VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20261004

[Page version: 20261013 16:30:55]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.13 0.14 0.14 T:tiaoxinv2 0.13? 0.14? 0.15? T:tiaoxinv1 0.06? 0.18? 0.28? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.19 T:aegis128l 0.19 0.19 0.19 aegis128l 0.15? 0.25? 0.42? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.31 T:aegis128 0.31 0.31 0.33 aegis256 0.36 0.36 0.37 T:aezv4 0.36 0.37 0.38 T:aezv3 0.38 0.38 0.39 T:aezv5 0.23? 0.40? 0.57? T:aeadaes192ocbtaglen128v1 0.40 0.41 0.42 T:aes128otrsv3 0.41 0.41 0.42 T:aes128otrcv3 0.44 0.44 0.45 T:aes128otrpv3 0.47 0.48 0.50 T:morus1280256v1 0.46 0.49 0.50 T:morus1280128v1 0.47 0.49 0.50 T:morus1280256v2 0.46 0.49 0.50 T:morus1280128v2 0.54 0.54 0.55 T:deoxysi128v141 0.54 0.55 0.55 T:aes256otrcv3 0.54 0.55 0.55 T:aes256otrsv3 0.55 0.56 0.57 aes256gcmv1 0.57 0.57 0.58 T:aes256otrpv3 0.59 0.60 0.61 T:deoxysi256v141 0.61 0.62 0.63 T:deoxysneq128128v1 0.70 0.71 0.72 T:deoxysneq256128v1 0.73 0.74 0.75 T:morus640128v2 0.75 0.77 0.81 T:oceankeyakv2 0.78 0.78 0.79 T:aes128gcmv1 0.74 0.78 0.81 T:lunarkeyakv2 0.80 0.82 0.82 T:morus640128v1 0.89 0.90 0.92 T:norx6444v3 1.05 1.06 1.07 T:deoxysii128v141 1.18 1.20 1.21 T:deoxysii256v141 1.24 1.24 1.25 T:deoxyseq128128v1 1.28 1.29 1.30 T:colm0v1 1.41 1.42 1.44 T:seakeyakv2 1.42 1.44 1.46 T:deoxyseq256128v1 2.09 2.11 2.16 T:norx6441v2 2.12 2.17 2.18 T:norx6441v3 2.62 2.62 2.63 T:aes128n12t8silcv2 2.62 2.62 2.63 T:aes128n8t8silcv2 2.62 2.62 2.63 T:aes128n12t8silcv3 2.62 2.62 2.63 T:aes128n12t8clocv3 2.62 2.63 2.63 T:aes128n8t8clocv2 2.63 2.63 2.63 T:aes128n12t8clocv2 2.57 2.65 2.66 T:norx6441v1 3.11 3.16 3.20 T:lakekeyakv2 3.15 3.19 3.27 T:lakekeyakv1 3.20 3.29 3.31 T:norx6461v2 3.29 3.30 3.32 T:norx6461v3 3.63 3.67 3.71 T:norx6444v1 3.71 3.71 3.88 T:norx3241v3 3.73 3.90 3.93 T:norx3241v2 3.85 3.95 3.97 T:norx6461v1 3.88 3.95 3.97 T:norx6444v2 4.50 4.51 4.64 T:norx3241v1 5.00 5.00 5.03 T:acorn128v3 5.12 5.12 5.13 T:acorn128v2 5.19 5.22 5.25 T:ketjemajorv2 5.31 5.31 5.32 ascon128av12 5.31 5.32 5.32 T:ascon96v1 5.35 5.36 5.36 T:aesjambuv1 5.44 5.44 5.44 T:ascon128av11 5.54 5.55 5.77 T:norx3261v3 5.55 5.79 5.84 T:norx3261v2 6.72 6.76 6.86 T:ketjeminorv2 7.45 7.47 7.49 T:riverkeyakv2 7.52 7.52 7.53 T:norx3261v1 7.75 7.75 7.76 ascon128v12 8.25 8.25 8.25 T:ascon128v1 8.25 8.25 8.25 T:ascon128v11 14.55 14.58 14.61 T:aes128otrpv2 14.56 14.58 14.63 T:aes128otrsv2 14.59 14.60 14.63 T:aes128otrsv1 14.58 14.61 14.63 T:aes128otrpv1 17.00 17.03 17.04 T:proest256otrv1 17.29? 18.16? 19.99? T:twine80n6t4clocv2 18.52 18.55 18.59 T:aes256otrpv1 18.56 18.59 18.61 T:aes256otrpv2 19.19 19.25 19.30 T:twine80n6t4clocv3 19.38 19.41 19.44 T:aes256otrsv2 19.61 19.63 19.66 T:aes256otrsv1 21.56 21.60 21.83 T:aeadaes128ocbtaglen64v1 21.68 21.71 21.87 T:aeadaes128ocbtaglen96v1 22.47 22.49 22.52 T:aes128n12clocv1 22.48 22.52 22.58 T:aes128n8clocv1 25.48 25.50 25.59 T:aeadaes192ocbtaglen96v1 25.52 25.59 25.63 T:aeadaes192ocbtaglen64v1 28.39 28.69 29.13 T:ketjesrv1 29.40 29.44 29.65 T:aeadaes256ocbtaglen64v1 29.41 29.46 29.50 T:aeadaes256ocbtaglen96v1 34.04 34.10 34.34 T:ketjesrv2 44.69 44.93 45.47 T:proest128otrv1 46.44 46.49 46.67 T:colm127v1 58.35 58.54 58.69 T:ketjejrv1 67.37 67.41 67.62 T:present80n6t4silcv3 69.81 69.94 70.05 T:deoxysneq128128v13 73.86 74.21 77.20 T:ketjejrv2 90.42 90.54 90.61 T:deoxysneq256128v13 90.61 91.30 94.77 T:led80n6t4silcv3 141.51 141.72 142.27 T:deoxyseq128128v13 158.20 158.44 158.73 T:aezv1 181.97 182.18 183.10 T:deoxyseq256128v13 469.02? 518.68? 537.44? T:acorn128 3308.20 3312.82 3357.13 T:led80n6t4silcv2 3315.90 3320.16 3324.99 T:led80n6silcv1 3472.08 3472.40 3472.63 T:present80n6t4silcv2 3475.31 3476.53 3477.57 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.07? 0.18? 0.27? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 aegis128l 0.19 0.20 0.20 T:aegis128l 0.08? 0.25? 0.34? T:aeadaes256ocbtaglen128v1 0.27? 0.30? 0.33? T:tiaoxinv1 0.31 0.31 0.32 T:aegis128 0.31 0.33 0.34 aegis256 0.32 0.34 0.35 T:tiaoxinv2 0.36 0.37 0.37 T:aezv4 0.36 0.37 0.38 T:aezv3 0.38 0.38 0.39 T:aezv5 0.24? 0.40? 0.49? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.43 T:aes128otrsv3 0.41 0.42 0.43 T:aes128otrcv3 0.45 0.45 0.46 T:aes128otrpv3 0.46 0.48 0.50 T:morus1280256v2 0.47 0.48 0.51 T:morus1280128v2 0.47 0.48 0.49 aes256gcmv1 0.47 0.49 0.52 T:morus1280128v1 0.48 0.50 0.51 T:morus1280256v1 0.54 0.55 0.55 T:aes256otrsv3 0.54 0.55 0.55 T:aes256otrcv3 0.58 0.59 0.59 T:aes256otrpv3 0.59 0.60 0.60 T:deoxysi128v141 0.66 0.67 0.69 T:deoxysneq128128v1 0.68 0.69 0.69 T:deoxysi256v141 0.70 0.71 0.72 T:deoxysneq256128v1 0.73 0.75 0.75 T:morus640128v2 0.75 0.77 0.81 T:oceankeyakv2 0.78 0.78 0.79 T:morus640128v1 0.80 0.80 0.81 T:aes128gcmv1 0.82? 0.86? 0.92? T:lunarkeyakv2 0.90 0.92 0.94 T:norx6444v3 1.06 1.07 1.07 T:deoxysii128v141 1.17 1.18 1.19 T:colm0v1 1.19 1.19 1.20 T:deoxysii256v141 1.35 1.36 1.36 T:deoxyseq128128v1 1.41 1.42 1.44 T:deoxyseq256128v1 1.44 1.46 1.50 T:seakeyakv2 2.06 2.12 2.13 T:norx6441v2 2.11 2.13 2.14 T:norx6441v3 2.45 2.45 2.55 T:norx6441v1 2.55 2.55 2.60 T:aes128n12t8silcv2 2.55 2.56 2.56 T:aes128n12t8silcv3 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.55 2.57 2.59 T:aes128n8t8silcv2 3.12 3.15 3.20 T:lakekeyakv2 3.24 3.26 3.30 T:lakekeyakv1 3.19 3.27 3.28 T:norx6461v2 3.17 3.27 3.29 T:norx6461v3 3.64 3.67 3.69 T:norx6444v1 3.64 3.67 3.86 T:norx6461v1 3.73 3.75 3.77 T:norx3241v3 3.86 3.89 3.90 T:norx3241v2 3.88 3.94 4.00 T:norx6444v2 4.47 4.51 4.67 T:norx3241v1 5.07 5.09 5.11 T:ketjemajorv2 5.19 5.19 5.19 T:ascon128av11 5.25 5.25 5.25 T:acorn128v2 5.25 5.25 5.26 T:acorn128v3 5.31 5.31 5.31 ascon128av12 5.44 5.44 5.44 T:ascon96v1 5.55 5.59 5.75 T:norx3261v2 5.73 5.78 5.86 T:aesjambuv1 5.77 5.80 5.81 T:norx3261v3 6.84 6.89 7.11 T:ketjeminorv2 7.39 7.40 7.40 T:norx3261v1 7.63 7.64 7.64 ascon128v12 7.65 7.66 7.68 T:riverkeyakv2 7.87 7.87 7.88 T:ascon128v1 7.87 7.88 7.88 T:ascon128v11 14.80 14.83 14.86 T:aes128otrpv1 14.84 14.87 14.90 T:aes128otrsv1 14.87 14.91 14.96 T:aes128otrsv2 14.88 14.91 14.94 T:aes128otrpv2 17.46 17.49 17.52 T:proest256otrv1 18.80 18.83 18.86 T:aes256otrpv1 18.87 18.90 18.92 T:aes256otrpv2 19.00 19.09 19.15 T:twine80n6t4clocv3 19.50 19.53 19.57 T:aes256otrsv2 19.50 19.54 19.58 T:aes256otrsv1 17.09? 20.10? 20.90? T:twine80n6t4clocv2 21.25 21.29 21.32 T:aes128n12clocv1 21.33 21.38 21.42 T:aes128n8clocv1 26.73 26.81 26.95 T:ketjesrv2 29.15 29.25 30.36 T:ketjesrv1 29.24 29.27 29.31 T:aeadaes128ocbtaglen64v1 29.25 29.32 29.44 T:aeadaes128ocbtaglen96v1 34.91 34.94 34.99 T:aeadaes192ocbtaglen96v1 34.93 35.00 35.14 T:aeadaes192ocbtaglen64v1 40.51 40.57 40.62 T:aeadaes256ocbtaglen96v1 40.55 40.60 40.63 T:aeadaes256ocbtaglen64v1 45.28 45.72 49.73 T:proest128otrv1 60.72 60.79 60.84 T:ketjejrv1 62.46 62.71 62.91 T:colm127v1 66.86 66.99 67.08 T:present80n6t4silcv3 78.14 78.49 81.48 T:ketjejrv2 87.10 87.98 91.44 T:led80n6t4silcv3 108.56 109.23 109.46 T:deoxysneq128128v13 141.63 141.86 141.99 T:deoxyseq128128v13 149.50 149.96 150.06 T:deoxysneq256128v13 156.98 157.60 158.38 T:aezv1 181.63 182.06 182.19 T:deoxyseq256128v13 466.81? 492.36? 528.90? T:acorn128 3308.58 3314.23 3357.03 T:led80n6t4silcv2 3323.98 3350.80 3353.72 T:led80n6silcv1 3474.60 3476.01 3476.50 T:present80n6t4silcv2 3475.68 3476.30 3476.70 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13 0.14 0.14 T:aezv3 0.14 0.14 0.14 T:aezv4 0.14 0.15 0.15 T:aezv5 0.08? 0.18? 0.27? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.23 0.24 0.24 aegis128l 0.08? 0.25? 0.34? T:aeadaes256ocbtaglen128v1 0.31 0.32 0.32 T:aegis128 0.29? 0.33? 0.34? T:tiaoxinv1 0.32? 0.34? 0.36? T:tiaoxinv2 0.37 0.39 0.40 aegis256 0.31? 0.40? 0.56? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.43 T:aes128otrsv3 0.42 0.42 0.43 T:aes128otrcv3 0.45 0.45 0.45 T:aes128otrpv3 0.46 0.48 0.50 T:morus1280256v2 0.47 0.48 0.49 aes256gcmv1 0.46 0.49 0.51 T:morus1280256v1 0.47 0.49 0.52 T:morus1280128v1 0.48 0.50 0.51 T:morus1280128v2 0.54 0.54 0.55 T:aes256otrsv3 0.54 0.55 0.55 T:aes256otrcv3 0.58 0.59 0.59 T:aes256otrpv3 0.59 0.59 0.60 T:deoxysi128v141 0.65 0.67 0.71 T:deoxysneq128128v1 0.68 0.69 0.69 T:deoxysi256v141 0.71 0.72 0.72 T:deoxysneq256128v1 0.73 0.75 0.76 T:morus640128v2 0.78 0.78 0.79 T:morus640128v1 0.77? 0.79? 0.86? T:oceankeyakv2 0.79 0.80 0.80 T:aes128gcmv1 0.85 0.89 0.92 T:lunarkeyakv2 0.90 0.91 0.93 T:norx6444v3 1.06 1.07 1.07 T:deoxysii128v141 1.18 1.18 1.19 T:colm0v1 1.19 1.20 1.20 T:deoxysii256v141 1.35 1.36 1.37 T:deoxyseq128128v1 1.41 1.43 1.44 T:deoxyseq256128v1 1.46 1.49 1.54 T:seakeyakv2 2.04 2.06 2.12 T:norx6441v3 2.05 2.06 2.11 T:norx6441v2 2.45 2.45 2.54 T:norx6441v1 2.55 2.56 2.56 T:aes128n12t8clocv3 2.54 2.56 2.56 T:aes128n8t8clocv2 2.55 2.56 2.56 T:aes128n12t8clocv2 2.55 2.56 2.56 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128n12t8silcv3 2.55 2.56 2.56 T:aes128n8t8silcv2 3.14 3.15 3.25 T:norx6461v3 3.13 3.17 3.26 T:norx6461v2 3.17 3.17 3.18 T:lakekeyakv2 3.28 3.32 3.33 T:lakekeyakv1 3.65 3.66 3.88 T:norx6461v1 3.67 3.69 3.71 T:norx6444v1 3.74 3.75 3.77 T:norx3241v3 3.74 3.88 3.91 T:norx3241v2 3.92 3.98 4.05 T:norx6444v2 4.44 4.48 4.66 T:norx3241v1 5.10 5.14 5.15 T:ketjemajorv2 5.19 5.19 5.19 T:ascon128av11 5.25 5.25 5.25 T:acorn128v2 5.25 5.25 5.25 T:acorn128v3 5.31 5.31 5.31 ascon128av12 5.44 5.44 5.44 T:ascon96v1 5.53 5.55 5.60 T:norx3261v2 5.60 5.63 5.78 T:norx3261v3 5.73 5.75 5.86 T:aesjambuv1 6.85 6.92 7.18 T:ketjeminorv2 7.35 7.37 7.40 T:norx3261v1 7.64 7.64 7.64 ascon128v12 7.67 7.69 7.70 T:riverkeyakv2 7.88 7.88 7.89 T:ascon128v11 7.88 7.88 7.88 T:ascon128v1 14.82 14.85 14.88 T:aes128otrpv1 14.86 14.89 14.91 T:aes128otrsv1 14.91 14.93 14.95 T:aes128otrpv2 14.92 14.96 14.97 T:aes128otrsv2 17.48 17.50 17.52 T:proest256otrv1 18.83 18.85 18.89 T:aes256otrpv1 18.91 18.94 18.96 T:aes256otrpv2 19.00 19.09 19.15 T:twine80n6t4clocv3 19.52 19.55 19.60 T:aes256otrsv2 17.11? 19.60? 20.88? T:twine80n6t4clocv2 19.57 19.61 19.65 T:aes256otrsv1 21.27 21.29 21.33 T:aes128n12clocv1 21.32 21.34 21.37 T:aes128n8clocv1 26.79 26.87 27.03 T:ketjesrv2 29.14 29.22 29.51 T:ketjesrv1 29.27 29.32 29.43 T:aeadaes128ocbtaglen96v1 29.30 29.35 29.38 T:aeadaes128ocbtaglen64v1 34.87 34.89 35.07 T:aeadaes192ocbtaglen96v1 34.98 35.04 35.43 T:aeadaes192ocbtaglen64v1 40.56 40.62 40.74 T:aeadaes256ocbtaglen64v1 40.57 40.63 40.71 T:aeadaes256ocbtaglen96v1 45.25 45.95 49.20 T:proest128otrv1 60.78 60.83 60.86 T:ketjejrv1 61.47 61.57 61.63 T:colm127v1 66.94 67.00 67.07 T:present80n6t4silcv3 78.10 78.49 81.46 T:ketjejrv2 90.79 91.33 94.24 T:led80n6t4silcv3 108.51 109.06 109.25 T:deoxysneq128128v13 141.65 142.13 142.50 T:deoxyseq128128v13 149.51 150.04 150.22 T:deoxysneq256128v13 157.03 157.81 158.30 T:aezv1 181.43 181.56 181.73 T:deoxyseq256128v13 478.45 511.37 524.60 T:acorn128 3312.44 3322.05 3358.05 T:led80n6t4silcv2 3320.98 3350.93 3355.77 T:led80n6silcv1 3475.33 3476.39 3477.16 T:present80n6silcv1 3476.04 3476.52 3478.10 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.12 0.12 0.12 T:tiaoxinv1 0.12 0.12 0.12 T:tiaoxinv2 0.11? 0.17? 0.22? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.17 T:aegis128l 0.17 0.17 0.18 aegis128l 0.17? 0.24? 0.30? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.26 T:aezv4 0.25 0.25 0.26 T:aezv5 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.32 aegis256 0.31? 0.39? 0.45? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.42 T:aes128otrcv3 0.42 0.42 0.42 T:aes128otrpv3 0.46 0.46 0.46 aes256gcmv1 0.45 0.47 0.50 T:morus1280256v2 0.47 0.47 0.48 T:morus1280128v1 0.47 0.48 0.49 T:morus1280256v1 0.47 0.48 0.50 T:morus1280128v2 0.54 0.54 0.54 T:deoxysi128v141 0.54 0.54 0.54 T:aes256otrcv3 0.55 0.55 0.55 T:aes256otrpv3 0.59 0.60 0.60 T:deoxysi256v141 0.60 0.60 0.61 T:aes128gcmv1 0.62 0.62 0.63 T:deoxysneq128128v1 0.64 0.65 0.66 T:oceankeyakv2 0.70 0.71 0.72 T:deoxysneq256128v1 0.72 0.73 0.74 T:morus640128v2 0.75 0.76 0.77 T:morus640128v1 0.79 0.80 0.80 T:deoxysii128v141 0.89 0.90 0.90 T:colm0v1 0.90 0.90 0.91 T:deoxysii256v141 0.90 0.92 0.93 T:lunarkeyakv2 0.93 0.94 0.94 T:deoxyseq128128v1 1.09 1.10 1.11 T:deoxyseq256128v1 1.19 1.20 1.21 T:seakeyakv2 1.48 1.49 1.50 T:aes128otrsv3 1.50 1.54 1.56 T:norx6444v3 2.05 2.05 2.06 T:aes256otrsv3 2.13 2.17 2.18 T:norx6441v2 2.13 2.17 2.18 T:norx6441v3 2.50 2.51 2.61 T:norx6441v1 2.59 2.59 2.59 T:aes128n12t8clocv2 2.59 2.59 2.59 T:aes128n8t8clocv2 2.59 2.59 2.60 T:aes128n12t8silcv3 2.59 2.59 2.60 T:aes128n12t8silcv2 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.59 T:aes128n12t8clocv3 2.71 2.75 2.79 T:lakekeyakv2 3.02 3.03 3.04 T:lakekeyakv1 3.15 3.20 3.31 T:norx6461v3 3.21 3.24 3.27 T:norx6444v2 3.18 3.30 3.32 T:norx6461v2 3.54 3.56 3.58 T:norx6444v1 3.68 3.69 3.70 T:norx3241v2 3.75 3.77 3.92 T:norx6461v1 3.88 3.90 3.91 T:norx3241v3 4.52 4.52 4.54 T:ketjemajorv2 4.52 4.60 4.68 T:norx3241v1 5.01 5.01 5.01 T:acorn128v3 5.15 5.15 5.15 T:acorn128v2 5.22 5.22 5.22 T:ascon96v1 5.28 5.28 5.29 ascon128av12 5.30 5.34 5.40 T:aesjambuv1 5.34 5.34 5.35 T:ascon128av11 5.39 5.41 5.42 T:riverkeyakv2 5.56 5.59 5.62 T:norx3261v3 5.67 5.69 5.71 T:norx3261v2 6.35 6.49 6.51 T:ketjeminorv2 7.52 7.53 7.53 T:norx3261v1 7.62 7.62 7.63 ascon128v12 8.06 8.06 8.06 T:ascon128v11 8.06 8.06 8.06 T:ascon128v1 13.48 13.50 13.52 T:aes128otrsv2 13.50 13.53 13.55 T:aes128otrsv1 14.38 14.39 14.41 T:aes128otrpv1 14.38 14.40 14.41 T:aes128otrpv2 17.21 17.24 17.26 T:aes128n12clocv1 17.23 17.24 17.28 T:aes128n8clocv1 17.44 17.47 17.50 T:proest256otrv1 17.51 17.55 17.57 T:aes256otrsv2 17.08? 17.63? 18.98? T:twine80n6t4clocv2 17.62 17.64 17.67 T:aes256otrsv1 18.38 18.40 18.42 T:aes256otrpv1 18.38 18.41 18.44 T:aes256otrpv2 19.01 19.05 19.10 T:twine80n6t4clocv3 21.39 21.41 21.50 T:aeadaes128ocbtaglen64v1 21.43 21.46 21.49 T:aeadaes128ocbtaglen96v1 25.20 25.24 25.28 T:aeadaes192ocbtaglen64v1 25.22 25.27 25.28 T:aeadaes192ocbtaglen96v1 25.55 25.67 25.87 T:ketjesrv1 29.02 29.10 29.29 T:aeadaes256ocbtaglen64v1 29.09 29.11 29.26 T:aeadaes256ocbtaglen96v1 29.84 29.92 29.97 T:ketjesrv2 34.45 34.63 34.69 T:colm127v1 45.60 45.86 46.01 T:proest128otrv1 53.46 53.54 53.68 T:ketjejrv1 67.00 67.16 67.24 T:present80n6t4silcv3 70.13 70.20 70.28 T:deoxysneq128128v13 71.56 71.63 71.68 T:ketjejrv2 90.35 90.47 91.00 T:deoxysneq256128v13 89.21 91.48 92.36 T:led80n6t4silcv3 103.82 104.01 105.05 T:aezv1 106.18 106.59 106.86 T:deoxyseq128128v13 136.22 136.31 136.46 T:deoxyseq256128v13 541.43 546.67 547.98 T:acorn128 2485.92 2495.60 2505.58 T:led80n6t4silcv2 2490.04 2499.17 2500.89 T:led80n6silcv1 2604.25 2604.90 2605.23 T:present80n6t4silcv2 2606.51 2607.73 2609.88 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.17 0.17 0.18 aegis128l 0.17 0.17 0.18 T:aegis128l 0.12? 0.18? 0.22? T:aeadaes128ocbtaglen128v1 0.20 0.21 0.21 T:tiaoxinv1 0.21 0.21 0.22 T:tiaoxinv2 0.15? 0.24? 0.30? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.26 T:aezv3 0.25 0.25 0.26 T:aezv4 0.25 0.26 0.26 T:aezv5 0.31 0.31 0.32 aegis256 0.31 0.31 0.32 T:aegis128 0.32? 0.39? 0.47? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.42 0.42 0.43 aes256gcmv1 0.43 0.43 0.43 T:aes128otrpv3 0.45 0.47 0.48 T:morus1280128v2 0.46 0.48 0.49 T:morus1280256v2 0.47 0.48 0.50 T:morus1280128v1 0.47 0.48 0.49 T:morus1280256v1 0.54 0.54 0.55 T:aes256otrcv3 0.55 0.55 0.55 T:aes256otrpv3 0.57 0.57 0.57 T:deoxysi128v141 0.60 0.60 0.60 T:aes128gcmv1 0.63 0.64 0.67 T:oceankeyakv2 0.64 0.65 0.65 T:deoxysi256v141 0.63 0.65 0.70 T:deoxysneq128128v1 0.70 0.71 0.72 T:deoxysneq256128v1 0.73 0.74 0.74 T:morus640128v2 0.75 0.75 0.76 T:morus640128v1 0.79 0.80 0.80 T:deoxysii128v141 0.83 0.84 0.85 T:colm0v1 0.89 0.90 0.91 T:deoxysii256v141 0.95 0.96 0.98 T:lunarkeyakv2 0.99 1.00 1.02 T:deoxyseq128128v1 1.11 1.12 1.13 T:deoxyseq256128v1 1.20 1.22 1.24 T:seakeyakv2 1.49 1.50 1.50 T:aes128otrsv3 1.50 1.52 1.56 T:norx6444v3 2.05 2.05 2.06 T:aes256otrsv3 2.10 2.15 2.16 T:norx6441v3 2.11 2.15 2.16 T:norx6441v2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.57 2.57 T:aes128n12t8silcv3 2.56 2.57 2.57 T:aes128n12t8silcv2 2.57 2.57 2.57 T:aes128n8t8silcv2 2.60 2.61 2.61 T:norx6441v1 2.76 2.77 2.79 T:lakekeyakv2 3.07 3.08 3.10 T:lakekeyakv1 3.20 3.28 3.29 T:norx6461v2 3.17 3.28 3.29 T:norx6461v3 3.25 3.28 3.30 T:norx6444v2 3.61 3.62 3.63 T:norx6444v1 3.76 3.77 3.77 T:norx3241v3 3.73 3.78 3.85 T:norx3241v2 3.75 3.89 3.91 T:norx6461v1 4.43 4.44 4.46 T:ketjemajorv2 4.53 4.60 4.62 T:norx3241v1 5.13 5.13 5.13 T:acorn128v3 5.13 5.13 5.13 T:acorn128v2 5.19 5.19 5.19 T:ascon128av11 5.29 5.29 5.29 ascon128av12 5.31 5.31 5.32 T:ascon96v1 5.47 5.48 5.49 T:riverkeyakv2 5.50 5.54 5.54 T:aesjambuv1 5.56 5.60 5.72 T:norx3261v3 5.59 5.61 5.73 T:norx3261v2 6.39 6.43 6.59 T:ketjeminorv2 7.44 7.44 7.46 T:norx3261v1 7.62 7.63 7.63 ascon128v12 7.81 7.81 7.81 T:ascon128v11 7.81 7.81 7.81 T:ascon128v1 13.62 13.64 13.67 T:aes128otrsv1 13.63 13.64 13.66 T:aes128otrsv2 14.48 14.50 14.53 T:aes128otrpv1 14.52 14.54 14.57 T:aes128otrpv2 16.59 16.62 16.65 T:aes128n12clocv1 16.64 16.67 16.68 T:aes128n8clocv1 17.58 17.61 17.63 T:aes256otrsv2 17.60 17.62 17.63 T:aes256otrsv1 17.64 17.67 17.70 T:proest256otrv1 17.06? 17.70? 19.04? T:twine80n6t4clocv2 18.52 18.53 18.55 T:aes256otrpv1 18.54 18.55 18.59 T:aes256otrpv2 18.91 19.01 19.08 T:twine80n6t4clocv3 25.19 25.23 25.27 T:aeadaes128ocbtaglen64v1 25.23 25.28 25.34 T:aeadaes128ocbtaglen96v1 26.08 26.31 26.83 T:ketjesrv1 26.26 26.34 26.81 T:ketjesrv2 29.92 29.96 30.03 T:aeadaes192ocbtaglen64v1 29.96 29.98 30.00 T:aeadaes192ocbtaglen96v1 34.65 34.68 34.76 T:aeadaes256ocbtaglen96v1 34.71 34.81 34.92 T:aeadaes256ocbtaglen64v1 42.28 42.34 42.34 T:colm127v1 46.41 46.77 48.75 T:proest128otrv1 54.56 54.65 54.79 T:ketjejrv1 66.77 66.85 67.00 T:present80n6t4silcv3 73.70 73.76 73.86 T:ketjejrv2 89.80 89.92 90.07 T:deoxysneq128128v13 90.30 92.16 92.88 T:led80n6t4silcv3 103.53 103.81 104.06 T:aezv1 106.04 106.15 106.37 T:deoxyseq128128v13 119.86 120.13 120.34 T:deoxysneq256128v13 136.10 136.37 136.91 T:deoxyseq256128v13 486.99 488.76 493.87 T:acorn128 2485.82 2494.14 2509.03 T:led80n6t4silcv2 2495.57 2504.24 2506.70 T:led80n6silcv1 2605.75 2606.13 2606.99 T:present80n6t4silcv2 2605.92 2606.71 2607.32 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.12? 0.13? 0.14? T:aezv3 0.13 0.13 0.14 T:aezv5 0.13? 0.14? 0.15? T:aezv4 0.17 0.17 0.18 T:aegis128l 0.13? 0.18? 0.22? T:aeadaes128ocbtaglen128v1 0.19 0.20 0.20 aegis128l 0.19? 0.21? 0.22? T:tiaoxinv1 0.21 0.22 0.23 T:tiaoxinv2 0.15? 0.24? 0.33? T:aeadaes256ocbtaglen128v1 0.31 0.32 0.32 T:aegis128 0.35 0.35 0.35 aegis256 0.31? 0.39? 0.43? T:aeadaes192ocbtaglen128v1 0.42 0.42 0.42 T:aes128otrcv3 0.42 0.43 0.43 aes256gcmv1 0.43 0.43 0.43 T:aes128otrpv3 0.44 0.45 0.48 T:morus1280128v2 0.46 0.47 0.49 T:morus1280256v2 0.47 0.48 0.49 T:morus1280256v1 0.47 0.48 0.49 T:morus1280128v1 0.54 0.54 0.55 T:aes256otrcv3 0.55 0.55 0.55 T:aes256otrpv3 0.56 0.57 0.57 T:deoxysi128v141 0.60 0.60 0.60 T:aes128gcmv1 0.63 0.65 0.67 T:deoxysneq128128v1 0.65 0.65 0.65 T:deoxysi256v141 0.64 0.66 0.69 T:oceankeyakv2 0.70 0.71 0.72 T:deoxysneq256128v1 0.70 0.71 0.74 T:morus640128v2 0.75 0.75 0.76 T:morus640128v1 0.79 0.80 0.80 T:deoxysii128v141 0.83 0.84 0.85 T:colm0v1 0.89 0.90 0.90 T:deoxysii256v141 0.95 0.97 0.98 T:lunarkeyakv2 0.99 1.00 1.00 T:deoxyseq128128v1 1.09 1.09 1.10 T:deoxyseq256128v1 1.21 1.23 1.25 T:seakeyakv2 1.49 1.49 1.50 T:aes128otrsv3 1.50 1.53 1.56 T:norx6444v3 2.05 2.05 2.06 T:aes256otrsv3 2.14 2.15 2.16 T:norx6441v2 2.11 2.15 2.16 T:norx6441v3 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n8t8silcv2 2.47 2.58 2.61 T:norx6441v1 2.77 2.78 2.78 T:lakekeyakv2 3.08 3.09 3.10 T:lakekeyakv1 3.10 3.13 3.25 T:norx6461v2 3.09 3.14 3.27 T:norx6461v3 3.30 3.33 3.35 T:norx6444v2 3.62 3.63 3.64 T:norx6444v1 3.66 3.72 3.91 T:norx6461v1 3.74 3.79 3.85 T:norx3241v2 3.72 3.83 3.89 T:norx3241v3 4.44 4.46 4.49 T:ketjemajorv2 4.50 4.58 4.62 T:norx3241v1 5.13 5.13 5.13 T:acorn128v3 5.13 5.13 5.13 T:acorn128v2 5.19 5.19 5.19 T:ascon128av11 5.29 5.29 5.29 ascon128av12 5.31 5.31 5.31 T:ascon96v1 5.48 5.50 5.50 T:riverkeyakv2 5.50 5.54 5.54 T:aesjambuv1 5.71 5.75 5.80 T:norx3261v2 5.59 5.81 5.84 T:norx3261v3 6.47 6.67 6.72 T:ketjeminorv2 7.45 7.46 7.47 T:norx3261v1 7.62 7.63 7.63 ascon128v12 7.81 7.81 7.82 T:ascon128v1 7.81 7.81 7.82 T:ascon128v11 13.64 13.65 13.70 T:aes128otrsv1 13.64 13.67 13.70 T:aes128otrsv2 14.54 14.56 14.59 T:aes128otrpv1 14.55 14.57 14.59 T:aes128otrpv2 16.56 16.59 16.62 T:aes128n12clocv1 16.61 16.64 16.66 T:aes128n8clocv1 17.59 17.61 17.63 T:aes256otrsv2 17.60 17.62 17.64 T:aes256otrsv1 17.65 17.67 17.68 T:proest256otrv1 17.26? 18.18? 19.63? T:twine80n6t4clocv2 18.52 18.54 18.57 T:aes256otrpv1 18.55 18.58 18.61 T:aes256otrpv2 18.91 18.97 19.07 T:twine80n6t4clocv3 25.18 25.20 25.25 T:aeadaes128ocbtaglen96v1 25.19 25.22 25.25 T:aeadaes128ocbtaglen64v1 25.97 26.12 26.37 T:ketjesrv1 26.24 26.34 27.41 T:ketjesrv2 29.95 30.01 30.09 T:aeadaes192ocbtaglen96v1 30.00 30.11 30.20 T:aeadaes192ocbtaglen64v1 34.75 34.77 34.79 T:aeadaes256ocbtaglen96v1 34.86 34.87 34.92 T:aeadaes256ocbtaglen64v1 41.97 42.00 42.23 T:colm127v1 45.83 46.05 47.84 T:proest128otrv1 54.66 54.76 54.87 T:ketjejrv1 66.82 66.90 66.98 T:present80n6t4silcv3 73.70 73.79 73.87 T:ketjejrv2 89.66 89.75 89.89 T:deoxysneq128128v13 90.04 92.39 93.42 T:led80n6t4silcv3 103.64 103.82 104.34 T:aezv1 106.16 106.24 106.37 T:deoxyseq128128v13 119.97 120.13 120.24 T:deoxysneq256128v13 135.88 136.06 136.20 T:deoxyseq256128v13 520.09 546.13 552.64 T:acorn128 2492.18 2494.85 2510.51 T:led80n6t4silcv2 2494.02 2508.22 2509.90 T:led80n6silcv1 2606.20 2606.62 2607.14 T:present80n6silcv1 2605.98 2606.64 2608.16 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv1 0.10 0.11 0.11 T:tiaoxinv2 0.13 0.13 0.14 T:aezv5 0.13 0.13 0.14 T:aezv4 0.13? 0.14? 0.15? T:aezv3 0.16 0.16 0.16 aegis128l 0.15 0.16 0.16 T:aegis128l 0.06? 0.17? 0.26? T:aeadaes128ocbtaglen128v1 0.08? 0.24? 0.33? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.31 T:aegis128 0.31 0.31 0.32 aegis256 0.25? 0.38? 0.47? T:aeadaes192ocbtaglen128v1 0.37 0.39 0.40 aes256gcmv1 0.39 0.40 0.40 T:aes128otrpv3 0.41 0.42 0.42 T:aes128gcmv1 0.42 0.42 0.43 T:aes128otrcv3 0.44? 0.48? 0.49? T:morus1280128v2 0.47 0.48 0.49 T:morus1280256v2 0.46 0.48 0.49 T:morus1280256v1 0.46 0.49 0.50 T:morus1280128v1 0.48 0.50 0.52 T:oceankeyakv2 0.50 0.51 0.52 T:colm0v1 0.52 0.53 0.53 T:aes256otrpv3 0.52 0.54 0.54 T:deoxysii128v141 0.54 0.55 0.55 T:deoxysi128v141 0.55 0.55 0.56 T:aes256otrcv3 0.54 0.57 0.60 T:lunarkeyakv2 0.59 0.59 0.60 T:deoxysi256v141 0.60 0.61 0.61 T:deoxysii256v141 0.61 0.62 0.63 T:deoxyseq128128v1 0.62 0.63 0.64 T:deoxysneq128128v1 0.69 0.70 0.71 T:deoxysneq256128v1 0.71 0.72 0.72 T:deoxyseq256128v1 0.69 0.72 0.74 T:morus640128v2 0.72 0.73 0.74 T:morus640128v1 1.10 1.11 1.12 T:seakeyakv2 2.13 2.15 2.16 T:norx6441v3 2.17 2.18 2.20 T:norx6444v3 2.16 2.18 2.20 T:norx6441v2 2.43 2.51 2.56 T:lakekeyakv2 2.56 2.56 2.56 T:norx6444v2 2.56 2.56 2.57 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128otrsv3 2.56 2.56 2.56 T:aes128n8t8clocv2 2.47 2.62 2.64 T:norx6441v1 2.75 2.80 2.83 T:lakekeyakv1 3.08 3.11 3.27 T:norx6461v3 3.11 3.12 3.14 T:norx6461v2 3.45 3.46 3.47 T:norx6444v1 3.56 3.56 3.56 T:aes256otrsv3 3.65 3.65 3.74 T:norx3241v2 3.76 3.82 3.86 T:norx3241v3 3.85 3.87 3.89 T:ketjemajorv2 3.69 3.94 3.97 T:norx6461v1 4.45 4.54 4.66 T:norx3241v1 5.00 5.00 5.00 T:acorn128v3 5.07 5.09 5.11 T:riverkeyakv2 5.12 5.13 5.13 T:ascon96v1 5.17 5.17 5.17 T:acorn128v2 5.25 5.25 5.25 T:ascon128av11 5.25 5.25 5.25 ascon128av12 5.25 5.28 5.38 T:aesjambuv1 5.45 5.52 5.64 T:norx3261v2 5.61 5.63 5.70 T:norx3261v3 5.85 5.89 5.96 T:ketjeminorv2 7.50 7.50 7.50 ascon128v12 7.52 7.52 7.53 T:norx3261v1 7.87 7.87 7.88 T:ascon128v11 7.87 7.88 7.88 T:ascon128v1 11.91 11.94 11.98 T:aes128n12clocv1 11.94 11.96 11.98 T:aes128n8clocv1 12.36 12.38 12.50 T:aes128otrsv1 12.36 12.40 12.43 T:aes128otrsv2 14.17 14.21 14.26 T:aes128otrpv1 14.18 14.22 14.24 T:aes128otrpv2 15.63 15.64 15.67 T:aes256otrsv2 15.65 15.66 15.68 T:aes256otrsv1 16.93 17.32 18.41 T:twine80n6t4clocv2 17.87 17.91 17.95 T:proest256otrv1 18.18 18.20 18.23 T:aes256otrpv1 18.16 18.21 18.27 T:aes256otrpv2 18.81 18.83 18.86 T:twine80n6t4clocv3 21.17 21.26 21.27 T:aeadaes128ocbtaglen96v1 21.09 21.26 21.37 T:aeadaes128ocbtaglen64v1 22.31? 22.45? 31.83? T:colm127v1 22.94 23.00 24.74 T:ketjesrv1 24.87 24.97 25.00 T:aeadaes192ocbtaglen96v1 25.01 25.11 25.16 T:aeadaes192ocbtaglen64v1 25.83 25.91 26.59 T:ketjesrv2 28.76 28.88 28.90 T:aeadaes256ocbtaglen96v1 28.81 28.94 29.02 T:aeadaes256ocbtaglen64v1 46.33 46.57 46.90 T:proest128otrv1 48.48 48.71 48.78 T:ketjejrv1 50.05 50.22 50.41 T:aezv1 66.81 66.84 66.90 T:present80n6t4silcv3 69.04 69.13 69.23 T:ketjejrv2 70.51 70.60 70.80 T:deoxysneq128128v13 70.52 70.73 70.93 T:deoxyseq128128v13 90.31 90.53 90.76 T:deoxyseq256128v13 90.45 90.58 90.69 T:deoxysneq256128v13 89.55 93.38 93.40 T:led80n6t4silcv3 507.94 544.71 556.40 T:acorn128 1654.35 1659.40 1679.50 T:led80n6t4silcv2 1660.68 1675.40 1677.13 T:led80n6silcv1 1736.40 1737.06 1737.85 T:present80n6silcv1 1736.16 1737.41 1738.05 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv2 0.10 0.10 0.11 T:tiaoxinv1 0.13 0.13 0.14 T:aezv4 0.13 0.13 0.14 T:aezv5 0.13? 0.14? 0.15? T:aezv3 0.15 0.16 0.16 T:aegis128l 0.15 0.16 0.16 aegis128l 0.08? 0.17? 0.26? T:aeadaes128ocbtaglen128v1 0.07? 0.23? 0.40? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.31 T:aegis128 0.31 0.31 0.32 aegis256 0.28? 0.36? 0.45? T:aeadaes192ocbtaglen128v1 0.37 0.38 0.39 aes256gcmv1 0.40 0.40 0.40 T:aes128gcmv1 0.40 0.41 0.41 T:aes128otrpv3 0.42 0.43 0.43 T:aes128otrcv3 0.43 0.45 0.47 T:morus1280256v2 0.44? 0.47? 0.49? T:morus1280128v2 0.44? 0.47? 0.49? T:morus1280256v1 0.45 0.49 0.50 T:morus1280128v1 0.49 0.50 0.51 T:colm0v1 0.49 0.50 0.52 T:oceankeyakv2 0.53 0.53 0.53 T:aes256otrpv3 0.52 0.53 0.54 T:deoxysii128v141 0.54 0.54 0.55 T:deoxysi128v141 0.55 0.56 0.56 T:aes256otrcv3 0.56 0.59 0.61 T:lunarkeyakv2 0.59 0.59 0.60 T:deoxysii256v141 0.60 0.60 0.61 T:deoxysi256v141 0.61 0.62 0.63 T:deoxyseq128128v1 0.61 0.63 0.64 T:deoxysneq128128v1 0.69 0.70 0.71 T:deoxyseq256128v1 0.67 0.70 0.73 T:morus640128v2 0.69 0.70 0.71 T:deoxysneq256128v1 0.71 0.72 0.73 T:morus640128v1 1.10 1.12 1.13 T:seakeyakv2 2.15 2.16 2.18 T:norx6441v2 2.15 2.17 2.18 T:norx6441v3 2.07 2.18 2.20 T:norx6444v3 2.42 2.46 2.56 T:lakekeyakv2 2.56 2.56 2.56 T:aes128n12t8silcv3 2.56 2.56 2.56 T:aes128otrsv3 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.60 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n8t8silcv2 2.56 2.56 2.57 T:aes128n12t8clocv3 2.60 2.60 2.61 T:norx6444v2 2.60 2.62 2.64 T:norx6441v1 2.77 2.80 2.82 T:lakekeyakv1 3.02 3.09 3.12 T:norx6461v3 3.11 3.27 3.30 T:norx6461v2 3.56 3.56 3.56 T:aes256otrsv3 3.55 3.56 3.59 T:norx6444v1 3.64 3.67 3.88 T:norx6461v1 3.77 3.81 3.86 T:norx3241v2 3.87 3.90 3.91 T:ketjemajorv2 3.79 3.90 3.94 T:norx3241v3 4.52 4.55 4.64 T:norx3241v1 5.00 5.00 5.00 T:acorn128v3 5.00 5.00 5.00 T:acorn128v2 5.07 5.08 5.10 T:riverkeyakv2 5.19 5.19 5.19 T:ascon96v1 5.19 5.19 5.19 T:ascon128av11 5.25 5.26 5.26 ascon128av12 5.26 5.28 5.37 T:aesjambuv1 5.61 5.64 5.76 T:norx3261v2 5.62 5.64 5.67 T:norx3261v3 5.85 5.92 6.07 T:ketjeminorv2 7.52 7.52 7.52 T:norx3261v1 7.62 7.62 7.63 ascon128v12 7.75 7.75 7.76 T:ascon128v1 7.75 7.75 7.76 T:ascon128v11 11.91 11.94 11.96 T:aes128n8clocv1 11.92 11.94 11.95 T:aes128n12clocv1 12.37 12.40 12.48 T:aes128otrsv1 12.31 12.41 12.45 T:aes128otrsv2 14.16 14.20 14.25 T:aes128otrpv1 14.17 14.21 14.26 T:aes128otrpv2 15.64 15.66 15.69 T:aes256otrsv2 15.66 15.72 15.74 T:aes256otrsv1 16.85 17.18 17.69 T:twine80n6t4clocv2 17.84 17.90 17.92 T:proest256otrv1 18.19 18.21 18.27 T:aes256otrpv1 18.18 18.24 18.28 T:aes256otrpv2 18.82 18.85 18.99 T:twine80n6t4clocv3 21.02 21.08 21.25 T:aeadaes128ocbtaglen64v1 21.04 21.15 21.22 T:aeadaes128ocbtaglen96v1 22.23? 22.34? 33.57? T:colm127v1 22.91 23.00 23.05 T:ketjesrv1 25.03 25.06 25.14 T:aeadaes192ocbtaglen64v1 25.01 25.06 25.13 T:aeadaes192ocbtaglen96v1 25.83 25.90 26.99 T:ketjesrv2 28.74 28.86 28.90 T:aeadaes256ocbtaglen96v1 28.96 29.14 29.23 T:aeadaes256ocbtaglen64v1 46.06 46.30 46.61 T:proest128otrv1 48.52 48.64 48.72 T:ketjejrv1 49.98 50.14 50.33 T:aezv1 66.76 66.83 66.91 T:present80n6t4silcv3 69.15 69.26 72.37 T:ketjejrv2 70.35 70.49 70.72 T:deoxyseq128128v13 70.60 70.68 70.77 T:deoxysneq128128v13 90.11 90.23 90.57 T:deoxyseq256128v13 90.46 90.55 90.64 T:deoxysneq256128v13 93.05 93.07 93.39 T:led80n6t4silcv3 538.72 543.14 558.44 T:acorn128 1655.05 1658.88 1676.51 T:led80n6t4silcv2 1660.15 1661.93 1662.48 T:led80n6silcv1 1735.95 1736.19 1736.36 T:present80n6t4silcv2 1735.46 1736.72 1737.18 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.10 0.10 0.10 T:tiaoxinv1 0.10 0.10 0.11 T:tiaoxinv2 0.13 0.13 0.14 T:aezv4 0.13 0.13 0.14 T:aezv5 0.13? 0.14? 0.15? T:aezv3 0.16 0.16 0.16 T:aegis128l 0.16 0.16 0.16 aegis128l 0.09? 0.17? 0.25? T:aeadaes128ocbtaglen128v1 0.15? 0.24? 0.41? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.31 T:aegis128 0.31 0.31 0.31 aegis256 0.28? 0.36? 0.45? T:aeadaes192ocbtaglen128v1 0.37 0.38 0.39 aes256gcmv1 0.40 0.40 0.40 T:aes128gcmv1 0.40 0.41 0.41 T:aes128otrpv3 0.42 0.42 0.43 T:aes128otrcv3 0.43? 0.45? 0.48? T:morus1280256v2 0.46 0.48 0.49 T:morus1280128v2 0.46 0.49 0.50 T:morus1280256v1 0.47 0.49 0.50 T:morus1280128v1 0.49 0.50 0.51 T:oceankeyakv2 0.48 0.50 0.51 T:colm0v1 0.52 0.53 0.54 T:deoxysii128v141 0.53 0.53 0.53 T:aes256otrpv3 0.53 0.54 0.54 T:deoxysi128v141 0.55 0.56 0.56 T:aes256otrcv3 0.56 0.58 0.61 T:lunarkeyakv2 0.59 0.59 0.60 T:deoxysii256v141 0.60 0.61 0.61 T:deoxysi256v141 0.61 0.62 0.63 T:deoxyseq128128v1 0.61 0.62 0.63 T:deoxysneq128128v1 0.67 0.69 0.73 T:morus640128v2 0.69 0.70 0.71 T:deoxyseq256128v1 0.69 0.70 0.71 T:deoxysneq256128v1 0.71 0.72 0.73 T:morus640128v1 1.10 1.12 1.13 T:seakeyakv2 2.09 2.11 2.18 T:norx6444v3 2.15 2.18 2.19 T:norx6441v2 2.16 2.18 2.20 T:norx6441v3 2.51 2.52 2.53 T:lakekeyakv2 2.55 2.56 2.58 T:aes128n12t8silcv3 2.56 2.56 2.56 T:aes128n8t8silcv2 2.54 2.56 2.56 T:aes128n12t8clocv2 2.55 2.56 2.56 T:aes128n8t8clocv2 2.55 2.56 2.56 T:aes128n12t8clocv3 2.55 2.56 2.58 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128otrsv3 2.44 2.60 2.63 T:norx6441v1 2.60 2.60 2.61 T:norx6444v2 2.77 2.81 2.86 T:lakekeyakv1 3.01 3.05 3.26 T:norx6461v3 3.26 3.28 3.31 T:norx6461v2 3.56 3.56 3.56 T:aes256otrsv3 3.56 3.57 3.59 T:norx6444v1 3.75 3.80 3.86 T:norx3241v2 3.86 3.89 3.91 T:ketjemajorv2 3.81 3.91 3.95 T:norx3241v3 3.90 3.93 3.97 T:norx6461v1 4.54 4.64 4.76 T:norx3241v1 5.00 5.00 5.00 T:acorn128v2 5.00 5.00 5.00 T:acorn128v3 5.06 5.08 5.11 T:riverkeyakv2 5.18 5.19 5.19 T:ascon128av11 5.19 5.19 5.19 T:ascon96v1 5.25 5.26 5.26 ascon128av12 5.26 5.28 5.35 T:aesjambuv1 5.62 5.64 5.76 T:norx3261v2 5.53 5.65 5.85 T:norx3261v3 5.86 5.92 6.08 T:ketjeminorv2 7.52 7.52 7.53 T:norx3261v1 7.62 7.63 7.63 ascon128v12 7.75 7.75 7.76 T:ascon128v1 7.75 7.76 7.76 T:ascon128v11 11.92 11.93 11.95 T:aes128n12clocv1 11.93 11.95 11.97 T:aes128n8clocv1 12.38 12.40 12.48 T:aes128otrsv1 12.36 12.41 12.45 T:aes128otrsv2 14.17 14.20 14.30 T:aes128otrpv2 14.18 14.21 14.24 T:aes128otrpv1 15.65 15.67 15.70 T:aes256otrsv2 15.65 15.70 15.75 T:aes256otrsv1 16.83 17.19 18.15 T:twine80n6t4clocv2 17.86 17.90 17.93 T:proest256otrv1 18.19 18.22 18.29 T:aes256otrpv2 18.18 18.22 18.26 T:aes256otrpv1 18.82 18.88 19.02 T:twine80n6t4clocv3 21.09 21.14 21.15 T:aeadaes128ocbtaglen96v1 21.13 21.18 21.22 T:aeadaes128ocbtaglen64v1 22.36? 22.60? 34.37? T:colm127v1 22.90 23.00 24.46 T:ketjesrv1 24.98 25.03 25.09 T:aeadaes192ocbtaglen96v1 24.99 25.04 25.30 T:aeadaes192ocbtaglen64v1 25.75 25.82 25.90 T:ketjesrv2 28.69 28.73 28.84 T:aeadaes256ocbtaglen96v1 28.90 28.98 29.07 T:aeadaes256ocbtaglen64v1 46.25 46.50 46.67 T:proest128otrv1 48.31 48.44 48.77 T:ketjejrv1 50.19 50.32 50.41 T:aezv1 66.78 66.82 66.89 T:present80n6t4silcv3 70.47 70.80 70.88 T:deoxyseq128128v13 70.72 70.84 70.95 T:deoxysneq128128v13 69.73 72.89 73.07 T:ketjejrv2 90.15 90.27 90.59 T:deoxyseq256128v13 90.26 90.40 90.54 T:deoxysneq256128v13 92.96 93.38 93.40 T:led80n6t4silcv3 489.59 515.62 538.58 T:acorn128 1653.42 1657.59 1659.07 T:led80n6silcv1 1654.95 1657.87 1675.30 T:led80n6t4silcv2 1736.36 1736.80 1737.71 T:present80n6t4silcv2 1736.14 1736.97 1737.46 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.16 0.16 0.17 T:tiaoxinv2 0.16 0.17 0.17 T:tiaoxinv1 0.20 0.20 0.20 T:aegis128l 0.20 0.21 0.21 aegis128l 0.27? 0.27? 0.34? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.30 T:aezv5 0.30 0.30 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.35 0.35 0.35 aegis256 0.37? 0.38? 0.44? T:aeadaes256ocbtaglen128v1 0.49? 0.49? 0.60? T:aeadaes192ocbtaglen128v1 0.53 0.54 0.54 T:aes128otrcv3 0.53 0.54 0.54 T:aes128otrpv3 0.55 0.55 0.56 aes256gcmv1 0.58 0.59 0.60 T:morus1280128v1 0.57 0.59 0.61 T:morus1280128v2 0.59 0.60 0.60 T:morus1280256v1 0.59 0.60 0.61 T:morus1280256v2 0.63 0.63 0.63 T:deoxysi128v141 0.69 0.69 0.69 T:aes256otrpv3 0.69 0.69 0.70 T:aes128gcmv1 0.71 0.71 0.71 T:deoxysi256v141 0.71 0.72 0.73 T:deoxysneq128128v1 0.72 0.72 0.73 T:aes256otrcv3 0.81 0.82 0.83 T:morus640128v2 0.83 0.83 0.84 T:deoxysneq256128v1 0.84 0.84 0.86 T:morus640128v1 0.91 0.91 0.91 T:deoxysii128v141 0.96 0.97 0.98 T:colm0v1 1.03 1.03 1.04 T:deoxysii256v141 1.05 1.05 1.06 T:deoxyseq128128v1 1.25 1.26 1.28 T:deoxyseq256128v1 1.39 1.39 1.41 T:oceankeyakv2 1.53 1.53 1.55 T:aes128otrsv3 1.76 1.76 1.77 T:seakeyakv2 2.07 2.09 2.13 T:norx6444v3 2.13 2.13 2.13 T:aes256otrsv3 2.46 2.48 2.49 T:lunarkeyakv2 2.47 2.50 2.50 T:norx6441v3 2.46 2.50 2.51 T:norx6441v2 2.61 2.61 2.61 T:aes128n8t8silcv2 2.61 2.61 2.61 T:aes128n12t8silcv2 2.61 2.61 2.61 T:aes128n12t8clocv3 2.61 2.61 2.61 T:aes128n12t8clocv2 2.61 2.61 2.61 T:aes128n8t8clocv2 2.61 2.61 2.61 T:aes128n12t8silcv3 2.81 2.82 2.90 T:norx6441v1 3.03 3.05 3.06 T:lakekeyakv2 3.57 3.59 3.60 T:lakekeyakv1 3.71 3.81 3.82 T:norx6461v2 3.81 3.82 3.82 T:norx6461v3 4.01 4.08 4.13 T:norx3241v2 4.02 4.16 4.18 T:norx3241v3 4.21 4.22 4.37 T:norx6461v1 4.68 4.70 4.72 T:norx6444v2 4.77 4.83 4.88 T:norx3241v1 5.04 5.06 5.09 T:norx6444v1 5.34 5.34 5.35 T:ascon96v1 5.34 5.35 5.35 T:aesjambuv1 5.41 5.41 5.42 ascon128av12 5.47 5.47 5.47 T:ascon128av11 5.65 5.66 5.68 T:riverkeyakv2 5.78 5.79 5.81 T:ketjemajorv2 5.81 5.81 5.83 T:acorn128v3 5.99 5.99 6.01 T:acorn128v2 6.00 6.04 6.14 T:norx3261v3 5.99 6.12 6.14 T:norx3261v2 7.20 7.22 7.24 T:ketjeminorv2 7.74 7.74 7.75 ascon128v12 7.92 7.92 7.92 T:norx3261v1 8.18 8.18 8.18 T:ascon128v1 8.18 8.18 8.18 T:ascon128v11 13.81 13.84 13.86 T:aes128otrsv2 13.84 13.85 13.87 T:aes128otrsv1 14.68 14.70 14.73 T:aes128otrpv1 14.72 14.74 14.76 T:aes128otrpv2 17.40 17.41 17.44 T:aes128n12clocv1 17.40 17.42 17.45 T:aes128n8clocv1 17.49 17.86 18.66 T:twine80n6t4clocv2 18.01 18.03 18.04 T:aes256otrsv2 18.10 18.11 18.13 T:aes256otrsv1 18.79 18.81 18.85 T:aes256otrpv2 18.81 18.83 18.84 T:aes256otrpv1 18.96 18.98 18.99 T:proest256otrv1 19.29 19.30 19.40 T:twine80n6t4clocv3 21.97 22.00 22.09 T:aeadaes128ocbtaglen64v1 21.96 22.01 22.05 T:aeadaes128ocbtaglen96v1 25.79 25.81 25.98 T:aeadaes192ocbtaglen64v1 25.89 25.90 25.92 T:aeadaes192ocbtaglen96v1 26.37 26.41 26.57 T:ketjesrv1 29.83 29.88 29.90 T:aeadaes256ocbtaglen96v1 29.87 29.89 29.92 T:aeadaes256ocbtaglen64v1 30.83 30.90 31.20 T:ketjesrv2 35.15 35.17 35.23 T:colm127v1 47.66 47.72 47.86 T:proest128otrv1 54.22 54.36 54.42 T:ketjejrv1 67.73 67.86 67.94 T:present80n6t4silcv3 70.69 70.73 70.77 T:deoxysneq128128v13 72.55 72.58 72.63 T:ketjejrv2 90.86 91.25 91.32 T:deoxysneq256128v13 90.14 92.67 92.88 T:led80n6t4silcv3 100.95 101.19 101.70 T:aezv1 107.37 107.49 107.95 T:deoxyseq128128v13 137.77 137.86 137.97 T:deoxyseq256128v13 569.45 571.85 608.78 T:acorn128 2498.40 2511.25 2518.63 T:led80n6t4silcv2 2504.78 2512.28 2513.78 T:led80n6silcv1 2617.72 2617.91 2618.11 T:present80n6t4silcv2 2619.96 2620.65 2621.19 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.20 0.20 0.21 T:aegis128l 0.21 0.21 0.21 aegis128l 0.24 0.24 0.26 T:tiaoxinv1 0.25 0.26 0.27 T:tiaoxinv2 0.27? 0.28? 0.35? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.31 T:aezv5 0.30 0.30 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.35 0.36 0.36 aegis256 0.37? 0.38? 0.45? T:aeadaes256ocbtaglen128v1 0.47? 0.47? 0.54? T:aeadaes192ocbtaglen128v1 0.51 0.51 0.52 aes256gcmv1 0.55 0.55 0.55 T:aes128otrcv3 0.56 0.56 0.56 T:aes128otrpv3 0.59 0.61 0.62 T:morus1280256v2 0.60 0.61 0.62 T:morus1280256v1 0.60 0.61 0.62 T:morus1280128v1 0.60 0.62 0.63 T:morus1280128v2 0.69 0.69 0.70 T:aes128gcmv1 0.72 0.72 0.72 T:aes256otrpv3 0.73 0.73 0.74 T:aes256otrcv3 0.73 0.73 0.73 T:deoxysi128v141 0.82 0.82 0.87 T:deoxysneq128128v1 0.81 0.83 0.85 T:morus640128v2 0.83 0.83 0.84 T:morus640128v1 0.85 0.85 0.85 T:deoxysi256v141 0.85 0.85 0.86 T:deoxysneq256128v1 0.92 0.92 0.93 T:deoxysii128v141 0.94 0.94 0.95 T:colm0v1 1.05 1.05 1.06 T:deoxysii256v141 1.20 1.20 1.22 T:deoxyseq128128v1 1.30 1.30 1.31 T:deoxyseq256128v1 1.40 1.41 1.45 T:oceankeyakv2 1.54 1.55 1.56 T:aes128otrsv3 1.79 1.79 1.80 T:seakeyakv2 2.07 2.08 2.13 T:norx6444v3 2.14 2.14 2.14 T:aes256otrsv3 2.44 2.48 2.49 T:norx6441v2 2.48 2.49 2.49 T:norx6441v3 2.50 2.51 2.53 T:lunarkeyakv2 2.58 2.58 2.58 T:aes128n12t8clocv3 2.58 2.58 2.59 T:aes128n12t8clocv2 2.58 2.58 2.59 T:aes128n8t8clocv2 2.59 2.59 2.59 T:aes128n12t8silcv3 2.59 2.59 2.60 T:aes128n8t8silcv2 2.59 2.59 2.60 T:aes128n12t8silcv2 2.81 2.91 2.92 T:norx6441v1 3.07 3.08 3.09 T:lakekeyakv2 3.64 3.65 3.67 T:lakekeyakv1 3.69 3.79 3.80 T:norx6461v2 3.78 3.79 3.80 T:norx6461v3 4.03 4.06 4.13 T:norx3241v2 4.09 4.14 4.19 T:norx3241v3 4.13 4.19 4.33 T:norx6461v1 4.74 4.77 4.79 T:norx6444v2 4.78 4.86 4.98 T:norx3241v1 5.12 5.12 5.12 T:norx6444v1 5.31 5.31 5.31 T:ascon128av11 5.41 5.41 5.41 ascon128av12 5.44 5.44 5.44 T:ascon96v1 5.58 5.58 5.58 T:aesjambuv1 5.70 5.71 5.71 T:ketjemajorv2 5.75 5.76 5.76 T:riverkeyakv2 5.94 5.94 5.95 T:acorn128v3 5.97 5.97 5.97 T:acorn128v2 6.00 6.05 6.16 T:norx3261v2 6.00 6.08 6.24 T:norx3261v3 7.26 7.29 7.30 T:ketjeminorv2 7.74 7.74 7.74 ascon128v12 7.85 7.85 7.87 T:norx3261v1 7.93 7.93 7.93 T:ascon128v11 7.93 7.93 7.93 T:ascon128v1 13.94 13.96 14.00 T:aes128otrsv1 13.97 13.99 14.01 T:aes128otrsv2 14.82 14.86 14.88 T:aes128otrpv1 14.88 14.89 14.92 T:aes128otrpv2 16.77 16.80 16.83 T:aes128n12clocv1 16.83 16.86 16.88 T:aes128n8clocv1 17.42 17.79 18.55 T:twine80n6t4clocv2 18.03 18.05 18.06 T:aes256otrsv2 18.07 18.08 18.10 T:aes256otrsv1 18.90 18.92 18.94 T:aes256otrpv1 18.98 18.99 19.01 T:aes256otrpv2 19.20 19.26 19.33 T:twine80n6t4clocv3 19.25 19.27 19.28 T:proest256otrv1 25.95 25.97 25.98 T:aeadaes128ocbtaglen96v1 25.94 25.98 25.99 T:aeadaes128ocbtaglen64v1 26.81 26.87 27.01 T:ketjesrv1 27.26 27.30 28.14 T:ketjesrv2 30.77 30.78 30.86 T:aeadaes192ocbtaglen96v1 30.77 30.83 30.84 T:aeadaes192ocbtaglen64v1 35.77 35.81 35.88 T:aeadaes256ocbtaglen64v1 35.83 35.86 35.89 T:aeadaes256ocbtaglen96v1 42.99 43.04 43.09 T:colm127v1 47.96 48.02 49.57 T:proest128otrv1 55.45 55.50 55.55 T:ketjejrv1 67.57 67.62 67.66 T:present80n6t4silcv3 74.69 74.73 74.79 T:ketjejrv2 90.13 90.30 90.41 T:deoxysneq128128v13 89.79 92.52 93.10 T:led80n6t4silcv3 100.75 101.08 101.52 T:aezv1 107.35 107.44 107.50 T:deoxyseq128128v13 120.47 120.65 120.72 T:deoxysneq256128v13 137.26 137.49 137.63 T:deoxyseq256128v13 558.16 560.76 609.16 T:acorn128 2497.54 2508.93 2519.61 T:led80n6t4silcv2 2507.40 2515.68 2517.61 T:led80n6silcv1 2619.57 2619.86 2620.10 T:present80n6t4silcv2 2621.34 2622.23 2622.74 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.18 0.18 0.18 T:aezv5 0.17 0.18 0.18 T:aezv3 0.18 0.18 0.19 T:aezv4 0.20 0.20 0.21 T:aegis128l 0.23 0.23 0.23 aegis128l 0.24 0.25 0.26 T:tiaoxinv1 0.25 0.26 0.27 T:tiaoxinv2 0.27? 0.28? 0.33? T:aeadaes128ocbtaglen128v1 0.34 0.34 0.34 T:aegis128 0.37 0.37 0.37 aegis256 0.37? 0.38? 0.48? T:aeadaes256ocbtaglen128v1 0.47? 0.47? 0.57? T:aeadaes192ocbtaglen128v1 0.51 0.51 0.52 aes256gcmv1 0.55 0.55 0.55 T:aes128otrcv3 0.56 0.56 0.56 T:aes128otrpv3 0.60 0.61 0.61 T:morus1280256v1 0.60 0.61 0.62 T:morus1280128v1 0.60 0.61 0.63 T:morus1280128v2 0.60 0.62 0.63 T:morus1280256v2 0.69 0.69 0.69 T:aes128gcmv1 0.72 0.72 0.72 T:aes256otrpv3 0.73 0.73 0.73 T:deoxysi128v141 0.73 0.73 0.74 T:aes256otrcv3 0.81 0.82 0.85 T:deoxysneq128128v1 0.83 0.83 0.84 T:morus640128v1 0.84 0.85 0.85 T:morus640128v2 0.84 0.85 0.85 T:deoxysi256v141 0.85 0.85 0.87 T:deoxysneq256128v1 0.92 0.92 0.93 T:deoxysii128v141 0.94 0.94 0.95 T:colm0v1 1.05 1.05 1.05 T:deoxysii256v141 1.20 1.20 1.22 T:deoxyseq128128v1 1.29 1.30 1.31 T:deoxyseq256128v1 1.43 1.44 1.46 T:oceankeyakv2 1.55 1.55 1.56 T:aes128otrsv3 1.81 1.82 1.83 T:seakeyakv2 2.08 2.10 2.12 T:norx6444v3 2.14 2.14 2.14 T:aes256otrsv3 2.43 2.44 2.48 T:norx6441v2 2.44 2.44 2.48 T:norx6441v3 2.52 2.53 2.54 T:lunarkeyakv2 2.58 2.58 2.60 T:aes128n12t8silcv3 2.58 2.58 2.60 T:aes128n12t8silcv2 2.58 2.58 2.60 T:aes128n8t8silcv2 2.58 2.58 2.62 T:aes128n12t8clocv3 2.58 2.58 2.58 T:aes128n12t8clocv2 2.58 2.58 2.59 T:aes128n8t8clocv2 2.81 2.91 2.92 T:norx6441v1 3.09 3.09 3.10 T:lakekeyakv2 3.62 3.63 3.76 T:norx6461v3 3.64 3.66 3.67 T:lakekeyakv1 3.66 3.66 3.77 T:norx6461v2 4.06 4.07 4.07 T:norx3241v3 4.06 4.13 4.15 T:norx3241v2 4.13 4.14 4.18 T:norx6461v1 4.70 4.78 4.81 T:norx3241v1 4.78 4.79 4.80 T:norx6444v2 5.13 5.13 5.14 T:norx6444v1 5.31 5.31 5.31 T:ascon128av11 5.41 5.41 5.41 ascon128av12 5.44 5.44 5.44 T:ascon96v1 5.58 5.58 5.58 T:aesjambuv1 5.72 5.73 5.75 T:ketjemajorv2 5.76 5.77 5.78 T:riverkeyakv2 5.94 5.94 5.95 T:acorn128v3 5.97 5.97 5.97 T:acorn128v2 6.01 6.04 6.17 T:norx3261v2 6.10 6.18 6.24 T:norx3261v3 7.27 7.29 7.35 T:ketjeminorv2 7.74 7.74 7.74 ascon128v12 7.85 7.85 7.87 T:norx3261v1 7.93 7.93 7.93 T:ascon128v11 7.93 7.93 7.93 T:ascon128v1 13.97 13.99 14.04 T:aes128otrsv1 13.98 13.99 14.02 T:aes128otrsv2 14.85 14.86 14.87 T:aes128otrpv1 14.87 14.88 14.90 T:aes128otrpv2 16.78 16.79 16.81 T:aes128n12clocv1 16.82 16.84 16.86 T:aes128n8clocv1 17.44 17.93 18.94 T:twine80n6t4clocv2 18.05 18.06 18.07 T:aes256otrsv2 18.06 18.09 18.12 T:aes256otrsv1 18.92 18.93 18.95 T:aes256otrpv1 18.99 19.01 19.02 T:aes256otrpv2 19.25 19.26 19.28 T:proest256otrv1 19.20 19.27 19.29 T:twine80n6t4clocv3 25.93 25.97 26.07 T:aeadaes128ocbtaglen64v1 25.99 26.01 26.03 T:aeadaes128ocbtaglen96v1 26.83 26.92 27.05 T:ketjesrv1 27.23 27.29 27.32 T:ketjesrv2 30.74 30.77 31.01 T:aeadaes192ocbtaglen96v1 30.82 30.82 30.84 T:aeadaes192ocbtaglen64v1 35.61 35.69 35.70 T:aeadaes256ocbtaglen96v1 35.71 35.78 35.93 T:aeadaes256ocbtaglen64v1 43.01 43.07 43.07 T:colm127v1 48.07 48.16 49.56 T:proest128otrv1 55.47 55.52 55.62 T:ketjejrv1 67.56 67.62 67.67 T:present80n6t4silcv3 74.68 74.76 74.94 T:ketjejrv2 90.09 90.30 90.37 T:deoxysneq128128v13 91.49 92.91 93.45 T:led80n6t4silcv3 100.48 100.65 101.53 T:aezv1 107.32 107.54 107.67 T:deoxyseq128128v13 120.47 120.56 120.72 T:deoxysneq256128v13 137.36 137.63 138.46 T:deoxyseq256128v13 580.50 581.53 604.13 T:acorn128 2503.60 2511.70 2520.02 T:led80n6t4silcv2 2506.63 2519.02 2520.89 T:led80n6silcv1 2619.59 2619.97 2621.02 T:present80n6t4silcv2 2620.08 2620.51 2621.45 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.83 0.88 0.91 T:aegis128 0.88 0.89 0.90 T:aegis128l 0.89 0.89 0.95 aegis128l 1.14 1.15 1.17 aegis256 1.21 1.22 1.23 T:tiaoxinv2 1.21 1.22 1.24 T:tiaoxinv1 1.39 1.39 1.40 T:aezv5 1.39 1.42 1.46 T:aezv3 1.50 1.52 1.54 T:aezv4 2.38 2.40 2.44 T:colm0v1 2.45 2.47 2.49 T:aes128otrsv3 2.70 2.73 2.78 T:morus640128v1 2.76? 2.80? 4.41? T:aeadaes128ocbtaglen128v1 2.90 2.91 2.92 T:aes128otrpv3 2.88 2.93 2.97 T:morus640128v2 2.99 2.99 3.01 T:aes128n8t8silcv2 2.98 3.01 3.02 T:aes128n12t8silcv3 3.01 3.02 3.03 T:aes128n12t8silcv2 3.02 3.03 3.04 T:aes128n12t8clocv2 3.03 3.04 3.08 T:aes128n12t8clocv3 2.96 3.05 3.12 T:aes128otrcv3 3.04 3.05 3.05 T:aes128n8t8clocv2 3.04 3.10 3.20 T:deoxysneq128128v1 3.08 3.14 3.22 T:morus1280256v1 3.16 3.18 3.22 T:morus1280128v1 3.28 3.35 3.46 T:morus1280128v2 3.26 3.38 3.46 T:morus1280256v2 3.45 3.47 3.49 T:aes256otrsv3 3.46? 3.53? 5.18? T:aeadaes256ocbtaglen128v1 3.57? 3.62? 5.90? T:aeadaes192ocbtaglen128v1 3.78 3.80 3.84 T:aes256otrpv3 3.80 3.81 3.89 T:deoxysi128v141 3.94 3.96 4.03 T:deoxysneq256128v1 4.01 4.02 4.02 T:aes256otrcv3 4.04 4.11 4.17 T:aes128gcmv1 4.62 4.66 4.73 T:deoxysi256v141 4.64 4.71 4.78 aes256gcmv1 4.75 4.81 4.89 T:deoxyseq128128v1 5.14 5.14 5.15 T:deoxysii128v141 5.94 5.99 6.02 T:deoxyseq256128v1 6.07 6.10 6.14 T:deoxysii256v141 6.25 6.28 6.32 T:aesjambuv1 7.69 7.74 7.86 T:norx6441v2 7.70 7.75 7.87 T:norx6441v3 7.86 7.97 8.04 T:norx6441v1 8.22 8.22 8.23 T:ascon96v1 8.34 8.34 8.38 T:ascon128av11 8.40 8.40 8.48 ascon128av12 9.59 9.65 9.65 T:norx3241v1 9.86 9.92 9.95 T:norx3241v2 9.99 10.08 10.16 T:norx3241v3 10.48 10.49 10.49 ascon128v12 10.90 10.90 10.90 T:ascon128v1 10.90 10.90 10.90 T:ascon128v11 11.80 11.84 11.91 T:lakekeyakv1 11.80 12.02 12.11 T:norx6461v1 12.17 12.28 12.38 T:norx6461v2 12.21 12.35 12.46 T:norx6461v3 13.24 13.27 13.45 T:lakekeyakv2 13.32 13.33 13.41 T:riverkeyakv2 14.02 14.13 14.21 T:norx6444v3 14.58 14.78 15.10 T:norx3261v3 14.74 14.93 15.22 T:norx3261v2 15.97 16.00 16.03 T:norx3261v1 16.69 16.78 16.91 T:seakeyakv2 16.99 17.03 17.10 T:oceankeyakv2 21.47 21.52 21.70 T:aes128otrsv1 21.44 21.60 21.96 T:aes128n8clocv1 21.62 21.78 21.92 T:aes128otrsv2 21.59 21.79 21.95 T:aes128n12clocv1 22.13 22.13 22.24 T:aes128otrpv1 22.32 22.39 22.57 T:aes128otrpv2 24.35 24.36 24.40 T:acorn128v3 24.86 25.35 26.32 T:twine80n6t4clocv2 25.41 25.42 25.46 T:acorn128v2 25.68 25.74 25.83 T:twine80n6t4clocv3 26.45 27.11 27.42 T:ketjeminorv2 28.13 28.19 28.31 T:aes256otrpv1 28.08 28.22 28.36 T:aes256otrsv2 28.05 28.30 28.45 T:aes256otrsv1 28.33 28.40 28.49 T:aes256otrpv2 34.19 34.23 34.39 T:ketjemajorv2 34.45 34.62 34.83 T:norx6444v2 35.07 35.12 35.46 T:aeadaes128ocbtaglen64v1 34.98 35.28 35.47 T:aeadaes128ocbtaglen96v1 36.56 36.73 37.35 T:norx6444v1 38.92 39.14 39.34 T:lunarkeyakv2 40.53 40.61 40.76 T:aeadaes192ocbtaglen96v1 40.42 40.64 40.89 T:aeadaes192ocbtaglen64v1 43.35 43.45 43.68 T:ketjesrv1 47.21 47.43 47.61 T:aeadaes256ocbtaglen96v1 47.23 47.45 47.69 T:aeadaes256ocbtaglen64v1 50.82 51.00 51.27 T:colm127v1 51.80 51.98 52.16 T:ketjesrv2 53.93 54.04 54.22 T:proest256otrv1 72.71 73.01 73.37 T:ketjejrv1 79.40 79.63 79.85 T:deoxysneq128128v13 83.21 83.35 83.44 T:present80n6t4silcv3 92.38 93.15 95.17 T:proest128otrv1 94.08 94.55 95.04 T:ketjejrv2 102.08 102.47 102.63 T:deoxysneq256128v13 110.41 110.67 112.04 T:led80n6t4silcv3 111.21 111.76 112.35 T:aezv1 132.75 133.16 133.84 T:deoxyseq128128v13 170.72 170.92 171.35 T:deoxyseq256128v13 2016.98 2125.33 2155.19 T:acorn128 2799.20 2810.83 2820.93 T:led80n6t4silcv2 2805.82 2811.35 2811.76 T:led80n6silcv1 2930.56 2931.34 2933.05 T:present80n6t4silcv2 2932.36 2933.63 2935.57 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.86 0.89 0.92 T:aegis128 0.91 0.92 0.98 T:aegis128l 0.99 0.99 1.03 aegis128l 1.21 1.23 1.27 T:tiaoxinv1 1.21 1.24 1.27 T:tiaoxinv2 1.24 1.25 1.26 aegis256 1.39 1.40 1.40 T:aezv5 1.39 1.41 1.44 T:aezv3 1.48 1.50 1.52 T:aezv4 2.62 2.65 2.69 T:aes128otrsv3 2.72 2.74 2.76 T:morus640128v1 2.76? 2.78? 4.34? T:aeadaes128ocbtaglen128v1 2.91 2.97 3.01 T:colm0v1 3.09 3.11 3.13 T:aes128n8t8clocv2 3.11 3.12 3.12 T:aes128n12t8clocv2 3.11 3.12 3.14 T:aes128n12t8clocv3 3.12 3.19 3.29 T:aes128n12t8silcv3 3.11 3.20 3.32 T:aes128n8t8silcv2 3.20 3.29 3.37 T:aes128n12t8silcv2 3.24 3.29 3.34 T:morus640128v2 3.36 3.38 3.39 T:aes128otrpv3 3.36 3.41 3.45 T:aes128otrcv3 3.46 3.51 3.59 T:morus1280256v1 3.48? 3.58? 6.08? T:aeadaes256ocbtaglen128v1 3.48 3.59 3.77 T:morus1280128v1 3.56 3.62 3.69 T:morus1280256v2 3.58 3.65 3.71 T:morus1280128v2 3.64 3.66 3.67 T:aes256otrsv3 3.71? 3.83? 5.81? T:aeadaes192ocbtaglen128v1 4.09 4.13 4.16 T:aes128gcmv1 4.24 4.28 4.32 T:aes256otrcv3 4.28 4.29 4.30 T:aes256otrpv3 4.31 4.36 4.41 T:deoxysneq256128v1 4.38 4.40 4.42 T:deoxysneq128128v1 4.77 4.85 4.86 T:deoxysi128v141 4.92 4.98 5.06 aes256gcmv1 5.46 5.51 5.58 T:deoxysii128v141 5.65 5.69 5.75 T:deoxysi256v141 6.22 6.43 6.71 T:aesjambuv1 6.46 6.51 6.57 T:deoxyseq256128v1 6.72 6.78 6.84 T:deoxyseq128128v1 6.77 6.85 6.95 T:deoxysii256v141 7.89 7.93 8.04 T:norx6441v3 7.90 7.97 8.05 T:norx6441v2 8.16 8.16 8.19 T:ascon128av11 8.02 8.17 8.23 T:norx6441v1 8.29 8.29 8.37 ascon128av12 8.34 8.34 8.34 T:ascon96v1 10.01 10.06 10.09 T:norx3241v1 10.03 10.10 10.41 T:norx3241v2 10.07 10.13 10.38 T:norx3241v3 10.42 10.42 10.46 ascon128v12 10.56 10.57 10.59 T:ascon128v1 10.56 10.57 10.59 T:ascon128v11 11.82 11.85 11.89 T:lakekeyakv1 12.02 12.07 12.35 T:norx6461v2 12.24 12.29 12.37 T:norx6461v1 12.27 12.42 12.50 T:norx6461v3 13.27 13.29 13.71 T:lakekeyakv2 13.37 13.55 13.83 T:riverkeyakv2 14.03 14.17 14.26 T:norx6444v3 15.08 15.33 15.54 T:norx3261v3 15.41 15.54 15.66 T:norx3261v2 16.19 16.21 16.23 T:norx3261v1 16.95 17.01 17.13 T:oceankeyakv2 16.83 17.02 17.41 T:seakeyakv2 20.83 20.89 21.20 T:aes128n8clocv1 21.08 21.27 21.52 T:aes128n12clocv1 21.55 21.66 21.75 T:aes128otrsv1 21.80 21.88 22.04 T:aes128otrsv2 22.23 22.30 22.39 T:aes128otrpv1 22.43 22.54 22.67 T:aes128otrpv2 24.64 24.64 24.72 T:acorn128v3 24.76 25.14 26.55 T:twine80n6t4clocv2 25.42 25.43 25.50 T:acorn128v2 25.61 25.68 25.75 T:twine80n6t4clocv3 26.99 27.36 27.56 T:ketjeminorv2 28.14 28.26 28.37 T:aes256otrsv1 28.24 28.37 28.58 T:aes256otrsv2 28.37 28.47 28.56 T:aes256otrpv1 28.56 28.68 28.76 T:aes256otrpv2 34.41 34.47 34.68 T:ketjemajorv2 34.57 34.61 34.82 T:norx6444v2 36.73 36.81 36.89 T:norx6444v1 39.04 39.14 39.30 T:lunarkeyakv2 42.24 42.66 43.15 T:aeadaes128ocbtaglen64v1 42.56 42.85 43.04 T:aeadaes128ocbtaglen96v1 43.85 44.01 44.24 T:ketjesrv1 48.65 48.80 48.89 T:ketjesrv2 49.04 49.36 49.59 T:aeadaes192ocbtaglen64v1 49.32 49.47 49.73 T:aeadaes192ocbtaglen96v1 55.94 56.23 56.68 T:proest256otrv1 57.86 57.98 58.12 T:aeadaes256ocbtaglen64v1 57.90 58.10 58.36 T:aeadaes256ocbtaglen96v1 59.04 59.07 59.17 T:colm127v1 73.99 74.18 74.29 T:ketjejrv1 82.90 83.02 83.14 T:present80n6t4silcv3 93.26 93.93 97.50 T:proest128otrv1 96.25 96.61 97.11 T:ketjejrv2 98.73 98.92 99.18 T:deoxysneq128128v13 111.00 112.52 112.54 T:led80n6t4silcv3 113.53 114.07 114.63 T:aezv1 131.65 132.09 132.31 T:deoxysneq256128v13 132.86 133.20 133.69 T:deoxyseq128128v13 169.87 170.17 170.57 T:deoxyseq256128v13 1992.85 2052.13 2200.80 T:acorn128 2796.42 2812.25 2817.65 T:led80n6t4silcv2 2803.26 2814.76 2818.75 T:led80n6silcv1 2930.92 2931.66 2933.16 T:present80n6t4silcv2 2932.08 2932.83 2934.45 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.86 0.89 0.91 T:aegis128 0.91 0.91 0.93 T:aegis128l 0.98 0.99 1.00 T:aezv5 1.02 1.04 1.05 aegis128l 1.04 1.06 1.10 T:aezv3 1.18 1.18 1.19 T:aezv4 1.21 1.23 1.27 T:tiaoxinv2 1.22? 1.24? 1.36? T:tiaoxinv1 1.24 1.24 1.25 aegis256 2.63 2.66 2.70 T:aes128otrsv3 2.72 2.75 2.77 T:morus640128v1 2.75? 2.80? 4.19? T:aeadaes128ocbtaglen128v1 2.89? 2.90? 3.22? T:aes128n8t8silcv2 2.90 2.90 2.90 T:aes128n12t8silcv3 2.90 2.90 2.92 T:aes128n12t8silcv2 2.98 3.00 3.05 T:colm0v1 3.04 3.06 3.10 T:aes128n8t8clocv2 3.07 3.10 3.13 T:aes128n12t8clocv2 3.09 3.12 3.13 T:aes128n12t8clocv3 3.28 3.33 3.36 T:morus640128v2 3.37 3.38 3.39 T:aes128otrpv3 3.37 3.41 3.44 T:aes128otrcv3 3.46 3.51 3.67 T:morus1280128v1 3.50? 3.58? 6.08? T:aeadaes256ocbtaglen128v1 3.55 3.60 3.67 T:morus1280256v1 3.64 3.66 3.67 T:aes256otrsv3 3.61 3.67 3.71 T:morus1280128v2 3.59 3.68 3.77 T:morus1280256v2 3.71? 3.82? 5.15? T:aeadaes192ocbtaglen128v1 4.09 4.13 4.15 T:aes128gcmv1 4.25 4.26 4.28 T:aes256otrpv3 4.23 4.31 4.33 T:aes256otrcv3 4.32 4.35 4.40 T:deoxysneq256128v1 4.36 4.39 4.44 T:deoxysneq128128v1 4.73 4.82 4.89 T:deoxysi128v141 4.91 4.96 5.05 aes256gcmv1 5.46 5.51 5.57 T:deoxysii128v141 5.66 5.66 5.67 T:deoxysi256v141 6.21 6.47 6.72 T:aesjambuv1 6.44 6.49 6.55 T:deoxyseq256128v1 6.75 6.76 6.80 T:deoxysii256v141 6.79 6.82 6.88 T:deoxyseq128128v1 7.94 8.03 8.09 T:norx6441v3 7.99 8.04 8.09 T:norx6441v2 8.12 8.12 8.12 T:ascon128av11 8.16 8.20 8.27 T:norx6441v1 8.29 8.29 8.29 ascon128av12 8.30 8.30 8.30 T:ascon96v1 9.98 10.05 10.11 T:norx3241v2 10.16 10.23 10.37 T:norx3241v1 10.42 10.42 10.42 ascon128v12 10.13 10.42 10.55 T:norx3241v3 10.53 10.53 10.53 T:ascon128v1 10.53 10.53 10.53 T:ascon128v11 11.86 11.90 12.07 T:lakekeyakv1 12.06 12.18 12.25 T:norx6461v1 12.04 12.39 12.49 T:norx6461v2 12.46 12.56 12.63 T:norx6461v3 13.42 13.42 13.52 T:riverkeyakv2 14.05 14.16 14.24 T:norx6444v3 14.35 14.37 14.44 T:lakekeyakv2 14.94 15.09 15.35 T:norx3261v3 15.06 15.19 15.35 T:norx3261v2 16.20 16.21 16.25 T:norx3261v1 16.99 17.09 17.15 T:oceankeyakv2 16.88 17.27 17.52 T:seakeyakv2 20.70 20.77 21.02 T:aes128n8clocv1 20.84 21.22 21.57 T:aes128n12clocv1 21.63 21.72 21.81 T:aes128otrsv1 21.88 21.98 22.15 T:aes128otrsv2 22.29 22.35 22.45 T:aes128otrpv1 22.58 22.66 22.87 T:aes128otrpv2 24.64 24.64 24.65 T:acorn128v3 24.72 25.05 26.11 T:twine80n6t4clocv2 25.42 25.42 25.43 T:acorn128v2 25.61 25.63 25.74 T:twine80n6t4clocv3 27.00 27.37 27.60 T:ketjeminorv2 28.17 28.34 28.62 T:aes256otrsv1 28.23 28.35 28.53 T:aes256otrsv2 28.41 28.52 28.72 T:aes256otrpv1 28.59 28.66 28.80 T:aes256otrpv2 34.46 34.60 34.85 T:ketjemajorv2 34.58 34.62 34.96 T:norx6444v2 36.78 36.86 36.99 T:norx6444v1 38.92 39.27 39.38 T:lunarkeyakv2 42.17 42.58 43.03 T:aeadaes128ocbtaglen64v1 42.52 42.81 42.99 T:aeadaes128ocbtaglen96v1 43.91 44.11 44.27 T:ketjesrv1 48.58 48.85 49.04 T:ketjesrv2 49.03 49.33 49.58 T:aeadaes192ocbtaglen64v1 49.16 49.34 49.55 T:aeadaes192ocbtaglen96v1 54.56 54.61 54.91 T:proest256otrv1 57.79 57.97 58.15 T:aeadaes256ocbtaglen64v1 57.86 58.08 58.24 T:aeadaes256ocbtaglen96v1 58.93 58.98 59.11 T:colm127v1 73.83 74.13 74.42 T:ketjejrv1 83.00 83.04 83.07 T:present80n6t4silcv3 93.20 94.15 97.26 T:proest128otrv1 96.24 96.66 97.27 T:ketjejrv2 98.68 98.97 99.32 T:deoxysneq128128v13 106.20 110.32 112.22 T:led80n6t4silcv3 113.65 114.18 114.72 T:aezv1 131.49 131.78 131.93 T:deoxysneq256128v13 132.65 133.03 133.46 T:deoxyseq128128v13 169.82 170.09 170.35 T:deoxyseq256128v13 1973.80 1981.64 2008.86 T:acorn128 2802.50 2810.32 2814.15 T:led80n6t4silcv2 2807.23 2815.94 2817.15 T:led80n6silcv1 2931.32 2932.02 2933.46 T:present80n6t4silcv2 2931.76 2932.65 2935.52 T:present80n6silcv1