VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, LPE cores; 2 x 700MHz; meteor,tiny, supercop-20251222

[Page version: 20260214 18:06:52]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.21? 0.22? 0.24? T:tiaoxinv2 0.21 0.22 0.23 T:tiaoxinv1 0.24 0.25 0.26 aegis128l 0.37 0.38 0.39 T:aegis128 0.39 0.40 0.40 aegis256 0.42 0.43 0.44 T:aezv4 0.43 0.44 0.45 T:aezv3 0.45 0.47 0.48 T:aezv5 0.47 0.48 0.49 T:aeadaes128ocbtaglen128v1 0.51 0.52 0.53 T:aes128otrcv3 0.52 0.53 0.54 T:aes128otrpv3 0.52 0.53 0.54 T:aes128otrsv3 -1.12? 0.56? 0.58? T:aeadaes192ocbtaglen128v1 0.58 0.61 0.61 T:aeadaes256ocbtaglen128v1 0.66 0.67 0.68 T:aes256otrpv3 0.66 0.67 0.68 T:aes256otrsv3 0.68 0.70 0.71 T:aes256otrcv3 0.80 0.82 0.83 T:deoxysi128v141 0.85 0.86 0.87 T:deoxysneq128128v1 0.91 0.92 0.92 T:aes128gcmv1 0.91 0.92 0.93 T:deoxysi256v141 0.95 0.97 0.98 T:deoxysneq256128v1 0.96 0.97 0.98 T:morus1280256v2 0.96 0.98 0.98 T:morus1280256v1 0.96 0.98 0.99 T:morus1280128v2 0.97 0.98 0.99 T:morus1280128v1 1.05 1.07 1.07 aes256gcmv1 1.12 1.14 1.16 T:morus640128v1 1.11 1.14 1.16 T:morus640128v2 1.61 1.62 1.65 T:deoxysii128v141 1.74 1.75 1.76 T:colm0v1 1.79 1.80 1.81 T:deoxyseq128128v1 1.80 1.82 1.83 T:deoxysii256v141 1.94 2.03 2.10 T:lunarkeyakv2 2.03 2.04 2.07 T:deoxyseq256128v1 2.11 2.12 2.13 T:aes128n8t8silcv2 2.12 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.13 T:aes128n8t8clocv2 2.12 2.12 2.13 T:aes128n12t8clocv2 2.12 2.12 2.13 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n12t8silcv3 2.28 2.31 2.35 T:norx6444v3 2.56 2.58 2.63 T:norx6441v2 2.60 2.66 2.70 T:norx6441v3 2.68 2.70 2.72 T:seakeyakv2 2.72 2.80 2.91 T:oceankeyakv2 3.06 3.08 3.10 T:lakekeyakv1 3.08 3.14 3.18 T:norx6441v1 3.18 3.20 3.22 T:lakekeyakv2 3.39 3.41 3.44 T:norx6444v2 3.76 3.82 3.86 T:norx3241v3 3.80 3.84 3.89 T:norx3241v2 3.82 3.88 3.95 T:norx6461v2 3.86 3.89 3.93 T:norx6461v3 3.83 3.91 3.95 T:norx6444v1 4.23 4.24 4.25 T:aesjambuv1 4.52 4.61 4.68 T:norx3241v1 4.61 4.66 4.70 T:norx6461v1 4.83 4.87 5.03 T:acorn128v2 4.96 5.21 5.25 T:acorn128v3 5.63 5.85 5.91 T:norx3261v3 5.88 5.92 5.96 T:norx3261v2 5.78 6.02 6.14 T:ketjemajorv2 6.19 6.21 6.22 ascon128av12 6.35 6.36 6.39 T:ascon128av11 6.34 6.36 6.38 T:ascon96v1 6.90 7.15 7.30 T:ketjeminorv2 7.22 7.25 7.27 T:riverkeyakv2 7.36 7.42 7.46 T:norx3261v1 9.08 9.11 9.23 T:ascon128v11 9.09 9.11 9.22 T:ascon128v1 9.17 9.18 9.19 ascon128v12 11.76 11.79 11.81 T:aes128otrpv2 11.76 11.79 11.82 T:aes128otrpv1 12.24 12.27 12.30 T:aes128otrsv2 12.22 12.32 12.35 T:aes128otrsv1 14.50 14.51 14.52 T:twine80n6t4clocv3 15.26 15.29 15.31 T:aes256otrpv2 15.27 15.29 15.33 T:aes256otrpv1 15.39 15.42 15.44 T:aes256otrsv1 15.42 15.45 15.50 T:aes256otrsv2 15.50 15.53 15.62 T:twine80n6t4clocv2 18.96 19.33 19.80 T:proest256otrv1 20.42 20.43 20.47 T:aes128n8clocv1 20.42 20.48 20.51 T:aes128n12clocv1 22.40 22.43 22.45 T:aeadaes128ocbtaglen96v1 22.39 22.44 22.46 T:aeadaes128ocbtaglen64v1 26.56 26.59 26.63 T:aeadaes192ocbtaglen64v1 26.57 26.61 26.66 T:aeadaes192ocbtaglen96v1 26.87 26.92 27.50 T:ketjesrv2 27.17 27.27 27.35 T:ketjesrv1 30.79 30.82 30.86 T:aeadaes256ocbtaglen64v1 30.83 30.86 30.96 T:aeadaes256ocbtaglen96v1 43.48 43.60 43.65 T:proest128otrv1 48.29 48.31 48.36 T:colm127v1 48.55 48.91 49.46 T:ketjejrv1 63.48 63.87 65.06 T:deoxysneq128128v13 68.30 68.62 71.08 T:ketjejrv2 70.91 71.06 71.23 T:present80n6t4silcv3 102.94 104.23 104.48 T:deoxysneq256128v13 126.28 126.35 126.53 T:led80n6t4silcv3 126.31 128.42 132.29 T:deoxyseq128128v13 128.96 135.56 136.92 T:aezv1 206.22 207.04 207.60 T:deoxyseq256128v13 397.36 415.43 422.89 T:acorn128 3583.57 3615.78 3630.96 T:led80n6silcv1 3620.88 3626.68 3656.45 T:led80n6t4silcv2 3843.10 3867.16 3900.58 T:present80n6silcv1 3844.62 3873.32 3903.16 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.27 0.27 0.28 aegis128l 0.33 0.34 0.34 T:tiaoxinv1 0.33 0.34 0.35 T:tiaoxinv2 0.40 0.40 0.41 T:aegis128 0.41 0.42 0.42 aegis256 0.42 0.43 0.43 T:aezv4 0.42 0.43 0.45 T:aezv3 0.46 0.47 0.48 T:aezv5 0.48 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.56 0.57 0.57 T:aes128otrsv3 0.57 0.59 0.61 T:aeadaes192ocbtaglen128v1 0.65 0.67 0.68 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.72 T:aes256otrpv3 0.70 0.72 0.73 T:aes256otrcv3 0.69 0.72 0.73 T:aes256otrsv3 0.87 0.89 0.91 T:deoxysi128v141 0.92 0.94 0.96 T:deoxysneq128128v1 0.94 0.95 0.96 T:aes128gcmv1 0.97 0.98 0.99 T:morus1280128v2 0.97 0.98 0.99 T:morus1280256v1 0.97 0.98 0.99 T:morus1280128v1 0.97 0.98 0.99 T:morus1280256v2 0.97 0.99 1.00 T:deoxysi256v141 1.05 1.07 1.08 T:deoxysneq256128v1 1.12 1.13 1.15 T:morus640128v1 1.11 1.13 1.16 T:morus640128v2 1.14 1.15 1.16 aes256gcmv1 1.60 1.61 1.63 T:deoxysii128v141 1.80 1.82 1.83 T:deoxysii256v141 1.83 1.84 1.84 T:deoxyseq128128v1 1.83 1.86 1.91 T:colm0v1 2.03 2.04 2.06 T:deoxyseq256128v1 1.98? 2.05? 2.21? T:lunarkeyakv2 2.06 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.11 T:aes128n12t8clocv2 2.06 2.06 2.06 T:aes128n12t8clocv3 2.06 2.06 2.11 T:aes128n12t8silcv3 2.00 2.11 2.12 T:aes128n12t8silcv2 2.01 2.12 2.12 T:aes128n8t8silcv2 2.29 2.32 2.35 T:norx6444v3 2.50 2.53 2.55 T:norx6441v3 2.51 2.56 2.59 T:norx6441v2 2.72 2.75 2.76 T:seakeyakv2 2.77 2.84 2.92 T:oceankeyakv2 3.01 3.06 3.12 T:norx6441v1 3.07 3.09 3.13 T:lakekeyakv1 3.18 3.20 3.23 T:lakekeyakv2 3.40 3.45 3.51 T:norx6444v2 3.64 3.70 3.75 T:norx3241v3 3.67 3.72 3.76 T:norx3241v2 3.80 3.85 3.93 T:norx6461v2 3.82 3.88 3.91 T:norx6461v3 3.87 3.92 3.99 T:norx6444v1 4.39 4.46 4.50 T:norx3241v1 4.56 4.56 4.57 T:aesjambuv1 4.58 4.61 4.68 T:norx6461v1 4.89 4.93 5.01 T:acorn128v2 5.21 5.23 5.25 T:acorn128v3 5.52 5.58 5.69 T:ketjemajorv2 5.63 5.82 5.89 T:norx3261v3 5.79 5.84 5.89 T:norx3261v2 6.16 6.18 6.20 ascon128av12 6.29 6.32 6.33 T:ascon128av11 6.27 6.32 6.34 T:ascon96v1 7.23 7.26 7.30 T:norx3261v1 6.94 7.41 7.55 T:ketjeminorv2 7.36 7.41 7.47 T:riverkeyakv2 9.06 9.10 9.16 T:ascon128v11 9.06 9.16 9.19 T:ascon128v1 9.18 9.20 9.22 ascon128v12 11.89 11.95 12.01 T:aes128otrpv1 11.92 12.07 12.17 T:aes128otrpv2 12.17 12.19 12.22 T:aes128otrsv1 12.54 12.57 12.61 T:aes128otrsv2 14.50 14.53 14.54 T:twine80n6t4clocv3 15.42 15.45 15.51 T:aes256otrpv1 15.42 15.50 15.63 T:aes256otrpv2 15.55 15.57 15.60 T:twine80n6t4clocv2 15.67 15.70 15.76 T:aes256otrsv1 15.71 15.75 15.80 T:aes256otrsv2 19.08 19.22 19.77 T:proest256otrv1 21.21 21.25 21.30 T:aes128n8clocv1 21.22 21.27 21.29 T:aes128n12clocv1 27.76 28.11 28.47 T:ketjesrv2 28.00 28.18 28.34 T:ketjesrv1 30.45 30.49 30.52 T:aeadaes128ocbtaglen64v1 30.45 30.50 30.52 T:aeadaes128ocbtaglen96v1 36.35 36.40 36.43 T:aeadaes192ocbtaglen96v1 36.37 36.41 36.47 T:aeadaes192ocbtaglen64v1 42.35 42.39 42.41 T:aeadaes256ocbtaglen64v1 42.40 42.44 42.70 T:aeadaes256ocbtaglen96v1 42.52 42.58 42.64 T:proest128otrv1 48.68 49.44 52.90 T:ketjejrv1 64.42 64.44 64.48 T:colm127v1 69.70 70.03 71.99 T:ketjejrv2 70.89 70.98 71.12 T:present80n6t4silcv3 86.82 86.98 88.04 T:deoxysneq128128v13 125.98 126.08 126.98 T:led80n6t4silcv3 126.60 128.55 131.52 T:deoxyseq128128v13 130.24 131.04 131.20 T:deoxysneq256128v13 129.13 135.74 136.99 T:aezv1 206.42 206.94 207.61 T:deoxyseq256128v13 399.24 405.18 422.22 T:acorn128 3588.21 3607.40 3628.32 T:led80n6silcv1 3608.28 3633.60 3653.01 T:led80n6t4silcv2 3840.76 3869.15 3874.66 T:present80n6t4silcv2 3868.12 3874.96 3892.75 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.15 0.16 0.16 T:aezv4 0.16 0.16 0.17 T:aezv3 0.18 0.19 0.19 T:aezv5 0.27 0.27 0.28 aegis128l 0.33? 0.34? 0.37? T:tiaoxinv2 0.33? 0.34? 0.37? T:tiaoxinv1 0.40 0.40 0.41 T:aegis128 0.42? 0.47? 0.48? aegis256 0.48 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrsv3 0.57 0.57 0.57 T:aes128otrpv3 0.58? 0.59? 2.24? T:aeadaes192ocbtaglen128v1 0.64 0.64 0.66 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.71 T:aes256otrpv3 0.70 0.72 0.73 T:aes256otrsv3 0.70 0.72 0.72 T:aes256otrcv3 0.88 0.89 0.92 T:deoxysi128v141 0.91 0.95 0.96 T:deoxysneq128128v1 0.95 0.96 0.96 T:aes128gcmv1 0.97 0.97 0.98 T:morus1280128v1 0.97 0.98 0.98 T:morus1280256v1 0.97 0.98 0.99 T:morus1280128v2 0.97 0.98 0.99 T:morus1280256v2 0.99 1.02 1.03 T:deoxysi256v141 1.05 1.07 1.08 T:deoxysneq256128v1 1.11 1.13 1.15 T:morus640128v2 1.12 1.13 1.15 T:morus640128v1 1.14 1.15 1.16 aes256gcmv1 1.60 1.62 1.62 T:deoxysii128v141 1.81 1.82 1.84 T:deoxysii256v141 1.82 1.84 1.85 T:colm0v1 1.84 1.85 1.87 T:deoxyseq128128v1 2.04 2.06 2.09 T:deoxyseq256128v1 2.01 2.06 2.06 T:aes128n8t8clocv2 1.99 2.06 2.13 T:aes128n8t8silcv2 2.01 2.06 2.06 T:aes128n12t8clocv3 2.00 2.06 2.13 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.08 2.15 T:lunarkeyakv2 2.02 2.11 2.11 T:aes128n12t8clocv2 2.28 2.30 2.35 T:norx6444v3 2.46 2.49 2.53 T:norx6441v3 2.49 2.56 2.58 T:norx6441v2 2.76 2.79 2.81 T:seakeyakv2 2.81 2.84 3.01 T:oceankeyakv2 3.04 3.08 3.15 T:norx6441v1 3.10 3.12 3.13 T:lakekeyakv1 3.19 3.21 3.23 T:lakekeyakv2 3.42 3.44 3.47 T:norx6444v2 3.65 3.69 3.73 T:norx3241v3 3.69 3.74 3.78 T:norx3241v2 3.78 3.83 3.88 T:norx6461v2 3.84 3.87 3.90 T:norx6461v3 3.89 3.92 3.97 T:norx6444v1 4.38 4.41 4.44 T:norx3241v1 4.56 4.57 4.57 T:aesjambuv1 4.59 4.65 4.70 T:norx6461v1 4.90 4.94 5.01 T:acorn128v2 5.23 5.24 5.26 T:acorn128v3 5.57 5.62 5.70 T:ketjemajorv2 5.80 5.83 5.88 T:norx3261v2 5.63 5.84 5.90 T:norx3261v3 6.17 6.19 6.20 ascon128av12 6.28 6.31 6.33 T:ascon128av11 6.26 6.32 6.34 T:ascon96v1 7.22 7.25 7.27 T:norx3261v1 6.92 7.40 7.55 T:ketjeminorv2 7.39 7.42 7.45 T:riverkeyakv2 9.05 9.10 9.17 T:ascon128v11 9.12 9.16 9.18 T:ascon128v1 9.18 9.20 9.21 ascon128v12 11.92 11.97 12.02 T:aes128otrpv1 11.97 12.02 12.16 T:aes128otrpv2 12.18 12.26 12.28 T:aes128otrsv1 12.57 12.61 12.65 T:aes128otrsv2 14.48 14.53 14.55 T:twine80n6t4clocv3 15.42 15.51 15.57 T:aes256otrpv1 15.54 15.59 15.61 T:twine80n6t4clocv2 15.46 15.67 15.71 T:aes256otrpv2 15.70 15.74 15.79 T:aes256otrsv1 15.75 15.80 15.85 T:aes256otrsv2 19.06 19.20 19.86 T:proest256otrv1 21.20 21.25 21.29 T:aes128n12clocv1 21.19 21.25 21.37 T:aes128n8clocv1 27.79 27.83 27.96 T:ketjesrv2 27.90 28.08 28.27 T:ketjesrv1 30.42 30.46 30.50 T:aeadaes128ocbtaglen64v1 30.44 30.51 30.54 T:aeadaes128ocbtaglen96v1 36.38 36.42 36.46 T:aeadaes192ocbtaglen64v1 36.39 36.43 36.44 T:aeadaes192ocbtaglen96v1 42.35 42.39 42.43 T:aeadaes256ocbtaglen64v1 42.40 42.43 42.59 T:aeadaes256ocbtaglen96v1 42.47 42.54 42.64 T:proest128otrv1 49.25 49.46 50.11 T:ketjejrv1 63.42 63.45 63.52 T:colm127v1 69.73 69.95 71.80 T:ketjejrv2 70.87 70.95 71.03 T:present80n6t4silcv3 86.82 87.18 88.09 T:deoxysneq128128v13 125.97 126.07 126.74 T:led80n6t4silcv3 126.78 128.59 131.61 T:deoxyseq128128v13 130.23 131.02 131.23 T:deoxysneq256128v13 128.43 135.52 136.94 T:aezv1 207.03 207.47 207.63 T:deoxyseq256128v13 402.46 419.67 430.75 T:acorn128 3576.58 3608.63 3643.94 T:led80n6t4silcv2 3597.50 3625.23 3641.66 T:led80n6silcv1 3815.89 3871.87 3887.65 T:present80n6t4silcv2 3868.52 3900.00 3908.57 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.16? 0.18? 0.18? T:tiaoxinv1 0.16? 0.18? 0.18? T:tiaoxinv2 0.20? 0.21? 0.24? aegis128l 0.29 0.31 0.32 T:aezv4 0.31 0.32 0.33 T:aezv3 0.33 0.34 0.35 T:aezv5 0.36 0.37 0.38 aegis256 0.37 0.37 0.38 T:aegis128 0.43 0.45 0.46 T:aeadaes128ocbtaglen128v1 0.40? 0.51? 0.55? T:aeadaes192ocbtaglen128v1 0.53 0.54 0.55 T:aes128otrcv3 0.55 0.55 0.56 T:aes128otrpv3 0.62 0.64 0.65 T:aeadaes256ocbtaglen128v1 0.67 0.68 0.69 T:aes128gcmv1 0.69 0.69 0.70 T:aes256otrcv3 0.70 0.70 0.71 T:aes256otrpv3 0.72 0.74 0.75 aes256gcmv1 0.80 0.81 0.83 T:deoxysi128v141 0.86 0.86 0.87 T:deoxysneq128128v1 0.89 0.91 0.92 T:deoxysi256v141 0.91 0.92 0.93 T:morus1280256v1 0.91 0.92 0.93 T:morus1280128v1 0.91 0.92 0.93 T:morus1280256v2 0.91 0.92 0.94 T:morus1280128v2 0.96 0.97 0.98 T:deoxysneq256128v1 1.08 1.09 1.11 T:morus640128v2 1.09 1.10 1.11 T:morus640128v1 1.20 1.21 1.22 T:deoxysii128v141 1.23 1.24 1.24 T:colm0v1 1.29 1.29 1.30 T:aes128otrsv3 1.34 1.35 1.36 T:deoxyseq128128v1 1.34 1.36 1.37 T:deoxysii256v141 1.52 1.54 1.55 T:deoxyseq256128v1 1.74 1.74 1.75 T:aes256otrsv3 2.09 2.09 2.09 T:aes128n8t8clocv2 2.09 2.09 2.10 T:aes128n12t8clocv3 2.09 2.09 2.10 T:aes128n12t8silcv3 2.09 2.10 2.10 T:aes128n8t8silcv2 2.09 2.10 2.10 T:aes128n12t8silcv2 2.09 2.10 2.10 T:aes128n12t8clocv2 2.26 2.28 2.29 T:seakeyakv2 2.25 2.31 2.34 T:oceankeyakv2 2.56 2.59 2.63 T:norx6441v2 2.60 2.62 2.64 T:norx6441v3 2.77 2.81 2.86 T:lunarkeyakv2 2.78 2.81 2.84 T:lakekeyakv2 2.81 2.83 2.86 T:norx6444v3 2.94 2.98 3.01 T:lakekeyakv1 3.10 3.13 3.16 T:norx6441v1 3.27 3.29 3.33 T:norx6444v2 3.86 3.89 3.91 T:norx6461v3 3.85 3.90 3.92 T:norx6444v1 3.88 3.91 3.94 T:norx3241v3 3.86 3.91 3.95 T:norx6461v2 3.87 3.92 3.97 T:norx3241v2 4.21 4.22 4.22 T:aesjambuv1 4.57 4.60 4.65 T:norx6461v1 4.67 4.71 4.78 T:norx3241v1 4.98 5.07 5.11 T:acorn128v3 4.94 5.09 5.33 T:acorn128v2 5.08 5.11 5.16 T:ketjemajorv2 5.17 5.19 5.22 T:riverkeyakv2 5.81 5.95 6.06 T:norx3261v3 5.93 5.97 5.99 T:norx3261v2 6.17 6.19 6.20 ascon128av12 6.32 6.34 6.36 T:ascon128av11 6.32 6.34 6.36 T:ascon96v1 6.55 6.66 6.69 T:ketjeminorv2 7.37 7.39 7.42 T:norx3261v1 9.10 9.15 9.17 T:ascon128v1 9.14 9.15 9.21 T:ascon128v11 9.21 9.22 9.24 ascon128v12 11.02 11.23 11.28 T:aes128otrsv2 11.30 11.32 11.34 T:aes128otrpv1 11.31 11.34 11.35 T:aes128otrpv2 11.55 11.58 11.64 T:aes128otrsv1 14.32 14.33 14.33 T:twine80n6t4clocv3 14.20 14.44 14.49 T:aes256otrsv1 14.48 14.51 14.53 T:aes256otrsv2 14.84 14.86 14.88 T:aes256otrpv1 14.85 14.87 14.89 T:aes256otrpv2 15.28 15.30 15.32 T:twine80n6t4clocv2 15.29 15.31 15.35 T:aes128n12clocv1 15.29 15.32 15.34 T:aes128n8clocv1 18.90 19.20 19.49 T:proest256otrv1 22.13 22.15 22.18 T:aeadaes128ocbtaglen96v1 22.13 22.16 22.19 T:aeadaes128ocbtaglen64v1 26.15 26.20 26.26 T:ketjesrv1 26.26 26.31 26.33 T:aeadaes192ocbtaglen64v1 26.30 26.32 26.34 T:aeadaes192ocbtaglen96v1 26.39 26.61 26.78 T:ketjesrv2 30.49 30.53 30.62 T:aeadaes256ocbtaglen96v1 30.50 30.56 30.65 T:aeadaes256ocbtaglen64v1 35.71 35.78 35.80 T:colm127v1 43.41 43.73 43.96 T:proest128otrv1 44.47 44.83 44.93 T:ketjejrv1 61.78 62.19 63.57 T:deoxysneq128128v13 67.29 67.49 69.74 T:ketjejrv2 70.12 70.15 70.22 T:present80n6t4silcv3 83.98 85.80 85.87 T:aezv1 94.02 94.66 96.73 T:deoxyseq128128v13 103.41 104.36 105.02 T:deoxysneq256128v13 125.71 125.74 125.84 T:led80n6t4silcv3 154.68 155.22 155.70 T:deoxyseq256128v13 402.44 414.57 420.39 T:acorn128 2682.53 2698.87 2718.90 T:led80n6silcv1 2679.37 2714.42 2737.53 T:led80n6t4silcv2 2854.91 2889.57 2913.80 T:present80n6silcv1 2884.04 2898.73 2908.46 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.21 0.22 0.23 aegis128l 0.21 0.23 0.23 T:tiaoxinv1 0.21? 0.23? 0.24? T:tiaoxinv2 0.31 0.31 0.32 T:aezv4 0.30 0.31 0.32 T:aezv3 0.33 0.34 0.35 T:aezv5 0.35 0.36 0.36 T:aegis128 0.36 0.36 0.38 aegis256 0.45 0.46 0.47 T:aeadaes128ocbtaglen128v1 -0.28? 0.53? 1.36? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.64 0.66 0.67 T:aeadaes256ocbtaglen128v1 0.67 0.69 0.70 T:aes128gcmv1 0.71 0.71 0.72 T:aes256otrcv3 0.72 0.72 0.73 T:aes256otrpv3 0.78 0.79 0.80 aes256gcmv1 0.84 0.85 0.87 T:deoxysi128v141 0.89 0.91 0.92 T:deoxysneq128128v1 0.91 0.91 0.93 T:morus1280128v2 0.91 0.92 0.93 T:morus1280256v2 0.91 0.92 0.93 T:morus1280256v1 0.91 0.92 0.93 T:morus1280128v1 0.92 0.94 0.96 T:deoxysi256v141 1.00 1.02 1.03 T:deoxysneq256128v1 1.08 1.10 1.12 T:morus640128v1 1.09 1.11 1.11 T:morus640128v2 1.21 1.21 1.23 T:deoxysii128v141 1.27 1.28 1.29 T:colm0v1 1.31 1.32 1.32 T:aes128otrsv3 1.35 1.36 1.37 T:deoxysii256v141 1.36 1.37 1.38 T:deoxyseq128128v1 1.53 1.54 1.56 T:deoxyseq256128v1 1.76 1.76 1.77 T:aes256otrsv3 2.03 2.04 2.06 T:aes128n8t8silcv2 2.04 2.04 2.06 T:aes128n12t8silcv2 2.06 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128n12t8clocv3 2.05 2.07 2.07 T:aes128n12t8clocv2 2.30 2.32 2.33 T:seakeyakv2 2.31 2.35 2.38 T:oceankeyakv2 2.54 2.57 2.62 T:norx6441v3 2.55 2.59 2.61 T:norx6441v2 2.81 2.82 2.85 T:lakekeyakv2 2.81 2.84 2.86 T:norx6444v3 2.79 2.84 2.89 T:lunarkeyakv2 2.92 2.96 2.99 T:lakekeyakv1 3.05 3.09 3.15 T:norx6441v1 3.22 3.26 3.32 T:norx6444v2 3.82 3.85 3.88 T:norx6461v3 3.77 3.86 3.89 T:norx3241v3 3.82 3.89 3.94 T:norx6444v1 3.86 3.91 3.96 T:norx6461v2 3.88 3.92 3.95 T:norx3241v2 4.38 4.39 4.39 T:aesjambuv1 4.55 4.61 4.67 T:norx3241v1 4.57 4.62 4.68 T:norx6461v1 4.76 4.87 4.95 T:ketjemajorv2 5.04 5.12 5.39 T:acorn128v3 5.00 5.27 5.30 T:acorn128v2 5.25 5.28 5.30 T:riverkeyakv2 5.77 5.84 5.89 T:norx3261v2 5.76 5.93 6.04 T:norx3261v3 6.15 6.16 6.17 ascon128av12 6.27 6.29 6.32 T:ascon128av11 6.29 6.31 6.34 T:ascon96v1 6.52 6.78 6.85 T:ketjeminorv2 7.30 7.32 7.34 T:norx3261v1 9.00 9.05 9.09 T:ascon128v1 9.06 9.08 9.11 T:ascon128v11 9.17 9.20 9.20 ascon128v12 11.19 11.38 11.42 T:aes128otrsv2 11.36 11.38 11.40 T:aes128otrpv1 11.42 11.43 11.46 T:aes128otrsv1 11.40 11.48 11.52 T:aes128otrpv2 14.32 14.33 14.34 T:twine80n6t4clocv3 14.32 14.57 14.61 T:aes256otrsv1 14.63 14.66 14.70 T:aes256otrsv2 14.90 14.94 14.97 T:aes256otrpv1 14.93 14.95 15.05 T:aes256otrpv2 15.23 15.26 15.28 T:twine80n6t4clocv2 15.65 15.71 15.75 T:aes128n12clocv1 15.68 15.73 15.74 T:aes128n8clocv1 18.83 19.18 19.48 T:proest256otrv1 26.16 26.18 26.21 T:aeadaes128ocbtaglen64v1 26.17 26.18 26.22 T:aeadaes128ocbtaglen96v1 26.51 26.63 26.74 T:ketjesrv1 26.69 26.99 27.14 T:ketjesrv2 31.19 31.21 31.25 T:aeadaes192ocbtaglen64v1 31.19 31.23 31.27 T:aeadaes192ocbtaglen96v1 36.25 36.30 36.37 T:aeadaes256ocbtaglen64v1 36.31 36.35 36.40 T:aeadaes256ocbtaglen96v1 42.79 43.36 43.48 T:proest128otrv1 43.80 43.87 43.96 T:colm127v1 44.67 44.86 44.97 T:ketjejrv1 67.85 68.04 70.08 T:ketjejrv2 70.08 70.12 70.20 T:present80n6t4silcv3 73.51 73.72 75.35 T:deoxysneq128128v13 84.65 85.75 85.96 T:aezv1 93.97 94.66 96.76 T:deoxyseq128128v13 117.60 117.98 118.49 T:deoxysneq256128v13 125.59 125.62 125.81 T:led80n6t4silcv3 154.77 155.36 155.76 T:deoxyseq256128v13 408.71 416.57 434.83 T:acorn128 2675.02 2702.20 2709.02 T:led80n6t4silcv2 2681.30 2715.65 2731.77 T:led80n6silcv1 2851.63 2888.87 2906.24 T:present80n6silcv1 2876.93 2893.86 2904.18 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.17? 0.17? 0.20? T:aezv4 0.17? 0.18? 0.21? T:aezv3 0.17? 0.19? 0.23? T:aezv5 0.21 0.22 0.22 aegis128l 0.23 0.23 0.24 T:tiaoxinv2 0.23 0.23 0.25 T:tiaoxinv1 0.36 0.36 0.36 T:aegis128 0.39 0.40 0.40 aegis256 0.46 0.46 0.47 T:aeadaes128ocbtaglen128v1 0.52 0.53 0.54 T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrpv3 0.64 0.65 0.65 T:aeadaes256ocbtaglen128v1 0.68 0.70 0.70 T:aes128gcmv1 0.70 0.71 0.71 T:aes256otrcv3 0.71 0.72 0.72 T:aes256otrpv3 0.78 0.79 0.80 aes256gcmv1 0.84 0.85 0.87 T:deoxysi128v141 0.89 0.91 0.92 T:deoxysneq128128v1 0.91 0.91 0.92 T:morus1280128v2 0.91 0.92 0.92 T:morus1280128v1 0.91 0.92 0.92 T:morus1280256v1 0.92 0.92 0.92 T:morus1280256v2 0.93 0.95 0.96 T:deoxysi256v141 1.00 1.02 1.03 T:deoxysneq256128v1 1.08 1.10 1.11 T:morus640128v1 1.09 1.10 1.11 T:morus640128v2 1.21 1.22 1.22 T:deoxysii128v141 1.27 1.28 1.29 T:colm0v1 1.31 1.32 1.32 T:aes128otrsv3 1.36 1.37 1.38 T:deoxyseq128128v1 1.36 1.37 1.38 T:deoxysii256v141 1.53 1.54 1.55 T:deoxyseq256128v1 1.75 1.76 1.77 T:aes256otrsv3 2.03 2.03 2.10 T:aes128n8t8silcv2 2.03 2.03 2.10 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128n8t8clocv2 2.05 2.06 2.10 T:aes128n12t8clocv3 2.04 2.07 2.10 T:aes128n12t8clocv2 2.31 2.34 2.35 T:seakeyakv2 2.34 2.36 2.38 T:oceankeyakv2 2.54 2.55 2.62 T:norx6441v3 2.55 2.57 2.60 T:norx6441v2 2.82 2.83 2.84 T:lakekeyakv2 2.82 2.84 2.90 T:lunarkeyakv2 2.84 2.85 2.87 T:norx6444v3 2.95 2.97 3.00 T:lakekeyakv1 3.05 3.11 3.14 T:norx6441v1 3.26 3.28 3.31 T:norx6444v2 3.77 3.81 3.87 T:norx3241v3 3.84 3.86 3.88 T:norx6461v3 3.86 3.88 3.90 T:norx3241v2 3.85 3.88 3.92 T:norx6461v2 3.85 3.91 3.95 T:norx6444v1 4.38 4.39 4.39 T:aesjambuv1 4.55 4.59 4.62 T:norx6461v1 4.58 4.62 4.66 T:norx3241v1 4.84 4.95 4.98 T:ketjemajorv2 5.03 5.11 5.39 T:acorn128v3 5.00 5.26 5.30 T:acorn128v2 5.27 5.29 5.30 T:riverkeyakv2 5.80 5.84 5.87 T:norx3261v2 5.79 5.93 6.02 T:norx3261v3 6.15 6.17 6.18 ascon128av12 6.29 6.31 6.32 T:ascon128av11 6.30 6.33 6.35 T:ascon96v1 6.57 6.78 6.85 T:ketjeminorv2 7.31 7.33 7.35 T:norx3261v1 9.02 9.05 9.08 T:ascon128v1 9.06 9.07 9.09 T:ascon128v11 9.19 9.20 9.22 ascon128v12 11.36 11.39 11.41 T:aes128otrpv1 11.21 11.42 11.43 T:aes128otrsv2 11.41 11.44 11.52 T:aes128otrpv2 11.43 11.46 11.49 T:aes128otrsv1 14.32 14.33 14.34 T:twine80n6t4clocv3 14.34 14.62 14.64 T:aes256otrsv1 14.65 14.67 14.71 T:aes256otrsv2 14.93 14.98 15.01 T:aes256otrpv1 14.96 15.04 15.06 T:aes256otrpv2 15.24 15.27 15.28 T:twine80n6t4clocv2 15.66 15.70 15.72 T:aes128n12clocv1 15.69 15.72 15.75 T:aes128n8clocv1 18.86 19.19 19.50 T:proest256otrv1 26.15 26.17 26.19 T:aeadaes128ocbtaglen64v1 26.15 26.18 26.23 T:aeadaes128ocbtaglen96v1 26.51 26.60 26.74 T:ketjesrv1 27.02 27.06 27.42 T:ketjesrv2 31.19 31.21 31.22 T:aeadaes192ocbtaglen64v1 31.21 31.23 31.25 T:aeadaes192ocbtaglen96v1 36.32 36.34 36.41 T:aeadaes256ocbtaglen64v1 36.31 36.35 36.47 T:aeadaes256ocbtaglen96v1 42.63 43.25 43.35 T:proest128otrv1 43.29 43.35 43.38 T:colm127v1 44.57 44.87 45.00 T:ketjejrv1 67.86 68.02 70.16 T:ketjejrv2 70.06 70.12 70.18 T:present80n6t4silcv3 73.38 73.62 75.31 T:deoxysneq128128v13 84.14 85.71 85.99 T:aezv1 93.87 94.39 96.84 T:deoxyseq128128v13 117.16 117.71 118.48 T:deoxysneq256128v13 125.52 125.59 125.66 T:led80n6t4silcv3 155.42 155.70 157.88 T:deoxyseq256128v13 397.34 406.34 417.41 T:acorn128 2672.94 2684.88 2712.15 T:led80n6t4silcv2 2684.36 2704.67 2730.25 T:led80n6silcv1 2853.16 2890.02 2912.19 T:present80n6silcv1 2868.87 2892.38 2902.92 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.12? 0.13? 0.14? T:tiaoxinv2 0.12? 0.13? 0.15? T:tiaoxinv1 0.16? 0.17? 0.18? aegis128l 0.19 0.19 0.21 T:aezv4 0.19 0.20 0.21 T:aezv3 0.20? 0.22? 0.24? T:aezv5 0.31 0.32 0.33 aegis256 0.36 0.36 0.37 T:aegis128 0.42 0.43 0.43 T:aes128gcmv1 0.41 0.43 0.45 T:aeadaes128ocbtaglen128v1 0.43 0.44 0.44 aes256gcmv1 0.34? 0.47? 2.11? T:aeadaes192ocbtaglen128v1 0.55 0.56 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.63 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.72 T:colm0v1 0.71 0.72 0.73 T:aes256otrcv3 0.72 0.73 0.74 T:aes256otrpv3 0.81 0.81 0.82 T:deoxysi128v141 0.81 0.82 0.82 T:deoxysii128v141 0.85 0.86 0.87 T:morus1280256v1 0.86 0.86 0.87 T:morus1280128v1 0.85 0.86 0.87 T:deoxysneq128128v1 0.87 0.88 0.89 T:morus1280128v2 0.87 0.88 0.88 T:morus1280256v2 0.89 0.90 0.91 T:deoxyseq128128v1 0.90 0.91 0.92 T:deoxysi256v141 0.90 0.91 0.92 T:deoxysii256v141 0.96 0.97 0.98 T:deoxysneq256128v1 1.01 1.02 1.02 T:deoxyseq256128v1 1.04 1.06 1.08 T:morus640128v1 1.03 1.06 1.09 T:morus640128v2 1.77 1.81 1.86 T:lunarkeyakv2 1.79 1.84 1.96 T:oceankeyakv2 2.05 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.07 2.07 T:aes128n12t8clocv2 2.20 2.22 2.23 T:seakeyakv2 2.53 2.55 2.59 T:norx6441v2 2.52 2.55 2.58 T:lakekeyakv2 2.56 2.60 2.64 T:norx6441v3 2.74 2.77 2.79 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.07 3.10 3.15 T:norx6441v1 3.13 3.15 3.17 T:norx6444v2 3.31 3.35 3.37 T:norx6444v3 3.84 3.86 3.88 T:norx6444v1 3.81 3.88 3.91 T:norx6461v3 3.78 3.88 3.94 T:norx6461v2 3.88 3.94 4.04 T:norx3241v3 3.90 3.95 3.98 T:norx3241v2 4.03 4.14 4.29 T:ketjemajorv2 4.19 4.20 4.20 T:aesjambuv1 4.56 4.60 4.66 T:norx6461v1 4.75 4.82 4.87 T:norx3241v1 4.80 4.83 4.85 T:riverkeyakv2 4.95 4.97 5.27 T:acorn128v3 5.06 5.12 5.32 T:acorn128v2 5.84 5.90 5.99 T:norx3261v2 5.84 6.04 6.11 T:norx3261v3 6.14 6.15 6.16 ascon128av12 6.16 6.31 6.39 T:ketjeminorv2 6.30 6.31 6.33 T:ascon128av11 6.30 6.33 6.34 T:ascon96v1 7.38 7.42 7.44 T:norx3261v1 9.01 9.05 9.06 T:ascon128v11 9.04 9.06 9.07 T:ascon128v1 9.21 9.22 9.24 ascon128v12 9.77 9.80 9.81 T:aes128otrsv2 10.09 10.12 10.14 T:aes128n8clocv1 10.11 10.13 10.16 T:aes128n12clocv1 10.25 10.29 10.33 T:aes128otrsv1 10.85 10.88 10.90 T:aes128otrpv2 10.85 10.88 10.90 T:aes128otrpv1 12.89 12.92 12.95 T:aes256otrsv1 12.94 12.97 12.98 T:aes256otrsv2 14.12 14.13 14.13 T:twine80n6t4clocv3 14.41 14.44 14.48 T:aes256otrpv1 14.41 14.44 14.48 T:aes256otrpv2 14.94 14.97 15.00 T:twine80n6t4clocv2 19.29 19.68 19.76 T:proest256otrv1 21.83 21.90 21.93 T:aeadaes128ocbtaglen64v1 21.88 21.91 21.94 T:aeadaes128ocbtaglen96v1 23.11 23.17 23.21 T:colm127v1 25.03 25.13 25.22 T:ketjesrv1 26.00 26.02 26.06 T:aeadaes192ocbtaglen64v1 25.88 26.02 26.07 T:aeadaes192ocbtaglen96v1 25.91 26.21 26.26 T:ketjesrv2 30.19 30.23 30.27 T:aeadaes256ocbtaglen96v1 30.22 30.26 30.28 T:aeadaes256ocbtaglen64v1 40.75 41.02 41.31 T:ketjejrv1 41.01 43.66 43.89 T:aezv1 43.21 43.84 43.96 T:proest128otrv1 61.78 62.47 63.96 T:deoxyseq128128v13 63.04 63.68 64.17 T:deoxysneq128128v13 66.10 66.53 68.70 T:ketjejrv2 69.26 69.30 69.33 T:present80n6t4silcv3 102.97 103.13 103.29 T:deoxyseq256128v13 102.44 103.53 104.68 T:deoxysneq256128v13 125.11 125.25 125.81 T:led80n6t4silcv3 401.79 410.74 427.47 T:acorn128 1788.58 1809.98 1819.21 T:led80n6t4silcv2 1793.00 1813.44 1857.46 T:led80n6silcv1 1932.11 1935.83 1967.86 T:present80n6t4silcv2 1911.12 1936.59 1971.92 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.12? 0.13? 0.15? T:tiaoxinv1 0.12? 0.14? 0.18? T:tiaoxinv2 0.16? 0.17? 0.18? aegis128l 0.18? 0.20? 0.21? T:aezv4 0.20 0.20 0.22 T:aezv3 0.21 0.22 0.23 T:aezv5 0.31 0.32 0.32 T:aegis128 0.31? 0.32? 0.36? aegis256 0.41 0.42 0.45 T:aeadaes128ocbtaglen128v1 0.42 0.43 0.44 aes256gcmv1 0.43 0.44 0.44 T:aes128gcmv1 -1.13? 0.47? 0.48? T:aeadaes192ocbtaglen128v1 0.55 0.56 0.56 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrpv3 0.64 0.66 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.71 T:aes256otrcv3 0.68 0.71 0.73 T:colm0v1 0.72 0.73 0.74 T:aes256otrpv3 0.80 0.82 0.82 T:deoxysii128v141 0.81 0.82 0.83 T:deoxysi128v141 0.85 0.86 0.87 T:morus1280256v1 0.85 0.86 0.87 T:morus1280128v1 0.85 0.86 0.87 T:morus1280128v2 0.86 0.87 0.88 T:deoxysneq128128v1 0.85 0.87 0.87 T:morus1280256v2 0.89 0.90 0.90 T:deoxyseq128128v1 0.90 0.92 0.92 T:deoxysi256v141 0.90 0.92 0.93 T:deoxysii256v141 0.95 0.99 1.02 T:deoxysneq256128v1 1.02 1.03 1.04 T:deoxyseq256128v1 1.02 1.05 1.07 T:morus640128v2 1.05 1.07 1.08 T:morus640128v1 1.76 1.81 1.87 T:lunarkeyakv2 1.80 1.84 1.92 T:oceankeyakv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128otrsv3 2.05 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.07 2.12 T:aes128n12t8clocv2 2.01 2.12 2.12 T:aes128n12t8silcv2 2.00 2.12 2.12 T:aes128n8t8silcv2 2.21 2.22 2.25 T:seakeyakv2 2.55 2.57 2.59 T:lakekeyakv2 2.57 2.61 2.65 T:norx6441v3 2.59 2.62 2.66 T:norx6441v2 2.75 2.77 2.79 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.08 3.09 3.12 T:norx6444v2 3.07 3.12 3.17 T:norx6441v1 3.33 3.38 3.42 T:norx6444v3 3.84 3.87 3.89 T:norx6444v1 3.85 3.88 3.93 T:norx6461v3 3.86 3.93 4.00 T:norx6461v2 3.90 3.94 3.99 T:norx3241v3 3.96 4.03 4.07 T:norx3241v2 4.09 4.15 4.24 T:ketjemajorv2 4.21 4.22 4.22 T:aesjambuv1 4.51 4.57 4.70 T:norx6461v1 4.74 4.78 4.87 T:norx3241v1 4.80 4.83 4.84 T:riverkeyakv2 4.94 4.99 5.02 T:acorn128v3 4.95 5.03 5.06 T:acorn128v2 5.73 5.83 5.96 T:norx3261v2 5.87 6.02 6.23 T:norx3261v3 6.14 6.15 6.18 ascon128av12 6.15 6.31 6.40 T:ketjeminorv2 6.29 6.32 6.33 T:ascon128av11 6.32 6.34 6.35 T:ascon96v1 7.37 7.39 7.44 T:norx3261v1 9.05 9.09 9.11 T:ascon128v11 9.07 9.09 9.12 T:ascon128v1 9.20 9.21 9.22 ascon128v12 9.78 9.81 9.85 T:aes128otrsv2 10.11 10.14 10.17 T:aes128n12clocv1 10.12 10.16 10.18 T:aes128n8clocv1 10.28 10.31 10.37 T:aes128otrsv1 10.85 10.87 10.92 T:aes128otrpv1 10.88 10.90 10.94 T:aes128otrpv2 12.87 12.93 12.97 T:aes256otrsv1 12.91 12.95 13.01 T:aes256otrsv2 14.12 14.13 14.17 T:twine80n6t4clocv3 14.40 14.43 14.49 T:aes256otrpv2 14.38 14.43 14.48 T:aes256otrpv1 14.94 14.98 15.02 T:twine80n6t4clocv2 19.35 19.70 19.81 T:proest256otrv1 21.84 21.89 21.95 T:aeadaes128ocbtaglen96v1 21.85 21.90 21.93 T:aeadaes128ocbtaglen64v1 23.12 23.22 23.26 T:colm127v1 24.99 25.10 25.20 T:ketjesrv1 25.98 26.04 26.07 T:aeadaes192ocbtaglen96v1 26.00 26.05 26.08 T:aeadaes192ocbtaglen64v1 25.89 26.19 26.22 T:ketjesrv2 30.20 30.25 30.30 T:aeadaes256ocbtaglen96v1 30.23 30.26 30.30 T:aeadaes256ocbtaglen64v1 40.78 40.83 40.95 T:ketjejrv1 41.36 43.63 43.90 T:aezv1 43.39 43.84 43.92 T:proest128otrv1 61.90 62.42 63.72 T:deoxyseq128128v13 63.21 63.94 64.20 T:deoxysneq128128v13 66.04 66.47 68.83 T:ketjejrv2 69.23 69.28 69.38 T:present80n6t4silcv3 102.89 103.19 103.29 T:deoxyseq256128v13 102.50 103.53 104.61 T:deoxysneq256128v13 125.09 125.19 125.56 T:led80n6t4silcv3 397.99 408.09 415.27 T:acorn128 1790.42 1812.99 1842.49 T:led80n6silcv1 1783.53 1814.09 1821.06 T:led80n6t4silcv2 1917.18 1934.09 1943.16 T:present80n6silcv1 1909.64 1936.13 1943.67 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.12? 0.13? 0.14? T:tiaoxinv2 0.12? 0.13? 0.16? T:tiaoxinv1 0.16 0.16 0.17 aegis128l 0.18? 0.19? 0.20? T:aezv4 0.20 0.20 0.21 T:aezv3 0.21 0.22 0.22 T:aezv5 0.31 0.32 0.32 T:aegis128 0.31 0.32 0.33 aegis256 0.41 0.43 0.43 T:aeadaes128ocbtaglen128v1 0.42 0.43 0.43 aes256gcmv1 0.43 0.43 0.45 T:aes128gcmv1 0.45? 0.47? 2.10? T:aeadaes192ocbtaglen128v1 0.55 0.56 0.56 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrpv3 0.65 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.71 T:aes256otrcv3 0.70 0.71 0.72 T:colm0v1 0.72 0.73 0.74 T:aes256otrpv3 0.81 0.81 0.83 T:deoxysii128v141 0.81 0.83 0.86 T:deoxysi128v141 0.85 0.86 0.86 T:morus1280256v1 0.85 0.86 0.87 T:morus1280128v2 0.85 0.86 0.87 T:morus1280256v2 0.85 0.86 0.87 T:morus1280128v1 0.85 0.87 0.90 T:deoxysneq128128v1 0.89 0.89 0.90 T:deoxyseq128128v1 0.90 0.92 0.93 T:deoxysii256v141 0.91 0.93 0.95 T:deoxysi256v141 0.96 1.00 1.02 T:deoxysneq256128v1 1.02 1.03 1.05 T:deoxyseq256128v1 1.03 1.04 1.07 T:morus640128v2 1.03 1.06 1.08 T:morus640128v1 1.80 1.83 1.87 T:oceankeyakv2 1.75 1.84 1.91 T:lunarkeyakv2 2.05 2.06 2.06 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128otrsv3 2.01 2.11 2.12 T:aes128n12t8clocv2 2.06 2.13 2.13 T:aes128n8t8silcv2 2.06 2.13 2.13 T:aes128n12t8silcv2 2.18 2.22 2.25 T:seakeyakv2 2.52 2.56 2.58 T:lakekeyakv2 2.55 2.58 2.64 T:norx6441v3 2.58 2.60 2.67 T:norx6441v2 2.76 2.78 2.79 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.08 3.10 3.12 T:norx6444v2 3.08 3.13 3.20 T:norx6441v1 3.33 3.36 3.41 T:norx6444v3 3.84 3.87 3.89 T:norx6461v3 3.83 3.87 3.89 T:norx6444v1 3.85 3.91 4.01 T:norx6461v2 3.97 4.01 4.08 T:norx3241v2 3.94 4.02 4.16 T:norx3241v3 4.07 4.14 4.28 T:ketjemajorv2 4.21 4.21 4.22 T:aesjambuv1 4.53 4.65 4.70 T:norx6461v1 4.74 4.80 4.86 T:norx3241v1 4.81 4.82 4.83 T:riverkeyakv2 4.94 5.02 5.03 T:acorn128v3 4.95 5.04 5.06 T:acorn128v2 5.82 5.92 5.99 T:norx3261v2 5.86 6.05 6.32 T:norx3261v3 6.14 6.16 6.17 ascon128av12 6.26 6.30 6.32 T:ascon128av11 6.29 6.31 6.32 T:ascon96v1 6.16 6.34 6.41 T:ketjeminorv2 7.36 7.40 7.42 T:norx3261v1 9.07 9.10 9.11 T:ascon128v1 9.08 9.11 9.12 T:ascon128v11 9.21 9.22 9.22 ascon128v12 9.77 9.81 9.83 T:aes128otrsv2 10.11 10.14 10.15 T:aes128n12clocv1 10.11 10.15 10.17 T:aes128n8clocv1 10.22 10.35 10.37 T:aes128otrsv1 10.88 10.89 10.93 T:aes128otrpv1 10.86 10.91 10.92 T:aes128otrpv2 12.90 12.94 12.98 T:aes256otrsv1 12.94 12.96 13.00 T:aes256otrsv2 14.12 14.15 14.16 T:twine80n6t4clocv3 14.39 14.42 14.45 T:aes256otrpv1 14.42 14.45 14.49 T:aes256otrpv2 14.95 14.97 15.00 T:twine80n6t4clocv2 19.30 19.71 19.85 T:proest256otrv1 21.84 21.89 21.93 T:aeadaes128ocbtaglen64v1 21.84 21.90 21.96 T:aeadaes128ocbtaglen96v1 23.18 23.23 23.29 T:colm127v1 25.00 25.12 25.21 T:ketjesrv1 25.89 26.00 26.09 T:aeadaes192ocbtaglen96v1 26.00 26.05 26.11 T:aeadaes192ocbtaglen64v1 25.95 26.20 26.24 T:ketjesrv2 30.22 30.24 30.27 T:aeadaes256ocbtaglen96v1 30.22 30.25 30.27 T:aeadaes256ocbtaglen64v1 40.75 40.90 40.99 T:ketjejrv1 41.03 43.63 43.90 T:aezv1 43.28 43.84 43.94 T:proest128otrv1 61.80 62.41 63.62 T:deoxyseq128128v13 63.44 63.93 64.15 T:deoxysneq128128v13 66.02 66.50 68.62 T:ketjejrv2 69.21 69.26 69.34 T:present80n6t4silcv3 103.03 103.16 103.31 T:deoxyseq256128v13 102.91 103.53 104.61 T:deoxysneq256128v13 125.10 125.23 125.42 T:led80n6t4silcv3 398.00 408.45 415.57 T:acorn128 1783.68 1797.40 1818.42 T:led80n6t4silcv2 1804.89 1808.55 1817.29 T:led80n6silcv1 1932.90 1934.50 1942.14 T:present80n6t4silcv2 1933.02 1936.73 1969.53 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.22 0.22 0.24 T:tiaoxinv2 0.22 0.22 0.23 T:tiaoxinv1 0.24? 0.25? 0.27? aegis128l 0.35 0.36 0.36 T:aezv4 0.37 0.37 0.40 T:aezv3 0.39 0.40 0.41 T:aezv5 0.40 0.40 0.41 T:aegis128 0.41 0.41 0.42 aegis256 0.51 0.51 0.52 T:aeadaes128ocbtaglen128v1 0.60 0.61 0.64 T:aeadaes192ocbtaglen128v1 0.61 0.62 0.63 T:aes128otrpv3 0.64 0.65 0.65 T:aes128otrcv3 0.67 0.68 0.68 T:aeadaes256ocbtaglen128v1 0.76 0.76 0.77 T:aes128gcmv1 0.78 0.79 0.79 T:aes256otrpv3 0.83 0.85 0.85 T:aes256otrcv3 0.85 0.85 0.86 aes256gcmv1 0.94 0.94 0.95 T:deoxysi128v141 0.95 0.95 0.96 T:deoxysneq128128v1 1.07 1.07 1.08 T:deoxysi256v141 1.07 1.08 1.09 T:deoxysneq256128v1 1.14 1.14 1.15 T:morus1280128v1 1.14 1.15 1.15 T:morus1280256v1 1.15 1.16 1.17 T:morus1280128v2 1.15 1.16 1.17 T:morus1280256v2 1.22 1.23 1.24 T:morus640128v1 1.23 1.23 1.24 T:morus640128v2 1.29 1.29 1.31 T:colm0v1 1.34 1.35 1.35 T:aes128otrsv3 1.36 1.37 1.38 T:deoxysii128v141 1.46 1.47 1.47 T:deoxyseq128128v1 1.55 1.56 1.56 T:deoxysii256v141 1.67 1.68 1.69 T:deoxyseq256128v1 1.81 1.81 1.81 T:aes256otrsv3 2.11 2.11 2.12 T:aes128n12t8clocv3 2.11 2.11 2.11 T:aes128n8t8clocv2 2.12 2.12 2.12 T:aes128n12t8clocv2 2.12 2.13 2.13 T:aes128n12t8silcv3 2.12 2.13 2.13 T:aes128n12t8silcv2 2.12 2.13 2.13 T:aes128n8t8silcv2 3.01 3.03 3.05 T:norx6441v2 3.03 3.04 3.09 T:norx6441v3 3.05 3.06 3.07 T:lakekeyakv2 3.25 3.27 3.31 T:seakeyakv2 3.43 3.44 3.47 T:lakekeyakv1 3.53 3.54 3.59 T:norx6441v1 3.82 3.84 3.86 T:norx6444v3 4.16 4.19 4.23 T:norx3241v2 4.19 4.22 4.28 T:norx3241v3 4.27 4.27 4.28 T:aesjambuv1 4.29 4.31 4.33 T:oceankeyakv2 4.46 4.49 4.53 T:norx6461v2 4.48 4.52 4.55 T:norx6461v3 4.64 4.65 4.67 T:norx6444v2 4.97 4.98 5.02 T:norx3241v1 5.16 5.19 5.22 T:norx6461v1 5.42 5.43 5.46 T:riverkeyakv2 5.48 5.51 5.53 T:norx6444v1 5.88 6.00 6.23 T:acorn128v2 5.96 6.01 6.13 T:acorn128v3 6.32 6.34 6.35 ascon128av12 6.34 6.41 6.45 T:norx3261v2 6.42 6.44 6.54 T:norx3261v3 6.47 6.47 6.51 T:ascon128av11 6.46 6.48 6.50 T:ascon96v1 6.64 6.75 6.78 T:ketjemajorv2 7.40 7.43 7.46 T:lunarkeyakv2 7.24 7.60 7.64 T:ketjeminorv2 7.80 7.81 7.83 T:norx3261v1 9.21 9.22 9.23 T:ascon128v1 9.22 9.24 9.28 T:ascon128v11 9.37 9.38 9.39 ascon128v12 11.35 11.38 11.56 T:aes128otrsv2 11.63 11.65 11.67 T:aes128otrpv1 11.64 11.65 11.67 T:aes128otrpv2 11.68 11.75 11.85 T:aes128otrsv1 14.50 14.51 14.51 T:twine80n6t4clocv3 14.60 14.86 14.88 T:aes256otrsv1 14.62 14.91 14.94 T:aes256otrsv2 15.24 15.27 15.29 T:aes256otrpv1 15.27 15.28 15.30 T:aes256otrpv2 15.39 15.44 15.48 T:twine80n6t4clocv2 15.47 15.49 15.51 T:aes128n8clocv1 15.49 15.51 15.52 T:aes128n12clocv1 21.26 21.46 21.56 T:proest256otrv1 22.69 22.71 22.74 T:aeadaes128ocbtaglen64v1 22.72 22.73 22.75 T:aeadaes128ocbtaglen96v1 26.80 26.85 26.90 T:ketjesrv1 26.93 26.95 26.97 T:aeadaes192ocbtaglen96v1 26.93 26.96 26.98 T:aeadaes192ocbtaglen64v1 27.22 27.58 27.68 T:ketjesrv2 31.27 31.30 31.33 T:aeadaes256ocbtaglen64v1 31.28 31.32 31.40 T:aeadaes256ocbtaglen96v1 36.40 36.44 36.46 T:colm127v1 45.20 45.27 45.85 T:ketjejrv1 45.10 45.27 45.64 T:proest128otrv1 61.29 63.37 64.19 T:deoxysneq128128v13 68.47 68.54 70.69 T:ketjejrv2 70.78 70.88 70.97 T:present80n6t4silcv3 84.69 87.97 88.73 T:aezv1 96.12 96.29 96.86 T:deoxyseq128128v13 103.26 104.07 105.59 T:deoxysneq256128v13 126.71 126.76 126.84 T:led80n6t4silcv3 155.87 156.87 157.01 T:deoxyseq256128v13 448.26 456.20 470.08 T:acorn128 2689.61 2709.83 2735.90 T:led80n6t4silcv2 2669.43 2723.37 2766.33 T:led80n6silcv1 2872.79 2902.66 2934.14 T:present80n6t4silcv2 2873.66 2907.57 2934.04 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.26 0.26 0.27 aegis128l 0.28 0.28 0.29 T:tiaoxinv2 0.28 0.28 0.30 T:tiaoxinv1 0.36 0.36 0.37 T:aezv4 0.37 0.37 0.38 T:aezv3 0.39 0.39 0.39 T:aegis128 0.39 0.39 0.40 T:aezv5 0.41 0.42 0.43 aegis256 0.52 0.52 0.53 T:aeadaes128ocbtaglen128v1 0.63 0.63 0.63 T:aes128otrpv3 0.62? 0.63? 1.66? T:aeadaes192ocbtaglen128v1 0.67 0.67 0.67 T:aes128otrcv3 0.71 0.72 0.72 T:aeadaes256ocbtaglen128v1 0.78 0.79 0.79 T:aes128gcmv1 0.80 0.80 0.81 T:aes256otrpv3 0.86 0.87 0.87 T:aes256otrcv3 0.90 0.90 0.91 aes256gcmv1 1.02 1.02 1.03 T:deoxysi128v141 1.05 1.05 1.06 T:deoxysneq128128v1 1.13 1.14 1.14 T:morus1280128v1 1.13 1.14 1.15 T:morus1280256v1 1.14 1.14 1.15 T:morus1280256v2 1.14 1.15 1.16 T:morus1280128v2 1.15 1.16 1.17 T:deoxysi256v141 1.17 1.18 1.20 T:deoxysneq256128v1 1.22 1.23 1.24 T:morus640128v1 1.24 1.25 1.27 T:morus640128v2 1.34 1.35 1.36 T:colm0v1 1.36 1.37 1.37 T:aes128otrsv3 1.39 1.40 1.41 T:deoxysii128v141 1.53 1.54 1.54 T:deoxyseq128128v1 1.59 1.59 1.60 T:deoxysii256v141 1.70 1.71 1.72 T:deoxyseq256128v1 1.84 1.84 1.84 T:aes256otrsv3 2.09 2.09 2.09 T:aes128n8t8clocv2 2.09 2.09 2.12 T:aes128n12t8clocv3 2.10 2.11 2.14 T:aes128n12t8silcv3 2.09 2.12 2.12 T:aes128n12t8clocv2 2.10 2.14 2.14 T:aes128n8t8silcv2 2.10 2.14 2.14 T:aes128n12t8silcv2 2.95 2.96 3.02 T:norx6441v3 2.99 3.01 3.04 T:norx6441v2 3.06 3.08 3.09 T:lakekeyakv2 3.29 3.30 3.34 T:seakeyakv2 3.42 3.43 3.47 T:lakekeyakv1 3.47 3.50 3.53 T:norx6441v1 3.80 3.82 3.84 T:norx6444v3 4.10 4.16 4.24 T:norx3241v3 4.18 4.19 4.24 T:norx3241v2 4.33 4.35 4.38 T:oceankeyakv2 4.44 4.45 4.45 T:aesjambuv1 4.47 4.50 4.51 T:norx6461v3 4.49 4.53 4.59 T:norx6461v2 4.64 4.65 4.70 T:norx6444v2 4.84 4.87 4.93 T:norx3241v1 5.14 5.18 5.22 T:norx6461v1 5.50 5.53 5.54 T:norx6444v1 5.51 5.53 5.55 T:riverkeyakv2 5.92 5.99 6.04 T:acorn128v3 5.93 6.10 6.11 T:acorn128v2 6.31 6.32 6.33 ascon128av12 6.27 6.33 6.39 T:norx3261v2 6.35 6.40 6.42 T:norx3261v3 6.43 6.45 6.47 T:ascon128av11 6.44 6.46 6.48 T:ascon96v1 6.56 6.56 6.60 T:ketjemajorv2 7.46 7.48 7.53 T:lunarkeyakv2 7.73 7.74 7.75 T:norx3261v1 7.32 7.77 7.79 T:ketjeminorv2 9.16 9.18 9.22 T:ascon128v1 9.19 9.22 9.24 T:ascon128v11 9.34 9.34 9.39 ascon128v12 11.52 11.54 11.68 T:aes128otrsv2 11.52 11.72 11.75 T:aes128otrsv1 11.71 11.73 11.78 T:aes128otrpv1 11.74 11.80 11.82 T:aes128otrpv2 14.51 14.51 14.52 T:twine80n6t4clocv3 14.76 15.00 15.01 T:aes256otrsv1 14.78 15.06 15.09 T:aes256otrsv2 15.36 15.37 15.48 T:aes256otrpv2 15.34 15.39 15.42 T:aes256otrpv1 15.43 15.45 15.47 T:twine80n6t4clocv2 15.89 15.90 15.93 T:aes128n12clocv1 15.90 15.92 15.93 T:aes128n8clocv1 21.30 21.52 21.58 T:proest256otrv1 26.87 26.89 26.92 T:aeadaes128ocbtaglen64v1 26.89 26.91 26.93 T:aeadaes128ocbtaglen96v1 27.26 27.34 27.44 T:ketjesrv1 27.87 28.02 28.04 T:ketjesrv2 32.00 32.02 32.05 T:aeadaes192ocbtaglen64v1 32.01 32.03 32.06 T:aeadaes192ocbtaglen96v1 37.25 37.28 37.30 T:aeadaes256ocbtaglen64v1 37.31 37.37 37.50 T:aeadaes256ocbtaglen96v1 44.47 44.50 44.52 T:colm127v1 44.52 44.69 45.14 T:proest128otrv1 45.25 45.36 45.89 T:ketjejrv1 69.16 69.30 71.11 T:ketjejrv2 70.82 70.85 70.97 T:present80n6t4silcv3 73.28 75.10 75.83 T:deoxysneq128128v13 84.56 88.38 88.95 T:aezv1 96.14 96.65 97.05 T:deoxyseq128128v13 117.15 117.48 119.07 T:deoxysneq256128v13 126.60 126.66 126.86 T:led80n6t4silcv3 155.75 156.00 156.99 T:deoxyseq256128v13 450.04 460.56 465.36 T:acorn128 2694.00 2712.10 2727.57 T:led80n6t4silcv2 2673.16 2723.29 2745.88 T:led80n6silcv1 2873.57 2895.50 2913.34 T:present80n6silcv1 2870.74 2914.80 2936.71 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.21 0.21 0.22 T:aezv4 0.22 0.22 0.23 T:aezv3 0.23? 0.24? 0.27? T:aezv5 0.26 0.26 0.26 aegis128l 0.28 0.28 0.28 T:tiaoxinv2 0.28 0.28 0.29 T:tiaoxinv1 0.38 0.39 0.39 T:aegis128 0.44 0.44 0.45 aegis256 0.51 0.52 0.52 T:aeadaes128ocbtaglen128v1 0.62 0.63 0.64 T:aeadaes192ocbtaglen128v1 0.63 0.63 0.64 T:aes128otrpv3 0.67 0.67 0.67 T:aes128otrcv3 0.71 0.71 0.72 T:aeadaes256ocbtaglen128v1 0.79 0.79 0.79 T:aes128gcmv1 0.80 0.81 0.81 T:aes256otrpv3 0.87 0.87 0.88 T:aes256otrcv3 0.90 0.90 0.91 aes256gcmv1 1.01 1.02 1.02 T:deoxysi128v141 1.05 1.06 1.07 T:deoxysneq128128v1 1.13 1.13 1.14 T:morus1280128v1 1.13 1.14 1.14 T:morus1280256v1 1.14 1.14 1.14 T:morus1280256v2 1.14 1.14 1.15 T:morus1280128v2 1.14 1.15 1.17 T:deoxysi256v141 1.16 1.17 1.19 T:deoxysneq256128v1 1.21 1.22 1.24 T:morus640128v1 1.23 1.24 1.25 T:morus640128v2 1.35 1.36 1.38 T:colm0v1 1.36 1.36 1.36 T:aes128otrsv3 1.39 1.39 1.40 T:deoxysii128v141 1.53 1.54 1.56 T:deoxyseq128128v1 1.59 1.59 1.60 T:deoxysii256v141 1.70 1.71 1.72 T:deoxyseq256128v1 1.84 1.84 1.84 T:aes256otrsv3 2.08 2.08 2.08 T:aes128n12t8clocv3 2.08 2.08 2.08 T:aes128n8t8clocv2 2.09 2.10 2.10 T:aes128n12t8silcv3 2.09 2.12 2.12 T:aes128n12t8clocv2 2.10 2.14 2.14 T:aes128n12t8silcv2 2.09 2.14 2.14 T:aes128n8t8silcv2 2.95 2.98 3.01 T:norx6441v3 2.98 3.00 3.02 T:norx6441v2 3.07 3.08 3.09 T:lakekeyakv2 3.31 3.33 3.37 T:seakeyakv2 3.42 3.44 3.45 T:lakekeyakv1 3.47 3.48 3.50 T:norx6441v1 3.80 3.81 3.83 T:norx6444v3 4.14 4.17 4.23 T:norx3241v3 4.19 4.21 4.25 T:norx3241v2 4.35 4.36 4.37 T:oceankeyakv2 4.44 4.45 4.45 T:aesjambuv1 4.46 4.49 4.53 T:norx6461v2 4.48 4.50 4.51 T:norx6461v3 4.65 4.68 4.69 T:norx6444v2 4.84 4.89 4.94 T:norx3241v1 5.14 5.18 5.21 T:norx6461v1 5.50 5.53 5.56 T:norx6444v1 5.52 5.55 5.57 T:riverkeyakv2 5.90 5.93 6.05 T:acorn128v3 5.95 6.10 6.11 T:acorn128v2 6.31 6.32 6.32 ascon128av12 6.32 6.35 6.36 T:norx3261v2 6.35 6.38 6.40 T:norx3261v3 6.44 6.45 6.47 T:ascon128av11 6.45 6.46 6.47 T:ascon96v1 6.59 6.61 6.65 T:ketjemajorv2 7.47 7.49 7.53 T:lunarkeyakv2 7.72 7.74 7.75 T:norx3261v1 7.34 7.79 7.82 T:ketjeminorv2 9.16 9.17 9.23 T:ascon128v1 9.19 9.21 9.23 T:ascon128v11 9.33 9.35 9.36 ascon128v12 11.52 11.56 11.70 T:aes128otrsv2 11.74 11.75 11.77 T:aes128otrpv1 11.67 11.76 11.79 T:aes128otrsv1 11.77 11.85 11.86 T:aes128otrpv2 14.51 14.52 14.52 T:twine80n6t4clocv3 14.75 14.98 15.07 T:aes256otrsv1 14.80 15.07 15.09 T:aes256otrsv2 15.35 15.38 15.43 T:aes256otrpv1 15.43 15.45 15.46 T:twine80n6t4clocv2 15.38 15.47 15.49 T:aes256otrpv2 15.90 15.91 15.93 T:aes128n12clocv1 15.89 15.91 15.94 T:aes128n8clocv1 21.26 21.52 21.55 T:proest256otrv1 26.86 26.88 26.90 T:aeadaes128ocbtaglen64v1 26.86 26.88 26.91 T:aeadaes128ocbtaglen96v1 27.39 27.42 27.51 T:ketjesrv1 27.66 27.99 28.04 T:ketjesrv2 31.99 32.00 32.01 T:aeadaes192ocbtaglen96v1 31.99 32.01 32.03 T:aeadaes192ocbtaglen64v1 37.25 37.27 37.30 T:aeadaes256ocbtaglen64v1 37.28 37.30 37.39 T:aeadaes256ocbtaglen96v1 44.46 44.49 44.51 T:colm127v1 44.65 44.72 45.17 T:proest128otrv1 45.43 45.60 45.84 T:ketjejrv1 69.18 69.25 71.00 T:ketjejrv2 70.84 70.85 70.88 T:present80n6t4silcv3 73.20 75.17 75.44 T:deoxysneq128128v13 84.58 88.39 88.91 T:aezv1 96.09 96.49 96.59 T:deoxyseq128128v13 117.17 117.52 119.12 T:deoxysneq256128v13 126.61 126.68 126.80 T:led80n6t4silcv3 155.82 155.88 156.94 T:deoxyseq256128v13 450.34 464.41 468.39 T:acorn128 2701.62 2712.29 2727.78 T:led80n6silcv1 2695.64 2715.19 2742.80 T:led80n6t4silcv2 2863.45 2895.19 2913.38 T:present80n6t4silcv2 2872.63 2911.79 2952.41 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.98? 1.00? 1.16? T:aegis128 1.10 1.12 1.16 aegis128l 1.27? 1.28? 1.63? T:tiaoxinv2 1.29? 1.31? 1.45? aegis256 1.30? 1.32? 1.69? T:tiaoxinv1 1.39 1.43 1.51 T:aezv4 1.51? 1.53? 1.77? T:aezv3 1.61? 1.66? 1.84? T:aeadaes128ocbtaglen128v1 1.65? 1.84? 1.87? T:aezv5 1.91 1.96 2.00 T:aes128otrpv3 2.05 2.09 2.22 T:aeadaes256ocbtaglen128v1 2.27 2.30 2.35 T:aes128otrsv3 2.48 2.50 2.55 T:aes256otrpv3 2.53 2.55 2.58 T:aes128n12t8clocv3 2.50 2.55 2.59 T:aes128n8t8clocv2 2.52 2.63 2.76 T:aes128n12t8clocv2 2.68 2.73 2.86 T:colm0v1 2.77 2.80 2.84 T:aes128n12t8silcv2 2.77 2.80 2.80 T:aes128otrcv3 2.79 2.80 2.83 T:aes128n8t8silcv2 2.83 2.85 2.86 T:aes128n12t8silcv3 3.05 3.06 3.07 T:aes256otrsv3 3.12 3.19 3.39 T:deoxysneq128128v1 3.03? 3.38? 28.42? T:aeadaes192ocbtaglen128v1 3.55 3.56 3.59 T:aes256otrcv3 3.43 3.59 3.66 T:deoxysi128v141 3.95 3.98 4.09 T:deoxysneq256128v1 4.11 4.22 4.39 T:morus640128v1 4.14 4.24 4.39 T:deoxysi256v141 4.37 4.39 4.42 T:aes128gcmv1 4.33 4.43 4.62 T:morus640128v2 4.63 4.66 4.70 T:deoxyseq128128v1 4.70 4.72 4.80 T:deoxysii128v141 5.49 5.58 5.59 T:aesjambuv1 5.55 5.62 5.66 T:deoxyseq256128v1 5.58 5.62 5.72 T:deoxysii256v141 5.58 5.68 5.95 aes256gcmv1 5.90 5.95 6.06 T:morus1280128v1 5.95 6.01 6.12 T:morus1280256v1 6.26 6.38 6.48 T:morus1280256v2 6.44 6.48 6.66 T:morus1280128v2 9.65 9.70 9.88 T:ascon96v1 9.64 9.73 10.03 T:ascon128av11 9.69 9.95 10.35 T:norx6441v2 9.80 9.96 10.45 ascon128av12 9.78 10.02 10.29 T:norx6441v3 10.05 10.34 10.51 T:norx3241v2 10.27 10.34 10.55 T:norx3241v3 10.24 10.42 10.60 T:norx3241v1 10.64 10.87 11.05 T:norx6441v1 11.19 11.42 11.72 T:lakekeyakv1 12.08 12.13 12.54 T:ascon128v11 12.14 12.20 12.32 T:ascon128v1 12.43 12.47 12.57 T:riverkeyakv2 12.62 12.73 12.85 ascon128v12 13.08 13.13 13.74 T:lakekeyakv2 14.48 14.69 15.04 T:norx6461v1 14.48 14.80 15.27 T:norx6461v2 14.96 15.13 15.27 T:norx6461v3 15.27 15.45 15.61 T:norx3261v2 16.12 16.16 16.19 T:norx3261v1 16.14? 16.38? 19.88? T:norx3261v3 18.00 18.06 18.25 T:aes128otrsv1 18.52 18.55 18.68 T:twine80n6t4clocv3 18.66 18.73 19.01 T:aes128otrsv2 18.70 18.90 19.08 T:aes128otrpv2 18.87 19.02 19.16 T:aes128otrpv1 19.23 19.33 19.98 T:aes128n8clocv1 19.44 19.48 19.59 T:twine80n6t4clocv2 19.45 19.48 20.01 T:aes128n12clocv1 23.59 23.77 24.02 T:norx6444v3 23.82 24.10 24.40 T:aes256otrsv1 24.08 24.39 24.79 T:aes256otrsv2 24.39 24.52 24.86 T:aes256otrpv1 24.59 24.84 24.98 T:aes256otrpv2 25.32 25.48 25.65 T:ketjeminorv2 25.67 26.27 27.06 T:acorn128v2 26.14 26.48 26.71 T:acorn128v3 29.67 29.76 30.07 T:seakeyakv2 33.14 33.30 33.53 T:norx6444v2 35.44 35.60 36.10 T:aeadaes128ocbtaglen96v1 35.30 35.63 36.05 T:aeadaes128ocbtaglen64v1 39.16 39.26 39.36 T:norx6444v1 41.43 41.52 41.84 T:aeadaes192ocbtaglen64v1 41.48 41.74 42.05 T:aeadaes192ocbtaglen96v1 42.43 42.60 42.81 T:ketjesrv1 43.58 44.41 44.82 T:ketjemajorv2 46.79 47.05 47.45 T:oceankeyakv2 47.89 48.28 48.59 T:ketjesrv2 48.41 48.65 49.08 T:aeadaes256ocbtaglen64v1 48.59 48.68 48.94 T:aeadaes256ocbtaglen96v1 53.01 53.33 53.56 T:colm127v1 58.67 58.92 59.04 T:ketjejrv1 60.71 60.98 61.25 T:proest256otrv1 72.56 72.92 73.45 T:deoxysneq128128v13 86.84 87.12 87.47 T:proest128otrv1 87.06 87.17 87.48 T:present80n6t4silcv3 92.07 92.53 95.46 T:ketjejrv2 96.08 96.47 102.77 T:aezv1 117.40 118.22 118.93 T:deoxysneq256128v13 118.70 119.49 121.93 T:deoxyseq128128v13 119.62 120.02 120.79 T:lunarkeyakv2 149.77 150.05 150.41 T:led80n6t4silcv3 195.36 195.95 196.39 T:deoxyseq256128v13 1588.74 1625.63 1648.82 T:acorn128 2992.23 2995.10 2998.51 T:led80n6silcv1 3000.28 3003.42 3007.83 T:led80n6t4silcv2 3206.42 3208.77 3211.43 T:present80n6silcv1 3211.34 3213.28 3214.60 T:present80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.01? 1.03? 1.34? T:aegis128 1.12? 1.19? 1.34? aegis128l 1.36 1.38 1.45 T:tiaoxinv1 1.38 1.42 1.52 aegis256 1.39? 1.44? 1.62? T:tiaoxinv2 1.41 1.45 1.52 T:aezv4 1.51 1.52 1.55 T:aezv3 1.64? 1.86? 2.16? T:aezv5 1.79? 1.91? 2.01? T:aeadaes128ocbtaglen128v1 1.97? 2.06? 2.20? T:aes128otrpv3 2.27? 2.30? 2.57? T:aeadaes256ocbtaglen128v1 2.34 2.38 2.44 T:aes128otrsv3 2.46 2.48 2.66 T:aes256otrpv3 2.70 2.73 2.75 T:aes128n12t8clocv3 2.72 2.73 2.73 T:aes128n8t8clocv2 2.81? 2.94? 3.51? T:aes128n12t8clocv2 2.93 2.94 2.95 T:aes128otrcv3 3.04 3.07 3.12 T:aes128n12t8silcv3 3.12 3.15 3.30 T:colm0v1 3.30 3.31 3.31 T:aes256otrsv3 3.41? 3.44? 4.43? T:aeadaes192ocbtaglen128v1 3.73 3.79 3.80 T:aes256otrcv3 3.04? 3.80? 3.84? T:aes128n12t8silcv2 3.04? 3.83? 3.87? T:aes128n8t8silcv2 4.25 4.35 4.49 T:morus640128v1 4.33 4.41 4.52 T:aes128gcmv1 4.73 4.83 4.97 T:morus640128v2 4.88 4.93 5.06 T:deoxysneq128128v1 4.92 4.99 5.07 T:deoxysi128v141 5.00 5.07 5.17 T:deoxysneq256128v1 5.31 5.33 5.39 T:deoxysii128v141 5.75 5.76 5.78 T:aesjambuv1 5.80 5.90 6.01 aes256gcmv1 5.82 5.91 5.97 T:deoxysi256v141 6.00 6.05 6.22 T:morus1280256v1 6.07 6.14 6.20 T:morus1280128v1 6.22 6.24 6.36 T:morus1280256v2 6.23 6.37 6.45 T:morus1280128v2 6.57 6.60 6.66 T:deoxyseq128128v1 6.63 6.70 6.77 T:deoxysii256v141 6.64 6.70 6.72 T:deoxyseq256128v1 9.61 9.67 9.85 T:ascon96v1 9.63 9.69 10.01 T:ascon128av11 10.05 10.27 10.40 ascon128av12 10.15 10.34 10.53 T:norx6441v2 10.23 10.35 10.50 T:norx6441v3 10.23 10.41 10.64 T:norx3241v3 10.30 10.43 10.61 T:norx3241v2 10.29 10.45 10.63 T:norx6441v1 10.44 10.49 10.81 T:norx3241v1 11.27 11.48 11.81 T:lakekeyakv1 12.07 12.09 12.55 T:ascon128v11 12.02 12.16 12.40 T:ascon128v1 12.55 12.65 12.84 T:riverkeyakv2 12.77 12.84 12.89 ascon128v12 13.10 13.18 13.39 T:lakekeyakv2 14.66 14.95 15.57 T:norx6461v1 14.85 15.06 15.30 T:norx6461v2 15.12 15.23 15.53 T:norx6461v3 15.41 15.77 15.93 T:norx3261v2 16.05? 16.09? 19.48? T:norx3261v3 16.12 16.30 16.54 T:norx3261v1 17.96 18.05 18.52 T:aes128otrsv1 18.66 18.70 18.84 T:twine80n6t4clocv3 19.06 19.16 19.36 T:aes128otrpv2 19.02 19.19 19.41 T:aes128otrpv1 18.83 19.23 19.48 T:aes128otrsv2 19.51 19.59 19.72 T:twine80n6t4clocv2 19.88 19.97 20.59 T:aes128n12clocv1 19.75 19.99 20.48 T:aes128n8clocv1 23.50 23.56 23.87 T:norx6444v3 23.97 24.17 24.80 T:aes256otrsv1 24.20 24.71 25.21 T:aes256otrsv2 24.88 25.02 25.27 T:aes256otrpv1 24.91 25.03 25.25 T:aes256otrpv2 25.59 26.46 26.80 T:ketjeminorv2 26.38 26.64 26.85 T:acorn128v3 26.17 26.80 27.15 T:acorn128v2 29.66 29.84 29.95 T:seakeyakv2 33.30 33.44 34.01 T:norx6444v2 39.26 39.59 39.98 T:norx6444v1 42.84 43.01 43.47 T:aeadaes128ocbtaglen64v1 42.93 43.14 43.41 T:aeadaes128ocbtaglen96v1 42.88 43.20 43.55 T:ketjesrv1 44.15 44.45 45.05 T:ketjemajorv2 46.95 47.21 47.64 T:oceankeyakv2 48.49 48.76 49.41 T:ketjesrv2 50.30 50.51 50.80 T:aeadaes192ocbtaglen96v1 50.23 50.52 50.84 T:aeadaes192ocbtaglen64v1 58.55 58.98 59.42 T:ketjejrv1 59.08 59.23 59.38 T:aeadaes256ocbtaglen96v1 59.19 59.25 59.70 T:aeadaes256ocbtaglen64v1 61.37 61.50 61.68 T:colm127v1 61.57 61.98 62.49 T:proest256otrv1 84.22 84.70 85.48 T:deoxysneq128128v13 87.26 87.83 88.16 T:present80n6t4silcv3 86.55 88.12 90.66 T:proest128otrv1 93.07 93.54 95.52 T:ketjejrv2 102.59 102.90 109.55 T:aezv1 118.82 120.20 122.20 T:deoxyseq128128v13 120.51 121.04 121.82 T:lunarkeyakv2 130.91 131.52 132.19 T:deoxysneq256128v13 149.73 150.05 150.33 T:led80n6t4silcv3 195.12 195.55 196.65 T:deoxyseq256128v13 1601.80 1604.17 1634.61 T:acorn128 2991.45 2995.43 3000.51 T:led80n6silcv1 3002.03 3004.04 3009.29 T:led80n6t4silcv2 3205.88 3208.15 3213.84 T:present80n6silcv1 3202.48 3213.34 3215.09 T:present80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.02 1.05 1.08 T:aegis128 1.11? 1.11? 1.79? T:aezv4 1.12? 1.12? 1.70? T:aezv5 1.12? 1.16? 1.34? aegis128l 1.18 1.18 1.19 T:aezv3 1.36 1.38 1.45 T:tiaoxinv1 1.36? 1.41? 1.95? T:tiaoxinv2 1.41? 1.44? 2.16? aegis256 1.75 1.78 1.81 T:aeadaes128ocbtaglen128v1 1.92 1.95 1.98 T:aes128otrpv3 2.29 2.31 2.45 T:aeadaes256ocbtaglen128v1 2.38 2.41 2.45 T:aes128otrsv3 2.42 2.45 2.46 T:aes256otrpv3 2.50 2.53 2.77 T:aes128n8t8clocv2 2.52? 2.57? 3.49? T:aes128n12t8clocv3 2.56? 2.77? 3.51? T:aes128n12t8clocv2 2.85? 2.89? 3.82? T:aes128n12t8silcv3 2.92 2.94 2.95 T:aes128otrcv3 3.12? 3.19? 4.13? T:colm0v1 3.30 3.31 3.32 T:aes256otrsv3 3.44? 3.48? 29.00? T:aeadaes192ocbtaglen128v1 3.77 3.78 3.79 T:aes256otrcv3 2.87? 3.83? 3.84? T:aes128n12t8silcv2 2.84? 3.86? 3.88? T:aes128n8t8silcv2 4.20 4.28 4.33 T:morus640128v1 4.30 4.35 4.41 T:aes128gcmv1 4.71 4.77 5.12 T:deoxysneq128128v1 4.74 4.84 4.91 T:morus640128v2 4.88 4.92 4.96 T:deoxysneq256128v1 4.90 4.96 5.32 T:deoxysi128v141 5.30 5.31 5.38 T:deoxysii128v141 5.73 5.75 5.77 T:aesjambuv1 5.77 5.80 6.17 T:deoxysi256v141 5.91 5.95 6.03 T:morus1280256v1 5.93 6.00 6.06 T:morus1280128v1 5.84 6.02 6.06 aes256gcmv1 6.15 6.16 6.21 T:morus1280256v2 6.15 6.18 6.22 T:morus1280128v2 6.54 6.58 6.64 T:deoxyseq128128v1 6.60 6.63 6.70 T:deoxysii256v141 6.69 6.71 7.22 T:deoxyseq256128v1 9.57 9.65 10.16 T:ascon96v1 9.61 9.68 9.89 T:ascon128av11 9.86 9.98 10.07 ascon128av12 10.20 10.23 10.38 T:norx6441v3 10.19 10.29 10.59 T:norx3241v3 10.22 10.35 10.46 T:norx6441v2 10.28 10.42 10.45 T:norx6441v1 10.30 10.44 10.63 T:norx3241v2 10.35 10.49 10.58 T:norx3241v1 11.25 11.35 11.52 T:lakekeyakv1 12.05 12.14 12.47 T:ascon128v11 12.15 12.20 12.39 T:ascon128v1 12.59 12.65 12.91 T:riverkeyakv2 12.52 12.66 12.82 ascon128v12 13.16 13.26 13.52 T:lakekeyakv2 14.44 14.61 14.84 T:norx6461v1 14.81 15.02 15.22 T:norx6461v2 15.10 15.34 15.50 T:norx6461v3 15.58 15.80 16.04 T:norx3261v2 15.94? 16.09? 19.30? T:norx3261v3 16.20 16.27 16.35 T:norx3261v1 17.99 18.10 18.62 T:aes128otrsv1 18.52 18.59 18.74 T:twine80n6t4clocv3 18.87 18.99 19.50 T:aes128otrsv2 19.05 19.14 19.58 T:aes128otrpv1 19.16 19.25 19.61 T:aes128otrpv2 19.48 19.61 19.70 T:twine80n6t4clocv2 19.76 19.95 20.17 T:aes128n12clocv1 19.76 20.00 20.07 T:aes128n8clocv1 23.42 23.58 23.82 T:norx6444v3 24.02 24.47 24.66 T:aes256otrsv1 24.17 24.65 24.88 T:aes256otrsv2 24.80 25.01 25.12 T:aes256otrpv1 25.09 25.15 25.30 T:aes256otrpv2 25.57 26.24 26.34 T:ketjeminorv2 25.98 26.49 26.59 T:acorn128v3 25.86 26.56 26.93 T:acorn128v2 29.63 29.84 30.24 T:seakeyakv2 33.34 33.51 33.52 T:norx6444v2 39.16 39.38 39.75 T:norx6444v1 42.81 42.95 43.06 T:aeadaes128ocbtaglen64v1 42.82 42.95 43.34 T:aeadaes128ocbtaglen96v1 43.09 43.44 43.77 T:ketjesrv1 44.23 44.73 44.92 T:ketjemajorv2 46.66 46.91 47.10 T:oceankeyakv2 48.45 48.66 49.22 T:ketjesrv2 50.23 50.30 50.44 T:aeadaes192ocbtaglen96v1 50.20 50.31 50.38 T:aeadaes192ocbtaglen64v1 58.93 59.06 59.47 T:ketjejrv1 59.04 59.10 59.19 T:aeadaes256ocbtaglen96v1 59.18 59.25 59.38 T:aeadaes256ocbtaglen64v1 59.96 60.12 60.43 T:proest256otrv1 61.04 61.52 61.63 T:colm127v1 84.76 84.92 85.19 T:deoxysneq128128v13 86.62 87.05 87.19 T:proest128otrv1 87.40 87.65 87.91 T:present80n6t4silcv3 93.28 93.48 95.95 T:ketjejrv2 102.84 103.48 109.69 T:aezv1 118.62 119.98 122.34 T:deoxyseq128128v13 120.52 120.98 121.34 T:lunarkeyakv2 130.86 131.26 132.09 T:deoxysneq256128v13 150.00 150.18 150.62 T:led80n6t4silcv3 194.97 195.40 195.73 T:deoxyseq256128v13 1601.88 1622.13 1644.80 T:acorn128 2993.41 2996.23 3008.11 T:led80n6silcv1 2999.98 3005.20 3012.27 T:led80n6t4silcv2 3205.58 3207.22 3213.74 T:present80n6silcv1 3203.88 3213.08 3213.81 T:present80n6t4silcv2