VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Redwood Cove (a06a4-40); 2023 Intel Core Ultra 5 125H, P cores; 4 x 1200MHz; meteor,big, supercop-20251222

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.19 0.20 0.21 T:tiaoxinv2 0.19 0.20 0.21 T:tiaoxinv1 0.23 0.24 0.25 aegis128l 0.23 0.24 0.25 T:aegis128l 0.16? 0.26? 0.30? T:aeadaes128ocbtaglen128v1 0.20? 0.31? 0.35? T:aeadaes256ocbtaglen128v1 0.35 0.36 0.36 T:aezv4 0.35 0.36 0.37 T:aezv3 0.39 0.39 0.40 aegis256 0.39 0.40 0.40 T:aegis256 0.39 0.40 0.42 T:aezv5 0.40 0.41 0.41 T:aegis128 0.02? 0.42? 0.45? T:aeadaes192ocbtaglen128v1 0.40? 0.43? 0.45? T:aes128otrsv3 0.39? 0.43? 0.47? T:aes128otrcv3 0.42? 0.45? 0.49? T:aes128otrpv3 0.55? 0.59? 0.62? T:aes256otrsv3 0.57 0.59 0.61 T:aes256otrcv3 0.55? 0.60? 0.63? T:aes256otrpv3 0.67 0.67 0.69 T:deoxysi128v141 0.67 0.68 0.69 T:morus1280256v2 0.68 0.69 0.70 T:morus1280128v2 0.68 0.69 0.70 T:deoxysneq128128v1 0.68 0.69 0.70 T:morus1280256v1 0.68 0.69 0.70 T:morus1280128v1 0.74 0.75 0.77 T:deoxysi256v141 0.77 0.78 0.79 T:deoxysneq256128v1 0.92 0.95 0.97 T:aes128gcmv1 1.03 1.05 1.10 aes256gcmv1 1.05 1.08 1.09 T:norx6444v3 1.17 1.18 1.20 T:morus640128v1 1.17 1.19 1.20 T:morus640128v2 1.31 1.33 1.34 T:deoxysii128v141 1.37 1.38 1.40 T:colm0v1 1.41 1.43 1.44 T:deoxyseq128128v1 1.49 1.50 1.51 T:deoxysii256v141 1.63 1.65 1.67 T:deoxyseq256128v1 1.81 1.89 1.96 T:lunarkeyakv2 2.02 2.04 2.06 T:norx6441v2 2.06 2.08 2.09 T:norx6441v3 2.18 2.19 2.20 T:aes128n8t8clocv2 2.18 2.19 2.19 T:aes128n12t8clocv2 2.18 2.19 2.20 T:aes128n12t8silcv3 2.19 2.19 2.20 T:aes128n12t8clocv3 2.18 2.19 2.20 T:aes128n12t8silcv2 2.19 2.21 2.22 T:aes128n8t8silcv2 2.43 2.45 2.47 T:norx6441v1 2.58 2.64 2.68 T:seakeyakv2 2.62 2.69 2.75 T:oceankeyakv2 2.74 2.77 2.80 T:norx6444v2 2.92 3.00 3.09 T:lakekeyakv1 3.07 3.09 3.11 T:norx6461v3 3.10 3.11 3.12 T:norx6461v2 3.17 3.23 3.32 T:lakekeyakv2 3.29 3.32 3.36 T:norx6444v1 3.60 3.61 3.63 T:norx3241v3 3.63 3.66 3.67 T:norx3241v2 3.70 3.72 3.74 T:norx6461v1 4.12 4.20 4.49 T:acorn128v2 4.17 4.26 4.45 T:acorn128v3 4.37 4.38 4.40 T:norx3241v1 4.38 4.39 4.41 T:aesjambuv1 5.49 5.52 5.53 T:norx3261v3 5.54 5.57 5.60 T:norx3261v2 5.01? 5.75? 6.02? T:ketjemajorv2 6.35 6.43 6.50 T:ketjeminorv2 6.69 6.72 6.75 ascon128av12 6.71 6.74 6.76 T:ascon128av11 6.73 6.74 6.78 T:ascon96v1 7.35 7.44 7.57 T:riverkeyakv2 7.49 7.51 7.52 T:norx3261v1 9.93 9.95 9.99 T:ascon128v1 9.94 9.97 9.99 T:ascon128v11 10.03 10.08 10.11 ascon128v12 11.14 11.16 11.21 T:aes128otrpv2 11.13 11.17 11.19 T:aes128otrsv1 11.15 11.17 11.21 T:aes128otrsv2 11.16 11.20 11.21 T:aes128otrpv1 14.88 14.91 14.95 T:aes256otrpv2 14.86 14.91 14.95 T:aes256otrpv1 14.87 14.92 14.96 T:aes256otrsv1 14.92 14.95 15.00 T:aes256otrsv2 15.24 15.27 15.31 T:twine80n6t4clocv3 16.17 16.20 16.22 T:twine80n6t4clocv2 18.34 18.48 18.64 T:proest256otrv1 20.93 20.98 21.03 T:aeadaes128ocbtaglen96v1 21.01 21.04 21.12 T:aes128n8clocv1 20.97 21.05 21.10 T:aeadaes128ocbtaglen64v1 21.08 21.15 21.18 T:aes128n12clocv1 21.49 21.74 21.88 T:ketjesrv1 24.99 25.02 25.05 T:aeadaes192ocbtaglen96v1 25.00 25.05 25.11 T:aeadaes192ocbtaglen64v1 25.22 25.34 25.44 T:ketjesrv2 28.85 29.00 30.26 T:aeadaes256ocbtaglen64v1 28.91 29.29 30.16 T:aeadaes256ocbtaglen96v1 45.81 46.03 46.19 T:ketjejrv1 46.33 46.38 46.46 T:proest128otrv1 46.66 46.83 46.88 T:colm127v1 62.11 62.53 63.07 T:deoxysneq128128v13 67.32 67.51 68.82 T:ketjejrv2 72.11 72.17 72.20 T:present80n6t4silcv3 83.45 83.50 83.55 T:deoxysneq256128v13 123.26 123.85 124.16 T:deoxyseq128128v13 126.79 126.91 127.01 T:led80n6t4silcv3 129.04 129.59 130.11 T:aezv1 166.93 167.08 167.26 T:deoxyseq256128v13 407.37 413.52 414.18 T:acorn128 2582.33 2583.72 2585.34 T:led80n6t4silcv2 2583.90 2584.82 2585.15 T:led80n6silcv1 3135.02 3138.80 3151.54 T:present80n6t4silcv2 3146.89 3167.01 3221.41 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.23 0.24 0.24 aegis128l 0.23 0.24 0.25 T:aegis128l 0.14? 0.25? 0.29? T:aeadaes128ocbtaglen128v1 0.19? 0.29? 0.34? T:aeadaes256ocbtaglen128v1 0.34? 0.35? 0.38? T:aezv4 0.35? 0.36? 0.39? T:aezv3 0.38 0.39 0.39 T:aegis256 0.39 0.40 0.40 aegis256 0.39 0.40 0.41 T:aezv5 0.40 0.41 0.41 T:aegis128 0.37? 0.41? 0.43? T:aeadaes192ocbtaglen128v1 0.43 0.44 0.45 T:tiaoxinv2 0.44 0.45 0.46 T:tiaoxinv1 0.48 0.50 0.52 T:aes128otrpv3 0.48 0.50 0.52 T:aes128otrcv3 0.48 0.50 0.52 T:aes128otrsv3 0.62 0.64 0.66 T:aes256otrcv3 0.62 0.65 0.67 T:aes256otrpv3 0.62 0.65 0.68 T:aes256otrsv3 0.67 0.68 0.69 T:morus1280128v1 0.68 0.68 0.70 T:morus1280128v2 0.67 0.68 0.69 T:morus1280256v1 0.68 0.69 0.70 T:morus1280256v2 0.68 0.70 0.71 T:aes128gcmv1 0.77 0.79 0.80 T:deoxysi128v141 0.79 0.81 0.83 aes256gcmv1 0.80 0.81 0.82 T:deoxysneq128128v1 0.86 0.87 0.88 T:deoxysi256v141 0.88 0.90 0.91 T:deoxysneq256128v1 1.05 1.06 1.08 T:norx6444v3 1.15 1.16 1.17 T:morus640128v2 1.15 1.16 1.17 T:morus640128v1 1.32 1.34 1.35 T:deoxysii128v141 1.39 1.49 1.51 T:colm0v1 1.48 1.50 1.51 T:deoxysii256v141 1.67 1.70 1.71 T:deoxyseq128128v1 1.76 1.77 1.78 T:deoxyseq256128v1 1.88 1.95 2.06 T:lunarkeyakv2 1.95 1.97 1.98 T:norx6441v2 1.98 1.99 2.01 T:norx6441v3 1.99 2.00 2.12 T:aes128n12t8silcv2 1.99 2.00 2.12 T:aes128n12t8silcv3 2.10 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.14 T:aes128n8t8clocv2 2.11 2.13 2.14 T:aes128n12t8clocv2 2.11 2.13 2.14 T:aes128n12t8clocv3 2.40 2.43 2.46 T:norx6441v1 2.63 2.68 2.73 T:seakeyakv2 2.64 2.72 2.81 T:oceankeyakv2 2.76 2.82 2.85 T:norx6444v2 2.89 3.00 3.13 T:lakekeyakv1 3.03 3.06 3.09 T:norx6461v2 3.05 3.06 3.08 T:norx6461v3 3.15 3.23 3.32 T:lakekeyakv2 3.31 3.36 3.40 T:norx6444v1 3.54 3.55 3.57 T:norx3241v3 3.54 3.57 3.60 T:norx3241v2 3.71 3.74 3.75 T:norx6461v1 4.24 4.29 4.30 T:norx3241v1 4.15 4.31 4.45 T:acorn128v2 4.20? 4.35? 5.30? T:acorn128v3 4.67 4.68 4.69 T:aesjambuv1 4.59? 5.21? 5.48? T:ketjemajorv2 5.46 5.49 5.53 T:norx3261v3 5.47 5.52 5.56 T:norx3261v2 6.63 6.66 6.68 T:ascon128av11 6.64 6.67 6.70 T:ascon96v1 6.67 6.71 6.74 ascon128av12 6.97 7.08 7.18 T:ketjeminorv2 7.35 7.37 7.39 T:norx3261v1 7.51 7.59 7.66 T:riverkeyakv2 9.88 9.92 9.95 T:ascon128v11 9.89 9.93 9.95 T:ascon128v1 9.90 9.99 10.08 ascon128v12 11.50 11.53 11.66 T:aes128otrsv1 11.51 11.53 11.60 T:aes128otrpv1 11.46 11.54 11.59 T:aes128otrpv2 11.48 11.56 11.63 T:aes128otrsv2 15.23 15.27 15.33 T:aes256otrsv2 15.24 15.28 15.31 T:aes256otrsv1 15.23 15.29 15.34 T:aes256otrpv2 15.25 15.30 15.35 T:aes256otrpv1 15.23 15.31 15.35 T:twine80n6t4clocv3 16.12 16.17 16.23 T:twine80n6t4clocv2 18.23 18.34 18.78 T:proest256otrv1 18.83 18.94 19.04 T:aes128n12clocv1 19.13 19.21 19.27 T:aes128n8clocv1 22.46 22.58 22.83 T:ketjesrv2 24.75 25.19 25.26 T:ketjesrv1 34.67 34.75 34.87 T:aeadaes128ocbtaglen96v1 34.70 34.80 34.87 T:aeadaes128ocbtaglen64v1 42.06 42.20 42.27 T:aeadaes192ocbtaglen96v1 42.11 42.20 42.37 T:aeadaes192ocbtaglen64v1 45.97 46.45 46.74 T:ketjejrv1 46.79 46.88 46.95 T:proest128otrv1 49.44 49.49 49.58 T:aeadaes256ocbtaglen96v1 49.47 49.54 49.70 T:aeadaes256ocbtaglen64v1 69.30 69.62 71.18 T:ketjejrv2 71.97 72.05 72.11 T:present80n6t4silcv3 72.95 73.06 73.25 T:colm127v1 80.33 80.54 80.81 T:deoxysneq128128v13 113.84 113.91 114.29 T:deoxysneq256128v13 124.62 125.34 126.27 T:deoxyseq128128v13 126.70 126.85 127.21 T:led80n6t4silcv3 128.54 128.93 129.05 T:aezv1 166.75 166.90 166.98 T:deoxyseq256128v13 441.68 442.35 454.77 T:acorn128 2580.85 2582.43 2583.14 T:led80n6t4silcv2 2581.67 2582.66 2583.72 T:led80n6silcv1 3134.94 3143.54 3148.00 T:present80n6silcv1 3163.68 3213.29 3217.66 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13 0.14 0.14 T:aezv4 0.07? 0.19? 0.20? T:aezv3 0.15? 0.21? 0.22? T:aezv5 0.23 0.24 0.24 T:aegis128l 0.24 0.24 0.26 aegis128l 0.22? 0.24? 0.28? T:aeadaes128ocbtaglen128v1 -0.15? 0.28? 0.69? T:aeadaes256ocbtaglen128v1 0.39 0.39 0.39 T:aegis256 0.40 0.41 0.41 T:aegis128 0.41 0.41 0.42 aegis256 0.40? 0.43? 0.82? T:aeadaes192ocbtaglen128v1 0.43 0.44 0.45 T:tiaoxinv2 0.44 0.45 0.45 T:tiaoxinv1 0.49 0.50 0.52 T:aes128otrsv3 0.50 0.52 0.53 T:aes128otrcv3 0.50 0.52 0.53 T:aes128otrpv3 0.61 0.62 0.64 T:aes256otrpv3 0.62 0.63 0.64 T:aes256otrcv3 0.64 0.65 0.68 T:aes256otrsv3 0.68 0.68 0.69 T:morus1280128v1 0.67 0.68 0.69 T:morus1280128v2 0.68 0.68 0.69 T:morus1280256v2 0.67 0.68 0.69 T:morus1280256v1 0.68 0.70 0.71 T:aes128gcmv1 0.77 0.78 0.80 T:deoxysi128v141 0.80 0.81 0.82 T:deoxysneq128128v1 0.80 0.81 0.83 aes256gcmv1 0.86 0.88 0.90 T:deoxysi256v141 0.89 0.91 0.96 T:deoxysneq256128v1 1.03 1.06 1.07 T:norx6444v3 1.14 1.16 1.17 T:morus640128v2 1.14 1.16 1.17 T:morus640128v1 1.32 1.34 1.35 T:deoxysii128v141 1.29? 1.47? 1.49? T:colm0v1 1.49 1.50 1.52 T:deoxysii256v141 1.68 1.70 1.72 T:deoxyseq128128v1 1.76 1.77 1.79 T:deoxyseq256128v1 1.86 1.93 2.05 T:lunarkeyakv2 1.95 1.97 1.99 T:norx6441v2 1.98 1.99 2.10 T:aes128n12t8silcv2 1.98 1.99 2.11 T:aes128n12t8silcv3 1.98 2.00 2.01 T:norx6441v3 2.04 2.04 2.13 T:aes128n12t8clocv2 2.04 2.12 2.13 T:aes128n12t8clocv3 2.11 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.13 T:aes128n8t8clocv2 2.42 2.46 2.47 T:norx6441v1 2.62 2.69 2.73 T:seakeyakv2 2.68 2.75 2.78 T:oceankeyakv2 2.77 2.83 2.85 T:norx6444v2 2.96 3.04 3.11 T:lakekeyakv1 3.04 3.05 3.08 T:norx6461v2 3.04 3.06 3.08 T:norx6461v3 3.18 3.25 3.31 T:lakekeyakv2 3.33 3.37 3.40 T:norx6444v1 3.53 3.56 3.57 T:norx3241v3 3.55 3.57 3.60 T:norx3241v2 3.72 3.74 3.77 T:norx6461v1 4.19? 4.25? 5.22? T:acorn128v3 4.25 4.28 4.32 T:norx3241v1 4.29 4.39 4.56 T:acorn128v2 4.67 4.68 4.69 T:aesjambuv1 4.53? 4.92? 5.33? T:ketjemajorv2 5.47 5.49 5.51 T:norx3261v3 5.48 5.50 5.52 T:norx3261v2 6.62 6.66 6.68 T:ascon128av11 6.63 6.67 6.70 T:ascon96v1 6.68 6.70 6.73 ascon128av12 7.02 7.10 7.21 T:ketjeminorv2 7.36 7.37 7.39 T:norx3261v1 7.43 7.55 7.62 T:riverkeyakv2 9.89 9.93 9.97 T:ascon128v1 9.89 9.93 9.99 T:ascon128v11 9.91 9.97 10.04 ascon128v12 11.45 11.56 11.61 T:aes128otrpv1 11.52 11.57 11.64 T:aes128otrsv1 11.48 11.57 11.61 T:aes128otrsv2 11.53 11.59 11.66 T:aes128otrpv2 15.17 15.23 15.34 T:aes256otrsv2 15.19 15.27 15.33 T:twine80n6t4clocv3 15.22 15.29 15.35 T:aes256otrpv1 15.21 15.30 15.34 T:aes256otrpv2 15.22 15.31 15.34 T:aes256otrsv1 16.11 16.18 16.22 T:twine80n6t4clocv2 18.29 18.45 18.64 T:proest256otrv1 18.76 18.86 19.21 T:aes128n12clocv1 19.17 19.24 19.40 T:aes128n8clocv1 22.55 22.74 22.90 T:ketjesrv2 24.75 25.18 25.26 T:ketjesrv1 34.73 34.81 34.86 T:aeadaes128ocbtaglen64v1 34.78 34.83 34.95 T:aeadaes128ocbtaglen96v1 42.10 42.14 42.21 T:aeadaes192ocbtaglen96v1 42.18 42.27 42.48 T:aeadaes192ocbtaglen64v1 46.53 46.68 46.92 T:ketjejrv1 46.80 46.85 46.90 T:proest128otrv1 49.40 49.48 49.56 T:aeadaes256ocbtaglen96v1 49.47 49.55 49.65 T:aeadaes256ocbtaglen64v1 69.53 69.71 71.14 T:ketjejrv2 71.96 72.02 72.05 T:present80n6t4silcv3 71.99 72.14 72.26 T:colm127v1 80.71 81.07 81.90 T:deoxysneq128128v13 113.79 113.96 114.18 T:deoxysneq256128v13 123.56 124.47 125.13 T:deoxyseq128128v13 126.69 126.83 126.93 T:led80n6t4silcv3 128.42 128.55 129.09 T:aezv1 166.85 166.93 167.14 T:deoxyseq256128v13 440.91 442.80 454.30 T:acorn128 2581.33 2582.55 2583.82 T:led80n6t4silcv2 2581.75 2582.82 2583.51 T:led80n6silcv1 3136.35 3143.89 3149.36 T:present80n6silcv1 3135.51 3149.32 3173.35 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.14? 0.16? 0.18? T:tiaoxinv1 0.15? 0.17? 0.18? T:tiaoxinv2 0.15? 0.21? 0.26? T:aeadaes128ocbtaglen128v1 0.21 0.21 0.22 T:aegis128l 0.21 0.21 0.22 aegis128l 0.07? 0.26? 0.46? T:aeadaes256ocbtaglen128v1 0.24? 0.26? 0.28? T:aezv3 0.25? 0.26? 0.28? T:aezv4 0.26? 0.27? 0.29? T:aezv5 0.31? 0.38? 0.46? T:aeadaes192ocbtaglen128v1 0.38 0.39 0.39 aegis256 0.38 0.39 0.40 T:aegis256 0.39 0.39 0.40 T:aegis128 0.46 0.47 0.48 T:aes128otrpv3 0.47 0.48 0.49 T:aes128otrcv3 0.57 0.58 0.60 T:aes256otrpv3 0.60 0.62 0.63 T:aes256otrcv3 0.61 0.63 0.64 T:aes128gcmv1 0.66 0.66 0.67 T:morus1280256v1 0.66 0.66 0.67 T:morus1280256v2 0.66 0.67 0.67 T:morus1280128v2 0.66 0.67 0.67 T:morus1280128v1 0.66 0.67 0.69 T:deoxysi128v141 0.67 0.69 0.70 aes256gcmv1 0.68 0.69 0.70 T:deoxysneq128128v1 0.74 0.76 0.78 T:deoxysi256v141 0.75 0.77 0.79 T:deoxysneq256128v1 0.97 0.98 1.00 T:colm0v1 1.00 1.00 1.01 T:deoxysii128v141 1.06 1.07 1.08 T:deoxyseq128128v1 1.12 1.13 1.14 T:deoxysii256v141 1.14 1.15 1.16 T:morus640128v1 1.14 1.15 1.16 T:morus640128v2 1.23 1.24 1.25 T:deoxyseq256128v1 1.28 1.29 1.29 T:aes128otrsv3 1.56 1.57 1.60 T:norx6444v3 1.71 1.73 1.75 T:aes256otrsv3 2.04 2.05 2.07 T:norx6441v3 2.04 2.05 2.06 T:norx6441v2 2.16 2.16 2.17 T:aes128n12t8silcv3 2.16 2.16 2.17 T:aes128n12t8silcv2 2.16 2.17 2.17 T:aes128n8t8clocv2 2.16 2.17 2.17 T:aes128n8t8silcv2 2.17 2.17 2.17 T:aes128n12t8clocv3 2.17 2.17 2.18 T:aes128n12t8clocv2 2.17 2.22 2.27 T:oceankeyakv2 2.20 2.24 2.26 T:seakeyakv2 2.45 2.47 2.48 T:norx6441v1 2.62 2.65 2.69 T:lunarkeyakv2 2.65 2.67 2.71 T:norx6444v2 2.82 2.85 2.90 T:lakekeyakv1 2.82 2.85 2.89 T:lakekeyakv2 3.09 3.10 3.12 T:norx6461v3 3.10 3.12 3.14 T:norx6461v2 3.18 3.20 3.24 T:norx6444v1 3.63 3.64 3.65 T:norx3241v3 3.66 3.67 3.68 T:norx3241v2 3.69 3.70 3.72 T:norx6461v1 4.34 4.35 4.35 T:aesjambuv1 4.38 4.40 4.41 T:norx3241v1 4.29? 4.56? 4.82? T:acorn128v2 4.27? 4.62? 4.91? T:acorn128v3 4.49 4.65 4.78 T:ketjemajorv2 5.28 5.32 5.37 T:riverkeyakv2 5.51 5.53 5.55 T:norx3261v2 5.52 5.54 5.56 T:norx3261v3 5.98 6.12 6.23 T:ketjeminorv2 6.56 6.58 6.60 T:ascon128av11 6.57 6.58 6.61 T:ascon96v1 6.68 6.71 6.73 ascon128av12 7.51 7.52 7.54 T:norx3261v1 9.78 9.80 9.82 T:ascon128v11 9.78 9.80 9.82 T:ascon128v1 9.99 10.01 10.03 ascon128v12 10.83 10.86 10.89 T:aes128otrpv2 10.85 10.88 10.90 T:aes128otrpv1 11.21 11.23 11.25 T:aes128otrsv1 11.19 11.23 11.26 T:aes128otrsv2 14.60 14.62 14.65 T:aes256otrpv2 14.60 14.62 14.63 T:aes256otrpv1 14.96 14.98 15.00 T:aes256otrsv1 15.00 15.01 15.03 T:aes256otrsv2 15.04 15.06 15.08 T:twine80n6t4clocv3 15.82 15.84 15.86 T:twine80n6t4clocv2 16.21 16.25 16.27 T:aes128n8clocv1 16.24 16.27 16.31 T:aes128n12clocv1 18.24 18.39 18.63 T:proest256otrv1 20.70 20.72 20.75 T:aeadaes128ocbtaglen64v1 20.70 20.73 20.77 T:aeadaes128ocbtaglen96v1 20.79 21.26 21.33 T:ketjesrv1 23.00 23.06 23.22 T:ketjesrv2 24.70 24.73 24.75 T:aeadaes192ocbtaglen64v1 24.69 24.73 24.75 T:aeadaes192ocbtaglen96v1 28.63 28.76 29.47 T:aeadaes256ocbtaglen96v1 29.37 29.82 29.98 T:aeadaes256ocbtaglen64v1 34.67 34.75 34.84 T:colm127v1 42.94 43.09 43.53 T:ketjejrv1 46.76 46.80 46.84 T:proest128otrv1 61.22 61.62 67.22 T:deoxysneq128128v13 64.95 65.07 66.64 T:ketjejrv2 71.60 71.66 71.71 T:present80n6t4silcv3 83.82 83.85 83.89 T:deoxysneq256128v13 84.70 84.82 85.20 T:aezv1 91.07 93.22 97.05 T:deoxyseq128128v13 125.02 125.14 125.19 T:deoxyseq256128v13 126.49 126.64 126.72 T:led80n6t4silcv3 409.48 412.39 412.84 T:acorn128 1936.85 1937.18 1941.08 T:led80n6t4silcv2 1937.70 1938.20 1942.10 T:led80n6silcv1 2351.23 2358.47 2380.02 T:present80n6silcv1 2350.65 2367.44 2414.91 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.21 0.21 0.22 T:aegis128l 0.15? 0.21? 0.24? T:aeadaes128ocbtaglen128v1 0.20? 0.21? 0.24? aegis128l 0.06? 0.27? 0.46? T:aeadaes256ocbtaglen128v1 0.25? 0.27? 0.28? T:aezv4 0.26 0.27 0.28 T:aezv3 0.26 0.28 0.28 T:tiaoxinv1 0.26? 0.28? 0.30? T:tiaoxinv2 0.24? 0.28? 0.29? T:aezv5 0.38 0.38 0.39 T:aegis256 0.39 0.39 0.39 T:aegis128 0.39 0.39 0.39 aegis256 0.19? 0.40? 0.60? T:aeadaes192ocbtaglen128v1 0.48 0.50 0.52 T:aes128gcmv1 0.49 0.50 0.51 T:aes128otrpv3 0.48 0.50 0.51 T:aes128otrcv3 0.55 0.57 0.58 aes256gcmv1 0.60 0.62 0.63 T:aes256otrpv3 0.62 0.64 0.65 T:aes256otrcv3 0.66 0.66 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280128v2 0.66 0.67 0.67 T:morus1280256v2 0.66 0.67 0.67 T:morus1280128v1 0.72 0.73 0.74 T:deoxysi128v141 0.74 0.75 0.75 T:deoxysneq128128v1 0.81 0.82 0.83 T:deoxysi256v141 0.81 0.82 0.85 T:deoxysneq256128v1 0.97 1.00 1.04 T:colm0v1 1.00 1.01 1.03 T:deoxysii128v141 1.12 1.13 1.15 T:morus640128v2 1.13 1.13 1.14 T:morus640128v1 1.12 1.13 1.14 T:deoxysii256v141 1.19 1.20 1.21 T:deoxyseq128128v1 1.28 1.29 1.30 T:deoxyseq256128v1 1.29 1.30 1.31 T:aes128otrsv3 1.56 1.57 1.58 T:norx6444v3 1.74 1.76 1.77 T:aes256otrsv3 2.03 2.04 2.05 T:norx6441v2 2.05 2.05 2.06 T:norx6441v3 2.06 2.06 2.14 T:aes128n12t8silcv3 2.06 2.06 2.19 T:aes128n12t8silcv2 2.12 2.13 2.14 T:aes128n12t8clocv2 2.12 2.13 2.13 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n8t8silcv2 2.12 2.14 2.19 T:aes128n8t8clocv2 2.20 2.24 2.32 T:oceankeyakv2 2.23 2.26 2.29 T:seakeyakv2 2.43 2.44 2.45 T:norx6441v1 2.64 2.67 2.72 T:norx6444v2 2.64 2.70 2.77 T:lunarkeyakv2 2.79 2.84 2.91 T:lakekeyakv2 2.79 2.87 2.95 T:lakekeyakv1 3.05 3.06 3.07 T:norx6461v3 3.08 3.09 3.10 T:norx6461v2 3.18 3.23 3.26 T:norx6444v1 3.60 3.60 3.62 T:norx3241v3 3.61 3.62 3.62 T:norx3241v2 3.66 3.67 3.69 T:norx6461v1 4.34 4.36 4.36 T:norx3241v1 4.29 4.39 4.62 T:ketjemajorv2 4.20 4.41 4.57 T:acorn128v2 4.49 4.49 4.50 T:aesjambuv1 4.70 4.77 4.93 T:acorn128v3 5.35 5.40 5.45 T:riverkeyakv2 5.48 5.49 5.52 T:norx3261v2 5.51 5.52 5.55 T:norx3261v3 6.33 6.43 6.53 T:ketjeminorv2 6.50 6.52 6.56 T:ascon96v1 6.51 6.53 6.54 T:ascon128av11 6.66 6.67 6.70 ascon128av12 7.43 7.44 7.45 T:norx3261v1 9.70 9.72 9.75 T:ascon128v11 9.73 9.74 9.77 T:ascon128v1 9.96 9.99 10.04 ascon128v12 11.02 11.03 11.09 T:aes128otrpv1 11.01 11.04 11.08 T:aes128otrpv2 11.39 11.42 11.44 T:aes128otrsv1 11.38 11.43 11.47 T:aes128otrsv2 14.74 14.77 14.82 T:aes256otrpv2 14.76 14.79 14.83 T:aes256otrpv1 15.01 15.07 15.10 T:twine80n6t4clocv3 15.10 15.13 15.23 T:aes128n12clocv1 15.13 15.16 15.18 T:aes256otrsv1 15.14 15.17 15.20 T:aes256otrsv2 15.32 15.35 15.39 T:aes128n8clocv1 15.78 15.84 15.87 T:twine80n6t4clocv2 18.45 18.51 18.68 T:proest256otrv1 21.61 21.67 21.77 T:ketjesrv2 22.68 22.88 22.97 T:ketjesrv1 27.56 27.62 27.67 T:aeadaes128ocbtaglen64v1 27.57 27.62 27.66 T:aeadaes128ocbtaglen96v1 33.24 33.29 33.34 T:aeadaes192ocbtaglen96v1 33.27 33.33 33.38 T:aeadaes192ocbtaglen64v1 38.93 39.33 39.56 T:aeadaes256ocbtaglen96v1 39.45 39.52 39.61 T:aeadaes256ocbtaglen64v1 43.33 43.49 43.80 T:ketjejrv1 46.99 47.05 47.12 T:proest128otrv1 47.93 47.99 48.08 T:colm127v1 66.20 66.34 67.73 T:ketjejrv2 70.90 71.04 71.31 T:deoxysneq128128v13 71.53 71.59 71.78 T:present80n6t4silcv3 84.66 84.74 84.93 T:aezv1 91.83 92.84 93.01 T:deoxyseq128128v13 99.08 99.16 99.30 T:deoxysneq256128v13 125.00 125.12 125.23 T:deoxyseq256128v13 126.46 126.60 126.86 T:led80n6t4silcv3 426.83 427.82 432.07 T:acorn128 1935.37 1936.01 1936.65 T:led80n6t4silcv2 1936.32 1936.62 1937.27 T:led80n6silcv1 2352.54 2362.97 2384.42 T:present80n6silcv1 2353.70 2363.46 2371.77 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.12? 0.13? 0.19? T:aezv5 0.14 0.15 0.15 T:aezv4 0.12? 0.15? 0.19? T:aezv3 0.21 0.21 0.21 T:aegis128l 0.20? 0.21? 0.23? T:aeadaes128ocbtaglen128v1 0.21 0.21 0.22 aegis128l 0.24? 0.26? 0.28? T:aeadaes256ocbtaglen128v1 0.27 0.28 0.30 T:tiaoxinv1 0.27 0.28 0.28 T:tiaoxinv2 0.38 0.38 0.39 T:aegis256 0.39 0.39 0.39 T:aegis128 0.39 0.39 0.41 T:aeadaes192ocbtaglen128v1 0.39 0.40 0.40 aegis256 0.48 0.49 0.50 T:aes128otrcv3 0.48 0.49 0.51 T:aes128gcmv1 0.49 0.49 0.50 T:aes128otrpv3 0.56 0.57 0.58 aes256gcmv1 0.60 0.61 0.62 T:aes256otrpv3 0.63 0.64 0.64 T:aes256otrcv3 0.66 0.66 0.67 T:morus1280128v1 0.66 0.67 0.67 T:morus1280256v2 0.66 0.67 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280128v2 0.73 0.73 0.74 T:deoxysi128v141 0.75 0.75 0.76 T:deoxysneq128128v1 0.81 0.82 0.83 T:deoxysi256v141 0.80 0.84 0.85 T:deoxysneq256128v1 0.93? 0.98? 1.04? T:colm0v1 1.00 1.01 1.01 T:deoxysii128v141 1.12 1.13 1.13 T:morus640128v1 1.12 1.13 1.14 T:morus640128v2 1.13 1.13 1.14 T:deoxysii256v141 1.18 1.21 1.23 T:deoxyseq128128v1 1.28 1.30 1.33 T:deoxyseq256128v1 1.30 1.30 1.30 T:aes128otrsv3 1.56 1.57 1.58 T:norx6444v3 1.76 1.76 1.77 T:aes256otrsv3 2.04 2.05 2.05 T:norx6441v2 2.04 2.05 2.06 T:norx6441v3 2.06 2.06 2.19 T:aes128n12t8silcv3 2.06 2.06 2.19 T:aes128n12t8silcv2 2.07 2.12 2.19 T:aes128n12t8clocv3 2.12 2.13 2.14 T:aes128n8t8silcv2 2.06 2.14 2.19 T:aes128n8t8clocv2 2.07 2.19 2.19 T:aes128n12t8clocv2 2.22 2.25 2.29 T:seakeyakv2 2.22 2.27 2.33 T:oceankeyakv2 2.42 2.44 2.46 T:norx6441v1 2.67 2.71 2.73 T:norx6444v2 2.67 2.72 2.76 T:lunarkeyakv2 2.81 2.84 2.88 T:lakekeyakv2 2.82 2.87 2.95 T:lakekeyakv1 3.06 3.07 3.08 T:norx6461v3 3.08 3.09 3.10 T:norx6461v2 3.19 3.23 3.26 T:norx6444v1 3.60 3.61 3.63 T:norx3241v3 3.61 3.62 3.63 T:norx3241v2 3.65 3.66 3.67 T:norx6461v1 4.22 4.34 4.52 T:acorn128v3 4.34 4.35 4.36 T:norx3241v1 4.49 4.49 4.50 T:aesjambuv1 4.30 4.61 4.72 T:ketjemajorv2 4.55 4.73 4.84 T:acorn128v2 5.35 5.41 5.46 T:riverkeyakv2 5.48 5.50 5.52 T:norx3261v2 5.51 5.55 5.57 T:norx3261v3 6.37 6.42 6.49 T:ketjeminorv2 6.48 6.51 6.54 T:ascon96v1 6.51 6.53 6.54 T:ascon128av11 6.66 6.68 6.69 ascon128av12 7.43 7.44 7.45 T:norx3261v1 9.72 9.74 9.77 T:ascon128v11 9.71 9.75 9.78 T:ascon128v1 9.95 10.00 10.04 ascon128v12 11.02 11.06 11.09 T:aes128otrpv1 11.00 11.07 11.08 T:aes128otrpv2 11.35 11.40 11.43 T:aes128otrsv2 11.37 11.44 11.47 T:aes128otrsv1 14.74 14.79 14.86 T:aes256otrpv1 14.75 14.81 14.85 T:aes256otrpv2 14.99 15.06 15.09 T:twine80n6t4clocv3 15.09 15.12 15.18 T:aes128n12clocv1 15.13 15.16 15.21 T:aes256otrsv2 15.12 15.17 15.20 T:aes256otrsv1 15.31 15.36 15.41 T:aes128n8clocv1 15.80 15.85 15.86 T:twine80n6t4clocv2 18.13 18.46 19.03 T:proest256otrv1 21.60 21.71 21.80 T:ketjesrv2 22.49 22.93 23.06 T:ketjesrv1 27.58 27.64 27.67 T:aeadaes128ocbtaglen64v1 27.60 27.66 27.70 T:aeadaes128ocbtaglen96v1 33.25 33.29 33.35 T:aeadaes192ocbtaglen96v1 33.29 33.35 33.41 T:aeadaes192ocbtaglen64v1 38.93 38.95 39.17 T:aeadaes256ocbtaglen96v1 39.28 39.54 39.66 T:aeadaes256ocbtaglen64v1 42.82 43.12 43.48 T:ketjejrv1 47.02 47.06 47.11 T:proest128otrv1 47.22 47.47 47.57 T:colm127v1 66.00 66.15 67.74 T:ketjejrv2 70.49 71.36 71.52 T:deoxysneq128128v13 71.50 71.55 71.62 T:present80n6t4silcv3 84.60 84.65 84.73 T:aezv1 92.73 93.75 96.57 T:deoxyseq128128v13 99.06 99.15 99.27 T:deoxysneq256128v13 125.06 125.13 125.22 T:deoxyseq256128v13 126.47 126.55 126.63 T:led80n6t4silcv3 427.42 428.83 433.20 T:acorn128 1933.31 1936.02 1936.87 T:led80n6t4silcv2 1936.59 1937.10 1938.37 T:led80n6silcv1 2355.55 2379.16 2407.95 T:present80n6silcv1 2357.63 2384.86 2413.60 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.11? 0.12? 0.13? T:tiaoxinv1 0.11? 0.12? 0.13? T:tiaoxinv2 0.15? 0.15? 0.19? T:aezv3 0.16? 0.16? 0.18? T:aezv5 0.16? 0.17? 0.19? T:aezv4 0.18 0.19 0.19 T:aegis128l 0.18? 0.19? 0.21? aegis128l 0.14? 0.20? 0.24? T:aeadaes128ocbtaglen128v1 -0.14? 0.25? 0.65? T:aeadaes256ocbtaglen128v1 0.30? 0.33? 0.35? aes256gcmv1 0.29? 0.33? 0.35? T:aes128gcmv1 0.37 0.38 0.38 T:aegis256 0.37 0.38 0.39 T:aegis128 0.38 0.38 0.39 aegis256 0.34? 0.42? 0.79? T:aeadaes192ocbtaglen128v1 0.45 0.48 0.50 T:aes128otrpv3 0.48 0.50 0.52 T:aes128otrcv3 0.55 0.56 0.58 T:colm0v1 0.56 0.59 0.62 T:aes256otrpv3 0.64 0.64 0.66 T:morus1280256v2 0.63 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.67 T:aes256otrcv3 0.66 0.67 0.68 T:deoxysii128v141 0.67 0.68 0.68 T:deoxysi128v141 0.68 0.69 0.70 T:deoxysneq128128v1 0.70 0.71 0.72 T:deoxyseq128128v1 0.74 0.76 0.77 T:deoxysii256v141 0.75 0.76 0.77 T:deoxysi256v141 0.75 0.76 0.78 T:deoxysneq256128v1 0.82 0.83 0.85 T:deoxyseq256128v1 1.09 1.11 1.12 T:morus640128v2 1.10 1.11 1.12 T:morus640128v1 1.68 1.76 1.84 T:lunarkeyakv2 1.71 1.76 1.83 T:oceankeyakv2 2.00 2.02 2.04 T:norx6441v3 2.02 2.04 2.05 T:norx6441v2 2.06 2.07 2.09 T:norx6444v3 2.11 2.11 2.12 T:aes128n8t8clocv2 2.10 2.12 2.12 T:aes128n12t8clocv2 2.11 2.12 2.13 T:aes128n12t8silcv2 2.11 2.12 2.13 T:aes128n12t8clocv3 2.11 2.12 2.12 T:aes128otrsv3 2.11 2.12 2.12 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128n8t8silcv2 2.09 2.12 2.16 T:seakeyakv2 2.44 2.45 2.47 T:norx6441v1 2.50 2.53 2.57 T:norx6444v2 2.53 2.59 2.62 T:lakekeyakv2 2.58? 2.66? 2.88? T:lakekeyakv1 2.87 2.87 2.87 T:aes256otrsv3 3.00 3.05 3.10 T:norx6444v1 3.09 3.11 3.12 T:norx6461v3 3.10 3.13 3.14 T:norx6461v2 3.63 3.66 3.68 T:norx3241v3 3.64 3.66 3.69 T:norx3241v2 3.67 3.69 3.71 T:norx6461v1 4.05? 4.28? 4.89? T:acorn128v2 4.29 4.31 4.31 T:aesjambuv1 3.95? 4.37? 4.58? T:ketjemajorv2 4.38 4.40 4.43 T:norx3241v1 4.36? 5.01? 5.10? T:riverkeyakv2 4.77 5.06 5.18 T:acorn128v3 5.44 5.47 5.49 T:norx3261v2 5.53 5.55 5.57 T:norx3261v3 5.63 5.82 5.97 T:ketjeminorv2 6.29 6.40 6.43 T:ascon128av11 6.35 6.41 6.45 T:ascon96v1 6.64 6.67 6.70 ascon128av12 7.50 7.51 7.52 T:norx3261v1 9.60 9.63 9.64 T:ascon128v11 9.61 9.64 9.66 T:ascon128v1 9.98 10.00 10.05 ascon128v12 10.46 10.49 10.53 T:aes128otrpv1 10.47 10.50 10.56 T:aes128otrpv2 11.23 11.25 11.28 T:aes128otrsv1 11.23 11.27 11.29 T:aes128otrsv2 11.41 11.44 11.51 T:aes128n12clocv1 11.40 11.47 11.50 T:aes128n8clocv1 14.22 14.25 14.27 T:aes256otrpv2 14.25 14.28 14.32 T:aes256otrpv1 14.80 14.84 14.87 T:twine80n6t4clocv3 15.01 15.04 15.08 T:aes256otrsv2 15.03 15.04 15.07 T:aes256otrsv1 14.64 15.49 15.53 T:twine80n6t4clocv2 18.27 18.65 19.01 T:proest256otrv1 20.34 20.38 20.45 T:aeadaes128ocbtaglen96v1 20.34 20.39 20.44 T:aeadaes128ocbtaglen64v1 20.51 20.60 20.78 T:ketjesrv2 20.42 20.64 20.88 T:ketjesrv1 22.80 22.90 23.02 T:colm127v1 24.38 24.43 24.47 T:aeadaes192ocbtaglen96v1 24.40 24.44 24.51 T:aeadaes192ocbtaglen64v1 29.09 29.46 29.56 T:aeadaes256ocbtaglen64v1 28.44 29.63 29.83 T:aeadaes256ocbtaglen96v1 40.14 40.28 40.39 T:ketjejrv1 40.72 40.78 40.96 T:aezv1 47.18 47.27 47.37 T:proest128otrv1 59.88 60.09 60.76 T:deoxyseq128128v13 60.38 60.96 61.82 T:deoxysneq128128v13 63.03 63.23 64.86 T:ketjejrv2 71.09 71.18 71.23 T:present80n6t4silcv3 82.98 83.04 83.10 T:deoxyseq256128v13 84.17 84.25 84.29 T:deoxysneq256128v13 126.14 126.26 126.41 T:led80n6t4silcv3 410.21 410.90 411.62 T:acorn128 1290.81 1291.53 1294.21 T:led80n6t4silcv2 1291.14 1291.85 1292.77 T:led80n6silcv1 1570.77 1573.51 1580.49 T:present80n6t4silcv2 1564.61 1577.30 1605.81 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.11? 0.12? 0.13? T:tiaoxinv1 0.11? 0.12? 0.13? T:tiaoxinv2 0.17 0.17 0.18 T:aezv5 0.17? 0.18? 0.19? T:aezv4 0.18 0.19 0.19 aegis128l 0.18 0.19 0.19 T:aegis128l 0.18? 0.19? 0.20? T:aezv3 0.17? 0.20? 0.24? T:aeadaes128ocbtaglen128v1 -0.15? 0.23? 0.66? T:aeadaes256ocbtaglen128v1 0.31 0.33 0.34 T:aes128gcmv1 0.32? 0.34? 0.36? aes256gcmv1 0.36 0.37 0.38 T:aegis128 0.37 0.37 0.38 T:aegis256 0.38 0.38 0.38 aegis256 -0.00? 0.40? 0.42? T:aeadaes192ocbtaglen128v1 0.47 0.49 0.51 T:aes128otrpv3 0.48 0.49 0.51 T:aes128otrcv3 0.51? 0.52? 0.58? T:colm0v1 0.58 0.61 0.63 T:aes256otrpv3 0.62 0.63 0.64 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280256v1 0.66 0.67 0.68 T:deoxysii128v141 0.67 0.68 0.69 T:deoxysi128v141 0.68 0.69 0.69 T:deoxysneq128128v1 0.70 0.71 0.72 T:deoxyseq128128v1 0.74 0.75 0.77 T:deoxysi256v141 0.75 0.77 0.77 T:deoxysii256v141 0.74 0.80 0.82 T:deoxysneq256128v1 0.80 0.81 0.82 T:deoxyseq256128v1 1.10 1.11 1.13 T:morus640128v1 1.09 1.11 1.12 T:morus640128v2 1.63? 1.74? 1.82? T:lunarkeyakv2 1.70 1.77 1.79 T:oceankeyakv2 2.00 2.02 2.12 T:aes128n12t8silcv2 2.00 2.02 2.11 T:aes128n12t8silcv3 2.05 2.08 2.09 T:norx6444v3 2.07 2.08 2.10 T:norx6441v2 2.07 2.08 2.10 T:norx6441v3 2.11 2.12 2.16 T:aes128n8t8clocv2 2.12 2.12 2.13 T:aes128otrsv3 2.12 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.14 T:aes128n12t8clocv3 2.11 2.14 2.21 T:aes128n12t8clocv2 2.10 2.14 2.16 T:seakeyakv2 2.43 2.44 2.46 T:norx6441v1 2.49 2.54 2.61 T:norx6444v2 2.49 2.54 2.60 T:lakekeyakv2 2.63 2.71 2.79 T:lakekeyakv1 2.87 2.87 2.88 T:aes256otrsv3 2.95 3.05 3.18 T:norx6444v1 3.05 3.07 3.10 T:norx6461v3 3.09 3.11 3.14 T:norx6461v2 3.65 3.66 3.68 T:norx6461v1 3.65 3.66 3.68 T:norx3241v2 3.65 3.67 3.69 T:norx3241v3 3.58? 4.02? 4.19? T:ketjemajorv2 4.02 4.19 4.30 T:acorn128v2 4.17 4.30 4.42 T:acorn128v3 4.30 4.31 4.32 T:aesjambuv1 4.39 4.40 4.44 T:norx3241v1 4.73 5.03 5.12 T:riverkeyakv2 5.45 5.47 5.49 T:norx3261v2 5.53 5.55 5.57 T:norx3261v3 5.62 5.77 5.92 T:ketjeminorv2 6.36 6.38 6.41 T:ascon128av11 6.32 6.39 6.48 T:ascon96v1 6.63 6.65 6.70 ascon128av12 7.49 7.51 7.53 T:norx3261v1 9.53 9.56 9.59 T:ascon128v11 9.56 9.59 9.60 T:ascon128v1 9.97 10.02 10.06 ascon128v12 10.48 10.52 10.55 T:aes128otrpv1 10.50 10.55 10.58 T:aes128otrpv2 11.22 11.28 11.33 T:aes128otrsv1 11.21 11.29 11.34 T:aes128otrsv2 11.41 11.46 11.51 T:aes128n12clocv1 11.40 11.46 11.50 T:aes128n8clocv1 14.27 14.29 14.33 T:aes256otrpv1 14.26 14.30 14.35 T:aes256otrpv2 14.79 14.84 14.93 T:twine80n6t4clocv3 15.03 15.07 15.10 T:aes256otrsv1 15.03 15.07 15.10 T:aes256otrsv2 14.96 15.41 15.52 T:twine80n6t4clocv2 18.40 18.80 18.96 T:proest256otrv1 20.37 20.43 20.48 T:aeadaes128ocbtaglen64v1 20.40 20.44 20.49 T:aeadaes128ocbtaglen96v1 20.55 20.62 20.72 T:ketjesrv2 20.72 20.86 20.97 T:ketjesrv1 22.77 22.95 23.01 T:colm127v1 24.37 24.41 24.47 T:aeadaes192ocbtaglen64v1 24.33 24.44 24.50 T:aeadaes192ocbtaglen96v1 28.30 29.07 29.80 T:aeadaes256ocbtaglen96v1 29.16 29.47 29.78 T:aeadaes256ocbtaglen64v1 40.15 40.31 40.49 T:ketjejrv1 40.75 40.80 40.92 T:aezv1 47.20 47.26 47.37 T:proest128otrv1 58.77 60.08 60.86 T:deoxysneq128128v13 60.50 60.69 60.93 T:deoxyseq128128v13 63.00 63.39 64.75 T:ketjejrv2 71.06 71.19 71.24 T:present80n6t4silcv3 83.02 83.08 83.15 T:deoxyseq256128v13 84.21 84.31 84.36 T:deoxysneq256128v13 126.24 126.38 126.69 T:led80n6t4silcv3 411.06 411.99 412.79 T:acorn128 1290.27 1291.07 1292.70 T:led80n6t4silcv2 1291.33 1292.32 1293.15 T:led80n6silcv1 1564.60 1573.83 1579.96 T:present80n6silcv1 1568.27 1579.52 1606.20 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.11? 0.12? 0.14? T:tiaoxinv1 0.12? 0.12? 0.14? T:tiaoxinv2 0.17 0.17 0.17 T:aezv5 0.16? 0.17? 0.18? T:aezv4 0.18 0.18 0.19 T:aezv3 0.18 0.19 0.19 T:aegis128l 0.19 0.19 0.20 aegis128l 0.17? 0.21? 0.24? T:aeadaes128ocbtaglen128v1 0.22? 0.25? 0.29? T:aeadaes256ocbtaglen128v1 0.31 0.33 0.34 T:aes128gcmv1 0.32 0.35 0.35 aes256gcmv1 0.37 0.37 0.38 T:aegis128 0.37 0.38 0.38 T:aegis256 0.38 0.38 0.39 aegis256 0.38? 0.40? 0.80? T:aeadaes192ocbtaglen128v1 0.47 0.49 0.50 T:aes128otrpv3 0.49 0.50 0.51 T:aes128otrcv3 0.51? 0.52? 0.58? T:colm0v1 0.58 0.60 0.62 T:aes256otrpv3 0.63 0.63 0.64 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280256v1 0.67 0.68 0.69 T:deoxysii128v141 0.67 0.69 0.71 T:deoxysneq128128v1 0.67 0.70 0.71 T:deoxysi128v141 0.71 0.72 0.73 T:deoxyseq128128v1 0.74 0.75 0.76 T:deoxysi256v141 0.76 0.77 0.78 T:deoxysii256v141 0.71? 0.79? 0.81? T:deoxysneq256128v1 0.81 0.82 0.82 T:deoxyseq256128v1 1.09 1.10 1.12 T:morus640128v2 1.10 1.10 1.12 T:morus640128v1 1.64 1.75 1.79 T:lunarkeyakv2 1.70 1.75 1.83 T:oceankeyakv2 1.98 1.99 2.13 T:aes128n12t8clocv3 1.98 1.99 2.14 T:aes128n12t8clocv2 1.99 1.99 2.00 T:aes128n12t8silcv2 1.99 1.99 2.11 T:aes128n12t8silcv3 2.06? 2.08? 2.39? T:norx6444v3 2.07 2.09 2.10 T:norx6441v3 2.08 2.09 2.11 T:norx6441v2 2.11 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.14 T:aes128n8t8clocv2 2.12 2.12 2.13 T:aes128otrsv3 2.09 2.15 2.19 T:seakeyakv2 2.43 2.45 2.47 T:norx6441v1 2.51 2.54 2.61 T:norx6444v2 2.53 2.58 2.64 T:lakekeyakv2 2.62 2.69 2.78 T:lakekeyakv1 2.87 2.87 2.88 T:aes256otrsv3 3.01 3.05 3.16 T:norx6444v1 3.07 3.09 3.10 T:norx6461v3 3.10 3.12 3.13 T:norx6461v2 3.64 3.65 3.68 T:norx3241v3 3.66 3.67 3.68 T:norx6461v1 3.66 3.68 3.69 T:norx3241v2 4.06 4.14 4.33 T:acorn128v3 3.69? 4.15? 4.54? T:ketjemajorv2 4.15 4.30 4.37 T:acorn128v2 4.30 4.31 4.32 T:aesjambuv1 4.40 4.42 4.43 T:norx3241v1 4.51? 4.97? 5.11? T:riverkeyakv2 5.44 5.46 5.49 T:norx3261v2 5.53 5.55 5.56 T:norx3261v3 5.66 5.83 5.98 T:ketjeminorv2 6.27 6.35 6.38 T:ascon96v1 6.37 6.40 6.44 T:ascon128av11 6.64 6.68 6.70 ascon128av12 7.50 7.51 7.53 T:norx3261v1 9.52 9.58 9.61 T:ascon128v1 9.53 9.59 9.62 T:ascon128v11 9.97 10.01 10.06 ascon128v12 10.43 10.51 10.54 T:aes128otrpv1 10.43 10.52 10.57 T:aes128otrpv2 11.21 11.24 11.32 T:aes128otrsv1 11.20 11.26 11.32 T:aes128otrsv2 11.40 11.45 11.49 T:aes128n12clocv1 11.41 11.46 11.50 T:aes128n8clocv1 14.22 14.29 14.33 T:aes256otrpv2 14.24 14.31 14.35 T:aes256otrpv1 14.79 14.82 14.95 T:twine80n6t4clocv3 14.98 15.06 15.10 T:aes256otrsv1 15.03 15.07 15.12 T:aes256otrsv2 15.41 15.45 15.52 T:twine80n6t4clocv2 18.28 18.55 18.70 T:proest256otrv1 20.39 20.42 20.48 T:aeadaes128ocbtaglen64v1 20.42 20.44 20.46 T:aeadaes128ocbtaglen96v1 20.35 20.59 20.72 T:ketjesrv1 20.49 20.63 20.77 T:ketjesrv2 22.70 22.81 22.92 T:colm127v1 24.37 24.41 24.49 T:aeadaes192ocbtaglen64v1 24.37 24.47 24.53 T:aeadaes192ocbtaglen96v1 28.33 28.72 29.93 T:aeadaes256ocbtaglen96v1 28.51 29.53 29.78 T:aeadaes256ocbtaglen64v1 39.92 40.04 40.26 T:ketjejrv1 40.70 40.80 40.84 T:aezv1 47.19 47.26 47.29 T:proest128otrv1 60.01 60.23 60.49 T:deoxyseq128128v13 59.54 60.52 60.77 T:deoxysneq128128v13 63.15 63.59 64.93 T:ketjejrv2 71.13 71.21 71.25 T:present80n6t4silcv3 83.04 83.16 83.30 T:deoxyseq256128v13 84.20 84.25 84.37 T:deoxysneq256128v13 126.09 126.31 126.51 T:led80n6t4silcv3 410.71 412.56 413.08 T:acorn128 1289.93 1290.56 1291.25 T:led80n6t4silcv2 1291.63 1292.58 1299.15 T:led80n6silcv1 1564.43 1568.88 1591.68 T:present80n6silcv1 1568.00 1570.58 1577.58 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.20 0.20 0.21 T:tiaoxinv1 0.20 0.20 0.21 T:tiaoxinv2 0.24 0.24 0.25 T:aegis128l 0.25 0.25 0.25 aegis128l 0.30 0.31 0.31 T:aezv4 0.32 0.32 0.34 T:aezv3 0.33 0.34 0.34 T:aezv5 0.34? 0.36? 0.39? T:aeadaes128ocbtaglen128v1 0.42 0.42 0.42 T:aegis128 0.43 0.43 0.43 aegis256 0.43 0.43 0.43 T:aegis256 0.42? 0.44? 0.68? T:aeadaes256ocbtaglen128v1 0.47? 0.50? 0.59? T:aeadaes192ocbtaglen128v1 0.53 0.53 0.54 T:aes128otrpv3 0.59 0.60 0.61 T:aes128otrcv3 0.67 0.68 0.69 T:aes256otrpv3 0.73 0.74 0.75 T:aes128gcmv1 0.75 0.76 0.77 T:aes256otrcv3 0.77 0.78 0.79 T:deoxysneq128128v1 0.79 0.79 0.80 T:deoxysi128v141 0.81 0.81 0.81 T:morus1280256v1 0.81 0.81 0.82 T:morus1280128v1 0.81 0.82 0.83 aes256gcmv1 0.82 0.82 0.83 T:morus1280256v2 0.82 0.82 0.83 T:morus1280128v2 0.87 0.89 0.89 T:deoxysneq256128v1 0.89 0.90 0.91 T:deoxysi256v141 1.05 1.05 1.06 T:colm0v1 1.14 1.14 1.16 T:deoxysii128v141 1.18 1.18 1.18 T:deoxyseq128128v1 1.27 1.28 1.28 T:morus640128v1 1.28 1.29 1.30 T:morus640128v2 1.29 1.30 1.30 T:deoxysii256v141 1.34 1.35 1.36 T:aes128otrsv3 1.35 1.35 1.36 T:deoxyseq256128v1 1.80 1.81 1.82 T:aes256otrsv3 2.14 2.16 2.16 T:norx6444v3 2.19 2.19 2.20 T:aes128n12t8clocv3 2.19 2.19 2.20 T:aes128n8t8clocv2 2.20 2.20 2.20 T:aes128n12t8clocv2 2.20 2.20 2.21 T:aes128n12t8silcv2 2.20 2.20 2.21 T:aes128n8t8silcv2 2.20 2.20 2.20 T:aes128n12t8silcv3 2.35 2.36 2.37 T:norx6441v2 2.36 2.37 2.38 T:norx6441v3 2.74 2.75 2.76 T:norx6441v1 3.11 3.15 3.16 T:lakekeyakv2 3.15 3.18 3.22 T:seakeyakv2 3.34 3.38 3.46 T:lakekeyakv1 3.58 3.59 3.60 T:norx6461v3 3.58 3.59 3.60 T:norx6461v2 3.83 3.84 3.86 T:norx6444v2 3.91 3.92 3.93 T:norx3241v3 3.94 3.95 3.96 T:norx3241v2 4.10 4.11 4.18 T:oceankeyakv2 4.14 4.15 4.16 T:norx6461v1 4.38 4.38 4.39 T:aesjambuv1 4.55 4.57 4.60 T:norx6444v1 4.62 4.63 4.64 T:norx3241v1 5.22 5.39 5.48 T:acorn128v2 5.59 5.61 5.64 T:riverkeyakv2 5.53 5.64 5.79 T:acorn128v3 5.94 5.95 5.98 T:norx3261v2 5.94 5.96 5.97 T:norx3261v3 6.06 6.28 6.36 T:ketjemajorv2 6.70 6.71 6.73 T:ascon128av11 6.69 6.73 6.75 T:ascon96v1 6.73 6.83 6.91 T:ketjeminorv2 6.84 6.85 6.87 ascon128av12 7.04 7.07 7.13 T:lunarkeyakv2 7.90 7.92 7.92 T:norx3261v1 9.92 9.93 9.95 T:ascon128v11 9.91 9.94 9.96 T:ascon128v1 10.14 10.15 10.18 ascon128v12 11.17 11.20 11.22 T:aes128otrpv1 11.18 11.21 11.23 T:aes128otrpv2 11.51 11.52 11.53 T:aes128otrsv1 11.51 11.53 11.56 T:aes128otrsv2 15.01 15.04 15.08 T:aes256otrpv2 15.03 15.05 15.07 T:aes256otrpv1 15.28 15.30 15.31 T:twine80n6t4clocv3 15.36 15.37 15.40 T:aes256otrsv1 15.40 15.42 15.45 T:aes256otrsv2 16.00 16.01 16.05 T:twine80n6t4clocv2 16.35 16.38 16.41 T:aes128n8clocv1 16.38 16.41 16.43 T:aes128n12clocv1 19.91 20.19 20.32 T:proest256otrv1 21.27 21.29 21.32 T:aeadaes128ocbtaglen96v1 21.26 21.31 21.34 T:aeadaes128ocbtaglen64v1 21.44 21.85 22.36 T:ketjesrv1 23.68 23.76 23.80 T:ketjesrv2 25.32 25.34 25.39 T:aeadaes192ocbtaglen96v1 25.33 25.36 25.41 T:aeadaes192ocbtaglen64v1 29.59 29.84 30.42 T:aeadaes256ocbtaglen96v1 30.35 30.57 30.73 T:aeadaes256ocbtaglen64v1 35.24 35.30 35.38 T:colm127v1 43.57 43.66 43.99 T:ketjejrv1 48.74 48.80 48.89 T:proest128otrv1 61.97 62.11 62.58 T:deoxysneq128128v13 66.07 66.20 67.69 T:ketjejrv2 72.32 72.35 72.42 T:present80n6t4silcv3 83.23 83.28 83.37 T:aezv1 84.27 84.28 84.38 T:deoxysneq256128v13 91.45 92.65 93.77 T:deoxyseq128128v13 126.38 126.44 126.50 T:deoxyseq256128v13 127.59 127.69 127.91 T:led80n6t4silcv3 460.50 462.82 463.32 T:acorn128 1946.93 1947.32 1948.27 T:led80n6t4silcv2 1947.08 1947.59 1948.27 T:led80n6silcv1 2365.36 2372.13 2389.92 T:present80n6silcv1 2366.93 2374.33 2378.86 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.24 0.24 0.25 T:aegis128l 0.24 0.25 0.26 aegis128l 0.30 0.31 0.31 T:aezv4 0.31 0.32 0.32 T:aezv3 0.32 0.32 0.32 T:aezv5 0.32 0.32 0.32 T:tiaoxinv2 0.32 0.32 0.32 T:tiaoxinv1 0.34? 0.35? 0.38? T:aeadaes128ocbtaglen128v1 0.42 0.42 0.42 T:aegis128 0.42 0.42 0.43 T:aegis256 0.43 0.43 0.43 aegis256 0.44? 0.46? 0.69? T:aeadaes256ocbtaglen128v1 0.47? 0.49? 0.73? T:aeadaes192ocbtaglen128v1 0.54 0.55 0.57 T:aes128otrpv3 0.60 0.60 0.62 T:aes128gcmv1 0.61 0.61 0.62 T:aes128otrcv3 0.69 0.70 0.70 aes256gcmv1 0.71 0.71 0.72 T:aes256otrpv3 0.78 0.78 0.79 T:aes256otrcv3 0.82 0.82 0.82 T:morus1280128v1 0.82 0.82 0.82 T:morus1280256v1 0.83 0.83 0.84 T:morus1280128v2 0.83 0.83 0.84 T:morus1280256v2 0.88 0.88 0.89 T:deoxysi128v141 0.89 0.89 0.90 T:deoxysneq128128v1 0.97 0.97 0.99 T:deoxysneq256128v1 1.00 1.01 1.02 T:deoxysi256v141 1.05 1.06 1.07 T:colm0v1 1.17 1.17 1.18 T:deoxysii128v141 1.26 1.26 1.27 T:morus640128v1 1.29 1.30 1.30 T:morus640128v2 1.35 1.36 1.36 T:deoxysii256v141 1.35 1.36 1.37 T:aes128otrsv3 1.37 1.37 1.38 T:deoxyseq128128v1 1.43 1.44 1.44 T:deoxyseq256128v1 1.84 1.84 1.86 T:aes256otrsv3 2.13 2.14 2.15 T:norx6444v3 2.14 2.14 2.15 T:aes128n8t8clocv2 2.14 2.14 2.21 T:aes128n12t8clocv3 2.14 2.14 2.15 T:aes128n12t8clocv2 2.14 2.15 2.16 T:aes128n8t8silcv2 2.15 2.15 2.17 T:aes128n12t8silcv2 2.15 2.15 2.21 T:aes128n12t8silcv3 2.35 2.36 2.37 T:norx6441v3 2.37 2.38 2.39 T:norx6441v2 2.70 2.72 2.74 T:norx6441v1 3.12 3.15 3.16 T:lakekeyakv2 3.17 3.21 3.23 T:seakeyakv2 3.34 3.37 3.45 T:lakekeyakv1 3.55 3.57 3.57 T:norx6461v3 3.58 3.58 3.59 T:norx6461v2 3.85 3.88 3.92 T:norx6444v2 3.89 3.90 3.91 T:norx3241v3 3.90 3.91 3.92 T:norx3241v2 4.13 4.15 4.16 T:norx6461v1 4.17 4.19 4.24 T:oceankeyakv2 4.53 4.53 4.53 T:aesjambuv1 4.58 4.60 4.63 T:norx6444v1 4.60 4.61 4.62 T:norx3241v1 5.01 5.08 5.15 T:acorn128v2 5.28 5.57 5.62 T:acorn128v3 5.66 5.70 5.73 T:riverkeyakv2 5.75 5.92 6.09 T:ketjemajorv2 5.94 5.94 5.95 T:norx3261v2 5.96 5.99 6.00 T:norx3261v3 6.62 6.67 6.69 T:ascon96v1 6.65 6.68 6.69 T:ascon128av11 6.81 6.84 6.85 ascon128av12 7.08 7.11 7.16 T:lunarkeyakv2 7.03 7.16 7.24 T:ketjeminorv2 7.84 7.85 7.86 T:norx3261v1 9.84 9.87 9.87 T:ascon128v11 9.86 9.87 9.89 T:ascon128v1 10.10 10.12 10.16 ascon128v12 11.37 11.38 11.42 T:aes128otrpv1 11.36 11.39 11.43 T:aes128otrpv2 11.70 11.72 11.77 T:aes128otrsv1 11.71 11.73 11.76 T:aes128otrsv2 15.19 15.24 15.29 T:aes256otrpv1 15.23 15.24 15.28 T:aes256otrpv2 15.29 15.33 15.37 T:twine80n6t4clocv3 15.29 15.35 15.41 T:aes128n12clocv1 15.49 15.52 15.58 T:aes128n8clocv1 15.56 15.57 15.64 T:aes256otrsv2 15.55 15.60 15.62 T:aes256otrsv1 15.98 16.02 16.02 T:twine80n6t4clocv2 20.09 20.21 20.61 T:proest256otrv1 22.29 22.35 22.40 T:ketjesrv2 23.17 23.54 23.64 T:ketjesrv1 28.31 28.34 28.37 T:aeadaes128ocbtaglen64v1 28.27 28.34 28.39 T:aeadaes128ocbtaglen96v1 34.03 34.07 34.12 T:aeadaes192ocbtaglen96v1 34.07 34.12 34.22 T:aeadaes192ocbtaglen64v1 39.94 40.45 40.52 T:aeadaes256ocbtaglen96v1 40.03 40.55 40.64 T:aeadaes256ocbtaglen64v1 44.14 44.27 44.52 T:ketjejrv1 48.63 48.68 48.73 T:colm127v1 49.13 49.15 49.18 T:proest128otrv1 67.08 67.36 68.91 T:ketjejrv2 71.53 71.84 71.92 T:deoxysneq128128v13 72.26 72.31 72.38 T:present80n6t4silcv3 83.21 83.35 83.96 T:aezv1 91.74 92.22 92.84 T:deoxyseq128128v13 99.49 99.59 99.67 T:deoxysneq256128v13 126.32 126.38 126.48 T:deoxyseq256128v13 127.51 127.65 127.86 T:led80n6t4silcv3 478.43 478.75 483.89 T:acorn128 1945.63 1945.92 1946.69 T:led80n6t4silcv2 1946.65 1947.06 1947.41 T:led80n6silcv1 2366.43 2368.99 2374.09 T:present80n6t4silcv2 2367.60 2369.66 2373.15 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17 0.17 0.18 T:aezv4 0.18 0.18 0.19 T:aezv5 0.18 0.18 0.19 T:aezv3 0.24 0.24 0.25 T:aegis128l 0.25 0.25 0.26 aegis128l 0.32 0.32 0.32 T:tiaoxinv1 0.32 0.32 0.33 T:tiaoxinv2 0.34 0.34 0.37 T:aeadaes128ocbtaglen128v1 0.42 0.42 0.42 T:aegis256 0.42 0.42 0.43 T:aegis128 0.42 0.43 0.46 T:aeadaes256ocbtaglen128v1 0.44 0.44 0.44 aegis256 0.47 0.47 0.48 T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrpv3 0.60 0.60 0.61 T:aes128gcmv1 0.60 0.61 0.61 T:aes128otrcv3 0.69 0.69 0.70 aes256gcmv1 0.70 0.71 0.71 T:aes256otrpv3 0.77 0.78 0.78 T:aes256otrcv3 0.81 0.82 0.82 T:morus1280128v1 0.82 0.82 0.83 T:morus1280256v1 0.83 0.83 0.84 T:morus1280128v2 0.83 0.83 0.85 T:morus1280256v2 0.88 0.88 0.89 T:deoxysi128v141 0.88 0.89 0.89 T:deoxysneq128128v1 0.96 0.97 0.99 T:deoxysneq256128v1 1.00 1.00 1.01 T:deoxysi256v141 1.06 1.07 1.13 T:colm0v1 1.17 1.17 1.17 T:deoxysii128v141 1.26 1.26 1.27 T:morus640128v1 1.28 1.29 1.29 T:morus640128v2 1.35 1.35 1.36 T:deoxysii256v141 1.35 1.36 1.36 T:aes128otrsv3 1.37 1.38 1.39 T:deoxyseq128128v1 1.43 1.44 1.48 T:deoxyseq256128v1 1.83 1.84 1.84 T:aes256otrsv3 2.13 2.13 2.14 T:aes128n8t8clocv2 2.14 2.14 2.21 T:aes128n12t8clocv3 2.14 2.14 2.14 T:aes128n8t8silcv2 2.13 2.14 2.15 T:norx6444v3 2.14 2.14 2.23 T:aes128n12t8silcv2 2.21 2.21 2.22 T:aes128n12t8clocv2 2.23 2.23 2.23 T:aes128n12t8silcv3 2.35 2.35 2.36 T:norx6441v3 2.37 2.38 2.39 T:norx6441v2 2.71 2.72 2.77 T:norx6441v1 3.14 3.15 3.17 T:lakekeyakv2 3.18 3.21 3.25 T:seakeyakv2 3.36 3.39 3.50 T:lakekeyakv1 3.56 3.56 3.57 T:norx6461v3 3.57 3.59 3.61 T:norx6461v2 3.85 3.87 3.90 T:norx6444v2 3.89 3.90 3.92 T:norx3241v3 3.91 3.92 3.92 T:norx3241v2 4.14 4.15 4.16 T:norx6461v1 4.16 4.19 4.22 T:oceankeyakv2 4.52 4.53 4.53 T:aesjambuv1 4.58 4.60 4.62 T:norx6444v1 4.60 4.61 4.61 T:norx3241v1 5.04 5.37 5.52 T:acorn128v2 5.17 5.56 5.65 T:acorn128v3 5.65 5.71 5.75 T:riverkeyakv2 5.77 5.84 6.04 T:ketjemajorv2 5.93 5.94 5.95 T:norx3261v2 5.98 6.00 6.02 T:norx3261v3 6.63 6.65 6.68 T:ascon96v1 6.66 6.67 6.68 T:ascon128av11 6.82 6.84 6.87 ascon128av12 7.11 7.14 7.16 T:lunarkeyakv2 7.12 7.19 7.27 T:ketjeminorv2 7.85 7.85 7.86 T:norx3261v1 9.86 9.87 9.90 T:ascon128v1 9.85 9.87 9.88 T:ascon128v11 10.08 10.13 10.18 ascon128v12 11.37 11.39 11.43 T:aes128otrpv2 11.37 11.40 11.43 T:aes128otrpv1 11.71 11.72 11.77 T:aes128otrsv2 11.71 11.75 11.77 T:aes128otrsv1 15.20 15.24 15.26 T:aes256otrpv2 15.22 15.26 15.28 T:aes256otrpv1 15.29 15.30 15.38 T:aes128n12clocv1 15.31 15.32 15.36 T:twine80n6t4clocv3 15.46 15.49 15.53 T:aes128n8clocv1 15.57 15.60 15.62 T:aes256otrsv2 15.56 15.60 15.63 T:aes256otrsv1 15.96 16.02 16.03 T:twine80n6t4clocv2 19.99 20.11 20.32 T:proest256otrv1 22.24 22.34 22.40 T:ketjesrv2 23.17 23.57 23.71 T:ketjesrv1 28.28 28.31 28.34 T:aeadaes128ocbtaglen64v1 28.29 28.33 28.35 T:aeadaes128ocbtaglen96v1 34.01 34.07 34.11 T:aeadaes192ocbtaglen96v1 34.02 34.09 34.13 T:aeadaes192ocbtaglen64v1 39.93 40.43 40.51 T:aeadaes256ocbtaglen96v1 40.18 40.47 40.61 T:aeadaes256ocbtaglen64v1 43.85 44.10 44.24 T:ketjejrv1 48.64 48.68 48.71 T:colm127v1 49.11 49.14 49.17 T:proest128otrv1 67.14 67.67 68.93 T:ketjejrv2 70.10 71.05 72.09 T:deoxysneq128128v13 72.29 72.33 72.37 T:present80n6t4silcv3 83.12 83.28 83.39 T:aezv1 92.90 94.53 99.02 T:deoxyseq128128v13 99.56 99.61 99.73 T:deoxysneq256128v13 126.39 126.47 126.49 T:deoxyseq256128v13 127.55 127.62 127.71 T:led80n6t4silcv3 478.71 479.38 483.72 T:acorn128 1945.96 1946.60 1947.09 T:led80n6t4silcv2 1947.01 1947.17 1947.63 T:led80n6silcv1 2366.33 2368.37 2374.87 T:present80n6silcv1 2364.33 2368.72 2372.33 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.93 0.96 1.02 T:aegis128l 0.93? 0.98? 1.04? T:aegis128 0.96? 1.00? 1.39? aegis128l 1.16 1.20 1.21 T:aezv4 1.17? 1.26? 1.52? T:aezv3 1.19? 1.28? 1.42? T:aezv5 1.24? 1.29? 1.48? T:tiaoxinv1 1.24? 1.30? 1.45? T:tiaoxinv2 1.27 1.32 1.38 aegis256 1.29? 1.40? 1.80? T:aegis256 2.05? 2.10? 2.42? T:aes128otrpv3 2.21? 2.52? 2.90? T:aes128otrsv3 2.62 2.71 2.87 T:aes128n8t8clocv2 2.66? 2.76? 3.19? T:aes128n12t8clocv3 2.70 2.78 2.87 T:aes128n12t8clocv2 2.73? 2.84? 3.22? T:aes128otrcv3 2.81 2.89 3.08 T:aes128n8t8silcv2 2.91 2.95 3.05 T:deoxysneq128128v1 2.93? 2.99? 3.44? T:aes256otrsv3 2.96 3.04 3.26 T:aes256otrpv3 2.77? 3.06? 3.13? T:colm0v1 2.93 3.07 3.20 T:aes128n12t8silcv3 2.97 3.07 3.10 T:deoxysi128v141 3.04 3.13 3.23 T:aes128n12t8silcv2 2.92? 3.30? 8.74? T:aeadaes192ocbtaglen128v1 3.34? 3.44? 4.38? T:aeadaes128ocbtaglen128v1 3.44 3.54 3.62 T:deoxysneq256128v1 3.66 3.72 4.05 T:aes256otrcv3 3.81 3.94 4.02 T:deoxysi256v141 4.02 4.09 4.14 T:deoxyseq128128v1 4.11 4.16 4.21 T:morus1280128v1 4.19 4.26 4.39 T:morus1280256v1 4.09? 4.29? 9.91? T:aeadaes256ocbtaglen128v1 4.24 4.30 4.37 T:morus640128v1 4.40 4.45 4.55 T:morus1280128v2 4.35 4.47 4.60 T:morus640128v2 4.49 4.54 4.61 T:morus1280256v2 4.82 4.89 5.00 T:deoxyseq256128v1 4.98 5.11 5.35 T:aes128gcmv1 5.08 5.12 5.16 T:aesjambuv1 5.45 5.50 5.67 T:deoxysii128v141 5.54 5.71 5.97 aes256gcmv1 6.42 6.56 6.70 T:deoxysii256v141 7.45 7.52 7.56 T:norx6441v2 7.59 7.63 7.73 T:norx6441v1 7.60 7.70 7.77 T:norx6441v3 9.48 9.52 9.63 T:norx3241v3 9.45 9.53 9.62 T:norx3241v2 9.49 9.57 9.66 T:norx3241v1 9.81 9.92 10.03 T:ascon128av11 9.98 10.05 10.15 T:ascon96v1 10.21 10.34 10.41 ascon128av12 11.46 11.50 11.59 T:norx6461v2 11.55 11.62 11.67 T:norx6461v3 11.57 11.62 11.77 T:norx6461v1 11.44? 12.43? 13.14? T:lakekeyakv1 12.95 13.00 13.20 T:ascon128v11 12.98 13.03 13.07 T:ascon128v1 13.20 13.25 13.36 ascon128v12 13.84 13.94 14.07 T:norx6444v3 13.59 14.11 14.50 T:riverkeyakv2 13.72 14.20 14.48 T:lakekeyakv2 14.39 14.42 14.55 T:norx3261v2 14.49 14.55 14.57 T:norx3261v3 16.11 16.16 16.24 T:norx3261v1 18.52 18.62 18.90 T:aes128otrsv1 18.56 18.71 18.88 T:aes128otrsv2 18.75 18.94 19.07 T:aes128otrpv1 18.87 18.95 19.04 T:aes128otrpv2 19.12 19.23 19.45 T:aes128n8clocv1 19.25 19.40 19.67 T:aes128n12clocv1 19.91 19.97 20.59 T:twine80n6t4clocv2 20.28 20.68 20.90 T:twine80n6t4clocv3 21.40 22.40 22.91 T:ketjeminorv2 22.09 22.94 23.72 T:acorn128v2 24.38 24.58 24.72 T:aes256otrsv1 23.82 24.61 25.62 T:acorn128v3 24.46 24.62 25.02 T:aes256otrsv2 24.73 24.80 25.11 T:aes256otrpv1 24.70 24.84 25.10 T:aes256otrpv2 27.91 28.07 28.46 T:norx6444v2 29.08 29.34 29.73 T:seakeyakv2 33.27 33.48 33.80 T:norx6444v1 34.05 34.41 34.88 T:aeadaes128ocbtaglen96v1 34.00 34.54 35.08 T:aeadaes128ocbtaglen64v1 35.52 35.90 36.36 T:ketjesrv1 39.61 39.73 39.99 T:aeadaes192ocbtaglen96v1 39.62 39.91 40.57 T:aeadaes192ocbtaglen64v1 40.73 41.04 41.44 T:ketjesrv2 41.29 42.22 43.16 T:ketjemajorv2 44.58 44.93 45.86 T:oceankeyakv2 47.20 47.73 48.10 T:aeadaes256ocbtaglen96v1 47.32 48.73 49.36 T:aeadaes256ocbtaglen64v1 50.55 51.09 52.20 T:colm127v1 58.60 58.98 59.79 T:ketjejrv1 58.58 59.21 62.73 T:proest256otrv1 69.62 70.19 71.37 T:deoxysneq128128v13 88.02 88.14 89.34 T:ketjejrv2 88.71 88.87 89.52 T:present80n6t4silcv3 94.81 95.16 95.43 T:proest128otrv1 95.24 95.44 95.77 T:deoxysneq256128v13 96.46 97.05 97.41 T:aezv1 114.75 115.19 115.86 T:lunarkeyakv2 114.96 116.94 118.44 T:deoxyseq128128v13 151.51 152.18 152.78 T:led80n6t4silcv3 157.30 157.52 158.52 T:deoxyseq256128v13 1631.55 1632.88 1633.84 T:acorn128 2178.70 2180.46 2181.76 T:led80n6t4silcv2 2183.00 2184.30 2185.32 T:led80n6silcv1 2649.45 2652.13 2657.02 T:present80n6silcv1 2660.20 2704.52 2723.05 T:present80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.92 0.97 1.01 T:aegis128l 1.00? 1.08? 1.29? aegis128l 1.16? 1.18? 1.36? T:aegis128 1.15? 1.20? 1.30? T:aezv4 1.18? 1.25? 1.47? T:aezv3 1.14? 1.27? 1.59? T:aezv5 1.34 1.34 1.39 aegis256 1.30? 1.38? 1.72? T:tiaoxinv2 1.28? 1.39? 1.45? T:tiaoxinv1 1.32? 1.64? 2.09? T:aegis256 1.91? 2.05? 2.37? T:aes128otrpv3 2.23? 2.33? 2.68? T:aes128otrsv3 2.43? 2.45? 2.73? T:aes128n8t8clocv2 2.55 2.66 2.83 T:aes128n12t8clocv2 2.48? 2.66? 3.03? T:aes128n12t8clocv3 2.58? 2.69? 2.89? T:aes128n8t8silcv2 2.66? 2.75? 3.04? T:colm0v1 2.70? 2.84? 4.55? T:aes128n12t8silcv3 2.63? 2.86? 4.63? T:aes128n12t8silcv2 2.74? 2.86? 3.13? T:aes128otrcv3 2.79 2.88 3.06 T:aes256otrpv3 2.77? 2.91? 6.46? T:aeadaes192ocbtaglen128v1 3.01? 3.10? 3.47? T:aes256otrsv3 3.26? 3.41? 4.02? T:aeadaes128ocbtaglen128v1 3.85 3.89 4.02 T:aes256otrcv3 4.20 4.27 4.36 T:morus640128v1 4.30 4.35 4.42 T:morus1280256v1 4.30 4.38 4.40 T:deoxysneq128128v1 4.30 4.42 4.47 T:morus1280128v1 4.36 4.44 4.54 T:deoxysi128v141 4.51 4.57 4.64 T:morus1280128v2 4.55 4.57 4.63 T:morus1280256v2 4.20? 4.59? 10.52? T:aeadaes256ocbtaglen128v1 4.62 4.65 4.75 T:deoxysneq256128v1 4.83 4.87 5.02 T:morus640128v2 5.27 5.29 5.34 T:aesjambuv1 5.32 5.38 5.42 T:aes128gcmv1 5.68 5.77 5.95 T:deoxyseq128128v1 5.66 5.79 5.98 T:deoxyseq256128v1 5.84 5.88 5.95 T:deoxysi256v141 6.05 6.12 6.22 aes256gcmv1 6.19 6.32 6.41 T:deoxysii128v141 7.75 7.81 7.87 T:norx6441v1 7.80 7.92 8.01 T:norx6441v2 7.87 7.95 8.08 T:deoxysii256v141 7.94 7.98 8.04 T:norx6441v3 9.65 9.77 9.83 T:norx3241v2 9.73 9.80 9.88 T:norx3241v3 9.72 9.82 9.91 T:norx3241v1 9.85 9.98 10.12 T:ascon128av11 9.88 9.99 10.12 T:ascon96v1 10.28 10.43 10.53 ascon128av12 11.70 11.78 11.89 T:norx6461v1 11.77 11.84 11.98 T:norx6461v2 11.73 11.88 11.96 T:norx6461v3 11.38? 12.04? 12.69? T:lakekeyakv1 12.80 12.92 13.06 T:ascon128v11 12.88 12.98 13.03 T:ascon128v1 13.02 13.16 13.33 ascon128v12 13.54 13.88 14.42 T:riverkeyakv2 13.89 14.05 14.13 T:norx6444v3 13.45? 14.12? 15.09? T:lakekeyakv2 14.66 14.75 14.87 T:norx3261v2 14.69 14.80 14.95 T:norx3261v3 16.38 16.49 16.55 T:norx3261v1 18.66 18.80 19.10 T:aes128n8clocv1 18.73 18.83 19.16 T:aes128n12clocv1 18.98 19.04 19.10 T:aes128otrsv1 18.97 19.09 19.50 T:aes128otrsv2 19.16 19.22 19.38 T:aes128otrpv1 19.15 19.23 19.56 T:aes128otrpv2 19.91 20.04 20.23 T:twine80n6t4clocv2 20.34 20.82 21.02 T:twine80n6t4clocv3 21.53 22.34 23.08 T:ketjeminorv2 23.15 24.02 24.96 T:acorn128v3 23.06 24.07 24.98 T:acorn128v2 24.92 24.97 25.16 T:aes256otrsv1 24.83 25.02 25.24 T:aes256otrsv2 25.15 25.25 25.41 T:aes256otrpv2 25.18 25.27 25.40 T:aes256otrpv1 27.95 28.29 28.71 T:norx6444v2 28.59 28.88 29.27 T:seakeyakv2 33.83 34.28 34.92 T:norx6444v1 37.15 37.84 38.31 T:ketjesrv1 39.59 40.54 41.02 T:ketjesrv2 40.88 41.76 43.24 T:ketjemajorv2 43.83 44.59 44.91 T:aeadaes128ocbtaglen64v1 44.61 44.82 44.98 T:aeadaes128ocbtaglen96v1 44.68 45.33 46.06 T:oceankeyakv2 51.50 51.86 52.16 T:aeadaes192ocbtaglen64v1 51.84 52.15 52.35 T:aeadaes192ocbtaglen96v1 58.30 59.14 60.84 T:ketjejrv1 60.04 60.52 60.84 T:proest256otrv1 61.30 62.05 62.65 T:aeadaes256ocbtaglen96v1 61.78 62.82 63.17 T:aeadaes256ocbtaglen64v1 64.83 65.45 66.91 T:colm127v1 79.96 80.68 81.87 T:deoxysneq128128v13 88.60 88.71 89.34 T:present80n6t4silcv3 88.89 89.85 91.19 T:ketjejrv2 96.45 96.63 97.07 T:proest128otrv1 99.04 99.29 100.08 T:aezv1 110.39 111.25 111.61 T:deoxysneq256128v13 114.34 114.93 115.49 T:lunarkeyakv2 115.70 116.68 117.77 T:deoxyseq128128v13 151.99 152.74 153.46 T:led80n6t4silcv3 156.91 158.02 158.47 T:deoxyseq256128v13 1653.41 1654.35 1655.33 T:acorn128 2177.91 2179.23 2180.72 T:led80n6t4silcv2 2182.56 2183.66 2187.55 T:led80n6silcv1 2646.56 2647.91 2708.27 T:present80n6t4silcv2 2648.52 2650.34 2657.03 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.63? 0.73? 1.65? T:aezv5 0.73? 0.78? 1.02? T:aezv4 0.72? 0.80? 1.70? T:aezv3 0.95 0.97 1.00 T:aegis128l 1.02? 1.07? 1.28? aegis128l 1.14 1.17 1.20 T:aegis128 1.27 1.29 1.31 T:aegis256 1.29? 1.34? 1.46? T:tiaoxinv1 1.31? 1.40? 1.88? T:tiaoxinv2 1.35? 1.40? 2.15? aegis256 1.91? 2.01? 2.26? T:aes128otrpv3 2.26 2.31 2.41 T:aes128otrsv3 2.35? 2.37? 2.79? T:aes128n8t8clocv2 2.48? 2.56? 4.55? T:aes128n8t8silcv2 2.67 2.71 2.80 T:aes256otrpv3 2.77? 2.84? 8.71? T:aeadaes192ocbtaglen128v1 2.84 2.88 2.99 T:aes128otrcv3 2.77? 2.98? 4.37? T:colm0v1 3.23? 3.29? 3.90? T:aeadaes128ocbtaglen128v1 3.14 3.35 3.38 T:aes256otrsv3 2.46? 3.83? 4.27? T:aes128n12t8clocv2 3.81 3.89 3.91 T:aes256otrcv3 2.40? 4.12? 4.23? T:aes128n12t8clocv3 4.03? 4.13? 4.48? T:aeadaes256ocbtaglen128v1 4.20 4.25 4.37 T:deoxysneq128128v1 4.18 4.30 4.36 T:morus640128v1 4.30 4.35 4.41 T:morus1280128v1 4.31 4.35 4.40 T:morus1280256v1 4.30 4.36 4.45 T:deoxysi128v141 4.41? 4.46? 5.01? T:deoxysneq256128v1 2.62? 4.52? 4.59? T:aes128n12t8silcv3 2.60? 4.55? 4.59? T:aes128n12t8silcv2 4.54 4.57 4.62 T:morus1280128v2 4.50 4.59 4.67 T:morus1280256v2 4.85 4.98 5.02 T:morus640128v2 5.25 5.28 5.33 T:aesjambuv1 5.41 5.47 5.52 T:aes128gcmv1 5.65 5.70 6.05 T:deoxyseq128128v1 5.67 5.76 5.91 T:deoxyseq256128v1 5.84 5.86 5.95 T:deoxysi256v141 5.98 6.05 6.12 aes256gcmv1 6.20 6.29 6.42 T:deoxysii128v141 7.65 7.79 7.88 T:norx6441v1 7.77 7.80 7.88 T:norx6441v2 7.73 7.84 7.95 T:deoxysii256v141 7.85 7.90 8.00 T:norx6441v3 9.71 9.76 9.82 T:norx3241v2 9.70 9.80 9.84 T:norx3241v1 9.75 9.81 9.89 T:norx3241v3 9.80 9.91 10.15 T:ascon128av11 9.82 9.92 10.11 T:ascon96v1 10.23 10.33 10.49 ascon128av12 11.60 11.70 11.88 T:norx6461v1 11.76 11.80 11.84 T:norx6461v2 11.75 11.86 11.89 T:norx6461v3 11.49 12.12 12.36 T:lakekeyakv1 12.76 12.84 13.03 T:ascon128v11 12.83 12.90 13.09 T:ascon128v1 13.09 13.24 13.37 ascon128v12 13.27 13.80 14.44 T:riverkeyakv2 13.81 13.96 14.01 T:norx6444v3 13.91 14.27 14.79 T:lakekeyakv2 14.53 14.62 14.72 T:norx3261v2 14.75 14.83 14.94 T:norx3261v3 16.41 16.43 16.47 T:norx3261v1 18.72 18.83 19.28 T:aes128n12clocv1 18.70 18.99 19.30 T:aes128n8clocv1 18.93 19.11 19.70 T:aes128otrsv2 18.98 19.12 19.75 T:aes128otrsv1 19.12 19.21 19.42 T:aes128otrpv1 19.16 19.23 19.74 T:aes128otrpv2 19.91 20.03 20.29 T:twine80n6t4clocv2 20.34 20.92 21.66 T:twine80n6t4clocv3 21.59 22.27 22.81 T:ketjeminorv2 22.85 23.24 24.55 T:acorn128v2 22.92 23.36 24.30 T:acorn128v3 24.88 24.99 25.22 T:aes256otrsv1 24.95 25.02 25.16 T:aes256otrsv2 25.15 25.27 25.43 T:aes256otrpv1 25.19 25.35 26.20 T:aes256otrpv2 28.13 28.45 28.73 T:norx6444v2 28.63 29.01 29.65 T:seakeyakv2 33.70 33.86 34.12 T:norx6444v1 37.21 37.65 38.25 T:ketjesrv1 39.16 39.68 40.57 T:ketjesrv2 41.02 42.05 43.18 T:ketjemajorv2 43.51 44.10 44.55 T:aeadaes128ocbtaglen64v1 44.18 44.68 44.77 T:aeadaes128ocbtaglen96v1 44.83 44.93 45.48 T:oceankeyakv2 51.12 51.50 51.92 T:aeadaes192ocbtaglen64v1 51.95 52.12 52.28 T:aeadaes192ocbtaglen96v1 58.42 59.09 60.10 T:proest256otrv1 58.80 59.62 60.41 T:ketjejrv1 61.38 61.63 62.33 T:aeadaes256ocbtaglen96v1 62.51 62.61 62.96 T:aeadaes256ocbtaglen64v1 64.48 65.48 66.54 T:colm127v1 79.20 79.62 80.26 T:deoxysneq128128v13 88.55 89.19 89.39 T:present80n6t4silcv3 88.86 89.26 90.62 T:ketjejrv2 96.30 96.52 96.80 T:proest128otrv1 99.25 99.54 100.22 T:aezv1 110.36 110.59 110.92 T:deoxysneq256128v13 114.44 115.01 115.70 T:lunarkeyakv2 117.07 118.38 123.78 T:deoxyseq128128v13 151.72 152.64 153.12 T:led80n6t4silcv3 157.07 157.68 158.74 T:deoxyseq256128v13 1652.59 1653.50 1654.55 T:acorn128 2178.45 2179.78 2183.05 T:led80n6t4silcv2 2180.55 2181.48 2183.41 T:led80n6silcv1 2646.53 2647.59 2655.77 T:present80n6t4silcv2 2649.71 2651.84 2665.45 T:present80n6silcv1