VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Redwood Cove (a06a4-40); 2023 Intel Core Ultra 5 125H, P cores; 4 x 1200MHz; meteor,big, supercop-20251222

[Page version: 20260214 18:06:52]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.19 0.20 0.21 T:tiaoxinv2 0.19 0.20 0.21 T:tiaoxinv1 0.23 0.24 0.25 aegis128l 0.23 0.24 0.25 T:aegis128l 0.16? 0.26? 0.30? T:aeadaes128ocbtaglen128v1 0.20? 0.31? 0.35? T:aeadaes256ocbtaglen128v1 0.35 0.36 0.36 T:aezv4 0.35 0.36 0.37 T:aezv3 0.39 0.39 0.40 aegis256 0.39 0.40 0.40 T:aegis256 0.39 0.40 0.42 T:aezv5 0.40 0.41 0.41 T:aegis128 0.02? 0.42? 0.45? T:aeadaes192ocbtaglen128v1 0.40? 0.43? 0.45? T:aes128otrsv3 0.39? 0.43? 0.47? T:aes128otrcv3 0.42? 0.45? 0.49? T:aes128otrpv3 0.55? 0.59? 0.62? T:aes256otrsv3 0.57 0.59 0.61 T:aes256otrcv3 0.55? 0.60? 0.63? T:aes256otrpv3 0.67 0.67 0.69 T:deoxysi128v141 0.67 0.68 0.69 T:morus1280256v2 0.68 0.69 0.70 T:morus1280128v2 0.68 0.69 0.70 T:deoxysneq128128v1 0.68 0.69 0.70 T:morus1280256v1 0.68 0.69 0.70 T:morus1280128v1 0.74 0.75 0.77 T:deoxysi256v141 0.77 0.78 0.79 T:deoxysneq256128v1 0.92 0.95 0.97 T:aes128gcmv1 1.03 1.05 1.10 aes256gcmv1 1.05 1.08 1.09 T:norx6444v3 1.17 1.18 1.20 T:morus640128v1 1.17 1.19 1.20 T:morus640128v2 1.31 1.33 1.34 T:deoxysii128v141 1.37 1.38 1.40 T:colm0v1 1.41 1.43 1.44 T:deoxyseq128128v1 1.49 1.50 1.51 T:deoxysii256v141 1.63 1.65 1.67 T:deoxyseq256128v1 1.81 1.89 1.96 T:lunarkeyakv2 2.02 2.04 2.06 T:norx6441v2 2.06 2.08 2.09 T:norx6441v3 2.18 2.19 2.20 T:aes128n8t8clocv2 2.18 2.19 2.19 T:aes128n12t8clocv2 2.18 2.19 2.20 T:aes128n12t8silcv3 2.19 2.19 2.20 T:aes128n12t8clocv3 2.18 2.19 2.20 T:aes128n12t8silcv2 2.19 2.21 2.22 T:aes128n8t8silcv2 2.43 2.45 2.47 T:norx6441v1 2.58 2.64 2.68 T:seakeyakv2 2.62 2.69 2.75 T:oceankeyakv2 2.74 2.77 2.80 T:norx6444v2 2.92 3.00 3.09 T:lakekeyakv1 3.07 3.09 3.11 T:norx6461v3 3.10 3.11 3.12 T:norx6461v2 3.17 3.23 3.32 T:lakekeyakv2 3.29 3.32 3.36 T:norx6444v1 3.60 3.61 3.63 T:norx3241v3 3.63 3.66 3.67 T:norx3241v2 3.70 3.72 3.74 T:norx6461v1 4.12 4.20 4.49 T:acorn128v2 4.17 4.26 4.45 T:acorn128v3 4.37 4.38 4.40 T:norx3241v1 4.38 4.39 4.41 T:aesjambuv1 5.49 5.52 5.53 T:norx3261v3 5.54 5.57 5.60 T:norx3261v2 5.01? 5.75? 6.02? T:ketjemajorv2 6.35 6.43 6.50 T:ketjeminorv2 6.69 6.72 6.75 ascon128av12 6.71 6.74 6.76 T:ascon128av11 6.73 6.74 6.78 T:ascon96v1 7.35 7.44 7.57 T:riverkeyakv2 7.49 7.51 7.52 T:norx3261v1 9.93 9.95 9.99 T:ascon128v1 9.94 9.97 9.99 T:ascon128v11 10.03 10.08 10.11 ascon128v12 11.14 11.16 11.21 T:aes128otrpv2 11.13 11.17 11.19 T:aes128otrsv1 11.15 11.17 11.21 T:aes128otrsv2 11.16 11.20 11.21 T:aes128otrpv1 14.88 14.91 14.95 T:aes256otrpv2 14.86 14.91 14.95 T:aes256otrpv1 14.87 14.92 14.96 T:aes256otrsv1 14.92 14.95 15.00 T:aes256otrsv2 15.24 15.27 15.31 T:twine80n6t4clocv3 16.17 16.20 16.22 T:twine80n6t4clocv2 18.34 18.48 18.64 T:proest256otrv1 20.93 20.98 21.03 T:aeadaes128ocbtaglen96v1 21.01 21.04 21.12 T:aes128n8clocv1 20.97 21.05 21.10 T:aeadaes128ocbtaglen64v1 21.08 21.15 21.18 T:aes128n12clocv1 21.49 21.74 21.88 T:ketjesrv1 24.99 25.02 25.05 T:aeadaes192ocbtaglen96v1 25.00 25.05 25.11 T:aeadaes192ocbtaglen64v1 25.22 25.34 25.44 T:ketjesrv2 28.85 29.00 30.26 T:aeadaes256ocbtaglen64v1 28.91 29.29 30.16 T:aeadaes256ocbtaglen96v1 45.81 46.03 46.19 T:ketjejrv1 46.33 46.38 46.46 T:proest128otrv1 46.66 46.83 46.88 T:colm127v1 62.11 62.53 63.07 T:deoxysneq128128v13 67.32 67.51 68.82 T:ketjejrv2 72.11 72.17 72.20 T:present80n6t4silcv3 83.45 83.50 83.55 T:deoxysneq256128v13 123.26 123.85 124.16 T:deoxyseq128128v13 126.79 126.91 127.01 T:led80n6t4silcv3 129.04 129.59 130.11 T:aezv1 166.93 167.08 167.26 T:deoxyseq256128v13 407.37 413.52 414.18 T:acorn128 2582.33 2583.72 2585.34 T:led80n6t4silcv2 2583.90 2584.82 2585.15 T:led80n6silcv1 3135.02 3138.80 3151.54 T:present80n6t4silcv2 3146.89 3167.01 3221.41 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.23 0.24 0.24 aegis128l 0.23 0.24 0.25 T:aegis128l 0.14? 0.25? 0.29? T:aeadaes128ocbtaglen128v1 0.19? 0.29? 0.34? T:aeadaes256ocbtaglen128v1 0.34? 0.35? 0.38? T:aezv4 0.35? 0.36? 0.39? T:aezv3 0.38 0.39 0.39 T:aegis256 0.39 0.40 0.40 aegis256 0.39 0.40 0.41 T:aezv5 0.40 0.41 0.41 T:aegis128 0.37? 0.41? 0.43? T:aeadaes192ocbtaglen128v1 0.43 0.44 0.45 T:tiaoxinv2 0.44 0.45 0.46 T:tiaoxinv1 0.48 0.50 0.52 T:aes128otrpv3 0.48 0.50 0.52 T:aes128otrcv3 0.48 0.50 0.52 T:aes128otrsv3 0.62 0.64 0.66 T:aes256otrcv3 0.62 0.65 0.67 T:aes256otrpv3 0.62 0.65 0.68 T:aes256otrsv3 0.67 0.68 0.69 T:morus1280128v1 0.68 0.68 0.70 T:morus1280128v2 0.67 0.68 0.69 T:morus1280256v1 0.68 0.69 0.70 T:morus1280256v2 0.68 0.70 0.71 T:aes128gcmv1 0.77 0.79 0.80 T:deoxysi128v141 0.79 0.81 0.83 aes256gcmv1 0.80 0.81 0.82 T:deoxysneq128128v1 0.86 0.87 0.88 T:deoxysi256v141 0.88 0.90 0.91 T:deoxysneq256128v1 1.05 1.06 1.08 T:norx6444v3 1.15 1.16 1.17 T:morus640128v2 1.15 1.16 1.17 T:morus640128v1 1.32 1.34 1.35 T:deoxysii128v141 1.39 1.49 1.51 T:colm0v1 1.48 1.50 1.51 T:deoxysii256v141 1.67 1.70 1.71 T:deoxyseq128128v1 1.76 1.77 1.78 T:deoxyseq256128v1 1.88 1.95 2.06 T:lunarkeyakv2 1.95 1.97 1.98 T:norx6441v2 1.98 1.99 2.01 T:norx6441v3 1.99 2.00 2.12 T:aes128n12t8silcv2 1.99 2.00 2.12 T:aes128n12t8silcv3 2.10 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.14 T:aes128n8t8clocv2 2.11 2.13 2.14 T:aes128n12t8clocv2 2.11 2.13 2.14 T:aes128n12t8clocv3 2.40 2.43 2.46 T:norx6441v1 2.63 2.68 2.73 T:seakeyakv2 2.64 2.72 2.81 T:oceankeyakv2 2.76 2.82 2.85 T:norx6444v2 2.89 3.00 3.13 T:lakekeyakv1 3.03 3.06 3.09 T:norx6461v2 3.05 3.06 3.08 T:norx6461v3 3.15 3.23 3.32 T:lakekeyakv2 3.31 3.36 3.40 T:norx6444v1 3.54 3.55 3.57 T:norx3241v3 3.54 3.57 3.60 T:norx3241v2 3.71 3.74 3.75 T:norx6461v1 4.24 4.29 4.30 T:norx3241v1 4.15 4.31 4.45 T:acorn128v2 4.20? 4.35? 5.30? T:acorn128v3 4.67 4.68 4.69 T:aesjambuv1 4.59? 5.21? 5.48? T:ketjemajorv2 5.46 5.49 5.53 T:norx3261v3 5.47 5.52 5.56 T:norx3261v2 6.63 6.66 6.68 T:ascon128av11 6.64 6.67 6.70 T:ascon96v1 6.67 6.71 6.74 ascon128av12 6.97 7.08 7.18 T:ketjeminorv2 7.35 7.37 7.39 T:norx3261v1 7.51 7.59 7.66 T:riverkeyakv2 9.88 9.92 9.95 T:ascon128v11 9.89 9.93 9.95 T:ascon128v1 9.90 9.99 10.08 ascon128v12 11.50 11.53 11.66 T:aes128otrsv1 11.51 11.53 11.60 T:aes128otrpv1 11.46 11.54 11.59 T:aes128otrpv2 11.48 11.56 11.63 T:aes128otrsv2 15.23 15.27 15.33 T:aes256otrsv2 15.24 15.28 15.31 T:aes256otrsv1 15.23 15.29 15.34 T:aes256otrpv2 15.25 15.30 15.35 T:aes256otrpv1 15.23 15.31 15.35 T:twine80n6t4clocv3 16.12 16.17 16.23 T:twine80n6t4clocv2 18.23 18.34 18.78 T:proest256otrv1 18.83 18.94 19.04 T:aes128n12clocv1 19.13 19.21 19.27 T:aes128n8clocv1 22.46 22.58 22.83 T:ketjesrv2 24.75 25.19 25.26 T:ketjesrv1 34.67 34.75 34.87 T:aeadaes128ocbtaglen96v1 34.70 34.80 34.87 T:aeadaes128ocbtaglen64v1 42.06 42.20 42.27 T:aeadaes192ocbtaglen96v1 42.11 42.20 42.37 T:aeadaes192ocbtaglen64v1 45.97 46.45 46.74 T:ketjejrv1 46.79 46.88 46.95 T:proest128otrv1 49.44 49.49 49.58 T:aeadaes256ocbtaglen96v1 49.47 49.54 49.70 T:aeadaes256ocbtaglen64v1 69.30 69.62 71.18 T:ketjejrv2 71.97 72.05 72.11 T:present80n6t4silcv3 72.95 73.06 73.25 T:colm127v1 80.33 80.54 80.81 T:deoxysneq128128v13 113.84 113.91 114.29 T:deoxysneq256128v13 124.62 125.34 126.27 T:deoxyseq128128v13 126.70 126.85 127.21 T:led80n6t4silcv3 128.54 128.93 129.05 T:aezv1 166.75 166.90 166.98 T:deoxyseq256128v13 441.68 442.35 454.77 T:acorn128 2580.85 2582.43 2583.14 T:led80n6t4silcv2 2581.67 2582.66 2583.72 T:led80n6silcv1 3134.94 3143.54 3148.00 T:present80n6silcv1 3163.68 3213.29 3217.66 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13 0.14 0.14 T:aezv4 0.07? 0.19? 0.20? T:aezv3 0.15? 0.21? 0.22? T:aezv5 0.23 0.24 0.24 T:aegis128l 0.24 0.24 0.26 aegis128l 0.22? 0.24? 0.28? T:aeadaes128ocbtaglen128v1 -0.15? 0.28? 0.69? T:aeadaes256ocbtaglen128v1 0.39 0.39 0.39 T:aegis256 0.40 0.41 0.41 T:aegis128 0.41 0.41 0.42 aegis256 0.40? 0.43? 0.82? T:aeadaes192ocbtaglen128v1 0.43 0.44 0.45 T:tiaoxinv2 0.44 0.45 0.45 T:tiaoxinv1 0.49 0.50 0.52 T:aes128otrsv3 0.50 0.52 0.53 T:aes128otrcv3 0.50 0.52 0.53 T:aes128otrpv3 0.61 0.62 0.64 T:aes256otrpv3 0.62 0.63 0.64 T:aes256otrcv3 0.64 0.65 0.68 T:aes256otrsv3 0.68 0.68 0.69 T:morus1280128v1 0.67 0.68 0.69 T:morus1280128v2 0.68 0.68 0.69 T:morus1280256v2 0.67 0.68 0.69 T:morus1280256v1 0.68 0.70 0.71 T:aes128gcmv1 0.77 0.78 0.80 T:deoxysi128v141 0.80 0.81 0.82 T:deoxysneq128128v1 0.80 0.81 0.83 aes256gcmv1 0.86 0.88 0.90 T:deoxysi256v141 0.89 0.91 0.96 T:deoxysneq256128v1 1.03 1.06 1.07 T:norx6444v3 1.14 1.16 1.17 T:morus640128v2 1.14 1.16 1.17 T:morus640128v1 1.32 1.34 1.35 T:deoxysii128v141 1.29? 1.47? 1.49? T:colm0v1 1.49 1.50 1.52 T:deoxysii256v141 1.68 1.70 1.72 T:deoxyseq128128v1 1.76 1.77 1.79 T:deoxyseq256128v1 1.86 1.93 2.05 T:lunarkeyakv2 1.95 1.97 1.99 T:norx6441v2 1.98 1.99 2.10 T:aes128n12t8silcv2 1.98 1.99 2.11 T:aes128n12t8silcv3 1.98 2.00 2.01 T:norx6441v3 2.04 2.04 2.13 T:aes128n12t8clocv2 2.04 2.12 2.13 T:aes128n12t8clocv3 2.11 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.13 T:aes128n8t8clocv2 2.42 2.46 2.47 T:norx6441v1 2.62 2.69 2.73 T:seakeyakv2 2.68 2.75 2.78 T:oceankeyakv2 2.77 2.83 2.85 T:norx6444v2 2.96 3.04 3.11 T:lakekeyakv1 3.04 3.05 3.08 T:norx6461v2 3.04 3.06 3.08 T:norx6461v3 3.18 3.25 3.31 T:lakekeyakv2 3.33 3.37 3.40 T:norx6444v1 3.53 3.56 3.57 T:norx3241v3 3.55 3.57 3.60 T:norx3241v2 3.72 3.74 3.77 T:norx6461v1 4.19? 4.25? 5.22? T:acorn128v3 4.25 4.28 4.32 T:norx3241v1 4.29 4.39 4.56 T:acorn128v2 4.67 4.68 4.69 T:aesjambuv1 4.53? 4.92? 5.33? T:ketjemajorv2 5.47 5.49 5.51 T:norx3261v3 5.48 5.50 5.52 T:norx3261v2 6.62 6.66 6.68 T:ascon128av11 6.63 6.67 6.70 T:ascon96v1 6.68 6.70 6.73 ascon128av12 7.02 7.10 7.21 T:ketjeminorv2 7.36 7.37 7.39 T:norx3261v1 7.43 7.55 7.62 T:riverkeyakv2 9.89 9.93 9.97 T:ascon128v1 9.89 9.93 9.99 T:ascon128v11 9.91 9.97 10.04 ascon128v12 11.45 11.56 11.61 T:aes128otrpv1 11.52 11.57 11.64 T:aes128otrsv1 11.48 11.57 11.61 T:aes128otrsv2 11.53 11.59 11.66 T:aes128otrpv2 15.17 15.23 15.34 T:aes256otrsv2 15.19 15.27 15.33 T:twine80n6t4clocv3 15.22 15.29 15.35 T:aes256otrpv1 15.21 15.30 15.34 T:aes256otrpv2 15.22 15.31 15.34 T:aes256otrsv1 16.11 16.18 16.22 T:twine80n6t4clocv2 18.29 18.45 18.64 T:proest256otrv1 18.76 18.86 19.21 T:aes128n12clocv1 19.17 19.24 19.40 T:aes128n8clocv1 22.55 22.74 22.90 T:ketjesrv2 24.75 25.18 25.26 T:ketjesrv1 34.73 34.81 34.86 T:aeadaes128ocbtaglen64v1 34.78 34.83 34.95 T:aeadaes128ocbtaglen96v1 42.10 42.14 42.21 T:aeadaes192ocbtaglen96v1 42.18 42.27 42.48 T:aeadaes192ocbtaglen64v1 46.53 46.68 46.92 T:ketjejrv1 46.80 46.85 46.90 T:proest128otrv1 49.40 49.48 49.56 T:aeadaes256ocbtaglen96v1 49.47 49.55 49.65 T:aeadaes256ocbtaglen64v1 69.53 69.71 71.14 T:ketjejrv2 71.96 72.02 72.05 T:present80n6t4silcv3 71.99 72.14 72.26 T:colm127v1 80.71 81.07 81.90 T:deoxysneq128128v13 113.79 113.96 114.18 T:deoxysneq256128v13 123.56 124.47 125.13 T:deoxyseq128128v13 126.69 126.83 126.93 T:led80n6t4silcv3 128.42 128.55 129.09 T:aezv1 166.85 166.93 167.14 T:deoxyseq256128v13 440.91 442.80 454.30 T:acorn128 2581.33 2582.55 2583.82 T:led80n6t4silcv2 2581.75 2582.82 2583.51 T:led80n6silcv1 3136.35 3143.89 3149.36 T:present80n6silcv1 3135.51 3149.32 3173.35 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.14? 0.16? 0.18? T:tiaoxinv1 0.15? 0.17? 0.18? T:tiaoxinv2 0.15? 0.21? 0.26? T:aeadaes128ocbtaglen128v1 0.21 0.21 0.22 T:aegis128l 0.21 0.21 0.22 aegis128l 0.07? 0.26? 0.46? T:aeadaes256ocbtaglen128v1 0.24? 0.26? 0.28? T:aezv3 0.25? 0.26? 0.28? T:aezv4 0.26? 0.27? 0.29? T:aezv5 0.31? 0.38? 0.46? T:aeadaes192ocbtaglen128v1 0.38 0.39 0.39 aegis256 0.38 0.39 0.40 T:aegis256 0.39 0.39 0.40 T:aegis128 0.46 0.47 0.48 T:aes128otrpv3 0.47 0.48 0.49 T:aes128otrcv3 0.57 0.58 0.60 T:aes256otrpv3 0.60 0.62 0.63 T:aes256otrcv3 0.61 0.63 0.64 T:aes128gcmv1 0.66 0.66 0.67 T:morus1280256v1 0.66 0.66 0.67 T:morus1280256v2 0.66 0.67 0.67 T:morus1280128v2 0.66 0.67 0.67 T:morus1280128v1 0.66 0.67 0.69 T:deoxysi128v141 0.67 0.69 0.70 aes256gcmv1 0.68 0.69 0.70 T:deoxysneq128128v1 0.74 0.76 0.78 T:deoxysi256v141 0.75 0.77 0.79 T:deoxysneq256128v1 0.97 0.98 1.00 T:colm0v1 1.00 1.00 1.01 T:deoxysii128v141 1.06 1.07 1.08 T:deoxyseq128128v1 1.12 1.13 1.14 T:deoxysii256v141 1.14 1.15 1.16 T:morus640128v1 1.14 1.15 1.16 T:morus640128v2 1.23 1.24 1.25 T:deoxyseq256128v1 1.28 1.29 1.29 T:aes128otrsv3 1.56 1.57 1.60 T:norx6444v3 1.71 1.73 1.75 T:aes256otrsv3 2.04 2.05 2.07 T:norx6441v3 2.04 2.05 2.06 T:norx6441v2 2.16 2.16 2.17 T:aes128n12t8silcv3 2.16 2.16 2.17 T:aes128n12t8silcv2 2.16 2.17 2.17 T:aes128n8t8clocv2 2.16 2.17 2.17 T:aes128n8t8silcv2 2.17 2.17 2.17 T:aes128n12t8clocv3 2.17 2.17 2.18 T:aes128n12t8clocv2 2.17 2.22 2.27 T:oceankeyakv2 2.20 2.24 2.26 T:seakeyakv2 2.45 2.47 2.48 T:norx6441v1 2.62 2.65 2.69 T:lunarkeyakv2 2.65 2.67 2.71 T:norx6444v2 2.82 2.85 2.90 T:lakekeyakv1 2.82 2.85 2.89 T:lakekeyakv2 3.09 3.10 3.12 T:norx6461v3 3.10 3.12 3.14 T:norx6461v2 3.18 3.20 3.24 T:norx6444v1 3.63 3.64 3.65 T:norx3241v3 3.66 3.67 3.68 T:norx3241v2 3.69 3.70 3.72 T:norx6461v1 4.34 4.35 4.35 T:aesjambuv1 4.38 4.40 4.41 T:norx3241v1 4.29? 4.56? 4.82? T:acorn128v2 4.27? 4.62? 4.91? T:acorn128v3 4.49 4.65 4.78 T:ketjemajorv2 5.28 5.32 5.37 T:riverkeyakv2 5.51 5.53 5.55 T:norx3261v2 5.52 5.54 5.56 T:norx3261v3 5.98 6.12 6.23 T:ketjeminorv2 6.56 6.58 6.60 T:ascon128av11 6.57 6.58 6.61 T:ascon96v1 6.68 6.71 6.73 ascon128av12 7.51 7.52 7.54 T:norx3261v1 9.78 9.80 9.82 T:ascon128v11 9.78 9.80 9.82 T:ascon128v1 9.99 10.01 10.03 ascon128v12 10.83 10.86 10.89 T:aes128otrpv2 10.85 10.88 10.90 T:aes128otrpv1 11.21 11.23 11.25 T:aes128otrsv1 11.19 11.23 11.26 T:aes128otrsv2 14.60 14.62 14.65 T:aes256otrpv2 14.60 14.62 14.63 T:aes256otrpv1 14.96 14.98 15.00 T:aes256otrsv1 15.00 15.01 15.03 T:aes256otrsv2 15.04 15.06 15.08 T:twine80n6t4clocv3 15.82 15.84 15.86 T:twine80n6t4clocv2 16.21 16.25 16.27 T:aes128n8clocv1 16.24 16.27 16.31 T:aes128n12clocv1 18.24 18.39 18.63 T:proest256otrv1 20.70 20.72 20.75 T:aeadaes128ocbtaglen64v1 20.70 20.73 20.77 T:aeadaes128ocbtaglen96v1 20.79 21.26 21.33 T:ketjesrv1 23.00 23.06 23.22 T:ketjesrv2 24.70 24.73 24.75 T:aeadaes192ocbtaglen64v1 24.69 24.73 24.75 T:aeadaes192ocbtaglen96v1 28.63 28.76 29.47 T:aeadaes256ocbtaglen96v1 29.37 29.82 29.98 T:aeadaes256ocbtaglen64v1 34.67 34.75 34.84 T:colm127v1 42.94 43.09 43.53 T:ketjejrv1 46.76 46.80 46.84 T:proest128otrv1 61.22 61.62 67.22 T:deoxysneq128128v13 64.95 65.07 66.64 T:ketjejrv2 71.60 71.66 71.71 T:present80n6t4silcv3 83.82 83.85 83.89 T:deoxysneq256128v13 84.70 84.82 85.20 T:aezv1 91.07 93.22 97.05 T:deoxyseq128128v13 125.02 125.14 125.19 T:deoxyseq256128v13 126.49 126.64 126.72 T:led80n6t4silcv3 409.48 412.39 412.84 T:acorn128 1936.85 1937.18 1941.08 T:led80n6t4silcv2 1937.70 1938.20 1942.10 T:led80n6silcv1 2351.23 2358.47 2380.02 T:present80n6silcv1 2350.65 2367.44 2414.91 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.21 0.21 0.22 T:aegis128l 0.15? 0.21? 0.24? T:aeadaes128ocbtaglen128v1 0.20? 0.21? 0.24? aegis128l 0.06? 0.27? 0.46? T:aeadaes256ocbtaglen128v1 0.25? 0.27? 0.28? T:aezv4 0.26 0.27 0.28 T:aezv3 0.26 0.28 0.28 T:tiaoxinv1 0.26? 0.28? 0.30? T:tiaoxinv2 0.24? 0.28? 0.29? T:aezv5 0.38 0.38 0.39 T:aegis256 0.39 0.39 0.39 T:aegis128 0.39 0.39 0.39 aegis256 0.19? 0.40? 0.60? T:aeadaes192ocbtaglen128v1 0.48 0.50 0.52 T:aes128gcmv1 0.49 0.50 0.51 T:aes128otrpv3 0.48 0.50 0.51 T:aes128otrcv3 0.55 0.57 0.58 aes256gcmv1 0.60 0.62 0.63 T:aes256otrpv3 0.62 0.64 0.65 T:aes256otrcv3 0.66 0.66 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280128v2 0.66 0.67 0.67 T:morus1280256v2 0.66 0.67 0.67 T:morus1280128v1 0.72 0.73 0.74 T:deoxysi128v141 0.74 0.75 0.75 T:deoxysneq128128v1 0.81 0.82 0.83 T:deoxysi256v141 0.81 0.82 0.85 T:deoxysneq256128v1 0.97 1.00 1.04 T:colm0v1 1.00 1.01 1.03 T:deoxysii128v141 1.12 1.13 1.15 T:morus640128v2 1.13 1.13 1.14 T:morus640128v1 1.12 1.13 1.14 T:deoxysii256v141 1.19 1.20 1.21 T:deoxyseq128128v1 1.28 1.29 1.30 T:deoxyseq256128v1 1.29 1.30 1.31 T:aes128otrsv3 1.56 1.57 1.58 T:norx6444v3 1.74 1.76 1.77 T:aes256otrsv3 2.03 2.04 2.05 T:norx6441v2 2.05 2.05 2.06 T:norx6441v3 2.06 2.06 2.14 T:aes128n12t8silcv3 2.06 2.06 2.19 T:aes128n12t8silcv2 2.12 2.13 2.14 T:aes128n12t8clocv2 2.12 2.13 2.13 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n8t8silcv2 2.12 2.14 2.19 T:aes128n8t8clocv2 2.20 2.24 2.32 T:oceankeyakv2 2.23 2.26 2.29 T:seakeyakv2 2.43 2.44 2.45 T:norx6441v1 2.64 2.67 2.72 T:norx6444v2 2.64 2.70 2.77 T:lunarkeyakv2 2.79 2.84 2.91 T:lakekeyakv2 2.79 2.87 2.95 T:lakekeyakv1 3.05 3.06 3.07 T:norx6461v3 3.08 3.09 3.10 T:norx6461v2 3.18 3.23 3.26 T:norx6444v1 3.60 3.60 3.62 T:norx3241v3 3.61 3.62 3.62 T:norx3241v2 3.66 3.67 3.69 T:norx6461v1 4.34 4.36 4.36 T:norx3241v1 4.29 4.39 4.62 T:ketjemajorv2 4.20 4.41 4.57 T:acorn128v2 4.49 4.49 4.50 T:aesjambuv1 4.70 4.77 4.93 T:acorn128v3 5.35 5.40 5.45 T:riverkeyakv2 5.48 5.49 5.52 T:norx3261v2 5.51 5.52 5.55 T:norx3261v3 6.33 6.43 6.53 T:ketjeminorv2 6.50 6.52 6.56 T:ascon96v1 6.51 6.53 6.54 T:ascon128av11 6.66 6.67 6.70 ascon128av12 7.43 7.44 7.45 T:norx3261v1 9.70 9.72 9.75 T:ascon128v11 9.73 9.74 9.77 T:ascon128v1 9.96 9.99 10.04 ascon128v12 11.02 11.03 11.09 T:aes128otrpv1 11.01 11.04 11.08 T:aes128otrpv2 11.39 11.42 11.44 T:aes128otrsv1 11.38 11.43 11.47 T:aes128otrsv2 14.74 14.77 14.82 T:aes256otrpv2 14.76 14.79 14.83 T:aes256otrpv1 15.01 15.07 15.10 T:twine80n6t4clocv3 15.10 15.13 15.23 T:aes128n12clocv1 15.13 15.16 15.18 T:aes256otrsv1 15.14 15.17 15.20 T:aes256otrsv2 15.32 15.35 15.39 T:aes128n8clocv1 15.78 15.84 15.87 T:twine80n6t4clocv2 18.45 18.51 18.68 T:proest256otrv1 21.61 21.67 21.77 T:ketjesrv2 22.68 22.88 22.97 T:ketjesrv1 27.56 27.62 27.67 T:aeadaes128ocbtaglen64v1 27.57 27.62 27.66 T:aeadaes128ocbtaglen96v1 33.24 33.29 33.34 T:aeadaes192ocbtaglen96v1 33.27 33.33 33.38 T:aeadaes192ocbtaglen64v1 38.93 39.33 39.56 T:aeadaes256ocbtaglen96v1 39.45 39.52 39.61 T:aeadaes256ocbtaglen64v1 43.33 43.49 43.80 T:ketjejrv1 46.99 47.05 47.12 T:proest128otrv1 47.93 47.99 48.08 T:colm127v1 66.20 66.34 67.73 T:ketjejrv2 70.90 71.04 71.31 T:deoxysneq128128v13 71.53 71.59 71.78 T:present80n6t4silcv3 84.66 84.74 84.93 T:aezv1 91.83 92.84 93.01 T:deoxyseq128128v13 99.08 99.16 99.30 T:deoxysneq256128v13 125.00 125.12 125.23 T:deoxyseq256128v13 126.46 126.60 126.86 T:led80n6t4silcv3 426.83 427.82 432.07 T:acorn128 1935.37 1936.01 1936.65 T:led80n6t4silcv2 1936.32 1936.62 1937.27 T:led80n6silcv1 2352.54 2362.97 2384.42 T:present80n6silcv1 2353.70 2363.46 2371.77 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.12? 0.13? 0.19? T:aezv5 0.14 0.15 0.15 T:aezv4 0.12? 0.15? 0.19? T:aezv3 0.21 0.21 0.21 T:aegis128l 0.20? 0.21? 0.23? T:aeadaes128ocbtaglen128v1 0.21 0.21 0.22 aegis128l 0.24? 0.26? 0.28? T:aeadaes256ocbtaglen128v1 0.27 0.28 0.30 T:tiaoxinv1 0.27 0.28 0.28 T:tiaoxinv2 0.38 0.38 0.39 T:aegis256 0.39 0.39 0.39 T:aegis128 0.39 0.39 0.41 T:aeadaes192ocbtaglen128v1 0.39 0.40 0.40 aegis256 0.48 0.49 0.50 T:aes128otrcv3 0.48 0.49 0.51 T:aes128gcmv1 0.49 0.49 0.50 T:aes128otrpv3 0.56 0.57 0.58 aes256gcmv1 0.60 0.61 0.62 T:aes256otrpv3 0.63 0.64 0.64 T:aes256otrcv3 0.66 0.66 0.67 T:morus1280128v1 0.66 0.67 0.67 T:morus1280256v2 0.66 0.67 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280128v2 0.73 0.73 0.74 T:deoxysi128v141 0.75 0.75 0.76 T:deoxysneq128128v1 0.81 0.82 0.83 T:deoxysi256v141 0.80 0.84 0.85 T:deoxysneq256128v1 0.93? 0.98? 1.04? T:colm0v1 1.00 1.01 1.01 T:deoxysii128v141 1.12 1.13 1.13 T:morus640128v1 1.12 1.13 1.14 T:morus640128v2 1.13 1.13 1.14 T:deoxysii256v141 1.18 1.21 1.23 T:deoxyseq128128v1 1.28 1.30 1.33 T:deoxyseq256128v1 1.30 1.30 1.30 T:aes128otrsv3 1.56 1.57 1.58 T:norx6444v3 1.76 1.76 1.77 T:aes256otrsv3 2.04 2.05 2.05 T:norx6441v2 2.04 2.05 2.06 T:norx6441v3 2.06 2.06 2.19 T:aes128n12t8silcv3 2.06 2.06 2.19 T:aes128n12t8silcv2 2.07 2.12 2.19 T:aes128n12t8clocv3 2.12 2.13 2.14 T:aes128n8t8silcv2 2.06 2.14 2.19 T:aes128n8t8clocv2 2.07 2.19 2.19 T:aes128n12t8clocv2 2.22 2.25 2.29 T:seakeyakv2 2.22 2.27 2.33 T:oceankeyakv2 2.42 2.44 2.46 T:norx6441v1 2.67 2.71 2.73 T:norx6444v2 2.67 2.72 2.76 T:lunarkeyakv2 2.81 2.84 2.88 T:lakekeyakv2 2.82 2.87 2.95 T:lakekeyakv1 3.06 3.07 3.08 T:norx6461v3 3.08 3.09 3.10 T:norx6461v2 3.19 3.23 3.26 T:norx6444v1 3.60 3.61 3.63 T:norx3241v3 3.61 3.62 3.63 T:norx3241v2 3.65 3.66 3.67 T:norx6461v1 4.22 4.34 4.52 T:acorn128v3 4.34 4.35 4.36 T:norx3241v1 4.49 4.49 4.50 T:aesjambuv1 4.30 4.61 4.72 T:ketjemajorv2 4.55 4.73 4.84 T:acorn128v2 5.35 5.41 5.46 T:riverkeyakv2 5.48 5.50 5.52 T:norx3261v2 5.51 5.55 5.57 T:norx3261v3 6.37 6.42 6.49 T:ketjeminorv2 6.48 6.51 6.54 T:ascon96v1 6.51 6.53 6.54 T:ascon128av11 6.66 6.68 6.69 ascon128av12 7.43 7.44 7.45 T:norx3261v1 9.72 9.74 9.77 T:ascon128v11 9.71 9.75 9.78 T:ascon128v1 9.95 10.00 10.04 ascon128v12 11.02 11.06 11.09 T:aes128otrpv1 11.00 11.07 11.08 T:aes128otrpv2 11.35 11.40 11.43 T:aes128otrsv2 11.37 11.44 11.47 T:aes128otrsv1 14.74 14.79 14.86 T:aes256otrpv1 14.75 14.81 14.85 T:aes256otrpv2 14.99 15.06 15.09 T:twine80n6t4clocv3 15.09 15.12 15.18 T:aes128n12clocv1 15.13 15.16 15.21 T:aes256otrsv2 15.12 15.17 15.20 T:aes256otrsv1 15.31 15.36 15.41 T:aes128n8clocv1 15.80 15.85 15.86 T:twine80n6t4clocv2 18.13 18.46 19.03 T:proest256otrv1 21.60 21.71 21.80 T:ketjesrv2 22.49 22.93 23.06 T:ketjesrv1 27.58 27.64 27.67 T:aeadaes128ocbtaglen64v1 27.60 27.66 27.70 T:aeadaes128ocbtaglen96v1 33.25 33.29 33.35 T:aeadaes192ocbtaglen96v1 33.29 33.35 33.41 T:aeadaes192ocbtaglen64v1 38.93 38.95 39.17 T:aeadaes256ocbtaglen96v1 39.28 39.54 39.66 T:aeadaes256ocbtaglen64v1 42.82 43.12 43.48 T:ketjejrv1 47.02 47.06 47.11 T:proest128otrv1 47.22 47.47 47.57 T:colm127v1 66.00 66.15 67.74 T:ketjejrv2 70.49 71.36 71.52 T:deoxysneq128128v13 71.50 71.55 71.62 T:present80n6t4silcv3 84.60 84.65 84.73 T:aezv1 92.73 93.75 96.57 T:deoxyseq128128v13 99.06 99.15 99.27 T:deoxysneq256128v13 125.06 125.13 125.22 T:deoxyseq256128v13 126.47 126.55 126.63 T:led80n6t4silcv3 427.42 428.83 433.20 T:acorn128 1933.31 1936.02 1936.87 T:led80n6t4silcv2 1936.59 1937.10 1938.37 T:led80n6silcv1 2355.55 2379.16 2407.95 T:present80n6silcv1 2357.63 2384.86 2413.60 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.11? 0.12? 0.13? T:tiaoxinv1 0.11? 0.12? 0.13? T:tiaoxinv2 0.15? 0.15? 0.19? T:aezv3 0.16? 0.16? 0.18? T:aezv5 0.16? 0.17? 0.19? T:aezv4 0.18 0.19 0.19 T:aegis128l 0.18? 0.19? 0.21? aegis128l 0.14? 0.20? 0.24? T:aeadaes128ocbtaglen128v1 -0.14? 0.25? 0.65? T:aeadaes256ocbtaglen128v1 0.30? 0.33? 0.35? aes256gcmv1 0.29? 0.33? 0.35? T:aes128gcmv1 0.37 0.38 0.38 T:aegis256 0.37 0.38 0.39 T:aegis128 0.38 0.38 0.39 aegis256 0.34? 0.42? 0.79? T:aeadaes192ocbtaglen128v1 0.45 0.48 0.50 T:aes128otrpv3 0.48 0.50 0.52 T:aes128otrcv3 0.55 0.56 0.58 T:colm0v1 0.56 0.59 0.62 T:aes256otrpv3 0.64 0.64 0.66 T:morus1280256v2 0.63 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.67 T:aes256otrcv3 0.66 0.67 0.68 T:deoxysii128v141 0.67 0.68 0.68 T:deoxysi128v141 0.68 0.69 0.70 T:deoxysneq128128v1 0.70 0.71 0.72 T:deoxyseq128128v1 0.74 0.76 0.77 T:deoxysii256v141 0.75 0.76 0.77 T:deoxysi256v141 0.75 0.76 0.78 T:deoxysneq256128v1 0.82 0.83 0.85 T:deoxyseq256128v1 1.09 1.11 1.12 T:morus640128v2 1.10 1.11 1.12 T:morus640128v1 1.68 1.76 1.84 T:lunarkeyakv2 1.71 1.76 1.83 T:oceankeyakv2 2.00 2.02 2.04 T:norx6441v3 2.02 2.04 2.05 T:norx6441v2 2.06 2.07 2.09 T:norx6444v3 2.11 2.11 2.12 T:aes128n8t8clocv2 2.10 2.12 2.12 T:aes128n12t8clocv2 2.11 2.12 2.13 T:aes128n12t8silcv2 2.11 2.12 2.13 T:aes128n12t8clocv3 2.11 2.12 2.12 T:aes128otrsv3 2.11 2.12 2.12 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128n8t8silcv2 2.09 2.12 2.16 T:seakeyakv2 2.44 2.45 2.47 T:norx6441v1 2.50 2.53 2.57 T:norx6444v2 2.53 2.59 2.62 T:lakekeyakv2 2.58? 2.66? 2.88? T:lakekeyakv1 2.87 2.87 2.87 T:aes256otrsv3 3.00 3.05 3.10 T:norx6444v1 3.09 3.11 3.12 T:norx6461v3 3.10 3.13 3.14 T:norx6461v2 3.63 3.66 3.68 T:norx3241v3 3.64 3.66 3.69 T:norx3241v2 3.67 3.69 3.71 T:norx6461v1 4.05? 4.28? 4.89? T:acorn128v2 4.29 4.31 4.31 T:aesjambuv1 3.95? 4.37? 4.58? T:ketjemajorv2 4.38 4.40 4.43 T:norx3241v1 4.36? 5.01? 5.10? T:riverkeyakv2 4.77 5.06 5.18 T:acorn128v3 5.44 5.47 5.49 T:norx3261v2 5.53 5.55 5.57 T:norx3261v3 5.63 5.82 5.97 T:ketjeminorv2 6.29 6.40 6.43 T:ascon128av11 6.35 6.41 6.45 T:ascon96v1 6.64 6.67 6.70 ascon128av12 7.50 7.51 7.52 T:norx3261v1 9.60 9.63 9.64 T:ascon128v11 9.61 9.64 9.66 T:ascon128v1 9.98 10.00 10.05 ascon128v12 10.46 10.49 10.53 T:aes128otrpv1 10.47 10.50 10.56 T:aes128otrpv2 11.23 11.25 11.28 T:aes128otrsv1 11.23 11.27 11.29 T:aes128otrsv2 11.41 11.44 11.51 T:aes128n12clocv1 11.40 11.47 11.50 T:aes128n8clocv1 14.22 14.25 14.27 T:aes256otrpv2 14.25 14.28 14.32 T:aes256otrpv1 14.80 14.84 14.87 T:twine80n6t4clocv3 15.01 15.04 15.08 T:aes256otrsv2 15.03 15.04 15.07 T:aes256otrsv1 14.64 15.49 15.53 T:twine80n6t4clocv2 18.27 18.65 19.01 T:proest256otrv1 20.34 20.38 20.45 T:aeadaes128ocbtaglen96v1 20.34 20.39 20.44 T:aeadaes128ocbtaglen64v1 20.51 20.60 20.78 T:ketjesrv2 20.42 20.64 20.88 T:ketjesrv1 22.80 22.90 23.02 T:colm127v1 24.38 24.43 24.47 T:aeadaes192ocbtaglen96v1 24.40 24.44 24.51 T:aeadaes192ocbtaglen64v1 29.09 29.46 29.56 T:aeadaes256ocbtaglen64v1 28.44 29.63 29.83 T:aeadaes256ocbtaglen96v1 40.14 40.28 40.39 T:ketjejrv1 40.72 40.78 40.96 T:aezv1 47.18 47.27 47.37 T:proest128otrv1 59.88 60.09 60.76 T:deoxyseq128128v13 60.38 60.96 61.82 T:deoxysneq128128v13 63.03 63.23 64.86 T:ketjejrv2 71.09 71.18 71.23 T:present80n6t4silcv3 82.98 83.04 83.10 T:deoxyseq256128v13 84.17 84.25 84.29 T:deoxysneq256128v13 126.14 126.26 126.41 T:led80n6t4silcv3 410.21 410.90 411.62 T:acorn128 1290.81 1291.53 1294.21 T:led80n6t4silcv2 1291.14 1291.85 1292.77 T:led80n6silcv1 1570.77 1573.51 1580.49 T:present80n6t4silcv2 1564.61 1577.30 1605.81 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.11? 0.12? 0.13? T:tiaoxinv1 0.11? 0.12? 0.13? T:tiaoxinv2 0.17 0.17 0.18 T:aezv5 0.17? 0.18? 0.19? T:aezv4 0.18 0.19 0.19 aegis128l 0.18 0.19 0.19 T:aegis128l 0.18? 0.19? 0.20? T:aezv3 0.17? 0.20? 0.24? T:aeadaes128ocbtaglen128v1 -0.15? 0.23? 0.66? T:aeadaes256ocbtaglen128v1 0.31 0.33 0.34 T:aes128gcmv1 0.32? 0.34? 0.36? aes256gcmv1 0.36 0.37 0.38 T:aegis128 0.37 0.37 0.38 T:aegis256 0.38 0.38 0.38 aegis256 -0.00? 0.40? 0.42? T:aeadaes192ocbtaglen128v1 0.47 0.49 0.51 T:aes128otrpv3 0.48 0.49 0.51 T:aes128otrcv3 0.51? 0.52? 0.58? T:colm0v1 0.58 0.61 0.63 T:aes256otrpv3 0.62 0.63 0.64 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280256v1 0.66 0.67 0.68 T:deoxysii128v141 0.67 0.68 0.69 T:deoxysi128v141 0.68 0.69 0.69 T:deoxysneq128128v1 0.70 0.71 0.72 T:deoxyseq128128v1 0.74 0.75 0.77 T:deoxysi256v141 0.75 0.77 0.77 T:deoxysii256v141 0.74 0.80 0.82 T:deoxysneq256128v1 0.80 0.81 0.82 T:deoxyseq256128v1 1.10 1.11 1.13 T:morus640128v1 1.09 1.11 1.12 T:morus640128v2 1.63? 1.74? 1.82? T:lunarkeyakv2 1.70 1.77 1.79 T:oceankeyakv2 2.00 2.02 2.12 T:aes128n12t8silcv2 2.00 2.02 2.11 T:aes128n12t8silcv3 2.05 2.08 2.09 T:norx6444v3 2.07 2.08 2.10 T:norx6441v2 2.07 2.08 2.10 T:norx6441v3 2.11 2.12 2.16 T:aes128n8t8clocv2 2.12 2.12 2.13 T:aes128otrsv3 2.12 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.14 T:aes128n12t8clocv3 2.11 2.14 2.21 T:aes128n12t8clocv2 2.10 2.14 2.16 T:seakeyakv2 2.43 2.44 2.46 T:norx6441v1 2.49 2.54 2.61 T:norx6444v2 2.49 2.54 2.60 T:lakekeyakv2 2.63 2.71 2.79 T:lakekeyakv1 2.87 2.87 2.88 T:aes256otrsv3 2.95 3.05 3.18 T:norx6444v1 3.05 3.07 3.10 T:norx6461v3 3.09 3.11 3.14 T:norx6461v2 3.65 3.66 3.68 T:norx6461v1 3.65 3.66 3.68 T:norx3241v2 3.65 3.67 3.69 T:norx3241v3 3.58? 4.02? 4.19? T:ketjemajorv2 4.02 4.19 4.30 T:acorn128v2 4.17 4.30 4.42 T:acorn128v3 4.30 4.31 4.32 T:aesjambuv1 4.39 4.40 4.44 T:norx3241v1 4.73 5.03 5.12 T:riverkeyakv2 5.45 5.47 5.49 T:norx3261v2 5.53 5.55 5.57 T:norx3261v3 5.62 5.77 5.92 T:ketjeminorv2 6.36 6.38 6.41 T:ascon128av11 6.32 6.39 6.48 T:ascon96v1 6.63 6.65 6.70 ascon128av12 7.49 7.51 7.53 T:norx3261v1 9.53 9.56 9.59 T:ascon128v11 9.56 9.59 9.60 T:ascon128v1 9.97 10.02 10.06 ascon128v12 10.48 10.52 10.55 T:aes128otrpv1 10.50 10.55 10.58 T:aes128otrpv2 11.22 11.28 11.33 T:aes128otrsv1 11.21 11.29 11.34 T:aes128otrsv2 11.41 11.46 11.51 T:aes128n12clocv1 11.40 11.46 11.50 T:aes128n8clocv1 14.27 14.29 14.33 T:aes256otrpv1 14.26 14.30 14.35 T:aes256otrpv2 14.79 14.84 14.93 T:twine80n6t4clocv3 15.03 15.07 15.10 T:aes256otrsv1 15.03 15.07 15.10 T:aes256otrsv2 14.96 15.41 15.52 T:twine80n6t4clocv2 18.40 18.80 18.96 T:proest256otrv1 20.37 20.43 20.48 T:aeadaes128ocbtaglen64v1 20.40 20.44 20.49 T:aeadaes128ocbtaglen96v1 20.55 20.62 20.72 T:ketjesrv2 20.72 20.86 20.97 T:ketjesrv1 22.77 22.95 23.01 T:colm127v1 24.37 24.41 24.47 T:aeadaes192ocbtaglen64v1 24.33 24.44 24.50 T:aeadaes192ocbtaglen96v1 28.30 29.07 29.80 T:aeadaes256ocbtaglen96v1 29.16 29.47 29.78 T:aeadaes256ocbtaglen64v1 40.15 40.31 40.49 T:ketjejrv1 40.75 40.80 40.92 T:aezv1 47.20 47.26 47.37 T:proest128otrv1 58.77 60.08 60.86 T:deoxysneq128128v13 60.50 60.69 60.93 T:deoxyseq128128v13 63.00 63.39 64.75 T:ketjejrv2 71.06 71.19 71.24 T:present80n6t4silcv3 83.02 83.08 83.15 T:deoxyseq256128v13 84.21 84.31 84.36 T:deoxysneq256128v13 126.24 126.38 126.69 T:led80n6t4silcv3 411.06 411.99 412.79 T:acorn128 1290.27 1291.07 1292.70 T:led80n6t4silcv2 1291.33 1292.32 1293.15 T:led80n6silcv1 1564.60 1573.83 1579.96 T:present80n6silcv1 1568.27 1579.52 1606.20 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.11? 0.12? 0.14? T:tiaoxinv1 0.12? 0.12? 0.14? T:tiaoxinv2 0.17 0.17 0.17 T:aezv5 0.16? 0.17? 0.18? T:aezv4 0.18 0.18 0.19 T:aezv3 0.18 0.19 0.19 T:aegis128l 0.19 0.19 0.20 aegis128l 0.17? 0.21? 0.24? T:aeadaes128ocbtaglen128v1 0.22? 0.25? 0.29? T:aeadaes256ocbtaglen128v1 0.31 0.33 0.34 T:aes128gcmv1 0.32 0.35 0.35 aes256gcmv1 0.37 0.37 0.38 T:aegis128 0.37 0.38 0.38 T:aegis256 0.38 0.38 0.39 aegis256 0.38? 0.40? 0.80? T:aeadaes192ocbtaglen128v1 0.47 0.49 0.50 T:aes128otrpv3 0.49 0.50 0.51 T:aes128otrcv3 0.51? 0.52? 0.58? T:colm0v1 0.58 0.60 0.62 T:aes256otrpv3 0.63 0.63 0.64 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280256v1 0.67 0.68 0.69 T:deoxysii128v141 0.67 0.69 0.71 T:deoxysneq128128v1 0.67 0.70 0.71 T:deoxysi128v141 0.71 0.72 0.73 T:deoxyseq128128v1 0.74 0.75 0.76 T:deoxysi256v141 0.76 0.77 0.78 T:deoxysii256v141 0.71? 0.79? 0.81? T:deoxysneq256128v1 0.81 0.82 0.82 T:deoxyseq256128v1 1.09 1.10 1.12 T:morus640128v2 1.10 1.10 1.12 T:morus640128v1 1.64 1.75 1.79 T:lunarkeyakv2 1.70 1.75 1.83 T:oceankeyakv2 1.98 1.99 2.13 T:aes128n12t8clocv3 1.98 1.99 2.14 T:aes128n12t8clocv2 1.99 1.99 2.00 T:aes128n12t8silcv2 1.99 1.99 2.11 T:aes128n12t8silcv3 2.06? 2.08? 2.39? T:norx6444v3 2.07 2.09 2.10 T:norx6441v3 2.08 2.09 2.11 T:norx6441v2 2.11 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.14 T:aes128n8t8clocv2 2.12 2.12 2.13 T:aes128otrsv3 2.09 2.15 2.19 T:seakeyakv2 2.43 2.45 2.47 T:norx6441v1 2.51 2.54 2.61 T:norx6444v2 2.53 2.58 2.64 T:lakekeyakv2 2.62 2.69 2.78 T:lakekeyakv1 2.87 2.87 2.88 T:aes256otrsv3 3.01 3.05 3.16 T:norx6444v1 3.07 3.09 3.10 T:norx6461v3 3.10 3.12 3.13 T:norx6461v2 3.64 3.65 3.68 T:norx3241v3 3.66 3.67 3.68 T:norx6461v1 3.66 3.68 3.69 T:norx3241v2 4.06 4.14 4.33 T:acorn128v3 3.69? 4.15? 4.54? T:ketjemajorv2 4.15 4.30 4.37 T:acorn128v2 4.30 4.31 4.32 T:aesjambuv1 4.40 4.42 4.43 T:norx3241v1 4.51? 4.97? 5.11? T:riverkeyakv2 5.44 5.46 5.49 T:norx3261v2 5.53 5.55 5.56 T:norx3261v3 5.66 5.83 5.98 T:ketjeminorv2 6.27 6.35 6.38 T:ascon96v1 6.37 6.40 6.44 T:ascon128av11 6.64 6.68 6.70 ascon128av12 7.50 7.51 7.53 T:norx3261v1 9.52 9.58 9.61 T:ascon128v1 9.53 9.59 9.62 T:ascon128v11 9.97 10.01 10.06 ascon128v12 10.43 10.51 10.54 T:aes128otrpv1 10.43 10.52 10.57 T:aes128otrpv2 11.21 11.24 11.32 T:aes128otrsv1 11.20 11.26 11.32 T:aes128otrsv2 11.40 11.45 11.49 T:aes128n12clocv1 11.41 11.46 11.50 T:aes128n8clocv1 14.22 14.29 14.33 T:aes256otrpv2 14.24 14.31 14.35 T:aes256otrpv1 14.79 14.82 14.95 T:twine80n6t4clocv3 14.98 15.06 15.10 T:aes256otrsv1 15.03 15.07 15.12 T:aes256otrsv2 15.41 15.45 15.52 T:twine80n6t4clocv2 18.28 18.55 18.70 T:proest256otrv1 20.39 20.42 20.48 T:aeadaes128ocbtaglen64v1 20.42 20.44 20.46 T:aeadaes128ocbtaglen96v1 20.35 20.59 20.72 T:ketjesrv1 20.49 20.63 20.77 T:ketjesrv2 22.70 22.81 22.92 T:colm127v1 24.37 24.41 24.49 T:aeadaes192ocbtaglen64v1 24.37 24.47 24.53 T:aeadaes192ocbtaglen96v1 28.33 28.72 29.93 T:aeadaes256ocbtaglen96v1 28.51 29.53 29.78 T:aeadaes256ocbtaglen64v1 39.92 40.04 40.26 T:ketjejrv1 40.70 40.80 40.84 T:aezv1 47.19 47.26 47.29 T:proest128otrv1 60.01 60.23 60.49 T:deoxyseq128128v13 59.54 60.52 60.77 T:deoxysneq128128v13 63.15 63.59 64.93 T:ketjejrv2 71.13 71.21 71.25 T:present80n6t4silcv3 83.04 83.16 83.30 T:deoxyseq256128v13 84.20 84.25 84.37 T:deoxysneq256128v13 126.09 126.31 126.51 T:led80n6t4silcv3 410.71 412.56 413.08 T:acorn128 1289.93 1290.56 1291.25 T:led80n6t4silcv2 1291.63 1292.58 1299.15 T:led80n6silcv1 1564.43 1568.88 1591.68 T:present80n6silcv1 1568.00 1570.58 1577.58 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.20 0.20 0.21 T:tiaoxinv1 0.20 0.20 0.21 T:tiaoxinv2 0.24 0.24 0.25 T:aegis128l 0.25 0.25 0.25 aegis128l 0.30 0.31 0.31 T:aezv4 0.32 0.32 0.34 T:aezv3 0.33 0.34 0.34 T:aezv5 0.34? 0.36? 0.39? T:aeadaes128ocbtaglen128v1 0.42 0.42 0.42 T:aegis128 0.43 0.43 0.43 aegis256 0.43 0.43 0.43 T:aegis256 0.42? 0.44? 0.68? T:aeadaes256ocbtaglen128v1 0.47? 0.50? 0.59? T:aeadaes192ocbtaglen128v1 0.53 0.53 0.54 T:aes128otrpv3 0.59 0.60 0.61 T:aes128otrcv3 0.67 0.68 0.69 T:aes256otrpv3 0.73 0.74 0.75 T:aes128gcmv1 0.75 0.76 0.77 T:aes256otrcv3 0.77 0.78 0.79 T:deoxysneq128128v1 0.79 0.79 0.80 T:deoxysi128v141 0.81 0.81 0.81 T:morus1280256v1 0.81 0.81 0.82 T:morus1280128v1 0.81 0.82 0.83 aes256gcmv1 0.82 0.82 0.83 T:morus1280256v2 0.82 0.82 0.83 T:morus1280128v2 0.87 0.89 0.89 T:deoxysneq256128v1 0.89 0.90 0.91 T:deoxysi256v141 1.05 1.05 1.06 T:colm0v1 1.14 1.14 1.16 T:deoxysii128v141 1.18 1.18 1.18 T:deoxyseq128128v1 1.27 1.28 1.28 T:morus640128v1 1.28 1.29 1.30 T:morus640128v2 1.29 1.30 1.30 T:deoxysii256v141 1.34 1.35 1.36 T:aes128otrsv3 1.35 1.35 1.36 T:deoxyseq256128v1 1.80 1.81 1.82 T:aes256otrsv3 2.14 2.16 2.16 T:norx6444v3 2.19 2.19 2.20 T:aes128n12t8clocv3 2.19 2.19 2.20 T:aes128n8t8clocv2 2.20 2.20 2.20 T:aes128n12t8clocv2 2.20 2.20 2.21 T:aes128n12t8silcv2 2.20 2.20 2.21 T:aes128n8t8silcv2 2.20 2.20 2.20 T:aes128n12t8silcv3 2.35 2.36 2.37 T:norx6441v2 2.36 2.37 2.38 T:norx6441v3 2.74 2.75 2.76 T:norx6441v1 3.11 3.15 3.16 T:lakekeyakv2 3.15 3.18 3.22 T:seakeyakv2 3.34 3.38 3.46 T:lakekeyakv1 3.58 3.59 3.60 T:norx6461v3 3.58 3.59 3.60 T:norx6461v2 3.83 3.84 3.86 T:norx6444v2 3.91 3.92 3.93 T:norx3241v3 3.94 3.95 3.96 T:norx3241v2 4.10 4.11 4.18 T:oceankeyakv2 4.14 4.15 4.16 T:norx6461v1 4.38 4.38 4.39 T:aesjambuv1 4.55 4.57 4.60 T:norx6444v1 4.62 4.63 4.64 T:norx3241v1 5.22 5.39 5.48 T:acorn128v2 5.59 5.61 5.64 T:riverkeyakv2 5.53 5.64 5.79 T:acorn128v3 5.94 5.95 5.98 T:norx3261v2 5.94 5.96 5.97 T:norx3261v3 6.06 6.28 6.36 T:ketjemajorv2 6.70 6.71 6.73 T:ascon128av11 6.69 6.73 6.75 T:ascon96v1 6.73 6.83 6.91 T:ketjeminorv2 6.84 6.85 6.87 ascon128av12 7.04 7.07 7.13 T:lunarkeyakv2 7.90 7.92 7.92 T:norx3261v1 9.92 9.93 9.95 T:ascon128v11 9.91 9.94 9.96 T:ascon128v1 10.14 10.15 10.18 ascon128v12 11.17 11.20 11.22 T:aes128otrpv1 11.18 11.21 11.23 T:aes128otrpv2 11.51 11.52 11.53 T:aes128otrsv1 11.51 11.53 11.56 T:aes128otrsv2 15.01 15.04 15.08 T:aes256otrpv2 15.03 15.05 15.07 T:aes256otrpv1 15.28 15.30 15.31 T:twine80n6t4clocv3 15.36 15.37 15.40 T:aes256otrsv1 15.40 15.42 15.45 T:aes256otrsv2 16.00 16.01 16.05 T:twine80n6t4clocv2 16.35 16.38 16.41 T:aes128n8clocv1 16.38 16.41 16.43 T:aes128n12clocv1 19.91 20.19 20.32 T:proest256otrv1 21.27 21.29 21.32 T:aeadaes128ocbtaglen96v1 21.26 21.31 21.34 T:aeadaes128ocbtaglen64v1 21.44 21.85 22.36 T:ketjesrv1 23.68 23.76 23.80 T:ketjesrv2 25.32 25.34 25.39 T:aeadaes192ocbtaglen96v1 25.33 25.36 25.41 T:aeadaes192ocbtaglen64v1 29.59 29.84 30.42 T:aeadaes256ocbtaglen96v1 30.35 30.57 30.73 T:aeadaes256ocbtaglen64v1 35.24 35.30 35.38 T:colm127v1 43.57 43.66 43.99 T:ketjejrv1 48.74 48.80 48.89 T:proest128otrv1 61.97 62.11 62.58 T:deoxysneq128128v13 66.07 66.20 67.69 T:ketjejrv2 72.32 72.35 72.42 T:present80n6t4silcv3 83.23 83.28 83.37 T:aezv1 84.27 84.28 84.38 T:deoxysneq256128v13 91.45 92.65 93.77 T:deoxyseq128128v13 126.38 126.44 126.50 T:deoxyseq256128v13 127.59 127.69 127.91 T:led80n6t4silcv3 460.50 462.82 463.32 T:acorn128 1946.93 1947.32 1948.27 T:led80n6t4silcv2 1947.08 1947.59 1948.27 T:led80n6silcv1 2365.36 2372.13 2389.92 T:present80n6silcv1 2366.93 2374.33 2378.86 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.24 0.24 0.25 T:aegis128l 0.24 0.25 0.26 aegis128l 0.30 0.31 0.31 T:aezv4 0.31 0.32 0.32 T:aezv3 0.32 0.32 0.32 T:aezv5 0.32 0.32 0.32 T:tiaoxinv2 0.32 0.32 0.32 T:tiaoxinv1 0.34? 0.35? 0.38? T:aeadaes128ocbtaglen128v1 0.42 0.42 0.42 T:aegis128 0.42 0.42 0.43 T:aegis256 0.43 0.43 0.43 aegis256 0.44? 0.46? 0.69? T:aeadaes256ocbtaglen128v1 0.47? 0.49? 0.73? T:aeadaes192ocbtaglen128v1 0.54 0.55 0.57 T:aes128otrpv3 0.60 0.60 0.62 T:aes128gcmv1 0.61 0.61 0.62 T:aes128otrcv3 0.69 0.70 0.70 aes256gcmv1 0.71 0.71 0.72 T:aes256otrpv3 0.78 0.78 0.79 T:aes256otrcv3 0.82 0.82 0.82 T:morus1280128v1 0.82 0.82 0.82 T:morus1280256v1 0.83 0.83 0.84 T:morus1280128v2 0.83 0.83 0.84 T:morus1280256v2 0.88 0.88 0.89 T:deoxysi128v141 0.89 0.89 0.90 T:deoxysneq128128v1 0.97 0.97 0.99 T:deoxysneq256128v1 1.00 1.01 1.02 T:deoxysi256v141 1.05 1.06 1.07 T:colm0v1 1.17 1.17 1.18 T:deoxysii128v141 1.26 1.26 1.27 T:morus640128v1 1.29 1.30 1.30 T:morus640128v2 1.35 1.36 1.36 T:deoxysii256v141 1.35 1.36 1.37 T:aes128otrsv3 1.37 1.37 1.38 T:deoxyseq128128v1 1.43 1.44 1.44 T:deoxyseq256128v1 1.84 1.84 1.86 T:aes256otrsv3 2.13 2.14 2.15 T:norx6444v3 2.14 2.14 2.15 T:aes128n8t8clocv2 2.14 2.14 2.21 T:aes128n12t8clocv3 2.14 2.14 2.15 T:aes128n12t8clocv2 2.14 2.15 2.16 T:aes128n8t8silcv2 2.15 2.15 2.17 T:aes128n12t8silcv2 2.15 2.15 2.21 T:aes128n12t8silcv3 2.35 2.36 2.37 T:norx6441v3 2.37 2.38 2.39 T:norx6441v2 2.70 2.72 2.74 T:norx6441v1 3.12 3.15 3.16 T:lakekeyakv2 3.17 3.21 3.23 T:seakeyakv2 3.34 3.37 3.45 T:lakekeyakv1 3.55 3.57 3.57 T:norx6461v3 3.58 3.58 3.59 T:norx6461v2 3.85 3.88 3.92 T:norx6444v2 3.89 3.90 3.91 T:norx3241v3 3.90 3.91 3.92 T:norx3241v2 4.13 4.15 4.16 T:norx6461v1 4.17 4.19 4.24 T:oceankeyakv2 4.53 4.53 4.53 T:aesjambuv1 4.58 4.60 4.63 T:norx6444v1 4.60 4.61 4.62 T:norx3241v1 5.01 5.08 5.15 T:acorn128v2 5.28 5.57 5.62 T:acorn128v3 5.66 5.70 5.73 T:riverkeyakv2 5.75 5.92 6.09 T:ketjemajorv2 5.94 5.94 5.95 T:norx3261v2 5.96 5.99 6.00 T:norx3261v3 6.62 6.67 6.69 T:ascon96v1 6.65 6.68 6.69 T:ascon128av11 6.81 6.84 6.85 ascon128av12 7.08 7.11 7.16 T:lunarkeyakv2 7.03 7.16 7.24 T:ketjeminorv2 7.84 7.85 7.86 T:norx3261v1 9.84 9.87 9.87 T:ascon128v11 9.86 9.87 9.89 T:ascon128v1 10.10 10.12 10.16 ascon128v12 11.37 11.38 11.42 T:aes128otrpv1 11.36 11.39 11.43 T:aes128otrpv2 11.70 11.72 11.77 T:aes128otrsv1 11.71 11.73 11.76 T:aes128otrsv2 15.19 15.24 15.29 T:aes256otrpv1 15.23 15.24 15.28 T:aes256otrpv2 15.29 15.33 15.37 T:twine80n6t4clocv3 15.29 15.35 15.41 T:aes128n12clocv1 15.49 15.52 15.58 T:aes128n8clocv1 15.56 15.57 15.64 T:aes256otrsv2 15.55 15.60 15.62 T:aes256otrsv1 15.98 16.02 16.02 T:twine80n6t4clocv2 20.09 20.21 20.61 T:proest256otrv1 22.29 22.35 22.40 T:ketjesrv2 23.17 23.54 23.64 T:ketjesrv1 28.31 28.34 28.37 T:aeadaes128ocbtaglen64v1 28.27 28.34 28.39 T:aeadaes128ocbtaglen96v1 34.03 34.07 34.12 T:aeadaes192ocbtaglen96v1 34.07 34.12 34.22 T:aeadaes192ocbtaglen64v1 39.94 40.45 40.52 T:aeadaes256ocbtaglen96v1 40.03 40.55 40.64 T:aeadaes256ocbtaglen64v1 44.14 44.27 44.52 T:ketjejrv1 48.63 48.68 48.73 T:colm127v1 49.13 49.15 49.18 T:proest128otrv1 67.08 67.36 68.91 T:ketjejrv2 71.53 71.84 71.92 T:deoxysneq128128v13 72.26 72.31 72.38 T:present80n6t4silcv3 83.21 83.35 83.96 T:aezv1 91.74 92.22 92.84 T:deoxyseq128128v13 99.49 99.59 99.67 T:deoxysneq256128v13 126.32 126.38 126.48 T:deoxyseq256128v13 127.51 127.65 127.86 T:led80n6t4silcv3 478.43 478.75 483.89 T:acorn128 1945.63 1945.92 1946.69 T:led80n6t4silcv2 1946.65 1947.06 1947.41 T:led80n6silcv1 2366.43 2368.99 2374.09 T:present80n6t4silcv2 2367.60 2369.66 2373.15 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17 0.17 0.18 T:aezv4 0.18 0.18 0.19 T:aezv5 0.18 0.18 0.19 T:aezv3 0.24 0.24 0.25 T:aegis128l 0.25 0.25 0.26 aegis128l 0.32 0.32 0.32 T:tiaoxinv1 0.32 0.32 0.33 T:tiaoxinv2 0.34 0.34 0.37 T:aeadaes128ocbtaglen128v1 0.42 0.42 0.42 T:aegis256 0.42 0.42 0.43 T:aegis128 0.42 0.43 0.46 T:aeadaes256ocbtaglen128v1 0.44 0.44 0.44 aegis256 0.47 0.47 0.48 T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrpv3 0.60 0.60 0.61 T:aes128gcmv1 0.60 0.61 0.61 T:aes128otrcv3 0.69 0.69 0.70 aes256gcmv1 0.70 0.71 0.71 T:aes256otrpv3 0.77 0.78 0.78 T:aes256otrcv3 0.81 0.82 0.82 T:morus1280128v1 0.82 0.82 0.83 T:morus1280256v1 0.83 0.83 0.84 T:morus1280128v2 0.83 0.83 0.85 T:morus1280256v2 0.88 0.88 0.89 T:deoxysi128v141 0.88 0.89 0.89 T:deoxysneq128128v1 0.96 0.97 0.99 T:deoxysneq256128v1 1.00 1.00 1.01 T:deoxysi256v141 1.06 1.07 1.13 T:colm0v1 1.17 1.17 1.17 T:deoxysii128v141 1.26 1.26 1.27 T:morus640128v1 1.28 1.29 1.29 T:morus640128v2 1.35 1.35 1.36 T:deoxysii256v141 1.35 1.36 1.36 T:aes128otrsv3 1.37 1.38 1.39 T:deoxyseq128128v1 1.43 1.44 1.48 T:deoxyseq256128v1 1.83 1.84 1.84 T:aes256otrsv3 2.13 2.13 2.14 T:aes128n8t8clocv2 2.14 2.14 2.21 T:aes128n12t8clocv3 2.14 2.14 2.14 T:aes128n8t8silcv2 2.13 2.14 2.15 T:norx6444v3 2.14 2.14 2.23 T:aes128n12t8silcv2 2.21 2.21 2.22 T:aes128n12t8clocv2 2.23 2.23 2.23 T:aes128n12t8silcv3 2.35 2.35 2.36 T:norx6441v3 2.37 2.38 2.39 T:norx6441v2 2.71 2.72 2.77 T:norx6441v1 3.14 3.15 3.17 T:lakekeyakv2 3.18 3.21 3.25 T:seakeyakv2 3.36 3.39 3.50 T:lakekeyakv1 3.56 3.56 3.57 T:norx6461v3 3.57 3.59 3.61 T:norx6461v2 3.85 3.87 3.90 T:norx6444v2 3.89 3.90 3.92 T:norx3241v3 3.91 3.92 3.92 T:norx3241v2 4.14 4.15 4.16 T:norx6461v1 4.16 4.19 4.22 T:oceankeyakv2 4.52 4.53 4.53 T:aesjambuv1 4.58 4.60 4.62 T:norx6444v1 4.60 4.61 4.61 T:norx3241v1 5.04 5.37 5.52 T:acorn128v2 5.17 5.56 5.65 T:acorn128v3 5.65 5.71 5.75 T:riverkeyakv2 5.77 5.84 6.04 T:ketjemajorv2 5.93 5.94 5.95 T:norx3261v2 5.98 6.00 6.02 T:norx3261v3 6.63 6.65 6.68 T:ascon96v1 6.66 6.67 6.68 T:ascon128av11 6.82 6.84 6.87 ascon128av12 7.11 7.14 7.16 T:lunarkeyakv2 7.12 7.19 7.27 T:ketjeminorv2 7.85 7.85 7.86 T:norx3261v1 9.86 9.87 9.90 T:ascon128v1 9.85 9.87 9.88 T:ascon128v11 10.08 10.13 10.18 ascon128v12 11.37 11.39 11.43 T:aes128otrpv2 11.37 11.40 11.43 T:aes128otrpv1 11.71 11.72 11.77 T:aes128otrsv2 11.71 11.75 11.77 T:aes128otrsv1 15.20 15.24 15.26 T:aes256otrpv2 15.22 15.26 15.28 T:aes256otrpv1 15.29 15.30 15.38 T:aes128n12clocv1 15.31 15.32 15.36 T:twine80n6t4clocv3 15.46 15.49 15.53 T:aes128n8clocv1 15.57 15.60 15.62 T:aes256otrsv2 15.56 15.60 15.63 T:aes256otrsv1 15.96 16.02 16.03 T:twine80n6t4clocv2 19.99 20.11 20.32 T:proest256otrv1 22.24 22.34 22.40 T:ketjesrv2 23.17 23.57 23.71 T:ketjesrv1 28.28 28.31 28.34 T:aeadaes128ocbtaglen64v1 28.29 28.33 28.35 T:aeadaes128ocbtaglen96v1 34.01 34.07 34.11 T:aeadaes192ocbtaglen96v1 34.02 34.09 34.13 T:aeadaes192ocbtaglen64v1 39.93 40.43 40.51 T:aeadaes256ocbtaglen96v1 40.18 40.47 40.61 T:aeadaes256ocbtaglen64v1 43.85 44.10 44.24 T:ketjejrv1 48.64 48.68 48.71 T:colm127v1 49.11 49.14 49.17 T:proest128otrv1 67.14 67.67 68.93 T:ketjejrv2 70.10 71.05 72.09 T:deoxysneq128128v13 72.29 72.33 72.37 T:present80n6t4silcv3 83.12 83.28 83.39 T:aezv1 92.90 94.53 99.02 T:deoxyseq128128v13 99.56 99.61 99.73 T:deoxysneq256128v13 126.39 126.47 126.49 T:deoxyseq256128v13 127.55 127.62 127.71 T:led80n6t4silcv3 478.71 479.38 483.72 T:acorn128 1945.96 1946.60 1947.09 T:led80n6t4silcv2 1947.01 1947.17 1947.63 T:led80n6silcv1 2366.33 2368.37 2374.87 T:present80n6silcv1 2364.33 2368.72 2372.33 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.93 0.96 1.02 T:aegis128l 0.93? 0.98? 1.04? T:aegis128 0.96? 1.00? 1.39? aegis128l 1.16 1.20 1.21 T:aezv4 1.17? 1.26? 1.52? T:aezv3 1.19? 1.28? 1.42? T:aezv5 1.24? 1.29? 1.48? T:tiaoxinv1 1.24? 1.30? 1.45? T:tiaoxinv2 1.27 1.32 1.38 aegis256 1.29? 1.40? 1.80? T:aegis256 2.05? 2.10? 2.42? T:aes128otrpv3 2.21? 2.52? 2.90? T:aes128otrsv3 2.62 2.71 2.87 T:aes128n8t8clocv2 2.66? 2.76? 3.19? T:aes128n12t8clocv3 2.70 2.78 2.87 T:aes128n12t8clocv2 2.73? 2.84? 3.22? T:aes128otrcv3 2.81 2.89 3.08 T:aes128n8t8silcv2 2.91 2.95 3.05 T:deoxysneq128128v1 2.93? 2.99? 3.44? T:aes256otrsv3 2.96 3.04 3.26 T:aes256otrpv3 2.77? 3.06? 3.13? T:colm0v1 2.93 3.07 3.20 T:aes128n12t8silcv3 2.97 3.07 3.10 T:deoxysi128v141 3.04 3.13 3.23 T:aes128n12t8silcv2 2.92? 3.30? 8.74? T:aeadaes192ocbtaglen128v1 3.34? 3.44? 4.38? T:aeadaes128ocbtaglen128v1 3.44 3.54 3.62 T:deoxysneq256128v1 3.66 3.72 4.05 T:aes256otrcv3 3.81 3.94 4.02 T:deoxysi256v141 4.02 4.09 4.14 T:deoxyseq128128v1 4.11 4.16 4.21 T:morus1280128v1 4.19 4.26 4.39 T:morus1280256v1 4.09? 4.29? 9.91? T:aeadaes256ocbtaglen128v1 4.24 4.30 4.37 T:morus640128v1 4.40 4.45 4.55 T:morus1280128v2 4.35 4.47 4.60 T:morus640128v2 4.49 4.54 4.61 T:morus1280256v2 4.82 4.89 5.00 T:deoxyseq256128v1 4.98 5.11 5.35 T:aes128gcmv1 5.08 5.12 5.16 T:aesjambuv1 5.45 5.50 5.67 T:deoxysii128v141 5.54 5.71 5.97 aes256gcmv1 6.42 6.56 6.70 T:deoxysii256v141 7.45 7.52 7.56 T:norx6441v2 7.59 7.63 7.73 T:norx6441v1 7.60 7.70 7.77 T:norx6441v3 9.48 9.52 9.63 T:norx3241v3 9.45 9.53 9.62 T:norx3241v2 9.49 9.57 9.66 T:norx3241v1 9.81 9.92 10.03 T:ascon128av11 9.98 10.05 10.15 T:ascon96v1 10.21 10.34 10.41 ascon128av12 11.46 11.50 11.59 T:norx6461v2 11.55 11.62 11.67 T:norx6461v3 11.57 11.62 11.77 T:norx6461v1 11.44? 12.43? 13.14? T:lakekeyakv1 12.95 13.00 13.20 T:ascon128v11 12.98 13.03 13.07 T:ascon128v1 13.20 13.25 13.36 ascon128v12 13.84 13.94 14.07 T:norx6444v3 13.59 14.11 14.50 T:riverkeyakv2 13.72 14.20 14.48 T:lakekeyakv2 14.39 14.42 14.55 T:norx3261v2 14.49 14.55 14.57 T:norx3261v3 16.11 16.16 16.24 T:norx3261v1 18.52 18.62 18.90 T:aes128otrsv1 18.56 18.71 18.88 T:aes128otrsv2 18.75 18.94 19.07 T:aes128otrpv1 18.87 18.95 19.04 T:aes128otrpv2 19.12 19.23 19.45 T:aes128n8clocv1 19.25 19.40 19.67 T:aes128n12clocv1 19.91 19.97 20.59 T:twine80n6t4clocv2 20.28 20.68 20.90 T:twine80n6t4clocv3 21.40 22.40 22.91 T:ketjeminorv2 22.09 22.94 23.72 T:acorn128v2 24.38 24.58 24.72 T:aes256otrsv1 23.82 24.61 25.62 T:acorn128v3 24.46 24.62 25.02 T:aes256otrsv2 24.73 24.80 25.11 T:aes256otrpv1 24.70 24.84 25.10 T:aes256otrpv2 27.91 28.07 28.46 T:norx6444v2 29.08 29.34 29.73 T:seakeyakv2 33.27 33.48 33.80 T:norx6444v1 34.05 34.41 34.88 T:aeadaes128ocbtaglen96v1 34.00 34.54 35.08 T:aeadaes128ocbtaglen64v1 35.52 35.90 36.36 T:ketjesrv1 39.61 39.73 39.99 T:aeadaes192ocbtaglen96v1 39.62 39.91 40.57 T:aeadaes192ocbtaglen64v1 40.73 41.04 41.44 T:ketjesrv2 41.29 42.22 43.16 T:ketjemajorv2 44.58 44.93 45.86 T:oceankeyakv2 47.20 47.73 48.10 T:aeadaes256ocbtaglen96v1 47.32 48.73 49.36 T:aeadaes256ocbtaglen64v1 50.55 51.09 52.20 T:colm127v1 58.60 58.98 59.79 T:ketjejrv1 58.58 59.21 62.73 T:proest256otrv1 69.62 70.19 71.37 T:deoxysneq128128v13 88.02 88.14 89.34 T:ketjejrv2 88.71 88.87 89.52 T:present80n6t4silcv3 94.81 95.16 95.43 T:proest128otrv1 95.24 95.44 95.77 T:deoxysneq256128v13 96.46 97.05 97.41 T:aezv1 114.75 115.19 115.86 T:lunarkeyakv2 114.96 116.94 118.44 T:deoxyseq128128v13 151.51 152.18 152.78 T:led80n6t4silcv3 157.30 157.52 158.52 T:deoxyseq256128v13 1631.55 1632.88 1633.84 T:acorn128 2178.70 2180.46 2181.76 T:led80n6t4silcv2 2183.00 2184.30 2185.32 T:led80n6silcv1 2649.45 2652.13 2657.02 T:present80n6silcv1 2660.20 2704.52 2723.05 T:present80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.92 0.97 1.01 T:aegis128l 1.00? 1.08? 1.29? aegis128l 1.16? 1.18? 1.36? T:aegis128 1.15? 1.20? 1.30? T:aezv4 1.18? 1.25? 1.47? T:aezv3 1.14? 1.27? 1.59? T:aezv5 1.34 1.34 1.39 aegis256 1.30? 1.38? 1.72? T:tiaoxinv2 1.28? 1.39? 1.45? T:tiaoxinv1 1.32? 1.64? 2.09? T:aegis256 1.91? 2.05? 2.37? T:aes128otrpv3 2.23? 2.33? 2.68? T:aes128otrsv3 2.43? 2.45? 2.73? T:aes128n8t8clocv2 2.55 2.66 2.83 T:aes128n12t8clocv2 2.48? 2.66? 3.03? T:aes128n12t8clocv3 2.58? 2.69? 2.89? T:aes128n8t8silcv2 2.66? 2.75? 3.04? T:colm0v1 2.70? 2.84? 4.55? T:aes128n12t8silcv3 2.63? 2.86? 4.63? T:aes128n12t8silcv2 2.74? 2.86? 3.13? T:aes128otrcv3 2.79 2.88 3.06 T:aes256otrpv3 2.77? 2.91? 6.46? T:aeadaes192ocbtaglen128v1 3.01? 3.10? 3.47? T:aes256otrsv3 3.26? 3.41? 4.02? T:aeadaes128ocbtaglen128v1 3.85 3.89 4.02 T:aes256otrcv3 4.20 4.27 4.36 T:morus640128v1 4.30 4.35 4.42 T:morus1280256v1 4.30 4.38 4.40 T:deoxysneq128128v1 4.30 4.42 4.47 T:morus1280128v1 4.36 4.44 4.54 T:deoxysi128v141 4.51 4.57 4.64 T:morus1280128v2 4.55 4.57 4.63 T:morus1280256v2 4.20? 4.59? 10.52? T:aeadaes256ocbtaglen128v1 4.62 4.65 4.75 T:deoxysneq256128v1 4.83 4.87 5.02 T:morus640128v2 5.27 5.29 5.34 T:aesjambuv1 5.32 5.38 5.42 T:aes128gcmv1 5.68 5.77 5.95 T:deoxyseq128128v1 5.66 5.79 5.98 T:deoxyseq256128v1 5.84 5.88 5.95 T:deoxysi256v141 6.05 6.12 6.22 aes256gcmv1 6.19 6.32 6.41 T:deoxysii128v141 7.75 7.81 7.87 T:norx6441v1 7.80 7.92 8.01 T:norx6441v2 7.87 7.95 8.08 T:deoxysii256v141 7.94 7.98 8.04 T:norx6441v3 9.65 9.77 9.83 T:norx3241v2 9.73 9.80 9.88 T:norx3241v3 9.72 9.82 9.91 T:norx3241v1 9.85 9.98 10.12 T:ascon128av11 9.88 9.99 10.12 T:ascon96v1 10.28 10.43 10.53 ascon128av12 11.70 11.78 11.89 T:norx6461v1 11.77 11.84 11.98 T:norx6461v2 11.73 11.88 11.96 T:norx6461v3 11.38? 12.04? 12.69? T:lakekeyakv1 12.80 12.92 13.06 T:ascon128v11 12.88 12.98 13.03 T:ascon128v1 13.02 13.16 13.33 ascon128v12 13.54 13.88 14.42 T:riverkeyakv2 13.89 14.05 14.13 T:norx6444v3 13.45? 14.12? 15.09? T:lakekeyakv2 14.66 14.75 14.87 T:norx3261v2 14.69 14.80 14.95 T:norx3261v3 16.38 16.49 16.55 T:norx3261v1 18.66 18.80 19.10 T:aes128n8clocv1 18.73 18.83 19.16 T:aes128n12clocv1 18.98 19.04 19.10 T:aes128otrsv1 18.97 19.09 19.50 T:aes128otrsv2 19.16 19.22 19.38 T:aes128otrpv1 19.15 19.23 19.56 T:aes128otrpv2 19.91 20.04 20.23 T:twine80n6t4clocv2 20.34 20.82 21.02 T:twine80n6t4clocv3 21.53 22.34 23.08 T:ketjeminorv2 23.15 24.02 24.96 T:acorn128v3 23.06 24.07 24.98 T:acorn128v2 24.92 24.97 25.16 T:aes256otrsv1 24.83 25.02 25.24 T:aes256otrsv2 25.15 25.25 25.41 T:aes256otrpv2 25.18 25.27 25.40 T:aes256otrpv1 27.95 28.29 28.71 T:norx6444v2 28.59 28.88 29.27 T:seakeyakv2 33.83 34.28 34.92 T:norx6444v1 37.15 37.84 38.31 T:ketjesrv1 39.59 40.54 41.02 T:ketjesrv2 40.88 41.76 43.24 T:ketjemajorv2 43.83 44.59 44.91 T:aeadaes128ocbtaglen64v1 44.61 44.82 44.98 T:aeadaes128ocbtaglen96v1 44.68 45.33 46.06 T:oceankeyakv2 51.50 51.86 52.16 T:aeadaes192ocbtaglen64v1 51.84 52.15 52.35 T:aeadaes192ocbtaglen96v1 58.30 59.14 60.84 T:ketjejrv1 60.04 60.52 60.84 T:proest256otrv1 61.30 62.05 62.65 T:aeadaes256ocbtaglen96v1 61.78 62.82 63.17 T:aeadaes256ocbtaglen64v1 64.83 65.45 66.91 T:colm127v1 79.96 80.68 81.87 T:deoxysneq128128v13 88.60 88.71 89.34 T:present80n6t4silcv3 88.89 89.85 91.19 T:ketjejrv2 96.45 96.63 97.07 T:proest128otrv1 99.04 99.29 100.08 T:aezv1 110.39 111.25 111.61 T:deoxysneq256128v13 114.34 114.93 115.49 T:lunarkeyakv2 115.70 116.68 117.77 T:deoxyseq128128v13 151.99 152.74 153.46 T:led80n6t4silcv3 156.91 158.02 158.47 T:deoxyseq256128v13 1653.41 1654.35 1655.33 T:acorn128 2177.91 2179.23 2180.72 T:led80n6t4silcv2 2182.56 2183.66 2187.55 T:led80n6silcv1 2646.56 2647.91 2708.27 T:present80n6t4silcv2 2648.52 2650.34 2657.03 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.63? 0.73? 1.65? T:aezv5 0.73? 0.78? 1.02? T:aezv4 0.72? 0.80? 1.70? T:aezv3 0.95 0.97 1.00 T:aegis128l 1.02? 1.07? 1.28? aegis128l 1.14 1.17 1.20 T:aegis128 1.27 1.29 1.31 T:aegis256 1.29? 1.34? 1.46? T:tiaoxinv1 1.31? 1.40? 1.88? T:tiaoxinv2 1.35? 1.40? 2.15? aegis256 1.91? 2.01? 2.26? T:aes128otrpv3 2.26 2.31 2.41 T:aes128otrsv3 2.35? 2.37? 2.79? T:aes128n8t8clocv2 2.48? 2.56? 4.55? T:aes128n8t8silcv2 2.67 2.71 2.80 T:aes256otrpv3 2.77? 2.84? 8.71? T:aeadaes192ocbtaglen128v1 2.84 2.88 2.99 T:aes128otrcv3 2.77? 2.98? 4.37? T:colm0v1 3.23? 3.29? 3.90? T:aeadaes128ocbtaglen128v1 3.14 3.35 3.38 T:aes256otrsv3 2.46? 3.83? 4.27? T:aes128n12t8clocv2 3.81 3.89 3.91 T:aes256otrcv3 2.40? 4.12? 4.23? T:aes128n12t8clocv3 4.03? 4.13? 4.48? T:aeadaes256ocbtaglen128v1 4.20 4.25 4.37 T:deoxysneq128128v1 4.18 4.30 4.36 T:morus640128v1 4.30 4.35 4.41 T:morus1280128v1 4.31 4.35 4.40 T:morus1280256v1 4.30 4.36 4.45 T:deoxysi128v141 4.41? 4.46? 5.01? T:deoxysneq256128v1 2.62? 4.52? 4.59? T:aes128n12t8silcv3 2.60? 4.55? 4.59? T:aes128n12t8silcv2 4.54 4.57 4.62 T:morus1280128v2 4.50 4.59 4.67 T:morus1280256v2 4.85 4.98 5.02 T:morus640128v2 5.25 5.28 5.33 T:aesjambuv1 5.41 5.47 5.52 T:aes128gcmv1 5.65 5.70 6.05 T:deoxyseq128128v1 5.67 5.76 5.91 T:deoxyseq256128v1 5.84 5.86 5.95 T:deoxysi256v141 5.98 6.05 6.12 aes256gcmv1 6.20 6.29 6.42 T:deoxysii128v141 7.65 7.79 7.88 T:norx6441v1 7.77 7.80 7.88 T:norx6441v2 7.73 7.84 7.95 T:deoxysii256v141 7.85 7.90 8.00 T:norx6441v3 9.71 9.76 9.82 T:norx3241v2 9.70 9.80 9.84 T:norx3241v1 9.75 9.81 9.89 T:norx3241v3 9.80 9.91 10.15 T:ascon128av11 9.82 9.92 10.11 T:ascon96v1 10.23 10.33 10.49 ascon128av12 11.60 11.70 11.88 T:norx6461v1 11.76 11.80 11.84 T:norx6461v2 11.75 11.86 11.89 T:norx6461v3 11.49 12.12 12.36 T:lakekeyakv1 12.76 12.84 13.03 T:ascon128v11 12.83 12.90 13.09 T:ascon128v1 13.09 13.24 13.37 ascon128v12 13.27 13.80 14.44 T:riverkeyakv2 13.81 13.96 14.01 T:norx6444v3 13.91 14.27 14.79 T:lakekeyakv2 14.53 14.62 14.72 T:norx3261v2 14.75 14.83 14.94 T:norx3261v3 16.41 16.43 16.47 T:norx3261v1 18.72 18.83 19.28 T:aes128n12clocv1 18.70 18.99 19.30 T:aes128n8clocv1 18.93 19.11 19.70 T:aes128otrsv2 18.98 19.12 19.75 T:aes128otrsv1 19.12 19.21 19.42 T:aes128otrpv1 19.16 19.23 19.74 T:aes128otrpv2 19.91 20.03 20.29 T:twine80n6t4clocv2 20.34 20.92 21.66 T:twine80n6t4clocv3 21.59 22.27 22.81 T:ketjeminorv2 22.85 23.24 24.55 T:acorn128v2 22.92 23.36 24.30 T:acorn128v3 24.88 24.99 25.22 T:aes256otrsv1 24.95 25.02 25.16 T:aes256otrsv2 25.15 25.27 25.43 T:aes256otrpv1 25.19 25.35 26.20 T:aes256otrpv2 28.13 28.45 28.73 T:norx6444v2 28.63 29.01 29.65 T:seakeyakv2 33.70 33.86 34.12 T:norx6444v1 37.21 37.65 38.25 T:ketjesrv1 39.16 39.68 40.57 T:ketjesrv2 41.02 42.05 43.18 T:ketjemajorv2 43.51 44.10 44.55 T:aeadaes128ocbtaglen64v1 44.18 44.68 44.77 T:aeadaes128ocbtaglen96v1 44.83 44.93 45.48 T:oceankeyakv2 51.12 51.50 51.92 T:aeadaes192ocbtaglen64v1 51.95 52.12 52.28 T:aeadaes192ocbtaglen96v1 58.42 59.09 60.10 T:proest256otrv1 58.80 59.62 60.41 T:ketjejrv1 61.38 61.63 62.33 T:aeadaes256ocbtaglen96v1 62.51 62.61 62.96 T:aeadaes256ocbtaglen64v1 64.48 65.48 66.54 T:colm127v1 79.20 79.62 80.26 T:deoxysneq128128v13 88.55 89.19 89.39 T:present80n6t4silcv3 88.86 89.26 90.62 T:ketjejrv2 96.30 96.52 96.80 T:proest128otrv1 99.25 99.54 100.22 T:aezv1 110.36 110.59 110.92 T:deoxysneq256128v13 114.44 115.01 115.70 T:lunarkeyakv2 117.07 118.38 123.78 T:deoxyseq128128v13 151.72 152.64 153.12 T:led80n6t4silcv3 157.07 157.68 158.74 T:deoxyseq256128v13 1652.59 1653.50 1654.55 T:acorn128 2178.45 2179.78 2183.05 T:led80n6t4silcv2 2180.55 2181.48 2183.41 T:led80n6silcv1 2646.53 2647.59 2655.77 T:present80n6t4silcv2 2649.71 2651.84 2665.45 T:present80n6silcv1