VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, E cores; 8 x 700MHz; meteor,little, supercop-20260330

[Page version: 20260415 05:37:31]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.22 0.22 0.23 T:tiaoxinv1 0.22 0.22 0.23 T:tiaoxinv2 0.24 0.25 0.26 aegis128l 0.37 0.38 0.39 T:aegis128 0.41 0.42 0.43 aegis256 0.42 0.43 0.44 T:aezv3 0.42 0.43 0.44 T:aezv4 0.46 0.46 0.47 T:aezv5 0.46 0.47 0.47 T:aeadaes128ocbtaglen128v1 0.51 0.52 0.52 T:aes128otrcv3 0.52 0.53 0.54 T:aes128otrsv3 0.53 0.53 0.54 T:aes128otrpv3 0.05? 0.56? 1.42? T:aeadaes192ocbtaglen128v1 0.57 0.59 0.61 T:aeadaes256ocbtaglen128v1 0.66 0.67 0.68 T:aes256otrcv3 0.66 0.67 0.68 T:aes256otrsv3 0.66 0.68 0.69 T:aes256otrpv3 0.80 0.81 0.82 T:deoxysi128v141 0.85 0.86 0.87 T:deoxysneq128128v1 0.91 0.92 0.92 T:aes128gcmv1 0.91 0.92 0.93 T:deoxysi256v141 0.95 0.96 0.97 T:deoxysneq256128v1 0.96 0.97 0.98 T:morus1280256v1 0.96 0.97 0.98 T:morus1280128v2 0.96 0.97 0.98 T:morus1280256v2 0.97 0.98 0.99 T:morus1280128v1 1.05 1.06 1.07 aes256gcmv1 1.10 1.13 1.16 T:morus640128v2 1.13 1.15 1.16 T:morus640128v1 1.61 1.62 1.64 T:deoxysii128v141 1.74 1.75 1.76 T:colm0v1 1.79 1.80 1.82 T:deoxyseq128128v1 1.80 1.81 1.82 T:deoxysii256v141 1.97 2.01 2.06 T:lunarkeyakv2 2.04 2.06 2.07 T:deoxyseq256128v1 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.12 2.13 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.13 T:aes128n8t8clocv2 2.12 2.12 2.13 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n12t8clocv2 2.27 2.31 2.36 T:norx6444v3 2.58 2.62 2.68 T:norx6441v2 2.59 2.64 2.69 T:norx6441v3 2.68 2.70 2.75 T:seakeyakv2 2.72 2.76 2.78 T:oceankeyakv2 3.03 3.04 3.08 T:lakekeyakv1 3.08 3.12 3.16 T:norx6441v1 3.18 3.20 3.21 T:lakekeyakv2 3.37 3.39 3.42 T:norx6444v2 3.76 3.80 3.86 T:norx6444v1 3.75 3.81 3.86 T:norx3241v3 3.78 3.85 3.92 T:norx3241v2 3.84 3.89 3.92 T:norx6461v2 3.85 3.89 3.92 T:norx6461v3 4.23 4.24 4.25 T:aesjambuv1 4.53 4.59 4.66 T:norx3241v1 4.62 4.68 4.74 T:norx6461v1 4.85 5.04 5.07 T:acorn128v2 5.17? 5.23? 6.18? T:acorn128v3 5.76 5.83 5.90 T:norx3261v3 5.67 5.83 5.89 T:ketjemajorv2 5.84 5.95 6.02 T:norx3261v2 6.18 6.20 6.22 ascon128av12 6.33 6.35 6.37 T:ascon128av11 6.35 6.36 6.38 T:ascon96v1 7.00 7.08 7.11 T:ketjeminorv2 7.30 7.33 7.35 T:riverkeyakv2 7.37 7.39 7.42 T:norx3261v1 9.12 9.14 9.17 T:ascon128v11 9.10 9.20 9.23 T:ascon128v1 9.23 9.24 9.27 ascon128v12 11.76 11.78 11.81 T:aes128otrpv2 11.78 11.80 11.82 T:aes128otrpv1 12.04 12.10 12.16 T:aes128otrsv1 12.24 12.26 12.29 T:aes128otrsv2 14.50 14.52 14.54 T:twine80n6t4clocv3 15.23 15.28 15.30 T:aes256otrpv1 15.26 15.29 15.31 T:aes256otrpv2 15.38 15.41 15.43 T:aes256otrsv1 15.41 15.44 15.47 T:aes256otrsv2 15.50 15.58 15.61 T:twine80n6t4clocv2 18.95 19.15 19.57 T:proest256otrv1 20.40 20.43 20.46 T:aes128n8clocv1 20.42 20.45 20.48 T:aes128n12clocv1 22.40 22.44 22.46 T:aeadaes128ocbtaglen96v1 22.41 22.44 22.48 T:aeadaes128ocbtaglen64v1 26.56 26.59 26.62 T:aeadaes192ocbtaglen64v1 26.57 26.60 26.63 T:aeadaes192ocbtaglen96v1 26.70 27.17 27.28 T:ketjesrv1 26.94 27.19 27.31 T:ketjesrv2 30.77 30.81 30.84 T:aeadaes256ocbtaglen96v1 30.80 30.82 30.85 T:aeadaes256ocbtaglen64v1 43.62 43.81 44.21 T:proest128otrv1 48.15 48.33 49.78 T:ketjejrv1 48.29 48.39 48.48 T:colm127v1 63.14 63.34 64.02 T:deoxysneq128128v13 68.94 70.75 71.00 T:ketjejrv2 70.86 71.02 71.16 T:present80n6t4silcv3 103.54 104.42 105.42 T:deoxysneq256128v13 126.30 126.34 126.40 T:led80n6t4silcv3 127.62 127.81 128.02 T:deoxyseq128128v13 128.25 129.92 136.67 T:aezv1 207.21 208.43 210.19 T:deoxyseq256128v13 396.21 399.05 403.65 T:acorn128 3562.41 3567.35 3570.52 T:led80n6silcv1 3572.71 3576.68 3581.20 T:led80n6t4silcv2 3805.59 3810.12 3817.57 T:present80n6silcv1 3810.92 3814.27 3816.91 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.26 0.27 0.27 aegis128l 0.33 0.34 0.34 T:tiaoxinv1 0.33 0.34 0.34 T:tiaoxinv2 0.40 0.40 0.41 T:aegis128 0.40 0.41 0.42 aegis256 0.42 0.43 0.43 T:aezv4 0.43 0.43 0.44 T:aezv3 0.46 0.47 0.48 T:aezv5 0.48 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrpv3 0.56 0.57 0.58 T:aes128otrsv3 -0.25? 0.58? 1.00? T:aeadaes192ocbtaglen128v1 0.64 0.65 0.67 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.71 T:aes256otrpv3 0.71 0.71 0.72 T:aes256otrcv3 0.70 0.71 0.73 T:aes256otrsv3 0.88 0.89 0.90 T:deoxysi128v141 0.93 0.95 0.96 T:deoxysneq128128v1 0.95 0.95 0.96 T:aes128gcmv1 0.97 0.98 0.99 T:morus1280128v1 0.97 0.98 0.99 T:morus1280256v1 0.97 0.98 0.99 T:morus1280256v2 0.97 0.98 0.99 T:morus1280128v2 0.98 0.99 1.00 T:deoxysi256v141 1.06 1.07 1.08 T:deoxysneq256128v1 1.12 1.14 1.16 T:morus640128v1 1.11 1.14 1.16 T:morus640128v2 1.13 1.15 1.16 aes256gcmv1 1.60 1.62 1.64 T:deoxysii128v141 1.82 1.83 1.84 T:deoxysii256v141 1.83 1.85 1.86 T:colm0v1 1.84 1.85 1.87 T:deoxyseq128128v1 2.02 2.06 2.11 T:lunarkeyakv2 2.04 2.06 2.07 T:aes128n12t8silcv3 2.05 2.06 2.08 T:aes128n12t8silcv2 2.04 2.06 2.07 T:deoxyseq256128v1 2.06 2.06 2.06 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.06 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128n8t8clocv2 2.27 2.31 2.35 T:norx6444v3 2.46 2.49 2.54 T:norx6441v3 2.52 2.57 2.60 T:norx6441v2 2.76 2.78 2.84 T:seakeyakv2 2.78 2.82 2.85 T:oceankeyakv2 3.02 3.06 3.10 T:norx6441v1 3.07 3.10 3.13 T:lakekeyakv1 3.18 3.19 3.22 T:lakekeyakv2 3.36 3.39 3.44 T:norx6444v2 3.61 3.71 3.80 T:norx3241v3 3.70 3.74 3.80 T:norx3241v2 3.76 3.81 3.89 T:norx6444v1 3.82 3.86 3.90 T:norx6461v3 3.83 3.87 3.91 T:norx6461v2 4.35 4.40 4.44 T:norx3241v1 4.56 4.56 4.57 T:aesjambuv1 4.54 4.58 4.62 T:norx6461v1 4.94 4.98 5.26 T:acorn128v3 4.93 5.00 5.10 T:acorn128v2 5.43 5.56 5.62 T:ketjemajorv2 5.71 5.75 5.80 T:norx3261v3 5.75 5.82 5.89 T:norx3261v2 6.17 6.19 6.21 ascon128av12 6.29 6.31 6.33 T:ascon96v1 6.30 6.33 6.35 T:ascon128av11 7.22 7.25 7.28 T:norx3261v1 7.34 7.39 7.42 T:riverkeyakv2 7.24 7.40 7.57 T:ketjeminorv2 9.11 9.13 9.15 T:ascon128v11 9.07 9.14 9.17 T:ascon128v1 9.19 9.21 9.23 ascon128v12 11.90 11.95 11.99 T:aes128otrpv1 11.91 12.05 12.13 T:aes128otrpv2 12.11 12.17 12.22 T:aes128otrsv1 12.55 12.58 12.61 T:aes128otrsv2 14.50 14.52 14.54 T:twine80n6t4clocv3 15.42 15.45 15.48 T:aes256otrpv1 15.43 15.47 15.64 T:aes256otrpv2 15.56 15.59 15.61 T:twine80n6t4clocv2 15.65 15.69 15.73 T:aes256otrsv1 15.72 15.77 15.80 T:aes256otrsv2 18.93 19.13 19.48 T:proest256otrv1 21.15 21.20 21.23 T:aes128n8clocv1 21.16 21.20 21.23 T:aes128n12clocv1 27.54 27.69 27.96 T:ketjesrv2 27.44 27.78 28.23 T:ketjesrv1 30.42 30.48 30.53 T:aeadaes128ocbtaglen64v1 30.45 30.48 30.51 T:aeadaes128ocbtaglen96v1 36.37 36.41 36.45 T:aeadaes192ocbtaglen64v1 36.37 36.41 36.45 T:aeadaes192ocbtaglen96v1 42.34 42.37 42.41 T:aeadaes256ocbtaglen64v1 42.35 42.39 42.42 T:aeadaes256ocbtaglen96v1 42.67 42.87 43.14 T:proest128otrv1 48.21 49.00 50.16 T:ketjejrv1 64.39 64.48 64.65 T:colm127v1 70.91 71.00 71.10 T:present80n6t4silcv3 70.10 71.48 71.65 T:ketjejrv2 86.69 86.93 87.05 T:deoxysneq128128v13 125.96 126.12 126.86 T:led80n6t4silcv3 127.49 127.77 128.06 T:deoxyseq128128v13 128.28 129.19 136.73 T:aezv1 130.31 131.72 132.15 T:deoxysneq256128v13 205.52 207.97 209.52 T:deoxyseq256128v13 420.62 424.61 432.42 T:acorn128 3556.39 3563.87 3571.04 T:led80n6silcv1 3575.87 3584.14 3590.18 T:led80n6t4silcv2 3808.76 3812.55 3818.10 T:present80n6silcv1 3810.87 3815.61 3820.84 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.15 0.15 0.16 T:aezv4 0.16 0.16 0.16 T:aezv3 0.18? 0.18? 0.20? T:aezv5 0.26 0.26 0.27 aegis128l 0.33 0.34 0.35 T:tiaoxinv2 0.33 0.34 0.35 T:tiaoxinv1 0.40 0.41 0.41 T:aegis128 0.46 0.47 0.48 aegis256 0.48 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrpv3 0.56 0.57 0.58 T:aes128otrsv3 0.17? 0.59? 1.42? T:aeadaes192ocbtaglen128v1 0.63 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.69 0.71 0.72 T:aes256otrcv3 0.70 0.71 0.72 T:aes256otrsv3 0.71 0.71 0.71 T:aes256otrpv3 0.88 0.89 0.90 T:deoxysi128v141 0.94 0.95 0.96 T:deoxysneq128128v1 0.94 0.95 0.96 T:aes128gcmv1 0.96 0.97 0.98 T:morus1280256v2 0.97 0.97 0.98 T:morus1280256v1 0.97 0.98 0.99 T:morus1280128v2 0.97 0.98 0.99 T:morus1280128v1 0.97 0.99 1.01 T:deoxysi256v141 1.06 1.07 1.09 T:deoxysneq256128v1 1.11 1.13 1.16 T:morus640128v2 1.11 1.13 1.15 T:morus640128v1 1.14 1.15 1.16 aes256gcmv1 1.61 1.62 1.64 T:deoxysii128v141 1.81 1.82 1.83 T:deoxysii256v141 1.84 1.86 1.87 T:deoxyseq128128v1 1.83 1.86 1.87 T:colm0v1 2.04 2.05 2.07 T:deoxyseq256128v1 2.06 2.06 2.06 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv2 2.03 2.07 2.15 T:lunarkeyakv2 2.29 2.31 2.35 T:norx6444v3 2.47 2.51 2.56 T:norx6441v3 2.52 2.56 2.59 T:norx6441v2 2.78 2.81 2.87 T:seakeyakv2 2.82 2.85 2.89 T:oceankeyakv2 3.03 3.06 3.09 T:norx6441v1 3.09 3.12 3.14 T:lakekeyakv1 3.20 3.22 3.23 T:lakekeyakv2 3.42 3.44 3.47 T:norx6444v2 3.68 3.74 3.81 T:norx3241v3 3.68 3.75 3.81 T:norx3241v2 3.80 3.83 3.92 T:norx6444v1 3.82 3.85 3.90 T:norx6461v2 3.82 3.87 3.91 T:norx6461v3 4.35 4.43 4.48 T:norx3241v1 4.56 4.56 4.57 T:aesjambuv1 4.53 4.59 4.63 T:norx6461v1 4.95 4.96 5.26 T:acorn128v3 4.94 5.01 5.11 T:acorn128v2 5.47 5.59 5.64 T:ketjemajorv2 5.71 5.75 5.82 T:norx3261v3 5.77 5.83 5.88 T:norx3261v2 6.17 6.19 6.21 ascon128av12 6.29 6.31 6.33 T:ascon96v1 6.30 6.33 6.35 T:ascon128av11 7.23 7.25 7.28 T:norx3261v1 7.36 7.41 7.45 T:riverkeyakv2 7.31 7.46 7.64 T:ketjeminorv2 9.02 9.09 9.16 T:ascon128v1 9.09 9.12 9.14 T:ascon128v11 9.19 9.21 9.23 ascon128v12 11.94 11.97 11.99 T:aes128otrpv2 11.98 12.01 12.03 T:aes128otrpv1 12.17 12.21 12.25 T:aes128otrsv1 12.58 12.62 12.64 T:aes128otrsv2 14.50 14.53 14.55 T:twine80n6t4clocv3 15.43 15.46 15.51 T:aes256otrpv1 15.46 15.59 15.68 T:aes256otrpv2 15.56 15.59 15.61 T:twine80n6t4clocv2 15.68 15.73 15.76 T:aes256otrsv1 15.75 15.80 15.83 T:aes256otrsv2 18.94 19.13 19.49 T:proest256otrv1 21.15 21.18 21.21 T:aes128n12clocv1 21.16 21.19 21.22 T:aes128n8clocv1 27.57 27.72 27.98 T:ketjesrv2 27.34 27.88 28.33 T:ketjesrv1 30.45 30.48 30.51 T:aeadaes128ocbtaglen96v1 30.43 30.48 30.51 T:aeadaes128ocbtaglen64v1 36.37 36.40 36.44 T:aeadaes192ocbtaglen96v1 36.38 36.41 36.44 T:aeadaes192ocbtaglen64v1 42.35 42.38 42.42 T:aeadaes256ocbtaglen96v1 42.35 42.38 42.41 T:aeadaes256ocbtaglen64v1 42.71 42.95 43.14 T:proest128otrv1 47.86 48.37 49.44 T:ketjejrv1 63.39 63.50 63.65 T:colm127v1 70.89 70.99 71.04 T:present80n6t4silcv3 70.12 71.55 71.76 T:ketjejrv2 86.70 86.90 87.17 T:deoxysneq128128v13 126.00 126.08 126.93 T:led80n6t4silcv3 127.45 127.63 127.97 T:deoxyseq128128v13 128.26 129.28 136.49 T:aezv1 130.33 131.58 132.18 T:deoxysneq256128v13 205.96 208.26 209.61 T:deoxyseq256128v13 420.65 425.24 432.51 T:acorn128 3562.50 3566.01 3568.99 T:led80n6silcv1 3570.28 3576.62 3586.82 T:led80n6t4silcv2 3806.75 3810.25 3818.64 T:present80n6silcv1 3811.40 3814.43 3817.37 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.17 0.17 0.18 T:tiaoxinv2 0.17 0.18 0.18 T:tiaoxinv1 0.20 0.21 0.21 aegis128l 0.31 0.31 0.32 T:aezv4 0.31 0.32 0.33 T:aezv3 0.34 0.34 0.35 T:aezv5 0.36 0.36 0.37 aegis256 0.37 0.37 0.38 T:aegis128 0.44 0.44 0.45 T:aeadaes128ocbtaglen128v1 0.21? 0.52? 0.78? T:aeadaes192ocbtaglen128v1 0.53 0.53 0.54 T:aes128otrcv3 0.54 0.55 0.55 T:aes128otrpv3 0.62 0.62 0.63 T:aeadaes256ocbtaglen128v1 0.67 0.68 0.69 T:aes128gcmv1 0.68 0.69 0.71 T:aes256otrcv3 0.69 0.69 0.69 T:aes256otrpv3 0.74 0.74 0.75 aes256gcmv1 0.81 0.82 0.82 T:deoxysi128v141 0.86 0.86 0.87 T:deoxysneq128128v1 0.91 0.91 0.92 T:morus1280256v1 0.91 0.92 0.92 T:deoxysi256v141 0.91 0.92 0.93 T:morus1280128v1 0.92 0.93 0.94 T:morus1280128v2 0.92 0.93 0.93 T:morus1280256v2 0.96 0.97 0.98 T:deoxysneq256128v1 1.09 1.10 1.12 T:morus640128v2 1.08 1.10 1.12 T:morus640128v1 1.21 1.22 1.22 T:deoxysii128v141 1.23 1.23 1.24 T:colm0v1 1.29 1.30 1.30 T:aes128otrsv3 1.35 1.36 1.37 T:deoxyseq128128v1 1.36 1.37 1.37 T:deoxysii256v141 1.53 1.54 1.55 T:deoxyseq256128v1 1.74 1.74 1.75 T:aes256otrsv3 2.09 2.09 2.09 T:aes128n12t8clocv3 2.09 2.09 2.10 T:aes128n12t8silcv2 2.09 2.09 2.10 T:aes128n12t8silcv3 2.09 2.09 2.10 T:aes128n12t8clocv2 2.09 2.09 2.10 T:aes128n8t8clocv2 2.09 2.09 2.10 T:aes128n8t8silcv2 2.26 2.28 2.29 T:seakeyakv2 2.29 2.31 2.33 T:oceankeyakv2 2.56 2.60 2.64 T:norx6441v2 2.59 2.64 2.68 T:norx6441v3 2.79 2.80 2.81 T:lakekeyakv2 2.79 2.82 2.86 T:lunarkeyakv2 2.81 2.83 2.86 T:norx6444v3 2.89 2.90 2.92 T:lakekeyakv1 3.05 3.08 3.11 T:norx6441v1 3.26 3.27 3.29 T:norx6444v2 3.80 3.81 3.82 T:norx6444v1 3.85 3.87 3.90 T:norx6461v3 3.85 3.87 3.89 T:norx6461v2 3.87 3.91 3.97 T:norx3241v2 3.86 3.92 3.96 T:norx3241v3 4.22 4.22 4.22 T:aesjambuv1 4.55 4.59 4.62 T:norx6461v1 4.65 4.70 4.75 T:norx3241v1 4.93 4.95 5.03 T:ketjemajorv2 4.91 4.97 5.11 T:acorn128v3 4.94 4.99 5.07 T:acorn128v2 5.28 5.31 5.33 T:riverkeyakv2 5.88 5.92 5.98 T:norx3261v2 5.88 5.95 5.99 T:norx3261v3 6.17 6.18 6.20 ascon128av12 6.31 6.32 6.34 T:ascon96v1 6.31 6.33 6.34 T:ascon128av11 6.22 6.45 6.51 T:ketjeminorv2 7.36 7.39 7.42 T:norx3261v1 9.11 9.12 9.13 T:ascon128v11 9.12 9.15 9.23 T:ascon128v1 9.22 9.23 9.24 ascon128v12 11.02 11.03 11.05 T:aes128otrsv2 11.16 11.24 11.28 T:aes128otrsv1 11.30 11.32 11.34 T:aes128otrpv1 11.31 11.34 11.36 T:aes128otrpv2 14.13 14.18 14.48 T:aes256otrsv1 14.18 14.20 14.22 T:aes256otrsv2 14.31 14.32 14.33 T:twine80n6t4clocv3 14.84 14.86 14.88 T:aes256otrpv2 14.82 14.87 14.88 T:aes256otrpv1 15.20 15.23 15.26 T:twine80n6t4clocv2 15.27 15.29 15.32 T:aes128n12clocv1 15.28 15.30 15.31 T:aes128n8clocv1 18.53 19.19 19.37 T:proest256otrv1 22.13 22.15 22.17 T:aeadaes128ocbtaglen64v1 22.14 22.16 22.18 T:aeadaes128ocbtaglen96v1 25.75 26.01 26.19 T:ketjesrv1 26.29 26.30 26.32 T:aeadaes192ocbtaglen64v1 26.29 26.31 26.34 T:aeadaes192ocbtaglen96v1 26.48 26.55 26.91 T:ketjesrv2 30.51 30.53 30.55 T:aeadaes256ocbtaglen64v1 30.52 30.54 30.57 T:aeadaes256ocbtaglen96v1 35.79 35.88 35.93 T:colm127v1 43.71 43.90 44.01 T:proest128otrv1 44.72 45.05 45.14 T:ketjejrv1 63.19 63.44 63.65 T:deoxysneq128128v13 68.77 69.63 69.87 T:ketjejrv2 70.06 70.13 70.22 T:present80n6t4silcv3 89.27 89.76 92.01 T:aezv1 95.40 96.04 96.55 T:deoxyseq128128v13 102.96 103.48 103.97 T:deoxysneq256128v13 125.73 125.83 126.33 T:led80n6t4silcv3 156.23 157.13 157.69 T:deoxyseq256128v13 392.64 394.13 394.72 T:acorn128 2668.36 2679.71 2684.06 T:led80n6silcv1 2681.07 2685.51 2690.64 T:led80n6t4silcv2 2852.70 2859.28 2862.23 T:present80n6silcv1 2858.39 2861.14 2862.41 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.21 0.22 0.22 aegis128l 0.23 0.23 0.24 T:tiaoxinv1 0.23 0.23 0.24 T:tiaoxinv2 0.31 0.31 0.31 T:aezv4 0.31 0.32 0.32 T:aezv3 0.34 0.35 0.35 T:aezv5 0.35 0.36 0.36 T:aegis128 0.36 0.36 0.37 aegis256 0.45 0.45 0.46 T:aeadaes128ocbtaglen128v1 0.28? 0.54? 1.00? T:aeadaes192ocbtaglen128v1 0.55 0.56 0.57 T:aes128otrcv3 0.57 0.57 0.58 T:aes128otrpv3 0.65 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.70 T:aes128gcmv1 0.70 0.71 0.72 T:aes256otrpv3 0.71 0.72 0.73 T:aes256otrcv3 0.78 0.79 0.80 aes256gcmv1 0.85 0.85 0.86 T:deoxysi128v141 0.90 0.91 0.92 T:deoxysneq128128v1 0.91 0.92 0.92 T:morus1280256v2 0.91 0.92 0.92 T:morus1280128v1 0.91 0.92 0.93 T:morus1280256v1 0.91 0.92 0.93 T:morus1280128v2 0.95 0.96 0.96 T:deoxysi256v141 1.01 1.02 1.02 T:deoxysneq256128v1 1.07 1.09 1.11 T:morus640128v1 1.08 1.10 1.12 T:morus640128v2 1.21 1.22 1.22 T:deoxysii128v141 1.27 1.27 1.28 T:colm0v1 1.31 1.32 1.32 T:aes128otrsv3 1.35 1.37 1.38 T:deoxysii256v141 1.37 1.38 1.39 T:deoxyseq128128v1 1.53 1.55 1.56 T:deoxyseq256128v1 1.75 1.76 1.76 T:aes256otrsv3 2.06 2.06 2.06 T:aes128n8t8silcv2 2.06 2.06 2.06 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128n12t8silcv2 2.06 2.06 2.06 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128n12t8clocv2 2.06 2.06 2.06 T:aes128n8t8clocv2 2.31 2.33 2.35 T:seakeyakv2 2.32 2.34 2.37 T:oceankeyakv2 2.54 2.57 2.60 T:norx6441v3 2.53 2.58 2.62 T:norx6441v2 2.79 2.80 2.81 T:lakekeyakv2 2.81 2.83 2.86 T:norx6444v3 2.81 2.84 2.87 T:lunarkeyakv2 2.90 2.92 2.94 T:lakekeyakv1 3.05 3.08 3.11 T:norx6441v1 3.23 3.25 3.28 T:norx6444v2 3.80 3.82 3.85 T:norx6444v1 3.83 3.85 3.87 T:norx6461v2 3.83 3.87 3.89 T:norx6461v3 3.83 3.87 3.91 T:norx3241v2 3.85 3.90 3.95 T:norx3241v3 4.39 4.39 4.40 T:aesjambuv1 4.57 4.60 4.65 T:norx6461v1 4.58 4.62 4.66 T:norx3241v1 4.88 4.90 4.97 T:ketjemajorv2 5.06 5.13 5.22 T:acorn128v2 5.03 5.15 5.20 T:acorn128v3 5.31 5.35 5.39 T:riverkeyakv2 5.84 5.87 5.92 T:norx3261v2 5.90 5.93 5.98 T:norx3261v3 6.16 6.18 6.19 ascon128av12 6.29 6.31 6.33 T:ascon128av11 6.32 6.32 6.34 T:ascon96v1 6.29 6.47 6.60 T:ketjeminorv2 7.30 7.32 7.35 T:norx3261v1 9.04 9.06 9.10 T:ascon128v11 9.03 9.07 9.11 T:ascon128v1 9.18 9.19 9.20 ascon128v12 11.16 11.18 11.20 T:aes128otrsv2 11.16 11.21 11.24 T:aes128otrsv1 11.38 11.41 11.44 T:aes128otrpv1 11.40 11.46 11.51 T:aes128otrpv2 14.28 14.32 14.61 T:aes256otrsv1 14.31 14.32 14.32 T:twine80n6t4clocv3 14.33 14.36 14.37 T:aes256otrsv2 14.89 14.93 14.97 T:aes256otrpv1 14.92 14.96 15.04 T:aes256otrpv2 15.26 15.27 15.29 T:twine80n6t4clocv2 15.64 15.66 15.70 T:aes128n12clocv1 15.65 15.67 15.69 T:aes128n8clocv1 18.58 19.17 19.35 T:proest256otrv1 26.16 26.17 26.19 T:aeadaes128ocbtaglen64v1 26.15 26.18 26.20 T:aeadaes128ocbtaglen96v1 26.15 26.24 26.51 T:ketjesrv1 26.82 26.95 27.23 T:ketjesrv2 31.20 31.22 31.24 T:aeadaes192ocbtaglen96v1 31.20 31.22 31.24 T:aeadaes192ocbtaglen64v1 36.29 36.32 36.35 T:aeadaes256ocbtaglen64v1 36.30 36.33 36.35 T:aeadaes256ocbtaglen96v1 43.22 43.43 43.65 T:proest128otrv1 43.85 43.87 43.90 T:colm127v1 44.63 44.91 45.19 T:ketjejrv1 69.11 69.98 70.18 T:ketjejrv2 70.10 70.12 70.17 T:present80n6t4silcv3 75.08 75.15 75.38 T:deoxysneq128128v13 89.39 90.04 91.95 T:aezv1 95.34 96.04 96.53 T:deoxyseq128128v13 116.41 116.93 117.52 T:deoxysneq256128v13 125.81 126.15 126.69 T:led80n6t4silcv3 155.52 157.07 157.70 T:deoxyseq256128v13 411.98 413.20 414.20 T:acorn128 2677.66 2680.76 2683.37 T:led80n6silcv1 2683.52 2688.33 2691.22 T:led80n6t4silcv2 2852.61 2859.62 2863.19 T:present80n6silcv1 2858.69 2861.33 2862.57 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.17 0.17 0.18 T:aezv4 0.18 0.18 0.18 T:aezv3 0.19 0.20 0.20 T:aezv5 0.21 0.21 0.22 aegis128l 0.23 0.23 0.24 T:tiaoxinv2 0.23 0.23 0.24 T:tiaoxinv1 0.35 0.36 0.36 T:aegis128 0.39 0.40 0.40 aegis256 0.45 0.45 0.46 T:aeadaes128ocbtaglen128v1 0.10? 0.53? 0.77? T:aeadaes192ocbtaglen128v1 0.55 0.56 0.56 T:aes128otrcv3 0.57 0.57 0.58 T:aes128otrpv3 0.65 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.69 0.69 0.70 T:aes128gcmv1 0.70 0.71 0.71 T:aes256otrpv3 0.71 0.72 0.72 T:aes256otrcv3 0.78 0.79 0.80 aes256gcmv1 0.84 0.85 0.86 T:deoxysi128v141 0.90 0.91 0.92 T:deoxysneq128128v1 0.91 0.91 0.92 T:morus1280128v1 0.91 0.92 0.93 T:morus1280256v1 0.91 0.92 0.92 T:morus1280256v2 0.91 0.92 0.93 T:morus1280128v2 0.94 0.95 0.96 T:deoxysi256v141 1.01 1.02 1.03 T:deoxysneq256128v1 1.08 1.10 1.12 T:morus640128v2 1.09 1.10 1.11 T:morus640128v1 1.21 1.22 1.23 T:deoxysii128v141 1.27 1.28 1.28 T:colm0v1 1.31 1.32 1.32 T:aes128otrsv3 1.36 1.37 1.38 T:deoxysii256v141 1.37 1.38 1.39 T:deoxyseq128128v1 1.53 1.54 1.55 T:deoxyseq256128v1 1.76 1.76 1.76 T:aes256otrsv3 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.08 T:aes128n12t8silcv2 2.33 2.34 2.37 T:seakeyakv2 2.35 2.36 2.38 T:oceankeyakv2 2.54 2.57 2.60 T:norx6441v3 2.54 2.58 2.60 T:norx6441v2 2.81 2.81 2.82 T:lakekeyakv2 2.82 2.84 2.86 T:norx6444v3 2.82 2.85 2.87 T:lunarkeyakv2 2.93 2.96 2.98 T:lakekeyakv1 3.05 3.08 3.10 T:norx6441v1 3.26 3.27 3.28 T:norx6444v2 3.82 3.84 3.86 T:norx6444v1 3.84 3.86 3.89 T:norx6461v2 3.84 3.87 3.89 T:norx6461v3 3.82 3.87 3.93 T:norx3241v2 3.83 3.89 3.93 T:norx3241v3 4.39 4.39 4.40 T:aesjambuv1 4.57 4.60 4.62 T:norx6461v1 4.57 4.62 4.66 T:norx3241v1 4.89 4.91 4.98 T:ketjemajorv2 5.06 5.14 5.23 T:acorn128v2 5.04 5.15 5.19 T:acorn128v3 5.35 5.37 5.41 T:riverkeyakv2 5.81 5.87 5.93 T:norx3261v2 5.92 5.96 5.99 T:norx3261v3 6.16 6.18 6.20 ascon128av12 6.29 6.31 6.33 T:ascon128av11 6.31 6.33 6.34 T:ascon96v1 6.31 6.49 6.61 T:ketjeminorv2 7.31 7.34 7.36 T:norx3261v1 9.04 9.09 9.12 T:ascon128v1 9.06 9.10 9.12 T:ascon128v11 9.18 9.19 9.21 ascon128v12 11.17 11.19 11.21 T:aes128otrsv2 11.17 11.22 11.27 T:aes128otrsv1 11.39 11.40 11.42 T:aes128otrpv1 11.44 11.51 11.53 T:aes128otrpv2 14.31 14.32 14.33 T:twine80n6t4clocv3 14.29 14.33 14.61 T:aes256otrsv1 14.35 14.37 14.40 T:aes256otrsv2 14.93 14.95 14.99 T:aes256otrpv1 14.95 15.01 15.06 T:aes256otrpv2 15.27 15.28 15.29 T:twine80n6t4clocv2 15.64 15.67 15.69 T:aes128n12clocv1 15.65 15.67 15.69 T:aes128n8clocv1 18.59 19.17 19.34 T:proest256otrv1 26.15 26.17 26.19 T:aeadaes128ocbtaglen96v1 26.16 26.18 26.20 T:aeadaes128ocbtaglen64v1 26.15 26.30 26.64 T:ketjesrv1 26.84 26.98 27.23 T:ketjesrv2 31.19 31.21 31.24 T:aeadaes192ocbtaglen64v1 31.20 31.22 31.24 T:aeadaes192ocbtaglen96v1 36.30 36.33 36.36 T:aeadaes256ocbtaglen96v1 36.30 36.33 36.35 T:aeadaes256ocbtaglen64v1 43.34 43.39 43.44 T:colm127v1 43.21 43.53 43.64 T:proest128otrv1 44.74 45.06 45.19 T:ketjejrv1 69.14 70.05 70.20 T:ketjejrv2 70.08 70.13 70.18 T:present80n6t4silcv3 75.01 75.28 75.44 T:deoxysneq128128v13 89.32 89.94 91.93 T:aezv1 95.36 96.14 96.58 T:deoxyseq128128v13 116.43 116.91 117.44 T:deoxysneq256128v13 125.83 126.17 126.64 T:led80n6t4silcv3 155.49 157.08 157.59 T:deoxyseq256128v13 411.94 413.11 414.22 T:acorn128 2673.59 2677.40 2683.83 T:led80n6silcv1 2683.59 2687.60 2691.01 T:led80n6t4silcv2 2853.09 2859.34 2861.86 T:present80n6silcv1 2859.28 2861.36 2862.66 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.12 0.13 0.13 T:tiaoxinv1 0.12 0.13 0.13 T:tiaoxinv2 0.16 0.17 0.17 aegis128l 0.18? 0.19? 0.20? T:aezv4 0.20 0.21 0.21 T:aezv3 0.21 0.22 0.23 T:aezv5 0.31 0.32 0.33 aegis256 0.37 0.38 0.38 T:aegis128 0.42 0.43 0.44 aes256gcmv1 0.43 0.43 0.44 T:aes128gcmv1 0.43 0.44 0.45 T:aeadaes128ocbtaglen128v1 -0.02? 0.46? 0.89? T:aeadaes192ocbtaglen128v1 0.54 0.56 0.57 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrpv3 0.64 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.72 T:aes256otrcv3 0.71 0.71 0.72 T:colm0v1 0.73 0.74 0.75 T:aes256otrpv3 0.80 0.81 0.82 T:deoxysi128v141 0.81 0.82 0.82 T:deoxysii128v141 0.85 0.86 0.87 T:morus1280128v1 0.85 0.86 0.87 T:deoxysneq128128v1 0.85 0.86 0.87 T:morus1280256v1 0.87 0.88 0.89 T:morus1280128v2 0.87 0.88 0.89 T:morus1280256v2 0.90 0.90 0.91 T:deoxyseq128128v1 0.90 0.91 0.92 T:deoxysii256v141 0.91 0.92 0.93 T:deoxysi256v141 0.96 0.97 0.98 T:deoxysneq256128v1 1.01 1.02 1.03 T:deoxyseq256128v1 1.04 1.07 1.09 T:morus640128v1 1.04 1.07 1.09 T:morus640128v2 1.80 1.83 1.87 T:lunarkeyakv2 1.80 1.83 1.85 T:oceankeyakv2 2.06 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.06 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128n12t8clocv2 2.20 2.22 2.23 T:seakeyakv2 2.53 2.55 2.57 T:lakekeyakv2 2.53 2.58 2.62 T:norx6441v2 2.55 2.61 2.67 T:norx6441v3 2.70 2.72 2.73 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.02 3.07 3.10 T:norx6441v1 3.11 3.13 3.15 T:norx6444v2 3.32 3.35 3.41 T:norx6444v3 3.81 3.84 3.87 T:norx6444v1 3.82 3.86 3.90 T:norx6461v3 3.82 3.87 3.91 T:norx6461v2 3.94 3.99 4.07 T:norx3241v3 3.95 4.02 4.09 T:norx3241v2 4.20 4.20 4.21 T:aesjambuv1 4.19 4.22 4.27 T:ketjemajorv2 4.53 4.58 4.63 T:norx6461v1 4.74 4.82 4.88 T:norx3241v1 4.90 4.99 5.23 T:acorn128v3 5.03 5.06 5.08 T:riverkeyakv2 5.25 5.26 5.31 T:acorn128v2 5.79 5.91 6.04 T:norx3261v2 5.97 6.03 6.14 T:norx3261v3 6.14 6.16 6.18 ascon128av12 6.14 6.28 6.60 T:ketjeminorv2 6.28 6.30 6.34 T:ascon96v1 6.31 6.32 6.34 T:ascon128av11 7.36 7.39 7.42 T:norx3261v1 9.05 9.06 9.09 T:ascon128v1 9.06 9.09 9.10 T:ascon128v11 9.17 9.21 9.24 ascon128v12 9.77 9.79 9.81 T:aes128otrsv2 10.10 10.12 10.14 T:aes128n12clocv1 10.11 10.14 10.15 T:aes128n8clocv1 10.00 10.18 10.30 T:aes128otrsv1 10.86 10.88 10.89 T:aes128otrpv2 10.86 10.88 10.90 T:aes128otrpv1 12.89 12.91 12.94 T:aes256otrsv1 12.94 12.96 12.99 T:aes256otrsv2 14.11 14.13 14.15 T:twine80n6t4clocv3 14.41 14.43 14.46 T:aes256otrpv1 14.42 14.44 14.46 T:aes256otrpv2 14.95 14.96 14.98 T:twine80n6t4clocv2 19.40 19.47 19.59 T:proest256otrv1 21.82 21.85 21.89 T:aeadaes128ocbtaglen96v1 21.85 21.88 21.92 T:aeadaes128ocbtaglen64v1 23.13 23.20 23.25 T:colm127v1 24.85 24.96 25.06 T:ketjesrv1 25.88 25.99 26.48 T:ketjesrv2 26.00 26.02 26.05 T:aeadaes192ocbtaglen96v1 26.01 26.04 26.07 T:aeadaes192ocbtaglen64v1 30.19 30.23 30.25 T:aeadaes256ocbtaglen96v1 30.21 30.24 30.28 T:aeadaes256ocbtaglen64v1 40.17 40.82 41.35 T:ketjejrv1 41.22 43.76 43.95 T:aezv1 44.01 44.11 44.35 T:proest128otrv1 62.44 62.86 63.03 T:deoxysneq128128v13 63.09 63.14 63.46 T:deoxyseq128128v13 66.51 68.34 68.55 T:ketjejrv2 69.25 69.29 69.33 T:present80n6t4silcv3 102.75 103.51 104.35 T:deoxyseq256128v13 103.37 103.78 104.51 T:deoxysneq256128v13 125.11 125.22 125.78 T:led80n6t4silcv3 384.95 387.76 388.96 T:acorn128 1773.99 1783.97 1792.16 T:led80n6silcv1 1780.86 1784.92 1790.40 T:led80n6t4silcv2 1902.22 1905.38 1908.02 T:present80n6silcv1 1903.45 1906.44 1911.00 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.12 0.13 0.13 T:tiaoxinv1 0.12 0.13 0.13 T:tiaoxinv2 0.16? 0.17? 0.18? aegis128l 0.18? 0.19? 0.20? T:aezv4 0.20 0.20 0.21 T:aezv3 0.21 0.22 0.22 T:aezv5 0.31 0.31 0.32 T:aegis128 0.31? 0.32? 0.35? aegis256 0.42 0.43 0.43 aes256gcmv1 0.42 0.43 0.44 T:aes128gcmv1 0.43 0.43 0.45 T:aeadaes128ocbtaglen128v1 0.05? 0.47? 0.90? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrpv3 0.64 0.66 0.67 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.72 T:colm0v1 0.71 0.72 0.74 T:aes256otrcv3 0.71 0.73 0.73 T:aes256otrpv3 0.81 0.82 0.83 T:deoxysi128v141 0.81 0.82 0.82 T:deoxysii128v141 0.85 0.86 0.87 T:morus1280256v2 0.85 0.86 0.87 T:morus1280256v1 0.85 0.86 0.87 T:morus1280128v2 0.85 0.86 0.87 T:morus1280128v1 0.85 0.87 0.88 T:deoxysneq128128v1 0.88 0.90 0.91 T:deoxyseq128128v1 0.90 0.91 0.93 T:deoxysii256v141 0.90 0.91 0.93 T:deoxysi256v141 0.95 0.97 0.97 T:deoxysneq256128v1 1.03 1.04 1.05 T:deoxyseq256128v1 1.03 1.06 1.08 T:morus640128v1 1.04 1.07 1.10 T:morus640128v2 1.79 1.82 1.85 T:oceankeyakv2 1.78 1.84 1.88 T:lunarkeyakv2 2.05 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n12t8clocv2 2.05 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.07 2.07 T:aes128n12t8silcv3 2.20 2.22 2.23 T:seakeyakv2 2.54 2.55 2.57 T:lakekeyakv2 2.53 2.59 2.63 T:norx6441v3 2.56 2.60 2.64 T:norx6441v2 2.70 2.71 2.73 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.07 3.09 3.11 T:norx6444v2 3.08 3.11 3.15 T:norx6441v1 3.31 3.35 3.40 T:norx6444v3 3.79 3.83 3.87 T:norx6461v2 3.82 3.85 3.87 T:norx6444v1 3.83 3.87 3.90 T:norx6461v3 3.94 4.01 4.05 T:norx3241v2 3.97 4.03 4.08 T:norx3241v3 4.21 4.22 4.23 T:aesjambuv1 4.18 4.23 4.28 T:ketjemajorv2 4.60 4.66 4.73 T:norx6461v1 4.71 4.82 4.91 T:norx3241v1 4.92 4.96 5.26 T:acorn128v3 4.99 5.01 5.30 T:acorn128v2 5.03 5.06 5.08 T:riverkeyakv2 5.76 5.87 5.97 T:norx3261v2 6.01 6.03 6.12 T:norx3261v3 6.14 6.17 6.19 ascon128av12 6.11 6.29 6.64 T:ketjeminorv2 6.31 6.33 6.35 T:ascon96v1 6.33 6.35 6.37 T:ascon128av11 7.37 7.40 7.44 T:norx3261v1 9.02 9.05 9.11 T:ascon128v11 9.10 9.13 9.16 T:ascon128v1 9.21 9.22 9.25 ascon128v12 9.77 9.79 9.82 T:aes128otrsv2 10.09 10.12 10.15 T:aes128n12clocv1 10.11 10.14 10.16 T:aes128n8clocv1 10.02 10.14 10.26 T:aes128otrsv1 10.86 10.88 10.90 T:aes128otrpv1 10.86 10.88 10.91 T:aes128otrpv2 12.88 12.93 12.96 T:aes256otrsv1 12.92 12.97 12.99 T:aes256otrsv2 14.11 14.12 14.15 T:twine80n6t4clocv3 14.41 14.44 14.47 T:aes256otrpv1 14.40 14.45 14.48 T:aes256otrpv2 14.95 14.96 15.00 T:twine80n6t4clocv2 19.31 19.46 19.61 T:proest256otrv1 21.83 21.88 21.92 T:aeadaes128ocbtaglen96v1 21.85 21.89 21.92 T:aeadaes128ocbtaglen64v1 23.19 23.23 23.27 T:colm127v1 24.81 24.95 25.04 T:ketjesrv1 25.88 25.97 26.48 T:ketjesrv2 26.00 26.03 26.06 T:aeadaes192ocbtaglen64v1 25.99 26.03 26.07 T:aeadaes192ocbtaglen96v1 30.20 30.23 30.26 T:aeadaes256ocbtaglen96v1 30.22 30.26 30.29 T:aeadaes256ocbtaglen64v1 40.36 40.79 41.26 T:ketjejrv1 41.48 43.77 43.99 T:aezv1 44.10 44.26 44.33 T:proest128otrv1 62.43 62.91 63.12 T:deoxysneq128128v13 63.01 63.14 63.42 T:deoxyseq128128v13 66.53 68.30 68.54 T:ketjejrv2 69.24 69.28 69.33 T:present80n6t4silcv3 102.79 103.48 104.36 T:deoxyseq256128v13 103.37 103.89 104.50 T:deoxysneq256128v13 125.11 125.19 125.72 T:led80n6t4silcv3 394.64 400.86 402.17 T:acorn128 1779.78 1785.66 1790.29 T:led80n6t4silcv2 1785.32 1788.90 1793.59 T:led80n6silcv1 1901.01 1903.69 1907.48 T:present80n6silcv1 1903.65 1905.84 1908.65 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.11? 0.12? 0.13? T:tiaoxinv1 0.12? 0.13? 0.14? T:tiaoxinv2 0.16 0.17 0.17 aegis128l 0.18? 0.19? 0.20? T:aezv4 0.20 0.20 0.21 T:aezv3 0.21 0.22 0.22 T:aezv5 0.31 0.31 0.32 T:aegis128 0.31 0.32 0.33 aegis256 0.42 0.43 0.44 aes256gcmv1 0.43 0.43 0.44 T:aeadaes128ocbtaglen128v1 0.43 0.44 0.45 T:aes128gcmv1 -0.10? 0.46? 0.89? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrpv3 0.64 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.72 T:colm0v1 0.71 0.71 0.73 T:aes256otrpv3 0.71 0.72 0.73 T:aes256otrcv3 0.80 0.81 0.83 T:deoxysii128v141 0.81 0.82 0.83 T:deoxysi128v141 0.85 0.86 0.86 T:morus1280256v1 0.85 0.86 0.87 T:morus1280256v2 0.85 0.86 0.87 T:morus1280128v1 0.85 0.86 0.87 T:morus1280128v2 0.85 0.87 0.88 T:deoxysneq128128v1 0.89 0.90 0.92 T:deoxyseq128128v1 0.90 0.91 0.94 T:deoxysi256v141 0.90 0.91 0.93 T:deoxysii256v141 0.96 0.97 0.98 T:deoxysneq256128v1 1.02 1.04 1.04 T:deoxyseq256128v1 1.04 1.06 1.08 T:morus640128v1 1.04 1.06 1.08 T:morus640128v2 1.77 1.80 1.84 T:lunarkeyakv2 1.80 1.82 1.85 T:oceankeyakv2 2.05 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.05 2.06 2.10 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128n12t8silcv2 2.20 2.22 2.23 T:seakeyakv2 2.54 2.55 2.56 T:lakekeyakv2 2.54 2.59 2.63 T:norx6441v3 2.57 2.62 2.66 T:norx6441v2 2.71 2.73 2.74 T:lakekeyakv1 2.81 2.81 2.82 T:aes256otrsv3 3.07 3.09 3.11 T:norx6444v2 3.08 3.12 3.15 T:norx6441v1 3.32 3.35 3.39 T:norx6444v3 3.79 3.82 3.86 T:norx6461v2 3.82 3.84 3.87 T:norx6444v1 3.84 3.88 3.91 T:norx6461v3 3.94 4.01 4.07 T:norx3241v2 3.96 4.03 4.09 T:norx3241v3 4.21 4.22 4.22 T:aesjambuv1 4.19 4.24 4.29 T:ketjemajorv2 4.60 4.64 4.70 T:norx6461v1 4.75 4.84 4.93 T:norx3241v1 4.92 4.97 5.26 T:acorn128v3 5.04 5.05 5.08 T:riverkeyakv2 5.00 5.07 5.29 T:acorn128v2 5.80 5.91 6.00 T:norx3261v2 6.01 6.03 6.11 T:norx3261v3 6.14 6.16 6.18 ascon128av12 6.11 6.29 6.61 T:ketjeminorv2 6.31 6.33 6.35 T:ascon96v1 6.33 6.35 6.36 T:ascon128av11 7.38 7.42 7.45 T:norx3261v1 9.02 9.07 9.12 T:ascon128v11 9.12 9.14 9.16 T:ascon128v1 9.21 9.23 9.24 ascon128v12 9.76 9.78 9.80 T:aes128otrsv2 10.09 10.12 10.14 T:aes128n12clocv1 10.12 10.14 10.17 T:aes128n8clocv1 10.14 10.25 10.28 T:aes128otrsv1 10.86 10.88 10.91 T:aes128otrpv1 10.86 10.89 10.92 T:aes128otrpv2 12.88 12.91 12.94 T:aes256otrsv1 12.94 12.97 12.99 T:aes256otrsv2 14.11 14.13 14.16 T:twine80n6t4clocv3 14.40 14.43 14.46 T:aes256otrpv1 14.41 14.44 14.47 T:aes256otrpv2 14.95 14.97 15.01 T:twine80n6t4clocv2 19.28 19.39 19.58 T:proest256otrv1 21.84 21.87 21.90 T:aeadaes128ocbtaglen64v1 21.86 21.89 21.92 T:aeadaes128ocbtaglen96v1 23.13 23.20 23.25 T:colm127v1 24.82 24.93 25.08 T:ketjesrv1 25.88 25.93 26.46 T:ketjesrv2 25.99 26.03 26.07 T:aeadaes192ocbtaglen96v1 26.00 26.04 26.07 T:aeadaes192ocbtaglen64v1 30.20 30.23 30.26 T:aeadaes256ocbtaglen96v1 30.21 30.23 30.27 T:aeadaes256ocbtaglen64v1 40.41 40.86 41.33 T:ketjejrv1 41.21 43.75 43.98 T:aezv1 44.11 44.27 44.33 T:proest128otrv1 62.45 62.92 63.12 T:deoxysneq128128v13 63.07 63.27 63.48 T:deoxyseq128128v13 66.26 68.33 68.55 T:ketjejrv2 69.23 69.29 69.36 T:present80n6t4silcv3 102.77 103.47 104.30 T:deoxyseq256128v13 103.38 103.78 104.49 T:deoxysneq256128v13 125.11 125.19 125.53 T:led80n6t4silcv3 394.56 400.34 402.04 T:acorn128 1780.73 1785.71 1790.16 T:led80n6t4silcv2 1781.82 1787.14 1793.62 T:led80n6silcv1 1901.13 1903.32 1905.98 T:present80n6silcv1 1903.82 1905.84 1908.19 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.22 0.22 0.22 T:tiaoxinv2 0.22 0.22 0.22 T:tiaoxinv1 0.24 0.25 0.25 aegis128l 0.35 0.36 0.36 T:aezv4 0.36 0.36 0.37 T:aezv3 0.38 0.39 0.39 T:aezv5 0.39 0.40 0.40 T:aegis128 0.40 0.41 0.42 aegis256 0.49 0.49 0.49 T:aeadaes128ocbtaglen128v1 0.60? 0.61? 1.16? T:aeadaes192ocbtaglen128v1 0.61 0.62 0.62 T:aes128otrpv3 0.64 0.65 0.65 T:aes128otrcv3 0.67 0.67 0.68 T:aeadaes256ocbtaglen128v1 0.77 0.77 0.77 T:aes128gcmv1 0.79 0.79 0.79 T:aes256otrpv3 0.83 0.84 0.85 T:aes256otrcv3 0.85 0.85 0.86 aes256gcmv1 0.93 0.94 0.94 T:deoxysi128v141 0.95 0.95 0.96 T:deoxysneq128128v1 1.06 1.07 1.08 T:deoxysi256v141 1.07 1.08 1.08 T:deoxysneq256128v1 1.11 1.12 1.12 T:morus1280256v1 1.12 1.13 1.13 T:morus1280128v1 1.14 1.14 1.15 T:morus1280256v2 1.14 1.15 1.16 T:morus1280128v2 1.21 1.22 1.23 T:morus640128v1 1.22 1.23 1.24 T:morus640128v2 1.28 1.29 1.30 T:colm0v1 1.35 1.35 1.36 T:aes128otrsv3 1.36 1.37 1.37 T:deoxysii128v141 1.46 1.47 1.47 T:deoxyseq128128v1 1.54 1.55 1.56 T:deoxysii256v141 1.67 1.68 1.68 T:deoxyseq256128v1 1.81 1.81 1.82 T:aes256otrsv3 2.11 2.11 2.11 T:aes128n12t8clocv3 2.11 2.11 2.12 T:aes128n8t8clocv2 2.11 2.11 2.12 T:aes128n12t8clocv2 2.12 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.13 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128n8t8silcv2 2.97 3.02 3.03 T:norx6441v2 3.04 3.05 3.06 T:lakekeyakv2 3.02 3.05 3.11 T:norx6441v3 3.25 3.25 3.26 T:seakeyakv2 3.38 3.39 3.41 T:lakekeyakv1 3.45 3.47 3.48 T:norx6441v1 3.79 3.79 3.81 T:norx6444v3 4.16 4.20 4.25 T:norx3241v3 4.17 4.23 4.27 T:norx3241v2 4.27 4.28 4.28 T:aesjambuv1 4.30 4.31 4.33 T:oceankeyakv2 4.47 4.49 4.51 T:norx6461v2 4.48 4.50 4.52 T:norx6461v3 4.63 4.64 4.65 T:norx6444v2 4.92 4.97 5.03 T:norx3241v1 5.16 5.19 5.22 T:norx6461v1 5.40 5.42 5.43 T:norx6444v1 5.55 5.56 5.58 T:riverkeyakv2 5.83 5.88 5.92 T:acorn128v2 5.91 5.97 6.09 T:acorn128v3 6.31 6.32 6.33 ascon128av12 6.33 6.40 6.46 T:norx3261v2 6.40 6.42 6.48 T:ketjemajorv2 6.39 6.44 6.48 T:norx3261v3 6.44 6.45 6.47 T:ascon96v1 6.46 6.47 6.49 T:ascon128av11 7.18 7.21 7.35 T:ketjeminorv2 7.40 7.43 7.46 T:lunarkeyakv2 7.78 7.80 7.82 T:norx3261v1 9.25 9.26 9.27 T:ascon128v11 9.27 9.29 9.37 T:ascon128v1 9.31 9.34 9.37 ascon128v12 11.34 11.35 11.37 T:aes128otrsv2 11.44 11.51 11.54 T:aes128otrsv1 11.63 11.64 11.65 T:aes128otrpv1 11.64 11.65 11.66 T:aes128otrpv2 14.50 14.50 14.50 T:twine80n6t4clocv3 14.56 14.57 14.59 T:aes256otrsv1 14.60 14.61 14.62 T:aes256otrsv2 15.23 15.25 15.27 T:aes256otrpv1 15.24 15.26 15.27 T:aes256otrpv2 15.40 15.44 15.47 T:twine80n6t4clocv2 15.46 15.47 15.49 T:aes128n8clocv1 15.47 15.48 15.51 T:aes128n12clocv1 20.26 20.72 20.97 T:proest256otrv1 22.69 22.70 22.72 T:aeadaes128ocbtaglen64v1 22.69 22.71 22.72 T:aeadaes128ocbtaglen96v1 26.45 26.59 26.80 T:ketjesrv1 26.93 26.94 26.96 T:aeadaes192ocbtaglen64v1 26.93 26.95 26.97 T:aeadaes192ocbtaglen96v1 27.25 27.32 27.87 T:ketjesrv2 31.26 31.27 31.28 T:aeadaes256ocbtaglen64v1 31.27 31.29 31.31 T:aeadaes256ocbtaglen96v1 36.42 36.45 36.48 T:colm127v1 44.84 45.34 46.17 T:ketjejrv1 45.54 45.65 45.92 T:proest128otrv1 63.23 63.66 63.78 T:deoxysneq128128v13 68.90 70.50 70.67 T:ketjejrv2 70.80 70.87 70.95 T:present80n6t4silcv3 82.73 84.41 87.14 T:aezv1 96.28 96.98 97.08 T:deoxyseq128128v13 103.05 103.36 104.44 T:deoxysneq256128v13 126.70 126.76 126.84 T:led80n6t4silcv3 156.55 157.51 158.60 T:deoxyseq256128v13 443.26 444.42 445.84 T:acorn128 2689.08 2695.28 2699.53 T:led80n6silcv1 2692.08 2695.71 2698.73 T:led80n6t4silcv2 2868.89 2870.24 2874.03 T:present80n6t4silcv2 2873.24 2876.17 2880.14 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.25 0.25 0.26 aegis128l 0.28 0.28 0.28 T:tiaoxinv1 0.28 0.28 0.28 T:tiaoxinv2 0.35 0.36 0.36 T:aezv4 0.36 0.37 0.37 T:aezv3 0.38 0.39 0.39 T:aegis128 0.38 0.39 0.39 T:aezv5 0.41 0.41 0.42 aegis256 0.50 0.51 0.51 T:aeadaes128ocbtaglen128v1 0.62? 0.63? 0.91? T:aeadaes192ocbtaglen128v1 0.63 0.63 0.64 T:aes128otrpv3 0.67 0.67 0.67 T:aes128otrcv3 0.71 0.72 0.72 T:aeadaes256ocbtaglen128v1 0.79 0.79 0.80 T:aes128gcmv1 0.80 0.80 0.81 T:aes256otrpv3 0.87 0.87 0.88 T:aes256otrcv3 0.89 0.90 0.90 aes256gcmv1 1.01 1.02 1.02 T:deoxysi128v141 1.05 1.06 1.06 T:deoxysneq128128v1 1.12 1.13 1.13 T:morus1280128v1 1.12 1.13 1.13 T:morus1280256v1 1.13 1.14 1.14 T:morus1280128v2 1.13 1.14 1.14 T:morus1280256v2 1.14 1.14 1.15 T:deoxysi256v141 1.16 1.17 1.18 T:deoxysneq256128v1 1.21 1.22 1.24 T:morus640128v1 1.23 1.25 1.26 T:morus640128v2 1.35 1.35 1.36 T:colm0v1 1.36 1.36 1.37 T:aes128otrsv3 1.39 1.40 1.40 T:deoxysii128v141 1.54 1.55 1.56 T:deoxyseq128128v1 1.59 1.60 1.60 T:deoxysii256v141 1.70 1.71 1.72 T:deoxyseq256128v1 1.84 1.84 1.85 T:aes256otrsv3 2.08 2.08 2.09 T:aes128n12t8clocv2 2.08 2.08 2.09 T:aes128n12t8clocv3 2.08 2.08 2.09 T:aes128n8t8clocv2 2.10 2.10 2.10 T:aes128n8t8silcv2 2.10 2.10 2.11 T:aes128n12t8silcv3 2.10 2.10 2.10 T:aes128n12t8silcv2 2.95 2.97 2.99 T:norx6441v3 2.97 3.00 3.03 T:norx6441v2 3.05 3.06 3.07 T:lakekeyakv2 3.28 3.29 3.31 T:seakeyakv2 3.39 3.40 3.42 T:lakekeyakv1 3.45 3.47 3.49 T:norx6441v1 3.80 3.81 3.83 T:norx6444v3 4.16 4.19 4.22 T:norx3241v3 4.16 4.20 4.24 T:norx3241v2 4.33 4.34 4.36 T:oceankeyakv2 4.44 4.45 4.46 T:aesjambuv1 4.47 4.48 4.51 T:norx6461v2 4.48 4.50 4.52 T:norx6461v3 4.62 4.63 4.64 T:norx6444v2 4.84 4.89 4.94 T:norx3241v1 5.15 5.19 5.21 T:norx6461v1 5.40 5.43 5.44 T:norx6444v1 5.61 5.63 5.65 T:riverkeyakv2 5.92 5.96 6.18 T:acorn128v2 5.96 6.05 6.08 T:acorn128v3 6.30 6.31 6.32 ascon128av12 6.32 6.34 6.40 T:norx3261v3 6.32 6.35 6.45 T:ketjemajorv2 6.31 6.38 6.43 T:norx3261v2 6.44 6.46 6.47 T:ascon96v1 6.46 6.47 6.49 T:ascon128av11 7.28 7.31 7.46 T:ketjeminorv2 7.45 7.48 7.50 T:lunarkeyakv2 7.71 7.74 7.76 T:norx3261v1 9.18 9.21 9.23 T:ascon128v1 9.19 9.23 9.25 T:ascon128v11 9.32 9.33 9.35 ascon128v12 11.48 11.50 11.52 T:aes128otrsv2 11.48 11.56 11.60 T:aes128otrsv1 11.72 11.74 11.76 T:aes128otrpv1 11.73 11.78 11.83 T:aes128otrpv2 14.50 14.50 14.51 T:twine80n6t4clocv3 14.69 14.70 14.73 T:aes256otrsv1 14.75 14.77 14.78 T:aes256otrsv2 15.30 15.32 15.36 T:aes256otrpv1 15.35 15.39 15.46 T:aes256otrpv2 15.44 15.45 15.47 T:twine80n6t4clocv2 15.85 15.86 15.88 T:aes128n8clocv1 15.85 15.87 15.89 T:aes128n12clocv1 20.24 20.76 20.95 T:proest256otrv1 26.85 26.86 26.88 T:aeadaes128ocbtaglen96v1 26.86 26.87 26.89 T:aeadaes128ocbtaglen64v1 26.75 26.97 27.33 T:ketjesrv1 27.65 27.73 28.10 T:ketjesrv2 31.99 32.00 32.02 T:aeadaes192ocbtaglen96v1 32.00 32.02 32.05 T:aeadaes192ocbtaglen64v1 37.24 37.27 37.29 T:aeadaes256ocbtaglen96v1 37.25 37.27 37.30 T:aeadaes256ocbtaglen64v1 44.49 44.53 44.56 T:colm127v1 45.08 45.18 45.45 T:proest128otrv1 44.82 45.32 46.15 T:ketjejrv1 70.75 70.82 70.89 T:present80n6t4silcv3 69.46 70.87 71.09 T:ketjejrv2 75.09 75.43 75.60 T:deoxysneq128128v13 83.30 84.61 87.54 T:aezv1 96.34 96.94 97.06 T:deoxyseq128128v13 116.50 116.81 117.89 T:deoxysneq256128v13 126.59 126.63 126.90 T:led80n6t4silcv3 155.98 157.50 158.60 T:deoxyseq256128v13 462.45 464.10 465.41 T:acorn128 2694.08 2696.44 2697.55 T:led80n6silcv1 2692.09 2697.24 2700.64 T:led80n6t4silcv2 2869.74 2871.51 2874.44 T:present80n6t4silcv2 2874.58 2877.01 2879.88 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.21 0.21 0.21 T:aezv4 0.22 0.22 0.22 T:aezv3 0.23 0.23 0.24 T:aezv5 0.25 0.25 0.26 aegis128l 0.28 0.28 0.28 T:tiaoxinv1 0.28 0.28 0.28 T:tiaoxinv2 0.38 0.39 0.39 T:aegis128 0.43 0.44 0.44 aegis256 0.50 0.51 0.51 T:aeadaes128ocbtaglen128v1 0.62? 0.63? 1.16? T:aeadaes192ocbtaglen128v1 0.63 0.63 0.64 T:aes128otrpv3 0.66 0.66 0.67 T:aes128otrcv3 0.71 0.71 0.72 T:aeadaes256ocbtaglen128v1 0.79 0.79 0.80 T:aes128gcmv1 0.80 0.80 0.81 T:aes256otrpv3 0.86 0.87 0.88 T:aes256otrcv3 0.89 0.90 0.90 aes256gcmv1 1.01 1.02 1.02 T:deoxysi128v141 1.05 1.06 1.06 T:deoxysneq128128v1 1.12 1.13 1.13 T:morus1280256v1 1.13 1.13 1.14 T:morus1280128v1 1.13 1.14 1.15 T:morus1280256v2 1.13 1.14 1.15 T:morus1280128v2 1.14 1.15 1.15 T:deoxysi256v141 1.16 1.17 1.17 T:deoxysneq256128v1 1.21 1.22 1.23 T:morus640128v1 1.23 1.24 1.25 T:morus640128v2 1.35 1.35 1.36 T:colm0v1 1.36 1.36 1.36 T:aes128otrsv3 1.39 1.40 1.41 T:deoxysii128v141 1.54 1.54 1.56 T:deoxyseq128128v1 1.59 1.60 1.61 T:deoxysii256v141 1.70 1.71 1.72 T:deoxyseq256128v1 1.84 1.84 1.85 T:aes256otrsv3 2.08 2.08 2.08 T:aes128n12t8clocv2 2.08 2.08 2.08 T:aes128n12t8clocv3 2.08 2.08 2.08 T:aes128n8t8clocv2 2.09 2.09 2.09 T:aes128n12t8silcv3 2.09 2.09 2.09 T:aes128n8t8silcv2 2.09 2.09 2.09 T:aes128n12t8silcv2 2.95 2.97 3.00 T:norx6441v3 2.98 3.01 3.03 T:norx6441v2 3.06 3.07 3.08 T:lakekeyakv2 3.30 3.31 3.34 T:seakeyakv2 3.43 3.44 3.46 T:lakekeyakv1 3.46 3.48 3.50 T:norx6441v1 3.80 3.82 3.84 T:norx6444v3 4.16 4.18 4.22 T:norx3241v3 4.13 4.19 4.24 T:norx3241v2 4.34 4.36 4.37 T:oceankeyakv2 4.44 4.45 4.46 T:aesjambuv1 4.47 4.49 4.51 T:norx6461v2 4.49 4.52 4.53 T:norx6461v3 4.64 4.65 4.65 T:norx6444v2 4.85 4.88 4.93 T:norx3241v1 5.14 5.17 5.23 T:norx6461v1 5.42 5.45 5.46 T:norx6444v1 5.63 5.64 5.66 T:riverkeyakv2 5.91 5.97 6.16 T:acorn128v2 5.97 6.08 6.11 T:acorn128v3 6.25 6.31 6.38 T:norx3261v2 6.30 6.31 6.32 ascon128av12 6.35 6.37 6.47 T:ketjemajorv2 6.33 6.37 6.42 T:norx3261v3 6.45 6.46 6.48 T:ascon96v1 6.46 6.47 6.48 T:ascon128av11 7.30 7.34 7.48 T:ketjeminorv2 7.45 7.48 7.51 T:lunarkeyakv2 7.71 7.73 7.75 T:norx3261v1 9.18 9.22 9.24 T:ascon128v1 9.22 9.24 9.25 T:ascon128v11 9.32 9.33 9.34 ascon128v12 11.51 11.52 11.53 T:aes128otrsv2 11.50 11.55 11.61 T:aes128otrsv1 11.72 11.74 11.75 T:aes128otrpv1 11.74 11.77 11.84 T:aes128otrpv2 14.50 14.50 14.51 T:twine80n6t4clocv3 14.71 14.72 14.74 T:aes256otrsv1 14.77 14.79 14.81 T:aes256otrsv2 15.34 15.36 15.38 T:aes256otrpv1 15.38 15.44 15.48 T:aes256otrpv2 15.44 15.45 15.47 T:twine80n6t4clocv2 15.85 15.86 15.88 T:aes128n8clocv1 15.85 15.87 15.89 T:aes128n12clocv1 20.36 20.77 20.96 T:proest256otrv1 26.86 26.87 26.89 T:aeadaes128ocbtaglen96v1 26.85 26.87 26.90 T:aeadaes128ocbtaglen64v1 26.82 26.99 27.22 T:ketjesrv1 27.66 27.74 28.12 T:ketjesrv2 31.99 32.01 32.02 T:aeadaes192ocbtaglen96v1 32.01 32.03 32.04 T:aeadaes192ocbtaglen64v1 37.25 37.27 37.28 T:aeadaes256ocbtaglen64v1 37.26 37.28 37.30 T:aeadaes256ocbtaglen96v1 44.49 44.51 44.54 T:colm127v1 45.05 45.16 45.34 T:proest128otrv1 44.90 45.34 46.20 T:ketjejrv1 70.78 70.83 70.87 T:present80n6t4silcv3 69.50 70.92 71.12 T:ketjejrv2 75.15 75.55 75.67 T:deoxysneq128128v13 83.32 84.50 87.24 T:aezv1 96.39 96.97 97.15 T:deoxyseq128128v13 116.51 116.82 117.88 T:deoxysneq256128v13 126.55 126.62 126.83 T:led80n6t4silcv3 155.99 157.44 158.58 T:deoxyseq256128v13 462.75 464.11 465.12 T:acorn128 2693.20 2695.79 2697.63 T:led80n6silcv1 2690.25 2695.97 2700.03 T:led80n6t4silcv2 2870.33 2872.49 2874.60 T:present80n6t4silcv2 2874.82 2877.25 2880.51 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.96 0.99 1.03 T:aegis128 1.09 1.12 1.18 aegis128l 1.26 1.29 1.37 T:tiaoxinv2 1.27 1.29 1.34 T:tiaoxinv1 1.30 1.32 1.37 aegis256 1.35 1.35 1.37 T:aezv5 1.36 1.38 1.41 T:aezv4 1.48 1.48 1.49 T:aezv3 1.47 1.52 1.61 T:aeadaes128ocbtaglen128v1 1.90 1.92 1.99 T:aes128otrpv3 2.01 2.06 2.14 T:aeadaes256ocbtaglen128v1 2.21 2.23 2.25 T:aes128otrsv3 2.44 2.47 2.51 T:aes256otrpv3 2.52 2.55 2.57 T:aes128n12t8clocv3 2.53 2.56 2.57 T:aes128n12t8clocv2 2.54 2.57 2.58 T:aes128n8t8clocv2 2.68 2.70 2.75 T:colm0v1 2.73 2.75 2.79 T:aes128n8t8silcv2 2.74 2.77 2.79 T:aes128otrcv3 2.75 2.78 2.82 T:aes128n12t8silcv2 2.76 2.79 2.83 T:aes128n12t8silcv3 3.00 3.01 3.02 T:aes256otrsv3 3.14 3.17 3.21 T:deoxysneq128128v1 3.03? 3.20? 10.07? T:aeadaes192ocbtaglen128v1 3.34 3.39 3.47 T:deoxysi128v141 3.50 3.52 3.54 T:aes256otrcv3 3.82 3.85 3.89 T:deoxysneq256128v1 4.00 4.09 4.19 T:morus640128v1 4.08 4.12 4.18 T:deoxysi256v141 4.27 4.37 4.48 T:morus640128v2 4.30 4.38 4.40 T:aes128gcmv1 4.61 4.64 4.68 T:deoxyseq128128v1 4.62 4.68 4.74 T:deoxysii128v141 5.49 5.55 5.61 T:deoxysii256v141 5.53 5.56 5.60 aes256gcmv1 5.54 5.58 5.63 T:deoxyseq256128v1 5.57 5.59 5.62 T:aesjambuv1 5.72 5.75 5.82 T:morus1280128v1 5.76 5.81 5.91 T:morus1280256v1 6.06 6.10 6.22 T:morus1280128v2 6.10 6.16 6.20 T:morus1280256v2 9.44 9.51 9.58 ascon128av12 9.50 9.56 9.64 T:ascon128av11 9.53 9.60 9.70 T:ascon96v1 9.66 9.80 10.09 T:norx6441v2 9.65 9.81 9.99 T:norx6441v1 9.80 9.95 10.20 T:norx6441v3 10.04 10.19 10.44 T:norx3241v2 10.08 10.26 10.50 T:norx3241v3 10.14 10.35 10.52 T:norx3241v1 10.91 10.96 11.11 T:lakekeyakv1 12.02 12.09 12.16 T:ascon128v11 12.06 12.13 12.24 T:ascon128v1 12.24 12.29 12.40 ascon128v12 12.66 12.72 12.87 T:riverkeyakv2 13.02 13.05 13.09 T:lakekeyakv2 14.38 14.59 14.86 T:norx6461v1 14.91 15.08 15.22 T:norx6461v3 14.88 15.08 15.31 T:norx6461v2 15.30 15.48 15.65 T:norx3261v2 16.05 16.12 16.21 T:norx3261v1 16.27 16.32 16.34 T:norx3261v3 17.96 18.09 18.19 T:aes128otrsv1 18.58 18.65 18.79 T:aes128otrpv1 18.38 18.67 18.74 T:twine80n6t4clocv3 18.68 18.76 18.91 T:aes128otrpv2 18.68 18.77 18.89 T:aes128otrsv2 19.18 19.25 19.42 T:aes128n8clocv1 19.23 19.32 19.48 T:aes128n12clocv1 19.42 19.48 19.53 T:twine80n6t4clocv2 23.46 23.71 23.97 T:norx6444v3 23.81 23.88 23.97 T:aes256otrsv1 23.93 24.03 24.28 T:aes256otrsv2 24.42 24.50 24.73 T:aes256otrpv1 24.47 24.57 24.77 T:aes256otrpv2 25.40 25.58 25.80 T:ketjeminorv2 25.34 25.84 26.08 T:acorn128v2 26.07 26.48 27.12 T:acorn128v3 29.60 29.70 29.83 T:seakeyakv2 32.87 33.18 33.55 T:norx6444v2 35.25 35.31 35.39 T:aeadaes128ocbtaglen96v1 35.27 35.34 35.47 T:aeadaes128ocbtaglen64v1 37.78 37.95 38.17 T:ketjemajorv2 39.00 39.22 39.44 T:norx6444v1 41.27 41.36 41.51 T:aeadaes192ocbtaglen96v1 41.28 41.38 41.59 T:aeadaes192ocbtaglen64v1 41.96 42.29 42.68 T:ketjesrv1 46.69 46.90 47.26 T:oceankeyakv2 47.42 47.54 47.77 T:ketjesrv2 48.27 48.39 48.52 T:aeadaes256ocbtaglen64v1 48.26 48.42 48.61 T:aeadaes256ocbtaglen96v1 53.25 53.52 53.99 T:colm127v1 57.88 58.43 59.10 T:ketjejrv1 60.78 61.07 61.46 T:proest256otrv1 71.30 71.98 72.20 T:deoxysneq128128v13 87.01 87.11 87.30 T:present80n6t4silcv3 87.35 87.50 87.91 T:proest128otrv1 92.85 94.86 95.21 T:ketjejrv2 95.47 96.23 102.81 T:aezv1 117.15 117.58 118.39 T:deoxysneq256128v13 118.80 119.31 121.75 T:deoxyseq128128v13 119.44 119.73 120.13 T:lunarkeyakv2 149.68 149.91 150.34 T:led80n6t4silcv3 194.18 195.78 197.09 T:deoxyseq256128v13 1609.67 1612.15 1613.85 T:acorn128 2977.68 2994.48 3014.17 T:led80n6silcv1 2999.07 3005.95 3011.61 T:led80n6t4silcv2 3203.25 3205.56 3210.74 T:present80n6silcv1 3206.89 3214.10 3224.29 T:present80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.01 1.05 1.09 T:aegis128 1.12 1.16 1.22 aegis128l 1.31 1.34 1.39 T:tiaoxinv2 1.31 1.34 1.40 T:tiaoxinv1 1.35 1.37 1.41 T:aezv5 1.37 1.40 1.46 aegis256 1.38 1.41 1.46 T:aezv4 1.48 1.49 1.50 T:aezv3 1.65 1.69 1.76 T:aeadaes128ocbtaglen128v1 1.93 1.95 1.97 T:aes128otrpv3 2.28 2.30 2.32 T:aes128otrsv3 2.27 2.30 2.42 T:aeadaes256ocbtaglen128v1 2.42 2.43 2.45 T:aes256otrpv3 2.55 2.58 2.60 T:aes128n12t8clocv2 2.55 2.58 2.68 T:aes128n12t8clocv3 2.57 2.58 2.62 T:aes128n8t8clocv2 2.80 2.81 2.82 T:aes128otrcv3 2.91 2.94 3.00 T:aes128n8t8silcv2 2.93 2.96 2.99 T:aes128n12t8silcv3 2.93 2.96 3.00 T:aes128n12t8silcv2 3.07 3.10 3.15 T:colm0v1 3.28 3.29 3.30 T:aes256otrsv3 3.38? 3.42? 10.22? T:aeadaes192ocbtaglen128v1 3.67 3.69 3.69 T:aes256otrcv3 4.12 4.21 4.30 T:morus640128v1 4.29 4.32 4.40 T:aes128gcmv1 4.39 4.47 4.57 T:morus640128v2 4.87 4.90 4.96 T:deoxysi128v141 4.88 4.93 5.02 T:deoxysneq128128v1 4.96 4.99 5.03 T:deoxysneq256128v1 5.30 5.33 5.37 T:deoxysii128v141 5.72 5.75 5.77 T:aesjambuv1 5.70 5.77 5.80 aes256gcmv1 5.77 5.84 5.89 T:deoxysi256v141 5.92 5.95 6.00 T:morus1280256v1 5.93 6.03 6.16 T:morus1280128v1 6.11 6.15 6.21 T:morus1280128v2 6.12 6.16 6.22 T:morus1280256v2 6.57 6.60 6.63 T:deoxyseq128128v1 6.58 6.64 6.68 T:deoxysii256v141 6.66 6.70 6.75 T:deoxyseq256128v1 9.44 9.50 9.56 ascon128av12 9.55 9.61 9.71 T:ascon96v1 9.55 9.62 9.67 T:ascon128av11 9.74 9.91 10.08 T:norx6441v1 9.94 10.16 10.46 T:norx6441v2 10.08 10.26 10.44 T:norx3241v3 10.15 10.29 10.44 T:norx6441v3 10.25 10.41 10.62 T:norx3241v2 10.30 10.51 10.72 T:norx3241v1 11.01 11.06 11.28 T:lakekeyakv1 12.00 12.08 12.16 T:ascon128v1 12.04 12.10 12.20 T:ascon128v11 12.18 12.25 12.35 ascon128v12 12.70 12.75 12.80 T:riverkeyakv2 13.06 13.09 13.20 T:lakekeyakv2 14.56 14.75 15.03 T:norx6461v1 15.03 15.21 15.38 T:norx6461v2 15.07 15.27 15.40 T:norx6461v3 15.44 15.63 15.89 T:norx3261v2 15.81 15.93 16.06 T:norx3261v3 16.16 16.27 16.38 T:norx3261v1 17.99 18.07 18.20 T:aes128otrsv1 18.51 18.78 18.88 T:twine80n6t4clocv3 18.79 18.88 19.05 T:aes128otrsv2 18.88 18.94 19.02 T:aes128otrpv1 19.03 19.09 19.16 T:aes128otrpv2 19.52 19.58 19.68 T:twine80n6t4clocv2 19.74 19.81 19.90 T:aes128n12clocv1 19.74 19.82 19.95 T:aes128n8clocv1 23.37 23.54 23.76 T:norx6444v3 23.92 24.07 24.35 T:aes256otrsv1 24.10 24.25 24.48 T:aes256otrsv2 24.79 24.87 25.04 T:aes256otrpv1 24.78 24.87 25.05 T:aes256otrpv2 25.55 25.61 26.04 T:ketjeminorv2 25.54 26.08 26.18 T:acorn128v2 26.56 26.82 27.14 T:acorn128v3 29.59 29.65 29.79 T:seakeyakv2 33.08 33.29 33.50 T:norx6444v2 37.63 37.86 38.21 T:ketjemajorv2 39.07 39.32 39.46 T:norx6444v1 42.30 42.60 43.04 T:ketjesrv1 42.82 42.95 43.07 T:aeadaes128ocbtaglen96v1 42.83 43.00 43.33 T:aeadaes128ocbtaglen64v1 46.92 47.13 47.37 T:oceankeyakv2 47.62 47.93 48.32 T:ketjesrv2 50.17 50.30 50.42 T:aeadaes192ocbtaglen64v1 50.24 50.34 50.47 T:aeadaes192ocbtaglen96v1 57.88 58.40 59.38 T:ketjejrv1 58.98 59.10 59.32 T:aeadaes256ocbtaglen96v1 59.00 59.18 59.34 T:aeadaes256ocbtaglen64v1 61.47 61.63 61.90 T:colm127v1 61.49 61.79 62.15 T:proest256otrv1 83.36 83.82 84.04 T:deoxysneq128128v13 86.91 87.05 87.24 T:present80n6t4silcv3 86.93 87.06 88.45 T:proest128otrv1 93.47 95.24 95.72 T:ketjejrv2 102.19 102.85 109.62 T:aezv1 118.74 119.30 121.46 T:deoxyseq128128v13 119.78 120.03 120.46 T:lunarkeyakv2 130.41 130.89 131.78 T:deoxysneq256128v13 149.84 150.05 150.21 T:led80n6t4silcv3 194.26 195.60 197.22 T:deoxyseq256128v13 1632.10 1634.25 1641.80 T:acorn128 2980.93 3000.28 3015.30 T:led80n6silcv1 2998.20 3005.33 3011.85 T:led80n6t4silcv2 3202.72 3205.52 3216.67 T:present80n6silcv1 3207.44 3214.68 3226.63 T:present80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.01 1.05 1.07 T:aegis128 1.09 1.09 1.09 T:aezv5 1.09 1.09 1.11 T:aezv4 1.12 1.16 1.20 aegis128l 1.17 1.18 1.19 T:aezv3 1.32? 1.36? 1.50? T:tiaoxinv2 1.33 1.36 1.41 T:tiaoxinv1 1.40 1.43 1.54 aegis256 1.65 1.68 1.76 T:aeadaes128ocbtaglen128v1 1.92 1.93 1.96 T:aes128otrpv3 2.29 2.30 2.31 T:aes128otrsv3 2.28 2.31 2.40 T:aeadaes256ocbtaglen128v1 2.41 2.42 2.44 T:aes256otrpv3 2.45 2.48 2.58 T:aes128n12t8clocv2 2.46 2.49 2.66 T:aes128n8t8clocv2 2.45? 2.50? 2.81? T:aes128n12t8clocv3 2.76 2.77 2.80 T:aes128n12t8silcv2 2.76 2.78 2.80 T:aes128n8t8silcv2 2.76? 2.79? 3.21? T:aes128n12t8silcv3 2.80 2.81 2.82 T:aes128otrcv3 3.11 3.14 3.19 T:colm0v1 3.28 3.29 3.30 T:aes256otrsv3 3.38? 3.40? 9.62? T:aeadaes192ocbtaglen128v1 3.67 3.68 3.69 T:aes256otrcv3 4.07 4.16 4.26 T:morus640128v1 4.26 4.32 4.37 T:aes128gcmv1 4.46 4.50 4.63 T:morus640128v2 4.71 4.80 4.88 T:deoxysneq128128v1 4.81 4.85 4.91 T:deoxysneq256128v1 4.91 4.95 5.04 T:deoxysi128v141 5.28 5.33 5.39 T:deoxysii128v141 5.74 5.76 5.77 T:aesjambuv1 5.71 5.78 5.82 aes256gcmv1 5.76 5.87 5.93 T:deoxysi256v141 5.91 5.94 5.99 T:morus1280256v1 5.90 5.96 6.01 T:morus1280128v1 6.10 6.13 6.19 T:morus1280128v2 6.11 6.15 6.20 T:morus1280256v2 6.55 6.60 6.66 T:deoxyseq128128v1 6.58 6.65 6.72 T:deoxysii256v141 6.66 6.70 6.75 T:deoxyseq256128v1 9.41 9.46 9.52 ascon128av12 9.53 9.58 9.63 T:ascon96v1 9.57 9.66 9.79 T:ascon128av11 9.69 9.84 9.98 T:norx6441v1 9.99 10.21 10.50 T:norx6441v2 10.05 10.23 10.38 T:norx6441v3 10.13 10.33 10.57 T:norx3241v3 10.24 10.42 10.59 T:norx3241v2 10.27 10.43 10.62 T:norx3241v1 11.02 11.09 11.26 T:lakekeyakv1 11.98 12.07 12.17 T:ascon128v1 12.02 12.09 12.23 T:ascon128v11 12.21 12.27 12.39 ascon128v12 12.78 12.82 12.88 T:riverkeyakv2 13.09 13.18 13.34 T:lakekeyakv2 14.40 14.63 14.91 T:norx6461v1 15.08 15.17 15.36 T:norx6461v3 15.00 15.20 15.35 T:norx6461v2 15.46 15.69 15.91 T:norx3261v2 15.82 15.95 16.07 T:norx3261v3 16.18 16.26 16.35 T:norx3261v1 18.01 18.07 18.23 T:aes128otrsv1 18.41 18.70 18.78 T:twine80n6t4clocv3 18.82 18.91 19.02 T:aes128otrsv2 19.02 19.08 19.16 T:aes128otrpv1 19.06 19.14 19.25 T:aes128otrpv2 19.49 19.55 19.61 T:twine80n6t4clocv2 19.65 19.70 19.77 T:aes128n12clocv1 19.65 19.72 19.88 T:aes128n8clocv1 23.40 23.57 23.82 T:norx6444v3 23.95 24.05 24.33 T:aes256otrsv1 24.12 24.27 24.44 T:aes256otrsv2 24.84 24.94 25.05 T:aes256otrpv1 24.90 25.04 25.20 T:aes256otrpv2 25.62 25.77 26.32 T:ketjeminorv2 25.40 26.10 26.18 T:acorn128v2 26.54 26.71 27.05 T:acorn128v3 29.51 29.63 29.74 T:seakeyakv2 33.17 33.30 33.59 T:norx6444v2 37.67 37.91 38.24 T:ketjemajorv2 38.94 39.27 39.44 T:norx6444v1 42.40 42.68 43.12 T:ketjesrv1 42.82 42.93 43.04 T:aeadaes128ocbtaglen64v1 42.81 42.93 43.13 T:aeadaes128ocbtaglen96v1 46.85 47.14 47.35 T:oceankeyakv2 47.60 47.89 48.35 T:ketjesrv2 50.14 50.24 50.35 T:aeadaes192ocbtaglen64v1 50.19 50.30 50.37 T:aeadaes192ocbtaglen96v1 57.82 58.43 59.26 T:ketjejrv1 58.92 59.08 59.20 T:aeadaes256ocbtaglen64v1 58.95 59.08 59.22 T:aeadaes256ocbtaglen96v1 60.03 60.24 60.62 T:proest256otrv1 61.23 61.38 61.55 T:colm127v1 83.37 83.96 84.37 T:deoxysneq128128v13 86.97 87.21 87.55 T:present80n6t4silcv3 87.17 87.63 87.83 T:proest128otrv1 93.47 95.25 95.93 T:ketjejrv2 102.10 102.80 109.46 T:aezv1 118.87 119.43 121.43 T:deoxyseq128128v13 119.89 120.13 120.42 T:lunarkeyakv2 130.49 130.94 131.84 T:deoxysneq256128v13 149.73 149.95 150.20 T:led80n6t4silcv3 194.05 195.41 197.00 T:deoxyseq256128v13 1628.83 1629.84 1642.13 T:acorn128 2990.73 2999.27 3013.98 T:led80n6silcv1 2998.80 3008.40 3013.84 T:led80n6t4silcv2 3203.02 3205.18 3215.60 T:present80n6silcv1 3206.93 3214.77 3224.14 T:present80n6t4silcv2