VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20251222

[Page version: 20260105 14:04:55]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.13? 0.14? 0.16? T:tiaoxinv2 0.14? 0.16? 0.17? T:tiaoxinv1 0.14? 0.18? 0.21? T:aeadaes128ocbtaglen128v1 0.18 0.19 0.19 aegis128l 0.18 0.19 0.19 T:aegis128l 0.23? 0.25? 0.29? T:aeadaes256ocbtaglen128v1 0.31 0.32 0.32 T:aegis128 0.31 0.33 0.33 aegis256 0.32 0.33 0.33 T:aegis256 0.36 0.36 0.37 T:aezv4 0.36 0.37 0.37 T:aezv3 0.37 0.38 0.38 T:aezv5 0.08? 0.40? 0.45? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrsv3 0.41 0.42 0.43 T:aes128otrcv3 0.43 0.44 0.45 T:aes128otrpv3 0.46 0.47 0.48 T:morus1280256v2 0.46 0.47 0.48 T:morus1280256v1 0.47 0.47 0.49 T:morus1280128v2 0.47 0.48 0.49 T:morus1280128v1 0.52 0.53 0.54 T:deoxysi128v141 0.54 0.54 0.55 T:aes256otrcv3 0.54 0.55 0.55 T:aes256otrsv3 0.52? 0.56? 0.58? aes256gcmv1 0.57 0.57 0.58 T:aes256otrpv3 0.60 0.61 0.61 T:deoxysi256v141 0.61 0.62 0.63 T:deoxysneq128128v1 0.69 0.70 0.72 T:deoxysneq256128v1 0.68? 0.75? 0.82? T:lunarkeyakv2 0.71? 0.76? 0.79? T:oceankeyakv2 0.78 0.79 0.80 T:aes128gcmv1 0.80 0.81 0.82 T:morus640128v1 0.81 0.81 0.82 T:morus640128v2 0.89 0.91 0.92 T:norx6444v3 1.03 1.06 1.08 T:deoxysii128v141 1.15 1.20 1.23 T:deoxysii256v141 1.21 1.25 1.28 T:deoxyseq128128v1 1.27 1.28 1.30 T:colm0v1 1.35 1.38 1.44 T:seakeyakv2 1.39 1.45 1.49 T:deoxyseq256128v1 2.13 2.15 2.20 T:norx6441v2 2.14 2.19 2.20 T:norx6441v3 2.62 2.62 2.62 T:aes128n12t8silcv3 2.62 2.62 2.63 T:aes128n8t8clocv2 2.62 2.62 2.62 T:aes128n8t8silcv2 2.62 2.63 2.63 T:aes128n12t8silcv2 2.62 2.63 2.63 T:aes128n12t8clocv2 2.62 2.63 2.63 T:aes128n12t8clocv3 2.56 2.64 2.65 T:norx6441v1 3.12 3.18 3.28 T:lakekeyakv2 3.12 3.18 3.26 T:lakekeyakv1 3.16 3.23 3.25 T:norx6461v2 3.29 3.31 3.33 T:norx6461v3 3.69 3.70 3.72 T:norx3241v2 3.81 3.84 3.85 T:norx6461v1 3.79 3.87 4.03 T:norx6444v1 3.69 3.88 3.91 T:norx3241v3 3.89 3.96 3.99 T:norx6444v2 4.63 4.65 4.68 T:norx3241v1 5.12 5.18 5.33 T:ketjemajorv2 5.22 5.25 5.30 T:acorn128v2 5.31 5.31 5.33 ascon128av12 5.31 5.31 5.32 T:ascon96v1 5.35 5.35 5.36 T:aesjambuv1 5.44 5.44 5.44 T:ascon128av11 5.54 5.56 5.82 T:norx3261v3 5.55 5.58 5.83 T:norx3261v2 6.74 6.75 6.77 T:acorn128v3 7.41 7.47 7.51 T:riverkeyakv2 7.52 7.53 7.53 T:norx3261v1 7.53 7.55 7.58 T:ketjeminorv2 7.75 7.76 7.76 ascon128v12 8.25 8.25 8.25 T:ascon128v11 8.25 8.25 8.25 T:ascon128v1 14.57 14.61 14.64 T:aes128otrpv1 14.58 14.61 14.65 T:aes128otrpv2 14.60 14.62 14.66 T:aes128otrsv1 14.60 14.64 14.67 T:aes128otrsv2 16.98 17.03 17.07 T:proest256otrv1 17.18? 17.42? 20.98? T:twine80n6t4clocv2 18.55 18.57 18.60 T:aes256otrsv2 18.55 18.58 18.62 T:aes256otrpv1 18.55 18.58 18.63 T:aes256otrpv2 18.58 18.62 18.67 T:aes256otrsv1 19.13 19.16 19.53 T:twine80n6t4clocv3 21.54 21.59 21.74 T:aeadaes128ocbtaglen64v1 21.56 21.60 21.64 T:aeadaes128ocbtaglen96v1 22.48 22.49 22.55 T:aes128n12clocv1 22.52 22.56 22.60 T:aes128n8clocv1 25.46 25.52 25.59 T:aeadaes192ocbtaglen64v1 25.53 25.59 25.62 T:aeadaes192ocbtaglen96v1 28.40 29.10 29.36 T:ketjesrv1 29.41 29.44 29.54 T:aeadaes256ocbtaglen96v1 29.43 29.44 29.70 T:aeadaes256ocbtaglen64v1 33.89 34.03 34.08 T:ketjesrv2 45.51 45.60 45.74 T:proest128otrv1 46.57 46.89 47.24 T:colm127v1 58.39 58.52 58.74 T:ketjejrv1 67.37 67.51 67.78 T:present80n6t4silcv3 69.67 69.72 69.80 T:deoxysneq128128v13 74.09 74.22 77.45 T:ketjejrv2 88.25 88.26 89.75 T:led80n6t4silcv3 90.70 90.86 91.00 T:deoxysneq256128v13 141.51 141.86 142.06 T:deoxyseq128128v13 157.38 157.52 157.72 T:aezv1 181.88 182.30 184.77 T:deoxyseq256128v13 487.91? 578.62? 590.58? T:acorn128 3313.15 3318.31 3322.26 T:led80n6silcv1 3333.99 3340.13 3348.62 T:led80n6t4silcv2 3472.45 3472.92 3475.96 T:present80n6silcv1 3472.40 3472.97 3481.04 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.14? 0.18? 0.21? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 aegis128l 0.19 0.19 0.20 T:aegis128l 0.23? 0.25? 0.27? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.31 0.32 0.34 aegis256 0.31 0.33 0.34 T:tiaoxinv2 0.33 0.34 0.34 T:aegis256 0.33 0.34 0.35 T:tiaoxinv1 0.35 0.36 0.37 T:aezv4 0.36 0.37 0.38 T:aezv3 0.38 0.38 0.39 T:aezv5 0.36? 0.40? 0.43? T:aeadaes192ocbtaglen128v1 0.40 0.41 0.42 T:aes128otrsv3 0.42 0.43 0.45 T:aes128otrcv3 0.45 0.45 0.46 T:aes128otrpv3 0.47 0.48 0.49 aes256gcmv1 0.49 0.50 0.52 T:morus1280128v2 0.50 0.51 0.52 T:morus1280256v1 0.50 0.51 0.52 T:morus1280128v1 0.50 0.51 0.52 T:morus1280256v2 0.54 0.55 0.55 T:aes256otrsv3 0.54 0.55 0.56 T:aes256otrcv3 0.58 0.59 0.59 T:aes256otrpv3 0.57 0.59 0.60 T:deoxysi128v141 0.65 0.67 0.68 T:deoxysneq128128v1 0.65 0.69 0.69 T:deoxysi256v141 0.70 0.71 0.72 T:deoxysneq256128v1 0.72 0.75 0.78 T:oceankeyakv2 0.77 0.78 0.79 T:morus640128v1 0.80 0.81 0.83 T:morus640128v2 0.81 0.82 0.83 T:aes128gcmv1 0.85? 0.90? 0.96? T:lunarkeyakv2 0.90 0.92 0.93 T:norx6444v3 1.03 1.07 1.07 T:deoxysii128v141 1.16 1.18 1.20 T:colm0v1 1.16 1.20 1.21 T:deoxysii256v141 1.29 1.36 1.42 T:deoxyseq128128v1 1.42 1.44 1.52 T:seakeyakv2 1.43 1.49 1.51 T:deoxyseq256128v1 2.08 2.09 2.14 T:norx6441v3 2.10 2.12 2.14 T:norx6441v2 2.45 2.47 2.59 T:norx6441v1 2.55 2.56 2.58 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8silcv3 2.55 2.57 2.58 T:aes128n8t8silcv2 3.06 3.19 3.25 T:lakekeyakv2 3.18 3.20 3.21 T:norx6461v2 3.14 3.20 3.22 T:lakekeyakv1 3.16 3.24 3.26 T:norx6461v3 3.64 3.66 3.91 T:norx6461v1 3.71 3.76 3.78 T:norx3241v2 3.79 3.80 3.83 T:norx6444v1 3.73 3.84 3.87 T:norx3241v3 3.90 3.94 3.99 T:norx6444v2 4.56 4.60 4.63 T:norx3241v1 5.03 5.08 5.11 T:ketjemajorv2 5.19 5.19 5.19 T:ascon128av11 5.21 5.24 5.30 T:acorn128v2 5.31 5.31 5.31 ascon128av12 5.43 5.44 5.44 T:ascon96v1 5.56 5.57 5.60 T:norx3261v3 5.56 5.59 5.63 T:norx3261v2 5.73 5.76 5.86 T:aesjambuv1 6.74 6.75 6.77 T:acorn128v3 7.36 7.40 7.40 T:norx3261v1 7.60 7.62 7.64 ascon128v12 7.63 7.67 7.69 T:riverkeyakv2 7.86 7.88 7.88 T:ascon128v1 7.86 7.88 7.88 T:ascon128v11 7.89 7.91 7.97 T:ketjeminorv2 14.81 14.85 14.86 T:aes128otrpv1 14.86 14.90 14.93 T:aes128otrsv1 14.89 14.92 14.95 T:aes128otrpv2 14.90 14.94 15.00 T:aes128otrsv2 17.50 17.54 17.57 T:proest256otrv1 17.12? 17.65? 20.82? T:twine80n6t4clocv2 18.81 18.84 18.87 T:aes256otrpv1 18.85 18.88 18.95 T:aes256otrsv1 18.87 18.92 19.00 T:aes256otrsv2 18.88 18.93 18.97 T:aes256otrpv2 19.04 19.38 19.41 T:twine80n6t4clocv3 21.21 21.25 21.27 T:aes128n12clocv1 21.34 21.39 21.43 T:aes128n8clocv1 26.72 26.84 26.92 T:ketjesrv2 29.09 29.19 29.77 T:ketjesrv1 29.20 29.27 29.62 T:aeadaes128ocbtaglen64v1 29.27 29.32 29.52 T:aeadaes128ocbtaglen96v1 34.92 34.98 35.22 T:aeadaes192ocbtaglen96v1 34.97 35.06 35.14 T:aeadaes192ocbtaglen64v1 40.59 40.63 40.71 T:aeadaes256ocbtaglen64v1 40.73 40.78 40.84 T:aeadaes256ocbtaglen96v1 45.75 45.80 45.88 T:proest128otrv1 60.75 60.91 61.39 T:ketjejrv1 62.33 62.35 62.61 T:colm127v1 66.86 67.00 67.14 T:present80n6t4silcv3 78.40 78.54 80.69 T:ketjejrv2 90.14 91.35 92.04 T:led80n6t4silcv3 108.91 109.04 109.21 T:deoxysneq128128v13 141.69 141.84 142.06 T:deoxyseq128128v13 149.65 150.67 155.35 T:deoxysneq256128v13 156.78 157.09 157.62 T:aezv1 180.94 181.25 184.28 T:deoxyseq256128v13 524.71? 553.32? 601.20? T:acorn128 3342.13 3347.60 3387.15 T:led80n6t4silcv2 3315.46 3357.37 3363.57 T:led80n6silcv1 3476.02 3476.42 3476.98 T:present80n6silcv1 3476.26 3476.53 3477.17 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.08? 0.14? 0.14? T:aezv4 0.12? 0.14? 0.20? T:aezv3 0.13? 0.15? 0.20? T:aezv5 0.17? 0.18? 0.19? T:aeadaes128ocbtaglen128v1 0.18 0.19 0.19 T:aegis128l -0.06? 0.23? 0.56? T:aeadaes256ocbtaglen128v1 0.23 0.24 0.25 aegis128l 0.31 0.31 0.31 T:aegis128 0.32 0.34 0.34 T:aegis256 0.34 0.37 0.37 T:tiaoxinv1 0.30? 0.37? 0.41? T:tiaoxinv2 0.31? 0.38? 0.39? aegis256 0.39? 0.41? 0.72? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.43 T:aes128otrsv3 0.42 0.43 0.45 T:aes128otrcv3 0.45 0.46 0.46 T:aes128otrpv3 0.47 0.48 0.49 aes256gcmv1 0.49 0.51 0.52 T:morus1280128v2 0.50 0.51 0.51 T:morus1280256v1 0.50 0.51 0.52 T:morus1280128v1 0.50 0.51 0.52 T:morus1280256v2 0.54 0.55 0.55 T:aes256otrsv3 0.54 0.55 0.55 T:aes256otrcv3 0.58 0.59 0.59 T:aes256otrpv3 0.59 0.59 0.60 T:deoxysi128v141 0.66 0.67 0.68 T:deoxysneq128128v1 0.68 0.68 0.69 T:deoxysi256v141 0.71 0.72 0.73 T:deoxysneq256128v1 0.73? 0.77? 0.83? T:oceankeyakv2 0.78 0.79 0.79 T:morus640128v1 0.80 0.81 0.82 T:morus640128v2 0.82 0.82 0.83 T:aes128gcmv1 0.90 0.91 0.92 T:norx6444v3 0.87? 0.93? 0.99? T:lunarkeyakv2 1.06 1.06 1.07 T:deoxysii128v141 1.17 1.18 1.20 T:colm0v1 1.20 1.20 1.21 T:deoxysii256v141 1.36 1.37 1.38 T:deoxyseq128128v1 1.45 1.48 1.56 T:seakeyakv2 1.47 1.49 1.50 T:deoxyseq256128v1 2.09 2.13 2.15 T:norx6441v2 2.10 2.14 2.15 T:norx6441v3 2.45 2.56 2.56 T:aes128n12t8silcv3 2.45 2.56 2.57 T:aes128n8t8silcv2 2.45 2.56 2.56 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.49 2.57 2.58 T:norx6441v1 3.14 3.15 3.25 T:norx6461v3 3.10 3.19 3.21 T:norx6461v2 3.10 3.20 3.28 T:lakekeyakv2 3.18 3.24 3.28 T:lakekeyakv1 3.70 3.74 3.87 T:norx6461v1 3.73 3.76 3.86 T:norx3241v2 3.80 3.85 3.85 T:norx6444v1 3.85 3.88 3.90 T:norx3241v3 3.96 4.01 4.08 T:norx6444v2 4.50 4.52 4.56 T:norx3241v1 5.06 5.11 5.15 T:ketjemajorv2 5.19 5.19 5.19 T:ascon128av11 5.22 5.24 5.30 T:acorn128v2 5.31 5.31 5.31 ascon128av12 5.43 5.44 5.44 T:ascon96v1 5.73 5.74 5.86 T:aesjambuv1 5.59 5.78 5.81 T:norx3261v2 5.62 5.79 5.80 T:norx3261v3 6.75 6.75 6.75 T:acorn128v3 7.36 7.36 7.40 T:norx3261v1 7.62 7.62 7.64 ascon128v12 7.65 7.69 7.71 T:riverkeyakv2 7.86 7.88 7.90 T:ascon128v1 7.86 7.88 7.90 T:ascon128v11 7.91 7.93 7.97 T:ketjeminorv2 14.85 14.89 14.92 T:aes128otrpv1 14.88 14.93 14.96 T:aes128otrsv1 14.90 14.94 14.97 T:aes128otrpv2 14.91 14.99 15.04 T:aes128otrsv2 17.53 17.54 17.55 T:proest256otrv1 17.13? 17.77? 20.83? T:twine80n6t4clocv2 18.85 18.86 18.89 T:aes256otrpv1 18.88 18.90 18.93 T:aes256otrsv1 18.90 18.94 18.99 T:aes256otrpv2 18.90 18.94 19.02 T:aes256otrsv2 18.99 19.05 19.38 T:twine80n6t4clocv3 21.26 21.28 21.31 T:aes128n12clocv1 21.34 21.37 21.42 T:aes128n8clocv1 26.73 26.86 27.51 T:ketjesrv2 29.22 29.31 29.61 T:aeadaes128ocbtaglen64v1 29.30 29.33 29.52 T:aeadaes128ocbtaglen96v1 29.19 29.47 29.65 T:ketjesrv1 34.91 34.96 35.00 T:aeadaes192ocbtaglen64v1 35.03 35.09 35.20 T:aeadaes192ocbtaglen96v1 40.58 40.62 40.65 T:aeadaes256ocbtaglen64v1 40.58 40.70 40.75 T:aeadaes256ocbtaglen96v1 45.76 45.84 45.95 T:proest128otrv1 60.77 60.85 61.22 T:ketjejrv1 61.39 61.52 62.00 T:colm127v1 66.90 66.97 67.03 T:present80n6t4silcv3 78.51 79.31 80.75 T:ketjejrv2 86.88 88.09 91.35 T:led80n6t4silcv3 108.80 108.93 109.14 T:deoxysneq128128v13 141.71 141.92 142.50 T:deoxyseq128128v13 149.45 149.95 154.28 T:deoxysneq256128v13 157.05 157.32 157.76 T:aezv1 181.57 181.87 184.40 T:deoxyseq256128v13 498.36? 604.69? 725.40? T:acorn128 3334.86 3339.39 3340.52 T:led80n6t4silcv2 3324.09 3363.52 3371.05 T:led80n6silcv1 3473.83 3476.08 3476.65 T:present80n6t4silcv2 3475.31 3476.35 3477.79 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.11? 0.12? 0.13? T:tiaoxinv2 0.10? 0.12? 0.15? T:tiaoxinv1 0.12? 0.17? 0.18? T:aeadaes128ocbtaglen128v1 0.16 0.17 0.17 T:aegis128l 0.17 0.18 0.18 aegis128l 0.09? 0.25? 0.40? T:aeadaes256ocbtaglen128v1 0.25 0.26 0.26 T:aezv3 0.25 0.26 0.27 T:aezv4 0.24 0.26 0.26 T:aezv5 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.32 aegis256 0.32 0.32 0.33 T:aegis256 0.32? 0.39? 0.42? T:aeadaes192ocbtaglen128v1 0.41? 0.42? 0.50? T:aes128otrcv3 0.42 0.42 0.43 T:aes128otrpv3 0.46 0.47 0.48 aes256gcmv1 0.47 0.48 0.49 T:morus1280128v2 0.47 0.48 0.50 T:morus1280256v1 0.48 0.48 0.50 T:morus1280256v2 0.48 0.48 0.49 T:morus1280128v1 0.52 0.54 0.55 T:deoxysi128v141 0.54 0.55 0.56 T:aes256otrcv3 0.55 0.55 0.56 T:aes256otrpv3 0.59 0.59 0.60 T:aes128gcmv1 0.57 0.60 0.61 T:deoxysi256v141 0.60 0.62 0.65 T:deoxysneq128128v1 0.25? 0.62? 0.65? T:oceankeyakv2 0.71 0.72 0.74 T:deoxysneq256128v1 0.76 0.76 0.78 T:morus640128v1 0.76 0.77 0.77 T:morus640128v2 0.76 0.79 0.81 T:deoxysii128v141 0.88 0.89 0.92 T:lunarkeyakv2 0.89 0.90 0.90 T:colm0v1 0.86 0.90 0.95 T:deoxysii256v141 0.89? 0.93? 0.99? T:deoxyseq128128v1 1.03? 1.11? 1.16? T:deoxyseq256128v1 1.18? 1.29? 1.38? T:seakeyakv2 1.49 1.49 1.49 T:aes128otrsv3 1.50 1.54 1.55 T:norx6444v3 2.03 2.05 2.06 T:aes256otrsv3 2.09 2.12 2.18 T:norx6441v3 2.18 2.18 2.19 T:norx6441v2 2.50 2.51 2.52 T:norx6441v1 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.60 T:aes128n12t8silcv2 2.59 2.59 2.60 T:aes128n12t8clocv2 2.59 2.59 2.60 T:aes128n8t8clocv2 2.59 2.59 2.60 T:aes128n12t8silcv3 2.59 2.59 2.60 T:aes128n12t8clocv3 2.73 2.75 2.77 T:lakekeyakv2 3.02 3.04 3.09 T:lakekeyakv1 3.16 3.17 3.31 T:norx6461v3 3.20 3.25 3.26 T:norx6444v2 3.26 3.27 3.27 T:norx6461v2 3.69 3.76 3.84 T:norx3241v3 3.75 3.77 3.95 T:norx6461v1 3.69 3.79 3.86 T:norx3241v2 3.76 3.82 3.90 T:norx6444v1 4.49 4.51 4.57 T:ketjemajorv2 4.47 4.53 4.59 T:norx3241v1 5.21 5.21 5.23 T:ascon96v1 5.27 5.28 5.30 ascon128av12 5.30 5.31 5.31 T:aesjambuv1 5.34 5.34 5.35 T:ascon128av11 5.40 5.42 5.46 T:riverkeyakv2 5.55 5.60 5.79 T:norx3261v3 5.49 5.68 5.71 T:norx3261v2 6.46 6.50 6.57 T:acorn128v2 6.76 6.76 6.77 T:acorn128v3 7.07 7.08 7.09 T:ketjeminorv2 7.52 7.52 7.53 T:norx3261v1 7.62 7.62 7.63 ascon128v12 8.06 8.06 8.07 T:ascon128v1 8.06 8.06 8.07 T:ascon128v11 13.48 13.50 13.53 T:aes128otrsv2 13.49 13.51 13.54 T:aes128otrsv1 14.38 14.39 14.41 T:aes128otrpv1 14.37 14.40 14.44 T:aes128otrpv2 17.21 17.24 17.26 T:aes128n12clocv1 17.22 17.25 17.27 T:aes128n8clocv1 17.46 17.50 17.71 T:proest256otrv1 17.50 17.52 17.54 T:aes256otrsv1 17.48 17.52 17.55 T:aes256otrsv2 17.12 17.78 18.64 T:twine80n6t4clocv2 18.39 18.40 18.42 T:aes256otrpv1 18.38 18.41 18.48 T:aes256otrpv2 18.96 19.49 19.50 T:twine80n6t4clocv3 21.36 21.41 21.45 T:aeadaes128ocbtaglen96v1 21.42 21.49 21.76 T:aeadaes128ocbtaglen64v1 25.23 25.32 25.33 T:aeadaes192ocbtaglen96v1 25.18 25.33 25.85 T:aeadaes192ocbtaglen64v1 25.62 25.65 25.85 T:ketjesrv1 29.10 29.12 29.19 T:aeadaes256ocbtaglen96v1 29.13 29.16 29.20 T:aeadaes256ocbtaglen64v1 29.86 29.96 31.03 T:ketjesrv2 34.38 34.54 34.62 T:colm127v1 45.85 45.91 45.97 T:proest128otrv1 53.73 53.85 53.95 T:ketjejrv1 67.07 67.18 67.19 T:present80n6t4silcv3 70.14 70.43 70.47 T:deoxysneq128128v13 71.63 71.66 71.80 T:ketjejrv2 90.51 90.54 90.60 T:deoxysneq256128v13 89.94 92.20 92.32 T:led80n6t4silcv3 103.73 104.05 104.24 T:aezv1 106.03 106.24 106.65 T:deoxyseq128128v13 136.18 136.50 138.49 T:deoxyseq256128v13 500.26? 567.49? 594.51? T:acorn128 2482.17 2482.82 2498.94 T:led80n6t4silcv2 2484.97 2497.24 2507.68 T:led80n6silcv1 2604.61 2605.11 2606.48 T:present80n6silcv1 2605.25 2608.12 2608.96 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.14? 0.16? 0.19? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 T:aegis128l 0.15? 0.18? 0.19? aegis128l 0.20? 0.22? 0.23? T:tiaoxinv1 0.21 0.22 0.23 T:tiaoxinv2 0.08? 0.22? 0.39? T:aeadaes256ocbtaglen128v1 0.22? 0.25? 0.26? T:aezv3 0.25 0.26 0.26 T:aezv5 0.25 0.26 0.26 T:aezv4 0.31 0.31 0.32 T:aegis128 0.32 0.33 0.33 T:aegis256 0.32 0.33 0.33 aegis256 0.23? 0.39? 0.54? T:aeadaes192ocbtaglen128v1 0.41? 0.42? 0.50? T:aes128otrcv3 0.43 0.43 0.43 T:aes128otrpv3 0.41 0.43 0.43 aes256gcmv1 0.49 0.50 0.50 T:morus1280128v2 0.49 0.50 0.51 T:morus1280256v2 0.50 0.50 0.50 T:morus1280128v1 0.49 0.50 0.51 T:morus1280256v1 0.53 0.54 0.55 T:aes256otrcv3 0.55 0.55 0.56 T:aes256otrpv3 0.51? 0.57? 0.58? T:deoxysi128v141 0.60 0.61 0.62 T:aes128gcmv1 0.30? 0.62? 0.65? T:oceankeyakv2 0.57? 0.64? 0.67? T:deoxysneq128128v1 0.59? 0.65? 0.66? T:deoxysi256v141 0.66 0.71 0.73 T:deoxysneq256128v1 0.75 0.75 0.76 T:morus640128v1 0.77 0.80 0.80 T:deoxysii128v141 0.79 0.80 0.81 T:morus640128v2 0.84 0.84 0.84 T:colm0v1 0.84 0.90 0.92 T:deoxysii256v141 0.91? 1.00? 1.06? T:deoxyseq128128v1 0.96 1.00 1.05 T:lunarkeyakv2 1.03 1.11 1.14 T:deoxyseq256128v1 1.18 1.22 1.23 T:seakeyakv2 1.49 1.49 1.49 T:aes128otrsv3 1.50 1.54 1.56 T:norx6444v3 2.02 2.05 2.05 T:aes256otrsv3 2.10 2.16 2.17 T:norx6441v3 2.07 2.16 2.17 T:norx6441v2 2.45 2.47 2.59 T:norx6441v1 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n8t8silcv2 2.56 2.56 2.57 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.57 2.57 T:aes128n12t8silcv3 2.73 2.79 2.81 T:lakekeyakv2 3.02 3.06 3.10 T:lakekeyakv1 3.23 3.24 3.25 T:norx6461v2 3.22 3.24 3.31 T:norx6444v2 3.25 3.26 3.28 T:norx6461v3 3.64 3.65 3.68 T:norx6461v1 3.75 3.75 3.76 T:norx6444v1 3.70 3.76 3.90 T:norx3241v3 3.73 3.77 3.84 T:norx3241v2 4.43 4.45 4.46 T:ketjemajorv2 4.48 4.51 4.62 T:norx3241v1 5.19 5.19 5.19 T:ascon128av11 5.28 5.28 5.29 ascon128av12 5.30 5.31 5.31 T:ascon96v1 5.47 5.49 5.54 T:riverkeyakv2 5.54 5.54 5.54 T:aesjambuv1 5.59 5.71 5.76 T:norx3261v2 5.72 5.73 5.82 T:norx3261v3 6.53 6.55 6.56 T:acorn128v2 6.87 6.88 6.89 T:acorn128v3 7.25 7.26 7.27 T:ketjeminorv2 7.44 7.45 7.46 T:norx3261v1 7.61 7.62 7.64 ascon128v12 7.80 7.81 7.82 T:ascon128v1 7.81 7.81 7.82 T:ascon128v11 13.60 13.63 13.65 T:aes128otrsv1 13.64 13.66 13.70 T:aes128otrsv2 14.50 14.53 14.57 T:aes128otrpv1 14.52 14.54 14.61 T:aes128otrpv2 16.60 16.61 16.63 T:aes128n12clocv1 16.64 16.65 16.69 T:aes128n8clocv1 17.63 17.67 17.69 T:aes256otrsv1 17.66 17.68 17.71 T:aes256otrsv2 17.71 17.75 17.97 T:proest256otrv1 18.50 18.52 18.56 T:aes256otrpv1 18.55 18.57 18.62 T:aes256otrpv2 18.87 18.91 19.15 T:twine80n6t4clocv3 17.41? 19.59? 19.65? T:twine80n6t4clocv2 25.21 25.24 25.39 T:aeadaes128ocbtaglen96v1 25.21 25.32 25.50 T:aeadaes128ocbtaglen64v1 26.05 26.09 26.37 T:ketjesrv1 26.61 27.72 27.77 T:ketjesrv2 29.86 29.98 30.04 T:aeadaes192ocbtaglen96v1 29.97 30.01 30.64 T:aeadaes192ocbtaglen64v1 34.62 34.67 34.71 T:aeadaes256ocbtaglen64v1 34.85 34.87 34.90 T:aeadaes256ocbtaglen96v1 42.31 42.37 42.39 T:colm127v1 46.06 46.12 46.32 T:proest128otrv1 54.74 54.79 54.88 T:ketjejrv1 66.80 66.90 66.99 T:present80n6t4silcv3 73.69 73.77 73.83 T:ketjejrv2 89.76 89.83 90.02 T:deoxysneq128128v13 91.03 92.13 92.39 T:led80n6t4silcv3 103.55 103.73 104.06 T:aezv1 106.08 106.21 106.77 T:deoxyseq128128v13 119.99 120.17 122.55 T:deoxysneq256128v13 135.49 135.58 137.87 T:deoxyseq256128v13 548.49 559.89 576.61 T:acorn128 2482.75 2494.99 2498.32 T:led80n6t4silcv2 2497.00 2512.32 2516.23 T:led80n6silcv1 2606.42 2606.77 2607.20 T:present80n6t4silcv2 2606.16 2607.00 2607.14 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.11? 0.11? 0.13? T:aezv3 0.14 0.14 0.14 T:aezv5 0.12? 0.14? 0.14? T:aezv4 0.17 0.17 0.18 T:aegis128l 0.15? 0.17? 0.18? T:aeadaes128ocbtaglen128v1 0.17? 0.20? 0.21? aegis128l 0.20 0.22 0.22 T:tiaoxinv1 0.19? 0.22? 0.23? T:tiaoxinv2 0.22? 0.24? 0.25? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.32 0.33 0.33 T:aegis256 0.32? 0.35? 0.36? aegis256 0.38 0.39 0.39 T:aeadaes192ocbtaglen128v1 0.41? 0.42? 0.50? T:aes128otrcv3 0.42 0.43 0.43 aes256gcmv1 0.43 0.43 0.43 T:aes128otrpv3 0.49 0.50 0.50 T:morus1280256v2 0.49 0.50 0.50 T:morus1280128v2 0.49 0.50 0.50 T:morus1280128v1 0.49 0.50 0.50 T:morus1280256v1 0.53 0.54 0.54 T:aes256otrcv3 0.55 0.55 0.56 T:aes256otrpv3 0.56 0.57 0.57 T:deoxysi128v141 0.61 0.61 0.61 T:aes128gcmv1 0.64 0.64 0.65 T:deoxysi256v141 0.63 0.65 0.69 T:deoxysneq128128v1 0.40? 0.65? 0.69? T:oceankeyakv2 0.69 0.71 0.72 T:deoxysneq256128v1 0.75 0.75 0.76 T:morus640128v1 0.79 0.80 0.81 T:morus640128v2 0.79 0.80 0.80 T:deoxysii128v141 0.83 0.84 0.85 T:colm0v1 0.89 0.90 0.91 T:deoxysii256v141 0.96 1.00 1.05 T:deoxyseq128128v1 0.97 1.03 1.05 T:lunarkeyakv2 1.08 1.11 1.12 T:deoxyseq256128v1 1.22 1.25 1.27 T:seakeyakv2 1.49 1.49 1.49 T:aes128otrsv3 1.51 1.54 1.55 T:norx6444v3 2.02 2.05 2.05 T:aes256otrsv3 2.06 2.10 2.15 T:norx6441v2 2.09 2.15 2.16 T:norx6441v3 2.52 2.56 2.60 T:aes128n8t8clocv2 2.50 2.56 2.62 T:aes128n8t8silcv2 2.56 2.56 2.60 T:aes128n12t8clocv2 2.56 2.56 2.62 T:aes128n12t8silcv2 2.56 2.56 2.62 T:aes128n12t8silcv3 2.56 2.56 2.60 T:aes128n12t8clocv3 2.45 2.58 2.60 T:norx6441v1 2.73 2.80 2.82 T:lakekeyakv2 3.04 3.06 3.09 T:lakekeyakv1 3.08 3.14 3.15 T:norx6461v3 3.17 3.23 3.24 T:norx6461v2 3.24 3.27 3.32 T:norx6444v2 3.75 3.76 3.84 T:norx3241v3 3.72 3.78 3.83 T:norx3241v2 3.76 3.80 3.81 T:norx6444v1 3.68 3.89 3.92 T:norx6461v1 4.44 4.46 4.48 T:ketjemajorv2 4.53 4.54 4.62 T:norx3241v1 5.19 5.19 5.21 T:ascon128av11 5.28 5.28 5.28 ascon128av12 5.30 5.31 5.32 T:ascon96v1 5.48 5.50 5.51 T:riverkeyakv2 5.53 5.54 5.54 T:aesjambuv1 5.58 5.61 5.74 T:norx3261v2 5.71 5.85 5.86 T:norx3261v3 6.46 6.48 6.55 T:acorn128v2 6.88 6.88 6.88 T:acorn128v3 7.26 7.26 7.28 T:ketjeminorv2 7.44 7.46 7.46 T:norx3261v1 7.62 7.62 7.62 ascon128v12 7.81 7.81 7.82 T:ascon128v1 7.81 7.82 7.83 T:ascon128v11 13.61 13.64 13.67 T:aes128otrsv1 13.63 13.70 13.74 T:aes128otrsv2 14.51 14.53 14.55 T:aes128otrpv1 14.53 14.56 14.61 T:aes128otrpv2 16.61 16.62 16.64 T:aes128n12clocv1 16.63 16.66 16.70 T:aes128n8clocv1 17.66 17.70 17.71 T:aes256otrsv1 17.67 17.71 17.73 T:aes256otrsv2 17.71 17.75 17.99 T:proest256otrv1 16.97? 18.04? 19.19? T:twine80n6t4clocv2 18.54 18.58 18.62 T:aes256otrpv1 18.56 18.59 18.61 T:aes256otrpv2 19.14 19.41 19.44 T:twine80n6t4clocv3 25.24 25.27 25.31 T:aeadaes128ocbtaglen96v1 25.24 25.43 25.49 T:aeadaes128ocbtaglen64v1 26.05 26.09 26.42 T:ketjesrv1 26.29 26.38 26.43 T:ketjesrv2 29.89 29.92 30.06 T:aeadaes192ocbtaglen96v1 29.93 30.06 30.60 T:aeadaes192ocbtaglen64v1 34.68 34.73 34.85 T:aeadaes256ocbtaglen64v1 34.93 34.96 35.03 T:aeadaes256ocbtaglen96v1 41.86 42.02 42.15 T:colm127v1 46.04 46.10 46.14 T:proest128otrv1 54.62 54.88 54.95 T:ketjejrv1 66.78 66.91 66.97 T:present80n6t4silcv3 73.89 74.69 74.76 T:ketjejrv2 89.79 89.91 90.09 T:deoxysneq128128v13 91.27 93.16 93.18 T:led80n6t4silcv3 103.53 103.64 103.88 T:aezv1 106.65 106.86 106.98 T:deoxyseq128128v13 120.00 120.18 123.06 T:deoxysneq256128v13 135.93 136.18 137.83 T:deoxyseq256128v13 547.46 550.62 551.89 T:acorn128 2483.05 2494.49 2500.70 T:led80n6t4silcv2 2506.14 2508.12 2513.22 T:led80n6silcv1 2606.15 2606.59 2608.50 T:present80n6t4silcv2 2606.24 2606.71 2606.92 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.10 0.11 0.11 T:tiaoxinv1 0.11 0.11 0.11 T:tiaoxinv2 0.14? 0.15? 0.16? T:aezv5 0.15 0.16 0.16 T:aegis128l 0.15 0.16 0.16 T:aezv3 0.16 0.16 0.17 T:aezv4 0.11? 0.17? 0.18? T:aeadaes128ocbtaglen128v1 0.16 0.17 0.17 aegis128l -0.05? 0.24? 0.52? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.32 T:aegis128 0.30 0.31 0.32 T:aegis256 0.31 0.31 0.32 aegis256 0.30? 0.38? 0.72? T:aeadaes192ocbtaglen128v1 0.38 0.39 0.42 T:aes128gcmv1 0.38 0.39 0.41 aes256gcmv1 0.39 0.39 0.40 T:aes128otrpv3 0.41? 0.43? 0.51? T:aes128otrcv3 0.47 0.48 0.51 T:morus1280256v2 0.48 0.49 0.50 T:morus1280128v2 0.47 0.49 0.51 T:morus1280256v1 0.48 0.50 0.51 T:morus1280128v1 0.47? 0.50? 0.54? T:oceankeyakv2 0.50 0.51 0.52 T:colm0v1 0.53 0.53 0.53 T:aes256otrpv3 0.52 0.54 0.54 T:deoxysii128v141 0.53 0.54 0.55 T:deoxysi128v141 0.54 0.55 0.56 T:aes256otrcv3 0.59 0.59 0.60 T:deoxysi256v141 0.60 0.61 0.61 T:deoxysii256v141 0.61 0.62 0.63 T:deoxyseq128128v1 0.59 0.62 0.64 T:deoxysneq128128v1 0.57? 0.63? 0.65? T:lunarkeyakv2 0.67 0.70 0.73 T:deoxyseq256128v1 0.70 0.71 0.72 T:deoxysneq256128v1 0.72 0.72 0.73 T:morus640128v2 0.71 0.73 0.73 T:morus640128v1 1.11 1.12 1.15 T:seakeyakv2 2.06 2.12 2.18 T:norx6441v3 2.10 2.17 2.20 T:norx6441v2 2.09 2.18 2.19 T:norx6444v3 2.43 2.45 2.59 T:norx6441v1 2.49 2.52 2.58 T:lakekeyakv2 2.55 2.56 2.57 T:aes128n8t8silcv2 2.55 2.56 2.58 T:norx6444v2 2.56 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.57 T:aes128otrsv3 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.57 2.57 T:aes128n12t8silcv2 2.56 2.57 2.57 T:aes128n12t8clocv3 2.56 2.57 2.58 T:aes128n12t8clocv2 2.70 2.80 2.85 T:lakekeyakv1 3.08 3.11 3.33 T:norx6461v3 3.19 3.21 3.26 T:norx6461v2 3.56 3.56 3.62 T:aes256otrsv3 3.65 3.67 3.96 T:norx6461v1 3.67 3.69 3.77 T:norx3241v2 3.73 3.75 3.77 T:norx6444v1 3.76 3.79 3.86 T:norx3241v3 3.83 3.86 3.89 T:ketjemajorv2 4.42 4.55 4.68 T:norx3241v1 5.09 5.11 5.12 T:riverkeyakv2 5.12 5.12 5.13 T:ascon96v1 5.24 5.25 5.25 ascon128av12 5.24 5.25 5.25 T:ascon128av11 5.26 5.42 5.42 T:aesjambuv1 5.37 5.53 5.54 T:norx3261v2 5.57 5.63 5.64 T:norx3261v3 6.58 6.59 6.64 T:ketjeminorv2 6.74 6.75 6.76 T:acorn128v3 7.49 7.50 7.50 ascon128v12 7.52 7.52 7.53 T:norx3261v1 7.66 7.68 7.82 T:acorn128v2 7.86 7.88 7.89 T:ascon128v11 7.86 7.88 7.89 T:ascon128v1 11.90 11.93 11.97 T:aes128n8clocv1 11.92 11.95 11.95 T:aes128n12clocv1 12.37 12.40 12.41 T:aes128otrsv1 12.38 12.42 12.44 T:aes128otrsv2 14.14 14.19 14.24 T:aes128otrpv2 14.20 14.23 14.27 T:aes128otrpv1 16.37 16.43 16.47 T:aes256otrsv2 16.44 16.49 16.51 T:aes256otrsv1 16.96 17.14 17.70 T:twine80n6t4clocv2 17.86 17.90 18.46 T:proest256otrv1 18.17 18.19 18.22 T:aes256otrpv2 18.20 18.23 18.25 T:aes256otrpv1 18.75 18.80 19.44 T:twine80n6t4clocv3 20.97 21.09 21.50 T:aeadaes128ocbtaglen64v1 21.04 21.12 21.15 T:aeadaes128ocbtaglen96v1 22.29 22.33 22.51 T:colm127v1 22.93 22.99 23.04 T:ketjesrv1 24.87 25.02 25.77 T:aeadaes192ocbtaglen64v1 24.98 25.03 25.15 T:aeadaes192ocbtaglen96v1 25.82 27.03 27.15 T:ketjesrv2 28.71 28.85 28.92 T:aeadaes256ocbtaglen64v1 28.77 28.94 29.06 T:aeadaes256ocbtaglen96v1 46.18 46.35 46.38 T:proest128otrv1 48.50 48.74 48.77 T:ketjejrv1 49.92 50.01 50.08 T:aezv1 66.78 66.80 66.84 T:present80n6t4silcv3 69.10 69.17 69.46 T:ketjejrv2 70.51 70.61 70.71 T:deoxyseq128128v13 70.57 70.75 70.84 T:deoxysneq128128v13 88.99 89.01 89.01 T:led80n6t4silcv3 90.29 90.52 90.89 T:deoxysneq256128v13 90.21 90.53 91.80 T:deoxyseq256128v13 422.93? 484.67? 532.52? T:acorn128 1664.88 1669.46 1681.60 T:led80n6t4silcv2 1660.86 1679.86 1684.53 T:led80n6silcv1 1736.27 1736.69 1736.78 T:present80n6t4silcv2 1737.16 1737.50 1737.64 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv1 0.08? 0.11? 0.17? T:tiaoxinv2 0.13 0.14 0.14 T:aezv5 0.14 0.15 0.15 T:aezv3 0.15 0.16 0.16 T:aegis128l 0.15? 0.16? 0.17? T:aezv4 0.15? 0.17? 0.20? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 aegis128l -0.06? 0.23? 0.54? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.31 T:aegis128 0.31 0.31 0.32 T:aegis256 0.27? 0.33? 0.34? aegis256 0.07? 0.36? 0.39? T:aeadaes192ocbtaglen128v1 0.38 0.39 0.40 aes256gcmv1 0.40 0.40 0.42 T:aes128gcmv1 0.40 0.40 0.41 T:aes128otrpv3 0.42? 0.44? 0.54? T:aes128otrcv3 0.47 0.48 0.50 T:morus1280256v2 0.47 0.49 0.50 T:morus1280128v2 0.48 0.49 0.51 T:morus1280128v1 0.47 0.50 0.51 T:morus1280256v1 0.48 0.50 0.53 T:oceankeyakv2 0.46? 0.50? 0.52? T:colm0v1 0.52 0.53 0.54 T:deoxysii128v141 0.53 0.53 0.54 T:aes256otrpv3 0.53 0.54 0.54 T:deoxysi128v141 0.55 0.55 0.55 T:aes256otrcv3 0.56? 0.58? 0.65? T:lunarkeyakv2 0.56 0.59 0.60 T:deoxysii256v141 0.58 0.60 0.63 T:deoxysi256v141 0.56? 0.62? 0.65? T:deoxysneq128128v1 0.56? 0.63? 0.68? T:deoxyseq128128v1 0.64? 0.70? 0.76? T:deoxyseq256128v1 0.69 0.70 0.72 T:deoxysneq256128v1 0.71 0.73 0.73 T:morus640128v1 0.76 0.77 0.79 T:morus640128v2 1.09 1.12 1.20 T:seakeyakv2 2.03 2.09 2.19 T:norx6444v3 2.16 2.17 2.18 T:norx6441v3 2.13 2.18 2.19 T:norx6441v2 2.43 2.54 2.62 T:lakekeyakv2 2.48 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.58 T:aes128n12t8clocv3 2.48 2.56 2.57 T:aes128n8t8silcv2 2.56 2.56 2.57 T:aes128otrsv3 2.56 2.57 2.58 T:aes128n12t8clocv2 2.59 2.60 2.62 T:norx6444v2 2.62 2.64 2.65 T:norx6441v1 2.77 2.80 2.82 T:lakekeyakv1 3.19 3.21 3.27 T:norx6461v2 3.11 3.29 3.31 T:norx6461v3 3.56 3.56 3.63 T:aes256otrsv3 3.64 3.66 3.96 T:norx6461v1 3.74 3.75 3.78 T:norx6444v1 3.67 3.79 3.91 T:norx3241v3 3.76 3.79 3.83 T:norx3241v2 3.84 3.88 3.92 T:ketjemajorv2 4.44 4.53 4.57 T:norx3241v1 5.06 5.10 5.13 T:riverkeyakv2 5.17 5.18 5.19 T:ascon96v1 5.19 5.19 5.19 T:ascon128av11 5.24 5.26 5.26 ascon128av12 5.28 5.28 5.43 T:aesjambuv1 5.60 5.62 5.83 T:norx3261v3 5.62 5.65 5.77 T:norx3261v2 6.59 6.61 6.63 T:ketjeminorv2 6.99 7.00 7.02 T:acorn128v3 7.52 7.53 7.53 T:norx3261v1 7.62 7.63 7.63 ascon128v12 7.70 7.71 7.85 T:acorn128v2 7.72 7.75 7.76 T:ascon128v1 7.74 7.75 7.76 T:ascon128v11 11.91 11.93 11.97 T:aes128n12clocv1 11.91 11.94 11.95 T:aes128n8clocv1 12.38 12.42 12.44 T:aes128otrsv2 12.40 12.42 12.45 T:aes128otrsv1 14.17 14.19 14.23 T:aes128otrpv2 14.18 14.20 14.23 T:aes128otrpv1 16.43 16.48 16.51 T:aes256otrsv2 16.44 16.50 16.54 T:aes256otrsv1 16.87 17.53 18.40 T:twine80n6t4clocv2 17.90 17.94 18.46 T:proest256otrv1 18.19 18.23 18.27 T:aes256otrpv2 18.23 18.27 18.31 T:aes256otrpv1 18.80 18.86 18.96 T:twine80n6t4clocv3 21.06 21.11 21.18 T:aeadaes128ocbtaglen96v1 20.94 21.16 21.51 T:aeadaes128ocbtaglen64v1 22.31 22.47 22.49 T:colm127v1 22.94 23.00 23.03 T:ketjesrv1 24.83 24.97 25.76 T:aeadaes192ocbtaglen64v1 24.94 25.01 25.14 T:aeadaes192ocbtaglen96v1 25.93 27.08 27.17 T:ketjesrv2 28.71 28.86 28.92 T:aeadaes256ocbtaglen64v1 28.69 28.92 29.10 T:aeadaes256ocbtaglen96v1 46.39 46.47 46.59 T:proest128otrv1 48.35 48.50 48.77 T:ketjejrv1 49.98 50.24 50.60 T:aezv1 66.72 66.84 66.91 T:present80n6t4silcv3 69.05 69.16 69.82 T:ketjejrv2 70.40 70.58 70.71 T:deoxyseq128128v13 70.74 70.89 71.41 T:deoxysneq128128v13 90.20 90.33 91.50 T:deoxyseq256128v13 90.38 90.53 90.72 T:deoxysneq256128v13 88.74 93.06 93.29 T:led80n6t4silcv3 459.46? 533.07? 577.94? T:acorn128 1659.97 1663.20 1678.74 T:led80n6silcv1 1662.46 1666.75 1688.91 T:led80n6t4silcv2 1736.73 1737.24 1737.62 T:present80n6t4silcv2 1736.13 1737.55 1737.87 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.09? 0.10? 0.11? T:tiaoxinv1 0.06? 0.11? 0.16? T:tiaoxinv2 0.13 0.13 0.14 T:aezv5 0.13? 0.14? 0.15? T:aezv3 0.14? 0.15? 0.16? T:aezv4 0.15 0.16 0.16 T:aegis128l 0.15? 0.17? 0.18? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 aegis128l 0.23 0.24 0.25 T:aeadaes256ocbtaglen128v1 0.30 0.31 0.32 T:aegis128 0.31 0.31 0.32 T:aegis256 0.27? 0.34? 0.41? aegis256 0.35? 0.37? 0.68? T:aeadaes192ocbtaglen128v1 0.37 0.39 0.40 aes256gcmv1 0.40 0.40 0.40 T:aes128gcmv1 0.40 0.40 0.41 T:aes128otrpv3 0.42? 0.43? 0.53? T:aes128otrcv3 0.48 0.49 0.50 T:morus1280128v2 0.44? 0.50? 0.53? T:oceankeyakv2 0.48 0.50 0.52 T:morus1280256v2 0.48 0.50 0.50 T:morus1280128v1 0.48 0.50 0.51 T:morus1280256v1 0.48 0.50 0.52 T:colm0v1 0.52 0.53 0.54 T:aes256otrpv3 0.53 0.53 0.54 T:deoxysii128v141 0.53 0.54 0.54 T:deoxysi128v141 0.55 0.55 0.56 T:aes256otrcv3 0.59 0.60 0.60 T:deoxysii256v141 0.60 0.60 0.61 T:deoxysi256v141 0.53? 0.61? 0.65? T:lunarkeyakv2 0.61 0.62 0.63 T:deoxysneq128128v1 0.62 0.63 0.64 T:deoxyseq128128v1 0.69 0.70 0.71 T:deoxysneq256128v1 0.70 0.70 0.72 T:deoxyseq256128v1 0.71 0.72 0.73 T:morus640128v1 0.76 0.77 0.78 T:morus640128v2 1.11 1.12 1.14 T:seakeyakv2 2.06 2.11 2.12 T:norx6441v2 2.17 2.18 2.19 T:norx6441v3 2.09 2.18 2.19 T:norx6444v3 2.42 2.42 2.61 T:norx6441v1 2.47 2.50 2.65 T:aes128n8t8clocv2 2.43 2.51 2.62 T:lakekeyakv2 2.47 2.56 2.66 T:aes128n12t8clocv3 2.46 2.56 2.56 T:aes128n8t8silcv2 2.47 2.56 2.57 T:aes128n12t8clocv2 2.46 2.56 2.58 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128otrsv3 2.46 2.56 2.66 T:aes128n12t8silcv3 2.54 2.60 2.67 T:norx6444v2 2.79 2.81 2.84 T:lakekeyakv1 3.03 3.13 3.28 T:norx6461v3 3.20 3.21 3.28 T:norx6461v2 3.56 3.56 3.63 T:aes256otrsv3 3.66 3.68 3.95 T:norx6461v1 3.70 3.77 3.79 T:norx6444v1 3.77 3.78 3.79 T:norx3241v3 3.78 3.81 3.83 T:norx3241v2 3.82 3.90 3.93 T:ketjemajorv2 4.43 4.53 4.59 T:norx3241v1 5.06 5.11 5.15 T:riverkeyakv2 5.17 5.19 5.19 T:ascon96v1 5.17 5.19 5.19 T:ascon128av11 5.25 5.25 5.26 ascon128av12 5.25 5.28 5.43 T:aesjambuv1 5.51 5.51 5.90 T:norx3261v3 5.64 5.77 5.87 T:norx3261v2 6.59 6.63 6.64 T:ketjeminorv2 7.00 7.00 7.00 T:acorn128v3 7.52 7.52 7.53 T:norx3261v1 7.62 7.62 7.62 ascon128v12 7.74 7.75 7.77 T:ascon128v1 7.74 7.76 7.78 T:ascon128v11 7.68 7.84 7.87 T:acorn128v2 11.91 11.93 11.96 T:aes128n12clocv1 11.92 11.94 11.95 T:aes128n8clocv1 12.38 12.42 12.48 T:aes128otrsv2 12.39 12.42 12.46 T:aes128otrsv1 14.16 14.21 14.24 T:aes128otrpv1 14.16 14.25 14.34 T:aes128otrpv2 16.42 16.47 16.51 T:aes256otrsv2 16.45 16.51 16.54 T:aes256otrsv1 16.88 17.56 18.46 T:twine80n6t4clocv2 17.90 17.94 18.44 T:proest256otrv1 18.17 18.22 18.28 T:aes256otrpv2 18.20 18.29 18.32 T:aes256otrpv1 18.77 18.84 19.43 T:twine80n6t4clocv3 21.07 21.10 21.17 T:aeadaes128ocbtaglen96v1 20.97 21.18 21.49 T:aeadaes128ocbtaglen64v1 22.44 22.48 22.50 T:colm127v1 22.94 22.98 23.02 T:ketjesrv1 24.95 25.01 25.14 T:aeadaes192ocbtaglen96v1 24.85 25.08 25.76 T:aeadaes192ocbtaglen64v1 25.88 27.11 27.19 T:ketjesrv2 28.71 28.81 28.93 T:aeadaes256ocbtaglen64v1 28.70 28.95 29.07 T:aeadaes256ocbtaglen96v1 46.34 46.39 46.49 T:proest128otrv1 48.79 48.96 49.04 T:ketjejrv1 50.06 50.12 50.49 T:aezv1 66.73 66.84 66.91 T:present80n6t4silcv3 69.06 69.18 69.49 T:ketjejrv2 70.50 70.58 70.71 T:deoxysneq128128v13 70.53 70.65 70.80 T:deoxyseq128128v13 90.37 90.51 91.05 T:deoxysneq256128v13 90.22 91.09 91.68 T:deoxyseq256128v13 88.72 93.05 93.38 T:led80n6t4silcv3 500.89? 508.65? 581.89? T:acorn128 1659.99 1663.03 1687.61 T:led80n6silcv1 1667.18 1669.59 1688.92 T:led80n6t4silcv2 1733.77 1736.24 1736.82 T:present80n6t4silcv2 1736.84 1737.39 1737.76 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.17? 0.17? 0.19? T:tiaoxinv1 0.17 0.17 0.18 T:tiaoxinv2 0.20 0.20 0.21 T:aegis128l 0.21 0.21 0.22 aegis128l 0.28? 0.28? 0.32? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.31 T:aezv3 0.30 0.30 0.32 T:aezv5 0.30 0.31 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.35 0.36 0.36 aegis256 0.36 0.36 0.37 T:aegis256 0.37? 0.38? 0.57? T:aeadaes256ocbtaglen128v1 0.49 0.50 0.51 T:aeadaes192ocbtaglen128v1 0.53 0.53 0.54 T:aes128otrpv3 0.54 0.54 0.60 T:aes128otrcv3 0.55 0.55 0.55 aes256gcmv1 0.59 0.59 0.60 T:morus1280256v1 0.59 0.60 0.60 T:morus1280128v1 0.60 0.61 0.61 T:morus1280128v2 0.61 0.61 0.62 T:morus1280256v2 0.63 0.63 0.64 T:deoxysi128v141 0.69 0.69 0.70 T:aes128gcmv1 0.70 0.70 0.70 T:aes256otrpv3 0.70 0.71 0.74 T:deoxysi256v141 0.72 0.72 0.74 T:aes256otrcv3 0.72 0.73 0.74 T:deoxysneq128128v1 0.83 0.84 0.85 T:deoxysneq256128v1 0.84 0.85 0.85 T:morus640128v1 0.85 0.85 0.86 T:morus640128v2 0.91 0.91 0.93 T:deoxysii128v141 0.96 0.97 0.98 T:colm0v1 1.03 1.03 1.08 T:deoxysii256v141 1.05 1.06 1.10 T:deoxyseq128128v1 1.25 1.26 1.31 T:deoxyseq256128v1 1.40 1.41 1.41 T:oceankeyakv2 1.54 1.54 1.55 T:aes128otrsv3 1.85 1.89 1.90 T:seakeyakv2 2.09 2.12 2.14 T:norx6444v3 2.13 2.13 2.13 T:aes256otrsv3 2.46 2.46 2.51 T:norx6441v3 2.43 2.47 2.48 T:lunarkeyakv2 2.46 2.52 2.52 T:norx6441v2 2.61 2.61 2.61 T:aes128n8t8silcv2 2.61 2.61 2.61 T:aes128n12t8silcv2 2.61 2.61 2.61 T:aes128n8t8clocv2 2.61 2.61 2.61 T:aes128n12t8clocv2 2.61 2.61 2.61 T:aes128n12t8silcv3 2.61 2.61 2.61 T:aes128n12t8clocv3 2.81 2.82 2.93 T:norx6441v1 3.08 3.08 3.09 T:lakekeyakv2 3.56 3.57 3.59 T:lakekeyakv1 3.67 3.67 3.68 T:norx6461v3 3.68 3.68 3.74 T:norx6461v2 3.99 3.99 4.09 T:norx3241v2 4.00 4.17 4.18 T:norx3241v3 4.21 4.22 4.41 T:norx6461v1 4.67 4.68 4.69 T:norx6444v2 4.77 4.84 4.88 T:norx3241v1 5.34 5.34 5.35 T:ascon96v1 5.35 5.35 5.35 T:aesjambuv1 5.34 5.36 5.46 T:norx6444v1 5.41 5.41 5.44 ascon128av12 5.47 5.47 5.48 T:ascon128av11 5.68 5.69 5.72 T:riverkeyakv2 5.79 5.80 5.89 T:ketjemajorv2 6.00 6.04 6.18 T:norx3261v3 5.99 6.10 6.11 T:norx3261v2 7.66 7.67 7.69 T:acorn128v3 7.66 7.68 7.70 T:acorn128v2 7.74 7.75 7.76 ascon128v12 7.82 7.83 7.85 T:ketjeminorv2 7.92 7.92 7.92 T:norx3261v1 8.18 8.18 8.19 T:ascon128v1 8.18 8.18 8.20 T:ascon128v11 13.83 13.84 13.86 T:aes128otrsv1 13.83 13.85 13.86 T:aes128otrsv2 14.73 14.74 14.77 T:aes128otrpv1 14.72 14.76 14.78 T:aes128otrpv2 17.40 17.43 17.45 T:aes128n8clocv1 17.40 17.44 17.46 T:aes128n12clocv1 17.93 17.94 17.95 T:aes256otrsv2 17.95 17.97 17.99 T:aes256otrsv1 17.53 18.40 18.49 T:twine80n6t4clocv2 18.81 18.82 18.84 T:aes256otrpv1 18.82 18.84 18.86 T:aes256otrpv2 18.97 18.99 19.22 T:proest256otrv1 19.20 19.40 19.67 T:twine80n6t4clocv3 21.93 21.94 21.96 T:aeadaes128ocbtaglen96v1 21.95 22.09 22.17 T:aeadaes128ocbtaglen64v1 25.92 25.93 25.94 T:aeadaes192ocbtaglen96v1 25.90 25.97 26.53 T:aeadaes192ocbtaglen64v1 26.41 26.44 26.58 T:ketjesrv1 29.83 29.90 30.04 T:aeadaes256ocbtaglen64v1 29.96 29.97 30.26 T:aeadaes256ocbtaglen96v1 30.91 30.95 31.32 T:ketjesrv2 35.07 35.12 35.13 T:colm127v1 47.83 48.01 48.39 T:proest128otrv1 54.19 54.31 54.65 T:ketjejrv1 67.75 67.77 67.84 T:present80n6t4silcv3 70.73 70.84 70.95 T:deoxysneq128128v13 72.52 72.55 72.59 T:ketjejrv2 90.96 91.00 91.07 T:deoxysneq256128v13 90.83 92.76 94.67 T:led80n6t4silcv3 100.87 101.28 101.46 T:aezv1 107.24 107.44 107.54 T:deoxyseq128128v13 137.34 137.61 139.24 T:deoxyseq256128v13 578.76? 579.55? 743.29? T:acorn128 2497.46 2497.72 2520.26 T:led80n6t4silcv2 2504.19 2510.99 2513.91 T:led80n6silcv1 2617.89 2618.03 2618.32 T:present80n6t4silcv2 2618.54 2619.45 2621.36 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.20 0.21 0.21 T:aegis128l 0.22 0.22 0.22 aegis128l 0.25 0.26 0.27 T:tiaoxinv2 0.25 0.26 0.26 T:tiaoxinv1 0.28? 0.28? 0.32? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.30 T:aezv5 0.31 0.31 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.37 T:aegis256 0.37 0.37 0.37 aegis256 0.38? 0.38? 0.58? T:aeadaes256ocbtaglen128v1 0.47? 0.48? 0.68? T:aeadaes192ocbtaglen128v1 0.51 0.51 0.52 aes256gcmv1 0.55 0.56 0.56 T:aes128otrpv3 0.55? 0.56? 0.63? T:aes128otrcv3 0.61 0.62 0.62 T:morus1280256v1 0.61 0.62 0.63 T:morus1280128v1 0.62 0.63 0.63 T:morus1280128v2 0.62 0.63 0.63 T:morus1280256v2 0.70 0.70 0.72 T:aes128gcmv1 0.72 0.72 0.72 T:aes256otrpv3 0.73 0.73 0.76 T:deoxysi128v141 0.73 0.73 0.73 T:aes256otrcv3 0.81 0.82 0.85 T:deoxysneq128128v1 0.83 0.83 0.84 T:morus640128v1 0.84 0.84 0.87 T:deoxysi256v141 0.86 0.86 0.87 T:deoxysneq256128v1 0.88 0.88 0.90 T:morus640128v2 0.93 0.93 0.93 T:deoxysii128v141 0.94 0.94 0.94 T:colm0v1 1.05 1.05 1.08 T:deoxysii256v141 1.20 1.21 1.28 T:deoxyseq128128v1 1.29 1.29 1.32 T:deoxyseq256128v1 1.41 1.41 1.44 T:oceankeyakv2 1.55 1.55 1.55 T:aes128otrsv3 1.82 1.83 1.83 T:seakeyakv2 2.10 2.14 2.15 T:norx6444v3 2.14 2.14 2.14 T:aes256otrsv3 2.43 2.50 2.51 T:norx6441v3 2.49 2.51 2.51 T:norx6441v2 2.50 2.53 2.55 T:lunarkeyakv2 2.58 2.58 2.59 T:aes128n8t8clocv2 2.58 2.59 2.63 T:aes128n12t8clocv2 2.59 2.59 2.59 T:aes128n8t8silcv2 2.58 2.59 2.59 T:aes128n12t8clocv3 2.59 2.59 2.59 T:aes128n12t8silcv3 2.59 2.59 2.60 T:aes128n12t8silcv2 2.80 2.91 2.91 T:norx6441v1 3.11 3.11 3.13 T:lakekeyakv2 3.58 3.62 3.63 T:lakekeyakv1 3.66 3.68 3.73 T:norx6461v2 3.64 3.79 3.80 T:norx6461v3 4.05 4.13 4.16 T:norx3241v2 4.08 4.14 4.14 T:norx3241v3 4.37 4.38 4.39 T:norx6461v1 4.76 4.78 4.82 T:norx6444v2 4.82 4.86 4.86 T:norx3241v1 5.28 5.29 5.31 T:norx6444v1 5.31 5.31 5.31 T:ascon128av11 5.41 5.41 5.42 ascon128av12 5.44 5.44 5.45 T:ascon96v1 5.58 5.58 5.58 T:aesjambuv1 5.71 5.73 5.74 T:ketjemajorv2 5.76 5.77 5.79 T:riverkeyakv2 6.01 6.17 6.18 T:norx3261v3 6.07 6.18 6.22 T:norx3261v2 7.64 7.66 7.69 T:acorn128v2 7.74 7.74 7.75 ascon128v12 7.77 7.77 7.79 T:acorn128v3 7.85 7.85 7.85 T:norx3261v1 7.93 7.93 7.94 T:ascon128v1 7.93 7.93 7.94 T:ascon128v11 8.01 8.02 8.03 T:ketjeminorv2 13.95 13.96 13.98 T:aes128otrsv1 14.00 14.02 14.04 T:aes128otrsv2 14.83 14.84 14.87 T:aes128otrpv1 14.88 14.89 14.91 T:aes128otrpv2 16.79 16.81 16.84 T:aes128n12clocv1 16.85 16.86 16.89 T:aes128n8clocv1 17.43 17.49 18.38 T:twine80n6t4clocv2 18.07 18.08 18.09 T:aes256otrsv1 18.10 18.12 18.12 T:aes256otrsv2 18.95 18.98 19.00 T:aes256otrpv1 18.99 19.02 19.03 T:aes256otrpv2 19.14 19.28 19.56 T:twine80n6t4clocv3 19.32 19.34 19.55 T:proest256otrv1 25.97 25.98 26.13 T:aeadaes128ocbtaglen64v1 25.97 25.99 26.01 T:aeadaes128ocbtaglen96v1 26.85 26.97 27.11 T:ketjesrv1 27.28 27.31 27.34 T:ketjesrv2 30.71 30.73 30.87 T:aeadaes192ocbtaglen96v1 30.72 30.92 31.68 T:aeadaes192ocbtaglen64v1 35.70 35.73 35.75 T:aeadaes256ocbtaglen96v1 35.80 35.83 35.86 T:aeadaes256ocbtaglen64v1 42.95 43.01 43.04 T:colm127v1 48.05 48.08 48.11 T:proest128otrv1 55.48 55.53 55.54 T:ketjejrv1 67.58 67.63 67.68 T:present80n6t4silcv3 74.71 74.85 76.98 T:ketjejrv2 90.14 90.26 90.77 T:deoxysneq128128v13 90.03 92.67 92.91 T:led80n6t4silcv3 100.73 100.82 100.93 T:aezv1 107.29 107.36 107.40 T:deoxyseq128128v13 120.60 120.74 123.46 T:deoxysneq256128v13 137.46 137.98 138.87 T:deoxyseq256128v13 606.44 608.22 621.45 T:acorn128 2497.23 2507.82 2511.18 T:led80n6t4silcv2 2509.29 2524.78 2526.89 T:led80n6silcv1 2618.50 2618.91 2620.01 T:present80n6t4silcv2 2620.04 2620.28 2620.65 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17 0.18 0.18 T:aezv5 0.18 0.18 0.18 T:aezv3 0.18 0.18 0.19 T:aezv4 0.21 0.21 0.21 T:aegis128l 0.22? 0.23? 0.25? aegis128l 0.25 0.26 0.27 T:tiaoxinv2 0.26 0.27 0.27 T:tiaoxinv1 0.28 0.28 0.29 T:aeadaes128ocbtaglen128v1 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.36 T:aegis256 0.38 0.38 0.39 T:aeadaes256ocbtaglen128v1 0.39 0.40 0.40 aegis256 0.47 0.47 0.48 T:aeadaes192ocbtaglen128v1 0.51 0.51 0.52 aes256gcmv1 0.55? 0.56? 0.63? T:aes128otrcv3 0.56 0.56 0.56 T:aes128otrpv3 0.61 0.62 0.62 T:morus1280256v1 0.62 0.62 0.63 T:morus1280128v1 0.62 0.63 0.63 T:morus1280128v2 0.63 0.63 0.64 T:morus1280256v2 0.70 0.70 0.70 T:aes128gcmv1 0.72 0.72 0.72 T:aes256otrpv3 0.73 0.73 0.75 T:deoxysi128v141 0.73 0.73 0.73 T:aes256otrcv3 0.81 0.81 0.83 T:deoxysneq128128v1 0.83 0.84 0.84 T:morus640128v1 0.84 0.85 0.85 T:deoxysi256v141 0.85 0.86 0.87 T:deoxysneq256128v1 0.88 0.89 0.90 T:morus640128v2 0.92 0.93 0.93 T:deoxysii128v141 0.94 0.94 0.94 T:colm0v1 1.05 1.05 1.06 T:deoxysii256v141 1.19 1.20 1.27 T:deoxyseq128128v1 1.28 1.29 1.37 T:deoxyseq256128v1 1.42 1.42 1.45 T:oceankeyakv2 1.55 1.55 1.55 T:aes128otrsv3 1.80 1.82 1.84 T:seakeyakv2 2.08 2.13 2.15 T:norx6444v3 2.14 2.14 2.14 T:aes256otrsv3 2.42 2.42 2.50 T:norx6441v3 2.42 2.44 2.44 T:norx6441v2 2.50 2.55 2.56 T:lunarkeyakv2 2.58 2.58 2.65 T:aes128n8t8silcv2 2.58 2.58 2.65 T:aes128n12t8silcv3 2.58 2.58 2.65 T:aes128n12t8silcv2 2.58 2.58 2.64 T:aes128n12t8clocv2 2.58 2.58 2.64 T:aes128n8t8clocv2 2.58 2.58 2.64 T:aes128n12t8clocv3 2.77 2.80 2.90 T:norx6441v1 3.12 3.15 3.22 T:lakekeyakv2 3.60 3.62 3.63 T:lakekeyakv1 3.64 3.65 3.66 T:norx6461v3 3.65 3.71 3.73 T:norx6461v2 4.02 4.07 4.16 T:norx3241v2 4.01 4.07 4.14 T:norx3241v3 4.16 4.37 4.38 T:norx6461v1 4.78 4.80 4.83 T:norx6444v2 4.84 4.86 4.90 T:norx3241v1 5.31 5.31 5.31 T:ascon128av11 5.30 5.32 5.35 T:norx6444v1 5.41 5.41 5.41 ascon128av12 5.44 5.44 5.45 T:ascon96v1 5.58 5.58 5.58 T:aesjambuv1 5.72 5.74 5.75 T:ketjemajorv2 5.76 5.78 5.78 T:riverkeyakv2 6.17 6.17 6.18 T:norx3261v3 6.18 6.18 6.18 T:norx3261v2 7.63 7.70 7.72 T:acorn128v2 7.74 7.74 7.77 ascon128v12 7.77 7.77 7.77 T:acorn128v3 7.85 7.85 7.85 T:norx3261v1 7.93 7.93 7.93 T:ascon128v11 7.93 7.93 7.94 T:ascon128v1 8.02 8.03 8.04 T:ketjeminorv2 13.98 13.99 14.02 T:aes128otrsv1 14.00 14.01 14.04 T:aes128otrsv2 14.86 14.88 14.91 T:aes128otrpv1 14.91 14.92 14.95 T:aes128otrpv2 16.78 16.80 16.81 T:aes128n12clocv1 16.83 16.85 16.86 T:aes128n8clocv1 17.43? 17.53? 19.73? T:twine80n6t4clocv2 18.09 18.10 18.12 T:aes256otrsv1 18.13 18.14 18.18 T:aes256otrsv2 18.94 18.97 18.98 T:aes256otrpv1 18.99 19.01 19.03 T:aes256otrpv2 19.16 19.32 19.59 T:twine80n6t4clocv3 19.32 19.33 19.54 T:proest256otrv1 25.95 25.97 25.97 T:aeadaes128ocbtaglen96v1 26.07 26.08 26.11 T:aeadaes128ocbtaglen64v1 27.29 27.33 28.03 T:ketjesrv2 27.10 27.34 27.46 T:ketjesrv1 30.72 30.76 30.85 T:aeadaes192ocbtaglen96v1 30.71 30.83 31.33 T:aeadaes192ocbtaglen64v1 35.70 35.72 35.84 T:aeadaes256ocbtaglen64v1 35.71 35.72 35.84 T:aeadaes256ocbtaglen96v1 42.98 43.04 43.11 T:colm127v1 47.95 48.02 48.07 T:proest128otrv1 55.57 55.61 55.71 T:ketjejrv1 67.58 67.60 67.65 T:present80n6t4silcv3 74.77 74.83 74.93 T:ketjejrv2 90.29 90.37 90.41 T:deoxysneq128128v13 90.14 91.82 95.60 T:led80n6t4silcv3 100.64 100.76 100.83 T:aezv1 107.35 107.68 107.93 T:deoxyseq128128v13 120.74 121.10 123.55 T:deoxysneq256128v13 137.34 137.45 139.22 T:deoxyseq256128v13 574.45 609.86 612.27 T:acorn128 2471.43 2509.05 2513.06 T:led80n6t4silcv2 2520.19 2521.42 2522.81 T:led80n6silcv1 2619.21 2619.84 2620.28 T:present80n6t4silcv2 2619.92 2620.30 2620.63 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.84? 0.92? 1.01? T:aegis128 0.91? 0.92? 1.33? T:aegis128l 0.91 0.96 0.98 aegis128l 1.17 1.20 1.20 T:aegis256 1.17 1.21 1.26 aegis256 1.20? 1.22? 1.40? T:tiaoxinv1 1.22? 1.23? 1.63? T:tiaoxinv2 1.38 1.40 1.41 T:aezv5 1.40 1.44 1.48 T:aezv3 1.42 1.47 1.50 T:aezv4 2.38 2.43 2.48 T:colm0v1 2.50 2.55 2.57 T:aes128otrsv3 2.75 2.78 2.82 T:morus640128v1 2.81? 2.86? 4.12? T:aeadaes128ocbtaglen128v1 2.90 2.90 2.91 T:aes128otrpv3 2.91 2.95 2.99 T:morus640128v2 2.98 2.99 3.01 T:aes128n8t8silcv2 2.99 3.03 3.04 T:aes128n12t8silcv2 3.01 3.03 3.05 T:aes128n12t8silcv3 3.05 3.06 3.08 T:aes128n12t8clocv2 3.05 3.06 3.09 T:aes128n8t8clocv2 2.90 3.07 3.16 T:aes128otrcv3 3.06 3.08 3.09 T:aes128n12t8clocv3 3.07 3.11 3.18 T:deoxysneq128128v1 3.16 3.20 3.27 T:morus1280256v1 3.18 3.20 3.28 T:morus1280128v1 3.39 3.41 3.47 T:morus1280128v2 3.40 3.42 3.45 T:morus1280256v2 3.47? 3.49? 4.20? T:aes256otrsv3 3.52? 3.57? 8.02? T:aeadaes256ocbtaglen128v1 3.77 3.78 3.79 T:aes256otrpv3 3.67? 3.81? 8.19? T:aeadaes192ocbtaglen128v1 3.78 3.84 3.89 T:deoxysi128v141 3.98 4.00 4.05 T:aes256otrcv3 3.98 4.01 4.12 T:deoxysneq256128v1 4.61 4.65 4.70 aes256gcmv1 4.66 4.70 4.71 T:deoxysi256v141 4.74 4.79 4.84 T:deoxyseq128128v1 4.77 4.85 5.03 T:aes128gcmv1 5.13 5.16 5.29 T:deoxysii128v141 5.94 5.98 6.07 T:deoxyseq256128v1 6.08 6.14 6.18 T:deoxysii256v141 6.27 6.27 6.28 T:aesjambuv1 7.86 7.89 7.98 T:norx6441v1 8.04 8.09 8.20 T:norx6441v3 8.00 8.13 8.20 T:norx6441v2 8.37 8.37 8.52 T:ascon128av11 8.33 8.40 8.57 T:ascon96v1 8.41 8.41 8.82 ascon128av12 9.74 9.85 9.95 T:norx3241v1 9.95 10.05 10.10 T:norx3241v2 10.07 10.11 10.20 T:norx3241v3 10.49 10.52 10.52 ascon128v12 10.92 10.92 11.08 T:ascon128v11 10.92 10.92 11.24 T:ascon128v1 11.57 11.70 12.32 T:lakekeyakv1 11.69 11.91 11.99 T:norx6461v2 12.03 12.14 12.17 T:norx6461v1 12.14 12.35 12.45 T:norx6461v3 13.37 13.61 13.66 T:riverkeyakv2 14.08 14.16 14.31 T:norx6444v3 14.39 14.56 15.19 T:lakekeyakv2 14.68 14.69 14.80 T:norx3261v2 14.80 15.02 15.41 T:norx3261v3 15.99 16.01 16.05 T:norx3261v1 17.41 17.52 17.71 T:seakeyakv2 17.29 17.56 17.80 T:oceankeyakv2 21.45 21.50 21.65 T:aes128otrsv1 21.48 21.60 21.95 T:aes128n12clocv1 21.62 21.68 21.78 T:aes128otrsv2 21.67 21.99 22.45 T:aes128n8clocv1 22.15 22.20 22.34 T:aes128otrpv1 22.30 22.34 22.39 T:aes128otrpv2 24.27 24.51 24.73 T:twine80n6t4clocv3 24.55 24.55 24.61 T:ketjeminorv2 24.37? 26.33? 27.16? T:twine80n6t4clocv2 27.71 27.75 27.95 T:aes256otrsv1 27.75 27.86 27.95 T:aes256otrsv2 28.25 28.32 28.40 T:aes256otrpv1 28.38 28.50 28.57 T:aes256otrpv2 28.60 28.62 28.77 T:acorn128v3 33.70 33.82 33.95 T:acorn128v2 34.27 34.62 34.95 T:ketjemajorv2 34.41 34.77 34.94 T:norx6444v2 35.12 35.34 35.52 T:aeadaes128ocbtaglen96v1 35.27 35.48 35.64 T:aeadaes128ocbtaglen64v1 38.38 38.54 39.48 T:norx6444v1 38.70 38.94 39.44 T:lunarkeyakv2 40.59 40.70 40.96 T:aeadaes192ocbtaglen96v1 40.56 41.22 41.32 T:aeadaes192ocbtaglen64v1 43.52 43.70 44.00 T:ketjesrv1 47.30 47.43 47.59 T:aeadaes256ocbtaglen64v1 47.36 47.70 47.87 T:aeadaes256ocbtaglen96v1 51.04 51.24 51.65 T:colm127v1 52.01 52.14 52.41 T:ketjesrv2 54.01 54.18 54.48 T:proest256otrv1 72.72 73.03 73.39 T:ketjejrv1 79.23 79.40 79.79 T:deoxysneq128128v13 83.22 83.34 83.41 T:present80n6t4silcv3 92.60 92.94 93.19 T:proest128otrv1 93.99 94.80 97.68 T:ketjejrv2 102.05 102.27 102.84 T:deoxysneq256128v13 106.94 106.98 110.29 T:led80n6t4silcv3 111.11 112.17 113.48 T:aezv1 132.86 133.12 133.47 T:deoxyseq128128v13 170.45 171.04 172.85 T:deoxyseq256128v13 1976.05 1988.68 2139.70 T:acorn128 2794.97 2811.57 2813.84 T:led80n6silcv1 2811.06 2815.21 2837.78 T:led80n6t4silcv2 2931.62 2932.95 2934.43 T:present80n6t4silcv2 2931.48 2933.08 2936.08 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.85? 0.91? 0.98? T:aegis128 0.94 0.95 1.03 T:aegis128l 1.05 1.06 1.08 aegis128l 1.16? 1.22? 1.30? T:aegis256 1.24 1.26 1.35 T:tiaoxinv1 1.25? 1.27? 1.62? aegis256 1.29? 1.33? 1.70? T:tiaoxinv2 1.39 1.40 1.41 T:aezv5 1.38 1.41 1.45 T:aezv3 1.40 1.46 1.48 T:aezv4 2.55 2.62 2.62 T:aes128otrsv3 2.73 2.76 2.77 T:morus640128v1 2.78? 2.81? 3.87? T:aeadaes128ocbtaglen128v1 2.91 2.95 2.96 T:colm0v1 2.99 3.05 3.11 T:morus640128v2 3.09 3.12 3.29 T:aes128n8t8silcv2 3.12 3.13 3.18 T:aes128n12t8clocv2 3.13 3.15 3.16 T:aes128n8t8clocv2 3.13 3.16 3.17 T:aes128n12t8clocv3 3.13 3.20 3.32 T:aes128n12t8silcv2 3.16 3.23 3.35 T:aes128n12t8silcv3 3.22 3.30 3.42 T:aes128otrcv3 3.30 3.34 3.39 T:morus1280256v1 3.35 3.37 3.38 T:aes128otrpv3 3.36 3.37 3.41 T:morus1280128v1 3.52 3.55 3.59 T:morus1280256v2 3.53 3.57 3.65 T:morus1280128v2 3.61? 3.66? 4.51? T:aes256otrsv3 3.61? 3.78? 8.34? T:aeadaes256ocbtaglen128v1 3.75? 3.86? 5.89? T:aeadaes192ocbtaglen128v1 4.27 4.28 4.31 T:aes256otrpv3 4.29 4.35 4.55 T:aes256otrcv3 4.34 4.36 4.40 T:deoxysneq256128v1 4.32 4.40 4.41 T:deoxysneq128128v1 4.76 4.84 4.86 T:deoxysi128v141 4.95 4.99 5.15 aes256gcmv1 5.03 5.10 5.19 T:aes128gcmv1 5.47 5.52 5.58 T:deoxysii128v141 5.62 5.69 5.74 T:deoxysi256v141 6.27 6.48 6.70 T:aesjambuv1 6.53 6.58 6.63 T:deoxyseq256128v1 6.70 6.78 6.91 T:deoxysii256v141 6.73 6.80 6.82 T:deoxyseq128128v1 7.97 8.03 8.19 T:norx6441v1 8.16 8.16 8.30 T:ascon128av11 8.16 8.20 8.29 T:norx6441v3 8.10 8.23 8.27 T:norx6441v2 8.35 8.35 8.44 ascon128av12 8.51 8.53 8.96 T:ascon96v1 10.02 10.12 10.30 T:norx3241v2 10.09 10.12 10.42 T:norx3241v1 10.17 10.20 10.23 T:norx3241v3 10.45 10.45 10.74 ascon128v12 10.59 10.59 10.84 T:ascon128v11 10.59 10.59 10.95 T:ascon128v1 11.56 11.64 12.63 T:lakekeyakv1 12.06 12.09 12.37 T:norx6461v3 12.09 12.12 12.19 T:norx6461v2 12.26 12.31 12.40 T:norx6461v1 13.39 13.46 13.77 T:riverkeyakv2 14.05 14.19 14.43 T:norx6444v3 14.38 14.55 15.02 T:lakekeyakv2 14.77 14.79 14.91 T:norx3261v2 15.13 15.38 15.53 T:norx3261v3 16.20 16.22 16.24 T:norx3261v1 16.79 17.23 17.63 T:seakeyakv2 17.27 17.40 17.72 T:oceankeyakv2 20.98 21.23 21.49 T:aes128n12clocv1 21.49 21.66 21.90 T:aes128otrsv1 21.36 21.66 21.72 T:aes128n8clocv1 21.75 21.83 21.87 T:aes128otrsv2 22.30 22.36 22.42 T:aes128otrpv1 22.59 22.64 22.69 T:aes128otrpv2 24.25 24.48 24.67 T:twine80n6t4clocv3 25.09 25.09 25.20 T:ketjeminorv2 25.41 26.43 27.45 T:twine80n6t4clocv2 27.68 27.74 27.87 T:aes256otrsv1 27.88 28.05 28.16 T:aes256otrsv2 28.41 28.42 28.58 T:acorn128v3 28.42 28.50 28.58 T:aes256otrpv1 28.53 28.61 28.74 T:aes256otrpv2 34.37 34.48 34.55 T:ketjemajorv2 34.45 34.57 34.67 T:acorn128v2 34.53 34.64 35.20 T:norx6444v2 37.65 37.76 37.81 T:norx6444v1 38.38 39.02 39.43 T:lunarkeyakv2 42.53 42.77 42.91 T:aeadaes128ocbtaglen96v1 42.81 43.02 44.18 T:aeadaes128ocbtaglen64v1 44.13 44.55 44.98 T:ketjesrv1 48.86 49.08 49.18 T:ketjesrv2 49.12 49.51 49.91 T:aeadaes192ocbtaglen96v1 49.37 49.52 50.12 T:aeadaes192ocbtaglen64v1 56.29 56.52 56.80 T:proest256otrv1 57.88 57.95 58.38 T:aeadaes256ocbtaglen64v1 57.99 58.07 58.45 T:aeadaes256ocbtaglen96v1 59.27 59.30 59.47 T:colm127v1 74.05 74.32 74.59 T:ketjejrv1 83.07 83.12 83.15 T:present80n6t4silcv3 93.79 94.13 94.40 T:proest128otrv1 96.36 97.34 100.61 T:ketjejrv2 98.84 99.26 99.48 T:deoxysneq128128v13 106.98 107.07 112.57 T:led80n6t4silcv3 113.73 114.15 114.99 T:aezv1 131.97 132.37 134.47 T:deoxysneq256128v13 132.84 133.17 133.47 T:deoxyseq128128v13 170.09 170.42 172.41 T:deoxyseq256128v13 1927.08? 2047.92? 2559.00? T:acorn128 2809.77 2820.75 2824.14 T:led80n6silcv1 2827.01 2830.80 2833.35 T:led80n6t4silcv2 2931.90 2932.34 2935.01 T:present80n6silcv1 2931.49 2932.77 2933.44 T:present80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.82? 0.93? 0.96? T:aegis128 0.94 0.95 0.97 T:aegis128l 0.98? 1.00? 1.86? T:aezv5 1.05 1.06 1.12 aegis128l 1.07? 1.09? 1.93? T:aezv3 1.13? 1.13? 1.94? T:aezv4 1.17 1.22 1.26 T:aegis256 1.21 1.23 1.27 T:tiaoxinv1 1.26? 1.27? 1.86? T:tiaoxinv2 1.27? 1.29? 2.27? aegis256 2.57 2.62 2.62 T:aes128otrsv3 2.72 2.74 2.79 T:morus640128v1 2.80 2.84 2.97 T:aeadaes128ocbtaglen128v1 2.88? 2.89? 4.75? T:aes128n8t8silcv2 2.91? 2.92? 4.74? T:aes128n12t8silcv2 2.90? 2.93? 4.77? T:aes128n12t8silcv3 2.91 2.98 3.04 T:colm0v1 3.03 3.07 3.14 T:morus640128v2 3.07 3.09 3.13 T:aes128n8t8clocv2 3.09 3.13 3.15 T:aes128n12t8clocv2 3.13 3.14 3.15 T:aes128n12t8clocv3 3.27 3.33 3.39 T:aes128otrcv3 3.35 3.37 3.38 T:aes128otrpv3 3.32 3.39 3.41 T:morus1280256v1 3.36 3.39 3.42 T:morus1280128v1 3.54 3.59 3.63 T:morus1280128v2 3.57 3.64 3.67 T:morus1280256v2 3.59 3.66 3.73 T:aeadaes256ocbtaglen128v1 3.64? 3.67? 4.40? T:aes256otrsv3 3.74? 3.84? 8.67? T:aeadaes192ocbtaglen128v1 4.25 4.27 4.31 T:aes256otrpv3 4.26 4.34 4.49 T:aes256otrcv3 4.32 4.34 4.40 T:deoxysneq128128v1 4.31 4.37 4.43 T:deoxysneq256128v1 4.75 4.82 4.88 T:deoxysi128v141 4.97 5.04 5.06 aes256gcmv1 5.03 5.10 5.16 T:aes128gcmv1 5.43 5.47 5.51 T:deoxysii128v141 5.63 5.66 5.70 T:deoxysi256v141 6.27 6.48 6.54 T:aesjambuv1 6.47 6.49 6.54 T:deoxyseq256128v1 6.70 6.74 6.78 T:deoxysii256v141 6.75 6.82 6.86 T:deoxyseq128128v1 8.13 8.13 8.24 T:ascon128av11 8.06 8.17 8.25 T:norx6441v1 8.08 8.20 8.31 T:norx6441v2 8.22 8.27 8.29 T:norx6441v3 8.35 8.35 8.35 ascon128av12 8.34 8.47 8.77 T:ascon96v1 10.02 10.07 10.16 T:norx3241v2 10.25 10.41 10.48 T:norx3241v1 10.23 10.43 10.56 T:norx3241v3 10.45 10.45 10.45 ascon128v12 10.57 10.57 10.82 T:ascon128v11 10.57 10.57 10.94 T:ascon128v1 11.63 11.73 12.80 T:lakekeyakv1 12.12 12.14 12.21 T:norx6461v2 12.24 12.27 12.30 T:norx6461v1 12.07 12.34 12.48 T:norx6461v3 13.41 13.63 13.80 T:riverkeyakv2 14.09 14.23 14.33 T:norx6444v3 14.41 14.66 15.27 T:lakekeyakv2 14.76 14.84 14.94 T:norx3261v2 15.41 15.55 15.66 T:norx3261v3 16.21 16.23 16.27 T:norx3261v1 17.34 17.50 18.19 T:oceankeyakv2 16.82 17.61 17.87 T:seakeyakv2 20.97 21.16 21.35 T:aes128n12clocv1 21.49 21.56 21.70 T:aes128n8clocv1 21.63 21.73 21.84 T:aes128otrsv1 21.81 21.98 22.12 T:aes128otrsv2 22.31 22.40 22.99 T:aes128otrpv1 22.56 22.62 22.68 T:aes128otrpv2 24.16 24.21 24.64 T:twine80n6t4clocv3 25.14 25.16 25.20 T:ketjeminorv2 24.83 25.92 27.09 T:twine80n6t4clocv2 27.70 27.77 27.98 T:aes256otrsv1 27.94 28.03 28.24 T:aes256otrsv2 28.41 28.41 28.45 T:acorn128v3 28.43 28.52 28.70 T:aes256otrpv1 28.62 28.74 28.84 T:aes256otrpv2 34.41 34.45 34.52 T:acorn128v2 34.47 34.63 35.07 T:ketjemajorv2 34.61 34.71 34.94 T:norx6444v2 37.70 37.80 37.94 T:norx6444v1 38.52 39.10 39.69 T:lunarkeyakv2 42.59 42.83 43.02 T:aeadaes128ocbtaglen96v1 42.61 43.09 43.93 T:aeadaes128ocbtaglen64v1 44.34 44.59 44.80 T:ketjesrv1 48.81 49.05 49.20 T:ketjesrv2 49.23 49.31 49.73 T:aeadaes192ocbtaglen64v1 49.09 49.38 49.48 T:aeadaes192ocbtaglen96v1 54.59 55.05 55.34 T:proest256otrv1 57.84 58.02 58.31 T:aeadaes256ocbtaglen96v1 57.87 58.06 58.27 T:aeadaes256ocbtaglen64v1 59.16 59.20 59.30 T:colm127v1 74.03 74.41 74.81 T:ketjejrv1 82.99 83.05 83.08 T:present80n6t4silcv3 93.91 94.17 94.47 T:proest128otrv1 96.50 97.57 100.12 T:ketjejrv2 98.62 98.91 99.20 T:deoxysneq128128v13 107.41 112.36 112.63 T:led80n6t4silcv3 113.71 114.08 114.71 T:aezv1 132.03 132.35 134.58 T:deoxysneq256128v13 132.57 133.00 133.59 T:deoxyseq128128v13 170.23 170.45 172.27 T:deoxyseq256128v13 1920.80? 2160.43? 2222.45? T:acorn128 2809.44 2811.95 2828.94 T:led80n6t4silcv2 2809.55 2819.84 2822.34 T:led80n6silcv1 2932.26 2932.60 2935.27 T:present80n6silcv1 2932.14 2932.87 2934.20 T:present80n6t4silcv2