VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Ice Lake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005

[Page version: 20241011 15:42:27]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.14? 0.15? 0.17? T:tiaoxinv2 0.15? 0.16? 0.17? T:tiaoxinv1 0.20? 0.22? 0.24? T:aegis128l 0.15? 0.26? 0.45? T:aeadaes128ocbtaglen128v1 0.23? 0.28? 0.31? T:aeadaes256ocbtaglen128v1 0.35 0.36 0.38 T:aezv3 0.05? 0.36? 0.44? T:aeadaes192ocbtaglen128v1 0.35 0.37 0.38 T:aezv4 0.38 0.39 0.39 T:aegis128 0.39 0.40 0.40 T:morus1280256v2 0.38? 0.40? 0.43? T:aezv5 0.39 0.40 0.41 T:morus1280128v2 0.39 0.40 0.41 T:morus1280128v1 0.39 0.40 0.41 T:morus1280256v1 0.39 0.40 0.41 T:aegis256 0.43? 0.44? 0.48? T:aes128otrcv3 0.43? 0.46? 0.48? T:aes128otrsv3 0.55 0.57 0.60 T:aes256otrsv3 0.56 0.59 0.61 T:aes256otrcv3 0.47? 0.62? 0.72? T:lunarkeyakv2 0.63 0.66 0.69 T:deoxysi128v141 0.68 0.69 0.70 T:deoxysneq128128v1 0.68 0.69 0.70 T:morus640128v1 0.68 0.70 0.71 T:morus640128v2 0.70 0.73 0.75 T:deoxysi256v141 0.76 0.77 0.78 T:norx6444v3 0.77 0.81 0.83 T:deoxysneq256128v1 0.92? 1.00? 1.10? T:oceankeyakv2 1.16 1.18 1.20 T:aes128otrpv3 1.31 1.33 1.34 T:colm0v1 1.34 1.38 1.40 T:deoxysii128v141 1.44 1.48 1.53 T:deoxyseq128128v1 1.47 1.48 1.49 T:aes128gcmv1 1.44 1.52 1.57 T:seakeyakv2 1.56 1.57 1.58 aes256gcmv1 1.54 1.58 1.60 T:deoxysii256v141 1.60? 1.63? 1.98? T:aes256otrpv3 1.60 1.64 1.74 T:deoxyseq256128v1 1.86 1.88 1.90 T:norx6441v3 1.87 1.89 1.90 T:norx6441v2 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.13 2.13 T:aes128n12t8silcv2 2.12 2.13 2.13 T:aes128n12t8silcv3 2.13 2.14 2.14 T:aes128n12t8clocv2 2.13 2.14 2.15 T:aes128n12t8clocv3 2.13 2.14 2.15 T:aes128n8t8clocv2 2.23 2.25 2.27 T:norx6441v1 2.79 2.81 2.83 T:norx6461v3 2.78 2.82 2.84 T:norx6461v2 3.09 3.15 3.20 T:lakekeyakv2 3.01? 3.23? 3.84? T:norx6444v2 3.35 3.37 3.39 T:norx6461v1 3.51 3.54 3.56 T:norx3241v3 3.31? 3.54? 3.75? T:norx6444v1 3.53 3.55 3.56 T:norx3241v2 3.89 3.98 4.04 T:lakekeyakv1 4.24 4.25 4.27 T:norx3241v1 4.41 4.42 4.44 T:aesjambuv1 5.29 5.31 5.33 T:norx3261v2 5.30 5.32 5.36 T:norx3261v3 6.14 6.28 6.41 T:ketjemajorv2 6.37 6.37 6.38 T:norx3261v1 6.38 6.45 6.56 T:acorn128v2 6.61 6.65 6.71 T:acorn128v3 7.24 7.26 7.29 T:ascon128av11 7.26 7.27 7.29 T:ascon96v1 7.34 7.47 7.58 T:ketjeminorv2 7.88 7.95 8.14 ascon128av12 8.49 8.66 8.73 T:riverkeyakv2 10.82 10.86 10.89 T:ascon128v11 10.85 10.87 10.90 T:ascon128v1 11.30 11.46 11.76 T:oceankeyakv1 11.56 11.72 11.88 T:seakeyakv1 11.72 11.79 12.12 ascon128v12 15.90 15.93 15.97 T:twine80n6t4clocv2 15.90 15.95 16.00 T:aes128otrsv1 16.08 16.12 16.18 T:aes128otrpv2 16.07 16.14 16.19 T:aes128otrpv1 16.23 16.26 16.33 T:twine80n6t4clocv3 16.27 16.35 16.40 T:aes128otrsv2 20.54 20.57 20.62 T:aes256otrpv1 20.49 20.58 20.68 T:proest256otrv1 20.57 20.62 20.65 T:aes256otrsv2 20.95 20.99 21.08 T:aes256otrsv1 21.01 21.05 21.24 T:aes256otrpv2 25.66 25.71 25.88 T:aes128n8clocv1 25.70 25.75 25.84 T:aes128n12clocv1 26.36 26.44 26.63 T:riverkeyakv1 26.64 26.67 26.77 T:aes128n8silcv1 26.68 26.73 26.83 T:aes128n12silcv1 29.31 29.47 29.65 T:ketjesrv1 30.29 30.36 30.61 T:ketjesrv2 41.94 42.02 42.09 T:proest128otrv1 52.52 52.86 53.16 T:ketjejrv1 60.92 60.98 61.02 T:present80n6t4silcv3 66.98 67.09 67.16 T:deoxysneq128128v13 77.23 77.70 77.94 T:ketjejrv2 98.30 98.86 98.99 T:deoxysneq256128v13 111.29 111.44 111.69 T:led80n6t4silcv3 126.60 127.07 129.70 T:twine80n6clocv1 136.20 136.43 136.80 T:deoxyseq128128v13 164.10 164.42 164.68 T:aezv1 198.03 198.25 200.05 T:deoxyseq256128v13 346.11 350.29 354.11 T:acorn128 4277.85 4296.88 4319.01 T:present80n6t4silcv2 4277.28 4320.47 4325.32 T:present80n6silcv1 8703.25 8723.31 8736.53 T:led80n6t4silcv2 8746.62 8759.94 8778.78 T:led80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.15? 0.20? 0.24? T:aeadaes128ocbtaglen128v1 0.21? 0.23? 0.24? T:aegis128l 0.23? 0.27? 0.29? T:aeadaes256ocbtaglen128v1 0.34 0.35 0.36 T:aezv3 0.32? 0.35? 0.38? T:aezv4 0.38 0.38 0.39 T:aezv5 0.39 0.39 0.40 T:aegis128 0.29? 0.40? 0.43? T:aeadaes192ocbtaglen128v1 0.39 0.40 0.40 T:aegis256 0.41 0.42 0.43 T:morus1280128v2 0.41 0.42 0.43 T:morus1280256v1 0.41 0.42 0.43 T:morus1280128v1 0.42 0.43 0.43 T:morus1280256v2 0.46 0.47 0.47 T:tiaoxinv1 0.46 0.47 0.49 T:tiaoxinv2 0.49 0.50 0.54 T:aes128otrcv3 0.48 0.50 0.52 T:aes128otrsv3 0.59 0.61 0.64 T:aes256otrsv3 0.60 0.65 0.66 T:aes256otrcv3 0.64 0.69 0.70 T:morus640128v2 0.69 0.69 0.71 T:morus640128v1 0.55? 0.76? 2.26? T:lunarkeyakv2 0.75 0.77 0.78 T:deoxysi128v141 0.78 0.79 0.80 T:norx6444v3 0.82? 0.85? 0.94? T:deoxysi256v141 0.88 0.89 0.91 T:deoxysneq256128v1 0.94? 1.01? 1.12? T:oceankeyakv2 0.95? 1.02? 1.31? T:deoxysneq128128v1 1.19 1.26 1.28 T:aes128otrpv3 1.33 1.35 1.42 T:colm0v1 1.34 1.37 1.43 T:deoxysii128v141 1.43 1.45 1.46 T:aes128gcmv1 1.46 1.47 1.48 aes256gcmv1 1.51 1.56 1.64 T:deoxysii256v141 1.54 1.58 1.65 T:seakeyakv2 1.63 1.65 1.69 T:deoxyseq128128v1 1.54? 1.70? 1.96? T:aes256otrpv3 1.76 1.78 1.84 T:deoxyseq256128v1 1.79 1.81 1.82 T:norx6441v3 1.81 1.82 1.84 T:norx6441v2 1.98 1.98 2.06 T:aes128n12t8silcv3 1.98 1.98 2.06 T:aes128n12t8silcv2 1.98 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.18 2.18 2.19 T:norx6441v1 2.73 2.75 2.77 T:norx6461v3 2.74 2.76 2.78 T:norx6461v2 2.94? 3.15? 3.66? T:norx6444v2 3.08 3.16 3.20 T:lakekeyakv2 3.30 3.33 3.35 T:norx6461v1 3.26 3.43 3.61 T:norx6444v1 3.43 3.45 3.48 T:norx3241v2 3.44 3.45 3.47 T:norx3241v3 3.97 4.08 4.20 T:lakekeyakv1 4.14 4.16 4.18 T:norx3241v1 4.66 4.67 4.70 T:aesjambuv1 5.21 5.23 5.24 T:norx3261v3 5.21 5.24 5.28 T:norx3261v2 5.94 6.05 6.17 T:ketjemajorv2 6.27 6.28 6.28 T:norx3261v1 6.71 6.73 6.77 T:acorn128v3 6.77 6.86 7.02 T:acorn128v2 7.06 7.18 7.24 T:ketjeminorv2 7.38 7.41 7.43 T:ascon96v1 7.41 7.43 7.46 T:ascon128av11 8.00 8.07 8.11 ascon128av12 8.71 8.80 8.86 T:riverkeyakv2 10.99 11.02 11.06 T:ascon128v1 11.00 11.03 11.06 T:ascon128v11 11.41 11.57 12.00 T:oceankeyakv1 11.74 11.79 11.82 ascon128v12 11.63 11.83 11.92 T:seakeyakv1 15.69 15.74 15.75 T:twine80n6t4clocv2 16.18 16.25 16.35 T:aes128otrsv1 16.19 16.25 16.33 T:twine80n6t4clocv3 16.22 16.26 16.33 T:aes128otrpv1 16.24 16.29 16.38 T:aes128otrpv2 16.49 16.57 16.65 T:aes128otrsv2 20.39 20.54 20.68 T:proest256otrv1 20.85 20.88 20.92 T:aes256otrsv2 20.84 20.90 20.96 T:aes256otrpv1 21.08 21.12 21.20 T:aes256otrpv2 21.13 21.20 21.30 T:aes256otrsv1 24.45 24.55 24.68 T:aes128n12clocv1 24.69 24.78 24.92 T:aes128n8clocv1 26.05 26.10 26.16 T:aes128n8silcv1 26.03 26.12 26.36 T:aes128n12silcv1 26.22 26.42 26.60 T:riverkeyakv1 27.06 27.14 27.25 T:ketjesrv2 31.17 31.36 31.44 T:ketjesrv1 41.94 41.99 42.06 T:proest128otrv1 52.80 53.04 53.35 T:ketjejrv1 61.35 61.49 61.72 T:present80n6t4silcv3 76.08 76.53 76.99 T:ketjejrv2 95.13 95.48 95.68 T:deoxysneq128128v13 111.29 111.48 111.63 T:led80n6t4silcv3 126.76 126.99 131.21 T:twine80n6clocv1 130.05 130.51 133.59 T:deoxysneq256128v13 136.24 136.43 136.82 T:deoxyseq128128v13 163.57 163.80 164.19 T:aezv1 197.93 198.14 198.87 T:deoxyseq256128v13 339.17 342.03 349.82 T:acorn128 4277.69 4288.33 4300.21 T:present80n6silcv1 4288.24 4299.99 4312.06 T:present80n6t4silcv2 8708.91 8724.12 8737.25 T:led80n6t4silcv2 8744.51 8756.50 8773.46 T:led80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13 0.13 0.14 T:aezv3 0.13 0.14 0.14 T:aezv4 0.14? 0.14? 0.16? T:aezv5 0.15? 0.20? 0.21? T:aeadaes128ocbtaglen128v1 0.22 0.22 0.23 T:aegis128l -0.08? 0.26? 0.59? T:aeadaes256ocbtaglen128v1 0.39 0.39 0.40 T:aegis128 0.39 0.40 0.40 T:aegis256 0.39? 0.40? 0.73? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:morus1280256v1 0.41 0.42 0.43 T:morus1280128v1 0.41 0.42 0.43 T:morus1280128v2 0.41 0.42 0.43 T:morus1280256v2 0.46 0.47 0.47 T:tiaoxinv2 0.47 0.47 0.47 T:tiaoxinv1 0.48 0.49 0.50 T:aes128otrsv3 0.48 0.50 0.53 T:aes128otrcv3 0.61 0.62 0.63 T:aes256otrcv3 0.60 0.62 0.64 T:aes256otrsv3 0.44? 0.64? 0.80? T:lunarkeyakv2 0.66 0.70 0.72 T:morus640128v2 0.69 0.70 0.72 T:morus640128v1 0.72 0.76 0.78 T:deoxysi128v141 0.77 0.79 0.80 T:norx6444v3 0.79 0.83 0.85 T:deoxysi256v141 0.89 0.90 0.91 T:deoxysneq256128v1 0.94? 1.02? 1.11? T:oceankeyakv2 0.97? 1.03? 1.28? T:deoxysneq128128v1 1.18 1.25 1.26 T:aes128otrpv3 1.32 1.34 1.36 T:colm0v1 1.36 1.39 1.47 T:deoxysii128v141 1.45 1.45 1.46 T:aes128gcmv1 1.47 1.47 1.48 aes256gcmv1 1.54 1.57 1.60 T:deoxysii256v141 1.53 1.59 1.69 T:seakeyakv2 1.59 1.64 1.68 T:deoxyseq128128v1 1.55? 1.69? 1.97? T:aes256otrpv3 1.73 1.78 1.86 T:deoxyseq256128v1 1.80 1.81 1.82 T:norx6441v3 1.81 1.82 1.84 T:norx6441v2 1.98 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv3 1.98 2.06 2.06 T:aes128n8t8clocv2 2.05 2.06 2.07 T:aes128n8t8silcv2 1.98 2.06 2.07 T:aes128n12t8clocv3 1.98 2.06 2.07 T:aes128n12t8clocv2 2.18 2.18 2.21 T:norx6441v1 2.73 2.75 2.76 T:norx6461v2 2.74 2.76 2.77 T:norx6461v3 2.98? 3.16? 3.69? T:norx6444v2 3.12 3.17 3.20 T:lakekeyakv2 3.30 3.31 3.33 T:norx6461v1 3.44 3.45 3.46 T:norx3241v3 3.44 3.46 3.47 T:norx3241v2 3.29 3.50 3.64 T:norx6444v1 3.98 4.06 4.12 T:lakekeyakv1 4.15 4.16 4.17 T:norx3241v1 4.66 4.67 4.70 T:aesjambuv1 5.21 5.23 5.26 T:norx3261v3 5.21 5.25 5.26 T:norx3261v2 5.97 6.09 6.14 T:ketjemajorv2 6.27 6.29 6.29 T:norx3261v1 6.70 6.74 6.76 T:acorn128v3 6.76 6.84 6.90 T:acorn128v2 7.04? 7.19? 7.85? T:ketjeminorv2 7.39 7.41 7.44 T:ascon128av11 7.40 7.42 7.45 T:ascon96v1 8.03 8.06 8.10 ascon128av12 8.63 8.87 8.96 T:riverkeyakv2 10.98 11.02 11.05 T:ascon128v1 11.00 11.02 11.06 T:ascon128v11 11.45 11.56 11.92 T:oceankeyakv1 11.74 11.77 11.81 ascon128v12 11.68 11.83 11.88 T:seakeyakv1 15.70 15.76 15.82 T:twine80n6t4clocv2 16.15 16.23 16.27 T:twine80n6t4clocv3 16.23 16.27 16.35 T:aes128otrsv1 16.31 16.34 16.38 T:aes128otrpv1 16.27 16.35 16.39 T:aes128otrpv2 16.49 16.56 16.64 T:aes128otrsv2 20.61 20.66 20.88 T:proest256otrv1 20.84 20.87 20.93 T:aes256otrpv1 20.82 20.89 20.95 T:aes256otrsv2 21.12 21.17 21.26 T:aes256otrsv1 21.12 21.17 21.20 T:aes256otrpv2 24.43 24.50 24.57 T:aes128n12clocv1 24.68 24.77 24.87 T:aes128n8clocv1 25.68 26.08 26.16 T:aes128n8silcv1 26.06 26.14 26.18 T:aes128n12silcv1 26.33 26.45 26.69 T:riverkeyakv1 27.05 27.18 27.34 T:ketjesrv2 31.23 31.49 31.60 T:ketjesrv1 42.02 42.05 42.12 T:proest128otrv1 52.84 53.21 53.45 T:ketjejrv1 61.34 61.42 61.60 T:present80n6t4silcv3 76.12 76.42 77.00 T:ketjejrv2 95.38 95.61 95.93 T:deoxysneq128128v13 111.28 111.50 111.78 T:led80n6t4silcv3 130.10 130.58 133.32 T:deoxysneq256128v13 136.17 136.36 136.91 T:deoxyseq128128v13 139.25 143.72 145.08 T:twine80n6clocv1 163.37 163.77 164.19 T:aezv1 197.95 198.22 200.13 T:deoxyseq256128v13 338.05 340.86 349.78 T:acorn128 4279.38 4286.19 4300.01 T:present80n6silcv1 4284.53 4299.00 4310.23 T:present80n6t4silcv2 8707.65 8727.35 8737.36 T:led80n6t4silcv2 8744.56 8754.83 8777.53 T:led80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.11? 0.14? 0.16? T:tiaoxinv1 0.12? 0.14? 0.16? T:tiaoxinv2 0.12? 0.18? 0.24? T:aeadaes128ocbtaglen128v1 0.19? 0.21? 0.22? T:aegis128l 0.24? 0.26? 0.27? T:aezv3 0.24? 0.26? 0.28? T:aezv4 0.10? 0.26? 0.41? T:aeadaes256ocbtaglen128v1 0.25? 0.27? 0.29? T:aezv5 0.29? 0.38? 0.42? T:aeadaes192ocbtaglen128v1 0.37 0.38 0.39 T:aegis128 0.38 0.38 0.39 T:morus1280128v1 0.37 0.38 0.39 T:morus1280256v2 0.38 0.38 0.39 T:morus1280256v1 0.38 0.38 0.39 T:morus1280128v2 0.39 0.39 0.40 T:aegis256 0.46 0.48 0.49 T:aes128otrcv3 0.59 0.60 0.62 T:aes256otrcv3 0.64 0.65 0.67 T:morus640128v1 0.68 0.69 0.70 T:morus640128v2 0.66 0.69 0.72 T:deoxysi128v141 0.69 0.71 0.75 T:deoxysneq128128v1 0.69? 0.75? 0.81? T:lunarkeyakv2 0.75 0.77 0.82 T:deoxysi256v141 0.82 0.86 0.91 T:oceankeyakv2 0.87 0.88 0.89 T:aes128gcmv1 0.87 0.91 0.92 T:colm0v1 0.91 0.93 0.93 aes256gcmv1 0.97? 1.02? 1.21? T:deoxysneq256128v1 1.02 1.06 1.07 T:deoxysii128v141 1.13 1.15 1.17 T:deoxyseq128128v1 1.17 1.19 1.20 T:aes128otrpv3 1.18 1.21 1.24 T:deoxysii256v141 1.25 1.26 1.27 T:aes128otrsv3 1.27 1.29 1.31 T:seakeyakv2 1.30 1.35 1.42 T:deoxyseq256128v1 1.38 1.38 1.39 T:norx6444v3 1.58? 1.62? 2.00? T:aes256otrpv3 1.68 1.68 1.69 T:aes256otrsv3 1.87 1.88 1.89 T:norx6441v3 1.89 1.90 1.91 T:norx6441v2 2.09 2.09 2.10 T:aes128n12t8silcv2 2.09 2.09 2.10 T:aes128n12t8silcv3 2.09 2.09 2.10 T:aes128n8t8silcv2 2.09 2.10 2.10 T:aes128n12t8clocv3 2.10 2.10 2.11 T:aes128n12t8clocv2 2.10 2.10 2.11 T:aes128n8t8clocv2 2.25 2.26 2.29 T:norx6441v1 2.67 2.70 2.75 T:lakekeyakv2 2.80 2.82 2.83 T:norx6461v2 2.81 2.83 2.85 T:norx6461v3 3.05? 3.15? 3.45? T:norx6444v2 3.36 3.37 3.38 T:norx6461v1 3.36? 3.48? 3.84? T:norx6444v1 3.52 3.54 3.55 T:norx3241v3 3.52 3.54 3.55 T:norx3241v2 3.83 3.86 3.90 T:lakekeyakv1 4.22 4.24 4.25 T:norx3241v1 4.44 4.45 4.48 T:aesjambuv1 5.29 5.32 5.33 T:norx3261v2 5.30 5.33 5.35 T:norx3261v3 5.27? 5.37? 11.57? T:ketjemajorv2 6.03 6.10 6.16 T:riverkeyakv2 6.37 6.37 6.38 T:norx3261v1 6.56 6.63 6.66 T:acorn128v2 6.59 6.63 6.72 T:ketjeminorv2 6.65 6.67 6.69 T:acorn128v3 7.20 7.22 7.24 T:ascon128av11 7.22 7.23 7.25 T:ascon96v1 7.95 8.02 8.09 ascon128av12 10.76 10.78 10.81 T:ascon128v1 10.78 10.80 10.82 T:ascon128v11 11.35 11.51 11.67 T:oceankeyakv1 11.54 11.60 11.70 T:seakeyakv1 11.77 11.95 12.08 ascon128v12 15.16 15.19 15.23 T:aes128otrsv2 15.16 15.21 15.27 T:aes128otrsv1 15.58 15.60 15.62 T:aes128otrpv2 15.56 15.61 15.64 T:aes128otrpv1 15.63 15.66 15.74 T:twine80n6t4clocv2 16.07 16.09 16.11 T:twine80n6t4clocv3 19.58 19.62 19.65 T:aes128n8clocv1 19.60 19.64 19.83 T:aes128n12clocv1 19.65 19.69 19.72 T:aes256otrsv2 19.83 19.85 19.91 T:aes256otrsv1 20.11 20.15 20.20 T:aes128n12silcv1 20.11 20.15 20.42 T:aes128n8silcv1 20.55 20.59 20.62 T:aes256otrpv1 20.59 20.61 20.71 T:aes256otrpv2 20.68 20.84 20.94 T:proest256otrv1 24.33 24.55 24.68 T:riverkeyakv1 26.32 26.47 26.70 T:ketjesrv1 27.39 27.48 27.64 T:ketjesrv2 42.34 42.44 42.47 T:proest128otrv1 50.00 50.20 50.52 T:ketjejrv1 60.79 60.83 60.88 T:present80n6t4silcv3 67.45 67.61 67.73 T:deoxysneq128128v13 75.06 75.21 75.72 T:ketjejrv2 95.33? 95.64? 108.11? T:twine80n6clocv1 98.49 98.90 99.62 T:deoxysneq256128v13 102.03 102.16 102.97 T:deoxyseq128128v13 108.15 108.59 108.85 T:aezv1 111.04 111.13 111.35 T:led80n6t4silcv3 148.23 148.46 149.14 T:deoxyseq256128v13 337.41 339.32 348.65 T:acorn128 3214.07 3225.79 3232.12 T:present80n6t4silcv2 3223.04 3228.81 3235.47 T:present80n6silcv1 6554.64 6560.35 6580.98 T:led80n6silcv1 6540.62 6562.78 6601.89 T:led80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.11? 0.18? 0.25? T:aeadaes128ocbtaglen128v1 0.19? 0.21? 0.22? T:aegis128l 0.08? 0.23? 0.40? T:aeadaes256ocbtaglen128v1 0.23? 0.26? 0.27? T:aezv3 0.23? 0.26? 0.27? T:aezv4 0.26 0.27 0.28 T:aezv5 0.27 0.29 0.30 T:tiaoxinv1 0.28 0.29 0.30 T:tiaoxinv2 0.38 0.38 0.39 T:aegis128 0.37 0.38 0.39 T:morus1280128v1 0.22? 0.39? 0.55? T:aeadaes192ocbtaglen128v1 0.39 0.39 0.40 T:morus1280128v2 0.39 0.39 0.40 T:morus1280256v1 0.39 0.39 0.40 T:morus1280256v2 0.39 0.40 0.40 T:aegis256 0.49 0.50 0.52 T:aes128otrcv3 0.61 0.63 0.64 T:aes256otrcv3 0.66 0.66 0.67 T:morus640128v2 0.65 0.67 0.67 T:morus640128v1 0.72 0.74 0.76 T:deoxysi128v141 0.74? 0.80? 0.85? T:lunarkeyakv2 0.82 0.83 0.88 T:deoxysi256v141 0.82 0.87 0.91 T:oceankeyakv2 0.85 0.87 0.89 T:aes128gcmv1 0.84 0.90 0.91 T:colm0v1 0.85 0.91 0.92 aes256gcmv1 0.98? 1.03? 1.22? T:deoxysneq128128v1 1.00 1.04 1.07 T:deoxysii128v141 1.03? 1.14? 1.40? T:deoxysneq256128v1 1.17 1.19 1.25 T:deoxysii256v141 1.17 1.19 1.22 T:aes128otrpv3 1.20 1.22 1.24 T:deoxyseq128128v1 1.26 1.27 1.29 T:aes128otrsv3 1.30 1.32 1.35 T:seakeyakv2 1.38 1.38 1.39 T:norx6444v3 1.38 1.43 1.46 T:deoxyseq256128v1 1.60? 1.64? 1.96? T:aes256otrpv3 1.69 1.71 1.73 T:aes256otrsv3 1.83 1.84 1.87 T:norx6441v3 1.84 1.86 1.87 T:norx6441v2 2.02 2.02 2.10 T:aes128n12t8silcv2 2.02 2.03 2.06 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128n8t8silcv2 2.07 2.07 2.08 T:aes128n8t8clocv2 2.06 2.07 2.08 T:aes128n12t8clocv3 2.07 2.10 2.11 T:aes128n12t8clocv2 2.22 2.23 2.24 T:norx6441v1 2.68 2.71 2.73 T:lakekeyakv2 2.79 2.80 2.83 T:norx6461v3 2.78 2.81 2.83 T:norx6461v2 2.99? 3.10? 3.35? T:norx6444v2 3.35 3.36 3.38 T:norx6461v1 3.33? 3.45? 3.77? T:norx6444v1 3.49 3.49 3.50 T:norx3241v2 3.49 3.51 3.51 T:norx3241v3 3.88 3.91 3.97 T:lakekeyakv1 4.17 4.19 4.20 T:norx3241v1 4.57 4.58 4.59 T:aesjambuv1 5.25 5.27 5.29 T:norx3261v2 5.27 5.28 5.30 T:norx3261v3 5.17? 5.33? 11.72? T:ketjemajorv2 6.14 6.18 6.27 T:riverkeyakv2 6.32 6.33 6.34 T:norx3261v1 6.35 6.44 6.47 T:ketjeminorv2 6.71 6.75 6.83 T:acorn128v2 6.73 6.75 6.76 T:acorn128v3 7.26 7.30 7.31 T:ascon96v1 7.29 7.30 7.33 T:ascon128av11 8.01 8.05 8.08 ascon128av12 10.84 10.87 10.89 T:ascon128v11 10.84 10.87 10.90 T:ascon128v1 11.36 11.60 11.73 T:oceankeyakv1 11.58 11.65 11.71 T:seakeyakv1 11.72 11.76 11.94 ascon128v12 15.28 15.31 15.40 T:aes128otrsv2 15.32 15.35 15.38 T:aes128otrsv1 15.52 15.55 15.56 T:twine80n6t4clocv2 15.64 15.68 15.72 T:aes128otrpv1 15.66 15.71 15.74 T:aes128otrpv2 16.04 16.07 16.12 T:twine80n6t4clocv3 18.98 19.02 19.12 T:aes128n12clocv1 19.07 19.14 19.32 T:aes128n8clocv1 19.75 19.79 19.81 T:aes256otrsv2 19.85 19.89 20.05 T:aes128n8silcv1 19.86 19.94 20.14 T:aes128n12silcv1 19.94 19.98 20.04 T:aes256otrsv1 20.64 20.69 20.83 T:aes256otrpv2 20.65 20.70 20.81 T:aes256otrpv1 20.72 20.81 20.88 T:proest256otrv1 24.40 24.50 24.76 T:riverkeyakv1 25.73 25.85 26.20 T:ketjesrv2 27.26 27.47 27.88 T:ketjesrv1 42.31 42.40 42.47 T:proest128otrv1 50.14 50.45 50.57 T:ketjejrv1 60.98 61.09 61.22 T:present80n6t4silcv3 74.35 74.60 74.86 T:ketjejrv2 81.55 82.00 83.37 T:deoxysneq128128v13 95.17 95.36 100.09 T:twine80n6clocv1 102.15 102.25 102.62 T:deoxyseq128128v13 108.08 108.28 108.67 T:aezv1 111.07 111.23 111.50 T:led80n6t4silcv3 114.47 114.95 118.27 T:deoxysneq256128v13 148.04 148.35 149.43 T:deoxyseq256128v13 338.39 339.84 347.82 T:acorn128 3213.87 3221.58 3230.49 T:present80n6silcv1 3218.67 3227.93 3233.98 T:present80n6t4silcv2 6549.57 6554.49 6568.78 T:led80n6t4silcv2 6557.51 6564.01 6583.35 T:led80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.13? 0.14? 0.17? T:aezv3 0.14 0.15 0.15 T:aezv5 0.15 0.15 0.15 T:aezv4 0.17? 0.18? 0.19? T:aeadaes128ocbtaglen128v1 0.20 0.21 0.21 T:aegis128l 0.23 0.24 0.25 T:aeadaes256ocbtaglen128v1 0.29 0.29 0.31 T:tiaoxinv1 0.29 0.29 0.30 T:tiaoxinv2 0.38 0.39 0.40 T:aeadaes192ocbtaglen128v1 0.39 0.39 0.39 T:aegis128 0.39 0.39 0.40 T:morus1280256v2 0.38 0.39 0.39 T:morus1280128v1 0.39 0.39 0.40 T:morus1280128v2 0.39 0.39 0.40 T:morus1280256v1 0.39 0.40 0.40 T:aegis256 0.41? 0.50? 0.51? T:aes128otrcv3 0.61 0.63 0.64 T:aes256otrcv3 0.66 0.67 0.67 T:morus640128v2 0.66 0.67 0.67 T:morus640128v1 0.75 0.77 0.78 T:deoxysi128v141 0.70? 0.78? 0.86? T:lunarkeyakv2 0.82 0.84 0.87 T:deoxysi256v141 0.86 0.87 0.88 T:aes128gcmv1 0.82 0.89 0.91 T:oceankeyakv2 0.86 0.91 0.92 T:colm0v1 0.88 0.91 0.91 aes256gcmv1 1.02 1.05 1.07 T:deoxysii128v141 1.00? 1.06? 1.14? T:deoxysneq256128v1 1.01? 1.09? 1.26? T:deoxysneq128128v1 1.14 1.20 1.22 T:aes128otrpv3 1.19 1.22 1.25 T:deoxysii256v141 1.22 1.22 1.24 T:deoxyseq128128v1 1.27 1.27 1.27 T:aes128otrsv3 1.30 1.33 1.37 T:seakeyakv2 1.38 1.39 1.39 T:norx6444v3 1.38 1.42 1.46 T:deoxyseq256128v1 1.59? 1.64? 2.01? T:aes256otrpv3 1.70 1.71 1.71 T:aes256otrsv3 1.83 1.84 1.85 T:norx6441v3 1.85 1.85 1.87 T:norx6441v2 2.02 2.06 2.06 T:aes128n12t8silcv3 2.02 2.06 2.06 T:aes128n8t8silcv2 2.02 2.06 2.10 T:aes128n12t8silcv2 2.07 2.07 2.07 T:aes128n8t8clocv2 2.07 2.07 2.07 T:aes128n12t8clocv3 2.07 2.07 2.08 T:aes128n12t8clocv2 2.21 2.22 2.23 T:norx6441v1 2.67 2.73 2.74 T:lakekeyakv2 2.78 2.79 2.82 T:norx6461v2 2.79 2.80 2.82 T:norx6461v3 3.03? 3.11? 3.40? T:norx6444v2 3.35 3.36 3.37 T:norx6461v1 3.35? 3.46? 3.78? T:norx6444v1 3.48 3.49 3.50 T:norx3241v2 3.49 3.50 3.50 T:norx3241v3 3.90 3.93 3.96 T:lakekeyakv1 4.17 4.18 4.19 T:norx3241v1 4.57 4.58 4.58 T:aesjambuv1 5.25 5.26 5.27 T:norx3261v2 5.27 5.28 5.29 T:norx3261v3 5.17? 5.30? 11.15? T:ketjemajorv2 6.15 6.26 6.44 T:riverkeyakv2 6.32 6.33 6.33 T:norx3261v1 6.38 6.44 6.56 T:ketjeminorv2 6.71 6.75 6.80 T:acorn128v2 6.74 6.76 6.93 T:acorn128v3 7.26 7.29 7.32 T:ascon96v1 7.28 7.30 7.31 T:ascon128av11 8.00 8.03 8.05 ascon128av12 10.85 10.87 10.90 T:ascon128v11 10.85 10.87 10.89 T:ascon128v1 11.34 11.46 11.73 T:oceankeyakv1 11.64 11.69 11.97 T:seakeyakv1 11.70 11.77 11.93 ascon128v12 15.30 15.34 15.46 T:aes128otrsv2 15.33 15.38 15.44 T:aes128otrsv1 15.52 15.54 15.59 T:twine80n6t4clocv2 15.68 15.72 15.74 T:aes128otrpv1 15.70 15.77 15.86 T:aes128otrpv2 16.04 16.08 16.11 T:twine80n6t4clocv3 18.99 19.02 19.07 T:aes128n12clocv1 19.09 19.17 19.31 T:aes128n8clocv1 19.78 19.81 19.82 T:aes256otrsv2 19.86 19.89 19.96 T:aes128n8silcv1 19.86 19.90 20.12 T:aes128n12silcv1 19.92 19.99 20.16 T:aes256otrsv1 20.66 20.71 20.77 T:aes256otrpv1 20.57 20.80 20.85 T:aes256otrpv2 20.74 20.80 20.90 T:proest256otrv1 24.48 24.57 24.65 T:riverkeyakv1 25.78 26.02 26.16 T:ketjesrv2 27.26 27.53 27.69 T:ketjesrv1 42.34 42.36 42.48 T:proest128otrv1 50.04 50.32 50.42 T:ketjejrv1 61.01 61.13 61.30 T:present80n6t4silcv3 74.23 74.43 75.06 T:ketjejrv2 82.31 83.18 83.59 T:deoxysneq128128v13 95.13? 100.37? 107.27? T:twine80n6clocv1 102.11 102.27 103.16 T:deoxyseq128128v13 108.10 108.24 108.56 T:aezv1 111.08 111.23 111.42 T:led80n6t4silcv3 114.22 115.30 118.27 T:deoxysneq256128v13 148.24 148.37 148.82 T:deoxyseq256128v13 338.66 340.22 348.05 T:acorn128 3210.57 3219.55 3223.78 T:present80n6silcv1 3222.66 3227.89 3235.63 T:present80n6t4silcv2 6537.83 6547.19 6555.79 T:led80n6t4silcv2 6555.34 6561.84 6577.94 T:led80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.10? 0.11? 0.14? T:tiaoxinv1 0.10? 0.12? 0.14? T:tiaoxinv2 0.12? 0.15? 0.16? T:aezv5 0.13? 0.16? 0.16? T:aezv3 0.11? 0.16? 0.22? T:aeadaes128ocbtaglen128v1 0.13? 0.17? 0.19? T:aezv4 0.19 0.20 0.21 T:aegis128l -0.07? 0.23? 0.57? T:aeadaes256ocbtaglen128v1 0.25? 0.27? 0.29? aes256gcmv1 0.26? 0.29? 0.30? T:aes128gcmv1 0.35 0.36 0.37 T:morus1280128v1 0.36 0.36 0.37 T:morus1280256v2 0.36 0.37 0.38 T:morus1280256v1 0.36 0.37 0.37 T:morus1280128v2 0.38 0.38 0.39 T:aegis128 0.28? 0.39? 0.72? T:aeadaes192ocbtaglen128v1 0.39 0.39 0.40 T:aegis256 0.38? 0.47? 0.56? T:lunarkeyakv2 0.47 0.48 0.50 T:colm0v1 0.48? 0.49? 0.55? T:aes128otrcv3 0.62 0.64 0.66 T:morus640128v1 0.61 0.65 0.67 T:aes256otrcv3 0.66 0.68 0.70 T:morus640128v2 0.69 0.70 0.72 T:deoxysneq128128v1 0.65? 0.70? 0.78? T:oceankeyakv2 0.72 0.74 0.76 T:deoxysii128v141 0.73 0.76 0.78 T:deoxysi128v141 0.76 0.78 0.79 T:deoxyseq128128v1 0.83 0.84 0.86 T:deoxysii256v141 0.81? 0.85? 0.95? T:deoxysi256v141 0.97 0.98 1.00 T:deoxyseq256128v1 1.01? 1.09? 1.42? T:deoxysneq256128v1 1.13 1.16 1.18 T:aes128otrpv3 1.18 1.24 1.27 T:seakeyakv2 1.54? 1.57? 1.96? T:aes256otrpv3 1.86 1.87 1.88 T:norx6441v3 1.87 1.89 1.90 T:norx6441v2 1.98 1.99 2.00 T:norx6444v3 2.05 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128n12t8silcv2 2.06 2.06 2.06 T:aes128n8t8silcv2 2.06 2.06 2.06 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128n12t8clocv2 2.06 2.07 2.07 T:aes128otrsv3 2.24 2.28 2.30 T:norx6441v1 2.42 2.44 2.48 T:lakekeyakv2 2.81 2.81 2.82 T:aes256otrsv3 2.81 2.83 2.86 T:norx6461v2 2.82 2.83 2.85 T:norx6461v3 3.06 3.07 3.09 T:norx6444v2 3.35 3.37 3.39 T:norx6461v1 3.27? 3.44? 4.05? T:norx6444v1 3.51 3.53 3.54 T:norx3241v2 3.52 3.53 3.55 T:norx3241v3 3.54 3.60 3.69 T:lakekeyakv1 4.19 4.20 4.23 T:norx3241v1 4.46 4.49 4.49 T:aesjambuv1 4.42 4.56 4.77 T:ketjemajorv2 5.26 5.29 5.33 T:norx3261v2 5.28 5.31 5.33 T:norx3261v3 5.58 5.69 5.81 T:ketjeminorv2 5.68 5.73 5.84 T:riverkeyakv2 6.37 6.37 6.38 T:norx3261v1 6.55 6.58 6.68 T:acorn128v3 6.66 6.70 6.74 T:acorn128v2 7.15 7.16 7.18 T:ascon128av11 7.15 7.18 7.20 T:ascon96v1 7.98 8.02 8.06 ascon128av12 10.68 10.72 10.75 T:ascon128v1 10.70 10.74 10.79 T:ascon128v11 11.24 11.37 11.54 T:oceankeyakv1 11.65 11.69 11.95 ascon128v12 11.44? 11.70? 17.83? T:seakeyakv1 13.45 13.50 13.59 T:aes128n8clocv1 13.46 13.50 13.54 T:aes128n12clocv1 13.47 13.53 13.59 T:aes128n8silcv1 13.51 13.54 13.61 T:aes128n12silcv1 13.99 14.06 14.11 T:aes128otrsv2 14.40 14.47 14.55 T:aes128otrsv1 15.04 15.08 15.16 T:aes128otrpv2 15.06 15.08 15.18 T:aes128otrpv1 15.32 15.35 15.39 T:twine80n6t4clocv2 15.94 15.96 16.01 T:twine80n6t4clocv3 18.67 18.72 18.76 T:aes256otrsv1 18.70 18.74 18.78 T:aes256otrsv2 19.92 20.20 20.39 T:aes256otrpv2 20.51 20.56 20.59 T:aes256otrpv1 21.00 21.09 21.21 T:proest256otrv1 22.47 22.57 22.66 T:riverkeyakv1 23.32 23.48 23.89 T:ketjesrv1 24.34 24.47 24.56 T:ketjesrv2 42.69 42.78 42.87 T:proest128otrv1 47.09 47.30 47.53 T:ketjejrv1 52.30 52.41 53.03 T:aezv1 60.72 60.77 60.83 T:present80n6t4silcv3 67.66 67.79 67.99 T:deoxysneq128128v13 67.72 67.92 68.06 T:deoxyseq128128v13 72.11 72.27 72.88 T:ketjejrv2 72.10 72.76 73.73 T:twine80n6clocv1 98.16 98.32 98.66 T:deoxyseq256128v13 98.30 98.56 99.14 T:deoxysneq256128v13 110.64 110.73 111.19 T:led80n6t4silcv3 337.35 340.42 346.78 T:acorn128 2140.88 2145.73 2151.62 T:present80n6t4silcv2 2137.77 2148.77 2156.06 T:present80n6silcv1 4346.84 4365.95 4504.34 T:led80n6t4silcv2 4365.11 4379.76 4397.07 T:led80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.11? 0.11? 0.16? T:tiaoxinv1 0.10? 0.13? 0.15? T:tiaoxinv2 0.14? 0.15? 0.16? T:aezv5 0.15? 0.16? 0.17? T:aezv3 0.14? 0.16? 0.18? T:aezv4 0.12? 0.17? 0.22? T:aeadaes128ocbtaglen128v1 0.19 0.20 0.21 T:aegis128l -0.08? 0.22? 0.55? T:aeadaes256ocbtaglen128v1 0.24? 0.27? 0.29? aes256gcmv1 0.25? 0.27? 0.29? T:aes128gcmv1 0.35 0.36 0.37 T:morus1280128v1 0.36 0.36 0.37 T:morus1280256v1 0.36 0.36 0.37 T:morus1280128v2 0.36 0.37 0.37 T:morus1280256v2 0.38 0.38 0.39 T:aegis128 0.07? 0.39? 0.41? T:aeadaes192ocbtaglen128v1 0.39 0.39 0.40 T:aegis256 0.35? 0.47? 0.56? T:lunarkeyakv2 0.48 0.49 0.53 T:colm0v1 0.47? 0.50? 0.54? T:aes128otrcv3 0.59 0.61 0.64 T:aes256otrcv3 0.62 0.63 0.64 T:morus640128v2 0.63 0.64 0.65 T:morus640128v1 0.64? 0.73? 0.82? T:oceankeyakv2 0.70 0.73 0.75 T:deoxysii128v141 0.72 0.74 0.76 T:deoxysi128v141 0.77 0.78 0.79 T:deoxyseq128128v1 0.77? 0.82? 0.89? T:deoxysii256v141 0.81? 0.86? 0.94? T:deoxysi256v141 0.85? 0.94? 1.06? T:deoxysneq128128v1 0.95 0.99 1.00 T:deoxyseq256128v1 1.04? 1.13? 1.41? T:deoxysneq256128v1 1.15 1.23 1.26 T:seakeyakv2 1.15 1.23 1.26 T:aes128otrpv3 1.59? 1.64? 1.95? T:aes256otrpv3 1.83 1.86 1.87 T:norx6441v3 1.88 1.90 1.91 T:norx6441v2 1.98 1.99 1.99 T:norx6444v3 1.98 2.05 2.07 T:aes128n12t8silcv2 1.98 2.06 2.06 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128n12t8clocv3 2.05 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.06 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128otrsv3 2.23 2.25 2.26 T:norx6441v1 2.42 2.43 2.44 T:lakekeyakv2 2.81 2.82 2.82 T:aes256otrsv3 2.82 2.84 2.85 T:norx6461v2 2.82 2.85 2.86 T:norx6461v3 3.07 3.10 3.11 T:norx6444v2 3.38 3.40 3.41 T:norx6461v1 3.28? 3.44? 4.05? T:norx6444v1 3.51 3.53 3.54 T:norx3241v2 3.52 3.54 3.55 T:norx3241v3 3.52 3.56 3.69 T:lakekeyakv1 4.19 4.21 4.23 T:norx3241v1 4.41 4.46 4.60 T:ketjemajorv2 4.48 4.49 4.50 T:aesjambuv1 5.26 5.28 5.31 T:norx3261v2 5.28 5.30 5.32 T:norx3261v3 5.58 5.72 5.95 T:ketjeminorv2 5.69 5.74 5.88 T:riverkeyakv2 6.37 6.38 6.38 T:norx3261v1 6.63 6.70 6.78 T:acorn128v2 6.75 6.77 6.81 T:acorn128v3 7.15 7.18 7.20 T:ascon128av11 7.16 7.19 7.21 T:ascon96v1 7.97 8.00 8.07 ascon128av12 10.69 10.73 10.75 T:ascon128v11 10.70 10.73 10.76 T:ascon128v1 11.21 11.35 11.57 T:oceankeyakv1 11.42? 11.55? 16.66? T:seakeyakv1 11.59 11.66 11.69 ascon128v12 13.46 13.53 13.57 T:aes128n8clocv1 13.51 13.55 13.60 T:aes128n12silcv1 13.51 13.55 13.63 T:aes128n12clocv1 13.51 13.55 13.58 T:aes128n8silcv1 14.03 14.10 14.20 T:aes128otrsv2 14.42 14.48 14.59 T:aes128otrsv1 15.03 15.10 15.16 T:aes128otrpv1 15.04 15.11 15.13 T:aes128otrpv2 15.31 15.37 15.42 T:twine80n6t4clocv2 15.93 15.96 16.04 T:twine80n6t4clocv3 18.65 18.69 18.73 T:aes256otrsv2 18.64 18.72 18.79 T:aes256otrsv1 19.95 20.22 20.39 T:aes256otrpv2 20.49 20.55 20.61 T:aes256otrpv1 20.93 20.99 21.12 T:proest256otrv1 22.36 22.52 22.70 T:riverkeyakv1 23.19 23.35 23.58 T:ketjesrv1 24.35 24.48 25.03 T:ketjesrv2 42.70 42.78 42.87 T:proest128otrv1 47.19 47.31 47.57 T:ketjejrv1 52.39 52.56 52.97 T:aezv1 60.78 60.82 60.88 T:present80n6t4silcv3 63.48? 63.80? 72.57? T:twine80n6clocv1 67.67 67.77 68.05 T:deoxysneq128128v13 67.81 67.93 68.12 T:deoxyseq128128v13 71.93 72.32 72.91 T:ketjejrv2 98.22 98.33 98.87 T:deoxyseq256128v13 98.59 99.07 102.84 T:deoxysneq256128v13 110.65 110.82 110.97 T:led80n6t4silcv3 335.81 338.82 346.76 T:acorn128 2138.83 2141.53 2144.11 T:present80n6silcv1 2137.81 2142.93 2158.75 T:present80n6t4silcv2 4348.90 4357.61 4360.35 T:led80n6t4silcv2 4371.81 4378.12 4383.32 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.11 0.11 0.12 T:tiaoxinv2 0.11? 0.12? 0.13? T:tiaoxinv1 0.14 0.15 0.15 T:aezv5 0.15? 0.16? 0.17? T:aezv3 0.15? 0.16? 0.17? T:aezv4 0.11? 0.17? 0.19? T:aeadaes128ocbtaglen128v1 0.19 0.20 0.20 T:aegis128l 0.22? 0.24? 0.25? T:aeadaes256ocbtaglen128v1 0.27 0.28 0.29 aes256gcmv1 0.27 0.28 0.29 T:aes128gcmv1 0.35 0.36 0.37 T:morus1280128v2 0.35 0.36 0.37 T:morus1280128v1 0.36 0.36 0.37 T:morus1280256v1 0.36 0.36 0.37 T:morus1280256v2 0.38 0.38 0.39 T:aegis128 0.38? 0.39? 0.72? T:aeadaes192ocbtaglen128v1 0.39 0.39 0.40 T:aegis256 0.33? 0.46? 0.58? T:lunarkeyakv2 0.47 0.48 0.49 T:colm0v1 0.48 0.50 0.52 T:aes128otrcv3 0.60 0.62 0.65 T:aes256otrcv3 0.63 0.64 0.65 T:morus640128v2 0.62 0.64 0.65 T:morus640128v1 0.61? 0.68? 0.79? T:oceankeyakv2 0.72 0.73 0.75 T:deoxysii128v141 0.69? 0.73? 0.78? T:deoxysi128v141 0.77 0.78 0.80 T:deoxyseq128128v1 0.81 0.83 0.85 T:deoxysii256v141 0.80? 0.89? 0.91? T:deoxysi256v141 0.83? 0.89? 1.02? T:deoxysneq128128v1 0.96 0.97 0.98 T:deoxyseq256128v1 1.02? 1.11? 1.35? T:deoxysneq256128v1 1.17 1.21 1.25 T:seakeyakv2 1.15 1.22 1.24 T:aes128otrpv3 1.53? 1.65? 2.03? T:aes256otrpv3 1.85 1.88 1.91 T:norx6441v3 1.88 1.89 1.90 T:norx6441v2 1.98 1.99 1.99 T:norx6444v3 2.06 2.06 2.06 T:aes128n8t8silcv2 1.98 2.06 2.06 T:aes128n12t8silcv2 2.05 2.06 2.07 T:aes128n12t8clocv2 2.05 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128n8t8clocv2 1.98 2.06 2.06 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128otrsv3 2.24 2.25 2.28 T:norx6441v1 2.43 2.44 2.48 T:lakekeyakv2 2.81 2.81 2.82 T:aes256otrsv3 2.81 2.83 2.84 T:norx6461v3 2.81 2.83 2.84 T:norx6461v2 3.05 3.10 3.12 T:norx6444v2 3.38 3.39 3.43 T:norx6461v1 3.26? 3.40? 4.05? T:norx6444v1 3.51 3.53 3.55 T:norx3241v2 3.52 3.53 3.54 T:norx3241v3 3.50 3.55 3.66 T:lakekeyakv1 4.20 4.21 4.23 T:norx3241v1 4.48 4.49 4.49 T:aesjambuv1 4.36 4.50 4.61 T:ketjemajorv2 5.24 5.27 5.29 T:norx3261v2 5.28 5.30 5.32 T:norx3261v3 5.57 5.72 5.90 T:ketjeminorv2 5.67 5.77 5.92 T:riverkeyakv2 6.36 6.37 6.37 T:norx3261v1 6.68 6.70 6.74 T:acorn128v2 6.77 6.81 6.82 T:acorn128v3 7.14 7.16 7.19 T:ascon128av11 7.16 7.19 7.20 T:ascon96v1 7.97 8.01 8.03 ascon128av12 10.70 10.73 10.75 T:ascon128v11 10.72 10.74 10.78 T:ascon128v1 11.26 11.41 11.62 T:oceankeyakv1 11.51 11.56 11.73 T:seakeyakv1 11.64 11.66 11.72 ascon128v12 13.47 13.51 13.57 T:aes128n12clocv1 13.51 13.55 13.57 T:aes128n12silcv1 13.49 13.57 13.64 T:aes128n8clocv1 13.54 13.57 13.68 T:aes128n8silcv1 14.03 14.08 14.16 T:aes128otrsv2 14.38 14.47 14.55 T:aes128otrsv1 15.06 15.10 15.14 T:aes128otrpv2 15.08 15.13 15.17 T:aes128otrpv1 15.30 15.35 15.40 T:twine80n6t4clocv2 15.73 16.01 16.07 T:twine80n6t4clocv3 18.67 18.75 18.84 T:aes256otrsv1 18.70 18.75 18.79 T:aes256otrsv2 20.06 20.17 20.39 T:aes256otrpv2 20.51 20.57 20.62 T:aes256otrpv1 20.95 21.03 21.11 T:proest256otrv1 22.48 22.57 22.64 T:riverkeyakv1 23.24 23.35 23.54 T:ketjesrv1 24.45 24.57 25.12 T:ketjesrv2 42.71 42.82 42.89 T:proest128otrv1 47.41 47.57 47.68 T:ketjejrv1 52.29 52.55 52.92 T:aezv1 60.71 60.75 60.81 T:present80n6t4silcv3 63.43? 63.59? 72.90? T:twine80n6clocv1 67.62 67.75 68.02 T:deoxysneq128128v13 67.72 67.97 68.16 T:deoxyseq128128v13 71.97 72.25 72.58 T:ketjejrv2 98.16 98.35 98.65 T:deoxyseq256128v13 98.16 99.09 102.78 T:deoxysneq256128v13 110.67 110.87 111.06 T:led80n6t4silcv3 337.00 339.47 346.67 T:acorn128 2138.46 2142.89 2145.63 T:present80n6silcv1 2137.74 2142.93 2159.56 T:present80n6t4silcv2 4346.84 4353.28 4361.75 T:led80n6t4silcv2 4369.48 4372.33 4381.89 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.18? 0.19? 0.21? T:tiaoxinv1 0.19? 0.20? 0.22? T:tiaoxinv2 0.24 0.25 0.25 T:aegis128l 0.30 0.30 0.33 T:aezv3 0.31 0.31 0.34 T:aezv4 0.31? 0.32? 0.35? T:aezv5 0.34? 0.36? 0.42? T:aeadaes128ocbtaglen128v1 0.41 0.42 0.42 T:aegis128 0.44 0.44 0.44 T:aegis256 0.44? 0.46? 0.63? T:aeadaes256ocbtaglen128v1 0.47 0.48 0.48 T:morus1280256v1 0.48 0.48 0.48 T:morus1280128v1 0.48 0.49 0.49 T:morus1280128v2 0.49 0.49 0.49 T:morus1280256v2 0.53 0.55 0.58 T:aeadaes192ocbtaglen128v1 0.62 0.64 0.66 T:aes128otrcv3 0.75 0.75 0.76 T:morus640128v1 0.78 0.78 0.79 T:morus640128v2 0.80? 0.82? 1.01? T:aes256otrcv3 0.84 0.84 0.89 T:deoxysi128v141 0.86 0.88 0.93 T:deoxysneq128128v1 0.98 0.99 1.03 T:deoxysi256v141 0.99 0.99 1.01 T:colm0v1 1.00 1.00 1.01 T:aes128gcmv1 1.07 1.07 1.08 aes256gcmv1 1.24 1.25 1.27 T:deoxysii128v141 1.15? 1.26? 1.37? T:deoxysneq256128v1 1.29 1.30 1.31 T:aes128otrpv3 1.29 1.32 1.35 T:deoxyseq128128v1 1.33 1.34 1.35 T:aes128otrsv3 1.44 1.45 1.46 T:deoxysii256v141 1.53 1.57 1.64 T:deoxyseq256128v1 1.74? 1.77? 2.11? T:aes256otrpv3 1.79 1.81 1.84 T:oceankeyakv2 1.80 1.81 1.82 T:aes256otrsv3 1.88 1.89 1.91 T:norx6444v3 1.96 1.97 2.00 T:seakeyakv2 2.15 2.15 2.15 T:aes128n12t8clocv3 2.15 2.15 2.16 T:aes128n8t8clocv2 2.15 2.16 2.16 T:aes128n12t8clocv2 2.16 2.16 2.17 T:norx6441v3 2.16 2.17 2.17 T:aes128n8t8silcv2 2.17 2.17 2.17 T:aes128n12t8silcv3 2.17 2.17 2.17 T:aes128n12t8silcv2 2.18 2.19 2.20 T:norx6441v2 2.28 2.32 2.34 T:lunarkeyakv2 2.52 2.54 2.56 T:norx6441v1 2.92 2.94 2.97 T:lakekeyakv2 3.25 3.26 3.27 T:norx6461v3 3.26 3.27 3.28 T:norx6461v2 3.77 3.77 3.79 T:norx6461v1 3.80 3.82 3.83 T:norx3241v2 3.80 3.82 3.83 T:norx3241v3 4.44 4.46 4.77 T:norx6444v2 4.45 4.46 4.48 T:norx3241v1 4.47 4.48 4.52 T:lakekeyakv1 4.50 4.51 4.53 T:aesjambuv1 4.89 4.90 5.25 T:norx6444v1 5.70 5.71 5.73 T:norx3261v2 5.70 5.72 5.73 T:norx3261v3 6.38 6.42 6.46 T:riverkeyakv2 6.71 6.71 6.72 T:norx3261v1 6.76 6.80 6.89 T:ketjemajorv2 7.38 7.40 7.40 T:ascon128av11 7.39 7.41 7.42 T:ascon96v1 7.46 7.51 7.58 T:ketjeminorv2 7.54 7.55 7.60 T:acorn128v3 7.58 7.62 7.67 T:acorn128v2 8.16 8.17 8.27 ascon128av12 10.92 10.93 10.95 T:ascon128v1 10.93 10.96 10.97 T:ascon128v11 11.97 12.03 12.23 ascon128v12 14.16 14.21 14.26 T:seakeyakv1 15.57 15.60 15.68 T:aes128otrsv1 15.59 15.62 15.71 T:aes128otrsv2 15.83 15.85 15.87 T:twine80n6t4clocv2 15.95 15.99 16.03 T:aes128otrpv1 15.97 15.99 16.12 T:aes128otrpv2 16.31 16.32 16.36 T:twine80n6t4clocv3 17.57 17.62 17.85 T:oceankeyakv1 19.80 19.82 19.86 T:aes128n8clocv1 19.80 19.84 19.90 T:aes128n12clocv1 20.16 20.18 20.21 T:aes256otrsv2 20.38 20.41 20.45 T:aes256otrsv1 20.46 20.48 20.51 T:aes128n8silcv1 20.48 20.52 20.56 T:aes128n12silcv1 21.08 21.10 21.18 T:aes256otrpv2 21.08 21.11 21.12 T:aes256otrpv1 22.58 22.63 22.72 T:proest256otrv1 25.60 25.64 25.77 T:riverkeyakv1 27.13 27.28 27.69 T:ketjesrv1 28.23 28.34 28.43 T:ketjesrv2 44.19 44.24 44.32 T:proest128otrv1 50.80 51.02 51.22 T:ketjejrv1 61.48 61.53 61.57 T:present80n6t4silcv3 67.78 67.88 68.01 T:deoxysneq128128v13 76.01 76.14 76.26 T:ketjejrv2 96.58 96.86 102.68 T:twine80n6clocv1 99.00 99.20 99.63 T:deoxysneq256128v13 103.17 103.34 103.51 T:deoxyseq128128v13 104.98 105.07 105.30 T:aezv1 111.88 112.04 112.26 T:led80n6t4silcv3 149.79 149.96 150.07 T:deoxyseq256128v13 380.72 382.04 389.69 T:acorn128 3231.06 3239.14 3246.37 T:present80n6t4silcv2 3237.97 3246.50 3249.34 T:present80n6silcv1 6563.96 6584.42 6632.56 T:led80n6t4silcv2 6590.37 6598.68 6612.84 T:led80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.24 0.25 0.25 T:aegis128l 0.30 0.30 0.32 T:aezv3 0.30? 0.31? 0.34? T:aezv4 0.31 0.31 0.32 T:aezv5 0.34 0.34 0.34 T:tiaoxinv1 0.33 0.34 0.35 T:tiaoxinv2 0.35? 0.36? 0.49? T:aeadaes128ocbtaglen128v1 0.42 0.42 0.43 T:aegis128 0.43? 0.44? 0.64? T:aeadaes256ocbtaglen128v1 0.44 0.44 0.46 T:aegis256 0.50 0.50 0.50 T:morus1280256v1 0.50 0.50 0.50 T:morus1280128v1 0.50 0.51 0.51 T:morus1280256v2 0.51 0.51 0.51 T:morus1280128v2 0.52? 0.52? 0.72? T:aeadaes192ocbtaglen128v1 0.64 0.65 0.66 T:aes128otrcv3 0.75 0.76 0.77 T:morus640128v1 0.75 0.77 0.77 T:morus640128v2 0.82? 0.84? 1.00? T:aes256otrcv3 0.94 0.95 0.97 T:deoxysi128v141 0.99 0.99 1.01 T:aes128gcmv1 1.00 1.00 1.01 T:colm0v1 1.02 1.03 1.06 aes256gcmv1 1.09 1.10 1.13 T:deoxysi256v141 1.26 1.27 1.29 T:deoxysii128v141 1.31 1.32 1.33 T:aes128otrpv3 1.26? 1.35? 1.46? T:deoxysneq256128v1 1.32? 1.35? 1.49? T:deoxysneq128128v1 1.36 1.36 1.39 T:aes128otrsv3 1.44 1.46 1.51 T:deoxyseq128128v1 1.48 1.49 1.51 T:deoxysii256v141 1.64 1.66 1.70 T:deoxyseq256128v1 1.81 1.83 1.84 T:aes256otrsv3 1.82? 1.84? 2.11? T:aes256otrpv3 1.82 1.86 1.90 T:oceankeyakv2 1.89 1.89 1.90 T:norx6444v3 1.99 2.00 2.03 T:seakeyakv2 2.11 2.11 2.12 T:aes128n12t8clocv3 2.11 2.12 2.16 T:aes128n8t8clocv2 2.11 2.12 2.16 T:aes128n12t8clocv2 2.13 2.14 2.14 T:norx6441v3 2.14 2.14 2.15 T:aes128n12t8silcv2 2.14 2.14 2.14 T:aes128n12t8silcv3 2.14 2.14 2.14 T:aes128n8t8silcv2 2.14 2.15 2.16 T:norx6441v2 2.40 2.43 2.48 T:lunarkeyakv2 2.49 2.49 2.51 T:norx6441v1 2.95 2.96 2.99 T:lakekeyakv2 3.23 3.24 3.25 T:norx6461v2 3.23 3.24 3.25 T:norx6461v3 3.76 3.77 3.78 T:norx6461v1 3.77 3.78 3.79 T:norx3241v2 3.78 3.79 3.80 T:norx3241v3 4.42 4.43 4.45 T:norx3241v1 4.40 4.43 4.69 T:norx6444v2 4.49 4.50 4.55 T:lakekeyakv1 4.65 4.65 4.66 T:aesjambuv1 4.82 4.84 5.18 T:norx6444v1 5.67 5.68 5.70 T:norx3261v2 5.68 5.69 5.70 T:norx3261v3 6.53 6.58 6.75 T:riverkeyakv2 6.67 6.68 6.68 T:norx3261v1 6.69 6.72 6.80 T:ketjemajorv2 7.32 7.40 7.41 T:ketjeminorv2 7.45 7.46 7.48 T:ascon96v1 7.45 7.47 7.51 T:ascon128av11 7.67 7.68 7.70 T:acorn128v3 7.75 7.78 7.83 T:acorn128v2 8.22 8.23 8.31 ascon128av12 10.99 11.01 11.04 T:ascon128v1 11.00 11.03 11.04 T:ascon128v11 11.98 12.01 12.13 ascon128v12 14.21 14.33 14.54 T:seakeyakv1 15.70 15.72 15.75 T:aes128otrsv2 15.75 15.76 15.81 T:twine80n6t4clocv2 15.74 15.78 15.81 T:aes128otrsv1 16.06 16.10 16.14 T:aes128otrpv1 16.07 16.10 16.20 T:aes128otrpv2 16.30 16.31 16.36 T:twine80n6t4clocv3 17.65 17.72 17.87 T:oceankeyakv1 19.20 19.25 19.30 T:aes128n12clocv1 19.31 19.33 19.39 T:aes128n8clocv1 20.21 20.24 20.28 T:aes128n12silcv1 20.23 20.28 20.43 T:aes128n8silcv1 20.29 20.31 20.34 T:aes256otrsv2 20.46 20.50 20.57 T:aes256otrsv1 21.09 21.19 21.27 T:aes256otrpv2 21.20 21.23 21.27 T:aes256otrpv1 22.64 22.69 22.72 T:proest256otrv1 25.59 25.65 25.73 T:riverkeyakv1 26.67 26.72 27.26 T:ketjesrv2 27.71 27.95 28.03 T:ketjesrv1 44.25 44.34 44.40 T:proest128otrv1 50.94 51.06 51.15 T:ketjejrv1 61.71 61.76 61.86 T:present80n6t4silcv3 75.30 75.59 76.20 T:ketjejrv2 82.00 83.15 83.72 T:deoxysneq128128v13 96.43? 102.50? 109.09? T:twine80n6clocv1 103.35 103.45 104.47 T:deoxyseq128128v13 104.88 104.96 105.22 T:aezv1 112.03 112.07 112.15 T:led80n6t4silcv3 115.23 115.60 119.11 T:deoxysneq256128v13 149.74 150.00 150.54 T:deoxyseq256128v13 381.22 382.05 389.65 T:acorn128 3229.99 3231.00 3237.67 T:present80n6silcv1 3236.59 3244.58 3249.48 T:present80n6t4silcv2 6557.38 6564.29 6577.02 T:led80n6t4silcv2 6585.11 6594.88 6605.08 T:led80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17 0.18 0.18 T:aezv3 0.18 0.18 0.18 T:aezv5 0.18 0.18 0.19 T:aezv4 0.25 0.25 0.25 T:aegis128l 0.33 0.34 0.34 T:tiaoxinv1 0.33 0.34 0.36 T:tiaoxinv2 0.35? 0.35? 0.39? T:aeadaes128ocbtaglen128v1 0.42 0.42 0.42 T:aegis128 0.43 0.44 0.44 T:aeadaes256ocbtaglen128v1 0.44 0.44 0.44 T:aegis256 0.50 0.50 0.51 T:morus1280128v1 0.49 0.50 0.50 T:morus1280256v1 0.51 0.51 0.51 T:morus1280128v2 0.51 0.51 0.51 T:morus1280256v2 0.51 0.52 0.53 T:aeadaes192ocbtaglen128v1 0.64 0.65 0.66 T:aes128otrcv3 0.75 0.75 0.76 T:morus640128v1 0.75 0.76 0.77 T:morus640128v2 0.82? 0.83? 0.99? T:aes256otrcv3 0.94 0.94 0.95 T:deoxysi128v141 0.99 0.99 1.00 T:aes128gcmv1 0.99 1.00 1.01 T:colm0v1 1.02 1.02 1.06 aes256gcmv1 1.09 1.10 1.13 T:deoxysi256v141 1.26 1.26 1.26 T:deoxysii128v141 1.26? 1.30? 1.45? T:deoxysneq256128v1 1.32 1.35 1.37 T:aes128otrpv3 1.35 1.36 1.36 T:aes128otrsv3 1.25? 1.40? 1.49? T:deoxysneq128128v1 1.45 1.46 1.48 T:deoxyseq128128v1 1.47 1.48 1.51 T:deoxysii256v141 1.64 1.66 1.69 T:deoxyseq256128v1 1.82 1.83 1.84 T:aes256otrsv3 1.80? 1.83? 2.11? T:aes256otrpv3 1.83 1.85 1.89 T:oceankeyakv2 1.88 1.89 1.89 T:norx6444v3 2.00 2.01 2.02 T:seakeyakv2 2.11 2.11 2.12 T:aes128n8t8clocv2 2.11 2.11 2.11 T:aes128n12t8clocv3 2.11 2.11 2.11 T:aes128n12t8clocv2 2.13 2.13 2.14 T:norx6441v3 2.13 2.13 2.14 T:aes128n12t8silcv2 2.13 2.13 2.14 T:aes128n8t8silcv2 2.13 2.14 2.14 T:aes128n12t8silcv3 2.14 2.16 2.16 T:norx6441v2 2.35 2.39 2.42 T:lunarkeyakv2 2.48 2.49 2.50 T:norx6441v1 2.96 2.96 2.99 T:lakekeyakv2 3.23 3.24 3.26 T:norx6461v3 3.23 3.24 3.25 T:norx6461v2 3.76 3.77 3.77 T:norx6461v1 3.77 3.78 3.79 T:norx3241v3 3.77 3.78 3.79 T:norx3241v2 4.43 4.44 4.45 T:norx3241v1 4.44 4.45 4.71 T:norx6444v2 4.51 4.53 4.58 T:lakekeyakv1 4.65 4.65 4.66 T:aesjambuv1 4.84 4.87 5.18 T:norx6444v1 5.67 5.69 5.71 T:norx3261v2 5.68 5.70 5.71 T:norx3261v3 6.54 6.58 6.62 T:riverkeyakv2 6.67 6.68 6.68 T:norx3261v1 6.72 6.76 6.85 T:ketjemajorv2 7.33 7.37 7.41 T:ketjeminorv2 7.44 7.45 7.49 T:ascon96v1 7.46 7.47 7.48 T:ascon128av11 7.66 7.67 7.68 T:acorn128v3 7.76 7.80 7.84 T:acorn128v2 8.22 8.23 8.25 ascon128av12 11.00 11.01 11.03 T:ascon128v11 11.00 11.03 11.05 T:ascon128v1 12.00 12.13 12.22 ascon128v12 14.30 14.32 14.38 T:seakeyakv1 15.68 15.72 15.82 T:aes128otrsv2 15.73 15.74 15.76 T:twine80n6t4clocv2 15.77 15.80 15.83 T:aes128otrsv1 16.07 16.09 16.18 T:aes128otrpv2 16.09 16.10 16.14 T:aes128otrpv1 16.31 16.32 16.34 T:twine80n6t4clocv3 17.66 17.75 17.94 T:oceankeyakv1 19.20 19.23 19.28 T:aes128n12clocv1 19.32 19.34 19.41 T:aes128n8clocv1 20.21 20.25 20.28 T:aes128n12silcv1 20.22 20.25 20.29 T:aes128n8silcv1 20.31 20.32 20.47 T:aes256otrsv2 20.47 20.52 20.64 T:aes256otrsv1 21.20 21.23 21.27 T:aes256otrpv1 21.14 21.23 21.29 T:aes256otrpv2 22.66 22.73 22.88 T:proest256otrv1 25.58 25.64 25.75 T:riverkeyakv1 26.70 26.96 27.17 T:ketjesrv2 28.04 28.16 28.31 T:ketjesrv1 44.27 44.31 44.37 T:proest128otrv1 50.88 50.97 51.31 T:ketjejrv1 61.69 61.72 61.74 T:present80n6t4silcv3 75.47 75.61 75.91 T:ketjejrv2 82.24 83.68 83.85 T:deoxysneq128128v13 96.41 96.50 104.36 T:twine80n6clocv1 103.19 103.42 103.65 T:deoxyseq128128v13 104.88 104.96 105.29 T:aezv1 112.03 112.13 112.24 T:led80n6t4silcv3 115.21 115.57 119.15 T:deoxysneq256128v13 149.95 150.01 151.32 T:deoxyseq256128v13 380.77 380.93 389.43 T:acorn128 3227.22 3231.01 3234.96 T:present80n6silcv1 3233.50 3243.79 3247.19 T:present80n6t4silcv2 6558.43 6569.60 6593.41 T:led80n6t4silcv2 6593.02 6599.57 6610.04 T:led80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.04? 1.16? 1.38? T:aegis128l 1.09? 1.28? 1.45? T:aegis128 1.32? 1.34? 1.48? T:aezv5 1.31? 1.35? 1.98? T:tiaoxinv1 1.33? 1.42? 1.76? T:tiaoxinv2 1.39? 1.43? 1.95? T:aezv3 1.40? 1.48? 1.88? T:aezv4 1.45? 1.49? 1.80? T:aegis256 2.61 2.66 2.78 T:morus1280256v1 2.64 2.66 2.76 T:morus640128v1 2.64 2.71 2.84 T:morus1280128v1 2.75 2.77 2.82 T:aes128otrsv3 2.78 2.84 2.90 T:morus640128v2 2.80 2.84 2.90 T:morus1280128v2 2.86 2.92 3.00 T:morus1280256v2 2.91? 2.94? 3.33? T:colm0v1 3.19 3.23 3.27 T:deoxysneq128128v1 3.27 3.29 3.31 T:aes128n8t8clocv2 3.23? 3.31? 3.61? T:aes128n12t8clocv3 3.28 3.37 3.55 T:deoxysi128v141 3.37 3.43 3.48 T:aes128n12t8clocv2 3.48 3.55 3.67 T:aes128otrcv3 3.82 3.84 3.88 T:aes128n8t8silcv2 3.83 3.88 3.95 T:aes128n12t8silcv2 3.82 3.88 3.93 T:aes128n12t8silcv3 3.80 4.02 4.10 T:aes256otrsv3 3.95 4.06 4.17 T:deoxysi256v141 4.28 4.30 4.39 T:deoxysneq256128v1 4.29 4.31 4.49 T:deoxyseq128128v1 4.48 4.50 4.57 T:deoxysii128v141 4.51 4.54 4.56 T:aes128otrpv3 4.60 4.80 4.92 T:aes256otrcv3 4.24? 5.18? 6.16? T:aeadaes128ocbtaglen128v1 5.05? 5.32? 9.82? T:aeadaes256ocbtaglen128v1 5.31 5.42 5.54 T:deoxysii256v141 5.46 5.55 5.62 T:deoxyseq256128v1 5.51 5.59 5.64 T:aes256otrpv3 5.67 5.72 6.07 T:aesjambuv1 5.97 6.03 6.08 T:aes128gcmv1 6.34 6.38 6.45 aes256gcmv1 6.97 7.01 7.12 T:norx6441v1 6.95 7.02 7.13 T:norx6441v2 6.98 7.14 7.25 T:norx6441v3 5.92? 9.19? 10.94? T:aeadaes192ocbtaglen128v1 9.26 9.32 9.43 T:norx3241v1 9.23 9.34 9.41 T:norx3241v3 9.30 9.35 9.45 T:norx3241v2 10.40 10.43 10.64 T:norx6461v1 10.40 10.46 10.56 T:norx6461v3 10.45 10.59 10.71 T:norx6461v2 11.05 11.17 11.34 T:ascon96v1 11.27 11.41 11.59 T:ascon128av11 11.88 11.90 12.02 T:norx6444v3 12.18 12.26 12.95 T:lakekeyakv2 12.31 12.38 12.94 ascon128av12 13.75 13.77 13.80 T:norx3261v1 13.87 13.97 14.00 T:norx3261v3 13.98 14.01 14.11 T:norx3261v2 14.32 14.42 14.73 T:ascon128v1 14.26 14.45 14.94 T:ascon128v11 14.27 14.93 15.22 T:lakekeyakv1 15.35 15.70 16.72 T:riverkeyakv2 17.52 17.77 17.93 ascon128v12 18.96 19.09 19.58 T:seakeyakv2 20.64 20.76 21.24 T:twine80n6t4clocv2 21.37 21.55 21.99 T:twine80n6t4clocv3 20.97 21.70 22.04 T:oceankeyakv2 24.02 24.30 24.62 T:aes128n8clocv1 24.16 24.50 25.01 T:aes128n12clocv1 24.66 24.77 25.25 T:aes128otrsv2 24.68 24.80 25.00 T:aes128otrsv1 24.66 24.88 25.21 T:aes128otrpv2 24.81 25.01 25.20 T:aes128otrpv1 27.87 28.16 28.51 T:aes128n8silcv1 28.05 28.28 28.52 T:aes128n12silcv1 28.05 28.62 28.84 T:ketjeminorv2 28.58 28.64 28.88 T:acorn128v3 30.55 30.73 30.96 T:acorn128v2 30.86 30.97 33.84 T:norx6444v2 31.59 31.67 31.99 T:aes256otrsv2 32.09 32.31 32.61 T:aes256otrsv1 32.50 32.64 33.07 T:aes256otrpv1 32.58 32.78 33.16 T:aes256otrpv2 34.32 34.73 37.62 T:norx6444v1 37.66 38.88 40.03 T:lunarkeyakv2 39.84 40.22 41.02 T:ketjemajorv2 42.47 43.06 43.70 T:ketjesrv1 46.32 46.73 47.10 T:riverkeyakv1 47.98 48.66 50.32 T:ketjesrv2 65.26 65.39 66.28 T:proest256otrv1 68.45 69.06 69.88 T:ketjejrv1 76.14 76.41 76.62 T:present80n6t4silcv3 76.38 76.92 77.09 T:deoxysneq128128v13 86.25 86.56 87.59 T:proest128otrv1 102.04 103.08 103.77 T:ketjejrv2 107.39 107.86 108.13 T:seakeyakv1 111.75 112.49 113.28 T:deoxysneq256128v13 115.50 115.94 116.39 T:aezv1 117.36 117.76 118.23 T:twine80n6clocv1 128.61 128.94 129.62 T:deoxyseq128128v13 132.84 133.06 133.23 T:led80n6t4silcv3 186.59 187.01 187.52 T:deoxyseq256128v13 192.74 193.66 195.01 T:oceankeyakv1 1347.54 1351.09 1368.52 T:acorn128 3613.38 3621.34 3638.25 T:present80n6t4silcv2 3626.62 3629.36 3636.11 T:present80n6silcv1 7184.97 7201.42 7285.11 T:led80n6silcv1 7204.90 7257.89 7314.47 T:led80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.09? 1.14? 1.28? T:aegis128l 1.13? 1.25? 1.33? T:aegis128 1.32? 1.36? 1.93? T:tiaoxinv2 1.34? 1.37? 1.78? T:tiaoxinv1 1.35? 1.40? 1.53? T:aezv5 1.40? 1.43? 1.59? T:aezv3 1.41? 1.51? 1.97? T:aezv4 1.52? 1.62? 1.83? T:aegis256 2.68 2.73 2.83 T:morus640128v1 2.78 2.84 2.94 T:aes128otrsv3 2.93 2.96 3.22 T:colm0v1 2.95 2.99 3.20 T:morus1280128v1 2.98 3.02 3.16 T:morus640128v2 2.97 3.03 3.09 T:morus1280256v1 3.08 3.09 3.12 T:aes128n8t8clocv2 3.06 3.12 3.25 T:aes128n12t8clocv3 3.15 3.19 3.24 T:morus1280128v2 3.12 3.20 3.41 T:morus1280256v2 3.12? 3.27? 4.44? T:aes128n12t8clocv2 3.55 3.61 3.79 T:aes128otrcv3 3.85 3.88 3.91 T:aes128n8t8silcv2 3.89 3.93 3.95 T:aes128n12t8silcv3 3.90? 3.98? 5.05? T:aes128n12t8silcv2 3.80 4.05 4.21 T:aes256otrsv3 4.38? 4.43? 6.15? T:aeadaes128ocbtaglen128v1 4.59 4.67 4.75 T:deoxysneq128128v1 4.66? 4.77? 6.83? T:aes256otrcv3 4.80 4.88 4.97 T:deoxysi128v141 4.88? 4.95? 5.69? T:aes128otrpv3 4.93 5.05 5.47 T:deoxysii128v141 5.23 5.29 5.34 T:aes128gcmv1 5.54 5.62 5.76 T:deoxysi256v141 5.23? 5.67? 7.02? T:aeadaes192ocbtaglen128v1 5.80 5.88 5.94 T:deoxysneq256128v1 5.98 6.02 6.08 T:aes256otrpv3 5.12? 6.05? 9.94? T:aeadaes256ocbtaglen128v1 6.12 6.20 6.27 aes256gcmv1 6.19 6.25 6.29 T:aesjambuv1 6.20 6.33 6.77 T:deoxysii256v141 6.34 6.40 6.52 T:deoxyseq128128v1 6.64 6.74 6.84 T:deoxyseq256128v1 7.10 7.17 7.24 T:norx6441v1 7.15 7.22 7.40 T:norx6441v3 7.16 7.22 7.27 T:norx6441v2 9.41 9.48 9.62 T:norx3241v2 9.44 9.52 9.65 T:norx3241v3 9.48 9.54 9.59 T:norx3241v1 10.63 10.68 10.78 T:norx6461v3 10.59 10.70 10.76 T:norx6461v1 10.68 10.84 10.91 T:norx6461v2 11.02 11.13 11.38 T:ascon96v1 11.24 11.43 11.55 T:ascon128av11 11.98 12.11 12.16 T:norx6444v3 12.34 12.42 12.92 T:lakekeyakv2 12.34 12.51 13.43 ascon128av12 13.94 13.98 14.00 T:norx3261v1 13.85 14.08 14.51 T:lakekeyakv1 14.13 14.22 14.32 T:norx3261v3 14.15 14.23 14.38 T:norx3261v2 14.43 14.48 14.70 T:ascon128v11 14.42 14.59 14.80 T:ascon128v1 15.52 15.71 16.37 T:riverkeyakv2 17.33 17.52 17.98 ascon128v12 18.75 18.91 19.83 T:seakeyakv2 20.52 20.58 20.95 T:twine80n6t4clocv2 21.15 21.48 22.08 T:oceankeyakv2 21.43 21.59 22.12 T:twine80n6t4clocv3 23.82 23.97 24.37 T:aes128n12clocv1 23.74 23.98 24.49 T:aes128n8clocv1 24.53 24.89 25.25 T:aes128otrsv2 24.88 24.96 25.17 T:aes128otrpv2 24.85 24.99 25.24 T:aes128otrpv1 24.93 25.14 25.63 T:aes128otrsv1 27.70 28.00 28.21 T:aes128n12silcv1 27.78 28.09 28.35 T:aes128n8silcv1 28.70 28.92 29.14 T:acorn128v3 28.30 29.15 30.00 T:ketjeminorv2 30.66 30.90 31.28 T:acorn128v2 31.30 31.41 33.77 T:norx6444v2 31.62 31.73 31.95 T:aes256otrsv2 32.05 32.46 32.86 T:aes256otrsv1 32.59 32.73 33.09 T:aes256otrpv1 32.69 32.96 33.23 T:aes256otrpv2 34.34 34.48 37.31 T:norx6444v1 37.71 38.57 39.55 T:lunarkeyakv2 40.18 41.10 42.40 T:ketjemajorv2 42.99 43.54 44.39 T:ketjesrv1 46.32 46.71 47.73 T:riverkeyakv1 46.46 47.14 47.82 T:ketjesrv2 66.68 67.28 67.76 T:proest256otrv1 68.64 69.48 70.43 T:ketjejrv1 76.46 76.58 77.00 T:present80n6t4silcv3 87.42 87.73 88.34 T:proest128otrv1 92.15 92.62 93.41 T:deoxysneq128128v13 101.20 101.73 103.77 T:ketjejrv2 106.84 107.34 108.12 T:seakeyakv1 115.99 116.59 117.29 T:twine80n6clocv1 118.81 119.00 119.07 T:aezv1 128.43 128.91 129.69 T:deoxyseq128128v13 128.68 130.84 133.44 T:deoxysneq256128v13 132.80 133.27 134.09 T:led80n6t4silcv3 186.28 186.63 187.43 T:deoxyseq256128v13 193.67? 196.31? 273.91? T:oceankeyakv1 1348.89 1351.67 1368.65 T:acorn128 3615.95 3617.43 3640.94 T:present80n6silcv1 3619.73 3633.35 3639.67 T:present80n6t4silcv2 7148.04 7161.08 7187.37 T:led80n6silcv1 7159.98 7181.60 7208.10 T:led80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.95? 0.98? 1.09? T:aezv3 1.07 1.09 1.12 T:aegis128l 1.07 1.10 1.15 T:aezv5 1.08 1.10 1.12 T:aegis128 1.12 1.14 1.15 T:aezv4 1.34? 1.37? 1.70? T:tiaoxinv2 1.34? 1.37? 1.70? T:tiaoxinv1 1.44 1.46 1.55 T:aegis256 2.66 2.72 2.78 T:morus640128v1 2.77 2.78 2.78 T:aes128otrsv3 2.89 2.96 3.08 T:aes128n12t8clocv3 2.91 2.96 3.02 T:aes128n8t8clocv2 2.91 2.96 3.04 T:colm0v1 2.93 2.98 3.09 T:morus1280128v1 2.95 2.98 3.06 T:morus1280256v1 2.98 3.03 3.05 T:morus640128v2 2.96? 3.10? 4.38? T:aes128n12t8clocv2 3.12 3.16 3.23 T:morus1280128v2 3.14 3.18 3.20 T:morus1280256v2 3.54 3.55 3.60 T:aes128otrcv3 3.76 3.84 4.13 T:aes256otrsv3 3.88? 3.89? 5.01? T:aes128n8t8silcv2 3.84 3.90 3.98 T:aes128n12t8silcv3 3.89? 3.93? 5.04? T:aes128n12t8silcv2 4.31 4.38 4.45 T:aeadaes128ocbtaglen128v1 4.42 4.46 4.54 T:deoxysneq128128v1 4.64 4.70 4.93 T:aes256otrcv3 4.82 4.91 5.04 T:deoxysi128v141 4.95 5.01 5.04 T:aes128otrpv3 4.97 5.01 5.08 T:deoxysii128v141 4.86? 5.02? 9.90? T:aeadaes192ocbtaglen128v1 4.88 5.04 5.19 T:aeadaes256ocbtaglen128v1 5.24 5.26 5.30 T:aes128gcmv1 5.55 5.59 5.62 T:deoxysneq256128v1 5.48 5.62 5.79 T:deoxysi256v141 6.04 6.10 6.16 T:aes256otrpv3 6.13 6.18 6.25 aes256gcmv1 6.13 6.21 6.27 T:deoxysii256v141 6.22 6.28 6.34 T:aesjambuv1 6.23 6.34 6.37 T:deoxyseq128128v1 6.62 6.68 6.73 T:deoxyseq256128v1 7.04 7.15 7.22 T:norx6441v1 7.16 7.20 7.27 T:norx6441v2 7.13 7.23 7.35 T:norx6441v3 9.45 9.50 9.55 T:norx3241v3 9.48 9.51 9.54 T:norx3241v2 9.43 9.56 9.62 T:norx3241v1 10.57 10.66 10.73 T:norx6461v1 10.66 10.75 10.81 T:norx6461v3 10.72 10.76 10.93 T:norx6461v2 11.04 11.12 11.23 T:ascon96v1 11.27 11.49 11.66 T:ascon128av11 12.05 12.08 12.15 T:norx6444v3 12.30 12.38 12.98 ascon128av12 12.30 12.39 12.48 T:lakekeyakv2 13.93 13.95 13.99 T:norx3261v1 14.05 14.16 14.20 T:norx3261v3 14.04 14.19 14.23 T:norx3261v2 13.97 14.30 14.62 T:lakekeyakv1 14.38 14.45 14.64 T:ascon128v11 14.34 14.51 14.77 T:ascon128v1 15.66 15.92 16.39 T:riverkeyakv2 17.33 17.53 17.73 ascon128v12 18.75 19.06 19.51 T:seakeyakv2 20.46 20.80 21.04 T:twine80n6t4clocv2 21.26 21.65 22.18 T:oceankeyakv2 21.41 21.67 22.11 T:twine80n6t4clocv3 23.59 23.69 23.96 T:aes128n12clocv1 23.80 23.95 24.38 T:aes128n8clocv1 24.85 24.98 25.18 T:aes128otrpv2 24.84 25.07 25.40 T:aes128otrsv1 24.96 25.16 25.32 T:aes128otrpv1 24.95 25.44 25.79 T:aes128otrsv2 27.63 27.99 28.22 T:aes128n12silcv1 27.86 28.02 28.14 T:aes128n8silcv1 28.23 28.26 28.62 T:acorn128v3 28.34 28.80 29.62 T:ketjeminorv2 30.72 31.04 31.41 T:acorn128v2 31.30 31.37 33.86 T:norx6444v2 31.55 31.70 31.85 T:aes256otrsv2 32.10 32.30 33.01 T:aes256otrsv1 32.67 32.88 33.11 T:aes256otrpv1 32.73 33.03 33.91 T:aes256otrpv2 34.45 34.84 37.28 T:norx6444v1 37.66 38.55 38.84 T:lunarkeyakv2 40.54 41.32 42.93 T:ketjemajorv2 43.02 43.55 43.91 T:ketjesrv1 46.40 46.88 47.34 T:ketjesrv2 46.58 46.98 47.60 T:riverkeyakv1 64.39 65.00 65.54 T:proest256otrv1 67.95 68.70 69.38 T:ketjejrv1 76.25 76.47 76.93 T:present80n6t4silcv3 87.40 87.63 87.92 T:proest128otrv1 92.14 92.57 93.04 T:deoxysneq128128v13 100.67 101.74 102.88 T:ketjejrv2 107.19 107.52 107.77 T:seakeyakv1 106.08 113.95 116.53 T:twine80n6clocv1 118.69 118.88 119.07 T:aezv1 128.42 128.89 129.22 T:deoxyseq128128v13 130.45 132.18 133.01 T:deoxysneq256128v13 132.48 133.03 133.73 T:led80n6t4silcv3 186.39 187.15 188.55 T:deoxyseq256128v13 193.06 193.53 196.68 T:oceankeyakv1 1348.89 1352.02 1369.34 T:acorn128 3614.84 3619.05 3622.40 T:present80n6silcv1 3616.85 3630.35 3637.85 T:present80n6t4silcv2 7157.70 7184.91 7207.38 T:led80n6silcv1 7160.31 7190.74 7227.01 T:led80n6t4silcv2