VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, E cores; 8 x 700MHz; meteor,little, supercop-20251222

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.21 0.22 0.23 T:tiaoxinv2 0.21 0.22 0.23 T:tiaoxinv1 0.24 0.25 0.26 aegis128l 0.37 0.38 0.39 T:aegis128 0.39 0.40 0.42 aegis256 0.42 0.43 0.43 T:aezv4 0.43 0.43 0.45 T:aezv3 0.46 0.47 0.48 T:aezv5 0.45 0.47 0.49 T:aeadaes128ocbtaglen128v1 0.51 0.52 0.53 T:aes128otrcv3 0.52 0.53 0.54 T:aes128otrsv3 0.52 0.53 0.54 T:aes128otrpv3 -1.11? 0.56? 0.59? T:aeadaes192ocbtaglen128v1 0.55? 0.61? 0.62? T:aeadaes256ocbtaglen128v1 0.65 0.67 0.68 T:aes256otrpv3 0.68 0.69 0.70 T:aes256otrsv3 0.68 0.70 0.70 T:aes256otrcv3 0.80 0.82 0.83 T:deoxysi128v141 0.85 0.86 0.87 T:deoxysneq128128v1 0.90 0.91 0.92 T:deoxysi256v141 0.91 0.92 0.93 T:aes128gcmv1 0.95 0.96 0.98 T:morus1280256v1 0.95 0.97 0.98 T:deoxysneq256128v1 0.97 0.98 0.99 T:morus1280128v2 0.97 0.98 0.99 T:morus1280128v1 0.97 0.98 0.98 T:morus1280256v2 1.07 1.08 1.09 aes256gcmv1 1.12 1.14 1.16 T:morus640128v1 1.11 1.15 1.16 T:morus640128v2 1.61 1.62 1.64 T:deoxysii128v141 1.74 1.75 1.76 T:colm0v1 1.78 1.80 1.81 T:deoxyseq128128v1 1.81 1.82 1.85 T:deoxysii256v141 1.94 2.01 2.07 T:lunarkeyakv2 2.05 2.06 2.08 T:deoxyseq256128v1 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.12 2.13 T:aes128n12t8clocv3 2.12 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.13 T:aes128n8t8clocv2 2.12 2.12 2.13 T:aes128n12t8clocv2 2.12 2.13 2.13 T:aes128n12t8silcv3 2.28 2.30 2.34 T:norx6444v3 2.57 2.60 2.62 T:norx6441v3 2.59 2.62 2.65 T:norx6441v2 2.66 2.70 2.72 T:seakeyakv2 2.72 2.76 2.81 T:oceankeyakv2 3.04 3.06 3.09 T:lakekeyakv1 3.05 3.12 3.17 T:norx6441v1 3.18 3.20 3.23 T:lakekeyakv2 3.36 3.40 3.42 T:norx6444v2 3.78 3.81 3.88 T:norx3241v3 3.78 3.82 3.91 T:norx3241v2 3.83 3.86 3.91 T:norx6444v1 3.84 3.89 3.92 T:norx6461v2 3.88 3.91 3.93 T:norx6461v3 4.24 4.25 4.25 T:aesjambuv1 4.55 4.60 4.65 T:norx3241v1 4.58 4.64 4.69 T:norx6461v1 4.81 4.86 4.92 T:acorn128v2 4.99 5.21 5.43 T:acorn128v3 5.59 5.79 5.98 T:ketjemajorv2 5.79 5.84 5.88 T:norx3261v3 5.92 5.98 6.09 T:norx3261v2 6.20 6.21 6.24 ascon128av12 6.32 6.34 6.37 T:ascon96v1 6.35 6.36 6.38 T:ascon128av11 6.85 7.12 7.27 T:ketjeminorv2 7.18 7.22 7.26 T:riverkeyakv2 7.36 7.39 7.43 T:norx3261v1 9.09 9.13 9.17 T:ascon128v1 9.08 9.19 9.21 T:ascon128v11 9.23 9.26 9.27 ascon128v12 11.75 11.76 11.80 T:aes128otrpv1 11.78 11.79 11.81 T:aes128otrpv2 12.25 12.27 12.32 T:aes128otrsv2 12.16 12.33 12.39 T:aes128otrsv1 14.52 14.53 14.53 T:twine80n6t4clocv3 15.26 15.28 15.31 T:aes256otrpv2 15.27 15.28 15.33 T:aes256otrpv1 15.36 15.41 15.43 T:aes256otrsv1 15.46 15.47 15.48 T:twine80n6t4clocv2 15.63 15.64 15.68 T:aes256otrsv2 19.07 19.38 19.49 T:proest256otrv1 20.40 20.45 20.49 T:aes128n12clocv1 20.39 20.46 20.49 T:aes128n8clocv1 22.40 22.46 22.49 T:aeadaes128ocbtaglen96v1 22.44 22.48 22.51 T:aeadaes128ocbtaglen64v1 26.55 26.59 26.63 T:aeadaes192ocbtaglen96v1 26.57 26.60 26.64 T:aeadaes192ocbtaglen64v1 26.95 27.14 27.32 T:ketjesrv2 26.99 27.17 27.38 T:ketjesrv1 30.76 30.83 30.97 T:aeadaes256ocbtaglen96v1 30.80 30.84 30.88 T:aeadaes256ocbtaglen64v1 43.46 43.88 44.33 T:proest128otrv1 47.84 48.27 48.71 T:ketjejrv1 48.31 48.37 48.42 T:colm127v1 64.06 65.14 66.24 T:deoxysneq128128v13 68.43 70.96 71.26 T:ketjejrv2 70.93 71.05 71.19 T:present80n6t4silcv3 103.46 104.14 104.41 T:deoxysneq256128v13 126.28 126.32 126.46 T:led80n6t4silcv3 127.26 129.01 137.21 T:aezv1 128.56 129.09 129.20 T:deoxyseq128128v13 207.07 207.31 208.61 T:deoxyseq256128v13 396.13 408.31 421.87 T:acorn128 3564.80 3574.35 3584.33 T:led80n6silcv1 3570.46 3579.60 3583.00 T:led80n6t4silcv2 3796.83 3807.42 3808.86 T:present80n6silcv1 3806.91 3808.70 3810.37 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.26 0.27 0.27 aegis128l 0.33 0.33 0.34 T:tiaoxinv2 0.33 0.34 0.34 T:tiaoxinv1 0.40 0.40 0.41 T:aegis128 0.40 0.41 0.42 aegis256 0.42 0.43 0.44 T:aezv4 0.43 0.43 0.45 T:aezv3 0.47 0.47 0.48 T:aezv5 0.48 0.49 0.51 T:aeadaes128ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrsv3 0.56 0.57 0.57 T:aes128otrpv3 0.57 0.58 0.59 T:aeadaes192ocbtaglen128v1 0.64 0.67 0.68 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.71 T:aes256otrpv3 0.70 0.71 0.72 T:aes256otrsv3 0.70 0.72 0.72 T:aes256otrcv3 0.87 0.89 0.90 T:deoxysi128v141 0.94 0.95 0.96 T:deoxysneq128128v1 0.96 0.97 0.99 T:aes128gcmv1 0.97 0.98 0.99 T:morus1280256v1 0.97 0.98 1.00 T:morus1280128v1 0.97 0.98 0.99 T:morus1280256v2 0.97 0.98 0.99 T:morus1280128v2 0.97 0.98 1.02 T:deoxysi256v141 1.05 1.07 1.08 T:deoxysneq256128v1 1.11 1.13 1.16 T:morus640128v2 1.13 1.14 1.16 T:morus640128v1 1.17 1.18 1.18 aes256gcmv1 1.60 1.61 1.62 T:deoxysii128v141 1.79 1.82 1.83 T:deoxysii256v141 1.83 1.84 1.85 T:deoxyseq128128v1 1.84 1.86 1.92 T:colm0v1 2.03 2.05 2.06 T:deoxyseq256128v1 2.06 2.06 2.12 T:aes128n8t8silcv2 2.01 2.06 2.12 T:aes128n12t8silcv3 2.01 2.07 2.12 T:aes128n12t8silcv2 1.98? 2.08? 2.22? T:lunarkeyakv2 2.06 2.10 2.11 T:aes128n8t8clocv2 2.01 2.10 2.11 T:aes128n12t8clocv2 2.02 2.11 2.11 T:aes128n12t8clocv3 2.30 2.32 2.35 T:norx6444v3 2.51 2.56 2.59 T:norx6441v2 2.55 2.59 2.62 T:norx6441v3 2.74 2.78 2.79 T:seakeyakv2 2.76 2.81 2.88 T:oceankeyakv2 3.06 3.11 3.17 T:norx6441v1 3.09 3.11 3.16 T:lakekeyakv1 3.16 3.18 3.22 T:lakekeyakv2 3.38 3.42 3.48 T:norx6444v2 3.64 3.70 3.72 T:norx3241v3 3.68 3.74 3.78 T:norx3241v2 3.81 3.86 3.89 T:norx6461v2 3.82 3.87 3.92 T:norx6444v1 3.81 3.87 3.94 T:norx6461v3 4.38 4.40 4.48 T:norx3241v1 4.52 4.55 4.59 T:norx6461v1 4.55 4.56 4.57 T:aesjambuv1 4.78? 4.95? 5.42? T:acorn128v3 4.91? 4.97? 5.99? T:acorn128v2 5.53 5.73 5.88 T:ketjemajorv2 5.77 5.80 5.85 T:norx3261v3 5.78 5.81 5.86 T:norx3261v2 6.18 6.20 6.21 ascon128av12 6.27 6.30 6.31 T:ascon96v1 6.29 6.32 6.34 T:ascon128av11 7.21 7.25 7.28 T:norx3261v1 6.98 7.29 7.34 T:ketjeminorv2 7.37 7.40 7.43 T:riverkeyakv2 9.08 9.12 9.14 T:ascon128v1 9.08 9.14 9.19 T:ascon128v11 9.17 9.22 9.23 ascon128v12 11.89 11.95 12.00 T:aes128otrpv1 11.94 12.11 12.15 T:aes128otrpv2 12.16 12.20 12.24 T:aes128otrsv1 12.54 12.57 12.63 T:aes128otrsv2 14.52 14.53 14.55 T:twine80n6t4clocv3 15.21 15.27 15.33 T:aes256otrsv2 15.43 15.46 15.49 T:twine80n6t4clocv2 15.44 15.49 15.55 T:aes256otrpv1 15.49 15.65 15.68 T:aes256otrpv2 15.65 15.68 15.74 T:aes256otrsv1 18.98 19.20 19.40 T:proest256otrv1 21.14 21.20 21.24 T:aes128n12clocv1 21.15 21.22 21.26 T:aes128n8clocv1 27.65 27.81 28.14 T:ketjesrv2 27.91 28.07 28.13 T:ketjesrv1 30.42 30.46 30.50 T:aeadaes128ocbtaglen96v1 30.44 30.48 30.51 T:aeadaes128ocbtaglen64v1 36.37 36.39 36.46 T:aeadaes192ocbtaglen64v1 36.38 36.41 36.48 T:aeadaes192ocbtaglen96v1 42.34 42.37 42.41 T:aeadaes256ocbtaglen64v1 42.33 42.40 42.46 T:aeadaes256ocbtaglen96v1 42.47 42.56 43.03 T:proest128otrv1 47.56 48.27 48.64 T:ketjejrv1 64.40 64.53 64.64 T:colm127v1 70.86 70.98 71.05 T:present80n6t4silcv3 69.72 71.75 71.92 T:ketjejrv2 88.01 88.85 89.80 T:deoxysneq128128v13 125.97 126.03 126.33 T:led80n6t4silcv3 128.55 128.78 129.19 T:deoxyseq128128v13 128.16 128.97 137.32 T:aezv1 129.96 130.98 131.07 T:deoxysneq256128v13 206.97 207.42 208.60 T:deoxyseq256128v13 403.16 407.70 420.45 T:acorn128 3568.31 3570.24 3574.43 T:led80n6t4silcv2 3567.05 3572.85 3577.35 T:led80n6silcv1 3803.30 3806.05 3811.37 T:present80n6silcv1 3806.47 3808.84 3820.12 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.15? 0.16? 0.20? T:aezv4 0.15 0.16 0.16 T:aezv3 0.14? 0.19? 0.22? T:aezv5 0.26 0.27 0.27 aegis128l 0.32 0.33 0.35 T:tiaoxinv2 0.33 0.34 0.35 T:tiaoxinv1 0.39 0.40 0.41 T:aegis128 0.45 0.47 0.48 aegis256 0.48 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrsv3 0.56 0.57 0.58 T:aes128otrpv3 0.58? 0.58? 2.25? T:aeadaes192ocbtaglen128v1 0.64 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.70 T:aes256otrpv3 0.69 0.70 0.72 T:aes256otrcv3 0.70 0.70 0.71 T:aes256otrsv3 0.87 0.89 0.90 T:deoxysi128v141 0.94 0.96 0.97 T:deoxysneq128128v1 0.96 0.96 0.97 T:aes128gcmv1 0.97 0.97 0.98 T:morus1280256v1 0.97 0.98 0.99 T:morus1280256v2 0.97 0.98 0.98 T:morus1280128v1 0.97 0.98 0.98 T:morus1280128v2 0.95 1.01 1.02 T:deoxysi256v141 1.06 1.08 1.10 T:deoxysneq256128v1 1.11 1.13 1.17 T:morus640128v1 1.12 1.14 1.16 T:morus640128v2 1.17 1.17 1.18 aes256gcmv1 1.60 1.61 1.63 T:deoxysii128v141 1.79 1.81 1.83 T:deoxysii256v141 1.84 1.85 1.87 T:deoxyseq128128v1 1.80 1.90 1.92 T:colm0v1 2.00 2.00 2.13 T:aes128n12t8silcv3 2.00 2.00 2.13 T:aes128n12t8silcv2 2.02 2.06 2.08 T:deoxyseq256128v1 1.99 2.07 2.13 T:aes128n8t8silcv2 1.96? 2.08? 2.20? T:lunarkeyakv2 2.02 2.11 2.11 T:aes128n8t8clocv2 2.01 2.11 2.11 T:aes128n12t8clocv2 2.01 2.11 2.11 T:aes128n12t8clocv3 2.29 2.33 2.34 T:norx6444v3 2.52 2.56 2.58 T:norx6441v2 2.56 2.58 2.61 T:norx6441v3 2.80 2.81 2.83 T:seakeyakv2 2.81 2.85 2.87 T:oceankeyakv2 3.05 3.08 3.11 T:norx6441v1 3.09 3.13 3.14 T:lakekeyakv1 3.17 3.19 3.22 T:lakekeyakv2 3.43 3.46 3.48 T:norx6444v2 3.66 3.73 3.77 T:norx3241v3 3.70 3.74 3.79 T:norx3241v2 3.79 3.83 3.87 T:norx6461v2 3.84 3.86 3.89 T:norx6461v3 3.86 3.90 3.93 T:norx6444v1 4.37 4.45 4.52 T:norx3241v1 4.56 4.56 4.57 T:aesjambuv1 4.53 4.58 4.63 T:norx6461v1 4.78? 4.95? 5.44? T:acorn128v3 4.91? 4.97? 6.01? T:acorn128v2 5.71 5.77 5.87 T:ketjemajorv2 5.74 5.79 5.83 T:norx3261v3 5.80 5.85 5.92 T:norx3261v2 6.18 6.19 6.21 ascon128av12 6.26 6.30 6.32 T:ascon96v1 6.27 6.31 6.33 T:ascon128av11 7.21 7.25 7.26 T:norx3261v1 7.05 7.29 7.43 T:ketjeminorv2 7.39 7.42 7.48 T:riverkeyakv2 9.10 9.13 9.15 T:ascon128v1 9.08 9.15 9.17 T:ascon128v11 9.19 9.21 9.22 ascon128v12 11.90 12.02 12.06 T:aes128otrpv1 12.01 12.17 12.21 T:aes128otrpv2 12.19 12.24 12.28 T:aes128otrsv1 12.60 12.64 12.70 T:aes128otrsv2 14.50 14.55 14.56 T:twine80n6t4clocv3 15.25 15.30 15.33 T:aes256otrsv2 15.43 15.46 15.49 T:twine80n6t4clocv2 15.45 15.51 15.55 T:aes256otrpv1 15.47 15.66 15.72 T:aes256otrpv2 15.68 15.74 15.77 T:aes256otrsv1 19.02 19.23 19.41 T:proest256otrv1 21.17 21.20 21.23 T:aes128n12clocv1 21.19 21.22 21.27 T:aes128n8clocv1 27.52 27.77 28.17 T:ketjesrv2 27.86 28.06 28.22 T:ketjesrv1 30.44 30.46 30.49 T:aeadaes128ocbtaglen64v1 30.43 30.47 30.50 T:aeadaes128ocbtaglen96v1 36.37 36.40 36.43 T:aeadaes192ocbtaglen64v1 36.38 36.41 36.44 T:aeadaes192ocbtaglen96v1 42.37 42.39 42.44 T:aeadaes256ocbtaglen96v1 42.36 42.40 42.42 T:aeadaes256ocbtaglen64v1 42.47 42.52 43.01 T:proest128otrv1 48.55 48.65 50.27 T:ketjejrv1 63.42 63.49 63.59 T:colm127v1 70.90 70.98 71.06 T:present80n6t4silcv3 69.69 71.60 71.88 T:ketjejrv2 88.07 88.81 89.25 T:deoxysneq128128v13 125.96 126.02 126.09 T:led80n6t4silcv3 128.68 128.78 129.30 T:deoxyseq128128v13 127.69 128.84 137.22 T:aezv1 130.05 130.93 131.08 T:deoxysneq256128v13 206.43 207.28 208.66 T:deoxyseq256128v13 402.31 408.19 420.35 T:acorn128 3566.62 3571.21 3575.29 T:led80n6silcv1 3567.83 3571.45 3578.73 T:led80n6t4silcv2 3798.09 3806.92 3809.31 T:present80n6silcv1 3807.16 3809.62 3820.46 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.16? 0.18? 0.18? T:tiaoxinv1 0.17 0.18 0.18 T:tiaoxinv2 0.19? 0.21? 0.22? aegis128l 0.30 0.31 0.32 T:aezv4 0.30 0.32 0.32 T:aezv3 0.33 0.35 0.35 T:aezv5 0.36 0.37 0.38 aegis256 0.36 0.37 0.38 T:aegis128 0.43 0.44 0.46 T:aeadaes128ocbtaglen128v1 0.41? 0.51? 0.55? T:aeadaes192ocbtaglen128v1 0.53 0.54 0.54 T:aes128otrcv3 0.54 0.55 0.55 T:aes128otrpv3 0.62 0.64 0.64 T:aeadaes256ocbtaglen128v1 0.67 0.68 0.69 T:aes128gcmv1 0.68 0.69 0.70 T:aes256otrpv3 0.69 0.69 0.70 T:aes256otrcv3 0.73 0.75 0.75 aes256gcmv1 0.81 0.82 0.82 T:deoxysi128v141 0.85 0.86 0.87 T:deoxysneq128128v1 0.90 0.91 0.92 T:deoxysi256v141 0.90 0.91 0.92 T:morus1280256v1 0.91 0.92 0.93 T:morus1280128v1 0.91 0.92 0.93 T:morus1280128v2 0.92 0.93 0.93 T:morus1280256v2 0.97 0.97 0.98 T:deoxysneq256128v1 1.09 1.10 1.12 T:morus640128v1 1.10 1.11 1.13 T:morus640128v2 1.20 1.21 1.23 T:deoxysii128v141 1.23 1.24 1.25 T:colm0v1 1.29 1.30 1.30 T:aes128otrsv3 1.34 1.36 1.37 T:deoxyseq128128v1 1.34 1.36 1.38 T:deoxysii256v141 1.53 1.53 1.55 T:deoxyseq256128v1 1.75 1.75 1.76 T:aes256otrsv3 2.08 2.09 2.10 T:aes128n12t8clocv2 2.08 2.09 2.09 T:aes128n12t8clocv3 2.09 2.09 2.10 T:aes128n8t8silcv2 2.09 2.09 2.10 T:aes128n12t8silcv2 2.09 2.10 2.10 T:aes128n12t8silcv3 2.09 2.10 2.10 T:aes128n8t8clocv2 2.26 2.28 2.30 T:seakeyakv2 2.30 2.32 2.34 T:oceankeyakv2 2.58 2.60 2.62 T:norx6441v3 2.56 2.62 2.63 T:norx6441v2 2.80 2.82 2.86 T:lakekeyakv2 2.77 2.83 2.88 T:lunarkeyakv2 2.81 2.84 2.86 T:norx6444v3 2.91 2.93 2.98 T:lakekeyakv1 3.10 3.12 3.18 T:norx6441v1 3.26 3.28 3.30 T:norx6444v2 3.77 3.81 3.83 T:norx6444v1 3.85 3.87 3.90 T:norx6461v3 3.86 3.88 3.91 T:norx6461v2 3.86 3.89 3.92 T:norx3241v2 3.87 3.90 3.95 T:norx3241v3 4.22 4.22 4.23 T:aesjambuv1 4.56 4.62 4.65 T:norx6461v1 4.71 4.78 4.84 T:norx3241v1 4.92 4.97 5.22 T:acorn128v2 4.88 4.98 5.06 T:ketjemajorv2 5.04 5.14 5.27 T:acorn128v3 5.17 5.18 5.21 T:riverkeyakv2 5.85 5.89 5.99 T:norx3261v2 5.93 5.95 5.98 T:norx3261v3 6.17 6.19 6.20 ascon128av12 6.31 6.33 6.35 T:ascon128av11 6.33 6.35 6.36 T:ascon96v1 6.72 6.75 6.79 T:ketjeminorv2 7.37 7.41 7.42 T:norx3261v1 9.08 9.12 9.16 T:ascon128v11 9.11 9.13 9.14 T:ascon128v1 9.20 9.21 9.22 ascon128v12 11.24 11.25 11.28 T:aes128otrsv2 11.32 11.33 11.35 T:aes128otrpv2 11.32 11.34 11.36 T:aes128otrpv1 11.21 11.42 11.50 T:aes128otrsv1 14.14 14.19 14.46 T:aes256otrsv1 14.32 14.33 14.33 T:twine80n6t4clocv3 14.62 14.76 14.83 T:aes256otrsv2 14.83 14.85 14.88 T:aes256otrpv1 14.85 14.86 14.89 T:aes256otrpv2 15.24 15.26 15.27 T:twine80n6t4clocv2 15.26 15.30 15.32 T:aes128n12clocv1 15.28 15.31 15.32 T:aes128n8clocv1 19.24 19.39 19.48 T:proest256otrv1 22.13 22.15 22.16 T:aeadaes128ocbtaglen64v1 22.13 22.16 22.18 T:aeadaes128ocbtaglen96v1 25.75 26.06 26.19 T:ketjesrv1 26.12 26.30 26.78 T:ketjesrv2 26.28 26.31 26.34 T:aeadaes192ocbtaglen96v1 26.29 26.31 26.34 T:aeadaes192ocbtaglen64v1 30.50 30.54 30.60 T:aeadaes256ocbtaglen64v1 30.50 30.54 30.57 T:aeadaes256ocbtaglen96v1 35.84 35.87 35.89 T:colm127v1 43.03 43.83 44.05 T:proest128otrv1 44.06 44.41 45.31 T:ketjejrv1 61.79 63.54 64.15 T:deoxysneq128128v13 68.33 69.66 69.89 T:ketjejrv2 70.06 70.12 70.17 T:present80n6t4silcv3 84.87 85.34 91.94 T:aezv1 93.40 95.87 96.05 T:deoxyseq128128v13 103.40 103.82 104.17 T:deoxysneq256128v13 125.70 125.76 125.85 T:led80n6t4silcv3 153.58 155.30 156.11 T:deoxyseq256128v13 397.21 408.21 416.70 T:acorn128 2673.32 2676.38 2683.10 T:led80n6silcv1 2673.23 2676.42 2682.92 T:led80n6t4silcv2 2854.23 2858.31 2860.69 T:present80n6silcv1 2853.40 2860.18 2865.88 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.21 0.22 0.22 aegis128l 0.21? 0.23? 0.24? T:tiaoxinv1 0.22 0.23 0.24 T:tiaoxinv2 0.30 0.31 0.31 T:aezv4 0.31 0.32 0.32 T:aezv3 0.33 0.35 0.35 T:aezv5 0.36 0.36 0.36 T:aegis128 0.36 0.36 0.37 aegis256 0.44 0.45 0.46 T:aeadaes128ocbtaglen128v1 -0.30? 0.53? 1.38? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.65 0.65 0.67 T:aeadaes256ocbtaglen128v1 0.68 0.69 0.70 T:aes128gcmv1 0.70 0.71 0.72 T:aes256otrpv3 0.70 0.71 0.72 T:aes256otrcv3 0.78 0.80 0.81 aes256gcmv1 0.82 0.85 0.86 T:deoxysi128v141 0.89 0.90 0.92 T:deoxysneq128128v1 0.91 0.91 0.93 T:morus1280128v2 0.91 0.92 0.93 T:morus1280256v1 0.91 0.92 0.93 T:morus1280128v1 0.91 0.92 0.93 T:morus1280256v2 0.93 0.94 0.96 T:deoxysi256v141 1.00 1.02 1.03 T:deoxysneq256128v1 1.07 1.08 1.09 T:morus640128v2 1.09 1.10 1.11 T:morus640128v1 1.20 1.21 1.22 T:deoxysii128v141 1.26 1.27 1.28 T:colm0v1 1.31 1.32 1.32 T:aes128otrsv3 1.35 1.35 1.37 T:deoxysii256v141 1.36 1.38 1.38 T:deoxyseq128128v1 1.54 1.55 1.55 T:deoxyseq256128v1 1.76 1.77 1.77 T:aes256otrsv3 2.04 2.04 2.09 T:aes128n12t8silcv3 2.03 2.06 2.06 T:aes128n12t8clocv3 2.04 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n8t8clocv2 2.04 2.06 2.06 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.29 2.30 2.33 T:seakeyakv2 2.31 2.34 2.38 T:oceankeyakv2 2.53 2.56 2.58 T:norx6441v3 2.54 2.57 2.63 T:norx6441v2 2.81 2.83 2.86 T:norx6444v3 2.81 2.83 2.86 T:lakekeyakv2 2.81 2.86 2.92 T:lunarkeyakv2 2.91 2.96 2.99 T:lakekeyakv1 3.06 3.11 3.14 T:norx6441v1 3.24 3.26 3.30 T:norx6444v2 3.78 3.81 3.85 T:norx6444v1 3.82 3.84 3.87 T:norx6461v2 3.81 3.84 3.88 T:norx3241v3 3.83 3.86 3.91 T:norx3241v2 3.83 3.87 3.90 T:norx6461v3 4.39 4.39 4.40 T:aesjambuv1 4.57 4.62 4.65 T:norx6461v1 4.58 4.62 4.67 T:norx3241v1 4.78 4.83 4.94 T:ketjemajorv2 5.16 5.17 5.34 T:acorn128v2 5.09 5.27 5.28 T:acorn128v3 5.26 5.28 5.31 T:riverkeyakv2 5.77 5.82 5.91 T:norx3261v2 5.88 5.90 5.92 T:norx3261v3 6.16 6.17 6.19 ascon128av12 6.28 6.30 6.32 T:ascon128av11 6.28 6.31 6.33 T:ascon96v1 6.81 6.84 6.92 T:ketjeminorv2 7.31 7.34 7.36 T:norx3261v1 9.04 9.09 9.10 T:ascon128v11 9.09 9.11 9.13 T:ascon128v1 9.19 9.21 9.23 ascon128v12 11.28 11.32 11.49 T:aes128otrsv1 11.37 11.40 11.45 T:aes128otrsv2 11.39 11.42 11.45 T:aes128otrpv1 11.41 11.49 11.52 T:aes128otrpv2 14.32 14.33 14.34 T:twine80n6t4clocv3 14.28 14.33 14.61 T:aes256otrsv1 14.34 14.53 14.60 T:aes256otrsv2 14.89 14.93 14.96 T:aes256otrpv1 14.94 15.02 15.06 T:aes256otrpv2 15.22 15.23 15.24 T:twine80n6t4clocv2 15.62 15.67 15.69 T:aes128n12clocv1 15.65 15.69 15.84 T:aes128n8clocv1 19.27 19.41 19.46 T:proest256otrv1 26.16 26.19 26.24 T:aeadaes128ocbtaglen96v1 26.17 26.19 26.20 T:aeadaes128ocbtaglen64v1 26.32 26.54 26.75 T:ketjesrv1 26.57 26.64 27.22 T:ketjesrv2 31.18 31.21 31.25 T:aeadaes192ocbtaglen96v1 31.19 31.22 31.28 T:aeadaes192ocbtaglen64v1 36.29 36.32 36.34 T:aeadaes256ocbtaglen96v1 36.29 36.32 36.36 T:aeadaes256ocbtaglen64v1 42.67 43.48 43.57 T:proest128otrv1 43.80 43.90 43.94 T:colm127v1 44.00 44.71 45.32 T:ketjejrv1 68.75 70.07 70.24 T:ketjejrv2 70.07 70.11 70.20 T:present80n6t4silcv3 73.24 75.29 75.45 T:deoxysneq128128v13 85.22 85.39 91.83 T:aezv1 93.70 95.26 95.41 T:deoxyseq128128v13 116.96 117.19 117.36 T:deoxysneq256128v13 125.57 125.60 126.02 T:led80n6t4silcv3 153.54 155.28 156.08 T:deoxyseq256128v13 402.74 406.74 416.08 T:acorn128 2669.61 2677.89 2682.86 T:led80n6t4silcv2 2677.10 2679.67 2686.05 T:led80n6silcv1 2852.82 2856.50 2858.63 T:present80n6silcv1 2854.65 2859.88 2863.68 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.17 0.17 0.18 T:aezv4 0.18? 0.18? 0.21? T:aezv3 0.19 0.20 0.20 T:aezv5 0.21 0.22 0.22 aegis128l 0.21? 0.23? 0.25? T:tiaoxinv1 0.22? 0.23? 0.26? T:tiaoxinv2 0.36 0.36 0.36 T:aegis128 0.37 0.40 0.40 aegis256 0.45 0.46 0.46 T:aeadaes128ocbtaglen128v1 0.52 0.53 0.54 T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.64 0.65 0.65 T:aeadaes256ocbtaglen128v1 0.69 0.69 0.70 T:aes128gcmv1 0.71 0.71 0.72 T:aes256otrpv3 0.71 0.71 0.72 T:aes256otrcv3 0.79 0.80 0.80 aes256gcmv1 0.83 0.86 0.87 T:deoxysi128v141 0.90 0.91 0.92 T:deoxysneq128128v1 0.91 0.92 0.93 T:morus1280128v1 0.91 0.92 0.92 T:morus1280256v2 0.91 0.92 0.92 T:morus1280256v1 0.91 0.92 0.92 T:morus1280128v2 0.92 0.96 0.97 T:deoxysi256v141 1.00 1.02 1.04 T:deoxysneq256128v1 1.08 1.09 1.09 T:morus640128v2 1.08 1.09 1.11 T:morus640128v1 1.21 1.22 1.23 T:deoxysii128v141 1.24 1.25 1.31 T:colm0v1 1.31 1.31 1.32 T:aes128otrsv3 1.36 1.36 1.38 T:deoxysii256v141 1.35 1.37 1.39 T:deoxyseq128128v1 1.53 1.54 1.57 T:deoxyseq256128v1 1.75 1.76 1.76 T:aes256otrsv3 2.03 2.03 2.10 T:aes128n12t8silcv2 2.03 2.03 2.10 T:aes128n12t8silcv3 2.03 2.04 2.06 T:aes128n12t8clocv3 2.03 2.04 2.06 T:aes128n8t8clocv2 2.03 2.04 2.09 T:aes128n12t8clocv2 2.06 2.06 2.10 T:aes128n8t8silcv2 2.31 2.32 2.34 T:seakeyakv2 2.34 2.37 2.38 T:oceankeyakv2 2.56 2.57 2.59 T:norx6441v3 2.54 2.57 2.61 T:norx6441v2 2.83 2.83 2.85 T:lakekeyakv2 2.82 2.85 2.87 T:norx6444v3 2.84 2.88 2.92 T:lunarkeyakv2 2.94 2.99 3.02 T:lakekeyakv1 3.10 3.13 3.18 T:norx6441v1 3.26 3.27 3.28 T:norx6444v2 3.81 3.83 3.86 T:norx6444v1 3.82 3.84 3.87 T:norx6461v3 3.83 3.84 3.86 T:norx6461v2 3.81 3.85 3.89 T:norx3241v3 3.83 3.90 3.95 T:norx3241v2 4.38 4.38 4.39 T:aesjambuv1 4.56 4.60 4.67 T:norx6461v1 4.57 4.62 4.68 T:norx3241v1 4.82 4.87 4.96 T:ketjemajorv2 5.13 5.18 5.35 T:acorn128v2 5.12 5.28 5.31 T:acorn128v3 5.26 5.29 5.31 T:riverkeyakv2 5.81 5.86 5.91 T:norx3261v2 5.89 5.92 5.94 T:norx3261v3 6.16 6.17 6.19 ascon128av12 6.30 6.31 6.32 T:ascon128av11 6.30 6.31 6.32 T:ascon96v1 6.86 6.87 6.91 T:ketjeminorv2 7.31 7.33 7.36 T:norx3261v1 9.05 9.08 9.11 T:ascon128v11 9.08 9.11 9.13 T:ascon128v1 9.20 9.22 9.24 ascon128v12 11.19 11.34 11.46 T:aes128otrsv1 11.39 11.41 11.44 T:aes128otrsv2 11.42 11.44 11.48 T:aes128otrpv1 11.50 11.52 11.55 T:aes128otrpv2 14.31 14.33 14.34 T:twine80n6t4clocv3 14.30 14.33 14.63 T:aes256otrsv1 14.37 14.56 14.72 T:aes256otrsv2 14.91 14.95 15.00 T:aes256otrpv1 14.94 15.04 15.07 T:aes256otrpv2 15.23 15.24 15.25 T:twine80n6t4clocv2 15.64 15.67 15.72 T:aes128n12clocv1 15.68 15.69 15.70 T:aes128n8clocv1 19.24 19.40 19.47 T:proest256otrv1 26.16 26.18 26.21 T:aeadaes128ocbtaglen64v1 26.17 26.20 26.22 T:aeadaes128ocbtaglen96v1 26.09 26.50 26.69 T:ketjesrv1 26.62 26.66 27.20 T:ketjesrv2 31.17 31.19 31.22 T:aeadaes192ocbtaglen96v1 31.21 31.22 31.24 T:aeadaes192ocbtaglen64v1 36.29 36.32 36.34 T:aeadaes256ocbtaglen96v1 36.30 36.33 36.37 T:aeadaes256ocbtaglen64v1 43.31 43.35 43.41 T:colm127v1 42.61 43.37 43.57 T:proest128otrv1 43.91 44.36 45.37 T:ketjejrv1 68.90 70.04 70.23 T:ketjejrv2 70.01 70.13 70.22 T:present80n6t4silcv3 73.22 75.28 75.74 T:deoxysneq128128v13 85.01 85.23 91.82 T:aezv1 93.61 95.12 95.36 T:deoxyseq128128v13 116.71 117.01 117.34 T:deoxysneq256128v13 125.50 125.62 125.67 T:led80n6t4silcv3 153.57 155.27 156.28 T:deoxyseq256128v13 402.58 403.98 416.58 T:acorn128 2668.27 2678.48 2687.59 T:led80n6t4silcv2 2679.08 2682.02 2685.55 T:led80n6silcv1 2851.90 2854.19 2858.19 T:present80n6silcv1 2851.91 2858.81 2863.23 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.12 0.13 0.13 T:tiaoxinv1 0.12 0.13 0.13 T:tiaoxinv2 0.16? 0.17? 0.18? aegis128l 0.17? 0.19? 0.20? T:aezv4 0.19 0.20 0.21 T:aezv3 0.21 0.22 0.23 T:aezv5 0.31 0.32 0.33 aegis256 0.36 0.36 0.37 T:aegis128 0.43 0.44 0.45 aes256gcmv1 0.42 0.44 0.45 T:aeadaes128ocbtaglen128v1 0.43 0.45 0.46 T:aes128gcmv1 0.26? 0.46? 2.17? T:aeadaes192ocbtaglen128v1 0.55 0.56 0.56 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrpv3 0.64 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.71 0.72 0.73 T:colm0v1 0.71 0.72 0.73 T:aes256otrcv3 0.71 0.74 0.75 T:aes256otrpv3 0.80 0.81 0.83 T:deoxysii128v141 0.81 0.82 0.82 T:deoxysi128v141 0.84 0.86 0.87 T:deoxysneq128128v1 0.85 0.86 0.88 T:morus1280256v1 0.86 0.87 0.87 T:morus1280128v1 0.86 0.87 0.89 T:morus1280256v2 0.87 0.88 0.89 T:morus1280128v2 0.90 0.91 0.92 T:deoxyseq128128v1 0.90 0.91 0.92 T:deoxysii256v141 0.91 0.91 0.92 T:deoxysi256v141 0.95 0.97 0.98 T:deoxysneq256128v1 1.01 1.02 1.03 T:deoxyseq256128v1 1.04 1.05 1.08 T:morus640128v1 1.04 1.07 1.09 T:morus640128v2 1.78 1.83 1.87 T:oceankeyakv2 1.77 1.83 1.89 T:lunarkeyakv2 2.05 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128n12t8silcv2 2.21 2.23 2.23 T:seakeyakv2 2.53 2.55 2.58 T:lakekeyakv2 2.51 2.56 2.63 T:norx6441v2 2.57 2.61 2.62 T:norx6441v3 2.70 2.74 2.76 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.05 3.12 3.16 T:norx6441v1 3.13 3.15 3.18 T:norx6444v2 3.32 3.35 3.40 T:norx6444v3 3.81 3.85 3.89 T:norx6461v2 3.85 3.85 3.89 T:norx6444v1 3.81 3.87 3.90 T:norx6461v3 3.94 3.96 4.03 T:norx3241v3 3.91 3.97 4.03 T:norx3241v2 3.98 4.08 4.36 T:ketjemajorv2 4.20 4.20 4.20 T:aesjambuv1 4.57 4.61 4.67 T:norx6461v1 4.79 4.82 4.84 T:riverkeyakv2 4.80 4.87 4.95 T:norx3241v1 4.93 4.98 5.02 T:acorn128v3 4.96 5.02 5.30 T:acorn128v2 5.84 5.95 6.02 T:norx3261v2 5.98 6.03 6.08 T:norx3261v3 6.14 6.15 6.16 ascon128av12 6.30 6.32 6.34 T:ascon128av11 6.30 6.33 6.35 T:ascon96v1 6.28 6.39 6.42 T:ketjeminorv2 7.35 7.39 7.41 T:norx3261v1 9.05 9.06 9.08 T:ascon128v1 9.04 9.10 9.28 T:ascon128v11 9.14 9.16 9.16 ascon128v12 9.75 9.79 9.82 T:aes128otrsv2 10.09 10.13 10.15 T:aes128n12clocv1 10.10 10.13 10.17 T:aes128n8clocv1 10.05 10.22 10.31 T:aes128otrsv1 10.84 10.87 10.93 T:aes128otrpv2 10.85 10.87 10.91 T:aes128otrpv1 12.89 12.91 12.93 T:aes256otrsv1 13.19 13.41 13.47 T:aes256otrsv2 14.12 14.12 14.14 T:twine80n6t4clocv3 14.40 14.43 14.45 T:aes256otrpv2 14.42 14.44 14.46 T:aes256otrpv1 14.99 15.00 15.01 T:twine80n6t4clocv2 19.59 19.79 19.85 T:proest256otrv1 21.85 21.87 21.89 T:aeadaes128ocbtaglen64v1 21.83 21.88 21.90 T:aeadaes128ocbtaglen96v1 23.16 23.26 23.38 T:colm127v1 24.85 25.11 25.21 T:ketjesrv1 25.85 25.98 26.45 T:ketjesrv2 26.01 26.03 26.08 T:aeadaes192ocbtaglen96v1 26.00 26.05 26.08 T:aeadaes192ocbtaglen64v1 30.22 30.25 30.28 T:aeadaes256ocbtaglen96v1 30.21 30.26 30.30 T:aeadaes256ocbtaglen64v1 40.38 41.19 41.30 T:ketjejrv1 41.09 41.68 44.02 T:aezv1 43.13 43.61 44.15 T:proest128otrv1 62.64 63.35 65.21 T:deoxysneq128128v13 63.13 63.85 63.99 T:deoxyseq128128v13 65.91 68.33 68.61 T:ketjejrv2 69.25 69.28 69.35 T:present80n6t4silcv3 102.78 103.03 103.75 T:deoxyseq256128v13 102.63 103.53 103.79 T:deoxysneq256128v13 125.10 125.13 125.19 T:led80n6t4silcv3 396.93 407.97 414.45 T:acorn128 1781.49 1785.03 1789.83 T:led80n6t4silcv2 1783.34 1785.08 1787.28 T:led80n6silcv1 1901.07 1903.74 1910.10 T:present80n6t4silcv2 1894.01 1907.17 1908.77 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.12 0.13 0.13 T:tiaoxinv2 0.12? 0.13? 0.18? T:tiaoxinv1 0.16? 0.18? 0.19? aegis128l 0.19 0.19 0.20 T:aezv4 0.20 0.21 0.21 T:aezv3 0.21 0.22 0.23 T:aezv5 0.31 0.31 0.32 T:aegis128 0.31? 0.32? 0.37? aegis256 0.42 0.44 0.46 T:aeadaes128ocbtaglen128v1 0.43 0.44 0.45 aes256gcmv1 0.44 0.45 0.46 T:aes128gcmv1 -1.19? 0.46? 0.48? T:aeadaes192ocbtaglen128v1 0.54 0.56 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.66 0.66 0.67 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.71 T:aes256otrcv3 0.67 0.71 0.74 T:colm0v1 0.72 0.73 0.74 T:aes256otrpv3 0.81 0.82 0.82 T:deoxysii128v141 0.81 0.82 0.83 T:deoxysi128v141 0.85 0.86 0.87 T:morus1280256v2 0.85 0.86 0.88 T:morus1280128v1 0.85 0.86 0.87 T:morus1280128v2 0.86 0.86 0.87 T:morus1280256v1 0.85 0.87 0.88 T:deoxysneq128128v1 0.88 0.89 0.90 T:deoxyseq128128v1 0.89 0.91 0.92 T:deoxysii256v141 0.90 0.92 0.92 T:deoxysi256v141 0.96 0.99 1.01 T:deoxysneq256128v1 1.02 1.03 1.04 T:deoxyseq256128v1 1.02 1.04 1.06 T:morus640128v2 1.03 1.06 1.09 T:morus640128v1 1.77 1.81 1.88 T:lunarkeyakv2 1.78 1.84 1.88 T:oceankeyakv2 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.07 2.12 T:aes128n12t8clocv2 2.06 2.07 2.13 T:aes128n8t8silcv2 2.06 2.11 2.11 T:aes128n12t8clocv3 2.05 2.11 2.12 T:aes128n8t8clocv2 2.00 2.11 2.12 T:aes128n12t8silcv3 2.00 2.11 2.12 T:aes128n12t8silcv2 2.20 2.22 2.25 T:seakeyakv2 2.54 2.57 2.59 T:lakekeyakv2 2.56 2.59 2.62 T:norx6441v3 2.54 2.61 2.69 T:norx6441v2 2.72 2.74 2.75 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.06 3.10 3.13 T:norx6444v2 3.08 3.16 3.19 T:norx6441v1 3.32 3.35 3.38 T:norx6444v3 3.82 3.84 3.90 T:norx6461v2 3.83 3.88 3.92 T:norx6444v1 3.85 3.88 3.97 T:norx6461v3 3.94 3.99 4.04 T:norx3241v3 3.92 4.02 4.06 T:norx3241v2 4.00 4.07 4.35 T:ketjemajorv2 4.20 4.21 4.22 T:aesjambuv1 4.58 4.65 4.71 T:norx6461v1 4.74 4.77 4.87 T:norx3241v1 4.79 4.83 4.86 T:riverkeyakv2 4.97 4.99 5.06 T:acorn128v2 5.27 5.29 5.49 T:acorn128v3 5.75 5.80 5.85 T:norx3261v2 5.92 5.95 6.01 T:norx3261v3 6.14 6.16 6.17 ascon128av12 6.29 6.32 6.33 T:ascon128av11 6.29 6.32 6.34 T:ascon96v1 6.32 6.36 6.45 T:ketjeminorv2 7.38 7.40 7.42 T:norx3261v1 9.07 9.09 9.13 T:ascon128v11 9.12 9.15 9.16 T:ascon128v1 9.18 9.22 9.23 ascon128v12 9.78 9.79 9.85 T:aes128otrsv2 10.13 10.15 10.17 T:aes128n12clocv1 10.14 10.17 10.18 T:aes128n8clocv1 10.00 10.28 10.32 T:aes128otrsv1 10.84 10.88 10.92 T:aes128otrpv1 10.86 10.88 10.93 T:aes128otrpv2 12.89 12.93 12.98 T:aes256otrsv1 13.13 13.36 13.47 T:aes256otrsv2 14.10 14.14 14.16 T:twine80n6t4clocv3 14.38 14.42 14.47 T:aes256otrpv1 14.38 14.44 14.46 T:aes256otrpv2 14.99 15.03 15.04 T:twine80n6t4clocv2 19.65 19.87 20.02 T:proest256otrv1 21.84 21.87 21.91 T:aeadaes128ocbtaglen64v1 21.85 21.88 21.93 T:aeadaes128ocbtaglen96v1 23.17 23.22 23.32 T:colm127v1 24.82 25.10 25.21 T:ketjesrv1 25.84 25.95 26.43 T:ketjesrv2 25.99 26.02 26.08 T:aeadaes192ocbtaglen64v1 26.00 26.05 26.08 T:aeadaes192ocbtaglen96v1 30.21 30.25 30.29 T:aeadaes256ocbtaglen64v1 30.23 30.27 30.30 T:aeadaes256ocbtaglen96v1 40.52 41.16 41.32 T:ketjejrv1 41.06 41.36 43.99 T:aezv1 43.51 43.85 44.54 T:proest128otrv1 62.64 63.39 65.63 T:deoxysneq128128v13 63.01 63.86 63.94 T:deoxyseq128128v13 65.88 68.38 68.59 T:ketjejrv2 69.22 69.27 69.36 T:present80n6t4silcv3 102.80 103.12 103.65 T:deoxyseq256128v13 103.53 103.60 103.90 T:deoxysneq256128v13 125.07 125.12 125.22 T:led80n6t4silcv3 400.35 407.56 413.03 T:acorn128 1776.98 1784.02 1787.13 T:led80n6t4silcv2 1782.54 1785.47 1787.56 T:led80n6silcv1 1901.83 1904.94 1910.01 T:present80n6t4silcv2 1893.69 1906.01 1908.34 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.12? 0.13? 0.14? T:tiaoxinv1 0.12? 0.13? 0.14? T:tiaoxinv2 0.16 0.17 0.17 aegis128l 0.19 0.19 0.20 T:aezv4 0.20 0.21 0.21 T:aezv3 0.21 0.22 0.22 T:aezv5 0.31 0.31 0.32 T:aegis128 0.31 0.31 0.33 aegis256 0.43 0.43 0.45 aes256gcmv1 0.42 0.44 0.45 T:aeadaes128ocbtaglen128v1 0.44 0.45 0.45 T:aes128gcmv1 0.45? 0.47? 2.15? T:aeadaes192ocbtaglen128v1 0.54 0.56 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.65 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.70 0.70 T:aes256otrcv3 0.67? 0.70? 0.75? T:colm0v1 0.72 0.73 0.74 T:aes256otrpv3 0.80 0.81 0.84 T:deoxysi128v141 0.81 0.82 0.83 T:deoxysii128v141 0.84 0.85 0.87 T:morus1280128v1 0.85 0.86 0.86 T:morus1280256v1 0.85 0.86 0.86 T:morus1280256v2 0.85 0.86 0.86 T:morus1280128v2 0.83 0.89 0.90 T:deoxysneq128128v1 0.89 0.90 0.90 T:deoxyseq128128v1 0.90 0.91 0.93 T:deoxysii256v141 0.90 0.93 0.95 T:deoxysi256v141 0.93 0.99 1.01 T:deoxysneq256128v1 1.02 1.03 1.05 T:morus640128v2 1.02 1.03 1.04 T:deoxyseq256128v1 1.03 1.06 1.07 T:morus640128v1 1.77 1.81 1.85 T:lunarkeyakv2 1.80 1.82 1.87 T:oceankeyakv2 2.05 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.06 T:aes128otrsv3 2.01 2.06 2.11 T:aes128n12t8clocv3 2.01 2.06 2.12 T:aes128n8t8clocv2 2.02 2.11 2.12 T:aes128n12t8clocv2 2.06 2.13 2.13 T:aes128n12t8silcv2 2.06 2.13 2.13 T:aes128n12t8silcv3 2.18 2.22 2.25 T:seakeyakv2 2.55 2.56 2.58 T:lakekeyakv2 2.57 2.60 2.63 T:norx6441v3 2.55 2.62 2.67 T:norx6441v2 2.71 2.74 2.76 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.09 3.11 3.13 T:norx6444v2 3.08 3.14 3.20 T:norx6441v1 3.33 3.36 3.38 T:norx6444v3 3.80 3.86 3.89 T:norx6461v2 3.83 3.87 3.92 T:norx6444v1 3.83 3.89 3.93 T:norx6461v3 3.92 3.97 4.04 T:norx3241v3 3.94 4.00 4.05 T:norx3241v2 4.00 4.08 4.37 T:ketjemajorv2 4.20 4.22 4.23 T:aesjambuv1 4.58 4.67 4.73 T:norx6461v1 4.71 4.79 4.87 T:norx3241v1 4.79 4.82 4.85 T:riverkeyakv2 4.99 5.00 5.08 T:acorn128v2 5.27 5.29 5.52 T:acorn128v3 5.85 5.91 6.01 T:norx3261v2 5.97 6.02 6.03 T:norx3261v3 6.14 6.16 6.18 ascon128av12 6.29 6.32 6.34 T:ascon128av11 6.29 6.33 6.35 T:ascon96v1 6.33 6.40 6.46 T:ketjeminorv2 7.39 7.42 7.44 T:norx3261v1 9.07 9.10 9.12 T:ascon128v11 9.03 9.12 9.15 T:ascon128v1 9.18 9.21 9.22 ascon128v12 9.77 9.81 9.84 T:aes128otrsv2 10.10 10.14 10.16 T:aes128n12clocv1 10.12 10.16 10.19 T:aes128n8clocv1 10.04 10.22 10.30 T:aes128otrsv1 10.87 10.90 10.92 T:aes128otrpv1 10.84 10.91 10.93 T:aes128otrpv2 12.88 12.92 12.98 T:aes256otrsv1 13.18 13.39 13.46 T:aes256otrsv2 14.12 14.14 14.16 T:twine80n6t4clocv3 14.38 14.42 14.46 T:aes256otrpv2 14.40 14.44 14.48 T:aes256otrpv1 14.99 15.02 15.04 T:twine80n6t4clocv2 19.60 19.80 19.87 T:proest256otrv1 21.88 21.90 21.96 T:aeadaes128ocbtaglen64v1 21.88 21.91 21.93 T:aeadaes128ocbtaglen96v1 23.14 23.22 23.31 T:colm127v1 24.80 25.05 25.23 T:ketjesrv1 25.83 25.96 26.42 T:ketjesrv2 26.00 26.04 26.09 T:aeadaes192ocbtaglen96v1 26.00 26.04 26.08 T:aeadaes192ocbtaglen64v1 30.22 30.25 30.29 T:aeadaes256ocbtaglen64v1 30.21 30.26 30.28 T:aeadaes256ocbtaglen96v1 40.54 41.13 41.33 T:ketjejrv1 41.08 41.34 44.02 T:aezv1 43.56 43.94 44.54 T:proest128otrv1 63.10 63.37 65.57 T:deoxysneq128128v13 63.03 63.86 64.14 T:deoxyseq128128v13 65.96 68.32 68.51 T:ketjejrv2 69.23 69.29 69.36 T:present80n6t4silcv3 102.67 103.11 103.59 T:deoxyseq256128v13 103.54 103.62 103.82 T:deoxysneq256128v13 125.13 125.24 125.77 T:led80n6t4silcv3 402.17 406.85 409.17 T:acorn128 1777.97 1780.85 1787.70 T:led80n6t4silcv2 1781.37 1783.27 1786.26 T:led80n6silcv1 1893.48 1905.15 1906.72 T:present80n6silcv1 1901.57 1907.24 1910.24 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.22 0.22 0.24 T:tiaoxinv2 0.22 0.22 0.24 T:tiaoxinv1 0.24? 0.25? 0.27? aegis128l 0.35 0.36 0.37 T:aezv4 0.37 0.37 0.39 T:aezv3 0.39 0.39 0.40 T:aezv5 0.40 0.40 0.41 T:aegis128 0.41 0.41 0.42 aegis256 0.51 0.51 0.52 T:aeadaes128ocbtaglen128v1 0.60 0.61 0.66 T:aeadaes192ocbtaglen128v1 0.61 0.62 0.62 T:aes128otrpv3 0.64 0.65 0.65 T:aes128otrcv3 0.67 0.67 0.69 T:aeadaes256ocbtaglen128v1 0.77 0.77 0.78 T:aes128gcmv1 0.78 0.79 0.79 T:aes256otrpv3 0.84 0.85 0.85 T:aes256otrcv3 0.85 0.86 0.86 aes256gcmv1 0.93 0.93 0.94 T:deoxysi128v141 0.95 0.96 0.97 T:deoxysneq128128v1 1.07 1.08 1.08 T:deoxysi256v141 1.08 1.08 1.09 T:deoxysneq256128v1 1.13 1.13 1.13 T:morus1280256v1 1.14 1.15 1.16 T:morus1280128v1 1.15 1.16 1.16 T:morus1280256v2 1.14 1.16 1.16 T:morus1280128v2 1.21 1.22 1.23 T:morus640128v1 1.23 1.24 1.25 T:morus640128v2 1.31 1.31 1.32 T:colm0v1 1.34 1.35 1.35 T:aes128otrsv3 1.37 1.38 1.39 T:deoxysii128v141 1.46 1.47 1.47 T:deoxyseq128128v1 1.54 1.55 1.56 T:deoxysii256v141 1.67 1.68 1.68 T:deoxyseq256128v1 1.81 1.81 1.82 T:aes256otrsv3 2.11 2.12 2.12 T:aes128n8t8clocv2 2.12 2.12 2.12 T:aes128n12t8clocv2 2.11 2.12 2.12 T:aes128n12t8clocv3 2.12 2.12 2.13 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.13 2.13 T:aes128n12t8silcv2 2.97 3.01 3.04 T:norx6441v2 3.01 3.01 3.04 T:norx6441v3 3.06 3.06 3.09 T:lakekeyakv2 3.27 3.27 3.29 T:seakeyakv2 3.39 3.41 3.44 T:lakekeyakv1 3.47 3.50 3.54 T:norx6441v1 3.81 3.83 3.85 T:norx6444v3 4.18 4.19 4.23 T:norx3241v2 4.16 4.20 4.27 T:norx3241v3 4.27 4.27 4.28 T:aesjambuv1 4.30 4.31 4.35 T:oceankeyakv2 4.49 4.51 4.55 T:norx6461v2 4.52 4.54 4.56 T:norx6461v3 4.64 4.65 4.68 T:norx6444v2 4.96 5.01 5.05 T:norx3241v1 5.16 5.20 5.22 T:norx6461v1 5.38 5.39 5.42 T:norx6444v1 5.43 5.44 5.46 T:riverkeyakv2 5.83 5.85 6.08 T:acorn128v2 5.90 6.08 6.10 T:acorn128v3 6.33 6.33 6.34 ascon128av12 6.36 6.39 6.42 T:norx3261v2 6.39 6.42 6.42 T:norx3261v3 6.41 6.44 6.45 T:ketjemajorv2 6.46 6.47 6.49 T:ascon128av11 6.47 6.49 6.51 T:ascon96v1 7.39 7.43 7.48 T:lunarkeyakv2 7.43 7.54 7.60 T:ketjeminorv2 7.79 7.80 7.82 T:norx3261v1 9.23 9.24 9.26 T:ascon128v1 9.25 9.26 9.27 T:ascon128v11 9.33 9.36 9.37 ascon128v12 11.47 11.50 11.78 T:aes128otrsv1 11.56 11.58 11.61 T:aes128otrsv2 11.63 11.64 11.66 T:aes128otrpv1 11.65 11.66 11.67 T:aes128otrpv2 14.50 14.51 14.51 T:twine80n6t4clocv3 14.59 14.86 14.88 T:aes256otrsv1 14.93 15.18 15.27 T:aes256otrsv2 15.25 15.26 15.28 T:aes256otrpv1 15.26 15.27 15.29 T:aes256otrpv2 15.43 15.43 15.45 T:twine80n6t4clocv2 15.46 15.47 15.47 T:aes128n12clocv1 15.47 15.48 15.50 T:aes128n8clocv1 20.71 21.25 21.29 T:proest256otrv1 22.70 22.72 22.73 T:aeadaes128ocbtaglen64v1 22.71 22.73 22.74 T:aeadaes128ocbtaglen96v1 26.53 26.69 26.83 T:ketjesrv1 26.94 26.94 26.97 T:aeadaes192ocbtaglen64v1 26.93 26.96 27.01 T:aeadaes192ocbtaglen96v1 27.23 27.29 27.57 T:ketjesrv2 31.27 31.29 31.30 T:aeadaes256ocbtaglen64v1 31.27 31.30 31.32 T:aeadaes256ocbtaglen96v1 36.39 36.43 36.46 T:colm127v1 45.27 45.37 45.55 T:ketjejrv1 45.26 45.53 45.80 T:proest128otrv1 62.67 63.41 63.92 T:deoxysneq128128v13 70.78 70.80 70.85 T:present80n6t4silcv3 68.50 70.80 70.87 T:ketjejrv2 82.90 87.89 89.67 T:aezv1 95.92 96.53 96.90 T:deoxyseq128128v13 103.60 104.45 105.32 T:deoxysneq256128v13 126.75 126.81 127.05 T:led80n6t4silcv3 156.36 157.03 157.81 T:deoxyseq256128v13 449.26 458.16 464.45 T:acorn128 2684.10 2685.25 2688.93 T:led80n6t4silcv2 2682.75 2690.80 2695.76 T:led80n6silcv1 2870.57 2870.86 2871.56 T:present80n6t4silcv2 2866.25 2872.30 2877.75 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.26 0.26 0.27 aegis128l 0.28 0.28 0.28 T:tiaoxinv1 0.28 0.28 0.29 T:tiaoxinv2 0.35 0.36 0.36 T:aezv4 0.37 0.37 0.39 T:aezv3 0.38 0.39 0.39 T:aegis128 0.39 0.39 0.40 T:aezv5 0.41 0.42 0.43 aegis256 0.51 0.52 0.52 T:aeadaes128ocbtaglen128v1 0.63? 0.63? 1.67? T:aeadaes192ocbtaglen128v1 0.63 0.63 0.64 T:aes128otrpv3 0.67 0.67 0.67 T:aes128otrcv3 0.71 0.72 0.73 T:aeadaes256ocbtaglen128v1 0.79 0.79 0.80 T:aes128gcmv1 0.80 0.80 0.81 T:aes256otrpv3 0.86 0.87 0.88 T:aes256otrcv3 0.90 0.91 0.92 aes256gcmv1 1.01 1.02 1.02 T:deoxysi128v141 1.06 1.07 1.07 T:deoxysneq128128v1 1.13 1.14 1.14 T:morus1280256v1 1.13 1.14 1.14 T:morus1280128v1 1.14 1.15 1.15 T:morus1280256v2 1.14 1.15 1.15 T:morus1280128v2 1.15 1.16 1.16 T:deoxysi256v141 1.17 1.17 1.19 T:deoxysneq256128v1 1.22 1.23 1.24 T:morus640128v1 1.24 1.26 1.27 T:morus640128v2 1.35 1.36 1.41 T:colm0v1 1.36 1.37 1.37 T:aes128otrsv3 1.40 1.40 1.42 T:deoxysii128v141 1.53 1.54 1.55 T:deoxyseq128128v1 1.59 1.60 1.60 T:deoxysii256v141 1.70 1.71 1.72 T:deoxyseq256128v1 1.84 1.84 1.84 T:aes256otrsv3 2.09 2.10 2.12 T:aes128n8t8clocv2 2.09 2.10 2.12 T:aes128n12t8clocv2 2.10 2.11 2.14 T:aes128n12t8silcv3 2.10 2.12 2.12 T:aes128n12t8clocv3 2.10 2.14 2.14 T:aes128n12t8silcv2 2.10 2.14 2.14 T:aes128n8t8silcv2 2.97 3.00 3.02 T:norx6441v2 3.01 3.03 3.04 T:norx6441v3 3.08 3.09 3.11 T:lakekeyakv2 3.30 3.30 3.32 T:seakeyakv2 3.40 3.42 3.48 T:lakekeyakv1 3.50 3.53 3.62 T:norx6441v1 3.80 3.81 3.83 T:norx6444v3 4.15 4.17 4.26 T:norx3241v2 4.16 4.19 4.23 T:norx3241v3 4.34 4.36 4.40 T:oceankeyakv2 4.45 4.45 4.45 T:aesjambuv1 4.45 4.46 4.48 T:norx6461v2 4.47 4.49 4.54 T:norx6461v3 4.63 4.64 4.67 T:norx6444v2 4.83 4.89 4.94 T:norx3241v1 5.13 5.16 5.20 T:norx6461v1 5.42 5.44 5.47 T:norx6444v1 5.52 5.53 5.56 T:riverkeyakv2 5.88 5.91 6.21 T:acorn128v2 6.03 6.22 6.26 T:acorn128v3 6.31 6.33 6.34 ascon128av12 6.25 6.35 6.45 T:norx3261v2 6.33 6.36 6.37 T:ketjemajorv2 6.32 6.37 6.40 T:norx3261v3 6.44 6.45 6.47 T:ascon128av11 6.44 6.46 6.47 T:ascon96v1 7.45 7.49 7.55 T:lunarkeyakv2 7.70 7.75 7.81 T:ketjeminorv2 7.73 7.76 7.77 T:norx3261v1 9.16 9.20 9.24 T:ascon128v11 9.24 9.24 9.25 T:ascon128v1 9.33 9.34 9.36 ascon128v12 11.47 11.53 11.71 T:aes128otrsv1 11.71 11.73 11.75 T:aes128otrsv2 11.72 11.74 11.76 T:aes128otrpv1 11.75 11.81 11.85 T:aes128otrpv2 14.51 14.52 14.52 T:twine80n6t4clocv3 14.72 14.90 15.07 T:aes256otrsv2 14.76 15.02 15.03 T:aes256otrsv1 15.33 15.36 15.38 T:aes256otrpv1 15.41 15.42 15.43 T:twine80n6t4clocv2 15.37 15.45 15.49 T:aes256otrpv2 15.86 15.86 15.89 T:aes128n12clocv1 15.87 15.88 15.90 T:aes128n8clocv1 20.87 21.26 21.32 T:proest256otrv1 26.86 26.89 26.91 T:aeadaes128ocbtaglen64v1 26.88 26.90 26.91 T:aeadaes128ocbtaglen96v1 27.01 27.22 27.30 T:ketjesrv1 27.65 27.69 28.10 T:ketjesrv2 32.00 32.03 32.10 T:aeadaes192ocbtaglen96v1 32.00 32.04 32.05 T:aeadaes192ocbtaglen64v1 37.28 37.29 37.34 T:aeadaes256ocbtaglen64v1 37.25 37.29 37.33 T:aeadaes256ocbtaglen96v1 44.45 44.55 44.56 T:colm127v1 44.72 45.03 45.36 T:proest128otrv1 45.28 45.43 45.53 T:ketjejrv1 70.83 70.85 70.88 T:present80n6t4silcv3 69.16 71.10 71.28 T:ketjejrv2 74.73 75.42 75.62 T:deoxysneq128128v13 83.14 88.21 89.98 T:aezv1 95.94 97.05 97.42 T:deoxyseq128128v13 117.85 117.97 118.10 T:deoxysneq256128v13 126.77 127.07 127.30 T:led80n6t4silcv3 156.50 156.95 157.78 T:deoxyseq256128v13 454.72 457.02 466.25 T:acorn128 2687.63 2692.66 2696.71 T:led80n6silcv1 2683.09 2692.91 2696.05 T:led80n6t4silcv2 2869.98 2871.15 2872.77 T:present80n6t4silcv2 2866.32 2871.53 2875.75 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.21 0.21 0.22 T:aezv4 0.22 0.22 0.22 T:aezv3 0.23 0.24 0.24 T:aezv5 0.26 0.26 0.26 aegis128l 0.28 0.28 0.29 T:tiaoxinv2 0.28 0.28 0.29 T:tiaoxinv1 0.38 0.39 0.39 T:aegis128 0.44 0.44 0.45 aegis256 0.51 0.52 0.52 T:aeadaes128ocbtaglen128v1 0.62 0.63 0.63 T:aes128otrpv3 0.62 0.63 0.63 T:aeadaes192ocbtaglen128v1 0.67 0.68 0.68 T:aes128otrcv3 0.71 0.71 0.72 T:aeadaes256ocbtaglen128v1 0.79 0.79 0.80 T:aes128gcmv1 0.80 0.81 0.81 T:aes256otrpv3 0.86 0.87 0.88 T:aes256otrcv3 0.90 0.90 0.90 aes256gcmv1 1.01 1.02 1.04 T:deoxysi128v141 1.05 1.06 1.07 T:deoxysneq128128v1 1.13 1.13 1.13 T:morus1280128v1 1.13 1.13 1.13 T:morus1280256v1 1.14 1.14 1.15 T:morus1280256v2 1.14 1.15 1.15 T:morus1280128v2 1.14 1.15 1.16 T:deoxysi256v141 1.16 1.17 1.17 T:deoxysneq256128v1 1.22 1.23 1.23 T:morus640128v1 1.22 1.24 1.27 T:morus640128v2 1.36 1.37 1.37 T:aes128otrsv3 1.36 1.39 1.40 T:colm0v1 1.39 1.40 1.40 T:deoxysii128v141 1.53 1.54 1.55 T:deoxyseq128128v1 1.59 1.59 1.60 T:deoxysii256v141 1.70 1.71 1.73 T:deoxyseq256128v1 1.84 1.84 1.84 T:aes256otrsv3 2.09 2.10 2.10 T:aes128n8t8silcv2 2.08 2.10 2.13 T:aes128n12t8clocv3 2.09 2.12 2.13 T:aes128n8t8clocv2 2.09 2.12 2.12 T:aes128n12t8clocv2 2.09 2.14 2.14 T:aes128n12t8silcv2 2.09 2.14 2.14 T:aes128n12t8silcv3 2.98 3.00 3.03 T:norx6441v2 3.00 3.02 3.03 T:norx6441v3 3.08 3.09 3.10 T:lakekeyakv2 3.32 3.32 3.33 T:seakeyakv2 3.42 3.44 3.48 T:lakekeyakv1 3.45 3.53 3.54 T:norx6441v1 3.80 3.81 3.83 T:norx6444v3 4.12 4.16 4.20 T:norx3241v2 4.12 4.19 4.21 T:norx3241v3 4.36 4.37 4.38 T:oceankeyakv2 4.44 4.44 4.45 T:aesjambuv1 4.45 4.47 4.50 T:norx6461v2 4.46 4.47 4.49 T:norx6461v3 4.65 4.65 4.66 T:norx6444v2 4.85 4.90 4.93 T:norx3241v1 5.10 5.14 5.18 T:norx6461v1 5.44 5.45 5.46 T:norx6444v1 5.54 5.55 5.56 T:riverkeyakv2 5.88 5.90 6.22 T:acorn128v2 6.03 6.21 6.26 T:acorn128v3 6.25 6.26 6.31 T:norx3261v2 6.31 6.32 6.33 ascon128av12 6.34 6.37 6.38 T:ketjemajorv2 6.35 6.38 6.39 T:norx3261v3 6.45 6.45 6.47 T:ascon128av11 6.44 6.45 6.47 T:ascon96v1 7.45 7.49 7.53 T:lunarkeyakv2 7.72 7.73 7.75 T:norx3261v1 7.74 7.75 7.84 T:ketjeminorv2 9.20 9.21 9.22 T:ascon128v11 9.23 9.25 9.26 T:ascon128v1 9.34 9.35 9.37 ascon128v12 11.49 11.56 11.74 T:aes128otrsv1 11.73 11.75 11.76 T:aes128otrsv2 11.74 11.76 11.79 T:aes128otrpv1 11.84 11.85 11.88 T:aes128otrpv2 14.50 14.52 14.53 T:twine80n6t4clocv3 14.65 14.96 15.05 T:aes256otrsv2 14.76 15.01 15.03 T:aes256otrsv1 15.35 15.38 15.41 T:aes256otrpv1 15.41 15.42 15.43 T:twine80n6t4clocv2 15.39 15.44 15.47 T:aes256otrpv2 15.85 15.85 15.87 T:aes128n12clocv1 15.87 15.88 15.90 T:aes128n8clocv1 20.87 21.26 21.31 T:proest256otrv1 26.85 26.88 26.89 T:aeadaes128ocbtaglen64v1 26.86 26.88 26.90 T:aeadaes128ocbtaglen96v1 27.16 27.36 27.42 T:ketjesrv1 27.67 27.69 28.07 T:ketjesrv2 31.99 32.02 32.04 T:aeadaes192ocbtaglen96v1 32.00 32.02 32.04 T:aeadaes192ocbtaglen64v1 37.26 37.28 37.30 T:aeadaes256ocbtaglen64v1 37.26 37.29 37.31 T:aeadaes256ocbtaglen96v1 44.46 44.49 44.54 T:colm127v1 44.76 45.20 45.37 T:proest128otrv1 45.32 45.42 45.59 T:ketjejrv1 70.83 70.86 70.90 T:present80n6t4silcv3 69.23 71.14 71.25 T:ketjejrv2 74.69 75.11 75.66 T:deoxysneq128128v13 82.99 88.22 89.97 T:aezv1 96.08 97.09 97.34 T:deoxyseq128128v13 117.85 117.94 118.09 T:deoxysneq256128v13 126.93 127.10 127.32 T:led80n6t4silcv3 156.30 156.96 157.87 T:deoxyseq256128v13 455.01 457.13 463.96 T:acorn128 2686.11 2688.12 2690.76 T:led80n6t4silcv2 2688.14 2693.10 2706.89 T:led80n6silcv1 2870.60 2871.02 2871.75 T:present80n6t4silcv2 2865.70 2871.58 2876.58 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.95? 1.00? 1.16? T:aegis128 1.07? 1.11? 1.30? aegis128l 1.27? 1.28? 1.48? T:tiaoxinv2 1.29? 1.32? 1.66? T:tiaoxinv1 1.28? 1.35? 1.58? aegis256 1.38? 1.40? 1.64? T:aezv5 1.40 1.46 1.53 T:aezv4 1.51 1.52 1.54 T:aezv3 1.64? 1.70? 1.96? T:aeadaes128ocbtaglen128v1 1.95 1.97 2.02 T:aes128otrpv3 2.06 2.10 2.15 T:aeadaes256ocbtaglen128v1 2.30 2.30 2.38 T:aes128otrsv3 2.46 2.49 2.53 T:aes256otrpv3 2.49? 2.55? 2.77? T:aes128n12t8clocv3 2.57 2.68 2.77 T:aes128n8t8clocv2 2.55 2.77 2.77 T:aes128n12t8clocv2 2.75 2.79 2.80 T:aes128otrcv3 2.78 2.80 2.87 T:aes128n12t8silcv3 2.77 2.82 3.03 T:colm0v1 2.81 2.82 2.84 T:aes128n8t8silcv2 2.81 2.85 2.91 T:aes128n12t8silcv2 3.04 3.06 3.07 T:aes256otrsv3 3.06? 3.08? 29.55? T:aeadaes192ocbtaglen128v1 3.27 3.39 3.44 T:deoxysneq128128v1 3.37 3.43 3.53 T:deoxysi128v141 3.55 3.58 3.59 T:aes256otrcv3 3.84 3.95 4.03 T:deoxysneq256128v1 4.08 4.18 4.30 T:morus640128v1 4.16 4.28 4.49 T:deoxysi256v141 4.32 4.43 4.49 T:aes128gcmv1 4.38 4.45 4.51 T:morus640128v2 4.62 4.66 4.70 T:deoxyseq128128v1 4.75 4.80 4.95 aes256gcmv1 4.85 4.90 5.02 T:deoxysii128v141 5.55 5.58 5.60 T:aesjambuv1 5.55 5.62 5.73 T:deoxyseq256128v1 5.64 5.70 5.82 T:deoxysii256v141 5.85 5.95 6.04 T:morus1280256v1 5.85 5.96 6.05 T:morus1280128v1 6.25 6.35 6.61 T:morus1280256v2 6.30 6.36 6.52 T:morus1280128v2 9.59 9.70 9.80 T:ascon128av11 9.71 9.75 10.09 T:ascon96v1 9.66 9.90 10.42 T:norx6441v2 9.97 10.05 10.25 ascon128av12 10.10 10.23 10.34 T:norx3241v1 10.09 10.28 10.41 T:norx3241v3 10.05 10.32 10.43 T:norx3241v2 10.19 10.33 10.41 T:norx6441v3 10.77 11.02 11.11 T:norx6441v1 11.13 11.30 11.56 T:lakekeyakv1 12.06 12.15 12.33 T:ascon128v11 12.07 12.16 12.57 T:ascon128v1 12.28 12.41 12.64 ascon128v12 12.44 12.60 12.95 T:riverkeyakv2 13.09 13.17 13.67 T:lakekeyakv2 14.55 14.64 14.98 T:norx6461v1 14.87 15.02 15.27 T:norx6461v3 14.91 15.13 15.34 T:norx6461v2 15.05 15.30 15.50 T:norx3261v2 16.08 16.16 16.20 T:norx3261v1 16.13 16.31 16.33 T:norx3261v3 18.01 18.06 18.34 T:aes128otrsv1 18.60 18.65 18.72 T:twine80n6t4clocv3 18.69 18.76 18.94 T:aes128otrpv1 18.61 18.80 19.08 T:aes128otrsv2 18.95 19.17 19.36 T:aes128otrpv2 19.22 19.31 20.04 T:aes128n8clocv1 19.30 19.45 19.76 T:aes128n12clocv1 19.51 19.55 19.59 T:twine80n6t4clocv2 23.38 23.53 23.75 T:aes256otrsv2 23.57 23.91 24.18 T:norx6444v3 23.89 24.02 24.21 T:aes256otrsv1 24.47 24.59 24.75 T:aes256otrpv1 24.62 24.81 24.98 T:aes256otrpv2 25.38 25.53 25.55 T:ketjeminorv2 26.16 26.48 26.72 T:acorn128v2 27.02 27.10 27.36 T:acorn128v3 29.93 30.02 30.51 T:seakeyakv2 33.18 33.29 33.55 T:norx6444v2 35.33 35.59 35.87 T:aeadaes128ocbtaglen96v1 35.38 35.68 35.99 T:aeadaes128ocbtaglen64v1 38.88 38.95 39.08 T:norx6444v1 39.20 39.38 39.55 T:ketjemajorv2 41.66 41.89 42.50 T:aeadaes192ocbtaglen64v1 41.86 42.05 42.17 T:aeadaes192ocbtaglen96v1 42.24 42.41 42.66 T:ketjesrv1 46.81 47.13 47.50 T:oceankeyakv2 47.75 48.09 48.46 T:ketjesrv2 48.40 48.54 48.67 T:aeadaes256ocbtaglen96v1 48.41 48.63 48.91 T:aeadaes256ocbtaglen64v1 53.11 53.24 53.61 T:colm127v1 58.77 58.98 59.25 T:ketjejrv1 61.26 61.74 62.16 T:proest256otrv1 72.16 73.20 74.63 T:deoxysneq128128v13 87.16 87.31 87.65 T:present80n6t4silcv3 86.88 87.51 87.73 T:proest128otrv1 93.13 95.28 95.73 T:ketjejrv2 97.78 103.18 104.12 T:aezv1 117.62 117.95 118.62 T:deoxysneq256128v13 119.16 119.51 120.23 T:lunarkeyakv2 121.04 121.29 121.84 T:deoxyseq128128v13 149.98 150.22 150.42 T:led80n6t4silcv3 195.17 195.84 196.62 T:deoxyseq256128v13 1588.01 1608.07 1649.12 T:acorn128 3002.88 3005.53 3008.96 T:led80n6silcv1 3003.81 3006.06 3014.41 T:led80n6t4silcv2 3206.89 3208.69 3211.85 T:present80n6silcv1 3207.30 3211.12 3393.33 T:present80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.01? 1.04? 1.15? T:aegis128 1.09? 1.16? 1.48? aegis128l 1.34 1.37 1.45 T:tiaoxinv2 1.37 1.40 1.46 T:tiaoxinv1 1.38? 1.41? 1.54? aegis256 1.39? 1.43? 1.60? T:aezv5 1.43? 1.45? 1.74? T:aezv4 1.52 1.52 1.53 T:aezv3 1.85 1.88 1.98 T:aeadaes128ocbtaglen128v1 1.93 1.96 2.05 T:aes128otrpv3 2.25 2.31 2.34 T:aeadaes256ocbtaglen128v1 2.34 2.38 2.43 T:aes128otrsv3 2.45 2.46 2.48 T:aes256otrpv3 2.66? 2.70? 3.50? T:aes128n12t8clocv3 2.69 2.81 2.85 T:aes128n8t8clocv2 2.81? 2.84? 3.46? T:aes128n12t8clocv2 2.94 2.95 2.95 T:aes128otrcv3 3.04 3.05 3.06 T:aes128n8t8silcv2 3.04? 3.09? 3.84? T:aes128n12t8silcv2 3.10 3.13 3.20 T:colm0v1 3.30 3.31 3.32 T:aes256otrsv3 3.41? 3.45? 4.77? T:aeadaes192ocbtaglen128v1 3.73 3.78 3.80 T:aes256otrcv3 3.06? 3.81? 3.84? T:aes128n12t8silcv3 4.20 4.28 4.48 T:morus640128v1 4.30 4.41 4.55 T:aes128gcmv1 4.77 4.85 4.95 T:morus640128v2 4.79 4.86 4.93 aes256gcmv1 4.90 4.97 5.05 T:deoxysi128v141 4.91 5.02 5.23 T:deoxysneq128128v1 4.99 5.12 5.19 T:deoxysneq256128v1 5.38 5.43 5.50 T:deoxysii128v141 5.74 5.76 5.77 T:aesjambuv1 5.80 5.84 6.02 T:deoxysi256v141 6.02 6.06 6.14 T:morus1280256v1 6.06 6.17 6.23 T:morus1280128v1 6.24 6.38 6.56 T:morus1280256v2 6.31 6.38 6.50 T:morus1280128v2 6.56 6.60 6.62 T:deoxyseq128128v1 6.68 6.70 6.77 T:deoxysii256v141 6.66 6.72 6.77 T:deoxyseq256128v1 9.66 9.69 9.78 T:ascon128av11 9.68 9.77 10.12 T:ascon96v1 9.88 10.05 10.43 ascon128av12 10.23 10.30 10.59 T:norx6441v3 10.09 10.41 10.76 T:norx6441v2 10.28 10.42 10.56 T:norx6441v1 10.26 10.45 10.66 T:norx3241v3 10.33 10.46 10.74 T:norx3241v1 10.38 10.55 10.80 T:norx3241v2 10.98 11.05 11.34 T:lakekeyakv1 12.03 12.10 12.36 T:ascon128v11 12.12 12.20 12.69 T:ascon128v1 12.28 12.34 12.45 ascon128v12 12.52 12.80 13.00 T:riverkeyakv2 13.12 13.18 13.55 T:lakekeyakv2 14.70 14.84 15.30 T:norx6461v1 15.02 15.14 15.30 T:norx6461v2 15.25 15.33 15.41 T:norx6461v3 15.50 15.69 15.95 T:norx3261v2 15.95 16.05 16.08 T:norx3261v3 16.23 16.28 16.39 T:norx3261v1 17.97 18.08 18.52 T:aes128otrsv1 18.70 18.73 18.84 T:twine80n6t4clocv3 18.76 18.87 19.12 T:aes128otrsv2 19.07 19.16 19.31 T:aes128otrpv1 19.21 19.32 19.54 T:aes128otrpv2 19.52 19.58 19.67 T:twine80n6t4clocv2 19.75 19.91 19.98 T:aes128n12clocv1 19.82 19.97 20.11 T:aes128n8clocv1 23.30 23.49 23.60 T:aes256otrsv2 23.56 23.73 23.92 T:norx6444v3 24.04 24.53 25.02 T:aes256otrsv1 24.88 25.10 25.31 T:aes256otrpv1 25.00 25.12 25.39 T:aes256otrpv2 25.60 26.02 26.79 T:ketjeminorv2 26.49 26.88 27.02 T:acorn128v2 26.85 27.22 27.59 T:acorn128v3 29.98 30.13 30.42 T:seakeyakv2 33.21 33.27 33.57 T:norx6444v2 38.98 39.36 39.77 T:norx6444v1 39.30 39.58 39.98 T:ketjemajorv2 43.05 43.28 43.44 T:aeadaes128ocbtaglen96v1 43.02 43.31 43.84 T:ketjesrv1 43.13 43.38 43.73 T:aeadaes128ocbtaglen64v1 46.77 47.17 47.48 T:oceankeyakv2 48.01 48.66 48.89 T:ketjesrv2 50.34 50.45 50.57 T:aeadaes192ocbtaglen64v1 50.56 50.74 51.03 T:aeadaes192ocbtaglen96v1 58.76 59.06 59.65 T:ketjejrv1 59.08 59.22 59.59 T:aeadaes256ocbtaglen64v1 59.22 59.33 59.42 T:aeadaes256ocbtaglen96v1 61.41 61.45 61.77 T:colm127v1 62.04 62.59 63.15 T:proest256otrv1 84.27 85.23 86.59 T:deoxysneq128128v13 87.22 87.86 88.06 T:present80n6t4silcv3 87.53 89.15 90.23 T:proest128otrv1 94.12 95.63 96.36 T:ketjejrv2 104.29 110.23 111.57 T:aezv1 119.50 119.90 120.33 T:lunarkeyakv2 120.68 121.16 121.55 T:deoxyseq128128v13 130.87 131.41 131.79 T:deoxysneq256128v13 149.91 150.13 150.43 T:led80n6t4silcv3 195.27 195.84 196.29 T:deoxyseq256128v13 1609.70 1622.00 1644.88 T:acorn128 2998.03 3005.78 3011.77 T:led80n6silcv1 3001.77 3007.27 3018.55 T:led80n6t4silcv2 3207.23 3207.53 3210.19 T:present80n6silcv1 3205.34 3211.48 3392.39 T:present80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.01 1.05 1.07 T:aegis128 1.11 1.12 1.17 T:aezv5 1.12 1.12 1.22 T:aezv4 1.12 1.16 1.18 aegis128l 1.17 1.18 1.19 T:aezv3 1.33 1.38 1.44 T:tiaoxinv2 1.34 1.38 1.48 T:tiaoxinv1 1.38? 1.46? 2.21? aegis256 1.79 1.85 1.90 T:aeadaes128ocbtaglen128v1 1.89 1.94 1.98 T:aes128otrpv3 2.30 2.30 2.38 T:aeadaes256ocbtaglen128v1 2.37 2.42 2.44 T:aes128otrsv3 2.42 2.45 2.45 T:aes256otrpv3 2.49? 2.76? 3.51? T:aes128n12t8clocv3 2.52? 2.80? 3.47? T:aes128n8t8clocv2 2.82 2.84 2.88 T:aes128n8t8silcv2 2.95 2.96 2.96 T:aes128otrcv3 3.29 3.30 3.31 T:aes256otrsv3 3.41? 3.44? 28.55? T:aeadaes192ocbtaglen128v1 2.76? 3.45? 3.50? T:aes128n12t8clocv2 3.78 3.80 3.80 T:aes256otrcv3 2.86? 3.83? 3.84? T:aes128n12t8silcv2 2.89? 3.83? 3.84? T:aes128n12t8silcv3 3.15? 4.14? 4.23? T:colm0v1 4.20 4.27 4.37 T:morus640128v1 4.30 4.34 4.39 T:aes128gcmv1 4.72 4.79 5.24 T:deoxysneq128128v1 4.72 4.80 4.84 aes256gcmv1 4.72 4.83 4.95 T:morus640128v2 4.84 4.88 4.92 T:deoxysneq256128v1 4.89 4.93 5.01 T:deoxysi128v141 5.27 5.33 5.39 T:deoxysii128v141 5.73 5.75 5.77 T:aesjambuv1 5.70 5.81 6.16 T:deoxysi256v141 5.94 5.98 6.01 T:morus1280256v1 5.93 6.03 6.12 T:morus1280128v1 6.13 6.16 6.27 T:morus1280256v2 6.17 6.20 6.27 T:morus1280128v2 6.58 6.60 7.09 T:deoxyseq128128v1 6.56 6.66 6.73 T:deoxysii256v141 6.67 6.77 7.23 T:deoxyseq256128v1 9.62 9.67 9.95 T:ascon96v1 9.63 9.69 9.80 T:ascon128av11 9.62 9.79 9.83 ascon128av12 10.06 10.27 10.45 T:norx6441v2 10.21 10.35 10.48 T:norx3241v3 10.26 10.35 10.45 T:norx6441v3 10.24 10.41 10.59 T:norx3241v2 10.42 10.44 10.56 T:norx6441v1 10.47 10.59 10.70 T:norx3241v1 10.93 11.04 11.36 T:lakekeyakv1 12.02 12.11 12.60 T:ascon128v11 12.14 12.18 12.27 T:ascon128v1 12.25 12.37 12.41 ascon128v12 12.58 12.62 12.73 T:riverkeyakv2 13.20 13.23 13.30 T:lakekeyakv2 14.41 14.62 14.78 T:norx6461v1 15.02 15.17 15.22 T:norx6461v2 15.03 15.23 15.31 T:norx6461v3 15.57 15.75 15.98 T:norx3261v2 15.97 16.06 16.09 T:norx3261v3 16.21 16.29 16.35 T:norx3261v1 18.06 18.14 18.77 T:aes128otrsv1 18.61 18.70 18.98 T:twine80n6t4clocv3 18.90 19.06 19.38 T:aes128otrsv2 19.09 19.15 19.52 T:aes128otrpv1 19.22 19.28 19.70 T:aes128otrpv2 19.48 19.59 19.81 T:twine80n6t4clocv2 19.70 19.83 20.16 T:aes128n8clocv1 19.74 19.93 20.14 T:aes128n12clocv1 23.31 23.43 23.62 T:aes256otrsv2 23.62 23.68 23.83 T:norx6444v3 23.95 24.23 24.65 T:aes256otrsv1 24.89 25.02 25.21 T:aes256otrpv1 25.03 25.23 25.42 T:aes256otrpv2 25.55 26.17 26.27 T:ketjeminorv2 26.27 26.55 26.83 T:acorn128v2 26.55 27.16 27.23 T:acorn128v3 30.03 30.17 30.23 T:seakeyakv2 33.23 33.38 33.86 T:norx6444v2 39.12 39.30 39.53 T:norx6444v1 39.27 39.55 39.99 T:ketjemajorv2 42.94 43.00 43.14 T:aeadaes128ocbtaglen96v1 42.98 43.08 43.11 T:aeadaes128ocbtaglen64v1 42.84 43.12 43.38 T:ketjesrv1 46.73 47.02 47.16 T:oceankeyakv2 48.30 48.61 48.98 T:ketjesrv2 50.30 50.44 50.48 T:aeadaes192ocbtaglen64v1 50.33 50.48 50.91 T:aeadaes192ocbtaglen96v1 58.99 59.09 59.20 T:aeadaes256ocbtaglen64v1 59.13 59.19 59.25 T:aeadaes256ocbtaglen96v1 59.12 59.52 59.62 T:ketjejrv1 60.41 60.48 61.30 T:proest256otrv1 61.14 61.40 61.59 T:colm127v1 83.81 84.46 86.61 T:deoxysneq128128v13 86.84 87.49 87.66 T:proest128otrv1 87.18 87.72 88.05 T:present80n6t4silcv3 94.27 95.70 96.10 T:ketjejrv2 104.17 110.02 110.73 T:aezv1 119.34 119.70 120.46 T:lunarkeyakv2 120.84 121.14 121.77 T:deoxyseq128128v13 130.97 131.16 131.62 T:deoxysneq256128v13 149.87 150.20 150.68 T:led80n6t4silcv3 194.95 195.74 196.28 T:deoxyseq256128v13 1612.78 1621.92 1634.74 T:acorn128 2995.62 3002.75 3013.66 T:led80n6t4silcv2 3002.17 3006.97 3009.89 T:led80n6silcv1 3206.98 3208.20 3209.96 T:present80n6silcv1 3206.90 3208.95 3392.95 T:present80n6t4silcv2