VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20260831

[Page version: 20260904 18:04:46]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.13 0.13 0.14 T:tiaoxinv1 0.13 0.13 0.14 T:tiaoxinv2 0.08? 0.18? 0.29? T:aeadaes128ocbtaglen128v1 0.18 0.19 0.19 T:aegis128l 0.18 0.19 0.19 aegis128l 0.15? 0.26? 0.42? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.33 T:aegis256 0.32 0.33 0.33 aegis256 0.36 0.37 0.37 T:aezv4 0.36 0.37 0.37 T:aezv3 0.37 0.38 0.38 T:aezv5 0.23? 0.40? 0.57? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.41 0.42 0.42 T:aes128otrsv3 0.43 0.44 0.45 T:aes128otrpv3 0.46 0.47 0.49 T:morus1280256v1 0.47 0.48 0.49 T:morus1280128v2 0.49 0.50 0.51 T:morus1280128v1 0.49 0.50 0.51 T:morus1280256v2 0.53 0.54 0.54 T:deoxysi128v141 0.54 0.55 0.55 T:aes256otrcv3 0.54 0.55 0.55 T:aes256otrsv3 0.55 0.56 0.57 aes256gcmv1 0.57 0.57 0.58 T:aes256otrpv3 0.59 0.60 0.61 T:deoxysi256v141 0.61 0.62 0.63 T:deoxysneq128128v1 0.69 0.69 0.70 T:deoxysneq256128v1 0.51? 0.75? 0.99? T:oceankeyakv2 0.78 0.78 0.79 T:aes128gcmv1 0.71? 0.79? 0.86? T:lunarkeyakv2 0.80 0.81 0.82 T:morus640128v2 0.81 0.81 0.82 T:morus640128v1 0.89 0.91 0.92 T:norx6444v3 1.05 1.06 1.07 T:deoxysii128v141 1.19 1.20 1.21 T:deoxysii256v141 1.24 1.24 1.25 T:deoxyseq128128v1 1.28 1.29 1.30 T:colm0v1 1.42 1.44 1.46 T:seakeyakv2 1.44 1.45 1.46 T:deoxyseq256128v1 2.13 2.15 2.20 T:norx6441v3 2.11 2.17 2.18 T:norx6441v2 2.62 2.62 2.62 T:aes128n12t8silcv3 2.62 2.62 2.63 T:aes128n12t8clocv2 2.62 2.63 2.63 T:aes128n12t8clocv3 2.62 2.63 2.63 T:aes128n8t8clocv2 2.57 2.63 2.64 T:norx6441v1 2.62 2.63 2.63 T:aes128n8t8silcv2 2.62 2.63 2.63 T:aes128n12t8silcv2 3.14 3.15 3.24 T:norx6461v2 3.19 3.23 3.25 T:lakekeyakv2 3.22 3.24 3.27 T:lakekeyakv1 3.17 3.25 3.27 T:norx6461v3 3.68 3.69 3.70 T:norx3241v3 3.69 3.72 3.91 T:norx3241v2 3.83 3.84 3.87 T:norx6444v1 3.91 3.95 4.00 T:norx6444v2 3.95 3.98 3.99 T:norx6461v1 4.63 4.66 4.68 T:norx3241v1 5.19 5.22 5.24 T:ketjemajorv2 5.22 5.25 5.28 T:acorn128v2 5.31 5.32 5.32 T:ascon96v1 5.32 5.32 5.32 ascon128av12 5.35 5.35 5.35 T:aesjambuv1 5.44 5.44 5.44 T:ascon128av11 5.52 5.53 5.55 T:norx3261v2 5.63 5.65 5.66 T:norx3261v3 6.75 6.76 6.78 T:acorn128v3 7.44 7.47 7.50 T:riverkeyakv2 7.52 7.52 7.53 T:norx3261v1 7.55 7.57 7.60 T:ketjeminorv2 7.75 7.75 7.76 ascon128v12 8.25 8.25 8.25 T:ascon128v11 8.25 8.25 8.25 T:ascon128v1 14.56 14.58 14.61 T:aes128otrpv1 14.57 14.59 14.62 T:aes128otrpv2 14.58 14.60 14.64 T:aes128otrsv2 14.58 14.62 14.71 T:aes128otrsv1 16.98 17.02 17.05 T:proest256otrv1 18.54 18.57 18.60 T:aes256otrpv1 18.55 18.58 18.60 T:aes256otrpv2 17.26? 18.59? 19.73? T:twine80n6t4clocv2 18.56 18.61 18.64 T:aes256otrsv2 18.59 18.62 18.66 T:aes256otrsv1 19.13 19.28 19.31 T:twine80n6t4clocv3 21.57 21.66 21.78 T:aeadaes128ocbtaglen64v1 21.65 21.69 21.76 T:aeadaes128ocbtaglen96v1 22.47 22.54 22.55 T:aes128n12clocv1 22.52 22.55 22.56 T:aes128n8clocv1 25.50 25.51 25.55 T:aeadaes192ocbtaglen96v1 25.48 25.56 25.68 T:aeadaes192ocbtaglen64v1 28.57 28.67 28.95 T:ketjesrv1 29.33 29.42 29.46 T:aeadaes256ocbtaglen64v1 29.44 29.47 29.61 T:aeadaes256ocbtaglen96v1 33.90 34.00 34.07 T:ketjesrv2 45.13 45.34 45.64 T:proest128otrv1 46.48 46.69 47.85 T:colm127v1 58.30 58.41 58.64 T:ketjejrv1 67.37 67.50 67.70 T:present80n6t4silcv3 69.78 69.92 70.50 T:deoxysneq128128v13 74.04 74.11 74.19 T:ketjejrv2 88.26 88.69 91.47 T:led80n6t4silcv3 90.33 90.50 90.69 T:deoxysneq256128v13 141.79 142.31 142.81 T:deoxyseq128128v13 157.60 158.20 158.66 T:aezv1 182.28 182.65 182.91 T:deoxyseq256128v13 487.44? 495.36? 548.09? T:acorn128 3313.59 3320.67 3359.59 T:led80n6silcv1 3318.94 3349.99 3359.74 T:led80n6t4silcv2 3471.94 3472.45 3472.80 T:present80n6t4silcv2 3473.97 3474.61 3477.96 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.08? 0.18? 0.27? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.19 0.19 0.20 aegis128l 0.08? 0.25? 0.34? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.32 aegis256 0.32 0.32 0.33 T:aegis256 0.29? 0.33? 0.34? T:tiaoxinv2 0.29? 0.33? 0.34? T:tiaoxinv1 0.36 0.37 0.37 T:aezv4 0.36 0.37 0.37 T:aezv3 0.38 0.38 0.38 T:aezv5 0.24? 0.40? 0.49? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrsv3 0.41 0.42 0.42 T:aes128otrcv3 0.45 0.45 0.46 T:aes128otrpv3 0.47 0.48 0.49 aes256gcmv1 0.50 0.51 0.51 T:morus1280128v1 0.50 0.51 0.51 T:morus1280128v2 0.50 0.51 0.51 T:morus1280256v2 0.50 0.51 0.52 T:morus1280256v1 0.53 0.54 0.55 T:aes256otrsv3 0.54 0.54 0.55 T:aes256otrcv3 0.58 0.58 0.59 T:aes256otrpv3 0.58 0.59 0.60 T:deoxysi128v141 0.65 0.66 0.67 T:deoxysneq128128v1 0.69 0.69 0.70 T:deoxysi256v141 0.70 0.72 0.72 T:deoxysneq256128v1 0.57? 0.73? 0.89? T:oceankeyakv2 0.78 0.79 0.79 T:morus640128v1 0.80 0.80 0.81 T:aes128gcmv1 0.80 0.81 0.83 T:morus640128v2 0.85? 0.89? 0.96? T:lunarkeyakv2 0.90 0.91 0.93 T:norx6444v3 1.06 1.07 1.07 T:deoxysii128v141 1.17 1.18 1.19 T:colm0v1 1.19 1.20 1.21 T:deoxysii256v141 1.35 1.36 1.37 T:deoxyseq128128v1 1.41 1.42 1.45 T:deoxyseq256128v1 1.44 1.46 1.48 T:seakeyakv2 2.05 2.07 2.12 T:norx6441v2 2.08 2.10 2.15 T:norx6441v3 2.47 2.56 2.57 T:norx6441v1 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8silcv3 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.57 2.57 T:aes128n8t8silcv2 3.12 3.14 3.16 T:lakekeyakv2 3.11 3.18 3.20 T:norx6461v2 3.13 3.20 3.22 T:norx6461v3 3.17 3.22 3.24 T:lakekeyakv1 3.63 3.65 3.82 T:norx6461v1 3.74 3.77 3.87 T:norx3241v3 3.79 3.80 3.83 T:norx6444v1 3.77 3.87 3.90 T:norx3241v2 3.89 3.94 4.00 T:norx6444v2 4.49 4.54 4.60 T:norx3241v1 5.05 5.08 5.10 T:ketjemajorv2 5.19 5.19 5.19 T:ascon128av11 5.22 5.25 5.27 T:acorn128v2 5.31 5.31 5.31 ascon128av12 5.44 5.44 5.44 T:ascon96v1 5.57 5.59 5.81 T:norx3261v3 5.75 5.77 5.79 T:norx3261v2 5.73 5.77 5.86 T:aesjambuv1 6.75 6.75 6.75 T:acorn128v3 7.33 7.36 7.36 T:norx3261v1 7.63 7.64 7.64 ascon128v12 7.63 7.65 7.66 T:riverkeyakv2 7.87 7.88 7.88 T:ascon128v1 7.87 7.88 7.88 T:ascon128v11 7.89 7.92 7.94 T:ketjeminorv2 14.80 14.82 14.84 T:aes128otrpv1 14.83 14.86 14.88 T:aes128otrsv1 14.86 14.89 14.93 T:aes128otrpv2 14.89 14.91 14.95 T:aes128otrsv2 17.45 17.48 17.50 T:proest256otrv1 17.17? 17.66? 19.55? T:twine80n6t4clocv2 18.81 18.84 18.90 T:aes256otrpv1 18.82 18.85 18.89 T:aes256otrsv1 18.87 18.91 18.94 T:aes256otrsv2 18.89 18.93 18.98 T:aes256otrpv2 19.11? 20.63? 21.89? T:twine80n6t4clocv3 21.25 21.29 21.32 T:aes128n12clocv1 21.32 21.40 21.44 T:aes128n8clocv1 26.75 26.80 26.86 T:ketjesrv2 29.26 29.32 29.72 T:aeadaes128ocbtaglen96v1 29.28 29.37 29.48 T:aeadaes128ocbtaglen64v1 29.41 29.73 30.63 T:ketjesrv1 34.84 34.89 35.07 T:aeadaes192ocbtaglen64v1 34.89 34.97 35.10 T:aeadaes192ocbtaglen96v1 40.54 40.60 40.68 T:aeadaes256ocbtaglen64v1 40.58 40.62 40.67 T:aeadaes256ocbtaglen96v1 45.59 45.65 45.72 T:proest128otrv1 60.90 61.07 61.22 T:ketjejrv1 62.54 62.67 62.70 T:colm127v1 66.86 66.99 67.12 T:present80n6t4silcv3 78.32 78.41 78.50 T:ketjejrv2 89.57 92.59 96.95 T:led80n6t4silcv3 108.44 108.77 109.12 T:deoxysneq128128v13 141.52 141.82 142.33 T:deoxyseq128128v13 149.73 149.85 150.01 T:deoxysneq256128v13 157.26 157.66 157.88 T:aezv1 181.22 181.45 181.59 T:deoxyseq256128v13 509.92? 601.83? 622.36? T:acorn128 3307.81 3309.51 3311.95 T:led80n6t4silcv2 3313.26 3315.94 3318.50 T:led80n6silcv1 3473.46 3474.33 3475.53 T:present80n6silcv1 3475.59 3476.21 3477.03 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.14 0.14 0.14 T:aezv4 0.14 0.14 0.14 T:aezv3 0.15 0.15 0.15 T:aezv5 0.08? 0.18? 0.27? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.23 0.24 0.24 aegis128l 0.08? 0.25? 0.34? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.33 T:aegis256 0.31? 0.35? 0.36? T:tiaoxinv1 0.31? 0.35? 0.36? T:tiaoxinv2 0.36 0.38 0.38 aegis256 0.32? 0.40? 0.57? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.41 0.42 0.42 T:aes128otrsv3 0.45 0.45 0.46 T:aes128otrpv3 0.47 0.48 0.49 aes256gcmv1 0.50 0.50 0.51 T:morus1280128v2 0.50 0.51 0.52 T:morus1280128v1 0.50 0.51 0.52 T:morus1280256v2 0.50 0.51 0.52 T:morus1280256v1 0.54 0.54 0.55 T:aes256otrcv3 0.53 0.55 0.55 T:aes256otrsv3 0.58 0.59 0.59 T:aes256otrpv3 0.59 0.60 0.60 T:deoxysi128v141 0.66 0.66 0.67 T:deoxysneq128128v1 0.68 0.69 0.70 T:deoxysi256v141 0.71 0.71 0.73 T:deoxysneq256128v1 0.61? 0.78? 0.92? T:oceankeyakv2 0.77 0.78 0.79 T:morus640128v1 0.80 0.80 0.81 T:aes128gcmv1 0.81 0.82 0.83 T:morus640128v2 0.87? 0.90? 0.97? T:lunarkeyakv2 0.89 0.91 0.92 T:norx6444v3 1.07 1.07 1.07 T:deoxysii128v141 1.18 1.18 1.19 T:colm0v1 1.19 1.20 1.21 T:deoxysii256v141 1.35 1.36 1.37 T:deoxyseq128128v1 1.41 1.42 1.43 T:deoxyseq256128v1 1.48 1.50 1.51 T:seakeyakv2 2.05 2.07 2.12 T:norx6441v2 2.11 2.16 2.17 T:norx6441v3 2.46 2.55 2.57 T:norx6441v1 2.55 2.56 2.56 T:aes128n12t8clocv3 2.54 2.56 2.57 T:aes128n12t8clocv2 2.55 2.56 2.57 T:aes128n12t8silcv2 2.55 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.57 T:aes128n8t8silcv2 3.09 3.10 3.12 T:norx6461v2 3.09 3.19 3.21 T:norx6461v3 3.16 3.20 3.24 T:lakekeyakv2 3.21 3.27 3.29 T:lakekeyakv1 3.64 3.67 3.84 T:norx6461v1 3.75 3.75 3.86 T:norx3241v3 3.73 3.76 3.87 T:norx3241v2 3.83 3.85 3.87 T:norx6444v1 3.92 4.00 4.04 T:norx6444v2 4.47 4.53 4.59 T:norx3241v1 5.09 5.11 5.13 T:ketjemajorv2 5.19 5.19 5.19 T:ascon128av11 5.23 5.25 5.28 T:acorn128v2 5.31 5.31 5.31 ascon128av12 5.44 5.44 5.44 T:ascon96v1 5.62 5.72 5.84 T:norx3261v3 5.73 5.76 5.86 T:aesjambuv1 5.60 5.77 5.79 T:norx3261v2 6.75 6.75 6.75 T:acorn128v3 7.32 7.36 7.36 T:norx3261v1 7.64 7.64 7.64 ascon128v12 7.65 7.67 7.68 T:riverkeyakv2 7.88 7.88 7.88 T:ascon128v1 7.88 7.88 7.88 T:ascon128v11 7.93 7.96 7.98 T:ketjeminorv2 14.82 14.84 14.86 T:aes128otrpv1 14.86 14.90 14.91 T:aes128otrsv1 14.89 14.92 14.96 T:aes128otrpv2 14.91 14.94 14.97 T:aes128otrsv2 17.48 17.50 17.54 T:proest256otrv1 17.17? 18.15? 19.56? T:twine80n6t4clocv2 18.83 18.86 18.93 T:aes256otrpv1 18.86 18.89 18.94 T:aes256otrsv1 18.90 18.95 18.98 T:aes256otrsv2 18.92 18.96 18.98 T:aes256otrpv2 21.25 21.29 21.33 T:aes128n12clocv1 21.32 21.34 21.35 T:aes128n8clocv1 19.12? 21.47? 21.89? T:twine80n6t4clocv3 26.81 26.92 26.96 T:ketjesrv2 29.20 29.27 29.36 T:aeadaes128ocbtaglen64v1 29.33 29.36 29.44 T:aeadaes128ocbtaglen96v1 29.36 29.54 29.60 T:ketjesrv1 34.88 34.93 35.15 T:aeadaes192ocbtaglen96v1 35.00 35.12 35.14 T:aeadaes192ocbtaglen64v1 40.62 40.68 40.72 T:aeadaes256ocbtaglen64v1 40.53 40.73 40.84 T:aeadaes256ocbtaglen96v1 45.64 45.74 45.81 T:proest128otrv1 60.97 61.09 61.16 T:ketjejrv1 61.62 61.69 61.88 T:colm127v1 66.96 67.00 67.12 T:present80n6t4silcv3 78.35 78.44 78.72 T:ketjejrv2 87.11 91.21 92.29 T:led80n6t4silcv3 108.39 108.71 109.12 T:deoxysneq128128v13 141.88 142.21 143.16 T:deoxyseq128128v13 149.88 150.05 150.33 T:deoxysneq256128v13 156.97 157.44 157.68 T:aezv1 181.35 181.51 181.72 T:deoxyseq256128v13 500.36 530.06 553.50 T:acorn128 3308.01 3317.63 3322.22 T:led80n6t4silcv2 3313.53 3319.24 3322.55 T:led80n6silcv1 3473.78 3474.44 3475.67 T:present80n6silcv1 3475.55 3476.08 3476.56 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.12 0.12 0.12 T:tiaoxinv2 0.12 0.12 0.12 T:tiaoxinv1 0.12? 0.17? 0.22? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 T:aegis128l 0.17 0.18 0.18 aegis128l 0.19? 0.24? 0.29? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.26 T:aezv5 0.31 0.31 0.31 T:aegis128 0.32 0.32 0.32 aegis256 0.32 0.32 0.32 T:aegis256 0.29? 0.39? 0.44? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.41 T:aes128otrcv3 0.42 0.42 0.42 T:aes128otrpv3 0.46 0.47 0.47 aes256gcmv1 0.48 0.48 0.49 T:morus1280256v1 0.48 0.48 0.50 T:morus1280128v2 0.48 0.49 0.49 T:morus1280128v1 0.48 0.49 0.51 T:morus1280256v2 0.54 0.54 0.54 T:deoxysi128v141 0.54 0.54 0.55 T:aes256otrcv3 0.55 0.55 0.55 T:aes256otrpv3 0.59 0.60 0.60 T:deoxysi256v141 0.60 0.60 0.60 T:aes128gcmv1 0.61 0.62 0.63 T:deoxysneq128128v1 0.51? 0.64? 0.76? T:oceankeyakv2 0.70 0.71 0.72 T:deoxysneq256128v1 0.76 0.77 0.77 T:morus640128v2 0.76 0.77 0.78 T:morus640128v1 0.79 0.80 0.80 T:deoxysii128v141 0.89 0.90 0.90 T:colm0v1 0.90 0.90 0.91 T:deoxysii256v141 0.92 0.94 0.96 T:deoxyseq128128v1 0.94 0.97 0.99 T:lunarkeyakv2 1.08 1.10 1.11 T:deoxyseq256128v1 1.19 1.21 1.21 T:seakeyakv2 1.49 1.49 1.49 T:aes128otrsv3 1.49 1.52 1.55 T:norx6444v3 2.05 2.05 2.06 T:aes256otrsv3 2.13 2.17 2.18 T:norx6441v2 2.12 2.21 2.22 T:norx6441v3 2.59 2.59 2.59 T:aes128n12t8clocv3 2.59 2.59 2.60 T:aes128n8t8clocv2 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.59 T:aes128n12t8clocv2 2.59 2.59 2.60 T:aes128n12t8silcv3 2.59 2.59 2.59 T:aes128n12t8silcv2 2.54 2.61 2.62 T:norx6441v1 2.77 2.79 2.80 T:lakekeyakv2 3.02 3.04 3.08 T:lakekeyakv1 3.18 3.19 3.25 T:norx6461v2 3.19 3.25 3.27 T:norx6461v3 3.23 3.25 3.28 T:norx6444v2 3.69 3.70 3.79 T:norx3241v2 3.79 3.80 3.81 T:norx6444v1 3.72 3.88 3.91 T:norx3241v3 3.92 3.93 3.95 T:norx6461v1 4.50 4.51 4.54 T:ketjemajorv2 4.49 4.54 4.62 T:norx3241v1 5.22 5.22 5.22 T:ascon96v1 5.28 5.28 5.29 ascon128av12 5.30 5.33 5.39 T:aesjambuv1 5.34 5.34 5.35 T:ascon128av11 5.41 5.42 5.43 T:riverkeyakv2 5.50 5.51 5.67 T:norx3261v2 5.58 5.72 5.73 T:norx3261v3 6.46 6.52 6.57 T:acorn128v2 6.76 6.76 6.77 T:acorn128v3 7.07 7.07 7.08 T:ketjeminorv2 7.52 7.52 7.53 T:norx3261v1 7.62 7.63 7.63 ascon128v12 8.06 8.06 8.06 T:ascon128v11 8.06 8.06 8.06 T:ascon128v1 13.47 13.48 13.50 T:aes128otrsv2 13.47 13.50 13.53 T:aes128otrsv1 14.37 14.39 14.42 T:aes128otrpv1 14.38 14.40 14.43 T:aes128otrpv2 17.18 17.20 17.23 T:aes128n12clocv1 17.22 17.25 17.28 T:aes128n8clocv1 17.43 17.44 17.48 T:proest256otrv1 17.47 17.50 17.54 T:aes256otrsv2 17.53 17.54 17.55 T:aes256otrsv1 17.04 17.84 18.73 T:twine80n6t4clocv2 18.37 18.39 18.41 T:aes256otrpv1 18.38 18.40 18.40 T:aes256otrpv2 18.95 18.98 19.97 T:twine80n6t4clocv3 21.36 21.38 21.43 T:aeadaes128ocbtaglen96v1 21.41 21.53 21.58 T:aeadaes128ocbtaglen64v1 25.23 25.26 25.31 T:aeadaes192ocbtaglen96v1 25.25 25.29 25.34 T:aeadaes192ocbtaglen64v1 25.79 25.87 25.91 T:ketjesrv1 29.13 29.17 29.20 T:aeadaes256ocbtaglen96v1 29.18 29.32 29.34 T:aeadaes256ocbtaglen64v1 29.97 30.03 30.88 T:ketjesrv2 34.46 34.54 34.61 T:colm127v1 45.80 45.89 45.97 T:proest128otrv1 53.49 53.58 53.64 T:ketjejrv1 66.90 67.09 67.28 T:present80n6t4silcv3 70.12 70.24 70.80 T:deoxysneq128128v13 71.63 71.71 72.07 T:ketjejrv2 90.28 90.36 90.42 T:deoxysneq256128v13 92.24 92.32 92.33 T:led80n6t4silcv3 104.06 104.26 104.44 T:aezv1 105.89 106.08 107.31 T:deoxyseq128128v13 136.40 136.57 136.71 T:deoxyseq256128v13 514.62? 550.43? 574.84? T:acorn128 2488.44 2492.89 2511.51 T:led80n6silcv1 2490.51 2505.16 2507.86 T:led80n6t4silcv2 2604.80 2606.22 2607.95 T:present80n6t4silcv2 2605.39 2606.30 2608.66 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.11? 0.17? 0.22? T:aeadaes128ocbtaglen128v1 0.17 0.18 0.18 T:aegis128l 0.18 0.18 0.18 aegis128l 0.20 0.21 0.22 T:tiaoxinv2 0.20 0.22 0.22 T:tiaoxinv1 0.15? 0.24? 0.29? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.26 T:aezv4 0.25 0.26 0.26 T:aezv5 0.31 0.32 0.32 T:aegis128 0.33 0.33 0.33 T:aegis256 0.33 0.33 0.33 aegis256 0.33? 0.39? 0.47? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.42 0.43 0.43 aes256gcmv1 0.43 0.43 0.43 T:aes128otrpv3 0.49 0.50 0.51 T:morus1280256v2 0.50 0.50 0.50 T:morus1280256v1 0.50 0.50 0.51 T:morus1280128v1 0.50 0.50 0.51 T:morus1280128v2 0.54 0.54 0.55 T:aes256otrcv3 0.55 0.55 0.55 T:aes256otrpv3 0.56 0.57 0.57 T:deoxysi128v141 0.60 0.60 0.60 T:aes128gcmv1 0.55? 0.63? 0.70? T:oceankeyakv2 0.64 0.64 0.65 T:deoxysneq128128v1 0.64 0.65 0.65 T:deoxysi256v141 0.70 0.71 0.72 T:deoxysneq256128v1 0.75 0.75 0.76 T:morus640128v1 0.79 0.79 0.80 T:deoxysii128v141 0.78 0.79 0.81 T:morus640128v2 0.84 0.84 0.85 T:colm0v1 0.89 0.90 0.91 T:deoxysii256v141 0.99 1.00 1.01 T:deoxyseq128128v1 0.95 1.00 1.04 T:lunarkeyakv2 1.11 1.12 1.13 T:deoxyseq256128v1 1.21? 1.22? 1.70? T:seakeyakv2 1.49 1.49 1.49 T:aes128otrsv3 1.50 1.52 1.55 T:norx6444v3 2.05 2.06 2.06 T:aes256otrsv3 2.11 2.15 2.16 T:norx6441v2 2.08 2.17 2.18 T:norx6441v3 2.56 2.56 2.57 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n8t8clocv2 2.56 2.57 2.57 T:aes128n12t8silcv2 2.56 2.57 2.57 T:aes128n8t8silcv2 2.56 2.57 2.57 T:aes128n12t8silcv3 2.49 2.58 2.59 T:norx6441v1 2.76 2.77 2.78 T:lakekeyakv2 3.04 3.06 3.09 T:lakekeyakv1 3.16 3.17 3.23 T:norx6461v3 3.21 3.23 3.24 T:norx6461v2 3.21 3.26 3.28 T:norx6444v2 3.64 3.68 3.71 T:norx6461v1 3.76 3.78 3.79 T:norx6444v1 3.72 3.83 3.88 T:norx3241v3 3.82 3.85 3.88 T:norx3241v2 4.44 4.45 4.47 T:ketjemajorv2 4.51 4.59 4.67 T:norx3241v1 5.19 5.19 5.19 T:ascon128av11 5.29 5.29 5.29 ascon128av12 5.31 5.31 5.32 T:ascon96v1 5.48 5.48 5.49 T:riverkeyakv2 5.50 5.54 5.54 T:aesjambuv1 5.57 5.60 5.73 T:norx3261v2 5.63 5.73 5.74 T:norx3261v3 6.47 6.55 6.57 T:acorn128v2 6.88 6.88 6.88 T:acorn128v3 7.24 7.25 7.25 T:ketjeminorv2 7.42 7.43 7.44 T:norx3261v1 7.62 7.62 7.63 ascon128v12 7.81 7.81 7.81 T:ascon128v11 7.81 7.81 7.81 T:ascon128v1 13.60 13.62 13.64 T:aes128otrsv1 13.66 13.67 13.70 T:aes128otrsv2 14.48 14.51 14.53 T:aes128otrpv1 14.55 14.57 14.58 T:aes128otrpv2 16.58 16.60 16.62 T:aes128n12clocv1 16.63 16.65 16.71 T:aes128n8clocv1 17.00 17.40 18.81 T:twine80n6t4clocv2 17.62 17.65 17.68 T:aes256otrsv1 17.65 17.68 17.69 T:proest256otrv1 17.66 17.68 17.71 T:aes256otrsv2 18.53 18.56 18.58 T:aes256otrpv1 18.56 18.58 18.59 T:aes256otrpv2 19.09 19.92 20.68 T:twine80n6t4clocv3 25.20 25.26 25.36 T:aeadaes128ocbtaglen96v1 25.25 25.26 25.27 T:aeadaes128ocbtaglen64v1 26.30 26.37 27.55 T:ketjesrv1 26.63 27.64 28.11 T:ketjesrv2 29.93 29.97 30.00 T:aeadaes192ocbtaglen96v1 29.93 29.98 30.02 T:aeadaes192ocbtaglen64v1 34.77 34.80 34.96 T:aeadaes256ocbtaglen96v1 34.75 34.83 35.01 T:aeadaes256ocbtaglen64v1 42.41 42.46 42.58 T:colm127v1 45.94 46.05 46.14 T:proest128otrv1 54.71 54.92 55.05 T:ketjejrv1 66.79 66.87 67.00 T:present80n6t4silcv3 74.40 77.08 78.33 T:ketjejrv2 89.66 89.77 89.94 T:deoxysneq128128v13 91.86 92.13 93.21 T:led80n6t4silcv3 103.51 103.86 104.17 T:aezv1 106.10 106.33 107.31 T:deoxyseq128128v13 120.00 120.11 120.32 T:deoxysneq256128v13 135.81 136.04 136.37 T:deoxyseq256128v13 478.00? 507.74? 553.28? T:acorn128 2488.30 2491.01 2496.13 T:led80n6t4silcv2 2490.86 2496.52 2500.25 T:led80n6silcv1 2605.10 2605.95 2607.11 T:present80n6silcv1 2605.97 2606.61 2607.97 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.13 0.13 0.13 T:aezv3 0.13 0.13 0.14 T:aezv5 0.13 0.14 0.14 T:aezv4 0.11? 0.17? 0.22? T:aeadaes128ocbtaglen128v1 0.17 0.18 0.18 T:aegis128l 0.20 0.20 0.21 aegis128l 0.20? 0.22? 0.23? T:tiaoxinv2 0.21 0.22 0.22 T:tiaoxinv1 0.15? 0.24? 0.33? T:aeadaes256ocbtaglen128v1 0.32 0.32 0.32 T:aegis128 0.33 0.33 0.33 T:aegis256 0.35 0.36 0.36 aegis256 0.31? 0.39? 0.44? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.42 0.43 0.43 aes256gcmv1 0.43 0.43 0.43 T:aes128otrpv3 0.49 0.49 0.50 T:morus1280128v2 0.49 0.49 0.50 T:morus1280128v1 0.49 0.50 0.51 T:morus1280256v1 0.49 0.50 0.50 T:morus1280256v2 0.54 0.55 0.55 T:aes256otrcv3 0.55 0.55 0.55 T:aes256otrpv3 0.56 0.57 0.57 T:deoxysi128v141 0.60 0.60 0.60 T:aes128gcmv1 0.64 0.64 0.65 T:deoxysneq128128v1 0.64 0.65 0.65 T:deoxysi256v141 0.57? 0.65? 0.72? T:oceankeyakv2 0.70 0.71 0.72 T:deoxysneq256128v1 0.75 0.75 0.76 T:morus640128v1 0.79 0.80 0.80 T:deoxysii128v141 0.79 0.80 0.81 T:morus640128v2 0.83 0.84 0.85 T:colm0v1 0.89 0.90 0.90 T:deoxysii256v141 0.97 0.99 1.04 T:lunarkeyakv2 0.98 0.99 1.00 T:deoxyseq128128v1 1.09 1.10 1.10 T:deoxyseq256128v1 1.22 1.23 1.24 T:seakeyakv2 1.49 1.49 1.49 T:aes128otrsv3 1.51 1.55 1.56 T:norx6444v3 2.05 2.06 2.06 T:aes256otrsv3 2.11 2.14 2.16 T:norx6441v2 2.09 2.17 2.18 T:norx6441v3 2.45 2.47 2.56 T:norx6441v1 2.55 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8silcv3 2.56 2.56 2.58 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128n8t8silcv2 2.55 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n12t8clocv2 2.77 2.78 2.79 T:lakekeyakv2 3.05 3.07 3.08 T:lakekeyakv1 3.15 3.17 3.17 T:norx6461v3 3.18 3.22 3.24 T:norx6461v2 3.27 3.31 3.34 T:norx6444v2 3.73 3.78 3.83 T:norx3241v2 3.77 3.80 3.81 T:norx6444v1 3.72 3.83 3.90 T:norx3241v3 3.71 3.89 3.91 T:norx6461v1 4.45 4.47 4.48 T:ketjemajorv2 4.53 4.58 4.66 T:norx3241v1 5.19 5.19 5.19 T:ascon128av11 5.29 5.29 5.29 ascon128av12 5.31 5.31 5.31 T:ascon96v1 5.48 5.49 5.50 T:riverkeyakv2 5.50 5.54 5.54 T:aesjambuv1 5.64 5.73 5.81 T:norx3261v2 5.60 5.74 5.82 T:norx3261v3 6.46 6.48 6.51 T:acorn128v2 6.88 6.88 6.88 T:acorn128v3 7.25 7.26 7.27 T:ketjeminorv2 7.42 7.42 7.44 T:norx3261v1 7.62 7.62 7.62 ascon128v12 7.81 7.81 7.81 T:ascon128v11 7.81 7.81 7.82 T:ascon128v1 13.62 13.63 13.65 T:aes128otrsv1 13.65 13.68 13.71 T:aes128otrsv2 14.50 14.53 14.55 T:aes128otrpv1 14.55 14.57 14.60 T:aes128otrpv2 16.57 16.60 16.62 T:aes128n12clocv1 16.62 16.64 16.66 T:aes128n8clocv1 17.01 17.38 18.78 T:twine80n6t4clocv2 17.66 17.68 17.70 T:aes256otrsv1 17.66 17.68 17.72 T:proest256otrv1 17.66 17.68 17.72 T:aes256otrsv2 18.50 18.52 18.54 T:aes256otrpv1 18.56 18.58 18.61 T:aes256otrpv2 18.94? 19.42? 21.55? T:twine80n6t4clocv3 25.16 25.21 25.28 T:aeadaes128ocbtaglen64v1 25.19 25.26 25.30 T:aeadaes128ocbtaglen96v1 26.23 26.35 26.39 T:ketjesrv1 26.36 26.43 27.94 T:ketjesrv2 29.87 29.93 30.04 T:aeadaes192ocbtaglen64v1 29.99 30.00 30.14 T:aeadaes192ocbtaglen96v1 34.74 34.79 34.99 T:aeadaes256ocbtaglen64v1 34.76 34.80 34.93 T:aeadaes256ocbtaglen96v1 42.06 42.14 42.34 T:colm127v1 45.92 45.99 46.07 T:proest128otrv1 54.73 54.88 55.34 T:ketjejrv1 66.80 66.81 66.93 T:present80n6t4silcv3 74.45 77.65 79.06 T:ketjejrv2 89.48 89.60 89.75 T:deoxysneq128128v13 89.78 92.16 93.44 T:led80n6t4silcv3 103.71 103.93 104.11 T:aezv1 106.27 106.51 106.82 T:deoxyseq128128v13 119.94 120.03 120.19 T:deoxysneq256128v13 135.78 135.86 135.98 T:deoxyseq256128v13 501.17 506.57 524.22 T:acorn128 2487.90 2490.44 2496.01 T:led80n6t4silcv2 2491.84 2500.38 2503.91 T:led80n6silcv1 2605.55 2606.60 2608.96 T:present80n6silcv1 2606.18 2606.83 2609.22 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv2 0.10? 0.11? 0.12? T:tiaoxinv1 0.13 0.13 0.14 T:aezv5 0.13? 0.14? 0.15? T:aezv3 0.14 0.14 0.15 T:aezv4 0.16 0.16 0.17 T:aegis128l 0.07? 0.17? 0.26? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 aegis128l 0.08? 0.24? 0.34? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.31 T:aegis128 0.31 0.31 0.31 T:aegis256 0.31 0.31 0.32 aegis256 0.27? 0.38? 0.47? T:aeadaes192ocbtaglen128v1 0.37 0.39 0.40 aes256gcmv1 0.40 0.40 0.40 T:aes128otrpv3 0.41 0.42 0.42 T:aes128gcmv1 0.42 0.42 0.42 T:aes128otrcv3 0.45 0.46 0.47 T:morus1280128v1 0.46 0.48 0.50 T:morus1280256v2 0.47 0.49 0.50 T:morus1280128v2 0.48 0.49 0.50 T:morus1280256v1 0.50 0.51 0.51 T:colm0v1 0.27? 0.51? 0.74? T:oceankeyakv2 0.52 0.53 0.53 T:aes256otrpv3 0.53 0.54 0.54 T:deoxysii128v141 0.54 0.55 0.55 T:deoxysi128v141 0.55 0.55 0.55 T:aes256otrcv3 0.59 0.59 0.60 T:deoxysi256v141 0.60 0.61 0.61 T:deoxysii256v141 0.58? 0.62? 0.68? T:lunarkeyakv2 0.61 0.62 0.63 T:deoxyseq128128v1 0.62 0.63 0.63 T:deoxysneq128128v1 0.70 0.70 0.71 T:deoxysneq256128v1 0.70 0.72 0.72 T:deoxyseq256128v1 0.71 0.72 0.73 T:morus640128v1 0.71 0.72 0.73 T:morus640128v2 1.11 1.13 1.15 T:seakeyakv2 2.07 2.10 2.19 T:norx6441v3 2.14 2.15 2.18 T:norx6441v2 2.16 2.18 2.20 T:norx6444v3 2.46 2.50 2.59 T:norx6441v1 2.51 2.51 2.53 T:lakekeyakv2 2.56 2.56 2.57 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128n8t8silcv2 2.55 2.56 2.57 T:aes128otrsv3 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.56 T:aes128n12t8clocv2 2.55 2.56 2.57 T:norx6444v2 2.56 2.56 2.57 T:aes128n8t8clocv2 2.83 2.84 2.86 T:lakekeyakv1 3.21 3.23 3.27 T:norx6461v3 3.21 3.26 3.28 T:norx6461v2 3.56 3.56 3.56 T:aes256otrsv3 3.64 3.65 3.70 T:norx3241v2 3.73 3.74 3.77 T:norx6444v1 3.76 3.79 3.86 T:norx3241v3 3.86 3.89 3.91 T:ketjemajorv2 3.69 3.91 3.93 T:norx6461v1 4.41 4.44 4.52 T:norx3241v1 5.07 5.09 5.11 T:riverkeyakv2 5.12 5.13 5.13 T:ascon96v1 5.25 5.25 5.25 ascon128av12 5.25 5.25 5.25 T:ascon128av11 5.27 5.28 5.30 T:aesjambuv1 5.39 5.53 5.55 T:norx3261v2 5.52 5.60 5.65 T:norx3261v3 6.59 6.61 6.68 T:ketjeminorv2 6.75 6.75 6.76 T:acorn128v3 7.50 7.50 7.50 ascon128v12 7.52 7.52 7.53 T:norx3261v1 7.66 7.75 7.87 T:acorn128v2 7.87 7.88 7.88 T:ascon128v1 7.87 7.88 7.88 T:ascon128v11 11.91 11.94 11.95 T:aes128n8clocv1 11.92 11.94 11.97 T:aes128n12clocv1 12.38 12.40 12.44 T:aes128otrsv1 12.35 12.41 12.47 T:aes128otrsv2 14.16 14.20 14.23 T:aes128otrpv1 14.16 14.22 14.30 T:aes128otrpv2 16.41 16.43 16.48 T:aes256otrsv2 16.41 16.44 16.47 T:aes256otrsv1 16.84 17.26 17.81 T:twine80n6t4clocv2 17.87 17.90 17.95 T:proest256otrv1 18.16 18.20 18.27 T:aes256otrpv2 18.19 18.21 18.22 T:aes256otrpv1 18.80 18.99 20.00 T:twine80n6t4clocv3 21.11 21.13 21.24 T:aeadaes128ocbtaglen96v1 21.06 21.17 21.28 T:aeadaes128ocbtaglen64v1 22.18 22.20 22.33 T:colm127v1 23.01 23.12 23.17 T:ketjesrv1 24.89 25.01 25.04 T:aeadaes192ocbtaglen64v1 25.02 25.05 25.09 T:aeadaes192ocbtaglen96v1 25.82 25.95 26.00 T:ketjesrv2 28.86 28.89 29.65 T:aeadaes256ocbtaglen64v1 28.76 29.02 29.19 T:aeadaes256ocbtaglen96v1 46.42 46.53 46.83 T:proest128otrv1 48.36 48.72 48.96 T:ketjejrv1 49.96 50.14 50.32 T:aezv1 66.78 66.79 66.82 T:present80n6t4silcv3 68.96 69.34 71.01 T:ketjejrv2 70.48 70.69 70.84 T:deoxyseq128128v13 70.58 71.09 71.25 T:deoxysneq128128v13 89.00 89.01 92.69 T:led80n6t4silcv3 90.39 90.48 90.54 T:deoxysneq256128v13 90.55 90.64 90.70 T:deoxyseq256128v13 485.01? 525.05? 559.36? T:acorn128 1654.78 1656.79 1660.11 T:led80n6t4silcv2 1658.02 1660.09 1662.07 T:led80n6silcv1 1736.40 1736.73 1739.46 T:present80n6t4silcv2 1736.64 1737.01 1737.39 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv2 0.10? 0.11? 0.12? T:tiaoxinv1 0.13 0.13 0.14 T:aezv4 0.13 0.14 0.14 T:aezv5 0.13 0.14 0.14 T:aezv3 0.16 0.16 0.17 T:aegis128l 0.08? 0.17? 0.26? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.18 aegis128l 0.07? 0.23? 0.40? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.31 T:aegis128 0.31 0.31 0.32 T:aegis256 0.33 0.33 0.34 aegis256 0.28? 0.36? 0.45? T:aeadaes192ocbtaglen128v1 0.37 0.38 0.39 aes256gcmv1 0.39 0.40 0.41 T:aes128gcmv1 0.40 0.41 0.41 T:aes128otrpv3 0.41 0.42 0.43 T:aes128otrcv3 0.48 0.49 0.50 T:morus1280128v1 0.48 0.49 0.50 T:morus1280256v1 0.35? 0.49? 0.66? T:oceankeyakv2 0.49 0.49 0.50 T:morus1280128v2 0.47 0.50 0.50 T:morus1280256v2 0.49 0.50 0.52 T:colm0v1 0.52 0.53 0.53 T:aes256otrpv3 0.52 0.53 0.54 T:deoxysii128v141 0.54 0.54 0.54 T:deoxysi128v141 0.55 0.55 0.55 T:aes256otrcv3 0.54 0.57 0.60 T:lunarkeyakv2 0.59 0.59 0.60 T:deoxysii256v141 0.60 0.60 0.61 T:deoxysi256v141 0.61 0.61 0.63 T:deoxysneq128128v1 0.60 0.62 0.62 T:deoxyseq128128v1 0.69 0.70 0.71 T:deoxyseq256128v1 0.69 0.71 0.72 T:deoxysneq256128v1 0.71 0.72 0.73 T:morus640128v1 0.74 0.75 0.78 T:morus640128v2 1.11 1.14 1.16 T:seakeyakv2 2.04 2.05 2.16 T:norx6444v3 2.06 2.06 2.18 T:norx6441v3 2.15 2.16 2.18 T:norx6441v2 2.50 2.51 2.52 T:lakekeyakv2 2.49 2.54 2.61 T:norx6441v1 2.56 2.56 2.56 T:aes128n8t8silcv2 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.57 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128n12t8clocv3 2.56 2.57 2.58 T:aes128n8t8clocv2 2.56 2.57 2.57 T:aes128otrsv3 2.56 2.57 2.57 T:aes128n12t8clocv2 2.60 2.61 2.61 T:norx6444v2 2.84 2.85 2.86 T:lakekeyakv1 3.20 3.22 3.26 T:norx6461v3 3.21 3.23 3.27 T:norx6461v2 3.56 3.56 3.56 T:aes256otrsv3 3.70 3.71 3.75 T:norx6444v1 3.79 3.80 3.90 T:norx3241v3 3.76 3.81 3.85 T:norx3241v2 3.86 3.89 3.91 T:ketjemajorv2 3.92 3.96 3.97 T:norx6461v1 4.50 4.55 4.69 T:norx3241v1 5.08 5.10 5.11 T:riverkeyakv2 5.19 5.19 5.19 T:ascon128av11 5.19 5.19 5.19 T:ascon96v1 5.25 5.25 5.25 ascon128av12 5.26 5.28 5.34 T:aesjambuv1 5.63 5.64 5.83 T:norx3261v3 5.61 5.64 5.75 T:norx3261v2 6.58 6.60 6.66 T:ketjeminorv2 7.00 7.00 7.00 T:acorn128v3 7.52 7.52 7.53 T:norx3261v1 7.62 7.62 7.63 ascon128v12 7.75 7.75 7.76 T:ascon128v1 7.75 7.75 7.75 T:ascon128v11 7.66 7.84 7.88 T:acorn128v2 11.91 11.93 11.94 T:aes128n12clocv1 11.92 11.93 11.95 T:aes128n8clocv1 12.37 12.42 12.48 T:aes128otrsv2 12.38 12.42 12.45 T:aes128otrsv1 14.16 14.21 14.30 T:aes128otrpv2 14.20 14.22 14.26 T:aes128otrpv1 16.43 16.46 16.49 T:aes256otrsv1 16.43 16.47 16.52 T:aes256otrsv2 16.83 17.30 18.29 T:twine80n6t4clocv2 17.88 17.92 17.96 T:proest256otrv1 18.14 18.18 18.22 T:aes256otrpv2 18.15 18.18 18.24 T:aes256otrpv1 18.65? 19.51? 20.90? T:twine80n6t4clocv3 21.06 21.09 21.16 T:aeadaes128ocbtaglen64v1 21.11 21.16 21.18 T:aeadaes128ocbtaglen96v1 22.20 22.40 22.47 T:colm127v1 22.96 23.01 23.05 T:ketjesrv1 24.88 24.89 25.07 T:aeadaes192ocbtaglen96v1 24.87 24.96 25.02 T:aeadaes192ocbtaglen64v1 25.88 25.98 26.02 T:ketjesrv2 28.85 28.88 29.03 T:aeadaes256ocbtaglen96v1 28.80 29.01 29.26 T:aeadaes256ocbtaglen64v1 46.22 46.29 46.50 T:proest128otrv1 48.40 48.72 48.93 T:ketjejrv1 50.09 50.17 50.29 T:aezv1 66.79 66.79 66.84 T:present80n6t4silcv3 68.84 69.16 73.27 T:ketjejrv2 70.48 70.71 71.24 T:deoxysneq128128v13 70.72 70.90 71.02 T:deoxyseq128128v13 88.71 90.05 93.39 T:led80n6t4silcv3 90.29 90.39 90.50 T:deoxyseq256128v13 90.47 90.60 90.67 T:deoxysneq256128v13 500.58? 512.89? 597.60? T:acorn128 1657.54 1663.76 1677.79 T:led80n6t4silcv2 1662.48 1672.70 1679.72 T:led80n6silcv1 1734.24 1736.43 1737.12 T:present80n6t4silcv2 1736.18 1736.96 1737.90 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv2 0.10 0.11 0.11 T:tiaoxinv1 0.13 0.13 0.14 T:aezv5 0.13 0.14 0.14 T:aezv4 0.13 0.14 0.14 T:aezv3 0.16 0.16 0.17 T:aegis128l 0.09? 0.17? 0.25? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.17 aegis128l 0.15? 0.23? 0.40? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.32 T:aegis128 0.31 0.31 0.32 T:aegis256 0.33 0.34 0.34 aegis256 0.29? 0.37? 0.45? T:aeadaes192ocbtaglen128v1 0.37 0.38 0.39 aes256gcmv1 0.39 0.40 0.40 T:aes128gcmv1 0.40 0.41 0.41 T:aes128otrpv3 0.42 0.42 0.43 T:aes128otrcv3 0.47 0.48 0.50 T:morus1280128v1 0.48 0.49 0.50 T:morus1280128v2 0.48 0.49 0.50 T:morus1280256v1 0.48 0.49 0.51 T:morus1280256v2 0.48 0.50 0.51 T:colm0v1 0.36? 0.50? 0.66? T:oceankeyakv2 0.52 0.53 0.53 T:aes256otrpv3 0.52 0.53 0.54 T:deoxysii128v141 0.54 0.54 0.55 T:deoxysi128v141 0.55 0.55 0.55 T:aes256otrcv3 0.53? 0.58? 0.65? T:lunarkeyakv2 0.59 0.59 0.60 T:deoxysii256v141 0.60 0.60 0.61 T:deoxysi256v141 0.61 0.62 0.63 T:deoxysneq128128v1 0.61 0.62 0.62 T:deoxyseq128128v1 0.69 0.70 0.72 T:deoxyseq256128v1 0.70 0.71 0.72 T:deoxysneq256128v1 0.71 0.72 0.73 T:morus640128v1 0.75 0.76 0.79 T:morus640128v2 1.12 1.13 1.15 T:seakeyakv2 2.04 2.10 2.16 T:norx6444v3 2.14 2.15 2.16 T:norx6441v2 2.06 2.19 2.21 T:norx6441v3 2.46 2.46 2.59 T:norx6441v1 2.54 2.56 2.56 T:aes128n8t8silcv2 2.55 2.56 2.58 T:aes128n12t8silcv3 2.55 2.56 2.58 T:aes128n12t8silcv2 2.55 2.56 2.57 T:aes128n12t8clocv3 2.55 2.56 2.56 T:aes128n12t8clocv2 2.55 2.56 2.56 T:aes128n8t8clocv2 2.56 2.57 2.57 T:aes128otrsv3 2.52 2.57 2.59 T:lakekeyakv2 2.60 2.61 2.61 T:norx6444v2 2.85 2.86 2.86 T:lakekeyakv1 3.20 3.21 3.23 T:norx6461v3 3.20 3.22 3.26 T:norx6461v2 3.56 3.56 3.56 T:aes256otrsv3 3.63 3.64 3.94 T:norx6461v1 3.71 3.75 3.77 T:norx6444v1 3.69 3.78 3.80 T:norx3241v2 3.76 3.80 3.91 T:norx3241v3 3.86 3.89 3.91 T:ketjemajorv2 4.40 4.49 4.56 T:norx3241v1 5.07 5.09 5.11 T:riverkeyakv2 5.19 5.19 5.19 T:ascon128av11 5.19 5.19 5.19 T:ascon96v1 5.25 5.25 5.25 ascon128av12 5.26 5.27 5.33 T:aesjambuv1 5.62 5.64 5.75 T:norx3261v2 5.54 5.64 5.65 T:norx3261v3 6.57 6.61 6.66 T:ketjeminorv2 7.00 7.00 7.00 T:acorn128v3 7.52 7.53 7.53 T:norx3261v1 7.62 7.62 7.62 ascon128v12 7.75 7.75 7.76 T:ascon128v1 7.75 7.75 7.76 T:ascon128v11 7.69 7.87 7.88 T:acorn128v2 11.90 11.93 11.95 T:aes128n8clocv1 11.91 11.94 11.95 T:aes128n12clocv1 12.35 12.39 12.48 T:aes128otrsv2 12.42 12.44 12.48 T:aes128otrsv1 14.20 14.23 14.26 T:aes128otrpv1 14.22 14.27 14.34 T:aes128otrpv2 16.37 16.42 16.48 T:aes256otrsv2 16.41 16.45 16.48 T:aes256otrsv1 16.86 17.25 17.90 T:twine80n6t4clocv2 17.88 17.91 17.95 T:proest256otrv1 18.16 18.18 18.22 T:aes256otrpv1 18.18 18.22 18.26 T:aes256otrpv2 18.68 18.83 19.13 T:twine80n6t4clocv3 21.06 21.09 21.26 T:aeadaes128ocbtaglen64v1 21.05 21.09 21.16 T:aeadaes128ocbtaglen96v1 22.24 22.32 22.47 T:colm127v1 22.97 23.08 23.17 T:ketjesrv1 25.02 25.04 25.09 T:aeadaes192ocbtaglen96v1 24.99 25.05 25.09 T:aeadaes192ocbtaglen64v1 25.85 25.98 26.07 T:ketjesrv2 28.74 28.89 29.06 T:aeadaes256ocbtaglen96v1 28.77 29.03 29.26 T:aeadaes256ocbtaglen64v1 46.26 46.52 46.63 T:proest128otrv1 48.49 48.75 48.84 T:ketjejrv1 50.09 50.20 50.41 T:aezv1 66.77 66.81 66.87 T:present80n6t4silcv3 70.57 70.66 70.78 T:deoxysneq128128v13 70.52 70.77 70.89 T:deoxyseq128128v13 69.50 72.92 73.71 T:ketjejrv2 90.20 90.30 90.48 T:deoxyseq256128v13 90.27 90.50 90.60 T:deoxysneq256128v13 88.70 92.57 93.07 T:led80n6t4silcv3 484.67? 526.55? 539.51? T:acorn128 1655.05 1658.09 1672.67 T:led80n6t4silcv2 1659.46 1675.35 1680.58 T:led80n6silcv1 1736.23 1736.53 1736.81 T:present80n6t4silcv2 1736.11 1736.80 1737.48 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.16 0.16 0.17 T:tiaoxinv2 0.16 0.17 0.17 T:tiaoxinv1 0.20 0.20 0.21 T:aegis128l 0.21 0.21 0.21 aegis128l 0.27? 0.28? 0.34? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.30 T:aezv5 0.30 0.30 0.30 T:aezv4 0.34 0.34 0.34 T:aegis128 0.35 0.36 0.36 aegis256 0.35 0.36 0.36 T:aegis256 0.37? 0.38? 0.43? T:aeadaes256ocbtaglen128v1 0.49? 0.50? 0.60? T:aeadaes192ocbtaglen128v1 0.53 0.53 0.54 T:aes128otrcv3 0.54 0.54 0.54 T:aes128otrpv3 0.55 0.56 0.56 aes256gcmv1 0.59 0.59 0.60 T:morus1280256v1 0.59 0.60 0.61 T:morus1280128v1 0.60 0.61 0.62 T:morus1280256v2 0.61 0.62 0.62 T:morus1280128v2 0.63 0.63 0.63 T:deoxysi128v141 0.68 0.69 0.69 T:aes256otrpv3 0.69 0.69 0.70 T:aes128gcmv1 0.70 0.71 0.71 T:deoxysi256v141 0.71 0.72 0.72 T:deoxysneq128128v1 0.72 0.72 0.72 T:aes256otrcv3 0.84 0.84 0.84 T:deoxysneq256128v1 0.84 0.85 0.85 T:morus640128v1 0.85 0.86 0.86 T:morus640128v2 0.91 0.91 0.91 T:deoxysii128v141 0.97 0.97 0.97 T:colm0v1 1.03 1.03 1.04 T:deoxysii256v141 1.05 1.05 1.06 T:deoxyseq128128v1 1.26 1.27 1.28 T:deoxyseq256128v1 1.41 1.44 1.56 T:oceankeyakv2 1.54 1.54 1.55 T:aes128otrsv3 1.76 1.77 1.78 T:seakeyakv2 2.07 2.09 2.13 T:norx6444v3 2.13 2.13 2.13 T:aes256otrsv3 2.40 2.42 2.43 T:lunarkeyakv2 2.46 2.50 2.50 T:norx6441v2 2.47 2.54 2.55 T:norx6441v3 2.61 2.61 2.61 T:aes128n8t8silcv2 2.61 2.61 2.61 T:aes128n12t8clocv3 2.61 2.61 2.61 T:aes128n12t8silcv3 2.61 2.61 2.61 T:aes128n8t8clocv2 2.61 2.61 2.61 T:aes128n12t8silcv2 2.61 2.61 2.61 T:aes128n12t8clocv2 2.81 2.83 2.83 T:norx6441v1 3.07 3.08 3.08 T:lakekeyakv2 3.55 3.57 3.61 T:lakekeyakv1 3.67 3.68 3.74 T:norx6461v2 3.68 3.68 3.74 T:norx6461v3 4.00 4.08 4.13 T:norx3241v2 4.04 4.16 4.19 T:norx3241v3 4.21 4.25 4.40 T:norx6461v1 4.69 4.70 4.71 T:norx6444v2 4.70 4.75 4.78 T:norx3241v1 5.34 5.34 5.35 T:aesjambuv1 5.34 5.34 5.34 T:ascon96v1 5.34 5.35 5.36 T:norx6444v1 5.41 5.41 5.42 ascon128av12 5.47 5.47 5.47 T:ascon128av11 5.66 5.66 5.67 T:riverkeyakv2 5.75 5.77 5.79 T:ketjemajorv2 6.01 6.12 6.15 T:norx3261v2 6.09 6.19 6.23 T:norx3261v3 7.66 7.67 7.69 T:acorn128v3 7.63 7.68 7.71 T:acorn128v2 7.74 7.74 7.75 ascon128v12 7.82 7.83 7.84 T:ketjeminorv2 7.93 7.93 7.93 T:norx3261v1 8.18 8.18 8.18 T:ascon128v11 8.18 8.18 8.18 T:ascon128v1 13.80 13.82 13.88 T:aes128otrsv1 13.82 13.83 13.85 T:aes128otrsv2 14.69 14.71 14.73 T:aes128otrpv1 14.70 14.72 14.75 T:aes128otrpv2 17.38 17.41 17.44 T:aes128n12clocv1 17.41 17.44 17.47 T:aes128n8clocv1 17.90 17.92 17.96 T:aes256otrsv2 17.94 17.95 17.97 T:aes256otrsv1 17.54 18.52 19.03 T:twine80n6t4clocv2 18.78 18.80 18.81 T:aes256otrpv1 18.79 18.80 18.84 T:aes256otrpv2 18.95 18.96 18.97 T:proest256otrv1 19.71 20.90 20.98 T:twine80n6t4clocv3 21.95 22.00 22.04 T:aeadaes128ocbtaglen64v1 21.98 22.02 22.06 T:aeadaes128ocbtaglen96v1 25.79 25.80 25.97 T:aeadaes192ocbtaglen96v1 25.85 25.96 25.98 T:aeadaes192ocbtaglen64v1 26.62 26.65 27.09 T:ketjesrv1 29.94 29.96 29.99 T:aeadaes256ocbtaglen96v1 29.86 29.99 30.19 T:aeadaes256ocbtaglen64v1 30.83 30.87 30.90 T:ketjesrv2 35.05 35.20 35.25 T:colm127v1 47.85 47.98 48.11 T:proest128otrv1 54.38 54.42 54.51 T:ketjejrv1 67.75 67.80 67.96 T:present80n6t4silcv3 70.68 70.81 70.95 T:deoxysneq128128v13 72.57 72.69 73.12 T:ketjejrv2 90.80 90.89 91.18 T:deoxysneq256128v13 91.94 92.88 92.88 T:led80n6t4silcv3 100.84 101.10 101.40 T:aezv1 107.56 107.77 108.04 T:deoxyseq128128v13 137.81 138.08 138.30 T:deoxyseq256128v13 563.85 577.03 589.07 T:acorn128 2503.11 2505.07 2521.22 T:led80n6silcv1 2504.43 2517.59 2520.64 T:led80n6t4silcv2 2617.75 2617.95 2618.17 T:present80n6t4silcv2 2619.71 2622.47 2624.75 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.20 0.21 0.21 T:aegis128l 0.22 0.22 0.22 aegis128l 0.25 0.26 0.27 T:tiaoxinv1 0.26 0.26 0.26 T:tiaoxinv2 0.28? 0.28? 0.34? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.31 T:aezv5 0.30 0.31 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.36 T:aegis256 0.36 0.37 0.37 aegis256 0.37? 0.38? 0.45? T:aeadaes256ocbtaglen128v1 0.47? 0.47? 0.53? T:aeadaes192ocbtaglen128v1 0.50 0.51 0.52 aes256gcmv1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.56 0.56 T:aes128otrpv3 0.61 0.62 0.63 T:morus1280128v1 0.61 0.62 0.62 T:morus1280256v1 0.62 0.63 0.63 T:morus1280256v2 0.63 0.63 0.64 T:morus1280128v2 0.69 0.69 0.69 T:aes128gcmv1 0.72 0.72 0.72 T:aes256otrpv3 0.73 0.73 0.73 T:aes256otrcv3 0.73 0.73 0.73 T:deoxysi128v141 0.81 0.81 0.82 T:deoxysneq128128v1 0.83 0.83 0.84 T:morus640128v1 0.84 0.85 0.85 T:deoxysi256v141 0.85 0.86 0.86 T:deoxysneq256128v1 0.88 0.89 0.90 T:morus640128v2 0.92 0.93 0.93 T:deoxysii128v141 0.94 0.94 0.95 T:colm0v1 1.04 1.05 1.05 T:deoxysii256v141 1.19 1.20 1.23 T:deoxyseq128128v1 1.29 1.30 1.31 T:deoxyseq256128v1 1.41 1.43 1.50 T:oceankeyakv2 1.55 1.55 1.56 T:aes128otrsv3 1.79 1.80 1.81 T:seakeyakv2 2.08 2.12 2.15 T:norx6444v3 2.14 2.14 2.14 T:aes256otrsv3 2.43 2.44 2.48 T:norx6441v2 2.42 2.48 2.53 T:norx6441v3 2.49 2.50 2.54 T:lunarkeyakv2 2.58 2.58 2.59 T:aes128n12t8clocv3 2.58 2.58 2.59 T:aes128n12t8clocv2 2.58 2.59 2.59 T:aes128n8t8clocv2 2.59 2.59 2.59 T:aes128n12t8silcv2 2.59 2.59 2.60 T:aes128n8t8silcv2 2.59 2.59 2.60 T:aes128n12t8silcv3 2.76 2.79 2.80 T:norx6441v1 3.08 3.09 3.10 T:lakekeyakv2 3.59 3.60 3.61 T:lakekeyakv1 3.65 3.66 3.72 T:norx6461v2 3.66 3.66 3.67 T:norx6461v3 4.01 4.01 4.06 T:norx3241v3 4.14 4.15 4.18 T:norx3241v2 4.37 4.38 4.38 T:norx6461v1 4.73 4.75 4.78 T:norx6444v2 4.75 4.82 4.84 T:norx3241v1 5.30 5.30 5.31 T:norx6444v1 5.31 5.31 5.31 T:ascon128av11 5.41 5.41 5.41 ascon128av12 5.44 5.44 5.44 T:ascon96v1 5.58 5.58 5.58 T:aesjambuv1 5.71 5.72 5.73 T:ketjemajorv2 5.75 5.75 5.76 T:riverkeyakv2 6.08 6.18 6.24 T:norx3261v2 6.07 6.19 6.19 T:norx3261v3 7.64 7.69 7.71 T:acorn128v2 7.74 7.74 7.74 ascon128v12 7.77 7.77 7.77 T:acorn128v3 7.83 7.84 7.85 T:norx3261v1 7.93 7.93 7.93 T:ascon128v11 7.93 7.93 7.93 T:ascon128v1 8.00 8.01 8.02 T:ketjeminorv2 13.95 13.96 13.98 T:aes128otrsv1 13.99 14.00 14.02 T:aes128otrsv2 14.81 14.83 14.85 T:aes128otrpv1 14.88 14.88 14.90 T:aes128otrpv2 16.77 16.78 16.81 T:aes128n12clocv1 16.80 16.83 16.85 T:aes128n8clocv1 18.06 18.07 18.09 T:aes256otrsv1 18.09 18.12 18.14 T:aes256otrsv2 17.47 18.48 19.16 T:twine80n6t4clocv2 18.93 18.94 18.95 T:aes256otrpv1 18.96 18.98 18.99 T:aes256otrpv2 19.25 19.28 19.29 T:proest256otrv1 19.38 19.43 19.60 T:twine80n6t4clocv3 25.93 25.96 25.99 T:aeadaes128ocbtaglen64v1 25.93 25.98 26.00 T:aeadaes128ocbtaglen96v1 27.03 27.07 27.11 T:ketjesrv1 27.32 28.13 29.55 T:ketjesrv2 30.75 30.78 30.86 T:aeadaes192ocbtaglen64v1 30.78 30.84 30.88 T:aeadaes192ocbtaglen96v1 35.78 35.79 35.82 T:aeadaes256ocbtaglen96v1 35.76 35.86 36.16 T:aeadaes256ocbtaglen64v1 42.97 43.04 43.17 T:colm127v1 48.00 48.04 48.09 T:proest128otrv1 55.46 55.57 55.67 T:ketjejrv1 67.57 67.62 67.69 T:present80n6t4silcv3 75.18 77.39 78.35 T:ketjejrv2 90.07 90.19 90.31 T:deoxysneq128128v13 92.13 92.91 94.43 T:led80n6t4silcv3 100.76 100.91 101.18 T:aezv1 107.47 107.73 107.92 T:deoxyseq128128v13 120.61 120.64 120.71 T:deoxysneq256128v13 137.20 137.26 137.40 T:deoxyseq256128v13 547.25 558.96 562.46 T:acorn128 2500.80 2502.45 2507.06 T:led80n6t4silcv2 2502.74 2510.10 2511.41 T:led80n6silcv1 2618.85 2619.41 2620.64 T:present80n6silcv1 2619.30 2619.91 2620.13 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17 0.18 0.18 T:aezv3 0.18 0.18 0.18 T:aezv5 0.18 0.18 0.19 T:aezv4 0.20 0.20 0.21 T:aegis128l 0.23 0.23 0.24 aegis128l 0.24 0.25 0.25 T:tiaoxinv1 0.25 0.25 0.26 T:tiaoxinv2 0.27? 0.28? 0.33? T:aeadaes128ocbtaglen128v1 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.36 T:aegis256 0.37? 0.38? 0.48? T:aeadaes256ocbtaglen128v1 0.39 0.39 0.39 aegis256 0.47? 0.47? 0.57? T:aeadaes192ocbtaglen128v1 0.50 0.51 0.51 aes256gcmv1 0.55 0.56 0.56 T:aes128otrcv3 0.56 0.56 0.56 T:aes128otrpv3 0.61 0.62 0.62 T:morus1280256v1 0.62 0.62 0.63 T:morus1280128v1 0.62 0.62 0.63 T:morus1280256v2 0.62 0.63 0.63 T:morus1280128v2 0.69 0.69 0.69 T:aes128gcmv1 0.72 0.72 0.72 T:aes256otrpv3 0.73 0.73 0.73 T:aes256otrcv3 0.73 0.73 0.73 T:deoxysi128v141 0.81 0.81 0.82 T:deoxysneq128128v1 0.83 0.83 0.84 T:morus640128v1 0.84 0.85 0.85 T:deoxysi256v141 0.85 0.86 0.87 T:deoxysneq256128v1 0.88 0.89 0.90 T:morus640128v2 0.92 0.93 0.93 T:deoxysii128v141 0.93 0.94 0.95 T:colm0v1 1.04 1.05 1.05 T:deoxysii256v141 1.19 1.20 1.21 T:deoxyseq128128v1 1.28 1.29 1.30 T:deoxyseq256128v1 1.42 1.43 1.51 T:oceankeyakv2 1.55 1.55 1.56 T:aes128otrsv3 2.08 2.09 2.13 T:norx6444v3 2.14 2.14 2.14 T:aes256otrsv3 1.91? 2.24? 2.25? T:seakeyakv2 2.43 2.44 2.51 T:norx6441v3 2.44 2.48 2.49 T:norx6441v2 2.50 2.54 2.55 T:lunarkeyakv2 2.58 2.58 2.59 T:aes128n12t8silcv2 2.58 2.58 2.59 T:aes128n12t8silcv3 2.58 2.58 2.60 T:aes128n8t8silcv2 2.58 2.58 2.59 T:aes128n8t8clocv2 2.58 2.58 2.59 T:aes128n12t8clocv2 2.58 2.58 2.58 T:aes128n12t8clocv3 2.76 2.80 2.88 T:norx6441v1 3.14 3.14 3.15 T:lakekeyakv2 3.60 3.62 3.63 T:lakekeyakv1 3.66 3.67 3.72 T:norx6461v2 3.67 3.73 3.74 T:norx6461v3 4.02 4.04 4.07 T:norx3241v2 4.08 4.14 4.18 T:norx3241v3 4.13 4.16 4.19 T:norx6461v1 4.76 4.79 4.81 T:norx6444v2 4.74 4.83 4.85 T:norx3241v1 5.31 5.31 5.32 T:ascon128av11 5.31 5.33 5.34 T:norx6444v1 5.41 5.41 5.41 ascon128av12 5.44 5.44 5.44 T:ascon96v1 5.58 5.58 5.58 T:aesjambuv1 5.72 5.73 5.75 T:ketjemajorv2 5.75 5.75 5.76 T:riverkeyakv2 6.05 6.09 6.17 T:norx3261v3 6.18 6.20 6.26 T:norx3261v2 7.65 7.70 7.71 T:acorn128v2 7.74 7.74 7.74 ascon128v12 7.77 7.77 7.77 T:acorn128v3 7.83 7.83 7.85 T:norx3261v1 7.93 7.93 7.93 T:ascon128v11 7.93 7.93 7.93 T:ascon128v1 8.01 8.02 8.03 T:ketjeminorv2 13.96 13.98 14.01 T:aes128otrsv1 14.00 14.01 14.03 T:aes128otrsv2 14.82 14.85 14.89 T:aes128otrpv1 14.88 14.89 14.92 T:aes128otrpv2 16.77 16.79 16.81 T:aes128n12clocv1 16.80 16.81 16.84 T:aes128n8clocv1 18.08 18.10 18.11 T:aes256otrsv1 18.11 18.13 18.15 T:aes256otrsv2 17.47 18.61 19.15 T:twine80n6t4clocv2 18.92 18.93 18.95 T:aes256otrpv1 18.97 18.99 19.01 T:aes256otrpv2 19.27 19.28 19.30 T:proest256otrv1 19.41 19.85 20.38 T:twine80n6t4clocv3 25.96 25.99 26.00 T:aeadaes128ocbtaglen96v1 25.99 26.03 26.05 T:aeadaes128ocbtaglen64v1 27.26 27.34 28.66 T:ketjesrv2 27.22 27.42 28.39 T:ketjesrv1 30.71 30.73 30.81 T:aeadaes192ocbtaglen64v1 30.75 30.80 30.86 T:aeadaes192ocbtaglen96v1 35.85 35.88 35.97 T:aeadaes256ocbtaglen96v1 35.69 35.91 35.95 T:aeadaes256ocbtaglen64v1 43.06 43.10 43.12 T:colm127v1 48.03 48.05 48.10 T:proest128otrv1 55.58 55.62 55.76 T:ketjejrv1 67.59 67.63 67.64 T:present80n6t4silcv3 74.70 74.79 77.01 T:ketjejrv2 89.89 90.01 90.16 T:deoxysneq128128v13 90.49 92.62 93.35 T:led80n6t4silcv3 100.75 100.97 101.35 T:aezv1 107.36 107.80 108.01 T:deoxyseq128128v13 120.55 120.65 120.87 T:deoxysneq256128v13 137.12 137.23 137.40 T:deoxyseq256128v13 564.29 582.23 602.54 T:acorn128 2501.42 2506.54 2511.86 T:led80n6t4silcv2 2509.87 2512.06 2513.05 T:led80n6silcv1 2619.50 2620.05 2621.76 T:present80n6t4silcv2 2619.17 2620.06 2621.92 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.84 0.87 0.89 T:aegis128 0.88 0.89 0.91 T:aegis128l 0.89 0.92 0.97 aegis128l 1.15 1.16 1.18 T:aegis256 1.17 1.19 1.21 aegis256 1.19 1.21 1.23 T:tiaoxinv1 1.21 1.22 1.24 T:tiaoxinv2 1.39 1.39 1.39 T:aezv5 1.40 1.43 1.46 T:aezv3 1.49 1.50 1.52 T:aezv4 2.41 2.45 2.49 T:colm0v1 2.51 2.55 2.60 T:aes128otrsv3 2.68 2.73 2.77 T:morus640128v1 2.82? 2.86? 4.41? T:aeadaes128ocbtaglen128v1 2.90 2.91 2.92 T:aes128otrpv3 2.88 2.92 2.96 T:morus640128v2 2.93 2.99 3.08 T:aes128otrcv3 2.98 2.99 3.02 T:aes128n8t8silcv2 2.98 3.01 3.02 T:aes128n12t8silcv3 3.00 3.01 3.03 T:aes128n12t8silcv2 3.03 3.04 3.06 T:aes128n12t8clocv3 3.03 3.04 3.06 T:aes128n12t8clocv2 3.05 3.08 3.10 T:aes128n8t8clocv2 3.05 3.08 3.15 T:morus1280128v1 3.03 3.09 3.13 T:deoxysneq128128v1 3.14 3.19 3.24 T:morus1280256v1 3.31 3.36 3.42 T:morus1280256v2 3.38 3.42 3.47 T:morus1280128v2 3.45 3.48 3.50 T:aes256otrsv3 3.45? 3.48? 4.99? T:aeadaes256ocbtaglen128v1 3.79 3.80 3.84 T:aes256otrpv3 3.80 3.85 3.91 T:deoxysi128v141 3.82? 3.94? 6.01? T:aeadaes192ocbtaglen128v1 3.94 3.96 4.01 T:deoxysneq256128v1 3.95 4.00 4.03 T:aes256otrcv3 4.05 4.10 4.15 T:aes128gcmv1 4.63 4.66 4.72 aes256gcmv1 4.63 4.70 4.76 T:deoxysi256v141 4.74 4.79 4.85 T:deoxyseq128128v1 5.14 5.17 5.20 T:deoxysii128v141 5.95 5.99 6.02 T:deoxyseq256128v1 6.05 6.11 6.13 T:deoxysii256v141 6.25 6.28 6.32 T:aesjambuv1 7.81 7.86 7.91 T:norx6441v1 7.85 7.90 7.94 T:norx6441v2 8.11 8.16 8.29 T:norx6441v3 8.22 8.22 8.23 T:ascon96v1 8.34 8.38 8.41 T:ascon128av11 8.38 8.38 8.45 ascon128av12 9.66 9.72 9.79 T:norx3241v1 9.77 9.83 9.94 T:norx3241v3 9.74 9.92 10.07 T:norx3241v2 10.48 10.48 10.48 ascon128v12 10.91 10.91 10.91 T:ascon128v1 10.91 10.91 10.91 T:ascon128v11 11.50 11.56 11.74 T:lakekeyakv1 11.62 11.67 11.73 T:norx6461v2 11.74 11.88 11.95 T:norx6461v3 11.81 12.04 12.14 T:norx6461v1 13.28 13.31 13.60 T:riverkeyakv2 14.03 14.15 14.23 T:norx6444v3 14.43 14.46 14.53 T:lakekeyakv2 14.76 14.80 14.85 T:norx3261v3 14.64 14.88 15.06 T:norx3261v2 16.33 16.34 16.36 T:norx3261v1 16.86 16.98 17.13 T:seakeyakv2 17.42? 17.73? 21.04? T:oceankeyakv2 21.02 21.27 21.67 T:aes128n12clocv1 21.20 21.40 21.55 T:aes128n8clocv1 21.37 21.43 21.51 T:aes128otrsv1 21.67 21.75 21.76 T:aes128otrsv2 22.12 22.16 22.22 T:aes128otrpv1 22.12 22.23 22.41 T:aes128otrpv2 24.79 24.85 24.89 T:ketjeminorv2 25.99 26.82 27.60 T:twine80n6t4clocv2 26.68 26.88 28.27 T:twine80n6t4clocv3 27.51 27.56 27.72 T:aes256otrsv1 27.65 27.74 27.90 T:aes256otrsv2 28.21 28.24 28.37 T:aes256otrpv1 28.20 28.45 28.51 T:aes256otrpv2 28.54 28.54 28.59 T:acorn128v3 34.20 34.26 34.35 T:ketjemajorv2 34.23 34.55 34.75 T:acorn128v2 34.46 34.61 34.70 T:norx6444v2 35.05 35.08 35.37 T:aeadaes128ocbtaglen64v1 35.14 35.19 35.28 T:aeadaes128ocbtaglen96v1 38.26 38.34 38.42 T:norx6444v1 38.17 38.62 39.07 T:lunarkeyakv2 40.49 40.61 40.71 T:aeadaes192ocbtaglen96v1 40.65 40.73 40.88 T:aeadaes192ocbtaglen64v1 43.61 43.81 45.71 T:ketjesrv1 47.27 47.39 47.62 T:aeadaes256ocbtaglen64v1 47.41 47.46 47.62 T:aeadaes256ocbtaglen96v1 50.90 51.06 51.31 T:colm127v1 51.56 51.76 52.31 T:ketjesrv2 53.98 54.04 54.30 T:proest256otrv1 72.90 73.22 73.64 T:ketjejrv1 79.37 79.73 79.99 T:deoxysneq128128v13 83.17 83.25 83.30 T:present80n6t4silcv3 92.45 92.56 92.85 T:proest128otrv1 94.23 94.66 95.02 T:ketjejrv2 101.95 102.17 102.34 T:deoxysneq256128v13 107.05 110.40 110.60 T:led80n6t4silcv3 111.18 111.83 112.78 T:aezv1 132.88 133.34 134.02 T:deoxyseq128128v13 170.66 171.09 171.49 T:deoxyseq256128v13 1917.30 1925.10 2065.82 T:acorn128 2797.47 2803.17 2820.06 T:led80n6silcv1 2799.84 2819.38 2821.20 T:led80n6t4silcv2 2930.17 2930.81 2935.01 T:present80n6t4silcv2 2931.79 2932.74 2935.11 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.86 0.89 0.93 T:aegis128 0.89 0.91 0.93 T:aegis128l 0.98 1.00 1.05 aegis128l 1.14 1.15 1.19 T:aegis256 1.21 1.22 1.25 T:tiaoxinv2 1.21 1.23 1.25 T:tiaoxinv1 1.23 1.25 1.25 aegis256 1.39 1.40 1.40 T:aezv5 1.39 1.41 1.44 T:aezv3 1.46 1.48 1.50 T:aezv4 2.57 2.66 2.68 T:aes128otrsv3 2.71 2.74 2.77 T:morus640128v1 2.75? 2.78? 4.20? T:aeadaes128ocbtaglen128v1 2.92 2.95 2.99 T:colm0v1 3.01 3.05 3.07 T:morus640128v2 3.08 3.12 3.13 T:aes128n12t8clocv3 3.10 3.12 3.13 T:aes128n8t8clocv2 3.12 3.13 3.14 T:aes128n12t8clocv2 3.11 3.13 3.26 T:aes128n12t8silcv3 3.11 3.16 3.26 T:aes128n12t8silcv2 3.10 3.18 3.30 T:aes128n8t8silcv2 3.25 3.30 3.36 T:morus1280128v1 3.26 3.33 3.40 T:aes128otrcv3 3.31 3.35 3.42 T:morus1280256v1 3.37 3.38 3.39 T:aes128otrpv3 3.48? 3.57? 6.06? T:aeadaes256ocbtaglen128v1 3.54 3.60 3.64 T:morus1280128v2 3.60 3.63 3.66 T:morus1280256v2 3.63 3.66 3.67 T:aes256otrsv3 3.75? 3.85? 5.71? T:aeadaes192ocbtaglen128v1 4.08 4.12 4.14 T:aes128gcmv1 4.19 4.28 4.35 T:aes256otrcv3 4.25 4.28 4.29 T:aes256otrpv3 4.30 4.36 4.40 T:deoxysneq256128v1 4.35 4.37 4.43 T:deoxysneq128128v1 4.77 4.84 4.86 T:deoxysi128v141 4.87 4.93 4.98 aes256gcmv1 5.42 5.49 5.55 T:deoxysii128v141 5.65 5.67 5.71 T:deoxysi256v141 6.23 6.43 6.71 T:aesjambuv1 6.46 6.49 6.55 T:deoxyseq256128v1 6.75 6.77 6.84 T:deoxysii256v141 6.72 6.78 6.84 T:deoxyseq128128v1 7.89 7.95 8.01 T:norx6441v1 8.05 8.07 8.10 T:norx6441v2 8.16 8.16 8.18 T:ascon128av11 8.30 8.30 8.34 ascon128av12 8.34 8.34 8.35 T:ascon96v1 8.35 8.39 8.47 T:norx6441v3 9.96 10.05 10.26 T:norx3241v2 10.03 10.26 10.41 T:norx3241v1 10.18 10.41 10.57 T:norx3241v3 10.42 10.42 10.46 ascon128v12 10.56 10.56 10.59 T:ascon128v11 10.56 10.57 10.59 T:ascon128v1 11.50 11.62 11.87 T:lakekeyakv1 11.93 12.07 12.13 T:norx6461v2 11.92 12.11 12.20 T:norx6461v3 12.23 12.31 12.35 T:norx6461v1 13.36 13.39 13.73 T:riverkeyakv2 14.09 14.18 14.29 T:norx6444v3 14.44 14.47 14.72 T:lakekeyakv2 15.04 15.27 15.35 T:norx3261v3 15.62 15.66 15.70 T:norx3261v2 16.42 16.44 16.45 T:norx3261v1 16.94 17.03 17.21 T:seakeyakv2 17.27? 17.54? 19.56? T:oceankeyakv2 20.73 20.90 21.27 T:aes128n8clocv1 20.90 21.25 21.57 T:aes128n12clocv1 21.55 21.62 21.73 T:aes128otrsv1 21.81 21.95 22.28 T:aes128otrsv2 22.25 22.35 22.40 T:aes128otrpv1 22.46 22.52 22.59 T:aes128otrpv2 25.01 25.06 25.15 T:ketjeminorv2 26.07 26.88 27.88 T:twine80n6t4clocv2 27.70 27.77 27.86 T:aes256otrsv1 27.90 27.98 28.09 T:aes256otrsv2 28.29 28.35 28.43 T:aes256otrpv1 28.37 28.37 28.42 T:acorn128v3 28.54 28.59 28.75 T:aes256otrpv2 27.35 28.63 29.14 T:twine80n6t4clocv3 34.20 34.34 34.63 T:acorn128v2 34.37 34.43 34.51 T:ketjemajorv2 34.65 34.71 34.89 T:norx6444v2 37.76 37.80 37.85 T:norx6444v1 38.45 38.94 39.26 T:lunarkeyakv2 42.57 42.69 42.82 T:aeadaes128ocbtaglen96v1 42.59 42.92 43.18 T:aeadaes128ocbtaglen64v1 43.98 44.30 45.91 T:ketjesrv1 48.30 48.59 48.78 T:ketjesrv2 49.06 49.31 49.51 T:aeadaes192ocbtaglen64v1 49.36 49.58 49.65 T:aeadaes192ocbtaglen96v1 55.94 56.24 56.95 T:proest256otrv1 57.85 58.08 58.30 T:aeadaes256ocbtaglen96v1 57.86 58.12 58.41 T:aeadaes256ocbtaglen64v1 59.16 59.37 59.42 T:colm127v1 73.90 74.09 74.45 T:ketjejrv1 82.83 82.95 83.09 T:present80n6t4silcv3 93.33 93.64 93.98 T:proest128otrv1 96.37 96.74 97.36 T:ketjejrv2 98.68 98.91 99.38 T:deoxysneq128128v13 108.50 112.54 112.54 T:led80n6t4silcv3 113.68 114.04 114.91 T:aezv1 131.68 131.90 132.16 T:deoxysneq256128v13 132.84 133.48 134.24 T:deoxyseq128128v13 170.07 170.36 170.73 T:deoxyseq256128v13 1935.35 2002.91 2103.21 T:acorn128 2798.20 2800.43 2806.43 T:led80n6t4silcv2 2803.81 2812.05 2816.78 T:led80n6silcv1 2931.21 2931.82 2932.69 T:present80n6t4silcv2 2932.25 2933.13 2935.53 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.87 0.90 0.90 T:aegis128 0.89 0.91 0.93 T:aegis128l 0.98 0.99 1.01 T:aezv5 1.05 1.05 1.10 T:aezv3 1.01 1.06 1.07 aegis128l 1.14 1.15 1.18 T:aegis256 1.19 1.19 1.28 T:aezv4 1.22? 1.23? 1.39? T:tiaoxinv1 1.22? 1.24? 1.39? T:tiaoxinv2 1.25 1.27 1.32 aegis256 2.56 2.67 2.69 T:aes128otrsv3 2.73 2.75 2.77 T:morus640128v1 2.76? 2.79? 4.12? T:aeadaes128ocbtaglen128v1 2.88 2.89 2.91 T:aes128n8t8silcv2 2.89 2.90 2.90 T:aes128n12t8silcv2 2.90 2.90 2.91 T:aes128n12t8silcv3 2.92 2.97 3.03 T:colm0v1 3.00 3.06 3.08 T:morus640128v2 3.04 3.06 3.09 T:aes128n8t8clocv2 3.08 3.09 3.13 T:aes128n12t8clocv2 3.08 3.12 3.13 T:aes128n12t8clocv3 3.27 3.31 3.35 T:morus1280128v1 3.28 3.32 3.39 T:aes128otrcv3 3.31 3.36 3.40 T:morus1280256v1 3.38 3.38 3.40 T:aes128otrpv3 3.52 3.56 3.62 T:morus1280256v2 3.51? 3.59? 6.07? T:aeadaes256ocbtaglen128v1 3.53 3.60 3.67 T:morus1280128v2 3.64 3.66 3.67 T:aes256otrsv3 3.72? 3.83? 5.17? T:aeadaes192ocbtaglen128v1 4.08 4.11 4.14 T:aes128gcmv1 4.22 4.26 4.30 T:aes256otrcv3 4.26 4.28 4.30 T:aes256otrpv3 4.33 4.37 4.44 T:deoxysneq256128v1 4.34 4.40 4.48 T:deoxysneq128128v1 4.74 4.81 4.88 T:deoxysi128v141 4.87 4.94 4.97 aes256gcmv1 5.43 5.51 5.51 T:deoxysii128v141 5.65 5.66 5.67 T:deoxysi256v141 6.22 6.45 6.71 T:aesjambuv1 6.44 6.50 6.56 T:deoxyseq256128v1 6.73 6.77 6.84 T:deoxyseq128128v1 6.77 6.81 6.94 T:deoxysii256v141 7.95 8.00 8.04 T:norx6441v1 7.98 8.04 8.09 T:norx6441v2 8.12 8.12 8.12 T:ascon128av11 8.30 8.30 8.30 ascon128av12 8.30 8.30 8.31 T:ascon96v1 8.22 8.33 8.42 T:norx6441v3 10.20 10.30 10.46 T:norx3241v2 10.25 10.36 10.44 T:norx3241v1 10.42 10.42 10.42 ascon128v12 10.39 10.51 10.60 T:norx3241v3 10.53 10.53 10.53 T:ascon128v11 10.53 10.53 10.54 T:ascon128v1 11.52 11.62 12.04 T:lakekeyakv1 11.84 11.95 12.11 T:norx6461v3 11.85 11.96 12.08 T:norx6461v2 11.97 12.05 12.25 T:norx6461v1 13.39 13.47 13.76 T:riverkeyakv2 14.03 14.14 14.21 T:norx6444v3 14.39 14.43 14.55 T:lakekeyakv2 14.87 14.96 15.09 T:norx3261v3 15.11 15.47 15.50 T:norx3261v2 16.42 16.44 16.45 T:norx3261v1 16.91 17.00 17.11 T:seakeyakv2 17.26? 17.78? 19.65? T:oceankeyakv2 20.71 20.87 21.24 T:aes128n8clocv1 20.84 21.17 21.33 T:aes128n12clocv1 21.60 21.69 21.84 T:aes128otrsv1 21.89 22.00 22.30 T:aes128otrsv2 22.21 22.32 22.41 T:aes128otrpv1 22.49 22.57 22.69 T:aes128otrpv2 25.04 25.08 25.14 T:ketjeminorv2 26.06 26.84 27.58 T:twine80n6t4clocv2 26.46 26.84 27.14 T:twine80n6t4clocv3 27.79 27.90 28.18 T:aes256otrsv1 27.99 28.08 28.20 T:aes256otrsv2 28.37 28.37 28.38 T:acorn128v3 28.39 28.48 28.69 T:aes256otrpv1 28.59 28.64 28.68 T:aes256otrpv2 33.96 34.21 34.52 T:acorn128v2 34.44 34.52 34.68 T:ketjemajorv2 34.67 34.73 34.99 T:norx6444v2 37.71 37.78 37.89 T:norx6444v1 38.31 38.96 39.26 T:lunarkeyakv2 42.56 42.76 42.86 T:aeadaes128ocbtaglen96v1 42.63 42.93 43.29 T:aeadaes128ocbtaglen64v1 43.88 44.26 45.95 T:ketjesrv1 48.51 48.71 49.08 T:ketjesrv2 49.12 49.23 49.48 T:aeadaes192ocbtaglen64v1 49.27 49.56 49.66 T:aeadaes192ocbtaglen96v1 54.53 54.67 55.35 T:proest256otrv1 57.76 58.03 58.27 T:aeadaes256ocbtaglen96v1 57.86 58.09 58.35 T:aeadaes256ocbtaglen64v1 59.06 59.23 59.32 T:colm127v1 73.97 74.23 74.56 T:ketjejrv1 82.92 82.99 83.07 T:present80n6t4silcv3 93.57 93.61 93.85 T:proest128otrv1 96.40 96.83 97.30 T:ketjejrv2 98.82 99.13 99.64 T:deoxysneq128128v13 106.02 107.03 110.17 T:led80n6t4silcv3 113.78 114.60 115.68 T:aezv1 131.87 131.96 132.17 T:deoxysneq256128v13 132.78 133.28 133.99 T:deoxyseq128128v13 169.86 169.99 170.28 T:deoxyseq256128v13 1921.33 1935.60 2134.17 T:acorn128 2799.44 2808.19 2809.33 T:led80n6t4silcv2 2807.68 2815.35 2816.40 T:led80n6silcv1 2931.93 2932.99 2935.59 T:present80n6t4silcv2 2931.59 2933.27 2936.27 T:present80n6silcv1