VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20260217

[Page version: 20260326 06:32:43]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.21 0.21 0.21 T:tiaoxinv1 0.21 0.21 0.22 T:tiaoxinv2 0.25 0.25 0.25 aegis128l 0.25 0.25 0.26 T:aegis128l 0.41 0.41 0.42 T:aegis256 0.38? 0.42? 0.43? aegis256 0.41 0.42 0.42 T:aegis128 0.61 0.62 0.62 T:aezv5 0.61 0.62 0.62 T:aezv4 0.62 0.62 0.62 T:aezv3 0.63 0.63 0.64 T:aes128otrcv3 0.62 0.63 0.64 T:morus1280128v1 0.62 0.63 0.65 T:morus1280256v2 0.63 0.64 0.64 T:morus1280128v2 0.63 0.64 0.65 T:morus1280256v1 0.65 0.66 0.66 T:aes128otrpv3 0.65 0.66 0.67 T:aes128otrsv3 0.66 0.67 0.67 T:aeadaes128ocbtaglen128v1 -0.01? 0.75? 2.13? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.87 T:deoxysneq128128v1 0.87 0.87 0.88 T:aes256otrcv3 0.86 0.87 0.89 T:deoxysi128v141 0.88 0.89 0.90 T:aes256otrpv3 0.90 0.90 0.91 T:aes256otrsv3 0.90 0.91 0.92 T:aeadaes256ocbtaglen128v1 0.98 1.00 1.01 T:deoxysneq256128v1 0.99 1.00 1.01 T:deoxysi256v141 1.07 1.08 1.08 T:morus640128v1 1.07 1.08 1.09 T:morus640128v2 1.15 1.17 1.19 T:norx6444v3 1.19 1.20 1.21 T:aes128gcmv1 1.43 1.43 1.45 aes256gcmv1 1.60 1.61 1.61 T:colm0v1 1.75 1.75 1.76 T:deoxysii128v141 1.78 1.78 1.79 T:deoxyseq128128v1 2.01 2.01 2.02 T:deoxysii256v141 2.02 2.03 2.03 T:deoxyseq256128v1 2.05 2.08 2.12 T:norx6441v2 2.06 2.10 2.14 T:lunarkeyakv2 2.07 2.10 2.18 T:norx6441v3 2.47 2.49 2.51 T:norx6441v1 2.75 2.75 2.78 T:aes128n12t8clocv2 2.75 2.75 2.75 T:aes128n12t8silcv2 2.75 2.75 2.77 T:aes128n8t8clocv2 2.75 2.75 2.76 T:aes128n12t8clocv3 2.78 2.79 2.79 T:aes128n12t8silcv3 2.79 2.79 2.79 T:aes128n8t8silcv2 2.79 2.81 2.84 T:seakeyakv2 2.85 2.88 2.92 T:oceankeyakv2 3.10 3.11 3.15 T:norx6461v2 3.08 3.13 3.24 T:norx6461v3 3.75 3.79 3.96 T:norx6461v1 3.83 3.86 3.88 T:norx3241v3 3.80 3.86 3.88 T:norx6444v2 3.86 3.87 3.90 T:norx3241v2 4.10 4.13 4.15 T:lakekeyakv1 4.36 4.37 4.39 T:lakekeyakv2 4.31 4.38 4.42 T:norx6444v1 4.64 4.67 4.71 T:norx3241v1 5.38 5.63 5.84 T:acorn128v3 5.83 5.84 5.84 T:aesjambuv1 5.83 5.85 5.88 T:norx3261v3 6.01 6.04 6.12 T:norx3261v2 6.77 6.80 6.83 T:acorn128v2 7.24 7.26 7.27 T:norx3261v1 7.37 7.40 7.43 T:ascon96v1 7.40 7.44 7.51 T:ascon128av11 7.56 7.59 7.61 ascon128av12 9.78 9.81 9.90 T:riverkeyakv2 10.38 10.44 10.50 T:ketjeminorv2 10.87 10.90 10.93 ascon128v12 10.87 10.90 10.92 T:ascon128v11 10.88 10.91 10.93 T:ascon128v1 13.45 13.52 13.55 T:aes128otrsv1 13.50 13.55 13.58 T:aes128otrpv2 13.58 13.60 13.62 T:aes128otrsv2 13.70 13.73 13.75 T:aes128otrpv1 14.60 14.62 14.63 T:twine80n6t4clocv3 15.61 15.62 15.64 T:twine80n6t4clocv2 17.50 17.53 17.55 T:aes256otrsv1 17.52 17.56 17.59 T:aes256otrpv2 17.65 17.70 17.74 T:aes256otrsv2 17.64 17.71 17.76 T:aes256otrpv1 23.08 23.11 23.14 T:aes128n12clocv1 23.15 23.19 23.21 T:aes128n8clocv1 24.66 24.67 24.69 T:aeadaes128ocbtaglen64v1 24.65 24.68 24.70 T:aeadaes128ocbtaglen96v1 27.09 27.12 27.15 T:proest256otrv1 29.03 29.05 29.07 T:aeadaes192ocbtaglen96v1 29.03 29.06 29.09 T:aeadaes192ocbtaglen64v1 31.38 31.69 31.76 T:ketjesrv1 32.24 32.37 32.44 T:ketjesrv2 33.45 33.48 33.50 T:aeadaes256ocbtaglen64v1 33.47 33.49 33.52 T:aeadaes256ocbtaglen96v1 50.42 50.52 50.58 T:proest128otrv1 54.72 54.78 55.29 T:colm127v1 59.03 59.07 59.10 T:ketjejrv1 70.61 70.64 70.66 T:present80n6t4silcv3 80.02 80.04 80.07 T:deoxysneq128128v13 92.71 92.77 92.85 T:ketjejrv2 111.88 111.97 112.50 T:deoxysneq256128v13 124.90 124.96 125.05 T:led80n6t4silcv3 158.77 158.99 159.31 T:aezv1 159.49 159.55 159.64 T:deoxyseq128128v13 223.66 223.84 223.98 T:deoxyseq256128v13 323.91 324.32 324.70 T:acorn128 633.11 634.08 636.39 T:ketjemajorv2 4017.18 4018.86 4021.55 T:led80n6silcv1 4024.32 4028.04 4030.53 T:led80n6t4silcv2 4347.13 4348.50 4350.77 T:present80n6silcv1 4346.63 4351.13 4354.12 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.25 0.25 0.25 aegis128l 0.25 0.26 0.26 T:aegis128l 0.36 0.37 0.37 T:tiaoxinv1 0.37 0.37 0.37 T:tiaoxinv2 0.40 0.40 0.40 T:aegis256 0.45 0.46 0.46 T:aegis128 0.47 0.48 0.49 aegis256 0.61 0.62 0.62 T:aezv5 0.61 0.62 0.62 T:aezv4 0.61 0.62 0.62 T:aezv3 0.63 0.65 0.67 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280128v1 0.66 0.67 0.67 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.70 T:aes128otrcv3 0.70 0.70 0.71 T:aes128otrpv3 0.70 0.70 0.71 T:aes128otrsv3 -0.63? 0.75? 1.44? T:aeadaes192ocbtaglen128v1 0.91 0.92 0.92 T:aes256otrcv3 0.91 0.92 0.92 T:aes256otrsv3 0.93 0.93 0.94 T:aes256otrpv3 0.98 0.99 0.99 T:aeadaes256ocbtaglen128v1 1.04 1.05 1.06 T:aes128gcmv1 1.07 1.08 1.09 T:morus640128v1 1.08 1.10 1.12 T:morus640128v2 1.14 1.15 1.16 T:deoxysi128v141 1.15 1.16 1.18 T:norx6444v3 1.20 1.21 1.22 T:deoxysneq128128v1 1.28 1.30 1.31 T:deoxysi256v141 1.30 1.32 1.33 T:deoxysneq256128v1 1.41 1.43 1.44 aes256gcmv1 1.67 1.69 1.70 T:colm0v1 1.75 1.76 1.76 T:deoxysii128v141 1.99 2.00 2.01 T:deoxysii256v141 1.99 2.02 2.04 T:norx6441v2 1.99 2.02 2.04 T:norx6441v3 2.12 2.17 2.20 T:lunarkeyakv2 2.41 2.42 2.43 T:deoxyseq128128v1 2.43 2.45 2.48 T:norx6441v1 2.52 2.53 2.57 T:deoxyseq256128v1 2.69 2.69 2.72 T:aes128n8t8silcv2 2.69 2.70 2.72 T:aes128n12t8silcv3 2.72 2.72 2.73 T:aes128n8t8clocv2 2.72 2.72 2.73 T:aes128n12t8clocv2 2.72 2.72 2.74 T:aes128n12t8silcv2 2.72 2.72 2.74 T:aes128n12t8clocv3 2.86 2.89 2.91 T:seakeyakv2 2.91 2.95 2.99 T:oceankeyakv2 3.08 3.10 3.13 T:norx6461v2 3.06 3.10 3.16 T:norx6461v3 3.72 3.74 3.79 T:norx6461v1 3.72 3.74 3.76 T:norx3241v2 3.74 3.77 3.78 T:norx3241v3 3.80 3.86 3.89 T:norx6444v2 4.20 4.22 4.24 T:lakekeyakv1 4.28 4.31 4.34 T:norx6444v1 4.54 4.56 4.57 T:lakekeyakv2 4.57 4.58 4.60 T:norx3241v1 5.83 5.86 5.89 T:norx3261v3 5.86 5.89 5.97 T:norx3261v2 5.99 5.99 5.99 T:aesjambuv1 6.04? 6.97? 7.87? T:acorn128v2 7.06 7.08 7.09 T:norx3261v1 6.67? 7.25? 7.83? T:acorn128v3 7.37 7.40 7.42 ascon128av12 7.53 7.56 7.60 T:ascon128av11 7.54 7.57 7.60 T:ascon96v1 9.94 9.96 9.99 T:riverkeyakv2 10.27 10.31 10.34 T:ketjeminorv2 10.59 10.61 10.66 T:ascon128v1 10.60 10.62 10.67 T:ascon128v11 10.87 10.89 10.92 ascon128v12 14.02 14.07 14.17 T:aes128otrpv1 14.14 14.19 14.23 T:aes128otrpv2 14.23 14.27 14.29 T:aes128otrsv2 14.45 14.52 14.56 T:aes128otrsv1 14.60 14.62 14.63 T:twine80n6t4clocv3 15.48 15.52 15.56 T:twine80n6t4clocv2 17.90 17.96 18.03 T:aes256otrpv1 18.13 18.17 18.20 T:aes256otrsv2 18.19 18.25 18.29 T:aes256otrpv2 18.47 18.52 18.86 T:aes256otrsv1 22.17 22.21 22.24 T:aes128n12clocv1 22.61 22.66 22.71 T:aes128n8clocv1 27.03 27.07 27.11 T:proest256otrv1 32.09 32.16 32.26 T:ketjesrv2 31.88 32.19 32.23 T:ketjesrv1 33.36 33.43 33.76 T:aeadaes128ocbtaglen96v1 33.38 33.46 33.60 T:aeadaes128ocbtaglen64v1 39.85 39.90 39.94 T:aeadaes192ocbtaglen96v1 39.87 39.92 39.96 T:aeadaes192ocbtaglen64v1 46.33 46.40 46.45 T:aeadaes256ocbtaglen64v1 46.37 46.45 46.64 T:aeadaes256ocbtaglen96v1 50.86 50.94 51.00 T:proest128otrv1 60.00 60.04 60.07 T:ketjejrv1 70.57 70.61 70.66 T:present80n6t4silcv3 72.07 72.14 72.21 T:colm127v1 93.91 93.99 94.06 T:ketjejrv2 107.48 107.59 107.75 T:deoxysneq128128v13 124.88 125.01 125.32 T:led80n6t4silcv3 150.71 151.13 152.21 T:deoxysneq256128v13 159.08 159.27 159.52 T:aezv1 159.46 159.55 159.63 T:deoxyseq128128v13 223.51 223.65 223.83 T:deoxyseq256128v13 347.95 348.07 348.31 T:acorn128 632.79 633.25 634.38 T:ketjemajorv2 4015.61 4019.02 4020.90 T:led80n6silcv1 4025.00 4028.01 4029.32 T:led80n6t4silcv2 4346.21 4349.89 4353.86 T:present80n6t4silcv2 4347.47 4350.61 4351.48 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.24 0.25 0.25 T:aezv5 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.26 T:aegis128l 0.27 0.27 0.28 aegis128l 0.37 0.37 0.37 T:tiaoxinv1 0.37 0.37 0.37 T:tiaoxinv2 0.40 0.40 0.40 T:aegis256 0.45 0.46 0.46 T:aegis128 0.48 0.50 0.50 aegis256 0.63 0.64 0.65 T:morus1280256v1 0.64 0.65 0.65 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280128v1 0.66 0.67 0.67 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.70 T:aes128otrcv3 0.69 0.70 0.70 T:aes128otrsv3 0.70 0.70 0.70 T:aes128otrpv3 0.07? 0.75? 2.11? T:aeadaes192ocbtaglen128v1 0.90 0.91 0.92 T:aes256otrcv3 0.91 0.92 0.92 T:aes256otrsv3 0.93 0.93 0.94 T:aes256otrpv3 0.98 0.99 0.99 T:aeadaes256ocbtaglen128v1 1.05 1.05 1.06 T:aes128gcmv1 1.06 1.07 1.09 T:morus640128v1 1.09 1.11 1.12 T:morus640128v2 1.14 1.15 1.15 T:deoxysi128v141 1.15 1.16 1.18 T:norx6444v3 1.20 1.21 1.22 T:deoxysneq128128v1 1.29 1.30 1.31 T:deoxysi256v141 1.30 1.32 1.33 T:deoxysneq256128v1 1.41 1.42 1.43 aes256gcmv1 1.67 1.68 1.70 T:colm0v1 1.75 1.75 1.76 T:deoxysii128v141 2.00 2.01 2.02 T:deoxysii256v141 2.00 2.02 2.04 T:norx6441v2 2.00 2.03 2.06 T:norx6441v3 2.16 2.19 2.23 T:lunarkeyakv2 2.41 2.42 2.43 T:deoxyseq128128v1 2.41 2.44 2.47 T:norx6441v1 2.52 2.53 2.56 T:deoxyseq256128v1 2.69 2.70 2.72 T:aes128n8t8silcv2 2.69 2.70 2.71 T:aes128n12t8silcv3 2.71 2.72 2.73 T:aes128n8t8clocv2 2.71 2.72 2.74 T:aes128n12t8clocv2 2.71 2.72 2.73 T:aes128n12t8clocv3 2.71 2.72 2.73 T:aes128n12t8silcv2 2.89 2.92 2.95 T:seakeyakv2 2.95 2.98 3.00 T:oceankeyakv2 3.09 3.10 3.12 T:norx6461v2 3.07 3.13 3.18 T:norx6461v3 3.73 3.74 3.76 T:norx3241v2 3.72 3.75 3.79 T:norx6461v1 3.75 3.77 3.78 T:norx3241v3 3.82 3.87 3.91 T:norx6444v2 4.22 4.25 4.26 T:lakekeyakv1 4.31 4.34 4.37 T:norx6444v1 4.56 4.58 4.60 T:norx3241v1 4.58 4.59 4.60 T:lakekeyakv2 5.84 5.86 5.88 T:norx3261v3 5.85 5.90 5.97 T:norx3261v2 5.99 5.99 5.99 T:aesjambuv1 6.05? 6.97? 7.87? T:acorn128v2 7.07 7.08 7.09 T:norx3261v1 6.66? 7.24? 7.83? T:acorn128v3 7.38 7.40 7.42 ascon128av12 7.53 7.57 7.63 T:ascon128av11 7.55 7.58 7.61 T:ascon96v1 9.96 9.99 10.02 T:riverkeyakv2 10.30 10.33 10.37 T:ketjeminorv2 10.59 10.61 10.66 T:ascon128v1 10.59 10.62 10.63 T:ascon128v11 10.86 10.89 10.91 ascon128v12 14.06 14.11 14.18 T:aes128otrpv1 14.19 14.23 14.26 T:aes128otrpv2 14.26 14.31 14.34 T:aes128otrsv2 14.47 14.55 14.59 T:aes128otrsv1 14.60 14.62 14.63 T:twine80n6t4clocv3 15.51 15.54 15.58 T:twine80n6t4clocv2 17.94 17.98 18.06 T:aes256otrpv1 18.16 18.21 18.24 T:aes256otrsv2 18.31 18.34 18.37 T:aes256otrpv2 18.50 18.54 18.90 T:aes256otrsv1 22.17 22.21 22.26 T:aes128n12clocv1 22.60 22.65 22.71 T:aes128n8clocv1 27.04 27.07 27.10 T:proest256otrv1 31.90 32.20 32.25 T:ketjesrv1 32.13 32.20 32.36 T:ketjesrv2 33.37 33.43 33.58 T:aeadaes128ocbtaglen64v1 33.37 33.45 33.77 T:aeadaes128ocbtaglen96v1 39.86 39.89 39.94 T:aeadaes192ocbtaglen64v1 39.86 39.91 39.94 T:aeadaes192ocbtaglen96v1 46.34 46.40 46.45 T:aeadaes256ocbtaglen64v1 46.37 46.47 46.67 T:aeadaes256ocbtaglen96v1 50.88 50.94 51.00 T:proest128otrv1 60.03 60.08 60.12 T:ketjejrv1 70.58 70.61 70.64 T:present80n6t4silcv3 71.09 71.15 71.22 T:colm127v1 93.99 94.03 94.08 T:ketjejrv2 107.54 107.64 107.74 T:deoxysneq128128v13 124.90 125.01 125.34 T:led80n6t4silcv3 150.66 150.99 152.12 T:deoxysneq256128v13 159.00 159.15 159.27 T:aezv1 159.44 159.53 159.73 T:deoxyseq128128v13 223.53 223.70 223.87 T:deoxyseq256128v13 348.00 348.10 348.27 T:acorn128 631.76 632.22 633.79 T:ketjemajorv2 4014.84 4017.93 4019.54 T:led80n6silcv1 4025.32 4028.25 4029.16 T:led80n6t4silcv2 4346.08 4349.10 4353.01 T:present80n6t4silcv2 4347.24 4349.58 4351.30 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.20 0.20 0.20 T:tiaoxinv1 0.20 0.20 0.20 T:tiaoxinv2 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 aegis128l 0.39 0.40 0.41 aegis256 0.42 0.43 0.44 T:aegis256 0.43 0.43 0.44 T:aezv5 0.43 0.43 0.44 T:aezv4 0.43 0.43 0.44 T:aezv3 0.44 0.44 0.44 T:aegis128 0.61 0.61 0.62 T:morus1280256v1 0.61 0.61 0.62 T:morus1280128v2 0.61 0.62 0.62 T:morus1280256v2 0.61 0.62 0.62 T:morus1280128v1 0.64 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.65 T:aes128otrpv3 0.65 0.66 0.67 T:aes128otrcv3 0.80 0.81 0.81 T:aes128gcmv1 0.32? 0.81? 1.22? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.87 0.88 0.88 T:deoxysi128v141 0.88 0.89 0.89 T:aeadaes256ocbtaglen128v1 0.89 0.89 0.90 T:aes256otrpv3 0.89 0.89 0.90 T:aes256otrcv3 0.92 0.93 0.94 aes256gcmv1 0.99 0.99 1.00 T:deoxysneq256128v1 1.00 1.01 1.02 T:deoxysi256v141 1.04 1.04 1.05 T:morus640128v2 1.04 1.05 1.05 T:morus640128v1 1.11 1.12 1.12 T:colm0v1 1.31 1.31 1.32 T:deoxysii128v141 1.32 1.33 1.34 T:deoxyseq128128v1 1.50 1.51 1.52 T:deoxysii256v141 1.51 1.51 1.52 T:deoxyseq256128v1 1.61 1.63 1.64 T:norx6444v3 1.69 1.69 1.69 T:aes128otrsv3 2.05 2.08 2.13 T:norx6441v2 2.07 2.09 2.10 T:norx6441v3 2.31 2.31 2.32 T:aes256otrsv3 2.33 2.34 2.35 T:seakeyakv2 2.38 2.40 2.42 T:oceankeyakv2 2.48 2.50 2.52 T:norx6441v1 2.73 2.73 2.75 T:aes128n12t8clocv2 2.73 2.73 2.74 T:aes128n12t8clocv3 2.73 2.74 2.74 T:aes128n8t8clocv2 2.72 2.74 2.75 T:aes128n12t8silcv2 2.75 2.75 2.75 T:aes128n8t8silcv2 2.75 2.75 2.75 T:aes128n12t8silcv3 2.83 2.87 2.89 T:lunarkeyakv2 3.13 3.16 3.18 T:norx6461v3 3.16 3.17 3.19 T:norx6461v2 3.55 3.57 3.59 T:norx6444v2 3.73 3.76 3.78 T:norx6461v1 3.88 3.89 3.90 T:norx3241v3 3.89 3.90 3.91 T:lakekeyakv1 3.89 3.91 3.93 T:norx3241v2 3.46? 3.96? 3.98? T:lakekeyakv2 4.27 4.32 4.35 T:norx6444v1 4.71 4.72 4.74 T:norx3241v1 5.79 5.79 5.80 T:aesjambuv1 5.88 5.91 6.03 T:norx3261v3 5.92 5.95 5.98 T:norx3261v2 6.43 6.56 6.68 T:acorn128v3 7.02 7.03 7.06 T:acorn128v2 7.12 7.14 7.15 T:riverkeyakv2 7.24 7.25 7.26 T:norx3261v1 7.33 7.35 7.40 T:ascon96v1 7.35 7.39 7.44 T:ascon128av11 7.46 7.48 7.50 ascon128av12 9.10 9.13 9.15 T:ketjeminorv2 10.86 10.89 10.90 T:ascon128v11 10.87 10.89 10.91 T:ascon128v1 10.87 10.91 10.92 ascon128v12 12.71 12.73 12.75 T:aes128otrsv1 12.76 12.78 12.83 T:aes128otrsv2 12.92 12.96 13.14 T:aes128otrpv2 12.97 13.00 13.03 T:aes128otrpv1 14.39 14.41 14.42 T:twine80n6t4clocv3 15.34 15.35 15.36 T:twine80n6t4clocv2 16.75 16.77 16.79 T:aes256otrsv1 16.86 16.87 16.90 T:aes256otrsv2 16.92 16.95 16.98 T:aes256otrpv1 16.94 16.97 17.00 T:aes256otrpv2 17.56 17.60 17.62 T:aes128n12clocv1 17.60 17.66 17.69 T:aes128n8clocv1 24.44 24.45 24.47 T:aeadaes128ocbtaglen64v1 24.44 24.46 24.50 T:aeadaes128ocbtaglen96v1 27.29 27.31 27.33 T:proest256otrv1 28.43 28.57 28.62 T:ketjesrv1 28.81 28.83 28.85 T:aeadaes192ocbtaglen64v1 28.81 28.83 28.87 T:aeadaes192ocbtaglen96v1 29.68 29.70 29.75 T:ketjesrv2 33.25 33.27 33.28 T:aeadaes256ocbtaglen64v1 33.26 33.27 33.30 T:aeadaes256ocbtaglen96v1 40.31 40.36 40.53 T:colm127v1 51.02 51.05 51.08 T:proest128otrv1 53.19 53.24 53.29 T:ketjejrv1 70.05 70.11 70.47 T:present80n6t4silcv3 79.65? 79.82? 97.54? T:deoxysneq128128v13 89.82 89.86 89.90 T:ketjejrv2 104.61 104.87 105.00 T:aezv1 111.56 111.72 112.52 T:deoxysneq256128v13 119.01 119.07 119.14 T:deoxyseq128128v13 124.41 124.45 124.51 T:led80n6t4silcv3 167.26 167.46 179.83 T:deoxyseq256128v13 317.32 317.51 317.81 T:acorn128 613.70 614.80 617.10 T:ketjemajorv2 3014.76 3016.39 3018.14 T:led80n6silcv1 3019.34 3020.03 3021.82 T:led80n6t4silcv2 3259.13 3259.43 3260.18 T:present80n6silcv1 3259.87 3262.09 3262.90 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 aegis128l 0.28 0.28 0.28 T:tiaoxinv1 0.28 0.28 0.28 T:tiaoxinv2 0.40 0.40 0.40 T:aegis256 0.43 0.43 0.44 T:aezv4 0.43 0.43 0.44 T:aezv5 0.43 0.43 0.44 T:aezv3 0.43 0.44 0.44 T:aegis128 0.44 0.44 0.45 aegis256 0.62 0.62 0.63 T:morus1280256v2 0.62 0.62 0.63 T:morus1280128v2 0.62 0.62 0.63 T:morus1280128v1 0.62 0.63 0.63 T:morus1280256v1 0.63 0.64 0.64 T:aeadaes128ocbtaglen128v1 0.67 0.67 0.67 T:aes128otrpv3 0.67 0.69 0.70 T:aes128otrcv3 0.73 0.74 0.74 T:aes128gcmv1 0.36? 0.82? 1.53? T:aeadaes192ocbtaglen128v1 0.91 0.91 0.92 T:aes256otrpv3 0.91 0.92 0.92 T:aes256otrcv3 0.91 0.92 0.93 aes256gcmv1 0.92 0.93 0.93 T:aeadaes256ocbtaglen128v1 1.01 1.01 1.02 T:deoxysi128v141 1.03 1.04 1.04 T:morus640128v2 1.03 1.04 1.04 T:morus640128v1 1.04 1.04 1.04 T:deoxysneq128128v1 1.14 1.15 1.16 T:deoxysi256v141 1.15 1.16 1.17 T:deoxysneq256128v1 1.17 1.17 1.18 T:colm0v1 1.31 1.31 1.32 T:deoxysii128v141 1.50 1.50 1.51 T:deoxysii256v141 1.61 1.63 1.64 T:norx6444v3 1.64 1.65 1.66 T:deoxyseq128128v1 1.71 1.71 1.71 T:aes128otrsv3 1.76 1.77 1.79 T:deoxyseq256128v1 2.03 2.04 2.06 T:norx6441v3 2.04 2.06 2.10 T:norx6441v2 2.31 2.31 2.31 T:aes256otrsv3 2.39 2.41 2.42 T:seakeyakv2 2.43 2.44 2.46 T:oceankeyakv2 2.43 2.45 2.46 T:norx6441v1 2.70 2.70 2.71 T:aes128n8t8silcv2 2.69 2.70 2.72 T:aes128n12t8silcv2 2.70 2.70 2.71 T:aes128n12t8silcv3 2.72 2.72 2.72 T:aes128n12t8clocv3 2.72 2.72 2.72 T:aes128n12t8clocv2 2.72 2.72 2.72 T:aes128n8t8clocv2 2.88 2.92 2.94 T:lunarkeyakv2 3.10 3.12 3.14 T:norx6461v3 3.12 3.14 3.16 T:norx6461v2 3.57 3.60 3.62 T:norx6444v2 3.66 3.68 3.69 T:norx6461v1 3.83 3.84 3.87 T:norx3241v2 3.84 3.86 3.87 T:norx3241v3 3.93 3.94 3.95 T:lakekeyakv1 3.47? 4.00? 4.02? T:lakekeyakv2 4.26 4.30 4.32 T:norx6444v1 4.66 4.68 4.69 T:norx3241v1 5.86 5.86 5.86 T:aesjambuv1 5.85 5.87 5.89 T:norx3261v2 5.87 5.89 6.00 T:norx3261v3 7.17 7.18 7.20 T:norx3261v1 6.73? 7.21? 7.67? T:acorn128v2 7.21 7.23 7.27 T:riverkeyakv2 7.08 7.39 7.67 T:acorn128v3 7.37 7.40 7.42 ascon128av12 7.39 7.42 7.44 T:ascon128av11 7.40 7.43 7.46 T:ascon96v1 9.04 9.06 9.08 T:ketjeminorv2 10.75 10.77 10.78 T:ascon128v1 10.76 10.78 10.80 T:ascon128v11 10.84 10.87 10.89 ascon128v12 13.11 13.14 13.18 T:aes128otrsv2 13.14 13.18 13.27 T:aes128otrpv1 13.21 13.23 13.26 T:aes128otrsv1 13.21 13.27 13.40 T:aes128otrpv2 14.38 14.41 14.42 T:twine80n6t4clocv3 15.29 15.31 15.32 T:twine80n6t4clocv2 17.02 17.06 17.10 T:aes256otrpv1 17.05 17.07 17.10 T:aes256otrsv2 17.15 17.19 17.21 T:aes128n12clocv1 17.23 17.27 17.31 T:aes256otrpv2 17.22 17.29 17.42 T:aes256otrsv1 17.35 17.39 17.42 T:aes128n8clocv1 27.27 27.30 27.32 T:proest256otrv1 28.70 28.81 28.86 T:ketjesrv1 28.81 28.85 28.96 T:aeadaes128ocbtaglen64v1 28.82 28.91 28.96 T:aeadaes128ocbtaglen96v1 29.54 29.59 29.65 T:ketjesrv2 34.23 34.25 34.28 T:aeadaes192ocbtaglen64v1 34.24 34.26 34.32 T:aeadaes192ocbtaglen96v1 39.69 39.73 39.78 T:aeadaes256ocbtaglen64v1 39.74 39.81 39.88 T:aeadaes256ocbtaglen96v1 48.91 49.02 49.05 T:colm127v1 51.22 51.25 51.29 T:proest128otrv1 53.74 53.98 54.12 T:ketjejrv1 70.05 70.09 70.14 T:present80n6t4silcv3 90.46 90.50 90.53 T:ketjejrv2 93.38 93.51 94.16 T:deoxysneq128128v13 104.84 105.07 105.23 T:aezv1 119.03 119.10 119.16 T:deoxyseq128128v13 124.48 124.63 124.73 T:led80n6t4silcv3 131.07 131.26 132.34 T:deoxysneq256128v13 167.16 167.25 167.56 T:deoxyseq256128v13 337.18 337.27 337.63 T:acorn128 614.19 614.95 617.65 T:ketjemajorv2 3013.06 3014.97 3016.22 T:led80n6silcv1 3020.26 3021.27 3022.28 T:led80n6t4silcv2 3259.15 3259.50 3260.73 T:present80n6silcv1 3260.59 3262.19 3262.80 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aegis128l 0.26 0.26 0.26 aegis128l 0.27 0.28 0.28 T:tiaoxinv2 0.27 0.28 0.28 T:tiaoxinv1 0.40 0.40 0.41 T:aegis256 0.43 0.44 0.44 T:aegis128 0.44 0.44 0.45 aegis256 0.62 0.62 0.63 T:morus1280256v1 0.62 0.62 0.63 T:morus1280256v2 0.62 0.62 0.63 T:morus1280128v2 0.62 0.63 0.63 T:morus1280128v1 0.64 0.64 0.64 T:aeadaes128ocbtaglen128v1 0.67 0.67 0.67 T:aes128otrpv3 0.67 0.69 0.70 T:aes128otrcv3 0.73 0.74 0.74 T:aes128gcmv1 0.07? 0.79? 1.22? T:aeadaes192ocbtaglen128v1 0.91 0.91 0.92 T:aes256otrpv3 0.91 0.91 0.92 T:aes256otrcv3 0.92 0.92 0.93 aes256gcmv1 0.92 0.93 0.93 T:aeadaes256ocbtaglen128v1 1.01 1.01 1.02 T:deoxysi128v141 1.03 1.03 1.04 T:morus640128v2 1.03 1.04 1.04 T:morus640128v1 1.04 1.04 1.04 T:deoxysneq128128v1 1.14 1.15 1.15 T:deoxysi256v141 1.15 1.15 1.16 T:deoxysneq256128v1 1.17 1.17 1.18 T:colm0v1 1.31 1.31 1.32 T:deoxysii128v141 1.50 1.50 1.51 T:deoxysii256v141 1.62 1.63 1.64 T:norx6444v3 1.64 1.65 1.65 T:deoxyseq128128v1 1.71 1.71 1.71 T:aes128otrsv3 1.76 1.77 1.79 T:deoxyseq256128v1 2.03 2.05 2.07 T:norx6441v3 2.04 2.06 2.10 T:norx6441v2 2.31 2.31 2.31 T:aes256otrsv3 2.41 2.42 2.43 T:seakeyakv2 2.44 2.45 2.46 T:norx6441v1 2.44 2.46 2.47 T:oceankeyakv2 2.69 2.70 2.70 T:aes128n12t8silcv2 2.70 2.71 2.71 T:aes128n8t8silcv2 2.71 2.71 2.72 T:aes128n12t8silcv3 2.72 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.73 T:aes128n12t8clocv3 2.72 2.72 2.73 T:aes128n12t8clocv2 2.90 2.93 2.95 T:lunarkeyakv2 3.11 3.13 3.15 T:norx6461v3 3.12 3.14 3.15 T:norx6461v2 3.59 3.61 3.64 T:norx6444v2 3.66 3.67 3.70 T:norx6461v1 3.83 3.85 3.87 T:norx3241v3 3.84 3.85 3.87 T:norx3241v2 3.94 3.96 3.97 T:lakekeyakv1 3.53? 4.02? 4.03? T:lakekeyakv2 4.27 4.31 4.33 T:norx6444v1 4.66 4.68 4.70 T:norx3241v1 5.86 5.86 5.86 T:aesjambuv1 5.84 5.86 5.88 T:norx3261v2 5.87 5.89 6.00 T:norx3261v3 7.17 7.18 7.19 T:norx3261v1 6.74? 7.21? 7.68? T:acorn128v2 7.23 7.26 7.29 T:riverkeyakv2 7.09 7.38 7.68 T:acorn128v3 7.37 7.39 7.41 ascon128av12 7.39 7.41 7.45 T:ascon128av11 7.39 7.42 7.44 T:ascon96v1 9.06 9.08 9.10 T:ketjeminorv2 10.75 10.77 10.78 T:ascon128v11 10.76 10.78 10.79 T:ascon128v1 10.85 10.87 10.89 ascon128v12 13.12 13.15 13.17 T:aes128otrsv2 13.15 13.20 13.29 T:aes128otrpv1 13.23 13.25 13.27 T:aes128otrsv1 13.23 13.27 13.44 T:aes128otrpv2 14.39 14.41 14.42 T:twine80n6t4clocv3 15.30 15.32 15.33 T:twine80n6t4clocv2 17.03 17.07 17.12 T:aes256otrpv1 17.06 17.09 17.11 T:aes256otrsv2 17.17 17.19 17.22 T:aes128n12clocv1 17.24 17.30 17.45 T:aes256otrsv1 17.27 17.32 17.35 T:aes256otrpv2 17.36 17.40 17.44 T:aes128n8clocv1 27.27 27.30 27.31 T:proest256otrv1 28.70 28.83 28.88 T:ketjesrv1 28.82 28.84 28.95 T:aeadaes128ocbtaglen64v1 28.84 28.95 29.02 T:aeadaes128ocbtaglen96v1 29.60 29.63 29.71 T:ketjesrv2 34.23 34.25 34.27 T:aeadaes192ocbtaglen64v1 34.23 34.27 34.33 T:aeadaes192ocbtaglen96v1 39.71 39.74 39.76 T:aeadaes256ocbtaglen64v1 39.75 39.83 39.88 T:aeadaes256ocbtaglen96v1 48.39 48.48 48.53 T:colm127v1 51.22 51.26 51.31 T:proest128otrv1 53.74 53.84 54.13 T:ketjejrv1 70.05 70.08 70.15 T:present80n6t4silcv3 90.45 90.48 90.50 T:ketjejrv2 93.40 93.47 93.55 T:deoxysneq128128v13 104.79 105.04 105.14 T:aezv1 119.04 119.08 119.11 T:deoxyseq128128v13 124.51 124.65 124.74 T:led80n6t4silcv3 131.06 131.30 132.36 T:deoxysneq256128v13 167.16 167.25 167.40 T:deoxyseq256128v13 337.23 337.41 338.51 T:acorn128 613.97 615.30 619.12 T:ketjemajorv2 3012.65 3014.64 3015.74 T:led80n6silcv1 3020.30 3021.14 3021.95 T:led80n6t4silcv2 3259.10 3259.47 3260.40 T:present80n6silcv1 3259.89 3261.76 3262.58 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.19 0.19 0.19 T:tiaoxinv2 0.19 0.19 0.19 T:tiaoxinv1 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.26 T:aezv3 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.25 aegis128l 0.40 0.41 0.41 aegis256 0.41 0.42 0.42 T:aes128gcmv1 0.41 0.43 0.43 aes256gcmv1 0.45 0.45 0.46 T:aegis256 0.46 0.46 0.47 T:aegis128 0.59 0.59 0.60 T:morus1280128v2 0.58 0.59 0.60 T:morus1280128v1 0.59 0.60 0.60 T:morus1280256v1 0.59 0.60 0.61 T:morus1280256v2 0.62 0.63 0.63 T:colm0v1 0.64 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.66 T:aes128otrpv3 0.67 0.69 0.70 T:aes128otrcv3 0.03? 0.75? 1.45? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.86 0.87 0.88 T:deoxyseq128128v1 0.87 0.87 0.88 T:deoxysi128v141 0.87 0.88 0.88 T:deoxysii128v141 0.89 0.90 0.90 T:aeadaes256ocbtaglen128v1 0.90 0.90 0.91 T:aes256otrpv3 0.91 0.91 0.92 T:aes256otrcv3 0.98 0.99 1.02 T:deoxysneq256128v1 0.99 1.00 1.01 T:morus640128v1 0.99 1.00 1.01 T:deoxyseq256128v1 1.00 1.00 1.01 T:deoxysii256v141 1.00 1.01 1.02 T:deoxysi256v141 1.00 1.01 1.02 T:morus640128v2 1.84 1.87 1.90 T:oceankeyakv2 1.85 1.88 1.91 T:lunarkeyakv2 2.05 2.09 2.11 T:norx6441v3 2.05 2.09 2.14 T:norx6441v2 2.07 2.11 2.18 T:norx6444v3 2.28 2.29 2.31 T:seakeyakv2 2.47 2.50 2.53 T:norx6441v1 2.69 2.69 2.71 T:aes128n12t8silcv2 2.71 2.71 2.72 T:aes128n8t8silcv2 2.71 2.71 2.72 T:aes128n12t8silcv3 2.72 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.72 T:aes128n12t8clocv2 2.72 2.72 2.72 T:aes128n12t8clocv3 2.72 2.72 2.72 T:aes128otrsv3 3.16 3.19 3.21 T:norx6461v3 3.21 3.24 3.27 T:norx6461v2 3.23 3.26 3.29 T:norx6444v2 3.59 3.61 3.62 T:lakekeyakv2 3.70 3.70 3.72 T:aes256otrsv3 3.70 3.73 3.75 T:lakekeyakv1 3.69 3.74 3.76 T:norx6461v1 3.89 3.91 3.94 T:norx3241v3 3.91 3.93 3.95 T:norx3241v2 4.20 4.23 4.27 T:norx6444v1 4.75 4.77 4.80 T:norx3241v1 5.75 5.75 5.75 T:aesjambuv1 5.83 5.87 5.90 T:norx3261v2 5.87 5.90 6.03 T:norx3261v3 6.75 6.77 6.81 T:riverkeyakv2 7.19 7.23 7.27 T:acorn128v2 7.23 7.25 7.27 T:norx3261v1 7.23 7.26 7.29 T:ascon96v1 7.30 7.35 7.39 T:ascon128av11 7.35 7.37 7.39 ascon128av12 7.29 7.53 7.74 T:acorn128v3 7.93 7.97 7.99 T:ketjeminorv2 10.81 10.86 10.88 T:ascon128v11 10.83 10.86 10.89 T:ascon128v1 10.85 10.89 10.92 ascon128v12 11.92 11.94 11.96 T:aes128otrsv2 11.93 11.96 11.97 T:aes128otrsv1 12.15 12.17 12.19 T:aes128n12clocv1 12.14 12.18 12.20 T:aes128n8clocv1 12.22 12.26 12.30 T:aes128otrpv1 12.24 12.34 12.61 T:aes128otrpv2 14.20 14.26 14.28 T:twine80n6t4clocv3 15.07 15.08 15.09 T:twine80n6t4clocv2 15.99 16.02 16.06 T:aes256otrsv1 16.00 16.03 16.05 T:aes256otrsv2 16.06 16.12 16.20 T:aes256otrpv1 16.27 16.32 16.36 T:aes256otrpv2 24.21 24.23 24.29 T:aeadaes128ocbtaglen96v1 24.22 24.24 24.27 T:aeadaes128ocbtaglen64v1 25.30 25.37 25.46 T:ketjesrv1 25.85 25.87 25.90 T:colm127v1 26.95 27.01 27.05 T:ketjesrv2 27.48 27.51 27.53 T:proest256otrv1 28.58 28.60 28.62 T:aeadaes192ocbtaglen96v1 28.59 28.60 28.63 T:aeadaes192ocbtaglen64v1 33.02 33.03 33.05 T:aeadaes256ocbtaglen96v1 33.01 33.04 33.07 T:aeadaes256ocbtaglen64v1 47.34 47.44 47.50 T:ketjejrv1 50.80 51.10 51.47 T:aezv1 51.51 51.55 51.60 T:proest128otrv1 69.49 69.57 70.39 T:present80n6t4silcv3 78.51? 78.61? 100.06? T:deoxyseq128128v13 79.05 79.14 79.27 T:deoxysneq128128v13 86.92 86.95 86.98 T:ketjejrv2 110.50 110.57 110.68 T:deoxyseq256128v13 111.23 111.38 112.42 T:deoxysneq256128v13 123.98 124.03 124.08 T:led80n6t4silcv3 310.55 310.76 311.18 T:acorn128 594.57 595.53 597.34 T:ketjemajorv2 2007.00 2009.29 2013.84 T:led80n6silcv1 2014.09 2015.36 2017.86 T:led80n6t4silcv2 2170.06 2171.08 2175.26 T:present80n6t4silcv2 2170.67 2171.58 2174.91 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.19 0.19 0.19 T:tiaoxinv2 0.19 0.19 0.19 T:tiaoxinv1 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.25 aegis128l 0.40 0.40 0.41 T:aegis256 0.40 0.41 0.41 aegis256 0.41 0.41 0.42 T:aegis128 0.41 0.42 0.42 T:aes128gcmv1 0.41 0.42 0.43 aes256gcmv1 0.59 0.60 0.61 T:morus1280128v2 0.59 0.60 0.61 T:morus1280128v1 0.59 0.60 0.61 T:morus1280256v1 0.59 0.60 0.61 T:morus1280256v2 0.63 0.63 0.64 T:colm0v1 0.64 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.65 T:aes128otrpv3 0.67 0.69 0.70 T:aes128otrcv3 0.07? 0.75? 1.44? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.87 0.87 0.88 T:deoxyseq128128v1 0.86 0.87 0.89 T:deoxysii128v141 0.87 0.88 0.88 T:deoxysi128v141 0.89 0.89 0.90 T:aeadaes256ocbtaglen128v1 0.90 0.90 0.90 T:aes256otrpv3 0.90 0.91 0.92 T:aes256otrcv3 0.98 1.00 1.02 T:deoxysneq256128v1 0.99 1.00 1.01 T:deoxysi256v141 0.99 1.00 1.01 T:deoxysii256v141 0.99 1.00 1.02 T:deoxyseq256128v1 0.99 1.00 1.01 T:morus640128v2 1.00 1.00 1.01 T:morus640128v1 1.84 1.86 1.89 T:oceankeyakv2 1.85 1.88 1.92 T:lunarkeyakv2 2.02 2.05 2.09 T:norx6441v3 2.05 2.08 2.16 T:norx6441v2 2.07 2.11 2.17 T:norx6444v3 2.27 2.30 2.31 T:seakeyakv2 2.43 2.45 2.47 T:norx6441v1 2.69 2.69 2.71 T:aes128n12t8silcv2 2.72 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.72 T:aes128n12t8clocv2 2.72 2.72 2.73 T:aes128n12t8clocv3 2.72 2.72 2.72 T:aes128otrsv3 2.72 2.72 2.73 T:aes128n8t8silcv2 2.72 2.73 2.73 T:aes128n12t8silcv3 3.12 3.16 3.18 T:norx6461v3 3.15 3.18 3.21 T:norx6461v2 3.31 3.34 3.36 T:norx6444v2 3.59 3.60 3.62 T:lakekeyakv2 3.63 3.66 3.69 T:norx6461v1 3.70 3.70 3.71 T:aes256otrsv3 3.70 3.72 3.74 T:lakekeyakv1 3.92 3.94 3.98 T:norx3241v3 3.92 3.95 3.98 T:norx3241v2 4.21 4.23 4.27 T:norx6444v1 4.75 4.79 4.80 T:norx3241v1 5.75 5.77 5.81 T:aesjambuv1 5.84 5.87 5.90 T:norx3261v2 5.87 5.92 6.06 T:norx3261v3 6.75 6.77 6.80 T:riverkeyakv2 7.24 7.27 7.30 T:ascon128av11 7.24 7.27 7.31 T:ascon96v1 7.27 7.28 7.30 T:norx3261v1 7.34 7.37 7.40 ascon128av12 6.50? 7.43? 8.36? T:acorn128v2 6.95? 7.54? 8.08? T:acorn128v3 7.92 7.95 7.98 T:ketjeminorv2 10.82 10.84 10.86 ascon128v12 10.82 10.85 10.88 T:ascon128v11 10.84 10.90 10.93 T:ascon128v1 11.98 12.02 12.04 T:aes128otrsv1 12.02 12.06 12.12 T:aes128otrsv2 12.16 12.18 12.20 T:aes128n8clocv1 12.14 12.18 12.22 T:aes128n12clocv1 12.27 12.33 12.44 T:aes128otrpv1 12.32 12.40 12.62 T:aes128otrpv2 14.24 14.28 14.29 T:twine80n6t4clocv3 15.06 15.09 15.11 T:twine80n6t4clocv2 16.07 16.10 16.15 T:aes256otrsv2 16.07 16.11 16.13 T:aes256otrsv1 16.11 16.15 16.28 T:aes256otrpv1 16.26 16.32 16.38 T:aes256otrpv2 24.20 24.21 24.23 T:aeadaes128ocbtaglen96v1 24.21 24.22 24.24 T:aeadaes128ocbtaglen64v1 25.31 25.39 25.47 T:ketjesrv1 25.86 25.88 25.90 T:colm127v1 26.97 27.01 27.06 T:ketjesrv2 27.49 27.52 27.57 T:proest256otrv1 28.57 28.59 28.61 T:aeadaes192ocbtaglen64v1 28.58 28.60 28.61 T:aeadaes192ocbtaglen96v1 33.01 33.05 33.08 T:aeadaes256ocbtaglen96v1 33.03 33.06 33.09 T:aeadaes256ocbtaglen64v1 47.29 47.43 47.55 T:ketjejrv1 50.79 51.06 51.42 T:aezv1 51.51 51.56 51.61 T:proest128otrv1 69.51 69.57 69.70 T:present80n6t4silcv3 78.58? 78.69? 97.54? T:deoxyseq128128v13 79.08 79.23 79.37 T:deoxysneq128128v13 86.89 86.92 86.96 T:ketjejrv2 110.93 111.16 111.28 T:deoxyseq256128v13 111.17 111.33 112.56 T:deoxysneq256128v13 123.95 124.01 124.10 T:led80n6t4silcv3 326.32 326.46 326.62 T:acorn128 594.72 595.50 596.52 T:ketjemajorv2 2006.56 2009.55 2013.98 T:led80n6silcv1 2013.27 2014.47 2017.14 T:led80n6t4silcv2 2170.92 2171.20 2176.45 T:present80n6t4silcv2 2170.59 2171.84 2175.16 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.19 0.19 0.19 T:tiaoxinv2 0.19 0.19 0.19 T:tiaoxinv1 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.26 aegis128l 0.40 0.40 0.41 T:aegis256 0.40 0.41 0.41 aegis256 0.41 0.41 0.42 T:aegis128 0.41 0.42 0.42 aes256gcmv1 0.41 0.42 0.43 T:aes128gcmv1 0.59 0.60 0.61 T:morus1280256v2 0.60 0.60 0.61 T:morus1280256v1 0.59 0.60 0.61 T:morus1280128v1 0.60 0.61 0.61 T:morus1280128v2 0.63 0.64 0.64 T:colm0v1 0.64 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.65 T:aes128otrpv3 0.67 0.69 0.70 T:aes128otrcv3 0.07? 0.75? 1.43? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.87 0.87 0.88 T:deoxysi128v141 0.87 0.87 0.88 T:deoxyseq128128v1 0.86 0.87 0.89 T:deoxysii128v141 0.89 0.89 0.90 T:aeadaes256ocbtaglen128v1 0.90 0.90 0.90 T:aes256otrpv3 0.90 0.91 0.92 T:aes256otrcv3 0.98 0.99 1.01 T:deoxysneq256128v1 0.99 1.00 1.01 T:morus640128v2 0.99 1.00 1.01 T:deoxysii256v141 0.99 1.00 1.01 T:deoxysi256v141 0.99 1.00 1.01 T:morus640128v1 0.99 1.00 1.02 T:deoxyseq256128v1 1.84 1.87 1.90 T:oceankeyakv2 1.84 1.89 1.93 T:lunarkeyakv2 2.03 2.08 2.09 T:norx6441v3 2.06 2.10 2.14 T:norx6441v2 2.09 2.11 2.18 T:norx6444v3 2.28 2.29 2.31 T:seakeyakv2 2.43 2.45 2.47 T:norx6441v1 2.71 2.72 2.72 T:aes128n12t8clocv3 2.72 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.73 T:aes128n12t8clocv2 2.72 2.72 2.72 T:aes128otrsv3 2.72 2.72 2.73 T:aes128n8t8silcv2 2.73 2.73 2.73 T:aes128n12t8silcv3 2.71 2.74 2.75 T:aes128n12t8silcv2 3.11 3.15 3.17 T:norx6461v3 3.16 3.18 3.21 T:norx6461v2 3.31 3.34 3.37 T:norx6444v2 3.59 3.60 3.62 T:lakekeyakv2 3.63 3.66 3.71 T:norx6461v1 3.70 3.70 3.71 T:aes256otrsv3 3.70 3.73 3.74 T:lakekeyakv1 3.92 3.94 3.98 T:norx3241v2 3.92 3.94 3.98 T:norx3241v3 4.21 4.25 4.28 T:norx6444v1 4.75 4.78 4.79 T:norx3241v1 5.75 5.75 5.80 T:aesjambuv1 5.83 5.85 5.88 T:norx3261v2 5.88 5.90 6.04 T:norx3261v3 6.76 6.79 6.82 T:riverkeyakv2 7.22 7.24 7.27 T:ascon96v1 7.24 7.26 7.29 T:ascon128av11 7.26 7.29 7.31 T:norx3261v1 7.34 7.38 7.41 ascon128av12 6.49? 7.43? 8.36? T:acorn128v2 6.95? 7.54? 8.08? T:acorn128v3 7.91 7.94 7.98 T:ketjeminorv2 10.81 10.83 10.86 ascon128v12 10.81 10.85 10.87 T:ascon128v11 10.85 10.88 10.92 T:ascon128v1 11.99 12.02 12.06 T:aes128otrsv1 12.02 12.06 12.09 T:aes128otrsv2 12.13 12.17 12.19 T:aes128n12clocv1 12.15 12.18 12.20 T:aes128n8clocv1 12.28 12.36 12.44 T:aes128otrpv1 12.34 12.40 12.63 T:aes128otrpv2 14.19 14.22 14.26 T:twine80n6t4clocv3 15.07 15.09 15.11 T:twine80n6t4clocv2 16.06 16.09 16.13 T:aes256otrsv1 16.08 16.12 16.15 T:aes256otrsv2 16.10 16.13 16.28 T:aes256otrpv1 16.27 16.34 16.40 T:aes256otrpv2 24.19 24.21 24.29 T:aeadaes128ocbtaglen96v1 24.20 24.21 24.23 T:aeadaes128ocbtaglen64v1 25.31 25.38 25.46 T:ketjesrv1 25.85 25.87 25.90 T:colm127v1 26.96 27.00 27.03 T:ketjesrv2 27.48 27.51 27.55 T:proest256otrv1 28.58 28.59 28.61 T:aeadaes192ocbtaglen64v1 28.58 28.61 28.65 T:aeadaes192ocbtaglen96v1 33.01 33.04 33.07 T:aeadaes256ocbtaglen96v1 33.03 33.06 33.09 T:aeadaes256ocbtaglen64v1 47.42 47.53 47.66 T:ketjejrv1 50.76 51.07 51.42 T:aezv1 51.51 51.56 51.60 T:proest128otrv1 69.50 69.56 69.68 T:present80n6t4silcv3 78.59? 78.77? 98.58? T:deoxyseq128128v13 79.03 79.12 79.30 T:deoxysneq128128v13 86.89 86.94 86.98 T:ketjejrv2 110.83 110.93 111.10 T:deoxyseq256128v13 111.21 111.36 112.49 T:deoxysneq256128v13 124.00 124.06 124.20 T:led80n6t4silcv3 326.32 326.44 326.63 T:acorn128 595.17 595.92 597.49 T:ketjemajorv2 2006.83 2009.09 2013.68 T:led80n6silcv1 2013.45 2015.08 2017.80 T:led80n6t4silcv2 2170.85 2171.44 2177.22 T:present80n6t4silcv2 2170.75 2171.49 2175.22 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.28 0.29 0.29 T:tiaoxinv2 0.29 0.29 0.29 T:tiaoxinv1 0.31 0.31 0.32 aegis128l 0.31 0.31 0.32 T:aegis128l 0.48 0.49 0.49 aegis256 0.49 0.49 0.50 T:aegis256 0.49 0.50 0.50 T:aegis128 0.51 0.51 0.51 T:aezv5 0.51 0.51 0.52 T:aezv4 0.52 0.52 0.52 T:aezv3 0.74 0.74 0.75 T:aeadaes128ocbtaglen128v1 0.77 0.77 0.77 T:aes128otrpv3 0.77 0.77 0.78 T:morus1280256v1 0.77 0.77 0.78 T:morus1280128v1 0.78 0.78 0.79 T:morus1280128v2 0.79 0.79 0.79 T:morus1280256v2 0.85 0.85 0.86 T:aes128otrcv3 0.89? 0.89? 1.75? T:aeadaes192ocbtaglen128v1 0.96 0.96 0.97 T:aes128gcmv1 1.02 1.02 1.02 T:aeadaes256ocbtaglen128v1 1.02 1.03 1.03 T:deoxysneq128128v1 1.05 1.05 1.06 T:aes256otrpv3 1.06 1.06 1.07 T:deoxysi128v141 1.11 1.11 1.12 aes256gcmv1 1.15 1.15 1.15 T:aes256otrcv3 1.16 1.16 1.17 T:deoxysneq256128v1 1.18 1.18 1.19 T:morus640128v1 1.18 1.19 1.19 T:morus640128v2 1.21 1.22 1.23 T:deoxysi256v141 1.26 1.26 1.27 T:colm0v1 1.51 1.51 1.52 T:deoxysii128v141 1.52 1.52 1.53 T:deoxyseq128128v1 1.70 1.70 1.71 T:deoxyseq256128v1 1.74 1.75 1.75 T:deoxysii256v141 1.80 1.80 1.80 T:aes128otrsv3 2.24 2.25 2.27 T:norx6444v3 2.43 2.44 2.45 T:norx6441v3 2.40 2.44 2.49 T:norx6441v2 2.49 2.49 2.50 T:aes256otrsv3 2.80 2.81 2.83 T:norx6441v1 2.82 2.82 2.82 T:aes128n12t8clocv3 2.82 2.82 2.82 T:aes128n12t8clocv2 2.82 2.82 2.82 T:aes128n8t8clocv2 2.85 2.86 2.87 T:aes128n12t8silcv2 2.87 2.87 2.88 T:aes128n12t8silcv3 2.87 2.88 2.88 T:aes128n8t8silcv2 3.40 3.41 3.42 T:seakeyakv2 3.66 3.67 3.68 T:norx6461v3 3.68 3.69 3.71 T:norx6461v2 4.20 4.21 4.23 T:norx6461v1 4.23 4.26 4.29 T:norx3241v2 4.25 4.31 4.33 T:norx3241v3 4.37 4.37 4.38 T:lakekeyakv2 4.57 4.57 4.58 T:lakekeyakv1 4.59 4.59 4.60 T:oceankeyakv2 4.99 5.01 5.02 T:norx3241v1 5.07 5.09 5.09 T:norx6444v2 5.93 5.94 5.94 T:aesjambuv1 6.05 6.09 6.11 T:norx6444v1 6.35 6.36 6.37 T:norx3261v3 6.42 6.44 6.46 T:norx3261v2 7.51 7.52 7.54 T:riverkeyakv2 7.51 7.53 7.56 T:ascon96v1 7.54 7.57 7.62 T:ascon128av11 7.65 7.67 7.69 ascon128av12 7.67 7.68 7.70 T:norx3261v1 7.63 7.71 7.77 T:acorn128v3 7.85 7.87 7.90 T:lunarkeyakv2 8.07 8.09 8.10 T:acorn128v2 10.22 10.24 10.27 T:ketjeminorv2 11.03 11.04 11.06 T:ascon128v1 11.04 11.06 11.08 T:ascon128v11 11.06 11.08 11.09 ascon128v12 13.12 13.13 13.15 T:aes128otrsv1 13.16 13.18 13.21 T:aes128otrsv2 13.32 13.36 13.53 T:aes128otrpv2 13.38 13.40 13.43 T:aes128otrpv1 14.65 14.67 14.68 T:twine80n6t4clocv3 15.65 15.65 15.67 T:twine80n6t4clocv2 17.27 17.28 17.29 T:aes256otrsv1 17.38 17.39 17.41 T:aes256otrsv2 17.46 17.47 17.49 T:aes256otrpv1 17.43 17.47 17.52 T:aes256otrpv2 17.77 17.80 17.82 T:aes128n12clocv1 17.85 17.86 17.87 T:aes128n8clocv1 25.07 25.08 25.10 T:aeadaes128ocbtaglen96v1 25.08 25.10 25.11 T:aeadaes128ocbtaglen64v1 29.17 29.28 29.31 T:ketjesrv1 29.53 29.54 29.55 T:aeadaes192ocbtaglen64v1 29.57 29.68 31.03 T:aeadaes192ocbtaglen96v1 29.67 29.68 29.70 T:proest256otrv1 30.71 30.74 30.81 T:ketjesrv2 34.11 34.12 34.13 T:aeadaes256ocbtaglen64v1 34.11 34.13 34.16 T:aeadaes256ocbtaglen96v1 41.01 41.03 41.28 T:colm127v1 53.21 53.23 53.26 T:proest128otrv1 54.05 54.08 54.26 T:ketjejrv1 70.85 70.89 71.20 T:present80n6t4silcv3 80.06 80.10 80.16 T:deoxysneq128128v13 91.21 91.24 91.27 T:ketjejrv2 102.95 103.01 103.06 T:aezv1 112.28 112.40 112.98 T:deoxysneq256128v13 120.32 120.43 120.54 T:deoxyseq128128v13 125.51 125.56 125.62 T:led80n6t4silcv3 168.99 169.06 169.24 T:deoxyseq256128v13 355.73 357.16 357.45 T:acorn128 631.88 632.35 633.87 T:ketjemajorv2 3030.17 3032.85 3034.12 T:led80n6silcv1 3036.03 3037.55 3039.24 T:led80n6t4silcv2 3277.10 3277.84 3279.44 T:present80n6t4silcv2 3277.17 3278.38 3281.09 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.31 0.31 0.31 T:aegis128l 0.32 0.32 0.32 aegis128l 0.36 0.36 0.36 T:tiaoxinv1 0.36 0.36 0.36 T:tiaoxinv2 0.47 0.47 0.47 T:aegis256 0.49 0.49 0.49 T:aegis128 0.51 0.51 0.51 T:aezv5 0.51 0.51 0.51 T:aezv4 0.52 0.52 0.52 T:aezv3 0.52 0.52 0.52 aegis256 0.75 0.75 0.76 T:aeadaes128ocbtaglen128v1 0.78 0.78 0.79 T:morus1280256v1 0.79 0.79 0.79 T:aes128otrpv3 0.79 0.79 0.80 T:morus1280128v1 0.80 0.80 0.80 T:morus1280128v2 0.80 0.81 0.81 T:morus1280256v2 0.88 0.88 0.89 T:aes128otrcv3 0.89 0.89 0.89 T:aes128gcmv1 0.89? 0.90? 1.34? T:aeadaes192ocbtaglen128v1 1.06 1.07 1.07 T:aeadaes256ocbtaglen128v1 1.08 1.08 1.08 T:aes256otrpv3 1.10 1.11 1.11 aes256gcmv1 1.17 1.17 1.18 T:morus640128v1 1.18 1.19 1.19 T:aes256otrcv3 1.20 1.20 1.21 T:morus640128v2 1.23 1.23 1.24 T:deoxysi128v141 1.26 1.26 1.27 T:deoxysneq128128v1 1.31 1.32 1.34 T:colm0v1 1.36 1.37 1.37 T:deoxysneq256128v1 1.43 1.43 1.44 T:deoxysi256v141 1.56 1.56 1.56 T:deoxysii128v141 1.80 1.80 1.81 T:deoxysii256v141 1.82 1.82 1.83 T:aes128otrsv3 1.91 1.91 1.92 T:deoxyseq128128v1 2.03 2.03 2.05 T:deoxyseq256128v1 2.23 2.25 2.28 T:norx6444v3 2.39 2.40 2.41 T:norx6441v3 2.40 2.42 2.47 T:norx6441v2 2.52 2.52 2.52 T:aes256otrsv3 2.77 2.78 2.79 T:norx6441v1 2.81 2.81 2.81 T:aes128n12t8clocv3 2.81 2.81 2.81 T:aes128n8t8clocv2 2.81 2.81 2.81 T:aes128n12t8clocv2 2.82 2.83 2.85 T:aes128n12t8silcv2 2.83 2.84 2.84 T:aes128n8t8silcv2 2.83 2.84 2.84 T:aes128n12t8silcv3 3.46 3.47 3.48 T:seakeyakv2 3.62 3.64 3.65 T:norx6461v3 3.63 3.65 3.67 T:norx6461v2 4.13 4.15 4.17 T:norx6461v1 4.17 4.18 4.23 T:norx3241v2 4.19 4.23 4.24 T:norx3241v3 4.41 4.41 4.42 T:lakekeyakv2 4.60 4.61 4.62 T:lakekeyakv1 4.62 4.63 4.65 T:oceankeyakv2 4.96 4.97 4.97 T:norx3241v1 5.12 5.13 5.14 T:norx6444v2 6.01 6.01 6.01 T:aesjambuv1 6.04 6.07 6.09 T:norx6444v1 6.33 6.35 6.37 T:norx3261v2 6.36 6.37 6.38 T:norx3261v3 7.55 7.57 7.59 ascon128av12 7.57 7.60 7.62 T:ascon128av11 7.60 7.61 7.62 T:norx3261v1 7.59 7.62 7.65 T:ascon96v1 7.63 7.65 7.67 T:riverkeyakv2 7.89 7.92 7.95 T:lunarkeyakv2 8.25 8.27 8.85 T:acorn128v2 8.40 8.44 8.79 T:acorn128v3 10.14 10.16 10.17 T:ketjeminorv2 10.93 10.94 10.96 T:ascon128v1 10.94 10.95 10.97 T:ascon128v11 11.03 11.04 11.06 ascon128v12 13.54 13.57 13.60 T:aes128otrsv2 13.57 13.62 13.69 T:aes128otrpv1 13.64 13.65 13.67 T:aes128otrsv1 13.65 13.70 13.83 T:aes128otrpv2 14.65 14.67 14.69 T:twine80n6t4clocv3 15.62 15.63 15.64 T:twine80n6t4clocv2 17.38 17.40 17.42 T:aes128n12clocv1 17.57 17.60 17.62 T:aes128n8clocv1 17.58 17.63 17.67 T:aes256otrpv1 17.63 17.65 17.67 T:aes256otrsv2 17.77 17.82 17.99 T:aes256otrsv1 17.78 17.83 17.89 T:aes256otrpv2 29.46 29.55 29.59 T:ketjesrv1 29.60 29.64 29.85 T:aeadaes128ocbtaglen96v1 29.62 29.67 29.75 T:aeadaes128ocbtaglen64v1 29.71 29.74 29.75 T:proest256otrv1 30.58 30.63 30.67 T:ketjesrv2 35.13 35.14 35.17 T:aeadaes192ocbtaglen64v1 35.19 35.40 36.36 T:aeadaes192ocbtaglen96v1 40.78 40.80 40.83 T:aeadaes256ocbtaglen64v1 40.79 40.83 40.93 T:aeadaes256ocbtaglen96v1 49.69 49.71 49.75 T:colm127v1 53.46 53.49 53.52 T:proest128otrv1 54.54 54.58 54.71 T:ketjejrv1 70.84 70.89 70.94 T:present80n6t4silcv3 91.82 91.84 91.88 T:ketjejrv2 93.88 93.93 93.96 T:deoxysneq128128v13 103.34 103.45 103.66 T:aezv1 120.33 120.42 120.59 T:deoxyseq128128v13 125.53 125.61 125.83 T:led80n6t4silcv3 131.72 131.96 132.75 T:deoxysneq256128v13 169.01 169.08 169.20 T:deoxyseq256128v13 377.32 377.37 377.59 T:acorn128 632.19 632.66 633.86 T:ketjemajorv2 3028.62 3031.23 3032.67 T:led80n6silcv1 3036.28 3037.56 3038.32 T:led80n6t4silcv2 3276.28 3277.63 3278.92 T:present80n6t4silcv2 3276.84 3277.75 3279.71 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.31 0.31 0.31 T:aegis128l 0.31 0.32 0.32 T:aezv5 0.32 0.32 0.32 T:aezv4 0.32 0.32 0.32 T:aezv3 0.33 0.33 0.33 aegis128l 0.36 0.36 0.36 T:tiaoxinv2 0.36 0.36 0.37 T:tiaoxinv1 0.47 0.47 0.47 T:aegis256 0.49 0.49 0.50 T:aegis128 0.52 0.52 0.52 aegis256 0.75 0.75 0.76 T:aeadaes128ocbtaglen128v1 0.79 0.79 0.79 T:morus1280256v1 0.79 0.79 0.79 T:aes128otrpv3 0.79 0.79 0.79 T:morus1280128v1 0.80 0.80 0.80 T:morus1280128v2 0.80 0.80 0.81 T:morus1280256v2 0.88 0.88 0.89 T:aes128otrcv3 0.89 0.89 0.89 T:aes128gcmv1 0.90? 0.90? 1.75? T:aeadaes192ocbtaglen128v1 1.06 1.07 1.07 T:aeadaes256ocbtaglen128v1 1.07 1.08 1.08 T:aes256otrpv3 1.10 1.11 1.11 aes256gcmv1 1.17 1.17 1.18 T:morus640128v1 1.18 1.19 1.19 T:aes256otrcv3 1.19 1.20 1.20 T:morus640128v2 1.23 1.23 1.24 T:deoxysi128v141 1.26 1.26 1.26 T:deoxysneq128128v1 1.32 1.32 1.33 T:colm0v1 1.36 1.36 1.36 T:deoxysneq256128v1 1.43 1.43 1.43 T:deoxysi256v141 1.56 1.56 1.56 T:deoxysii128v141 1.80 1.80 1.81 T:deoxysii256v141 1.82 1.82 1.83 T:aes128otrsv3 1.91 1.91 1.92 T:deoxyseq128128v1 2.02 2.03 2.04 T:deoxyseq256128v1 2.24 2.25 2.27 T:norx6444v3 2.39 2.40 2.40 T:norx6441v3 2.40 2.43 2.47 T:norx6441v2 2.52 2.52 2.52 T:aes256otrsv3 2.77 2.78 2.79 T:norx6441v1 2.80 2.80 2.80 T:aes128n8t8clocv2 2.80 2.80 2.80 T:aes128n12t8clocv3 2.80 2.80 2.81 T:aes128n12t8clocv2 2.83 2.83 2.84 T:aes128n8t8silcv2 2.83 2.83 2.84 T:aes128n12t8silcv3 2.85 2.85 2.85 T:aes128n12t8silcv2 3.47 3.48 3.49 T:seakeyakv2 3.62 3.64 3.65 T:norx6461v3 3.65 3.67 3.68 T:norx6461v2 4.13 4.15 4.16 T:norx6461v1 4.17 4.18 4.22 T:norx3241v2 4.18 4.23 4.24 T:norx3241v3 4.42 4.43 4.44 T:lakekeyakv2 4.62 4.63 4.64 T:lakekeyakv1 4.64 4.64 4.65 T:oceankeyakv2 4.95 4.96 4.97 T:norx3241v1 5.13 5.14 5.16 T:norx6444v2 6.01 6.01 6.03 T:aesjambuv1 6.05 6.08 6.10 T:norx6444v1 6.33 6.35 6.37 T:norx3261v2 6.36 6.37 6.38 T:norx3261v3 7.55 7.58 7.60 ascon128av12 7.57 7.59 7.60 T:ascon128av11 7.57 7.59 7.62 T:ascon96v1 7.59 7.60 7.61 T:norx3261v1 7.64 7.65 7.68 T:riverkeyakv2 7.91 7.94 7.95 T:lunarkeyakv2 8.26 8.28 8.84 T:acorn128v2 8.40 8.42 8.78 T:acorn128v3 10.16 10.18 10.19 T:ketjeminorv2 10.92 10.93 10.95 T:ascon128v1 10.93 10.95 10.96 T:ascon128v11 11.02 11.04 11.05 ascon128v12 13.56 13.57 13.60 T:aes128otrsv2 13.61 13.65 13.72 T:aes128otrpv1 13.65 13.66 13.69 T:aes128otrsv1 13.66 13.69 13.85 T:aes128otrpv2 14.65 14.67 14.69 T:twine80n6t4clocv3 15.62 15.62 15.63 T:twine80n6t4clocv2 17.36 17.38 17.40 T:aes128n12clocv1 17.56 17.59 17.65 T:aes128n8clocv1 17.64 17.67 17.69 T:aes256otrpv1 17.65 17.67 17.70 T:aes256otrsv2 17.78 17.81 18.00 T:aes256otrsv1 17.83 17.88 17.91 T:aes256otrpv2 29.50 29.58 29.61 T:ketjesrv1 29.59 29.62 29.85 T:aeadaes128ocbtaglen96v1 29.60 29.64 29.76 T:aeadaes128ocbtaglen64v1 29.72 29.73 29.75 T:proest256otrv1 30.62 30.67 30.71 T:ketjesrv2 35.13 35.15 35.17 T:aeadaes192ocbtaglen64v1 35.22 35.36 36.31 T:aeadaes192ocbtaglen96v1 40.76 40.79 40.82 T:aeadaes256ocbtaglen64v1 40.79 40.82 40.94 T:aeadaes256ocbtaglen96v1 49.68 49.70 49.73 T:colm127v1 53.46 53.49 53.52 T:proest128otrv1 54.57 54.60 54.65 T:ketjejrv1 70.87 70.88 70.92 T:present80n6t4silcv3 91.90 91.91 91.93 T:ketjejrv2 93.93 93.98 94.05 T:deoxysneq128128v13 103.27 103.39 103.45 T:aezv1 120.34 120.46 120.64 T:deoxyseq128128v13 125.57 125.62 125.79 T:led80n6t4silcv3 131.76 132.00 132.83 T:deoxysneq256128v13 169.03 169.09 169.19 T:deoxyseq256128v13 377.30 377.33 377.40 T:acorn128 638.79 639.43 641.87 T:ketjemajorv2 3028.04 3031.29 3033.08 T:led80n6silcv1 3036.28 3037.42 3038.00 T:led80n6t4silcv2 3276.66 3277.30 3277.89 T:present80n6silcv1 3276.93 3277.90 3280.02 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.73 1.73 1.76 aegis128l 1.73 1.74 1.76 T:aegis128l 1.73 1.74 1.76 T:aegis128 2.02 2.02 2.03 T:aegis256 2.20 2.21 2.24 T:aezv5 2.27 2.29 2.30 T:aezv4 2.28 2.30 2.32 T:aezv3 2.31 2.32 2.33 aegis256 2.31 2.32 2.37 T:tiaoxinv2 2.31 2.33 2.40 T:tiaoxinv1 3.06 3.09 3.13 T:aeadaes128ocbtaglen128v1 3.46 3.46 3.48 T:aes128otrpv3 3.91 3.93 4.01 T:deoxysneq128128v1 3.93 3.95 4.01 T:aeadaes256ocbtaglen128v1 4.14 4.15 4.16 T:aes128otrsv3 4.25 4.34 4.41 T:morus640128v1 4.27 4.35 4.52 T:morus1280128v1 4.18? 4.36? 16.36? T:aeadaes192ocbtaglen128v1 4.36 4.40 4.47 T:morus1280256v1 4.44 4.47 4.50 T:colm0v1 4.47 4.53 4.59 T:morus640128v2 4.57 4.60 4.63 T:aes256otrpv3 4.60 4.67 4.75 T:morus1280128v2 4.63 4.73 4.89 T:deoxysneq256128v1 4.77 4.78 4.78 T:aes128n8t8clocv2 4.78 4.79 4.80 T:aes128n12t8clocv2 4.77 4.79 4.80 T:aes128n12t8clocv3 4.77 4.81 4.84 T:aes128otrcv3 4.82 4.85 4.90 T:deoxysi128v141 4.77 4.86 4.89 T:morus1280256v2 5.63 5.64 5.65 T:aes128n12t8silcv2 5.70 5.71 5.74 T:aes128n12t8silcv3 5.70 5.73 5.74 T:aes128n8t8silcv2 5.72 5.75 5.80 T:deoxysi256v141 5.93 5.98 6.06 T:aes128gcmv1 6.10 6.12 6.16 T:aes256otrcv3 6.17 6.20 6.25 T:aes256otrsv3 6.49 6.54 6.61 T:deoxyseq128128v1 7.69 7.73 7.78 T:deoxyseq256128v1 7.84 7.88 7.94 aes256gcmv1 8.21 8.28 8.36 T:norx6441v1 8.29 8.32 8.38 T:deoxysii128v141 8.27 8.34 8.52 T:norx6441v3 8.39 8.48 8.57 T:norx6441v2 9.25 9.28 9.30 T:aesjambuv1 9.84 9.90 10.00 T:deoxysii256v141 10.55 10.61 10.73 T:norx3241v3 10.57 10.63 10.73 T:norx3241v2 10.79 10.86 10.92 T:norx3241v1 11.38 11.42 11.63 T:ascon96v1 11.46 11.61 11.77 T:ascon128av11 11.61 11.70 11.92 ascon128av12 12.10 12.19 12.32 T:norx6461v1 12.13 12.25 12.41 T:norx6461v3 12.16 12.27 12.37 T:norx6461v2 14.66 14.74 14.89 T:ascon128v11 14.70 14.78 14.99 ascon128v12 14.68 14.80 14.99 T:norx6444v3 14.72 14.81 14.94 T:ascon128v1 15.10 15.17 15.49 T:lakekeyakv1 15.61 15.74 15.83 T:norx3261v3 15.65 15.75 15.88 T:norx3261v2 16.30 16.35 16.41 T:norx3261v1 17.57 17.64 17.82 T:riverkeyakv2 19.19? 19.35? 36.11? T:lakekeyakv2 20.68 20.72 20.87 T:twine80n6t4clocv3 21.66 21.72 21.83 T:aes128n8clocv1 21.70 21.79 21.99 T:aes128n12clocv1 22.15 22.23 22.32 T:aes128otrsv1 22.25 22.30 22.46 T:aes128otrsv2 22.18 22.33 22.53 T:aes128otrpv2 22.65 22.70 22.76 T:twine80n6t4clocv2 22.79 22.89 23.07 T:aes128otrpv1 28.68 28.78 28.98 T:aes256otrpv2 28.82 28.95 29.11 T:aes256otrsv1 28.91 29.02 29.21 T:aes256otrsv2 29.38 29.50 29.65 T:aes256otrpv1 31.42 31.53 31.82 T:seakeyakv2 31.57 31.78 35.01 T:acorn128v3 31.59 31.94 32.28 T:acorn128v2 34.38 34.73 35.22 T:ketjeminorv2 36.49 36.66 36.85 T:norx6444v2 39.85 39.90 40.10 T:aeadaes128ocbtaglen96v1 39.97 40.00 40.13 T:aeadaes128ocbtaglen64v1 42.57 42.73 43.05 T:norx6444v1 45.88 46.05 46.36 T:ketjesrv1 46.12 46.14 46.18 T:aeadaes192ocbtaglen96v1 46.07 46.17 46.25 T:aeadaes192ocbtaglen64v1 51.38 51.55 51.75 T:oceankeyakv2 53.42 53.61 53.91 T:ketjesrv2 53.62 53.65 53.74 T:aeadaes256ocbtaglen96v1 53.61 53.68 53.81 T:aeadaes256ocbtaglen64v1 58.96 59.07 59.49 T:colm127v1 71.61 71.80 72.06 T:ketjejrv1 84.94 84.99 85.17 T:proest256otrv1 88.73 88.97 89.29 T:present80n6t4silcv3 90.48 90.62 90.89 T:deoxysneq128128v13 103.02 103.27 103.60 T:proest128otrv1 119.94 120.23 120.71 T:aezv1 122.17 122.48 122.95 T:ketjejrv2 127.71 128.06 128.51 T:deoxysneq256128v13 128.75 129.05 129.34 T:lunarkeyakv2 149.59 149.81 150.00 T:deoxyseq128128v13 149.82 150.13 150.31 T:led80n6t4silcv3 210.86 211.13 211.59 T:deoxyseq256128v13 1001.86 1004.28 1008.90 T:ketjemajorv2 1266.87 1268.84 1269.76 T:acorn128 3389.46 3391.92 3393.93 T:led80n6silcv1 3401.35 3402.14 3402.88 T:led80n6t4silcv2 3669.15 3670.14 3671.46 T:present80n6t4silcv2 3671.62 3672.72 3673.79 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.74 1.74 1.77 T:aegis128l 1.78 1.80 1.81 T:aegis128 1.89 1.90 1.92 aegis128l 2.05 2.06 2.07 T:aegis256 2.24 2.26 2.30 T:aezv5 2.29 2.30 2.32 T:aezv3 2.31 2.32 2.35 T:tiaoxinv2 2.32 2.34 2.37 T:tiaoxinv1 2.32 2.35 2.39 T:aezv4 2.32 2.35 2.36 aegis256 3.38 3.38 3.42 T:aeadaes128ocbtaglen128v1 3.56 3.57 3.58 T:aes128otrpv3 4.22 4.24 4.29 T:aeadaes256ocbtaglen128v1 4.25 4.29 4.37 T:morus640128v1 4.38 4.39 4.41 T:aes128otrsv3 4.51 4.57 4.59 T:morus1280256v1 4.51 4.57 4.63 T:morus1280128v1 4.66? 4.70? 16.16? T:aeadaes192ocbtaglen128v1 4.79 4.81 4.85 T:aes256otrpv3 4.81 4.83 4.85 T:aes128n12t8clocv3 4.83 4.84 4.85 T:aes128n8t8clocv2 4.82 4.84 4.85 T:aes128n12t8clocv2 4.80 4.84 4.93 T:morus1280128v2 4.84 4.88 4.99 T:morus640128v2 4.87 4.96 5.03 T:morus1280256v2 4.95 4.98 5.09 T:aes128otrcv3 5.21 5.22 5.25 T:colm0v1 5.74 5.75 5.76 T:aes128n12t8silcv2 5.78 5.78 5.90 T:aes128n12t8silcv3 5.82 5.83 5.86 T:aes128n8t8silcv2 5.89 5.91 5.95 T:deoxysneq128128v1 5.87 5.94 6.08 T:deoxysneq256128v1 5.92 5.97 6.03 T:aes128gcmv1 6.40 6.43 6.48 T:deoxysi128v141 6.46 6.48 6.51 T:aes256otrcv3 6.85 6.90 6.95 T:aes256otrsv3 8.04 8.08 8.12 aes256gcmv1 8.07 8.18 8.34 T:deoxysi256v141 8.36 8.47 8.61 T:norx6441v1 8.43 8.51 8.60 T:norx6441v3 8.60 8.68 8.79 T:norx6441v2 9.12 9.15 9.21 T:deoxyseq128128v1 9.21 9.25 9.30 T:deoxysii128v141 9.25 9.31 9.42 T:deoxyseq256128v1 9.45 9.47 9.48 T:aesjambuv1 10.70 10.81 10.91 T:norx3241v3 10.83 10.90 11.00 T:norx3241v2 10.86 11.01 11.14 T:norx3241v1 11.25 11.31 11.39 T:deoxysii256v141 11.41 11.51 11.68 T:ascon96v1 11.43 11.62 11.80 T:ascon128av11 11.58 11.65 11.91 ascon128av12 12.29 12.39 12.55 T:norx6461v2 12.38 12.47 12.62 T:norx6461v1 12.31 12.49 12.59 T:norx6461v3 14.61 14.64 14.81 T:ascon128v11 14.61 14.67 14.88 T:ascon128v1 14.55 14.67 14.84 T:norx6444v3 14.80 14.87 15.06 ascon128v12 15.18 15.24 15.47 T:lakekeyakv1 15.68 15.84 16.07 T:norx3261v2 16.11 16.20 16.30 T:norx3261v3 16.33 16.38 16.42 T:norx3261v1 17.70 17.80 17.97 T:riverkeyakv2 19.25? 19.45? 37.44? T:lakekeyakv2 20.67 20.73 20.84 T:twine80n6t4clocv3 21.54 21.63 21.86 T:aes128n12clocv1 21.54 21.63 21.80 T:aes128n8clocv1 22.66 22.73 22.82 T:twine80n6t4clocv2 22.78 22.89 23.05 T:aes128otrsv1 22.82 22.90 23.05 T:aes128otrpv2 22.85 22.93 23.09 T:aes128otrsv2 23.17 23.22 23.32 T:aes128otrpv1 29.30 29.45 29.61 T:aes256otrpv2 29.48 29.56 29.66 T:aes256otrsv2 29.48 29.61 29.75 T:aes256otrsv1 29.71 29.80 29.90 T:aes256otrpv1 31.55 31.66 31.88 T:seakeyakv2 32.03? 32.19? 40.53? T:acorn128v3 32.13? 32.39? 46.27? T:acorn128v2 33.66 33.94 34.23 T:ketjeminorv2 36.35 36.44 36.65 T:norx6444v2 42.74 43.03 43.31 T:norx6444v1 46.42 46.53 46.90 T:ketjesrv1 47.85 47.96 48.19 T:aeadaes128ocbtaglen96v1 47.91 48.01 48.20 T:aeadaes128ocbtaglen64v1 51.47 51.61 51.93 T:oceankeyakv2 53.52 53.69 54.07 T:ketjesrv2 55.41 55.50 55.71 T:aeadaes192ocbtaglen96v1 55.42 55.55 55.73 T:aeadaes192ocbtaglen64v1 64.89 65.04 65.21 T:aeadaes256ocbtaglen64v1 65.05 65.36 65.54 T:aeadaes256ocbtaglen96v1 67.76 67.89 68.02 T:colm127v1 72.18 72.39 72.68 T:ketjejrv1 85.84 85.97 86.11 T:proest256otrv1 88.77 88.96 89.20 T:present80n6t4silcv3 104.08 104.28 104.68 T:proest128otrv1 104.34 104.45 104.67 T:deoxysneq128128v13 122.98 123.18 123.50 T:ketjejrv2 124.19 124.50 124.74 T:aezv1 128.70 129.06 129.61 T:lunarkeyakv2 147.06 147.50 148.22 T:deoxysneq256128v13 149.85 150.04 150.42 T:deoxyseq128128v13 149.86 150.15 150.41 T:led80n6t4silcv3 212.25 212.81 213.16 T:deoxyseq256128v13 996.98 999.24 1002.76 T:ketjemajorv2 1299.62 1300.35 1301.33 T:acorn128 3390.65 3392.42 3394.06 T:led80n6silcv1 3399.04 3400.29 3401.90 T:led80n6t4silcv2 3669.15 3670.02 3671.86 T:present80n6t4silcv2 3673.38 3674.40 3675.76 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.73 1.74 1.75 T:aegis128l 1.79 1.80 1.81 T:aegis128 1.94 1.94 1.95 aegis128l 1.93 1.95 1.96 T:aezv5 1.97 1.98 2.00 T:aezv3 2.02 2.04 2.06 T:aezv4 2.05 2.06 2.08 T:aegis256 2.31 2.31 2.36 T:tiaoxinv2 2.33 2.35 2.39 T:tiaoxinv1 2.34 2.35 2.36 aegis256 3.37 3.39 3.43 T:aeadaes128ocbtaglen128v1 3.56 3.57 3.59 T:aes128otrpv3 4.25 4.27 4.37 T:morus640128v1 4.24 4.27 4.30 T:aeadaes256ocbtaglen128v1 4.38 4.40 4.41 T:aes128otrsv3 4.50 4.54 4.60 T:morus1280256v1 4.51 4.57 4.66 T:morus1280128v1 4.67? 4.72? 14.97? T:aeadaes192ocbtaglen128v1 4.76 4.77 4.80 T:aes128n12t8clocv3 4.77 4.78 4.82 T:aes128n12t8clocv2 4.78 4.79 4.80 T:aes128n8t8clocv2 4.78 4.80 4.83 T:aes256otrpv3 4.80 4.83 4.90 T:morus1280128v2 4.83 4.85 4.89 T:morus640128v2 4.95 4.97 5.07 T:aes128otrcv3 4.94 5.01 5.05 T:morus1280256v2 5.24 5.29 5.36 T:colm0v1 5.64 5.65 5.67 T:aes128n12t8silcv2 5.70 5.71 5.72 T:aes128n12t8silcv3 5.74 5.75 5.77 T:aes128n8t8silcv2 5.77 5.79 5.81 T:deoxysneq128128v1 5.75 5.82 5.97 T:deoxysneq256128v1 5.92 5.95 5.99 T:aes128gcmv1 6.39 6.41 6.43 T:deoxysi128v141 6.46 6.47 6.49 T:aes256otrcv3 6.84 6.84 6.87 T:aes256otrsv3 8.10 8.13 8.17 aes256gcmv1 8.09 8.18 8.30 T:deoxysi256v141 8.36 8.48 8.57 T:norx6441v1 8.41 8.49 8.59 T:norx6441v3 8.60 8.69 8.75 T:norx6441v2 9.12 9.15 9.21 T:deoxyseq128128v1 9.22 9.25 9.29 T:deoxysii128v141 9.24 9.31 9.41 T:deoxyseq256128v1 9.45 9.46 9.48 T:aesjambuv1 10.72 10.82 10.89 T:norx3241v3 10.78 10.85 10.94 T:norx3241v2 10.89 10.93 11.06 T:norx3241v1 11.29 11.35 11.41 T:deoxysii256v141 11.41 11.48 11.62 T:ascon96v1 11.33 11.49 11.63 T:ascon128av11 11.56 11.65 11.78 ascon128av12 12.28 12.38 12.55 T:norx6461v2 12.33 12.41 12.53 T:norx6461v1 12.32 12.43 12.54 T:norx6461v3 14.57 14.63 14.76 T:ascon128v1 14.56 14.64 14.73 T:ascon128v11 14.65 14.76 14.91 T:norx6444v3 14.76 14.83 14.93 ascon128v12 15.29 15.36 15.46 T:lakekeyakv1 15.84 15.92 16.01 T:norx3261v2 16.07 16.14 16.24 T:norx3261v3 16.40 16.43 16.45 T:norx3261v1 17.68 17.75 17.83 T:riverkeyakv2 19.34? 19.54? 33.96? T:lakekeyakv2 20.66 20.74 20.83 T:twine80n6t4clocv3 21.49 21.58 21.67 T:aes128n8clocv1 21.50 21.58 21.77 T:aes128n12clocv1 22.60 22.63 22.68 T:twine80n6t4clocv2 22.89 22.97 23.16 T:aes128otrsv1 22.89 22.99 23.09 T:aes128otrpv2 22.93 23.01 23.24 T:aes128otrsv2 23.29 23.34 23.42 T:aes128otrpv1 29.43 29.54 29.66 T:aes256otrpv2 29.53 29.65 29.81 T:aes256otrsv1 29.59 29.66 29.85 T:aes256otrsv2 29.82 29.93 30.01 T:aes256otrpv1 31.62 31.73 31.96 T:seakeyakv2 32.01? 32.11? 40.46? T:acorn128v3 32.03? 32.22? 46.03? T:acorn128v2 33.63 33.92 34.15 T:ketjeminorv2 36.43 36.61 36.84 T:norx6444v2 42.77 43.14 43.33 T:norx6444v1 46.37 46.51 46.75 T:ketjesrv1 47.84 47.91 48.05 T:aeadaes128ocbtaglen96v1 47.95 48.03 48.11 T:aeadaes128ocbtaglen64v1 51.67 51.77 51.97 T:oceankeyakv2 53.59 53.75 53.99 T:ketjesrv2 55.41 55.49 55.60 T:aeadaes192ocbtaglen96v1 55.40 55.54 55.66 T:aeadaes192ocbtaglen64v1 64.91 65.03 65.15 T:aeadaes256ocbtaglen64v1 65.07 65.28 65.43 T:aeadaes256ocbtaglen96v1 67.43 67.55 67.66 T:colm127v1 73.21 73.45 73.79 T:ketjejrv1 84.19 84.26 84.36 T:proest256otrv1 88.75 88.87 89.06 T:present80n6t4silcv3 104.11 104.36 104.61 T:proest128otrv1 105.41 105.61 105.77 T:deoxysneq128128v13 124.08 124.23 124.55 T:aezv1 124.04 124.35 124.62 T:ketjejrv2 128.97 129.22 129.57 T:lunarkeyakv2 147.06 147.43 148.25 T:deoxysneq256128v13 149.70 150.10 150.35 T:led80n6t4silcv3 150.81 151.08 151.45 T:deoxyseq128128v13 212.67 213.05 213.47 T:deoxyseq256128v13 1162.00 1166.04 1175.03 T:ketjemajorv2 1299.39 1300.05 1301.02 T:acorn128 3389.79 3391.36 3392.78 T:led80n6silcv1 3398.91 3400.44 3401.62 T:led80n6t4silcv2 3669.23 3670.29 3671.81 T:present80n6t4silcv2 3672.86 3673.98 3675.24 T:present80n6silcv1