8clocv2 2.61 2.61 2.61 T:aes128n12t8silcv3 2.61 2.61 2.61 T:aes128n12t8clocv2 2.89 2.90 2.90 T:norx6441v1 3.03 3.05 3.08 T:lakekeyakv2 3.62 3.63 3.65 T:lakekeyakv1 3.67 3.68 3.69 T:norx6461v2 3.66 3.68 3.73 T:norx6461v3 4.01 4.05 4.05 T:norx3241v3 4.01 4.08 4.14 T:norx3241v2 4.18 4.22 4.24 T:norx6444v2 4.39 4.40 4.41 T:norx6461v1 4.75 4.76 4.79 T:norx6444v1 4.78 4.82 4.90 T:norx3241v1 5.35 5.35 5.36 T:aesjambuv1 5.65 5.66 5.68 T:riverkeyakv2 5.79 5.81 5.96 T:ketjemajorv2 5.91 5.97 5.99 T:norx3261v2 6.02 6.02 6.02 ascon128av12 6.07 6.09 6.17 T:norx3261v3 7.66 7.66 7.68 T:acorn128v3 7.93 7.93 7.93 T:norx3261v1 8.19 8.19 8.20 T:acorn128v2 8.63 8.63 8.64 T:ascon96v1 8.64 8.64 8.70 T:ascon128av11 8.68 8.68 8.68 T:ascon128v11 8.68 8.68 8.68 T:ascon128v1 8.81 8.81 8.83 T:ketjeminorv2 8.88 8.88 8.88 ascon128v12 13.83 13.84 13.85 T:aes128otrsv2 13.83 13.84 13.87 T:aes128otrsv1 14.71 14.73 14.76 T:aes128otrpv1 14.72 14.73 14.75 T:aes128otrpv2 17.37 17.39 17.41 T:aes128n12clocv1 17.44 17.46 17.48 T:aes128n8clocv1 17.92 17.94 17.96 T:aes256otrsv2 17.95 17.96 17.98 T:aes256otrsv1 17.53 18.15 19.14 T:twine80n6t4clocv2 18.77 18.78 18.80 T:aes256otrpv1 18.79 18.82 18.85 T:aes256otrpv2 18.94 18.96 19.00 T:proest256otrv1 18.70? 20.32? 20.83? T:twine80n6t4clocv3 21.19 21.23 21.30 T:aeadaes128ocbtaglen96v1 21.19 21.25 21.34 T:aeadaes128ocbtaglen64v1 25.09 25.13 25.17 T:aeadaes192ocbtaglen64v1 25.25 25.28 25.34 T:aeadaes192ocbtaglen96v1 28.82 28.88 28.93 T:ketjesrv1 29.08 29.19 29.31 T:aeadaes256ocbtaglen64v1 29.17 29.25 29.29 T:aeadaes256ocbtaglen96v1 31.17 31.21 31.25 T:ketjesrv2 34.88 34.94 34.98 T:colm127v1 46.72 46.74 46.75 T:ketjejrv1 47.81 47.93 48.00 T:proest128otrv1 67.68 67.79 67.82 T:present80n6t4silcv3 72.58 72.68 76.16 T:ketjejrv2 84.09 84.18 84.27 T:deoxysneq128128v13 90.16 91.71 92.88 T:led80n6t4silcv3 101.02 101.26 101.35 T:aezv1 116.15 116.31 116.95 T:deoxysneq256128v13 127.19 127.35 128.15 T:deoxyseq128128v13 175.78 176.04 176.78 T:deoxyseq256128v13 558.43 585.31 611.14 T:acorn128 2460.41 2461.13 2461.74 T:led80n6t4silcv2 2461.18 2462.52 2472.42 T:led80n6silcv1 2618.11 2619.04 2626.09 T:present80n6t4silcv2 2618.09 2619.70 2620.34 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.20 0.20 0.21 T:aegis128l 0.21 0.22 0.22 aegis128l 0.25 0.26 0.26 T:tiaoxinv2 0.26 0.26 0.27 T:tiaoxinv1 0.27? 0.28? 0.35? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.30 T:aezv5 0.30 0.30 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.36 T:aegis256 0.36 0.36 0.36 aegis256 0.37? 0.38? 0.44? T:aeadaes256ocbtaglen128v1 0.47? 0.47? 0.54? T:aeadaes192ocbtaglen128v1 0.51 0.51 0.52 aes256gcmv1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.56 0.56 T:aes128otrpv3 0.61 0.61 0.62 T:morus1280128v1 0.61 0.62 0.62 T:morus1280256v1 0.62 0.63 0.63 T:morus1280256v2 0.62 0.63 0.63 T:morus1280128v2 0.68 0.68 0.69 T:aes128gcmv1 0.72 0.72 0.72 T:aes256otrpv3 0.73 0.73 0.73 T:deoxysi128v141 0.73 0.73 0.73 T:aes256otrcv3 0.81 0.82 0.82 T:deoxysneq128128v1 0.83 0.83 0.84 T:morus640128v1 0.84 0.85 0.85 T:deoxysi256v141 0.85 0.86 0.86 T:deoxysneq256128v1 0.88 0.89 0.90 T:morus640128v2 0.92 0.92 0.93 T:deoxysii128v141 0.94 0.94 0.95 T:colm0v1 1.04 1.05 1.06 T:deoxysii256v141 1.19 1.20 1.21 T:deoxyseq128128v1 1.29 1.30 1.31 T:deoxyseq256128v1 1.42 1.43 1.45 T:oceankeyakv2 1.54 1.55 1.57 T:aes128otrsv3 1.79 1.80 1.81 T:seakeyakv2 2.08 2.10 2.14 T:norx6444v3 2.13 2.14 2.14 T:aes256otrsv3 2.44 2.45 2.48 T:norx6441v3 2.44 2.48 2.49 T:norx6441v2 2.50 2.52 2.54 T:lunarkeyakv2 2.58 2.58 2.58 T:aes128n12t8silcv3 2.58 2.58 2.59 T:aes128n12t8clocv3 2.58 2.58 2.58 T:aes128n12t8silcv2 2.58 2.59 2.59 T:aes128n12t8clocv2 2.58 2.59 2.59 T:aes128n8t8silcv2 2.58 2.59 2.59 T:aes128n8t8clocv2 2.83 2.88 2.88 T:norx6441v1 3.06 3.08 3.10 T:lakekeyakv2 3.59 3.61 3.62 T:lakekeyakv1 3.65 3.65 3.72 T:norx6461v2 3.66 3.67 3.72 T:norx6461v3 4.02 4.06 4.07 T:norx3241v3 4.13 4.16 4.18 T:norx3241v2 4.18 4.22 4.23 T:norx6444v2 4.19 4.35 4.38 T:norx6461v1 4.75 4.76 4.78 T:norx6444v1 4.81 4.83 4.90 T:norx3241v1 5.58 5.58 5.58 T:aesjambuv1 5.74 5.75 5.76 T:riverkeyakv2 5.72 5.77 5.99 T:ketjemajorv2 5.98 5.99 5.99 ascon128av12 6.06 6.17 6.23 T:norx3261v2 6.20 6.27 6.31 T:norx3261v3 7.77 7.77 7.77 T:acorn128v3 7.83 7.85 7.85 T:norx3261v1 8.15 8.15 8.15 T:acorn128v2 8.50 8.50 8.50 T:ascon128v11 8.50 8.50 8.50 T:ascon128v1 8.85 8.86 8.88 T:ascon96v1 8.88 8.88 8.93 T:ascon128av11 9.05 9.05 9.06 T:ketjeminorv2 9.13 9.13 9.13 ascon128v12 13.96 13.97 13.98 T:aes128otrsv1 13.98 14.00 14.02 T:aes128otrsv2 14.80 14.82 14.90 T:aes128otrpv1 14.85 14.89 14.91 T:aes128otrpv2 16.78 16.81 16.83 T:aes128n12clocv1 16.82 16.83 16.84 T:aes128n8clocv1 18.06 18.07 18.09 T:aes256otrsv1 18.08 18.10 18.13 T:aes256otrsv2 17.46? 18.13? 19.56? T:twine80n6t4clocv2 18.43? 18.56? 20.85? T:twine80n6t4clocv3 18.93 18.95 18.98 T:aes256otrpv1 18.97 18.98 18.99 T:aes256otrpv2 19.26 19.29 19.31 T:proest256otrv1 25.40 25.44 25.49 T:aeadaes128ocbtaglen96v1 25.40 25.44 25.58 T:aeadaes128ocbtaglen64v1 28.44 28.50 28.56 T:ketjesrv2 29.81 29.86 29.94 T:ketjesrv1 30.14 30.17 30.32 T:aeadaes192ocbtaglen96v1 30.15 30.25 30.26 T:aeadaes192ocbtaglen64v1 35.17 35.18 35.20 T:aeadaes256ocbtaglen96v1 35.21 35.24 35.40 T:aeadaes256ocbtaglen64v1 43.00 43.17 43.21 T:colm127v1 48.02 48.06 48.11 T:proest128otrv1 49.15 49.20 49.21 T:ketjejrv1 67.47 67.57 67.64 T:present80n6t4silcv3 74.69 74.77 74.92 T:ketjejrv2 90.06 91.23 92.89 T:led80n6t4silcv3 100.61 100.82 100.95 T:aezv1 110.88 110.95 111.05 T:deoxysneq128128v13 127.48 127.60 127.78 T:deoxyseq128128v13 148.85 149.41 149.74 T:deoxysneq256128v13 177.12 177.66 178.69 T:deoxyseq256128v13 559.56 564.22 601.19 T:acorn128 2447.47 2452.92 2466.09 T:led80n6silcv1 2467.94 2470.18 2471.70 T:led80n6t4silcv2 2619.42 2619.83 2620.39 T:present80n6silcv1 2619.69 2620.13 2620.87 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17 0.18 0.18 T:aezv5 0.17 0.18 0.18 T:aezv3 0.18 0.18 0.18 T:aezv4 0.20 0.20 0.21 T:aegis128l 0.22 0.23 0.23 aegis128l 0.25 0.26 0.26 T:tiaoxinv2 0.25 0.26 0.27 T:tiaoxinv1 0.27? 0.28? 0.33? T:aeadaes128ocbtaglen128v1 0.34 0.34 0.34 T:aegis128 0.35 0.36 0.36 T:aegis256 0.38? 0.38? 0.50? T:aeadaes256ocbtaglen128v1 0.38 0.38 0.38 aegis256 0.47? 0.47? 0.57? T:aeadaes192ocbtaglen128v1 0.51 0.51 0.52 aes256gcmv1 0.55 0.55 0.55 T:aes128otrcv3 0.56 0.56 0.56 T:aes128otrpv3 0.61 0.62 0.62 T:morus1280128v1 0.61 0.62 0.62 T:morus1280256v1 0.63 0.63 0.63 T:morus1280128v2 0.62 0.63 0.63 T:morus1280256v2 0.68 0.68 0.68 T:aes128gcmv1 0.71 0.72 0.72 T:aes256otrpv3 0.73 0.73 0.73 T:aes256otrcv3 0.73 0.73 0.73 T:deoxysi128v141 0.81 0.82 0.82 T:deoxysneq128128v1 0.83 0.83 0.84 T:morus640128v1 0.84 0.85 0.85 T:deoxysi256v141 0.85 0.86 0.87 T:deoxysneq256128v1 0.88 0.89 0.90 T:morus640128v2 0.92 0.92 0.93 T:deoxysii128v141 0.94 0.94 0.95 T:colm0v1 1.05 1.05 1.05 T:deoxysii256v141 1.19 1.20 1.20 T:deoxyseq128128v1 1.29 1.29 1.31 T:deoxyseq256128v1 1.43 1.44 1.45 T:oceankeyakv2 1.55 1.55 1.57 T:aes128otrsv3 1.81 1.82 1.82 T:seakeyakv2 2.07 2.09 2.12 T:norx6444v3 2.13 2.13 2.14 T:aes256otrsv3 2.44 2.44 2.44 T:norx6441v3 2.43 2.44 2.48 T:norx6441v2 2.52 2.54 2.55 T:lunarkeyakv2 2.58 2.58 2.60 T:aes128n12t8silcv3 2.58 2.58 2.60 T:aes128n12t8silcv2 2.58 2.58 2.60 T:aes128n8t8silcv2 2.58 2.58 2.59 T:aes128n8t8clocv2 2.58 2.58 2.59 T:aes128n12t8clocv2 2.58 2.58 2.58 T:aes128n12t8clocv3 2.83 2.84 2.87 T:norx6441v1 3.09 3.09 3.10 T:lakekeyakv2 3.59 3.60 3.62 T:lakekeyakv1 3.65 3.66 3.66 T:norx6461v3 3.66 3.67 3.72 T:norx6461v2 4.06 4.07 4.07 T:norx3241v3 4.06 4.13 4.16 T:norx3241v2 4.18 4.23 4.27 T:norx6444v2 4.37 4.38 4.38 T:norx6461v1 4.77 4.80 4.81 T:norx6444v1 4.74 4.83 4.85 T:norx3241v1 5.58 5.58 5.58 T:aesjambuv1 5.74 5.76 6.01 T:ketjemajorv2 5.76 5.76 5.77 T:riverkeyakv2 5.96 5.98 5.99 ascon128av12 6.03 6.04 6.11 T:norx3261v3 6.06 6.17 6.22 T:norx3261v2 7.77 7.77 7.77 T:acorn128v3 7.84 7.85 7.85 T:norx3261v1 8.15 8.15 8.15 T:acorn128v2 8.33 8.34 8.37 T:ascon96v1 8.33 8.35 8.41 T:ascon128av11 8.50 8.50 8.50 T:ascon128v1 8.50 8.50 8.50 T:ascon128v11 9.06 9.06 9.07 T:ketjeminorv2 9.13 9.13 9.13 ascon128v12 13.97 13.98 13.99 T:aes128otrsv1 13.98 14.00 14.02 T:aes128otrsv2 14.84 14.86 14.90 T:aes128otrpv1 14.88 14.90 14.92 T:aes128otrpv2 16.76 16.80 16.83 T:aes128n12clocv1 16.81 16.83 16.85 T:aes128n8clocv1 17.44 17.96 19.25 T:twine80n6t4clocv2 18.09 18.10 18.11 T:aes256otrsv1 18.10 18.12 18.14 T:aes256otrsv2 18.40? 18.46? 21.08? T:twine80n6t4clocv3 18.93 18.95 18.98 T:aes256otrpv1 18.96 18.98 19.00 T:aes256otrpv2 19.25 19.27 19.31 T:proest256otrv1 25.41 25.41 25.42 T:aeadaes128ocbtaglen64v1 25.38 25.42 25.52 T:aeadaes128ocbtaglen96v1 28.47 28.52 28.58 T:ketjesrv2 29.87 29.93 29.99 T:ketjesrv1 30.19 30.21 30.23 T:aeadaes192ocbtaglen96v1 30.20 30.22 30.24 T:aeadaes192ocbtaglen64v1 35.20 35.22 35.25 T:aeadaes256ocbtaglen64v1 35.21 35.31 35.34 T:aeadaes256ocbtaglen96v1 43.08 43.17 43.18 T:colm127v1 48.04 48.12 48.14 T:proest128otrv1 49.19 49.21 49.23 T:ketjejrv1 67.56 67.64 67.66 T:present80n6t4silcv3 74.71 74.81 77.67 T:ketjejrv2 90.24 91.96 92.89 T:led80n6t4silcv3 100.63 100.84 101.36 T:aezv1 111.02 111.13 111.37 T:deoxysneq128128v13 127.43 127.51 127.60 T:deoxyseq128128v13 148.66 149.11 149.88 T:deoxysneq256128v13 176.31 176.48 176.70 T:deoxyseq256128v13 536.93 547.76 548.14 T:acorn128 2457.76 2458.14 2472.13 T:led80n6silcv1 2467.49 2470.32 2477.90 T:led80n6t4silcv2 2619.33 2620.15 2621.98 T:present80n6t4silcv2 2619.79 2620.81 2622.09 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.82? 0.88? 0.92? T:aegis128 0.88 0.90 0.91 T:aegis128l 0.89 0.91 0.94 aegis128l 1.18 1.18 1.18 aegis256 1.18 1.19 1.19 T:aegis256 1.20 1.21 1.22 T:tiaoxinv1 1.21 1.23 1.24 T:tiaoxinv2 1.38 1.40 1.44 T:aezv5 1.40 1.42 1.46 T:aezv3 1.48 1.49 1.51 T:aezv4 2.35 2.43 2.48 T:aes128otrsv3 2.40 2.44 2.51 T:colm0v1 2.71 2.75 2.79 T:morus640128v1 2.77? 2.82? 4.50? T:aeadaes128ocbtaglen128v1 2.85 2.86 2.90 T:morus640128v2 2.90 2.92 2.92 T:aes128otrpv3 2.98 2.99 3.03 T:aes128n8t8silcv2 2.99 3.02 3.03 T:aes128n12t8silcv3 3.02 3.03 3.08 T:aes128n12t8silcv2 2.95 3.04 3.12 T:aes128otrcv3 3.02 3.04 3.05 T:aes128n12t8clocv2 3.03 3.04 3.07 T:aes128n12t8clocv3 3.02 3.05 3.13 T:morus1280128v1 3.08 3.09 3.09 T:aes128n8t8clocv2 3.02 3.10 3.16 T:deoxysneq128128v1 3.17 3.19 3.23 T:morus1280256v1 3.29 3.31 3.36 T:aes256otrsv3 3.30 3.34 3.40 T:morus1280256v2 3.37 3.43 3.49 T:morus1280128v2 3.62? 3.66? 5.07? T:aeadaes256ocbtaglen128v1 3.79 3.80 3.84 T:aes256otrpv3 3.80 3.84 3.91 T:deoxysi128v141 3.79? 3.87? 5.90? T:aeadaes192ocbtaglen128v1 3.94 3.94 3.98 T:deoxysneq256128v1 3.98 4.03 4.08 T:aes256otrcv3 4.60 4.64 4.74 aes256gcmv1 4.62 4.68 4.76 T:deoxysi256v141 4.76 4.81 4.90 T:deoxyseq128128v1 4.80 4.86 4.90 T:aes128gcmv1 5.14 5.15 5.18 T:deoxysii128v141 5.94 5.98 6.02 T:deoxyseq256128v1 6.01 6.08 6.10 T:deoxysii256v141 6.25 6.29 6.33 T:aesjambuv1 7.69 7.75 7.86 T:norx6441v2 7.75 7.86 7.92 T:norx6441v3 7.82 7.87 7.90 T:norx6441v1 9.34 9.34 9.39 ascon128av12 9.72 9.87 9.95 T:norx3241v1 9.87 9.94 10.03 T:norx3241v2 9.87 10.01 10.13 T:norx3241v3 11.46 11.46 11.47 T:ascon128v1 11.46 11.48 11.50 T:ascon128v11 11.54 11.59 11.84 T:lakekeyakv1 11.62 11.67 11.72 T:norx6461v3 11.75 11.75 11.75 ascon128v12 11.73 11.89 11.95 T:norx6461v2 11.82 12.06 12.13 T:norx6461v1 12.89 12.91 13.04 T:ascon96v1 13.03 13.07 13.32 T:ascon128av11 13.24 13.27 13.32 T:lakekeyakv2 13.30 13.34 13.53 T:riverkeyakv2 14.04 14.12 14.19 T:norx6444v3 14.59 14.59 14.64 T:norx3261v2 14.73 14.82 15.02 T:norx3261v3 16.33 16.35 16.36 T:norx3261v1 16.76 16.87 17.04 T:seakeyakv2 17.20 17.32 17.63 T:oceankeyakv2 21.41 21.50 21.81 T:aes128n8clocv1 21.49 21.53 21.67 T:aes128otrsv1 21.58 21.71 21.84 T:aes128otrsv2 21.56 21.74 21.90 T:aes128n12clocv1 22.10 22.13 22.27 T:aes128otrpv1 22.25 22.37 22.47 T:aes128otrpv2 24.79 25.42 26.12 T:twine80n6t4clocv2 26.36 26.44 26.85 T:ketjeminorv2 27.49 27.57 27.63 T:aes256otrsv1 27.63 27.78 28.01 T:aes256otrsv2 28.15 28.19 28.34 T:aes256otrpv1 28.27 28.32 28.46 T:aes256otrpv2 28.06 28.52 28.66 T:twine80n6t4clocv3 28.53 28.53 28.58 T:acorn128v3 29.70 29.70 29.74 T:acorn128v2 29.91 30.01 30.13 T:norx6444v2 34.39 34.45 34.52 T:aeadaes128ocbtaglen64v1 34.35 34.46 34.73 T:norx6444v1 34.22 34.52 36.83 T:ketjemajorv2 34.57 34.67 34.85 T:aeadaes128ocbtaglen96v1 38.13 38.49 38.89 T:lunarkeyakv2 39.71 39.84 39.97 T:aeadaes192ocbtaglen96v1 39.81 39.91 40.01 T:aeadaes192ocbtaglen64v1 45.05 45.41 45.74 T:ketjesrv1 46.53 46.62 46.69 T:aeadaes256ocbtaglen64v1 46.51 46.73 47.01 T:aeadaes256ocbtaglen96v1 50.61 50.77 50.94 T:colm127v1 51.13 51.37 51.61 T:ketjesrv2 53.98 54.07 54.30 T:proest256otrv1 62.24 62.57 63.17 T:ketjejrv1 83.13 83.15 83.17 T:present80n6t4silcv3 92.52 92.78 93.05 T:proest128otrv1 94.21 94.49 94.83 T:deoxysneq128128v13 94.30 94.87 98.38 T:ketjejrv2 106.70 108.65 110.98 T:led80n6t4silcv3 111.29 111.84 112.62 T:aezv1 130.63 131.35 132.01 T:deoxysneq256128v13 157.39 157.78 158.18 T:deoxyseq128128v13 217.88 218.27 218.59 T:deoxyseq256128v13 1968.40 2107.66 2154.73 T:acorn128 2755.51 2758.42 2761.43 T:led80n6t4silcv2 2750.72 2758.78 2768.93 T:led80n6silcv1 2931.35 2933.24 2939.40 T:present80n6t4silcv2 2932.52 2933.60 2936.47 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.90 0.91 0.97 T:aegis128l 0.85? 0.91? 0.99? T:aegis128 0.98 0.98 1.03 aegis128l 1.16 1.17 1.18 T:aegis256 1.20 1.21 1.24 T:tiaoxinv1 1.21 1.23 1.27 T:tiaoxinv2 1.23 1.25 1.29 aegis256 1.39 1.42 1.45 T:aezv5 1.41 1.42 1.44 T:aezv3 1.47 1.48 1.50 T:aezv4 2.44 2.48 2.55 T:aes128otrsv3 2.70 2.74 2.77 T:morus640128v1 2.76? 2.81? 4.44? T:aeadaes128ocbtaglen128v1 2.93 2.98 2.99 T:colm0v1 3.03 3.07 3.10 T:morus640128v2 3.11 3.12 3.13 T:aes128n12t8clocv3 3.10 3.12 3.13 T:aes128n8t8clocv2 3.12 3.12 3.13 T:aes128n12t8clocv2 3.08 3.13 3.26 T:aes128n12t8silcv2 3.10 3.18 3.28 T:aes128n8t8silcv2 3.21 3.30 3.36 T:aes128otrcv3 3.19 3.31 3.37 T:aes128n12t8silcv3 3.29 3.34 3.40 T:morus1280128v1 3.31 3.35 3.41 T:morus1280256v1 3.37 3.38 3.40 T:aes128otrpv3 3.45 3.48 3.50 T:aes256otrsv3 3.49? 3.58? 6.07? T:aeadaes256ocbtaglen128v1 3.54 3.58 3.63 T:morus1280128v2 3.53 3.62 3.66 T:morus1280256v2 3.69? 3.78? 5.59? T:aeadaes192ocbtaglen128v1 4.25 4.29 4.31 T:aes256otrpv3 4.23 4.30 4.34 T:aes256otrcv3 4.32 4.36 4.43 T:deoxysneq256128v1 4.35 4.37 4.42 T:deoxysneq128128v1 4.77 4.77 4.80 T:deoxysi128v141 4.99 5.02 5.12 aes256gcmv1 4.99 5.12 5.15 T:aes128gcmv1 5.42 5.44 5.55 T:deoxysii128v141 5.65 5.67 5.72 T:deoxysi256v141 6.23 6.42 6.70 T:aesjambuv1 6.48 6.51 6.56 T:deoxyseq256128v1 6.76 6.78 6.94 T:deoxysii256v141 6.77 6.83 6.85 T:deoxyseq128128v1 7.92 8.00 8.08 T:norx6441v1 7.97 8.04 8.09 T:norx6441v3 7.96 8.05 8.12 T:norx6441v2 9.28 9.29 9.35 ascon128av12 9.99 10.05 10.29 T:norx3241v1 10.22 10.38 10.58 T:norx3241v3 10.34 10.43 10.52 T:norx3241v2 11.30 11.30 11.33 T:ascon128v11 11.30 11.30 11.35 T:ascon128v1 11.54 11.66 12.05 T:lakekeyakv1 11.84 11.88 11.93 T:norx6461v2 11.82 11.89 11.93 T:norx6461v3 11.94 12.01 12.21 T:norx6461v1 12.06 12.06 12.06 ascon128v12 13.11 13.16 13.17 T:ascon96v1 13.25 13.29 13.61 T:lakekeyakv2 13.28 13.29 13.47 T:ascon128av11 13.35 13.41 13.62 T:riverkeyakv2 14.09 14.20 14.28 T:norx6444v3 15.21 15.28 15.34 T:norx3261v3 15.04 15.46 15.65 T:norx3261v2 16.41 16.42 16.44 T:norx3261v1 16.81 16.90 17.02 T:seakeyakv2 17.12 17.20 17.47 T:oceankeyakv2 20.82 21.14 21.32 T:aes128n8clocv1 21.04 21.23 21.48 T:aes128n12clocv1 21.62 21.71 21.79 T:aes128otrsv1 21.75 21.83 21.99 T:aes128otrsv2 22.28 22.38 22.49 T:aes128otrpv1 22.34 22.49 22.57 T:aes128otrpv2 24.68 24.89 26.11 T:twine80n6t4clocv2 26.54 26.58 27.10 T:ketjeminorv2 26.43 27.60 28.76 T:twine80n6t4clocv3 27.63 27.67 27.75 T:aes256otrsv1 27.85 27.94 28.05 T:aes256otrsv2 28.37 28.37 28.45 T:acorn128v3 28.39 28.44 28.51 T:aes256otrpv1 28.59 28.69 29.00 T:aes256otrpv2 29.80 29.96 30.40 T:norx6444v2 30.24 30.27 30.29 T:acorn128v2 34.21 34.36 34.50 T:norx6444v1 34.48 34.71 36.38 T:ketjemajorv2 38.20 38.90 39.44 T:lunarkeyakv2 41.84 41.90 42.36 T:aeadaes128ocbtaglen64v1 41.84 41.99 42.11 T:aeadaes128ocbtaglen96v1 46.41 46.70 47.08 T:ketjesrv1 48.37 48.44 48.47 T:aeadaes192ocbtaglen96v1 48.42 48.46 48.49 T:aeadaes192ocbtaglen64v1 48.76 48.96 49.29 T:ketjesrv2 55.94 56.07 56.55 T:proest256otrv1 56.99 57.31 57.44 T:aeadaes256ocbtaglen96v1 57.22 57.38 57.46 T:aeadaes256ocbtaglen64v1 59.04 59.11 59.19 T:colm127v1 64.63 64.78 65.05 T:ketjejrv1 82.83 82.93 83.22 T:present80n6t4silcv3 93.49 93.84 94.11 T:proest128otrv1 96.27 96.93 100.71 T:ketjejrv2 106.74 108.85 111.16 T:led80n6t4silcv3 113.50 114.09 114.90 T:aezv1 120.99 121.25 121.62 T:deoxysneq128128v13 157.49 157.93 158.22 T:deoxyseq128128v13 162.48 163.34 164.32 T:deoxysneq256128v13 218.30 219.13 220.00 T:deoxyseq256128v13 1951.68 1997.20 2091.55 T:acorn128 2748.83 2755.09 2782.98 T:led80n6silcv1 2758.37 2758.96 2760.19 T:led80n6t4silcv2 2931.37 2932.13 2933.24 T:present80n6t4silcv2 2932.31 2933.52 2936.91 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.85? 0.90? 0.95? T:aegis128 0.90 0.91 0.93 T:aegis128l 1.00? 1.00? 1.28? T:aezv5 1.01 1.04 1.05 aegis128l 1.04 1.05 1.05 T:aezv3 1.16 1.17 1.17 T:aegis256 1.18? 1.19? 1.41? T:aezv4 1.21 1.23 1.25 T:tiaoxinv1 1.21 1.24 1.26 T:tiaoxinv2 1.25 1.26 1.28 aegis256 2.44 2.46 2.55 T:aes128otrsv3 2.70 2.75 2.79 T:morus640128v1 2.75? 2.79? 4.18? T:aeadaes128ocbtaglen128v1 2.88 2.90 2.98 T:aes128n8t8silcv2 2.89 2.90 2.91 T:aes128n12t8silcv3 2.88 2.91 3.09 T:aes128n12t8silcv2 2.97 3.01 3.06 T:colm0v1 3.01 3.06 3.10 T:morus640128v2 3.06 3.08 3.10 T:aes128n12t8clocv2 3.08 3.08 3.09 T:aes128n8t8clocv2 3.08 3.09 3.11 T:aes128n12t8clocv3 3.22 3.27 3.34 T:aes128otrcv3 3.24 3.29 3.34 T:morus1280128v1 3.32 3.36 3.40 T:morus1280256v1 3.36 3.37 3.38 T:aes128otrpv3 3.45 3.48 3.50 T:aes256otrsv3 3.51 3.52 3.54 T:morus1280128v2 3.54 3.59 3.64 T:morus1280256v2 3.51? 3.59? 6.09? T:aeadaes256ocbtaglen128v1 3.66? 3.77? 5.05? T:aeadaes192ocbtaglen128v1 4.25 4.29 4.30 T:aes256otrpv3 4.25 4.30 4.32 T:aes256otrcv3 4.34 4.36 4.38 T:deoxysneq128128v1 4.33 4.36 4.51 T:deoxysneq256128v1 4.72 4.82 4.89 T:deoxysi128v141 4.98 5.03 5.09 aes256gcmv1 5.00 5.11 5.13 T:aes128gcmv1 5.41 5.43 5.50 T:deoxysii128v141 5.65 5.66 5.67 T:deoxysi256v141 6.23 6.41 6.71 T:aesjambuv1 6.46 6.49 6.56 T:deoxyseq256128v1 6.72 6.75 6.83 T:deoxyseq128128v1 6.75 6.76 6.79 T:deoxysii256v141 7.86 7.92 8.03 T:norx6441v1 7.93 7.98 8.06 T:norx6441v2 8.00 8.05 8.10 T:norx6441v3 9.28 9.29 9.32 ascon128av12 9.89 9.99 10.01 T:norx3241v1 9.96 10.04 10.33 T:norx3241v2 10.19 10.39 10.57 T:norx3241v3 11.26 11.26 11.26 T:ascon128v11 11.26 11.26 11.28 T:ascon128v1 11.85 11.90 11.96 T:norx6461v2 11.87 11.94 12.09 T:norx6461v3 11.68 12.06 12.09 T:lakekeyakv1 12.06 12.06 12.06 ascon128v12 11.99 12.25 12.35 T:norx6461v1 12.49 12.51 12.52 T:ascon96v1 12.56 12.58 12.68 T:ascon128av11 13.38 13.42 13.59 T:riverkeyakv2 14.07 14.16 14.30 T:norx6444v3 14.37 14.38 14.43 T:lakekeyakv2 14.91 15.03 15.17 T:norx3261v3 15.00 15.10 15.43 T:norx3261v2 16.43 16.44 16.45 T:norx3261v1 16.82 16.91 17.01 T:seakeyakv2 17.21 17.32 17.64 T:oceankeyakv2 20.68 20.87 21.17 T:aes128n8clocv1 20.97 21.43 21.59 T:aes128n12clocv1 21.68 21.79 21.96 T:aes128otrsv1 21.83 21.95 22.15 T:aes128otrsv2 22.31 22.37 22.50 T:aes128otrpv1 22.51 22.60 22.84 T:aes128otrpv2 24.75 24.98 25.62 T:twine80n6t4clocv2 25.80 25.82 25.88 T:twine80n6t4clocv3 26.56 26.60 26.86 T:ketjeminorv2 27.75 27.84 27.95 T:aes256otrsv1 28.04 28.14 28.37 T:aes256otrsv2 28.37 28.38 28.41 T:acorn128v3 28.36 28.51 28.65 T:aes256otrpv1 28.62 28.67 28.99 T:aes256otrpv2 30.24 30.27 30.27 T:acorn128v2 30.14 30.49 30.77 T:norx6444v2 34.35 34.44 34.49 T:norx6444v1 34.50 34.72 36.03 T:ketjemajorv2 38.33 39.01 39.62 T:lunarkeyakv2 41.71 41.88 42.28 T:aeadaes128ocbtaglen64v1 41.86 42.01 42.13 T:aeadaes128ocbtaglen96v1 46.52 46.68 47.01 T:ketjesrv1 48.36 48.46 48.48 T:aeadaes192ocbtaglen96v1 48.50 48.53 48.84 T:aeadaes192ocbtaglen64v1 48.87 49.17 49.47 T:ketjesrv2 54.52 54.72 55.24 T:proest256otrv1 57.11 57.31 57.44 T:aeadaes256ocbtaglen96v1 57.22 57.35 57.42 T:aeadaes256ocbtaglen64v1 58.96 59.02 59.09 T:colm127v1 64.56 64.70 64.84 T:ketjejrv1 82.82 82.92 83.00 T:present80n6t4silcv3 93.44 93.74 94.04 T:proest128otrv1 96.35 97.08 100.30 T:ketjejrv2 106.34 108.23 112.13 T:led80n6t4silcv3 113.10 113.54 114.35 T:aezv1 121.03 121.37 121.73 T:deoxysneq128128v13 157.47 157.77 158.15 T:deoxyseq128128v13 162.83 163.46 164.40 T:deoxysneq256128v13 218.45 219.27 219.72 T:deoxyseq256128v13 2105.22 2122.55 2249.86 T:acorn128 2756.63 2759.33 2767.62 T:led80n6silcv1 2765.88 2769.68 2777.59 T:led80n6t4silcv2 2931.78 2932.59 2934.89 T:present80n6silcv1 2931.94 2932.78 2934.33 T:present80n6t4silcv2