VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Redwood Cove (a06a4-40); 2023 Intel Core Ultra 5 125H, P cores; 4 x 1200MHz; meteor,big, supercop-20260330

[Page version: 20260415 05:37:31]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.19 0.19 0.20 T:tiaoxinv2 0.18? 0.20? 0.21? T:tiaoxinv1 0.23 0.23 0.24 aegis128l -0.24? 0.25? 0.70? T:aeadaes128ocbtaglen128v1 -0.16? 0.31? 1.20? T:aeadaes256ocbtaglen128v1 0.35 0.35 0.36 T:aezv4 0.35 0.35 0.36 T:aezv3 0.39 0.39 0.40 aegis256 0.39 0.40 0.40 T:aegis256 0.39? 0.40? 0.44? T:aezv5 0.40 0.41 0.41 T:aegis128 -0.09? 0.42? 1.31? T:aeadaes192ocbtaglen128v1 0.43 0.45 0.46 T:aes128otrsv3 0.43 0.45 0.46 T:aes128otrpv3 0.45 0.46 0.47 T:aes128otrcv3 0.56 0.58 0.59 T:aes256otrsv3 0.57 0.58 0.60 T:aes256otrpv3 0.57 0.60 0.63 T:aes256otrcv3 0.67 0.67 0.68 T:deoxysi128v141 0.67 0.68 0.70 T:morus1280256v1 0.68 0.68 0.69 T:morus1280256v2 0.68 0.69 0.70 T:morus1280128v1 0.68 0.69 0.69 T:morus1280128v2 0.68 0.69 0.70 T:deoxysneq128128v1 0.75 0.76 0.77 T:deoxysi256v141 0.18? 0.77? 0.78? T:deoxysneq256128v1 0.94 0.95 0.96 T:aes128gcmv1 1.02 1.04 1.07 T:norx6444v3 1.06 1.07 1.09 aes256gcmv1 1.18 1.19 1.20 T:morus640128v2 1.17 1.19 1.20 T:morus640128v1 1.32 1.33 1.35 T:deoxysii128v141 1.37 1.39 1.40 T:colm0v1 1.41 1.43 1.45 T:deoxyseq128128v1 1.49 1.50 1.51 T:deoxysii256v141 1.64 1.65 1.67 T:deoxyseq256128v1 1.78 1.84 1.91 T:lunarkeyakv2 2.03 2.05 2.06 T:norx6441v2 2.05 2.08 2.11 T:norx6441v3 2.18 2.19 2.19 T:aes128n12t8clocv2 2.18 2.19 2.19 T:aes128n8t8clocv2 2.18 2.19 2.19 T:aes128n12t8clocv3 2.20 2.20 2.21 T:aes128n12t8silcv2 2.20 2.21 2.21 T:aes128n12t8silcv3 2.20 2.21 2.21 T:aes128n8t8silcv2 2.44 2.46 2.47 T:norx6441v1 2.56 2.61 2.66 T:seakeyakv2 2.61 2.64 2.70 T:oceankeyakv2 2.75 2.78 2.80 T:norx6444v2 2.92 3.00 3.08 T:lakekeyakv1 3.07 3.09 3.11 T:norx6461v3 3.08 3.10 3.12 T:norx6461v2 3.13 3.20 3.26 T:lakekeyakv2 3.26 3.30 3.33 T:norx6444v1 3.60 3.62 3.65 T:norx3241v3 3.62 3.64 3.66 T:norx3241v2 3.69 3.71 3.74 T:norx6461v1 4.04? 4.17? 4.80? T:acorn128v3 4.16 4.30 4.43 T:acorn128v2 4.37 4.39 4.41 T:norx3241v1 4.38 4.39 4.40 T:aesjambuv1 5.49 5.51 5.54 T:norx3261v3 5.55 5.58 5.61 T:norx3261v2 5.49 5.68 5.96 T:ketjemajorv2 6.32 6.38 6.45 T:riverkeyakv2 6.59 6.73 6.88 T:ketjeminorv2 6.71 6.74 6.78 T:ascon96v1 6.72 6.75 6.78 T:ascon128av11 6.71 6.75 6.79 ascon128av12 7.50 7.52 7.53 T:norx3261v1 9.93 9.96 10.00 T:ascon128v11 9.95 9.97 10.00 T:ascon128v1 9.99 10.03 10.06 ascon128v12 11.07 11.10 11.15 T:aes128otrsv1 11.08 11.11 11.14 T:aes128otrpv2 11.13 11.16 11.19 T:aes128otrsv2 11.14 11.17 11.20 T:aes128otrpv1 14.84 14.88 14.91 T:aes256otrpv2 14.85 14.88 14.95 T:aes256otrsv1 14.86 14.90 14.93 T:aes256otrpv1 14.88 14.91 14.94 T:aes256otrsv2 15.25 15.27 15.30 T:twine80n6t4clocv3 16.13 16.18 16.21 T:twine80n6t4clocv2 16.25 16.31 16.39 T:proest256otrv1 20.98 21.04 21.09 T:aeadaes128ocbtaglen96v1 21.01 21.05 21.12 T:aeadaes128ocbtaglen64v1 21.01 21.06 21.13 T:aes128n8clocv1 21.04 21.08 21.13 T:aes128n12clocv1 21.12 22.00 22.18 T:ketjesrv1 24.96 25.02 25.06 T:aeadaes192ocbtaglen64v1 24.99 25.04 25.10 T:aeadaes192ocbtaglen96v1 24.97 25.12 25.86 T:ketjesrv2 29.11 29.91 30.17 T:aeadaes256ocbtaglen96v1 29.45 29.96 30.24 T:aeadaes256ocbtaglen64v1 45.84 45.91 46.19 T:proest128otrv1 45.69 45.96 46.31 T:ketjejrv1 47.53 47.65 50.51 T:colm127v1 61.65 62.09 62.39 T:deoxysneq128128v13 67.04 67.36 68.49 T:ketjejrv2 71.83 71.90 71.97 T:present80n6t4silcv3 82.31 82.37 82.48 T:deoxysneq256128v13 123.20 123.74 124.19 T:deoxyseq128128v13 127.09 127.25 127.37 T:led80n6t4silcv3 128.44 128.62 128.77 T:aezv1 168.95 169.07 169.18 T:deoxyseq256128v13 407.03 408.14 418.08 T:acorn128 2587.02 2589.81 2596.02 T:led80n6t4silcv2 2587.96 2591.83 2602.03 T:led80n6silcv1 3143.94 3152.22 3182.23 T:present80n6silcv1 3139.44 3153.07 3181.98 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.23 0.24 0.24 aegis128l -0.23? 0.24? 0.69? T:aeadaes128ocbtaglen128v1 -0.60? 0.29? 0.75? T:aeadaes256ocbtaglen128v1 0.34 0.35 0.36 T:aezv4 0.35 0.35 0.36 T:aezv3 0.38 0.39 0.39 T:aegis256 0.39 0.39 0.40 T:aegis128 0.39 0.40 0.40 T:aezv5 0.39 0.40 0.41 aegis256 -0.44? 0.42? 0.87? T:aeadaes192ocbtaglen128v1 0.43 0.44 0.45 T:tiaoxinv2 0.43 0.44 0.45 T:tiaoxinv1 0.47 0.49 0.52 T:aes128otrcv3 0.48 0.50 0.52 T:aes128otrsv3 0.50 0.51 0.53 T:aes128otrpv3 0.60 0.62 0.65 T:aes256otrpv3 0.61 0.62 0.64 T:aes256otrsv3 0.60 0.63 0.66 T:aes256otrcv3 0.67 0.68 0.69 T:morus1280256v1 0.67 0.68 0.69 T:morus1280128v1 0.68 0.68 0.69 T:morus1280256v2 0.68 0.68 0.69 T:morus1280128v2 0.69 0.70 0.71 T:aes128gcmv1 0.78 0.79 0.79 T:deoxysi128v141 0.80 0.81 0.82 T:deoxysneq128128v1 0.80 0.82 0.83 aes256gcmv1 0.86 0.87 0.88 T:deoxysi256v141 0.52? 0.90? 0.91? T:deoxysneq256128v1 1.04 1.06 1.08 T:norx6444v3 1.13 1.14 1.16 T:morus640128v2 1.15 1.16 1.17 T:morus640128v1 1.32 1.34 1.35 T:deoxysii128v141 1.38 1.42 1.48 T:colm0v1 1.48 1.50 1.51 T:deoxysii256v141 1.68 1.69 1.71 T:deoxyseq128128v1 1.76 1.77 1.78 T:deoxyseq256128v1 1.81 1.89 1.98 T:lunarkeyakv2 1.95 1.97 1.98 T:norx6441v2 1.95 1.99 2.02 T:norx6441v3 2.11 2.12 2.13 T:aes128n12t8silcv3 2.11 2.12 2.13 T:aes128n12t8silcv2 2.11 2.12 2.13 T:aes128n8t8silcv2 2.11 2.12 2.13 T:aes128n8t8clocv2 2.12 2.12 2.13 T:aes128n12t8clocv3 2.11 2.12 2.14 T:aes128n12t8clocv2 2.41 2.43 2.45 T:norx6441v1 2.60 2.65 2.70 T:seakeyakv2 2.62 2.68 2.74 T:oceankeyakv2 2.74 2.79 2.83 T:norx6444v2 2.92 3.00 3.10 T:lakekeyakv1 3.04 3.06 3.08 T:norx6461v3 3.04 3.06 3.08 T:norx6461v2 3.20 3.26 3.32 T:lakekeyakv2 3.26 3.31 3.38 T:norx6444v1 3.54 3.56 3.59 T:norx3241v3 3.55 3.57 3.59 T:norx3241v2 3.71 3.74 3.76 T:norx6461v1 4.07? 4.23? 5.27? T:acorn128v3 4.23 4.26 4.29 T:norx3241v1 4.23 4.39 4.46 T:acorn128v2 4.66 4.67 4.68 T:aesjambuv1 5.06 5.22 5.48 T:ketjemajorv2 5.49 5.52 5.54 T:norx3261v2 5.52 5.54 5.57 T:norx3261v3 6.46 6.52 6.61 T:riverkeyakv2 6.58 6.64 6.73 T:ascon96v1 6.56 6.67 6.72 ascon128av12 6.64 6.68 6.72 T:ascon128av11 7.05 7.20 7.32 T:ketjeminorv2 7.36 7.37 7.39 T:norx3261v1 9.88 9.91 9.95 T:ascon128v1 9.88 9.92 9.96 T:ascon128v11 9.91 10.03 10.13 ascon128v12 11.44 11.47 11.51 T:aes128otrsv1 11.45 11.49 11.54 T:aes128otrpv2 11.49 11.52 11.58 T:aes128otrsv2 11.49 11.54 11.56 T:aes128otrpv1 15.20 15.25 15.30 T:aes256otrpv2 15.22 15.26 15.29 T:aes256otrsv1 15.23 15.27 15.32 T:aes256otrpv1 15.23 15.28 15.33 T:twine80n6t4clocv3 15.24 15.28 15.33 T:aes256otrsv2 16.04 16.11 16.20 T:twine80n6t4clocv2 16.19 16.29 16.36 T:proest256otrv1 18.78 18.88 18.96 T:aes128n12clocv1 19.22 19.31 19.44 T:aes128n8clocv1 22.19 22.44 22.70 T:ketjesrv2 24.70 25.17 25.26 T:ketjesrv1 34.72 34.80 34.92 T:aeadaes128ocbtaglen96v1 34.70 34.80 34.88 T:aeadaes128ocbtaglen64v1 42.05 42.14 42.25 T:aeadaes192ocbtaglen64v1 42.05 42.14 42.21 T:aeadaes192ocbtaglen96v1 45.95 46.33 46.62 T:ketjejrv1 46.25 46.34 46.68 T:proest128otrv1 49.41 49.48 49.60 T:aeadaes256ocbtaglen64v1 49.40 49.49 49.60 T:aeadaes256ocbtaglen96v1 69.11 69.47 70.59 T:ketjejrv2 72.43 72.51 72.58 T:present80n6t4silcv3 74.80 74.91 75.04 T:colm127v1 81.38 81.68 82.12 T:deoxysneq128128v13 112.60 113.07 113.55 T:deoxysneq256128v13 124.04 124.65 128.36 T:deoxyseq128128v13 127.33 127.52 127.68 T:led80n6t4silcv3 128.24 128.56 128.79 T:aezv1 168.88 169.03 169.11 T:deoxyseq256128v13 453.00 456.35 476.10 T:acorn128 2586.11 2587.93 2592.12 T:led80n6t4silcv2 2586.80 2591.36 2604.72 T:led80n6silcv1 3141.84 3150.10 3165.12 T:present80n6silcv1 3141.25 3150.95 3177.37 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.13? 0.14? 0.15? T:aezv3 0.13 0.14 0.14 T:aezv4 0.14? 0.15? 0.16? T:aezv5 -0.19? 0.24? 0.69? T:aeadaes128ocbtaglen128v1 0.25 0.25 0.26 aegis128l -0.58? 0.29? 1.15? T:aeadaes256ocbtaglen128v1 0.38 0.39 0.39 T:aegis256 0.39 0.39 0.40 T:aegis128 0.41 0.41 0.42 aegis256 -0.01? 0.42? 1.33? T:aeadaes192ocbtaglen128v1 0.43 0.44 0.44 T:tiaoxinv2 0.43 0.44 0.45 T:tiaoxinv1 0.48 0.50 0.51 T:aes128otrcv3 0.48 0.50 0.51 T:aes128otrsv3 0.49 0.50 0.52 T:aes128otrpv3 0.61 0.62 0.63 T:aes256otrpv3 0.61 0.63 0.64 T:aes256otrcv3 0.61 0.63 0.65 T:aes256otrsv3 0.67 0.68 0.69 T:morus1280128v1 0.67 0.68 0.69 T:morus1280256v1 0.67 0.68 0.69 T:morus1280256v2 0.67 0.69 0.70 T:morus1280128v2 0.68 0.69 0.71 T:aes128gcmv1 0.77 0.78 0.79 T:deoxysi128v141 0.80 0.81 0.83 aes256gcmv1 0.80 0.81 0.83 T:deoxysneq128128v1 0.86 0.87 0.88 T:deoxysi256v141 0.89 0.90 0.92 T:deoxysneq256128v1 1.04 1.06 1.07 T:norx6444v3 1.13 1.14 1.16 T:morus640128v2 1.14 1.16 1.17 T:morus640128v1 1.32 1.33 1.34 T:deoxysii128v141 1.39 1.41 1.46 T:colm0v1 1.49 1.50 1.52 T:deoxysii256v141 1.69 1.70 1.72 T:deoxyseq128128v1 1.76 1.77 1.79 T:deoxyseq256128v1 1.85 1.92 1.98 T:lunarkeyakv2 1.95 1.97 2.00 T:norx6441v2 1.96 1.99 2.02 T:norx6441v3 2.11 2.11 2.12 T:aes128n8t8silcv2 2.11 2.12 2.12 T:aes128n12t8silcv2 2.11 2.12 2.12 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128n8t8clocv2 2.10 2.12 2.14 T:aes128n12t8clocv2 2.11 2.12 2.13 T:aes128n12t8clocv3 2.41 2.44 2.46 T:norx6441v1 2.60 2.67 2.74 T:seakeyakv2 2.64 2.68 2.73 T:oceankeyakv2 2.79 2.82 2.86 T:norx6444v2 2.94 3.03 3.10 T:lakekeyakv1 3.04 3.06 3.08 T:norx6461v2 3.04 3.06 3.08 T:norx6461v3 3.19 3.27 3.33 T:lakekeyakv2 3.29 3.33 3.38 T:norx6444v1 3.54 3.57 3.58 T:norx3241v3 3.55 3.57 3.59 T:norx3241v2 3.67 3.72 3.75 T:norx6461v1 4.24 4.27 4.30 T:norx3241v1 4.04? 4.27? 4.84? T:acorn128v3 4.26 4.36 4.44 T:acorn128v2 4.67? 4.68? 8.16? T:aesjambuv1 5.18 5.32 5.55 T:ketjemajorv2 5.49 5.51 5.54 T:norx3261v2 5.52 5.55 5.58 T:norx3261v3 6.49 6.60 6.71 T:riverkeyakv2 6.63 6.66 6.70 T:ascon128av11 6.59 6.66 6.75 T:ascon96v1 6.66 6.70 6.74 ascon128av12 7.06 7.22 7.34 T:ketjeminorv2 7.35 7.37 7.38 T:norx3261v1 9.87 9.90 9.95 T:ascon128v1 9.88 9.92 9.95 T:ascon128v11 9.88 9.96 10.12 ascon128v12 11.46 11.51 11.55 T:aes128otrsv1 11.47 11.51 11.56 T:aes128otrpv2 11.51 11.55 11.60 T:aes128otrsv2 11.51 11.56 11.63 T:aes128otrpv1 15.21 15.27 15.33 T:aes256otrsv1 15.23 15.28 15.32 T:twine80n6t4clocv3 15.24 15.28 15.32 T:aes256otrpv2 15.25 15.29 15.34 T:aes256otrsv2 15.27 15.31 15.35 T:aes256otrpv1 16.03 16.14 16.20 T:twine80n6t4clocv2 16.22 16.32 16.42 T:proest256otrv1 18.80 18.90 19.02 T:aes128n12clocv1 19.21 19.28 19.38 T:aes128n8clocv1 22.33 22.61 22.81 T:ketjesrv2 24.68 25.22 25.34 T:ketjesrv1 34.72 34.78 34.86 T:aeadaes128ocbtaglen64v1 34.71 34.78 34.87 T:aeadaes128ocbtaglen96v1 42.05 42.13 42.19 T:aeadaes192ocbtaglen96v1 42.03 42.13 42.24 T:aeadaes192ocbtaglen64v1 46.27 46.34 46.63 T:proest128otrv1 46.35 46.66 46.89 T:ketjejrv1 49.37 49.47 49.57 T:aeadaes256ocbtaglen64v1 49.38 49.48 49.58 T:aeadaes256ocbtaglen96v1 69.38 69.78 71.11 T:ketjejrv2 72.46 72.51 72.58 T:present80n6t4silcv3 73.70 73.84 74.00 T:colm127v1 80.49 81.20 82.52 T:deoxysneq128128v13 112.43 112.70 113.09 T:deoxysneq256128v13 123.69 124.20 124.84 T:deoxyseq128128v13 127.39 127.50 127.65 T:led80n6t4silcv3 128.32 128.42 128.68 T:aezv1 168.85 168.97 169.13 T:deoxyseq256128v13 453.20 454.83 469.87 T:acorn128 2585.89 2588.57 2597.96 T:led80n6t4silcv2 2585.72 2589.52 2599.20 T:led80n6silcv1 3139.79 3149.78 3162.43 T:present80n6silcv1 3139.96 3150.04 3174.57 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.15? 0.16? 0.17? T:tiaoxinv2 0.15? 0.16? 0.17? T:tiaoxinv1 0.21 0.21 0.22 aegis128l -0.02? 0.22? 0.47? T:aeadaes128ocbtaglen128v1 0.26 0.26 0.27 T:aezv4 0.26 0.26 0.27 T:aezv3 0.03? 0.27? 0.54? T:aeadaes256ocbtaglen128v1 0.28? 0.30? 0.32? T:aezv5 0.38 0.39 0.39 T:aegis256 0.38 0.39 0.39 aegis256 0.39 0.40 0.40 T:aegis128 0.13? 0.40? 0.64? T:aeadaes192ocbtaglen128v1 0.46 0.47 0.48 T:aes128otrpv3 0.47 0.48 0.49 T:aes128otrcv3 0.58 0.59 0.60 T:aes256otrpv3 0.60 0.61 0.62 T:aes256otrcv3 0.62 0.64 0.65 T:aes128gcmv1 0.66 0.67 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280128v1 0.66 0.67 0.67 T:morus1280256v2 0.66 0.67 0.67 T:morus1280128v2 0.67 0.67 0.68 T:deoxysi128v141 0.68 0.69 0.70 T:deoxysneq128128v1 0.69 0.70 0.71 aes256gcmv1 0.75 0.76 0.76 T:deoxysi256v141 0.76 0.77 0.78 T:deoxysneq256128v1 0.98 0.99 1.00 T:colm0v1 1.00 1.00 1.01 T:deoxysii128v141 1.06 1.07 1.08 T:deoxyseq128128v1 1.13 1.13 1.14 T:deoxysii256v141 1.14 1.15 1.16 T:morus640128v2 1.14 1.15 1.16 T:morus640128v1 1.23 1.24 1.25 T:deoxyseq256128v1 1.28 1.29 1.30 T:aes128otrsv3 1.55 1.56 1.58 T:norx6444v3 1.73 1.74 1.75 T:aes256otrsv3 2.03 2.04 2.06 T:norx6441v2 2.04 2.06 2.07 T:norx6441v3 2.16 2.16 2.17 T:aes128n12t8silcv2 2.16 2.17 2.17 T:aes128n12t8silcv3 2.16 2.17 2.17 T:aes128n12t8clocv3 2.16 2.17 2.17 T:aes128n8t8silcv2 2.16 2.17 2.18 T:aes128n12t8clocv2 2.17 2.17 2.18 T:aes128n8t8clocv2 2.16 2.19 2.22 T:oceankeyakv2 2.18 2.21 2.23 T:seakeyakv2 2.46 2.47 2.48 T:norx6441v1 2.60 2.64 2.68 T:lunarkeyakv2 2.65 2.67 2.70 T:norx6444v2 2.80 2.85 2.90 T:lakekeyakv2 2.80 2.85 2.90 T:lakekeyakv1 3.10 3.11 3.12 T:norx6461v3 3.10 3.11 3.13 T:norx6461v2 3.17 3.20 3.23 T:norx6444v1 3.62 3.63 3.65 T:norx3241v3 3.66 3.67 3.69 T:norx3241v2 3.69 3.71 3.72 T:norx6461v1 4.34 4.35 4.35 T:aesjambuv1 4.38 4.40 4.42 T:norx3241v1 4.56 4.61 4.66 T:riverkeyakv2 4.56 4.66 4.78 T:acorn128v3 4.67 4.75 4.80 T:ketjemajorv2 4.53 4.77 4.91 T:acorn128v2 5.51 5.53 5.55 T:norx3261v2 5.51 5.53 5.55 T:norx3261v3 6.17 6.31 6.40 T:ketjeminorv2 6.54 6.57 6.58 T:ascon96v1 6.54 6.57 6.60 T:ascon128av11 6.69 6.72 6.74 ascon128av12 7.50 7.51 7.52 T:norx3261v1 9.78 9.80 9.82 T:ascon128v1 9.78 9.80 9.83 T:ascon128v11 9.99 10.03 10.05 ascon128v12 10.78 10.83 10.86 T:aes128otrpv2 10.84 10.86 10.87 T:aes128otrpv1 11.17 11.18 11.22 T:aes128otrsv1 11.18 11.20 11.23 T:aes128otrsv2 14.59 14.61 14.64 T:aes256otrpv1 14.59 14.62 14.64 T:aes256otrpv2 14.94 14.96 14.98 T:aes256otrsv1 14.95 14.98 15.01 T:aes256otrsv2 15.03 15.07 15.10 T:twine80n6t4clocv3 15.81 15.83 15.85 T:twine80n6t4clocv2 16.21 16.23 16.25 T:aes128n8clocv1 16.23 16.25 16.29 T:aes128n12clocv1 16.47 16.52 16.56 T:proest256otrv1 20.67 20.72 20.77 T:aeadaes128ocbtaglen64v1 20.69 20.73 20.77 T:aeadaes128ocbtaglen96v1 20.83 21.48 21.57 T:ketjesrv1 22.80 22.95 23.03 T:ketjesrv2 24.66 24.70 24.74 T:aeadaes192ocbtaglen96v1 24.69 24.72 24.76 T:aeadaes192ocbtaglen64v1 28.81 29.65 29.85 T:aeadaes256ocbtaglen64v1 28.83 29.80 30.04 T:aeadaes256ocbtaglen96v1 34.95 35.17 35.27 T:colm127v1 42.91 43.01 43.14 T:ketjejrv1 46.43 46.79 46.84 T:proest128otrv1 61.35 61.71 62.35 T:deoxysneq128128v13 64.97 65.18 66.34 T:ketjejrv2 71.66 71.70 71.75 T:present80n6t4silcv3 82.69 82.74 82.82 T:deoxysneq256128v13 84.58 84.78 84.99 T:aezv1 91.41 92.94 93.68 T:deoxyseq128128v13 126.50 126.56 126.66 T:deoxyseq256128v13 126.60 126.71 126.86 T:led80n6t4silcv3 408.84 410.36 421.17 T:acorn128 1939.69 1941.62 1943.63 T:led80n6silcv1 1939.03 1943.01 1950.58 T:led80n6t4silcv2 2355.41 2360.37 2370.61 T:present80n6silcv1 2358.32 2366.17 2382.21 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.21 0.21 0.22 aegis128l -0.03? 0.21? 0.45? T:aeadaes128ocbtaglen128v1 0.26 0.26 0.27 T:aezv4 -0.18? 0.26? 0.52? T:aeadaes256ocbtaglen128v1 0.26 0.27 0.27 T:aezv3 0.27 0.28 0.28 T:tiaoxinv1 0.27 0.28 0.29 T:tiaoxinv2 0.27 0.28 0.30 T:aezv5 0.38 0.38 0.39 T:aegis256 0.39 0.39 0.39 T:aegis128 0.39 0.39 0.40 aegis256 0.14? 0.40? 0.84? T:aeadaes192ocbtaglen128v1 0.48 0.50 0.50 T:aes128otrpv3 0.49 0.50 0.51 T:aes128otrcv3 0.50 0.50 0.51 T:aes128gcmv1 0.56 0.57 0.58 aes256gcmv1 0.59 0.60 0.62 T:aes256otrpv3 0.62 0.64 0.65 T:aes256otrcv3 0.66 0.66 0.67 T:morus1280128v1 0.66 0.67 0.67 T:morus1280128v2 0.66 0.67 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280256v2 0.72 0.73 0.73 T:deoxysi128v141 0.74 0.75 0.75 T:deoxysneq128128v1 0.81 0.82 0.82 T:deoxysi256v141 0.82 0.83 0.84 T:deoxysneq256128v1 0.98 1.00 1.04 T:colm0v1 1.00 1.01 1.01 T:deoxysii128v141 1.10 1.11 1.12 T:morus640128v2 1.12 1.13 1.14 T:morus640128v1 1.13 1.13 1.14 T:deoxysii256v141 1.20 1.21 1.22 T:deoxyseq128128v1 1.29 1.29 1.30 T:deoxyseq256128v1 1.29 1.30 1.31 T:aes128otrsv3 1.54 1.55 1.56 T:norx6444v3 1.75 1.76 1.77 T:aes256otrsv3 2.03 2.05 2.07 T:norx6441v3 2.05 2.06 2.07 T:norx6441v2 2.12 2.13 2.14 T:aes128n12t8silcv2 2.12 2.13 2.18 T:aes128n12t8clocv3 2.12 2.13 2.14 T:aes128n12t8silcv3 2.12 2.13 2.15 T:aes128n8t8silcv2 2.12 2.13 2.18 T:aes128n12t8clocv2 2.12 2.14 2.19 T:aes128n8t8clocv2 2.18 2.22 2.25 T:oceankeyakv2 2.21 2.24 2.26 T:seakeyakv2 2.43 2.44 2.45 T:norx6441v1 2.61 2.66 2.71 T:lunarkeyakv2 2.66 2.68 2.70 T:norx6444v2 2.80 2.85 2.90 T:lakekeyakv1 2.82 2.87 2.90 T:lakekeyakv2 3.06 3.07 3.09 T:norx6461v3 3.07 3.09 3.10 T:norx6461v2 3.17 3.20 3.23 T:norx6444v1 3.60 3.61 3.63 T:norx3241v3 3.60 3.62 3.63 T:norx3241v2 3.65 3.67 3.69 T:norx6461v1 4.34 4.36 4.38 T:norx3241v1 4.49 4.49 4.49 T:aesjambuv1 4.25? 4.55? 4.82? T:acorn128v2 4.37 4.56 4.76 T:ketjemajorv2 4.48 4.59 4.84 T:acorn128v3 4.66 4.72 4.83 T:riverkeyakv2 5.49 5.51 5.53 T:norx3261v2 5.53 5.54 5.56 T:norx3261v3 6.35 6.47 6.57 T:ketjeminorv2 6.45 6.50 6.57 T:ascon96v1 6.49 6.52 6.56 T:ascon128av11 6.64 6.68 6.71 ascon128av12 7.43 7.44 7.45 T:norx3261v1 9.70 9.73 9.75 T:ascon128v11 9.71 9.73 9.76 T:ascon128v1 9.93 9.99 10.05 ascon128v12 10.95 11.01 11.05 T:aes128otrpv2 11.01 11.04 11.06 T:aes128otrpv1 11.35 11.37 11.40 T:aes128otrsv1 11.36 11.39 11.41 T:aes128otrsv2 14.74 14.77 14.81 T:aes256otrpv1 14.74 14.79 14.83 T:aes256otrpv2 15.01 15.05 15.10 T:twine80n6t4clocv3 15.09 15.14 15.19 T:aes128n12clocv1 15.11 15.14 15.18 T:aes256otrsv2 15.13 15.15 15.17 T:aes256otrsv1 15.28 15.33 15.36 T:aes128n8clocv1 15.78 15.81 15.84 T:twine80n6t4clocv2 16.45 16.50 16.55 T:proest256otrv1 21.40 21.49 21.67 T:ketjesrv2 22.60 22.92 23.01 T:ketjesrv1 27.57 27.62 27.66 T:aeadaes128ocbtaglen96v1 27.58 27.63 27.67 T:aeadaes128ocbtaglen64v1 33.25 33.29 33.33 T:aeadaes192ocbtaglen64v1 33.25 33.30 33.35 T:aeadaes192ocbtaglen96v1 38.97 39.46 39.59 T:aeadaes256ocbtaglen64v1 39.50 39.62 39.71 T:aeadaes256ocbtaglen96v1 42.71 43.04 43.25 T:ketjejrv1 46.79 47.07 47.14 T:proest128otrv1 48.71 48.84 48.94 T:colm127v1 66.15 66.37 67.57 T:ketjejrv2 70.24 70.95 71.21 T:deoxysneq128128v13 71.97 72.02 72.07 T:present80n6t4silcv3 84.69 84.88 85.30 T:aezv1 91.41 92.17 93.56 T:deoxyseq128128v13 97.78 97.98 98.18 T:deoxysneq256128v13 126.46 126.53 126.62 T:deoxyseq256128v13 126.76 126.87 127.39 T:led80n6t4silcv3 431.59 433.56 439.62 T:acorn128 1939.02 1940.87 1942.38 T:led80n6silcv1 1939.00 1941.12 1944.16 T:led80n6t4silcv2 2359.35 2366.24 2382.34 T:present80n6silcv1 2356.85 2366.30 2382.21 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.14? 0.15? 0.16? T:aezv4 0.15 0.15 0.16 T:aezv3 0.15? 0.15? 0.17? T:aezv5 -0.01? 0.21? 0.44? T:aeadaes128ocbtaglen128v1 0.22 0.22 0.23 aegis128l -0.18? 0.27? 0.73? T:aeadaes256ocbtaglen128v1 0.27 0.28 0.29 T:tiaoxinv1 0.28 0.28 0.29 T:tiaoxinv2 0.38 0.38 0.38 T:aegis256 0.39 0.39 0.39 T:aegis128 0.39 0.40 0.40 aegis256 -0.03? 0.40? 0.63? T:aeadaes192ocbtaglen128v1 0.48 0.49 0.50 T:aes128otrcv3 0.49 0.49 0.50 T:aes128otrpv3 0.49 0.50 0.51 T:aes128gcmv1 0.56 0.57 0.58 aes256gcmv1 0.60 0.61 0.62 T:aes256otrpv3 0.63 0.64 0.65 T:aes256otrcv3 0.66 0.67 0.67 T:morus1280256v1 0.66 0.67 0.67 T:morus1280128v1 0.66 0.67 0.67 T:morus1280256v2 0.66 0.67 0.67 T:morus1280128v2 0.72 0.73 0.73 T:deoxysi128v141 0.75 0.75 0.76 T:deoxysneq128128v1 0.81 0.81 0.82 T:deoxysi256v141 0.83 0.83 0.84 T:deoxysneq256128v1 0.98 1.00 1.02 T:colm0v1 1.00 1.01 1.01 T:deoxysii128v141 1.10 1.11 1.12 T:morus640128v2 1.12 1.13 1.14 T:morus640128v1 1.13 1.14 1.14 T:deoxysii256v141 1.20 1.21 1.23 T:deoxyseq128128v1 1.28 1.29 1.30 T:deoxyseq256128v1 1.29 1.30 1.30 T:aes128otrsv3 1.54 1.55 1.56 T:norx6444v3 1.74 1.75 1.76 T:aes256otrsv3 2.03 2.05 2.07 T:norx6441v3 2.05 2.06 2.08 T:norx6441v2 2.12 2.13 2.14 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n12t8silcv2 2.12 2.13 2.13 T:aes128n12t8silcv3 2.12 2.13 2.19 T:aes128n12t8clocv2 2.12 2.13 2.15 T:aes128n8t8silcv2 2.12 2.13 2.18 T:aes128n8t8clocv2 2.20 2.23 2.26 T:oceankeyakv2 2.22 2.25 2.28 T:seakeyakv2 2.43 2.45 2.47 T:norx6441v1 2.60 2.65 2.69 T:lunarkeyakv2 2.66 2.69 2.71 T:norx6444v2 2.80 2.84 2.89 T:lakekeyakv1 2.82 2.86 2.90 T:lakekeyakv2 3.06 3.07 3.09 T:norx6461v3 3.07 3.09 3.10 T:norx6461v2 3.18 3.21 3.24 T:norx6444v1 3.60 3.61 3.63 T:norx3241v3 3.61 3.62 3.63 T:norx3241v2 3.66 3.67 3.69 T:norx6461v1 4.16 4.23 4.33 T:acorn128v2 4.34 4.36 4.37 T:norx3241v1 4.33 4.42 4.59 T:ketjemajorv2 4.49 4.49 4.50 T:aesjambuv1 4.65 4.69 4.75 T:riverkeyakv2 4.29? 4.98? 5.05? T:acorn128v3 5.48 5.50 5.52 T:norx3261v2 5.53 5.54 5.56 T:norx3261v3 6.49 6.52 6.55 T:ascon128av11 6.47 6.54 6.59 T:ascon96v1 6.35 6.54 6.64 T:ketjeminorv2 6.65 6.69 6.71 ascon128av12 7.44 7.44 7.45 T:norx3261v1 9.70 9.74 9.77 T:ascon128v11 9.72 9.74 9.77 T:ascon128v1 9.92 9.98 10.04 ascon128v12 10.96 11.04 11.07 T:aes128otrpv2 11.01 11.04 11.08 T:aes128otrpv1 11.36 11.38 11.42 T:aes128otrsv1 11.36 11.40 11.43 T:aes128otrsv2 14.74 14.78 14.82 T:aes256otrpv2 14.76 14.79 14.83 T:aes256otrpv1 15.02 15.05 15.09 T:twine80n6t4clocv3 15.10 15.13 15.18 T:aes128n12clocv1 15.14 15.17 15.20 T:aes256otrsv1 15.14 15.17 15.20 T:aes256otrsv2 15.30 15.35 15.39 T:aes128n8clocv1 15.79 15.83 15.87 T:twine80n6t4clocv2 16.45 16.49 16.70 T:proest256otrv1 21.44 21.55 21.69 T:ketjesrv2 22.76 22.96 23.13 T:ketjesrv1 27.58 27.62 27.67 T:aeadaes128ocbtaglen96v1 27.58 27.63 27.66 T:aeadaes128ocbtaglen64v1 33.24 33.29 33.32 T:aeadaes192ocbtaglen96v1 33.25 33.29 33.34 T:aeadaes192ocbtaglen64v1 39.22 39.55 39.66 T:aeadaes256ocbtaglen64v1 39.05 39.59 39.71 T:aeadaes256ocbtaglen96v1 43.40 43.60 43.76 T:ketjejrv1 46.66 47.09 47.13 T:proest128otrv1 48.17 48.30 48.39 T:colm127v1 65.98 66.22 67.73 T:ketjejrv2 69.88 70.68 71.03 T:deoxysneq128128v13 71.98 72.02 72.06 T:present80n6t4silcv3 84.61 84.75 85.04 T:aezv1 92.35 92.89 94.35 T:deoxyseq128128v13 97.78 97.97 98.15 T:deoxysneq256128v13 126.48 126.58 126.69 T:deoxyseq256128v13 126.76 126.85 126.99 T:led80n6t4silcv3 432.07 433.51 438.89 T:acorn128 1939.80 1941.36 1945.35 T:led80n6silcv1 1939.15 1942.09 1945.95 T:led80n6t4silcv2 2356.89 2369.19 2386.85 T:present80n6t4silcv2 2361.38 2372.04 2391.83 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.11? 0.12? 0.13? T:tiaoxinv1 0.11? 0.12? 0.13? T:tiaoxinv2 0.16? 0.17? 0.18? T:aezv3 0.16 0.17 0.17 T:aezv5 0.16 0.17 0.17 T:aezv4 0.18 0.19 0.19 aegis128l -0.27? 0.20? 0.66? T:aeadaes128ocbtaglen128v1 -0.62? 0.26? 0.73? T:aeadaes256ocbtaglen128v1 0.32 0.34 0.35 aes256gcmv1 0.32 0.34 0.35 T:aes128gcmv1 0.37 0.38 0.38 T:aegis256 0.38 0.38 0.39 aegis256 0.38 0.39 0.39 T:aegis128 -0.06? 0.41? 0.87? T:aeadaes192ocbtaglen128v1 0.46 0.48 0.50 T:aes128otrcv3 0.47 0.49 0.50 T:aes128otrpv3 0.58 0.59 0.60 T:colm0v1 0.58 0.59 0.61 T:aes256otrpv3 0.60 0.63 0.66 T:aes256otrcv3 0.64 0.65 0.65 T:morus1280256v2 0.64 0.65 0.65 T:morus1280128v2 0.63 0.65 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280128v1 0.67 0.67 0.68 T:deoxysi128v141 0.66 0.67 0.68 T:deoxysii128v141 0.67 0.68 0.69 T:deoxysneq128128v1 0.70 0.71 0.72 T:deoxyseq128128v1 0.75 0.76 0.76 T:deoxysi256v141 0.76 0.76 0.77 T:deoxysneq256128v1 0.75 0.76 0.78 T:deoxysii256v141 0.82 0.83 0.84 T:deoxyseq256128v1 1.09 1.10 1.12 T:morus640128v2 1.10 1.11 1.13 T:morus640128v1 1.66 1.72 1.80 T:lunarkeyakv2 1.69 1.75 1.79 T:oceankeyakv2 1.99 2.03 2.04 T:norx6441v3 2.02 2.04 2.05 T:norx6441v2 2.05 2.07 2.10 T:norx6444v3 2.10 2.11 2.12 T:aes128n8t8clocv2 2.10 2.11 2.12 T:aes128n12t8clocv2 2.10 2.11 2.12 T:aes128n12t8clocv3 2.08 2.11 2.14 T:seakeyakv2 2.11 2.12 2.13 T:aes128n12t8silcv3 2.11 2.12 2.13 T:aes128otrsv3 2.12 2.12 2.12 T:aes128n8t8silcv2 2.12 2.12 2.13 T:aes128n12t8silcv2 2.44 2.46 2.48 T:norx6441v1 2.51 2.53 2.56 T:norx6444v2 2.50 2.58 2.65 T:lakekeyakv2 2.58 2.66 2.76 T:lakekeyakv1 2.87 2.87 2.87 T:aes256otrsv3 3.02 3.06 3.09 T:norx6444v1 3.09 3.11 3.13 T:norx6461v3 3.11 3.12 3.14 T:norx6461v2 3.62 3.64 3.66 T:norx3241v3 3.65 3.67 3.68 T:norx3241v2 3.67 3.69 3.71 T:norx6461v1 3.53? 3.77? 4.11? T:ketjemajorv2 4.30 4.31 4.31 T:aesjambuv1 4.30 4.37 4.42 T:riverkeyakv2 4.38 4.40 4.41 T:norx3241v1 4.14? 4.52? 5.55? T:acorn128v2 4.48? 4.87? 5.18? T:acorn128v3 5.45 5.47 5.50 T:norx3261v2 5.53 5.55 5.57 T:norx3261v3 5.60 5.71 5.83 T:ketjeminorv2 6.32 6.39 6.43 T:ascon128av11 6.36 6.39 6.42 T:ascon96v1 6.64 6.68 6.71 ascon128av12 7.50 7.51 7.53 T:norx3261v1 9.60 9.62 9.65 T:ascon128v11 9.60 9.62 9.65 T:ascon128v1 9.96 10.00 10.04 ascon128v12 10.41 10.47 10.51 T:aes128otrpv1 10.44 10.51 10.56 T:aes128otrpv2 11.22 11.25 11.28 T:aes128otrsv1 11.24 11.26 11.29 T:aes128otrsv2 11.40 11.44 11.48 T:aes128n12clocv1 11.41 11.45 11.48 T:aes128n8clocv1 14.22 14.26 14.30 T:aes256otrpv2 14.24 14.27 14.31 T:aes256otrpv1 14.77 14.80 14.89 T:twine80n6t4clocv3 15.01 15.04 15.07 T:aes256otrsv1 15.01 15.04 15.07 T:aes256otrsv2 15.46 15.49 15.53 T:twine80n6t4clocv2 16.21 16.42 16.71 T:proest256otrv1 20.36 20.41 20.48 T:aeadaes128ocbtaglen64v1 20.37 20.43 20.47 T:aeadaes128ocbtaglen96v1 20.46 20.56 20.65 T:ketjesrv2 20.73 20.91 21.09 T:ketjesrv1 22.35 22.69 22.83 T:colm127v1 24.37 24.41 24.46 T:aeadaes192ocbtaglen64v1 24.37 24.41 24.46 T:aeadaes192ocbtaglen96v1 28.27 29.01 29.63 T:aeadaes256ocbtaglen96v1 29.48 29.67 29.82 T:aeadaes256ocbtaglen64v1 39.92 40.06 40.17 T:ketjejrv1 40.54 40.61 40.69 T:aezv1 46.79 46.87 47.16 T:proest128otrv1 59.78 60.11 60.61 T:deoxyseq128128v13 59.86 60.31 61.03 T:deoxysneq128128v13 62.95 63.31 64.52 T:ketjejrv2 71.47 71.52 71.57 T:present80n6t4silcv3 83.05 83.12 83.23 T:deoxysneq256128v13 83.89 84.01 84.11 T:deoxyseq256128v13 126.12 126.22 126.36 T:led80n6t4silcv3 410.50 412.36 424.40 T:acorn128 1291.39 1294.96 1299.76 T:led80n6silcv1 1290.37 1295.45 1301.00 T:led80n6t4silcv2 1567.84 1571.95 1579.76 T:present80n6t4silcv2 1568.52 1575.55 1584.36 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.11 0.12 0.12 T:tiaoxinv2 0.11 0.12 0.12 T:tiaoxinv1 0.16 0.17 0.17 T:aezv5 0.16? 0.17? 0.18? T:aezv3 0.16? 0.17? 0.18? T:aezv4 0.18 0.19 0.19 aegis128l -0.25? 0.20? 0.66? T:aeadaes128ocbtaglen128v1 -0.65? 0.25? 1.13? T:aeadaes256ocbtaglen128v1 0.31 0.32 0.33 T:aes128gcmv1 0.33 0.34 0.35 aes256gcmv1 0.37 0.38 0.38 T:aegis256 0.38 0.38 0.39 aegis256 0.38 0.38 0.39 T:aegis128 -0.04? 0.40? 0.83? T:aeadaes192ocbtaglen128v1 0.47 0.48 0.51 T:aes128otrcv3 0.48 0.49 0.50 T:aes128otrpv3 0.57 0.58 0.59 T:colm0v1 0.57 0.60 0.62 T:aes256otrpv3 0.60 0.62 0.64 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280256v2 0.67 0.67 0.68 T:deoxysi128v141 0.66 0.68 0.69 T:deoxysii128v141 0.68 0.69 0.69 T:deoxysneq128128v1 0.70 0.71 0.72 T:deoxyseq128128v1 0.75 0.76 0.76 T:deoxysi256v141 0.75 0.76 0.77 T:deoxysii256v141 0.75 0.76 0.77 T:deoxysneq256128v1 0.81 0.82 0.83 T:deoxyseq256128v1 1.06 1.08 1.10 T:morus640128v2 1.09 1.11 1.12 T:morus640128v1 1.64 1.71 1.78 T:lunarkeyakv2 1.70 1.75 1.80 T:oceankeyakv2 2.05 2.06 2.08 T:norx6444v3 2.06 2.09 2.12 T:norx6441v3 2.08 2.10 2.11 T:norx6441v2 2.09 2.12 2.15 T:seakeyakv2 2.11 2.12 2.13 T:aes128n12t8clocv3 2.11 2.12 2.12 T:aes128otrsv3 2.12 2.12 2.13 T:aes128n12t8clocv2 2.10 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.13 T:aes128n8t8clocv2 2.12 2.12 2.13 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128n8t8silcv2 2.43 2.45 2.47 T:norx6441v1 2.49 2.53 2.56 T:norx6444v2 2.49 2.56 2.65 T:lakekeyakv2 2.58 2.65 2.73 T:lakekeyakv1 2.87 2.87 2.88 T:aes256otrsv3 3.01 3.05 3.09 T:norx6444v1 3.06 3.07 3.10 T:norx6461v3 3.09 3.11 3.13 T:norx6461v2 3.64 3.66 3.68 T:norx3241v3 3.65 3.68 3.70 T:norx6461v1 3.66 3.68 3.70 T:norx3241v2 3.51? 3.85? 3.99? T:ketjemajorv2 4.15 4.27 4.34 T:acorn128v3 4.30 4.31 4.31 T:aesjambuv1 4.30 4.37 4.43 T:riverkeyakv2 4.38 4.41 4.43 T:norx3241v1 4.32? 5.14? 5.24? T:acorn128v2 5.45 5.47 5.50 T:norx3261v2 5.53 5.56 5.58 T:norx3261v3 5.63 5.78 5.86 T:ketjeminorv2 6.31 6.38 6.43 T:ascon128av11 6.32 6.40 6.44 T:ascon96v1 6.66 6.68 6.71 ascon128av12 7.50 7.52 7.53 T:norx3261v1 9.53 9.56 9.59 T:ascon128v1 9.53 9.56 9.60 T:ascon128v11 9.94 9.98 10.03 ascon128v12 10.45 10.48 10.53 T:aes128otrpv1 10.41 10.50 10.55 T:aes128otrpv2 11.21 11.25 11.30 T:aes128otrsv1 11.23 11.26 11.30 T:aes128otrsv2 11.39 11.45 11.49 T:aes128n8clocv1 11.41 11.46 11.49 T:aes128n12clocv1 14.21 14.26 14.32 T:aes256otrpv2 14.24 14.28 14.33 T:aes256otrpv1 14.78 14.85 14.90 T:twine80n6t4clocv3 15.00 15.04 15.08 T:aes256otrsv2 15.02 15.06 15.09 T:aes256otrsv1 15.45 15.49 15.58 T:twine80n6t4clocv2 16.45 16.73 17.00 T:proest256otrv1 20.36 20.41 20.46 T:aeadaes128ocbtaglen96v1 20.37 20.41 20.47 T:aeadaes128ocbtaglen64v1 20.42 20.55 20.64 T:ketjesrv2 20.63 20.79 21.12 T:ketjesrv1 22.50 22.77 22.91 T:colm127v1 24.35 24.39 24.44 T:aeadaes192ocbtaglen64v1 24.37 24.42 24.47 T:aeadaes192ocbtaglen96v1 29.42 29.59 29.76 T:aeadaes256ocbtaglen64v1 29.46 29.66 29.81 T:aeadaes256ocbtaglen96v1 40.01 40.21 40.37 T:ketjejrv1 40.58 40.67 40.72 T:aezv1 46.82 46.92 47.26 T:proest128otrv1 59.46 60.64 61.33 T:deoxyseq128128v13 60.52 61.27 61.52 T:deoxysneq128128v13 62.78 63.15 64.64 T:ketjejrv2 71.46 71.53 71.59 T:present80n6t4silcv3 83.09 83.16 83.24 T:deoxysneq256128v13 83.85 83.91 83.99 T:deoxyseq256128v13 126.11 126.21 126.38 T:led80n6t4silcv3 410.79 413.42 430.06 T:acorn128 1289.80 1294.03 1299.27 T:led80n6t4silcv2 1291.43 1296.24 1301.55 T:led80n6silcv1 1571.42 1576.59 1591.50 T:present80n6t4silcv2 1574.09 1578.60 1586.57 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.11? 0.11? 0.13? T:tiaoxinv1 0.11? 0.12? 0.13? T:tiaoxinv2 0.16 0.17 0.17 T:aezv5 0.16 0.17 0.17 T:aezv3 0.16 0.17 0.17 T:aezv4 0.18 0.19 0.19 aegis128l -0.25? 0.20? 0.65? T:aeadaes128ocbtaglen128v1 -0.19? 0.26? 1.13? T:aeadaes256ocbtaglen128v1 0.31 0.32 0.33 T:aes128gcmv1 0.32 0.33 0.35 aes256gcmv1 0.37 0.38 0.38 T:aegis256 0.38 0.38 0.39 aegis256 0.38 0.39 0.39 T:aegis128 -0.04? 0.39? 0.82? T:aeadaes192ocbtaglen128v1 0.47 0.48 0.49 T:aes128otrcv3 0.48 0.49 0.50 T:aes128otrpv3 0.56 0.58 0.59 T:colm0v1 0.58 0.60 0.62 T:aes256otrpv3 0.61 0.62 0.63 T:aes256otrcv3 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280256v1 0.65 0.65 0.66 T:morus1280128v2 0.64 0.65 0.66 T:morus1280256v2 0.67 0.67 0.68 T:deoxysi128v141 0.67 0.68 0.69 T:deoxysii128v141 0.68 0.69 0.69 T:deoxysneq128128v1 0.70 0.71 0.72 T:deoxyseq128128v1 0.75 0.75 0.77 T:deoxysi256v141 0.75 0.76 0.77 T:deoxysneq256128v1 0.75 0.77 0.78 T:deoxysii256v141 0.81 0.82 0.83 T:deoxyseq256128v1 1.07 1.08 1.10 T:morus640128v2 1.09 1.11 1.12 T:morus640128v1 1.68 1.73 1.78 T:lunarkeyakv2 1.70 1.75 1.79 T:oceankeyakv2 2.05 2.07 2.08 T:norx6444v3 2.05 2.09 2.11 T:norx6441v3 2.08 2.10 2.11 T:norx6441v2 2.07 2.11 2.15 T:seakeyakv2 2.11 2.12 2.13 T:aes128n12t8clocv2 2.10 2.12 2.12 T:aes128n8t8clocv2 2.11 2.12 2.12 T:aes128otrsv3 2.11 2.12 2.13 T:aes128n12t8clocv3 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.12 2.13 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128n12t8silcv2 2.43 2.45 2.46 T:norx6441v1 2.50 2.54 2.58 T:norx6444v2 2.51 2.56 2.64 T:lakekeyakv2 2.59 2.67 2.77 T:lakekeyakv1 2.87 2.87 2.88 T:aes256otrsv3 3.01 3.05 3.08 T:norx6444v1 3.06 3.08 3.10 T:norx6461v3 3.09 3.11 3.13 T:norx6461v2 3.64 3.66 3.68 T:norx3241v3 3.65 3.67 3.70 T:norx6461v1 3.66 3.68 3.70 T:norx3241v2 4.08 4.17 4.26 T:acorn128v2 3.97 4.22 4.33 T:ketjemajorv2 4.30 4.31 4.31 T:aesjambuv1 4.33 4.38 4.44 T:riverkeyakv2 4.39 4.41 4.43 T:norx3241v1 4.27? 4.88? 5.08? T:acorn128v3 5.45 5.47 5.50 T:norx3261v2 5.53 5.56 5.58 T:norx3261v3 5.54 5.67 5.82 T:ketjeminorv2 6.29 6.35 6.42 T:ascon96v1 6.30 6.40 6.44 T:ascon128av11 6.66 6.68 6.71 ascon128av12 7.50 7.51 7.53 T:norx3261v1 9.53 9.56 9.60 T:ascon128v11 9.52 9.56 9.60 T:ascon128v1 9.93 9.96 10.00 ascon128v12 10.45 10.50 10.55 T:aes128otrpv1 10.41 10.52 10.59 T:aes128otrpv2 11.20 11.25 11.30 T:aes128otrsv2 11.21 11.26 11.33 T:aes128otrsv1 11.40 11.44 11.48 T:aes128n12clocv1 11.42 11.46 11.50 T:aes128n8clocv1 14.21 14.27 14.31 T:aes256otrpv1 14.23 14.28 14.33 T:aes256otrpv2 14.75 14.84 14.91 T:twine80n6t4clocv3 14.99 15.04 15.08 T:aes256otrsv2 15.02 15.06 15.09 T:aes256otrsv1 15.44 15.49 15.55 T:twine80n6t4clocv2 16.49 16.72 16.89 T:proest256otrv1 20.38 20.42 20.46 T:aeadaes128ocbtaglen64v1 20.38 20.43 20.47 T:aeadaes128ocbtaglen96v1 20.43 20.54 20.68 T:ketjesrv2 20.48 20.75 20.99 T:ketjesrv1 22.43 22.69 22.81 T:colm127v1 24.37 24.41 24.46 T:aeadaes192ocbtaglen96v1 24.39 24.42 24.47 T:aeadaes192ocbtaglen64v1 28.26 28.33 28.66 T:aeadaes256ocbtaglen64v1 28.69 29.56 29.76 T:aeadaes256ocbtaglen96v1 39.94 40.22 40.40 T:ketjejrv1 40.57 40.65 40.72 T:aezv1 46.80 46.94 47.35 T:proest128otrv1 60.38 60.57 60.78 T:deoxyseq128128v13 61.03 61.31 61.54 T:deoxysneq128128v13 62.76 63.12 64.43 T:ketjejrv2 71.47 71.54 71.61 T:present80n6t4silcv3 83.09 83.16 83.25 T:deoxysneq256128v13 83.88 83.97 84.07 T:deoxyseq256128v13 126.11 126.25 126.35 T:led80n6t4silcv3 411.12 412.22 427.86 T:acorn128 1291.32 1295.01 1298.50 T:led80n6silcv1 1290.24 1295.08 1299.51 T:led80n6t4silcv2 1569.62 1581.85 1610.67 T:present80n6silcv1 1571.48 1587.68 1612.90 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.20 0.20 0.21 T:tiaoxinv2 0.20 0.20 0.21 T:tiaoxinv1 0.24 0.24 0.25 aegis128l 0.30 0.30 0.31 T:aezv3 0.30 0.31 0.31 T:aezv4 0.32 0.33 0.34 T:aezv5 0.33? 0.35? 0.65? T:aeadaes128ocbtaglen128v1 0.42 0.42 0.42 T:aegis128 0.42 0.42 0.43 T:aegis256 0.42 0.43 0.43 aegis256 0.43? 0.43? 0.74? T:aeadaes256ocbtaglen128v1 0.47? 0.47? 1.01? T:aeadaes192ocbtaglen128v1 0.52 0.53 0.54 T:aes128otrpv3 0.58 0.59 0.59 T:aes128otrcv3 0.66 0.67 0.68 T:aes256otrpv3 0.73 0.73 0.74 T:aes128gcmv1 0.74 0.75 0.76 T:aes256otrcv3 0.77 0.78 0.78 T:deoxysneq128128v1 0.78 0.79 0.79 T:deoxysi128v141 0.80 0.81 0.82 aes256gcmv1 0.81 0.81 0.82 T:morus1280128v1 0.81 0.81 0.82 T:morus1280256v1 0.82 0.82 0.83 T:morus1280128v2 0.82 0.83 0.83 T:morus1280256v2 0.86 0.87 0.87 T:deoxysneq256128v1 0.90 0.90 0.91 T:deoxysi256v141 1.04 1.04 1.05 T:colm0v1 1.13 1.14 1.14 T:deoxysii128v141 1.17 1.18 1.18 T:deoxyseq128128v1 1.27 1.28 1.29 T:morus640128v1 1.29 1.29 1.30 T:deoxysii256v141 1.29 1.29 1.30 T:morus640128v2 1.34 1.35 1.35 T:aes128otrsv3 1.34 1.35 1.36 T:deoxyseq256128v1 1.80 1.81 1.81 T:aes256otrsv3 2.12 2.13 2.14 T:norx6444v3 2.19 2.19 2.19 T:aes128n12t8clocv3 2.19 2.19 2.20 T:aes128n12t8clocv2 2.19 2.19 2.20 T:aes128n8t8clocv2 2.20 2.20 2.20 T:aes128n12t8silcv2 2.20 2.20 2.20 T:aes128n8t8silcv2 2.20 2.20 2.20 T:aes128n12t8silcv3 2.35 2.36 2.37 T:norx6441v2 2.36 2.38 2.39 T:norx6441v3 2.73 2.74 2.75 T:norx6441v1 3.09 3.11 3.15 T:lakekeyakv2 3.14 3.15 3.18 T:seakeyakv2 3.31 3.34 3.39 T:lakekeyakv1 3.58 3.59 3.60 T:norx6461v2 3.58 3.59 3.60 T:norx6461v3 3.81 3.82 3.85 T:norx6444v2 3.91 3.91 3.92 T:norx3241v3 3.94 3.95 3.96 T:norx3241v2 4.05 4.06 4.09 T:oceankeyakv2 4.14 4.15 4.16 T:norx6461v1 4.37 4.38 4.38 T:aesjambuv1 4.54 4.56 4.58 T:norx6444v1 4.63 4.64 4.65 T:norx3241v1 4.81 4.84 4.87 T:riverkeyakv2 5.23 5.46 5.50 T:acorn128v3 5.52 5.58 5.65 T:acorn128v2 5.94 5.95 5.97 T:norx3261v2 5.94 5.96 5.99 T:norx3261v3 6.28 6.44 6.50 T:ketjemajorv2 6.69 6.71 6.78 T:ascon96v1 6.69 6.72 6.74 T:ascon128av11 6.84 6.86 6.89 ascon128av12 6.97 7.03 7.11 T:ketjeminorv2 7.01 7.03 7.05 T:lunarkeyakv2 7.91 7.92 7.93 T:norx3261v1 9.91 9.92 9.94 T:ascon128v11 9.92 9.93 9.95 T:ascon128v1 10.12 10.15 10.18 ascon128v12 11.16 11.18 11.21 T:aes128otrpv2 11.17 11.19 11.22 T:aes128otrpv1 11.47 11.48 11.51 T:aes128otrsv1 11.50 11.51 11.54 T:aes128otrsv2 15.01 15.03 15.06 T:aes256otrpv1 15.02 15.04 15.06 T:aes256otrpv2 15.25 15.27 15.30 T:twine80n6t4clocv3 15.35 15.37 15.40 T:aes256otrsv2 15.34 15.37 15.39 T:aes256otrsv1 15.99 16.01 16.03 T:twine80n6t4clocv2 16.34 16.36 16.38 T:aes128n8clocv1 16.35 16.37 16.41 T:aes128n12clocv1 17.95 17.98 18.01 T:proest256otrv1 21.23 21.26 21.30 T:aeadaes128ocbtaglen64v1 21.27 21.29 21.31 T:aeadaes128ocbtaglen96v1 21.52 22.06 22.21 T:ketjesrv1 23.55 23.70 23.77 T:ketjesrv2 25.30 25.33 25.36 T:aeadaes192ocbtaglen64v1 25.31 25.34 25.37 T:aeadaes192ocbtaglen96v1 29.44 29.48 30.28 T:aeadaes256ocbtaglen64v1 29.43 29.69 30.49 T:aeadaes256ocbtaglen96v1 35.50 35.72 35.81 T:colm127v1 43.25 43.39 43.61 T:ketjejrv1 48.35 48.64 48.79 T:proest128otrv1 61.93 62.32 62.88 T:deoxysneq128128v13 66.09 66.20 67.23 T:ketjejrv2 72.37 72.41 72.45 T:present80n6t4silcv3 82.88 83.04 83.18 T:aezv1 83.21 83.26 83.31 T:deoxysneq256128v13 91.69 93.15 93.52 T:deoxyseq128128v13 127.67 127.74 127.85 T:led80n6t4silcv3 127.81 127.86 127.93 T:deoxyseq256128v13 460.25 461.21 463.21 T:acorn128 1950.17 1951.94 1954.61 T:led80n6t4silcv2 1951.06 1953.34 1956.36 T:led80n6silcv1 2371.72 2379.34 2391.32 T:present80n6t4silcv2 2372.78 2384.86 2414.17 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.25 0.25 0.25 aegis128l 0.30 0.30 0.31 T:aezv4 0.30 0.31 0.31 T:aezv3 0.31 0.32 0.32 T:aezv5 0.32 0.32 0.32 T:tiaoxinv2 0.32 0.32 0.33 T:tiaoxinv1 0.33? 0.34? 0.63? T:aeadaes128ocbtaglen128v1 0.41 0.41 0.42 T:aegis128 0.42 0.42 0.42 T:aegis256 0.43 0.43 0.44 aegis256 0.42? 0.44? 0.73? T:aeadaes256ocbtaglen128v1 0.47? 0.47? 0.76? T:aeadaes192ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrpv3 0.59 0.60 0.61 T:aes128otrcv3 0.60 0.60 0.61 T:aes128gcmv1 0.69 0.69 0.70 T:aes256otrpv3 0.69 0.69 0.70 aes256gcmv1 0.78 0.78 0.79 T:aes256otrcv3 0.81 0.82 0.82 T:morus1280128v1 0.81 0.82 0.82 T:morus1280256v1 0.82 0.83 0.83 T:morus1280256v2 0.82 0.83 0.83 T:morus1280128v2 0.87 0.88 0.88 T:deoxysi128v141 0.89 0.89 0.90 T:deoxysneq128128v1 0.97 0.97 0.97 T:deoxysneq256128v1 1.00 1.00 1.01 T:deoxysi256v141 1.05 1.06 1.09 T:colm0v1 1.17 1.17 1.18 T:deoxysii128v141 1.25 1.26 1.26 T:morus640128v2 1.26 1.27 1.27 T:morus640128v1 1.35 1.35 1.36 T:deoxysii256v141 1.35 1.36 1.36 T:aes128otrsv3 1.36 1.37 1.37 T:deoxyseq128128v1 1.43 1.43 1.44 T:deoxyseq256128v1 1.82 1.83 1.84 T:aes256otrsv3 2.12 2.13 2.14 T:norx6444v3 2.13 2.14 2.20 T:aes128n12t8clocv3 2.14 2.14 2.20 T:aes128n12t8clocv2 2.14 2.14 2.18 T:aes128n8t8clocv2 2.14 2.14 2.15 T:aes128n12t8silcv3 2.14 2.14 2.15 T:aes128n8t8silcv2 2.14 2.14 2.15 T:aes128n12t8silcv2 2.35 2.36 2.37 T:norx6441v3 2.38 2.38 2.39 T:norx6441v2 2.70 2.71 2.73 T:norx6441v1 3.11 3.14 3.17 T:lakekeyakv2 3.17 3.18 3.20 T:seakeyakv2 3.31 3.34 3.39 T:lakekeyakv1 3.55 3.56 3.57 T:norx6461v3 3.57 3.58 3.59 T:norx6461v2 3.84 3.85 3.87 T:norx6444v2 3.90 3.90 3.91 T:norx3241v3 3.90 3.91 3.92 T:norx3241v2 4.08 4.09 4.12 T:oceankeyakv2 4.15 4.16 4.17 T:norx6461v1 4.52 4.52 4.52 T:aesjambuv1 4.55 4.57 4.60 T:norx6444v1 4.59 4.61 4.62 T:norx3241v1 4.94 4.98 5.05 T:riverkeyakv2 4.96 5.21 5.49 T:acorn128v3 5.11 5.47 5.62 T:acorn128v2 5.93 5.94 5.95 T:norx3261v2 5.97 5.99 6.00 T:norx3261v3 6.06 6.11 6.17 T:ketjemajorv2 6.64 6.67 6.69 T:ascon128av11 6.61 6.68 6.73 T:ascon96v1 6.81 6.83 6.85 ascon128av12 7.05 7.07 7.10 T:lunarkeyakv2 7.21 7.28 7.34 T:ketjeminorv2 7.85 7.86 7.86 T:norx3261v1 9.84 9.85 9.87 T:ascon128v11 9.84 9.87 9.88 T:ascon128v1 10.08 10.12 10.17 ascon128v12 11.35 11.36 11.39 T:aes128otrpv1 11.36 11.37 11.41 T:aes128otrpv2 11.66 11.68 11.71 T:aes128otrsv1 11.69 11.70 11.72 T:aes128otrsv2 15.17 15.20 15.23 T:aes256otrpv1 15.19 15.21 15.24 T:aes256otrpv2 15.26 15.28 15.31 T:twine80n6t4clocv3 15.26 15.29 15.34 T:aes128n12clocv1 15.52 15.54 15.57 T:aes256otrsv1 15.50 15.54 15.61 T:aes128n8clocv1 15.54 15.56 15.58 T:aes256otrsv2 15.97 16.00 16.03 T:twine80n6t4clocv2 17.97 18.02 18.09 T:proest256otrv1 22.16 22.23 22.41 T:ketjesrv2 23.22 23.56 23.72 T:ketjesrv1 28.27 28.31 28.35 T:aeadaes128ocbtaglen96v1 28.28 28.32 28.37 T:aeadaes128ocbtaglen64v1 34.00 34.03 34.07 T:aeadaes192ocbtaglen96v1 34.01 34.05 34.10 T:aeadaes192ocbtaglen64v1 40.49 40.55 40.59 T:aeadaes256ocbtaglen96v1 40.44 40.55 40.62 T:aeadaes256ocbtaglen64v1 43.79 43.91 44.07 T:ketjejrv1 48.70 49.06 49.13 T:proest128otrv1 49.28 49.42 49.51 T:colm127v1 67.10 67.29 68.64 T:ketjejrv2 70.90 71.15 71.30 T:deoxysneq128128v13 72.70 72.73 72.77 T:present80n6t4silcv3 82.98 83.06 83.21 T:aezv1 92.97 93.82 94.07 T:deoxyseq128128v13 98.25 98.34 98.63 T:deoxysneq256128v13 127.79 127.84 127.90 T:deoxyseq256128v13 127.84 127.91 128.05 T:led80n6t4silcv3 483.28 484.29 486.14 T:acorn128 1949.91 1951.79 1956.61 T:led80n6silcv1 1950.10 1951.90 1957.27 T:led80n6t4silcv2 2370.91 2375.50 2388.59 T:present80n6t4silcv2 2373.07 2381.61 2395.41 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.17 0.17 0.18 T:aezv3 0.17 0.17 0.18 T:aezv4 0.17? 0.18? 0.19? T:aezv5 0.26 0.26 0.28 aegis128l 0.32 0.32 0.32 T:tiaoxinv1 0.32 0.32 0.33 T:tiaoxinv2 0.33? 0.34? 0.62? T:aeadaes128ocbtaglen128v1 0.41 0.42 0.42 T:aegis128 0.42 0.42 0.42 T:aegis256 0.42? 0.43? 0.99? T:aeadaes256ocbtaglen128v1 0.44 0.44 0.44 aegis256 0.47? 0.47? 1.02? T:aeadaes192ocbtaglen128v1 0.54 0.54 0.55 T:aes128otrpv3 0.59 0.60 0.61 T:aes128otrcv3 0.60 0.60 0.61 T:aes128gcmv1 0.68 0.69 0.70 T:aes256otrpv3 0.69 0.69 0.69 aes256gcmv1 0.78 0.78 0.79 T:aes256otrcv3 0.81 0.82 0.82 T:morus1280256v1 0.81 0.82 0.82 T:morus1280128v1 0.82 0.83 0.83 T:morus1280128v2 0.82 0.83 0.83 T:morus1280256v2 0.87 0.88 0.88 T:deoxysi128v141 0.88 0.89 0.89 T:deoxysneq128128v1 0.96 0.96 0.97 T:deoxysneq256128v1 1.00 1.00 1.01 T:deoxysi256v141 1.06 1.08 1.11 T:colm0v1 1.17 1.17 1.17 T:deoxysii128v141 1.25 1.26 1.26 T:morus640128v2 1.25 1.26 1.27 T:morus640128v1 1.35 1.35 1.36 T:deoxysii256v141 1.35 1.36 1.36 T:aes128otrsv3 1.36 1.37 1.38 T:deoxyseq128128v1 1.42 1.43 1.44 T:deoxyseq256128v1 1.83 1.83 1.84 T:aes256otrsv3 2.13 2.13 2.16 T:aes128n12t8clocv3 2.12 2.13 2.14 T:norx6444v3 2.13 2.13 2.18 T:aes128n8t8clocv2 2.13 2.13 2.18 T:aes128n12t8clocv2 2.13 2.14 2.14 T:aes128n8t8silcv2 2.13 2.14 2.14 T:aes128n12t8silcv3 2.14 2.14 2.14 T:aes128n12t8silcv2 2.34 2.35 2.36 T:norx6441v3 2.37 2.38 2.39 T:norx6441v2 2.70 2.71 2.72 T:norx6441v1 3.13 3.14 3.17 T:lakekeyakv2 3.18 3.19 3.23 T:seakeyakv2 3.31 3.34 3.38 T:lakekeyakv1 3.55 3.56 3.57 T:norx6461v3 3.56 3.57 3.58 T:norx6461v2 3.84 3.86 3.88 T:norx6444v2 3.89 3.90 3.91 T:norx3241v3 3.90 3.91 3.92 T:norx3241v2 4.08 4.10 4.12 T:oceankeyakv2 4.14 4.15 4.17 T:norx6461v1 4.52 4.53 4.53 T:aesjambuv1 4.55 4.58 4.61 T:norx6444v1 4.59 4.60 4.61 T:norx3241v1 4.94 4.98 5.03 T:riverkeyakv2 5.22 5.29 5.50 T:acorn128v3 5.33 5.41 5.50 T:acorn128v2 5.92 5.94 5.96 T:norx3261v2 5.97 5.99 6.00 T:norx3261v3 6.07 6.12 6.17 T:ketjemajorv2 6.60 6.65 6.70 T:ascon96v1 6.63 6.65 6.68 T:ascon128av11 6.79 6.82 6.85 ascon128av12 7.04 7.05 7.09 T:lunarkeyakv2 7.20 7.29 7.38 T:ketjeminorv2 7.85 7.86 7.87 T:norx3261v1 9.83 9.86 9.88 T:ascon128v1 9.84 9.86 9.88 T:ascon128v11 10.08 10.12 10.15 ascon128v12 11.35 11.37 11.40 T:aes128otrpv2 11.35 11.38 11.41 T:aes128otrpv1 11.67 11.69 11.72 T:aes128otrsv1 11.68 11.70 11.73 T:aes128otrsv2 15.19 15.21 15.25 T:aes256otrpv1 15.19 15.22 15.24 T:aes256otrpv2 15.25 15.28 15.31 T:aes128n12clocv1 15.27 15.29 15.31 T:twine80n6t4clocv3 15.46 15.49 15.54 T:aes128n8clocv1 15.55 15.56 15.59 T:aes256otrsv2 15.54 15.58 15.60 T:aes256otrsv1 15.97 15.99 16.00 T:twine80n6t4clocv2 18.02 18.06 18.31 T:proest256otrv1 22.04 22.12 22.47 T:ketjesrv2 23.41 23.63 23.80 T:ketjesrv1 28.27 28.30 28.34 T:aeadaes128ocbtaglen96v1 28.28 28.31 28.34 T:aeadaes128ocbtaglen64v1 34.01 34.05 34.08 T:aeadaes192ocbtaglen96v1 34.03 34.08 34.14 T:aeadaes192ocbtaglen64v1 40.28 40.48 40.56 T:aeadaes256ocbtaglen96v1 40.23 40.50 40.58 T:aeadaes256ocbtaglen64v1 43.65 44.01 44.21 T:ketjejrv1 48.83 49.09 49.14 T:proest128otrv1 49.25 49.36 49.48 T:colm127v1 67.10 67.29 68.74 T:ketjejrv2 70.69 70.99 71.16 T:deoxysneq128128v13 72.70 72.72 72.76 T:present80n6t4silcv3 82.99 83.06 83.14 T:aezv1 93.60 94.27 97.38 T:deoxyseq128128v13 98.25 98.37 98.59 T:deoxysneq256128v13 127.74 127.79 127.87 T:deoxyseq256128v13 127.81 127.88 127.97 T:led80n6t4silcv3 482.78 484.13 486.25 T:acorn128 1948.98 1950.51 1953.63 T:led80n6t4silcv2 1950.51 1951.71 1954.03 T:led80n6silcv1 2372.53 2376.63 2391.14 T:present80n6t4silcv2 2373.47 2385.26 2416.47 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.87? 0.91? 0.97? T:aegis128 0.93 0.97 1.03 aegis128l 1.05 1.07 1.15 T:aezv5 1.06 1.08 1.17 T:aezv3 1.12 1.15 1.21 T:aezv4 1.17? 1.22? 1.36? T:tiaoxinv2 1.16? 1.23? 1.47? T:tiaoxinv1 1.26 1.29 1.34 aegis256 1.26 1.30 1.34 T:aegis256 1.85? 1.91? 2.12? T:aes128otrpv3 2.13? 2.18? 2.37? T:aes128otrsv3 2.41? 2.49? 2.73? T:colm0v1 2.52 2.59 2.80 T:aes256otrpv3 2.66 2.70 2.76 T:aes128n12t8clocv3 2.67 2.70 2.75 T:aes128n8t8clocv2 2.65 2.71 2.77 T:aes128n12t8clocv2 2.65 2.75 2.93 T:aes128otrcv3 2.80 2.85 2.92 T:aes128n12t8silcv3 2.81 2.85 2.93 T:aes128n12t8silcv2 2.80 2.85 3.06 T:aes128n8t8silcv2 2.63? 2.87? 10.68? T:aeadaes192ocbtaglen128v1 2.84 2.89 2.94 T:deoxysneq128128v1 2.97 3.03 3.10 T:deoxysi128v141 2.95 3.14 3.24 T:aes256otrsv3 3.36 3.41 3.50 T:deoxysneq256128v1 3.14? 3.43? 10.29? T:aeadaes128ocbtaglen128v1 3.44 3.54 3.80 T:aes256otrcv3 3.72 3.77 3.83 T:deoxysi256v141 3.91 3.96 4.01 T:deoxyseq128128v1 4.07 4.13 4.21 T:morus1280128v1 3.98? 4.14? 11.15? T:aeadaes256ocbtaglen128v1 4.14 4.19 4.25 T:morus1280256v1 4.20 4.26 4.37 T:morus640128v1 4.36 4.42 4.48 T:morus1280128v2 4.45 4.50 4.55 T:morus1280256v2 4.45 4.53 4.67 aes256gcmv1 4.47 4.55 4.69 T:morus640128v2 4.74 4.83 4.92 T:deoxyseq256128v1 4.87 4.91 5.09 T:aes128gcmv1 5.04 5.07 5.11 T:aesjambuv1 5.41 5.45 5.55 T:deoxysii128v141 6.46 6.55 6.60 T:deoxysii256v141 7.50 7.57 7.64 T:norx6441v2 7.60 7.66 7.76 T:norx6441v1 7.61 7.76 8.02 T:norx6441v3 9.40 9.50 9.64 T:norx3241v2 9.45 9.53 9.64 T:norx3241v3 9.50 9.58 9.67 T:norx3241v1 9.77 9.90 10.03 T:ascon96v1 9.94 10.05 10.13 T:ascon128av11 10.06 10.19 10.37 ascon128av12 11.06 11.43 12.02 T:riverkeyakv2 11.41 11.49 11.59 T:norx6461v2 11.44 11.54 11.68 T:norx6461v3 11.56 11.62 11.72 T:norx6461v1 11.02? 11.64? 12.30? T:lakekeyakv1 12.83 12.93 13.07 T:ascon128v11 12.85 13.00 13.13 T:ascon128v1 13.02 13.17 13.41 ascon128v12 13.19 13.56 14.38 T:lakekeyakv2 13.71 13.85 14.00 T:norx6444v3 14.26 14.38 14.48 T:norx3261v2 14.42 14.53 14.63 T:norx3261v3 16.12 16.22 16.30 T:norx3261v1 18.41 18.49 18.59 T:aes128otrsv1 18.51 18.58 18.71 T:aes128otrsv2 18.66 18.77 18.95 T:aes128otrpv1 18.68 18.82 19.05 T:aes128otrpv2 18.98 19.07 19.26 T:aes128n12clocv1 18.96 19.09 19.25 T:aes128n8clocv1 19.83 19.97 20.10 T:twine80n6t4clocv2 20.23 20.28 20.36 T:twine80n6t4clocv3 21.80 22.87 24.07 T:acorn128v2 23.11 23.70 24.67 T:ketjeminorv2 23.08 23.83 24.80 T:acorn128v3 24.37 24.48 24.69 T:aes256otrsv1 24.41 24.57 24.82 T:aes256otrsv2 24.59 24.74 24.94 T:aes256otrpv1 24.64 24.76 25.00 T:aes256otrpv2 27.79 27.94 28.15 T:norx6444v2 28.74 28.93 29.29 T:seakeyakv2 33.36 33.48 33.69 T:norx6444v1 33.92 34.03 34.47 T:aeadaes128ocbtaglen64v1 34.15 34.71 35.06 T:aeadaes128ocbtaglen96v1 35.57 35.94 36.45 T:ketjesrv1 39.55 39.70 40.07 T:aeadaes192ocbtaglen64v1 39.47 39.71 40.24 T:aeadaes192ocbtaglen96v1 39.88 40.34 40.85 T:ketjesrv2 40.43 40.85 41.54 T:ketjemajorv2 43.89 44.16 44.68 T:oceankeyakv2 46.53 47.40 48.45 T:aeadaes256ocbtaglen96v1 46.77 47.53 48.30 T:aeadaes256ocbtaglen64v1 50.48 51.12 51.83 T:colm127v1 52.22 52.47 53.21 T:proest256otrv1 57.44 58.09 58.79 T:ketjejrv1 69.25 70.02 70.67 T:deoxysneq128128v13 86.63 87.68 88.76 T:ketjejrv2 88.57 88.75 88.90 T:present80n6t4silcv3 93.52 93.75 94.03 T:proest128otrv1 93.64 93.90 94.47 T:deoxysneq256128v13 96.20 96.50 96.88 T:aezv1 113.43 113.96 114.46 T:lunarkeyakv2 116.22 116.87 117.61 T:deoxyseq128128v13 150.71 151.07 151.54 T:led80n6t4silcv3 158.34 158.60 159.11 T:deoxyseq256128v13 1402.79? 1615.03? 1634.79? T:acorn128 2178.27 2179.76 2180.86 T:led80n6t4silcv2 2178.83 2180.17 2182.04 T:led80n6silcv1 2649.33 2650.97 2658.99 T:present80n6t4silcv2 2652.32 2672.62 2707.48 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.95 1.00 1.03 T:aegis128 1.00 1.03 1.09 aegis128l 1.05 1.08 1.15 T:aezv5 1.08 1.11 1.17 T:aezv3 1.13 1.17 1.24 T:aezv4 1.27 1.29 1.36 T:aegis256 1.28? 1.33? 1.45? T:tiaoxinv1 1.26? 1.33? 1.41? T:tiaoxinv2 1.32 1.33 1.37 aegis256 1.87 1.92 2.06 T:aes128otrpv3 2.22 2.26 2.42 T:aes128otrsv3 2.36 2.40 2.46 T:aes128n8t8clocv2 2.39 2.43 2.50 T:aes128n12t8clocv3 2.37 2.43 2.54 T:aes128n12t8clocv2 2.48 2.55 2.64 T:aes256otrpv3 2.52 2.56 2.63 T:aes128n12t8silcv2 2.52 2.56 2.65 T:aes128n12t8silcv3 2.52 2.56 2.66 T:aes128n8t8silcv2 2.60? 2.70? 10.24? T:aeadaes192ocbtaglen128v1 2.65 2.71 2.87 T:colm0v1 2.70 2.76 2.99 T:aes128otrcv3 2.96 3.01 3.23 T:aes256otrsv3 3.11? 3.29? 10.43? T:aeadaes128ocbtaglen128v1 3.78 3.84 3.94 T:aes256otrcv3 4.17 4.27 4.35 T:morus640128v1 4.28 4.32 4.38 T:morus1280256v1 4.28 4.32 4.37 T:deoxysi128v141 4.07? 4.32? 17.45? T:aeadaes256ocbtaglen128v1 4.29 4.35 4.41 T:morus1280128v1 4.30 4.35 4.41 T:deoxysneq128128v1 4.46 4.57 4.69 T:morus640128v2 4.53 4.57 4.64 T:morus1280128v2 4.52 4.58 4.66 T:morus1280256v2 4.50 4.58 4.64 T:deoxysneq256128v1 4.94 5.02 5.12 aes256gcmv1 5.22 5.25 5.29 T:aesjambuv1 5.28 5.34 5.40 T:deoxysi256v141 5.31 5.41 5.48 T:aes128gcmv1 5.61 5.65 5.72 T:deoxyseq128128v1 5.67 5.76 5.85 T:deoxyseq256128v1 6.20 6.28 6.36 T:deoxysii128v141 7.68 7.77 7.86 T:norx6441v1 7.78 7.84 7.92 T:norx6441v2 7.75 7.88 8.01 T:deoxysii256v141 7.86 8.02 8.29 T:norx6441v3 9.63 9.73 9.82 T:norx3241v2 9.69 9.78 9.87 T:norx3241v1 9.69 9.78 9.91 T:norx3241v3 9.77 9.87 9.96 T:ascon96v1 9.79 9.91 10.02 T:ascon128av11 10.07 10.17 10.32 ascon128av12 11.01 11.23 11.85 T:riverkeyakv2 10.94? 11.49? 12.54? T:lakekeyakv1 11.64 11.73 11.82 T:norx6461v1 11.78 11.86 11.92 T:norx6461v2 11.81 11.87 11.98 T:norx6461v3 12.77 12.87 13.00 T:ascon128v11 12.75 12.88 13.02 T:ascon128v1 13.11 13.24 13.41 ascon128v12 13.24 13.59 14.40 T:lakekeyakv2 13.81 13.93 14.06 T:norx6444v3 14.58 14.66 14.75 T:norx3261v2 14.75 14.85 14.98 T:norx3261v3 16.44 16.51 16.60 T:norx3261v1 18.45 18.57 18.75 T:aes128n12clocv1 18.51 18.59 18.76 T:aes128n8clocv1 18.91 18.99 19.12 T:aes128otrsv2 18.91 19.00 19.12 T:aes128otrsv1 19.02 19.13 19.40 T:aes128otrpv2 19.10 19.19 19.29 T:aes128otrpv1 19.96 20.05 20.23 T:twine80n6t4clocv2 20.18 20.33 20.44 T:twine80n6t4clocv3 22.27 23.07 24.54 T:acorn128v2 23.40 23.88 24.71 T:ketjeminorv2 23.49 24.12 24.89 T:acorn128v3 24.85 24.93 25.12 T:aes256otrsv1 24.85 24.96 25.07 T:aes256otrsv2 25.08 25.22 25.37 T:aes256otrpv1 25.17 25.28 25.49 T:aes256otrpv2 27.86 28.09 28.38 T:norx6444v2 28.79 29.10 29.59 T:seakeyakv2 33.65 33.82 34.05 T:norx6444v1 36.80 37.30 37.91 T:ketjesrv1 38.89 39.39 39.97 T:ketjesrv2 40.31 40.85 42.16 T:ketjemajorv2 43.90 44.08 44.54 T:oceankeyakv2 44.27 44.57 44.82 T:aeadaes128ocbtaglen96v1 44.33 44.58 44.90 T:aeadaes128ocbtaglen64v1 51.74 51.99 52.36 T:aeadaes192ocbtaglen64v1 51.73 52.03 52.47 T:aeadaes192ocbtaglen96v1 53.78 54.13 54.84 T:proest256otrv1 58.40 59.16 59.91 T:ketjejrv1 61.50 62.24 62.76 T:aeadaes256ocbtaglen64v1 61.62 62.29 62.82 T:aeadaes256ocbtaglen96v1 64.69 64.96 65.44 T:colm127v1 79.29 80.07 81.00 T:deoxysneq128128v13 88.90 89.02 89.22 T:present80n6t4silcv3 87.97 89.20 90.47 T:ketjejrv2 94.98 95.22 95.58 T:proest128otrv1 98.86 99.33 99.78 T:aezv1 108.60 109.04 109.80 T:deoxysneq256128v13 114.01 114.51 119.43 T:lunarkeyakv2 115.45 116.29 117.22 T:deoxyseq128128v13 150.74 151.25 151.76 T:led80n6t4silcv3 158.21 158.54 159.37 T:deoxyseq256128v13 1400.33? 1563.15? 1656.21? T:acorn128 2177.67 2178.86 2181.12 T:led80n6t4silcv2 2178.89 2180.82 2184.52 T:led80n6silcv1 2650.50 2652.69 2660.19 T:present80n6t4silcv2 2662.33 2683.58 2707.85 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.62? 0.67? 0.72? T:aezv5 0.68? 0.71? 0.78? T:aezv3 0.68? 0.74? 0.83? T:aezv4 0.95 0.98 1.01 T:aegis128 1.02? 1.04? 1.14? aegis128l 1.27 1.30 1.33 T:aegis256 1.26 1.31 1.40 T:tiaoxinv2 1.27? 1.34? 1.51? T:tiaoxinv1 1.33? 1.36? 1.73? aegis256 1.85 1.90 1.98 T:aes128otrpv3 2.21 2.26 2.35 T:aes128otrsv3 2.25 2.29 2.37 T:aes128n12t8clocv2 2.26 2.29 2.38 T:aes128n12t8clocv3 2.26 2.31 2.37 T:aes128n8t8clocv2 2.43 2.46 2.52 T:aes128n12t8silcv2 2.43 2.47 2.52 T:aes128n12t8silcv3 2.44 2.49 2.54 T:aes128n8t8silcv2 2.48 2.55 2.65 T:aes256otrpv3 2.60? 2.66? 9.16? T:aeadaes192ocbtaglen128v1 2.70 2.74 2.88 T:colm0v1 2.70 2.79 2.91 T:aes128otrcv3 2.97 3.04 3.30 T:aes256otrsv3 3.08? 3.22? 9.87? T:aeadaes128ocbtaglen128v1 3.79 3.84 3.90 T:aes256otrcv3 4.18 4.23 4.29 T:morus640128v1 4.18 4.23 4.31 T:deoxysneq128128v1 4.13? 4.26? 17.25? T:aeadaes256ocbtaglen128v1 4.26 4.31 4.37 T:morus1280128v1 4.29 4.32 4.36 T:morus1280256v1 4.27 4.35 4.40 T:deoxysi128v141 4.36 4.43 4.49 T:deoxysneq256128v1 4.51 4.56 4.62 T:morus1280128v2 4.51 4.56 4.61 T:morus1280256v2 4.48 4.57 4.64 T:morus640128v2 4.99 5.05 5.13 aes256gcmv1 5.23 5.27 5.30 T:aesjambuv1 5.21 5.27 5.35 T:deoxysi256v141 5.38 5.45 5.54 T:aes128gcmv1 5.60 5.65 5.69 T:deoxyseq128128v1 5.64 5.69 5.76 T:deoxyseq256128v1 6.22 6.27 6.33 T:deoxysii128v141 7.73 7.80 7.91 T:norx6441v1 7.73 7.84 7.91 T:norx6441v2 7.71 7.85 7.96 T:deoxysii256v141 7.86 7.97 8.27 T:norx6441v3 9.65 9.72 9.82 T:norx3241v1 9.65 9.73 9.80 T:norx3241v2 9.71 9.77 9.86 T:norx3241v3 9.67 9.82 9.93 T:ascon96v1 9.76 9.87 10.05 T:ascon128av11 10.01 10.14 10.27 ascon128av12 11.05 11.33 11.91 T:riverkeyakv2 10.97 11.42 12.10 T:lakekeyakv1 11.63 11.74 11.81 T:norx6461v1 11.75 11.83 11.94 T:norx6461v2 11.75 11.86 11.96 T:norx6461v3 12.73 12.84 12.96 T:ascon128v1 12.73 12.86 13.07 T:ascon128v11 13.02 13.17 13.29 ascon128v12 13.21 13.70 14.54 T:lakekeyakv2 13.74 13.85 13.99 T:norx6444v3 14.56 14.64 14.77 T:norx3261v2 14.70 14.80 14.93 T:norx3261v3 16.41 16.49 16.56 T:norx3261v1 18.35 18.46 18.65 T:aes128n12clocv1 18.47 18.61 18.91 T:aes128n8clocv1 18.87 18.97 19.06 T:aes128otrsv1 18.91 19.02 19.12 T:aes128otrsv2 19.04 19.14 19.45 T:aes128otrpv2 19.09 19.19 19.31 T:aes128otrpv1 19.85 20.04 20.44 T:twine80n6t4clocv2 19.88 20.16 20.66 T:twine80n6t4clocv3 21.93 22.86 24.33 T:acorn128v2 22.45 23.43 24.47 T:acorn128v3 23.30 23.79 24.81 T:ketjeminorv2 24.84 24.95 25.18 T:aes256otrsv1 24.82 24.99 25.15 T:aes256otrsv2 25.04 25.18 25.47 T:aes256otrpv2 25.11 25.22 25.34 T:aes256otrpv1 28.00 28.14 28.38 T:norx6444v2 28.81 29.02 29.39 T:seakeyakv2 33.50 33.66 34.08 T:norx6444v1 36.87 37.41 37.81 T:ketjesrv1 38.92 39.43 40.17 T:ketjesrv2 42.01 43.92 45.10 T:ketjemajorv2 43.89 44.11 44.61 T:oceankeyakv2 44.35 44.52 44.69 T:aeadaes128ocbtaglen96v1 44.32 44.57 44.87 T:aeadaes128ocbtaglen64v1 51.41 51.84 52.18 T:aeadaes192ocbtaglen64v1 51.70 51.94 52.21 T:aeadaes192ocbtaglen96v1 51.74 51.97 52.28 T:proest256otrv1 58.24 59.09 60.20 T:ketjejrv1 61.60 62.16 62.64 T:aeadaes256ocbtaglen96v1 62.07 62.41 62.71 T:aeadaes256ocbtaglen64v1 64.68 64.91 65.20 T:colm127v1 79.01 80.12 81.18 T:deoxysneq128128v13 87.90 88.68 90.10 T:ketjejrv2 88.95 89.17 89.48 T:present80n6t4silcv3 94.97 95.17 95.47 T:proest128otrv1 98.88 99.25 99.65 T:aezv1 108.58 108.98 109.46 T:deoxysneq256128v13 113.71 114.01 114.38 T:lunarkeyakv2 116.61 117.83 118.83 T:deoxyseq128128v13 150.82 151.23 151.72 T:led80n6t4silcv3 158.33 158.57 158.92 T:deoxyseq256128v13 1399.59? 1569.72? 1655.65? T:acorn128 2177.97 2179.18 2185.53 T:led80n6t4silcv2 2180.01 2181.23 2184.12 T:led80n6silcv1 2648.61 2650.42 2653.32 T:present80n6t4silcv2 2649.85 2652.58 2683.06 T:present80n6silcv1