VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20260831

[Page version: 20260922 09:00:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.32 0.33 0.35 T:tiaoxinv2 0.31? 0.34? 0.36? T:tiaoxinv1 0.38 0.38 0.39 T:aegis128l 0.40 0.40 0.41 aegis128l 0.58 0.59 0.59 T:aegis128 0.62 0.63 0.63 aegis256 0.68? 0.81? 0.94? T:aeadaes128ocbtaglen128v1 0.86 0.87 0.88 T:aes128otrsv3 0.87 0.87 0.88 T:aes128otrcv3 0.91 0.92 0.94 T:morus1280128v1 0.92 0.93 0.94 T:morus1280128v2 0.92 0.93 0.94 T:aes128otrpv3 0.78? 0.93? 1.14? T:aeadaes192ocbtaglen128v1 0.93 0.94 0.95 T:aezv4 0.93 0.95 0.96 T:aezv3 0.95 0.96 0.97 T:morus1280256v2 0.95 0.96 0.97 T:aezv5 0.98 0.98 0.99 T:morus1280256v1 1.08 1.09 1.10 T:aes256otrsv3 1.09 1.10 1.10 T:aes256otrcv3 1.14 1.16 1.17 T:morus640128v1 1.16 1.16 1.17 T:morus640128v2 1.16 1.17 1.18 T:aes256otrpv3 1.20 1.21 1.22 T:aeadaes256ocbtaglen128v1 1.30 1.32 1.36 T:deoxysi128v141 1.29 1.33 1.41 T:deoxysneq128128v1 1.47 1.51 1.55 T:deoxysneq256128v1 1.52 1.54 1.55 T:deoxysi256v141 2.33 2.36 2.39 T:lunarkeyakv2 2.48 2.49 2.50 T:colm0v1 2.54 2.56 2.57 T:aes128gcmv1 2.72 2.75 2.77 T:deoxysii128v141 2.75 2.77 2.78 T:norx6441v3 2.80 2.82 2.85 T:norx6441v2 2.83 2.85 2.86 aes256gcmv1 2.75? 2.98? 3.08? T:deoxyseq128128v1 3.05 3.07 3.08 T:seakeyakv2 3.16 3.19 3.22 T:oceankeyakv2 3.19 3.21 3.22 T:deoxysii256v141 3.30 3.33 3.34 T:norx6441v1 3.40 3.49 3.57 T:deoxyseq256128v1 3.86 3.88 3.90 T:norx3241v2 3.87 3.89 3.90 T:norx3241v3 4.17 4.23 4.26 T:norx6461v3 4.24 4.27 4.29 T:norx6461v2 4.28 4.30 4.33 T:norx6444v3 4.29 4.31 4.33 T:norx6444v2 4.63 4.65 4.66 T:norx3241v1 4.97 5.01 5.04 T:norx6444v1 5.00 5.01 5.03 T:norx6461v1 5.12 5.13 5.16 T:lakekeyakv2 5.11 5.14 5.17 T:lakekeyakv1 5.20 5.21 5.21 T:aes128n12t8silcv2 5.21 5.21 5.21 T:aes128n12t8silcv3 5.21 5.21 5.22 T:aes128n8t8clocv2 5.21 5.21 5.22 T:aes128n12t8clocv3 5.21 5.21 5.22 T:aes128n12t8clocv2 5.21 5.21 5.22 T:aes128n8t8silcv2 5.77 5.79 5.80 T:norx3261v3 5.80 5.83 5.86 T:norx3261v2 7.58 7.60 7.62 T:norx3261v1 7.73 7.76 7.79 T:acorn128v2 7.99 8.00 8.03 T:acorn128v3 8.60 8.62 8.65 T:ascon128av11 8.59 8.62 8.65 T:ascon96v1 8.79 8.80 8.83 ascon128av12 9.59 9.61 9.62 T:ketjemajorv2 10.36 10.37 10.37 T:aesjambuv1 10.95 10.97 11.03 T:ketjeminorv2 12.79 12.83 12.89 T:riverkeyakv2 12.82 12.86 12.89 T:ascon128v11 12.84 12.86 12.87 ascon128v12 12.89 12.92 12.94 T:ascon128v1 14.66 14.67 14.69 T:twine80n6t4clocv3 15.35 15.37 15.39 T:twine80n6t4clocv2 16.05 16.08 16.18 T:aes128otrsv1 16.06 16.09 16.12 T:aes128otrsv2 16.11 16.14 16.17 T:aes128otrpv1 16.15 16.17 16.20 T:aes128otrpv2 21.04 21.11 21.13 T:aes256otrpv1 21.06 21.12 21.16 T:aes256otrpv2 21.82 21.88 21.98 T:aes256otrsv2 22.16 22.19 22.22 T:aes256otrsv1 25.94 25.98 26.03 T:proest256otrv1 26.70 26.75 26.79 T:aes128n12clocv1 26.72 26.76 26.78 T:aes128n8clocv1 27.46 27.51 27.58 T:aeadaes128ocbtaglen64v1 27.49 27.53 27.62 T:aeadaes128ocbtaglen96v1 31.78 31.99 32.02 T:ketjesrv1 32.45 32.50 32.98 T:aeadaes192ocbtaglen64v1 32.49 32.53 32.61 T:aeadaes192ocbtaglen96v1 33.23 33.25 33.28 T:ketjesrv2 37.31 37.37 37.44 T:aeadaes256ocbtaglen64v1 37.43 37.51 37.56 T:aeadaes256ocbtaglen96v1 60.38 60.45 60.56 T:colm127v1 60.91 62.07 62.19 T:proest128otrv1 66.11 66.27 66.41 T:ketjejrv1 70.77? 72.15? 90.77? T:present80n6t4silcv3 88.38 88.47 88.59 T:deoxysneq128128v13 108.62 109.04 109.34 T:ketjejrv2 119.05 119.38 121.18 T:led80n6t4silcv3 135.11 135.40 135.97 T:deoxysneq256128v13 179.36 179.51 179.67 T:deoxyseq128128v13 192.08 192.35 192.72 T:aezv1 271.04 271.46 271.69 T:deoxyseq256128v13 419.95 421.45 423.76 T:acorn128 5461.65 5462.32 5464.82 T:present80n6t4silcv2 5463.09 5467.03 5470.12 T:present80n6silcv1 8351.08 8360.19 8365.43 T:led80n6silcv1 8358.80 8369.03 8378.28 T:led80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.37 0.38 0.40 T:aegis128l 0.40 0.40 0.42 aegis128l 0.44 0.45 0.46 T:tiaoxinv2 0.44 0.45 0.47 T:tiaoxinv1 0.58 0.59 0.60 T:aegis128 0.62 0.63 0.63 aegis256 0.69? 0.81? 0.95? T:aeadaes128ocbtaglen128v1 0.86 0.86 0.87 T:aes128otrsv3 0.86 0.86 0.87 T:aes128otrcv3 0.92 0.93 0.94 T:aes128otrpv3 0.92 0.93 0.94 T:morus1280128v2 0.91 0.93 0.94 T:morus1280128v1 0.93 0.94 0.95 T:aezv4 0.77? 0.94? 1.05? T:aeadaes192ocbtaglen128v1 0.94 0.94 0.96 T:morus1280256v2 0.94 0.95 0.96 T:morus1280256v1 0.94 0.95 0.96 T:aezv3 0.95 0.96 0.97 T:aezv5 1.08 1.09 1.09 T:aes256otrcv3 1.09 1.10 1.11 T:aes256otrsv3 1.15 1.15 1.16 T:morus640128v1 1.17 1.17 1.18 T:morus640128v2 1.17 1.18 1.20 T:aes256otrpv3 1.20 1.21 1.23 T:aeadaes256ocbtaglen128v1 1.32? 1.53? 1.57? T:deoxysi128v141 1.59 1.61 1.62 T:deoxysneq128128v1 1.77 1.78 1.81 T:deoxysneq256128v1 1.79 1.80 1.82 T:deoxysi256v141 2.40 2.44 2.49 T:lunarkeyakv2 2.49 2.52 2.53 T:colm0v1 2.75 2.77 2.78 T:deoxysii128v141 2.75 2.77 2.79 T:norx6441v2 2.76 2.80 2.83 T:norx6441v3 3.09 3.10 3.11 T:aes128gcmv1 3.15 3.17 3.20 T:seakeyakv2 3.17 3.19 3.20 T:deoxysii256v141 3.27 3.31 3.37 T:oceankeyakv2 3.33 3.36 3.40 T:norx6441v1 3.29 3.36 3.42 T:deoxyseq128128v1 3.78 3.80 3.81 T:norx3241v3 3.80 3.82 3.83 T:norx3241v2 3.81 3.82 3.83 aes256gcmv1 3.76 3.87 3.96 T:deoxyseq256128v1 4.20 4.22 4.26 T:norx6461v2 4.23 4.26 4.28 T:norx6461v3 4.28 4.30 4.33 T:norx6444v2 4.27 4.31 4.33 T:norx6444v3 4.54 4.55 4.58 T:norx3241v1 4.92 4.94 4.99 T:lakekeyakv1 4.93 4.96 4.99 T:norx6444v1 5.10 5.12 5.15 T:norx6461v1 5.12 5.12 5.14 T:aes128n12t8clocv3 5.12 5.13 5.14 T:aes128n12t8clocv2 5.12 5.13 5.13 T:aes128n8t8silcv2 5.12 5.13 5.13 T:aes128n8t8clocv2 5.12 5.13 5.14 T:aes128n12t8silcv2 5.12 5.13 5.14 T:aes128n12t8silcv3 5.13 5.14 5.16 T:lakekeyakv2 5.72 5.73 5.75 T:norx3261v3 5.77 5.79 5.81 T:norx3261v2 7.39 7.41 7.43 T:norx3261v1 7.99 8.01 8.02 T:acorn128v3 7.99 8.02 8.05 T:acorn128v2 8.66 8.68 8.71 T:ascon128av11 8.68 8.71 8.73 T:ketjemajorv2 8.65 8.72 8.78 ascon128av12 8.71 8.73 8.76 T:ascon96v1 10.71 10.71 10.72 T:aesjambuv1 11.49 11.52 11.61 T:ketjeminorv2 12.78 12.80 12.82 ascon128v12 12.81 12.86 12.87 T:ascon128v1 12.87 12.89 12.90 T:ascon128v11 12.95 12.98 12.99 T:riverkeyakv2 14.55 14.56 14.59 T:twine80n6t4clocv3 15.37 15.39 15.40 T:twine80n6t4clocv2 16.43 16.47 16.55 T:aes128otrpv1 16.50 16.53 16.55 T:aes128otrpv2 16.48 16.55 16.58 T:aes128otrsv1 16.59 16.63 16.65 T:aes128otrsv2 21.39 21.42 21.51 T:aes256otrpv1 21.44 21.49 21.56 T:aes256otrpv2 22.20 22.25 22.37 T:aes256otrsv2 22.29 22.33 22.36 T:aes256otrsv1 25.82 25.85 25.90 T:aes128n12clocv1 25.83 25.89 25.97 T:proest256otrv1 26.35 26.38 26.40 T:aes128n8clocv1 32.75 32.88 32.92 T:ketjesrv1 33.19 33.38 33.51 T:ketjesrv2 36.75 36.80 36.86 T:aeadaes128ocbtaglen64v1 36.78 36.88 36.99 T:aeadaes128ocbtaglen96v1 43.76 43.82 43.90 T:aeadaes192ocbtaglen64v1 43.80 43.88 43.99 T:aeadaes192ocbtaglen96v1 50.80 50.86 50.91 T:aeadaes256ocbtaglen64v1 50.95 51.00 51.10 T:aeadaes256ocbtaglen96v1 58.58 58.70 58.74 T:proest128otrv1 67.19 67.37 67.80 T:ketjejrv1 70.75? 72.11? 91.24? T:present80n6t4silcv3 78.85 78.90 78.99 T:colm127v1 108.45 108.80 117.76 T:ketjejrv2 118.88 118.97 119.06 T:led80n6t4silcv3 122.34 122.57 123.48 T:deoxysneq128128v13 173.87 174.15 174.39 T:deoxysneq256128v13 179.47 179.61 179.77 T:deoxyseq128128v13 191.72 192.10 192.41 T:aezv1 271.33 271.69 272.01 T:deoxyseq256128v13 444.35 445.36 446.38 T:acorn128 5462.08 5463.00 5464.85 T:present80n6t4silcv2 5464.71 5467.70 5469.98 T:present80n6silcv1 8362.95 8368.03 8372.29 T:led80n6silcv1 8369.88 8376.17 8395.27 T:led80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.37 0.37 0.38 T:aezv3 0.37 0.37 0.38 T:aezv4 0.37 0.38 0.39 T:aegis128l 0.38 0.39 0.40 T:aezv5 0.44 0.45 0.46 T:tiaoxinv1 0.44 0.45 0.46 T:tiaoxinv2 0.47 0.47 0.48 aegis128l 0.58 0.59 0.60 T:aegis128 0.69 0.69 0.69 aegis256 0.70? 0.81? 0.91? T:aeadaes128ocbtaglen128v1 0.85 0.86 0.87 T:aes128otrsv3 0.86 0.87 0.87 T:aes128otrcv3 0.91 0.91 0.93 T:morus1280128v2 0.90 0.92 0.94 T:morus1280128v1 0.92 0.93 0.94 T:aes128otrpv3 0.84? 0.94? 1.11? T:aeadaes192ocbtaglen128v1 0.94 0.94 0.95 T:morus1280256v2 0.94 0.95 0.96 T:morus1280256v1 1.08 1.09 1.09 T:aes256otrcv3 1.09 1.10 1.10 T:aes256otrsv3 1.15 1.15 1.16 T:morus640128v1 1.17 1.17 1.18 T:morus640128v2 1.17 1.18 1.19 T:aes256otrpv3 1.20 1.22 1.25 T:aeadaes256ocbtaglen128v1 1.51 1.53 1.55 T:deoxysi128v141 1.58 1.60 1.63 T:deoxysneq128128v1 1.77 1.79 1.82 T:deoxysi256v141 1.78 1.79 1.80 T:deoxysneq256128v1 2.46 2.50 2.52 T:lunarkeyakv2 2.49 2.51 2.53 T:colm0v1 2.75 2.76 2.79 T:norx6441v2 2.75 2.78 2.79 T:deoxysii128v141 2.77 2.80 2.83 T:norx6441v3 3.10 3.10 3.12 T:aes128gcmv1 3.19 3.20 3.22 T:deoxysii256v141 3.20 3.23 3.25 T:seakeyakv2 3.34 3.36 3.38 T:norx6441v1 3.34 3.36 3.38 T:oceankeyakv2 3.24 3.36 3.43 T:deoxyseq128128v1 3.78 3.79 3.80 T:norx3241v3 3.81 3.82 3.83 aes256gcmv1 3.82 3.83 3.84 T:norx3241v2 3.79 3.86 3.93 T:deoxyseq256128v1 4.20 4.22 4.24 T:norx6461v2 4.24 4.27 4.31 T:norx6461v3 4.33 4.36 4.39 T:norx6444v2 4.34 4.37 4.40 T:norx6444v3 4.54 4.56 4.58 T:norx3241v1 4.97 4.99 5.02 T:lakekeyakv1 4.99 5.02 5.04 T:norx6444v1 5.10 5.12 5.14 T:norx6461v1 5.12 5.13 5.14 T:aes128n12t8clocv3 5.12 5.13 5.14 T:aes128n12t8silcv3 5.12 5.13 5.14 T:aes128n12t8clocv2 5.12 5.13 5.14 T:aes128n8t8silcv2 5.12 5.13 5.14 T:aes128n8t8clocv2 5.12 5.13 5.14 T:aes128n12t8silcv2 5.19 5.20 5.22 T:lakekeyakv2 5.72 5.73 5.75 T:norx3261v3 5.77 5.79 5.81 T:norx3261v2 7.39 7.40 7.42 T:norx3261v1 7.99 8.00 8.03 T:acorn128v2 7.99 8.01 8.02 T:acorn128v3 8.67 8.69 8.71 T:ascon128av11 8.69 8.72 8.75 T:ketjemajorv2 8.70 8.72 8.74 ascon128av12 8.72 8.74 8.77 T:ascon96v1 10.71 10.71 10.71 T:aesjambuv1 11.54 11.58 11.61 T:ketjeminorv2 12.79 12.79 12.81 ascon128v12 12.83 12.86 12.87 T:ascon128v1 12.86 12.88 12.90 T:ascon128v11 13.00 13.02 13.05 T:riverkeyakv2 14.55 14.57 14.60 T:twine80n6t4clocv3 15.37 15.39 15.41 T:twine80n6t4clocv2 16.51 16.54 16.62 T:aes128otrpv1 16.55 16.59 16.61 T:aes128otrpv2 16.54 16.63 16.64 T:aes128otrsv1 16.65 16.68 16.70 T:aes128otrsv2 21.42 21.46 21.56 T:aes256otrpv1 21.52 21.57 21.63 T:aes256otrpv2 22.26 22.32 22.43 T:aes256otrsv2 22.37 22.40 22.43 T:aes256otrsv1 25.81 25.86 25.90 T:aes128n12clocv1 25.84 25.88 25.98 T:proest256otrv1 26.33 26.37 26.44 T:aes128n8clocv1 32.79 32.91 33.00 T:ketjesrv1 33.29 33.41 33.58 T:ketjesrv2 36.75 36.80 36.86 T:aeadaes128ocbtaglen64v1 36.81 36.91 37.04 T:aeadaes128ocbtaglen96v1 43.78 43.83 43.91 T:aeadaes192ocbtaglen64v1 43.84 43.92 44.01 T:aeadaes192ocbtaglen96v1 50.79 50.86 50.93 T:aeadaes256ocbtaglen64v1 50.98 51.07 51.16 T:aeadaes256ocbtaglen96v1 58.58 58.70 58.75 T:proest128otrv1 67.21 67.33 67.49 T:ketjejrv1 70.73? 72.18? 91.27? T:present80n6t4silcv3 77.63 77.68 77.74 T:colm127v1 108.74 109.12 114.58 T:ketjejrv2 118.87 118.95 119.04 T:led80n6t4silcv3 122.40 122.71 124.41 T:deoxysneq128128v13 173.89 174.19 174.52 T:deoxysneq256128v13 179.17 179.62 180.15 T:deoxyseq128128v13 191.49 191.74 192.06 T:aezv1 271.39 271.71 272.02 T:deoxyseq256128v13 444.26 445.45 446.48 T:acorn128 5462.20 5462.89 5463.78 T:present80n6t4silcv2 5462.51 5467.11 5469.28 T:present80n6silcv1 8360.66 8368.28 8372.70 T:led80n6silcv1 8369.36 8376.99 8395.37 T:led80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.28 0.29 0.30 T:tiaoxinv1 0.28 0.29 0.30 T:tiaoxinv2 0.33 0.34 0.35 T:aegis128l 0.34 0.35 0.36 aegis128l 0.56 0.56 0.56 T:aegis128 0.57 0.58 0.58 aegis256 0.67 0.68 0.68 T:aezv4 0.68 0.69 0.69 T:aezv3 0.69 0.69 0.70 T:aezv5 0.73? 0.80? 0.88? T:aeadaes128ocbtaglen128v1 0.86 0.87 0.87 T:aes128otrcv3 0.86 0.87 0.88 T:morus1280128v1 0.86 0.87 0.89 T:morus1280128v2 0.91 0.92 0.92 T:morus1280256v2 0.84? 0.93? 1.02? T:aeadaes192ocbtaglen128v1 0.95 0.95 0.96 T:morus1280256v1 0.97 0.98 0.98 T:aes128otrpv3 1.09 1.10 1.10 T:aes256otrcv3 1.12 1.13 1.14 T:morus640128v1 1.13 1.14 1.14 T:morus640128v2 1.25 1.27 1.27 T:aes256otrpv3 1.34 1.35 1.37 T:deoxysi128v141 1.34 1.37 1.41 T:deoxysneq128128v1 1.55 1.56 1.57 T:deoxysneq256128v1 1.60 1.61 1.62 T:aeadaes256ocbtaglen128v1 1.60 1.61 1.62 T:deoxysi256v141 1.78 1.78 1.80 T:colm0v1 2.17 2.18 2.19 T:aes128gcmv1 2.22 2.23 2.24 T:deoxysii128v141 2.24 2.27 2.29 T:deoxyseq128128v1 2.32 2.33 2.34 aes256gcmv1 2.49 2.50 2.52 T:deoxysii256v141 2.59 2.60 2.61 T:deoxyseq256128v1 2.59 2.60 2.61 T:seakeyakv2 2.69 2.70 2.71 T:oceankeyakv2 2.80 2.82 2.85 T:norx6441v3 2.81 2.82 2.84 T:norx6441v2 2.99 3.00 3.00 T:aes128otrsv3 3.21 3.24 3.26 T:lunarkeyakv2 3.36 3.37 3.39 T:norx6441v1 3.85 3.86 3.87 T:norx3241v2 3.86 3.87 3.89 T:norx3241v3 4.11 4.11 4.11 T:aes256otrsv3 4.24 4.26 4.28 T:norx6461v3 4.25 4.27 4.28 T:norx6444v2 4.26 4.27 4.29 T:norx6444v3 4.27 4.28 4.29 T:norx6461v2 4.57 4.59 4.60 T:lakekeyakv2 4.65 4.66 4.67 T:norx3241v1 4.86 4.88 4.90 T:lakekeyakv1 4.92 4.93 4.96 T:norx6444v1 5.04 5.07 5.08 T:norx6461v1 5.16 5.17 5.17 T:aes128n12t8silcv3 5.16 5.17 5.17 T:aes128n8t8silcv2 5.16 5.17 5.17 T:aes128n12t8silcv2 5.16 5.17 5.17 T:aes128n8t8clocv2 5.17 5.17 5.17 T:aes128n12t8clocv3 5.17 5.17 5.17 T:aes128n12t8clocv2 5.78 5.80 5.81 T:norx3261v2 5.80 5.82 5.84 T:norx3261v3 7.58 7.59 7.61 T:norx3261v1 7.88 7.89 7.90 T:acorn128v3 8.00 8.01 8.03 T:acorn128v2 8.11 8.13 8.15 T:ketjemajorv2 8.59 8.62 8.64 T:ascon96v1 8.69 8.72 8.74 ascon128av12 8.69 8.73 8.74 T:ascon128av11 9.32 9.33 9.34 T:riverkeyakv2 9.96 10.00 10.01 T:ketjeminorv2 10.40 10.40 10.40 T:aesjambuv1 12.73 12.75 12.77 ascon128v12 12.74 12.78 12.82 T:ascon128v1 12.77 12.81 12.82 T:ascon128v11 14.44 14.46 14.47 T:twine80n6t4clocv3 15.13 15.23 15.27 T:twine80n6t4clocv2 15.48 15.50 15.59 T:aes128otrsv1 15.50 15.52 15.56 T:aes128otrsv2 15.59 15.61 15.62 T:aes128otrpv1 15.61 15.63 15.64 T:aes128otrpv2 20.15 20.19 20.24 T:aes256otrsv2 20.30 20.32 20.35 T:aes128n8clocv1 20.31 20.34 20.37 T:aes128n12clocv1 20.32 20.34 20.37 T:aes256otrsv1 20.51 20.53 20.55 T:aes256otrpv1 20.52 20.55 20.57 T:aes256otrpv2 26.10 26.14 26.18 T:proest256otrv1 27.00 27.03 27.04 T:aeadaes128ocbtaglen64v1 27.02 27.05 27.08 T:aeadaes128ocbtaglen96v1 28.92 29.02 29.04 T:ketjesrv1 30.77 30.80 30.84 T:ketjesrv2 32.03 32.07 32.33 T:aeadaes192ocbtaglen64v1 32.05 32.08 32.12 T:aeadaes192ocbtaglen96v1 36.92 36.95 36.98 T:aeadaes256ocbtaglen64v1 36.99 37.02 37.05 T:aeadaes256ocbtaglen96v1 44.47 44.51 44.59 T:colm127v1 59.27 60.45 60.57 T:proest128otrv1 62.13 62.22 62.31 T:ketjejrv1 70.92? 71.85? 80.90? T:present80n6t4silcv3 88.58 88.73 88.92 T:deoxysneq128128v13 106.22 106.44 106.63 T:ketjejrv2 118.34 118.51 119.43 T:led80n6t4silcv3 125.89 126.17 126.96 T:aezv1 133.05 133.60 133.89 T:deoxyseq128128v13 134.83 134.98 135.72 T:deoxysneq256128v13 202.68 202.95 203.08 T:deoxyseq256128v13 420.96 421.92 423.79 T:acorn128 4096.22 4099.08 4107.78 T:present80n6t4silcv2 4097.79 4100.04 4101.90 T:present80n6silcv1 6266.37 6271.96 6276.72 T:led80n6silcv1 6272.35 6277.30 6280.82 T:led80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.33 0.34 0.35 T:aegis128l 0.34 0.35 0.36 T:tiaoxinv1 0.33 0.35 0.36 T:tiaoxinv2 0.36 0.36 0.37 aegis128l 0.55 0.56 0.56 T:aegis128 0.57 0.58 0.58 aegis256 0.67 0.67 0.68 T:aezv4 0.68 0.69 0.70 T:aezv3 0.68 0.69 0.70 T:aezv5 0.71? 0.80? 0.88? T:aeadaes128ocbtaglen128v1 0.86 0.86 0.87 T:aes128otrcv3 0.86 0.87 0.88 T:morus1280128v2 0.87 0.88 0.89 T:morus1280128v1 0.90 0.90 0.91 T:morus1280256v2 0.90 0.90 0.91 T:morus1280256v1 0.86? 0.93? 1.03? T:aeadaes192ocbtaglen128v1 0.97 0.98 0.98 T:aes128otrpv3 1.08 1.09 1.09 T:aes256otrcv3 1.13 1.13 1.14 T:morus640128v2 1.13 1.14 1.14 T:morus640128v1 1.25 1.25 1.26 T:aes256otrpv3 1.44 1.47 1.48 T:deoxysi128v141 1.51 1.52 1.52 T:deoxysneq128128v1 1.60 1.61 1.63 T:aeadaes256ocbtaglen128v1 1.65 1.67 1.68 T:deoxysneq256128v1 1.70 1.71 1.72 T:deoxysi256v141 1.79 1.80 1.81 T:colm0v1 2.19 2.20 2.21 T:deoxysii128v141 2.36 2.43 2.46 T:deoxyseq128128v1 2.45 2.46 2.46 T:aes128gcmv1 2.51 2.52 2.54 T:deoxysii256v141 2.65 2.66 2.67 T:seakeyakv2 2.72 2.74 2.75 T:oceankeyakv2 2.78 2.79 2.81 T:norx6441v3 2.78 2.79 2.81 T:norx6441v2 2.79 2.80 2.81 T:deoxyseq256128v1 2.81 2.82 2.83 aes256gcmv1 2.99 2.99 3.00 T:aes128otrsv3 3.18 3.21 3.24 T:lunarkeyakv2 3.35 3.37 3.39 T:norx6441v1 3.82 3.83 3.84 T:norx3241v2 3.82 3.84 3.85 T:norx3241v3 4.11 4.11 4.11 T:aes256otrsv3 4.20 4.23 4.24 T:norx6461v3 4.24 4.25 4.28 T:norx6444v3 4.25 4.26 4.28 T:norx6444v2 4.25 4.26 4.28 T:norx6461v2 4.52 4.54 4.56 T:lakekeyakv2 4.59 4.60 4.61 T:norx3241v1 4.73 4.76 4.79 T:lakekeyakv1 4.90 4.91 4.93 T:norx6444v1 5.08 5.10 5.12 T:norx6461v1 5.12 5.12 5.13 T:aes128n12t8silcv3 5.12 5.12 5.13 T:aes128n12t8clocv2 5.12 5.12 5.13 T:aes128n12t8clocv3 5.12 5.13 5.13 T:aes128n12t8silcv2 5.12 5.13 5.13 T:aes128n8t8silcv2 5.12 5.13 5.13 T:aes128n8t8clocv2 5.75 5.76 5.78 T:norx3261v3 5.76 5.77 5.78 T:norx3261v2 7.49 7.51 7.53 T:norx3261v1 7.60 7.65 7.70 T:ketjemajorv2 7.75 7.76 7.78 T:acorn128v2 8.13 8.14 8.14 T:acorn128v3 8.64 8.66 8.67 T:ascon128av11 8.65 8.67 8.69 ascon128av12 8.67 8.69 8.72 T:ascon96v1 9.37 9.38 9.40 T:riverkeyakv2 10.25 10.27 10.31 T:ketjeminorv2 10.57 10.58 10.58 T:aesjambuv1 12.73 12.74 12.76 ascon128v12 12.73 12.76 12.78 T:ascon128v11 12.76 12.78 12.79 T:ascon128v1 14.40 14.42 14.43 T:twine80n6t4clocv3 15.18 15.26 15.28 T:twine80n6t4clocv2 15.73 15.75 15.76 T:aes128otrsv1 15.74 15.77 15.80 T:aes128otrpv1 15.75 15.78 15.81 T:aes128otrsv2 15.80 15.81 15.83 T:aes128otrpv2 19.84 19.87 19.90 T:aes128n12clocv1 20.11 20.14 20.16 T:aes128n8clocv1 20.34 20.38 20.43 T:aes256otrsv2 20.39 20.42 20.44 T:aes256otrsv1 20.66 20.70 20.74 T:aes256otrpv1 20.71 20.75 20.77 T:aes256otrpv2 26.04 26.08 26.15 T:proest256otrv1 29.41 29.49 29.52 T:ketjesrv1 30.77 30.84 30.91 T:ketjesrv2 31.76 31.79 31.83 T:aeadaes128ocbtaglen64v1 31.72 31.80 31.84 T:aeadaes128ocbtaglen96v1 37.74 37.79 37.85 T:aeadaes192ocbtaglen96v1 37.74 37.80 37.87 T:aeadaes192ocbtaglen64v1 43.72 43.76 43.80 T:aeadaes256ocbtaglen64v1 43.82 43.87 44.06 T:aeadaes256ocbtaglen96v1 53.71 53.75 53.79 T:colm127v1 57.92 58.06 59.17 T:proest128otrv1 62.64 62.75 62.87 T:ketjejrv1 70.80? 71.52? 81.03? T:present80n6t4silcv3 105.23 105.58 106.47 T:deoxysneq128128v13 105.94 106.37 110.01 T:ketjejrv2 118.31 118.44 119.37 T:led80n6t4silcv3 125.94 126.19 127.09 T:aezv1 133.75 133.92 134.21 T:deoxyseq128128v13 154.12 154.38 155.08 T:deoxysneq256128v13 202.91 203.35 203.52 T:deoxyseq256128v13 433.99 435.21 436.86 T:acorn128 4098.31 4099.97 4100.89 T:present80n6silcv1 4098.12 4101.05 4106.64 T:present80n6t4silcv2 6271.90 6279.30 6285.00 T:led80n6silcv1 6278.98 6282.15 6285.68 T:led80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.33 0.34 0.34 T:aegis128l 0.34 0.35 0.36 T:tiaoxinv2 0.34 0.35 0.36 T:tiaoxinv1 0.38 0.39 0.40 aegis128l 0.39 0.39 0.40 T:aezv4 0.39 0.40 0.40 T:aezv3 0.40 0.40 0.41 T:aezv5 0.55 0.56 0.56 T:aegis128 0.61 0.61 0.62 aegis256 0.74? 0.79? 0.85? T:aeadaes128ocbtaglen128v1 0.86 0.86 0.87 T:aes128otrcv3 0.87 0.88 0.88 T:morus1280128v1 0.87 0.88 0.88 T:morus1280128v2 0.90 0.90 0.91 T:morus1280256v2 0.90 0.91 0.91 T:morus1280256v1 0.84? 0.93? 1.00? T:aeadaes192ocbtaglen128v1 0.97 0.98 0.98 T:aes128otrpv3 1.09 1.09 1.09 T:aes256otrcv3 1.13 1.13 1.13 T:morus640128v2 1.13 1.13 1.14 T:morus640128v1 1.25 1.26 1.26 T:aes256otrpv3 1.43 1.44 1.46 T:deoxysi128v141 1.50 1.51 1.52 T:deoxysneq128128v1 1.60 1.61 1.63 T:aeadaes256ocbtaglen128v1 1.66 1.67 1.68 T:deoxysneq256128v1 1.70 1.71 1.72 T:deoxysi256v141 1.79 1.80 1.81 T:colm0v1 2.20 2.21 2.22 T:deoxysii128v141 2.40 2.43 2.45 T:deoxyseq128128v1 2.45 2.45 2.46 T:aes128gcmv1 2.51 2.54 2.56 T:deoxysii256v141 2.69 2.70 2.71 T:seakeyakv2 2.75 2.77 2.78 T:oceankeyakv2 2.78 2.79 2.80 T:norx6441v3 2.78 2.79 2.81 T:norx6441v2 2.78 2.80 2.82 T:deoxyseq256128v1 2.81 2.82 2.82 aes256gcmv1 2.99 2.99 3.00 T:aes128otrsv3 3.19 3.23 3.27 T:lunarkeyakv2 3.36 3.37 3.39 T:norx6441v1 3.82 3.83 3.84 T:norx3241v3 3.84 3.85 3.86 T:norx3241v2 4.11 4.11 4.11 T:aes256otrsv3 4.21 4.22 4.25 T:norx6461v3 4.25 4.27 4.28 T:norx6461v2 4.28 4.29 4.31 T:norx6444v2 4.29 4.30 4.31 T:norx6444v3 4.55 4.57 4.58 T:lakekeyakv2 4.59 4.60 4.61 T:norx3241v1 4.77 4.79 4.82 T:lakekeyakv1 4.93 4.95 4.97 T:norx6444v1 5.08 5.10 5.11 T:norx6461v1 5.12 5.13 5.13 T:aes128n12t8silcv2 5.12 5.13 5.13 T:aes128n8t8silcv2 5.12 5.13 5.13 T:aes128n12t8clocv3 5.12 5.13 5.13 T:aes128n12t8silcv3 5.12 5.13 5.13 T:aes128n12t8clocv2 5.12 5.13 5.13 T:aes128n8t8clocv2 5.74 5.75 5.77 T:norx3261v3 5.76 5.77 5.79 T:norx3261v2 7.50 7.51 7.52 T:norx3261v1 7.64 7.67 7.69 T:ketjemajorv2 7.75 7.76 7.77 T:acorn128v2 8.13 8.13 8.14 T:acorn128v3 8.65 8.66 8.67 T:ascon128av11 8.67 8.68 8.70 T:ascon96v1 8.68 8.69 8.70 ascon128av12 9.41 9.41 9.42 T:riverkeyakv2 10.26 10.28 10.31 T:ketjeminorv2 10.57 10.58 10.58 T:aesjambuv1 12.73 12.74 12.75 ascon128v12 12.74 12.77 12.78 T:ascon128v11 12.76 12.78 12.79 T:ascon128v1 14.39 14.41 14.42 T:twine80n6t4clocv3 15.14 15.24 15.27 T:twine80n6t4clocv2 15.75 15.77 15.79 T:aes128otrsv1 15.79 15.80 15.83 T:aes128otrpv1 15.79 15.81 15.85 T:aes128otrsv2 15.83 15.85 15.87 T:aes128otrpv2 19.85 19.88 19.90 T:aes128n12clocv1 20.11 20.14 20.16 T:aes128n8clocv1 20.36 20.41 20.46 T:aes256otrsv2 20.42 20.45 20.48 T:aes256otrsv1 20.71 20.75 20.78 T:aes256otrpv1 20.76 20.78 20.79 T:aes256otrpv2 26.08 26.10 26.15 T:proest256otrv1 29.45 29.54 29.56 T:ketjesrv1 30.75 30.81 30.91 T:ketjesrv2 31.75 31.78 31.83 T:aeadaes128ocbtaglen64v1 31.73 31.80 31.83 T:aeadaes128ocbtaglen96v1 37.77 37.80 37.84 T:aeadaes192ocbtaglen96v1 37.73 37.81 37.90 T:aeadaes192ocbtaglen64v1 43.73 43.77 43.80 T:aeadaes256ocbtaglen64v1 43.80 43.90 44.06 T:aeadaes256ocbtaglen96v1 53.11 53.14 53.19 T:colm127v1 57.93 58.11 59.19 T:proest128otrv1 62.67 62.77 62.86 T:ketjejrv1 70.85? 71.51? 81.02? T:present80n6t4silcv3 105.18 105.58 106.55 T:deoxysneq128128v13 105.97 106.44 109.14 T:ketjejrv2 118.32 118.43 119.26 T:led80n6t4silcv3 125.72 125.97 126.88 T:aezv1 133.15 133.70 133.99 T:deoxyseq128128v13 154.15 154.41 155.09 T:deoxysneq256128v13 202.90 203.32 203.58 T:deoxyseq256128v13 433.86 434.69 436.56 T:acorn128 4096.98 4097.79 4099.38 T:present80n6t4silcv2 4098.46 4100.26 4101.82 T:present80n6silcv1 6273.26 6277.91 6282.01 T:led80n6silcv1 6278.97 6282.76 6286.94 T:led80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.22? 0.24? 0.27? T:tiaoxinv2 0.23? 0.24? 0.27? T:tiaoxinv1 0.29 0.29 0.30 T:aegis128l 0.29 0.31 0.32 aegis128l 0.40 0.41 0.42 T:aezv4 0.41 0.42 0.43 T:aezv5 0.42 0.42 0.43 T:aezv3 0.51 0.52 0.53 T:aegis128 0.53 0.53 0.54 aegis256 0.65? 0.78? 0.92? T:aeadaes128ocbtaglen128v1 0.80 0.82 0.86 T:morus1280128v1 0.81 0.83 0.85 T:morus1280128v2 0.86 0.86 0.87 T:aes128otrcv3 0.88 0.89 0.90 T:morus1280256v2 0.76? 0.92? 1.05? T:aeadaes192ocbtaglen128v1 0.92 0.92 0.93 T:morus1280256v1 1.00 1.03 1.04 T:aes128otrpv3 1.09 1.09 1.10 T:aes256otrcv3 1.10 1.11 1.12 T:colm0v1 1.11 1.12 1.13 T:morus640128v1 1.12 1.12 1.13 T:morus640128v2 1.29 1.30 1.32 T:deoxysii128v141 1.30 1.33 1.36 T:deoxyseq128128v1 1.31 1.34 1.35 T:aes256otrpv3 1.30 1.35 1.37 T:deoxysi128v141 1.33 1.35 1.37 T:deoxysneq128128v1 1.45 1.47 1.50 T:deoxysneq256128v1 1.48 1.50 1.53 T:deoxysii256v141 1.47 1.50 1.53 T:deoxysi256v141 1.49 1.51 1.54 T:deoxyseq256128v1 1.79 1.80 1.82 aes256gcmv1 1.80 1.81 1.82 T:aes128gcmv1 2.00 2.02 2.03 T:aeadaes256ocbtaglen128v1 2.09 2.11 2.13 T:oceankeyakv2 2.08 2.12 2.15 T:lunarkeyakv2 2.47 2.51 2.53 T:seakeyakv2 2.81 2.83 2.85 T:norx6441v2 2.82 2.84 2.87 T:norx6441v3 3.40 3.41 3.44 T:norx6441v1 3.83 3.84 3.86 T:norx3241v2 3.84 3.86 3.89 T:norx3241v3 4.07 4.08 4.11 T:lakekeyakv2 4.21 4.22 4.23 T:norx6444v2 4.20 4.22 4.23 T:norx6444v3 4.24 4.27 4.29 T:norx6461v3 4.28 4.30 4.32 T:norx6461v2 4.53 4.54 4.56 T:lakekeyakv1 4.65 4.67 4.69 T:norx3241v1 4.87 4.88 4.90 T:norx6444v1 5.06 5.07 5.09 T:norx6461v1 5.12 5.12 5.12 T:aes128n8t8silcv2 5.12 5.12 5.13 T:aes128n12t8silcv3 5.12 5.12 5.13 T:aes128n12t8clocv2 5.12 5.12 5.13 T:aes128n12t8silcv2 5.12 5.12 5.13 T:aes128n12t8clocv3 5.12 5.13 5.13 T:aes128otrsv3 5.12 5.13 5.13 T:aes128n8t8clocv2 5.77 5.78 5.79 T:norx3261v2 5.83 5.83 5.85 T:norx3261v3 6.58 6.65 6.70 T:ketjemajorv2 7.12 7.13 7.13 T:aes256otrsv3 7.61 7.63 7.65 T:norx3261v1 7.74 7.76 7.78 T:acorn128v3 8.25 8.26 8.28 T:acorn128v2 8.58 8.60 8.63 ascon128av12 8.59 8.62 8.63 T:ascon96v1 8.73 8.76 8.77 T:ascon128av11 8.76 8.77 8.79 T:riverkeyakv2 8.99 9.02 9.05 T:ketjeminorv2 10.44 10.44 10.45 T:aesjambuv1 12.58 12.62 12.65 ascon128v12 12.60 12.66 12.69 T:ascon128v1 12.73 12.76 12.77 T:ascon128v11 13.87 13.90 13.93 T:aes128n8clocv1 13.88 13.91 13.94 T:aes128n12clocv1 14.24 14.26 14.29 T:twine80n6t4clocv3 14.91 14.93 15.00 T:aes128otrsv1 14.91 14.93 14.98 T:aes128otrsv2 15.02 15.05 15.09 T:aes128otrpv1 15.03 15.07 15.10 T:aes128otrpv2 15.07 15.14 15.16 T:twine80n6t4clocv2 18.43 18.46 18.49 T:aes256otrsv2 18.46 18.48 18.51 T:aes256otrsv1 19.92 19.95 19.99 T:aes256otrpv1 19.97 20.00 20.02 T:aes256otrpv2 26.04 26.06 26.09 T:ketjesrv1 26.24 26.30 26.40 T:proest256otrv1 26.54 26.57 26.60 T:aeadaes128ocbtaglen64v1 26.58 26.61 26.63 T:aeadaes128ocbtaglen96v1 28.27 28.31 28.35 T:ketjesrv2 28.51 28.56 28.60 T:colm127v1 31.58 31.61 31.63 T:aeadaes192ocbtaglen96v1 31.60 31.64 31.68 T:aeadaes192ocbtaglen64v1 36.45 36.49 36.52 T:aeadaes256ocbtaglen64v1 36.51 36.55 36.61 T:aeadaes256ocbtaglen96v1 58.06 58.18 58.34 T:ketjejrv1 57.59 58.87 59.04 T:proest128otrv1 60.33 60.52 60.89 T:aezv1 70.82 71.08 71.71 T:present80n6t4silcv3 88.02 88.20 88.54 T:deoxyseq128128v13 88.23 88.35 88.56 T:deoxysneq128128v13 103.79 103.97 104.19 T:ketjejrv2 117.80 117.86 117.93 T:led80n6t4silcv3 134.04 134.14 134.32 T:deoxyseq256128v13 134.78 135.12 135.75 T:deoxysneq256128v13 420.75 422.47 424.50 T:acorn128 2730.76 2731.13 2731.72 T:present80n6t4silcv2 2731.56 2733.20 2736.55 T:present80n6silcv1 4180.34 4187.25 4191.78 T:led80n6silcv1 4180.92 4189.59 4199.15 T:led80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.22? 0.25? 0.27? T:tiaoxinv2 0.22? 0.25? 0.27? T:tiaoxinv1 0.29 0.29 0.30 T:aegis128l 0.29 0.30 0.31 aegis128l 0.41 0.41 0.42 T:aezv4 0.41 0.42 0.43 T:aezv5 0.42 0.42 0.43 T:aezv3 0.51 0.52 0.53 T:aegis128 0.52 0.53 0.54 aegis256 0.64? 0.78? 0.92? T:aeadaes128ocbtaglen128v1 0.83 0.83 0.84 T:morus1280128v2 0.82 0.83 0.85 T:morus1280128v1 0.85 0.86 0.87 T:aes128otrcv3 0.86 0.86 0.87 T:morus1280256v2 0.86 0.87 0.87 T:morus1280256v1 0.79? 0.92? 1.03? T:aeadaes192ocbtaglen128v1 1.01 1.02 1.03 T:aes128otrpv3 1.08 1.08 1.09 T:morus640128v2 1.08 1.09 1.10 T:aes256otrcv3 1.10 1.11 1.12 T:colm0v1 1.11 1.12 1.12 T:morus640128v1 1.27 1.29 1.31 T:deoxysi128v141 1.31 1.33 1.34 T:deoxysii128v141 1.32 1.33 1.34 T:aes256otrpv3 1.32 1.34 1.37 T:deoxysneq128128v1 1.32 1.35 1.38 T:deoxyseq128128v1 1.45 1.48 1.50 T:deoxysii256v141 1.47 1.48 1.50 T:deoxysneq256128v1 1.47 1.49 1.51 T:deoxysi256v141 1.49 1.51 1.55 T:deoxyseq256128v1 1.80 1.80 1.82 T:aes128gcmv1 1.80 1.81 1.82 aes256gcmv1 2.01 2.02 2.03 T:aeadaes256ocbtaglen128v1 2.07 2.11 2.13 T:oceankeyakv2 2.09 2.11 2.14 T:lunarkeyakv2 2.50 2.51 2.54 T:seakeyakv2 2.77 2.79 2.81 T:norx6441v3 2.80 2.82 2.83 T:norx6441v2 3.36 3.37 3.39 T:norx6441v1 3.82 3.83 3.85 T:norx3241v2 3.87 3.88 3.90 T:norx3241v3 4.06 4.08 4.10 T:lakekeyakv2 4.19 4.22 4.23 T:norx6461v3 4.21 4.22 4.24 T:norx6444v2 4.21 4.22 4.24 T:norx6444v3 4.26 4.28 4.32 T:norx6461v2 4.52 4.54 4.57 T:lakekeyakv1 4.65 4.68 4.69 T:norx3241v1 4.88 4.90 4.91 T:norx6444v1 5.05 5.06 5.08 T:norx6461v1 5.12 5.12 5.13 T:aes128n12t8silcv2 5.11 5.12 5.14 T:aes128n12t8clocv2 5.12 5.12 5.13 T:aes128n12t8clocv3 5.12 5.12 5.13 T:aes128n8t8silcv2 5.12 5.13 5.13 T:aes128n8t8clocv2 5.12 5.13 5.13 T:aes128otrsv3 5.12 5.13 5.13 T:aes128n12t8silcv3 5.76 5.78 5.79 T:norx3261v3 5.76 5.79 5.81 T:norx3261v2 6.62 6.68 6.73 T:ketjemajorv2 7.12 7.13 7.13 T:aes256otrsv3 7.60 7.62 7.65 T:norx3261v1 7.76 7.77 7.77 T:acorn128v2 8.24 8.26 8.28 T:acorn128v3 8.61 8.62 8.64 T:ascon128av11 8.61 8.63 8.67 T:ascon96v1 8.61 8.64 8.66 ascon128av12 8.76 8.77 8.79 T:riverkeyakv2 8.99 9.02 9.04 T:ketjeminorv2 10.43 10.44 10.44 T:aesjambuv1 12.61 12.63 12.65 T:ascon128v11 12.64 12.66 12.68 ascon128v12 12.70 12.73 12.76 T:ascon128v1 13.86 13.89 13.92 T:aes128n12clocv1 13.89 13.91 13.92 T:aes128n8clocv1 14.24 14.27 14.28 T:twine80n6t4clocv3 14.88 14.92 15.01 T:aes128otrsv2 14.90 14.95 15.00 T:aes128otrsv1 15.03 15.07 15.10 T:aes128otrpv1 15.06 15.09 15.13 T:aes128otrpv2 15.14 15.15 15.17 T:twine80n6t4clocv2 18.46 18.48 18.51 T:aes256otrsv1 18.43 18.48 18.51 T:aes256otrsv2 19.94 19.98 20.01 T:aes256otrpv1 19.95 20.00 20.03 T:aes256otrpv2 26.05 26.09 26.12 T:ketjesrv1 26.20 26.31 26.36 T:proest256otrv1 26.57 26.60 26.63 T:aeadaes128ocbtaglen96v1 26.57 26.61 26.70 T:aeadaes128ocbtaglen64v1 28.30 28.34 28.37 T:ketjesrv2 28.53 28.58 28.66 T:colm127v1 31.58 31.61 31.64 T:aeadaes192ocbtaglen96v1 31.59 31.63 31.69 T:aeadaes192ocbtaglen64v1 36.46 36.50 36.53 T:aeadaes256ocbtaglen64v1 36.52 36.57 36.62 T:aeadaes256ocbtaglen96v1 57.20 57.49 59.60 T:proest128otrv1 58.02 58.18 58.31 T:ketjejrv1 60.32 60.57 60.90 T:aezv1 70.85 71.11 71.21 T:present80n6t4silcv3 87.53 88.07 88.37 T:deoxyseq128128v13 88.17 88.52 88.98 T:deoxysneq128128v13 103.76 103.92 104.10 T:ketjejrv2 117.70 117.91 119.79 T:led80n6t4silcv3 134.15 134.37 134.55 T:deoxyseq256128v13 134.24 134.53 135.37 T:deoxysneq256128v13 423.21 423.96 426.72 T:acorn128 2730.93 2731.54 2733.25 T:present80n6t4silcv2 2731.30 2732.29 2735.90 T:present80n6silcv1 4193.64 4197.67 4202.16 T:led80n6t4silcv2 4191.84 4200.18 4203.61 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.22? 0.25? 0.26? T:tiaoxinv2 0.23? 0.25? 0.27? T:tiaoxinv1 0.29 0.29 0.31 T:aegis128l 0.29 0.30 0.31 aegis128l 0.40 0.41 0.41 T:aezv4 0.41 0.41 0.42 T:aezv5 0.42 0.42 0.43 T:aezv3 0.51 0.52 0.52 T:aegis128 0.52 0.53 0.54 aegis256 0.68? 0.78? 0.89? T:aeadaes128ocbtaglen128v1 0.83 0.83 0.84 T:morus1280128v2 0.82 0.83 0.85 T:morus1280128v1 0.86 0.86 0.87 T:morus1280256v2 0.85 0.86 0.88 T:aes128otrcv3 0.86 0.86 0.87 T:morus1280256v1 0.81? 0.92? 1.03? T:aeadaes192ocbtaglen128v1 1.02 1.02 1.03 T:aes128otrpv3 1.08 1.08 1.09 T:morus640128v2 1.08 1.09 1.10 T:aes256otrcv3 1.09 1.10 1.12 T:colm0v1 1.11 1.12 1.12 T:morus640128v1 1.27 1.29 1.31 T:deoxysi128v141 1.33 1.34 1.35 T:aes256otrpv3 1.32 1.34 1.35 T:deoxysii128v141 1.31? 1.35? 1.66? T:deoxysneq128128v1 1.33 1.35 1.36 T:deoxyseq128128v1 1.46 1.48 1.50 T:deoxysneq256128v1 1.47 1.49 1.50 T:deoxysi256v141 1.48 1.49 1.51 T:deoxysii256v141 1.51 1.54 1.59 T:deoxyseq256128v1 1.80 1.81 1.82 T:aes128gcmv1 1.81 1.82 1.83 aes256gcmv1 2.01 2.02 2.03 T:aeadaes256ocbtaglen128v1 2.08 2.10 2.13 T:oceankeyakv2 2.07 2.11 2.14 T:lunarkeyakv2 2.50 2.51 2.53 T:seakeyakv2 2.77 2.80 2.82 T:norx6441v3 2.80 2.82 2.84 T:norx6441v2 3.36 3.37 3.40 T:norx6441v1 3.84 3.85 3.87 T:norx3241v2 3.86 3.88 3.89 T:norx3241v3 4.07 4.08 4.10 T:lakekeyakv2 4.18 4.21 4.23 T:norx6461v3 4.20 4.22 4.23 T:norx6444v2 4.20 4.22 4.24 T:norx6444v3 4.26 4.28 4.30 T:norx6461v2 4.51 4.53 4.54 T:lakekeyakv1 4.65 4.67 4.69 T:norx3241v1 4.87 4.88 4.90 T:norx6444v1 5.04 5.05 5.08 T:norx6461v1 5.12 5.12 5.13 T:aes128n12t8silcv3 5.12 5.12 5.13 T:aes128n8t8clocv2 5.12 5.12 5.13 T:aes128n12t8silcv2 5.12 5.12 5.12 T:aes128n8t8silcv2 5.12 5.12 5.13 T:aes128n12t8clocv2 5.12 5.12 5.13 T:aes128n12t8clocv3 5.12 5.13 5.13 T:aes128otrsv3 5.76 5.77 5.80 T:norx3261v2 5.74 5.77 5.79 T:norx3261v3 6.60 6.68 6.74 T:ketjemajorv2 7.12 7.13 7.13 T:aes256otrsv3 7.59 7.61 7.62 T:norx3261v1 7.75 7.76 7.78 T:acorn128v2 8.24 8.26 8.28 T:acorn128v3 8.61 8.63 8.65 T:ascon128av11 8.61 8.63 8.65 ascon128av12 8.62 8.64 8.66 T:ascon96v1 8.75 8.77 8.79 T:riverkeyakv2 8.99 9.01 9.03 T:ketjeminorv2 10.43 10.43 10.44 T:aesjambuv1 12.61 12.64 12.67 T:ascon128v11 12.64 12.66 12.69 ascon128v12 12.68 12.73 12.74 T:ascon128v1 13.87 13.90 13.92 T:aes128n12clocv1 13.86 13.90 13.92 T:aes128n8clocv1 14.24 14.27 14.29 T:twine80n6t4clocv3 14.89 14.93 15.01 T:aes128otrsv2 14.91 14.95 14.99 T:aes128otrsv1 15.03 15.06 15.09 T:aes128otrpv1 15.07 15.10 15.12 T:aes128otrpv2 15.08 15.16 15.18 T:twine80n6t4clocv2 18.43 18.47 18.51 T:aes256otrsv2 18.46 18.49 18.51 T:aes256otrsv1 19.95 19.98 20.01 T:aes256otrpv1 19.96 20.00 20.02 T:aes256otrpv2 26.05 26.09 26.13 T:ketjesrv1 26.20 26.24 26.31 T:proest256otrv1 26.57 26.60 26.63 T:aeadaes128ocbtaglen96v1 26.56 26.61 26.67 T:aeadaes128ocbtaglen64v1 28.29 28.35 28.41 T:ketjesrv2 28.53 28.57 28.63 T:colm127v1 31.57 31.62 31.65 T:aeadaes192ocbtaglen96v1 31.60 31.63 31.67 T:aeadaes192ocbtaglen64v1 36.48 36.51 36.55 T:aeadaes256ocbtaglen64v1 36.53 36.55 36.61 T:aeadaes256ocbtaglen96v1 57.17 57.48 59.70 T:proest128otrv1 58.08 58.21 58.34 T:ketjejrv1 60.35 60.53 60.91 T:aezv1 70.85 71.11 71.19 T:present80n6t4silcv3 87.53 87.77 88.03 T:deoxyseq128128v13 88.09 88.44 88.92 T:deoxysneq128128v13 103.84 104.03 104.17 T:ketjejrv2 117.69 117.89 119.57 T:led80n6t4silcv3 134.18 134.45 134.63 T:deoxyseq256128v13 134.34 134.65 135.45 T:deoxysneq256128v13 423.16 423.97 426.88 T:acorn128 2730.84 2731.43 2733.07 T:present80n6t4silcv2 2731.50 2734.01 2736.47 T:present80n6silcv1 4195.42 4200.07 4204.14 T:led80n6t4silcv2 4195.04 4202.30 4205.92 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.40 0.41 0.42 T:tiaoxinv2 0.40 0.41 0.41 T:tiaoxinv1 0.41 0.41 0.42 T:aegis128l 0.42 0.43 0.44 aegis128l 0.62 0.63 0.63 T:aegis128 0.66 0.66 0.67 aegis256 0.82 0.82 0.83 T:aezv4 0.83 0.83 0.84 T:aezv5 0.83 0.84 0.84 T:aezv3 0.98? 0.99? 1.11? T:aeadaes128ocbtaglen128v1 1.09 1.09 1.11 T:morus1280128v1 1.10 1.10 1.11 T:morus1280128v2 1.13 1.14 1.25 T:aeadaes192ocbtaglen128v1 1.15 1.15 1.16 T:morus1280256v2 1.17 1.17 1.18 T:aes128otrpv3 1.17 1.18 1.18 T:morus1280256v1 1.24 1.24 1.27 T:aes128otrcv3 1.27 1.28 1.28 T:morus640128v1 1.30 1.30 1.30 T:morus640128v2 1.56 1.57 1.57 T:aes256otrpv3 1.59 1.60 1.63 T:deoxysi128v141 1.60 1.63 1.65 T:deoxysneq128128v1 1.66 1.66 1.66 T:aes256otrcv3 1.79 1.79 1.81 T:deoxysneq256128v1 1.79 1.80 1.81 T:aeadaes256ocbtaglen128v1 1.90 1.90 1.91 T:deoxysi256v141 2.08 2.09 2.10 T:colm0v1 2.39 2.39 2.40 T:aes128gcmv1 2.46 2.47 2.49 T:deoxysii128v141 2.55 2.57 2.60 T:deoxyseq128128v1 2.57 2.58 2.59 aes256gcmv1 2.83 2.84 2.85 T:deoxysii256v141 2.95 2.98 2.99 T:deoxyseq256128v1 3.18 3.18 3.19 T:aes128otrsv3 3.26 3.27 3.29 T:norx6441v3 3.29 3.29 3.30 T:norx6441v2 3.78 3.79 3.80 T:norx6441v1 3.79 3.80 3.80 T:seakeyakv2 4.17 4.18 4.19 T:norx3241v2 4.18 4.19 4.20 T:norx3241v3 4.39 4.39 4.39 T:aes256otrsv3 4.90 4.91 4.92 T:norx6461v3 4.92 4.93 4.94 T:norx3241v1 4.96 4.97 4.99 T:norx6461v2 5.02 5.03 5.04 T:lakekeyakv2 5.15 5.15 5.17 T:oceankeyakv2 5.26 5.26 5.26 T:aes128n8t8clocv2 5.26 5.26 5.26 T:aes128n12t8clocv3 5.26 5.26 5.26 T:aes128n12t8clocv2 5.30 5.30 5.31 T:aes128n12t8silcv2 5.30 5.30 5.30 T:aes128n12t8silcv3 5.30 5.30 5.31 T:aes128n8t8silcv2 5.67 5.67 5.68 T:norx6461v1 5.68 5.70 5.73 T:lakekeyakv1 6.07 6.09 6.10 T:norx6444v2 6.10 6.11 6.11 T:norx6444v3 6.26 6.27 6.28 T:norx3261v2 6.27 6.28 6.30 T:norx3261v3 6.95 6.96 6.98 T:norx6444v1 8.02 8.03 8.05 T:norx3261v1 8.81 8.82 8.83 T:ascon96v1 8.88 8.89 8.91 T:lunarkeyakv2 8.89 8.91 8.94 T:ascon128av11 8.91 8.92 8.94 ascon128av12 9.08 9.08 9.09 T:acorn128v3 9.33 9.34 9.35 T:acorn128v2 9.80 9.81 9.82 T:riverkeyakv2 10.17 10.17 10.18 T:ketjemajorv2 10.58 10.58 10.58 T:aesjambuv1 11.30 11.30 11.31 T:ketjeminorv2 12.93 12.94 12.96 ascon128v12 12.93 12.97 12.99 T:ascon128v1 12.95 12.99 13.00 T:ascon128v11 14.80 14.81 14.82 T:twine80n6t4clocv3 15.53 15.58 15.59 T:twine80n6t4clocv2 15.98 16.00 16.06 T:aes128otrsv1 15.99 16.01 16.05 T:aes128otrsv2 16.09 16.10 16.12 T:aes128otrpv1 16.11 16.12 16.13 T:aes128otrpv2 20.52 20.54 20.55 T:aes128n8clocv1 20.52 20.54 20.56 T:aes128n12clocv1 20.80 20.81 20.85 T:aes256otrsv2 20.91 20.92 20.95 T:aes256otrsv1 21.15 21.17 21.19 T:aes256otrpv1 21.18 21.20 21.21 T:aes256otrpv2 27.73 27.74 27.76 T:aeadaes128ocbtaglen64v1 27.75 27.76 27.80 T:aeadaes128ocbtaglen96v1 28.43 28.47 28.50 T:proest256otrv1 29.72 29.80 29.81 T:ketjesrv1 31.84 31.87 31.90 T:ketjesrv2 32.84 32.87 32.92 T:aeadaes192ocbtaglen96v1 32.86 32.90 33.12 T:aeadaes192ocbtaglen64v1 37.89 37.92 37.94 T:aeadaes256ocbtaglen64v1 37.97 37.99 38.01 T:aeadaes256ocbtaglen96v1 45.30 45.34 45.41 T:colm127v1 61.88 62.98 63.03 T:proest128otrv1 63.15 63.23 63.31 T:ketjejrv1 72.34? 72.64? 81.12? T:present80n6t4silcv3 88.69 88.75 88.86 T:deoxysneq128128v13 107.99 108.13 108.31 T:ketjejrv2 119.40 119.48 120.24 T:led80n6t4silcv3 123.16 123.37 123.53 T:aezv1 134.89 135.19 135.32 T:deoxyseq128128v13 135.70 135.90 136.54 T:deoxysneq256128v13 204.74 204.91 205.08 T:deoxyseq256128v13 474.67 475.37 476.92 T:acorn128 4117.93 4118.55 4121.37 T:present80n6t4silcv2 4121.39 4122.36 4123.72 T:present80n6silcv1 6293.73 6297.87 6301.42 T:led80n6silcv1 6297.21 6298.97 6301.55 T:led80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.41 0.41 0.42 T:aegis128l 0.43 0.44 0.45 aegis128l 0.45 0.46 0.46 T:tiaoxinv2 0.45 0.46 0.46 T:tiaoxinv1 0.62 0.63 0.63 T:aegis128 0.67 0.68 0.68 aegis256 0.81 0.82 0.82 T:aezv4 0.83 0.83 0.83 T:aezv5 0.84 0.84 0.85 T:aezv3 0.98 0.99 1.08 T:aeadaes128ocbtaglen128v1 1.09 1.10 1.10 T:morus1280128v1 1.10 1.10 1.12 T:morus1280128v2 1.12 1.13 1.13 T:morus1280256v1 1.12 1.13 1.22 T:aeadaes192ocbtaglen128v1 1.13 1.13 1.14 T:morus1280256v2 1.17 1.18 1.18 T:aes128otrpv3 1.25 1.25 1.26 T:aes128otrcv3 1.28 1.29 1.29 T:morus640128v1 1.29 1.30 1.30 T:morus640128v2 1.56 1.57 1.57 T:aes256otrpv3 1.69 1.69 1.70 T:aes256otrcv3 1.77 1.78 1.80 T:deoxysi128v141 1.81 1.82 1.84 T:aeadaes256ocbtaglen128v1 1.85 1.86 1.88 T:deoxysneq128128v1 1.97 1.98 1.99 T:deoxysneq256128v1 2.11 2.12 2.12 T:deoxysi256v141 2.11 2.13 2.15 T:colm0v1 2.50 2.51 2.53 T:deoxysii128v141 2.67 2.67 2.68 T:aes128gcmv1 2.85 2.88 2.91 T:deoxyseq128128v1 2.90 2.91 2.93 T:deoxysii256v141 3.06 3.06 3.07 aes256gcmv1 3.19 3.20 3.20 T:aes128otrsv3 3.22 3.24 3.26 T:deoxyseq256128v1 3.27 3.28 3.29 T:norx6441v2 3.27 3.28 3.30 T:norx6441v3 3.79 3.80 3.81 T:norx6441v1 3.85 3.86 3.88 T:seakeyakv2 4.16 4.16 4.17 T:norx3241v3 4.17 4.17 4.17 T:norx3241v2 4.42 4.42 4.42 T:aes256otrsv3 4.88 4.88 4.89 T:norx3241v1 4.90 4.92 4.93 T:norx6461v3 4.94 4.95 4.97 T:norx6461v2 4.98 4.99 5.00 T:lakekeyakv2 5.19 5.19 5.21 T:oceankeyakv2 5.22 5.22 5.22 T:aes128n12t8clocv3 5.22 5.22 5.22 T:aes128n8t8clocv2 5.22 5.23 5.23 T:aes128n12t8clocv2 5.26 5.26 5.27 T:aes128n12t8silcv3 5.26 5.26 5.27 T:aes128n12t8silcv2 5.26 5.26 5.27 T:aes128n8t8silcv2 5.55 5.56 5.60 T:lakekeyakv1 5.73 5.74 5.75 T:norx6461v1 6.08 6.09 6.09 T:norx6444v2 6.10 6.11 6.12 T:norx6444v3 6.23 6.23 6.24 T:norx3261v3 6.25 6.26 6.27 T:norx3261v2 6.93 6.94 6.95 T:norx6444v1 7.94 7.95 7.97 T:norx3261v1 8.85 8.85 8.86 T:ascon128av11 8.86 8.88 8.90 ascon128av12 8.88 8.90 8.92 T:ascon96v1 8.92 8.93 8.96 T:lunarkeyakv2 9.12 9.13 9.13 T:acorn128v2 9.33 9.33 9.33 T:acorn128v3 9.73 9.74 9.75 T:ketjemajorv2 9.86 9.87 9.88 T:riverkeyakv2 10.75 10.75 10.76 T:aesjambuv1 11.58 11.62 11.64 T:ketjeminorv2 12.92 12.94 12.96 ascon128v12 12.94 12.95 12.96 T:ascon128v11 12.96 12.97 12.97 T:ascon128v1 14.78 14.78 14.79 T:twine80n6t4clocv3 15.53 15.59 15.60 T:twine80n6t4clocv2 16.23 16.24 16.26 T:aes128otrsv1 16.26 16.28 16.30 T:aes128otrpv1 16.27 16.29 16.32 T:aes128otrsv2 16.29 16.30 16.32 T:aes128otrpv2 20.07 20.09 20.11 T:aes128n12clocv1 20.32 20.34 20.36 T:aes128n8clocv1 20.98 21.00 21.02 T:aes256otrsv2 20.98 21.00 21.02 T:aes256otrsv1 21.33 21.35 21.38 T:aes256otrpv1 21.38 21.39 21.42 T:aes256otrpv2 28.45 28.49 28.55 T:proest256otrv1 30.20 30.27 30.29 T:ketjesrv1 31.89 31.93 31.99 T:ketjesrv2 32.60 32.64 32.68 T:aeadaes128ocbtaglen64v1 32.63 32.66 32.70 T:aeadaes128ocbtaglen96v1 38.77 38.79 38.82 T:aeadaes192ocbtaglen64v1 38.77 38.80 38.83 T:aeadaes192ocbtaglen96v1 44.90 44.92 44.97 T:aeadaes256ocbtaglen64v1 45.03 45.05 45.08 T:aeadaes256ocbtaglen96v1 54.55 54.57 54.60 T:colm127v1 60.56 60.61 61.61 T:proest128otrv1 63.65 63.71 63.80 T:ketjejrv1 72.26? 72.32? 81.23? T:present80n6t4silcv3 105.70 105.79 106.59 T:deoxysneq128128v13 107.81 107.92 108.04 T:ketjejrv2 119.37 119.46 120.26 T:led80n6t4silcv3 123.30 123.53 123.67 T:aezv1 134.57 135.24 135.44 T:deoxyseq128128v13 154.89 155.10 155.46 T:deoxysneq256128v13 205.06 205.30 205.41 T:deoxyseq256128v13 487.67 488.40 489.36 T:acorn128 4118.12 4118.60 4119.85 T:present80n6t4silcv2 4119.75 4121.65 4122.34 T:present80n6silcv1 6297.90 6301.63 6306.02 T:led80n6silcv1 6300.07 6302.67 6306.77 T:led80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.41 0.41 0.41 T:aegis128l 0.45 0.46 0.46 T:tiaoxinv1 0.45 0.46 0.46 T:tiaoxinv2 0.47 0.47 0.48 aegis128l 0.50 0.51 0.51 T:aezv4 0.51 0.51 0.52 T:aezv5 0.51 0.52 0.52 T:aezv3 0.62 0.63 0.63 T:aegis128 0.71 0.71 0.71 aegis256 0.98 0.99 1.05 T:aeadaes128ocbtaglen128v1 1.10 1.10 1.11 T:morus1280128v1 1.11 1.11 1.12 T:morus1280128v2 1.13 1.13 1.13 T:morus1280256v1 1.12 1.13 1.24 T:aeadaes192ocbtaglen128v1 1.13 1.13 1.14 T:morus1280256v2 1.17 1.17 1.18 T:aes128otrpv3 1.25 1.26 1.26 T:aes128otrcv3 1.28 1.29 1.29 T:morus640128v1 1.29 1.30 1.30 T:morus640128v2 1.56 1.56 1.57 T:aes256otrpv3 1.69 1.69 1.69 T:aes256otrcv3 1.75 1.75 1.76 T:deoxysi128v141 1.81 1.83 1.84 T:aeadaes256ocbtaglen128v1 1.84 1.84 1.86 T:deoxysneq128128v1 1.95 1.97 1.98 T:deoxysneq256128v1 2.11 2.12 2.12 T:deoxysi256v141 2.12 2.13 2.16 T:colm0v1 2.49 2.52 2.53 T:deoxysii128v141 2.66 2.67 2.67 T:aes128gcmv1 2.87 2.89 2.91 T:deoxyseq128128v1 2.90 2.91 2.92 T:deoxysii256v141 3.06 3.06 3.07 aes256gcmv1 3.19 3.20 3.20 T:aes128otrsv3 3.24 3.25 3.25 T:deoxyseq256128v1 3.26 3.27 3.27 T:norx6441v2 3.27 3.28 3.30 T:norx6441v3 3.79 3.80 3.81 T:norx6441v1 3.91 3.91 3.93 T:seakeyakv2 4.15 4.16 4.17 T:norx3241v3 4.17 4.18 4.18 T:norx3241v2 4.42 4.42 4.42 T:aes256otrsv3 4.88 4.89 4.90 T:norx3241v1 4.90 4.91 4.93 T:norx6461v3 4.93 4.95 4.97 T:norx6461v2 5.00 5.02 5.03 T:lakekeyakv2 5.22 5.22 5.22 T:aes128n12t8clocv3 5.22 5.22 5.22 T:aes128n12t8clocv2 5.22 5.22 5.22 T:aes128n8t8clocv2 5.22 5.23 5.24 T:oceankeyakv2 5.26 5.26 5.27 T:aes128n12t8silcv3 5.26 5.26 5.27 T:aes128n8t8silcv2 5.26 5.26 5.26 T:aes128n12t8silcv2 5.59 5.61 5.64 T:lakekeyakv1 5.72 5.74 5.75 T:norx6461v1 6.10 6.12 6.13 T:norx6444v2 6.14 6.14 6.15 T:norx6444v3 6.22 6.23 6.24 T:norx3261v3 6.25 6.25 6.27 T:norx3261v2 6.96 6.97 6.98 T:norx6444v1 7.94 7.94 7.95 T:norx3261v1 8.85 8.86 8.88 T:ascon128av11 8.86 8.87 8.89 T:ascon96v1 8.87 8.90 8.91 ascon128av12 8.95 8.96 8.99 T:lunarkeyakv2 9.12 9.13 9.13 T:acorn128v2 9.32 9.32 9.33 T:acorn128v3 9.75 9.76 9.78 T:ketjemajorv2 9.88 9.89 9.90 T:riverkeyakv2 10.75 10.75 10.76 T:aesjambuv1 11.61 11.66 11.67 T:ketjeminorv2 12.93 12.94 12.96 T:ascon128v11 12.93 12.94 12.96 ascon128v12 12.95 12.96 12.98 T:ascon128v1 14.77 14.78 14.79 T:twine80n6t4clocv3 15.47 15.52 15.59 T:twine80n6t4clocv2 16.27 16.28 16.29 T:aes128otrsv1 16.29 16.31 16.33 T:aes128otrpv1 16.30 16.32 16.36 T:aes128otrsv2 16.32 16.34 16.36 T:aes128otrpv2 20.07 20.09 20.11 T:aes128n12clocv1 20.32 20.34 20.36 T:aes128n8clocv1 21.00 21.02 21.05 T:aes256otrsv2 21.02 21.03 21.05 T:aes256otrsv1 21.36 21.38 21.42 T:aes256otrpv1 21.41 21.43 21.45 T:aes256otrpv2 28.47 28.49 28.53 T:proest256otrv1 30.24 30.30 30.32 T:ketjesrv1 31.91 31.94 32.03 T:ketjesrv2 32.60 32.65 32.68 T:aeadaes128ocbtaglen64v1 32.64 32.67 32.70 T:aeadaes128ocbtaglen96v1 38.77 38.81 38.84 T:aeadaes192ocbtaglen96v1 38.78 38.81 38.83 T:aeadaes192ocbtaglen64v1 44.90 44.93 44.95 T:aeadaes256ocbtaglen64v1 45.00 45.03 45.05 T:aeadaes256ocbtaglen96v1 54.51 54.54 54.58 T:colm127v1 60.57 60.72 61.68 T:proest128otrv1 63.67 63.76 63.87 T:ketjejrv1 72.25? 72.30? 81.21? T:present80n6t4silcv3 105.70 105.79 106.65 T:deoxysneq128128v13 107.77 107.96 108.10 T:ketjejrv2 119.34 119.45 120.21 T:led80n6t4silcv3 123.17 123.44 123.54 T:aezv1 135.23 135.37 135.59 T:deoxyseq128128v13 154.95 155.12 155.54 T:deoxysneq256128v13 205.05 205.33 205.48 T:deoxyseq256128v13 488.02 488.72 490.02 T:acorn128 4118.04 4118.39 4118.82 T:present80n6t4silcv2 4121.23 4122.22 4123.63 T:present80n6silcv1 6297.24 6301.99 6305.27 T:led80n6silcv1 6300.07 6302.94 6305.94 T:led80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 2.09 2.12 2.16 T:aegis128l 2.10 2.13 2.17 T:aegis128 2.15 2.18 2.24 aegis128l 2.58 2.60 2.66 aegis256 3.03 3.09 3.31 T:tiaoxinv1 2.98? 3.10? 3.34? T:tiaoxinv2 3.70 3.72 3.78 T:aezv5 3.82 3.85 3.87 T:aezv4 3.97 4.01 4.09 T:aezv3 4.60 4.64 4.70 T:morus640128v1 4.95 5.02 5.07 T:morus640128v2 5.03 5.08 5.17 T:aes128otrpv3 5.25? 5.67? 8.32? T:aeadaes128ocbtaglen128v1 6.12 6.15 6.33 T:morus1280128v1 5.82? 6.30? 8.93? T:aeadaes192ocbtaglen128v1 6.30 6.32 6.37 T:morus1280256v1 6.31 6.33 6.42 T:morus1280128v2 6.31 6.34 6.36 T:aes128otrsv3 6.31 6.34 6.44 T:deoxysneq128128v1 6.33 6.37 6.49 T:morus1280256v2 6.45 6.48 6.51 T:aeadaes256ocbtaglen128v1 6.55 6.60 6.64 T:deoxysneq256128v1 6.76 6.81 6.88 T:deoxysi128v141 7.31 7.36 7.47 T:aes256otrpv3 7.37 7.39 7.40 T:aes128n12t8clocv2 7.38 7.39 7.40 T:aes128n12t8clocv3 7.33? 7.41? 8.56? T:colm0v1 7.39 7.41 7.44 T:aes128n8t8clocv2 7.41 7.47 7.73 T:aes128otrcv3 8.45 8.45 8.46 T:aes128n12t8silcv2 8.45 8.46 8.47 T:aes128n12t8silcv3 8.45 8.46 8.47 T:aes128n8t8silcv2 8.64 8.66 8.70 T:aes256otrsv3 9.54 9.61 9.78 T:aes128gcmv1 9.98 10.03 10.07 T:deoxysi256v141 10.38 10.42 10.47 T:aes256otrcv3 10.52 10.59 10.67 T:norx3241v1 10.56 10.62 10.65 T:norx3241v3 10.56 10.62 10.71 T:norx3241v2 10.88 10.91 11.05 T:norx6441v1 11.33 11.37 11.46 T:deoxyseq128128v1 11.37 11.40 11.45 T:deoxysii128v141 11.36 11.42 11.46 aes256gcmv1 11.42 11.48 11.53 T:norx6441v3 11.50 11.57 11.61 T:norx6441v2 13.06 13.12 13.21 T:deoxyseq256128v1 13.19 13.23 13.30 T:deoxysii256v141 13.38 13.41 13.51 T:ascon128av11 13.35 13.44 13.57 T:ascon96v1 13.57 13.64 14.02 ascon128av12 14.66 14.66 14.69 T:aesjambuv1 15.57 15.62 15.77 T:norx3261v2 15.57 15.65 15.75 T:norx3261v3 16.16 16.23 16.32 T:norx6461v1 16.24 16.30 16.53 T:norx6461v3 16.87 16.91 17.00 T:norx6461v2 16.89 16.94 16.95 T:norx3261v1 17.12 17.15 17.26 T:ascon128v11 17.12 17.16 17.26 T:ascon128v1 17.27 17.35 17.45 ascon128v12 18.82 18.90 19.00 T:lakekeyakv1 21.59 21.67 22.09 T:lakekeyakv2 22.85 22.90 22.99 T:riverkeyakv2 22.87 22.99 23.15 T:twine80n6t4clocv2 22.95 22.99 23.06 T:twine80n6t4clocv3 24.90 24.96 25.10 T:aes128n8clocv1 24.99 25.06 25.41 T:aes128n12clocv1 27.24 27.31 27.40 T:aes128otrsv2 27.26 27.32 27.41 T:aes128otrpv2 27.26 27.32 27.48 T:aes128otrsv1 27.55 27.61 27.74 T:aes128otrpv1 33.66 33.76 33.95 T:aes256otrsv1 34.89 35.01 35.26 T:aes256otrsv2 35.52 35.59 35.67 T:seakeyakv2 35.54 35.61 35.81 T:aes256otrpv2 35.81 35.90 36.04 T:aes256otrpv1 36.41 36.49 36.61 T:acorn128v3 39.47 39.81 39.92 T:acorn128v2 41.21 41.46 41.55 T:ketjeminorv2 43.32 43.42 43.56 T:norx6444v2 43.97 44.09 44.29 T:aeadaes128ocbtaglen64v1 44.02 44.16 44.33 T:norx6444v3 44.06 44.25 44.46 T:aeadaes128ocbtaglen96v1 47.76 47.89 48.12 T:ketjesrv1 49.67 49.84 50.03 T:norx6444v1 51.15 51.31 51.58 T:aeadaes192ocbtaglen96v1 51.25 51.41 51.62 T:aeadaes192ocbtaglen64v1 55.82 55.92 56.62 T:ketjemajorv2 56.18 56.34 56.56 T:ketjesrv2 57.71 57.82 58.06 T:oceankeyakv2 59.29 59.46 59.55 T:aeadaes256ocbtaglen96v1 59.30 59.48 59.81 T:aeadaes256ocbtaglen64v1 66.49 66.66 66.82 T:colm127v1 82.18 82.27 82.40 T:proest256otrv1 84.31 84.94 85.82 T:ketjejrv1 89.67? 90.55? 101.06? T:present80n6t4silcv3 100.49 100.75 101.04 T:deoxysneq128128v13 119.55 121.17 121.28 T:proest128otrv1 142.35 142.71 143.64 T:led80n6t4silcv3 142.74 143.26 143.69 T:aezv1 143.89 144.34 145.14 T:ketjejrv2 145.14 145.32 145.57 T:lunarkeyakv2 152.91 153.55 154.02 T:deoxysneq256128v13 168.19 168.43 168.99 T:deoxyseq128128v13 253.93 254.33 254.73 T:deoxyseq256128v13 1707.01 1709.55 1716.83 T:acorn128 4609.20 4609.98 4611.54 T:present80n6t4silcv2 4611.68 4612.36 4616.16 T:present80n6silcv1 6757.13 6812.45 6883.72 T:led80n6t4silcv2 6783.86 6828.60 6914.81 T:led80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 2.11 2.13 2.17 T:aegis128l 2.12 2.15 2.20 T:aegis128 2.31 2.36 2.46 aegis128l 2.77 2.85 2.89 aegis256 2.90 3.00 3.20 T:tiaoxinv2 2.91? 3.08? 3.33? T:tiaoxinv1 3.76 3.79 3.83 T:aezv5 3.85 3.86 3.92 T:aezv4 4.01 4.04 4.21 T:aezv3 4.67 4.74 4.77 T:morus640128v1 4.99 5.01 5.04 T:morus640128v2 5.22 5.28 5.34 T:aes128otrpv3 6.12 6.17 6.29 T:morus1280128v1 6.16 6.21 6.30 T:morus1280256v1 5.82? 6.34? 8.86? T:aeadaes128ocbtaglen128v1 6.38 6.41 6.51 T:morus1280128v2 6.49 6.50 6.55 T:morus1280256v2 6.63 6.65 6.68 T:aes128otrsv3 6.58? 6.65? 9.17? T:aeadaes192ocbtaglen128v1 6.96 7.01 7.05 T:aeadaes256ocbtaglen128v1 7.38 7.40 7.41 T:aes128n12t8clocv3 7.41 7.42 7.44 T:aes128n8t8clocv2 7.53 7.56 7.65 T:aes256otrpv3 7.45 7.67 7.72 T:aes128n12t8clocv2 7.79 7.87 7.94 T:aes128otrcv3 8.13 8.16 8.23 T:colm0v1 8.37 8.41 8.46 T:deoxysneq256128v1 8.45 8.47 8.48 T:aes128n12t8silcv3 8.46 8.47 8.50 T:aes128n12t8silcv2 8.48 8.48 8.48 T:aes128n8t8silcv2 9.41 9.43 9.46 T:aes256otrsv3 9.40 9.46 9.49 T:deoxysneq128128v1 9.57 9.63 9.76 T:aes128gcmv1 10.05 10.10 10.19 T:deoxysi128v141 10.63 10.64 10.75 T:norx3241v3 10.64 10.71 10.75 T:norx3241v1 10.80 10.80 10.84 T:norx3241v2 11.08 11.20 11.34 T:norx6441v1 11.18 11.21 11.25 T:aes256otrcv3 11.26 11.37 11.58 aes256gcmv1 11.69 11.81 11.93 T:norx6441v2 11.84 11.94 12.09 T:norx6441v3 12.41 12.45 12.51 T:deoxysii128v141 13.28 13.40 13.58 T:ascon96v1 13.30 13.40 13.49 T:ascon128av11 13.64 13.75 13.89 ascon128av12 14.31 14.43 14.88 T:deoxysi256v141 14.82 14.85 14.87 T:aesjambuv1 14.82 14.86 14.95 T:deoxysii256v141 15.69 15.75 15.88 T:norx3261v3 15.89 16.02 16.06 T:norx3261v2 16.00 16.05 16.19 T:deoxyseq128128v1 16.31 16.38 16.49 T:norx6461v1 16.95 17.01 17.08 T:norx6461v2 17.02 17.05 17.09 T:norx3261v1 17.11 17.20 17.29 T:ascon128v1 17.05 17.23 18.54 T:deoxyseq256128v1 17.21 17.30 17.39 T:ascon128v11 17.24 17.37 17.52 T:norx6461v3 17.34 17.38 17.53 ascon128v12 18.92 18.98 19.17 T:lakekeyakv1 21.54 21.63 22.05 T:lakekeyakv2 22.77 22.83 22.92 T:riverkeyakv2 22.91 23.00 23.11 T:twine80n6t4clocv2 23.02 23.06 23.09 T:twine80n6t4clocv3 24.85 24.92 25.25 T:aes128n12clocv1 24.85 24.95 25.05 T:aes128n8clocv1 27.38 27.44 27.54 T:aes128otrpv2 27.50 27.55 27.64 T:aes128otrsv1 27.58 27.69 27.81 T:aes128otrsv2 27.63 27.72 27.76 T:aes128otrpv1 33.76 33.91 34.28 T:aes256otrsv1 34.98 35.05 35.20 T:aes256otrsv2 35.59 35.68 35.78 T:seakeyakv2 35.75 35.82 35.88 T:aes256otrpv2 35.94 36.01 36.12 T:aes256otrpv1 36.53 36.56 36.63 T:acorn128v3 40.13 40.30 40.50 T:acorn128v2 40.94 41.04 41.38 T:ketjeminorv2 43.52 43.58 43.75 T:norx6444v2 44.04 44.17 44.42 T:norx6444v3 48.18 48.28 48.55 T:ketjesrv1 49.75 49.90 50.11 T:norx6444v1 52.91 53.06 53.26 T:aeadaes128ocbtaglen96v1 52.85 53.09 53.38 T:aeadaes128ocbtaglen64v1 56.21 56.58 57.03 T:ketjemajorv2 57.11 57.61 57.86 T:ketjesrv2 57.97 58.09 58.33 T:oceankeyakv2 61.54 61.72 61.97 T:aeadaes192ocbtaglen64v1 61.62 61.75 62.05 T:aeadaes192ocbtaglen96v1 71.70 71.84 72.10 T:aeadaes256ocbtaglen64v1 71.72 71.87 72.02 T:aeadaes256ocbtaglen96v1 76.07 76.20 76.43 T:colm127v1 83.49 83.65 83.91 T:proest256otrv1 84.98 85.74 86.75 T:ketjejrv1 89.72? 89.97? 101.20? T:present80n6t4silcv3 117.86 118.29 118.90 T:deoxysneq128128v13 117.88 118.56 120.82 T:proest128otrv1 142.24 142.70 143.70 T:led80n6t4silcv3 143.57 144.13 144.90 T:ketjejrv2 146.48 147.15 147.46 T:aezv1 147.00 147.37 147.68 T:lunarkeyakv2 167.84 168.56 168.91 T:deoxyseq128128v13 171.65 172.25 172.94 T:deoxysneq256128v13 254.19 254.55 255.04 T:deoxyseq256128v13 1720.60 1724.10 1725.27 T:acorn128 4608.76 4609.71 4610.57 T:present80n6t4silcv2 4611.32 4614.11 4618.63 T:present80n6silcv1 6690.63 6711.15 6749.00 T:led80n6t4silcv2 6708.81 6733.99 6752.12 T:led80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 2.12 2.14 2.16 T:aegis128l 2.12 2.14 2.19 T:aegis128 2.39 2.42 2.57 aegis128l 2.83 2.84 2.94 aegis256 2.86 2.87 2.88 T:aezv5 2.90? 2.98? 3.24? T:tiaoxinv1 2.89 2.98 3.20 T:tiaoxinv2 2.98 3.00 3.03 T:aezv4 3.17 3.19 3.43 T:aezv3 4.67 4.72 4.77 T:morus640128v1 4.95 4.98 5.02 T:morus640128v2 5.22 5.28 5.32 T:aes128otrpv3 5.83? 6.19? 7.77? T:aeadaes128ocbtaglen128v1 6.17 6.20 6.33 T:morus1280128v1 6.17 6.22 6.27 T:morus1280256v1 6.41 6.41 6.44 T:morus1280128v2 6.49 6.50 6.52 T:morus1280256v2 6.57? 6.64? 8.21? T:aeadaes192ocbtaglen128v1 6.63 6.65 6.68 T:aes128otrsv3 6.96 6.99 7.03 T:aeadaes256ocbtaglen128v1 7.32 7.33 7.34 T:aes128n12t8clocv3 7.32 7.33 7.35 T:aes128n12t8clocv2 7.33 7.35 7.41 T:aes128n8t8clocv2 7.54 7.59 7.65 T:aes256otrpv3 7.80 7.85 7.90 T:aes128otrcv3 8.16 8.18 8.22 T:colm0v1 8.17 8.20 8.27 T:deoxysneq256128v1 8.38 8.40 8.40 T:aes128n12t8silcv3 8.40 8.40 8.40 T:aes128n8t8silcv2 8.39 8.40 8.53 T:aes128n12t8silcv2 9.11 9.23 9.36 T:deoxysneq128128v1 9.41 9.44 9.45 T:aes256otrsv3 9.52 9.56 9.61 T:aes128gcmv1 10.01 10.07 10.20 T:deoxysi128v141 10.56 10.69 10.73 T:norx3241v1 10.71 10.81 10.89 T:norx3241v3 10.78 10.93 11.01 T:norx3241v2 11.01 11.10 11.34 T:norx6441v1 11.18 11.21 11.24 T:aes256otrcv3 11.25 11.32 11.43 aes256gcmv1 11.68 11.76 11.86 T:norx6441v2 11.86 11.91 11.98 T:norx6441v3 12.39 12.43 12.48 T:deoxysii128v141 13.24 13.32 13.43 T:ascon96v1 13.29 13.38 13.43 T:ascon128av11 13.59 13.67 13.83 ascon128av12 14.28 14.42 14.89 T:deoxysi256v141 14.82 14.83 14.86 T:aesjambuv1 14.84 14.93 14.98 T:deoxysii256v141 15.63 15.71 15.85 T:norx3261v3 15.80 15.88 15.93 T:norx3261v2 16.02 16.09 16.22 T:deoxyseq128128v1 16.34 16.43 16.52 T:norx6461v1 16.82 16.96 17.09 T:norx6461v2 16.99 17.01 17.25 T:ascon128v11 17.06 17.10 17.16 T:norx3261v1 17.05 17.10 17.17 T:ascon128v1 17.08 17.24 18.34 T:deoxyseq256128v1 17.28 17.38 17.48 ascon128v12 17.27 17.40 17.47 T:norx6461v3 19.02 19.07 19.14 T:lakekeyakv1 21.60 21.74 22.19 T:lakekeyakv2 22.88 22.97 23.02 T:twine80n6t4clocv2 22.90 22.98 23.07 T:riverkeyakv2 22.96 22.99 23.09 T:twine80n6t4clocv3 24.70 24.80 24.99 T:aes128n12clocv1 24.74 24.81 25.01 T:aes128n8clocv1 27.51 27.58 27.72 T:aes128otrpv2 27.59 27.63 27.80 T:aes128otrsv1 27.66 27.79 27.98 T:aes128otrsv2 27.73 27.82 27.92 T:aes128otrpv1 33.82 34.08 34.39 T:aes256otrsv1 34.97 35.05 35.18 T:aes256otrsv2 35.69 35.76 35.91 T:seakeyakv2 35.79 35.87 36.08 T:aes256otrpv2 36.02 36.08 36.14 T:aes256otrpv1 36.50 36.55 36.60 T:acorn128v3 40.12 40.26 40.39 T:acorn128v2 41.08 41.31 41.73 T:ketjeminorv2 43.52 43.64 43.77 T:norx6444v2 44.13 44.32 44.57 T:norx6444v3 48.23 48.35 48.55 T:ketjesrv1 49.78 49.99 50.13 T:norx6444v1 52.87 53.03 53.19 T:aeadaes128ocbtaglen64v1 52.91 53.07 53.21 T:aeadaes128ocbtaglen96v1 56.23 56.34 56.72 T:ketjemajorv2 57.16 57.64 58.23 T:ketjesrv2 58.05 58.15 58.33 T:oceankeyakv2 61.48 61.66 61.85 T:aeadaes192ocbtaglen96v1 61.58 61.71 61.85 T:aeadaes192ocbtaglen64v1 71.66 71.81 72.02 T:aeadaes256ocbtaglen64v1 71.74 71.91 72.11 T:aeadaes256ocbtaglen96v1 75.72 75.87 76.07 T:colm127v1 80.83 80.95 81.10 T:proest256otrv1 85.15 85.68 86.60 T:ketjejrv1 89.72? 89.96? 100.64? T:present80n6t4silcv3 117.77 118.11 118.66 T:deoxysneq128128v13 117.77 118.12 120.71 T:proest128otrv1 142.10 142.46 143.47 T:led80n6t4silcv3 143.73 144.25 144.70 T:ketjejrv2 146.04 146.51 147.26 T:aezv1 147.11 147.47 147.78 T:lunarkeyakv2 167.32 167.88 168.35 T:deoxyseq128128v13 171.57 172.29 172.94 T:deoxysneq256128v13 254.05 254.41 255.16 T:deoxyseq256128v13 1717.06 1722.21 1728.62 T:acorn128 4609.84 4610.44 4612.01 T:present80n6t4silcv2 4610.90 4611.99 4616.00 T:present80n6silcv1 6699.96 6730.75 6769.57 T:led80n6t4silcv2 6710.82 6733.50 6770.55 T:led80n6silcv1